From nobody Tue Aug 1 09:18:55 2017 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 74828131CCB for ; Tue, 1 Aug 2017 09:18:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.3 X-Spam-Level: X-Spam-Status: No, score=-1.3 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RCVD_IN_SORBS_SPAM=0.5, SPF_PASS=-0.001, T_DKIM_INVALID=0.01, T_KAM_HTML_FONT_INVALID=0.01] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=neutral reason="invalid (public key: not available)" header.d=openconsentgroup.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id z-h_tO1SaJxK for ; Tue, 1 Aug 2017 09:18:52 -0700 (PDT) Received: from n1nlsmtp03.shr.prod.ams1.secureserver.net (n1nlsmtp03.shr.prod.ams1.secureserver.net [188.121.43.193]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CE202126E64 for ; Tue, 1 Aug 2017 09:18:51 -0700 (PDT) Received: from n1plcpnl0072.prod.ams1.secureserver.net ([188.121.57.6]) by : HOSTING RELAY : with SMTP id cZrhdloVH2Fv0cZrhdAaDF; Tue, 01 Aug 2017 09:17:49 -0700 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=openconsentgroup.com; s=default; h=References:To:Cc:In-Reply-To:Date: Subject:Mime-Version:Content-Type:Message-Id:From:Sender:Reply-To: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date: Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=WTmEek4NySi94fPVVt/fhqMbW3o6hHzczbvJmCGpISY=; b=JzqklU//6HuJii7FhFHCfK33v AGa7f53C2/4i1BPxPOVK2X12puxzKi7J05quX/qDAD+e04llEUxFWBIYDu638eU4sF9TvHg5UM24s 1SGLMUEo6MguSeTKxIJamaug6CTSnopOOoHy6UUYpbTMMz/2wIedb9OUdsDkS29pIbSfOiSH+V63s L9wWg5qH/2ULhk/ZuVMgaItcocaU2ev62DIgTpCAVzpXebN58lYAnBPNcP9CIIjiqF5nlrry/id3t ShH9PlAuck0YN1bki8PIl9iqV/U/t6kZsQ5hHnv6uIXg/EVZzgQqHXias4gwcLFBgGkkgOf7ynKKN zOKVA14Hg==; Received: from stcton1049w-lp140-01-74-12-126-19.dsl.bell.ca ([74.12.126.19]:62726 helo=[192.168.2.115]) by n1plcpnl0072.prod.ams1.secureserver.net with esmtpsa (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256) (Exim 4.88) (envelope-from ) id 1dcZrg-003g5r-W9; Tue, 01 Aug 2017 09:17:49 -0700 From: "M.Lizar@OCG" Message-Id: Content-Type: multipart/alternative; boundary="Apple-Mail=_63F2B656-69C7-40A8-B545-FF8E0247FC45" Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\)) Date: Tue, 1 Aug 2017 12:17:42 -0400 In-Reply-To: Cc: Yaron Sheffer , SecEvent To: Mike Jones References: X-Mailer: Apple Mail (2.3273) X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - n1plcpnl0072.prod.ams1.secureserver.net X-AntiAbuse: Original Domain - ietf.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - openconsentgroup.com X-Get-Message-Sender-Via: n1plcpnl0072.prod.ams1.secureserver.net: authenticated_id: m.lizar@openconsentgroup.com X-Authenticated-Sender: n1plcpnl0072.prod.ams1.secureserver.net: m.lizar@openconsentgroup.com X-Source: X-Source-Args: X-Source-Dir: X-CMAE-Envelope: MS4wfLanqWAgFL+o/HfOE7X3C5gAFH3qKa4QzwUF52O5FEc+bn8CtLgUKo+crj9L6UYO6Cbf1+YtDgOg2YRKH0gwT3ixYtUMTcGrEdZOMkEA5rM/TH65aHgG fuBLfVOxR9Ewb6V09lisdgdzf2tJ8yP4Ey+nit4wMbTuMo2tcsaJX8bYmNXFXxR84530/h7ve44d0nuKNW6CUXHf4qr86IJhhXI= Archived-At: Subject: Re: [Id-event] WG Last Call for draft-ietf-secevent-token-02 X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 01 Aug 2017 16:18:53 -0000 --Apple-Mail=_63F2B656-69C7-40A8-B545-FF8E0247FC45 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii +1 on existing text .=20 Agree the document is ready to publish - Mark > On 31 Jul 2017, at 16:53, Mike Jones = wrote: >=20 > I believe that the specification is ready to publish as-is. It = already meets the needs of the known use cases and is in production use. > =20 > -- = Mike > =20 > From: Id-event [mailto:id-event-bounces@ietf.org] On Behalf Of Yaron = Sheffer > Sent: Monday, July 31, 2017 1:40 PM > To: SecEvent > Subject: [Id-event] WG Last Call for draft-ietf-secevent-token-02 > =20 > This is to announce working group last call on this draft = (https://datatracker.ietf.org/doc/draft-ietf-secevent-token/ = ). >=20 > Please send your comments to the list. Even if you are perfectly happy = with the draft, please let us know that you support its publication = as-is by posting to the list. >=20 > Because of the summer holidays, this last call is open for 3 weeks, = until Aug. 21. >=20 > Thanks, > Dick and Yaron > _______________________________________________ > Id-event mailing list > Id-event@ietf.org > https://www.ietf.org/mailman/listinfo/id-event --Apple-Mail=_63F2B656-69C7-40A8-B545-FF8E0247FC45 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=us-ascii +1 on existing text . 

Agree the document is ready to = publish

- = Mark

On 31 Jul 2017, at 16:53, Mike = Jones <Michael.Jones@microsoft.com> wrote:

I believe that the specification is ready to = publish as-is.  It already meets the needs of the known use cases = and is in production use.
 
          &nb= sp;            = ;            &= nbsp;           &nb= sp;            = ;    -- Mike
 
From: Id-event [mailto:id-event-bounces@ietf.org] On Behalf = Of Yaron = Sheffer
Sent: Monday, July 31, 2017 1:40 = PM
To: SecEvent <id-event@ietf.org>
Subject: [Id-event] WG Last Call for = draft-ietf-secevent-token-02
 
This is to announce working group last call on this draft (https://datatracker.ietf.org/doc/draft-ietf-secevent-token/= ).

Please send your comments to the list. = Even if you are perfectly happy with the draft, please let us know that = you support its publication as-is by posting to the list.

Because of the summer holidays, this last call = is open for 3 weeks, until Aug. 21.

Thanks,
    Dick and Yaron
_______________________________________________
Id-event mailing list
Id-event@ietf.org
https://www.ietf.org/mailman/listinfo/id-event

= --Apple-Mail=_63F2B656-69C7-40A8-B545-FF8E0247FC45-- From nobody Tue Aug 1 12:17:59 2017 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 180031322E9 for ; Tue, 1 Aug 2017 12:17:54 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ce9_nOsMMByv for ; Tue, 1 Aug 2017 12:17:51 -0700 (PDT) Received: from mail-it0-x229.google.com (mail-it0-x229.google.com [IPv6:2607:f8b0:4001:c0b::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CCAB71322DD for ; Tue, 1 Aug 2017 12:17:50 -0700 (PDT) Received: by mail-it0-x229.google.com with SMTP id v127so21260111itd.0 for ; Tue, 01 Aug 2017 12:17:50 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=o+8BvPurNGgbJbgT1Gh7JQhkDYXEu4QF+yTcV1Q5crU=; b=Q6v8k7Fm5Ji3zWvV5vpd15o83DaU7tc7SbZ0yGrN6HgjMCHW2HonWq9PLR1WllMN2R 0WlCuID8GWb+V7ZDc91O8YNSkcxZ7EgQk8LqB0B1aL1ExkqM8BeWHYsU/7W9LsmyqPaz nv81PCAVM57I2OROfcvwanVbIXx1gwJRXCd6Pvb2H3oQz9xiun3jlP9R7eBqfdZYKhEK ApyfAtcMw1L3i0M/1UADuutLXHmD5/he7B3LGwvgpIyKFjpIZRtP6pE+3Usjz0VqsvA9 a9z+j+T34TbWqzhF7P/ZwU/Cyw+lov667z6Oqxf1IBrkmwjs6fgqj3AaYs7HH4UN2PUg alNw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=o+8BvPurNGgbJbgT1Gh7JQhkDYXEu4QF+yTcV1Q5crU=; b=tt874xFMVRwNPAgbNF6AGUQszuLKy2rL4uUTYCg7EZIV9hjFDwztP1a9Niftzytiw4 qmYmeB+AH1rdhBlb4j8jGk4p02Qq4AiHsBQSGX/502pAo0F5QrMUaUB/h534R8hsNJwp FsYULz+y3g1j1sqTzms0V/jk9wa9s0f7AfnkypHijXvPLSlK2514vF2QAbYwA8hMbh+b pqfcJqgNmwIl1qvOsXVBV6W+qLSCT4t9wFF5nfL94T+xuH3TukMSORKs5QIzq0PwOzza q4FAeezObDVRCpjYX7UgL0PGuAH51XXbSGWp/HFVgOgDXJKJd0j4tjBErWh1qUJf5DFI lsxA== X-Gm-Message-State: AIVw110f1JIjVmnokOlU3aPSezJz7+XvLsaqjGo33gjMuws3YdOMuDRw AVcoFjBy8yajh+MSvpmym5hMVMoGJAJl X-Received: by 10.36.7.138 with SMTP id f132mr3063860itf.10.1501615069758; Tue, 01 Aug 2017 12:17:49 -0700 (PDT) MIME-Version: 1.0 Received: by 10.107.19.95 with HTTP; Tue, 1 Aug 2017 12:17:29 -0700 (PDT) In-Reply-To: References: <150130555312.20751.6664832712498006194@ietfa.amsl.com> From: Marius Scurtescu Date: Tue, 1 Aug 2017 21:17:29 +0200 Message-ID: To: Mike Jones Cc: Yaron Sheffer , Phil Hunt , ID Events Mailing List Content-Type: multipart/alternative; boundary="001a11459294d309de0555b600c4" Archived-At: Subject: Re: [Id-event] I-D Action: draft-ietf-secevent-delivery-00.txt (and Verify Event) X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 01 Aug 2017 19:17:54 -0000 --001a11459294d309de0555b600c4 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable +1 for what Mike said The reason we suggested that the Verification event definition is moved to the management api draft (aka control plane draft) is because that draft defines the API to trigger one of these events. I thing it would help to have both the event definition and the triggering mechanism in the same draft. Marius On Mon, Jul 31, 2017 at 9:05 PM, Mike Jones wrote: > I am strongly opposed to defining a normative event in the SET spec, as i= t > would be a layering violation. The purpose of the SET spec is to define > syntax and semantics that applies to *all* SETs. > > The purpose of defining specific events is to meet the needs of a > particular event profile for a particular class of applications. Any > normative event definition would have to meet all the Requirements for SE= T > Profiles (as described at https://tools.ietf.org/html/ > draft-ietf-secevent-token-02#section-3), including defining the key > management discipline for that event's profile. (As Leif discussed in > Prague, even for identity scenarios, there are numerous potential key > management strategies, some depending upon Web PKI and some not.) Adding > all this to the SET spec would be a confusing distraction. Among other > things, it would raise the mostly unanswerable question "Why is this even= t > more special than others?". > > -- Mike > > -----Original Message----- > From: Id-event [mailto:id-event-bounces@ietf.org] On Behalf Of Yaron > Sheffer > Sent: Monday, July 31, 2017 9:42 AM > To: Phil Hunt ; ID Events Mailing List < > id-event@ietf.org> > Cc: Marius Scurtescu > Subject: Re: [Id-event] I-D Action: draft-ietf-secevent-delivery-00.txt > (and Verify Event) > > Hi Phil, > > From a procedural point of view (not taking any stand on whether this is > a good change or not), the SET draft is absolutely open to changes. > At most, we might decide that there've been too many changes and will cal= l > for a second WGLC at some point. Not a big deal. > > Thanks, > Yaron > > On 31/07/17 19:20, Phil Hunt wrote: > > As requested by Yaron, I have posted the delivery draft unchanged as > > the WG draft. > > > > Marius made a suggestion that as per discussion in Prague that the > > Verify Event be removed from the Delivery draft and potentially placed > > in an upcoming control plane draft (to be proposed). > > > > After some thinking, I propose the Verify Event be placed into the SET > > Token draft. It would actually be a good thing to have at least one > > =E2=80=9Cnormative=E2=80=9D event defined in SET Token. > > > > If the group is agreeable, I am happy to propose some modified Verify > > Event definition text to move into the SET Token spec. Note: SET > > Token is or is about to be WGLC. Chairs: Can we consider this? > > > > I would suggest we only move Verify to Control Plane if there is a > > specific reason (eg. distinct or separate use cases that may be > > specific to some profiles) why it is better suited there. > > > > If there is no objection, I will: > > * Remove the Verify Event from the Delivery Spec on its next regular > > update > > * Update SET Token Spec with Verify Event, subject to guidance in > > regards to WGLC. > > > > Phil > > > > Oracle Corporation, Identity Cloud Services Architect & Standards > > @independentid www.independentid.com > > phil.hunt@oracle.com > > > >> On Jul 28, 2017, at 10:19 PM, internet-drafts@ietf.org > >> wrote: > >> > >> > >> A New Internet-Draft is available from the on-line Internet-Drafts > >> directories. > >> This draft is a work item of the Security Events WG of the IETF. > >> > >> Title : SET Token Delivery Using HTTP > >> Authors : Phil Hunt > >> Marius Scurtescu > >> Morteza Ansari > >> Anthony Nadalin > >> Annabelle Richard Backman > >> Filename : draft-ietf-secevent-delivery-00.txt > >> Pages : 28 > >> Date : 2017-07-28 > >> > >> Abstract: > >> This specification defines how a series of security event tokens > >> (SETs) may be delivered to a previously registered receiver using > >> HTTP POST over TLS initiated as a push to the receiver, or as a poll > >> by the receiver. The specification also defines how delivery can be > >> assured subject to the SET Token Receiver's need for assurance. > >> > >> > >> The IETF datatracker status page for this draft is: > >> https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__datatracker.iet= f > >> .org_doc_draft-2Dietf-2Dsecevent-2Ddelivery_&d=3DDwICAg&c=3DRoP1YumCXC= gaW > >> HvlZYR8PQcxBKCX5YTpkKY057SbK10&r=3DJBm5biRrKugCH0FkITSeGJxPEivzjWwlNKe= 4 > >> C_lLIGk&m=3D-776NP5LxWSJp_f1PMNn10AECHMGYqhgPsPTqXr4srE&s=3Dpc0m7nhCLH= j3M > >> ab6Ppgz8m3HF_kwzH4EKFO6jtzNYfE&e=3D > >> > >> > >> There are also htmlized versions available at: > >> https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__tools.ietf.org_= h > >> tml_draft-2Dietf-2Dsecevent-2Ddelivery-2D00&d=3DDwICAg&c=3DRoP1YumCXCg= aWH > >> vlZYR8PQcxBKCX5YTpkKY057SbK10&r=3DJBm5biRrKugCH0FkITSeGJxPEivzjWwlNKe4= C > >> _lLIGk&m=3D-776NP5LxWSJp_f1PMNn10AECHMGYqhgPsPTqXr4srE&s=3D6jsUPOsyCum= T0Z > >> D-nr6TrlbMzPGgPWZ4OVQjSEr1aOo&e=3D > >> > >> https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__datatracker.iet= f > >> .org_doc_html_draft-2Dietf-2Dsecevent-2Ddelivery-2D00&d=3DDwICAg&c=3DR= oP1 > >> YumCXCgaWHvlZYR8PQcxBKCX5YTpkKY057SbK10&r=3DJBm5biRrKugCH0FkITSeGJxPEi= v > >> zjWwlNKe4C_lLIGk&m=3D-776NP5LxWSJp_f1PMNn10AECHMGYqhgPsPTqXr4srE&s=3DI= X4v > >> I17s3YIk7uq1W2aVRxUHH8ybXQZxgyNJLr1H_Ug&e=3D > >> > >> > >> > >> Please note that it may take a couple of minutes from the time of > >> submission until the htmlized version and diff are available at > >> tools.ietf.org . > >> > >> Internet-Drafts are also available by anonymous FTP at: > >> https://urldefense.proofpoint.com/v2/url?u=3Dftp-3A__ftp.ietf.org_inte= r > >> net-2Ddrafts_&d=3DDwICAg&c=3DRoP1YumCXCgaWHvlZYR8PQcxBKCX5YTpkKY057SbK= 10& > >> r=3DJBm5biRrKugCH0FkITSeGJxPEivzjWwlNKe4C_lLIGk&m=3D-776NP5LxWSJp_f1PM= Nn1 > >> 0AECHMGYqhgPsPTqXr4srE&s=3DM-c_zQSJ7nJg1SbvMQqc2f2yJFUnTDPT9IMX_-h9Fyw= & > >> e=3D > >> > >> > >> _______________________________________________ > >> Id-event mailing list > >> Id-event@ietf.org > >> https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__www.ietf.org_ma= i > >> lman_listinfo_id-2Devent&d=3DDwICAg&c=3DRoP1YumCXCgaWHvlZYR8PQcxBKCX5Y= Tpk > >> KY057SbK10&r=3DJBm5biRrKugCH0FkITSeGJxPEivzjWwlNKe4C_lLIGk&m=3D-776NP5= LxW > >> SJp_f1PMNn10AECHMGYqhgPsPTqXr4srE&s=3DaTnebfvP2aZrcA1xIr41D3o8_5Qpyx_N= G > >> C7S1km7uKE&e=3D > >> > > > > _______________________________________________ > Id-event mailing list > Id-event@ietf.org > https://www.ietf.org/mailman/listinfo/id-event > --001a11459294d309de0555b600c4 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
+1 for what Mike said

The reason we sug= gested that the Verification event definition is moved to the management ap= i draft (aka control plane draft) is because that draft defines the API to = trigger one of these events. I thing it would help to have both the event d= efinition and the triggering mechanism in the same draft.

Marius

On Mon, Jul 31, 2017 at 9:05 PM, Mike Jones = <Michael.Jones@microsoft.com> wrote:
I am strongly opposed to defining a normative event in= the SET spec, as it would be a layering violation.=C2=A0 The purpose of th= e SET spec is to define syntax and semantics that applies to *all* SETs.
The purpose of defining specific events is to meet the needs of a particula= r event profile for a particular class of applications.=C2=A0 Any normative= event definition would have to meet all the Requirements for SET Profiles = (as described at https://tools.iet= f.org/html/draft-ietf-secevent-token-02#section-3), including= defining the key management discipline for that event's profile.=C2=A0= (As Leif discussed in Prague, even for identity scenarios, there are numer= ous potential key management strategies, some depending upon Web PKI and so= me not.)=C2=A0 Adding all this to the SET spec would be a confusing distrac= tion.=C2=A0 Among other things, it would raise the mostly unanswerable ques= tion "Why is this event more special than others?".

=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 -- Mike

-----Original Message-----
From: Id-event [mailto:id-even= t-bounces@ietf.org] On Behalf Of Yaron Sheffer
Sent: Monday, July 31, 2017 9:42 AM
To: Phil Hunt <phil.hunt@oracle.= com>; ID Events Mailing List <id-event@ietf.org>
Cc: Marius Scurtescu <mscurtesc= u@google.com>
Subject: Re: [Id-event] I-D Action: draft-ietf-secevent-delivery-00.tx= t (and Verify Event)

Hi Phil,

=C2=A0From a procedural point of view (not taking any stand on whether this= is a good change or not), the SET draft is absolutely open to changes.
At most, we might decide that there've been too many changes and will c= all for a second WGLC at some point. Not a big deal.

Thanks,
=C2=A0 =C2=A0 =C2=A0 =C2=A0 Yaron

On 31/07/17 19:20, Phil Hunt wrote:
> As requested by Yaron, I have posted the delivery draft unchanged as > the WG draft.
>
> Marius made a suggestion that as per discussion in Prague that the
> Verify Event be removed from the Delivery draft and potentially placed=
> in an upcoming control plane draft (to be proposed).
>
> After some thinking, I propose the Verify Event be placed into the SET=
> Token draft. It would actually be a good thing to have at least one > =E2=80=9Cnormative=E2=80=9D event defined in SET Token.
>
> If the group is agreeable, I am happy to propose some modified Verify<= br> > Event definition text to move into the SET Token spec.=C2=A0 Note: SET=
> Token is or is about to be WGLC.=C2=A0 Chairs: Can we consider this? >
> I would suggest we only move Verify to Control Plane if there is a
> specific reason (eg. distinct or separate use cases that may be
> specific to some profiles) why it is better suited there.
>
> If there is no objection, I will:
> * Remove the Verify Event from the Delivery Spec on its next regular > update
> * Update SET Token Spec with Verify Event, subject to guidance in
> regards to WGLC.
>
> Phil
>
> Oracle Corporation, Identity Cloud Services Architect & Standards<= br> > @independentid www.independentid.com <http://www.independ= entid.com>
> phil.hunt@oracle.com <m= ailto:phil.hunt@oracle.com><= br> >
>> On Jul 28, 2017, at 10:19 PM, internet-drafts@ietf.org
>> <mailto:internet-dr= afts@ietf.org> wrote:
>>
>>
>> A New Internet-Draft is available from the on-line Internet-Drafts=
>> directories.
>> This draft is a work item of the Security Events WG of the IETF. >>
>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 Title=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0= =C2=A0: SET Token Delivery Using HTTP
>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 Authors=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0: Phil Hunt
>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 Marius Scurtescu
>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 Morteza Ansari
>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 Anthony Nadalin
>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 Annabelle Richard Backman
>> Filename=C2=A0 =C2=A0 =C2=A0 =C2=A0 : draft-ietf-secevent-delivery= -00.txt
>> Pages=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0: 28
>> Date=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 : 2017-07-28
>>
>> Abstract:
>>=C2=A0 =C2=A0This specification defines how a series of security ev= ent tokens
>>=C2=A0 =C2=A0(SETs) may be delivered to a previously registered rec= eiver using
>>=C2=A0 =C2=A0HTTP POST over TLS initiated as a push to the receiver= , or as a poll
>>=C2=A0 =C2=A0by the receiver.=C2=A0 The specification also defines = how delivery can be
>>=C2=A0 =C2=A0assured subject to the SET Token Receiver's need f= or assurance.
>>
>>
>> The IETF datatracker status page for this draft is:
>> https://urldefense.p= roofpoint.com/v2/url?u=3Dhttps-3A__datatracker.ietf
>> .org_doc_draft-2Dietf-2Dsecevent-2Ddelivery_&d=3DDwI= CAg&c=3DRoP1YumCXCgaW
>> HvlZYR8PQcxBKCX5YTpkKY057SbK10&r=3DJBm5biRrKugCH0FkI= TSeGJxPEivzjWwlNKe4
>> C_lLIGk&m=3D-776NP5LxWSJp_f1PMNn10AECHMGYqhgPsPTqXr4srE&a= mp;s=3Dpc0m7nhCLHj3M
>> ab6Ppgz8m3HF_kwzH4EKFO6jtzNYfE&e=3D
>>
>>
>> There are also htmlized versions available at:
>> https://urldefense.p= roofpoint.com/v2/url?u=3Dhttps-3A__tools.ietf.org_h
>> tml_draft-2Dietf-2Dsecevent-2Ddelivery-2D00&d=3DDwICAg&am= p;c=3DRoP1YumCXCgaWH
>> vlZYR8PQcxBKCX5YTpkKY057SbK10&r=3DJBm5biRrKugCH0FkIT= SeGJxPEivzjWwlNKe4C
>> _lLIGk&m=3D-776NP5LxWSJp_f1PMNn10AECHMGYqhgPsPTqXr4srE&am= p;s=3D6jsUPOsyCumT0Z
>> D-nr6TrlbMzPGgPWZ4OVQjSEr1aOo&e=3D
>>
>> https://urldefense.p= roofpoint.com/v2/url?u=3Dhttps-3A__datatracker.ietf
>> .org_doc_html_draft-2Dietf-2Dsecevent-2Ddelivery-2D00&d= =3DDwICAg&c=3DRoP1
>> YumCXCgaWHvlZYR8PQcxBKCX5YTpkKY057SbK10&r=3DJBm5biRr= KugCH0FkITSeGJxPEiv
>> zjWwlNKe4C_lLIGk&m=3D-776NP5LxWSJp_f1PMNn10AECHMGYqh= gPsPTqXr4srE&s=3DIX4v
>> I17s3YIk7uq1W2aVRxUHH8ybXQZxgyNJLr1H_Ug&e=3D
>>
>>
>>
>> Please note that it may take a couple of minutes from the time of<= br> >> submission until the htmlized version and diff are available at >> tools.ietf.org <http://tools.ietf.org>.
>>
>> Internet-Drafts are also available by anonymous FTP at:
>> https://urldefense.p= roofpoint.com/v2/url?u=3Dftp-3A__ftp.ietf.org_inter
>> net-2Ddrafts_&d=3DDwICAg&c=3DRoP1YumCXCgaWHvlZYR8PQcx= BKCX5YTpkKY057SbK10&
>> r=3DJBm5biRrKugCH0FkITSeGJxPEivzjWwlNKe4C_lLIGk&m=3D= -776NP5LxWSJp_f1PMNn1
>> 0AECHMGYqhgPsPTqXr4srE&s=3DM-c_zQSJ7nJg1SbvMQqc2f2yJFUnTD= PT9IMX_-h9Fyw&
>> e=3D
>>
>>
>> _______________________________________________
>> Id-event mailing list
>> Id-event@ietf.org <mai= lto:Id-event@ietf.org>
>> https://urldefense.p= roofpoint.com/v2/url?u=3Dhttps-3A__www.ietf.org_mai
>> lman_listinfo_id-2Devent&d=3DDwICAg&c=3DRoP1YumC= XCgaWHvlZYR8PQcxBKCX5YTpk
>> KY057SbK10&r=3DJBm5biRrKugCH0FkITSeGJxPEivzjWwlNKe4C= _lLIGk&m=3D-776NP5LxW
>> SJp_f1PMNn10AECHMGYqhgPsPTqXr4srE&s=3DaTnebfvP2aZrcA= 1xIr41D3o8_5Qpyx_NG
>> C7S1km7uKE&e=3D
>>
>

_______________________________________________
Id-event mailing list
Id-event@ietf.org
https://www.ietf.org/mailman/listinf= o/id-event

--001a11459294d309de0555b600c4-- From nobody Wed Aug 2 10:07:28 2017 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4D3601317C1 for ; Wed, 2 Aug 2017 10:07:27 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.988 X-Spam-Level: X-Spam-Status: No, score=-1.988 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_KAM_HTML_FONT_INVALID=0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7BDsGy3qxNJx for ; Wed, 2 Aug 2017 10:07:25 -0700 (PDT) Received: from mail-qt0-x230.google.com (mail-qt0-x230.google.com [IPv6:2607:f8b0:400d:c0d::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2CB20120713 for ; Wed, 2 Aug 2017 10:07:25 -0700 (PDT) Received: by mail-qt0-x230.google.com with SMTP id p3so30541051qtg.2 for ; Wed, 02 Aug 2017 10:07:25 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=hQsBc1GrVTaQDp3l9KJeuZ0CsjjeSpDEAMjWZPA9OL8=; b=S14bls9eyUa339fD6ru+YwJ5RGWH5sdczyMVpIah5MFHjBxa+sPrlFBlstZb1rd5fE q/rQFLjg3nazfPEso0pN6vafvHeat/1eWuHgGTxfi/0xVrvB0TtGmTUBJZiHbIbcxiKY O5jcRzfUWHnQq6FeBoARCmLFBP1zRQQLGaS7fF27fVUcgs4l/9M5yD+R0Vk5q8hh/O3x FghkxMCfdMFLYMt4qSFDuNJSKbVYstNxSQcF5vo1J+Z8TD1MUqyI4e17rGDvqUNOcXgo PlcwYAgR5ExHkh4M8cHHbyCWqz+fG9thKpf3OQPNO5GIerFNI+Id1FC1fiDm7GSNRsv6 bS4g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=hQsBc1GrVTaQDp3l9KJeuZ0CsjjeSpDEAMjWZPA9OL8=; b=q36oMfwlsxjax6XaMkv30X6J52VZl1N3K0QcRfRvJmicudZJlIiA4dm4zK7/A5vxBA vHu9KyFJAUBFZBNEBF9MkKsyHwtXMLWwQpqNgJ3H3X66RLUas3lqgaE0HTewcR6e5BJ2 6FE23wPuT4/Fv06lqqxpOuTZd/vAFVqXXdYXkB/CHkukkNqb+BJzvq2Sy1rCFDsK1QMJ WfgOzlB2sxvdo1UtjEy/KMx9a5NDY0uvRO6n6Oxw1W3YL/a/Gh6TxmVdOA9HgW7aU9al B8/fDLQyijs+NWvqr2N7CNRA8WL1LBwt17sEh9R3GH/aj0Mutstyls8YWE5IQLt4qSIZ RHLw== X-Gm-Message-State: AIVw1128fT1AZrsAaCGzURU3RbzRKnwwzv0HyUs7XepXuvuIXIBoeQPA ipTIJOqm1QWvt3oLK+cR5GOB221vWA== X-Received: by 10.200.40.23 with SMTP id 23mr31995362qtq.206.1501693644005; Wed, 02 Aug 2017 10:07:24 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: Nat Sakimura Date: Wed, 02 Aug 2017 17:07:12 +0000 Message-ID: To: "M.Lizar@OCG" , Mike Jones Cc: Yaron Sheffer , SecEvent Content-Type: multipart/alternative; boundary="001a11407a0a3668f30555c84c13" Archived-At: Subject: Re: [Id-event] WG Last Call for draft-ietf-secevent-token-02 X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 02 Aug 2017 17:07:27 -0000 --001a11407a0a3668f30555c84c13 Content-Type: text/plain; charset="UTF-8" Thanks, it looks generally good. I had only three small nits. *1) "MUST NOT" in the introduction. * --------------------------------------------------- I feel that it is better to have this MUST NOT in the main text. The introduction often is skipped by a reader. *2) Potentially missing "defined in " in Section 2 the first bullet* ------------------------------------------------------------------------------------------------------ There seems to be missing "defined in" in the sentence "the JWT Token Claims Registry Section 10.1". *3) Issuer validation* ---------------------------------- I am not sure how to do an issuer validation when using unsecured JWT. Adding more explanation would be beneficial. Best, Nat On Wed, Aug 2, 2017 at 1:18 AM M.Lizar@OCG wrote: > +1 on existing text . > > Agree the document is ready to publish > > - Mark > > On 31 Jul 2017, at 16:53, Mike Jones wrote: > > I believe that the specification is ready to publish as-is. It already > meets the needs of the known use cases and is in production use. > > -- Mike > > *From:* Id-event [mailto:id-event-bounces@ietf.org > ] *On Behalf Of *Yaron Sheffer > *Sent:* Monday, July 31, 2017 1:40 PM > *To:* SecEvent > *Subject:* [Id-event] WG Last Call for draft-ietf-secevent-token-02 > > > This is to announce working group last call on this draft ( > https://datatracker.ietf.org/doc/draft-ietf-secevent-token/). > > Please send your comments to the list. Even if you are perfectly happy > with the draft, please let us know that you support its publication as-is > by posting to the list. > > Because of the summer holidays, this last call is open for 3 weeks, until > Aug. 21. > > Thanks, > Dick and Yaron > > _______________________________________________ > Id-event mailing list > Id-event@ietf.org > https://www.ietf.org/mailman/listinfo/id-event > > _______________________________________________ > Id-event mailing list > Id-event@ietf.org > https://www.ietf.org/mailman/listinfo/id-event > -- Nat Sakimura Chairman of the Board, OpenID Foundation --001a11407a0a3668f30555c84c13 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Thanks, it looks generally good. I had only three small ni= ts.=C2=A0

1) "MUST NOT" in the introduction= .=C2=A0
---------------------------------------------------
I feel that it is better to have this MUST NOT in the main text. T= he introduction often is skipped by a reader.=C2=A0

2) Potentially missing "defined in " in Section 2 the first = bullet
------------------------------------------------------= ------------------------------------------------
There seems to b= e missing "defined in" in the sentence "the JWT Token Claims= Registry Section 10.1".

3) Issuer val= idation
----------------------------------
I am not= sure how to do an issuer validation when using unsecured JWT.=C2=A0
Adding more explanation would be beneficial.=C2=A0

Best,=C2=A0

Nat

On Wed, Aug 2, 2017 at 1:18 AM M.Lizar@OC= G <m.lizar@openconsentgr= oup.com> wrote:
+1 on existing text .=C2=A0

Ag= ree the document is ready to publish

- Mark
<= div>
On 31 Jul 2017, at 16:53,= Mike Jones <Michael.Jones@microsoft.com> wrote:

I believe that the specification is ready to publish as-i= s.=C2=A0 It already meets the needs of the known use cases and is in produc= tion use.
=C2=A0
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0 -- Mike
=C2=A0
From:= =C2=A0Id-event [mailto:id-event-bounces@ietf.org= ]=C2=A0On Behalf Of=C2= =A0Yaron Sheffer
Sent:=C2=A0Monday, July 31, 2017 1:40 PM
To:=C2=A0SecEvent <id= -event@ietf.org>
Subject:=C2=A0[Id-event] WG Last Call for draft-ie= tf-secevent-token-02
=C2=A0
This is = to announce working group last call on this draft (https://datatracker.ietf.org/doc/dr= aft-ietf-secevent-token/).

Please send your comments to the list= . Even if you are perfectly happy with the draft, please let us know that y= ou support its publication as-is by posting to the list.

Because of = the summer holidays, this last call is open for 3 weeks, until Aug. 21.
=
Thanks,
=C2=A0=C2=A0=C2=A0 Dick and Yaron
<= /div>
_______________________________________________
Id-event mailing list
Id-even= t@ietf.org
https://www.ietf.org/ma= ilman/listinfo/id-event
_______________________________________________
Id-event mailing list
Id-event@ietf.org
https://www.ietf.org/mailman/listinfo/id-event
--

Nat Sakimura

Chairman of the Board, OpenID Foundation

--001a11407a0a3668f30555c84c13-- From nobody Wed Aug 2 10:26:54 2017 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 183E1132146 for ; Wed, 2 Aug 2017 10:26:52 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.721 X-Spam-Level: X-Spam-Status: No, score=-1.721 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=1.989, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RCVD_IN_SORBS_SPAM=0.5, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, T_KAM_HTML_FONT_INVALID=0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id n78W0ThncTQy for ; Wed, 2 Aug 2017 10:26:50 -0700 (PDT) Received: from aserp1040.oracle.com (aserp1040.oracle.com [141.146.126.69]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 61A0913214D for ; Wed, 2 Aug 2017 10:26:48 -0700 (PDT) Received: from aserv0021.oracle.com (aserv0021.oracle.com [141.146.126.233]) by aserp1040.oracle.com (Sentrion-MTA-4.3.2/Sentrion-MTA-4.3.2) with ESMTP id v72HQkc6023667 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK); Wed, 2 Aug 2017 17:26:46 GMT Received: from userv0122.oracle.com (userv0122.oracle.com [156.151.31.75]) by aserv0021.oracle.com (8.14.4/8.14.4) with ESMTP id v72HQjqn006650 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK); Wed, 2 Aug 2017 17:26:45 GMT Received: from abhmp0002.oracle.com (abhmp0002.oracle.com [141.146.116.8]) by userv0122.oracle.com (8.14.4/8.14.4) with ESMTP id v72HQiWE016181; Wed, 2 Aug 2017 17:26:44 GMT Received: from [10.0.1.37] (/24.86.190.97) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Wed, 02 Aug 2017 10:26:43 -0700 From: Phil Hunt Message-Id: Content-Type: multipart/alternative; boundary="Apple-Mail=_8224DBB8-C28E-42E1-B6F6-FDFDD4284B14" Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\)) Date: Wed, 2 Aug 2017 10:26:42 -0700 In-Reply-To: Cc: "M.Lizar@OCG" , Mike Jones , Yaron Sheffer , SecEvent To: Nat Sakimura References: X-Mailer: Apple Mail (2.3273) X-Source-IP: aserv0021.oracle.com [141.146.126.233] Archived-At: Subject: Re: [Id-event] WG Last Call for draft-ietf-secevent-token-02 X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 02 Aug 2017 17:26:52 -0000 --Apple-Mail=_8224DBB8-C28E-42E1-B6F6-FDFDD4284B14 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Nat, Thanks for the read. For #1 - should we move that paragraph to section 2 and leave some more = generalized statement in section 1? For #2 - I think the paragraph starting =E2=80=9CAn outer JSON object = that acts=E2=80=A6=E2=80=9D could be improved. Agreed that something = along the lines of defined in JWT should be used. I recall #3 came up before as part of the delivery spec discussions. My = intent is that when using unsecured JWTs the receiver has to validate = via the method of delivery. E.g. was the JWT delivered over a mutually = authenticated channel? Section 4.1 and 4.2 covers the issue albeit indirectly. I will go over the text and see what improvement could be made - = probably in security considerations. Phil Oracle Corporation, Identity Cloud Services Architect & Standards @independentid www.independentid.com = phil.hunt@oracle.com = > On Aug 2, 2017, at 10:07 AM, Nat Sakimura wrote: >=20 > Thanks, it looks generally good. I had only three small nits.=20 >=20 > 1) "MUST NOT" in the introduction.=20 > --------------------------------------------------- > I feel that it is better to have this MUST NOT in the main text. The = introduction often is skipped by a reader.=20 >=20 > 2) Potentially missing "defined in " in Section 2 the first bullet > = --------------------------------------------------------------------------= ---------------------------- > There seems to be missing "defined in" in the sentence "the JWT Token = Claims Registry Section 10.1". >=20 > 3) Issuer validation > ---------------------------------- > I am not sure how to do an issuer validation when using unsecured JWT.=20= > Adding more explanation would be beneficial.=20 >=20 > Best,=20 >=20 > Nat >=20 > On Wed, Aug 2, 2017 at 1:18 AM M.Lizar@OCG = > = wrote: > +1 on existing text .=20 >=20 > Agree the document is ready to publish >=20 > - Mark >=20 >> On 31 Jul 2017, at 16:53, Mike Jones > wrote: >>=20 >> I believe that the specification is ready to publish as-is. It = already meets the needs of the known use cases and is in production use. >> =20 >> -- = Mike >> =20 >> From: Id-event [mailto:id-event-bounces@ietf.org = ] On Behalf Of Yaron Sheffer >> Sent: Monday, July 31, 2017 1:40 PM >> To: SecEvent > >> Subject: [Id-event] WG Last Call for draft-ietf-secevent-token-02 >=20 >> =20 >> This is to announce working group last call on this draft = (https://datatracker.ietf.org/doc/draft-ietf-secevent-token/ = ). >>=20 >> Please send your comments to the list. Even if you are perfectly = happy with the draft, please let us know that you support its = publication as-is by posting to the list. >>=20 >> Because of the summer holidays, this last call is open for 3 weeks, = until Aug. 21. >>=20 >> Thanks, >> Dick and Yaron >=20 >> _______________________________________________ >> Id-event mailing list >> Id-event@ietf.org >> https://www.ietf.org/mailman/listinfo/id-event = > _______________________________________________ > Id-event mailing list > Id-event@ietf.org > https://www.ietf.org/mailman/listinfo/id-event = > --=20 > Nat Sakimura >=20 > Chairman of the Board, OpenID Foundation >=20 > _______________________________________________ > Id-event mailing list > Id-event@ietf.org > = https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__www.ietf.org_mailma= n_listinfo_id-2Devent&d=3DDwICAg&c=3DRoP1YumCXCgaWHvlZYR8PQcxBKCX5YTpkKY05= 7SbK10&r=3DJBm5biRrKugCH0FkITSeGJxPEivzjWwlNKe4C_lLIGk&m=3DNj4D94_Z5TX7aZp= ILIENbLknqDGinZlFUseKss9KZyY&s=3Djgy3vjdjQKBEXv9AoYCSJ76EnSrAP9cnVXeoCkGMY= 9o&e=3D = --Apple-Mail=_8224DBB8-C28E-42E1-B6F6-FDFDD4284B14 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Nat,

Thanks= for the read.

For #1 - should we move that paragraph to section 2 and leave = some more generalized statement in section 1?

For #2 - I think the paragraph starting = =E2=80=9CAn outer JSON object that acts=E2=80=A6=E2=80=9D could be = improved. Agreed that something along the lines of defined in JWT should = be used.

I = recall #3 came up before as part of the delivery spec discussions. =  My intent is that when using unsecured JWTs the receiver has to = validate via the method of delivery.  E.g. was the JWT delivered = over a mutually authenticated channel?

Section 4.1 and 4.2 covers the issue = albeit indirectly.

I will go over the text and see what improvement could be = made - probably in security considerations.

Phil

Oracle Corporation, Identity Cloud = Services Architect & Standards
@independentid
www.independentid.com
phil.hunt@oracle.com

On Aug 2, 2017, at 10:07 AM, Nat Sakimura <sakimura@gmail.com> = wrote:

Thanks, it looks generally = good. I had only three small nits. 

1) "MUST NOT" in the = introduction. 
---------------------------------------------------
I feel that it is better to have this MUST NOT in the main = text. The introduction often is skipped by a reader. 

2) = Potentially missing "defined in " in Section 2 the first = bullet
---------------------------------------------------------------= ---------------------------------------
There seems = to be missing "defined in" in the sentence "the JWT Token Claims = Registry Section 10.1".

3) Issuer = validation
----------------------------------
I am = not sure how to do an issuer validation when using unsecured = JWT. 
Adding more explanation = would be beneficial. 

Best, 

Nat

On Wed, Aug = 2, 2017 at 1:18 AM M.Lizar@OCG <m.lizar@openconsentgroup.com> wrote:
+1 on existing text = . 

Agree the = document is ready to publish

- Mark

On 31 Jul 2017, at 16:53, Mike Jones <Michael.Jones@microsoft.com> wrote:

I believe that the specification is ready to publish = as-is.  It already meets the needs of the known use cases and is in = production use.
 
          &nb= sp;            = ;            &= nbsp;           &nb= sp;            = ;    -- = Mike
 
From: Id-event= [mailto:id-event-bounces@ietf.org] On Behalf Of Yaro= n Sheffer
Sent: Monday, = July 31, 2017 1:40 PM
To: SecEvent= <id-event@ietf.org>
Subject: [Id-even= t] WG Last Call for draft-ietf-secevent-token-02
 
This is to announce = working group last call on this draft (https://datatracker.ietf.org/doc/draft-ietf-secevent-token/= ).

Please send your comments to the list. = Even if you are perfectly happy with the draft, please let us know that = you support its publication as-is by posting to the list.

Because of the summer holidays, this last call = is open for 3 weeks, until Aug. 21.

Thanks,
    Dick and Yaron
_______________________________________________
Id-event mailing list
Id-event@ietf.org
https://www.ietf.org/mailman/listinfo/id-event
________________________________= _______________
Id-event mailing list
Id-event@ietf.org
https://www.ietf.org/mailman/listinfo/id-event
-- 

Nat Sakimura

Chairman of the = Board, OpenID Foundation

_______________________________________________
Id-event mailing list
Id-event@ietf.org
https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__www.ietf= .org_mailman_listinfo_id-2Devent&d=3DDwICAg&c=3DRoP1YumCXCgaWHvlZY= R8PQcxBKCX5YTpkKY057SbK10&r=3DJBm5biRrKugCH0FkITSeGJxPEivzjWwlNKe4C_lL= IGk&m=3DNj4D94_Z5TX7aZpILIENbLknqDGinZlFUseKss9KZyY&s=3Djgy3vjdjQK= BEXv9AoYCSJ76EnSrAP9cnVXeoCkGMY9o&e=3D

= --Apple-Mail=_8224DBB8-C28E-42E1-B6F6-FDFDD4284B14-- From nobody Wed Aug 2 11:12:10 2017 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 18A7012EB99 for ; Wed, 2 Aug 2017 11:12:10 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.701 X-Spam-Level: X-Spam-Status: No, score=-0.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=1.989, RCVD_IN_DNSWL_LOW=-0.7, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, T_KAM_HTML_FONT_INVALID=0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CwaCnNfpV7-e for ; Wed, 2 Aug 2017 11:12:08 -0700 (PDT) Received: from mail-yw0-x22a.google.com (mail-yw0-x22a.google.com [IPv6:2607:f8b0:4002:c05::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B3C08124B18 for ; Wed, 2 Aug 2017 11:12:07 -0700 (PDT) Received: by mail-yw0-x22a.google.com with SMTP id s143so34010885ywg.1 for ; Wed, 02 Aug 2017 11:12:07 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=MVXh7ZeSDEuwM1pwxH/5tBMYKtY1xljvSvXFJrp/Xus=; b=tUlNfUBTi61GHefhR7dIoiXzzqU8dCVSTtoo0QZQ+cySqhpi+lnnihaBapJI82oHve 8ckupt3cBvWIS084HJnhj5qA5sXXTGW+0l2ofz44LcOnhMEOBLXzP09A9+tfUGWW8EE0 GVAIutUntdoq+7XBnCkuWOq6/swsZ8VOOCB36Zy9iMfw8kBlOlZAgzf+trKwPRpyl+A9 zRRzBOFC9VeKC6XGjFZ/IB5IzyIWfjEDYrYqSYKEowjs4SukRB6S5tshJt6GhbcvloSq jH5XheO2vdVjfsAQzHjFwcQiEvYposOwkAVlyh8El0qbxOkpJFfHZ7A4xm7PSInAAZh3 fp4w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=MVXh7ZeSDEuwM1pwxH/5tBMYKtY1xljvSvXFJrp/Xus=; b=jnc35SdMutwy2q+Z5f6kp6iPwrpQSNGh7mJ24cJLVgM4tXApL+5JkjrexN77mKzKOi b2mb/rYR1/HSr0xnP5Jw4mYGBs7/ptgFbqetdaswBqCBpjm/fXz09ObquGy4CvHPwktx TC1ZeLLxL9E9oS3mp3b5rhhEsjQwi2K3kW43qnm8BABR6A6rFpEMNYcf6n1ON++7Mgf9 ME7nPWyaolTNIw9LuHhqwcUh9glJHjAAve7azqYXFnc6LBbxevlVQ3yr0GN3HALaj650 kTh1ZOoWS988Ar6IZzVUfr9/cRsvZ4oMS60r2zWhbdOc5XkMrNbOkU6X5snVrceyLDZL ILzg== X-Gm-Message-State: AIVw1121IHFI6nj2tRcV8pQXxfRAZ+17V+2kFOxchxXc6D3c1F9Ro1aA /QY//BIUToJfrsg79gkGUDAkgcexc0yH X-Received: by 10.37.203.70 with SMTP id b67mr12366268ybg.209.1501697526572; Wed, 02 Aug 2017 11:12:06 -0700 (PDT) MIME-Version: 1.0 Received: by 10.37.66.193 with HTTP; Wed, 2 Aug 2017 11:12:05 -0700 (PDT) In-Reply-To: References: From: Adam Dawes Date: Wed, 2 Aug 2017 11:12:05 -0700 Message-ID: To: Phil Hunt Cc: Nat Sakimura , Yaron Sheffer , Mike Jones , "M.Lizar@OCG" , SecEvent Content-Type: multipart/alternative; boundary="94eb2c0566b0a244dc0555c93341" Archived-At: Subject: Re: [Id-event] WG Last Call for draft-ietf-secevent-token-02 X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 02 Aug 2017 18:12:10 -0000 --94eb2c0566b0a244dc0555c93341 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable I believe this is ready for publication. Google will be making changes to our proto RISC implementation to conform and will be looking forward to getting real-world feedback on the spec. On Wed, Aug 2, 2017 at 10:26 AM, Phil Hunt wrote: > Nat, > > Thanks for the read. > > For #1 - should we move that paragraph to section 2 and leave some more > generalized statement in section 1? > > For #2 - I think the paragraph starting =E2=80=9CAn outer JSON object tha= t acts=E2=80=A6=E2=80=9D > could be improved. Agreed that something along the lines of defined in JW= T > should be used. > > I recall #3 came up before as part of the delivery spec discussions. My > intent is that when using unsecured JWTs the receiver has to validate via > the method of delivery. E.g. was the JWT delivered over a mutually > authenticated channel? > > Section 4.1 and 4.2 covers the issue albeit indirectly. > > I will go over the text and see what improvement could be made - probably > in security considerations. > > Phil > > Oracle Corporation, Identity Cloud Services Architect & Standards > @independentid > www.independentid.com > phil.hunt@oracle.com > > On Aug 2, 2017, at 10:07 AM, Nat Sakimura wrote: > > Thanks, it looks generally good. I had only three small nits. > > *1) "MUST NOT" in the introduction. * > --------------------------------------------------- > I feel that it is better to have this MUST NOT in the main text. The > introduction often is skipped by a reader. > > *2) Potentially missing "defined in " in Section 2 the first bullet* > ------------------------------------------------------------ > ------------------------------------------ > There seems to be missing "defined in" in the sentence "the JWT Token > Claims Registry Section 10.1". > > *3) Issuer validation* > ---------------------------------- > I am not sure how to do an issuer validation when using unsecured JWT. > Adding more explanation would be beneficial. > > Best, > > Nat > > On Wed, Aug 2, 2017 at 1:18 AM M.Lizar@OCG > wrote: > >> +1 on existing text . >> >> Agree the document is ready to publish >> >> - Mark >> >> On 31 Jul 2017, at 16:53, Mike Jones wrote= : >> >> I believe that the specification is ready to publish as-is. It already >> meets the needs of the known use cases and is in production use. >> >> -- Mike >> >> *From:* Id-event [mailto:id-event-bounces@ietf.org >> ] *On Behalf Of *Yaron Sheffer >> *Sent:* Monday, July 31, 2017 1:40 PM >> *To:* SecEvent >> *Subject:* [Id-event] WG Last Call for draft-ietf-secevent-token-02 >> >> >> This is to announce working group last call on this draft ( >> https://datatracker.ietf.org/doc/draft-ietf-secevent-token/ >> >> ). >> >> Please send your comments to the list. Even if you are perfectly happy >> with the draft, please let us know that you support its publication as-i= s >> by posting to the list. >> >> Because of the summer holidays, this last call is open for 3 weeks, unti= l >> Aug. 21. >> >> Thanks, >> Dick and Yaron >> >> _______________________________________________ >> Id-event mailing list >> Id-event@ietf.org >> https://www.ietf.org/mailman/listinfo/id-event >> >> >> _______________________________________________ >> Id-event mailing list >> Id-event@ietf.org >> https://www.ietf.org/mailman/listinfo/id-event >> >> > -- > > Nat Sakimura > > Chairman of the Board, OpenID Foundation > _______________________________________________ > Id-event mailing list > Id-event@ietf.org > https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__www. > ietf.org_mailman_listinfo_id-2Devent&d=3DDwICAg&c=3D > RoP1YumCXCgaWHvlZYR8PQcxBKCX5YTpkKY057SbK10&r=3D > JBm5biRrKugCH0FkITSeGJxPEivzjWwlNKe4C_lLIGk&m=3DNj4D94_ > Z5TX7aZpILIENbLknqDGinZlFUseKss9KZyY&s=3Djgy3vjdjQKBEXv9AoYCSJ76EnSrAP9 > cnVXeoCkGMY9o&e=3D > > > > _______________________________________________ > Id-event mailing list > Id-event@ietf.org > https://www.ietf.org/mailman/listinfo/id-event > > --=20 Adam Dawes | Sr. Product Manager | adawes@google.com | +1 650-214-2410 --94eb2c0566b0a244dc0555c93341 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
I believe this is ready for publication. Google will be ma= king changes to our proto RISC implementation to conform and will be lookin= g forward to getting real-world feedback on the spec.

On Wed, Aug 2, 2017 at 10:26 AM, = Phil Hunt <phil.hunt@oracle.com> wrote:
Nat,

Thanks for the read.

For #1 - should we move tha= t paragraph to section 2 and leave some more generalized statement in secti= on 1?

For #2 - I think the paragraph starting =E2= =80=9CAn outer JSON object that acts=E2=80=A6=E2=80=9D could be improved. A= greed that something along the lines of defined in JWT should be used.

I recall #3 came up before as part of the delivery spe= c discussions.=C2=A0 My intent is that when using unsecured JWTs the receiv= er has to validate via the method of delivery.=C2=A0 E.g. was the JWT deliv= ered over a mutually authenticated channel?

Sectio= n 4.1 and 4.2 covers the issue albeit indirectly.

= I will go over the text and see what improvement could be made - probably i= n security considerations.

Phil

Oracle C= orporation, Identity Cloud Services Architect & Standards
@in= dependentid
phil.hunt@oracle.com
=

On Au= g 2, 2017, at 10:07 AM, Nat Sakimura <sakimura@gmail.com> wrote:

Thanks, it looks generally good. I had only three s= mall nits.=C2=A0

1) "MUST NOT" in the intro= duction.=C2=A0
-----------------------------------------= ----------
I feel that it is better to have this MUST NOT in the = main text. The introduction often is skipped by a reader.=C2=A0
<= br>
2) Potentially missing "defined in " in Section = 2 the first bullet
-------------------------------------= -----------------------------------------------------------------=
There seems to be missing "defined in" in the sentence= "the JWT Token Claims Registry Section 10.1".

=
3) Issuer validation
--------------------------= --------
I am not sure how to do an issuer validation when u= sing unsecured JWT.=C2=A0
Adding more explanation would be be= neficial.=C2=A0

Best,=C2=A0

Nat

On Wed, Aug 2, 2017= at 1:18 AM M.Lizar@OCG <m.lizar@openconsentgroup.com> wrote:
+1 on existing text .=C2= =A0

Agree the document is ready to publish
- Mark

= On 31 Jul 2017, at 16:53, Mike Jones <Michael.Jones@microsoft.com> wrote:
I believe that the specification is ready to publish as-is.=C2=A0= It already meets the needs of the known use cases and is in production use= .
=C2=A0
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0-- Mike
=C2=A0
Fro= m:=C2=A0Id-event [<= a href=3D"mailto:id-event-bounces@ietf.org" target=3D"_blank">mailto:id-eve= nt-bounces@ietf.org]=C2=A0On Behalf Of=C2=A0= Yaron Sheffer
Sent:=C2=A0Monday, July 31, = 2017 1:40 PM
To:=C2=A0SecEvent <id-event@ietf.org>
Subjec= t:=C2=A0[Id-event] WG Last Call for draft-ietf-secevent-tok= en-02
=
=C2=A0
= This is to announce working group last call on this draft (https://datatracker.ietf.org/doc/draf= t-ietf-secevent-token/).

Please send your comments to the l= ist. Even if you are perfectly happy with the draft, please let us know tha= t you support its publication as-is by posting to the list.

Because = of the summer holidays, this last call is open for 3 weeks, until Aug. 21.<= br>
Thanks,
=C2=A0=C2=A0=C2=A0=C2=A0Dick and Yaron
_______________________________________________<= /span>
Id-event mailing list
Id-= event@ietf.org
https://www.ietf.org/mailman/list= info/id-event
_______________________________________________
Id-eve= nt mailing list
I= d-event@ietf.org
https://www.ietf.org/mailman/listinfo/id-eve= nt
--=C2=A0

Nat= Sakimura

Chairman of the Board, OpenID Foundation

______________________________= _________________
Id-event mailin= g list
Id-event@ietf= .org
htt= ps://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__www.ietf.org_= mailman_listinfo_id-2Devent&d=3DDwICAg&c=3DRoP1YumCXCgaWH= vlZYR8PQcxBKCX5YTpkKY057SbK10&r=3DJBm5biRrKugCH0FkITSeGJxPEiv= zjWwlNKe4C_lLIGk&m=3DNj4D94_Z5TX7aZpILIENbLknqDGinZlFUseKss9KZyY&s=3Djgy3vjdjQKBEXv9AoYCSJ76EnSrAP9cnVXeoCkGMY9o&= e=3D


_______________________________________________<= br> Id-event mailing list
Id-event@ietf.org
https://www.ietf.org/mailman/listinfo/id-event




--
--94eb2c0566b0a244dc0555c93341-- From nobody Wed Aug 2 11:43:36 2017 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 44ADD12009C for ; Wed, 2 Aug 2017 11:43:35 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -17.3 X-Spam-Level: X-Spam-Status: No, score=-17.3 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H2=-2.8, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_SPF_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=amazon.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YXjmj3b0mIxi for ; Wed, 2 Aug 2017 11:43:33 -0700 (PDT) Received: from smtp-fw-9101.amazon.com (smtp-fw-9101.amazon.com [207.171.184.25]) (using TLSv1.2 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E6125131828 for ; Wed, 2 Aug 2017 11:43:32 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=amazon.com; i=@amazon.com; q=dns/txt; s=amazon201209; t=1501699412; x=1533235412; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=Lw0FegwwTtSLX67/O+6K54YdZzBgRKk+glA4hZGxtLA=; b=eivTZ/uHINqSTf37zhb2YKsA+lOdqEq26LhqPlQl8mCy2ySNI7RTgyYp g4Lp7nr+pSKO4frYteqlP+7sOmLMm4QsmDOrUq66Ai2v5nqJYWGlCeaOH 93FkSZa9ft6S9+4T8GGgHHedk4S4TE7RMmRsxCzf7NrYd4TE//Rku/eXX U=; X-IronPort-AV: E=Sophos;i="5.41,312,1498521600"; d="scan'208,217";a="695679870" Received: from sea19-co-svc-lb5-vlan2.sea.amazon.com (HELO email-inbound-relay-62006.pdx2.amazon.com) ([10.47.22.162]) by smtp-border-fw-out-9101.sea19.amazon.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 02 Aug 2017 18:43:30 +0000 Received: from EX13MTAUWC001.ant.amazon.com (pdx1-ws-svc-p6-lb9-vlan2.pdx.amazon.com [10.236.137.194]) by email-inbound-relay-62006.pdx2.amazon.com (8.14.7/8.14.7) with ESMTP id v72IhUhT003312 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Wed, 2 Aug 2017 18:43:30 GMT Received: from EX13D11UWC002.ant.amazon.com (10.43.162.174) by EX13MTAUWC001.ant.amazon.com (10.43.162.135) with Microsoft SMTP Server (TLS) id 15.0.1104.5; Wed, 2 Aug 2017 18:43:30 +0000 Received: from EX13D11UWC004.ant.amazon.com (10.43.162.101) by EX13D11UWC002.ant.amazon.com (10.43.162.174) with Microsoft SMTP Server (TLS) id 15.0.1104.5; Wed, 2 Aug 2017 18:43:29 +0000 Received: from EX13D11UWC004.ant.amazon.com ([10.43.162.101]) by EX13D11UWC004.ant.amazon.com ([10.43.162.101]) with mapi id 15.00.1104.000; Wed, 2 Aug 2017 18:43:29 +0000 From: "Richard Backman, Annabelle" To: "M.Lizar@OCG" , Mike Jones CC: Yaron Sheffer , SecEvent Thread-Topic: [Id-event] WG Last Call for draft-ietf-secevent-token-02 Thread-Index: AQHTCj1Svuqk/S3glU+hjDHhS1RL1KJuaayAgAFFQACAAUW3gA== Date: Wed, 2 Aug 2017 18:43:29 +0000 Message-ID: <72B8E7CA-3EB6-4194-BB77-CD46062FDFB7@amazon.com> References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/f.23.0.170610 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.43.161.180] Content-Type: multipart/alternative; boundary="_000_72B8E7CA3EB64194BB77CD46062FDFB7amazoncom_" MIME-Version: 1.0 Archived-At: Subject: Re: [Id-event] WG Last Call for draft-ietf-secevent-token-02 X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 02 Aug 2017 18:43:35 -0000 --_000_72B8E7CA3EB64194BB77CD46062FDFB7amazoncom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 VGhhbmtzIGZvciBhbGwgdGhlIHdvcmsgb24gdGhpcyEgSXQgd2FzIG15IHVuZGVyc3RhbmRpbmcg dGhhdCB0aGVyZSB3YXMgYW4gb3BlbiBpdGVtIGZyb20gUHJhZ3VlIHJlZ2FyZGluZyB3aGV0aGVy IHRvIGV4cGxpY2l0bHkgZGVjbGFyZSB0aGUgZXZlbnRz4oCZIHByb2ZpbGluZyBzcGVjaWZpY2F0 aW9uIGluIHRoZSBTRVQuIEhhcyB0aGlzIGJlZW4gZGlzY3Vzc2VkIGZ1cnRoZXIsIG9yIGRvIHdl IHN0aWxsIG5lZWQgdG8gY2xvc2Ugb24gaXQ/DQoNCkkgaGF2ZSBzZXZlcmFsIGNvbW1lbnRzL3F1 ZXN0aW9ucyBvbiB0aGUgY3VycmVudCBkcmFmdDoNCg0KDQogIDEuICDigJxQcm9maWxlIFNwZWNp ZmljYXRpb27igJ0gdnMuIOKAnFByb2ZpbGluZyBTcGVjaWZpY2F0aW9u4oCdDQpUaGVyZSBhcmUg YSBoYW5kZnVsIG9mIGluc3RhbmNlcyBvZiB0aGUgZm9ybWVyIHRoYXQgbmVlZCB0byBiZSBjaGFu Z2VkIHRvIHRoZSBsYXR0ZXIsIHRvIG1hdGNoIHRoZSB0ZXJtIGFzIGRlZmluZWQgaW4gc2VjdGlv biAxLjI6DQogICAgICogICBJbiB0aGUg4oCcc3Vi4oCdIGRlZmluaXRpb24gaW4gc2VjdGlvbiAx LjINCiAgICAgKiAgIEluIHNlY3Rpb24gMw0KICAgICAqICAgSW4gc2VjdGlvbiA0LjINCiAgMi4g IE5vdGUgcmVnYXJkaW5nIFN1YmplY3QgSXNzdWVyIHZzLiBTRVQgSXNzdWVyDQpUaGUgbm90ZSBy ZWdhcmRpbmcgdGhlIHBvdGVudGlhbCBmb3IgU3ViamVjdCBhbmQgU0VUIElzc3VlciBtaXNtYXRj aCAoaW4gdGhlIOKAnGlzc+KAnSBkZWZpbml0aW9uIGluIHNlY3Rpb24gMS4yKSBpcyBJIHRoaW5r IG1vcmUgcHJlc2NyaXB0aXZlIHRoYW4gaW50ZW5kZWQuIEFzIHdyaXR0ZW4sIGl0IG1hbmRhdGVz IHBsYWNpbmcgdGhlIFN1YmplY3TigJlzIElzc3VlciBpbiBhbiDigJxpc3PigJ0gdmFsdWUgd2l0 aGluIHRoZSBldmVudCBwYXlsb2FkLCBidXQgZG9lcyBub3QgZGVmaW5lIGEgZm9ybWF0IG9yIHN0 cnVjdHVyZSBmb3IgdGhpcyB2YWx1ZS4gVGhlIGxvZ2ljYWwgZm9ybWF0IOKAkyB0aGF0IG9mIHRo ZSDigJxpc3PigJ0gSldUIGNsYWltIOKAkyBtYXkgb3IgbWF5IG5vdCBiZSBhcHByb3ByaWF0ZSwg ZGVwZW5kaW5nIG9uIHRoZSBuYXR1cmUgb2YgdGhlIGV2ZW50IGFuZCBpdHMgU3ViamVjdC4gSSBz dWdnZXN0IHJlbW92aW5nIHRoaXMgbm90ZSBhbmQgY292ZXJpbmcgdGhpcyBjb25jZXJuIGVsc2V3 aGVyZSAoc2VlICM0IGJlbG93LCByZTogU3ViamVjdCBJZGVudGlmaWNhdGlvbikuDQoNCiAgMy4g IEV4cGxpY2l0IFR5cGluZyBvZiBTRVRzDQpJIHN1Z2dlc3QgcmVtb3ZpbmcgdGhlIHRleHQg4oCc aWYgdGhlIFNFVCBjb3VsZCBiZSB1c2VkIGluIGFuIGFwcGxpY2F0aW9uIGNvbnRleHQgaW4gd2hp Y2ggaXQgY291bGQgYmUgY29uZnVzZWQgd2l0aCBvdGhlciBraW5kcyBvZiBKV1Rz4oCdIGZyb20g dGhlIGZpcnN0IHBhcmFncmFwaCBvZiBzZWN0aW9uIDIuMiwgbWFraW5nIHRoZSBzZWNldmVudCtq d3QgdHlwIGhlYWRlciBtYW5kYXRvcnkgdG8gaW1wbGVtZW50IGZvciBhbGwgU0VUcy4gVGhpcyBj b25kaXRpb25hbCBpcyBpbXBvc3NpYmxlIHRvIGV2YWx1YXRlLCBhcyBuZXcgdHlwZXMgb2YgSldU cyB3aWxsIGJlIGludHJvZHVjZWQgb3ZlciB0aW1lLiBKdXN0IGNvbnNpZGVyaW5nIGV4aXN0aW5n IEpXVHMsIGl0IGlzIGEgbG90IHRvIGFzayBmb3IgUHJvZmlsaW5nIFNwZWMgYXV0aG9ycyB0byBm dWxseSBleGFtaW5lIHRoZSBjb250ZW50cyBhbmQgdXNhZ2Ugb2YgZXZlcnkgZXhpc3RpbmcgSldU LiBNYW5kYXRpbmcgdXNlIG9mIHR5cCBmb3IgU0VUcyB0YWtlcyB0aGlzIGxvYWQgb2ZmIG9mIFBy b2ZpbGluZyBTcGVjIGF1dGhvcnMgYW5kIGluc3VyZXMgdGhhdCBmdXR1cmUgc3BlY3MgaGF2ZSBh IGNvbnNpc3RlbnQsIHJlbGlhYmxlIHdheSB0byBkZWZlbmQgYWdhaW5zdCBKV1QgdHlwZSBjb25m dXNpb24uDQoNCiAgNC4gIFJlcXVpcmVtZW50cyBmb3IgU0VUIFByb2ZpbGVzOiBTdWJqZWN0IElk ZW50aWZpY2F0aW9uDQpJIHN1Z2dlc3QgYWRkaW5nIHRleHQgYWxvbmcgdGhlIGxpbmVzIG9mIOKA nFByb2ZpbGluZyBTcGVjaWZpY2F0aW9ucyBNVVNUIGRlZmluZSBmb3IgZWFjaCBvZiB0aGVpciBl dmVudHMgaG93IHRoZSBTdWJqZWN0IGlzIGlkZW50aWZpZWQgaW4gdGhlIFNFVCwgYXMgd2VsbCBh cyBob3cgdG8gYWRkcmVzcyBjb25mbGljdHMgdGhlIGV2ZW50IFN1YmplY3TigJlzIElzc3VlciBh bmQgdGhlIFNFVCBJc3N1ZXIgaWYgYXBwbGljYWJsZS4gSXQgaXMgTk9UIFJFQ09NTUVOREVEIGZv ciBQcm9maWxpbmcgU3BlY2lmaWNhdGlvbnMgdG8gdXNlIHRoZSDigJxzdWLigJ0gY2xhaW0gaW4g Y2FzZXMgd2hlcmUgdGhlIFN1YmplY3QgaXMgbm90IGdsb2JhbGx5IHVuaXF1ZSBhbmQgaGFzIGEg ZGlmZmVyZW50IElzc3VlciBmcm9tIHRoZSBTRVQgaXRzZWxmLuKAnQ0KDQogIDUuICBHdWlkYW5j ZSBmb3IgU2lnbmluZyBTRVRzDQpUaGUgdGV4dCBpbiB0aGUgbGFzdCBwYXJhZ3JhcGggb2Ygc2Vj dGlvbiA0LjEgaXMgdW5jbGVhciB0byBtZS4gSXQgc2VlbXMgdG8gc3VnZ2VzdCB0aGF0IGl0IGlz IHNhZmUgdG8gc2VuZCB1bnNpZ25lZCBKV1RzIG92ZXIgYSBjaGFubmVsIHRoYXQgbGFja3MgdHJh bnNwb3J0LWxheWVyIHNlY3VyaXR5LCBzbyBsb25nIGFzIHJlcXVlc3RzIGluY2x1ZGUgYSBiZWFy ZXIgdG9rZW4gb3IgdXNlIEJhc2ljIEF1dGhlbnRpY2F0aW9uLiBBbSBJIG1pc3JlYWRpbmcgdGhp cz8gSXQgc2VlbXMgY291bnRlciB0byB0aGUgZ3VpZGFuY2UgZ2l2ZW4gZWFybGllciBpbiB0aGUg c2FtZSBzZWN0aW9uLg0KDQogIDYuICBEaXN0aW5ndWlzaGluZyBTRVRzIGZyb20gb3RoZXIga2lu ZHMgb2YgSldUcw0KVGhlIGxhc3Qgc2VudGVuY2Ugb2YgdGhlIGZpcnN0IHBhcmFncmFwaCBvZiBz ZWN0aW9uIDQuNyBzZWVtcyBpbXBvc3NpYmxlIHRvIG1lLiBQcm9maWxpbmcgU3BlY2lmaWNhdGlv bnMgY2Fubm90IGJlIHNvbGVseSByZXNwb25zaWJsZSBmb3IgZW5zdXJpbmcgaW5jb21wYXRpYmls aXR5IHdpdGggYWxsIGZ1dHVyZSBKV1QgcHJvZmlsZXMuIFRoZXkgY2FuIGF0IGJlc3QgZW5zdXJl IGluY29tcGF0aWJpbGl0eSB3aXRoIGV4aXN0aW5nIEpXVCBwcm9maWxlcyBhbmQgYmUgY29tcGF0 aWJsZSB3aXRoIGEgc3RhbmRhcmQgbWVjaGFuaXNtIGJ5IHdoaWNoIGZ1dHVyZSBKV1QgcHJvZmls ZXMgbWF5IGVuc3VyZSBpbmNvbXBhdGliaWxpdHkgKGUuZy4gdGhlIOKAnHNlY2V2ZW50K2p3dOKA nSB0eXAgaGVhZGVyKS4gSXQgbWF5IGJlIGVub3VnaCB0byBzdHJpa2UgdGhlIOKAnChvciBvdGhl cinigJ0gdGV4dCBmcm9tIHRoaXMgc2VudGVuY2UuDQoNCg0KLS0NCkFubmFiZWxsZSBSaWNoYXJk IEJhY2ttYW4NCklkZW50aXR5IFNlcnZpY2VzDQoNCg0KRnJvbTogSWQtZXZlbnQgPGlkLWV2ZW50 LWJvdW5jZXNAaWV0Zi5vcmc+IG9uIGJlaGFsZiBvZiAiTS5MaXphckBPQ0ciIDxtLmxpemFyQG9w ZW5jb25zZW50Z3JvdXAuY29tPg0KRGF0ZTogVHVlc2RheSwgQXVndXN0IDEsIDIwMTcgYXQgOTox NyBBTQ0KVG86IE1pa2UgSm9uZXMgPE1pY2hhZWwuSm9uZXNAbWljcm9zb2Z0LmNvbT4NCkNjOiBZ YXJvbiBTaGVmZmVyIDx5YXJvbmYuaWV0ZkBnbWFpbC5jb20+LCBTZWNFdmVudCA8aWQtZXZlbnRA aWV0Zi5vcmc+DQpTdWJqZWN0OiBSZTogW0lkLWV2ZW50XSBXRyBMYXN0IENhbGwgZm9yIGRyYWZ0 LWlldGYtc2VjZXZlbnQtdG9rZW4tMDINCg0KKzEgb24gZXhpc3RpbmcgdGV4dCAuDQoNCkFncmVl IHRoZSBkb2N1bWVudCBpcyByZWFkeSB0byBwdWJsaXNoDQoNCi0gTWFyaw0KDQpPbiAzMSBKdWwg MjAxNywgYXQgMTY6NTMsIE1pa2UgSm9uZXMgPE1pY2hhZWwuSm9uZXNAbWljcm9zb2Z0LmNvbTxt YWlsdG86TWljaGFlbC5Kb25lc0BtaWNyb3NvZnQuY29tPj4gd3JvdGU6DQoNCkkgYmVsaWV2ZSB0 aGF0IHRoZSBzcGVjaWZpY2F0aW9uIGlzIHJlYWR5IHRvIHB1Ymxpc2ggYXMtaXMuICBJdCBhbHJl YWR5IG1lZXRzIHRoZSBuZWVkcyBvZiB0aGUga25vd24gdXNlIGNhc2VzIGFuZCBpcyBpbiBwcm9k dWN0aW9uIHVzZS4NCg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgIC0tIE1pa2UNCg0KRnJvbTogSWQtZXZlbnQgW21haWx0bzpp ZC1ldmVudC1ib3VuY2VzQGlldGYub3JnXSBPbiBCZWhhbGYgT2YgWWFyb24gU2hlZmZlcg0KU2Vu dDogTW9uZGF5LCBKdWx5IDMxLCAyMDE3IDE6NDAgUE0NClRvOiBTZWNFdmVudCA8aWQtZXZlbnRA aWV0Zi5vcmc8bWFpbHRvOmlkLWV2ZW50QGlldGYub3JnPj4NClN1YmplY3Q6IFtJZC1ldmVudF0g V0cgTGFzdCBDYWxsIGZvciBkcmFmdC1pZXRmLXNlY2V2ZW50LXRva2VuLTAyDQoNClRoaXMgaXMg dG8gYW5ub3VuY2Ugd29ya2luZyBncm91cCBsYXN0IGNhbGwgb24gdGhpcyBkcmFmdCAoaHR0cHM6 Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJhZnQtaWV0Zi1zZWNldmVudC10b2tlbi8pLg0K DQpQbGVhc2Ugc2VuZCB5b3VyIGNvbW1lbnRzIHRvIHRoZSBsaXN0LiBFdmVuIGlmIHlvdSBhcmUg cGVyZmVjdGx5IGhhcHB5IHdpdGggdGhlIGRyYWZ0LCBwbGVhc2UgbGV0IHVzIGtub3cgdGhhdCB5 b3Ugc3VwcG9ydCBpdHMgcHVibGljYXRpb24gYXMtaXMgYnkgcG9zdGluZyB0byB0aGUgbGlzdC4N Cg0KQmVjYXVzZSBvZiB0aGUgc3VtbWVyIGhvbGlkYXlzLCB0aGlzIGxhc3QgY2FsbCBpcyBvcGVu IGZvciAzIHdlZWtzLCB1bnRpbCBBdWcuIDIxLg0KDQpUaGFua3MsDQogICAgRGljayBhbmQgWWFy b24NCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQpJZC1l dmVudCBtYWlsaW5nIGxpc3QNCklkLWV2ZW50QGlldGYub3JnPG1haWx0bzpJZC1ldmVudEBpZXRm Lm9yZz4NCmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vaWQtZXZlbnQNCg0K DQo= --_000_72B8E7CA3EB64194BB77CD46062FDFB7amazoncom_ Content-Type: text/html; charset="utf-8" Content-ID: <5D244F26996AB84596B4E7E525DFFE22@amazon.com> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iVGl0bGUiIGNvbnRlbnQ9IiI+DQo8bWV0YSBuYW1lPSJLZXl3b3JkcyIgY29udGVu dD0iIj4NCjxtZXRhIG5hbWU9IkdlbmVyYXRvciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUg KGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxlPjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8N CkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0 IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJ cGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAyIDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8N CnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBpbjsN CgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWls eToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21z by1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRl cmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFuLk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHls ZS1wcmlvcml0eTo5OTsNCgljb2xvcjpwdXJwbGU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGlu ZTt9DQpwLk1zb0xpc3RQYXJhZ3JhcGgsIGxpLk1zb0xpc3RQYXJhZ3JhcGgsIGRpdi5Nc29MaXN0 UGFyYWdyYXBoDQoJe21zby1zdHlsZS1wcmlvcml0eTozNDsNCgltYXJnaW4tdG9wOjBpbjsNCglt YXJnaW4tcmlnaHQ6MGluOw0KCW1hcmdpbi1ib3R0b206MGluOw0KCW1hcmdpbi1sZWZ0Oi41aW47 DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1mYW1p bHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0Kc3Bhbi5hcHBsZS1jb252ZXJ0ZWQtc3BhY2UNCgl7 bXNvLXN0eWxlLW5hbWU6YXBwbGUtY29udmVydGVkLXNwYWNlO30NCnNwYW4uRW1haWxTdHlsZTE4 DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsLXJlcGx5Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJp IixzYW5zLXNlcmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0Kc3Bhbi5tc29JbnMNCgl7bXNvLXN0 eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJbXNvLXN0eWxlLW5hbWU6IiI7DQoJdGV4dC1kZWNvcmF0 aW9uOnVuZGVybGluZTsNCgljb2xvcjp0ZWFsO30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHls ZS10eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7fQ0KQHBhZ2UgV29yZFNlY3Rp b24xDQoJe3NpemU6OC41aW4gMTEuMGluOw0KCW1hcmdpbjoxLjBpbiAxLjBpbiAxLjBpbiAxLjBp bjt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi8qIExpc3QgRGVm aW5pdGlvbnMgKi8NCkBsaXN0IGwwDQoJe21zby1saXN0LWlkOjYxNjI1NzU2NTsNCgltc28tbGlz dC10eXBlOmh5YnJpZDsNCgltc28tbGlzdC10ZW1wbGF0ZS1pZHM6MTIwODUyOTc2MiA2NzY5ODcw MyA2NzY5ODcxMyA2NzY5ODcxNSA2NzY5ODcwMyA2NzY5ODcxMyA2NzY5ODcxNSA2NzY5ODcwMyA2 NzY5ODcxMyA2NzY5ODcxNTt9DQpAbGlzdCBsMDpsZXZlbDENCgl7bXNvLWxldmVsLXRhYi1zdG9w Om5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0u MjVpbjt9DQpAbGlzdCBsMDpsZXZlbDINCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YWxwaGEt bG93ZXI7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3Np dGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsMDpsZXZlbDMNCgl7bXNv LWxldmVsLW51bWJlci1mb3JtYXQ6cm9tYW4tbG93ZXI7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5v bmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpyaWdodDsNCgl0ZXh0LWluZGVudDotOS4w cHQ7fQ0KQGxpc3QgbDA6bGV2ZWw0DQoJe21zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1s ZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3Qg bDA6bGV2ZWw1DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmFscGhhLWxvd2VyOw0KCW1zby1s ZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0 ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDA6bGV2ZWw2DQoJe21zby1sZXZlbC1udW1iZXIt Zm9ybWF0OnJvbWFuLWxvd2VyOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZl bC1udW1iZXItcG9zaXRpb246cmlnaHQ7DQoJdGV4dC1pbmRlbnQ6LTkuMHB0O30NCkBsaXN0IGww OmxldmVsNw0KCXttc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBv c2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGwwOmxldmVsOA0KCXtt c28tbGV2ZWwtbnVtYmVyLWZvcm1hdDphbHBoYS1sb3dlcjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6 bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4y NWluO30NCkBsaXN0IGwwOmxldmVsOQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpyb21hbi1s b3dlcjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0 aW9uOnJpZ2h0Ow0KCXRleHQtaW5kZW50Oi05LjBwdDt9DQpvbA0KCXttYXJnaW4tYm90dG9tOjBp bjt9DQp1bA0KCXttYXJnaW4tYm90dG9tOjBpbjt9DQotLT48L3N0eWxlPg0KPC9oZWFkPg0KPGJv ZHkgYmdjb2xvcj0id2hpdGUiIGxhbmc9IkVOLVVTIiBsaW5rPSJibHVlIiB2bGluaz0icHVycGxl Ij4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5UaGFu a3MgZm9yIGFsbCB0aGUgd29yayBvbiB0aGlzISBJdCB3YXMgbXkgdW5kZXJzdGFuZGluZyB0aGF0 IHRoZXJlIHdhcyBhbiBvcGVuIGl0ZW0gZnJvbSBQcmFndWUgcmVnYXJkaW5nIHdoZXRoZXIgdG8g ZXhwbGljaXRseSBkZWNsYXJlIHRoZSBldmVudHPigJkgcHJvZmlsaW5nIHNwZWNpZmljYXRpb24g aW4gdGhlIFNFVC4gSGFzIHRoaXMgYmVlbiBkaXNjdXNzZWQgZnVydGhlciwgb3IgZG8gd2Ugc3Rp bGwgbmVlZA0KIHRvIGNsb3NlIG9uIGl0PzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5JIGhhdmUg c2V2ZXJhbCBjb21tZW50cy9xdWVzdGlvbnMgb24gdGhlIGN1cnJlbnQgZHJhZnQ6PG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxvbCBz dHlsZT0ibWFyZ2luLXRvcDowaW4iIHN0YXJ0PSIxIiB0eXBlPSIxIj4NCjxsaSBjbGFzcz0iTXNv TGlzdFBhcmFncmFwaCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjBpbjttc28tbGlzdDpsMCBsZXZlbDEg bGZvMSI+PGI+4oCcUHJvZmlsZSBTcGVjaWZpY2F0aW9u4oCdIHZzLiDigJxQcm9maWxpbmcgU3Bl Y2lmaWNhdGlvbuKAnTwvYj48YnI+DQpUaGVyZSBhcmUgYSBoYW5kZnVsIG9mIGluc3RhbmNlcyBv ZiB0aGUgZm9ybWVyIHRoYXQgbmVlZCB0byBiZSBjaGFuZ2VkIHRvIHRoZSBsYXR0ZXIsIHRvIG1h dGNoIHRoZSB0ZXJtIGFzIGRlZmluZWQgaW4gc2VjdGlvbiAxLjI6PG86cD48L286cD4NCjxvbCBz dHlsZT0ibWFyZ2luLXRvcDowaW4iIHN0YXJ0PSIxIiB0eXBlPSJhIj4NCjxsaSBjbGFzcz0iTXNv TGlzdFBhcmFncmFwaCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjBpbjttc28tbGlzdDpsMCBsZXZlbDIg bGZvMSI+SW4gdGhlIOKAnHN1YuKAnSBkZWZpbml0aW9uIGluIHNlY3Rpb24gMS4yPG86cD48L286 cD48L2xpPjxsaSBjbGFzcz0iTXNvTGlzdFBhcmFncmFwaCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjBp bjttc28tbGlzdDpsMCBsZXZlbDIgbGZvMSI+SW4gc2VjdGlvbiAzPG86cD48L286cD48L2xpPjxs aSBjbGFzcz0iTXNvTGlzdFBhcmFncmFwaCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjBpbjttc28tbGlz dDpsMCBsZXZlbDIgbGZvMSI+SW4gc2VjdGlvbiA0LjI8bzpwPjwvbzpwPjwvbGk+PC9vbD4NCjwv bGk+PGxpIGNsYXNzPSJNc29MaXN0UGFyYWdyYXBoIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MGluO21z by1saXN0OmwwIGxldmVsMSBsZm8xIj48Yj5Ob3RlIHJlZ2FyZGluZyBTdWJqZWN0IElzc3VlciB2 cy4gU0VUIElzc3VlcjwvYj48YnI+DQpUaGUgbm90ZSByZWdhcmRpbmcgdGhlIHBvdGVudGlhbCBm b3IgU3ViamVjdCBhbmQgU0VUIElzc3VlciBtaXNtYXRjaCAoaW4gdGhlIOKAnGlzc+KAnSBkZWZp bml0aW9uIGluIHNlY3Rpb24gMS4yKSBpcyBJIHRoaW5rIG1vcmUgcHJlc2NyaXB0aXZlIHRoYW4g aW50ZW5kZWQuIEFzIHdyaXR0ZW4sIGl0IG1hbmRhdGVzIHBsYWNpbmcgdGhlIFN1YmplY3TigJlz IElzc3VlciBpbiBhbiDigJxpc3PigJ0gdmFsdWUgd2l0aGluIHRoZSBldmVudCBwYXlsb2FkLCBi dXQgZG9lcw0KIG5vdCBkZWZpbmUgYSBmb3JtYXQgb3Igc3RydWN0dXJlIGZvciB0aGlzIHZhbHVl LiBUaGUgbG9naWNhbCBmb3JtYXQg4oCTIHRoYXQgb2YgdGhlIOKAnGlzc+KAnSBKV1QgY2xhaW0g 4oCTIG1heSBvciBtYXkgbm90IGJlIGFwcHJvcHJpYXRlLCBkZXBlbmRpbmcgb24gdGhlIG5hdHVy ZSBvZiB0aGUgZXZlbnQgYW5kIGl0cyBTdWJqZWN0LiBJIHN1Z2dlc3QgcmVtb3ZpbmcgdGhpcyBu b3RlIGFuZCBjb3ZlcmluZyB0aGlzIGNvbmNlcm4gZWxzZXdoZXJlIChzZWUgIzQNCiBiZWxvdywg cmU6IFN1YmplY3QgSWRlbnRpZmljYXRpb24pLjxicj4NCjxicj4NCjxvOnA+PC9vOnA+PC9saT48 bGkgY2xhc3M9Ik1zb0xpc3RQYXJhZ3JhcGgiIHN0eWxlPSJtYXJnaW4tbGVmdDowaW47bXNvLWxp c3Q6bDAgbGV2ZWwxIGxmbzEiPjxiPkV4cGxpY2l0IFR5cGluZyBvZiBTRVRzPC9iPjxicj4NCkkg c3VnZ2VzdCByZW1vdmluZyB0aGUgdGV4dCDigJxpZiB0aGUgU0VUIGNvdWxkIGJlIHVzZWQgaW4g YW4gYXBwbGljYXRpb24gY29udGV4dCBpbiB3aGljaCBpdCBjb3VsZCBiZSBjb25mdXNlZCB3aXRo IG90aGVyIGtpbmRzIG9mIEpXVHPigJ0gZnJvbSB0aGUgZmlyc3QgcGFyYWdyYXBoIG9mIHNlY3Rp b24gMi4yLCBtYWtpbmcgdGhlIHNlY2V2ZW50JiM0Mztqd3QgdHlwIGhlYWRlciBtYW5kYXRvcnkg dG8gaW1wbGVtZW50IGZvciBhbGwgU0VUcy4gVGhpcyBjb25kaXRpb25hbA0KIGlzIGltcG9zc2li bGUgdG8gZXZhbHVhdGUsIGFzIG5ldyB0eXBlcyBvZiBKV1RzIHdpbGwgYmUgaW50cm9kdWNlZCBv dmVyIHRpbWUuIEp1c3QgY29uc2lkZXJpbmcgZXhpc3RpbmcgSldUcywgaXQgaXMgYSBsb3QgdG8g YXNrIGZvciBQcm9maWxpbmcgU3BlYyBhdXRob3JzIHRvIGZ1bGx5IGV4YW1pbmUgdGhlIGNvbnRl bnRzIGFuZCB1c2FnZSBvZiBldmVyeSBleGlzdGluZyBKV1QuIE1hbmRhdGluZyB1c2Ugb2YgdHlw IGZvciBTRVRzIHRha2VzIHRoaXMNCiBsb2FkIG9mZiBvZiBQcm9maWxpbmcgU3BlYyBhdXRob3Jz IGFuZCBpbnN1cmVzIHRoYXQgZnV0dXJlIHNwZWNzIGhhdmUgYSBjb25zaXN0ZW50LCByZWxpYWJs ZSB3YXkgdG8gZGVmZW5kIGFnYWluc3QgSldUIHR5cGUgY29uZnVzaW9uLjxicj4NCjxicj4NCjxv OnA+PC9vOnA+PC9saT48bGkgY2xhc3M9Ik1zb0xpc3RQYXJhZ3JhcGgiIHN0eWxlPSJtYXJnaW4t bGVmdDowaW47bXNvLWxpc3Q6bDAgbGV2ZWwxIGxmbzEiPjxiPlJlcXVpcmVtZW50cyBmb3IgU0VU IFByb2ZpbGVzOiBTdWJqZWN0IElkZW50aWZpY2F0aW9uPC9iPjxicj4NCkkgc3VnZ2VzdCBhZGRp bmcgdGV4dCBhbG9uZyB0aGUgbGluZXMgb2Yg4oCcUHJvZmlsaW5nIFNwZWNpZmljYXRpb25zIE1V U1QgZGVmaW5lIGZvciBlYWNoIG9mIHRoZWlyIGV2ZW50cyBob3cgdGhlIFN1YmplY3QgaXMgaWRl bnRpZmllZCBpbiB0aGUgU0VULCBhcyB3ZWxsIGFzIGhvdyB0byBhZGRyZXNzIGNvbmZsaWN0cyB0 aGUgZXZlbnQgU3ViamVjdOKAmXMgSXNzdWVyIGFuZCB0aGUgU0VUIElzc3VlciBpZiBhcHBsaWNh YmxlLiBJdCBpcyBOT1QgUkVDT01NRU5ERUQNCiBmb3IgUHJvZmlsaW5nIFNwZWNpZmljYXRpb25z IHRvIHVzZSB0aGUg4oCcc3Vi4oCdIGNsYWltIGluIGNhc2VzIHdoZXJlIHRoZSBTdWJqZWN0IGlz IG5vdCBnbG9iYWxseSB1bmlxdWUgYW5kIGhhcyBhIGRpZmZlcmVudCBJc3N1ZXIgZnJvbSB0aGUg U0VUIGl0c2VsZi7igJ08YnI+DQo8YnI+DQo8bzpwPjwvbzpwPjwvbGk+PGxpIGNsYXNzPSJNc29M aXN0UGFyYWdyYXBoIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MGluO21zby1saXN0OmwwIGxldmVsMSBs Zm8xIj48Yj5HdWlkYW5jZSBmb3IgU2lnbmluZyBTRVRzPC9iPjxicj4NClRoZSB0ZXh0IGluIHRo ZSBsYXN0IHBhcmFncmFwaCBvZiBzZWN0aW9uIDQuMSBpcyB1bmNsZWFyIHRvIG1lLiBJdCBzZWVt cyB0byBzdWdnZXN0IHRoYXQgaXQgaXMgc2FmZSB0byBzZW5kIHVuc2lnbmVkIEpXVHMgb3ZlciBh IGNoYW5uZWwgdGhhdCBsYWNrcyB0cmFuc3BvcnQtbGF5ZXIgc2VjdXJpdHksIHNvIGxvbmcgYXMg cmVxdWVzdHMgaW5jbHVkZSBhIGJlYXJlciB0b2tlbiBvciB1c2UgQmFzaWMgQXV0aGVudGljYXRp b24uIEFtIEkgbWlzcmVhZGluZw0KIHRoaXM/IEl0IHNlZW1zIGNvdW50ZXIgdG8gdGhlIGd1aWRh bmNlIGdpdmVuIGVhcmxpZXIgaW4gdGhlIHNhbWUgc2VjdGlvbi48YnI+DQo8YnI+DQo8bzpwPjwv bzpwPjwvbGk+PGxpIGNsYXNzPSJNc29MaXN0UGFyYWdyYXBoIiBzdHlsZT0ibWFyZ2luLWxlZnQ6 MGluO21zby1saXN0OmwwIGxldmVsMSBsZm8xIj48Yj5EaXN0aW5ndWlzaGluZyBTRVRzIGZyb20g b3RoZXIga2luZHMgb2YgSldUczwvYj48YnI+DQpUaGUgbGFzdCBzZW50ZW5jZSBvZiB0aGUgZmly c3QgcGFyYWdyYXBoIG9mIHNlY3Rpb24gNC43IHNlZW1zIGltcG9zc2libGUgdG8gbWUuIFByb2Zp bGluZyBTcGVjaWZpY2F0aW9ucyBjYW5ub3QgYmUgc29sZWx5IHJlc3BvbnNpYmxlIGZvciBlbnN1 cmluZyBpbmNvbXBhdGliaWxpdHkgd2l0aCBhbGwgZnV0dXJlIEpXVCBwcm9maWxlcy4gVGhleSBj YW4gYXQgYmVzdCBlbnN1cmUgaW5jb21wYXRpYmlsaXR5IHdpdGggZXhpc3RpbmcgSldUIHByb2Zp bGVzDQogYW5kIGJlIGNvbXBhdGlibGUgd2l0aCBhIHN0YW5kYXJkIG1lY2hhbmlzbSBieSB3aGlj aCBmdXR1cmUgSldUIHByb2ZpbGVzIG1heSBlbnN1cmUgaW5jb21wYXRpYmlsaXR5IChlLmcuIHRo ZSDigJxzZWNldmVudCYjNDM7and04oCdIHR5cCBoZWFkZXIpLiBJdCBtYXkgYmUgZW5vdWdoIHRv IHN0cmlrZSB0aGUg4oCcKG9yIG90aGVyKeKAnSB0ZXh0IGZyb20gdGhpcyBzZW50ZW5jZS48YnI+ DQo8YnI+DQo8Yj48bzpwPjwvbzpwPjwvYj48L2xpPjwvb2w+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9t YW4mcXVvdDssc2VyaWYiPi0tJm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj5Bbm5hYmVsbGUgUmljaGFyZCBCYWNrbWFu PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7 LHNlcmlmIj5JZGVudGl0eSBTZXJ2aWNlczxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2Jv cmRlci10b3A6c29saWQgI0I1QzRERiAxLjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGluIj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2Nv bG9yOmJsYWNrIj5Gcm9tOiA8L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0 O2NvbG9yOmJsYWNrIj5JZC1ldmVudCAmbHQ7aWQtZXZlbnQtYm91bmNlc0BpZXRmLm9yZyZndDsg b24gYmVoYWxmIG9mICZxdW90O00uTGl6YXJAT0NHJnF1b3Q7ICZsdDttLmxpemFyQG9wZW5jb25z ZW50Z3JvdXAuY29tJmd0Ozxicj4NCjxiPkRhdGU6IDwvYj5UdWVzZGF5LCBBdWd1c3QgMSwgMjAx NyBhdCA5OjE3IEFNPGJyPg0KPGI+VG86IDwvYj5NaWtlIEpvbmVzICZsdDtNaWNoYWVsLkpvbmVz QG1pY3Jvc29mdC5jb20mZ3Q7PGJyPg0KPGI+Q2M6IDwvYj5ZYXJvbiBTaGVmZmVyICZsdDt5YXJv bmYuaWV0ZkBnbWFpbC5jb20mZ3Q7LCBTZWNFdmVudCAmbHQ7aWQtZXZlbnRAaWV0Zi5vcmcmZ3Q7 PGJyPg0KPGI+U3ViamVjdDogPC9iPlJlOiBbSWQtZXZlbnRdIFdHIExhc3QgQ2FsbCBmb3IgZHJh ZnQtaWV0Zi1zZWNldmVudC10b2tlbi0wMjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mIzQzOzEgb24gZXhpc3RpbmcgdGV4dCAuJm5ic3A7IDxv OnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+QWdyZWUgdGhlIGRv Y3VtZW50IGlzIHJlYWR5IHRvIHB1Ymxpc2g8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+LSBNYXJrPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206 NS4wcHQiPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPk9uIDMxIEp1bCAyMDE3LCBhdCAx Njo1MywgTWlrZSBKb25lcyAmbHQ7PGEgaHJlZj0ibWFpbHRvOk1pY2hhZWwuSm9uZXNAbWljcm9z b2Z0LmNvbSI+TWljaGFlbC5Kb25lc0BtaWNyb3NvZnQuY29tPC9hPiZndDsgd3JvdGU6PG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9wPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0iYmFja2dyb3Vu ZDp3aGl0ZSI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDIwNjAiPkkgYmVsaWV2ZSB0aGF0IHRoZSBz cGVjaWZpY2F0aW9uIGlzIHJlYWR5IHRvIHB1Ymxpc2ggYXMtaXMuJm5ic3A7IEl0IGFscmVhZHkg bWVldHMgdGhlIG5lZWRzIG9mIHRoZSBrbm93biB1c2UgY2FzZXMgYW5kIGlzIGluIHByb2R1Y3Rp b24gdXNlLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJiYWNrZ3JvdW5kOndoaXRlIj48c3BhbiBzdHlsZT0iY29sb3I6IzAw MjA2MCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9ImJhY2tncm91bmQ6d2hpdGUiPjxzcGFuIHN0eWxlPSJjb2xv cjojMDAyMDYwIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgLS0gTWlrZTwv c3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJiYWNrZ3JvdW5kOndoaXRlIj48c3BhbiBzdHlsZT0iY29sb3I6IzAwMjA2MCI+Jm5i c3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0iYm9y ZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjRTFFMUUxIDEuMHB0O3BhZGRpbmc6My4wcHQgMGlu IDBpbiAwaW4iPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJiYWNrZ3JvdW5k OndoaXRlIj48Yj5Gcm9tOjwvYj48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4m bmJzcDs8L3NwYW4+SWQtZXZlbnQgWzxhIGhyZWY9Im1haWx0bzppZC1ldmVudC1ib3VuY2VzQGll dGYub3JnIj5tYWlsdG86aWQtZXZlbnQtYm91bmNlc0BpZXRmLm9yZzwvYT5dPHNwYW4gY2xhc3M9 ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxiPk9uIEJlaGFsZiBPZjxzcGFu IGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48L2I+WWFyb24NCiBT aGVmZmVyPGJyPg0KPGI+U2VudDo8L2I+PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFj ZSI+Jm5ic3A7PC9zcGFuPk1vbmRheSwgSnVseSAzMSwgMjAxNyAxOjQwIFBNPGJyPg0KPGI+VG86 PC9iPjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj5TZWNF dmVudCAmbHQ7PGEgaHJlZj0ibWFpbHRvOmlkLWV2ZW50QGlldGYub3JnIj5pZC1ldmVudEBpZXRm Lm9yZzwvYT4mZ3Q7PGJyPg0KPGI+U3ViamVjdDo8L2I+PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZl cnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPltJZC1ldmVudF0gV0cgTGFzdCBDYWxsIGZvciBkcmFm dC1pZXRmLXNlY2V2ZW50LXRva2VuLTAyPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9ImJhY2tncm91bmQ6d2hp dGUiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9ImJhY2tncm91bmQ6d2hpdGUiPlRoaXMgaXMgdG8gYW5ub3VuY2Ugd29ya2lu ZyBncm91cCBsYXN0IGNhbGwgb24gdGhpcyBkcmFmdCAoPGEgaHJlZj0iaHR0cHM6Ly9kYXRhdHJh Y2tlci5pZXRmLm9yZy9kb2MvZHJhZnQtaWV0Zi1zZWNldmVudC10b2tlbi8iPjxzcGFuIHN0eWxl PSJjb2xvcjpwdXJwbGUiPmh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LWll dGYtc2VjZXZlbnQtdG9rZW4vPC9zcGFuPjwvYT4pLjxicj4NCjxicj4NClBsZWFzZSBzZW5kIHlv dXIgY29tbWVudHMgdG8gdGhlIGxpc3QuIEV2ZW4gaWYgeW91IGFyZSBwZXJmZWN0bHkgaGFwcHkg d2l0aCB0aGUgZHJhZnQsIHBsZWFzZSBsZXQgdXMga25vdyB0aGF0IHlvdSBzdXBwb3J0IGl0cyBw dWJsaWNhdGlvbiBhcy1pcyBieSBwb3N0aW5nIHRvIHRoZSBsaXN0Ljxicj4NCjxicj4NCkJlY2F1 c2Ugb2YgdGhlIHN1bW1lciBob2xpZGF5cywgdGhpcyBsYXN0IGNhbGwgaXMgb3BlbiBmb3IgMyB3 ZWVrcywgdW50aWwgQXVnLiAyMS48YnI+DQo8YnI+DQpUaGFua3MsPGJyPg0KJm5ic3A7Jm5ic3A7 Jm5ic3A7IERpY2sgYW5kIFlhcm9uPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWY7YmFja2dyb3VuZDp3aGl0ZSI+X19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX188L3NwYW4+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJp ZiI+PGJyPg0KPHNwYW4gc3R5bGU9ImJhY2tncm91bmQ6d2hpdGUiPklkLWV2ZW50IG1haWxpbmcg bGlzdDwvc3Bhbj48YnI+DQo8c3BhbiBzdHlsZT0iYmFja2dyb3VuZDp3aGl0ZSI+PGEgaHJlZj0i bWFpbHRvOklkLWV2ZW50QGlldGYub3JnIj5JZC1ldmVudEBpZXRmLm9yZzwvYT48L3NwYW4+PGJy Pg0KPHNwYW4gc3R5bGU9ImJhY2tncm91bmQ6d2hpdGUiPjxhIGhyZWY9Imh0dHBzOi8vd3d3Lmll dGYub3JnL21haWxtYW4vbGlzdGluZm8vaWQtZXZlbnQiPmh0dHBzOi8vd3d3LmlldGYub3JnL21h aWxtYW4vbGlzdGluZm8vaWQtZXZlbnQ8L2E+PC9zcGFuPjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48YnI+ DQo8YnI+DQo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_72B8E7CA3EB64194BB77CD46062FDFB7amazoncom_-- From nobody Wed Aug 2 12:22:59 2017 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 81853131723 for ; Wed, 2 Aug 2017 12:22:57 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.011 X-Spam-Level: X-Spam-Status: No, score=-5.011 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=1.989, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H2=-2.8, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VCmq7JQX4PbE for ; Wed, 2 Aug 2017 12:22:54 -0700 (PDT) Received: from userp1040.oracle.com (userp1040.oracle.com [156.151.31.81]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B1B9D12ECEF for ; Wed, 2 Aug 2017 12:22:54 -0700 (PDT) Received: from aserv0022.oracle.com (aserv0022.oracle.com [141.146.126.234]) by userp1040.oracle.com (Sentrion-MTA-4.3.2/Sentrion-MTA-4.3.2) with ESMTP id v72JMoMX031290 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK); Wed, 2 Aug 2017 19:22:51 GMT Received: from aserv0121.oracle.com (aserv0121.oracle.com [141.146.126.235]) by aserv0022.oracle.com (8.14.4/8.14.4) with ESMTP id v72JMowO015841 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK); Wed, 2 Aug 2017 19:22:50 GMT Received: from abhmp0004.oracle.com (abhmp0004.oracle.com [141.146.116.10]) by aserv0121.oracle.com (8.14.4/8.13.8) with ESMTP id v72JMnkb005096; Wed, 2 Aug 2017 19:22:49 GMT Received: from [10.0.1.37] (/24.86.190.97) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Wed, 02 Aug 2017 12:22:49 -0700 From: Phil Hunt Message-Id: Content-Type: multipart/alternative; boundary="Apple-Mail=_95A11930-0FE7-4B86-8586-FF99F0EFACEF" Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\)) Date: Wed, 2 Aug 2017 12:22:48 -0700 In-Reply-To: <72B8E7CA-3EB6-4194-BB77-CD46062FDFB7@amazon.com> Cc: SecEvent To: "Richard Backman, Annabelle" References: <72B8E7CA-3EB6-4194-BB77-CD46062FDFB7@amazon.com> X-Mailer: Apple Mail (2.3273) X-Source-IP: aserv0022.oracle.com [141.146.126.234] Archived-At: Subject: Re: [Id-event] WG Last Call for draft-ietf-secevent-token-02 X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 02 Aug 2017 19:22:58 -0000 --Apple-Mail=_95A11930-0FE7-4B86-8586-FF99F0EFACEF Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Annabelle, Thanks for the comments. Many of these items have been discussed at = length but many members strongly want to leave as is. I=E2=80=99ll = await further group discussion. Re: item 5 - I think I need to re-write that based on feedback from Nat = and Marius. Stay tuned. Some of these items are also being discussed in the new JWT BCP = document. Maybe we should hold the SET Token spec so we can refer to = the BCP and publish together? That said, I know many want this = finalized ASAP. Phil Oracle Corporation, Identity Cloud Services Architect & Standards @independentid www.independentid.com = phil.hunt@oracle.com = > On Aug 2, 2017, at 11:43 AM, Richard Backman, Annabelle = > wrote: >=20 > Thanks for all the work on this! It was my understanding that there = was an open item from Prague regarding whether to explicitly declare the = events=E2=80=99 profiling specification in the SET. Has this been = discussed further, or do we still need to close on it? > =20 > I have several comments/questions on the current draft: > =20 > =E2=80=9CProfile Specification=E2=80=9D vs. =E2=80=9CProfiling = Specification=E2=80=9D > There are a handful of instances of the former that need to be changed = to the latter, to match the term as defined in section 1.2: > In the =E2=80=9Csub=E2=80=9D definition in section 1.2 > In section 3 > In section 4.2 > Note regarding Subject Issuer vs. SET Issuer > The note regarding the potential for Subject and SET Issuer mismatch = (in the =E2=80=9Ciss=E2=80=9D definition in section 1.2) is I think more = prescriptive than intended. As written, it mandates placing the = Subject=E2=80=99s Issuer in an =E2=80=9Ciss=E2=80=9D value within the = event payload, but does not define a format or structure for this value. = The logical format =E2=80=93 that of the =E2=80=9Ciss=E2=80=9D JWT claim = =E2=80=93 may or may not be appropriate, depending on the nature of the = event and its Subject. I suggest removing this note and covering this = concern elsewhere (see #4 below, re: Subject Identification). >=20 > Explicit Typing of SETs > I suggest removing the text =E2=80=9Cif the SET could be used in an = application context in which it could be confused with other kinds of = JWTs=E2=80=9D from the first paragraph of section 2.2, making the = secevent+jwt typ header mandatory to implement for all SETs. This = conditional is impossible to evaluate, as new types of JWTs will be = introduced over time. Just considering existing JWTs, it is a lot to ask = for Profiling Spec authors to fully examine the contents and usage of = every existing JWT. Mandating use of typ for SETs takes this load off of = Profiling Spec authors and insures that future specs have a consistent, = reliable way to defend against JWT type confusion. >=20 > Requirements for SET Profiles: Subject Identification > I suggest adding text along the lines of =E2=80=9CProfiling = Specifications MUST define for each of their events how the Subject is = identified in the SET, as well as how to address conflicts the event = Subject=E2=80=99s Issuer and the SET Issuer if applicable. It is NOT = RECOMMENDED for Profiling Specifications to use the =E2=80=9Csub=E2=80=9D = claim in cases where the Subject is not globally unique and has a = different Issuer from the SET itself.=E2=80=9D >=20 > Guidance for Signing SETs > The text in the last paragraph of section 4.1 is unclear to me. It = seems to suggest that it is safe to send unsigned JWTs over a channel = that lacks transport-layer security, so long as requests include a = bearer token or use Basic Authentication. Am I misreading this? It seems = counter to the guidance given earlier in the same section. >=20 > Distinguishing SETs from other kinds of JWTs > The last sentence of the first paragraph of section 4.7 seems = impossible to me. Profiling Specifications cannot be solely responsible = for ensuring incompatibility with all future JWT profiles. They can at = best ensure incompatibility with existing JWT profiles and be compatible = with a standard mechanism by which future JWT profiles may ensure = incompatibility (e.g. the =E2=80=9Csecevent+jwt=E2=80=9D typ header). It = may be enough to strike the =E2=80=9C(or other)=E2=80=9D text from this = sentence. >=20 > =20 > --=20 > Annabelle Richard Backman > Identity Services > =20 > =20 > From: Id-event > on behalf of "M.Lizar@OCG" = > > Date: Tuesday, August 1, 2017 at 9:17 AM > To: Mike Jones > > Cc: Yaron Sheffer >, SecEvent > > Subject: Re: [Id-event] WG Last Call for draft-ietf-secevent-token-02 > =20 > +1 on existing text . =20 > =20 > Agree the document is ready to publish > =20 > - Mark > =20 >> On 31 Jul 2017, at 16:53, Mike Jones > wrote: >> =20 >> I believe that the specification is ready to publish as-is. It = already meets the needs of the known use cases and is in production use. >> =20 >> -- = Mike >> =20 >> From: Id-event [mailto:id-event-bounces@ietf.org = ] On Behalf Of Yaron Sheffer >> Sent: Monday, July 31, 2017 1:40 PM >> To: SecEvent > >> Subject: [Id-event] WG Last Call for draft-ietf-secevent-token-02 >> =20 >> This is to announce working group last call on this draft = (https://datatracker.ietf.org/doc/draft-ietf-secevent-token/ = ). >>=20 >> Please send your comments to the list. Even if you are perfectly = happy with the draft, please let us know that you support its = publication as-is by posting to the list. >>=20 >> Because of the summer holidays, this last call is open for 3 weeks, = until Aug. 21. >>=20 >> Thanks, >> Dick and Yaron >> _______________________________________________ >> Id-event mailing list >> Id-event@ietf.org >> https://www.ietf.org/mailman/listinfo/id-event = >=20 >=20 > _______________________________________________ > Id-event mailing list > Id-event@ietf.org > = https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__www.ietf.org_mailma= n_listinfo_id-2Devent&d=3DDwICAg&c=3DRoP1YumCXCgaWHvlZYR8PQcxBKCX5YTpkKY05= 7SbK10&r=3DJBm5biRrKugCH0FkITSeGJxPEivzjWwlNKe4C_lLIGk&m=3DFztSyO9IdR2ly2C= wmu1RhMdXDKw1epjGp_4pel_o_pg&s=3DYwxW95s5oIBrBLkfuiMUIYuzFIcdnVa8Bn1zvZ4Uu= rc&e=3D = =20 --Apple-Mail=_95A11930-0FE7-4B86-8586-FF99F0EFACEF Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8
Annabelle,

Thanks for the comments. Many of these items have been = discussed at length but many members strongly want to leave as is. =  I=E2=80=99ll await further group discussion.

Re: item 5 - I think I = need to re-write that based on feedback from Nat and Marius.  Stay = tuned.

Some of = these items are also being discussed in the new JWT BCP document. =  Maybe we should hold the SET Token spec so we can refer to the BCP = and publish together?  That said, I know many want this finalized = ASAP.

Phil

Oracle Corporation, Identity Cloud = Services Architect & Standards
@independentid
www.independentid.com
phil.hunt@oracle.com

On Aug 2, 2017, at 11:43 AM, Richard Backman, Annabelle = <richanna@amazon.com> wrote:

Thanks for all the = work on this! It was my understanding that there was an open item from = Prague regarding whether to explicitly declare the events=E2=80=99 = profiling specification in the SET. Has this been discussed further, or = do we still need to close on it?
 
I have several comments/questions on = the current draft:
 
  1. =E2=80=9CProfile = Specification=E2=80=9D vs. =E2=80=9CProfiling Specification=E2=80=9DThere are a handful of instances of the former that need to = be changed to the latter, to match the term as defined in section = 1.2:
    1. In the =E2=80=9Csub=E2=80=9D = definition in section 1.2
    2. In section 3
    3. In = section 4.2
  2. Note regarding = Subject Issuer vs. SET Issuer
    The note regarding the = potential for Subject and SET Issuer mismatch (in the =E2=80=9Ciss=E2=80=9D= definition in section 1.2) is I think more prescriptive than intended. = As written, it mandates placing the Subject=E2=80=99s Issuer in an = =E2=80=9Ciss=E2=80=9D value within the event payload, but does not = define a format or structure for this value. The logical format =E2=80=93 = that of the =E2=80=9Ciss=E2=80=9D JWT claim =E2=80=93 may or may not be = appropriate, depending on the nature of the event and its Subject. I = suggest removing this note and covering this concern elsewhere (see #4 = below, re: Subject Identification).

  3. Explicit Typing of SETs
    I suggest removing = the text =E2=80=9Cif the SET could be used in an application context in = which it could be confused with other kinds of JWTs=E2=80=9D from the = first paragraph of section 2.2, making the secevent+jwt typ header = mandatory to implement for all SETs. This conditional is impossible to = evaluate, as new types of JWTs will be introduced over time. Just = considering existing JWTs, it is a lot to ask for Profiling Spec authors = to fully examine the contents and usage of every existing JWT. Mandating = use of typ for SETs takes this load off of Profiling Spec authors and = insures that future specs have a consistent, reliable way to defend = against JWT type confusion.

  4. Requirements for SET Profiles: Subject Identification
    I suggest adding text along the lines of =E2=80=9CProfiling = Specifications MUST define for each of their events how the Subject is = identified in the SET, as well as how to address conflicts the event = Subject=E2=80=99s Issuer and the SET Issuer if applicable. It is NOT = RECOMMENDED for Profiling Specifications to use the =E2=80=9Csub=E2=80=9D = claim in cases where the Subject is not globally unique and has a = different Issuer from the SET itself.=E2=80=9D

  5. Guidance for Signing SETs
    The text in the last paragraph of section 4.1 is unclear to = me. It seems to suggest that it is safe to send unsigned JWTs over a = channel that lacks transport-layer security, so long as requests include = a bearer token or use Basic Authentication. Am I misreading this? It = seems counter to the guidance given earlier in the same section.

  6. Distinguishing = SETs from other kinds of JWTs
    The last sentence of the = first paragraph of section 4.7 seems impossible to me. Profiling = Specifications cannot be solely responsible for ensuring incompatibility = with all future JWT profiles. They can at best ensure incompatibility = with existing JWT profiles and be compatible with a standard mechanism = by which future JWT profiles may ensure incompatibility (e.g. the = =E2=80=9Csecevent+jwt=E2=80=9D typ header). It may be enough to strike = the =E2=80=9C(or other)=E2=80=9D text from this sentence.

 
-- 
Annabelle Richard = Backman
Identity Services
 
 
From: Id-event <id-event-bounces@ietf.org> = on behalf of "M.Lizar@OCG" <m.lizar@openconsentgroup.com>
Date: Tuesday, August 1, 2017 = at 9:17 AM
To: Mike Jones <Michael.Jones@microsoft.com>
Cc: Yaron= Sheffer <yaronf.ietf@gmail.com>, SecEvent <id-event@ietf.org>
Subject: Re: [Id-event] WG Last = Call for draft-ietf-secevent-token-02
 
+1 on existing text .  
 
Agree the document is ready to = publish
 
- Mark
 
On 31 Jul = 2017, at 16:53, Mike Jones <Michael.Jones@microsoft.com> wrote:
 
I believe that the = specification is ready to publish as-is.  It already meets the = needs of the known use cases and is in production use.
 
          &nb= sp;            = ;            &= nbsp;           &nb= sp;            = ;    -- Mike
 
From: Id-event [mailto:id-event-bounces@ietf.org] On Behalf = Of Yaron = Sheffer
Sent: Monday, July 31, 2017 1:40 = PM
To: SecEvent <id-event@ietf.org>
Subject: [Id-event] WG Last Call for = draft-ietf-secevent-token-02
 
This is to announce working group = last call on this draft (https://datatracker.ietf.org/doc/draft-ietf-secevent-token/).

Please send your comments to the = list. Even if you are perfectly happy with the draft, please let us know = that you support its publication as-is by posting to the list.

Because of the summer holidays, this last call = is open for 3 weeks, until Aug. 21.

Thanks,
    Dick and Yaron
_______________________________________________
Id-event mailing list
Id-event@ietf.org
https://www.ietf.org/mailman/listinfo/id-event


_______________________________________________
Id-event mailing list
Id-event@ietf.org
https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__www.ietf= .org_mailman_listinfo_id-2Devent&d=3DDwICAg&c=3DRoP1YumCXCgaWHvlZY= R8PQcxBKCX5YTpkKY057SbK10&r=3DJBm5biRrKugCH0FkITSeGJxPEivzjWwlNKe4C_lL= IGk&m=3DFztSyO9IdR2ly2Cwmu1RhMdXDKw1epjGp_4pel_o_pg&s=3DYwxW95s5oI= BrBLkfuiMUIYuzFIcdnVa8Bn1zvZ4Uurc&e=3D 

= --Apple-Mail=_95A11930-0FE7-4B86-8586-FF99F0EFACEF-- From nobody Wed Aug 2 12:54:37 2017 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AE29813215B for ; Wed, 2 Aug 2017 12:54:35 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -12.61 X-Spam-Level: X-Spam-Status: No, score=-12.61 tagged_above=-999 required=5 tests=[AC_DIV_BONANZA=0.001, BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=1.989, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H2=-2.8, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_SPF_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=amazon.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MB2RyAiECFUA for ; Wed, 2 Aug 2017 12:54:33 -0700 (PDT) Received: from smtp-fw-6002.amazon.com (smtp-fw-6002.amazon.com [52.95.49.90]) (using TLSv1.2 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B8FD2127869 for ; Wed, 2 Aug 2017 12:54:32 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=amazon.com; i=@amazon.com; q=dns/txt; s=amazon201209; t=1501703672; x=1533239672; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=x1dUCcC7w/Yfg85BqLE4KJEyYZIhbwnibceSi3NnCIg=; b=L15Y2vc5DCTAG7SckEAGmF6xdwrET3dKG0pttRTy6vcP1fmOMvM5SYwa X9YA3g8epspnekTswd4u+VQXRDXHScTFg8BEhVc5u2s05VxHyX+zxmcCF 23tO/80fH3/HEhWuCSh8r/seSdH1mZStaqjRYRcAljXCOiNnuyLVqKQTF I=; X-IronPort-AV: E=Sophos;i="5.41,312,1498521600"; d="scan'208,217";a="297663094" Received: from iad12-co-svc-p1-lb1-vlan3.amazon.com (HELO email-inbound-relay-71004.iad55.amazon.com) ([10.43.8.6]) by smtp-border-fw-out-6002.iad6.amazon.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 02 Aug 2017 19:54:24 +0000 Received: from EX13MTAUWC001.ant.amazon.com (iad55-ws-svc-p15-lb9-vlan2.iad.amazon.com [10.40.159.162]) by email-inbound-relay-71004.iad55.amazon.com (8.14.7/8.14.7) with ESMTP id v72JsKdi008105 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Wed, 2 Aug 2017 19:54:23 GMT Received: from EX13D11UWC001.ant.amazon.com (10.43.162.151) by EX13MTAUWC001.ant.amazon.com (10.43.162.135) with Microsoft SMTP Server (TLS) id 15.0.1104.5; Wed, 2 Aug 2017 19:54:24 +0000 Received: from EX13D11UWC004.ant.amazon.com (10.43.162.101) by EX13D11UWC001.ant.amazon.com (10.43.162.151) with Microsoft SMTP Server (TLS) id 15.0.1104.5; Wed, 2 Aug 2017 19:54:23 +0000 Received: from EX13D11UWC004.ant.amazon.com ([10.43.162.101]) by EX13D11UWC004.ant.amazon.com ([10.43.162.101]) with mapi id 15.00.1104.000; Wed, 2 Aug 2017 19:54:22 +0000 From: "Richard Backman, Annabelle" To: Phil Hunt CC: SecEvent Thread-Topic: [Id-event] WG Last Call for draft-ietf-secevent-token-02 Thread-Index: AQHTCj1Svuqk/S3glU+hjDHhS1RL1KJuaayAgAFFQACAAUW3gIAAgFUA//+TeQA= Date: Wed, 2 Aug 2017 19:54:22 +0000 Message-ID: <8FD5EE05-408D-4B4F-87BF-A1521EF6E66B@amazon.com> References: <72B8E7CA-3EB6-4194-BB77-CD46062FDFB7@amazon.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/f.23.0.170610 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.43.161.148] Content-Type: multipart/alternative; boundary="_000_8FD5EE05408D4B4F87BFA1521EF6E66Bamazoncom_" MIME-Version: 1.0 Precedence: Bulk Archived-At: Subject: Re: [Id-event] WG Last Call for draft-ietf-secevent-token-02 X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.22 List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 02 Aug 2017 19:54:36 -0000 --_000_8FD5EE05408D4B4F87BFA1521EF6E66Bamazoncom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 UGhpbCwNCg0KQ2FuIHlvdSBiZSBtb3JlIHNwZWNpZmljIGFib3V0IHdoaWNoIGl0ZW1zIGhhdmUg YmVlbiBkaXNjdXNzZWQgYW5kIHdoYXQgdGhlIGNvbnNlbnN1cyB3YXM/IEl0ZW1zIDIgYW5kIDQg dG91Y2ggb24gdGhlIGlzc3VlciBtaXNtYXRjaCBtYXR0ZXIsIGJ1dCBhcmUgYWJvdXQgY2xhcmlm eWluZyByZXF1aXJlbWVudHMgZm9yIHByb2ZpbGluZyBzcGVjaWZpY2F0aW9ucyBhbmQgc28gZmFy IGFzIEkgY2FuIHRlbGwgYXJlIGFsaWduZWQgd2l0aCB0aGUgaW50ZW50aW9ucyBvZiB0aGUgY3Vy cmVudCB0ZXh0IHJlZ2FyZGluZyB0aGUgaGFuZGxpbmcgYW5kIGludGVycHJldGF0aW9uIG9mIHRo ZSDigJxzdWLigJ0gYW5kIOKAnGlzc+KAnSBjbGFpbXMuIFNpbWlsYXJseSBpdGVtIDYgYWRkcmVz c2VzIGEgcHJvZmlsaW5nIHNwZWNpZmljYXRpb24gcmVxdWlyZW1lbnQgcmVsYXRlZCB0byB0aGUg SldUIGNvbmZ1c2lvbiBpc3N1ZSwgYW5kIGRvZXMgbm90IGRldmlhdGUgZnJvbSB0aGUgV0cgY29u c2Vuc3VzIGFzIEkgdW5kZXJzdGFuZCBpdC4NCg0KSXRlbSAxLCBJIHNob3VsZCBob3BlLCBpcyB1 bmNvbnRyb3ZlcnNpYWwuIOKYug0KDQotLQ0KQW5uYWJlbGxlIFJpY2hhcmQgQmFja21hbg0KSWRl bnRpdHkgU2VydmljZXMNCg0KDQpGcm9tOiBJZC1ldmVudCA8aWQtZXZlbnQtYm91bmNlc0BpZXRm Lm9yZz4gb24gYmVoYWxmIG9mIFBoaWwgSHVudCA8cGhpbC5odW50QG9yYWNsZS5jb20+DQpEYXRl OiBXZWRuZXNkYXksIEF1Z3VzdCAyLCAyMDE3IGF0IDEyOjIyIFBNDQpUbzogIlJpY2hhcmQgQmFj a21hbiwgQW5uYWJlbGxlIiA8cmljaGFubmFAYW1hem9uLmNvbT4NCkNjOiBTZWNFdmVudCA8aWQt ZXZlbnRAaWV0Zi5vcmc+DQpTdWJqZWN0OiBSZTogW0lkLWV2ZW50XSBXRyBMYXN0IENhbGwgZm9y IGRyYWZ0LWlldGYtc2VjZXZlbnQtdG9rZW4tMDINCg0KQW5uYWJlbGxlLA0KDQpUaGFua3MgZm9y IHRoZSBjb21tZW50cy4gTWFueSBvZiB0aGVzZSBpdGVtcyBoYXZlIGJlZW4gZGlzY3Vzc2VkIGF0 IGxlbmd0aCBidXQgbWFueSBtZW1iZXJzIHN0cm9uZ2x5IHdhbnQgdG8gbGVhdmUgYXMgaXMuICBJ 4oCZbGwgYXdhaXQgZnVydGhlciBncm91cCBkaXNjdXNzaW9uLg0KDQpSZTogaXRlbSA1IC0gSSB0 aGluayBJIG5lZWQgdG8gcmUtd3JpdGUgdGhhdCBiYXNlZCBvbiBmZWVkYmFjayBmcm9tIE5hdCBh bmQgTWFyaXVzLiAgU3RheSB0dW5lZC4NCg0KU29tZSBvZiB0aGVzZSBpdGVtcyBhcmUgYWxzbyBi ZWluZyBkaXNjdXNzZWQgaW4gdGhlIG5ldyBKV1QgQkNQIGRvY3VtZW50LiAgTWF5YmUgd2Ugc2hv dWxkIGhvbGQgdGhlIFNFVCBUb2tlbiBzcGVjIHNvIHdlIGNhbiByZWZlciB0byB0aGUgQkNQIGFu ZCBwdWJsaXNoIHRvZ2V0aGVyPyAgVGhhdCBzYWlkLCBJIGtub3cgbWFueSB3YW50IHRoaXMgZmlu YWxpemVkIEFTQVAuDQoNClBoaWwNCg0KT3JhY2xlIENvcnBvcmF0aW9uLCBJZGVudGl0eSBDbG91 ZCBTZXJ2aWNlcyBBcmNoaXRlY3QgJiBTdGFuZGFyZHMNCkBpbmRlcGVuZGVudGlkDQp3d3cuaW5k ZXBlbmRlbnRpZC5jb208aHR0cDovL3d3dy5pbmRlcGVuZGVudGlkLmNvbS8+DQpwaGlsLmh1bnRA b3JhY2xlLmNvbTxtYWlsdG86cGhpbC5odW50QG9yYWNsZS5jb20+DQoNCk9uIEF1ZyAyLCAyMDE3 LCBhdCAxMTo0MyBBTSwgUmljaGFyZCBCYWNrbWFuLCBBbm5hYmVsbGUgPHJpY2hhbm5hQGFtYXpv bi5jb208bWFpbHRvOnJpY2hhbm5hQGFtYXpvbi5jb20+PiB3cm90ZToNCg0KVGhhbmtzIGZvciBh bGwgdGhlIHdvcmsgb24gdGhpcyEgSXQgd2FzIG15IHVuZGVyc3RhbmRpbmcgdGhhdCB0aGVyZSB3 YXMgYW4gb3BlbiBpdGVtIGZyb20gUHJhZ3VlIHJlZ2FyZGluZyB3aGV0aGVyIHRvIGV4cGxpY2l0 bHkgZGVjbGFyZSB0aGUgZXZlbnRz4oCZIHByb2ZpbGluZyBzcGVjaWZpY2F0aW9uIGluIHRoZSBT RVQuIEhhcyB0aGlzIGJlZW4gZGlzY3Vzc2VkIGZ1cnRoZXIsIG9yIGRvIHdlIHN0aWxsIG5lZWQg dG8gY2xvc2Ugb24gaXQ/DQoNCkkgaGF2ZSBzZXZlcmFsIGNvbW1lbnRzL3F1ZXN0aW9ucyBvbiB0 aGUgY3VycmVudCBkcmFmdDoNCg0KDQogIDEuICDigJxQcm9maWxlIFNwZWNpZmljYXRpb27igJ0g dnMuIOKAnFByb2ZpbGluZyBTcGVjaWZpY2F0aW9u4oCdDQpUaGVyZSBhcmUgYSBoYW5kZnVsIG9m IGluc3RhbmNlcyBvZiB0aGUgZm9ybWVyIHRoYXQgbmVlZCB0byBiZSBjaGFuZ2VkIHRvIHRoZSBs YXR0ZXIsIHRvIG1hdGNoIHRoZSB0ZXJtIGFzIGRlZmluZWQgaW4gc2VjdGlvbiAxLjI6DQoNCiAg ICAgKiAgIEluIHRoZSDigJxzdWLigJ0gZGVmaW5pdGlvbiBpbiBzZWN0aW9uIDEuMg0KICAgICAq ICAgSW4gc2VjdGlvbiAzDQogICAgICogICBJbiBzZWN0aW9uIDQuMg0KDQogIDEuICBOb3RlIHJl Z2FyZGluZyBTdWJqZWN0IElzc3VlciB2cy4gU0VUIElzc3Vlcg0KVGhlIG5vdGUgcmVnYXJkaW5n IHRoZSBwb3RlbnRpYWwgZm9yIFN1YmplY3QgYW5kIFNFVCBJc3N1ZXIgbWlzbWF0Y2ggKGluIHRo ZSDigJxpc3PigJ0gZGVmaW5pdGlvbiBpbiBzZWN0aW9uIDEuMikgaXMgSSB0aGluayBtb3JlIHBy ZXNjcmlwdGl2ZSB0aGFuIGludGVuZGVkLiBBcyB3cml0dGVuLCBpdCBtYW5kYXRlcyBwbGFjaW5n IHRoZSBTdWJqZWN04oCZcyBJc3N1ZXIgaW4gYW4g4oCcaXNz4oCdIHZhbHVlIHdpdGhpbiB0aGUg ZXZlbnQgcGF5bG9hZCwgYnV0IGRvZXMgbm90IGRlZmluZSBhIGZvcm1hdCBvciBzdHJ1Y3R1cmUg Zm9yIHRoaXMgdmFsdWUuIFRoZSBsb2dpY2FsIGZvcm1hdCDigJMgdGhhdCBvZiB0aGUg4oCcaXNz 4oCdIEpXVCBjbGFpbSDigJMgbWF5IG9yIG1heSBub3QgYmUgYXBwcm9wcmlhdGUsIGRlcGVuZGlu ZyBvbiB0aGUgbmF0dXJlIG9mIHRoZSBldmVudCBhbmQgaXRzIFN1YmplY3QuIEkgc3VnZ2VzdCBy ZW1vdmluZyB0aGlzIG5vdGUgYW5kIGNvdmVyaW5nIHRoaXMgY29uY2VybiBlbHNld2hlcmUgKHNl ZSAjNCBiZWxvdywgcmU6IFN1YmplY3QgSWRlbnRpZmljYXRpb24pLg0KDQoNCiAgMi4gIEV4cGxp Y2l0IFR5cGluZyBvZiBTRVRzDQpJIHN1Z2dlc3QgcmVtb3ZpbmcgdGhlIHRleHQg4oCcaWYgdGhl IFNFVCBjb3VsZCBiZSB1c2VkIGluIGFuIGFwcGxpY2F0aW9uIGNvbnRleHQgaW4gd2hpY2ggaXQg Y291bGQgYmUgY29uZnVzZWQgd2l0aCBvdGhlciBraW5kcyBvZiBKV1Rz4oCdIGZyb20gdGhlIGZp cnN0IHBhcmFncmFwaCBvZiBzZWN0aW9uIDIuMiwgbWFraW5nIHRoZSBzZWNldmVudCtqd3QgdHlw IGhlYWRlciBtYW5kYXRvcnkgdG8gaW1wbGVtZW50IGZvciBhbGwgU0VUcy4gVGhpcyBjb25kaXRp b25hbCBpcyBpbXBvc3NpYmxlIHRvIGV2YWx1YXRlLCBhcyBuZXcgdHlwZXMgb2YgSldUcyB3aWxs IGJlIGludHJvZHVjZWQgb3ZlciB0aW1lLiBKdXN0IGNvbnNpZGVyaW5nIGV4aXN0aW5nIEpXVHMs IGl0IGlzIGEgbG90IHRvIGFzayBmb3IgUHJvZmlsaW5nIFNwZWMgYXV0aG9ycyB0byBmdWxseSBl eGFtaW5lIHRoZSBjb250ZW50cyBhbmQgdXNhZ2Ugb2YgZXZlcnkgZXhpc3RpbmcgSldULiBNYW5k YXRpbmcgdXNlIG9mIHR5cCBmb3IgU0VUcyB0YWtlcyB0aGlzIGxvYWQgb2ZmIG9mIFByb2ZpbGlu ZyBTcGVjIGF1dGhvcnMgYW5kIGluc3VyZXMgdGhhdCBmdXR1cmUgc3BlY3MgaGF2ZSBhIGNvbnNp c3RlbnQsIHJlbGlhYmxlIHdheSB0byBkZWZlbmQgYWdhaW5zdCBKV1QgdHlwZSBjb25mdXNpb24u DQoNCg0KICAzLiAgUmVxdWlyZW1lbnRzIGZvciBTRVQgUHJvZmlsZXM6IFN1YmplY3QgSWRlbnRp ZmljYXRpb24NCkkgc3VnZ2VzdCBhZGRpbmcgdGV4dCBhbG9uZyB0aGUgbGluZXMgb2Yg4oCcUHJv ZmlsaW5nIFNwZWNpZmljYXRpb25zIE1VU1QgZGVmaW5lIGZvciBlYWNoIG9mIHRoZWlyIGV2ZW50 cyBob3cgdGhlIFN1YmplY3QgaXMgaWRlbnRpZmllZCBpbiB0aGUgU0VULCBhcyB3ZWxsIGFzIGhv dyB0byBhZGRyZXNzIGNvbmZsaWN0cyB0aGUgZXZlbnQgU3ViamVjdOKAmXMgSXNzdWVyIGFuZCB0 aGUgU0VUIElzc3VlciBpZiBhcHBsaWNhYmxlLiBJdCBpcyBOT1QgUkVDT01NRU5ERUQgZm9yIFBy b2ZpbGluZyBTcGVjaWZpY2F0aW9ucyB0byB1c2UgdGhlIOKAnHN1YuKAnSBjbGFpbSBpbiBjYXNl cyB3aGVyZSB0aGUgU3ViamVjdCBpcyBub3QgZ2xvYmFsbHkgdW5pcXVlIGFuZCBoYXMgYSBkaWZm ZXJlbnQgSXNzdWVyIGZyb20gdGhlIFNFVCBpdHNlbGYu4oCdDQoNCg0KICA0LiAgR3VpZGFuY2Ug Zm9yIFNpZ25pbmcgU0VUcw0KVGhlIHRleHQgaW4gdGhlIGxhc3QgcGFyYWdyYXBoIG9mIHNlY3Rp b24gNC4xIGlzIHVuY2xlYXIgdG8gbWUuIEl0IHNlZW1zIHRvIHN1Z2dlc3QgdGhhdCBpdCBpcyBz YWZlIHRvIHNlbmQgdW5zaWduZWQgSldUcyBvdmVyIGEgY2hhbm5lbCB0aGF0IGxhY2tzIHRyYW5z cG9ydC1sYXllciBzZWN1cml0eSwgc28gbG9uZyBhcyByZXF1ZXN0cyBpbmNsdWRlIGEgYmVhcmVy IHRva2VuIG9yIHVzZSBCYXNpYyBBdXRoZW50aWNhdGlvbi4gQW0gSSBtaXNyZWFkaW5nIHRoaXM/ IEl0IHNlZW1zIGNvdW50ZXIgdG8gdGhlIGd1aWRhbmNlIGdpdmVuIGVhcmxpZXIgaW4gdGhlIHNh bWUgc2VjdGlvbi4NCg0KDQogIDUuICBEaXN0aW5ndWlzaGluZyBTRVRzIGZyb20gb3RoZXIga2lu ZHMgb2YgSldUcw0KVGhlIGxhc3Qgc2VudGVuY2Ugb2YgdGhlIGZpcnN0IHBhcmFncmFwaCBvZiBz ZWN0aW9uIDQuNyBzZWVtcyBpbXBvc3NpYmxlIHRvIG1lLiBQcm9maWxpbmcgU3BlY2lmaWNhdGlv bnMgY2Fubm90IGJlIHNvbGVseSByZXNwb25zaWJsZSBmb3IgZW5zdXJpbmcgaW5jb21wYXRpYmls aXR5IHdpdGggYWxsIGZ1dHVyZSBKV1QgcHJvZmlsZXMuIFRoZXkgY2FuIGF0IGJlc3QgZW5zdXJl IGluY29tcGF0aWJpbGl0eSB3aXRoIGV4aXN0aW5nIEpXVCBwcm9maWxlcyBhbmQgYmUgY29tcGF0 aWJsZSB3aXRoIGEgc3RhbmRhcmQgbWVjaGFuaXNtIGJ5IHdoaWNoIGZ1dHVyZSBKV1QgcHJvZmls ZXMgbWF5IGVuc3VyZSBpbmNvbXBhdGliaWxpdHkgKGUuZy4gdGhlIOKAnHNlY2V2ZW50K2p3dOKA nSB0eXAgaGVhZGVyKS4gSXQgbWF5IGJlIGVub3VnaCB0byBzdHJpa2UgdGhlIOKAnChvciBvdGhl cinigJ0gdGV4dCBmcm9tIHRoaXMgc2VudGVuY2UuDQoNCg0KDQotLQ0KQW5uYWJlbGxlIFJpY2hh cmQgQmFja21hbg0KSWRlbnRpdHkgU2VydmljZXMNCg0KDQpGcm9tOiBJZC1ldmVudCA8aWQtZXZl bnQtYm91bmNlc0BpZXRmLm9yZzxtYWlsdG86aWQtZXZlbnQtYm91bmNlc0BpZXRmLm9yZz4+IG9u IGJlaGFsZiBvZiAiTS5MaXphckBPQ0ciIDxtLmxpemFyQG9wZW5jb25zZW50Z3JvdXAuY29tPG1h aWx0bzptLmxpemFyQG9wZW5jb25zZW50Z3JvdXAuY29tPj4NCkRhdGU6IFR1ZXNkYXksIEF1Z3Vz dCAxLCAyMDE3IGF0IDk6MTcgQU0NClRvOiBNaWtlIEpvbmVzIDxNaWNoYWVsLkpvbmVzQG1pY3Jv c29mdC5jb208bWFpbHRvOk1pY2hhZWwuSm9uZXNAbWljcm9zb2Z0LmNvbT4+DQpDYzogWWFyb24g U2hlZmZlciA8eWFyb25mLmlldGZAZ21haWwuY29tPG1haWx0bzp5YXJvbmYuaWV0ZkBnbWFpbC5j b20+PiwgU2VjRXZlbnQgPGlkLWV2ZW50QGlldGYub3JnPG1haWx0bzppZC1ldmVudEBpZXRmLm9y Zz4+DQpTdWJqZWN0OiBSZTogW0lkLWV2ZW50XSBXRyBMYXN0IENhbGwgZm9yIGRyYWZ0LWlldGYt c2VjZXZlbnQtdG9rZW4tMDINCg0KKzEgb24gZXhpc3RpbmcgdGV4dCAuDQoNCkFncmVlIHRoZSBk b2N1bWVudCBpcyByZWFkeSB0byBwdWJsaXNoDQoNCi0gTWFyaw0KDQpPbiAzMSBKdWwgMjAxNywg YXQgMTY6NTMsIE1pa2UgSm9uZXMgPE1pY2hhZWwuSm9uZXNAbWljcm9zb2Z0LmNvbTxtYWlsdG86 TWljaGFlbC5Kb25lc0BtaWNyb3NvZnQuY29tPj4gd3JvdGU6DQoNCkkgYmVsaWV2ZSB0aGF0IHRo ZSBzcGVjaWZpY2F0aW9uIGlzIHJlYWR5IHRvIHB1Ymxpc2ggYXMtaXMuICBJdCBhbHJlYWR5IG1l ZXRzIHRoZSBuZWVkcyBvZiB0aGUga25vd24gdXNlIGNhc2VzIGFuZCBpcyBpbiBwcm9kdWN0aW9u IHVzZS4NCg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgIC0tIE1pa2UNCg0KRnJvbTogSWQtZXZlbnQgW21haWx0bzppZC1ldmVu dC1ib3VuY2VzQGlldGYub3JnXSBPbiBCZWhhbGYgT2YgWWFyb24gU2hlZmZlcg0KU2VudDogTW9u ZGF5LCBKdWx5IDMxLCAyMDE3IDE6NDAgUE0NClRvOiBTZWNFdmVudCA8aWQtZXZlbnRAaWV0Zi5v cmc8bWFpbHRvOmlkLWV2ZW50QGlldGYub3JnPj4NClN1YmplY3Q6IFtJZC1ldmVudF0gV0cgTGFz dCBDYWxsIGZvciBkcmFmdC1pZXRmLXNlY2V2ZW50LXRva2VuLTAyDQoNClRoaXMgaXMgdG8gYW5u b3VuY2Ugd29ya2luZyBncm91cCBsYXN0IGNhbGwgb24gdGhpcyBkcmFmdCAoaHR0cHM6Ly9kYXRh dHJhY2tlci5pZXRmLm9yZy9kb2MvZHJhZnQtaWV0Zi1zZWNldmVudC10b2tlbi88aHR0cHM6Ly91 cmxkZWZlbnNlLnByb29mcG9pbnQuY29tL3YyL3VybD91PWh0dHBzLTNBX19kYXRhdHJhY2tlci5p ZXRmLm9yZ19kb2NfZHJhZnQtMkRpZXRmLTJEc2VjZXZlbnQtMkR0b2tlbl8mZD1Ed01HYVEmYz1S b1AxWXVtQ1hDZ2FXSHZsWllSOFBRY3hCS0NYNVlUcGtLWTA1N1NiSzEwJnI9SkJtNWJpUnJLdWdD SDBGa0lUU2VHSnhQRWl2empXd2xOS2U0Q19sTElHayZtPUZ6dFN5TzlJZFIybHkyQ3dtdTFSaE1k WERLdzFlcGpHcF80cGVsX29fcGcmcz1OY0ZGbUxaNmFGRFQyN0VvU1REN3JrUDJtMm5rdFdxZ1Nk M19DUGVwOFV3JmU9PikuDQoNClBsZWFzZSBzZW5kIHlvdXIgY29tbWVudHMgdG8gdGhlIGxpc3Qu IEV2ZW4gaWYgeW91IGFyZSBwZXJmZWN0bHkgaGFwcHkgd2l0aCB0aGUgZHJhZnQsIHBsZWFzZSBs ZXQgdXMga25vdyB0aGF0IHlvdSBzdXBwb3J0IGl0cyBwdWJsaWNhdGlvbiBhcy1pcyBieSBwb3N0 aW5nIHRvIHRoZSBsaXN0Lg0KDQpCZWNhdXNlIG9mIHRoZSBzdW1tZXIgaG9saWRheXMsIHRoaXMg bGFzdCBjYWxsIGlzIG9wZW4gZm9yIDMgd2Vla3MsIHVudGlsIEF1Zy4gMjEuDQoNClRoYW5rcywN CiAgICBEaWNrIGFuZCBZYXJvbg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX18NCklkLWV2ZW50IG1haWxpbmcgbGlzdA0KSWQtZXZlbnRAaWV0Zi5vcmc8bWFp bHRvOklkLWV2ZW50QGlldGYub3JnPg0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0 aW5mby9pZC1ldmVudDxodHRwczovL3VybGRlZmVuc2UucHJvb2Zwb2ludC5jb20vdjIvdXJsP3U9 aHR0cHMtM0FfX3d3dy5pZXRmLm9yZ19tYWlsbWFuX2xpc3RpbmZvX2lkLTJEZXZlbnQmZD1Ed01H YVEmYz1Sb1AxWXVtQ1hDZ2FXSHZsWllSOFBRY3hCS0NYNVlUcGtLWTA1N1NiSzEwJnI9SkJtNWJp UnJLdWdDSDBGa0lUU2VHSnhQRWl2empXd2xOS2U0Q19sTElHayZtPUZ6dFN5TzlJZFIybHkyQ3dt dTFSaE1kWERLdzFlcGpHcF80cGVsX29fcGcmcz1Zd3hXOTVzNW9JQnJCTGtmdWlNVUlZdXpGSWNk blZhOEJuMXp2WjRVdXJjJmU9Pg0KDQoNCg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX18NCklkLWV2ZW50IG1haWxpbmcgbGlzdA0KSWQtZXZlbnRAaWV0Zi5v cmc8bWFpbHRvOklkLWV2ZW50QGlldGYub3JnPg0KaHR0cHM6Ly91cmxkZWZlbnNlLnByb29mcG9p bnQuY29tL3YyL3VybD91PWh0dHBzLTNBX193d3cuaWV0Zi5vcmdfbWFpbG1hbl9saXN0aW5mb19p ZC0yRGV2ZW50JmQ9RHdJQ0FnJmM9Um9QMVl1bUNYQ2dhV0h2bFpZUjhQUWN4QktDWDVZVHBrS1kw NTdTYksxMCZyPUpCbTViaVJyS3VnQ0gwRmtJVFNlR0p4UEVpdnpqV3dsTktlNENfbExJR2smbT1G enRTeU85SWRSMmx5MkN3bXUxUmhNZFhES3cxZXBqR3BfNHBlbF9vX3BnJnM9WXd4Vzk1czVvSUJy QkxrZnVpTVVJWXV6RkljZG5WYThCbjF6dlo0VXVyYyZlPQ0KDQo= --_000_8FD5EE05408D4B4F87BFA1521EF6E66Bamazoncom_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iVGl0bGUiIGNvbnRlbnQ9IiI+DQo8bWV0YSBuYW1lPSJLZXl3b3JkcyIgY29udGVu dD0iIj4NCjxtZXRhIG5hbWU9IkdlbmVyYXRvciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUg KGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxlPjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8N CkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0 IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJ cGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWls eToiQXBwbGUgQ29sb3IgRW1vamkiOw0KCXBhbm9zZS0xOjAgMCAwIDAgMCAwIDAgMCAwIDA7fQ0K LyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWwsIGRpdi5N c29Ob3JtYWwNCgl7bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1z aXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQphOmxpbmss IHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpibHVl Ow0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFuLk1zb0h5cGVy bGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpwdXJwbGU7DQoJ dGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpzcGFuLmFwcGxlLXN0eWxlLXNwYW4NCgl7bXNv LXN0eWxlLW5hbWU6YXBwbGUtc3R5bGUtc3Bhbjt9DQpzcGFuLmFwcGxlLWNvbnZlcnRlZC1zcGFj ZQ0KCXttc28tc3R5bGUtbmFtZTphcHBsZS1jb252ZXJ0ZWQtc3BhY2U7fQ0Kc3Bhbi5FbWFpbFN0 eWxlMTkNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWwtcmVwbHk7DQoJZm9udC1mYW1pbHk6IkNh bGlicmkiLHNhbnMtc2VyaWY7DQoJY29sb3I6d2luZG93dGV4dDt9DQpzcGFuLm1zb0lucw0KCXtt c28tc3R5bGUtdHlwZTpleHBvcnQtb25seTsNCgltc28tc3R5bGUtbmFtZToiIjsNCgl0ZXh0LWRl Y29yYXRpb246dW5kZXJsaW5lOw0KCWNvbG9yOnRlYWw7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNv LXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1zaXplOjEwLjBwdDt9DQpAcGFnZSBXb3Jk U2VjdGlvbjENCgl7c2l6ZTo4LjVpbiAxMS4waW47DQoJbWFyZ2luOjEuMGluIDEuMGluIDEuMGlu IDEuMGluO30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLyogTGlz dCBEZWZpbml0aW9ucyAqLw0KQGxpc3QgbDANCgl7bXNvLWxpc3QtaWQ6ODMyNTI1NTU1Ow0KCW1z by1saXN0LXRlbXBsYXRlLWlkczoxNTA0NzI1NDUwO30NCkBsaXN0IGwwOmxldmVsMg0KCXttc28t bGV2ZWwtbnVtYmVyLWZvcm1hdDphbHBoYS1sb3dlcjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6MS4w aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVp bjt9DQpvbA0KCXttYXJnaW4tYm90dG9tOjBpbjt9DQp1bA0KCXttYXJnaW4tYm90dG9tOjBpbjt9 DQotLT48L3N0eWxlPg0KPC9oZWFkPg0KPGJvZHkgYmdjb2xvcj0id2hpdGUiIGxhbmc9IkVOLVVT IiBsaW5rPSJibHVlIiB2bGluaz0icHVycGxlIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5QaGlsLDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5DYW4g eW91IGJlIG1vcmUgc3BlY2lmaWMgYWJvdXQgd2hpY2ggaXRlbXMgaGF2ZSBiZWVuIGRpc2N1c3Nl ZCBhbmQgd2hhdCB0aGUgY29uc2Vuc3VzIHdhcz8gSXRlbXMgMiBhbmQgNCB0b3VjaCBvbiB0aGUg aXNzdWVyIG1pc21hdGNoIG1hdHRlciwgYnV0IGFyZSBhYm91dCBjbGFyaWZ5aW5nIHJlcXVpcmVt ZW50cyBmb3IgcHJvZmlsaW5nIHNwZWNpZmljYXRpb25zIGFuZCBzbyBmYXIgYXMgSSBjYW4gdGVs bCBhcmUNCiBhbGlnbmVkIHdpdGggdGhlIGludGVudGlvbnMgb2YgdGhlIGN1cnJlbnQgdGV4dCBy ZWdhcmRpbmcgdGhlIGhhbmRsaW5nIGFuZCBpbnRlcnByZXRhdGlvbiBvZiB0aGUg4oCcc3Vi4oCd IGFuZCDigJxpc3PigJ0gY2xhaW1zLiBTaW1pbGFybHkgaXRlbSA2IGFkZHJlc3NlcyBhIHByb2Zp bGluZyBzcGVjaWZpY2F0aW9uIHJlcXVpcmVtZW50IHJlbGF0ZWQgdG8gdGhlIEpXVCBjb25mdXNp b24gaXNzdWUsIGFuZCBkb2VzIG5vdCBkZXZpYXRlIGZyb20gdGhlIFdHIGNvbnNlbnN1cw0KIGFz IEkgdW5kZXJzdGFuZCBpdC48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxv OnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SXRlbSAxLCBJIHNob3Vs ZCBob3BlLCBpcyB1bmNvbnRyb3ZlcnNpYWwuIDxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVv dDtBcHBsZSBDb2xvciBFbW9qaSZxdW90OyI+DQrimLo8L3NwYW4+PG86cD48L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtmb250LWZhbWlseTom cXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssc2VyaWYiPi0tJm5ic3A7PG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj5Bbm5hYmVs bGUgUmljaGFyZCBCYWNrbWFuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGlt ZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj5JZGVudGl0eSBTZXJ2aWNlczxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXYgc3R5 bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0I1QzRERiAxLjBwdDtwYWRkaW5nOjMu MHB0IDBpbiAwaW4gMGluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTIuMHB0O2NvbG9yOmJsYWNrIj5Gcm9tOiA8L3NwYW4+PC9iPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTIuMHB0O2NvbG9yOmJsYWNrIj5JZC1ldmVudCAmbHQ7aWQtZXZlbnQtYm91 bmNlc0BpZXRmLm9yZyZndDsgb24gYmVoYWxmIG9mIFBoaWwgSHVudCAmbHQ7cGhpbC5odW50QG9y YWNsZS5jb20mZ3Q7PGJyPg0KPGI+RGF0ZTogPC9iPldlZG5lc2RheSwgQXVndXN0IDIsIDIwMTcg YXQgMTI6MjIgUE08YnI+DQo8Yj5UbzogPC9iPiZxdW90O1JpY2hhcmQgQmFja21hbiwgQW5uYWJl bGxlJnF1b3Q7ICZsdDtyaWNoYW5uYUBhbWF6b24uY29tJmd0Ozxicj4NCjxiPkNjOiA8L2I+U2Vj RXZlbnQgJmx0O2lkLWV2ZW50QGlldGYub3JnJmd0Ozxicj4NCjxiPlN1YmplY3Q6IDwvYj5SZTog W0lkLWV2ZW50XSBXRyBMYXN0IENhbGwgZm9yIGRyYWZ0LWlldGYtc2VjZXZlbnQtdG9rZW4tMDI8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+QW5uYWJlbGxlLCA8bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPlRoYW5rcyBmb3IgdGhlIGNvbW1lbnRzLiBNYW55IG9mIHRoZXNl IGl0ZW1zIGhhdmUgYmVlbiBkaXNjdXNzZWQgYXQgbGVuZ3RoIGJ1dCBtYW55IG1lbWJlcnMgc3Ry b25nbHkgd2FudCB0byBsZWF2ZSBhcyBpcy4gJm5ic3A7SeKAmWxsIGF3YWl0IGZ1cnRoZXIgZ3Jv dXAgZGlzY3Vzc2lvbi48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+UmU6IGl0ZW0gNSAtIEkgdGhpbmsgSSBuZWVkIHRvIHJlLXdyaXRlIHRoYXQg YmFzZWQgb24gZmVlZGJhY2sgZnJvbSBOYXQgYW5kIE1hcml1cy4gJm5ic3A7U3RheSB0dW5lZC48 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+U29t ZSBvZiB0aGVzZSBpdGVtcyBhcmUgYWxzbyBiZWluZyBkaXNjdXNzZWQgaW4gdGhlIG5ldyBKV1Qg QkNQIGRvY3VtZW50LiAmbmJzcDtNYXliZSB3ZSBzaG91bGQgaG9sZCB0aGUgU0VUIFRva2VuIHNw ZWMgc28gd2UgY2FuIHJlZmVyIHRvIHRoZSBCQ1AgYW5kIHB1Ymxpc2ggdG9nZXRoZXI/ICZuYnNw O1RoYXQgc2FpZCwgSSBrbm93IG1hbnkgd2FudCB0aGlzIGZpbmFsaXplZCBBU0FQLjxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRp dj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2 Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJjb2xvcjpibGFjayI+UGhpbDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+PG86 cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj5PcmFjbGUgQ29ycG9yYXRpb24sIElkZW50 aXR5IENsb3VkIFNlcnZpY2VzIEFyY2hpdGVjdCAmYW1wOyBTdGFuZGFyZHM8bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iY29sb3I6YmxhY2siPkBpbmRlcGVuZGVudGlkPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNr Ij48YSBocmVmPSJodHRwOi8vd3d3LmluZGVwZW5kZW50aWQuY29tLyI+d3d3LmluZGVwZW5kZW50 aWQuY29tPC9hPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4N CjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj48 YSBocmVmPSJtYWlsdG86cGhpbC5odW50QG9yYWNsZS5jb20iPnBoaWwuaHVudEBvcmFjbGUuY29t PC9hPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2 Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+ DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48 L3A+DQo8ZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJv dHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+T24gQXVnIDIsIDIwMTcs IGF0IDExOjQzIEFNLCBSaWNoYXJkIEJhY2ttYW4sIEFubmFiZWxsZSAmbHQ7PGEgaHJlZj0ibWFp bHRvOnJpY2hhbm5hQGFtYXpvbi5jb20iPnJpY2hhbm5hQGFtYXpvbi5jb208L2E+Jmd0OyB3cm90 ZTo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJz cDs8L286cD48L3A+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJi YWNrZ3JvdW5kOndoaXRlIj5UaGFua3MgZm9yIGFsbCB0aGUgd29yayBvbiB0aGlzISBJdCB3YXMg bXkgdW5kZXJzdGFuZGluZyB0aGF0IHRoZXJlIHdhcyBhbiBvcGVuIGl0ZW0gZnJvbSBQcmFndWUg cmVnYXJkaW5nIHdoZXRoZXIgdG8gZXhwbGljaXRseSBkZWNsYXJlIHRoZSBldmVudHPigJkgcHJv ZmlsaW5nIHNwZWNpZmljYXRpb24gaW4gdGhlIFNFVC4gSGFzIHRoaXMgYmVlbiBkaXNjdXNzZWQg ZnVydGhlciwNCiBvciBkbyB3ZSBzdGlsbCBuZWVkIHRvIGNsb3NlIG9uIGl0PzxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9ImJhY2tncm91 bmQ6d2hpdGUiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9ImJhY2tncm91bmQ6d2hpdGUiPkkgaGF2ZSBzZXZlcmFsIGNvbW1l bnRzL3F1ZXN0aW9ucyBvbiB0aGUgY3VycmVudCBkcmFmdDo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJiYWNrZ3JvdW5kOndoaXRlIj4m bmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPG9sIHN0eWxlPSJtYXJnaW4tdG9wOjBpbiIg c3RhcnQ9IjEiIHR5cGU9IjEiPg0KPGxpIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4t bGVmdDowaW47bXNvLWxpc3Q6bDAgbGV2ZWwxIGxmbzE7YmFja2dyb3VuZDp3aGl0ZSI+DQo8Yj7i gJxQcm9maWxlIFNwZWNpZmljYXRpb27igJ0gdnMuIOKAnFByb2ZpbGluZyBTcGVjaWZpY2F0aW9u 4oCdPC9iPjxicj4NClRoZXJlIGFyZSBhIGhhbmRmdWwgb2YgaW5zdGFuY2VzIG9mIHRoZSBmb3Jt ZXIgdGhhdCBuZWVkIHRvIGJlIGNoYW5nZWQgdG8gdGhlIGxhdHRlciwgdG8gbWF0Y2ggdGhlIHRl cm0gYXMgZGVmaW5lZCBpbiBzZWN0aW9uIDEuMjoNCjxvOnA+PC9vOnA+PC9saT48L29sPg0KPG9s IHN0eWxlPSJtYXJnaW4tdG9wOjBpbiIgc3RhcnQ9IjEiIHR5cGU9IjEiPg0KPG9sIHN0eWxlPSJt YXJnaW4tdG9wOjBpbiIgc3RhcnQ9IjEiIHR5cGU9ImEiPg0KPGxpIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtYXJnaW4tbGVmdDowaW47bXNvLWxpc3Q6bDAgbGV2ZWwyIGxmbzE7YmFja2dyb3Vu ZDp3aGl0ZSI+DQpJbiB0aGUg4oCcc3Vi4oCdIGRlZmluaXRpb24gaW4gc2VjdGlvbiAxLjI8bzpw PjwvbzpwPjwvbGk+PGxpIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDowaW47 bXNvLWxpc3Q6bDAgbGV2ZWwyIGxmbzE7YmFja2dyb3VuZDp3aGl0ZSI+DQpJbiBzZWN0aW9uIDM8 bzpwPjwvbzpwPjwvbGk+PGxpIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDow aW47bXNvLWxpc3Q6bDAgbGV2ZWwyIGxmbzE7YmFja2dyb3VuZDp3aGl0ZSI+DQpJbiBzZWN0aW9u IDQuMjxvOnA+PC9vOnA+PC9saT48L29sPg0KPC9vbD4NCjxvbCBzdHlsZT0ibWFyZ2luLXRvcDow aW4iIHN0YXJ0PSIyIiB0eXBlPSIxIj4NCjxsaSBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFy Z2luLWxlZnQ6MGluO21zby1saXN0OmwwIGxldmVsMSBsZm8xO2JhY2tncm91bmQ6d2hpdGUiPg0K PGI+Tm90ZSByZWdhcmRpbmcgU3ViamVjdCBJc3N1ZXIgdnMuIFNFVCBJc3N1ZXI8L2I+PGJyPg0K VGhlIG5vdGUgcmVnYXJkaW5nIHRoZSBwb3RlbnRpYWwgZm9yIFN1YmplY3QgYW5kIFNFVCBJc3N1 ZXIgbWlzbWF0Y2ggKGluIHRoZSDigJxpc3PigJ0gZGVmaW5pdGlvbiBpbiBzZWN0aW9uIDEuMikg aXMgSSB0aGluayBtb3JlIHByZXNjcmlwdGl2ZSB0aGFuIGludGVuZGVkLiBBcyB3cml0dGVuLCBp dCBtYW5kYXRlcyBwbGFjaW5nIHRoZSBTdWJqZWN04oCZcyBJc3N1ZXIgaW4gYW4g4oCcaXNz4oCd IHZhbHVlIHdpdGhpbiB0aGUgZXZlbnQgcGF5bG9hZCwgYnV0IGRvZXMNCiBub3QgZGVmaW5lIGEg Zm9ybWF0IG9yIHN0cnVjdHVyZSBmb3IgdGhpcyB2YWx1ZS4gVGhlIGxvZ2ljYWwgZm9ybWF0IOKA kyB0aGF0IG9mIHRoZSDigJxpc3PigJ0gSldUIGNsYWltIOKAkyBtYXkgb3IgbWF5IG5vdCBiZSBh cHByb3ByaWF0ZSwgZGVwZW5kaW5nIG9uIHRoZSBuYXR1cmUgb2YgdGhlIGV2ZW50IGFuZCBpdHMg U3ViamVjdC4gSSBzdWdnZXN0IHJlbW92aW5nIHRoaXMgbm90ZSBhbmQgY292ZXJpbmcgdGhpcyBj b25jZXJuIGVsc2V3aGVyZSAoc2VlICM0DQogYmVsb3csIHJlOiBTdWJqZWN0IElkZW50aWZpY2F0 aW9uKS48YnI+DQo8YnI+DQo8YnI+DQo8bzpwPjwvbzpwPjwvbGk+PGxpIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtYXJnaW4tbGVmdDowaW47bXNvLWxpc3Q6bDAgbGV2ZWwxIGxmbzE7YmFja2dy b3VuZDp3aGl0ZSI+DQo8Yj5FeHBsaWNpdCBUeXBpbmcgb2YgU0VUczwvYj48YnI+DQpJIHN1Z2dl c3QgcmVtb3ZpbmcgdGhlIHRleHQg4oCcaWYgdGhlIFNFVCBjb3VsZCBiZSB1c2VkIGluIGFuIGFw cGxpY2F0aW9uIGNvbnRleHQgaW4gd2hpY2ggaXQgY291bGQgYmUgY29uZnVzZWQgd2l0aCBvdGhl ciBraW5kcyBvZiBKV1Rz4oCdIGZyb20gdGhlIGZpcnN0IHBhcmFncmFwaCBvZiBzZWN0aW9uIDIu MiwgbWFraW5nIHRoZSBzZWNldmVudCYjNDM7and0IHR5cCBoZWFkZXIgbWFuZGF0b3J5IHRvIGlt cGxlbWVudCBmb3IgYWxsIFNFVHMuIFRoaXMgY29uZGl0aW9uYWwNCiBpcyBpbXBvc3NpYmxlIHRv IGV2YWx1YXRlLCBhcyBuZXcgdHlwZXMgb2YgSldUcyB3aWxsIGJlIGludHJvZHVjZWQgb3ZlciB0 aW1lLiBKdXN0IGNvbnNpZGVyaW5nIGV4aXN0aW5nIEpXVHMsIGl0IGlzIGEgbG90IHRvIGFzayBm b3IgUHJvZmlsaW5nIFNwZWMgYXV0aG9ycyB0byBmdWxseSBleGFtaW5lIHRoZSBjb250ZW50cyBh bmQgdXNhZ2Ugb2YgZXZlcnkgZXhpc3RpbmcgSldULiBNYW5kYXRpbmcgdXNlIG9mIHR5cCBmb3Ig U0VUcyB0YWtlcyB0aGlzDQogbG9hZCBvZmYgb2YgUHJvZmlsaW5nIFNwZWMgYXV0aG9ycyBhbmQg aW5zdXJlcyB0aGF0IGZ1dHVyZSBzcGVjcyBoYXZlIGEgY29uc2lzdGVudCwgcmVsaWFibGUgd2F5 IHRvIGRlZmVuZCBhZ2FpbnN0IEpXVCB0eXBlIGNvbmZ1c2lvbi48YnI+DQo8YnI+DQo8YnI+DQo8 bzpwPjwvbzpwPjwvbGk+PGxpIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDow aW47bXNvLWxpc3Q6bDAgbGV2ZWwxIGxmbzE7YmFja2dyb3VuZDp3aGl0ZSI+DQo8Yj5SZXF1aXJl bWVudHMgZm9yIFNFVCBQcm9maWxlczogU3ViamVjdCBJZGVudGlmaWNhdGlvbjwvYj48YnI+DQpJ IHN1Z2dlc3QgYWRkaW5nIHRleHQgYWxvbmcgdGhlIGxpbmVzIG9mIOKAnFByb2ZpbGluZyBTcGVj aWZpY2F0aW9ucyBNVVNUIGRlZmluZSBmb3IgZWFjaCBvZiB0aGVpciBldmVudHMgaG93IHRoZSBT dWJqZWN0IGlzIGlkZW50aWZpZWQgaW4gdGhlIFNFVCwgYXMgd2VsbCBhcyBob3cgdG8gYWRkcmVz cyBjb25mbGljdHMgdGhlIGV2ZW50IFN1YmplY3TigJlzIElzc3VlciBhbmQgdGhlIFNFVCBJc3N1 ZXIgaWYgYXBwbGljYWJsZS4gSXQgaXMgTk9UIFJFQ09NTUVOREVEDQogZm9yIFByb2ZpbGluZyBT cGVjaWZpY2F0aW9ucyB0byB1c2UgdGhlIOKAnHN1YuKAnSBjbGFpbSBpbiBjYXNlcyB3aGVyZSB0 aGUgU3ViamVjdCBpcyBub3QgZ2xvYmFsbHkgdW5pcXVlIGFuZCBoYXMgYSBkaWZmZXJlbnQgSXNz dWVyIGZyb20gdGhlIFNFVCBpdHNlbGYu4oCdPGJyPg0KPGJyPg0KPGJyPg0KPG86cD48L286cD48 L2xpPjxsaSBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MGluO21zby1saXN0 OmwwIGxldmVsMSBsZm8xO2JhY2tncm91bmQ6d2hpdGUiPg0KPGI+R3VpZGFuY2UgZm9yIFNpZ25p bmcgU0VUczwvYj48YnI+DQpUaGUgdGV4dCBpbiB0aGUgbGFzdCBwYXJhZ3JhcGggb2Ygc2VjdGlv biA0LjEgaXMgdW5jbGVhciB0byBtZS4gSXQgc2VlbXMgdG8gc3VnZ2VzdCB0aGF0IGl0IGlzIHNh ZmUgdG8gc2VuZCB1bnNpZ25lZCBKV1RzIG92ZXIgYSBjaGFubmVsIHRoYXQgbGFja3MgdHJhbnNw b3J0LWxheWVyIHNlY3VyaXR5LCBzbyBsb25nIGFzIHJlcXVlc3RzIGluY2x1ZGUgYSBiZWFyZXIg dG9rZW4gb3IgdXNlIEJhc2ljIEF1dGhlbnRpY2F0aW9uLiBBbSBJIG1pc3JlYWRpbmcNCiB0aGlz PyBJdCBzZWVtcyBjb3VudGVyIHRvIHRoZSBndWlkYW5jZSBnaXZlbiBlYXJsaWVyIGluIHRoZSBz YW1lIHNlY3Rpb24uPGJyPg0KPGJyPg0KPGJyPg0KPG86cD48L286cD48L2xpPjxsaSBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MGluO21zby1saXN0OmwwIGxldmVsMSBsZm8x O2JhY2tncm91bmQ6d2hpdGUiPg0KPGI+RGlzdGluZ3Vpc2hpbmcgU0VUcyBmcm9tIG90aGVyIGtp bmRzIG9mIEpXVHM8L2I+PGJyPg0KVGhlIGxhc3Qgc2VudGVuY2Ugb2YgdGhlIGZpcnN0IHBhcmFn cmFwaCBvZiBzZWN0aW9uIDQuNyBzZWVtcyBpbXBvc3NpYmxlIHRvIG1lLiBQcm9maWxpbmcgU3Bl Y2lmaWNhdGlvbnMgY2Fubm90IGJlIHNvbGVseSByZXNwb25zaWJsZSBmb3IgZW5zdXJpbmcgaW5j b21wYXRpYmlsaXR5IHdpdGggYWxsIGZ1dHVyZSBKV1QgcHJvZmlsZXMuIFRoZXkgY2FuIGF0IGJl c3QgZW5zdXJlIGluY29tcGF0aWJpbGl0eSB3aXRoIGV4aXN0aW5nIEpXVCBwcm9maWxlcw0KIGFu ZCBiZSBjb21wYXRpYmxlIHdpdGggYSBzdGFuZGFyZCBtZWNoYW5pc20gYnkgd2hpY2ggZnV0dXJl IEpXVCBwcm9maWxlcyBtYXkgZW5zdXJlIGluY29tcGF0aWJpbGl0eSAoZS5nLiB0aGUg4oCcc2Vj ZXZlbnQmIzQzO2p3dOKAnSB0eXAgaGVhZGVyKS4gSXQgbWF5IGJlIGVub3VnaCB0byBzdHJpa2Ug dGhlIOKAnChvciBvdGhlcinigJ0gdGV4dCBmcm9tIHRoaXMgc2VudGVuY2UuPGJyPg0KPGJyPg0K PGJyPg0KPG86cD48L286cD48L2xpPjwvb2w+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9ImJhY2tncm91bmQ6d2hpdGUiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJiYWNrZ3JvdW5kOndoaXRl Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBO ZXcgUm9tYW4mcXVvdDssc2VyaWYiPi0tJm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9ImJhY2tncm91bmQ6d2hpdGUi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5l dyBSb21hbiZxdW90OyxzZXJpZiI+QW5uYWJlbGxlIFJpY2hhcmQgQmFja21hbjwvc3Bhbj48bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJi YWNrZ3JvdW5kOndoaXRlIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtmb250LWZhbWls eTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssc2VyaWYiPklkZW50aXR5IFNlcnZpY2VzPC9z cGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0iYmFja2dyb3VuZDp3aGl0ZSI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0iYmFja2dyb3VuZDp3aGl0 ZSI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25l O2JvcmRlci10b3A6c29saWQgI0I1QzRERiAxLjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGlu Ij4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0iYmFja2dyb3VuZDp3aGl0ZSI+ PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQiPkZyb206PHNwYW4gY2xhc3M9ImFwcGxl LWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMi4wcHQiPklkLWV2ZW50ICZsdDs8YSBocmVmPSJtYWlsdG86aWQtZXZlbnQtYm91 bmNlc0BpZXRmLm9yZyI+PHNwYW4gc3R5bGU9ImNvbG9yOnB1cnBsZSI+aWQtZXZlbnQtYm91bmNl c0BpZXRmLm9yZzwvc3Bhbj48L2E+Jmd0Ow0KIG9uIGJlaGFsZiBvZiAmcXVvdDtNLkxpemFyQE9D RyZxdW90OyAmbHQ7PGEgaHJlZj0ibWFpbHRvOm0ubGl6YXJAb3BlbmNvbnNlbnRncm91cC5jb20i PjxzcGFuIHN0eWxlPSJjb2xvcjpwdXJwbGUiPm0ubGl6YXJAb3BlbmNvbnNlbnRncm91cC5jb208 L3NwYW4+PC9hPiZndDs8YnI+DQo8Yj5EYXRlOjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQt c3BhY2UiPiZuYnNwOzwvc3Bhbj48L2I+VHVlc2RheSwgQXVndXN0IDEsIDIwMTcgYXQgOToxNyBB TTxicj4NCjxiPlRvOjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwv c3Bhbj48L2I+TWlrZSBKb25lcyAmbHQ7PGEgaHJlZj0ibWFpbHRvOk1pY2hhZWwuSm9uZXNAbWlj cm9zb2Z0LmNvbSI+PHNwYW4gc3R5bGU9ImNvbG9yOnB1cnBsZSI+TWljaGFlbC5Kb25lc0BtaWNy b3NvZnQuY29tPC9zcGFuPjwvYT4mZ3Q7PGJyPg0KPGI+Q2M6PHNwYW4gY2xhc3M9ImFwcGxlLWNv bnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjwvYj5ZYXJvbiBTaGVmZmVyICZsdDs8YSBocmVm PSJtYWlsdG86eWFyb25mLmlldGZAZ21haWwuY29tIj48c3BhbiBzdHlsZT0iY29sb3I6cHVycGxl Ij55YXJvbmYuaWV0ZkBnbWFpbC5jb208L3NwYW4+PC9hPiZndDssIFNlY0V2ZW50ICZsdDs8YSBo cmVmPSJtYWlsdG86aWQtZXZlbnRAaWV0Zi5vcmciPjxzcGFuIHN0eWxlPSJjb2xvcjpwdXJwbGUi PmlkLWV2ZW50QGlldGYub3JnPC9zcGFuPjwvYT4mZ3Q7PGJyPg0KPGI+U3ViamVjdDo8c3BhbiBj bGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PC9iPlJlOiBbSWQtZXZl bnRdIFdHIExhc3QgQ2FsbCBmb3IgZHJhZnQtaWV0Zi1zZWNldmVudC10b2tlbi0wMjwvc3Bhbj48 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJiYWNrZ3JvdW5kOndoaXRlIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9ImJhY2tn cm91bmQ6d2hpdGUiPiYjNDM7MSBvbiBleGlzdGluZyB0ZXh0IC4mbmJzcDs8c3BhbiBjbGFzcz0i YXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9ImJhY2tncm91bmQ6 d2hpdGUiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9ImJhY2tncm91bmQ6d2hpdGUiPkFncmVlIHRo ZSBkb2N1bWVudCBpcyByZWFkeSB0byBwdWJsaXNoPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwv ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0iYmFja2dyb3Vu ZDp3aGl0ZSI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0iYmFja2dyb3VuZDp3aGl0ZSI+LSBNYXJr PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0iYmFja2dyb3VuZDp3aGl0ZSI+Jm5ic3A7PG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUu MHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0iYmFja2dyb3VuZDp3aGl0ZSI+T24gMzEgSnVsIDIwMTcsIGF0IDE2OjUzLCBN aWtlIEpvbmVzICZsdDs8YSBocmVmPSJtYWlsdG86TWljaGFlbC5Kb25lc0BtaWNyb3NvZnQuY29t Ij48c3BhbiBzdHlsZT0iY29sb3I6cHVycGxlIj5NaWNoYWVsLkpvbmVzQG1pY3Jvc29mdC5jb208 L3NwYW4+PC9hPiZndDsgd3JvdGU6PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJiYWNrZ3JvdW5kOndoaXRlIj4mbmJzcDs8 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9ImJhY2tncm91bmQ6d2hpdGUiPjxzcGFuIHN0eWxlPSJjb2xvcjojMDAy MDYwIj5JIGJlbGlldmUgdGhhdCB0aGUgc3BlY2lmaWNhdGlvbiBpcyByZWFkeSB0byBwdWJsaXNo IGFzLWlzLiZuYnNwOyBJdCBhbHJlYWR5IG1lZXRzIHRoZSBuZWVkcyBvZiB0aGUga25vd24gdXNl IGNhc2VzIGFuZCBpcyBpbiBwcm9kdWN0aW9uIHVzZS48L3NwYW4+PG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i YmFja2dyb3VuZDp3aGl0ZSI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDIwNjAiPiZuYnNwOzwvc3Bh bj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJiYWNrZ3JvdW5kOndoaXRlIj48c3BhbiBzdHlsZT0iY29sb3I6 IzAwMjA2MCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IC0tIE1pa2U8L3Nw YW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0iYmFja2dyb3VuZDp3aGl0ZSI+PHNwYW4gc3R5bGU9ImNvbG9y OiMwMDIwNjAiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8 ZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjRTFFMUUxIDEu MHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0iYmFja2dyb3VuZDp3aGl0ZSI+PGI+RnJvbTo8L2I+PHNwYW4gY2xh c3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPklkLWV2ZW50IFs8YSBocmVm PSJtYWlsdG86aWQtZXZlbnQtYm91bmNlc0BpZXRmLm9yZyI+PHNwYW4gc3R5bGU9ImNvbG9yOnB1 cnBsZSI+bWFpbHRvOmlkLWV2ZW50LWJvdW5jZXNAaWV0Zi5vcmc8L3NwYW4+PC9hPl08c3BhbiBj bGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PGI+T24NCiBCZWhhbGYg T2Y8c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PC9iPllh cm9uIFNoZWZmZXI8YnI+DQo8Yj5TZW50OjwvYj48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVk LXNwYWNlIj4mbmJzcDs8L3NwYW4+TW9uZGF5LCBKdWx5IDMxLCAyMDE3IDE6NDAgUE08YnI+DQo8 Yj5Ubzo8L2I+PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFu PlNlY0V2ZW50ICZsdDs8YSBocmVmPSJtYWlsdG86aWQtZXZlbnRAaWV0Zi5vcmciPjxzcGFuIHN0 eWxlPSJjb2xvcjpwdXJwbGUiPmlkLWV2ZW50QGlldGYub3JnPC9zcGFuPjwvYT4mZ3Q7PGJyPg0K PGI+U3ViamVjdDo8L2I+PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7 PC9zcGFuPltJZC1ldmVudF0gV0cgTGFzdCBDYWxsIGZvciBkcmFmdC1pZXRmLXNlY2V2ZW50LXRv a2VuLTAyPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxk aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9ImJhY2tncm91bmQ6d2hpdGUi PiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9ImJhY2tncm91bmQ6d2hpdGUiPlRoaXMgaXMgdG8gYW5u b3VuY2Ugd29ya2luZyBncm91cCBsYXN0IGNhbGwgb24gdGhpcyBkcmFmdCAoPGEgaHJlZj0iaHR0 cHM6Ly91cmxkZWZlbnNlLnByb29mcG9pbnQuY29tL3YyL3VybD91PWh0dHBzLTNBX19kYXRhdHJh Y2tlci5pZXRmLm9yZ19kb2NfZHJhZnQtMkRpZXRmLTJEc2VjZXZlbnQtMkR0b2tlbl8mYW1wO2Q9 RHdNR2FRJmFtcDtjPVJvUDFZdW1DWENnYVdIdmxaWVI4UFFjeEJLQ1g1WVRwa0tZMDU3U2JLMTAm YW1wO3I9SkJtNWJpUnJLdWdDSDBGa0lUU2VHSnhQRWl2empXd2xOS2U0Q19sTElHayZhbXA7bT1G enRTeU85SWRSMmx5MkN3bXUxUmhNZFhES3cxZXBqR3BfNHBlbF9vX3BnJmFtcDtzPU5jRkZtTFo2 YUZEVDI3RW9TVEQ3cmtQMm0ybmt0V3FnU2QzX0NQZXA4VXcmYW1wO2U9Ij48c3BhbiBzdHlsZT0i Y29sb3I6cHVycGxlIj5odHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1pZXRm LXNlY2V2ZW50LXRva2VuLzwvc3Bhbj48L2E+KS48YnI+DQo8YnI+DQpQbGVhc2Ugc2VuZCB5b3Vy IGNvbW1lbnRzIHRvIHRoZSBsaXN0LiBFdmVuIGlmIHlvdSBhcmUgcGVyZmVjdGx5IGhhcHB5IHdp dGggdGhlIGRyYWZ0LCBwbGVhc2UgbGV0IHVzIGtub3cgdGhhdCB5b3Ugc3VwcG9ydCBpdHMgcHVi bGljYXRpb24gYXMtaXMgYnkgcG9zdGluZyB0byB0aGUgbGlzdC48YnI+DQo8YnI+DQpCZWNhdXNl IG9mIHRoZSBzdW1tZXIgaG9saWRheXMsIHRoaXMgbGFzdCBjYWxsIGlzIG9wZW4gZm9yIDMgd2Vl a3MsIHVudGlsIEF1Zy4gMjEuPGJyPg0KPGJyPg0KVGhhbmtzLDxicj4NCiZuYnNwOyZuYnNwOyZu YnNwOyBEaWNrIGFuZCBZYXJvbjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0iYmFja2dyb3VuZDp3aGl0ZSI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fu cy1zZXJpZjtiYWNrZ3JvdW5kOndoaXRlIj5fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fXzwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlmIj48YnI+DQo8c3BhbiBzdHls ZT0iYmFja2dyb3VuZDp3aGl0ZSI+SWQtZXZlbnQgbWFpbGluZyBsaXN0PC9zcGFuPjxicj4NCjxz cGFuIHN0eWxlPSJiYWNrZ3JvdW5kOndoaXRlIj48YSBocmVmPSJtYWlsdG86SWQtZXZlbnRAaWV0 Zi5vcmciPjxzcGFuIHN0eWxlPSJjb2xvcjpwdXJwbGUiPklkLWV2ZW50QGlldGYub3JnPC9zcGFu PjwvYT48L3NwYW4+PGJyPg0KPHNwYW4gc3R5bGU9ImJhY2tncm91bmQ6d2hpdGUiPjxhIGhyZWY9 Imh0dHBzOi8vdXJsZGVmZW5zZS5wcm9vZnBvaW50LmNvbS92Mi91cmw/dT1odHRwcy0zQV9fd3d3 LmlldGYub3JnX21haWxtYW5fbGlzdGluZm9faWQtMkRldmVudCZhbXA7ZD1Ed01HYVEmYW1wO2M9 Um9QMVl1bUNYQ2dhV0h2bFpZUjhQUWN4QktDWDVZVHBrS1kwNTdTYksxMCZhbXA7cj1KQm01YmlS ckt1Z0NIMEZrSVRTZUdKeFBFaXZ6ald3bE5LZTRDX2xMSUdrJmFtcDttPUZ6dFN5TzlJZFIybHky Q3dtdTFSaE1kWERLdzFlcGpHcF80cGVsX29fcGcmYW1wO3M9WXd4Vzk1czVvSUJyQkxrZnVpTVVJ WXV6RkljZG5WYThCbjF6dlo0VXVyYyZhbXA7ZT0iPjxzcGFuIHN0eWxlPSJjb2xvcjpwdXJwbGUi Pmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vaWQtZXZlbnQ8L3NwYW4+PC9h Pjwvc3Bhbj48L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1 b3RlPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9ImJhY2tncm91 bmQ6d2hpdGUiPjxicj4NCjxicj4NCjxicj4NCjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlmO2JhY2tncm91bmQ6d2hpdGUiPl9fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fPC9zcGFuPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNh bnMtc2VyaWYiPjxicj4NCjxzcGFuIHN0eWxlPSJiYWNrZ3JvdW5kOndoaXRlIj5JZC1ldmVudCBt YWlsaW5nIGxpc3Q8L3NwYW4+PGJyPg0KPC9zcGFuPjxhIGhyZWY9Im1haWx0bzpJZC1ldmVudEBp ZXRmLm9yZyI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtI ZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjpwdXJwbGU7YmFja2dyb3VuZDp3aGl0ZSI+ SWQtZXZlbnRAaWV0Zi5vcmc8L3NwYW4+PC9hPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPjxicj4NCjwvc3Bh bj48YSBocmVmPSJodHRwczovL3VybGRlZmVuc2UucHJvb2Zwb2ludC5jb20vdjIvdXJsP3U9aHR0 cHMtM0FfX3d3dy5pZXRmLm9yZ19tYWlsbWFuX2xpc3RpbmZvX2lkLTJEZXZlbnQmYW1wO2Q9RHdJ Q0FnJmFtcDtjPVJvUDFZdW1DWENnYVdIdmxaWVI4UFFjeEJLQ1g1WVRwa0tZMDU3U2JLMTAmYW1w O3I9SkJtNWJpUnJLdWdDSDBGa0lUU2VHSnhQRWl2empXd2xOS2U0Q19sTElHayZhbXA7bT1GenRT eU85SWRSMmx5MkN3bXUxUmhNZFhES3cxZXBqR3BfNHBlbF9vX3BnJmFtcDtzPVl3eFc5NXM1b0lC ckJMa2Z1aU1VSVl1ekZJY2RuVmE4Qm4xenZaNFV1cmMmYW1wO2U9Ij48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlm O2NvbG9yOnB1cnBsZTtiYWNrZ3JvdW5kOndoaXRlIj5odHRwczovL3VybGRlZmVuc2UucHJvb2Zw b2ludC5jb20vdjIvdXJsP3U9aHR0cHMtM0FfX3d3dy5pZXRmLm9yZ19tYWlsbWFuX2xpc3RpbmZv X2lkLTJEZXZlbnQmYW1wO2Q9RHdJQ0FnJmFtcDtjPVJvUDFZdW1DWENnYVdIdmxaWVI4UFFjeEJL Q1g1WVRwa0tZMDU3U2JLMTAmYW1wO3I9SkJtNWJpUnJLdWdDSDBGa0lUU2VHSnhQRWl2empXd2xO S2U0Q19sTElHayZhbXA7bT1GenRTeU85SWRSMmx5MkN3bXUxUmhNZFhES3cxZXBqR3BfNHBlbF9v X3BnJmFtcDtzPVl3eFc5NXM1b0lCckJMa2Z1aU1VSVl1ekZJY2RuVmE4Qm4xenZaNFV1cmMmYW1w O2U9PC9zcGFuPjwvYT48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90Oyxz YW5zLXNlcmlmO2JhY2tncm91bmQ6d2hpdGUiPiZuYnNwOzwvc3Bhbj48L3NwYW4+PG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4N CjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_8FD5EE05408D4B4F87BFA1521EF6E66Bamazoncom_-- From nobody Wed Aug 2 13:07:51 2017 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 312A413209B for ; Wed, 2 Aug 2017 13:07:50 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.731 X-Spam-Level: X-Spam-Status: No, score=-1.731 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=1.989, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RCVD_IN_SORBS_SPAM=0.5, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jklSn6GigP0a for ; Wed, 2 Aug 2017 13:07:48 -0700 (PDT) Received: from aserp1040.oracle.com (aserp1040.oracle.com [141.146.126.69]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B9379131C11 for ; Wed, 2 Aug 2017 13:07:47 -0700 (PDT) Received: from aserv0022.oracle.com (aserv0022.oracle.com [141.146.126.234]) by aserp1040.oracle.com (Sentrion-MTA-4.3.2/Sentrion-MTA-4.3.2) with ESMTP id v72K7jc4021542 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK); Wed, 2 Aug 2017 20:07:46 GMT Received: from aserv0121.oracle.com (aserv0121.oracle.com [141.146.126.235]) by aserv0022.oracle.com (8.14.4/8.14.4) with ESMTP id v72K7jR2018928 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK); Wed, 2 Aug 2017 20:07:45 GMT Received: from abhmp0007.oracle.com (abhmp0007.oracle.com [141.146.116.13]) by aserv0121.oracle.com (8.14.4/8.13.8) with ESMTP id v72K7jxs002297; Wed, 2 Aug 2017 20:07:45 GMT Received: from [10.0.1.37] (/24.86.190.97) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Wed, 02 Aug 2017 13:07:44 -0700 From: Phil Hunt Message-Id: <617FC90D-F8B2-44B5-BF61-4B569C942246@oracle.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_BE338CFE-F9AE-4CCB-88EB-610C42FAF68C" Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\)) Date: Wed, 2 Aug 2017 13:07:43 -0700 In-Reply-To: <8FD5EE05-408D-4B4F-87BF-A1521EF6E66B@amazon.com> Cc: SecEvent To: "Richard Backman, Annabelle" References: <72B8E7CA-3EB6-4194-BB77-CD46062FDFB7@amazon.com> <8FD5EE05-408D-4B4F-87BF-A1521EF6E66B@amazon.com> X-Mailer: Apple Mail (2.3273) X-Source-IP: aserv0022.oracle.com [141.146.126.234] Archived-At: Subject: Re: [Id-event] WG Last Call for draft-ietf-secevent-token-02 X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 02 Aug 2017 20:07:50 -0000 --Apple-Mail=_BE338CFE-F9AE-4CCB-88EB-610C42FAF68C Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Annabelle, You are correct #1 isn=E2=80=99t really controversial. I would look at the minutes of Chicago (see Mike=E2=80=99s presentation) = and then the intervening discussing prior to Prague. I=E2=80=99ve made my concerns clear so I won=E2=80=99t bother repeating = them. Your comments suggest some remaining disagreement on what should = be in the common SET Token spec vs down stream event profiles. E.g. some = have expressed that SET=E2=80=99s job is simply to define the event = claim and nothing more. Phil Oracle Corporation, Identity Cloud Services Architect & Standards @independentid www.independentid.com = phil.hunt@oracle.com = > On Aug 2, 2017, at 12:54 PM, Richard Backman, Annabelle = wrote: >=20 > Phil, > =20 > Can you be more specific about which items have been discussed and = what the consensus was? Items 2 and 4 touch on the issuer mismatch = matter, but are about clarifying requirements for profiling = specifications and so far as I can tell are aligned with the intentions = of the current text regarding the handling and interpretation of the = =E2=80=9Csub=E2=80=9D and =E2=80=9Ciss=E2=80=9D claims. Similarly item 6 = addresses a profiling specification requirement related to the JWT = confusion issue, and does not deviate from the WG consensus as I = understand it. > =20 > Item 1, I should hope, is uncontroversial. =E2=98=BA > =20 > --=20 > Annabelle Richard Backman > Identity Services > =20 > =20 > From: Id-event on behalf of Phil Hunt = > Date: Wednesday, August 2, 2017 at 12:22 PM > To: "Richard Backman, Annabelle" > Cc: SecEvent > Subject: Re: [Id-event] WG Last Call for draft-ietf-secevent-token-02 > =20 > Annabelle,=20 > =20 > Thanks for the comments. Many of these items have been discussed at = length but many members strongly want to leave as is. I=E2=80=99ll = await further group discussion. > =20 > Re: item 5 - I think I need to re-write that based on feedback from = Nat and Marius. Stay tuned. > =20 > Some of these items are also being discussed in the new JWT BCP = document. Maybe we should hold the SET Token spec so we can refer to = the BCP and publish together? That said, I know many want this = finalized ASAP. > =20 > Phil > =20 > Oracle Corporation, Identity Cloud Services Architect & Standards > @independentid > www.independentid.com = > phil.hunt@oracle.com > =20 >> On Aug 2, 2017, at 11:43 AM, Richard Backman, Annabelle = > wrote: >> =20 >> Thanks for all the work on this! It was my understanding that there = was an open item from Prague regarding whether to explicitly declare the = events=E2=80=99 profiling specification in the SET. Has this been = discussed further, or do we still need to close on it? >> =20 >> I have several comments/questions on the current draft: >> =20 >> =E2=80=9CProfile Specification=E2=80=9D vs. =E2=80=9CProfiling = Specification=E2=80=9D >> There are a handful of instances of the former that need to be = changed to the latter, to match the term as defined in section 1.2: >> In the =E2=80=9Csub=E2=80=9D definition in section 1.2 >> In section 3 >> In section 4.2 >> Note regarding Subject Issuer vs. SET Issuer >> The note regarding the potential for Subject and SET Issuer mismatch = (in the =E2=80=9Ciss=E2=80=9D definition in section 1.2) is I think more = prescriptive than intended. As written, it mandates placing the = Subject=E2=80=99s Issuer in an =E2=80=9Ciss=E2=80=9D value within the = event payload, but does not define a format or structure for this value. = The logical format =E2=80=93 that of the =E2=80=9Ciss=E2=80=9D JWT claim = =E2=80=93 may or may not be appropriate, depending on the nature of the = event and its Subject. I suggest removing this note and covering this = concern elsewhere (see #4 below, re: Subject Identification). >>=20 >>=20 >> Explicit Typing of SETs >> I suggest removing the text =E2=80=9Cif the SET could be used in an = application context in which it could be confused with other kinds of = JWTs=E2=80=9D from the first paragraph of section 2.2, making the = secevent+jwt typ header mandatory to implement for all SETs. This = conditional is impossible to evaluate, as new types of JWTs will be = introduced over time. Just considering existing JWTs, it is a lot to ask = for Profiling Spec authors to fully examine the contents and usage of = every existing JWT. Mandating use of typ for SETs takes this load off of = Profiling Spec authors and insures that future specs have a consistent, = reliable way to defend against JWT type confusion. >>=20 >>=20 >> Requirements for SET Profiles: Subject Identification >> I suggest adding text along the lines of =E2=80=9CProfiling = Specifications MUST define for each of their events how the Subject is = identified in the SET, as well as how to address conflicts the event = Subject=E2=80=99s Issuer and the SET Issuer if applicable. It is NOT = RECOMMENDED for Profiling Specifications to use the =E2=80=9Csub=E2=80=9D = claim in cases where the Subject is not globally unique and has a = different Issuer from the SET itself.=E2=80=9D >>=20 >>=20 >> Guidance for Signing SETs >> The text in the last paragraph of section 4.1 is unclear to me. It = seems to suggest that it is safe to send unsigned JWTs over a channel = that lacks transport-layer security, so long as requests include a = bearer token or use Basic Authentication. Am I misreading this? It seems = counter to the guidance given earlier in the same section. >>=20 >>=20 >> Distinguishing SETs from other kinds of JWTs >> The last sentence of the first paragraph of section 4.7 seems = impossible to me. Profiling Specifications cannot be solely responsible = for ensuring incompatibility with all future JWT profiles. They can at = best ensure incompatibility with existing JWT profiles and be compatible = with a standard mechanism by which future JWT profiles may ensure = incompatibility (e.g. the =E2=80=9Csecevent+jwt=E2=80=9D typ header). It = may be enough to strike the =E2=80=9C(or other)=E2=80=9D text from this = sentence. >>=20 >>=20 >> =20 >> --=20 >> Annabelle Richard Backman >> Identity Services >> =20 >> =20 >> From: Id-event > on behalf of "M.Lizar@OCG" = > >> Date: Tuesday, August 1, 2017 at 9:17 AM >> To: Mike Jones > >> Cc: Yaron Sheffer >, SecEvent > >> Subject: Re: [Id-event] WG Last Call for draft-ietf-secevent-token-02 >> =20 >> +1 on existing text . =20 >> =20 >> Agree the document is ready to publish >> =20 >> - Mark >> =20 >>> On 31 Jul 2017, at 16:53, Mike Jones > wrote: >>> =20 >>> I believe that the specification is ready to publish as-is. It = already meets the needs of the known use cases and is in production use. >>> =20 >>> -- = Mike >>> =20 >>> From: Id-event [mailto:id-event-bounces@ietf.org = ] On Behalf Of Yaron Sheffer >>> Sent: Monday, July 31, 2017 1:40 PM >>> To: SecEvent > >>> Subject: [Id-event] WG Last Call for draft-ietf-secevent-token-02 >>> =20 >>> This is to announce working group last call on this draft = (https://datatracker.ietf.org/doc/draft-ietf-secevent-token/ = ). >>>=20 >>> Please send your comments to the list. Even if you are perfectly = happy with the draft, please let us know that you support its = publication as-is by posting to the list. >>>=20 >>> Because of the summer holidays, this last call is open for 3 weeks, = until Aug. 21. >>>=20 >>> Thanks, >>> Dick and Yaron >>> _______________________________________________ >>> Id-event mailing list >>> Id-event@ietf.org >>> https://www.ietf.org/mailman/listinfo/id-event = >>=20 >>=20 >>=20 >> _______________________________________________ >> Id-event mailing list >> Id-event@ietf.org >> = https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__www.ietf.org_mailma= n_listinfo_id-2Devent&d=3DDwICAg&c=3DRoP1YumCXCgaWHvlZYR8PQcxBKCX5YTpkKY05= 7SbK10&r=3DJBm5biRrKugCH0FkITSeGJxPEivzjWwlNKe4C_lLIGk&m=3DFztSyO9IdR2ly2C= wmu1RhMdXDKw1epjGp_4pel_o_pg&s=3DYwxW95s5oIBrBLkfuiMUIYuzFIcdnVa8Bn1zvZ4Uu= rc&e=3D = =20 >=20 > =20 --Apple-Mail=_BE338CFE-F9AE-4CCB-88EB-610C42FAF68C Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Annabelle,

You are correct #1 isn=E2=80=99t really = controversial.

I= would look at the minutes of Chicago (see Mike=E2=80=99s presentation) = and then the intervening discussing prior to Prague.

I=E2=80=99ve made my = concerns clear so I won=E2=80=99t bother repeating them. Your comments = suggest some remaining disagreement on what should be in the common SET = Token spec vs down stream event profiles. E.g. some have expressed that = SET=E2=80=99s job is simply to define the event claim and nothing = more.

Phil

Oracle Corporation, Identity Cloud = Services Architect & Standards
@independentid
www.independentid.com
phil.hunt@oracle.com

On Aug 2, 2017, at 12:54 PM, Richard Backman, Annabelle = <richanna@amazon.com> wrote:

Phil,
 
Can you = be more specific about which items have been discussed and what the = consensus was? Items 2 and 4 touch on the issuer mismatch matter, but = are about clarifying requirements for profiling specifications and so = far as I can tell are aligned with the intentions of the current text = regarding the handling and interpretation of the =E2=80=9Csub=E2=80=9D = and =E2=80=9Ciss=E2=80=9D claims. Similarly item 6 addresses a profiling = specification requirement related to the JWT confusion issue, and does = not deviate from the WG consensus as I understand it.
 
Item 1, I = should hope, is uncontroversial. =E2=98=BA
 
-- 
Annabelle Richard = Backman
Identity Services
 
 
From: Id-event <id-event-bounces@ietf.org> on behalf of Phil Hunt = <phil.hunt@oracle.com>
Date: Wednesday, August 2, = 2017 at 12:22 PM
To: "Richard Backman, = Annabelle" <richanna@amazon.com>
Cc: SecEvent <id-event@ietf.org>
Subject: Re: [Id-event] WG Last = Call for draft-ietf-secevent-token-02
 
Annabelle, 
 
Thanks for the comments. Many of these = items have been discussed at length but many members strongly want to = leave as is.  I=E2=80=99ll await further group discussion.
 
Re: item 5 - I think I need to re-write = that based on feedback from Nat and Marius.  Stay tuned.
 
Some of these items are also being = discussed in the new JWT BCP document.  Maybe we should hold the = SET Token spec so we can refer to the BCP and publish together? =  That said, I know many want this finalized ASAP.
 
Phil
 
Oracle Corporation, Identity Cloud Services Architect & = Standards
@independentid
www.independentid.com
phil.hunt@oracle.com
 
On Aug 2, = 2017, at 11:43 AM, Richard Backman, Annabelle <richanna@amazon.com> = wrote:
 
Thanks for all the work on this! It was my understanding that = there was an open item from Prague regarding whether to explicitly = declare the events=E2=80=99 profiling specification in the SET. Has this = been discussed further, or do we still need to close on it?
 
I have several comments/questions = on the current draft:
 
  1. =E2=80=9CProfile Specification=E2=80=9D vs. = =E2=80=9CProfiling Specification=E2=80=9D
    There are a = handful of instances of the former that need to be changed to the = latter, to match the term as defined in section 1.2:
    1. In the =E2=80=9Csub=E2=80=9D definition in section 1.2
    2. In section 3
    3. In section 4.2
  1. Note regarding Subject Issuer vs. SET = Issuer
    The note regarding the potential for Subject = and SET Issuer mismatch (in the =E2=80=9Ciss=E2=80=9D definition in = section 1.2) is I think more prescriptive than intended. As written, it = mandates placing the Subject=E2=80=99s Issuer in an =E2=80=9Ciss=E2=80=9D = value within the event payload, but does not define a format or = structure for this value. The logical format =E2=80=93 that of the = =E2=80=9Ciss=E2=80=9D JWT claim =E2=80=93 may or may not be appropriate, = depending on the nature of the event and its Subject. I suggest removing = this note and covering this concern elsewhere (see #4 below, re: Subject = Identification).


  2. Explicit Typing of = SETs
    I suggest removing the text =E2=80=9Cif the SET = could be used in an application context in which it could be confused = with other kinds of JWTs=E2=80=9D from the first paragraph of section = 2.2, making the secevent+jwt typ header mandatory to implement for all = SETs. This conditional is impossible to evaluate, as new types of JWTs = will be introduced over time. Just considering existing JWTs, it is a = lot to ask for Profiling Spec authors to fully examine the contents and = usage of every existing JWT. Mandating use of typ for SETs takes this = load off of Profiling Spec authors and insures that future specs have a = consistent, reliable way to defend against JWT type confusion.


  3. Requirements for SET Profiles: Subject = Identification
    I suggest adding text along the lines = of =E2=80=9CProfiling Specifications MUST define for each of their = events how the Subject is identified in the SET, as well as how to = address conflicts the event Subject=E2=80=99s Issuer and the SET Issuer = if applicable. It is NOT RECOMMENDED for Profiling Specifications to use = the =E2=80=9Csub=E2=80=9D claim in cases where the Subject is not = globally unique and has a different Issuer from the SET itself.=E2=80=9D

  4. Guidance for Signing SETs
    The = text in the last paragraph of section 4.1 is unclear to me. It seems to = suggest that it is safe to send unsigned JWTs over a channel that lacks = transport-layer security, so long as requests include a bearer token or = use Basic Authentication. Am I misreading this? It seems counter to the = guidance given earlier in the same section.


  5. Distinguishing SETs from other kinds of = JWTs
    The last sentence of the first paragraph of = section 4.7 seems impossible to me. Profiling Specifications cannot be = solely responsible for ensuring incompatibility with all future JWT = profiles. They can at best ensure incompatibility with existing JWT = profiles and be compatible with a standard mechanism by which future JWT = profiles may ensure incompatibility (e.g. the =E2=80=9Csecevent+jwt=E2=80=9D= typ header). It may be enough to strike the =E2=80=9C(or other)=E2=80=9D = text from this sentence.


 
-- 
Annabelle Richard Backman
Identity = Services
 
 
From: Id-event <id-event-bounces@ietf.org> on behalf of = "M.Lizar@OCG" <m.lizar@openconsentgroup.com>
Date: Tuesday, August 1, 2017 = at 9:17 AM
To: Mike Jones <Michael.Jones@microsoft.com>
Cc: Yaron= Sheffer <yaronf.ietf@gmail.com>, SecEvent = <id-event@ietf.org>
Subject: Re: [Id-event] WG Last = Call for draft-ietf-secevent-token-02
 
+1 on existing text .  
 
Agree the = document is ready to publish
 
- Mark
 
On 31 Jul = 2017, at 16:53, Mike Jones <Michael.Jones@microsoft.com> wrote:
 
I believe = that the specification is ready to publish as-is.  It already meets = the needs of the known use cases and is in production use.
 
          &nb= sp;            = ;            &= nbsp;           &nb= sp;            = ;    -- Mike
 
From: Id-event [mailto:id-event-bounces@ietf.org] On Behalf = Of Yaron = Sheffer
Sent: Monday, July 31, 2017 1:40 = PM
To: SecEvent <id-event@ietf.org>
Subject: [Id-event] WG Last Call for = draft-ietf-secevent-token-02
 
This is to announce working group last call on this = draft (https://datatracker.ietf.org/doc/draft-ietf-secevent-token/).

Please send your comments to the = list. Even if you are perfectly happy with the draft, please let us know = that you support its publication as-is by posting to the list.

Because of the summer holidays, this last call = is open for 3 weeks, until Aug. 21.

Thanks,
    Dick and Yaron
_______________________________________________
Id-event mailing list
Id-event@ietf.org
https://www.ietf.org/mailman/listinfo/id-event


_______________________________________________
Id-event mailing list
Id-event@ietf.org
https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__www.ietf= .org_mailman_listinfo_id-2Devent&d=3DDwICAg&c=3DRoP1YumCXCgaWHvlZY= R8PQcxBKCX5YTpkKY057SbK10&r=3DJBm5biRrKugCH0FkITSeGJxPEivzjWwlNKe4C_lL= IGk&m=3DFztSyO9IdR2ly2Cwmu1RhMdXDKw1epjGp_4pel_o_pg&s=3DYwxW95s5oI= BrBLkfuiMUIYuzFIcdnVa8Bn1zvZ4Uurc&e=3D 
 

= --Apple-Mail=_BE338CFE-F9AE-4CCB-88EB-610C42FAF68C-- From nobody Wed Aug 2 14:17:58 2017 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1DD4A13217F for ; Wed, 2 Aug 2017 14:17:56 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -12.61 X-Spam-Level: X-Spam-Status: No, score=-12.61 tagged_above=-999 required=5 tests=[AC_DIV_BONANZA=0.001, BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=1.989, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H2=-2.8, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_SPF_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=amazon.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ovmGTQpO0vZK for ; Wed, 2 Aug 2017 14:17:53 -0700 (PDT) Received: from smtp-fw-6001.amazon.com (smtp-fw-6001.amazon.com [52.95.48.154]) (using TLSv1.2 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6E1F6132177 for ; Wed, 2 Aug 2017 14:17:53 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=amazon.com; i=@amazon.com; q=dns/txt; s=amazon201209; t=1501708673; x=1533244673; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=tq7LUaILf55gleP77qWtjFC8N24pMvddJ0HN7gytHUI=; b=oDDR0bd6SibndcIkGAXWtruVWyk5vKDq3MDjMct5XSLRLlG37Sfp2Kn0 FiHrSeizQBX+StaqXVUIBHtobwA6cEjIdmSoHiIMiLMK78qirRfBtwWQ7 26gXMi7E8m3M9vipp5/hj/QxhH3fY8Eqmm9w6dNsgrNhwNy1LHiKXbA5t o=; X-IronPort-AV: E=Sophos;i="5.41,313,1498521600"; d="scan'208,217";a="302325772" Received: from iad12-co-svc-p1-lb1-vlan3.amazon.com (HELO email-inbound-relay-64015.pdx4.amazon.com) ([10.43.8.6]) by smtp-border-fw-out-6001.iad6.amazon.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 02 Aug 2017 21:17:41 +0000 Received: from EX13MTAUWC001.ant.amazon.com (pdx1-ws-svc-p6-lb9-vlan3.pdx.amazon.com [10.236.137.198]) by email-inbound-relay-64015.pdx4.amazon.com (8.14.7/8.14.7) with ESMTP id v72LHeXd013636 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Wed, 2 Aug 2017 21:17:40 GMT Received: from EX13D11UWC001.ant.amazon.com (10.43.162.151) by EX13MTAUWC001.ant.amazon.com (10.43.162.135) with Microsoft SMTP Server (TLS) id 15.0.1104.5; Wed, 2 Aug 2017 21:17:40 +0000 Received: from EX13D11UWC004.ant.amazon.com (10.43.162.101) by EX13D11UWC001.ant.amazon.com (10.43.162.151) with Microsoft SMTP Server (TLS) id 15.0.1104.5; Wed, 2 Aug 2017 21:17:40 +0000 Received: from EX13D11UWC004.ant.amazon.com ([10.43.162.101]) by EX13D11UWC004.ant.amazon.com ([10.43.162.101]) with mapi id 15.00.1104.000; Wed, 2 Aug 2017 21:17:39 +0000 From: "Richard Backman, Annabelle" To: Phil Hunt CC: SecEvent Thread-Topic: [Id-event] WG Last Call for draft-ietf-secevent-token-02 Thread-Index: AQHTCj1Svuqk/S3glU+hjDHhS1RL1KJuaayAgAFFQACAAUW3gIAAgFUA//+TeQCAAHkUgP//njGA Date: Wed, 2 Aug 2017 21:17:39 +0000 Message-ID: <6420C01C-080D-4EFC-B2DD-12688D0F7A69@amazon.com> References: <72B8E7CA-3EB6-4194-BB77-CD46062FDFB7@amazon.com> <8FD5EE05-408D-4B4F-87BF-A1521EF6E66B@amazon.com> <617FC90D-F8B2-44B5-BF61-4B569C942246@oracle.com> In-Reply-To: <617FC90D-F8B2-44B5-BF61-4B569C942246@oracle.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/f.23.0.170610 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.43.161.180] Content-Type: multipart/alternative; boundary="_000_6420C01C080D4EFCB2DD12688D0F7A69amazoncom_" MIME-Version: 1.0 Precedence: Bulk Archived-At: Subject: Re: [Id-event] WG Last Call for draft-ietf-secevent-token-02 X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.22 List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 02 Aug 2017 21:17:56 -0000 --_000_6420C01C080D4EFCB2DD12688D0F7A69amazoncom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 TGV0IG1lIHJlc3RhdGUgdGhlIGlzcy9zdWIgcmVsYXRlZCBpdGVtcywgc3RhcnRpbmcgd2l0aCBp dGVtIDLigKYNCg0KQ29uc2lkZXIgYSBoeXBvdGhldGljYWwgcHJvZmlsaW5nIHNwZWNpZmljYXRp b24gd2hlcmUgdGhlIHN1YmplY3TigJlzIGlzc3VlciBpcyBhbHdheXMgdGhlIGF1ZGllbmNlIGZv ciB0aGUgdG9rZW4gKGUuZy4gYW4gUlAgc2VuZGluZyBldmVudHMgYmFjayB0byBhbiBJZFAsIHVz aW5nIHRoZSBJZFDigJlzIG93biBzdWJqZWN0IGlkZW50aWZpZXJzKS4gVGhlIGRyYWZ0IGFzIHdy aXR0ZW4gcHJvaGliaXRzIHRoZSBwcm9maWxpbmcgc3BlY2lmaWNhdGlvbiBmcm9tIHNpbXBseSBz dGF0aW5nIOKAnHRoZSBzdWJqZWN0IGlzc3VlciBpcyB0aGUgdmFsdWUgb2YgdGhlIGF1ZCBjbGFp beKAnSBhbmQgcmVxdWlyZXMgdGhhdCBpdCBpbnN0ZWFkIGR1cGxpY2F0ZSB0aGUgYXVkIHZhbHVl IGluIGFuIOKAnGlzc+KAnSBhdHRyaWJ1dGUgaW4gaXRzIGV2ZW50IHBheWxvYWRzLiBJIGRvbuKA mXQgcmVjYWxsIHRoaXMgYmVpbmcgdGhlIGNvbnNlbnN1cy4NCg0KSXRlbSA0IGlzIGFuIGF0dGVt cHQgdG8gaW5zdXJlIHRoYXQgaG93IHRoZSBzdWJqZWN0IGZvciBhbnkgZ2l2ZW4gZXZlbnQgaXMg cmVwcmVzZW50ZWQgaW4gdGhlIHRva2VuIGlzIGRlZmluZWQgKnNvbWV3aGVyZSouIEZlZWwgZnJl ZSB0byBpZ25vcmUgdGhlIDJuZCBzZW50ZW5jZSBvZiBteSBzdWdnZXN0ZWQgdGV4dCAo4oCcSXQg aXMgTk9UIFJFQ09NTUVOREVEIGZvciBQcm9maWxpbmcgU3BlY2lmaWNhdGlvbnPigKbigJ0pIGlm IHRoZXJlIGlzIGRpc2FncmVlbWVudCBvbiB0aGF0IHJlY29tbWVuZGF0aW9uOyBpdOKAmXMgdGhl IGZpcnN0IHNlbnRlbmNlIHRoYXTigJlzIGltcG9ydGFudC4gQXMgaXQgc3RhbmRzLCB0aGUgZHJh ZnQgZGVmaW5lcyBTdWJqZWN0IGluIHNlY3Rpb24gMS4yLCBidXQgbWFrZXMgbm8gY29tbWVudCBv biBob3cgU3ViamVjdCBpcyByZXByZXNlbnRlZCBhc2lkZSBmcm9tIHRoYXQgaXQgbWlnaHQgYmUg aW4gdGhlIHN1YiBjbGFpbSwgYW5kIHByb2ZpbGluZyBzcGVjaWZpY2F0aW9ucyB0aGF0IHVzZSBz dWIgc2hvdWxkIGRlY2xhcmUgc2VtYW50aWNzLiBNeSBzdWdnZXN0aW9uIGlzIHRvIHJlcXVpcmUg dGhhdCBwcm9maWxlIHNwZWNpZmljYXRpb25zIGRlY2xhcmUgaG93IHRoZXkgcmVwcmVzZW50IHRo ZSBzdWJqZWN0IG9mIHRoZWlyIGV2ZW50cywgaG93ZXZlciB0aGV5IGNob29zZSB0byBkbyBpdC4N Cg0KLS0NCkFubmFiZWxsZSBSaWNoYXJkIEJhY2ttYW4NCg0KRnJvbTogUGhpbCBIdW50IDxwaGls Lmh1bnRAb3JhY2xlLmNvbT4NCkRhdGU6IFdlZG5lc2RheSwgQXVndXN0IDIsIDIwMTcgYXQgMTow NyBQTQ0KVG86ICJSaWNoYXJkIEJhY2ttYW4sIEFubmFiZWxsZSIgPHJpY2hhbm5hQGFtYXpvbi5j b20+DQpDYzogU2VjRXZlbnQgPGlkLWV2ZW50QGlldGYub3JnPg0KU3ViamVjdDogUmU6IFtJZC1l dmVudF0gV0cgTGFzdCBDYWxsIGZvciBkcmFmdC1pZXRmLXNlY2V2ZW50LXRva2VuLTAyDQoNCkFu bmFiZWxsZSwNCg0KWW91IGFyZSBjb3JyZWN0ICMxIGlzbuKAmXQgcmVhbGx5IGNvbnRyb3ZlcnNp YWwuDQoNCkkgd291bGQgbG9vayBhdCB0aGUgbWludXRlcyBvZiBDaGljYWdvIChzZWUgTWlrZeKA mXMgcHJlc2VudGF0aW9uKSBhbmQgdGhlbiB0aGUgaW50ZXJ2ZW5pbmcgZGlzY3Vzc2luZyBwcmlv ciB0byBQcmFndWUuDQoNCknigJl2ZSBtYWRlIG15IGNvbmNlcm5zIGNsZWFyIHNvIEkgd29u4oCZ dCBib3RoZXIgcmVwZWF0aW5nIHRoZW0uIFlvdXIgY29tbWVudHMgc3VnZ2VzdCBzb21lIHJlbWFp bmluZyBkaXNhZ3JlZW1lbnQgb24gd2hhdCBzaG91bGQgYmUgaW4gdGhlIGNvbW1vbiBTRVQgVG9r ZW4gc3BlYyB2cyBkb3duIHN0cmVhbSBldmVudCBwcm9maWxlcy4gRS5nLiBzb21lIGhhdmUgZXhw cmVzc2VkIHRoYXQgU0VU4oCZcyBqb2IgaXMgc2ltcGx5IHRvIGRlZmluZSB0aGUgZXZlbnQgY2xh aW0gYW5kIG5vdGhpbmcgbW9yZS4NCg0KUGhpbA0KDQpPcmFjbGUgQ29ycG9yYXRpb24sIElkZW50 aXR5IENsb3VkIFNlcnZpY2VzIEFyY2hpdGVjdCAmIFN0YW5kYXJkcw0KQGluZGVwZW5kZW50aWQN Cnd3dy5pbmRlcGVuZGVudGlkLmNvbTxodHRwOi8vd3d3LmluZGVwZW5kZW50aWQuY29tPg0KcGhp bC5odW50QG9yYWNsZS5jb208bWFpbHRvOnBoaWwuaHVudEBvcmFjbGUuY29tPg0KDQpPbiBBdWcg MiwgMjAxNywgYXQgMTI6NTQgUE0sIFJpY2hhcmQgQmFja21hbiwgQW5uYWJlbGxlIDxyaWNoYW5u YUBhbWF6b24uY29tPG1haWx0bzpyaWNoYW5uYUBhbWF6b24uY29tPj4gd3JvdGU6DQoNClBoaWws DQoNCkNhbiB5b3UgYmUgbW9yZSBzcGVjaWZpYyBhYm91dCB3aGljaCBpdGVtcyBoYXZlIGJlZW4g ZGlzY3Vzc2VkIGFuZCB3aGF0IHRoZSBjb25zZW5zdXMgd2FzPyBJdGVtcyAyIGFuZCA0IHRvdWNo IG9uIHRoZSBpc3N1ZXIgbWlzbWF0Y2ggbWF0dGVyLCBidXQgYXJlIGFib3V0IGNsYXJpZnlpbmcg cmVxdWlyZW1lbnRzIGZvciBwcm9maWxpbmcgc3BlY2lmaWNhdGlvbnMgYW5kIHNvIGZhciBhcyBJ IGNhbiB0ZWxsIGFyZSBhbGlnbmVkIHdpdGggdGhlIGludGVudGlvbnMgb2YgdGhlIGN1cnJlbnQg dGV4dCByZWdhcmRpbmcgdGhlIGhhbmRsaW5nIGFuZCBpbnRlcnByZXRhdGlvbiBvZiB0aGUg4oCc c3Vi4oCdIGFuZCDigJxpc3PigJ0gY2xhaW1zLiBTaW1pbGFybHkgaXRlbSA2IGFkZHJlc3NlcyBh IHByb2ZpbGluZyBzcGVjaWZpY2F0aW9uIHJlcXVpcmVtZW50IHJlbGF0ZWQgdG8gdGhlIEpXVCBj b25mdXNpb24gaXNzdWUsIGFuZCBkb2VzIG5vdCBkZXZpYXRlIGZyb20gdGhlIFdHIGNvbnNlbnN1 cyBhcyBJIHVuZGVyc3RhbmQgaXQuDQoNCkl0ZW0gMSwgSSBzaG91bGQgaG9wZSwgaXMgdW5jb250 cm92ZXJzaWFsLiDimLoNCg0KLS0NCkFubmFiZWxsZSBSaWNoYXJkIEJhY2ttYW4NCklkZW50aXR5 IFNlcnZpY2VzDQoNCg0KRnJvbTogSWQtZXZlbnQgPGlkLWV2ZW50LWJvdW5jZXNAaWV0Zi5vcmc8 bWFpbHRvOmlkLWV2ZW50LWJvdW5jZXNAaWV0Zi5vcmc+PiBvbiBiZWhhbGYgb2YgUGhpbCBIdW50 IDxwaGlsLmh1bnRAb3JhY2xlLmNvbTxtYWlsdG86cGhpbC5odW50QG9yYWNsZS5jb20+Pg0KRGF0 ZTogV2VkbmVzZGF5LCBBdWd1c3QgMiwgMjAxNyBhdCAxMjoyMiBQTQ0KVG86ICJSaWNoYXJkIEJh Y2ttYW4sIEFubmFiZWxsZSIgPHJpY2hhbm5hQGFtYXpvbi5jb208bWFpbHRvOnJpY2hhbm5hQGFt YXpvbi5jb20+Pg0KQ2M6IFNlY0V2ZW50IDxpZC1ldmVudEBpZXRmLm9yZzxtYWlsdG86aWQtZXZl bnRAaWV0Zi5vcmc+Pg0KU3ViamVjdDogUmU6IFtJZC1ldmVudF0gV0cgTGFzdCBDYWxsIGZvciBk cmFmdC1pZXRmLXNlY2V2ZW50LXRva2VuLTAyDQoNCkFubmFiZWxsZSwNCg0KVGhhbmtzIGZvciB0 aGUgY29tbWVudHMuIE1hbnkgb2YgdGhlc2UgaXRlbXMgaGF2ZSBiZWVuIGRpc2N1c3NlZCBhdCBs ZW5ndGggYnV0IG1hbnkgbWVtYmVycyBzdHJvbmdseSB3YW50IHRvIGxlYXZlIGFzIGlzLiAgSeKA mWxsIGF3YWl0IGZ1cnRoZXIgZ3JvdXAgZGlzY3Vzc2lvbi4NCg0KUmU6IGl0ZW0gNSAtIEkgdGhp bmsgSSBuZWVkIHRvIHJlLXdyaXRlIHRoYXQgYmFzZWQgb24gZmVlZGJhY2sgZnJvbSBOYXQgYW5k IE1hcml1cy4gIFN0YXkgdHVuZWQuDQoNClNvbWUgb2YgdGhlc2UgaXRlbXMgYXJlIGFsc28gYmVp bmcgZGlzY3Vzc2VkIGluIHRoZSBuZXcgSldUIEJDUCBkb2N1bWVudC4gIE1heWJlIHdlIHNob3Vs ZCBob2xkIHRoZSBTRVQgVG9rZW4gc3BlYyBzbyB3ZSBjYW4gcmVmZXIgdG8gdGhlIEJDUCBhbmQg cHVibGlzaCB0b2dldGhlcj8gIFRoYXQgc2FpZCwgSSBrbm93IG1hbnkgd2FudCB0aGlzIGZpbmFs aXplZCBBU0FQLg0KDQpQaGlsDQoNCk9yYWNsZSBDb3Jwb3JhdGlvbiwgSWRlbnRpdHkgQ2xvdWQg U2VydmljZXMgQXJjaGl0ZWN0ICYgU3RhbmRhcmRzDQpAaW5kZXBlbmRlbnRpZA0Kd3d3LmluZGVw ZW5kZW50aWQuY29tPGh0dHBzOi8vdXJsZGVmZW5zZS5wcm9vZnBvaW50LmNvbS92Mi91cmw/dT1o dHRwLTNBX193d3cuaW5kZXBlbmRlbnRpZC5jb21fJmQ9RHdNR2FRJmM9Um9QMVl1bUNYQ2dhV0h2 bFpZUjhQUWN4QktDWDVZVHBrS1kwNTdTYksxMCZyPUpCbTViaVJyS3VnQ0gwRmtJVFNlR0p4UEVp dnpqV3dsTktlNENfbExJR2smbT1kcjhESFJRN1RDdXduM1FnblhaRGN5dVA5Z0Utd3JkS1Vtckot TVNsdzVnJnM9R1ZZYWJjYmRwdEtwZFZ5QUdHU043d3doUWFvVXVJYll2M2cwX3ZUV3A0byZlPT4N CnBoaWwuaHVudEBvcmFjbGUuY29tPG1haWx0bzpwaGlsLmh1bnRAb3JhY2xlLmNvbT4NCg0KT24g QXVnIDIsIDIwMTcsIGF0IDExOjQzIEFNLCBSaWNoYXJkIEJhY2ttYW4sIEFubmFiZWxsZSA8cmlj aGFubmFAYW1hem9uLmNvbTxtYWlsdG86cmljaGFubmFAYW1hem9uLmNvbT4+IHdyb3RlOg0KDQpU aGFua3MgZm9yIGFsbCB0aGUgd29yayBvbiB0aGlzISBJdCB3YXMgbXkgdW5kZXJzdGFuZGluZyB0 aGF0IHRoZXJlIHdhcyBhbiBvcGVuIGl0ZW0gZnJvbSBQcmFndWUgcmVnYXJkaW5nIHdoZXRoZXIg dG8gZXhwbGljaXRseSBkZWNsYXJlIHRoZSBldmVudHPigJkgcHJvZmlsaW5nIHNwZWNpZmljYXRp b24gaW4gdGhlIFNFVC4gSGFzIHRoaXMgYmVlbiBkaXNjdXNzZWQgZnVydGhlciwgb3IgZG8gd2Ug c3RpbGwgbmVlZCB0byBjbG9zZSBvbiBpdD8NCg0KSSBoYXZlIHNldmVyYWwgY29tbWVudHMvcXVl c3Rpb25zIG9uIHRoZSBjdXJyZW50IGRyYWZ0Og0KDQoNCiAgMS4gIOKAnFByb2ZpbGUgU3BlY2lm aWNhdGlvbuKAnSB2cy4g4oCcUHJvZmlsaW5nIFNwZWNpZmljYXRpb27igJ0NClRoZXJlIGFyZSBh IGhhbmRmdWwgb2YgaW5zdGFuY2VzIG9mIHRoZSBmb3JtZXIgdGhhdCBuZWVkIHRvIGJlIGNoYW5n ZWQgdG8gdGhlIGxhdHRlciwgdG8gbWF0Y2ggdGhlIHRlcm0gYXMgZGVmaW5lZCBpbiBzZWN0aW9u IDEuMjoNCg0KICAgICAqICAgSW4gdGhlIOKAnHN1YuKAnSBkZWZpbml0aW9uIGluIHNlY3Rpb24g MS4yDQogICAgICogICBJbiBzZWN0aW9uIDMNCiAgICAgKiAgIEluIHNlY3Rpb24gNC4yDQoNCiAg MS4gIE5vdGUgcmVnYXJkaW5nIFN1YmplY3QgSXNzdWVyIHZzLiBTRVQgSXNzdWVyDQpUaGUgbm90 ZSByZWdhcmRpbmcgdGhlIHBvdGVudGlhbCBmb3IgU3ViamVjdCBhbmQgU0VUIElzc3VlciBtaXNt YXRjaCAoaW4gdGhlIOKAnGlzc+KAnSBkZWZpbml0aW9uIGluIHNlY3Rpb24gMS4yKSBpcyBJIHRo aW5rIG1vcmUgcHJlc2NyaXB0aXZlIHRoYW4gaW50ZW5kZWQuIEFzIHdyaXR0ZW4sIGl0IG1hbmRh dGVzIHBsYWNpbmcgdGhlIFN1YmplY3TigJlzIElzc3VlciBpbiBhbiDigJxpc3PigJ0gdmFsdWUg d2l0aGluIHRoZSBldmVudCBwYXlsb2FkLCBidXQgZG9lcyBub3QgZGVmaW5lIGEgZm9ybWF0IG9y IHN0cnVjdHVyZSBmb3IgdGhpcyB2YWx1ZS4gVGhlIGxvZ2ljYWwgZm9ybWF0IOKAkyB0aGF0IG9m IHRoZSDigJxpc3PigJ0gSldUIGNsYWltIOKAkyBtYXkgb3IgbWF5IG5vdCBiZSBhcHByb3ByaWF0 ZSwgZGVwZW5kaW5nIG9uIHRoZSBuYXR1cmUgb2YgdGhlIGV2ZW50IGFuZCBpdHMgU3ViamVjdC4g SSBzdWdnZXN0IHJlbW92aW5nIHRoaXMgbm90ZSBhbmQgY292ZXJpbmcgdGhpcyBjb25jZXJuIGVs c2V3aGVyZSAoc2VlICM0IGJlbG93LCByZTogU3ViamVjdCBJZGVudGlmaWNhdGlvbikuDQoNCg0K DQogIDIuICBFeHBsaWNpdCBUeXBpbmcgb2YgU0VUcw0KSSBzdWdnZXN0IHJlbW92aW5nIHRoZSB0 ZXh0IOKAnGlmIHRoZSBTRVQgY291bGQgYmUgdXNlZCBpbiBhbiBhcHBsaWNhdGlvbiBjb250ZXh0 IGluIHdoaWNoIGl0IGNvdWxkIGJlIGNvbmZ1c2VkIHdpdGggb3RoZXIga2luZHMgb2YgSldUc+KA nSBmcm9tIHRoZSBmaXJzdCBwYXJhZ3JhcGggb2Ygc2VjdGlvbiAyLjIsIG1ha2luZyB0aGUgc2Vj ZXZlbnQrand0IHR5cCBoZWFkZXIgbWFuZGF0b3J5IHRvIGltcGxlbWVudCBmb3IgYWxsIFNFVHMu IFRoaXMgY29uZGl0aW9uYWwgaXMgaW1wb3NzaWJsZSB0byBldmFsdWF0ZSwgYXMgbmV3IHR5cGVz IG9mIEpXVHMgd2lsbCBiZSBpbnRyb2R1Y2VkIG92ZXIgdGltZS4gSnVzdCBjb25zaWRlcmluZyBl eGlzdGluZyBKV1RzLCBpdCBpcyBhIGxvdCB0byBhc2sgZm9yIFByb2ZpbGluZyBTcGVjIGF1dGhv cnMgdG8gZnVsbHkgZXhhbWluZSB0aGUgY29udGVudHMgYW5kIHVzYWdlIG9mIGV2ZXJ5IGV4aXN0 aW5nIEpXVC4gTWFuZGF0aW5nIHVzZSBvZiB0eXAgZm9yIFNFVHMgdGFrZXMgdGhpcyBsb2FkIG9m ZiBvZiBQcm9maWxpbmcgU3BlYyBhdXRob3JzIGFuZCBpbnN1cmVzIHRoYXQgZnV0dXJlIHNwZWNz IGhhdmUgYSBjb25zaXN0ZW50LCByZWxpYWJsZSB3YXkgdG8gZGVmZW5kIGFnYWluc3QgSldUIHR5 cGUgY29uZnVzaW9uLg0KDQoNCg0KICAzLiAgUmVxdWlyZW1lbnRzIGZvciBTRVQgUHJvZmlsZXM6 IFN1YmplY3QgSWRlbnRpZmljYXRpb24NCkkgc3VnZ2VzdCBhZGRpbmcgdGV4dCBhbG9uZyB0aGUg bGluZXMgb2Yg4oCcUHJvZmlsaW5nIFNwZWNpZmljYXRpb25zIE1VU1QgZGVmaW5lIGZvciBlYWNo IG9mIHRoZWlyIGV2ZW50cyBob3cgdGhlIFN1YmplY3QgaXMgaWRlbnRpZmllZCBpbiB0aGUgU0VU LCBhcyB3ZWxsIGFzIGhvdyB0byBhZGRyZXNzIGNvbmZsaWN0cyB0aGUgZXZlbnQgU3ViamVjdOKA mXMgSXNzdWVyIGFuZCB0aGUgU0VUIElzc3VlciBpZiBhcHBsaWNhYmxlLiBJdCBpcyBOT1QgUkVD T01NRU5ERUQgZm9yIFByb2ZpbGluZyBTcGVjaWZpY2F0aW9ucyB0byB1c2UgdGhlIOKAnHN1YuKA nSBjbGFpbSBpbiBjYXNlcyB3aGVyZSB0aGUgU3ViamVjdCBpcyBub3QgZ2xvYmFsbHkgdW5pcXVl IGFuZCBoYXMgYSBkaWZmZXJlbnQgSXNzdWVyIGZyb20gdGhlIFNFVCBpdHNlbGYu4oCdDQoNCg0K DQogIDQuICBHdWlkYW5jZSBmb3IgU2lnbmluZyBTRVRzDQpUaGUgdGV4dCBpbiB0aGUgbGFzdCBw YXJhZ3JhcGggb2Ygc2VjdGlvbiA0LjEgaXMgdW5jbGVhciB0byBtZS4gSXQgc2VlbXMgdG8gc3Vn Z2VzdCB0aGF0IGl0IGlzIHNhZmUgdG8gc2VuZCB1bnNpZ25lZCBKV1RzIG92ZXIgYSBjaGFubmVs IHRoYXQgbGFja3MgdHJhbnNwb3J0LWxheWVyIHNlY3VyaXR5LCBzbyBsb25nIGFzIHJlcXVlc3Rz IGluY2x1ZGUgYSBiZWFyZXIgdG9rZW4gb3IgdXNlIEJhc2ljIEF1dGhlbnRpY2F0aW9uLiBBbSBJ IG1pc3JlYWRpbmcgdGhpcz8gSXQgc2VlbXMgY291bnRlciB0byB0aGUgZ3VpZGFuY2UgZ2l2ZW4g ZWFybGllciBpbiB0aGUgc2FtZSBzZWN0aW9uLg0KDQoNCg0KICA1LiAgRGlzdGluZ3Vpc2hpbmcg U0VUcyBmcm9tIG90aGVyIGtpbmRzIG9mIEpXVHMNClRoZSBsYXN0IHNlbnRlbmNlIG9mIHRoZSBm aXJzdCBwYXJhZ3JhcGggb2Ygc2VjdGlvbiA0Ljcgc2VlbXMgaW1wb3NzaWJsZSB0byBtZS4gUHJv ZmlsaW5nIFNwZWNpZmljYXRpb25zIGNhbm5vdCBiZSBzb2xlbHkgcmVzcG9uc2libGUgZm9yIGVu c3VyaW5nIGluY29tcGF0aWJpbGl0eSB3aXRoIGFsbCBmdXR1cmUgSldUIHByb2ZpbGVzLiBUaGV5 IGNhbiBhdCBiZXN0IGVuc3VyZSBpbmNvbXBhdGliaWxpdHkgd2l0aCBleGlzdGluZyBKV1QgcHJv ZmlsZXMgYW5kIGJlIGNvbXBhdGlibGUgd2l0aCBhIHN0YW5kYXJkIG1lY2hhbmlzbSBieSB3aGlj aCBmdXR1cmUgSldUIHByb2ZpbGVzIG1heSBlbnN1cmUgaW5jb21wYXRpYmlsaXR5IChlLmcuIHRo ZSDigJxzZWNldmVudCtqd3TigJ0gdHlwIGhlYWRlcikuIEl0IG1heSBiZSBlbm91Z2ggdG8gc3Ry aWtlIHRoZSDigJwob3Igb3RoZXIp4oCdIHRleHQgZnJvbSB0aGlzIHNlbnRlbmNlLg0KDQoNCg0K DQotLQ0KQW5uYWJlbGxlIFJpY2hhcmQgQmFja21hbg0KSWRlbnRpdHkgU2VydmljZXMNCg0KDQpG cm9tOiBJZC1ldmVudCA8aWQtZXZlbnQtYm91bmNlc0BpZXRmLm9yZzxtYWlsdG86aWQtZXZlbnQt Ym91bmNlc0BpZXRmLm9yZz4+IG9uIGJlaGFsZiBvZiAiTS5MaXphckBPQ0ciIDxtLmxpemFyQG9w ZW5jb25zZW50Z3JvdXAuY29tPG1haWx0bzptLmxpemFyQG9wZW5jb25zZW50Z3JvdXAuY29tPj4N CkRhdGU6IFR1ZXNkYXksIEF1Z3VzdCAxLCAyMDE3IGF0IDk6MTcgQU0NClRvOiBNaWtlIEpvbmVz IDxNaWNoYWVsLkpvbmVzQG1pY3Jvc29mdC5jb208bWFpbHRvOk1pY2hhZWwuSm9uZXNAbWljcm9z b2Z0LmNvbT4+DQpDYzogWWFyb24gU2hlZmZlciA8eWFyb25mLmlldGZAZ21haWwuY29tPG1haWx0 bzp5YXJvbmYuaWV0ZkBnbWFpbC5jb20+PiwgU2VjRXZlbnQgPGlkLWV2ZW50QGlldGYub3JnPG1h aWx0bzppZC1ldmVudEBpZXRmLm9yZz4+DQpTdWJqZWN0OiBSZTogW0lkLWV2ZW50XSBXRyBMYXN0 IENhbGwgZm9yIGRyYWZ0LWlldGYtc2VjZXZlbnQtdG9rZW4tMDINCg0KKzEgb24gZXhpc3Rpbmcg dGV4dCAuDQoNCkFncmVlIHRoZSBkb2N1bWVudCBpcyByZWFkeSB0byBwdWJsaXNoDQoNCi0gTWFy aw0KDQpPbiAzMSBKdWwgMjAxNywgYXQgMTY6NTMsIE1pa2UgSm9uZXMgPE1pY2hhZWwuSm9uZXNA bWljcm9zb2Z0LmNvbTxtYWlsdG86TWljaGFlbC5Kb25lc0BtaWNyb3NvZnQuY29tPj4gd3JvdGU6 DQoNCkkgYmVsaWV2ZSB0aGF0IHRoZSBzcGVjaWZpY2F0aW9uIGlzIHJlYWR5IHRvIHB1Ymxpc2gg YXMtaXMuICBJdCBhbHJlYWR5IG1lZXRzIHRoZSBuZWVkcyBvZiB0aGUga25vd24gdXNlIGNhc2Vz IGFuZCBpcyBpbiBwcm9kdWN0aW9uIHVzZS4NCg0KICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIC0tIE1pa2UNCg0KRnJvbTogSWQt ZXZlbnQgW21haWx0bzppZC1ldmVudC1ib3VuY2VzQGlldGYub3JnXSBPbiBCZWhhbGYgT2YgWWFy b24gU2hlZmZlcg0KU2VudDogTW9uZGF5LCBKdWx5IDMxLCAyMDE3IDE6NDAgUE0NClRvOiBTZWNF dmVudCA8aWQtZXZlbnRAaWV0Zi5vcmc8bWFpbHRvOmlkLWV2ZW50QGlldGYub3JnPj4NClN1Ympl Y3Q6IFtJZC1ldmVudF0gV0cgTGFzdCBDYWxsIGZvciBkcmFmdC1pZXRmLXNlY2V2ZW50LXRva2Vu LTAyDQoNClRoaXMgaXMgdG8gYW5ub3VuY2Ugd29ya2luZyBncm91cCBsYXN0IGNhbGwgb24gdGhp cyBkcmFmdCAoaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJhZnQtaWV0Zi1zZWNl dmVudC10b2tlbi88aHR0cHM6Ly91cmxkZWZlbnNlLnByb29mcG9pbnQuY29tL3YyL3VybD91PWh0 dHBzLTNBX19kYXRhdHJhY2tlci5pZXRmLm9yZ19kb2NfZHJhZnQtMkRpZXRmLTJEc2VjZXZlbnQt MkR0b2tlbl8mZD1Ed01HYVEmYz1Sb1AxWXVtQ1hDZ2FXSHZsWllSOFBRY3hCS0NYNVlUcGtLWTA1 N1NiSzEwJnI9SkJtNWJpUnJLdWdDSDBGa0lUU2VHSnhQRWl2empXd2xOS2U0Q19sTElHayZtPUZ6 dFN5TzlJZFIybHkyQ3dtdTFSaE1kWERLdzFlcGpHcF80cGVsX29fcGcmcz1OY0ZGbUxaNmFGRFQy N0VvU1REN3JrUDJtMm5rdFdxZ1NkM19DUGVwOFV3JmU9PikuDQoNClBsZWFzZSBzZW5kIHlvdXIg Y29tbWVudHMgdG8gdGhlIGxpc3QuIEV2ZW4gaWYgeW91IGFyZSBwZXJmZWN0bHkgaGFwcHkgd2l0 aCB0aGUgZHJhZnQsIHBsZWFzZSBsZXQgdXMga25vdyB0aGF0IHlvdSBzdXBwb3J0IGl0cyBwdWJs aWNhdGlvbiBhcy1pcyBieSBwb3N0aW5nIHRvIHRoZSBsaXN0Lg0KDQpCZWNhdXNlIG9mIHRoZSBz dW1tZXIgaG9saWRheXMsIHRoaXMgbGFzdCBjYWxsIGlzIG9wZW4gZm9yIDMgd2Vla3MsIHVudGls IEF1Zy4gMjEuDQoNClRoYW5rcywNCiAgICBEaWNrIGFuZCBZYXJvbg0KX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCklkLWV2ZW50IG1haWxpbmcgbGlzdA0K SWQtZXZlbnRAaWV0Zi5vcmc8bWFpbHRvOklkLWV2ZW50QGlldGYub3JnPg0KaHR0cHM6Ly93d3cu aWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9pZC1ldmVudDxodHRwczovL3VybGRlZmVuc2UucHJv b2Zwb2ludC5jb20vdjIvdXJsP3U9aHR0cHMtM0FfX3d3dy5pZXRmLm9yZ19tYWlsbWFuX2xpc3Rp bmZvX2lkLTJEZXZlbnQmZD1Ed01HYVEmYz1Sb1AxWXVtQ1hDZ2FXSHZsWllSOFBRY3hCS0NYNVlU cGtLWTA1N1NiSzEwJnI9SkJtNWJpUnJLdWdDSDBGa0lUU2VHSnhQRWl2empXd2xOS2U0Q19sTElH ayZtPUZ6dFN5TzlJZFIybHkyQ3dtdTFSaE1kWERLdzFlcGpHcF80cGVsX29fcGcmcz1Zd3hXOTVz NW9JQnJCTGtmdWlNVUlZdXpGSWNkblZhOEJuMXp2WjRVdXJjJmU9Pg0KDQoNCg0KDQpfX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KSWQtZXZlbnQgbWFpbGlu ZyBsaXN0DQpJZC1ldmVudEBpZXRmLm9yZzxtYWlsdG86SWQtZXZlbnRAaWV0Zi5vcmc+DQpodHRw czovL3VybGRlZmVuc2UucHJvb2Zwb2ludC5jb20vdjIvdXJsP3U9aHR0cHMtM0FfX3d3dy5pZXRm Lm9yZ19tYWlsbWFuX2xpc3RpbmZvX2lkLTJEZXZlbnQmZD1Ed0lDQWcmYz1Sb1AxWXVtQ1hDZ2FX SHZsWllSOFBRY3hCS0NYNVlUcGtLWTA1N1NiSzEwJnI9SkJtNWJpUnJLdWdDSDBGa0lUU2VHSnhQ RWl2empXd2xOS2U0Q19sTElHayZtPUZ6dFN5TzlJZFIybHkyQ3dtdTFSaE1kWERLdzFlcGpHcF80 cGVsX29fcGcmcz1Zd3hXOTVzNW9JQnJCTGtmdWlNVUlZdXpGSWNkblZhOEJuMXp2WjRVdXJjJmU9 DQoNCg0K --_000_6420C01C080D4EFCB2DD12688D0F7A69amazoncom_ Content-Type: text/html; charset="utf-8" Content-ID: <8D7C94529753B144AAC9026E5DD91B78@amazon.com> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iVGl0bGUiIGNvbnRlbnQ9IiI+DQo8bWV0YSBuYW1lPSJLZXl3b3JkcyIgY29udGVu dD0iIj4NCjxtZXRhIG5hbWU9IkdlbmVyYXRvciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUg KGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxlPjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8N CkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0 IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJ cGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWls eToiQXBwbGUgQ29sb3IgRW1vamkiOw0KCXBhbm9zZS0xOjAgMCAwIDAgMCAwIDAgMCAwIDA7fQ0K LyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWwsIGRpdi5N c29Ob3JtYWwNCgl7bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1z aXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQphOmxpbmss IHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpibHVl Ow0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFuLk1zb0h5cGVy bGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpwdXJwbGU7DQoJ dGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpzcGFuLmFwcGxlLXN0eWxlLXNwYW4NCgl7bXNv LXN0eWxlLW5hbWU6YXBwbGUtc3R5bGUtc3Bhbjt9DQpzcGFuLmFwcGxlLWNvbnZlcnRlZC1zcGFj ZQ0KCXttc28tc3R5bGUtbmFtZTphcHBsZS1jb252ZXJ0ZWQtc3BhY2U7fQ0Kc3Bhbi5FbWFpbFN0 eWxlMTkNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWwtcmVwbHk7DQoJZm9udC1mYW1pbHk6IkNh bGlicmkiLHNhbnMtc2VyaWY7DQoJY29sb3I6d2luZG93dGV4dDt9DQpzcGFuLm1zb0lucw0KCXtt c28tc3R5bGUtdHlwZTpleHBvcnQtb25seTsNCgltc28tc3R5bGUtbmFtZToiIjsNCgl0ZXh0LWRl Y29yYXRpb246dW5kZXJsaW5lOw0KCWNvbG9yOnRlYWw7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNv LXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1zaXplOjEwLjBwdDt9DQpAcGFnZSBXb3Jk U2VjdGlvbjENCgl7c2l6ZTo4LjVpbiAxMS4waW47DQoJbWFyZ2luOjEuMGluIDEuMGluIDEuMGlu IDEuMGluO30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLyogTGlz dCBEZWZpbml0aW9ucyAqLw0KQGxpc3QgbDANCgl7bXNvLWxpc3QtaWQ6MTQwMDk3NzA0MDsNCglt c28tbGlzdC10ZW1wbGF0ZS1pZHM6LTYyOTM3ODI0MDt9DQpAbGlzdCBsMQ0KCXttc28tbGlzdC1p ZDoxNjM1OTM4OTc3Ow0KCW1zby1saXN0LXRlbXBsYXRlLWlkczotNjc3MTg1ODIyO30NCkBsaXN0 IGwxOmxldmVsMg0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDphbHBoYS1sb3dlcjsNCgltc28t bGV2ZWwtdGFiLXN0b3A6MS4waW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0K CXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsMg0KCXttc28tbGlzdC1pZDoyMTQ1ODQ2OTEw Ow0KCW1zby1saXN0LXRlbXBsYXRlLWlkczotMTg0NzkyMTcwNDt9DQpAbGlzdCBsMjpsZXZlbDEN Cgl7bXNvLWxldmVsLXN0YXJ0LWF0OjI7DQoJbXNvLWxldmVsLXRhYi1zdG9wOi41aW47DQoJbXNv LWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpvbA0K CXttYXJnaW4tYm90dG9tOjBpbjt9DQp1bA0KCXttYXJnaW4tYm90dG9tOjBpbjt9DQotLT48L3N0 eWxlPg0KPC9oZWFkPg0KPGJvZHkgYmdjb2xvcj0id2hpdGUiIGxhbmc9IkVOLVVTIiBsaW5rPSJi bHVlIiB2bGluaz0icHVycGxlIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj5MZXQgbWUgcmVzdGF0ZSB0aGUgaXNzL3N1YiByZWxhdGVkIGl0ZW1zLCBz dGFydGluZyB3aXRoIGl0ZW0gMuKApjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5Db25zaWRlciBh IGh5cG90aGV0aWNhbCBwcm9maWxpbmcgc3BlY2lmaWNhdGlvbiB3aGVyZSB0aGUgc3ViamVjdOKA mXMgaXNzdWVyIGlzIGFsd2F5cyB0aGUgYXVkaWVuY2UgZm9yIHRoZSB0b2tlbiAoZS5nLiBhbiBS UCBzZW5kaW5nIGV2ZW50cyBiYWNrIHRvIGFuIElkUCwgdXNpbmcgdGhlIElkUOKAmXMgb3duIHN1 YmplY3QgaWRlbnRpZmllcnMpLiBUaGUgZHJhZnQgYXMgd3JpdHRlbiBwcm9oaWJpdHMgdGhlIHBy b2ZpbGluZw0KIHNwZWNpZmljYXRpb24gZnJvbSBzaW1wbHkgc3RhdGluZyDigJx0aGUgc3ViamVj dCBpc3N1ZXIgaXMgdGhlIHZhbHVlIG9mIHRoZSBhdWQgY2xhaW3igJ0gYW5kIHJlcXVpcmVzIHRo YXQgaXQgaW5zdGVhZCBkdXBsaWNhdGUgdGhlIGF1ZCB2YWx1ZSBpbiBhbiDigJxpc3PigJ0gYXR0 cmlidXRlIGluIGl0cyBldmVudCBwYXlsb2Fkcy4gSSBkb27igJl0IHJlY2FsbCB0aGlzIGJlaW5n IHRoZSBjb25zZW5zdXMuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpw PiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkl0ZW0gNCBpcyBhbiBhdHRl bXB0IHRvIGluc3VyZSB0aGF0IGhvdyB0aGUgc3ViamVjdCBmb3IgYW55IGdpdmVuIGV2ZW50IGlz IHJlcHJlc2VudGVkIGluIHRoZSB0b2tlbiBpcyBkZWZpbmVkICo8Yj5zb21ld2hlcmU8L2I+Ki4g RmVlbCBmcmVlIHRvIGlnbm9yZSB0aGUgMjxzdXA+bmQ8L3N1cD4gc2VudGVuY2Ugb2YgbXkgc3Vn Z2VzdGVkIHRleHQgKOKAnEl0IGlzIE5PVCBSRUNPTU1FTkRFRCBmb3IgUHJvZmlsaW5nDQogU3Bl Y2lmaWNhdGlvbnPigKbigJ0pIGlmIHRoZXJlIGlzIGRpc2FncmVlbWVudCBvbiB0aGF0IHJlY29t bWVuZGF0aW9uOyBpdOKAmXMgdGhlIGZpcnN0IHNlbnRlbmNlIHRoYXTigJlzIGltcG9ydGFudC4g QXMgaXQgc3RhbmRzLCB0aGUgZHJhZnQgZGVmaW5lcyBTdWJqZWN0IGluIHNlY3Rpb24gMS4yLCBi dXQgbWFrZXMgbm8gY29tbWVudCBvbiBob3cgU3ViamVjdCBpcyByZXByZXNlbnRlZCBhc2lkZSBm cm9tIHRoYXQgaXQgbWlnaHQgYmUgaW4gdGhlIHN1YiBjbGFpbSwNCiBhbmQgcHJvZmlsaW5nIHNw ZWNpZmljYXRpb25zIHRoYXQgdXNlIHN1YiBzaG91bGQgZGVjbGFyZSBzZW1hbnRpY3MuIE15IHN1 Z2dlc3Rpb24gaXMgdG8gcmVxdWlyZSB0aGF0IHByb2ZpbGUgc3BlY2lmaWNhdGlvbnMgZGVjbGFy ZSBob3cgdGhleSByZXByZXNlbnQgdGhlIHN1YmplY3Qgb2YgdGhlaXIgZXZlbnRzLCBob3dldmVy IHRoZXkgY2hvb3NlIHRvIGRvIGl0LjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJv bWFuJnF1b3Q7LHNlcmlmIj4tLSZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+QW5uYWJlbGxlIFJpY2hhcmQgQmFja21h bjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86 cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNv bGlkICNCNUM0REYgMS4wcHQ7cGFkZGluZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtjb2xvcjpibGFjayI+ RnJvbTogPC9zcGFuPjwvYj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtjb2xvcjpibGFj ayI+UGhpbCBIdW50ICZsdDtwaGlsLmh1bnRAb3JhY2xlLmNvbSZndDs8YnI+DQo8Yj5EYXRlOiA8 L2I+V2VkbmVzZGF5LCBBdWd1c3QgMiwgMjAxNyBhdCAxOjA3IFBNPGJyPg0KPGI+VG86IDwvYj4m cXVvdDtSaWNoYXJkIEJhY2ttYW4sIEFubmFiZWxsZSZxdW90OyAmbHQ7cmljaGFubmFAYW1hem9u LmNvbSZndDs8YnI+DQo8Yj5DYzogPC9iPlNlY0V2ZW50ICZsdDtpZC1ldmVudEBpZXRmLm9yZyZn dDs8YnI+DQo8Yj5TdWJqZWN0OiA8L2I+UmU6IFtJZC1ldmVudF0gV0cgTGFzdCBDYWxsIGZvciBk cmFmdC1pZXRmLXNlY2V2ZW50LXRva2VuLTAyPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkFubmFiZWxsZSwgPG86cD48L286cD48L3A+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5Zb3UgYXJlIGNvcnJlY3QgIzEgaXNu4oCZdCByZWFs bHkgY29udHJvdmVyc2lhbC48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+SSB3b3VsZCBsb29rIGF0IHRoZSBtaW51dGVzIG9mIENoaWNhZ28gKHNl ZSBNaWtl4oCZcyBwcmVzZW50YXRpb24pIGFuZCB0aGVuIHRoZSBpbnRlcnZlbmluZyBkaXNjdXNz aW5nIHByaW9yIHRvIFByYWd1ZS48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+SeKAmXZlIG1hZGUgbXkgY29uY2VybnMgY2xlYXIgc28gSSB3b27i gJl0IGJvdGhlciByZXBlYXRpbmcgdGhlbS4gWW91ciBjb21tZW50cyBzdWdnZXN0IHNvbWUgcmVt YWluaW5nIGRpc2FncmVlbWVudCBvbiB3aGF0IHNob3VsZCBiZSBpbiB0aGUgY29tbW9uIFNFVCBU b2tlbiBzcGVjIHZzIGRvd24gc3RyZWFtIGV2ZW50IHByb2ZpbGVzLiBFLmcuIHNvbWUgaGF2ZSBl eHByZXNzZWQgdGhhdCBTRVTigJlzIGpvYiBpcyBzaW1wbHkNCiB0byBkZWZpbmUgdGhlIGV2ZW50 IGNsYWltIGFuZCBub3RoaW5nIG1vcmUuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0K PGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj5QaGls PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6 YmxhY2siPk9yYWNsZSBDb3Jwb3JhdGlvbiwgSWRlbnRpdHkgQ2xvdWQgU2VydmljZXMgQXJjaGl0 ZWN0ICZhbXA7IFN0YW5kYXJkczxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+QGluZGVwZW5k ZW50aWQ8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPjxhIGhyZWY9Imh0dHA6Ly93d3cuaW5k ZXBlbmRlbnRpZC5jb20iPnd3dy5pbmRlcGVuZGVudGlkLmNvbTwvYT48bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+PGEgaHJlZj0ibWFpbHRvOnBoaWwuaHVudEBv cmFjbGUuY29tIj5waGlsLmh1bnRAb3JhY2xlLmNvbTwvYT48bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4N CjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxibG9ja3F1b3RlIHN0 eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPk9uIEF1ZyAyLCAyMDE3LCBhdCAxMjo1NCBQTSwgUmljaGFyZCBCYWNr bWFuLCBBbm5hYmVsbGUgJmx0OzxhIGhyZWY9Im1haWx0bzpyaWNoYW5uYUBhbWF6b24uY29tIj5y aWNoYW5uYUBhbWF6b24uY29tPC9hPiZndDsgd3JvdGU6PG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0iYmFja2dyb3VuZDp3aGl0ZSI+UGhpbCw8bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJi YWNrZ3JvdW5kOndoaXRlIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJiYWNrZ3JvdW5kOndoaXRlIj5DYW4geW91IGJlIG1v cmUgc3BlY2lmaWMgYWJvdXQgd2hpY2ggaXRlbXMgaGF2ZSBiZWVuIGRpc2N1c3NlZCBhbmQgd2hh dCB0aGUgY29uc2Vuc3VzIHdhcz8gSXRlbXMgMiBhbmQgNCB0b3VjaCBvbiB0aGUgaXNzdWVyIG1p c21hdGNoIG1hdHRlciwgYnV0IGFyZSBhYm91dCBjbGFyaWZ5aW5nIHJlcXVpcmVtZW50cyBmb3Ig cHJvZmlsaW5nIHNwZWNpZmljYXRpb25zIGFuZA0KIHNvIGZhciBhcyBJIGNhbiB0ZWxsIGFyZSBh bGlnbmVkIHdpdGggdGhlIGludGVudGlvbnMgb2YgdGhlIGN1cnJlbnQgdGV4dCByZWdhcmRpbmcg dGhlIGhhbmRsaW5nIGFuZCBpbnRlcnByZXRhdGlvbiBvZiB0aGUg4oCcc3Vi4oCdIGFuZCDigJxp c3PigJ0gY2xhaW1zLiBTaW1pbGFybHkgaXRlbSA2IGFkZHJlc3NlcyBhIHByb2ZpbGluZyBzcGVj aWZpY2F0aW9uIHJlcXVpcmVtZW50IHJlbGF0ZWQgdG8gdGhlIEpXVCBjb25mdXNpb24gaXNzdWUs IGFuZCBkb2VzDQogbm90IGRldmlhdGUgZnJvbSB0aGUgV0cgY29uc2Vuc3VzIGFzIEkgdW5kZXJz dGFuZCBpdC48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJiYWNrZ3JvdW5kOndoaXRlIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJiYWNrZ3JvdW5kOndoaXRlIj5J dGVtIDEsIEkgc2hvdWxkIGhvcGUsIGlzIHVuY29udHJvdmVyc2lhbC48c3BhbiBjbGFzcz0iYXBw bGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5 OiZxdW90O0FwcGxlIENvbG9yIEVtb2ppJnF1b3Q7Ij7imLo8L3NwYW4+PG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0iYmFja2dyb3VuZDp3 aGl0ZSI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9ImJhY2tncm91bmQ6d2hpdGUiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJp ZiI+LS0mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0iYmFja2dyb3VuZDp3aGl0ZSI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlm Ij5Bbm5hYmVsbGUgUmljaGFyZCBCYWNrbWFuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9ImJhY2tncm91bmQ6d2hpdGUiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBS b21hbiZxdW90OyxzZXJpZiI+SWRlbnRpdHkgU2VydmljZXM8L3NwYW4+PG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJiYWNr Z3JvdW5kOndoaXRlIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJiYWNrZ3JvdW5kOndoaXRlIj4mbmJzcDs8bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAj QjVDNERGIDEuMHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJiYWNrZ3JvdW5kOndoaXRlIj48Yj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEyLjBwdCI+RnJvbTo8c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4m bmJzcDs8L3NwYW4+PC9zcGFuPjwvYj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdCI+SWQt ZXZlbnQgJmx0OzxhIGhyZWY9Im1haWx0bzppZC1ldmVudC1ib3VuY2VzQGlldGYub3JnIj5pZC1l dmVudC1ib3VuY2VzQGlldGYub3JnPC9hPiZndDsgb24NCiBiZWhhbGYgb2YgUGhpbCBIdW50ICZs dDs8YSBocmVmPSJtYWlsdG86cGhpbC5odW50QG9yYWNsZS5jb20iPnBoaWwuaHVudEBvcmFjbGUu Y29tPC9hPiZndDs8YnI+DQo8Yj5EYXRlOjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3Bh Y2UiPiZuYnNwOzwvc3Bhbj48L2I+V2VkbmVzZGF5LCBBdWd1c3QgMiwgMjAxNyBhdCAxMjoyMiBQ TTxicj4NCjxiPlRvOjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwv c3Bhbj48L2I+JnF1b3Q7UmljaGFyZCBCYWNrbWFuLCBBbm5hYmVsbGUmcXVvdDsgJmx0OzxhIGhy ZWY9Im1haWx0bzpyaWNoYW5uYUBhbWF6b24uY29tIj5yaWNoYW5uYUBhbWF6b24uY29tPC9hPiZn dDs8YnI+DQo8Yj5DYzo8c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8 L3NwYW4+PC9iPlNlY0V2ZW50ICZsdDs8YSBocmVmPSJtYWlsdG86aWQtZXZlbnRAaWV0Zi5vcmci PmlkLWV2ZW50QGlldGYub3JnPC9hPiZndDs8YnI+DQo8Yj5TdWJqZWN0OjxzcGFuIGNsYXNzPSJh cHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48L2I+UmU6IFtJZC1ldmVudF0gV0cg TGFzdCBDYWxsIGZvciBkcmFmdC1pZXRmLXNlY2V2ZW50LXRva2VuLTAyPC9zcGFuPjxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9ImJhY2tncm91bmQ6d2hpdGUiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0iYmFja2dyb3VuZDp3aGl0ZSI+QW5uYWJlbGxlLDxzcGFuIGNsYXNzPSJhcHBsZS1j b252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0iYmFja2dyb3VuZDp3aGl0ZSI+ Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0iYmFja2dyb3VuZDp3aGl0ZSI+VGhhbmtzIGZvciB0aGUg Y29tbWVudHMuIE1hbnkgb2YgdGhlc2UgaXRlbXMgaGF2ZSBiZWVuIGRpc2N1c3NlZCBhdCBsZW5n dGggYnV0IG1hbnkgbWVtYmVycyBzdHJvbmdseSB3YW50IHRvIGxlYXZlIGFzIGlzLiAmbmJzcDtJ 4oCZbGwgYXdhaXQgZnVydGhlciBncm91cCBkaXNjdXNzaW9uLjxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9ImJh Y2tncm91bmQ6d2hpdGUiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxk aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9ImJhY2tncm91bmQ6d2hpdGUi PlJlOiBpdGVtIDUgLSBJIHRoaW5rIEkgbmVlZCB0byByZS13cml0ZSB0aGF0IGJhc2VkIG9uIGZl ZWRiYWNrIGZyb20gTmF0IGFuZCBNYXJpdXMuICZuYnNwO1N0YXkgdHVuZWQuPG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0iYmFja2dyb3VuZDp3aGl0ZSI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwv ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0iYmFja2dyb3Vu ZDp3aGl0ZSI+U29tZSBvZiB0aGVzZSBpdGVtcyBhcmUgYWxzbyBiZWluZyBkaXNjdXNzZWQgaW4g dGhlIG5ldyBKV1QgQkNQIGRvY3VtZW50LiAmbmJzcDtNYXliZSB3ZSBzaG91bGQgaG9sZCB0aGUg U0VUIFRva2VuIHNwZWMgc28gd2UgY2FuIHJlZmVyIHRvIHRoZSBCQ1AgYW5kIHB1Ymxpc2ggdG9n ZXRoZXI/ICZuYnNwO1RoYXQgc2FpZCwgSSBrbm93IG1hbnkgd2FudCB0aGlzIGZpbmFsaXplZCBB U0FQLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9ImJhY2tncm91bmQ6d2hpdGUiPiZuYnNwOzxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0K PGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8 ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0iYmFja2dyb3VuZDp3aGl0ZSI+UGhpbDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9ImJhY2tn cm91bmQ6d2hpdGUiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9ImJhY2tncm91bmQ6d2hpdGUiPk9y YWNsZSBDb3Jwb3JhdGlvbiwgSWRlbnRpdHkgQ2xvdWQgU2VydmljZXMgQXJjaGl0ZWN0ICZhbXA7 IFN0YW5kYXJkczxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9ImJhY2tncm91bmQ6d2hpdGUiPkBpbmRlcGVuZGVu dGlkPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0iYmFja2dyb3VuZDp3aGl0ZSI+PGEgaHJlZj0iaHR0cHM6Ly91 cmxkZWZlbnNlLnByb29mcG9pbnQuY29tL3YyL3VybD91PWh0dHAtM0FfX3d3dy5pbmRlcGVuZGVu dGlkLmNvbV8mYW1wO2Q9RHdNR2FRJmFtcDtjPVJvUDFZdW1DWENnYVdIdmxaWVI4UFFjeEJLQ1g1 WVRwa0tZMDU3U2JLMTAmYW1wO3I9SkJtNWJpUnJLdWdDSDBGa0lUU2VHSnhQRWl2empXd2xOS2U0 Q19sTElHayZhbXA7bT1kcjhESFJRN1RDdXduM1FnblhaRGN5dVA5Z0Utd3JkS1VtckotTVNsdzVn JmFtcDtzPUdWWWFiY2JkcHRLcGRWeUFHR1NON3d3aFFhb1V1SWJZdjNnMF92VFdwNG8mYW1wO2U9 Ij48c3BhbiBzdHlsZT0iY29sb3I6cHVycGxlIj53d3cuaW5kZXBlbmRlbnRpZC5jb208L3NwYW4+ PC9hPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0iYmFja2dyb3VuZDp3aGl0ZSI+ PGEgaHJlZj0ibWFpbHRvOnBoaWwuaHVudEBvcmFjbGUuY29tIj48c3BhbiBzdHlsZT0iY29sb3I6 cHVycGxlIj5waGlsLmh1bnRAb3JhY2xlLmNvbTwvc3Bhbj48L2E+PG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwv ZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJiYWNrZ3JvdW5kOndoaXRlIj4mbmJzcDs8 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4t dG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0iYmFja2dyb3VuZDp3aGl0ZSI+T24gQXVnIDIsIDIwMTcsIGF0IDEx OjQzIEFNLCBSaWNoYXJkIEJhY2ttYW4sIEFubmFiZWxsZSAmbHQ7PGEgaHJlZj0ibWFpbHRvOnJp Y2hhbm5hQGFtYXpvbi5jb20iPjxzcGFuIHN0eWxlPSJjb2xvcjpwdXJwbGUiPnJpY2hhbm5hQGFt YXpvbi5jb208L3NwYW4+PC9hPiZndDsgd3JvdGU6PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJiYWNrZ3JvdW5kOndoaXRl Ij4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9ImJhY2tncm91bmQ6d2hpdGUiPlRoYW5rcyBmb3IgYWxs IHRoZSB3b3JrIG9uIHRoaXMhIEl0IHdhcyBteSB1bmRlcnN0YW5kaW5nIHRoYXQgdGhlcmUgd2Fz IGFuIG9wZW4gaXRlbSBmcm9tIFByYWd1ZSByZWdhcmRpbmcgd2hldGhlciB0byBleHBsaWNpdGx5 IGRlY2xhcmUgdGhlIGV2ZW50c+KAmSBwcm9maWxpbmcgc3BlY2lmaWNhdGlvbiBpbiB0aGUgU0VU LiBIYXMgdGhpcyBiZWVuIGRpc2N1c3NlZCBmdXJ0aGVyLA0KIG9yIGRvIHdlIHN0aWxsIG5lZWQg dG8gY2xvc2Ugb24gaXQ/PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0iYmFja2dyb3VuZDp3aGl0ZSI+Jm5ic3A7 PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0iYmFja2dyb3VuZDp3aGl0ZSI+SSBoYXZlIHNldmVyYWwgY29tbWVu dHMvcXVlc3Rpb25zIG9uIHRoZSBjdXJyZW50IGRyYWZ0OjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9ImJhY2tn cm91bmQ6d2hpdGUiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxvbCBz dHlsZT0ibWFyZ2luLXRvcDowaW4iIHN0YXJ0PSIxIiB0eXBlPSIxIj4NCjxsaSBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MGluO21zby1saXN0OmwwIGxldmVsMSBsZm8xO2Jh Y2tncm91bmQ6d2hpdGU7YmFja2dyb3VuZC1wb3NpdGlvbjppbml0aWFsIGluaXRpYWw7YmFja2dy b3VuZC1yZXBlYXQ6aW5pdGlhbCBpbml0aWFsIj4NCjxiPuKAnFByb2ZpbGUgU3BlY2lmaWNhdGlv buKAnSB2cy4g4oCcUHJvZmlsaW5nIFNwZWNpZmljYXRpb27igJ08L2I+PGJyPg0KVGhlcmUgYXJl IGEgaGFuZGZ1bCBvZiBpbnN0YW5jZXMgb2YgdGhlIGZvcm1lciB0aGF0IG5lZWQgdG8gYmUgY2hh bmdlZCB0byB0aGUgbGF0dGVyLCB0byBtYXRjaCB0aGUgdGVybSBhcyBkZWZpbmVkIGluIHNlY3Rp b24gMS4yOjxvOnA+PC9vOnA+PC9saT48L29sPg0KPG9sIHN0eWxlPSJtYXJnaW4tdG9wOjBpbiIg c3RhcnQ9IjEiIHR5cGU9IjEiPg0KPG9sIHN0eWxlPSJtYXJnaW4tdG9wOjBpbiIgc3RhcnQ9IjEi IHR5cGU9ImEiPg0KPGxpIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDowaW47 bXNvLWxpc3Q6bDEgbGV2ZWwyIGxmbzI7YmFja2dyb3VuZDp3aGl0ZTtiYWNrZ3JvdW5kLXBvc2l0 aW9uOmluaXRpYWwgaW5pdGlhbDtiYWNrZ3JvdW5kLXJlcGVhdDppbml0aWFsIGluaXRpYWwiPg0K SW4gdGhlIOKAnHN1YuKAnSBkZWZpbml0aW9uIGluIHNlY3Rpb24gMS4yPG86cD48L286cD48L2xp PjxsaSBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MGluO21zby1saXN0Omwx IGxldmVsMiBsZm8yO2JhY2tncm91bmQ6d2hpdGU7YmFja2dyb3VuZC1wb3NpdGlvbjppbml0aWFs IGluaXRpYWw7YmFja2dyb3VuZC1yZXBlYXQ6aW5pdGlhbCBpbml0aWFsIj4NCkluIHNlY3Rpb24g MzxvOnA+PC9vOnA+PC9saT48bGkgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0 OjBpbjttc28tbGlzdDpsMSBsZXZlbDIgbGZvMjtiYWNrZ3JvdW5kOndoaXRlO2JhY2tncm91bmQt cG9zaXRpb246aW5pdGlhbCBpbml0aWFsO2JhY2tncm91bmQtcmVwZWF0OmluaXRpYWwgaW5pdGlh bCI+DQpJbiBzZWN0aW9uIDQuMjxvOnA+PC9vOnA+PC9saT48L29sPg0KPC9vbD4NCjxvbCBzdHls ZT0ibWFyZ2luLXRvcDowaW4iIHN0YXJ0PSIyIiB0eXBlPSIxIj4NCjxsaSBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MGluO21zby1saXN0OmwyIGxldmVsMSBsZm8zO2JhY2tn cm91bmQ6d2hpdGU7YmFja2dyb3VuZC1wb3NpdGlvbjppbml0aWFsIGluaXRpYWw7YmFja2dyb3Vu ZC1yZXBlYXQ6aW5pdGlhbCBpbml0aWFsIj4NCjxiPk5vdGUgcmVnYXJkaW5nIFN1YmplY3QgSXNz dWVyIHZzLiBTRVQgSXNzdWVyPC9iPjxicj4NClRoZSBub3RlIHJlZ2FyZGluZyB0aGUgcG90ZW50 aWFsIGZvciBTdWJqZWN0IGFuZCBTRVQgSXNzdWVyIG1pc21hdGNoIChpbiB0aGUg4oCcaXNz4oCd IGRlZmluaXRpb24gaW4gc2VjdGlvbiAxLjIpIGlzIEkgdGhpbmsgbW9yZSBwcmVzY3JpcHRpdmUg dGhhbiBpbnRlbmRlZC4gQXMgd3JpdHRlbiwgaXQgbWFuZGF0ZXMgcGxhY2luZyB0aGUgU3ViamVj dOKAmXMgSXNzdWVyIGluIGFuIOKAnGlzc+KAnSB2YWx1ZSB3aXRoaW4gdGhlIGV2ZW50IHBheWxv YWQsIGJ1dCBkb2VzDQogbm90IGRlZmluZSBhIGZvcm1hdCBvciBzdHJ1Y3R1cmUgZm9yIHRoaXMg dmFsdWUuIFRoZSBsb2dpY2FsIGZvcm1hdCDigJMgdGhhdCBvZiB0aGUg4oCcaXNz4oCdIEpXVCBj bGFpbSDigJMgbWF5IG9yIG1heSBub3QgYmUgYXBwcm9wcmlhdGUsIGRlcGVuZGluZyBvbiB0aGUg bmF0dXJlIG9mIHRoZSBldmVudCBhbmQgaXRzIFN1YmplY3QuIEkgc3VnZ2VzdCByZW1vdmluZyB0 aGlzIG5vdGUgYW5kIGNvdmVyaW5nIHRoaXMgY29uY2VybiBlbHNld2hlcmUgKHNlZSAjNA0KIGJl bG93LCByZTogU3ViamVjdCBJZGVudGlmaWNhdGlvbikuPGJyPg0KPGJyPg0KPGJyPg0KPGJyPg0K PG86cD48L286cD48L2xpPjxsaSBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6 MGluO21zby1saXN0OmwyIGxldmVsMSBsZm8zO2JhY2tncm91bmQ6d2hpdGU7YmFja2dyb3VuZC1w b3NpdGlvbjppbml0aWFsIGluaXRpYWw7YmFja2dyb3VuZC1yZXBlYXQ6aW5pdGlhbCBpbml0aWFs Ij4NCjxiPkV4cGxpY2l0IFR5cGluZyBvZiBTRVRzPC9iPjxicj4NCkkgc3VnZ2VzdCByZW1vdmlu ZyB0aGUgdGV4dCDigJxpZiB0aGUgU0VUIGNvdWxkIGJlIHVzZWQgaW4gYW4gYXBwbGljYXRpb24g Y29udGV4dCBpbiB3aGljaCBpdCBjb3VsZCBiZSBjb25mdXNlZCB3aXRoIG90aGVyIGtpbmRzIG9m IEpXVHPigJ0gZnJvbSB0aGUgZmlyc3QgcGFyYWdyYXBoIG9mIHNlY3Rpb24gMi4yLCBtYWtpbmcg dGhlIHNlY2V2ZW50JiM0Mztqd3QgdHlwIGhlYWRlciBtYW5kYXRvcnkgdG8gaW1wbGVtZW50IGZv ciBhbGwgU0VUcy4gVGhpcyBjb25kaXRpb25hbA0KIGlzIGltcG9zc2libGUgdG8gZXZhbHVhdGUs IGFzIG5ldyB0eXBlcyBvZiBKV1RzIHdpbGwgYmUgaW50cm9kdWNlZCBvdmVyIHRpbWUuIEp1c3Qg Y29uc2lkZXJpbmcgZXhpc3RpbmcgSldUcywgaXQgaXMgYSBsb3QgdG8gYXNrIGZvciBQcm9maWxp bmcgU3BlYyBhdXRob3JzIHRvIGZ1bGx5IGV4YW1pbmUgdGhlIGNvbnRlbnRzIGFuZCB1c2FnZSBv ZiBldmVyeSBleGlzdGluZyBKV1QuIE1hbmRhdGluZyB1c2Ugb2YgdHlwIGZvciBTRVRzIHRha2Vz IHRoaXMNCiBsb2FkIG9mZiBvZiBQcm9maWxpbmcgU3BlYyBhdXRob3JzIGFuZCBpbnN1cmVzIHRo YXQgZnV0dXJlIHNwZWNzIGhhdmUgYSBjb25zaXN0ZW50LCByZWxpYWJsZSB3YXkgdG8gZGVmZW5k IGFnYWluc3QgSldUIHR5cGUgY29uZnVzaW9uLjxicj4NCjxicj4NCjxicj4NCjxicj4NCjxvOnA+ PC9vOnA+PC9saT48bGkgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjBpbjtt c28tbGlzdDpsMiBsZXZlbDEgbGZvMztiYWNrZ3JvdW5kOndoaXRlO2JhY2tncm91bmQtcG9zaXRp b246aW5pdGlhbCBpbml0aWFsO2JhY2tncm91bmQtcmVwZWF0OmluaXRpYWwgaW5pdGlhbCI+DQo8 Yj5SZXF1aXJlbWVudHMgZm9yIFNFVCBQcm9maWxlczogU3ViamVjdCBJZGVudGlmaWNhdGlvbjwv Yj48YnI+DQpJIHN1Z2dlc3QgYWRkaW5nIHRleHQgYWxvbmcgdGhlIGxpbmVzIG9mIOKAnFByb2Zp bGluZyBTcGVjaWZpY2F0aW9ucyBNVVNUIGRlZmluZSBmb3IgZWFjaCBvZiB0aGVpciBldmVudHMg aG93IHRoZSBTdWJqZWN0IGlzIGlkZW50aWZpZWQgaW4gdGhlIFNFVCwgYXMgd2VsbCBhcyBob3cg dG8gYWRkcmVzcyBjb25mbGljdHMgdGhlIGV2ZW50IFN1YmplY3TigJlzIElzc3VlciBhbmQgdGhl IFNFVCBJc3N1ZXIgaWYgYXBwbGljYWJsZS4gSXQgaXMgTk9UIFJFQ09NTUVOREVEDQogZm9yIFBy b2ZpbGluZyBTcGVjaWZpY2F0aW9ucyB0byB1c2UgdGhlIOKAnHN1YuKAnSBjbGFpbSBpbiBjYXNl cyB3aGVyZSB0aGUgU3ViamVjdCBpcyBub3QgZ2xvYmFsbHkgdW5pcXVlIGFuZCBoYXMgYSBkaWZm ZXJlbnQgSXNzdWVyIGZyb20gdGhlIFNFVCBpdHNlbGYu4oCdPGJyPg0KPGJyPg0KPGJyPg0KPGJy Pg0KPG86cD48L286cD48L2xpPjxsaSBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxl ZnQ6MGluO21zby1saXN0OmwyIGxldmVsMSBsZm8zO2JhY2tncm91bmQ6d2hpdGU7YmFja2dyb3Vu ZC1wb3NpdGlvbjppbml0aWFsIGluaXRpYWw7YmFja2dyb3VuZC1yZXBlYXQ6aW5pdGlhbCBpbml0 aWFsIj4NCjxiPkd1aWRhbmNlIGZvciBTaWduaW5nIFNFVHM8L2I+PGJyPg0KVGhlIHRleHQgaW4g dGhlIGxhc3QgcGFyYWdyYXBoIG9mIHNlY3Rpb24gNC4xIGlzIHVuY2xlYXIgdG8gbWUuIEl0IHNl ZW1zIHRvIHN1Z2dlc3QgdGhhdCBpdCBpcyBzYWZlIHRvIHNlbmQgdW5zaWduZWQgSldUcyBvdmVy IGEgY2hhbm5lbCB0aGF0IGxhY2tzIHRyYW5zcG9ydC1sYXllciBzZWN1cml0eSwgc28gbG9uZyBh cyByZXF1ZXN0cyBpbmNsdWRlIGEgYmVhcmVyIHRva2VuIG9yIHVzZSBCYXNpYyBBdXRoZW50aWNh dGlvbi4gQW0gSSBtaXNyZWFkaW5nDQogdGhpcz8gSXQgc2VlbXMgY291bnRlciB0byB0aGUgZ3Vp ZGFuY2UgZ2l2ZW4gZWFybGllciBpbiB0aGUgc2FtZSBzZWN0aW9uLjxicj4NCjxicj4NCjxicj4N Cjxicj4NCjxvOnA+PC9vOnA+PC9saT48bGkgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdp bi1sZWZ0OjBpbjttc28tbGlzdDpsMiBsZXZlbDEgbGZvMztiYWNrZ3JvdW5kOndoaXRlO2JhY2tn cm91bmQtcG9zaXRpb246aW5pdGlhbCBpbml0aWFsO2JhY2tncm91bmQtcmVwZWF0OmluaXRpYWwg aW5pdGlhbCI+DQo8Yj5EaXN0aW5ndWlzaGluZyBTRVRzIGZyb20gb3RoZXIga2luZHMgb2YgSldU czwvYj48YnI+DQpUaGUgbGFzdCBzZW50ZW5jZSBvZiB0aGUgZmlyc3QgcGFyYWdyYXBoIG9mIHNl Y3Rpb24gNC43IHNlZW1zIGltcG9zc2libGUgdG8gbWUuIFByb2ZpbGluZyBTcGVjaWZpY2F0aW9u cyBjYW5ub3QgYmUgc29sZWx5IHJlc3BvbnNpYmxlIGZvciBlbnN1cmluZyBpbmNvbXBhdGliaWxp dHkgd2l0aCBhbGwgZnV0dXJlIEpXVCBwcm9maWxlcy4gVGhleSBjYW4gYXQgYmVzdCBlbnN1cmUg aW5jb21wYXRpYmlsaXR5IHdpdGggZXhpc3RpbmcgSldUIHByb2ZpbGVzDQogYW5kIGJlIGNvbXBh dGlibGUgd2l0aCBhIHN0YW5kYXJkIG1lY2hhbmlzbSBieSB3aGljaCBmdXR1cmUgSldUIHByb2Zp bGVzIG1heSBlbnN1cmUgaW5jb21wYXRpYmlsaXR5IChlLmcuIHRoZSDigJxzZWNldmVudCYjNDM7 and04oCdIHR5cCBoZWFkZXIpLiBJdCBtYXkgYmUgZW5vdWdoIHRvIHN0cmlrZSB0aGUg4oCcKG9y IG90aGVyKeKAnSB0ZXh0IGZyb20gdGhpcyBzZW50ZW5jZS48YnI+DQo8YnI+DQo8YnI+DQo8YnI+ DQo8bzpwPjwvbzpwPjwvbGk+PC9vbD4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9ImJhY2tncm91bmQ6d2hpdGUiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJiYWNrZ3JvdW5kOndoaXRlIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtmb250LWZh bWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssc2VyaWYiPi0tJm5ic3A7PC9zcGFuPjxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9ImJhY2tncm91bmQ6d2hpdGUiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+QW5u YWJlbGxlIFJpY2hhcmQgQmFja21hbjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9k aXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJiYWNrZ3JvdW5k OndoaXRlIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtmb250LWZhbWlseTomcXVvdDtU aW1lcyBOZXcgUm9tYW4mcXVvdDssc2VyaWYiPklkZW50aXR5IFNlcnZpY2VzPC9zcGFuPjxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0iYmFja2dyb3VuZDp3aGl0ZSI+Jm5ic3A7PG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0iYmFja2dyb3VuZDp3aGl0ZSI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwv ZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjQjVDNERGIDEu MHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0iYmFja2dyb3VuZDp3aGl0ZSI+PGI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMi4wcHQiPkZyb206PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5i c3A7PC9zcGFuPjwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQiPklkLWV2 ZW50ICZsdDs8YSBocmVmPSJtYWlsdG86aWQtZXZlbnQtYm91bmNlc0BpZXRmLm9yZyI+PHNwYW4g c3R5bGU9ImNvbG9yOnB1cnBsZSI+aWQtZXZlbnQtYm91bmNlc0BpZXRmLm9yZzwvc3Bhbj48L2E+ Jmd0Ow0KIG9uIGJlaGFsZiBvZiAmcXVvdDtNLkxpemFyQE9DRyZxdW90OyAmbHQ7PGEgaHJlZj0i bWFpbHRvOm0ubGl6YXJAb3BlbmNvbnNlbnRncm91cC5jb20iPjxzcGFuIHN0eWxlPSJjb2xvcjpw dXJwbGUiPm0ubGl6YXJAb3BlbmNvbnNlbnRncm91cC5jb208L3NwYW4+PC9hPiZndDs8YnI+DQo8 Yj5EYXRlOjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48 L2I+VHVlc2RheSwgQXVndXN0IDEsIDIwMTcgYXQgOToxNyBBTTxicj4NCjxiPlRvOjxzcGFuIGNs YXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48L2I+TWlrZSBKb25lcyAm bHQ7PGEgaHJlZj0ibWFpbHRvOk1pY2hhZWwuSm9uZXNAbWljcm9zb2Z0LmNvbSI+PHNwYW4gc3R5 bGU9ImNvbG9yOnB1cnBsZSI+TWljaGFlbC5Kb25lc0BtaWNyb3NvZnQuY29tPC9zcGFuPjwvYT4m Z3Q7PGJyPg0KPGI+Q2M6PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7 PC9zcGFuPjwvYj5ZYXJvbiBTaGVmZmVyICZsdDs8YSBocmVmPSJtYWlsdG86eWFyb25mLmlldGZA Z21haWwuY29tIj48c3BhbiBzdHlsZT0iY29sb3I6cHVycGxlIj55YXJvbmYuaWV0ZkBnbWFpbC5j b208L3NwYW4+PC9hPiZndDssIFNlY0V2ZW50ICZsdDs8YSBocmVmPSJtYWlsdG86aWQtZXZlbnRA aWV0Zi5vcmciPjxzcGFuIHN0eWxlPSJjb2xvcjpwdXJwbGUiPmlkLWV2ZW50QGlldGYub3JnPC9z cGFuPjwvYT4mZ3Q7PGJyPg0KPGI+U3ViamVjdDo8c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVk LXNwYWNlIj4mbmJzcDs8L3NwYW4+PC9iPlJlOiBbSWQtZXZlbnRdIFdHIExhc3QgQ2FsbCBmb3Ig ZHJhZnQtaWV0Zi1zZWNldmVudC10b2tlbi0wMjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJiYWNrZ3JvdW5kOndoaXRlIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9ImJhY2tncm91bmQ6d2hpdGUiPiYjNDM7MSBvbiBleGlzdGluZyB0ZXh0IC4mbmJzcDs8c3Bh biBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9ImJhY2tncm91bmQ6d2hpdGUiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9ImJhY2tncm91bmQ6d2hpdGUiPkFncmVlIHRoZSBkb2N1bWVudCBpcyByZWFk eSB0byBwdWJsaXNoPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2 Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0iYmFja2dyb3VuZDp3 aGl0ZSI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2 Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0iYmFja2dyb3VuZDp3 aGl0ZSI+LSBNYXJrPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2 Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0iYmFja2dyb3VuZDp3 aGl0ZSI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2 Pg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBw dCI+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0iYmFj a2dyb3VuZDp3aGl0ZSI+T24gMzEgSnVsIDIwMTcsIGF0IDE2OjUzLCBNaWtlIEpvbmVzICZsdDs8 YSBocmVmPSJtYWlsdG86TWljaGFlbC5Kb25lc0BtaWNyb3NvZnQuY29tIj48c3BhbiBzdHlsZT0i Y29sb3I6cHVycGxlIj5NaWNoYWVsLkpvbmVzQG1pY3Jvc29mdC5jb208L3NwYW4+PC9hPiZndDsg d3JvdGU6PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJiYWNrZ3JvdW5kOndoaXRlIj4mbmJzcDs8 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9ImJhY2tncm91bmQ6d2hpdGUiPjxzcGFuIHN0 eWxlPSJjb2xvcjojMDAyMDYwIj5JIGJlbGlldmUgdGhhdCB0aGUgc3BlY2lmaWNhdGlvbiBpcyBy ZWFkeSB0byBwdWJsaXNoIGFzLWlzLiZuYnNwOyBJdCBhbHJlYWR5IG1lZXRzIHRoZSBuZWVkcyBv ZiB0aGUga25vd24gdXNlIGNhc2VzIGFuZCBpcyBpbiBwcm9kdWN0aW9uIHVzZS48L3NwYW4+PG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0iYmFja2dyb3VuZDp3aGl0ZSI+PHNwYW4gc3R5 bGU9ImNvbG9yOiMwMDIwNjAiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJiYWNrZ3JvdW5kOndoaXRlIj48c3BhbiBzdHlsZT0iY29sb3I6IzAwMjA2MCI+Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IC0tIE1pa2U8L3NwYW4+PG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0iYmFja2dyb3VuZDp3aGl0ZSI+PHNwYW4gc3R5bGU9ImNv bG9yOiMwMDIwNjAiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+ DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlk ICNFMUUxRTEgMS4wcHQ7cGFkZGluZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8ZGl2Pg0KPGRpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0iYmFja2dyb3VuZDp3aGl0ZSI+PGI+ RnJvbTo8L2I+PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFu PklkLWV2ZW50IFs8YSBocmVmPSJtYWlsdG86aWQtZXZlbnQtYm91bmNlc0BpZXRmLm9yZyI+PHNw YW4gc3R5bGU9ImNvbG9yOnB1cnBsZSI+bWFpbHRvOmlkLWV2ZW50LWJvdW5jZXNAaWV0Zi5vcmc8 L3NwYW4+PC9hPl08c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3Nw YW4+PGI+T24NCiBCZWhhbGYgT2Y8c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4m bmJzcDs8L3NwYW4+PC9iPllhcm9uIFNoZWZmZXI8YnI+DQo8Yj5TZW50OjwvYj48c3BhbiBjbGFz cz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+TW9uZGF5LCBKdWx5IDMxLCAy MDE3IDE6NDAgUE08YnI+DQo8Yj5Ubzo8L2I+PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1z cGFjZSI+Jm5ic3A7PC9zcGFuPlNlY0V2ZW50ICZsdDs8YSBocmVmPSJtYWlsdG86aWQtZXZlbnRA aWV0Zi5vcmciPjxzcGFuIHN0eWxlPSJjb2xvcjpwdXJwbGUiPmlkLWV2ZW50QGlldGYub3JnPC9z cGFuPjwvYT4mZ3Q7PGJyPg0KPGI+U3ViamVjdDo8L2I+PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZl cnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPltJZC1ldmVudF0gV0cgTGFzdCBDYWxsIGZvciBkcmFm dC1pZXRmLXNlY2V2ZW50LXRva2VuLTAyPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0K PC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9ImJhY2tncm91bmQ6d2hpdGUiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9ImJhY2tncm91bmQ6d2hpdGUiPlRoaXMgaXMgdG8gYW5ub3VuY2Ugd29y a2luZyBncm91cCBsYXN0IGNhbGwgb24gdGhpcyBkcmFmdCAoPGEgaHJlZj0iaHR0cHM6Ly91cmxk ZWZlbnNlLnByb29mcG9pbnQuY29tL3YyL3VybD91PWh0dHBzLTNBX19kYXRhdHJhY2tlci5pZXRm Lm9yZ19kb2NfZHJhZnQtMkRpZXRmLTJEc2VjZXZlbnQtMkR0b2tlbl8mYW1wO2Q9RHdNR2FRJmFt cDtjPVJvUDFZdW1DWENnYVdIdmxaWVI4UFFjeEJLQ1g1WVRwa0tZMDU3U2JLMTAmYW1wO3I9SkJt NWJpUnJLdWdDSDBGa0lUU2VHSnhQRWl2empXd2xOS2U0Q19sTElHayZhbXA7bT1GenRTeU85SWRS Mmx5MkN3bXUxUmhNZFhES3cxZXBqR3BfNHBlbF9vX3BnJmFtcDtzPU5jRkZtTFo2YUZEVDI3RW9T VEQ3cmtQMm0ybmt0V3FnU2QzX0NQZXA4VXcmYW1wO2U9Ij48c3BhbiBzdHlsZT0iY29sb3I6cHVy cGxlIj5odHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1pZXRmLXNlY2V2ZW50 LXRva2VuLzwvc3Bhbj48L2E+KS48YnI+DQo8YnI+DQpQbGVhc2Ugc2VuZCB5b3VyIGNvbW1lbnRz IHRvIHRoZSBsaXN0LiBFdmVuIGlmIHlvdSBhcmUgcGVyZmVjdGx5IGhhcHB5IHdpdGggdGhlIGRy YWZ0LCBwbGVhc2UgbGV0IHVzIGtub3cgdGhhdCB5b3Ugc3VwcG9ydCBpdHMgcHVibGljYXRpb24g YXMtaXMgYnkgcG9zdGluZyB0byB0aGUgbGlzdC48YnI+DQo8YnI+DQpCZWNhdXNlIG9mIHRoZSBz dW1tZXIgaG9saWRheXMsIHRoaXMgbGFzdCBjYWxsIGlzIG9wZW4gZm9yIDMgd2Vla3MsIHVudGls IEF1Zy4gMjEuPGJyPg0KPGJyPg0KVGhhbmtzLDxicj4NCiZuYnNwOyZuYnNwOyZuYnNwOyBEaWNr IGFuZCBZYXJvbjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0iYmFja2dyb3VuZDp3aGl0ZSI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVv dDssc2Fucy1zZXJpZjtiYWNrZ3JvdW5kOndoaXRlIj5fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fXzwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlmIj48YnI+DQo8c3Bh biBzdHlsZT0iYmFja2dyb3VuZDp3aGl0ZSI+SWQtZXZlbnQgbWFpbGluZyBsaXN0PC9zcGFuPjxi cj4NCjxzcGFuIHN0eWxlPSJiYWNrZ3JvdW5kOndoaXRlIj48YSBocmVmPSJtYWlsdG86SWQtZXZl bnRAaWV0Zi5vcmciPjxzcGFuIHN0eWxlPSJjb2xvcjpwdXJwbGUiPklkLWV2ZW50QGlldGYub3Jn PC9zcGFuPjwvYT48L3NwYW4+PGJyPg0KPHNwYW4gc3R5bGU9ImJhY2tncm91bmQ6d2hpdGUiPjxh IGhyZWY9Imh0dHBzOi8vdXJsZGVmZW5zZS5wcm9vZnBvaW50LmNvbS92Mi91cmw/dT1odHRwcy0z QV9fd3d3LmlldGYub3JnX21haWxtYW5fbGlzdGluZm9faWQtMkRldmVudCZhbXA7ZD1Ed01HYVEm YW1wO2M9Um9QMVl1bUNYQ2dhV0h2bFpZUjhQUWN4QktDWDVZVHBrS1kwNTdTYksxMCZhbXA7cj1K Qm01YmlSckt1Z0NIMEZrSVRTZUdKeFBFaXZ6ald3bE5LZTRDX2xMSUdrJmFtcDttPUZ6dFN5TzlJ ZFIybHkyQ3dtdTFSaE1kWERLdzFlcGpHcF80cGVsX29fcGcmYW1wO3M9WXd4Vzk1czVvSUJyQkxr ZnVpTVVJWXV6RkljZG5WYThCbjF6dlo0VXVyYyZhbXA7ZT0iPjxzcGFuIHN0eWxlPSJjb2xvcjpw dXJwbGUiPmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vaWQtZXZlbnQ8L3Nw YW4+PC9hPjwvc3Bhbj48L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9k aXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9ImJhY2tncm91bmQ6d2hpdGUiPjxicj4NCjxicj4NCjxicj4NCjxicj4NCjxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0iYmFja2dyb3VuZDp3aGl0ZSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtm b250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJpZjtiYWNrZ3JvdW5kOndo aXRlIj5fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXzwvc3Bh bj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGlj YSZxdW90OyxzYW5zLXNlcmlmIj48YnI+DQo8c3BhbiBzdHlsZT0iYmFja2dyb3VuZDp3aGl0ZSI+ SWQtZXZlbnQgbWFpbGluZyBsaXN0PC9zcGFuPjxicj4NCjwvc3Bhbj48YSBocmVmPSJtYWlsdG86 SWQtZXZlbnRAaWV0Zi5vcmciPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6cHVycGxlO2JhY2tncm91 bmQ6d2hpdGUiPklkLWV2ZW50QGlldGYub3JnPC9zcGFuPjwvYT48c3BhbiBzdHlsZT0iZm9udC1z aXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlmIj48 YnI+DQo8L3NwYW4+PGEgaHJlZj0iaHR0cHM6Ly91cmxkZWZlbnNlLnByb29mcG9pbnQuY29tL3Yy L3VybD91PWh0dHBzLTNBX193d3cuaWV0Zi5vcmdfbWFpbG1hbl9saXN0aW5mb19pZC0yRGV2ZW50 JmFtcDtkPUR3SUNBZyZhbXA7Yz1Sb1AxWXVtQ1hDZ2FXSHZsWllSOFBRY3hCS0NYNVlUcGtLWTA1 N1NiSzEwJmFtcDtyPUpCbTViaVJyS3VnQ0gwRmtJVFNlR0p4UEVpdnpqV3dsTktlNENfbExJR2sm YW1wO209Rnp0U3lPOUlkUjJseTJDd211MVJoTWRYREt3MWVwakdwXzRwZWxfb19wZyZhbXA7cz1Z d3hXOTVzNW9JQnJCTGtmdWlNVUlZdXpGSWNkblZhOEJuMXp2WjRVdXJjJmFtcDtlPSI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDss c2Fucy1zZXJpZjtjb2xvcjpwdXJwbGU7YmFja2dyb3VuZDp3aGl0ZSI+aHR0cHM6Ly91cmxkZWZl bnNlLnByb29mcG9pbnQuY29tL3YyL3VybD91PWh0dHBzLTNBX193d3cuaWV0Zi5vcmdfbWFpbG1h bl9saXN0aW5mb19pZC0yRGV2ZW50JmFtcDtkPUR3SUNBZyZhbXA7Yz1Sb1AxWXVtQ1hDZ2FXSHZs WllSOFBRY3hCS0NYNVlUcGtLWTA1N1NiSzEwJmFtcDtyPUpCbTViaVJyS3VnQ0gwRmtJVFNlR0p4 UEVpdnpqV3dsTktlNENfbExJR2smYW1wO209Rnp0U3lPOUlkUjJseTJDd211MVJoTWRYREt3MWVw akdwXzRwZWxfb19wZyZhbXA7cz1Zd3hXOTVzNW9JQnJCTGtmdWlNVUlZdXpGSWNkblZhOEJuMXp2 WjRVdXJjJmFtcDtlPTwvc3Bhbj48L2E+PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFj ZSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRp Y2EmcXVvdDssc2Fucy1zZXJpZjtiYWNrZ3JvdW5kOndoaXRlIj4mbmJzcDs8L3NwYW4+PC9zcGFu PjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJiYWNrZ3JvdW5kOndoaXRlIj4mbmJz cDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+ DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86 cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_6420C01C080D4EFCB2DD12688D0F7A69amazoncom_-- From nobody Wed Aug 2 14:46:05 2017 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1888612EA95 for ; Wed, 2 Aug 2017 14:46:05 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.7 X-Spam-Level: X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hBDk_C62_LdT for ; Wed, 2 Aug 2017 14:46:03 -0700 (PDT) Received: from mail-io0-x22f.google.com (mail-io0-x22f.google.com [IPv6:2607:f8b0:4001:c06::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EE6D0129B30 for ; Wed, 2 Aug 2017 14:46:02 -0700 (PDT) Received: by mail-io0-x22f.google.com with SMTP id o9so202516iod.1 for ; Wed, 02 Aug 2017 14:46:02 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=YK9xWQ2SB9Zk3mGjg0IWQ8CCEukficfihoA0PsnB2YY=; b=KpDrZWWji8joKZlygDiSb+n3CTkddjB0ikTGFxQAL5u9WzvMG0JYJnbWPsOjW4pkKg 5oUIAdVudeujOwDgvHCsyygIx0n+frZJsEj9t8nG2CSFoyxr17xcXKfiJYOF+LxmjbUP jbZGTmorndUSY7Ma7ED+dMgj+Qr0wLiRZWyBXEsY8C2zPdIVHc4yMKpSKZ6pVmnV0uAx dXyhE9G8NltaGKLWZOrKpFLw5qFq+oTcluTsid8HnrAu4/ixmpk8m7Vk/cYVknBaIrbU +iXZljCquuRe+Oaw++PPM86y6gyOorr3TyY9m8PsQrVsiVZJmW7fu+VRhL6clsQIml78 Pi4Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=YK9xWQ2SB9Zk3mGjg0IWQ8CCEukficfihoA0PsnB2YY=; b=UPoUcoJQBlLwkcgIYdoyvDADKKGPw43MQEez7dNGivpXccFchCp/G5peQhQbJB5Mej jr6gNAJVdBA/9+8tqqVhwAZDWJqcpdpIKRO4sup5dyEBoklPRW5WsWF2x36kJfkFXuYI 9A/blIqH/yWh2BNkL26ECw4kPjEf6P+nAeXbhwcD32rRj4XeUCQRG+LuOl8obT+kl6lf HFU2hzYQshcNqhMwZkEDKMMtVA5eTg0zxBPvyUgId/kYaN/eIl7iZsZanzx8f/SwYoqL JrLFgqDFrb5QePnhbWOc3ZKRg8v1yHTckJFow/zHS+t46l+KLZHaXE2vxQHStqPNoDFU F+ow== X-Gm-Message-State: AIVw111l169SajkF+/aEiCNaVkmbBahcESiW9HCkDZgLAOnuGcoHbvA0 vYyFmZULYtalklJWeOS0jCn9OJsXmfyo X-Received: by 10.107.59.69 with SMTP id i66mr27919583ioa.202.1501710361845; Wed, 02 Aug 2017 14:46:01 -0700 (PDT) MIME-Version: 1.0 Received: by 10.107.19.95 with HTTP; Wed, 2 Aug 2017 14:45:41 -0700 (PDT) In-Reply-To: References: From: Marius Scurtescu Date: Wed, 2 Aug 2017 14:45:41 -0700 Message-ID: To: Yaron Sheffer Cc: SecEvent Content-Type: multipart/alternative; boundary="001a114f7de4aceea30555cc3092" Archived-At: Subject: Re: [Id-event] WG Last Call for draft-ietf-secevent-token-02 X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 02 Aug 2017 21:46:05 -0000 --001a114f7de4aceea30555cc3092 Content-Type: text/plain; charset="UTF-8" The abstract mentions "issuer" and "receiver" in the last sentence. "receiver" does not sound right (that should be used in the context of a transmitter), but I don't have a better suggestion. Audience? The last paragraph of section 1 mentions "subscriber". I think it should be either "receiver" or "audience". The explanation for figure 1 states that the issuer denotes the transmitter. If the issuer and the transmitter are assumed to be the same entity, then the transmitter definition in section 1.2 should make that clear. Figure 3, I think the "sub" claim should be nested in the event, next to the issuer that provides the correct context. The "iss" and "sub" definitions in 2.1 also touch on this, providing conflicting advice. Section 2,1, definition of "nbf". The definition says that this is the event time. I see two problems: - the name suggest "not before", not exactly the same as event time - there can be multiple events maybe this claim should be dropped? Section 2.1, definition of "exp". Omitting this claim is the short term solution to the confusion issue. Why not mention that and that it SHOULD NOT be used? Section 2.1, definition of "events". It states that all events must refer to the same logical event. Lately in discussions we reached the conclusion that all events in a SET should be defined in the same profile, which is a stronger requirement. I think this definition should mention that. Regarding events and profiles. There was a proposal to add a new claim to uniquely identify the profile. I think we need to discuss that. Figure 5. Maybe a signed example would be better, especially that the next paragraph mentions that signatures or encryption should be used. Section 4.5, second paragraph. Mentions that "nonce" is also required, but that is not actually true. Id Tokens issued at the token endpoint for example will not have it. I suggest we drop the whole paragraph. Marius On Mon, Jul 31, 2017 at 1:40 PM, Yaron Sheffer wrote: > This is to announce working group last call on this draft ( > https://datatracker.ietf.org/doc/draft-ietf-secevent-token/). > > Please send your comments to the list. Even if you are perfectly happy > with the draft, please let us know that you support its publication as-is > by posting to the list. > > Because of the summer holidays, this last call is open for 3 weeks, until > Aug. 21. > > Thanks, > Dick and Yaron > > _______________________________________________ > Id-event mailing list > Id-event@ietf.org > https://www.ietf.org/mailman/listinfo/id-event > > --001a114f7de4aceea30555cc3092 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
The abstract mentions "issuer" and "receive= r" in the last sentence. "receiver" does not sound right (th= at should be used in the context of a transmitter), but I don't have a = better suggestion. Audience?

The last paragraph of secti= on 1 mentions "subscriber". I think it should be either "rec= eiver" or "audience".

The explanati= on for figure 1 states that the issuer denotes the transmitter. If the issu= er and the transmitter are assumed to be the same entity, then the transmit= ter definition in section 1.2 should make that clear.

<= div>Figure 3, I think the "sub" claim should be nested in the eve= nt, next to the issuer that provides the correct context. The "iss&quo= t; and "sub" definitions in 2.1 also touch on this, providing con= flicting advice.=C2=A0

Section 2,1, definition of = "nbf". The definition says that this is the event time. I see two= problems:
- the name suggest "not before", not exactly= the same as event time
- there can be multiple events
= maybe this claim should be dropped?

Section 2.1, d= efinition of "exp". Omitting this claim is the short term solutio= n to the confusion issue. Why not mention that and that it SHOULD NOT be us= ed?

Section 2.1, definition of "events".= It states that all events must refer to the same logical event. Lately in = discussions we reached the conclusion that all events in a SET should be de= fined in the same profile, which is a stronger requirement. I think this de= finition should mention that.

Regarding events and= profiles. There was a proposal to add a new claim to uniquely identify the= profile. I think we need to discuss that.

Figure = 5. Maybe a signed example would be better, especially that the next paragra= ph mentions that signatures or encryption should be used.=C2=A0
<= br>
Section 4.5, second paragraph. Mentions that "nonce"= ; is also required, but that is not actually true. Id Tokens issued at the = token endpoint for example will not have it. I suggest we drop the whole pa= ragraph.


Marius

On Mon, Jul 31, 2017 at 1:40 PM, Yaron Sheff= er <yaronf.ietf@gmail.com> wrote:
=20 =20 =20 =20
This is to announce working group last call on this draft (ht= tps://datatracker.ietf.org/doc/draft-ietf-secevent-token/).
Please send your comments to the list. Even if you are perfectly happy with the draft, please let us know that you support its publication as-is by posting to the list.

Because of the summer holidays, this last call is open for 3 weeks, until Aug. 21.

Thanks,
=C2=A0=C2=A0=C2=A0 Dick and Yaron

_______________________________________________
Id-event mailing list
Id-event@ietf.org
https://www.ietf.org/mailman/listinfo/id-event


--001a114f7de4aceea30555cc3092-- From nobody Thu Aug 3 08:03:32 2017 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9A94C132493 for ; Thu, 3 Aug 2017 08:03:30 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.902 X-Spam-Level: X-Spam-Status: No, score=-6.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0JVlvB7O3Zdq for ; Thu, 3 Aug 2017 08:03:28 -0700 (PDT) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7F4D3132479 for ; Thu, 3 Aug 2017 08:03:27 -0700 (PDT) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.14.4/8.14.4/Debian-4.1ubuntu1) with ESMTP id v73F3OYq001157 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Thu, 3 Aug 2017 17:03:26 +0200 Received: from [134.102.163.120] (134.102.163.120) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.361.1; Thu, 3 Aug 2017 17:03:19 +0200 To: References: From: Henk Birkholz Message-ID: Date: Thu, 3 Aug 2017 17:03:18 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.2.1 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [134.102.163.120] Archived-At: Subject: Re: [Id-event] WG Last Call for draft-ietf-secevent-token-02 X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 03 Aug 2017 15:03:30 -0000 Hello, to me, the "audience" claim seems to be a good choice here. Viele Grüße, Henk On 08/02/2017 11:45 PM, Marius Scurtescu wrote: > The abstract mentions "issuer" and "receiver" in the last sentence. > "receiver" does not sound right (that should be used in the context of a > transmitter), but I don't have a better suggestion. Audience? > > The last paragraph of section 1 mentions "subscriber". I think it should > be either "receiver" or "audience". > > The explanation for figure 1 states that the issuer denotes the > transmitter. If the issuer and the transmitter are assumed to be the > same entity, then the transmitter definition in section 1.2 should make > that clear. > > Figure 3, I think the "sub" claim should be nested in the event, next to > the issuer that provides the correct context. The "iss" and "sub" > definitions in 2.1 also touch on this, providing conflicting advice. > > Section 2,1, definition of "nbf". The definition says that this is the > event time. I see two problems: > - the name suggest "not before", not exactly the same as event time > - there can be multiple events > maybe this claim should be dropped? > > Section 2.1, definition of "exp". Omitting this claim is the short term > solution to the confusion issue. Why not mention that and that it SHOULD > NOT be used? > > Section 2.1, definition of "events". It states that all events must > refer to the same logical event. Lately in discussions we reached the > conclusion that all events in a SET should be defined in the same > profile, which is a stronger requirement. I think this definition should > mention that. > > Regarding events and profiles. There was a proposal to add a new claim > to uniquely identify the profile. I think we need to discuss that. > > Figure 5. Maybe a signed example would be better, especially that the > next paragraph mentions that signatures or encryption should be used. > > Section 4.5, second paragraph. Mentions that "nonce" is also required, > but that is not actually true. Id Tokens issued at the token endpoint > for example will not have it. I suggest we drop the whole paragraph. > > > Marius > > On Mon, Jul 31, 2017 at 1:40 PM, Yaron Sheffer > wrote: > > This is to announce working group last call on this draft > (https://datatracker.ietf.org/doc/draft-ietf-secevent-token/ > ). > > Please send your comments to the list. Even if you are perfectly > happy with the draft, please let us know that you support its > publication as-is by posting to the list. > > Because of the summer holidays, this last call is open for 3 weeks, > until Aug. 21. > > Thanks, > Dick and Yaron > > _______________________________________________ > Id-event mailing list > Id-event@ietf.org > https://www.ietf.org/mailman/listinfo/id-event > > > > > > _______________________________________________ > Id-event mailing list > Id-event@ietf.org > https://www.ietf.org/mailman/listinfo/id-event > From nobody Fri Aug 11 10:43:54 2017 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CFC431321F0 for ; Fri, 11 Aug 2017 10:43:52 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.7 X-Spam-Level: X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IQ3ghP9themN for ; Fri, 11 Aug 2017 10:43:51 -0700 (PDT) Received: from mail-it0-x233.google.com (mail-it0-x233.google.com [IPv6:2607:f8b0:4001:c0b::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4A78D1321B0 for ; Fri, 11 Aug 2017 10:43:51 -0700 (PDT) Received: by mail-it0-x233.google.com with SMTP id 76so31076790ith.0 for ; Fri, 11 Aug 2017 10:43:51 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=d8us3sek90gXAi5m27URmvDgkTm2R0yNIlZqSDREHLI=; b=EbbXfJ7LgyoWoFeE8+SIsgMFmv3tN0yc0Xer54iHnu0AElNBvulXwJidwVLgqot+mZ Rqk/UwhASug/1ZxOl6NoiyHCQfbjAzgit6GcpRq8DBhizxY3cpq3yfuWcd1+zY/0S508 KjHP76Dt4FXAcHW12m9kYU+jgyN8ulEwjs73QfztnPUE+agXOp6Sq4aVG6kcZIO98bBW kT3SLMbX+j8rSdjoqjBBpPAG8cIxIOyW77s/2+ti2KeUW/e4yCZ0V6sX8/XaVgrvd6Gv BFN9UdAda39+7mgQ7O6h+jnB+vHYks2YnkRppmJF1oSLD7eSKoIS+jdqaPayshhOjvXc ZKNA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=d8us3sek90gXAi5m27URmvDgkTm2R0yNIlZqSDREHLI=; b=sD2md7QOMT0PBmH550FBTLd/A+jxkjmXX0FBMHDjlMWsyEouEpBmeT5bc4GE+O/0md pJroennKcaSWiJrlV65/0oHbl91x1xlcCWTuhjIER7noc0nz5it654/lO+KLyHITgaT/ ARrq4qq6eW4eZsUTI9bkDT2AiFSBqgd2VKv6j2m30+Hj/XD/xg0L4hZg0yRqhhcl7JKO WUOjhyiHUkqwX4FHOR2R+CuUMAi9wBLvH0fj1SKMqzfbnl1N4AQA/c6xP7wIlLsRQfNM nIoLMWfUYfkduF/a0JVVyt0vJ3NiAGBygQgWGrbllBs3xZ96XGkdJomyzfEJ/yYhAUcV Kcbw== X-Gm-Message-State: AHYfb5haaxP8BKAZI+dnCRiGCBuu7oEQ6zM/d7mbGKsck9IX1xf3lQUC XYbVuHAJzAXIQX+RKmsAsh5R+jyHn8QWe7xzsQ== X-Received: by 10.36.163.137 with SMTP id p131mr36737ite.22.1502473430014; Fri, 11 Aug 2017 10:43:50 -0700 (PDT) MIME-Version: 1.0 Received: by 10.107.19.95 with HTTP; Fri, 11 Aug 2017 10:43:29 -0700 (PDT) From: Marius Scurtescu Date: Fri, 11 Aug 2017 10:43:29 -0700 Message-ID: To: ID Events Mailing List Content-Type: multipart/alternative; boundary="94eb2c112460154c7d05567ddb74" Archived-At: Subject: [Id-event] draft-scurtescu-secevent-event-stream-mgmt-api-00 X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 11 Aug 2017 17:43:53 -0000 --94eb2c112460154c7d05567ddb74 Content-Type: text/plain; charset="UTF-8" A new version of the management api (aka control plane) draft was published: https://datatracker.ietf.org/doc/draft-scurtescu-secevent- event-stream-mgmt-api/ The document was renamed and it replaces: draft-scurtescu-secevent-simple-control-plane This new version addresses most of the feedback received at IETF 99 in Prague: - stream configuration update operation added - stream status operation added - verification event defined in this draft - 429 HTTP status codes clean up - added security considerations section - moved endpoint descriptions to Event Stream Management section - fixed example URIs and phone numbers - typos and text changes Please read and provide feedback. We would like to see this draft adopted as a workgroup draft as soon as possible. Thanks, Marius --94eb2c112460154c7d05567ddb74 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
A new version of the mana= gement api (aka control plane) draft was published:

The document was renamed and it replaces:
draft-sc= urtescu-secevent-simple-contro= l-plane

This new version addresses most of the feedback received a= t IETF 99 in Prague:
- stream configuration update operation added
- stream status operation = added
- verification event defined in this draft
- 429 HTTP s= tatus codes clean up
- added se= curity considerations section
- moved = endpoint descriptions to Event Stream Management section
- fixed example URIs and phone numbers
- typos and text changes

Please read and provide = feedback. We would like to see this draft adopted as a workgroup draft as s= oon as possible.

Thanks,
Marius
--94eb2c112460154c7d05567ddb74-- From nobody Tue Aug 15 00:25:27 2017 Return-Path: X-Original-To: id-event@ietf.org Delivered-To: id-event@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 3C6FE1200B9; Tue, 15 Aug 2017 00:25:20 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: IETF Meeting Session Request Tool To: Cc: secevent-chairs@ietf.org, yaronf.ietf@gmail.com, Kathleen.Moriarty.ietf@gmail.com, id-event@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.58.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <150278192015.21024.15434834871988984914.idtracker@ietfa.amsl.com> Date: Tue, 15 Aug 2017 00:25:20 -0700 Archived-At: Subject: [Id-event] secevent - New Meeting Session Request for IETF 100 X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.22 List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 Aug 2017 07:25:20 -0000 A new meeting session request has just been submitted by Yaron Sheffer, a Chair of the secevent working group. --------------------------------------------------------- Working Group Name: Security Events Area Name: Security Area Session Requester: Yaron Sheffer Number of Sessions: 1 Length of Session(s): 2 Hours Number of Attendees: 50 Conflicts to Avoid: First Priority: saag jsonbis httpbis dispatch oauth tokbind tls acme Second Priority: ipsecme sacm ace People who must be present: Yaron Sheffer Kathleen Moriarty Dick Hardt Resources Requested: Special Requests: Please avoid cfrg. ---------------------------------------------------------