From nobody Wed Dec 5 14:25:23 2018 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D9A37130DE3 for ; Wed, 5 Dec 2018 14:25:21 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.46 X-Spam-Level: X-Spam-Status: No, score=-3.46 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-1.46, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=coinbase.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XAxoHc4TUNJC for ; Wed, 5 Dec 2018 14:25:19 -0800 (PST) Received: from mail-pg1-x52e.google.com (mail-pg1-x52e.google.com [IPv6:2607:f8b0:4864:20::52e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7E887130E03 for ; Wed, 5 Dec 2018 14:25:16 -0800 (PST) Received: by mail-pg1-x52e.google.com with SMTP id 17so9678004pgg.1 for ; Wed, 05 Dec 2018 14:25:16 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=coinbase.com; s=google; h=mime-version:from:date:message-id:subject:to; bh=46AP3DJfMYRcxKMkPDbpZFEcsl96aFh4HkAfvFPzhHY=; b=OEolfaSPTnV9W3aeFkE41ksHKz8G8YK78WeYg2CkNmZCNJxmOQAOuyQBJcNx2tttI1 BG/sHMcZ04Nga3deQeE0Y05OGDHG3JHeZ0udoghhqi1wPjzO8LoJjJK/B7FkZdvGZnUQ lwNw7Qmy/OCwAj4WM7ij6STKUUnvmyOSy9R3Y= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=46AP3DJfMYRcxKMkPDbpZFEcsl96aFh4HkAfvFPzhHY=; b=SNPKefPOeHiJAa6EP2RMwmE+CFCu2GVT234MhVZ0s9mScbdTeH4O2qXgqRJ5pkwGb7 rvcSo/w+ChdUuereVc3Z+wQCCIqPFeYP+YgTVdInwSAYwmjh7xkPsDV5LghPMzqWtIn/ NPnpIkYFtcTbrDqkyO14sipIpUgnbv2fm25LhQNbD26RfelRHHrLmw2qpeDY5Pq6O/7J y99xwLBr1Lyja6AweonkzdvqpMoG57HFNOsy93MxZ2VL/BGoJax+Cjg8O0r5UU6ucuVP hcSiHFOCCts4+4dGiyxHggwUcY4Vk1O/W+t1qTCgP4GB8zeGTWlMBwKTFeGmUXFb2TV3 /DVg== X-Gm-Message-State: AA+aEWbPx6C+jh9uGBJldThKGLVCMupNPNbdYpQgBabbipHdZVxrWv7/ X39n6hRLe4IgZf4G+3LlAigAw02Wf5lXbOq0WnELl5paPGlSQQ== X-Google-Smtp-Source: AFSGD/VtYfiR1aMSQUcDCKZiiWVoo7DGimZvsY39MyWimVzMg3mL1kWyT400OA5huKvSMM/mlpmOBTfKev+D8FwXRRg= X-Received: by 2002:a63:4566:: with SMTP id u38mr21943723pgk.4.1544048715398; Wed, 05 Dec 2018 14:25:15 -0800 (PST) MIME-Version: 1.0 From: Marius Scurtescu Date: Wed, 5 Dec 2018 14:25:04 -0800 Message-ID: To: Id-event@ietf.org Content-Type: multipart/alternative; boundary="00000000000032b83f057c4ddb0d" Archived-At: Subject: Re: [Id-event] Push Delivery: working group last call X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 05 Dec 2018 22:25:22 -0000 --00000000000032b83f057c4ddb0d Content-Type: text/plain; charset="UTF-8" Hi all, I realize we are past December 2, not sure what the procedure is for feedback at this point. Nevertheless, here are a few comments and observations: - At the end of section 1 it is stated "have an out-of-band mechanism for exchanging configuration metadata". Does "out-of-band" exclude discovery mechanisms? Should we drop "out-of-band" and make the sentence more general? - Section 1.2, we also need a definition for "SET Recipient". - Section 2, list of validations: should we add that the Recipient should also validate that it is willing to receive events from the given transmitter? In other words, the transmitter/issuer must be whitelisted. - Section 2, last paragraph: there is also the case when no response at all is received from the Recipient, in which case re-transmitting should be an option. - Figure 1: there is no signature. Should we add a signature so the example is more realistic? - Section 2.3: only 400 is mentioned as possible status code. What about 401, 403 or 429? For example, 403 is the appropriate status code if the SET is perfectly valid but the Recipient is not willing to accept events from the given transmitter/issuer. Happy to send a pull request for these changes (if we agree on them). Let me know. Best, Marius On 18/11/2018 10:05, Yaron Sheffer wrote: > Dear SecEvent participants, > > > This is to start a 2-week working group last call on > draft-ietf-secevent-http-push-03 > ;, until > Dec. 2. Please send any comments to the list. In addition, if you have > no comments but support publication of this document as-is, please make > your voice heard. > > > Thanks, > > > Dick and Yaron > --00000000000032b83f057c4ddb0d Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi all,

I realize we are past Dece= mber 2, not sure what the procedure is for feedback at this point. Neverthe= less, here are a few comments and observations:

- At the end of sect= ion 1 it is stated "have an out-of-band mechanism for exchanging confi= guration metadata". Does "out-of-band" exclude discovery mec= hanisms? Should we drop "out-of-band" and make the sentence more = general?

- Section 1.2, we also need a definition for "SET Reci= pient".

- Section 2, list of validations: should we add that th= e Recipient should also validate that it is willing to receive events from = the given transmitter? In other words, the transmitter/issuer must be white= listed.

- Section 2, last paragraph: there is also the case when no = response at all is received from the Recipient, in which case re-transmitti= ng should be an option.

- Figure 1: there is no signature. Should we= add a signature so the example is more realistic?
- Section 2.3: only 400 is mentioned as possible s= tatus code. What about 401, 403 or 429? For example, 403 is the appropriate= status code if the SET is perfectly valid but the Recipient is not willing= to accept events from the given transmitter/issuer.
=
Happy to send a pull request for these changes (if we agree = on them). Let me know.

Best,
Marius

On 18/11/2018 10:05, Yaron Sheffer wrote:
> Dear SecEvent participants,
>=20
>=20
> This is to start a 2-week working group last call on=20
> draft-ietf-secevent-http-push-03=20
> <https://datatracker.ietf.org/doc/draft-ietf-secevent-http-push/>=
;, until=20
> Dec. 2. Please send any comments to the list. In addition, if you have=
=20
> no comments but support publication of this document as-is, please mak=
e=20
> your voice heard.
>=20
>=20
> Thanks,
>=20
>=20
>  =C2=A0=C2=A0=C2=A0 Dick and Yaron
>=20

--00000000000032b83f057c4ddb0d-- From nobody Wed Dec 5 14:27:57 2018 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 24805130E03 for ; Wed, 5 Dec 2018 14:27:56 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uzIJ-sQIuBbu for ; Wed, 5 Dec 2018 14:27:53 -0800 (PST) Received: from mail-lj1-x22c.google.com (mail-lj1-x22c.google.com [IPv6:2a00:1450:4864:20::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6C1DA130DE3 for ; Wed, 5 Dec 2018 14:27:53 -0800 (PST) Received: by mail-lj1-x22c.google.com with SMTP id v15-v6so19819610ljh.13 for ; Wed, 05 Dec 2018 14:27:53 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=tDRgsjjaWMivDUqfQRcaMVTnZvZ1jOO+XkKhdEKRzRQ=; b=Yrox/EWfPerk7xFOMW7XEEyCbUHXT8wLzaQg/Hu18Rel+Jmr6cm8scoz53Y40SL23C PUQAByIVLAfu7E8+TuG3hfRAiaRkgYWE10y7vZduP7ukmS2NNf+A1iH8yZWrZOK8os43 sAalUcqbkuY/KXni7gzwqWU6jeMiDWilmfJganfIm/Z4PObxjaDoP0zpCtmgRes/1Oz7 81XoPfrjgxU7yYqhHdY+9m1808cSz3CGUMBme8G7iaaOUcWMIfoSH4UFj30yuW9MB8Kz cbV/ouqXgnCn16KgLmS4BNijeXUieR77/KCZsncCOoS18y2/rHtPOqy4JsZCz44aZzHB CLBg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=tDRgsjjaWMivDUqfQRcaMVTnZvZ1jOO+XkKhdEKRzRQ=; b=WV3aqj4m0bjI+hy7xpiJQ3xo8I91msrr0djT36CLP61AZtIf9rCqcz4cXEKjeFywNF EIXlXvZtv2yzjsNvOaaljXy4kmPH3UOGiAq7A2qns/eW37XvoUWGJbHve4q9P7F1mPP1 RBBN+ebf2zET2jKkBGFNvxJZG8VRP0qB6ng9LF3t44OS/gQCkpn5IiaImJ2WkYnMfhaa HeNq3HgwIiu91CqXLRQsdCW5WjgdtbFMQLS6x63pNI/KON8bx0DJ2Xb4mcbxFXbkhswD 1Oe1T7mqkc1m/TfUWqouKb8O3CM6QNpj9g1j9EUKM+RzcxgLLGrX2twQC556b9KpAvLm VJgA== X-Gm-Message-State: AA+aEWZse+peyBjU1dR4JamSl/QfuaZ/BOUbaeVDNAulpcXTJLNIzuSV GjsKjtrcM3W/xkUINd5yt6Bn2+sNH7ejdxVg1ZZPsQ== X-Google-Smtp-Source: AFSGD/XvyoarokYtuCvyQYNI7uBYAf/fubXeMQRV5bPUtsQplrzzq6+lvfc2gGo0NILXaKsLAUkI8S/1fNONj9z6XFI= X-Received: by 2002:a2e:8256:: with SMTP id j22-v6mr17011094ljh.40.1544048871475; Wed, 05 Dec 2018 14:27:51 -0800 (PST) MIME-Version: 1.0 References: In-Reply-To: From: Dick Hardt Date: Wed, 5 Dec 2018 14:27:39 -0800 Message-ID: To: marius.scurtescu=40coinbase.com@dmarc.ietf.org Cc: SecEvent Content-Type: multipart/alternative; boundary="0000000000008010bd057c4de448" Archived-At: Subject: Re: [Id-event] Push Delivery: working group last call X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 05 Dec 2018 22:27:56 -0000 --0000000000008010bd057c4de448 Content-Type: text/plain; charset="UTF-8" I'm sure a PR would be appreciated Marius. Thanks for taking the time to review! On Wed, Dec 5, 2018 at 2:25 PM Marius Scurtescu wrote: > Hi all, > > I realize we are past December 2, not sure what the procedure is for > feedback at this point. Nevertheless, here are a few comments and > observations: > > - At the end of section 1 it is stated "have an out-of-band mechanism for > exchanging configuration metadata". Does "out-of-band" exclude discovery > mechanisms? Should we drop "out-of-band" and make the sentence more general? > > - Section 1.2, we also need a definition for "SET Recipient". > > - Section 2, list of validations: should we add that the Recipient should > also validate that it is willing to receive events from the given > transmitter? In other words, the transmitter/issuer must be whitelisted. > > - Section 2, last paragraph: there is also the case when no response at > all is received from the Recipient, in which case re-transmitting should be > an option. > > - Figure 1: there is no signature. Should we add a signature so the > example is more realistic? > > - Section 2.3: only 400 is mentioned as possible status code. What about > 401, 403 or 429? For example, 403 is the appropriate status code if the SET > is perfectly valid but the Recipient is not willing to accept events from > the given transmitter/issuer. > > Happy to send a pull request for these changes (if we agree on them). Let > me know. > > Best, > Marius > > On 18/11/2018 10:05, Yaron Sheffer wrote: > > Dear SecEvent participants, > > > > > > This is to start a 2-week working group last call on > > draft-ietf-secevent-http-push-03 > > ;, until > > Dec. 2. Please send any comments to the list. In addition, if you have > > no comments but support publication of this document as-is, please make > > your voice heard. > > > > > > Thanks, > > > > > > Dick and Yaron > > > > > _______________________________________________ > Id-event mailing list > Id-event@ietf.org > https://www.ietf.org/mailman/listinfo/id-event > --0000000000008010bd057c4de448 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
I'm sure a PR would be appreciated Marius. Thanks for = taking the time to review!

On Wed, Dec 5, 2018 at 2:25 PM Marius Scurtescu <marius.scurtescu= =3D40coinbase.com@dmarc.ie= tf.org> wrote:
Hi all,

I realize we are past December 2, not s= ure what the procedure is for feedback at this point. Nevertheless, here ar= e a few comments and observations:

- At the end of section 1 it is s= tated "have an out-of-band mechanism for exchanging configuration meta= data". Does "out-of-band" exclude discovery mechanisms? Shou= ld we drop "out-of-band" and make the sentence more general?
<= br>- Section 1.2, we also need a definition for "SET Recipient".<= br>
- Section 2, list of validations: should we add that the Recipient s= hould also validate that it is willing to receive events from the given tra= nsmitter? In other words, the transmitter/issuer must be whitelisted.
- Section 2, last paragraph: there is also the case when no response at a= ll is received from the Recipient, in which case re-transmitting should be = an option.

- Figure 1: there is no signature. Should we add a signat= ure so the example is more realistic?

- Section 2.3: only 400 is mentioned as possible status code. W= hat about 401, 403 or 429? For example, 403 is the appropriate status code = if the SET is perfectly valid but the Recipient is not willing to accept ev= ents from the given transmitter/issuer.

Happy to send a pull request for these changes (if we agree on them). Let= me know.

Best,
= Marius

On 18/11/2018 10:05, Yaron Sheffer wrote:
> Dear SecEvent participants,
>=20
>=20
> This is to start a 2-week working group last call on=20
> draft-ietf-secevent-http-push-03=20
> <https://datatracker.ietf.org/doc/draft-ietf-secevent-http-push/>=
;, until=20
> Dec. 2. Please send any comments to the list. In addition, if you have=
=20
> no comments but support publication of this document as-is, please mak=
e=20
> your voice heard.
>=20
>=20
> Thanks,
>=20
>=20
>  =C2=A0=C2=A0=C2=A0 Dick and Yaron
>=20

_______________________________________________
Id-event mailing list
Id-event@ietf.org
https://www.ietf.org/mailman/listinfo/id-event
--0000000000008010bd057c4de448-- From nobody Wed Dec 5 14:30:34 2018 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9D58E130E03 for ; Wed, 5 Dec 2018 14:30:32 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vHRLjj8_TsDy for ; Wed, 5 Dec 2018 14:30:30 -0800 (PST) Received: from mail-wm1-x32f.google.com (mail-wm1-x32f.google.com [IPv6:2a00:1450:4864:20::32f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 69497130E14 for ; Wed, 5 Dec 2018 14:30:30 -0800 (PST) Received: by mail-wm1-x32f.google.com with SMTP id y139so14816630wmc.5 for ; Wed, 05 Dec 2018 14:30:30 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:to:cc:references:from:message-id:date:user-agent :mime-version:in-reply-to:content-language:content-transfer-encoding; bh=Ri2Fm46n5MdrKEkFCvSo5fe0cLeoK8qHaWC2I2VAajs=; b=J+nkmKYeJEcAs2e4mX1ugb+GOH6IFrP9tuInI48x9VI4x9Q8B6vbnhmQdJ81meoBr1 emBUHot2NdO2zJXJPqFAfNPmgQ6Rka2NPSHBk0tc5mgTaQCkFj6Z+cRt9LEyvS7Atw55 aj6ICh2yAw+A1+/FK/rDv6zF99M98wKPT0nvdTKxKVAAzAUxs0tnBWaFLqhbespCWMbC C7LaClgaGlcsHHH5xFtQQ34KjntemDKoRIqWN0bJH4eIYA3UsLuvkT9B5exd6dlmFJJQ bSEmbQDquV+rCfxGWsYozgsTONFT9HkbrCtpt3z0tthfeWtrP1zZv1xI9E/Jw8GOdPz8 tuBg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:cc:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-language :content-transfer-encoding; bh=Ri2Fm46n5MdrKEkFCvSo5fe0cLeoK8qHaWC2I2VAajs=; b=RS2vGucK9TPaRaCHSzwsHTrXHt295vfIxw7BNW8EqA5FoaPtsi85O7uP8HmjkZc5lo KScLwG5WajQfhMI5mRV0oQIZNMeGBDYVd00eaFyaopqiEWIz0flWGgr9OTsEacZ8/O/T pOErkD2ATPvkwUEwJ6nGgqZQma6x845IlvKZqEBi5HWa7dzHqoE1BRylF4C2PeOohDDo S4NHpp0/W56tH1SaV4iwixdN3QLkRIxhOd01V1Tgu7/KDOGQejjw8SGrr1IvOHwHGqyQ zTJwF3iRKJudpGYgscMhYrJNFT4vMc8itEcJvZyXOlZF+BKWD8z8Y/G3BdtZSVilVMBn U4sQ== X-Gm-Message-State: AA+aEWbVKcLq5a/ynWrEQG3PRXP37BjOM0ukwQLOLOe+1H8xqzvxEtgb KD3yF8LiLXEvnfaS31iF/2rgHSBx X-Google-Smtp-Source: AFSGD/VpMiJmml2F/ZBuJOWZzfh4vq1DHZGrhw+GR3V3YW2avEBzOuwZpPmwU03/w2LxsX8sTdBIrQ== X-Received: by 2002:a1c:dc83:: with SMTP id t125-v6mr16785923wmg.78.1544049028558; Wed, 05 Dec 2018 14:30:28 -0800 (PST) Received: from [10.0.0.148] (bzq-79-182-81-103.red.bezeqint.net. [79.182.81.103]) by smtp.gmail.com with ESMTPSA id 202sm5350995wmt.8.2018.12.05.14.30.27 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 05 Dec 2018 14:30:27 -0800 (PST) To: Dick Hardt , marius.scurtescu=40coinbase.com@dmarc.ietf.org Cc: SecEvent References: From: Yaron Sheffer Message-ID: <336960f5-1c82-4ee6-fed4-56d6761b3446@gmail.com> Date: Thu, 6 Dec 2018 00:30:26 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.2.1 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit Archived-At: Subject: Re: [Id-event] Push Delivery: working group last call X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 05 Dec 2018 22:30:32 -0000 And additional reviews (or even emphatic support statements) would be highly appreciated. We cannot have the doc published with exactly one WGLC review. Thanks, Yaron On 06/12/2018 0:27, Dick Hardt wrote: > I'm sure a PR would be appreciated Marius. Thanks for taking the time to > review! > > On Wed, Dec 5, 2018 at 2:25 PM Marius Scurtescu > > wrote: > > Hi all, > > I realize we are past December 2, not sure what the procedure is for > feedback at this point. Nevertheless, here are a few comments and > observations: > > - At the end of section 1 it is stated "have an out-of-band > mechanism for exchanging configuration metadata". Does "out-of-band" > exclude discovery mechanisms? Should we drop "out-of-band" and make > the sentence more general? > > - Section 1.2, we also need a definition for "SET Recipient". > > - Section 2, list of validations: should we add that the Recipient > should also validate that it is willing to receive events from the > given transmitter? In other words, the transmitter/issuer must be > whitelisted. > > - Section 2, last paragraph: there is also the case when no response > at all is received from the Recipient, in which case re-transmitting > should be an option. > > - Figure 1: there is no signature. Should we add a signature so the > example is more realistic? > > - Section 2.3: only 400 is mentioned as possible status code. What > about 401, 403 or 429? For example, 403 is the appropriate status > code if the SET is perfectly valid but the Recipient is not willing > to accept events from the given transmitter/issuer. > > Happy to send a pull request for these changes (if we agree on > them). Let me know. > > Best, > Marius > > On 18/11/2018 10:05, Yaron Sheffer wrote: > > Dear SecEvent participants, > > > > > > This is to start a 2-week working group last call on > > draft-ietf-secevent-http-push-03 > > ;, until > > Dec. 2. Please send any comments to the list. In addition, if you have > > no comments but support publication of this document as-is, please make > > your voice heard. > > > > > > Thanks, > > > > > >     Dick and Yaron > > > > > _______________________________________________ > Id-event mailing list > Id-event@ietf.org > https://www.ietf.org/mailman/listinfo/id-event > > > _______________________________________________ > Id-event mailing list > Id-event@ietf.org > https://www.ietf.org/mailman/listinfo/id-event > From nobody Wed Dec 5 15:54:29 2018 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AAE73130E51 for ; Wed, 5 Dec 2018 15:54:27 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -13.26 X-Spam-Level: X-Spam-Status: No, score=-13.26 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-1.46, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, USER_IN_DEF_SPF_WL=-7.5] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=amazon.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uizKu8cB_PDY for ; Wed, 5 Dec 2018 15:54:22 -0800 (PST) Received: from smtp-fw-33001.amazon.com (smtp-fw-33001.amazon.com [207.171.190.10]) (using TLSv1.2 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EB2FE12D4E8 for ; Wed, 5 Dec 2018 15:54:21 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=amazon.com; i=@amazon.com; q=dns/txt; s=amazon201209; t=1544054061; x=1575590061; h=from:to:subject:date:message-id:references:in-reply-to: mime-version; bh=+BSlfqS9bv5+bJTUVsMioC96D/LFt55D0YpTAjLRiDk=; b=J5i95fokkCKZ/jdh/jJsfzox4Lsro47Nr75sZ6i07RUsoW849eOUyGHn Pg0QHo+c/52xBPfns50hvlmQ9baJzuyf3PxgfH+nN/pz8CLy6dHM5lwCo jrN9SAg4WCu1jWbAg/bc3HfPClACM3Js+6DNE19D/renHkedvuUwZ4yxm Y=; X-IronPort-AV: E=Sophos;i="5.56,253,1539648000"; d="scan'208,217";a="769328721" Received: from sea3-co-svc-lb6-vlan2.sea.amazon.com (HELO email-inbound-relay-2b-55156cd4.us-west-2.amazon.com) ([10.47.22.34]) by smtp-border-fw-out-33001.sea14.amazon.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 05 Dec 2018 23:54:19 +0000 Received: from EX13MTAUWC001.ant.amazon.com (pdx1-ws-svc-p6-lb9-vlan3.pdx.amazon.com [10.236.137.198]) by email-inbound-relay-2b-55156cd4.us-west-2.amazon.com (8.14.7/8.14.7) with ESMTP id wB5NsIUf094613 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Wed, 5 Dec 2018 23:54:19 GMT Received: from EX13D11UWC004.ant.amazon.com (10.43.162.101) by EX13MTAUWC001.ant.amazon.com (10.43.162.135) with Microsoft SMTP Server (TLS) id 15.0.1367.3; Wed, 5 Dec 2018 23:54:18 +0000 Received: from EX13D11UWC004.ant.amazon.com (10.43.162.101) by EX13D11UWC004.ant.amazon.com (10.43.162.101) with Microsoft SMTP Server (TLS) id 15.0.1367.3; Wed, 5 Dec 2018 23:54:18 +0000 Received: from EX13D11UWC004.ant.amazon.com ([10.43.162.101]) by EX13D11UWC004.ant.amazon.com ([10.43.162.101]) with mapi id 15.00.1367.000; Wed, 5 Dec 2018 23:54:18 +0000 From: "Richard Backman, Annabelle" To: Marius Scurtescu , "Id-event@ietf.org" Thread-Topic: [Id-event] Push Delivery: working group last call Thread-Index: AQHUjOl5d9bSm0CXwESqB+73ovGipqVwS7wA Date: Wed, 5 Dec 2018 23:54:18 +0000 Message-ID: <79BE299A-03AF-4585-B459-C8FC6293D202@amazon.com> References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.10.0.180812 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.43.161.253] Content-Type: multipart/alternative; boundary="_000_79BE299A03AF4585B459C8FC6293D202amazoncom_" MIME-Version: 1.0 Precedence: Bulk Archived-At: Subject: Re: [Id-event] Push Delivery: working group last call X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.29 List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 05 Dec 2018 23:54:28 -0000 --_000_79BE299A03AF4585B459C8FC6293D202amazoncom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 VGhhbmtzIGZvciB0aGUgZmVlZGJhY2ssIE1hcml1cy4gUGxlYXNlIHNlZSBteSBbcmljaGFubmFd Y29tbWVudHMgaW5saW5lWy9yaWNoYW5uYV0uDQoNCi0tDQpBbm5hYmVsbGUgUmljaGFyZCBCYWNr bWFuDQpBV1MgSWRlbnRpdHkNCg0KDQpGcm9tOiBJZC1ldmVudCA8aWQtZXZlbnQtYm91bmNlc0Bp ZXRmLm9yZz4gb24gYmVoYWxmIG9mIE1hcml1cyBTY3VydGVzY3UgPG1hcml1cy5zY3VydGVzY3U9 NDBjb2luYmFzZS5jb21AZG1hcmMuaWV0Zi5vcmc+DQpEYXRlOiBXZWRuZXNkYXksIERlY2VtYmVy IDUsIDIwMTggYXQgMjoyNSBQTQ0KVG86ICJJZC1ldmVudEBpZXRmLm9yZyIgPElkLWV2ZW50QGll dGYub3JnPg0KU3ViamVjdDogUmU6IFtJZC1ldmVudF0gUHVzaCBEZWxpdmVyeTogd29ya2luZyBn cm91cCBsYXN0IGNhbGwNCg0KSGkgYWxsLA0KDQpJIHJlYWxpemUgd2UgYXJlIHBhc3QgRGVjZW1i ZXIgMiwgbm90IHN1cmUgd2hhdCB0aGUgcHJvY2VkdXJlIGlzIGZvciBmZWVkYmFjayBhdCB0aGlz IHBvaW50LiBOZXZlcnRoZWxlc3MsIGhlcmUgYXJlIGEgZmV3IGNvbW1lbnRzIGFuZCBvYnNlcnZh dGlvbnM6DQoNCi0gQXQgdGhlIGVuZCBvZiBzZWN0aW9uIDEgaXQgaXMgc3RhdGVkICJoYXZlIGFu IG91dC1vZi1iYW5kIG1lY2hhbmlzbSBmb3IgZXhjaGFuZ2luZyBjb25maWd1cmF0aW9uIG1ldGFk YXRhIi4gRG9lcyAib3V0LW9mLWJhbmQiIGV4Y2x1ZGUgZGlzY292ZXJ5IG1lY2hhbmlzbXM/IFNo b3VsZCB3ZSBkcm9wICJvdXQtb2YtYmFuZCIgYW5kIG1ha2UgdGhlIHNlbnRlbmNlIG1vcmUgZ2Vu ZXJhbD8NCg0KW3JpY2hhbm5hXQ0KVGhlIHdvcmRzIOKAnG91dC1vZi1iYW5k4oCdIHdlcmUgaW50 ZW5kZWQgdG8gaW5kaWNhdGUgdGhhdCB0aGUgbWVjaGFuaXNtIGlzIHNlcGFyYXRlIGFuZCBhcGFy dCBmcm9tIHRoaXMgZGVsaXZlcnkgbWVjaGFuaXNtLCBhbmQgbWF5IG9jY3VyIG92ZXIgZHJhc3Rp Y2FsbHkgZGlmZmVyZW50IGNoYW5uZWxzLiAoZS5nLiwgYSB3ZWIgY29uc29sZSwgYW4gZW1haWwg YmV0d2VlbiBhZG1pbnMsIFVSTHMgd3JpdHRlbiBvbiBhIGNvY2t0YWlsIG5hcGtpbiA6RCkgSXQg aXMgaW1wb3J0YW50IHRoYXQgdGhpcyB0ZXh0IGFsbG93IGZvciBvZmZsaW5lIG1lY2hhbmlzbXMg YXMgd2VsbCBhcyBvbmxpbmUgb25lcy4gSGFwcHkgdG8gY29uc2lkZXIgYWx0ZXJuYXRlIHRleHQg dGhhdCBjYXB0dXJlcyB0aGlzIGJldHRlci4NClsvcmljaGFubmFdDQoNCi0gU2VjdGlvbiAxLjIs IHdlIGFsc28gbmVlZCBhIGRlZmluaXRpb24gZm9yICJTRVQgUmVjaXBpZW50Ii4NCg0KW3JpY2hh bm5hXQ0KU0VUIFJlY2lwaWVudCBpcyBkZWZpbmVkIGluIFJGQzg0MTc8aHR0cHM6Ly90b29scy5p ZXRmLm9yZy9odG1sL3JmYzg0MTcjc2VjdGlvbi0xLjI+LiBXZSBjb3VsZCBhZGQgYSBzdHViIGRl ZmluaXRpb24gdGhhdCBwb2ludHMgYmFjayB0byA4NDE3LCBpZiBoYXZpbmcgU0VUIFRyYW5zbWl0 dGVyIGRlZmluZWQgaGVyZSBidXQgbm90IFNFVCBSZWNpcGllbnQgaXMgY29uZnVzaW5nLiBTb21l dGhpbmcgbGlrZToNCg0KU0VUIFJlY2lwaWVudA0KICAgQW4gZW50aXR5IHRoYXQgcmVjZWl2ZXMg U0VUcyB0aHJvdWdoIHNvbWUgZGlzdHJpYnV0aW9uIG1ldGhvZCwgYXMgZGVmaW5lZCBpbiBSRkM4 NDE3Lg0KWy9yaWNoYW5uYV0NCg0KLSBTZWN0aW9uIDIsIGxpc3Qgb2YgdmFsaWRhdGlvbnM6IHNo b3VsZCB3ZSBhZGQgdGhhdCB0aGUgUmVjaXBpZW50IHNob3VsZCBhbHNvIHZhbGlkYXRlIHRoYXQg aXQgaXMgd2lsbGluZyB0byByZWNlaXZlIGV2ZW50cyBmcm9tIHRoZSBnaXZlbiB0cmFuc21pdHRl cj8gSW4gb3RoZXIgd29yZHMsIHRoZSB0cmFuc21pdHRlci9pc3N1ZXIgbXVzdCBiZSB3aGl0ZWxp c3RlZC4NCg0KW3JpY2hhbm5hXQ0KQWdyZWVkLg0KWy9yaWNoYW5uYV0NCg0KLSBTZWN0aW9uIDIs IGxhc3QgcGFyYWdyYXBoOiB0aGVyZSBpcyBhbHNvIHRoZSBjYXNlIHdoZW4gbm8gcmVzcG9uc2Ug YXQgYWxsIGlzIHJlY2VpdmVkIGZyb20gdGhlIFJlY2lwaWVudCwgaW4gd2hpY2ggY2FzZSByZS10 cmFuc21pdHRpbmcgc2hvdWxkIGJlIGFuIG9wdGlvbi4NCg0KW3JpY2hhbm5hXQ0KQWdyZWVkLg0K Wy9yaWNoYW5uYV0NCg0KLSBGaWd1cmUgMTogdGhlcmUgaXMgbm8gc2lnbmF0dXJlLiBTaG91bGQg d2UgYWRkIGEgc2lnbmF0dXJlIHNvIHRoZSBleGFtcGxlIGlzIG1vcmUgcmVhbGlzdGljPw0KDQpb cmljaGFubmFdDQpZZXMsIG91ciBleGFtcGxlcyBzaG91bGQgZGVtb25zdHJhdGUgYmVzdCBwcmFj dGljZXMuDQpbL3JpY2hhbm5hXQ0KDQotIFNlY3Rpb24gMi4zOiBvbmx5IDQwMCBpcyBtZW50aW9u ZWQgYXMgcG9zc2libGUgc3RhdHVzIGNvZGUuIFdoYXQgYWJvdXQgNDAxLCA0MDMgb3IgNDI5PyBG b3IgZXhhbXBsZSwgNDAzIGlzIHRoZSBhcHByb3ByaWF0ZSBzdGF0dXMgY29kZSBpZiB0aGUgU0VU IGlzIHBlcmZlY3RseSB2YWxpZCBidXQgdGhlIFJlY2lwaWVudCBpcyBub3Qgd2lsbGluZyB0byBh Y2NlcHQgZXZlbnRzIGZyb20gdGhlIGdpdmVuIHRyYW5zbWl0dGVyL2lzc3Vlci4NCg0KW3JpY2hh bm5hXQ0KVGhlIGNvbnNlbnN1cyBhdCBJRVRGIDEwMSB3YXMgdG8gcmV0dXJuIGV2ZXJ5dGhpbmcg YXMgNDAwLCBhbmQgbGVhdmUgSFRUUCBzdGF0dXMgY29kZXMgdG8gSFRUUC4NClsvcmljaGFubmFd DQoNCkhhcHB5IHRvIHNlbmQgYSBwdWxsIHJlcXVlc3QgZm9yIHRoZXNlIGNoYW5nZXMgKGlmIHdl IGFncmVlIG9uIHRoZW0pLiBMZXQgbWUga25vdy4NCg0KW3JpY2hhbm5hXQ0KWWVzLCBwbGVhc2Uh IDpEDQpbL3JpY2hhbm5hXQ0KDQpCZXN0LA0KTWFyaXVzDQoNCg0KDQpPbiAxOC8xMS8yMDE4IDEw OjA1LCBZYXJvbiBTaGVmZmVyIHdyb3RlOg0KDQo+IERlYXIgU2VjRXZlbnQgcGFydGljaXBhbnRz LA0KDQo+DQoNCj4NCg0KPiBUaGlzIGlzIHRvIHN0YXJ0IGEgMi13ZWVrIHdvcmtpbmcgZ3JvdXAg bGFzdCBjYWxsIG9uDQoNCj4gZHJhZnQtaWV0Zi1zZWNldmVudC1odHRwLXB1c2gtMDMNCg0KPiA8 aHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJhZnQtaWV0Zi1zZWNldmVudC1odHRw LXB1c2gvPjxodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1pZXRmLXNlY2V2 ZW50LWh0dHAtcHVzaC8lM0UsPjssIHVudGlsDQoNCj4gRGVjLiAyLiBQbGVhc2Ugc2VuZCBhbnkg Y29tbWVudHMgdG8gdGhlIGxpc3QuIEluIGFkZGl0aW9uLCBpZiB5b3UgaGF2ZQ0KDQo+IG5vIGNv bW1lbnRzIGJ1dCBzdXBwb3J0IHB1YmxpY2F0aW9uIG9mIHRoaXMgZG9jdW1lbnQgYXMtaXMsIHBs ZWFzZSBtYWtlDQoNCj4geW91ciB2b2ljZSBoZWFyZC4NCg0KPg0KDQo+DQoNCj4gVGhhbmtzLA0K DQo+DQoNCj4NCg0KPiAgICAgIERpY2sgYW5kIFlhcm9uDQoNCj4NCg0K --_000_79BE299A03AF4585B459C8FC6293D202amazoncom_ Content-Type: text/html; charset="utf-8" Content-ID: <9B7F9351D54E4348A2725469EDCAE8E2@amazon.com> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseToiTVMgTWluY2hvIjsNCglwYW5vc2UtMToyIDIgNiA5IDQgMiA1IDgg MyA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IkNhbWJyaWEgTWF0aCI7DQoJcGFub3Nl LTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGli cmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250 LWZhbWlseToiXEBNUyBNaW5jaG8iOw0KCXBhbm9zZS0xOjIgMiA2IDkgNCAyIDUgOCAzIDQ7fQ0K QGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDb25zb2xhczsNCglwYW5vc2UtMToyIDExIDYgOSAy IDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5Ok1lbmxvOw0KCXBhbm9zZS0x OjIgMTEgNiA5IDMgOCA0IDIgMiA0O30NCi8qIFN0eWxlIERlZmluaXRpb25zICovDQpwLk1zb05v cm1hbCwgbGkuTXNvTm9ybWFsLCBkaXYuTXNvTm9ybWFsDQoJe21hcmdpbjowaW47DQoJbWFyZ2lu LWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGli cmkiLHNhbnMtc2VyaWY7fQ0KYTpsaW5rLCBzcGFuLk1zb0h5cGVybGluaw0KCXttc28tc3R5bGUt cHJpb3JpdHk6OTk7DQoJY29sb3I6Ymx1ZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30N CmE6dmlzaXRlZCwgc3Bhbi5Nc29IeXBlcmxpbmtGb2xsb3dlZA0KCXttc28tc3R5bGUtcHJpb3Jp dHk6OTk7DQoJY29sb3I6cHVycGxlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KcHJl DQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgltc28tc3R5bGUtbGluazoiSFRNTCBQcmVmb3Jt YXR0ZWQgQ2hhciI7DQoJbWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9u dC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseToiQ291cmllciBOZXciO30NCnAubXNvbm9ybWFs MCwgbGkubXNvbm9ybWFsMCwgZGl2Lm1zb25vcm1hbDANCgl7bXNvLXN0eWxlLW5hbWU6bXNvbm9y bWFsOw0KCW1zby1tYXJnaW4tdG9wLWFsdDphdXRvOw0KCW1hcmdpbi1yaWdodDowaW47DQoJbXNv LW1hcmdpbi1ib3R0b20tYWx0OmF1dG87DQoJbWFyZ2luLWxlZnQ6MGluOw0KCWZvbnQtc2l6ZTox MS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0Kc3Bhbi5IVE1MUHJl Zm9ybWF0dGVkQ2hhcg0KCXttc28tc3R5bGUtbmFtZToiSFRNTCBQcmVmb3JtYXR0ZWQgQ2hhciI7 DQoJbXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1zdHlsZS1saW5rOiJIVE1MIFByZWZvcm1h dHRlZCI7DQoJZm9udC1mYW1pbHk6Q29uc29sYXM7fQ0Kc3Bhbi5FbWFpbFN0eWxlMjANCgl7bXNv LXN0eWxlLXR5cGU6cGVyc29uYWwtcmVwbHk7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMt c2VyaWY7DQoJY29sb3I6d2luZG93dGV4dDt9DQouTXNvQ2hwRGVmYXVsdA0KCXttc28tc3R5bGUt dHlwZTpleHBvcnQtb25seTsNCglmb250LXNpemU6MTAuMHB0O30NCkBwYWdlIFdvcmRTZWN0aW9u MQ0KCXtzaXplOjguNWluIDExLjBpbjsNCgltYXJnaW46MS4waW4gMS4waW4gMS4waW4gMS4waW47 fQ0KZGl2LldvcmRTZWN0aW9uMQ0KCXtwYWdlOldvcmRTZWN0aW9uMTt9DQotLT48L3N0eWxlPg0K PC9oZWFkPg0KPGJvZHkgbGFuZz0iRU4tVVMiIGxpbms9ImJsdWUiIHZsaW5rPSJwdXJwbGUiPg0K PGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlRoYW5rcyBm b3IgdGhlIGZlZWRiYWNrLCBNYXJpdXMuIFBsZWFzZSBzZWUgbXkgPHNwYW4gc3R5bGU9ImNvbG9y OiNDRjIzRkYiPg0KW3JpY2hhbm5hXWNvbW1lbnRzIGlubGluZVsvcmljaGFubmFdPC9zcGFuPi48 bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9w Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+LS0mbmJz cDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjEyLjBwdDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVv dDssc2VyaWYiPkFubmFiZWxsZSBSaWNoYXJkIEJhY2ttYW48bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtmb250 LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssc2VyaWYiPkFXUyBJZGVudGl0eTxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4m bmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwv cD4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0I1QzRERiAxLjBw dDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2NvbG9yOmJsYWNrIj5Gcm9tOiA8L3NwYW4+PC9i PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2NvbG9yOmJsYWNrIj5JZC1ldmVudCAmbHQ7 aWQtZXZlbnQtYm91bmNlc0BpZXRmLm9yZyZndDsgb24gYmVoYWxmIG9mIE1hcml1cyBTY3VydGVz Y3UgJmx0O21hcml1cy5zY3VydGVzY3U9NDBjb2luYmFzZS5jb21AZG1hcmMuaWV0Zi5vcmcmZ3Q7 PGJyPg0KPGI+RGF0ZTogPC9iPldlZG5lc2RheSwgRGVjZW1iZXIgNSwgMjAxOCBhdCAyOjI1IFBN PGJyPg0KPGI+VG86IDwvYj4mcXVvdDtJZC1ldmVudEBpZXRmLm9yZyZxdW90OyAmbHQ7SWQtZXZl bnRAaWV0Zi5vcmcmZ3Q7PGJyPg0KPGI+U3ViamVjdDogPC9iPlJlOiBbSWQtZXZlbnRdIFB1c2gg RGVsaXZlcnk6IHdvcmtpbmcgZ3JvdXAgbGFzdCBjYWxsPG86cD48L286cD48L3NwYW4+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SGkgYWxsLDxicj4N Cjxicj4NCkkgcmVhbGl6ZSB3ZSBhcmUgcGFzdCBEZWNlbWJlciAyLCBub3Qgc3VyZSB3aGF0IHRo ZSBwcm9jZWR1cmUgaXMgZm9yIGZlZWRiYWNrIGF0IHRoaXMgcG9pbnQuIE5ldmVydGhlbGVzcywg aGVyZSBhcmUgYSBmZXcgY29tbWVudHMgYW5kIG9ic2VydmF0aW9uczo8YnI+DQo8YnI+DQotIEF0 IHRoZSBlbmQgb2Ygc2VjdGlvbiAxIGl0IGlzIHN0YXRlZCAmcXVvdDtoYXZlIGFuIG91dC1vZi1i YW5kIG1lY2hhbmlzbSBmb3IgZXhjaGFuZ2luZyBjb25maWd1cmF0aW9uIG1ldGFkYXRhJnF1b3Q7 LiBEb2VzICZxdW90O291dC1vZi1iYW5kJnF1b3Q7IGV4Y2x1ZGUgZGlzY292ZXJ5IG1lY2hhbmlz bXM/IFNob3VsZCB3ZSBkcm9wICZxdW90O291dC1vZi1iYW5kJnF1b3Q7IGFuZCBtYWtlIHRoZSBz ZW50ZW5jZSBtb3JlIGdlbmVyYWw/PGJyPg0KPGJyPg0KPG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6I0NGMjNGRiI+W3JpY2hhbm5hXTxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xv cjojQ0YyM0ZGIj5UaGUgd29yZHMg4oCcb3V0LW9mLWJhbmTigJ0gd2VyZSBpbnRlbmRlZCB0byBp bmRpY2F0ZSB0aGF0IHRoZSBtZWNoYW5pc20gaXMgc2VwYXJhdGUgYW5kIGFwYXJ0IGZyb20gdGhp cyBkZWxpdmVyeSBtZWNoYW5pc20sIGFuZCBtYXkgb2NjdXIgb3ZlciBkcmFzdGljYWxseSBkaWZm ZXJlbnQgY2hhbm5lbHMuIChlLmcuLCBhIHdlYiBjb25zb2xlLCBhbiBlbWFpbCBiZXR3ZWVuDQog YWRtaW5zLCBVUkxzIHdyaXR0ZW4gb24gYSBjb2NrdGFpbCBuYXBraW4gOkQpIEl0IGlzIGltcG9y dGFudCB0aGF0IHRoaXMgdGV4dCBhbGxvdyBmb3Igb2ZmbGluZSBtZWNoYW5pc21zIGFzIHdlbGwg YXMgb25saW5lIG9uZXMuIEhhcHB5IHRvIGNvbnNpZGVyIGFsdGVybmF0ZSB0ZXh0IHRoYXQgY2Fw dHVyZXMgdGhpcyBiZXR0ZXIuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiNDRjIzRkYiPlsvcmljaGFubmFdPG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGJyPg0KLSBTZWN0aW9uIDEuMiwgd2Ug YWxzbyBuZWVkIGEgZGVmaW5pdGlvbiBmb3IgJnF1b3Q7U0VUIFJlY2lwaWVudCZxdW90Oy48bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiNDRjIzRkYiPltyaWNoYW5u YV08bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iY29sb3I6I0NGMjNGRiI+U0VUIFJlY2lwaWVudCBpcyBkZWZpbmVkIGluIDxhIGhyZWY9Imh0 dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9yZmM4NDE3I3NlY3Rpb24tMS4yIj4NCjxzcGFuIHN0 eWxlPSJjb2xvcjojQ0YyM0ZGIj5SRkM4NDE3PC9zcGFuPjwvYT4uIFdlIGNvdWxkIGFkZCBhIHN0 dWIgZGVmaW5pdGlvbiB0aGF0IHBvaW50cyBiYWNrIHRvIDg0MTcsIGlmIGhhdmluZyBTRVQgVHJh bnNtaXR0ZXIgZGVmaW5lZCBoZXJlIGJ1dCBub3QgU0VUIFJlY2lwaWVudCBpcyBjb25mdXNpbmcu IFNvbWV0aGluZyBsaWtlOjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojQ0YyM0ZGIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6I0NGMjNGRiI+U0VU IFJlY2lwaWVudDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJjb2xvcjojQ0YyM0ZGIj4mbmJzcDsmbmJzcDsgQW4gZW50aXR5IHRoYXQgcmVj ZWl2ZXMgU0VUcyB0aHJvdWdoIHNvbWUgZGlzdHJpYnV0aW9uIG1ldGhvZCwgYXMgZGVmaW5lZCBp biBSRkM4NDE3LjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJjb2xvcjojQ0YyM0ZGIj5bL3JpY2hhbm5hXTwvc3Bhbj48YnI+DQo8YnI+DQot IFNlY3Rpb24gMiwgbGlzdCBvZiB2YWxpZGF0aW9uczogc2hvdWxkIHdlIGFkZCB0aGF0IHRoZSBS ZWNpcGllbnQgc2hvdWxkIGFsc28gdmFsaWRhdGUgdGhhdCBpdCBpcyB3aWxsaW5nIHRvIHJlY2Vp dmUgZXZlbnRzIGZyb20gdGhlIGdpdmVuIHRyYW5zbWl0dGVyPyBJbiBvdGhlciB3b3JkcywgdGhl IHRyYW5zbWl0dGVyL2lzc3VlciBtdXN0IGJlIHdoaXRlbGlzdGVkLjxicj4NCjxicj4NCjxvOnA+ PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiNDRjIz RkYiPltyaWNoYW5uYV08bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iY29sb3I6I0NGMjNGRiI+QWdyZWVkLjxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojQ0YyM0ZGIj5bL3Jp Y2hhbm5hXTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxicj4N Ci0gU2VjdGlvbiAyLCBsYXN0IHBhcmFncmFwaDogdGhlcmUgaXMgYWxzbyB0aGUgY2FzZSB3aGVu IG5vIHJlc3BvbnNlIGF0IGFsbCBpcyByZWNlaXZlZCBmcm9tIHRoZSBSZWNpcGllbnQsIGluIHdo aWNoIGNhc2UgcmUtdHJhbnNtaXR0aW5nIHNob3VsZCBiZSBhbiBvcHRpb24uPGJyPg0KPGJyPg0K PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6 I0NGMjNGRiI+W3JpY2hhbm5hXTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojQ0YyM0ZGIj5BZ3JlZWQuPG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiNDRjIzRkYi PlsvcmljaGFubmFdPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PGJyPg0KLSBGaWd1cmUgMTogdGhlcmUgaXMgbm8gc2lnbmF0dXJlLiBTaG91bGQgd2UgYWRkIGEg c2lnbmF0dXJlIHNvIHRoZSBleGFtcGxlIGlzIG1vcmUgcmVhbGlzdGljPzxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6I0NGMjNGRiI+W3Jp Y2hhbm5hXTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJjb2xvcjojQ0YyM0ZGIj5ZZXMsIG91ciBleGFtcGxlcyBzaG91bGQgZGVtb25zdHJh dGUgYmVzdCBwcmFjdGljZXMuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiNDRjIzRkYiPlsvcmljaGFubmFdPG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4tIFNlY3Rpb24gMi4zOiBvbmx5IDQw MCBpcyBtZW50aW9uZWQgYXMgcG9zc2libGUgc3RhdHVzIGNvZGUuIFdoYXQgYWJvdXQgNDAxLCA0 MDMgb3IgNDI5PyBGb3IgZXhhbXBsZSwgNDAzIGlzIHRoZSBhcHByb3ByaWF0ZSBzdGF0dXMgY29k ZSBpZiB0aGUgU0VUIGlzIHBlcmZlY3RseSB2YWxpZCBidXQgdGhlIFJlY2lwaWVudCBpcyBub3Qg d2lsbGluZyB0byBhY2NlcHQgZXZlbnRzIGZyb20gdGhlIGdpdmVuIHRyYW5zbWl0dGVyL2lzc3Vl ci48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxv OnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNv bG9yOiNDRjIzRkYiPltyaWNoYW5uYV08bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6I0NGMjNGRiI+VGhlIGNvbnNlbnN1cyBhdCBJ RVRGIDEwMSB3YXMgdG8gcmV0dXJuIGV2ZXJ5dGhpbmcgYXMgNDAwLCBhbmQgbGVhdmUgSFRUUCBz dGF0dXMgY29kZXMgdG8gSFRUUC48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6I0NGMjNGRiI+Wy9yaWNoYW5uYV08bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkhhcHB5IHRvIHNlbmQgYSBwdWxs IHJlcXVlc3QgZm9yIHRoZXNlIGNoYW5nZXMgKGlmIHdlIGFncmVlIG9uIHRoZW0pLiBMZXQgbWUg a25vdy48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImNvbG9yOiNDRjIzRkYiPltyaWNoYW5uYV08bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6I0NGMjNGRiI+WWVzLCBwbGVhc2UhIDpE PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImNvbG9yOiNDRjIzRkYiPlsvcmljaGFubmFdPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj5CZXN0LDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+TWFyaXVzPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48YnI+DQo8YnI+DQo8bzpwPjwvbzpwPjwvcD4NCjxwcmUgc3R5 bGU9Im1hcmdpbi1ib3R0b206Ny41cHQiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpNZW5sbztj b2xvcjojMzMzMzMzIj5PbiAxOC8xMS8yMDE4IDEwOjA1LCBZYXJvbiBTaGVmZmVyIHdyb3RlOjxv OnA+PC9vOnA+PC9zcGFuPjwvcHJlPg0KPHByZSBzdHlsZT0ibWFyZ2luLWJvdHRvbTo3LjVwdCI+ PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5Ok1lbmxvO2NvbG9yOiMzMzMzMzMiPiZndDsgRGVhciBT ZWNFdmVudCBwYXJ0aWNpcGFudHMsPG86cD48L286cD48L3NwYW4+PC9wcmU+DQo8cHJlIHN0eWxl PSJtYXJnaW4tYm90dG9tOjcuNXB0Ij48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6TWVubG87Y29s b3I6IzMzMzMzMyI+Jmd0OyA8bzpwPjwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmUgc3R5bGU9Im1h cmdpbi1ib3R0b206Ny41cHQiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpNZW5sbztjb2xvcjoj MzMzMzMzIj4mZ3Q7IDxvOnA+PC9vOnA+PC9zcGFuPjwvcHJlPg0KPHByZSBzdHlsZT0ibWFyZ2lu LWJvdHRvbTo3LjVwdCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5Ok1lbmxvO2NvbG9yOiMzMzMz MzMiPiZndDsgVGhpcyBpcyB0byBzdGFydCBhIDItd2VlayB3b3JraW5nIGdyb3VwIGxhc3QgY2Fs bCBvbiA8bzpwPjwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmUgc3R5bGU9Im1hcmdpbi1ib3R0b206 Ny41cHQiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpNZW5sbztjb2xvcjojMzMzMzMzIj4mZ3Q7 IGRyYWZ0LWlldGYtc2VjZXZlbnQtaHR0cC1wdXNoLTAzIDxvOnA+PC9vOnA+PC9zcGFuPjwvcHJl Pg0KPHByZSBzdHlsZT0ibWFyZ2luLWJvdHRvbTo3LjVwdCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFt aWx5Ok1lbmxvO2NvbG9yOiMzMzMzMzMiPiZndDsgJmx0OzxhIGhyZWY9Imh0dHBzOi8vZGF0YXRy YWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LWlldGYtc2VjZXZlbnQtaHR0cC1wdXNoLyUzRSwiIHRh cmdldD0iX2JsYW5rIj48c3BhbiBzdHlsZT0iY29sb3I6IzMzN0FCNyI+aHR0cHM6Ly9kYXRhdHJh Y2tlci5pZXRmLm9yZy9kb2MvZHJhZnQtaWV0Zi1zZWNldmVudC1odHRwLXB1c2gvJmd0Ozwvc3Bh bj48L2E+OywgdW50aWwgPG86cD48L286cD48L3NwYW4+PC9wcmU+DQo8cHJlIHN0eWxlPSJtYXJn aW4tYm90dG9tOjcuNXB0Ij48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6TWVubG87Y29sb3I6IzMz MzMzMyI+Jmd0OyBEZWMuIDIuIFBsZWFzZSBzZW5kIGFueSBjb21tZW50cyB0byB0aGUgbGlzdC4g SW4gYWRkaXRpb24sIGlmIHlvdSBoYXZlIDxvOnA+PC9vOnA+PC9zcGFuPjwvcHJlPg0KPHByZSBz dHlsZT0ibWFyZ2luLWJvdHRvbTo3LjVwdCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5Ok1lbmxv O2NvbG9yOiMzMzMzMzMiPiZndDsgbm8gY29tbWVudHMgYnV0IHN1cHBvcnQgcHVibGljYXRpb24g b2YgdGhpcyBkb2N1bWVudCBhcy1pcywgcGxlYXNlIG1ha2UgPG86cD48L286cD48L3NwYW4+PC9w cmU+DQo8cHJlIHN0eWxlPSJtYXJnaW4tYm90dG9tOjcuNXB0Ij48c3BhbiBzdHlsZT0iZm9udC1m YW1pbHk6TWVubG87Y29sb3I6IzMzMzMzMyI+Jmd0OyB5b3VyIHZvaWNlIGhlYXJkLjxvOnA+PC9v OnA+PC9zcGFuPjwvcHJlPg0KPHByZSBzdHlsZT0ibWFyZ2luLWJvdHRvbTo3LjVwdCI+PHNwYW4g c3R5bGU9ImZvbnQtZmFtaWx5Ok1lbmxvO2NvbG9yOiMzMzMzMzMiPiZndDsgPG86cD48L286cD48 L3NwYW4+PC9wcmU+DQo8cHJlIHN0eWxlPSJtYXJnaW4tYm90dG9tOjcuNXB0Ij48c3BhbiBzdHls ZT0iZm9udC1mYW1pbHk6TWVubG87Y29sb3I6IzMzMzMzMyI+Jmd0OyA8bzpwPjwvbzpwPjwvc3Bh bj48L3ByZT4NCjxwcmUgc3R5bGU9Im1hcmdpbi1ib3R0b206Ny41cHQiPjxzcGFuIHN0eWxlPSJm b250LWZhbWlseTpNZW5sbztjb2xvcjojMzMzMzMzIj4mZ3Q7IFRoYW5rcyw8bzpwPjwvbzpwPjwv c3Bhbj48L3ByZT4NCjxwcmUgc3R5bGU9Im1hcmdpbi1ib3R0b206Ny41cHQiPjxzcGFuIHN0eWxl PSJmb250LWZhbWlseTpNZW5sbztjb2xvcjojMzMzMzMzIj4mZ3Q7IDxvOnA+PC9vOnA+PC9zcGFu PjwvcHJlPg0KPHByZSBzdHlsZT0ibWFyZ2luLWJvdHRvbTo3LjVwdCI+PHNwYW4gc3R5bGU9ImZv bnQtZmFtaWx5Ok1lbmxvO2NvbG9yOiMzMzMzMzMiPiZndDsgPG86cD48L286cD48L3NwYW4+PC9w cmU+DQo8cHJlIHN0eWxlPSJtYXJnaW4tYm90dG9tOjcuNXB0Ij48c3BhbiBzdHlsZT0iZm9udC1m YW1pbHk6TWVubG87Y29sb3I6IzMzMzMzMyI+Jmd0OyZuYnNwOyAmbmJzcDsmbmJzcDsmbmJzcDsg RGljayBhbmQgWWFyb248bzpwPjwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmUgc3R5bGU9Im1hcmdp bi1ib3R0b206Ny41cHQiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpNZW5sbztjb2xvcjojMzMz MzMzIj4mZ3Q7IDxvOnA+PC9vOnA+PC9zcGFuPjwvcHJlPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2JvZHk+DQo8 L2h0bWw+DQo= --_000_79BE299A03AF4585B459C8FC6293D202amazoncom_-- From nobody Wed Dec 5 16:53:10 2018 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CF25912D4ED for ; Wed, 5 Dec 2018 16:53:08 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.459 X-Spam-Level: X-Spam-Status: No, score=-3.459 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-1.46, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=coinbase.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id f45c59xki0Uh for ; Wed, 5 Dec 2018 16:53:03 -0800 (PST) Received: from mail-pg1-x532.google.com (mail-pg1-x532.google.com [IPv6:2607:f8b0:4864:20::532]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 673D4130F56 for ; Wed, 5 Dec 2018 16:53:02 -0800 (PST) Received: by mail-pg1-x532.google.com with SMTP id t13so9792012pgr.11 for ; Wed, 05 Dec 2018 16:53:02 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=coinbase.com; s=google; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=CWL5shaNhm92Ua9wSxSpp2wpQSmv+Vi8VMyQV+F07yo=; b=FZssJS5xsZ5t+Jn9wqSY7DgcPaVwRL0s1lUaDgxYy4nTPAIx2T5biGV2aYV4QjlA1i 3mzhVtKlRyXwJSZO4ucpSMosxq6weswGRCDD5WZXba/+wKkTKIEv5ZbjHo8iXm/CYDtn B+q/wbG7NT2TDnGpPY4yU7q5DH7FpDVmTPv7w= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=CWL5shaNhm92Ua9wSxSpp2wpQSmv+Vi8VMyQV+F07yo=; b=L17T+mM7KsDKbBp8c4y3JJwzGkg4LVhnSBfT3ZK4/2OIYFYinXVfJN4aUPhNey9FD7 j1XUAEf2lCipopM61ZQxlFxYZjYxDuXmdL3OL4udOE0ssrkiykwrrCkWOquEOGU5yFxr jiNWeuStUJcZKJKjAEgd4L3pes3j8Oozebzp363xWmk2NyVUvbIF1RtE80FcigM2H/T7 8f2ded4MhEu4mPkPFXGLCzCmsVYGlrIk1d1fHYYP5v6xmgwffft2ettl4ZZNBKDCAaRA C9XGufQHn/wvqskYx8dcCVanAqf/+fu6Jb5XMkHJMH9HxT8BCju6/Nwb0Ro8gziX1UC5 onnw== X-Gm-Message-State: AA+aEWYYrGFI1wGtsi8m6V87/dhoVrmBAStKRa/ktghtoK/f6r5b9fC8 RhXDqwXIxfhx1HxLjLKiW0MTiDQsKD0ojEHFboUv8vvdtr6+6Q== X-Google-Smtp-Source: AFSGD/WkkXRHbJgDMMuRe08JtMi7UcOEvtah3ZSYJAsyQEJRNRb6FYcLU7J+pyrlovSpRVpuAiOPL564IVpLapHcsZA= X-Received: by 2002:a63:104d:: with SMTP id 13mr22375262pgq.303.1544057581628; Wed, 05 Dec 2018 16:53:01 -0800 (PST) MIME-Version: 1.0 References: <79BE299A-03AF-4585-B459-C8FC6293D202@amazon.com> In-Reply-To: <79BE299A-03AF-4585-B459-C8FC6293D202@amazon.com> From: Marius Scurtescu Date: Wed, 5 Dec 2018 16:52:50 -0800 Message-ID: To: richanna=40amazon.com@dmarc.ietf.org Cc: Id-event@ietf.org Content-Type: multipart/alternative; boundary="000000000000aaa81d057c4feb85" Archived-At: Subject: Re: [Id-event] Push Delivery: working group last call X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 06 Dec 2018 00:53:09 -0000 --000000000000aaa81d057c4feb85 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable comments inline... On Wed, Dec 5, 2018 at 3:54 PM Richard Backman, Annabelle wrote: > Thanks for the feedback, Marius. Please see my [richanna]comments > inline[/richanna]. > > > > -- > > Annabelle Richard Backman > > AWS Identity > > > > > > *From: *Id-event on behalf of Marius > Scurtescu > *Date: *Wednesday, December 5, 2018 at 2:25 PM > *To: *"Id-event@ietf.org" > *Subject: *Re: [Id-event] Push Delivery: working group last call > > > > Hi all, > > I realize we are past December 2, not sure what the procedure is for > feedback at this point. Nevertheless, here are a few comments and > observations: > > - At the end of section 1 it is stated "have an out-of-band mechanism for > exchanging configuration metadata". Does "out-of-band" exclude discovery > mechanisms? Should we drop "out-of-band" and make the sentence more gener= al? > > [richanna] > > The words =E2=80=9Cout-of-band=E2=80=9D were intended to indicate that th= e mechanism is > separate and apart from this delivery mechanism, and may occur over > drastically different channels. (e.g., a web console, an email between > admins, URLs written on a cocktail napkin :D) It is important that this > text allow for offline mechanisms as well as online ones. Happy to consid= er > alternate text that captures this better. > > [/richanna] > > > I was just worried that "out-of-band" is too strong and I was suggesting to drop only that term. I think that all the options you mention are allowed. Not feeling too strong about this. > - Section 1.2, we also need a definition for "SET Recipient". > > > > [richanna] > > SET Recipient is defined in RFC8417 > . We could add a stub > definition that points back to 8417, if having SET Transmitter defined he= re > but not SET Recipient is confusing. Something like: > > > > SET Recipient > > An entity that receives SETs through some distribution method, as > defined in RFC8417. > > [/richanna] > > Yes, I think either both or none. The definition above sounds good to me. Do we want to add "as defined in RFC8417" to the definition of transmitter as well? > - Section 2, list of validations: should we add that the Recipient should > also validate that it is willing to receive events from the given > transmitter? In other words, the transmitter/issuer must be whitelisted. > > [richanna] > > Agreed. > > [/richanna] > > > - Section 2, last paragraph: there is also the case when no response at > all is received from the Recipient, in which case re-transmitting should = be > an option. > > [richanna] > > Agreed. > > [/richanna] > > > - Figure 1: there is no signature. Should we add a signature so the > example is more realistic? > > > > [richanna] > > Yes, our examples should demonstrate best practices. > > [/richanna] > > > > - Section 2.3: only 400 is mentioned as possible status code. What about > 401, 403 or 429? For example, 403 is the appropriate status code if the S= ET > is perfectly valid but the Recipient is not willing to accept events from > the given transmitter/issuer. > > > > [richanna] > > The consensus at IETF 101 was to return everything as 400, and leave HTTP > status codes to HTTP. > > [/richanna] > I see. The 403 case is important IMO, the fact that the SET is perfectly valid but the recipient is not willing to accept from this transmitter. Is the "jwtIss" error code meant to cover this case? I guess there is nothing to change here then. > > > Happy to send a pull request for these changes (if we agree on them). Let > me know. > > > > [richanna] > > Yes, please! :D > > [/richanna] > Should I clone/fork off https://github.com/richanna/Identity-Events (you sent me instructions at some point)? > > Best, > > Marius > > > > On 18/11/2018 10:05, Yaron Sheffer wrote: > > > Dear SecEvent participants, > > > > > > > > > This is to start a 2-week working group last call on > > > draft-ietf-secevent-http-push-03 > > > ;, until > > > Dec. 2. Please send any comments to the list. In addition, if you have > > > no comments but support publication of this document as-is, please make > > > your voice heard. > > > > > > > > > Thanks, > > > > > > > > > Dick and Yaron > > > > > > --000000000000aaa81d057c4feb85 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
comment= s inline...

On Wed, Dec 5, 2018 at 3:54 PM Richard Backman, Annabelle <ri= channa=3D4= 0amazon.com@dmarc.ietf.org> wrote:

Thanks for the feedback, Marius. Please see my [richanna]comments inline[/richanna].

=C2=A0

--=C2=A0

Annabelle Richard Backman

AWS Identity

=C2=A0

=C2=A0

From: = Id-event <id-event-bounces@ie= tf.org> on behalf of Marius Scurtescu <marius.scurtescu=3D40coinbase.com@= dmarc.ietf.org>
Date: Wednesday, December 5, 2018 at 2:25 PM
To: "Id-= event@ietf.org" <Id-event@ietf.org>
Subject: Re: [Id-event] Push Delivery: working group last call

=C2=A0

Hi all,

I realize we are past December 2, not sure what the procedure is for feedba= ck at this point. Nevertheless, here are a few comments and observations:
- At the end of section 1 it is stated "have an out-of-band mechanism = for exchanging configuration metadata". Does "out-of-band" e= xclude discovery mechanisms? Should we drop "out-of-band" and mak= e the sentence more general?

[richanna]<= /u>

The words =E2= =80=9Cout-of-band=E2=80=9D were intended to indicate that the mechanism is = separate and apart from this delivery mechanism, and may occur over drastic= ally different channels. (e.g., a web console, an email between admins, URLs written on a cocktail napkin :D) It is important that this te= xt allow for offline mechanisms as well as online ones. Happy to consider a= lternate text that captures this better.

[/richanna]=


I was just worried that "out-of-band" is too strong = and I was suggesting to drop only that term. I think that all the options y= ou mention are allowed. Not feeling too strong about this.

=C2=A0

- Section 1.2, we also need a definition for "SET Recipient".<= /u>

=C2=A0

[richanna]<= /u>

SET Recipient = is defined in RFC8417. We could add a st= ub definition that points back to 8417, if having SET Transmitter defined h= ere but not SET Recipient is confusing. Something like:

=C2=A0<= u>

SET Recipient<= u>

=C2=A0=C2=A0 A= n entity that receives SETs through some distribution method, as defined in= RFC8417.

[/richanna]


Yes, I thi= nk either both or none. The definition above sounds good to me. Do we want = to add "as defined in RFC8417" to the definition of transmitter a= s well?

=C2=A0

- Section 2, list of validations: should we add that the Recipient should a= lso validate that it is willing to receive events from the given transmitte= r? In other words, the transmitter/issuer must be whitelisted.

[richanna]<= /u>

Agreed.=

[/richanna]=


- Section 2, last paragraph: there is also the case when no response at all= is received from the Recipient, in which case re-transmitting should be an= option.

[richanna]<= /u>

Agreed.=

[/richanna]=


- Figure 1: there is no signature. Should we add a signature so the example= is more realistic?

=C2=A0

[richanna]<= /u>

Yes, our examp= les should demonstrate best practices.

[/richanna]=

=C2=A0

- Section 2.3: only 400 is mentioned as possible sta= tus code. What about 401, 403 or 429? For example, 403 is the appropriate s= tatus code if the SET is perfectly valid but the Recipient is not willing t= o accept events from the given transmitter/issuer.

=C2=A0

[richanna]<= /u>

The consensus = at IETF 101 was to return everything as 400, and leave HTTP status codes to= HTTP.

[/richanna]


I see. The= 403 case is important IMO, the fact that the SET is perfectly valid but th= e recipient is not willing to accept from this transmitter. Is the "jw= tIss" error code meant to cover this case? I guess there is nothing to= change here then.
=C2=A0

=C2=A0

Happy to send a pull request for these changes (if w= e agree on them). Let me know.

=C2=A0

[richanna]<= /u>

Yes, please! := D

[/richanna]


Should I c= lone/fork off https= ://github.com/richanna/Identity-Events=C2=A0(you sent me instructions a= t some point)?

=C2=A0

Best,

Marius



On 18/11/2018 10:05, Yaron Sheffer wrote:
> Dear SecEvent participants,
> 
> 
> This is to start a 2-week working group last call on =

> draft-ietf-secevent-http-push-03 

> <https://datatracker.ietf.org/doc/draft-ietf-secevent-http-push/>=
;;, until 


> Dec. 2. Please send any comments to the list. In additio=
n, if you have 


> no comments but support publication of this document as-=
is, please make 


> your voice heard.


> 


> 


> Thanks,


> 


> 


>=C2=A0 =C2=A0=C2=A0=C2=A0 Dick and Yaron


> 


=C2=A0
--000000000000aaa81d057c4feb85-- From nobody Thu Dec 6 12:57:48 2018 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8AC1013119A for ; Thu, 6 Dec 2018 12:57:46 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -15.959 X-Spam-Level: X-Spam-Status: No, score=-15.959 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-1.46, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_SPF_WL=-7.5] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=amazon.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id k8VVfOZ77CYU for ; Thu, 6 Dec 2018 12:57:43 -0800 (PST) Received: from smtp-fw-4101.amazon.com (smtp-fw-4101.amazon.com [72.21.198.25]) (using TLSv1.2 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0DD01130EDA for ; Thu, 6 Dec 2018 12:57:42 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=amazon.com; i=@amazon.com; q=dns/txt; s=amazon201209; t=1544129863; x=1575665863; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=pI8GLzI63V/HoVwLTGUGry9au+rzQVDON/aO4EswHBM=; b=AmdT/mHxLKNcPZTS+2EjWJ5ABUta5KqIcV/uBjp2EM0twSVcu0JqLh/x W4Mf+TcK3wqtL4xcJpWqEc+K3JLjLZ2T0A7AKOKWknUur4ww5oKjQ3g7L 5jHEi0KpWAK4CPJB/UWuTWHrX81NGgvy2uwBNgjGtYPRuIqxcjwpsKBi0 w=; X-IronPort-AV: E=Sophos;i="5.56,253,1539648000"; d="scan'208,217";a="748883790" Received: from iad6-co-svc-p1-lb1-vlan3.amazon.com (HELO email-inbound-relay-1a-821c648d.us-east-1.amazon.com) ([10.124.125.6]) by smtp-border-fw-out-4101.iad4.amazon.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 06 Dec 2018 20:57:41 +0000 Received: from EX13MTAUWC001.ant.amazon.com (iad55-ws-svc-p15-lb9-vlan2.iad.amazon.com [10.40.159.162]) by email-inbound-relay-1a-821c648d.us-east-1.amazon.com (8.14.7/8.14.7) with ESMTP id wB6KvXPH066497 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Thu, 6 Dec 2018 20:57:40 GMT Received: from EX13D11UWC004.ant.amazon.com (10.43.162.101) by EX13MTAUWC001.ant.amazon.com (10.43.162.135) with Microsoft SMTP Server (TLS) id 15.0.1367.3; Thu, 6 Dec 2018 20:57:40 +0000 Received: from EX13D11UWC004.ant.amazon.com (10.43.162.101) by EX13D11UWC004.ant.amazon.com (10.43.162.101) with Microsoft SMTP Server (TLS) id 15.0.1367.3; Thu, 6 Dec 2018 20:57:39 +0000 Received: from EX13D11UWC004.ant.amazon.com ([10.43.162.101]) by EX13D11UWC004.ant.amazon.com ([10.43.162.101]) with mapi id 15.00.1367.000; Thu, 6 Dec 2018 20:57:39 +0000 From: "Richard Backman, Annabelle" To: Marius Scurtescu CC: "Id-event@ietf.org" Thread-Topic: [Id-event] Push Delivery: working group last call Thread-Index: AQHUjOl5d9bSm0CXwESqB+73ovGipqVwS7wAgACWdgCAAMqCAA== Date: Thu, 6 Dec 2018 20:57:39 +0000 Message-ID: <49DF84C8-5C84-4842-86CA-542B05607D57@amazon.com> References: <79BE299A-03AF-4585-B459-C8FC6293D202@amazon.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.10.0.180812 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.43.160.29] Content-Type: multipart/alternative; boundary="_000_49DF84C85C84484286CA542B05607D57amazoncom_" MIME-Version: 1.0 Precedence: Bulk Archived-At: Subject: Re: [Id-event] Push Delivery: working group last call X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.29 List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 06 Dec 2018 20:57:47 -0000 --_000_49DF84C85C84484286CA542B05607D57amazoncom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Rm9yayBvZmYgb2YgaHR0cHM6Ly9naXRodWIuY29tL2luZGVwZW5kZW50aWQvSWRlbnRpdHktRXZl bnRzLiBUaGF0IGlzIHRoZSBjYW5vbmljYWwgbG9jYXRpb24gd2UgaGF2ZSBiZWVuIHVzaW5nIGZv ciB3b3JrIGluIHByb2dyZXNzOyByaWNoYW5uYS9JZGVudGl0eS1FdmVudHMgaXMgaXRzZWxmIGEg Zm9yayBvZmYgdGhhdC4NCg0KLS0NCkFubmFiZWxsZSBSaWNoYXJkIEJhY2ttYW4NCkFXUyBJZGVu dGl0eQ0KDQoNCkZyb206IElkLWV2ZW50IDxpZC1ldmVudC1ib3VuY2VzQGlldGYub3JnPiBvbiBi ZWhhbGYgb2YgTWFyaXVzIFNjdXJ0ZXNjdSA8bWFyaXVzLnNjdXJ0ZXNjdT00MGNvaW5iYXNlLmNv bUBkbWFyYy5pZXRmLm9yZz4NCkRhdGU6IFdlZG5lc2RheSwgRGVjZW1iZXIgNSwgMjAxOCBhdCA0 OjUzIFBNDQpUbzogInJpY2hhbm5hPTQwYW1hem9uLmNvbUBkbWFyYy5pZXRmLm9yZyIgPHJpY2hh bm5hPTQwYW1hem9uLmNvbUBkbWFyYy5pZXRmLm9yZz4NCkNjOiAiSWQtZXZlbnRAaWV0Zi5vcmci IDxJZC1ldmVudEBpZXRmLm9yZz4NClN1YmplY3Q6IFJlOiBbSWQtZXZlbnRdIFB1c2ggRGVsaXZl cnk6IHdvcmtpbmcgZ3JvdXAgbGFzdCBjYWxsDQoNCmNvbW1lbnRzIGlubGluZS4uLg0KDQpPbiBX ZWQsIERlYyA1LCAyMDE4IGF0IDM6NTQgUE0gUmljaGFyZCBCYWNrbWFuLCBBbm5hYmVsbGUgPHJp Y2hhbm5hPTQwYW1hem9uLmNvbUBkbWFyYy5pZXRmLm9yZzxtYWlsdG86NDBhbWF6b24uY29tQGRt YXJjLmlldGYub3JnPj4gd3JvdGU6DQpUaGFua3MgZm9yIHRoZSBmZWVkYmFjaywgTWFyaXVzLiBQ bGVhc2Ugc2VlIG15IFtyaWNoYW5uYV1jb21tZW50cyBpbmxpbmVbL3JpY2hhbm5hXS4NCg0KLS0N CkFubmFiZWxsZSBSaWNoYXJkIEJhY2ttYW4NCkFXUyBJZGVudGl0eQ0KDQoNCkZyb206IElkLWV2 ZW50IDxpZC1ldmVudC1ib3VuY2VzQGlldGYub3JnPG1haWx0bzppZC1ldmVudC1ib3VuY2VzQGll dGYub3JnPj4gb24gYmVoYWxmIG9mIE1hcml1cyBTY3VydGVzY3UgPG1hcml1cy5zY3VydGVzY3U9 NDBjb2luYmFzZS5jb21AZG1hcmMuaWV0Zi5vcmc8bWFpbHRvOjQwY29pbmJhc2UuY29tQGRtYXJj LmlldGYub3JnPj4NCkRhdGU6IFdlZG5lc2RheSwgRGVjZW1iZXIgNSwgMjAxOCBhdCAyOjI1IFBN DQpUbzogIklkLWV2ZW50QGlldGYub3JnPG1haWx0bzpJZC1ldmVudEBpZXRmLm9yZz4iIDxJZC1l dmVudEBpZXRmLm9yZzxtYWlsdG86SWQtZXZlbnRAaWV0Zi5vcmc+Pg0KU3ViamVjdDogUmU6IFtJ ZC1ldmVudF0gUHVzaCBEZWxpdmVyeTogd29ya2luZyBncm91cCBsYXN0IGNhbGwNCg0KSGkgYWxs LA0KDQpJIHJlYWxpemUgd2UgYXJlIHBhc3QgRGVjZW1iZXIgMiwgbm90IHN1cmUgd2hhdCB0aGUg cHJvY2VkdXJlIGlzIGZvciBmZWVkYmFjayBhdCB0aGlzIHBvaW50LiBOZXZlcnRoZWxlc3MsIGhl cmUgYXJlIGEgZmV3IGNvbW1lbnRzIGFuZCBvYnNlcnZhdGlvbnM6DQoNCi0gQXQgdGhlIGVuZCBv ZiBzZWN0aW9uIDEgaXQgaXMgc3RhdGVkICJoYXZlIGFuIG91dC1vZi1iYW5kIG1lY2hhbmlzbSBm b3IgZXhjaGFuZ2luZyBjb25maWd1cmF0aW9uIG1ldGFkYXRhIi4gRG9lcyAib3V0LW9mLWJhbmQi IGV4Y2x1ZGUgZGlzY292ZXJ5IG1lY2hhbmlzbXM/IFNob3VsZCB3ZSBkcm9wICJvdXQtb2YtYmFu ZCIgYW5kIG1ha2UgdGhlIHNlbnRlbmNlIG1vcmUgZ2VuZXJhbD8NCltyaWNoYW5uYV0NClRoZSB3 b3JkcyDigJxvdXQtb2YtYmFuZOKAnSB3ZXJlIGludGVuZGVkIHRvIGluZGljYXRlIHRoYXQgdGhl IG1lY2hhbmlzbSBpcyBzZXBhcmF0ZSBhbmQgYXBhcnQgZnJvbSB0aGlzIGRlbGl2ZXJ5IG1lY2hh bmlzbSwgYW5kIG1heSBvY2N1ciBvdmVyIGRyYXN0aWNhbGx5IGRpZmZlcmVudCBjaGFubmVscy4g KGUuZy4sIGEgd2ViIGNvbnNvbGUsIGFuIGVtYWlsIGJldHdlZW4gYWRtaW5zLCBVUkxzIHdyaXR0 ZW4gb24gYSBjb2NrdGFpbCBuYXBraW4gOkQpIEl0IGlzIGltcG9ydGFudCB0aGF0IHRoaXMgdGV4 dCBhbGxvdyBmb3Igb2ZmbGluZSBtZWNoYW5pc21zIGFzIHdlbGwgYXMgb25saW5lIG9uZXMuIEhh cHB5IHRvIGNvbnNpZGVyIGFsdGVybmF0ZSB0ZXh0IHRoYXQgY2FwdHVyZXMgdGhpcyBiZXR0ZXIu DQpbL3JpY2hhbm5hXQ0KDQoNCkkgd2FzIGp1c3Qgd29ycmllZCB0aGF0ICJvdXQtb2YtYmFuZCIg aXMgdG9vIHN0cm9uZyBhbmQgSSB3YXMgc3VnZ2VzdGluZyB0byBkcm9wIG9ubHkgdGhhdCB0ZXJt LiBJIHRoaW5rIHRoYXQgYWxsIHRoZSBvcHRpb25zIHlvdSBtZW50aW9uIGFyZSBhbGxvd2VkLiBO b3QgZmVlbGluZyB0b28gc3Ryb25nIGFib3V0IHRoaXMuDQoNCg0KLSBTZWN0aW9uIDEuMiwgd2Ug YWxzbyBuZWVkIGEgZGVmaW5pdGlvbiBmb3IgIlNFVCBSZWNpcGllbnQiLg0KDQpbcmljaGFubmFd DQpTRVQgUmVjaXBpZW50IGlzIGRlZmluZWQgaW4gUkZDODQxNzxodHRwczovL3Rvb2xzLmlldGYu b3JnL2h0bWwvcmZjODQxNyNzZWN0aW9uLTEuMj4uIFdlIGNvdWxkIGFkZCBhIHN0dWIgZGVmaW5p dGlvbiB0aGF0IHBvaW50cyBiYWNrIHRvIDg0MTcsIGlmIGhhdmluZyBTRVQgVHJhbnNtaXR0ZXIg ZGVmaW5lZCBoZXJlIGJ1dCBub3QgU0VUIFJlY2lwaWVudCBpcyBjb25mdXNpbmcuIFNvbWV0aGlu ZyBsaWtlOg0KDQpTRVQgUmVjaXBpZW50DQogICBBbiBlbnRpdHkgdGhhdCByZWNlaXZlcyBTRVRz IHRocm91Z2ggc29tZSBkaXN0cmlidXRpb24gbWV0aG9kLCBhcyBkZWZpbmVkIGluIFJGQzg0MTcu DQpbL3JpY2hhbm5hXQ0KDQpZZXMsIEkgdGhpbmsgZWl0aGVyIGJvdGggb3Igbm9uZS4gVGhlIGRl ZmluaXRpb24gYWJvdmUgc291bmRzIGdvb2QgdG8gbWUuIERvIHdlIHdhbnQgdG8gYWRkICJhcyBk ZWZpbmVkIGluIFJGQzg0MTciIHRvIHRoZSBkZWZpbml0aW9uIG9mIHRyYW5zbWl0dGVyIGFzIHdl bGw/DQoNCg0KLSBTZWN0aW9uIDIsIGxpc3Qgb2YgdmFsaWRhdGlvbnM6IHNob3VsZCB3ZSBhZGQg dGhhdCB0aGUgUmVjaXBpZW50IHNob3VsZCBhbHNvIHZhbGlkYXRlIHRoYXQgaXQgaXMgd2lsbGlu ZyB0byByZWNlaXZlIGV2ZW50cyBmcm9tIHRoZSBnaXZlbiB0cmFuc21pdHRlcj8gSW4gb3RoZXIg d29yZHMsIHRoZSB0cmFuc21pdHRlci9pc3N1ZXIgbXVzdCBiZSB3aGl0ZWxpc3RlZC4NCltyaWNo YW5uYV0NCkFncmVlZC4NClsvcmljaGFubmFdDQoNCi0gU2VjdGlvbiAyLCBsYXN0IHBhcmFncmFw aDogdGhlcmUgaXMgYWxzbyB0aGUgY2FzZSB3aGVuIG5vIHJlc3BvbnNlIGF0IGFsbCBpcyByZWNl aXZlZCBmcm9tIHRoZSBSZWNpcGllbnQsIGluIHdoaWNoIGNhc2UgcmUtdHJhbnNtaXR0aW5nIHNo b3VsZCBiZSBhbiBvcHRpb24uDQpbcmljaGFubmFdDQpBZ3JlZWQuDQpbL3JpY2hhbm5hXQ0KDQot IEZpZ3VyZSAxOiB0aGVyZSBpcyBubyBzaWduYXR1cmUuIFNob3VsZCB3ZSBhZGQgYSBzaWduYXR1 cmUgc28gdGhlIGV4YW1wbGUgaXMgbW9yZSByZWFsaXN0aWM/DQoNCltyaWNoYW5uYV0NClllcywg b3VyIGV4YW1wbGVzIHNob3VsZCBkZW1vbnN0cmF0ZSBiZXN0IHByYWN0aWNlcy4NClsvcmljaGFu bmFdDQoNCi0gU2VjdGlvbiAyLjM6IG9ubHkgNDAwIGlzIG1lbnRpb25lZCBhcyBwb3NzaWJsZSBz dGF0dXMgY29kZS4gV2hhdCBhYm91dCA0MDEsIDQwMyBvciA0Mjk/IEZvciBleGFtcGxlLCA0MDMg aXMgdGhlIGFwcHJvcHJpYXRlIHN0YXR1cyBjb2RlIGlmIHRoZSBTRVQgaXMgcGVyZmVjdGx5IHZh bGlkIGJ1dCB0aGUgUmVjaXBpZW50IGlzIG5vdCB3aWxsaW5nIHRvIGFjY2VwdCBldmVudHMgZnJv bSB0aGUgZ2l2ZW4gdHJhbnNtaXR0ZXIvaXNzdWVyLg0KDQpbcmljaGFubmFdDQpUaGUgY29uc2Vu c3VzIGF0IElFVEYgMTAxIHdhcyB0byByZXR1cm4gZXZlcnl0aGluZyBhcyA0MDAsIGFuZCBsZWF2 ZSBIVFRQIHN0YXR1cyBjb2RlcyB0byBIVFRQLg0KWy9yaWNoYW5uYV0NCg0KSSBzZWUuIFRoZSA0 MDMgY2FzZSBpcyBpbXBvcnRhbnQgSU1PLCB0aGUgZmFjdCB0aGF0IHRoZSBTRVQgaXMgcGVyZmVj dGx5IHZhbGlkIGJ1dCB0aGUgcmVjaXBpZW50IGlzIG5vdCB3aWxsaW5nIHRvIGFjY2VwdCBmcm9t IHRoaXMgdHJhbnNtaXR0ZXIuIElzIHRoZSAiand0SXNzIiBlcnJvciBjb2RlIG1lYW50IHRvIGNv dmVyIHRoaXMgY2FzZT8gSSBndWVzcyB0aGVyZSBpcyBub3RoaW5nIHRvIGNoYW5nZSBoZXJlIHRo ZW4uDQoNCg0KSGFwcHkgdG8gc2VuZCBhIHB1bGwgcmVxdWVzdCBmb3IgdGhlc2UgY2hhbmdlcyAo aWYgd2UgYWdyZWUgb24gdGhlbSkuIExldCBtZSBrbm93Lg0KDQpbcmljaGFubmFdDQpZZXMsIHBs ZWFzZSEgOkQNClsvcmljaGFubmFdDQoNClNob3VsZCBJIGNsb25lL2Zvcmsgb2ZmIGh0dHBzOi8v Z2l0aHViLmNvbS9yaWNoYW5uYS9JZGVudGl0eS1FdmVudHMgKHlvdSBzZW50IG1lIGluc3RydWN0 aW9ucyBhdCBzb21lIHBvaW50KT8NCg0KDQpCZXN0LA0KTWFyaXVzDQoNCg0KT24gMTgvMTEvMjAx OCAxMDowNSwgWWFyb24gU2hlZmZlciB3cm90ZToNCg0KPiBEZWFyIFNlY0V2ZW50IHBhcnRpY2lw YW50cywNCg0KPg0KDQo+DQoNCj4gVGhpcyBpcyB0byBzdGFydCBhIDItd2VlayB3b3JraW5nIGdy b3VwIGxhc3QgY2FsbCBvbg0KDQo+IGRyYWZ0LWlldGYtc2VjZXZlbnQtaHR0cC1wdXNoLTAzDQoN Cj4gPGh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LWlldGYtc2VjZXZlbnQt aHR0cC1wdXNoLz48aHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJhZnQtaWV0Zi1z ZWNldmVudC1odHRwLXB1c2gvJTNFLD47LCB1bnRpbA0KDQo+IERlYy4gMi4gUGxlYXNlIHNlbmQg YW55IGNvbW1lbnRzIHRvIHRoZSBsaXN0LiBJbiBhZGRpdGlvbiwgaWYgeW91IGhhdmUNCg0KPiBu byBjb21tZW50cyBidXQgc3VwcG9ydCBwdWJsaWNhdGlvbiBvZiB0aGlzIGRvY3VtZW50IGFzLWlz LCBwbGVhc2UgbWFrZQ0KDQo+IHlvdXIgdm9pY2UgaGVhcmQuDQoNCj4NCg0KPg0KDQo+IFRoYW5r cywNCg0KPg0KDQo+DQoNCj4gICAgICBEaWNrIGFuZCBZYXJvbg0KDQo+DQoNCg== --_000_49DF84C85C84484286CA542B05607D57amazoncom_ Content-Type: text/html; charset="utf-8" Content-ID: <986E06C79C06EB4BBBBB6FE288219415@amazon.com> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseToiTVMgTWluY2hvIjsNCglwYW5vc2UtMToyIDIgNiA5IDQgMiA1IDgg MyA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IkNhbWJyaWEgTWF0aCI7DQoJcGFub3Nl LTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGli cmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250 LWZhbWlseToiXEBNUyBNaW5jaG8iOw0KCXBhbm9zZS0xOjIgMiA2IDkgNCAyIDUgOCAzIDQ7fQ0K QGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDb25zb2xhczsNCglwYW5vc2UtMToyIDExIDYgOSAy IDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5Ok1lbmxvOw0KCXBhbm9zZS0x OjIgMTEgNiA5IDMgOCA0IDIgMiA0O30NCi8qIFN0eWxlIERlZmluaXRpb25zICovDQpwLk1zb05v cm1hbCwgbGkuTXNvTm9ybWFsLCBkaXYuTXNvTm9ybWFsDQoJe21hcmdpbjowaW47DQoJbWFyZ2lu LWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGli cmkiLHNhbnMtc2VyaWY7fQ0KYTpsaW5rLCBzcGFuLk1zb0h5cGVybGluaw0KCXttc28tc3R5bGUt cHJpb3JpdHk6OTk7DQoJY29sb3I6Ymx1ZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30N CmE6dmlzaXRlZCwgc3Bhbi5Nc29IeXBlcmxpbmtGb2xsb3dlZA0KCXttc28tc3R5bGUtcHJpb3Jp dHk6OTk7DQoJY29sb3I6cHVycGxlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KcHJl DQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgltc28tc3R5bGUtbGluazoiSFRNTCBQcmVmb3Jt YXR0ZWQgQ2hhciI7DQoJbWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9u dC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseToiQ291cmllciBOZXciO30NCnAubXNvbm9ybWFs MCwgbGkubXNvbm9ybWFsMCwgZGl2Lm1zb25vcm1hbDANCgl7bXNvLXN0eWxlLW5hbWU6bXNvbm9y bWFsOw0KCW1zby1tYXJnaW4tdG9wLWFsdDphdXRvOw0KCW1hcmdpbi1yaWdodDowaW47DQoJbXNv LW1hcmdpbi1ib3R0b20tYWx0OmF1dG87DQoJbWFyZ2luLWxlZnQ6MGluOw0KCWZvbnQtc2l6ZTox MS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0Kc3Bhbi5IVE1MUHJl Zm9ybWF0dGVkQ2hhcg0KCXttc28tc3R5bGUtbmFtZToiSFRNTCBQcmVmb3JtYXR0ZWQgQ2hhciI7 DQoJbXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1zdHlsZS1saW5rOiJIVE1MIFByZWZvcm1h dHRlZCI7DQoJZm9udC1mYW1pbHk6Q29uc29sYXM7fQ0Kc3Bhbi5FbWFpbFN0eWxlMjANCgl7bXNv LXN0eWxlLXR5cGU6cGVyc29uYWwtcmVwbHk7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMt c2VyaWY7DQoJY29sb3I6d2luZG93dGV4dDt9DQouTXNvQ2hwRGVmYXVsdA0KCXttc28tc3R5bGUt dHlwZTpleHBvcnQtb25seTsNCglmb250LXNpemU6MTAuMHB0O30NCkBwYWdlIFdvcmRTZWN0aW9u MQ0KCXtzaXplOjguNWluIDExLjBpbjsNCgltYXJnaW46MS4waW4gMS4waW4gMS4waW4gMS4waW47 fQ0KZGl2LldvcmRTZWN0aW9uMQ0KCXtwYWdlOldvcmRTZWN0aW9uMTt9DQotLT48L3N0eWxlPg0K PC9oZWFkPg0KPGJvZHkgbGFuZz0iRU4tVVMiIGxpbms9ImJsdWUiIHZsaW5rPSJwdXJwbGUiPg0K PGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkZvcmsgb2Zm IG9mIDxhIGhyZWY9Imh0dHBzOi8vZ2l0aHViLmNvbS9pbmRlcGVuZGVudGlkL0lkZW50aXR5LUV2 ZW50cyI+DQpodHRwczovL2dpdGh1Yi5jb20vaW5kZXBlbmRlbnRpZC9JZGVudGl0eS1FdmVudHM8 L2E+LiBUaGF0IGlzIHRoZSBjYW5vbmljYWwgbG9jYXRpb24gd2UgaGF2ZSBiZWVuIHVzaW5nIGZv ciB3b3JrIGluIHByb2dyZXNzOyByaWNoYW5uYS9JZGVudGl0eS1FdmVudHMgaXMgaXRzZWxmIGEg Zm9yayBvZmYgdGhhdC48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90 OyxzZXJpZiI+LS0mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtmb250LWZhbWlseTomcXVvdDtUaW1l cyBOZXcgUm9tYW4mcXVvdDssc2VyaWYiPkFubmFiZWxsZSBSaWNoYXJkIEJhY2ttYW48bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjEyLjBwdDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssc2VyaWYi PkFXUyBJZGVudGl0eTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpw PiZuYnNwOzwvbzpwPjwvcD4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29s aWQgI0I1QzRERiAxLjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGluIj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2NvbG9yOmJsYWNrIj5G cm9tOiA8L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2NvbG9yOmJsYWNr Ij5JZC1ldmVudCAmbHQ7aWQtZXZlbnQtYm91bmNlc0BpZXRmLm9yZyZndDsgb24gYmVoYWxmIG9m IE1hcml1cyBTY3VydGVzY3UgJmx0O21hcml1cy5zY3VydGVzY3U9NDBjb2luYmFzZS5jb21AZG1h cmMuaWV0Zi5vcmcmZ3Q7PGJyPg0KPGI+RGF0ZTogPC9iPldlZG5lc2RheSwgRGVjZW1iZXIgNSwg MjAxOCBhdCA0OjUzIFBNPGJyPg0KPGI+VG86IDwvYj4mcXVvdDtyaWNoYW5uYT00MGFtYXpvbi5j b21AZG1hcmMuaWV0Zi5vcmcmcXVvdDsgJmx0O3JpY2hhbm5hPTQwYW1hem9uLmNvbUBkbWFyYy5p ZXRmLm9yZyZndDs8YnI+DQo8Yj5DYzogPC9iPiZxdW90O0lkLWV2ZW50QGlldGYub3JnJnF1b3Q7 ICZsdDtJZC1ldmVudEBpZXRmLm9yZyZndDs8YnI+DQo8Yj5TdWJqZWN0OiA8L2I+UmU6IFtJZC1l dmVudF0gUHVzaCBEZWxpdmVyeTogd29ya2luZyBncm91cCBsYXN0IGNhbGw8bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNw OzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPmNvbW1lbnRzIGlubGluZS4uLjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPk9uIFdlZCwgRGVjIDUsIDIwMTggYXQgMzo1NCBQ TSBSaWNoYXJkIEJhY2ttYW4sIEFubmFiZWxsZSAmbHQ7cmljaGFubmE9PGEgaHJlZj0ibWFpbHRv OjQwYW1hem9uLmNvbUBkbWFyYy5pZXRmLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPjQwYW1hem9uLmNv bUBkbWFyYy5pZXRmLm9yZzwvYT4mZ3Q7IHdyb3RlOjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 YmxvY2txdW90ZSBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgI0NDQ0NDQyAx LjBwdDtwYWRkaW5nOjBpbiAwaW4gMGluIDYuMHB0O21hcmdpbi1sZWZ0OjQuOHB0O21hcmdpbi1y aWdodDowaW4iPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNv LW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPlRoYW5rcyBm b3IgdGhlIGZlZWRiYWNrLCBNYXJpdXMuIFBsZWFzZSBzZWUgbXkNCjxzcGFuIHN0eWxlPSJjb2xv cjojQ0YyM0ZGIj5bcmljaGFubmFdY29tbWVudHMgaW5saW5lWy9yaWNoYW5uYV08L3NwYW4+Ljxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9w LWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpwPjwvbzpwPjwv cD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0 OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+LS0m bmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21h biZxdW90OyxzZXJpZiI+QW5uYWJlbGxlIFJpY2hhcmQgQmFja21hbjwvc3Bhbj48bzpwPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0 bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj5BV1MgSWRl bnRpdHk8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0 byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNv LW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPiZuYnNwOzxv OnA+PC9vOnA+PC9wPg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAj QjVDNERGIDEuMHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFs dDphdXRvIj48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtjb2xvcjpibGFjayI+RnJv bToNCjwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Y29sb3I6YmxhY2si PklkLWV2ZW50ICZsdDs8YSBocmVmPSJtYWlsdG86aWQtZXZlbnQtYm91bmNlc0BpZXRmLm9yZyIg dGFyZ2V0PSJfYmxhbmsiPmlkLWV2ZW50LWJvdW5jZXNAaWV0Zi5vcmc8L2E+Jmd0OyBvbiBiZWhh bGYgb2YgTWFyaXVzIFNjdXJ0ZXNjdSAmbHQ7bWFyaXVzLnNjdXJ0ZXNjdT08YSBocmVmPSJtYWls dG86NDBjb2luYmFzZS5jb21AZG1hcmMuaWV0Zi5vcmciIHRhcmdldD0iX2JsYW5rIj40MGNvaW5i YXNlLmNvbUBkbWFyYy5pZXRmLm9yZzwvYT4mZ3Q7PGJyPg0KPGI+RGF0ZTogPC9iPldlZG5lc2Rh eSwgRGVjZW1iZXIgNSwgMjAxOCBhdCAyOjI1IFBNPGJyPg0KPGI+VG86IDwvYj4mcXVvdDs8YSBo cmVmPSJtYWlsdG86SWQtZXZlbnRAaWV0Zi5vcmciIHRhcmdldD0iX2JsYW5rIj5JZC1ldmVudEBp ZXRmLm9yZzwvYT4mcXVvdDsgJmx0OzxhIGhyZWY9Im1haWx0bzpJZC1ldmVudEBpZXRmLm9yZyIg dGFyZ2V0PSJfYmxhbmsiPklkLWV2ZW50QGlldGYub3JnPC9hPiZndDs8YnI+DQo8Yj5TdWJqZWN0 OiA8L2I+UmU6IFtJZC1ldmVudF0gUHVzaCBEZWxpdmVyeTogd29ya2luZyBncm91cCBsYXN0IGNh bGw8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0 OmF1dG8iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttYXJnaW4tYm90 dG9tOjEyLjBwdCI+SGkgYWxsLDxicj4NCjxicj4NCkkgcmVhbGl6ZSB3ZSBhcmUgcGFzdCBEZWNl bWJlciAyLCBub3Qgc3VyZSB3aGF0IHRoZSBwcm9jZWR1cmUgaXMgZm9yIGZlZWRiYWNrIGF0IHRo aXMgcG9pbnQuIE5ldmVydGhlbGVzcywgaGVyZSBhcmUgYSBmZXcgY29tbWVudHMgYW5kIG9ic2Vy dmF0aW9uczo8YnI+DQo8YnI+DQotIEF0IHRoZSBlbmQgb2Ygc2VjdGlvbiAxIGl0IGlzIHN0YXRl ZCAmcXVvdDtoYXZlIGFuIG91dC1vZi1iYW5kIG1lY2hhbmlzbSBmb3IgZXhjaGFuZ2luZyBjb25m aWd1cmF0aW9uIG1ldGFkYXRhJnF1b3Q7LiBEb2VzICZxdW90O291dC1vZi1iYW5kJnF1b3Q7IGV4 Y2x1ZGUgZGlzY292ZXJ5IG1lY2hhbmlzbXM/IFNob3VsZCB3ZSBkcm9wICZxdW90O291dC1vZi1i YW5kJnF1b3Q7IGFuZCBtYWtlIHRoZSBzZW50ZW5jZSBtb3JlIGdlbmVyYWw/PG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87 bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJjb2xvcjojQ0YyM0ZGIj5b cmljaGFubmFdPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48 c3BhbiBzdHlsZT0iY29sb3I6I0NGMjNGRiI+VGhlIHdvcmRzIOKAnG91dC1vZi1iYW5k4oCdIHdl cmUgaW50ZW5kZWQgdG8gaW5kaWNhdGUgdGhhdCB0aGUgbWVjaGFuaXNtIGlzIHNlcGFyYXRlIGFu ZCBhcGFydCBmcm9tIHRoaXMgZGVsaXZlcnkgbWVjaGFuaXNtLCBhbmQgbWF5IG9jY3VyIG92ZXIg ZHJhc3RpY2FsbHkNCiBkaWZmZXJlbnQgY2hhbm5lbHMuIChlLmcuLCBhIHdlYiBjb25zb2xlLCBh biBlbWFpbCBiZXR3ZWVuIGFkbWlucywgVVJMcyB3cml0dGVuIG9uIGEgY29ja3RhaWwgbmFwa2lu IDpEKSBJdCBpcyBpbXBvcnRhbnQgdGhhdCB0aGlzIHRleHQgYWxsb3cgZm9yIG9mZmxpbmUgbWVj aGFuaXNtcyBhcyB3ZWxsIGFzIG9ubGluZSBvbmVzLiBIYXBweSB0byBjb25zaWRlciBhbHRlcm5h dGUgdGV4dCB0aGF0IGNhcHR1cmVzIHRoaXMgYmV0dGVyLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28t bWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImNvbG9yOiNDRjIzRkYiPlsvcmlj aGFubmFdPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48bzpw PiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9j a3F1b3RlPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SSB3YXMganVzdCB3b3JyaWVk IHRoYXQgJnF1b3Q7b3V0LW9mLWJhbmQmcXVvdDsgaXMgdG9vIHN0cm9uZyBhbmQgSSB3YXMgc3Vn Z2VzdGluZyB0byBkcm9wIG9ubHkgdGhhdCB0ZXJtLiBJIHRoaW5rIHRoYXQgYWxsIHRoZSBvcHRp b25zIHlvdSBtZW50aW9uIGFyZSBhbGxvd2VkLiBOb3QgZmVlbGluZyB0b28gc3Ryb25nIGFib3V0 IHRoaXMuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0iYm9y ZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgI0NDQ0NDQyAxLjBwdDtwYWRkaW5nOjBpbiAwaW4g MGluIDYuMHB0O21hcmdpbi1sZWZ0OjQuOHB0O21hcmdpbi1yaWdodDowaW4iPg0KPGRpdj4NCjxk aXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2lu LXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+LSBTZWN0aW9uIDEuMiwg d2UgYWxzbyBuZWVkIGEgZGVmaW5pdGlvbiBmb3IgJnF1b3Q7U0VUIFJlY2lwaWVudCZxdW90Oy48 bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRv cC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87 bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJjb2xvcjojQ0YyM0ZGIj5b cmljaGFubmFdPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48 c3BhbiBzdHlsZT0iY29sb3I6I0NGMjNGRiI+U0VUIFJlY2lwaWVudCBpcyBkZWZpbmVkIGluDQo8 YSBocmVmPSJodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvcmZjODQxNyNzZWN0aW9uLTEuMiIg dGFyZ2V0PSJfYmxhbmsiPjxzcGFuIHN0eWxlPSJjb2xvcjojQ0YyM0ZGIj5SRkM4NDE3PC9zcGFu PjwvYT4uIFdlIGNvdWxkIGFkZCBhIHN0dWIgZGVmaW5pdGlvbiB0aGF0IHBvaW50cyBiYWNrIHRv IDg0MTcsIGlmIGhhdmluZyBTRVQgVHJhbnNtaXR0ZXIgZGVmaW5lZCBoZXJlIGJ1dCBub3QgU0VU IFJlY2lwaWVudCBpcyBjb25mdXNpbmcuIFNvbWV0aGluZw0KIGxpa2U6PC9zcGFuPjxvOnA+PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDph dXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iY29sb3I6I0NGMjNG RiI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48 c3BhbiBzdHlsZT0iY29sb3I6I0NGMjNGRiI+U0VUIFJlY2lwaWVudDwvc3Bhbj48bzpwPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0 bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImNvbG9yOiNDRjIzRkYi PiZuYnNwOyZuYnNwOyBBbiBlbnRpdHkgdGhhdCByZWNlaXZlcyBTRVRzIHRocm91Z2ggc29tZSBk aXN0cmlidXRpb24gbWV0aG9kLCBhcyBkZWZpbmVkIGluIFJGQzg0MTcuPC9zcGFuPjxvOnA+PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDph dXRvO21hcmdpbi1ib3R0b206MTIuMHB0Ij48c3BhbiBzdHlsZT0iY29sb3I6I0NGMjNGRiI+Wy9y aWNoYW5uYV08L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8 L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZu YnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlllcywg SSB0aGluayBlaXRoZXIgYm90aCBvciBub25lLiBUaGUgZGVmaW5pdGlvbiBhYm92ZSBzb3VuZHMg Z29vZCB0byBtZS4gRG8gd2Ugd2FudCB0byBhZGQgJnF1b3Q7YXMgZGVmaW5lZCBpbiBSRkM4NDE3 JnF1b3Q7IHRvIHRoZSBkZWZpbml0aW9uIG9mIHRyYW5zbWl0dGVyIGFzIHdlbGw/PG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVy LWxlZnQ6c29saWQgI0NDQ0NDQyAxLjBwdDtwYWRkaW5nOjBpbiAwaW4gMGluIDYuMHB0O21hcmdp bi1sZWZ0OjQuOHB0O21hcmdpbi1yaWdodDowaW4iPg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bztt YXJnaW4tYm90dG9tOjEyLjBwdCI+LSBTZWN0aW9uIDIsIGxpc3Qgb2YgdmFsaWRhdGlvbnM6IHNo b3VsZCB3ZSBhZGQgdGhhdCB0aGUgUmVjaXBpZW50IHNob3VsZCBhbHNvIHZhbGlkYXRlIHRoYXQg aXQgaXMgd2lsbGluZyB0byByZWNlaXZlIGV2ZW50cyBmcm9tIHRoZSBnaXZlbiB0cmFuc21pdHRl cj8gSW4gb3RoZXIgd29yZHMsIHRoZSB0cmFuc21pdHRlci9pc3N1ZXINCiBtdXN0IGJlIHdoaXRl bGlzdGVkLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1t YXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHls ZT0iY29sb3I6I0NGMjNGRiI+W3JpY2hhbm5hXTwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2lu LWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImNvbG9yOiNDRjIzRkYiPkFncmVlZC48L3Nw YW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdp bi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJj b2xvcjojQ0YyM0ZGIj5bL3JpY2hhbm5hXTwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttYXJnaW4tYm90dG9t OjEyLjBwdCI+PGJyPg0KLSBTZWN0aW9uIDIsIGxhc3QgcGFyYWdyYXBoOiB0aGVyZSBpcyBhbHNv IHRoZSBjYXNlIHdoZW4gbm8gcmVzcG9uc2UgYXQgYWxsIGlzIHJlY2VpdmVkIGZyb20gdGhlIFJl Y2lwaWVudCwgaW4gd2hpY2ggY2FzZSByZS10cmFuc21pdHRpbmcgc2hvdWxkIGJlIGFuIG9wdGlv bi48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2lu LXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImNv bG9yOiNDRjIzRkYiPltyaWNoYW5uYV08L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0 b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJjb2xvcjojQ0YyM0ZGIj5BZ3JlZWQuPC9zcGFuPjxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9w LWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iY29sb3I6 I0NGMjNGRiI+Wy9yaWNoYW5uYV08L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20t YWx0OmF1dG8iPjxicj4NCi0gRmlndXJlIDE6IHRoZXJlIGlzIG5vIHNpZ25hdHVyZS4gU2hvdWxk IHdlIGFkZCBhIHNpZ25hdHVyZSBzbyB0aGUgZXhhbXBsZSBpcyBtb3JlIHJlYWxpc3RpYz88bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7 PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10 b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJjb2xv cjojQ0YyM0ZGIj5bcmljaGFubmFdPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9t LWFsdDphdXRvIj48c3BhbiBzdHlsZT0iY29sb3I6I0NGMjNGRiI+WWVzLCBvdXIgZXhhbXBsZXMg c2hvdWxkIGRlbW9uc3RyYXRlIGJlc3QgcHJhY3RpY2VzLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28t bWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImNvbG9yOiNDRjIzRkYiPlsvcmlj aGFubmFdPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJz cDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+ LSBTZWN0aW9uIDIuMzogb25seSA0MDAgaXMgbWVudGlvbmVkIGFzIHBvc3NpYmxlIHN0YXR1cyBj b2RlLiBXaGF0IGFib3V0IDQwMSwgNDAzIG9yIDQyOT8gRm9yIGV4YW1wbGUsIDQwMyBpcyB0aGUg YXBwcm9wcmlhdGUgc3RhdHVzIGNvZGUgaWYgdGhlIFNFVCBpcyBwZXJmZWN0bHkgdmFsaWQgYnV0 IHRoZSBSZWNpcGllbnQNCiBpcyBub3Qgd2lsbGluZyB0byBhY2NlcHQgZXZlbnRzIGZyb20gdGhl IGdpdmVuIHRyYW5zbWl0dGVyL2lzc3Vlci48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28t bWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0 b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJjb2xvcjojQ0YyM0ZGIj5bcmljaGFubmFdPC9zcGFu PjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4t dG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iY29s b3I6I0NGMjNGRiI+VGhlIGNvbnNlbnN1cyBhdCBJRVRGIDEwMSB3YXMgdG8gcmV0dXJuIGV2ZXJ5 dGhpbmcgYXMgNDAwLCBhbmQgbGVhdmUgSFRUUCBzdGF0dXMgY29kZXMgdG8gSFRUUC48L3NwYW4+ PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10 b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJjb2xv cjojQ0YyM0ZGIj5bL3JpY2hhbm5hXTwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9k aXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+SSBzZWUuIFRoZSA0MDMgY2FzZSBpcyBpbXBvcnRhbnQgSU1PLCB0aGUgZmFjdCB0 aGF0IHRoZSBTRVQgaXMgcGVyZmVjdGx5IHZhbGlkIGJ1dCB0aGUgcmVjaXBpZW50IGlzIG5vdCB3 aWxsaW5nIHRvIGFjY2VwdCBmcm9tIHRoaXMgdHJhbnNtaXR0ZXIuIElzIHRoZSAmcXVvdDtqd3RJ c3MmcXVvdDsgZXJyb3IgY29kZSBtZWFudCB0byBjb3ZlciB0aGlzIGNhc2U/IEkgZ3Vlc3MgdGhl cmUgaXMgbm90aGluZyB0byBjaGFuZ2UgaGVyZQ0KIHRoZW4uPG86cD48L286cD48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkICND Q0NDQ0MgMS4wcHQ7cGFkZGluZzowaW4gMGluIDBpbiA2LjBwdDttYXJnaW4tbGVmdDo0LjhwdDtt YXJnaW4tcmlnaHQ6MGluIj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0 b20tYWx0OmF1dG8iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4t Ym90dG9tLWFsdDphdXRvIj5IYXBweSB0byBzZW5kIGEgcHVsbCByZXF1ZXN0IGZvciB0aGVzZSBj aGFuZ2VzIChpZiB3ZSBhZ3JlZSBvbiB0aGVtKS4gTGV0IG1lIGtub3cuPG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10 b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPiZuYnNwOzxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRv O21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iY29sb3I6I0NGMjNGRiI+ W3JpY2hhbm5hXTwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+ PHNwYW4gc3R5bGU9ImNvbG9yOiNDRjIzRkYiPlllcywgcGxlYXNlISA6RDwvc3Bhbj48bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6 YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImNvbG9yOiNDRjIz RkYiPlsvcmljaGFubmFdPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwv ZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij5TaG91bGQgSSBjbG9uZS9mb3JrIG9mZiA8YSBocmVmPSJodHRwczovL2dpdGh1Yi5jb20vcmlj aGFubmEvSWRlbnRpdHktRXZlbnRzIj4NCmh0dHBzOi8vZ2l0aHViLmNvbS9yaWNoYW5uYS9JZGVu dGl0eS1FdmVudHM8L2E+Jm5ic3A7KHlvdSBzZW50IG1lIGluc3RydWN0aW9ucyBhdCBzb21lIHBv aW50KT88bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0iYm9yZGVy Om5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgI0NDQ0NDQyAxLjBwdDtwYWRkaW5nOjBpbiAwaW4gMGlu IDYuMHB0O21hcmdpbi1sZWZ0OjQuOHB0O21hcmdpbi1yaWdodDowaW4iPg0KPGRpdj4NCjxkaXY+ DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRv cC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdp bi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPkJlc3QsPG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1h cmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPk1hcml1czxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1z by1tYXJnaW4tdG9wLWFsdDphdXRvO21hcmdpbi1ib3R0b206MTIuMHB0Ij48bzpwPiZuYnNwOzwv bzpwPjwvcD4NCjxwcmUgc3R5bGU9Im1hcmdpbi1ib3R0b206Ny41cHQiPjxzcGFuIHN0eWxlPSJm b250LWZhbWlseTpNZW5sbztjb2xvcjojMzMzMzMzIj5PbiAxOC8xMS8yMDE4IDEwOjA1LCBZYXJv biBTaGVmZmVyIHdyb3RlOjwvc3Bhbj48bzpwPjwvbzpwPjwvcHJlPg0KPHByZSBzdHlsZT0ibWFy Z2luLWJvdHRvbTo3LjVwdCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5Ok1lbmxvO2NvbG9yOiMz MzMzMzMiPiZndDsgRGVhciBTZWNFdmVudCBwYXJ0aWNpcGFudHMsPC9zcGFuPjxvOnA+PC9vOnA+ PC9wcmU+DQo8cHJlIHN0eWxlPSJtYXJnaW4tYm90dG9tOjcuNXB0Ij48c3BhbiBzdHlsZT0iZm9u dC1mYW1pbHk6TWVubG87Y29sb3I6IzMzMzMzMyI+Jmd0OyA8L3NwYW4+PG86cD48L286cD48L3By ZT4NCjxwcmUgc3R5bGU9Im1hcmdpbi1ib3R0b206Ny41cHQiPjxzcGFuIHN0eWxlPSJmb250LWZh bWlseTpNZW5sbztjb2xvcjojMzMzMzMzIj4mZ3Q7IDwvc3Bhbj48bzpwPjwvbzpwPjwvcHJlPg0K PHByZSBzdHlsZT0ibWFyZ2luLWJvdHRvbTo3LjVwdCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5 Ok1lbmxvO2NvbG9yOiMzMzMzMzMiPiZndDsgVGhpcyBpcyB0byBzdGFydCBhIDItd2VlayB3b3Jr aW5nIGdyb3VwIGxhc3QgY2FsbCBvbiA8L3NwYW4+PG86cD48L286cD48L3ByZT4NCjxwcmUgc3R5 bGU9Im1hcmdpbi1ib3R0b206Ny41cHQiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpNZW5sbztj b2xvcjojMzMzMzMzIj4mZ3Q7IGRyYWZ0LWlldGYtc2VjZXZlbnQtaHR0cC1wdXNoLTAzIDwvc3Bh bj48bzpwPjwvbzpwPjwvcHJlPg0KPHByZSBzdHlsZT0ibWFyZ2luLWJvdHRvbTo3LjVwdCI+PHNw YW4gc3R5bGU9ImZvbnQtZmFtaWx5Ok1lbmxvO2NvbG9yOiMzMzMzMzMiPiZndDsgJmx0OzxhIGhy ZWY9Imh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LWlldGYtc2VjZXZlbnQt aHR0cC1wdXNoLyUzRSwiIHRhcmdldD0iX2JsYW5rIj48c3BhbiBzdHlsZT0iY29sb3I6IzMzN0FC NyI+aHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJhZnQtaWV0Zi1zZWNldmVudC1o dHRwLXB1c2gvJmd0Ozwvc3Bhbj48L2E+OywgdW50aWwgPC9zcGFuPjxvOnA+PC9vOnA+PC9wcmU+ DQo8cHJlIHN0eWxlPSJtYXJnaW4tYm90dG9tOjcuNXB0Ij48c3BhbiBzdHlsZT0iZm9udC1mYW1p bHk6TWVubG87Y29sb3I6IzMzMzMzMyI+Jmd0OyBEZWMuIDIuIFBsZWFzZSBzZW5kIGFueSBjb21t ZW50cyB0byB0aGUgbGlzdC4gSW4gYWRkaXRpb24sIGlmIHlvdSBoYXZlIDwvc3Bhbj48bzpwPjwv bzpwPjwvcHJlPg0KPHByZSBzdHlsZT0ibWFyZ2luLWJvdHRvbTo3LjVwdCI+PHNwYW4gc3R5bGU9 ImZvbnQtZmFtaWx5Ok1lbmxvO2NvbG9yOiMzMzMzMzMiPiZndDsgbm8gY29tbWVudHMgYnV0IHN1 cHBvcnQgcHVibGljYXRpb24gb2YgdGhpcyBkb2N1bWVudCBhcy1pcywgcGxlYXNlIG1ha2UgPC9z cGFuPjxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlIHN0eWxlPSJtYXJnaW4tYm90dG9tOjcuNXB0Ij48 c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6TWVubG87Y29sb3I6IzMzMzMzMyI+Jmd0OyB5b3VyIHZv aWNlIGhlYXJkLjwvc3Bhbj48bzpwPjwvbzpwPjwvcHJlPg0KPHByZSBzdHlsZT0ibWFyZ2luLWJv dHRvbTo3LjVwdCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5Ok1lbmxvO2NvbG9yOiMzMzMzMzMi PiZndDsgPC9zcGFuPjxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlIHN0eWxlPSJtYXJnaW4tYm90dG9t OjcuNXB0Ij48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6TWVubG87Y29sb3I6IzMzMzMzMyI+Jmd0 OyA8L3NwYW4+PG86cD48L286cD48L3ByZT4NCjxwcmUgc3R5bGU9Im1hcmdpbi1ib3R0b206Ny41 cHQiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpNZW5sbztjb2xvcjojMzMzMzMzIj4mZ3Q7IFRo YW5rcyw8L3NwYW4+PG86cD48L286cD48L3ByZT4NCjxwcmUgc3R5bGU9Im1hcmdpbi1ib3R0b206 Ny41cHQiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpNZW5sbztjb2xvcjojMzMzMzMzIj4mZ3Q7 IDwvc3Bhbj48bzpwPjwvbzpwPjwvcHJlPg0KPHByZSBzdHlsZT0ibWFyZ2luLWJvdHRvbTo3LjVw dCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5Ok1lbmxvO2NvbG9yOiMzMzMzMzMiPiZndDsgPC9z cGFuPjxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlIHN0eWxlPSJtYXJnaW4tYm90dG9tOjcuNXB0Ij48 c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6TWVubG87Y29sb3I6IzMzMzMzMyI+Jmd0OyZuYnNwOyAm bmJzcDsmbmJzcDsmbmJzcDsgRGljayBhbmQgWWFyb248L3NwYW4+PG86cD48L286cD48L3ByZT4N CjxwcmUgc3R5bGU9Im1hcmdpbi1ib3R0b206Ny41cHQiPjxzcGFuIHN0eWxlPSJmb250LWZhbWls eTpNZW5sbztjb2xvcjojMzMzMzMzIj4mZ3Q7IDwvc3Bhbj48bzpwPjwvbzpwPjwvcHJlPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJn aW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+ DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0K PC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_49DF84C85C84484286CA542B05607D57amazoncom_-- From nobody Thu Dec 6 16:08:17 2018 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BA10C131230 for ; Thu, 6 Dec 2018 16:08:15 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -11.269 X-Spam-Level: X-Spam-Status: No, score=-11.269 tagged_above=-999 required=5 tests=[AC_DIV_BONANZA=0.001, BAYES_00=-1.9, DKIMWL_WL_HIGH=-1.46, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=1.989, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_SPF_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=amazon.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Est7GVL7xSQJ for ; Thu, 6 Dec 2018 16:08:10 -0800 (PST) Received: from smtp-fw-6002.amazon.com (smtp-fw-6002.amazon.com [52.95.49.90]) (using TLSv1.2 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6E920131148 for ; Thu, 6 Dec 2018 16:08:09 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=amazon.com; i=@amazon.com; q=dns/txt; s=amazon201209; t=1544141289; x=1575677289; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=7qUaRpBvLs/1Ni4ATgkDWxLHQbBlWkzA1oFj4xbOmao=; b=QG8aMWwNbUdw3hlSYMwNGXX2TDTGQkFhLeohXK3etQT+8iXg/Ivko5/J RLTBSlqP23jjOU2KrKXIzVc9AwPWmFaG79uyZTfnjsC9wVDkhyPgm4uy1 MZSKz7Q/W5hSH3jMn8CYsgMgrhDUKHu4T4vry5wD93p50VnHqU1FjZB2X U=; X-IronPort-AV: E=Sophos;i="5.56,253,1539648000"; d="scan'208,217";a="376586974" Received: from iad6-co-svc-p1-lb1-vlan3.amazon.com (HELO email-inbound-relay-1a-e34f1ddc.us-east-1.amazon.com) ([10.124.125.6]) by smtp-border-fw-out-6002.iad6.amazon.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 07 Dec 2018 00:08:07 +0000 Received: from EX13MTAUWC001.ant.amazon.com (iad55-ws-svc-p15-lb9-vlan3.iad.amazon.com [10.40.159.166]) by email-inbound-relay-1a-e34f1ddc.us-east-1.amazon.com (8.14.7/8.14.7) with ESMTP id wB7083kB103630 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Fri, 7 Dec 2018 00:08:06 GMT Received: from EX13D11UWC002.ant.amazon.com (10.43.162.174) by EX13MTAUWC001.ant.amazon.com (10.43.162.135) with Microsoft SMTP Server (TLS) id 15.0.1367.3; Fri, 7 Dec 2018 00:08:05 +0000 Received: from EX13D11UWC004.ant.amazon.com (10.43.162.101) by EX13D11UWC002.ant.amazon.com (10.43.162.174) with Microsoft SMTP Server (TLS) id 15.0.1367.3; Fri, 7 Dec 2018 00:08:04 +0000 Received: from EX13D11UWC004.ant.amazon.com ([10.43.162.101]) by EX13D11UWC004.ant.amazon.com ([10.43.162.101]) with mapi id 15.00.1367.000; Fri, 7 Dec 2018 00:08:04 +0000 From: "Richard Backman, Annabelle" To: Adam Dawes , Dick Hardt CC: Yaron Sheffer , ID Events Mailing List , Phil Hunt Thread-Topic: [Id-event] stab at describing email canonicalization dragons Thread-Index: AQHUd0sQx5xWtq+VFEuyV2nayZM/EaVFrJkAgAAAeQCAAL8NAIAALu2AgAEwmgCAAAqjAIAAS1mAgAAhQoCAKcpCAA== Date: Fri, 7 Dec 2018 00:08:04 +0000 Message-ID: References: <8e117807-689e-166b-4c1c-9a4a0827ce6d@gmail.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.10.0.180812 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.43.161.253] Content-Type: multipart/alternative; boundary="_000_F660459B46DC4FC2A0DB18625F4D9874amazoncom_" MIME-Version: 1.0 Precedence: Bulk Archived-At: Subject: Re: [Id-event] stab at describing email canonicalization dragons X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.29 List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 07 Dec 2018 00:08:16 -0000 --_000_F660459B46DC4FC2A0DB18625F4D9874amazoncom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 KHJlc3VycmVjdGluZyB0aGlzIHRocmVhZOKApikNCg0KVGhlcmUgaXMgb25lIG90aGVyIGFuZ2xl IHRoYXQgSSB0aGluayBpc27igJl0IHF1aXRlIGNhcHR1cmVkIGluIHRoZSB0ZXh0OiBTRVQgUmVj aXBpZW50cyBtYXkgd2FudCB0byBhcHBseSBkaWZmZXJlbnQgY2Fub25pY2FsaXphdGlvbiBydWxl cyB3aGVuIHJlc29sdmluZyBhbiBFbWFpbCBTdWJqZWN0IElkZW50aWZpZXIgdG8gb25lIG9yIG1v cmUgYWNjb3VudHMgaW4gdGhlaXIgc3lzdGVtIHRoYW4gdGhleSBkbyB3aGVuIHJlc29sdmluZyBh IHVzZXItc3VwcGxpZWQgZW1haWwgYWRkcmVzcyB0byBhIHNwZWNpZmljIGFjY291bnQuIEZvciBl eGFtcGxlLCBhIHNlcnZpY2UgcHJvdmlkZXIgbWlnaHQgY29uc2lkZXIg4oCcZXhhbXBsZStmb29A Z21haWwuY29t4oCdIGFuZCDigJxleGFtcGxlK2JhckBnbWFpbC5jb23igJ0gdG8gYmUgZGlmZmVy ZW50LCB1bnJlbGF0ZWQgZW1haWwgYWRkcmVzc2VzIGVhY2ggaWRlbnRpZnlpbmcgYSBkaWZmZXJl bnQsIHVucmVsYXRlZCBsb2NhbCBhY2NvdW50LiBIb3dldmVyLCB3aGVuIHByb2Nlc3NpbmcgYSBT RVQgZnJvbSBHb29nbGUsIHRoYXQgc2VydmljZSBwcm92aWRlciBtaWdodCB3YW50IHRvIG1hcCBh bnkgb2Yg4oCcZXhhbXBsZUBnbWFpbC5jb23igJ0sIOKAnGV4YW1wbGUrZm9vQGdtYWlsLmNvbeKA nSwgYW5kIOKAnGV4YW1wbGUrYmFyQGdtYWlsLmNvbeKAnSBvbnRvIEJPVEggbG9jYWwgYWNjb3Vu dHMsIHNpbmNlIHRoZXkgdW5kZXJzdGFuZCB0aGF0IHRoZXkgYXJlIGFsbCBqdXN0IGFsaWFzZXMg Zm9yIHRoZSBzYW1lIGFjY291bnQgb24gR29vZ2xl4oCZcyBzaWRlLg0KDQotLQ0KQW5uYWJlbGxl IFJpY2hhcmQgQmFja21hbg0KQVdTIElkZW50aXR5DQoNCg0KRnJvbTogSWQtZXZlbnQgPGlkLWV2 ZW50LWJvdW5jZXNAaWV0Zi5vcmc+IG9uIGJlaGFsZiBvZiBBZGFtIERhd2VzIDxhZGF3ZXM9NDBn b29nbGUuY29tQGRtYXJjLmlldGYub3JnPg0KRGF0ZTogRnJpZGF5LCBOb3ZlbWJlciA5LCAyMDE4 IGF0IDU6NTggUE0NClRvOiBEaWNrIEhhcmR0IDxkaWNrLmhhcmR0QGdtYWlsLmNvbT4NCkNjOiBZ YXJvbiBTaGVmZmVyIDx5YXJvbmYuaWV0ZkBnbWFpbC5jb20+LCBJRCBFdmVudHMgTWFpbGluZyBM aXN0IDxpZC1ldmVudEBpZXRmLm9yZz4sIFBoaWwgSHVudCA8cGhpbC5odW50QG9yYWNsZS5jb20+ DQpTdWJqZWN0OiBSZTogW0lkLWV2ZW50XSBzdGFiIGF0IGRlc2NyaWJpbmcgZW1haWwgY2Fub25p Y2FsaXphdGlvbiBkcmFnb25zDQoNCg0KT24gRnJpLCBOb3YgOSwgMjAxOCBhdCAzOjU4IFBNIERp Y2sgSGFyZHQgPGRpY2suaGFyZHRAZ21haWwuY29tPG1haWx0bzpkaWNrLmhhcmR0QGdtYWlsLmNv bT4+IHdyb3RlOg0KUGhpbDogUkZDNTMyMTxodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvcmZj NTMyMT4gZGVzY3JpYmVzIGEgdmFsaWQgZW1haWwgYWRkcmVzcywgaXQgaXMgbm90IGNhbm9uaWNh bC4NCg0KQWRhbTogaW4gbXkgZXhwZXJpZW5jZSwgd2Ugc3RyaXAgdGhlIGRvdHMgaW4gZ21haWwg YWRkcmVzc2VzLCBzaW5jZSB3ZSBoYXZlIGxlYXJuZWQgdGhhdCBpcyB3aGF0IEdvb2dsZSBkb2Vz LiA6KQ0KQXMgdG8gdGhlICcrJyBmdW5jdGlvbmFsaXR5LCBzb21lIHBhcnRpZXMgbWF5IHVzZSB0 aGF0IHRvIGtub3cgaXQgaXMgdGhlIHNhbWUgc3ViamVjdCBhdCB0aGUgaG9zdC4gRm9yIGV4YW1w bGUsIGlmIG1lcmNoYW50Zm9vIHN1YnNjcmliZWQgdG8gcmVjZWl2ZSBldmVudHMgZm9yIHN1Ympl Y3QgYWxpY2VzbWl0aCttZXJjaGFudGZvb0BtYWlscHJvdmlkZXIuY29tPG1haWx0bzphbGljZS5z bWl0aCUyQm1lcmNoYW50Zm9vQG1haWxwcm92aWRlci5jb20+IGZyb20gbWFpbHByb3ZpZGVyLmNv bTxodHRwOi8vbWFpbHByb3ZpZGVyLmNvbT4sIHRoZW4gbWFpbHByb3ZpZGVyLmNvbTxodHRwOi8v bWFpbHByb3ZpZGVyLmNvbT4gd291bGQgY2Fub25pY2FsaXplIHRoZSBzdWJqZWN0IHRvICAgYWxp Y2VzbWl0aEBtYWlscHJvdmlkZXIuY29tPG1haWx0bzphbGljZS5zbWl0aCUyQm1lcmNoYW50Zm9v QG1haWxwcm92aWRlci5jb20+Lg0KDQpXaGlsZSBtZXJjaGFudGZvbyB3b3VsZCB1c2UgIGFsaWNl c21pdGgrbWVyY2hhbnRmb29AbWFpbHByb3ZpZGVyLmNvbTxtYWlsdG86YWxpY2Uuc21pdGglMkJt ZXJjaGFudGZvb0BtYWlscHJvdmlkZXIuY29tPiBmb3Igc2VuZGluZyBlbWFpbCwgaXQgd291bGQg bGlrZWx5IGJlIHVzZWZ1bCBmb3IgbWVyY2hhbnRmb28gdG8ga25vdyB0aGF0ICBhbGljZXNtaXRo QG1haWxwcm92aWRlci5jb208bWFpbHRvOmFsaWNlLnNtaXRoJTJCbWVyY2hhbnRmb29AbWFpbHBy b3ZpZGVyLmNvbT4gYW5kICAgYWxpY2VzbWl0aCttZXJjaGFudGZvb0BtYWlscHJvdmlkZXIuY29t PG1haWx0bzphbGljZS5zbWl0aCUyQm1lcmNoYW50Zm9vQG1haWxwcm92aWRlci5jb20+IGFyZSB0 aGUgc2FtZSBzdWJqZWN0IGZyb20gYSBTRVQgcG9pbnQgb2Ygdmlldy4gRm9yIGV4YW1wbGUsIGlm IG1lcmNoYW50Zm9vIGlzIGF0dGVtcHRpbmcgdG8gZmluZCBtdXR1YWwgc3ViamVjdHMgd2l0aCBh IG5vbi1lbWFpbCBwcm92aWRlciwgc29jaWFsZm9vLmNvbTxodHRwOi8vc29jaWFsZm9vLmNvbT4s IHRoZW4gdGhleSB3b3VsZCBpZGVhbGx5IGJvdGggdXNlICBhbGljZXNtaXRoQG1haWxwcm92aWRl ci5jb208bWFpbHRvOmFsaWNlLnNtaXRoJTJCbWVyY2hhbnRmb29AbWFpbHByb3ZpZGVyLmNvbT4g ZXZlbiB0aG91Z2ggQWxpY2UgaGFkIHByb3ZpZGVkICBhbGljZXNtaXRoK21lcmNoYW50Zm9vQG1h aWxwcm92aWRlci5jb208bWFpbHRvOmFsaWNlLnNtaXRoJTJCbWVyY2hhbnRmb29AbWFpbHByb3Zp ZGVyLmNvbT4gdG8gbWVyY2hhbnRmb29yIGFuZCAgYWxpY2VzbWl0aCtzb2NpYWxmb29AbWFpbHBy b3ZpZGVyLmNvbTxtYWlsdG86YWxpY2Uuc21pdGglMkJtZXJjaGFudGZvb0BtYWlscHJvdmlkZXIu Y29tPiB0byBzb2NpYWxmb28uDQoNCkV4YWN0bHkgcmlnaHQNCg0KSW4gdGhlIFdHIG1lZXRpbmcg dGhlcmUgd2FzIGEgZGlzY3Vzc2lvbiBhYm91dCBzdGFuZGFyZGl6aW5nIGNhbm9uaWNhbGl6YXRp b24sIGFuZCB0aGUgY29uc2Vuc3VzIGluIHRoZSBtZWV0aW5nIHdhcyB0aGF0IHdhcyBvdXQgb2Yg c2NvcGUsIGJ1dCB0aGF0IGl0IHdhcyBpbXBvcnRhbnQgdG8gY2FsbCBvdXQgdGhlIGlzc3VlLg0K DQorMQ0KSXQgaXMgdXNlZnVsIHRvIGFsZXJ0IGltcGxlbWVudGVycyB0aGF0IHRoZXNlIGlzc3Vl cyBleGlzdC4gQXMgZm9yIHNvbHZpbmcgdGhlIGRlZXBlciBwcm9ibGVtLCBJIHdhcyBjdXJpb3Vz IGFib3V0IHdoZXRoZXIgdGhhdCB3YXMgYmVpbmcgY29udGVtcGxhdGVkLiBCdXQgaXQgc2VlbXMg dGhhdCBpcyBvdXQgb2Ygc2NvcGUuIE5vdCBzdXJwcmlzZWQuIEFsd2F5cyBtb3JlIHRoaW5ncyB0 byBkbyBpbiB0aGUgZnV0dXJlIQ0KDQoNCg0KDQoNCk9uIFNhdCwgTm92IDEwLCAyMDE4IGF0IDI6 MjggQU0gUGhpbCBIdW50IDxwaGlsLmh1bnRAb3JhY2xlLmNvbTxtYWlsdG86cGhpbC5odW50QG9y YWNsZS5jb20+PiB3cm90ZToNCldoeSBpcyBSRkM1MzIxPGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcv aHRtbC9yZmM1MzIxPiBub3Qgc3VmZmljaWVudCB0byBkZWZpbmUgY2Fub25pY2FsaXphdGlvbiBm b3IgZW1haWwgYWRkcmVzc2VzPw0KDQpQaGlsDQoNCk9yYWNsZSBDb3Jwb3JhdGlvbiwgQ2xvdWQg U2VjdXJpdHkgYW5kIElkZW50aXR5IEFyY2hpdGVjdA0KQGluZGVwZW5kZW50aWQNCnd3dy5pbmRl cGVuZGVudGlkLmNvbTxodHRwOi8vd3d3LmluZGVwZW5kZW50aWQuY29tPg0KcGhpbC5odW50QG9y YWNsZS5jb208bWFpbHRvOnBoaWwuaHVudEBvcmFjbGUuY29tPg0KDQoNCk9uIE5vdiA5LCAyMDE4 LCBhdCAxMDo1MCBBTSwgQWRhbSBEYXdlcyA8YWRhd2VzPTQwZ29vZ2xlLmNvbUBkbWFyYy5pZXRm Lm9yZzxtYWlsdG86YWRhd2VzPTQwZ29vZ2xlLmNvbUBkbWFyYy5pZXRmLm9yZz4+IHdyb3RlOg0K DQpJIHRoaW5rIGl0IGRvZXMgbWFrZSBzZW5zZSB0byBkbyB0aGUgc2FtZSBjYW5vbmljYWxpemF0 aW9uIGZvciBTRVRzLiBCdXQgSSBzdXNwZWN0IHRoYXQgbW9zdCBjYW5vbmljYWxpemF0aW9uIHRo YXQgYXBwcyBkbyBpcyBwdXJlbHkgZm9jdXNlZCBvbiBwcm9wZXIgbG93ZXIgY2FzaW5nLiBJIHdv dWxkIGJlIG1vcmUgc3VycHJpc2VkIGlmIGFwcHMgY2Fub25pY2FsaXplIG9uIHNwZWNpYWwgY2hh cmFjdGVycyBsaWtlIC4sKyBldGMuIEkgZG9uJ3Qga25vdyBhcyBpZiB0aGVyZSBhcmUgYW55IGd1 aWRhbmNlIGluIHRoZSBtYWlsIFJGQ3Mgb24gaG93IHRvIHRyZWF0IHRoZXNlIHNvIEkgdGhpbmsg dGhlcmUgYXJlIGluY29uc2lzdGVudCB0cmVhdG1lbnRzIGZyb20gbWFpbCBwcm92aWRlcnMuIFNv bWUgYXBwcyBtYXkgdW5kZXJzdGFuZCB0aGUgY29udmVudGlvbnMgb2YgbGFyZ2VyIG1haWwgcHJv dmlkZXJzIGJ1dCBJIHN1c3BlY3QgeW91J3JlIHN0aWxsIGdvaW5nIHRvIGhhdmUgZGlzY3JlcGFu Y2llcyB0aGF0IGFyZSBoYXJkIHRvIGlyb24gb3V0IHdpdGhvdXQgZnVsbHkgdW5kZXJzdGFuZGlu ZyB0aGUgbWFpbCBwcm92aWRlcidzIGNhbm9uaWNhbGl6YXRpb24gc2NoZW1lLiBBbmQgc29tZSB1 c2VycyBleHBlY3QgdGhhdCB0aGVpciBtYWlsIHdpbGwgbm90IGJlIGNhbm9uY2lhbGl6ZWQuIEZv ciBleGFtcGxlLCBHbWFpbCBwcm92aWRlcyB0aGUgKyBjaGFyYWN0ZXIgc28gdGhhdCBhIHVzZXIg Y2FuIGdpdmUgdW5pcXVlIGFkZHJlc3NlcyB0byBlYWNoIHJlY2lwaWVudCBhbGljZS5zbWl0aCtt ZXJjaGFudGZvb0BtYWlscHJvdmlkZXIuY29tPG1haWx0bzphbGljZS5zbWl0aCUyQm1lcmNoYW50 Zm9vQG1haWxwcm92aWRlci5jb20+LiBJZiBtZXJjaGFudGZvbyBzdHJpcHBlZCB0aGUgKyBpbiBj YW5vbmljYWxpemluZywgdGhlbiBBbGljZSB3b3VsZG4ndCBiZSBhYmxlIHRvIG1hbmFnZSBtYWls IGZyb20gbWVyY2hhbnRmb28gYXMgZWFzaWx5Lg0KDQpPbiBUaHUsIE5vdiA4LCAyMDE4IGF0IDQ6 NDAgUE0gRGljayBIYXJkdCA8ZGljay5oYXJkdEBnbWFpbC5jb208bWFpbHRvOmRpY2suaGFyZHRA Z21haWwuY29tPj4gd3JvdGU6DQpIZXkgQWRhbQ0KDQpUaGUgcHJvYmxlbSB5b3UgYXJlIGRlc2Ny aWJpbmcgaXMgd2hhdCBJIHdhcyBhdHRlbXB0aW5nIHRvIGNhcHR1cmUuIFNpbmNlIEFsaWNlIG1h aWxwcm92aWRlci5jb208aHR0cHM6Ly91cmxkZWZlbnNlLnByb29mcG9pbnQuY29tL3YyL3VybD91 PWh0dHAtM0FfX21haWxwcm92aWRlci5jb20mZD1Ed01GYVEmYz1Sb1AxWXVtQ1hDZ2FXSHZsWllS OFBaaDhCdjdxSXJNVUI2NWVhcElfSm5FJnI9bmE1RlZ6QlRXbWFucVdOeTREcGN0eVhQcHVZcVBr QUkxYUxjTE40S1pOQSZtPTNSOEd6ejRjNmpHYTA5WkhrbzZFa19VdFhERzhveVFQd3lJUHVuYmlT QVEmcz1GOVhjVnhacnN0TElmMTN6Und3bGh0UjN0RTZiRF9RQ1ZZY2tfQVRpUVV3JmU9PiByZW1v dmVzIGRvdHMsIG1lcmNoYW50Zm9vLmNvbTxodHRwczovL3VybGRlZmVuc2UucHJvb2Zwb2ludC5j b20vdjIvdXJsP3U9aHR0cC0zQV9fbWVyY2hhbnRmb28uY29tJmQ9RHdNRmFRJmM9Um9QMVl1bUNY Q2dhV0h2bFpZUjhQWmg4QnY3cUlyTVVCNjVlYXBJX0puRSZyPW5hNUZWekJUV21hbnFXTnk0RHBj dHlYUHB1WXFQa0FJMWFMY0xONEtaTkEmbT0zUjhHeno0YzZqR2EwOVpIa282RWtfVXRYREc4b3lR UHd5SVB1bmJpU0FRJnM9cWFoTmhtMTZVRFJSU19VVXBFRDAxYTRoaXRtcUJvb1F6ZkEzSkQydnk2 MCZlPT5saWtlbHkgaGFzIGFscmVhZHkgZmlndXJlZCBvdXQgbWFpbHByb3Zlci5jb208aHR0cHM6 Ly91cmxkZWZlbnNlLnByb29mcG9pbnQuY29tL3YyL3VybD91PWh0dHAtM0FfX21haWxwcm92ZXIu Y29tJmQ9RHdNRmFRJmM9Um9QMVl1bUNYQ2dhV0h2bFpZUjhQWmg4QnY3cUlyTVVCNjVlYXBJX0pu RSZyPW5hNUZWekJUV21hbnFXTnk0RHBjdHlYUHB1WXFQa0FJMWFMY0xONEtaTkEmbT0zUjhHeno0 YzZqR2EwOVpIa282RWtfVXRYREc4b3lRUHd5SVB1bmJpU0FRJnM9bVRHWVNseFVfcGlqcnVqVER6 eF9xNGoxeFRwYXlqUHoxeFA1eWtvcW9VRSZlPT4ncyBjYW5vbmljYWxpemF0aW9uIHNpbmNlIEFs aWNlIGNhbiBlbnRlciBhbGljZS5zbWl0aEBtYWlscHJvdmlkZXIuY29tPG1haWx0bzphbGljZS5z bWl0aEBtYWlscHJvdmlkZXIuY29tPiBvciBhbGljZXNtaXRoQG1haWxwcm92aWRlci5jb208bWFp bHRvOmFsaWNlLnNtaXRoQG1haWxwcm92aWRlci5jb20+IGF0IGFueSBzaXRlIGFuZCByZWNlaXZl IGVtYWlsLiBUaGUgc3VnZ2VzdGVkIHRleHQgc2F5cyBtZXJjaGFudGZvby5jb208aHR0cHM6Ly91 cmxkZWZlbnNlLnByb29mcG9pbnQuY29tL3YyL3VybD91PWh0dHAtM0FfX21lcmNoYW50Zm9vLmNv bSZkPUR3TUZhUSZjPVJvUDFZdW1DWENnYVdIdmxaWVI4UFpoOEJ2N3FJck1VQjY1ZWFwSV9KbkUm cj1uYTVGVnpCVFdtYW5xV055NERwY3R5WFBwdVlxUGtBSTFhTGNMTjRLWk5BJm09M1I4R3p6NGM2 akdhMDlaSGtvNkVrX1V0WERHOG95UVB3eUlQdW5iaVNBUSZzPXFhaE5obTE2VURSUlNfVVVwRUQw MWE0aGl0bXFCb29RemZBM0pEMnZ5NjAmZT0+IFNIT1VMRCBkbyB0aGUgc2FtZSBjYW5vbmljYWxp emF0aW9uIGZvciBlbWFpbCBzdWJqZWN0IGlkZW50aWZpZXJzIHRoYXQgaXQgYWxyZWFkeSBkb2Vz IHdpdGggZW1haWxzIGVudGVyZWQgYnkgdGhlIHVzZXIuDQoNCkRvZXMgdGhhdCBtYWtlIHNlbnNl PyBTdWdnZXN0ZWQgY2hhbmdlcyB0byB0aGUgdGV4dD8NCg0KDQpPbiBGcmksIE5vdiA5LCAyMDE4 IGF0IDQ6NTIgQU0gQWRhbSBEYXdlcyA8YWRhd2VzQGdvb2dsZS5jb208bWFpbHRvOmFkYXdlc0Bn b29nbGUuY29tPj4gd3JvdGU6DQpJIHRoaW5rIHRoaXMgbWFrZXMgc2Vuc2UuIEhvd2V2ZXIsIEkg d2FudGVkIHRvIHBvaW50IG91dCB0aGF0IHRoZXJlJ3MgYSBoaWdoZXIgbGV2ZWwgcHJvYmxlbSBp biB0aGF0IHRoZSBUcmFuc21pdHRlciBpcyBwcm92aWRpbmcgaXQncyBjYW5vbmljYWxpemVkIGlk ZW50aWZpZXIgaW4gdGhlIFNFVCBhbmQgdGhpcyBtYXkgbm90IG1hcCB0byB0aGUgcmVjZWl2ZXIn cyBjYW5vbmljYWxpemVkIGlkZW50aWZpZXIuDQoNCkZvciBleGFtcGxlLCBBbGljZSBtYXkgaGF2 ZSByZWdpc3RlcmVkIGFsaWNlLnNtaXRoQG1haWxwcm92aWRlci5jb208bWFpbHRvOmFsaWNlLnNt aXRoQG1haWxwcm92aWRlci5jb20+IHdpdGggbWVyY2hhbnRmb28uY29tPGh0dHBzOi8vdXJsZGVm ZW5zZS5wcm9vZnBvaW50LmNvbS92Mi91cmw/dT1odHRwLTNBX19tZXJjaGFudGZvby5jb20mZD1E d01GYVEmYz1Sb1AxWXVtQ1hDZ2FXSHZsWllSOFBaaDhCdjdxSXJNVUI2NWVhcElfSm5FJnI9bmE1 RlZ6QlRXbWFucVdOeTREcGN0eVhQcHVZcVBrQUkxYUxjTE40S1pOQSZtPTNSOEd6ejRjNmpHYTA5 WkhrbzZFa19VdFhERzhveVFQd3lJUHVuYmlTQVEmcz1xYWhOaG0xNlVEUlJTX1VVcEVEMDFhNGhp dG1xQm9vUXpmQTNKRDJ2eTYwJmU9Pi4uIFdoZW4gbWFpbHByb3ZpZGVyLmNvbTxodHRwczovL3Vy bGRlZmVuc2UucHJvb2Zwb2ludC5jb20vdjIvdXJsP3U9aHR0cC0zQV9fbWFpbHByb3ZpZGVyLmNv bSZkPUR3TUZhUSZjPVJvUDFZdW1DWENnYVdIdmxaWVI4UFpoOEJ2N3FJck1VQjY1ZWFwSV9KbkUm cj1uYTVGVnpCVFdtYW5xV055NERwY3R5WFBwdVlxUGtBSTFhTGNMTjRLWk5BJm09M1I4R3p6NGM2 akdhMDlaSGtvNkVrX1V0WERHOG95UVB3eUlQdW5iaVNBUSZzPUY5WGNWeFpyc3RMSWYxM3pSd3ds aHRSM3RFNmJEX1FDVllja19BVGlRVXcmZT0+IHNlbmRzIGEgU0VUIHRvIG1lcmNoYW50Zm9vLmNv bTxodHRwczovL3VybGRlZmVuc2UucHJvb2Zwb2ludC5jb20vdjIvdXJsP3U9aHR0cC0zQV9fbWVy Y2hhbnRmb28uY29tJmQ9RHdNRmFRJmM9Um9QMVl1bUNYQ2dhV0h2bFpZUjhQWmg4QnY3cUlyTVVC NjVlYXBJX0puRSZyPW5hNUZWekJUV21hbnFXTnk0RHBjdHlYUHB1WXFQa0FJMWFMY0xONEtaTkEm bT0zUjhHeno0YzZqR2EwOVpIa282RWtfVXRYREc4b3lRUHd5SVB1bmJpU0FRJnM9cWFoTmhtMTZV RFJSU19VVXBFRDAxYTRoaXRtcUJvb1F6ZkEzSkQydnk2MCZlPT4sIGl0IGNvdWxkIGJlIGZvciBh bGljZXNtaXRoQG1haWxwcm92aWRlci5jb208bWFpbHRvOmFsaWNlc21pdGhAbWFpbHByb3ZpZGVy LmNvbT4NCg0KbWVyY2hhbnRmb28gY2FuJ3QgZWZmZWN0aXZlbHkgcmVtYXAgdGhlIGV2ZW50IHRv IHRoZSBwcm9wZXIgYWNjb3VudCBvbiB0aGVpciBzaWRlIHdpdGhvdXQgZmlyc3Qga25vd2luZyBt YWlscHJvdmlkZXIuY29tPGh0dHBzOi8vdXJsZGVmZW5zZS5wcm9vZnBvaW50LmNvbS92Mi91cmw/ dT1odHRwLTNBX19tYWlscHJvdmlkZXIuY29tJmQ9RHdNRmFRJmM9Um9QMVl1bUNYQ2dhV0h2bFpZ UjhQWmg4QnY3cUlyTVVCNjVlYXBJX0puRSZyPW5hNUZWekJUV21hbnFXTnk0RHBjdHlYUHB1WXFQ a0FJMWFMY0xONEtaTkEmbT0zUjhHeno0YzZqR2EwOVpIa282RWtfVXRYREc4b3lRUHd5SVB1bmJp U0FRJnM9RjlYY1Z4WnJzdExJZjEzelJ3d2xodFIzdEU2YkRfUUNWWWNrX0FUaVFVdyZlPT4ncyBj YW5vbmljYWxpemF0aW9uIHNjaGVtZS4gSSdtIG5vdCBzdXJlIHdoYXQgY2FuIGJlIGRvbmUgYWJv dXQgdGhpcyBhYnNlbnQgc29tZSB3YXkgZm9yIG1haWxwcm92aWRlci5jb208aHR0cHM6Ly91cmxk ZWZlbnNlLnByb29mcG9pbnQuY29tL3YyL3VybD91PWh0dHAtM0FfX21haWxwcm92aWRlci5jb20m ZD1Ed01GYVEmYz1Sb1AxWXVtQ1hDZ2FXSHZsWllSOFBaaDhCdjdxSXJNVUI2NWVhcElfSm5FJnI9 bmE1RlZ6QlRXbWFucVdOeTREcGN0eVhQcHVZcVBrQUkxYUxjTE40S1pOQSZtPTNSOEd6ejRjNmpH YTA5WkhrbzZFa19VdFhERzhveVFQd3lJUHVuYmlTQVEmcz1GOVhjVnhacnN0TElmMTN6Und3bGh0 UjN0RTZiRF9RQ1ZZY2tfQVRpUVV3JmU9PiB0byBhZHZlcnRpc2UgaXRzIGNhbm9uaWNhbGl6YXRp b24gc2NoZW1lLiBJcyB0aGVyZSBhIHN1Z2dlc3Rpb24gdG8gZG8gdGhhdD8NCg0KT24gVGh1LCBO b3YgOCwgMjAxOCBhdCAyOjI5IEFNIERpY2sgSGFyZHQgPGRpY2suaGFyZHRAZ21haWwuY29tPG1h aWx0bzpkaWNrLmhhcmR0QGdtYWlsLmNvbT4+IHdyb3RlOg0KQWdyZWVkLg0KDQpPbiBUaHUsIE5v diA4LCAyMDE4IGF0IDU6MjcgUE0gWWFyb24gU2hlZmZlciA8eWFyb25mLmlldGZAZ21haWwuY29t PG1haWx0bzp5YXJvbmYuaWV0ZkBnbWFpbC5jb20+PiB3cm90ZToNCkxvb2tzIGdvb2QsIGFuZCBJ IHRoaW5rIHRoaXMgaXMgYSBub3JtYXRpdmUgU0hPVUxELg0KDQpUaGFua3MsDQogICAgICAgIFlh cm9uDQoNCk9uIDA4LzExLzIwMTggMTc6MDcsIERpY2sgSGFyZHQgd3JvdGU6DQo+DQo+IE1hbnkg ZW1haWwgcHJvdmlkZXJzIHdpbGwgdHJlYXQgdGhlIGZvbGxvd2luZyBlbWFpbCBhZGRyZXNzZXMg YXMgZXF1aXZhbGVudDoNCj4NCj4gam9obnNtaXRoQGV4YW1wbGUuY29tPG1haWx0bzpqb2huc21p dGhAZXhhbXBsZS5jb20+IDxtYWlsdG86am9obnNtaXRoQGV4YW1wbGUuY29tPG1haWx0bzpqb2hu c21pdGhAZXhhbXBsZS5jb20+Pg0KPiBKT0hOU01JVEhARVhBTVBMRS5DT008bWFpbHRvOkpPSE5T TUlUSEBFWEFNUExFLi5DT00+IDxtYWlsdG86Sk9ITlNNSVRIQEVYQU1QTEUuQ09NPG1haWx0bzpK T0hOU01JVEhARVhBTVBMRS5DT00+Pg0KPiBKb2huU21pdGhAZXhhbXBsZS5jb208bWFpbHRvOkpv aG5TbWl0aEBleGFtcGxlLmNvbT4gPG1haWx0bzpKb2huU21pdGhAZXhhbXBsZS5jb208bWFpbHRv OkpvaG5TbWl0aEBleGFtcGxlLmNvbT4+DQo+IGpvaG4uc21pdGhAZXhhbXBsZS5jb208bWFpbHRv OmpvaG4uc21pdGhAZXhhbXBsZS5jb20+IDxtYWlsdG86am9obi5zbWl0aEBleGFtcGxlLmNvbTxt YWlsdG86am9obi5zbWl0aEBleGFtcGxlLmNvbT4+DQo+DQo+IFRoaXMgaGFzIGxlZCB1c2VycyB0 byB2aWV3IHRoZXNlIHN0cmluZ3MgYXMgZXF1aXZhbGVudCwgYW5kIGhhcyBsZWQgdG8NCj4gZW1h aWwgYWRkcmVzcyBjYW5vbmljYWxpemF0aW9uIGFsZ29yaXRobXMgdGhhdCBhcmUgaW1wbGVtZW50 YXRpb25zDQo+IHNwZWNpZmljLCBzbyB0aGF0IHVzZXIgZW50ZXJlZCBlbWFpbCBhZGRyZXNzZXMg cmVzb2x2ZSB0byB0aGUgc2FtZQ0KPiBjYW5vbmljYWwgc3RyaW5nLiAgV2hlbiByZWNlaXZpbmcg YW4gZW1haWwgaWRlbnRpZmllciwgdGhlIHJlY2lwaWVudA0KPiBzaG91bGQgdXNlIHRoZWlyIGlt cGxlbWVudGF0aW9uJ3MgY2Fub25pY2FsaXphdGlvbiBhbGdvcml0aG0gdG8gcmVzb2x2ZQ0KPiB0 byB0aGUgc2FtZSBzdWJqZWN0IGlkZW50aWZpZXIgc3RyaW5nIHVzZWQgaW4gdGhlaXIgc3lzdGVt Lg0KPg0KPg0KPg0KPg0KPg0KPg0KPiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fXw0KPiBJZC1ldmVudCBtYWlsaW5nIGxpc3QNCj4gSWQtZXZlbnRAaWV0Zi5v cmc8bWFpbHRvOklkLWV2ZW50QGlldGYub3JnPg0KPiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWls bWFuL2xpc3RpbmZvL2lkLWV2ZW50PGh0dHBzOi8vdXJsZGVmZW5zZS5wcm9vZnBvaW50LmNvbS92 Mi91cmw/dT1odHRwcy0zQV9fd3d3LmlldGYub3JnX21haWxtYW5fbGlzdGluZm9faWQtMkRldmVu dCZkPUR3TUZhUSZjPVJvUDFZdW1DWENnYVdIdmxaWVI4UFpoOEJ2N3FJck1VQjY1ZWFwSV9KbkUm cj1uYTVGVnpCVFdtYW5xV055NERwY3R5WFBwdVlxUGtBSTFhTGNMTjRLWk5BJm09M1I4R3p6NGM2 akdhMDlaSGtvNkVrX1V0WERHOG95UVB3eUlQdW5iaVNBUSZzPTRhMmZ4a2pPWlNBUlJLQTdIZTU2 aDBUdVY2b0FQSzNTUlJwQ0pYc3pXNVUmZT0+DQo+DQpfX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fXw0KSWQtZXZlbnQgbWFpbGluZyBsaXN0DQpJZC1ldmVudEBp ZXRmLi5vcmc8bWFpbHRvOklkLWV2ZW50QGlldGYub3JnPg0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcv bWFpbG1hbi9saXN0aW5mby9pZC1ldmVudDxodHRwczovL3VybGRlZmVuc2UucHJvb2Zwb2ludC5j b20vdjIvdXJsP3U9aHR0cHMtM0FfX3d3dy5pZXRmLm9yZ19tYWlsbWFuX2xpc3RpbmZvX2lkLTJE ZXZlbnQmZD1Ed01GYVEmYz1Sb1AxWXVtQ1hDZ2FXSHZsWllSOFBaaDhCdjdxSXJNVUI2NWVhcElf Sm5FJnI9bmE1RlZ6QlRXbWFucVdOeTREcGN0eVhQcHVZcVBrQUkxYUxjTE40S1pOQSZtPTNSOEd6 ejRjNmpHYTA5WkhrbzZFa19VdFhERzhveVFQd3lJUHVuYmlTQVEmcz00YTJmeGtqT1pTQVJSS0E3 SGU1NmgwVHVWNm9BUEszU1JScENKWHN6VzVVJmU9Pg0KDQoNCi0tDQpBZGFtIERhd2VzIHwgU3Iu IFByb2R1Y3QgTWFuYWdlciB8IGFkYXdlc0Bnb29nbGUuY29tPG1haWx0bzphZGF3ZXNAZ29vZ2xl LmNvbT4gfCArMSA2NTAtMjE0LTI0MTANCg0KDQoNCi0tDQpBZGFtIERhd2VzIHwgU3IuIFByb2R1 Y3QgTWFuYWdlciB8IGFkYXdlc0Bnb29nbGUuY29tPG1haWx0bzphZGF3ZXNAZ29vZ2xlLmNvbT4g fCArMSA2NTAtMjE0LTI0MTA8dGVsOisxJTIwNjUwLTIxNC0yNDEwPg0KDQpfX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KSWQtZXZlbnQgbWFpbGluZyBsaXN0 DQpJZC1ldmVudEBpZXRmLm9yZzxtYWlsdG86SWQtZXZlbnRAaWV0Zi5vcmc+DQpodHRwczovL3Vy bGRlZmVuc2UucHJvb2Zwb2ludC5jb20vdjIvdXJsP3U9aHR0cHMtM0FfX3d3dy5pZXRmLm9yZ19t YWlsbWFuX2xpc3RpbmZvX2lkLTJEZXZlbnQmZD1Ed0lDQWcmYz1Sb1AxWXVtQ1hDZ2FXSHZsWllS OFBaaDhCdjdxSXJNVUI2NWVhcElfSm5FJnI9bmE1RlZ6QlRXbWFucVdOeTREcGN0eVhQcHVZcVBr QUkxYUxjTE40S1pOQSZtPTNSOEd6ejRjNmpHYTA5WkhrbzZFa19VdFhERzhveVFQd3lJUHVuYmlT QVEmcz00YTJmeGtqT1pTQVJSS0E3SGU1NmgwVHVWNm9BUEszU1JScENKWHN6VzVVJmU9DQoNCg0K DQotLQ0KQWRhbSBEYXdlcyB8IFNyLiBQcm9kdWN0IE1hbmFnZXIgfCBhZGF3ZXNAZ29vZ2xlLmNv bTxtYWlsdG86YWRhd2VzQGdvb2dsZS5jb20+IHwgKzEgNjUwLTIxNC0yNDEwDQoNCg== --_000_F660459B46DC4FC2A0DB18625F4D9874amazoncom_ Content-Type: text/html; charset="utf-8" Content-ID: <3C37C16BCAA6734BBE05CC31677DEC83@amazon.com> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseTpIZWx2ZXRpY2E7DQoJcGFub3NlLTE6MCAwIDAgMCAwIDAgMCAwIDAg MDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJNUyBNaW5jaG8iOw0KCXBhbm9zZS0xOjIg MiA2IDkgNCAyIDUgOCAzIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBN YXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9u dC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1IDUgMiAyIDIgNCAzIDIgNDt9DQpAZm9u dC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJcQE1TIE1pbmNobyI7DQoJcGFub3NlLTE6MiAyIDYgOSA0 IDIgNSA4IDMgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxpLk1z b05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGluOw0KCW1hcmdpbi1ib3R0b206LjAw MDFwdDsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNl cmlmO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5 Ow0KCWNvbG9yOmJsdWU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQphOnZpc2l0ZWQs IHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNv bG9yOnB1cnBsZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCnAubXNvbm9ybWFsMCwg bGkubXNvbm9ybWFsMCwgZGl2Lm1zb25vcm1hbDANCgl7bXNvLXN0eWxlLW5hbWU6bXNvbm9ybWFs Ow0KCW1zby1tYXJnaW4tdG9wLWFsdDphdXRvOw0KCW1hcmdpbi1yaWdodDowaW47DQoJbXNvLW1h cmdpbi1ib3R0b20tYWx0OmF1dG87DQoJbWFyZ2luLWxlZnQ6MGluOw0KCWZvbnQtc2l6ZToxMS4w cHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0Kc3Bhbi5tNDU3ODc4OTcz MTMzNjg3OTcyMm0tNDAyMjY4NTg4MjA1MDc5OTExMWFwcGxlLXN0eWxlLXNwYW4NCgl7bXNvLXN0 eWxlLW5hbWU6bV80NTc4Nzg5NzMxMzM2ODc5NzIybV8tNDAyMjY4NTg4MjA1MDc5OTExMWFwcGxl LXN0eWxlLXNwYW47fQ0Kc3Bhbi5tNDU3ODc4OTczMTMzNjg3OTcyMm0tNDAyMjY4NTg4MjA1MDc5 OTExMWFwcGxlLWNvbnZlcnRlZC1zcGFjZQ0KCXttc28tc3R5bGUtbmFtZTptXzQ1Nzg3ODk3MzEz MzY4Nzk3MjJtXy00MDIyNjg1ODgyMDUwNzk5MTExYXBwbGUtY29udmVydGVkLXNwYWNlO30NCnNw YW4uRW1haWxTdHlsZTIwDQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsLXJlcGx5Ow0KCWZvbnQt ZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0KLk1zb0No cERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1zaXplOjEwLjBw dDt9DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo4LjVpbiAxMS4waW47DQoJbWFyZ2luOjEu MGluIDEuMGluIDEuMGluIDEuMGluO30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2Vj dGlvbjE7fQ0KLS0+PC9zdHlsZT4NCjwvaGVhZD4NCjxib2R5IGxhbmc9IkVOLVVTIiBsaW5rPSJi bHVlIiB2bGluaz0icHVycGxlIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj4ocmVzdXJyZWN0aW5nIHRoaXMgdGhyZWFk4oCmKTxvOnA+PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj5UaGVyZSBpcyBvbmUgb3RoZXIgYW5nbGUgdGhhdCBJIHRoaW5rIGlzbuKAmXQg cXVpdGUgY2FwdHVyZWQgaW4gdGhlIHRleHQ6IFNFVCBSZWNpcGllbnRzIG1heSB3YW50IHRvIGFw cGx5IGRpZmZlcmVudCBjYW5vbmljYWxpemF0aW9uIHJ1bGVzIHdoZW4gcmVzb2x2aW5nIGFuIEVt YWlsIFN1YmplY3QgSWRlbnRpZmllciB0byBvbmUgb3IgbW9yZSBhY2NvdW50cyBpbiB0aGVpciBz eXN0ZW0gdGhhbiB0aGV5IGRvIHdoZW4NCiByZXNvbHZpbmcgYSB1c2VyLXN1cHBsaWVkIGVtYWls IGFkZHJlc3MgdG8gYSBzcGVjaWZpYyBhY2NvdW50LiBGb3IgZXhhbXBsZSwgYSBzZXJ2aWNlIHBy b3ZpZGVyIG1pZ2h0IGNvbnNpZGVyIOKAnGV4YW1wbGUmIzQzO2Zvb0BnbWFpbC5jb23igJ0gYW5k IOKAnGV4YW1wbGUmIzQzO2JhckBnbWFpbC5jb23igJ0gdG8gYmUgZGlmZmVyZW50LCB1bnJlbGF0 ZWQgZW1haWwgYWRkcmVzc2VzIGVhY2ggaWRlbnRpZnlpbmcgYSBkaWZmZXJlbnQsIHVucmVsYXRl ZCBsb2NhbCBhY2NvdW50Lg0KIEhvd2V2ZXIsIHdoZW4gcHJvY2Vzc2luZyBhIFNFVCBmcm9tIEdv b2dsZSwgdGhhdCBzZXJ2aWNlIHByb3ZpZGVyIG1pZ2h0IHdhbnQgdG8gbWFwIGFueSBvZiDigJxl eGFtcGxlQGdtYWlsLmNvbeKAnSwg4oCcZXhhbXBsZSYjNDM7Zm9vQGdtYWlsLmNvbeKAnSwgYW5k IOKAnGV4YW1wbGUmIzQzO2JhckBnbWFpbC5jb23igJ0gb250byBCT1RIIGxvY2FsIGFjY291bnRz LCBzaW5jZSB0aGV5IHVuZGVyc3RhbmQgdGhhdCB0aGV5IGFyZSBhbGwganVzdCBhbGlhc2VzIGZv ciB0aGUgc2FtZQ0KIGFjY291bnQgb24gR29vZ2xl4oCZcyBzaWRlLjxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj4tLSZuYnNwOzxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+QW5uYWJl bGxlIFJpY2hhcmQgQmFja21hbjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1Rp bWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+QVdTIElkZW50aXR5PG86cD48L286cD48L3NwYW4+ PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdiBzdHlsZT0i Ym9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjQjVDNERGIDEuMHB0O3BhZGRpbmc6My4wcHQg MGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMi4wcHQ7Y29sb3I6YmxhY2siPkZyb206IDwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMi4wcHQ7Y29sb3I6YmxhY2siPklkLWV2ZW50ICZsdDtpZC1ldmVudC1ib3VuY2Vz QGlldGYub3JnJmd0OyBvbiBiZWhhbGYgb2YgQWRhbSBEYXdlcyAmbHQ7YWRhd2VzPTQwZ29vZ2xl LmNvbUBkbWFyYy5pZXRmLm9yZyZndDs8YnI+DQo8Yj5EYXRlOiA8L2I+RnJpZGF5LCBOb3ZlbWJl ciA5LCAyMDE4IGF0IDU6NTggUE08YnI+DQo8Yj5UbzogPC9iPkRpY2sgSGFyZHQgJmx0O2RpY2su aGFyZHRAZ21haWwuY29tJmd0Ozxicj4NCjxiPkNjOiA8L2I+WWFyb24gU2hlZmZlciAmbHQ7eWFy b25mLmlldGZAZ21haWwuY29tJmd0OywgSUQgRXZlbnRzIE1haWxpbmcgTGlzdCAmbHQ7aWQtZXZl bnRAaWV0Zi5vcmcmZ3Q7LCBQaGlsIEh1bnQgJmx0O3BoaWwuaHVudEBvcmFjbGUuY29tJmd0Ozxi cj4NCjxiPlN1YmplY3Q6IDwvYj5SZTogW0lkLWV2ZW50XSBzdGFiIGF0IGRlc2NyaWJpbmcgZW1h aWwgY2Fub25pY2FsaXphdGlvbiBkcmFnb25zPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWJvdHRvbToxMi4w cHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj5PbiBGcmksIE5vdiA5LCAyMDE4IGF0IDM6NTggUE0gRGljayBIYXJkdCAmbHQ7PGEgaHJl Zj0ibWFpbHRvOmRpY2suaGFyZHRAZ21haWwuY29tIj5kaWNrLmhhcmR0QGdtYWlsLmNvbTwvYT4m Z3Q7IHdyb3RlOjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0iYm9y ZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgI0NDQ0NDQyAxLjBwdDtwYWRkaW5nOjBpbiAwaW4g MGluIDYuMHB0O21hcmdpbi1sZWZ0OjQuOHB0O21hcmdpbi1yaWdodDowaW4iPg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPlBoaWw6Jm5ic3A7PGEgaHJlZj0iaHR0cHM6Ly90b29scy5pZXRm Lm9yZy9odG1sL3JmYzUzMjEiIHRhcmdldD0iX2JsYW5rIj5SRkM1MzIxPC9hPiZuYnNwO2Rlc2Ny aWJlcyBhIHZhbGlkIGVtYWlsIGFkZHJlc3MsIGl0IGlzIG5vdCBjYW5vbmljYWwuJm5ic3A7DQo8 bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkFkYW06IGluIG15 IGV4cGVyaWVuY2UsIHdlIHN0cmlwIHRoZSBkb3RzIGluIGdtYWlsIGFkZHJlc3Nlcywgc2luY2Ug d2UgaGF2ZSBsZWFybmVkIHRoYXQgaXMgd2hhdCBHb29nbGUgZG9lcy4gOik8bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkFzIHRvIHRoZSAnJiM0Mzsn IGZ1bmN0aW9uYWxpdHksIHNvbWUgcGFydGllcyBtYXkgdXNlIHRoYXQgdG8ga25vdyBpdCBpcyB0 aGUgc2FtZSBzdWJqZWN0IGF0IHRoZSBob3N0LiBGb3IgZXhhbXBsZSwgaWYgbWVyY2hhbnRmb28g c3Vic2NyaWJlZCB0byByZWNlaXZlIGV2ZW50cyBmb3Igc3ViamVjdCZuYnNwOzxhIGhyZWY9Im1h aWx0bzphbGljZS5zbWl0aCUyQm1lcmNoYW50Zm9vQG1haWxwcm92aWRlci5jb20iIHRhcmdldD0i X2JsYW5rIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OkhlbHZldGlj YSI+YWxpY2VzbWl0aCYjNDM7bWVyY2hhbnRmb29AbWFpbHByb3ZpZGVyLmNvbTwvc3Bhbj48L2E+ Jm5ic3A7ZnJvbQ0KPGEgaHJlZj0iaHR0cDovL21haWxwcm92aWRlci5jb20iIHRhcmdldD0iX2Js YW5rIj5tYWlscHJvdmlkZXIuY29tPC9hPiwgdGhlbiA8YSBocmVmPSJodHRwOi8vbWFpbHByb3Zp ZGVyLmNvbSIgdGFyZ2V0PSJfYmxhbmsiPg0KbWFpbHByb3ZpZGVyLmNvbTwvYT4gd291bGQgY2Fu b25pY2FsaXplIHRoZSBzdWJqZWN0IHRvJm5ic3A7ICZuYnNwOzxhIGhyZWY9Im1haWx0bzphbGlj ZS5zbWl0aCUyQm1lcmNoYW50Zm9vQG1haWxwcm92aWRlci5jb20iIHRhcmdldD0iX2JsYW5rIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYSI+YWxpY2Vz bWl0aEBtYWlscHJvdmlkZXIuY29tPC9zcGFuPjwvYT4uPG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPldoaWxlIG1lcmNoYW50Zm9vIHdvdWxkIHVz ZSZuYnNwOyZuYnNwOzxhIGhyZWY9Im1haWx0bzphbGljZS5zbWl0aCUyQm1lcmNoYW50Zm9vQG1h aWxwcm92aWRlci5jb20iIHRhcmdldD0iX2JsYW5rIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjku MHB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYSI+YWxpY2VzbWl0aCYjNDM7bWVyY2hhbnRmb29AbWFp bHByb3ZpZGVyLmNvbTwvc3Bhbj48L2E+Jm5ic3A7Zm9yIHNlbmRpbmcgZW1haWwsIGl0IHdvdWxk DQogbGlrZWx5IGJlIHVzZWZ1bCBmb3IgbWVyY2hhbnRmb28gdG8ga25vdyB0aGF0Jm5ic3A7Jm5i c3A7PGEgaHJlZj0ibWFpbHRvOmFsaWNlLnNtaXRoJTJCbWVyY2hhbnRmb29AbWFpbHByb3ZpZGVy LmNvbSIgdGFyZ2V0PSJfYmxhbmsiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1m YW1pbHk6SGVsdmV0aWNhIj5hbGljZXNtaXRoQG1haWxwcm92aWRlci5jb208L3NwYW4+PC9hPiZu YnNwO2FuZCZuYnNwOyAmbmJzcDs8YSBocmVmPSJtYWlsdG86YWxpY2Uuc21pdGglMkJtZXJjaGFu dGZvb0BtYWlscHJvdmlkZXIuY29tIiB0YXJnZXQ9Il9ibGFuayI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZTo5LjBwdDtmb250LWZhbWlseTpIZWx2ZXRpY2EiPmFsaWNlc21pdGgmIzQzO21lcmNoYW50 Zm9vQG1haWxwcm92aWRlci5jb208L3NwYW4+PC9hPiZuYnNwO2FyZQ0KIHRoZSBzYW1lIHN1Ympl Y3QgZnJvbSBhIFNFVCBwb2ludCBvZiB2aWV3LiBGb3IgZXhhbXBsZSwgaWYgbWVyY2hhbnRmb28g aXMgYXR0ZW1wdGluZyB0byBmaW5kIG11dHVhbCBzdWJqZWN0cyB3aXRoIGEgbm9uLWVtYWlsIHBy b3ZpZGVyLA0KPGEgaHJlZj0iaHR0cDovL3NvY2lhbGZvby5jb20iIHRhcmdldD0iX2JsYW5rIj5z b2NpYWxmb28uY29tPC9hPiwgdGhlbiB0aGV5IHdvdWxkIGlkZWFsbHkgYm90aCB1c2UmbmJzcDsm bmJzcDs8YSBocmVmPSJtYWlsdG86YWxpY2Uuc21pdGglMkJtZXJjaGFudGZvb0BtYWlscHJvdmlk ZXIuY29tIiB0YXJnZXQ9Il9ibGFuayI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250 LWZhbWlseTpIZWx2ZXRpY2EiPmFsaWNlc21pdGhAbWFpbHByb3ZpZGVyLmNvbTwvc3Bhbj48L2E+ Jm5ic3A7ZXZlbg0KIHRob3VnaCBBbGljZSBoYWQgcHJvdmlkZWQmbmJzcDsmbmJzcDs8YSBocmVm PSJtYWlsdG86YWxpY2Uuc21pdGglMkJtZXJjaGFudGZvb0BtYWlscHJvdmlkZXIuY29tIiB0YXJn ZXQ9Il9ibGFuayI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTpIZWx2 ZXRpY2EiPmFsaWNlc21pdGgmIzQzO21lcmNoYW50Zm9vQG1haWxwcm92aWRlci5jb208L3NwYW4+ PC9hPiZuYnNwO3RvIG1lcmNoYW50Zm9vciBhbmQmbmJzcDsmbmJzcDs8YSBocmVmPSJtYWlsdG86 YWxpY2Uuc21pdGglMkJtZXJjaGFudGZvb0BtYWlscHJvdmlkZXIuY29tIiB0YXJnZXQ9Il9ibGFu ayI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTpIZWx2ZXRpY2EiPmFs aWNlc21pdGgmIzQzO3NvY2lhbGZvb0BtYWlscHJvdmlkZXIuY29tPC9zcGFuPjwvYT4mbmJzcDt0 bw0KIHNvY2lhbGZvby48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2tx dW90ZT4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5FeGFjdGx5IHJpZ2h0PG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1s ZWZ0OnNvbGlkICNDQ0NDQ0MgMS4wcHQ7cGFkZGluZzowaW4gMGluIDBpbiA2LjBwdDttYXJnaW4t bGVmdDo0LjhwdDttYXJnaW4tcmlnaHQ6MGluIj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+SW4gdGhlIFdHIG1lZXRpbmcgdGhlcmUgd2FzIGEgZGlzY3Vzc2lvbiBhYm91dCBz dGFuZGFyZGl6aW5nIGNhbm9uaWNhbGl6YXRpb24sIGFuZCB0aGUgY29uc2Vuc3VzIGluIHRoZSBt ZWV0aW5nIHdhcyB0aGF0IHdhcyBvdXQgb2Ygc2NvcGUsIGJ1dCB0aGF0IGl0IHdhcyBpbXBvcnRh bnQgdG8gY2FsbCBvdXQgdGhlIGlzc3VlLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2 Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiYjNDM7MSZuYnNw OzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SXQg aXMgdXNlZnVsIHRvIGFsZXJ0IGltcGxlbWVudGVycyB0aGF0IHRoZXNlIGlzc3VlcyBleGlzdC4g QXMgZm9yIHNvbHZpbmcgdGhlIGRlZXBlciBwcm9ibGVtLCBJIHdhcyBjdXJpb3VzIGFib3V0IHdo ZXRoZXIgdGhhdCB3YXMgYmVpbmcgY29udGVtcGxhdGVkLiBCdXQgaXQgc2VlbXMgdGhhdCBpcyBv dXQgb2Ygc2NvcGUuIE5vdCBzdXJwcmlzZWQuIEFsd2F5cyBtb3JlIHRoaW5ncyB0byBkbyBpbiB0 aGUgZnV0dXJlITxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJi b3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCAjQ0NDQ0NDIDEuMHB0O3BhZGRpbmc6MGluIDBp biAwaW4gNi4wcHQ7bWFyZ2luLWxlZnQ6NC44cHQ7bWFyZ2luLXJpZ2h0OjBpbiI+DQo8ZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwv ZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4N CjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+T24gU2F0LCBOb3YgMTAsIDIwMTgg YXQgMjoyOCBBTSBQaGlsIEh1bnQgJmx0OzxhIGhyZWY9Im1haWx0bzpwaGlsLmh1bnRAb3JhY2xl LmNvbSIgdGFyZ2V0PSJfYmxhbmsiPnBoaWwuaHVudEBvcmFjbGUuY29tPC9hPiZndDsgd3JvdGU6 PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJib3JkZXI6bm9uZTti b3JkZXItbGVmdDpzb2xpZCAjQ0NDQ0NDIDEuMHB0O3BhZGRpbmc6MGluIDBpbiAwaW4gNi4wcHQ7 bWFyZ2luLWxlZnQ6NC44cHQ7bWFyZ2luLXJpZ2h0OjBpbiI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+V2h5IGlzJm5ic3A7PGEgaHJlZj0iaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1s L3JmYzUzMjEiIHRhcmdldD0iX2JsYW5rIj5SRkM1MzIxPC9hPiZuYnNwO25vdCBzdWZmaWNpZW50 IHRvIGRlZmluZSBjYW5vbmljYWxpemF0aW9uIGZvciBlbWFpbCBhZGRyZXNzZXM/DQo8bzpwPjwv bzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwv cD4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2 Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+ DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Y29sb3I6YmxhY2siPlBoaWw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7 PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJjb2xvcjpibGFjayI+T3JhY2xlIENvcnBvcmF0aW9uLCBDbG91ZCBTZWN1cml0 eSBhbmQgSWRlbnRpdHkgQXJjaGl0ZWN0PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj5AaW5k ZXBlbmRlbnRpZDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+PGEgaHJlZj0iaHR0cDovL3d3 dy5pbmRlcGVuZGVudGlkLmNvbSIgdGFyZ2V0PSJfYmxhbmsiPnd3dy5pbmRlcGVuZGVudGlkLmNv bTwvYT48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+PGEgaHJl Zj0ibWFpbHRvOnBoaWwuaHVudEBvcmFjbGUuY29tIiB0YXJnZXQ9Il9ibGFuayI+cGhpbC5odW50 QG9yYWNsZS5jb208L2E+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwv ZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9k aXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxicj4NCjxicj4NCjxvOnA+PC9vOnA+PC9wPg0KPGJsb2NrcXVvdGUg c3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+T24gTm92IDksIDIwMTgsIGF0IDEwOjUwIEFNLCBBZGFtIERhd2Vz ICZsdDs8YSBocmVmPSJtYWlsdG86YWRhd2VzPTQwZ29vZ2xlLmNvbUBkbWFyYy5pZXRmLm9yZyIg dGFyZ2V0PSJfYmxhbmsiPmFkYXdlcz00MGdvb2dsZS5jb21AZG1hcmMuaWV0Zi5vcmc8L2E+Jmd0 OyB3cm90ZTo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86 cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhIj5JIHRoaW5r IGl0IGRvZXMgbWFrZSBzZW5zZSB0byBkbyB0aGUgc2FtZSBjYW5vbmljYWxpemF0aW9uIGZvciBT RVRzLiBCdXQgSSBzdXNwZWN0IHRoYXQgbW9zdCBjYW5vbmljYWxpemF0aW9uIHRoYXQgYXBwcyBk byBpcyBwdXJlbHkgZm9jdXNlZCBvbiBwcm9wZXIgbG93ZXIgY2FzaW5nLiBJIHdvdWxkIGJlIG1v cmUgc3VycHJpc2VkDQogaWYgYXBwcyBjYW5vbmljYWxpemUgb24gc3BlY2lhbCBjaGFyYWN0ZXJz IGxpa2UgLiwmIzQzOyBldGMuIEkgZG9uJ3Qga25vdyBhcyBpZiB0aGVyZSBhcmUgYW55IGd1aWRh bmNlIGluIHRoZSBtYWlsIFJGQ3Mgb24gaG93IHRvIHRyZWF0IHRoZXNlIHNvIEkgdGhpbmsgdGhl cmUgYXJlIGluY29uc2lzdGVudCB0cmVhdG1lbnRzIGZyb20gbWFpbCBwcm92aWRlcnMuIFNvbWUg YXBwcyBtYXkgdW5kZXJzdGFuZCB0aGUgY29udmVudGlvbnMgb2YgbGFyZ2VyIG1haWwNCiBwcm92 aWRlcnMgYnV0IEkgc3VzcGVjdCB5b3UncmUgc3RpbGwgZ29pbmcgdG8gaGF2ZSBkaXNjcmVwYW5j aWVzIHRoYXQgYXJlIGhhcmQgdG8gaXJvbiBvdXQgd2l0aG91dCBmdWxseSB1bmRlcnN0YW5kaW5n IHRoZSBtYWlsIHByb3ZpZGVyJ3MgY2Fub25pY2FsaXphdGlvbiBzY2hlbWUuIEFuZCBzb21lIHVz ZXJzIGV4cGVjdCB0aGF0IHRoZWlyIG1haWwgd2lsbCBub3QgYmUgY2Fub25jaWFsaXplZC4gRm9y IGV4YW1wbGUsIEdtYWlsIHByb3ZpZGVzDQogdGhlJm5ic3A7JiM0MzsgY2hhcmFjdGVyIHNvIHRo YXQgYSB1c2VyIGNhbiBnaXZlIHVuaXF1ZSBhZGRyZXNzZXMgdG8gZWFjaCByZWNpcGllbnQ8c3Bh biBjbGFzcz0ibTQ1Nzg3ODk3MzEzMzY4Nzk3MjJtLTQwMjI2ODU4ODIwNTA3OTkxMTFhcHBsZS1j b252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48YSBocmVmPSJtYWlsdG86YWxpY2Uuc21pdGgl MkJtZXJjaGFudGZvb0BtYWlscHJvdmlkZXIuY29tIiB0YXJnZXQ9Il9ibGFuayI+YWxpY2Uuc21p dGgmIzQzO21lcmNoYW50Zm9vQG1haWxwcm92aWRlci5jb208L2E+Lg0KIElmIG1lcmNoYW50Zm9v IHN0cmlwcGVkIHRoZSZuYnNwOyYjNDM7IGluIGNhbm9uaWNhbGl6aW5nLCB0aGVuIEFsaWNlIHdv dWxkbid0IGJlIGFibGUgdG8gbWFuYWdlIG1haWwgZnJvbSBtZXJjaGFudGZvbyBhcyBlYXNpbHku Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTpIZWx2ZXRpY2EiPk9u IFRodSwgTm92IDgsIDIwMTggYXQgNDo0MCBQTSBEaWNrIEhhcmR0ICZsdDs8YSBocmVmPSJtYWls dG86ZGljay5oYXJkdEBnbWFpbC5jb20iIHRhcmdldD0iX2JsYW5rIj5kaWNrLmhhcmR0QGdtYWls LmNvbTwvYT4mZ3Q7IHdyb3RlOjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGJsb2Nr cXVvdGUgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkICNDQ0NDQ0MgMS4wcHQ7 cGFkZGluZzowaW4gMGluIDBpbiA2LjBwdDttYXJnaW4tbGVmdDo0LjhwdDttYXJnaW4tcmlnaHQ6 MGluIj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjkuMHB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYSI+SGV5IEFkYW0NCjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjkuMHB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYSI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZTo5LjBwdDtmb250LWZhbWlseTpIZWx2ZXRpY2EiPlRoZSBwcm9ibGVtIHlvdSBhcmUgZGVz Y3JpYmluZyBpcyB3aGF0IEkgd2FzIGF0dGVtcHRpbmcgdG8gY2FwdHVyZS4gU2luY2UgQWxpY2U8 c3BhbiBjbGFzcz0ibTQ1Nzg3ODk3MzEzMzY4Nzk3MjJtLTQwMjI2ODU4ODIwNTA3OTkxMTFhcHBs ZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48YSBocmVmPSJodHRwczovL3VybGRlZmVu c2UucHJvb2Zwb2ludC5jb20vdjIvdXJsP3U9aHR0cC0zQV9fbWFpbHByb3ZpZGVyLmNvbSZhbXA7 ZD1Ed01GYVEmYW1wO2M9Um9QMVl1bUNYQ2dhV0h2bFpZUjhQWmg4QnY3cUlyTVVCNjVlYXBJX0pu RSZhbXA7cj1uYTVGVnpCVFdtYW5xV055NERwY3R5WFBwdVlxUGtBSTFhTGNMTjRLWk5BJmFtcDtt PTNSOEd6ejRjNmpHYTA5WkhrbzZFa19VdFhERzhveVFQd3lJUHVuYmlTQVEmYW1wO3M9RjlYY1Z4 WnJzdExJZjEzelJ3d2xodFIzdEU2YkRfUUNWWWNrX0FUaVFVdyZhbXA7ZT0iIHRhcmdldD0iX2Js YW5rIj5tYWlscHJvdmlkZXIuY29tPC9hPjxzcGFuIGNsYXNzPSJtNDU3ODc4OTczMTMzNjg3OTcy Mm0tNDAyMjY4NTg4MjA1MDc5OTExMWFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFu PnJlbW92ZXMNCiBkb3RzLDxzcGFuIGNsYXNzPSJtNDU3ODc4OTczMTMzNjg3OTcyMm0tNDAyMjY4 NTg4MjA1MDc5OTExMWFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxhIGhyZWY9 Imh0dHBzOi8vdXJsZGVmZW5zZS5wcm9vZnBvaW50LmNvbS92Mi91cmw/dT1odHRwLTNBX19tZXJj aGFudGZvby5jb20mYW1wO2Q9RHdNRmFRJmFtcDtjPVJvUDFZdW1DWENnYVdIdmxaWVI4UFpoOEJ2 N3FJck1VQjY1ZWFwSV9KbkUmYW1wO3I9bmE1RlZ6QlRXbWFucVdOeTREcGN0eVhQcHVZcVBrQUkx YUxjTE40S1pOQSZhbXA7bT0zUjhHeno0YzZqR2EwOVpIa282RWtfVXRYREc4b3lRUHd5SVB1bmJp U0FRJmFtcDtzPXFhaE5obTE2VURSUlNfVVVwRUQwMWE0aGl0bXFCb29RemZBM0pEMnZ5NjAmYW1w O2U9IiB0YXJnZXQ9Il9ibGFuayI+bWVyY2hhbnRmb28uY29tPC9hPmxpa2VseQ0KIGhhcyBhbHJl YWR5IGZpZ3VyZWQgb3V0PHNwYW4gY2xhc3M9Im00NTc4Nzg5NzMxMzM2ODc5NzIybS00MDIyNjg1 ODgyMDUwNzk5MTExYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PGEgaHJlZj0i aHR0cHM6Ly91cmxkZWZlbnNlLnByb29mcG9pbnQuY29tL3YyL3VybD91PWh0dHAtM0FfX21haWxw cm92ZXIuY29tJmFtcDtkPUR3TUZhUSZhbXA7Yz1Sb1AxWXVtQ1hDZ2FXSHZsWllSOFBaaDhCdjdx SXJNVUI2NWVhcElfSm5FJmFtcDtyPW5hNUZWekJUV21hbnFXTnk0RHBjdHlYUHB1WXFQa0FJMWFM Y0xONEtaTkEmYW1wO209M1I4R3p6NGM2akdhMDlaSGtvNkVrX1V0WERHOG95UVB3eUlQdW5iaVNB USZhbXA7cz1tVEdZU2x4VV9waWpydWpURHp4X3E0ajF4VHBheWpQejF4UDV5a29xb1VFJmFtcDtl PSIgdGFyZ2V0PSJfYmxhbmsiPm1haWxwcm92ZXIuY29tPC9hPidzDQogY2Fub25pY2FsaXphdGlv biBzaW5jZSBBbGljZSBjYW4gZW50ZXImbmJzcDs8YSBocmVmPSJtYWlsdG86YWxpY2Uuc21pdGhA bWFpbHByb3ZpZGVyLmNvbSIgdGFyZ2V0PSJfYmxhbmsiPmFsaWNlLnNtaXRoQG1haWxwcm92aWRl ci5jb208L2E+Jm5ic3A7b3ImbmJzcDs8YSBocmVmPSJtYWlsdG86YWxpY2Uuc21pdGhAbWFpbHBy b3ZpZGVyLmNvbSIgdGFyZ2V0PSJfYmxhbmsiPmFsaWNlc21pdGhAbWFpbHByb3ZpZGVyLmNvbTwv YT4mbmJzcDthdCBhbnkgc2l0ZSBhbmQgcmVjZWl2ZSBlbWFpbC4NCiBUaGUgc3VnZ2VzdGVkIHRl eHQgc2F5czxzcGFuIGNsYXNzPSJtNDU3ODc4OTczMTMzNjg3OTcyMm0tNDAyMjY4NTg4MjA1MDc5 OTExMWFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxhIGhyZWY9Imh0dHBzOi8v dXJsZGVmZW5zZS5wcm9vZnBvaW50LmNvbS92Mi91cmw/dT1odHRwLTNBX19tZXJjaGFudGZvby5j b20mYW1wO2Q9RHdNRmFRJmFtcDtjPVJvUDFZdW1DWENnYVdIdmxaWVI4UFpoOEJ2N3FJck1VQjY1 ZWFwSV9KbkUmYW1wO3I9bmE1RlZ6QlRXbWFucVdOeTREcGN0eVhQcHVZcVBrQUkxYUxjTE40S1pO QSZhbXA7bT0zUjhHeno0YzZqR2EwOVpIa282RWtfVXRYREc4b3lRUHd5SVB1bmJpU0FRJmFtcDtz PXFhaE5obTE2VURSUlNfVVVwRUQwMWE0aGl0bXFCb29RemZBM0pEMnZ5NjAmYW1wO2U9IiB0YXJn ZXQ9Il9ibGFuayI+bWVyY2hhbnRmb28uY29tPC9hPjxzcGFuIGNsYXNzPSJtNDU3ODc4OTczMTMz Njg3OTcyMm0tNDAyMjY4NTg4MjA1MDc5OTExMWFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7 PC9zcGFuPlNIT1VMRA0KIGRvIHRoZSBzYW1lIGNhbm9uaWNhbGl6YXRpb24gZm9yIGVtYWlsIHN1 YmplY3QgaWRlbnRpZmllcnMgdGhhdCBpdCBhbHJlYWR5IGRvZXMgd2l0aCBlbWFpbHMgZW50ZXJl ZCBieSB0aGUgdXNlci48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5 OkhlbHZldGljYSI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZh bWlseTpIZWx2ZXRpY2EiPkRvZXMgdGhhdCBtYWtlIHNlbnNlPyBTdWdnZXN0ZWQgY2hhbmdlcyB0 byB0aGUgdGV4dD88bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5Okhl bHZldGljYSI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1p bHk6SGVsdmV0aWNhIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1m YW1pbHk6SGVsdmV0aWNhIj5PbiBGcmksIE5vdiA5LCAyMDE4IGF0IDQ6NTIgQU0gQWRhbSBEYXdl cyAmbHQ7PGEgaHJlZj0ibWFpbHRvOmFkYXdlc0Bnb29nbGUuY29tIiB0YXJnZXQ9Il9ibGFuayI+ YWRhd2VzQGdvb2dsZS5jb208L2E+Jmd0OyB3cm90ZTo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 L2Rpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCAj Q0NDQ0NDIDEuMHB0O3BhZGRpbmc6MGluIDBpbiAwaW4gNi4wcHQ7bWFyZ2luLWxlZnQ6NC44cHQ7 bWFyZ2luLXJpZ2h0OjBpbiI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTpIZWx2ZXRpY2EiPkkgdGhpbmsgdGhpcyBt YWtlcyBzZW5zZS4gSG93ZXZlciwgSSB3YW50ZWQgdG8gcG9pbnQgb3V0IHRoYXQgdGhlcmUncyBh IGhpZ2hlciBsZXZlbCBwcm9ibGVtIGluIHRoYXQgdGhlIFRyYW5zbWl0dGVyIGlzIHByb3ZpZGlu ZyBpdCdzIGNhbm9uaWNhbGl6ZWQgaWRlbnRpZmllciBpbiB0aGUgU0VUIGFuZCB0aGlzIG1heQ0K IG5vdCBtYXAgdG8gdGhlIHJlY2VpdmVyJ3MgY2Fub25pY2FsaXplZCBpZGVudGlmaWVyLiZuYnNw OyA8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTpIZWx2ZXRpY2EiPjxvOnA+Jm5i c3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhIj5Gb3Ig ZXhhbXBsZSwgQWxpY2UgbWF5IGhhdmUgcmVnaXN0ZXJlZDxzcGFuIGNsYXNzPSJtNDU3ODc4OTcz MTMzNjg3OTcyMm0tNDAyMjY4NTg4MjA1MDc5OTExMWFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5i c3A7PC9zcGFuPjxhIGhyZWY9Im1haWx0bzphbGljZS5zbWl0aEBtYWlscHJvdmlkZXIuY29tIiB0 YXJnZXQ9Il9ibGFuayI+YWxpY2Uuc21pdGhAbWFpbHByb3ZpZGVyLmNvbTwvYT48c3BhbiBjbGFz cz0ibTQ1Nzg3ODk3MzEzMzY4Nzk3MjJtLTQwMjI2ODU4ODIwNTA3OTkxMTFhcHBsZS1jb252ZXJ0 ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj53aXRoPHNwYW4gY2xhc3M9Im00NTc4Nzg5NzMxMzM2ODc5 NzIybS00MDIyNjg1ODgyMDUwNzk5MTExYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3Nw YW4+PGEgaHJlZj0iaHR0cHM6Ly91cmxkZWZlbnNlLnByb29mcG9pbnQuY29tL3YyL3VybD91PWh0 dHAtM0FfX21lcmNoYW50Zm9vLmNvbSZhbXA7ZD1Ed01GYVEmYW1wO2M9Um9QMVl1bUNYQ2dhV0h2 bFpZUjhQWmg4QnY3cUlyTVVCNjVlYXBJX0puRSZhbXA7cj1uYTVGVnpCVFdtYW5xV055NERwY3R5 WFBwdVlxUGtBSTFhTGNMTjRLWk5BJmFtcDttPTNSOEd6ejRjNmpHYTA5WkhrbzZFa19VdFhERzhv eVFQd3lJUHVuYmlTQVEmYW1wO3M9cWFoTmhtMTZVRFJSU19VVXBFRDAxYTRoaXRtcUJvb1F6ZkEz SkQydnk2MCZhbXA7ZT0iIHRhcmdldD0iX2JsYW5rIj5tZXJjaGFudGZvby5jb208L2E+Li4NCiBX aGVuPHNwYW4gY2xhc3M9Im00NTc4Nzg5NzMxMzM2ODc5NzIybS00MDIyNjg1ODgyMDUwNzk5MTEx YXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PGEgaHJlZj0iaHR0cHM6Ly91cmxk ZWZlbnNlLnByb29mcG9pbnQuY29tL3YyL3VybD91PWh0dHAtM0FfX21haWxwcm92aWRlci5jb20m YW1wO2Q9RHdNRmFRJmFtcDtjPVJvUDFZdW1DWENnYVdIdmxaWVI4UFpoOEJ2N3FJck1VQjY1ZWFw SV9KbkUmYW1wO3I9bmE1RlZ6QlRXbWFucVdOeTREcGN0eVhQcHVZcVBrQUkxYUxjTE40S1pOQSZh bXA7bT0zUjhHeno0YzZqR2EwOVpIa282RWtfVXRYREc4b3lRUHd5SVB1bmJpU0FRJmFtcDtzPUY5 WGNWeFpyc3RMSWYxM3pSd3dsaHRSM3RFNmJEX1FDVllja19BVGlRVXcmYW1wO2U9IiB0YXJnZXQ9 Il9ibGFuayI+bWFpbHByb3ZpZGVyLmNvbTwvYT48c3BhbiBjbGFzcz0ibTQ1Nzg3ODk3MzEzMzY4 Nzk3MjJtLTQwMjI2ODU4ODIwNTA3OTkxMTFhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwv c3Bhbj5zZW5kcw0KIGEgU0VUIHRvPHNwYW4gY2xhc3M9Im00NTc4Nzg5NzMxMzM2ODc5NzIybS00 MDIyNjg1ODgyMDUwNzk5MTExYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PGEg aHJlZj0iaHR0cHM6Ly91cmxkZWZlbnNlLnByb29mcG9pbnQuY29tL3YyL3VybD91PWh0dHAtM0Ff X21lcmNoYW50Zm9vLmNvbSZhbXA7ZD1Ed01GYVEmYW1wO2M9Um9QMVl1bUNYQ2dhV0h2bFpZUjhQ Wmg4QnY3cUlyTVVCNjVlYXBJX0puRSZhbXA7cj1uYTVGVnpCVFdtYW5xV055NERwY3R5WFBwdVlx UGtBSTFhTGNMTjRLWk5BJmFtcDttPTNSOEd6ejRjNmpHYTA5WkhrbzZFa19VdFhERzhveVFQd3lJ UHVuYmlTQVEmYW1wO3M9cWFoTmhtMTZVRFJSU19VVXBFRDAxYTRoaXRtcUJvb1F6ZkEzSkQydnk2 MCZhbXA7ZT0iIHRhcmdldD0iX2JsYW5rIj5tZXJjaGFudGZvby5jb208L2E+LA0KIGl0IGNvdWxk IGJlIGZvcjxzcGFuIGNsYXNzPSJtNDU3ODc4OTczMTMzNjg3OTcyMm0tNDAyMjY4NTg4MjA1MDc5 OTExMWFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxhIGhyZWY9Im1haWx0bzph bGljZXNtaXRoQG1haWxwcm92aWRlci5jb20iIHRhcmdldD0iX2JsYW5rIj5hbGljZXNtaXRoQG1h aWxwcm92aWRlci5jb208L2E+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZh bWlseTpIZWx2ZXRpY2EiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9u dC1mYW1pbHk6SGVsdmV0aWNhIj5tZXJjaGFudGZvbyBjYW4ndCBlZmZlY3RpdmVseSByZW1hcCB0 aGUgZXZlbnQgdG8gdGhlIHByb3BlciBhY2NvdW50IG9uIHRoZWlyIHNpZGUgd2l0aG91dCBmaXJz dCBrbm93aW5nPHNwYW4gY2xhc3M9Im00NTc4Nzg5NzMxMzM2ODc5NzIybS00MDIyNjg1ODgyMDUw Nzk5MTExYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PGEgaHJlZj0iaHR0cHM6 Ly91cmxkZWZlbnNlLnByb29mcG9pbnQuY29tL3YyL3VybD91PWh0dHAtM0FfX21haWxwcm92aWRl ci5jb20mYW1wO2Q9RHdNRmFRJmFtcDtjPVJvUDFZdW1DWENnYVdIdmxaWVI4UFpoOEJ2N3FJck1V QjY1ZWFwSV9KbkUmYW1wO3I9bmE1RlZ6QlRXbWFucVdOeTREcGN0eVhQcHVZcVBrQUkxYUxjTE40 S1pOQSZhbXA7bT0zUjhHeno0YzZqR2EwOVpIa282RWtfVXRYREc4b3lRUHd5SVB1bmJpU0FRJmFt cDtzPUY5WGNWeFpyc3RMSWYxM3pSd3dsaHRSM3RFNmJEX1FDVllja19BVGlRVXcmYW1wO2U9IiB0 YXJnZXQ9Il9ibGFuayI+bWFpbHByb3ZpZGVyLmNvbTwvYT4ncw0KIGNhbm9uaWNhbGl6YXRpb24g c2NoZW1lLiBJJ20gbm90IHN1cmUgd2hhdCBjYW4gYmUgZG9uZSBhYm91dCB0aGlzIGFic2VudCBz b21lIHdheSBmb3I8c3BhbiBjbGFzcz0ibTQ1Nzg3ODk3MzEzMzY4Nzk3MjJtLTQwMjI2ODU4ODIw NTA3OTkxMTFhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48YSBocmVmPSJodHRw czovL3VybGRlZmVuc2UucHJvb2Zwb2ludC5jb20vdjIvdXJsP3U9aHR0cC0zQV9fbWFpbHByb3Zp ZGVyLmNvbSZhbXA7ZD1Ed01GYVEmYW1wO2M9Um9QMVl1bUNYQ2dhV0h2bFpZUjhQWmg4QnY3cUly TVVCNjVlYXBJX0puRSZhbXA7cj1uYTVGVnpCVFdtYW5xV055NERwY3R5WFBwdVlxUGtBSTFhTGNM TjRLWk5BJmFtcDttPTNSOEd6ejRjNmpHYTA5WkhrbzZFa19VdFhERzhveVFQd3lJUHVuYmlTQVEm YW1wO3M9RjlYY1Z4WnJzdExJZjEzelJ3d2xodFIzdEU2YkRfUUNWWWNrX0FUaVFVdyZhbXA7ZT0i IHRhcmdldD0iX2JsYW5rIj5tYWlscHJvdmlkZXIuY29tPC9hPjxzcGFuIGNsYXNzPSJtNDU3ODc4 OTczMTMzNjg3OTcyMm0tNDAyMjY4NTg4MjA1MDc5OTExMWFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+ Jm5ic3A7PC9zcGFuPnRvDQogYWR2ZXJ0aXNlIGl0cyBjYW5vbmljYWxpemF0aW9uIHNjaGVtZS4g SXMgdGhlcmUgYSBzdWdnZXN0aW9uIHRvIGRvIHRoYXQ/PG86cD48L286cD48L3NwYW4+PC9wPg0K PC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6OS4wcHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48 L3A+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhIj5PbiBUaHUsIE5vdiA4LCAyMDE4IGF0 IDI6MjkgQU0gRGljayBIYXJkdCAmbHQ7PGEgaHJlZj0ibWFpbHRvOmRpY2suaGFyZHRAZ21haWwu Y29tIiB0YXJnZXQ9Il9ibGFuayI+ZGljay5oYXJkdEBnbWFpbC5jb208L2E+Jmd0OyB3cm90ZTo8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJib3JkZXI6 bm9uZTtib3JkZXItbGVmdDpzb2xpZCAjQ0NDQ0NDIDEuMHB0O3BhZGRpbmc6MGluIDBpbiAwaW4g Ni4wcHQ7bWFyZ2luLWxlZnQ6NC44cHQ7bWFyZ2luLXJpZ2h0OjBpbiI+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTpI ZWx2ZXRpY2EiPkFncmVlZC48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6SGVs dmV0aWNhIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6 SGVsdmV0aWNhIj5PbiBUaHUsIE5vdiA4LCAyMDE4IGF0IDU6MjcgUE0gWWFyb24gU2hlZmZlciAm bHQ7PGEgaHJlZj0ibWFpbHRvOnlhcm9uZi5pZXRmQGdtYWlsLmNvbSIgdGFyZ2V0PSJfYmxhbmsi Pnlhcm9uZi5pZXRmQGdtYWlsLmNvbTwvYT4mZ3Q7IHdyb3RlOjxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjwvZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNv bGlkICNDQ0NDQ0MgMS4wcHQ7cGFkZGluZzowaW4gMGluIDBpbiA2LjBwdDttYXJnaW4tbGVmdDo0 LjhwdDttYXJnaW4tcmlnaHQ6MGluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhIj5Mb29rcyBnb29kLCBhbmQg SSB0aGluayB0aGlzIGlzIGEgbm9ybWF0aXZlIFNIT1VMRC48YnI+DQo8YnI+DQpUaGFua3MsPGJy Pg0KJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7PHNwYW4gY2xhc3M9Im00NTc4Nzg5NzMxMzM2 ODc5NzIybS00MDIyNjg1ODgyMDUwNzk5MTExYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8 L3NwYW4+WWFyb248YnI+DQo8YnI+DQpPbiAwOC8xMS8yMDE4IDE3OjA3LCBEaWNrIEhhcmR0IHdy b3RlOjxicj4NCiZndDs8c3BhbiBjbGFzcz0ibTQ1Nzg3ODk3MzEzMzY4Nzk3MjJtLTQwMjI2ODU4 ODIwNTA3OTkxMTFhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48YnI+DQomZ3Q7 IE1hbnkgZW1haWwgcHJvdmlkZXJzIHdpbGwgdHJlYXQgdGhlIGZvbGxvd2luZyBlbWFpbCBhZGRy ZXNzZXMgYXMgZXF1aXZhbGVudDo8YnI+DQomZ3Q7PHNwYW4gY2xhc3M9Im00NTc4Nzg5NzMxMzM2 ODc5NzIybS00MDIyNjg1ODgyMDUwNzk5MTExYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8 L3NwYW4+PGJyPg0KJmd0OzxzcGFuIGNsYXNzPSJtNDU3ODc4OTczMTMzNjg3OTcyMm0tNDAyMjY4 NTg4MjA1MDc5OTExMWFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxhIGhyZWY9 Im1haWx0bzpqb2huc21pdGhAZXhhbXBsZS5jb20iIHRhcmdldD0iX2JsYW5rIj5qb2huc21pdGhA ZXhhbXBsZS5jb208L2E+PHNwYW4gY2xhc3M9Im00NTc4Nzg5NzMxMzM2ODc5NzIybS00MDIyNjg1 ODgyMDUwNzk5MTExYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+Jmx0O21haWx0 bzo8YSBocmVmPSJtYWlsdG86am9obnNtaXRoQGV4YW1wbGUuY29tIiB0YXJnZXQ9Il9ibGFuayI+ am9obnNtaXRoQGV4YW1wbGUuY29tPC9hPiZndDs8YnI+DQomZ3Q7PHNwYW4gY2xhc3M9Im00NTc4 Nzg5NzMxMzM2ODc5NzIybS00MDIyNjg1ODgyMDUwNzk5MTExYXBwbGUtY29udmVydGVkLXNwYWNl Ij4mbmJzcDs8L3NwYW4+PGEgaHJlZj0ibWFpbHRvOkpPSE5TTUlUSEBFWEFNUExFLi5DT00iIHRh cmdldD0iX2JsYW5rIj5KT0hOU01JVEhARVhBTVBMRS5DT008L2E+PHNwYW4gY2xhc3M9Im00NTc4 Nzg5NzMxMzM2ODc5NzIybS00MDIyNjg1ODgyMDUwNzk5MTExYXBwbGUtY29udmVydGVkLXNwYWNl Ij4mbmJzcDs8L3NwYW4+Jmx0O21haWx0bzo8YSBocmVmPSJtYWlsdG86Sk9ITlNNSVRIQEVYQU1Q TEUuQ09NIiB0YXJnZXQ9Il9ibGFuayI+Sk9ITlNNSVRIQEVYQU1QTEUuQ09NPC9hPiZndDs8YnI+ DQomZ3Q7PHNwYW4gY2xhc3M9Im00NTc4Nzg5NzMxMzM2ODc5NzIybS00MDIyNjg1ODgyMDUwNzk5 MTExYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PGEgaHJlZj0ibWFpbHRvOkpv aG5TbWl0aEBleGFtcGxlLmNvbSIgdGFyZ2V0PSJfYmxhbmsiPkpvaG5TbWl0aEBleGFtcGxlLmNv bTwvYT48c3BhbiBjbGFzcz0ibTQ1Nzg3ODk3MzEzMzY4Nzk3MjJtLTQwMjI2ODU4ODIwNTA3OTkx MTFhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj4mbHQ7bWFpbHRvOjxhIGhyZWY9 Im1haWx0bzpKb2huU21pdGhAZXhhbXBsZS5jb20iIHRhcmdldD0iX2JsYW5rIj5Kb2huU21pdGhA ZXhhbXBsZS5jb208L2E+Jmd0Ozxicj4NCiZndDs8c3BhbiBjbGFzcz0ibTQ1Nzg3ODk3MzEzMzY4 Nzk3MjJtLTQwMjI2ODU4ODIwNTA3OTkxMTFhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwv c3Bhbj48YSBocmVmPSJtYWlsdG86am9obi5zbWl0aEBleGFtcGxlLmNvbSIgdGFyZ2V0PSJfYmxh bmsiPmpvaG4uc21pdGhAZXhhbXBsZS5jb208L2E+PHNwYW4gY2xhc3M9Im00NTc4Nzg5NzMxMzM2 ODc5NzIybS00MDIyNjg1ODgyMDUwNzk5MTExYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8 L3NwYW4+Jmx0O21haWx0bzo8YSBocmVmPSJtYWlsdG86am9obi5zbWl0aEBleGFtcGxlLmNvbSIg dGFyZ2V0PSJfYmxhbmsiPmpvaG4uc21pdGhAZXhhbXBsZS5jb208L2E+Jmd0Ozxicj4NCiZndDs8 c3BhbiBjbGFzcz0ibTQ1Nzg3ODk3MzEzMzY4Nzk3MjJtLTQwMjI2ODU4ODIwNTA3OTkxMTFhcHBs ZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48YnI+DQomZ3Q7IFRoaXMgaGFzIGxlZCB1 c2VycyB0byB2aWV3IHRoZXNlIHN0cmluZ3MgYXMgZXF1aXZhbGVudCwgYW5kIGhhcyBsZWQgdG88 c3BhbiBjbGFzcz0ibTQ1Nzg3ODk3MzEzMzY4Nzk3MjJtLTQwMjI2ODU4ODIwNTA3OTkxMTFhcHBs ZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48YnI+DQomZ3Q7IGVtYWlsIGFkZHJlc3Mg Y2Fub25pY2FsaXphdGlvbiBhbGdvcml0aG1zIHRoYXQgYXJlIGltcGxlbWVudGF0aW9uczxzcGFu IGNsYXNzPSJtNDU3ODc4OTczMTMzNjg3OTcyMm0tNDAyMjY4NTg4MjA1MDc5OTExMWFwcGxlLWNv bnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxicj4NCiZndDsgc3BlY2lmaWMsIHNvIHRoYXQg dXNlciBlbnRlcmVkIGVtYWlsIGFkZHJlc3NlcyByZXNvbHZlIHRvIHRoZSBzYW1lPHNwYW4gY2xh c3M9Im00NTc4Nzg5NzMxMzM2ODc5NzIybS00MDIyNjg1ODgyMDUwNzk5MTExYXBwbGUtY29udmVy dGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PGJyPg0KJmd0OyBjYW5vbmljYWwgc3RyaW5nLiZuYnNw OyBXaGVuIHJlY2VpdmluZyBhbiBlbWFpbCBpZGVudGlmaWVyLCB0aGUgcmVjaXBpZW50PHNwYW4g Y2xhc3M9Im00NTc4Nzg5NzMxMzM2ODc5NzIybS00MDIyNjg1ODgyMDUwNzk5MTExYXBwbGUtY29u dmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PGJyPg0KJmd0OyBzaG91bGQgdXNlIHRoZWlyIGlt cGxlbWVudGF0aW9uJ3MgY2Fub25pY2FsaXphdGlvbiBhbGdvcml0aG0gdG8gcmVzb2x2ZTxzcGFu IGNsYXNzPSJtNDU3ODc4OTczMTMzNjg3OTcyMm0tNDAyMjY4NTg4MjA1MDc5OTExMWFwcGxlLWNv bnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxicj4NCiZndDsgdG8gdGhlIHNhbWUgc3ViamVj dCBpZGVudGlmaWVyIHN0cmluZyB1c2VkIGluIHRoZWlyIHN5c3RlbS48YnI+DQomZ3Q7PHNwYW4g Y2xhc3M9Im00NTc4Nzg5NzMxMzM2ODc5NzIybS00MDIyNjg1ODgyMDUwNzk5MTExYXBwbGUtY29u dmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PGJyPg0KJmd0OzxzcGFuIGNsYXNzPSJtNDU3ODc4 OTczMTMzNjg3OTcyMm0tNDAyMjY4NTg4MjA1MDc5OTExMWFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+ Jm5ic3A7PC9zcGFuPjxicj4NCiZndDs8c3BhbiBjbGFzcz0ibTQ1Nzg3ODk3MzEzMzY4Nzk3MjJt LTQwMjI2ODU4ODIwNTA3OTkxMTFhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48 YnI+DQomZ3Q7PHNwYW4gY2xhc3M9Im00NTc4Nzg5NzMxMzM2ODc5NzIybS00MDIyNjg1ODgyMDUw Nzk5MTExYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PGJyPg0KJmd0OzxzcGFu IGNsYXNzPSJtNDU3ODc4OTczMTMzNjg3OTcyMm0tNDAyMjY4NTg4MjA1MDc5OTExMWFwcGxlLWNv bnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxicj4NCiZndDs8c3BhbiBjbGFzcz0ibTQ1Nzg3 ODk3MzEzMzY4Nzk3MjJtLTQwMjI2ODU4ODIwNTA3OTkxMTFhcHBsZS1jb252ZXJ0ZWQtc3BhY2Ui PiZuYnNwOzwvc3Bhbj48YnI+DQomZ3Q7IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fPGJyPg0KJmd0OyBJZC1ldmVudCBtYWlsaW5nIGxpc3Q8YnI+DQomZ3Q7 PHNwYW4gY2xhc3M9Im00NTc4Nzg5NzMxMzM2ODc5NzIybS00MDIyNjg1ODgyMDUwNzk5MTExYXBw bGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PGEgaHJlZj0ibWFpbHRvOklkLWV2ZW50 QGlldGYub3JnIiB0YXJnZXQ9Il9ibGFuayI+SWQtZXZlbnRAaWV0Zi5vcmc8L2E+PGJyPg0KJmd0 OzxzcGFuIGNsYXNzPSJtNDU3ODc4OTczMTMzNjg3OTcyMm0tNDAyMjY4NTg4MjA1MDc5OTExMWFw cGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxhIGhyZWY9Imh0dHBzOi8vdXJsZGVm ZW5zZS5wcm9vZnBvaW50LmNvbS92Mi91cmw/dT1odHRwcy0zQV9fd3d3LmlldGYub3JnX21haWxt YW5fbGlzdGluZm9faWQtMkRldmVudCZhbXA7ZD1Ed01GYVEmYW1wO2M9Um9QMVl1bUNYQ2dhV0h2 bFpZUjhQWmg4QnY3cUlyTVVCNjVlYXBJX0puRSZhbXA7cj1uYTVGVnpCVFdtYW5xV055NERwY3R5 WFBwdVlxUGtBSTFhTGNMTjRLWk5BJmFtcDttPTNSOEd6ejRjNmpHYTA5WkhrbzZFa19VdFhERzhv eVFQd3lJUHVuYmlTQVEmYW1wO3M9NGEyZnhrak9aU0FSUktBN0hlNTZoMFR1VjZvQVBLM1NSUnBD Slhzelc1VSZhbXA7ZT0iIHRhcmdldD0iX2JsYW5rIj5odHRwczovL3d3dy5pZXRmLm9yZy9tYWls bWFuL2xpc3RpbmZvL2lkLWV2ZW50PC9hPjxicj4NCiZndDs8c3BhbiBjbGFzcz0ibTQ1Nzg3ODk3 MzEzMzY4Nzk3MjJtLTQwMjI2ODU4ODIwNTA3OTkxMTFhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZu YnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1m YW1pbHk6SGVsdmV0aWNhIj5fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fXzxicj4NCklkLWV2ZW50IG1haWxpbmcgbGlzdDxicj4NCjxhIGhyZWY9Im1haWx0bzpJ ZC1ldmVudEBpZXRmLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPklkLWV2ZW50QGlldGYuLm9yZzwvYT48 YnI+DQo8YSBocmVmPSJodHRwczovL3VybGRlZmVuc2UucHJvb2Zwb2ludC5jb20vdjIvdXJsP3U9 aHR0cHMtM0FfX3d3dy5pZXRmLm9yZ19tYWlsbWFuX2xpc3RpbmZvX2lkLTJEZXZlbnQmYW1wO2Q9 RHdNRmFRJmFtcDtjPVJvUDFZdW1DWENnYVdIdmxaWVI4UFpoOEJ2N3FJck1VQjY1ZWFwSV9KbkUm YW1wO3I9bmE1RlZ6QlRXbWFucVdOeTREcGN0eVhQcHVZcVBrQUkxYUxjTE40S1pOQSZhbXA7bT0z UjhHeno0YzZqR2EwOVpIa282RWtfVXRYREc4b3lRUHd5SVB1bmJpU0FRJmFtcDtzPTRhMmZ4a2pP WlNBUlJLQTdIZTU2aDBUdVY2b0FQSzNTUlJwQ0pYc3pXNVUmYW1wO2U9IiB0YXJnZXQ9Il9ibGFu ayI+aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9pZC1ldmVudDwvYT48bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNh Ij48YnIgY2xlYXI9ImFsbCI+DQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTpI ZWx2ZXRpY2EiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTpIZWx2 ZXRpY2EiPi0tPHNwYW4gY2xhc3M9Im00NTc4Nzg5NzMxMzM2ODc5NzIybS00MDIyNjg1ODgyMDUw Nzk5MTExYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3Nw YW4+PC9wPg0KPGRpdj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tdG9wOjcuNXB0O2xpbmUt aGVpZ2h0OjEuLjVlbSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjEyLjBwdDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9y OiM1NTU1NTU7Ym9yZGVyOnNvbGlkICNENTBGMjUgMS41cHQ7cGFkZGluZzoyLjBwdCI+QWRhbSBE YXdlcyZuYnNwO3w8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojNTU1NTU1O2JvcmRlcjpzb2xp ZCAjMzM2OUU4IDEuNXB0O3BhZGRpbmc6Mi4wcHQiPiZuYnNwO1NyLg0KIFByb2R1Y3QgTWFuYWdl ciZuYnNwO3w8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojNTU1NTU1O2JvcmRlcjpzb2xpZCAj MDA5OTM5IDEuNXB0O3BhZGRpbmc6Mi4wcHQiPiZuYnNwOzxhIGhyZWY9Im1haWx0bzphZGF3ZXNA Z29vZ2xlLmNvbSIgdGFyZ2V0PSJfYmxhbmsiPmFkYXdlc0Bnb29nbGUuY29tPC9hPiZuYnNwO3w8 L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJp YWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojNTU1NTU1O2JvcmRlcjpzb2xpZCAjRUVCMjExIDEu NXB0O3BhZGRpbmc6Mi4wcHQiPiZuYnNwOyYjNDM7MQ0KIDY1MC0yMTQtMjQxMDwvc3Bhbj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90Oyxz YW5zLXNlcmlmO2NvbG9yOiM1NTU1NTUiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZh bWlseTpIZWx2ZXRpY2EiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9k aXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTpI ZWx2ZXRpY2EiPjxiciBjbGVhcj0iYWxsIiBzdHlsZT0iZm9udC12YXJpYW50LWNhcHM6bm9ybWFs O3RleHQtYWxpZ246c3RhcnQ7d29yZC1zcGFjaW5nOjBweCI+DQo8L3NwYW4+PG86cD48L286cD48 L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5 LjBwdDtmb250LWZhbWlseTpIZWx2ZXRpY2EiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4N CjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBw dDtmb250LWZhbWlseTpIZWx2ZXRpY2EiPi0tPHNwYW4gY2xhc3M9Im00NTc4Nzg5NzMxMzM2ODc5 NzIybS00MDIyNjg1ODgyMDUwNzk5MTExYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3Nw YW4+PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJtYXJn aW4tdG9wOjcuNXB0Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJsaW5lLWhlaWdodDox OC4wcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Fy aWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzU1NTU1NTtib3JkZXI6c29saWQgI0Q1MEYyNSAx LjVwdDtwYWRkaW5nOjIuMHB0Ij5BZGFtIERhd2VzJm5ic3A7fDwvc3Bhbj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEyLjBwdDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlm O2NvbG9yOiM1NTU1NTU7Ym9yZGVyOnNvbGlkICMzMzY5RTggMS41cHQ7cGFkZGluZzoyLjBwdCI+ Jm5ic3A7U3IuDQogUHJvZHVjdCBNYW5hZ2VyJm5ic3A7fDwvc3Bhbj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEyLjBwdDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2Nv bG9yOiM1NTU1NTU7Ym9yZGVyOnNvbGlkICMwMDk5MzkgMS41cHQ7cGFkZGluZzoyLjBwdCI+Jm5i c3A7PGEgaHJlZj0ibWFpbHRvOmFkYXdlc0Bnb29nbGUuY29tIiB0YXJnZXQ9Il9ibGFuayI+YWRh d2VzQGdvb2dsZS5jb208L2E+Jm5ic3A7fDwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEy LjBwdDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiM1NTU1 NTU7Ym9yZGVyOnNvbGlkICNFRUIyMTEgMS41cHQ7cGFkZGluZzoyLjBwdCI+Jm5ic3A7PGEgaHJl Zj0idGVsOiYjNDM7MSUyMDY1MC0yMTQtMjQxMCIgdGFyZ2V0PSJfYmxhbmsiPiYjNDM7MQ0KIDY1 MC0yMTQtMjQxMDwvYT48L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojNTU1NTU1Ij48bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhIj48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTpIZWx2ZXRpY2EiPl9fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fPGJyPg0KSWQtZXZlbnQgbWFpbGlu ZyBsaXN0PGJyPg0KPC9zcGFuPjxhIGhyZWY9Im1haWx0bzpJZC1ldmVudEBpZXRmLm9yZyIgdGFy Z2V0PSJfYmxhbmsiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6SGVs dmV0aWNhIj5JZC1ldmVudEBpZXRmLm9yZzwvc3Bhbj48L2E+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZTo5LjBwdDtmb250LWZhbWlseTpIZWx2ZXRpY2EiPjxicj4NCjwvc3Bhbj48YSBocmVmPSJodHRw czovL3VybGRlZmVuc2UucHJvb2Zwb2ludC5jb20vdjIvdXJsP3U9aHR0cHMtM0FfX3d3dy5pZXRm Lm9yZ19tYWlsbWFuX2xpc3RpbmZvX2lkLTJEZXZlbnQmYW1wO2Q9RHdJQ0FnJmFtcDtjPVJvUDFZ dW1DWENnYVdIdmxaWVI4UFpoOEJ2N3FJck1VQjY1ZWFwSV9KbkUmYW1wO3I9bmE1RlZ6QlRXbWFu cVdOeTREcGN0eVhQcHVZcVBrQUkxYUxjTE40S1pOQSZhbXA7bT0zUjhHeno0YzZqR2EwOVpIa282 RWtfVXRYREc4b3lRUHd5SVB1bmJpU0FRJmFtcDtzPTRhMmZ4a2pPWlNBUlJLQTdIZTU2aDBUdVY2 b0FQSzNTUlJwQ0pYc3pXNVUmYW1wO2U9IiB0YXJnZXQ9Il9ibGFuayI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTpIZWx2ZXRpY2EiPmh0dHBzOi8vdXJsZGVmZW5zZS5w cm9vZnBvaW50LmNvbS92Mi91cmw/dT1odHRwcy0zQV9fd3d3LmlldGYub3JnX21haWxtYW5fbGlz dGluZm9faWQtMkRldmVudCZhbXA7ZD1Ed0lDQWcmYW1wO2M9Um9QMVl1bUNYQ2dhV0h2bFpZUjhQ Wmg4QnY3cUlyTVVCNjVlYXBJX0puRSZhbXA7cj1uYTVGVnpCVFdtYW5xV055NERwY3R5WFBwdVlx UGtBSTFhTGNMTjRLWk5BJmFtcDttPTNSOEd6ejRjNmpHYTA5WkhrbzZFa19VdFhERzhveVFQd3lJ UHVuYmlTQVEmYW1wO3M9NGEyZnhrak9aU0FSUktBN0hlNTZoMFR1VjZvQVBLM1NSUnBDSlhzelc1 VSZhbXA7ZT08L3NwYW4+PC9hPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+ DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9k aXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48YnIgY2xlYXI9ImFsbCI+DQo8bzpwPjwvbzpwPjwvcD4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+LS0gPG86cD48L286cD48L3A+DQo8ZGl2Pg0KPGRpdj4N CjxkaXYgc3R5bGU9Im1hcmdpbi10b3A6Ny41cHQiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9ImxpbmUtaGVpZ2h0OjE4LjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojNTU1NTU1O2JvcmRl cjpzb2xpZCAjRDUwRjI1IDEuNXB0O3BhZGRpbmc6Mi4wcHQiPkFkYW0gRGF3ZXMmbmJzcDt8PC9z cGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFs JnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzU1NTU1NTtib3JkZXI6c29saWQgIzMzNjlFOCAxLjVw dDtwYWRkaW5nOjIuMHB0Ij4mbmJzcDtTci4NCiBQcm9kdWN0IE1hbmFnZXImbmJzcDt8PC9zcGFu PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1 b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzU1NTU1NTtib3JkZXI6c29saWQgIzAwOTkzOSAxLjVwdDtw YWRkaW5nOjIuMHB0Ij4mbmJzcDs8YSBocmVmPSJtYWlsdG86YWRhd2VzQGdvb2dsZS5jb20iIHRh cmdldD0iX2JsYW5rIj5hZGF3ZXNAZ29vZ2xlLmNvbTwvYT4mbmJzcDt8PC9zcGFuPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMt c2VyaWY7Y29sb3I6IzU1NTU1NTtib3JkZXI6c29saWQgI0VFQjIxMSAxLjVwdDtwYWRkaW5nOjIu MHB0Ij4mbmJzcDsmIzQzOzENCiA2NTAtMjE0LTI0MTA8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xv cjojNTU1NTU1Ij48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9k aXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_F660459B46DC4FC2A0DB18625F4D9874amazoncom_-- From nobody Thu Dec 6 17:58:49 2018 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6F79D12E036 for ; Thu, 6 Dec 2018 17:58:48 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[AC_DIV_BONANZA=0.001, BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9sncXnwKFrvg for ; Thu, 6 Dec 2018 17:58:42 -0800 (PST) Received: from mail-lj1-x232.google.com (mail-lj1-x232.google.com [IPv6:2a00:1450:4864:20::232]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2E6681286E3 for ; Thu, 6 Dec 2018 17:58:41 -0800 (PST) Received: by mail-lj1-x232.google.com with SMTP id x85-v6so2205124ljb.2 for ; Thu, 06 Dec 2018 17:58:41 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=q3jlT531gHmmai5bkf1KVLo8ICnyM0e19e2bSHA9IIE=; b=E6up9sDWlM6egRb7FbK0X97gFPSa3IElQ9elMFaPcUaVJdiWD+JdnFMMrRHLISs6MD +PtAg5kWKa+hGkf92bzi77Bd4OEJ0tLZZk7tjfSt8QmChqaAm6oSfWTnAKo2YAuCMNGk a81zTOS77L67rkSZmTOvd6Jp8fK/FCVHIQZBvVzdpbyEk/DsNV2EJWTA+p8XQdQIoUng FlDuWLNLyVdhy5kK3/TlUjQANfFjb5Gp/hxp5DdnIBXYzd4sKf2zzjY3eV/KY4pGR36P o4oMLCB4wxJDU4lIZ7Uw0fepgB6auvnxSCUhKW4PcmD80jxcQGdtatkB0EHphe2VE4l0 8n2w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=q3jlT531gHmmai5bkf1KVLo8ICnyM0e19e2bSHA9IIE=; b=I9w1KfkHbWGKaY/JbQiIaqeLe0Nmxoe6Zv+lSN3XRoxTFc8tCUrEgDUJoG5kKzkgol Jm/0fyYNH6myCVRxQ/Mst7c1MCcYycOb4qSaxOG3STJsb6z8flJSHFQQPT+z+wdklZC1 waGPl0PyuAGwTk5GWdiSTwR+M4hkYceKudhZgYaPvBkZffgMkH4lOMrWgrdLRZ3msZZP bVs38suRFTOUmM7yoUlrMibso9fPavbMs3/5p0t847J4amI0slD7NDSEcqcuCNfsmaNY 7RRs3g/32VimH6pCewqhqDjTv+x8n+YHh/w72yhaN+u0kcLSfwqh0lwVCGVU3pYnGLXf AQdw== X-Gm-Message-State: AA+aEWbfVrWYvB5Gf1LxyTGlJTHyuDL3jv3PXwX1Ur9WU2Js9US0fuqO 2fFvbdTHdbTUOgI4dEXcxOPtDjh4ZAoeQJqhQDE= X-Google-Smtp-Source: AFSGD/WBAIBfQlC+4Z19un3QY8liRD022kxZX8OvuVpW8v9vBeEQU4GoWTX0ExiOLQ31NB3JzEJZHPBUHbf4hinM8tc= X-Received: by 2002:a2e:3a04:: with SMTP id h4-v6mr145342lja.81.1544147918960; Thu, 06 Dec 2018 17:58:38 -0800 (PST) MIME-Version: 1.0 References: <8e117807-689e-166b-4c1c-9a4a0827ce6d@gmail.com> In-Reply-To: From: Dick Hardt Date: Thu, 6 Dec 2018 17:58:25 -0800 Message-ID: To: Annabelle Richard Cc: Adam Dawes , Yaron Sheffer , SecEvent , Phil Hunt Content-Type: multipart/alternative; boundary="00000000000030be21057c64f4cd" Archived-At: Subject: Re: [Id-event] stab at describing email canonicalization dragons X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 07 Dec 2018 01:58:49 -0000 --00000000000030be21057c64f4cd Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Agreed this was not captured in the original text. I did describe it in a follow on email: As to the '+' functionality, some parties may use that to know it is the same subject at the host. For example, if merchantfoo subscribed to receive events for subject alicesmith+merchantfoo@mailprovider.com from mailprovider.com, then mailprovider.com would canonicalize the subject to alicesmith@mailprovider.com . While merchantfoo would use alicesmith+merchantfoo@mailprovider.com for sending email, it would likely be useful for merchantfoo to know that alicesmith@mailprovider.com and alicesmith+merchantfoo@mailprovider.com are the same subject from a SET point of view. For example, if merchantfoo is attempting to find mutual subjects with a non-email provider, socialfoo.com, then they would ideally both use alicesmith@mailprovider.com even though Alice had provided alicesmith+merchantfoo@mailprovider.com to merchantfoor and alicesmith+socialfoo@mailprovider.com to socialfoo. Using a generic domain is preferable to gmail.com. I would change this statement to be "for the same SET subject" On Thu, Dec 6, 2018 at 4:08 PM Richard Backman, Annabelle < richanna@amazon.com> wrote: > (resurrecting this thread=E2=80=A6) > > > > There is one other angle that I think isn=E2=80=99t quite captured in the= text: > SET Recipients may want to apply different canonicalization rules when > resolving an Email Subject Identifier to one or more accounts in their > system than they do when resolving a user-supplied email address to a > specific account. For example, a service provider might consider =E2=80= =9C > example+foo@gmail.com=E2=80=9D and =E2=80=9Cexample+bar@gmail.com=E2=80= =9D to be different, > unrelated email addresses each identifying a different, unrelated local > account. However, when processing a SET from Google, that service provide= r > might want to map any of =E2=80=9Cexample@gmail.com=E2=80=9D, =E2=80=9Cex= ample+foo@gmail.com=E2=80=9D, > and =E2=80=9Cexample+bar@gmail.com=E2=80=9D onto BOTH local accounts, sin= ce they > understand that they are all just aliases for the same account on > Google=E2=80=99s side. > > > > -- > > Annabelle Richard Backman > > AWS Identity > > > > > > *From: *Id-event on behalf of Adam Dawes > > *Date: *Friday, November 9, 2018 at 5:58 PM > *To: *Dick Hardt > *Cc: *Yaron Sheffer , ID Events Mailing List < > id-event@ietf.org>, Phil Hunt > *Subject: *Re: [Id-event] stab at describing email canonicalization > dragons > > > > > > On Fri, Nov 9, 2018 at 3:58 PM Dick Hardt wrote: > > Phil: RFC5321 describes a valid > email address, it is not canonical. > > > > Adam: in my experience, we strip the dots in gmail addresses, since we > have learned that is what Google does. :) > > As to the '+' functionality, some parties may use that to know it is the > same subject at the host. For example, if merchantfoo subscribed to recei= ve > events for subject alicesmith+merchantfoo@mailprovider.com > from mailprovider.com, then > mailprovider.com would canonicalize the subject to > alicesmith@mailprovider.com . > > > > While merchantfoo would use alicesmith+merchantfoo@mailprovider.com > for sending email, it would > likely be useful for merchantfoo to know that alicesmith@mailprovider.co= m > and > alicesmith+merchantfoo@mailprovider.com > are the same subject from a > SET point of view. For example, if merchantfoo is attempting to find mutu= al > subjects with a non-email provider, socialfoo.com, then they would > ideally both use alicesmith@mailprovider.com > even though Alice had > provided alicesmith+merchantfoo@mailprovider.com > to merchantfoor and > alicesmith+socialfoo@mailprovider.com > to socialfoo. > > > > Exactly right > > > > In the WG meeting there was a discussion about standardizing > canonicalization, and the consensus in the meeting was that was out of > scope, but that it was important to call out the issue. > > > > +1 > > It is useful to alert implementers that these issues exist. As for solvin= g > the deeper problem, I was curious about whether that was being > contemplated. But it seems that is out of scope. Not surprised. Always mo= re > things to do in the future! > > > > > > > > > > > > On Sat, Nov 10, 2018 at 2:28 AM Phil Hunt wrote: > > Why is RFC5321 not sufficient to > define canonicalization for email addresses? > > > > Phil > > > > Oracle Corporation, Cloud Security and Identity Architect > > @independentid > > www.independentid.com > > phil.hunt@oracle.com > > > > On Nov 9, 2018, at 10:50 AM, Adam Dawes < > adawes=3D40google.com@dmarc.ietf.org> wrote: > > > > I think it does make sense to do the same canonicalization for SETs. But = I > suspect that most canonicalization that apps do is purely focused on prop= er > lower casing. I would be more surprised if apps canonicalize on special > characters like .,+ etc. I don't know as if there are any guidance in the > mail RFCs on how to treat these so I think there are inconsistent > treatments from mail providers. Some apps may understand the conventions = of > larger mail providers but I suspect you're still going to have > discrepancies that are hard to iron out without fully understanding the > mail provider's canonicalization scheme. And some users expect that their > mail will not be canoncialized. For example, Gmail provides the + charact= er > so that a user can give unique addresses to each recipient > alice.smith+merchantfoo@mailprovider.com. If merchantfoo stripped the + > in canonicalizing, then Alice wouldn't be able to manage mail from > merchantfoo as easily. > > > > On Thu, Nov 8, 2018 at 4:40 PM Dick Hardt wrote: > > Hey Adam > > > > The problem you are describing is what I was attempting to capture. Since > Alice mailprovider.com > > removes dots, merchantfoo.com > likely > has already figured out mailprover.com > 's > canonicalization since Alice can enter alice.smith@mailprovider.com or > alicesmith@mailprovider.com at any site > and receive email. The suggested text says merchantfoo.com > > SHOULD do the same canonicalization for email subject identifiers that > it already does with emails entered by the user. > > > > Does that make sense? Suggested changes to the text? > > > > > > On Fri, Nov 9, 2018 at 4:52 AM Adam Dawes wrote: > > I think this makes sense. However, I wanted to point out that there's a > higher level problem in that the Transmitter is providing it's > canonicalized identifier in the SET and this may not map to the receiver'= s > canonicalized identifier. > > > > For example, Alice may have registered alice.smith@mailprovider.com with > merchantfoo.com > .. > When mailprovider.com > > sends a SET to merchantfoo.com > , > it could be for alicesmith@mailprovider.com > > > > merchantfoo can't effectively remap the event to the proper account on > their side without first knowing mailprovider.com > 's > canonicalization scheme. I'm not sure what can be done about this absent > some way for mailprovider.com > > to advertise its canonicalization scheme. Is there a suggestion to do > that? > > > > On Thu, Nov 8, 2018 at 2:29 AM Dick Hardt wrote: > > Agreed. > > > > On Thu, Nov 8, 2018 at 5:27 PM Yaron Sheffer > wrote: > > Looks good, and I think this is a normative SHOULD. > > Thanks, > Yaron > > On 08/11/2018 17:07, Dick Hardt wrote: > > > > Many email providers will treat the following email addresses as > equivalent: > > > > johnsmith@example.com > > JOHNSMITH@EXAMPLE.COM JOHNSMITH@EXAMPLE.COM> > > JohnSmith@example.com > > john.smith@example.com > > > > This has led users to view these strings as equivalent, and has led to > > email address canonicalization algorithms that are implementations > > specific, so that user entered email addresses resolve to the same > > canonical string. When receiving an email identifier, the recipient > > should use their implementation's canonicalization algorithm to resolve > > to the same subject identifier string used in their system. > > > > > > > > > > > > > > _______________________________________________ > > Id-event mailing list > > Id-event@ietf.org > > https://www.ietf.org/mailman/listinfo/id-event > > > > > _______________________________________________ > Id-event mailing list > Id-event@ietf..org > https://www.ietf.org/mailman/listinfo/id-event > > > > > > -- > > Adam Dawes | Sr. Product Manager | adawes@google.com | +1 650-214-2410 > > > > > > > -- > > Adam Dawes | Sr. Product Manager | adawes@google.com | +1 650-214-2410 > <+1%20650-214-2410> > > > > _______________________________________________ > Id-event mailing list > Id-event@ietf.org > > https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__www.ietf.org_mailm= an_listinfo_id-2Devent&d=3DDwICAg&c=3DRoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65ea= pI_JnE&r=3Dna5FVzBTWmanqWNy4DpctyXPpuYqPkAI1aLcLN4KZNA&m=3D3R8Gzz4c6jGa09ZH= ko6Ek_UtXDG8oyQPwyIPunbiSAQ&s=3D4a2fxkjOZSARRKA7He56h0TuV6oAPK3SRRpCJXszW5U= &e=3D > > > > > > > -- > > Adam Dawes | Sr. Product Manager | adawes@google.com | +1 650-214-2410 > > > --00000000000030be21057c64f4cd Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Agreed this was not captured in the original text. I did d= escribe it in a follow on email:

As to the '+' functionality, some= parties may use that to know it is the same subject at the host. For examp= le, if merchantfoo subscribed to receive events for subject=C2=A0alicesmith+merchantfoo@mailp= rovider.com=C2=A0from=C2=A0mailprovider.com, then=C2=A0mailprovider.com=C2=A0would canonicalize = the subject to=C2=A0 =C2=A0alicesmith@mailprovider.com.

=C2=A0<= /p>

While mer= chantfoo would use=C2=A0=C2=A0alicesmith+merchantfoo@mailprovider.com=C2=A0for sen= ding email, it would likely be useful for merchantfoo to know that=C2=A0=C2= =A0alicesmith@mail= provider.com=C2=A0and=C2=A0 =C2=A0alicesmith+merchantfoo@mailprovider.com=C2=A0are the same subject from a SET point of view. For example, if merc= hantfoo is attempting to find mutual subjects with a non-email provider,=C2= =A0socialfoo.com, t= hen they would ideally both use=C2=A0=C2=A0alicesmith@mailprovider.com=C2=A0even t= hough Alice had provided=C2=A0=C2=A0alicesmith+merchantfoo@mailprovider.com=C2=A0t= o merchantfoor and=C2=A0=C2=A0alicesmith+socialfoo@mailprovider.com=C2=A0to social= foo.


Using a generic domain is preferable to <= a href=3D"http://gmail.com">gmail.com.=C2=A0

I= would change this statemen= t to be "for the same SET subject"

On Thu, Dec 6, 2018 at 4:08 PM Richard Backma= n, Annabelle <richanna@amazon.com= > wrote:

(resurrecting this thread=E2=80=A6)

=C2=A0

There is one other angle that I think isn=E2=80=99t = quite captured in the text: SET Recipients may want to apply different cano= nicalization rules when resolving an Email Subject Identifier to one or mor= e accounts in their system than they do when resolving a user-supplied email address to a specific account. For example= , a service provider might consider =E2=80=9Cexample+foo@gmail.com=E2=80=9D and =E2= =80=9Cexample+= bar@gmail.com=E2=80=9D to be different, unrelated email addresses each = identifying a different, unrelated local account. However, when processing a SET from Google, that service provider might wa= nt to map any of =E2=80=9Cexample@gmail.com=E2=80=9D, =E2=80=9Cexample+foo@gmail.com=E2=80=9D, and = =E2=80=9Cexamp= le+bar@gmail.com=E2=80=9D onto BOTH local accounts, since they understa= nd that they are all just aliases for the same account on Google=E2=80=99s side.

=C2=A0

--=C2=A0

Annabelle Richard Backman

AWS Identity

=C2=A0

=C2=A0

From: = Id-event <id-event-bounces@ie= tf.org> on behalf of Adam Dawes <adawes=3D40google.com@dmarc.ietf.org&g= t;
Date: Friday, November 9, 2018 at 5:58 PM
To: Dick Hardt <dick.hardt@gmail.com>
Cc: Yaron Sheffer <yaronf.ietf@gmail.com>, ID Events Mailing List <id-event@ietf.org>= ;, Phil Hunt <= phil.hunt@oracle.com>
Subject: Re: [Id-event] stab at describing email canonicalization dr= agons

=C2=A0

=C2=A0

On Fri, Nov 9, 2018 at 3:58 PM Dick Hardt <dick.hardt@gmail.com> wrote:

Phil:=C2=A0RFC5321=C2=A0describes a valid email address, = it is not canonical.=C2=A0

=C2=A0

Adam: in my experience, we strip the dots in gmail a= ddresses, since we have learned that is what Google does. :)<= /p>

As to the '+' functionality, some parties ma= y use that to know it is the same subject at the host. For example, if merc= hantfoo subscribed to receive events for subject=C2=A0alicesmith+merchantfoo@mailprovider.com= =C2=A0from mailprovider.com,= then mailprovider.com would canonicalize the subject to=C2=A0 =C2=A0alicesmith@mailprovider.c= om.

=C2=A0

While merchantfoo would use=C2=A0=C2=A0alicesmith+merchantfoo@mailprov= ider.com=C2=A0for sending email, it would likely be useful for merchantfoo to know that=C2=A0=C2=A0alicesmith@mailprovider.com= =C2=A0and=C2=A0 =C2=A0alicesmith+merchantfoo@mailprovider.com=C2=A0are the same subject from a SET point of view. For example, if merchantfoo is = attempting to find mutual subjects with a non-email provider, socialfoo.com, then = they would ideally both use=C2=A0=C2=A0alicesmith@mailprovider.com=C2=A0even though Alice had provided=C2=A0=C2=A0alicesmith+merchantfoo@mailprovider.com=C2= =A0to merchantfoor and=C2=A0=C2=A0alicesmith+socialfoo@mailprovider.com=C2=A0to socialfoo.

=C2=A0

Exactly right

=C2=A0

In the WG meeting there was a discussion about stand= ardizing canonicalization, and the consensus in the meeting was that was ou= t of scope, but that it was important to call out the issue.<= /p>

=C2=A0

+1=C2=A0

It is useful to alert implementers that these issues= exist. As for solving the deeper problem, I was curious about whether that= was being contemplated. But it seems that is out of scope. Not surprised. = Always more things to do in the future!

=C2=A0

=C2=A0

=C2=A0

=C2=A0

=C2=A0

On Sat, Nov 10, 2018 at 2:28 AM Phil Hunt <phil.hunt@oracle.com> wrote:

Why is=C2=A0RFC5321=C2=A0not sufficient to define canonic= alization for email addresses?

=C2=A0

Phil

=C2=A0

Oracle Corporation, Clou= d Security and Identity Architect

@independentid=

phil.hunt@oracle.com



On Nov 9, 2018, at 10:50 AM, Adam Dawes <adawes= =3D40google.com@dmarc.ietf.org> wrote:

=C2=A0

= I think it does make sense to do the same canonicalization for SETs. But I = suspect that most canonicalization that apps do is purely focused on proper= lower casing. I would be more surprised if apps canonicalize on special characters like .,+ etc. I don't know = as if there are any guidance in the mail RFCs on how to treat these so I th= ink there are inconsistent treatments from mail providers. Some apps may un= derstand the conventions of larger mail providers but I suspect you're still going to have discrepancies that = are hard to iron out without fully understanding the mail provider's ca= nonicalization scheme. And some users expect that their mail will not be ca= noncialized. For example, Gmail provides the=C2=A0+ character so that a user can give unique addresses to each reci= pient=C2=A0alice.smith+merchantf= oo@mailprovider.com. If merchantfoo stripped the=C2=A0+ in canonicalizing, then Alice wouldn= 9;t be able to manage mail from merchantfoo as easily.=C2=A0<= /span>

=C2=A0

= On Thu, Nov 8, 2018 at 4:40 PM Dick Hardt <dick.hardt@gmail.com> wrote:<= /u>

= Hey Adam

= =C2=A0

= The problem you are describing is what I was attempting to capture. Since A= lice=C2=A0mailprovider.com=C2=A0remov= es dots,=C2=A0merchantfoo.comlikely has already figured out=C2=A0mailprover.com's canonicalization since Alice can enter=C2=A0alice.smith@mailprovider.com=C2=A0o= r=C2=A0al= icesmith@mailprovider.com=C2=A0at any site and receive email. The suggested text says=C2=A0merchantfoo.com= =C2=A0SHOULD do the same canonicalization for email subject identifiers that it already= does with emails entered by the user.

= =C2=A0

= Does that make sense? Suggested changes to the text?

= =C2=A0

= =C2=A0

= On Fri, Nov 9, 2018 at 4:52 AM Adam Dawes <adawes@google.com> wrote:

= I think this makes sense. However, I wanted to point out that there's a= higher level problem in that the Transmitter is providing it's canonic= alized identifier in the SET and this may not map to the receiver's canonicalized identifier.=C2=A0

= =C2=A0

= For example, Alice may have registered=C2=A0= al= ice.smith@mailprovider.com=C2=A0w= ith=C2=A0merchantfoo.com.. When=C2=A0mailprovider.com=C2=A0send= s a SET to=C2=A0merchantfoo.com, it could be for=C2=A0alicesmith@mailprovider.c= om

= =C2=A0

= merchantfoo can't effectively remap the event to the proper account on = their side without first knowing=C2=A0mailprovider.com's canonicalization scheme. I'm not sure what can be done about this abse= nt some way for=C2=A0mailprovider.com=C2=A0<= /span>to advertise its canonicalization scheme. Is there a suggestion to do that?

= =C2=A0

= On Thu, Nov 8, 2018 at 2:29 AM Dick Hardt <dick.hardt@gmail.com> wrote:<= /u>

= Agreed.

= =C2=A0

= On Thu, Nov 8, 2018 at 5:27 PM Yaron Sheffer <yaronf.ietf@gmail.com> wrote:

= Looks good, and I think this is a normative SHOULD.

Thanks,
=C2=A0 =C2=A0 =C2=A0 =C2=A0=C2=A0Yaro= n

On 08/11/2018 17:07, Dick Hardt wrote:
>=C2=A0
> Many email providers will treat the following email addresses as equiv= alent:
>=C2=A0
>=C2=A0johnsmith@example.com=C2=A0<mailto:johnsmith@example.com>
>=C2=A0JOHNSMITH@EXAMPLE.COM=C2=A0<mailto:JOHNSMITH@EXAMPLE.COM>
>=C2=A0JohnSmith@example.com=C2=A0<mailto:JohnSmith@example.com>
>=C2=A0john.smith@example.com=C2=A0<mailto:john.smith@example.com>
>=C2=A0
> This has led users to view these strings as equivalent, and has led to= =C2=A0
> email address canonicalization algorithms that are implementations=C2=A0
> specific, so that user entered email addresses resolve to the same=C2=A0
> canonical string.=C2=A0 When receiving an email identifier, the recipi= ent=C2=A0
> should use their implementation's canonicalization algorithm to re= solve=C2=A0
> to the same subject identifier string used in their system.
>=C2=A0
>=C2=A0
>=C2=A0
>=C2=A0
>=C2=A0
>=C2=A0
> _______________________________________________
> Id-event mailing list
>=C2=A0Id-event@ietf.org
>=C2=A0https://www.ietf.org/mailman/listinfo/id-eve= nt
>=C2=A0

= _______________________________________________
Id-event mailing list
Id-event@ietf..org
https://www.ietf.= org/mailman/listinfo/id-event

=

= =C2=A0

= --=C2=A0

A= dam Dawes=C2=A0|= =C2=A0Sr. Product Manager=C2=A0|=C2=A0adawes@go= ogle.com=C2=A0|=C2=A0+1 650-214-2410

= =C2=A0

=

= =C2=A0

= --=C2=A0

Adam Dawes=C2=A0|=C2=A0Sr. Product Manager=C2=A0|=C2=A0adawes@go= ogle.com=C2=A0|=C2=A0+1 650-214-2410

= =C2=A0

= _______________________________________________
Id-event mailing list
Id-event@ietf.org
https://urldefense.proofpoint.com= /v2/url?u=3Dhttps-3A__www.ietf.org_mailman_listinfo_id-2Devent&d=3DDwIC= Ag&c=3DRoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r=3Dna5FVzBTWman= qWNy4DpctyXPpuYqPkAI1aLcLN4KZNA&m=3D3R8Gzz4c6jGa09ZHko6Ek_UtXDG8oyQPwyI= PunbiSAQ&s=3D4a2fxkjOZSARRKA7He56h0TuV6oAPK3SRRpCJXszW5U&e=3D

=C2=A0


=C2=A0

--

Adam Dawes=C2=A0|=C2=A0Sr. Product Manager=C2=A0|=C2=A0adawes@go= ogle.com=C2=A0|=C2=A0+1 650-214-2410

=C2=A0

--00000000000030be21057c64f4cd-- From nobody Sun Dec 9 00:18:39 2018 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A720A130F06 for ; Sun, 9 Dec 2018 00:18:37 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.276 X-Spam-Level: X-Spam-Status: No, score=-1.276 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, MIME_HTML_ONLY=0.723, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JtY1cstOjc4j for ; Sun, 9 Dec 2018 00:18:36 -0800 (PST) Received: from mail-wm1-x32a.google.com (mail-wm1-x32a.google.com [IPv6:2a00:1450:4864:20::32a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8D29112008A for ; Sun, 9 Dec 2018 00:18:36 -0800 (PST) Received: by mail-wm1-x32a.google.com with SMTP id a62so558689wmh.4 for ; Sun, 09 Dec 2018 00:18:36 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=to:from:subject:message-id:date:user-agent:mime-version :content-language:content-transfer-encoding; bh=Oy5IsXtTB4MO8y1Ro8iOVmCF11AQp06NDkF0ziWHmpw=; b=J/FAFT1AR2Emf3YDhbUQuANjao50l06mv676SKPHRd27NmImikmPGL8/YcnSXznvYJ RpBFlBc4fzuAHM4w4WHsMuuPbRfYQsOAib6xeqDnGlqypcgGNdmbbnQSqpvsbng8eUUC Igv0pBpKw5TrBcpzEXzl2Su8HdmNJWzsOaLC4ZB+nZbfaMcbSFQBBn+MEdlwA3/vPuJB NInvvkZyE1r0a/M8n9Pu/DiKmPAG23srISO1pQAZo0EU1uYq450nL4hbU6+RzDrC+noy WdUH95/7eOELqj2Sb9+IxY007NL4UABydjTSEtwOW+zek1ejLmTDfEeslmhn9AQtwUYM bOJg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:to:from:subject:message-id:date:user-agent :mime-version:content-language:content-transfer-encoding; bh=Oy5IsXtTB4MO8y1Ro8iOVmCF11AQp06NDkF0ziWHmpw=; b=f+eCkCkUJMFziEt7axe05Idbbjr+9VvaKLmJg+znz8y4qKyTOUSM5S5bsT3qKzlDBX dB+Xk4XE/YAF02UMV72oKGNuDj7ALro2hvKtRgFYdsjIqnN5/Pr//8PDhn1+I0rH3MIJ CQiS+n/440l6nLzc/Inpd8zRCpn6T5Z0XSpADB25yGeZyJNGlvH4bIkH1XBiXOIAbHfD npEOOkgU7QZxzKpAo9DhfZfqsnnCmZ+j1gkCMzkvvCgINVnxhpiAcd5IuxXVQA3x2Y2D 8w2KoSv8lpfDalCvgGRZCkWYDYMBDyIDfsPe2XZniZ+X5W6ynLst5hrWuMuZYxYymAJc t36w== X-Gm-Message-State: AA+aEWbvIKJfNAZgyJ/SIoItrRiwh2zkntMFMQXl+muuN3YoxZE6dv4v eQLUcuacnN9YuKHxoaofyWVFB5qz X-Google-Smtp-Source: AFSGD/UyFZVLr26Kxb24/MtC44aeW+DNrcDtDeEg5af0Mc1B87h/qrODHt2UWl0BNDGrth4/ZSj5Tg== X-Received: by 2002:a1c:5d4f:: with SMTP id r76-v6mr7040525wmb.25.1544343514733; Sun, 09 Dec 2018 00:18:34 -0800 (PST) Received: from [172.18.129.22] (bzq-202-11.red.bezeqint.net. [212.179.202.11]) by smtp.gmail.com with ESMTPSA id m4sm8107964wmi.3.2018.12.09.00.18.33 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Sun, 09 Dec 2018 00:18:33 -0800 (PST) To: SecEvent From: Yaron Sheffer Message-ID: <7c72c196-3ba7-b884-9445-6a1c6ee92fd5@gmail.com> Date: Sun, 9 Dec 2018 10:18:32 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.2.1 MIME-Version: 1.0 Content-Type: text/html; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 8bit Archived-At: Subject: [Id-event] WGLC for draft-ietf-secevent-http-push-03 - delayed X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 09 Dec 2018 08:18:38 -0000 Dear SecEvent members,

There were no responses to the working group last call on draft-ietf-secevent-http-push-03. We will not send the document to IESG unless there is clear working group consensus behind it. We are planning to start a second WGLC after the new year. If we have WG consensus, good. Otherwise we will ask the authors to publish the document outside the working group.


Thanks,

     Dick and Yaron From nobody Mon Dec 17 13:55:00 2018 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DFC5612958B for ; Mon, 17 Dec 2018 13:54:58 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=pingidentity.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ttGhoNtcZYWE for ; Mon, 17 Dec 2018 13:54:56 -0800 (PST) Received: from mail-it1-x135.google.com (mail-it1-x135.google.com [IPv6:2607:f8b0:4864:20::135]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 74B8412426A for ; Mon, 17 Dec 2018 13:54:56 -0800 (PST) Received: by mail-it1-x135.google.com with SMTP id z7so1201550iti.0 for ; Mon, 17 Dec 2018 13:54:56 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pingidentity.com; s=gmail; h=mime-version:references:in-reply-to:from:date:message-id:subject:to; bh=mI+NGOsz7W3jIF8t9w1V9RrsO8oIacy8WWXQ7SGn4m4=; b=g6mFch+2l++1xSbWMqUYbiI3EIEb+MIXMIMG++gg58gNJZrUgwMxcyDV8qxRDvE+mp Epy5JPHYJOVENQ/wXI2YO+AXLdrSN7E4kz7VRk4IzIRaiDVMEUd4cJpyXEOwHlMQn/rT PyROOHD+DpqjyWqsY0ehGe1yJL4/vSthzq1Wo= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to; bh=mI+NGOsz7W3jIF8t9w1V9RrsO8oIacy8WWXQ7SGn4m4=; b=ea7buoZjbRYuCUgfzL8gH+5RcagtTjZAhkm1hjqzt9d2nG0/l0bwpTo9iphDrjQw41 dV772IUE7YrwEd0alEaCSPe3CLtILXczsDoVGWV1LeiWh42IJeLktwzQodxJ9zyM9VKl nkoCtd/SrniOBaLyHG7MretBJ44q8S0KWJx9nSypPn4Zqgw8DQgecHTYj6S5t4xPxBGr EP3BRwN401jd6/aghcPKTkaX5tBwJjplqBDsHPi8dTuGNFNKsj8BZaLap4njd3uPBujb Tmcy5njFN1CJKrKEQlXyocHutJ61bB5OUiyQG1UDVBoiku8SHNHkP/KkUjV0UasHRRWh 3XJA== X-Gm-Message-State: AA+aEWaAd5I737ZpU3GrmlowrmaziDAoUe5J+C7cXBZ9OoAys88bebu/ qoBDslHfIP9l0kZmkCOHnP7iUjHjqSEVQjj5A3wVKzRL3ddl5MNKWMURQpAeK2zdCpoxmoYMsgs D68HS+CEajrRK+J2J+83bikA= X-Google-Smtp-Source: AFSGD/W1KlC0oQwpfr1j3eES6WaDDZnaMHrau829sB74Ic+XiVoCtMru13EtiZXOdqPuzsFc5VBsBJqb0XGSXVr+7HA= X-Received: by 2002:a02:5f9d:: with SMTP id x29mr14346542jad.28.1545083695363; Mon, 17 Dec 2018 13:54:55 -0800 (PST) MIME-Version: 1.0 References: <154032516905.31277.5973427150641917289@ietfa.amsl.com> In-Reply-To: <154032516905.31277.5973427150641917289@ietfa.amsl.com> From: Brian Campbell Date: Mon, 17 Dec 2018 14:54:29 -0700 Message-ID: To: ID Events Mailing List Content-Type: multipart/alternative; boundary="000000000000cfa04c057d3ed41e" Archived-At: Subject: [Id-event] JWT claim name in draft-ietf-secevent-subject-identifiers? X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 17 Dec 2018 21:54:59 -0000 --000000000000cfa04c057d3ed41e Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable During the meeting in Bangkok I asked about whether this document should define a JWT claim for subject identifier and said I'd followup on the list with the question. It took me a while to get to that but here it is. Some background behind the question is that I was working on some examples for the draft OpenID Connect Client Initiated Backchannel Authentication specification and there was a place where a subject identifier in a JWT seemed like a good fit for one of the examples (where the calling client makes a request that has have some way of identifying the end-user and in a token is one such way). So I consulted draft-ietf-secevent-subject-identifiers-02 to see how to do it and was somewhat surprised to find that there wasn't a JWT claim name defined to carry the subject identifier. I ended up using "subject" in the login_hint_token parameter at the end of https://openid.net/specs/openid-client-initiated-backchannel-authentication= -core-1_0.html#auth_request because it seemed the closest thing to convention there was. But that left me wondering why draft-ietf-secevent-subject-identifiers-02 hadn't defined a claim and whether maybe it should. Or, if not, whether maybe a bit of explanation as to why not might be useful and/or some guidance to users of subject-identifiers or specifications using or profiling it about the need to agree on a claim name that will carry the subject identifier value. On Tue, Oct 23, 2018 at 2:06 PM wrote: > > A New Internet-Draft is available from the on-line Internet-Drafts > directories. > This draft is a work item of the Security Events WG of the IETF. > > Title : Subject Identifiers for Security Event Tokens > Authors : Annabelle Backman > Marius Scurtescu > Filename : draft-ietf-secevent-subject-identifiers-02.txt > Pages : 10 > Date : 2018-10-23 > > Abstract: > Security events communicated within Security Event Tokens may support > a variety of identifiers to identify the subject and/or other > principals related to the event. This specification formalizes the > notion of subject identifiers as named sets of well-defined claims > describing the subject, a mechanism for representing subject > identifiers within a [JSON] object such as a JSON Web Token [JWT] or > Security Event Token [SET], and a registry for defining and > allocating names for these claim sets. > > > The IETF datatracker status page for this draft is: > https://datatracker.ietf.org/doc/draft-ietf-secevent-subject-identifiers/ > > There are also htmlized versions available at: > https://tools.ietf.org/html/draft-ietf-secevent-subject-identifiers-02 > > https://datatracker.ietf.org/doc/html/draft-ietf-secevent-subject-identif= iers-02 > > A diff from the previous version is available at: > > https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-secevent-subject-identifie= rs-02 > > > Please note that it may take a couple of minutes from the time of > submission > until the htmlized version and diff are available at tools.ietf.org. > > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ > > _______________________________________________ > Id-event mailing list > Id-event@ietf.org > https://www.ietf.org/mailman/listinfo/id-event > --=20 _CONFIDENTIALITY NOTICE: This email may contain confidential and privileged= =20 material for the sole use of the intended recipient(s). Any review, use,=20 distribution or disclosure by others is strictly prohibited.=C2=A0 If you h= ave=20 received this communication in error, please notify the sender immediately= =20 by e-mail and delete the message and any file attachments from your=20 computer. Thank you._ --000000000000cfa04c057d3ed41e Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
During the meeting in Bangkok I asked about whether this document should= define a JWT claim for subject identifier and said I'd followup on the= list with the question. It took me a while to get to that but here it is. =

Some background behind the questi= on is that I was working on some examples for the draft OpenID Connect Client Initiated Backchannel Authe= ntication specification and there was a place where a subject identifie= r in a JWT seemed like a good fit for one of the examples (where the callin= g client makes a request that has have some way of identifying the end-user= and in a token is one such way). So I consulted draft-ietf-secevent-subject-identifiers-02= to see how to do it and was somewhat surprised to find that there wasn'= ;t a JWT claim name defined to carry the subject identifier. I ended up usi= ng "subject" in the login_hint_token parameter at the end of https://openid.net/sp= ecs/openid-client-initiated-backchannel-authentication-core-1_0.html#auth_r= equest because it seemed the closest thing to convention there was.

But that left me wondering why draft-ietf-seceve= nt-subject-identifiers-02 hadn't defined a claim and whether maybe it s= hould. Or, if not, whether maybe a bit of explanation as to why not might b= e useful and/or some guidance to users of subject-identifiers or specificat= ions using or profiling it about the need to agree on a claim name that wil= l carry the subject identifier value.


On Tue, Oct 23, 2018 at 2:06 PM <internet-drafts@ietf.org> wrote:
=

A New Internet-Draft is available from the on-line Internet-Drafts director= ies.
This draft is a work item of the Security Events WG of the IETF.

=C2=A0 =C2=A0 =C2=A0 =C2=A0 Title=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0:= Subject Identifiers for Security Event Tokens
=C2=A0 =C2=A0 =C2=A0 =C2=A0 Authors=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0: Anna= belle Backman
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 Marius Scurtescu
=C2=A0 =C2=A0 =C2=A0 =C2=A0 Filename=C2=A0 =C2=A0 =C2=A0 =C2=A0 : draft-iet= f-secevent-subject-identifiers-02.txt
=C2=A0 =C2=A0 =C2=A0 =C2=A0 Pages=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0:= 10
=C2=A0 =C2=A0 =C2=A0 =C2=A0 Date=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 := 2018-10-23

Abstract:
=C2=A0 =C2=A0Security events communicated within Security Event Tokens may = support
=C2=A0 =C2=A0a variety of identifiers to identify the subject and/or other<= br> =C2=A0 =C2=A0principals related to the event.=C2=A0 This specification form= alizes the
=C2=A0 =C2=A0notion of subject identifiers as named sets of well-defined cl= aims
=C2=A0 =C2=A0describing the subject, a mechanism for representing subject =C2=A0 =C2=A0identifiers within a [JSON] object such as a JSON Web Token [J= WT] or
=C2=A0 =C2=A0Security Event Token [SET], and a registry for defining and =C2=A0 =C2=A0allocating names for these claim sets.


The IETF datatracker status page for this draft is:
https://datatracker.ietf.or= g/doc/draft-ietf-secevent-subject-identifiers/

There are also htmlized versions available at:
https://tools.ietf.org/html/dr= aft-ietf-secevent-subject-identifiers-02
https://datatracker.= ietf.org/doc/html/draft-ietf-secevent-subject-identifiers-02

A diff from the previous version is available at:
https://www.ietf.org/r= fcdiff?url2=3Ddraft-ietf-secevent-subject-identifiers-02


Please note that it may take a couple of minutes from the time of submissio= n
until the htmlized version and diff are available at tools.ietf.org.

Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/

_______________________________________________
Id-event mailing list
Id-event@ietf.org
https://www.ietf.org/mailman/listinfo/id-event

<= span style=3D"margin:0px;padding:0px;border:0px;outline:0px;vertical-align:= baseline;background:transparent;font-family:proxima-nova-zendesk,system-ui,= -apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,Oxygen-Sans,Ub= untu,Cantarell,"Helvetica Neue",Arial,sans-serif;font-weight:600"= >CONFIDENTIALITY NOTICE: This email may contain confidenti= al and privileged material for the sole use of the intended recipient(s). A= ny review, use, distribution or disclosure by others is strictly prohibited= .=C2=A0 If you have received this communication in error, please notify the= sender immediately by e-mail and delete the message and any file attachmen= ts from your computer. Thank you. --000000000000cfa04c057d3ed41e-- From nobody Thu Dec 27 03:56:20 2018 Return-Path: X-Original-To: id-event@ietf.org Delivered-To: id-event@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 3DDD5127133; Thu, 27 Dec 2018 03:56:18 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: IETF Meeting Session Request Tool To: Cc: secevent-chairs@ietf.org, yaronf.ietf@gmail.com, id-event@ietf.org, kaduk@mit.edu X-Test-IDTracker: no X-IETF-IDTracker: 6.89.2 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <154591177817.11886.2246937559649079123.idtracker@ietfa.amsl.com> Date: Thu, 27 Dec 2018 03:56:18 -0800 Archived-At: Subject: [Id-event] secevent - New Meeting Session Request for IETF 104 X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.29 List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 27 Dec 2018 11:56:19 -0000 A new meeting session request has just been submitted by Yaron Sheffer, a Chair of the secevent working group. --------------------------------------------------------- Working Group Name: Security Events Area Name: Security Area Session Requester: Yaron Sheffer Number of Sessions: 1 Length of Session(s): 2 Hours Number of Attendees: 50 Conflicts to Avoid: First Priority: saag dispatch oauth tokbind tls acme secdispatch Second Priority: ipsecme sacm ace People who must be present: Yaron Sheffer Dick Hardt Benjamin Kaduk Resources Requested: Special Requests: Please avoid conflict with CFRG ---------------------------------------------------------