From nobody Mon Jul 1 06:47:04 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 645D81200C1 for ; Mon, 1 Jul 2019 06:47:02 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.749 X-Spam-Level: X-Spam-Status: No, score=-1.749 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cJ22GWAnRyQ7 for ; Mon, 1 Jul 2019 06:47:01 -0700 (PDT) Received: from mail-vs1-xe30.google.com (mail-vs1-xe30.google.com [IPv6:2607:f8b0:4864:20::e30]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E4295120019 for ; Mon, 1 Jul 2019 06:47:00 -0700 (PDT) Received: by mail-vs1-xe30.google.com with SMTP id s141so5882327vsc.3 for ; Mon, 01 Jul 2019 06:47:00 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=NvtNZMzXP3Ias0zTtS9g7+/FV07EcclA+BF+a0DNQFk=; b=qL7sNtUWkKi8PljTDHY5HgylmmiRZ7bjFDwPUlVTHV+0e7vgOuk25Zi8r/5ArCx0fs VgwOecns88lUxqiEnvm9Z3iyxth4IgsIa8jNDQA+GjmFkKPCCX8VeeduBp7o5CU1q7f1 RIhD9ZItSyD8GkVkRgmKvRK/jpO1ezGaJkdY0H2pW/65P/32IHVMkuJa8csgLEX6lorV m7oPlwQG14ZmWwJkiwZqdBXRgAXiMabEZK0ZnN7dZwcCbn1yVhUH/jOyM/hGxZA7scwm SyyypbbrveSVrruFFUq3VZt/SQFTNht/Nx+ucoe+YX6zuL/dXpBwF5hI/QmqYTUV64f1 NasA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=NvtNZMzXP3Ias0zTtS9g7+/FV07EcclA+BF+a0DNQFk=; b=IwTJxdvvT04qiVV5G5fmeg4eHNNFT3xZtsWCNHHlr7ujGDFZjrjtMsZlMkWospcJeQ 9y9LxLzT8i0AGH/np5It3V7TC/LTJ8fgfYKkABAstcbNjfodG1zUQQLomydLwTEIYyK8 pHBKh6wVCaXKwkae5TzjPU7HhPlb6k1ugoYeBrWds9Smmlfw0vGZW0yLlum0r1b/pzii fD64+EtaxY/8S++xScGzHe+X4EdqXx8RW27KhA1NbJCNQw5UHSDjTiszqUdW+x5Wj9+I aZGrKWkEJ0cXEjv31HX1JzVB/dPO5ED9fDyYyOdkllYTBe/AIklrQkb+Fp9CPsfmj0A+ y/Rw== X-Gm-Message-State: APjAAAXwFxLpRAnURKh8WGuP34rraEp88I6FcJVz/KAxChMsbQHtGY8W ABJ0gTIIhKaITCcXBxokD6Y9n4yrZW1kDaLf3KA= X-Google-Smtp-Source: APXvYqzBEkJAtLv+fcrJniCLPZBueSw9JulBPxfqKal/QgqkonJhc/NPVB5lPaQdK8TmvD278liZEX9JOdHtHulS4x4= X-Received: by 2002:a67:d39e:: with SMTP id b30mr14496306vsj.212.1561988819907; Mon, 01 Jul 2019 06:46:59 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: Lucas Pardue Date: Mon, 1 Jul 2019 14:46:48 +0100 Message-ID: Subject: Re: Analysing the HTTP/3 error code space To: Mike Bishop Cc: Kazuho Oku , Martin Duke , Ian Swett , QUIC WG Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 01 Jul 2019 13:47:02 -0000 On Wed, Jun 26, 2019 at 12:29 AM Mike Bishop wrote: > > For those not following GitHub closely, I=E2=80=99d like to point out tha= t these proposals have shown up as PRs, and that they have been reviewed by= a few of us over there. I plan to merge later this week, modulo any objec= tions. > > #2808 makes the H2 comparison point from PROTOCOL_ERROR to GENERAL_PROTOC= OL_ERROR, while noting that H3 has more specific error codes for some thing= s that were PE in H2 > #2813: Expands the use of REQUEST_CANCELLED to cancelling push streams a= nd removes the more specific error codes for why one might not want the pus= hed content > #2814: Collects anything that could be wrong with the payload of a SETTI= NGS frame (server settings sent by clients, duplicates) into SETTINGS_ERROR > #2820: Groups LIMIT_EXCEEDED and various misuses of Push IDs into a sing= le error code (ID_ERROR) for any misuse of identifiers defined by HTTP > #2822: Groups UNKNOWN_STREAM_TYPE, WRONG_STREAM_COUNT, and WRONG_STREAM_= DIRECTION into a single error code (STREAM_CREATION_ERROR) for any reason w= hy a newly opened unidirectional stream is unacceptable to the recipient > These were merged (thanks Mike!) so I rebased and updated PR 2662 [1] that replaces HTTP_MALFORMED_FRAME with simpler code points [2]. It does a few things: * Resurrects H2's FRAME_SIZE_ERROR but broadens it to include frame layout errors - name is HTTP_FRAME_ERROR. * Introduces a new error code HTTP_INVALID_PRIORITY that captures cases where a frame with valid wire layout attempts to create a prioritization relationship (see additional point below). * Replaces occurrences of HTTP_MALFORMED_FRAME with: HTTP_ID_ERROR, HTTP_FRAME_ERROR, HTTP_INVALID_PRIORITY as appropriate. * Reshuffles all of the error codes. In doing so, I tried to align the code space with H2 and avoid there being any gaps. I'm not 100% convinced we need a HTTP_INVALID_PRIORITY code. I'm open to simply using HTTP_FRAME_ERROR. HTTP_SETTINGS_ERROR and HTTP_MISSING_SETTINGS are candidates to be consolidated (either together, or into another code). This is dependent on discussion in (and related to) #2783. I suggest we solve that in a different PR. Feedback on this thread or the PR is welcome. [1] https://github.com/quicwg/base-drafts/pull/2662 [2] https://github.com/quicwg/base-drafts/issues/2551 From nobody Mon Jul 1 23:00:43 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2A3961200A4 for ; Mon, 1 Jul 2019 23:00:15 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.896 X-Spam-Level: X-Spam-Status: No, score=-1.896 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id w4UD7aAoNlsg for ; Mon, 1 Jul 2019 23:00:12 -0700 (PDT) Received: from emh01.mail.saunalahti.fi (emh01.mail.saunalahti.fi [62.142.5.107]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CC96612004D for ; Mon, 1 Jul 2019 23:00:11 -0700 (PDT) Received: from eggert.org (unknown [62.248.255.8]) by emh01.mail.saunalahti.fi (Postfix) with ESMTP id 65CEB20096 for ; Tue, 2 Jul 2019 09:00:09 +0300 (EEST) Received: from slate.eggert.org (Slate.eggert.org [172.19.235.111]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by eggert.org (Postfix) with ESMTPSA id 3DB0064610A for ; Tue, 2 Jul 2019 09:00:05 +0300 (EEST) From: Lars Eggert Content-Type: multipart/signed; boundary="Apple-Mail=_0E364C60-4668-4B9C-AF49-0E1F4E5D648D"; protocol="application/pgp-signature"; micalg=pgp-sha512 Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Subject: Fwd: [105attendees] IRTF ANRW at IETF 105 Message-Id: References: <361ECB8E-03B4-4C73-B597-5E66124A9F05@csperkins.org> To: QUIC IETF mailing list Date: Tue, 2 Jul 2019 09:00:04 +0300 X-MailScanner-ID: 3DB0064610A.A048F X-MailScanner: Found to be clean X-MailScanner-From: lars@eggert.org Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 02 Jul 2019 06:00:15 -0000 --Apple-Mail=_0E364C60-4668-4B9C-AF49-0E1F4E5D648D Content-Type: multipart/alternative; boundary="Apple-Mail=_02786413-1F68-4956-BF33-F98795C70D51" --Apple-Mail=_02786413-1F68-4956-BF33-F98795C70D51 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 FYI, some QUIC-related talks at the ANRW (as well as otherwise = interesting & related stuff!) Begin forwarded message: >=20 > From: Colin Perkins > Subject: [105attendees] IRTF ANRW at IETF 105 > Date: July 1, 2019 at 20:28:46 GMT+3 > To: 105attendees@ietf.org >=20 > The IRTF/ACM Applied Networking Research Workshop will be held on 22 = July 2019, co-located with the IETF 105 meeting in Montreal. The = workshop provides a forum for researchers, vendors, network operators = and the Internet standards community to present and discuss emerging = results in applied networking research. >=20 > The programme for the workshop is available at = https://irtf.org/anrw/2019/program.html - there will be talks on several = topics likely of interest to the IETF community, including QUIC, DNS and = DoH, NTP, ALTO, middleboxes, and network measurement. >=20 > Attendance is free for those registered to attend IETF 105, but you = MUST pre-register for the ANRW if you=E2=80=99d like to attend using the = form at https://irtf.org/anrw/2019/attend.html >=20 > Colin Perkins > As IRTF Chair >=20 > -- > 105attendees mailing list > 105attendees@ietf.org > https://www.ietf.org/mailman/listinfo/105attendees --Apple-Mail=_02786413-1F68-4956-BF33-F98795C70D51 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 FYI, = some QUIC-related talks at the ANRW (as well as otherwise interesting = & related stuff!)

Begin = forwarded message:

From: = Colin Perkins <csp@csperkins.org>
Subject: = [105attendees] = IRTF ANRW at IETF 105
Date: = July 1, 2019 at 20:28:46 = GMT+3
To: = 105attendees@ietf.org

The IRTF/ACM Applied = Networking Research Workshop will be held on 22 July 2019, co-located = with the IETF 105 meeting in Montreal. The workshop provides a forum for = researchers, vendors, network operators and the Internet standards = community to present and discuss emerging results in applied networking = research.

The programme for the workshop is = available at https://irtf.org/anrw/2019/program.html - there will be = talks on several topics likely of interest to the IETF community, = including QUIC, DNS and DoH, NTP, ALTO, middleboxes, and network = measurement.

Attendance is free for those = registered to attend IETF 105, but you MUST pre-register for the ANRW if = you=E2=80=99d like to attend using the form at https://irtf.org/anrw/2019/attend.html

Colin Perkins
As IRTF Chair

--
105attendees mailing list
105attendees@ietf.org
https://www.ietf.org/mailman/listinfo/105attendees

= --Apple-Mail=_02786413-1F68-4956-BF33-F98795C70D51-- --Apple-Mail=_0E364C60-4668-4B9C-AF49-0E1F4E5D648D Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEDrrUO3PMwKM8fddaHbmKvSnuNPgFAl0a8uQACgkQHbmKvSnu NPigpg/+KRKRzRlmbcpMUV5ImJ0X76NnyOTZK+YlBzwB3n7Z2aFerj7MogMkiJS6 a5FBUUHHhli2maFCEg+7TbCSiQo/R+vCOVpm5rJVgL0MZ6BVCLyJ9uHcFCCeonZS 6uU2+l4qES8b4cJ/27psh7ql8VC+Qo+TeUz9FBmbLGNEOGnAUjhFboXaB41I9KT/ yAYMg3mwl+Z6CPLGw60c6H0SqFdoNs5GDCxOTHiLvziMeFWkMaBcijNTkImowFFb vJLogb7XZaLDeybhgycwpyuK41ewI5E97IK4DkkcDN8gnxPo3DmcSONm4cXxh4ZH +86/fvSURxOCYG2RUJe41prh9h0uoKySze+Lflud8vwCaKwd5ME6jTU1KJP1uw9j RpW0ropSANiLXVCBPG3ytkSMBwPRijIvV7ZcybgAUZC4r/OF8jK7H8618Dk05SHO YJF+YKqqlud67hZDeNftv78xym/nLNOOo4AL5CQbeI8M05yE1UQKz7WUfMJsFJtV +huq8CPs9H4nokM2Q22vwlHn8D536/iDVoA2aPWG3ToEDbF76tc+uYc7qVgAfV3S u4AaSv8rPxPmSdWRZB8+Doi9beVIIYIm+5eAuc6dawUUGOasHLT5UsBAUcUBIPK7 ZtFG/4Y8xtj6cb9J+IKvzMYIrptlTMIml+kf9MztnGkQjeM+790= =Nunx -----END PGP SIGNATURE----- --Apple-Mail=_0E364C60-4668-4B9C-AF49-0E1F4E5D648D-- From nobody Wed Jul 3 11:07:01 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B3413120432 for ; Wed, 3 Jul 2019 11:06:58 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id D2FHAw3M52g4 for ; Wed, 3 Jul 2019 11:06:56 -0700 (PDT) Received: from mail-lj1-x22d.google.com (mail-lj1-x22d.google.com [IPv6:2a00:1450:4864:20::22d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8B0C912041E for ; Wed, 3 Jul 2019 11:06:56 -0700 (PDT) Received: by mail-lj1-x22d.google.com with SMTP id v18so3437769ljh.6 for ; Wed, 03 Jul 2019 11:06:56 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=Q1DhP4HLdj53KbpzgEu0lGY6hACqZj+mOGcmLf4PV1o=; b=qBMVYZIWqjEFqzCh79NKgQ465HFC7WwkR0Maf2YWoDuk07dwZnQwY9BVDlTfApIM2T 0v/Bqifb7YW1GYWRmuyr4enXkXgArsFO526XlA9IG9qws/2+ddj1lyy9tXmOEaU4cROT /4LYeiMeVddLZt5iGNO/1C1EWYktSy6ia3WnHtONqfPQELeAKRVsTelsnuNPriqxyzmZ yVczMwzTHADElMnpHaTUXPhfp9bl/FgpjmkUy9S7wAeHl4XKuaJ0xbTeh4doHvh+l8XX hS/Ej5Q6m4ZCrfFeaHqFb2WYdpYmu6ggLE3Audu69Hd8w9Zagzj5pV33FC5grrVirStn xj7w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=Q1DhP4HLdj53KbpzgEu0lGY6hACqZj+mOGcmLf4PV1o=; b=pMiktGMx4ph1HHtEg/uuH17bJSTLUSrdwn71TO9sxyCydQqoJh6upSA9EoGEjcm0vl vTrtE0nsG7Hl+JTi/X+G5AestlKLujHnT+aRL3wgpnwhZUC9HZyNHcs1uMh4Dns2klB+ Z47m9h8cVmhV0BQmyD28C7zyR5QrYF8CN6u1Kx7O+Ym3WfPFOKryZZmNsXC2wCrk4N8H gUflq66eDFJsekp+6ABgDQL+nuPtLKZ4EyKJJ0XUL5l/ChnDgawHzDzcyKQPWpt+TJM3 TSnz8gPyznDTeMLjkfrbMlXrUzT0F+ixYevAZoLSPS+8rOUI19MkXsL5EOXDlzd5tNaP j4sQ== X-Gm-Message-State: APjAAAXk6r6WV1FzMOG3eEs6G9n3hTWF35vBnaSbTm8TqMiytO6Z+cXa 3EyVgD4OvJaXO9Vx3RS7B6OwAS4JPbJ5O08WiFsAXS/D X-Google-Smtp-Source: APXvYqxzf8Kvk5Zret5e+tT/bnBw6FKF94jZHk9yZe6j0bgYeOVh4VtTpraNAmAVfZI0ytFIDIQfQMbi+w2c3/D3bdg= X-Received: by 2002:a2e:4a1a:: with SMTP id x26mr19205932lja.207.1562177214082; Wed, 03 Jul 2019 11:06:54 -0700 (PDT) MIME-Version: 1.0 From: Bernard Aboba Date: Wed, 3 Jul 2019 11:06:43 -0700 Message-ID: Subject: QUIC API Origin Trial To: QUIC WG Content-Type: multipart/alternative; boundary="000000000000ebf254058ccab96f" Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 03 Jul 2019 18:06:59 -0000 --000000000000ebf254058ccab96f Content-Type: text/plain; charset="UTF-8" We did a ClueCon Weekly session yesterday on the QUIC APIs currently in Origin Trial in Chrome and Edge Preview. This includes links to documentation, demos, etc. https://www.youtube.com/watch?v=964yH8GoD-I --000000000000ebf254058ccab96f Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
We did a ClueCon Weekly session yesterday on the QUIC APIs= currently in Origin Trial in Chrome and Edge Preview.=C2=A0 This includes = links to documentation, demos, etc.=C2=A0

--000000000000ebf254058ccab96f-- From nobody Wed Jul 3 15:29:17 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 93378120677 for ; Wed, 3 Jul 2019 15:29:08 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TZO3FqfQRE8R for ; Wed, 3 Jul 2019 15:29:06 -0700 (PDT) Received: from magic.dirtside.com (magic.dirtside.com [199.33.225.25]) by ietfa.amsl.com (Postfix) with ESMTP id 28441120672 for ; Wed, 3 Jul 2019 15:29:06 -0700 (PDT) Received: from minoc.dirtside.com ([199.33.225.53]) by magic.dirtside.com (8.14.3/) with ESMTP id x63MSowJ014790 for ; Wed, 3 Jul 2019 15:28:50 -0700 X-Really-To: Received: from mail-pl1-f174.google.com (mail-pl1-f174.google.com [209.85.214.174]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by minoc.dirtside.com (Postfix) with ESMTPSA id DF577EBDB5 for ; Wed, 3 Jul 2019 15:28:49 -0700 (PDT) Received: by mail-pl1-f174.google.com with SMTP id a93so1972455pla.7 for ; Wed, 03 Jul 2019 15:28:49 -0700 (PDT) X-Gm-Message-State: APjAAAV72czWVf5eTYPkuOnfKiyzMDiTItk6VsfzPVJRAzRVz4/7JQv4 Pu1MXoJLjsFRViwirnJJVnGuFhWsDPw1SEF/8H8= X-Google-Smtp-Source: APXvYqy4JQE5L9qeUBZvpSxBjUVOe7fjTdV9IwgpgGoexWBIBblTEs6AgTTU9b3vQFJc7yqhbVJqAg7AhzVDbkJEpns= X-Received: by 2002:a17:902:aa5:: with SMTP id 34mr46637117plp.166.1562192929639; Wed, 03 Jul 2019 15:28:49 -0700 (PDT) MIME-Version: 1.0 From: William Herrin Date: Wed, 3 Jul 2019 15:28:38 -0700 X-Gmail-Original-Message-ID: Message-ID: Subject: Question about 0-RTT To: quic@ietf.org Content-Type: multipart/alternative; boundary="000000000000a4550b058cce62b0" X-Spam-Checker: magic.dirtside.com Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 03 Jul 2019 22:29:15 -0000 --000000000000a4550b058cce62b0 Content-Type: text/plain; charset="UTF-8" Hi folks, Reading https://tools.ietf.org/html/draft-ietf-quic-transport-20, I have a question about 0-RTT: What is it? The draft talks a lot about it, but I didn't see anywhere that clearly defined what it is. When I see "RTT" without a definition I tend to think "round trip time," but the explanation of 0-RTT seems to have more to do with encryption setup during connection initialization than any tie to which round trip completes the setup. I find this confusing. Would someone comment and either show me the definition I missed or add one to the next draft? Thanks, Bill Herrin -- William Herrin bill@herrin.us https://bill.herrin.us/ --000000000000a4550b058cce62b0 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi folks,

Reading=C2= =A0htt= ps://tools.ietf.org/html/draft-ietf-quic-transport-20, I have a questio= n about 0-RTT: What is it?

The draft talks a lot a= bout it, but I didn't see anywhere that clearly defined what it is. Whe= n I see "RTT" without a definition I tend to think "round tr= ip time," but the explanation of 0-RTT seems to have more to do with e= ncryption setup during connection initialization than any tie to which roun= d trip completes the setup. I find this confusing.
Would someone comment and either show me the definition I miss= ed or add one to the next draft?

Thanks,
Bill Herrin

--
--000000000000a4550b058cce62b0-- From nobody Wed Jul 3 16:22:05 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 432C7120694 for ; Wed, 3 Jul 2019 16:21:57 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=akamai.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FJzD9bAyTDs1 for ; Wed, 3 Jul 2019 16:21:54 -0700 (PDT) Received: from mx0a-00190b01.pphosted.com (mx0a-00190b01.pphosted.com [IPv6:2620:100:9001:583::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7EDB5120670 for ; Wed, 3 Jul 2019 16:21:54 -0700 (PDT) Received: from pps.filterd (m0050095.ppops.net [127.0.0.1]) by m0050095.ppops.net-00190b01. (8.16.0.27/8.16.0.27) with SMTP id x63NLaOf011078; Thu, 4 Jul 2019 00:21:36 +0100 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=akamai.com; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : mime-version; s=jan2016.eng; bh=1Q0ZhXLWaTAwEYDc869nFUoVeMPjOwXuAf8MFCsYPAg=; b=Wp1wH5mvbGPipgDHc9VwtHZ2+eUUxWQDTijwCivIzuc0HjFKEW+mseiqX4mkpLm78zZ9 qHVXU5JhefgUTK7WopJEOUFMqkARtHieJZOoE2u4nJqilp2PWvzVY/A7Izy87naWkfH5 1gjzW9yQpu0rLv1nIINp35BAMGLNHv75qdetjqyoBLqst/5UVDRXDlXuYc2sPaTH6jsY Dfbf1inQgV7mAfmL2gjSxWrxMYJ/bpbGZy4lsa4/eDzOa9wFLnyIYUeBhAY5VSl9nb1z hBWW0b13N2bKa6i/jmcqDDC3ClTqtAQmsIcJ0vQENezvrApjZoiA286ZvbaIYXysHILH EA== Received: from prod-mail-ppoint4 (prod-mail-ppoint4.akamai.com [96.6.114.87] (may be forged)) by m0050095.ppops.net-00190b01. with ESMTP id 2th0v7s4vq-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Thu, 04 Jul 2019 00:21:36 +0100 Received: from pps.filterd (prod-mail-ppoint4.akamai.com [127.0.0.1]) by prod-mail-ppoint4.akamai.com (8.16.0.27/8.16.0.27) with SMTP id x63NHJW9032506; Wed, 3 Jul 2019 19:21:35 -0400 Received: from email.msg.corp.akamai.com ([172.27.25.32]) by prod-mail-ppoint4.akamai.com with ESMTP id 2te3ay1bjn-2 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT); Wed, 03 Jul 2019 19:21:34 -0400 Received: from USTX2EX-DAG1MB5.msg.corp.akamai.com (172.27.27.105) by ustx2ex-dag1mb3.msg.corp.akamai.com (172.27.27.103) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Wed, 3 Jul 2019 18:21:29 -0500 Received: from USTX2EX-DAG1MB5.msg.corp.akamai.com ([172.27.27.105]) by ustx2ex-dag1mb5.msg.corp.akamai.com ([172.27.27.105]) with mapi id 15.00.1473.004; Wed, 3 Jul 2019 18:21:29 -0500 From: "Lubashev, Igor" To: William Herrin CC: "quic@ietf.org" Subject: RE: Question about 0-RTT Thread-Topic: Question about 0-RTT Thread-Index: AQHVMe7WATOS4EDkz02CwqZTPlVkl6a5g/uA Date: Wed, 3 Jul 2019 23:21:28 +0000 Message-ID: <0f590cac8f424b808fe0d77c203321a0@ustx2ex-dag1mb5.msg.corp.akamai.com> References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [172.19.32.189] Content-Type: multipart/alternative; boundary="_000_0f590cac8f424b808fe0d77c203321a0ustx2exdag1mb5msgcorpak_" MIME-Version: 1.0 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2019-07-03_06:, , signatures=0 X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 suspectscore=0 malwarescore=0 phishscore=0 bulkscore=0 spamscore=0 mlxscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1810050000 definitions=main-1907030286 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2019-07-03_06:, , signatures=0 X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1011 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1810050000 definitions=main-1907030287 Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 03 Jul 2019 23:22:04 -0000 --_000_0f590cac8f424b808fe0d77c203321a0ustx2exdag1mb5msgcorpak_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgQmlsbCwNCg0KMC1SVFQgaXMgYSB0ZXJtIGNvbW1vbmx5IHVzZWQgYnkgVExTIOKAkyB0aGUg Y3J5cHRvIHByb3RvY29sIHRoYXQgUVVJQyB1c2VzIHRvIHNlY3VyZSBkYXRhLg0KU2VlIGh0dHBz Oi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9yZmM4NDQ2I3NlY3Rpb24tMi4zLg0KDQowLVJUVCBpcyBh IGZlYXR1cmUgb2YgYSBwcm90b2NvbCB0aGF0IGFsbG93cyBkYXRhIHRvIGJlIGRlbGl2ZXJlZCB0 byB0aGUgb3RoZXIgZW5kcG9pbnQgaW4gbGVzcyB0aGFuIDEgUlRUIChyb3VuZCB0cmlwIHRpbWUp IGZyb20gdGhlIGNvbm5lY3Rpb24gaW5pdGlhdGlvbiAobW9yZSBhY2N1cmF0ZWx5LCBpdCBpcyBh IHByb3RvY29sIGZlYXR1cmUgdGhhdCBhbGxvd3MgZGF0YSB0byBiZSBzZW50IGJlZm9yZSB0aGUg cHJvdG9jb2wgaGFuZHNoYWtlIGlzIGNvbXBsZXRlKS4NCg0KMC1SVFQgZGF0YSAoYWxzbyBrbm93 biBhcyDigJxlYXJseSBkYXRh4oCdKSBpcyB0aGUgZGF0YSB0aGF0IGlzIHNlbnQgYmVmb3JlIHRo ZSBoYW5kc2hha2UgY29tcGxldGlvbi4gIDAtUlRUIHBhY2tldHMgYXJlIHBhY2tldHMgY29udGFp bmluZyAwLVJUVCBkYXRhLg0KDQoNCiAgKiAgIElnb3INCg0KRnJvbTogV2lsbGlhbSBIZXJyaW4g PGJpbGxAaGVycmluLnVzPg0KU2VudDogV2VkbmVzZGF5LCBKdWx5IDAzLCAyMDE5IDY6MjkgUE0N ClRvOiBxdWljQGlldGYub3JnDQpTdWJqZWN0OiBRdWVzdGlvbiBhYm91dCAwLVJUVA0KDQpIaSBm b2xrcywNCg0KUmVhZGluZyBodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtaWV0Zi1x dWljLXRyYW5zcG9ydC0yMDxodHRwczovL3VybGRlZmVuc2UucHJvb2Zwb2ludC5jb20vdjIvdXJs P3U9aHR0cHMtM0FfX3Rvb2xzLmlldGYub3JnX2h0bWxfZHJhZnQtMkRpZXRmLTJEcXVpYy0yRHRy YW5zcG9ydC0yRDIwJmQ9RHdNRmFRJmM9OTZaYlpaY2FNRjR3MEY0anBONkxaZyZyPURqbjNiUTV1 TkpEUE1fMnNrZkwzclcxdHpjSXh5alVaZG5fbTU1S1BtbG8mbT1tc2ZaemJhZU9wcjdHdDRXaGhL NW1oWm5rM1J6eDJHcWdCT2tFMThuRzZjJnM9UXAyWlRpVDFqS0tfNnhUcGFaQWdTbEpLOWVwcHM5 aE5OeldDN0t4UzdKcyZlPT4sIEkgaGF2ZSBhIHF1ZXN0aW9uIGFib3V0IDAtUlRUOiBXaGF0IGlz IGl0Pw0KDQpUaGUgZHJhZnQgdGFsa3MgYSBsb3QgYWJvdXQgaXQsIGJ1dCBJIGRpZG4ndCBzZWUg YW55d2hlcmUgdGhhdCBjbGVhcmx5IGRlZmluZWQgd2hhdCBpdCBpcy4gV2hlbiBJIHNlZSAiUlRU IiB3aXRob3V0IGEgZGVmaW5pdGlvbiBJIHRlbmQgdG8gdGhpbmsgInJvdW5kIHRyaXAgdGltZSwi IGJ1dCB0aGUgZXhwbGFuYXRpb24gb2YgMC1SVFQgc2VlbXMgdG8gaGF2ZSBtb3JlIHRvIGRvIHdp dGggZW5jcnlwdGlvbiBzZXR1cCBkdXJpbmcgY29ubmVjdGlvbiBpbml0aWFsaXphdGlvbiB0aGFu IGFueSB0aWUgdG8gd2hpY2ggcm91bmQgdHJpcCBjb21wbGV0ZXMgdGhlIHNldHVwLiBJIGZpbmQg dGhpcyBjb25mdXNpbmcuDQoNCldvdWxkIHNvbWVvbmUgY29tbWVudCBhbmQgZWl0aGVyIHNob3cg bWUgdGhlIGRlZmluaXRpb24gSSBtaXNzZWQgb3IgYWRkIG9uZSB0byB0aGUgbmV4dCBkcmFmdD8N Cg0KVGhhbmtzLA0KQmlsbCBIZXJyaW4NCg0KLS0NCldpbGxpYW0gSGVycmluDQpiaWxsQGhlcnJp bi51czxtYWlsdG86YmlsbEBoZXJyaW4udXM+DQpodHRwczovL2JpbGwuaGVycmluLnVzLzxodHRw czovL3VybGRlZmVuc2UucHJvb2Zwb2ludC5jb20vdjIvdXJsP3U9aHR0cHMtM0FfX2JpbGwuaGVy cmluLnVzXyZkPUR3TUZhUSZjPTk2WmJaWmNhTUY0dzBGNGpwTjZMWmcmcj1Eam4zYlE1dU5KRFBN XzJza2ZMM3JXMXR6Y0l4eWpVWmRuX201NUtQbWxvJm09bXNmWnpiYWVPcHI3R3Q0V2hoSzVtaFpu azNSengyR3FnQk9rRTE4bkc2YyZzPWpQQUpqLVMxVHFJN0NIS0ZBT2ZzNDczZF9nNl9mUVBZWWp0 dHpwUm9waWMmZT0+DQo= --_000_0f590cac8f424b808fe0d77c203321a0ustx2exdag1mb5msgcorpak_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 V2luZ2RpbmdzOw0KCXBhbm9zZS0xOjUgMCAwIDAgMCAwIDAgMCAwIDA7fQ0KQGZvbnQtZmFjZQ0K CXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2IDMg MiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1 IDUgMiAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWws IGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGluOw0KCW1hcmdpbi1ib3R0 b206LjAwMDFwdDsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixz YW5zLXNlcmlmO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXByaW9y aXR5Ojk5Ow0KCWNvbG9yOmJsdWU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQphOnZp c2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5 Ow0KCWNvbG9yOnB1cnBsZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCnAuTXNvTGlz dFBhcmFncmFwaCwgbGkuTXNvTGlzdFBhcmFncmFwaCwgZGl2Lk1zb0xpc3RQYXJhZ3JhcGgNCgl7 bXNvLXN0eWxlLXByaW9yaXR5OjM0Ow0KCW1hcmdpbi10b3A6MGluOw0KCW1hcmdpbi1yaWdodDow aW47DQoJbWFyZ2luLWJvdHRvbTowaW47DQoJbWFyZ2luLWxlZnQ6LjVpbjsNCgltYXJnaW4tYm90 dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIs c2Fucy1zZXJpZjt9DQpwLm1zb25vcm1hbDAsIGxpLm1zb25vcm1hbDAsIGRpdi5tc29ub3JtYWww DQoJe21zby1zdHlsZS1uYW1lOm1zb25vcm1hbDsNCgltc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzsN CgltYXJnaW4tcmlnaHQ6MGluOw0KCW1zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvOw0KCW1hcmdp bi1sZWZ0OjBpbjsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixz YW5zLXNlcmlmO30NCnNwYW4uRW1haWxTdHlsZTE4DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFs LXJlcGx5Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOndpbmRv d3RleHQ7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJ Zm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJ e3NpemU6OC41aW4gMTEuMGluOw0KCW1hcmdpbjoxLjBpbiAxLjBpbiAxLjBpbiAxLjBpbjt9DQpk aXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi8qIExpc3QgRGVmaW5pdGlv bnMgKi8NCkBsaXN0IGwwDQoJe21zby1saXN0LWlkOjM2NTY0MjczMzsNCgltc28tbGlzdC10eXBl Omh5YnJpZDsNCgltc28tbGlzdC10ZW1wbGF0ZS1pZHM6NjU5ODMyMzk2IDE0MDMwOTgxNiA2NzY5 ODY5MSA2NzY5ODY5MyA2NzY5ODY4OSA2NzY5ODY5MSA2NzY5ODY5MyA2NzY5ODY4OSA2NzY5ODY5 MSA2NzY5ODY5Mzt9DQpAbGlzdCBsMDpsZXZlbDENCgl7bXNvLWxldmVsLXN0YXJ0LWF0OjA7DQoJ bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Oi07DQoJbXNv LWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0K CXRleHQtaW5kZW50Oi0uMjVpbjsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsN Cgltc28tZmFyZWFzdC1mb250LWZhbWlseTpDYWxpYnJpOw0KCW1zby1iaWRpLWZvbnQtZmFtaWx5 OiJUaW1lcyBOZXcgUm9tYW4iO30NCkBsaXN0IGwwOmxldmVsMg0KCXttc28tbGV2ZWwtbnVtYmVy LWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ6bzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6 bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4y NWluOw0KCWZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyI7fQ0KQGxpc3QgbDA6bGV2ZWwzDQoJe21z by1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgqc7DQoJbXNv LWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0K CXRleHQtaW5kZW50Oi0uMjVpbjsNCglmb250LWZhbWlseTpXaW5nZGluZ3M7fQ0KQGxpc3QgbDA6 bGV2ZWw0DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4 dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3Np dGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0K QGxpc3QgbDA6bGV2ZWw1DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28t bGV2ZWwtdGV4dDpvOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1i ZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJZm9udC1mYW1pbHk6IkNv dXJpZXIgTmV3Ijt9DQpAbGlzdCBsMDpsZXZlbDYNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6 YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CpzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsN Cgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0K CWZvbnQtZmFtaWx5OldpbmdkaW5nczt9DQpAbGlzdCBsMDpsZXZlbDcNCgl7bXNvLWxldmVsLW51 bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFi LXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRl bnQ6LS4yNWluOw0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMDpsZXZlbDgNCgl7bXNv LWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Om87DQoJbXNvLWxl dmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRl eHQtaW5kZW50Oi0uMjVpbjsNCglmb250LWZhbWlseToiQ291cmllciBOZXciO30NCkBsaXN0IGww OmxldmVsOQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRl eHQ674KnOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9z aXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJZm9udC1mYW1pbHk6V2luZ2Rpbmdz O30NCm9sDQoJe21hcmdpbi1ib3R0b206MGluO30NCnVsDQoJe21hcmdpbi1ib3R0b206MGluO30N Ci0tPjwvc3R5bGU+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWRlZmF1bHRzIHY6 ZXh0PSJlZGl0IiBzcGlkbWF4PSIxMDI2IiAvPg0KPC94bWw+PCFbZW5kaWZdLS0+PCEtLVtpZiBn dGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWxheW91dCB2OmV4dD0iZWRpdCI+DQo8bzppZG1hcCB2 OmV4dD0iZWRpdCIgZGF0YT0iMSIgLz4NCjwvbzpzaGFwZWxheW91dD48L3htbD48IVtlbmRpZl0t LT4NCjwvaGVhZD4NCjxib2R5IGxhbmc9IkVOLVVTIiBsaW5rPSJibHVlIiB2bGluaz0icHVycGxl Ij4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5IaSBC aWxsLDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4wLVJUVCBpcyBhIHRlcm0gY29tbW9ubHkgdXNl ZCBieSBUTFMg4oCTIHRoZSBjcnlwdG8gcHJvdG9jb2wgdGhhdCBRVUlDIHVzZXMgdG8gc2VjdXJl IGRhdGEuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5TZWUgPGEgaHJlZj0i aHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL3JmYzg0NDYjc2VjdGlvbi0yLjMiPg0KaHR0cHM6 Ly90b29scy5pZXRmLm9yZy9odG1sL3JmYzg0NDYjc2VjdGlvbi0yLjM8L2E+LjxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj4wLVJUVCBpcyBhIGZlYXR1cmUgb2YgYSBwcm90b2NvbCB0aGF0IGFsbG93 cyBkYXRhIHRvIGJlIGRlbGl2ZXJlZCB0byB0aGUgb3RoZXIgZW5kcG9pbnQgaW4gbGVzcyB0aGFu IDEgUlRUIChyb3VuZCB0cmlwIHRpbWUpIGZyb20gdGhlIGNvbm5lY3Rpb24gaW5pdGlhdGlvbiAo bW9yZSBhY2N1cmF0ZWx5LCBpdCBpcyBhIHByb3RvY29sIGZlYXR1cmUgdGhhdCBhbGxvd3MgZGF0 YSB0byBiZSBzZW50IGJlZm9yZSB0aGUNCiBwcm90b2NvbCBoYW5kc2hha2UgaXMgY29tcGxldGUp LjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4wLVJUVCBkYXRhIChhbHNvIGtub3duIGFzIOKAnGVh cmx5IGRhdGHigJ0pIGlzIHRoZSBkYXRhIHRoYXQgaXMgc2VudCBiZWZvcmUgdGhlIGhhbmRzaGFr ZSBjb21wbGV0aW9uLiZuYnNwOyAwLVJUVCBwYWNrZXRzIGFyZSBwYWNrZXRzIGNvbnRhaW5pbmcg MC1SVFQgZGF0YS48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5i c3A7PC9vOnA+PC9wPg0KPHVsIHN0eWxlPSJtYXJnaW4tdG9wOjBpbiIgdHlwZT0iZGlzYyI+DQo8 bGkgY2xhc3M9Ik1zb0xpc3RQYXJhZ3JhcGgiIHN0eWxlPSJtYXJnaW4tbGVmdDowaW47bXNvLWxp c3Q6bDAgbGV2ZWwxIGxmbzEiPklnb3I8bzpwPjwvbzpwPjwvbGk+PC91bD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7 Ym9yZGVyLWxlZnQ6c29saWQgYmx1ZSAxLjVwdDtwYWRkaW5nOjBpbiAwaW4gMGluIDQuMHB0Ij4N CjxkaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNFMUUxRTEg MS4wcHQ7cGFkZGluZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 Yj5Gcm9tOjwvYj4gV2lsbGlhbSBIZXJyaW4gJmx0O2JpbGxAaGVycmluLnVzJmd0OyA8YnI+DQo8 Yj5TZW50OjwvYj4gV2VkbmVzZGF5LCBKdWx5IDAzLCAyMDE5IDY6MjkgUE08YnI+DQo8Yj5Ubzo8 L2I+IHF1aWNAaWV0Zi5vcmc8YnI+DQo8Yj5TdWJqZWN0OjwvYj4gUXVlc3Rpb24gYWJvdXQgMC1S VFQ8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ SGkgZm9sa3MsPG86cD48L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86 cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5S ZWFkaW5nJm5ic3A7PGEgaHJlZj0iaHR0cHM6Ly91cmxkZWZlbnNlLnByb29mcG9pbnQuY29tL3Yy L3VybD91PWh0dHBzLTNBX190b29scy5pZXRmLm9yZ19odG1sX2RyYWZ0LTJEaWV0Zi0yRHF1aWMt MkR0cmFuc3BvcnQtMkQyMCZhbXA7ZD1Ed01GYVEmYW1wO2M9OTZaYlpaY2FNRjR3MEY0anBONkxa ZyZhbXA7cj1Eam4zYlE1dU5KRFBNXzJza2ZMM3JXMXR6Y0l4eWpVWmRuX201NUtQbWxvJmFtcDtt PW1zZlp6YmFlT3ByN0d0NFdoaEs1bWhabmszUnp4MkdxZ0JPa0UxOG5HNmMmYW1wO3M9UXAyWlRp VDFqS0tfNnhUcGFaQWdTbEpLOWVwcHM5aE5OeldDN0t4UzdKcyZhbXA7ZT0iPmh0dHBzOi8vdG9v bHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLXF1aWMtdHJhbnNwb3J0LTIwPC9hPiwNCiBJIGhh dmUgYSBxdWVzdGlvbiBhYm91dCAwLVJUVDogV2hhdCBpcyBpdD88bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+VGhlIGRyYWZ0IHRhbGtzIGEgbG90 IGFib3V0IGl0LCBidXQgSSBkaWRuJ3Qgc2VlIGFueXdoZXJlIHRoYXQgY2xlYXJseSBkZWZpbmVk IHdoYXQgaXQgaXMuIFdoZW4gSSBzZWUgJnF1b3Q7UlRUJnF1b3Q7IHdpdGhvdXQgYSBkZWZpbml0 aW9uIEkgdGVuZCB0byB0aGluayAmcXVvdDtyb3VuZCB0cmlwIHRpbWUsJnF1b3Q7IGJ1dCB0aGUg ZXhwbGFuYXRpb24gb2YgMC1SVFQgc2VlbXMgdG8gaGF2ZSBtb3JlIHRvIGRvIHdpdGggZW5jcnlw dGlvbiBzZXR1cA0KIGR1cmluZyBjb25uZWN0aW9uIGluaXRpYWxpemF0aW9uIHRoYW4gYW55IHRp ZSB0byB3aGljaCByb3VuZCB0cmlwIGNvbXBsZXRlcyB0aGUgc2V0dXAuIEkgZmluZCB0aGlzIGNv bmZ1c2luZy48YnIgY2xlYXI9ImFsbCI+DQo8bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPldvdWxkIHNvbWVvbmUgY29tbWVudCBhbmQgZWl0aGVyIHNob3cgbWUg dGhlIGRlZmluaXRpb24gSSBtaXNzZWQgb3IgYWRkIG9uZSB0byB0aGUgbmV4dCBkcmFmdD88bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5i c3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+VGhhbmtz LDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Qmls bCBIZXJyaW48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4t LSA8bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPldpbGxpYW0gSGVycmluPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48YSBocmVmPSJtYWlsdG86YmlsbEBoZXJyaW4udXMiIHRhcmdldD0iX2Js YW5rIj5iaWxsQGhlcnJpbi51czwvYT48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxhIGhyZWY9Imh0dHBzOi8vdXJsZGVmZW5zZS5wcm9vZnBvaW50 LmNvbS92Mi91cmw/dT1odHRwcy0zQV9fYmlsbC5oZXJyaW4udXNfJmFtcDtkPUR3TUZhUSZhbXA7 Yz05NlpiWlpjYU1GNHcwRjRqcE42TFpnJmFtcDtyPURqbjNiUTV1TkpEUE1fMnNrZkwzclcxdHpj SXh5alVaZG5fbTU1S1BtbG8mYW1wO209bXNmWnpiYWVPcHI3R3Q0V2hoSzVtaFpuazNSengyR3Fn Qk9rRTE4bkc2YyZhbXA7cz1qUEFKai1TMVRxSTdDSEtGQU9mczQ3M2RfZzZfZlFQWVlqdHR6cFJv cGljJmFtcDtlPSIgdGFyZ2V0PSJfYmxhbmsiPmh0dHBzOi8vYmlsbC5oZXJyaW4udXMvPC9hPjxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwv ZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_0f590cac8f424b808fe0d77c203321a0ustx2exdag1mb5msgcorpak_-- From nobody Wed Jul 3 16:52:45 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C80A1120670 for ; Wed, 3 Jul 2019 16:52:39 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.799 X-Spam-Level: X-Spam-Status: No, score=-1.799 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zhY-68D_YN9b for ; Wed, 3 Jul 2019 16:52:37 -0700 (PDT) Received: from magic.dirtside.com (magic.dirtside.com [199.33.225.25]) by ietfa.amsl.com (Postfix) with ESMTP id 18A9D120658 for ; Wed, 3 Jul 2019 16:52:36 -0700 (PDT) Received: from minoc.dirtside.com ([199.33.225.53]) by magic.dirtside.com (8.14.3/) with ESMTP id x63NqKlt015873 for ; Wed, 3 Jul 2019 16:52:21 -0700 X-Really-To: Received: from mail-pf1-f171.google.com (mail-pf1-f171.google.com [209.85.210.171]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by minoc.dirtside.com (Postfix) with ESMTPSA id BD169EBF4B for ; Wed, 3 Jul 2019 16:52:20 -0700 (PDT) Received: by mail-pf1-f171.google.com with SMTP id u14so834893pfn.2 for ; Wed, 03 Jul 2019 16:52:20 -0700 (PDT) X-Gm-Message-State: APjAAAXPcqwETsGg7AZGy1PemTmez4E6sqr5n2mxZZDQGnnhUw2bayWm 1L2IwmIy0Q1RdTBnNxWZVSG0pxq5Rp/f2TQatwI= X-Google-Smtp-Source: APXvYqzl8K48821z8ArUNE3Y9mA5K+8TEqNc/hZ5IAn/vuEI4vBmjEFuO9JMnpKeqRnWCNCFDEgpX/m7ao5ASPUKyDY= X-Received: by 2002:a17:90a:4806:: with SMTP id a6mr3979457pjh.38.1562197940426; Wed, 03 Jul 2019 16:52:20 -0700 (PDT) MIME-Version: 1.0 References: <0f590cac8f424b808fe0d77c203321a0@ustx2ex-dag1mb5.msg.corp.akamai.com> In-Reply-To: <0f590cac8f424b808fe0d77c203321a0@ustx2ex-dag1mb5.msg.corp.akamai.com> From: William Herrin Date: Wed, 3 Jul 2019 16:52:09 -0700 X-Gmail-Original-Message-ID: Message-ID: Subject: Re: Question about 0-RTT To: "Lubashev, Igor" Cc: "quic@ietf.org" Content-Type: multipart/alternative; boundary="0000000000004eddde058ccf8dac" X-Spam-Checker: magic.dirtside.com Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 03 Jul 2019 23:52:44 -0000 --0000000000004eddde058ccf8dac Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Thanks Igor, I get the impression in RFC8446 that 0-RTT data is literally transmitted in the first round trip before the server returns back the key. After the first round trip, the data is always encrypted. Is that accurate? Is that true in QUIC as well? I was under the (possibly mistaken) impression that quic will in some cases need additional round trips before negotiation is complete and it moves to the 1-RTT state? Regardless, can something be added to section 1.2 (terms and definitions) referring the reader to the explanation of 0-RTT and 1-RTT? Thanks, Bill Herrin On Wed, Jul 3, 2019 at 4:21 PM Lubashev, Igor wrote: > Hi Bill, > > > > 0-RTT is a term commonly used by TLS =E2=80=93 the crypto protocol that Q= UIC uses > to secure data. > > See https://tools.ietf.org/html/rfc8446#section-2.3. > > > > 0-RTT is a feature of a protocol that allows data to be delivered to the > other endpoint in less than 1 RTT (round trip time) from the connection > initiation (more accurately, it is a protocol feature that allows data to > be sent before the protocol handshake is complete). > > > > 0-RTT data (also known as =E2=80=9Cearly data=E2=80=9D) is the data that = is sent before > the handshake completion. 0-RTT packets are packets containing 0-RTT dat= a. > > > > - Igor > > > > *From:* William Herrin > *Sent:* Wednesday, July 03, 2019 6:29 PM > *To:* quic@ietf.org > *Subject:* Question about 0-RTT > > > > Hi folks, > > > > Reading https://tools.ietf.org/html/draft-ietf-quic-transport-20 > , > I have a question about 0-RTT: What is it? > > > > The draft talks a lot about it, but I didn't see anywhere that clearly > defined what it is. When I see "RTT" without a definition I tend to think > "round trip time," but the explanation of 0-RTT seems to have more to do > with encryption setup during connection initialization than any tie to > which round trip completes the setup. I find this confusing. > > > > Would someone comment and either show me the definition I missed or add > one to the next draft? > > > > Thanks, > > Bill Herrin > > > > -- > > William Herrin > > bill@herrin.us > > https://bill.herrin.us/ > > --=20 William Herrin bill@herrin.us https://bill.herrin.us/ --0000000000004eddde058ccf8dac Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Thanks Igor,

I get the impre= ssion in RFC8446 that 0-RTT data is literally transmitted in the first roun= d trip before the server returns back the key. After the first round trip, = the data is always encrypted. Is that accurate?

Is= that true in QUIC as well? I was under the (possibly mistaken) impression = that quic will in some cases need additional round trips before negotiation= is complete and it moves to the 1-RTT state?

Rega= rdless, can something be added to section 1.2 (terms and definitions) refer= ring the reader to the explanation of 0-RTT and 1-RTT?

=
Thanks,
Bill Herrin


On Wed, Jul 3, 2019 at 4:2= 1 PM Lubashev, Igor <ilubashe@aka= mai.com> wrote:

Hi Bill,

=C2=A0

0-RTT is a term commonly used by TLS =E2=80=93 the c= rypto protocol that QUIC uses to secure data.

See https://tools.ietf.org/html/rfc8446#section-2.3.

=C2=A0

0-RTT is a feature of a protocol that allows data to= be delivered to the other endpoint in less than 1 RTT (round trip time) fr= om the connection initiation (more accurately, it is a protocol feature tha= t allows data to be sent before the protocol handshake is complete).

=C2=A0

0-RTT data (also known as =E2=80=9Cearly data=E2=80= =9D) is the data that is sent before the handshake completion.=C2=A0 0-RTT = packets are packets containing 0-RTT data.

=C2=A0

  • Igor

=C2=A0

From: William Herrin <bill@herrin.us>
Sent: Wednesday, July 03, 2019 6:29 PM
To: quic@ietf.org=
Subject: Question about 0-RTT

=C2=A0

Hi folks,

=C2=A0

Reading=C2=A0https://tools.ietf.org/html/draft-ietf-quic-transport-20, I have a question about 0-RTT: What is it?

=C2=A0

The draft talks a lot about it, but I didn't see= anywhere that clearly defined what it is. When I see "RTT" witho= ut a definition I tend to think "round trip time," but the explan= ation of 0-RTT seems to have more to do with encryption setup during connection initialization than any tie to which round trip complete= s the setup. I find this confusing.

=C2=A0

Would someone comment and either show me the definit= ion I missed or add one to the next draft?

=C2=A0

Thanks,

Bill Herrin

=C2=A0

--



--
William Herrin
<= a href=3D"mailto:bill@herrin.us" target=3D"_blank">bill@herrin.us
=
--0000000000004eddde058ccf8dac-- From nobody Wed Jul 3 17:58:29 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8346E1206EF for ; Wed, 3 Jul 2019 17:58:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ducksong.com header.b=Zv5wa1tl; dkim=pass (2048-bit key) header.d=outbound.mailhop.org header.b=L7X66op/ Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ogy7_m20sygM for ; Wed, 3 Jul 2019 17:58:20 -0700 (PDT) Received: from outbound1g.eu.mailhop.org (outbound1g.eu.mailhop.org [52.28.6.212]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 43A4C1206BD for ; Wed, 3 Jul 2019 17:58:20 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1562201898; cv=none; d=outbound.mailhop.org; s=arc-outbound20181012; b=QufPNm2I3sfjedp8N6fk9Fpw0aPJXEpxfRyLKnFmYTNRi9iyBFCdCgy9+oDXWLCU2Dn++g6vbWO4M fx1XDyxaMi/koMJlPRU5IUZzfjr7wc/uLWu4nvas/DmGWqwu3sMwN3H8aprn2QOisRJrBSoma5U+3b 0H/DsC8Nv9toOFTTOTIlHXYZnZkHDsfTcDa5GDH6aidb33WwHv6YAW2hSAuEaCvBt2NGLP3zHU0RJ7 rHZrABLdbUHHXmRoCBaouk5xxnYjBCNeGMqkK//qlbV0AlUni5wrOXHRj8rVfjGy6tJl2FDertfi+l /Z/fxfSqVmxaEoFnRXBoa0BEslmQxzg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=outbound.mailhop.org; s=arc-outbound20181012; h=content-type:cc:to:subject:message-id:date:from:in-reply-to:references: mime-version:dkim-signature:dkim-signature:from; bh=uKoxpCp/Io/a7thruWZHipZ2rvQsb85G34grlhh5j8Y=; b=JyRAVJHAdJFtU8XPmCtCbkMxLwI6RnhBbLtCdJyrFH71HFSKOAzF7oHLsnlrXSiHcQAzG7KnS5yit g0m0FYZDWYZnUyhmq/MA+4E5Fys+tchNaZxvFcIySkJ5oGDddD0KgAtvC+VB4FAtSEq2vVht8eYdf1 BouCyMW37p/eiaE1/PPclWkuVqraNU4xGFNotNfq+vFqQvJJhB/wWd7pI3cYeyImUFkshNuc6CYqE1 zTecUB2oU2edowa5ZXwpfR7F1WEEFCFmaUIxjn95A8a4AkwKcIwoB/4VNKzkp3XyjXHJvIStD/GRj7 NfG3gx0oUOmBDaQzR4BMw1R2OgX5vBw== ARC-Authentication-Results: i=1; outbound3.eu.mailhop.org; spf=pass smtp.mailfrom=ducksong.com smtp.remote-ip=209.85.210.46; dmarc=none header.from=ducksong.com; arc=none header.oldest-pass=0; DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ducksong.com; s=duo-1537391512170-ea99bbb3; h=content-type:cc:to:subject:message-id:date:from:in-reply-to:references: mime-version:from; bh=uKoxpCp/Io/a7thruWZHipZ2rvQsb85G34grlhh5j8Y=; b=Zv5wa1tl609OmgiQdqJSKEwxMIdUdztm3KIrYx8WV6xmI7m4eoGht8EmBnXzAWmHuK64Hoe1DfkPv NYYse/m1wrWf4egFrPvDsKzZEmzqpm8Nm+agZaoa4wYPxqZVBKRsRE08ztevw9ETTupgmoFaEM3Arj cTAFx7LeXx9bGH1Q= DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outbound.mailhop.org; s=dkim-high; h=content-type:cc:to:subject:message-id:date:from:in-reply-to:references: mime-version:from; bh=uKoxpCp/Io/a7thruWZHipZ2rvQsb85G34grlhh5j8Y=; b=L7X66op/3Q/4i22N4phvf1mE2fffSh2zqUzUlbGGoTTZoSuJCUipsvVCz3D7TZtEIrkDXvb3ZD2kF 3MqfLauNcC5Quz/lZsk7ITo+R1QEQNWmKg/Y/CPmzyB+HzE2/6dTfEIr2FYT69TrQfgyo+I+IJj+O+ 7f9gVkZ/T6H8fbptzitNKl/buIGp4yWit9J2zTkADfy7Zg6KjSo/xJi4Wrr/v1kPJEzOqItCqgSr6o ZgKZyvip6LY8YtN8wGnLN+LZb1YlbN6Jb0TOXMOz9Jop52FHaLFJ1ScBrj91w274z+Hv402iaY3AjU DCw1OVolys+exirzpyZYAoeDdEZlK1A== X-MHO-RoutePath: bWNtYW51cw== X-MHO-User: ce2c6abf-9df6-11e9-817d-159144fdaaa6 X-Report-Abuse-To: https://support.duocircle.com/support/solutions/articles/5000540958-duocircle-standard-smtp-abuse-information X-Originating-IP: 209.85.210.46 X-Mail-Handler: DuoCircle Outbound SMTP Received: from mail-ot1-f46.google.com (unknown [209.85.210.46]) by outbound3.eu.mailhop.org (Halon) with ESMTPSA id ce2c6abf-9df6-11e9-817d-159144fdaaa6; Thu, 04 Jul 2019 00:58:16 +0000 (UTC) Received: by mail-ot1-f46.google.com with SMTP id o101so4333975ota.8 for ; Wed, 03 Jul 2019 17:58:16 -0700 (PDT) X-Gm-Message-State: APjAAAWTdtKrnsrfg5cMiK2YMmaGqQN5Hf9IUK45TWghpgYZSbgREb/1 3BFsZY8ckA6JQzVitVm211aaRq1HPCewjk1YbUU= X-Google-Smtp-Source: APXvYqwkDuP9CNdvC00hKARYWxoTRVpU9IM6DR8dyRE0qJUJJ4o+GL2nRTkLItxbAu/azT9Vf+CU7Iaob0SxRv+9G4g= X-Received: by 2002:a9d:7284:: with SMTP id t4mr33921016otj.154.1562201895587; Wed, 03 Jul 2019 17:58:15 -0700 (PDT) MIME-Version: 1.0 References: <0f590cac8f424b808fe0d77c203321a0@ustx2ex-dag1mb5.msg.corp.akamai.com> In-Reply-To: From: Patrick McManus Date: Wed, 3 Jul 2019 20:58:04 -0400 X-Gmail-Original-Message-ID: Message-ID: Subject: Re: Question about 0-RTT To: William Herrin Cc: "Lubashev, Igor" , "quic@ietf.org" Content-Type: multipart/alternative; boundary="0000000000000dd3d2058cd079ce" Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 04 Jul 2019 00:58:28 -0000 --0000000000000dd3d2058cd079ce Content-Type: text/plain; charset="UTF-8" On Wed, Jul 3, 2019 at 7:54 PM William Herrin wrote: > Thanks Igor, > > I get the impression in RFC8446 that 0-RTT data is literally transmitted > in the first round trip before the server returns back the key. After the > first round trip, the data is always encrypted. Is that accurate? > it is encrypted in both the first round trip and thereafter - the two phases just use different keys. The 0-RTT key is distributed in an earlier session (so this is only for repeat visitors). Its not ephemeral to the session you're in, so it is replaced with the ephemeral 1-RTT key as soon as possible. > > --0000000000000dd3d2058cd079ce Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable


=
On Wed, Jul 3, 2019 at 7:54 PM Willia= m Herrin <bill@herrin.us> wrote= :
Thanks Igor,

I get the impression in RFC84= 46 that 0-RTT data is literally transmitted in the first round trip before = the server returns back the key. After the first round trip, the data is al= ways encrypted. Is that accurate?

it is encrypted in both the first round trip and thereafter - the two ph= ases just use different keys. The 0-RTT key is distributed in an earlier se= ssion (so this is only for repeat visitors). Its not ephemeral to the sessi= on you're in, so it is replaced with the ephemeral 1-RTT key as soon as= possible.

--0000000000000dd3d2058cd079ce-- From nobody Wed Jul 3 18:00:27 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 083521202AD for ; Wed, 3 Jul 2019 18:00:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=akamai.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id u-BAMopFhK-2 for ; Wed, 3 Jul 2019 18:00:21 -0700 (PDT) Received: from mx0b-00190b01.pphosted.com (mx0b-00190b01.pphosted.com [IPv6:2620:100:9005:57f::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4EA29120703 for ; Wed, 3 Jul 2019 18:00:20 -0700 (PDT) Received: from pps.filterd (m0050096.ppops.net [127.0.0.1]) by m0050096.ppops.net-00190b01. (8.16.0.27/8.16.0.27) with SMTP id x640v1IM003270; Thu, 4 Jul 2019 02:00:02 +0100 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=akamai.com; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : mime-version; s=jan2016.eng; bh=o13iCQVtvj0FhbQRpGmxtl8EkJwP+GM3lrejaizgFAM=; b=R3lG0Ii3pP5y18hCckmuMpPDjJVV/kAxY2KyZfHMaE17lWrG+9nALQJrJQ9nSI/EXpPv g7tNaj8ft4DN7LnVglsxdjno/79PdyKwdvngEXI5rXml31LmVSEQ8XsZWFG2KPlhBhHf ef7BN8HMcW98mL/IJl3kR4ja4VIRHQymz6cxHAFFX7D8H+dpcHkuAhRXVIUnX8xyw09P UmnGVOLXLXGRuE0GXR3xGZtTgNBba11njF33C8p8I0dP/fZTSAr30DCv3rbJ4tCggiku 6HBh+ewHEngL6bbjuBrkoWD5914TsprBDbAIG/zc3D0qJivekXBttpmhbuqG3TG1G48U SQ== Received: from prod-mail-ppoint4 (prod-mail-ppoint4.akamai.com [96.6.114.87] (may be forged)) by m0050096.ppops.net-00190b01. with ESMTP id 2th4jn8hgv-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Thu, 04 Jul 2019 02:00:01 +0100 Received: from pps.filterd (prod-mail-ppoint4.akamai.com [127.0.0.1]) by prod-mail-ppoint4.akamai.com (8.16.0.27/8.16.0.27) with SMTP id x640lSjr020208; Wed, 3 Jul 2019 21:00:01 -0400 Received: from email.msg.corp.akamai.com ([172.27.27.25]) by prod-mail-ppoint4.akamai.com with ESMTP id 2te3ay2prm-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT); Wed, 03 Jul 2019 21:00:00 -0400 Received: from USTX2EX-DAG1MB5.msg.corp.akamai.com (172.27.27.105) by ustx2ex-dag1mb1.msg.corp.akamai.com (172.27.27.101) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Wed, 3 Jul 2019 19:59:59 -0500 Received: from USTX2EX-DAG1MB5.msg.corp.akamai.com ([172.27.27.105]) by ustx2ex-dag1mb5.msg.corp.akamai.com ([172.27.27.105]) with mapi id 15.00.1473.004; Wed, 3 Jul 2019 19:59:59 -0500 From: "Lubashev, Igor" To: William Herrin CC: "quic@ietf.org" Subject: RE: Question about 0-RTT Thread-Topic: Question about 0-RTT Thread-Index: AQHVMe7WATOS4EDkz02CwqZTPlVkl6a5g/uAgABgoID//7ab8A== Date: Thu, 4 Jul 2019 00:59:58 +0000 Message-ID: References: <0f590cac8f424b808fe0d77c203321a0@ustx2ex-dag1mb5.msg.corp.akamai.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [172.19.32.189] Content-Type: multipart/alternative; boundary="_000_aa048eef0615446b80d8aa903cd42a17ustx2exdag1mb5msgcorpak_" MIME-Version: 1.0 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2019-07-03_06:, , signatures=0 X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 suspectscore=0 malwarescore=0 phishscore=0 bulkscore=0 spamscore=0 mlxscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1810050000 definitions=main-1907040008 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2019-07-03_06:, , signatures=0 X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1015 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1810050000 definitions=main-1907040010 Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 04 Jul 2019 01:00:26 -0000 --_000_aa048eef0615446b80d8aa903cd42a17ustx2exdag1mb5msgcorpak_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SSByZWNvbW1lbmQgeW91IGFsc28gZmFtaWxpYXJpemUgeW91cnNlbGYgd2l0aCBodHRwczovL3Rv b2xzLmlldGYub3JnL2h0bWwvZHJhZnQtaWV0Zi1xdWljLXRscy0yMCNzZWN0aW9uLTIuMS4gIEl0 IGdpdmVzIGEgZ29vZCBvdmVydmlldyBvZiBUTFMgYW5kIGxhdGVyIGluIHRoZSB0ZXh0IGRlc2Ny aWJlcyBob3cgVExTIGlzIHVzZWQgaW4gUVVJQy4gIEl0IGlzIHJlZmVyZW5jZWQgZnJvbSB0aGUg VHJhbnNwb3J0IGRyYWZ0IGlzIGEgZmV3IGtleSBwbGFjZXMuDQoNCk1vc3Qgb2Z0ZW4sIHllcywg MC1SVFQgZGF0YSB3aWxsIGJlIHRyYW5zbWl0dGVkIG9ubHkgaW4gdGhlIGZpcnN0IHJvdW5kIHRy aXAgKGV4Y2VwdCBpZiBhIHNlcnZlcuKAmXMgaGFuZHNoYWtlIHBhY2tldCBpcyBsb3N0KS4gTm90 ZSB0aGF0IDAtUlRUIGRhdGEgaXMgYWxzbyBlbmNyeXB0ZWQgdXNpbmcga2V5cyByZWNlaXZlZCBp biBhIHByaW9yIGNvbm5lY3Rpb24hDQoNCk9mIGNvdXJzZSwgaWYgMC1SVFQgcGFja2V0cyBhcmUg cmVqZWN0ZWQgYnkgdGhlIHNlcnZlciAoc2VlIFZlcnNpb24gTmVnb3RpYXRpb24gYW5kIFJldHJ5 IHBhY2tldHMpLCB0aGUgY2xpZW50IG1heSBuZWVkIHRvIHJlc2VuZCAwLVJUVCBkYXRhIGFnYWlu Lg0KDQoNCiAgKiAgIElnb3INCg0KRnJvbTogV2lsbGlhbSBIZXJyaW4gPGJpbGxAaGVycmluLnVz Pg0KU2VudDogV2VkbmVzZGF5LCBKdWx5IDAzLCAyMDE5IDc6NTIgUE0NClRvOiBMdWJhc2hldiwg SWdvciA8aWx1YmFzaGVAYWthbWFpLmNvbT4NCkNjOiBxdWljQGlldGYub3JnDQpTdWJqZWN0OiBS ZTogUXVlc3Rpb24gYWJvdXQgMC1SVFQNCg0KVGhhbmtzIElnb3IsDQoNCkkgZ2V0IHRoZSBpbXBy ZXNzaW9uIGluIFJGQzg0NDYgdGhhdCAwLVJUVCBkYXRhIGlzIGxpdGVyYWxseSB0cmFuc21pdHRl ZCBpbiB0aGUgZmlyc3Qgcm91bmQgdHJpcCBiZWZvcmUgdGhlIHNlcnZlciByZXR1cm5zIGJhY2sg dGhlIGtleS4gQWZ0ZXIgdGhlIGZpcnN0IHJvdW5kIHRyaXAsIHRoZSBkYXRhIGlzIGFsd2F5cyBl bmNyeXB0ZWQuIElzIHRoYXQgYWNjdXJhdGU/DQoNCklzIHRoYXQgdHJ1ZSBpbiBRVUlDIGFzIHdl bGw/IEkgd2FzIHVuZGVyIHRoZSAocG9zc2libHkgbWlzdGFrZW4pIGltcHJlc3Npb24gdGhhdCBx dWljIHdpbGwgaW4gc29tZSBjYXNlcyBuZWVkIGFkZGl0aW9uYWwgcm91bmQgdHJpcHMgYmVmb3Jl IG5lZ290aWF0aW9uIGlzIGNvbXBsZXRlIGFuZCBpdCBtb3ZlcyB0byB0aGUgMS1SVFQgc3RhdGU/ DQoNClJlZ2FyZGxlc3MsIGNhbiBzb21ldGhpbmcgYmUgYWRkZWQgdG8gc2VjdGlvbiAxLjIgKHRl cm1zIGFuZCBkZWZpbml0aW9ucykgcmVmZXJyaW5nIHRoZSByZWFkZXIgdG8gdGhlIGV4cGxhbmF0 aW9uIG9mIDAtUlRUIGFuZCAxLVJUVD8NCg0KVGhhbmtzLA0KQmlsbCBIZXJyaW4NCg0KDQpPbiBX ZWQsIEp1bCAzLCAyMDE5IGF0IDQ6MjEgUE0gTHViYXNoZXYsIElnb3IgPGlsdWJhc2hlQGFrYW1h aS5jb208bWFpbHRvOmlsdWJhc2hlQGFrYW1haS5jb20+PiB3cm90ZToNCkhpIEJpbGwsDQoNCjAt UlRUIGlzIGEgdGVybSBjb21tb25seSB1c2VkIGJ5IFRMUyDigJMgdGhlIGNyeXB0byBwcm90b2Nv bCB0aGF0IFFVSUMgdXNlcyB0byBzZWN1cmUgZGF0YS4NClNlZSBodHRwczovL3Rvb2xzLmlldGYu b3JnL2h0bWwvcmZjODQ0NiNzZWN0aW9uLTIuMzxodHRwczovL3VybGRlZmVuc2UucHJvb2Zwb2lu dC5jb20vdjIvdXJsP3U9aHR0cHMtM0FfX3Rvb2xzLmlldGYub3JnX2h0bWxfcmZjODQ0Ni0yM3Nl Y3Rpb24tMkQyLjMmZD1Ed01GYVEmYz05NlpiWlpjYU1GNHcwRjRqcE42TFpnJnI9RGpuM2JRNXVO SkRQTV8yc2tmTDNyVzF0emNJeHlqVVpkbl9tNTVLUG1sbyZtPWQwS2NVUkdyY0h4WmJQZ2JPaE1G UVZXRGlvTmpNZk91dzBjQThrMkFoS2cmcz1yQ0JRcFJEZy12QXdUNGVKaHdtNFBrV3BIcC1KcnZp YXRVTXN6STN5ekpFJmU9Pi4NCg0KMC1SVFQgaXMgYSBmZWF0dXJlIG9mIGEgcHJvdG9jb2wgdGhh dCBhbGxvd3MgZGF0YSB0byBiZSBkZWxpdmVyZWQgdG8gdGhlIG90aGVyIGVuZHBvaW50IGluIGxl c3MgdGhhbiAxIFJUVCAocm91bmQgdHJpcCB0aW1lKSBmcm9tIHRoZSBjb25uZWN0aW9uIGluaXRp YXRpb24gKG1vcmUgYWNjdXJhdGVseSwgaXQgaXMgYSBwcm90b2NvbCBmZWF0dXJlIHRoYXQgYWxs b3dzIGRhdGEgdG8gYmUgc2VudCBiZWZvcmUgdGhlIHByb3RvY29sIGhhbmRzaGFrZSBpcyBjb21w bGV0ZSkuDQoNCjAtUlRUIGRhdGEgKGFsc28ga25vd24gYXMg4oCcZWFybHkgZGF0YeKAnSkgaXMg dGhlIGRhdGEgdGhhdCBpcyBzZW50IGJlZm9yZSB0aGUgaGFuZHNoYWtlIGNvbXBsZXRpb24uICAw LVJUVCBwYWNrZXRzIGFyZSBwYWNrZXRzIGNvbnRhaW5pbmcgMC1SVFQgZGF0YS4NCg0KDQogICog ICBJZ29yDQoNCkZyb206IFdpbGxpYW0gSGVycmluIDxiaWxsQGhlcnJpbi51czxtYWlsdG86Ymls bEBoZXJyaW4udXM+Pg0KU2VudDogV2VkbmVzZGF5LCBKdWx5IDAzLCAyMDE5IDY6MjkgUE0NClRv OiBxdWljQGlldGYub3JnPG1haWx0bzpxdWljQGlldGYub3JnPg0KU3ViamVjdDogUXVlc3Rpb24g YWJvdXQgMC1SVFQNCg0KSGkgZm9sa3MsDQoNClJlYWRpbmcgaHR0cHM6Ly90b29scy5pZXRmLm9y Zy9odG1sL2RyYWZ0LWlldGYtcXVpYy10cmFuc3BvcnQtMjA8aHR0cHM6Ly91cmxkZWZlbnNlLnBy b29mcG9pbnQuY29tL3YyL3VybD91PWh0dHBzLTNBX190b29scy5pZXRmLm9yZ19odG1sX2RyYWZ0 LTJEaWV0Zi0yRHF1aWMtMkR0cmFuc3BvcnQtMkQyMCZkPUR3TUZhUSZjPTk2WmJaWmNhTUY0dzBG NGpwTjZMWmcmcj1Eam4zYlE1dU5KRFBNXzJza2ZMM3JXMXR6Y0l4eWpVWmRuX201NUtQbWxvJm09 bXNmWnpiYWVPcHI3R3Q0V2hoSzVtaFpuazNSengyR3FnQk9rRTE4bkc2YyZzPVFwMlpUaVQxaktL XzZ4VHBhWkFnU2xKSzllcHBzOWhOTnpXQzdLeFM3SnMmZT0+LCBJIGhhdmUgYSBxdWVzdGlvbiBh Ym91dCAwLVJUVDogV2hhdCBpcyBpdD8NCg0KVGhlIGRyYWZ0IHRhbGtzIGEgbG90IGFib3V0IGl0 LCBidXQgSSBkaWRuJ3Qgc2VlIGFueXdoZXJlIHRoYXQgY2xlYXJseSBkZWZpbmVkIHdoYXQgaXQg aXMuIFdoZW4gSSBzZWUgIlJUVCIgd2l0aG91dCBhIGRlZmluaXRpb24gSSB0ZW5kIHRvIHRoaW5r ICJyb3VuZCB0cmlwIHRpbWUsIiBidXQgdGhlIGV4cGxhbmF0aW9uIG9mIDAtUlRUIHNlZW1zIHRv IGhhdmUgbW9yZSB0byBkbyB3aXRoIGVuY3J5cHRpb24gc2V0dXAgZHVyaW5nIGNvbm5lY3Rpb24g aW5pdGlhbGl6YXRpb24gdGhhbiBhbnkgdGllIHRvIHdoaWNoIHJvdW5kIHRyaXAgY29tcGxldGVz IHRoZSBzZXR1cC4gSSBmaW5kIHRoaXMgY29uZnVzaW5nLg0KDQpXb3VsZCBzb21lb25lIGNvbW1l bnQgYW5kIGVpdGhlciBzaG93IG1lIHRoZSBkZWZpbml0aW9uIEkgbWlzc2VkIG9yIGFkZCBvbmUg dG8gdGhlIG5leHQgZHJhZnQ/DQoNClRoYW5rcywNCkJpbGwgSGVycmluDQoNCi0tDQpXaWxsaWFt IEhlcnJpbg0KYmlsbEBoZXJyaW4udXM8bWFpbHRvOmJpbGxAaGVycmluLnVzPg0KaHR0cHM6Ly9i aWxsLmhlcnJpbi51cy88aHR0cHM6Ly91cmxkZWZlbnNlLnByb29mcG9pbnQuY29tL3YyL3VybD91 PWh0dHBzLTNBX19iaWxsLmhlcnJpbi51c18mZD1Ed01GYVEmYz05NlpiWlpjYU1GNHcwRjRqcE42 TFpnJnI9RGpuM2JRNXVOSkRQTV8yc2tmTDNyVzF0emNJeHlqVVpkbl9tNTVLUG1sbyZtPW1zZlp6 YmFlT3ByN0d0NFdoaEs1bWhabmszUnp4MkdxZ0JPa0UxOG5HNmMmcz1qUEFKai1TMVRxSTdDSEtG QU9mczQ3M2RfZzZfZlFQWVlqdHR6cFJvcGljJmU9Pg0KDQoNCi0tDQpXaWxsaWFtIEhlcnJpbg0K YmlsbEBoZXJyaW4udXM8bWFpbHRvOmJpbGxAaGVycmluLnVzPg0KaHR0cHM6Ly9iaWxsLmhlcnJp bi51cy88aHR0cHM6Ly91cmxkZWZlbnNlLnByb29mcG9pbnQuY29tL3YyL3VybD91PWh0dHBzLTNB X19iaWxsLmhlcnJpbi51c18mZD1Ed01GYVEmYz05NlpiWlpjYU1GNHcwRjRqcE42TFpnJnI9RGpu M2JRNXVOSkRQTV8yc2tmTDNyVzF0emNJeHlqVVpkbl9tNTVLUG1sbyZtPWQwS2NVUkdyY0h4WmJQ Z2JPaE1GUVZXRGlvTmpNZk91dzBjQThrMkFoS2cmcz1fYkpTeVJEcExCSXVhQUhsQU95d2JsVHBy QnpTMXJJdENFeUpjWFctdWh3JmU9Pg0K --_000_aa048eef0615446b80d8aa903cd42a17ustx2exdag1mb5msgcorpak_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 V2luZ2RpbmdzOw0KCXBhbm9zZS0xOjUgMCAwIDAgMCAwIDAgMCAwIDA7fQ0KQGZvbnQtZmFjZQ0K CXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2IDMg MiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1 IDUgMiAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWws IGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGluOw0KCW1hcmdpbi1ib3R0 b206LjAwMDFwdDsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixz YW5zLXNlcmlmO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXByaW9y aXR5Ojk5Ow0KCWNvbG9yOmJsdWU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQphOnZp c2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5 Ow0KCWNvbG9yOnB1cnBsZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCnAuTXNvTGlz dFBhcmFncmFwaCwgbGkuTXNvTGlzdFBhcmFncmFwaCwgZGl2Lk1zb0xpc3RQYXJhZ3JhcGgNCgl7 bXNvLXN0eWxlLXByaW9yaXR5OjM0Ow0KCW1hcmdpbi10b3A6MGluOw0KCW1hcmdpbi1yaWdodDow aW47DQoJbWFyZ2luLWJvdHRvbTowaW47DQoJbWFyZ2luLWxlZnQ6LjVpbjsNCgltYXJnaW4tYm90 dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIs c2Fucy1zZXJpZjt9DQpwLm1zb25vcm1hbDAsIGxpLm1zb25vcm1hbDAsIGRpdi5tc29ub3JtYWww DQoJe21zby1zdHlsZS1uYW1lOm1zb25vcm1hbDsNCgltc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzsN CgltYXJnaW4tcmlnaHQ6MGluOw0KCW1zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvOw0KCW1hcmdp bi1sZWZ0OjBpbjsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixz YW5zLXNlcmlmO30NCnAuZ21haWwtbS0yMTczNTk0ODU2MDg1NjAzMDYybXNvbGlzdHBhcmFncmFw aCwgbGkuZ21haWwtbS0yMTczNTk0ODU2MDg1NjAzMDYybXNvbGlzdHBhcmFncmFwaCwgZGl2Lmdt YWlsLW0tMjE3MzU5NDg1NjA4NTYwMzA2Mm1zb2xpc3RwYXJhZ3JhcGgNCgl7bXNvLXN0eWxlLW5h bWU6Z21haWwtbV8tMjE3MzU5NDg1NjA4NTYwMzA2Mm1zb2xpc3RwYXJhZ3JhcGg7DQoJbXNvLW1h cmdpbi10b3AtYWx0OmF1dG87DQoJbWFyZ2luLXJpZ2h0OjBpbjsNCgltc28tbWFyZ2luLWJvdHRv bS1hbHQ6YXV0bzsNCgltYXJnaW4tbGVmdDowaW47DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250 LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQpzcGFuLkVtYWlsU3R5bGUxOQ0KCXttc28t c3R5bGUtdHlwZTpwZXJzb25hbDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsN Cgljb2xvcjp3aW5kb3d0ZXh0O30NCnNwYW4uRW1haWxTdHlsZTIxDQoJe21zby1zdHlsZS10eXBl OnBlcnNvbmFsLWNvbXBvc2U7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJ Y29sb3I6d2luZG93dGV4dDt9DQouTXNvQ2hwRGVmYXVsdA0KCXttc28tc3R5bGUtdHlwZTpleHBv cnQtb25seTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQpAcGFnZSBXb3Jk U2VjdGlvbjENCgl7c2l6ZTo4LjVpbiAxMS4waW47DQoJbWFyZ2luOjEuMGluIDEuMGluIDEuMGlu IDEuMGluO30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLyogTGlz dCBEZWZpbml0aW9ucyAqLw0KQGxpc3QgbDANCgl7bXNvLWxpc3QtaWQ6MTM2NjA4NjQyOw0KCW1z by1saXN0LXRlbXBsYXRlLWlkczotNDk4MDI0ODYyO30NCkBsaXN0IGwwOmxldmVsMQ0KCXttc28t bGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1s ZXZlbC10YWItc3RvcDouNWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0 ZXh0LWluZGVudDotLjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZh bWlseTpTeW1ib2w7fQ0KQGxpc3QgbDA6bGV2ZWwyDQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0 OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjEuMGlu Ow0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47 DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxp c3QgbDA6bGV2ZWwzDQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2 ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjEuNWluOw0KCW1zby1sZXZlbC1udW1i ZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNvLWFuc2ktZm9udC1z aXplOjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDA6bGV2ZWw0DQoJe21z by1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNv LWxldmVsLXRhYi1zdG9wOjIuMGluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsN Cgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250 LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDA6bGV2ZWw1DQoJe21zby1sZXZlbC1udW1iZXItZm9y bWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjIu NWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1 aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0K QGxpc3QgbDA6bGV2ZWw2DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28t bGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjMuMGluOw0KCW1zby1sZXZlbC1u dW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNvLWFuc2ktZm9u dC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDA6bGV2ZWw3DQoJ e21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJ bXNvLWxldmVsLXRhYi1zdG9wOjMuNWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVm dDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglm b250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDA6bGV2ZWw4DQoJe21zby1sZXZlbC1udW1iZXIt Zm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9w OjQuMGluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDot LjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1ib2w7 fQ0KQGxpc3QgbDA6bGV2ZWw5DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCglt c28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjQuNWluOw0KCW1zby1sZXZl bC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNvLWFuc2kt Zm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDENCgl7bXNv LWxpc3QtaWQ6MTQ2OTg1ODM4NzsNCgltc28tbGlzdC10eXBlOmh5YnJpZDsNCgltc28tbGlzdC10 ZW1wbGF0ZS1pZHM6MTgyODQ5MTA3NCA2Njg0NjkwMzYgNjc2OTg2OTEgNjc2OTg2OTMgNjc2OTg2 ODkgNjc2OTg2OTEgNjc2OTg2OTMgNjc2OTg2ODkgNjc2OTg2OTEgNjc2OTg2OTM7fQ0KQGxpc3Qg bDE6bGV2ZWwxDQoJe21zby1sZXZlbC1zdGFydC1hdDowOw0KCW1zby1sZXZlbC1udW1iZXItZm9y bWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDotOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25l Ow0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47 DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJbXNvLWZhcmVhc3QtZm9udC1m YW1pbHk6Q2FsaWJyaTsNCgltc28tYmlkaS1mb250LWZhbWlseToiVGltZXMgTmV3IFJvbWFuIjt9 DQpAbGlzdCBsMTpsZXZlbDINCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1z by1sZXZlbC10ZXh0Om87DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51 bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCglmb250LWZhbWlseToi Q291cmllciBOZXciO30NCkBsaXN0IGwxOmxldmVsMw0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1h dDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674KnOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25l Ow0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47 DQoJZm9udC1mYW1pbHk6V2luZ2RpbmdzO30NCkBsaXN0IGwxOmxldmVsNA0KCXttc28tbGV2ZWwt bnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZlbC10 YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWlu ZGVudDotLjI1aW47DQoJZm9udC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0IGwxOmxldmVsNQ0KCXtt c28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ6bzsNCgltc28t bGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJ dGV4dC1pbmRlbnQ6LS4yNWluOw0KCWZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyI7fQ0KQGxpc3Qg bDE6bGV2ZWw2DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwt dGV4dDrvgqc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1w b3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCglmb250LWZhbWlseTpXaW5nZGlu Z3M7fQ0KQGxpc3QgbDE6bGV2ZWw3DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsN Cgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxl dmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCglmb250LWZh bWlseTpTeW1ib2w7fQ0KQGxpc3QgbDE6bGV2ZWw4DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0 OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDpvOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0K CW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJ Zm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Ijt9DQpAbGlzdCBsMTpsZXZlbDkNCgl7bXNvLWxldmVs LW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CpzsNCgltc28tbGV2ZWwt dGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1p bmRlbnQ6LS4yNWluOw0KCWZvbnQtZmFtaWx5OldpbmdkaW5nczt9DQpvbA0KCXttYXJnaW4tYm90 dG9tOjBpbjt9DQp1bA0KCXttYXJnaW4tYm90dG9tOjBpbjt9DQotLT48L3N0eWxlPjwhLS1baWYg Z3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVkZWZhdWx0cyB2OmV4dD0iZWRpdCIgc3BpZG1heD0i MTAyNiIgLz4NCjwveG1sPjwhW2VuZGlmXS0tPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86 c2hhcGVsYXlvdXQgdjpleHQ9ImVkaXQiPg0KPG86aWRtYXAgdjpleHQ9ImVkaXQiIGRhdGE9IjEi IC8+DQo8L286c2hhcGVsYXlvdXQ+PC94bWw+PCFbZW5kaWZdLS0+DQo8L2hlYWQ+DQo8Ym9keSBs YW5nPSJFTi1VUyIgbGluaz0iYmx1ZSIgdmxpbms9InB1cnBsZSI+DQo8ZGl2IGNsYXNzPSJXb3Jk U2VjdGlvbjEiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SSByZWNvbW1lbmQgeW91IGFsc28gZmFt aWxpYXJpemUgeW91cnNlbGYgd2l0aCA8YSBocmVmPSJodHRwczovL3Rvb2xzLmlldGYub3JnL2h0 bWwvZHJhZnQtaWV0Zi1xdWljLXRscy0yMCNzZWN0aW9uLTIuMSI+DQpodHRwczovL3Rvb2xzLmll dGYub3JnL2h0bWwvZHJhZnQtaWV0Zi1xdWljLXRscy0yMCNzZWN0aW9uLTIuMTwvYT4uJm5ic3A7 IEl0IGdpdmVzIGEgZ29vZCBvdmVydmlldyBvZiBUTFMgYW5kIGxhdGVyIGluIHRoZSB0ZXh0IGRl c2NyaWJlcyBob3cgVExTIGlzIHVzZWQgaW4gUVVJQy4mbmJzcDsgSXQgaXMgcmVmZXJlbmNlZCBm cm9tIHRoZSBUcmFuc3BvcnQgZHJhZnQgaXMgYSBmZXcga2V5IHBsYWNlcy48bzpwPjwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+TW9zdCBvZnRlbiwgeWVzLCAwLVJUVCBkYXRhIHdpbGwgYmUgdHJhbnNtaXR0 ZWQgb25seSBpbiB0aGUgZmlyc3Qgcm91bmQgdHJpcCAoZXhjZXB0IGlmIGEgc2VydmVy4oCZcyBo YW5kc2hha2UgcGFja2V0IGlzIGxvc3QpLiBOb3RlIHRoYXQgMC1SVFQgZGF0YSBpcyBhbHNvIGVu Y3J5cHRlZCB1c2luZyBrZXlzIHJlY2VpdmVkIGluIGEgcHJpb3IgY29ubmVjdGlvbiE8bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+T2YgY291cnNlLCBpZiAwLVJUVCBwYWNrZXRzIGFyZSByZWplY3Rl ZCBieSB0aGUgc2VydmVyIChzZWUgVmVyc2lvbiBOZWdvdGlhdGlvbiBhbmQgUmV0cnkgcGFja2V0 cyksIHRoZSBjbGllbnQgbWF5IG5lZWQgdG8gcmVzZW5kIDAtUlRUIGRhdGEgYWdhaW4uPG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjx1 bCBzdHlsZT0ibWFyZ2luLXRvcDowaW4iIHR5cGU9ImRpc2MiPg0KPGxpIGNsYXNzPSJNc29MaXN0 UGFyYWdyYXBoIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MGluO21zby1saXN0OmwxIGxldmVsMSBsZm8y Ij5JZ29yPG86cD48L286cD48L2xpPjwvdWw+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZu YnNwOzwvbzpwPjwvcD4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlk IGJsdWUgMS41cHQ7cGFkZGluZzowaW4gMGluIDBpbiA0LjBwdCI+DQo8ZGl2Pg0KPGRpdiBzdHls ZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjRTFFMUUxIDEuMHB0O3BhZGRpbmc6My4w cHQgMGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+RnJvbTo8L2I+IFdpbGxp YW0gSGVycmluICZsdDtiaWxsQGhlcnJpbi51cyZndDsgPGJyPg0KPGI+U2VudDo8L2I+IFdlZG5l c2RheSwgSnVseSAwMywgMjAxOSA3OjUyIFBNPGJyPg0KPGI+VG86PC9iPiBMdWJhc2hldiwgSWdv ciAmbHQ7aWx1YmFzaGVAYWthbWFpLmNvbSZndDs8YnI+DQo8Yj5DYzo8L2I+IHF1aWNAaWV0Zi5v cmc8YnI+DQo8Yj5TdWJqZWN0OjwvYj4gUmU6IFF1ZXN0aW9uIGFib3V0IDAtUlRUPG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8 L286cD48L3A+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlRoYW5rcyBJZ29y LDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86 cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5J IGdldCB0aGUgaW1wcmVzc2lvbiBpbiBSRkM4NDQ2IHRoYXQgMC1SVFQgZGF0YSBpcyBsaXRlcmFs bHkgdHJhbnNtaXR0ZWQgaW4gdGhlIGZpcnN0IHJvdW5kIHRyaXAgYmVmb3JlIHRoZSBzZXJ2ZXIg cmV0dXJucyBiYWNrIHRoZSBrZXkuIEFmdGVyIHRoZSBmaXJzdCByb3VuZCB0cmlwLCB0aGUgZGF0 YSBpcyBhbHdheXMgZW5jcnlwdGVkLiBJcyB0aGF0IGFjY3VyYXRlPzxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5JcyB0aGF0IHRydWUgaW4gUVVJ QyBhcyB3ZWxsPyBJIHdhcyB1bmRlciB0aGUgKHBvc3NpYmx5IG1pc3Rha2VuKSBpbXByZXNzaW9u IHRoYXQgcXVpYyB3aWxsIGluIHNvbWUgY2FzZXMgbmVlZCBhZGRpdGlvbmFsIHJvdW5kIHRyaXBz IGJlZm9yZSBuZWdvdGlhdGlvbiBpcyBjb21wbGV0ZSBhbmQgaXQgbW92ZXMgdG8gdGhlIDEtUlRU IHN0YXRlPzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj5SZWdhcmRsZXNzLCBjYW4gc29tZXRoaW5nIGJlIGFkZGVkIHRvIHNlY3Rpb24gMS4yICh0 ZXJtcyBhbmQgZGVmaW5pdGlvbnMpIHJlZmVycmluZyB0aGUgcmVhZGVyIHRvIHRoZSBleHBsYW5h dGlvbiBvZiAwLVJUVCBhbmQgMS1SVFQ/PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPlRoYW5rcyw8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkJpbGwgSGVycmluPG86cD48L286cD48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwv ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPk9uIFdlZCwgSnVsIDMsIDIwMTkgYXQgNDoyMSBQ TSBMdWJhc2hldiwgSWdvciAmbHQ7PGEgaHJlZj0ibWFpbHRvOmlsdWJhc2hlQGFrYW1haS5jb20i PmlsdWJhc2hlQGFrYW1haS5jb208L2E+Jmd0OyB3cm90ZTo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGJsb2NrcXVvdGUgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkICNDQ0ND Q0MgMS4wcHQ7cGFkZGluZzowaW4gMGluIDBpbiA2LjBwdDttYXJnaW4tbGVmdDo0LjhwdDttYXJn aW4tcmlnaHQ6MGluIj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj5IaSBC aWxsLDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJn aW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6 YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+MC1SVFQgaXMgYSB0ZXJtIGNvbW1vbmx5 IHVzZWQgYnkgVExTIOKAkyB0aGUgY3J5cHRvIHByb3RvY29sIHRoYXQgUVVJQyB1c2VzIHRvIHNl Y3VyZSBkYXRhLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1z by1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj5TZWUNCjxh IGhyZWY9Imh0dHBzOi8vdXJsZGVmZW5zZS5wcm9vZnBvaW50LmNvbS92Mi91cmw/dT1odHRwcy0z QV9fdG9vbHMuaWV0Zi5vcmdfaHRtbF9yZmM4NDQ2LTIzc2VjdGlvbi0yRDIuMyZhbXA7ZD1Ed01G YVEmYW1wO2M9OTZaYlpaY2FNRjR3MEY0anBONkxaZyZhbXA7cj1Eam4zYlE1dU5KRFBNXzJza2ZM M3JXMXR6Y0l4eWpVWmRuX201NUtQbWxvJmFtcDttPWQwS2NVUkdyY0h4WmJQZ2JPaE1GUVZXRGlv TmpNZk91dzBjQThrMkFoS2cmYW1wO3M9ckNCUXBSRGctdkF3VDRlSmh3bTRQa1dwSHAtSnJ2aWF0 VU1zekkzeXpKRSZhbXA7ZT0iIHRhcmdldD0iX2JsYW5rIj4NCmh0dHBzOi8vdG9vbHMuaWV0Zi5v cmcvaHRtbC9yZmM4NDQ2I3NlY3Rpb24tMi4zPC9hPi48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJv dHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1 dG8iPjAtUlRUIGlzIGEgZmVhdHVyZSBvZiBhIHByb3RvY29sIHRoYXQgYWxsb3dzIGRhdGEgdG8g YmUgZGVsaXZlcmVkIHRvIHRoZSBvdGhlciBlbmRwb2ludCBpbiBsZXNzIHRoYW4gMSBSVFQgKHJv dW5kIHRyaXAgdGltZSkgZnJvbSB0aGUgY29ubmVjdGlvbiBpbml0aWF0aW9uIChtb3JlIGFjY3Vy YXRlbHksIGl0DQogaXMgYSBwcm90b2NvbCBmZWF0dXJlIHRoYXQgYWxsb3dzIGRhdGEgdG8gYmUg c2VudCBiZWZvcmUgdGhlIHByb3RvY29sIGhhbmRzaGFrZSBpcyBjb21wbGV0ZSkuPG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1 dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJn aW4tYm90dG9tLWFsdDphdXRvIj4wLVJUVCBkYXRhIChhbHNvIGtub3duIGFzIOKAnGVhcmx5IGRh dGHigJ0pIGlzIHRoZSBkYXRhIHRoYXQgaXMgc2VudCBiZWZvcmUgdGhlIGhhbmRzaGFrZSBjb21w bGV0aW9uLiZuYnNwOyAwLVJUVCBwYWNrZXRzIGFyZSBwYWNrZXRzIGNvbnRhaW5pbmcgMC1SVFQg ZGF0YS48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFy Z2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48 L286cD48L3A+DQo8dWwgdHlwZT0iZGlzYyI+DQo8bGkgY2xhc3M9ImdtYWlsLW0tMjE3MzU5NDg1 NjA4NTYwMzA2Mm1zb2xpc3RwYXJhZ3JhcGgiIHN0eWxlPSJtc28tbGlzdDpsMCBsZXZlbDEgbGZv MSI+DQpJZ29yPG86cD48L286cD48L2xpPjwvdWw+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPiZu YnNwOzxvOnA+PC9vOnA+PC9wPg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6 c29saWQgYmx1ZSAxLjVwdDtwYWRkaW5nOjBpbiAwaW4gMGluIDQuMHB0Ij4NCjxkaXY+DQo8ZGl2 IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNFMUUxRTEgMS4wcHQ7cGFkZGlu ZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1h cmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxiPkZyb206PC9i PiBXaWxsaWFtIEhlcnJpbiAmbHQ7PGEgaHJlZj0ibWFpbHRvOmJpbGxAaGVycmluLnVzIiB0YXJn ZXQ9Il9ibGFuayI+YmlsbEBoZXJyaW4udXM8L2E+Jmd0Ow0KPGJyPg0KPGI+U2VudDo8L2I+IFdl ZG5lc2RheSwgSnVseSAwMywgMjAxOSA2OjI5IFBNPGJyPg0KPGI+VG86PC9iPiA8YSBocmVmPSJt YWlsdG86cXVpY0BpZXRmLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPnF1aWNAaWV0Zi5vcmc8L2E+PGJy Pg0KPGI+U3ViamVjdDo8L2I+IFF1ZXN0aW9uIGFib3V0IDAtUlRUPG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9w LWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpwPjwvbzpwPjwv cD4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4t dG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj5IaSBmb2xrcyw8bzpwPjwv bzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10 b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPiZuYnNwOzxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJn aW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj5SZWFkaW5nJm5ic3A7 PGEgaHJlZj0iaHR0cHM6Ly91cmxkZWZlbnNlLnByb29mcG9pbnQuY29tL3YyL3VybD91PWh0dHBz LTNBX190b29scy5pZXRmLm9yZ19odG1sX2RyYWZ0LTJEaWV0Zi0yRHF1aWMtMkR0cmFuc3BvcnQt MkQyMCZhbXA7ZD1Ed01GYVEmYW1wO2M9OTZaYlpaY2FNRjR3MEY0anBONkxaZyZhbXA7cj1Eam4z YlE1dU5KRFBNXzJza2ZMM3JXMXR6Y0l4eWpVWmRuX201NUtQbWxvJmFtcDttPW1zZlp6YmFlT3By N0d0NFdoaEs1bWhabmszUnp4MkdxZ0JPa0UxOG5HNmMmYW1wO3M9UXAyWlRpVDFqS0tfNnhUcGFa QWdTbEpLOWVwcHM5aE5OeldDN0t4UzdKcyZhbXA7ZT0iIHRhcmdldD0iX2JsYW5rIj5odHRwczov L3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtaWV0Zi1xdWljLXRyYW5zcG9ydC0yMDwvYT4sDQog SSBoYXZlIGEgcXVlc3Rpb24gYWJvdXQgMC1SVFQ6IFdoYXQgaXMgaXQ/PG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10 b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPiZuYnNwOzxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJn aW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj5UaGUgZHJhZnQgdGFs a3MgYSBsb3QgYWJvdXQgaXQsIGJ1dCBJIGRpZG4ndCBzZWUgYW55d2hlcmUgdGhhdCBjbGVhcmx5 IGRlZmluZWQgd2hhdCBpdCBpcy4gV2hlbiBJIHNlZSAmcXVvdDtSVFQmcXVvdDsgd2l0aG91dCBh IGRlZmluaXRpb24gSSB0ZW5kIHRvIHRoaW5rICZxdW90O3JvdW5kIHRyaXAgdGltZSwmcXVvdDsg YnV0IHRoZSBleHBsYW5hdGlvbg0KIG9mIDAtUlRUIHNlZW1zIHRvIGhhdmUgbW9yZSB0byBkbyB3 aXRoIGVuY3J5cHRpb24gc2V0dXAgZHVyaW5nIGNvbm5lY3Rpb24gaW5pdGlhbGl6YXRpb24gdGhh biBhbnkgdGllIHRvIHdoaWNoIHJvdW5kIHRyaXAgY29tcGxldGVzIHRoZSBzZXR1cC4gSSBmaW5k IHRoaXMgY29uZnVzaW5nLjxiciBjbGVhcj0iYWxsIj4NCjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28t bWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87 bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPldvdWxkIHNvbWVvbmUgY29tbWVudCBhbmQgZWl0 aGVyIHNob3cgbWUgdGhlIGRlZmluaXRpb24gSSBtaXNzZWQgb3IgYWRkIG9uZSB0byB0aGUgbmV4 dCBkcmFmdD88bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6 YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20t YWx0OmF1dG8iPlRoYW5rcyw8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJv dHRvbS1hbHQ6YXV0byI+QmlsbCBIZXJyaW48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28t bWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFy Z2luLWJvdHRvbS1hbHQ6YXV0byI+LS0NCjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRv O21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj5XaWxsaWFtIEhlcnJpbjxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4t dG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48YSBocmVmPSJtYWlsdG86 YmlsbEBoZXJyaW4udXMiIHRhcmdldD0iX2JsYW5rIj5iaWxsQGhlcnJpbi51czwvYT48bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28t bWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PGEgaHJlZj0i aHR0cHM6Ly91cmxkZWZlbnNlLnByb29mcG9pbnQuY29tL3YyL3VybD91PWh0dHBzLTNBX19iaWxs LmhlcnJpbi51c18mYW1wO2Q9RHdNRmFRJmFtcDtjPTk2WmJaWmNhTUY0dzBGNGpwTjZMWmcmYW1w O3I9RGpuM2JRNXVOSkRQTV8yc2tmTDNyVzF0emNJeHlqVVpkbl9tNTVLUG1sbyZhbXA7bT1tc2Za emJhZU9wcjdHdDRXaGhLNW1oWm5rM1J6eDJHcWdCT2tFMThuRzZjJmFtcDtzPWpQQUpqLVMxVHFJ N0NIS0ZBT2ZzNDczZF9nNl9mUVBZWWp0dHpwUm9waWMmYW1wO2U9IiB0YXJnZXQ9Il9ibGFuayI+ aHR0cHM6Ly9iaWxsLmhlcnJpbi51cy88L2E+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2 Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+ DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiciBjbGVhcj0i YWxsIj4NCjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4tLSA8bzpwPjwv bzpwPjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPldpbGxp YW0gSGVycmluPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48YSBocmVmPSJtYWlsdG86YmlsbEBoZXJyaW4udXMiIHRhcmdldD0iX2JsYW5rIj5iaWxs QGhlcnJpbi51czwvYT48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxhIGhyZWY9Imh0dHBzOi8vdXJsZGVmZW5zZS5wcm9vZnBvaW50LmNvbS92Mi91 cmw/dT1odHRwcy0zQV9fYmlsbC5oZXJyaW4udXNfJmFtcDtkPUR3TUZhUSZhbXA7Yz05NlpiWlpj YU1GNHcwRjRqcE42TFpnJmFtcDtyPURqbjNiUTV1TkpEUE1fMnNrZkwzclcxdHpjSXh5alVaZG5f bTU1S1BtbG8mYW1wO209ZDBLY1VSR3JjSHhaYlBnYk9oTUZRVldEaW9Oak1mT3V3MGNBOGsyQWhL ZyZhbXA7cz1fYkpTeVJEcExCSXVhQUhsQU95d2JsVHByQnpTMXJJdENFeUpjWFctdWh3JmFtcDtl PSIgdGFyZ2V0PSJfYmxhbmsiPmh0dHBzOi8vYmlsbC5oZXJyaW4udXMvPC9hPjxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9i b2R5Pg0KPC9odG1sPg0K --_000_aa048eef0615446b80d8aa903cd42a17ustx2exdag1mb5msgcorpak_-- From nobody Fri Jul 5 01:42:38 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BE3C1120295 for ; Fri, 5 Jul 2019 01:42:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FNQfZ3Qb0OuU for ; Fri, 5 Jul 2019 01:42:23 -0700 (PDT) Received: from mail-lf1-x12f.google.com (mail-lf1-x12f.google.com [IPv6:2a00:1450:4864:20::12f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 51750120182 for ; Fri, 5 Jul 2019 01:42:21 -0700 (PDT) Received: by mail-lf1-x12f.google.com with SMTP id b29so5837739lfq.1 for ; Fri, 05 Jul 2019 01:42:21 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=kLVbJwc06QkgFUt6jz9+Sg25bo+aFIpRBWwbrQ+X6o0=; b=CTALDoS7tuIflRMT18hKflv4AaQgtCWfuJZXE0spZIeggkO88oKznlhsI6sbTMdTth uXRMINCVX9HX+gEs/7qVqu50C0WGNLcj2ZVAVlRmmtCm7M+ktlHxnbXACtP0jFwDs46j o6x3DBUlZcmwZp8F3kZYuJ6tDMsiYfVOa7PBxWPyBQ6pKmkZC93hmJ0HRomWK7kY3cOn TU6a4Xq+S88+X+L6CO1vzVMdDoYpZFhxk+/JscRwqvM+m0rZMNuKHSDUZQZsl3EDptsD dwh++OhFTKw9jhUFxjvwbLDXboOiTS0GyfYl9msAc9tWYO4fYNPLc/cK1jgHEAfSYEqT HVow== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=kLVbJwc06QkgFUt6jz9+Sg25bo+aFIpRBWwbrQ+X6o0=; b=JHXZevE4qIes0gf2Og3ort4HLy9NS9tdSBdt7gp0W3gGnBA2DZeM05eAxuuwilSMyu WJTw4CV4dSB+l40QsinlfXmETOIRMkS1ytS/KrNcnzSJtAtFsLKGJuRqs3gki6PimUyA k8/bwmFrmXliN3oXRvzW66dVQxrGw1XE3sbKv0/cCzYP2tDEa57Oq2mSlMSbIK8Ax3jc 6VxwgT/CKh3QWLkjWXRk5yFofx+TWzvDWR1V7q+WVIgzmA4Ik1Eqn0sp0IrIAs9oelba eR/SGzzM9WEO97egBCoDHq2tTfVTOMfw1Cy3lLEQaWcJMpGZReIzNcvO5PLsV69gaZI8 KPJA== X-Gm-Message-State: APjAAAWwNxDskuA88zmmifx35zZOv38c8+SWNiHhpKrBxhm/nIbQEm+s PTR6oMkyLRVlrHXoNENq0Gsnhd+Luf180uqpmow5x/Vo X-Google-Smtp-Source: APXvYqwWW64LXVXXPy7R7hh29xgPAyeVlpmBq2ttGR427UjdO8zGhx3hx1AyeSIUn3n37DSpNNor5r2qWKygqmXTIP8= X-Received: by 2002:ac2:4839:: with SMTP id 25mr1423893lft.79.1562316139289; Fri, 05 Jul 2019 01:42:19 -0700 (PDT) MIME-Version: 1.0 References: <156231582165.22018.291016500099755441.idtracker@ietfa.amsl.com> In-Reply-To: <156231582165.22018.291016500099755441.idtracker@ietfa.amsl.com> From: Kazuho Oku Date: Fri, 5 Jul 2019 17:42:07 +0900 Message-ID: Subject: Submission of QUIC-AH draft-01, with support for version number greasing (Fwd: New Version Notification for draft-kazuho-quic-authenticated-handshake-01.txt) To: IETF QUIC WG Cc: Christian Huitema Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 05 Jul 2019 08:42:36 -0000 Hi all, Christian and I have submitted -01 of draft-ietf-quic-authenticated-handshake (QUIC-AH), that descriibes a variant of QUIC v1 that uses ESNI [1] to protect Initial packets (and therefore the entire lifetime of a QUIC connection) from MITM attacks. Since -00 [2], we have fixed a design flaw (pointed out by EKR), added Considerations, and introduced the capability to advertise alternative QUIC version numbers to be used on the wire, as we have discussed in London [3]. Version number greasing, the new feature in -01, works as follows: 1. Alternative versions to be used on the wire is published using DNS, through an extension of the ESNI Resource Record. ESNI requires the Resource Record be known to the server. 2. Client that supports QUIC-AH picks one of the wire-versions found in the ESNI RR. The obfuscation key of the Initial packet is derived the same way as QUICv1 (i.e. from DCID). 3. The server, with the knowledge of the mapping between the versions on the wire and the actual versions, decodes and processes the Initial packet. I think that this design is simple, and that it would be trivial to implement on top of QUIC-AH (or on top of QUIC v1/TLS+ESNI, if the WG prefers just using the version number greasing but not the =E2=80=9Cauthenticated handshake=E2=80=9D part of the I-D). That said, I think the broader question is how we should protect not only the version number field but also other non-encrypted fields of QUIC packets (e.g., payload format of Initial packet =3D ClientHello) from getting ossified. I think there are three options: a) Merely obfuscate the version number field. That's what is currently being achieved by the draft. b) In addition to the version numbers, advertise alternative salt values to be used on the wire using the ESNI Resource Record. Doing so does not prevent a middlebox from observing the content of ClientHello (even though it cannot see the plaintext SNI), however it would require the middlebox more work, as it needs to fetch the ESNI Resource Record to obtain the salt. IIRC, this is analogous to what was proposed in #2573 [4]. c) Encrypt the Initial payload [5]. ESNI provides a semi-static public key known to the server. In case of ESNI, that key is used to encrypt only the server name, but in case of QUIC, because the format of the Initial packet is not yet encrypted, we have the freedom to change the design as we would like. That would be the ultimate method to prevent the payload of v1 CRYPTO frame from getting ossified. Though in turn, the way the client encodes it's public key in the AH Initial packet (most likely a particular encoding of HPKE [6]) could become an ossification vector. What do you think? I would appreciate it if you could give us feedback, either on QUIC-AH in general, or on the version number greasing design. [1] https://tools.ietf.org/html/draft-ietf-tls-esni-03 [2] https://mailarchive.ietf.org/arch/msg/quic/DdT-gIgzxUDnSajyoMwDm1A_URQ [3] https://github.com/quicwg/base-drafts/issues/2496 [4] https://github.com/quicwg/base-drafts/pull/2573 [5] https://github.com/kazuho/draft-kazuho-quic-authenticated-handshake/iss= ues/9 [6] https://tools.ietf.org/html/draft-barnes-cfrg-hpke-01 ---------- Forwarded message --------- From: Date: 2019=E5=B9=B47=E6=9C=885=E6=97=A5(=E9=87=91) 17:37 Subject: New Version Notification for draft-kazuho-quic-authenticated-handshake-01.txt To: Kazuho Oku , Christian Huitema A new version of I-D, draft-kazuho-quic-authenticated-handshake-01.txt has been successfully submitted by Kazuho Oku and posted to the IETF repository. Name: draft-kazuho-quic-authenticated-handshake Revision: 01 Title: Authenticated Handshake for QUIC Document date: 2019-07-05 Group: Individual Submission Pages: 11 URL: https://www.ietf.org/internet-drafts/draft-kazuho-quic-authenticated-handsh= ake-01.txt Status: https://datatracker.ietf.org/doc/draft-kazuho-quic-authenticated-handshake/ Htmlized: https://tools.ietf.org/html/draft-kazuho-quic-authenticated-handshake-01 Htmlized: https://datatracker.ietf.org/doc/html/draft-kazuho-quic-authenticated-hands= hake Diff: https://www.ietf.org/rfcdiff?url2=3Ddraft-kazuho-quic-authenticated-handsha= ke-01 Abstract: This document explains a variant of QUIC protocol version 1 that uses the ESNI Keys to authenticate the Initial packets thereby making the entire handshake tamper-proof. Please note that it may take a couple of minutes from the time of submissio= n until the htmlized version and diff are available at tools.ietf.org. The IETF Secretariat --=20 Kazuho Oku From nobody Fri Jul 5 01:44:09 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9FA8B12027A for ; Fri, 5 Jul 2019 01:43:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BNgq3iSDK_e0 for ; Fri, 5 Jul 2019 01:43:53 -0700 (PDT) Received: from mail-lj1-x231.google.com (mail-lj1-x231.google.com [IPv6:2a00:1450:4864:20::231]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 84E6912028F for ; Fri, 5 Jul 2019 01:43:52 -0700 (PDT) Received: by mail-lj1-x231.google.com with SMTP id 16so8443252ljv.10 for ; Fri, 05 Jul 2019 01:43:52 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=yXyMQSKkLboEyfi85OTouq0nefcZ0OIs1dmc/aGb8wc=; b=R99qp+e2ZjcClUFYb1UxX9zidYWpxPO3JcW7YA6tezD6uYR1fc19XyzuoDREtDSmAX 4UhjQNHHgfIf0ORTd/e0m02OinXZVgYrPg4Yi/Gvo3qnMjJuofxzJ6ZQHtHCCLQmqNtG XvVEGKsnOrspL3IDOjdS5CgfGNDI/2fZqEs+WDQGDZqDkozKiWQuGzXERrCtT+eC7yyq hiH+p/FhxGYR7nxG2NWsujRpBfTkU+DjW9iSCXTbZoN9UhxPeqf7LPr8QOspgcsIpXYQ IOo9RgQhDNiEoUOUnH+X85hvljb2QpEY195/fsV/PPOf79Y6d06n0jBOfnRgzdfU6kJL YoUQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=yXyMQSKkLboEyfi85OTouq0nefcZ0OIs1dmc/aGb8wc=; b=FPhGbms9XwBDRnGsUMYPMzeSv2bMjgmmgLktkK7FYHZ1Azh0YjhwIv3o+Gk4/qL5yB HoSy4UKv2oxIPGFgHrYXFfAALp6P38vbXTKl4BcziTB+4T3b/osRb84Twrj73hrQ85eb u9UQFoPNn99wZ+keXRqUFKrj7ZKJ8hNF/Dpejp3+hT/59LICoKhnpMyRzjrYEuIRROvg wtO0DaQQe0b0qv51KHAOqErFqI/kd7qLAbT0mw3Xu7AveXna+HwHteiFca421D4+WqMn h5Y2NFMpSj5uNdMRJ3ZzN0YyfyQkNaPnTeAkJKlPBlWzEXIYEEJihqHjO+XeOnh/t3Z4 kEug== X-Gm-Message-State: APjAAAVIxjaVryNzV+fFZqT7/GJvqCROoTdRGDvpNs0JPti3xApLhaCN 3c7Rggqd3ngIXYPKjoA0Zk4kRcLyhQj1oRFthvP8DHpq X-Google-Smtp-Source: APXvYqy5esM/6L1ohh4XMmCQV73AiX2j5NarQIwD+HjmiQLSslLYySDwy/Tvx2yLX9YjKoCpo/D/uHYiCax8o8lFL5M= X-Received: by 2002:a2e:968f:: with SMTP id q15mr1535406lji.30.1562316230667; Fri, 05 Jul 2019 01:43:50 -0700 (PDT) MIME-Version: 1.0 References: <156231582165.22018.291016500099755441.idtracker@ietfa.amsl.com> In-Reply-To: From: Kazuho Oku Date: Fri, 5 Jul 2019 17:43:39 +0900 Message-ID: Subject: Re: Submission of QUIC-AH draft-01, with support for version number greasing (Fwd: New Version Notification for draft-kazuho-quic-authenticated-handshake-01.txt) To: IETF QUIC WG Cc: Christian Huitema Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 05 Jul 2019 08:44:09 -0000 PS. Apologies, I failed to put the link to the new I-D at the top of my mail. Maybe it's obvious, but it's https://www.ietf.org/id/draft-kazuho-quic-authenticated-handshake-01.txt. 2019=E5=B9=B47=E6=9C=885=E6=97=A5(=E9=87=91) 17:42 Kazuho Oku : > > Hi all, > > Christian and I have submitted -01 of > draft-ietf-quic-authenticated-handshake (QUIC-AH), that descriibes a > variant of QUIC v1 that uses ESNI [1] to protect Initial packets (and > therefore the entire lifetime of a QUIC connection) from MITM attacks. > > Since -00 [2], we have fixed a design flaw (pointed out by EKR), added > Considerations, and introduced the capability to advertise alternative > QUIC version numbers to be used on the wire, as we have discussed in > London [3]. > > Version number greasing, the new feature in -01, works as follows: > > 1. Alternative versions to be used on the wire is published using DNS, > through an extension of the ESNI Resource Record. ESNI requires the > Resource Record be known to the server. > 2. Client that supports QUIC-AH picks one of the wire-versions found > in the ESNI RR. The obfuscation key of the Initial packet is derived > the same way as QUICv1 (i.e. from DCID). > 3. The server, with the knowledge of the mapping between the versions > on the wire and the actual versions, decodes and processes the Initial > packet. > > I think that this design is simple, and that it would be trivial to > implement on top of QUIC-AH (or on top of QUIC v1/TLS+ESNI, if the WG > prefers just using the version number greasing but not the > =E2=80=9Cauthenticated handshake=E2=80=9D part of the I-D). > > That said, I think the broader question is how we should protect not > only the version number field but also other non-encrypted fields of > QUIC packets (e.g., payload format of Initial packet =3D ClientHello) > from getting ossified. I think there are three options: > > a) Merely obfuscate the version number field. That's what is currently > being achieved by the draft. > > b) In addition to the version numbers, advertise alternative salt > values to be used on the wire using the ESNI Resource Record. Doing so > does not prevent a middlebox from observing the content of ClientHello > (even though it cannot see the plaintext SNI), however it would > require the middlebox more work, as it needs to fetch the ESNI > Resource Record to obtain the salt. IIRC, this is analogous to what > was proposed in #2573 [4]. > > c) Encrypt the Initial payload [5]. ESNI provides a semi-static public > key known to the server. In case of ESNI, that key is used to encrypt > only the server name, but in case of QUIC, because the format of the > Initial packet is not yet encrypted, we have the freedom to change the > design as we would like. That would be the ultimate method to prevent > the payload of v1 CRYPTO frame from getting ossified. Though in turn, > the way the client encodes it's public key in the AH Initial packet > (most likely a particular encoding of HPKE [6]) could become an > ossification vector. > > What do you think? I would appreciate it if you could give us > feedback, either on QUIC-AH in general, or on the version number > greasing design. > > > [1] https://tools.ietf.org/html/draft-ietf-tls-esni-03 > [2] https://mailarchive.ietf.org/arch/msg/quic/DdT-gIgzxUDnSajyoMwDm1A_UR= Q > [3] https://github.com/quicwg/base-drafts/issues/2496 > [4] https://github.com/quicwg/base-drafts/pull/2573 > [5] https://github.com/kazuho/draft-kazuho-quic-authenticated-handshake/i= ssues/9 > [6] https://tools.ietf.org/html/draft-barnes-cfrg-hpke-01 > > > > ---------- Forwarded message --------- > From: > Date: 2019=E5=B9=B47=E6=9C=885=E6=97=A5(=E9=87=91) 17:37 > Subject: New Version Notification for > draft-kazuho-quic-authenticated-handshake-01.txt > To: Kazuho Oku , Christian Huitema > > > > A new version of I-D, draft-kazuho-quic-authenticated-handshake-01.txt > has been successfully submitted by Kazuho Oku and posted to the > IETF repository. > > Name: draft-kazuho-quic-authenticated-handshake > Revision: 01 > Title: Authenticated Handshake for QUIC > Document date: 2019-07-05 > Group: Individual Submission > Pages: 11 > URL: > https://www.ietf.org/internet-drafts/draft-kazuho-quic-authenticated-hand= shake-01.txt > Status: > https://datatracker.ietf.org/doc/draft-kazuho-quic-authenticated-handshak= e/ > Htmlized: > https://tools.ietf.org/html/draft-kazuho-quic-authenticated-handshake-01 > Htmlized: > https://datatracker.ietf.org/doc/html/draft-kazuho-quic-authenticated-han= dshake > Diff: > https://www.ietf.org/rfcdiff?url2=3Ddraft-kazuho-quic-authenticated-hands= hake-01 > > Abstract: > This document explains a variant of QUIC protocol version 1 that uses > the ESNI Keys to authenticate the Initial packets thereby making the > entire handshake tamper-proof. > > > > > Please note that it may take a couple of minutes from the time of submiss= ion > until the htmlized version and diff are available at tools.ietf.org. > > The IETF Secretariat > > > > -- > Kazuho Oku --=20 Kazuho Oku From nobody Fri Jul 5 01:47:56 2019 Return-Path: X-Original-To: quic@ietf.org Delivered-To: quic@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 7894612017C; Fri, 5 Jul 2019 01:47:49 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: quic@ietf.org Subject: I-D Action: draft-ietf-quic-applicability-05.txt X-Test-IDTracker: no X-IETF-IDTracker: 6.98.2 Auto-Submitted: auto-generated Precedence: bulk Reply-To: quic@ietf.org Message-ID: <156231646943.21761.3011728044483592771@ietfa.amsl.com> Date: Fri, 05 Jul 2019 01:47:49 -0700 Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 05 Jul 2019 08:47:49 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the QUIC WG of the IETF. Title : Applicability of the QUIC Transport Protocol Authors : Mirja Kuehlewind Brian Trammell Filename : draft-ietf-quic-applicability-05.txt Pages : 16 Date : 2019-07-05 Abstract: This document discusses the applicability of the QUIC transport protocol, focusing on caveats impacting application protocol development and deployment over QUIC. Its intended audience is designers of application protocol mappings to QUIC, and implementors of these application protocols. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-quic-applicability/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-quic-applicability-05 https://datatracker.ietf.org/doc/html/draft-ietf-quic-applicability-05 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-quic-applicability-05 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Fri Jul 5 01:48:09 2019 Return-Path: X-Original-To: quic@ietf.org Delivered-To: quic@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 10386120199; Fri, 5 Jul 2019 01:47:56 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: quic@ietf.org Subject: I-D Action: draft-ietf-quic-manageability-05.txt X-Test-IDTracker: no X-IETF-IDTracker: 6.98.2 Auto-Submitted: auto-generated Precedence: bulk Reply-To: quic@ietf.org Message-ID: <156231647598.22022.7455074710183109945@ietfa.amsl.com> Date: Fri, 05 Jul 2019 01:47:56 -0700 Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 05 Jul 2019 08:48:07 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the QUIC WG of the IETF. Title : Manageability of the QUIC Transport Protocol Authors : Mirja Kuehlewind Brian Trammell Filename : draft-ietf-quic-manageability-05.txt Pages : 21 Date : 2019-07-05 Abstract: This document discusses manageability of the QUIC transport protocol, focusing on caveats impacting network operations involving QUIC traffic. Its intended audience is network operators, as well as content providers that rely on the use of QUIC-aware middleboxes, e.g. for load balancing. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-quic-manageability/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-quic-manageability-05 https://datatracker.ietf.org/doc/html/draft-ietf-quic-manageability-05 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-quic-manageability-05 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Fri Jul 5 03:45:45 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1CE3C1201AA for ; Fri, 5 Jul 2019 03:45:43 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hp0RvCnCEaiz for ; Fri, 5 Jul 2019 03:45:39 -0700 (PDT) Received: from smtp-sh.infomaniak.ch (smtp-sh.infomaniak.ch [128.65.195.4]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0F2901201A2 for ; Fri, 5 Jul 2019 03:45:38 -0700 (PDT) Received: from smtp7.infomaniak.ch (smtp7.infomaniak.ch [83.166.132.30]) by smtp-sh.infomaniak.ch (8.14.5/8.14.5) with ESMTP id x65AjZit012830 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK) for ; Fri, 5 Jul 2019 12:45:35 +0200 Received: from [IPv6:2a00:79e1:abc:307:12b:c813:a285:c179] ([IPv6:2a00:79e1:abc:307:12b:c813:a285:c179]) (authenticated bits=0) by smtp7.infomaniak.ch (8.14.5/8.14.5) with ESMTP id x65AjZ1G142033 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO) for ; Fri, 5 Jul 2019 12:45:35 +0200 From: "Brian Trammell (IETF)" Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Subject: Re: I-D Action: draft-ietf-quic-manageability-05.txt Date: Fri, 5 Jul 2019 12:45:35 +0200 References: <156231647598.22022.7455074710183109945@ietfa.amsl.com> To: IETF QUIC WG In-Reply-To: <156231647598.22022.7455074710183109945@ietfa.amsl.com> Message-Id: <3A848873-3FD6-409B-A05D-D4A12C6DC54C@trammell.ch> X-Mailer: Apple Mail (2.3445.104.11) X-Antivirus: Dr.Web (R) for Unix mail servers drweb plugin ver.6.0.2.8 X-Antivirus-Code: 0x100000 Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 05 Jul 2019 10:45:43 -0000 Greetings, all, We've submitted updated revisions of the applicability and manageability = drafts, mainly rolling up editor-generated text for open issues, in = advance of the meeting in Montreal. We have a few open issues: https://github.com/quicwg/ops-drafts/issues. = Some of these are pending on open issues in the transport, the others = need text from contributors other than us. This is your friendly = reminder to volunteer for these if you can help, before we start = tracking down people in the hallways in Montreal and volunteering them. = ;) Thanks, cheers, Brian (for the editors) > On 5 Jul 2019, at 10:47, internet-drafts@ietf.org wrote: >=20 >=20 > A New Internet-Draft is available from the on-line Internet-Drafts = directories. > This draft is a work item of the QUIC WG of the IETF. >=20 > Title : Manageability of the QUIC Transport Protocol > Authors : Mirja Kuehlewind > Brian Trammell > Filename : draft-ietf-quic-manageability-05.txt > Pages : 21 > Date : 2019-07-05 >=20 > Abstract: > This document discusses manageability of the QUIC transport = protocol, > focusing on caveats impacting network operations involving QUIC > traffic. Its intended audience is network operators, as well as > content providers that rely on the use of QUIC-aware middleboxes, > e.g. for load balancing. >=20 >=20 > The IETF datatracker status page for this draft is: > https://datatracker.ietf.org/doc/draft-ietf-quic-manageability/ >=20 > There are also htmlized versions available at: > https://tools.ietf.org/html/draft-ietf-quic-manageability-05 > https://datatracker.ietf.org/doc/html/draft-ietf-quic-manageability-05 >=20 > A diff from the previous version is available at: > https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-quic-manageability-05 >=20 >=20 > Please note that it may take a couple of minutes from the time of = submission > until the htmlized version and diff are available at tools.ietf.org. >=20 > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ >=20 From nobody Sat Jul 6 17:45:27 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B02751200D7 for ; Sat, 6 Jul 2019 17:45:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.7 X-Spam-Level: X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=mnot.net header.b=TEF5tu8A; dkim=pass (2048-bit key) header.d=messagingengine.com header.b=rc69TDFN Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hWX9qFSvaSzK for ; Sat, 6 Jul 2019 17:45:22 -0700 (PDT) Received: from out4-smtp.messagingengine.com (out4-smtp.messagingengine.com [66.111.4.28]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 13D23120106 for ; Sat, 6 Jul 2019 17:45:22 -0700 (PDT) Received: from compute4.internal (compute4.nyi.internal [10.202.2.44]) by mailout.nyi.internal (Postfix) with ESMTP id 6A28F2102F for ; Sat, 6 Jul 2019 20:45:21 -0400 (EDT) Received: from mailfrontend1 ([10.202.2.162]) by compute4.internal (MEProxy); Sat, 06 Jul 2019 20:45:21 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mnot.net; h= content-type:mime-version:from:to:subject:message-id:date; s= fm3; bh=IddQ6qhPbvwVtY5fd+JDQTv0mFRoqRepQWB7NiWfiwo=; b=TEF5tu8A M8lFbeh4azAQCVyQFFuPpreCJM/Y45q4rX/Z6xLnDUKqwGgisF4XSIGGa6gC6dzC AQxC0oTEdM9ZUMspeNy2AV/r6Cer+YgtjEKmbr3jNOXjPNcYero6GmlOzPCTMrFU CIZryd5G0yZGHMTWmBwqqUMhKDD83ExA4ENjYNqPqZo1SH/2bpUze7ubSRUk0Yvx itSUzVEKPrEzsHl8GSRCNZlxSY0MUOB397PoqtFYHQk6C6f3kyDe7dKiGkmWHMzQ kddEazTWnibq107HFroRitvolTagyLoVtLjL0rr7buwIew4syWUcY0aAJbEuunAy Sre9GU/fN3ytgw== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=content-type:date:from:message-id :mime-version:subject:to:x-me-proxy:x-me-proxy:x-me-sender :x-me-sender:x-sasl-enc; s=fm3; bh=IddQ6qhPbvwVtY5fd+JDQTv0mFRoq RepQWB7NiWfiwo=; b=rc69TDFN+3KTpLPmxVmcT4BCrPsFUVBeCc93H4IXDg4b7 Ij4AUODjz1Ml38/rEIafvpdTRuYblmZ0g+TpJhbPl6+qXwsAlncwlh7sfeFas76d ps2jSRphL8jjtAq8exulopmiNOVu/rEEtBoXow8z5WWCxTmXSTANTXLliUdO4jbg +GRJAcJFGqKb0ZMoCU+tzpvKbIKH3wybMtnA9ih7UXUZYGhbEYvLEvybrlycVXrl uqqVFz4/oiivO54WehBs5F1Q2q2DW29LXKaFYR1j6kW7FXoM6tknP7BmKEzZ1M3+ pJryhAjy7yqjC/uyFDzKUNbNohtFhpykoaVM7rs8w== X-ME-Sender: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeduvddrfeejgdefkecutefuodetggdotefrodftvf curfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfghnecu uegrihhlohhuthemuceftddtnecunecujfgurheptggghffvufesrgdttdertddtjeenuc fhrhhomhepifhithhhuhgspgfpohhtihhfihgtrghtihhonhhsuceoughopghnohhtpghr vghplhihsehmnhhothdrnhgvtheqnecuffhomhgrihhnpehgihhthhhusgdrtghomhenuc fkphepudduledrledrgeefrddvgedunecurfgrrhgrmhepmhgrihhlfhhrohhmpeguohgp nhhothgprhgvphhlhiesmhhnohhtrdhnvghtnecuvehluhhsthgvrhfuihiivgeptd X-ME-Proxy: Received: from cloud.mnot.net (cloud.mnot.net [119.9.43.241]) by mail.messagingengine.com (Postfix) with ESMTPA id CA33F8005A for ; Sat, 6 Jul 2019 20:45:19 -0400 (EDT) Received: from cloud.mnot.net (localhost [127.0.0.1]) by cloud.mnot.net (Postfix) with ESMTP id 315D9C1437 for ; Sun, 7 Jul 2019 00:45:16 +0000 (UTC) Content-Type: multipart/alternative; boundary="===============6844864876226137383==" MIME-Version: 1.0 From: =?utf-8?q?Github_Notifications?= To: quic@ietf.org Subject: Weekly github digest (QUIC Working Group Specifications) Message-Id: <20190707004516.315D9C1437@cloud.mnot.net> Date: Sun, 7 Jul 2019 00:45:16 +0000 (UTC) Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 07 Jul 2019 00:45:26 -0000 --===============6844864876226137383== MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8"; format="flowed" Issues ------ * quicwg/base-drafts (+4/-3/=F0=9F=92=AC40) 4 issues created: - transport: dangling references (by reschke) https://github.com/quicwg/base-drafts/issues/2874 = - Retransmission Instructions do not include NEW_TOKEN (by martinduke) https://github.com/quicwg/base-drafts/issues/2871 = - Stateless Reset packet sizes should not depend on the maximum connectio= n ID length (by DavidSchinazi) https://github.com/quicwg/base-drafts/issues/2869 = - unrecoverable loss pattern leads to deadlock (by marten-seemann) https://github.com/quicwg/base-drafts/issues/2863 = 12 issues received 40 new comments: - #2869 Stateless Reset packet sizes should not depend on the maximum con= nection ID length (10 by DavidSchinazi, martinthomson, ianswett) https://github.com/quicwg/base-drafts/issues/2869 [-transport] = - #2863 unrecoverable loss pattern leads to deadlock (6 by kazuho, marten= -seemann, nibanks, martinthomson, mikkelfj) https://github.com/quicwg/base-drafts/issues/2863 [-transport] [design] = - #2778 CID change still required in response to migration? (6 by kazuho,= tatsuhiro-t, larseggert, mikkelfj) https://github.com/quicwg/base-drafts/issues/2778 [-transport] [editori= al] = - #2823 Do Initial secrets change after Retry packet? (4 by martinthomson= , nharper, larseggert, dtikhonov) https://github.com/quicwg/base-drafts/issues/2823 [-tls] [editorial] = - #2153 Increase the odds of a stateless reset? (4 by martinthomson, mikk= elfj) https://github.com/quicwg/base-drafts/issues/2153 [-transport] = - #2837 Does a Retry really need to change the CID? (3 by DavidSchinazi, = larseggert, ianswett) https://github.com/quicwg/base-drafts/issues/2837 [-transport] = - #2838 Provide Signal that SCID is client assigned (2 by martinthomson, = larseggert) https://github.com/quicwg/base-drafts/issues/2838 [-invariants] [-trans= port] = - #2818 Invalid Push ID error codes (1 by LPardue) https://github.com/quicwg/base-drafts/issues/2818 [-http] = - #2789 Use a higher seed RTT for new paths (1 by gorryfair) https://github.com/quicwg/base-drafts/issues/2789 [-recovery] [design] = - #2760 NEW_TOKEN should be symmetric (1 by martinthomson) https://github.com/quicwg/base-drafts/issues/2760 [-transport] [design] = - #2777 HTTP/3 Cookie Crumbling (1 by bencebeky) https://github.com/quicwg/base-drafts/issues/2777 [-http] [design] = - #2815 H3 has a stale reference to STREAM_ID_ERROR (1 by LPardue) https://github.com/quicwg/base-drafts/issues/2815 [-http] = 3 issues closed: - Provide Signal that SCID is client assigned https://github.com/quicwg/b= ase-drafts/issues/2838 [-invariants] [-transport] = - Invalid Push ID error codes https://github.com/quicwg/base-drafts/issue= s/2818 [-http] = - Why would late-arriving packets create state? https://github.com/quicwg= /base-drafts/issues/2148 [-transport] [editorial] = Pull requests ------------- * quicwg/base-drafts (+9/-4/=F0=9F=92=AC15) 9 pull requests submitted: - grease transport parameters (by marten-seemann) https://github.com/quicwg/base-drafts/pull/2873 = - move definition of active_connection_id_limit to where it belongs (by m= arten-seemann) https://github.com/quicwg/base-drafts/pull/2872 = - Initial secrets change after Retry (by martinthomson) https://github.com/quicwg/base-drafts/pull/2870 [-tls] [editorial] = - Add normative reference to RFC7540 8.1.2.5. (by bencebeky) https://github.com/quicwg/base-drafts/pull/2868 = - Tighten HEADERS and DATA frame order requirements. (by bencebeky) https://github.com/quicwg/base-drafts/pull/2867 = - Don't state QUIC error codes in HTTP/3 (by LPardue) https://github.com/quicwg/base-drafts/pull/2866 = - Fix HPACK xref (by LPardue) https://github.com/quicwg/base-drafts/pull/2865 = - Explicitly allow discard of packets <40 bytes (by martinthomson) https://github.com/quicwg/base-drafts/pull/2864 [-transport] [design] = - remove incorrect statement about empty STREAM frames (by marten-seemann) https://github.com/quicwg/base-drafts/pull/2862 = 6 pull requests received 15 new comments: - #2662 Replace HTTP_MALFORMED_FRAME error code (8 by kazuho, LPardue, ia= nswett) https://github.com/quicwg/base-drafts/pull/2662 [-http] [design] = - #2864 Explicitly allow discard of packets <40 bytes (3 by DavidSchinazi= , martinthomson) https://github.com/quicwg/base-drafts/pull/2864 [-transport] [design] = - #2859 Delayed packets can't create state (1 by martinthomson) https://github.com/quicwg/base-drafts/pull/2859 [-transport] [editorial= ] = - #2677 Trigger unhappy (1 by LPardue) https://github.com/quicwg/base-drafts/pull/2677 [-http] [editorial] = - #2806 Merge Crypto timeout and PTO (1 by ianswett) https://github.com/quicwg/base-drafts/pull/2806 [-recovery] = - #2870 Initial secrets change after Retry (1 by nharper) https://github.com/quicwg/base-drafts/pull/2870 [-tls] [editorial] = 4 pull requests merged: - move definition of active_connection_id_limit to where it belongs https://github.com/quicwg/base-drafts/pull/2872 [-transport] [editorial= ] = - Delayed packets can't create state https://github.com/quicwg/base-drafts/pull/2859 [-transport] [editorial= ] = - Fix grammar https://github.com/quicwg/base-drafts/pull/2860 [-tls] [editorial] = - remove incorrect statement about empty STREAM frames https://github.com/quicwg/base-drafts/pull/2862 [-tls] [editorial] = Repositories tracked by this digest: ----------------------------------- * https://github.com/quicwg/base-drafts --===============6844864876226137383== Content-Type: text/html; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Weekly github digest (QUIC Working Group Specifications)

Sunday July 07, 2019

Issues

quicwg/base-drafts (+4/-3/=F0=9F=92=AC40)

4 issues created:

12 issues received 40 new comments:

3 issues closed:

Pull requests

quicwg/base-drafts (+9/-4/=F0=9F=92=AC15)

9 pull requests submitted:

6 pull requests received 15 new comments:

4 pull requests merged:

Repositories tracked by this digest:

--===============6844864876226137383==-- From nobody Sun Jul 7 18:14:54 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 239741200DF for ; Sun, 7 Jul 2019 18:14:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.7 X-Spam-Level: X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=mnot.net header.b=BVWawzof; dkim=pass (2048-bit key) header.d=messagingengine.com header.b=NUsF6r9K Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id B3oEjZOvckPQ for ; Sun, 7 Jul 2019 18:14:50 -0700 (PDT) Received: from wout4-smtp.messagingengine.com (wout4-smtp.messagingengine.com [64.147.123.20]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E25171200D5 for ; Sun, 7 Jul 2019 18:14:49 -0700 (PDT) Received: from compute3.internal (compute3.nyi.internal [10.202.2.43]) by mailout.west.internal (Postfix) with ESMTP id AFB4D449; Sun, 7 Jul 2019 21:14:48 -0400 (EDT) Received: from mailfrontend1 ([10.202.2.162]) by compute3.internal (MEProxy); Sun, 07 Jul 2019 21:14:48 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mnot.net; h= content-type:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; s=fm3; bh=z LFKBmmVdn+N8OfQzFPA0GihpReQ/XU4Vpt4pBUOixE=; b=BVWawzofA1P9P8Eh2 h1tgBz1zDP9jENm7Ly4LtFff7gj28xwO8M/UJtv/fiOgAfVGWUZmzvfHUfcZoJE4 GE7kQRl9u7sUid+VOwMDUW+cl77p0nT2Ds/Zf0PMMY0Gr/OQyrNqLMFYApOnCxsp F5/8WKzbE5c4Bsalxm2p3V8BlJsRnDYLL7pEAukJTgK4oSVylltPFCpTcXPESuLZ hgoPObbzFjDCJAvsq1gh4vSsVxYuK+e/WuVfVkY7Zii+caNqQCzjM+BaMVLkwJZy 7bo8ulHzFDuYb9+aPQ3zLQ/mLV5LrvOH8VqJ4VwaXz/UDc5+jm01GdfdPqpkPOd1 Iqmlg== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :date:from:in-reply-to:message-id:mime-version:references :subject:to:x-me-proxy:x-me-proxy:x-me-sender:x-me-sender :x-sasl-enc; s=fm3; bh=zLFKBmmVdn+N8OfQzFPA0GihpReQ/XU4Vpt4pBUOi xE=; b=NUsF6r9K+HirHg9BLmyPQyMy0wi6fXP9kmNKGkHKO5m7oDh1V7067vNaE OhRftfo5SxuesRFUBFYlyOTvape1OAO38E0hMSdLohktiMpArGKwu5hIZN+QQWZ8 vu4wWsOaeExBHMhwxwPDt5vvCGYpBs6t4yiIXmnJgzbKrJRhB0Fit+VDlfhAhvwa MbxqP7H+beLZ4ymexvYbcVXsSV3/z7O81+gXATuMC4U97XD24jEBbNELrA1X+f4o QkGXpfHprydGq2YO6H0pBzrpjCr/KEgt2HDzZUdJpEuIchpR0wn31TWCDjqhTYM5 jiJAGEFW0x2+MS68NjT8CUEDeaO8g== X-ME-Sender: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeduvddrfeelgdegvdcutefuodetggdotefrodftvf curfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfghnecu uegrihhlohhuthemuceftddtnecusecvtfgvtghiphhivghnthhsucdlqddutddtmdenuc fjughrpegtggfuhfgjfffgkfhfvffosehtqhhmtdhhtddvnecuhfhrohhmpeforghrkhcu pfhothhtihhnghhhrghmuceomhhnohhtsehmnhhothdrnhgvtheqnecuffhomhgrihhnpe hgihhthhhusgdrtghomhdpmhhnohhtrdhnvghtnecukfhppedugeegrddufeeirddujeeh rddvkeenucfrrghrrghmpehmrghilhhfrhhomhepmhhnohhtsehmnhhothdrnhgvthenuc evlhhushhtvghrufhiiigvpedt X-ME-Proxy: Received: from macbook-pro.mnot.net (unknown [144.136.175.28]) by mail.messagingengine.com (Postfix) with ESMTPA id E0C3E8005B; Sun, 7 Jul 2019 21:14:45 -0400 (EDT) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Subject: Re: Consensus Calls on Recent Transport/TLS Issues From: Mark Nottingham In-Reply-To: Date: Mon, 8 Jul 2019 11:14:41 +1000 Cc: Lars Eggert Content-Transfer-Encoding: quoted-printable Message-Id: <8DF6F769-D8D9-4F8D-B11F-271C4562CC6E@mnot.net> References: To: IETF QUIC WG X-Mailer: Apple Mail (2.3445.104.11) Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Jul 2019 01:14:53 -0000 Not hearing any pushback, these have consensus. > On 1 Jul 2019, at 12:21 pm, Mark Nottingham wrote: >=20 > The following issues have proposals for resolution, and discussion so = far seems to support consensus to accept them. If you object, please do = so on the issue or in response to this message (changing the Subject = appropriately!). >=20 > See for the current = state of issues in the Late Stage process. >=20 > * #2839: Consider adding flags transport parameter for extension, = frame, or feature negotiation > The proposal is to close this issue with 'quicv2' -- i.e., no = current action. >=20 > * #2724: Clarify PATH_RESPONSE lack of retransmission in Path = Validation > Proposal: >=20 > * #2645: Retire My Own CID > Proposal: >=20 > * #2638: max_ack_delay is unknown when a new connection is established > Proposal: >=20 > * #2546: ACK of ACK are useful > Proposal: >=20 > * #2309: Migration before handshake completed is very messy > Proposal: >=20 > * #2736: More Connection ID Space > Revised proposal: >=20 > -- > Mark Nottingham https://www.mnot.net/ >=20 -- Mark Nottingham https://www.mnot.net/ From nobody Mon Jul 8 01:06:04 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0616A120129 for ; Mon, 8 Jul 2019 01:06:03 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CFjBZxV9kPRs for ; Mon, 8 Jul 2019 01:06:00 -0700 (PDT) Received: from mx1.cnes.fr (mx1.cnes.fr [194.199.174.200]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 01754120121 for ; Mon, 8 Jul 2019 01:05:59 -0700 (PDT) X-IronPort-AV: E=Sophos;i="5.63,465,1557187200"; d="scan'208";a="9080440" X-IPAS-Result: =?us-ascii?q?A2GyBQD99yJd/wYBeAplHAEBAQQBAQcEAQGBZ4FogQgRg?= =?us-ascii?q?SwKhBKvWwkBAQEBAQEBAQErDAEBhEACF4JBOBMBAwEBAQQBAQEBAwEBAgKLI?= =?us-ascii?q?AyFTAIBAyMRQwIQAgEVDQIGIAICAjAVEAIEDgUIE4MIghmnFoEyGoQcAg5Bh?= =?us-ascii?q?SeBDCiBY4wSgRFGgwqCYQEBAgEBFoEgERgFMQKCUDKCJgSObIUglkYHAoExa?= =?us-ascii?q?IIfhDeBQYwIc4E5bYY0g3kDijWUcJIMgXozGicrgw0Jiz2FP3IBjCeBMYEhA?= =?us-ascii?q?QE?= X-URL-LookUp-ScanningError: 1 From: Kuhn Nicolas To: IETF QUIC WG CC: "emile.stephan@orange.com" , Gorry Fairhurst Subject: TR: New Version Notification for draft-kuhn-quic-0rtt-bdp-03.txt Thread-Topic: New Version Notification for draft-kuhn-quic-0rtt-bdp-03.txt Thread-Index: AQHVNWMDloURlhfbSkWVVr34fg3j46bAW+/Q Date: Mon, 8 Jul 2019 08:04:56 +0000 Deferred-Delivery: Mon, 8 Jul 2019 08:05:56 +0000 Message-ID: References: <156257274331.734.4411179632617138188.idtracker@ietfa.amsl.com> In-Reply-To: <156257274331.734.4411179632617138188.idtracker@ietfa.amsl.com> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-tm-as-product-ver: SMEX-11.0.0.4255-8.100.1062-24746.005 x-tm-as-result: No--21.159500-0.000000-31 x-tm-as-user-approved-sender: Yes x-tm-as-user-blocked-sender: No Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Jul 2019 08:06:03 -0000 SGksIA0KDQpXZSBoYXZlIHVwZGF0ZWQgb3VyIGRyYWZ0IG9uICJUcmFuc3BvcnQgcGFyYW1ldGVy cyBmb3IgMC1SVFQgY29ubmVjdGlvbnMiLiANCkluIHNob3J0LCB0aGUgcHJvcG9zYWwgb2YgdGhl IGRyYWZ0IGlzIHRoZSBmb2xsb3dpbmc6IA0KICAgV2hpbGUgZWFjaCBjbGllbnQgYW5kIHNlcnZl ciBjYW4gaGF2ZSBpdHMNCiAgIGRlZGljYXRlZCBzb2x1dGlvbiB0byBzdG9yZSBwYXRoIHBhcmFt ZXRlcnMsIGhhdmluZyBhIHN0YW5kYXJkIHdheSBvZg0KICAgZXhjaGFuZ2luZyB0aGlzIGluZm9y bWF0aW9uIGhlbHBzIGluIHByb3ZpZGluZyBzeW1tZXRyaWNhbCBjb250cm9sIG9mDQogICB0aGUg b3B0aW1pc2F0aW9uIGFuZCByZWR1Y2luZyBwcm90b2NvbCBvc3NpZmljYXRpb24uICBbLi4uXQ0K DQogIFRoaXMgbWVtbyBkaXNjdXNzZXMgYSBzb2x1dGlvbiB3aGVyZSB0aGUgY2xpZW50IGlzIGlu Zm9ybWVkIGFib3V0DQogICBwYXRoIHBhcmFtZXRlcnM6IGJvdGggdGhlIGNsaWVudCBhbmQgdGhl IHNlcnZlciBjYW4gY29udHJpYnV0ZSB0byB0aGUNCiAgIHJlZHVjdGlvbiBvZiB0aGUgdGltZS10 by1zZXJ2aWNlIGZvciBzdWJzZXF1ZW50IGNvbm5lY3Rpb25zLiAgVGhpcw0KICAgd291bGQgaW1w cm92ZSBzeW1tZXRyaWNhbCB0cmFuc21pc3Npb24gb2YgZGF0YSBhbmQgcmVkdWNlDQogICBvc3Np ZmljYXRpb24gb2YgdGhlIHByb3RvY29sLg0KDQpQbGVhc2UgbGV0IHVzIGtub3cgaWYgeW91IGhh dmUgYW55IHZpZXdzIG9uIHRoaXMgcHJvcG9zYWwuIA0KDQpDaGVlcnMsIA0KDQpOaWNvDQoNCg0K LS0tLS1NZXNzYWdlIGQnb3JpZ2luZS0tLS0tDQpEZcKgOiBpbnRlcm5ldC1kcmFmdHNAaWV0Zi5v cmcgPGludGVybmV0LWRyYWZ0c0BpZXRmLm9yZz4gDQpFbnZvecOpwqA6IGx1bmRpIDgganVpbGxl dCAyMDE5IDA5OjU5DQrDgMKgOiBTdGVwaGFuIEVtaWxlIDxlbWlsZS5zdGVwaGFuQG9yYW5nZS5j b20+OyBFbWlsZSBTdGVwaGFuIDxlbWlsZS5zdGVwaGFuQG9yYW5nZS5jb20+OyBLdWhuIE5pY29s YXMgPE5pY29sYXMuS3VobkBjbmVzLmZyPjsgR29ycnkgRmFpcmh1cnN0IDxnb3JyeUBlcmcuYWJk bi5hYy51az4NCk9iamV0wqA6IE5ldyBWZXJzaW9uIE5vdGlmaWNhdGlvbiBmb3IgZHJhZnQta3Vo bi1xdWljLTBydHQtYmRwLTAzLnR4dA0KDQoNCkEgbmV3IHZlcnNpb24gb2YgSS1ELCBkcmFmdC1r dWhuLXF1aWMtMHJ0dC1iZHAtMDMudHh0IGhhcyBiZWVuIHN1Y2Nlc3NmdWxseSBzdWJtaXR0ZWQg YnkgTmljb2xhcyBLdWhuIGFuZCBwb3N0ZWQgdG8gdGhlIElFVEYgcmVwb3NpdG9yeS4NCg0KTmFt ZToJCWRyYWZ0LWt1aG4tcXVpYy0wcnR0LWJkcA0KUmV2aXNpb246CTAzDQpUaXRsZToJCVRyYW5z cG9ydCBwYXJhbWV0ZXJzIGZvciAwLVJUVCBjb25uZWN0aW9ucw0KRG9jdW1lbnQgZGF0ZToJMjAx OS0wNy0wOA0KR3JvdXA6CQlJbmRpdmlkdWFsIFN1Ym1pc3Npb24NClBhZ2VzOgkJMTENClVSTDog ICAgICAgICAgICBodHRwczovL3d3dy5pZXRmLm9yZy9pbnRlcm5ldC1kcmFmdHMvZHJhZnQta3Vo bi1xdWljLTBydHQtYmRwLTAzLnR4dA0KU3RhdHVzOiAgICAgICAgIGh0dHBzOi8vZGF0YXRyYWNr ZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LWt1aG4tcXVpYy0wcnR0LWJkcC8NCkh0bWxpemVkOiAgICAg ICBodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQta3Vobi1xdWljLTBydHQtYmRwLTAz DQpIdG1saXplZDogICAgICAgaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvaHRtbC9k cmFmdC1rdWhuLXF1aWMtMHJ0dC1iZHANCkRpZmY6ICAgICAgICAgICBodHRwczovL3d3dy5pZXRm Lm9yZy9yZmNkaWZmP3VybDI9ZHJhZnQta3Vobi1xdWljLTBydHQtYmRwLTAzDQoNCkFic3RyYWN0 Og0KICAgVGhlIHRpbWUtdG8tc2VydmljZSBkdXJhdGlvbiBkZXBlbmRzIG9uIGJvdGggcGVlcnMg YW5kIHRoZSBwZWVyDQogICBpbml0aWF0aW5nIHRoZSBjb25uZWN0aW9uIG1heSBub3QgYmUgdGhl IHBlZXIgYWN0dWFsbHkgc2VuZGluZyBkYXRhLg0KICAgTW9yZW92ZXIsIGNsaWVudHMgbWF5IGJl IHJlc291cmNlLWxpbWl0ZWQsIGJlaGluZCBhIGxvdyBiYW5kd2lkdGggb3INCiAgIGEgbG9uZy1S VFQgbmV0d29yayBhbmQgbWF5IG5lZWQgYWRhcHRhdGlvbnMgdG8gaW1wcm92ZSBkYXRhDQogICB0 cmFuc21pc3Npb24gb3IgcmVjZXB0aW9uLiAgV2hpbGUgZWFjaCBjbGllbnQgYW5kIHNlcnZlciBj YW4gaGF2ZSBpdHMNCiAgIGRlZGljYXRlZCBzb2x1dGlvbiB0byBzdG9yZSBwYXRoIHBhcmFtZXRl cnMsIGhhdmluZyBhIHN0YW5kYXJkIHdheSBvZg0KICAgZXhjaGFuZ2luZyB0aGlzIGluZm9ybWF0 aW9uIGhlbHBzIGluIHByb3ZpZGluZyBzeW1tZXRyaWNhbCBjb250cm9sIG9mDQogICB0aGUgb3B0 aW1pc2F0aW9uIGFuZCByZWR1Y2luZyBwcm90b2NvbCBvc3NpZmljYXRpb24uICBRVUlDIG1heSBu b3QgYmUNCiAgIGxpbWl0ZWQgdG8gSFRUUDM6IGl0IGNhbiBiZSB1c2VkIGFzIGEgc3Vic3RyYXRl IGZvciBwcm94eWluZyBhbmQNCiAgIHR1bm5lbGluZy4NCg0KICAgVGhpcyBtZW1vIGRpc2N1c3Nl cyBhIHNvbHV0aW9uIHdoZXJlIHRoZSBjbGllbnQgaXMgaW5mb3JtZWQgYWJvdXQNCiAgIHBhdGgg cGFyYW1ldGVyczogYm90aCB0aGUgY2xpZW50IGFuZCB0aGUgc2VydmVyIGNhbiBjb250cmlidXRl IHRvIHRoZQ0KICAgcmVkdWN0aW9uIG9mIHRoZSB0aW1lLXRvLXNlcnZpY2UgZm9yIHN1YnNlcXVl bnQgY29ubmVjdGlvbnMuICBUaGlzDQogICB3b3VsZCBpbXByb3ZlIHN5bW1ldHJpY2FsIHRyYW5z bWlzc2lvbiBvZiBkYXRhIGFuZCByZWR1Y2UNCiAgIG9zc2lmaWNhdGlvbiBvZiB0aGUgcHJvdG9j b2wuICBUbyBpbXByb3ZlIHRoZSB0aW1lLXRvLXNlcnZpY2Ugb2YNCiAgIHN1YnNlcXVlbnQgMC1S VFQgcmVjb25uZWN0aW9uIHRoZSBzZXJ2ZXIgY3VycmVudGx5IHNldHMgaW4gdGhlDQogICBlYXJs eV9kYXRhIGV4dGVuc2lvbiB0aGUgbWF4aW11bSB2b2x1bWUgb2YgZWdyZXNzIGRhdGEgdGhlIGNs aWVudCBpcw0KICAgYWxsb3dlZCB0byBzZW5kIHdoZW4gcmVjb25uZWN0aW5nLiAgVGhpcyBtZW1v IHByb3Bvc2VzIEJEUF9tZXRhZGF0YSwNCiAgIGFuIGFkZGl0aW9uYWwgZXh0ZW5zaW9uLCB0byBh bHNvIGluZm9ybSB0aGUgY2xpZW50IGFib3V0IHBhdGgNCiAgIHBhcmFtZXRlcnMuDQoNCiAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICANCg0KDQpQbGVhc2Ugbm90ZSB0aGF0IGl0IG1heSB0YWtlIGEg Y291cGxlIG9mIG1pbnV0ZXMgZnJvbSB0aGUgdGltZSBvZiBzdWJtaXNzaW9uIHVudGlsIHRoZSBo dG1saXplZCB2ZXJzaW9uIGFuZCBkaWZmIGFyZSBhdmFpbGFibGUgYXQgdG9vbHMuaWV0Zi5vcmcu DQoNClRoZSBJRVRGIFNlY3JldGFyaWF0DQoNCg== From nobody Mon Jul 8 05:02:09 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A72BA120168; Mon, 8 Jul 2019 05:02:00 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bQln4U5Gw8gg; Mon, 8 Jul 2019 05:01:57 -0700 (PDT) Received: from EUR02-VE1-obe.outbound.protection.outlook.com (mail-eopbgr20049.outbound.protection.outlook.com [40.107.2.49]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7A81012016A; Mon, 8 Jul 2019 05:01:57 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=fq/CVScN2d2BCNKEZykKPz8jo9QtpTMX/xFZsfm15hAW3NGmZVyRQYW5ESXFw6r8RBlLf/rt3NlZgn1dTOqdSu5z/RBdkdIHz/6xSWiZAjsdJHD9Thzdol8z85De3SYD2RKgaY4hQFlTCBpCb33ael+oz8JQdTw/JsMGG3LNDTZB63vsqrMe8ACAmPUhKu2m5hcW7aZhH6Oi8RakYEFAnAD3AoDkiqEHsIPtQhTq4R56kkC5Dh4mrucDnMzPisWWSTXUmjIHtT8RO6Pxqh3ZNq/AeLu4RHad0tuOVtGGj5MeRu2yVHEQ3UqVzJyywjRCpTGXl7ABanwKFR5EpNcDBQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=V6feMVbHp7s/a7aEYefKNYqBjWdid7C2yO3UDZ9vKV0=; b=Ys6INCHKN+q+Fo22K8IyW2K5euh1OqF6hHCDegS4tRji6TFhm67F+hRTAZWuGcoj+vlRtf/RO887gxV3guQdsnUp2NqJWAba6ucFUWBVgFNbL+IbNTxzIZKvJV5uLSyAKpAw2hOQhl0IZcRY1rzW0KUQbqbO0sN862iW+eIxMdH/nzW8CfWWLV7q2lQhZx3b8ZNlLWvs6idAkfxklRWHLytfGPRtPUYXtlKFWif1+ftkzvjFTDH9KSu6TDfPZeWi/fCBGPe+hqouE0gwCbA3uz+ifoHF8hCk+l3wayLCa7pO8qP2cIUrjhSck8a7CJTeMcxVJl2VzvMH+Q0rSJ82Jg== ARC-Authentication-Results: i=1; mx.microsoft.com 1;spf=pass smtp.mailfrom=ericsson.com;dmarc=pass action=none header.from=ericsson.com;dkim=pass header.d=ericsson.com;arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=V6feMVbHp7s/a7aEYefKNYqBjWdid7C2yO3UDZ9vKV0=; b=ZH/VvtIDo+bMh2Ftn/c7HAWkIHvbd5mqf3VFBa0yfjJMrTxkAr6rIFWGupam9RE9AnXq4GazExbZZui0vzIv+LLnfAsfB9IWMXUtecSCYuwPYvBRNvxxA6E8cX/K4dLd5jgLqve98bHA6gvb6V+yJO/KHNuNqT6r7/CT9BmId/k= Received: from DB7PR07MB4697.eurprd07.prod.outlook.com (52.135.134.153) by DB7PR07MB4108.eurprd07.prod.outlook.com (52.134.101.10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2073.10; Mon, 8 Jul 2019 12:01:54 +0000 Received: from DB7PR07MB4697.eurprd07.prod.outlook.com ([fe80::4021:8bf4:d1fa:9ac3]) by DB7PR07MB4697.eurprd07.prod.outlook.com ([fe80::4021:8bf4:d1fa:9ac3%6]) with mapi id 15.20.2052.019; Mon, 8 Jul 2019 12:01:54 +0000 From: Mirja Kuehlewind To: "masque@ietf.org" CC: "quic@ietf.org" Subject: FW: New Version Notification for draft-kuehlewind-quic-substrate-01.txt Thread-Topic: New Version Notification for draft-kuehlewind-quic-substrate-01.txt Thread-Index: AQHVM0e5aMvTiuTPzkyZn41HNiUN3abAxNSA Date: Mon, 8 Jul 2019 12:01:53 +0000 Message-ID: <601B5A7E-09ED-4BF3-80C4-5A475B84FE59@ericsson.com> References: <156234111227.21943.6370804489378532746.idtracker@ietfa.amsl.com> In-Reply-To: <156234111227.21943.6370804489378532746.idtracker@ietfa.amsl.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=mirja.kuehlewind@ericsson.com; x-originating-ip: [2001:16b8:2cc4:d100:4c0:3462:e129:448d] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: e44f46fb-1eb4-4783-d5de-08d7039c11c5 x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600148)(711020)(4605104)(1401327)(2017052603328)(7193020); SRVR:DB7PR07MB4108; x-ms-traffictypediagnostic: DB7PR07MB4108: x-ms-exchange-purlcount: 6 x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:9508; x-forefront-prvs: 00922518D8 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(366004)(39860400002)(396003)(136003)(346002)(376002)(53754006)(189003)(199004)(33656002)(91956017)(66946007)(73956011)(2906002)(8676002)(1730700003)(2473003)(6512007)(5660300002)(76116006)(36756003)(6306002)(64756008)(25786009)(66476007)(66556008)(66446008)(8936002)(7736002)(450100002)(966005)(81166006)(81156014)(478600001)(4326008)(229853002)(6436002)(6116002)(53936002)(6486002)(2616005)(476003)(68736007)(44832011)(256004)(14444005)(5640700003)(86362001)(486006)(71200400001)(11346002)(446003)(71190400001)(15650500001)(99286004)(186003)(102836004)(6506007)(14454004)(2351001)(6916009)(76176011)(46003)(2501003)(66574012)(305945005)(316002); DIR:OUT; SFP:1101; SCL:1; SRVR:DB7PR07MB4108; H:DB7PR07MB4697.eurprd07.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: ericsson.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam-message-info: 4/OJbi2py3wngWtb4trxvPZy7Gi7UCAh+grhkivi5r3gDS32K7JsqDb+JHGvLgkG0oejHbWGkZCd1j8Av8c5t+U0dOMTRMW//pX9vUPg/Ex3OuJeO1zT2H143c6eiGwZR+MCJtXmvwBlDh1qY1vP9GDbTOONrVJUVPcFAVL+u4XAL9tSuoSMKmiOIh5yxjetDbKXENGHog/NKOFJs1K8kxf9k4GPSWkyEy3fsX6KEmD73/OmQZhwxuVInP/zaQtnGJykBV/25ijqYpe9Jr1VHGIDmlAAEvX3Orr4RnNbnvpwa4MgDjLXFj5BcnIxHdAswRjyALdZwzTAdd59NwNkGhJ04AeNg5pPCO+Iu+q6iubgeDA3uawa7P/3nIC52mwgiHQ9cdm5s6XkWYj8iG69hRso1JJCu4Hf1KnVrh6TXdA= Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: ericsson.com X-MS-Exchange-CrossTenant-Network-Message-Id: e44f46fb-1eb4-4783-d5de-08d7039c11c5 X-MS-Exchange-CrossTenant-originalarrivaltime: 08 Jul 2019 12:01:54.3064 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: mirja.kuehlewind@ericsson.com X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB7PR07MB4108 Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Jul 2019 12:02:01 -0000 SGkgYWxsLA0KDQp3ZSBwb3N0ZWQgYW4gdXBkYXRlIG9mIGRyYWZ0LWt1ZWhsZXdpbmQtcXVpYy1z dWJzdHJhdGUgd2hpY2ggc29tZSBzbWFsbGVyIGVkaXRzLCBzb21lIG1vcmUgdGV4dCBvbiByZXF1 aXJlbWVudHMgZm9yIGRpc2NvdmVyeSwgYW5kIGEgbmV3IHN1YiB1c2UgY2FzZSAodGhhbmtzIEx1 Y2FzISkuDQoNCkZlZWRiYWNrIHdvdWxkIGJlIHZlcnkgd2VsY29tZSEgQWxzbyBvbiBnaXRodWIg aGVyZToNCg0KaHR0cHM6Ly9naXRodWIuY29tL21pcmphay9kcmFmdC1rdWVobGV3aW5kLXF1aWMt c3Vic3RyYXRlDQoNCk1pcmphDQoNCg0KDQrvu79PbiAwNS4wNy4xOSwgMTc6MzgsICJpbnRlcm5l dC1kcmFmdHNAaWV0Zi5vcmciIDxpbnRlcm5ldC1kcmFmdHNAaWV0Zi5vcmc+IHdyb3RlOg0KDQog ICAgDQogICAgQSBuZXcgdmVyc2lvbiBvZiBJLUQsIGRyYWZ0LWt1ZWhsZXdpbmQtcXVpYy1zdWJz dHJhdGUtMDEudHh0DQogICAgaGFzIGJlZW4gc3VjY2Vzc2Z1bGx5IHN1Ym1pdHRlZCBieSBNaXJq YSBLdWVobGV3aW5kIGFuZCBwb3N0ZWQgdG8gdGhlDQogICAgSUVURiByZXBvc2l0b3J5Lg0KICAg IA0KICAgIE5hbWU6CQlkcmFmdC1rdWVobGV3aW5kLXF1aWMtc3Vic3RyYXRlDQogICAgUmV2aXNp b246CTAxDQogICAgVGl0bGU6CQlVc2UgQ2FzZXMgYW5kIFJlcXVpcmVtZW50cyBmb3IgUVVJQyBh cyBhIFN1YnN0cmF0ZQ0KICAgIERvY3VtZW50IGRhdGU6CTIwMTktMDctMDUNCiAgICBHcm91cDoJ CUluZGl2aWR1YWwgU3VibWlzc2lvbg0KICAgIFBhZ2VzOgkJOQ0KICAgIFVSTDogICAgICAgICAg ICBodHRwczovL3d3dy5pZXRmLm9yZy9pbnRlcm5ldC1kcmFmdHMvZHJhZnQta3VlaGxld2luZC1x dWljLXN1YnN0cmF0ZS0wMS50eHQNCiAgICBTdGF0dXM6ICAgICAgICAgaHR0cHM6Ly9kYXRhdHJh Y2tlci5pZXRmLm9yZy9kb2MvZHJhZnQta3VlaGxld2luZC1xdWljLXN1YnN0cmF0ZS8NCiAgICBI dG1saXplZDogICAgICAgaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWt1ZWhsZXdp bmQtcXVpYy1zdWJzdHJhdGUtMDENCiAgICBIdG1saXplZDogICAgICAgaHR0cHM6Ly9kYXRhdHJh Y2tlci5pZXRmLm9yZy9kb2MvaHRtbC9kcmFmdC1rdWVobGV3aW5kLXF1aWMtc3Vic3RyYXRlDQog ICAgRGlmZjogICAgICAgICAgIGh0dHBzOi8vd3d3LmlldGYub3JnL3JmY2RpZmY/dXJsMj1kcmFm dC1rdWVobGV3aW5kLXF1aWMtc3Vic3RyYXRlLTAxDQogICAgDQogICAgQWJzdHJhY3Q6DQogICAg ICAgVENQIGlzIG9mdGVuIHVzZWQgYXMgYSBwcm94eWluZyBvciB0dW5uZWxpbmcgcHJvdG9jb2wu ICBRVUlDIGlzIGENCiAgICAgICBuZXcsIGVtZXJnaW5nIHRyYW5zcG9ydCBwcm90b2NvbCBhbmQg dGhlcmUgaXMgYSBzaW1pbGFyIGV4cGVjdGF0aW9uDQogICAgICAgdGhhdCBpdCB0b28gd2lsbCBi ZSB1c2VkIGFzIGEgc3Vic3RyYXRlIG9uY2UgaXQgaXMgd2lkZWx5IGRlcGxveWVkLg0KICAgICAg IFVzaW5nIFFVSUMgaW5zdGVhZCBvZiBUQ1AgaW4gZXhpc3Rpbmcgc2NlbmFyaW9zIHdpbGwgYWxs b3cgcHJveHlpbmcNCiAgICAgICBhbmQgdHVubmVsaW5nIHNlcnZpY2VzIHRvIG1haW50YWluIHRo ZSBiZW5lZml0cyBvZiBRVUlDIG5hdGl2ZWx5LA0KICAgICAgIHdpdGhvdXQgZGVncmFkaW5nIHRo ZSBwZXJmb3JtYW5jZSBhbmQgc2VjdXJpdHkgY2hhcmFjdGVyaXN0aWNzLiAgUVVJQw0KICAgICAg IGFsc28gb3BlbnMgdXAgbmV3IG9wcG9ydHVuaXRpZXMgZm9yIHRoZXNlIHNlcnZpY2VzIHRvIGhh dmUgbG93ZXINCiAgICAgICBsYXRlbmN5IGFuZCBiZXR0ZXIgbXVsdGlzdHJlYW1pbmcgc3VwcG9y dC4gIFRoaXMgZG9jdW1lbnQgc3VtbWFyaXplcw0KICAgICAgIGN1cnJlbnQgYW5kIGZ1dHVyZSB1 c2FnZSBzY2VuYXJpb3MgdG8gZGVyaXZlIHJlcXVpcmVtZW50cyBmb3IgUVVJQw0KICAgICAgIGFu ZCB0byBwcm92aWRlIGFkZGl0aW9uYWwgcHJvdG9jb2wgY29uc2lkZXJhdGlvbnMuDQogICAgDQog ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgIA0KICAgIA0KICAgIA0KICAgIFBsZWFzZSBub3Rl IHRoYXQgaXQgbWF5IHRha2UgYSBjb3VwbGUgb2YgbWludXRlcyBmcm9tIHRoZSB0aW1lIG9mIHN1 Ym1pc3Npb24NCiAgICB1bnRpbCB0aGUgaHRtbGl6ZWQgdmVyc2lvbiBhbmQgZGlmZiBhcmUgYXZh aWxhYmxlIGF0IHRvb2xzLmlldGYub3JnLg0KICAgIA0KICAgIFRoZSBJRVRGIFNlY3JldGFyaWF0 DQogICAgDQogICAgDQoNCg== From nobody Mon Jul 8 05:06:32 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 32CEB120165; Mon, 8 Jul 2019 05:06:24 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.992 X-Spam-Level: X-Spam-Status: No, score=-1.992 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_SPF_HELO_TEMPERROR=0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NDpJLIs8Zrnh; Mon, 8 Jul 2019 05:06:22 -0700 (PDT) Received: from EUR01-DB5-obe.outbound.protection.outlook.com (mail-eopbgr150058.outbound.protection.outlook.com [40.107.15.58]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3E35E12015F; Mon, 8 Jul 2019 05:06:22 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=XieFTMG9KA0/83WXyUJiamvuEBiCLIJ6HIpF0Df33QA/aVa3QaXlUNYwrYvPqKeUjbc0sbVivyrbFGohzbYp1eSFgCFSZtkZYJuxbRazp0C0a7cMQOZi3zQNxKET7wrVssmCbRT1z+WA96GKy3FfvnM+1yA41r12khpo0hF1KstsIXmv+Xn3GTHnHoUll9Ar27xH35W2Xx2OfJiRHlG4+8fqNuoNOMycip2PhKOJ7EF3uUFWi7F6x1+e5hXyPD40kZkkcIENaT5Qi6gLovBvDrms1HISBL9Gy+Om9+0a7svmuAsvgjFt8bGzXZSVQxf4yq0u7eKOpZGpv+C82bc/ww== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=uwaV3OyEC0o5QZXXBJI/sgxceYNt6fugpg9STeAUP6o=; b=V0sbAMi0HOGcHAs5ZE54+zANOz7lajUHo4/vofn6thxK0HP0Gg4a39l3R+y/65m8evQHy0bwUO4NwzEoWh/MZ2WjeYpzFA4xZkIvjOf8C+W4CCpHKOrmMF97tO3PKwt7qwJAFh0atxPYdGmvSHUrnBYmqG3w907jBbicyzIwiSCjqst5AxI25pUI+1PSqDMrtrMXBRJD1ccTJ7RSNHnqcasfvRit/u3+wmVOLAAZ+UB1CU+MrLx+rMvdBuYk+ufzwCaEMrw6SALrHZpw/dYWJddckUlAVkyyC8ZYYCtHz2A6ec9b9tzWKaa7IodOFXdcN3x1FvMhn7yETmHnK/VpmA== ARC-Authentication-Results: i=1; mx.microsoft.com 1;spf=pass smtp.mailfrom=ericsson.com;dmarc=pass action=none header.from=ericsson.com;dkim=pass header.d=ericsson.com;arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=uwaV3OyEC0o5QZXXBJI/sgxceYNt6fugpg9STeAUP6o=; b=C56MoYLh1Njyu2REqRFTH28ksxqCYfDKKMmJ2ND5YULYjOML2xWbitR5co3f8G4SRWZJ6bOf9+zBlXRghOwCdIwq9rBlowRQhaGeuAgcXeQDfYJIZlGybn7+tysDCF+PT32PHTAdEQv8lfxjadF3ETPkFk8SyV13oFuk1+AMk94= Received: from DB7PR07MB4697.eurprd07.prod.outlook.com (52.135.134.153) by DB7PR07MB4108.eurprd07.prod.outlook.com (52.134.101.10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2073.10; Mon, 8 Jul 2019 12:06:19 +0000 Received: from DB7PR07MB4697.eurprd07.prod.outlook.com ([fe80::4021:8bf4:d1fa:9ac3]) by DB7PR07MB4697.eurprd07.prod.outlook.com ([fe80::4021:8bf4:d1fa:9ac3%6]) with mapi id 15.20.2052.019; Mon, 8 Jul 2019 12:06:19 +0000 From: Mirja Kuehlewind To: "masque@ietf.org" CC: "quic@ietf.org" Subject: MASQUE side meeting Thread-Topic: MASQUE side meeting Thread-Index: AQHVNYWN3cRPSSWWG0OaxN048KXm+Q== Date: Mon, 8 Jul 2019 12:06:19 +0000 Message-ID: <581BDBF3-0EDB-49C1-A49D-5B1BC3477AF6@ericsson.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=mirja.kuehlewind@ericsson.com; x-originating-ip: [2001:16b8:2cc4:d100:4c0:3462:e129:448d] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 8cf99a52-34fe-4d5c-5f2c-08d7039caff9 x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600148)(711020)(4605104)(1401327)(2017052603328)(7193020); SRVR:DB7PR07MB4108; x-ms-traffictypediagnostic: DB7PR07MB4108: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:6430; x-forefront-prvs: 00922518D8 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(366004)(39860400002)(396003)(136003)(346002)(376002)(39224004)(189003)(199004)(33656002)(91956017)(66946007)(73956011)(561944003)(2906002)(8676002)(1730700003)(6512007)(5660300002)(76116006)(36756003)(64756008)(25786009)(66476007)(66556008)(66446008)(8936002)(7736002)(450100002)(81166006)(81156014)(478600001)(4326008)(6436002)(4744005)(6116002)(53936002)(6486002)(2616005)(476003)(68736007)(44832011)(256004)(14444005)(5640700003)(3480700005)(86362001)(486006)(71200400001)(7116003)(71190400001)(99286004)(186003)(102836004)(6506007)(14454004)(2351001)(6916009)(46003)(2501003)(305945005)(316002); DIR:OUT; SFP:1101; SCL:1; SRVR:DB7PR07MB4108; H:DB7PR07MB4697.eurprd07.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: ericsson.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam-message-info: TkDZTy8fcByZ2Oj/PTLNCFagdoQA4SWKrSaTD7w/QCiDxKQB67CwPYR9qWX4d1jV1AtclDPC+SlDUdfz0bN8P7EvgQojng1YfrKskJ0pXow4LhDIoBjQUDrIWIuM4/Gbt+foLNkxoK6n8H+UYwz9vuyv+ob4u9nK1LzgEApsHmu0cPT9K5d+pTGVYtDWoBojD8vlyO8ucUKV+e6ilAHoysrXEcw416+RZacu9czu2ywdybKpFgrWBQi18L+gURDSSjg4Ec6IPsDqYEfX2hYTup5EhSj1i/8Zu2TPRIlzwJKdR0fOWnhvx6aRSYPcBmTuzFnkH55+2K5LvAXz8a95Az0mNbJH3JnSwScH6za0LpGBYvoL3XzYD84bA6rUnbkUunAL3xJpeLaRE8By7o1uKA66R304/BHOpmn1eDgM06o= Content-Type: text/plain; charset="utf-8" Content-ID: <3D62B8BEFAAD134392C61D5EA11401E3@eurprd07.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: ericsson.com X-MS-Exchange-CrossTenant-Network-Message-Id: 8cf99a52-34fe-4d5c-5f2c-08d7039caff9 X-MS-Exchange-CrossTenant-originalarrivaltime: 08 Jul 2019 12:06:19.6812 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: mirja.kuehlewind@ericsson.com X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB7PR07MB4108 Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Jul 2019 12:06:25 -0000 SGkgYWdhaW4sDQoNCkkgYWxzbyBtYWRlIGEgcm9vbSByZXNlcnZhdGlvbiBmb3IgDQoNCglUaHVy c2RheSBKdWx5IDE1LCANCgk4OjMwLTk6NDVhbSBpbiB0aGUgbW9ybmluZyBpbg0KCXJvb20gVmFu IEhvcm5lLg0KDQpXZSB3b3VsZCBsaWtlIHRvIGRpc2N1c3Mgd2l0aCBldmVyeWJvZHkgd2hvIGlz IGludGVyZXN0ZWQgbWFpbmx5Og0KDQogLSBuZXcgYW5kIHBlbmRpbmcgdXBkYXRlcyBvbiB0aGUg TWFzcXVlIHByb3RvY29sIHByb3Bvc2FsDQogLSB1c2FnZSBzY2VuYXJpb3MgZm9yIFFVSUMtYmFz ZWQgdHVubmVsaW5nIGFuZCBwcm94eSBzZXJ2aWNlcyBhbmQgcmVxdWlyZW1lbnRzLg0KDQpNb3Jl IGluZm9ybWF0aW9uIHdpbGwgZm9sbG93IQ0KDQpNaXJqYQ0KDQoNCg0K From nobody Mon Jul 8 05:22:56 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 461041200A1 for ; Mon, 8 Jul 2019 05:22:54 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.199 X-Spam-Level: X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NVAloY60S6xr for ; Mon, 8 Jul 2019 05:22:50 -0700 (PDT) Received: from mailhost.informatik.uni-hamburg.de (mailhost.informatik.uni-hamburg.de [134.100.9.70]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6382112002F for ; Mon, 8 Jul 2019 05:22:50 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mailhost.informatik.uni-hamburg.de (Postfix) with ESMTP id 37C20898 for ; Mon, 8 Jul 2019 14:22:48 +0200 (CEST) X-Virus-Scanned: amavisd-new at informatik.uni-hamburg.de Received: from mailhost.informatik.uni-hamburg.de ([127.0.0.1]) by localhost (mailhost.informatik.uni-hamburg.de [127.0.0.1]) (amavisd-new, port 10024) with LMTP id hB+rd0fgKOAF for ; Mon, 8 Jul 2019 14:22:47 +0200 (CEST) Received: from svs26.informatik.uni-hamburg.de (svs26.informatik.uni-hamburg.de [134.100.15.26]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) (Authenticated sender: sy) by mailhost.informatik.uni-hamburg.de (Postfix) with ESMTPSA id 98D5E897 for ; Mon, 8 Jul 2019 14:22:47 +0200 (CEST) Reply-To: sy@informatik.uni-hamburg.de Subject: Re: FW: New Version Notification for draft-kuehlewind-quic-substrate-01.txt To: quic@ietf.org References: <156234111227.21943.6370804489378532746.idtracker@ietfa.amsl.com> <601B5A7E-09ED-4BF3-80C4-5A475B84FE59@ericsson.com> From: Erik Sy Openpgp: preference=signencrypt Message-ID: Date: Mon, 8 Jul 2019 14:22:46 +0200 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:60.0) Gecko/20100101 Thunderbird/60.7.2 MIME-Version: 1.0 In-Reply-To: <601B5A7E-09ED-4BF3-80C4-5A475B84FE59@ericsson.com> Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit Content-Language: en-GB Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Jul 2019 12:22:55 -0000 Hi Mirja, another use case for proxying QUIC is to speed up QUIC's connection establishment on high-latency access networks. An article with more details can be found here: https://arxiv.org/pdf/1907.01291.pdf Best regards, Erik On 7/8/19 14:01, Mirja Kuehlewind wrote: > Hi all, > > we posted an update of draft-kuehlewind-quic-substrate which some smaller edits, some more text on requirements for discovery, and a new sub use case (thanks Lucas!). > > Feedback would be very welcome! Also on github here: > > https://github.com/mirjak/draft-kuehlewind-quic-substrate > > Mirja > > > > On 05.07.19, 17:38, "internet-drafts@ietf.org" wrote: > > > A new version of I-D, draft-kuehlewind-quic-substrate-01.txt > has been successfully submitted by Mirja Kuehlewind and posted to the > IETF repository. > > Name: draft-kuehlewind-quic-substrate > Revision: 01 > Title: Use Cases and Requirements for QUIC as a Substrate > Document date: 2019-07-05 > Group: Individual Submission > Pages: 9 > URL: https://www.ietf.org/internet-drafts/draft-kuehlewind-quic-substrate-01.txt > Status: https://datatracker.ietf.org/doc/draft-kuehlewind-quic-substrate/ > Htmlized: https://tools.ietf.org/html/draft-kuehlewind-quic-substrate-01 > Htmlized: https://datatracker.ietf.org/doc/html/draft-kuehlewind-quic-substrate > Diff: https://www.ietf.org/rfcdiff?url2=draft-kuehlewind-quic-substrate-01 > > Abstract: > TCP is often used as a proxying or tunneling protocol. QUIC is a > new, emerging transport protocol and there is a similar expectation > that it too will be used as a substrate once it is widely deployed. > Using QUIC instead of TCP in existing scenarios will allow proxying > and tunneling services to maintain the benefits of QUIC natively, > without degrading the performance and security characteristics. QUIC > also opens up new opportunities for these services to have lower > latency and better multistreaming support. This document summarizes > current and future usage scenarios to derive requirements for QUIC > and to provide additional protocol considerations. > > > > > Please note that it may take a couple of minutes from the time of submission > until the htmlized version and diff are available at tools.ietf.org. > > The IETF Secretariat > > > From nobody Mon Jul 8 05:42:05 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A0DC91201A8 for ; Mon, 8 Jul 2019 05:41:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.9 X-Spam-Level: X-Spam-Status: No, score=-6.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, MIME_HTML_ONLY=0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=samsung.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EZfnJ_flQ4H0 for ; Mon, 8 Jul 2019 05:41:50 -0700 (PDT) Received: from mailout1.samsung.com (mailout1.samsung.com [203.254.224.24]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5A9DE1201C5 for ; Mon, 8 Jul 2019 05:41:49 -0700 (PDT) Received: from epcas5p4.samsung.com (unknown [182.195.41.42]) by mailout1.samsung.com (KnoxPortal) with ESMTP id 20190708124147epoutp015fd100caccd3ab74789b8b4f40e21486~vbw9PPQ1h0781307813epoutp01D for ; Mon, 8 Jul 2019 12:41:47 +0000 (GMT) DKIM-Filter: OpenDKIM Filter v2.11.0 mailout1.samsung.com 20190708124147epoutp015fd100caccd3ab74789b8b4f40e21486~vbw9PPQ1h0781307813epoutp01D DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=samsung.com; s=mail20170921; t=1562589707; bh=6NF04pLolu8XW/iX3FVcdRl1f7EkSuIYmHW8TGsStao=; h=Subject:Reply-To:From:To:CC:In-Reply-To:Date:References:From; b=IUyfBA4LNw/wvumYtLQ5257rdgGTdXR07bKjSNuZm6RPYCulwiUtyjFYKEY1rfjwO e4zNyrZYgAo9UpDK+099M+Rmu6xALIm2f5y58KGNEcvknPnl7XbGKlNjtxqweaAdH4 ZHCEUDstW7EwWnqf2pUFDNNIuovE/lsINTIGX1BI= Received: from epsmges5p2new.samsung.com (unknown [182.195.42.74]) by epcas5p2.samsung.com (KnoxPortal) with ESMTP id 20190708124146epcas5p2d2f0337eaa8d6169e7043325ebcc866d~vbw8KLZ4t2526125261epcas5p2o; Mon, 8 Jul 2019 12:41:46 +0000 (GMT) X-AuditID: b6c32a4a-95bff70000000fe2-80-5d233a09165e Received: from epcas5p2.samsung.com ( [182.195.41.40]) by epsmges5p2new.samsung.com (Symantec Messaging Gateway) with SMTP id 13.A6.04066.90A332D5; Mon, 8 Jul 2019 21:41:46 +0900 (KST) Mime-Version: 1.0 Subject: RE:(2) FW: New Version Notification for draft-kuehlewind-quic-substrate-01.txt Reply-To: madhan.raj@samsung.com Sender: Madhan Raj Kanagarathinam From: Madhan Raj Kanagarathinam To: "quic@ietf.org" CC: "sy@informatik.uni-hamburg.de" , "lars@eggert.org" , "mnot@mnot.net" X-Priority: 3 X-Content-Kind-Code: NORMAL In-Reply-To: X-Drm-Type: N,general X-Msg-Generator: Mail X-Msg-Type: PERSONAL X-Reply-Demand: N Message-ID: <20190708124145epcms5p69ec8fcddac5141c01476a9acf34af406@epcms5p6> Date: Mon, 08 Jul 2019 18:11:45 +0530 X-CMS-MailID: 20190708124145epcms5p69ec8fcddac5141c01476a9acf34af406 Content-Type: multipart/related; boundary="----D9xt21mMgj8HysE2-Y.M63mjS8_JkrNXBjpDkLoC2xhC_XEY=_a40c7_" CMS-TYPE: 105P X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFtrIKsWRmVeSWpSXmKPExsWy7bCmhi6XlXKswas9TBavj3SzW6z/9JjR omcBt8WKN5sZHVg8JredZvVYsuQnk8fE86fZPDYu/s4awBLFZZOSmpNZllqkb5fAlbHz0j22 gtlLmSsO3tzO2MC4YBZzFyMnh4SAicTxzXOYuhi5OIQEdjNKzFz1Dcjh4OAVEJT4u0MYpEZY IFLi6spzjCC2kICCxN4rO5kg4lYS/bNvsoLYbAIWEgs3bwOLiwgoS8xZupgdZCazQCejRPvn G1DLeCVmtD9lgbClJbYv3wo2lFPAV2L2vVNQcVGJm6vfssPY74/NZ4SwRSRa752FmiMo8eDn bkaQOyUEpCRubeAG2SUhMJtR4uiyxywQzmZGicbL/WwQDeYSy35MA7N5gZbt7HkCNpRFQFWi Z+Y6qKEuEk/OfwezmQWyJCY/388KYfNJ9P5+wgTzwI55MLaKxNI5h6F6pST+P93FDnGQh8SF cxGQAO1jkvi1ejP7BEa5WYgwnYVkA4StIdE6Zy47hK0oMaX7IZRtIzH7+jEWTHFViV8HlrAu YGRfxSiZWlCcm55abFpglJdarlecmFtcmpeul5yfu4kRnHi0vHYwLjvnc4hRgINRiYeXQ04p Vog1say4MvcQowrQrEcbVl9glGLJy89LVRLhTQySjxXiTUmsrEotyo8vKs1JLT7EKM3BoiTO O4n1aoyQQHpiSWp2ampBahFMlomDU6qBUcEybk7SJH52k6Ubb3tI+56onrJg0YabSzZvM3q8 7qxu7JEq906HVbOY5yTcsBZdW+QQu6k/8Jro+kstXJ/0o/fHfNytKtkgasVad5+vYfUBqfNn pXvqXhnLnHwuz/L65Kx41vdc1opvT63UEmNROFWlvCbU29NtHeMiuwU/dh2Qf1ps6fNxmxJL cUaioRZzUXEiAFjyn7JEAwAA X-CMS-RootMailID: 20190708122315epcas1p4290d96795561c181d92abd18226c14ff References: <156234111227.21943.6370804489378532746.idtracker@ietfa.amsl.com> <601B5A7E-09ED-4BF3-80C4-5A475B84FE59@ericsson.com> Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Jul 2019 12:42:04 -0000 ------D9xt21mMgj8HysE2-Y.M63mjS8_JkrNXBjpDkLoC2xhC_XEY=_a40c7_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PEhUTUw+PEhFQUQ+DQo8TUVUQSBjb250ZW50PUlFPTUgaHR0cC1lcXVpdj1YLVVBLUNvbXBhdGli bGU+DQo8TUVUQSBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiIGh0dHAtZXF1aXY9 Q29udGVudC1UeXBlPg0KPFNUWUxFIGlkPW15c2luZ2xlX3N0eWxlIHR5cGU9dGV4dC9jc3M+LnNl YXJjaC13b3JkIHsNCglCQUNLR1JPVU5ELUNPTE9SOiAjZmZlZTk0DQp9DQpQIHsNCglGT05ULVNJ WkU6IDEwcHQ7IE1BUkdJTi1CT1RUT006IDVweDsgRk9OVC1GQU1JTFk6IEFyaWFsLCBhcmlhbDsg TUFSR0lOLVRPUDogNXB4DQp9DQpURCB7DQoJRk9OVC1TSVpFOiAxMHB0OyBNQVJHSU4tQk9UVE9N OiA1cHg7IEZPTlQtRkFNSUxZOiBBcmlhbCwgYXJpYWw7IE1BUkdJTi1UT1A6IDVweA0KfQ0KTEkg ew0KCUZPTlQtU0laRTogMTBwdDsgTUFSR0lOLUJPVFRPTTogNXB4OyBGT05ULUZBTUlMWTogQXJp YWwsIGFyaWFsOyBNQVJHSU4tVE9QOiA1cHgNCn0NCkJPRFkgew0KCUZPTlQtU0laRTogMTBwdDsg Rk9OVC1GQU1JTFk6IEFyaWFsLCBhcmlhbA0KfQ0KPC9TVFlMRT4NCg0KPFNUWUxFIGlkPWtub3hf c3R5bGUgdHlwZT10ZXh0L2Nzcz5QIHsNCglGT05ULVNJWkU6IDEwcHQ7IE1BUkdJTi1CT1RUT006 IDVweDsgRk9OVC1GQU1JTFk6IEFyaWFsLCBhcmlhbDsgTUFSR0lOLVRPUDogNXB4DQp9DQo8L1NU WUxFPg0KDQo8TUVUQSBuYW1lPUdFTkVSQVRPUiBjb250ZW50PUFjdGl2ZVNxdWFyZT48L0hFQUQ+ DQo8Qk9EWSBzdHlsZT0iT1ZFUkZMT1c6IGF1dG8iPg0KPFA+PC9QPg0KPFA+TXkgY3VycmVudCBy ZXNlYXJjaCBhbHNvIHdvcmtzIDAtUlRUIHByb3hpZmljYXRpb24gb2YgUVVJQytTT0NLUy4gV2hl cmVhcywgVENQIG1pZ2h0IHRha2UgNC03IFJUVHMuIDwvUD4NCjxQPjxBIGhyZWY9Imh0dHBzOi8v Z2l0aHViLmNvbS9xdWljd2cvYmFzZS1kcmFmdHMvaXNzdWVzLzI1MTgiPmh0dHBzOi8vZ2l0aHVi LmNvbS9xdWljd2cvYmFzZS1kcmFmdHMvaXNzdWVzLzI1MTg8L0E+PC9QPg0KPFA+V2UgZGVjaWRl ZCB0byBsb29rIGludG8gdGhlIHByb3hpZmljYXRpb24gb2YgUVVJQyBsYXRlciBhcyBpdCB3YXNu J3QgY2hhcnRlcmVkIHdvcmsuPC9QPg0KPFA+Jm5ic3A7PC9QPg0KPFA+Jm5ic3A7PC9QPg0KPFA+ UmVnYXJkcyw8L1A+DQo8UD5NYWRoYW48L1A+DQo8UD4mbmJzcDs8L1A+DQo8UD5PbiAyMDE5LTYt MTEsIGF0IDEyOjI4LCBNYWRoYW4gUmFqIEthbmFnYXJhdGhpbmFtICZsdDttYWRoYW4ucmFqQHNh bXN1bmcuY29tJmd0OyB3cm90ZTo8QlI+Jmd0OyBUaGFua3MgZm9yIGxvb3BpbmcgaW4gPFNQQU4g Y2xhc3M9c2VhcmNoLXdvcmQtbWFpbCBzdHlsZT0iQkFDS0dST1VORC1DT0xPUjogcmdiKDI1NSwy MzgsMTQ4KSI+TGFyczwvU1BBTj4uPEJSPiZndDsgV2UgcGVyc29uYWxseSBzZWUgaXQgYXMgc2ln bmlmaWNhbnQgaW1wb3J0YW5jZSBpbiBRVUlDIGJlY2F1c2Ugb2YgdHdvIHJlYXNvbjxCUj4mZ3Q7 IC0gUHJveGlmaWNhdGlvbiBvZiBwbGFpbiBRVUlDIChub24taHR0cCBiYXNlZCkgaXMgeWV0IHRv IGJlIGV4cGxvcmVkIGFuZCBtaWdodCBiZSB3aWRlbHkgdXNlZCBpbiBTbWFydHBob25lcyAoYXMg dXNlZCBpbiBNUFRDUCk8QlI+Jmd0OyAtIFRoaXMgY2FuIGJlIHVzZWQgaW4gNUcgQVRTU1MgKFRS IDIzLjc5MykgYXMgMC1SVFQgYW5kIHNlY3VyZWQgY29udmVydG9yIGZvciBlbmhhbmNlZCByZXNp bGllbmNlIG9uIG5ldHdvcmsgaGFuZG92ZXI8QlI+Jmd0OyBEbyBsZXQgbWUga25vdyB5b3VyIG9w aW5pb24uPEJSPjxCUj50aG9zZSBhcmUgY2VydGFpbmx5IHBvc3NpYmxlIHVzZSBjYXNlcyBmb3Ig UVVJQy4gSG93ZXZlciwgYXMgTWFyayBoYXMgc2FpZCwgdGhlIFdHIGF0IHRoZSBtb21lbnQgaXMg Y29tcGxldGVseSBmb2N1c2VkIG9uIGZpbmlzaGluZyB0aGUgY2hhcnRlcmVkIHdvcmssIGFuZCB3 ZSB3aWxsIG5vdCBoYXZlIHRpbWUgdG8gZGlzY3VzcyB0aGlzIGF0IHRoZSBtZWV0aW5ncy48QlI+ PEJSPjxTUEFOIGNsYXNzPXNlYXJjaC13b3JkLW1haWwgc3R5bGU9IkJBQ0tHUk9VTkQtQ09MT1I6 IHJnYigyNTUsMjM4LDE0OCkiPkxhcnM8L1NQQU4+PEJSPjxCUj48L1A+DQo8UD4mbmJzcDs8L1A+ DQo8UD4mbmJzcDs8L1A+DQo8UD4tLS0tLS0tLS0gPEI+T3JpZ2luYWwgTWVzc2FnZTwvQj4gLS0t LS0tLS0tPC9QPg0KPFA+PEI+U2VuZGVyPC9CPiA6IEVyaWsgU3kmbmJzcDsmbHQ7c3lAaW5mb3Jt YXRpay51bmktaGFtYnVyZy5kZSZndDs8L1A+DQo8UD48Qj5EYXRlPC9CPiA6IDIwMTktMDctMDgg MTc6NTMgKEdNVCs1OjMwKTwvUD4NCjxQPjxCPlRpdGxlPC9CPiA6IFJlOiBGVzogTmV3IFZlcnNp b24gTm90aWZpY2F0aW9uIGZvciBkcmFmdC1rdWVobGV3aW5kLXF1aWMtc3Vic3RyYXRlLTAxLnR4 dDwvUD4NCjxQPiZuYnNwOzwvUD48UFJFPkhpIE1pcmphLA0KDQphbm90aGVyIHVzZSBjYXNlIGZv ciBwcm94eWluZyBRVUlDIGlzIHRvIHNwZWVkIHVwIFFVSUMncyBjb25uZWN0aW9uDQplc3RhYmxp c2htZW50IG9uIGhpZ2gtbGF0ZW5jeSBhY2Nlc3MgbmV0d29ya3MuDQoNCkFuIGFydGljbGUgd2l0 aCBtb3JlIGRldGFpbHMgY2FuIGJlIGZvdW5kDQpoZXJlOiZuYnNwO2h0dHBzOi8vYXJ4aXYub3Jn L3BkZi8xOTA3LjAxMjkxLnBkZg0KDQpCZXN0IHJlZ2FyZHMsDQpFcmlrDQoNCk9uIDcvOC8xOSAx NDowMSwgTWlyamEgS3VlaGxld2luZCB3cm90ZToNCiZndDsgSGkgYWxsLA0KJmd0Ow0KJmd0OyB3 ZSBwb3N0ZWQgYW4gdXBkYXRlIG9mIGRyYWZ0LWt1ZWhsZXdpbmQtcXVpYy1zdWJzdHJhdGUgd2hp Y2ggc29tZSBzbWFsbGVyIGVkaXRzLCBzb21lIG1vcmUgdGV4dCBvbiByZXF1aXJlbWVudHMgZm9y IGRpc2NvdmVyeSwgYW5kIGEgbmV3IHN1YiB1c2UgY2FzZSAodGhhbmtzIEx1Y2FzISkuDQomZ3Q7 DQomZ3Q7IEZlZWRiYWNrIHdvdWxkIGJlIHZlcnkgd2VsY29tZSEgQWxzbyBvbiBnaXRodWIgaGVy ZToNCiZndDsNCiZndDsgaHR0cHM6Ly9naXRodWIuY29tL21pcmphay9kcmFmdC1rdWVobGV3aW5k LXF1aWMtc3Vic3RyYXRlDQomZ3Q7DQomZ3Q7IE1pcmphDQomZ3Q7DQomZ3Q7DQomZ3Q7DQomZ3Q7 IO+7v09uIDA1LjA3LjE5LCAxNzozOCwgImludGVybmV0LWRyYWZ0c0BpZXRmLm9yZyIgJmx0O2lu dGVybmV0LWRyYWZ0c0BpZXRmLm9yZyZndDsgd3JvdGU6DQomZ3Q7DQomZ3Q7ICAgICANCiZndDsg ICAgIEEgbmV3IHZlcnNpb24gb2YgSS1ELCBkcmFmdC1rdWVobGV3aW5kLXF1aWMtc3Vic3RyYXRl LTAxLnR4dA0KJmd0OyAgICAgaGFzIGJlZW4gc3VjY2Vzc2Z1bGx5IHN1Ym1pdHRlZCBieSBNaXJq YSBLdWVobGV3aW5kIGFuZCBwb3N0ZWQgdG8gdGhlDQomZ3Q7ICAgICBJRVRGIHJlcG9zaXRvcnku DQomZ3Q7ICAgICANCiZndDsgICAgIE5hbWU6CQlkcmFmdC1rdWVobGV3aW5kLXF1aWMtc3Vic3Ry YXRlDQomZ3Q7ICAgICBSZXZpc2lvbjoJMDENCiZndDsgICAgIFRpdGxlOgkJVXNlIENhc2VzIGFu ZCBSZXF1aXJlbWVudHMgZm9yIFFVSUMgYXMgYSBTdWJzdHJhdGUNCiZndDsgICAgIERvY3VtZW50 IGRhdGU6CTIwMTktMDctMDUNCiZndDsgICAgIEdyb3VwOgkJSW5kaXZpZHVhbCBTdWJtaXNzaW9u DQomZ3Q7ICAgICBQYWdlczoJCTkNCiZndDsgICAgIFVSTDogICAgICAgICAgICBodHRwczovL3d3 dy5pZXRmLm9yZy9pbnRlcm5ldC1kcmFmdHMvZHJhZnQta3VlaGxld2luZC1xdWljLXN1YnN0cmF0 ZS0wMS50eHQNCiZndDsgICAgIFN0YXR1czogICAgICAgICBodHRwczovL2RhdGF0cmFja2VyLmll dGYub3JnL2RvYy9kcmFmdC1rdWVobGV3aW5kLXF1aWMtc3Vic3RyYXRlLw0KJmd0OyAgICAgSHRt bGl6ZWQ6ICAgICAgIGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1rdWVobGV3aW5k LXF1aWMtc3Vic3RyYXRlLTAxDQomZ3Q7ICAgICBIdG1saXplZDogICAgICAgaHR0cHM6Ly9kYXRh dHJhY2tlci5pZXRmLm9yZy9kb2MvaHRtbC9kcmFmdC1rdWVobGV3aW5kLXF1aWMtc3Vic3RyYXRl DQomZ3Q7ICAgICBEaWZmOiAgICAgICAgICAgaHR0cHM6Ly93d3cuaWV0Zi5vcmcvcmZjZGlmZj91 cmwyPWRyYWZ0LWt1ZWhsZXdpbmQtcXVpYy1zdWJzdHJhdGUtMDENCiZndDsgICAgIA0KJmd0OyAg ICAgQWJzdHJhY3Q6DQomZ3Q7ICAgICAgICBUQ1AgaXMgb2Z0ZW4gdXNlZCBhcyBhIHByb3h5aW5n IG9yIHR1bm5lbGluZyBwcm90b2NvbC4gIFFVSUMgaXMgYQ0KJmd0OyAgICAgICAgbmV3LCBlbWVy Z2luZyB0cmFuc3BvcnQgcHJvdG9jb2wgYW5kIHRoZXJlIGlzIGEgc2ltaWxhciBleHBlY3RhdGlv bg0KJmd0OyAgICAgICAgdGhhdCBpdCB0b28gd2lsbCBiZSB1c2VkIGFzIGEgc3Vic3RyYXRlIG9u Y2UgaXQgaXMgd2lkZWx5IGRlcGxveWVkLg0KJmd0OyAgICAgICAgVXNpbmcgUVVJQyBpbnN0ZWFk IG9mIFRDUCBpbiBleGlzdGluZyBzY2VuYXJpb3Mgd2lsbCBhbGxvdyBwcm94eWluZw0KJmd0OyAg ICAgICAgYW5kIHR1bm5lbGluZyBzZXJ2aWNlcyB0byBtYWludGFpbiB0aGUgYmVuZWZpdHMgb2Yg UVVJQyBuYXRpdmVseSwNCiZndDsgICAgICAgIHdpdGhvdXQgZGVncmFkaW5nIHRoZSBwZXJmb3Jt YW5jZSBhbmQgc2VjdXJpdHkgY2hhcmFjdGVyaXN0aWNzLiAgUVVJQw0KJmd0OyAgICAgICAgYWxz byBvcGVucyB1cCBuZXcgb3Bwb3J0dW5pdGllcyBmb3IgdGhlc2Ugc2VydmljZXMgdG8gaGF2ZSBs b3dlcg0KJmd0OyAgICAgICAgbGF0ZW5jeSBhbmQgYmV0dGVyIG11bHRpc3RyZWFtaW5nIHN1cHBv cnQuICBUaGlzIGRvY3VtZW50IHN1bW1hcml6ZXMNCiZndDsgICAgICAgIGN1cnJlbnQgYW5kIGZ1 dHVyZSB1c2FnZSBzY2VuYXJpb3MgdG8gZGVyaXZlIHJlcXVpcmVtZW50cyBmb3IgUVVJQw0KJmd0 OyAgICAgICAgYW5kIHRvIHByb3ZpZGUgYWRkaXRpb25hbCBwcm90b2NvbCBjb25zaWRlcmF0aW9u cy4NCiZndDsgICAgIA0KJmd0OyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIA0KJmd0OyAg ICAgDQomZ3Q7ICAgICANCiZndDsgICAgIFBsZWFzZSBub3RlIHRoYXQgaXQgbWF5IHRha2UgYSBj b3VwbGUgb2YgbWludXRlcyBmcm9tIHRoZSB0aW1lIG9mIHN1Ym1pc3Npb24NCiZndDsgICAgIHVu dGlsIHRoZSBodG1saXplZCB2ZXJzaW9uIGFuZCBkaWZmIGFyZSBhdmFpbGFibGUgYXQgdG9vbHMu aWV0Zi5vcmcuDQomZ3Q7ICAgICANCiZndDsgICAgIFRoZSBJRVRGIFNlY3JldGFyaWF0DQomZ3Q7 ICAgICANCiZndDsgICAgIA0KJmd0Ow0KDQo8L1BSRT48dGFibGUgaWQ9Y29uZmlkZW50aWFsc2ln bmltZyBkYXRhLWN1aS1sb2NrPSJ0cnVlIiBuYW1vX2xvY2s+PHRyPjx0ZD4NCjwhLS08cD4mIzEw OzxpbWcgYm9yZGVyPSIwIiBzcmM9Imh0dHA6Ly93d3cuc2Ftc3VuZy5uZXQvcHRfaW1hZ2VzL1BD TC9zZWN1cml0eWltYWdlL01TSV8yMDE0MDUxOTAwMzczMjIxNC5naWYiLz48L3A+JiMxMDstLT4N CjxwPjxpbWcgYm9yZGVyPSIwIiBzcmM9ImNpZDpYT0swTEs3Q1Q5U1pAbmFtby5jby5rciIvPjwv cD4gDQo8L3RkPjwvdHI+PC90YWJsZT48L0JPRFk+PC9IVE1MPjxpbWcgc3JjPSdodHRwOi8vZXh0 LnNhbXN1bmcubmV0L21haWwvZXh0L3YxL2V4dGVybmFsL3N0YXR1cy91cGRhdGU/dXNlcmlkPW1h ZGhhbi5yYWomZG89YldGcGJFbEVQVEl3TVRrd056QTRNVEkwTVRRMVpYQmpiWE0xY0RZNVpXTTRa bU5rWkdGak5URTBNV013TVRRM05tRTVZV05tTXpSaFpqUXdOaVp5WldOcGNHbGxiblJCWkdSeVpY TnpQWEYxYVdOQWFXVjBaaTV2Y21jXycgYm9yZGVyPTAgd2lkdGg9MCBoZWlnaHQ9MCBzdHlsZT0n ZGlzcGxheTpub25lJz4= ------D9xt21mMgj8HysE2-Y.M63mjS8_JkrNXBjpDkLoC2xhC_XEY=_a40c7_ Content-Type: image/png; name="201602111742151_N3WZA6X7.png" Content-Transfer-Encoding: base64 Content-ID: iVBORw0KGgoAAAANSUhEUgAAAggAAADICAIAAAAC6Y6pAAAACXBIWXMAAAsTAAALEwEAmpwYAAAK T2lDQ1BQaG90b3Nob3AgSUNDIHByb2ZpbGUAAHjanVNnVFPpFj333vRCS4iAlEtvUhUIIFJCi4AU kSYqIQkQSoghodkVUcERRUUEG8igiAOOjoCMFVEsDIoK2AfkIaKOg6OIisr74Xuja9a89+bN/rXX Pues852zzwfACAyWSDNRNYAMqUIeEeCDx8TG4eQuQIEKJHAAEAizZCFz/SMBAPh+PDwrIsAHvgAB eNMLCADATZvAMByH/w/qQplcAYCEAcB0kThLCIAUAEB6jkKmAEBGAYCdmCZTAKAEAGDLY2LjAFAt AGAnf+bTAICd+Jl7AQBblCEVAaCRACATZYhEAGg7AKzPVopFAFgwABRmS8Q5ANgtADBJV2ZIALC3 AMDOEAuyAAgMADBRiIUpAAR7AGDIIyN4AISZABRG8lc88SuuEOcqAAB4mbI8uSQ5RYFbCC1xB1dX Lh4ozkkXKxQ2YQJhmkAuwnmZGTKBNA/g88wAAKCRFRHgg/P9eM4Ors7ONo62Dl8t6r8G/yJiYuP+ 5c+rcEAAAOF0ftH+LC+zGoA7BoBt/qIl7gRoXgugdfeLZrIPQLUAoOnaV/Nw+H48PEWhkLnZ2eXk 5NhKxEJbYcpXff5nwl/AV/1s+X48/Pf14L7iJIEyXYFHBPjgwsz0TKUcz5IJhGLc5o9H/LcL//wd 0yLESWK5WCoU41EScY5EmozzMqUiiUKSKcUl0v9k4t8s+wM+3zUAsGo+AXuRLahdYwP2SycQWHTA 4vcAAPK7b8HUKAgDgGiD4c93/+8//UegJQCAZkmScQAAXkQkLlTKsz/HCAAARKCBKrBBG/TBGCzA BhzBBdzBC/xgNoRCJMTCQhBCCmSAHHJgKayCQiiGzbAdKmAv1EAdNMBRaIaTcA4uwlW4Dj1wD/ph CJ7BKLyBCQRByAgTYSHaiAFiilgjjggXmYX4IcFIBBKLJCDJiBRRIkuRNUgxUopUIFVIHfI9cgI5 h1xGupE7yAAygvyGvEcxlIGyUT3UDLVDuag3GoRGogvQZHQxmo8WoJvQcrQaPYw2oefQq2gP2o8+ Q8cwwOgYBzPEbDAuxsNCsTgsCZNjy7EirAyrxhqwVqwDu4n1Y8+xdwQSgUXACTYEd0IgYR5BSFhM WE7YSKggHCQ0EdoJNwkDhFHCJyKTqEu0JroR+cQYYjIxh1hILCPWEo8TLxB7iEPENyQSiUMyJ7mQ AkmxpFTSEtJG0m5SI+ksqZs0SBojk8naZGuyBzmULCAryIXkneTD5DPkG+Qh8lsKnWJAcaT4U+Io UspqShnlEOU05QZlmDJBVaOaUt2ooVQRNY9aQq2htlKvUYeoEzR1mjnNgxZJS6WtopXTGmgXaPdp r+h0uhHdlR5Ol9BX0svpR+iX6AP0dwwNhhWDx4hnKBmbGAcYZxl3GK+YTKYZ04sZx1QwNzHrmOeZ D5lvVVgqtip8FZHKCpVKlSaVGyovVKmqpqreqgtV81XLVI+pXlN9rkZVM1PjqQnUlqtVqp1Q61Mb U2epO6iHqmeob1Q/pH5Z/YkGWcNMw09DpFGgsV/jvMYgC2MZs3gsIWsNq4Z1gTXEJrHN2Xx2KruY /R27iz2qqaE5QzNKM1ezUvOUZj8H45hx+Jx0TgnnKKeX836K3hTvKeIpG6Y0TLkxZVxrqpaXllir SKtRq0frvTau7aedpr1Fu1n7gQ5Bx0onXCdHZ4/OBZ3nU9lT3acKpxZNPTr1ri6qa6UbobtEd79u p+6Ynr5egJ5Mb6feeb3n+hx9L/1U/W36p/VHDFgGswwkBtsMzhg8xTVxbzwdL8fb8VFDXcNAQ6Vh lWGX4YSRudE8o9VGjUYPjGnGXOMk423GbcajJgYmISZLTepN7ppSTbmmKaY7TDtMx83MzaLN1pk1 mz0x1zLnm+eb15vft2BaeFostqi2uGVJsuRaplnutrxuhVo5WaVYVVpds0atna0l1rutu6cRp7lO k06rntZnw7Dxtsm2qbcZsOXYBtuutm22fWFnYhdnt8Wuw+6TvZN9un2N/T0HDYfZDqsdWh1+c7Ry FDpWOt6azpzuP33F9JbpL2dYzxDP2DPjthPLKcRpnVOb00dnF2e5c4PziIuJS4LLLpc+Lpsbxt3I veRKdPVxXeF60vWdm7Obwu2o26/uNu5p7ofcn8w0nymeWTNz0MPIQ+BR5dE/C5+VMGvfrH5PQ0+B Z7XnIy9jL5FXrdewt6V3qvdh7xc+9j5yn+M+4zw33jLeWV/MN8C3yLfLT8Nvnl+F30N/I/9k/3r/ 0QCngCUBZwOJgUGBWwL7+Hp8Ib+OPzrbZfay2e1BjKC5QRVBj4KtguXBrSFoyOyQrSH355jOkc5p DoVQfujW0Adh5mGLw34MJ4WHhVeGP45wiFga0TGXNXfR3ENz30T6RJZE3ptnMU85ry1KNSo+qi5q PNo3ujS6P8YuZlnM1VidWElsSxw5LiquNm5svt/87fOH4p3iC+N7F5gvyF1weaHOwvSFpxapLhIs OpZATIhOOJTwQRAqqBaMJfITdyWOCnnCHcJnIi/RNtGI2ENcKh5O8kgqTXqS7JG8NXkkxTOlLOW5 hCepkLxMDUzdmzqeFpp2IG0yPTq9MYOSkZBxQqohTZO2Z+pn5mZ2y6xlhbL+xW6Lty8elQfJa7OQ rAVZLQq2QqboVFoo1yoHsmdlV2a/zYnKOZarnivN7cyzytuQN5zvn//tEsIS4ZK2pYZLVy0dWOa9 rGo5sjxxedsK4xUFK4ZWBqw8uIq2Km3VT6vtV5eufr0mek1rgV7ByoLBtQFr6wtVCuWFfevc1+1d T1gvWd+1YfqGnRs+FYmKrhTbF5cVf9go3HjlG4dvyr+Z3JS0qavEuWTPZtJm6ebeLZ5bDpaql+aX Dm4N2dq0Dd9WtO319kXbL5fNKNu7g7ZDuaO/PLi8ZafJzs07P1SkVPRU+lQ27tLdtWHX+G7R7ht7 vPY07NXbW7z3/T7JvttVAVVN1WbVZftJ+7P3P66Jqun4lvttXa1ObXHtxwPSA/0HIw6217nU1R3S PVRSj9Yr60cOxx++/p3vdy0NNg1VjZzG4iNwRHnk6fcJ3/ceDTradox7rOEH0x92HWcdL2pCmvKa RptTmvtbYlu6T8w+0dbq3nr8R9sfD5w0PFl5SvNUyWna6YLTk2fyz4ydlZ19fi753GDborZ752PO 32oPb++6EHTh0kX/i+c7vDvOXPK4dPKy2+UTV7hXmq86X23qdOo8/pPTT8e7nLuarrlca7nuer21 e2b36RueN87d9L158Rb/1tWeOT3dvfN6b/fF9/XfFt1+cif9zsu72Xcn7q28T7xf9EDtQdlD3YfV P1v+3Njv3H9qwHeg89HcR/cGhYPP/pH1jw9DBY+Zj8uGDYbrnjg+OTniP3L96fynQ89kzyaeF/6i /suuFxYvfvjV69fO0ZjRoZfyl5O/bXyl/erA6xmv28bCxh6+yXgzMV70VvvtwXfcdx3vo98PT+R8 IH8o/2j5sfVT0Kf7kxmTk/8EA5jz/GMzLdsAAAAgY0hSTQAAeiUAAICDAAD5/wAAgOkAAHUwAADq YAAAOpgAABdvkl/FRgAAeCJJREFUeNrsvU1sG8fWJtxjWzdqBjINMoEvDNIXNw4VYCCLeD0bAsRg TC0GsLjwhgt5QS7DLCJAwAgCZF2tFEUYQcBooAzg9pJcSMDLjRdkgG8hevES4CxeYyhrMSHjzMRs GPHnkGPKE7Zz9cn3WzxX55arqotNUvJPUgdBYNPd1adOVZ2/OvXUv/nb3/5maNKkSZMmTcd0RotA kyZNmjRpw6BJkyZNmrRh0KRJkyZN2jBo0qRJkyZtGDRp0qRJkzYMmjRp0qRJGwZNmjRp0qQNgyZN mjRp0oZBkyZNmjRpw6BJkyZNmrRh0KRJkyZN2jBo0qRJk6Z3mM7+3//7f/8fgUZGRnZ2dp4+ffpv /+2/fcMMNRqNYDDY1yu2bY+MjIyMjAz2RcuydnZ2/vVf//Xf//t/L3JSrVY3Nzf/3b/7dz6fj/2n tbU17sc3KSJ8/b//9/++s7PDsf3bpnK5/N/+23/7j//xP76taek4ztOnT8+fP+/xxUKhcO/evVMd owGWzFuhVqv1X//rf713796//uu/3rt3T7qm/vznP/fVF1r78/Pz58+fD4VCivUy/GodjEmPWuh/ /+//rdC3w4yyd7bpyXMbGxv4aX5+PplMJhIJ/LVarb75qWNZVjAYjEQiffXZsqzFxUXTNAf4om3b jUYjnU5Ho1FOAVWr1cXFRelbkUiE5Pbm6e1+/XdINBkcx/n666+TyaRUAb1d3t59Me7t7bVarZWV lcGWqnrtv+8rIpvNnqxiHJLerVRSu90ewA0Z5ouO4xiGIa7zIZvV9FsimgzdbhcT5h3k7b2gYDB4 Ulbhd7VIB1CMQ9I5tTe9trbWarVM08xkMpFIxHGcXC7XaDSgTNPptBiblMvlYrGIB1KpVCgUqlar xWIRKwpBSbVaLRQKsVgMcUkkEslms5ZltY4pm80Wi8VyuYzJlEqlIpFIoVCo1Wrj4+O1Wg1NhUKh QqFgGMba2lo2m63X69wrHG9sm4lEIhgMWpaF11OpVCwWY70wRFGpVAoJAfQarJKr4jhOoVCwbdsw jGg0mk6nRRmqH1hbWzNN03GcVqsFkebzedu2SbwkT3w9k8nYto2vS0etZ4NSlkRpSx8TmTFNkx3x Vqs1NTWFIeYGneOzWq2Wy2WsbZoqYB5yo1nXarXQBakJh3XH3MBfE4lEMpkUZ0ssFlteXp6bm0Mj GETOgRW5ajQaNBkoO+Q4DiYkuDJNE+0bhpHP5/FFyAfmZHNzE09CFOANY2GaZjabrVar1WpVvdBE 4di2TbytrKyo1yY7oMSwZVmO46DB27dv7+7uqldQo9EoFArQCWiBY9VtHG3bxiTBmioUCouLi8Fg kMTFjuwAa9+yLCxhcYq6eYRe5gzmrZRJqdLjFmkoFLJtO5lMsrNFqgcQEyQSibW1tUgk0m63af1C 4H0pRgXb4uvSJ8+oDUMqldrY2AgGg+h2oVBot9uLi4sbGxumaebzeXHeFIvFZDK5srIC0WMmTU1N bWxspFKpYrHIJqk2NjbS6XSj0ajVatlsNhgMxmKxbDZbLpfL5XI2m93Y2IjFYrlcDmsVC3JjYyOR SBSLRUxEwzCgJcvlcjqd3tjYCIVCuVxOHDxqE9IMBAKI4BYXF8kqYJbEYrFgMMjGpyyrrJTxT3Nz c7VaDRJnJ18+n0ecu7i4SGtDdHzS6fTi4mKr1bp7924qlcKfq9Uq5IlOsUqqpyfl1qCUpUajIYpO 7JqUGfyIeRIKhWAJoIMw6JjKrNAgmWKxODk5ifZbrRaJrtVqibPOMIyVlRU8Kfa3Wq3W63VMS6gG rEButmBNEie1Wi0ajbJWQcoVOxkwzVKpFDW4sbGxsrJCrJbL5VqtNjc3Nzc312g0dnd30Ww0GiU2 ICLHcWKxGLoJDeJloXHCYXmrVqu2bS8uLmLplUol0SsSGUabeAtGUVx0rHxyuRxYHR8fh4HM5XJg dWVlBSrGjdVkMglWyWKVy+V6vT43N4d3xXXqce2TAfO+XjzOGcdxpEyKSk/6UTQVi8W86AFWznNz c7RmB1CMbmxLX5c+qTIM0WgUEo9Go7ZtO45Tq9UwEWGXbNuGNInq9ToUq2mai4uLc3Nz9XodltAw jFgsFo1GSWrQxUjuc7ESFi2+jnf39vbg6eCt8fFxKCB6BSscnlc6nRZHEcyjzVQqZZqm932UZDIp ZdXn87VarUKhgBnP+cX1er3VauFdDK30i+Pj46FQKBgM+ny+UCiEP0PJYrDxXdZ0qUnRoJQlqejE rkmZqdfroVAIf4VUIWrTNCGNSCQSjUYxfOxgraysgA1w2O12WebZWddoNGKxmGma9CGOEokElB2N EZSvOFsikQgNQa1Wm5yc9MiVNCk8NzeHt6LRKL5Yq9UikQje3djYQFMkCnbSEm/oLK0Fx3EUC40T jqhQEO4sLi6KPqmUYbSJD7ktOnY+w54ZhgE9CLWI4Ns0zVQq1Wq1YHrVrLLLPBQKkYgGW/vc9puX 9eJ9zkiZ9PhR/OhRD7BvmaaJNct107twvMtW+qQqlcRlA7FIisUia+64lKvjOGIAGwgE2DbpFUW2 EWuDczOhrdxeCYVCyWSyVqsVCgXkqeBQsJywO8w+n897vtiN1enpaRiYarUKBtjoG+1vbm66RZ2I V9jGxQ/BE4RABuCWa1DKklR00q6JzCBXwA0QtBvlXrB4xHgUy4PSiYpZR5PKrawCCpHzVMTZEo1G 2fCFqzhQcCWdohjHRqNBnrXjOGK2QTpp2R+5BxQLTbFkEolEt9ullBQSej0ZZtt0W3QcD+xyhrRp UNBUT1al6oLkNsDaH2y9eJwzUiY9fpQVCLfoBtA2fQnHu2ylT57zvh2Bb4sFPFyXuPAzFAqxfofj OF5mDGwXbCwRUgpqLwCLAXk0ilSIE5a3brc7/D4Y8nSpVArJk1wux0YqaF8sw5D6HW4TDpo6EAis rKwsLy8PybCCJVF0XNeQhOWYCYVCyC+zSg3ePfxTt2TX5uYmPKPFxUUxJ8nNOjj7oiNCE6PRaCA0 SSQSitbgLGNCitPYO1dY5+hmKpWizS1x/g9AXhaaW1ybTCaR3ikWi4hd1Az3XHTi5Gm325weabVa 7Oh4X1amaZJSZv3FAdZ+v+ulrzkjMtnXR90W3WDr16NwvMu2VquJT57pi6dIJFIqlTD1C4XC8vIy JykEMphz+Xx+eXkZ6hi/VKtVhC1unwgEAmgwGo0iqY235ufnWe3DqWb0h30MbLCuDdpETpz2DxWc BINBRRqB3enF9jUCMc6fHR8fN00TKXvHcTY3N/Gwd7JtOxgMYsGLuyYDkJQlqejErkmZGR8fJy+7 XC5j+PAjBh0lDJwawrdge/b29txSDTTrqtUqNt+kMXij0YC+m5ycFPWdGDTUarV6vS6OvhtXNBlo soGZaDSKqJS4ikajjUYDziMJcIDF33OhiRO1UChQqQgGkZ2NbgxzklEvOkweGuv5+XkYbLje2FMM BoP4uhfCWOArFB4NsPYHWC/e54yUyb4W6fB6YADF6F220ifP9cVfJpPJ5XJra2sYFRSlcOm2ZDKJ KBgPoMSC4mKqSnJTW8VisdVqzc3NdbtdEh/yGNLYEAn0zc3NdDqdSCTolUQiwa18xNp4AJ4+5+1y HSkWizjboRAIagaQM6HdMHaFZ7NZxQM9KZFI2LYNHwQVIKgvGsbjEFkKBoOtVosTXTAY5B6DD8Ix Q+UchUKBGItEIig0oC1fLkiKxWK1Wg3BNbw27E65zTrLsjDrpH1PpVK5XG5+fh4pFHHrixtZKBQx TeTGFU2GlZUVJKO63S7Nc+x8YPcS44UWILSehmqwhSZOVFQl4RWk+9lXoLlEht0WCC06bvJkMhma FXgA1Qo0Oul02rtfnEgkaOLRyErZ6Ln2+10v3ueMlMm+FunwemAAxehdtij84578N3/7298MTZpO iLhjku8m5fP5QCCgNvmaNP2eSWMlaRqKKKVAKcQ3eT5zAELZjPcSL02afod0TotA0zAUi8Xq9TqS J8hgvDtwESJhax3llXrsNGlyI51K0qRJkyZNr5FOJWnSpEmTpoEMQ6PRmJ+fd6vRLpfLKEvw0sj8 /PzJQreiWa6+SPrj26LnOzvfXbki/offn+/s9NVa27J+uH7d7V8Pm80frl//7sqVp0tLp9Sdo07n 5f6+YRjNTOb0vnJSNICEQU+XlhRydqOTkgnYVo/1iXBFnxhYUOrvNl3QitbW1uYFsiwLdbeDaRjj uOb4jZFaMYo0jPaDcN5Aj4w3vMeAM7SKc0+/VbowM3NhZsYwjG6l0sxkwrmcLx6HEh+gtUA2G3AH 6X1RKh02m58+eHDW7z8lq/C/EomPFhZGJybCJ3G0QtMbIMVIqafT6RGhQKJQknCnpbqPDmD2VJ1v GJ66Xwz8YeDBs6c/TITi/kZTSd1u913emfzN0Eg4fEpWwTCMVwcHR52OFrKmd5DePDz1b4wo9Dkn RVdWYyZLgVsNwwDYDmFCENIkGfPGMS0uLnII2DhxU61WAXmfzWapWSlcsOECKiv+yDUrQnNLIY7F PrpBjrtJwzu9KJUQ5o9OTFz65puRcPjl/v7TpSWka8ampy9tbXGx//Pt7U/u3//h+nUYgJf7+2f9 /ktbWy/395+tryMt8Mn9+79UKj+vr0OPf7ywEMhmEbKMTky83N//eGHh2fq6Lx7vVioIa/y3btmZ zFGn44vH4WO2LQsNGobhi8cvbW0h7fB0aelVp/NLpfKHcPji6irH8MWvvnp1cPDD9eu+ePzw8ePD ZpO6xiZqXnz7LTp71u8P5XKd7e3nOzvoiC8ef76z075zB0HV6MTExdXVw8ePn/7lL58+eEByeFEq /enePTZlx70yOjFBgc6T2Vn01E3OF7/6SjSoz3d2fl5fNwzjo4UFhH34hZWqdFilj3UrlZ+Wlg6b TRjvM35/OJdTsP2PGaLs+A/Xr49cvvzr/v5Rp0MtNDOZV50OxPvBxMQfwuGRy5d/qVQoemhmMh/G 44ZhYDqpOaeZMDoxcdhsIs7o2UfDMEYuXx7Ag+SAysmTVagmFrd/fHycXfUsoClgsaGsOOR/cY0j 5RWJRPBjLBYjrHIOgR8YqyxjUo0B1HF818tlBGI8hKOjbjpH+lFRybdaLRHfe29vj1Dcz0jRlRVA 2W64r8Yx+Awdw6tWq+zZY+j6WCy2uLgoImCjEYLqZbvqhm8sBZWVAuRSs8Bp4JgX8YqlMNRSJGSF NLzT4ePHn9y//8n9+4fN5vPt7aNO58mXX57x+z979OiT+/dfPnxIqlnybrN5cXX1s0ePRsLhZ+vr gWz244WFkXD4s0ePDh8/frq0FMhmP3v06OLq6rP1dcog++Lxzx49GpueNgzjVafz6YMHl7a2nu/s PF1a+nO5fGlrq1upvCiVupXKs/X1S1tbaKFbqXR2dqBBLq6ukkI86nTsTAYM/+nevZcPH/58zPCr TudP9+5R18SslP/WLTBvZzIfXL1KHTnqdH5eXx+bnkabh81m27LA8ItjQOnn29v4hVoTX6F/7ezs /Lq//8n9+58+eHDU6eATbmyz4oV8Atns06Wlw2YTtgRSDedyz9bXXwgA1zDV4mMwTh/G4589ehT4 4gsYJDXbIHXH/65MK5WPFhY+e/TojN//5MsviX90GX/1z8x0KxVYoMNms1up+GdmvHCOmYCZNjox AUvgpY+DJUulQOXGMQ4g4MpxkJs9rszCU7OrHjrEDYubhdN3gy53HGdlZSWdTkN33759m0PglzKm AEL3fhmBdA9Acb+A+FEF+D+H782iuJ8R0ZUVQNlGL2xeQiizbbvVarkdI3JDwAbGmZhZk+Ibu4HK igC51Kwb8xxesQhD7YaE3BOp2NMOxK1bI+HwSDj8wcTEy/19LN2PFxaQFLpw61bHfUvQF4/Duxyb noaiIfqlUhkJh6G+L8zMjE1Pd45VM6tWxqanz/r9o1ev0p/xr0cHB6z9uCBoEFYlHXU6f1xdhTt5 4dat5zs70B1okLrGvXjW70ez6AL+PDY9fdTpnPX7P33wAEIYnZj44FgZjd248eLbb6GVDptNVq+5 vcJaDjjmn9y/D+PnxjablIMAA9nsWb//Ran0olQ66/fjR188PjY9DX7EKFB8DF/8aGGBRsQL238f JveO0zhCgB8vLMCA4dNslIbBhYGBdREjJCnnv1QqoxMTaP/i6ireUvQx8MUX6CMX+ngkKVC5cYxG B82YSCSgGRWNYNUrYLFF5H8pdDlwFQlFnFrmgKJFxtyA0Ae7jID9luJ+Ae6jCtBvBb73ORFdWQGU bfTC5o1Go7hKSbwFhSUpArbP55Mi67rhG0tBZaUAudSslHkpXjEHQ03IoxwSck+kYi905vXFeXRw YBjGjzdvenn3rPut9C/399ko/uz58y+PNQ6rDs64/JmyCr8+fHh0cCD1i8kthQ5lG8Enzii3Os4w zJ8ROvJyfx+WDIEOtuvHpqebmczRV1+9KJVEvSZ9hbZYjzqdzs4OslUU7nBsvzo4YNtkBXjm/PnD x49hYL67coW1zZKdmE5HfAyCovbPnj9Prrcb26zeV3ScnQmUXZROjwszM09mZwPZbGdn5+JXX3nk /KjTeW2enD/v+uTBASvV0YmJv/YfNCgQtjOZzO7uLlYiILncziqyjahhsRWqADd2qIHx3RhTAKEP dhkBaTbF/QLiR9GgFPRb8a1zInB0LBZTAGVLgVsJKQwIZWBLgUXTFwK2G76xFFRWDZDrBiws4hWL MNSGDAm5J1LxAITFPHxZ0ejEBKvNj15XeV4IyaULMzMj4fCnDx58f+2a2143zAP+8KrTgfYchvnD ZvPHmzfHpqfPnj//yf37lBuBC9zZ2ens7MD17vkK0ccLCx8vLCDX8Wx9HU46xzZnn14xvXh1cDBy +TKS+Gx+383Yi49hOBAPkQfQk+2eHWf9CZI8N/psO2fOn4fbIeaj3Dh/tr6O7RkShbqPL/f3ESsQ VydFAH2jfdBSqSReScRRX9j1oioYhjG31ga7jIDV/or7BbiPQjtxoN89M95nRHTl8fFxBVB2T9zX WCyGGw0VoNbeEbAV+MZSUFk1QK6UeRGvmD0DQTDUUiRk7yi4fbhL8fhZv//J7CwW+Y83b7pVgqvp w3icEtbPd3bgafbVwq8PH46Ewx8tLHy8sAB+yAywGhMM/7S0BI3glqPoi36pVODmX1xdfVEqsWmo C7duoVNjN254fMU4PpRw2Gye9fux4+qfmenJ9sv9fXjxT5eWjjqdsenpD+Pxl/v7YODl/v4P16+3 ZRDK0scgKOxkYBenJ9tcylHacdLISOM8XVoaCYcVOZwLt2693N932zOXco4fIYq2ZcH2KPr47PU+ nmDNzPz8PEFy+Xw+Dlqf4Km5/IRHLG5RFXgnkTEFELpax/a0c4r7BcSP4vZDj6DfhOJ+TgSOxv85 oGzSd1LgVjY/NTk5iX2YnrdNeUHAdoMLdgOV7QmQKzLP4gYD7ScWi7GPAYZ6fHxcREKWNohCBbQz SMTg94dyuadLSwjSRycmkAcfwMBcXF39eX0dq5Sqkry3gA1SBAoXZmZeHe8TjE1PPzuuRREZpqqk YVTAhZmZF6USHFvkr4lzfP3CzAynxBWvoKbor7OzKKk66/cjUS6yLY5FZ3v76dLSWb8/nMthK4iV 6tj0tFTDcsKnxy5tbf20tPTdlStoqifbXDZJ2nEKEJ/MziKgCSuvGEI7bl6CG+cfLyw8XVp6urRE JsftyVAu9+TLL9k+okzuwszMxYFmMqsNWNUUiUSmpqbYBwiemtWzUlhsaSgAy+EGXa4mKWNurXG4 9OrLCDiKxWIiSL66C95BvwnF/VSwkpaXl1OpVL/3T2nS5JG+v3bt4ldf9RsAvWvUzGRQmzt8x3+4 fv3DeHxIteudvrtyRVGnq+k3QCd/wK1arfp8Pm0VNJ0SPd/ZOXP+/PtoFV7u73935QpyL91KpVup 9FW08xY73ras765cQbwI/qU75Jp+M3TCkBg4ltJzO0iTpsHox5s3X+7v9+Vlvzs0OjERyGafHede +sKieLsd98/M/FKpIN+FRNxgdaia3hfSsNuaNGnSpOk10rDbmjRp0qTpdcPQL5TrkOWYPV/HVZF9 IdlyjaOca4DXvdObwb99K2RZ1vz8vBrimCrz3P61Wq16x0k+vbnEEmpRUO84GO6x+kW0P3BfMO1P 9kkvAhweS7/fQSEw8zeAD3/YbJ4Glvgp0TCsYhNI+k8ocpNiyCtA3c/1BeU6JKqtl9d3d3cHOzJG MFva2g9Mtm03Gg3xHN8A5BEneRhN6n24Hcf5+uuvUUw88BcVgMnU/vsFHqyGjB5gBPsalNPGh3/v 6LNHj068TQLclP6rYperv1TSkKi2Xl5nYS36olMNEX4nhMNB74V262u4gbJ5esycdvvvC/W7Bk8V H16TYRgAcRmAzsGLTyQSIgorp6BZVFuKnYEnBSRtBJKWZWWzWdM0OaBX9nW3MAUxMl7ESQ3Cj8Uh OADe4ru3b9+mAyNwVdACjm8UCgW8S+i1aixxwxtiLXfmpWebOI5PsL0IhvDj4uIiJDw/Pw9n07Is oFnhTB+9BaBgAH6IzEgxeHuCgXOdTaVSjuPg1Mza2pp4Oq9cLuMwDms2FN3HiKRSqVwuRyOFw4lA qeRexMwhMC9CgMfEAz4M1zhEt7Gx0XMUkBIpFApoBDgzhhKXWDo5aWpx2MjUvuM4ANnlZtHa2hok gKmbyWQikUir1crn8/goi/clvi59UgzH2aWxu7srTgB2EGnEgXbcaDQwwQjZntx/KUtij4AnSoPS 05Nl8eFZpD8AhMCTxa1QF7/6auTyZREgnT29gQalTrcIay/inL/qdJ7Mzv65XIahalsWasCera+j PHckHP7j6qpYpAuXHJeUhHO5XyoV8XnCIT/r9wO8XYqr/92VKzj9/mE8znY/lMuNhMMiaPxhs/nk yy/RiLRIrG1ZyE3hdOGrgwPUthnHx10pnhDh089wyoJFYeU+I6LaAtxVOvAimjf3uiJaB3ZTLpcD zDU+kT8+zEnfZRU0CxjLtkbotVj5wLnNZrPFYlFEvpMi1lqWBcTaubk5FrHWOL4oQt0mCXZlZSWb zZJGU0f3gO5qt9sYjna7DcUnMiPF4PUCBi6Klyzo4uIiZxWANQ8QY1JMXroP7CwWiX1yclLxIrqP OQNF32q1Go0Gl9pih1uNYAyC15JKpUiwi4uLNM8VuMTqzBLNLmo/kUhI4dkNBgWaoONhnFZWVubm 5miApK9Ln5Q67BhQ7PFwEwCDmEwmMb25TTK4gxsbG1NTUwSDr2BJ7JF0DboRiw/PWgUoSgLSAKCs Lx7vCZCu9po5WHsR5xxQVASU+3x7e+zGjbZltS0rnMt99ujRhVu3nszOSlHED5vNi1999dmjRwAI 4Z4HNtfo1aufPXrki8eBraLA1b8wM0MA9biwZHRi4ulf/oJesLDqQHP59MED9EIqZACdwV4C0+Wz R49QM03IBRCIf2bms0ePcEfLy/391wyDAoVVpPHxcUXOR0Tz7jen0Wg0EolEMBjEwe5WqwX1of4u EXxDQq+t1WqE5RuJRAgeXPwuh1jrOA78RAByQI/gYY9tGsfQ4nhGvTvHasBYLBYKhWBNa7WalBkp Bm9PMHCFeKUElGBYC/LcPXYfAFZ4vtvt4q9uL6L76DX0+97eXigUUmS31CjxUoL+onmuwCVWtGDI sJHd4Nkxbwm3GUifjUYDyDEYTcXr4pPqJSmdAPV6HX81TXNxcZG7YRfTgB6gEfHeo5PKfgBAHo4t bozwApCuIA7W3hXR/dggvSiVXh0c4K9j09Pw+uHCS6GfCKle+jyYB2I5rjZR4+qPTU+/OjhAcNDZ 3gYK/YtSCb2ARw/5dCsV/61bZ/3+0YkJvzsqPssnuAJW2K/HqFwIkrqVStuycLvG6MTEOW5yeB8/ 9cMimndf+36YZ2QA8C1oZI9Mco8BIpst5xD5ERFr8TvHBkCmPLbJMWOaZqPRUIhCCvALVF4oII4Z BP4cBm9PMHA38brBHTuOQ0BdcB28dx+girZt7+3tkfpze5G6DFuYSCR64oupUeI9zg3DBZe438mP uSHCs4uv4EkaAvxB+jo3WAqviD4hnQDq3Tt26OHVKVjqayX2SyPhsC8ef1EqjYTDuKgOWlIESPfY oIj9LsU598/MIIP04ttvoWePOp2XpdJ3vXAACZFX+vzfccgZ/PaeuPq4Gu+M3/9yfz+Uy6GndC6S umAYxh+OZeLlmrwz7hD9l7a2WpaFT/ji8T+urp7AyedgMEheMClNEc3bLekkJXgirVYLKmP4iQhv i/OSpHGGiFhLiwRs0BLy2KbBYIA7jgN3WPwn9VumaUL9icyIGLw9wcD7FS+LZ06j7LH72IVCBp8u XBJf5AIpQDEiuac+SD8kgjF1nEtODkaYG17KuvAkobmxU4t7HWkf7smePRInANDlFPvn7J9pinrv 0QnS2PT0z+vruOJpdGICO6giQPpr2tZzAOGGc37W7x+7cQOpf2CJIxT4WAZy7uaSi88jyDh8/JgM W09cfaAcHj5+zML9Xtra4u4rBKuwaq+GQ7n3xeNoB5sNz9bX+6tKkqLaQsUgOqbydhHNW/G6dGZH IhFkdbAwgAeutk/s5BajbNzridW4trYmVuK7IdYiG4u9Nfb2IS9tsjsuwNeNRCJoAepMkc6uVqsQ LL47Pj4uMlOr1UQM3p5g4P2Kd3x8nAa3XC5jEL13H6kGANl6fBFlzdiBl/q5NNxeEIxZUyrtnXdc Yre5RzZJCs/uNsMxxLSlJ30dERX3pJqkEwDjC0Hl8/nl5WV2vdD4YgsdmzFuLLlJUr0G+zAMN25g 7/TCrVuGO677Wb//l0rlqNN5ub/vHd9bgXOOLBZ7K2LbshCvPN/Z+e7KFTU4sfR5ME+I5ThtoMbV R8z0cn8fCaizfr8vHn+2vo6NhKdLSwA89sXjz7e3D5tN6b25FEn0DK1w2gN75h/G42fOnx8Jh/uL GAjVlvWtYrFYvV5HJB6LxeBaimje7OvJZLInMHUmkyH8WNRCqB06AoyVesoczm00GhW3PXoi1tK1 EN7bpFWHFlDvgbQVXfbkFuCbpglm6LsiM6ZpSjF4RTDwYcSLnhYKBYCf99t99JH0tfRFcesF+zFu jioN98rKiohgLNWV3BXBrJy94xIrdHGxWOx2u6xgCZ7dbYZblkVDII4LvS59UkFSNHj8AYJCy5wQ arUa/gl1ItKpou4ROyjLy8vc5WLeCc77850duv1UCpCOi7i/v3aNnve05eCOc44taHLMcesfae2P FxbU0IFuzxPWOn4cm55GkZUCV39sevrw8WP63KWtrSfHoPEj4fClrS3g8tqZDH4cnZiQ7j/DoqAq SZG7Y+HTffF4IJt9a1hJlmVNTU0Nc+DovSCuMtUjtVotac3o74ps297c3DyRDI8mNaG2+506HNq2 LGww6NF5K/R2sJKwlfp+HRPV9OZtqvq6J02/YXq+ve2/dUvL4fdlGFAwp9e8Jje/YX5+HlVJWhq/ N3pRKn135cpZv/+ChxJMTadEGnZbkyZNmjS9AxGDJk2aNGl6pw3Dy/39o+HKYPulvgBmm5nMwMC8 7xHo7m+VupVKzzo/6VuGEhb4tLl9A58e7BOQDPiUFqIMw893V65wzbLFl9znPPKActI3OYh9aYxh JDnMJBFXhLo10tJvSKf98i//8j8/+eSvjx//TZOmUyBMsF/+5V+8v/I4nf7p9u33hds3Sa07dx79 h/9wSo03/umf/t///J+ln/s/29uDaYn/7/nzxj/90//Z3tYLYZgZzmrp//nJJ29Anmf+eqJOhyZN w9PAWMFaMsPQUafDISsM/znAjuqBG3Ic37yWPoOY64fr1xFS/XjzJk7BPd/Zwf1K+PHl/j4OyDUz Gfz+482biL+e7+x8f+0ansTxOZw6QVPfX7sGjFn8GQEUoiEcBqFPoDUcx/juyhWwxAaGL/f30eZ3 V648mZ096nTcWOJSSQiEwQOe56QgdoGTBv25mclwbCNMbmYy1F/pSqA4nRqRMv9sfR1HIikoZgFS frh+nWJkOkUpMu/2ozTV5tYvSPKH69ebmQyacussO2QU5D6ZncWPxD97hxSbX+pWKpDA99euPd/Z aWYyh80m/kDBtVTmP1y//uPNm8QJF5v3NUwit/RpUZLcPKRIn/uRxhc/AsAATWEG0iekHWEbhGSw KtEsmwAR5Y8FSJ0SJ4D4CubS06UldoLR5/DLT6+vIOJBMdnQwadLS23L4oRP7JHYpWyLgsVyJsHS AqdXSGOIykRsbRhJKiYJmwLivsjOcFYmbCqJvtjMZAg2nHphGMaPN2/Sh446ne+vXWPPfg+8bP9h GIBmTlf8+OLxzx498s/MiMi0f3cBOp0/3bvHYdhykK3g1X/rFjB17Uzmg6tX8WdWzXV2dn7d3//k /v1PHzwAo8jtAoNw9OpVVkUedTpu0LscSwoz+NmjR5e2trqVCitE2C3ACoZzuWfr6/SvkAZdcoQH nszOAgL30wcPDMMgrJXDZhM/ihAo3Url2fo6+nVxdbVbqRCeIsc8MB2hsw6bzW6lwgKkSL08Uf6K HrmJJZzLSaF9wfxHCwvcj9TZzs4OQQ1/GI8/XVrCbOlWKn+6dw8iUvPPgRJf2toaCYcvzMyEczlW cbvJ/OLqqji11K9ww6TgVipefAjz8EWp1LYsBZDyq07n0wcPLm1tPd/Zebq09OdyWZyB0o7QVz59 8GAkHP55fZ1DUSbmRfmDc5q9LMay2yto8+Lq6sXjU7jSz4kryE0DgKBYLq6uYhGx06ZbqWCyXThG r5OyLUobLf8hHMZjP6+v//rwodhTqTJxa20wSXqRgPjFcC7HznCSCcsJDvcBQPDl/j5paToLLYKT c4pigGXLbz6zRGfQpci0eADgVoRhawiQrWgBZcj4K/4MCFlOprgx45P79y9tbQEHES7Apa0tVlgK 6F2OJTcdhPMy6CArhRelEgHS4og8wbKzssafjzqdbqUS+OILXD51cXX1sNnECOE8vfTTmFhogavO 5pgfnZgYCYdhNl6USqMTE9IrOIik8lf0SCTqlxTaFw+A548XFg6bTfxInX1RKl2YmcF8vbi6etbv f769/aJUGrtxY3RigthQbMFxoMSiWVXLnGBt2KHva5gU3ErFe9bvP2w2ny4tjRzrJgWQMsZ39OpV +vPfBf46go3YkXAux0K5uSVkpPJnFyCHsax4pSehg9wKctMAbgsBwg9kszB41CBg4ES2RWmzy3nk 8mX4oPQKQQNJlYlba4NJ0osEFF/kZMJygvkwOjEBYyNdthw4ufhAv8tWZRhoWcLrRPqFDdJFDFso dAQmiJKM1yFe3eBecePoi2+//fHmTURSoxMTHy8svOp08F22tADNctC74PaMt9sB3bAMX3U6R50O RbXksHOv4Cu/vo52iwewyM+6o9pigj5dWkKE+NoACFxduHWLcOHV4YKb/BU9kiQTGRBjii6BJPP3 tXrcL3QWM4x+fLm/zyamz5w/j6/Tj9CJrhGDAEos0gAy7+sVNbeieD9eWAAyD/Kl3UqFgJQpMUIC PyNMIfnklHGFBfjD9evP3O+lkcrfUGIsu70y8AqSaoCe3Wxb1tOlJQ5CTmRblLbIjJQxqTJxa20w SXqRgOKLiqH/g4uLSUTg5HDpREUxwLJlc93ycwxApsV0/+T+fbXT6ovHEZJcXF399TjQ9kgfLyx8 +uDBpw8efDAxgRAskM3+6d49mFbkVUkQrJ+CMTuRfa0zfj8sM/3HJjE4+mBigt0LOnpddaqtAnrR M7sCX+D5zs7L/X1uvKU4w6L8++oRuyDhs9N/cCjIt8UXuclAqMi02XjG7z/r95P/TnxKmYfo1Htx A8i8r1ek3CqmN0DHkBxAzoqAlFnpDTktKTX8x+M8jJSk8le3PMArahpAAzxdWoKLShdbKjQgJ23v jInKRNHaMGJRSGAA/s/6/V52m8empzs7O52dHYCTS12uvpYtqy7OwDRx60GBTCuaEBGy1aM04Q3h KtQPjy9HpQAFv1BrbtC7wxuGD+Nx3MmHln+4fl2xWwsIXKS/4NPBdKs/8evDhyPh8EcLCx8vLPSc GWjw5/V1McYUcYal8u+rR2y/OGhfzAq6hQqd5WbY2PT0850dDBmuLRybnkYCFD+yiwQh7VGnQ/yI oMTdSmXk8mU20zKAzPt6xY1bN/FiZw+r64zfj5bVQMp9V600m4fN5tj0NJLLlJgSUZSl8u+pUDy+ 4gW0GRvXbhqAvUGB0zCjV69eXF0FVLWicVHaHmXIAmWTMlG0NoAkvehA6Re5GS4OELYWjjodvC7V 0hw4uZhj7HfZvuYpfjAxMRIO/3jzJvtVpJ8QGv9SqYxNT//qYhtgD7Gkf7h+feTyZXVOmaWPFhZG Ll9GRUrbsrBDFchmUW/QzGQC2SyxC+hdxDs/3rw5evUqoHeHJ188Tl1Ay+ouXNraAttARb/0zTec fYJ5Yzf6A198cdbvR5HAH8LhUeVeCG3GiPMykM2iHTuTobkuyt+tR1x2zq1fGHRA+2JCP5mdRWfD x/f9cvlADNkvlcrF1dXRiQnsW+JHUgr+40n1/bVrNE2BHvzy4UNkYIBU/GE8TsDIHmU+wDCxXRC5 VUzvS998Q3H3q04HKVqanPicCKTcF42Ew9jGhFiQQcZVAUgS0mqVyr+nH+3xFfqcOtek1gC4doaz uH9cXaXCP8xztxUhStujDC/MzIjKRNHaAJL0ogOlXxRnODdAY9PTWCln/f4/rq6SlmZrFgA27mbA Bli27AMaK+lUqJnJBLPZnpGEIgv8482bijueBiM4Nd4tN/ydD+Pxi8OpOU2aNJ0GuYGTD79sNVbS ydNRp3P4+PEH3twNKXW2ty/MzJysVTCOqx30AGnS9Nug0wMnP6eFe+J01u+ncyEDGBXEj6dxRYm+ 9kSTpt8GvSiVnszOjk5MnBI4uU4ladKkSZOm10inkjRp0qRJ0+uGgYXfIQLYCMqwRBgN+tE7oC4B +7hRq9Wan5+vVquGYZTL5fn5+fn5+Var9VuStXjfPft7tVodrMuNRkP9om3bjuMMzLZlWVavatd+ n+xJ5XIZt8+7fahQKJyU/IeR7QnOjTc24efn58vl8pDThlbraawRGn1cfj4/P+9xuPF6oVBQTJ43 QxByv2+xavANkGKVyfcYCMRD+q84vHPU6fyvROKjhYXRIXZZpbS7u5tIJJLJ5G/JKliWFQwGI5GI ODbVanWYe9gjkcjGxoZiqViW9d5dpJpIJBT3emb7KaxSy/8dIfUgvvkvvpVpQ2NEo7+3t9dqtVZW Vryw8Y4P8XsWMQz85ukB6jqOEwwGf2OCbrfbbj7CqX73NxZ1nbj8Nb0700Y6RsFg0KNx0kN8gnTO OD4cixPIl7a2fPE4ztoFvvjCMIxXnU4zk+lWKr54HIeevrty5eLqKhJQT5eWXnU6/pmZJ7OzOEc3 OjFx6ZtvRsLhw2bzyZdfItfkPaqYn59HMGjbdiqVot9rtVqhUFhZWSFHu1arzc3NVavVYrGImDeZ TCYSiWq1WigUFhcXYV3m5+fxO2d7CoVCrVYj/zSZTMJLCoVCtm0nk0nTNLmWOVbxoVgshtAvEonA kxVZsiyrdUyst4twAUyis4VCAeGwojU35+7u3btYQrZtm6aZyWTQoGEYa2tr2WzWNE0I1jCMaDSa TqcRqkcikXa73Wq1QqFQOp0OBoONRqNQKLRaLcgwEAigWe51fF18UhxTSDUSiSSTSbERwzDy+TyG IxKJZDKZarWKQGptbS0QCCCtEQqFUqlUKBSCb5hKpUSWpD0Ch6L8WYLkTdOE9JLJZCwWYydMLpfD 0JCUpLNIKqV+B9FxHGI+n8/bto0/YygjkQg4icVisVjMsizHcWjCFItFJDEgInjQ5XK5WCyCee6L 6AUYRseDwaB62hDbm5ub0WgU3XEc5+uvv06lUtFolDUw0gnGSSmVSuVyORqj8fHxarUai8XA8/z8 vGmaU1NTig+xSywYDHa73c3NTbRPApdKhsueeRk7t4UvCtlt6NkVIU5Ix3Esy2o0GlgLu7u77Xab xA4dxSVUMAcwdW/fvr27u8v1VDG9par171d7/tEFu9gwjOfb239cXf3k/v3Dx49/Zv6VBdSVIjYD vuLTBw8A3O3RMCC8TaVSrFXAOKEPJO5oNAqtNDU1tbGxkUqlisWix/RctVqt1+uLi4sbGxuxWKxc LmM2UIgNUaLlbDZbLBbp01Ke0+l0o9Go1WpSlrLZbDAYjMVi3CRIJBKxWCwYDLJBPdsaZqpHNrAO U6nUxsZGMBgsFouRSARiXFxcDIVC+XzeNM2NjY3FxUXbtjGJMRHn5uYWFxdbrVa1WoUShBwSiQSc R8dxxNelTyqklMlkpDyQmZ+bm2s0Gru7u5zSTCaTGxsbpmnmmTOcUpakPXKTvyi9UCi0sbExNTUF W8KajXa7jQlDbEhnEXjY2NiYm5ur1Wr4sd9BTKfTYP7u3bupVIo6Qr1bWVlJp9PQULdv36YJUy6X y+VyNpsFS9C2jUajWCxiYrA6C0QMr6ys9DVtsCqpL/gDq6zZkeImmGVZaHNubg5timMEQ4vVMTU1 pf4Q97rjONFoFNMSE1UqGTdReBw7buGLQu75unRCVqtVDHq73S4WixAyTAtGUyrkVqu1uLi4srJS rValPXWb3lLVesYwjLHpaZx74rCLQcAuBpiwFL3ZDbG5W6n4b9066/ePTkz4T6LYNhqN7u3tQdyt VisWi9Xr9WAwCCMci8Wi0ahHw5BIJLAMSC60z0ZiMk0TLUciEfq0SDC8eKvdbg/MEgiOALXmnQ3Q +Pg4JmU0GiVTB6rX661WC+1jCRFj0WjUNM1gMAgvpl6vO45DXUCD0telT7qNnYKHWq0WiURCoRAm LucNRaNRCDmZTLZaLeqX9x55FL5pmlCIiUTCNE0SteM4tVoNJhxs2LZt27Z0Fvl8vlarVSgUoNES icRggxgMBn0+H2SCjrBT1DRNGmjTNOnrtVotGo3CF6Y0PeYkyVDcsJmbm0P3o9Eot+GsELJhGJOT kxAF7DcbY3EjKE4wiDoUCqFNdX2Exw+xQ4nuj4+PQ2NIJcO91dfYSRc+J2TF61LlTtopGAyitVqt hgkAse/t7WFKSKcNpqJbT92mt1S1njN6AVX+gUG6xr1j4maDYRgcHMrL13GP1bjK3g2DZVmpVAo9 R1jE5i4Qg3tsrVwuQ8twigPZGMdxHMdBXosiCbcpyEWjA7MktuadDenrXFOI/b18FFoAfw2FQq1W S/q69EkFY248IE3Us1OUKOu3Rx7J5/NxOgJcobViscg6y/i6OIump6dN00QqDCH/MIMo7YjiAdgG LiJxHIfmJBQ096/oV6PREIdPIWQMfSQSqdVqwWAQMZ+XaYnNAGID/9rtdhUy8fgh6VAqJMNRX2Mn Sl4UsvfXuc6y2gOaularwVC5WRRq0K2n4vSmD4mqtffJZ9phftXpnJWhGxJiM4vlBFQ/wH4ZMnjF ASgSicByVqtV2ORQKMTaPcdxuHnvppSRcYMNTyQSeQFkCh5Zz/knkpSlgbs8MBtu84Yr8JDqcdK/ UIuQofR1TD7uyX55wO+KNBQ1iz+EQiF813uPPBKrm7rdLk0kfDedTnNrUjqLkNWl/Y9cLodY6kQG 0csoixV9xWKR9X44Fby5uYlplkql6vU6V2TpNmSsu1YsFn0+HwICL0xCgZJignhFVT78h3pKRtTI XsZOmgOAn8oJebD1SwNECm1ychJJadu22T0e7z0tFApu01uqWntXJeHmQsA4A+j170HAMaCuFLHZ MAxfPP58exsAwh6viOpJsVgMCWgs0fHx8VarhalcrVbJ3FH0xLp4XNoaK2FyclJabjw+Pm7bNv7J tu21tTWPVclSlrAYpHoTG2WK1gZjg/M+HMcZHx83TTOXy+Gvm5ubbmcO8CR5kdDC0telT6qFI+UB 20XYYV5bW+MYQwIXe6SsUvDeI4X8OQsE8RYKBcdxJicnaaVFIpFSqQSrUygUlpeXHceRziLiPxQK YVUPP4h9RdU4o2Acn4xpNBrj4+PUtXK5zMmh1Wph+5dVed6nDab37u5uz/QONw2wv23bNpLapmmq x6jnh3q+LkqGe2aYsZMKebChx+u2be/u7qLXCJiw/dOzYtOtp27TW6paPWElkaLn4PoAqHvU6Vza 2noyO4ubrEfCYRQvXdrasjMZ/Dg6MQGz0basZ+vrn9y/7x1XnUs1FovFWCwG7Y9dMorxadMfO04K OaIKgqodkApg3RCuZSq98BLWSFkaHx8vFoutVotzHzDeKJ3q2Zp3NtgIJhgMbm5uptPpbDZbKBQQ 2EKjuXkc2Ww2n8/Pz88j10k/cq9Ln1T7MlIeEomEbdvIV+BHNuoKhUK5XA7pps8//7xna27rFvJP JpOImkX9YppmrVYrFovBYBCbmVQBmclkcrkcTgMFg8FMJoOMrTiLUATFsoT/DzOI3imRSHS7XdLd yWQSuYtUKlUoFIrFouhrJ5NJ8IZ0P3ZcvU8b7ExUq1VO0XifBmSWaIyk2ZKeH6LXpfGEm2RY8jh2 0ogBS5UT8sDrd3l5mV4nde+27eylp9jt4Ka3QrUaf3vf6C9/+cv/+B//42+afh/09ddf//M///PJ tnnnzp16vc79+M///M9ff/21FvgAtLu7+1/+y3/5LX3oHaRms/mf/tN/6na7g73uZXqzqvU9w0qq Vqs+n8+L2dSkyS1f1G63B0hSa1KsSu95pPfiQ++skE/vIDqnWt8n2G2cWOm596JJkzqPMQwAiSZu +yefzyMH9dv40LvpyiwvL5umeXr1C6Jq1bDbmjRp0qTpNdKw25o0adKk6Y0YBgJGPnEU2TeMTOud 1EC7wBLvKS438g4ZrQDxfpPYzu8miaPAymRIfHIao37beQMw0X1BjrMysSxrfn7+raNYa/qNGIZs NquoHdTUr5XteUSAFJ/CwADU6LeHXDsMkUwajcbm5qb6/K2XMRqynVMyh31dX0EysW270WgAuElP FW0YNL1b5B1PWINsDxOJnsgYvYNDMDBLdNRcT4/fG50zeqHRAlgY7gNOpuDkNICdI5EIi1VLgK4E jCydbSyCMQEps7CxqMoizF5CogaUtHEMFWswGMgikG+32/UC+cuVOUmxlPsC2mUXJDCT2QekAM70 isgbB9mtGKyeIN6EtAwkSDcU6LW1NQXyM47Oc69LOyV9TJQtJ8ZWqwWAZTVUtXTWgXODAR6PRCLS UWDTJjjvxgJNEzKEdEUAvRLalg5AYYAow4l2cAaefRIdJH5IAiJMdF/rTgE5vre3R7NiZWVFMfcU MmHPA0oHEb+Mj4/jd3ShJyi3pnc3YvCCRus4TiwWQ3QJNHACdjZksL3qT+ZyOSAYAwGccIoINlaE 3AJmL0Bo6cfFxUU1kC8xz0H+KmCEDSUit+EBaJezqYZhrKyszM3NkVSlAM7EqsgbiyesHqyeIN70 FRxxBI4pB6RDY+GG/CxFEsbvGD7HcUqlkvQrUtlyYoQl6AlV7TbrOOBxt1EQkycENA1DlU6nwQ/Q INgxKhaLk5OTmGlQ/TRGwFo3jgGrxSeNY0CClZWVZDIJvHFDBhOtXnfeIcfZWSEOkzqhBO9ncXGR LRJ1WyC4E4LtgkdQbk3vomHwgkZrmiZmBtQf4c1i+qphe0Ub02g0gCsLUIFWq0VoPFL/BThWBEJL PwKDoSeQrwj5q4ARNpSI3F6Adrme4kwK1V+7ATjjlZ68eRksljgQbxpNeIXlcjmRSEitmgL52Q1J GEgssO7pdFr6Fals6/U6yQcwG4YH2HO3WccBj0tHQU1gAO55Op2mC0zoX6HTMdNCoZDbdoL0SZYf iAVyEGGi1etuYMhxbpgGUBluC4S4pS70i5Wt6R1KJUkxWqlyA1hDHF6rONUUsL0cYZZwiLssfqfb QjVeh7D2AuTL/p9Lm7rBCFNORoHIzTalQDOGvqAf8Qf8KAVw9sKbF+hgBcNEuBaK4KRSqRTHvBrY WUQSBjwL5TqQC5J+RZQtUiXcBOsJVe026zhupaOgJuAtI1eJ/CGXEUXoYxxDzikwtMUnCXSTe1KK LapYd4NBjkuHaQCtIV0gYhf6xcrW9A4ZBilGKztdetYzqGF7xVWHeB/LSW0SRL3p9qQUyFcau/SE Ee6JyM02pUAzxjrB7X3G69jCIoAzcA178uYFOtgLRSIRcIU8fqlU8u48uiEJJ5NJ4NfncjlYAvEr pmmKsg2FQmwxpUe8Yo+zTjoKXpxi9jJIunkJcwypc5ygVkwP6ZNk9oYcwYEhx8Vh6ndv2fsCMYbG ytb01lJJXtBoFYQ9NxG2VzGhI5EIPA4CUkbs6UbVahXuCeB5pc+4Afm6PamAEe6JyM02pUAzRk/B PG1LugE4q3kjPOGeg6UG8WYjQrAdiUR8Pp/0omZFr0UkYVTit1ot0zRpNMWvSGWLBiEfj3jF3med dBSkRC4FK1j0hZUPfk8kEoCAJc+AxojakT5J/KDUQn32RT0K3iHHaVaIwzRA7bL3BWIMBMqt6Z2I GLyg0SooGAxKYXsVr7AIxiiNUEcMpmniYSgCt7tlRCBfqYrsidUsxVKWcigF2uV6alkW9VTsPgE4 q3ljIbvVg6UG8Wb7SOmsSCQyNTXVV7QhIgnDA0WnsHXE4RXjK+Pj46JsqaylUCh4xCvua9ZJR0Ea yxLQdCKRICEnEgnWHcFGF3I48Jrr9To7RtiIRjuRSER8MpVK5fN54CqjX30dMvA4jaWzAlVJ7DCZ pmlZFqohPH5aukAUfHJY2f1+TtNboXcaKwnld1LofE2/VYJVO70bCzSJEcDu7q70VvoTIVRe6Q2G 9yyVpEWg6e0SYCrgdVLqSYvljVG9Xlfncoek3zNW9nucStIi0PR2KRaL1et1pFwoDaXF8sZo+FoG N/o9Y2W/76RhtzVp0qRJ02ukU0maNGnSpEkbBk2aNGnSpA2DJk2aNGnShkGTJk2aNGnDoEmTJk2a tGHQpEmTJk3aMGjSpEmTJm0YNGnSpEmTNgyaNGnSpEkbBk2aNGnSpA2DJk2aNGnShkGTJk2aNGnD oEmTJk2atGHQpEmTJk3aMGjSpEmTpt8AvbWLehzH6Xa7Pp+Pbjyu1Wq4d5d9DDc8s49pchOmFpSm t0jS9euFWq3WAG+9U+uOpfe0L3LDUC6XW60W3SderVZrtRqugW00GnQxOiibzUYiEcuyotGoeDeT ZVmNRoP+uri4WC6Xg8Eghh93+ZbL5Wq1igdisRh+LJVKiUSCxFqtVnHRIygUCk1PT0uFXi6XcWU8 USwWS6VSxGGhUKDPgXCrcKFQIJbEZxYXF/f29ur1uvo6XFxMvbi4KOWN/QSEWSgU6Cb0YrGIPgaD wVQqFYlE0NrGxoZhGLjnXcEzvl4ul1mBRyIRVowcVavVYrHoOI5hGIlEArd3cUPJ8iD+Vew7+8vK yoppmiyTjuNYloWbO+kyZ5pgYgu44rtcLqslz44XmmUnrSjtarVaKBTYFiKRSDabZd9aW1uDIwJK p9O4yB4PSBcC2p+fn8cEoD+wQ89Kg1sd1F/2RbWEsfpwF7r0DtR8Pl+r1dwmFbdeaESoQW6CiV1z HAfX7RFNT09Ho1F2/arHwsvyofHCMNFjblORWyzBYHBxcVHUUVzvuL9yDFAXSICcJHO5XLvdZt/q drvJZLKvG+u4Id7Y2GDnYSwWi0ajEB076GrVwc1k6bQR+85agd4RQyQSYUdifn4+EAioX8FsE+c0 TZHd3d25uTlYi7t374ZCIW6KNxqNYrGYyWTwu+M4xWKxUChINUUikUD33FZXKpVKpVIKBcctkr5o b28P/+/33Wq1ure3Nzc3FwqFyuVyLpe7ffs29wyrZdwacRxnbm4OgYLjONCY0vsaW61WoVCAJoLk fT4fyza7uujP4mJmlx/Js1arlctlMV4pFAqmaW5sbDQajVwuJ441FgN5Fd4FiLnu8eFYLIblqlCp 1FPHcZaXl7mbkLEQbNu2LGtlZQWztN/ZQs6WVEu6EclHuqBYKhaLrVYL5rlarYryxOqD6DAigUAg Go167wJ85M8//xx/vXv3LvyMvsiyLFal3r17F38IBALZbBbrPZ1Oj4+Pb25ulsvlyclJjyIi8Sp8 R/x5+DtNY7EY13fWl/VOMH7iPCwWiz6fbwDVQc4QZ577jhjq9Tpn+qTUaDSCweCQsVKr1YpGo2gk GAxGIpF6vc4t1Far5fP56EfTNEOhkHod9pydeB3/pwUzzOSwbbtYLLbb7WQyWa1W6/V6KpXihGPb dqvVktqMWq0Wi8Vwv3EikajVarVazbumG4AwfNCP+APnVriFBV4aL5fLoqPkOE6tVsM0jUQisVis Wq2q+1goFMhVHKCDoufI9aXVatm2HYlE6EnxQ7u7u7FYrFgsIihhH7Bt23Ecyn60Wi3ui6zudptd Yv7hpMi27VgsBvMci8VojhFXtm1Ho1H0KBKJRKPRfD6fz+f7/VBPJaAei0wm0+12HcehRR2JREzT hB6s1+vBYBDmKhaL2bbd0zCoQ1vyHcXJ5r0LXHeQ5AgEAmy/IpHICd5Y3mg0hlEdtm1juiJPIHUj xFzLPwxDrVZrt9uRSKRYLNJUhlA4J7parfZ7rzdmJLtCTNNEYoGGU2wTITwiQeiXnp+G/rJtWzpl kXIJhULFYjGbzWL2cNOCE5PC0tIt59FoFPJJJBLlcjmfz9u2jRQEHgNXtVqtL6esp1eIXkDVlstl NrTHj26OCeIJmAQpVxSi9hVCWZaFUIAWD0YcCpRGJBgMskMvJTaVNKTnJXqOhUIhFArt7u5SHAyv irNwjUYjm82applKpdgHHMcpl8uRSKRUKqXTaUpZsCpDGuSxQ2YYRrvdbrVajuOc+IZQMBisVqvR aBQRQ6PR4NwpdB+2odFo1Go1TFfWnon6YgB3QT0WYK9arYZCIdM0aYFT+pHmjGmaUHx9uZ5iVsO2 7UKhgOkXCoVSqVRPDU5d4FJJPW3zidgG+JTRaHSAwBQCh3iLxWIqlaKEoSJHglTS3w0DcnlI7Gxu blJugRtXaDfbtmkfwiNhj4FT+o1GY3NzMxQKQY+L6sk0zbm5uWq1ioEMBoPpdFotbjh3WBWijKAR 0um0ZVmWZaXTac5+IN3ExfhuWiwajYpf4bwSNJXJZKA32QCIGoGWQTyISeDFl6RMHbrM7fiZpgl1 EIlEuD4iHYmknNSNqtVqe3t7UG3INQUCAYh9fn5enBIQOOYfJobU4r4xUniprVYrn88j7QafgxKV XKrNcRxYBdoPwGNoAbNobW2tUCh4N/aig4X/e7S7oq+qMKv5fH55eRl9hyli1VkkEpmammIjZrEX LLfip+HUU/IHU26Akdrd3b19+za96zjO119/Lc00RiKRVCrVUyOLaUMKQDc2NjBec3Nz0IBQeqLN 9kjYdpZ6YKZpnsh2erFYnJqaopnJDkRP1YHUWTKZnJycvHv3rmVZ/SaUzpXL5Ww2i8X/+eef3717 VyqgRqORz+cplz0kQQWjP/Q5Co7YTWAyBgiL8ItoIaAl4baLjnC1Wg0EAnDxstmsZVluWfiTolqt BquA3mWz2Vwux40NEpRw9oPBYCaTMU2TMwyKvITjOGrvW2pH2TXTc+r3zDLl8/lWq5VMJt0WFQwM m3iR5kxPJJWk7hq2gj7//HPTNKH1isUiVAOtpd3d3ampKdKJGC+KGGAkYP8+//xzGAm3EFmRSqpW q91uN5FI7O7uTk5OqjUIu4vjkdLpNKa6G7nlVTySaZqLi4tcQU6r1eIcEXUqCR49cnqsE4bfoVtp HvZ0wNm9VvooJgMCUEW4owiLxS5w/hCygjSl2T+TqsQuYL8CL5fL7XabOEdgSlNLrToQflG/MFfd 0gOuqSR2BwyfFz1l2B+yHydCu7u74q4GEnY9sw0cG47j3L17FzU2Pp8Pu+3sM9w6IQVN0Q+bP6G5 Rel49USULubFxUV2GCKRiHS7Ur1E1RoBTjoFVdw/iZyLRTVihj0ajdq2TfMP7qSip5xgLcsaHx9n e2SaJqrCUNUDL+REUkmhUIjSBT0DfFSpsYyR5MmcuI0FPcAanmAwCKOCX2ikpEPGBtlIaCB7Y9t2 Pp9HdOI9MYudc+8b1x6tS18NGi4FOeTvk6xQWyg2DnVGBXKYKplMBsZjfHy8UCjUarXx8fFqtTo9 PT0Y8+yET6VShUIBehBh3wB+BkkSs6VWqyFcBtvYZutp7MUIjCtzgI+inhgK1QHLzfJMDhD7O3Ik FN9zqaBzUs0YjUbpOfjg2AHvKwneM7jmfFJE8Ujs2rbttvEiHf5IJALvjGpPRQXUarVKpRKbrIzF Yslk0jTNZDIpde7cagxY+SrKVd1WBfuAumxAUU7nFhZgc1VqANjilkQiQfOeXT9uovASYeC7iUSC nWTJZNKyLNhat9iCC5M9xgduik8tdm6qY+aQGFEPw8asSHyzg4t1S7M3FAqx/RKnGZUFw8tLpVLo I4JXpIDVOVI2NUeDBWun8GdpGrCbYZyBkf7iZf1i95j9hU0uedwQmpubs217c3OTUy9YktgSR72m lwoIt6JEEgIbIHrcq+B2s7lf2u026nch6kgkUqvVTNPsyzBQCEvJhmq12tML91JxhNpOmgamabIB cY9UEuZBo9FgZYpCBcix38DTYzJLWghBFtK2be8ZWG681RUIqOSjlDG7LMWq5yGDbuliULtmPZ07 Thdgi0kRBPRL4mLwmM3I5XJTU1O2bZfLZS5oUCzIno2fVGUh6fRGo8GqIUx1GpRCodDtdmmSOI6T y+VYPwN+Ertuy+UyCljxSj6fZztF0wwuCNdZL4uFXFeUPJCZcSMEJclkksSOohQufe9WGUyOpJq4 owxsel2M3ljDH4vFkGDk1Bw7JeC19Fvn0lMXiW6Wl54qNnjEYk7FHiHquXsaJ+n+5QBxIaZuLBaj L2LXE7NU3AVkhyCVSr21k89IRHCxEpeAFt2E38apwhMk1HRxzkXPgyYnS3BMQqFQIpHAcTZp5e7A jZ/qbpA09Ol2u+/UAXJEIbZtZ7PZYrG4ubmp2NfxrjS5iOFE1q9o/KQqkn2R087v2tF9MWKgv7bb 7enpaU5ruXn6KBR+F3rkxeiegztWLBbZDkej0Z45uCEpEAiIQQPVq2FyiMHpMLvfqVSqXC6jYINN JXE+hWhL+93945a06HGwa1K6wcXumIlxPVsdhPJEUbaDnWpReEnSTTzj+BA7JaYQH5TL5bW1tX4r PaQ6GruaJzXrEolEt9u1LIsSQdxUR9UWuxa4SUIHmNlUEpsOTqfTpVKJFWBPH79nbF2v12OxGPhE VRUOsrFVPaxiwuYTTZtQKDQ1NcWJsa+zhP2u355O8SlpFdG8cQk3cTXRxuoAEUMgECiVSh6F0Gg0 +i3p7OkzKdYp9mx2d3fpGWyaeozD/s3f/vY37Xdr0qRJ0wkSi30yGKTC2yVtGDRp0qRJ02ukYbc1 adKkSdNwhmEAwCw1tY7pRFrjjs73dZL+fSQgW7x3bDuOc+ITSZN3elEqHTab7wgzR53Oqbb/cn// 5f7+722Ijzqdw2aT+0/xGDcK54xe+KssuVWIS9Fce9bgo9qaPeHitjfidjjLeH0jF8UbtLXF/VVk 1Xi99hkFXnTAFZy4iULE+kYdDouowW4N0R6Xm1jY36lIma1W5gApsQ+PU2PoY19IxXRGDwd/SJhu ONXgXw0LKlbHu2GzQ3SiVFHcicpr2haWDgFXH0LQTIlEgusvxwMnf+omDj1hJrghsHIHGyETjj11 NT1HT2ZnX5RKhmGMhMN/XF31xeOHzeYP169/9ugRHmhb1rP1dfz544WFQDZrGMYP16/j4adLSyOX LweOCw2+u3Llk/v3R8Jh+sNRp/PjzZvsFz9eWBibnn62vh744osLMzMK3qgR/JU+ahjGYbP55Msv oW1HJyYuffPNSDj8fGfnRakUzuUMw2hmMt1KhZryxePhXK5bqfy0tPTJ/fvch368ebMnM4ZhdCuV ZibD/hLO5XzxeDOTGZuexuvNTObw8WN64MKtW4FstrO9bRjG6Orq06Wl5zs7nDQC2SwrRk7+UlFw xDY7Eg5/cv8+nm/fuUPNPt/Z+Xl9HcpXOo49GWPFSwKRypOkKv6I0cefD5vN9p07vzDD9GE8Hvji C3Szd7kqB7/e7XbZk9kDb6rgJBGLVwMQYOB/cQ9z0N8KDom9QCDAqhJ2L4hsDFe6g3OYKysrrVYL h+YUy5s74iC1W8Qz9CldITBYjQodKUJ/6/U6YEVYefaFVExAOsQqezCbNdIiGt1gwRyVcKAj9DkA +huGAUSWubk5tvxf0SY7KwZAPEbJP90v4obr7uaIDEnP1tcPHz/+9MGDs37/850dTuth5bctC+qv W6k8mZ0dCYfHeh0DZunVwYFhGOHj8qFmOn10cDA85z8tLZ3x+6E9m5nMky+//NO9e5zKpj+3LYtV 1hy1LevVwUH7zp0P43E3zUvWhdXX3125MnL5MvfM4ePHl7755qzfbxhG+84d7rsXV1cvrq5KVf8w hGYRh3H6nVTw06Wli6urF2ZmMI6jExMwsafKmNrcPt/ePjo4+NO9exDXUafz9C9/eb69/fHCgsGe fHYDzTBNE9jrtm2Tx8pi5Eo148meSxJ9PdZNA4ftdhsoNEDlC4VC7GETL+Wb8M0B8T01NcXaPy8s icRFDDg6pNCw3CjgdVJD1WqVdVd9Ph+QKTEogyEVnziJBpIiNgwK7AHCRNM00TsYYNu2u90uxpSC ziGnEE6luhl4wBeDh0wms7y8fFLQmB5THP5bt7AsL8zMvCiVLszMjF69+sP16/TA2I0b0CC+eHzs xo0ns7PG7Gy/H1IrXDfeDMN4+fCh9N1upUKO6h9XV3+4fv27K1fApPjwL5WKaMwOm82XDx9Cjf7p 3r0XpVIznb5w6xanMRXRw0g4LOXtrN+v7i98ZAQ0ZIyhDVmrM9iAjk5MSBN3FNP44nH/zMyLUkns Zk/GupUKx5i6p686HS595H0mnKNI3A1/FasUAT7BTFarVe4EE3lSbCpJ8WGceufAUnA6dLD1j5O3 gPDN5XI474cAApEN3F70S4QTAAwyKQWgiqIk38v+Bw7Hi7+zWQWKWtyUnXjBGYv5XK1WCYYFzAOY lyQwDFKxNNHHpZK8vMU51KKdQPE75Izz7ad6YgYQ08CXJhNFgJpAmyehAd5g+I+K1fTSUyB/CIc7 29tjN24gYuhWKmz6BVmatmWNTU8jYnjx7beXtrbGpqfJciDsoFyTGw2wndC2LF88/mx93RePw3SR tvrs0SNfPP7T0hLCgp+WlkYnJv507x5yHaKu/HV//9LWlhgtHXU6pC4D2ezY9PSLUunZ+vrF1VWp en3N293ZuXDr1gA7FsifjE5MPFtfD+VycM+fLi1xj4mpJC9C6+zshJhQqS/ywhgyclwqydUbuHz5 +fb28+1tt1TShVu32nfusBmnD+Nxkqqnk8/lcrnb7bKZZaR9pOdrPGYVsALZK5AIjNA0TekRGBZB kDubats2C99Wq9WAO+3z+T7//HOfz0eWA4DV+XyeQ24YkiAc5HbEeyzYqGWYnAxhd+PkFxsxiMm3 vpCKWQM5Pz8P0y7F2aYH+oVdQ9850B4AIOMroVAIGIi4bk96809PY8Ye9ysUCgDAQG6QpMca4CFD IlEI3o9DXlxdfTI7+/21a3DlkDJCPoEUQSCbZZ1H0fWmhLVUf505fx4ZpH841OfP99y0fDI7i3RQ 27LsTAZbCJTTR5Tw5Msv8TnsMbi19nRpKZDNkmkhtX72/Pmz58//+vDh04cPOVvY2d4eWVjgXuEc 8JcPH1786iupNnzy5ZfsHgMXZ/y0tDR69eqlra1mJsN2bXhqW9YHExNk0jCI8PexqfM8HkcqqbOz w1nKk2XsqNN5dXDwx9VVhZeA6OSDq1fZdNwZvx+/fxiP904lQSMjJIejR+E5q5o5IDY3TwoLCReV uHVMikZH+pRNJZfLZfhikUgEIPsEw0IA5Wit0WjQVRM4AVir1djLKxYXF3GDEPrYbrdt20YyR1RP nDdNokMUxSoLboNUbYrYURAT2YFAgBQfbdSTausXqVghfNp8Vj/QbyrJOL6ohy6oEfM8gAiG2KPR aL95JISGkDmuDwHOdigUymQyBMHPipQgxmBr1Y4OOu5Wj+AFc5f78dLWliF4069xmM0GhjjEftbv /+T+fWgKVjV8GI//wUXvtC2LNgkC2ezh48fP1tc5RTYSDnObClJqZjLs3jir/V/74p07Y9PTrIZS WAXk6CkzzlE4lxM7Sy0/39kZuXwZfQnncs1MhlLqHPWbSnq5v/9sfZ2VCTafSVwXV1fbd+4gAvh4 YYHLI3lkzGMqqbOzwwUK/Kz75ptfX7fH4gCdM3rhr5Jfz56Ap+sN3PwmQwlQBVAdKYKjNJvE3bwh Ng5oWdgMgIXh4kBSr9hyQJSAVBgpLMr24NJt1PPs7u7id2kqSVE9NZjzaLiAl7EfIued9pzZqzr7 RSo+DaJpwKG3sn0sFArcfXNsr1mI4CGJAyOTwhfGYrG1tTVcCpLL5Ya8l3GAEEq6H9Bz+9GtEMWN nszOctuwrw4OPrh6VXozBqePLro4niJdmJmhrU6ULZ3x+y/JzN7oxASyZODq1cHBy/39V52OYRj+ W7cUeSTUaIVzOcUzolp8dXAwduPG383w61ZE7CPJH6GbohiJs1XqDBgrHImm9sAYtfB8Z6d9545i DpAzcdTpdCsVlBuMMtGMYRijq6vPd3ZE8/DB1av4ilcQPRThABhHClgkbsOqN2bhx0lzVoOlp6DN sR8uFqgAOYQA2aX1VMlkMpfLAUzJCwacm+fIedDcFQXqTAgHpcv9Arg6wvXFnay0A98vUjG8e6hv aWwkgrEMvx+QSqXIJxh4S4mIZU8aXkhBsGk4UBEAOXjB6PfIkvdyVazzzvY2FdqPTkyMTU+zXjZb Jyr+4mWP4dLW1qvXi5GavXoqflRkm6uepF8Om81mOj02PS11xlkVfMbvhzL6R47IZf8WVuFFqfSn e/fUOxD+mRku4UaeOxmtZ+vr7HbIhZmZj5TJK/XewJPZ2Y8WFtTltl4qjk6WsbZlPd/eHr16FclD 1OyyGSpRjIePH//68KEBwyDCMLE5hGQyyeqXVqvV7XZZT5+9E0bMRylSAbg+l7e9MtBaLm8jMkk7 ez6fj7spgYXh6wl5bZrmkNhzXm5QURsSURezOSVspYo5eny0L6Ri7soO+joFPdLW3K6fpUpc9hd2 1AD9xu4JsSk4fI6NJLDP1Gq13NBVRbxuabmqAgRbHfyJtLm5yV50ge4obnPymIJ4urT08cICZSFQ 8M4V54iVrORRevHopSXtZ8+fP+p0vr92DfWyPRsRXVQxswGeUcvvxSKKcQx0+otSqW1ZXLbKY1bt 5/X1X17fw+c2G7BhS71GcPPz+vrF1dUfrl/nNurZfX6qFWYN3kg4/OmDB4ONPiclN8YCX3zBsiEm uy7MzHDT4KjTaVtW6PXQ6snsLJuh6lYqYsbpw+NZd65nuoO7aJPbFma9fi6Hrt5lhQ0QtaToavWl 71gz9j6ereX2e7mr6oPBYL1ep8vLsBHyxsor+82DcePC8inyrIBrHuCAwmmQW47rDbBHu76itvJI VN1PdOb8+W6lwhYd9UtckYy0KknlID9+/LHgDn8wMQF7OTZELvTCrVvc62d6bbl7zNH9ePOmOgw6 DfKSXeStvt8/Eg5jOCDhlw8fvnz4kJ1Fh48fXxASd7Qf0zuV5F0p9xUxIOcjGg8669T3NBXuKDdO /2YCrgyGnHHWvPWF9KuOGACnTLeiBgIB73mqt0vBYPCt3KVx4iDYXshjuSrC+Yurq53tbUoHjU5M BLJZLofjFjF41Syv1+qQ9jzqdD50TxaJH+U8U7eIwTtXYhIMZ5W7lYr3vQ2xWbFMc+TyZbJhf1xd bd+5g2IwNmPTs2WgR/TVR4WbL4p0YMbcXIHn29tPl5ZQvzt69Sp33g2CEqUHQZ06uiqHZjHM3Qaa NGnSpOkNkIbd1qRJkyZNr5GG3dakSZMmTYMaBm5nqa+NptMjQHa/rX3mdxk+Gie2OHrrXP3ecNHf ynJg/9qXhKVzRgOkv3lSAGW/GTongtkSsbUQqLFlIVvZv4IUiNYcSDKR26YcbqzFEVlCYOXax6EK eiUQCCSTSXWJDiFRqzdCi8UinZUDFDNeFDdIpPDRbg8T/yKKOKFlKKpdpc0qqubZ6k9Qt9tNJpOs wMWTE8Sk4ziWZdm2TUOAgymtVkt6PMXtalyuVq1UKoVCIWKY/atYl4zTJJZlKWDDWRlGIhEpAjw9 wx098Y7yLfKG+jHuYe/A42yD7Al2g8GbUoOci9OjUChQVQJEx6Kye2FPWkzBHUIker6zI6IMUa2q FCV75PJlrpz/sNn8aWmJQKJ88fgfV1fZM2VSvFI3KFaP2NTcKQ03VG0WDfvCzAzLCYuLfvj4sfet cu5Ag8gezrUQ4tNZv99/6xZ3SIKDW+eAx0XAc/SRYHpFgYg/nuPAbDli8dxfHRygTm7k8mUWiMML orVYdW64X0eO9YDlAaALUfcBJC6dThNKB1aa+tzs3t4e/q+o5CmXy3t7e/hioVC4e/euooII7hiO zvZlkMXCJLcjAsMQd/y4L+gkKIiNjY1yuQxcLPXz6rICukyi2+1S5Zg4WCI6k5tYCLeDM2x9kXeU b6qZdruqYQBiO1utVvs6FidSoVAIhUJokEWg6pcl7sihOmJQw7qJBxo4FxjqxRePo3gfyM8/3rz5 53KZsKDF07k4DOh2oKxfCFI1ERRVt1L5hcGUPSU66nR+Xl9nzx+83N+3MxkgLbKXcxiGgT9z5bPe Ac97RAyiCWJt4Fm/P5zPHz5+/Hxn56jT+UM4PDY9/cHEBHuQcshDYSLZtk2qNhaL4dTVkMWOtm0X i8V2u51MJqvVar1edzvbXK/XY7EYgZguLy9znqnjOPV6fW9vr9VqZTIZ0zSxJiORyPj4+JBHeXuS m2M+TMbJLecD85lIJHZ3d72koarVaqPRgN9t23Y+nyfjl8lkgETSarUAZifqoMGGFeBLCDGlwZ8b CNgAKN9Irdi2HQgE3FDZ1WhRp0d0Bt4wjMnJyd3dXenIqtnDAHHr4vQOyrz49tuRcJgAIc76/Ze2 tn68efPFt99C75/1+0Vn/Kk7pKjhDYL01cHBaV8bp1D9+L/i+Mgrhjf2z25H/MQDffT7wMdBznnp yZPZ2UA2e8bvf9XpAMGKAgjUHasRrU+DotFou93m4Juk363Vavl8HkfzSNOVy2XkENLpdL/rFnZl fHycEBRwrLdarbbb7dM+VSCmkhQPl8tl9viVeLBcoVhZHG+fz4fEVM8TAPQJUSvl8/lIJBKNRunQ O9q/e/duIBCAe8Ed41DnBhuNRrVaDYVCxWIxlUqxkIhuiSyPIOoKrzwSiRSLRbo5SmywJ/B4v3sG 4hBLYwtc50c3W3AYl8Owd+J7DN9ducKpby8ZC1atE4rGABEDrrEc8gwdl7/i8l2Ks98Id7ouKvus 3//RwkIzkyGeD5vNi6urZEXYu/PEtBsnByngeX+G4YzfTyb0qNM5w1izl/v7gP/9u5EvlX6pVD6M x8+cPx/O58+cP98XorUXfCGsPcJMrdVqHCQcIYwCjI8WBtRcKBRitQkHpkY5FjcOAUKHmw8KhYLP 5yPEVixUQgXnsrH4cRi94wXR2nvEMDc3J1oCVqFgZzIYDCI4kCpWVqH03MYECi9ZCFYxcQfdu90u wUvQhZqUrmE3TtxSSbhaNZlMTk5O3r1717KsfiPXvlC+MbEhB6Q3ud2a04gY1BcXcpRKpfL5PMRl 27bbElOw12q13G4tFMOIYfI2lLseu3Hj5/X1J7OzF7/6ilJJh80mMO9gAw6bTRFL1e0rXpDmcCFS Z2eHxQNHktwLZB5H/cLf4uvPd3bY/drvrlwhW4IjhzipDrvIHkLk7s6jWzFEg/rT0lIgm30yO9t1 iSfEzQ+WjXPsDlKbmTRty8JddB/G453t7WYm84dw+K/NJoYTqSQI0faAaC2dVQS/LK7YVCqVy+Xg tGazWfZ1YDX3XPPD5OXpftBQKITb67x/HXckDPZptUmgfZqeW+jValXNJNDrSqUSDk5L7zEFjjck 2e12Q6GQwjCwxQWs6Zqfn0cEGQwGQ6HQ5uZmKBSCDCneMk2zX4khxKFoAGDd7FU8XlJJRj8o39id wgV/dJeDaBj6Alil8IhqK0jFYxdd8a4Yl+NeKYxRKpWCSFkoMzV77MWr0hklQhKoEUNJ17DPB774 gnOQ/3Tv3k9LS3Tcd2x6WjQD3UrlzOu/nD1/nvO42Xss2NCE/frF1dWX+/tty/pzuQwVRwl6N5NA GIW4KoMa/OT+/V8qFXVSC/rztXSfZeH3H65fx7VubHjBXljNnlQH4iHOJIt351F6jW4PPep07Exm 9OpV1mj1BBLnopxz7Oiin1xSD9jr6NIHV69+GI8jQ0d2zAuitdvyZi8H5ea9YtWlUilc/iWqTjEO GAAlP5lMcjqClDKMFjIYrPlBsAKeT6MqVOwFqzi4XnB2sVarsYVA0MWoOJqbmwsGg1NTU/l8HlqP dSRR0FIul93yEqJ8oETK5bIo1XQ6DThYWF8YHlymRBk/sXdSz9c0TbZ9FqybAwdU48l7R/nmQkwx 4hRhBNX5Hw5JHjivipyhF6rX68jRsfnDQCCA7ZOe7C0uLkpdCs66uGlhzmZcXF0Vq1rE+kvcUOTW zpnz5y/MzEBdvvj22w8mJnCNhHjbsxdAIWzkIjr5aGHhx5s3z/r9Cn+fxSj84fp1TtH3tItixomQ AS99882PN2+GX7d2BIILuGzaMoGZBNwTd3ceFVYRbwBh/GBiYuAkktc9Bgxn27LAGYdha3hDtHab i+oHlpeXs9ks1BxXVyeidsOLFD/N4a16KVeForcsa2VlhTxf9i32thny/jjFzeV8OEvD5Y4hw2Fk xa3kUChkWRb2xpFxZtd2q9Vqt9sUisGiI1PPaq5arYbU1kndvkk+KSmpbrcLIyHN+Bm9irWAQ066 zDRNpDRPaYPHzcAYAoyg240UfVFf5arIgnKeFvlPHtkTQ21stqu1sFveZvjb7dnNZ2ylqnUxW2Aq +sKd7W3cIYqWL33zzZMvv/T3o9xF8liuetTpdLa3L21tIS4BRlbLsoKMWTrr95/1+4G8TW73k+1t FsCcvTsPewzcV9p37vhnZtRIf2zogxtVRStyTgwxWMmSITpz/jw78IBcZ5OhiukreivcX6WaGnVy 8HbZ++Noxp8qqiVUP7ITlLdlmRQrvmlPT1qby/ZamjtmNSDdUy2ma7w7ku12G4l+LriRxkmisjNN 06M3LT2kwpo9Nu/x+eefs2LkXhS3oBR5dmxuxWIx4hOaFAZbDdWO+8bZzqpRvhWRxACzyzuSfF9U q9WKxSJnG/rCkcR+vrjVcVLLirUoIsY192Tgiy/YWtVXBwcvSiX2F/GuAhGHnK1K4v5pdGJCUX4q 2hika+ivfW1IIGkmJuK4DYDDZhN3TlC/sM1w4dYtfEt9dx4u7FNzIjmfsLXFsvHjzZuBbPacd3vO jmJfxV49MZmlaz6fz6fTaVTLoIB1b29vfHycLj0WI9yTKhWF1clms6hwRSDCncyKxWKTk5NsDvoE M0gncheYcXyQFRIDez6f78QLat0MoYIl45TJC1S7oj7iXWBvMOKu6+iXWq1WLBbj3IhTgijuqcLo 8iKQWIk0MGC4F/J418XJErIyHWZrGgATHmHDhydCkD3nnV3u1icxzXdS5DjO119/nUwmkV7AjiVK R+7evYsQGBkS0e2S3i43QPyOo3PZbHZ5eRnu2/j4OKWhgsGgGDGc0lJXeOJq7zIQCLBZe2LyLcJ0 S1niPFzp4VuuyJLNv+3u7pJMkDE71YGQsnd6mMHey1WN44pVMfnmfVFgYoujNsxZJTEnwV0v4Ubc bZTvLPVVrtozsAjn88+3t0nZfhiPh/P5UzWBXICFXQ2NrqpJkyZNml4PBrQINGnSpEmTNgyaNGnS pMmVzr0vjB51OixA09/N2vnzbyz79jvpC0oM3kHBSitYhsFHA0mPxb3j5DhOt9vlauROcGeFk4m0 WOBELmp1O+L6jkhY/P0EazdQdfkuXNguNwzc1tDF1VUcyfv14UPA6hGkH8GbiHVm4Vzu5f4+W89L xV6AJwQcLmpmw7kcB9j7yf37L0qlw8ePP7h6lUPNJXoyO8shBb46OBi7cQNfZGvLsPMDKN32nTss Pi1LbAEycGvR5TN+P/HAYdj+Y364I730lKdhGJ2dHfG2VeP1Oo2e8LxuWMEicdIenZhAxRsHPoxq 9H88dvXqxwsLbu0/mZ1FvQTKCi/MzLAMc6V+OO4kVrWLv7h16qjTaQpnKV4dHPzp3r2RcFhEeMYc YIdYPNkLyJBSqUQAJyJQK1sizKIIG8fYqG6o2qzK5ppVnE5g95lRUgwwV+B2EJY42DBNM5lMRiIR AG7T2XWqDicgcbdCZw643jCM6enpUChEMqF3OTPQarWkG+BuWOhScHi3g5Bidfvi4uLe3l69Xhf3 wLmHcaG32N9yucyiCnIIWtJRo2ZZOBCudoPDdVfIORAIQKQ445lIJBqNBodcIr7Ozi4UZ2Po6ToA N3RhViwcqDu1r0Yn+nu5KqsjuBt4fqlUPnv0CAcX2pYVyGahnjjoc7a2rFupvPj220/u30cRrlha QIcGjzqd769d86LdREXMKjuqLXtRKkkB3AcjLzhfHPWUpyHDV2GVMmta6M8DcCJK2ziG6hWpW6n8 vL5+aWsLPAP+1w2J5enS0uHjx4BKhtXh7pRnS/2amQxXaMidm6U+KiqnpQXa1AiVZrPA9KIPaBgG C3BimqbUK1TQYMcL+iJCm5dWzWIxo8qoVquJOPPlcrnRaEDbqlHLjOOSa9u2S6USJMPCgrHEnj5x u1vF6AcLHeBUYFjksKfiZkeEVBvKF6VCq9VqdK0LVTMqPkEn2wuFQrfbdbuRwntw0O12MQMHvvgI 99OsrKwAtqAnrDrJEIVq/VbAn/OoHEfC4Q89VJiRLfHPzIyEwyPh8Nj09Mv9/TMueYlupdJXRRqg XhVa8uX+/smWuB02mz/evPnpgwf46/fXrsFLPZHGm5nMpa0tLmkj1Y8ekbB69qWzsyM9IPPXZvPM +fMUPZz1+z+4etUNzvevzab/1i2wfWFmpn3njhtAAgJBztp5QS8YjF69JSxlNXGQscPkYVqtVjQa RTYjGo2WSqV6vc5qQ8CU0YH2QqGgUH9AqSqXy8A05PC3xXORHokge4vFolj82mg0gFqfSCQikUip VLIsa3x8HDXow6S/cJ2iWN0LIH0qd8b5J8Jzc+sCblsJhUK3b98uFoubm5u4C4CTiUffAgLh4g+Y KDo4ghPmjUZDeqKwWq1S2XEmkxGvAzjhVBJF5S/391uWBQUkQsK+3N9/8e23rE45fPz419dPoLDr k045nD1/njJREsXx7bcv9/ehNbwAj7w6OKCE0sjly6KC7uzshDw712wBsgKDlz3N5/FkX095kgxf HRyc9fvPnj9/4dYtNs0FoQHLxQ3ORVTHIm4XaxWefPnlRwsLUvCvsRs3AJUIVl91Os+3t1mWWPpD ONzZ3sblIc93dg6bTbjzHD/dSuXpX/6CW0co1yTt40cLC4rRl27J4MejTofdDjlsNt1uJsGKunv3 brfbxckJpE3egGHgbh9CKsmLDRB1HI7vsKn/8fFxVjfReUZowJ7OKSKMTCYDzErEQ4R9S/Khu5W8 WMFqtYr7/tLpNBxt6giuRYlGo3Nzc/V6HW4vXmERWTjow56nKBqNRqlUwtmjWCzGxTTASw4Gg3Qv HovnJg0ukZpDpg5xCewZGCYD1hPNk+UB52HZk7BAJaDWAEpWLBY9Ig4MT+KhHMJEOIcFDIBySqxz uXgs4AszM6wiflEqHXU6z3d2aElDz4or/OOFBSTuRS+4W6kgI6G4bOj5zg53Mp702uHjx91KhU7G ty3rA+ZQDNSQAjYEuW+2y6INw+E+XKwBq9DzFKJCni/39zvM7sKrgwM2rf90acl/69arTqdtWXQP 35PZWWkM1JfT3bastmWR/sX/WTWNI/sk6pHLly99841b7HVxdfXJ7CwQMUfC4YurqyPhMLft9HRp 6cW3317a2hqdmOBunsLkEfvo9jlxe4mG5smXXwJ1EvPkqNPh4JSJCItpbW3t888/9/l8/eaR3KhQ KGAPwC3LNFjEQHsM7I9TU1OWZVmWhWs74WUP3BHLshzHQZpobm4OZw8Ba0g6mjSF4zibm5vktEq7 ACz0VCqFc6mE1sUaNmx7dLvddrvdbrdbrVYgEACuPvaikR3idmIUKhibLrAKYEDMCxmv440rUPdB BA5GSjwQCHBnJxEYGe6Y5OxQsiqYGmERzCzLAggNxle0hbFYjMxSLpfDltIw1z6qhXDOMIyWZX28 sNC2rMNmU/TB4bHC3wSyq3GMH/vxwkL7zh14jqyefba+/o/bHQ4OfOHwkczjA2J4z+oXTl+4nYx/ ub//bH2djWmw+dyXsDgbRtvsBAuMP6tPNirkiRSNui/dSmXsxg0YJ188PnbjBvJjBJhuuJToUKKG 5Q3bPCOXLysyYOyuDLH0cn8f+0ZSlX1pa8twgW98ub//482bF2Zm6IJGmkJkioC5T338YGJCkQP0 uL/SvnPnwszML5UKC6dMeQbaeWbvFj0RcED1xgNpE7e91r4IugNpE0oZ+Xy+WCyGMAjKgq7rUSdn cA8SrqUjaTiOw16rzuUrWAeTAzMGiiVJA5Dm9XqdfHPHccTIg/2l32P5tm1vbm7GYjGSKpSduAvS 0xKwlMvlgAEsJToHXiwWcR9MPp9X+/jEFRvYmaZJ5mRzc9M0TTSLigYAAnGDVSgUlpeXjePN5557 ErCRKE8g12RxcbFnzJpKpc61LetVp4NkxZMvv3RDaBoJh/23bkHPdisVqODRiYlfKhUx6f9hPP5k dvbCrVtHnc6LUuniV1+9+PZbMa3xIXP/j9owQGXg2lXkkUcuX/bPzJBRgdd5cXX1ZDcYSMNCqXmp AlLLcyQchrcOtCw4wiOXL49NT1PLcLHHpqfhTcPvNgY9Zy9u23535QrGjiyHeK2u2ja7zRAEMaMT E9Joht1aGAmH2T7+ur8fVM4EbIaLv1Ow+GR2FkicqFAauXyZjVyj0WgoFGLTI6g7ZJXgiVNf2ILe yXEcGDnp7nQsFiuXy+hUqVSamppSNIVckyJNFAgEWNPCZdg5q6PAQucegAmBojRNkwDQoM7YfkFc HDYwy78UjITAu6RghT2NOhS0ukgXW8EQL7aC1UMpve6Ces0JSpo6Q7Dl0ZVh9+RR2MZ2002er0UM BBEeyGbhbXG+5OHjxx8vLAA29sN4/KjTaWYy4ePrqi9tbdmZDPcW/Fy4h+y9dP9IDnz5JYBnva+H Z+vruA8PuxfdSuX5zZvhfB5JjCezs+o89TB7DN4J14Ao5Enfbd+5MzY9Dff88PHjH2/epIog3JeH BBT2GKA9uUa8l6tyaS7jeM+fDAYuMOlWKt7vohIrRLkEl5g+Yh8Ym54+bDapjx8tLKjBc14dHDzf 2UE8x4YIgYMDIBUfPn6MvSVUEv+0tMQZs2AwCI1DVw+hUIQNxsWcD7fakTVinTh1AmEADCXKeLhl J5Bs4fY/8/k8kHRjsZht2zBIXgD1TNMUr6IiPCvuNAPUnzpt0hPZHnfhUcYfe9TEqngVCsUu6p0S tho1EolMTU1FIhEu+aNATfeix7vdLu4vwcYMbTbAx8fOiluDcE3YX0TYzZ5Q7Vx17JDUo1yV6m0o ZmdrUcZu3LAzGWwOj01Pw0Fj/UGCk+U0oBqbUIEc6+YwYleZVvuFmRmU0gey2ZFwmO2F9PXvr13D ZgaXInstLf664ywe12CT8ii44vYwRicm1PIEdba3cVc2K8bnOzukHPu9L9AjHTabqECF3mR18cv9 /efb2/1+VDyUoBBvzwd6EhtXGczVIFziyBePw+aJ1rRWq7mlZaXoe+zSlfpx9XqdciyFQkG0BF5q N4m8GJJWq5XL5TjkwWAwSL/0BWYsPaYghVPF1mi5XB4gymH7hUxX+nXQ/nw+z+o78XSIIheEalS6 uAXufC6Xu337ds8yJ8dxlpeXUQMq3ZHiFLeUGQKoV5QJYXedG7WebnvPaSOdtOJBEM6h8XIhzbme iYh+lfhp0Fm//4OJibZlXZiZQcTwolTy7uESZOBgeSQ3+vHmTfWFGAoF96JUGgmHR69eNQzj5cOH ihKgkyLaf/bF47ii5MN4nDPe0gu2jHeGjoauRuWcaNY7HpJOG9X1Ncvn83FuvjEc5nw6nVa83mg0 dnd3kRoqFouWZcEfH+xb2CIul8uo0gGs/ZDlYShUHeDFer0eiUTezOnrIRHRvdMA1xz0bRjeHbq0 tdXZ2aFt7dGrV9kAomeGx/shDO9KCsDlA7wbyGbPoNBzfd0wjJHLl3F4uN92vJerNjOZV50OSQyH n5/+5S/fX7uGLeKzMmR1xHYKg9rzItmTojPnz4+Ew+xFuPS790ZQHMJFDKd02QCnWL1DZ3uxCoas flS8k9lja8FgULSO1Boql8js4V7bYrFIm6VSEjdX6LwVNk7p0DWuSBI1JufkKiIqvItyWwpBuHtq 3ci27fHx8TcwgT0ioou95mqdxTvMh5lLinJVDbutSZMmlTMu1bDvLMzRmxfFb5K0YdCkSZMmTa/H 4loEmjRp0qSJpbezx4DtexaW611GoH0zEuDAagwG+/dEII5/n8ThJ+P4wu9wvmnS1J9h4JBysfkg FsxyVXdcDSwVSGGLCQ9Ho1EpjnGhUMDBwkAggLJoFoGWOxZEmyFsDTIHgEzEbdQoQHHdECLdTrHi kAhbiSHFW240GuzJe5zkRFk3+2mpBMrlMhkGQMqwxy/Vh0I5WGPiluPHMAxwsri4ePfuXbZH6vEF 2pdt2yg0hEr1IgGW2HubRYRhGiyxBbwo/Rw7xNQmyzy3vQaYTA7xWBzcnvzggSGPMWvS9E5HDEOC CQOGcHFxEWgqakesVCqFQiEsrXK5LILHsseC3MCH6RUsWulN8WqSHj5y02j9Elp2O3JZKBTUEsAz UILY7IJeJkh37xSJRDY2Ntxg4kU9juKZSCTClWrk8/lIJDI3N1etVvP5vEIh4ousPPu9R55tASwN UzjElpxXq1XvqGfcbOG6PAxGjSZNv51UkqJSGKi2cFej0agaocW27enjM8aTk5N0XpFDoOW0JJw+ znrhzGQymSwWi27VaScFlCY1G4Pd/NVut8lXZSUwjGE2js8N9fsup4WJWHts23a32wXPwCum4kuF BKrVKgorFZeL9SzzQKeGyaRxd9GQA4GTboOVeGrS9Ps1DCiYJWccSXDpSnYch5auaZqE3CRtFvW8 BPIVDAbRICHQiqkknNfgHHAEE8gAhEKhzc1N8TT5YO6hG3FxiZfwQiwTVkiAy2hxWPaxWMxNhZF1 pDu8iD0ofTK9m5ub0hby+XytVjMMIxQKEdQwK0bWWgOmP5lMukkAqMXdbhexAvJ+qVSK7SaGhkVY cxNgz1hWWtnNpi4jkQgFDXT0FLXzevNGkyZXw8CdqoBvyF6iBEiZaDRarVbZwFy6bpPJJK6Xkn4v lUrl83k4uWyel3CdsOGhwAao1Wr5fD4ajdKtUpFI5PPPPy+VSoCAh67xCIqrBgwZMmKgPQYvEiCN Cbaj0ShFElCpYtjkOA4QmDEoQGREZ1kzRiEFpModtoIEsEVRLpeBJTDwfNrc3MR5KJon2Wy2XC4D P5LAwvb29sCSQoa1Wk2Uj0g0UVmXgp2ctm2zARBZ4iGtAhArxSyTJk2/BcMgndace44kz+Tk5Obm 5uTkJFYUYUMWi0XK2DiOEwgEFLmRUCgE3GCoSCxR9bYEl0qSwphgU5QFYPEOiusls0FS6gl01ZPc JEBaTB3osEzu7u4SwD2UI64r4Z7f3d1NJpOsUXfLBKJwAAyQbo3FYqxLjsutoGrFgZCKmsOWwZ0n gB6LRCJS29BoNDBwgx0posnJyRNYnvV6ffhYQZsETb+7VBLrphUKhVarBXUzNTV19+5dDqdlfHw8 l8vFYjHHcWq1WiqVcgsXSBPRda/sSnZ7nksliReOi8u1X1Bc0qEcypVxQohUXiQQCATI5Ig4+BAR Z0E5HEpSvqzCglFPJBL1eh1JJ65Z3G+FNBRueQRCNQsK7fP5IMNqtdputxF5iCGUF5TjSCSSy+WQ sMKwBoNBrl+4boWFRRvGDLdaLVy/rle7Jk19GIZWq1UqlVhtnkgkoEHgcJETiusmkAcggtOHKJ5L JUtpfHyc07+2bXN6kE13cEVTrNaTYvwOAIortsyZpb5kSsy7WTupBFjzw+HgU15FVJRu5aFIJcHA YPhSqdTdu3dF9zyRSBBQcygU4q7cAqXT6UKhgMyJAhHeC8rx8vJyMpnEY/g/V5cFsMy5uTmPVkG9 xwB7X6/X2U6JF7JzMmR3awzhlk3TNDMyyHFNmn5ThgHw6JTWB2A6vEvkPcRggqsi7Ut71mo1BQLt YCj2isSFCIorBgHcX8UgQFrqLpJY5CMNbqQSYIsy4Ziz/9rtdqUpF2lZkRQfWJH66HkBiDgNBqaV lRWFLTH6vGzL48RzHIdNKHHbTupsqlTCbLnq2tpav1ePadL0XqaSTpveGALtMNrkLUqg3W5PT09z lkOf1B0mocRKW7wjZRjSOw2afpuGIZ1Ol0olNlimVNJpkEcE2neNxIzNYFczepFAIBAQL5DSbukJ zrc3dneCJk3vI2l0VU2aNGnS9BppdFVNmjRp0qQNgyZNmjRp0oZBkyZNmjRpw6BJkyZNmrRh0KRJ kyZN2jBo0qRJkyZtGDRp0qRJkzYMmjRp0qRJGwZNmjRp0qQNgyZNmjRpevv0/w8A+JHUmtyKrq8A AAAASUVORK5CYII= ------D9xt21mMgj8HysE2-Y.M63mjS8_JkrNXBjpDkLoC2xhC_XEY=_a40c7_-- From nobody Mon Jul 8 08:20:25 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F191612018A for ; Mon, 8 Jul 2019 08:20:22 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -7 X-Spam-Level: X-Spam-Status: No, score=-7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=apple.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MTlYekEguJml for ; Mon, 8 Jul 2019 08:20:21 -0700 (PDT) Received: from ma1-aaemail-dr-lapp02.apple.com (ma1-aaemail-dr-lapp02.apple.com [17.171.2.68]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id ED07912003E for ; Mon, 8 Jul 2019 08:20:20 -0700 (PDT) Received: from pps.filterd (ma1-aaemail-dr-lapp02.apple.com [127.0.0.1]) by ma1-aaemail-dr-lapp02.apple.com (8.16.0.27/8.16.0.27) with SMTP id x68FGRil055250 for ; Mon, 8 Jul 2019 08:20:19 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=apple.com; h=sender : from : content-type : mime-version : subject : message-id : references : to : date; s=20180706; bh=eb9hoFR3pvbAhDAxX+rtu0JOFE+NPO/uxlyM6f/XD7w=; b=Q1Xg2qafLPXxrfYI96ke849OdUfyV/yTX0vlwVS7+49l27KG+cPOCkaETPORG1Sz3NHR KX7FNYQqFWIZzqx+0kCveFx8T78gQVmzAXQzXcDrkjDiqdGBeBw5oy6HfD0SGNawJxRF 3DJrJCMuDJ2i8pv0QfmA7DeKYPU0wxEHihQdxIoUjH2oP/8YM6OBAoIhXSfwJR02JLbo Y0OxDXwQ8gBVlLiAd7EaZSfePej89YGX8IYpqMZb/qrEwm8mrezyPiFc6yYX13xLiuHV J4nU8CM4BmekqhNEYiAIYtgoJwEhXxYJLLys1tIJaoybrpu//q8Bj6A7G2zHu2zndSxl zA== Received: from mr2-mtap-s01.rno.apple.com (mr2-mtap-s01.rno.apple.com [17.179.226.133]) by ma1-aaemail-dr-lapp02.apple.com with ESMTP id 2tjrav190y-3 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO) for ; Mon, 08 Jul 2019 08:20:19 -0700 Received: from nwk-mmpp-sz13.apple.com (nwk-mmpp-sz13.apple.com [17.128.115.216]) by mr2-mtap-s01.rno.apple.com (Oracle Communications Messaging Server 8.0.2.4.20190507 64bit (built May 7 2019)) with ESMTPS id <0PUB00C9UX9VOT10@mr2-mtap-s01.rno.apple.com> for quic@ietf.org; Mon, 08 Jul 2019 08:20:19 -0700 (PDT) Received: from process_milters-daemon.nwk-mmpp-sz13.apple.com by nwk-mmpp-sz13.apple.com (Oracle Communications Messaging Server 8.0.2.4.20190507 64bit (built May 7 2019)) id <0PUB00L00X9MX000@nwk-mmpp-sz13.apple.com> for quic@ietf.org; Mon, 08 Jul 2019 08:20:19 -0700 (PDT) X-Va-A: X-Va-T-CD: 4fc7fc2a6ed6f60e40832e4273217f25 X-Va-E-CD: 7c5eb70ef839e2d282b24ab0108b9d75 X-Va-R-CD: 4a14aac1a9a68c8ee8f6a97913d9d135 X-Va-CD: 0 X-Va-ID: 98ad2448-ac73-4f54-9668-fd8bd5e90d6c X-V-A: X-V-T-CD: 4fc7fc2a6ed6f60e40832e4273217f25 X-V-E-CD: 7c5eb70ef839e2d282b24ab0108b9d75 X-V-R-CD: 4a14aac1a9a68c8ee8f6a97913d9d135 X-V-CD: 0 X-V-ID: 99b20f44-2eec-423f-8b10-521b739f068d X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:,, definitions=2019-07-08_05:,, signatures=0 Received: from tpauly.scv.apple.com (tpauly.scv.apple.com [17.192.171.37]) by nwk-mmpp-sz13.apple.com (Oracle Communications Messaging Server 8.0.2.4.20190507 64bit (built May 7 2019)) with ESMTPSA id <0PUB0056KX9M2DA0@nwk-mmpp-sz13.apple.com> for quic@ietf.org; Mon, 08 Jul 2019 08:20:10 -0700 (PDT) Sender: tpauly@apple.com From: Tommy Pauly Content-type: multipart/alternative; boundary="Apple-Mail=_6B39B886-8D39-41F6-A323-780AEB1C13D6" MIME-version: 1.0 (Mac OS X Mail 13.0 \(3560.7\)) Subject: Updated DATAGRAM -03 draft Message-id: References: <156246300105.3401.11374988947164402300.idtracker@ietfa.amsl.com> To: QUIC WG Date: Mon, 08 Jul 2019 08:20:09 -0700 X-Mailer: Apple Mail (2.3560.7) X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2019-07-08_05:, , signatures=0 Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Jul 2019 15:20:24 -0000 --Apple-Mail=_6B39B886-8D39-41F6-A323-780AEB1C13D6 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Hello all, We=E2=80=99ve updated the QUIC DATAGRAM draft to incorporate some of the = feedback we received at the side meeting in Prague. Notably, it = clarifies: - Guidance around datagram acknowledgements - Datagrams do not participate in any flow control - Datagrams do participate in congestion control The remaining area of open discussion is around the newly re-named = optional =E2=80=9Cflow identifiers=E2=80=9D. The primary argument for = removing these is that applications can add identifiers onto datagrams = themselves, and the transport should not transmit a field that it does = not do anything with. We did add some text clarifying that these = identifiers are essentially like UDP ports for demultiplexing, and = pointed out some *minimal* things the transport can do to help batch = transmission of datagrams in the same flow and promote fate-sharing = within a flow. There=E2=80=99s been some discussion on Slack of other = approaches that would make these flow IDs more first-class = citizens=E2=80=94adding reliable signaling for opening and closing = flows, as many applications would also generally need some similar sort = of control channel=E2=80=94but these seem a bit heavy-weight. Either = way, this is an area where discussion is welcome and I expect the = document to change. Best, Tommy > Begin forwarded message: >=20 > From: internet-drafts@ietf.org > Subject: New Version Notification for draft-pauly-quic-datagram-03.txt > Date: July 6, 2019 at 6:30:01 PM PDT > To: Eric Kinnear , David Schinazi = , Tommy Pauly >=20 >=20 > A new version of I-D, draft-pauly-quic-datagram-03.txt > has been successfully submitted by Tommy Pauly and posted to the > IETF repository. >=20 > Name: draft-pauly-quic-datagram > Revision: 03 > Title: An Unreliable Datagram Extension to QUIC > Document date: 2019-07-06 > Group: Individual Submission > Pages: 8 > URL: = https://www.ietf.org/internet-drafts/draft-pauly-quic-datagram-03.txt > Status: = https://datatracker.ietf.org/doc/draft-pauly-quic-datagram/ > Htmlized: = https://tools.ietf.org/html/draft-pauly-quic-datagram-03 > Htmlized: = https://datatracker.ietf.org/doc/html/draft-pauly-quic-datagram > Diff: = https://www.ietf.org/rfcdiff?url2=3Ddraft-pauly-quic-datagram-03 >=20 > Abstract: > This document defines an extension to the QUIC transport protocol to > add support for sending and receiving unreliable datagrams over a > QUIC connection. >=20 >=20 >=20 >=20 > Please note that it may take a couple of minutes from the time of = submission > until the htmlized version and diff are available at tools.ietf.org. >=20 > The IETF Secretariat >=20 --Apple-Mail=_6B39B886-8D39-41F6-A323-780AEB1C13D6 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Hello= all,

We=E2=80=99ve = updated the QUIC DATAGRAM draft to incorporate some of the feedback we = received at the side meeting in Prague. Notably, it clarifies:

- Guidance around = datagram acknowledgements
- Datagrams do not = participate in any flow control
- Datagrams do = participate in congestion control

The remaining area of open discussion = is around the newly re-named optional =E2=80=9Cflow identifiers=E2=80=9D. = The primary argument for removing these is that applications can add = identifiers onto datagrams themselves, and the transport should not = transmit a field that it does not do anything with. We did add some text = clarifying that these identifiers are essentially like UDP ports for = demultiplexing, and pointed out some *minimal* things the transport can = do to help batch transmission of datagrams in the same flow and promote = fate-sharing within a flow. There=E2=80=99s been some discussion on = Slack of other approaches that would make these flow IDs more = first-class citizens=E2=80=94adding reliable signaling for opening and = closing flows, as many applications would also generally need some = similar sort of control channel=E2=80=94but these seem a bit = heavy-weight. Either way, this is an area where discussion is welcome = and I expect the document to change.

Best,
Tommy

Begin forwarded = message:

From: = internet-drafts@ietf.org
Subject: = New Version = Notification for draft-pauly-quic-datagram-03.txt
Date: = July 6, 2019 at 6:30:01 PM = PDT
To: = Eric Kinnear <ekinnear@apple.com>, = David Schinazi <dschinazi.ietf@gmail.com>, Tommy Pauly <tpauly@apple.com>

A new version of I-D, draft-pauly-quic-datagram-03.txt
has been successfully submitted by Tommy Pauly and posted to = the
IETF repository.

Name: = draft-pauly-quic-datagram
Revision: 03
Title:= = An Unreliable Datagram Extension to QUIC
Document = date: = 2019-07-06
Group: Individual Submission
Pages:= = 8
URL: =            https://www.ietf.org/internet-drafts/draft-pauly-quic-datagram-= 03.txt
Status: =         https://datatracker.ietf.org/doc/draft-pauly-quic-datagram/=
Htmlized:       https://tools.ietf.org/html/draft-pauly-quic-datagram-03Htmlized:       https://datatracker.ietf.org/doc/html/draft-pauly-quic-datagram=
Diff: =           https://www.ietf.org/rfcdiff?url2=3Ddraft-pauly-quic-datagram-0= 3

Abstract:
=   This document defines an extension to the QUIC transport = protocol to
  add support for sending and = receiving unreliable datagrams over a
  QUIC = connection.



Please note that it may take a couple of minutes from the = time of submission
until the htmlized version and diff are = available at tools.ietf.org.

The IETF = Secretariat


= --Apple-Mail=_6B39B886-8D39-41F6-A323-780AEB1C13D6-- From nobody Mon Jul 8 08:37:54 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7C02A120285; Mon, 8 Jul 2019 08:37:50 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ki5VdOlbM1dh; Mon, 8 Jul 2019 08:37:47 -0700 (PDT) Received: from EUR04-VI1-obe.outbound.protection.outlook.com (mail-eopbgr80043.outbound.protection.outlook.com [40.107.8.43]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4BD93120221; Mon, 8 Jul 2019 08:37:43 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=SeALdWDaYE/22fxq3z22wEI9mVA4FhB3ctsVl/H7R+J+tcVZiUYlDtws8MfsV1b0DAYq9q0L/Sqpb45vgYNeTfJN+EPPG352Nh5cUtXHPvuX7jpU/yJiS0a6t9Qxlb0SDq1Di8oU0cr9HKF0KP0szQXiqGe3Sy5El2TvfCWdKVDpdhtEQcVyFUL66juLOXDYPGwHdlkLT4WxyxSyYvIybNw/zBpzWNTe9lKVcPOztXizJFv4KUI6KIlNo9YtcAeptySxHJQ37jyZuUJeIYuZGPQC0/BwRCANKrGxoNXVM8C4tg+pJVvhbSJcto4FaSWnpjMDDrIxLm+nq6QahouMXA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=53uOZ1MGBgox3c8Wn7SQB2DpNhyVZi9leuh2lKBKCKA=; b=bA+sjon4BQnwK9l5qQ3f8O34Mdi3QgDVtZ3+cHhnWLj7zRLO8els2Q5mZxiuDtYix5AZZS1poYRHOHUraE2vUPbjbbMEc+zcWWKR92Bd6/AUTqzxF6o8N0RWCnx8l5i/E34oBOi7npuKSXJQuPm8sH9odGHPLFMj1O99JAZs27+2HCIIzTct+F101b1XT41hncOXMfudtrdoCgTONBRKATlVroEJ6szOfAezTS8lDFfovWuRpp91QrZ8um6BVuQvN++fv1K9/YX1rnqWuFaCQbCxHQm5ojPOIj+U6PHh+HdhWHdH9vBczMBCjDJZCjZxvyoB1Txt6zDKZzpZQ+Mr/A== ARC-Authentication-Results: i=1; mx.microsoft.com 1;spf=pass smtp.mailfrom=ericsson.com;dmarc=pass action=none header.from=ericsson.com;dkim=pass header.d=ericsson.com;arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=53uOZ1MGBgox3c8Wn7SQB2DpNhyVZi9leuh2lKBKCKA=; b=Qovu0BYcgNGXvxP1VjKZZ9WpBwgUXXYFc46WgUIm3fLZC9Jpbzf0O3tHHpmKcOL9H2iMewsq9LZu7gtZn4wtiRgRjtZIO0CpFSOcOPSRjl0F3Y50NhLicSkUUUnUfPCce3c+zgAaJ74T5LlNTA5GTS6FmZdlmFh03Qy4voxJdu8= Received: from DB7PR07MB4697.eurprd07.prod.outlook.com (52.135.134.153) by DB7PR07MB5148.eurprd07.prod.outlook.com (20.178.43.22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2073.5; Mon, 8 Jul 2019 15:37:40 +0000 Received: from DB7PR07MB4697.eurprd07.prod.outlook.com ([fe80::4021:8bf4:d1fa:9ac3]) by DB7PR07MB4697.eurprd07.prod.outlook.com ([fe80::4021:8bf4:d1fa:9ac3%6]) with mapi id 15.20.2052.019; Mon, 8 Jul 2019 15:37:40 +0000 From: Mirja Kuehlewind To: "sy@informatik.uni-hamburg.de" , "quic@ietf.org" CC: "masque@ietf.org" Subject: Re: New Version Notification for draft-kuehlewind-quic-substrate-01.txt Thread-Topic: New Version Notification for draft-kuehlewind-quic-substrate-01.txt Thread-Index: AQHVNaMTndgHVjpmyUWDXGvTHf+Zpg== Date: Mon, 8 Jul 2019 15:37:40 +0000 Message-ID: <69672222-8C47-4390-A60E-3C7137BBF1F0@ericsson.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=mirja.kuehlewind@ericsson.com; x-originating-ip: [2001:16b8:2cc4:d100:4c0:3462:e129:448d] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 34ba434f-d593-489e-421b-08d703ba3662 x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600148)(711020)(4605104)(1401327)(2017052603328)(7193020); SRVR:DB7PR07MB5148; x-ms-traffictypediagnostic: DB7PR07MB5148: x-ms-exchange-purlcount: 7 x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8882; x-forefront-prvs: 00922518D8 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(396003)(366004)(136003)(346002)(39860400002)(376002)(51914003)(199004)(53754006)(189003)(2906002)(53546011)(6246003)(99286004)(33656002)(2501003)(478600001)(486006)(6306002)(6436002)(110136005)(305945005)(15650500001)(5660300002)(6506007)(53936002)(6512007)(44832011)(2616005)(7736002)(66574012)(66446008)(966005)(76116006)(73956011)(91956017)(316002)(6486002)(66946007)(64756008)(66556008)(66476007)(8676002)(102836004)(86362001)(71200400001)(4326008)(14444005)(46003)(14454004)(25786009)(229853002)(8936002)(81166006)(6116002)(81156014)(68736007)(186003)(256004)(36756003)(71190400001)(476003); DIR:OUT; SFP:1101; SCL:1; SRVR:DB7PR07MB5148; H:DB7PR07MB4697.eurprd07.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: ericsson.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam-message-info: EjR5fqHfCQ2rmZ6afYmcAWXw4st8I/lCnc32FTIYhjhAlkmNBy7E9geuVkmWxQFjMeLAVGopWsoYanUJJQEGgEeL93wpoxzVKP1tzduThFTLiug2ocl/utv0Pf/zYQs/RyYq7WaxkC/LDntg6XHeofF73rZmjKBQTaWAYKYdjziBHmYCzfLR0qd58k4U6sxZg4Q8R24/0ByVZ2IFh4HhidlLPqWXZFxT9U0b4u5oNrYqVHnaWAIKupBrXBA/jGPdKbODl0UpUfJB6Pfc58fwWQa6BqfpGaGquaLQ7lTddP6yL8wtWUdCidZCzgaJKn0ZB2dOtrshyMVVIRnQUkME2tf8dDs3FLwgjfQopJEhHMtDDGq2lEFBqnQPieOmJW4/G8MS83lWEByE40zE2rJ4LHg6J0FH1uSsvVb7t9JCUQw= Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: ericsson.com X-MS-Exchange-CrossTenant-Network-Message-Id: 34ba434f-d593-489e-421b-08d703ba3662 X-MS-Exchange-CrossTenant-originalarrivaltime: 08 Jul 2019 15:37:40.3936 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: mirja.kuehlewind@ericsson.com X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB7PR07MB5148 Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Jul 2019 15:37:51 -0000 SGkgRXJpaywNCg0KdGhhbmtzIGZvciB0aGUgcG9pbnRlci4gQ0MnaW5nIGFsc28gdGhlIG1hc3F1 ZSBsaXN0LiANCg0KSSB0aGluayB3ZSBhbHNvIG5lZWQgbG9vayBhIGJpdCBtb3JlIGludG8gc29j a3MgYWdhaW4uIFRoYXQncyBvbiBteSB0b2RvIGxpc3QuDQoNCk1pcmphDQoNCg0KDQrvu79PbiAw OC4wNy4xOSwgMTQ6MjMsICJRVUlDIG9uIGJlaGFsZiBvZiBFcmlrIFN5IiA8cXVpYy1ib3VuY2Vz QGlldGYub3JnIG9uIGJlaGFsZiBvZiBzeUBpbmZvcm1hdGlrLnVuaS1oYW1idXJnLmRlPiB3cm90 ZToNCg0KICAgIEhpIE1pcmphLA0KICAgIA0KICAgIGFub3RoZXIgdXNlIGNhc2UgZm9yIHByb3h5 aW5nIFFVSUMgaXMgdG8gc3BlZWQgdXAgUVVJQydzIGNvbm5lY3Rpb24NCiAgICBlc3RhYmxpc2ht ZW50IG9uIGhpZ2gtbGF0ZW5jeSBhY2Nlc3MgbmV0d29ya3MuDQogICAgDQogICAgQW4gYXJ0aWNs ZSB3aXRoIG1vcmUgZGV0YWlscyBjYW4gYmUgZm91bmQNCiAgICBoZXJlOiBodHRwczovL2FyeGl2 Lm9yZy9wZGYvMTkwNy4wMTI5MS5wZGYNCiAgICANCiAgICBCZXN0IHJlZ2FyZHMsDQogICAgRXJp aw0KICAgIA0KICAgIE9uIDcvOC8xOSAxNDowMSwgTWlyamEgS3VlaGxld2luZCB3cm90ZToNCiAg ICA+IEhpIGFsbCwNCiAgICA+DQogICAgPiB3ZSBwb3N0ZWQgYW4gdXBkYXRlIG9mIGRyYWZ0LWt1 ZWhsZXdpbmQtcXVpYy1zdWJzdHJhdGUgd2hpY2ggc29tZSBzbWFsbGVyIGVkaXRzLCBzb21lIG1v cmUgdGV4dCBvbiByZXF1aXJlbWVudHMgZm9yIGRpc2NvdmVyeSwgYW5kIGEgbmV3IHN1YiB1c2Ug Y2FzZSAodGhhbmtzIEx1Y2FzISkuDQogICAgPg0KICAgID4gRmVlZGJhY2sgd291bGQgYmUgdmVy eSB3ZWxjb21lISBBbHNvIG9uIGdpdGh1YiBoZXJlOg0KICAgID4NCiAgICA+IGh0dHBzOi8vcHJv dGVjdDIuZmlyZWV5ZS5jb20vdXJsP2s9Y2ZkM2Q2N2EtOTM1YTc5ZjctY2ZkMzk2ZTEtMGNjNDdh ZDkzZGUyLTI3YmIxOWJjN2Y4MDgyYzYmcT0xJnU9aHR0cHMlM0ElMkYlMkZnaXRodWIuY29tJTJG bWlyamFrJTJGZHJhZnQta3VlaGxld2luZC1xdWljLXN1YnN0cmF0ZQ0KICAgID4NCiAgICA+IE1p cmphDQogICAgPg0KICAgID4NCiAgICA+DQogICAgPiBPbiAwNS4wNy4xOSwgMTc6MzgsICJpbnRl cm5ldC1kcmFmdHNAaWV0Zi5vcmciIDxpbnRlcm5ldC1kcmFmdHNAaWV0Zi5vcmc+IHdyb3RlOg0K ICAgID4NCiAgICA+ICAgICANCiAgICA+ICAgICBBIG5ldyB2ZXJzaW9uIG9mIEktRCwgZHJhZnQt a3VlaGxld2luZC1xdWljLXN1YnN0cmF0ZS0wMS50eHQNCiAgICA+ICAgICBoYXMgYmVlbiBzdWNj ZXNzZnVsbHkgc3VibWl0dGVkIGJ5IE1pcmphIEt1ZWhsZXdpbmQgYW5kIHBvc3RlZCB0byB0aGUN CiAgICA+ICAgICBJRVRGIHJlcG9zaXRvcnkuDQogICAgPiAgICAgDQogICAgPiAgICAgTmFtZToJ CWRyYWZ0LWt1ZWhsZXdpbmQtcXVpYy1zdWJzdHJhdGUNCiAgICA+ICAgICBSZXZpc2lvbjoJMDEN CiAgICA+ICAgICBUaXRsZToJCVVzZSBDYXNlcyBhbmQgUmVxdWlyZW1lbnRzIGZvciBRVUlDIGFz IGEgU3Vic3RyYXRlDQogICAgPiAgICAgRG9jdW1lbnQgZGF0ZToJMjAxOS0wNy0wNQ0KICAgID4g ICAgIEdyb3VwOgkJSW5kaXZpZHVhbCBTdWJtaXNzaW9uDQogICAgPiAgICAgUGFnZXM6CQk5DQog ICAgPiAgICAgVVJMOiAgICAgICAgICAgIGh0dHBzOi8vd3d3LmlldGYub3JnL2ludGVybmV0LWRy YWZ0cy9kcmFmdC1rdWVobGV3aW5kLXF1aWMtc3Vic3RyYXRlLTAxLnR4dA0KICAgID4gICAgIFN0 YXR1czogICAgICAgICBodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1rdWVo bGV3aW5kLXF1aWMtc3Vic3RyYXRlLw0KICAgID4gICAgIEh0bWxpemVkOiAgICAgICBodHRwczov L3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQta3VlaGxld2luZC1xdWljLXN1YnN0cmF0ZS0wMQ0K ICAgID4gICAgIEh0bWxpemVkOiAgICAgICBodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2Rv Yy9odG1sL2RyYWZ0LWt1ZWhsZXdpbmQtcXVpYy1zdWJzdHJhdGUNCiAgICA+ICAgICBEaWZmOiAg ICAgICAgICAgaHR0cHM6Ly93d3cuaWV0Zi5vcmcvcmZjZGlmZj91cmwyPWRyYWZ0LWt1ZWhsZXdp bmQtcXVpYy1zdWJzdHJhdGUtMDENCiAgICA+ICAgICANCiAgICA+ICAgICBBYnN0cmFjdDoNCiAg ICA+ICAgICAgICBUQ1AgaXMgb2Z0ZW4gdXNlZCBhcyBhIHByb3h5aW5nIG9yIHR1bm5lbGluZyBw cm90b2NvbC4gIFFVSUMgaXMgYQ0KICAgID4gICAgICAgIG5ldywgZW1lcmdpbmcgdHJhbnNwb3J0 IHByb3RvY29sIGFuZCB0aGVyZSBpcyBhIHNpbWlsYXIgZXhwZWN0YXRpb24NCiAgICA+ICAgICAg ICB0aGF0IGl0IHRvbyB3aWxsIGJlIHVzZWQgYXMgYSBzdWJzdHJhdGUgb25jZSBpdCBpcyB3aWRl bHkgZGVwbG95ZWQuDQogICAgPiAgICAgICAgVXNpbmcgUVVJQyBpbnN0ZWFkIG9mIFRDUCBpbiBl eGlzdGluZyBzY2VuYXJpb3Mgd2lsbCBhbGxvdyBwcm94eWluZw0KICAgID4gICAgICAgIGFuZCB0 dW5uZWxpbmcgc2VydmljZXMgdG8gbWFpbnRhaW4gdGhlIGJlbmVmaXRzIG9mIFFVSUMgbmF0aXZl bHksDQogICAgPiAgICAgICAgd2l0aG91dCBkZWdyYWRpbmcgdGhlIHBlcmZvcm1hbmNlIGFuZCBz ZWN1cml0eSBjaGFyYWN0ZXJpc3RpY3MuICBRVUlDDQogICAgPiAgICAgICAgYWxzbyBvcGVucyB1 cCBuZXcgb3Bwb3J0dW5pdGllcyBmb3IgdGhlc2Ugc2VydmljZXMgdG8gaGF2ZSBsb3dlcg0KICAg ID4gICAgICAgIGxhdGVuY3kgYW5kIGJldHRlciBtdWx0aXN0cmVhbWluZyBzdXBwb3J0LiAgVGhp cyBkb2N1bWVudCBzdW1tYXJpemVzDQogICAgPiAgICAgICAgY3VycmVudCBhbmQgZnV0dXJlIHVz YWdlIHNjZW5hcmlvcyB0byBkZXJpdmUgcmVxdWlyZW1lbnRzIGZvciBRVUlDDQogICAgPiAgICAg ICAgYW5kIHRvIHByb3ZpZGUgYWRkaXRpb25hbCBwcm90b2NvbCBjb25zaWRlcmF0aW9ucy4NCiAg ICA+ICAgICANCiAgICA+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgDQogICAgPiAgICAg DQogICAgPiAgICAgDQogICAgPiAgICAgUGxlYXNlIG5vdGUgdGhhdCBpdCBtYXkgdGFrZSBhIGNv dXBsZSBvZiBtaW51dGVzIGZyb20gdGhlIHRpbWUgb2Ygc3VibWlzc2lvbg0KICAgID4gICAgIHVu dGlsIHRoZSBodG1saXplZCB2ZXJzaW9uIGFuZCBkaWZmIGFyZSBhdmFpbGFibGUgYXQgdG9vbHMu aWV0Zi5vcmcuDQogICAgPiAgICAgDQogICAgPiAgICAgVGhlIElFVEYgU2VjcmV0YXJpYXQNCiAg ICA+ICAgICANCiAgICA+ICAgICANCiAgICA+DQogICAgDQogICAgDQoNCg== From nobody Mon Jul 8 14:34:34 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B8040120280 for ; Mon, 8 Jul 2019 14:34:15 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.703 X-Spam-Level: X-Spam-Status: No, score=-0.703 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, PDS_NO_HELO_DNS=1.295, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zOS-IVIhoGtl for ; Mon, 8 Jul 2019 14:34:14 -0700 (PDT) Received: from mail-wr1-x42e.google.com (mail-wr1-x42e.google.com [IPv6:2a00:1450:4864:20::42e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B92AF1201D0 for ; Mon, 8 Jul 2019 14:34:13 -0700 (PDT) Received: by mail-wr1-x42e.google.com with SMTP id c2so18677243wrm.8 for ; Mon, 08 Jul 2019 14:34:13 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=HCfe1g3eLrN7XQ3K5D7ojqS0eP0MdjoL14CCf98BzPk=; b=Vk7zivNZqNjivvT13hKEXtfD47oCRKdtrjXfgpjHs1aTLjcTgTWbLynP417BCfup9z kvOKXwgf36zkS+KBUVFMY6A7atynrJ2H7b0zVVLptDYwt56ubmQpTWFPIv7Nk2kw9OIs 0a4WbBMmB3PegunmIQbxl6u2p5JQ1jYY7oung9LnC2LHCQqQZ4T2azYv0X2det/Qt2DR aT+7J1wVuatNFyNmK7fPYPsAw+v84GGqy621uFOsCdiDJR+fV729txoCgRDvKiz8MCot Zqf/gdrtYqxGVoolDKm0n7H9ZbRMrNi8KCA5MLJalENSFiYLgWzranb+KtKDBYwtypFQ nMUg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=HCfe1g3eLrN7XQ3K5D7ojqS0eP0MdjoL14CCf98BzPk=; b=rS9PJX6V1lLmm6/Igx2eqgrrflhlhQ/RdL00hCWDrghw90W8Q9ug02i061lbbXkRDS ofhmITgY59kTdXs+G3w9JtYRGEhse4F16L/X27WwYhFWRQceVyJJkj1ktbNTCAURAGWy 4Ox3hW7XR1zCbqxKc+T30+PL2oqkNTue6IXc7e48SuwK76BoFPOMWwYjMk5k0Ow1vMNT LnoDcf4fgkNcOrfk7wR7b80pBDasDzwSnYI0pjQcZMHJgvsRuD2zHRu9Gh0QgrO5ggxb vzJ6stg/zipzIfvMb9WSIt0AuL662sYe7CVtccXBqxOAuQ9VmEQ/DJm0kacTfN8NWjH+ wgew== X-Gm-Message-State: APjAAAUYqzmUbAQj6eF+W3yYaW5o+RUwGvhvbFKgALdey0MFe1sNG1cV sOrekvnRNL4TN/pK1bK8YhjET9XKFMtNKr2E08sHXMmC X-Google-Smtp-Source: APXvYqyljYIQ9oA3KrQnGwxkFwtA45MVl0T0r/rBo/0Y1JkCUs3CDNiagMWinCvAmySAMQHdg3IRvWIBZar6r5+3OHU= X-Received: by 2002:adf:f646:: with SMTP id x6mr15905214wrp.18.1562621651969; Mon, 08 Jul 2019 14:34:11 -0700 (PDT) MIME-Version: 1.0 From: Martin Duke Date: Mon, 8 Jul 2019 14:34:00 -0700 Message-ID: Subject: Handshake timeout failures? To: IETF QUIC WG Content-Type: multipart/alternative; boundary="0000000000007beda0058d32342c" Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Jul 2019 21:34:24 -0000 --0000000000007beda0058d32342c Content-Type: text/plain; charset="UTF-8" Is there somewhere in the drafts where we provide suggestions about how to time out connections when not yet established? I believe the Idle Timeout section applies specifically to established connections. This need not be intensely prescriptive, but it would be nice to have some guidelines on how not to fail too quickly. --0000000000007beda0058d32342c Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Is there somewhere in the drafts where we provide sug= gestions about how to time out connections when not yet established? I beli= eve the Idle Timeout section applies specifically to established connection= s.

This need not be intensely prescriptive, but it= would be nice to have some guidelines on how not to fail too quickly.
--0000000000007beda0058d32342c-- From nobody Mon Jul 8 14:53:47 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0D185120324 for ; Mon, 8 Jul 2019 14:53:39 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id crzyEGGVrqCu for ; Mon, 8 Jul 2019 14:53:35 -0700 (PDT) Received: from NAM04-SN1-obe.outbound.protection.outlook.com (mail-eopbgr700095.outbound.protection.outlook.com [40.107.70.95]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8BE38120315 for ; Mon, 8 Jul 2019 14:53:35 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=Vr7jK+O+QdiuPmDCxnapqUijON+GhuMsmuZkiUF8Tmsv0fvVebTLEyFJprtu1ND1YQxFfGJAdTmyj6erpX+EHXW9ZWl6UxsKmwK7Tt5hRCw/kMXP5/htRxbhD3Nk7BHwyfVMhBP3wLSHM+WIAUOmwvsDt6qjEYj0vwTO2oIWKqTHuv5eZxK4K+IZvE41OGjLWj/brPJapE6TC9P7AFgRSare0Ci2nfjpPVwVExbIpsg7d0Z2Rh3kEdqEj0QvsT+if7NBN77PiQxTB88UL00HQNEyG4fN94YrGQV2bsp0oTvkFIvlCVj0NlrQJCGMtnbosWjnvV0HevHTBy1Iu0sEdw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=uAVxRPDBpYbsNsgSFRyFjKxm2I0aVLo0O2LgOvvx23Q=; b=R51KPezLK9N55+8jusMpoLRlGwwcZsvFYGX5kDg1Eu8NWmnZgSp6GKbuCg+UU/F/GK5f91baO5UeSzS3d6hziRD6/YxpYZgqErwkU9ySLpS+fv4I8quEqTifqWMdaK+XWm8VLPxuVENpxi68BPIvywEKrSCmn9pz8rmVk2xeBuvLwsQcCU6+xBEw3AhdCPE8usuZs5eloZ+wF/1kzsh21JjWR88i/mc+JfXVNtdjDVFc/P4r3ys8LN+hYRjS0VCYgckdK8ClpVAn6lr9E08rJ6u8fO7MRyyF1CQUqj/E4uzDHgZa9LPuDW30Nopw42G4VyOR7WJFyb9kWz70AsN9Zw== ARC-Authentication-Results: i=1; mx.microsoft.com 1;spf=pass smtp.mailfrom=microsoft.com;dmarc=pass action=none header.from=microsoft.com;dkim=pass header.d=microsoft.com;arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=uAVxRPDBpYbsNsgSFRyFjKxm2I0aVLo0O2LgOvvx23Q=; b=CQIBB5vgmP+rNP7JOe+AVoEY2SLBtS8+u0Xk1VqVnFpmPlVIWxmqSUhwBVE/NQ5oIz3oqYtUCrPYRQdv8BT3V71S6wE3CnURkABlyWHzSgn6mVOmrJr9Dqj6CpRlGyjBa1NEF64i2TG6LobIpvwyyio30rXCmqU2kVzCvg7Ubik= Received: from BYAPR21MB1334.namprd21.prod.outlook.com (20.179.60.208) by BYAPR21MB1192.namprd21.prod.outlook.com (20.179.56.210) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2073.2; Mon, 8 Jul 2019 21:53:33 +0000 Received: from BYAPR21MB1334.namprd21.prod.outlook.com ([fe80::95a6:b32d:be2b:70ba]) by BYAPR21MB1334.namprd21.prod.outlook.com ([fe80::95a6:b32d:be2b:70ba%4]) with mapi id 15.20.2094.001; Mon, 8 Jul 2019 21:53:33 +0000 From: Nick Banks To: Martin Duke , IETF QUIC WG Subject: RE: Handshake timeout failures? Thread-Topic: Handshake timeout failures? Thread-Index: AQHVNdUbPbjwKYKI0ka0IL01UxK0H6bBQuj7 Date: Mon, 8 Jul 2019 21:53:33 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=nibanks@microsoft.com; x-originating-ip: [70.191.217.224] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 3a17fdab-7e98-4548-0f89-08d703eeb8fa x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600148)(711020)(4605104)(1401327)(4618075)(2017052603328)(7193020); SRVR:BYAPR21MB1192; x-ms-traffictypediagnostic: BYAPR21MB1192: x-ms-exchange-purlcount: 1 x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-forefront-prvs: 00922518D8 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(4636009)(39860400002)(366004)(346002)(136003)(376002)(396003)(199004)(189003)(3846002)(66946007)(7116003)(2906002)(71190400001)(606006)(4744005)(53546011)(8990500004)(6506007)(5660300002)(486006)(99286004)(14454004)(86362001)(25786009)(256004)(6116002)(91956017)(74316002)(53936002)(6306002)(10290500003)(478600001)(9686003)(7736002)(10090500001)(54896002)(55016002)(236005)(6246003)(6436002)(11346002)(33656002)(8936002)(446003)(186003)(68736007)(26005)(476003)(102836004)(81166006)(81156014)(8676002)(66476007)(316002)(3480700005)(76176011)(66446008)(66556008)(110136005)(66066001)(73956011)(71200400001)(64756008)(7696005)(22452003)(76116006)(52536014)(229853002); DIR:OUT; SFP:1102; SCL:1; SRVR:BYAPR21MB1192; H:BYAPR21MB1334.namprd21.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam-message-info: Ac6+56y4MbABkIb6gJn+C/kTQDDXI5Z8mhM29Lj1I+JwOGrHcGdfxVShUT23ueSz/kkSFksGSjXC6gU7cxjmzYEXwr9oXF6xAE0TuDDBjReEMUi4IJ2dJ78UscXNRLy12iwA1rdx7gLq7Q3RFj93+gR4CrYtI8a80lOBRBBSNKBUwIX/27OjfrY/uCQAtMmJ+V02y5WbDg+0gJY+3D/N31xa01zGIS4cYOc81YUjGVJelg5qy4utfjdrcklLGU/BbMPP8ix0Nw2sHJacFaRmLkpsXvOHB41QK+3Mji5/iI3+0GxpjzswkIcSy1y/SjbXgdhzvILaT0phw/Lj4lQhuRbLarG28StwNkM/ql2NS1orhGJBk5UliophjD/9G+oVo/7Qrbd/+iwfnKMJnIsrwUIolcDp3jP3D7GpU0C/gR0= Content-Type: multipart/alternative; boundary="_000_BYAPR21MB133486ABBED83A6907776708B3F60BYAPR21MB1334namp_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: 3a17fdab-7e98-4548-0f89-08d703eeb8fa X-MS-Exchange-CrossTenant-originalarrivaltime: 08 Jul 2019 21:53:33.5126 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: nibanks@microsoft.com X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR21MB1192 Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Jul 2019 21:53:46 -0000 --_000_BYAPR21MB133486ABBED83A6907776708B3F60BYAPR21MB1334namp_ Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable The WG talked about dead path timeouts for a little bit (in Tokyo I think) = but, at the time, decided to leave it to implementations. I personally thin= k having a dead path timeout description in the text would be a good idea. = I=92d be happy to revisit the discussion. - Nick Sent from Mail for Window= s 10 [HxS - 18936 - 16.0.11901.20042] ________________________________ From: QUIC on behalf of Martin Duke Sent: Monday, July 8, 2019 4:34:00 PM To: IETF QUIC WG Subject: Handshake timeout failures? Is there somewhere in the drafts where we provide suggestions about how to = time out connections when not yet established? I believe the Idle Timeout s= ection applies specifically to established connections. This need not be intensely prescriptive, but it would be nice to have some = guidelines on how not to fail too quickly. --_000_BYAPR21MB133486ABBED83A6907776708B3F60BYAPR21MB1334namp_ Content-Type: text/html; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable

The WG talked about dead path timeouts for a little = bit (in Tokyo I think) but, at the time, decided to leave it to implementat= ions. I personally think having a dead path timeout description in the text= would be a good idea. I=92d be happy to revisit the discussion.

 

- Nick

 

Sent from Mail for Windows 10

[HxS - 18936 - 16.0.11901.20042]

 

From: QUIC <quic-bounces= @ietf.org> on behalf of Martin Duke <martin.h.duke@gmail.com>
Sent: Monday, July 8, 2019 4:34:00 PM
To: IETF QUIC WG <quic@ietf.org>
Subject: Handshake timeout failures?
 
Is there somewhere in the drafts where we provide suggestions about ho= w to time out connections when not yet established? I believe the Idle Time= out section applies specifically to established connections.

This need not be intensely prescriptive, but it would be nice to have = some guidelines on how not to fail too quickly.
--_000_BYAPR21MB133486ABBED83A6907776708B3F60BYAPR21MB1334namp_-- From nobody Mon Jul 8 16:43:41 2019 Return-Path: X-Original-To: quic@ietf.org Delivered-To: quic@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id BBBBD1203E1; Mon, 8 Jul 2019 16:43:29 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: quic@ietf.org Subject: I-D Action: draft-ietf-quic-invariants-05.txt X-Test-IDTracker: no X-IETF-IDTracker: 6.98.3 Auto-Submitted: auto-generated Precedence: bulk Reply-To: quic@ietf.org Message-ID: <156262940966.1043.13169802461448855013@ietfa.amsl.com> Date: Mon, 08 Jul 2019 16:43:29 -0700 Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Jul 2019 23:43:37 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the QUIC WG of the IETF. Title : Version-Independent Properties of QUIC Author : Martin Thomson Filename : draft-ietf-quic-invariants-05.txt Pages : 9 Date : 2019-07-08 Abstract: This document defines the properties of the QUIC transport protocol that are expected to remain unchanged over time as new versions of the protocol are developed. Note to Readers Discussion of this draft takes place on the QUIC working group mailing list (quic@ietf.org), which is archived at https://mailarchive.ietf.org/arch/search/?email_list=quic [1]. Working Group information can be found at https://github.com/quicwg [2]; source code and issues list for this draft can be found at https://github.com/quicwg/base-drafts/labels/-invariants [3]. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-quic-invariants/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-quic-invariants-05 https://datatracker.ietf.org/doc/html/draft-ietf-quic-invariants-05 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-quic-invariants-05 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Mon Jul 8 16:43:54 2019 Return-Path: X-Original-To: quic@ietf.org Delivered-To: quic@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 6C6401203BD; Mon, 8 Jul 2019 16:43:31 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: quic@ietf.org Subject: I-D Action: draft-ietf-quic-tls-21.txt X-Test-IDTracker: no X-IETF-IDTracker: 6.98.3 Auto-Submitted: auto-generated Precedence: bulk Reply-To: quic@ietf.org Message-ID: <156262941132.808.5105396108303270287@ietfa.amsl.com> Date: Mon, 08 Jul 2019 16:43:31 -0700 Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Jul 2019 23:43:38 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the QUIC WG of the IETF. Title : Using TLS to Secure QUIC Authors : Martin Thomson Sean Turner Filename : draft-ietf-quic-tls-21.txt Pages : 44 Date : 2019-07-08 Abstract: This document describes how Transport Layer Security (TLS) is used to secure QUIC. Note to Readers Discussion of this draft takes place on the QUIC working group mailing list (quic@ietf.org), which is archived at https://mailarchive.ietf.org/arch/search/?email_list=quic [1]. Working Group information can be found at https://github.com/quicwg [2]; source code and issues list for this draft can be found at https://github.com/quicwg/base-drafts/labels/-tls [3]. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-quic-tls/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-quic-tls-21 https://datatracker.ietf.org/doc/html/draft-ietf-quic-tls-21 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-quic-tls-21 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Mon Jul 8 16:44:07 2019 Return-Path: X-Original-To: quic@ietf.org Delivered-To: quic@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 72F631203CB; Mon, 8 Jul 2019 16:43:34 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: quic@ietf.org Subject: I-D Action: draft-ietf-quic-transport-21.txt X-Test-IDTracker: no X-IETF-IDTracker: 6.98.3 Auto-Submitted: auto-generated Precedence: bulk Reply-To: quic@ietf.org Message-ID: <156262941440.745.8442074996107512869@ietfa.amsl.com> Date: Mon, 08 Jul 2019 16:43:34 -0700 Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Jul 2019 23:43:45 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the QUIC WG of the IETF. Title : QUIC: A UDP-Based Multiplexed and Secure Transport Authors : Jana Iyengar Martin Thomson Filename : draft-ietf-quic-transport-21.txt Pages : 147 Date : 2019-07-08 Abstract: This document defines the core of the QUIC transport protocol. Accompanying documents describe QUIC's loss detection and congestion control and the use of TLS for key negotiation. Note to Readers Discussion of this draft takes place on the QUIC working group mailing list (quic@ietf.org), which is archived at . Working Group information can be found at ; source code and issues list for this draft can be found at . The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-quic-transport/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-quic-transport-21 https://datatracker.ietf.org/doc/html/draft-ietf-quic-transport-21 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-quic-transport-21 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Mon Jul 8 16:48:20 2019 Return-Path: X-Original-To: quic@ietf.org Delivered-To: quic@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id AA6AE120366; Mon, 8 Jul 2019 16:48:04 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: quic@ietf.org Subject: I-D Action: draft-ietf-quic-qpack-09.txt X-Test-IDTracker: no X-IETF-IDTracker: 6.98.3 Auto-Submitted: auto-generated Precedence: bulk Reply-To: quic@ietf.org Message-ID: <156262968460.872.5345670273469026997@ietfa.amsl.com> Date: Mon, 08 Jul 2019 16:48:04 -0700 Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Jul 2019 23:48:11 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the QUIC WG of the IETF. Title : QPACK: Header Compression for HTTP/3 Authors : Charles 'Buck' Krasic Mike Bishop Alan Frindell Filename : draft-ietf-quic-qpack-09.txt Pages : 37 Date : 2019-07-08 Abstract: This specification defines QPACK, a compression format for efficiently representing HTTP header fields, to be used in HTTP/3. This is a variation of HPACK header compression that seeks to reduce head-of-line blocking. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-quic-qpack/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-quic-qpack-09 https://datatracker.ietf.org/doc/html/draft-ietf-quic-qpack-09 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-quic-qpack-09 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Mon Jul 8 17:05:20 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1E1D51203D1 for ; Mon, 8 Jul 2019 17:05:07 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.701 X-Spam-Level: X-Spam-Status: No, score=-2.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=lowentropy.net header.b=tf3oFEly; dkim=pass (2048-bit key) header.d=messagingengine.com header.b=Y/QGxw4v Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SFIfftd1NHNc for ; Mon, 8 Jul 2019 17:05:05 -0700 (PDT) Received: from out4-smtp.messagingengine.com (out4-smtp.messagingengine.com [66.111.4.28]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5C2711203D3 for ; Mon, 8 Jul 2019 17:05:05 -0700 (PDT) Received: from compute1.internal (compute1.nyi.internal [10.202.2.41]) by mailout.nyi.internal (Postfix) with ESMTP id 822E022091 for ; Mon, 8 Jul 2019 20:05:04 -0400 (EDT) Received: from imap2 ([10.202.2.52]) by compute1.internal (MEProxy); Mon, 08 Jul 2019 20:05:04 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lowentropy.net; h=mime-version:message-id:date:from:to:subject:content-type; s= fm2; bh=b4kKUDpmlMyt2H6lUa2MJaTZybcz3AYJLZFG7RgC/yk=; b=tf3oFEly hbjb20X7oc+dI6YzAZpjl36s2jmMQD1nQPvkuOpJ4IMhj+o1gz4dWIJq94KMQ461 M66fRTYyivBJxX3KXNyi4Tsv+sZ2IGJbRV2c4+tWc4LydzQ21ACEuH/fs6vwm884 UKwX3ycSLgDGx+MTMGTVFgaaPnlaVE0G1+OaSAUH0UgtTq0oX4OdwuHKt8vUsKI5 AUJzFXfVGGKTpQnmrccaX4Qsl3lydzWL7E8mfDmeBqtnycBeD6EgILXZWxUNwM1l /mKwmdYDXQurszxLpG5KqcNgG7jqKqAUlJzdUWhMiROSPpe1jWrgjZTT2Rzc/G8i vrnT52z0N7Bi3Q== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=content-type:date:from:message-id :mime-version:subject:to:x-me-proxy:x-me-proxy:x-me-sender :x-me-sender:x-sasl-enc; s=fm3; bh=b4kKUDpmlMyt2H6lUa2MJaTZybcz3 AYJLZFG7RgC/yk=; b=Y/QGxw4vDelyx7B4ikqPsw8f2uF9JCwVBdVUqF+i2d1xc tmjCet+NPPENle2uqRH92T41z8iqBFYo0ju2QEUJu/YG5nbCf9EQw5UBkSw/l583 Ky+E9JXo1pqjQfVY157Zu7UMJ+0sEpMmbI04n1G/7YeorycagnLeS3oBFNhf8emP XpLfRBrz3oJYUXOoxGS7IaPLOnkEsU9c+GBdoWZB96pa2UvoNzVGb9ZTHyJVhP7i sYFBef7hqTftgCHMLef9HbbRpm0McL/xsxH0ei+CAAUSdC6yCodY+kIM9lG6dKKi TU/5AXHKJXbMifXR25Tnr01x1hSZP9TMIskJixdrg== X-ME-Sender: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeduvddrgedugddvkecutefuodetggdotefrodftvf curfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfghnecu uegrihhlohhuthemuceftddtnecunecujfgurhepofgfggfkfffhvffutgesthdtredtre ertdenucfhrhhomhepfdforghrthhinhcuvfhhohhmshhonhdfuceomhhtsehlohifvghn thhrohhphidrnhgvtheqnecurfgrrhgrmhepmhgrihhlfhhrohhmpehmtheslhhofigvnh htrhhophihrdhnvghtnecuvehluhhsthgvrhfuihiivgeptd X-ME-Proxy: Received: by mailuser.nyi.internal (Postfix, from userid 501) id 39EA0E0368; Mon, 8 Jul 2019 20:05:04 -0400 (EDT) X-Mailer: MessagingEngine.com Webmail Interface User-Agent: Cyrus-JMAP/3.1.6-731-g19d3b16-fmstable-20190627v1 Mime-Version: 1.0 Message-Id: <0e87bb0b-0298-4f93-92f3-7e2883ba7750@www.fastmail.com> Date: Tue, 09 Jul 2019 10:05:06 +1000 From: "Martin Thomson" To: quic@ietf.org Subject: -21 drafts out, missing important changes Content-Type: text/plain Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Jul 2019 00:05:16 -0000 For some reason, PR 2749, one of the main reasons we are publishing draft-21, didn't get merged. Don't ask me how that happened. Worse, the draft submission deadline just passed, so fixing this might get complicated. Stay tuned. From nobody Mon Jul 8 19:10:38 2019 Return-Path: X-Original-To: quic@ietf.org Delivered-To: quic@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 413C81202AD; Mon, 8 Jul 2019 19:10:19 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: quic@ietf.org Subject: I-D Action: draft-ietf-quic-recovery-21.txt X-Test-IDTracker: no X-IETF-IDTracker: 6.98.3 Auto-Submitted: auto-generated Precedence: bulk Reply-To: quic@ietf.org Message-ID: <156263821916.808.6544695002507067021@ietfa.amsl.com> Date: Mon, 08 Jul 2019 19:10:19 -0700 Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Jul 2019 02:10:30 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the QUIC WG of the IETF. Title : QUIC Loss Detection and Congestion Control Authors : Jana Iyengar Ian Swett Filename : draft-ietf-quic-recovery-21.txt Pages : 42 Date : 2019-07-08 Abstract: This document describes loss detection and congestion control mechanisms for QUIC. Note to Readers Discussion of this draft takes place on the QUIC working group mailing list (quic@ietf.org), which is archived at https://mailarchive.ietf.org/arch/search/?email_list=quic [1]. Working Group information can be found at https://github.com/quicwg [2]; source code and issues list for this draft can be found at https://github.com/quicwg/base-drafts/labels/-recovery [3]. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-quic-recovery/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-quic-recovery-21 https://datatracker.ietf.org/doc/html/draft-ietf-quic-recovery-21 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-quic-recovery-21 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Mon Jul 8 19:23:05 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DF0A81202F8 for ; Mon, 8 Jul 2019 19:23:02 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -16.204 X-Spam-Level: X-Spam-Status: No, score=-16.204 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, ENV_AND_HDR_SPF_MATCH=-0.5, HTML_MESSAGE=0.001, PDS_NO_HELO_DNS=1.295, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5, USER_IN_DEF_SPF_WL=-7.5] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZK3tYg1WdtUu for ; Mon, 8 Jul 2019 19:23:01 -0700 (PDT) Received: from mail-wr1-x430.google.com (mail-wr1-x430.google.com [IPv6:2a00:1450:4864:20::430]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1F0FB1202F2 for ; Mon, 8 Jul 2019 19:23:01 -0700 (PDT) Received: by mail-wr1-x430.google.com with SMTP id c2so19178068wrm.8 for ; Mon, 08 Jul 2019 19:23:01 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=NdvCDdbtxrk2UAruy1U8Qkpbv8js4Y/RHNBc8NsOpXo=; b=Y3qvE4S3qgzCUo/kgL7xzJ+N/AiIPraxmorl1QpV2X73Htyx93sDQtXUkfkd0zfVjA UQ6fLdFaLY6ox4rEBt3YfVSDq9ptUyY42XaX8fOWCm9zxaAhNTU9h+yb/jisTkWsxZC9 bPrrc8Y2MnRjBuCi8OEOOf9SIO1SqJUzi3fbBLdNV5Cw0s/u+tKctmQUN4YDPg3zN8ok EPJNtrgPErXkrmqNnXisKkZwXsmGr+tqn3twyQM5In8ECTE38INbHxk0yL2TnWMIw3Kv 2slRlX3uKiGUA9drO3RxTE65jwF66IxFHN/2ty/Hdqapw1bbpdorHAUVPkUEe3o0S9vP lO1g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=NdvCDdbtxrk2UAruy1U8Qkpbv8js4Y/RHNBc8NsOpXo=; b=c5HVel83DHGJd1nJu6OdEX5l/QijJmOQtn4ozaIzNfilIpGyaoVXriAkIRagX6S8Hv 46Mj5ZCd5/YTD8VJoZZxVREWjB24997IerS06QLb+pOyl8CCluVnxT7GdxwjeJPaj7QG VHcSqBsitdnJYA6NcbpoR3eFtA2QYxvQr71zcKhG3gIDhwrI2HNcy+YqhAlH7TJrl9Yp yoSn4wy2gR8UuFdIYadW/DQ2c9p++YMVfzqUtN3VRSE6a7BTC5r5nkV8HzZore9DNxrq PpoIAjYuxDDOrBecTmbjKpZXyAr3GwHuSPM0rtq3wERzgc63o4+n0cv5nXVc5DEClTdk 3B3Q== X-Gm-Message-State: APjAAAVmAx1rHTo1d1KGtAA55ejQtrJ74dK+dVTiHFBzSB4Kewlc4aTy fbq2h2tnjsgJgKMkMgCSqGCJ1Ry2ASD1xXazS317zQ== X-Google-Smtp-Source: APXvYqwMVTitInAFWOwai7HsPD0EI8xFzgEyZEOQxr5f+DAnh8TE4rriDjIM3RbMDnOTUazHL6r5czMp/UqpU3AWq9I= X-Received: by 2002:a5d:62c9:: with SMTP id o9mr20099481wrv.186.1562638979345; Mon, 08 Jul 2019 19:22:59 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: Ian Swett Date: Mon, 8 Jul 2019 22:22:47 -0400 Message-ID: Subject: Re: Handshake timeout failures? To: Nick Banks Cc: Martin Duke , IETF QUIC WG Content-Type: multipart/alternative; boundary="0000000000004715d9058d363dfa" Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Jul 2019 02:23:03 -0000 --0000000000004715d9058d363dfa Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable I think some text on both a handshake timeout(that's presumably shorter than a standard idle timeout) and a dead path timeout would be helpful, even if it's not normative. On Mon, Jul 8, 2019 at 5:56 PM Nick Banks wrote: > The WG talked about dead path timeouts for a little bit (in Tokyo I think= ) > but, at the time, decided to leave it to implementations. I personally > think having a dead path timeout description in the text would be a good > idea. I=E2=80=99d be happy to revisit the discussion. > > > > - Nick > > > > Sent from Mail for > Windows 10 > > [HxS - 18936 - 16.0.11901.20042] > > > ------------------------------ > *From:* QUIC on behalf of Martin Duke < > martin.h.duke@gmail.com> > *Sent:* Monday, July 8, 2019 4:34:00 PM > *To:* IETF QUIC WG > *Subject:* Handshake timeout failures? > > Is there somewhere in the drafts where we provide suggestions about how t= o > time out connections when not yet established? I believe the Idle Timeout > section applies specifically to established connections. > > This need not be intensely prescriptive, but it would be nice to have som= e > guidelines on how not to fail too quickly. > --0000000000004715d9058d363dfa Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
I think some text on both a handshake timeout(that's p= resumably shorter than a standard idle timeout) and a dead path timeout wou= ld be helpful, even if it's not normative.

On Mon, Jul 8, 2019 at 5:56 P= M Nick Banks <nibanks=3D40microsoft.com@dmarc.ietf.org> wrote:

The WG talked about dead path timeouts for a little = bit (in Tokyo I think) but, at the time, decided to leave it to implementat= ions. I personally think having a dead path timeout description in the text= would be a good idea. I=E2=80=99d be happy to revisit the discussion.

=C2=A0

- Nick

=C2=A0

Sent from Mail for Windows 10

[HxS - 18936 - 16.0.11901.20042]

=C2=A0

Fro= m: QUIC <= quic-bounces@ietf.org> on behalf of Martin Duke <martin.h.duke@gmail.com>= ;
Sent: Monday, July 8, 2019 4:34:00 PM
To: IETF QUIC WG <quic@ietf.org>
Subject: Handshake timeout failures?
=C2=A0
Is there somewhere in the drafts where we provide suggestions about ho= w to time out connections when not yet established? I believe the Idle Time= out section applies specifically to established connections.

This need not be intensely prescriptive, but it would be nice to have = some guidelines on how not to fail too quickly.
--0000000000004715d9058d363dfa-- From nobody Mon Jul 8 21:45:23 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BBBAC1200D8 for ; Mon, 8 Jul 2019 21:45:16 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.7 X-Spam-Level: X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=akamai.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JOm6yE7ip_W1 for ; Mon, 8 Jul 2019 21:45:14 -0700 (PDT) Received: from mx0a-00190b01.pphosted.com (mx0a-00190b01.pphosted.com [IPv6:2620:100:9001:583::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D58BA120091 for ; Mon, 8 Jul 2019 21:45:14 -0700 (PDT) Received: from pps.filterd (m0050095.ppops.net [127.0.0.1]) by m0050095.ppops.net-00190b01. (8.16.0.27/8.16.0.27) with SMTP id x694g7I1026946; Tue, 9 Jul 2019 05:45:08 +0100 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=akamai.com; h=from : to : cc : subject : date : message-id : content-type : content-transfer-encoding : mime-version; s=jan2016.eng; bh=Qvrnx/R1wyWTu3acXJ+zc4cJ2rk+6Be57OdoZd4GNTA=; b=QvZir4yJcjg6r2+L7rPlS+BJMgpdQBB8pVo68nveuISLX//ovChu9MVlN1ZOsbG3I2O8 +88mzXQ57fGpLyA1zTD4K1i4reBz3MCyBflzPWBGDVEoKKjPx+4Hu8Inlo88FjODnHaQ W2fwC3xQ/Xia2H39yVvamDZ/jhAF/V3mwq8P42TVGLwJwr3qrioYDxlyaxWR9gPjKCtc DHY3pvn5HS8yQDHuYiWx9zAJeAu/sgZIz6TzfZ0QF3fwNa6cCt77zubpXouVVN0QGzpC O+4SUdV7tv0CfSHtZDjV6RrPKK/TwMaKXMgnmvhT78EG0lrIi4CdnRLvzaW5aO7TnX3Y cg== Received: from prod-mail-ppoint1 (prod-mail-ppoint1.akamai.com [184.51.33.18] (may be forged)) by m0050095.ppops.net-00190b01. with ESMTP id 2tjk633kfn-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Tue, 09 Jul 2019 05:45:07 +0100 Received: from pps.filterd (prod-mail-ppoint1.akamai.com [127.0.0.1]) by prod-mail-ppoint1.akamai.com (8.16.0.27/8.16.0.27) with SMTP id x694Vpie016184; Tue, 9 Jul 2019 00:45:06 -0400 Received: from email.msg.corp.akamai.com ([172.27.27.25]) by prod-mail-ppoint1.akamai.com with ESMTP id 2tjpyx0thf-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT); Tue, 09 Jul 2019 00:45:03 -0400 Received: from USTX2EX-DAG1MB5.msg.corp.akamai.com (172.27.27.105) by ustx2ex-dag1mb1.msg.corp.akamai.com (172.27.27.101) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Mon, 8 Jul 2019 23:44:17 -0500 Received: from USTX2EX-DAG1MB5.msg.corp.akamai.com ([172.27.27.105]) by ustx2ex-dag1mb5.msg.corp.akamai.com ([172.27.27.105]) with mapi id 15.00.1473.004; Mon, 8 Jul 2019 23:44:17 -0500 From: "Lubashev, Igor" To: Lars Eggert , Mark Nottingham , "quic@ietf.org" CC: "isabelle.hamchaoui@orange.com" , "alexandre.ferrieux@orange.com" Subject: Packet Loss Signaling for Encrypted Protocols - draft-ferrieuxhamchaoui-tsvwg-lossbits Thread-Topic: Packet Loss Signaling for Encrypted Protocols - draft-ferrieuxhamchaoui-tsvwg-lossbits Thread-Index: AdU2CmyJiha8kWgiTzSY5F1e75TnXw== Date: Tue, 9 Jul 2019 04:44:17 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [172.19.33.18] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2019-07-09_02:, , signatures=0 X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 suspectscore=0 malwarescore=0 phishscore=0 bulkscore=0 spamscore=0 mlxscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1810050000 definitions=main-1907090053 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2019-07-09_02:, , signatures=0 X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1015 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1810050000 definitions=main-1907090055 Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Jul 2019 04:45:17 -0000 Alexandre, Isabelle, and I have posted a draft on a method for endpoints to= signal packet loss to the path, while maintaining end user privacy and res= isting ossification. The method is protocol-independent, but of course you= get the most benefit by applying the method to encrypted transports, and Q= UIC is what people usually think of first in such context. The draft is not targeted at the QUIC WG specifically, since it is describi= ng a general method of such loss reporting. But we do mention QUIC, so the= WG may find it interesting. We would welcome feedback from the QUIC WG. Lars, Mark, I am sure the meeting agenda for Montreal is pretty tight, but = if the WG is interested, we are happy to have a quick QUIC-specific present= ation on this. Thank you! - Igor P.S. We've implemented this proposal in some Akamai servers and have been = using it to serve actual end-user QUIC traffic for a subset of Orange custo= mers. Orange implemented a passive observer that used this signal to detec= t and identify loss. We can share the high-level of the results and will s= hare the detailed analysis of the data and measurement techniques in maprg. --------------------- https://datatracker.ietf.org/doc/draft-ferrieuxhamchaoui-tsvwg-lossbits/ Abstract: This document describes a protocol-independent method that employs two bits to allow endpoints to signal packet loss in a way that can be used by network devices to measure and locate the source of the loss. The signaling method applies to all protocols with a protocol- specific way to identify packet loss. The method is especially valuable when applied to protocols that encrypt transport header and do not allow an alternative method for loss detection. From nobody Mon Jul 8 21:49:06 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F2BDA1200EC for ; Mon, 8 Jul 2019 21:49:04 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.7 X-Spam-Level: X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=mnot.net header.b=I0ic6fQ0; dkim=pass (2048-bit key) header.d=messagingengine.com header.b=0c5/uMgL Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DXN4EQ09zKEV for ; Mon, 8 Jul 2019 21:49:02 -0700 (PDT) Received: from out2-smtp.messagingengine.com (out2-smtp.messagingengine.com [66.111.4.26]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B7CA9120091 for ; Mon, 8 Jul 2019 21:49:02 -0700 (PDT) Received: from compute3.internal (compute3.nyi.internal [10.202.2.43]) by mailout.nyi.internal (Postfix) with ESMTP id D569722054; Tue, 9 Jul 2019 00:49:01 -0400 (EDT) Received: from mailfrontend1 ([10.202.2.162]) by compute3.internal (MEProxy); Tue, 09 Jul 2019 00:49:01 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mnot.net; h= content-type:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; s=fm3; bh=P aEGIKb673UujP9CeJ2fqZ2ETItOJsSeG1pR+6RNZ04=; b=I0ic6fQ0n2B++n5aq puBTb7QaSYQd20ZgD3bKiAbZtbhtQZ2DrdX7DwvD6Z1LZnCpsNe3uffxQc5VRoqN 1fkW8OXD7bYKbsFf6SRoJZoysaFQSIe175BIC3mcVk+sRwphBCEbrM9v2oU2eeEU 2veymOLDnbEBsNL69McRYdHGnLXD7CGk3+nx/JRD3jsHvkxpBiYSLijLezDkABjj 4PsPrIIZFrCARF6k6NwNsGdp2qfq9xoN17r1T/HuHT0dg3o98d1MPAhaBOgd9klL Gc1+JqEieKPUcTsYygXuxhf3l9Qi+WlMvS+AgmweLaXVVsGcYaSfoygvoUkQCLCV IwrbA== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :date:from:in-reply-to:message-id:mime-version:references :subject:to:x-me-proxy:x-me-proxy:x-me-sender:x-me-sender :x-sasl-enc; s=fm3; bh=PaEGIKb673UujP9CeJ2fqZ2ETItOJsSeG1pR+6RNZ 04=; b=0c5/uMgLZjcwlI7LlTZVrD5/N/A7Q9N1raJInlXdyQros8zfOipp1zzRw 347I+rwEk+z9HattCBXpOKzeQSoOZSUbh0fFTucdPNhZd0lZf70w8rJaDdB2OzEk 1ZJ144DLUAbYqXqJamHqW/a6kaap7l5nBxw6GZi5tTw7E0Mdh+gW78R3ot9skfQ0 9w6VUlIIVg0NrbsN7QS3Qh5S1cCOkDHOf4NA7V3tgQYN1ZYJ6G1GF6qfbCVKYZwb yQium+VPzuUQZt8Tqn8rLTQbcCxHUSCk5qYlQikg1vj+bSK62+rsQmRWBcDATg5U dbXfJBIydpmt2RiYeRLFapwnacLhQ== X-ME-Sender: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeduvddrgedugdekiecutefuodetggdotefrodftvf curfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfghnecu uegrihhlohhuthemuceftddtnecusecvtfgvtghiphhivghnthhsucdlqddutddtmdenuc fjughrpegtggfuhfgjfffgkfhfvffosehtqhhmtdhhtddvnecuhfhrohhmpeforghrkhcu pfhothhtihhnghhhrghmuceomhhnohhtsehmnhhothdrnhgvtheqnecuffhomhgrihhnpe hivghtfhdrohhrghdpmhhnohhtrdhnvghtnecukfhppedugeegrddufeeirddujeehrddv keenucfrrghrrghmpehmrghilhhfrhhomhepmhhnohhtsehmnhhothdrnhgvthenucevlh hushhtvghrufhiiigvpedt X-ME-Proxy: Received: from macbook-pro.mnot.net (unknown [144.136.175.28]) by mail.messagingengine.com (Postfix) with ESMTPA id 717DE8005B; Tue, 9 Jul 2019 00:48:58 -0400 (EDT) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Subject: Re: Packet Loss Signaling for Encrypted Protocols - draft-ferrieuxhamchaoui-tsvwg-lossbits From: Mark Nottingham In-Reply-To: Date: Tue, 9 Jul 2019 14:48:54 +1000 Cc: Lars Eggert , "quic@ietf.org" , "isabelle.hamchaoui@orange.com" , "alexandre.ferrieux@orange.com" Content-Transfer-Encoding: quoted-printable Message-Id: References: To: "Lubashev, Igor" X-Mailer: Apple Mail (2.3445.104.11) Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Jul 2019 04:49:05 -0000 Hi Igor, Thanks for that. Our agenda is indeed tight, so I'd recommend discussing = on the list and having side conversations in Montreal. Thanks, > On 9 Jul 2019, at 2:44 pm, Lubashev, Igor wrote: >=20 > Alexandre, Isabelle, and I have posted a draft on a method for = endpoints to signal packet loss to the path, while maintaining end user = privacy and resisting ossification. The method is protocol-independent, = but of course you get the most benefit by applying the method to = encrypted transports, and QUIC is what people usually think of first in = such context. >=20 > The draft is not targeted at the QUIC WG specifically, since it is = describing a general method of such loss reporting. But we do mention = QUIC, so the WG may find it interesting. We would welcome feedback from = the QUIC WG. >=20 > Lars, Mark, I am sure the meeting agenda for Montreal is pretty tight, = but if the WG is interested, we are happy to have a quick QUIC-specific = presentation on this. >=20 > Thank you! >=20 > - Igor >=20 > P.S. We've implemented this proposal in some Akamai servers and have = been using it to serve actual end-user QUIC traffic for a subset of = Orange customers. Orange implemented a passive observer that used this = signal to detect and identify loss. We can share the high-level of the = results and will share the detailed analysis of the data and measurement = techniques in maprg. >=20 > --------------------- >=20 > = https://datatracker.ietf.org/doc/draft-ferrieuxhamchaoui-tsvwg-lossbits/ >=20 > Abstract: > This document describes a protocol-independent method that employs > two bits to allow endpoints to signal packet loss in a way that can > be used by network devices to measure and locate the source of the > loss. The signaling method applies to all protocols with a = protocol- > specific way to identify packet loss. The method is especially > valuable when applied to protocols that encrypt transport header and > do not allow an alternative method for loss detection. -- Mark Nottingham https://www.mnot.net/ From nobody Mon Jul 8 23:34:51 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 50BDC120307 for ; Mon, 8 Jul 2019 23:34:49 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.7 X-Spam-Level: X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=mnot.net header.b=vtdDPG1X; dkim=pass (2048-bit key) header.d=messagingengine.com header.b=r/HqGsFj Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qJwO2ropScU5 for ; Mon, 8 Jul 2019 23:34:46 -0700 (PDT) Received: from out3-smtp.messagingengine.com (out3-smtp.messagingengine.com [66.111.4.27]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7DA9B1202F8 for ; Mon, 8 Jul 2019 23:34:46 -0700 (PDT) Received: from compute3.internal (compute3.nyi.internal [10.202.2.43]) by mailout.nyi.internal (Postfix) with ESMTP id 540F7220C9; Tue, 9 Jul 2019 02:34:45 -0400 (EDT) Received: from mailfrontend2 ([10.202.2.163]) by compute3.internal (MEProxy); Tue, 09 Jul 2019 02:34:45 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mnot.net; h=from :content-type:content-transfer-encoding:mime-version:subject :message-id:date:cc:to; s=fm3; bh=5dIoDJf50+g527t7tcDfNM8bMsj2uQ v/pqeKQ3+4FwQ=; b=vtdDPG1Xkb/JFz8R5tdDmNyOLKAUgfQ8kDW/Ucu6XWD/WE 4v/HwJbt9HzUkPtB6J5kPpAteR5YGB1l1X6S407l9DSEslHQpjzElME3sqUarMAQ PaC1U2wZP5Yt+zfk8VqLM1JpHcYEU7tnzldfW473lHhQDOPO+gsILaV1yGujjZQd 48Ldip8AbmeTM6B2lKol379fRUvobxRgKhPwA9keZX7wSNmQMHmK3dxoD0J5NItM 8hVDu7/xXoXG+V7anl7xc8EmU5UybioZkG2KyepCYX8M0YOLgbpYLRW8qKOEaxx7 lvWDlJnKgDotFIbEodlD0/PTDfugudubNmezDRlw== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :date:from:message-id:mime-version:subject:to:x-me-proxy :x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm3; bh=5dIoDJ f50+g527t7tcDfNM8bMsj2uQv/pqeKQ3+4FwQ=; b=r/HqGsFj7KG6Bjo5cZbTit jaDsFtxecVPbmN1zaT8HDdWGTgB3pEsSrun3kaQJlHRS9U9QJvzzYYHmd76rRq/K nI+r9u7fWy+70MWMEgO0VxJ6FQTht/lYXKQkKKyPZdrd3764+7HQPYHG4YA+Iw4T sw4JJp4/dvyGyauJ0++35SCskF48l8dZiIKBooC+ajbcNeqhjBOSIpPRdIRh3+K1 KipDjcGMpWcMNwivABlgqohdGKBZ6pvL5ZfTp5l0ICRWYFntsoYQuCUQayXwxecF G6cQW1VGwR2S2ApD0oaShjJPV2Vlr4ieiYyejC3mgtYJLkr7FfcuyXDxGQpDWp5Q == X-ME-Sender: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeduvddrgedugddutdelucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucesvcftvggtihhpihgvnhhtshculddquddttddmne cujfgurhephfgtgfgguffkfffvofesthhqmhdthhdtvdenucfhrhhomhepofgrrhhkucfp ohhtthhinhhghhgrmhcuoehmnhhothesmhhnohhtrdhnvghtqeenucffohhmrghinhepgh hithhhuhgsrdgtohhmpdhmnhhothdrnhgvthenucfkphepudeggedrudefiedrudejhedr vdeknecurfgrrhgrmhepmhgrihhlfhhrohhmpehmnhhothesmhhnohhtrdhnvghtnecuve hluhhsthgvrhfuihiivgeptd X-ME-Proxy: Received: from macbook-pro.mnot.net (unknown [144.136.175.28]) by mail.messagingengine.com (Postfix) with ESMTPA id 08084380084; Tue, 9 Jul 2019 02:34:42 -0400 (EDT) From: Mark Nottingham Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Subject: DRAFT agenda for IETF 105, Montreal Message-Id: <70C4CCB5-256A-4B59-BC86-B2EE27ED9546@mnot.net> Date: Tue, 9 Jul 2019 16:34:36 +1000 Cc: Lars Eggert To: IETF QUIC WG X-Mailer: Apple Mail (2.3445.104.11) Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Jul 2019 06:34:49 -0000 ... is at: https://github.com/quicwg/wg-materials/blob/master/ietf105/agenda.md As keen observers will note, we're spending almost all of our time = discussing outstanding issues. If there is an open design issue = assigned to you, please try to make a proposal -- preferably a PR -- as = soon as possible, or request that the issue be reassigned. Cheers, -- Mark Nottingham https://www.mnot.net/ From nobody Tue Jul 9 00:18:10 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9FC96120314 for ; Tue, 9 Jul 2019 00:18:08 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.298 X-Spam-Level: X-Spam-Status: No, score=0.298 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, FREEMAIL_REPLY=1, HTML_MESSAGE=0.001, PDS_NO_HELO_DNS=1.295, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4gb3dx2OzET3 for ; Tue, 9 Jul 2019 00:18:07 -0700 (PDT) Received: from mail-ed1-x536.google.com (mail-ed1-x536.google.com [IPv6:2a00:1450:4864:20::536]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 47E681202F8 for ; Tue, 9 Jul 2019 00:18:07 -0700 (PDT) Received: by mail-ed1-x536.google.com with SMTP id s49so16785937edb.1 for ; Tue, 09 Jul 2019 00:18:07 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:in-reply-to:references:mime-version:date:message-id:subject:to; bh=faMYTqvPnqRxmPBu8n6NHjCdJsoDwWN/r7uW6MqI06U=; b=pmL2dq0m09GaJdEQ3gatYUoYYeBbcjZgVrwybr4Z1pWTJiq+ehCCFgN5GUglqvF3Rp VQlHo/4OaPvH3TqZ4mgvW1NglJNvigyDrHMg71mv/XqVAAa3NxXIU77SEpTT/nmFYLUw xXSYlFNkNiYyDkcoq+mtckjIvbMQYtB1gPG6NALXmoZ1rsDuZCuFBqX4ZnYcT6RNow1y 7F/HiN4bgWmW7RyJRIpASuOnLrPgM+mRBCR0xk8xbwG+BaBT1DnKLAWh1YPaRT7e2wHB Ee/Kfaa1UvFJsb6rCUoE+YIYHH2KCaxfjom4DmrL4upKehcBD9UmiQONLHjGQ/B+hN1R V7Hw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:in-reply-to:references:mime-version:date :message-id:subject:to; bh=faMYTqvPnqRxmPBu8n6NHjCdJsoDwWN/r7uW6MqI06U=; b=biaHt2XEOmhe1OSt2qrGYjVtlUyyZ48KvvEPamvYYW3pEFR37d4HucD1jv0D9c2K7h XqsgMUeB7sS7ZooKhYYMYnmDg12Aq/p9ApGIaqP+/UWFzzhlVTzFARrk5dczqWqAY51G n+90YlEcIVOO8gpu1tl5v2PcW4P6q4Jx6nmVfC1J8QbSESbouny/PsMiuQv+ePY9NAVe TwZyvD8w+cWVwNo0j8i9TALf+YpcKD/f+meIRDdZSwTiFxZBj2UXMeElviMBwhTxys3/ M2mI42efUEuZNlvv/fDSKrXuzvoie1DKF/2cdrPA8FanjyTGuqtsnAzWnvmpizq3hqBl tMXQ== X-Gm-Message-State: APjAAAUUOBRiK9aqSGrLfH4E3ThNIFoRLdgrjrmyyZ5T9TyCNDSY9awX rxBdpban+Rhsx9q7JL5CzpKiBuLM2MI5tHm+/kIXQL6R X-Google-Smtp-Source: APXvYqwNwgklbNNEHnljxM2LEDqYDz88i+IXDdbHX74SwWPHz2dBvryRS6ovC4Vqx0QgdOy9C78id/DYTAOgaEzvOZs= X-Received: by 2002:a50:a56b:: with SMTP id z40mr23737370edb.99.1562656685691; Tue, 09 Jul 2019 00:18:05 -0700 (PDT) Received: from 1058052472880 named unknown by gmailapi.google.com with HTTPREST; Tue, 9 Jul 2019 00:18:04 -0700 From: =?UTF-8?Q?Mikkel_Fahn=C3=B8e_J=C3=B8rgensen?= In-Reply-To: References: X-Mailer: Airmail (420) MIME-Version: 1.0 Date: Tue, 9 Jul 2019 00:18:04 -0700 Message-ID: Subject: Re: Handshake timeout failures? To: IETF QUIC WG , Martin Duke Content-Type: multipart/alternative; boundary="000000000000a8163f058d3a5c56" Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Jul 2019 07:18:09 -0000 --000000000000a8163f058d3a5c56 Content-Type: text/plain; charset="UTF-8" I have commented on this a few times and I think the response was always a bit wishy washy with the endpoint decides how long it cares to wait, and it depends. On 8 July 2019 at 23.35.45, Martin Duke (martin.h.duke@gmail.com) wrote: Is there somewhere in the drafts where we provide suggestions about how to time out connections when not yet established? I believe the Idle Timeout section applies specifically to established connections. This need not be intensely prescriptive, but it would be nice to have some guidelines on how not to fail too quickly. --000000000000a8163f058d3a5c56 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable = I have commented on = this a few times and I think the response was always a bit wishy washy with= the endpoint decides how long it cares to wait, and it depends.


On 8 July 2019 at 23.35.45, Martin Duke (martin.h.duke@gmail.com) wrote:

Is there somewhere in the drafts where we provide suggestions about how to time out connections when not yet established? I believe the Idle Timeout section applies specifically to established connections.

This need not be intensely prescriptive, but it would be nice to have some guidelines on how not to fail too quickly.
 --000000000000a8163f058d3a5c56-- From nobody Tue Jul 9 00:36:16 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 850DD1201CA for ; Tue, 9 Jul 2019 00:36:14 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.597 X-Spam-Level: X-Spam-Status: No, score=-2.597 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mHGwvDxC4k2h for ; Tue, 9 Jul 2019 00:36:12 -0700 (PDT) Received: from emh02.mail.saunalahti.fi (emh02.mail.saunalahti.fi [62.142.5.108]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 924B81201B3 for ; Tue, 9 Jul 2019 00:36:12 -0700 (PDT) Received: from eggert.org (unknown [62.248.255.8]) by emh02.mail.saunalahti.fi (Postfix) with ESMTP id 0C2D92011D; Tue, 9 Jul 2019 10:36:09 +0300 (EEST) Received: from slate.eggert.org (Slate.eggert.org [172.19.235.111]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by eggert.org (Postfix) with ESMTPSA id 7A55964BD6F; Tue, 9 Jul 2019 10:36:02 +0300 (EEST) From: Lars Eggert Message-Id: <2FACBF97-A487-42C3-9044-22586E6091DB@eggert.org> Content-Type: multipart/signed; boundary="Apple-Mail=_1216D866-2A4E-4507-A721-0C2385C3EB8F"; protocol="application/pgp-signature"; micalg=pgp-sha512 Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Subject: Re: Packet Loss Signaling for Encrypted Protocols - draft-ferrieuxhamchaoui-tsvwg-lossbits Date: Tue, 9 Jul 2019 10:36:01 +0300 In-Reply-To: Cc: "Lubashev, Igor" , "isabelle.hamchaoui@orange.com" , "quic@ietf.org" , "alexandre.ferrieux@orange.com" To: Mark Nottingham References: X-MailScanner-ID: 7A55964BD6F.A651C X-MailScanner: Found to be clean X-MailScanner-From: lars@eggert.org Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Jul 2019 07:36:15 -0000 --Apple-Mail=_1216D866-2A4E-4507-A721-0C2385C3EB8F Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii On 2019-7-9, at 7:48, Mark Nottingham wrote: > Thanks for that. Our agenda is indeed tight, so I'd recommend = discussing on the list and having side conversations in Montreal. Igor, are you going to present the draft elsewhere (e.g., TSVWG?) If so, = please send a notice to the QUIC WG so interested folks can add it to = their agenda. Thanks, Lars --Apple-Mail=_1216D866-2A4E-4507-A721-0C2385C3EB8F Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEDrrUO3PMwKM8fddaHbmKvSnuNPgFAl0kQ+EACgkQHbmKvSnu NPhVVg/9HHgx3WI04vTDFr2/eL5vJnmWUn7D+TxMgBziTsy/1JJxK9sFSq6tSCet 3/JU6DONlhaMlfBCgBks9X3UQAxnP7+xbDbissiR30wCT1qsqC4X7r3c5m6iRxl9 wfqJjDNMlJuj5u1AvDBq1RQO6w0g4nmQOboX0IJ+MEwENbPV+N6M+eXupun8B7Us WtBhtujSGHkdUQbPIlTFRhZD/7aJNL0zluY+YzOhvRL5j0/gKRLCx30aEgajizl3 erb9s7qA4qWJ2koyUtoUfsuW5/LpD7AsBjpifX4VZBR84u6mQrSqXX9Yx0uFbUiS vsyVT5JI5xnBkaNrh0UNrit1LUZtmW1R/qhEmtbACzW44pXmJz13IxZfBzsoWaVk 6ZIMfAZ4lkkdOAXW0DKC7ejGibWlHmaDf3AP2rwMauC3HSWUcp16Pbp/+DUuUdXO LM596so7wnY7ykQ2YqfwlVZno+ZZK8+BgMr9GABxt/m4qDIugFC8cBrc0Aug1qON FYsy0xVuXaJOToMZIK/Cg1Y0LcIhEnIpIIjQVN+ht6ZBXJkiYd/F/yiH223SR8Sg yjAl7Z5D5kbI9OyKykZgHgTzrMESmhHH4AgcaYlamMuINudWKOMN2kP8YuHpDfSi YaqAsEsku5qADbiXFcU/krI3qFF7B7NH15TX7MWHY23Jdr/Jvr8= =FeQX -----END PGP SIGNATURE----- --Apple-Mail=_1216D866-2A4E-4507-A721-0C2385C3EB8F-- From nobody Tue Jul 9 02:18:24 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C253A1203E6 for ; Tue, 9 Jul 2019 02:18:22 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.701 X-Spam-Level: X-Spam-Status: No, score=-0.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, PDS_NO_HELO_DNS=1.295, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fDEgavQF0fqi for ; Tue, 9 Jul 2019 02:18:20 -0700 (PDT) Received: from mail-ed1-x543.google.com (mail-ed1-x543.google.com [IPv6:2a00:1450:4864:20::543]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AE8AB1203C9 for ; Tue, 9 Jul 2019 02:18:19 -0700 (PDT) Received: by mail-ed1-x543.google.com with SMTP id i11so17087511edq.0 for ; Tue, 09 Jul 2019 02:18:19 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:in-reply-to:references:mime-version:date:message-id:subject:to :cc; bh=7y14qsPchFyeorpkqLB8sKwfIXd6tTPgCAo3xw7L4NM=; b=Bf7bwgLHGP9RLKdk8ri+W/KFxDCBY//KlVgItHYfdCeHxVznt4N3NuqrPgvn1aC0Xl ODVUPABV6M443rCRZ/l9Zx4+Jcf5TF9ZI62M3GvCwO3AKLMLowd+iOrtMrTRDi2AR9fs kImWoE7I39kMNyRYdOG7Yc10o6yxs7f7kjHgdHw0rqW7fOtvS+q5yiFa0v6O6R3tTJPb PxjCInxYl8tNz5JtXdO1/kgyUFrFW1mTrOb6z7B8jRExVdWp82yDtZBiMKDkWrQ2VGzQ Zo2Q3p0MNprQN2MHQv7LFManVQk4QQ4NRw/klLRckPvfCICzX3IxL8OUJAEuA04cKurf +iwA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:in-reply-to:references:mime-version:date :message-id:subject:to:cc; bh=7y14qsPchFyeorpkqLB8sKwfIXd6tTPgCAo3xw7L4NM=; b=pVzwjUf4YnoiTKqa9hQRDjuMch1sUXz216hnkcrfYH4orzHfn5nybZfcAnU6gzxZrU tD7qAhHPHXu3n0N9p4I34T2dhvxI9Wa3LNee5feBQ5+E8ylBgu/5VQr+RqGehfINofLo aPp5+CdEFR4qo/OA2EI/Ono5JbXSm6Y4ZLgepIGJoAI6O55cEfFC+Ya8Jn0nRePlaKGU dYKL+7kXNpXyyV/10N4ou29H3aMSET9/YgR8pRgvk60P/9DG317nUvMhj7SOh3TckyOx GmVMxvDyQASDwC649pzLkSQ48OqbatXCq1xHCdlWSDHt0lSAvZGK8SFHTv9T/cDwk/KU HT7w== X-Gm-Message-State: APjAAAXxNteNEoA8L2paz2LJlQkIgabB4yDtSV/qVzk1pNuLpVoNwoy8 nL1WWQI+kUQgiw5dU9n2ljM1BCixGAQzc8R1jJs= X-Google-Smtp-Source: APXvYqwQ/j0QxVhk+4ez2f7nMYKPSYUeapBKr/7Aldzf3dcp+u/z35ZDvuWJPTfz88D5X7E5GPQQujqEIQ3O8KMaSGM= X-Received: by 2002:aa7:c999:: with SMTP id c25mr24632820edt.134.1562663898317; Tue, 09 Jul 2019 02:18:18 -0700 (PDT) Received: from 1058052472880 named unknown by gmailapi.google.com with HTTPREST; Tue, 9 Jul 2019 02:18:17 -0700 From: =?UTF-8?Q?Mikkel_Fahn=C3=B8e_J=C3=B8rgensen?= In-Reply-To: References: X-Mailer: Airmail (420) MIME-Version: 1.0 Date: Tue, 9 Jul 2019 02:18:17 -0700 Message-ID: Subject: Re: Packet Loss Signaling for Encrypted Protocols - draft-ferrieuxhamchaoui-tsvwg-lossbits To: Lars Eggert , Mark Nottingham , "quic@ietf.org" , "Lubashev, Igor" Cc: "alexandre.ferrieux@orange.com" , "isabelle.hamchaoui@orange.com" Content-Type: multipart/alternative; boundary="0000000000009008ad058d3c0a15" Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Jul 2019 09:18:23 -0000 --0000000000009008ad058d3c0a15 Content-Type: text/plain; charset="UTF-8" The Q Period needs to be chosen carefully, since the observation could become too unreliable in case of packet reordering and loss if Q Period is too small. However, when Q Period is too large, short connections may not yield a useful upstream loss measurement. Wrt. short connections, do you mean low-latency, small RTT, or short-lived? While this looks interesting, can you explain how the objectives compete or differ from the spin bit, and quality and information provided? Mikkel On 9 July 2019 at 06.45.42, Lubashev, Igor (ilubashe@akamai.com) wrote: Alexandre, Isabelle, and I have posted a draft on a method for endpoints to signal packet loss to the path, while maintaining end user privacy and resisting ossification. The method is protocol-independent, but of course you get the most benefit by applying the method to encrypted transports, and QUIC is what people usually think of first in such context. The draft is not targeted at the QUIC WG specifically, since it is describing a general method of such loss reporting. But we do mention QUIC, so the WG may find it interesting. We would welcome feedback from the QUIC WG. Lars, Mark, I am sure the meeting agenda for Montreal is pretty tight, but if the WG is interested, we are happy to have a quick QUIC-specific presentation on this. Thank you! - Igor P.S. We've implemented this proposal in some Akamai servers and have been using it to serve actual end-user QUIC traffic for a subset of Orange customers. Orange implemented a passive observer that used this signal to detect and identify loss. We can share the high-level of the results and will share the detailed analysis of the data and measurement techniques in maprg. --------------------- https://datatracker.ietf.org/doc/draft-ferrieuxhamchaoui-tsvwg-lossbits/ Abstract: This document describes a protocol-independent method that employs two bits to allow endpoints to signal packet loss in a way that can be used by network devices to measure and locate the source of the loss. The signaling method applies to all protocols with a protocol- specific way to identify packet loss. The method is especially valuable when applied to protocols that encrypt transport header and do not allow an alternative method for loss detection. --0000000000009008ad058d3c0a15 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable

The Q Period needs to be chosen carefully, since the observation could become too unreliable in case of packet reordering and loss if Q Period is too small. However, when Q Period is too large, short connections may not yield a useful upstream loss measurement.

Wrt. short connections, do you mean low-latency, small RTT, or short-liv= ed?

While this looks interesting, can you explain how the objectives compete= or differ from the spin bit, and quality and information provided?

Mikkel



On 9 July 2019 at = 06.45.42, Lubashev, Igor (ilubashe@a= kamai.com) wrote:

Alexandre, Isabelle, and I have posted a draft on a = method for endpoints to signal packet loss to the path, while maintaining e= nd user privacy and resisting ossification. The method is protocol-indepen= dent, but of course you get the most benefit by applying the method to encr= ypted transports, and QUIC is what people usually think of first in such co= ntext.

The draft is not targeted at the QUIC WG specifically, since it is desc= ribing a general method of such loss reporting. But we do mention QUIC, so= the WG may find it interesting. We would welcome feedback from the QUIC W= G.

Lars, Mark, I am sure the meeting agenda for Montreal is pretty tight, = but if the WG is interested, we are happy to have a quick QUIC-specific pre= sentation on this.

Thank you!

- Igor

P.S. We've implemented this proposal in some Akamai servers and ha= ve been using it to serve actual end-user QUIC traffic for a subset of Oran= ge customers. Orange implemented a passive observer that used this signal = to detect and identify loss. We can share the high-level of the results an= d will share the detailed analysis of the data and measurement techniques i= n maprg.

---------------------

https://datatracker.ietf.org/doc/draft-ferrieuxhamchaoui-tsvw= g-lossbits/

Abstract:
This document describes a protocol-independent method that employs
two bits to allow endpoints to signal packet loss in a way that can
be used by network devices to measure and locate the source of the
loss. The signaling method applies to all protocols with a protocol= -
specific way to identify packet loss. The method is especially
valuable when applied to protocols that encrypt transport header and
do not allow an alternative method for loss detection.

=

--0000000000009008ad058d3c0a15-- From nobody Tue Jul 9 03:19:18 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3C4ED120404 for ; Tue, 9 Jul 2019 03:19:17 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.453 X-Spam-Level: X-Spam-Status: No, score=-0.453 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, PDS_NO_HELO_DNS=1.295, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cL1Uw1FNwsrJ for ; Tue, 9 Jul 2019 03:19:16 -0700 (PDT) Received: from mail-ua1-x92d.google.com (mail-ua1-x92d.google.com [IPv6:2607:f8b0:4864:20::92d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DAC111203FC for ; Tue, 9 Jul 2019 03:19:15 -0700 (PDT) Received: by mail-ua1-x92d.google.com with SMTP id z13so6177560uaa.4 for ; Tue, 09 Jul 2019 03:19:15 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=2rqQKc0kQxw5yKA6EWyrk7utxV0s1NcR5HZF2lnjPjI=; b=dDwcj4f4Dahewxtb7NqMWE06hp082cj2bOfWSVz6b2ynQ3lFljOp+mpp5JdggvUU+H 69uW/COVqObpzCvmx39QIo+qY7ot8EDyrZ9P9gbCBmDjEsIRMNLVw1Tubfe0AbW1OyJ1 rc10Z+Bxdw5nmtAJujJnom5OxooxFV8q+Fd9wg0zRmwLJJTukPspT7a02lCFfKxKdYya dSH8z505rrdeN9f2teYuA20liOIaQ/O+X7qXvAd5y61zg0NE1l++7kxMEWcAJJJD6Ype klgit46zd8G5AmHeyxQAwJumDEQQ8YvVcSacNsHMr0uqB2Ey+U+PiqXGFVE9YJhw/j+K fxvg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=2rqQKc0kQxw5yKA6EWyrk7utxV0s1NcR5HZF2lnjPjI=; b=PqqHGOX8yDseDI44wbNarcYd3+BcLQKRodNgTibbCN0aUT5qLq9BytHeyR3SJI9k96 m/8hV+C8jtwNPXLeezJlFnD6ij5OyGrw4mt235XmxGWC55ELZsiCvrUNZeGuFu0xWgqY yG86IcBQdvNQ0ypUuM8qHFlNBIPvbptgZ4FkYib0IuiYpOO1TOBeHN12dwnjLAYYxUV0 VJHJEyhEuR8tIF7eH6ycTeMIt7yGA6PS6RBmvxt60ZEzksYgF1zg7W3JxaPs4sMOeEZA ZZs6MAlx2GaDm1CW6PgLn1TdZNJgJPDILLlwtEQz7lZFVPdXHjG2svGX61mwEW1TDNJh kPfg== X-Gm-Message-State: APjAAAUzCWwWSLM+iAGfT2R2lhlbfgCdh6BAWXqLiaLWtXLTwMnO+0L6 m572o79YRZpuwQ6wMf+iuFXKIskjw0unPOsT52FBj0yI3x4= X-Google-Smtp-Source: APXvYqyC4nAJFph5pfkEggVJfiToITomoblf9y1p7aR1d8h70uv+258TaPZ7mXkBGnBLphLMHU6gaZeYKRJ19g63h5I= X-Received: by 2002:ab0:65d0:: with SMTP id n16mr13458526uaq.79.1562667554880; Tue, 09 Jul 2019 03:19:14 -0700 (PDT) MIME-Version: 1.0 References: <156234111227.21943.6370804489378532746.idtracker@ietfa.amsl.com> <601B5A7E-09ED-4BF3-80C4-5A475B84FE59@ericsson.com> In-Reply-To: From: Lucas Pardue Date: Tue, 9 Jul 2019 11:19:02 +0100 Message-ID: Subject: Re: FW: New Version Notification for draft-kuehlewind-quic-substrate-01.txt To: sy@informatik.uni-hamburg.de Cc: QUIC WG Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Jul 2019 10:19:17 -0000 Hi Erik, Thanks for sharing your work. Did you compare your approach to DNS prefetching (whether instigated by user agent heuristics or "dns-prefetch" link relation)? Lucas On Mon, Jul 8, 2019 at 1:23 PM Erik Sy wrote= : > > Hi Mirja, > > another use case for proxying QUIC is to speed up QUIC's connection > establishment on high-latency access networks. > > An article with more details can be found > here: https://arxiv.org/pdf/1907.01291.pdf > > Best regards, > Erik > > On 7/8/19 14:01, Mirja Kuehlewind wrote: > > Hi all, > > > > we posted an update of draft-kuehlewind-quic-substrate which some small= er edits, some more text on requirements for discovery, and a new sub use c= ase (thanks Lucas!). > > > > Feedback would be very welcome! Also on github here: > > > > https://github.com/mirjak/draft-kuehlewind-quic-substrate > > > > Mirja > > > > > > > > =EF=BB=BFOn 05.07.19, 17:38, "internet-drafts@ietf.org" wrote: > > > > > > A new version of I-D, draft-kuehlewind-quic-substrate-01.txt > > has been successfully submitted by Mirja Kuehlewind and posted to t= he > > IETF repository. > > > > Name: draft-kuehlewind-quic-substrate > > Revision: 01 > > Title: Use Cases and Requirements for QUIC as a Substrat= e > > Document date: 2019-07-05 > > Group: Individual Submission > > Pages: 9 > > URL: https://www.ietf.org/internet-drafts/draft-kuehlewi= nd-quic-substrate-01.txt > > Status: https://datatracker.ietf.org/doc/draft-kuehlewind-q= uic-substrate/ > > Htmlized: https://tools.ietf.org/html/draft-kuehlewind-quic-s= ubstrate-01 > > Htmlized: https://datatracker.ietf.org/doc/html/draft-kuehlew= ind-quic-substrate > > Diff: https://www.ietf.org/rfcdiff?url2=3Ddraft-kuehlewin= d-quic-substrate-01 > > > > Abstract: > > TCP is often used as a proxying or tunneling protocol. QUIC is = a > > new, emerging transport protocol and there is a similar expectat= ion > > that it too will be used as a substrate once it is widely deploy= ed. > > Using QUIC instead of TCP in existing scenarios will allow proxy= ing > > and tunneling services to maintain the benefits of QUIC natively= , > > without degrading the performance and security characteristics. = QUIC > > also opens up new opportunities for these services to have lower > > latency and better multistreaming support. This document summar= izes > > current and future usage scenarios to derive requirements for QU= IC > > and to provide additional protocol considerations. > > > > > > > > > > Please note that it may take a couple of minutes from the time of s= ubmission > > until the htmlized version and diff are available at tools.ietf.org= . > > > > The IETF Secretariat > > > > > > > From nobody Tue Jul 9 05:15:12 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A036D12013C for ; Tue, 9 Jul 2019 05:15:10 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.199 X-Spam-Level: X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eWEdaTFH6xDZ for ; Tue, 9 Jul 2019 05:15:08 -0700 (PDT) Received: from mailhost.informatik.uni-hamburg.de (mailhost.informatik.uni-hamburg.de [134.100.9.70]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B81CA1200E0 for ; Tue, 9 Jul 2019 05:15:07 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mailhost.informatik.uni-hamburg.de (Postfix) with ESMTP id 661324A; Tue, 9 Jul 2019 14:15:05 +0200 (CEST) X-Virus-Scanned: amavisd-new at informatik.uni-hamburg.de Received: from mailhost.informatik.uni-hamburg.de ([127.0.0.1]) by localhost (mailhost.informatik.uni-hamburg.de [127.0.0.1]) (amavisd-new, port 10024) with LMTP id 2OC3tkVlscTP; Tue, 9 Jul 2019 14:15:05 +0200 (CEST) Received: from dhcp-172-21-69-209.wlan.uni-hamburg.de.local (uhh-wlan-fo-134-100-17-124.rrz.uni-hamburg.de [134.100.17.124]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) (Authenticated sender: sy) by mailhost.informatik.uni-hamburg.de (Postfix) with ESMTPSA id C3CC049; Tue, 9 Jul 2019 14:15:04 +0200 (CEST) Reply-To: sy@informatik.uni-hamburg.de Subject: Re: FW: New Version Notification for draft-kuehlewind-quic-substrate-01.txt To: Lucas Pardue Cc: QUIC WG References: <156234111227.21943.6370804489378532746.idtracker@ietfa.amsl.com> <601B5A7E-09ED-4BF3-80C4-5A475B84FE59@ericsson.com> From: Erik Sy Openpgp: preference=signencrypt Message-ID: <06950495-001a-54be-7499-61269ede4059@informatik.uni-hamburg.de> Date: Tue, 9 Jul 2019 14:15:03 +0200 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:60.0) Gecko/20100101 Thunderbird/60.7.2 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit Content-Language: en-GB Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Jul 2019 12:15:11 -0000 Hi Lucas, thanks for this interesting question! Here you can find a plot with the respective behaviour similar to Figure 7 of the article: https://erik-sy.de/QuicSocks_plot.pdf It assumes perfect DNS prefetching, thus the DNS lookup is completed before the client starts the establishment of the QUIC connection. Are you aware of a real-world performance evaluation of DNS prefetching? Best regards, Erik On 7/9/19 12:19, Lucas Pardue wrote: > Hi Erik, > > Thanks for sharing your work. Did you compare your approach to DNS > prefetching (whether instigated by user agent heuristics or > "dns-prefetch" link relation)? > > Lucas > > On Mon, Jul 8, 2019 at 1:23 PM Erik Sy wrote: >> Hi Mirja, >> >> another use case for proxying QUIC is to speed up QUIC's connection >> establishment on high-latency access networks. >> >> An article with more details can be found >> here: https://arxiv.org/pdf/1907.01291.pdf >> >> Best regards, >> Erik >> >> On 7/8/19 14:01, Mirja Kuehlewind wrote: >>> Hi all, >>> >>> we posted an update of draft-kuehlewind-quic-substrate which some smaller edits, some more text on requirements for discovery, and a new sub use case (thanks Lucas!). >>> >>> Feedback would be very welcome! Also on github here: >>> >>> https://github.com/mirjak/draft-kuehlewind-quic-substrate >>> >>> Mirja >>> >>> >>> >>> On 05.07.19, 17:38, "internet-drafts@ietf.org" wrote: >>> >>> >>> A new version of I-D, draft-kuehlewind-quic-substrate-01.txt >>> has been successfully submitted by Mirja Kuehlewind and posted to the >>> IETF repository. >>> >>> Name: draft-kuehlewind-quic-substrate >>> Revision: 01 >>> Title: Use Cases and Requirements for QUIC as a Substrate >>> Document date: 2019-07-05 >>> Group: Individual Submission >>> Pages: 9 >>> URL: https://www.ietf.org/internet-drafts/draft-kuehlewind-quic-substrate-01.txt >>> Status: https://datatracker.ietf.org/doc/draft-kuehlewind-quic-substrate/ >>> Htmlized: https://tools.ietf.org/html/draft-kuehlewind-quic-substrate-01 >>> Htmlized: https://datatracker.ietf.org/doc/html/draft-kuehlewind-quic-substrate >>> Diff: https://www.ietf.org/rfcdiff?url2=draft-kuehlewind-quic-substrate-01 >>> >>> Abstract: >>> TCP is often used as a proxying or tunneling protocol. QUIC is a >>> new, emerging transport protocol and there is a similar expectation >>> that it too will be used as a substrate once it is widely deployed. >>> Using QUIC instead of TCP in existing scenarios will allow proxying >>> and tunneling services to maintain the benefits of QUIC natively, >>> without degrading the performance and security characteristics. QUIC >>> also opens up new opportunities for these services to have lower >>> latency and better multistreaming support. This document summarizes >>> current and future usage scenarios to derive requirements for QUIC >>> and to provide additional protocol considerations. >>> >>> >>> >>> >>> Please note that it may take a couple of minutes from the time of submission >>> until the htmlized version and diff are available at tools.ietf.org. >>> >>> The IETF Secretariat >>> >>> >>> From nobody Tue Jul 9 07:57:09 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E1CA21201FA for ; Tue, 9 Jul 2019 07:57:06 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.7 X-Spam-Level: X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=akamai.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sqidCwSG_Z_r for ; Tue, 9 Jul 2019 07:57:04 -0700 (PDT) Received: from mx0b-00190b01.pphosted.com (mx0b-00190b01.pphosted.com [IPv6:2620:100:9005:57f::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AC6D9120106 for ; Tue, 9 Jul 2019 07:56:58 -0700 (PDT) Received: from pps.filterd (m0122331.ppops.net [127.0.0.1]) by mx0b-00190b01.pphosted.com (8.16.0.27/8.16.0.27) with SMTP id x69Eqd1U001899; Tue, 9 Jul 2019 15:56:53 +0100 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=akamai.com; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : content-transfer-encoding : mime-version; s=jan2016.eng; bh=td4qn+zFAwhITwE/IzINz3t5QlTYjw/3NNRfWMP1b/k=; b=Hzvxs16FPjef9Pg4bB0wV2diVHr4ZDrIOwP01/04m8JWsFie8pIllcIecUXcDACag+tF AM9sk8N9DYKyzosyrlAR/tggrlX84xjzrMnU3Lj/AydwcZ7CLM4/HDElyLrZWlYaUHmE XOmu6BnrFO00gtH6cmUTHfNPfdxkkgw0LoK1hSRkIZnWLsEk4pwBrZrn29Bfm7aNELdZ tujvjPw6wb0qkAUPOljyv49DI7r3xL1FNvOSuZY6XjN9lDXpRWS9DOVwHT7gCoTCT2kU nSr5PwC2/wwjhk93Y6w9/hJvKdctVdyMFLOdACHyaXoaDBCJM7tYqtmwwV2Oh1ope1PV lQ== Received: from prod-mail-ppoint1 (prod-mail-ppoint1.akamai.com [184.51.33.18] (may be forged)) by mx0b-00190b01.pphosted.com with ESMTP id 2tjggqmwr1-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Tue, 09 Jul 2019 15:56:53 +0100 Received: from pps.filterd (prod-mail-ppoint1.akamai.com [127.0.0.1]) by prod-mail-ppoint1.akamai.com (8.16.0.27/8.16.0.27) with SMTP id x69Elj0b025426; Tue, 9 Jul 2019 10:56:52 -0400 Received: from email.msg.corp.akamai.com ([172.27.25.31]) by prod-mail-ppoint1.akamai.com with ESMTP id 2tjpyx64td-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT); Tue, 09 Jul 2019 10:56:52 -0400 Received: from USTX2EX-DAG1MB5.msg.corp.akamai.com (172.27.27.105) by ustx2ex-dag1mb3.msg.corp.akamai.com (172.27.27.103) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Tue, 9 Jul 2019 09:56:50 -0500 Received: from USTX2EX-DAG1MB5.msg.corp.akamai.com ([172.27.27.105]) by ustx2ex-dag1mb5.msg.corp.akamai.com ([172.27.27.105]) with mapi id 15.00.1473.004; Tue, 9 Jul 2019 09:56:50 -0500 From: "Lubashev, Igor" To: Lars Eggert , Mark Nottingham CC: "isabelle.hamchaoui@orange.com" , "quic@ietf.org" , "alexandre.ferrieux@orange.com" Subject: RE: Packet Loss Signaling for Encrypted Protocols - draft-ferrieuxhamchaoui-tsvwg-lossbits Thread-Topic: Packet Loss Signaling for Encrypted Protocols - draft-ferrieuxhamchaoui-tsvwg-lossbits Thread-Index: AdU2CmyJiha8kWgiTzSY5F1e75TnXwAMRh8AAAXWI4AABOX7AA== Date: Tue, 9 Jul 2019 14:56:49 +0000 Message-ID: References: <2FACBF97-A487-42C3-9044-22586E6091DB@eggert.org> In-Reply-To: <2FACBF97-A487-42C3-9044-22586E6091DB@eggert.org> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [172.19.36.122] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2019-07-09_06:, , signatures=0 X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 suspectscore=0 malwarescore=0 phishscore=0 bulkscore=0 spamscore=0 mlxscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1810050000 definitions=main-1907090177 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2019-07-09_06:, , signatures=0 X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1011 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1810050000 definitions=main-1907090178 Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Jul 2019 14:57:07 -0000 Thanks, Lars. Will do. > -----Original Message----- > From: Lars Eggert > Sent: Tuesday, July 09, 2019 3:36 AM > To: Mark Nottingham > Cc: Lubashev, Igor ; isabelle.hamchaoui@orange.com; > quic@ietf.org; alexandre.ferrieux@orange.com > Subject: Re: Packet Loss Signaling for Encrypted Protocols - draft- > ferrieuxhamchaoui-tsvwg-lossbits >=20 > On 2019-7-9, at 7:48, Mark Nottingham wrote: > > Thanks for that. Our agenda is indeed tight, so I'd recommend discussin= g on the > list and having side conversations in Montreal. >=20 > Igor, are you going to present the draft elsewhere (e.g., TSVWG?) If so, = please > send a notice to the QUIC WG so interested folks can add it to their agen= da. >=20 > Thanks, > Lars From nobody Tue Jul 9 08:07:50 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6A2B41205D3 for ; Tue, 9 Jul 2019 08:07:34 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.7 X-Spam-Level: X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=akamai.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jnsGsdo6_EFX for ; Tue, 9 Jul 2019 08:07:31 -0700 (PDT) Received: from mx0a-00190b01.pphosted.com (mx0a-00190b01.pphosted.com [IPv6:2620:100:9001:583::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 095781201DC for ; Tue, 9 Jul 2019 08:07:28 -0700 (PDT) Received: from pps.filterd (m0122333.ppops.net [127.0.0.1]) by mx0a-00190b01.pphosted.com (8.16.0.27/8.16.0.27) with SMTP id x69ExaCt007307; Tue, 9 Jul 2019 16:07:24 +0100 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=akamai.com; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : content-transfer-encoding : mime-version; s=jan2016.eng; bh=wng7hnTByhU+CxGjbWitlVWb8hq/8h/FziRJGfDQvbc=; b=IzXKL89oi17m2CgTqu2D1qWKhCrGg1R+K91p7q3et9/XZeifdAe1Wm2jLeF1Dg38HxNE LMhMOGbegbq82jbITqdJVut2dBseFoSVqwznP1zvUGArCfgCYxOA9aenkmZGS/loysuE ZnU1QTaprKg0wi13B2inZ0TSmKpbudKu/cIrcvkAKPWUdk+Ql38JJvcna/41fbNrv5F2 vuEOYPivhrV4mbjIYKrZFk6ZEywFW0Rn4XM4hiOYddxeAAHdGGv89hLNfL2BgO+l10kd 8qD4IURa2Uh7yGohfG/PMBvtr9SYTNRZvpvblywxW2IXdoBcV0nIKtcWu2iJkn3u7Na+ yg== Received: from prod-mail-ppoint7 (prod-mail-ppoint7.akamai.com [96.6.114.121] (may be forged)) by mx0a-00190b01.pphosted.com with ESMTP id 2tmqg8s4ta-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Tue, 09 Jul 2019 16:07:24 +0100 Received: from pps.filterd (prod-mail-ppoint7.akamai.com [127.0.0.1]) by prod-mail-ppoint7.akamai.com (8.16.0.27/8.16.0.27) with SMTP id x69F2a6k016757; Tue, 9 Jul 2019 11:07:23 -0400 Received: from email.msg.corp.akamai.com ([172.27.27.25]) by prod-mail-ppoint7.akamai.com with ESMTP id 2tjpyxrutv-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT); Tue, 09 Jul 2019 11:07:23 -0400 Received: from USTX2EX-DAG1MB5.msg.corp.akamai.com (172.27.27.105) by ustx2ex-dag1mb1.msg.corp.akamai.com (172.27.27.101) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Tue, 9 Jul 2019 10:07:22 -0500 Received: from USTX2EX-DAG1MB5.msg.corp.akamai.com ([172.27.27.105]) by ustx2ex-dag1mb5.msg.corp.akamai.com ([172.27.27.105]) with mapi id 15.00.1473.004; Tue, 9 Jul 2019 10:07:22 -0500 From: "Lubashev, Igor" To: Mark Nottingham , "quic@ietf.org" CC: Lars Eggert , "isabelle.hamchaoui@orange.com" , "alexandre.ferrieux@orange.com" Subject: RE: Packet Loss Signaling for Encrypted Protocols - draft-ferrieuxhamchaoui-tsvwg-lossbits Thread-Topic: Packet Loss Signaling for Encrypted Protocols - draft-ferrieuxhamchaoui-tsvwg-lossbits Thread-Index: AdU2CmyJiha8kWgiTzSY5F1e75TnXwAMRh8AAArB47A= Date: Tue, 9 Jul 2019 15:07:22 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [172.19.36.122] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2019-07-09_06:, , signatures=0 X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 suspectscore=0 malwarescore=0 phishscore=0 bulkscore=0 spamscore=0 mlxscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1810050000 definitions=main-1907090179 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2019-07-09_06:, , signatures=0 X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1015 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1810050000 definitions=main-1907090179 Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Jul 2019 15:07:40 -0000 Understood (and not unexpected). For those who are interested, we'll talk about the draft in tsvwg (focus on= signaling behavior, privacy preservation, ossification resistance, maybe s= pecifics of where the signals can be carried) and maprg (focus on the data = collected, accuracy of measurement, capabilities at detecting/measuring var= ious causes of loss, and techniques to improve noise filtering due to reord= ering). Both of the WG meetings are later in the week (tsvwg is on Thu, ma= prg on Fri). Alexandre and I will be in Montreal, and we are happy to have side meetings= with interested people. Many thanks, - Igor > -----Original Message----- > From: Mark Nottingham > Sent: Tuesday, July 09, 2019 12:49 AM > To: Lubashev, Igor > Cc: Lars Eggert ; quic@ietf.org; > isabelle.hamchaoui@orange.com; alexandre.ferrieux@orange.com > Subject: Re: Packet Loss Signaling for Encrypted Protocols - draft- > ferrieuxhamchaoui-tsvwg-lossbits >=20 > Hi Igor, >=20 > Thanks for that. Our agenda is indeed tight, so I'd recommend discussing = on the > list and having side conversations in Montreal. >=20 > Thanks, >=20 >=20 > > On 9 Jul 2019, at 2:44 pm, Lubashev, Igor wrote: > > > > Alexandre, Isabelle, and I have posted a draft on a method for endpoint= s to > signal packet loss to the path, while maintaining end user privacy and re= sisting > ossification. The method is protocol-independent, but of course you get = the > most benefit by applying the method to encrypted transports, and QUIC is = what > people usually think of first in such context. > > > > The draft is not targeted at the QUIC WG specifically, since it is desc= ribing a > general method of such loss reporting. But we do mention QUIC, so the WG= may > find it interesting. We would welcome feedback from the QUIC WG. > > > > Lars, Mark, I am sure the meeting agenda for Montreal is pretty tight, = but if the > WG is interested, we are happy to have a quick QUIC-specific presentation= on > this. > > > > Thank you! > > > > - Igor > > > > P.S. We've implemented this proposal in some Akamai servers and have b= een > using it to serve actual end-user QUIC traffic for a subset of Orange cus= tomers. > Orange implemented a passive observer that used this signal to detect and > identify loss. We can share the high-level of the results and will share= the > detailed analysis of the data and measurement techniques in maprg. > > > > --------------------- > > > > https://datatracker.ietf.org/doc/draft-ferrieuxhamchaoui-tsvwg-lossbits= / > > > > Abstract: > > This document describes a protocol-independent method that employs > > two bits to allow endpoints to signal packet loss in a way that can > > be used by network devices to measure and locate the source of the > > loss. The signaling method applies to all protocols with a protocol- > > specific way to identify packet loss. The method is especially > > valuable when applied to protocols that encrypt transport header and > > do not allow an alternative method for loss detection. >=20 > -- > Mark Nottingham https://www.mnot.net/ From nobody Tue Jul 9 08:19:02 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6D06B120637 for ; Tue, 9 Jul 2019 08:19:00 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=akamai.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id j7B5CPTyb7kS for ; Tue, 9 Jul 2019 08:18:57 -0700 (PDT) Received: from mx0a-00190b01.pphosted.com (mx0a-00190b01.pphosted.com [IPv6:2620:100:9001:583::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 96A4C1205FB for ; Tue, 9 Jul 2019 08:18:53 -0700 (PDT) Received: from pps.filterd (m0050095.ppops.net [127.0.0.1]) by m0050095.ppops.net-00190b01. (8.16.0.27/8.16.0.27) with SMTP id x69FC6Nf011882; Tue, 9 Jul 2019 16:18:48 +0100 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=akamai.com; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : mime-version; s=jan2016.eng; bh=vBMHlfL6c2+uqG3zMTxQa4AYTERaVDJt8+AnbSr+63w=; b=IbteiiODldSJu7oHbgyRGCcyPnKvMmQJK8wjZWgqnq5/WZ42MsGyd8uAYPy/1Loa7l/M 7oZwRLqa6gu3VUft+w7aswaPrj89aABGavZZTQZI7Xes7EbinnUPUdKlMY05MA0Yl9lV xaDBG0yKX5CQuntCtXO37P8OEVEPtc2h2SKCtOwBPnyxwc6Xd99dZi2/w+XnllSiOAd+ ILNZQ+/NNbGK/rFoSAKZ3k/AFRD7qmAPXSI06zBH5ckS/+b4Bhakmk+5ahtDjime9qvW qEnT7zVFF3O5Pflob0ywKdcVjvHqcF/ruPQ68Ml4vow6w9pJI6ANc9r5r09Vjyznn8uU +w== Received: from prod-mail-ppoint7 (prod-mail-ppoint7.akamai.com [96.6.114.121] (may be forged)) by m0050095.ppops.net-00190b01. with ESMTP id 2tjk635ed7-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Tue, 09 Jul 2019 16:18:48 +0100 Received: from pps.filterd (prod-mail-ppoint7.akamai.com [127.0.0.1]) by prod-mail-ppoint7.akamai.com (8.16.0.27/8.16.0.27) with SMTP id x69FHPem008538; Tue, 9 Jul 2019 11:18:46 -0400 Received: from email.msg.corp.akamai.com ([172.27.25.30]) by prod-mail-ppoint7.akamai.com with ESMTP id 2tjpyxryk9-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT); Tue, 09 Jul 2019 11:18:45 -0400 Received: from USTX2EX-DAG1MB5.msg.corp.akamai.com (172.27.27.105) by ustx2ex-dag1mb3.msg.corp.akamai.com (172.27.27.103) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Tue, 9 Jul 2019 10:18:42 -0500 Received: from USTX2EX-DAG1MB5.msg.corp.akamai.com ([172.27.27.105]) by ustx2ex-dag1mb5.msg.corp.akamai.com ([172.27.27.105]) with mapi id 15.00.1473.004; Tue, 9 Jul 2019 10:18:42 -0500 From: "Lubashev, Igor" To: =?utf-8?B?TWlra2VsIEZhaG7DuGUgSsO4cmdlbnNlbg==?= , Lars Eggert , Mark Nottingham , "quic@ietf.org" CC: "alexandre.ferrieux@orange.com" , "isabelle.hamchaoui@orange.com" Subject: RE: Packet Loss Signaling for Encrypted Protocols - draft-ferrieuxhamchaoui-tsvwg-lossbits Thread-Topic: Packet Loss Signaling for Encrypted Protocols - draft-ferrieuxhamchaoui-tsvwg-lossbits Thread-Index: AdU2CmyJiha8kWgiTzSY5F1e75TnXwAVrpiAAAHI7DA= Date: Tue, 9 Jul 2019 15:18:42 +0000 Message-ID: <8dac9ac39a5d4e75ac9de2799ff423d1@ustx2ex-dag1mb5.msg.corp.akamai.com> References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [172.19.36.122] Content-Type: multipart/alternative; boundary="_000_8dac9ac39a5d4e75ac9de2799ff423d1ustx2exdag1mb5msgcorpak_" MIME-Version: 1.0 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2019-07-09_06:, , signatures=0 X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 suspectscore=0 malwarescore=0 phishscore=0 bulkscore=0 spamscore=0 mlxscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1810050000 definitions=main-1907090180 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2019-07-09_06:, , signatures=0 X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1015 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1810050000 definitions=main-1907090180 Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Jul 2019 15:19:01 -0000 --_000_8dac9ac39a5d4e75ac9de2799ff423d1ustx2exdag1mb5msgcorpak_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 RnJvbTogTWlra2VsIEZhaG7DuGUgSsO4cmdlbnNlbiA8bWlra2VsZmpAZ21haWwuY29tPg0KDQoN ClRoZSBRIFBlcmlvZCBuZWVkcyB0byBiZSBjaG9zZW4gY2FyZWZ1bGx5LCBzaW5jZSB0aGUgb2Jz ZXJ2YXRpb24gY291bGQgYmVjb21lIHRvbyB1bnJlbGlhYmxlIGluIGNhc2Ugb2YgcGFja2V0IHJl b3JkZXJpbmcgYW5kIGxvc3MgaWYgUSBQZXJpb2QgaXMgdG9vIHNtYWxsLiBIb3dldmVyLCB3aGVu IFEgUGVyaW9kIGlzIHRvbyBsYXJnZSwgc2hvcnQgY29ubmVjdGlvbnMgbWF5IG5vdCB5aWVsZCBh IHVzZWZ1bCB1cHN0cmVhbSBsb3NzIG1lYXN1cmVtZW50Lg0KDQpXcnQuIHNob3J0IGNvbm5lY3Rp b25zLCBkbyB5b3UgbWVhbiBsb3ctbGF0ZW5jeSwgc21hbGwgUlRULCBvciBzaG9ydC1saXZlZD8N Cg0KQnkg4oCcc2hvcnTigJ0gSSBtZWFuIHRvbyBmZXcgcGFja2V0cyBzZW50IChmZXdlciB0aGFu IGhhbGYgUSBQZXJpb2QpLiAgSSB3aWxsIGNsYXJpZnkgdGhpcyBpbiB0aGUgdGV4dC4gVGhhbmsg eW91Lg0KDQpXaGlsZSB0aGlzIGxvb2tzIGludGVyZXN0aW5nLCBjYW4geW91IGV4cGxhaW4gaG93 IHRoZSBvYmplY3RpdmVzIGNvbXBldGUgb3IgZGlmZmVyIGZyb20gdGhlIHNwaW4gYml0LCBhbmQg cXVhbGl0eSBhbmQgaW5mb3JtYXRpb24gcHJvdmlkZWQ/DQoNCkxhdGVuY3kgU3BpbiBCaXQgKGFr YSDigJxzcGluIGJpdOKAnSkgbWVhc3VyZXMgY29ubmVjdGlvbiBydHQuICBUaGUgcHJvcG9zZWQg bWVjaGFuaXNtIG1lYXN1cmVzIHBhY2tldCBsb3NzLiAgU28gdGhlIHR3byBhcmUgY29tcGxlbWVu dGFyeSBtZWFzdXJlbWVudCBzaWduYWxzLg0KDQogICogICBJZ29yDQoNCg0KDQpPbiA5IEp1bHkg MjAxOSBhdCAwNi40NS40MiwgTHViYXNoZXYsIElnb3IgKGlsdWJhc2hlQGFrYW1haS5jb208bWFp bHRvOmlsdWJhc2hlQGFrYW1haS5jb20+KSB3cm90ZToNCkFsZXhhbmRyZSwgSXNhYmVsbGUsIGFu ZCBJIGhhdmUgcG9zdGVkIGEgZHJhZnQgb24gYSBtZXRob2QgZm9yIGVuZHBvaW50cyB0byBzaWdu YWwgcGFja2V0IGxvc3MgdG8gdGhlIHBhdGgsIHdoaWxlIG1haW50YWluaW5nIGVuZCB1c2VyIHBy aXZhY3kgYW5kIHJlc2lzdGluZyBvc3NpZmljYXRpb24uIFRoZSBtZXRob2QgaXMgcHJvdG9jb2wt aW5kZXBlbmRlbnQsIGJ1dCBvZiBjb3Vyc2UgeW91IGdldCB0aGUgbW9zdCBiZW5lZml0IGJ5IGFw cGx5aW5nIHRoZSBtZXRob2QgdG8gZW5jcnlwdGVkIHRyYW5zcG9ydHMsIGFuZCBRVUlDIGlzIHdo YXQgcGVvcGxlIHVzdWFsbHkgdGhpbmsgb2YgZmlyc3QgaW4gc3VjaCBjb250ZXh0Lg0KDQpUaGUg ZHJhZnQgaXMgbm90IHRhcmdldGVkIGF0IHRoZSBRVUlDIFdHIHNwZWNpZmljYWxseSwgc2luY2Ug aXQgaXMgZGVzY3JpYmluZyBhIGdlbmVyYWwgbWV0aG9kIG9mIHN1Y2ggbG9zcyByZXBvcnRpbmcu IEJ1dCB3ZSBkbyBtZW50aW9uIFFVSUMsIHNvIHRoZSBXRyBtYXkgZmluZCBpdCBpbnRlcmVzdGlu Zy4gV2Ugd291bGQgd2VsY29tZSBmZWVkYmFjayBmcm9tIHRoZSBRVUlDIFdHLg0KDQpMYXJzLCBN YXJrLCBJIGFtIHN1cmUgdGhlIG1lZXRpbmcgYWdlbmRhIGZvciBNb250cmVhbCBpcyBwcmV0dHkg dGlnaHQsIGJ1dCBpZiB0aGUgV0cgaXMgaW50ZXJlc3RlZCwgd2UgYXJlIGhhcHB5IHRvIGhhdmUg YSBxdWljayBRVUlDLXNwZWNpZmljIHByZXNlbnRhdGlvbiBvbiB0aGlzLg0KDQpUaGFuayB5b3Uh DQoNCi0gSWdvcg0KDQpQLlMuIFdlJ3ZlIGltcGxlbWVudGVkIHRoaXMgcHJvcG9zYWwgaW4gc29t ZSBBa2FtYWkgc2VydmVycyBhbmQgaGF2ZSBiZWVuIHVzaW5nIGl0IHRvIHNlcnZlIGFjdHVhbCBl bmQtdXNlciBRVUlDIHRyYWZmaWMgZm9yIGEgc3Vic2V0IG9mIE9yYW5nZSBjdXN0b21lcnMuIE9y YW5nZSBpbXBsZW1lbnRlZCBhIHBhc3NpdmUgb2JzZXJ2ZXIgdGhhdCB1c2VkIHRoaXMgc2lnbmFs IHRvIGRldGVjdCBhbmQgaWRlbnRpZnkgbG9zcy4gV2UgY2FuIHNoYXJlIHRoZSBoaWdoLWxldmVs IG9mIHRoZSByZXN1bHRzIGFuZCB3aWxsIHNoYXJlIHRoZSBkZXRhaWxlZCBhbmFseXNpcyBvZiB0 aGUgZGF0YSBhbmQgbWVhc3VyZW1lbnQgdGVjaG5pcXVlcyBpbiBtYXByZy4NCg0KLS0tLS0tLS0t LS0tLS0tLS0tLS0tDQoNCmh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LWZl cnJpZXV4aGFtY2hhb3VpLXRzdndnLWxvc3NiaXRzLzxodHRwczovL3VybGRlZmVuc2UucHJvb2Zw b2ludC5jb20vdjIvdXJsP3U9aHR0cHMtM0FfX2RhdGF0cmFja2VyLmlldGYub3JnX2RvY19kcmFm dC0yRGZlcnJpZXV4aGFtY2hhb3VpLTJEdHN2d2ctMkRsb3NzYml0c18mZD1Ed01GYVEmYz05Nlpi WlpjYU1GNHcwRjRqcE42TFpnJnI9RGpuM2JRNXVOSkRQTV8yc2tmTDNyVzF0emNJeHlqVVpkbl9t NTVLUG1sbyZtPTh0cWozT0ttY0d3QWVUdmlmYmhwWk53aUdnUVFybGRfMDRjR3FkZFVnYXMmcz1H RFVGbFR3Q3BnX0V3ZzZzWnVSMHVLTEo1Z0xpVzhxUlByYjg4RW9zY3IwJmU9Pg0KDQpBYnN0cmFj dDoNClRoaXMgZG9jdW1lbnQgZGVzY3JpYmVzIGEgcHJvdG9jb2wtaW5kZXBlbmRlbnQgbWV0aG9k IHRoYXQgZW1wbG95cw0KdHdvIGJpdHMgdG8gYWxsb3cgZW5kcG9pbnRzIHRvIHNpZ25hbCBwYWNr ZXQgbG9zcyBpbiBhIHdheSB0aGF0IGNhbg0KYmUgdXNlZCBieSBuZXR3b3JrIGRldmljZXMgdG8g bWVhc3VyZSBhbmQgbG9jYXRlIHRoZSBzb3VyY2Ugb2YgdGhlDQpsb3NzLiBUaGUgc2lnbmFsaW5n IG1ldGhvZCBhcHBsaWVzIHRvIGFsbCBwcm90b2NvbHMgd2l0aCBhIHByb3RvY29sLQ0Kc3BlY2lm aWMgd2F5IHRvIGlkZW50aWZ5IHBhY2tldCBsb3NzLiBUaGUgbWV0aG9kIGlzIGVzcGVjaWFsbHkN CnZhbHVhYmxlIHdoZW4gYXBwbGllZCB0byBwcm90b2NvbHMgdGhhdCBlbmNyeXB0IHRyYW5zcG9y dCBoZWFkZXIgYW5kDQpkbyBub3QgYWxsb3cgYW4gYWx0ZXJuYXRpdmUgbWV0aG9kIGZvciBsb3Nz IGRldGVjdGlvbi4NCg== --_000_8dac9ac39a5d4e75ac9de2799ff423d1ustx2exdag1mb5msgcorpak_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 SGVsdmV0aWNhOw0KCXBhbm9zZS0xOjIgMTEgNiA0IDIgMiAyIDIgMiA0O30NCkBmb250LWZhY2UN Cgl7Zm9udC1mYW1pbHk6V2luZ2RpbmdzOw0KCXBhbm9zZS0xOjUgMCAwIDAgMCAwIDAgMCAwIDA7 fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToy IDQgNSAzIDUgNCA2IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsN CglwYW5vc2UtMToyIDE1IDUgMiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFt aWx5OkNvbnNvbGFzOw0KCXBhbm9zZS0xOjIgMTEgNiA5IDIgMiA0IDMgMiA0O30NCkBmb250LWZh Y2UNCgl7Zm9udC1mYW1pbHk6IkhlbHZldGljYSBOZXVlIjt9DQpAZm9udC1mYWNlDQoJe2ZvbnQt ZmFtaWx5Ok1lbmxvO30NCi8qIFN0eWxlIERlZmluaXRpb25zICovDQpwLk1zb05vcm1hbCwgbGku TXNvTm9ybWFsLCBkaXYuTXNvTm9ybWFsDQoJe21hcmdpbjowaW47DQoJbWFyZ2luLWJvdHRvbTou MDAwMXB0Ow0KCWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMt c2VyaWY7fQ0KaDENCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk7DQoJbXNvLXN0eWxlLWxpbms6Ikhl YWRpbmcgMSBDaGFyIjsNCgltc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzsNCgltYXJnaW4tcmlnaHQ6 MGluOw0KCW1zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvOw0KCW1hcmdpbi1sZWZ0OjBpbjsNCglm b250LXNpemU6MjguMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNv bG9yOmJsYWNrOw0KCWZvbnQtd2VpZ2h0OmJvbGQ7fQ0KaDINCgl7bXNvLXN0eWxlLXByaW9yaXR5 Ojk7DQoJbXNvLXN0eWxlLWxpbms6IkhlYWRpbmcgMiBDaGFyIjsNCgltc28tbWFyZ2luLXRvcC1h bHQ6YXV0bzsNCgltYXJnaW4tcmlnaHQ6MGluOw0KCW1zby1tYXJnaW4tYm90dG9tLWFsdDphdXRv Ow0KCW1hcmdpbi1sZWZ0OjBpbjsNCglib3JkZXI6bm9uZTsNCglwYWRkaW5nOjBpbjsNCglmb250 LXNpemU6MTguMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9y OmJsYWNrOw0KCWZvbnQtd2VpZ2h0OmJvbGQ7fQ0KaDMNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk7 DQoJbXNvLXN0eWxlLWxpbms6IkhlYWRpbmcgMyBDaGFyIjsNCgltc28tbWFyZ2luLXRvcC1hbHQ6 YXV0bzsNCgltYXJnaW4tcmlnaHQ6MGluOw0KCW1zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvOw0K CW1hcmdpbi1sZWZ0OjBpbjsNCglmb250LXNpemU6MTMuNXB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxp YnJpIixzYW5zLXNlcmlmOw0KCWZvbnQtd2VpZ2h0OmJvbGQ7fQ0KaDQNCgl7bXNvLXN0eWxlLXBy aW9yaXR5Ojk7DQoJbXNvLXN0eWxlLWxpbms6IkhlYWRpbmcgNCBDaGFyIjsNCgltc28tbWFyZ2lu LXRvcC1hbHQ6YXV0bzsNCgltYXJnaW4tcmlnaHQ6MGluOw0KCW1zby1tYXJnaW4tYm90dG9tLWFs dDphdXRvOw0KCW1hcmdpbi1sZWZ0OjBpbjsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFt aWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWZvbnQtd2VpZ2h0OmJvbGQ7fQ0KaDUNCgl7bXNv LXN0eWxlLXByaW9yaXR5Ojk7DQoJbXNvLXN0eWxlLWxpbms6IkhlYWRpbmcgNSBDaGFyIjsNCglt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzsNCgltYXJnaW4tcmlnaHQ6MGluOw0KCW1zby1tYXJnaW4t Ym90dG9tLWFsdDphdXRvOw0KCW1hcmdpbi1sZWZ0OjBpbjsNCglmb250LXNpemU6MTAuNXB0Ow0K CWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWZvbnQtd2VpZ2h0OmJvbGQ7fQ0K aDYNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk7DQoJbXNvLXN0eWxlLWxpbms6IkhlYWRpbmcgNiBD aGFyIjsNCgltc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzsNCgltYXJnaW4tcmlnaHQ6MGluOw0KCW1z by1tYXJnaW4tYm90dG9tLWFsdDphdXRvOw0KCW1hcmdpbi1sZWZ0OjBpbjsNCglmb250LXNpemU6 MTAuNXB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOiM3Nzc3 Nzc7DQoJZm9udC13ZWlnaHQ6Ym9sZDt9DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21z by1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjojNDE4M0M0Ow0KCXRleHQtZGVjb3JhdGlvbjpu b25lIG5vbmU7fQ0KYTp2aXNpdGVkLCBzcGFuLk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1z dHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjojNDE4M0M0Ow0KCXRleHQtZGVjb3JhdGlvbjpub25l IG5vbmU7fQ0KY29kZQ0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJZm9udC1mYW1pbHk6TWVu bG87DQoJYm9yZGVyOnNvbGlkICNFQUVBRUEgMS4wcHQ7DQoJcGFkZGluZzowaW47DQoJYmFja2dy b3VuZDojRjhGOEY4O30NCnByZQ0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJbXNvLXN0eWxl LWxpbms6IkhUTUwgUHJlZm9ybWF0dGVkIENoYXIiOw0KCW1hcmdpbi10b3A6MTEuMjVwdDsNCglt YXJnaW4tcmlnaHQ6MGluOw0KCW1hcmdpbi1ib3R0b206MTEuMjVwdDsNCgltYXJnaW4tbGVmdDow aW47DQoJYmFja2dyb3VuZDojRjhGOEY4Ow0KCWJvcmRlcjpub25lOw0KCXBhZGRpbmc6MGluOw0K CWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6TWVubG87fQ0Kc3Bhbi5IZWFkaW5nMUNo YXINCgl7bXNvLXN0eWxlLW5hbWU6IkhlYWRpbmcgMSBDaGFyIjsNCgltc28tc3R5bGUtcHJpb3Jp dHk6OTsNCgltc28tc3R5bGUtbGluazoiSGVhZGluZyAxIjsNCglmb250LWZhbWlseToiQ2FsaWJy aSBMaWdodCIsc2Fucy1zZXJpZjsNCgljb2xvcjojMkY1NDk2O30NCnNwYW4uSGVhZGluZzJDaGFy DQoJe21zby1zdHlsZS1uYW1lOiJIZWFkaW5nIDIgQ2hhciI7DQoJbXNvLXN0eWxlLXByaW9yaXR5 Ojk7DQoJbXNvLXN0eWxlLWxpbms6IkhlYWRpbmcgMiI7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkg TGlnaHQiLHNhbnMtc2VyaWY7DQoJY29sb3I6IzJGNTQ5Njt9DQpzcGFuLkhlYWRpbmczQ2hhcg0K CXttc28tc3R5bGUtbmFtZToiSGVhZGluZyAzIENoYXIiOw0KCW1zby1zdHlsZS1wcmlvcml0eTo5 Ow0KCW1zby1zdHlsZS1saW5rOiJIZWFkaW5nIDMiOw0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIExp Z2h0IixzYW5zLXNlcmlmOw0KCWNvbG9yOiMxRjM3NjM7fQ0Kc3Bhbi5IZWFkaW5nNENoYXINCgl7 bXNvLXN0eWxlLW5hbWU6IkhlYWRpbmcgNCBDaGFyIjsNCgltc28tc3R5bGUtcHJpb3JpdHk6OTsN Cgltc28tc3R5bGUtbGluazoiSGVhZGluZyA0IjsNCglmb250LWZhbWlseToiQ2FsaWJyaSBMaWdo dCIsc2Fucy1zZXJpZjsNCgljb2xvcjojMkY1NDk2Ow0KCWZvbnQtc3R5bGU6aXRhbGljO30NCnNw YW4uSGVhZGluZzVDaGFyDQoJe21zby1zdHlsZS1uYW1lOiJIZWFkaW5nIDUgQ2hhciI7DQoJbXNv LXN0eWxlLXByaW9yaXR5Ojk7DQoJbXNvLXN0eWxlLWxpbms6IkhlYWRpbmcgNSI7DQoJZm9udC1m YW1pbHk6IkNhbGlicmkgTGlnaHQiLHNhbnMtc2VyaWY7DQoJY29sb3I6IzJGNTQ5Njt9DQpzcGFu LkhlYWRpbmc2Q2hhcg0KCXttc28tc3R5bGUtbmFtZToiSGVhZGluZyA2IENoYXIiOw0KCW1zby1z dHlsZS1wcmlvcml0eTo5Ow0KCW1zby1zdHlsZS1saW5rOiJIZWFkaW5nIDYiOw0KCWZvbnQtZmFt aWx5OiJDYWxpYnJpIExpZ2h0IixzYW5zLXNlcmlmOw0KCWNvbG9yOiMxRjM3NjM7fQ0Kc3Bhbi5I VE1MUHJlZm9ybWF0dGVkQ2hhcg0KCXttc28tc3R5bGUtbmFtZToiSFRNTCBQcmVmb3JtYXR0ZWQg Q2hhciI7DQoJbXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1zdHlsZS1saW5rOiJIVE1MIFBy ZWZvcm1hdHRlZCI7DQoJZm9udC1mYW1pbHk6Q29uc29sYXM7fQ0KcC5tc29ub3JtYWwwLCBsaS5t c29ub3JtYWwwLCBkaXYubXNvbm9ybWFsMA0KCXttc28tc3R5bGUtbmFtZTptc29ub3JtYWw7DQoJ bWFyZ2luLXRvcDoxMS4yNXB0Ow0KCW1hcmdpbi1yaWdodDowaW47DQoJbWFyZ2luLWJvdHRvbTox MS4yNXB0Ow0KCW1hcmdpbi1sZWZ0OjBpbjsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFt aWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmO30NCnAuc2VuZCwgbGkuc2VuZCwgZGl2LnNlbmQNCgl7 bXNvLXN0eWxlLW5hbWU6c2VuZDsNCgltYXJnaW4tdG9wOjExLjI1cHQ7DQoJbWFyZ2luLXJpZ2h0 OjBpbjsNCgltYXJnaW4tYm90dG9tOjExLjI1cHQ7DQoJbWFyZ2luLWxlZnQ6MGluOw0KCWZvbnQt c2l6ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJY29sb3I6 Izc3QkI3Nzt9DQpwLnNlcnZlciwgbGkuc2VydmVyLCBkaXYuc2VydmVyDQoJe21zby1zdHlsZS1u YW1lOnNlcnZlcjsNCgltYXJnaW4tdG9wOjExLjI1cHQ7DQoJbWFyZ2luLXJpZ2h0OjBpbjsNCglt YXJnaW4tYm90dG9tOjExLjI1cHQ7DQoJbWFyZ2luLWxlZnQ6MGluOw0KCWZvbnQtc2l6ZToxMS4w cHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJY29sb3I6Izc3OTlCQjt9 DQpwLmVycm9yLCBsaS5lcnJvciwgZGl2LmVycm9yDQoJe21zby1zdHlsZS1uYW1lOmVycm9yOw0K CW1hcmdpbi10b3A6MTEuMjVwdDsNCgltYXJnaW4tcmlnaHQ6MGluOw0KCW1hcmdpbi1ib3R0b206 MTEuMjVwdDsNCgltYXJnaW4tbGVmdDowaW47DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250LWZh bWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjojQUEwMDAwO30NCnAuYWlybWFpbG9u LCBsaS5haXJtYWlsb24sIGRpdi5haXJtYWlsb24NCgl7bXNvLXN0eWxlLW5hbWU6YWlybWFpbF9v bjsNCgltYXJnaW4tdG9wOjExLjI1cHQ7DQoJbWFyZ2luLXJpZ2h0OjBpbjsNCgltYXJnaW4tYm90 dG9tOjExLjI1cHQ7DQoJbWFyZ2luLWxlZnQ6MGluOw0KCWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9u dC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0Kc3Bhbi5FbWFpbFN0eWxlMzINCgl7bXNv LXN0eWxlLXR5cGU6cGVyc29uYWwtcmVwbHk7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMt c2VyaWY7DQoJY29sb3I6d2luZG93dGV4dDt9DQouTXNvQ2hwRGVmYXVsdA0KCXttc28tc3R5bGUt dHlwZTpleHBvcnQtb25seTsNCglmb250LXNpemU6MTAuMHB0O30NCkBwYWdlIFdvcmRTZWN0aW9u MQ0KCXtzaXplOjguNWluIDExLjBpbjsNCgltYXJnaW46MS4waW4gMS4waW4gMS4waW4gMS4waW47 fQ0KZGl2LldvcmRTZWN0aW9uMQ0KCXtwYWdlOldvcmRTZWN0aW9uMTt9DQovKiBMaXN0IERlZmlu aXRpb25zICovDQpAbGlzdCBsMA0KCXttc28tbGlzdC1pZDoxOTMxMzQ2OTIwOw0KCW1zby1saXN0 LXR5cGU6aHlicmlkOw0KCW1zby1saXN0LXRlbXBsYXRlLWlkczoxMDc1MzI5MTk2IC04MzI5ODcy MiA2NzY5ODY5MSA2NzY5ODY5MyA2NzY5ODY4OSA2NzY5ODY5MSA2NzY5ODY5MyA2NzY5ODY4OSA2 NzY5ODY5MSA2NzY5ODY5Mzt9DQpAbGlzdCBsMDpsZXZlbDENCgl7bXNvLWxldmVsLXN0YXJ0LWF0 OjE3MjsNCgltc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ6 LTsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9u OmxlZnQ7DQoJbWFyZ2luLWxlZnQ6LjI1aW47DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCWZvbnQt ZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCW1zby1mYXJlYXN0LWZvbnQtZmFtaWx5OkNh bGlicmk7DQoJbXNvLWJpZGktZm9udC1mYW1pbHk6IlRpbWVzIE5ldyBSb21hbiI7fQ0KQGxpc3Qg bDA6bGV2ZWwyDQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwt dGV4dDpvOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9z aXRpb246bGVmdDsNCgltYXJnaW4tbGVmdDouNzVpbjsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJ Zm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Ijt9DQpAbGlzdCBsMDpsZXZlbDMNCgl7bXNvLWxldmVs LW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CpzsNCgltc28tbGV2ZWwt dGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJbWFyZ2lu LWxlZnQ6MS4yNWluOw0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCglmb250LWZhbWlseTpXaW5nZGlu Z3M7fQ0KQGxpc3QgbDA6bGV2ZWw0DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsN Cgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxl dmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCW1hcmdpbi1sZWZ0OjEuNzVpbjsNCgl0ZXh0LWlu ZGVudDotLjI1aW47DQoJZm9udC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0IGwwOmxldmVsNQ0KCXtt c28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ6bzsNCgltc28t bGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJ bWFyZ2luLWxlZnQ6Mi4yNWluOw0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCglmb250LWZhbWlseToi Q291cmllciBOZXciO30NCkBsaXN0IGwwOmxldmVsNg0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1h dDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674KnOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25l Ow0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgltYXJnaW4tbGVmdDoyLjc1aW47 DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCWZvbnQtZmFtaWx5OldpbmdkaW5nczt9DQpAbGlzdCBs MDpsZXZlbDcNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10 ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBv c2l0aW9uOmxlZnQ7DQoJbWFyZ2luLWxlZnQ6My4yNWluOw0KCXRleHQtaW5kZW50Oi0uMjVpbjsN Cglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDA6bGV2ZWw4DQoJe21zby1sZXZlbC1udW1i ZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDpvOw0KCW1zby1sZXZlbC10YWItc3Rv cDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgltYXJnaW4tbGVmdDoz Ljc1aW47DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCWZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyI7 fQ0KQGxpc3QgbDA6bGV2ZWw5DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCglt c28tbGV2ZWwtdGV4dDrvgqc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVs LW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCW1hcmdpbi1sZWZ0OjQuMjVpbjsNCgl0ZXh0LWluZGVu dDotLjI1aW47DQoJZm9udC1mYW1pbHk6V2luZ2RpbmdzO30NCm9sDQoJe21hcmdpbi1ib3R0b206 MGluO30NCnVsDQoJe21hcmdpbi1ib3R0b206MGluO30NCi0tPjwvc3R5bGU+PCEtLVtpZiBndGUg bXNvIDldPjx4bWw+DQo8bzpzaGFwZWRlZmF1bHRzIHY6ZXh0PSJlZGl0IiBzcGlkbWF4PSIxMDI2 IiAvPg0KPC94bWw+PCFbZW5kaWZdLS0+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFw ZWxheW91dCB2OmV4dD0iZWRpdCI+DQo8bzppZG1hcCB2OmV4dD0iZWRpdCIgZGF0YT0iMSIgLz4N CjwvbzpzaGFwZWxheW91dD48L3htbD48IVtlbmRpZl0tLT4NCjwvaGVhZD4NCjxib2R5IGJnY29s b3I9IiNGRUZFRkUiIGxhbmc9IkVOLVVTIiBsaW5rPSIjNDE4M0M0IiB2bGluaz0iIzQxODNDNCIg c3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2IGNsYXNz PSJXb3JkU2VjdGlvbjEiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0 Oi41aW4iPjxiPkZyb206PC9iPiBNaWtrZWwgRmFobsO4ZSBKw7hyZ2Vuc2VuICZsdDttaWtrZWxm akBnbWFpbC5jb20mZ3Q7PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2Pg0KPGJsb2Nr cXVvdGUgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkICNEREREREQgMy4wcHQ7 cGFkZGluZzowaW4gMGluIDBpbiAxMS4wcHQ7bWFyZ2luLWxlZnQ6MGluO21hcmdpbi10b3A6MTEu MjVwdDttYXJnaW4tcmlnaHQ6MGluO21hcmdpbi1ib3R0b206MTEuMjVwdCI+DQo8cCBzdHlsZT0i bWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGlj YSBOZXVlJnF1b3Q7O2NvbG9yOiM3Nzc3NzciPlRoZSBRIFBlcmlvZCBuZWVkcyB0byBiZSBjaG9z ZW4gY2FyZWZ1bGx5LCBzaW5jZSB0aGUgb2JzZXJ2YXRpb24gY291bGQgYmVjb21lIHRvbyB1bnJl bGlhYmxlIGluIGNhc2Ugb2YgcGFja2V0IHJlb3JkZXJpbmcgYW5kIGxvc3MgaWYgUSBQZXJpb2Qg aXMgdG9vIHNtYWxsLiBIb3dldmVyLCB3aGVuIFENCiBQZXJpb2QgaXMgdG9vIGxhcmdlLCBzaG9y dCBjb25uZWN0aW9ucyBtYXkgbm90IHlpZWxkIGEgdXNlZnVsIHVwc3RyZWFtIGxvc3MgbWVhc3Vy ZW1lbnQuPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9ibG9ja3F1b3RlPg0KPHAgc3R5bGU9Im1h cmdpbi1sZWZ0Oi41aW4iPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2Eg TmV1ZSZxdW90OyI+V3J0LiBzaG9ydCBjb25uZWN0aW9ucywgZG8geW91IG1lYW4gbG93LWxhdGVu Y3ksIHNtYWxsIFJUVCwgb3Igc2hvcnQtbGl2ZWQ/PG86cD48L286cD48L3NwYW4+PC9wPg0KPHA+ PHNwYW4gc3R5bGU9ImNvbG9yOiM3MEFENDciPkJ5IOKAnHNob3J04oCdIEkgbWVhbiB0b28gZmV3 IHBhY2tldHMgc2VudCAoZmV3ZXIgdGhhbiBoYWxmIFEgUGVyaW9kKS4mbmJzcDsgSSB3aWxsIGNs YXJpZnkgdGhpcyBpbiB0aGUgdGV4dC4gVGhhbmsgeW91Ljwvc3Bhbj48bzpwPjwvbzpwPjwvcD4N CjxwIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1 b3Q7SGVsdmV0aWNhIE5ldWUmcXVvdDsiPldoaWxlIHRoaXMgbG9va3MgaW50ZXJlc3RpbmcsIGNh biB5b3UgZXhwbGFpbiBob3cgdGhlIG9iamVjdGl2ZXMgY29tcGV0ZSBvciBkaWZmZXIgZnJvbSB0 aGUgc3BpbiBiaXQsIGFuZCBxdWFsaXR5IGFuZCBpbmZvcm1hdGlvbiBwcm92aWRlZD88bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8cD48c3BhbiBzdHlsZT0iY29sb3I6IzcwQUQ0NyI+TGF0ZW5jeSBT cGluIEJpdCAoYWthIOKAnHNwaW4gYml04oCdKSBtZWFzdXJlcyBjb25uZWN0aW9uIHJ0dC4mbmJz cDsgVGhlIHByb3Bvc2VkIG1lY2hhbmlzbSBtZWFzdXJlcyBwYWNrZXQgbG9zcy4mbmJzcDsgU28g dGhlIHR3byBhcmUgY29tcGxlbWVudGFyeSBtZWFzdXJlbWVudCBzaWduYWxzLjxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjx1bCBzdHlsZT0ibWFyZ2luLXRvcDowaW4iIHR5cGU9ImRpc2MiPg0KPGxp IHN0eWxlPSJjb2xvcjojNzBBRDQ3O21hcmdpbi1sZWZ0Oi0uMjVpbjttc28tbGlzdDpsMCBsZXZl bDEgbGZvMSI+SWdvcjxvOnA+PC9vOnA+PC9saT48L3VsPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdiBp ZD0iYmxvb3BfY3VzdG9tZm9udCI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1z ZXJpZiI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5 OiZxdW90O0hlbHZldGljYSBOZXVlJnF1b3Q7Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iYWlybWFpbG9uIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4gc3R5 bGU9ImZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSBOZXVlJnF1b3Q7Ij5PbiA5IEp1bHkgMjAx OSBhdCAwNi40NS40MiwgTHViYXNoZXYsIElnb3IgKDxhIGhyZWY9Im1haWx0bzppbHViYXNoZUBh a2FtYWkuY29tIj5pbHViYXNoZUBha2FtYWkuY29tPC9hPikgd3JvdGU6PG86cD48L286cD48L3Nw YW4+PC9wPg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi1sZWZ0OjBpbjttYXJnaW4tdG9wOjEx LjI1cHQ7bWFyZ2luLXJpZ2h0OjBpbjttYXJnaW4tYm90dG9tOjExLjI1cHQiPg0KPGRpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OjBpbjtt YXJnaW4tcmlnaHQ6MGluO21hcmdpbi1ib3R0b206MTIuMHB0O21hcmdpbi1sZWZ0Oi41aW4iPg0K PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSBOZXVlJnF1b3Q7Ij5BbGV4 YW5kcmUsIElzYWJlbGxlLCBhbmQgSSBoYXZlIHBvc3RlZCBhIGRyYWZ0IG9uIGEgbWV0aG9kIGZv ciBlbmRwb2ludHMgdG8gc2lnbmFsIHBhY2tldCBsb3NzIHRvIHRoZSBwYXRoLCB3aGlsZSBtYWlu dGFpbmluZyBlbmQgdXNlciBwcml2YWN5IGFuZCByZXNpc3Rpbmcgb3NzaWZpY2F0aW9uLiBUaGUg bWV0aG9kIGlzIHByb3RvY29sLWluZGVwZW5kZW50LCBidXQgb2YNCiBjb3Vyc2UgeW91IGdldCB0 aGUgbW9zdCBiZW5lZml0IGJ5IGFwcGx5aW5nIHRoZSBtZXRob2QgdG8gZW5jcnlwdGVkIHRyYW5z cG9ydHMsIGFuZCBRVUlDIGlzIHdoYXQgcGVvcGxlIHVzdWFsbHkgdGhpbmsgb2YgZmlyc3QgaW4g c3VjaCBjb250ZXh0Lg0KPGJyPg0KPGJyPg0KVGhlIGRyYWZ0IGlzIG5vdCB0YXJnZXRlZCBhdCB0 aGUgUVVJQyBXRyBzcGVjaWZpY2FsbHksIHNpbmNlIGl0IGlzIGRlc2NyaWJpbmcgYSBnZW5lcmFs IG1ldGhvZCBvZiBzdWNoIGxvc3MgcmVwb3J0aW5nLiBCdXQgd2UgZG8gbWVudGlvbiBRVUlDLCBz byB0aGUgV0cgbWF5IGZpbmQgaXQgaW50ZXJlc3RpbmcuIFdlIHdvdWxkIHdlbGNvbWUgZmVlZGJh Y2sgZnJvbSB0aGUgUVVJQyBXRy4NCjxicj4NCjxicj4NCkxhcnMsIE1hcmssIEkgYW0gc3VyZSB0 aGUgbWVldGluZyBhZ2VuZGEgZm9yIE1vbnRyZWFsIGlzIHByZXR0eSB0aWdodCwgYnV0IGlmIHRo ZSBXRyBpcyBpbnRlcmVzdGVkLCB3ZSBhcmUgaGFwcHkgdG8gaGF2ZSBhIHF1aWNrIFFVSUMtc3Bl Y2lmaWMgcHJlc2VudGF0aW9uIG9uIHRoaXMuDQo8YnI+DQo8YnI+DQpUaGFuayB5b3UhIDxicj4N Cjxicj4NCi0gSWdvciA8YnI+DQo8YnI+DQpQLlMuIFdlJ3ZlIGltcGxlbWVudGVkIHRoaXMgcHJv cG9zYWwgaW4gc29tZSBBa2FtYWkgc2VydmVycyBhbmQgaGF2ZSBiZWVuIHVzaW5nIGl0IHRvIHNl cnZlIGFjdHVhbCBlbmQtdXNlciBRVUlDIHRyYWZmaWMgZm9yIGEgc3Vic2V0IG9mIE9yYW5nZSBj dXN0b21lcnMuIE9yYW5nZSBpbXBsZW1lbnRlZCBhIHBhc3NpdmUgb2JzZXJ2ZXIgdGhhdCB1c2Vk IHRoaXMgc2lnbmFsIHRvIGRldGVjdCBhbmQgaWRlbnRpZnkgbG9zcy4gV2UgY2FuIHNoYXJlDQog dGhlIGhpZ2gtbGV2ZWwgb2YgdGhlIHJlc3VsdHMgYW5kIHdpbGwgc2hhcmUgdGhlIGRldGFpbGVk IGFuYWx5c2lzIG9mIHRoZSBkYXRhIGFuZCBtZWFzdXJlbWVudCB0ZWNobmlxdWVzIGluIG1hcHJn Lg0KPGJyPg0KPGJyPg0KLS0tLS0tLS0tLS0tLS0tLS0tLS0tIDxicj4NCjxicj4NCjxhIGhyZWY9 Imh0dHBzOi8vdXJsZGVmZW5zZS5wcm9vZnBvaW50LmNvbS92Mi91cmw/dT1odHRwcy0zQV9fZGF0 YXRyYWNrZXIuaWV0Zi5vcmdfZG9jX2RyYWZ0LTJEZmVycmlldXhoYW1jaGFvdWktMkR0c3Z3Zy0y RGxvc3NiaXRzXyZhbXA7ZD1Ed01GYVEmYW1wO2M9OTZaYlpaY2FNRjR3MEY0anBONkxaZyZhbXA7 cj1Eam4zYlE1dU5KRFBNXzJza2ZMM3JXMXR6Y0l4eWpVWmRuX201NUtQbWxvJmFtcDttPTh0cWoz T0ttY0d3QWVUdmlmYmhwWk53aUdnUVFybGRfMDRjR3FkZFVnYXMmYW1wO3M9R0RVRmxUd0NwZ19F d2c2c1p1UjB1S0xKNWdMaVc4cVJQcmI4OEVvc2NyMCZhbXA7ZT0iPmh0dHBzOi8vZGF0YXRyYWNr ZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LWZlcnJpZXV4aGFtY2hhb3VpLXRzdndnLWxvc3NiaXRzLzwv YT4NCjxicj4NCjxicj4NCkFic3RyYWN0OiA8YnI+DQpUaGlzIGRvY3VtZW50IGRlc2NyaWJlcyBh IHByb3RvY29sLWluZGVwZW5kZW50IG1ldGhvZCB0aGF0IGVtcGxveXMgPGJyPg0KdHdvIGJpdHMg dG8gYWxsb3cgZW5kcG9pbnRzIHRvIHNpZ25hbCBwYWNrZXQgbG9zcyBpbiBhIHdheSB0aGF0IGNh biA8YnI+DQpiZSB1c2VkIGJ5IG5ldHdvcmsgZGV2aWNlcyB0byBtZWFzdXJlIGFuZCBsb2NhdGUg dGhlIHNvdXJjZSBvZiB0aGUgPGJyPg0KbG9zcy4gVGhlIHNpZ25hbGluZyBtZXRob2QgYXBwbGll cyB0byBhbGwgcHJvdG9jb2xzIHdpdGggYSBwcm90b2NvbC0gPGJyPg0Kc3BlY2lmaWMgd2F5IHRv IGlkZW50aWZ5IHBhY2tldCBsb3NzLiBUaGUgbWV0aG9kIGlzIGVzcGVjaWFsbHkgPGJyPg0KdmFs dWFibGUgd2hlbiBhcHBsaWVkIHRvIHByb3RvY29scyB0aGF0IGVuY3J5cHQgdHJhbnNwb3J0IGhl YWRlciBhbmQgPGJyPg0KZG8gbm90IGFsbG93IGFuIGFsdGVybmF0aXZlIG1ldGhvZCBmb3IgbG9z cyBkZXRlY3Rpb24uIDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Js b2NrcXVvdGU+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_8dac9ac39a5d4e75ac9de2799ff423d1ustx2exdag1mb5msgcorpak_-- From nobody Tue Jul 9 08:39:42 2019 Return-Path: X-Original-To: quic@ietf.org Delivered-To: quic@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 8CBD9120758; Tue, 9 Jul 2019 08:39:31 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: quic@ietf.org Subject: I-D Action: draft-ietf-quic-tls-22.txt X-Test-IDTracker: no X-IETF-IDTracker: 6.98.3 Auto-Submitted: auto-generated Precedence: bulk Reply-To: quic@ietf.org Message-ID: <156268677139.15924.12500557344742908105@ietfa.amsl.com> Date: Tue, 09 Jul 2019 08:39:31 -0700 Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Jul 2019 15:39:33 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the QUIC WG of the IETF. Title : Using TLS to Secure QUIC Authors : Martin Thomson Sean Turner Filename : draft-ietf-quic-tls-22.txt Pages : 44 Date : 2019-07-09 Abstract: This document describes how Transport Layer Security (TLS) is used to secure QUIC. Note to Readers Discussion of this draft takes place on the QUIC working group mailing list (quic@ietf.org), which is archived at https://mailarchive.ietf.org/arch/search/?email_list=quic [1]. Working Group information can be found at https://github.com/quicwg [2]; source code and issues list for this draft can be found at https://github.com/quicwg/base-drafts/labels/-tls [3]. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-quic-tls/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-quic-tls-22 https://datatracker.ietf.org/doc/html/draft-ietf-quic-tls-22 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-quic-tls-22 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Tue Jul 9 08:43:28 2019 Return-Path: X-Original-To: quic@ietf.org Delivered-To: quic@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 1D391120650; Tue, 9 Jul 2019 08:43:27 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: quic@ietf.org Subject: I-D Action: draft-ietf-quic-transport-22.txt X-Test-IDTracker: no X-IETF-IDTracker: 6.98.3 Auto-Submitted: auto-generated Precedence: bulk Reply-To: quic@ietf.org Message-ID: <156268700704.15835.13702078416920196416@ietfa.amsl.com> Date: Tue, 09 Jul 2019 08:43:27 -0700 Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Jul 2019 15:43:27 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the QUIC WG of the IETF. Title : QUIC: A UDP-Based Multiplexed and Secure Transport Authors : Jana Iyengar Martin Thomson Filename : draft-ietf-quic-transport-22.txt Pages : 148 Date : 2019-07-09 Abstract: This document defines the core of the QUIC transport protocol. Accompanying documents describe QUIC's loss detection and congestion control and the use of TLS for key negotiation. Note to Readers Discussion of this draft takes place on the QUIC working group mailing list (quic@ietf.org), which is archived at . Working Group information can be found at ; source code and issues list for this draft can be found at . The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-quic-transport/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-quic-transport-22 https://datatracker.ietf.org/doc/html/draft-ietf-quic-transport-22 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-quic-transport-22 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Tue Jul 9 08:46:13 2019 Return-Path: X-Original-To: quic@ietf.org Delivered-To: quic@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 2A76B120654; Tue, 9 Jul 2019 08:46:10 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: quic@ietf.org Subject: I-D Action: draft-ietf-quic-recovery-22.txt X-Test-IDTracker: no X-IETF-IDTracker: 6.98.3 Auto-Submitted: auto-generated Precedence: bulk Reply-To: quic@ietf.org Message-ID: <156268717009.15782.7043764273815102648@ietfa.amsl.com> Date: Tue, 09 Jul 2019 08:46:10 -0700 Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Jul 2019 15:46:10 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the QUIC WG of the IETF. Title : QUIC Loss Detection and Congestion Control Authors : Jana Iyengar Ian Swett Filename : draft-ietf-quic-recovery-22.txt Pages : 42 Date : 2019-07-09 Abstract: This document describes loss detection and congestion control mechanisms for QUIC. Note to Readers Discussion of this draft takes place on the QUIC working group mailing list (quic@ietf.org), which is archived at https://mailarchive.ietf.org/arch/search/?email_list=quic [1]. Working Group information can be found at https://github.com/quicwg [2]; source code and issues list for this draft can be found at https://github.com/quicwg/base-drafts/labels/-recovery [3]. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-quic-recovery/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-quic-recovery-22 https://datatracker.ietf.org/doc/html/draft-ietf-quic-recovery-22 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-quic-recovery-22 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Tue Jul 9 09:19:25 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1D8161206F0 for ; Tue, 9 Jul 2019 09:19:24 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=gmx.net Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BL9pAdUi64fR for ; Tue, 9 Jul 2019 09:19:22 -0700 (PDT) Received: from mout.gmx.net (mout.gmx.net [212.227.15.18]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A2C271206E2 for ; Tue, 9 Jul 2019 09:19:21 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=gmx.net; s=badeba3b8450; t=1562689151; bh=AtiB0zdlHc9GYY0FFFwD8Vhwto9qjkCL99u+6Su5GH4=; h=X-UI-Sender-Class:Subject:To:References:From:Date:In-Reply-To; b=EtN0G+LzTjxeI+5HqK30shYGW8dE54SXDu5XCXS1E4X5d5UT8O83HXfrSpvYkC9CW S1jzkcr+YnQAQHR9hOrxhVSetmTROACftCJvubtJcWUizGFysrqLw4cc8XlA3byD1S 8wAcVgfDGQfipQ9O/8IQDHNhpox4Y1C2/3iQkwQI= X-UI-Sender-Class: 01bb95c1-4bf8-414a-932a-4f6e2808ef9c Received: from [192.168.1.34] ([217.91.35.233]) by mail.gmx.com (mrgmx002 [212.227.17.190]) with ESMTPSA (Nemesis) id 0MOx4J-1hozA83CGV-006NhH; Tue, 09 Jul 2019 18:19:11 +0200 Subject: Re: -21 drafts out, missing important changes To: Martin Thomson , quic@ietf.org References: <0e87bb0b-0298-4f93-92f3-7e2883ba7750@www.fastmail.com> From: Julian Reschke Message-ID: <91c85c66-b4a3-67d8-cc1c-d56cb4e3a67f@gmx.de> Date: Tue, 9 Jul 2019 18:19:08 +0200 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:60.0) Gecko/20100101 Thunderbird/60.7.2 MIME-Version: 1.0 In-Reply-To: <0e87bb0b-0298-4f93-92f3-7e2883ba7750@www.fastmail.com> Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: quoted-printable X-Provags-ID: V03:K1:HBleUyxMxXdNNt9d9PgRFaVHaXUuoIUdRUcXKdxrkJ0ll2faWOY /m3PrU7XQ6RqkD3Cb4O3Xbsoi2uqEM7OzgjouXmofe85JoHUhF6Po284oPrRoZWUSfkn2bR 602AScy9OAyZvsX1DrWUdidQQBCLt9U+XGGlz2aWm5OQEcrtToQatTuijOap1c7NVSnoiVA OE4I49WhkVW9jJKr+AgMA== X-UI-Out-Filterresults: notjunk:1;V03:K0:v+busvjwtvM=:xvEZ8wm/augYh1AlA0siJl UDpI9vKvFpUGECH+Ib0tDl2vzsgjZeJOXSC9TljXq96K6tDYZiKUzzlu/Nt0qM1T7azRBUJid sNasfcjHzIbNdNgk//c+eXbZxk5GZHZXTa4Rj0gZwyNFb6LluE0hgHeP8yjz3+zKncKVvtqM2 3pMKY4+E8eRufQgu0yZBrJGMKczL0Zi9lyTXXCsRjEHEx/ibmNBIehUoC1C+5jvu6kGXBsB9q HtVVENejcxFWA5zDWDwx672MdXYspe3RlA+cJVVFavWggGSMmxvNLyM7BVZYGJNG5OoDM7jHN XzDEQQBI8tnWDnZDyKpV+r9unDCbpn+DRCFCuGOEZl4bez64cJSm4EntqLfsHbvB0kXmrZJPn TkrDRPSOd6twc4jUibCflSCeXaUYwHaVeIrgHuhIppJtug7WbJN0aL+b9ms9KumFMYTG8tSkl tLeeL93x8Sl5akubCXpLTOqSszIWQMvnkRGu+iJ2hVk0/YTH191Gwe0uKh2r0y41ej29pw6kd hwaDOSNBZrQo4+sGOPG60KkBwWoX5kMZIyRa37ikn3FoL55POyu7POzz6U6pM4HDMrJsw8Ryh iB8DRyDob8k40mNdcwtQSUg2ZwmZybehP+FpkFV7oRJRuLj44c5xdcs/dnc+DRhXHhsU5PIKV gIH90UYlszY8Xmbptdt20brQN1tXiI+wqfzwt0QY1mJrpt+FiOUJ4rJulIZ+E60gzzic1FdZL Wlq8+Q/nE6XtyDqJd/F2UMG/ySZ5tURk3H1G/FO8PLZFlV12tKYMB1WSbPdRZOMihq1WxqbHW U6mxHBIxJ0TVAZYV+OY7+1PLSKxAbteA/LWE8lHJqcU8iC4rYzBoHBhBXvB+qsdeV3WSRXt32 PxgSiHjQZnWdKxQRtH4iTwcGg+Qz6KdYgnpicCRdtJghpRrZv/R2Bdzov4DrGca5CMGAHeLy8 /CwCZs9kWUdDxaJ9h+VqLCRx387QbGZWBfGrgwi11t0L/jQZyS5lFMZ2CM8R/S8UBqIVLbY1c 3FSM9lBdtjIeZwlb2t+zi5dQxIzzRbhdrllTGB/AnM17mVQ99JA7OIQR2wzCMKQV7m6DVgU8a tnCdXihymgjQ/kRuZHq1POu4en9tdlRGZU1 Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Jul 2019 16:19:24 -0000 On 09.07.2019 02:05, Martin Thomson wrote: > For some reason, PR 2749, one of the main reasons we are publishing draf= t-21, didn't get merged. Don't ask me how that happened. Worse, the draf= t submission deadline just passed, so fixing this might get complicated. = Stay tuned. FWIW, doesn't show version 21... Best regards, Julian From nobody Tue Jul 9 09:59:17 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 94C88120294 for ; Tue, 9 Jul 2019 09:59:15 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.703 X-Spam-Level: X-Spam-Status: No, score=-0.703 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, PDS_NO_HELO_DNS=1.295, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id r2SvjzPqTizD for ; Tue, 9 Jul 2019 09:59:14 -0700 (PDT) Received: from mail-wm1-x329.google.com (mail-wm1-x329.google.com [IPv6:2a00:1450:4864:20::329]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DB68D1201AA for ; Tue, 9 Jul 2019 09:59:13 -0700 (PDT) Received: by mail-wm1-x329.google.com with SMTP id g67so4017414wme.1 for ; Tue, 09 Jul 2019 09:59:13 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=gH+EAgxNtGh0n9eY7Do2K0Ay0UwE1bIkVDYjPxeIyRQ=; b=DJjfCd7zlSu4nAmo7jt13UkOZ0zEhwcq+mINVJuMV44qf3LWy2bASPDy7igm3tym34 GIBEh/HfGPhDMjmWYgZaV75WeBx+B3baoZsko1tfNRYmXocuQWi802A1z5EkERx4Jkgg t23tKZSBhvEG+uWaTAUplkECwlSnzVcABK1qeGfyPZz4FiXn5LMR7aO0NiPrsgmuwcm3 ow848kPvMncf+i4+94avBBWC3Tr1PPXTUHaX/iqv8rPpFLO6z7VoqzJ3iAGMXKT0t0cR CzFf7iUD7OeK2DNhFsHGHER7Y7vGFZuhDomOheiJFBOGheB06DJRid6wZ4iuot0LzR6N HfQg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=gH+EAgxNtGh0n9eY7Do2K0Ay0UwE1bIkVDYjPxeIyRQ=; b=fG8XsqDeX59BqsMHTgCPH4mG6VbR17QBa4jOot0RVbQzHk0gh0lBIN77ZcaDmko+8W rIc8wozjFl5sGsHEwiWMj0H289ICWJjZOFz1AbaeX2WC8RmSpczvDzU/l5DVNiopXcY5 6/F4jCSjuYUyUdhKLH4+E5SG3a4ij8W/wx0UViOYtmOOE4/Z/qUULzot9jjbraYTGBA4 027g6agNSO7L4do6Y17pcpId6iT5B7ptm26YlzN9UdgCzK+6qZJrhQ6SUUJWP3/SSDdC diKtr6wAUY1cTDWsdtdlhwQ66+0WjK/JFpZ75bq9507cy3yCbwnYehwnOO2Tewc8EJTa CGIA== X-Gm-Message-State: APjAAAXaRhnBrq263iGO/sT8HRbOwxWH+/PTLvKJPPuEkbUyvvXoXa2M XSO0v3xib2fujI6Zvz6aLVWOXsdGtbmICJtNvjgn5Kqgyqw= X-Google-Smtp-Source: APXvYqylfDyg/MB6ajBEEnbBjIY0llhE4Zkd8TnFg/SWhgz9JsFGE8nrsQOzSOAeidJmJdNqj3/r4OWfwseuu+2P1Lw= X-Received: by 2002:a1c:67c3:: with SMTP id b186mr769529wmc.34.1562691552028; Tue, 09 Jul 2019 09:59:12 -0700 (PDT) MIME-Version: 1.0 From: Martin Duke Date: Tue, 9 Jul 2019 09:59:00 -0700 Message-ID: Subject: max_ack_delay for handshake To: IETF QUIC WG Content-Type: multipart/alternative; boundary="000000000000da3004058d427a8b" Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Jul 2019 16:59:16 -0000 --000000000000da3004058d427a8b Content-Type: text/plain; charset="UTF-8" New to section 4.4 of quic-recovery; *For Initial and Handshake packets, a max_ack_delay of 0 is used.* I see two possible meanings of this: 1) endpoints MUST not intentionally delay acks of Initial and Handshake packets; 2) In RTT calculation, endpoints should assume a peer max_ack_delay of zero. (2) is a little hairy because there is one RTT estimate, not a per-context one. But what is the intent here? --000000000000da3004058d427a8b Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
New to section 4.4 of quic-recovery;

For Initial and Handshake packets, a
   max_ack_delay of 0 is used.

I see two possible meanings of this:
1)= endpoints MUST not intentionally delay acks of Initial and Handshake packe= ts;
2) In RTT calculation, endpoints should assume a peer max_ack= _delay of zero.

(2) is a little hairy because ther= e is one RTT estimate, not a per-context one. But what is the intent here?<= br>
--000000000000da3004058d427a8b-- From nobody Tue Jul 9 10:00:41 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 90506120776 for ; Tue, 9 Jul 2019 10:00:39 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.703 X-Spam-Level: X-Spam-Status: No, score=-0.703 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, PDS_NO_HELO_DNS=1.295, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7RQuEeFOxufc for ; Tue, 9 Jul 2019 10:00:38 -0700 (PDT) Received: from mail-wr1-x429.google.com (mail-wr1-x429.google.com [IPv6:2a00:1450:4864:20::429]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 774C0120774 for ; Tue, 9 Jul 2019 10:00:31 -0700 (PDT) Received: by mail-wr1-x429.google.com with SMTP id a10so20735686wrp.9 for ; Tue, 09 Jul 2019 10:00:31 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to; bh=4ZNfBrLrvroMlxbWt0Rlxvnl2/eumXsbXktJqwksyL0=; b=g4HPHoe/ShLr+4dBpD1abKSZYT0pqsCJXcHfr5Lu8Of8Zx7Q1oc8JQ9nW6UuUtTLu8 U7edH/g5l5T6aW7qMh19bQMmvh0T7TTOXDGtfImFnYbNtnW9gip581adtLM13d9bTvXh 3cAZxhvaaqGcxnv9N1lYV2k/Ka4dSDZNmv88LpD6MdAR3O/15V9GqxcMUmsdzkBth7e+ 65HF3olk+BRY5JJvQEPNzFLRE0QWVsAnfbKaOdJx4ne43H25+jW4SdJurS2RVhdVcsoi 0H6OA9fkzB7H2Petx7fS0aJiEQha7ENa11rHf4lI/xm5vDXVExa8jhsdgZE63GxnkiwM g0cQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to; bh=4ZNfBrLrvroMlxbWt0Rlxvnl2/eumXsbXktJqwksyL0=; b=MgE7LPdZCODWG4DkP9ViZg30RTCbRA3bC6mOajUMOZLhC+rPxnnuebS2CjZqueYsrL NeqhVqsRLanTS/8cise1r4EgZZUbLVIYUDdYJyKKdONMCf5jczv4gFlIAnizutTIYS+V Ui11FBBJ9PIuApwtLdAwFS/jKobkbBZf2ytDgsjo0HU5oGVbsmTmjxj1Xbs6lSjt+QjF C/Leae3KHueW8b/4RF1RhEfh+9y3Rt8dotf5NyEHzXU0YosgQ/R32blnm2dZEhTVQsvh Y5Tz6qWc2oXXn07E44vwHmd+ww8JmH+dNAMjIxmn1m54RXQwZDkFvf6dF2uYrpOdF3hF IVtg== X-Gm-Message-State: APjAAAWmRClZ0AVTjl6UXC0tcf+e/B6p32GE5Ht8QodOV1smD7qu0j0s BxEtGqEHMBSHFN8/z3DUdJQFCVvYQ/qiKolKUZPGA/US X-Google-Smtp-Source: APXvYqy2K48HHFKpQQ/w4nkp8FuZdun5A0/R6Peu3RYFhPs/gVQw512X79/eiY6SeeazsFD1tURJ8Z10bGW9IwVf31E= X-Received: by 2002:a5d:5302:: with SMTP id e2mr25673581wrv.347.1562691629747; Tue, 09 Jul 2019 10:00:29 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: Martin Duke Date: Tue, 9 Jul 2019 10:00:18 -0700 Message-ID: Subject: Re: max_ack_delay for handshake To: IETF QUIC WG Content-Type: multipart/alternative; boundary="0000000000007c11da058d427f90" Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Jul 2019 17:00:39 -0000 --0000000000007c11da058d427f90 Content-Type: text/plain; charset="UTF-8" Ah, I see now that Section 5.3 makes it clear that we must use a value of zero. Never mind! On Tue, Jul 9, 2019 at 9:59 AM Martin Duke wrote: > New to section 4.4 of quic-recovery; > > *For Initial and Handshake packets, a > max_ack_delay of 0 is used.* > > > I see two possible meanings of this: > 1) endpoints MUST not intentionally delay acks of Initial and Handshake > packets; > 2) In RTT calculation, endpoints should assume a peer max_ack_delay of > zero. > > (2) is a little hairy because there is one RTT estimate, not a per-context > one. But what is the intent here? > --0000000000007c11da058d427f90 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Ah, I see now that Section 5.3 makes it clear that we must= use a value of zero. Never mind!

<= div dir=3D"ltr" class=3D"gmail_attr">On Tue, Jul 9, 2019 at 9:59 AM Martin = Duke <martin.h.duke@gmail.com= > wrote:
=
New to section 4.4 of quic-recovery;

For Initial and Handshake packets, a
   max_ack_delay of 0 is used.

I see two possible meanings of this:
1)= endpoints MUST not intentionally delay acks of Initial and Handshake packe= ts;
2) In RTT calculation, endpoints should assume a peer max_ack= _delay of zero.

(2) is a little hairy because ther= e is one RTT estimate, not a per-context one. But what is the intent here?<= br>
--0000000000007c11da058d427f90-- From nobody Tue Jul 9 10:43:06 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A81F2120270; Tue, 9 Jul 2019 10:42:47 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.7 X-Spam-Level: X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=akamai.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RZZchpu4tY9G; Tue, 9 Jul 2019 10:42:45 -0700 (PDT) Received: from mx0a-00190b01.pphosted.com (mx0a-00190b01.pphosted.com [IPv6:2620:100:9001:583::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9A40F1207FF; Tue, 9 Jul 2019 10:42:45 -0700 (PDT) Received: from pps.filterd (m0050093.ppops.net [127.0.0.1]) by m0050093.ppops.net-00190b01. (8.16.0.27/8.16.0.27) with SMTP id x69Hbu3V017974; Tue, 9 Jul 2019 18:42:35 +0100 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=akamai.com; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : content-transfer-encoding : mime-version; s=jan2016.eng; bh=ubi978cg1W0/Fe0e0Ut3RaYlZncFBcpswpuXhlcCDAI=; b=Qqlq5I1/uHccXC9XnrLkOXfJO4h+ZKbBOPA4HR+Q30PgIXiOwRgBGJClUhL7SHH7N9KO B3ggIxmehqdKUiyl/4dc+252iJy41gYvD7DV+mKDQ4PJWUskvRJClV+IZpv4xmz7KE7e 4cNfq6iPcm2F3wAJK/4JCHpK7GKk8BEBx/fDEgsESSe+DBvy18aXhvpKuK/ZDnbqgukC uxi7u6+E4jrlSMvXp4cLYURwqWyHEr75oKufuEh++yinhu7SAQnNnt9Y1A7DqioZRtfU l1S86zhgo/kjdp4BKORayfWOTS9naUV2AIe0/Qz/EWflbVKRJUcjmOpBAlhAHlZxcAM1 QA== Received: from prod-mail-ppoint5 (prod-mail-ppoint5.akamai.com [184.51.33.60] (may be forged)) by m0050093.ppops.net-00190b01. with ESMTP id 2tjjwpnw6q-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Tue, 09 Jul 2019 18:42:35 +0100 Received: from pps.filterd (prod-mail-ppoint5.akamai.com [127.0.0.1]) by prod-mail-ppoint5.akamai.com (8.16.0.27/8.16.0.27) with SMTP id x69Hf7Bw000559; Tue, 9 Jul 2019 10:42:34 -0700 Received: from email.msg.corp.akamai.com ([172.27.25.32]) by prod-mail-ppoint5.akamai.com with ESMTP id 2tjsm80qch-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT); Tue, 09 Jul 2019 10:42:34 -0700 Received: from USTX2EX-DAG1MB5.msg.corp.akamai.com (172.27.27.105) by ustx2ex-dag1mb4.msg.corp.akamai.com (172.27.27.104) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Tue, 9 Jul 2019 12:42:32 -0500 Received: from USTX2EX-DAG1MB5.msg.corp.akamai.com ([172.27.27.105]) by ustx2ex-dag1mb5.msg.corp.akamai.com ([172.27.27.105]) with mapi id 15.00.1473.004; Tue, 9 Jul 2019 12:42:33 -0500 From: "Lubashev, Igor" To: Kuhn Nicolas , "tsvwg@ietf.org" , IETF QUIC WG , "'tls@ietf.org'" CC: "'gorry@erg.abdn.ac.uk'" , "'emile.stephan@orange.com'" Subject: RE: Updates on the "Transport parameters for 0-RTT connections" draft Thread-Topic: Updates on the "Transport parameters for 0-RTT connections" draft Thread-Index: AdUP24Zg+1VIa8FMRoKfDVG/fwUlTgmnZqQg Date: Tue, 9 Jul 2019 17:42:32 +0000 Message-ID: <998fba75095b4417bb6a41a2cd2075c4@ustx2ex-dag1mb5.msg.corp.akamai.com> References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [172.19.36.122] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2019-07-09_07:, , signatures=0 X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 suspectscore=0 malwarescore=0 phishscore=0 bulkscore=0 spamscore=0 mlxscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1810050000 definitions=main-1907090207 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2019-07-09_07:, , signatures=0 X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1011 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1810050000 definitions=main-1907090208 Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Jul 2019 17:42:48 -0000 Nico, thanks for caring about clients behind high-latency links. > The NewSessionTicket carries an additional field named 'early_data' > that indicates to the client the maximum size of application data to > insert in the 0-RTT message. I see that draft-ietf-quic-tls requires use of initial_max_data instead and= required "early_data" to carry no information. See section 4.5 "Enabling = 0-RTT". Is there an advantage to use one vs the other?=20 > BDP_metadata All these parameters the client can calculate itself. You mention that the = clients may actually reject BDP_metadata, if its contents seem suspect to i= t. So is this structure useful because some clients will be able to make us= e of these fields on a subsequent 0-RTT connection but would not care to im= plement the needed measurements themselves? Or is there some other reason? Best wishes, - Igor ----------------------- From: Kuhn Nicolas =20 Sent: Tuesday, May 21, 2019 9:47 AM Subject: Updates on the "Transport parameters for 0-RTT connections" draft Dear all,=20 Following the different feedbacks on this draft, we have proposed an update= d version on the "Transport parameters for 0-RTT connections".=20 https://datatracker.ietf.org/doc/draft-kuhn-quic-0rtt-bdp/ The draft proposes a solution where path characteristics are shared between= the peers to improve the ingress traffic for 0-RTT connections. The difference with version 01 are mainly based on the received feedback. In short, we now a BDP_metadata structure so that various path parameters c= an be exposed to the client (MTU, RTT, bandwidth, loss-rate). We have also added a section to discuss what happens when BDP is used incor= rectly. Let us know if we have any views or interest in this proposal.=20 Cheers, Nico for the authors From nobody Tue Jul 9 14:14:04 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7E0A21200C7; Tue, 9 Jul 2019 14:14:02 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.598 X-Spam-Level: X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eLVJg03GefyO; Tue, 9 Jul 2019 14:14:00 -0700 (PDT) Received: from relais-inet.orange.com (relais-inet.orange.com [80.12.66.41]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 654D212006F; Tue, 9 Jul 2019 14:14:00 -0700 (PDT) Received: from opfedar06.francetelecom.fr (unknown [xx.xx.xx.8]) by opfedar21.francetelecom.fr (ESMTP service) with ESMTP id 45jw6Z5Whsz7tkH; Tue, 9 Jul 2019 23:13:58 +0200 (CEST) Received: from Exchangemail-eme6.itn.ftgroup (unknown [xx.xx.13.42]) by opfedar06.francetelecom.fr (ESMTP service) with ESMTP id 45jw6Z45Qkz3wb8; Tue, 9 Jul 2019 23:13:58 +0200 (CEST) Received: from OPEXCAUBM44.corporate.adroot.infra.ftgroup ([fe80::e8a4:8bb:d7c2:f4e2]) by OPEXCAUBMA2.corporate.adroot.infra.ftgroup ([::1]) with mapi id 14.03.0439.000; Tue, 9 Jul 2019 23:13:58 +0200 From: To: "Lubashev, Igor" , Kuhn Nicolas , "tsvwg@ietf.org" , IETF QUIC WG , "'tls@ietf.org'" CC: "'gorry@erg.abdn.ac.uk'" Subject: QUIC vs TLS1.3 initial_max_data (was RE: Updates on the "Transport parameters for 0-RTT connections" draft) Thread-Topic: QUIC vs TLS1.3 initial_max_data (was RE: Updates on the "Transport parameters for 0-RTT connections" draft) Thread-Index: AdU2myLE/AUABr1hRZ2MXDXAZs+ZWw== Date: Tue, 9 Jul 2019 21:13:57 +0000 Message-ID: <5269_1562706838_5D250396_5269_207_1_5AE9CCAA1B4A2248AB61B4C7F0AD5FB931E78610@OPEXCAUBM44.corporate.adroot.infra.ftgroup> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.114.13.247] Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Jul 2019 21:14:03 -0000 Hi Igor, You are right, QUIC TLS spec maps TLS1.3 'early_data' field in the "initia= l_max_data" transport parameter. I don't know the motivation. It sounds good to move transport parameters ou= t of the TLS NewSessionTicket. Regards Emile -----Message d'origine----- De=A0: Lubashev, Igor [mailto:ilubashe@akamai.com]=20 Envoy=E9=A0: mardi 9 juillet 2019 19:43 =C0=A0: Kuhn Nicolas; tsvwg@ietf.org; IETF QUIC WG; 'tls@ietf.org' Cc=A0: 'gorry@erg.abdn.ac.uk'; STEPHAN Emile TGI/OLN Objet=A0: RE: Updates on the "Transport parameters for 0-RTT connections" d= raft Nico, thanks for caring about clients behind high-latency links. > The NewSessionTicket carries an additional field named 'early_data' > that indicates to the client the maximum size of application data to > insert in the 0-RTT message. I see that draft-ietf-quic-tls requires use of initial_max_data instead and= required "early_data" to carry no information. See section 4.5 "Enabling = 0-RTT". Is there an advantage to use one vs the other?=20 > BDP_metadata All these parameters the client can calculate itself. You mention that the = clients may actually reject BDP_metadata, if its contents seem suspect to i= t. So is this structure useful because some clients will be able to make us= e of these fields on a subsequent 0-RTT connection but would not care to im= plement the needed measurements themselves? Or is there some other reason? Best wishes, - Igor ----------------------- From: Kuhn Nicolas =20 Sent: Tuesday, May 21, 2019 9:47 AM Subject: Updates on the "Transport parameters for 0-RTT connections" draft Dear all,=20 Following the different feedbacks on this draft, we have proposed an update= d version on the "Transport parameters for 0-RTT connections".=20 https://datatracker.ietf.org/doc/draft-kuhn-quic-0rtt-bdp/ The draft proposes a solution where path characteristics are shared between= the peers to improve the ingress traffic for 0-RTT connections. The difference with version 01 are mainly based on the received feedback. In short, we now a BDP_metadata structure so that various path parameters c= an be exposed to the client (MTU, RTT, bandwidth, loss-rate). We have also added a section to discuss what happens when BDP is used incor= rectly. Let us know if we have any views or interest in this proposal.=20 Cheers, Nico for the authors ___________________________________________________________________________= ______________________________________________ Ce message et ses pieces jointes peuvent contenir des informations confiden= tielles ou privilegiees et ne doivent donc pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu= ce message par erreur, veuillez le signaler a l'expediteur et le detruire ainsi que les pieces jointes. Les messages el= ectroniques etant susceptibles d'alteration, Orange decline toute responsabilite si ce message a ete altere, deforme ou = falsifie. Merci. This message and its attachments may contain confidential or privileged inf= ormation that may be protected by law; they should not be distributed, used or copied without authorisation. If you have received this email in error, please notify the sender and dele= te this message and its attachments. As emails may be altered, Orange is not liable for messages that have been = modified, changed or falsified. Thank you. From nobody Tue Jul 9 14:27:54 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 845E812004F for ; Tue, 9 Jul 2019 14:27:52 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HV0e56wNRsb7 for ; Tue, 9 Jul 2019 14:27:48 -0700 (PDT) Received: from NAM02-BL2-obe.outbound.protection.outlook.com (mail-bl2nam02on0709.outbound.protection.outlook.com [IPv6:2a01:111:f400:fe46::709]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6C19912000E for ; Tue, 9 Jul 2019 14:27:48 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=j0CKcVlOrG5PlHA4OebjWM5aguoiCMMoZBsTRabvESDEWSiXd+rceMjtMZj4CwuITbRNa6v7SjzXFBoewFLnr9pEsVgBtLY/KYHjaXbmOQ0E1he/nIPdhINlDVifII8lWV/TBWTJPsmmJ63GWZa7rAcLMbdz5MD/EAwZUohZWTCyFmMcUad0zsf0lnOz4ISdqYefqijixD1wXxsM2Ct6rYN4qZ7d9DbHjYKYuJgM/w6SKDyNPZ/GoktOZEX4DBzOygfQOxpiKK1s1GZg3zbw4KRaG6sB4qxwBl0MPxZsCPSW3zWYu0WCqiRfF0qlXkQWyuNttVdVL1hE9dgVoI5FfA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=0yqCISLcCSUEoVNau272EHJiJNmGDOY8oPTvtHuAgkk=; b=GuPK1OATr26yxtYc6DKY4OtFGoG66pNOJ4v+046SIOo3dFTYH5w+Ww98KhYa50Q60EFp1sNKjKo34mLThwwV7U5gAW+INULK/5j/zQ02eLaMYWfWE/ZipBM6Tv2xFRTx3FqmZp57gvEE45H3XSkhhPYf83fv8nHWr61jvESNlGEXXXXAbfk2FrKWSgemBYZ8MyAA5UUxoQQz8v2u7nPqFIrSiNFf9Pnc4x5miPxa2PFoxpqPPU82PkNAQgj8njRWvrWLpXIFJ7lVGSLVMriS/6/vL6NSv5zKB3e8Rs6X+PyEWQDmvrv7vHVj8AP7X6VDFY8VpUayeig8SsNVLlQ3hg== ARC-Authentication-Results: i=1; mx.microsoft.com 1;spf=pass smtp.mailfrom=microsoft.com;dmarc=pass action=none header.from=microsoft.com;dkim=pass header.d=microsoft.com;arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=0yqCISLcCSUEoVNau272EHJiJNmGDOY8oPTvtHuAgkk=; b=FXtrWhJJssb7/vkkWO8EjGpJ+muwDQNq2oLzF9MTbetbYCHMs/7hdg25MI1sSePCgfzQzrLy0YTxXPYwsopvTD8s2xHABlJkfsXnobENFlGFTK+aZqllvW/m61yW2Ds7ssu75okvTdVBMTZ0RkOWAJzrVqkcu+aMHLpYHNRmMag= Received: from MW2PR2101MB1049.namprd21.prod.outlook.com (52.132.149.13) by MW2PR2101MB1098.namprd21.prod.outlook.com (52.132.149.27) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2094.3; Tue, 9 Jul 2019 21:27:46 +0000 Received: from MW2PR2101MB1049.namprd21.prod.outlook.com ([fe80::b911:fd5d:e7d6:2dab]) by MW2PR2101MB1049.namprd21.prod.outlook.com ([fe80::b911:fd5d:e7d6:2dab%6]) with mapi id 15.20.2094.001; Tue, 9 Jul 2019 21:27:46 +0000 From: Praveen Balasubramanian To: Ian Swett , Nick Banks CC: IETF QUIC WG , Martin Duke Subject: RE: Handshake timeout failures? Thread-Topic: Handshake timeout failures? Thread-Index: AQHVNdUcFUKgewnAG0KKv1L0B9DqW6bBQ4KAgABLOYCAAPyqkA== Date: Tue, 9 Jul 2019 21:27:45 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=pravb@ntdev.microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2019-07-09T21:27:44.2280642Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=5e3875b2-f8bd-48fc-8be5-b0ba7e27f864; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic authentication-results: spf=none (sender IP is ) smtp.mailfrom=pravb@microsoft.com; x-originating-ip: [2001:4898:80e8:3:6c7b:cda3:12a0:f9f8] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: f42dff55-1189-4c0e-ddde-08d704b448f8 x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600148)(711020)(4605104)(1401327)(4618075)(2017052603328)(7193020); SRVR:MW2PR2101MB1098; x-ms-traffictypediagnostic: MW2PR2101MB1098: x-ms-exchange-purlcount: 3 x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-forefront-prvs: 0093C80C01 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(4636009)(366004)(346002)(396003)(39860400002)(376002)(136003)(199004)(189003)(54094003)(11346002)(446003)(236005)(9686003)(55016002)(6436002)(46003)(186003)(6306002)(54896002)(99286004)(7116003)(229853002)(10090500001)(52536014)(14454004)(5660300002)(10290500003)(110136005)(478600001)(8990500004)(22452003)(316002)(54906003)(7736002)(86362001)(76176011)(7696005)(102836004)(53546011)(6506007)(74316002)(81166006)(81156014)(8676002)(4326008)(64756008)(66446008)(66556008)(517774005)(33656002)(606006)(25786009)(66476007)(6246003)(486006)(53936002)(76116006)(66946007)(71200400001)(71190400001)(476003)(790700001)(6116002)(3480700005)(68736007)(5070765005)(2906002)(256004)(8936002); DIR:OUT; SFP:1102; SCL:1; SRVR:MW2PR2101MB1098; H:MW2PR2101MB1049.namprd21.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam-message-info: 7ELonPLXxhNhiSaQETpm3oky2vL4D5E67D0wrBGP2nZNI6ThjAVI2O+P/yZKKo82vaMm2NsaOVMLbNWb66Jp21pU/BHO0BCYeZG0ab8VHyQwAZ6vtUUIKuAr1d/ojE/f6y88VeIlw9k0oWxDEEQphVujdnb9A4ODIOlU1427ZX7Lq735DkxY1vRfzRgLRhGBuDHTgz6ZeY9ka7uCC4mqx/3euyBNH+gRBtKYWqFeQZCXPrlnBDsrXMnLuofp1SPWgXZjMReg5hEVOxlW5mvpHdz6j7Ukn0dJ9hF2NSo3ZImd8LnZ4pPImmGLTbIwrKORNnX+CejQ0Lb8nmA/+tmAPIKxsUN57UaGO1+Fz+IFBCMzu0qF8yMSuun0jHGToFTQJz7rRLKjn/cIMFJfHtPW0HlboI1F6IClOMmGEangXqQ= Content-Type: multipart/alternative; boundary="_000_MW2PR2101MB104918091B075CA105BF20E8B6F10MW2PR2101MB1049_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: f42dff55-1189-4c0e-ddde-08d704b448f8 X-MS-Exchange-CrossTenant-originalarrivaltime: 09 Jul 2019 21:27:45.9249 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: pravb@ntdev.microsoft.com X-MS-Exchange-Transport-CrossTenantHeadersStamped: MW2PR2101MB1098 Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Jul 2019 21:27:53 -0000 --_000_MW2PR2101MB104918091B075CA105BF20E8B6F10MW2PR2101MB1049_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 QWdyZWVkLiBPbmUgY29uc2lkZXJhdGlvbiBpbiBwaWNraW5nIGEgbWluIGJvdW5kIGlzIFZNIGxp dmUgbWlncmF0aW9uIHdoZXJlIGl0cyBkZXNpcmFibGUgdG8gaGF2ZSBhdCBsZWFzdCBvbmUgcmV0 cnkgcG9zdCB0aGUgYmxhY2tvdXQgcGVyaW9kLiBJIHdvbmRlciBpZiB3ZSBzaG91bGQgYWRkIHRl eHQgc3BlY2lmeWluZyBhIG1pbmltdW0gdmFsdWUgZm9yIGJvdGggaGFuZHNoYWtlIHRpbWVvdXQg YW5kIGlkbGUgdGltZW91dC4NCg0KRnJvbTogUVVJQyA8cXVpYy1ib3VuY2VzQGlldGYub3JnPiBP biBCZWhhbGYgT2YgSWFuIFN3ZXR0DQpTZW50OiBNb25kYXksIEp1bHkgOCwgMjAxOSA3OjIzIFBN DQpUbzogTmljayBCYW5rcyA8bmliYW5rcz00MG1pY3Jvc29mdC5jb21AZG1hcmMuaWV0Zi5vcmc+ DQpDYzogSUVURiBRVUlDIFdHIDxxdWljQGlldGYub3JnPjsgTWFydGluIER1a2UgPG1hcnRpbi5o LmR1a2VAZ21haWwuY29tPg0KU3ViamVjdDogUmU6IEhhbmRzaGFrZSB0aW1lb3V0IGZhaWx1cmVz Pw0KDQpJIHRoaW5rIHNvbWUgdGV4dCBvbiBib3RoIGEgaGFuZHNoYWtlIHRpbWVvdXQodGhhdCdz IHByZXN1bWFibHkgc2hvcnRlciB0aGFuIGEgc3RhbmRhcmQgaWRsZSB0aW1lb3V0KSBhbmQgYSBk ZWFkIHBhdGggdGltZW91dCB3b3VsZCBiZSBoZWxwZnVsLCBldmVuIGlmIGl0J3Mgbm90IG5vcm1h dGl2ZS4NCg0KT24gTW9uLCBKdWwgOCwgMjAxOSBhdCA1OjU2IFBNIE5pY2sgQmFua3MgPG5pYmFu a3M9NDBtaWNyb3NvZnQuY29tQGRtYXJjLmlldGYub3JnPG1haWx0bzo0MG1pY3Jvc29mdC5jb21A ZG1hcmMuaWV0Zi5vcmc+PiB3cm90ZToNClRoZSBXRyB0YWxrZWQgYWJvdXQgZGVhZCBwYXRoIHRp bWVvdXRzIGZvciBhIGxpdHRsZSBiaXQgKGluIFRva3lvIEkgdGhpbmspIGJ1dCwgYXQgdGhlIHRp bWUsIGRlY2lkZWQgdG8gbGVhdmUgaXQgdG8gaW1wbGVtZW50YXRpb25zLiBJIHBlcnNvbmFsbHkg dGhpbmsgaGF2aW5nIGEgZGVhZCBwYXRoIHRpbWVvdXQgZGVzY3JpcHRpb24gaW4gdGhlIHRleHQg d291bGQgYmUgYSBnb29kIGlkZWEuIEnigJlkIGJlIGhhcHB5IHRvIHJldmlzaXQgdGhlIGRpc2N1 c3Npb24uDQoNCi0gTmljaw0KDQpTZW50IGZyb20gTWFpbDxodHRwczovL2dvLm1pY3Jvc29mdC5j b20vZndsaW5rLz9MaW5rSWQ9NTUwOTg2PiBmb3IgV2luZG93cyAxMA0KW0h4UyAtIDE4OTM2IC0g MTYuMC4xMTkwMS4yMDA0Ml0NCg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCkZy b206IFFVSUMgPHF1aWMtYm91bmNlc0BpZXRmLm9yZzxtYWlsdG86cXVpYy1ib3VuY2VzQGlldGYu b3JnPj4gb24gYmVoYWxmIG9mIE1hcnRpbiBEdWtlIDxtYXJ0aW4uaC5kdWtlQGdtYWlsLmNvbTxt YWlsdG86bWFydGluLmguZHVrZUBnbWFpbC5jb20+Pg0KU2VudDogTW9uZGF5LCBKdWx5IDgsIDIw MTkgNDozNDowMCBQTQ0KVG86IElFVEYgUVVJQyBXRyA8cXVpY0BpZXRmLm9yZzxtYWlsdG86cXVp Y0BpZXRmLm9yZz4+DQpTdWJqZWN0OiBIYW5kc2hha2UgdGltZW91dCBmYWlsdXJlcz8NCg0KSXMg dGhlcmUgc29tZXdoZXJlIGluIHRoZSBkcmFmdHMgd2hlcmUgd2UgcHJvdmlkZSBzdWdnZXN0aW9u cyBhYm91dCBob3cgdG8gdGltZSBvdXQgY29ubmVjdGlvbnMgd2hlbiBub3QgeWV0IGVzdGFibGlz aGVkPyBJIGJlbGlldmUgdGhlIElkbGUgVGltZW91dCBzZWN0aW9uIGFwcGxpZXMgc3BlY2lmaWNh bGx5IHRvIGVzdGFibGlzaGVkIGNvbm5lY3Rpb25zLg0KDQpUaGlzIG5lZWQgbm90IGJlIGludGVu c2VseSBwcmVzY3JpcHRpdmUsIGJ1dCBpdCB3b3VsZCBiZSBuaWNlIHRvIGhhdmUgc29tZSBndWlk ZWxpbmVzIG9uIGhvdyBub3QgdG8gZmFpbCB0b28gcXVpY2tseS4NCg== --_000_MW2PR2101MB104918091B075CA105BF20E8B6F10MW2PR2101MB1049_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPCEtLVtp ZiAhbXNvXT48c3R5bGU+dlw6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kb1w6KiB7 YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kd1w6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0 I1ZNTCk7fQ0KLnNoYXBlIHtiZWhhdmlvcjp1cmwoI2RlZmF1bHQjVk1MKTt9DQo8L3N0eWxlPjwh W2VuZGlmXS0tPjxzdHlsZT48IS0tDQovKiBGb250IERlZmluaXRpb25zICovDQpAZm9udC1mYWNl DQoJe2ZvbnQtZmFtaWx5OiJDYW1icmlhIE1hdGgiOw0KCXBhbm9zZS0xOjIgNCA1IDMgNSA0IDYg MyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDYWxpYnJpOw0KCXBhbm9zZS0xOjIg MTUgNSAyIDIgMiA0IDMgMiA0O30NCi8qIFN0eWxlIERlZmluaXRpb25zICovDQpwLk1zb05vcm1h bCwgbGkuTXNvTm9ybWFsLCBkaXYuTXNvTm9ybWFsDQoJe21hcmdpbjowaW47DQoJbWFyZ2luLWJv dHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmki LHNhbnMtc2VyaWY7fQ0KYTpsaW5rLCBzcGFuLk1zb0h5cGVybGluaw0KCXttc28tc3R5bGUtcHJp b3JpdHk6OTk7DQoJY29sb3I6Ymx1ZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCmE6 dmlzaXRlZCwgc3Bhbi5Nc29IeXBlcmxpbmtGb2xsb3dlZA0KCXttc28tc3R5bGUtcHJpb3JpdHk6 OTk7DQoJY29sb3I6cHVycGxlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KcC5tc29u b3JtYWwwLCBsaS5tc29ub3JtYWwwLCBkaXYubXNvbm9ybWFsMA0KCXttc28tc3R5bGUtbmFtZTpt c29ub3JtYWw7DQoJbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87DQoJbWFyZ2luLXJpZ2h0OjBpbjsN Cgltc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzsNCgltYXJnaW4tbGVmdDowaW47DQoJZm9udC1z aXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQpzcGFuLkVt YWlsU3R5bGUxOA0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1yZXBseTsNCglmb250LWZhbWls eToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjp3aW5kb3d0ZXh0O30NCi5Nc29DaHBEZWZh dWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7DQoJ Zm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJ e3NpemU6OC41aW4gMTEuMGluOw0KCW1hcmdpbjoxLjBpbiAxLjBpbiAxLjBpbiAxLjBpbjt9DQpk aXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi0tPjwvc3R5bGU+PCEtLVtp ZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWRlZmF1bHRzIHY6ZXh0PSJlZGl0IiBzcGlkbWF4 PSIxMDI2IiAvPg0KPC94bWw+PCFbZW5kaWZdLS0+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8 bzpzaGFwZWxheW91dCB2OmV4dD0iZWRpdCI+DQo8bzppZG1hcCB2OmV4dD0iZWRpdCIgZGF0YT0i MSIgLz4NCjwvbzpzaGFwZWxheW91dD48L3htbD48IVtlbmRpZl0tLT4NCjwvaGVhZD4NCjxib2R5 IGxhbmc9IkVOLVVTIiBsaW5rPSJibHVlIiB2bGluaz0icHVycGxlIj4NCjxkaXYgY2xhc3M9Ildv cmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5BZ3JlZWQuIE9uZSBjb25zaWRlcmF0 aW9uIGluIHBpY2tpbmcgYSBtaW4gYm91bmQgaXMgVk0gbGl2ZSBtaWdyYXRpb24gd2hlcmUgaXRz IGRlc2lyYWJsZSB0byBoYXZlIGF0IGxlYXN0IG9uZSByZXRyeSBwb3N0IHRoZSBibGFja291dCBw ZXJpb2QuIEkgd29uZGVyIGlmIHdlIHNob3VsZCBhZGQgdGV4dCBzcGVjaWZ5aW5nIGEgbWluaW11 bSB2YWx1ZSBmb3IgYm90aCBoYW5kc2hha2UgdGltZW91dCBhbmQgaWRsZQ0KIHRpbWVvdXQuIDxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj5Gcm9tOjwvYj4gUVVJQyAmbHQ7cXVpYy1ib3VuY2Vz QGlldGYub3JnJmd0OyA8Yj5PbiBCZWhhbGYgT2YgPC9iPg0KSWFuIFN3ZXR0PGJyPg0KPGI+U2Vu dDo8L2I+IE1vbmRheSwgSnVseSA4LCAyMDE5IDc6MjMgUE08YnI+DQo8Yj5Ubzo8L2I+IE5pY2sg QmFua3MgJmx0O25pYmFua3M9NDBtaWNyb3NvZnQuY29tQGRtYXJjLmlldGYub3JnJmd0Ozxicj4N CjxiPkNjOjwvYj4gSUVURiBRVUlDIFdHICZsdDtxdWljQGlldGYub3JnJmd0OzsgTWFydGluIER1 a2UgJmx0O21hcnRpbi5oLmR1a2VAZ21haWwuY29tJmd0Ozxicj4NCjxiPlN1YmplY3Q6PC9iPiBS ZTogSGFuZHNoYWtlIHRpbWVvdXQgZmFpbHVyZXM/PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj5JIHRoaW5rIHNvbWUgdGV4dCBvbiBib3RoIGEgaGFuZHNoYWtlIHRpbWVvdXQodGhhdCdz IHByZXN1bWFibHkgc2hvcnRlciB0aGFuIGEgc3RhbmRhcmQgaWRsZSB0aW1lb3V0KSBhbmQgYSBk ZWFkIHBhdGggdGltZW91dCB3b3VsZCBiZSBoZWxwZnVsLCBldmVuIGlmIGl0J3Mgbm90IG5vcm1h dGl2ZS48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4m bmJzcDs8L286cD48L3A+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPk9uIE1v biwgSnVsIDgsIDIwMTkgYXQgNTo1NiBQTSBOaWNrIEJhbmtzICZsdDtuaWJhbmtzPTxhIGhyZWY9 Im1haWx0bzo0MG1pY3Jvc29mdC5jb21AZG1hcmMuaWV0Zi5vcmciPjQwbWljcm9zb2Z0LmNvbUBk bWFyYy5pZXRmLm9yZzwvYT4mZ3Q7IHdyb3RlOjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8Ymxv Y2txdW90ZSBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgI0NDQ0NDQyAxLjBw dDtwYWRkaW5nOjBpbiAwaW4gMGluIDYuMHB0O21hcmdpbi1sZWZ0OjQuOHB0O21hcmdpbi10b3A6 NS4wcHQ7bWFyZ2luLXJpZ2h0OjBpbjttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21z by1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj5UaGUgV0cgdGFsa2VkIGFib3V0IGRlYWQgcGF0aCB0 aW1lb3V0cyBmb3IgYSBsaXR0bGUgYml0IChpbiBUb2t5byBJIHRoaW5rKSBidXQsIGF0IHRoZSB0 aW1lLCBkZWNpZGVkIHRvIGxlYXZlIGl0IHRvIGltcGxlbWVudGF0aW9ucy4gSSBwZXJzb25hbGx5 IHRoaW5rIGhhdmluZyBhIGRlYWQgcGF0aCB0aW1lb3V0DQogZGVzY3JpcHRpb24gaW4gdGhlIHRl eHQgd291bGQgYmUgYSBnb29kIGlkZWEuIEnigJlkIGJlIGhhcHB5IHRvIHJldmlzaXQgdGhlIGRp c2N1c3Npb24uPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNv LW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPiZuYnNwOzxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9w LWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4tIE5pY2s8bzpwPjwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bztt c28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1i b3R0b20tYWx0OmF1dG8iPlNlbnQgZnJvbQ0KPGEgaHJlZj0iaHR0cHM6Ly9nby5taWNyb3NvZnQu Y29tL2Z3bGluay8/TGlua0lkPTU1MDk4NiIgdGFyZ2V0PSJfYmxhbmsiPk1haWw8L2E+IGZvciBX aW5kb3dzIDEwPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNv LW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPltIeFMgLSAx ODkzNiAtIDE2LjAuMTE5MDEuMjAwNDJdPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0 OmF1dG8iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSJNc29Ob3Jt YWwiIGFsaWduPSJjZW50ZXIiIHN0eWxlPSJ0ZXh0LWFsaWduOmNlbnRlciI+DQo8aHIgc2l6ZT0i MiIgd2lkdGg9Ijk4JSIgYWxpZ249ImNlbnRlciI+DQo8L2Rpdj4NCjxkaXYgaWQ9ImdtYWlsLW1f LTEyMDUxMjQxNzQ4ODcwNDU1NjRkaXZScGx5RndkTXNnIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxiPjxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+RnJvbTo8L3NwYW4+PC9iPjxzcGFuIHN0eWxl PSJjb2xvcjpibGFjayI+IFFVSUMgJmx0Ozwvc3Bhbj48YSBocmVmPSJtYWlsdG86cXVpYy1ib3Vu Y2VzQGlldGYub3JnIiB0YXJnZXQ9Il9ibGFuayI+cXVpYy1ib3VuY2VzQGlldGYub3JnPC9hPjxz cGFuIHN0eWxlPSJjb2xvcjpibGFjayI+Jmd0OyBvbiBiZWhhbGYgb2YgTWFydGluIER1a2UgJmx0 Ozwvc3Bhbj48YSBocmVmPSJtYWlsdG86bWFydGluLmguZHVrZUBnbWFpbC5jb20iIHRhcmdldD0i X2JsYW5rIj5tYXJ0aW4uaC5kdWtlQGdtYWlsLmNvbTwvYT48c3BhbiBzdHlsZT0iY29sb3I6Ymxh Y2siPiZndDs8YnI+DQo8Yj5TZW50OjwvYj4gTW9uZGF5LCBKdWx5IDgsIDIwMTkgNDozNDowMCBQ TTxicj4NCjxiPlRvOjwvYj4gSUVURiBRVUlDIFdHICZsdDs8L3NwYW4+PGEgaHJlZj0ibWFpbHRv OnF1aWNAaWV0Zi5vcmciIHRhcmdldD0iX2JsYW5rIj5xdWljQGlldGYub3JnPC9hPjxzcGFuIHN0 eWxlPSJjb2xvcjpibGFjayI+Jmd0Ozxicj4NCjxiPlN1YmplY3Q6PC9iPiBIYW5kc2hha2UgdGlt ZW91dCBmYWlsdXJlcz88L3NwYW4+IDxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8 ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPklzIHRoZXJlIHNvbWV3aGVyZSBpbiB0 aGUgZHJhZnRzIHdoZXJlIHdlIHByb3ZpZGUgc3VnZ2VzdGlvbnMgYWJvdXQgaG93IHRvIHRpbWUg b3V0IGNvbm5lY3Rpb25zIHdoZW4gbm90IHlldCBlc3RhYmxpc2hlZD8gSSBiZWxpZXZlIHRoZSBJ ZGxlIFRpbWVvdXQgc2VjdGlvbiBhcHBsaWVzIHNwZWNpZmljYWxseSB0byBlc3RhYmxpc2hlZCBj b25uZWN0aW9ucy48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+VGhpcyBuZWVkIG5vdCBiZSBpbnRlbnNlbHkgcHJlc2NyaXB0aXZlLCBidXQgaXQg d291bGQgYmUgbmljZSB0byBoYXZlIHNvbWUgZ3VpZGVsaW5lcyBvbiBob3cgbm90IHRvIGZhaWwg dG9vIHF1aWNrbHkuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rp dj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_MW2PR2101MB104918091B075CA105BF20E8B6F10MW2PR2101MB1049_-- From nobody Tue Jul 9 14:32:15 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CAC9212006F for ; Tue, 9 Jul 2019 14:32:14 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.702 X-Spam-Level: X-Spam-Status: No, score=-0.702 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, PDS_NO_HELO_DNS=1.295, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4nyVVH_00eYW for ; Tue, 9 Jul 2019 14:32:13 -0700 (PDT) Received: from mail-wm1-x332.google.com (mail-wm1-x332.google.com [IPv6:2a00:1450:4864:20::332]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D73F512000E for ; Tue, 9 Jul 2019 14:32:12 -0700 (PDT) Received: by mail-wm1-x332.google.com with SMTP id s3so231983wms.2 for ; Tue, 09 Jul 2019 14:32:12 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=S0nu+r4K55KM3icNxjkvgI9D4Hj9LCg2z+cpgJooBLA=; b=LkzUfSqb1wPb1VL/JPWPtGkIWUVRpSAn+EmL3NVs+yVRq2yIM5YUDRSP500Fj+y0Fa fzvr5vUnSG/hcMfa9K1VEZZb+SyB7b4PohCmCWw3WimOWBYydO7bhJDOgivSzqzjCzXN vC6kRoV3JiDUVmEyne3DdrtwI4lXmH3KIrZ4S6LZqmgZkWLgeRrhDFmrklUYVNFChg7+ Q9rcEum7RZ9zuHqaDd+wqZSvJlmrxhE23+CQteb/0VIm3fki6qDyJQe50TWKDvL+wEpa +sSq/KtLVbT/fdLd6r79QC+CLR7sFW92g1peNN5xyKCMzASrxCjcftEiWnBPCFZMEuA9 hGRw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=S0nu+r4K55KM3icNxjkvgI9D4Hj9LCg2z+cpgJooBLA=; b=aQTxsP7X9HirbiVcyJOpzdgzTULZ2BRnaq1gzILZGLAH8YbYWDtRZMALG7de9QTk+E q3e0Pq8/S5J5ZzAj34RCu6O0II7eT3KAQ23ClAjpFkwwHuY41bLzglkQAvn65m9vp47F 9Xw4YJUr83HjI85lYaQyzi40dU7Znc9KSDNAiZOKuI3jBS01hlUGQRXWRYnUQvJROvCQ OtB25cizYiSiwcM+KwyP9q8WzOALy9LS0hAuL8BVs5wea+MIqEoY4j6R/iB02b8jTGs2 AIY6HkotWY4heuBj084ZIpr5picQWthZ0Eu/nlLUk3MFw9XmXL/rtk+YN6n6tJZKG9Ic mwgw== X-Gm-Message-State: APjAAAUGvXDMkkuTFVRrR2tF51+VARxt2RhSPFh9e7PjCq+FOve/2dQJ EekUBMOOS3zZryTGoSmq6rQyDesj8yCzyw2hyjzJU28I X-Google-Smtp-Source: APXvYqxipSkuAWjTzvubgfNQoHIXpggWWh49qCW6avoW2d7hHQfnxsA4smmYKGxNUjK79F4GX5HQ+Ik8TwQvzn0KFk0= X-Received: by 2002:a1c:eb17:: with SMTP id j23mr1540595wmh.151.1562707931242; Tue, 09 Jul 2019 14:32:11 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: Martin Duke Date: Tue, 9 Jul 2019 14:31:59 -0700 Message-ID: Subject: Re: Handshake timeout failures? To: Praveen Balasubramanian Cc: Ian Swett , Nick Banks , IETF QUIC WG Content-Type: multipart/alternative; boundary="00000000000021242c058d464bed" Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Jul 2019 21:32:15 -0000 --00000000000021242c058d464bed Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable OK, I'll file an issue On Tue, Jul 9, 2019 at 2:27 PM Praveen Balasubramanian wrote: > Agreed. One consideration in picking a min bound is VM live migration > where its desirable to have at least one retry post the blackout period. = I > wonder if we should add text specifying a minimum value for both handshak= e > timeout and idle timeout. > > > > *From:* QUIC *On Behalf Of * Ian Swett > *Sent:* Monday, July 8, 2019 7:23 PM > *To:* Nick Banks > *Cc:* IETF QUIC WG ; Martin Duke > *Subject:* Re: Handshake timeout failures? > > > > I think some text on both a handshake timeout(that's presumably shorter > than a standard idle timeout) and a dead path timeout would be helpful, > even if it's not normative. > > > > On Mon, Jul 8, 2019 at 5:56 PM Nick Banks 40microsoft.com@dmarc.ietf.org> wrote: > > The WG talked about dead path timeouts for a little bit (in Tokyo I think= ) > but, at the time, decided to leave it to implementations. I personally > think having a dead path timeout description in the text would be a good > idea. I=E2=80=99d be happy to revisit the discussion. > > > > - Nick > > > > Sent from Mail for > Windows 10 > > [HxS - 18936 - 16.0.11901.20042] > > > ------------------------------ > > *From:* QUIC on behalf of Martin Duke < > martin.h.duke@gmail.com> > *Sent:* Monday, July 8, 2019 4:34:00 PM > *To:* IETF QUIC WG > *Subject:* Handshake timeout failures? > > > > Is there somewhere in the drafts where we provide suggestions about how t= o > time out connections when not yet established? I believe the Idle Timeout > section applies specifically to established connections. > > > > This need not be intensely prescriptive, but it would be nice to have som= e > guidelines on how not to fail too quickly. > > --00000000000021242c058d464bed Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
OK, I'll file an issue

On Tue, Jul 9, 2019 at 2:27 = PM Praveen Balasubramanian <pravb= @microsoft.com> wrote:

Agreed. One consideration in picking a min bound is = VM live migration where its desirable to have at least one retry post the b= lackout period. I wonder if we should add text specifying a minimum value f= or both handshake timeout and idle timeout.

=C2=A0

From: QUIC <quic-bounces@ietf.org> On Behalf Of = Ian Swett
Sent: Monday, July 8, 2019 7:23 PM
To: Nick Banks <nibanks=3D40microsoft.com@dmarc.ietf.org>
Cc: IETF QUIC WG <quic@ietf.org>; Martin Duke <martin.h.duke@gmail.com>
Subject: Re: Handshake timeout failures?

=C2=A0

I think some text on both a handshake timeout(that&#= 39;s presumably shorter than a standard idle timeout) and a dead path timeo= ut would be helpful, even if it's not normative.

=C2=A0

On Mon, Jul 8, 2019 at 5:56 PM Nick Banks <nibank= s=3D40m= icrosoft.com@dmarc.ietf.org> wrote:

The WG talked about dead path timeouts for a little = bit (in Tokyo I think) but, at the time, decided to leave it to implementat= ions. I personally think having a dead path timeout description in the text would be a good idea. I=E2=80=99d be happy to revi= sit the discussion.

=C2=A0

- Nick

=C2=A0

Sent from Mail for Windows 10

[HxS - 18936 - 16.0.11901.20042]

=C2=A0

From: QUIC <quic-bounces@ietf.org> on behalf of Martin Duke <martin.h.duke@gmail.com>
Sent: Monday, July 8, 2019 4:34:00 PM
To: IETF QUIC WG <quic@ietf.org>
Subject: Handshake timeout failures?

=C2=A0

Is there somewhere in the drafts where we provide su= ggestions about how to time out connections when not yet established? I bel= ieve the Idle Timeout section applies specifically to established connectio= ns.

=C2=A0

This need not be intensely prescriptive, but it woul= d be nice to have some guidelines on how not to fail too quickly.=

--00000000000021242c058d464bed-- From nobody Tue Jul 9 18:00:22 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6EAE61200C4 for ; Tue, 9 Jul 2019 18:00:21 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -16.205 X-Spam-Level: X-Spam-Status: No, score=-16.205 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, ENV_AND_HDR_SPF_MATCH=-0.5, HTML_MESSAGE=0.001, PDS_NO_HELO_DNS=1.295, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5, USER_IN_DEF_SPF_WL=-7.5] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6r5d2OzwTSUr for ; Tue, 9 Jul 2019 18:00:20 -0700 (PDT) Received: from mail-wr1-x430.google.com (mail-wr1-x430.google.com [IPv6:2a00:1450:4864:20::430]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E4EE0120048 for ; Tue, 9 Jul 2019 18:00:19 -0700 (PDT) Received: by mail-wr1-x430.google.com with SMTP id g17so661335wrr.5 for ; Tue, 09 Jul 2019 18:00:19 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:from:date:message-id:subject:to:cc; bh=h7okLVpUEjwyWfTflJiX6CvSaZPv1kI9YAlAGOiVKdg=; b=glHDX4p5THr7dOIw01g+Dw1inspxgidbQbO975qRvToMynXNWnbD/cPwyP2WO085ri p3HMuYxZe+3Pkh/Zbw2pmry23sxGaanKCNqRvSJMmTDBD3vbIVNwcLqf1IpQMAVqyM1h fsS/uSZ78RFm66JgTkhRsM/Q05G8+zXVVnTU6nmU6OW2rdMUhR1DpxQYT85dKdErVpmA /QaBl84el8fxE999RnSu7Eq8tWgoBH0goxzALxYm80PsS3Bc7wLm4Gl708MePYGMHyat WF9uAY9y0czTUnntfe60RVRrj0/3Z+1NOLUupKmlMeEp3t8O6K9YWOEg7L44XzVNUFmS BC4w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to:cc; bh=h7okLVpUEjwyWfTflJiX6CvSaZPv1kI9YAlAGOiVKdg=; b=iq3UjWrcFDzZm/LbPSgtxIDhthsoAGVXjUbnVDvcLKk+MRmVY2fpvaO2V1ZubG5Mcc 9q+I5g0Rb1+dNeCcxk4K2aTA1bnwEsT9Rbib946UHypeiefNwKMi5aCVFBxvSz68FyW8 YbsBWXJDWBMkHuk98aBijObjS/EM22KGPL9iZHTdDTsEfZkGIwp/qLYzTObONr4qqskV slxhPwHRlxtEzo312hPH5Dj/EYK1cIhdp8SHq94T3/sU2keXCDJmsQSqHjMAQ1iA2jSC SOydKA9RB5r1Cfs98cVS2MMLzf+S/C1x6a2uU3xBeH1DG+VaRDYv7vDh0Ti5hfs5cDJo 90Hw== X-Gm-Message-State: APjAAAXoTSrTxYe1ZJVpZqFcX95nGNQnZ/HhA9qqPTK4L+xsaIrFUnu+ F3aCPoxUQDKd/7QctK+0VPH0bgHSCmjmladCcf+EqagGfb4eRg== X-Google-Smtp-Source: APXvYqz+w29WLkLmtVAZVDNCPNuPogPQMnO6GZnwY4hph/BL2hybNZ6iDUMckUYJP0kFp/yP6CQF2uoaHhCIouU18J0= X-Received: by 2002:a5d:4211:: with SMTP id n17mr2082698wrq.137.1562720417916; Tue, 09 Jul 2019 18:00:17 -0700 (PDT) MIME-Version: 1.0 From: Ian Swett Date: Tue, 9 Jul 2019 21:00:06 -0400 Message-ID: Subject: HTTP(3) priorities To: IETF QUIC WG Cc: HTTP Working Group Content-Type: multipart/alternative; boundary="00000000000064ff44058d4933d8" Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 Jul 2019 01:00:21 -0000 --00000000000064ff44058d4933d8 Content-Type: text/plain; charset="UTF-8" There has been quite a bit of discussion of HTTP priorities lately on both the QUIC and HTTP mailing lists, with more to follow. The plan for IETF in Montreal is as follows: - Monday: Overview of priorities for 15 minutes in HTTP, with 15 minutes discussion. - Wednesday: A side meeting will be held from 8:30-9:45am in Van Horne. - Thursday: I'll summarise the side meeting in Wednesday's HTTP session. Thanks, Ian --00000000000064ff44058d4933d8 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
There has been quite a bit of discussion of HTTP prio= rities lately on both the QUIC and HTTP mailing lists, with more to follow.= =C2=A0 The plan for IETF in Montreal is as=C2=A0follows:
  • Monda= y: Overview of priorities for 15 minutes in HTTP, with 15 minutes discussio= n.
  • Wednesday: A side meeting will be held from 8:30-9:45am in Van H= orne.
  • Thursday: I'll summarise the side meeting in Wednesday= 9;s HTTP session.
Thanks, Ian
--00000000000064ff44058d4933d8-- From nobody Tue Jul 9 18:22:42 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 166B8120141 for ; Tue, 9 Jul 2019 18:22:40 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -16.204 X-Spam-Level: X-Spam-Status: No, score=-16.204 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, ENV_AND_HDR_SPF_MATCH=-0.5, HTML_MESSAGE=0.001, PDS_NO_HELO_DNS=1.295, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5, USER_IN_DEF_SPF_WL=-7.5] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3n05b6gHCPQm for ; Tue, 9 Jul 2019 18:22:37 -0700 (PDT) Received: from mail-wm1-x331.google.com (mail-wm1-x331.google.com [IPv6:2a00:1450:4864:20::331]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 842F412001E for ; Tue, 9 Jul 2019 18:22:37 -0700 (PDT) Received: by mail-wm1-x331.google.com with SMTP id v15so610534wml.0 for ; Tue, 09 Jul 2019 18:22:37 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=D+k4ETv6u+Ri/vLoDnkUpSg36Iswxd4aqq+F0T5uhJs=; b=ZKm0Z4aQ+09/u09BLeaPrleFGxqVVXn5luDg83iQEzLTmokbwBytYa/GI+EgSVqWl9 Tzc2jZBYEiICH6cTiXxfFkQ6+2Ps4QCzPTLCFMNdyoPTt6NBLaVJsUPuzPhnErUCXKvO 5zXqXNoJd0citbNUfeEtyj7mZX/M/wG9BnHDJfafxpverc3it/KZzGeYcSXZKciF/9Uv PRKt0txZzKcTjGPq7CoQamlFcD/URKuM4BE0yiOvAqEbUxA45hwwg/q/DYNao3kS77P/ DTVs9Fl0Gll9CN9QF3xeVY1mKXJqoZ9FA4J3ahKpF2G4rUlCqut5QNz2G9fovzHvzRo2 TOTg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=D+k4ETv6u+Ri/vLoDnkUpSg36Iswxd4aqq+F0T5uhJs=; b=Bakeq765wGozrUF2/a7aPZSl/EVB+Q/BaoQX/TlFb0L6Ro3t+10lVi5EN5fZKDwTLO BiM0YDUEU4wyeCSZ9Y5iOBO8GmovDuGYfqQFjxpJnR0ldvmjVUh+gca/fjBfEPzPUzhk oZ6hTFqRk1lslXC0Fhh50H7UHFiAzgKAr2wk60F5EYl/sCZpzmbGclx8fdaRV8vGPZQx sFuT9o28TT8xuyHeftfWnMFw1M+DNIcBPBabRzu6Ru+QLpwI+vJnixJnk77kxc382Sp/ 11qvkVB9oaBDEUZTbMrk+ZgxG8Aku9ouYwKL6WQXgof4pzX8LT0y+sXY5bkqUqDdP8Pj AF+A== X-Gm-Message-State: APjAAAWpQDu1re/tosFHMuEb/fl9lwpa/f2Oflkcw1jPwgjFXmO0Qz62 4Nb+QGlAUuiyFamXUFYufKog7ehR1J2/W7lWOkdryQ== X-Google-Smtp-Source: APXvYqyADEnKcu1gAHqg3WFpJchy3Xu5BDOsOceN9dK92VCrCSZX+4nW4V9+CzdubHfXKGMcUgABnatHwlqthOtQwB0= X-Received: by 2002:a1c:ca06:: with SMTP id a6mr2126883wmg.48.1562721755709; Tue, 09 Jul 2019 18:22:35 -0700 (PDT) MIME-Version: 1.0 References: <156246300105.3401.11374988947164402300.idtracker@ietfa.amsl.com> In-Reply-To: From: Ian Swett Date: Tue, 9 Jul 2019 21:22:23 -0400 Message-ID: Subject: Re: Updated DATAGRAM -03 draft To: Tommy Pauly Cc: QUIC WG Content-Type: multipart/alternative; boundary="00000000000022298e058d4983ec" Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 Jul 2019 01:22:40 -0000 --00000000000022298e058d4983ec Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Thanks Tommy. As I've expressed before, I'm not a big fan of the ID field(now flow identifiers) unless they have clear transport level functionality. Adding signaling for opening and closing these flows seems like a stronger reason to add these IDs to the transport layer. Have you considered splitting this draft into two or the frame type into two and making the version with a flow identifier more full-featured? On Mon, Jul 8, 2019 at 11:20 AM Tommy Pauly wrote: > Hello all, > > We=E2=80=99ve updated the QUIC DATAGRAM draft to incorporate some of the = feedback > we received at the side meeting in Prague. Notably, it clarifies: > > - Guidance around datagram acknowledgements > - Datagrams do not participate in any flow control > - Datagrams do participate in congestion control > > The remaining area of open discussion is around the newly re-named > optional =E2=80=9Cflow identifiers=E2=80=9D. The primary argument for rem= oving these is > that applications can add identifiers onto datagrams themselves, and the > transport should not transmit a field that it does not do anything with. = We > did add some text clarifying that these identifiers are essentially like > UDP ports for demultiplexing, and pointed out some *minimal* things the > transport can do to help batch transmission of datagrams in the same flow > and promote fate-sharing within a flow. There=E2=80=99s been some discuss= ion on > Slack of other approaches that would make these flow IDs more first-class > citizens=E2=80=94adding reliable signaling for opening and closing flows,= as many > applications would also generally need some similar sort of control > channel=E2=80=94but these seem a bit heavy-weight. Either way, this is an= area > where discussion is welcome and I expect the document to change. > > Best, > Tommy > > Begin forwarded message: > > *From: *internet-drafts@ietf.org > *Subject: **New Version Notification for draft-pauly-quic-datagram-03.txt= * > *Date: *July 6, 2019 at 6:30:01 PM PDT > *To: *Eric Kinnear , David Schinazi < > dschinazi.ietf@gmail.com>, Tommy Pauly > > > A new version of I-D, draft-pauly-quic-datagram-03.txt > has been successfully submitted by Tommy Pauly and posted to the > IETF repository. > > Name: draft-pauly-quic-datagram > Revision: 03 > Title: An Unreliable Datagram Extension to QUIC > Document date: 2019-07-06 > Group: Individual Submission > Pages: 8 > URL: > https://www.ietf.org/internet-drafts/draft-pauly-quic-datagram-03.txt > Status: > https://datatracker.ietf.org/doc/draft-pauly-quic-datagram/ > Htmlized: https://tools.ietf.org/html/draft-pauly-quic-datagram-03 > Htmlized: > https://datatracker.ietf.org/doc/html/draft-pauly-quic-datagram > Diff: > https://www.ietf.org/rfcdiff?url2=3Ddraft-pauly-quic-datagram-03 > > Abstract: > This document defines an extension to the QUIC transport protocol to > add support for sending and receiving unreliable datagrams over a > QUIC connection. > > > > > Please note that it may take a couple of minutes from the time of > submission > until the htmlized version and diff are available at tools.ietf.org. > > The IETF Secretariat > > > --00000000000022298e058d4983ec Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Thanks Tommy.=C2=A0 As I've expressed before, I'm = not a big fan of the ID field(now flow identifiers) unless they have clear = transport level functionality.

Adding signaling for open= ing and closing these flows seems like a stronger reason to add these IDs t= o the transport layer.=C2=A0 Have you considered splitting this draft into = two or the frame type into two and making the version with a flow identifie= r more full-featured?

On Mon, Jul 8, 2019 at 11:20 AM Tommy Pauly <= tpauly=3D40= apple.com@dmarc.ietf.org> wrote:
Hello all,

We=E2=80=99ve up= dated the QUIC DATAGRAM draft to incorporate some of the feedback we receiv= ed at the side meeting in Prague. Notably, it clarifies:

- Guidance around datagram acknowledgements
- Datagrams do= not participate in any flow control
- Datagrams do participate i= n congestion control

The remaining area of open di= scussion is around the newly re-named optional =E2=80=9Cflow identifiers=E2= =80=9D. The primary argument for removing these is that applications can ad= d identifiers onto datagrams themselves, and the transport should not trans= mit a field that it does not do anything with. We did add some text clarify= ing that these identifiers are essentially like UDP ports for demultiplexin= g, and pointed out some *minimal* things the transport can do to help batch= transmission of datagrams in the same flow and promote fate-sharing within= a flow. There=E2=80=99s been some discussion on Slack of other approaches = that would make these flow IDs more first-class citizens=E2=80=94adding rel= iable signaling for opening and closing flows, as many applications would a= lso generally need some similar sort of control channel=E2=80=94but these s= eem a bit heavy-weight. Either way, this is an area where discussion is wel= come and I expect the document to change.

Best,
Tommy

Begin forwa= rded message:

Subject: New Version = Notification for draft-pauly-quic-datagram-03.txt
Date: July 6, 2019 at 6:30:01 PM PDT
To: Eric Kinnear <ekinnear@apple.com>, David Schinazi <dschinazi.ietf@gma= il.com>, Tommy Pauly <tpauly@apple.com>


A ne= w version of I-D, draft-pauly-quic-datagram-03.txt
has been successfully= submitted by Tommy Pauly and posted to the
IETF repository.

Name= : draft-pauly-quic-datagram
Revision: 03
Title: <= /span>An Unreliable Datagram Extension to QUIC
Document date: 2019-07-06
Group: Individual Submission
Pages: 8
= URL: =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0https://www.ietf.org/internet-drafts/draft-pauly-quic-= datagram-03.txt
Status: =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0https://datatracker.ietf.org/doc/draft-pauly-quic-data= gram/
Htmlized: =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0http= s://tools.ietf.org/html/draft-pauly-quic-datagram-03
Htmlized: =C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0https://datatracker.iet= f.org/doc/html/draft-pauly-quic-datagram
Diff: =C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0https://www.ietf= .org/rfcdiff?url2=3Ddraft-pauly-quic-datagram-03

Abstract:
= =C2=A0=C2=A0This document defines an extension to the QUIC transport protoc= ol to
=C2=A0=C2=A0add support for sending and receiving unreliable data= grams over a
=C2=A0=C2=A0QUIC connection.




Please not= e that it may take a couple of minutes from the time of submission
until= the htmlized version and diff are available at tools.ietf.org.

The IETF Secretariat

--00000000000022298e058d4983ec-- From nobody Tue Jul 9 20:18:23 2019 Return-Path: X-Original-To: quic@ietf.org Delivered-To: quic@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 211D1120178; Tue, 9 Jul 2019 20:18:16 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: quic@ietf.org Subject: I-D Action: draft-ietf-quic-http-21.txt X-Test-IDTracker: no X-IETF-IDTracker: 6.98.3 Auto-Submitted: auto-generated Precedence: bulk Reply-To: quic@ietf.org Message-ID: <156272869599.15811.17367019864126246049@ietfa.amsl.com> Date: Tue, 09 Jul 2019 20:18:16 -0700 Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 Jul 2019 03:18:16 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the QUIC WG of the IETF. Title : Hypertext Transfer Protocol Version 3 (HTTP/3) Author : Mike Bishop Filename : draft-ietf-quic-http-21.txt Pages : 61 Date : 2019-07-08 Abstract: The QUIC transport protocol has several features that are desirable in a transport for HTTP, such as stream multiplexing, per-stream flow control, and low-latency connection establishment. This document describes a mapping of HTTP semantics over QUIC. This document also identifies HTTP/2 features that are subsumed by QUIC, and describes how HTTP/2 extensions can be ported to HTTP/3. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-quic-http/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-quic-http-21 https://datatracker.ietf.org/doc/html/draft-ietf-quic-http-21 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-quic-http-21 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Tue Jul 9 20:20:07 2019 Return-Path: X-Original-To: quic@ietf.org Delivered-To: quic@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 4BCE2120178; Tue, 9 Jul 2019 20:19:59 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: quic@ietf.org Subject: I-D Action: draft-ietf-quic-http-22.txt X-Test-IDTracker: no X-IETF-IDTracker: 6.98.3 Auto-Submitted: auto-generated Precedence: bulk Reply-To: quic@ietf.org Message-ID: <156272879923.15831.2136909004155549333@ietfa.amsl.com> Date: Tue, 09 Jul 2019 20:19:59 -0700 Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 Jul 2019 03:20:00 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the QUIC WG of the IETF. Title : Hypertext Transfer Protocol Version 3 (HTTP/3) Author : Mike Bishop Filename : draft-ietf-quic-http-22.txt Pages : 61 Date : 2019-07-09 Abstract: The QUIC transport protocol has several features that are desirable in a transport for HTTP, such as stream multiplexing, per-stream flow control, and low-latency connection establishment. This document describes a mapping of HTTP semantics over QUIC. This document also identifies HTTP/2 features that are subsumed by QUIC, and describes how HTTP/2 extensions can be ported to HTTP/3. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-quic-http/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-quic-http-22 https://datatracker.ietf.org/doc/html/draft-ietf-quic-http-22 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-quic-http-22 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Wed Jul 10 04:35:21 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 56C74120298 for ; Wed, 10 Jul 2019 04:35:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.7 X-Spam-Level: X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=lowentropy.net header.b=E7SyNVUI; dkim=pass (2048-bit key) header.d=messagingengine.com header.b=p1Zv7ZS9 Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YJyQyeOV70Vl for ; Wed, 10 Jul 2019 04:35:08 -0700 (PDT) Received: from wout1-smtp.messagingengine.com (wout1-smtp.messagingengine.com [64.147.123.24]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5CA69120162 for ; Wed, 10 Jul 2019 04:35:05 -0700 (PDT) Received: from compute1.internal (compute1.nyi.internal [10.202.2.41]) by mailout.west.internal (Postfix) with ESMTP id 1D5C552B for ; Wed, 10 Jul 2019 07:35:03 -0400 (EDT) Received: from imap2 ([10.202.2.52]) by compute1.internal (MEProxy); Wed, 10 Jul 2019 07:35:03 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lowentropy.net; h=mime-version:message-id:in-reply-to:references:date:from:to :subject:content-type; s=fm2; bh=V/TC04/UOedJzIyPmEkfM+ulT+SpCxy PC2HX3eozGwg=; b=E7SyNVUIIlJ2SOeyFi2JvOvg7w52jsGVFcN+WyjGrrNP8n2 bPKS5OghwEudXZOtF4jy2kgOcG8eigmuZcf3j4AzeyaUbWy12G9d7Iu7dlOja06y pRXV2FCIHf6s5N1BlWqXw+ZTeS7Y62a8X4WD088g/LcTilA6pzPqFBkHyQJeZCPq DKsypTZldI/8Wa+Qck1uaBZspVMPIcYV/b0xqYDcCI58V8pK/wvAK5um+NZ0GzkU Wkcb3obSwt6PWN+TrG8LdWgQFuF3PTImPFG/MSNW/gispJYkMuBu7gs6aHBxxKNx orKpBmj0mD4dqrNfvpniGFKB91pmU9N6S7rUYoQ== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-me-proxy :x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm3; bh=V/TC04 /UOedJzIyPmEkfM+ulT+SpCxyPC2HX3eozGwg=; b=p1Zv7ZS9vqyadN3si8aBgI n0xqJfG/qbwcPEKVw9uEWu07ODus8kklPhAogM6ph0MdscuQbHUePAaJbwzP72/p JfSZO6gJvOk1CV+WaCfvkbkR8+QlXFD0gh/YezmHrPVRWnq40yw/oiZaorp0Qfew y9DfdgG/UYdmfXczuLpDE4yFI65cBMxKk7U7oA4zvtD91lDt2/ZLeryLqIf1vr6y 6x7tSqYQ+tOlMnHNOmI9ypPQXOq05yzQLOeIoGYSN7Rj4FyazXJLsjsFZsSb5Hyz zr/XQT4MB39OBKXKNhBjONI800o/FMKB5nVLahDDWiOgXHnvfSSMNLda0DZIs3xA == X-ME-Sender: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeduvddrgeeigdegvdcutefuodetggdotefrodftvf curfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfghnecu uegrihhlohhuthemuceftddtnecunecujfgurhepofgfggfkjghffffhvffutgesthdtre dtreertdenucfhrhhomhepfdforghrthhinhcuvfhhohhmshhonhdfuceomhhtsehlohif vghnthhrohhphidrnhgvtheqnecuffhomhgrihhnpehivghtfhdrohhrghenucfrrghrrg hmpehmrghilhhfrhhomhepmhhtsehlohifvghnthhrohhphidrnhgvthenucevlhhushht vghrufhiiigvpedt X-ME-Proxy: Received: by mailuser.nyi.internal (Postfix, from userid 501) id 72427E0193; Wed, 10 Jul 2019 07:35:02 -0400 (EDT) X-Mailer: MessagingEngine.com Webmail Interface User-Agent: Cyrus-JMAP/3.1.6-731-g19d3b16-fmstable-20190627v1 Mime-Version: 1.0 Message-Id: <868e541a-c18a-40a0-a105-3c7b69e2d825@www.fastmail.com> In-Reply-To: <91c85c66-b4a3-67d8-cc1c-d56cb4e3a67f@gmx.de> References: <0e87bb0b-0298-4f93-92f3-7e2883ba7750@www.fastmail.com> <91c85c66-b4a3-67d8-cc1c-d56cb4e3a67f@gmx.de> Date: Wed, 10 Jul 2019 21:35:03 +1000 From: "Martin Thomson" To: quic@ietf.org Subject: Re: -21 drafts out, missing important changes Content-Type: text/plain Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 Jul 2019 11:35:19 -0000 On Wed, Jul 10, 2019, at 02:19, Julian Reschke wrote: > FWIW, doesn't > show version 21... Our editor is having a well-earned break right now, so it didn't get approved. The secretariat just fixed it up for us. From nobody Wed Jul 10 05:14:41 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8229E120111 for ; Wed, 10 Jul 2019 05:14:39 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.598 X-Spam-Level: X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=gmx.net Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SGm2FEVKFOCf for ; Wed, 10 Jul 2019 05:14:36 -0700 (PDT) Received: from mout.gmx.net (mout.gmx.net [212.227.17.20]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 527F8120026 for ; Wed, 10 Jul 2019 05:14:34 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=gmx.net; s=badeba3b8450; t=1562760864; bh=sP/QJM/fgoaQny5e9eZYyt/zwGwbGzH1XCvkWTuZCzU=; h=X-UI-Sender-Class:Subject:To:References:From:Date:In-Reply-To; b=jknU68xZQCkx4AtKYIg9KxSpMht0GzkGQCLyYd81zwT68QhyGAeglOMYyPcPf6nCm iTQ5oRcA9uyf231Ta1pztTCAghd9ELEoHbIu479N/mq/LYimSum4Mmt+avBAtHbPMm q9n/DuizDiQrd/+YEWGA4/vN9Vje7vrN+Y1Uu7OE= X-UI-Sender-Class: 01bb95c1-4bf8-414a-932a-4f6e2808ef9c Received: from [192.168.1.34] ([217.91.35.233]) by mail.gmx.com (mrgmx102 [212.227.17.168]) with ESMTPSA (Nemesis) id 0MJmcS-1hk51o3NeG-0019R1; Wed, 10 Jul 2019 14:14:24 +0200 Subject: Re: -21 drafts out, missing important changes To: Martin Thomson , quic@ietf.org References: <0e87bb0b-0298-4f93-92f3-7e2883ba7750@www.fastmail.com> <91c85c66-b4a3-67d8-cc1c-d56cb4e3a67f@gmx.de> <868e541a-c18a-40a0-a105-3c7b69e2d825@www.fastmail.com> From: Julian Reschke Message-ID: <998a48fa-3228-1c1d-3025-263b8b215d66@gmx.de> Date: Wed, 10 Jul 2019 14:14:21 +0200 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:60.0) Gecko/20100101 Thunderbird/60.7.2 MIME-Version: 1.0 In-Reply-To: <868e541a-c18a-40a0-a105-3c7b69e2d825@www.fastmail.com> Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: quoted-printable X-Provags-ID: V03:K1:iL6boIRkrrztufdxUE3/GTFOJan1pc9xP7hpTS33FJdu4HZsaZh VI8SMEZiWsssfdRQiNpL5IhhcPVNW9L/H7EUQqXKc8M5kqESWkXWNNs4vIdiKceYpCWr2xk 4M62W1hsX1+mT5oh6KJvBD6e7nxTBxEJJeO6RuptUpw7RiELnIYEoB4dXiCnawNS6bMuh5s gzIpdOV9aeGFaFLys/3gQ== X-UI-Out-Filterresults: notjunk:1;V03:K0:iWJGVsyGoWo=:NFX8PVrVl2Ilx9ziTJ+nGQ UWfqRdcyOxLmj4/7bHQBKm8e84qELZ2JKUyIS2/Uh2RsgGJMDP5g0JhQw8KjmjuIgvOqQyRMg nYiyXF5JGKomuDEdfFWfWFthhLkv42jfIILvWw5kgBI0khDIbbOmUs/4lQn68pclYz4EStiRW eMIF84wSTTuOZhMaELRAsP06Ue9W5ExPkPhkwsV7Lbqw0JO2HFjGMSkqwqwIm1R2KwbQ5OIcG 6AF0vW297q2FoLXr8O0KH0z54EBBfpsnclGLPoLMxd+oLxL94YmnxpdH8uTTU/b1G3Sordr9m oM8aqrJD/xBlAUUQyvCjtcFPNgZc1FRBWfzLGSIMVlFex4Nj8FrIcd0/nGTEdb17DNsG8WN1D PBZiYw1YXfMiRldzNthOUCdlS2MoW1BlHkZyhEGLtoV5p+I41mKSD49gp4oKe86oVLw2ygC2w U1VlDkitD8QI6yhNQzpGEN5cW4ZKG0Nbn3tIs6flPKjslDR3aMkIJRptGsHFVQf8qtUnHDt8a OAypWPJTh48X06cN0bAS1lW1+jfm5OR50nhRcjgFvVTPMeFn8inyRP7RHFJ5llwXWmN5Xi/O3 dE/4w21xSueXbauRLREzCFvHXS018QsILVQob4CVGN8AyBpG+WDfFl4w1zpj2njKoVW7dU/Xz J5mR17yVkacDOY28hpK+o46fUM9b3DGH0XaI8YqNiJYq6FnoKXpxMgq1igTUcN2pGH92cZU6U qpYpLzql656zZs6VJ36VSD+KcUa/bWMGASoA95W0203O+yMRz9O1N/Y89rxCXE80LyWlvZh++ C2nbFVEkFazAgQ8pDdwTFlppoVM+sCqNEwPNMr1elkbaGpOnvQmUYIS5vFpMi+iVVtc31e44N p0i9HVXHKrgOyU8zd3PTCYm1GmFGAY0MIs6aYNAEb7KSm++jeHLU3sl/+Nqr+FgNGem/GuHzD 2wATGy41fZPVOENYdxJeIbm2W3ldXnHotPifv9zgCCds88ysvyr7ayZcu+LfdZIFfLTxypGjp WtR2DECBj2URKf7wrghSRfp1GdhPEWsR5AR499d/x5jbJu4Y4Dib/vjccM1xSBLCMnDdhy6+H lRCrW82BburISGLco3+lw6oJMWqRFtx/AfE Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 Jul 2019 12:14:39 -0000 On 10.07.2019 13:35, Martin Thomson wrote: > On Wed, Jul 10, 2019, at 02:19, Julian Reschke wrote: >> FWIW, doesn't >> show version 21... > > Our editor is having a well-earned break right now, so it didn't get app= roved. The secretariat just fixed it up for us. Yep, figured that out in the meantime :-) Best regards, Julian From nobody Wed Jul 10 09:05:29 2019 Return-Path: X-Original-To: quic@ietf.org Delivered-To: quic@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 2455212049B; Wed, 10 Jul 2019 09:05:28 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: quic@ietf.org Subject: I-D Action: draft-ietf-quic-invariants-06.txt X-Test-IDTracker: no X-IETF-IDTracker: 6.98.3 Auto-Submitted: auto-generated Precedence: bulk Reply-To: quic@ietf.org Message-ID: <156277472805.15443.11809868259368071485@ietfa.amsl.com> Date: Wed, 10 Jul 2019 09:05:28 -0700 Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 Jul 2019 16:05:28 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the QUIC WG of the IETF. Title : Version-Independent Properties of QUIC Author : Martin Thomson Filename : draft-ietf-quic-invariants-06.txt Pages : 10 Date : 2019-07-10 Abstract: This document defines the properties of the QUIC transport protocol that are expected to remain unchanged over time as new versions of the protocol are developed. Note to Readers Discussion of this draft takes place on the QUIC working group mailing list (quic@ietf.org), which is archived at https://mailarchive.ietf.org/arch/search/?email_list=quic [1]. Working Group information can be found at https://github.com/quicwg [2]; source code and issues list for this draft can be found at https://github.com/quicwg/base-drafts/labels/-invariants [3]. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-quic-invariants/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-quic-invariants-06 https://datatracker.ietf.org/doc/html/draft-ietf-quic-invariants-06 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-quic-invariants-06 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Wed Jul 10 09:12:47 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3581212019D for ; Wed, 10 Jul 2019 09:12:45 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=apple.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id knEPt_-DjJ5P for ; Wed, 10 Jul 2019 09:12:41 -0700 (PDT) Received: from nwk-aaemail-lapp02.apple.com (nwk-aaemail-lapp02.apple.com [17.151.62.67]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D5A32120178 for ; Wed, 10 Jul 2019 09:12:41 -0700 (PDT) Received: from pps.filterd (nwk-aaemail-lapp02.apple.com [127.0.0.1]) by nwk-aaemail-lapp02.apple.com (8.16.0.27/8.16.0.27) with SMTP id x6AGBRXF063034; Wed, 10 Jul 2019 09:12:40 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=apple.com; h=sender : from : message-id : content-type : mime-version : subject : date : in-reply-to : cc : to : references; s=20180706; bh=3lA7UWVC/9V2P1L/K0yhl9hLd2jYXvomWidRvWolZs0=; b=TEzLzVyoG+8nGCTHQURuyaGdGfl1RZbhNdMFgC1TBzElLvNBODw5pAboMj+U3GQkhzV4 KL7Wwlzh1ZRHDxQMH6d4P05O00OW/if7rGRlAJ94G1wLgaIrDmRjg3tOaw93gftPydYj FZINz7nJHXzyd5WRzeCYtev78shH/RgxrcjF2v66qHJOcaBBNyiFWNwpVRpJ7fWD2A/S X00m/c2VdOpYUXdjiDeT53ipFwaF029VbLySo3OcRnOYMNFELPTOgNt1UeTSOW7wXHgt dzFtjd2RGOtS6HOfYagw3M9ap1uPQFjxrQ+QY2fZebUTUVzCk9lzrEeicBIq6mCoZjuk Ag== Received: from ma1-mtap-s02.corp.apple.com (ma1-mtap-s02.corp.apple.com [17.40.76.6]) by nwk-aaemail-lapp02.apple.com with ESMTP id 2tjr7pujhb-30 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO); Wed, 10 Jul 2019 09:12:40 -0700 Received: from nwk-mmpp-sz10.apple.com (nwk-mmpp-sz10.apple.com [17.128.115.122]) by ma1-mtap-s02.corp.apple.com (Oracle Communications Messaging Server 8.0.2.4.20190507 64bit (built May 7 2019)) with ESMTPS id <0PUF004OGP123SB0@ma1-mtap-s02.corp.apple.com>; Wed, 10 Jul 2019 09:12:40 -0700 (PDT) Received: from process_milters-daemon.nwk-mmpp-sz10.apple.com by nwk-mmpp-sz10.apple.com (Oracle Communications Messaging Server 8.0.2.4.20190507 64bit (built May 7 2019)) id <0PUF00K00OUUM200@nwk-mmpp-sz10.apple.com>; Wed, 10 Jul 2019 09:12:39 -0700 (PDT) X-Va-A: X-Va-T-CD: c8b10700d71aad692d44400dd5e552ae X-Va-E-CD: b42e1731a8648bdf8d931aa1eda3b9af X-Va-R-CD: 4798a8ccd957a0d6b4548f4d1f0608d0 X-Va-CD: 0 X-Va-ID: 06cd4ec8-5907-425e-9eef-0515bf174ffd X-V-A: X-V-T-CD: c8b10700d71aad692d44400dd5e552ae X-V-E-CD: b42e1731a8648bdf8d931aa1eda3b9af X-V-R-CD: 4798a8ccd957a0d6b4548f4d1f0608d0 X-V-CD: 0 X-V-ID: d6da5245-3452-42c2-9f6c-9ad24e0e7ef6 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:,, definitions=2019-07-10_06:,, signatures=0 Received: from [17.234.22.115] by nwk-mmpp-sz10.apple.com (Oracle Communications Messaging Server 8.0.2.4.20190507 64bit (built May 7 2019)) with ESMTPSA id <0PUF008LQP13B460@nwk-mmpp-sz10.apple.com>; Wed, 10 Jul 2019 09:12:39 -0700 (PDT) Sender: tpauly@apple.com From: Tommy Pauly Message-id: Content-type: multipart/alternative; boundary="Apple-Mail=_A3E34620-2568-49AB-83A9-CEFBA0131C23" MIME-version: 1.0 (Mac OS X Mail 12.4 \(3445.104.2\)) Subject: Re: Updated DATAGRAM -03 draft Date: Wed, 10 Jul 2019 09:12:18 -0700 In-reply-to: Cc: QUIC WG To: Ian Swett References: <156246300105.3401.11374988947164402300.idtracker@ietfa.amsl.com> X-Mailer: Apple Mail (2.3445.104.2) X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2019-07-10_06:, , signatures=0 Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 Jul 2019 16:12:45 -0000 --Apple-Mail=_A3E34620-2568-49AB-83A9-CEFBA0131C23 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 > On Jul 9, 2019, at 6:22 PM, Ian Swett = wrote: >=20 > Thanks Tommy. As I've expressed before, I'm not a big fan of the ID = field(now flow identifiers) unless they have clear transport level = functionality. Understood!=20 >=20 > Adding signaling for opening and closing these flows seems like a = stronger reason to add these IDs to the transport layer. Have you = considered splitting this draft into two or the frame type into two and = making the version with a flow identifier more full-featured? >=20 That's certainly an option. As it stands, the frame type with a Flow ID = is already a different type value. I think if people decide that the = datagrams are mainly useful with the extra signaling being part of the = transport layer, then I'd prefer to just do that in this document, but = if not, then it can be separate. Overall, I see a few different options for handling flow IDs: - Remove them from the DATAGRAM transport altogether - Support flow IDs in the DATAGRAM draft with more explicit tie-ins to = the transport, like flow lifetime management - Have a separate draft specifying how the next layer above the QUIC = transport should manage multiplexing of datagram flows, by putting = identifiers at the start of datagram payloads, and using reliable = control stream(s) to negotiate lifetimes of flows Thanks, Tommy > On Mon, Jul 8, 2019 at 11:20 AM Tommy Pauly = > wrote: > Hello all, >=20 > We=E2=80=99ve updated the QUIC DATAGRAM draft to incorporate some of = the feedback we received at the side meeting in Prague. Notably, it = clarifies: >=20 > - Guidance around datagram acknowledgements > - Datagrams do not participate in any flow control > - Datagrams do participate in congestion control >=20 > The remaining area of open discussion is around the newly re-named = optional =E2=80=9Cflow identifiers=E2=80=9D. The primary argument for = removing these is that applications can add identifiers onto datagrams = themselves, and the transport should not transmit a field that it does = not do anything with. We did add some text clarifying that these = identifiers are essentially like UDP ports for demultiplexing, and = pointed out some *minimal* things the transport can do to help batch = transmission of datagrams in the same flow and promote fate-sharing = within a flow. There=E2=80=99s been some discussion on Slack of other = approaches that would make these flow IDs more first-class = citizens=E2=80=94adding reliable signaling for opening and closing = flows, as many applications would also generally need some similar sort = of control channel=E2=80=94but these seem a bit heavy-weight. Either = way, this is an area where discussion is welcome and I expect the = document to change. >=20 > Best, > Tommy >=20 >> Begin forwarded message: >>=20 >> From: internet-drafts@ietf.org >> Subject: New Version Notification for = draft-pauly-quic-datagram-03.txt >> Date: July 6, 2019 at 6:30:01 PM PDT >> To: Eric Kinnear >, = David Schinazi >, Tommy Pauly > >>=20 >>=20 >> A new version of I-D, draft-pauly-quic-datagram-03.txt >> has been successfully submitted by Tommy Pauly and posted to the >> IETF repository. >>=20 >> Name: draft-pauly-quic-datagram >> Revision: 03 >> Title: An Unreliable Datagram Extension to QUIC >> Document date: 2019-07-06 >> Group: Individual Submission >> Pages: 8 >> URL: = https://www.ietf.org/internet-drafts/draft-pauly-quic-datagram-03.txt = >> Status: = https://datatracker.ietf.org/doc/draft-pauly-quic-datagram/ = >> Htmlized: = https://tools.ietf.org/html/draft-pauly-quic-datagram-03 = >> Htmlized: = https://datatracker.ietf.org/doc/html/draft-pauly-quic-datagram = >> Diff: = https://www.ietf..org/rfcdiff?url2=3Ddraft-pauly-quic-datagram-03 = >>=20 >> Abstract: >> This document defines an extension to the QUIC transport protocol = to >> add support for sending and receiving unreliable datagrams over a >> QUIC connection. >>=20 >>=20 >>=20 >>=20 >> Please note that it may take a couple of minutes from the time of = submission >> until the htmlized version and diff are available at tools.ietf.org = . >>=20 >> The IETF Secretariat >>=20 >=20 --Apple-Mail=_A3E34620-2568-49AB-83A9-CEFBA0131C23 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8

On Jul 9, 2019, at 6:22 PM, Ian Swett <ianswett=3D40google.com@dmarc.ietf.org> = wrote:

Thanks Tommy.  As I've expressed before, I'm = not a big fan of the ID field(now flow identifiers) unless they have = clear transport level functionality.

Understood! 

Adding signaling for = opening and closing these flows seems like a stronger reason to add = these IDs to the transport layer.  Have you considered splitting = this draft into two or the frame type into two and making the version = with a flow identifier more full-featured?


That's = certainly an option. As it stands, the frame type with a Flow ID is = already a different type value. I think if people decide that the = datagrams are mainly useful with the extra signaling being part of the = transport layer, then I'd prefer to just do that in this document, but = if not, then it can be separate.

Overall, I see a few different options for = handling flow IDs:

- Remove them = from the DATAGRAM transport altogether
- Support flow IDs in = the DATAGRAM draft with more explicit tie-ins to the transport, like = flow lifetime management
- Have a separate draft specifying = how the next layer above the QUIC transport should manage multiplexing = of datagram flows, by putting identifiers at the start of datagram = payloads, and using reliable control stream(s) to negotiate lifetimes of = flows

Thanks,
Tommy
On Mon, Jul = 8, 2019 at 11:20 AM Tommy Pauly <tpauly=3D40apple.com@dmarc.ietf.org> wrote:
Hello all,

We=E2=80=99ve updated = the QUIC DATAGRAM draft to incorporate some of the feedback we received = at the side meeting in Prague. Notably, it clarifies:

- Guidance around = datagram acknowledgements
- Datagrams do not = participate in any flow control
- Datagrams do = participate in congestion control

The remaining area of open discussion = is around the newly re-named optional =E2=80=9Cflow identifiers=E2=80=9D. = The primary argument for removing these is that applications can add = identifiers onto datagrams themselves, and the transport should not = transmit a field that it does not do anything with. We did add some text = clarifying that these identifiers are essentially like UDP ports for = demultiplexing, and pointed out some *minimal* things the transport can = do to help batch transmission of datagrams in the same flow and promote = fate-sharing within a flow. There=E2=80=99s been some discussion on = Slack of other approaches that would make these flow IDs more = first-class citizens=E2=80=94adding reliable signaling for opening and = closing flows, as many applications would also generally need some = similar sort of control channel=E2=80=94but these seem a bit = heavy-weight. Either way, this is an area where discussion is welcome = and I expect the document to change.

Best,
Tommy

Begin = forwarded message:

From: internet-drafts@ietf.org
Subject: New Version = Notification for draft-pauly-quic-datagram-03.txt
Date: July 6, 2019 at 6:30:01 PM = PDT
To: Eric Kinnear <ekinnear@apple.com>, David Schinazi <dschinazi.ietf@gmail.com>, Tommy Pauly <tpauly@apple.com>


A new version = of I-D, draft-pauly-quic-datagram-03.txt
has been = successfully submitted by Tommy Pauly and posted to the
IETF= repository.

Name: = draft-pauly-quic-datagram
Revision: 03
Title: An Unreliable Datagram = Extension to QUIC
Document date: 2019-07-06
Group: Individual Submission
Pages: 8
URL: =            https://www.ietf.org/internet-drafts/draft-pauly-quic-datagram-= 03.txt
Status: =         https://datatracker.ietf.org/doc/draft-pauly-quic-datagram/=
Htmlized:       https://tools.ietf.org/html/draft-pauly-quic-datagram-03Htmlized:       https://datatracker.ietf.org/doc/html/draft-pauly-quic-datagram=
Diff: =           https://www.ietf..org/rfcdiff?url2=3Ddraft-pauly-quic-datagram-= 03

Abstract:
=   This document defines an extension to the QUIC transport = protocol to
  add support for sending and = receiving unreliable datagrams over a
  QUIC = connection.



Please note that it may take a couple of minutes from the = time of submission
until the htmlized version and diff are = available at tools.ietf.org.

The IETF = Secretariat



= --Apple-Mail=_A3E34620-2568-49AB-83A9-CEFBA0131C23-- From nobody Wed Jul 10 09:30:26 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5A6B31200D8 for ; Wed, 10 Jul 2019 09:30:24 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ncaZGtPsY8YP for ; Wed, 10 Jul 2019 09:30:21 -0700 (PDT) Received: from NAM02-SN1-obe.outbound.protection.outlook.com (mail-eopbgr770123.outbound.protection.outlook.com [40.107.77.123]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B6A4C120047 for ; Wed, 10 Jul 2019 09:30:20 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=ZarurbUM8bY1BLc1Fna79YihU/rw+3P9TsLqt3CplkRZulW2rOc7BigIx875nSsx/g+vEOCf7KETgRoJ60mhErgGdhG0ADIPCLmmwvGe6b32WL2rjwzwh5iDJihqLh3aNJdIk75IKdC2mZBxx4BcicaNGnF+WKc6O8hXvQGrJyYUQKgi0gLxi7X9EO7hyHAVS1qbxcnyplMP4jJuTWQ0QbiO5wZbJQui+21rBLQxQr431TyCbRjPoKCgkPrglEkYp1kCccm0NvNZcLFdPJFfruzWkDdAUXyp5yB4SU3c4h55IPCha+YAOjRmhPwtB+ECb3FbaEcQOs2itpYSdd0B2Q== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=72PEU72z1PBbgT9JN27GiocikQ50QV1XpFjc2rougcY=; b=mjUHEQyEk1NvQAtWkNU7OFoCukvuPSoFmAF/FaXnevI/cgjdWEPeNlefxmALMGfmzl4wlwqng7ne7V8r3ol0yAhUxIiRhdfVyxKGitsoNc9ygymxXlwo12eSQP4016S6XV12iX25mXg3dkX2sccVlU8viudEZWuz2bbDn98eLacxtuUo5/ptkY/j7KCAOO3bhe777ip9/kKTUNiX4ZVQ/aC7K5YLxrElAUt1C0pRJ8pURAf7WmP3P9XR0rprutjQFGwyWFz/xveZNxjqC4ds3dOr+ppbU/mK4HDx7hr1ZcKOfm0d3PebGehfdHJnPZqh1KG0L6CoJi0exGrKJUyo9Q== ARC-Authentication-Results: i=1; mx.microsoft.com 1;spf=pass smtp.mailfrom=microsoft.com;dmarc=pass action=none header.from=microsoft.com;dkim=pass header.d=microsoft.com;arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=72PEU72z1PBbgT9JN27GiocikQ50QV1XpFjc2rougcY=; b=YYsl1aW2x9fZ1xLqHo6P1sHIrHLMpz/ReZG4OBH6BXsgVk6kbM56Pa9i4Jm/DHHFn9DYgSOBcHTATA3WmWKG15saGKdLooF3ZhBpvvl1OK02whgepCZjSZlcgRX/qaToBNalcqpVlTwKuq13PXeRX6LrYlgfg+OkXYY9MxrufRo= Received: from BL0PR2101MB1332.namprd21.prod.outlook.com (20.177.244.146) by BL0PR2101MB1028.namprd21.prod.outlook.com (52.132.22.161) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2094.3; Wed, 10 Jul 2019 16:30:16 +0000 Received: from BL0PR2101MB1332.namprd21.prod.outlook.com ([fe80::4cf8:f496:6ea9:ee64]) by BL0PR2101MB1332.namprd21.prod.outlook.com ([fe80::4cf8:f496:6ea9:ee64%7]) with mapi id 15.20.2094.001; Wed, 10 Jul 2019 16:30:16 +0000 From: Nick Banks To: Tommy Pauly , Ian Swett CC: QUIC WG Subject: RE: Updated DATAGRAM -03 draft Thread-Topic: Updated DATAGRAM -03 draft Thread-Index: AQHVNaC2q7efIxV8VEiDQ/D/ojZFFKbDEJiAgAD4pACAAAQW8A== Date: Wed, 10 Jul 2019 16:30:15 +0000 Message-ID: References: <156246300105.3401.11374988947164402300.idtracker@ietfa.amsl.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=nibanks@microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2019-07-10T16:30:12.5006471Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=2c93211a-4034-4333-a2e7-b4d8a646522b; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic authentication-results: spf=none (sender IP is ) smtp.mailfrom=nibanks@microsoft.com; x-originating-ip: [2001:4898:80e8:a:ad4e:750e:713:1b72] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 3efe4269-2d68-4be9-1a8c-08d70553e3fc x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(5600148)(711020)(4605104)(1401327)(4618075)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(2017052603328)(7193020); SRVR:BL0PR2101MB1028; x-ms-traffictypediagnostic: BL0PR2101MB1028: x-ms-exchange-purlcount: 8 x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:9508; x-forefront-prvs: 0094E3478A x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(4636009)(376002)(136003)(366004)(346002)(396003)(39860400002)(189003)(199004)(53754006)(2420400007)(5660300002)(66446008)(66946007)(66476007)(53936002)(4326008)(68736007)(53546011)(66574012)(316002)(110136005)(6506007)(2906002)(5070765005)(76116006)(966005)(8990500004)(478600001)(46003)(66556008)(22452003)(15650500001)(86362001)(10290500003)(52536014)(64756008)(6246003)(25786009)(71200400001)(71190400001)(14444005)(8676002)(186003)(7116003)(55016002)(6306002)(81156014)(8936002)(81166006)(54896002)(9686003)(446003)(7736002)(6116002)(486006)(476003)(33656002)(606006)(790700001)(74316002)(6436002)(102836004)(256004)(229853002)(7696005)(10090500001)(76176011)(99286004)(7110500001)(14454004)(236005)(11346002); DIR:OUT; SFP:1102; SCL:1; SRVR:BL0PR2101MB1028; H:BL0PR2101MB1332.namprd21.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam-message-info: CShIe3MAlVrBglJ/wPuUuMiexvnO9h8x946RmTLzCPUnPni1EPNuIc7l3N821T8ICChmXOi9sqP9tYJnxXHPcnRpg+kfyd+fVHfQDhlKZ7ckAgNqWp/Q3WRLDIN7LXQ/HkRrKTIx/MVw7uVhO14MbWr1BsvWBzlA3IUMT0DumxQjZtHJnQEqpLB8Ry2+dGx7w+kS1RWpz8OPcoxagvyDgdQvWJQgxF3K4CdYXTUo8fPXu+cEEadZTj6obiMnBIzEAAdrwP//XxEr7UXclFz7eZ4cWGFXPF8Vj80YPWiC4j5p10UZ3owsL6RQ4hbZZtRR7NtFOjWvXi6tYMbQZFtkwN5PIRvNPU01hAgw30WmkhGhjU1jHaEHO6jCcgRuboU2Jle+KUXyoAwf/AMjZsOZH2pJi3LO6T6i3kpfjlFzoBk= Content-Type: multipart/alternative; boundary="_000_BL0PR2101MB1332DED052BF219969E70F43B3F00BL0PR2101MB1332_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: 3efe4269-2d68-4be9-1a8c-08d70553e3fc X-MS-Exchange-CrossTenant-originalarrivaltime: 10 Jul 2019 16:30:15.9916 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: nibanks@microsoft.com X-MS-Exchange-Transport-CrossTenantHeadersStamped: BL0PR2101MB1028 Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 Jul 2019 16:30:24 -0000 --_000_BL0PR2101MB1332DED052BF219969E70F43B3F00BL0PR2101MB1332_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 TXkgcHJlZmVyZW5jZSB3b3VsZCBhbHNvIGJlIHRvIHN1cHBvcnQgZmxvdyBjb250cm9sIGZvciB0 aGUgSURzLiBUaG91Z2gsIEkgc3RpbGwgdGhpbmsgdGhhdCB0aGUgSURzIGJ5IHRoZW1zZWx2ZXMg aGF2ZSBtZXJpdC4gQXMgVG9tbXkgaGFzIHNhaWQsIHlvdSBjYW4gdGhpbmsgb2YgYSBkYXRhZ3Jh bSBJRCBvbiBhIGdpdmVuIGNvbm5lY3Rpb24gYXMgcHJldHR5IG11Y2ggdGhlIHNhbWUgdGhpbmcg YXMgYSBVRFAgcG9ydCBmb3IgYW4gSVAgYWRkcmVzcy4gSWYgYm90aCBzaWRlcyBrbm93IGJlZm9y ZSBoYW5kIHdoYXQgcG9ydCB0byB1c2UsIGV2ZXJ5dGhpbmcgaXMgZmluZS4NCg0KLSBOaWNrDQoN CkZyb206IFFVSUMgPHF1aWMtYm91bmNlc0BpZXRmLm9yZz4gT24gQmVoYWxmIE9mIFRvbW15IFBh dWx5DQpTZW50OiBXZWRuZXNkYXksIEp1bHkgMTAsIDIwMTkgOToxMiBBTQ0KVG86IElhbiBTd2V0 dCA8aWFuc3dldHQ9NDBnb29nbGUuY29tQGRtYXJjLmlldGYub3JnPg0KQ2M6IFFVSUMgV0cgPHF1 aWNAaWV0Zi5vcmc+DQpTdWJqZWN0OiBSZTogVXBkYXRlZCBEQVRBR1JBTSAtMDMgZHJhZnQNCg0K DQoNCg0KT24gSnVsIDksIDIwMTksIGF0IDY6MjIgUE0sIElhbiBTd2V0dCA8aWFuc3dldHQ9NDBn b29nbGUuY29tQGRtYXJjLmlldGYub3JnPG1haWx0bzppYW5zd2V0dD00MGdvb2dsZS5jb21AZG1h cmMuaWV0Zi5vcmc+PiB3cm90ZToNCg0KVGhhbmtzIFRvbW15LiAgQXMgSSd2ZSBleHByZXNzZWQg YmVmb3JlLCBJJ20gbm90IGEgYmlnIGZhbiBvZiB0aGUgSUQgZmllbGQobm93IGZsb3cgaWRlbnRp ZmllcnMpIHVubGVzcyB0aGV5IGhhdmUgY2xlYXIgdHJhbnNwb3J0IGxldmVsIGZ1bmN0aW9uYWxp dHkuDQoNClVuZGVyc3Rvb2QhDQoNCg0KQWRkaW5nIHNpZ25hbGluZyBmb3Igb3BlbmluZyBhbmQg Y2xvc2luZyB0aGVzZSBmbG93cyBzZWVtcyBsaWtlIGEgc3Ryb25nZXIgcmVhc29uIHRvIGFkZCB0 aGVzZSBJRHMgdG8gdGhlIHRyYW5zcG9ydCBsYXllci4gIEhhdmUgeW91IGNvbnNpZGVyZWQgc3Bs aXR0aW5nIHRoaXMgZHJhZnQgaW50byB0d28gb3IgdGhlIGZyYW1lIHR5cGUgaW50byB0d28gYW5k IG1ha2luZyB0aGUgdmVyc2lvbiB3aXRoIGEgZmxvdyBpZGVudGlmaWVyIG1vcmUgZnVsbC1mZWF0 dXJlZD8NCg0KDQpUaGF0J3MgY2VydGFpbmx5IGFuIG9wdGlvbi4gQXMgaXQgc3RhbmRzLCB0aGUg ZnJhbWUgdHlwZSB3aXRoIGEgRmxvdyBJRCBpcyBhbHJlYWR5IGEgZGlmZmVyZW50IHR5cGUgdmFs dWUuIEkgdGhpbmsgaWYgcGVvcGxlIGRlY2lkZSB0aGF0IHRoZSBkYXRhZ3JhbXMgYXJlIG1haW5s eSB1c2VmdWwgd2l0aCB0aGUgZXh0cmEgc2lnbmFsaW5nIGJlaW5nIHBhcnQgb2YgdGhlIHRyYW5z cG9ydCBsYXllciwgdGhlbiBJJ2QgcHJlZmVyIHRvIGp1c3QgZG8gdGhhdCBpbiB0aGlzIGRvY3Vt ZW50LCBidXQgaWYgbm90LCB0aGVuIGl0IGNhbiBiZSBzZXBhcmF0ZS4NCg0KT3ZlcmFsbCwgSSBz ZWUgYSBmZXcgZGlmZmVyZW50IG9wdGlvbnMgZm9yIGhhbmRsaW5nIGZsb3cgSURzOg0KDQotIFJl bW92ZSB0aGVtIGZyb20gdGhlIERBVEFHUkFNIHRyYW5zcG9ydCBhbHRvZ2V0aGVyDQotIFN1cHBv cnQgZmxvdyBJRHMgaW4gdGhlIERBVEFHUkFNIGRyYWZ0IHdpdGggbW9yZSBleHBsaWNpdCB0aWUt aW5zIHRvIHRoZSB0cmFuc3BvcnQsIGxpa2UgZmxvdyBsaWZldGltZSBtYW5hZ2VtZW50DQotIEhh dmUgYSBzZXBhcmF0ZSBkcmFmdCBzcGVjaWZ5aW5nIGhvdyB0aGUgbmV4dCBsYXllciBhYm92ZSB0 aGUgUVVJQyB0cmFuc3BvcnQgc2hvdWxkIG1hbmFnZSBtdWx0aXBsZXhpbmcgb2YgZGF0YWdyYW0g Zmxvd3MsIGJ5IHB1dHRpbmcgaWRlbnRpZmllcnMgYXQgdGhlIHN0YXJ0IG9mIGRhdGFncmFtIHBh eWxvYWRzLCBhbmQgdXNpbmcgcmVsaWFibGUgY29udHJvbCBzdHJlYW0ocykgdG8gbmVnb3RpYXRl IGxpZmV0aW1lcyBvZiBmbG93cw0KDQpUaGFua3MsDQpUb21teQ0KDQoNCk9uIE1vbiwgSnVsIDgs IDIwMTkgYXQgMTE6MjAgQU0gVG9tbXkgUGF1bHkgPHRwYXVseT00MGFwcGxlLmNvbUBkbWFyYy5p ZXRmLm9yZzxtYWlsdG86NDBhcHBsZS5jb21AZG1hcmMuaWV0Zi5vcmc+PiB3cm90ZToNCkhlbGxv IGFsbCwNCg0KV2XigJl2ZSB1cGRhdGVkIHRoZSBRVUlDIERBVEFHUkFNIGRyYWZ0IHRvIGluY29y cG9yYXRlIHNvbWUgb2YgdGhlIGZlZWRiYWNrIHdlIHJlY2VpdmVkIGF0IHRoZSBzaWRlIG1lZXRp bmcgaW4gUHJhZ3VlLiBOb3RhYmx5LCBpdCBjbGFyaWZpZXM6DQoNCi0gR3VpZGFuY2UgYXJvdW5k IGRhdGFncmFtIGFja25vd2xlZGdlbWVudHMNCi0gRGF0YWdyYW1zIGRvIG5vdCBwYXJ0aWNpcGF0 ZSBpbiBhbnkgZmxvdyBjb250cm9sDQotIERhdGFncmFtcyBkbyBwYXJ0aWNpcGF0ZSBpbiBjb25n ZXN0aW9uIGNvbnRyb2wNCg0KVGhlIHJlbWFpbmluZyBhcmVhIG9mIG9wZW4gZGlzY3Vzc2lvbiBp cyBhcm91bmQgdGhlIG5ld2x5IHJlLW5hbWVkIG9wdGlvbmFsIOKAnGZsb3cgaWRlbnRpZmllcnPi gJ0uIFRoZSBwcmltYXJ5IGFyZ3VtZW50IGZvciByZW1vdmluZyB0aGVzZSBpcyB0aGF0IGFwcGxp Y2F0aW9ucyBjYW4gYWRkIGlkZW50aWZpZXJzIG9udG8gZGF0YWdyYW1zIHRoZW1zZWx2ZXMsIGFu ZCB0aGUgdHJhbnNwb3J0IHNob3VsZCBub3QgdHJhbnNtaXQgYSBmaWVsZCB0aGF0IGl0IGRvZXMg bm90IGRvIGFueXRoaW5nIHdpdGguIFdlIGRpZCBhZGQgc29tZSB0ZXh0IGNsYXJpZnlpbmcgdGhh dCB0aGVzZSBpZGVudGlmaWVycyBhcmUgZXNzZW50aWFsbHkgbGlrZSBVRFAgcG9ydHMgZm9yIGRl bXVsdGlwbGV4aW5nLCBhbmQgcG9pbnRlZCBvdXQgc29tZSAqbWluaW1hbCogdGhpbmdzIHRoZSB0 cmFuc3BvcnQgY2FuIGRvIHRvIGhlbHAgYmF0Y2ggdHJhbnNtaXNzaW9uIG9mIGRhdGFncmFtcyBp biB0aGUgc2FtZSBmbG93IGFuZCBwcm9tb3RlIGZhdGUtc2hhcmluZyB3aXRoaW4gYSBmbG93LiBU aGVyZeKAmXMgYmVlbiBzb21lIGRpc2N1c3Npb24gb24gU2xhY2sgb2Ygb3RoZXIgYXBwcm9hY2hl cyB0aGF0IHdvdWxkIG1ha2UgdGhlc2UgZmxvdyBJRHMgbW9yZSBmaXJzdC1jbGFzcyBjaXRpemVu c+KAlGFkZGluZyByZWxpYWJsZSBzaWduYWxpbmcgZm9yIG9wZW5pbmcgYW5kIGNsb3NpbmcgZmxv d3MsIGFzIG1hbnkgYXBwbGljYXRpb25zIHdvdWxkIGFsc28gZ2VuZXJhbGx5IG5lZWQgc29tZSBz aW1pbGFyIHNvcnQgb2YgY29udHJvbCBjaGFubmVs4oCUYnV0IHRoZXNlIHNlZW0gYSBiaXQgaGVh dnktd2VpZ2h0LiBFaXRoZXIgd2F5LCB0aGlzIGlzIGFuIGFyZWEgd2hlcmUgZGlzY3Vzc2lvbiBp cyB3ZWxjb21lIGFuZCBJIGV4cGVjdCB0aGUgZG9jdW1lbnQgdG8gY2hhbmdlLg0KDQpCZXN0LA0K VG9tbXkNCg0KDQpCZWdpbiBmb3J3YXJkZWQgbWVzc2FnZToNCg0KRnJvbTogaW50ZXJuZXQtZHJh ZnRzQGlldGYub3JnPG1haWx0bzppbnRlcm5ldC1kcmFmdHNAaWV0Zi5vcmc+DQpTdWJqZWN0OiBO ZXcgVmVyc2lvbiBOb3RpZmljYXRpb24gZm9yIGRyYWZ0LXBhdWx5LXF1aWMtZGF0YWdyYW0tMDMu dHh0DQpEYXRlOiBKdWx5IDYsIDIwMTkgYXQgNjozMDowMSBQTSBQRFQNClRvOiBFcmljIEtpbm5l YXIgPGVraW5uZWFyQGFwcGxlLmNvbTxtYWlsdG86ZWtpbm5lYXJAYXBwbGUuY29tPj4sIERhdmlk IFNjaGluYXppIDxkc2NoaW5hemkuaWV0ZkBnbWFpbC5jb208bWFpbHRvOmRzY2hpbmF6aS5pZXRm QGdtYWlsLmNvbT4+LCBUb21teSBQYXVseSA8dHBhdWx5QGFwcGxlLmNvbTxtYWlsdG86dHBhdWx5 QGFwcGxlLmNvbT4+DQoNCg0KQSBuZXcgdmVyc2lvbiBvZiBJLUQsIGRyYWZ0LXBhdWx5LXF1aWMt ZGF0YWdyYW0tMDMudHh0DQpoYXMgYmVlbiBzdWNjZXNzZnVsbHkgc3VibWl0dGVkIGJ5IFRvbW15 IFBhdWx5IGFuZCBwb3N0ZWQgdG8gdGhlDQpJRVRGIHJlcG9zaXRvcnkuDQoNCk5hbWU6IGRyYWZ0 LXBhdWx5LXF1aWMtZGF0YWdyYW0NClJldmlzaW9uOiAwMw0KVGl0bGU6IEFuIFVucmVsaWFibGUg RGF0YWdyYW0gRXh0ZW5zaW9uIHRvIFFVSUMNCkRvY3VtZW50IGRhdGU6IDIwMTktMDctMDYNCkdy b3VwOiBJbmRpdmlkdWFsIFN1Ym1pc3Npb24NClBhZ2VzOiA4DQpVUkw6ICAgICAgICAgICAgaHR0 cHM6Ly93d3cuaWV0Zi5vcmcvaW50ZXJuZXQtZHJhZnRzL2RyYWZ0LXBhdWx5LXF1aWMtZGF0YWdy YW0tMDMudHh0PGh0dHBzOi8vbmFtMDYuc2FmZWxpbmtzLnByb3RlY3Rpb24ub3V0bG9vay5jb20v P3VybD1odHRwcyUzQSUyRiUyRnd3dy5pZXRmLm9yZyUyRmludGVybmV0LWRyYWZ0cyUyRmRyYWZ0 LXBhdWx5LXF1aWMtZGF0YWdyYW0tMDMudHh0JmRhdGE9MDIlN0MwMSU3Q25pYmFua3MlNDBtaWNy b3NvZnQuY29tJTdDYzZkM2VhMGMzNTBlNGZlM2MwNjQwOGQ3MDU1MTc4OTUlN0M3MmY5ODhiZjg2 ZjE0MWFmOTFhYjJkN2NkMDExZGI0NyU3QzElN0MwJTdDNjM2OTgzNzE5NzkzOTU2ODc0JnNkYXRh PVZpNnRxZzc0WlRsNXMlMkJHNWFVMXY0UjRkSGJTYndlQnV6MnZTQlluNnNJVSUzRCZyZXNlcnZl ZD0wPg0KU3RhdHVzOiAgICAgICAgIGh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2Ry YWZ0LXBhdWx5LXF1aWMtZGF0YWdyYW0vPGh0dHBzOi8vbmFtMDYuc2FmZWxpbmtzLnByb3RlY3Rp b24ub3V0bG9vay5jb20vP3VybD1odHRwcyUzQSUyRiUyRmRhdGF0cmFja2VyLmlldGYub3JnJTJG ZG9jJTJGZHJhZnQtcGF1bHktcXVpYy1kYXRhZ3JhbSUyRiZkYXRhPTAyJTdDMDElN0NuaWJhbmtz JTQwbWljcm9zb2Z0LmNvbSU3Q2M2ZDNlYTBjMzUwZTRmZTNjMDY0MDhkNzA1NTE3ODk1JTdDNzJm OTg4YmY4NmYxNDFhZjkxYWIyZDdjZDAxMWRiNDclN0MxJTdDMCU3QzYzNjk4MzcxOTc5Mzk2MTg2 MyZzZGF0YT1oRHg5WGZRVVh1NVlnZmt6U3RrUjQ3SjVkWVlqU2VvRUpINGhoajlSRnNrJTNEJnJl c2VydmVkPTA+DQpIdG1saXplZDogICAgICAgaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2Ry YWZ0LXBhdWx5LXF1aWMtZGF0YWdyYW0tMDM8aHR0cHM6Ly9uYW0wNi5zYWZlbGlua3MucHJvdGVj dGlvbi5vdXRsb29rLmNvbS8/dXJsPWh0dHBzJTNBJTJGJTJGdG9vbHMuaWV0Zi5vcmclMkZodG1s JTJGZHJhZnQtcGF1bHktcXVpYy1kYXRhZ3JhbS0wMyZkYXRhPTAyJTdDMDElN0NuaWJhbmtzJTQw bWljcm9zb2Z0LmNvbSU3Q2M2ZDNlYTBjMzUwZTRmZTNjMDY0MDhkNzA1NTE3ODk1JTdDNzJmOTg4 YmY4NmYxNDFhZjkxYWIyZDdjZDAxMWRiNDclN0MxJTdDMCU3QzYzNjk4MzcxOTc5Mzk2Njg1NiZz ZGF0YT1mUGVHNDYxWjFPRXB5Mno1dmd5cHRIV1pUZ2hhRGZMTHF0bEJ5QWZRTiUyRkElM0QmcmVz ZXJ2ZWQ9MD4NCkh0bWxpemVkOiAgICAgICBodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2Rv Yy9odG1sL2RyYWZ0LXBhdWx5LXF1aWMtZGF0YWdyYW08aHR0cHM6Ly9uYW0wNi5zYWZlbGlua3Mu cHJvdGVjdGlvbi5vdXRsb29rLmNvbS8/dXJsPWh0dHBzJTNBJTJGJTJGZGF0YXRyYWNrZXIuaWV0 Zi5vcmclMkZkb2MlMkZodG1sJTJGZHJhZnQtcGF1bHktcXVpYy1kYXRhZ3JhbSZkYXRhPTAyJTdD MDElN0NuaWJhbmtzJTQwbWljcm9zb2Z0LmNvbSU3Q2M2ZDNlYTBjMzUwZTRmZTNjMDY0MDhkNzA1 NTE3ODk1JTdDNzJmOTg4YmY4NmYxNDFhZjkxYWIyZDdjZDAxMWRiNDclN0MxJTdDMCU3QzYzNjk4 MzcxOTc5Mzk3MTg0NiZzZGF0YT0lMkY1QnBObmxCZlRqWEpLY0lYUHcwQXRTSTRablI1QU5CeTBk STh1S2toRnclM0QmcmVzZXJ2ZWQ9MD4NCkRpZmY6ICAgICAgICAgICBodHRwczovL3d3dy5pZXRm Li5vcmcvcmZjZGlmZj91cmwyPWRyYWZ0LXBhdWx5LXF1aWMtZGF0YWdyYW0tMDM8aHR0cHM6Ly9u YW0wNi5zYWZlbGlua3MucHJvdGVjdGlvbi5vdXRsb29rLmNvbS8/dXJsPWh0dHBzJTNBJTJGJTJG d3d3LmlldGYub3JnJTJGcmZjZGlmZiUzRnVybDIlM0RkcmFmdC1wYXVseS1xdWljLWRhdGFncmFt LTAzJmRhdGE9MDIlN0MwMSU3Q25pYmFua3MlNDBtaWNyb3NvZnQuY29tJTdDYzZkM2VhMGMzNTBl NGZlM2MwNjQwOGQ3MDU1MTc4OTUlN0M3MmY5ODhiZjg2ZjE0MWFmOTFhYjJkN2NkMDExZGI0NyU3 QzElN0MwJTdDNjM2OTgzNzE5NzkzOTc2ODM3JnNkYXRhPWdFQ2hrS2YwbFg3WVlHQmVNS2laUE9L c044TE5lcnEzSFVSUnBtek5mRGMlM0QmcmVzZXJ2ZWQ9MD4NCg0KQWJzdHJhY3Q6DQogIFRoaXMg ZG9jdW1lbnQgZGVmaW5lcyBhbiBleHRlbnNpb24gdG8gdGhlIFFVSUMgdHJhbnNwb3J0IHByb3Rv Y29sIHRvDQogIGFkZCBzdXBwb3J0IGZvciBzZW5kaW5nIGFuZCByZWNlaXZpbmcgdW5yZWxpYWJs ZSBkYXRhZ3JhbXMgb3ZlciBhDQogIFFVSUMgY29ubmVjdGlvbi4NCg0KDQoNCg0KUGxlYXNlIG5v dGUgdGhhdCBpdCBtYXkgdGFrZSBhIGNvdXBsZSBvZiBtaW51dGVzIGZyb20gdGhlIHRpbWUgb2Yg c3VibWlzc2lvbg0KdW50aWwgdGhlIGh0bWxpemVkIHZlcnNpb24gYW5kIGRpZmYgYXJlIGF2YWls YWJsZSBhdCB0b29scy5pZXRmLm9yZzxodHRwczovL25hbTA2LnNhZmVsaW5rcy5wcm90ZWN0aW9u Lm91dGxvb2suY29tLz91cmw9aHR0cCUzQSUyRiUyRnRvb2xzLmlldGYub3JnJTJGJmRhdGE9MDIl N0MwMSU3Q25pYmFua3MlNDBtaWNyb3NvZnQuY29tJTdDYzZkM2VhMGMzNTBlNGZlM2MwNjQwOGQ3 MDU1MTc4OTUlN0M3MmY5ODhiZjg2ZjE0MWFmOTFhYjJkN2NkMDExZGI0NyU3QzElN0MwJTdDNjM2 OTgzNzE5NzkzOTgxODI0JnNkYXRhPXZvZmZ2R0RWejNQbHV3Y041d3VBWnF0ZmxCRTl6Z2slMkZE Nnd0MnJmTlUwTSUzRCZyZXNlcnZlZD0wPi4NCg0KVGhlIElFVEYgU2VjcmV0YXJpYXQNCg0KDQo= --_000_BL0PR2101MB1332DED052BF219969E70F43B3F00BL0PR2101MB1332_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 SGVsdmV0aWNhOw0KCXBhbm9zZS0xOjIgMTEgNiA0IDIgMiAyIDIgMiA0O30NCkBmb250LWZhY2UN Cgl7Zm9udC1mYW1pbHk6IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAz IDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAx NSA1IDIgMiAyIDQgMyAyIDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFs LCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90 dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIs c2Fucy1zZXJpZjt9DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlv cml0eTo5OTsNCgljb2xvcjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2 aXNpdGVkLCBzcGFuLk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5 OTsNCgljb2xvcjpwdXJwbGU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpwLm1zb25v cm1hbDAsIGxpLm1zb25vcm1hbDAsIGRpdi5tc29ub3JtYWwwDQoJe21zby1zdHlsZS1uYW1lOm1z b25vcm1hbDsNCgltc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzsNCgltYXJnaW4tcmlnaHQ6MGluOw0K CW1zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvOw0KCW1hcmdpbi1sZWZ0OjBpbjsNCglmb250LXNp emU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmO30NCnNwYW4uZ21h aWwtbS0yMTYxNDI1MzUzMDI5NjE5MjE2Z21haWwtbS0zMzk2MTMwNzU1ODMzODQzNTA3YXBwbGUt dGFiLXNwYW4NCgl7bXNvLXN0eWxlLW5hbWU6Z21haWwtbV8tMjE2MTQyNTM1MzAyOTYxOTIxNmdt YWlsLW1fLTMzOTYxMzA3NTU4MzM4NDM1MDdhcHBsZS10YWItc3Bhbjt9DQpzcGFuLkVtYWlsU3R5 bGUxOQ0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1yZXBseTsNCglmb250LWZhbWlseToiQ2Fs aWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjp3aW5kb3d0ZXh0O30NCi5Nc29DaHBEZWZhdWx0DQoJ e21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7fQ0KQHBhZ2Ug V29yZFNlY3Rpb24xDQoJe3NpemU6OC41aW4gMTEuMGluOw0KCW1hcmdpbjoxLjBpbiAxLjBpbiAx LjBpbiAxLjBpbjt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi0t Pjwvc3R5bGU+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWRlZmF1bHRzIHY6ZXh0 PSJlZGl0IiBzcGlkbWF4PSIxMDI2IiAvPg0KPC94bWw+PCFbZW5kaWZdLS0+PCEtLVtpZiBndGUg bXNvIDldPjx4bWw+DQo8bzpzaGFwZWxheW91dCB2OmV4dD0iZWRpdCI+DQo8bzppZG1hcCB2OmV4 dD0iZWRpdCIgZGF0YT0iMSIgLz4NCjwvbzpzaGFwZWxheW91dD48L3htbD48IVtlbmRpZl0tLT4N CjwvaGVhZD4NCjxib2R5IGxhbmc9IkVOLVVTIiBsaW5rPSJibHVlIiB2bGluaz0icHVycGxlIj4N CjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5NeSBwcmVm ZXJlbmNlIHdvdWxkIGFsc28gYmUgdG8gc3VwcG9ydCBmbG93IGNvbnRyb2wgZm9yIHRoZSBJRHMu IFRob3VnaCwgSSBzdGlsbCB0aGluayB0aGF0IHRoZSBJRHMgYnkgdGhlbXNlbHZlcyBoYXZlIG1l cml0LiBBcyBUb21teSBoYXMgc2FpZCwgeW91IGNhbiB0aGluayBvZiBhIGRhdGFncmFtIElEIG9u IGEgZ2l2ZW4gY29ubmVjdGlvbiBhcyBwcmV0dHkgbXVjaCB0aGUgc2FtZSB0aGluZyBhcyBhIFVE UA0KIHBvcnQgZm9yIGFuIElQIGFkZHJlc3MuIElmIGJvdGggc2lkZXMga25vdyBiZWZvcmUgaGFu ZCB3aGF0IHBvcnQgdG8gdXNlLCBldmVyeXRoaW5nIGlzIGZpbmUuPG86cD48L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPi0gTmljayA8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10 b3A6c29saWQgI0UxRTFFMSAxLjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGluIj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxiPkZyb206PC9iPiBRVUlDICZsdDtxdWljLWJvdW5jZXNAaWV0Zi5v cmcmZ3Q7IDxiPk9uIEJlaGFsZiBPZiA8L2I+DQpUb21teSBQYXVseTxicj4NCjxiPlNlbnQ6PC9i PiBXZWRuZXNkYXksIEp1bHkgMTAsIDIwMTkgOToxMiBBTTxicj4NCjxiPlRvOjwvYj4gSWFuIFN3 ZXR0ICZsdDtpYW5zd2V0dD00MGdvb2dsZS5jb21AZG1hcmMuaWV0Zi5vcmcmZ3Q7PGJyPg0KPGI+ Q2M6PC9iPiBRVUlDIFdHICZsdDtxdWljQGlldGYub3JnJmd0Ozxicj4NCjxiPlN1YmplY3Q6PC9i PiBSZTogVXBkYXRlZCBEQVRBR1JBTSAtMDMgZHJhZnQ8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxicj4NCjxicj4NCjxvOnA+PC9vOnA+PC9wPg0KPGJsb2NrcXVvdGUgc3R5bGU9 Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+T24gSnVsIDksIDIwMTksIGF0IDY6MjIgUE0sIElhbiBTd2V0dCAmbHQ7PGEg aHJlZj0ibWFpbHRvOmlhbnN3ZXR0PTQwZ29vZ2xlLmNvbUBkbWFyYy5pZXRmLm9yZyI+aWFuc3dl dHQ9NDBnb29nbGUuY29tQGRtYXJjLmlldGYub3JnPC9hPiZndDsgd3JvdGU6PG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0K PGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5UaGFua3MgVG9tbXkuJm5ic3A7IEFz IEkndmUgZXhwcmVzc2VkIGJlZm9yZSwgSSdtIG5vdCBhIGJpZyBmYW4gb2YgdGhlIElEIGZpZWxk KG5vdyBmbG93IGlkZW50aWZpZXJzKSB1bmxlc3MgdGhleSBoYXZlIGNsZWFyIHRyYW5zcG9ydCBs ZXZlbCBmdW5jdGlvbmFsaXR5LjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxv Y2txdW90ZT4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwv cD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+VW5kZXJzdG9vZCEmbmJzcDs8YnI+DQo8 YnI+DQo8bzpwPjwvbzpwPjwvcD4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0 O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj5BZGRpbmcgc2lnbmFsaW5nIGZvciBvcGVuaW5nIGFuZCBjbG9zaW5nIHRoZXNl IGZsb3dzIHNlZW1zIGxpa2UgYSBzdHJvbmdlciByZWFzb24gdG8gYWRkIHRoZXNlIElEcyB0byB0 aGUgdHJhbnNwb3J0IGxheWVyLiZuYnNwOyBIYXZlIHlvdSBjb25zaWRlcmVkIHNwbGl0dGluZyB0 aGlzIGRyYWZ0IGludG8gdHdvIG9yIHRoZSBmcmFtZSB0eXBlIGludG8gdHdvIGFuZCBtYWtpbmcg dGhlIHZlcnNpb24gd2l0aCBhIGZsb3cNCiBpZGVudGlmaWVyIG1vcmUgZnVsbC1mZWF0dXJlZD88 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpw PiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+VGhhdCdzIGNlcnRhaW5seSBhbiBvcHRpb24uIEFzIGl0IHN0YW5kcywg dGhlIGZyYW1lIHR5cGUgd2l0aCBhIEZsb3cgSUQgaXMgYWxyZWFkeSBhIGRpZmZlcmVudCB0eXBl IHZhbHVlLiBJIHRoaW5rIGlmIHBlb3BsZSBkZWNpZGUgdGhhdCB0aGUgZGF0YWdyYW1zIGFyZSBt YWlubHkgdXNlZnVsIHdpdGggdGhlIGV4dHJhIHNpZ25hbGluZyBiZWluZyBwYXJ0IG9mIHRoZSB0 cmFuc3BvcnQgbGF5ZXIsIHRoZW4gSSdkDQogcHJlZmVyIHRvIGp1c3QgZG8gdGhhdCBpbiB0aGlz IGRvY3VtZW50LCBidXQgaWYgbm90LCB0aGVuIGl0IGNhbiBiZSBzZXBhcmF0ZS48bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+T3ZlcmFsbCwgSSBz ZWUgYSBmZXcgZGlmZmVyZW50IG9wdGlvbnMgZm9yIGhhbmRsaW5nIGZsb3cgSURzOjxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4tIFJlbW92ZSB0 aGVtIGZyb20gdGhlIERBVEFHUkFNIHRyYW5zcG9ydCBhbHRvZ2V0aGVyPG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4tIFN1cHBvcnQgZmxvdyBJRHMg aW4gdGhlIERBVEFHUkFNIGRyYWZ0IHdpdGggbW9yZSBleHBsaWNpdCB0aWUtaW5zIHRvIHRoZSB0 cmFuc3BvcnQsIGxpa2UgZmxvdyBsaWZldGltZSBtYW5hZ2VtZW50PG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4tIEhhdmUgYSBzZXBhcmF0ZSBkcmFm dCBzcGVjaWZ5aW5nIGhvdyB0aGUgbmV4dCBsYXllciBhYm92ZSB0aGUgUVVJQyB0cmFuc3BvcnQg c2hvdWxkIG1hbmFnZSBtdWx0aXBsZXhpbmcgb2YgZGF0YWdyYW0gZmxvd3MsIGJ5IHB1dHRpbmcg aWRlbnRpZmllcnMgYXQgdGhlIHN0YXJ0IG9mIGRhdGFncmFtIHBheWxvYWRzLCBhbmQgdXNpbmcg cmVsaWFibGUgY29udHJvbCBzdHJlYW0ocykgdG8gbmVnb3RpYXRlIGxpZmV0aW1lcw0KIG9mIGZs b3dzPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PlRoYW5rcyw8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPlRvbW15PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxi cj4NCjxicj4NCjxvOnA+PC9vOnA+PC9wPg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6 NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj5PbiBNb24sIEp1bCA4LCAyMDE5IGF0IDExOjIwIEFNIFRvbW15IFBhdWx5 ICZsdDt0cGF1bHk9PGEgaHJlZj0ibWFpbHRvOjQwYXBwbGUuY29tQGRtYXJjLmlldGYub3JnIiB0 YXJnZXQ9Il9ibGFuayI+NDBhcHBsZS5jb21AZG1hcmMuaWV0Zi5vcmc8L2E+Jmd0OyB3cm90ZTo8 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9ImJvcmRlcjpub25lO2Jv cmRlci1sZWZ0OnNvbGlkICNDQ0NDQ0MgMS4wcHQ7cGFkZGluZzowaW4gMGluIDBpbiA2LjBwdDtt YXJnaW4tbGVmdDo0LjhwdDttYXJnaW4tcmlnaHQ6MGluIj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj5IZWxsbyBhbGwsPG86cD48L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj5XZeKAmXZlIHVwZGF0ZWQgdGhlIFFVSUMgREFUQUdSQU0gZHJhZnQgdG8gaW5jb3Jw b3JhdGUgc29tZSBvZiB0aGUgZmVlZGJhY2sgd2UgcmVjZWl2ZWQgYXQgdGhlIHNpZGUgbWVldGlu ZyBpbiBQcmFndWUuIE5vdGFibHksIGl0IGNsYXJpZmllczo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+LSBHdWlkYW5jZSBhcm91bmQgZGF0YWdy YW0gYWNrbm93bGVkZ2VtZW50czxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+LSBEYXRhZ3JhbXMgZG8gbm90IHBhcnRpY2lwYXRlIGluIGFueSBmbG93 IGNvbnRyb2w8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPi0gRGF0YWdyYW1zIGRvIHBhcnRpY2lwYXRlIGluIGNvbmdlc3Rpb24gY29udHJvbDxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJz cDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5UaGUgcmVt YWluaW5nIGFyZWEgb2Ygb3BlbiBkaXNjdXNzaW9uIGlzIGFyb3VuZCB0aGUgbmV3bHkgcmUtbmFt ZWQgb3B0aW9uYWwg4oCcZmxvdyBpZGVudGlmaWVyc+KAnS4gVGhlIHByaW1hcnkgYXJndW1lbnQg Zm9yIHJlbW92aW5nIHRoZXNlIGlzIHRoYXQgYXBwbGljYXRpb25zIGNhbiBhZGQgaWRlbnRpZmll cnMgb250byBkYXRhZ3JhbXMgdGhlbXNlbHZlcywgYW5kIHRoZSB0cmFuc3BvcnQgc2hvdWxkIG5v dCB0cmFuc21pdA0KIGEgZmllbGQgdGhhdCBpdCBkb2VzIG5vdCBkbyBhbnl0aGluZyB3aXRoLiBX ZSBkaWQgYWRkIHNvbWUgdGV4dCBjbGFyaWZ5aW5nIHRoYXQgdGhlc2UgaWRlbnRpZmllcnMgYXJl IGVzc2VudGlhbGx5IGxpa2UgVURQIHBvcnRzIGZvciBkZW11bHRpcGxleGluZywgYW5kIHBvaW50 ZWQgb3V0IHNvbWUgKm1pbmltYWwqIHRoaW5ncyB0aGUgdHJhbnNwb3J0IGNhbiBkbyB0byBoZWxw IGJhdGNoIHRyYW5zbWlzc2lvbiBvZiBkYXRhZ3JhbXMgaW4gdGhlIHNhbWUNCiBmbG93IGFuZCBw cm9tb3RlIGZhdGUtc2hhcmluZyB3aXRoaW4gYSBmbG93LiBUaGVyZeKAmXMgYmVlbiBzb21lIGRp c2N1c3Npb24gb24gU2xhY2sgb2Ygb3RoZXIgYXBwcm9hY2hlcyB0aGF0IHdvdWxkIG1ha2UgdGhl c2UgZmxvdyBJRHMgbW9yZSBmaXJzdC1jbGFzcyBjaXRpemVuc+KAlGFkZGluZyByZWxpYWJsZSBz aWduYWxpbmcgZm9yIG9wZW5pbmcgYW5kIGNsb3NpbmcgZmxvd3MsIGFzIG1hbnkgYXBwbGljYXRp b25zIHdvdWxkIGFsc28gZ2VuZXJhbGx5DQogbmVlZCBzb21lIHNpbWlsYXIgc29ydCBvZiBjb250 cm9sIGNoYW5uZWzigJRidXQgdGhlc2Ugc2VlbSBhIGJpdCBoZWF2eS13ZWlnaHQuIEVpdGhlciB3 YXksIHRoaXMgaXMgYW4gYXJlYSB3aGVyZSBkaXNjdXNzaW9uIGlzIHdlbGNvbWUgYW5kIEkgZXhw ZWN0IHRoZSBkb2N1bWVudCB0byBjaGFuZ2UuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkJlc3QsPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5Ub21teTxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxicj4NCjxicj4NCjxvOnA+PC9vOnA+ PC9wPg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1 LjBwdCI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+QmVnaW4gZm9yd2FyZGVkIG1lc3Nh Z2U6PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5i c3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFuIHN0eWxl PSJmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+RnJvbTogPC9z cGFuPg0KPC9iPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDss c2Fucy1zZXJpZiI+PGEgaHJlZj0ibWFpbHRvOmludGVybmV0LWRyYWZ0c0BpZXRmLm9yZyIgdGFy Z2V0PSJfYmxhbmsiPmludGVybmV0LWRyYWZ0c0BpZXRmLm9yZzwvYT48L3NwYW4+PG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBzdHls ZT0iZm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPlN1YmplY3Q6 IE5ldyBWZXJzaW9uIE5vdGlmaWNhdGlvbiBmb3IgZHJhZnQtcGF1bHktcXVpYy1kYXRhZ3JhbS0w My50eHQ8L3NwYW4+PC9iPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZx dW90OyxzYW5zLXNlcmlmIj5EYXRlOiA8L3NwYW4+DQo8L2I+PHNwYW4gc3R5bGU9ImZvbnQtZmFt aWx5OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlmIj5KdWx5IDYsIDIwMTkgYXQgNjoz MDowMSBQTSBQRFQ8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48Yj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNh JnF1b3Q7LHNhbnMtc2VyaWYiPlRvOiA8L3NwYW4+DQo8L2I+PHNwYW4gc3R5bGU9ImZvbnQtZmFt aWx5OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlmIj5FcmljIEtpbm5lYXIgJmx0Ozxh IGhyZWY9Im1haWx0bzpla2lubmVhckBhcHBsZS5jb20iIHRhcmdldD0iX2JsYW5rIj5la2lubmVh ckBhcHBsZS5jb208L2E+Jmd0OywgRGF2aWQgU2NoaW5hemkgJmx0OzxhIGhyZWY9Im1haWx0bzpk c2NoaW5hemkuaWV0ZkBnbWFpbC5jb20iIHRhcmdldD0iX2JsYW5rIj5kc2NoaW5hemkuaWV0ZkBn bWFpbC5jb208L2E+Jmd0OywgVG9tbXkgUGF1bHkNCiAmbHQ7PGEgaHJlZj0ibWFpbHRvOnRwYXVs eUBhcHBsZS5jb20iIHRhcmdldD0iX2JsYW5rIj50cGF1bHlAYXBwbGUuY29tPC9hPiZndDs8L3Nw YW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5i c3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bWFyZ2luLWJvdHRvbToxMi4wcHQiPjxicj4NCkEgbmV3IHZlcnNpb24gb2YgSS1ELCBkcmFmdC1w YXVseS1xdWljLWRhdGFncmFtLTAzLnR4dDxicj4NCmhhcyBiZWVuIHN1Y2Nlc3NmdWxseSBzdWJt aXR0ZWQgYnkgVG9tbXkgUGF1bHkgYW5kIHBvc3RlZCB0byB0aGU8YnI+DQpJRVRGIHJlcG9zaXRv cnkuPGJyPg0KPGJyPg0KTmFtZTo8c3BhbiBjbGFzcz0iZ21haWwtbS0yMTYxNDI1MzUzMDI5NjE5 MjE2Z21haWwtbS0zMzk2MTMwNzU1ODMzODQzNTA3YXBwbGUtdGFiLXNwYW4iPg0KPC9zcGFuPmRy YWZ0LXBhdWx5LXF1aWMtZGF0YWdyYW08YnI+DQpSZXZpc2lvbjo8c3BhbiBjbGFzcz0iZ21haWwt bS0yMTYxNDI1MzUzMDI5NjE5MjE2Z21haWwtbS0zMzk2MTMwNzU1ODMzODQzNTA3YXBwbGUtdGFi LXNwYW4iPg0KPC9zcGFuPjAzPGJyPg0KVGl0bGU6PHNwYW4gY2xhc3M9ImdtYWlsLW0tMjE2MTQy NTM1MzAyOTYxOTIxNmdtYWlsLW0tMzM5NjEzMDc1NTgzMzg0MzUwN2FwcGxlLXRhYi1zcGFuIj4N Cjwvc3Bhbj5BbiBVbnJlbGlhYmxlIERhdGFncmFtIEV4dGVuc2lvbiB0byBRVUlDPGJyPg0KRG9j dW1lbnQgZGF0ZTo8c3BhbiBjbGFzcz0iZ21haWwtbS0yMTYxNDI1MzUzMDI5NjE5MjE2Z21haWwt bS0zMzk2MTMwNzU1ODMzODQzNTA3YXBwbGUtdGFiLXNwYW4iPg0KPC9zcGFuPjIwMTktMDctMDY8 YnI+DQpHcm91cDo8c3BhbiBjbGFzcz0iZ21haWwtbS0yMTYxNDI1MzUzMDI5NjE5MjE2Z21haWwt bS0zMzk2MTMwNzU1ODMzODQzNTA3YXBwbGUtdGFiLXNwYW4iPg0KPC9zcGFuPkluZGl2aWR1YWwg U3VibWlzc2lvbjxicj4NClBhZ2VzOjxzcGFuIGNsYXNzPSJnbWFpbC1tLTIxNjE0MjUzNTMwMjk2 MTkyMTZnbWFpbC1tLTMzOTYxMzA3NTU4MzM4NDM1MDdhcHBsZS10YWItc3BhbiI+DQo8L3NwYW4+ ODxicj4NClVSTDogJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7PGEgaHJlZj0iaHR0cHM6Ly9uYW0wNi5zYWZlbGlua3MucHJv dGVjdGlvbi5vdXRsb29rLmNvbS8/dXJsPWh0dHBzJTNBJTJGJTJGd3d3LmlldGYub3JnJTJGaW50 ZXJuZXQtZHJhZnRzJTJGZHJhZnQtcGF1bHktcXVpYy1kYXRhZ3JhbS0wMy50eHQmYW1wO2RhdGE9 MDIlN0MwMSU3Q25pYmFua3MlNDBtaWNyb3NvZnQuY29tJTdDYzZkM2VhMGMzNTBlNGZlM2MwNjQw OGQ3MDU1MTc4OTUlN0M3MmY5ODhiZjg2ZjE0MWFmOTFhYjJkN2NkMDExZGI0NyU3QzElN0MwJTdD NjM2OTgzNzE5NzkzOTU2ODc0JmFtcDtzZGF0YT1WaTZ0cWc3NFpUbDVzJTJCRzVhVTF2NFI0ZEhi U2J3ZUJ1ejJ2U0JZbjZzSVUlM0QmYW1wO3Jlc2VydmVkPTAiIHRhcmdldD0iX2JsYW5rIj5odHRw czovL3d3dy5pZXRmLm9yZy9pbnRlcm5ldC1kcmFmdHMvZHJhZnQtcGF1bHktcXVpYy1kYXRhZ3Jh bS0wMy50eHQ8L2E+PGJyPg0KU3RhdHVzOiAmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDs8YSBocmVmPSJodHRwczovL25hbTA2LnNhZmVsaW5rcy5wcm90ZWN0 aW9uLm91dGxvb2suY29tLz91cmw9aHR0cHMlM0ElMkYlMkZkYXRhdHJhY2tlci5pZXRmLm9yZyUy RmRvYyUyRmRyYWZ0LXBhdWx5LXF1aWMtZGF0YWdyYW0lMkYmYW1wO2RhdGE9MDIlN0MwMSU3Q25p YmFua3MlNDBtaWNyb3NvZnQuY29tJTdDYzZkM2VhMGMzNTBlNGZlM2MwNjQwOGQ3MDU1MTc4OTUl N0M3MmY5ODhiZjg2ZjE0MWFmOTFhYjJkN2NkMDExZGI0NyU3QzElN0MwJTdDNjM2OTgzNzE5Nzkz OTYxODYzJmFtcDtzZGF0YT1oRHg5WGZRVVh1NVlnZmt6U3RrUjQ3SjVkWVlqU2VvRUpINGhoajlS RnNrJTNEJmFtcDtyZXNlcnZlZD0wIiB0YXJnZXQ9Il9ibGFuayI+aHR0cHM6Ly9kYXRhdHJhY2tl ci5pZXRmLm9yZy9kb2MvZHJhZnQtcGF1bHktcXVpYy1kYXRhZ3JhbS88L2E+PGJyPg0KSHRtbGl6 ZWQ6ICZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOzxhIGhyZWY9Imh0dHBzOi8v bmFtMDYuc2FmZWxpbmtzLnByb3RlY3Rpb24ub3V0bG9vay5jb20vP3VybD1odHRwcyUzQSUyRiUy RnRvb2xzLmlldGYub3JnJTJGaHRtbCUyRmRyYWZ0LXBhdWx5LXF1aWMtZGF0YWdyYW0tMDMmYW1w O2RhdGE9MDIlN0MwMSU3Q25pYmFua3MlNDBtaWNyb3NvZnQuY29tJTdDYzZkM2VhMGMzNTBlNGZl M2MwNjQwOGQ3MDU1MTc4OTUlN0M3MmY5ODhiZjg2ZjE0MWFmOTFhYjJkN2NkMDExZGI0NyU3QzEl N0MwJTdDNjM2OTgzNzE5NzkzOTY2ODU2JmFtcDtzZGF0YT1mUGVHNDYxWjFPRXB5Mno1dmd5cHRI V1pUZ2hhRGZMTHF0bEJ5QWZRTiUyRkElM0QmYW1wO3Jlc2VydmVkPTAiIHRhcmdldD0iX2JsYW5r Ij5odHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtcGF1bHktcXVpYy1kYXRhZ3JhbS0w MzwvYT48YnI+DQpIdG1saXplZDogJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 PGEgaHJlZj0iaHR0cHM6Ly9uYW0wNi5zYWZlbGlua3MucHJvdGVjdGlvbi5vdXRsb29rLmNvbS8/ dXJsPWh0dHBzJTNBJTJGJTJGZGF0YXRyYWNrZXIuaWV0Zi5vcmclMkZkb2MlMkZodG1sJTJGZHJh ZnQtcGF1bHktcXVpYy1kYXRhZ3JhbSZhbXA7ZGF0YT0wMiU3QzAxJTdDbmliYW5rcyU0MG1pY3Jv c29mdC5jb20lN0NjNmQzZWEwYzM1MGU0ZmUzYzA2NDA4ZDcwNTUxNzg5NSU3QzcyZjk4OGJmODZm MTQxYWY5MWFiMmQ3Y2QwMTFkYjQ3JTdDMSU3QzAlN0M2MzY5ODM3MTk3OTM5NzE4NDYmYW1wO3Nk YXRhPSUyRjVCcE5ubEJmVGpYSktjSVhQdzBBdFNJNFpuUjVBTkJ5MGRJOHVLa2hGdyUzRCZhbXA7 cmVzZXJ2ZWQ9MCIgdGFyZ2V0PSJfYmxhbmsiPmh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcv ZG9jL2h0bWwvZHJhZnQtcGF1bHktcXVpYy1kYXRhZ3JhbTwvYT48YnI+DQpEaWZmOiAmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDs8YSBo cmVmPSJodHRwczovL25hbTA2LnNhZmVsaW5rcy5wcm90ZWN0aW9uLm91dGxvb2suY29tLz91cmw9 aHR0cHMlM0ElMkYlMkZ3d3cuaWV0Zi5vcmclMkZyZmNkaWZmJTNGdXJsMiUzRGRyYWZ0LXBhdWx5 LXF1aWMtZGF0YWdyYW0tMDMmYW1wO2RhdGE9MDIlN0MwMSU3Q25pYmFua3MlNDBtaWNyb3NvZnQu Y29tJTdDYzZkM2VhMGMzNTBlNGZlM2MwNjQwOGQ3MDU1MTc4OTUlN0M3MmY5ODhiZjg2ZjE0MWFm OTFhYjJkN2NkMDExZGI0NyU3QzElN0MwJTdDNjM2OTgzNzE5NzkzOTc2ODM3JmFtcDtzZGF0YT1n RUNoa0tmMGxYN1lZR0JlTUtpWlBPS3NOOExOZXJxM0hVUlJwbXpOZkRjJTNEJmFtcDtyZXNlcnZl ZD0wIiB0YXJnZXQ9Il9ibGFuayI+aHR0cHM6Ly93d3cuaWV0Zi4ub3JnL3JmY2RpZmY/dXJsMj1k cmFmdC1wYXVseS1xdWljLWRhdGFncmFtLTAzPC9hPjxicj4NCjxicj4NCkFic3RyYWN0Ojxicj4N CiZuYnNwOyZuYnNwO1RoaXMgZG9jdW1lbnQgZGVmaW5lcyBhbiBleHRlbnNpb24gdG8gdGhlIFFV SUMgdHJhbnNwb3J0IHByb3RvY29sIHRvPGJyPg0KJm5ic3A7Jm5ic3A7YWRkIHN1cHBvcnQgZm9y IHNlbmRpbmcgYW5kIHJlY2VpdmluZyB1bnJlbGlhYmxlIGRhdGFncmFtcyBvdmVyIGE8YnI+DQom bmJzcDsmbmJzcDtRVUlDIGNvbm5lY3Rpb24uPGJyPg0KPGJyPg0KPGJyPg0KPGJyPg0KPGJyPg0K UGxlYXNlIG5vdGUgdGhhdCBpdCBtYXkgdGFrZSBhIGNvdXBsZSBvZiBtaW51dGVzIGZyb20gdGhl IHRpbWUgb2Ygc3VibWlzc2lvbjxicj4NCnVudGlsIHRoZSBodG1saXplZCB2ZXJzaW9uIGFuZCBk aWZmIGFyZSBhdmFpbGFibGUgYXQgPGEgaHJlZj0iaHR0cHM6Ly9uYW0wNi5zYWZlbGlua3MucHJv dGVjdGlvbi5vdXRsb29rLmNvbS8/dXJsPWh0dHAlM0ElMkYlMkZ0b29scy5pZXRmLm9yZyUyRiZh bXA7ZGF0YT0wMiU3QzAxJTdDbmliYW5rcyU0MG1pY3Jvc29mdC5jb20lN0NjNmQzZWEwYzM1MGU0 ZmUzYzA2NDA4ZDcwNTUxNzg5NSU3QzcyZjk4OGJmODZmMTQxYWY5MWFiMmQ3Y2QwMTFkYjQ3JTdD MSU3QzAlN0M2MzY5ODM3MTk3OTM5ODE4MjQmYW1wO3NkYXRhPXZvZmZ2R0RWejNQbHV3Y041d3VB WnF0ZmxCRTl6Z2slMkZENnd0MnJmTlUwTSUzRCZhbXA7cmVzZXJ2ZWQ9MCIgdGFyZ2V0PSJfYmxh bmsiPg0KdG9vbHMuaWV0Zi5vcmc8L2E+Ljxicj4NCjxicj4NClRoZSBJRVRGIFNlY3JldGFyaWF0 PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+ DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9ib2R5 Pg0KPC9odG1sPg0K --_000_BL0PR2101MB1332DED052BF219969E70F43B3F00BL0PR2101MB1332_-- From nobody Wed Jul 10 20:14:49 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 78ECB120090 for ; Wed, 10 Jul 2019 20:14:47 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.7 X-Spam-Level: X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=mnot.net header.b=riO6ko76; dkim=pass (2048-bit key) header.d=messagingengine.com header.b=aYKI+I4D Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iUB1C5NO1Kiu for ; Wed, 10 Jul 2019 20:14:44 -0700 (PDT) Received: from out2-smtp.messagingengine.com (out2-smtp.messagingengine.com [66.111.4.26]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8706E12006E for ; Wed, 10 Jul 2019 20:14:44 -0700 (PDT) Received: from compute3.internal (compute3.nyi.internal [10.202.2.43]) by mailout.nyi.internal (Postfix) with ESMTP id A1D9C21CDA; Wed, 10 Jul 2019 23:14:43 -0400 (EDT) Received: from mailfrontend2 ([10.202.2.163]) by compute3.internal (MEProxy); Wed, 10 Jul 2019 23:14:43 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mnot.net; h=from :content-type:content-transfer-encoding:mime-version:subject :message-id:date:cc:to; s=fm3; bh=V49agsm8HCfrEqFoSt4tubZBvqBNam TgucZf2aNcOTw=; b=riO6ko7692+kA0wBhupFLpLvJEayPUzb5eObl0kxir08Ih ZznsM2DkGn18JaU4v9pF/PqZTYudfPoQXF+Lsi3Fgxedvsca7qto8YIOt3n7WDqP 9C8/rjQLa1WjKKV6YrKq4lX5Yqi9IXqYwh/ZB/LPQmL4x5VyA0vJJx+fJJmGwuYH g3SgKpOG2XGTBKOqHDFFsbZU0xS5/91+I7PNByvLfqxiJAdjMr0NJ/mClwxEn1/E UqvrmamxpL1mWIwIflUUurHMaG7IAHWKL63Jncue4/d2xJAo4jq2rwy6fGBuCKNm ktR4801Z5VH1A4d3vNrLerXj5z/MLVyRSX47HeLg== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :date:from:message-id:mime-version:subject:to:x-me-proxy :x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm3; bh=V49ags m8HCfrEqFoSt4tubZBvqBNamTgucZf2aNcOTw=; b=aYKI+I4DE+OhvpCuHTEJFr Gqnkykp5gDiiJcSgEk7sb22jiHLHBmREdYqIrQO0LH7ftQz44W3QSL8cMLiYyZT2 0AhiyFWUkVqGVj53jd405tFD/0HBLmUBxZDZTbyqF9vn1BldB422k3ahnaBb0TZi l5kfeerkSFGp64m6erCXajFNYBdL241lAhAvAckZmOA1TLPy8F711bK3w1RT1URx UZPixcGZlm9CfBOMO1bOv49gBLUfPHBHWMAJVJSmNPRxaKPlqXBsu+gBaCAai3fF 7JDpgDLkOqau5FD1aD3sVxTM41pqgFZqW5lbHuylbYmNcDHdG9gIafLbMZITjPnQ == X-ME-Sender: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeduvddrgeejgdeijecutefuodetggdotefrodftvf curfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfghnecu uegrihhlohhuthemuceftddtnecusecvtfgvtghiphhivghnthhsucdlqddutddtmdenuc fjughrpefhtgfgggfukfffvffosehtqhhmtdhhtdejnecuhfhrohhmpeforghrkhcupfho thhtihhnghhhrghmuceomhhnohhtsehmnhhothdrnhgvtheqnecuffhomhgrihhnpehgih hthhhusgdrtghomhdpmhhnohhtrdhnvghtnecukfhppedugeegrddufeeirddujeehrddv keenucfrrghrrghmpehmrghilhhfrhhomhepmhhnohhtsehmnhhothdrnhgvthenucevlh hushhtvghrufhiiigvpedt X-ME-Proxy: Received: from macbook-pro.mnot.net (unknown [144.136.175.28]) by mail.messagingengine.com (Postfix) with ESMTPA id EC84B380075; Wed, 10 Jul 2019 23:14:40 -0400 (EDT) From: Mark Nottingham Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Subject: Presentations for issues you own in Montreal Message-Id: Date: Thu, 11 Jul 2019 13:14:37 +1000 Cc: Lars Eggert To: IETF QUIC WG X-Mailer: Apple Mail (2.3445.104.11) Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Jul 2019 03:14:47 -0000 If you've been assigned an issue: = https://github.com/quicwg/base-drafts/issues?utf8=3D=E2=9C=93&q=3Dis%3Aope= n+is%3Aissue+-label%3A-http+label%3Adesign+-label%3Aproposal-ready ... and wish to present slides to guide discussion in Montreal, please = send Lars and/or I your BRIEF presentation by next Wednesday; we will = not accept last-minute slides. Thanks, -- Mark Nottingham https://www.mnot.net/ From nobody Thu Jul 11 12:32:53 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C7EC8120155 for ; Thu, 11 Jul 2019 12:32:50 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.604 X-Spam-Level: X-Spam-Status: No, score=-0.604 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, PDS_NO_HELO_DNS=1.295, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=plonka-us.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sm0xGP_V_3fF for ; Thu, 11 Jul 2019 12:32:49 -0700 (PDT) Received: from mail-ot1-x334.google.com (mail-ot1-x334.google.com [IPv6:2607:f8b0:4864:20::334]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1869E12006B for ; Thu, 11 Jul 2019 12:32:49 -0700 (PDT) Received: by mail-ot1-x334.google.com with SMTP id q20so7048503otl.0 for ; Thu, 11 Jul 2019 12:32:49 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=plonka-us.20150623.gappssmtp.com; s=20150623; h=mime-version:from:date:message-id:subject:to; bh=DCFVc5MfTGrac/NCS/l+kjGKylOGaWNAbde2UQZtLZg=; b=nvR0ANCjwhCg1tF/0fCb/lpW9f8VGNMOok8sVNlyqYI+KfcgQZIB3eqCRdn7gOzA4e N7Uzq/FeONjT6jrGZY8ClmzGkNRqiNXZziHNW98c8NVAOLSB/nMw/87BNs0PbJWYeHSY Pt6+QiNsUv5lOosW9fetn2C7or28YOWs8bBWlNS+fqBORsx5Y4JUKelddqQsRw8DL9Kx qFhLrQVmAQoXlsDqnB31ZcL8Z5xx2BxXcOvAyM8nmJKSd2O1m9Fqhb+jK1m6FDyl1Jft U3wuseIIkBUSBJoUFolRwIwXQf1homOGT+mpTUeoiBHNs/TkuLsyLl+pKLPD+R3libZy yXyg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=DCFVc5MfTGrac/NCS/l+kjGKylOGaWNAbde2UQZtLZg=; b=Kz4S0YCd4wyLRWG9vBKijbUMo1jL63GUbLBoGTgauxAKl0VKb+9EebwSEIbiRh2dBe kkVFYpShnW1nhKCD96xDTuE/uifAcpplxllUOc/390oFmPrGW4QLbBmynVGlSEWTBN0j UjPDXc5zGiD1V9z8Hi9UQ7btROz+mGonIXDQ4rC313VCz3b5clgk/NsfO/XD8zeDKwRj Htu+NMVBWQPxiLWWQtWYsifWd7db5hOqvkmlpsqeQ7CvgCLrkljEH4J4nH3FI7qHMBca KmLxdZervuiSXVNsa5Txbr+VqNhB90N4wcZU3TOYJBSQmC1SNLRAGxq/WSDs9AkkkqOj qutw== X-Gm-Message-State: APjAAAWdMaRuUWWnBFnDPG3GgJtyup8Z1kI9a5Vcb13MNmMJdINRzdff hg352v78CeHbMKubVVpXnni98YkAWjFW9ydI0jssxj24 X-Google-Smtp-Source: APXvYqxtN9jRFcWVMdkwfk2bcw9HVQXAPRFCBqZCMhgjFTkst88JgPcQSVF8UxMZ0HmPDSEdXNCMJNfxKsGL326XgYY= X-Received: by 2002:a9d:6204:: with SMTP id g4mr4183798otj.40.1562873568181; Thu, 11 Jul 2019 12:32:48 -0700 (PDT) MIME-Version: 1.0 From: Dave Plonka Date: Thu, 11 Jul 2019 14:32:37 -0500 Message-ID: Subject: QUIC topics at MAPRG meeting, IETF 105 Montreal, Friday morning To: quic@ietf.org Content-Type: text/plain; charset="UTF-8" Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Jul 2019 19:32:51 -0000 Hi folks, Please note that the Measurement and Analysis for Protocols Research Group (MAPRG) has arranged for presentaiton of three measurement contributions pertinent to QUIC engineering and/or operation at our upcoming meeting during IETF 105 in Montreal: * Measuring QUIC Dynamics over a High Delay Path * Trials and tribulations of migrating to IETF QUIC * Packet Loss Signaling for Encrypted Protocols MARG is scheduled to meet as follows: Date: Friday July 26, 10:00-12:00 (Morning session I) Room: Place du Canada and the meeting full agenda including abstracts is here: https://datatracker.ietf.org/meeting/105/materials/agenda-105-maprg.html Please join us if you are interested! Thanks, Dave & Mirja (MAPRG chairs) -- dave@plonka.us http://www.cs.wisc.edu/~plonka/ From nobody Thu Jul 11 23:37:56 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 38C48120052 for ; Thu, 11 Jul 2019 23:37:54 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.003 X-Spam-Level: X-Spam-Status: No, score=0.003 tagged_above=-999 required=5 tests=[BAYES_40=-0.001, FROM_EXCESS_BASE64=0.001, HTML_IMAGE_RATIO_08=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vHYi1a29kOm4 for ; Thu, 11 Jul 2019 23:37:50 -0700 (PDT) Received: from mxuc.fiberhome.com (mxuc.fiberhome.com [113.57.179.111]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5D41F120048 for ; Thu, 11 Jul 2019 23:37:47 -0700 (PDT) Authentication-Results: mxuc.fiberhome.com; spf=None smtp.pra=djy@fiberhome.com; spf=Fail smtp.mailfrom=djy@fiberhome.com Received-SPF: None (mxuc.fiberhome.com: no sender authenticity information available from domain of djy@fiberhome.com) identity=pra; client-ip=10.166.1.66; receiver=mxuc.fiberhome.com; envelope-from="djy@fiberhome.com"; x-sender="djy@fiberhome.com"; x-conformance=sidf_compatible.downgrade_pra Received-SPF: Fail (mxuc.fiberhome.com: domain of djy@fiberhome.com does not designate 10.166.1.66 as permitted sender) identity=mailfrom; client-ip=10.166.1.66; receiver=mxuc.fiberhome.com; envelope-from="djy@fiberhome.com"; x-sender="djy@fiberhome.com"; x-conformance=sidf_compatible.downgrade_pra; x-record-type="v=spf1" IronPort-PHdr: =?us-ascii?q?9a23=3Al7dKQB/OxpIhQP9uRHKM819IXTAuvvDOBiVQ1KB4?= =?us-ascii?q?1+4cTK2v8tzYMVDF4r011RmVBN+dt6MP2rWempujcFRI2YyGvnEGfc4EfD4+ou?= =?us-ascii?q?JSoTYdBtWYA1bwNv/gYn9yNs1DUFh44yPzahANS47xaFLIv3K98yMZFAnhOgpp?= =?us-ascii?q?POT1HZPZg9iq2+yo9JDffhtEiCCybL52Ixm7qQfcvdQKjIV/Lao81gHHqWZSde?= =?us-ascii?q?RMwmNoK1OTnxLi6cq14ZVu7Sdete8/+sBZSan1cLg2QrJeDDQ9LmA6/9brugXZ?= =?us-ascii?q?TQuO/XQTTGMbmQdVDgff7RH6WpDxsjbmtud4xSKXM9H6QawyVD+/6apgVR3mhz?= =?us-ascii?q?odNzMh/m/ZitJ+jLhGrhy7oBJwzI3ab52OOfpkYq/QZ8kXS2pdUslLUSFKH4Oy?= =?us-ascii?q?b5EID+oEJetct47lolsLtR27Bg+nGeTixSJKhn72xqA63eUhHhrY0ww6H9IOt3?= =?us-ascii?q?HUo8vvOKgOVuC1ybDFwDPeZP1Y3jf97ZLHchEnofyUXLJ/b9bRyUc1GwPClFWQ?= =?us-ascii?q?poroNC6W2OQVq2WX8vZsWfiyh2Mmqgx9uCWjyt0th4TIno4Z11LJ+ThjzIs2O9?= =?us-ascii?q?G0UkB2bcS6HJZeqS2XMZZ9TNk4TGFyoik6z6ULuZu8fCcX1psq3wXfa/mbc4iQ?= =?us-ascii?q?5RLjSfqRLS94hH17fLK/gA6/8UahyuLnSMa0ylZKri1AktbSrHwCyxvT6s2fRv?= =?us-ascii?q?t8+EeuxyqP2hjO5u1YO0w4iKvWJp87zrItjJYesEXOEjfzmErsja+Wcksk+vKv?= =?us-ascii?q?6+Tierjpu52cNo9vhwHwM6QhgdKwAf44MggJWmiU5/6w26Hk/U38WLlKlOE5kr?= =?us-ascii?q?HFsJDGIsQWvre5AxJU0ok/8Bu/Dimp0MgWnXUdK1JFYh2H3MDVPATXPfHzRaOm?= =?us-ascii?q?nlWnuDZm2/6AOafuVMb3I2DHgYvmKLp/+gYIxAgi5d5e7Z9OCrYELbT4XUqn5/?= =?us-ascii?q?LCCRps75NhXl1eQIFx1JI2V2OFD7WZN6bf91SP47R8cKG3eIYJtWOleLAe7Pn0?= =?us-ascii?q?gCphwA5PTeySxZISLUuAMLFjKkSdb2Drh45cQ2kLtAckTOvvhRuJVjsBOy/uDZ?= =?us-ascii?q?J53SkyDcedNamGXpqk2eHT0iaxE4dWYWVLTFuLFCWweg=3D=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A2kbGwCkHShd/0IBpgplgy4Pc2pyEiiEH?= =?us-ascii?q?INKkUKDPoRTAYIfjkGBZwkBAQEJAScJAQIBAQKEOgIbgj0YDzQTAQMBAQUBAQE?= =?us-ascii?q?BAgMBAQEBaYUDOQyCOiIcTWsBAQEBAQEjAkQ4XyoDEBABAQEKGgQFEA8WIRIBC?= =?us-ascii?q?geDEoIJEJAPlCGHRAiBMBoChCpBMIR2CgYigRKBY4UlhG6Bf4ERRoEohEMCAwG?= =?us-ascii?q?BIQSDPoJcBIwCiHk0hyuOBAmCG4VMgQyGfIQEgk6CLIckg3kDijmUeJIVIoFYc?= =?us-ascii?q?BV9BlYvgR+CGAGJLYVMNTCBAgEeCBMFBQEBjwYBAQ?= X-IPAS-Result: =?us-ascii?q?A2kbGwCkHShd/0IBpgplgy4Pc2pyEiiEHINKkUKDPoRTAYI?= =?us-ascii?q?fjkGBZwkBAQEJAScJAQIBAQKEOgIbgj0YDzQTAQMBAQUBAQEBAgMBAQEBaYUDO?= =?us-ascii?q?QyCOiIcTWsBAQEBAQEjAkQ4XyoDEBABAQEKGgQFEA8WIRIBCgeDEoIJEJAPlCG?= =?us-ascii?q?HRAiBMBoChCpBMIR2CgYigRKBY4UlhG6Bf4ERRoEohEMCAwGBIQSDPoJcBIwCi?= =?us-ascii?q?Hk0hyuOBAmCG4VMgQyGfIQEgk6CLIckg3kDijmUeJIVIoFYcBV9BlYvgR+CGAG?= =?us-ascii?q?JLYVMNTCBAgEeCBMFBQEBjwYBAQ?= Received: from unknown (HELO fiberhome.com) ([10.166.1.66]) by mxuc.fiberhome.com with ESMTP; 12 Jul 2019 14:37:42 +0800 Received: from david (unknown [171.82.3.232]) by mail-front01 (Coremail) with SMTP id QgGmCgDXt0CzKihdEu4AAA--.253S2; Fri, 12 Jul 2019 14:37:39 +0800 (CST) Date: Fri, 12 Jul 2019 14:37:39 +0800 From: =?gb18030?B?tPe99dPR?= To: quic Reply-To: djy Subject: about netconf over QUIC X-Priority: 3 X-Has-Attach: no X-Mailer: Foxmail 7.0.1.92[cn] Mime-Version: 1.0 Message-ID: <201907121437377245258@fiberhome.com> Content-Type: multipart/related; boundary="----=_001_NextPart500601116744_=----" X-CM-TRANSID: QgGmCgDXt0CzKihdEu4AAA--.253S2 X-Coremail-Antispam: 1UD129KBjDUn29KB7ZKAUJUUUUU529EdanIXcx71UUUUU7v73 VFW2AGmfu7bjvjm3AaLaJ3UjIYCTnIWjp_UUUOE7k0a2IF6ryUM7kC6x804xWl1xkIjI8I 6I8E6xAIw20EY4v20xvaj40_Wr0E3s1l1IIY67AEw4v_Jr0_Jr4l8cAvFVAK0II2c7xJM2 8CjxkF64kEwVA0rcxSw2x7M28EF7xvwVC0I7IYx2IY67AKxVWDJVCq3wA2z4x0Y4vE2Ix0 cI8IcVCY1x0267AKxVW0oVCq3wA2z4x0Y4vEx4A2jsIE14v26rxl6s0DM28EF7xvwVC2z2 80aVCY1x0267AKxVW0oVCq3wAS0I0E0xvYzxvE52x082IY62kv0487M2AExVA0xI801c8C 04v7Mc02F40Eb4A2aVAYj7AlexkEI4k267I2xxyl5I8CrVAvF7xS0VCYjI8vzVWUtwAqx4 xG6xAIxVCFxsxG0wAqx4xG6I80eVAI3cIFxVC2b4A2awAv7VC0I7IYx2IY67AKxVWUJVWU GwAv7VC2z280aVAFwI0_Jr0_Gr1lOx8S6xCaFVCjc4AY6r1j6r4UM4x0Y48IcxkI7VAKI4 8JM4xvF2IEb7IF0Fy264kE64k0F24lFcxC0VAYjxAxZF0Ex2IqxwAKzVCY07xG64k0F24l 42xK82IYc2Ij64vIr41l42xK82IY6x8ErcxFaVAv8VW8Xr1UJr1l4I8I3I0E4IkC6x0Yz7 v_Jr0_Gr1lx2IqxVAqx4xG67AKxVWUGVWUWwC20s026x8GjcxK67AKxVWUGVWUWwC2zVAF 1VAY17CE14v26r1j6r15MIIYrxkI7VAKI48JMIIF0xvE2Ix0cI8IcVAFwI0_Jr0_JF4lIx AIcVC0I7IYx2IY6xkF7I0E14v26r1j6r4UMIIF0xvE42xK8VAvwI8IcIk0rVWrJr0_WFyU JwCI42IY6I8E87Iv67AKxVWUJVW8JwCI42IY6I8E87Iv6xkF7I0E14v26r1j6r4UYxBIda VFxhVjvjDU0xZFpf9x0zEznmZUUUUU= X-CM-SenderInfo: hgm1qwhleh2xxrphhudrp/ Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 12 Jul 2019 06:37:54 -0000 This is a multi-part message in MIME format. ------=_001_NextPart500601116744_=---- Content-Type: multipart/alternative; boundary="----=_002_NextPart670316801084_=----" ------=_002_NextPart670316801084_=---- Content-Type: text/plain; charset="gb2312" Content-Transfer-Encoding: base64 ICANCkRlYXIgYWxsLA0KR29vZCBtb3JuaW5nLCBhZnRlcm5vb24gb3IgZXZlbmluZyENCldlIGhh dmUgc3VibWl0dGVkIGEgZHJhZnQgJ2RyYWZ0LWRhaS1xdWljLW5ldGNvbmYtMDAnIHdoaWNoIGlz IGFib3V0ICd1c2luZw0KbmV0Y29uZiBvdmVyIFFVSUMgY29ubmVjdGlvbnMnLCBpZiB5b3UgaGF2 ZSBhbnkgY29tbWVudHMsIHBsZWFzZSBsZXQgdXMga25vdy4NClRoYW5rIHlvdSB2ZXJ5IG11Y2gh DQpCZXN0IHJlZ2FyZHMhDQoNCg0KDQoNCiBEYXZpZCBEYWkNCkNoaW5hIEluZm9ybWF0aW9uIENv bW11bmljYXRpb24gVGVjaG5vbG9naWVzIEdyb3VwDQpBZGRyOiBHYW94aW4gUm9hZCA0dGggNiMs IFd1aGFuLCBIdWJlaSwgQ2hpbmENClRlbDogICs4NiAyNy04NzY5MzQ0Mi04MzE4DQpNT2JpbGU6 ICs4NiAxNTM3NzA2NTgxMg0KRmF4OiAgKzg2IDI3LTg3NjkzNzg0DQpFLW1haWw6IGRqeUBmaWJl cmhvbWUuY29tDQoNCiA= ------=_002_NextPart670316801084_=---- Content-Type: text/html; charset="gb2312" Content-Transfer-Encoding: quoted-printable
3D""    
Dear all,
Good morning, afternoon or evening!
We have submitted a draft 'draft-dai-quic-netconf-00'=20 which is about 'using
netconf over QUIC connections', if you have any comments,= =20 please let us know.
Thank you very much!
Best regards!
 
 David=20 Dai
China Information Communication Technologies=20 Group
Addr: Gaoxin Road 4th 6#, Wuhan, Hubei,=20 China
Tel:  +86 27-87693442-8318
MObile: +86=20 15377065812
Fax:  +86 27-87693784
E-mail: djy@fiberhome.com
3D""=20   3D""=20 ------=_002_NextPart670316801084_=------ ------=_001_NextPart500601116744_=---- Content-Type: image/gif; name="spacer(07-12-14-33-26).gif" Content-Transfer-Encoding: base64 Content-ID: <_Foxmail.0@F3F4AF61-8B34-4A12-84BB-3DCEBF4F0E3C> R0lGODlhAQABAPAAAAAAAP///yH5BAEAAAEALAAAAAABAAEAAAICTAEAOw== ------=_001_NextPart500601116744_=---- Content-Type: image/jpeg; name="tl(07-12-14-33-26).jpg" Content-Transfer-Encoding: base64 Content-ID: <_Foxmail.1@FEA4A597-3BDD-4B7A-B364-AFDED371E2D3> /9j/4AAQSkZJRgABAgAAZABkAAD/7AARRHVja3kAAQAEAAAAUAAA/+4ADkFkb2JlAGTAAAAAAf/b AIQAAgICAgICAgICAgMCAgIDBAMCAgMEBQQEBAQEBQYFBQUFBQUGBgcHCAcHBgkJCgoJCQwMDAwM DAwMDAwMDAwMDAEDAwMFBAUJBgYJDQsJCw0PDg4ODg8PDAwMDAwPDwwMDAwMDA8MDAwMDAwMDAwM DAwMDAwMDAwMDAwMDAwMDAwM/8AAEQgAeAEXAwERAAIRAQMRAf/EAaIAAAAHAQEBAQEAAAAAAAAA AAQFAwIGAQAHCAkKCwEAAgIDAQEBAQEAAAAAAAAAAQACAwQFBgcICQoLEAACAQMDAgQCBgcDBAIG AnMBAgMRBAAFIRIxQVEGE2EicYEUMpGhBxWxQiPBUtHhMxZi8CRygvElQzRTkqKyY3PCNUQnk6Oz NhdUZHTD0uIIJoMJChgZhJRFRqS0VtNVKBry4/PE1OT0ZXWFlaW1xdXl9WZ2hpamtsbW5vY3R1dn d4eXp7fH1+f3OEhYaHiImKi4yNjo+Ck5SVlpeYmZqbnJ2en5KjpKWmp6ipqqusra6voRAAICAQID BQUEBQYECAMDbQEAAhEDBCESMUEFURNhIgZxgZEyobHwFMHR4SNCFVJicvEzJDRDghaSUyWiY7LC B3PSNeJEgxdUkwgJChgZJjZFGidkdFU38qOzwygp0+PzhJSktMTU5PRldYWVpbXF1eX1RlZmdoaW prbG1ub2R1dnd4eXp7fH1+f3OEhYaHiImKi4yNjo+DlJWWl5iZmpucnZ6fkqOkpaanqKmqq6ytrq +v/aAAwDAQACEQMRAD8A9FWtxNfaV6puSbe0topLqaoSNpZFq45Hx6fLPLiH04FJ7eG+uoHkmmiE krEyRu3FYlSiqsP+QB06YCkKVtot3qUdojanJpsVzcNbtDDETEx4lg/JzvyUU64IkFMgXq+n6bHo 1hDaLL6iWyhBMVCMVHTlTrjS2+fvzL8+LZa1p2m26NqSRy8r/TYxyEsZBCq1AenWnfM3FChaMURM knkgF1jz9qJa70zQbXT7Wyj4w2VyzO7VoQwA4DpsB0yxy2Hi881ecdWfy7q0cMMEMyHVWtUAVvT3 oWJYBvAbePbFWY2Xr6Zp+q+Vrm0N3JYuz6OsgDqkDjlGag9VPjuT94I5tObLwDbmmt55fggtoIdS 1Ei4f4ru4DmNZzXlLz6VGwAA6KAOmJNs8cOEb8+rwEWjTeZ7ux0GSO3hN3O8U6OzRpAqDkyyA+++ 9MQylyfQHmrT21SztdQ02ZoliCjUACArQdHrUHdRvlcNti4GHLwnyeUeb7HStGj1FIYvXnvlSSyv 5W9WZKMVaPrspoaEjcZN2Fsc1Ty7eaFDot5ZyzG5ltVvhdKCfQblWh22AJAPh1xQQCKL6D8va/ee cNB08X92qyuh9S2FFQsOSMsnEmnKg6e+YWWFScUFNNJubT6hPpzRiezt3kguVWUSkgmoZeNT9o0p Xam3bBI0bej7PAyafhkNtwlun21zqms3fl+/1CKO3tTGIJJFVhIgAb4Y1A3FaNUjcGm2SIEhYdHq tNLTyo/T0L37SrCOytILRGDpGo+JUWMUA2AVQABkacZNAgb7PUdCSaVw0i1sv7tHYnYfa3ONIt8i ed9TksfMdhrsIji0tL5UeERhV9IcgxJGzchUnwy2BHFTvBo/8CN8z6vx8PtemancWmu2dpZw2CGS payt7ahZ1WgDtt8Cjap+jeuThilKVB52WSMY2VDT/IL2dza6pexWhmC1WDj6oCkV+wKA1982MIiA oW6+UjI2aZw2uabql3L5ftVWW90wW0+pqoIKLcB/TDUFAaKWp1pQ9CMK2nGrov6No5+rQQRFYCh+ 1Q1pv8sCWGRQ3M2nrPZatLp0yVDMaSRgqTReB7HoenzGC00wm487XELXdjr9isNwFJimtJV9KZSP 7xfUKFf9Wpp+OAgDdMSbqnjGuxrrKwC002X6zHMfUvJQoQRlqtyNfi5DpxB38MxdRmxGJBNnpXe7 Xs/BqYTEoiged93u5+5h83lPhdScohxSjkAVIV96DNTxvS0pDyvcJPK1kwQFRSJhyBr0GPGtK409 EjlF7EYrlB6bCnwU7cT74OJKW3NlYpSOOsswAoEHI1HyyQJLEyAfX/5W6l53byjpXl3ypo1taxWw kE2varKVhQySNIfTto/3khBbapQe+bnEJCIFVtzP6uf3PJak45ZJTMrs8o7/ADPL5W9hsfyis7+7 g1bzrqE3nHUYWWS3jvgBZQMP2obJf3YPu3JvfLBCtybLjyzmuGA4R9p955/oetxafbQKBGoUgAKd +3h4fRhItpBV6DrUg/TT78CXx/5+up/JcWlpa+W59U8sWkDrfT2rN60UlQEbiv2iwrXlsfEd9dCI LuIREh9VHzSPyf5o8vayFu9CuFW5u1Esum3SmK6FR+1E5NaU3K1GWTgORaTCcKJGxZn5i8zraW2l rdj0VF4rep0FY1ZggAHcVyo4u5Iyd67zr51s9N0hWguozNfKq2Sl1ALyU4/aZQQOQ79aDDix77pv jNB4Fpdl9VjmuLJV1TVbieN7363Xm5MjcpHbenw9KbZkudGPCKCL8yeata06NNKeOCC41ZGjs5bS clEBIUF9gy8Sdjtikmk68meXtb0N9Tg5RX9vPCkqTyj4frTIWkY0FWUEUrXr9+RlMRaJ5qNBGCaa 31U24t5br0x6l9MrKWkkQiQoAKdKdfCgyOMmRtoiOKYtjl3pd1r1vaXfm3UCNMpLPa6ZATF8G5UT sWqaJ2Ay1znzz560290y0XU9F52/lnU79YdOnV/70rESzA0BMYYdehPjTLYAXTXOxHjrYPq3yjqR udKtraQiRJIme5UbueIqqqp2NaGuYupHDJ1mmNxYh5o0FL6WTV7WNru1tJIpJwV4RPCjFljWR/h2 qwoPuwYsl7Fyoz8M30pW806hf2eh3v1OyUQXEap9YJ2ijmNKrSm1dwN6d8tc1OvyrEUWjG3nFqou KXbSXEgRGSQhaU5CpWgFP9vKM8b3caYMZe9Ei6h0LzTc2ttLGlnfuktY2qvqsOPy34ZTPkHedjzv HIdx+8IqxtZdW1rU7uGdomgYrayooP2agMDWlV9shGXCbdlmwxywMZci9k0DX5w0dhqIHqfYS8Uj 03NK7DkSD7HLdpbh5bVaOemO+8ehZ9Egb4/V234L12+eABxCUg80X4tNP9OKRFub2RYYGNK/H9oj 3VATkxQFtmnwnNkjAdefu6vlf8wLJF/R9ot2ZbOeUqyTGqxr8K1r4b0yoHe3szEVw9HqX5Z29vDo 0tbjlMGaI3QBIk4EotD1oKfL9Z3MB6Qe9841MeDLKF3wkhkmranNZwx2duBdXl0WWytyaqvGgLsR Q8VB+k7e4ZSAFlqAJNBV8i6FFpUOo3swabUdTnkmu7xgKvIrFKE/7En6fDESsJqix7znfajq+lXt 1ZjjFohSaOMNT1XicM4BHYqCvyOEHdB5MOufM9vp1hdlVY2wYv6v7SA9Ay+3fABZSTsx42cd3DZ3 vp8Lq7gWS4Wc1eMsKmtdwPbtnO6jLKUyOKxb2OkxRhjiRERJG/45om100yLGdjybiWHQU7/TlHE5 SkdKW3v1aRvWWcFX5U6oKjjjaqUzaRp8by3dxb21FIRGcA+PTCLPJBkI7lhN35l0to2tNMtZNTuJ WLSFVrECfEt4dMuGGQFy297QdTEmo2fd+titlomp3BvZkU2kbyVlt06hv5Rkp5Iiq3phjhM2TsD0 e0flfqH+Fda0mLTNRuBNf3EceraZcsTC8bkKWRTtzHYjf6Nst0uqmJiPQmq97ja/RY5YpSr1AE37 n6FQgvBE3dgKt1Ob2nlLXPEWUcqca9Ke+RItIKxY3FQaGp4hSegpjSbfP2tyx3fl7ULVuDXRCRce Q5fFIqhuR8K1r9Oamna28/tPKflrzlbS6drtosmp2BZRq9uWtrgOh/37GQSVqKV2wxmQ2RnKPJ5b 578t+cvKkumxXXmlfMvlhpz6LX0IGo2q0pRpIx6c6n+ZlUg96ZkxlCQ2FH7GkxMp7kAHyeV6loV9 5jSDTrl57tl4NpsCRs0MkSOsgaFwaU+ErU0GXxIbThGEWd/N6FD5L1m6tfrCzXFjeJw9dopODMqE CgiT4Nh775USOinVnoGfeWfLHl6NrnzFcq3mJ7mJYpp7gqZUFaMVBCqK1FKAdMolkkOTEyM+ZejW 9t9RstNDzieNILeOWh3qP3bK58Qu9MoNkpFB4/FPfWHnKWKGS2a1WCcXt1LXkBGxpRl2JLKNj0Ar XxysI9KcRPibcqS60t4vPV0L+WI23lPSZZEpGSrX92TSSNTsTEv7ZH2j8P8ANS0+n3uwxY/ENnkk v5www6/5YfTtOsCZtKkguLS3A4vwAKsIkHUgH7IGRgaNuVkgJRIQP5aeddMhZ4p0SzDqizS6gCjf 6qgqVFakZPVYzIvK6eYjs9zbVPL88CSTzR3bR1ZVDK3pDqAvOooB/KMw44pOXLLF8/ec9S0t7hrZ LuWLS7mQUh+EhWFaNU1oCQKAdMzseKUhujHqxA8KfflX5g01Z9Ka7t7WOWy5WryuoMqxl6I+9Tvs dun3nI5cREabpzjMcXUPaPPuiprclqbVoyJoS8VwrKKMm6f7E8iCMwJDZ23Y0zxyiKo/P+xhXlXV Iba0m0mdGF7bTt9YUbIFVxVqj3rXKnoWR6vMLzXNDsbLjDcLMLt3jahYKKcWp/MKjJRmYnZp1Gnh njwz5WD8ntHlfUGuobi3vQFvbNzHKniV6EexFCPY5kkA0R1eLzQOLJKB6H7OjA/N1hd+Y75JLO6M MmnM/wBSp9nmuzMfDfb5fPKcprZ6DsbTcMPEPOXL3ft/U8k19r7Ur/RtN1PTwt7BMy3iKAFkBIoV JrXYbg5WHdMr8sw6n9a1DylpTFfQnV59S4qOCS/vvTRNxUBgKnt2r03EMv7qJ+HyeA7S0/h6ucQe Zv8A029PaNI8lWemF7mYfWbuapluJd2Jp4n8MxckzJhjgIsA1q4vNGm1K2guJYxM6tbwsPhKTD4u BP8AlA5k4jcQ0ZBUiwjXvNFtpOkTWSx/6TdRmIoDQkyAryauwAr3OM8kMe8jTLFgyZdoC/u+bzq+ 1PTbm8j1CW/t7ZXRawo4YOU3DMPEU22/hmqz6ucxwwBA+13uk7Px4jx5CDL7B+tSv/M2lVgW1u5L gx/A5jjLKR1pU03zB8KXc7TxY96BPnPVoLOWPTtOAiWXm1zJ8XA9KcV/icnHHHqWEssq9IS+eDzP cpHJqGoyWtpeTBjL/dxRuwAHJt+IIO2+ESgOQtiY5D9Uq9zP9P8Ayq06sZ1a8e/vphWCEfYO1ftb lgcj48uQ2Zfl48zv72RDRLPToZLe2tIFEbrHxUBeJp1OVE3zbgANgxb6uILmSIis0sjEEmg9qYEq CQXMc11flDFLAy+g/QqYzyUr71GSjIxII5hjOAnExPIin6E+TtTj1zy9pWpxrte20U4p29RA1CfY nOtieICQ6vAziYSMTzBr5MikDpsUFD1k7be2JFIBtQ9Bj9lz8JqzD+mR4U8T4s8vXN09mi6ppzvE F4wO+3EMaqsleqnse3yzVyjRdpGVt61riaRbXUsYS1nsw7xwAskgMooDJ2oCDXBGBKTMBSfXbDzt FoGoTRpJDbiWDVrJkDBZxEJFkCNWqk9/6ZKUDjKQb5se1myjsbSWS1tYbfTriRCtuYwSXG6txoKH iRuN8YykSmOQ4xsf1PR9YsZ9M0ycXGntq1vwXlZxsom4tx5Acj1UHuSDTqMsjvyZyGPJ/RP2fseV Wmv6PpAMEGpxppsCO4jvXEMsFG/u5FfiHHxUDKSpp1x8IyaZxliO4ZpaecdB13TFWzvIJTJG8UPo yJJ++RSycGU7k0NMhPDIFEcgLz/zB5Ystdvru7uJjb6cJFa6a2WkrieNZWjVzUKtGDMaf5I75bA8 Ic3SYJZCTdR+9F21za20a2mngWenWEfp2doBSFUQfsk71779T74CbdvGIiKDBNb1RLme1eIFp+Zr zoFJUbEUwMkDcw6bDb/Ub7TJ73V9WpJpsQcC1Ikf+8Y1rQe1O5yzxZVThT7PwSlxGO58ynGhQaLp g1OO71C3vdZtyY4bCdTPbKAOTBORIqpBBrgMz3tsNJijyiEw1rUpLqx0+xubmO2vbh/TbS44U+qT q3976isACAuwyNlu4RVVs8sstJPlbUhDNqUdzY/WKGNWpNwTdPU4kknp23pmb4sJjfYvPZ9Dnx3w i4+XP4vVLrX9Dl0iQ2Rkj1S2UOt0k781dfFFYAmm1COmU/l7BrdpwaqWDLEyuJBYbN5lt9Plh1Rb 1rkXz/6TIxoWYjcH2NDmDLBIPaw1kDu9A8qeYbPV9dk1OKY2r2yIsSUDAgihVif2qb5UcUg3xzxP V6lb+arC08wlrdyYJ7YpfFq0WdasoJPQ0r9FMyNMLuJdD27jjwxyjnyP6Px5sgt75NMnWK5dra3n 4mTUJxRPUC7qvLxOYkjZJd/hx+HjjHuADBvOyXdxrukjS5qTmNmtnZKULsamtKUpv7YG1lH5aaHe adr16Lqdru4ljieR9+Bb4qcSeoA2J8flmbijeP4vJdty/wAIAqvTz7/7H0G8JLASAAUqSen+e2Ex 3dSJPKPzP0q2bTF1fmok05xM7Bqfu+j19gN/oy7FsWvJvT4582+Z/KL3ll64nvvSkrP9UXkSnE0X kSqmppTJTGM/UN/tc7S6PVTFw2j58vt+fufRHlr8lvKnmHRLDVDY3GmyXVvHLJaiduac1DFGIqKi u9MpOCA5j7S1nV5RIgSsd9AX9icX35BaVFbvLplxLHJGPhDkSDpX9pcj+UxS6fayHaWePUfIfoeI X5PlqDVNLvYl/wBxZZbxoYmfkNiG4qGbcEbds1+XSHxDGFl3WDXROEZMpEb/ABt1T/yv5Z1fzH5e TVoZIh5evYSzW8xP72NwaErT4R8zUeGZGPsyRoyNe7dws/beMWIxJ9+360p0TWJNLjs9Nt75xY+u JrP1qStax1+KNZNiVND16ZgZB6j18+93GH6AeVjl3eTJtR1KOuqz8vU/fM/EePUAHIcLbSV+WtFu fNetRaVA3C9nlDSEDl6UI+J3p7DYe9MyNLp/GyCPTr7nD12qGmxGfXkPe9V86/kbrAsw+h3jXjrC wNrcn0yxXfZ1FK1oACPpzaZuyonfGaPcXRabt2Q2zCx3jn8nqP5B6heL5S/w/q9nJYaz5Yneyv7K ZSrip9WIgd1KtsRsabZm6Wxj4Zc47Ot14HimcTcZbj9P2vd/SNSWb4VFCPnl9OHaz0wrUbka9GA6 A9N8FJt8N3Hm2xtNPhj0m6gvzGpR7Zfi4gCtGWlY9voPhXMCOG+bsuPoHkuvXV5qfCa9lQw8yLaz BYcFPSnTkPnX6MyIwEeTOI72KiW8tz6treLawxFeUAH21ToTxO2xNfbBKAlzZGJJsGlXVfPWu3tr 9Vljtvq8J5LKgdiABQbllr23AyAwRDLwyerC/Mf5heeNQSJxr94kHp+kEg/cmgpUF4wpPQV3yyMA GYxR97FNHm13W72HQtOspPMFxqblpdHnBlVyftHmxJjIHxFhSnU4yj1cgZhjjXTuez+VPKOj+StU uZL7SHsNX1SMCyupJebQOQGe3CkKTQrXb4jQEAitKZTJFNWSAzb4+f8AN6/DvRF95iu7dNWh08Sa lbwFFNwgY8Sw4jlTpxAHUdsrmKpz+zZA4yOoJtJE1mPjHErD90vx82BLN40WtPppkHYMZ1JXv5S8 Us/qRhlMcQCkb9R9rr0xVLAl+0ME9y07QWj/AFUOWlJgU1JWvwjoSaYqzl/IdzFYaldpqEc1v9W+ sWksMjutxVfjBIeobfauKpb5dstD1R4I9QlcahBX1Y7lyUKKKfCT4jbjWoxVktx5EtY7+V4lllsb sfEw+I24VSSTWhoxNB3HuMVZHo/k61fSJkstLt9R1BbiiX1yaLwViPiLcuwqwAwgkcmMoCQoiwrS +RPIGl2txZ+aLi1uJmZy1y0rWjMXHLhFBBIKBQaAKK5PxJNfg4xQqmFLo2gadNO/lu6vbK2Xh9XN 56kqzMwH92gj5qK0ALP9AyJyjrTMYCOVs48v+U9Wi0S/+uPMJ5ryCcyS8AzKsyF2REdyAVLL8Rrk YZRGd+/7k6rSyyYSD3j7w99v5NNEIt9Wtz6F2awtNRlZiNgD+zQZgO7eX3Edtp3maGDTtUma3tY1 9O5nYEISCSnJtuNT2xUmnq/lS50/R5rvX764EFlKgWz9U0ZwtNwOpLMWI2rTNpDH4cAJe8vDa7Od bqT4YsDYV1r9v2MB/MP85vMFgks2g2Z+pcSFnjRZpVr0bdgF+45UMwlKhXvLssfYohASy2T1Efx8 6/a+WfN/5uX2vQwW2oXOrXsMBLNBO6RoWPQlVoCV3pUbZZ4GSQqw5OKek08uKMDf3e6ylHkG0Pnr XrHRdOsJvTLiTUpZSCI4w1PhK7gkbCnfGGlPF6uSdd2xHHgJhYkdhy59/wAH6v8Al3RI9J0e2tUi UCKJQAOwC9Poy6UbeQjKmQpbI6gMnahGMYolJLZfLmlyFvVjhWSUfFz4g77V7V6d8kNurE79Hmv5 k+XG0/yNrth5aSOzVrScxemKIK1eSlKCrVbp3yUgZRIj3JwyjHJEzG1iw/PO11QXVxHYieS0ngiK mdKHcjqAdjX3zneF74C9mSND5gv3aOy1BXQANPIsLM9CKMSq7YY4zLkCWOScYVxSAvv2fbH/ADj7 5CutPsX8xarGW1G/hihhlkjKSC3QluTKehkJ/wCBC5vOz9OccLPM/c8h21rBlyiETcY/aev6vm+o XgSQGOVAwIPuM2FOktRh06GFjIqgSOoDNTem9Pn1OGltEsoHElTUdK99sSFtd6ZO5IYjoB0Bxpbf mJJqGmepdPZCNryZXDwOnwFWJFVII4mtCQf1bZi07YEcmMzapBagmR1cCpQkcmrUVK9D18catnxA MJnvpJ7o3iULhy0oPwxry67DoMJjSYzvkoXls0cUTFoxDNUwvGaHYklSadidxkW4FIHtZfWEPoSy CcitBTcmgoPiOBmJU+6fyn/LDS/IehLqd2kZ1e7hD6lemlUA+IRK5H2V7nud/ADGyS4jQ5OLKfEb Lzf81dY07zRFLaGFY1PKOznVaTsB1PP9kHsOvyyMZcPJ2eHs7iAlMkHy2eFW0y2FhLpmpW6SCYpH HdVpK6BfgWRkpXjx+EkGm/icBkTs7OOKMTfXv7/ekbySaZO0cKevaSGqycayKpP7QGxoe4/DItj0 nygkUdnquvvS05W8kdswdQJOFGZxyHUU264qmuk6TZ33l+7ubtJtMS7maS5uXkIjl9RaBlQL07U2 xVLdKVtI068hIa8060Q3aWrxlbhImNQGJIABoTiqD1bUfKFrdS63rzRRWElpGkZlQ0ToFDcR8R3o CDkoxMjQYymIC5GgyrS9Q0S48nw+a4dXFl5cmh5vKoeSUgP6XDcAK4K8ab74yiYmjzRCcZxEomwU oH5kvqph0byDYjTbCACKfVrhVVo6ip9CIgjY92r3275GRERZbceOUzQ5J1a6JpsVtHcand8dXkY3 Dajy5TPLXaR3cVbcDrtTbKY55A+Xc5eXQY8kQOUhuD1B7/2dUv13ULfV5NO+r2ySS26MlyygqrqD 8RWu5BpUb7ZTKr25ORDi4RxVfkyryxq8mpT2Giagwa3tjzS4RjzmVq8eVCNqGpyLN6ReeavLcFv9 Rlt21KGOJkV2PUqSOJruN++RS8kje1utct5I7ECzM7zegSSkSVoiGvau/wDZmVpZQgTOXTkPN1fa mLNniMOPYS+o90R+vu970dVg1ER/pd45Wl5+hLXjHBH4cex28fnleXNLIbLkaLQ4tLHhgN+p6liW vafFpksaR8jYsym6K0Pwk1Xi3XfKw5jzu70HT9e1GO0tNHgv57h/StAY/iU89y7CldvwzIwRlOXD E04euz4sGI5Ji6936X2X+Un5Uab5S0uOU6fDFeOecxjQJyY9x7DoM24HDGvwXz3Uag58hmdr5DoB 3PchY+pVXJCoPhiBI38dvDtg8O2vjpebQRlml4OgSvIkqQB49jjwVzRx3ybjjhnkkeMLIQ2wcEAg fDsSpriACdkEkB5N+dupWvl7yD5l1S6lhskg06f09+K+o6lEBag3LsABTrkzDhBl3BOH95ljDvIf nD+Tf5YeYfzT8wu2ks1jpdkQusay4rHEDQ8Ix+3IR0A+Zpmq0+kOY9w73s+0e0oaOPfM8h+k+X3v 1a8k/ll5d8k6VBZaZZqAgBubmQhpp27vJJ3NenbsKZu8eKOMVEbPD6jUz1EzLIbJ+z3PRobWKNaw H04j9oLtuOg6ZZV7uPdKiU4sS1VWtFJ3r1piFLlR34sACjCtDUHttUe2NEraoYvs0SpGyjYGh696 HDwo4lMQuByBIqSOJpvvjwp4nwfD+TPlGK6huQupzWzRCb057hUjYgVoxVFYD2zFOWRFO1jiiDal qv5ceSru1kuX0z6kkyF4JYbiX1AEB+IFiymtO4yAkRybTES5vOdQ8k+X9CWKNGkuY7krJJDI3KQ8 QSoHADrvXAZEtkYgckgvtPFuolWzgsbCUlD6lW9OvccqmpA7ZFtBSPy3qGnW3mG0t72IRQxSchcy 8QpkNAhav2QvWvtgIsMMpPDQfUP5p+cY9M0ey0/TOLNeQrPfSO3wrbLtvXrzINB7ZjkcIcjs/D4s +I8o/e+WdMuE124vZ7tfQjQcreIk0/2PbbauVO/Y15hliaciLl9qICu1fTO/EdO/fFWVx+TzrumX Gqywy6LHYWwNm7MytLJTkxAYbqw6AYqwuTTtU0CXQp9Xs1l0lpFuDEjB4JFk+EjfZGoKkdD44q9J l8yah5qe80ryxp8Z0yGJre4kumEaRHY1CqQa06CuKqkvlnzLfek2qaopt1hANtbKYVk4jdJTvyH6 8VWXHkm3ayu4ltoD68Usltayj1P9ISMlFUNsOg/z2yUasXya8pkIEx+qjXv6PONL/L25sIns7G8m udKluWuW0eSVo4klIoxSJSsddqUoKZsNRpzPeJ3/AB1ee7P7XjhPBmjtfTp/m/q+SY2/l/WdG1WW Qafc2tvIQ8d0sBaFWP8AMVHHrXvmryYMg5h6vT9p6Sf0zA9+330ylboa3cJZC2DfUTwnmhZSZK9e IpSlf15jEEc3ZRkJiwbZRqWsQWcCWFnCl3NBH6ExK/YBA5Dah7dsjTIsNtpHFykJcrcRMXtpQaVr 9pQR94wMWZXmoc7GC2SKOseySAfFIW7k99+5wJTnTLW3b1JpZHjSAIhY7AlBuSab98QLQSALKcvK l2LeLQ4/0zKj0nhtv3sfT9p1JUfInMmOizS/hPx2+91uXtnR4+eQfD1f7m0ZZfln5t8x3qi8s3sb aU1ZXNeIrtxVaj7yMysfZkr9ZoeTqtV7T4gKwxMj3nYfr+59KeRvyj0XyxGkjxK95QepNJ8TsT4t 7+A2zaQhHGOGIoPJajVZdRLjyEk/YPcOj1o2HABY41pyp06Dr0+jAcbWJqxT0mRJFosrBUI3oT2N O1cJFc2N2qm0DALx4hTRnIqPbrkuBHGrLZ+kFK8pTSnxAGg60rkhjpiZ2+GP+chfKHnz88fNmlfl L5ftrnQ/J1jLDqf5gecZonFv6ZPKCztmaizSftkLsp48iKEYJgyPDW3UubpZxwQ8YkGXKMevmT3f pfXP5cflv5f/AC48q6f5a8u6cLXTdLiCLy3eViByllc7szncnLIwAFAbODlzSyz4pGyWeLaueMYX ZNye9KbEV2Hh3OPAWHEilijRTRWX4dySST9+ToBjZK70ULgrHuN2p1NRjwo4mhb/AAmigMa0B6+9 cPCvEuMZXjUU2+z7Y0trPToSxA3oB3ONLb5RvtUt00q9ubqVYhAZIpmU0YSJsOCHcgmmax3ryG98 w6zq1tBZ6fb/AFKCaAxzzvReQQAFYz0qBU++LIFLH8vJpkTQxuk1xcyK9pM4rJHuKHr4V3A3wMgw PWNMvNb1BYIPXnvZSRCkFZCdqV4ICCD3NMICZTEdyi4vy582eW0t/MXmLy6Z7azUSSof3kYWOrUl ArReOxofpIwkONLUGWwYh5r1nV/NOpXsKxc7GeUSvbIivJAqj+7VhT7Kj6euYM5WXqtJg8HGI9ev vR9iPL9tptk/6QaBowaRTGoKVJao2NT3yDkvPNSe6lkj1W3sx9UtJAi3qqSjSBgymh69ACOnjir6 Jszqd3ZMNX1Cy1S1dI6iJBVCAGICozLUVoMVYd550611LWfLmjTOLjT/AFpbm906MEEqiEciFAqK 0riryjVbG40nzHfr5YkFmLW3WbgJKh0qOUTL0I5UHE/firMdL8xeYvNNzc6RHd23l64WJUvklb98 9erQqwAFOh/DFWSnybrEj2s0nmu4mmjLqF24KGI5cSACTVQcVQ8PlrWdNaR4dUjnWFxwjmTafmeT EyA8uQJO5B2pmRh1Bx7cw63Xdm49SL5S7/1sji/N3y/5LlubHzFdW73NoQJbBCJZiCoZSsaVYhga g0+dM2IMJR4gdnl5aTPDL4Rjv9ld9pHq/wCe3lrzLCItB8o26M2y3eoFQ48SI0/5rzAy6vh2Av3v Q6LsCUvVOdf1efz/AGFgcE9wbqSVgy+r8XFAQhLDtx2zX5Mxnzr4APTabRwwfSZH3yJ+y6+xGzTW 9EKgxSKVZT4FevhtlDlsztDBqNv9ZjAV4AZDGK0SRBUjwoTuN98sGCco8QBpx563DDIMcpgSPIWn WjTS30C28UbI4r+11PvTKXJZxo9nf6ZcRX8FzLb3IFJkQCrb9SpqGoPHL8WpyYvpO3d0cDV9m6fV f3kRffyPzej6T+fNjpOrRaXrNp61kp9N9bt1qiSd0ZO/EH4mTv0GbTD2jCZAmKPf0eV1vs1kxgyw niHd1/afk+ndFvtN1+0ttR026ju7SZeSSRMGVvkR4U6HNkICVEGw8zMygTGQII72RCFFBLMANhv2 OWcNNXEoz2ZkaMqxHAniBuC1RvkZY7THJSollVfsgL3Hc09/owjGgzRa2nRd+NaMC3Y/rywQYGan HY28bVjj6Gh5EkfIVr1w8KLRbQRxLxVOKgVCitO2ExAQJWiGhkAoqAAjbbp9GSoseILRCNw9KA9c HD3p4kHcnhLAEBCNIA7EEbENSn3ZCexDOO4KuYywDAElP2XHX/ayVMbdHG7MHlIqTsAOn04gd6kj oqfVVdubN8KmqoOhI3qflh4LRxvzy/w1d6zZfpW51VLm7nIlEZX92snQI244/QBmneiTGS8tpNKu LLV4AHtmRrj0wAiK3wiT1AQOoqTtiqSppcOrT6TH9cjNtclUkkkLB1bjz5MSdqj7PiT9GSjG2OTJ wC30p5U8j6JocQeyiieVlrNJTk8hG9Wc0J+Q2HhkuEuGcl82J/nVrDaN5UjgjjuJJdauF0+C3soz NcSMySTenFEASzSCLjTwJyrJdbczs52gjE5bl9Mdz8P2vlfSvyT/ADo19GvoLPQ/J6SqQsWoTTXd 8A+9ZBbqIlJ8AxwR0sep+Tn5e296hH5sT81eUPN/5f8AraR5ytrHU7y/hKaVqtijx2xjakbBQ7Fu aVFRTvlGbFwHbk7DQa0amJ/nDn+LKJ1DSbTSfI6/phUitbSForWxWoc3M3FgVKkk/EDscodgr+RN N0vVdDgvIbZtP1KAm3lvImMO0RozcQxqzKQDUVxVmQsIrmS0vb2b0P0bzTT5LagY8xxNSwJPIUNM VYHq9hDbeeNNu5bX0Yr6wmQ1AkMjR0qSqDZqeOKsc846ZYi30+SBTbXS3yquoAcZUSQgFmIIIptQ HwxVVtfMOoaPN+j/ADUstzYaeHa11SNCTIVB4h6Hw/zpirN4dU806zDbyWWkw6dY3aMUuLiZWLod 1PBBsaDxxV8o/mzZ2EH5pepHBJZzvBbz6rEJC6vOyneIncIY+IIPevQZmQyEYqcCWnjPUCfKq+LI dMsrV1j9KIRoi/FQVJPv4ZrJEkvSQiANno1hbgwhlSgBARt6DbwGVtnJNjCzBFiMkty4I48jxFRS pr4YFfSv5aaWmkeVLPXri2F1aw3UkXmVWUORbSNxMy13/dfCxH8nLvTOi0xrFDJ5UfdfP4fdb5z2 nDj1eXAeZPFH+sQDw/5w2/rCL0bV/wAkgxbWPJc6WSzfE9kw5wVbccCN0Hfbbwpg1HZkMhsek/Yu g9pc+mHBMccelmiPjvfx+bHW/Kj8yryKWCeaztI5kMZkt0lMm/Wrt0qOwA+eY47F/p/Z+12B9sR0 xf7L9ia6N/zjM7tE+sX7TLUNJHGoiWlKU2qw7dDXMrH2Rhid7P3fj4utz+1WryAiAjH3bn7dvsfU PlXypbeWtPtdNsFWK3hACxAAcQP65sIwqgNg8/kymZMpGyygWSfGaFzI1eO37Ph7ZLwww4yva2kC mPZCu4NPv/Xh4eiOJc1tIyBRRWP7K7iuExJC8W6mbaVkCEBfTCsQo6n55HgKeINypJHG8kMQaRDU fEKFT1I260xII5IBBO7aQyF1eR0JUECMAkVHvsScRE9VMu5UX1GKMKVGzVNdj1O+S3Rs2oLg0oVB o6jv/mMeaqc8So9u8r8Eik58m6VAoKmlB174JRqiUxN3SsEBRmV1CsKl1oajxw0xtQjVmPHkwBJZ VNa7fP54AGRKuyGgaj1rtQ/ryVMbfAN/qXlv60J7adY3t2Mz+m9EmINBzX25HtmjemSC8l03zHFf QRoZLeSFmuOAaNSQu7BxvsdiPAYQaUi0jWaUwILTk8B9MPIxp6nFACCWNTttT2wKzry/5+13y/GF jRbqyhkCvYTE80AoG9OSuyjrvWnTLY5a5tE9MJGxs+lNG1vSfMdjbalaXENxUckViKq1CCp/lYVo ctMTVhwro0WWraqkYCihoNj448CON86/85E2FmvlvRNUuwALHVImFwVDsiujjZSRWpVajwzH1MfR bt+xslaiu8H9f6HyhBd6X5r84SzLIb7RNDhjZIC3GM3bVrIIzQniBT2zWvWsUtYbK6846/ZWur3V lLdkT6e1k1AshNJEZQSjVHc4qyRbTzDpt3pdjq2qJNo73khjvlAWcMAWRZKUpyIoOvhXFWK+ZNW0 1NY1bT7plfzDbss0aNKyraJIv7tCQaBnFGYKdxv4jDSLF0s1qxj1jQ5ry3V/rVtGs5hRmIV0BPwj ep28MCWW6FNb63pVpeyMrmW3pcWbgMaKvCQgbe+36sVY4YtS0C2+taPdST6IbiYSaNLsyqDxrC29 CTuBiryn859H+ux6J5y0yCVrqLjp2twupEsQkcm2kdd/22KH3K5k4PV6XFzngPH06pl+Wuk69r0h 0q10yee+VU9aLjQKWXkvMtQCoNd8hPQZTPhAbsfbulhhE5T2PLvNbbD9PJ9WP+TGqaL5N1PXNdm4 PZ24ktrOMGgPIKCxNK9f9vMuGhGnhKZNyANdwdJm7eOvzwwQBjjMgD3yF8jXIeQ597AdM09klikZ fUZv7wv2p03zRPdU+6vyd8rlPKDxXlv+6vechjdd+MpY8W/2JGddpsJx4oxl3bvkPaerGfVZMsDs Tsfdy+5knk5pPL19c+UdRlPo2J56PM5JMtoT+7Wu5rF9k+1MOKPCTjPTl5x/Zy+XejVnxIjURH1b S8p9fhL6h8R0ewmBmjAiqi/DwHSoPWlfnl5iejgCQ6phHEWMYZTRm41PXoT0HyywRayVVrZSSDyB Fdx2w8COJTaP0fSaNTUVDMBUnlSpNSN9sBFclu1NhzHMFkNCADt1FMB3SDSvHbuoA5fCDUeND0H0 ZIRKDIKnoGnxAkNuWBofuw8KOJTdYlZVClpHNOPah+1X6MBASCVqChIVgwj+0zD4t9t/uwBSVOQS xguhUkdEb9VfbAbCRRVxFxQdQ9BUE13yXDsi1hXkqE/EGBpU0oPHFbWrCkZdwq0J2AAAJ+WDhpPF assfAnkeS0qoPbJAUxJt3oqaESVA3PSgPXHhXifmLfDSY73U1htYTDdPW2ZULBI9uhrQb1J/pnPv VLWsxWERyNbW6bLcQ1oKgAGnRT3xVVljtTOqmJIJBIecqU9JwprxYGlCfEH54qvhs0kuSyyRsiJt H9gKR+wwNencnY4pQ15JqWgztqXlvVXtZ7U/v4YHHAqwqAVY0ahPRhkozMeTGeOMxuHoPk7/AJyL kgaGz80WBWOoU6naAyKtTSrxHfbvxP0ZkwzjkdnCyaKQ3ibZv+eS23mP8otR1vTZlvba0W3v0kh+ INFHKObildlVix+WR1GO8RIbeys3Dqog7cx9j4B8sTypa661xcixluZpHe+iQ82BVWJULsar147j rmme4b1XVbcapo+q2trLbaToTrb3eo27CMFZtm9IDc03G/jir2GJ9J1W0aO3mGoNyinSsgZgyMpV g7eG1aDFVDSf+cfV8+jX/MWjalPYeYdUna5V5m527ldokcUJX4QBUfdm4lo4zxRrnX37vIDtqeHU 5OIXHiI89ttvl/Y8yvrXzD5b1W78v+YtNuNGmtWWGWykADNsBUEFlkR6EqVJzVTxygak9TgzwzwE 4GwifLRjtLzUI7S3RtO1OrR3UjqCCoo8da/Cd6g9/HINyHk816DDbx6THc+vGk7HnJFIqxUbl9oA 1YHoe464qnTy6d5ijaS11WEai0YjdQyHmh34yA9Q1KVp7jJRkYmxzDDJjjkiYyFg83r/AOU+tW9j ewNJapb3MLBZ0I5b9AwO1QabHxzptNm8eF9er5z2jojo8xgfp5g+X7Or7U836bYecfy+1W3kcCOW 1aUSpyHB4x6iMaGpoygkd8cuETiYy5Fho9VLBmhkhzB/A/Q+P/y0/LzzZ5p1GyvtR0oad5dPCaOK YH61OK1Uso+FF6HfqM0/Z/Z0hIZJcuYH4+b2Pb/tDCUJ6fFuTsT0HK67+5+h2l6bDptlFaW6AiJF FB0qM31PBvOvzQ8q6lqunpq3luf6t5j0NhcWDig5ON3hIPVXA75TqMRmLh9cdx+r3FztBqoYZGGU XintL9Eh5xO4+SP/ACx8+2/m/TGEym31uwIg1XS3qHhmXYqQd6H9k/xqMs0+YZo8Q2I5jqD3NOv0 ctJk4Cbid4yHKUehH6XrXpsrBggZgBxofEdd8vpwrCkyuzD4ipU1cU2PtgIsptuRSCtebA9Au4P9 MSFBWCLcs5qtaggEj8MHD3p4kQoLlTEwaNuvSgFO/wDDJe5jy5tFGISjE+lXmOlfbGltu34Tx+px arVNOwFaU/DGNEWstjTRgRCrV48iT161PbHhAXitY6LHVmHFdqmhJrgIpINtop4hYgwCk0Zht91R X5YQO5BPeoQQAEMx5UFNtj+GQjFlKSJ9FFcU2C/ryfCLY8S4RfGWqfi3IA64RHdba4hV5igBalDU VPLenvjVLb81b7QtXthaLcaJeWKQqvqzPbOkQU7sAeNPvOaGWnyR5xL0sdVilykEqmgvZZGntaRT WrUlicAF4iNthsRSgp4UylyE/wDLnl6XzPqFrpYMVlezsxnSQF04qpYOgB36EbNl2DEMkqJpx9Tm OGPEBb1+b/nHnUL4GOXXpLeCdla7FtCI5XQCnAO0jUBFO2+Zn5KPeXXntKXcGcaR+QXkjS7aOGbT RflFDPLeEys7En9k0QHrWgy4YIR6OPLVZJH6vk67/If8v7xyf0FBHG1Pih5w0qO3psuROKB6BkNT kH8RZJof5b6BoGhXvlmytGl0i69ZJNOlleaOlytJUHqliFYVJA2qSe5xGMDatkSzyMuInfvfIPnX /nFrW9F8saxq+jeaZbnUdNunu7SJ4RvZISyW7KoHNgux6Bu1MwT2eBGXU9PJ30PaGcssL2jyl595 +HN8y3cdzqemXGkxX1umn2lrxaUbPI6bFjVaqqtvQDfNQ9gyHynrUV95dWS5gb6xpitbG8WGpM8Z UqIQBU8gQQtNyRkoC5AAW15pCMCSaoc+5+gf5PeXZdP0eGZxwSRBy7mtOmdRMbvmEJdTzZR+Zf5R +W/zL0kWGsWjW1+ik6dq0IC3Vo5BFVam4Nd1O30gEU5dPHKKkP2OVpNdk0s+KB946F+elz+RH5qe WfO2neT47GW50XWbo26ebI4DcWYikBBlk4UMTqgP2yPi6Ejc6k6CccgieR6vXR7cwzwHIPqA+k87 /S9ouf8AnCLTpLJ5LTzfqFrezBFklnginjfk3QKpiYD4unI5lz7MhWxLp8ftLmv1RifdY/SXinnD /nFf80PJokvrSyt/Nen2zl1udNVmuY1BNGa2ej1of2OfzGYuXs3LDcbj8dHbaX2g0+U1L0Hz5fP9 dPLPK/m3UdG1m3GpyTNa+uYbr1ACw5N8RFBUFevH27ZXo9QcGTfkdj+PJyO1tCNbgqP1DeJ/R8f1 P1N/Ks3xs2sb+AzWzKCHJopBFdq9djnTSD5yDu9vg020sFYwxFFqPUCgnqaE9D0yNUyu0zjgCvTi T/JT9WSEWJmvWzQyyhkLiVVL1HU79MIjRYmVh4d5x8iX2l60PN/lSkOpp8F9bR/Al3F1KP1HIU+E 0zFz4JCXiY/q6j+cO739xdppNZjlj/L5/wC75g8zA9474n+KPxG71Hyxr6avpNrMsbpcL8Ekcm0i uNmV9tipG+ZMMglAEft+Lr8+CWLIYyIPmORHQjyLIELknlRTWrHYnCC1lFBGYoFI4V5EGnTtk6Y2 tEbI1EZTH4AdqdCcFUm7WnmHQ8RRwQx6GpoVI2+jFbVkSoYMQQDv/TCAglqOPjG9CAKvWhIruenh iBspluh/RbkjgF+JFA25HyLV9sjwsuJVk+JuRBpwBJ6Ek12+gDfCUBQU1eoYlGp8dTtUZEFLSoPU OxkZDQKD8NSKn8Ma3Ta+SKSQ83ACCnJVY1HvXCQSgSAVIgy0JZiAK7kV+84QglaeEzAskhWF+Sqt KVFCCfljzXkgJdItboJ+4jKsKMKUIP8AXemNWuwYXqn5W+U9SDyXGmQLJJ/eyBeDn/WdeJ/HITxR lzAbIZpw+kkKuh/lv5a0SWG5sNPiS4t1pDPu7oDUHizliNj2wRxQjuAGU885bSkSzYQs7MQCkatt X2XrTDw2w4qWTQlkZdqbVf5b7YyikSUfQk5KEAVV2b7iff2yPCU8QWJb+k5bY8h8XQ037YBCkmVr p7YTJJFQMrg1XtUZIxRxPy0/Pv8ALK5/LTXtQ8y6dAR5V165L294qkCynIdmgcEcePUoQN1+E9N+ e12lMJGY+k/Y932L2mM8Bil9cR8x+vv+bzvyDG1x5qht4Lj1rK89PUlRQio5Zaciq9ixBX5ZLsqN 5r7gWPtJk4dLXfID7z+h+r/kyx+raJYMqhECioHWlM30o728NGW1M04K4r2Tv/lHen3YatbpT+qR 0WiAkbr/AKuIjSmSNSFGXiwHiwPTagyYiCwMqXizj48WVmSlU+I7ewNcIiAgyt4P+Y//ADjt+X35 lA399p/6M18bprtiFjnJpxBlUjhLSg+0K02BGYufR48w3G/e7HR9rZ9Iagbj3Hl+z4PVPL/l9tKs LK3uXjubmzhSKW5WL0lmZF4l+HJ+NetKmmZEQQN3AnIGRIFBkrCQJ0qa/E6nuTTaowkbMRzVoDyP IEtx+FKdKdslFjJFBW+JkkXkyj4epoKncD55MDuY2h5VVhw4q5dWJQ9fYnInZIS8WsNtPyjiFCPj ArXkBtXrsciebIcky4KSBQk0+1xJ3PuBSuSoMbX8XFQw+ACgkHQgdj4YaRYbBDqVQKGHVK9R1GPN eSgqu5jZSCCKMO4PXb3yNWysBW+zHT7PjWtfpOS5Bj1aUcgCD9kV2Jpv+vEBJLSo0jMwqiBtq+w6 0wVa3TpUZkZflV/lvtiRagqfpyhlVAEVdm+4npvv0wUU2Go4vSctUHkPi6bb9sRGlMrRDDlVRQqQ ar8skQxtDRMrtJ8TBVPwVVqDs1DQD5ZEG2R2VdllFAoVxum9KA79fY9sPVHRRMpE8gXiyKtHp1Em +wPiVp1wXumtkR6gKvvzBPEBtqU2NclaKQ8kcxkRoWUVYfaFCoANfwyBBvZIIrdcyAyjmCKHcDoT 3wkbqDsoshI9OlSwrwJB2B9siyBbjg3r4gqT1ofnhAQZLhbijEgAp0H9mPCvEsFuslWIbiT0BoDT vg4bTxU8r/OHyLaeevy+83eXJbYu19p8htQBQfWYB6ts1faRR9HXKc2EZISj3j+xytHqTgywyXyP 2dfsflz/AM442c/mDXLq7+ptEdPgNsV3YgrMnGp8RUj/ADGansePrkfJ6n2pn+5gO+X6P2v160G1 ktdFswoHNkAXkTQbdwN+2byXk8ZEptKtwkHKYQJCB0j5K9T4cgwyMuKt6pkCL2u0THA0jxyBGCBG 2r3Yj37U3yQje7EyrZEiORDx4AAirD2yVEMbtso7IoilMUL/ABsyU5EeAJ8cNXy5I9/NQ9MoFSQk 0FFZTQmh7jI1TK1RXLAUUOT3pvUeINMIRTTibg8ahWbjs1eJ8d+vU4m+SgjmujkQUbmtDQAggVrQ cR4/RiCggqqgIXdBurb9qjvTJIcZE9Rni+ElaFiOv30xsXstbbtRBy7FiF+Kq+PQVxF2pVXlooCg hd1Yn2wkoAXA1Sh2G7Fd+/QYeiqfDmqqVrwADMwrvTt9+CrTdIX1Ss8gXi0aij06iTfYHxK065Di 3ZVsixKCr78wTxAbalNjXJ8TClKRZjIjRMoqw+0KFQAa/hkSDezIEVuqEVlHOoodwOhPfJdWPRY1 SPT7sK8SR0B9sCV8Ue/IdwQT1ofniApK8QijEgAp9kf2YeFFrViWSrkHiT0GwNO+NWt0oGGP1JBw KJQF6CgPHpXI8ItlZpVMaMFqGoo2JFemGgi1b0ookSPgqKnwJGgoAfEfIZKgBTGyd3LEkfJqFfiq qDxNe2IFLdrWCiRCf7z9kfsnuTgPNIOy2MOQzMTyZ6Ienwj2xASS1DG325RydxyY7beA+jEDvUnu VPTK8aKTy+7x740i2l9USPzUFCfl09sRdqapCtPEWpDAzsKj7BSniSzCn3VyBkOgZCJ6lAzWXqBm MrOzL8adUIHYDt88iIb2z4tqfPH5J/8AOPOmflne+d9Slk+t3HmbWpbmyjXkUt7COR/qsW/VyHLO R7DtlOk0ow8R7z9nRz+0u0TqhjHSMQPj1L6TaNhSKCirGKx0ANTts1en0Zkys8nWigrJbwqfUSNO RB4MqgGvttXCIAboMjybVEPFh8DH43Xtv3I8cQFJVHch25KOAXkCDSg96kAYSd0AKELSuSyJyi9h 8O/8pP47UyMSSylSsYzyqTXkeNafTTDSLWmJuRanKpFF6Cp237/RjS2omJ+VQyyBv7ytaUp0AyNJ tdHHboWlBVnYjm/2q+Cjvt7YQAN1JJ2VeaOStGWSMDkg3NGrTbv0w3aKpREiiiTwmGhIQsahh8x3 PhgvvCa7lRGQSKikcWHwspBA8AaYQd0Hkt9EgoTKQxPwnt08BsMFLavGtBSN6sTu3XbvQkHfJAdy Ce9Dy/GBbJuzfbUknih2JqengMie5kO9FelFEiR8FRU+BI0FAD4j5DJ0AKYWTu5Ykj5NQr8VVQeJ r2xApbta3ESLXeQ/ZH7J7k4DzSOToy5DMxIZnoh/yR7YhS3CrfakozuOTHbbwH0YYjvUnuVeJXj8 BPLt28e+Fi0rSiR+agoT406e2IJtJApCtcxFqQ27OwqPslKeJLMKfdXIGY6BkInqUMLY+qJfVZmI +NeqEew7U8chw73bLi2pHrQoxIO3TfbLQwf/2Q== ------=_001_NextPart500601116744_=---- Content-Type: image/jpeg; name="t_bg(07-12-14-33-26).jpg" Content-Transfer-Encoding: base64 Content-ID: <_Foxmail.2@3887B4A5-2F5B-44C8-97B2-075F919B4D5E> /9j/4AAQSkZJRgABAgAAZABkAAD/7AARRHVja3kAAQAEAAAAMgAA/+4ADkFkb2JlAGTAAAAAAf/b AIQACAYGBgYGCAYGCAwIBwgMDgoICAoOEA0NDg0NEBEMDg0NDgwRDxITFBMSDxgYGhoYGCMiIiIj JycnJycnJycnJwEJCAgJCgkLCQkLDgsNCw4RDg4ODhETDQ0ODQ0TGBEPDw8PERgWFxQUFBcWGhoY GBoaISEgISEnJycnJycnJycn/8AAEQgAeADIAwEiAAIRAQMRAf/EAaIAAAAHAQEBAQEAAAAAAAAA AAQFAwIGAQAHCAkKCwEAAgIDAQEBAQEAAAAAAAAAAQACAwQFBgcICQoLEAACAQMDAgQCBgcDBAIG AnMBAgMRBAAFIRIxQVEGE2EicYEUMpGhBxWxQiPBUtHhMxZi8CRygvElQzRTkqKyY3PCNUQnk6Oz NhdUZHTD0uIIJoMJChgZhJRFRqS0VtNVKBry4/PE1OT0ZXWFlaW1xdXl9WZ2hpamtsbW5vY3R1dn d4eXp7fH1+f3OEhYaHiImKi4yNjo+Ck5SVlpeYmZqbnJ2en5KjpKWmp6ipqqusra6voRAAICAQID BQUEBQYECAMDbQEAAhEDBCESMUEFURNhIgZxgZEyobHwFMHR4SNCFVJicvEzJDRDghaSUyWiY7LC B3PSNeJEgxdUkwgJChgZJjZFGidkdFU38qOzwygp0+PzhJSktMTU5PRldYWVpbXF1eX1RlZmdoaW prbG1ub2R1dnd4eXp7fH1+f3OEhYaHiImKi4yNjo+DlJWWl5iZmpucnZ6fkqOkpaanqKmqq6ytrq +v/aAAwDAQACEQMRAD8A6aRUbVxtPH78UpmpXNZTsrWAEH2y6Y+mURXbGltaFoKZgtB74+hIp0yq U67Y0trads3EdMcQcoLU/a2xVrifHfMBvTffvjqA++WAMaW1hX6MsKdq46h+jMBuKmp8DhpbW8cq gI9u9cUAOURUgHp4Y0i1goRUePfLIHjjivfrmCg9qV3xpNrKVFMoFScVp45uJ6DpjS2plfDL6DHU I9x4ZioxpbWADrm+ePod81KdsFLa3jXv8soqDj6ZiDTGltZmx1CPl2GbFV9K7fjlU/DpihFO+bjv 4UyVMbUxViT2Gw/jlhTvjwu9B33xwXGltSIYUpvmCk7t9wxSnhl0w0tqVBllRXfH8cxXffGkWsC5 RG1eldsUC0yqVPTp0xpbW0I+jrllR1p9+Wyk7dvAZZU7A40tqVCPsj6T0x1Bjylen4ZTKafdgpNt ccoDucUC7dfllcajbfDSLW0365VO64+hG4pTKIpuB92NLa0g7+PbMKE08MUoa5QSjGntjS2sK9x1 zUPbrjiCaj8MvoAB40xpbWU36ZiCO1cUIyqE7/TjS2pca9DmxWlPlmwUm156ZYGPIp9OWBv88nTC 1gAO/hmI6Y6lMxWorhpbU+NRtl8SP64+hNabV746lemNLakV98zKaU6e+KU8euXTw3xpFqVCBvv+ GVTevji1BmKiv440tqDCjKSfo+jHUr8u2OpU7CuOCgDb54KTazjmoMfRqVAr4DKUHcEUphpbWBR2 AzACnTHlOWx2HWnjlcKEVoR77HBS2sIApuB4VyvAD4vEjHfA7bUNBQV/rl+nWhoFp4d8aW1o3J26 bZdAeh3xQKK0Ipm49xjS2pEb0HXLp2IxSgO4NPHKHU77e+NLawLmptjwCdxl8fbDS2p0r1+7Nj+J 37UzY0trwhf4j9AH68vga7d8XKGnhlUHyyfCw4lErtQZdD1pivGoplccaW1KlTQD6csL7Yoqmpyu G2CltT41O4zKlBigWhy+NDXGltRCrXw9ssgGmPK79PmccUFQaY0tqXpAH4dssrTr3OK8a/LG0rTp t1w0tre/hlMnUgA4oUr9++XQDGkWon4BU9PbMV2Ip9OKOvIbHvXbKCf24KTawR03G+WV9sUCeH3V zcQOmGltTAr0H043iTsB13xYqB0FK+GWFNBQY0tqIUDsa+Jy+IPQb4px8cbJ8I+HxG/0jBS2t49d s3GgGPpUf1zAEmp6eGGltZTvmxQx8u+3682NLaoqt1798vjtWmOp+IyhswU9hWuTphawofpptl0P j4YqQN8aBXvX3xpbW0B5AbkZipGP4D5dsriOvj740i1lCK41qgVrvTwxWlKAZqH6cFJtTEYryryP iTXL47GmO4U/jtjigI67YaW1On3ZigoP4Y4qQKDb+v05YBpv8sFLamFI2XxyygJJ8dsUKitMaV4i o6g1rjS2t4kbdK9M3E0xx333FMyoaY0tqfBqcTtmKmmw3ptv3xbjlEKPc9hjS2ohWahYge39uO3P TqDj6UNB233zEHqPuxpbWbmtO2U6fDv02xRR8NTsT1zU2+nGltaKHcEb9xjQN6V2OKcQDX78sL37 HtjS2spt3zY/iD3+ebDS2vFe/XL47g+xyzX5eObfiNjkmKxx1/HwzBdt+mPZOwyiCFNOw64KW3cT 2zUOwxyhqUOYA02wotZx7HevhlEU2x9D1pXx7ZVABUV6Vpim2u23hlg1+E7HqRlgDYjp2zcPjB70 xVxWu/fKodjT3plty3p/bmBATxP44oWNU+xzEbV3+jLqSd8dQkbd8CVPj3PTHdfsn2pjipB2OY12 P3/LGltaQTtXeuZKNXbptTHgdRmC7mmGkWsKAb9MxFN8srX39j/blnen01xTawf5OUF+KpPf5Y6u +2am/j3wK7iNs3HeuWVY9gAO2Wop44VW06n9ebLajVUg09s2Kr2B2PTLqD8u+UelcbWTjU8QvfqD +NcKF1PD6MsUPXGKOQUgGg3/AAx9CO3XEK4KB06fPKFN/HL3I+E0r1ONoR1NR498UNnfplGtCcwP brl/F061+jFLSmp+WP71B38MTU0G5G3XHU3JHXEK49vE41q7V+nHEgkEdcwqTv7Yq1QEDbLoRt28 ccTTpmHT54oaFDsNjjaE9KbHcY6lRSnvvjSaMAKbfa/hild0Byhvlhuvy6ZTBj9mle2KHUJO3Tau YgkU/HLPav4ZR8PHpirVDsBm40avfLUb/LHca9caTbXyxgI5U7D274+nLKKjlQCniRirjsQR8s2a gIp2zYq5q9B/bXMFHUgV77d82bFDqA+xxxJqPDNmxVYCSaruO+OIPXNmxVoqev4ZRBrUUr4dhmzY q4Kla7V/VjqgmnQ9R8s2bFVtabMtB2OXUAinQ/hmzYpcV7k98sDwO/jmzYoaY02H2j0BywqotKAD 9ebNirfEAk9szU2rmzYVcKkkn6MwBJqd99vlmzYq370zVbl02zZsVWl1rQKSfCn8emMKliGqa+Hb NmwHzSPJUH6s2bNhQ//Z ------=_001_NextPart500601116744_=---- Content-Type: image/jpeg; name="bg(07-12-14-33-26).jpg" Content-Transfer-Encoding: base64 Content-ID: <_Foxmail.3@82A01916-F808-4C71-BB43-0CA8E47E85FD> /9j/4AAQSkZJRgABAgAAZABkAAD/7AARRHVja3kAAQAEAAAAMgAA/+4ADkFkb2JlAGTAAAAAAf/b AIQACAYGBgYGCAYGCAwIBwgMDgoICAoOEA0NDg0NEBEMDg0NDgwRDxITFBMSDxgYGhoYGCMiIiIj JycnJycnJycnJwEJCAgJCgkLCQkLDgsNCw4RDg4ODhETDQ0ODQ0TGBEPDw8PERgWFxQUFBcWGhoY GBoaISEgISEnJycnJycnJycn/8AAEQgAyADIAwEiAAIRAQMRAf/EAaIAAAAHAQEBAQEAAAAAAAAA AAQFAwIGAQAHCAkKCwEAAgIDAQEBAQEAAAAAAAAAAQACAwQFBgcICQoLEAACAQMDAgQCBgcDBAIG AnMBAgMRBAAFIRIxQVEGE2EicYEUMpGhBxWxQiPBUtHhMxZi8CRygvElQzRTkqKyY3PCNUQnk6Oz NhdUZHTD0uIIJoMJChgZhJRFRqS0VtNVKBry4/PE1OT0ZXWFlaW1xdXl9WZ2hpamtsbW5vY3R1dn d4eXp7fH1+f3OEhYaHiImKi4yNjo+Ck5SVlpeYmZqbnJ2en5KjpKWmp6ipqqusra6voRAAICAQID BQUEBQYECAMDbQEAAhEDBCESMUEFURNhIgZxgZEyobHwFMHR4SNCFVJicvEzJDRDghaSUyWiY7LC B3PSNeJEgxdUkwgJChgZJjZFGidkdFU38qOzwygp0+PzhJSktMTU5PRldYWVpbXF1eX1RlZmdoaW prbG1ub2R1dnd4eXp7fH1+f3OEhYaHiImKi4yNjo+DlJWWl5iZmpucnZ6fkqOkpaanqKmqq6ytrq +v/aAAwDAQACEQMRAD8A7tvUeB3yq77+O2ahqPbtlNWlFHU5WzcOtBuO+XsxIyhQ/EBTscdUnpTF WqAbA5q03JywOuVXx3xVyvyOwPXwzAUqa5Z+jK5AD4tvn0+/FWioJpxP0HbKKhfjqSR2JJx4Ir77 Zup8BjSrWYilP2hjhuAACPmM3SoGXWveoGKtH36dcvetTt4Dvja7VO3vjgSevXthV1QOu1e+bYk0 6jucrc18PDLUUpXr44q1U9/vzAgnYfTl9QQM3Qb9tya4q4Ht+OYdTXtlLRviHTsfHHUA6/fihZSp p9Ph92WBSgrUdfDLIr175QUA179sUuABAIFK741l32648bCncCmUTirgNq5s1formxVzdSPxxnFu J3+Ve2PrlE09zgKh1V67UGatTUCoylA6bUHTLpirdR06Y1SW69Kmv0ZYNRUdMyklafRXFW967Zq7 UOao8cr59MKuUUqq7d83LfjWv68sgVPt0y9qEDArRFdunvmNKbdM3fft098vr7e2FWiRQCoNdsxB zce57Vp88zUAJ8PDFXDYfZzFu9Dl9hWvhlE8dx9+KuoO3fqcZ6bE/ESx8CdvppjwTQkgCvQZdePT fArRqTQEDLrWnfKNK7jLpt8OFXbHucoChod6dzmHhv75Z69MVdWlB3ygSeuY7ZiwG3fFXU3ObNv2 ObFWjRhQ7ZVOO3UdvbL6bnK/zGBXUoS2/wAq5dQMsmlAe+N3PyxVdT7swA48R2yqVFD0ym+H38MV b6Hfpl8gfllGvY40AVqV37YquIA23+eYGjdRTuPfMK9hlgnv1GKtkVG+/hTMKCgrX8TlfTlV4kCn 0jCq+nhjSaCrePQd8ylT0Ne5zE/ED+rFXAmlG2NQaDMWG5ocs+3XMCdq+G/zxVr2PTKQt1K0HjX+ GOGw6V8cwAPTFXH4htlE0GalNx171yzv88VaFaZQNKdT7ZqUJ33y9+2BXbH6cxO1SM3sMxHX9WFW ga9q+Hjmytqk13zYFb/VjO+/cimOPy+dM1N+lfCmKVq/EWY+NF+Qx6gb/fmp8QFKA1OOpT+uICCV hWpHE8aZlUDuST3OXWvXbrl9duuKtV398xNDWmXmO2/44q4EHpjW6AEVJNKDHUoK40cqkE0xVs0A 67DpjiQBX9WMYDkPHoK/LHEUpvXxxVY2/U8f14+oA9s3U41lqNuu2KrvhIr9IzDYeOUtKdD92YUI 8MKrh1NK7Y0nl7HwO2Y+xNewG2Y1psenT6MCuI6jx75kb4iKdNhljr165gPiPyGKualCTt75qVAo dj3xpFTtt75ZJoPY708MVb3GUwPQH55de43yvc/P6cVW0B6ilc2OII3A65sVaNd/xGWMptqe5ocs HfFW1OYsNsafED3OX1HvirhQ1r9OXQdunYY2hOzdDjga/PFXEDpmZagDt4dMbWm2OBB3G1MVdQD7 O3jldxtv3GYSA7fTllqEbdsVWN9pSASe5+jHA13+g4wNyJp44psBirqfjmrlcT2ND+rKFVqCa+GK riwA5E0HTfGhgAKnruMsDfkfvyqAHkKjxA/pirTMopsSTvVR0yuW4ABUDajDKVmdt1p2BBBO2OK9 2JJHT2+7AltSatvtXbLqDsR9OWK133GUSCP864UNEEmnTbrl/LcZQIfqNx+OYH4iSMVXUAyq7fqy hU9dj3pjtz3+nFWh+ObNTr+GbFWlTarD4j1J7DwywoJ2x1FO3U+GavYj+mGlWsBQdh45iD3O+XUd 81AMCrdyd+nXLrQDegzAUrv9OXT78VWihPj2rlqAOmYDuMs7YqtrQ0P35ieg/A5RKl+PKpHYb/fj +vTtirRVT22zEUpTepy9juflTG16Vr7e+KtlgDU5ZXl0rvlfCw5daHY5iwBPiBiq1yUFRuelD3yy QajtmYBx0+/3ywopv0GKuAUj4aDMTXoa/wBmbalSdvGmYmuw+jFXLvU9Kdj1rlcCevQ7nHM2bsN9 ztirtwOnTNXpXMBTE5iStR0qOnzGJ5KqdK1PXwzEUplUPSlCPDKA6mtTirZIFSc2X8Nan6M2KuCg Dr0HXLrtt1yqY0EhwB9mm2KrioH6icxH+3XwyywFQT9GNBFB2+eFW+VeQ6eGbkvY5ex3yt9j44q7 9RxrAkUA3p45Z6/Lv2zdt8CuXiBRRT2pTLNKHwyqDqMcQCKkfRhVoEEVH45tiBlMp6HwzAUoK+FM CuI8dsuqk7d9q5bUrjW+zQfPFXEAbE7HrmFCOtcbXx+jHKoxVriOhNRmIJFK0qKA+Bx2w3rlMT0U bnv4YqtVehNSfHLoT1rmqORHT+uZhXxrilvrUeGU42r13qRlr9mnUjrlV7d64ocGB6gj2OYA1rTb wzVHXvljY1798VcehzZex6jcdc2KtAU2y9tielMa3ap/ty9wvbFWm36dO2YAAVyzxbb6Mph8JA8O mKr6VHX6cqnvt3yk4gdcwoR4Yq7boPp75VR0Xtl7+NPxyjWnvT8cVdXLDUYKewrXMOx6V7ZdPiH0 4quNDXG7kAg198phUn8fDKJKpx6Y2riK7HfMQaVA+/G79964+ladsVaA3rl9eoocxAJr+OUa7HvX FW6A7dq1zISSeXWuYd8sEbmvU4q0WX5/LM1R/TKIr12yzXv2rirQqetBlCgP07ZhU7jbNWrUHX3w JXEgUJzCh3G+UVruSajMPHChtjxBLbfLNlVJbt7VzYq2wqBvmqaVI2GYg8T49MTp/lOSOg3I/EYp X1H345TjFHTlsR2xxX3xCFw33H04wHrXv3y6BhQ/SMaRTp93bFVx3yiDQ75W49s3elaV64pcta9P ljqgmnfxxMED4dyQMU8a7VxClo9Qo65TA1AHbLJJ69tspRvXxxVcAaD8fnmp3B27jMW7dMymu3fv ih1fHpjaV8du+OH+dMZuxDLXiOh8a4pVKY0e+2YE7+PTMyg7E0PSuKHU3+L2pl7U9sxG4HWnjmIN aeOKraA0Fc1ADXHAfhjgMaW1tR32xgPxEkbU6+33YoB4/RjSw5AEj5Yq4mtDmyxmxVzLyNOo8O2Y ClPHp45j1BOVXqe1d8VbG433GY1qDX6Mobt4fxy96/F0xVaKsak0+eOIy9j2zdNxU4q0V8OuVxBO 3Xucy8+rDvjqAVOKrOaitfpzBwW41Brvsa441LdvGtKnMwoNh8XY9OmKtfGCe48PDNuaEDbvlEMa U/2WKUNByp9GKrSoG9Opy6DpTrl99s1CNzufwwqsYE1UdO58Mf02G57ZiSBXqO+YHkSD9HyxV1Kb 03yj2oK5ugrXbMCSd+mKuAPxHxzBQD7nc5YJrT8Mw2J/DFWiR4jN35VzUod+lMwK1oopt08MVaLO TsAB4mv6saVXbkN+tTig+IKT4VxrLX+uClbGbMNx7jNhVoim57d8a3xAENt1qMUPX2xPgKN4nAVD YJO7de3yy+vU0zcjStDv0GapO/TFWxtXK3G46d8up+YxqhqVPQEnFV9K0xp5AdOXuOuXSp37ZVaD CrlbkagbePfL/wAo5XsehzUNdth38MCtnv2zV77jMadDv3zHpuKe2FWjUL4+Iyxt1PXMT0FKVNPw zEA/50xVwoanLFFoMqjU61rm+Pt1+7FWwQwIO2NLKmxPsB3Pyy+u3buMpY1H2dvEgCuO6rlr1YU9 vDL6f0xppWhrT2zAkgUxVs06ZQp0G9fDNUHcj2y9gaDoMVbHSnboMaa5Zr0HbvlCuKuqe/05sugr 882KtE08aY0moqOnj88vqKHfKpQ1HfrgVykVIr9Fcug65qd++YmmKuBqK9P4ZS7rU9McaAVOau1O nhirq+2ahG+V0Py3yuYr7+GKrqg1PUHpTL61FMo79AM1DyBoa4Vd9nc/QfDLFCPH3zbb++YHpQfw GKuoOvXYgZTfZNOvauO2P9mNNRQdWNaVxVvoB08Mpq9vuzAMNvtd6nN8XtXFXUIWpNSfuy9zXjlD x65Shh1b6KfxxVs1GXQEVOV9rY9czVpQDFXCp8M3cb5h4d8qhHSgxVs+305iW6DL3p+vKJoP4Yq7 Y5saDU0rQ9x2zYFb6UyqjofuzZsVbLAEKPmcob132HbNmxVsEbe+UT2Tr3zZsVbIzDkDsdz1zZsV cATtmrxG/bNmxVuoO+Y8qgClPfNmxVwanUcQO+apPxD5Zs2FWyQRTxyl2p7DNmxVseAOao/a2zZs VaNKb7Uy61oPH9WbNirVACdts23yGbNgV3XN1r+vNmwqs5DfbNmzZFL/AP/Z ------=_001_NextPart500601116744_=---- Content-Type: image/jpeg; name="d_bg(07-12-14-33-26).jpg" Content-Transfer-Encoding: base64 Content-ID: <_Foxmail.4@6D6117E7-DBF3-47FF-949D-0AC616289E46> /9j/4AAQSkZJRgABAgAAZABkAAD/7AARRHVja3kAAQAEAAAAMgAA/+4ADkFkb2JlAGTAAAAAAf/b AIQACAYGBgYGCAYGCAwIBwgMDgoICAoOEA0NDg0NEBEMDg0NDgwRDxITFBMSDxgYGhoYGCMiIiIj JycnJycnJycnJwEJCAgJCgkLCQkLDgsNCw4RDg4ODhETDQ0ODQ0TGBEPDw8PERgWFxQUFBcWGhoY GBoaISEgISEnJycnJycnJycn/8AAEQgAQgDIAwEiAAIRAQMRAf/EAaIAAAAHAQEBAQEAAAAAAAAA AAQFAwIGAQAHCAkKCwEAAgIDAQEBAQEAAAAAAAAAAQACAwQFBgcICQoLEAACAQMDAgQCBgcDBAIG AnMBAgMRBAAFIRIxQVEGE2EicYEUMpGhBxWxQiPBUtHhMxZi8CRygvElQzRTkqKyY3PCNUQnk6Oz NhdUZHTD0uIIJoMJChgZhJRFRqS0VtNVKBry4/PE1OT0ZXWFlaW1xdXl9WZ2hpamtsbW5vY3R1dn d4eXp7fH1+f3OEhYaHiImKi4yNjo+Ck5SVlpeYmZqbnJ2en5KjpKWmp6ipqqusra6voRAAICAQID BQUEBQYECAMDbQEAAhEDBCESMUEFURNhIgZxgZEyobHwFMHR4SNCFVJicvEzJDRDghaSUyWiY7LC B3PSNeJEgxdUkwgJChgZJjZFGidkdFU38qOzwygp0+PzhJSktMTU5PRldYWVpbXF1eX1RlZmdoaW prbG1ub2R1dnd4eXp7fH1+f3OEhYaHiImKi4yNjo+DlJWWl5iZmpucnZ6fkqOkpaanqKmqq6ytrq +v/aAAwDAQACEQMRAD8A7vWtO+bY9zlU2+HMCOm/vkGbgKGh3p3OXWlB3yj16ZjtirgSeuam5zFg Nu+bfscVc3Uj8cZxbid/lXtj640mnucBUN1XrtQZq1NQKjKWnTsOmamKrqjp0xqkt16VNfoywaio 6ZSklafRXFV29ds1dqHNUZXz6YVcopVV275uW/Gtf15ZpU+3TNtQgYFcRXbp75jSm3TN337dPfL6 +3thVokUAqDXbMQc1O57Vp88zUAJ8PDFXDYfZzFu9Dl12Fa+GUW47gfTirqDt36nGemxPxEsfAnb 6aY8E0JIpXoM1ePTfArjUmgIGbMSK7jNhVaWoMwJplE1+eN6E775FK4N06n2y6g/Tjantm5dsVpc W2qcoNX38PHGnG1FSa742tKhIYUO2V9nbqO3tja065q4ppd0Jbf5Vy+QGNLUoD3yq1+WKKVP1ZgR x4jtjOooemUx4++NrS+tD1y+YPyxMk9jlClald+2NrSoaDbf55g1D1FO4xoJ7DLDePXFaXncb7+F MwIFBWv4nGV98rkFIFPpGNrSr8saWoKt49B3xqsD0Ne5zcviBw2tLgxpRtjUGgzFxuaHKJ8OuUGO 1fDf54rS6vY9MpGbqRQeNf4ZVaDt75YIPTAq4nkNs2M6bilc2FaU1f4iPDYZbMKEk098TqKn5DGm ldtvfIWypV6gUOx75dSMSLGg9jv8svl3G+NrS9q9A3zxux67Vxte5zEkbgY2mlSo+jGV3+6mNLe3 zpm2r0r4UwWtLlPIsx8aL8hjhTff3xlfiApQHfHVphCls7kcTxpmUAdySfHGcq9dsvl2xWl3L78s tQ1pjKjMWA3xtFKgYdjjWYUAIqSaUGNrQVygTUgmmNrS8kAddh0xxYAVr92IsRyHj0Fccdqb18cb Wm2bxPH9eO5AD2xlQTjWFR77Y2mlaqkfiMoGg619sTVlp0OYMCPDG0Uqg7mldsovX2PgdsTJ8Ca9 gNsxJpsen8MbWlQnqK9e+bGA7/PNja0p8wdiMokk06bdcTLAj/Oubny6jcZC2dKvLwO2atMSDbnM CT12PfG1pV5bZg334nyPj9OV/mMbWl5Y7/jjg2Ik0pjg+NrSqHyi/TEq9wPnmrUY2tKgYHr9OOr4 dMRqTs3Q5fKvzxtaVCR0zNuKdvDpiXOm2WGruNsbWlStPs/Tlctx498YJQdsxen3Y2tLmb4gQCT3 P0Y4NXevscQD8iaeOP5UGNppVrm54lv2NDlAlagmuNopV5gCpNO2+UJKAVPXpjB1qfvyqgGor70x taXs6imxJO9V7ZXPcChUDahGJB2Zt1p4Gortjj4sSSOntgtNKisanfau2bGhjXfpmw2ilFvsnr1/ zrig+yOn0Zs2RDJx6ZvH+GbNirXYdcx6/wBM2bFVMfbbr0P2uv8AsfbHDr9GbNgS2en9Ms9e+bNh Q49Ppy16Zs2Kre/0d8pOnfrmzYpXd8o9P65s2KGm7dMv+ubNilceuNbv16Zs2JQHD+GW32fpzZsV Wjv0+jr9OPP9M2bEKVNun7XXNmzYq//Z ------=_001_NextPart500601116744_=---- Content-Type: image/jpeg; name="dr(07-12-14-33-26).jpg" Content-Transfer-Encoding: base64 Content-ID: <_Foxmail.5@17E1AF26-06BD-46C8-A3C6-90E2F1B22A0D> /9j/4AAQSkZJRgABAgAAZABkAAD/7AARRHVja3kAAQAEAAAAUAAA/+4ADkFkb2JlAGTAAAAAAf/b AIQAAgICAgICAgICAgMCAgIDBAMCAgMEBQQEBAQEBQYFBQUFBQUGBgcHCAcHBgkJCgoJCQwMDAwM DAwMDAwMDAwMDAEDAwMFBAUJBgYJDQsJCw0PDg4ODg8PDAwMDAwPDwwMDAwMDA8MDAwMDAwMDAwM DAwMDAwMDAwMDAwMDAwMDAwM/8AAEQgAQgDgAwERAAIRAQMRAf/EAaIAAAAHAQEBAQEAAAAAAAAA AAQFAwIGAQAHCAkKCwEAAgIDAQEBAQEAAAAAAAAAAQACAwQFBgcICQoLEAACAQMDAgQCBgcDBAIG AnMBAgMRBAAFIRIxQVEGE2EicYEUMpGhBxWxQiPBUtHhMxZi8CRygvElQzRTkqKyY3PCNUQnk6Oz NhdUZHTD0uIIJoMJChgZhJRFRqS0VtNVKBry4/PE1OT0ZXWFlaW1xdXl9WZ2hpamtsbW5vY3R1dn d4eXp7fH1+f3OEhYaHiImKi4yNjo+Ck5SVlpeYmZqbnJ2en5KjpKWmp6ipqqusra6voRAAICAQID BQUEBQYECAMDbQEAAhEDBCESMUEFURNhIgZxgZEyobHwFMHR4SNCFVJicvEzJDRDghaSUyWiY7LC B3PSNeJEgxdUkwgJChgZJjZFGidkdFU38qOzwygp0+PzhJSktMTU5PRldYWVpbXF1eX1RlZmdoaW prbG1ub2R1dnd4eXp7fH1+f3OEhYaHiImKi4yNjo+DlJWWl5iZmpucnZ6fkqOkpaanqKmqq6ytrq +v/aAAwDAQACEQMRAD8A+7gfkFNA9SBUbV9xXMa2+mhxbcOwFaUG4qdh+vFLSRlGCt8RU19Rq9fA dcAFKTa4uVCLsXHXc02713w3SKU0kZ6clPFhWo71oRXBdpIpcVIZtzRqEeAp4HtjS26UAsyEVDL9 o1p9+JUJeIpRBMDKSApEYY7rtvv1+W+V0aO7ZYtE84aFqIsaEANsBQdBk7DGiu5hm5RrzWooAab/ AKjjd8kV3ri6D4TVSBueWxr2w2FpDxSPKAGVigdg5AqaKafjkIklkRTFPN2uXfl9INSRGawgkAvw FJKxHbmo78Tudulcrz5TiAl0HP3d/wAOvk5Oj00dRI47qRHp85fzf87kPOmQ6dqsGpWUUySLIsqg kgVBDdD8jl3EKcXhIPmi4gIxJFF+7JHJRXbf2O2RG2wSd9ytach/QDB1YAUJBcHrvTqPnjxdFrq6 ZqIxJ48fiZh4dPfrid0Bg1/580eCG2uLW+iubK4YqlxEwZDxPFhVfAggjscQRIWOTKUJQlUhRZZZ atZanbRS206SpP8ADTr1Ukgj5DCSGIBTB60FGIHZqk0p7DfEpDUchVD+541pShqDXvgB25KQ210o +IxuQNqBqgH3A3HzphM1EUp17WbLy/o+p6zdP6Frp1rLdXlzUDhHChdzXuQBtgMhEEphCU5CI5k0 B73xD+VH5061+bdxe6xf25sok12e107TSyhYraFYiglKAc3BJ5Hx6UFMxNFmOoiZHv2+x2Xaujjo skcYO/CCT52eXk+8beVnggUSqpKKzMw9uw+jM0nenVAbIsSlgp2epAqNq+9Dh4kU2GVtw7AVpQbi p2H68N2tU0kZRgrHkVNfUavXwG5wAUpNthDwUxHitdttwB4Ya7l96mrKSVAbZvipTqN+uRTS9iS4 JTkD1brX8cPVDTHgTUVrsKU7f2YnZI3WtMsYC8fipWg3oB44k0oja74v2G7VX5HwxVxehoSD3UnY kdz1xJWlF3CkD7TU+yNzQ9KZEmkgLYghAUBWVPsGm9AMQkrgpG4NADutKV702xpC5XDKrRnkpAKm nWvTf6cIPctKccrNCyr8O5Xke470pgEtkmO6C1W2t9Rsbi1lUSpKhVlIBBB2IPzxJBCiwbHN4F+X utXXlnzFqXkLVpGkj07jPo9w5J52MjUSpNamP7JPfMDSyOORwy6bx/q/8d5fJ3HaMBnxx1cf4tpj uyDr/nj1e+30IzoS1G48RyRj75ml1AClNdQRIwZwuwLUpXfvjaQEG11FdwO8bc1AAiINVYEVBFOp pgBSYkPxku/OHnL8s/P3nDQdSuZr6yfWrp9U09zxjZmkd/rEQp8DuvxV7r17Ec9j1c9NlkDuL3H6 Q91m7Mw9oaaE4bS4RR/Qe/8AQ+s/yy/Ou3ZIXjvvXgiFXgJ/eIxG3Ne23Tseo2zf48sM0eKJt4vU aXLppmGQUfxy731hYfmV5furL6zJdCMqtSAwqS1B9PXJSNBpiLKN0/8AMDSNQvBYxz1K/CD4n8Mb 2RTM2u+HB0odx+88BX8cBnTIQt8w/wDOVnm6XR/ywutKt2WG/wDNt7BpttGrhXERcSzkk0G6JxPz zB7QzGOE+ezuOwtL4uriekd/1fa+I/8AnHHWItAk1PTEjki+o6o0x9Qk8vUAQkEgGlY6DbIdjz/d SHcfvDke1GEjUQl0Ma+RP6w/WTy9q8Gp6ZbzrSpQAk9N+9e2bMnd5wBkgqUX0jRQdulQB4Yfciu9 ySqxKjls3xdOo364gqQVYvVwSla7FutfxyV7opQkmEcZA5GpAUU3Pv8A5jImVBIjZXJI4Wor1qQa VxBKkLFlIKbu4BIVNq++1BTACtKnJW3oattv2/HJIouaUBeTA08dtq7VwEppRWbkAAAwP2an4h9H bBxJ4XPKskYWTihJpSlaffgMrG6gEFD8zEeBq0Z2UCgCgE0FevfI3TKrdz4s8oZiCVATkaE9On9M b6rXRW+sIgoTQbcjWv35LipHC3yXiQSoUChp08a42ilgkjEXpJuEA2698F7UmjdqJm4uAWCqTU+4 HY4LZcLx/wA/2lra6lpXmqNFElhMsE8ygcvRuG4MGPgDRqZi6ggSjk7jXwlt+o/B2OhucMmA/wAY sf1obj5i4/Fmd75istK0Q6jdTOkMEQLyk8iT9kAeJJNAMtyZIwBJNAOJgwzzSEIC5HkHx559806t 5qurqWXzBe6Zoyhx+hbWVYY3Sm5mkRQ7EgbjlTOX1XaeTNIiBIj3d/v976X2Z7PYNLjEsoByDfi6 Duq9tu+ub6p8h3xu/KlhLcAIDBHxjHw8RwWgHhTpnU3s+aSB4jve/PvfE/8AzlF5M05fNel63IE+ q+Yrc2z6h8LvFexKAnLlt+8QKB7g+OaTtPHUhMdXsPZvU8WOWI8wbHuPP7fvfGl/5f13y5eLdWF0 zemTxubM+nKw3P2F41JpvSo9t81+PLLGbiaL0GfT488eHJEEebIjf+d/Mug3NlrGpz2MENxGiwPC YjPIp5Uf4UPwlQQaUJp8xk5dflyw4TTrtN2Jp9Pl8SAN+ZsC/wAdXpf5XfmRqVtcW9jqdxN9agIN jcSPVpo0PQk0JK0pUgV37g5tNBrPEjwS+ofa85252T+Xn4uMeg8/6J/Ufs+T9GfJXn+11nTAXdhN Goqh2qemZspU6KMbfCX/ADkN55vfN1/BeTW08Fjod+LfSreF0kHpm4CvNKeNFaTgKDcDYdQTnP67 UnLLh6Re87E0A02LjJuUwD7h0DyHS7mbQte0y++JEuSTdTlgS0cu/wC8AqPhAZqgjpuOuPZ+Y48w 7jsz7d0sc+lkSN47j4c/sfph+UvmS3k0ZI5rhQQAVDEdQBtTOkkbfPIinuYvY2h5RsWDEBaAb++2 AzoJELRMc7hQRXrUg0rhEigxXpPQpu7gVATv77bUwiSDFFu4YbBeTbCp6V77b5MlgAhweMj0cctj WnelB88j1ZVsuMj1IVqmgrvSnjXDa02ZdmUNSp6H+JxtFKMjijdqAkKDt7e2RJZAPO/Ov5keVPIe lX+veZNctdF02yUG4vrqRY408FqT8TE7BVFSdt8gZgbktsMcpkRiLLz/APJ387P+VxRahr+heXr+ w8jxSCDQPM+ogQHVmUssz29rQusSUADuQWNRx+E5Vjzce9bd/e5Go0ngUDIGR5gfw+89/k9yNwKV LBeRqp+XbJ8bj8K9roKUUtUv0HcAd/owmaOBSNwXJBHwgmre/wDXBxWnhWT3LGBwKGg6dN8PFey8 NPgb8wP+chvzV8tecbvy7caPp2kmIgadD+8uzNG2yustYi9SCQOC06EbZpdX2lnwzrhA+3b7Hsuy /Z/R6zDxjJInryjR7q36eZ96ZaX+fH5qPHFLPBo8nOrSWjidJSuwC1RmCkmvjTMaPbeT+KIP2frc 7J7HYCPRkkPfR/U9W0H8z9J/MKyv/L2tWf6K1q4tnj+qh+alGWhaGQqhelamoBGbHT6vHqokVvW4 8nnNf2VqOzMkZ3YBsS8x0PcwPz/57ntPLHlvTrxvQvLh3GqIh5Az2g9J0AFaj1KkfLMTtLOfy4HU mj/m8/tdt7O6OH56chyiLj7p8v8AYl4fPqF5dQkRRqqyuCIpKheDbMSR+AzSaeUIzBnyG/v8ns9b DLPFKGKuKW1npfXv26V1ZjqP5p+b7eJdOsNVSwgii4hLZFHTbcvy3HXqMz8va2aZ9NAfN0mm9ldJ jA47mffX3freG67518161Db6PqmrSX2jyX8cl59ab1Swf92xV2UuCgbkoUj7OVjWZJx4JHb7XLPZ GnwzOXGKNV5AddvPztAxX5tdcttM1H04oooJBZzmg+s+nQlq9A8YHhv8iKxSo6za3J8r3FxLA7XU Z+tIOTI8CKVlUMD8RKDpuPCuKsZu7aS6s7XVbSVdPgmAkjmhcl+KjlVaV+JSoIrTwNANpRkYmxzY ZMcckTGQsHm9G8kfm9ct6GiJcSWuuyxM9wjVVTBHT1pldfhU8agduRGbr8+JYSf4uXxeO/kOUNXG I3xk3/mjmD9yzzxYahceWtWMTJNAbf6xPbycmKBKPIUkWgp1YcvkM0hNvZgACg8+amp6WYPL3122 ubyL07vWSGeMsYgwQ8gDwLdeKinsThhLhkD3MMuMZIGJ5EEfN6b+X3nvX7PU4NOudWhunit1UyKn pu0sNBLyCll35A7Mafr32k1pzzIIrbZ4ntXseOjwxlEkm6P6Nvg+8/I/5xeV7+2/Rt3qUVtqVtIb eeG5rCQ4PE8S9A1eooemZZyRJq93TeDMRutnsEOu6e3KRLxDUBgw6E028QcldFiRsiF1+ybkI7tG agqK0p41yVlhQTuC5JmkjK1EVFjYdKGu+GM96RKGy25vLeIN6sqw0I+KnTJSOzGIX8ucaMsp4SUI cbbU7fPBzTVPK/zA/N7yt+W9tHda/fiCOaQQwRpG80sj9+EcdSQvUmlBlOfUQwDimaDl6TQ5dXPg xRs83zN+Y/8AzmFoGn2LReS4LjzBqEqVUsj29uhI6yPIA+1eir7VGa/UdrYoD0HiP46u50Xszqcp /eDgHnufgB+l8I6R/ij/AJyl/NPQdE886jNc6O12815p8JaK2tbaAF5PRQE0ZwAnMkt8Q3zXYs2T VZgJHbn5PQanT4OzNJI4x6uVnmT+znXJ+0eh6bpvl7S7HSdMtYbLTtPto7ays4VCRwxRKFREVdgA BTN9xPCcJJs80U1yC7EkDky8COnX3ysybOBZFcmRp5ZGHItwhHgi9D8yanIid2SkwqgrRzJSSj7n 4qZMSYmKDutRtrdRI92lpHFUuTQADvuSB9+C75bJA+L5888+Y/yZ10GLVPNWmfpSHmIL1J4nmgLf aClK8a9wevQ1zHyTwzjwzkD8Q7PSYNdhmMmGEx7gaPv7w+UdZlbT7+e30nVYdY00uHtNRtAShUkg g8TxBrtsc0Op00cZuEgR7xb3vZ3aU88ay45Qn/Vlwn3GvsP2pYl7cWWr2GpLdPFLbSCUlTxZd6bM pFOVadP45jY8kschKJoh2Go08NRA48guJR3mXW9V1m9s7q7ufrbFWEDSACkg2enDjuRxPjluo1c8 /wBVDrt8P1OJoOy8Wj+gkmgLPcCSO7v+5Qiu5IFQy+oZIwD8fxDidxQji3Tbv/HMV2KS6vevG4Do BA5HK5X4xvvt4dejAYVeZa3r9ha+YvLfl68huIIPMToLfVXUfVqs5RVBU1J5UB2ovIMdsztPgMom YPLo6rW60Y5jEQfV16PTNaVdSgvLF/KVzMaFYrmKSEBJORVJYyzKeq9ePTc4Wtj0GrXY9by5rsHo aotkwPFg0VwChJJPQvXr7g9q4qgdJt7y58pwQuifHB/ocqMobkCKD97QdhtXxxVOtA0rSbVNW8wW OnymHVNPW1a6eMiWYSNURQkFQsfIAMRQkgkmhWhs1THhF31RralBqOl3Xl/VrX9Ga/FYiKL6y7Ay MsBIeJ1BrsSafgemBkhtHSUeUbPWb+eNLPT7UrZpAzBZfh4kSksSSQKcRQBuu/RVC/l/pM48xWwv rWazur31bqWOZSOIkagVSQCRRgfn8s2HZw9ZPk8/7RTrBGPfL7gX1z5i/KltZsF1PR2EOoxxoHU7 RzgDbkezbUr9/tm5IjIfN5zBlOId4ebaNaXFuLnQb66vtJvoGAnSGWRCVNQQEJKfTSh2pXMcynDa y50Y48g4gAfgiLS3/QszLpd3KJn/AHlxNNIwlJK0TvQAGlQvbrv0iMkh1LI4YHmB8n6Th19RjyAo ij8W6Zugd3m62fI3/OVPmLWPK/lXTPMnl6+fTdZ0DWrS8sJENElJEsEkcqinJHjlYMO+YPaGQ48X HHmCP1O17IwxzZ/DkLEoke7rfzCh5W/5yk8u6z5ON7rTnRNXsFH13TzyfmwWp+rNT4w52A6iv05D D2piywsnhI5g/o72zVdhajDk4YxMgeRH6e747PhX8yNe1f8AM/zRd6lqdxNEkkiLpNpCxX6tbgH9 3VadftMe59gM5zW646jJxdByD23ZnZ8dFh4B9R3J7z+odGEz+Wb/AE20YwzGaEP6ZWcF+R4bcWJB G5GxzD43ZWQ+iv8AnFPyzqWneetU1i1slXSINOeC8vJq7TzOjrHGdqkhKnw28Rm47J4uIyraqeZ9 o8kDjjjv1XdeW43/AEP0bm1GAEgMvIEcgCAT49/DN0ZPJiKwzqzVp6i1BTjTt3rtkOJkIrTcfvED KEQhmJHYj/bwcW6eHZ4T+bn/ADkN5O/K6FrK51G0vPM0oH1TQBOqS0bo0pAf01puOQ37ZHJm8MXz Pc5ui7OlqpgXwx7zy/RfwfAPmb8yPNf5i3F5ean5ilfTJmaWDTYJ6WUYAqIlRDRipI+0K/Tmmz6n JMmyQO577Q9lafTxHCAZD+Lr+mvgp6Jp1vJaG7ShmVBWOY8tgKNQDvXoMxC7QBlA1BrK2hjovCNV 3c7AHs3XwO2ARMjQYTnGAuRoIS3n/SV5ApkSNZirzFiQvJjsDtWijx8fbIlkmGoScH9BZA0tt+8S UGqnjs4Ujb7O9fbAqe2WmX2uQi2tY5Y3Kh0uvhVaGg25KRQEn+uShIA2Rf48mvLCU41GRie8V+kE MqsNI8r2V7b2OtC41WadjB9ag5qaqASHhUqaCnUVzY4s+mPOFfaHnNZou0hvDNxDyqJ+zb7Xr+nf l7+V2t2cL6ZDZT3NnJ6kVwEQz286ggPv8SMOR8Dmw9Eo1GuE9zzJy6jFlEshlxj+df6XgmvX9x5M 1VvL/mW1ktkCOIL+OjQXK1AEkZD1CkEkjqDXrmunAxNPV6XUxzw4h8R3MP1qLyX5h0pVXXYLaZFa a2vmblJG1KlZCe29CpOQcliuj+bUg06905/RN1pdnNbxvCQyyLbIaSqzD7O2wHj4HFWfeVtTtrDy xoC3MLSF/QtVjmk4hJpiRGQkm3FjTevyxVkN0uk3oudO1mC1e4uDyRZfsSspBCRkqOTVNCAcVee+ VLK6vdJgXzBfi30bSmb9G6VDVfWmikBLzE05cGalD17jxVTrT/N9ve+bIroMYrQmRLAsxIbj6Rbj XpyC12982PZ53kHnPaKJMIHoCX2X5e/NTQ4tPSO8mVfTjUGtPfxzNMTbzYkKYv5gl03zvGdR8uIr XEBElvdQsAJAp3Xmvj232ORkBINuORxy+95heI9s8haJrdyfSuRxBaOY/aWjbgEHYjrtmIQRzdjG QkLD9HBcLISjIB2ZjQ1I9s2/Fbz/AA0+V/8AnKC2W98phZaKtrd28tT3PqcfuAaua7tbfTS8q+8O 27BNayHnf3F8JQ2j3MczcVFu9VgpRd1O7V96ZxvE+hJ/oelwGjAE0kIll6rQDqT88eJLLT5cgvbG zikeQ1kme49PiwVnWqOwPXjTpjxLaB8u+bfO3lWzv9JsLmHTbuznJ1KIIj+qWUcLiAOD8DjtvTpm wxdo5MMBGNV9rqM/ZOHU5DknfF132Tqy/MDzfJJYarqfmS7ksYbhJLuOF1iDxrIC0dEC1qAR0ww7 SySmOOXpvemOTsjBHHLw4AyrayX2F5f8/wDl/WbaN7PUoZm4iqcgGQHejIaMPpGb2OUTFxNh5XJh ljPDIEHzYx+a/wCZ6eR/J2oaxY8b3VpAINHsQruZriT7ICRgseIBYjbYdR1wHLwi+rfpNIM+QRJq PU9w+L8m9T8seZPP+o3OuXekazrF/qcpmuNVImeRmcVVKyBk4gU47AAeAzDhLMTdPZZToMceDiAr uO/y3+7vZTpv5H/mJpkkMul2F9G4CvcQTei8RBB2JEi1NRTYZOWKc9pRHzcOHaelxbwyS58iLv7n 0X5U/JfzXeGK81O5OjqAGuI1IkbqSaE/CNu+Rx6Efxn4Br1ftMBtgjfmeXy5/cxfzs2jafLDo2gQ C8Vrjje6rKTJLcSUUUjA2VTt06+A7xzaiEAYYhXeXI0PZ+fPKOo1UiTzjHoO41yv7e9NNNs9Oi0W 9iutPe31qwtJbn1ywcO8aMwahBWhPVafPNa9IA8yvfMs8+l32r3H12SDQbiztbe0tpLa0NLlLp5S Xe0uOdPQpTbr17ZfDHGrLi58kuMRgQNj58q8wnmgav8AmdLbTwaRqyXGlwiCHT53sy7TfWoIbqPl 6EEqQOI54uRlkWMEmjlVZhZ+Vvk4x7ShAer4+W9fH4fJF2GreZRb6QLrXrJ5PMd1bpZFgkVyyPKs TGG5ktZIiVMi8liaRo6nlH8LhYDT8m7JrYASHd1/Zd/Oge/kxDR/N/npdWkTS/MNi2s3cOntJbAq txENTntobN24wnkJBco5MZYKu0nFyqNkYsEoGwacDV6rDliYThxDf7OdHmOX4CKj8+fmV5q1OPSb rV7PWUtEuDJqkFszMgjSEuiw/U/rLUNxAxMUTJ8QJOzcczIBODpNNiGmznoO4nc3y618b8urVp9e Ou6Rp+tyaZpZk1C3sLX1IYI7i4HGCST0PVt/hdILhHCzhGLMFCtICgxhi3dvPUx4SYjp+PtHT7mB 6hd2/mfQrvVl8y2mm3ehTWNpFPMiiEw3MdyzIyQQSSuwMKhBGpK1YsONWURhfNlkycJAAvY/oTDT tU89DUNJsr+WzsYvLVrfzXS8IpEimsGaCS2lZY2VZBxQKvJgTLDv+8XE46WOaMund8b/AB9heiN5 gvtX8tSazdxtrlu97dQvaC+03TgsNrBbSK8Md3bO0rN6h2jpTbuRjGIrdckjx8Me4dCe/wA3k9hf +cLfTb+zttbsbE3iW11q8HpyPPY2V68XozuVt3jKkSxV9J5JOLCq7NxPhhAy2ar8d39qN1PSfMWr WC2evatp0drpFsL3n6qxtb2qSwwLc+pbKwfn63NAGLSL8Sq3OL1DAGJsc2OU45x4ZCwdv0/o3/tU rTypqqa/baU2ujXEju7m1QXN1fXdn9bsOAmg+qNEJZmj9RWISJ14nlXijlcgzyT9JOzr/C0mAeIM dHpfny61+O+n1R5d1rzZ5J0a6judX+oHS4yqIsVuFdVk09V5xyWysgMd7y3IatAyoVIZlOXIdHX+ DikeI7k7n7fPyYj5n/MvVNTvYJbTVhcsZFW4ZLeAo0dfBYxzIp8NK0PtXHjNbpjpoA+kbfF+rct5 BxLNJw+LYdGqD2H0ZtDK3mOGngv52aY/mfy7Otk6PeWLLcRwlgEn9MHlET8Q+JWI69cxdbhOpxGA 2P6nO7O1I0mcZCLHX4vzjv8AVb20kupbXSnsLaMEG0kYMsZBoSPHORlpzCXDM0Xu46oZIccBYTDS h50ktEktLmztLUpy5ykuSrb1oBQnInwx3sx4p7vtTMaT52aMtP5n9BJd2hiV46n5LTBxw/m/akQy dZfYgo/KGtXE7/7nazB/Tnk4GvAgN15VNG7fTj4kf5v2r4c/532LZ/J09hHbxtrElwshZ/TVQFUg noCTua98EsoPQJjiIHMqY8tutsl0dZuIZK1VWjFQQd/iBB+7DHLRsDf4rPCJCibHnTPPL2lfmu3o NouqXF/ZHj6g1BWMVK7Ees5qtP5d82eHJqOdGvM/st0epx6MbEi/6IP6DT7G0DSYksYTf2EEV6VX 11iJeMN34l1UkfRmw8Qkb83THHEHbkyZLe2pR4Iwp2IC9uvbxwcR6rwjo88/N7zPY+WvI2rXN1P9 U+tR/VYmjpzZ5/holOppU7dsZ5KiS5Wg0/i6iEQLFgn3Dm/P+xuIfMGsQLp8kkX1OIul1UF/URgy tQmmzU9/lmrIp9D5nZ6fHe3F1pV/p+oLH+lIreWJmrXnzjIV6oDQvXpgjDikAOrHLlGKBnLlEX8n mNn5a8yi1GiQWejayL8RXeqRXct4qQSW/rqPitmiYH98woa9sy55IwmRW36nV4ITz4MeQEiRF9P4 tz3qVj5K1e8mudL1bUdEMzzNNZWl8k7+jI0SRM0CKkNuyenDEqxMskaqgXiF5BrI5+5qy6UDY2Ad j5/H4+9NNK8jtoU1hpo1DRrzV9Ou7KYR/wClPPI9kfVtnuYLcelHWnH1fTR2XnVzzk5zOY86DUNN CqJkduvn+Oqc2Vte6VBajSo7GLVkSxtPrVzZCBWk06a3miT1UllZ1iFr6XCOOIuKvIeSDBxj4oOL iNco7/bfl5318nnN7o15pSix1C00259SR0CXYnEdwt19VYo00BiKiNrKNvhZWqPi5KaYBlIFdGye GEpcf8Xft5/rTdND1vy0/wClre20C6t9Mvor7T0W3d49NkVYopBGKjn6iwRqXcO4p6gZZCZMRkRL DEjmdx+Px+hU07yzqmjeXr659HR/MVlqdxa3N3AVuHVZIEmjj4SR+m6gGQ1KMGPSvAsGAnTZKIkQ bIIYn5o8veaINL1K51TU4f0t5p1GPUbhYZJIljjMZabiFQVM0jRtIKKv7mP7Xw+nLxBTX4Y4gRyA /Hy/SUle21/UPLlvp093awW+kyTy2jW7yAytcRwxvybjuvCBQop1rXwEeINvW/L8feyLRtE1ie0U XKaR6jw2ljqV65uxJeWtoIWjtpOLiMIvoRrWJUchR8dSxYnI1DEAbs/qJ/BWtoHmzWXv7OQafJbX 0R0+TUEikWSaEXENxFCqQhI/3bW4RPh+GM+nXiqKhE726onGEBxE0BuynzN5W80aKsravZ6PLb69 eX+pXlg7XIQm/e3lkhJQpIqrJaxuvFgarxJYGmZUTQefnqIZZdRQofBcmn+d9cgmsH/Rl3aXkESy GBJI/TVFsFHFeKxoP9x0YoFCgl6AKV4pLKJhE7X+L/WyOPyDqNghe/uNPUWZSqLKwkcSdwvpg0AU fOhyvhLb+YiOhfpP5n/45d//AMdXq3+8H+9P0e+bOf0nm8tj+ocvi+MvNX/HSH/Hd/uv+m5/3i7/ ANx75pp9fq/5KfT/AGPRY+n0/wDJL6/7XgN1/vdcf7x/3h+39n/Y/wCT/DNNqP7w8uf8P0/Dy7no dL/dR58v4vq/zvPvZdov+8c397/vQn2P95+vb2zFcwM1/ai+39kfa6de2KVC2/3uvf73+9H2en2R /mcVUD/x7/a+w3X5np74qnXln/js6f8A7wdX/wB6/wC6+2On+X4e+Zug+vp+n4Oq7W/uuvw5f53k +qtP/uU/uen+6v4ZtZvOxT7v+19of5/PAlWbov2vtD59e+SYh4b/AM5B/wDKATf7z/70wf70/Y+0 fx/hjP8Auz+OrsOyP8bh8fuL418t/wDHc1P+7/3T/wAQ/Y9vHNcXuhzL1XTf97Yv7v8AvIuvT+9H 2/8APrl+k/vR+Ojq+3P8Tn8PvCvpX/HS1f8A3n/46l3/AHH2/wC8X7X+T45XqP7w+9t7L/xXH/VD Bm/5SFf96P8Aewf33979j9v/ACfH/IysOXJlFp/ykKf7y/70f9Kn7H9w/wBv/L8fbM2P0j8F08v7 0/D+r/b3sDH97cf73/73R9On21+x/wAW/wAv+ywMkz8+f8cRen2V/vv+ef8Adf8AFn8K4qs03/yX Mv8Acf7wXP8Af/a6/r8PamKpTaf8c7Q/7rr2/u/7r/j6/wCNffFUR5z/AN7z9v8A3li/vf8AjEv+ 8/8Ak+P04qwLTP8Ajn3/APd/bb+8/u/s/sf5H83virLbb/jnj7Pf7fX7S9MVe1eRP+Ojbf7zf3x6 /wC8/wC19n/izw9q5di5l1Xa392OfP4fH9CP/Nr/AI6mnf3XRf8Aev8A3m+zL9r+GW4+RdLj+sMN 0z+6sf8Aej+5n/uv95+3T+PtTLHJLKNG/v7r/jm/Z/6Wn911fr/D/Kxay//Z ------=_001_NextPart500601116744_=------ From nobody Fri Jul 12 02:18:54 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BD3EB1202A1 for ; Fri, 12 Jul 2019 02:18:51 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.896 X-Spam-Level: X-Spam-Status: No, score=-1.896 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FROM_EXCESS_BASE64=0.001, HTML_IMAGE_RATIO_08=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BPs5fA5zL7JX for ; Fri, 12 Jul 2019 02:18:49 -0700 (PDT) Received: from mxuc.fiberhome.com (mxuc.fiberhome.com [113.57.179.111]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 024F1120105 for ; Fri, 12 Jul 2019 02:18:47 -0700 (PDT) Authentication-Results: mxuc.fiberhome.com; spf=None smtp.pra=djy@fiberhome.com; spf=Fail smtp.mailfrom=djy@fiberhome.com Received-SPF: None (mxuc.fiberhome.com: no sender authenticity information available from domain of djy@fiberhome.com) identity=pra; client-ip=10.166.1.67; receiver=mxuc.fiberhome.com; envelope-from="djy@fiberhome.com"; x-sender="djy@fiberhome.com"; x-conformance=sidf_compatible.downgrade_pra Received-SPF: Fail (mxuc.fiberhome.com: domain of djy@fiberhome.com does not designate 10.166.1.67 as permitted sender) identity=mailfrom; client-ip=10.166.1.67; receiver=mxuc.fiberhome.com; envelope-from="djy@fiberhome.com"; x-sender="djy@fiberhome.com"; x-conformance=sidf_compatible.downgrade_pra; x-record-type="v=spf1" IronPort-PHdr: =?us-ascii?q?9a23=3AU6+pAxEnymM1uLDsHuZpb51GYnF86YWxBRYc798d?= =?us-ascii?q?s5kLTJ78o8iwAkXT6L1XgUPTWs2DsrQY0rCQ7virATBIyK3CmUhKSIZLWR4BhJ?= =?us-ascii?q?detC0bK+nBN3fGKuX3ZTcxBsVIWQwt1Xi6NU9IBJS2PAWK8TW94jEIBxrwKxd+?= =?us-ascii?q?KPjrFY7OlcS30P2594HObwlSizexfK1+IA+2oAnNucUanYRvIbstxxXUpXdFZ/?= =?us-ascii?q?5Yzn5yK1KJmBb86Maw/Jp9/ClVpvks6c1OX7jkcqohVbBXAygoPG4z5M3wqBnM?= =?us-ascii?q?VhCP6WcGUmUXiRVHHQ7I5wznU5jrsyv6su192DSGPcDzULs5Vyiu47ttRRT1ji?= =?us-ascii?q?oMKjw3/3zNisFogqxVoAyvpwZizYDOZ4+aO/lwcb/GcNMAWWZMRNxcWSxdDoym?= =?us-ascii?q?aYYEEuoPPfxfr4n4v1YKtRymAAmpHOXqyTlDm3j70rA40+UhCgzG0g0gEMkQv3?= =?us-ascii?q?TOrNX1M6ISXv6vwKbUyjXDaupb1DHg44bGdRAhpOuDXbN2ccfJyEkgCR/FjluK?= =?us-ascii?q?pYziJTOV2eIAuHWY4ep4Te+jlnIrpxtsrjWux8ogkJTFipgUx13G7Sl13YQ4Kc?= =?us-ascii?q?CiREN4f9KoCpVduzuEO4Z4XM8vRXxjtjwgxb0co5G7eTAHyJEgxxHCdfOKa5OI?= =?us-ascii?q?4hf/VOaJJjd4mW5ldKq/hxms9UigzfXxVse10FlRsCVFiNnMtncI1xPN8MSIVv?= =?us-ascii?q?x9/kK51TaO0QDc9P1ELFgpmabHMZIt3789m5sJvUjeBCP7mUf7gLeTdko+++io?= =?us-ascii?q?7+rnYq/hpp+ZL4J7lwP+M6Q1l8yxAOQ3KRYBX3Kb+eS70b3s41f1T6lNjv0ziq?= =?us-ascii?q?XZqozVJdwHpq6lBA9Yyp8j6wu+Dzi6y9kYnGcILE5LeB6diIjpIV7Oc7jECqKm?= =?us-ascii?q?nlWn2GNy2vHNFrzsHpuLKWLMxuTbcK55+nJbnQYx3JgL65BFIr8AKv/pWkj0uZ?= =?us-ascii?q?rTCRpvYCKuxOOy1EqoSzinETaDAL6xPqLYvEWI4eciZeKLYdlG637GN/E56qu2?= =?us-ascii?q?3jcCklgHcPzxhMpFWDWDBv1jZn6hTz/pi9YFH30Nu1NjHuLrglCYUTlWajC5WK?= =?us-ascii?q?duumhnWrLjNp/KQ8WWuJLExD2yR8AEaGFMB0qMFnLlMY6DXqVUZQ=3D=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A2kbGwDfRyhd/0MBpgplgy4Pc2pyEiiEH?= =?us-ascii?q?INKkUKDPoRTAYIfjkGBZwkBAQEJAScJAQIBAQKEOgIbgj0YDzQTAQMBAQUBAQE?= =?us-ascii?q?BAgMBAQEBaYUDOQyCOiIcTWsBAQEBAQEjAkQ4XyoDEBABAQEKGgQFEA8WIRIBC?= =?us-ascii?q?geDEoIJEJAvlCGHRAiBMBoChCpBMIRyCgYigRKBY4UlhG6Bf4ERRoEohEMCAwG?= =?us-ascii?q?BIQSDPoJcBIwCiHk0hyuOBAmCG4VMgQyGfIQEgk6CLIckg3kDijmUeJIVIoFYc?= =?us-ascii?q?BV9BlYvgR+CGAGJLYVMNTCBAgEeCBMFBQEBjwYBAQ?= X-IPAS-Result: =?us-ascii?q?A2kbGwDfRyhd/0MBpgplgy4Pc2pyEiiEHINKkUKDPoRTAYI?= =?us-ascii?q?fjkGBZwkBAQEJAScJAQIBAQKEOgIbgj0YDzQTAQMBAQUBAQEBAgMBAQEBaYUDO?= =?us-ascii?q?QyCOiIcTWsBAQEBAQEjAkQ4XyoDEBABAQEKGgQFEA8WIRIBCgeDEoIJEJAvlCG?= =?us-ascii?q?HRAiBMBoChCpBMIRyCgYigRKBY4UlhG6Bf4ERRoEohEMCAwGBIQSDPoJcBIwCi?= =?us-ascii?q?Hk0hyuOBAmCG4VMgQyGfIQEgk6CLIckg3kDijmUeJIVIoFYcBV9BlYvgR+CGAG?= =?us-ascii?q?JLYVMNTCBAgEeCBMFBQEBjwYBAQ?= Received: from unknown (HELO fiberhome.com) ([10.166.1.67]) by mxuc.fiberhome.com with ESMTP; 12 Jul 2019 17:18:43 +0800 Received: from david (unknown [171.82.3.232]) by mail-front02 (Coremail) with SMTP id QwGmCgCHjQVwUChdwJYBAA--.330S2; Fri, 12 Jul 2019 17:18:40 +0800 (CST) Date: Fri, 12 Jul 2019 17:18:40 +0800 From: =?gb18030?B?tPe99dPR?= To: quic Reply-To: djy Subject: about netconf over QUIC X-Priority: 3 X-Has-Attach: no X-Mailer: Foxmail 7.0.1.92[cn] Mime-Version: 1.0 Message-ID: <201907121718386592540@fiberhome.com> Content-Type: multipart/related; boundary="----=_001_NextPart260342025263_=----" X-CM-TRANSID: QwGmCgCHjQVwUChdwJYBAA--.330S2 X-Coremail-Antispam: 1UD129KBjDUn29KB7ZKAUJUUUUU529EdanIXcx71UUUUU7v73 VFW2AGmfu7bjvjm3AaLaJ3UjIYCTnIWjp_UUUO_7k0a2IF6ryUM7kC6x804xWl1xkIjI8I 6I8E6xAIw20EY4v20xvaj40_Wr0E3s1l1IIY67AEw4v_Jr0_Jr4l8cAvFVAK0II2c7xJM2 8CjxkF64kEwVA0rcxSw2x7M28EF7xvwVC0I7IYx2IY67AKxVWDJVCq3wA2z4x0Y4vE2Ix0 cI8IcVCY1x0267AKxVW0oVCq3wA2z4x0Y4vEx4A2jsIE14v26rxl6s0DM28EF7xvwVC2z2 80aVCY1x0267AKxVW0oVCq3wAS0I0E0xvYzxvE52x082IY62kv0487M2AExVA0xI801c8C 04v7Mc02F40Eb4A2aVAYj7AlexkEI4k267I2xxyl5I8CrVAvF7xS0VCYjI8vzVWUtwAqx4 xG6xAIxVCFxsxG0wAqx4xG6I80eVAI3cIFxVC2b4A2awAv7VC0I7IYx2IY67AKxVWUJVWU GwAv7VC2z280aVAFwI0_Jr0_Gr1lOx8S6xCaFVCjc4AY6r1j6r4UM4x0Y48IcxkI7VAKI4 8JM4xvF2IEb7IF0Fy264kE64k0F24lFcxC0VAYjxAxZF0Ex2IqxwAKzVCY07xG64k0F24l 42xK82IYc2Ij64vIr41l42xK82IY6x8ErcxFaVAv8VW8Xr1UJr1l4I8I3I0E4IkC6x0Yz7 v_Jr0_Gr1lx2IqxVAqx4xG67AKxVWUGVWUWwC20s026x8GjcxK67AKxVWUGVWUWwC2zVAF 1VAY17CE14v26r1j6r15MIIYrxkI7VAKI48JMIIF0xvE2Ix0cI8IcVAFwI0_Jr0_JF4lIx AIcVC0I7IYx2IY6xkF7I0E14v26r1j6r4UMIIF0xvE42xK8VAvwI8IcIk0rVWrZr1j6s0D MIIF0xvEx4A2jsIE14v26r1j6r4UMIIF0xvEx4A2jsIEc7CjxVAFwI0_Jr0_GrUvcSsGvf C2KfnxnUUI43ZEXa7xRA_-B3UUUUU== X-CM-SenderInfo: hgm1qwhleh2xxrphhudrp/ Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 12 Jul 2019 09:18:52 -0000 This is a multi-part message in MIME format. ------=_001_NextPart260342025263_=---- Content-Type: multipart/alternative; boundary="----=_002_NextPart332684383730_=----" ------=_002_NextPart332684383730_=---- Content-Type: text/plain; charset="gb2312" Content-Transfer-Encoding: base64 ICANCkRlYXIgYWxsLA0KR29vZCBtb3JuaW5nLCBhZnRlcm5vb24gb3IgZXZlbmluZyENCldlIGhh dmUgc3VibWl0dGVkIGEgZHJhZnQgJ2RyYWZ0LWRhaS1xdWljLW5ldGNvbmYtMDAnIHdoaWNoIGlz IGFib3V0ICd1c2luZw0KbmV0Y29uZiBvdmVyIFFVSUMgY29ubmVjdGlvbnMnLCBpZiB5b3UgaGF2 ZSBhbnkgY29tbWVudHMsIHBsZWFzZSBsZXQgdXMga25vdy4NClRoYW5rIHlvdSB2ZXJ5IG11Y2gh DQpCZXN0IHJlZ2FyZHMhDQoNCg0KDQoNCiBEYXZpZCBEYWkNCkNoaW5hIEluZm9ybWF0aW9uIENv bW11bmljYXRpb24gVGVjaG5vbG9naWVzIEdyb3VwDQpBZGRyOiBHYW94aW4gUm9hZCA0dGggNiMs IFd1aGFuLCBIdWJlaSwgQ2hpbmENClRlbDogICs4NiAyNy04NzY5MzQ0Mi04MzE4DQpNT2JpbGU6 ICs4NiAxNTM3NzA2NTgxMg0KRmF4OiAgKzg2IDI3LTg3NjkzNzg0DQpFLW1haWw6IGRqeUBmaWJl cmhvbWUuY29tDQoNCiA= ------=_002_NextPart332684383730_=---- Content-Type: text/html; charset="gb2312" Content-Transfer-Encoding: quoted-printable
3D""    
Dear all,
Good morning, afternoon or evening!
We have submitted a draft 'draft-dai-quic-netconf-00'=20 which is about 'using
netconf over QUIC connections', if you have any comments,= =20 please let us know.
Thank you very much!
Best regards!
 
 David=20 Dai
China Information Communication Technologies=20 Group
Addr: Gaoxin Road 4th 6#, Wuhan, Hubei,=20 China
Tel:  +86 27-87693442-8318
MObile: +86=20 15377065812
Fax:  +86 27-87693784
E-mail: djy@fiberhome.com
3D""=20   3D""=20 ------=_002_NextPart332684383730_=------ ------=_001_NextPart260342025263_=---- Content-Type: image/gif; name="spacer(07-12-14-(07-12-17-18-36).gif" Content-Transfer-Encoding: base64 Content-ID: <_Foxmail.0@21BBC190-3DE5-4F41-A6C7-435CBF4B7EC3> R0lGODlhAQABAPAAAAAAAP///yH5BAEAAAEALAAAAAABAAEAAAICTAEAOw== ------=_001_NextPart260342025263_=---- Content-Type: image/jpeg; name="tl(07-12-14-33-2(07-12-17-18-36).jpg" Content-Transfer-Encoding: base64 Content-ID: <_Foxmail.1@081FF9A4-EC6E-42F6-9509-5F7CB7277FB0> /9j/4AAQSkZJRgABAgAAZABkAAD/7AARRHVja3kAAQAEAAAAUAAA/+4ADkFkb2JlAGTAAAAAAf/b AIQAAgICAgICAgICAgMCAgIDBAMCAgMEBQQEBAQEBQYFBQUFBQUGBgcHCAcHBgkJCgoJCQwMDAwM DAwMDAwMDAwMDAEDAwMFBAUJBgYJDQsJCw0PDg4ODg8PDAwMDAwPDwwMDAwMDA8MDAwMDAwMDAwM DAwMDAwMDAwMDAwMDAwMDAwM/8AAEQgAeAEXAwERAAIRAQMRAf/EAaIAAAAHAQEBAQEAAAAAAAAA AAQFAwIGAQAHCAkKCwEAAgIDAQEBAQEAAAAAAAAAAQACAwQFBgcICQoLEAACAQMDAgQCBgcDBAIG AnMBAgMRBAAFIRIxQVEGE2EicYEUMpGhBxWxQiPBUtHhMxZi8CRygvElQzRTkqKyY3PCNUQnk6Oz NhdUZHTD0uIIJoMJChgZhJRFRqS0VtNVKBry4/PE1OT0ZXWFlaW1xdXl9WZ2hpamtsbW5vY3R1dn d4eXp7fH1+f3OEhYaHiImKi4yNjo+Ck5SVlpeYmZqbnJ2en5KjpKWmp6ipqqusra6voRAAICAQID BQUEBQYECAMDbQEAAhEDBCESMUEFURNhIgZxgZEyobHwFMHR4SNCFVJicvEzJDRDghaSUyWiY7LC B3PSNeJEgxdUkwgJChgZJjZFGidkdFU38qOzwygp0+PzhJSktMTU5PRldYWVpbXF1eX1RlZmdoaW prbG1ub2R1dnd4eXp7fH1+f3OEhYaHiImKi4yNjo+DlJWWl5iZmpucnZ6fkqOkpaanqKmqq6ytrq +v/aAAwDAQACEQMRAD8A9FWtxNfaV6puSbe0topLqaoSNpZFq45Hx6fLPLiH04FJ7eG+uoHkmmiE krEyRu3FYlSiqsP+QB06YCkKVtot3qUdojanJpsVzcNbtDDETEx4lg/JzvyUU64IkFMgXq+n6bHo 1hDaLL6iWyhBMVCMVHTlTrjS2+fvzL8+LZa1p2m26NqSRy8r/TYxyEsZBCq1AenWnfM3FChaMURM knkgF1jz9qJa70zQbXT7Wyj4w2VyzO7VoQwA4DpsB0yxy2Hi881ecdWfy7q0cMMEMyHVWtUAVvT3 oWJYBvAbePbFWY2Xr6Zp+q+Vrm0N3JYuz6OsgDqkDjlGag9VPjuT94I5tObLwDbmmt55fggtoIdS 1Ei4f4ru4DmNZzXlLz6VGwAA6KAOmJNs8cOEb8+rwEWjTeZ7ux0GSO3hN3O8U6OzRpAqDkyyA+++ 9MQylyfQHmrT21SztdQ02ZoliCjUACArQdHrUHdRvlcNti4GHLwnyeUeb7HStGj1FIYvXnvlSSyv 5W9WZKMVaPrspoaEjcZN2Fsc1Ty7eaFDot5ZyzG5ltVvhdKCfQblWh22AJAPh1xQQCKL6D8va/ee cNB08X92qyuh9S2FFQsOSMsnEmnKg6e+YWWFScUFNNJubT6hPpzRiezt3kguVWUSkgmoZeNT9o0p Xam3bBI0bej7PAyafhkNtwlun21zqms3fl+/1CKO3tTGIJJFVhIgAb4Y1A3FaNUjcGm2SIEhYdHq tNLTyo/T0L37SrCOytILRGDpGo+JUWMUA2AVQABkacZNAgb7PUdCSaVw0i1sv7tHYnYfa3ONIt8i ed9TksfMdhrsIji0tL5UeERhV9IcgxJGzchUnwy2BHFTvBo/8CN8z6vx8PtemancWmu2dpZw2CGS payt7ahZ1WgDtt8Cjap+jeuThilKVB52WSMY2VDT/IL2dza6pexWhmC1WDj6oCkV+wKA1982MIiA oW6+UjI2aZw2uabql3L5ftVWW90wW0+pqoIKLcB/TDUFAaKWp1pQ9CMK2nGrov6No5+rQQRFYCh+ 1Q1pv8sCWGRQ3M2nrPZatLp0yVDMaSRgqTReB7HoenzGC00wm487XELXdjr9isNwFJimtJV9KZSP 7xfUKFf9Wpp+OAgDdMSbqnjGuxrrKwC002X6zHMfUvJQoQRlqtyNfi5DpxB38MxdRmxGJBNnpXe7 Xs/BqYTEoiged93u5+5h83lPhdScohxSjkAVIV96DNTxvS0pDyvcJPK1kwQFRSJhyBr0GPGtK409 EjlF7EYrlB6bCnwU7cT74OJKW3NlYpSOOsswAoEHI1HyyQJLEyAfX/5W6l53byjpXl3ypo1taxWw kE2varKVhQySNIfTto/3khBbapQe+bnEJCIFVtzP6uf3PJak45ZJTMrs8o7/ADPL5W9hsfyis7+7 g1bzrqE3nHUYWWS3jvgBZQMP2obJf3YPu3JvfLBCtybLjyzmuGA4R9p955/oetxafbQKBGoUgAKd +3h4fRhItpBV6DrUg/TT78CXx/5+up/JcWlpa+W59U8sWkDrfT2rN60UlQEbiv2iwrXlsfEd9dCI LuIREh9VHzSPyf5o8vayFu9CuFW5u1Esum3SmK6FR+1E5NaU3K1GWTgORaTCcKJGxZn5i8zraW2l rdj0VF4rep0FY1ZggAHcVyo4u5Iyd67zr51s9N0hWguozNfKq2Sl1ALyU4/aZQQOQ79aDDix77pv jNB4Fpdl9VjmuLJV1TVbieN7363Xm5MjcpHbenw9KbZkudGPCKCL8yeata06NNKeOCC41ZGjs5bS clEBIUF9gy8Sdjtikmk68meXtb0N9Tg5RX9vPCkqTyj4frTIWkY0FWUEUrXr9+RlMRaJ5qNBGCaa 31U24t5br0x6l9MrKWkkQiQoAKdKdfCgyOMmRtoiOKYtjl3pd1r1vaXfm3UCNMpLPa6ZATF8G5UT sWqaJ2Ay1znzz560290y0XU9F52/lnU79YdOnV/70rESzA0BMYYdehPjTLYAXTXOxHjrYPq3yjqR udKtraQiRJIme5UbueIqqqp2NaGuYupHDJ1mmNxYh5o0FL6WTV7WNru1tJIpJwV4RPCjFljWR/h2 qwoPuwYsl7Fyoz8M30pW806hf2eh3v1OyUQXEap9YJ2ijmNKrSm1dwN6d8tc1OvyrEUWjG3nFqou KXbSXEgRGSQhaU5CpWgFP9vKM8b3caYMZe9Ei6h0LzTc2ttLGlnfuktY2qvqsOPy34ZTPkHedjzv HIdx+8IqxtZdW1rU7uGdomgYrayooP2agMDWlV9shGXCbdlmwxywMZci9k0DX5w0dhqIHqfYS8Uj 03NK7DkSD7HLdpbh5bVaOemO+8ehZ9Egb4/V234L12+eABxCUg80X4tNP9OKRFub2RYYGNK/H9oj 3VATkxQFtmnwnNkjAdefu6vlf8wLJF/R9ot2ZbOeUqyTGqxr8K1r4b0yoHe3szEVw9HqX5Z29vDo 0tbjlMGaI3QBIk4EotD1oKfL9Z3MB6Qe9841MeDLKF3wkhkmranNZwx2duBdXl0WWytyaqvGgLsR Q8VB+k7e4ZSAFlqAJNBV8i6FFpUOo3swabUdTnkmu7xgKvIrFKE/7En6fDESsJqix7znfajq+lXt 1ZjjFohSaOMNT1XicM4BHYqCvyOEHdB5MOufM9vp1hdlVY2wYv6v7SA9Ay+3fABZSTsx42cd3DZ3 vp8Lq7gWS4Wc1eMsKmtdwPbtnO6jLKUyOKxb2OkxRhjiRERJG/45om100yLGdjybiWHQU7/TlHE5 SkdKW3v1aRvWWcFX5U6oKjjjaqUzaRp8by3dxb21FIRGcA+PTCLPJBkI7lhN35l0to2tNMtZNTuJ WLSFVrECfEt4dMuGGQFy297QdTEmo2fd+titlomp3BvZkU2kbyVlt06hv5Rkp5Iiq3phjhM2TsD0 e0flfqH+Fda0mLTNRuBNf3EceraZcsTC8bkKWRTtzHYjf6Nst0uqmJiPQmq97ja/RY5YpSr1AE37 n6FQgvBE3dgKt1Ob2nlLXPEWUcqca9Ke+RItIKxY3FQaGp4hSegpjSbfP2tyx3fl7ULVuDXRCRce Q5fFIqhuR8K1r9Oamna28/tPKflrzlbS6drtosmp2BZRq9uWtrgOh/37GQSVqKV2wxmQ2RnKPJ5b 578t+cvKkumxXXmlfMvlhpz6LX0IGo2q0pRpIx6c6n+ZlUg96ZkxlCQ2FH7GkxMp7kAHyeV6loV9 5jSDTrl57tl4NpsCRs0MkSOsgaFwaU+ErU0GXxIbThGEWd/N6FD5L1m6tfrCzXFjeJw9dopODMqE CgiT4Nh775USOinVnoGfeWfLHl6NrnzFcq3mJ7mJYpp7gqZUFaMVBCqK1FKAdMolkkOTEyM+ZejW 9t9RstNDzieNILeOWh3qP3bK58Qu9MoNkpFB4/FPfWHnKWKGS2a1WCcXt1LXkBGxpRl2JLKNj0Ar XxysI9KcRPibcqS60t4vPV0L+WI23lPSZZEpGSrX92TSSNTsTEv7ZH2j8P8ANS0+n3uwxY/ENnkk v5www6/5YfTtOsCZtKkguLS3A4vwAKsIkHUgH7IGRgaNuVkgJRIQP5aeddMhZ4p0SzDqizS6gCjf 6qgqVFakZPVYzIvK6eYjs9zbVPL88CSTzR3bR1ZVDK3pDqAvOooB/KMw44pOXLLF8/ec9S0t7hrZ LuWLS7mQUh+EhWFaNU1oCQKAdMzseKUhujHqxA8KfflX5g01Z9Ka7t7WOWy5WryuoMqxl6I+9Tvs dun3nI5cREabpzjMcXUPaPPuiprclqbVoyJoS8VwrKKMm6f7E8iCMwJDZ23Y0zxyiKo/P+xhXlXV Iba0m0mdGF7bTt9YUbIFVxVqj3rXKnoWR6vMLzXNDsbLjDcLMLt3jahYKKcWp/MKjJRmYnZp1Gnh njwz5WD8ntHlfUGuobi3vQFvbNzHKniV6EexFCPY5kkA0R1eLzQOLJKB6H7OjA/N1hd+Y75JLO6M MmnM/wBSp9nmuzMfDfb5fPKcprZ6DsbTcMPEPOXL3ft/U8k19r7Ur/RtN1PTwt7BMy3iKAFkBIoV JrXYbg5WHdMr8sw6n9a1DylpTFfQnV59S4qOCS/vvTRNxUBgKnt2r03EMv7qJ+HyeA7S0/h6ucQe Zv8A029PaNI8lWemF7mYfWbuapluJd2Jp4n8MxckzJhjgIsA1q4vNGm1K2guJYxM6tbwsPhKTD4u BP8AlA5k4jcQ0ZBUiwjXvNFtpOkTWSx/6TdRmIoDQkyAryauwAr3OM8kMe8jTLFgyZdoC/u+bzq+ 1PTbm8j1CW/t7ZXRawo4YOU3DMPEU22/hmqz6ucxwwBA+13uk7Px4jx5CDL7B+tSv/M2lVgW1u5L gx/A5jjLKR1pU03zB8KXc7TxY96BPnPVoLOWPTtOAiWXm1zJ8XA9KcV/icnHHHqWEssq9IS+eDzP cpHJqGoyWtpeTBjL/dxRuwAHJt+IIO2+ESgOQtiY5D9Uq9zP9P8Ayq06sZ1a8e/vphWCEfYO1ftb lgcj48uQ2Zfl48zv72RDRLPToZLe2tIFEbrHxUBeJp1OVE3zbgANgxb6uILmSIis0sjEEmg9qYEq CQXMc11flDFLAy+g/QqYzyUr71GSjIxII5hjOAnExPIin6E+TtTj1zy9pWpxrte20U4p29RA1CfY nOtieICQ6vAziYSMTzBr5MikDpsUFD1k7be2JFIBtQ9Bj9lz8JqzD+mR4U8T4s8vXN09mi6ppzvE F4wO+3EMaqsleqnse3yzVyjRdpGVt61riaRbXUsYS1nsw7xwAskgMooDJ2oCDXBGBKTMBSfXbDzt FoGoTRpJDbiWDVrJkDBZxEJFkCNWqk9/6ZKUDjKQb5se1myjsbSWS1tYbfTriRCtuYwSXG6txoKH iRuN8YykSmOQ4xsf1PR9YsZ9M0ycXGntq1vwXlZxsom4tx5Acj1UHuSDTqMsjvyZyGPJ/RP2fseV Wmv6PpAMEGpxppsCO4jvXEMsFG/u5FfiHHxUDKSpp1x8IyaZxliO4ZpaecdB13TFWzvIJTJG8UPo yJJ++RSycGU7k0NMhPDIFEcgLz/zB5Ystdvru7uJjb6cJFa6a2WkrieNZWjVzUKtGDMaf5I75bA8 Ic3SYJZCTdR+9F21za20a2mngWenWEfp2doBSFUQfsk71779T74CbdvGIiKDBNb1RLme1eIFp+Zr zoFJUbEUwMkDcw6bDb/Ub7TJ73V9WpJpsQcC1Ikf+8Y1rQe1O5yzxZVThT7PwSlxGO58ynGhQaLp g1OO71C3vdZtyY4bCdTPbKAOTBORIqpBBrgMz3tsNJijyiEw1rUpLqx0+xubmO2vbh/TbS44U+qT q3976isACAuwyNlu4RVVs8sstJPlbUhDNqUdzY/WKGNWpNwTdPU4kknp23pmb4sJjfYvPZ9Dnx3w i4+XP4vVLrX9Dl0iQ2Rkj1S2UOt0k781dfFFYAmm1COmU/l7BrdpwaqWDLEyuJBYbN5lt9Plh1Rb 1rkXz/6TIxoWYjcH2NDmDLBIPaw1kDu9A8qeYbPV9dk1OKY2r2yIsSUDAgihVif2qb5UcUg3xzxP V6lb+arC08wlrdyYJ7YpfFq0WdasoJPQ0r9FMyNMLuJdD27jjwxyjnyP6Px5sgt75NMnWK5dra3n 4mTUJxRPUC7qvLxOYkjZJd/hx+HjjHuADBvOyXdxrukjS5qTmNmtnZKULsamtKUpv7YG1lH5aaHe adr16Lqdru4ljieR9+Bb4qcSeoA2J8flmbijeP4vJdty/wAIAqvTz7/7H0G8JLASAAUqSen+e2Ex 3dSJPKPzP0q2bTF1fmok05xM7Bqfu+j19gN/oy7FsWvJvT4582+Z/KL3ll64nvvSkrP9UXkSnE0X kSqmppTJTGM/UN/tc7S6PVTFw2j58vt+fufRHlr8lvKnmHRLDVDY3GmyXVvHLJaiduac1DFGIqKi u9MpOCA5j7S1nV5RIgSsd9AX9icX35BaVFbvLplxLHJGPhDkSDpX9pcj+UxS6fayHaWePUfIfoeI X5PlqDVNLvYl/wBxZZbxoYmfkNiG4qGbcEbds1+XSHxDGFl3WDXROEZMpEb/ABt1T/yv5Z1fzH5e TVoZIh5evYSzW8xP72NwaErT4R8zUeGZGPsyRoyNe7dws/beMWIxJ9+360p0TWJNLjs9Nt75xY+u JrP1qStax1+KNZNiVND16ZgZB6j18+93GH6AeVjl3eTJtR1KOuqz8vU/fM/EePUAHIcLbSV+WtFu fNetRaVA3C9nlDSEDl6UI+J3p7DYe9MyNLp/GyCPTr7nD12qGmxGfXkPe9V86/kbrAsw+h3jXjrC wNrcn0yxXfZ1FK1oACPpzaZuyonfGaPcXRabt2Q2zCx3jn8nqP5B6heL5S/w/q9nJYaz5Yneyv7K ZSrip9WIgd1KtsRsabZm6Wxj4Zc47Ot14HimcTcZbj9P2vd/SNSWb4VFCPnl9OHaz0wrUbka9GA6 A9N8FJt8N3Hm2xtNPhj0m6gvzGpR7Zfi4gCtGWlY9voPhXMCOG+bsuPoHkuvXV5qfCa9lQw8yLaz BYcFPSnTkPnX6MyIwEeTOI72KiW8tz6treLawxFeUAH21ToTxO2xNfbBKAlzZGJJsGlXVfPWu3tr 9Vljtvq8J5LKgdiABQbllr23AyAwRDLwyerC/Mf5heeNQSJxr94kHp+kEg/cmgpUF4wpPQV3yyMA GYxR97FNHm13W72HQtOspPMFxqblpdHnBlVyftHmxJjIHxFhSnU4yj1cgZhjjXTuez+VPKOj+StU uZL7SHsNX1SMCyupJebQOQGe3CkKTQrXb4jQEAitKZTJFNWSAzb4+f8AN6/DvRF95iu7dNWh08Sa lbwFFNwgY8Sw4jlTpxAHUdsrmKpz+zZA4yOoJtJE1mPjHErD90vx82BLN40WtPppkHYMZ1JXv5S8 Us/qRhlMcQCkb9R9rr0xVLAl+0ME9y07QWj/AFUOWlJgU1JWvwjoSaYqzl/IdzFYaldpqEc1v9W+ sWksMjutxVfjBIeobfauKpb5dstD1R4I9QlcahBX1Y7lyUKKKfCT4jbjWoxVktx5EtY7+V4lllsb sfEw+I24VSSTWhoxNB3HuMVZHo/k61fSJkstLt9R1BbiiX1yaLwViPiLcuwqwAwgkcmMoCQoiwrS +RPIGl2txZ+aLi1uJmZy1y0rWjMXHLhFBBIKBQaAKK5PxJNfg4xQqmFLo2gadNO/lu6vbK2Xh9XN 56kqzMwH92gj5qK0ALP9AyJyjrTMYCOVs48v+U9Wi0S/+uPMJ5ryCcyS8AzKsyF2REdyAVLL8Rrk YZRGd+/7k6rSyyYSD3j7w99v5NNEIt9Wtz6F2awtNRlZiNgD+zQZgO7eX3Edtp3maGDTtUma3tY1 9O5nYEISCSnJtuNT2xUmnq/lS50/R5rvX764EFlKgWz9U0ZwtNwOpLMWI2rTNpDH4cAJe8vDa7Od bqT4YsDYV1r9v2MB/MP85vMFgks2g2Z+pcSFnjRZpVr0bdgF+45UMwlKhXvLssfYohASy2T1Efx8 6/a+WfN/5uX2vQwW2oXOrXsMBLNBO6RoWPQlVoCV3pUbZZ4GSQqw5OKek08uKMDf3e6ylHkG0Pnr XrHRdOsJvTLiTUpZSCI4w1PhK7gkbCnfGGlPF6uSdd2xHHgJhYkdhy59/wAH6v8Al3RI9J0e2tUi UCKJQAOwC9Poy6UbeQjKmQpbI6gMnahGMYolJLZfLmlyFvVjhWSUfFz4g77V7V6d8kNurE79Hmv5 k+XG0/yNrth5aSOzVrScxemKIK1eSlKCrVbp3yUgZRIj3JwyjHJEzG1iw/PO11QXVxHYieS0ngiK mdKHcjqAdjX3zneF74C9mSND5gv3aOy1BXQANPIsLM9CKMSq7YY4zLkCWOScYVxSAvv2fbH/ADj7 5CutPsX8xarGW1G/hihhlkjKSC3QluTKehkJ/wCBC5vOz9OccLPM/c8h21rBlyiETcY/aev6vm+o XgSQGOVAwIPuM2FOktRh06GFjIqgSOoDNTem9Pn1OGltEsoHElTUdK99sSFtd6ZO5IYjoB0Bxpbf mJJqGmepdPZCNryZXDwOnwFWJFVII4mtCQf1bZi07YEcmMzapBagmR1cCpQkcmrUVK9D18catnxA MJnvpJ7o3iULhy0oPwxry67DoMJjSYzvkoXls0cUTFoxDNUwvGaHYklSadidxkW4FIHtZfWEPoSy CcitBTcmgoPiOBmJU+6fyn/LDS/IehLqd2kZ1e7hD6lemlUA+IRK5H2V7nud/ADGyS4jQ5OLKfEb Lzf81dY07zRFLaGFY1PKOznVaTsB1PP9kHsOvyyMZcPJ2eHs7iAlMkHy2eFW0y2FhLpmpW6SCYpH HdVpK6BfgWRkpXjx+EkGm/icBkTs7OOKMTfXv7/ekbySaZO0cKevaSGqycayKpP7QGxoe4/DItj0 nygkUdnquvvS05W8kdswdQJOFGZxyHUU264qmuk6TZ33l+7ubtJtMS7maS5uXkIjl9RaBlQL07U2 xVLdKVtI068hIa8060Q3aWrxlbhImNQGJIABoTiqD1bUfKFrdS63rzRRWElpGkZlQ0ToFDcR8R3o CDkoxMjQYymIC5GgyrS9Q0S48nw+a4dXFl5cmh5vKoeSUgP6XDcAK4K8ab74yiYmjzRCcZxEomwU oH5kvqph0byDYjTbCACKfVrhVVo6ip9CIgjY92r3275GRERZbceOUzQ5J1a6JpsVtHcand8dXkY3 Dajy5TPLXaR3cVbcDrtTbKY55A+Xc5eXQY8kQOUhuD1B7/2dUv13ULfV5NO+r2ySS26MlyygqrqD 8RWu5BpUb7ZTKr25ORDi4RxVfkyryxq8mpT2Giagwa3tjzS4RjzmVq8eVCNqGpyLN6ReeavLcFv9 Rlt21KGOJkV2PUqSOJruN++RS8kje1utct5I7ECzM7zegSSkSVoiGvau/wDZmVpZQgTOXTkPN1fa mLNniMOPYS+o90R+vu970dVg1ER/pd45Wl5+hLXjHBH4cex28fnleXNLIbLkaLQ4tLHhgN+p6liW vafFpksaR8jYsym6K0Pwk1Xi3XfKw5jzu70HT9e1GO0tNHgv57h/StAY/iU89y7CldvwzIwRlOXD E04euz4sGI5Ji6936X2X+Un5Uab5S0uOU6fDFeOecxjQJyY9x7DoM24HDGvwXz3Uag58hmdr5DoB 3PchY+pVXJCoPhiBI38dvDtg8O2vjpebQRlml4OgSvIkqQB49jjwVzRx3ybjjhnkkeMLIQ2wcEAg fDsSpriACdkEkB5N+dupWvl7yD5l1S6lhskg06f09+K+o6lEBag3LsABTrkzDhBl3BOH95ljDvIf nD+Tf5YeYfzT8wu2ks1jpdkQusay4rHEDQ8Ix+3IR0A+Zpmq0+kOY9w73s+0e0oaOPfM8h+k+X3v 1a8k/ll5d8k6VBZaZZqAgBubmQhpp27vJJ3NenbsKZu8eKOMVEbPD6jUz1EzLIbJ+z3PRobWKNaw H04j9oLtuOg6ZZV7uPdKiU4sS1VWtFJ3r1piFLlR34sACjCtDUHttUe2NEraoYvs0SpGyjYGh696 HDwo4lMQuByBIqSOJpvvjwp4nwfD+TPlGK6huQupzWzRCb057hUjYgVoxVFYD2zFOWRFO1jiiDal qv5ceSru1kuX0z6kkyF4JYbiX1AEB+IFiymtO4yAkRybTES5vOdQ8k+X9CWKNGkuY7krJJDI3KQ8 QSoHADrvXAZEtkYgckgvtPFuolWzgsbCUlD6lW9OvccqmpA7ZFtBSPy3qGnW3mG0t72IRQxSchcy 8QpkNAhav2QvWvtgIsMMpPDQfUP5p+cY9M0ey0/TOLNeQrPfSO3wrbLtvXrzINB7ZjkcIcjs/D4s +I8o/e+WdMuE124vZ7tfQjQcreIk0/2PbbauVO/Y15hliaciLl9qICu1fTO/EdO/fFWVx+TzrumX Gqywy6LHYWwNm7MytLJTkxAYbqw6AYqwuTTtU0CXQp9Xs1l0lpFuDEjB4JFk+EjfZGoKkdD44q9J l8yah5qe80ryxp8Z0yGJre4kumEaRHY1CqQa06CuKqkvlnzLfek2qaopt1hANtbKYVk4jdJTvyH6 8VWXHkm3ayu4ltoD68Usltayj1P9ISMlFUNsOg/z2yUasXya8pkIEx+qjXv6PONL/L25sIns7G8m udKluWuW0eSVo4klIoxSJSsddqUoKZsNRpzPeJ3/AB1ee7P7XjhPBmjtfTp/m/q+SY2/l/WdG1WW Qafc2tvIQ8d0sBaFWP8AMVHHrXvmryYMg5h6vT9p6Sf0zA9+330ylboa3cJZC2DfUTwnmhZSZK9e IpSlf15jEEc3ZRkJiwbZRqWsQWcCWFnCl3NBH6ExK/YBA5Dah7dsjTIsNtpHFykJcrcRMXtpQaVr 9pQR94wMWZXmoc7GC2SKOseySAfFIW7k99+5wJTnTLW3b1JpZHjSAIhY7AlBuSab98QLQSALKcvK l2LeLQ4/0zKj0nhtv3sfT9p1JUfInMmOizS/hPx2+91uXtnR4+eQfD1f7m0ZZfln5t8x3qi8s3sb aU1ZXNeIrtxVaj7yMysfZkr9ZoeTqtV7T4gKwxMj3nYfr+59KeRvyj0XyxGkjxK95QepNJ8TsT4t 7+A2zaQhHGOGIoPJajVZdRLjyEk/YPcOj1o2HABY41pyp06Dr0+jAcbWJqxT0mRJFosrBUI3oT2N O1cJFc2N2qm0DALx4hTRnIqPbrkuBHGrLZ+kFK8pTSnxAGg60rkhjpiZ2+GP+chfKHnz88fNmlfl L5ftrnQ/J1jLDqf5gecZonFv6ZPKCztmaizSftkLsp48iKEYJgyPDW3UubpZxwQ8YkGXKMevmT3f pfXP5cflv5f/AC48q6f5a8u6cLXTdLiCLy3eViByllc7szncnLIwAFAbODlzSyz4pGyWeLaueMYX ZNye9KbEV2Hh3OPAWHEilijRTRWX4dySST9+ToBjZK70ULgrHuN2p1NRjwo4mhb/AAmigMa0B6+9 cPCvEuMZXjUU2+z7Y0trPToSxA3oB3ONLb5RvtUt00q9ubqVYhAZIpmU0YSJsOCHcgmmax3ryG98 w6zq1tBZ6fb/AFKCaAxzzvReQQAFYz0qBU++LIFLH8vJpkTQxuk1xcyK9pM4rJHuKHr4V3A3wMgw PWNMvNb1BYIPXnvZSRCkFZCdqV4ICCD3NMICZTEdyi4vy582eW0t/MXmLy6Z7azUSSof3kYWOrUl ArReOxofpIwkONLUGWwYh5r1nV/NOpXsKxc7GeUSvbIivJAqj+7VhT7Kj6euYM5WXqtJg8HGI9ev vR9iPL9tptk/6QaBowaRTGoKVJao2NT3yDkvPNSe6lkj1W3sx9UtJAi3qqSjSBgymh69ACOnjir6 Jszqd3ZMNX1Cy1S1dI6iJBVCAGICozLUVoMVYd550611LWfLmjTOLjT/AFpbm906MEEqiEciFAqK 0riryjVbG40nzHfr5YkFmLW3WbgJKh0qOUTL0I5UHE/firMdL8xeYvNNzc6RHd23l64WJUvklb98 9erQqwAFOh/DFWSnybrEj2s0nmu4mmjLqF24KGI5cSACTVQcVQ8PlrWdNaR4dUjnWFxwjmTafmeT EyA8uQJO5B2pmRh1Bx7cw63Xdm49SL5S7/1sji/N3y/5LlubHzFdW73NoQJbBCJZiCoZSsaVYhga g0+dM2IMJR4gdnl5aTPDL4Rjv9ld9pHq/wCe3lrzLCItB8o26M2y3eoFQ48SI0/5rzAy6vh2Av3v Q6LsCUvVOdf1efz/AGFgcE9wbqSVgy+r8XFAQhLDtx2zX5Mxnzr4APTabRwwfSZH3yJ+y6+xGzTW 9EKgxSKVZT4FevhtlDlsztDBqNv9ZjAV4AZDGK0SRBUjwoTuN98sGCco8QBpx563DDIMcpgSPIWn WjTS30C28UbI4r+11PvTKXJZxo9nf6ZcRX8FzLb3IFJkQCrb9SpqGoPHL8WpyYvpO3d0cDV9m6fV f3kRffyPzej6T+fNjpOrRaXrNp61kp9N9bt1qiSd0ZO/EH4mTv0GbTD2jCZAmKPf0eV1vs1kxgyw niHd1/afk+ndFvtN1+0ttR026ju7SZeSSRMGVvkR4U6HNkICVEGw8zMygTGQII72RCFFBLMANhv2 OWcNNXEoz2ZkaMqxHAniBuC1RvkZY7THJSollVfsgL3Hc09/owjGgzRa2nRd+NaMC3Y/rywQYGan HY28bVjj6Gh5EkfIVr1w8KLRbQRxLxVOKgVCitO2ExAQJWiGhkAoqAAjbbp9GSoseILRCNw9KA9c HD3p4kHcnhLAEBCNIA7EEbENSn3ZCexDOO4KuYywDAElP2XHX/ayVMbdHG7MHlIqTsAOn04gd6kj oqfVVdubN8KmqoOhI3qflh4LRxvzy/w1d6zZfpW51VLm7nIlEZX92snQI244/QBmneiTGS8tpNKu LLV4AHtmRrj0wAiK3wiT1AQOoqTtiqSppcOrT6TH9cjNtclUkkkLB1bjz5MSdqj7PiT9GSjG2OTJ wC30p5U8j6JocQeyiieVlrNJTk8hG9Wc0J+Q2HhkuEuGcl82J/nVrDaN5UjgjjuJJdauF0+C3soz NcSMySTenFEASzSCLjTwJyrJdbczs52gjE5bl9Mdz8P2vlfSvyT/ADo19GvoLPQ/J6SqQsWoTTXd 8A+9ZBbqIlJ8AxwR0sep+Tn5e296hH5sT81eUPN/5f8AraR5ytrHU7y/hKaVqtijx2xjakbBQ7Fu aVFRTvlGbFwHbk7DQa0amJ/nDn+LKJ1DSbTSfI6/phUitbSForWxWoc3M3FgVKkk/EDscodgr+RN N0vVdDgvIbZtP1KAm3lvImMO0RozcQxqzKQDUVxVmQsIrmS0vb2b0P0bzTT5LagY8xxNSwJPIUNM VYHq9hDbeeNNu5bX0Yr6wmQ1AkMjR0qSqDZqeOKsc846ZYi30+SBTbXS3yquoAcZUSQgFmIIIptQ HwxVVtfMOoaPN+j/ADUstzYaeHa11SNCTIVB4h6Hw/zpirN4dU806zDbyWWkw6dY3aMUuLiZWLod 1PBBsaDxxV8o/mzZ2EH5pepHBJZzvBbz6rEJC6vOyneIncIY+IIPevQZmQyEYqcCWnjPUCfKq+LI dMsrV1j9KIRoi/FQVJPv4ZrJEkvSQiANno1hbgwhlSgBARt6DbwGVtnJNjCzBFiMkty4I48jxFRS pr4YFfSv5aaWmkeVLPXri2F1aw3UkXmVWUORbSNxMy13/dfCxH8nLvTOi0xrFDJ5UfdfP4fdb5z2 nDj1eXAeZPFH+sQDw/5w2/rCL0bV/wAkgxbWPJc6WSzfE9kw5wVbccCN0Hfbbwpg1HZkMhsek/Yu g9pc+mHBMccelmiPjvfx+bHW/Kj8yryKWCeaztI5kMZkt0lMm/Wrt0qOwA+eY47F/p/Z+12B9sR0 xf7L9ia6N/zjM7tE+sX7TLUNJHGoiWlKU2qw7dDXMrH2Rhid7P3fj4utz+1WryAiAjH3bn7dvsfU PlXypbeWtPtdNsFWK3hACxAAcQP65sIwqgNg8/kymZMpGyygWSfGaFzI1eO37Ph7ZLwww4yva2kC mPZCu4NPv/Xh4eiOJc1tIyBRRWP7K7iuExJC8W6mbaVkCEBfTCsQo6n55HgKeINypJHG8kMQaRDU fEKFT1I260xII5IBBO7aQyF1eR0JUECMAkVHvsScRE9VMu5UX1GKMKVGzVNdj1O+S3Rs2oLg0oVB o6jv/mMeaqc8So9u8r8Eik58m6VAoKmlB174JRqiUxN3SsEBRmV1CsKl1oajxw0xtQjVmPHkwBJZ VNa7fP54AGRKuyGgaj1rtQ/ryVMbfAN/qXlv60J7adY3t2Mz+m9EmINBzX25HtmjemSC8l03zHFf QRoZLeSFmuOAaNSQu7BxvsdiPAYQaUi0jWaUwILTk8B9MPIxp6nFACCWNTttT2wKzry/5+13y/GF jRbqyhkCvYTE80AoG9OSuyjrvWnTLY5a5tE9MJGxs+lNG1vSfMdjbalaXENxUckViKq1CCp/lYVo ctMTVhwro0WWraqkYCihoNj448CON86/85E2FmvlvRNUuwALHVImFwVDsiujjZSRWpVajwzH1MfR bt+xslaiu8H9f6HyhBd6X5r84SzLIb7RNDhjZIC3GM3bVrIIzQniBT2zWvWsUtYbK6846/ZWur3V lLdkT6e1k1AshNJEZQSjVHc4qyRbTzDpt3pdjq2qJNo73khjvlAWcMAWRZKUpyIoOvhXFWK+ZNW0 1NY1bT7plfzDbss0aNKyraJIv7tCQaBnFGYKdxv4jDSLF0s1qxj1jQ5ry3V/rVtGs5hRmIV0BPwj ep28MCWW6FNb63pVpeyMrmW3pcWbgMaKvCQgbe+36sVY4YtS0C2+taPdST6IbiYSaNLsyqDxrC29 CTuBiryn859H+ux6J5y0yCVrqLjp2twupEsQkcm2kdd/22KH3K5k4PV6XFzngPH06pl+Wuk69r0h 0q10yee+VU9aLjQKWXkvMtQCoNd8hPQZTPhAbsfbulhhE5T2PLvNbbD9PJ9WP+TGqaL5N1PXNdm4 PZ24ktrOMGgPIKCxNK9f9vMuGhGnhKZNyANdwdJm7eOvzwwQBjjMgD3yF8jXIeQ597AdM09klikZ fUZv7wv2p03zRPdU+6vyd8rlPKDxXlv+6vechjdd+MpY8W/2JGddpsJx4oxl3bvkPaerGfVZMsDs Tsfdy+5knk5pPL19c+UdRlPo2J56PM5JMtoT+7Wu5rF9k+1MOKPCTjPTl5x/Zy+XejVnxIjURH1b S8p9fhL6h8R0ewmBmjAiqi/DwHSoPWlfnl5iejgCQ6phHEWMYZTRm41PXoT0HyywRayVVrZSSDyB Fdx2w8COJTaP0fSaNTUVDMBUnlSpNSN9sBFclu1NhzHMFkNCADt1FMB3SDSvHbuoA5fCDUeND0H0 ZIRKDIKnoGnxAkNuWBofuw8KOJTdYlZVClpHNOPah+1X6MBASCVqChIVgwj+0zD4t9t/uwBSVOQS xguhUkdEb9VfbAbCRRVxFxQdQ9BUE13yXDsi1hXkqE/EGBpU0oPHFbWrCkZdwq0J2AAAJ+WDhpPF assfAnkeS0qoPbJAUxJt3oqaESVA3PSgPXHhXifmLfDSY73U1htYTDdPW2ZULBI9uhrQb1J/pnPv VLWsxWERyNbW6bLcQ1oKgAGnRT3xVVljtTOqmJIJBIecqU9JwprxYGlCfEH54qvhs0kuSyyRsiJt H9gKR+wwNencnY4pQ15JqWgztqXlvVXtZ7U/v4YHHAqwqAVY0ahPRhkozMeTGeOMxuHoPk7/AJyL kgaGz80WBWOoU6naAyKtTSrxHfbvxP0ZkwzjkdnCyaKQ3ibZv+eS23mP8otR1vTZlvba0W3v0kh+ INFHKObildlVix+WR1GO8RIbeys3Dqog7cx9j4B8sTypa661xcixluZpHe+iQ82BVWJULsar147j rmme4b1XVbcapo+q2trLbaToTrb3eo27CMFZtm9IDc03G/jir2GJ9J1W0aO3mGoNyinSsgZgyMpV g7eG1aDFVDSf+cfV8+jX/MWjalPYeYdUna5V5m527ldokcUJX4QBUfdm4lo4zxRrnX37vIDtqeHU 5OIXHiI89ttvl/Y8yvrXzD5b1W78v+YtNuNGmtWWGWykADNsBUEFlkR6EqVJzVTxygak9TgzwzwE 4GwifLRjtLzUI7S3RtO1OrR3UjqCCoo8da/Cd6g9/HINyHk816DDbx6THc+vGk7HnJFIqxUbl9oA 1YHoe464qnTy6d5ijaS11WEai0YjdQyHmh34yA9Q1KVp7jJRkYmxzDDJjjkiYyFg83r/AOU+tW9j ewNJapb3MLBZ0I5b9AwO1QabHxzptNm8eF9er5z2jojo8xgfp5g+X7Or7U836bYecfy+1W3kcCOW 1aUSpyHB4x6iMaGpoygkd8cuETiYy5Fho9VLBmhkhzB/A/Q+P/y0/LzzZ5p1GyvtR0oad5dPCaOK YH61OK1Uso+FF6HfqM0/Z/Z0hIZJcuYH4+b2Pb/tDCUJ6fFuTsT0HK67+5+h2l6bDptlFaW6AiJF FB0qM31PBvOvzQ8q6lqunpq3luf6t5j0NhcWDig5ON3hIPVXA75TqMRmLh9cdx+r3FztBqoYZGGU XintL9Eh5xO4+SP/ACx8+2/m/TGEym31uwIg1XS3qHhmXYqQd6H9k/xqMs0+YZo8Q2I5jqD3NOv0 ctJk4Cbid4yHKUehH6XrXpsrBggZgBxofEdd8vpwrCkyuzD4ipU1cU2PtgIsptuRSCtebA9Au4P9 MSFBWCLcs5qtaggEj8MHD3p4kQoLlTEwaNuvSgFO/wDDJe5jy5tFGISjE+lXmOlfbGltu34Tx+px arVNOwFaU/DGNEWstjTRgRCrV48iT161PbHhAXitY6LHVmHFdqmhJrgIpINtop4hYgwCk0Zht91R X5YQO5BPeoQQAEMx5UFNtj+GQjFlKSJ9FFcU2C/ryfCLY8S4RfGWqfi3IA64RHdba4hV5igBalDU VPLenvjVLb81b7QtXthaLcaJeWKQqvqzPbOkQU7sAeNPvOaGWnyR5xL0sdVilykEqmgvZZGntaRT WrUlicAF4iNthsRSgp4UylyE/wDLnl6XzPqFrpYMVlezsxnSQF04qpYOgB36EbNl2DEMkqJpx9Tm OGPEBb1+b/nHnUL4GOXXpLeCdla7FtCI5XQCnAO0jUBFO2+Zn5KPeXXntKXcGcaR+QXkjS7aOGbT RflFDPLeEys7En9k0QHrWgy4YIR6OPLVZJH6vk67/If8v7xyf0FBHG1Pih5w0qO3psuROKB6BkNT kH8RZJof5b6BoGhXvlmytGl0i69ZJNOlleaOlytJUHqliFYVJA2qSe5xGMDatkSzyMuInfvfIPnX /nFrW9F8saxq+jeaZbnUdNunu7SJ4RvZISyW7KoHNgux6Bu1MwT2eBGXU9PJ30PaGcssL2jyl595 +HN8y3cdzqemXGkxX1umn2lrxaUbPI6bFjVaqqtvQDfNQ9gyHynrUV95dWS5gb6xpitbG8WGpM8Z UqIQBU8gQQtNyRkoC5AAW15pCMCSaoc+5+gf5PeXZdP0eGZxwSRBy7mtOmdRMbvmEJdTzZR+Zf5R +W/zL0kWGsWjW1+ik6dq0IC3Vo5BFVam4Nd1O30gEU5dPHKKkP2OVpNdk0s+KB946F+elz+RH5qe WfO2neT47GW50XWbo26ebI4DcWYikBBlk4UMTqgP2yPi6Ejc6k6CccgieR6vXR7cwzwHIPqA+k87 /S9ouf8AnCLTpLJ5LTzfqFrezBFklnginjfk3QKpiYD4unI5lz7MhWxLp8ftLmv1RifdY/SXinnD /nFf80PJokvrSyt/Nen2zl1udNVmuY1BNGa2ej1of2OfzGYuXs3LDcbj8dHbaX2g0+U1L0Hz5fP9 dPLPK/m3UdG1m3GpyTNa+uYbr1ACw5N8RFBUFevH27ZXo9QcGTfkdj+PJyO1tCNbgqP1DeJ/R8f1 P1N/Ks3xs2sb+AzWzKCHJopBFdq9djnTSD5yDu9vg020sFYwxFFqPUCgnqaE9D0yNUyu0zjgCvTi T/JT9WSEWJmvWzQyyhkLiVVL1HU79MIjRYmVh4d5x8iX2l60PN/lSkOpp8F9bR/Al3F1KP1HIU+E 0zFz4JCXiY/q6j+cO739xdppNZjlj/L5/wC75g8zA9474n+KPxG71Hyxr6avpNrMsbpcL8Ekcm0i uNmV9tipG+ZMMglAEft+Lr8+CWLIYyIPmORHQjyLIELknlRTWrHYnCC1lFBGYoFI4V5EGnTtk6Y2 tEbI1EZTH4AdqdCcFUm7WnmHQ8RRwQx6GpoVI2+jFbVkSoYMQQDv/TCAglqOPjG9CAKvWhIruenh iBspluh/RbkjgF+JFA25HyLV9sjwsuJVk+JuRBpwBJ6Ek12+gDfCUBQU1eoYlGp8dTtUZEFLSoPU OxkZDQKD8NSKn8Ma3Ta+SKSQ83ACCnJVY1HvXCQSgSAVIgy0JZiAK7kV+84QglaeEzAskhWF+Sqt KVFCCfljzXkgJdItboJ+4jKsKMKUIP8AXemNWuwYXqn5W+U9SDyXGmQLJJ/eyBeDn/WdeJ/HITxR lzAbIZpw+kkKuh/lv5a0SWG5sNPiS4t1pDPu7oDUHizliNj2wRxQjuAGU885bSkSzYQs7MQCkatt X2XrTDw2w4qWTQlkZdqbVf5b7YyikSUfQk5KEAVV2b7iff2yPCU8QWJb+k5bY8h8XQ037YBCkmVr p7YTJJFQMrg1XtUZIxRxPy0/Pv8ALK5/LTXtQ8y6dAR5V165L294qkCynIdmgcEcePUoQN1+E9N+ e12lMJGY+k/Y932L2mM8Bil9cR8x+vv+bzvyDG1x5qht4Lj1rK89PUlRQio5Zaciq9ixBX5ZLsqN 5r7gWPtJk4dLXfID7z+h+r/kyx+raJYMqhECioHWlM30o728NGW1M04K4r2Tv/lHen3YatbpT+qR 0WiAkbr/AKuIjSmSNSFGXiwHiwPTagyYiCwMqXizj48WVmSlU+I7ewNcIiAgyt4P+Y//ADjt+X35 lA399p/6M18bprtiFjnJpxBlUjhLSg+0K02BGYufR48w3G/e7HR9rZ9Iagbj3Hl+z4PVPL/l9tKs LK3uXjubmzhSKW5WL0lmZF4l+HJ+NetKmmZEQQN3AnIGRIFBkrCQJ0qa/E6nuTTaowkbMRzVoDyP IEtx+FKdKdslFjJFBW+JkkXkyj4epoKncD55MDuY2h5VVhw4q5dWJQ9fYnInZIS8WsNtPyjiFCPj ArXkBtXrsciebIcky4KSBQk0+1xJ3PuBSuSoMbX8XFQw+ACgkHQgdj4YaRYbBDqVQKGHVK9R1GPN eSgqu5jZSCCKMO4PXb3yNWysBW+zHT7PjWtfpOS5Bj1aUcgCD9kV2Jpv+vEBJLSo0jMwqiBtq+w6 0wVa3TpUZkZflV/lvtiRagqfpyhlVAEVdm+4npvv0wUU2Go4vSctUHkPi6bb9sRGlMrRDDlVRQqQ ar8skQxtDRMrtJ8TBVPwVVqDs1DQD5ZEG2R2VdllFAoVxum9KA79fY9sPVHRRMpE8gXiyKtHp1Em +wPiVp1wXumtkR6gKvvzBPEBtqU2NclaKQ8kcxkRoWUVYfaFCoANfwyBBvZIIrdcyAyjmCKHcDoT 3wkbqDsoshI9OlSwrwJB2B9siyBbjg3r4gqT1ofnhAQZLhbijEgAp0H9mPCvEsFuslWIbiT0BoDT vg4bTxU8r/OHyLaeevy+83eXJbYu19p8htQBQfWYB6ts1faRR9HXKc2EZISj3j+xytHqTgywyXyP 2dfsflz/AM442c/mDXLq7+ptEdPgNsV3YgrMnGp8RUj/ADGansePrkfJ6n2pn+5gO+X6P2v160G1 ktdFswoHNkAXkTQbdwN+2byXk8ZEptKtwkHKYQJCB0j5K9T4cgwyMuKt6pkCL2u0THA0jxyBGCBG 2r3Yj37U3yQje7EyrZEiORDx4AAirD2yVEMbtso7IoilMUL/ABsyU5EeAJ8cNXy5I9/NQ9MoFSQk 0FFZTQmh7jI1TK1RXLAUUOT3pvUeINMIRTTibg8ahWbjs1eJ8d+vU4m+SgjmujkQUbmtDQAggVrQ cR4/RiCggqqgIXdBurb9qjvTJIcZE9Rni+ElaFiOv30xsXstbbtRBy7FiF+Kq+PQVxF2pVXlooCg hd1Yn2wkoAXA1Sh2G7Fd+/QYeiqfDmqqVrwADMwrvTt9+CrTdIX1Ss8gXi0aij06iTfYHxK065Di 3ZVsixKCr78wTxAbalNjXJ8TClKRZjIjRMoqw+0KFQAa/hkSDezIEVuqEVlHOoodwOhPfJdWPRY1 SPT7sK8SR0B9sCV8Ue/IdwQT1ofniApK8QijEgAp9kf2YeFFrViWSrkHiT0GwNO+NWt0oGGP1JBw KJQF6CgPHpXI8ItlZpVMaMFqGoo2JFemGgi1b0ookSPgqKnwJGgoAfEfIZKgBTGyd3LEkfJqFfiq qDxNe2IFLdrWCiRCf7z9kfsnuTgPNIOy2MOQzMTyZ6Ienwj2xASS1DG325RydxyY7beA+jEDvUnu VPTK8aKTy+7x740i2l9USPzUFCfl09sRdqapCtPEWpDAzsKj7BSniSzCn3VyBkOgZCJ6lAzWXqBm MrOzL8adUIHYDt88iIb2z4tqfPH5J/8AOPOmflne+d9Slk+t3HmbWpbmyjXkUt7COR/qsW/VyHLO R7DtlOk0ow8R7z9nRz+0u0TqhjHSMQPj1L6TaNhSKCirGKx0ANTts1en0Zkys8nWigrJbwqfUSNO RB4MqgGvttXCIAboMjybVEPFh8DH43Xtv3I8cQFJVHch25KOAXkCDSg96kAYSd0AKELSuSyJyi9h 8O/8pP47UyMSSylSsYzyqTXkeNafTTDSLWmJuRanKpFF6Cp237/RjS2omJ+VQyyBv7ytaUp0AyNJ tdHHboWlBVnYjm/2q+Cjvt7YQAN1JJ2VeaOStGWSMDkg3NGrTbv0w3aKpREiiiTwmGhIQsahh8x3 PhgvvCa7lRGQSKikcWHwspBA8AaYQd0Hkt9EgoTKQxPwnt08BsMFLavGtBSN6sTu3XbvQkHfJAdy Ce9Dy/GBbJuzfbUknih2JqengMie5kO9FelFEiR8FRU+BI0FAD4j5DJ0AKYWTu5Ykj5NQr8VVQeJ r2xApbta3ESLXeQ/ZH7J7k4DzSOToy5DMxIZnoh/yR7YhS3CrfakozuOTHbbwH0YYjvUnuVeJXj8 BPLt28e+Fi0rSiR+agoT406e2IJtJApCtcxFqQ27OwqPslKeJLMKfdXIGY6BkInqUMLY+qJfVZmI +NeqEew7U8chw73bLi2pHrQoxIO3TfbLQwf/2Q== ------=_001_NextPart260342025263_=---- Content-Type: image/jpeg; name="t_bg(07-12-14-33(07-12-17-18-36).jpg" Content-Transfer-Encoding: base64 Content-ID: <_Foxmail.2@DCBC43EE-7870-475D-A6F9-D40FA60E6B2C> /9j/4AAQSkZJRgABAgAAZABkAAD/7AARRHVja3kAAQAEAAAAMgAA/+4ADkFkb2JlAGTAAAAAAf/b AIQACAYGBgYGCAYGCAwIBwgMDgoICAoOEA0NDg0NEBEMDg0NDgwRDxITFBMSDxgYGhoYGCMiIiIj JycnJycnJycnJwEJCAgJCgkLCQkLDgsNCw4RDg4ODhETDQ0ODQ0TGBEPDw8PERgWFxQUFBcWGhoY GBoaISEgISEnJycnJycnJycn/8AAEQgAeADIAwEiAAIRAQMRAf/EAaIAAAAHAQEBAQEAAAAAAAAA AAQFAwIGAQAHCAkKCwEAAgIDAQEBAQEAAAAAAAAAAQACAwQFBgcICQoLEAACAQMDAgQCBgcDBAIG AnMBAgMRBAAFIRIxQVEGE2EicYEUMpGhBxWxQiPBUtHhMxZi8CRygvElQzRTkqKyY3PCNUQnk6Oz NhdUZHTD0uIIJoMJChgZhJRFRqS0VtNVKBry4/PE1OT0ZXWFlaW1xdXl9WZ2hpamtsbW5vY3R1dn d4eXp7fH1+f3OEhYaHiImKi4yNjo+Ck5SVlpeYmZqbnJ2en5KjpKWmp6ipqqusra6voRAAICAQID BQUEBQYECAMDbQEAAhEDBCESMUEFURNhIgZxgZEyobHwFMHR4SNCFVJicvEzJDRDghaSUyWiY7LC B3PSNeJEgxdUkwgJChgZJjZFGidkdFU38qOzwygp0+PzhJSktMTU5PRldYWVpbXF1eX1RlZmdoaW prbG1ub2R1dnd4eXp7fH1+f3OEhYaHiImKi4yNjo+DlJWWl5iZmpucnZ6fkqOkpaanqKmqq6ytrq +v/aAAwDAQACEQMRAD8A6aRUbVxtPH78UpmpXNZTsrWAEH2y6Y+mURXbGltaFoKZgtB74+hIp0yq U67Y0trads3EdMcQcoLU/a2xVrifHfMBvTffvjqA++WAMaW1hX6MsKdq46h+jMBuKmp8DhpbW8cq gI9u9cUAOURUgHp4Y0i1goRUePfLIHjjivfrmCg9qV3xpNrKVFMoFScVp45uJ6DpjS2plfDL6DHU I9x4ZioxpbWADrm+ePod81KdsFLa3jXv8soqDj6ZiDTGltZmx1CPl2GbFV9K7fjlU/DpihFO+bjv 4UyVMbUxViT2Gw/jlhTvjwu9B33xwXGltSIYUpvmCk7t9wxSnhl0w0tqVBllRXfH8cxXffGkWsC5 RG1eldsUC0yqVPTp0xpbW0I+jrllR1p9+Wyk7dvAZZU7A40tqVCPsj6T0x1Bjylen4ZTKafdgpNt ccoDucUC7dfllcajbfDSLW0365VO64+hG4pTKIpuB92NLa0g7+PbMKE08MUoa5QSjGntjS2sK9x1 zUPbrjiCaj8MvoAB40xpbWU36ZiCO1cUIyqE7/TjS2pca9DmxWlPlmwUm156ZYGPIp9OWBv88nTC 1gAO/hmI6Y6lMxWorhpbU+NRtl8SP64+hNabV746lemNLakV98zKaU6e+KU8euXTw3xpFqVCBvv+ GVTevji1BmKiv440tqDCjKSfo+jHUr8u2OpU7CuOCgDb54KTazjmoMfRqVAr4DKUHcEUphpbWBR2 AzACnTHlOWx2HWnjlcKEVoR77HBS2sIApuB4VyvAD4vEjHfA7bUNBQV/rl+nWhoFp4d8aW1o3J26 bZdAeh3xQKK0Ipm49xjS2pEb0HXLp2IxSgO4NPHKHU77e+NLawLmptjwCdxl8fbDS2p0r1+7Nj+J 37UzY0trwhf4j9AH68vga7d8XKGnhlUHyyfCw4lErtQZdD1pivGoplccaW1KlTQD6csL7Yoqmpyu G2CltT41O4zKlBigWhy+NDXGltRCrXw9ssgGmPK79PmccUFQaY0tqXpAH4dssrTr3OK8a/LG0rTp t1w0tre/hlMnUgA4oUr9++XQDGkWon4BU9PbMV2Ip9OKOvIbHvXbKCf24KTawR03G+WV9sUCeH3V zcQOmGltTAr0H043iTsB13xYqB0FK+GWFNBQY0tqIUDsa+Jy+IPQb4px8cbJ8I+HxG/0jBS2t49d s3GgGPpUf1zAEmp6eGGltZTvmxQx8u+3682NLaoqt1798vjtWmOp+IyhswU9hWuTphawofpptl0P j4YqQN8aBXvX3xpbW0B5AbkZipGP4D5dsriOvj740i1lCK41qgVrvTwxWlKAZqH6cFJtTEYryryP iTXL47GmO4U/jtjigI67YaW1On3ZigoP4Y4qQKDb+v05YBpv8sFLamFI2XxyygJJ8dsUKitMaV4i o6g1rjS2t4kbdK9M3E0xx333FMyoaY0tqfBqcTtmKmmw3ptv3xbjlEKPc9hjS2ohWahYge39uO3P TqDj6UNB233zEHqPuxpbWbmtO2U6fDv02xRR8NTsT1zU2+nGltaKHcEb9xjQN6V2OKcQDX78sL37 HtjS2spt3zY/iD3+ebDS2vFe/XL47g+xyzX5eObfiNjkmKxx1/HwzBdt+mPZOwyiCFNOw64KW3cT 2zUOwxyhqUOYA02wotZx7HevhlEU2x9D1pXx7ZVABUV6Vpim2u23hlg1+E7HqRlgDYjp2zcPjB70 xVxWu/fKodjT3plty3p/bmBATxP44oWNU+xzEbV3+jLqSd8dQkbd8CVPj3PTHdfsn2pjipB2OY12 P3/LGltaQTtXeuZKNXbptTHgdRmC7mmGkWsKAb9MxFN8srX39j/blnen01xTawf5OUF+KpPf5Y6u +2am/j3wK7iNs3HeuWVY9gAO2Wop44VW06n9ebLajVUg09s2Kr2B2PTLqD8u+UelcbWTjU8QvfqD +NcKF1PD6MsUPXGKOQUgGg3/AAx9CO3XEK4KB06fPKFN/HL3I+E0r1ONoR1NR498UNnfplGtCcwP brl/F061+jFLSmp+WP71B38MTU0G5G3XHU3JHXEK49vE41q7V+nHEgkEdcwqTv7Yq1QEDbLoRt28 ccTTpmHT54oaFDsNjjaE9KbHcY6lRSnvvjSaMAKbfa/hild0Byhvlhuvy6ZTBj9mle2KHUJO3Tau YgkU/HLPav4ZR8PHpirVDsBm40avfLUb/LHca9caTbXyxgI5U7D274+nLKKjlQCniRirjsQR8s2a gIp2zYq5q9B/bXMFHUgV77d82bFDqA+xxxJqPDNmxVYCSaruO+OIPXNmxVoqev4ZRBrUUr4dhmzY q4Kla7V/VjqgmnQ9R8s2bFVtabMtB2OXUAinQ/hmzYpcV7k98sDwO/jmzYoaY02H2j0BywqotKAD 9ebNirfEAk9szU2rmzYVcKkkn6MwBJqd99vlmzYq370zVbl02zZsVWl1rQKSfCn8emMKliGqa+Hb NmwHzSPJUH6s2bNhQ//Z ------=_001_NextPart260342025263_=---- Content-Type: image/jpeg; name="bg(07-12-14-33-2(07-12-17-18-36).jpg" Content-Transfer-Encoding: base64 Content-ID: <_Foxmail.3@3DAEC459-9724-4BE4-8975-85018970DC47> /9j/4AAQSkZJRgABAgAAZABkAAD/7AARRHVja3kAAQAEAAAAMgAA/+4ADkFkb2JlAGTAAAAAAf/b AIQACAYGBgYGCAYGCAwIBwgMDgoICAoOEA0NDg0NEBEMDg0NDgwRDxITFBMSDxgYGhoYGCMiIiIj JycnJycnJycnJwEJCAgJCgkLCQkLDgsNCw4RDg4ODhETDQ0ODQ0TGBEPDw8PERgWFxQUFBcWGhoY GBoaISEgISEnJycnJycnJycn/8AAEQgAyADIAwEiAAIRAQMRAf/EAaIAAAAHAQEBAQEAAAAAAAAA AAQFAwIGAQAHCAkKCwEAAgIDAQEBAQEAAAAAAAAAAQACAwQFBgcICQoLEAACAQMDAgQCBgcDBAIG AnMBAgMRBAAFIRIxQVEGE2EicYEUMpGhBxWxQiPBUtHhMxZi8CRygvElQzRTkqKyY3PCNUQnk6Oz NhdUZHTD0uIIJoMJChgZhJRFRqS0VtNVKBry4/PE1OT0ZXWFlaW1xdXl9WZ2hpamtsbW5vY3R1dn d4eXp7fH1+f3OEhYaHiImKi4yNjo+Ck5SVlpeYmZqbnJ2en5KjpKWmp6ipqqusra6voRAAICAQID BQUEBQYECAMDbQEAAhEDBCESMUEFURNhIgZxgZEyobHwFMHR4SNCFVJicvEzJDRDghaSUyWiY7LC B3PSNeJEgxdUkwgJChgZJjZFGidkdFU38qOzwygp0+PzhJSktMTU5PRldYWVpbXF1eX1RlZmdoaW prbG1ub2R1dnd4eXp7fH1+f3OEhYaHiImKi4yNjo+DlJWWl5iZmpucnZ6fkqOkpaanqKmqq6ytrq +v/aAAwDAQACEQMRAD8A7tvUeB3yq77+O2ahqPbtlNWlFHU5WzcOtBuO+XsxIyhQ/EBTscdUnpTF WqAbA5q03JywOuVXx3xVyvyOwPXwzAUqa5Z+jK5AD4tvn0+/FWioJpxP0HbKKhfjqSR2JJx4Ir77 Zup8BjSrWYilP2hjhuAACPmM3SoGXWveoGKtH36dcvetTt4Dvja7VO3vjgSevXthV1QOu1e+bYk0 6jucrc18PDLUUpXr44q1U9/vzAgnYfTl9QQM3Qb9tya4q4Ht+OYdTXtlLRviHTsfHHUA6/fihZSp p9Ph92WBSgrUdfDLIr175QUA179sUuABAIFK741l32648bCncCmUTirgNq5s1formxVzdSPxxnFu J3+Ve2PrlE09zgKh1V67UGatTUCoylA6bUHTLpirdR06Y1SW69Kmv0ZYNRUdMyklafRXFW967Zq7 UOao8cr59MKuUUqq7d83LfjWv68sgVPt0y9qEDArRFdunvmNKbdM3fft098vr7e2FWiRQCoNdsxB zce57Vp88zUAJ8PDFXDYfZzFu9Dl9hWvhlE8dx9+KuoO3fqcZ6bE/ESx8CdvppjwTQkgCvQZdePT fArRqTQEDLrWnfKNK7jLpt8OFXbHucoChod6dzmHhv75Z69MVdWlB3ygSeuY7ZiwG3fFXU3ObNv2 ObFWjRhQ7ZVOO3UdvbL6bnK/zGBXUoS2/wAq5dQMsmlAe+N3PyxVdT7swA48R2yqVFD0ym+H38MV b6Hfpl8gfllGvY40AVqV37YquIA23+eYGjdRTuPfMK9hlgnv1GKtkVG+/hTMKCgrX8TlfTlV4kCn 0jCq+nhjSaCrePQd8ylT0Ne5zE/ED+rFXAmlG2NQaDMWG5ocs+3XMCdq+G/zxVr2PTKQt1K0HjX+ GOGw6V8cwAPTFXH4htlE0GalNx171yzv88VaFaZQNKdT7ZqUJ33y9+2BXbH6cxO1SM3sMxHX9WFW ga9q+Hjmytqk13zYFb/VjO+/cimOPy+dM1N+lfCmKVq/EWY+NF+Qx6gb/fmp8QFKA1OOpT+uICCV hWpHE8aZlUDuST3OXWvXbrl9duuKtV398xNDWmXmO2/44q4EHpjW6AEVJNKDHUoK40cqkE0xVs0A 67DpjiQBX9WMYDkPHoK/LHEUpvXxxVY2/U8f14+oA9s3U41lqNuu2KrvhIr9IzDYeOUtKdD92YUI 8MKrh1NK7Y0nl7HwO2Y+xNewG2Y1psenT6MCuI6jx75kb4iKdNhljr165gPiPyGKualCTt75qVAo dj3xpFTtt75ZJoPY708MVb3GUwPQH55de43yvc/P6cVW0B6ilc2OII3A65sVaNd/xGWMptqe5ocs HfFW1OYsNsafED3OX1HvirhQ1r9OXQdunYY2hOzdDjga/PFXEDpmZagDt4dMbWm2OBB3G1MVdQD7 O3jldxtv3GYSA7fTllqEbdsVWN9pSASe5+jHA13+g4wNyJp44psBirqfjmrlcT2ND+rKFVqCa+GK riwA5E0HTfGhgAKnruMsDfkfvyqAHkKjxA/pirTMopsSTvVR0yuW4ABUDajDKVmdt1p2BBBO2OK9 2JJHT2+7AltSatvtXbLqDsR9OWK133GUSCP864UNEEmnTbrl/LcZQIfqNx+OYH4iSMVXUAyq7fqy hU9dj3pjtz3+nFWh+ObNTr+GbFWlTarD4j1J7DwywoJ2x1FO3U+GavYj+mGlWsBQdh45iD3O+XUd 81AMCrdyd+nXLrQDegzAUrv9OXT78VWihPj2rlqAOmYDuMs7YqtrQ0P35ieg/A5RKl+PKpHYb/fj +vTtirRVT22zEUpTepy9juflTG16Vr7e+KtlgDU5ZXl0rvlfCw5daHY5iwBPiBiq1yUFRuelD3yy QajtmYBx0+/3ywopv0GKuAUj4aDMTXoa/wBmbalSdvGmYmuw+jFXLvU9Kdj1rlcCevQ7nHM2bsN9 ztirtwOnTNXpXMBTE5iStR0qOnzGJ5KqdK1PXwzEUplUPSlCPDKA6mtTirZIFSc2X8Nan6M2KuCg Dr0HXLrtt1yqY0EhwB9mm2KrioH6icxH+3XwyywFQT9GNBFB2+eFW+VeQ6eGbkvY5ex3yt9j44q7 9RxrAkUA3p45Z6/Lv2zdt8CuXiBRRT2pTLNKHwyqDqMcQCKkfRhVoEEVH45tiBlMp6HwzAUoK+FM CuI8dsuqk7d9q5bUrjW+zQfPFXEAbE7HrmFCOtcbXx+jHKoxVriOhNRmIJFK0qKA+Bx2w3rlMT0U bnv4YqtVehNSfHLoT1rmqORHT+uZhXxrilvrUeGU42r13qRlr9mnUjrlV7d64ocGB6gj2OYA1rTb wzVHXvljY1798VcehzZex6jcdc2KtAU2y9tielMa3ap/ty9wvbFWm36dO2YAAVyzxbb6Mph8JA8O mKr6VHX6cqnvt3yk4gdcwoR4Yq7boPp75VR0Xtl7+NPxyjWnvT8cVdXLDUYKewrXMOx6V7ZdPiH0 4quNDXG7kAg198phUn8fDKJKpx6Y2riK7HfMQaVA+/G79964+ladsVaA3rl9eoocxAJr+OUa7HvX FW6A7dq1zISSeXWuYd8sEbmvU4q0WX5/LM1R/TKIr12yzXv2rirQqetBlCgP07ZhU7jbNWrUHX3w JXEgUJzCh3G+UVruSajMPHChtjxBLbfLNlVJbt7VzYq2wqBvmqaVI2GYg8T49MTp/lOSOg3I/EYp X1H345TjFHTlsR2xxX3xCFw33H04wHrXv3y6BhQ/SMaRTp93bFVx3yiDQ75W49s3elaV64pcta9P ljqgmnfxxMED4dyQMU8a7VxClo9Qo65TA1AHbLJJ69tspRvXxxVcAaD8fnmp3B27jMW7dMymu3fv ih1fHpjaV8du+OH+dMZuxDLXiOh8a4pVKY0e+2YE7+PTMyg7E0PSuKHU3+L2pl7U9sxG4HWnjmIN aeOKraA0Fc1ADXHAfhjgMaW1tR32xgPxEkbU6+33YoB4/RjSw5AEj5Yq4mtDmyxmxVzLyNOo8O2Y ClPHp45j1BOVXqe1d8VbG433GY1qDX6Mobt4fxy96/F0xVaKsak0+eOIy9j2zdNxU4q0V8OuVxBO 3Xucy8+rDvjqAVOKrOaitfpzBwW41Brvsa441LdvGtKnMwoNh8XY9OmKtfGCe48PDNuaEDbvlEMa U/2WKUNByp9GKrSoG9Opy6DpTrl99s1CNzufwwqsYE1UdO58Mf02G57ZiSBXqO+YHkSD9HyxV1Kb 03yj2oK5ugrXbMCSd+mKuAPxHxzBQD7nc5YJrT8Mw2J/DFWiR4jN35VzUod+lMwK1oopt08MVaLO TsAB4mv6saVXbkN+tTig+IKT4VxrLX+uClbGbMNx7jNhVoim57d8a3xAENt1qMUPX2xPgKN4nAVD YJO7de3yy+vU0zcjStDv0GapO/TFWxtXK3G46d8up+YxqhqVPQEnFV9K0xp5AdOXuOuXSp37ZVaD CrlbkagbePfL/wAo5XsehzUNdth38MCtnv2zV77jMadDv3zHpuKe2FWjUL4+Iyxt1PXMT0FKVNPw zEA/50xVwoanLFFoMqjU61rm+Pt1+7FWwQwIO2NLKmxPsB3Pyy+u3buMpY1H2dvEgCuO6rlr1YU9 vDL6f0xppWhrT2zAkgUxVs06ZQp0G9fDNUHcj2y9gaDoMVbHSnboMaa5Zr0HbvlCuKuqe/05sugr 882KtE08aY0moqOnj88vqKHfKpQ1HfrgVykVIr9Fcug65qd++YmmKuBqK9P4ZS7rU9McaAVOau1O nhirq+2ahG+V0Py3yuYr7+GKrqg1PUHpTL61FMo79AM1DyBoa4Vd9nc/QfDLFCPH3zbb++YHpQfw GKuoOvXYgZTfZNOvauO2P9mNNRQdWNaVxVvoB08Mpq9vuzAMNvtd6nN8XtXFXUIWpNSfuy9zXjlD x65Shh1b6KfxxVs1GXQEVOV9rY9czVpQDFXCp8M3cb5h4d8qhHSgxVs+305iW6DL3p+vKJoP4Yq7 Y5saDU0rQ9x2zYFb6UyqjofuzZsVbLAEKPmcob132HbNmxVsEbe+UT2Tr3zZsVbIzDkDsdz1zZsV cATtmrxG/bNmxVuoO+Y8qgClPfNmxVwanUcQO+apPxD5Zs2FWyQRTxyl2p7DNmxVseAOao/a2zZs VaNKb7Uy61oPH9WbNirVACdts23yGbNgV3XN1r+vNmwqs5DfbNmzZFL/AP/Z ------=_001_NextPart260342025263_=---- Content-Type: image/jpeg; name="d_bg(07-12-14-33(07-12-17-18-36).jpg" Content-Transfer-Encoding: base64 Content-ID: <_Foxmail.4@A828933A-501A-4FF9-B362-8FCC954244A3> /9j/4AAQSkZJRgABAgAAZABkAAD/7AARRHVja3kAAQAEAAAAMgAA/+4ADkFkb2JlAGTAAAAAAf/b AIQACAYGBgYGCAYGCAwIBwgMDgoICAoOEA0NDg0NEBEMDg0NDgwRDxITFBMSDxgYGhoYGCMiIiIj JycnJycnJycnJwEJCAgJCgkLCQkLDgsNCw4RDg4ODhETDQ0ODQ0TGBEPDw8PERgWFxQUFBcWGhoY GBoaISEgISEnJycnJycnJycn/8AAEQgAQgDIAwEiAAIRAQMRAf/EAaIAAAAHAQEBAQEAAAAAAAAA AAQFAwIGAQAHCAkKCwEAAgIDAQEBAQEAAAAAAAAAAQACAwQFBgcICQoLEAACAQMDAgQCBgcDBAIG AnMBAgMRBAAFIRIxQVEGE2EicYEUMpGhBxWxQiPBUtHhMxZi8CRygvElQzRTkqKyY3PCNUQnk6Oz NhdUZHTD0uIIJoMJChgZhJRFRqS0VtNVKBry4/PE1OT0ZXWFlaW1xdXl9WZ2hpamtsbW5vY3R1dn d4eXp7fH1+f3OEhYaHiImKi4yNjo+Ck5SVlpeYmZqbnJ2en5KjpKWmp6ipqqusra6voRAAICAQID BQUEBQYECAMDbQEAAhEDBCESMUEFURNhIgZxgZEyobHwFMHR4SNCFVJicvEzJDRDghaSUyWiY7LC B3PSNeJEgxdUkwgJChgZJjZFGidkdFU38qOzwygp0+PzhJSktMTU5PRldYWVpbXF1eX1RlZmdoaW prbG1ub2R1dnd4eXp7fH1+f3OEhYaHiImKi4yNjo+DlJWWl5iZmpucnZ6fkqOkpaanqKmqq6ytrq +v/aAAwDAQACEQMRAD8A7vWtO+bY9zlU2+HMCOm/vkGbgKGh3p3OXWlB3yj16ZjtirgSeuam5zFg Nu+bfscVc3Uj8cZxbid/lXtj640mnucBUN1XrtQZq1NQKjKWnTsOmamKrqjp0xqkt16VNfoywaio 6ZSklafRXFV29ds1dqHNUZXz6YVcopVV275uW/Gtf15ZpU+3TNtQgYFcRXbp75jSm3TN337dPfL6 +3thVokUAqDXbMQc1O57Vp88zUAJ8PDFXDYfZzFu9Dl12Fa+GUW47gfTirqDt36nGemxPxEsfAnb 6aY8E0JIpXoM1ePTfArjUmgIGbMSK7jNhVaWoMwJplE1+eN6E775FK4N06n2y6g/Tjantm5dsVpc W2qcoNX38PHGnG1FSa742tKhIYUO2V9nbqO3tja065q4ppd0Jbf5Vy+QGNLUoD3yq1+WKKVP1ZgR x4jtjOooemUx4++NrS+tD1y+YPyxMk9jlClald+2NrSoaDbf55g1D1FO4xoJ7DLDePXFaXncb7+F MwIFBWv4nGV98rkFIFPpGNrSr8saWoKt49B3xqsD0Ne5zcviBw2tLgxpRtjUGgzFxuaHKJ8OuUGO 1fDf54rS6vY9MpGbqRQeNf4ZVaDt75YIPTAq4nkNs2M6bilc2FaU1f4iPDYZbMKEk098TqKn5DGm ldtvfIWypV6gUOx75dSMSLGg9jv8svl3G+NrS9q9A3zxux67Vxte5zEkbgY2mlSo+jGV3+6mNLe3 zpm2r0r4UwWtLlPIsx8aL8hjhTff3xlfiApQHfHVphCls7kcTxpmUAdySfHGcq9dsvl2xWl3L78s tQ1pjKjMWA3xtFKgYdjjWYUAIqSaUGNrQVygTUgmmNrS8kAddh0xxYAVr92IsRyHj0Fccdqb18cb Wm2bxPH9eO5AD2xlQTjWFR77Y2mlaqkfiMoGg619sTVlp0OYMCPDG0Uqg7mldsovX2PgdsTJ8Ca9 gNsxJpsen8MbWlQnqK9e+bGA7/PNja0p8wdiMokk06bdcTLAj/Oubny6jcZC2dKvLwO2atMSDbnM CT12PfG1pV5bZg334nyPj9OV/mMbWl5Y7/jjg2Ik0pjg+NrSqHyi/TEq9wPnmrUY2tKgYHr9OOr4 dMRqTs3Q5fKvzxtaVCR0zNuKdvDpiXOm2WGruNsbWlStPs/Tlctx498YJQdsxen3Y2tLmb4gQCT3 P0Y4NXevscQD8iaeOP5UGNppVrm54lv2NDlAlagmuNopV5gCpNO2+UJKAVPXpjB1qfvyqgGor70x taXs6imxJO9V7ZXPcChUDahGJB2Zt1p4Gortjj4sSSOntgtNKisanfau2bGhjXfpmw2ilFvsnr1/ zrig+yOn0Zs2RDJx6ZvH+GbNirXYdcx6/wBM2bFVMfbbr0P2uv8AsfbHDr9GbNgS2en9Ms9e+bNh Q49Ppy16Zs2Kre/0d8pOnfrmzYpXd8o9P65s2KGm7dMv+ubNilceuNbv16Zs2JQHD+GW32fpzZsV Wjv0+jr9OPP9M2bEKVNun7XXNmzYq//Z ------=_001_NextPart260342025263_=---- Content-Type: image/jpeg; name="dr(07-12-14-33-2(07-12-17-18-36).jpg" Content-Transfer-Encoding: base64 Content-ID: <_Foxmail.5@8FAF2B65-A1AA-4B54-89B4-D2F509584F00> /9j/4AAQSkZJRgABAgAAZABkAAD/7AARRHVja3kAAQAEAAAAUAAA/+4ADkFkb2JlAGTAAAAAAf/b AIQAAgICAgICAgICAgMCAgIDBAMCAgMEBQQEBAQEBQYFBQUFBQUGBgcHCAcHBgkJCgoJCQwMDAwM DAwMDAwMDAwMDAEDAwMFBAUJBgYJDQsJCw0PDg4ODg8PDAwMDAwPDwwMDAwMDA8MDAwMDAwMDAwM DAwMDAwMDAwMDAwMDAwMDAwM/8AAEQgAQgDgAwERAAIRAQMRAf/EAaIAAAAHAQEBAQEAAAAAAAAA AAQFAwIGAQAHCAkKCwEAAgIDAQEBAQEAAAAAAAAAAQACAwQFBgcICQoLEAACAQMDAgQCBgcDBAIG AnMBAgMRBAAFIRIxQVEGE2EicYEUMpGhBxWxQiPBUtHhMxZi8CRygvElQzRTkqKyY3PCNUQnk6Oz NhdUZHTD0uIIJoMJChgZhJRFRqS0VtNVKBry4/PE1OT0ZXWFlaW1xdXl9WZ2hpamtsbW5vY3R1dn d4eXp7fH1+f3OEhYaHiImKi4yNjo+Ck5SVlpeYmZqbnJ2en5KjpKWmp6ipqqusra6voRAAICAQID BQUEBQYECAMDbQEAAhEDBCESMUEFURNhIgZxgZEyobHwFMHR4SNCFVJicvEzJDRDghaSUyWiY7LC B3PSNeJEgxdUkwgJChgZJjZFGidkdFU38qOzwygp0+PzhJSktMTU5PRldYWVpbXF1eX1RlZmdoaW prbG1ub2R1dnd4eXp7fH1+f3OEhYaHiImKi4yNjo+DlJWWl5iZmpucnZ6fkqOkpaanqKmqq6ytrq +v/aAAwDAQACEQMRAD8A+7gfkFNA9SBUbV9xXMa2+mhxbcOwFaUG4qdh+vFLSRlGCt8RU19Rq9fA dcAFKTa4uVCLsXHXc02713w3SKU0kZ6clPFhWo71oRXBdpIpcVIZtzRqEeAp4HtjS26UAsyEVDL9 o1p9+JUJeIpRBMDKSApEYY7rtvv1+W+V0aO7ZYtE84aFqIsaEANsBQdBk7DGiu5hm5RrzWooAab/ AKjjd8kV3ri6D4TVSBueWxr2w2FpDxSPKAGVigdg5AqaKafjkIklkRTFPN2uXfl9INSRGawgkAvw FJKxHbmo78Tudulcrz5TiAl0HP3d/wAOvk5Oj00dRI47qRHp85fzf87kPOmQ6dqsGpWUUySLIsqg kgVBDdD8jl3EKcXhIPmi4gIxJFF+7JHJRXbf2O2RG2wSd9ytach/QDB1YAUJBcHrvTqPnjxdFrq6 ZqIxJ48fiZh4dPfrid0Bg1/580eCG2uLW+iubK4YqlxEwZDxPFhVfAggjscQRIWOTKUJQlUhRZZZ atZanbRS206SpP8ADTr1Ukgj5DCSGIBTB60FGIHZqk0p7DfEpDUchVD+541pShqDXvgB25KQ210o +IxuQNqBqgH3A3HzphM1EUp17WbLy/o+p6zdP6Frp1rLdXlzUDhHChdzXuQBtgMhEEphCU5CI5k0 B73xD+VH5061+bdxe6xf25sok12e107TSyhYraFYiglKAc3BJ5Hx6UFMxNFmOoiZHv2+x2Xaujjo skcYO/CCT52eXk+8beVnggUSqpKKzMw9uw+jM0nenVAbIsSlgp2epAqNq+9Dh4kU2GVtw7AVpQbi p2H68N2tU0kZRgrHkVNfUavXwG5wAUpNthDwUxHitdttwB4Ya7l96mrKSVAbZvipTqN+uRTS9iS4 JTkD1brX8cPVDTHgTUVrsKU7f2YnZI3WtMsYC8fipWg3oB44k0oja74v2G7VX5HwxVxehoSD3UnY kdz1xJWlF3CkD7TU+yNzQ9KZEmkgLYghAUBWVPsGm9AMQkrgpG4NADutKV702xpC5XDKrRnkpAKm nWvTf6cIPctKccrNCyr8O5Xke470pgEtkmO6C1W2t9Rsbi1lUSpKhVlIBBB2IPzxJBCiwbHN4F+X utXXlnzFqXkLVpGkj07jPo9w5J52MjUSpNamP7JPfMDSyOORwy6bx/q/8d5fJ3HaMBnxx1cf4tpj uyDr/nj1e+30IzoS1G48RyRj75ml1AClNdQRIwZwuwLUpXfvjaQEG11FdwO8bc1AAiINVYEVBFOp pgBSYkPxku/OHnL8s/P3nDQdSuZr6yfWrp9U09zxjZmkd/rEQp8DuvxV7r17Ec9j1c9NlkDuL3H6 Q91m7Mw9oaaE4bS4RR/Qe/8AQ+s/yy/Ou3ZIXjvvXgiFXgJ/eIxG3Ne23Tseo2zf48sM0eKJt4vU aXLppmGQUfxy731hYfmV5furL6zJdCMqtSAwqS1B9PXJSNBpiLKN0/8AMDSNQvBYxz1K/CD4n8Mb 2RTM2u+HB0odx+88BX8cBnTIQt8w/wDOVnm6XR/ywutKt2WG/wDNt7BpttGrhXERcSzkk0G6JxPz zB7QzGOE+ezuOwtL4uriekd/1fa+I/8AnHHWItAk1PTEjki+o6o0x9Qk8vUAQkEgGlY6DbIdjz/d SHcfvDke1GEjUQl0Ma+RP6w/WTy9q8Gp6ZbzrSpQAk9N+9e2bMnd5wBkgqUX0jRQdulQB4Yfciu9 ySqxKjls3xdOo364gqQVYvVwSla7FutfxyV7opQkmEcZA5GpAUU3Pv8A5jImVBIjZXJI4Wor1qQa VxBKkLFlIKbu4BIVNq++1BTACtKnJW3oattv2/HJIouaUBeTA08dtq7VwEppRWbkAAAwP2an4h9H bBxJ4XPKskYWTihJpSlaffgMrG6gEFD8zEeBq0Z2UCgCgE0FevfI3TKrdz4s8oZiCVATkaE9On9M b6rXRW+sIgoTQbcjWv35LipHC3yXiQSoUChp08a42ilgkjEXpJuEA2698F7UmjdqJm4uAWCqTU+4 HY4LZcLx/wA/2lra6lpXmqNFElhMsE8ygcvRuG4MGPgDRqZi6ggSjk7jXwlt+o/B2OhucMmA/wAY sf1obj5i4/Fmd75istK0Q6jdTOkMEQLyk8iT9kAeJJNAMtyZIwBJNAOJgwzzSEIC5HkHx559806t 5qurqWXzBe6Zoyhx+hbWVYY3Sm5mkRQ7EgbjlTOX1XaeTNIiBIj3d/v976X2Z7PYNLjEsoByDfi6 Duq9tu+ub6p8h3xu/KlhLcAIDBHxjHw8RwWgHhTpnU3s+aSB4jve/PvfE/8AzlF5M05fNel63IE+ q+Yrc2z6h8LvFexKAnLlt+8QKB7g+OaTtPHUhMdXsPZvU8WOWI8wbHuPP7fvfGl/5f13y5eLdWF0 zemTxubM+nKw3P2F41JpvSo9t81+PLLGbiaL0GfT488eHJEEebIjf+d/Mug3NlrGpz2MENxGiwPC YjPIp5Uf4UPwlQQaUJp8xk5dflyw4TTrtN2Jp9Pl8SAN+ZsC/wAdXpf5XfmRqVtcW9jqdxN9agIN jcSPVpo0PQk0JK0pUgV37g5tNBrPEjwS+ofa85252T+Xn4uMeg8/6J/Ufs+T9GfJXn+11nTAXdhN Goqh2qemZspU6KMbfCX/ADkN55vfN1/BeTW08Fjod+LfSreF0kHpm4CvNKeNFaTgKDcDYdQTnP67 UnLLh6Re87E0A02LjJuUwD7h0DyHS7mbQte0y++JEuSTdTlgS0cu/wC8AqPhAZqgjpuOuPZ+Y48w 7jsz7d0sc+lkSN47j4c/sfph+UvmS3k0ZI5rhQQAVDEdQBtTOkkbfPIinuYvY2h5RsWDEBaAb++2 AzoJELRMc7hQRXrUg0rhEigxXpPQpu7gVATv77bUwiSDFFu4YbBeTbCp6V77b5MlgAhweMj0cctj WnelB88j1ZVsuMj1IVqmgrvSnjXDa02ZdmUNSp6H+JxtFKMjijdqAkKDt7e2RJZAPO/Ov5keVPIe lX+veZNctdF02yUG4vrqRY408FqT8TE7BVFSdt8gZgbktsMcpkRiLLz/APJ387P+VxRahr+heXr+ w8jxSCDQPM+ogQHVmUssz29rQusSUADuQWNRx+E5Vjzce9bd/e5Go0ngUDIGR5gfw+89/k9yNwKV LBeRqp+XbJ8bj8K9roKUUtUv0HcAd/owmaOBSNwXJBHwgmre/wDXBxWnhWT3LGBwKGg6dN8PFey8 NPgb8wP+chvzV8tecbvy7caPp2kmIgadD+8uzNG2yustYi9SCQOC06EbZpdX2lnwzrhA+3b7Hsuy /Z/R6zDxjJInryjR7q36eZ96ZaX+fH5qPHFLPBo8nOrSWjidJSuwC1RmCkmvjTMaPbeT+KIP2frc 7J7HYCPRkkPfR/U9W0H8z9J/MKyv/L2tWf6K1q4tnj+qh+alGWhaGQqhelamoBGbHT6vHqokVvW4 8nnNf2VqOzMkZ3YBsS8x0PcwPz/57ntPLHlvTrxvQvLh3GqIh5Az2g9J0AFaj1KkfLMTtLOfy4HU mj/m8/tdt7O6OH56chyiLj7p8v8AYl4fPqF5dQkRRqqyuCIpKheDbMSR+AzSaeUIzBnyG/v8ns9b DLPFKGKuKW1npfXv26V1ZjqP5p+b7eJdOsNVSwgii4hLZFHTbcvy3HXqMz8va2aZ9NAfN0mm9ldJ jA47mffX3freG67518161Db6PqmrSX2jyX8cl59ab1Swf92xV2UuCgbkoUj7OVjWZJx4JHb7XLPZ GnwzOXGKNV5AddvPztAxX5tdcttM1H04oooJBZzmg+s+nQlq9A8YHhv8iKxSo6za3J8r3FxLA7XU Z+tIOTI8CKVlUMD8RKDpuPCuKsZu7aS6s7XVbSVdPgmAkjmhcl+KjlVaV+JSoIrTwNANpRkYmxzY ZMcckTGQsHm9G8kfm9ct6GiJcSWuuyxM9wjVVTBHT1pldfhU8agduRGbr8+JYSf4uXxeO/kOUNXG I3xk3/mjmD9yzzxYahceWtWMTJNAbf6xPbycmKBKPIUkWgp1YcvkM0hNvZgACg8+amp6WYPL3122 ubyL07vWSGeMsYgwQ8gDwLdeKinsThhLhkD3MMuMZIGJ5EEfN6b+X3nvX7PU4NOudWhunit1UyKn pu0sNBLyCll35A7Mafr32k1pzzIIrbZ4ntXseOjwxlEkm6P6Nvg+8/I/5xeV7+2/Rt3qUVtqVtIb eeG5rCQ4PE8S9A1eooemZZyRJq93TeDMRutnsEOu6e3KRLxDUBgw6E028QcldFiRsiF1+ybkI7tG agqK0p41yVlhQTuC5JmkjK1EVFjYdKGu+GM96RKGy25vLeIN6sqw0I+KnTJSOzGIX8ucaMsp4SUI cbbU7fPBzTVPK/zA/N7yt+W9tHda/fiCOaQQwRpG80sj9+EcdSQvUmlBlOfUQwDimaDl6TQ5dXPg xRs83zN+Y/8AzmFoGn2LReS4LjzBqEqVUsj29uhI6yPIA+1eir7VGa/UdrYoD0HiP46u50Xszqcp /eDgHnufgB+l8I6R/ij/AJyl/NPQdE886jNc6O12815p8JaK2tbaAF5PRQE0ZwAnMkt8Q3zXYs2T VZgJHbn5PQanT4OzNJI4x6uVnmT+znXJ+0eh6bpvl7S7HSdMtYbLTtPto7ays4VCRwxRKFREVdgA BTN9xPCcJJs80U1yC7EkDky8COnX3ysybOBZFcmRp5ZGHItwhHgi9D8yanIid2SkwqgrRzJSSj7n 4qZMSYmKDutRtrdRI92lpHFUuTQADvuSB9+C75bJA+L5888+Y/yZ10GLVPNWmfpSHmIL1J4nmgLf aClK8a9wevQ1zHyTwzjwzkD8Q7PSYNdhmMmGEx7gaPv7w+UdZlbT7+e30nVYdY00uHtNRtAShUkg g8TxBrtsc0Op00cZuEgR7xb3vZ3aU88ay45Qn/Vlwn3GvsP2pYl7cWWr2GpLdPFLbSCUlTxZd6bM pFOVadP45jY8kschKJoh2Go08NRA48guJR3mXW9V1m9s7q7ufrbFWEDSACkg2enDjuRxPjluo1c8 /wBVDrt8P1OJoOy8Wj+gkmgLPcCSO7v+5Qiu5IFQy+oZIwD8fxDidxQji3Tbv/HMV2KS6vevG4Do BA5HK5X4xvvt4dejAYVeZa3r9ha+YvLfl68huIIPMToLfVXUfVqs5RVBU1J5UB2ovIMdsztPgMom YPLo6rW60Y5jEQfV16PTNaVdSgvLF/KVzMaFYrmKSEBJORVJYyzKeq9ePTc4Wtj0GrXY9by5rsHo aotkwPFg0VwChJJPQvXr7g9q4qgdJt7y58pwQuifHB/ocqMobkCKD97QdhtXxxVOtA0rSbVNW8wW OnymHVNPW1a6eMiWYSNURQkFQsfIAMRQkgkmhWhs1THhF31RralBqOl3Xl/VrX9Ga/FYiKL6y7Ay MsBIeJ1BrsSafgemBkhtHSUeUbPWb+eNLPT7UrZpAzBZfh4kSksSSQKcRQBuu/RVC/l/pM48xWwv rWazur31bqWOZSOIkagVSQCRRgfn8s2HZw9ZPk8/7RTrBGPfL7gX1z5i/KltZsF1PR2EOoxxoHU7 RzgDbkezbUr9/tm5IjIfN5zBlOId4ebaNaXFuLnQb66vtJvoGAnSGWRCVNQQEJKfTSh2pXMcynDa y50Y48g4gAfgiLS3/QszLpd3KJn/AHlxNNIwlJK0TvQAGlQvbrv0iMkh1LI4YHmB8n6Th19RjyAo ij8W6Zugd3m62fI3/OVPmLWPK/lXTPMnl6+fTdZ0DWrS8sJENElJEsEkcqinJHjlYMO+YPaGQ48X HHmCP1O17IwxzZ/DkLEoke7rfzCh5W/5yk8u6z5ON7rTnRNXsFH13TzyfmwWp+rNT4w52A6iv05D D2piywsnhI5g/o72zVdhajDk4YxMgeRH6e747PhX8yNe1f8AM/zRd6lqdxNEkkiLpNpCxX6tbgH9 3VadftMe59gM5zW646jJxdByD23ZnZ8dFh4B9R3J7z+odGEz+Wb/AE20YwzGaEP6ZWcF+R4bcWJB G5GxzD43ZWQ+iv8AnFPyzqWneetU1i1slXSINOeC8vJq7TzOjrHGdqkhKnw28Rm47J4uIyraqeZ9 o8kDjjjv1XdeW43/AEP0bm1GAEgMvIEcgCAT49/DN0ZPJiKwzqzVp6i1BTjTt3rtkOJkIrTcfvED KEQhmJHYj/bwcW6eHZ4T+bn/ADkN5O/K6FrK51G0vPM0oH1TQBOqS0bo0pAf01puOQ37ZHJm8MXz Pc5ui7OlqpgXwx7zy/RfwfAPmb8yPNf5i3F5ean5ilfTJmaWDTYJ6WUYAqIlRDRipI+0K/Tmmz6n JMmyQO577Q9lafTxHCAZD+Lr+mvgp6Jp1vJaG7ShmVBWOY8tgKNQDvXoMxC7QBlA1BrK2hjovCNV 3c7AHs3XwO2ARMjQYTnGAuRoIS3n/SV5ApkSNZirzFiQvJjsDtWijx8fbIlkmGoScH9BZA0tt+8S UGqnjs4Ujb7O9fbAqe2WmX2uQi2tY5Y3Kh0uvhVaGg25KRQEn+uShIA2Rf48mvLCU41GRie8V+kE MqsNI8r2V7b2OtC41WadjB9ag5qaqASHhUqaCnUVzY4s+mPOFfaHnNZou0hvDNxDyqJ+zb7Xr+nf l7+V2t2cL6ZDZT3NnJ6kVwEQz286ggPv8SMOR8Dmw9Eo1GuE9zzJy6jFlEshlxj+df6XgmvX9x5M 1VvL/mW1ktkCOIL+OjQXK1AEkZD1CkEkjqDXrmunAxNPV6XUxzw4h8R3MP1qLyX5h0pVXXYLaZFa a2vmblJG1KlZCe29CpOQcliuj+bUg06905/RN1pdnNbxvCQyyLbIaSqzD7O2wHj4HFWfeVtTtrDy xoC3MLSF/QtVjmk4hJpiRGQkm3FjTevyxVkN0uk3oudO1mC1e4uDyRZfsSspBCRkqOTVNCAcVee+ VLK6vdJgXzBfi30bSmb9G6VDVfWmikBLzE05cGalD17jxVTrT/N9ve+bIroMYrQmRLAsxIbj6Rbj XpyC12982PZ53kHnPaKJMIHoCX2X5e/NTQ4tPSO8mVfTjUGtPfxzNMTbzYkKYv5gl03zvGdR8uIr XEBElvdQsAJAp3Xmvj232ORkBINuORxy+95heI9s8haJrdyfSuRxBaOY/aWjbgEHYjrtmIQRzdjG QkLD9HBcLISjIB2ZjQ1I9s2/Fbz/AA0+V/8AnKC2W98phZaKtrd28tT3PqcfuAaua7tbfTS8q+8O 27BNayHnf3F8JQ2j3MczcVFu9VgpRd1O7V96ZxvE+hJ/oelwGjAE0kIll6rQDqT88eJLLT5cgvbG zikeQ1kme49PiwVnWqOwPXjTpjxLaB8u+bfO3lWzv9JsLmHTbuznJ1KIIj+qWUcLiAOD8DjtvTpm wxdo5MMBGNV9rqM/ZOHU5DknfF132Tqy/MDzfJJYarqfmS7ksYbhJLuOF1iDxrIC0dEC1qAR0ww7 SySmOOXpvemOTsjBHHLw4AyrayX2F5f8/wDl/WbaN7PUoZm4iqcgGQHejIaMPpGb2OUTFxNh5XJh ljPDIEHzYx+a/wCZ6eR/J2oaxY8b3VpAINHsQruZriT7ICRgseIBYjbYdR1wHLwi+rfpNIM+QRJq PU9w+L8m9T8seZPP+o3OuXekazrF/qcpmuNVImeRmcVVKyBk4gU47AAeAzDhLMTdPZZToMceDiAr uO/y3+7vZTpv5H/mJpkkMul2F9G4CvcQTei8RBB2JEi1NRTYZOWKc9pRHzcOHaelxbwyS58iLv7n 0X5U/JfzXeGK81O5OjqAGuI1IkbqSaE/CNu+Rx6Efxn4Br1ftMBtgjfmeXy5/cxfzs2jafLDo2gQ C8Vrjje6rKTJLcSUUUjA2VTt06+A7xzaiEAYYhXeXI0PZ+fPKOo1UiTzjHoO41yv7e9NNNs9Oi0W 9iutPe31qwtJbn1ywcO8aMwahBWhPVafPNa9IA8yvfMs8+l32r3H12SDQbiztbe0tpLa0NLlLp5S Xe0uOdPQpTbr17ZfDHGrLi58kuMRgQNj58q8wnmgav8AmdLbTwaRqyXGlwiCHT53sy7TfWoIbqPl 6EEqQOI54uRlkWMEmjlVZhZ+Vvk4x7ShAer4+W9fH4fJF2GreZRb6QLrXrJ5PMd1bpZFgkVyyPKs TGG5ktZIiVMi8liaRo6nlH8LhYDT8m7JrYASHd1/Zd/Oge/kxDR/N/npdWkTS/MNi2s3cOntJbAq txENTntobN24wnkJBco5MZYKu0nFyqNkYsEoGwacDV6rDliYThxDf7OdHmOX4CKj8+fmV5q1OPSb rV7PWUtEuDJqkFszMgjSEuiw/U/rLUNxAxMUTJ8QJOzcczIBODpNNiGmznoO4nc3y618b8urVp9e Ou6Rp+tyaZpZk1C3sLX1IYI7i4HGCST0PVt/hdILhHCzhGLMFCtICgxhi3dvPUx4SYjp+PtHT7mB 6hd2/mfQrvVl8y2mm3ehTWNpFPMiiEw3MdyzIyQQSSuwMKhBGpK1YsONWURhfNlkycJAAvY/oTDT tU89DUNJsr+WzsYvLVrfzXS8IpEimsGaCS2lZY2VZBxQKvJgTLDv+8XE46WOaMund8b/AB9heiN5 gvtX8tSazdxtrlu97dQvaC+03TgsNrBbSK8Md3bO0rN6h2jpTbuRjGIrdckjx8Me4dCe/wA3k9hf +cLfTb+zttbsbE3iW11q8HpyPPY2V68XozuVt3jKkSxV9J5JOLCq7NxPhhAy2ar8d39qN1PSfMWr WC2evatp0drpFsL3n6qxtb2qSwwLc+pbKwfn63NAGLSL8Sq3OL1DAGJsc2OU45x4ZCwdv0/o3/tU rTypqqa/baU2ujXEju7m1QXN1fXdn9bsOAmg+qNEJZmj9RWISJ14nlXijlcgzyT9JOzr/C0mAeIM dHpfny61+O+n1R5d1rzZ5J0a6judX+oHS4yqIsVuFdVk09V5xyWysgMd7y3IatAyoVIZlOXIdHX+ DikeI7k7n7fPyYj5n/MvVNTvYJbTVhcsZFW4ZLeAo0dfBYxzIp8NK0PtXHjNbpjpoA+kbfF+rct5 BxLNJw+LYdGqD2H0ZtDK3mOGngv52aY/mfy7Otk6PeWLLcRwlgEn9MHlET8Q+JWI69cxdbhOpxGA 2P6nO7O1I0mcZCLHX4vzjv8AVb20kupbXSnsLaMEG0kYMsZBoSPHORlpzCXDM0Xu46oZIccBYTDS h50ktEktLmztLUpy5ykuSrb1oBQnInwx3sx4p7vtTMaT52aMtP5n9BJd2hiV46n5LTBxw/m/akQy dZfYgo/KGtXE7/7nazB/Tnk4GvAgN15VNG7fTj4kf5v2r4c/532LZ/J09hHbxtrElwshZ/TVQFUg noCTua98EsoPQJjiIHMqY8tutsl0dZuIZK1VWjFQQd/iBB+7DHLRsDf4rPCJCibHnTPPL2lfmu3o NouqXF/ZHj6g1BWMVK7Ees5qtP5d82eHJqOdGvM/st0epx6MbEi/6IP6DT7G0DSYksYTf2EEV6VX 11iJeMN34l1UkfRmw8Qkb83THHEHbkyZLe2pR4Iwp2IC9uvbxwcR6rwjo88/N7zPY+WvI2rXN1P9 U+tR/VYmjpzZ5/holOppU7dsZ5KiS5Wg0/i6iEQLFgn3Dm/P+xuIfMGsQLp8kkX1OIul1UF/URgy tQmmzU9/lmrIp9D5nZ6fHe3F1pV/p+oLH+lIreWJmrXnzjIV6oDQvXpgjDikAOrHLlGKBnLlEX8n mNn5a8yi1GiQWejayL8RXeqRXct4qQSW/rqPitmiYH98woa9sy55IwmRW36nV4ITz4MeQEiRF9P4 tz3qVj5K1e8mudL1bUdEMzzNNZWl8k7+jI0SRM0CKkNuyenDEqxMskaqgXiF5BrI5+5qy6UDY2Ad j5/H4+9NNK8jtoU1hpo1DRrzV9Ou7KYR/wClPPI9kfVtnuYLcelHWnH1fTR2XnVzzk5zOY86DUNN CqJkduvn+Oqc2Vte6VBajSo7GLVkSxtPrVzZCBWk06a3miT1UllZ1iFr6XCOOIuKvIeSDBxj4oOL iNco7/bfl5318nnN7o15pSix1C00259SR0CXYnEdwt19VYo00BiKiNrKNvhZWqPi5KaYBlIFdGye GEpcf8Xft5/rTdND1vy0/wClre20C6t9Mvor7T0W3d49NkVYopBGKjn6iwRqXcO4p6gZZCZMRkRL DEjmdx+Px+hU07yzqmjeXr659HR/MVlqdxa3N3AVuHVZIEmjj4SR+m6gGQ1KMGPSvAsGAnTZKIkQ bIIYn5o8veaINL1K51TU4f0t5p1GPUbhYZJIljjMZabiFQVM0jRtIKKv7mP7Xw+nLxBTX4Y4gRyA /Hy/SUle21/UPLlvp093awW+kyTy2jW7yAytcRwxvybjuvCBQop1rXwEeINvW/L8feyLRtE1ie0U XKaR6jw2ljqV65uxJeWtoIWjtpOLiMIvoRrWJUchR8dSxYnI1DEAbs/qJ/BWtoHmzWXv7OQafJbX 0R0+TUEikWSaEXENxFCqQhI/3bW4RPh+GM+nXiqKhE726onGEBxE0BuynzN5W80aKsravZ6PLb69 eX+pXlg7XIQm/e3lkhJQpIqrJaxuvFgarxJYGmZUTQefnqIZZdRQofBcmn+d9cgmsH/Rl3aXkESy GBJI/TVFsFHFeKxoP9x0YoFCgl6AKV4pLKJhE7X+L/WyOPyDqNghe/uNPUWZSqLKwkcSdwvpg0AU fOhyvhLb+YiOhfpP5n/45d//AMdXq3+8H+9P0e+bOf0nm8tj+ocvi+MvNX/HSH/Hd/uv+m5/3i7/ ANx75pp9fq/5KfT/AGPRY+n0/wDJL6/7XgN1/vdcf7x/3h+39n/Y/wCT/DNNqP7w8uf8P0/Dy7no dL/dR58v4vq/zvPvZdov+8c397/vQn2P95+vb2zFcwM1/ai+39kfa6de2KVC2/3uvf73+9H2en2R /mcVUD/x7/a+w3X5np74qnXln/js6f8A7wdX/wB6/wC6+2On+X4e+Zug+vp+n4Oq7W/uuvw5f53k +qtP/uU/uen+6v4ZtZvOxT7v+19of5/PAlWbov2vtD59e+SYh4b/AM5B/wDKATf7z/70wf70/Y+0 fx/hjP8Auz+OrsOyP8bh8fuL418t/wDHc1P+7/3T/wAQ/Y9vHNcXuhzL1XTf97Yv7v8AvIuvT+9H 2/8APrl+k/vR+Ojq+3P8Tn8PvCvpX/HS1f8A3n/46l3/AHH2/wC8X7X+T45XqP7w+9t7L/xXH/VD Bm/5SFf96P8Aewf33979j9v/ACfH/IysOXJlFp/ykKf7y/70f9Kn7H9w/wBv/L8fbM2P0j8F08v7 0/D+r/b3sDH97cf73/73R9On21+x/wAW/wAv+ywMkz8+f8cRen2V/vv+ef8Adf8AFn8K4qs03/yX Mv8Acf7wXP8Af/a6/r8PamKpTaf8c7Q/7rr2/u/7r/j6/wCNffFUR5z/AN7z9v8A3li/vf8AjEv+ 8/8Ak+P04qwLTP8Ajn3/APd/bb+8/u/s/sf5H83virLbb/jnj7Pf7fX7S9MVe1eRP+Ojbf7zf3x6 /wC8/wC19n/izw9q5di5l1Xa392OfP4fH9CP/Nr/AI6mnf3XRf8Aev8A3m+zL9r+GW4+RdLj+sMN 0z+6sf8Aej+5n/uv95+3T+PtTLHJLKNG/v7r/jm/Z/6Wn911fr/D/Kxay//Z ------=_001_NextPart260342025263_=------ From nobody Fri Jul 12 02:45:48 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DF76F12033A for ; Fri, 12 Jul 2019 02:45:45 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.703 X-Spam-Level: X-Spam-Status: No, score=-0.703 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, PDS_NO_HELO_DNS=1.295, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MP8S1JB0VrmY for ; Fri, 12 Jul 2019 02:45:44 -0700 (PDT) Received: from mail-lj1-x236.google.com (mail-lj1-x236.google.com [IPv6:2a00:1450:4864:20::236]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 36FBC12019F for ; Fri, 12 Jul 2019 02:45:44 -0700 (PDT) Received: by mail-lj1-x236.google.com with SMTP id m8so8705706lji.7 for ; Fri, 12 Jul 2019 02:45:44 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=dPEqP77XL65jU57JVaWZgYgZVeWuUwLd6BJyt2NFyKc=; b=X+zcrBAriw5inLRJlQzme20JwdiaJng/Q55yRwH5OrkEm3/NcK56aoCNgLg/MslhRD JfPHz67Rfts/kxOuKu8SrN9GBEY9zrOb3H3OiWxaMUJ0HShOLggJLGxIvvUD6rxIBXa6 067/yqiSA6lr447JenTt9MgbVr2JGygsLM/OzOOkPsqll2WqUgF/OPck80jAG0dbZwjN UGjvOqBsCGv5STgiao1dh5L77Zzjnfznn5dYEihAAuYj/XOwPxluCQI8q5173a4i3Ppo Mcz7lR+8O81x+rZG1wsno2Ha8ADrTzbIHQEuivyONNIZAcwPc5xNpmIBJ+wFdTXF4sZM IGBA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=dPEqP77XL65jU57JVaWZgYgZVeWuUwLd6BJyt2NFyKc=; b=Ppr0Ir+0Lvcqz+Md1xYEQ4RE/tX6/I1aNliIJ0lcH82Y+b1/j7dKPdI9/YYneWpw2j C13UxYX6ccDOA6S6D+MEPirY2mLOIlyZmWIAcKDNuVo9Hg8JAAVLEom8Goy2BGoVjClN Bs7KMrRrU+zEB6gpilwMpWWWDZlup47xPc5NyK910a7HybLlqLxRKlaYProdzhdE9gm5 VSmZLtHEwOQvgaLhmz0xfeen8TL6HPE5BBauu3cbuVp9k7JfL5Pm+8njWUW106kWQEJY OoV7x0POKTwyhkjnolg2zpQRMWdMRV1p05Z8f3ARfEVBySyuXDnwMy5rUCg5xoXUt1yO 43EQ== X-Gm-Message-State: APjAAAUnmv2tWR2NkYQDK51cJpqYNt8PTkZY+ckKTSQVGkA1M4f/9Ohx 9nO5NHDp1lwnQFboopa5f0PbtezYcDMmn0wkzsUD1w86 X-Google-Smtp-Source: APXvYqyGqqwYVLwUfCaOkwD6b4CRbg6vOaOAAInjolDZihHdrx4KQ1RHTmrHVXqicQJ/V7BwKYwA7V/KVvYrLtXErWE= X-Received: by 2002:a2e:534a:: with SMTP id t10mr5147446ljd.109.1562924742331; Fri, 12 Jul 2019 02:45:42 -0700 (PDT) MIME-Version: 1.0 From: Jiuhai Zhang Date: Fri, 12 Jul 2019 17:45:31 +0800 Message-ID: Subject: Handshake costs 2-RTT when token validation fail To: quic@ietf.org Content-Type: multipart/alternative; boundary="00000000000013d17a058d78c6d7" Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 12 Jul 2019 09:45:46 -0000 --00000000000013d17a058d78c6d7 Content-Type: text/plain; charset="UTF-8" Can server continue to handshake when token validation fail? Client may send new token in Handshake packet. Just like this Client Server Initial -> <- Retry+Token <- Handshake Handshake+Token-> Is there other solution to avoid 2-RTT? -------------------- Client Server Initial[0]: CRYPTO[CH] -> <- Retry+Token Initial+Token[1]: CRYPTO[CH] -> Initial[0]: CRYPTO[SH] ACK[1] Handshake[0]: CRYPTO[EE, CERT, CV, FIN] <- 1-RTT[0]: STREAM[1, "..."] Figure 5: Example Handshake with Retry --00000000000013d17a058d78c6d7 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable 
Can se=
rver continue to handshake when token validation fail? Client
may send new token in Handshake=
 packet.
Just like=
 this
Client =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0Server

=C2=A0 =C2=A0Initial ->

=C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0<- Retry+Token
=C2=A0 =C2=A0 =C2=A0 =
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =
=C2=A0 =C2=A0<- Handshake

=C2=A0 =C2=A0Handshake+Token->

Is there other solution to avoid=
 2-RTT?
----------=
----------
Client =
                                                 Server

   Initial[0]: CRYPTO[CH] ->

                                                   <- Retry+Token

   Initial+Token[1]: CRYPTO[CH] ->

                                    Initial[0]: CRYPTO[SH] ACK[1]
                          Handshake[0]: CRYPTO[EE, CERT, CV, FIN]
                                    <- 1-RTT[0]: STREAM[1, "...&quo=
t;]

                  Figure 5: Example Handshake with Retry


--00000000000013d17a058d78c6d7-- From nobody Sat Jul 13 17:45:28 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 46102120191 for ; Sat, 13 Jul 2019 17:45:27 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.7 X-Spam-Level: X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=mnot.net header.b=U75o+Hp1; dkim=pass (2048-bit key) header.d=messagingengine.com header.b=wcRl5h0q Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IQTfCbG2M0uI for ; Sat, 13 Jul 2019 17:45:24 -0700 (PDT) Received: from wout3-smtp.messagingengine.com (wout3-smtp.messagingengine.com [64.147.123.19]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 34A18120071 for ; Sat, 13 Jul 2019 17:45:24 -0700 (PDT) Received: from compute4.internal (compute4.nyi.internal [10.202.2.44]) by mailout.west.internal (Postfix) with ESMTP id 6848F2D2 for ; Sat, 13 Jul 2019 20:45:23 -0400 (EDT) Received: from mailfrontend1 ([10.202.2.162]) by compute4.internal (MEProxy); Sat, 13 Jul 2019 20:45:23 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mnot.net; h= content-type:mime-version:from:to:subject:message-id:date; s= fm3; bh=NCzpxc35ds5BquhqIBjvABYPn83MMDlpp1bO+LWXRXo=; b=U75o+Hp1 QLoATzQY8iAyasL8ssuynooDJ10wmdp8YJFKWqe26Ev5xG2bSSnazZCpZUb2dWrS hkEqvSGUbU6YVHAg1OAb30RctCY38YKtxGsuOjHk0IJO/0cENU7LT7JKcdoRQJLk ZRh9ZFhZbvWIDsUhMarXhrboDSsIejglMxWmvWVKce7Lae2Y4RexpXAOsWUX7zdP mFKQlNgFTgsfhRFk5Txh0YPZHBazSoPnTxscdg/HADNRptDaEtzQrdyw08wJKe9Y E/WCux2OyiCYIDTnX6saOKXPwMKMm0EM0FxGWswQ4lbycSKt6VKzTZDKbYclKkvR e96JKqQLNBndnA== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=content-type:date:from:message-id :mime-version:subject:to:x-me-proxy:x-me-proxy:x-me-sender :x-me-sender:x-sasl-enc; s=fm3; bh=NCzpxc35ds5BquhqIBjvABYPn83MM Dlpp1bO+LWXRXo=; b=wcRl5h0qv/xERLqDy/FTEG4/hEorH32B282zndUny0LPp rVw9wB+xGIafA4F836aR4bftZllmO6djMcAGXxh/Vq7ycJ6+qgdoSaIM9IHftEwj thcZTY3lwb9el+K32bKeNfsxNjb7SVlm4jJnBOefgmjKqyQBekPaI0B4aamObifo n17A3jLVF7Yr2CfVa37tZ6hc8e/u8x1CUBKgTQ2yvx1NnnDfKMbOPllFwA7ezdmI qerTpeDypnF7ofts+aWtRZVjdel5PRSKokiGJbl9jMsJBCsYedOt3Jxa1mlTLGzu 1etyZSkADiS5O8k7TgShDOG5CxoobKfZGq0pHmd4w== X-ME-Sender: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeduvddrheeggddvfecutefuodetggdotefrodftvf curfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfghnecu uegrihhlohhuthemuceftddtnecunecujfgurheptggghffvufesrgdttdertddtjeenuc fhrhhomhepifhithhhuhgspgfpohhtihhfihgtrghtihhonhhsuceoughopghnohhtpghr vghplhihsehmnhhothdrnhgvtheqnecuffhomhgrihhnpehgihhthhhusgdrtghomhenuc fkphepudduledrledrgeefrddvgedunecurfgrrhgrmhepmhgrihhlfhhrohhmpeguohgp nhhothgprhgvphhlhiesmhhnohhtrdhnvghtnecuvehluhhsthgvrhfuihiivgeptd X-ME-Proxy: Received: from cloud.mnot.net (cloud.mnot.net [119.9.43.241]) by mail.messagingengine.com (Postfix) with ESMTPA id 99E648005B for ; Sat, 13 Jul 2019 20:45:20 -0400 (EDT) Received: from cloud.mnot.net (localhost [127.0.0.1]) by cloud.mnot.net (Postfix) with ESMTP id 406FCC03E5 for ; Sun, 14 Jul 2019 00:45:17 +0000 (UTC) Content-Type: multipart/alternative; boundary="===============3535337387347897642==" MIME-Version: 1.0 From: =?utf-8?q?Github_Notifications?= To: quic@ietf.org Subject: Weekly github digest (QUIC Working Group Specifications) Message-Id: <20190714004517.406FCC03E5@cloud.mnot.net> Date: Sun, 14 Jul 2019 00:45:17 +0000 (UTC) Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 14 Jul 2019 00:45:27 -0000 --===============3535337387347897642== MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8"; format="flowed" Issues ------ * quicwg/base-drafts (+9/-5/=F0=9F=92=AC38) 9 issues created: - Advise bundling a PING or other small ACK eliciting frame with Initials= (by ianswett) https://github.com/quicwg/base-drafts/issues/2895 [-recovery] = - In Initial and Handshake packets, knowing undecryptable packets could a= ccelerate handshakes with loss (by ianswett) https://github.com/quicwg/base-drafts/issues/2894 [-transport] = - QPACK Required Insert Count decoding pseudocode does not enforce that e= ncoding is valid (by bencebeky) https://github.com/quicwg/base-drafts/issues/2892 = - HTTP/2 in Peer Denial of Service? (by zz85) https://github.com/quicwg/base-drafts/issues/2890 = - HTTP/3 support for status 101(Switching Protocols) (by LPardue) https://github.com/quicwg/base-drafts/issues/2889 = - Crypto Retransmission Timeout interacts poorly with Congestion Control = (by marten-seemann) https://github.com/quicwg/base-drafts/issues/2886 = - Appendix A of quic-tls is wrong (by martinduke) https://github.com/quicwg/base-drafts/issues/2885 = - Inconsistency in STOP_SENDING requirements relative to resetting stream= s in general (by mjoras) https://github.com/quicwg/base-drafts/issues/2884 = - Section 10.4 Stateless Reset grammatical error (by gjnance) https://github.com/quicwg/base-drafts/issues/2876 = 15 issues received 38 new comments: - #2670 Remove ack_delay_exponent TP (10 by marten-seemann, martinthomson= , ianswett, kazuho, mikkelfj) https://github.com/quicwg/base-drafts/issues/2670 [-transport] [design] = - #2884 Inconsistency in STOP_SENDING requirements relative to resetting = streams in general (6 by mjoras, martinthomson, ianswett, mikkelfj) https://github.com/quicwg/base-drafts/issues/2884 [-transport] [editori= al] = - #2823 Do Initial secrets change after Retry packet? (3 by DavidSchinazi= , ianswett) https://github.com/quicwg/base-drafts/issues/2823 [-tls] [editorial] = - #2844 Client connection IDs are broken (3 by DavidSchinazi, Ralith) https://github.com/quicwg/base-drafts/issues/2844 [-transport] [design] = - #2205 Largest acked in ACK frame MUST NOT decrease (3 by martinthomson,= janaiyengar) https://github.com/quicwg/base-drafts/issues/2205 [-transport] [design] = - #2869 Stateless Reset packet sizes should not depend on the maximum con= nection ID length (3 by martinthomson, mikkelfj, ianswett) https://github.com/quicwg/base-drafts/issues/2869 [-transport] = - #2834 Long Header Packets and Routing Connection IDs (2 by mirjak, mart= inthomson) https://github.com/quicwg/base-drafts/issues/2834 [-transport] [design] = - #2339 QPACK: instructions and stream description is suboptimal (1 by af= rind) https://github.com/quicwg/base-drafts/issues/2339 [-qpack] [editorial] = - #2885 Appendix A of quic-tls is wrong (1 by martinthomson) https://github.com/quicwg/base-drafts/issues/2885 [-tls] [editorial] = - #2886 Crypto Retransmission Timeout interacts poorly with Congestion Co= ntrol (1 by ianswett) https://github.com/quicwg/base-drafts/issues/2886 = - #2892 QPACK Required Insert Count decoding pseudocode does not enforce = that encoding is valid (1 by bencebeky) https://github.com/quicwg/base-drafts/issues/2892 = - #2638 max_ack_delay is unknown when a new connection is established (1 = by ianswett) https://github.com/quicwg/base-drafts/issues/2638 [-recovery] [-transpo= rt] [design] [has-consensus] = - #2143 Be more conservative about migration? (1 by erickinnear) https://github.com/quicwg/base-drafts/issues/2143 [-transport] [design] = - #2541 Clients cannot abandon Initial packets while server can still sen= d initial close (1 by DavidSchinazi) https://github.com/quicwg/base-drafts/issues/2541 [-transport] [design] = - #2550 Apply GREASE to transport parameters (1 by mjoras) https://github.com/quicwg/base-drafts/issues/2550 [-transport] [design] = 5 issues closed: - max_ack_delay is unknown when a new connection is established https://g= ithub.com/quicwg/base-drafts/issues/2638 [-recovery] [-transport] [design] = [has-consensus] = - QPACK: instructions and stream description is suboptimal https://github= .com/quicwg/base-drafts/issues/2339 [-qpack] [editorial] = - More Connection ID Space https://github.com/quicwg/base-drafts/issues/2= 736 [-invariants] [design] [has-consensus] = - Section 10.4 Stateless Reset grammatical error https://github.com/quicw= g/base-drafts/issues/2876 [-transport] [editorial] = - transport: dangling references https://github.com/quicwg/base-drafts/is= sues/2874 [-transport] [editorial] = Pull requests ------------- * quicwg/base-drafts (+11/-5/=F0=9F=92=AC31) 11 pull requests submitted: - Remove DoS vector for spoofed connection migration (by erickinnear) https://github.com/quicwg/base-drafts/pull/2893 = - qpack: fix reference to blocked-streams section (by dtikhonov) https://github.com/quicwg/base-drafts/pull/2891 = - Firm up language around stream termination (by martinthomson) https://github.com/quicwg/base-drafts/pull/2888 [-transport] [editorial= ] = - Get test vectors in place for -23 (by martinthomson) https://github.com/quicwg/base-drafts/pull/2887 [-tls] [design] = - fixed typo (by martinduke) https://github.com/quicwg/base-drafts/pull/2883 = - Remove spin coordination requirement (by martinthomson) https://github.com/quicwg/base-drafts/pull/2882 [-transport] [design] = - Explain asymmetric confirmation condition (by martinthomson) https://github.com/quicwg/base-drafts/pull/2881 [-transport] [design] = - Articulate error code principles (by martinthomson) https://github.com/quicwg/base-drafts/pull/2880 [-transport] [design] = - Add note about stale ACK frames breaking ECN (by janaiyengar) https://github.com/quicwg/base-drafts/pull/2879 = - Initial secrets do not change after Retry (by ianswett) https://github.com/quicwg/base-drafts/pull/2878 [-tls] = - Editorial fix for #2479 (by ianswett) https://github.com/quicwg/base-drafts/pull/2877 = 8 pull requests received 31 new comments: - #2881 Explain asymmetric confirmation condition (14 by martinthomson, m= arten-seemann, ianswett) https://github.com/quicwg/base-drafts/pull/2881 [-transport] [design] = - #2880 Articulate error code principles (8 by martinthomson, mikkelfj, L= Pardue, ianswett) https://github.com/quicwg/base-drafts/pull/2880 [-transport] [design] = - #2878 Initial secrets do not change after Retry (4 by martinthomson, ma= rten-seemann, ianswett) https://github.com/quicwg/base-drafts/pull/2878 [-tls] [-transport] [de= sign] = - #2873 grease transport parameters (1 by marten-seemann) https://github.com/quicwg/base-drafts/pull/2873 [-transport] [design] = - #2877 Editorial fix for #2479 (1 by ianswett) https://github.com/quicwg/base-drafts/pull/2877 [-transport] [editorial= ] = - #2882 Remove spin coordination requirement (1 by mikkelfj) https://github.com/quicwg/base-drafts/pull/2882 [-transport] [design] = - #2887 Get test vectors in place for -23 (1 by martinthomson) https://github.com/quicwg/base-drafts/pull/2887 [-tls] [design] = - #2851 Allow connections to share a port by adding restrictions on zero-= length connection IDs (1 by DavidSchinazi) https://github.com/quicwg/base-drafts/pull/2851 [-transport] = 5 pull requests merged: - qpack: fix reference to blocked-streams section https://github.com/quicwg/base-drafts/pull/2891 = - fixed typo https://github.com/quicwg/base-drafts/pull/2883 [-transport] [editorial= ] = - Editorial fix for #2479 https://github.com/quicwg/base-drafts/pull/2877 [-invariants] [-transpo= rt] [editorial] = - Allow longer CIDs https://github.com/quicwg/base-drafts/pull/2749 [-invariants] [-transpo= rt] [design] = - Change log for -21 https://github.com/quicwg/base-drafts/pull/2875 [editorial] = Repositories tracked by this digest: ----------------------------------- * https://github.com/quicwg/base-drafts --===============3535337387347897642== Content-Type: text/html; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Weekly github digest (QUIC Working Group Specifications)

Sunday July 14, 2019

Issues

quicwg/base-drafts (+9/-5/=F0=9F=92=AC38)

9 issues created:

15 issues received 38 new comments:

5 issues closed:

Pull requests

quicwg/base-drafts (+11/-5/=F0=9F=92=AC31)

11 pull requests submitted:

8 pull requests received 31 new comments:

5 pull requests merged:

Repositories tracked by this digest:

--===============3535337387347897642==-- From nobody Sun Jul 14 19:27:20 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DD3CB120191 for ; Sun, 14 Jul 2019 19:27:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.701 X-Spam-Level: X-Spam-Status: No, score=-2.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=lowentropy.net header.b=RLQCwPke; dkim=pass (2048-bit key) header.d=messagingengine.com header.b=p6AMBPXw Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DtxJ978OlvMw for ; Sun, 14 Jul 2019 19:27:17 -0700 (PDT) Received: from out3-smtp.messagingengine.com (out3-smtp.messagingengine.com [66.111.4.27]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 76BB512001B for ; Sun, 14 Jul 2019 19:27:17 -0700 (PDT) Received: from compute1.internal (compute1.nyi.internal [10.202.2.41]) by mailout.nyi.internal (Postfix) with ESMTP id B351A220C3 for ; Sun, 14 Jul 2019 22:27:16 -0400 (EDT) Received: from imap2 ([10.202.2.52]) by compute1.internal (MEProxy); Sun, 14 Jul 2019 22:27:16 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lowentropy.net; h=mime-version:message-id:in-reply-to:references:date:from:to :subject:content-type:content-transfer-encoding; s=fm2; bh=xkpSX 7hG2g0heoI7a9egNbmfCDE/ABAXKUVsvgcERiI=; b=RLQCwPkeooYUigt/vdpPb DMtsALhDOULkj5desyQ3fi80plFFl2RhE0hyLVUaCknEIDrqWhkb8XXUA4wMiVaJ BYQ+YUCVOwHVLhtbzfwtpl1pUajzbp3jIYGyr14QOyuKsChdve+r+Kto3K/baHIs P2ej7VjyjHQB1SY8LgXXSrG0CotbmgKmO1B38o/6qcBIPLw3tY/HEGfw2VmOuOcY ENAMhcg8Qy0mT8M94Fsev58DgvPI7zgfLAIw0qNzr2y86DPDTK0VklU/lkMsOP5Y 2I070nfSEytLe9KMJ9EsuFTYnAQWrRyfWjDdvNCzanWwil6eD8SdgoTjj22Y20Bk Q== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=content-transfer-encoding:content-type :date:from:in-reply-to:message-id:mime-version:references :subject:to:x-me-proxy:x-me-proxy:x-me-sender:x-me-sender :x-sasl-enc; s=fm3; bh=xkpSX7hG2g0heoI7a9egNbmfCDE/ABAXKUVsvgcER iI=; b=p6AMBPXwin2ce+O00W1w9FvuKo/6sH5YjUqBZ3Rk1ig7IXiPHHiUInM/0 bDwZFrk3nz+SgkZuwrhMIuytbqkL/YU1ZLr+wJSctCcIO6XAcrwXK1li8MQ3rAdu b28ol7GGlnpUMAPX0+wBdXDd+TEZgdOwSR6dluSOq00iGlw27xkteJPNBhxVVwcR YvrMfTq1TtlN+400BCh3FMicv6UmKPtb0GFFdS6T1Myz4WtzypI/77em7wYn+lsw PPdx/UsbPqtTGpN3xNSujGAuRBmU3zHeXEJfIMMzyVeJ/6G5SyNqLwdGt0cGkwg/ ZUf7JbN7kQFD4GCOLi+E+ivZkQIzw== X-ME-Sender: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeduvddrheejgdefvdcutefuodetggdotefrodftvf curfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfghnecu uegrihhlohhuthemuceftddtnecunecujfgurhepofgfggfkjghffffhvffutgfgsehtqh ertderreejnecuhfhrohhmpedfofgrrhhtihhnucfvhhhomhhsohhnfdcuoehmtheslhho figvnhhtrhhophihrdhnvghtqeenucfrrghrrghmpehmrghilhhfrhhomhepmhhtsehloh ifvghnthhrohhphidrnhgvthenucevlhhushhtvghrufhiiigvpedt X-ME-Proxy: Received: by mailuser.nyi.internal (Postfix, from userid 501) id 775BDE00CC; Sun, 14 Jul 2019 22:27:16 -0400 (EDT) X-Mailer: MessagingEngine.com Webmail Interface User-Agent: Cyrus-JMAP/3.1.6-731-g19d3b16-fmstable-20190627v1 Mime-Version: 1.0 Message-Id: <586613ea-0a6c-49ef-ae92-6ef4680a9781@www.fastmail.com> In-Reply-To: References: Date: Mon, 15 Jul 2019 12:27:18 +1000 From: "Martin Thomson" To: quic@ietf.org Subject: Re: Handshake costs 2-RTT when token validation fail Content-Type: text/plain;charset=utf-8 Content-Transfer-Encoding: quoted-printable Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Jul 2019 02:27:19 -0000 The reason we have Retry is to force an extra RTT. This is really only = for the case where the server is unable or unwilling to process the Init= ial without proof that the client is "live". That is, the client can de= monstrate that they are not spoofing their source address. On Fri, Jul 12, 2019, at 19:45, Jiuhai Zhang wrote: > Can server continue to handshake when token validation fail? Clientmay= =20 > send new token in Handshake packet.Just like thisClient =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0=20 > =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0Server >=20 > =C2=A0 =C2=A0Initial -> >=20 > =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0<- Retry+Token > =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0<- Handshake >=20 > =C2=A0 =C2=A0Handshake+Token-> >=20 > Is there other solution to avoid 2-RTT?--------------------Client = =20 > Server >=20 > Initial[0]: CRYPTO[CH] -> >=20 > <- Retry+Token >=20 > Initial+Token[1]: CRYPTO[CH] -> >=20 > Initial[0]: CRYPTO[SH] ACK[1] > Handshake[0]: CRYPTO[EE, CERT, CV, FIN] > <- 1-RTT[0]: STREAM[1, "..."] >=20 > Figure 5: Example Handshake with Retry > From nobody Mon Jul 15 03:03:25 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C898E1200DF for ; Mon, 15 Jul 2019 03:03:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=uhasselt.be Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sPiSnh7Yy8I9 for ; Mon, 15 Jul 2019 03:03:19 -0700 (PDT) Received: from mail-lj1-x235.google.com (mail-lj1-x235.google.com [IPv6:2a00:1450:4864:20::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2A97F1200C3 for ; Mon, 15 Jul 2019 03:03:19 -0700 (PDT) Received: by mail-lj1-x235.google.com with SMTP id v18so15516097ljh.6 for ; Mon, 15 Jul 2019 03:03:19 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=uhasselt.be; s=google; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=q8bEvwNuDZAHHnEk90s/s9i86kE20jrWDOuCvsVuNi4=; b=mNqKQN5soUszL8vgbn1DOC1WhWAKRpvrVUxNV1K27kA9tKBNrer0TEHJOUNuYMD/dL fYzYBRkcm62mc5in2LNvrYK4Qa1Bk96b36IQpX4QH2FqG0m2j1CZZVtmtvr9WTqTPCTv qipCYnNJU7Ef+xkXL807mUF8+eQMHHWJ9deHY= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=q8bEvwNuDZAHHnEk90s/s9i86kE20jrWDOuCvsVuNi4=; b=hrpAjLTX2jr8cpe4OCozdem0OW5/EWimMRac2Rx1N+a+Rc3bcGEd6aTrSqvU0iohds /8VjShPV3wb8jGvdAa608CuHcrxRsrZYNI51nroDK+jKr0G3b0cnAW6CUXdyfV43shiu ysKkiTJdEgZQEJXHuccq6cvRfEV+wvwD0mXB69VyDHkdoq91Pmu0pCFh30ejyabFoQjh 52CuwASLCdm3ajJz6tktpp9e2gHWLAiySpiLlFcw5+/whZzXXjImw56iPvVriFuqrIQg Ttau47OfQIe0qjP5K7CJSV7Z8/laSsTXwmZ/hNzXY+eHqG2MeaeeNxuPMLNeq9kHpkOy UCCw== X-Gm-Message-State: APjAAAW6xbL84G+Q+1M/lbHfWiMdcT2fxmOoVW9JGWs5Y0Rk29o3qX+J o/UEHDZgzRXqhX45IprrlQ9rCbEDJkLz4X4P59O75+jL X-Google-Smtp-Source: APXvYqxO5f74Eq8Vc7fyf2F0RjIqEC50hj0fpsZVZCWpV0IbvViEpBmNC+q2QfdkKgKCbxLvTGVBQOQOWVZqem2OTQ4= X-Received: by 2002:a2e:7a19:: with SMTP id v25mr13606389ljc.39.1563184996733; Mon, 15 Jul 2019 03:03:16 -0700 (PDT) MIME-Version: 1.0 References: <156246300105.3401.11374988947164402300.idtracker@ietfa.amsl.com> In-Reply-To: From: Robin MARX Date: Mon, 15 Jul 2019 12:03:05 +0200 Message-ID: Subject: Re: Updated DATAGRAM -03 draft To: QUIC WG Cc: Tommy Pauly Content-Type: multipart/alternative; boundary="00000000000072e17b058db55e2a" Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Jul 2019 10:03:24 -0000 --00000000000072e17b058db55e2a Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hello Tommy, Good to see the updated draft. I do wonder about the decision to enforce congestion control for DATAGRAM frames and the effect this will have on the gaming use case. As also discussed in Prague, real-time gaming often requires a set update rate frequency (e.g., 30-60 messages per second) for responsiveness. I wonder if congestion controlling the frames (e.g., delaying/dropping them) will produce some weird edge cases that really mess with this setup. It's a bit difficult to assess because the messages are usually relatively small (though they could be mixed with larger messages, e.g., RPCs) and you could make the argument that, if there is actual congestion, the packets will be dropped in the network either way. You could also say that custom game-focused implementations will just ignore the text and do their own logic as needed. So I'm not sure the text needs changes, I just wanted to mention that it might not be optimal for the real-time gaming use case and that it might be capable footgun with some weird edge cases if people do stick to the text. With best regards, Robin On Wed, 10 Jul 2019 at 18:30, Nick Banks wrote: > My preference would also be to support flow control for the IDs. Though, = I > still think that the IDs by themselves have merit. As Tommy has said, you > can think of a datagram ID on a given connection as pretty much the same > thing as a UDP port for an IP address. If both sides know before hand wha= t > port to use, everything is fine. > > > > - Nick > > > > *From:* QUIC *On Behalf Of * Tommy Pauly > *Sent:* Wednesday, July 10, 2019 9:12 AM > *To:* Ian Swett > *Cc:* QUIC WG > *Subject:* Re: Updated DATAGRAM -03 draft > > > > > > > > On Jul 9, 2019, at 6:22 PM, Ian Swett < > ianswett=3D40google.com@dmarc.ietf.org> wrote: > > > > Thanks Tommy. As I've expressed before, I'm not a big fan of the ID > field(now flow identifiers) unless they have clear transport level > functionality. > > > > Understood! > > > > Adding signaling for opening and closing these flows seems like a stronge= r > reason to add these IDs to the transport layer. Have you considered > splitting this draft into two or the frame type into two and making the > version with a flow identifier more full-featured? > > > > > > That's certainly an option. As it stands, the frame type with a Flow ID i= s > already a different type value. I think if people decide that the datagra= ms > are mainly useful with the extra signaling being part of the transport > layer, then I'd prefer to just do that in this document, but if not, then > it can be separate. > > > > Overall, I see a few different options for handling flow IDs: > > > > - Remove them from the DATAGRAM transport altogether > > - Support flow IDs in the DATAGRAM draft with more explicit tie-ins to th= e > transport, like flow lifetime management > > - Have a separate draft specifying how the next layer above the QUIC > transport should manage multiplexing of datagram flows, by putting > identifiers at the start of datagram payloads, and using reliable control > stream(s) to negotiate lifetimes of flows > > > > Thanks, > > Tommy > > > > On Mon, Jul 8, 2019 at 11:20 AM Tommy Pauly 40apple.com@dmarc.ietf.org> wrote: > > Hello all, > > > > We=E2=80=99ve updated the QUIC DATAGRAM draft to incorporate some of the = feedback > we received at the side meeting in Prague. Notably, it clarifies: > > > > - Guidance around datagram acknowledgements > > - Datagrams do not participate in any flow control > > - Datagrams do participate in congestion control > > > > The remaining area of open discussion is around the newly re-named > optional =E2=80=9Cflow identifiers=E2=80=9D. The primary argument for rem= oving these is > that applications can add identifiers onto datagrams themselves, and the > transport should not transmit a field that it does not do anything with. = We > did add some text clarifying that these identifiers are essentially like > UDP ports for demultiplexing, and pointed out some *minimal* things the > transport can do to help batch transmission of datagrams in the same flow > and promote fate-sharing within a flow. There=E2=80=99s been some discuss= ion on > Slack of other approaches that would make these flow IDs more first-class > citizens=E2=80=94adding reliable signaling for opening and closing flows,= as many > applications would also generally need some similar sort of control > channel=E2=80=94but these seem a bit heavy-weight. Either way, this is an= area > where discussion is welcome and I expect the document to change. > > > > Best, > > Tommy > > > > Begin forwarded message: > > > > *From: *internet-drafts@ietf.org > > *Subject: New Version Notification for draft-pauly-quic-datagram-03.txt* > > *Date: *July 6, 2019 at 6:30:01 PM PDT > > *To: *Eric Kinnear , David Schinazi < > dschinazi.ietf@gmail.com>, Tommy Pauly > > > > > A new version of I-D, draft-pauly-quic-datagram-03.txt > has been successfully submitted by Tommy Pauly and posted to the > IETF repository. > > Name: draft-pauly-quic-datagram > Revision: 03 > Title: An Unreliable Datagram Extension to QUIC > Document date: 2019-07-06 > Group: Individual Submission > Pages: 8 > URL: > https://www.ietf.org/internet-drafts/draft-pauly-quic-datagram-03.txt > > Status: > https://datatracker.ietf.org/doc/draft-pauly-quic-datagram/ > > Htmlized: https://tools.ietf.org/html/draft-pauly-quic-datagram-03 > > Htmlized: > https://datatracker.ietf.org/doc/html/draft-pauly-quic-datagram > > Diff: > https://www.ietf..org/rfcdiff?url2=3Ddraft-pauly-quic-datagram-03 > > > Abstract: > This document defines an extension to the QUIC transport protocol to > add support for sending and receiving unreliable datagrams over a > QUIC connection. > > > > > Please note that it may take a couple of minutes from the time of > submission > until the htmlized version and diff are available at tools.ietf.org > > . > > The IETF Secretariat > > > > > --=20 Robin Marx PhD researcher - web performance Expertise centre for Digital Media T +32(0)11 26 84 79 - GSM +32(0)497 72 86 94 www.uhasselt.be Universiteit Hasselt - Campus Diepenbeek Agoralaan Gebouw D - B-3590 Diepenbeek Kantoor EDM-2.05 --00000000000072e17b058db55e2a Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hello Tommy,

Good to see the= updated draft.
I do wonder about the decision to enforce congest= ion control for DATAGRAM frames and the effect this will have on the gaming= use case.=C2=A0
As also discussed in Prague, real-time gaming of= ten requires a set update rate frequency (e.g., 30-60 messages per second) = for responsiveness.=C2=A0
I wonder if congestion controlling the = frames (e.g., delaying/dropping them) will produce some weird edge cases th= at really mess with this setup.=C2=A0
It's a bit difficult to= assess because the messages are usually relatively small (though they coul= d be mixed with larger messages, e.g., RPCs) and you could make the argumen= t that, if there is actual congestion, the packets will be dropped in the n= etwork either way.=C2=A0
You could also say that custom game-focu= sed implementations will just ignore the text and do their own logic as nee= ded.

So I'm not sure the text needs changes, I= just wanted to mention that it might not be optimal for the real-time gami= ng use case and that it might be capable footgun with some weird edge cases= if people do stick to the text.=C2=A0

With best r= egards,
Robin


On Wed, 10 Jul 2019 at 18:= 30, Nick Banks <nibanks=3D40microsoft.com@dmarc.ietf.org> wrote:

My preference would also be to support flow control = for the IDs. Though, I still think that the IDs by themselves have merit. A= s Tommy has said, you can think of a datagram ID on a given connection as p= retty much the same thing as a UDP port for an IP address. If both sides know before hand what port to use, e= verything is fine.

=C2=A0

- Nick

=C2=A0

From: QUIC <quic-bounces@ietf.org> On Behalf Of = Tommy Pauly
Sent: Wednesday, July 10, 2019 9:12 AM
To: Ian Swett <ianswett=3D40google.com@dmarc.ietf.org>
Cc: QUIC WG <q= uic@ietf.org>
Subject: Re: Updated DATAGRAM -03 draft

=C2=A0

=C2=A0



On Jul 9, 2019, at 6:22 PM, Ian Swett <ianswett= =3D40google.com@dmarc.ietf.org> wrote:

=C2=A0

Thanks Tommy.=C2=A0 As I've expressed before, I&= #39;m not a big fan of the ID field(now flow identifiers) unless they have = clear transport level functionality.

=C2=A0

Understood!=C2=A0

=C2=A0

Adding signaling for opening and closing these flows= seems like a stronger reason to add these IDs to the transport layer.=C2= =A0 Have you considered splitting this draft into two or the frame type int= o two and making the version with a flow identifier more full-featured?

=C2=A0

=C2=A0

That's certainly an option. As it stands, the fr= ame type with a Flow ID is already a different type value. I think if peopl= e decide that the datagrams are mainly useful with the extra signaling bein= g part of the transport layer, then I'd prefer to just do that in this document, but if not, then it can be separa= te.

=C2=A0

Overall, I see a few different options for handling = flow IDs:

=C2=A0

- Remove them from the DATAGRAM transport altogether=

- Support flow IDs in the DATAGRAM draft with more e= xplicit tie-ins to the transport, like flow lifetime management

- Have a separate draft specifying how the next laye= r above the QUIC transport should manage multiplexing of datagram flows, by= putting identifiers at the start of datagram payloads, and using reliable = control stream(s) to negotiate lifetimes of flows

=C2=A0

Thanks,

Tommy



On Mon, Jul 8, 2019 at 11:20 AM Tommy Pauly <tpau= ly=3D40appl= e.com@dmarc.ietf.org> wrote:

Hello all,

=C2=A0

We=E2=80=99ve updated the QUIC DATAGRAM draft to inc= orporate some of the feedback we received at the side meeting in Prague. No= tably, it clarifies:

=C2=A0

- Guidance around datagram acknowledgements

- Datagrams do not participate in any flow control

- Datagrams do participate in congestion control<= /u>

=C2=A0

The remaining area of open discussion is around the = newly re-named optional =E2=80=9Cflow identifiers=E2=80=9D. The primary arg= ument for removing these is that applications can add identifiers onto data= grams themselves, and the transport should not transmit a field that it does not do anything with. We did add some text clarifying= that these identifiers are essentially like UDP ports for demultiplexing, = and pointed out some *minimal* things the transport can do to help batch tr= ansmission of datagrams in the same flow and promote fate-sharing within a flow. There=E2=80=99s been some dis= cussion on Slack of other approaches that would make these flow IDs more fi= rst-class citizens=E2=80=94adding reliable signaling for opening and closin= g flows, as many applications would also generally need some similar sort of control channel=E2=80=94but these seem a bit hea= vy-weight. Either way, this is an area where discussion is welcome and I ex= pect the document to change.

=C2=A0

Best,

Tommy



Begin forwarded message:

=C2=A0

= Subject: New Version Notification for draft-pauly-quic-datagram-03.txt

= Date: July 6, 2019 at 6:30:0= 1 PM PDT

= To: Eric Kinnear <ekinnear@apple.com&g= t;, David Schinazi <dschinazi.ietf@gmail.com>, Tommy Pauly <tpauly@apple.com= >

=C2=A0


A new version of I-D, draft-pauly-quic-datagram-03.txt
has been successfully submitted by Tommy Pauly and posted to the
IETF repository.

Name: draft-pauly-quic-datagram
Revision: 03
Title: An Unreliable Datagram Extension to QUIC
Document date: 2019-07-06
Group: Individual Submission
Pages: 8
URL: =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0https://www.ietf.org/internet-drafts/draft-pauly-quic-datagram-03.t= xt
Status: =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0https://datatracke= r.ietf.org/doc/draft-pauly-quic-datagram/
Htmlized: =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0https://tools.ietf.org/html/dra= ft-pauly-quic-datagram-03
Htmlized: =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0https://datatracker.ie= tf.org/doc/html/draft-pauly-quic-datagram
Diff: =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0htt= ps://www.ietf..org/rfcdiff?url2=3Ddraft-pauly-quic-datagram-03

Abstract:
=C2=A0=C2=A0This document defines an extension to the QUIC transport protoc= ol to
=C2=A0=C2=A0add support for sending and receiving unreliable datagrams over= a
=C2=A0=C2=A0QUIC connection.




Please note that it may take a couple of minutes from the time of submissio= n
until the htmlized version and diff are available at tools.ietf.org.

The IETF Secretariat

=C2=A0

=C2=A0



--

<= td style=3D"font-family:Verdana,Geneva,sans-serif">Agoralaan Gebouw D - = B-3590 Diepenbeek --00000000000072e17b058db55e2a-- From nobody Mon Jul 15 12:04:49 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 84234120139 for ; Mon, 15 Jul 2019 12:04:47 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hVVG5FB8wufN for ; Mon, 15 Jul 2019 12:04:46 -0700 (PDT) Received: from mx36-out10.antispamcloud.com (mx36-out10.antispamcloud.com [209.126.121.30]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4FE77120136 for ; Mon, 15 Jul 2019 12:04:46 -0700 (PDT) Received: from xse169.mail2web.com ([66.113.196.169] helo=xse.mail2web.com) by mx42.antispamcloud.com with esmtp (Exim 4.89) (envelope-from ) id 1hn6HD-0000er-1X for quic@ietf.org; Mon, 15 Jul 2019 21:04:43 +0200 Received: from xsmtp22.mail2web.com (unknown [10.100.68.61]) by xse.mail2web.com (Postfix) with ESMTPS id 45nXxp6zjwz4k5Z for ; Mon, 15 Jul 2019 12:03:58 -0700 (PDT) Received: from [10.5.2.16] (helo=xmail06.myhosting.com) by xsmtp22.mail2web.com with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.92) (envelope-from ) id 1hn6GU-0007lv-SU for quic@ietf.org; Mon, 15 Jul 2019 12:03:58 -0700 Received: (qmail 11057 invoked from network); 15 Jul 2019 19:03:58 -0000 Received: from unknown (HELO [192.168.1.101]) (Authenticated-user:_huitema@huitema.net@[172.56.42.54]) (envelope-sender ) by xmail06.myhosting.com (qmail-ldap-1.03) with ESMTPA for ; 15 Jul 2019 19:03:58 -0000 To: Robin MARX , QUIC WG Cc: Tommy Pauly References: <156246300105.3401.11374988947164402300.idtracker@ietfa.amsl.com> From: Christian Huitema Openpgp: preference=signencrypt Autocrypt: addr=huitema@huitema.net; prefer-encrypt=mutual; keydata= mQENBFIRX8gBCAC26usy/Ya38IqaLBSu33vKD6hP5Yw390XsWLaAZTeQR64OJEkoOdXpvcOS HWfMIlD5s5+oHfLe8jjmErFAXYJ8yytPj1fD2OdSKAe1TccUBiOXT8wdVxSr5d0alExVv/LO I/vA2aU1TwOkVHKSapD7j8/HZBrqIWRrXUSj2f5n9tY2nJzG9KRzSG0giaJWBfUFiGb4lvsy IaCaIU0YpfkDDk6PtK5YYzuCeF0B+O7N9LhDu/foUUc4MNq4K3EKDPb2FL1Hrv0XHpkXeMRZ olpH8SUFUJbmi+zYRuUgcXgMZRmZFL1tu6z9h6gY4/KPyF9aYot6zG28Qk/BFQRtj7V1ABEB AAG0J0NocmlzdGlhbiBIdWl0ZW1hIDxodWl0ZW1hQGh1aXRlbWEubmV0PokBOQQTAQIAIwUC UhFfyAIbLwcLCQgHAwIBBhUIAgkKCwQWAgMBAh4BAheAAAoJEJNDCbJVyA1yhbYH/1ud6x6m VqGIp0JcZUfSQO8w+TjugqxCyGNn+w/6Qb5O/xENxNQ4HaMQ5uSRK9n8WKKDDRSzwZ4syKKf wbkfj05vgFxrjCynVbm1zs2X2aGXh+PxPL/WHUaxzEP7KjYbLtCUZDRzOOrm+0LMktngT/k3 6+EZoLEM52hwwpIAzJoscyEz7QfqMOZtFm6xQnlvDQeIrHx0KUvwo/vgDLK3SuruG1CSHcR0 D24kEEUa044AIUKBS3b0b8AR7f6mP2NcnLpdsibtpabi9BzqAidcY/EjTaoea46HXALk/eJd 6OLkLE6UQe1PPzQC4jB7rErX2BxnSkHDw50xMgLRcl5/b1a5AQ0EUhFfyAEIAKp7Cp8lqKTV CC9QiAf6QTIjW+lie5J44Ad++0k8gRgANZVWubQuCQ71gxDWLtxYfFkEXjG4TXV/MUtnOliG 5rc2E+ih6Dg61Y5PQakm9OwPIsOx+2R+iSW325ngln2UQrVPgloO83QiUoi7mBJPbcHlxkhZ bd3+EjFxSLIQogt29sTcg2oSh4oljUpz5niTt69IOfZx21kf29NfDE+Iw56gfrxI2ywZbu5o G+d0ZSp0lsovygpk4jK04fDTq0vxjEU5HjPcsXC4CSZdq5E2DrF4nOh1UHkHzeaXdYR2Bn1Y wTePfaHBFlvQzI+Li/Q6AD/uxbTM0vIcsUxrv3MNHCUAEQEAAYkCPgQYAQIACQUCUhFfyAIb LgEpCRCTQwmyVcgNcsBdIAQZAQIABgUCUhFfyAAKCRC22tOSFDh1UOlBB/94RsCJepNvmi/c YiNmMnm0mKb6vjv43OsHkqrrCqJSfo95KHyl5Up4JEp8tiJMyYT2mp4IsirZHxz/5lqkw9Az tcGAF3GlFsj++xTyD07DXlNeddwTKlqPRi/b8sppjtWur6Pm+wnAHp0mQ7GidhxHccFCl65w uT7S/ocb1MjrTgnAMiz+x87d48n1UJ7yIdI41Wpg2XFZiA9xPBiDuuoPwFj14/nK0elV5Dvq 4/HVgfurb4+fd74PV/CC/dmd7hg0ZRlgnB5rFUcFO7ywb7/TvICIIaLWcI42OJDSZjZ/MAzz BeXm263lHh+kFxkh2LxEHnQGHCHGpTYyi4Z3dv03HtkH/1SI8joQMQq00Bv+RdEbJXfEExrT u4gtdZAihwvy97OPA2nCdTAHm/phkzryMeOaOztI4PS8u2Ce5lUB6P/HcGtK/038KdX5MYST Fn8KUDt4o29bkv0CUXwDzS3oTzPNtGdryBkRMc9b+yn9+AdwFEH4auhiTQXPMnl0+G3nhKr7 jvzVFJCRif3OAhEm4vmBNDE3uuaXFQnbK56GJrnqVN+KX5Z3M7X3fA8UcVCGOEHXRP/aubiw Ngawj0V9x+43kUapFp+nF69R53UI65YtJ95ec4PTO/Edvap8h1UbdEOc4+TiYwY1TBuIKltY 1cnrjgAWUh/Ucvr++/KbD9tD6C8= Subject: Re: Updated DATAGRAM -03 draft Message-ID: Date: Mon, 15 Jul 2019 12:03:57 -0700 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:60.0) Gecko/20100101 Thunderbird/60.8.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Content-Language: en-US X-Originating-IP: 66.113.196.169 X-Spampanel-Domain: xsmtpout.mail2web.com X-Spampanel-Username: 66.113.196.169/32 Authentication-Results: antispamcloud.com; auth=pass smtp.auth=66.113.196.169/32@xsmtpout.mail2web.com X-Spampanel-Outgoing-Class: unsure X-Spampanel-Outgoing-Evidence: Combined (0.14) X-Recommended-Action: accept X-Filter-ID: Mvzo4OR0dZXEDF/gcnlw0U6y6flTXvu8AHhQTLy0w52pSDasLI4SayDByyq9LIhVweTmBdI4ik1l ILM09TU6XUTNWdUk1Ol2OGx3IfrIJKywOmJyM1qr8uRnWBrbSAGDcnqpk5VeF3xR4kF6iVwRtbgN zB/4Jkrw1eDLcif59ft+EjT1E57pgGZCSr3YuW5CU7Tmz6iKnkQL9gqsxD347235Nhqq+/HvroPq 8GSPg+5TET6yHkPghP15YtvjJl4PfOdU2kQFJEzfkq4ITozmM46jSvfpO+1kZkomjtjB6X5Q5Q9f RUeIpTIC2ySfqvnqLwoxlgatmaBb0rBiK9xbkDrUqzcKIief90MVLZY9LbIZh9+IQ1oS9LBn3VIP 95Jz7ujRlJ9wSMlhvaudJXZ9EIBG/qaR+8r9SKFMmPJLf850OvZYsmoVQuOIhwKLK6IKBNB4LZ0v UHHKTzJX7b1JhMjx7v77N42Z/zX3DQBtZa/0j9rMdVQseW3F+doIupqmER9E+btGG8Xk1uugE/FU 4J9TrjYo22Tif+7yfJXbGyN6EipRzMVZ5LqwTx7Vvn9SP+LiFhV9TEgXGI3XmDfDnIICQUXeDwOf eh9dq5sN87Num+bgkQ4H2FNFlS4D2Fvpdh0NNrkapjz8rRly3XzNoArSYJunicGB8m5H2QxUoWhU PVcmx1QL+XiKf76y/BgKG/iriWkUlx3l2GocXDYG/fKY2AXNZGS5G93aGyH8MqMlOQRMVMd0HCeT skOZ5TL8rd8mNFIY/9++4BDoRS1PKTXg724gFzhHYUe+7aKm0vUcrmwYLWgpNSILzgF64YKJTi+J 2sBvM/O0p+zizleC4va6FPcpDHjXMKZJK8+chiasohIjDX35eabu4wBHBDaN7cTs80/2FnZg/IMs IAdedSzLrjsyfTPCYbMCLdmf5h2vfxw3Qvb2Glio5Cia/9Kfg4kJ0WtAYbrpe3OOAtQNb87OBHCz Hbokiue7PjVB1S6AQRz4SqXhOP5fdiQt7lu5Jm5nk4BSgYHOJJgUtm67rBRli6kULE5BQDZnPvvF VsQ= X-Report-Abuse-To: spam@quarantine9.antispamcloud.com Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Jul 2019 19:04:48 -0000 On 7/15/2019 3:03 AM, Robin MARX wrote: > Hello Tommy, > > Good to see the updated draft. > I do wonder about the decision to enforce congestion control for > DATAGRAM frames and the effect this will have on the gaming use case.=C2= =A0 > As also discussed in Prague, real-time gaming often requires a set > update rate frequency (e.g., 30-60 messages per second) for > responsiveness.=C2=A0 > I wonder if congestion controlling the frames (e.g., delaying/dropping > them) will produce some weird edge cases that really mess with this > setup.=C2=A0 > It's a bit difficult to assess because the messages are usually > relatively small (though they could be mixed with larger messages, > e.g., RPCs) and you could make the argument that, if there is actual > congestion, the packets will be dropped in the network either way.=C2=A0= > You could also say that custom game-focused implementations will just > ignore the text and do their own logic as needed. > > So I'm not sure the text needs changes, I just wanted to mention that > it might not be optimal for the real-time gaming use case and that it > might be capable footgun with some weird edge cases if people do stick > to the text. Not really. If the network is congested and the video game still persists sending frequent messages the most likely outcome will be queuing and losses, and thus bad game play. The proper behavior in a congested network is to switch to a low bandwidth mode of some kind -- maybe a lower frame rate, or a lower resolution. This is pretty much the same issue as voice or video over IP: if the network is congested, it makes sense to use a higher compression rate. With congestion control, the application can detect the upset of congestion and adopt these strategies. That's generally much better than to just passively accept queues and losses. -- Christian Huitema From nobody Mon Jul 15 12:12:16 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E7F15120147 for ; Mon, 15 Jul 2019 12:12:14 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.997 X-Spam-Level: X-Spam-Status: No, score=-1.997 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KBbgId43PHQ3 for ; Mon, 15 Jul 2019 12:12:12 -0700 (PDT) Received: from mail-ed1-x52f.google.com (mail-ed1-x52f.google.com [IPv6:2a00:1450:4864:20::52f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 175701201C5 for ; Mon, 15 Jul 2019 12:12:12 -0700 (PDT) Received: by mail-ed1-x52f.google.com with SMTP id e3so16545480edr.10 for ; Mon, 15 Jul 2019 12:12:12 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:in-reply-to:references:mime-version:date:message-id:subject:to :cc; bh=5CwbaKiVUOSxSWt3IGUQ/SQ894F7p4WOuo+MN0O4Kps=; b=bErl7/5S7sm7E++xdiab9FVjaTsInjzwwNX/sbqVEKz22XQUacuWQU+UlELBm+bgqn wOvkRUEmw+rsuhunUFKYmmBs+MroST65UJiZJW0PnNBOD2Pi0my6HULoJVKRu716KfRM M/ga4WcyyPjOXFAPc2evBIs/W1+cMqrGmJxVKW895UYsXZOykbpibmVVTkMrtHIWQEI5 iM2S/CqZaaeIDXS21ZPSH2hXBEPec0htqR6gyRJ7PfUBwzi2Q4GHVqWAJz/NLAdgJv30 TG3y5Xwdr9gnag9KrixAjaJBbfSvqQrfaMrvyvdkmv/8S/+xvtT0szdnYbI/+MO6Fwbx 8olQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:in-reply-to:references:mime-version:date :message-id:subject:to:cc; bh=5CwbaKiVUOSxSWt3IGUQ/SQ894F7p4WOuo+MN0O4Kps=; b=pf5O75rNnrn9BzUXSI4JRFYjPOreq2yu0GDvMgxblMoRsfle3Jd0x3dAA5/+CJYTox iiexBvV+S26VFPekKnk6pheRnmnyD1zcvi0uXyZ1FIGT3fy1MAq6gWK3XFCvQzGcGtJL 8eqWp7NMQsPY55el318ErUtKYTlVo7CEFv8DIbnt05WiXSwBVB8R5tHMrHU4Thg35k75 +HBfcZ02JesIrTH3pYMNvn6PW2QKz3blB1/Rzfc5FRlvB79Fz54npnmpflKqS7o8FV03 gZ3fWHF7TxiaBZIkhBMhdMHFngADSEpbAZ0f84HutsKz7kuN5gluKDMD/5+ZI8ELDIb+ Eevg== X-Gm-Message-State: APjAAAWa6uKIbvOomR+0GBE7Bi3xVHM16FmJ28/0Y58KH31FAilsXog4 z8nvww5EzRMFGeog5R1N9BeBmUFWJUhwuhzaUw+oAtjE X-Google-Smtp-Source: APXvYqxtQ06A3/JuZqvbMZczTj/2YfAgagsaLicsRNGaGYn1ZGq6VgIv2b74+FZ25+xCqC/nY+yECqgFmFqVLwiurnk= X-Received: by 2002:aa7:c999:: with SMTP id c25mr24976848edt.134.1563217930437; Mon, 15 Jul 2019 12:12:10 -0700 (PDT) Received: from 1058052472880 named unknown by gmailapi.google.com with HTTPREST; Mon, 15 Jul 2019 21:12:09 +0200 From: =?UTF-8?Q?Mikkel_Fahn=C3=B8e_J=C3=B8rgensen?= In-Reply-To: References: <156246300105.3401.11374988947164402300.idtracker@ietfa.amsl.com> X-Mailer: Airmail (420) MIME-Version: 1.0 Date: Mon, 15 Jul 2019 21:12:09 +0200 Message-ID: Subject: Re: Updated DATAGRAM -03 draft To: QUIC WG , Christian Huitema , Robin MARX Cc: Tommy Pauly Content-Type: multipart/alternative; boundary="000000000000734903058dbd0961" Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Jul 2019 19:12:15 -0000 --000000000000734903058dbd0961 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable You could also carry two connections, one for video and one for game status updates. I=E2=80=99m wondering if there is, or should be, a way to accomplish this o= n a single connection. I asked something similar a long time ago and I don=E2=80=99t think there i= s any amition for managing bandwidth in this for on a single connection, at least for QUIC v1. On 15 July 2019 at 21.04.58, Christian Huitema (huitema@huitema.net) wrote: On 7/15/2019 3:03 AM, Robin MARX wrote: > Hello Tommy, > > Good to see the updated draft. > I do wonder about the decision to enforce congestion control for > DATAGRAM frames and the effect this will have on the gaming use case. > As also discussed in Prague, real-time gaming often requires a set > update rate frequency (e.g., 30-60 messages per second) for > responsiveness. > I wonder if congestion controlling the frames (e.g., delaying/dropping > them) will produce some weird edge cases that really mess with this > setup. > It's a bit difficult to assess because the messages are usually > relatively small (though they could be mixed with larger messages, > e.g., RPCs) and you could make the argument that, if there is actual > congestion, the packets will be dropped in the network either way. > You could also say that custom game-focused implementations will just > ignore the text and do their own logic as needed. > > So I'm not sure the text needs changes, I just wanted to mention that > it might not be optimal for the real-time gaming use case and that it > might be capable footgun with some weird edge cases if people do stick > to the text. Not really. If the network is congested and the video game still persists sending frequent messages the most likely outcome will be queuing and losses, and thus bad game play. The proper behavior in a congested network is to switch to a low bandwidth mode of some kind -- maybe a lower frame rate, or a lower resolution. This is pretty much the same issue as voice or video over IP: if the network is congested, it makes sense to use a higher compression rate. With congestion control, the application can detect the upset of congestion and adopt these strategies. That's generally much better than to just passively accept queues and losses. -- Christian Huitema --000000000000734903058dbd0961 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable = You could also carry= two connections, one for video and one for game status updates.

I=E2=80=99m wondering if there = is, or should be, a way to accomplish this on a single connection.
I asked something sim= ilar a long time ago and I don=E2=80=99t think there is any amition for man= aging bandwidth in this for on a single connection, at least for QUIC v1.


On 15 July 2019 at 21.04.58, Christian Huitema (huitema@huitema.net) wrote:


On 7/15/2019 3:03 AM, Robin MARX wrote:
> Hello Tommy,
>
> Good to see the updated draft.
> I do wonder about the decision to enforce congestion control for
> DATAGRAM frames and the effect this will have on the gaming use ca= se.=C2=A0
> As also discussed in Prague, real-time gaming often requires a set
> update rate frequency (e.g., 30-60 messages per second) for
> responsiveness.=C2=A0
> I wonder if congestion controlling the frames (e.g., delaying/drop= ping
> them) will produce some weird edge cases that really mess with thi= s
> setup.=C2=A0
> It's a bit difficult to assess because the messages are usuall= y
> relatively small (though they could be mixed with larger messages,
> e.g., RPCs) and you could make the argument that, if there is actu= al
> congestion, the packets will be dropped in the network either way.= =C2=A0
> You could also say that custom game-focused implementations will j= ust
> ignore the text and do their own logic as needed.
>
> So I'm not sure the text needs changes, I just wanted to menti= on that
> it might not be optimal for the real-time gaming use case and that= it
> might be capable footgun with some weird edge cases if people do s= tick
> to the text.


Not really. If the network is congested and the video game still
persists sending frequent messages the most likely outcome will be
queuing and losses, and thus bad game play. The proper behavior in a
congested network is to switch to a low bandwidth mode of some kind --
maybe a lower frame rate, or a lower resolution. This is pretty much th= e
same issue as voice or video over IP: if the network is congested, it
makes sense to use a higher compression rate. With congestion control,
the application can detect the upset of congestion and adopt these
strategies. That's generally much better than to just passively acc= ept
queues and losses.

-- Christian Huitema


--000000000000734903058dbd0961-- From nobody Mon Jul 15 13:56:47 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2B53E12016C for ; Mon, 15 Jul 2019 13:56:34 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.701 X-Spam-Level: X-Spam-Status: No, score=-2.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=lowentropy.net header.b=1KghfC6c; dkim=pass (2048-bit key) header.d=messagingengine.com header.b=NPwHY3EG Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fNKEZKwi2pri for ; Mon, 15 Jul 2019 13:56:32 -0700 (PDT) Received: from out3-smtp.messagingengine.com (out3-smtp.messagingengine.com [66.111.4.27]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8C67B1200D6 for ; Mon, 15 Jul 2019 13:56:30 -0700 (PDT) Received: from compute1.internal (compute1.nyi.internal [10.202.2.41]) by mailout.nyi.internal (Postfix) with ESMTP id E6AC121DFB for ; Mon, 15 Jul 2019 16:56:29 -0400 (EDT) Received: from imap2 ([10.202.2.52]) by compute1.internal (MEProxy); Mon, 15 Jul 2019 16:56:29 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lowentropy.net; h=mime-version:message-id:in-reply-to:references:date:from:to :subject:content-type:content-transfer-encoding; s=fm2; bh=pYsxI rhRomseim5r7cz828aNA0q9aIUHsqM4e5ek73o=; b=1KghfC6cfg0H5XR5ozWbi 3skW5ex5mqA5VSRPB7ssMcMh/WuazZ7v8qbwxfzn5EGb5sY4ddxm926yVY+t1vxi iZC7bLGf7W+0ZZ+mKzW02xJzLPfEqaVY0mGRwqZgSI3IlfL6wO+tqxSqAeGVQYs5 htRx4qLU9+iizUXX/QfQY6Tlh3nm7d5ofBpbAUUR5DC9rKodpn269/JEypt+INUc Ncjko0G3oyZ7SlRPnSJYq5fqsmBFeC6011VnJ2ADLD+4c37WzhB2vQXLcO5xb6+X czQ4ac4cKUPB6GuZnzv3dbfS6UcI7HEJiXV1pnNLqDCiVLd6/ak74S7cQsfGsTQS Q== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=content-transfer-encoding:content-type :date:from:in-reply-to:message-id:mime-version:references :subject:to:x-me-proxy:x-me-proxy:x-me-sender:x-me-sender :x-sasl-enc; s=fm3; bh=pYsxIrhRomseim5r7cz828aNA0q9aIUHsqM4e5ek7 3o=; b=NPwHY3EGk1rUBufnXO+RjiVGXU1EkAWQD0sCOPazqJyfK/2lxH0Ncj3+f t94LHLTDx75boEP3/9fvT10MH2cUHN68m3Tbr1B269WFQplOu1irk+UFSVzx0R0v Bxza9D8ZDuSJYfomZNZ2zaXAwycPk1kpdfyk7qvUfY9ZmY+F6CWH3nTFMMg40eh/ X/MEiTY9RLJthIudevg5WPU7IRjPMi9FdyOqdLLzBU2IGOKmKbtNSL60g6hdu9An RnGM6p/CS2pHKWwDplUSKAaGgySRtRwOIJ9QGCBs84j0Np725D7siMB2tsEn2giZ M9OgYW5AU+knLGKHalNAhHiK9BVLQ== X-ME-Sender: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeduvddrheekgdduheduucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucenucfjughrpefofgggkfgjfhffhffvufgtgfesth hqredtreerjeenucfhrhhomhepfdforghrthhinhcuvfhhohhmshhonhdfuceomhhtsehl ohifvghnthhrohhphidrnhgvtheqnecurfgrrhgrmhepmhgrihhlfhhrohhmpehmtheslh hofigvnhhtrhhophihrdhnvghtnecuvehluhhsthgvrhfuihiivgeptd X-ME-Proxy: Received: by mailuser.nyi.internal (Postfix, from userid 501) id A3812E00CC; Mon, 15 Jul 2019 16:56:29 -0400 (EDT) X-Mailer: MessagingEngine.com Webmail Interface User-Agent: Cyrus-JMAP/3.1.6-731-g19d3b16-fmstable-20190627v1 Mime-Version: 1.0 Message-Id: <3efce833-9214-49b1-aecc-5e44b12196b9@www.fastmail.com> In-Reply-To: References: <156246300105.3401.11374988947164402300.idtracker@ietfa.amsl.com> Date: Tue, 16 Jul 2019 06:56:40 +1000 From: "Martin Thomson" To: quic@ietf.org Subject: Re: Updated DATAGRAM -03 draft Content-Type: text/plain;charset=utf-8 Content-Transfer-Encoding: quoted-printable Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Jul 2019 20:56:45 -0000 On Tue, Jul 16, 2019, at 05:12, Mikkel Fahn=C3=B8e J=C3=B8rgensen wrote:= > You could also carry two connections, one for video and one for game=20= > status updates. >=20 > I=E2=80=99m wondering if there is, or should be, a way to accomplish t= his on a=20 > single connection. The effective use of priority is difficult, but it should allow for mixe= d use of the one connection. The two-connection case is just this, exce= pt that it relies on the congestion controller of each connection to man= age contention. If you have decent prioritization, two connections is s= trictly worse than one. From nobody Mon Jul 15 15:23:42 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 11B0C1200A4 for ; Mon, 15 Jul 2019 15:23:41 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.699 X-Spam-Level: X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=fb.com header.b=ZAaDX05i; dkim=pass (1024-bit key) header.d=fb.onmicrosoft.com header.b=OxMZu4uD Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QEcoYKs9JIum for ; Mon, 15 Jul 2019 15:23:40 -0700 (PDT) Received: from mx0a-00082601.pphosted.com (mx0b-00082601.pphosted.com [67.231.153.30]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1444F12002E for ; Mon, 15 Jul 2019 15:23:40 -0700 (PDT) Received: from pps.filterd (m0089730.ppops.net [127.0.0.1]) by m0089730.ppops.net (8.16.0.27/8.16.0.27) with SMTP id x6FMIRBF014097; Mon, 15 Jul 2019 15:23:33 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fb.com; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : mime-version; s=facebook; bh=FpZcBF+Lo6Jm93X5uTblvMJatmiPCQkoYxL5J3aTiB0=; b=ZAaDX05izi6h7wXGMRXnrGh0w9zXB2MexBIrjHVGPdSHOmRRaVcdxtQiYSEFoYjbxgNd 4w7ovG3AcM9ZvQjiMtVXW4HR4hf9D6x5dm9i/36Ug0LUw7pLXL0+n5B8AYd+WtFQVt+S +COUs+26Sz7sBkccGDgh//jBDXb+eWvjLiQ= Received: from maileast.thefacebook.com ([163.114.130.16]) by m0089730.ppops.net with ESMTP id 2ts1u5r2sr-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NOT); Mon, 15 Jul 2019 15:23:33 -0700 Received: from ash-exhub103.TheFacebook.com (2620:10d:c0a8:82::c) by ash-exhub204.TheFacebook.com (2620:10d:c0a8:83::4) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.1713.5; Mon, 15 Jul 2019 15:23:32 -0700 Received: from NAM04-CO1-obe.outbound.protection.outlook.com (100.104.31.183) by o365-in.thefacebook.com (100.104.35.174) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.1713.5 via Frontend Transport; Mon, 15 Jul 2019 15:23:32 -0700 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=LRXIHUTSkIoZiMdjeDYC0gvh4PII4/GCt7rA2jaJGgo0ijMHpPNTSAXcCs/botwZ40PudDokSb8zlfn07f80yZHRRe9d5K+xdecMVm9IwtbxYA6x8ZiMAGy2NJgqEjN31CZYzL4rmcycnV8Luzokis1HUjerlpw3eioommrSGxZrpGfADnKl9sBONi+T6tYkSrB0cJxXk2nxhPQ5Q/MC5PsYhyy4JjDYTYeEf5fQuRyEAVwe8OrRRsZqVCGy7I4lMuoblxB2RwTtMA+Nz+aQ+/EHrB8TqWoTOMMwBjXMeYuxpkeAkEZ7hhjPFJBpSLk8tqQXv2jTCvwX60mmLSJ6+g== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=FpZcBF+Lo6Jm93X5uTblvMJatmiPCQkoYxL5J3aTiB0=; b=kUu83vKHr5G7Svc0YryUC65RyYMS5sJTu3jug5kgm0x7ostxCHm48T3BX9/4aewEcV7XpX2eIJ4n9LK9upwPaGjPiRBp9ptgz2w1K8UykrgTgTFZjAhKV7UkGhFEq6uXZg7Cg4USBvNkxNZpd/96jnaxeLCxBCqnVXZSF4nFBiHHdjMXsrlXnPeWULXH/wxOMpDCDa0Lw3trgbNCDahsRAKHq82M7kctd19Kk5Llvl3TfKTIlhE2l2qxQswjUUZNZ/ZqMwL0yYvS9ErWpakmIfRj5TSIkit+Tx2zUyXqaGt6Bs1aOn3iH0xCxblLNMIGUpUD+wRcXAE/FYWprdCRIA== ARC-Authentication-Results: i=1; mx.microsoft.com 1;spf=pass smtp.mailfrom=fb.com;dmarc=pass action=none header.from=fb.com;dkim=pass header.d=fb.com;arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fb.onmicrosoft.com; s=selector1-fb-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=FpZcBF+Lo6Jm93X5uTblvMJatmiPCQkoYxL5J3aTiB0=; b=OxMZu4uDz2UzSLzRFUOFam6skjtmU6rdnCISl46FebDMIB4s1spKjllTSffKWgi9JGkG6aOXTopxw3YO7WMf6HJDEbYu2r04oxdKonnmOvRudq7qm5C6LnLPkSHfCcIhUGczqH/WtVgSUhWgrLTtk7GbR0OgBnVbqDVEEeSBEMw= Received: from CY4PR15MB1542.namprd15.prod.outlook.com (10.172.160.9) by CY4PR15MB1446.namprd15.prod.outlook.com (10.172.161.15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2073.14; Mon, 15 Jul 2019 22:23:31 +0000 Received: from CY4PR15MB1542.namprd15.prod.outlook.com ([fe80::35ce:8d12:c463:7cfc]) by CY4PR15MB1542.namprd15.prod.outlook.com ([fe80::35ce:8d12:c463:7cfc%12]) with mapi id 15.20.2073.012; Mon, 15 Jul 2019 22:23:31 +0000 From: Roberto Peon To: =?Windows-1252?Q?Mikkel_Fahn=F8e_J=F8rgensen?= , "QUIC WG" , Christian Huitema , Robin MARX CC: Tommy Pauly Subject: Re: Updated DATAGRAM -03 draft Thread-Topic: Updated DATAGRAM -03 draft Thread-Index: AQHVNaDDPQe/TU50dEer4Q39RHkI7KbDEJiAgAD4pACAAAUEgIAHb3uAgACXHoCAAAJLgIAANLCE Date: Mon, 15 Jul 2019 22:23:31 +0000 Message-ID: References: <156246300105.3401.11374988947164402300.idtracker@ietfa.amsl.com> , In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [199.201.64.137] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: db12128a-d4a0-4e18-e4fc-08d709731191 x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(5600148)(711020)(4605104)(1401327)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(2017052603328)(7193020); SRVR:CY4PR15MB1446; x-ms-traffictypediagnostic: CY4PR15MB1446: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8273; x-forefront-prvs: 00997889E7 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(979002)(346002)(366004)(376002)(39860400002)(136003)(396003)(54094003)(189003)(199004)(2906002)(81156014)(5660300002)(66574012)(478600001)(68736007)(110136005)(74316002)(7736002)(3846002)(316002)(66476007)(33656002)(66946007)(66556008)(11346002)(66446008)(15650500001)(64756008)(81166006)(8936002)(229853002)(8676002)(6116002)(52536014)(76116006)(91956017)(99286004)(53936002)(26005)(7696005)(486006)(86362001)(6436002)(6506007)(7116003)(446003)(476003)(53546011)(54896002)(76176011)(186003)(66066001)(102836004)(4326008)(14454004)(14444005)(236005)(25786009)(9686003)(6246003)(71200400001)(71190400001)(256004)(55016002)(969003)(989001)(999001)(1009001)(1019001); DIR:OUT; SFP:1102; SCL:1; SRVR:CY4PR15MB1446; H:CY4PR15MB1542.namprd15.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: fb.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam-message-info: 4B35ve5fKkXfIg1r3a4iBNZcMLrTtk1YE5no+teFApNhlg3q6EA/XMbW2fsQd9MHfQ8SrKxGNW7QMACo7nTtsGvv22dOwW/ZDfyobHRSJtRaAfPNG28mFLoFQLU5b59eKS50d9Dn0Ca0IXTBO5ZFGoPqNVPqeRBsecZB2HaAJIwndJqeDuWLGZjGVI48JAmgR78OszUKuBbczXpAH2O72mdImm9WtssE+yTNQOZ6HtuDMKBI7OcK6c0z4HAEX6g4KP73B8G0JnFsa10k0aXYAFLi632kLTiA9JDTlamrRKpFJye/xJIDIy8IhoPnAGvxK4ByFW7ViSCtYC2RdRcSsX1lxaV/jy9LC5+pD9OsD/oCOmLs4pirssbrJjY5rUzyvxng4yICCB2AGxBrHLKlsjteeiA/kohhYKFnHQPf7SE= Content-Type: multipart/alternative; boundary="_000_CY4PR15MB1542BBF479C310E861C733F0CDCF0CY4PR15MB1542namp_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: db12128a-d4a0-4e18-e4fc-08d709731191 X-MS-Exchange-CrossTenant-originalarrivaltime: 15 Jul 2019 22:23:31.5618 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 8ae927fe-1255-47a7-a2af-5f3a069daaa2 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: fenix@fb.com X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY4PR15MB1446 X-OriginatorOrg: fb.com X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2019-07-15_07:, , signatures=0 X-Proofpoint-Spam-Details: rule=fb_default_notspam policy=fb_default score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1011 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1810050000 definitions=main-1907150248 X-FB-Internal: deliver Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Jul 2019 22:23:41 -0000 --_000_CY4PR15MB1542BBF479C310E861C733F0CDCF0CY4PR15MB1542namp_ Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable Using two connections would be unfortunate-- this will almost always guaran= tee worse results than even the most simple proportional prioritization or = fair-share scheduling because you can cause self contention and dilute your= measurement accuracy. -=3DR ________________________________ From: QUIC on behalf of Mikkel Fahn=F8e J=F8rgensen= Sent: Monday, July 15, 2019 12:12:09 PM To: QUIC WG; Christian Huitema; Robin MARX Cc: Tommy Pauly Subject: Re: Updated DATAGRAM -03 draft You could also carry two connections, one for video and one for game status= updates. I=92m wondering if there is, or should be, a way to accomplish this on a si= ngle connection. I asked something similar a long time ago and I don=92t think there is any = amition for managing bandwidth in this for on a single connection, at least= for QUIC v1. On 15 July 2019 at 21.04.58, Christian Huitema (huitema@huitema.net) wrote: On 7/15/2019 3:03 AM, Robin MARX wrote: > Hello Tommy, > > Good to see the updated draft. > I do wonder about the decision to enforce congestion control for > DATAGRAM frames and the effect this will have on the gaming use case. > As also discussed in Prague, real-time gaming often requires a set > update rate frequency (e.g., 30-60 messages per second) for > responsiveness. > I wonder if congestion controlling the frames (e.g., delaying/dropping > them) will produce some weird edge cases that really mess with this > setup. > It's a bit difficult to assess because the messages are usually > relatively small (though they could be mixed with larger messages, > e.g., RPCs) and you could make the argument that, if there is actual > congestion, the packets will be dropped in the network either way. > You could also say that custom game-focused implementations will just > ignore the text and do their own logic as needed. > > So I'm not sure the text needs changes, I just wanted to mention that > it might not be optimal for the real-time gaming use case and that it > might be capable footgun with some weird edge cases if people do stick > to the text. Not really. If the network is congested and the video game still persists sending frequent messages the most likely outcome will be queuing and losses, and thus bad game play. The proper behavior in a congested network is to switch to a low bandwidth mode of some kind -- maybe a lower frame rate, or a lower resolution. This is pretty much the same issue as voice or video over IP: if the network is congested, it makes sense to use a higher compression rate. With congestion control, the application can detect the upset of congestion and adopt these strategies. That's generally much better than to just passively accept queues and losses. -- Christian Huitema --_000_CY4PR15MB1542BBF479C310E861C733F0CDCF0CY4PR15MB1542namp_ Content-Type: text/html; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable
Using two connections would be unfortunate-- this will almost always guaran= tee worse results than even the most simple proportional prioritization or = fair-share scheduling because you can cause self contention and dilute your= measurement accuracy.

-=3DR
From: QUIC <quic-bounces= @ietf.org> on behalf of Mikkel Fahn=F8e J=F8rgensen <mikkelfj@gmail.c= om>
Sent: Monday, July 15, 2019 12:12:09 PM
To: QUIC WG; Christian Huitema; Robin MARX
Cc: Tommy Pauly
Subject: Re: Updated DATAGRAM -03 draft
 
You could also carry two connections, one for video and one for game status= updates.

I=92m wondering if there is, or should be, a way to accomplish this on a si= ngle connection.
I asked something similar a long time ago and I don=92t think there is any = amition for managing bandwidth in this for on a single connection, at least= for QUIC v1.


On 15 July 2019 at 21.04.58, Christian Huitema (huitema@huitema.net) wrote:


On 7/15/2019 3:03 AM, Robin MARX wrote:
> Hello Tommy,
>
> Good to see the updated draft.
> I do wonder about the decision to enforce congestion control for
> DATAGRAM frames and the effect this will have on the gaming use case.&= nbsp;
> As also discussed in Prague, real-time gaming often requires a set > update rate frequency (e.g., 30-60 messages per second) for
> responsiveness. 
> I wonder if congestion controlling the frames (e.g., delaying/dropping=
> them) will produce some weird edge cases that really mess with this > setup. 
> It's a bit difficult to assess because the messages are usually
> relatively small (though they could be mixed with larger messages, > e.g., RPCs) and you could make the argument that, if there is actual <= br> > congestion, the packets will be dropped in the network either way.&nbs= p;
> You could also say that custom game-focused implementations will just =
> ignore the text and do their own logic as needed.
>
> So I'm not sure the text needs changes, I just wanted to mention that =
> it might not be optimal for the real-time gaming use case and that it =
> might be capable footgun with some weird edge cases if people do stick=
> to the text.


Not really. If the network is congested and the video game still
persists sending frequent messages the most likely outcome will be
queuing and losses, and thus bad game play. The proper behavior in a
congested network is to switch to a low bandwidth mode of some kind --
maybe a lower frame rate, or a lower resolution. This is pretty much the same issue as voice or video over IP: if the network is congested, it
makes sense to use a higher compression rate. With congestion control,
the application can detect the upset of congestion and adopt these
strategies. That's generally much better than to just passively accept
queues and losses.

-- Christian Huitema


--_000_CY4PR15MB1542BBF479C310E861C733F0CDCF0CY4PR15MB1542namp_-- From nobody Mon Jul 15 19:25:28 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 19AD0120033 for ; Mon, 15 Jul 2019 19:25:27 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -17.5 X-Spam-Level: X-Spam-Status: No, score=-17.5 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, ENV_AND_HDR_SPF_MATCH=-0.5, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5, USER_IN_DEF_SPF_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZSxy-CqRDr-9 for ; Mon, 15 Jul 2019 19:25:25 -0700 (PDT) Received: from mail-vs1-xe32.google.com (mail-vs1-xe32.google.com [IPv6:2607:f8b0:4864:20::e32]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EF441120025 for ; Mon, 15 Jul 2019 19:25:24 -0700 (PDT) Received: by mail-vs1-xe32.google.com with SMTP id r3so12807686vsr.13 for ; Mon, 15 Jul 2019 19:25:24 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=6YqZsyKFXBKlvjzhBky+xfSlXN+OyMrtwQ6d6kjzdH4=; b=uE6QseO7lOpwF5oP07KHpEB3LqTbR7tu55aecMgBbvscKpcby5LkvMVjh4GOeSFxMT WVanQ4JTAS9z5QPsz+Gf48wnaaC/GjFxtAvB/tCUhSfQf9JdxQ6ll1BPhfz4mrxdlGxP p05dOc0Sa0bM1gEyVDqLviCkj2Cb5o/UShFlJum9xD3yEPSPsVCKm+gUDgOgrt/eFLUE z4A83kLPf2mKjqfQ6Kho8uDguL2nUNwQjnIif9C9VW+igzgrWh7+yMtdvYRBdWQYxbn2 8UpfIhYabERGtBxk5U/qwXpA3MGMRasXeL5piawg7Y+Sez1STMVDOx/Ogzw5Fd2rXRe6 wUiA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=6YqZsyKFXBKlvjzhBky+xfSlXN+OyMrtwQ6d6kjzdH4=; b=NHgHovakIKcp3gap/ywz38hd7j9E7hkwuhnbv8NjcqfjzBWz9PS6oxiJilpPEIUq65 InEjXOKtmZF14JDTTF+cizdXsNrgbAWibGBOzdIowHfZnqzkY4ZpGnKhFYecRE2W0XD0 Uhk8t1mdLVgc1h5RoDMlzsrEW8K5oIP2VoVWDH0AHYIIu3mS+tZIhFCExJyEJ9rDLZty vlSS93tkrQhBZFHDHmNFhhWdMfGHZtcqcECDQnt9kHjw0cjeR76/KbgNvf9Vk/hBZT6s uDOFzgi5yHtzfkO4YBszL4kTgd8sh/f3wuL4yATtdJGvhZwjhJVTgrn+hXoXbUifO08Q vmlA== X-Gm-Message-State: APjAAAU+Vq+2kiaqNmO29/o9/dlwoffvH2L2cIA1ksIKtGKEaPncfWyr +553PxE3FRlPZ0VGS9AznG8OdHA4rWpqTT8o9895da3phmSKlA== X-Google-Smtp-Source: APXvYqz+HX+4ici/wxoMXloPiRnkC7xdLQP/7NPmaeeakYhd9ila1Bmxe/z22Kl/8QS39inZgQxRsKztysQH1+5kR9k= X-Received: by 2002:a67:eb93:: with SMTP id e19mr18633770vso.208.1563243923280; Mon, 15 Jul 2019 19:25:23 -0700 (PDT) MIME-Version: 1.0 From: Ian Swett Date: Mon, 15 Jul 2019 22:25:12 -0400 Message-ID: Subject: Experimental data on priorities To: IETF QUIC WG , HTTP Working Group Content-Type: multipart/alternative; boundary="000000000000befae1058dc316b8" Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Jul 2019 02:25:27 -0000 --000000000000befae1058dc316b8 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable When I presented slides on HTTP/3 priorities at the QUIC interim, one consistent point was that the HTTP/3 working group wanted some experimental evidence that an alternate scheme worked in practice. gQUIC has always used SPDY style priorities, FWIW, but we have no comparative data at the moment. I can imagine a few ways to evaluate a priority scheme, but I'd like to know whether I have the correct ones(and relative importance). - Application performance - Code size/complexity - Bytes on the wire - Computational complexity/potential for attacks - Reduction/change in edge cases(particularly for HTTP/3 without HoL blocking) - New capabilities (ie: easier for LBs/AFEs to contribute?) *Experimentation Options* The H2 stack at Google supports FIFO, LIFO and H2 priorities. However, it=E2=80=99s not currently using LOWAT and previous experiments have yielde= d no measurable change in performance, so H2 does not seem like a good experiment platform. For gQUIC, we already have an implementation of H2 priorities that we=E2=80= =99re not using. We can wire up an experiment to start using them and compare to SPDY style priorities, but given Chrome's internal priority scheme with 5 levels and translation to a linked list in H2 priorities, I believe that would only provide information on code size/complexity and bytes on the wire. Application performance would only change if one of the two schemes had an implementation bug. Expanding Chrome=E2=80=99s usage of priorities is possible, but it=E2=80=99= s a longer term project and I don't know whether they'll change. *Other data* Most thinking about priorities is based on the idea that a page is loaded over a single connection, but in fact, that=E2=80=99s extraordinarily rare = as I presented at the interim(except Wikipedia). Would it be useful to have more data on this from the client and/or server perspective? We'd be happy to work with someone else on gathering data as well, assuming the WG would find the data we're gathering more valuable than what Chrome/Google can provide alone. Thanks, Ian --000000000000befae1058dc316b8 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
When I presented slides on HTTP/3 priorities at the QUIC i= nterim, one consistent point was that the HTTP/3 working group wanted some = experimental evidence that an alternate scheme worked in practice.=C2=A0 gQ= UIC has always used SPDY style priorities, FWIW, but we have no comparative= data at the=C2=A0moment.

I can imagine a few ways to evaluate a pri= ority scheme, but I'd like to know whether I have the correct ones(and = relative importance).
- Application performance
- Code size/complexit= y
- Bytes on the wire
- Computational complexity/potential for attack= s
- Reduction/change in edge cases(particularly for HTTP/3 without HoL b= locking)
- New capabilities (ie: easier for LBs/AFEs to contribute?)
=
Experimentation Options
The H2 stack at Google supports FIFO,= LIFO and H2 priorities.=C2=A0 However, it=E2=80=99s not currently using LO= WAT and previous experiments have yielded no measurable change in performan= ce, so H2 does not seem like a good experiment platform.

For gQUIC, = we already have an implementation of H2 priorities that we=E2=80=99re not u= sing.=C2=A0 We can wire up an experiment to start using them and compare to= SPDY style priorities, but given Chrome's internal priority scheme wit= h 5 levels and translation to a linked list in H2 priorities, I believe tha= t would only provide information on code size/complexity and bytes on the w= ire.=C2=A0 Application performance would only change if one of the two sche= mes had an implementation bug.

Expanding Chrome=E2=80=99s usage of p= riorities is possible, but it=E2=80=99s a longer term project and I don'= ;t know whether they'll change.

Other data
Most thinki= ng about priorities is based on the idea that a page is loaded over a singl= e connection, but in fact, that=E2=80=99s extraordinarily rare as I present= ed at the interim(except Wikipedia). =C2=A0 Would it be useful to have more= data on this from the client and/or server perspective?

We'd be happy to work with someone else on gathering data as well, ass= uming the WG would find the data we're gathering more valuable than wha= t Chrome/Google can provide alone.

Thanks, Ian
--000000000000befae1058dc316b8-- From nobody Tue Jul 16 00:36:14 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4820C120182 for ; Tue, 16 Jul 2019 00:36:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.996 X-Spam-Level: X-Spam-Status: No, score=-1.996 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FbZPh3_V3Fm7 for ; Tue, 16 Jul 2019 00:36:09 -0700 (PDT) Received: from mail-ed1-x52e.google.com (mail-ed1-x52e.google.com [IPv6:2a00:1450:4864:20::52e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 470E2120086 for ; Tue, 16 Jul 2019 00:36:09 -0700 (PDT) Received: by mail-ed1-x52e.google.com with SMTP id k21so18475205edq.3 for ; Tue, 16 Jul 2019 00:36:09 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:in-reply-to:references:mime-version:date:message-id:subject:to; bh=7QAvds5j9EWbKTkQ0rcxTYrjtluoOdNOmt2h/ntqzII=; b=PCG49Im6mVjvdXwEwRbLnj33Pza9nO2ojgRK0+BvK2Tz0zPWbH25Nq4tbUDyZE0CSb XENtqvrHxDpKRYkMYiqK7eSzH0UaWIviXwPaNyabKadSnjjaoFctjJJLQQvWRRo2ZT3z fT2va5qb2D+d/cAfLCY0fivMbEg4DYibyGfWJ6HNUJ0SRNhv32qr2ZhXyNFbZp6SNlMo xoieUqTRQgUHIIaFVaKCZu3krgiGVGlmZyQvywRUN8gJz/QZD5nayt5tjKKYd/Yw9Ju6 OhdXl+MkG9k+pcXxkgMtOpjn/+P1WNXWsCRrz+2scHpPFXkgxftUoiHI3clJUeaEGfSW 0lQQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:in-reply-to:references:mime-version:date :message-id:subject:to; bh=7QAvds5j9EWbKTkQ0rcxTYrjtluoOdNOmt2h/ntqzII=; b=Mk0qILBhWDudvxc+mVIdSE4XqIOzM1g3AybeFoZzUhZkVFD19oPPAJpPz85to5oUJ0 PiuSZwTUXmxRkBdU+Qhap5MwGy8rUMRdJC6zZUbzn2NsA2QwW/Aa3zm2xCU5WxeB0Omp yN1QrfPurlahp3f2lY91aTI6KilPnt46pwvrbdJyfEuLesbfSm/CzmoA5x6zRRMj858y fdO+/Z+xhmsSOOjDG/LI9+dAK2HeUf2jAn7ZX00ZsgTXXUnsHNBMrgGgTEDK9is4qsTV PcSG6LYZoRNcB7Z6qHITftReqAkjt/B2l9hoep/hNKDGO5OISaKR8KnSqLXycB16AiYd zbwg== X-Gm-Message-State: APjAAAWBlV5jDukmnhdxE6tCjZtyaPYOTdSUWL+gNLQPPEyW/nTNlzxB mX4zSESigKkrKYbVj0wea7ZV1B9XLTVS4xJwzJo= X-Google-Smtp-Source: APXvYqz8Wgz16XVW/rBvMQRU9oe+zWMpYHr05Sjavim8ZWVelFEI5sCgBWEF7m0BeZHaANA7C/YE5FmLzbzygbW3bHk= X-Received: by 2002:aa7:c999:: with SMTP id c25mr27508608edt.134.1563262567767; Tue, 16 Jul 2019 00:36:07 -0700 (PDT) Received: from 1058052472880 named unknown by gmailapi.google.com with HTTPREST; Tue, 16 Jul 2019 00:36:06 -0700 From: =?UTF-8?Q?Mikkel_Fahn=C3=B8e_J=C3=B8rgensen?= In-Reply-To: References: X-Mailer: Airmail (420) MIME-Version: 1.0 Date: Tue, 16 Jul 2019 00:36:06 -0700 Message-ID: Subject: Re: Experimental data on priorities To: Ian Swett , HTTP Working Group , IETF QUIC WG Content-Type: multipart/alternative; boundary="0000000000000ae18c058dc76e75" Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Jul 2019 07:36:12 -0000 --0000000000000ae18c058dc76e75 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Most thinking about priorities is based on the idea that a page is loaded over a single connection, but in fact, that=E2=80=99s extraordinarily rare = as I presented at the interim(except Wikipedia). Would it be useful to have more data on this from the client and/or server perspective? Is that for historical reasons like http/1.1 opening 8 connections to load faster? Because that shouldn=E2=80=99t be necessary with QUIC, as you surel= y are aware of. With H/2 it is more muddled because of HoL. Or, is it because content is cached from other pages and previous visits? I notice a trend towards content splitting as opposed to content bundling that was popular a few years back. Splitting theoretically allows for faster page loads and especially with new transports like H/2 and QUIC, they probably don=E2=80=99t bring anything. Even on H/1.1 it would prevent = parallel loads over multiple connections. Mikkel On 16 July 2019 at 04.25.37, Ian Swett (ianswett=3D40google.com@dmarc.ietf.= org) wrote: Most thinking about priorities is based on the idea that a page is loaded over a single connection, but in fact, that=E2=80=99s extraordinarily rare = as I presented at the interim(except Wikipedia). Would it be useful to have more data on this from the client and/or server perspective? --0000000000000ae18c058dc76e75 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable

Most thinking about priorities is based on the idea that a page is loade= d over a single connection, but in fact, that=E2=80=99s extraordinarily rar= e as I presented at the interim(except Wikipedia). Would it be useful to ha= ve more data on this from the client and/or server perspective?

Is that for historical reasons like http/1.1 opening 8 connections to lo= ad faster? Because that shouldn=E2=80=99t be necessary with QUIC, as you su= rely are aware of. With H/2 it is more muddled because of HoL.

Or, is it because content is cached from other pages and previous visits= ?

I notice a trend towards content splitting as opposed to content bundlin= g that was popular a few years back. Splitting theoretically allows for fas= ter page loads and especially with new transports like H/2 and QUIC, they p= robably don=E2=80=99t bring anything. Even on H/1.1 it would prevent parall= el loads over multiple connections.

Mikkel



On 16 July 2019 at= 04.25.37, Ian Swett (ianswett=3D40google.com@dmarc.ietf.org) wrote:

Most thinking about priorities is based on the i= dea that a page is loaded over a single connection, but in fact, that=E2=80= =99s extraordinarily rare as I presented at the interim(except Wikipedia). = =C2=A0 Would it be useful to have more data on this from the client and/or = server perspective?

--0000000000000ae18c058dc76e75-- From nobody Tue Jul 16 00:40:31 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D258F120182 for ; Tue, 16 Jul 2019 00:40:29 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.997 X-Spam-Level: X-Spam-Status: No, score=-1.997 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3QR02L4DoNH2 for ; Tue, 16 Jul 2019 00:40:28 -0700 (PDT) Received: from mail-ed1-x52f.google.com (mail-ed1-x52f.google.com [IPv6:2a00:1450:4864:20::52f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 21CB9120086 for ; Tue, 16 Jul 2019 00:40:28 -0700 (PDT) Received: by mail-ed1-x52f.google.com with SMTP id x19so12551262eda.12 for ; Tue, 16 Jul 2019 00:40:28 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:in-reply-to:references:mime-version:date:message-id:subject:to; bh=+oQjdcvrtAEEem1LbVzXQzQLXuN5ZrokJadmC7A72eA=; b=oda7Oto47yXjpnhCz8rL/wfKAG9iljfa2eYTCBMpmMpnqaOvBY8gUhchTwCw5xmhEj KnKsRGWQGDOzKDdGAb1nHdEQR93ulxIrga8o/Fpryae6hV1wN8yyfZmCZ2u8fqZ2F0hD t1+gFq+VA/F9pc2IDZ/2ZPuC7Jr2af+uTR/V4DvfLXC9PS8aeViXFSjNbLKiISFKGAYi 0sOT9NeqNWDzdNxoQt5DKuHmGC+lYrn3O/VmAV1zEmugVAkWZwd8TGp9c2im/6gtSv10 LWKSRBI8h4TXP8hiyOGSqdL9TqPgQPnuEjnTDInwgIt2SU1zS1YIAvq3iHzMW4ImUBvv 1GKw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:in-reply-to:references:mime-version:date :message-id:subject:to; bh=+oQjdcvrtAEEem1LbVzXQzQLXuN5ZrokJadmC7A72eA=; b=KX4HID+Inw5OgfBjhBOmQbwc+gR0vSs3icLQt1tMTgadT9f1qCJO6lRJVjhPif3gOE KXKny2LtOCfVCmx4M7zTeYK1h2zdiSH/wN/nli2JHlijLRnr7klyPegaxo4ebc+iPMHu gC33S9mvzvO44pC63xcUX6S8qqJzr44slYbuU9e2Wcc8it4t66pTCgQpLu19VeoUBQuD BA5Tl493TxV73n+xeEngGzz2//fyT8194WPIqerLakt+4IUPFSe2+vHDYPOO2hQjeLN2 I2epUFV4IIqM142V/2fi/t68KiNjeYUxC7FvMOSOpSApBAaxvS3v4C0JzQkkPcStqAbQ be7A== X-Gm-Message-State: APjAAAU6SZ/TLV0ZBtZAoXto4IB6BftXBVuKoKcQ3FQxe9oIxBrD99oR d3fago5QI9uLBjDBrLJGvigab8q8gxfuu28WsHQ= X-Google-Smtp-Source: APXvYqyXmbyK2+k0IVQcDpwSa80Ei6ldQflip5rgSYIK4T+sWdqjPNmyw437NGmQJmBEIZJDfs+e6dlGtr32Pm5iz8Y= X-Received: by 2002:a17:906:4882:: with SMTP id v2mr24795446ejq.100.1563262826766; Tue, 16 Jul 2019 00:40:26 -0700 (PDT) Received: from 1058052472880 named unknown by gmailapi.google.com with HTTPREST; Tue, 16 Jul 2019 00:40:26 -0700 From: =?UTF-8?Q?Mikkel_Fahn=C3=B8e_J=C3=B8rgensen?= In-Reply-To: References: X-Mailer: Airmail (420) MIME-Version: 1.0 Date: Tue, 16 Jul 2019 00:40:26 -0700 Message-ID: Subject: Re: Experimental data on priorities To: Ian Swett , IETF QUIC WG , HTTP Working Group Content-Type: multipart/alternative; boundary="0000000000007ae464058dc77d6c" Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Jul 2019 07:40:30 -0000 --0000000000007ae464058dc77d6c Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Correction: "and especially with new transports like H/2 and QUIC, they probably don=E2=80=99t bring anything.=E2=80=9D I meant to say that bunding does not bring anything, while splitting certainly does - loads less. On 16 July 2019 at 09.36.06, Mikkel Fahn=C3=B8e J=C3=B8rgensen (mikkelfj@gm= ail.com) wrote: and especially with new transports like H/2 and QUIC, they probably don=E2= =80=99t bring anything. --0000000000007ae464058dc77d6c Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable = Correction:=C2=A0=C2=A0"and especially with ne= w transports like H/2 and QUIC, they probably don=E2=80=99t bring anything.= =E2=80=9D

I meant to say that bunding does not bring anything= , while splitting certainly does - loads less.


On 16 July 2019 at 09.36.06, Mikkel Fahn=C3=B8e J=C3=B8rgensen (mikkelfj@gmail.com) wrote:

=C2= =A0and especially with new transports like H/2 and QUIC, they probab= ly don=E2=80=99t bring anything.
 --0000000000007ae464058dc77d6c-- From nobody Tue Jul 16 05:47:44 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1F885120411 for ; Tue, 16 Jul 2019 05:47:43 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, MIME_QP_LONG_LINE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=apple.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hK0sRk94b5jS for ; Tue, 16 Jul 2019 05:47:40 -0700 (PDT) Received: from nwk-aaemail-lapp02.apple.com (nwk-aaemail-lapp02.apple.com [17.151.62.67]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E3F861201C7 for ; Tue, 16 Jul 2019 05:47:40 -0700 (PDT) Received: from pps.filterd (nwk-aaemail-lapp02.apple.com [127.0.0.1]) by nwk-aaemail-lapp02.apple.com (8.16.0.27/8.16.0.27) with SMTP id x6GCla5M056629; Tue, 16 Jul 2019 05:47:37 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=apple.com; h=sender : content-type : content-transfer-encoding : from : mime-version : subject : date : message-id : references : cc : in-reply-to : to; s=20180706; bh=dcMctaQfyS/EMUs1imhXcAs6MY8AAwajec1z73Adda8=; b=XJxPV8/4Yq8PLHlcFS/KkoyuowsrtmW8NTwHkRWassjqx80xw/45A5bx1JGnw3qwoSgW Eu+FeWOBLkt3E8m+XMzhXX69UuIQb41RtZD+0MJMiD0qmhquJe1uvcAl6f4ptiYwZ2qh L5jlWkqgckTWx2zIQEHL25cfuHJ2emw3Ha9/+6rm2inviZvTgUOI3lBCDS0b6052+Uko RSlcD7Vplo1qD8K0mvUQ4GJVHfQlq3y5SEaY1Vw2fASoAjjLhdNd0uQ7EQcW/e1xNJ2k Jah4BooYm9QwpgGmisdvFddXe3C8SDVS0heb1k7G58A5EM06ipF3miEDMLxFQ8B5I83T Xg== Received: from mr2-mtap-s03.rno.apple.com (mr2-mtap-s03.rno.apple.com [17.179.226.135]) by nwk-aaemail-lapp02.apple.com with ESMTP id 2tqbvgus9y-2 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO); Tue, 16 Jul 2019 05:47:37 -0700 Received: from nwk-mmpp-sz09.apple.com (nwk-mmpp-sz09.apple.com [17.128.115.80]) by mr2-mtap-s03.rno.apple.com (Oracle Communications Messaging Server 8.0.2.4.20190507 64bit (built May 7 2019)) with ESMTPS id <0PUQ00572JIVFM70@mr2-mtap-s03.rno.apple.com>; Tue, 16 Jul 2019 05:47:19 -0700 (PDT) Received: from process_milters-daemon.nwk-mmpp-sz09.apple.com by nwk-mmpp-sz09.apple.com (Oracle Communications Messaging Server 8.0.2.4.20190507 64bit (built May 7 2019)) id <0PUQ00500J1BDK00@nwk-mmpp-sz09.apple.com>; Tue, 16 Jul 2019 05:47:19 -0700 (PDT) X-Va-A: X-Va-T-CD: 5ef9a7ae2066e2f47378258317604d0a X-Va-E-CD: b42e1731a8648bdf8d931aa1eda3b9af X-Va-R-CD: 4798a8ccd957a0d6b4548f4d1f0608d0 X-Va-CD: 0 X-Va-ID: 4948e838-4722-4e10-b325-2879803ded64 X-V-A: X-V-T-CD: 5ef9a7ae2066e2f47378258317604d0a X-V-E-CD: b42e1731a8648bdf8d931aa1eda3b9af X-V-R-CD: 4798a8ccd957a0d6b4548f4d1f0608d0 X-V-CD: 0 X-V-ID: 41f00ad5-656e-4811-84c1-df060cd7a0ff X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:,, definitions=2019-07-16_03:,, signatures=0 Received: from [17.235.50.229] (unknown [17.235.50.229]) by nwk-mmpp-sz09.apple.com (Oracle Communications Messaging Server 8.0.2.4.20190507 64bit (built May 7 2019)) with ESMTPSA id <0PUQ00G8FJIUAOC0@nwk-mmpp-sz09.apple.com>; Tue, 16 Jul 2019 05:47:19 -0700 (PDT) Sender: tpauly@apple.com Content-type: multipart/alternative; boundary=Apple-Mail-60B7A94D-1FFA-449A-9203-3FE8CE5A1BDA Content-transfer-encoding: 7bit From: Tommy Pauly MIME-version: 1.0 (1.0) Subject: Re: Updated DATAGRAM -03 draft Date: Tue, 16 Jul 2019 08:47:17 -0400 Message-id: <2F2121D0-503B-48CF-99E1-A9CE9192FF87@apple.com> References: Cc: =?utf-8?Q?Mikkel_Fahn=C3=B8e_J=C3=B8rgensen?= , QUIC WG , Christian Huitema , Robin MARX In-reply-to: To: Roberto Peon X-Mailer: iPhone Mail (17A5522g) X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2019-07-16_03:, , signatures=0 Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Jul 2019 12:47:43 -0000 --Apple-Mail-60B7A94D-1FFA-449A-9203-3FE8CE5A1BDA Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable I definitely agree that sharing one connection, where the frames are all sub= ject to a shared congestion control, will provide the most control and the b= est results. What it does bring up, however, is the need for text regarding prioritizatio= n in the document, similar to the =E2=80=9CStream Prioritization=E2=80=9D se= ction in the main transport document. The application should be able to indi= cate to the quic implementation the relative priority of a flow of datagrams= with regards to other streams and other flows, thus indicating how to sched= ule frames when congestion control opens up. This is also a way in which hav= ing a flow identifier known at the transport can be useful (although this id= entifier could be used strictly locally to get a similar effect).=20 Thanks, Tommy > On Jul 15, 2019, at 6:23 PM, Roberto Peon wrote: >=20 > =EF=BB=BF > Using two connections would be unfortunate-- this will almost always guara= ntee worse results than even the most simple proportional prioritization or f= air-share scheduling because you can cause self contention and dilute your m= easurement accuracy. >=20 > -=3DR > From: QUIC on behalf of Mikkel Fahn=C3=B8e J=C3=B8= rgensen > Sent: Monday, July 15, 2019 12:12:09 PM > To: QUIC WG; Christian Huitema; Robin MARX > Cc: Tommy Pauly > Subject: Re: Updated DATAGRAM -03 draft > =20 > You could also carry two connections, one for video and one for game statu= s updates. >=20 > I=E2=80=99m wondering if there is, or should be, a way to accomplish this o= n a single connection. > I asked something similar a long time ago and I don=E2=80=99t think there i= s any amition for managing bandwidth in this for on a single connection, at l= east for QUIC v1. >=20 >=20 >> On 15 July 2019 at 21.04.58, Christian Huitema (huitema@huitema.net) wrot= e: >>=20 >>=20 >> On 7/15/2019 3:03 AM, Robin MARX wrote:=20 >> > Hello Tommy,=20 >> >=20 >> > Good to see the updated draft.=20 >> > I do wonder about the decision to enforce congestion control for=20 >> > DATAGRAM frames and the effect this will have on the gaming use case. =20= >> > As also discussed in Prague, real-time gaming often requires a set=20 >> > update rate frequency (e.g., 30-60 messages per second) for=20 >> > responsiveness. =20 >> > I wonder if congestion controlling the frames (e.g., delaying/dropping=20= >> > them) will produce some weird edge cases that really mess with this=20 >> > setup. =20 >> > It's a bit difficult to assess because the messages are usually=20 >> > relatively small (though they could be mixed with larger messages,=20 >> > e.g., RPCs) and you could make the argument that, if there is actual=20= >> > congestion, the packets will be dropped in the network either way. =20 >> > You could also say that custom game-focused implementations will just=20= >> > ignore the text and do their own logic as needed.=20 >> >=20 >> > So I'm not sure the text needs changes, I just wanted to mention that=20= >> > it might not be optimal for the real-time gaming use case and that it=20= >> > might be capable footgun with some weird edge cases if people do stick=20= >> > to the text.=20 >>=20 >>=20 >> Not really. If the network is congested and the video game still=20 >> persists sending frequent messages the most likely outcome will be=20 >> queuing and losses, and thus bad game play. The proper behavior in a=20 >> congested network is to switch to a low bandwidth mode of some kind --=20= >> maybe a lower frame rate, or a lower resolution. This is pretty much the=20= >> same issue as voice or video over IP: if the network is congested, it=20 >> makes sense to use a higher compression rate. With congestion control,=20= >> the application can detect the upset of congestion and adopt these=20 >> strategies. That's generally much better than to just passively accept=20= >> queues and losses.=20 >>=20 >> -- Christian Huitema=20 >>=20 >>=20 --Apple-Mail-60B7A94D-1FFA-449A-9203-3FE8CE5A1BDA Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable I definitely agree that sharing one connection, where the= frames are all subject to a shared congestion control, will provide the mos= t control and the best results.

What it does bring up, however, is the need for text regarding prioriti= zation in the document, similar to the =E2=80=9CStream Prioritization=E2=80=9D= section in the main transport document. The application should be able to i= ndicate to the quic implementation the relative priority of a flow of datagr= ams with regards to other streams and other flows, thus indicating how to sc= hedule frames when congestion control opens up. This is also a way in which h= aving a flow identifier known at the transport can be useful (although this i= dentifier could be used strictly locally to get a similar effect). 

Thanks,
= Tommy

On Jul 15, 2019, a= t 6:23 PM, Roberto Peon <fenix@fb.com> wrote:

=EF=BB=BF
Using two connections would be unfortunate-- this will almost always guarant= ee worse results than even the most simple proportional prioritization or fa= ir-share scheduling because you can cause self contention and dilute your me= asurement accuracy.

-=3DR
From: QUIC <quic-bounces@i= etf.org> on behalf of Mikkel Fahn=C3=B8e J=C3=B8rgensen <mikkelfj@gmai= l.com>
Sent: Monday, July 15, 2019 12:12:09 PM
To: QUIC WG; Christian Huitema; Robin MARX
Cc: Tommy Pauly
Subject: Re: Updated DATAGRAM -03 draft
 
You could also carry two connections, one for video and one for game status u= pdates.

I=E2=80=99m wondering if there is, or should be, a way to accomplish this on= a single connection.
I asked something similar a long time ago and I don=E2=80=99t think there is= any amition for managing bandwidth in this for on a single connection, at l= east for QUIC v1.


On 15 July 2019 at 21.04.58, Christian Huitema (huitema@huitema.net) wrote:


On 7/15/2019 3:03 AM, Robin MARX wrote:
> Hello Tommy,
>
> Good to see the updated draft.
> I do wonder about the decision to enforce congestion control for
> DATAGRAM frames and the effect this will have on the gaming use case.&n= bsp;
> As also discussed in Prague, real-time gaming often requires a set
= > update rate frequency (e.g., 30-60 messages per second) for
> responsiveness. 
> I wonder if congestion controlling the frames (e.g., delaying/dropping <= br> > them) will produce some weird edge cases that really mess with this > setup. 
> It's a bit difficult to assess because the messages are usually
> relatively small (though they could be mixed with larger messages,
= > e.g., RPCs) and you could make the argument that, if there is actual > congestion, the packets will be dropped in the network either way. = ;
> You could also say that custom game-focused implementations will just <= br> > ignore the text and do their own logic as needed.
>
> So I'm not sure the text needs changes, I just wanted to mention that <= br> > it might not be optimal for the real-time gaming use case and that it <= br> > might be capable footgun with some weird edge cases if people do stick <= br> > to the text.


Not really. If the network is congested and the video game still
persists sending frequent messages the most likely outcome will be
queuing and losses, and thus bad game play. The proper behavior in a
congested network is to switch to a low bandwidth mode of some kind --
maybe a lower frame rate, or a lower resolution. This is pretty much the same issue as voice or video over IP: if the network is congested, it
makes sense to use a higher compression rate. With congestion control,
the application can detect the upset of congestion and adopt these
strategies. That's generally much better than to just passively accept
queues and losses.

-- Christian Huitema


= --Apple-Mail-60B7A94D-1FFA-449A-9203-3FE8CE5A1BDA-- From patmeenan@gmail.com Tue Jul 16 06:01:02 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4965B120458 for ; Tue, 16 Jul 2019 06:01:02 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cXI4z1a20xmo for ; Tue, 16 Jul 2019 06:00:59 -0700 (PDT) Received: from mail-io1-xd2e.google.com (mail-io1-xd2e.google.com [IPv6:2607:f8b0:4864:20::d2e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 85EC5120434 for ; Tue, 16 Jul 2019 06:00:59 -0700 (PDT) Received: by mail-io1-xd2e.google.com with SMTP id f4so39742678ioh.6 for ; Tue, 16 Jul 2019 06:00:59 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=ptX+PAAo9E3ByFsODD5gcNd5YlvK9gch1NLw7vtate8=; b=hZJq5UaPo8fSX0dXvXuMvnZXKfM7e2jPeBB2boSNzDDQFxfYsw6kY1wrTyONnhW4a3 C9eolG5n+ZbedUzJ//5EGtWaYoCRX1HgHdN8H+/Hj8ADPzdA8EZz+VQBjctoevaE4wJ5 wXfqmkGgAh2DujeViOlPoFP0gLzFhYcq5c3YLFqI/jdZiAiqcVO9wrz7FjbnlXC/omgO o84ZZgdpS3kYvk+ECgaexkNABEBiC3pd/uej5WdLShKKjXzAvEvxVcDZSAIZBN1SkxRK zWiC6DiIy7tiB4yWhZ2SQH9Qr1jnDHaMFIdwWtV9aR5PIYTDb4uvii2EC1Kmdi+U/uO5 3Vfg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=ptX+PAAo9E3ByFsODD5gcNd5YlvK9gch1NLw7vtate8=; b=Qt7+dWgbJcvtqyfZKJ06q4Hchp1mb4N7+S95Q+sdkbCKN9lZ/5g5trgU12eTAKP7F/ Knz8lamzTGellPMq/W1kUoM0bOvLRN77mFKnOm4a4qY3dHNjWMsztkwH52VBhUjeMfOa lY3cQYYki8XKuRRfluowpm1Tv3qmg4igZC3GOSC5q7mJDykq1hYJ0LUIe5Hom9PkPvLq WM7yT9YQdRZ912U59HNA7ZDmgfmemlMLw8I2mi5cVh/CAO5bI50XUJhDUZ8L7j2COfg3 R+0Xv1037QKQqfTY2UBSnvNVdptaGo/BQAdXtNVg3fgHSNtVUgUV7q/jHCbs5ttSePLL O+4A== X-Gm-Message-State: APjAAAW/QH0y7CkTizbs3n5VmivTavrc4RmbTb11q4PptEL/xOS9Bf7t gU6rTEKGa5eQcT4RS879WYGNx73YkHUY4+TZHhc= X-Google-Smtp-Source: APXvYqwJ5i/nkh8sfw601hsdV/qBEn8nli4dc5Y41kA89wICPxspjsQ+TC1RmtPxTORaHGoTQSZwvFUO1h+MleCGkXQ= X-Received: by 2002:a05:6602:220a:: with SMTP id n10mr30999048ion.205.1563282058754; Tue, 16 Jul 2019 06:00:58 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: Patrick Meenan Date: Tue, 16 Jul 2019 09:00:47 -0400 Message-ID: Subject: Re: Experimental data on priorities To: Ian Swett Cc: IETF QUIC WG , HTTP Working Group Content-Type: multipart/alternative; boundary="000000000000cbc042058dcbf767" Archived-At: X-Mailman-Approved-At: Tue, 16 Jul 2019 12:01:31 -0700 X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Jul 2019 14:48:44 -0000 --000000000000cbc042058dcbf767 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Lucas can speak to the current state of deployment at Cloudflare but the scheme we deployed mirrors the current proposal well enough that the results should apply. It's a little different because the prioritization isn't originating from the client but it is being applied as if it was. Cloudflare has ample evidence that "it works" at least in place of HTTP/2's scheme over TCP and compares well to a well-implemented HTTP/2 client (when serving web content to browsers anyway). Where the really big gains came into play were in overriding the client-requested prioritization from Safari and Edge and applying something that looks more like a mix of Chrome and Firefox (sequential critical assets, interleaved images). In that case it worked much better than HTTP/2 but it was because of the specific client HTTP/2 priority schemes and the bulk of the gains came from applying better sequencing server-side (though the ability to make server-side decisions was a huge benefit of the scheme). It also works well enough that the new scheme is applied independent of the client so Chrome and Firefox also don't regress. Given that you can represent the proposed scheme in it's entirety with the HTTP/2 schemes, I'm not sure you'll ever see an application performance gain if you are using the same client and applying the exact same scheme to both modes. That said, the code complexity may prevent some features from being implemented in the tree that could be added fairly easily to the new scheme. The one that comes to mind for Chrome in particular is to enable interleaving of image data instead of delivering them sequentially. With the new scheme it's pretty much just carrying a bit through the stack to indicate that the given fetch should be interleaved and it can be mixed in to the serialized priorities trivially. Doing the same with the full HTTP/2 tree would be considerably more complex. On Mon, Jul 15, 2019 at 10:29 PM Ian Swett wrote: > When I presented slides on HTTP/3 priorities at the QUIC interim, one > consistent point was that the HTTP/3 working group wanted some experiment= al > evidence that an alternate scheme worked in practice. gQUIC has always > used SPDY style priorities, FWIW, but we have no comparative data at > the moment. > > I can imagine a few ways to evaluate a priority scheme, but I'd like to > know whether I have the correct ones(and relative importance). > - Application performance > - Code size/complexity > - Bytes on the wire > - Computational complexity/potential for attacks > - Reduction/change in edge cases(particularly for HTTP/3 without HoL > blocking) > - New capabilities (ie: easier for LBs/AFEs to contribute?) > > *Experimentation Options* > The H2 stack at Google supports FIFO, LIFO and H2 priorities. However, > it=E2=80=99s not currently using LOWAT and previous experiments have yiel= ded no > measurable change in performance, so H2 does not seem like a good > experiment platform. > > For gQUIC, we already have an implementation of H2 priorities that we=E2= =80=99re > not using. We can wire up an experiment to start using them and compare = to > SPDY style priorities, but given Chrome's internal priority scheme with 5 > levels and translation to a linked list in H2 priorities, I believe that > would only provide information on code size/complexity and bytes on the > wire. Application performance would only change if one of the two scheme= s > had an implementation bug. > > Expanding Chrome=E2=80=99s usage of priorities is possible, but it=E2=80= =99s a longer term > project and I don't know whether they'll change. > > *Other data* > Most thinking about priorities is based on the idea that a page is loaded > over a single connection, but in fact, that=E2=80=99s extraordinarily rar= e as I > presented at the interim(except Wikipedia). Would it be useful to have > more data on this from the client and/or server perspective? > > We'd be happy to work with someone else on gathering data as well, > assuming the WG would find the data we're gathering more valuable than wh= at > Chrome/Google can provide alone. > > Thanks, Ian > --000000000000cbc042058dcbf767 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Lucas can speak to the current state of deployment at Clou= dflare but the scheme we deployed mirrors the current proposal well enough = that the results should apply. It's a little different because the prio= ritization isn't originating from the client but it is being applied as= if it was.=C2=A0

Cloudflare has ample evidence that &qu= ot;it works" at least in place of HTTP/2's scheme over TCP and com= pares well to a well-implemented HTTP/2 client (when serving web content to= browsers anyway). Where the really big gains came into play were in overri= ding the client-requested prioritization from Safari and Edge and applying = something that looks more like a mix of Chrome and Firefox (sequential crit= ical assets, interleaved images). In that case it worked much better than H= TTP/2 but it was because of the specific client HTTP/2 priority schemes and= the bulk of the gains came from applying better sequencing server-side (th= ough the ability to make server-side decisions was a huge benefit of the sc= heme).=C2=A0 It also works well enough that the new scheme is applied indep= endent of the client so Chrome and Firefox also don't regress.

Given that you can represent the proposed scheme in it'= ;s entirety with the HTTP/2 schemes, I'm not sure you'll ever see a= n application performance gain if you are using the same client and applyin= g the exact same scheme to both modes.=C2=A0 That said, the code complexity= may prevent some features from being implemented in the tree that could be= added fairly easily to the new scheme. The one that comes to mind for Chro= me in particular is to enable interleaving of image data instead of deliver= ing them sequentially. With the new scheme it's pretty much just carryi= ng a bit through the stack to indicate that the given fetch should be inter= leaved and it can be mixed in to the serialized priorities trivially. Doing= the same with the full HTTP/2 tree would be considerably more complex.

On Mon, Jul 15, 2019 at 10:29 PM Ian Swett <ianswett@google.com> wrote:
When I presented slides o= n HTTP/3 priorities at the QUIC interim, one consistent point was that the = HTTP/3 working group wanted some experimental evidence that an alternate sc= heme worked in practice.=C2=A0 gQUIC has always used SPDY style priorities,= FWIW, but we have no comparative data at the=C2=A0moment.

I can ima= gine a few ways to evaluate a priority scheme, but I'd like to know whe= ther I have the correct ones(and relative importance).
- Application per= formance
- Code size/complexity
- Bytes on the wire
- Computationa= l complexity/potential for attacks
- Reduction/change in edge cases(part= icularly for HTTP/3 without HoL blocking)
- New capabilities (ie: easier= for LBs/AFEs to contribute?)

Experimentation Options
The = H2 stack at Google supports FIFO, LIFO and H2 priorities.=C2=A0 However, it= =E2=80=99s not currently using LOWAT and previous experiments have yielded = no measurable change in performance, so H2 does not seem like a good experi= ment platform.

For gQUIC, we already have an implementation of H2 pr= iorities that we=E2=80=99re not using.=C2=A0 We can wire up an experiment t= o start using them and compare to SPDY style priorities, but given Chrome&#= 39;s internal priority scheme with 5 levels and translation to a linked lis= t in H2 priorities, I believe that would only provide information on code s= ize/complexity and bytes on the wire.=C2=A0 Application performance would o= nly change if one of the two schemes had an implementation bug.

Expa= nding Chrome=E2=80=99s usage of priorities is possible, but it=E2=80=99s a = longer term project and I don't know whether they'll change.
Other data
Most thinking about priorities is based on the idea t= hat a page is loaded over a single connection, but in fact, that=E2=80=99s = extraordinarily rare as I presented at the interim(except Wikipedia). =C2= =A0 Would it be useful to have more data on this from the client and/or ser= ver perspective?

We'd be happy to work with someone = else on gathering data as well, assuming the WG would find the data we'= re gathering more valuable than what Chrome/Google can provide alone.
=

Thanks, Ian
--000000000000cbc042058dcbf767-- From nobody Tue Jul 16 23:31:12 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8119D12006D for ; Tue, 16 Jul 2019 23:31:09 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CNhXbyE2RIbf for ; Tue, 16 Jul 2019 23:31:06 -0700 (PDT) Received: from EUR01-DB5-obe.outbound.protection.outlook.com (mail-db5eur01on0600.outbound.protection.outlook.com [IPv6:2a01:111:f400:fe02::600]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D38F7120046 for ; Tue, 16 Jul 2019 23:31:05 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=OnFxYkn48KvcD9VLR0NnBnjsVRBFCLcZvzFFxUvX/FaNmScjLzqx1I/layTL0gaFNrQl9vFn6nAEdg+obcGNHQZDWKafyCUXNdnYCyYPJlwOWNu69C0Q5VdLXkF1cN2UCQ3bxHbn8e1qXamc9pOzxxTSUyPCyU11gB9BtI3Pla2ujf+LSVA+lfKQGspc2+mvMQvT6wMPyR0NaJSWQVDzHOoR15lJBiMBIACyUajLmBAqx4Wff+nOaBcbQnJ//0/aOgpwm1KSkSyide52CLAxS3CQQxKSNX+AA0N+OaA5KXe9O/DJHykKSiGKBtoewFst+PL9Qt+Fsi4vNjNawQL0zw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=6QAseFCT59HHBSl2S7levhkTl6zwM1gUo33n8cI8BhM=; b=FkZSw9R902g3ro4rheFsHRnAucrAqluhgI3zBhGy+e9NwrNe6mT8VVjIQXt5Cy3kmTDDqXdNGcKQhyzuy81ylcxHzPH/lPOmpfoZAN5pI5RaORWbViVZtdWglUFce+JvGlWx3TIcOJudy8TpfB67vi6ZNFS8slslZ1Ft9WiMzhctCSAu9CLBCThn88SpQxENjotZCXHEhzYTJfdwfdMwHKO/L5/sD1q05VEYrQohzauYOlkW4JYRFJ77F94vy9Nh84XiVC4P2iZ6bLS1tD+/+BEcLD5r7hDz/tDpKBzI+Nb0VQd6ytFp+RX4CIINzZtqbIQ6a2ODRvWlLepl0s3PAg== ARC-Authentication-Results: i=1; mx.microsoft.com 1;spf=pass smtp.mailfrom=ericsson.com;dmarc=pass action=none header.from=ericsson.com;dkim=pass header.d=ericsson.com;arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=6QAseFCT59HHBSl2S7levhkTl6zwM1gUo33n8cI8BhM=; b=iSDKOXr+mjfBiSIG30bCPHiq8/kDNRRY42te8MAhVqzT1Gzla5P2q6UHMKHOlbKOx4xVpegQ85/RWj171NC79B+KWO6uP1uTAHdywjRalTUtdJrlqsrabJikz5LexjVJlwwab4oF7sFj/LnKLNe3+5cwB6YbgA5odYbP/8PMNHw= Received: from HE1PR07MB4425.eurprd07.prod.outlook.com (20.176.167.142) by HE1PR07MB4409.eurprd07.prod.outlook.com (20.176.167.138) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2094.6; Wed, 17 Jul 2019 06:31:03 +0000 Received: from HE1PR07MB4425.eurprd07.prod.outlook.com ([fe80::3d90:aa2:6815:d0d1]) by HE1PR07MB4425.eurprd07.prod.outlook.com ([fe80::3d90:aa2:6815:d0d1%7]) with mapi id 15.20.2094.009; Wed, 17 Jul 2019 06:31:03 +0000 From: Ingemar Johansson S To: Tommy Pauly , Roberto Peon CC: =?utf-8?B?TWlra2VsIEZhaG7DuGUgSsO4cmdlbnNlbg==?= , QUIC WG , Christian Huitema , Robin MARX , Ingemar Johansson S Subject: RE: Updated DATAGRAM -03 draft Thread-Topic: Updated DATAGRAM -03 draft Thread-Index: AQHVPAi5RGl8N8lyN0SYGyNU0RUUwKbOVJ+w Date: Wed, 17 Jul 2019 06:31:03 +0000 Message-ID: References: <2F2121D0-503B-48CF-99E1-A9CE9192FF87@apple.com> In-Reply-To: <2F2121D0-503B-48CF-99E1-A9CE9192FF87@apple.com> Accept-Language: sv-SE, en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=ingemar.s.johansson@ericsson.com; x-originating-ip: [83.226.2.151] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 50f40062-c41a-44b8-43ca-08d70a805767 x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600148)(711020)(4605104)(1401327)(2017052603328)(49563074)(7193020); SRVR:HE1PR07MB4409; x-ms-traffictypediagnostic: HE1PR07MB4409: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:9508; x-forefront-prvs: 01018CB5B3 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(396003)(346002)(366004)(39860400002)(136003)(376002)(54094003)(189003)(199004)(64756008)(33656002)(76116006)(5660300002)(66556008)(52536014)(66476007)(4326008)(478600001)(66446008)(229853002)(71190400001)(966005)(66616009)(476003)(76176011)(26005)(6246003)(186003)(102836004)(316002)(71200400001)(66066001)(7110500001)(606006)(86362001)(25786009)(6116002)(790700001)(6506007)(3846002)(54906003)(256004)(6436002)(110136005)(7736002)(74316002)(236005)(66946007)(11346002)(8676002)(55016002)(9686003)(54896002)(6306002)(53936002)(446003)(81156014)(486006)(99286004)(81166006)(7696005)(7116003)(107886003)(66574012)(53546011)(14454004)(14444005)(2420400007)(99936001)(68736007)(8936002)(15650500001)(2906002); DIR:OUT; SFP:1101; SCL:1; SRVR:HE1PR07MB4409; H:HE1PR07MB4425.eurprd07.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: ericsson.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam-message-info: Ow7Z3upFUXWgBVkP+g3SiD/wYMpIy9iNN6K0y20NxP2PM/Od/npf6huxRULVKl7IhlgXRL5wP6FHQOz8DIc60OPEuuKGlWD/iE7I8lo1JgJ25AE5oS29OOfQtsBt9fazKXjTXAAHX6N5UcjBDf6OH3TxzP5AF9X14kPPPrq83z6/fn9OrPr3IfGeRlJY1Injt9ZbPOm9B1BcLTOR/OylI8iSMvZTmWwyIvIAUgDn1bQInDbIo8Lv0Zrb77fR79fYgqPOu0Rk5+dhCa0/EyOzUcF4rAiXSJ2kG0t8JxsXw5Uyubjdv67fStBbOFEj4/NtAEjRlZZLP3ASqZAlfXIAP1WHFAD9xGulXqRns5MB3r+A1FrwRP8jr+/fe44hblBN5TC2HA3oqer0eto0cWFJniNfxUCzjj30Pk3620/K3oM= Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=SHA1; boundary="----=_NextPart_000_0192_01D53C79.F632EE60" MIME-Version: 1.0 X-OriginatorOrg: ericsson.com X-MS-Exchange-CrossTenant-Network-Message-Id: 50f40062-c41a-44b8-43ca-08d70a805767 X-MS-Exchange-CrossTenant-originalarrivaltime: 17 Jul 2019 06:31:03.2812 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: ingemar.s.johansson@ericsson.com X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR07MB4409 Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 17 Jul 2019 06:31:10 -0000 ------=_NextPart_000_0192_01D53C79.F632EE60 Content-Type: multipart/alternative; boundary="----=_NextPart_001_0193_01D53C79.F632EE60" ------=_NextPart_001_0193_01D53C79.F632EE60 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable +1.=20 In the general non-QoS scenario it is to prefer that the streams share = one connection and thus one congestion control.=20 =20 My experiments with SCReAM (RFC8298) shows that this can be made to work = quite well on RTP streams, an implementation of this is found at = = https://github.com/EricssonResearch/scream. It is however not = straightforward to get perfect prioritization such as 70% of the = bandwidth goes to stream A and 30% to stream B when it comes to = real-time low latency media. The key reason is that the low latency goal = means that there are often no packets to schedule as extra delay due to = queueing in the sender should be avoided, variations on source rates = from video encoder makes it more challenging.=20 In comparison, =E2=80=9CInfinite=E2=80=9D bitrate sources such as file = transfers are much easier to work with as they provide data ready to = schedule for transmission on the sender side until the file transfer is = done. In the SCReAM case I have so far managed to get something like ball-park = weighted fairness, fig 7 in = = https://www.hindawi.com/journals/wcmc/2018/3142496/ shows how it works = in a real test scenario over a LTE access.=20 =20 I mentioned non-QoS scenarios. In scenarios where an underlying network = supports QoS (such as 4G/5G), then it can be beneficial to use two or = more connections, which are then scheduled over different bearers. =20 /Ingemar =20 From: Tommy Pauly =20 Sent: den 16 juli 2019 14:47 To: Roberto Peon Cc: Mikkel Fahn=C3=B8e J=C3=B8rgensen ; QUIC WG = ; Christian Huitema ; Robin MARX = Subject: Re: Updated DATAGRAM -03 draft =20 I definitely agree that sharing one connection, where the frames are all = subject to a shared congestion control, will provide the most control = and the best results. =20 What it does bring up, however, is the need for text regarding = prioritization in the document, similar to the =E2=80=9CStream = Prioritization=E2=80=9D section in the main transport document. The = application should be able to indicate to the quic implementation the = relative priority of a flow of datagrams with regards to other streams = and other flows, thus indicating how to schedule frames when congestion = control opens up. This is also a way in which having a flow identifier = known at the transport can be useful (although this identifier could be = used strictly locally to get a similar effect).=20 =20 Thanks, Tommy On Jul 15, 2019, at 6:23 PM, Roberto Peon > wrote: =EF=BB=BF=20 Using two connections would be unfortunate-- this will almost always = guarantee worse results than even the most simple proportional = prioritization or fair-share scheduling because you can cause self = contention and dilute your measurement accuracy. -=3DR _____ =20 From: QUIC > on = behalf of Mikkel Fahn=C3=B8e J=C3=B8rgensen > Sent: Monday, July 15, 2019 12:12:09 PM To: QUIC WG; Christian Huitema; Robin MARX Cc: Tommy Pauly Subject: Re: Updated DATAGRAM -03 draft=20 =20 You could also carry two connections, one for video and one for game = status updates. =20 I=E2=80=99m wondering if there is, or should be, a way to accomplish = this on a single connection. I asked something similar a long time ago and I don=E2=80=99t think = there is any amition for managing bandwidth in this for on a single = connection, at least for QUIC v1. =20 =20 On 15 July 2019 at 21.04.58, Christian Huitema (huitema@huitema.net = ) wrote: On 7/15/2019 3:03 AM, Robin MARX wrote:=20 > Hello Tommy,=20 >=20 > Good to see the updated draft.=20 > I do wonder about the decision to enforce congestion control for=20 > DATAGRAM frames and the effect this will have on the gaming use case. = > As also discussed in Prague, real-time gaming often requires a set=20 > update rate frequency (e.g., 30-60 messages per second) for=20 > responsiveness. =20 > I wonder if congestion controlling the frames (e.g., delaying/dropping = > them) will produce some weird edge cases that really mess with this=20 > setup. =20 > It's a bit difficult to assess because the messages are usually=20 > relatively small (though they could be mixed with larger messages,=20 > e.g., RPCs) and you could make the argument that, if there is actual=20 > congestion, the packets will be dropped in the network either way. =20 > You could also say that custom game-focused implementations will just=20 > ignore the text and do their own logic as needed.=20 >=20 > So I'm not sure the text needs changes, I just wanted to mention that=20 > it might not be optimal for the real-time gaming use case and that it=20 > might be capable footgun with some weird edge cases if people do stick = > to the text.=20 Not really. If the network is congested and the video game still=20 persists sending frequent messages the most likely outcome will be=20 queuing and losses, and thus bad game play. The proper behavior in a=20 congested network is to switch to a low bandwidth mode of some kind --=20 maybe a lower frame rate, or a lower resolution. This is pretty much the = same issue as voice or video over IP: if the network is congested, it=20 makes sense to use a higher compression rate. With congestion control,=20 the application can detect the upset of congestion and adopt these=20 strategies. That's generally much better than to just passively accept=20 queues and losses.=20 -- Christian Huitema=20 ------=_NextPart_001_0193_01D53C79.F632EE60 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable

+1. =

In the general non-QoS scenario it = is to prefer that the streams share one connection and thus one = congestion control.

 

My experiments with SCReAM = (RFC8298) shows that this can be made to work quite well on RTP streams, = an implementation of this is found at https://github.com/EricssonResearch/scream. It is however not = straightforward to get perfect prioritization such as 70% of the = bandwidth goes to stream A and 30% to stream B when it comes to = real-time low latency media. The key reason is that the low latency goal = means that there are often no packets to schedule as extra delay due to = queueing in the sender should be avoided, variations on source rates = from video encoder makes it more challenging.

In comparison, = =E2=80=9CInfinite=E2=80=9D bitrate sources such as file transfers are = much easier to work with as they provide data ready to schedule for = transmission on the sender side until the file transfer is = done.

In the SCReAM case I have so far = managed to get something like ball-park weighted fairness, fig 7 in = https://www.hindawi.com/journals/wcmc/2018/3142496/ shows how it works in a real test scenario over a = LTE access.

=C2=A0

I mentioned = non-QoS scenarios. In scenarios where an underlying = network supports QoS (such as 4G/5G), then it can be beneficial to use = two or more connections, which are then scheduled over different = bearers.

 

/Ingemar

 

 

=EF=BB=BF

Using two = connections would be unfortunate-- this will almost always guarantee = worse results than even the most simple proportional prioritization or = fair-share scheduling because you can cause self contention and dilute = your measurement accuracy.

-=3DR

From: QUIC <quic-bounces@ietf.org> on = behalf of Mikkel Fahn=C3=B8e J=C3=B8rgensen <mikkelfj@gmail.com>
Sent:= Monday, July 15, 2019 12:12:09 PM
To: QUIC WG; Christian = Huitema; Robin MARX
Cc: Tommy Pauly
Subject: Re: = Updated DATAGRAM -03 draft

 

You could = also carry two connections, one for video and one for game status = updates.

 =

I=E2=80=99m= wondering if there is, or should be, a way to accomplish this on a = single connection.

I asked = something similar a long time ago and I don=E2=80=99t think there is any = amition for managing bandwidth in this for on a single connection, at = least for QUIC v1.

 =

 

On 15 July = 2019 at 21.04.58, Christian Huitema (huitema@huitema.net) = wrote:


On 7/15/2019 3:03 = AM, Robin MARX wrote:
> Hello Tommy,
>
> Good to = see the updated draft.
> I do wonder about the decision to = enforce congestion control for
> DATAGRAM frames and the effect = this will have on the gaming use case. 
> As also discussed = in Prague, real-time gaming often requires a set
> update rate = frequency (e.g., 30-60 messages per second) for
> = responsiveness. 
> I wonder if congestion controlling the = frames (e.g., delaying/dropping
> them) will produce some weird = edge cases that really mess with this
> setup. 
> = It's a bit difficult to assess because the messages are usually
> = relatively small (though they could be mixed with larger messages, =
> e.g., RPCs) and you could make the argument that, if there is = actual
> congestion, the packets will be dropped in the network = either way. 
> You could also say that custom game-focused = implementations will just
> ignore the text and do their own = logic as needed.
>
> So I'm not sure the text needs = changes, I just wanted to mention that
> it might not be optimal = for the real-time gaming use case and that it
> might be capable = footgun with some weird edge cases if people do stick
> to the = text.


Not really. If the network is congested and the video = game still
persists sending frequent messages the most likely = outcome will be
queuing and losses, and thus bad game play. The = proper behavior in a
congested network is to switch to a low = bandwidth mode of some kind --
maybe a lower frame rate, or a lower = resolution. This is pretty much the
same issue as voice or video = over IP: if the network is congested, it
makes sense to use a higher = compression rate. With congestion control,
the application can = detect the upset of congestion and adopt these
strategies. That's = generally much better than to just passively accept
queues and = losses.

-- Christian Huitema =

=
------=_NextPart_001_0193_01D53C79.F632EE60-- ------=_NextPart_000_0192_01D53C79.F632EE60 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIVfDCCAyAw ggIIoAMCAQICAR0wDQYJKoZIhvcNAQEFBQAwOTELMAkGA1UEBhMCRkkxDzANBgNVBAoTBlNvbmVy YTEZMBcGA1UEAxMQU29uZXJhIENsYXNzMiBDQTAeFw0wMTA0MDYwNzI5NDBaFw0yMTA0MDYwNzI5 NDBaMDkxCzAJBgNVBAYTAkZJMQ8wDQYDVQQKEwZTb25lcmExGTAXBgNVBAMTEFNvbmVyYSBDbGFz czIgQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQF0o1ncrwDZbHRPoWN/xIvb1/ gC01O+FvqGepvwMcTYxvMkfVQWikEwTBNQyahEP8XB3/ibPoFxjNkV/7iePqv05dfBsm03V57eaE 41flrSnE9Doo56V7hDZps/1edr2jLZnTkE4jKH0YY/FUOyaddluXQrL/rvBO7N05lU6DBn/nSUDI xQGyVFpmHT38+ek8Cp6BuHDwAYvkI1R8yK74kB4AlnLUVM9hI7zq+50CldG2uXE6aQg/D7ThQseI 9T+YqKe6HOBxce9YV4FQelxrdEYOgwOYw46obvJ2Mm4ng8Jz89wY6LST6nVEawRgIHFXh53zvqCQ Iz2KJOHaIdvDAgMBAAGjMzAxMA8GA1UdEwEB/wQFMAMBAf8wEQYDVR0OBAoECEqgqliE0148MAsG A1UdDwQEAwIBBjANBgkqhkiG9w0BAQUFAAOCAQEAWs6H+RZyFVdLHdmb56ImMOyTZ9/WLdI0r/c4 pc6rFrmrL3w1y6zQD7RMK/yA72uMkV82dvfbsxsZ6vSyEf1hcUS/KLM6Hb+zQ+ifv9wxCHGwnY3W NEcykMZlJPegSnwEc485bxeMcrW9S8h6+HuDwyhOnAnqZz+yZwQbwxTa+OdJJJHQHWr6YTnva+ch dQYH2BK0ISBwQnGB2jyaNr6mWw1qbJofkXv5+e9Cuk5OnswMjZTc2UWcXuxCUGOu9F3EsRLcyjuo Lp0UWgV1t+zXY+K6NbYECJHo2p2c9ma1GKwKplQmNDPSG8HUfxo6jguqMm7b/E8ln9kyx5ZacKzf TDCCBX0wggRloAMCAQICEQCH7S4aKCZKxRmqOuu5DaLLMA0GCSqGSIb3DQEBCwUAMDkxCzAJBgNV BAYTAkZJMQ8wDQYDVQQKEwZTb25lcmExGTAXBgNVBAMTEFNvbmVyYSBDbGFzczIgQ0EwHhcNMTQx MjA1MDgxOTE1WhcNMjEwNDA1MTAyOTAwWjA3MRQwEgYDVQQKDAtUZWxpYVNvbmVyYTEfMB0GA1UE AwwWVGVsaWFTb25lcmEgUm9vdCBDQSB2MTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIB AMK+6yfwIaPzaSZVfp3FVRaRXP3vIb9TgHot0pGMYzHw7CTww6XScnwQbfQ3t+XmfHnqjLWCi65I tqwA3GV17CpNX8GH9SBlK4GoRz6JI5UwFpB/6FcHSOcZrr9FZ7E3GwYq/t75rH2D+1665I+XZ75L jo1kB1c4VWk0Nj0TSO9P4tNmHqTPGrdeNjPUtAa9GAH9d4RQAEX1jF3oI7x+/jXh7VB7qTCNGdMJ jmhnXb88lxhTuylixcpecsHHltTbLaC0H2kD7OriUPEMPPCs81Mt8Bz17Ww5OXOAFshSsCPN4D7c 3TxHoLs1iuKYaIu+5b9y7tL6pe0S7fyYGKkmdtwoSxAgHNN/Fnct7W+A90m7UwW7XWjH1Mh1Fj+J Wov3F0fUTPHSiXk+TT2YqGHeOh7S+F4D4MHJHIzTjU3TlTazN19jY5szFPAtJmtTfImMMsJu7D0h ADnJoWjiUIMusDor8zagrC/kb2HCUQk5PotTubtn2txTuXZZNp1D5SDgPTJghSJRt8czu90VL6R4 pgd7gUY2BIbdeTXHlSw7sKMXNeVzH7RcWe/a6hBle3rQf5+ztCo3O3CLm1u5K7fsslESl1MpWtTw EhDcTwK7EpIvYtQ/aUN8Ddb8WHUBiJ1YFkveupD/RwGJBmr2X7KQarMCpgKIv7NHfirZ1fpoeDVN AgMBAAGjggGAMIIBfDBOBggrBgEFBQcBAQRCMEAwPgYIKwYBBQUHMAKGMmh0dHA6Ly9jYS50cnVz dC50ZWxpYXNvbmVyYS5jb20vc29uZXJhY2xhc3MyY2EuY2VyMA8GA1UdEwEB/wQFMAMBAf8wGQYD VR0gBBIwEDAOBgwrBgEEAYIPAgMBAQIwDgYDVR0PAQH/BAQDAgEGMB0GA1UdDgQWBBTwj1k4ALP1 j5qWDNXr+nuqF+gTEjCBuQYDVR0fBIGxMIGuMG+gbaBrhmlsZGFwOi8vY3JsLTEudHJ1c3QudGVs aWFzb25lcmEuY29tL2NuPVNvbmVyYSUyMENsYXNzMiUyMENBLG89U29uZXJhLGM9Rkk/Y2VydGlm aWNhdGVyZXZvY2F0aW9ubGlzdDtiaW5hcnkwO6A5oDeGNWh0dHA6Ly9jcmwtMi50cnVzdC50ZWxp YXNvbmVyYS5jb20vc29uZXJhY2xhc3MyY2EuY3JsMBMGA1UdIwQMMAqACEqgqliE0148MA0GCSqG SIb3DQEBCwUAA4IBAQAQ1elFTM6fGkQ/aRKdkUZicO3Cb9uzBJOpOtFctw+1El0/17lsjoVvJkZB D3KnUobnrriFdAa+7FAN55KLmZeB/3Y2bG0bB4toSyaVHjOQnQY9M0dv8U852w0Q7GwchKfebLUI bh9TMt2hI3Xc6j4knFTBUo7C1WAfO51K4bn1irmX6/Ej2VTgiOFsvOAny28W6enFSEQpSHw60VhN fSttSqTOxyrRR/7kW7Y8yb/3DZDZ/dH6ZCfx/y+BNIv2NuSd85M9HXUzplXXohti4Ql/qeaMn6by Ius6XlMWZZfkdVRvTuk2PkeC7UmAJ2+/DUWOPpawaytMXVfF4Hvxk34NMIIGDTCCA/WgAwIBAgIQ Us79UtuT8yEU6XIq+TroQjANBgkqhkiG9w0BAQsFADBHMQswCQYDVQQGEwJTRTERMA8GA1UECgwI RXJpY3Nzb24xJTAjBgNVBAMMHEVyaWNzc29uIE5MIEluZGl2aWR1YWwgQ0EgdjMwHhcNMTcxMTI3 MTAxMzQ4WhcNMjAxMTI3MTAxMzQ3WjB0MREwDwYDVQQKDAhFcmljc3NvbjEcMBoGA1UEAwwTSW5n ZW1hciBKb2hhbnNzb24gUzEvMC0GCSqGSIb3DQEJARYgaW5nZW1hci5zLmpvaGFuc3NvbkBlcmlj c3Nvbi5jb20xEDAOBgNVBAUTB0VQTElKT0gwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvxK7X3xRTAzY+JaEVXSFcykcRDnb9xJCcMYXRb7WCh0HpVZ7PThGgp0ZUNQQJ9ypm7YcIcwRD kYdD4fgxGLU1bIUC4GcH7rKiuf93b+Ec3jsrkSEkCsXkO7ROjlS9+7y7H/qC8bB8D4CTQNs15o3J 0njOaYngdmLGb8bwYV47hv3sAiyqoY0aZeGZyk2a/D9Kc28b+towJxQrGnekMxynyQQesKF7mFaA gtlEa5bNbLEfIki5tZWceSZEd5xXxuib7vv0Rb/Gd+Q+jyvobAEyd5RDB6i9HAA/FFPZIJTgM+k9 7yIFPPhpLjjcjeowqH9PlEaody2drdP67tBDnNQTAgMBAAGjggHGMIIBwjBIBgNVHR8EQTA/MD2g O6A5hjdodHRwOi8vY3JsLnRydXN0LnRlbGlhLmNvbS9lcmljc3Nvbm5saW5kaXZpZHVhbGNhdjMu Y3JsMIGCBggrBgEFBQcBAQR2MHQwKAYIKwYBBQUHMAGGHGh0dHA6Ly9vY3NwMi50cnVzdC50ZWxp YS5jb20wSAYIKwYBBQUHMAKGPGh0dHA6Ly9jYS50cnVzdC50ZWxpYXNvbmVyYS5jb20vZXJpY3Nz b25ubGluZGl2aWR1YWxjYXYzLmNlcjArBgNVHREEJDAigSBpbmdlbWFyLnMuam9oYW5zc29uQGVy aWNzc29uLmNvbTBVBgNVHSAETjBMMEoGDCsGAQQBgg8CAwEBEjA6MDgGCCsGAQUFBwIBFixodHRw czovL3JlcG9zaXRvcnkudHJ1c3QudGVsaWFzb25lcmEuY29tL0NQUzAdBgNVHSUEFjAUBggrBgEF BQcDBAYIKwYBBQUHAwIwHQYDVR0OBBYEFH5/jYsQz4BrrLa7pwQSkqtzL4EOMB8GA1UdIwQYMBaA FBx7GZ6XnHasID3Y3OORauPbLaZTMA4GA1UdDwEB/wQEAwIFoDANBgkqhkiG9w0BAQsFAAOCAgEA uwe9UtkD6Q6/dW/uQOCxTOaGCX76lOy+a0Fqlyh+ZmlS8qWj8YTCtD866gJOXMzYUMVFrWoeggvP 9j/MBmkDDuuJMgCkN3TEuAu4AF9ekcbm/yjWOUFx3kje0SYL+GNwN50He1tuOlmHrsHo7S89kOL6 Pq8+QMRSESzEqva7nC6sJdYxXGyWAagM1ZWFnJTtFCzsW6Tm6P6rpit4yCPYvPSgNPhPRj7UbHon vU4uwGBiO15aKLwg0jfoJn6wF/CZqtGeza+ucmcuEKA+y/IRnQ2pA5+p3QnX41eypQ7OJfCG5U6k fXjxyu7PGMompQQutZk75tw76wvE8kWj5VpDNf0dRVhq/PQugzqiRjrF5tFSQbOnq1GGQ4X3PhJ8 TBaoC4otM95ZguVQrM8wdYMSxeinbJY4T91eVXYltNgtUd84zbmL/1JgVa7PN3wASXPhguc0WZu3 OWNn31yKlqL/QmgDEoOs8UsNqYU7ngsg620TE9tta4S96LXRhXhBiQCDKR16ZhEITbaJPT7KgoMO 30YCHQa0K7ah5UxC9S6+E6cPK+uKyHvzXzjNdILMh6DXQFMblld6ax+to7tQQEkv1Xr4tjCN2H/z elNX2LGB1lO2qra3MfgaENY5SMk6sIi4Y4QDrVEBnrZeKstS9Qd3TCvc+fHu6bt3wU9Tk3K0dOAw ggbCMIIEqqADAgECAhBTuH6D4ZyZKJOwm0kc7LjrMA0GCSqGSIb3DQEBCwUAMDcxFDASBgNVBAoM C1RlbGlhU29uZXJhMR8wHQYDVQQDDBZUZWxpYVNvbmVyYSBSb290IENBIHYxMB4XDTE1MTAyNzEy MTY0NloXDTI1MTAyNzEyMTY0NlowRzELMAkGA1UEBhMCU0UxETAPBgNVBAoMCEVyaWNzc29uMSUw IwYDVQQDDBxFcmljc3NvbiBOTCBJbmRpdmlkdWFsIENBIHYzMIICIjANBgkqhkiG9w0BAQEFAAOC Ag8AMIICCgKCAgEA7PLfAAC4UPKnu9hUt8aT9+PBqjvUw0Y0tLPOXkO2NC0y2XZks9nJfpWKrNM3 0k5vu5norG4ZKlF5C+3xc6HuIiGQof1bmFGluNOwmZQwl3rOJ+E6k0rqJJTerjj4WOxAvWVW1yC5 S4Ubppk3Q3cYVVuC3qNGsBIXy3/fDL1sc8Ah8zI/JumDpjY8fn/U3CRN6mgNKYrr0sZX6VXYgrpT 05ZrJldkUgUgMKgbIWWEXEASA36pnb5GqD/RMzSgIe8o7YQtIaYB2cmTCLNHjaOL9j1JhNK4bvmb NJ7o58IZYzwNv/G/L/bRosQ9c27U+86DNjrdZnpyaRaeMyVUn3SlYLaFqoObdh/xNF2NS8CXs/PV tO57HBKHMgZqQvsyQJisSocxFqiMj9VK2WhCBbvoTvrNDZvLDlDGuE5RuKwFIpHOVOU5lCBgUUBs bpWIXwM6kmH/KC1DC5MtQzmvXkbt7KdBXUAxM0JZxf4dS+ACtTDpF9b0vny4DrwaOS0VNXyz1GUO xSqw1wup5dpXbxLZYx1rLRgZqr9uWhLwAPsq66ZQof5GL0gY72Ym8/Tm28MeMqku+/zRzdYsmclT 9rOdgdgS3b6OMoc5Op0ZPEv/Mx2lFJAVK674ozw2hiuRTVUmoqBr5AuyCoqCEyn32C7U/V7oqyqx 5Yd1c5GsxuOqQFcCAwEAAaOCAbgwggG0MIGKBggrBgEFBQcBAQR+MHwwLQYIKwYBBQUHMAGGIWh0 dHA6Ly9vY3NwLnRydXN0LnRlbGlhc29uZXJhLmNvbTBLBggrBgEFBQcwAoY/aHR0cDovL3JlcG9z aXRvcnkudHJ1c3QudGVsaWFzb25lcmEuY29tL3RlbGlhc29uZXJhcm9vdGNhdjEuY2VyMBIGA1Ud EwEB/wQIMAYBAf8CAQAwVQYDVR0gBE4wTDBKBgwrBgEEAYIPAgMBAQIwOjA4BggrBgEFBQcCARYs aHR0cHM6Ly9yZXBvc2l0b3J5LnRydXN0LnRlbGlhc29uZXJhLmNvbS9DUFMwSwYDVR0fBEQwQjBA oD6gPIY6aHR0cDovL2NybC0zLnRydXN0LnRlbGlhc29uZXJhLmNvbS90ZWxpYXNvbmVyYXJvb3Rj YXYxLmNybDAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwQwDgYDVR0PAQH/BAQDAgEGMB0G A1UdDgQWBBQcexmel5x2rCA92NzjkWrj2y2mUzAfBgNVHSMEGDAWgBTwj1k4ALP1j5qWDNXr+nuq F+gTEjANBgkqhkiG9w0BAQsFAAOCAgEAUFhr8dWMO7Quq1dDyIynw8sWmpyF/jWSxBjpHUCyhlto FS7Q1CUBD0bOULWmYjmzRwme5pkjTFXpOJZLf9Han1SBbrVcP0JMhRsAvfWZjcF0l/c/jqDMqBAR xr8OUWOr0ZWa49Lir3QEs2C+CjGge5tzcLqzQ5pjWxudrLkSGe+sAThDnXUWXGYk8udGZAamJ55d rdw96AV9jWQkMrLIVHKkXVG5Etdx0wiAoTLk1fVtLcz11DiaCZSZVPZ3fdSIpIRhDqz8H4sVprPg vLBdK/ajdbiRsehCzzohay3zbXDDTDGwKkR8KUi8Xt8HDZCRsb/U/C7MC4tVK0SEPOQCo6swZy0r I0RoGzICfsSrZ4JrxANeeSZqCn1A+w0Wz+iqdeP2PVxW0f1rg4/OG2DSl3uB3Q3NT/lDGJtepti+ i5CCKEZcdAOZoviu43sLhqsxSpGjzZidESwovuHeP+O2bNwwtz1DTsXThBB3+JJHVjmkiLo900GI Tb/i7IBdLoo4gZms9s1BQ2tm3CJCmpA2XwBTOB6B8/CtgWUWhyloXd3Wbmv7ZUoqqJFBV9g8Zh5m dZ+RzPTomgCFz/2aNsddI/2G9ZjN4tG6hmocZR2M5f0MhBv3bo6d5XsLlYwiNJjw5GRqYb8cqqeC aPKkveBJzqgb8ToH7WLoOzmPRCmPlpAxggMCMIIC/gIBATBbMEcxCzAJBgNVBAYTAlNFMREwDwYD VQQKDAhFcmljc3NvbjElMCMGA1UEAwwcRXJpY3Nzb24gTkwgSW5kaXZpZHVhbCBDQSB2MwIQUs79 UtuT8yEU6XIq+TroQjAJBgUrDgMCGgUAoIIBfDAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwG CSqGSIb3DQEJBTEPFw0xOTA3MTcwNjMwNTlaMCMGCSqGSIb3DQEJBDEWBBRTIOlmLRzksXpfkFxQ kkQDkmdT7DBDBgkqhkiG9w0BCQ8xNjA0MAoGCCqGSIb3DQMHMA4GCCqGSIb3DQMCAgIAgDANBggq hkiG9w0DAgIBQDAHBgUrDgMCGjBqBgkrBgEEAYI3EAQxXTBbMEcxCzAJBgNVBAYTAlNFMREwDwYD VQQKDAhFcmljc3NvbjElMCMGA1UEAwwcRXJpY3Nzb24gTkwgSW5kaXZpZHVhbCBDQSB2MwIQUs79 UtuT8yEU6XIq+TroQjBsBgsqhkiG9w0BCRACCzFdoFswRzELMAkGA1UEBhMCU0UxETAPBgNVBAoM CEVyaWNzc29uMSUwIwYDVQQDDBxFcmljc3NvbiBOTCBJbmRpdmlkdWFsIENBIHYzAhBSzv1S25Pz IRTpcir5OuhCMA0GCSqGSIb3DQEBAQUABIIBAI1x2uj27Wpa7UakOmp9OnBovoOzxB2TicCdWK3G mNvD2nkbZcSdeMjvNu6+qfohkoNZmQnJEr6+t2HVjgjRMFPbmzyFe2mQuUKnzMezAbQYtBSgFN52 mZaU/ExQmimMCNu4lsFItBjanZAzngt7kGLaXYnkRJJr8z2/rvvYUCIVKNCkc5Q/XHjsHPeae8Pc 4nbcEjpREEZa3jo3nym1It8PyiRl+Q7D9BsLbVXcdLhwbWzHDr2wI6dM1mCaHFpNKPrzZia9XLoD zS8pcegzRiZgNAdRzs786c9jsdq9Fv5gEPwfDvBFLrxA3HfMc5XQI2P5qsBYXbOmsMEb6qS7VTcA AAAAAAA= ------=_NextPart_000_0192_01D53C79.F632EE60-- From nobody Wed Jul 17 01:45:01 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C076B12060F; Wed, 17 Jul 2019 01:44:52 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mmzQ-7_axKRW; Wed, 17 Jul 2019 01:44:50 -0700 (PDT) Received: from EUR02-HE1-obe.outbound.protection.outlook.com (mail-eopbgr10050.outbound.protection.outlook.com [40.107.1.50]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0DD0212060C; Wed, 17 Jul 2019 01:44:49 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=FQ48RKPNAAZ5eq651uMLjxP7PfvYXdc8OtVrFzIM+OhDD3Px8agsR4W9WEjmv5Id3dSdml/S1sKfyWnCMoXxan9HMQVk2X6MAKrCsciwGxELeUrF1zVDLbu5FzT+baw9STWlX9FiTVgO3H4U5nczZ7AOSqiqVIfRdyyL64aQSV6VvSlC6s9YfjkGlOXhIiGGi0FBOeNVdCb9U4gI3yFmml7scckLfwLy74obOyq6gHhQgPCaBpVaaUzICh0esCq296s1FfB/++7410PThTQD/nI11Vf13CRP3uqLg9kVZqkQAmCd5xQCOenMw0ITTIhPg5jsfgW890doXCmGIPbesQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=dYR5mcUvNJ9C/SUDy0FdciigJZ1FcT7vTOy4yLwdJ74=; b=Go+0Ep3JLqWssLhnHPLYfkwIZpLJJIQeUG5CNiPZfQvU1TCU9yWxrd8MPGUfiOcYQg07MN84QMIjU+sTW8XDKi5urDk0ljKzgwkk0lX9nYBL3U7lJLkuvKsh+8ZmhxcCtmfwvYNdTZDKixXToMo96nOd0JDZduJ+3162pudNE3tF2d2pCPVxOYHo3H07yWwNCZBjb3KGX7viCEnBMEKy0SeA7khtfraa1NikEUUkjGN9xZOfEKzFzPm8cmP/GJpamzOSqaYyI7XpQqRQ52H9tW/5XH6S3X1zTqnmBvrRfuraHygR9y+m02r7UGX/qHFLF0WG6b8to6i0nky+BVRaww== ARC-Authentication-Results: i=1; mx.microsoft.com 1;spf=pass smtp.mailfrom=ericsson.com;dmarc=pass action=none header.from=ericsson.com;dkim=pass header.d=ericsson.com;arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=dYR5mcUvNJ9C/SUDy0FdciigJZ1FcT7vTOy4yLwdJ74=; b=WNAuuFbof8zWpzBb3vjyDILTqm8vT9z8Ub+nzG8u11iOptcDa/14nqR6Lze4OxSyaHj5n49yPTvzzBNzB9mBqt7uTOTkm4LANw+h3vwaewQHfL920Yn+4dSZEhm27tNsI5/RWjwGOdxpe1b1wlGsuLjkGZDYIXpTgpPPqFc4lE4= Received: from AM0PR07MB4691.eurprd07.prod.outlook.com (52.135.149.158) by AM0PR07MB6274.eurprd07.prod.outlook.com (10.186.172.73) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2094.6; Wed, 17 Jul 2019 08:44:47 +0000 Received: from AM0PR07MB4691.eurprd07.prod.outlook.com ([fe80::118c:953f:8fb9:9e5]) by AM0PR07MB4691.eurprd07.prod.outlook.com ([fe80::118c:953f:8fb9:9e5%5]) with mapi id 15.20.2094.009; Wed, 17 Jul 2019 08:44:47 +0000 From: Mirja Kuehlewind To: "masque@ietf.org" CC: "quic@ietf.org" Subject: Re: [Masque] MASQUE side meeting Thread-Topic: [Masque] MASQUE side meeting Thread-Index: AQHVPHvjaYB84fi6sU2GwYWxp/HDKw== Date: Wed, 17 Jul 2019 08:44:47 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=mirja.kuehlewind@ericsson.com; x-originating-ip: [2001:16b8:2c29:2800:c8cf:b474:3a3e:4aca] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: fe6de099-0880-486a-0ed6-08d70a930637 x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600148)(711020)(4605104)(1401327)(2017052603328)(7193020); SRVR:AM0PR07MB6274; x-ms-traffictypediagnostic: AM0PR07MB6274: x-ms-exchange-purlcount: 1 x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:5516; x-forefront-prvs: 01018CB5B3 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(376002)(346002)(396003)(366004)(39860400002)(136003)(39224004)(199004)(189003)(5640700003)(99286004)(6436002)(44832011)(2616005)(486006)(6486002)(966005)(53936002)(14454004)(450100002)(2351001)(6306002)(6512007)(6246003)(6116002)(478600001)(68736007)(476003)(71200400001)(71190400001)(561944003)(81166006)(81156014)(1730700003)(4326008)(8936002)(33656002)(66556008)(64756008)(66446008)(66476007)(66946007)(91956017)(76116006)(4744005)(305945005)(7736002)(86362001)(5660300002)(36756003)(186003)(46003)(229853002)(2906002)(6916009)(6506007)(25786009)(2501003)(8676002)(102836004)(14444005)(316002)(256004); DIR:OUT; SFP:1101; SCL:1; SRVR:AM0PR07MB6274; H:AM0PR07MB4691.eurprd07.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: ericsson.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam-message-info: poOAE6mjZn67z1rYz/xnp66x2eauArOnTiRvyD0vKieS1gLPny//uQ1P9DXkxWPrZKk5samhntSVuOENsqKZtu6npAxiGGhWMCJkY8U2XXGOBEP24uwoNJK8kMmiKZ1mIUbT6nynawpnl+N+wwiSIpOs5ZtDuU+ClMqEkbeZR0MVy6XqC2x6A/dnHiG313cSVKjoYlWshRAi/on63cifZuPTDcx+34+J1uqWN65fGlewSLc60yMq+WzM4HL1iuCBnQ+HFdXjcHpE1VWOZA0rThRcm565KhZRmScQO7mTSRc8gWFTtgQ0X3hwVONb+FGjM5H0C87ZVVuVdOpU1637u+jo+qRQqfqpnFWTedBXlKkiqaySguyMDYO3OHumElsQ69v4kGFcQLB7DEyfy1vbJ9wSeCSPn+I0Y+RVQJ08Sy0= Content-Type: text/plain; charset="utf-8" Content-ID: <434312DE58B03A4FA9F8B89604A15DE7@eurprd07.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: ericsson.com X-MS-Exchange-CrossTenant-Network-Message-Id: fe6de099-0880-486a-0ed6-08d70a930637 X-MS-Exchange-CrossTenant-originalarrivaltime: 17 Jul 2019 08:44:47.5607 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: mirja.kuehlewind@ericsson.com X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM0PR07MB6274 Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 17 Jul 2019 08:44:53 -0000 VGhpcyBpcyBvZiBjb3Vyc2UgbmV4dCB3ZWVrIEp1bHkgMjUhIFNlZSB5b3UhDQoNCu+7v09uIDA4 LjA3LjE5LCAxNDowNiwgIk1hc3F1ZSBvbiBiZWhhbGYgb2YgTWlyamEgS3VlaGxld2luZCIgPG1h c3F1ZS1ib3VuY2VzQGlldGYub3JnIG9uIGJlaGFsZiBvZiBtaXJqYS5rdWVobGV3aW5kQGVyaWNz c29uLmNvbT4gd3JvdGU6DQoNCiAgICBIaSBhZ2FpbiwNCiAgICANCiAgICBJIGFsc28gbWFkZSBh IHJvb20gcmVzZXJ2YXRpb24gZm9yIA0KICAgIA0KICAgIAlUaHVyc2RheSBKdWx5IDE1LCANCiAg ICAJODozMC05OjQ1YW0gaW4gdGhlIG1vcm5pbmcgaW4NCiAgICAJcm9vbSBWYW4gSG9ybmUuDQog ICAgDQogICAgV2Ugd291bGQgbGlrZSB0byBkaXNjdXNzIHdpdGggZXZlcnlib2R5IHdobyBpcyBp bnRlcmVzdGVkIG1haW5seToNCiAgICANCiAgICAgLSBuZXcgYW5kIHBlbmRpbmcgdXBkYXRlcyBv biB0aGUgTWFzcXVlIHByb3RvY29sIHByb3Bvc2FsDQogICAgIC0gdXNhZ2Ugc2NlbmFyaW9zIGZv ciBRVUlDLWJhc2VkIHR1bm5lbGluZyBhbmQgcHJveHkgc2VydmljZXMgYW5kIHJlcXVpcmVtZW50 cy4NCiAgICANCiAgICBNb3JlIGluZm9ybWF0aW9uIHdpbGwgZm9sbG93IQ0KICAgIA0KICAgIE1p cmphDQogICAgDQogICAgDQogICAgDQogICAgLS0gDQogICAgTWFzcXVlIG1haWxpbmcgbGlzdA0K ICAgIE1hc3F1ZUBpZXRmLm9yZw0KICAgIGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlz dGluZm8vbWFzcXVlDQogICAgDQoNCg== From nobody Wed Jul 17 12:51:59 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 993841204A7 for ; Wed, 17 Jul 2019 12:51:51 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -17.499 X-Spam-Level: X-Spam-Status: No, score=-17.499 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, ENV_AND_HDR_SPF_MATCH=-0.5, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5, USER_IN_DEF_SPF_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vSYtpkwr53bJ for ; Wed, 17 Jul 2019 12:51:47 -0700 (PDT) Received: from mail-lj1-x231.google.com (mail-lj1-x231.google.com [IPv6:2a00:1450:4864:20::231]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DDE271205E7 for ; Wed, 17 Jul 2019 12:51:46 -0700 (PDT) Received: by mail-lj1-x231.google.com with SMTP id v24so24888154ljg.13 for ; Wed, 17 Jul 2019 12:51:46 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=Bemjp/PEODicnFuyWyDweyEc+FEI3cl5S257kXLK+Qw=; b=kK25Kql+ZNSJc1iBg5WBh98/yy8avkd9HsgaBiPD+dPxMa8Oligw9AI0nP7iHsyLbu kAau/R0/+qXBx0sEh/FPaC22JJgKIFsyN3eZUY+PwToTYW8VQtyo+UUCp5j8nps3fRQ6 5qK4JTcPOCx7m0IW/IyR2dQGYmEZnHHzCtDFxZeHooHEQ2aZUQ9qJ5pKmS2fi/GPn+8W tq49g/B+CZfaFZ91XjUXpYIQyeYvI7SRCoxqrIyEWDFUgKB9aCmJNVFEICM2uRSd1TXD M7AUCni1gLEYl8Pjd0YzqQh42INt0mwHgEV3lo4oGOxVM0azL1/B1NaBKvQtZArFwFWw cTaA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=Bemjp/PEODicnFuyWyDweyEc+FEI3cl5S257kXLK+Qw=; b=gbPrOfy4qY1upmeND66OotGYBCDkO/USHsRW3TL2CrUcSHck0B4tcNvlZ6v+FZeufk unX6Mn7sVUo8yEBfmFbQ0utIeNsCnkc2wPRakdyqqjoMhK4IMFCsq+Kg79aFrglUcU3d 4UFJi4KQmVLF3/0rxpHiLn/ka7JgENv9HegFUbAWxK6UAqIKH71r4kxmg/cROJljCqBr n1XeDSn6HDCOvm+b0ZjIZtHURKMNUAOQjEeJBqvzCCtsuaUwe59fgvHnModxiC/5hXbB SI7C3EO9tUXGYqIA+m2HrCmZ5vFx+bAVCKNMI7x47ROjuGvBjeFOIgkGRzBrGApmRhe+ U5Ig== X-Gm-Message-State: APjAAAV9HBB5bttaKJ3WOTxfxf83M520iuhXe0bLEwOuwkdlhUPhruOm RbDTPbqWDTS+9l4HAvYn+ogpzEihTKu9rVS/6YQbDw== X-Google-Smtp-Source: APXvYqwQ8m0bKng4gvXOyMvMh48kAZVxb2Fp7ik6o9pZL9FYNmWbV5lk7pqfWsE7s2nTylCwTMWpMOBpco5wE8ZpPgA= X-Received: by 2002:a2e:6348:: with SMTP id x69mr22139811ljb.186.1563393104609; Wed, 17 Jul 2019 12:51:44 -0700 (PDT) MIME-Version: 1.0 References: <2F2121D0-503B-48CF-99E1-A9CE9192FF87@apple.com> In-Reply-To: From: Bjorn Mellem Date: Wed, 17 Jul 2019 12:51:32 -0700 Message-ID: Subject: Re: Updated DATAGRAM -03 draft To: Ingemar Johansson S Cc: Tommy Pauly , Roberto Peon , Robin MARX , =?UTF-8?Q?Mikkel_Fahn=C3=B8e_J=C3=B8rgensen?= , QUIC WG , Christian Huitema Content-Type: multipart/alternative; boundary="000000000000a54cc1058de5d259" Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 17 Jul 2019 19:51:57 -0000 --000000000000a54cc1058de5d259 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable In Google's work on WebRTC-over-QUIC, we've generally used the GCC (Google Congestion Control) scheme described in this draft: https://tools.ietf.org/html/draft-ietf-rmcat-gcc-02. We're moving toward an approach that essentially tunnels media over a QUIC datagram flow. In doing this, I've made a couple of observations about congestion-controlled datagrams: 1. In cases where we control the QUIC implementation, it's simple enough to make it use GCC. However, we'd like to be able to use it through interfaces like WebTransport (https://github.com/WICG/web-transport, https://tools.ietf.org/html/draft-vvv-webtransport-overview-00), where we do not control the QUIC transport directly. (This could probably be solved with appropriate APIs for configuring WebTransport's congestion control.) 2. GCC is work-in-progress. There are fairly regular changes aimed at improving its performance in various edge cases. In order to deploy changes we either need an extremely broad API or control of the transport. While this might seem like an API problem, among the proposed solutions is "don't congestion control datagrams (let the application do that) and implement a circuit-breaker instead". That would obviously require that the transport does not congestion control datagrams, either. There are other possibilities that might work for real-time media, such as exposing timing information and allowing an application to set a *lower* rate if it wants to preserve latency. But what about tunneling other protocols over QUIC datagrams? Do we expect those to work within QUIC's congestion control? Disable the upper-layer protocol's congestion control? Or hook the two together in some cooperative manner? Bjorn On Tue, Jul 16, 2019 at 11:31 PM Ingemar Johansson S < ingemar.s.johansson@ericsson.com> wrote: > +1. > > In the general non-QoS scenario it is to prefer that the streams share on= e > connection and thus one congestion control. > > > > My experiments with SCReAM (RFC8298) shows that this can be made to work > quite well on RTP streams, an implementation of this is found at > https://github.com/EricssonResearch/scream. It is however not > straightforward to get perfect prioritization such as 70% of the bandwidt= h > goes to stream A and 30% to stream B when it comes to real-time low laten= cy > media. The key reason is that the low latency goal means that there are > often no packets to schedule as extra delay due to queueing in the sender > should be avoided, variations on source rates from video encoder makes it > more challenging. > > In comparison, =E2=80=9CInfinite=E2=80=9D bitrate sources such as file tr= ansfers are much > easier to work with as they provide data ready to schedule for transmissi= on > on the sender side until the file transfer is done. > > In the SCReAM case I have so far managed to get something like ball-park > weighted fairness, fig 7 in > https://www.hindawi.com/journals/wcmc/2018/3142496/ shows how it works in > a real test scenario over a LTE access. > > > > I mentioned non-QoS scenarios. In scenarios where an underlying network > supports QoS (such as 4G/5G), then it can be beneficial to use two or mor= e > connections, which are then scheduled over different bearers. > > > > /Ingemar > > > > *From:* Tommy Pauly > *Sent:* den 16 juli 2019 14:47 > *To:* Roberto Peon > *Cc:* Mikkel Fahn=C3=B8e J=C3=B8rgensen ; QUIC WG ; > Christian Huitema ; Robin MARX < > robin.marx@uhasselt.be> > *Subject:* Re: Updated DATAGRAM -03 draft > > > > I definitely agree that sharing one connection, where the frames are all > subject to a shared congestion control, will provide the most control and > the best results. > > > > What it does bring up, however, is the need for text regarding > prioritization in the document, similar to the =E2=80=9CStream Prioritiza= tion=E2=80=9D > section in the main transport document. The application should be able to > indicate to the quic implementation the relative priority of a flow of > datagrams with regards to other streams and other flows, thus indicating > how to schedule frames when congestion control opens up. This is also a w= ay > in which having a flow identifier known at the transport can be useful > (although this identifier could be used strictly locally to get a similar > effect). > > > > Thanks, > > Tommy > > > > On Jul 15, 2019, at 6:23 PM, Roberto Peon wrote: > > =EF=BB=BF > > Using two connections would be unfortunate-- this will almost always > guarantee worse results than even the most simple proportional > prioritization or fair-share scheduling because you can cause self > contention and dilute your measurement accuracy. > > -=3DR > ------------------------------ > > *From:* QUIC on behalf of Mikkel Fahn=C3=B8e J=C3= =B8rgensen > > *Sent:* Monday, July 15, 2019 12:12:09 PM > *To:* QUIC WG; Christian Huitema; Robin MARX > *Cc:* Tommy Pauly > *Subject:* Re: Updated DATAGRAM -03 draft > > > > You could also carry two connections, one for video and one for game > status updates. > > > > I=E2=80=99m wondering if there is, or should be, a way to accomplish this= on a > single connection. > > I asked something similar a long time ago and I don=E2=80=99t think there= is any > amition for managing bandwidth in this for on a single connection, at lea= st > for QUIC v1. > > > > > > On 15 July 2019 at 21.04.58, Christian Huitema (huitema@huitema.net) > wrote: > > > On 7/15/2019 3:03 AM, Robin MARX wrote: > > Hello Tommy, > > > > Good to see the updated draft. > > I do wonder about the decision to enforce congestion control for > > DATAGRAM frames and the effect this will have on the gaming use case. > > As also discussed in Prague, real-time gaming often requires a set > > update rate frequency (e.g., 30-60 messages per second) for > > responsiveness. > > I wonder if congestion controlling the frames (e.g., delaying/dropping > > them) will produce some weird edge cases that really mess with this > > setup. > > It's a bit difficult to assess because the messages are usually > > relatively small (though they could be mixed with larger messages, > > e.g., RPCs) and you could make the argument that, if there is actual > > congestion, the packets will be dropped in the network either way. > > You could also say that custom game-focused implementations will just > > ignore the text and do their own logic as needed. > > > > So I'm not sure the text needs changes, I just wanted to mention that > > it might not be optimal for the real-time gaming use case and that it > > might be capable footgun with some weird edge cases if people do stick > > to the text. > > > Not really. If the network is congested and the video game still > persists sending frequent messages the most likely outcome will be > queuing and losses, and thus bad game play. The proper behavior in a > congested network is to switch to a low bandwidth mode of some kind -- > maybe a lower frame rate, or a lower resolution. This is pretty much the > same issue as voice or video over IP: if the network is congested, it > makes sense to use a higher compression rate. With congestion control, > the application can detect the upset of congestion and adopt these > strategies. That's generally much better than to just passively accept > queues and losses. > > -- Christian Huitema > > --000000000000a54cc1058de5d259 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
In Google's work on WebRTC-over-QUIC, we've gen= erally used the GCC (Google Congestion Control) scheme described in this dr= aft:=C2=A0https://t= ools.ietf.org/html/draft-ietf-rmcat-gcc-02.

We'= ;re moving toward an approach that essentially tunnels media over a QUIC da= tagram flow.=C2=A0 In doing this, I've made a couple of observations ab= out congestion-controlled datagrams:

=C2=A01. In cases= where we control the QUIC implementation, it's simple enough to make i= t use GCC.=C2=A0 However, we'd like to be able to use it through interf= aces like WebTransport (https://g= ithub.com/WICG/web-transport,=C2=A0https://tools.ietf.org/html/draft-vvv-webtra= nsport-overview-00), where we do not control the QUIC transport directl= y.=C2=A0 (This could probably be solved with appropriate APIs for configuri= ng WebTransport's congestion control.)

=C2=A02. GC= C is work-in-progress.=C2=A0 There are fairly regular changes aimed at impr= oving its performance in various edge cases.=C2=A0 In order to deploy chang= es we either need an extremely broad API or control of the transport.
=

While this might seem like an API problem, among t= he proposed solutions is "don't congestion control datagrams (let = the application do that) and implement a circuit-breaker instead".=C2= =A0 That would obviously require that the transport does not congestion con= trol datagrams, either.

There are other possibilit= ies that might work for real-time media, such as exposing timing informatio= n and allowing an application to set a *lower* rate if it wants to preserve= latency.=C2=A0 But what about tunneling other protocols over QUIC datagram= s?=C2=A0 Do we expect those to work within QUIC's congestion control?= =C2=A0 Disable the upper-layer protocol's congestion control?=C2=A0 Or = hook the two together in some cooperative manner?

Bjor= n

On Tue, Jul 16, 2019 at 11:31 PM Ingemar Johansson S <ingemar.s.johans= son@ericsson.com> wrote:

+1.

In the general non-QoS scenario it is to prefer that the streams= share one connection and thus one congestion control.

=C2=A0

My experiments with SCReAM= (RFC8298) shows that this can be made to work quite well on RTP streams, a= n implementation of this is found at https://gith= ub.com/EricssonResearch/scream. It is howev= er not straightforward to get perfect prioritization such as 70% of the ban= dwidth goes to stream A and 30% to stream B when it comes to real-time low = latency media. The key reason is that the low latency goal means that there= are often no packets to schedule as extra delay due to queueing in the sen= der should be avoided, variations on source rates from video encoder makes = it more challenging.

In comparison, =E2=80=9CInfinite=E2=80=9D bitrate sources su= ch as file transfers are much easier to work with as they provide data read= y to schedule for transmission on the sender side until the file transfer i= s done.

In the SCReAM case I have so far managed to get something like ball-park w= eighted fairness, fig 7 in https://www.h= indawi.com/journals/wcmc/2018/3142496/ show= s how it works in a real test scenario over a LTE access.

=C2=A0

I mentione= d non-QoS scenarios. In scenarios where an unde= rlying network supports QoS (such as 4G/5G), then it can be beneficial to u= se two or more connections, which are then scheduled over different bearers= .

=C2=A0

/Inge= mar

= =C2=A0

<= div>

From: Tommy Pau= ly <tpauly@apple.c= om>
Sent: den 16 juli 2019 14:47
To: Roberto Pe= on <fenix@fb.com&g= t;
Cc: Mikkel Fahn=C3=B8e J=C3=B8rgensen <mikkelfj@gmail.com>; QUIC WG <= ;quic@ietf.org>; = Christian Huitema <huitema@huitema.net>; Robin MARX <robin.marx@uhasselt.be>
Subje= ct: Re: Updated DATAGRAM -03 draft

=

=C2=A0

= I definitely agree that sharing one connection, where the frames are all su= bject to a shared congestion control, will provide the most control and the= best results.

= =C2=A0

What it does bring up, h= owever, is the need for text regarding prioritization in the document, simi= lar to the =E2=80=9CStream Prioritization=E2=80=9D section in the main tran= sport document. The application should be able to indicate to the quic impl= ementation the relative priority of a flow of datagrams with regards to oth= er streams and other flows, thus indicating how to schedule frames when con= gestion control opens up. This is also a way in which having a flow identif= ier known at the transport can be useful (although this identifier could be= used strictly locally to get a similar effect).=C2=A0

=C2=A0

Thanks,

T= ommy



<= /u>

On Jul 15, 2019, at 6:23 PM, Roberto= Peon <fenix@fb.com> wrote:

<= b>From: = QUIC <quic-bo= unces@ietf.org> on behalf of Mikkel Fahn=C3=B8e J=C3=B8rgensen <<= a href=3D"mailto:mikkelfj@gmail.com" target=3D"_blank">mikkelfj@gmail.com>
Sent: Monday, July 15, 2019 12:12:09 PM
To: QUIC= WG; Christian Huitema; Robin MARX
Cc: Tommy Pauly
Subject:= Re: Updated DATAGRAM -03 draft

=C2=A0

You could also carry two connections, one for video and one for game st= atus updates.

=C2= =A0

I=E2=80=99m wondering if th= ere is, or should be, a way to accomplish this on a single connection.

I asked something similar a = long time ago and I don=E2=80=99t think there is any amition for managing b= andwidth in this for on a single connection, at least for QUIC v1.

=C2=A0=

=C2=A0

On 15 July 2019 at 21.04.58, Christian Huitema (huitema@huitema.net) wrote:

<= p class=3D"MsoNormal" style=3D"margin-bottom:12pt">
On 7/15/2019 3:03 AM= , Robin MARX wrote:
> Hello Tommy,
>
> Good to see the= updated draft.
> I do wonder about the decision to enforce congesti= on control for
> DATAGRAM frames and the effect this will have on th= e gaming use case.=C2=A0
> As also discussed in Prague, real-time ga= ming often requires a set
> update rate frequency (e.g., 30-60 messa= ges per second) for
> responsiveness.=C2=A0
> I wonder if con= gestion controlling the frames (e.g., delaying/dropping
> them) will= produce some weird edge cases that really mess with this
> setup.= =C2=A0
> It's a bit difficult to assess because the messages are= usually
> relatively small (though they could be mixed with larger = messages,
> e.g., RPCs) and you could make the argument that, if the= re is actual
> congestion, the packets will be dropped in the networ= k either way.=C2=A0
> You could also say that custom game-focused im= plementations will just
> ignore the text and do their own logic as = needed.
>
> So I'm not sure the text needs changes, I jus= t wanted to mention that
> it might not be optimal for the real-time= gaming use case and that it
> might be capable footgun with some we= ird edge cases if people do stick
> to the text.


Not rea= lly. If the network is congested and the video game still
persists send= ing frequent messages the most likely outcome will be
queuing and losse= s, and thus bad game play. The proper behavior in a
congested network i= s to switch to a low bandwidth mode of some kind --
maybe a lower frame= rate, or a lower resolution. This is pretty much the
same issue as voi= ce or video over IP: if the network is congested, it
makes sense to use= a higher compression rate. With congestion control,
the application ca= n detect the upset of congestion and adopt these
strategies. That's= generally much better than to just passively accept
queues and losses.=

-- Christian Huitema

--000000000000a54cc1058de5d259-- From nobody Wed Jul 17 16:51:46 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5A41F120173 for ; Wed, 17 Jul 2019 16:51:44 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -17.499 X-Spam-Level: X-Spam-Status: No, score=-17.499 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, ENV_AND_HDR_SPF_MATCH=-0.5, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5, USER_IN_DEF_SPF_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6gDYVVlKlP90 for ; Wed, 17 Jul 2019 16:51:41 -0700 (PDT) Received: from mail-vs1-xe2b.google.com (mail-vs1-xe2b.google.com [IPv6:2607:f8b0:4864:20::e2b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A16F9120170 for ; Wed, 17 Jul 2019 16:51:41 -0700 (PDT) Received: by mail-vs1-xe2b.google.com with SMTP id 2so17805896vso.8 for ; Wed, 17 Jul 2019 16:51:41 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=WhvVwKSkt/Sa0zq1ry/w4QmSeB49/s26DOewBOTROV4=; b=EGQ1Z81kiU92eVEgSNaZMb890fgFsExNXVOCEbItMCMINAR/SeqA7S4ggJg96eYpkl cvqY0AffNr67n8BLRBBX1bQDyLHu2qYKLvpXzIT35ZYiRRV6/5bccM4zOFR8NxML/6lq 3QJ01MHbcJ6jIwq03UoFjpFcJeoaniBpSkp4hkxUa65KWwvY5nwrdqUxLdgug6jKEYC8 O69H0aQXf/32Zneioazv075SQ4Gj8ZpyAT9WJFOdC3RrqhGeg2MDudpPG0VMOnR22PnU VW982+sstgTndyJbJlD3EujmbHHsDQqCqbfIztpqCx9VkjJaM2/cmgCBce5O3+NdAurG KQRg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=WhvVwKSkt/Sa0zq1ry/w4QmSeB49/s26DOewBOTROV4=; b=buAskNCfiLNyYAlSDWEYWgDq6lY2LEFSxDwUeJ8ohitG4zB6zalmBrCMsN5/x+Bu35 kfXx899z2Yhr3mFbsOtX4i0yCww4eAlQ2DJAAkUhkHc6LDP602dqYD26Ek+GJv63hT54 jf0bNI+qrsnA4ddbQbPrT4lNvivMd81YBnbHfVC6n9+b4ndd0BsmaM6OMpLB9M3IXI2i uq4jnFZkSks1jcKik40cNxNaWxnJqPEACOM+57IG+chNk9vmRni5LswhITViMeBMpSa9 QlxtQz4yDWerXxoZVFa9jPvGcDnxjGBmZKYzQjy/dR5MWM9MuGP3OEA6EmPmGm6nm95R CNOg== X-Gm-Message-State: APjAAAUO/Mv7PoW6SpDJzrTO9rkPXzQoJFXRfgyrJYNRHFl4v9vFLMkB kYcSe3/8gMLdqnfwV1LrJiHaigNlG1aMqfPgrSSvVA== X-Google-Smtp-Source: APXvYqykgCNPzG0Pg9Am33LAvuUgoVs568ieriHvtbzo2pNvoZBIFHLeR3Jxv0elN1T4+rLZB2pADpgygj33oPLaEvQ= X-Received: by 2002:a67:2d0f:: with SMTP id t15mr26503819vst.26.1563407500458; Wed, 17 Jul 2019 16:51:40 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: Ian Swett Date: Wed, 17 Jul 2019 19:51:28 -0400 Message-ID: Subject: Re: Experimental data on priorities To: Patrick Meenan Cc: IETF QUIC WG , HTTP Working Group , Lucas Pardue Content-Type: multipart/alternative; boundary="000000000000b49faf058de92cb3" Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 17 Jul 2019 23:51:44 -0000 --000000000000b49faf058de92cb3 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Mikkel, the 'why' is complicated and varied I suspect. In Google's case, I know we like to isolate services like authentication from static content from ads from large content(ie: YouTube) for a variety of reasons. I suspect we currently end up with as many as 2x more connections than we really need, and we can likely fix a few of them, but I anticipate we'll end up with >2 connections for the foreseeable future. Why TaoBoa.com and TMall.com(both Alexa top 10) were using >20 H2 connections is quite confusing to me, or why Amazon is using 15 H2 connections, so I'd be curious if anyone knows. On Tue, Jul 16, 2019 at 9:00 AM Patrick Meenan wrote: > Lucas can speak to the current state of deployment at Cloudflare but the > scheme we deployed mirrors the current proposal well enough that the > results should apply. It's a little different because the prioritization > isn't originating from the client but it is being applied as if it was. > > Cloudflare has ample evidence that "it works" at least in place of > HTTP/2's scheme over TCP and compares well to a well-implemented HTTP/2 > client (when serving web content to browsers anyway). Where the really bi= g > gains came into play were in overriding the client-requested prioritizati= on > from Safari and Edge and applying something that looks more like a mix of > Chrome and Firefox (sequential critical assets, interleaved images). In > that case it worked much better than HTTP/2 but it was because of the > specific client HTTP/2 priority schemes and the bulk of the gains came fr= om > applying better sequencing server-side (though the ability to make > server-side decisions was a huge benefit of the scheme). It also works > well enough that the new scheme is applied independent of the client so > Chrome and Firefox also don't regress. > Thanks, this makes complete sense to me. > > Given that you can represent the proposed scheme in it's entirety with th= e > HTTP/2 schemes, I'm not sure you'll ever see an application performance > gain if you are using the same client and applying the exact same scheme = to > both modes. That said, the code complexity may prevent some features fro= m > being implemented in the tree that could be added fairly easily to the ne= w > scheme. The one that comes to mind for Chrome in particular is to enable > interleaving of image data instead of delivering them sequentially. With > the new scheme it's pretty much just carrying a bit through the stack to > indicate that the given fetch should be interleaved and it can be mixed i= n > to the serialized priorities trivially. Doing the same with the full HTTP= /2 > tree would be considerably more complex. > Agreed, we're starting to write the code to compare gQUIC's use of SPDY priorities with Chrome's usage of the H2 tree with your proposal(in this case, basically a variant of SPDY priorities), and we think that should be relatively straightforward, but anything more complex would be a large amount of work. > On Mon, Jul 15, 2019 at 10:29 PM Ian Swett wrote: > >> When I presented slides on HTTP/3 priorities at the QUIC interim, one >> consistent point was that the HTTP/3 working group wanted some experimen= tal >> evidence that an alternate scheme worked in practice. gQUIC has always >> used SPDY style priorities, FWIW, but we have no comparative data at >> the moment. >> >> I can imagine a few ways to evaluate a priority scheme, but I'd like to >> know whether I have the correct ones(and relative importance). >> - Application performance >> - Code size/complexity >> - Bytes on the wire >> - Computational complexity/potential for attacks >> - Reduction/change in edge cases(particularly for HTTP/3 without HoL >> blocking) >> - New capabilities (ie: easier for LBs/AFEs to contribute?) >> >> *Experimentation Options* >> The H2 stack at Google supports FIFO, LIFO and H2 priorities. However, >> it=E2=80=99s not currently using LOWAT and previous experiments have yie= lded no >> measurable change in performance, so H2 does not seem like a good >> experiment platform. >> >> For gQUIC, we already have an implementation of H2 priorities that we=E2= =80=99re >> not using. We can wire up an experiment to start using them and compare= to >> SPDY style priorities, but given Chrome's internal priority scheme with = 5 >> levels and translation to a linked list in H2 priorities, I believe that >> would only provide information on code size/complexity and bytes on the >> wire. Application performance would only change if one of the two schem= es >> had an implementation bug. >> >> Expanding Chrome=E2=80=99s usage of priorities is possible, but it=E2=80= =99s a longer >> term project and I don't know whether they'll change. >> >> *Other data* >> Most thinking about priorities is based on the idea that a page is loade= d >> over a single connection, but in fact, that=E2=80=99s extraordinarily ra= re as I >> presented at the interim(except Wikipedia). Would it be useful to have >> more data on this from the client and/or server perspective? >> >> We'd be happy to work with someone else on gathering data as well, >> assuming the WG would find the data we're gathering more valuable than w= hat >> Chrome/Google can provide alone. >> >> Thanks, Ian >> > --000000000000b49faf058de92cb3 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Mikkel, the 'why' is complicated and varied I= suspect.

In Google's case, I know we like to = isolate services like authentication from static content from ads from larg= e content(ie: YouTube) for a variety of reasons.=C2=A0 I suspect we current= ly end up with as many as 2x more connections than we really need, and we c= an likely fix a few of them, but I anticipate we'll end up with >2 c= onnections for the foreseeable=C2=A0future.

Why Ta= oBoa.com and TMall.com(both Alexa top 10) were using >20 H2 connections = is quite confusing to me, or why Amazon is using 15 H2 connections, so I= 9;d be curious if anyone knows.=C2=A0=C2=A0

On Tue, Jul 16, 2019 at 9:00 AM = Patrick Meenan <patmeenan@gmail.c= om> wrote:
Lucas can speak to the current state of deployment at Cl= oudflare but the scheme we deployed mirrors the current proposal well enoug= h that the results should apply. It's a little different because the pr= ioritization isn't originating from the client but it is being applied = as if it was.=C2=A0

Cloudflare has ample evidence that &= quot;it works" at least in place of HTTP/2's scheme over TCP and c= ompares well to a well-implemented HTTP/2 client (when serving web content = to browsers anyway). Where the really big gains came into play were in over= riding the client-requested prioritization from Safari and Edge and applyin= g something that looks more like a mix of Chrome and Firefox (sequential cr= itical assets, interleaved images). In that case it worked much better than= HTTP/2 but it was because of the specific client HTTP/2 priority schemes a= nd the bulk of the gains came from applying better sequencing server-side (= though the ability to make server-side decisions was a huge benefit of the = scheme).=C2=A0 It also works well enough that the new scheme is applied ind= ependent of the client so Chrome and Firefox also don't regress.
<= /div>

Thanks, this makes complete sense to = me.=C2=A0 =C2=A0

Given that you can represent the proposed= scheme in it's entirety with the HTTP/2 schemes, I'm not sure you&= #39;ll ever see an application performance gain if you are using the same c= lient and applying the exact same scheme to both modes.=C2=A0 That said, th= e code complexity may prevent some features from being implemented in the t= ree that could be added fairly easily to the new scheme. The one that comes= to mind for Chrome in particular is to enable interleaving of image data i= nstead of delivering them sequentially. With the new scheme it's pretty= much just carrying a bit through the stack to indicate that the given fetc= h should be interleaved and it can be mixed in to the serialized priorities= trivially. Doing the same with the full HTTP/2 tree would be considerably = more complex.

Agreed, we're= starting to write the code to compare gQUIC's use of SPDY priorities w= ith Chrome's usage of the H2 tree with your proposal(in this case, basi= cally a variant of SPDY priorities), and we think that should be relatively= straightforward, but anything more complex would be a large amount of work= .

On Mon, J= ul 15, 2019 at 10:29 PM Ian Swett <ianswett@google.com> wrote:
When I presented sl= ides on HTTP/3 priorities at the QUIC interim, one consistent point was tha= t the HTTP/3 working group wanted some experimental evidence that an altern= ate scheme worked in practice.=C2=A0 gQUIC has always used SPDY style prior= ities, FWIW, but we have no comparative data at the=C2=A0moment.

I c= an imagine a few ways to evaluate a priority scheme, but I'd like to kn= ow whether I have the correct ones(and relative importance).
- Applicati= on performance
- Code size/complexity
- Bytes on the wire
- Comput= ational complexity/potential for attacks
- Reduction/change in edge case= s(particularly for HTTP/3 without HoL blocking)
- New capabilities (ie: = easier for LBs/AFEs to contribute?)

Experimentation OptionsThe H2 stack at Google supports FIFO, LIFO and H2 priorities.=C2=A0 Howev= er, it=E2=80=99s not currently using LOWAT and previous experiments have yi= elded no measurable change in performance, so H2 does not seem like a good = experiment platform.

For gQUIC, we already have an implementation of= H2 priorities that we=E2=80=99re not using.=C2=A0 We can wire up an experi= ment to start using them and compare to SPDY style priorities, but given Ch= rome's internal priority scheme with 5 levels and translation to a link= ed list in H2 priorities, I believe that would only provide information on = code size/complexity and bytes on the wire.=C2=A0 Application performance w= ould only change if one of the two schemes had an implementation bug.
Expanding Chrome=E2=80=99s usage of priorities is possible, but it=E2=80= =99s a longer term project and I don't know whether they'll change.=

Other data
Most thinking about priorities is based on the= idea that a page is loaded over a single connection, but in fact, that=E2= =80=99s extraordinarily rare as I presented at the interim(except Wikipedia= ). =C2=A0 Would it be useful to have more data on this from the client and/= or server perspective?

We'd be happy to work with so= meone else on gathering data as well, assuming the WG would find the data w= e're gathering more valuable than what Chrome/Google can provide alone.=

Thanks, Ian
--000000000000b49faf058de92cb3-- From brent.bilger@verizon.com Fri Jul 19 08:14:25 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E609E1205D9 for ; Fri, 19 Jul 2019 08:14:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=verizon.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CLucqi0-EMUj for ; Fri, 19 Jul 2019 08:14:24 -0700 (PDT) Received: from smtpout1-tdc.verizon.com (smtpout1-tdc.verizon.com [137.188.104.133]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E50791204D7 for ; Fri, 19 Jul 2019 08:14:12 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=verizon.com; i=@verizon.com; q=dns/txt; s=corp; t=1563549253; x=1595085253; h=to:subject:date:message-id:mime-version:from; bh=igNK5btRWmebe9gexY04Of0QbXzHQBRegP+hOZc+hKQ=; b=eUMRf7q5J+kdFWEJPdLIrzJp0bFGtKPE4R/vVaLmk7ANgr0KPWVBD3iC VEEyXOf87YMevWwXq+Q6WTV+7oVnh50oQujv3naUg8TAfBSTlfmKPQN9p Q3UcCaJJQC54l4f4WP+eP7dmoazuc/2+IPBCJ6ks0AOFSIHltXwmvq6X5 8=; From: brent.bilger@verizon.com Received: from tbwexch01apd.uswin.ad.vzwcorp.com ([153.114.162.25]) by smtpout1-tdc.verizon.com with ESMTP/TLS/ECDHE-RSA-AES256-SHA384; 19 Jul 2019 15:14:12 +0000 Received: from tbwexch12apd.uswin.ad.vzwcorp.com (153.114.162.36) by tbwexch01apd.uswin.ad.vzwcorp.com (153.114.162.25) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Fri, 19 Jul 2019 11:14:11 -0400 Received: from scwexch05apd.uswin.ad.vzwcorp.com (153.114.130.24) by tbwexch12apd.uswin.ad.vzwcorp.com (153.114.162.36) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Fri, 19 Jul 2019 11:14:10 -0400 Received: from scwexch05apd.uswin.ad.vzwcorp.com (153.114.130.24) by scwexch05apd.uswin.ad.vzwcorp.com (153.114.130.24) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Fri, 19 Jul 2019 08:14:09 -0700 Received: from scwexch05apd.uswin.ad.vzwcorp.com ([153.114.130.24]) by scwexch05apd.uswin.ad.vzwcorp.com ([153.114.130.24]) with mapi id 15.00.1473.003; Fri, 19 Jul 2019 08:14:09 -0700 To: "quic@ietf.org" Subject: DoS-ing QUIC servers is too easy Thread-Topic: DoS-ing QUIC servers is too easy Thread-Index: AQHVPkSdGqqQm7OsKU++bWyymPl7AA== Date: Fri, 19 Jul 2019 15:14:09 +0000 Message-ID: <21E3AE84-02C5-4943-A88E-B62329E21002@one.verizon.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.11.60.250] Content-Type: multipart/alternative; boundary="_000_21E3AE8402C54943A88EB62329E21002oneverizoncom_" MIME-Version: 1.0 Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 19 Jul 2019 15:16:23 -0000 --_000_21E3AE8402C54943A88EB62329E21002oneverizoncom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 UHJvYmxlbToNClFVSUMgc2VydmVycywgbGlrZSBqdXN0IGFib3V0IGFsbCBvdGhlciBzZXJ2ZXJz LCBhcmUgZmFyIHRvbyBzdXNjZXB0aWJsZSB0byBEb1MgYXR0YWNrcy4gIEludGVncmFsIHRvIHRo ZSBjbGllbnQtc2VydmVyIGFyY2hpdGVjdHVyZSBpcyB0aGUgZmFjdCB0aGF0IHNlcnZlcnMgbXVz dCBsaXN0ZW4gdG8gYWxsIHBvdGVudGlhbCBjbGllbnRzIG9uIHRoZSBuZXR3b3JrKHMpIHRoZXkg c2VydmUg4oCTIHdoZXRoZXIgdGhlIGNvbm5lY3Rpb24gaXMgZnJvbSBhIGxlZ2l0aW1hdGUgY2xp ZW50IG9yIG5vdC4gVGhpcyB3YXMgZmluZSB3aGVuIElUIGNvbnRyb2xsZWQgdGhlIG5ldHdvcmss IGJ1dCB0aGUgc2NvcGUgb2YgdGhlIEludGVybmV0IGNoYW5nZWQgYWxsIHRoYXQuIFNlcnZlcnMg bGlzdGVuaW5nIHRvIGFsbCBjb21tdW5pY2F0aW9ucyBlbmFibGVzIHJlc291cmNlIERvUyBhdHRh Y2tzLiBSZXNvdXJjZSBEb1MgYXR0YWNrcyBvbiBRVUlDIHNlcnZlcnMgYXJlIGFtcGxpZmllZCBi eSB0aGUgcHJvY2Vzc2luZyByZXF1aXJlbWVudHMgb2YgcHVibGljL3ByaXZhdGUga2V5IGNyeXB0 b2dyYXBoeSB3aGljaCBhbiBhdHRhY2tlciBhIGNhbiBpbmR1Y2UgdGhlIHNlcnZlciB0byBkbyB3 aXRob3V0IGJ1cmRlbmluZyB0aGUgYXR0YWNrZXIuICBJbiBhZGRpdGlvbiwgc2VydmVycyByZXNw b25kaW5nIHRvIGFsbCBxdWVyaWVzIGNhbiBsZWFrIGluZm9ybWF0aW9uIHRoYXQgYWR2ZXJzYXJp ZXMgY2FuIGxhdGVyIHVzZSB0byBhdHRhY2sgdGhlbS4NCg0KUmVxdWlyZW1lbnQ6DQpQcm92aWRl IGEgd2F5IHRoYXQgUVVJQyBzZXJ2ZXJzIGNhbiBlYXNpbHksIHdpdGggdmVyeSBsb3cgcHJvY2Vz c2luZyByZXF1aXJlbWVudCwgdGVsbCBpZiBhIGNvbm5lY3Rpb24gaXMgZnJvbSBhIGxlZ2l0aW1h dGUgY2xpZW50Lg0KDQoNCg0KQnJlbnQgQmxpZ2VyDQpEaXJlY3Rvci1UZWNobm9sb2d5IFZlcml6 b24gU0RQDQpicmVudC5iaWxnZXJAdmVyaXpvbi5jb208bWFpbHRvOmJyZW50LmJpbGdlckB2ZXJp em9uLmNvbT4NCg0KDQoNCg0KDQo= --_000_21E3AE8402C54943A88EB62329E21002oneverizoncom_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgbGluZS1icmVhazogYWZ0 ZXItd2hpdGUtc3BhY2U7IiBjbGFzcz0iIj4NClByb2JsZW06PGJyIGNsYXNzPSIiPg0KUVVJQyBz ZXJ2ZXJzLCBsaWtlIGp1c3QgYWJvdXQgYWxsIG90aGVyIHNlcnZlcnMsIGFyZSBmYXIgdG9vIHN1 c2NlcHRpYmxlIHRvIERvUyBhdHRhY2tzLiZuYnNwOyZuYnNwO0ludGVncmFsIHRvIHRoZSBjbGll bnQtc2VydmVyIGFyY2hpdGVjdHVyZSBpcyB0aGUgZmFjdCZuYnNwO3RoYXQgc2VydmVycyBtdXN0 IGxpc3RlbiB0byBhbGwgcG90ZW50aWFsIGNsaWVudHMgb24gdGhlIG5ldHdvcmsocykgdGhleSBz ZXJ2ZSDigJMgd2hldGhlciB0aGUgY29ubmVjdGlvbiBpcyBmcm9tDQogYSBsZWdpdGltYXRlIGNs aWVudCBvciBub3QuJm5ic3A7VGhpcyB3YXMgZmluZSB3aGVuIElUIGNvbnRyb2xsZWQgdGhlIG5l dHdvcmssIGJ1dCB0aGUgc2NvcGUgb2YgdGhlIEludGVybmV0IGNoYW5nZWQgYWxsIHRoYXQuIFNl cnZlcnMgbGlzdGVuaW5nIHRvIGFsbCBjb21tdW5pY2F0aW9ucyZuYnNwO2VuYWJsZXMgcmVzb3Vy Y2UgRG9TIGF0dGFja3MuIFJlc291cmNlIERvUyBhdHRhY2tzIG9uIFFVSUMgc2VydmVycyBhcmUg YW1wbGlmaWVkIGJ5IHRoZSBwcm9jZXNzaW5nDQogcmVxdWlyZW1lbnRzIG9mIHB1YmxpYy9wcml2 YXRlJm5ic3A7a2V5IGNyeXB0b2dyYXBoeSB3aGljaCBhbiBhdHRhY2tlciBhIGNhbiBpbmR1Y2Ug dGhlIHNlcnZlciB0byBkbyB3aXRob3V0IGJ1cmRlbmluZyB0aGUgYXR0YWNrZXIuJm5ic3A7Jm5i c3A7SW4gYWRkaXRpb24sIHNlcnZlcnMgcmVzcG9uZGluZyB0byBhbGwmbmJzcDtxdWVyaWVzIGNh biBsZWFrIGluZm9ybWF0aW9uIHRoYXQgYWR2ZXJzYXJpZXMgY2FuIGxhdGVyIHVzZSB0byBhdHRh Y2sgdGhlbS48YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQpSZXF1aXJlbWVudDo8YnIgY2xh c3M9IiI+DQpQcm92aWRlIGEgd2F5IHRoYXQgUVVJQyBzZXJ2ZXJzIGNhbiBlYXNpbHksIHdpdGgg dmVyeSBsb3cgcHJvY2Vzc2luZyByZXF1aXJlbWVudCwgdGVsbCBpZiBhIGNvbm5lY3Rpb24gaXMg ZnJvbSBhIGxlZ2l0aW1hdGUgY2xpZW50LjxiciBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+DQo8 ZGl2IGRpcj0iYXV0byIgc3R5bGU9ImNhcmV0LWNvbG9yOiByZ2IoMCwgMCwgMCk7IGNvbG9yOiBy Z2IoMCwgMCwgMCk7IGZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMThweDsgZm9u dC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDog bm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1p bmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdv cmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQtZGVj b3JhdGlvbjogbm9uZTsgd29yZC13cmFwOiBicmVhay13b3JkOyAtd2Via2l0LW5ic3AtbW9kZTog c3BhY2U7IGxpbmUtYnJlYWs6IGFmdGVyLXdoaXRlLXNwYWNlOyIgY2xhc3M9IiI+DQo8ZGl2IGRp cj0iYXV0byIgc3R5bGU9IndvcmQtd3JhcDogYnJlYWstd29yZDsgLXdlYmtpdC1uYnNwLW1vZGU6 IHNwYWNlOyBsaW5lLWJyZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsiIGNsYXNzPSIiPg0KPGRpdiBz dHlsZT0iY2FyZXQtY29sb3I6IHJnYigwLCAwLCAwKTsgY29sb3I6IHJnYigwLCAwLCAwKTsgZm9u dC12YXJpYW50LWNhcHM6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGln bjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1z cGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0 aDogMHB4OyB0ZXh0LWRlY29yYXRpb246IG5vbmU7Ij4NCjxiciBjbGFzcz0iQXBwbGUtaW50ZXJj aGFuZ2UtbmV3bGluZSI+DQo8YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9ImNhcmV0 LWNvbG9yOiByZ2IoMCwgMCwgMCk7IGNvbG9yOiByZ2IoMCwgMCwgMCk7IGZvbnQtdmFyaWFudC1j YXBzOiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0 ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1h bDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgdGV4 dC1kZWNvcmF0aW9uOiBub25lOyI+DQo8YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9 ImNhcmV0LWNvbG9yOiByZ2IoMCwgMCwgMCk7IGNvbG9yOiByZ2IoMCwgMCwgMCk7IGZvbnQtdmFy aWFudC1jYXBzOiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0 YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6 IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBw eDsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyI+DQpCcmVudCBCbGlnZXI8L2Rpdj4NCjxkaXYgc3R5 bGU9ImNhcmV0LWNvbG9yOiByZ2IoMCwgMCwgMCk7IGNvbG9yOiByZ2IoMCwgMCwgMCk7IGZvbnQt dmFyaWFudC1jYXBzOiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246 IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3Bh Y2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6 IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyI+DQpEaXJlY3Rvci1UZWNobm9sb2d5Jm5ic3A7 VmVyaXpvbiBTRFAmbmJzcDs8YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9ImNhcmV0 LWNvbG9yOiByZ2IoMCwgMCwgMCk7IGNvbG9yOiByZ2IoMCwgMCwgMCk7IGZvbnQtdmFyaWFudC1j YXBzOiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0 ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1h bDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgdGV4 dC1kZWNvcmF0aW9uOiBub25lOyI+DQo8YSBocmVmPSJtYWlsdG86YnJlbnQuYmlsZ2VyQHZlcml6 b24uY29tIiBjbGFzcz0iIj5icmVudC5iaWxnZXJAdmVyaXpvbi5jb208L2E+PC9kaXY+DQo8ZGl2 IHN0eWxlPSJjYXJldC1jb2xvcjogcmdiKDAsIDAsIDApOyBjb2xvcjogcmdiKDAsIDAsIDApOyBm b250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDI0cHg7IGZvbnQtc3R5bGU6IG5vcm1h bDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVy LXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRl eHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBw eDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyB0ZXh0LWRlY29yYXRpb246IG5vbmU7 IiBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGJyIGNsYXNzPSJBcHBsZS1pbnRl cmNoYW5nZS1uZXdsaW5lIj4NCjwvZGl2Pg0KPC9kaXY+DQo8YnIgY2xhc3M9IkFwcGxlLWludGVy Y2hhbmdlLW5ld2xpbmUiIHN0eWxlPSJjYXJldC1jb2xvcjogcmdiKDAsIDAsIDApOyBjb2xvcjog cmdiKDAsIDAsIDApOyBmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDE4cHg7IGZv bnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6 IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQt aW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3 b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyB0ZXh0LWRl Y29yYXRpb246IG5vbmU7Ij4NCjxiciBjbGFzcz0iQXBwbGUtaW50ZXJjaGFuZ2UtbmV3bGluZSI+ DQo8L2Rpdj4NCjxiciBjbGFzcz0iIj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_21E3AE8402C54943A88EB62329E21002oneverizoncom_-- From nobody Fri Jul 19 08:27:13 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2D65C12063F for ; Fri, 19 Jul 2019 08:27:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=alumni-cmu-edu.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xgPURZ8XGC58 for ; Fri, 19 Jul 2019 08:27:10 -0700 (PDT) Received: from mail-wr1-x42c.google.com (mail-wr1-x42c.google.com [IPv6:2a00:1450:4864:20::42c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 41D671206A0 for ; Fri, 19 Jul 2019 08:27:10 -0700 (PDT) Received: by mail-wr1-x42c.google.com with SMTP id n9so7587876wrr.4 for ; Fri, 19 Jul 2019 08:27:10 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=alumni-cmu-edu.20150623.gappssmtp.com; s=20150623; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=sdnfiCuSqvP+/BM78j/TCbAyIo5aPaHEu/+tSm/OYMo=; b=Ugj5XuoU0UFQ31/dc1LaPF8T6wRf2m+PPVqG4/ra4sU7MbKGAfmRcVjIy6Z+dhM6no PcdRIm2UbbS9Z3TPXItXiQgno3ZzQOfuQhqdTd+/Uv2tEbhlU1k5PSFHLwPT54llU7Tv YKPLdofb0+s/mSiwFsj+u8Et2A+wF7XzjoydBI3F1IGdrbp70px+mxakKkd9raZLxrdj FmZ+eMq1AKy9HEkx38RKSZmXV2l100dZxe3Q5O3A+MRHgweNhg+C+DY2d7QPwQp2L4Xx YUicsG0HBG25xY53j9SNAnr1vna/2ji1yWk4uB5hvC9BusWz4lkPduulubbIRR7Msl5q whzQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=sdnfiCuSqvP+/BM78j/TCbAyIo5aPaHEu/+tSm/OYMo=; b=icOoKZvWCWEGszMS5HPyAVOdxPY/336+9goPMndtw9IlbzqhW4l0qyKPQ5lh05sTbc WYpAeeiRnEDmQ8VQxaG03QF25MD2lnLU6f1JX9xqWCeERFCe7EPrOT/a/uK96glUqlSQ MzdBnEdsEshrT07rFCaitXpF8BEacCtwmD8zRrXgI8Y0dNUqmePY+ouaTC2kLKv0Qj3u DmxLgInmAwWj/T/pS5+GrjDrkaclueyJ+RXw7CSHhPPNWrCvvUDAfS32EgshYnyaXHdn rK425UgK9TEvr5npCZYvL6c9RaIC88hs3jEkhARq+IjwDYupwqxMpaToIjit8DuH+/oT WESg== X-Gm-Message-State: APjAAAUWEP51DydB6B9kxnjyihEepbU020/fHGHDZHJ6GCK5F/Dqa6zT rBdcoCfhSbigdNGIE7e9uEv1SSp+8d3oRpnNBQa7hw== X-Google-Smtp-Source: APXvYqxIPbwU7I1nZRgPrn9u4anfRsk4v73v4C2tpqxD+zdaZ5+QUVub35SjymBe2v2638m2UsJX8JWRpQ0YSKlX2Lw= X-Received: by 2002:adf:a299:: with SMTP id s25mr49455772wra.74.1563550028741; Fri, 19 Jul 2019 08:27:08 -0700 (PDT) MIME-Version: 1.0 References: <21E3AE84-02C5-4943-A88E-B62329E21002@one.verizon.com> In-Reply-To: <21E3AE84-02C5-4943-A88E-B62329E21002@one.verizon.com> From: Frederick Kautz Date: Fri, 19 Jul 2019 08:26:56 -0700 Message-ID: Subject: Re: DoS-ing QUIC servers is too easy To: brent.bilger=40verizon.com@dmarc.ietf.org Cc: IETF QUIC WG Content-Type: multipart/alternative; boundary="0000000000000d4d5a058e0a5cd3" Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 19 Jul 2019 15:27:12 -0000 --0000000000000d4d5a058e0a5cd3 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable What techniques are common in standard TCP/UDP stacks for both kernel and userspace networking scenarios? On Fri, Jul 19, 2019, 08:16 wrote: > Problem: > QUIC servers, like just about all other servers, are far too susceptible > to DoS attacks. Integral to the client-server architecture is the > fact that servers must listen to all potential clients on the network(s) > they serve =E2=80=93 whether the connection is from a legitimate client o= r > not. This was fine when IT controlled the network, but the scope of the > Internet changed all that. Servers listening to all communications enable= s > resource DoS attacks. Resource DoS attacks on QUIC servers are amplified = by > the processing requirements of public/private key cryptography which an > attacker a can induce the server to do without burdening the attacker. I= n > addition, servers responding to all queries can leak information that > adversaries can later use to attack them. > > Requirement: > Provide a way that QUIC servers can easily, with very low processing > requirement, tell if a connection is from a legitimate client. > > > > Brent Bliger > Director-Technology Verizon SDP > brent.bilger@verizon.com > > > > > > --0000000000000d4d5a058e0a5cd3 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
What techniques are common in standard TCP/UDP stack= s for both kernel and userspace networking scenarios?

On Fri, Jul 19, 2019, 08:16 <brent.bilger=3D40verizon.com@dmarc.ietf.org> wrote:
Problem:
QUIC servers, like just about all other servers, are far too susceptible to= DoS attacks.=C2=A0=C2=A0Integral to the client-server architecture is the = fact=C2=A0that servers must listen to all potential clients on the network(= s) they serve =E2=80=93 whether the connection is from a legitimate client or not.=C2=A0This was fine when IT controlled the netw= ork, but the scope of the Internet changed all that. Servers listening to a= ll communications=C2=A0enables resource DoS attacks. Resource DoS attacks o= n QUIC servers are amplified by the processing requirements of public/private=C2=A0key cryptography which an attacker a c= an induce the server to do without burdening the attacker.=C2=A0=C2=A0In ad= dition, servers responding to all=C2=A0queries can leak information that ad= versaries can later use to attack them.

Requirement:
Provide a way that QUIC servers can easily, with very low processing requir= ement, tell if a connection is from a legitimate client.



Brent Bliger
Director-Technology=C2=A0Verizon SDP=C2=A0





--0000000000000d4d5a058e0a5cd3-- From nobody Fri Jul 19 08:31:42 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E6D681206A2 for ; Fri, 19 Jul 2019 08:31:40 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -17.5 X-Spam-Level: X-Spam-Status: No, score=-17.5 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, ENV_AND_HDR_SPF_MATCH=-0.5, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5, USER_IN_DEF_SPF_WL=-7.5] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7n3K3T8tJcnu for ; Fri, 19 Jul 2019 08:31:38 -0700 (PDT) Received: from mail-ua1-x936.google.com (mail-ua1-x936.google.com [IPv6:2607:f8b0:4864:20::936]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 92B8B120404 for ; Fri, 19 Jul 2019 08:31:38 -0700 (PDT) Received: by mail-ua1-x936.google.com with SMTP id 34so12704910uar.8 for ; Fri, 19 Jul 2019 08:31:38 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=IutAWZjY9oZZIj3bwUy9zcdEoz5mQyMmOjUdao3IxGU=; b=T8PdwhB904I6XGKifI6t/POppTrh6YJ5cDMpOSa8BUuhujNUva9xUwy5RbRCE2u/RV p5oIElPFIQCW6wmkN4AxnK64GQQ4Sun4HnDn4T5UhcmgovDDQBaybP6oK9Fwd9NbsBy8 /2EbynhQpwWr8QPR9644upk7ww1fR4lDXBcRpvDbMMUjtdWN096N2aUYtJNk7UTjDNpo dmUlaqf8Zhv4YSgnHwdOZUIfgg9edgk2cBd0r3hLHLKduDEyrJLi9jfXV3wUalcU9Fo3 MqW0BQ5Mx9uf7IC5kpQeOX11puW9M1N9+6udW37ep/rp31zEj9W3lhNDq73WULBttIEl G5og== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=IutAWZjY9oZZIj3bwUy9zcdEoz5mQyMmOjUdao3IxGU=; b=NAb+F3RTytAZsQn8akflEjoJGMJrc/x16NHPZ6NSM5OU+twBxZOwj7b9l0A1u+A5HC fIzNEKRfxShQ4v5wN9VVICyehy1J4Oxipap1dktf+lHN1vaO2zOsermnmJRaaA6hS3r3 L7BVF3Ag2eWkrCO/GOvXCaVW5Q5cDcK/8TeEd7MG18lR1BFwLU0zxUNKG3Ok/bVetLbg cu2qn+zkRcZ5LICRPsmRpQ/klLLiXLhkug/0EdtkUMEUQUpR72639WglXuveHbzerxie di5VWtBnEbrL0kMTeW6C3qj+TvPffr5TfZyqEItNK580lBwxV85doYJOD2Glsw97gdBR usdQ== X-Gm-Message-State: APjAAAVq7EED1MezQOaxLmxdIST+hywrfBhbdi2S5pJfhtHdjr4G6c9z hBCmRBgiHq7iqxbvPJPlVrr6YvzJmeHTCnHhxzcY6JE3 X-Google-Smtp-Source: APXvYqzZ2lBA32IxWN6K/Hs078HxnUk5IlP94Y5ZdlPX88zzoE6gRCghkU6bfe6hbtuiJaUBU0KsyXquBv9cZq4IYbw= X-Received: by 2002:ab0:2b7:: with SMTP id 52mr6272483uah.23.1563550297383; Fri, 19 Jul 2019 08:31:37 -0700 (PDT) MIME-Version: 1.0 References: <21E3AE84-02C5-4943-A88E-B62329E21002@one.verizon.com> In-Reply-To: <21E3AE84-02C5-4943-A88E-B62329E21002@one.verizon.com> From: Ian Swett Date: Fri, 19 Jul 2019 11:31:26 -0400 Message-ID: Subject: Re: DoS-ing QUIC servers is too easy To: brent.bilger=40verizon.com@dmarc.ietf.org Cc: "quic@ietf.org" Content-Type: multipart/alternative; boundary="00000000000010cabb058e0a6ce6" Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 19 Jul 2019 15:31:41 -0000 --00000000000010cabb058e0a6ce6 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Fri, Jul 19, 2019 at 11:16 AM wrote: > Problem: > QUIC servers, like just about all other servers, are far too susceptible > to DoS attacks. Integral to the client-server architecture is the > fact that servers must listen to all potential clients on the network(s) > they serve =E2=80=93 whether the connection is from a legitimate client o= r > not. This was fine when IT controlled the network, but the scope of the > Internet changed all that. Servers listening to all communications enable= s > resource DoS attacks. Resource DoS attacks on QUIC servers are amplified = by > the processing requirements of public/private key cryptography which an > attacker a can induce the server to do without burdening the attacker. I= n > addition, servers responding to all queries can leak information that > adversaries can later use to attack them. > > Requirement: > Provide a way that QUIC servers can easily, with very low processing > requirement, tell if a connection is from a legitimate client. > QUIC's Retry token is designed for this purpose. I believe that should be sufficient and make QUIC equivalent to TCP. Also, QUIC requires much larger Initial packet sizes than a TCP SYN, increasing the amount of work an attacker has to expend. > > > Brent Bliger > Director-Technology Verizon SDP > brent.bilger@verizon.com > > > > > > --00000000000010cabb058e0a6ce6 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable


=
On Fri, Jul 19, 2019 at 11:16 AM <= brent.bilger=3D40verizon.co= m@dmarc.ietf.org> wrote:
Problem:
QUIC servers, like just about all other servers, are far too susceptible to= DoS attacks.=C2=A0=C2=A0Integral to the client-server architecture is the = fact=C2=A0that servers must listen to all potential clients on the network(= s) they serve =E2=80=93 whether the connection is from a legitimate client or not.=C2=A0This was fine when IT controlled the netw= ork, but the scope of the Internet changed all that. Servers listening to a= ll communications=C2=A0enables resource DoS attacks. Resource DoS attacks o= n QUIC servers are amplified by the processing requirements of public/private=C2=A0key cryptography which an attacker a c= an induce the server to do without burdening the attacker.=C2=A0=C2=A0In ad= dition, servers responding to all=C2=A0queries can leak information that ad= versaries can later use to attack them.

Requirement:
Provide a way that QUIC servers can easily, with very low processing requir= ement, tell if a connection is from a legitimate client.

QUIC's Retry token is designed for this purpose= .=C2=A0 I believe that should be sufficient and make QUIC equivalent to TCP= .

Also, QUIC requires much larger Initial packet s= izes than a TCP SYN, increasing the amount of work an attacker has to expen= d.




Brent Bliger
Director-Technology=C2=A0Verizon SDP=C2=A0





--00000000000010cabb058e0a6ce6-- From nobody Fri Jul 19 08:53:34 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 61FFB120697 for ; Fri, 19 Jul 2019 08:53:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UJ6oL45bJdqF for ; Fri, 19 Jul 2019 08:53:31 -0700 (PDT) Received: from 1wt.eu (wtarreau.pck.nerim.net [62.212.114.60]) by ietfa.amsl.com (Postfix) with ESMTP id 0CA62120723 for ; Fri, 19 Jul 2019 08:53:30 -0700 (PDT) Received: (from willy@localhost) by pcw.home.local (8.15.2/8.15.2/Submit) id x6JFrNjv023827; Fri, 19 Jul 2019 17:53:23 +0200 Date: Fri, 19 Jul 2019 17:53:23 +0200 From: Willy Tarreau To: Frederick Kautz Cc: brent.bilger=40verizon.com@dmarc.ietf.org, IETF QUIC WG Subject: Re: DoS-ing QUIC servers is too easy Message-ID: <20190719155323.GB23718@1wt.eu> References: <21E3AE84-02C5-4943-A88E-B62329E21002@one.verizon.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.6.1 (2016-04-27) Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 19 Jul 2019 15:53:33 -0000 On Fri, Jul 19, 2019 at 08:26:56AM -0700, Frederick Kautz wrote: > What techniques are common in standard TCP/UDP stacks for both kernel and > userspace networking scenarios? For TCP, typically SYN cookies, which can easily be offloaded very low into the stack or even on external devices so that multi-10G at line rate is easily achieved on commodity hardware. Willy From nobody Fri Jul 19 08:59:55 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B4B111207A3 for ; Fri, 19 Jul 2019 08:59:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.997 X-Spam-Level: X-Spam-Status: No, score=-1.997 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PcJYJn6fn743 for ; Fri, 19 Jul 2019 08:59:51 -0700 (PDT) Received: from mail-ed1-x532.google.com (mail-ed1-x532.google.com [IPv6:2a00:1450:4864:20::532]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1630212079B for ; Fri, 19 Jul 2019 08:59:39 -0700 (PDT) Received: by mail-ed1-x532.google.com with SMTP id d4so34951399edr.13 for ; Fri, 19 Jul 2019 08:59:38 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:in-reply-to:references:mime-version:date:message-id:subject:to :cc; bh=stJJcfln8Uuu7txc5ffRshtnai/S3t67+rCjidHeiYo=; b=MK0DIYPbp3jxFAw7CCOwFh+K8y/UF7FY1v1gLBlVIVxXsHxrg2YPB3CMYd4zpAG91h hhUcCUTIP5OY6uZbSPVVeAs/Ja006S5beVdZ5/r2Gdx9VQV8ZSWylytOGqH44N2i7Kwh OlhLq0mTrQebsDocbmB7dApHUgflkT6+75BU0FF+LzajEN9vZBZ7rEkfbk8J78kW5E00 n2gHyTDx+UQ0bP22izzTMZZHBLBeVr3H45shfa9Auv5RxWNr8Syr++eLNmHMC84YK9b2 oItzlqY7TMgh45zZkOLcphQpPnZfcfN6q1GtGsYa12PXJqdTIt99KLnEwiwIVin0NkLI hjVg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:in-reply-to:references:mime-version:date :message-id:subject:to:cc; bh=stJJcfln8Uuu7txc5ffRshtnai/S3t67+rCjidHeiYo=; b=JCCIhZ4/WwaaSd2yMzuxGPcXEf9dOndl6kAblLrkBdjrZdxbbU/a5bKKY6S72l8Kmw KbWP2UN1So7iIJaRGcnj45DpNboxS+cO0VIjzviZI6os2LVyeMhYzz3n4i7ibKSw/3wa 8kPPt6wct1zy/ZmunBjlt/N8FZgB0RYz7P2KBg0SXdhy6Gqy4oyt1/J7QwdnvsRUrljw IoSZwnPfT/vIjso1xyRcQzUxxO9z1QP0INfeOmMAUJtgorDTWaUCV2tN1d0kqfm4DOGY z7O6FdJoiX2X54mu/5iw6xuGrfJ1FwtDqVTw4+2yU8w0+uoetkBu6fZ8jQu721Z/IsJG 7mvg== X-Gm-Message-State: APjAAAXWJB8UiA79/lpOodX+fawEzObtB43UG8sBBiGftl17cysonj76 qp4JIiRszjPkqtAPeHfFy0BsyvktqC/yjKaDF50vrMiQ X-Google-Smtp-Source: APXvYqwSmO6ebR8QEpQ7M9NyWCVHnlnkmE/7BfUdZmxUCreIMlEYyRgI2+NfsvYOf8jLUEe70gVHTEtKhUOzCEAG8w4= X-Received: by 2002:a50:a56b:: with SMTP id z40mr46131000edb.99.1563551977614; Fri, 19 Jul 2019 08:59:37 -0700 (PDT) Received: from 1058052472880 named unknown by gmailapi.google.com with HTTPREST; Fri, 19 Jul 2019 08:59:36 -0700 From: =?UTF-8?Q?Mikkel_Fahn=C3=B8e_J=C3=B8rgensen?= In-Reply-To: References: <21E3AE84-02C5-4943-A88E-B62329E21002@one.verizon.com> X-Mailer: Airmail (420) MIME-Version: 1.0 Date: Fri, 19 Jul 2019 08:59:36 -0700 Message-ID: Subject: Re: DoS-ing QUIC servers is too easy To: Frederick Kautz , brent.bilger=40verizon.com@dmarc.ietf.org Cc: IETF QUIC WG Content-Type: multipart/alternative; boundary="00000000000036b111058e0ad0f6" Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 19 Jul 2019 15:59:54 -0000 --00000000000036b111058e0ad0f6 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable QUIC v1 does have some mitigations such as amplification attack prevention and mostly avoiding disconnect on bad input. If there are multiple server endpoints, a load balancer SHOULD choose an arbitrary endpoint that is not dependent on client input. This prevents targeting a single server during the expensive public key handshake. An endpoint can also issue a RETRY request. This forces the client to confirm that traffic can be routed back to it before more resources are invested in the handshake. Outside of QUIC this can be used to learn about bad addresses since the number of source IP=E2=80=99s are now limited to ac= tual attackers, so rate limiting can be applied. If the client can be controlled, such as in a client library on a phone handset, or an IoT device, there are more options. These would in principle amount to a new custom QUIC version, but it is not strictly necessary: When a connection is established, a random OCID (original connection ID) is sent to what ever endpoint care to answer when traffic is sent towards a server address as stated before. The OCID is NOT used to route traffic to prevent attacks. However, if client generates the OCID not randomly but from some shared key crypto scheme, then a load balancer can quickly filter out invalid traffic, except for replay attacks. If a time factor is also encoded, such replays can be limited. What techniques are common in standard TCP/UDP stacks for both kernel and userspace networking scenarios? I guess the folks at CloudFlare can speak a lot more about that. But a common practice is to route traffic through a gateway service. Normally that traffic just passes through to the endpoint or cluster of endpoints. This means the DNS points to the gateway, shall we say, midpoints. If an attack is detected, the gateway starts to create a maze of new midpoints with suitably updated DNS records that can be disorienting to an attacker that is trying to lock on to one single endpoint in order to overload it. The gateway can then forward traffic to the endpoints as before since the attack is becoming diluted and possibly ending blind. At the same time the gateway may start to learn about the source of the attack and filter out traffic more or less brutally for the greater good, for example taking out an entire country or continent. Since DDoS attacks are distributed, this can be difficult to achieve at a granular level, if at all. At least the gateway service can drop excess traffic instead of overloading resources such as auto-scalers or triggering crashes due to memory exhaustion. Machine learning probably pays a part in this. Such attack prevention mechanisms are far to complex to handle at the individual endpoint level. That said, it would be possible to place more emphasis on client authentication, and there is support in TLS and QUIC, but it is not practical for general browser deployment, and for attack prevention the detection may come to late, if only because it has a cost to validate the clients. Mikkel On 19 July 2019 at 17.27.23, Frederick Kautz (fkautz@alumni.cmu.edu) wrote: What techniques are common in standard TCP/UDP stacks for both kernel and userspace networking scenarios? On Fri, Jul 19, 2019, 08:16 wrote: > Problem: > QUIC servers, like just about all other servers, are far too susceptible > to DoS attacks. Integral to the client-server architecture is the > fact that servers must listen to all potential clients on the network(s) > they serve =E2=80=93 whether the connection is from a legitimate client o= r > not. This was fine when IT controlled the network, but the scope of the > Internet changed all that. Servers listening to all communications enable= s > resource DoS attacks. Resource DoS attacks on QUIC servers are amplified = by > the processing requirements of public/private key cryptography which an > attacker a can induce the server to do without burdening the attacker. I= n > addition, servers responding to all queries can leak information that > adversaries can later use to attack them. > > Requirement: > Provide a way that QUIC servers can easily, with very low processing > requirement, tell if a connection is from a legitimate client. > > > > Brent Bliger > Director-Technology Verizon SDP > brent.bilger@verizon.com > > > > > > --00000000000036b111058e0ad0f6 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable =
QUIC v1 does have some mitigations such as am= plification attack prevention and mostly avoiding disconnect on bad input.<= /div>

If there are multiple server endpoints, a load balancer SHO= ULD choose an arbitrary endpoint that is not dependent on client input. Thi= s prevents targeting a single server during the expensive public key handsh= ake.

An endpoint can also issue a R= ETRY request. This forces the client to confirm that traffic can be routed = back to it before more resources are invested in the handshake. Outside of = QUIC this can be used to learn about bad addresses since the number of sour= ce IP=E2=80=99s are now limited to actual attackers, so rate limiting can b= e applied.

If the client can be con= trolled, such as in a client library on a phone handset, or an IoT device, = there are more options. These would in principle amount to a new custom QUI= C version, but it is not strictly necessary:

When a connection is established, a random OCID (original connect= ion ID) is sent to what ever endpoint care to answer when traffic is sent t= owards a server address as stated before. The OCID is NOT used to route tra= ffic to prevent attacks. However, if client generates the OCID not randomly= but from some shared key crypto scheme, then a load balancer can quickly f= ilter out invalid traffic, except for replay attacks. If a time factor is a= lso encoded, such replays can be limited.


W= hat techniques are common in standard TCP/UDP stacks for both kernel and us= erspace networking scenarios?

=
=
I guess = the folks at CloudFlare can speak a lot more about that.

But a common practice is to route traff= ic through a gateway service. Normally that traffic just passes through to = the endpoint or cluster of endpoints. This means the DNS points to the gate= way, shall we say, midpoints.

If an attack is detected, the gateway starts to create a maze of n= ew midpoints with suitably updated DNS records that can be disorienting to = an attacker that is trying to lock on to one single endpoint in order to ov= erload it. The gateway can then forward traffic to the endpoints as before = since the attack is becoming diluted and possibly ending blind.

At the same time the gateway may= start to learn about the source of the attack and filter out traffic more = or less brutally for the greater good, for example taking out an entire cou= ntry or continent. Since DDoS attacks are distributed, this can be difficul= t to achieve at a granular level, if at all. At least the gateway service c= an drop excess traffic instead of overloading resources such as auto-scaler= s or triggering crashes due to memory exhaustion.

Machine learning probably pays a part in this.= Such attack prevention mechanisms are far to complex to handle at the indi= vidual endpoint level.


Mikkel

On 19 July 2019 at 17.27.23, Frederick Kautz = (fkautz@alumni.cmu.edu) wrote:=
<= div>
What techniques are common in standard TCP/UDP stacks for both kernel and userspace networking scenarios?

On Fri, Jul 19, 2019, 08:16 <brent.bilger=3D40verizo= n.com@dmarc.ietf.org> wrote:
Problem:
QUIC servers, like just about all other servers, are far too susceptible to DoS attacks.=C2=A0=C2=A0Integral to the client-server architecture is the fact=C2=A0that servers must listen to all potential clients on the network(s) they serve =E2=80=93 whether the connection is from a legitimate client or not.=C2=A0This was fine when IT controlled the network, but the scope of the Internet changed all that. Servers listening to all communications=C2=A0enables resource DoS attacks. Resource DoS attacks on QUIC servers are amplified by the processing requirements of public/private=C2=A0key cryptography which an attacker a can induce the server to do without burdening the attacker.=C2=A0=C2=A0In addition, servers responding to all=C2=A0queries can leak information that adversaries can later use to attack them.

Requirement:
Provide a way that QUIC servers can easily, with very low processing requirement, tell if a connection is from a legitimate client.



Brent Bliger
Director-Technology=C2=A0Verizon SDP=C2=A0





--00000000000036b111058e0ad0f6-- From nobody Fri Jul 19 09:04:50 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 66C011207E2 for ; Fri, 19 Jul 2019 09:04:48 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Hv89n7f_xzWX for ; Fri, 19 Jul 2019 09:04:47 -0700 (PDT) Received: from 1wt.eu (wtarreau.pck.nerim.net [62.212.114.60]) by ietfa.amsl.com (Postfix) with ESMTP id 8E8521207E3 for ; Fri, 19 Jul 2019 09:04:36 -0700 (PDT) Received: (from willy@localhost) by pcw.home.local (8.15.2/8.15.2/Submit) id x6JG4W0l023833; Fri, 19 Jul 2019 18:04:32 +0200 Date: Fri, 19 Jul 2019 18:04:32 +0200 From: Willy Tarreau To: Ian Swett Cc: brent.bilger=40verizon.com@dmarc.ietf.org, "quic@ietf.org" Subject: Re: DoS-ing QUIC servers is too easy Message-ID: <20190719160432.GC23718@1wt.eu> References: <21E3AE84-02C5-4943-A88E-B62329E21002@one.verizon.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.6.1 (2016-04-27) Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 19 Jul 2019 16:04:48 -0000 Hi Ian, On Fri, Jul 19, 2019 at 11:31:26AM -0400, Ian Swett wrote: > QUIC's Retry token is designed for this purpose. I believe that should be > sufficient and make QUIC equivalent to TCP. The important difference is that only the QUIC stack can process this, so the packet has to pass all the way through the whole stack to userland, the protection cannot be offloaded to lower layers nor to an external device. This remains a pretty big concern to me. > Also, QUIC requires much larger Initial packet sizes than a TCP SYN, > increasing the amount of work an attacker has to expend. Sure but not that much. Even with an initial packet as large as 200 bytes you still feed the whole stack at 5 million packets per second on a single 10G port. This is a lot to pass through the whole stack, not counting the potential crypto that is associated with it nor building the response, of course. But we'll see. Willy From nobody Fri Jul 19 10:47:35 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E4F9C120996 for ; Fri, 19 Jul 2019 10:47:33 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -17.5 X-Spam-Level: X-Spam-Status: No, score=-17.5 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, ENV_AND_HDR_SPF_MATCH=-0.5, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5, USER_IN_DEF_SPF_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MCWA9080PHMK for ; Fri, 19 Jul 2019 10:47:32 -0700 (PDT) Received: from mail-vs1-xe2d.google.com (mail-vs1-xe2d.google.com [IPv6:2607:f8b0:4864:20::e2d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CD5B512006E for ; Fri, 19 Jul 2019 10:47:31 -0700 (PDT) Received: by mail-vs1-xe2d.google.com with SMTP id 2so22035192vso.8 for ; Fri, 19 Jul 2019 10:47:31 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=vUXpyDddUP/fxD2NDfcfHtST4YTJda7xeF/oJNvyDnY=; b=k/pyi2yXn923bz8Nquoz0ddA7vOH9PXfIZ+VjHnStveoZ1cYLX+M25uOu/avRv0p54 xZTHtWhkuh9goPFVocoWo25je/7UxgtpKXjlF9n4gbVXShRxneLY+8DRUQS9ZrJdWPK2 8fScmAGw7E4HcATp7adHHmRf+m2K+DHK8eIevAwJk21i35zS7P+B8lC37Kl92tYiOQiL x8P6qxgz68QDJ6qo6X8yyCur3ubkOa45F0Z01PWskH+iZscLKbl3mbCSZ1paC64kzXVv qND+xRVFW6TDi23gorYrTRiLPGLqH4wHdyMxD+AsOcRPORhnkUhFy1UN1FlVdIa6UCOV 2vHw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=vUXpyDddUP/fxD2NDfcfHtST4YTJda7xeF/oJNvyDnY=; b=JWrmb1XBeDO0HhaHcdJbgdSVTstj+pCQ0WlgQdWRaEBUpaBlsxf3pL0alMMi3x7Fci qy7gbO8Qv+A9ERsOQHmS/SY9Kl5jtmpGuFM9u7cLXwsjjCYZwvq33wTH2gs3IRIft04Z e5guoRavitFbyu+JNyw3ZEjYy5XnN9wQQTLC9r/HFMwfr+v+HHM8VeiRjOH8THPKgrdn sU7J6uORiWbA45k2f+xcFFyvpBTP6dUaqWI8NCp1+uPm4znLkiBJIO008RqTOH9hw+Bo jO6b9mY/Cn9BhGqKuG8JCYze4XEUJ29YfXF+RkRr0mm8Mc2aWV2GRbEg9OCrrX2osTf4 bZ0A== X-Gm-Message-State: APjAAAXWuPosIOWIkIX5qFKYManosB1Lu9UJNPfU5osHqUxqBzFp2jvr 5MECOj+JPOBzhm/4RtI64ZGDiAluM7UGobp4Kr94tWFNV1vUCA== X-Google-Smtp-Source: APXvYqwfsszfbocdZ7lEY3qfGdtwrBQLKvUCieJ3IV5yacelh3Tw9rzQVdnQBmqhOtcO/3EoIDFe7KgsadZapGgfaOU= X-Received: by 2002:a67:2d0f:: with SMTP id t15mr33120840vst.26.1563558450613; Fri, 19 Jul 2019 10:47:30 -0700 (PDT) MIME-Version: 1.0 References: <21E3AE84-02C5-4943-A88E-B62329E21002@one.verizon.com> <20190719160432.GC23718@1wt.eu> In-Reply-To: <20190719160432.GC23718@1wt.eu> From: Ian Swett Date: Fri, 19 Jul 2019 13:47:19 -0400 Message-ID: Subject: Re: DoS-ing QUIC servers is too easy To: Willy Tarreau Cc: brent.bilger@verizon.com, "quic@ietf.org" Content-Type: multipart/alternative; boundary="000000000000092921058e0c5239" Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 19 Jul 2019 17:47:34 -0000 --000000000000092921058e0c5239 Content-Type: text/plain; charset="UTF-8" On Fri, Jul 19, 2019 at 12:04 PM Willy Tarreau wrote: > Hi Ian, > > On Fri, Jul 19, 2019 at 11:31:26AM -0400, Ian Swett wrote: > > QUIC's Retry token is designed for this purpose. I believe that should > be > > sufficient and make QUIC equivalent to TCP. > > The important difference is that only the QUIC stack can process this, > so the packet has to pass all the way through the whole stack to userland, > the protection cannot be offloaded to lower layers nor to an external > device. This remains a pretty big concern to me. > There's a proposed draft(draft-duke-quic-load-balancers ) on QUIC load balancers, so I don't think the above is necessarily true. > > > Also, QUIC requires much larger Initial packet sizes than a TCP SYN, > > increasing the amount of work an attacker has to expend. > > Sure but not that much. Even with an initial packet as large as 200 bytes > you still feed the whole stack at 5 million packets per second on a single > 10G port. This is a lot to pass through the whole stack, not counting the > potential crypto that is associated with it nor building the response, of > course. But we'll see. > > The minimum is 1200 bytes FYI. > Willy > --000000000000092921058e0c5239 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable


=
On Fri, Jul 19, 2019 at 12:04 PM Will= y Tarreau <w@1wt.eu> wrote:
=
Hi Ian,

On Fri, Jul 19, 2019 at 11:31:26AM -0400, Ian Swett wrote:
> QUIC's Retry token is designed for this purpose.=C2=A0 I believe t= hat should be
> sufficient and make QUIC equivalent to TCP.

The important difference is that only the QUIC stack can process this,
so the packet has to pass all the way through the whole stack to userland,<= br> the protection cannot be offloaded to lower layers nor to an external
device. This remains a pretty big concern to me.

<= /div>
There's a proposed draft(draft-duke-quic-load-balancers= ) on QUIC load balancers, so I don't think the above is necessarily tru= e.=C2=A0

> Also, QUIC requires much larger Initial packet sizes than a TCP SYN, > increasing the amount of work an attacker has to expend.

Sure but not that much. Even with an initial packet as large as 200 bytes you still feed the whole stack at 5 million packets per second on a single<= br> 10G port. This is a lot to pass through the whole stack, not counting the potential crypto that is associated with it nor building the response, of course. But we'll see.


The minimum is 1200 bytes FYI.=C2=A0
Willy
--000000000000092921058e0c5239-- From nobody Fri Jul 19 11:10:22 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A89AB12031B for ; Fri, 19 Jul 2019 11:10:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.701 X-Spam-Level: X-Spam-Status: No, score=-2.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=lowentropy.net header.b=smJc+iMC; dkim=pass (2048-bit key) header.d=messagingengine.com header.b=ceQLxBtI Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7BmEOCu8LKj9 for ; Fri, 19 Jul 2019 11:10:18 -0700 (PDT) Received: from new3-smtp.messagingengine.com (new3-smtp.messagingengine.com [66.111.4.229]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id ACB691202F7 for ; Fri, 19 Jul 2019 11:10:18 -0700 (PDT) Received: from compute1.internal (compute1.nyi.internal [10.202.2.41]) by mailnew.nyi.internal (Postfix) with ESMTP id EECE92259 for ; Fri, 19 Jul 2019 14:10:17 -0400 (EDT) Received: from imap2 ([10.202.2.52]) by compute1.internal (MEProxy); Fri, 19 Jul 2019 14:10:17 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lowentropy.net; h=mime-version:message-id:in-reply-to:references:date:from:to :subject:content-type; s=fm2; bh=fhxtt8j0twxfNX09I2ZTCFFnAupaol3 0qw4uaXNr7A0=; b=smJc+iMC61lOQvF6ep73bBqmZbusMsDwpKOFc48om6jSVxa EIcTfl7+SUmGLm3ORPHJ+SYbdA44QeTiMIdaB6RNmO733lKfKwMV1MgvfCpuUtWX AS35zGH9HUgYNSdOzk3322226Ikk8NFVfRdeW3wq5Dx+U9lFFqO4kOPAZE87IHVG VNuOVreZUW7BI9lN/D7JjU0LIpATz9TVjDNWGCfKMVBt1wOgXR8wx81fBtnjey+M FVSMf2i+Dl6j9J/kWbqaCLxJPBd11BZ8M5TH+GY6yw0P8yHC+rPeQ0OzYDlHDMZi 7u+At03Ya7cjAr9UGTCa9euEotYy367ibIFUWYw== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-me-proxy :x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm3; bh=fhxtt8 j0twxfNX09I2ZTCFFnAupaol30qw4uaXNr7A0=; b=ceQLxBtIoGoUOrEY4WWuCD JlPKFOObSZZeLuSYN9XIlNu/JYAOG7oJYp3rEytkAsykw/o6YRx88GArKhBtwq4a hTYCSplzREDwKqVZ7nVrdhMgt5qJ6ubx0qsS8Qawt0RYu2TRh0skfYgsHeleo0Ie 5UdGLdEp84nIS7ZPuI7kmAWU92Wzfa9Xk37Q6eKwGYbe9G8Ub/ndXXuRcUNwsNFd xqT2fLGDdyWC8SIe1bpy3qj1qxWGwNMiodJQXTKz+G2oyM67oAD76kXE8nGgwRpD GB6WDYXWKoA2Ro0V3ZO5RGZwoW54XpPvHMK0xZQDC3S8HZJBFuZTbT/N3hTYcMSg == X-ME-Sender: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeduvddrieejgdduvdegucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucenucfjughrpefofgggkfgjfhffhffvufgtsehttd ertderredtnecuhfhrohhmpedfofgrrhhtihhnucfvhhhomhhsohhnfdcuoehmtheslhho figvnhhtrhhophihrdhnvghtqeenucfrrghrrghmpehmrghilhhfrhhomhepmhhtsehloh ifvghnthhrohhphidrnhgvthenucevlhhushhtvghrufhiiigvpedt X-ME-Proxy: Received: by mailuser.nyi.internal (Postfix, from userid 501) id 7C8B8E02D3; Fri, 19 Jul 2019 14:10:17 -0400 (EDT) X-Mailer: MessagingEngine.com Webmail Interface User-Agent: Cyrus-JMAP/3.1.6-736-gdfb8e44-fmstable-20190718v2 Mime-Version: 1.0 Message-Id: <774b4cb6-2037-40ed-b02a-42011cb50484@www.fastmail.com> In-Reply-To: <20190719160432.GC23718@1wt.eu> References: <21E3AE84-02C5-4943-A88E-B62329E21002@one.verizon.com> <20190719160432.GC23718@1wt.eu> Date: Fri, 19 Jul 2019 14:10:29 -0400 From: "Martin Thomson" To: quic@ietf.org Subject: Re: DoS-ing QUIC servers is too easy Content-Type: text/plain Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 19 Jul 2019 18:10:21 -0000 On Fri, Jul 19, 2019, at 12:04, Willy Tarreau wrote: > Hi Ian, > > On Fri, Jul 19, 2019 at 11:31:26AM -0400, Ian Swett wrote: > > QUIC's Retry token is designed for this purpose. I believe that should be > > sufficient and make QUIC equivalent to TCP. > > The important difference is that only the QUIC stack can process this, > so the packet has to pass all the way through the whole stack to userland, > the protection cannot be offloaded to lower layers nor to an external > device. This remains a pretty big concern to me. The design only requires cooperation between the device that generates the Retry and the eventual endpoint. That doesn't require heavy processing before offload. As Ian says, there is work going on to formalize a protocol between the two, but this could be an extremely simple process if you want to keep the two at arms length. From nobody Fri Jul 19 11:22:41 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8B7211200DF for ; Fri, 19 Jul 2019 11:22:39 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.701 X-Spam-Level: X-Spam-Status: No, score=-2.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=akamai.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dD12I1kt4qo1 for ; Fri, 19 Jul 2019 11:22:37 -0700 (PDT) Received: from mx0b-00190b01.pphosted.com (mx0b-00190b01.pphosted.com [IPv6:2620:100:9005:57f::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 22107120077 for ; Fri, 19 Jul 2019 11:22:37 -0700 (PDT) Received: from pps.filterd (m0050096.ppops.net [127.0.0.1]) by m0050096.ppops.net-00190b01. (8.16.0.27/8.16.0.27) with SMTP id x6JICpLO006831; Fri, 19 Jul 2019 19:22:31 +0100 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=akamai.com; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : content-transfer-encoding : mime-version; s=jan2016.eng; bh=LzAHgL4CU3qtngo61bdocV6fzz9Ay1B42D2k+3SpoTo=; b=GA2BQjNr8Lik8GuuGl6e9GIodbWJHbzr8jTp6E9YBqz0WQPt8TiaVpCAKQ6aLZ7GdFzk 79R54TE1XBd8PAszRAuzPavnY/YzfjXr9ZfONERARQ9h3U7yujt9uWmHzToixTLXh8bl oeVVswzrPkYPy5LEblTfX4vGgR7qFh+/NRFcVb+v+7aXJDc2r/DiTRYcdxkUIn+nHKeD gdTWsYinF8lxNSt707MMQEGWpRvT4hmsuQpnWixtA1pYoV82ntlMcJ52YDuPZtkJH29N mDN/tKsaMugUKImmwQX6/gERzRFDnsoT7ldtrtbQG8ZrOkm1u6BeYTh46yAUuc0SjycX Dg== Received: from prod-mail-ppoint8 (prod-mail-ppoint8.akamai.com [96.6.114.122] (may be forged)) by m0050096.ppops.net-00190b01. with ESMTP id 2tufyn0mwg-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Fri, 19 Jul 2019 19:22:31 +0100 Received: from pps.filterd (prod-mail-ppoint8.akamai.com [127.0.0.1]) by prod-mail-ppoint8.akamai.com (8.16.0.27/8.16.0.27) with SMTP id x6JIHKgY027557; Fri, 19 Jul 2019 14:22:30 -0400 Received: from email.msg.corp.akamai.com ([172.27.25.30]) by prod-mail-ppoint8.akamai.com with ESMTP id 2tqamx2uj0-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT); Fri, 19 Jul 2019 14:22:30 -0400 Received: from USTX2EX-DAG1MB5.msg.corp.akamai.com (172.27.27.105) by ustx2ex-dag1mb5.msg.corp.akamai.com (172.27.27.105) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Fri, 19 Jul 2019 13:22:29 -0500 Received: from USTX2EX-DAG1MB5.msg.corp.akamai.com ([172.27.27.105]) by ustx2ex-dag1mb5.msg.corp.akamai.com ([172.27.27.105]) with mapi id 15.00.1473.005; Fri, 19 Jul 2019 13:22:29 -0500 From: "Lubashev, Igor" To: "Lubashev, Igor" , Mark Nottingham , "quic@ietf.org" CC: Lars Eggert , "isabelle.hamchaoui@orange.com" , "alexandre.ferrieux@orange.com" Subject: RE: Packet Loss Signaling for Encrypted Protocols - draft-ferrieuxhamchaoui-tsvwg-lossbits Thread-Topic: Packet Loss Signaling for Encrypted Protocols - draft-ferrieuxhamchaoui-tsvwg-lossbits Thread-Index: AdU2CmyJiha8kWgiTzSY5F1e75TnXwAMRh8AAArB47AB/e9+UA== Date: Fri, 19 Jul 2019 18:22:28 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [172.19.36.49] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2019-07-19_12:, , signatures=0 X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 suspectscore=0 malwarescore=0 phishscore=0 bulkscore=0 spamscore=0 mlxscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1810050000 definitions=main-1907190195 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2019-07-19_12:, , signatures=0 X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1015 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1810050000 definitions=main-1907190195 Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 19 Jul 2019 18:22:39 -0000 Since tsvwg and maprg meetings are rather late in the week, I've booked a s= ide meeting time. So, for those who are interested in loss signaling for encrypted protocols = (such as QUIC), we can discuss this: * side meeting -- Monday 8:30am-9:30am in Sainte-Catherine * tsvwg (Thu) -- focus on signaling, privacy, ossification * maprg (Fri) -- focus on real world data collected and capabilities/limita= tions of the measurement method=20 - Igor > -----Original Message----- > From: Lubashev, Igor > Sent: Tuesday, July 09, 2019 11:07 AM >=20 > Understood (and not unexpected). >=20 > For those who are interested, we'll talk about the draft in tsvwg (focus = on > signaling behavior, privacy preservation, ossification resistance, maybe = specifics > of where the signals can be carried) and maprg (focus on the data collect= ed, > accuracy of measurement, capabilities at detecting/measuring various caus= es of > loss, and techniques to improve noise filtering due to reordering). Both= of the > WG meetings are later in the week (tsvwg is on Thu, maprg on Fri). >=20 > Alexandre and I will be in Montreal, and we are happy to have side meetin= gs with > interested people. >=20 > Many thanks, >=20 > - Igor >=20 >=20 > > -----Original Message----- > > From: Mark Nottingham > > Sent: Tuesday, July 09, 2019 12:49 AM > > To: Lubashev, Igor > > Cc: Lars Eggert ; quic@ietf.org; > > isabelle.hamchaoui@orange.com; alexandre.ferrieux@orange.com > > Subject: Re: Packet Loss Signaling for Encrypted Protocols - draft- > > ferrieuxhamchaoui-tsvwg-lossbits > > > > Hi Igor, > > > > Thanks for that. Our agenda is indeed tight, so I'd recommend discussin= g on the > > list and having side conversations in Montreal. > > > > Thanks, > > > > > > > On 9 Jul 2019, at 2:44 pm, Lubashev, Igor wrote= : > > > > > > Alexandre, Isabelle, and I have posted a draft on a method for endpoi= nts to > > signal packet loss to the path, while maintaining end user privacy and = resisting > > ossification. The method is protocol-independent, but of course you ge= t the > > most benefit by applying the method to encrypted transports, and QUIC i= s > what > > people usually think of first in such context. > > > > > > The draft is not targeted at the QUIC WG specifically, since it is de= scribing a > > general method of such loss reporting. But we do mention QUIC, so the = WG > may > > find it interesting. We would welcome feedback from the QUIC WG. > > > > > > Lars, Mark, I am sure the meeting agenda for Montreal is pretty tight= , but if > the > > WG is interested, we are happy to have a quick QUIC-specific presentati= on on > > this. > > > > > > Thank you! > > > > > > - Igor > > > > > > P.S. We've implemented this proposal in some Akamai servers and have > been > > using it to serve actual end-user QUIC traffic for a subset of Orange c= ustomers. > > Orange implemented a passive observer that used this signal to detect a= nd > > identify loss. We can share the high-level of the results and will sha= re the > > detailed analysis of the data and measurement techniques in maprg. > > > > > > --------------------- > > > > > > https://datatracker.ietf.org/doc/draft-ferrieuxhamchaoui-tsvwg-lossbi= ts/ > > > > > > Abstract: > > > This document describes a protocol-independent method that employs > > > two bits to allow endpoints to signal packet loss in a way that can > > > be used by network devices to measure and locate the source of the > > > loss. The signaling method applies to all protocols with a protoco= l- > > > specific way to identify packet loss. The method is especially > > > valuable when applied to protocols that encrypt transport header an= d > > > do not allow an alternative method for loss detection. > > > > -- > > Mark Nottingham https://www.mnot.net/ From nobody Fri Jul 19 17:07:29 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 26B25120041 for ; Fri, 19 Jul 2019 17:07:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hSIRTD9dFVAS for ; Fri, 19 Jul 2019 17:07:26 -0700 (PDT) Received: from mail-yb1-xb2e.google.com (mail-yb1-xb2e.google.com [IPv6:2607:f8b0:4864:20::b2e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 889A8120033 for ; Fri, 19 Jul 2019 17:07:26 -0700 (PDT) Received: by mail-yb1-xb2e.google.com with SMTP id j6so4641032ybm.7 for ; Fri, 19 Jul 2019 17:07:26 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=4cdJjKDOz2GPO1fouOud3wc+VZA1/l9F4grFkTI0f2Y=; b=vd058CedtsXjq+EnYg+0lDMimCzpcZZ/BIIRDpaNYxORUEjzznuH84alBlniI/P9JD ob4UI8suD+F3ThMtiy8w53oIjKWNPq00ZRibIpMhSsHvudjpid/vnLxoOIjouZXCN22Y ujhi92l84MC9yPmniSn+d7qgAd7gmP7/M0Ql58A5fsotoBkoBIgW7Mmr03q+45KBSDNu Z0mX1iUvTvj75ULfhZyQywY2cha0HehhVVSvijh9PveMjXTeOnefQQWZJNax+Ms6xJHk fDt8San2/iT6namE9j19jHQNIvwO2s/DnQg/Us8jjI5OBrekdNsZjK5Cs9LFIy4eVsor 299g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=4cdJjKDOz2GPO1fouOud3wc+VZA1/l9F4grFkTI0f2Y=; b=c8GwULqMwzqdeAPj3SR4XARP3BqyrWsthGIpHCwaZr7WmB23yvLFZkA/P48k1qmfF3 cqRUa9J5YdUqiHdlujFEAX3ZjVWvShrmgD4nfoI8j/O1LTeBD6C19RHgXyACvANiiP2C uRnn24cwZE7PGo04u8R78XvAFospxnkY9Zvc0Lk3ah8HSeJ5TUY+HtR08SmMkhVXwAOL OTMTK51aOEVeXQcDVuunLfQjRfXr9sRrzCOXBvLWVwZs9xXZ+JFQPujf3ETHjuB9ilR2 ghiyskSvMs4pZfocmClJiKl2NnsHa8C1xSJf5VSEIG0g4a+oJPYbFPdZhDZJk0wZ1zWF ghGA== X-Gm-Message-State: APjAAAW7+HE8NNCpBuasBWHFNMDGW/ex1idEwCgs7XUbpf9YJud9ZMYy 4Fsxv4uwkf8xHCQg5PXeIbMxNoNfaTasCm9+KVs07gtD X-Google-Smtp-Source: APXvYqwJQkRtLL/vs+JArBjdgOGpMu476hCOdu2v051D676amIxXWxTTy2fHBWKJ1DUUeLWFm9Y6ZPC3xJltKv5JXlw= X-Received: by 2002:a25:5bd7:: with SMTP id p206mr31611846ybb.230.1563581245504; Fri, 19 Jul 2019 17:07:25 -0700 (PDT) MIME-Version: 1.0 References: <21E3AE84-02C5-4943-A88E-B62329E21002@one.verizon.com> In-Reply-To: From: =?UTF-8?Q?T=C3=B6ma_Gavrichenkov?= Date: Sat, 20 Jul 2019 03:07:12 +0300 Message-ID: Subject: Re: DoS-ing QUIC servers is too easy To: Ian Swett Cc: brent.bilger=40verizon.com@dmarc.ietf.org, "quic@ietf.org" Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 20 Jul 2019 00:07:28 -0000 Peace, On Fri, Jul 19, 2019 at 6:31 PM Ian Swett wrote: > QUIC's Retry token is designed for this purpose.. > I believe that should be sufficient and make QUIC > equivalent to TCP.. For a server, yes. However, mitigating a Server Hello DDoS attack towards a _client_ is very complicated (if even possible) with QUIC, as opposed to TCP with SYN/ACK floods. We've discussed that during the hackathon in Prague (I don't remember if you were there or not). Possible solution with respect to the current QUIC threat model and architecture probably has something to do with the likes of potential DOTS integration or something like that. > Also, QUIC requires much larger Initial packet sizes than a TCP SYN, incr= easing the amount of work an attacker has to expend. No, there's no increase. What we see in practice are combined UDP+SYN flood incidents where proper SYN packet rates (w/o fast open) are roughly equal to UDP packet rates but the bandwidth consumed by SYN segments is an order of magnitude lower than the UDP bandwidth (without amplification). Therefore, currently the bottleneck for DDoSers is the packet rate, not the bandwidth, and the initial packet size growth won't help here. -- T=C3=B6ma From nobody Fri Jul 19 17:57:52 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BB5251200E9 for ; Fri, 19 Jul 2019 17:57:49 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SLgAtgKeQC5s for ; Fri, 19 Jul 2019 17:57:48 -0700 (PDT) Received: from magic.dirtside.com (magic.dirtside.com [199.33.225.25]) by ietfa.amsl.com (Postfix) with ESMTP id 3A29B12007C for ; Fri, 19 Jul 2019 17:57:48 -0700 (PDT) Received: from minoc.dirtside.com ([199.33.225.53]) by magic.dirtside.com (8.14.3/) with ESMTP id x6K0vTDR015018 for ; Fri, 19 Jul 2019 17:57:31 -0700 X-Really-To: Received: from mail-pf1-f180.google.com (mail-pf1-f180.google.com [209.85.210.180]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by minoc.dirtside.com (Postfix) with ESMTPSA id 54810EC335 for ; Fri, 19 Jul 2019 17:57:29 -0700 (PDT) Received: by mail-pf1-f180.google.com with SMTP id c73so14854885pfb.13 for ; Fri, 19 Jul 2019 17:57:29 -0700 (PDT) X-Gm-Message-State: APjAAAVQo4ebHglMbRn2EQiL3RFD7j+jvTpyxZeXiCy6TjCYSsTUHfr2 PpRpZbkn+/09lX2uckTBRdSm/FYqatnT4t/cW5Q= X-Google-Smtp-Source: APXvYqy/etVrDxRQSHuDaF6cWw10eCMJQE/s/denBzFa8RaABe+qJuecUjtjLT3REucHpeKn+jz7JjKITvk/gvOIFgY= X-Received: by 2002:a17:90a:4806:: with SMTP id a6mr61214303pjh.38.1563584248986; Fri, 19 Jul 2019 17:57:28 -0700 (PDT) MIME-Version: 1.0 References: <21E3AE84-02C5-4943-A88E-B62329E21002@one.verizon.com> In-Reply-To: From: William Herrin Date: Fri, 19 Jul 2019 17:57:18 -0700 X-Gmail-Original-Message-ID: Message-ID: Subject: Re: DoS-ing QUIC servers is too easy To: =?UTF-8?Q?T=C3=B6ma_Gavrichenkov?= Cc: Ian Swett , "quic@ietf.org" , brent.bilger=40verizon.com@dmarc.ietf.org Content-Type: multipart/alternative; boundary="000000000000bcbfd3058e125307" X-Spam-Checker: magic.dirtside.com Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 20 Jul 2019 00:57:50 -0000 --000000000000bcbfd3058e125307 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Fri, Jul 19, 2019 at 5:07 PM T=C3=B6ma Gavrichenkov = wrote: > On Fri, Jul 19, 2019 at 6:31 PM Ian Swett > wrote: > > QUIC's Retry token is designed for this purpose.. > > I believe that should be sufficient and make QUIC > > equivalent to TCP.. > > For a server, yes. > > However, mitigating a Server Hello DDoS attack towards a _client_ is > very complicated (if even possible) with QUIC, as opposed to TCP with > SYN/ACK floods. > We've discussed that during the hackathon in Prague (I don't remember > if you were there or not). Possible solution with respect to the > current QUIC threat model and architecture probably has something to > do with the likes of potential DOTS integration or something like > that. > Would you elaborate on this? Considering that the quic client employs an ephemeral UDP port, what is the quic-specific threat model here? I.e. how does it differ from any other client with a handful of open ephemeral UDP ports? Thanks, Bill Herrin --=20 William Herrin bill@herrin.us https://bill.herrin.us/ --000000000000bcbfd3058e125307 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable


=
On Fri, Jul 19, 2019 at 5:07 PM T=C3= =B6ma Gavrichenkov <ximaera@gmail.c= om> wrote:
On Fri, Jul 19, 2019 at 6:31 PM Ian Swett
<ianswett=3D40google.com@dmarc.ietf.org> wrote:
> QUIC's Retry token is designed for this purpose..
> I believe that should be sufficient and make QUIC
> equivalent to TCP..

For a server, yes.

However, mitigating a Server Hello DDoS attack towards a _client_ is
very complicated (if even possible) with QUIC, as opposed to TCP with
SYN/ACK floods.
We've discussed that during the hackathon in Prague (I don't rememb= er
if you were there or not).=C2=A0 Possible solution with respect to the
current QUIC threat model and architecture probably has something to
do with the likes of potential DOTS integration or something like
that.

Would you elaborate on this? Cons= idering that the quic client employs an ephemeral UDP port, what is the qui= c-specific threat model here? I.e. how does it differ from any other client= with a handful of open ephemeral UDP ports?

Thank= s,
Bill Herrin


--
--000000000000bcbfd3058e125307-- From nobody Fri Jul 19 22:06:54 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5FBA212008D for ; Fri, 19 Jul 2019 22:06:52 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sx6BlhVY8xcz for ; Fri, 19 Jul 2019 22:06:50 -0700 (PDT) Received: from 1wt.eu (wtarreau.pck.nerim.net [62.212.114.60]) by ietfa.amsl.com (Postfix) with ESMTP id C74D3120044 for ; Fri, 19 Jul 2019 22:06:49 -0700 (PDT) Received: (from willy@localhost) by pcw.home.local (8.15.2/8.15.2/Submit) id x6K56lX0024300; Sat, 20 Jul 2019 07:06:47 +0200 Date: Sat, 20 Jul 2019 07:06:47 +0200 From: Willy Tarreau To: Martin Thomson Cc: quic@ietf.org, brent.bilger@verizon.com Subject: Re: DoS-ing QUIC servers is too easy Message-ID: <20190720050647.GA24279@1wt.eu> References: <21E3AE84-02C5-4943-A88E-B62329E21002@one.verizon.com> <20190719160432.GC23718@1wt.eu> <774b4cb6-2037-40ed-b02a-42011cb50484@www.fastmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <774b4cb6-2037-40ed-b02a-42011cb50484@www.fastmail.com> User-Agent: Mutt/1.6.1 (2016-04-27) Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 20 Jul 2019 05:06:53 -0000 Hi Martin! On Fri, Jul 19, 2019 at 02:10:29PM -0400, Martin Thomson wrote: > On Fri, Jul 19, 2019, at 12:04, Willy Tarreau wrote: > > Hi Ian, > > > > On Fri, Jul 19, 2019 at 11:31:26AM -0400, Ian Swett wrote: > > > QUIC's Retry token is designed for this purpose. I believe that should be > > > sufficient and make QUIC equivalent to TCP. > > > > The important difference is that only the QUIC stack can process this, > > so the packet has to pass all the way through the whole stack to userland, > > the protection cannot be offloaded to lower layers nor to an external > > device. This remains a pretty big concern to me. > > The design only requires cooperation between the device that generates the > Retry and the eventual endpoint. That doesn't require heavy processing > before offload. As Ian says, there is work going on to formalize a protocol > between the two, but this could be an extremely simple process if you want to > keep the two at arms length. I've read Martin's proposal when he sent it a few months ago. But honestly I think the proposal tries hard to work around some protocol weaknesses that were purposely created to prevent linkability, and I remain convinced that all of this is not heading in the right direction. I think that another approach would be to let the server ask enforce some verifiable computational cost on the client. For example, an initial packet could contain a 32-bit nonce and a 32-bit hash of the header+nonce. The server would demand that the hash starts with a given number of zeroes (i.e. the hash is inferior to a limit). The default value could for example be 8 zeroes, meaning the client on average needs to try 256 different nonces before finding a valid hash. For the server, this means that when an initial packet comes, it just has to check the hash. If it doesn't match, no need to parse the packet nor to even reply. If the server is under heavy load or attack, it could send back a retry packet indicating how many zeroes it expects in the hash (e.g. try again with at least 12 zeroes, or 4096 tries). Just like an MTU, the expected number of zeroes for a server could be saved locally for future connections. And what is nice with such a method is that it becomes easy to deal with DDoS : all a front equipment has to do is to: - check incoming hashes and drop packets which do not match ; - take a fingerprint of the headers or just the hash itself, and keep a packet counter for such fingerprint over a period, and drop those that are too frequent (so that precomputed hashes cannot be used to form an attack) - optionally respond with a retry packet informing about the expected hash value, or just let valid packet with insufficient hashes pass through since there will be much less of them (typically 1/256 for random packets). A very inexpensive hash for small messages should be used for this, it doesn't even need to be very secure, it just needs not to be reversible (i.e. not a CRC32). Possibly that even a MAC algorithm like Poly1305 could be a good candidate for example as it's inexpensive for small devices and would be cheap on servers to validate messages as they arrive. What matters is that verifying small messages is extremely fast, much faster than the time it takes to serialize a packet. The default number of leading zeroes would just need to be calculated so that there is no impact on smallest devices used for browsing nor on proxies. On the server side, gateways could be configured to use a much lower value in agreement with the servers. And similarly a server working well could advertise in responses "no need to spend your time hashing too much, I'm fine with X zeroes". But typically if a regular 4-core hacked hosted server on the net cannot compute more than a few tens of thousands packets per second, we'll greatly reduce the risk of DDoS compared even to TCP today (which has become easy to deal with). Just my two cents, Willy From nobody Fri Jul 19 22:09:08 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 50A54120142 for ; Fri, 19 Jul 2019 22:09:02 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RpqzWIxvOU-A for ; Fri, 19 Jul 2019 22:09:00 -0700 (PDT) Received: from 1wt.eu (wtarreau.pck.nerim.net [62.212.114.60]) by ietfa.amsl.com (Postfix) with ESMTP id DF79E1208A6 for ; Fri, 19 Jul 2019 22:08:59 -0700 (PDT) Received: (from willy@localhost) by pcw.home.local (8.15.2/8.15.2/Submit) id x6K58uwP024303; Sat, 20 Jul 2019 07:08:56 +0200 Date: Sat, 20 Jul 2019 07:08:56 +0200 From: Willy Tarreau To: Ian Swett Cc: "quic@ietf.org" , brent.bilger@verizon.com Subject: Re: DoS-ing QUIC servers is too easy Message-ID: <20190720050856.GB24279@1wt.eu> References: <21E3AE84-02C5-4943-A88E-B62329E21002@one.verizon.com> <20190719160432.GC23718@1wt.eu> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.6.1 (2016-04-27) Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 20 Jul 2019 05:09:06 -0000 Hi Ian, On Fri, Jul 19, 2019 at 01:47:19PM -0400, Ian Swett wrote: > There's a proposed draft(draft-duke-quic-load-balancers > ) on QUIC > load balancers, so I don't think the above is necessarily true. Yes, as mentioned in my other message I've already seen this one. > > > Also, QUIC requires much larger Initial packet sizes than a TCP SYN, > > > increasing the amount of work an attacker has to expend. > > > > Sure but not that much. Even with an initial packet as large as 200 bytes > > you still feed the whole stack at 5 million packets per second on a single > > 10G port. This is a lot to pass through the whole stack, not counting the > > potential crypto that is associated with it nor building the response, of > > course. But we'll see. > > > > > The minimum is 1200 bytes FYI. My understanding was that it was the minimum supported so that it should be the maximum used by clients. i.e. a valid initial packet can be much smaller than this. But I could be mistaken as I've had a hard time keeping up with the progress made on the protocol. Thanks, Willy From nobody Fri Jul 19 22:53:55 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 499BD120088 for ; Fri, 19 Jul 2019 22:53:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id k4T0_IDGPTfo for ; Fri, 19 Jul 2019 22:53:51 -0700 (PDT) Received: from mail-lf1-x133.google.com (mail-lf1-x133.google.com [IPv6:2a00:1450:4864:20::133]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id ABE10120044 for ; Fri, 19 Jul 2019 22:53:50 -0700 (PDT) Received: by mail-lf1-x133.google.com with SMTP id 62so18269943lfa.8 for ; Fri, 19 Jul 2019 22:53:50 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=MnYAT7Qm8GmU4q3DFr4NbIwf0Jz6wfiDwZkoT55M3tA=; b=VHjKiGt+eI3PtZ3txtOuxd5SflQTY9BcqJj5x4HSXqK+rCTC0MNHLEPgjhgWqS4ak1 ukyi1QcYZN6el6sveaiAvq6UPgdYdxfXPXaDBdmTJPvVZE7sbhzuY687MFuyaAUjzMDX OgcC4/cc5KDSEJ5wQfDb7s6kKA16uNk6dteCBQZ4Y7p9lhlmO6UBb2k7aKFtSxYr35wv dx+0U9vIuQsWrByfRMBkZHXgwJ/7LD6yA+mUyhiJTEUoLbSR9mLGByM43QTd2Zhpis72 uJub03niMyMPj6rgK/fOLLDUNKudUfUCAsrbR2df6fX2tXXbJMEAS9lDFBYHaAbFZpkw O6pQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=MnYAT7Qm8GmU4q3DFr4NbIwf0Jz6wfiDwZkoT55M3tA=; b=SGuLk5Dp4YLYlAbKU7tFXHFm/2wq0JMUvNzomSCo8jpm1xPLbi89ZaDK1DDW3vKfXz CzZi0NWItU7rTwLN+BSuIBvxRG2XZNnxbzC9vpNGdfvQ8n/ahpihr808UyV9vad0P5yr B70q2/iZJewVMVlcQxfTOjf3OvAH40wpS9AD8pnNqe1lhX0JRJ+r6AWOdlVXHvzo4kyz avzdiR/TsI0iAq9vsUQ5LIy8lvDh/VNel0vJOeTd1VCQUw6k2jCaQ5VcIspU7aNqMiOH ZvMSCTaP1QO6lSe10IovBqNTbBCBUkUeWbF3ViLgpYHPYoRd8JA+geSUrerrQ0LcASda FN0A== X-Gm-Message-State: APjAAAWknkBUqg9Jc6UAUZ/YU2Tm5JrYcxl9u3H51o9JQxbb0VNcoGxR BpojUWsxVcG/XYJ2d07UHEvBijy4UQFFb/4aBxE= X-Google-Smtp-Source: APXvYqzfeJ9QHL0MV9hsNoQ+JVsq6Mw42p7h9nNJLrK8MdGozVJBX76pDZfIE4lSwcAsMcBG0K26ZRCtTPtgFjDKFhg= X-Received: by 2002:ac2:568e:: with SMTP id 14mr26333590lfr.189.1563602028901; Fri, 19 Jul 2019 22:53:48 -0700 (PDT) MIME-Version: 1.0 References: <21E3AE84-02C5-4943-A88E-B62329E21002@one.verizon.com> <20190719160432.GC23718@1wt.eu> <774b4cb6-2037-40ed-b02a-42011cb50484@www.fastmail.com> <20190720050647.GA24279@1wt.eu> In-Reply-To: <20190720050647.GA24279@1wt.eu> From: Watson Ladd Date: Fri, 19 Jul 2019 22:53:37 -0700 Message-ID: Subject: Re: DoS-ing QUIC servers is too easy To: Willy Tarreau Cc: Martin Thomson , IETF QUIC WG , brent.bilger@verizon.com Content-Type: text/plain; charset="UTF-8" Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 20 Jul 2019 05:53:53 -0000 On Fri, Jul 19, 2019 at 10:07 PM Willy Tarreau wrote: > > Hi Martin! > > On Fri, Jul 19, 2019 at 02:10:29PM -0400, Martin Thomson wrote: > > On Fri, Jul 19, 2019, at 12:04, Willy Tarreau wrote: > > > Hi Ian, > > > > > > On Fri, Jul 19, 2019 at 11:31:26AM -0400, Ian Swett wrote: > > > > QUIC's Retry token is designed for this purpose. I believe that should be > > > > sufficient and make QUIC equivalent to TCP. > > > > > > The important difference is that only the QUIC stack can process this, > > > so the packet has to pass all the way through the whole stack to userland, > > > the protection cannot be offloaded to lower layers nor to an external > > > device. This remains a pretty big concern to me. > > > > The design only requires cooperation between the device that generates the > > Retry and the eventual endpoint. That doesn't require heavy processing > > before offload. As Ian says, there is work going on to formalize a protocol > > between the two, but this could be an extremely simple process if you want to > > keep the two at arms length. > > I've read Martin's proposal when he sent it a few months ago. But honestly > I think the proposal tries hard to work around some protocol weaknesses > that were purposely created to prevent linkability, and I remain convinced > that all of this is not heading in the right direction. > > I think that another approach would be to let the server ask enforce some > verifiable computational cost on the client. For example, an initial packet > could contain a 32-bit nonce and a 32-bit hash of the header+nonce. The > server would demand that the hash starts with a given number of zeroes > (i.e. the hash is inferior to a limit). The default value could for example > be 8 zeroes, meaning the client on average needs to try 256 different nonces > before finding a valid hash. For the server, this means that when an initial > packet comes, it just has to check the hash. If it doesn't match, no need to > parse the packet nor to even reply. If the server is under heavy load or > attack, it could send back a retry packet indicating how many zeroes it > expects in the hash (e.g. try again with at least 12 zeroes, or 4096 tries). > Just like an MTU, the expected number of zeroes for a server could be saved > locally for future connections. There is an implicit assumption here that special devices are needed to deal with DDoS attacks. That assumption is wrong. See https://blog.cloudflare.com/meet-gatebot-a-bot-that-allows-us-to-sleep/ for an approach that is far more capital efficient. You can drop oodles and oodles of packets in eBPF filters. If you want to go to kernel bypass you might be able to drop even more, and line rate FPGA is doable at 40Gbits. Cloudflare doesn't do that, but I've talked to some organizations that have for some other services. Now let's consider the cost of responding to a QUIC ServerHello. It is one signature and one ECDHE exchange. One core can do 500,000 of those a second. A beefy server can devote two cores to the task of handling the flood of a million packets per second, and the other 22 to other miscellany. Are you sure there is a problem here? Sincerely, Watson Ladd From nobody Fri Jul 19 23:09:34 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3F6591200D7 for ; Fri, 19 Jul 2019 23:09:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Eq7mKmapLHhm for ; Fri, 19 Jul 2019 23:09:30 -0700 (PDT) Received: from mail-lf1-x12d.google.com (mail-lf1-x12d.google.com [IPv6:2a00:1450:4864:20::12d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A2DA91200B4 for ; Fri, 19 Jul 2019 23:09:29 -0700 (PDT) Received: by mail-lf1-x12d.google.com with SMTP id u10so23134034lfm.12 for ; Fri, 19 Jul 2019 23:09:29 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=1x5LpkEvzX1BSiuhDX5KEzWsF1BRrxFAjm7VmNPkrwQ=; b=WEUo0mAkDCVcHDlOghJ7sXQOMbfO2VBLt3kAxJP9reT1QC1tdg+XOPS23dGnJu7Zjo mvBhAtsXw/92JOnpcBjvifMC1S6xdw+ktltsyZSEPY/90gqUAUgYcg0BTqevrUQWXePN Q4qnAwUIiXZ2rtC0EV2iQ1VorXrs0ofH30FMrm4D1eKY8aUupw49nP86tzlq8Vx2ZJNZ biEyVcATgwGLQA5LIl6gwkqK9N5sfJNr1NvrKqNe/rn1YTKnySZgaTGPOoiavv4WH3HE 3QXjjf0FC/kUDQ9Aqeoeqm2+1+/f0kHpGap1bsPKsfg2qAGUv5emHyPU0ybUEaSxO9fO MV8A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=1x5LpkEvzX1BSiuhDX5KEzWsF1BRrxFAjm7VmNPkrwQ=; b=fWaMDCTZBn1iS90cjcFUibSf/Va68x7TLwg0dLla1/W35czDRNpSKZS6Ny98HZTm71 98AdBym0854xAK13QUW8ex+zQSfGMkAxBQ+K/QefdPN9Qu6CbbW7/55J2nbeNrHRHRLa aWk2BLYf4ygacFMpatNtz9V2fWleqRKLlfJGlzFlF+ZSgUBcxifCtmbllKu1oCD6ITpx KhqhzyLvvkeu/Pit4x2GoJoGAQIUcyb2fWpru+f8Wnr3yYZuvyCPo7gDjQgysukAy/7n ibUXjr/IJGz/4lubYZnQox7+PUJgAU63DVqTz4EV7QroUVa/I4adp4yzZiro38UTm9HY LzLQ== X-Gm-Message-State: APjAAAXryT6bU2UiqGldjOsPzMptUwKHurdmRgjGeUTZ4ZpDKo+eSOHs IsvQW4L3hfQyVjG+TPvCjRPvSxEte548WWPEDCA= X-Google-Smtp-Source: APXvYqzPhZe3QPbJuTZ2eqFc0kU9siYB6Dz2xaODj7Ev25nHm7ig2MfiCSosVt+EY2Uei9MsgteILOTmr2fwj432uyY= X-Received: by 2002:ac2:568e:: with SMTP id 14mr26360811lfr.189.1563602967604; Fri, 19 Jul 2019 23:09:27 -0700 (PDT) MIME-Version: 1.0 References: <21E3AE84-02C5-4943-A88E-B62329E21002@one.verizon.com> <20190719160432.GC23718@1wt.eu> <774b4cb6-2037-40ed-b02a-42011cb50484@www.fastmail.com> <20190720050647.GA24279@1wt.eu> In-Reply-To: From: Watson Ladd Date: Fri, 19 Jul 2019 23:09:16 -0700 Message-ID: Subject: Re: DoS-ing QUIC servers is too easy To: Willy Tarreau Cc: Martin Thomson , IETF QUIC WG , brent.bilger@verizon.com Content-Type: text/plain; charset="UTF-8" Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 20 Jul 2019 06:09:32 -0000 On Fri, Jul 19, 2019 at 10:53 PM Watson Ladd wrote: > > On Fri, Jul 19, 2019 at 10:07 PM Willy Tarreau wrote: > > > > Hi Martin! > > > > On Fri, Jul 19, 2019 at 02:10:29PM -0400, Martin Thomson wrote: > > > On Fri, Jul 19, 2019, at 12:04, Willy Tarreau wrote: > > > > Hi Ian, > > > > > > > > On Fri, Jul 19, 2019 at 11:31:26AM -0400, Ian Swett wrote: > > > > > QUIC's Retry token is designed for this purpose. I believe that should be > > > > > sufficient and make QUIC equivalent to TCP. > > > > > > > > The important difference is that only the QUIC stack can process this, > > > > so the packet has to pass all the way through the whole stack to userland, > > > > the protection cannot be offloaded to lower layers nor to an external > > > > device. This remains a pretty big concern to me. > > > > > > The design only requires cooperation between the device that generates the > > > Retry and the eventual endpoint. That doesn't require heavy processing > > > before offload. As Ian says, there is work going on to formalize a protocol > > > between the two, but this could be an extremely simple process if you want to > > > keep the two at arms length. > > > > I've read Martin's proposal when he sent it a few months ago. But honestly > > I think the proposal tries hard to work around some protocol weaknesses > > that were purposely created to prevent linkability, and I remain convinced > > that all of this is not heading in the right direction. > > > > I think that another approach would be to let the server ask enforce some > > verifiable computational cost on the client. For example, an initial packet > > could contain a 32-bit nonce and a 32-bit hash of the header+nonce. The > > server would demand that the hash starts with a given number of zeroes > > (i.e. the hash is inferior to a limit). The default value could for example > > be 8 zeroes, meaning the client on average needs to try 256 different nonces > > before finding a valid hash. For the server, this means that when an initial > > packet comes, it just has to check the hash. If it doesn't match, no need to > > parse the packet nor to even reply. If the server is under heavy load or > > attack, it could send back a retry packet indicating how many zeroes it > > expects in the hash (e.g. try again with at least 12 zeroes, or 4096 tries). > > Just like an MTU, the expected number of zeroes for a server could be saved > > locally for future connections. > > There is an implicit assumption here that special devices are needed > to deal with DDoS attacks. That assumption is wrong. See > https://blog.cloudflare.com/meet-gatebot-a-bot-that-allows-us-to-sleep/ > for an approach that is far more capital efficient. You can drop > oodles and oodles of packets in eBPF filters. If you want to go to > kernel bypass you might be able to drop even more, and line rate FPGA > is doable at 40Gbits. Cloudflare doesn't do that, but I've talked to > some organizations that have for some other services. > > Now let's consider the cost of responding to a QUIC ServerHello. It is > one signature and one ECDHE exchange. One core can do 500,000 of those > a second. A beefy server can devote two cores to the task of handling > the flood of a million packets per second, and the other 22 to other > miscellany. Unfortunately I was off by three orders of magnitude (prefix confusion). A core can only do 7,000 of these per second, so you would need some more servers to handle the million packet flood with complete responses (vs. filtering the attacking machines). The conclusion that commodity hardware can filter DDoS beyond that rate I do stand by. > > Are you sure there is a problem here? > > Sincerely, > Watson Ladd -- "Man is born free, but everywhere he is in chains". --Rousseau. From nobody Fri Jul 19 23:37:19 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id ED9B51206E3 for ; Fri, 19 Jul 2019 23:37:17 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MU9WL3_A_mLD for ; Fri, 19 Jul 2019 23:37:15 -0700 (PDT) Received: from mail-yb1-xb36.google.com (mail-yb1-xb36.google.com [IPv6:2607:f8b0:4864:20::b36]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 95F1F1204AB for ; Fri, 19 Jul 2019 23:37:14 -0700 (PDT) Received: by mail-yb1-xb36.google.com with SMTP id x188so8713940yba.8 for ; Fri, 19 Jul 2019 23:37:14 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=pkKDvL18ByFo2uJ/1AofpdGDvr8/7+yQWmHarGqv+IY=; b=hJGRsNLs8FQJz3n0XQXFhVMk2dkGxPt/sLF9IYJTviDJEGC5X6HILYuuxzaKUfhkr5 f7LjODrqhmUi5BlipTNivvsD0Vxp5WyS5SczonAcIhzYEFPwACNkAGLsdaVDboYFq93a jbjm/VgLIkem9QGLpVA3+q8hy8Ip4riIIkID6wZWGfRhyocuo839OUo0Xqo95dcVTgVb o0x/0H6/fB+jErp94Wp374thtjqTNDKqKoBRiZrYBWtagngFBqWPKJ5eWEFL0UEVh1Ru ghb/SeSkrqw9y3g8FvO/bGChMh8PQT+a9oLDSHa6vaDkhcteTJzq8S0huDBfdQpV/PvB h+OQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=pkKDvL18ByFo2uJ/1AofpdGDvr8/7+yQWmHarGqv+IY=; b=VMow7TPRrR88KCn2T4rtdz/cdIEWNUkdKSU6KTYHeMhS4AkmtCusc7+4YcMc3xIXob YPFolripOjKv46Zme1DLJpArdmtZG72Uy6zapVtA7w/MsMLwtsWxf7ECIug3R02ncD0j REijUfJqTUP/72bJCTRh/3mUmhLRpLu54lECroF4f+PlmA4iNF7JIv1lnm8giPbsGLHR 5AkK9MsG/CpzxBNq9zs5o+tuhokClipw184AnqJPtS2RggxAfZ020jvPZmgI5JC7N+0g 4f9YDeA3i6L2zgXQq2QBMy5cIHw/zIZyRavDg3S9p+VZnQ3EWfWjTMJltKDYZUWRX9w8 r/mQ== X-Gm-Message-State: APjAAAX+accMVkVzmF1jnTKZPr8jYRWTVTm5pUjUdkyFL6cH/mH+HHWY eIYPLgDG1DvUipSPuZue4qUxw7mIhoUJ+HzvUIJykvri X-Google-Smtp-Source: APXvYqyKBn7i88ufgJOPbX12j6XHzzCRKRRgtn3/C7eP1UcO2QB5d9fA+ttTM1DjfWz1lt1EQWIjwtD3AZH63KzOCbk= X-Received: by 2002:a5b:792:: with SMTP id b18mr20985511ybq.498.1563604633458; Fri, 19 Jul 2019 23:37:13 -0700 (PDT) MIME-Version: 1.0 References: <21E3AE84-02C5-4943-A88E-B62329E21002@one.verizon.com> In-Reply-To: From: =?UTF-8?Q?T=C3=B6ma_Gavrichenkov?= Date: Sat, 20 Jul 2019 09:37:00 +0300 Message-ID: Subject: Re: DoS-ing QUIC servers is too easy To: William Herrin Cc: Ian Swett , "quic@ietf.org" , brent.bilger=40verizon.com@dmarc.ietf.org Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 20 Jul 2019 06:37:18 -0000 On Sat, Jul 20, 2019 at 3:57 AM William Herrin wrote: >> However, mitigating a Server Hello DDoS attack towards a _client_ is >> very complicated (if even possible) with QUIC, as opposed to TCP with >> SYN/ACK floods. > > Would you elaborate on this? Considering that the quic client employs > an ephemeral UDP port, what is the quic-specific threat model here? That's a big assumption already. Another (implicit) assumption is that the ephemeral port generation algorithm built into a device implements randomness properly (which is especially complicated in IoT). https://tools.ietf.org/html/draft-gont-numeric-ids-generation-04 But anyway, ephemeral port number consists of just 15 bits and is prone to brute force. In TCP, we had initial sequence number which could've been changed by a device near the border of the network, along with the port, to ensure those are random enough, and that's already 47 bits. In QUIC, I don't see any way to reliably protect the network border from such incidents without just blackholing the device. -- T=C3=B6ma From nobody Fri Jul 19 23:51:33 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C113C1206E3 for ; Fri, 19 Jul 2019 23:51:31 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ddTcikL_KT_1 for ; Fri, 19 Jul 2019 23:51:30 -0700 (PDT) Received: from mail-yb1-xb33.google.com (mail-yb1-xb33.google.com [IPv6:2607:f8b0:4864:20::b33]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DB7C11200DB for ; Fri, 19 Jul 2019 23:51:29 -0700 (PDT) Received: by mail-yb1-xb33.google.com with SMTP id j199so13342868ybg.5 for ; Fri, 19 Jul 2019 23:51:29 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=O08SXDybE4tmBG+fQHaLcojRA6q5D5PpE5OMhU7KVbY=; b=u2Th6DpB5s8u5d5wEWqO2EWK79+MVRATMlJFxA/bah3LddkJbcdxHzdFTucNb4QZ0U CKcwocc9hWQ9f9EGKdA3YQXHsfVmtVTb/PDhRP112SzwWZ1AdgxFiirPUYjh0cqUEIfY qzGO11DNc2Z0nu84G9zPdHPIJZzOEVMxiQTSOco6KOaRfhFyumSdpsmARVZQ4T55Qdaz 1M2zN3V3hWsAnpTbA06KsTbfPM2eZ/XM009n1Pejinty+zDYIMbWa7Px8cX/lFRu9UUC zsP7qQUf/P3AeXSQ1kIANvKuqHWfXWoVF6GdkiU0q01fr1i9HJ2OwphAjIXpZ1opk6ut CqoA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=O08SXDybE4tmBG+fQHaLcojRA6q5D5PpE5OMhU7KVbY=; b=V4rbPNGtO8fePV5iRqTa0CY55Usr8S91vMmI4HVZraH0QMNcVvRSd9dciJ0iaGAc2B ClwN82P1YhcFGRQXUsRwBTEPnHksStOG/yyamphm5SYm4LT0wpLhFM2OokFBlGxj7ZHE 1HFLgygIb4DHzUoZShE/1gvie+0tKU0wi5CLE5yXrHZZFaPoKoQ+WXpImUG2GmkXPKy1 uMy9xfhGY6+JJHaGHfWL5HeITsnwChvBnPffAPTPfzcxguGIGsKELBasuRNCPd/c2wRk X2v7FU8iHDWSJfsX+ewQZ7PYG2FR7asTIaIJYgQOiCOeYrqnVJp0QsXGiwstcJVwBKgG deLg== X-Gm-Message-State: APjAAAVWiYAsrPlk119FrI94ESarjGhHmsRI7+rMgq8GINVpTVGrJa6X TTvaQ1NtCQvimusm2ejRC0AglDjfsXILVX9SUtE= X-Google-Smtp-Source: APXvYqw8x8IIjzJq5c80IH/HrzYFDEb1V9Ad4+J73Nc9/I5Y2UDmi/7hNzQX1/U5bo7PvKV3OeZXjOrBDcufLi6qpRY= X-Received: by 2002:a25:9988:: with SMTP id p8mr35837585ybo.183.1563605488921; Fri, 19 Jul 2019 23:51:28 -0700 (PDT) MIME-Version: 1.0 References: <21E3AE84-02C5-4943-A88E-B62329E21002@one.verizon.com> <20190719160432.GC23718@1wt.eu> <774b4cb6-2037-40ed-b02a-42011cb50484@www.fastmail.com> <20190720050647.GA24279@1wt.eu> In-Reply-To: From: =?UTF-8?Q?T=C3=B6ma_Gavrichenkov?= Date: Sat, 20 Jul 2019 09:51:16 +0300 Message-ID: Subject: Re: DoS-ing QUIC servers is too easy To: Watson Ladd Cc: Willy Tarreau , IETF QUIC WG , brent.bilger@verizon.com, Martin Thomson Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 20 Jul 2019 06:51:32 -0000 On Sat, Jul 20, 2019 at 9:09 AM Watson Ladd wrote: > A core can only do 7,000 of these per second, so you > would need some more servers to handle the million packet flood with > complete responses (vs. filtering the attacking machines). You would need multiple servers anyway, because the world has seen incidents over 1 Tbps (and even 400GbE is still just not there by the way). For instance, SYN flood attack seen by Cloudflare in April 2018 topped 942 Gbps with approximately 1000-octet packets (which is also an evidence bandwidth isn't a bottleneck for SYN floods, packet rate is). https://blog.cloudflare.com/the-rise-of-multivector-amplifications/ You cannot handle that in a single machine. -- T=C3=B6ma From nobody Fri Jul 19 23:58:10 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C9E2312002F for ; Fri, 19 Jul 2019 23:58:09 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9RekL2CFd6j6 for ; Fri, 19 Jul 2019 23:58:06 -0700 (PDT) Received: from mail-lf1-x12b.google.com (mail-lf1-x12b.google.com [IPv6:2a00:1450:4864:20::12b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 832F7120043 for ; Fri, 19 Jul 2019 23:58:06 -0700 (PDT) Received: by mail-lf1-x12b.google.com with SMTP id q26so23234527lfc.3 for ; Fri, 19 Jul 2019 23:58:06 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=bZWniInszNgWCCothQ6Pny0RTQ0zFIUGmuaXg6877SA=; b=giDpXvHjVpSIJOK6t/N8R4fyeM25MXVuNJiS6vip0TizKgSqYsUAGIF/Ixvi42jboq /fkCfRX850OWsyXa9ZyVqxcaOdfNZT2jxFrzX8Xb59vMzhNT7TqLkItZsaMBGEeWtuiq KaNl+Y/LutlKD/IUdcwrEHzoSA8mMfuBO4VhgNqSvR05I6OViwEYcTv3hEeyc/1i4KYF ysVJ8pfXa5hEHadL+44LDfDUApJZFCaBzLQDRemqQwDUZPpLb1D7+QOJqWr35/pfVeKy HxpWy52mco6gVBrFrnjBa5YL/+YyhDQsOY1arbxATO0lg/kEAd6iNnE7a/9Y53rwLs3z 5rJw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=bZWniInszNgWCCothQ6Pny0RTQ0zFIUGmuaXg6877SA=; b=N3MiAKPzeu64wN5M7Aqf7AhpBTTEzH/DA+aXjO3z3M+qHg+zYOFe+Ar5ZiPu+2ybXx uPk1B4pTzpVAq8ln015VW1nF7jOKiw1CxUKi1pNRbqBuQbFIfEOx4kfjo5KvJwYf14fg D65uHZy40sW8mJsubLr/KGjqU4OnhEmOsa+v0C6AYWuNl0Xs/fZBIuyjBa/WiaDhunaV VN9gOA5qH0QSNQwOozypWk4oj0aS/ujihU4rt4W+rkSEDxBlWCSPsc0JQNHlsz4MAy+t tuSpTo2U2MHhH40cVUfqHw6G35eEqXzjBUPTrvhVNm6gX6tdtNwHifzL6D1CByKPlYbp hlDw== X-Gm-Message-State: APjAAAV2jNn8BSMR/u+FwbrAzdlij5X4wS5perU0nGObii7YvKUjXZG5 z19TvaEMXlfFk68BDgumEDb0NW0mwqB4kSlpC4U= X-Google-Smtp-Source: APXvYqwH4AayiNvapoavLql5++om2uZbRdWQ1Xw79wdgHJps5hsJ3ccSrKUzVZ7CfgGz6ZR71JTve2gtHPTkjKnrYsc= X-Received: by 2002:ac2:51ab:: with SMTP id f11mr12963313lfk.55.1563605884687; Fri, 19 Jul 2019 23:58:04 -0700 (PDT) MIME-Version: 1.0 References: <21E3AE84-02C5-4943-A88E-B62329E21002@one.verizon.com> In-Reply-To: From: Watson Ladd Date: Fri, 19 Jul 2019 23:57:53 -0700 Message-ID: Subject: Re: DoS-ing QUIC servers is too easy To: =?UTF-8?Q?T=C3=B6ma_Gavrichenkov?= Cc: William Herrin , "quic@ietf.org" , brent.bilger=40verizon.com@dmarc.ietf.org, Ian Swett Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 20 Jul 2019 06:58:10 -0000 On Fri, Jul 19, 2019 at 11:37 PM T=C3=B6ma Gavrichenkov = wrote: > > On Sat, Jul 20, 2019 at 3:57 AM William Herrin wrote: > >> However, mitigating a Server Hello DDoS attack towards a _client_ is > >> very complicated (if even possible) with QUIC, as opposed to TCP with > >> SYN/ACK floods. > > > > Would you elaborate on this? Considering that the quic client employs > > an ephemeral UDP port, what is the quic-specific threat model here? > > That's a big assumption already. Another (implicit) assumption is > that the ephemeral port generation algorithm built into a device > implements randomness properly (which is especially complicated in > IoT). > > https://tools.ietf.org/html/draft-gont-numeric-ids-generation-04 > > But anyway, ephemeral port number consists of just 15 bits and is > prone to brute force. In TCP, we had initial sequence number which > could've been changed by a device near the border of the network, > along with the port, to ensure those are random enough, and that's > already 47 bits. In QUIC, I don't see any way to reliably protect the > network border from such incidents without just blackholing the > device. Isn't the Connection ID just such a thing? Looking at https://tools.ietf.org/html/draft-ietf-quic-transport-22#section-7.2 in conjunction with 17 the server sends a packet with the destination ID that the client told it to use. > > -- > T=C3=B6ma > --=20 "Man is born free, but everywhere he is in chains". --Rousseau. From nobody Sat Jul 20 00:06:19 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 48D4A120043 for ; Sat, 20 Jul 2019 00:06:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UGb1A5fvEhCL for ; Sat, 20 Jul 2019 00:06:16 -0700 (PDT) Received: from mail-yw1-xc2d.google.com (mail-yw1-xc2d.google.com [IPv6:2607:f8b0:4864:20::c2d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2393A12002F for ; Sat, 20 Jul 2019 00:06:16 -0700 (PDT) Received: by mail-yw1-xc2d.google.com with SMTP id l79so14224346ywe.11 for ; Sat, 20 Jul 2019 00:06:16 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=uijbFmv2YyVedBTgp2Yke6eI7jyO1nmw/4vWaR5SeT8=; b=ZvcyTsHGV/U0V0NNZT+HS+VRHevEzbWSP76KaX6OpV95XLRqbKojg7sRjOb7fdW7vl uyfS5t8I2x3VuZOySz9aSrbETtPturi++b5dU4RDXKgTn/qjbjng4ZL9KyB5zCHIku5Z f6dPoAfiVLF2AOoUivDfQLd9b2Zkg/9ElYgeRJbtleZZFMgF7AqnQ6vIjXG+I7OIJLfW Gz9na5r55uBMHToEpGcizCpsFAPzraSGG9QZYu0epEU4j8XEPyihlnX1QH7xoooLsLiV BsRL+SYSc7RUdZ9a35ZUL2mjzw1oQvl6cWytNa33YYyuodbONSw5oSAJkui92Nqpgc42 iFuQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=uijbFmv2YyVedBTgp2Yke6eI7jyO1nmw/4vWaR5SeT8=; b=Of4bazbglIbrhECdj7F7KqCVobezRgHMUPtRfj0y7azq50I9YRi+oEmwTFWHpGyTJG zvEYel7PQySX0N6JCZZztl1J6IUS6Qa2gZutSH89lT11WF+dHvzvsfvYlnmRxEjNUcA5 LMxDMg4ooqmTYfGbAxA2fU48GCLCkVwCzEZixwDbS/vmeB6oSGPGjnHaP4npKBJFhWA0 9Bh7GrWX0o/ctPix5Sodb1k0Mvgzs0NtCmpCbBsLZq2Rmd4gYyasqL5VVSXpRhJosQXJ Hxws1V6yLjrxP4KDCcWtqJorib1XofdIvMtbFBKMS7+O5dbPd5S/6miQtJIb8Vk090o0 7oXw== X-Gm-Message-State: APjAAAUxvehioEnAqDrTRlPYWtpA3HicgNeCy8INVgtmZJLmDg13jB5i ArjIhdkV4xie2r6d4DCuKRu/+c9GPcRYz/VHsHE= X-Google-Smtp-Source: APXvYqwVhyW2Wi3WBVDEUXeb8Y4OLQplcacRhlpSjQ+jjTOXrLaSPjYBgP5uKs1hm3eyn9D02GUSeHqOeho5u+GDwMA= X-Received: by 2002:a81:e24c:: with SMTP id z12mr34529333ywl.175.1563606375105; Sat, 20 Jul 2019 00:06:15 -0700 (PDT) MIME-Version: 1.0 References: <21E3AE84-02C5-4943-A88E-B62329E21002@one.verizon.com> In-Reply-To: From: =?UTF-8?Q?T=C3=B6ma_Gavrichenkov?= Date: Sat, 20 Jul 2019 10:06:01 +0300 Message-ID: Subject: Re: DoS-ing QUIC servers is too easy To: Watson Ladd Cc: William Herrin , "quic@ietf.org" , brent.bilger=40verizon.com@dmarc.ietf.org, Ian Swett Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 20 Jul 2019 07:06:18 -0000 On Sat, Jul 20, 2019 at 9:58 AM Watson Ladd wrote: > Isn't the Connection ID just such a thing? No. Could be zero. Also, the issue with predictable IDs is still there. -- T=C3=B6ma From nobody Sat Jul 20 00:26:17 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D7F911200DB for ; Sat, 20 Jul 2019 00:26:15 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.903 X-Spam-Level: X-Spam-Status: No, score=-1.903 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, HTML_OBFUSCATE_10_20=0.093, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 84bp5sJ9whJ2 for ; Sat, 20 Jul 2019 00:26:14 -0700 (PDT) Received: from mail-ed1-x52d.google.com (mail-ed1-x52d.google.com [IPv6:2a00:1450:4864:20::52d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1AC3912002E for ; Sat, 20 Jul 2019 00:26:14 -0700 (PDT) Received: by mail-ed1-x52d.google.com with SMTP id r12so1492534edo.5 for ; Sat, 20 Jul 2019 00:26:14 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:in-reply-to:references:mime-version:date:message-id:subject:to :cc; bh=iN3Rk4InuWdJJoYJMv5VlDWJms43CM20Xes72PjG8nQ=; b=QqLubU1PAANa3Uw4mUJ1pBFotKvciEx7nkFv5pLRH6faxQvWfZyIrap9kl380+rOcq 7QDrZRgMCnHDOyc4I5oyBJHaPeWYrpZEeD/nsl2l8jrdnn/ZdnHMaFTlzRaaxXrSpdf4 aqV7nARet/9YbNKLT1FWY6E7Q+6ADmZOp6zsqxAFllr8f3nWZPZw3xwHygVv7+ywKe0p XuTWeWIiA8etS3RJ0gaGU7FfvuX3scs8Gzx2cnEsptMJSGO7hTyTKI7meVi0/8nFdEfT IWg1ubhbB1OeyWBtN6OFGQc6b991WxbBpyDBA/Fz73KEmVVSIXsmu1JXrn9NCpIN+aNZ SAPw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:in-reply-to:references:mime-version:date :message-id:subject:to:cc; bh=iN3Rk4InuWdJJoYJMv5VlDWJms43CM20Xes72PjG8nQ=; b=UneYsLXO65uP2w7lRuDd6ErsPC2o4xkf4RoeQ25pN/H9dOQEfl1dUYBo6DAiOYI2hb f2bxPBXg8R8YANpRJfpSTeLNuGkoEwpWQt7RlmN3w0gyy7PDXPlwp3CGITssOILRsRGU J92DyrMRaWDSph+6TOzOwfb0hHrmZozIlWeiORSqHHB9C2JgZQ21XRJFlRt48x0+dc5Z czGfb95grAjRmA2RpRlgTbAeTdybI6f5qRPPJgB5VIHdI+JQ63sIO0jfGWTawXJ1Ybl6 SBca9ssVOc7SdzM95ShBY+7GzebUzKLUjwzZSNODRwYJYl/iGuRF2StGp9fZboszc66s pdYg== X-Gm-Message-State: APjAAAX4irwT2WpZL5fy9z1ip/5GUcost2zWpUnUaY/wfFyS7uGpDQz0 5Qr6ls4CCt22io2BB7CBCbosWcN2i5uJfRyzXuY= X-Google-Smtp-Source: APXvYqwo0y3dNY788fGFYOq87R0jmETBuTewZ4Uhd9dIR6cnsjK58u5wUzAcEfkxhJD4EGmeW9xlmlHMd2jFYqkI+Ro= X-Received: by 2002:a50:a56b:: with SMTP id z40mr49097010edb.99.1563607572680; Sat, 20 Jul 2019 00:26:12 -0700 (PDT) Received: from 1058052472880 named unknown by gmailapi.google.com with HTTPREST; Sat, 20 Jul 2019 00:26:11 -0700 From: =?UTF-8?Q?Mikkel_Fahn=C3=B8e_J=C3=B8rgensen?= In-Reply-To: <20190720050647.GA24279@1wt.eu> References: <21E3AE84-02C5-4943-A88E-B62329E21002@one.verizon.com> <20190719160432.GC23718@1wt.eu> <774b4cb6-2037-40ed-b02a-42011cb50484@www.fastmail.com> <20190720050647.GA24279@1wt.eu> X-Mailer: Airmail (420) MIME-Version: 1.0 Date: Sat, 20 Jul 2019 00:26:11 -0700 Message-ID: Subject: Re: DoS-ing QUIC servers is too easy To: Martin Thomson , Willy Tarreau Cc: brent.bilger@verizon.com, quic@ietf.org Content-Type: multipart/alternative; boundary="000000000000f01368058e17c180" Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 20 Jul 2019 07:26:16 -0000 --000000000000f01368058e17c180 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On 20 July 2019 at 07.07.06, Willy Tarreau (w@1wt.eu) wrote: I think that another approach would be to let the server ask enforce some verifiable computational cost on the client. For example, an initial packet could contain a 32-bit nonce and a 32-bit hash of the header+nonce. The server would demand that the hash starts with a given number of zeroes (i.e. the hash is inferior to a limit). The default value could for example be 8 zeroes, meaning the client on average needs to try 256 different nonce= s before finding a valid hash. You need to make that hash a hmac or similar with a pre-shared key, or an extra roundtrip, otherwise you just use a precomputed table. With a roundtrip this would be an extension to Retry, with a pre-shared key it is somewhat similar to my earlier email where you sign the OCID, but here you don=E2=80=99t need proof-of-work, only proof-of-ownership (of the key). Mikkel --000000000000f01368058e17c180 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable = On 20 July 2019 at 0= 7.07.06, Willy Tarreau (w@1wt.eu) wrote:

<= div>
I think that another approach would be to let the serve= r ask enforce some=C2=A0
ve= rifiable computational cost on the client. For example, an initial packet=C2=A0
could contain a 32-bit= nonce and a 32-bit hash of the header+nonce. The=C2=A0
server would demand that the hash starts with = a given number of zeroes=C2=A0=
(i.e. the hash is inferior to a limit). The default value could for exa= mple=C2=A0
be 8 zeroes, mea= ning the client on average needs to try 256 different nonces=C2=A0
before finding a valid hash.
<= /div>

You need to make that hash a hmac or simi= lar with a pre-shared key, or an extra roundtrip, otherwise you just use a = precomputed table.=C2=A0 With a roundtrip this would be an extension to Ret= ry, with a pre-shared key it is somewhat similar to my earlier email where = you sign the OCID, but here you don=E2=80=99t need proof-of-work, only proo= f-of-ownership (of the key).


Mikkel

--000000000000f01368058e17c180-- From nobody Sat Jul 20 08:36:18 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6DCF21200DE for ; Sat, 20 Jul 2019 08:36:17 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=verizon.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XW7z935RX1b5 for ; Sat, 20 Jul 2019 08:36:15 -0700 (PDT) Received: from smtpout1-tdc.verizon.com (smtpout1-tdc.verizon.com [137.188.104.133]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 505D8120094 for ; Sat, 20 Jul 2019 08:36:15 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=verizon.com; i=@verizon.com; q=dns/txt; s=corp; t=1563636975; x=1595172975; h=to:subject:date:message-id:references:in-reply-to: mime-version:from:cc; bh=cjprCMEbaoWbWasQLpRXaDdeq80iDcjP+G+sGtnHJ24=; b=s3ZwfcOQwn4QsFNqTGz3B48JbmdZZNbGjTPMxMWFckPqR2t5uwJLPWQC bUahbhv7kg669wNWrrx36IUu99Ve3Lw2GvQuB94Xegnk4Fy0BQvpMsLYt +80NGSWx41f9i1/8CbYbsDIL2Dt7nNAdZj4+eCmLlNKVN2DWr+ikVvMon Y=; From: brent.bilger@verizon.com Cc: Martin Thomson , Willy Tarreau , brent.bilger@verizon.com, "quic@ietf.org" Received: from tbwexch02apd.uswin.ad.vzwcorp.com ([153.114.162.26]) by smtpout1-tdc.verizon.com with ESMTP/TLS/ECDHE-RSA-AES256-SHA384; 20 Jul 2019 15:36:13 +0000 Received: from scwexch02apd.uswin.ad.vzwcorp.com (153.114.130.21) by tbwexch02apd.uswin.ad.vzwcorp.com (153.114.162.26) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Sat, 20 Jul 2019 11:36:13 -0400 Received: from scwexch05apd.uswin.ad.vzwcorp.com (153.114.130.24) by scwexch02apd.uswin.ad.vzwcorp.com (153.114.130.21) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Sat, 20 Jul 2019 08:36:11 -0700 Received: from scwexch05apd.uswin.ad.vzwcorp.com ([153.114.130.24]) by scwexch05apd.uswin.ad.vzwcorp.com ([153.114.130.24]) with mapi id 15.00.1473.003; Sat, 20 Jul 2019 08:36:11 -0700 To: =?utf-8?B?TWlra2VsIEZhaG7DuGUgSsO4cmdlbnNlbg==?= Subject: Re: [E] Re: DoS-ing QUIC servers is too easy Thread-Topic: [E] Re: DoS-ing QUIC servers is too easy Thread-Index: AQHVPku4QKWlgc42c0a3wiyQHOEV66bS9VRpgACcPICAAIjmAA== Date: Sat, 20 Jul 2019 15:36:11 +0000 Message-ID: <30260D58-49CB-4B8F-92A0-0036E2BA8952@one.verizon.com> References: <21E3AE84-02C5-4943-A88E-B62329E21002@one.verizon.com> <20190719160432.GC23718@1wt.eu> <774b4cb6-2037-40ed-b02a-42011cb50484@www.fastmail.com> <20190720050647.GA24279@1wt.eu> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.11.60.250] Content-Type: multipart/alternative; boundary="_000_30260D5849CB4B8F92A00036E2BA8952oneverizoncom_" MIME-Version: 1.0 Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 20 Jul 2019 15:36:17 -0000 --_000_30260D5849CB4B8F92A00036E2BA8952oneverizoncom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 DQoNCk9uIEp1bCAyMCwgMjAxOSwgYXQgMTI6MjYgQU0sIE1pa2tlbCBGYWhuw7hlIErDuHJnZW5z ZW4gPG1pa2tlbGZqQGdtYWlsLmNvbTxtYWlsdG86bWlra2VsZmpAZ21haWwuY29tPj4gd3JvdGU6 DQoNCk9uIDIwIEp1bHkgMjAxOSBhdCAwNy4wNy4wNiwgV2lsbHkgVGFycmVhdSAod0Axd3QuZXU8 bWFpbHRvOndAMXd0LmV1Pikgd3JvdGU6DQoNCkkgdGhpbmsgdGhhdCBhbm90aGVyIGFwcHJvYWNo IHdvdWxkIGJlIHRvIGxldCB0aGUgc2VydmVyIGFzayBlbmZvcmNlIHNvbWUNCnZlcmlmaWFibGUg Y29tcHV0YXRpb25hbCBjb3N0IG9uIHRoZSBjbGllbnQuIEZvciBleGFtcGxlLCBhbiBpbml0aWFs IHBhY2tldA0KY291bGQgY29udGFpbiBhIDMyLWJpdCBub25jZSBhbmQgYSAzMi1iaXQgaGFzaCBv ZiB0aGUgaGVhZGVyK25vbmNlLiBUaGUNCnNlcnZlciB3b3VsZCBkZW1hbmQgdGhhdCB0aGUgaGFz aCBzdGFydHMgd2l0aCBhIGdpdmVuIG51bWJlciBvZiB6ZXJvZXMNCihpLmUuIHRoZSBoYXNoIGlz IGluZmVyaW9yIHRvIGEgbGltaXQpLiBUaGUgZGVmYXVsdCB2YWx1ZSBjb3VsZCBmb3IgZXhhbXBs ZQ0KYmUgOCB6ZXJvZXMsIG1lYW5pbmcgdGhlIGNsaWVudCBvbiBhdmVyYWdlIG5lZWRzIHRvIHRy eSAyNTYgZGlmZmVyZW50IG5vbmNlcw0KYmVmb3JlIGZpbmRpbmcgYSB2YWxpZCBoYXNoLg0KDQpZ b3UgbmVlZCB0byBtYWtlIHRoYXQgaGFzaCBhIGhtYWMgb3Igc2ltaWxhciB3aXRoIGEgcHJlLXNo YXJlZCBrZXksIG9yIGFuIGV4dHJhIHJvdW5kdHJpcCwgb3RoZXJ3aXNlIHlvdSBqdXN0IHVzZSBh IHByZWNvbXB1dGVkIHRhYmxlLiAgV2l0aCBhIHJvdW5kdHJpcCB0aGlzIHdvdWxkIGJlIGFuIGV4 dGVuc2lvbiB0byBSZXRyeSwgd2l0aCBhIHByZS1zaGFyZWQga2V5IGl0IGlzIHNvbWV3aGF0IHNp bWlsYXIgdG8gbXkgZWFybGllciBlbWFpbCB3aGVyZSB5b3Ugc2lnbiB0aGUgT0NJRCwgYnV0IGhl cmUgeW91IGRvbuKAmXQgbmVlZCBwcm9vZi1vZi13b3JrLCBvbmx5IHByb29mLW9mLW93bmVyc2hp cCAob2YgdGhlIGtleSkuDQoNCg0KTWlra2VsDQoNCkEgcG9zc2libGUgYXBwcm9hY2ggdG8gZGVm ZWF0aW5nIHRoaXM6DQoNCk9uZSBvZiB0aGUgbmljZSB0aGluZ3MgYWJvdXQgVURQIGlzIHRoYXQg dGhlIHNlcnZlciBjYW4gY29uc3VtZSB0aGUgZmlyc3QgZGF0YSBwYWNrZXQgYmVmb3JlIHJlcGx5 aW5nIHRvIHRoZSBDbGllbnQgKHVubGlrZSBUQ1Agd2hlcmUgdGhlIHNlcnZlciBtdXN0IFNZTi9B Q0sgYmVmb3JlIGdldHRpbmcgdGhlIGZpcnN0IGRhdGEgcGFja2V0KS4gVGhlcmVmb3JlLCBpdCBp cyBwb3NzaWJsZSB0byBoYXZlIGEgdW5pcXVlLXRvLXRoZS1jbGllbnQsIHByZS1hdXRoZW50aWNh dGlvbiAob3IgcHJlLWF1dGhvcml6YXRpb24pIHRva2VuIGluIHRoZSBmaXJzdCBwYWNrZXQuIFRo ZSBwcmVzZW5jZSBvZiBzdWNoIGEgdG9rZW4gd291bGQgaWRlbnRpZnkgdGhhdCB0aGUgY2xpZW50 IGlzIGF1dGhvcml6ZWQgdG8gY29ubmVjdCB0byB0aGUgUVVJQyBzZXJ2ZXIuIFRoZSB0b2tlbiBj b3VsZCBwb3NzaWJseSBiZSBwcm92aWRlZCB0byB0aGUgY2xpZW50IGJ5IGFuIGF1dGhvcml6YXRp b24gc2VydmVyIGJlZm9yZSB0aGUgc2Vzc2lvbi4gT3IsIGluIGFuIGVudGVycHJpc2UgZW52aXJv bm1lbnQsIGl0IGNvdWxkIGJlIHBvc3NpYmxlIHRoYXQgYSBvbmUgdGltZSBvbi1ib2FyZGluZyBj b3VsZCBwcm92aWRlIGEgbGlmZXRpbWUgb2YgdG9rZW5zLg0KDQpUaGUgdG9rZW4gY291bGQgYmUg YSBPbmUgVGltZSBQYXNzd29yZCBzdWNoIGFzIGRlc2NyaWJlZCBpbiBSRkMgNDIyNiwgd2hpY2gg dXNlcyBhIGNvbXB1dGF0aW9uYWxseSBlZmZpY2llbnQgYWxnb3JpdGhtLCBvciBjb3VsZCBiZSBz b21lIG90aGVyIHR5cGUgb2YgdG9rZW4uIEluIHNvbWUgd2F5cywgb25lIGNvdWxkIHRoaW5rIG9m IHRoaXMgbWVjaGFuaXNtIGxpa2UgU0FNTCBTaW5nbGUgU2lnbiBPbiBpbiB0aGF0IHRoZSBjbGll bnQgaXMgcHJlLWF1dGhlbnRpY2F0ZWQgdG8gY29ubmVjdCB0byB0aGUgc2VydmVyIC0ganVzdCBs aWtlIHRoZSBwcmUtYXV0aGVudGljYXRpb24gdG9rZW4gY291bGQgYmUgdXNlZCB0byBwcmUtYXV0 aG9yaXplIGEgUVVJQyBjb25uZWN0aW9uLg0KDQpGcm9tIHRoZSBzdGFuZHBvaW50IG9mIHRoZSBR VUlDIHNlcnZlciwgdGhpcyBwcmUtYXV0aGVudGljYXRpb24gdG9rZW4gY291bGQgYWxsb3cgYSBz ZXJ2ZXIgdG8gbGltaXQgdGhlIHJlc291cmNlcyBpdCBhcHBsaWVzIHRvIHRoZSBjb25uZWN0aW9u LiBJZiB0aGUgdG9rZW4gaXMgbm90IHZhbGlkLCBpdCBpbW1lZGlhdGVseSBkcm9wcyB0aGUgY29u bmVjdGlvbiB3aXRob3V0IGV4ZWN1dGluZyByZXNvdXJjZS1kZW1hbmRpbmcgY3J5cHRvZ3JhcGh5 LiBGdXJ0aGVyLCB0aGUgc2VydmVyIGJlY29tZXMgYWxtb3N0IGJsYWNrIHRvIHRoZSBuZXR3b3Jr LiBTY2FucyBvZiB0aGUgbmV0d29yayB3b3VsZCBub3QgYmUgYWNrbm93bGVkZ2VkIGJ5IHRoaXMg UVVJQyBzZXJ2ZXIgaWYgdGhlIGluaXRpYWwgcGFja2V0IGRpZCBub3QgY29udGFpbiBhIGxlZ2l0 aW1hdGUgcHJlLWF1dGhlbnRpY2F0aW9uIHRva2VuLg0KDQpUaGlzIGFwcHJvYWNoIGNvdWxkIGJl IHN1YmplY3QgdG8gYW4gZWF2ZXNkcm9wcGluZyBhdHRhY2sgaWYgdGhlIHRva2VuIHdlcmUgc3Rh dGljIG9yIGRpZCBub3QgcHJldmVudCByZXBsYXkgYXR0YWNrcywgc28gdGhlc2UgaXNzdWVzIHNo b3VsZCBiZSBjb25zaWRlcmVkIHdoZW4gZGVjaWRpbmcgb24gaG93IHRva2VucyBzaG91bGQgYmUg Y3JlYXRlZC4NCg0KDQpCcmVudCBCbGlnZXINCkRpcmVjdG9yLVRlY2hub2xvZ3kgVmVyaXpvbiBT RFANCmJyZW50LmJpbGdlckB2ZXJpem9uLmNvbTxtYWlsdG86YnJlbnQuYmlsZ2VyQHZlcml6b24u Y29tPg0KDQoNCg0KDQoNCg== --_000_30260D5849CB4B8F92A00036E2BA8952oneverizoncom_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgbGluZS1icmVhazogYWZ0 ZXItd2hpdGUtc3BhY2U7IiBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCjxkaXY+PGJyIGNsYXNz PSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPk9u IEp1bCAyMCwgMjAxOSwgYXQgMTI6MjYgQU0sIE1pa2tlbCBGYWhuw7hlIErDuHJnZW5zZW4gJmx0 OzxhIGhyZWY9Im1haWx0bzptaWtrZWxmakBnbWFpbC5jb20iIGNsYXNzPSIiPm1pa2tlbGZqQGdt YWlsLmNvbTwvYT4mZ3Q7IHdyb3RlOjwvZGl2Pg0KPGJyIGNsYXNzPSJBcHBsZS1pbnRlcmNoYW5n ZS1uZXdsaW5lIj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGlkPSJibG9vcF9jdXN0b21mb250IiBz dHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYSwgQXJpYWw7IGZvbnQtc2l6ZTogMTNweDsgZm9u dC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDog bm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1p bmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdv cmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQtZGVj b3JhdGlvbjogbm9uZTsgbWFyZ2luOiAwcHg7IiBjbGFzcz0iIj4NCk9uIDIwIEp1bHkgMjAxOSBh dCAwNy4wNy4wNiwgV2lsbHkgVGFycmVhdSAoPGEgaHJlZj0ibWFpbHRvOndAMXd0LmV1IiBjbGFz cz0iIj53QDF3dC5ldTwvYT4pIHdyb3RlOjwvZGl2Pg0KPGRpdiBpZD0iYmxvb3BfY3VzdG9tZm9u dCIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2EsIEFyaWFsOyBmb250LXNpemU6IDEzcHg7 IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWln aHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRl eHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFs OyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyB0ZXh0 LWRlY29yYXRpb246IG5vbmU7IG1hcmdpbjogMHB4OyIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+ DQo8L2Rpdj4NCjxkaXYgc3R5bGU9ImNhcmV0LWNvbG9yOiByZ2IoMCwgMCwgMCk7IGZvbnQtZmFt aWx5OiBIZWx2ZXRpY2EsIEFyaWFsOyBmb250LXNpemU6IDEzcHg7IGZvbnQtc3R5bGU6IG5vcm1h bDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVy LXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRl eHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBw eDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyB0ZXh0LWRlY29yYXRpb246IG5vbmU7 IiBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSJjbGVhbl9icSIgc3R5 bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2EsIEFyaWFsOyBmb250LXNpemU6IDEzcHg7IGZvbnQt c3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5v cm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5k ZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3Jk LXNwYWNpbmc6IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyI+DQo8c3BhbiBjbGFzcz0iIj4N CjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5JIHRo aW5rIHRoYXQgYW5vdGhlciBhcHByb2FjaCB3b3VsZCBiZSB0byBsZXQgdGhlIHNlcnZlciBhc2sg ZW5mb3JjZSBzb21lPHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9z cGFuPjxiciBjbGFzcz0iIj4NCnZlcmlmaWFibGUgY29tcHV0YXRpb25hbCBjb3N0IG9uIHRoZSBj bGllbnQuIEZvciBleGFtcGxlLCBhbiBpbml0aWFsIHBhY2tldDxzcGFuIGNsYXNzPSJBcHBsZS1j b252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48YnIgY2xhc3M9IiI+DQpjb3VsZCBjb250YWlu IGEgMzItYml0IG5vbmNlIGFuZCBhIDMyLWJpdCBoYXNoIG9mIHRoZSBoZWFkZXImIzQzO25vbmNl LiBUaGU8c3BhbiBjbGFzcz0iQXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PGJy IGNsYXNzPSIiPg0Kc2VydmVyIHdvdWxkIGRlbWFuZCB0aGF0IHRoZSBoYXNoIHN0YXJ0cyB3aXRo IGEgZ2l2ZW4gbnVtYmVyIG9mIHplcm9lczxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0ZWQtc3Bh Y2UiPiZuYnNwOzwvc3Bhbj48YnIgY2xhc3M9IiI+DQooaS5lLiB0aGUgaGFzaCBpcyBpbmZlcmlv ciB0byBhIGxpbWl0KS4gVGhlIGRlZmF1bHQgdmFsdWUgY291bGQgZm9yIGV4YW1wbGU8c3BhbiBj bGFzcz0iQXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PGJyIGNsYXNzPSIiPg0K YmUgOCB6ZXJvZXMsIG1lYW5pbmcgdGhlIGNsaWVudCBvbiBhdmVyYWdlIG5lZWRzIHRvIHRyeSAy NTYgZGlmZmVyZW50IG5vbmNlczxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZu YnNwOzwvc3Bhbj48YnIgY2xhc3M9IiI+DQpiZWZvcmUgZmluZGluZyBhIHZhbGlkIGhhc2guPC9k aXY+DQo8L2Rpdj4NCjwvc3Bhbj48L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjxwIHN0eWxlPSJjYXJl dC1jb2xvcjogcmdiKDAsIDAsIDApOyBmb250LWZhbWlseTogSGVsdmV0aWNhLCBBcmlhbDsgZm9u dC1zaXplOiAxM3B4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3Jt YWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxp Z246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUt c3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lk dGg6IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyIgY2xhc3M9IiI+DQpZb3UgbmVlZCB0byBt YWtlIHRoYXQgaGFzaCBhIGhtYWMgb3Igc2ltaWxhciB3aXRoIGEgcHJlLXNoYXJlZCBrZXksIG9y IGFuIGV4dHJhIHJvdW5kdHJpcCwgb3RoZXJ3aXNlIHlvdSBqdXN0IHVzZSBhIHByZWNvbXB1dGVk IHRhYmxlLiZuYnNwOyBXaXRoIGEgcm91bmR0cmlwIHRoaXMgd291bGQgYmUgYW4gZXh0ZW5zaW9u IHRvIFJldHJ5LCB3aXRoIGEgcHJlLXNoYXJlZCBrZXkgaXQgaXMgc29tZXdoYXQgc2ltaWxhciB0 byBteSBlYXJsaWVyIGVtYWlsIHdoZXJlDQogeW91IHNpZ24gdGhlIE9DSUQsIGJ1dCBoZXJlIHlv dSBkb27igJl0IG5lZWQgcHJvb2Ytb2Ytd29yaywgb25seSBwcm9vZi1vZi1vd25lcnNoaXAgKG9m IHRoZSBrZXkpLjwvcD4NCjxwIHN0eWxlPSJjYXJldC1jb2xvcjogcmdiKDAsIDAsIDApOyBmb250 LWZhbWlseTogSGVsdmV0aWNhLCBBcmlhbDsgZm9udC1zaXplOiAxM3B4OyBmb250LXN0eWxlOiBu b3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxl dHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4 OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5n OiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBu b25lOyIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQo8L3A+DQo8cCBzdHlsZT0iY2FyZXQtY29s b3I6IHJnYigwLCAwLCAwKTsgZm9udC1mYW1pbHk6IEhlbHZldGljYSwgQXJpYWw7IGZvbnQtc2l6 ZTogMTNweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBm b250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBz dGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNl OiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAw cHg7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsiIGNsYXNzPSIiPg0KTWlra2VsPC9wPg0KPC9kaXY+ DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjxiciBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+DQo8 ZGl2IGRpcj0iYXV0byIgc3R5bGU9ImNhcmV0LWNvbG9yOiByZ2IoMCwgMCwgMCk7IGNvbG9yOiBy Z2IoMCwgMCwgMCk7IGZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMThweDsgZm9u dC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDog bm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1p bmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdv cmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQtZGVj b3JhdGlvbjogbm9uZTsgd29yZC13cmFwOiBicmVhay13b3JkOyAtd2Via2l0LW5ic3AtbW9kZTog c3BhY2U7IGxpbmUtYnJlYWs6IGFmdGVyLXdoaXRlLXNwYWNlOyIgY2xhc3M9IiI+DQo8ZGl2IGRp cj0iYXV0byIgc3R5bGU9IndvcmQtd3JhcDogYnJlYWstd29yZDsgLXdlYmtpdC1uYnNwLW1vZGU6 IHNwYWNlOyBsaW5lLWJyZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsiIGNsYXNzPSIiPg0KPGRpdiBz dHlsZT0iY2FyZXQtY29sb3I6IHJnYigwLCAwLCAwKTsgY29sb3I6IHJnYigwLCAwLCAwKTsgZm9u dC12YXJpYW50LWNhcHM6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGln bjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1z cGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0 aDogMHB4OyB0ZXh0LWRlY29yYXRpb246IG5vbmU7Ij4NCkEgcG9zc2libGUgYXBwcm9hY2ggdG8g ZGVmZWF0aW5nIHRoaXM6PGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KT25lIG9mIHRoZSBu aWNlIHRoaW5ncyBhYm91dCBVRFAgaXMgdGhhdCB0aGUgc2VydmVyIGNhbiBjb25zdW1lIHRoZSBm aXJzdCBkYXRhIHBhY2tldCBiZWZvcmUgcmVwbHlpbmcgdG8gdGhlIENsaWVudCAodW5saWtlIFRD UCB3aGVyZSB0aGUgc2VydmVyIG11c3QgU1lOL0FDSyBiZWZvcmUgZ2V0dGluZyB0aGUgZmlyc3Qg ZGF0YSBwYWNrZXQpLiBUaGVyZWZvcmUsIGl0IGlzIHBvc3NpYmxlIHRvIGhhdmUgYSB1bmlxdWUt dG8tdGhlLWNsaWVudCwgcHJlLWF1dGhlbnRpY2F0aW9uDQogKG9yIHByZS1hdXRob3JpemF0aW9u KSB0b2tlbiBpbiB0aGUgZmlyc3QgcGFja2V0LiBUaGUgcHJlc2VuY2Ugb2Ygc3VjaCBhIHRva2Vu IHdvdWxkIGlkZW50aWZ5IHRoYXQgdGhlIGNsaWVudCBpcyBhdXRob3JpemVkIHRvIGNvbm5lY3Qg dG8gdGhlIFFVSUMgc2VydmVyLiBUaGUgdG9rZW4gY291bGQgcG9zc2libHkgYmUgcHJvdmlkZWQg dG8gdGhlIGNsaWVudCBieSBhbiBhdXRob3JpemF0aW9uIHNlcnZlciBiZWZvcmUgdGhlIHNlc3Np b24uIE9yLA0KIGluIGFuIGVudGVycHJpc2UgZW52aXJvbm1lbnQsIGl0IGNvdWxkIGJlIHBvc3Np YmxlIHRoYXQgYSBvbmUgdGltZSBvbi1ib2FyZGluZyBjb3VsZCBwcm92aWRlIGEgbGlmZXRpbWUg b2YgdG9rZW5zLjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NClRoZSB0b2tlbiBjb3VsZCBi ZSBhIE9uZSBUaW1lIFBhc3N3b3JkIHN1Y2ggYXMgZGVzY3JpYmVkIGluIFJGQyA0MjI2LCB3aGlj aCB1c2VzIGEgY29tcHV0YXRpb25hbGx5IGVmZmljaWVudCBhbGdvcml0aG0sIG9yIGNvdWxkIGJl IHNvbWUgb3RoZXIgdHlwZSBvZiB0b2tlbi4gSW4gc29tZSB3YXlzLCBvbmUgY291bGQgdGhpbmsg b2YgdGhpcyBtZWNoYW5pc20gbGlrZSBTQU1MIFNpbmdsZSBTaWduIE9uIGluIHRoYXQgdGhlIGNs aWVudCBpcyBwcmUtYXV0aGVudGljYXRlZA0KIHRvIGNvbm5lY3QgdG8gdGhlIHNlcnZlciAtIGp1 c3QgbGlrZSB0aGUgcHJlLWF1dGhlbnRpY2F0aW9uIHRva2VuIGNvdWxkIGJlIHVzZWQgdG8gcHJl LWF1dGhvcml6ZSBhIFFVSUMgY29ubmVjdGlvbi48L2Rpdj4NCjxkaXYgc3R5bGU9ImNhcmV0LWNv bG9yOiByZ2IoMCwgMCwgMCk7IGNvbG9yOiByZ2IoMCwgMCwgMCk7IGZvbnQtdmFyaWFudC1jYXBz OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0 LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsg d29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgdGV4dC1k ZWNvcmF0aW9uOiBub25lOyI+DQo8YnIgY2xhc3M9IiI+DQpGcm9tIHRoZSBzdGFuZHBvaW50IG9m IHRoZSBRVUlDIHNlcnZlciwgdGhpcyBwcmUtYXV0aGVudGljYXRpb24gdG9rZW4gY291bGQgYWxs b3cgYSBzZXJ2ZXIgdG8gbGltaXQgdGhlIHJlc291cmNlcyBpdCBhcHBsaWVzIHRvIHRoZSBjb25u ZWN0aW9uLiBJZiB0aGUgdG9rZW4gaXMgbm90IHZhbGlkLCBpdCBpbW1lZGlhdGVseSBkcm9wcyB0 aGUgY29ubmVjdGlvbiB3aXRob3V0IGV4ZWN1dGluZyByZXNvdXJjZS1kZW1hbmRpbmcgY3J5cHRv Z3JhcGh5Lg0KIEZ1cnRoZXIsIHRoZSBzZXJ2ZXIgYmVjb21lcyBhbG1vc3QgYmxhY2sgdG8gdGhl IG5ldHdvcmsuIFNjYW5zIG9mIHRoZSBuZXR3b3JrIHdvdWxkIG5vdCBiZSBhY2tub3dsZWRnZWQg YnkgdGhpcyBRVUlDIHNlcnZlciBpZiB0aGUgaW5pdGlhbCBwYWNrZXQgZGlkIG5vdCBjb250YWlu IGEgbGVnaXRpbWF0ZSBwcmUtYXV0aGVudGljYXRpb24gdG9rZW4uPC9kaXY+DQo8ZGl2IHN0eWxl PSJjYXJldC1jb2xvcjogcmdiKDAsIDAsIDApOyBjb2xvcjogcmdiKDAsIDAsIDApOyBmb250LXZh cmlhbnQtY2Fwczogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBz dGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNl OiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAw cHg7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsiPg0KPGJyIGNsYXNzPSIiPg0KVGhpcyBhcHByb2Fj aCBjb3VsZCBiZSBzdWJqZWN0IHRvIGFuIGVhdmVzZHJvcHBpbmcgYXR0YWNrIGlmIHRoZSB0b2tl biB3ZXJlIHN0YXRpYyBvciBkaWQgbm90IHByZXZlbnQgcmVwbGF5IGF0dGFja3MsIHNvIHRoZXNl IGlzc3VlcyBzaG91bGQgYmUgY29uc2lkZXJlZCB3aGVuIGRlY2lkaW5nIG9uIGhvdyB0b2tlbnMg c2hvdWxkIGJlIGNyZWF0ZWQuPGJyIGNsYXNzPSJBcHBsZS1pbnRlcmNoYW5nZS1uZXdsaW5lIj4N CjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBzdHlsZT0iY2FyZXQtY29sb3I6IHJnYigwLCAw LCAwKTsgY29sb3I6IHJnYigwLCAwLCAwKTsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgbGV0 dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7 IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6 IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyB0ZXh0LWRlY29yYXRpb246IG5v bmU7Ij4NCjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBzdHlsZT0iY2FyZXQtY29sb3I6IHJn YigwLCAwLCAwKTsgY29sb3I6IHJnYigwLCAwLCAwKTsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1h bDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50 OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNw YWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyB0ZXh0LWRlY29yYXRp b246IG5vbmU7Ij4NCkJyZW50IEJsaWdlcjwvZGl2Pg0KPGRpdiBzdHlsZT0iY2FyZXQtY29sb3I6 IHJnYigwLCAwLCAwKTsgY29sb3I6IHJnYigwLCAwLCAwKTsgZm9udC12YXJpYW50LWNhcHM6IG5v cm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5k ZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3Jk LXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyB0ZXh0LWRlY29y YXRpb246IG5vbmU7Ij4NCkRpcmVjdG9yLVRlY2hub2xvZ3kmbmJzcDtWZXJpem9uIFNEUCZuYnNw OzxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBzdHlsZT0iY2FyZXQtY29sb3I6IHJnYigwLCAw LCAwKTsgY29sb3I6IHJnYigwLCAwLCAwKTsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgbGV0 dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7 IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6 IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyB0ZXh0LWRlY29yYXRpb246IG5v bmU7Ij4NCjxhIGhyZWY9Im1haWx0bzpicmVudC5iaWxnZXJAdmVyaXpvbi5jb20iIGNsYXNzPSIi PmJyZW50LmJpbGdlckB2ZXJpem9uLmNvbTwvYT48L2Rpdj4NCjxkaXYgc3R5bGU9ImNhcmV0LWNv bG9yOiByZ2IoMCwgMCwgMCk7IGNvbG9yOiByZ2IoMCwgMCwgMCk7IGZvbnQtZmFtaWx5OiBIZWx2 ZXRpY2E7IGZvbnQtc2l6ZTogMjRweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQt Y2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFs OyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5v bmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQt c3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsiIGNsYXNzPSIiPg0KPGJy IGNsYXNzPSIiPg0KPC9kaXY+DQo8YnIgY2xhc3M9IkFwcGxlLWludGVyY2hhbmdlLW5ld2xpbmUi Pg0KPC9kaXY+DQo8L2Rpdj4NCjxiciBjbGFzcz0iQXBwbGUtaW50ZXJjaGFuZ2UtbmV3bGluZSIg c3R5bGU9ImNhcmV0LWNvbG9yOiByZ2IoMCwgMCwgMCk7IGNvbG9yOiByZ2IoMCwgMCwgMCk7IGZv bnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMThweDsgZm9udC1zdHlsZTogbm9ybWFs OyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXIt c3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4 dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4 OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsi Pg0KPGJyIGNsYXNzPSJBcHBsZS1pbnRlcmNoYW5nZS1uZXdsaW5lIj4NCjwvZGl2Pg0KPGJyIGNs YXNzPSIiPg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_30260D5849CB4B8F92A00036E2BA8952oneverizoncom_-- From nobody Sat Jul 20 10:30:43 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C70CA1201CC for ; Sat, 20 Jul 2019 10:30:41 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id m9YT9B1mlfsW for ; Sat, 20 Jul 2019 10:30:39 -0700 (PDT) Received: from mail-lj1-x22b.google.com (mail-lj1-x22b.google.com [IPv6:2a00:1450:4864:20::22b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8AEFA1201B4 for ; Sat, 20 Jul 2019 10:30:39 -0700 (PDT) Received: by mail-lj1-x22b.google.com with SMTP id y17so9085772ljk.10 for ; Sat, 20 Jul 2019 10:30:39 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=3XMeKHsLKl7ART49tgz1+JREcxM8gIAL6TmhdToZAu8=; b=PegX7SrBAvk5btm5Qt/T/6wOgjE2OFOz4BHfjG8iuypNUINybkxssS28CTQrTncAeG E1woDSw5B1XF+B6Z0KF8gyF8zAVKq3Y078zteHcEzLTflC+mJyb1gzu2qcrpHG79EgcV UhVZw+6tp2F6VZ4U21N4ICZTyZrTXF/uOGMR5S1vdh63g0f5KCuuT1ttvyMZ5dKkMMBq DBfhPiJgDEy5Y5/hjeFRwNowJUc+vIKeWmBL9ZqjSmQeDR+Vjh6t/ypfHWrBQ8oAW6mJ 75yJwg/FV5UFhU4bT1mHMQ0N33h43FQM1b9xvuYJ5cPm/4+1snguqIr7umNBQkqyqg63 11pQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=3XMeKHsLKl7ART49tgz1+JREcxM8gIAL6TmhdToZAu8=; b=QaNxRhKFnYJvl0aS9ShDEfHQSdIWIahJ7pxteAhI1A9EFMUAlHjbSUPgON8ZRcNimL Dhj+PMbPTTTQaVZgQ6vC+l3hZGQUGnTSvRLwlPR4n2LWCl1jQE86xdb6XlZgvgkblWp1 r/RlKk9A/bO6LnabI+bZT+yt71CbKDtJzMuIYioufL0LjP5uuQnbeVGR7X3Q3gO2Gd7g D/Emwg64ne0RrABj7D7a/1r5830ZnogxnqNcQlj7polkOyENJ3/9cppSANpSCblsNvJn qBavAVAdA+Aed4vUH3cpVUFBN9WlF2D2Qe9SzJTyP5YCJq/p9lSTLrqCaKBdeQM1anko EG8g== X-Gm-Message-State: APjAAAVq5hBZfUWTt1iLZhx5DqkxKbC1aG8ZDmXvIHMtfub+N0Tqlw3w pqI75fG7OWBCGM2fjBtDicYm4OhV48d79xwavRY= X-Google-Smtp-Source: APXvYqxrDDpTaOSZcsrsQGNLbA2IlonClUaDqnAqKHVjr4O67fzNAqBZrOZM2APv+4UMD/eirz0zZo7qTFMT8sX22w4= X-Received: by 2002:a2e:890a:: with SMTP id d10mr31007349lji.145.1563643837628; Sat, 20 Jul 2019 10:30:37 -0700 (PDT) MIME-Version: 1.0 References: <21E3AE84-02C5-4943-A88E-B62329E21002@one.verizon.com> <20190719160432.GC23718@1wt.eu> <774b4cb6-2037-40ed-b02a-42011cb50484@www.fastmail.com> <20190720050647.GA24279@1wt.eu> In-Reply-To: From: Watson Ladd Date: Sat, 20 Jul 2019 10:30:26 -0700 Message-ID: Subject: Re: DoS-ing QUIC servers is too easy To: =?UTF-8?Q?T=C3=B6ma_Gavrichenkov?= Cc: Willy Tarreau , IETF QUIC WG , brent.bilger@verizon.com, Martin Thomson Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 20 Jul 2019 17:30:42 -0000 On Fri, Jul 19, 2019 at 11:51 PM T=C3=B6ma Gavrichenkov = wrote: > > On Sat, Jul 20, 2019 at 9:09 AM Watson Ladd wrote= : > > A core can only do 7,000 of these per second, so you > > would need some more servers to handle the million packet flood with > > complete responses (vs. filtering the attacking machines). > > You would need multiple servers anyway, because the world has seen > incidents over 1 Tbps (and even 400GbE is still just not there by the > way). For instance, SYN flood attack seen by Cloudflare in April 2018 > topped 942 Gbps with approximately 1000-octet packets (which is also > an evidence bandwidth isn't a bottleneck for SYN floods, packet rate > is). > > https://blog.cloudflare.com/the-rise-of-multivector-amplifications/ > > You cannot handle that in a single machine. Of course not. But I don't understand the magic properties of this box that is supposed to be doing the filtering. What actually happened is anycast spread that attack geographically, and then ECMP spread it over machines, and then the attacking machines were blackholed with firewall rules determined by statistical analysis of incoming packets. The changes to the protocol being discussed are not going to reduce the damage 1 Tbps does to a site with a smaller connection: you are going to need multiple links, you are going to need to have rules to efficiently drop the attack traffic. What is the setup where these issues are a problem? I get that you might not want to share, but it helps think about solutions if we know more about the problem. As for predictability: don't use devices that can't make random numbers. > > -- > T=C3=B6ma -- "Man is born free, but everywhere he is in chains". --Rousseau. From nobody Sat Jul 20 11:14:57 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 002261201C5 for ; Sat, 20 Jul 2019 11:14:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zrEULjd6qtL1 for ; Sat, 20 Jul 2019 11:14:54 -0700 (PDT) Received: from mail-yw1-xc2a.google.com (mail-yw1-xc2a.google.com [IPv6:2607:f8b0:4864:20::c2a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 132CF120150 for ; Sat, 20 Jul 2019 11:14:54 -0700 (PDT) Received: by mail-yw1-xc2a.google.com with SMTP id z63so14557321ywz.9 for ; Sat, 20 Jul 2019 11:14:54 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=GmslNQ8PNFxya5XOprc6Z3PFAO7Q0eoGAqI08CgBiyg=; b=k9iztKECweJO6KOQsJ/YWpKmUxxBNyumc17J+Z6D5l4bgG5P/zSEnX1/lKJiQxkd2o gKINgdZ5OqqosHTAJ7HYWcFyGHm/1NJQ/BzNBXjCOJ9vPAfRFvLmpMCaCpg+R/HVGCVd G4BeIo1nuGyLsq/X77kG9mB224RyCg9G4xKdc7y6KHRA64w8FclxwnrUZPWty2Wm8aBC 0pWDNErBcgADtCpzo9VgeEyzzQbMy2OC6MVsY6Z/b47OxaqaRIUBNnCEbVXoTuyy1gce 2eK7KOCA0YtgLshFBZLJoe8PSEI+f5wBc0iwh/UvUi0MBq/WKVAYxyQzAWve5vHJdgLJ n6CQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=GmslNQ8PNFxya5XOprc6Z3PFAO7Q0eoGAqI08CgBiyg=; b=JvbfexS0GwVBh81Q0SOzM41yw9/ZMemEXM+MKFPRXpDgq4UMEm7rD8fqN7K7QmUVzQ Jzg8LiaHaE/+K0V2OPkD44fqgmve8maGXUeg+25LwN7iqtGhCLv7joh+6DKSQ2ernDS0 8OkwqUkA2+31Xu8ZxDDVn+609eHw2uFr1bhef5ujgOPAxj8AnlEnJO/0IxS0ydKkL9RG +EoGPmJqvydsiaMmLlC357uQ/t7yWhPl+mwsUaiG+k/Sr6hw01eEXSIQjJ0bys2Ws4W4 GKqwL4uNoxB5oA+6XfuMSnubOxKojACCX0c69O/owSMH2+c3RK7xfEMgMt89VQntrWCS +Lqg== X-Gm-Message-State: APjAAAWvAiTsAMmEoj+qLmPn/QvJ8ZKKTFZgG0xeEdZ7onqRDSWh/kYg kNuytzETNT0FXCKzlfiRqXipAJFHfRNqRk5J0+Y= X-Google-Smtp-Source: APXvYqzZVKTsbe1i5Sk5SGY9TUqNwkmElQmDlncrVKw8zUHVIM/Vd6/DwfIK1ZKyOIjwl8biXSEi/OnhwqgDLZCuJJI= X-Received: by 2002:a81:5f8a:: with SMTP id t132mr36297502ywb.381.1563646492984; Sat, 20 Jul 2019 11:14:52 -0700 (PDT) MIME-Version: 1.0 References: <21E3AE84-02C5-4943-A88E-B62329E21002@one.verizon.com> <20190719160432.GC23718@1wt.eu> <774b4cb6-2037-40ed-b02a-42011cb50484@www.fastmail.com> <20190720050647.GA24279@1wt.eu> In-Reply-To: From: =?UTF-8?Q?T=C3=B6ma_Gavrichenkov?= Date: Sat, 20 Jul 2019 21:14:39 +0300 Message-ID: Subject: Re: DoS-ing QUIC servers is too easy To: Watson Ladd Cc: Willy Tarreau , IETF QUIC WG , brent.bilger@verizon.com, Martin Thomson Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 20 Jul 2019 18:14:56 -0000 Peace, On Sat, Jul 20, 2019 at 8:30 PM Watson Ladd wrote: > On Fri, Jul 19, 2019 at 11:51 PM T=C3=B6ma Gavrichenkov wrote: > > You cannot handle that in a single machine. > > Of course not. But I don't understand the magic properties of this box > that is supposed to be doing the filtering. Yes, the properties of a filtering box are hardly relevant. Why? > What actually happened is > anycast spread that attack geographically, and then ECMP spread it > over machines, and then the attacking machines were blackholed with > firewall rules determined by statistical analysis of incoming packets. Statistical analysis is generally useless against SYN flood. It was useful in the 942 Gbps case just because the attacker was dumb enough to try to multiply the bandwidth by adding payload to a SYN segment, thus exposing it to a simple packet length filter. With QUIC, an attacker won't be able to make such a mistake. > As for predictability: don't use devices that can't make random numbers. 1) Is this when we ban RIOT from participating in IETF hackathons? https://github.com/RIOT-OS/RIOT/blob/637bbdd9856c14cb8c56a6191253363d53f54a= 9f/sys/random/random.c#L42 https://github.com/RIOT-OS/RIOT/blob/637bbdd9856c14cb8c56a6191253363d53f54a= 9f/sys/include/random.h#L37 2) This is not how companies choose MRI devices or any other industrial IoT stuff. I don't even think they *could* evaluate such a criteria, but even if they could, they wouldn't. 3) Even worse, DDoS mitigation is widely believed to be a responsibility of an access network, and I can't imagine circumstances under which that ISP would be asked by their client if the latter should order an expensive device or not. -- T=C3=B6ma From nobody Sat Jul 20 12:22:39 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B698412001B for ; Sat, 20 Jul 2019 12:22:37 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qFpIvvQbhFrp for ; Sat, 20 Jul 2019 12:22:34 -0700 (PDT) Received: from mail-lf1-x144.google.com (mail-lf1-x144.google.com [IPv6:2a00:1450:4864:20::144]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D6C0212004F for ; Sat, 20 Jul 2019 12:22:33 -0700 (PDT) Received: by mail-lf1-x144.google.com with SMTP id b29so16684379lfq.1 for ; Sat, 20 Jul 2019 12:22:33 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=sL8aktJBgrwhgIQRy2CMlXmJLk7Z6ujGDSL8FWZt92k=; b=kAUWm5SG4PuKfgMh0pXLv3C2ztagVbGycvRJdI4/Kr1OKcFO1G2wamt7VXwmfYeFDe PTf4WdgThVjhZzVrK0yNZIEQa+i/Ie8nc9NLZY+m6zn07xmDp37R6hrbC4CPwvNRnX8s jUawRwmT9pVWxdP+cU3xLMINlQRjxSCDV6a1NncNBUzJ4Ise14NDqXffaWQiUuJNeAkP uIDRYfCjus6nYb4GhiGxtw4nqwb6sFSmFpXG0Hd4cR9EhMFqNvxrmvVJePpvYLMOPag6 EQB1zAvQ4irTSRP+ZlTWloXM8NRIYkAYFnEt1rW/QlpoNu2qPCrCxGgURHz43zQubgB5 nqsA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=sL8aktJBgrwhgIQRy2CMlXmJLk7Z6ujGDSL8FWZt92k=; b=muVTunH9lOUiU2Ah/yr1/qZr+n2bZ6T0gom7PelCiqmj8534ECilgpaekspossitpu EEDI89060OmmLtMJPOxoojvUgVR8PAf9uuSDqFLfSbNzdzphrXRCGasps7ihRqC1zV5t h26kssy22Ry900RlJryCgfztT14NH/BpLLtX04iUTFNJvMpt7MQDSvi3FeQ48B737H6+ wQJGk7GQNJG6ljap+aGJxAWoMqwqewkdFOsZoZDObMVVDZIQAOKSIBCcttAa/Qanr4bs +p9Tc5k7utRbosozO5lV35sPF0XwSNAMW0l6tzlYCXNMzWRV6J/NlXxoi/wBOhJeQLqw ZRig== X-Gm-Message-State: APjAAAXu60Gp2rt3Fqyje0njGhOM31FviSTJHTdX6ooEHwJYVW1Eahfx cAkEPDk0r5eBERMx89FS8rzlq2IwhvCZb7eMqoQ= X-Google-Smtp-Source: APXvYqwRq2aMZuzP9ZUCsgSnLxNPM9p85ScGDpGCWNP0F4GXNZmfKON7HI6BTXbdZM3/aSy6s/0DTHDhPTbj6bnHzKk= X-Received: by 2002:a19:6904:: with SMTP id e4mr7821599lfc.156.1563650552107; Sat, 20 Jul 2019 12:22:32 -0700 (PDT) MIME-Version: 1.0 References: <21E3AE84-02C5-4943-A88E-B62329E21002@one.verizon.com> <20190719160432.GC23718@1wt.eu> <774b4cb6-2037-40ed-b02a-42011cb50484@www.fastmail.com> <20190720050647.GA24279@1wt.eu> In-Reply-To: From: Watson Ladd Date: Sat, 20 Jul 2019 12:22:20 -0700 Message-ID: Subject: Re: DoS-ing QUIC servers is too easy To: =?UTF-8?Q?T=C3=B6ma_Gavrichenkov?= Cc: Willy Tarreau , IETF QUIC WG , brent.bilger@verizon.com, Martin Thomson Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 20 Jul 2019 19:22:38 -0000 On Sat, Jul 20, 2019 at 11:14 AM T=C3=B6ma Gavrichenkov = wrote: > > Peace, > > On Sat, Jul 20, 2019 at 8:30 PM Watson Ladd wrote= : > > On Fri, Jul 19, 2019 at 11:51 PM T=C3=B6ma Gavrichenkov wrote: > > > You cannot handle that in a single machine. > > > > Of course not. But I don't understand the magic properties of this box > > that is supposed to be doing the filtering. > > Yes, the properties of a filtering box are hardly relevant. Why? It's relevant because unless I understand the setup and the constraints, I don't understand the problem. Clearly commodity servers can drop packets en masse. But for some reason this isn't a solution. There are constraints here that make run lots of load balancers going back to a few servers also not a solution. Is the ask that we need a way to filter packets associated with flows that can be interpreted by boxes without any setup between boxes and server? > > > > What actually happened is > > anycast spread that attack geographically, and then ECMP spread it > > over machines, and then the attacking machines were blackholed with > > firewall rules determined by statistical analysis of incoming packets. > > Statistical analysis is generally useless against SYN flood. > It was useful in the 942 Gbps case just because the attacker was dumb > enough to try to multiply the bandwidth by adding payload to a SYN > segment, thus exposing it to a simple packet length filter. > > With QUIC, an attacker won't be able to make such a mistake. How would your solution (which you claim works for TCP but not QUIC) handle a SYN flood? > > > > As for predictability: don't use devices that can't make random numbers= . > > 1) Is this when we ban RIOT from participating in IETF hackathons? > > https://github.com/RIOT-OS/RIOT/blob/637bbdd9856c14cb8c56a6191253363d53f5= 4a9f/sys/random/random.c#L42 > https://github.com/RIOT-OS/RIOT/blob/637bbdd9856c14cb8c56a6191253363d53f5= 4a9f/sys/include/random.h#L37 > > 2) This is not how companies choose MRI devices or any other > industrial IoT stuff. I don't even think they *could* evaluate such a > criteria, but even if they could, they wouldn't. > > 3) Even worse, DDoS mitigation is widely believed to be a > responsibility of an access network, and I can't imagine circumstances > under which that ISP would be asked by their client if the latter > should order an expensive device or not. > > -- > T=C3=B6ma -- "Man is born free, but everywhere he is in chains". --Rousseau. From nobody Sat Jul 20 17:45:29 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EB9EF120096 for ; Sat, 20 Jul 2019 17:45:21 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.7 X-Spam-Level: X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=mnot.net header.b=rSX98g82; dkim=pass (2048-bit key) header.d=messagingengine.com header.b=0kMomqcs Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mpW_y2hNMrek for ; Sat, 20 Jul 2019 17:45:19 -0700 (PDT) Received: from out3-smtp.messagingengine.com (out3-smtp.messagingengine.com [66.111.4.27]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3D7501200C5 for ; Sat, 20 Jul 2019 17:45:19 -0700 (PDT) Received: from compute4.internal (compute4.nyi.internal [10.202.2.44]) by mailout.nyi.internal (Postfix) with ESMTP id 6EEC721BBF for ; Sat, 20 Jul 2019 20:45:18 -0400 (EDT) Received: from mailfrontend2 ([10.202.2.163]) by compute4.internal (MEProxy); Sat, 20 Jul 2019 20:45:18 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mnot.net; h= content-type:mime-version:from:to:subject:message-id:date; s= fm3; bh=FPVQjwGFORmwV+WI4pVO394r6qfXQN84nHOQxdh6lhk=; b=rSX98g82 Cad0afXQ4LvTESmDtC9GqTKrKyZqu7mpvZp71SMVrTdNUSQXCG9zGxmcJRWhPOep kFyFfYzpBWp+4c79VYjeVA/z6BMeBu8CIQeucj+Vtrh7lZGPQHTxwEtpRIGvH9gB lQN20XWYQveQQibjh1FFVbPVKsSEAO3iBEGbfrbrSW7cFdzVtCcs8TNo/n4OM9MQ XUVIS1RcJf5cSaNxYg2I9TSf6aYzKD/3qdDprs4RQapGDx5iPpvrBpKOerJECxIt 8yvqBIYtngJAp8ArIEO5lBaOH+5iJ1gNCdPNPW+e7+QUGClA3+gNQB2lMJtQ2+JD 4ZAUhUFPbS6Njg== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=content-type:date:from:message-id :mime-version:subject:to:x-me-proxy:x-me-proxy:x-me-sender :x-me-sender:x-sasl-enc; s=fm3; bh=FPVQjwGFORmwV+WI4pVO394r6qfXQ N84nHOQxdh6lhk=; b=0kMomqcstahc6j2jGpkR4gmYIdUigX9v+Zp5jGhHBm6LG TeHjKz3cRqNG8XKVvsDNomf6xrxhYmpwisA0p/oE2jcaBWEcvla+71JdgXQnmDmC TPCBdfCJOznSTRmK+HNyENTl2dSffVaqetYTsl8HOb/aXoqFa8xkag1VDiWny+nC Blk3p2pZkD1yD31OrDfz72OdPJp6fZVTW3m+cQ4da3RJ3nJdGAiKcUF7OnE2EYmS oLbujaYcDLDfGgmocfTBkVi0Y4zogdry7zbgeMSs7jz9PHb2poRj7aJxEn3KGuMw +yNuwyNmmR2hX0QuxBwfPGYFH9lBCrjMsEJnS5kgw== X-ME-Sender: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeduvddrjedtgdefkecutefuodetggdotefrodftvf curfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfghnecu uegrihhlohhuthemuceftddtnecunecujfgurheptggghffvufesrgdttdertddtjeenuc fhrhhomhepifhithhhuhgspgfpohhtihhfihgtrghtihhonhhsuceoughopghnohhtpghr vghplhihsehmnhhothdrnhgvtheqnecuffhomhgrihhnpehgihhthhhusgdrtghomhdphh htthhpfehsthhrvggrmhgvrhhrohhrshhfrhhomhgtohhnnhgvtghtihhonhgvrhhrohhr shdrsgihnecukfhppeduudelrdelrdegfedrvdegudenucfrrghrrghmpehmrghilhhfrh homhepughopghnohhtpghrvghplhihsehmnhhothdrnhgvthenucevlhhushhtvghrufhi iigvpedt X-ME-Proxy: Received: from cloud.mnot.net (cloud.mnot.net [119.9.43.241]) by mail.messagingengine.com (Postfix) with ESMTPA id 7537D380076 for ; Sat, 20 Jul 2019 20:45:16 -0400 (EDT) Received: from cloud.mnot.net (localhost [127.0.0.1]) by cloud.mnot.net (Postfix) with ESMTP id AE7ABC071F for ; Sun, 21 Jul 2019 00:45:12 +0000 (UTC) Content-Type: multipart/alternative; boundary="===============8085425235824392727==" MIME-Version: 1.0 From: =?utf-8?q?Github_Notifications?= To: quic@ietf.org Subject: Weekly github digest (QUIC Working Group Specifications) Message-Id: <20190721004512.AE7ABC071F@cloud.mnot.net> Date: Sun, 21 Jul 2019 00:45:12 +0000 (UTC) Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 21 Jul 2019 00:45:22 -0000 --===============8085425235824392727== MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8"; format="flowed" Issues ------ * quicwg/base-drafts (+9/-6/=F0=9F=92=AC19) 9 issues created: - Separate HTTP/3 stream errors from connection errors. (by DaanDeMeyer) https://github.com/quicwg/base-drafts/issues/2911 = - PATH_CHALLENGE timer period (by gorryfair) https://github.com/quicwg/base-drafts/issues/2910 = - Path Migration makes unjustified assumptions about a new path. (by gorr= yfair) https://github.com/quicwg/base-drafts/issues/2909 = - Why is Min RTT kept for the connection lifetime? (by gorryfair) https://github.com/quicwg/base-drafts/issues/2908 = - Pseudo-code for SetLossDetectionTimer looks odd (by jlaine) https://github.com/quicwg/base-drafts/issues/2906 = - Tradeoffs with padding (by martinthomson) https://github.com/quicwg/base-drafts/issues/2905 = - Small clarification in 12.2 Coalescing Packets (by anrossi) https://github.com/quicwg/base-drafts/issues/2900 = - Sample offset incorrect post draft-22 (by mjoras) https://github.com/quicwg/base-drafts/issues/2899 = - DCID Len's description should be updated in draft-ietf-quic-transport-2= 2 (by mengguer) https://github.com/quicwg/base-drafts/issues/2897 = 9 issues received 19 new comments: - #2900 Small clarification in 12.2 Coalescing Packets (8 by DavidSchinaz= i, martinthomson, mikkelfj, ianswett, nibanks) https://github.com/quicwg/base-drafts/issues/2900 [-transport] = - #2789 Use a higher seed RTT for new paths (3 by gorryfair, ianswett) https://github.com/quicwg/base-drafts/issues/2789 [-recovery] [design] = - #2899 Sample offset incorrect post draft-20 (2 by mjoras, larseggert) https://github.com/quicwg/base-drafts/issues/2899 = - #2863 unrecoverable loss pattern leads to deadlock (1 by tatsuhiro-t) https://github.com/quicwg/base-drafts/issues/2863 [-transport] [design] = - #2890 HTTP/2 in Peer Denial of Service? (1 by martinthomson) https://github.com/quicwg/base-drafts/issues/2890 [-tls] [-transport] [= editorial] = - #2894 In Initial and Handshake packets, knowing undecryptable packets c= ould accelerate handshakes with loss (1 by martinthomson) https://github.com/quicwg/base-drafts/issues/2894 [-transport] = - #2895 Advise bundling a PING or other small ACK eliciting frame with In= itials (1 by martinthomson) https://github.com/quicwg/base-drafts/issues/2895 [-recovery] = - #2897 DCID Len's description should be updated in draft-ietf-quic-trans= port-22 (1 by martinthomson) https://github.com/quicwg/base-drafts/issues/2897 [-transport] [editori= al] = - #2906 Pseudo-code for SetLossDetectionTimer looks odd (1 by ianswett) https://github.com/quicwg/base-drafts/issues/2906 [-recovery] = 6 issues closed: - Sample offset incorrect post draft-20 https://github.com/quicwg/base-dr= afts/issues/2899 [-tls] [editorial] = - H3 has a stale reference to STREAM_ID_ERROR https://github.com/quicwg/b= ase-drafts/issues/2815 [-http] = - Crypto Retransmission Timeout interacts poorly with Congestion Control = https://github.com/quicwg/base-drafts/issues/2886 [-recovery] = - Recovery would be simpler if the Handshake timer was unified with the P= TO timer https://github.com/quicwg/base-drafts/issues/2650 [-recovery] [des= ign] = - Crypto timeout value should include rttvar https://github.com/quicwg/ba= se-drafts/issues/2648 [-recovery] [design] = - DCID Len's description should be updated in draft-ietf-quic-transport-2= 2 https://github.com/quicwg/base-drafts/issues/2897 [-transport] [editorial= ] = Pull requests ------------- * quicwg/base-drafts (+7/-6/=F0=9F=92=AC12) 7 pull requests submitted: - Fix Recovery Pseudocode (by ianswett) https://github.com/quicwg/base-drafts/pull/2907 [-recovery] [editorial] = - Add one to sample offset for header protection (by martinthomson) https://github.com/quicwg/base-drafts/pull/2904 [-tls] [editorial] = - Remove Incorrect Sentence in Coalescing Section (by nibanks) https://github.com/quicwg/base-drafts/pull/2903 = - Fix lack of exponential backoff in pseudocode (by ianswett) https://github.com/quicwg/base-drafts/pull/2902 [-recovery] [editorial] = - Fix typo (by tandf) https://github.com/quicwg/base-drafts/pull/2901 = - HTTP Upgrade in H3 is silliness (by LPardue) https://github.com/quicwg/base-drafts/pull/2898 = - Move wasteful packet stuff to -transport (by martinthomson) https://github.com/quicwg/base-drafts/pull/2896 [-tls] [-transport] [ed= itorial] = 8 pull requests received 12 new comments: - #2907 Fix Recovery Pseudocode (4 by martinthomson, ianswett) https://github.com/quicwg/base-drafts/pull/2907 [-recovery] [editorial] = - #2896 Move wasteful packet stuff to -transport (2 by martinthomson, zz8= 5) https://github.com/quicwg/base-drafts/pull/2896 [-tls] [-transport] [ed= itorial] = - #2881 Explain asymmetric confirmation condition (1 by ianswett) https://github.com/quicwg/base-drafts/pull/2881 [-transport] [design] = - #2662 Replace HTTP_MALFORMED_FRAME error code (1 by LPardue) https://github.com/quicwg/base-drafts/pull/2662 [-http] [design] = - #2893 Remove DoS vector for spoofed connection migration (1 by erickinn= ear) https://github.com/quicwg/base-drafts/pull/2893 = - #2867 Tighten HEADERS and DATA frame order requirements. (1 by bencebek= y) https://github.com/quicwg/base-drafts/pull/2867 [-http] = - #2903 Remove Incorrect Sentence in Coalescing Section (1 by martinthoms= on) https://github.com/quicwg/base-drafts/pull/2903 [-transport] = - #2878 Initial secrets do not change after Retry (1 by ianswett) https://github.com/quicwg/base-drafts/pull/2878 [-tls] [-transport] [de= sign] = 6 pull requests merged: - Fix typo https://github.com/quicwg/base-drafts/pull/2901 [-tls] [editorial] = - Add one to sample offset for header protection https://github.com/quicwg/base-drafts/pull/2904 [-tls] [editorial] = - Fix HPACK xref https://github.com/quicwg/base-drafts/pull/2865 [-http] = - Fix lack of exponential backoff in pseudocode https://github.com/quicwg/base-drafts/pull/2902 [-recovery] [editorial] = - Don't state QUIC error codes in HTTP/3 https://github.com/quicwg/base-drafts/pull/2866 [-http] [editorial] = - Merge Crypto timeout and PTO https://github.com/quicwg/base-drafts/pull/2806 [-recovery] [design] = Repositories tracked by this digest: ----------------------------------- * https://github.com/quicwg/base-drafts --===============8085425235824392727== Content-Type: text/html; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Weekly github digest (QUIC Working Group Specifications)

Sunday July 21, 2019

Issues

quicwg/base-drafts (+9/-6/=F0=9F=92=AC19)

9 issues created:

9 issues received 19 new comments:

6 issues closed:

Pull requests

quicwg/base-drafts (+7/-6/=F0=9F=92=AC12)

7 pull requests submitted:

8 pull requests received 12 new comments:

6 pull requests merged:

Repositories tracked by this digest:

--===============8085425235824392727==-- From nobody Sat Jul 20 18:21:51 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CA1061200EF for ; Sat, 20 Jul 2019 18:21:49 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7SmqX_sSkl_V for ; Sat, 20 Jul 2019 18:21:48 -0700 (PDT) Received: from mail-yb1-xb2f.google.com (mail-yb1-xb2f.google.com [IPv6:2607:f8b0:4864:20::b2f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 54B7712003F for ; Sat, 20 Jul 2019 18:21:48 -0700 (PDT) Received: by mail-yb1-xb2f.google.com with SMTP id s41so11137381ybe.12 for ; Sat, 20 Jul 2019 18:21:48 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=kTh840CZmf8EabT+91toFkzt4LKwlTlcPRBEYPFb5sA=; b=ciemVBrpeWv88axreSqnZk1fK1OrywZLRXp2T38i/WlfZz3Yon2gq49wsv2zIK5v54 AtNGWI0Jt5HKsQ5ChvaoD/WFm2gDjV4KSbnxSJlK3E504PVZX52cu4y7PDCPTCDdLfpO P/ZAco9FIvE6iTLSxZq98GRunEGpbFWK3ZbYWjYJHMlgovK/UJAX+qMWBSlcLExZTkPk QaZLvPvGfbyTVUz1p3GOdHmznwQcKpy82+wuuiSRWNESCLXBC+WyxBA8Dt1E1gdMVRgw vjJbbAbURWlOxbBQJX9YbpzdkksaDUIsKLCeSjRkjIa0yZws86DIjUKtvOtz+iQGsqQC ZBKw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=kTh840CZmf8EabT+91toFkzt4LKwlTlcPRBEYPFb5sA=; b=pzYWuEEJbfR4wWeOg8+R56s3FRVKH/iICY7E+cwiomAt0N6b7KpR3J0dPW5WtCPvFr 5fEAs5ydu+JYqMsxJxFT8OdKJGiNbhO37D6msihsLkWuuMxv/C8YnzmmplBWlQxqD6WX mgsTr/KxbnvzdnNXr3mcfDZhzCfnpkDWTO8gBsS49LJEuAra72SF9G6iD+glfGFXhpND pV/WsS7YYfc9uQ45owdqo5QfHSPWZ6biI/XcgsvdVa2oyuXSk4kXMokyNetY0vhO6kGM XEm1afw+chBk6/DTUQzX6kMwmRQSFMauyY+11cOJuwme+lfL56SsSklzJaUDbbZiGYDe GRkA== X-Gm-Message-State: APjAAAVeU0vx730ywXmQ817QUdxKlggmuqSgUW9TcgQ2qufcjBLq7oF6 dSVPJQPcdt1e9ARikdyBskCzEYj9i4yJLiyv0/U= X-Google-Smtp-Source: APXvYqwpjhR6g5Dr5qf20OgTEFm3MhA44+PJLhrXbBiO+5NQBphqCvAJ/H3zl4DdN+dPbpdqpZVI6pStmN5n8khex7k= X-Received: by 2002:a5b:792:: with SMTP id b18mr23792178ybq.498.1563672107255; Sat, 20 Jul 2019 18:21:47 -0700 (PDT) MIME-Version: 1.0 References: <21E3AE84-02C5-4943-A88E-B62329E21002@one.verizon.com> <20190719160432.GC23718@1wt.eu> <774b4cb6-2037-40ed-b02a-42011cb50484@www.fastmail.com> <20190720050647.GA24279@1wt.eu> In-Reply-To: From: =?UTF-8?Q?T=C3=B6ma_Gavrichenkov?= Date: Sun, 21 Jul 2019 04:21:33 +0300 Message-ID: Subject: Re: DoS-ing QUIC servers is too easy To: Watson Ladd Cc: IETF QUIC WG , brent.bilger@verizon.com Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 21 Jul 2019 01:21:50 -0000 Peace, On Sat, Jul 20, 2019 at 10:22 PM Watson Ladd wrote: > > Yes, the properties of a filtering box are hardly relevant. Why? > > It's relevant because unless I understand the setup and the > constraints, I don't understand the problem. Clearly commodity servers > can drop packets en masse. But for some reason this isn't a solution. Err...? It *is*. (Of course, if you don't need the HTTPS private key to generate Retry.) Special hardware can also drop packets en masse. Sometimes it's just the same commodity in a nice designer box. What's the difference? > > With QUIC, an attacker won't be able to make such a mistake. > > How would your solution (which you claim works for TCP but not QUIC) > handle a SYN flood? It'll do that via retries. SYN flood isn't a big issue here, SYN/ACK flood= is. That being said, with SYN flood, we could've been dropping anything bigger than a proper short SYN, while with QUIC, we'll have to handle 20x more traffic for the same purpose. Like I said before, the assumption that raising the initial packet size up to 1200 octets helps to reduce the footprint of DDoS attacks doesn't happen to be true. -- T=C3=B6ma From nobody Sun Jul 21 10:48:39 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 02B81120154 for ; Sun, 21 Jul 2019 10:48:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WkGKBw6VBL5F for ; Sun, 21 Jul 2019 10:48:36 -0700 (PDT) Received: from mail-lf1-x12a.google.com (mail-lf1-x12a.google.com [IPv6:2a00:1450:4864:20::12a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D02FF120146 for ; Sun, 21 Jul 2019 10:48:35 -0700 (PDT) Received: by mail-lf1-x12a.google.com with SMTP id b17so24955842lff.7 for ; Sun, 21 Jul 2019 10:48:35 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=ua5CBXIv+KAZxkSY4ipuQSrUitWZ2xkyHRo8HRMrrPI=; b=Zh34hOKqjjBoOEs2H7xedc8izq+IZZeVpCIcKITUGQ3mhSzTf1MfFXkczeOiGTYcNU kloQ1eUpYoWeFR9eX+dqgDy+9tRXbNgGsjLj21hgMksmLwnt/UTT+f/1sjQrrGP9iI/b y56lbx7yb1zWnBJULrfyySru+T8NU6CTYDiaJWqTuRImIKqBVyYIfW5YSiGEZzYh14sq Rh52OWnQitq2qcH0+oig7hI9PyNGXJKG7ae+6j2ECSfZ90mazX28rkiKG80gzW0lKksu vo1pimTiQHZcqAlNl5sxfJwHv5EogJ8+i87EbTl3QeYeYpHi1Px6fBPaUf/dbcSPdegZ OmFQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=ua5CBXIv+KAZxkSY4ipuQSrUitWZ2xkyHRo8HRMrrPI=; b=WuwulNII3Nq4fVBYbzDi9V0UudpqamR41dduNF7GzPN3uysvHoZbYfWlJ/UgNf4ocO mnTRWJZblmLIjkI+yjyeMesYVhTgBGUSAma1myXLKybBWGAVsjpZ8r/Ds2oo0Cdi1GFO Ig+3428ZSzNOk8ku+J/5INDM9SKoB2sQEWagI5kpUWRfT69DvkLx6xpht82FgyJUZkC+ EjIPT8WmY3zbRAkTcA8OkdqX+yshJL8p4+lRPHbfUoHyIYso6sES/xvpLpvJ2DpR0RzY c+59/7sDrjh8icV6UO/mcKRejKuajUWEZR6oJD6TJ/hclN8mkTAF17XBCwdtR67SBGDY /ILg== X-Gm-Message-State: APjAAAWbxoDRETTzfUEU4woQ1EoIRi9Sg/brKl7Fhl73Z4Pp+DjbQD82 SzSPaHtThNhPCId1I8bzCNy6WlqE0rckN5vstKg= X-Google-Smtp-Source: APXvYqx3uXPQyszvdOrpPzdlp/9gpxydJOOa0DmtgNbmLidTgZfJDBMRY/OdUMdGATBXyNJjDusjw+cf4+op3dJ78K4= X-Received: by 2002:ac2:4839:: with SMTP id 25mr29800765lft.79.1563731314075; Sun, 21 Jul 2019 10:48:34 -0700 (PDT) MIME-Version: 1.0 References: <156373032818.20530.10760018865880224283.idtracker@ietfa.amsl.com> In-Reply-To: <156373032818.20530.10760018865880224283.idtracker@ietfa.amsl.com> From: Kazuho Oku Date: Sun, 21 Jul 2019 13:48:22 -0400 Message-ID: Subject: Fwd: New Version Notification for draft-kazuho-httpbis-priority-01.txt To: HTTP Working Group , IETF QUIC WG Cc: Lucas Pardue Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 21 Jul 2019 17:48:38 -0000 Hello all, Lucas and I have submitted the -01 draft of the Priority header field propo= sal. https://datatracker.ietf.org/doc/draft-kazuho-httpbis-priority/ The repository of the draft is at: https://github.com/kazuho/draft-kazuho-httpbis-priority As we have discussed on the mailing list [1], there are now 8 urgency levels. We have also renamed these levels from "blocking" / "document" / "non-blocking" to "prerequisite" / "default" / "supplementary", to make them less browser-centric while retaining their semantics. Please let us know what you think. Thank you in advance. [1] https://lists.w3.org/Archives/Public/ietf-http-wg/2019JulSep/thread.htm= l#msg21 ---------- Forwarded message --------- From: Date: 2019=E5=B9=B47=E6=9C=8821=E6=97=A5(=E6=97=A5) 13:32 Subject: New Version Notification for draft-kazuho-httpbis-priority-01.txt To: Kazuho Oku , Lucas Pardue A new version of I-D, draft-kazuho-httpbis-priority-01.txt has been successfully submitted by Kazuho Oku and posted to the IETF repository. Name: draft-kazuho-httpbis-priority Revision: 01 Title: The Priority HTTP Header Field Document date: 2019-07-21 Group: Individual Submission Pages: 12 URL: https://www.ietf.org/internet-drafts/draft-kazuho-httpbis-priority-01.txt Status: https://datatracker.ietf.org/doc/draft-kazuho-httpbis-prior= ity/ Htmlized: https://tools.ietf.org/html/draft-kazuho-httpbis-priority-0= 1 Htmlized: https://datatracker.ietf.org/doc/html/draft-kazuho-httpbis-priority Diff: https://www.ietf.org/rfcdiff?url2=3Ddraft-kazuho-httpbis-priority-01 Abstract: This document describes the Priority HTTP header field. This header field can be used by endpoints to specify the absolute precedence of an HTTP response in an HTTP-version-independent way. Please note that it may take a couple of minutes from the time of submissio= n until the htmlized version and diff are available at tools.ietf.org. The IETF Secretariat --=20 Kazuho Oku From nobody Sun Jul 21 15:16:07 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 44235120048 for ; Sun, 21 Jul 2019 15:16:06 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3mApu6QegiWR for ; Sun, 21 Jul 2019 15:16:04 -0700 (PDT) Received: from emh01.mail.saunalahti.fi (emh01.mail.saunalahti.fi [62.142.5.107]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6583512001E for ; Sun, 21 Jul 2019 15:16:04 -0700 (PDT) Received: from eggert.org (unknown [62.248.255.8]) by emh01.mail.saunalahti.fi (Postfix) with ESMTP id 5032320281 for ; Mon, 22 Jul 2019 01:16:02 +0300 (EEST) Received: from dhcp-88b7.meeting.ietf.org (dhcp-88b7.meeting.ietf.org [31.133.136.183]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by eggert.org (Postfix) with ESMTPSA id 609C064C979 for ; Mon, 22 Jul 2019 01:15:56 +0300 (EEST) From: Lars Eggert Content-Type: multipart/signed; boundary="Apple-Mail=_65672883-8554-4F2C-BCD7-070AE08E7752"; protocol="application/pgp-signature"; micalg=pgp-sha512 Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Subject: Wanted: slides Message-Id: <72EECC1B-8A79-4133-B048-3F05442F6552@eggert.org> Date: Sun, 21 Jul 2019 18:15:54 -0400 To: QUIC IETF mailing list X-MailScanner-ID: 609C064C979.A2424 X-MailScanner: Found to be clean X-MailScanner-From: lars@eggert.org Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 21 Jul 2019 22:16:06 -0000 --Apple-Mail=_65672883-8554-4F2C-BCD7-070AE08E7752 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii Hi, if you are covering an issue discussion during our sessions, please send = us your slides ASAP. Github PR against the wg-materials repo preferred. Thanks, Lars --Apple-Mail=_65672883-8554-4F2C-BCD7-070AE08E7752 Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEDrrUO3PMwKM8fddaHbmKvSnuNPgFAl005BoACgkQHbmKvSnu NPhRYw/9GgqhyRr3ZozR1NFMS2zstUonk/gSA9hk+hVRhuEYj2wazhB0dSw0HYrk OEkBaU2R+ZNQswyXYvrPZbIaxjrw3mW4980U9lM9cMUht0rI38eoiQ34tQDP2EvE Oksc+z7dggmEOlmU9Y0zxa+RBcrmi7wx+Q+/6BIMx7TJlMHunDCAhnX5GslLh2Hn DigtFqNhw7ewfV6UK9Ujy8NvIKkkve8IcuEpRbMDyhWpJT71zTIYRO6Nq4zzbL8M 2EuOwFbYBH5QwvK/uV8v9D2EKyShApFWvmRTwq9krahHmS9wCnlY1Q/m2r4LSESJ 1BPhTSFORkBdMca07DcTge66WUk/FOBPdZDNp/CvifJJYJ4hdgcXkviuUe+Kqi/G r1wUejtmQngx6G0nuo05wlKjGTtvo3jtC+ocxTYKsn1L2CdDoRR2HQCyqQX9WujP 0+lsiS/IUedduudsCDY3XsNZM5uuJwXN+HqF3Bg0QuAYlFX5h126ncZJE5P1N6qe bpTSJaJud6X0CTb5jU6M5LUK3+mM13wt45oaBP15b98lrAVVLZ1fD+zIs57n4yVp e7cXIYwShPXHx1d+IjTDmQ602bmuEBZPyVzPpek8CHROQqehaPR/lTHhmhqIXAPh zCYgCEcRlo9V8Sp33DHXMSbwMd9ACh9LZhjkaVDRuueud6pj4hQ= =mHM5 -----END PGP SIGNATURE----- --Apple-Mail=_65672883-8554-4F2C-BCD7-070AE08E7752-- From nobody Sun Jul 21 23:23:26 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9926812010D for ; Sun, 21 Jul 2019 23:23:24 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wG_KGm9I1BYg for ; Sun, 21 Jul 2019 23:23:22 -0700 (PDT) Received: from 1wt.eu (wtarreau.pck.nerim.net [62.212.114.60]) by ietfa.amsl.com (Postfix) with ESMTP id 7D42412004C for ; Sun, 21 Jul 2019 23:23:20 -0700 (PDT) Received: (from willy@localhost) by pcw.home.local (8.15.2/8.15.2/Submit) id x6M6NHZM026828; Mon, 22 Jul 2019 08:23:17 +0200 Date: Mon, 22 Jul 2019 08:23:17 +0200 From: Willy Tarreau To: Watson Ladd Cc: =?iso-8859-1?Q?T=F6ma?= Gavrichenkov , IETF QUIC WG , brent.bilger@verizon.com, Martin Thomson Subject: Re: DoS-ing QUIC servers is too easy Message-ID: <20190722062317.GA26817@1wt.eu> References: <21E3AE84-02C5-4943-A88E-B62329E21002@one.verizon.com> <20190719160432.GC23718@1wt.eu> <774b4cb6-2037-40ed-b02a-42011cb50484@www.fastmail.com> <20190720050647.GA24279@1wt.eu> MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: User-Agent: Mutt/1.6.1 (2016-04-27) Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 22 Jul 2019 06:23:25 -0000 Hi, On Sat, Jul 20, 2019 at 10:30:26AM -0700, Watson Ladd wrote: > On Fri, Jul 19, 2019 at 11:51 PM Töma Gavrichenkov wrote: > > > > On Sat, Jul 20, 2019 at 9:09 AM Watson Ladd wrote: > > > A core can only do 7,000 of these per second, so you > > > would need some more servers to handle the million packet flood with > > > complete responses (vs. filtering the attacking machines). > > > > You would need multiple servers anyway, because the world has seen > > incidents over 1 Tbps (and even 400GbE is still just not there by the > > way). For instance, SYN flood attack seen by Cloudflare in April 2018 > > topped 942 Gbps with approximately 1000-octet packets (which is also > > an evidence bandwidth isn't a bottleneck for SYN floods, packet rate > > is). > > > > https://blog.cloudflare.com/the-rise-of-multivector-amplifications/ > > > > You cannot handle that in a single machine. > > Of course not. But I don't understand the magic properties of this box > that is supposed to be doing the filtering. There is no magic involved. It's just that the application servers are often unsuited to such a task because of the amount of work involved through the whole stack, their sizing which matches application needs more than network bandwidth, the fact that very commonly nowadays they run in VM and that the hypervisor itself is unable to cope with line-rate attacks etc. In practice you need to filter packet-based attacks at the edge and prevent them from entering the network. For some content providers who use ECMP traffic distribution, this means having a fast packet processing layer on the front hosts themselves (either using XDP, or by dedicating a set of NICs and CPU cores to DPDK, or running alternatives), or just doing it on the front load-balancers since most of the time they're very close to the edge and they need to protect themselves. > What actually happened is > anycast spread that attack geographically, and then ECMP spread it > over machines, and then the attacking machines were blackholed with > firewall rules determined by statistical analysis of incoming packets. > The changes to the protocol being discussed are not going to reduce > the damage 1 Tbps does to a site with a smaller connection: you are > going to need multiple links, you are going to need to have rules to > efficiently drop the attack traffic. Absolutely. However 1 Tbps attacks are not that common. But certain sites I know deal with around 10G several times a day. And while some attacks are trivial to handle *when you have the bandwidth* (i.e. all those that can quickly be evicted based on stateful filtering, thus SYN-ACK, ACK, NTP/DNS amplification, etc), others are technically simple but cost a lot (typically SYN floods). They cost a lot because when packets appear normal you have to resort to solutions involving responding SYN cookies, or randomly dropping and waiting for retranmits. When you decide to send SYN cookies, it means that for 10G of traffic inbound, you generate 10G outbound and that is damaging to your useful trafic. When you randomly drop and wait for retransmits, it is damaging for the user's experience. Here what I'm seeing with QUIC is : - with the ability to migrate connection to a different IP address, existing stateful filtering will not work very well anymore until the connection ID is taken into account by equipments. In practice what will happen is that stateful filtering will continue to be used and only enforced during attacks. This way only users migrating during an attack will be affected and that will probably be acceptable to most sites. - if the only way to slow down attacks on the server side is to build a retry packet, this is exactly equivalent to SYN cookies, and it does not slow attacks down, it only allows to sort the good from the bad at a high cost. Thus my suggestion to offset the packet production cost on the client in order to limit to reasonable values. If even the most basic smartphone is limited to 1000 connections per second, it will already be a lot. If a hacked server participating to a botnet can do 10k connections per second, that's trivial to deal with on the server side. Right now a gigabit connected server can produce 1.488 million packets per second. Just take 10 of such bots and you force the target server to 1) be able to cope with 10G of SYN flood, and 2) produce 10G of parasitic SYN-ACK reducing the room for useful trafic. If we consider that a default limit to ~10k conn/s for a large client is something acceptable to deal with during attacks, some devices will be affected, these are intermediaries. But there are mainly two categories of intermediaries, the server-side ones (e.g. haproxy, varnish), which are very close to the servers or at least under the same authority, so it is possible to configure a lower communication cost between them (i.e. in the equipment configuration the difficulty just has to be lowered, knowing that the server is OK with this). The other main category are on the client side (e.g. Squid). These ones would probably learn from the most used servers the accepted difficulty and will probably coalesce a number of connections, thus not being too much impacted by this either. That doesn't remove anything from the principle of the retry packet, it just makes the retry packet needed only when the incoming one is considered too cheap to compute. And doing this definitely allows servers to generate the retry packets themselves without requiring that a smart front box does all the job, because a stupid box can be configured to automatically drop all packets with a difficulty below the default limit, and deliver only other ones to the servers. The servers can then decide to adjust their behaviour based on their load. But having to send a retry packet for 100% incoming packets or for 1% of them definitely is not the same job. Regarding the risk of precomputed tables, I already thought about it and I consider it's reasonably easy to deal with: the front filtering device just has to implement per-signature counters and drop the too frequent ones when under attack. Keep in mind that dealing with an attack doesn't mean you want a perfect service and that nobody notices the problem. It just means you're using statistical tools to maintain the highest ratio of good traffic so that your activity is not affected by the attack, and the attacker gives up and moves to another target. I'm not claiming all of this is trivial, I'm just suggesting that we don't reproduce some of the designs of the past which in a hostile environment cause some trouble, and that we also consider modern techniques that allow to offset costs between the attacker and the victim. And I really think that forcing computation on the attacker is effective. I've been doing this in the past using javascript to efficiently slow down attacking browsers and you see that you can quickly turn an armada of infected machines trying to assault you into an armada of electric heaters. It may not be the nicest thing for the environment but multiplying the size of server farms to deal with small attacks is even worse. Just my two cents, Willy From nobody Mon Jul 22 07:39:07 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D61F41202E2 for ; Mon, 22 Jul 2019 07:38:58 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=verizon.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Rw3PrrcMdvDF for ; Mon, 22 Jul 2019 07:38:57 -0700 (PDT) Received: from smtpout1-tdc.verizon.com (smtpout1-tdc.verizon.com [137.188.104.133]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E738D120297 for ; Mon, 22 Jul 2019 07:38:56 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=verizon.com; i=@verizon.com; q=dns/txt; s=corp; t=1563806338; x=1595342338; h=to:subject:date:message-id:references:in-reply-to: mime-version:from:cc; bh=+oXd9C+AGIXNZ4GWz37AD4BmQ7rSaAzgBWLmHnLsHPs=; b=dso0LcIj6ThbtyObt4404Wm/Q7iEaw4CINvoJUuqZHYp6AYrfracCLqx llwoOkq6Xlc+ZIQY8a17H307Rod8U25Xnt6CIFbIQF+447bQvtcao0TGL 0OLi/WM1ije36T2X2k9Yhcd1TJbj9j9WgSF8ZgTQvHjJ2pwtIUBhsW9tU k=; From: brent.bilger@verizon.com Cc: brent.bilger@verizon.com, "quic@ietf.org" Received: from tbwexch02apd.uswin.ad.vzwcorp.com ([153.114.162.26]) by smtpout1-tdc.verizon.com with ESMTP/TLS/ECDHE-RSA-AES256-SHA384; 22 Jul 2019 14:38:56 +0000 Received: from scwexch05apd.uswin.ad.vzwcorp.com (153.114.130.24) by tbwexch02apd.uswin.ad.vzwcorp.com (153.114.162.26) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Mon, 22 Jul 2019 10:38:55 -0400 Received: from scwexch05apd.uswin.ad.vzwcorp.com (153.114.130.24) by scwexch05apd.uswin.ad.vzwcorp.com (153.114.130.24) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Mon, 22 Jul 2019 07:38:53 -0700 Received: from scwexch05apd.uswin.ad.vzwcorp.com ([153.114.130.24]) by scwexch05apd.uswin.ad.vzwcorp.com ([153.114.130.24]) with mapi id 15.00.1473.003; Mon, 22 Jul 2019 07:38:53 -0700 To: Ian Swett Subject: Re: [E] Re: DoS-ing QUIC servers is too easy Thread-Topic: [E] Re: DoS-ing QUIC servers is too easy Thread-Index: AQHVQJlECXmw7M0T8k62JMxySw46WKbXKoSA Date: Mon, 22 Jul 2019 14:38:53 +0000 Message-ID: <507D5DB7-EDF2-4429-A518-604A377F92D9@one.verizon.com> References: <21E3AE84-02C5-4943-A88E-B62329E21002@one.verizon.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.11.60.250] Content-Type: multipart/alternative; boundary="_000_507D5DB7EDF24429A518604A377F92D9oneverizoncom_" MIME-Version: 1.0 Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 22 Jul 2019 14:39:06 -0000 --_000_507D5DB7EDF24429A518604A377F92D9oneverizoncom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 T24gSnVsIDE5LCAyMDE5LCBhdCA4OjMxIEFNLCBJYW4gU3dldHQgPGlhbnN3ZXR0PTQwZ29vZ2xl LmNvbUBkbWFyYy5pZXRmLm9yZzxtYWlsdG86aWFuc3dldHQ9NDBnb29nbGUuY29tQGRtYXJjLmll dGYub3JnPj4gd3JvdGU6DQoNCg0KDQpPbiBGcmksIEp1bCAxOSwgMjAxOSBhdCAxMToxNiBBTSA8 YnJlbnQuYmlsZ2VyPTQwdmVyaXpvbi5jb21AZG1hcmMuaWV0Zi5vcmc8bWFpbHRvOjQwdmVyaXpv bi5jb21AZG1hcmMuaWV0Zi5vcmc+PiB3cm90ZToNClByb2JsZW06DQpRVUlDIHNlcnZlcnMsIGxp a2UganVzdCBhYm91dCBhbGwgb3RoZXIgc2VydmVycywgYXJlIGZhciB0b28gc3VzY2VwdGlibGUg dG8gRG9TIGF0dGFja3MuICBJbnRlZ3JhbCB0byB0aGUgY2xpZW50LXNlcnZlciBhcmNoaXRlY3R1 cmUgaXMgdGhlIGZhY3QgdGhhdCBzZXJ2ZXJzIG11c3QgbGlzdGVuIHRvIGFsbCBwb3RlbnRpYWwg Y2xpZW50cyBvbiB0aGUgbmV0d29yayhzKSB0aGV5IHNlcnZlIOKAkyB3aGV0aGVyIHRoZSBjb25u ZWN0aW9uIGlzIGZyb20gYSBsZWdpdGltYXRlIGNsaWVudCBvciBub3QuIFRoaXMgd2FzIGZpbmUg d2hlbiBJVCBjb250cm9sbGVkIHRoZSBuZXR3b3JrLCBidXQgdGhlIHNjb3BlIG9mIHRoZSBJbnRl cm5ldCBjaGFuZ2VkIGFsbCB0aGF0LiBTZXJ2ZXJzIGxpc3RlbmluZyB0byBhbGwgY29tbXVuaWNh dGlvbnMgZW5hYmxlcyByZXNvdXJjZSBEb1MgYXR0YWNrcy4gUmVzb3VyY2UgRG9TIGF0dGFja3Mg b24gUVVJQyBzZXJ2ZXJzIGFyZSBhbXBsaWZpZWQgYnkgdGhlIHByb2Nlc3NpbmcgcmVxdWlyZW1l bnRzIG9mIHB1YmxpYy9wcml2YXRlIGtleSBjcnlwdG9ncmFwaHkgd2hpY2ggYW4gYXR0YWNrZXIg YSBjYW4gaW5kdWNlIHRoZSBzZXJ2ZXIgdG8gZG8gd2l0aG91dCBidXJkZW5pbmcgdGhlIGF0dGFj a2VyLiAgSW4gYWRkaXRpb24sIHNlcnZlcnMgcmVzcG9uZGluZyB0byBhbGwgcXVlcmllcyBjYW4g bGVhayBpbmZvcm1hdGlvbiB0aGF0IGFkdmVyc2FyaWVzIGNhbiBsYXRlciB1c2UgdG8gYXR0YWNr IHRoZW0uDQoNClJlcXVpcmVtZW50Og0KUHJvdmlkZSBhIHdheSB0aGF0IFFVSUMgc2VydmVycyBj YW4gZWFzaWx5LCB3aXRoIHZlcnkgbG93IHByb2Nlc3NpbmcgcmVxdWlyZW1lbnQsIHRlbGwgaWYg YSBjb25uZWN0aW9uIGlzIGZyb20gYSBsZWdpdGltYXRlIGNsaWVudC4NCg0KUVVJQydzIFJldHJ5 IHRva2VuIGlzIGRlc2lnbmVkIGZvciB0aGlzIHB1cnBvc2UuLiAgSSBiZWxpZXZlIHRoYXQgc2hv dWxkIGJlIHN1ZmZpY2llbnQgYW5kIG1ha2UgUVVJQyBlcXVpdmFsZW50IHRvIFRDUC4uDQoNCkJ1 dCB3ZSBjYW4gbWFrZSBRVUlDIG11Y2gsIG11Y2ggYmV0dGVyIHRoYW4gVENQIGJlY2F1c2UgdGhl IGZpcnN0IHBhY2tldCBvZiB0aGUgVURQIGNvbm5lY3Rpb24gdGhhdCB0aGUgc2VydmVyIHJlY2Vp dmVzIGNhbiBwcmUtYXV0aGVudGljYXRlIHRoZSBjbGllbnQuIFRoZXJlZm9yZSwgdGhlIHNlcnZl ciBjb3VsZDogMSkgYWxsb2NhdGUgdmVyeSBsaXR0bGUgcmVzb3VyY2UgdG8gdGhlIGNsaWVudCB0 byBjaGVjayB0aGF0IHRoZSBjbGllbnQgaXMgYXV0aG9yaXplZCB0byBjb25uZWN0LCAyKSBlbGlt aW5hdGUgdGhlIHByb2Nlc3MgaW50ZW5zaXZlIGNyeXB0byBmb3IgdW5hdXRob3JpemVkIGNsaWVu dHMsIGFuZCAzKSByZWplY3QgdGhlIGNvbm5lY3Rpb24gaW1tZWRpYXRlbHkgaW5zdGVhZCBvZiB3 YWl0aW5nIGZvciBzb21lIHRpbWVvdXQuDQoNCg0KQWxzbywgUVVJQyByZXF1aXJlcyBtdWNoIGxh cmdlciBJbml0aWFsIHBhY2tldCBzaXplcyB0aGFuIGEgVENQIFNZTiwgaW5jcmVhc2luZyB0aGUg YW1vdW50IG9mIHdvcmsgYW4gYXR0YWNrZXIgaGFzIHRvIGV4cGVuZC4NCg0KWWVzLCBzbyB3ZSBj b3VsZCBvcHRpb25hbGx5IG1ha2UgdXNlIG9mIHNvbWUgb2YgdGhhdCBsYXJnZXIgcGFja2V0IHNp emUgZm9yIHRoZSBwcmUtYXV0aGVudGljYXRpb24uDQoNCkJyZW50DQoNCg0KDQoNCg0KQnJlbnQg QmxpZ2VyDQpEaXJlY3Rvci1UZWNobm9sb2d5IFZlcml6b24gU0RQDQpicmVudC5iaWxnZXJAdmVy aXpvbi5jb208bWFpbHRvOmJyZW50LmJpbGdlckB2ZXJpem9uLmNvbT4NCg0KDQoNCg0KDQoNCg0K DQoNCkJyZW50IEJsaWdlcg0KRGlyZWN0b3ItVGVjaG5vbG9neSBWZXJpem9uIFNEUA0KYnJlbnQu YmlsZ2VyQHZlcml6b24uY29tPG1haWx0bzpicmVudC5iaWxnZXJAdmVyaXpvbi5jb20+DQoNCg0K DQoNCg0K --_000_507D5DB7EDF24429A518604A377F92D9oneverizoncom_ Content-Type: text/html; charset="utf-8" Content-ID: <9D70EB9DB676C243BC854AF9C5418180@vzwcorp.com> Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgbGluZS1icmVhazogYWZ0 ZXItd2hpdGUtc3BhY2U7IiBjbGFzcz0iIj4NCjxkaXY+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRl IiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+T24gSnVsIDE5LCAyMDE5LCBhdCA4OjMxIEFNLCBJ YW4gU3dldHQgJmx0OzxhIGhyZWY9Im1haWx0bzppYW5zd2V0dD00MGdvb2dsZS5jb21AZG1hcmMu aWV0Zi5vcmciIGNsYXNzPSIiPmlhbnN3ZXR0PTQwZ29vZ2xlLmNvbUBkbWFyYy5pZXRmLm9yZzwv YT4mZ3Q7IHdyb3RlOjwvZGl2Pg0KPGJyIGNsYXNzPSJBcHBsZS1pbnRlcmNoYW5nZS1uZXdsaW5l Ij4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGRpcj0ibHRyIiBjbGFzcz0iIj4NCjxkaXYgZGlyPSJs dHIiIGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGJyIGNsYXNzPSIiPg0KPGRpdiBj bGFzcz0iZ21haWxfcXVvdGUiPg0KPGRpdiBkaXI9Imx0ciIgY2xhc3M9ImdtYWlsX2F0dHIiPk9u IEZyaSwgSnVsIDE5LCAyMDE5IGF0IDExOjE2IEFNICZsdDticmVudC5iaWxnZXI9PGEgaHJlZj0i bWFpbHRvOjQwdmVyaXpvbi5jb21AZG1hcmMuaWV0Zi5vcmciIGNsYXNzPSIiPjQwdmVyaXpvbi5j b21AZG1hcmMuaWV0Zi5vcmc8L2E+Jmd0OyB3cm90ZTo8YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxi bG9ja3F1b3RlIGNsYXNzPSJnbWFpbF9xdW90ZSIgc3R5bGU9Im1hcmdpbjowcHggMHB4IDBweCAw LjhleDtib3JkZXItbGVmdDoxcHggc29saWQgcmdiKDIwNCwyMDQsMjA0KTtwYWRkaW5nLWxlZnQ6 MWV4Ij4NCjxkaXYgc3R5bGU9Im92ZXJmbG93LXdyYXA6IGJyZWFrLXdvcmQ7IiBjbGFzcz0iIj5Q cm9ibGVtOjxiciBjbGFzcz0iIj4NClFVSUMgc2VydmVycywgbGlrZSBqdXN0IGFib3V0IGFsbCBv dGhlciBzZXJ2ZXJzLCBhcmUgZmFyIHRvbyBzdXNjZXB0aWJsZSB0byBEb1MgYXR0YWNrcy4mbmJz cDsmbmJzcDtJbnRlZ3JhbCB0byB0aGUgY2xpZW50LXNlcnZlciBhcmNoaXRlY3R1cmUgaXMgdGhl IGZhY3QmbmJzcDt0aGF0IHNlcnZlcnMgbXVzdCBsaXN0ZW4gdG8gYWxsIHBvdGVudGlhbCBjbGll bnRzIG9uIHRoZSBuZXR3b3JrKHMpIHRoZXkgc2VydmUg4oCTIHdoZXRoZXIgdGhlIGNvbm5lY3Rp b24gaXMgZnJvbQ0KIGEgbGVnaXRpbWF0ZSBjbGllbnQgb3Igbm90LiZuYnNwO1RoaXMgd2FzIGZp bmUgd2hlbiBJVCBjb250cm9sbGVkIHRoZSBuZXR3b3JrLCBidXQgdGhlIHNjb3BlIG9mIHRoZSBJ bnRlcm5ldCBjaGFuZ2VkIGFsbCB0aGF0LiBTZXJ2ZXJzIGxpc3RlbmluZyB0byBhbGwgY29tbXVu aWNhdGlvbnMmbmJzcDtlbmFibGVzIHJlc291cmNlIERvUyBhdHRhY2tzLiBSZXNvdXJjZSBEb1Mg YXR0YWNrcyBvbiBRVUlDIHNlcnZlcnMgYXJlIGFtcGxpZmllZCBieSB0aGUgcHJvY2Vzc2luZw0K IHJlcXVpcmVtZW50cyBvZiBwdWJsaWMvcHJpdmF0ZSZuYnNwO2tleSBjcnlwdG9ncmFwaHkgd2hp Y2ggYW4gYXR0YWNrZXIgYSBjYW4gaW5kdWNlIHRoZSBzZXJ2ZXIgdG8gZG8gd2l0aG91dCBidXJk ZW5pbmcgdGhlIGF0dGFja2VyLiZuYnNwOyZuYnNwO0luIGFkZGl0aW9uLCBzZXJ2ZXJzIHJlc3Bv bmRpbmcgdG8gYWxsJm5ic3A7cXVlcmllcyBjYW4gbGVhayBpbmZvcm1hdGlvbiB0aGF0IGFkdmVy c2FyaWVzIGNhbiBsYXRlciB1c2UgdG8gYXR0YWNrIHRoZW0uPGJyIGNsYXNzPSIiPg0KPGJyIGNs YXNzPSIiPg0KUmVxdWlyZW1lbnQ6PGJyIGNsYXNzPSIiPg0KUHJvdmlkZSBhIHdheSB0aGF0IFFV SUMgc2VydmVycyBjYW4gZWFzaWx5LCB3aXRoIHZlcnkgbG93IHByb2Nlc3NpbmcgcmVxdWlyZW1l bnQsIHRlbGwgaWYgYSBjb25uZWN0aW9uIGlzIGZyb20gYSBsZWdpdGltYXRlIGNsaWVudC48YnIg Y2xhc3M9IiI+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNz PSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPlFVSUMncyBSZXRyeSB0b2tlbiBpcyBkZXNpZ25l ZCBmb3IgdGhpcyBwdXJwb3NlLi4mbmJzcDsgSSBiZWxpZXZlIHRoYXQgc2hvdWxkIGJlIHN1ZmZp Y2llbnQgYW5kIG1ha2UgUVVJQyBlcXVpdmFsZW50IHRvIFRDUC4uPC9kaXY+DQo8L2Rpdj4NCjwv ZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2PjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0K QnV0IHdlIGNhbiBtYWtlIFFVSUMgbXVjaCwgbXVjaCBiZXR0ZXIgdGhhbiBUQ1AgYmVjYXVzZSB0 aGUgZmlyc3QgcGFja2V0IG9mIHRoZSBVRFAgY29ubmVjdGlvbiB0aGF0IHRoZSBzZXJ2ZXIgcmVj ZWl2ZXMgY2FuIHByZS1hdXRoZW50aWNhdGUgdGhlIGNsaWVudC4gVGhlcmVmb3JlLCB0aGUgc2Vy dmVyIGNvdWxkOiAxKSBhbGxvY2F0ZSB2ZXJ5IGxpdHRsZSByZXNvdXJjZSB0byB0aGUgY2xpZW50 IHRvIGNoZWNrIHRoYXQgdGhlIGNsaWVudCBpcw0KIGF1dGhvcml6ZWQgdG8gY29ubmVjdCwgMikg ZWxpbWluYXRlIHRoZSBwcm9jZXNzIGludGVuc2l2ZSBjcnlwdG8gZm9yIHVuYXV0aG9yaXplZCBj bGllbnRzLCBhbmQgMykgcmVqZWN0IHRoZSBjb25uZWN0aW9uIGltbWVkaWF0ZWx5IGluc3RlYWQg b2Ygd2FpdGluZyBmb3Igc29tZSB0aW1lb3V0LjwvZGl2Pg0KPGRpdj4NCjxkaXY+PGJyIGNsYXNz PSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+PC9ibG9ja3F1b3RlPg0KPC9k aXY+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+DQo8 ZGl2IGRpcj0ibHRyIiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9ImdtYWlsX3F1b3RlIj4NCjxkaXYg Y2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPkFsc28sIFFVSUMg cmVxdWlyZXMgbXVjaCBsYXJnZXIgSW5pdGlhbCBwYWNrZXQgc2l6ZXMgdGhhbiBhIFRDUCBTWU4s IGluY3JlYXNpbmcgdGhlIGFtb3VudCBvZiB3b3JrIGFuIGF0dGFja2VyIGhhcyB0byBleHBlbmQu PC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2PjxiciBj bGFzcz0iIj4NCjwvZGl2Pg0KWWVzLCBzbyB3ZSBjb3VsZCBvcHRpb25hbGx5IG1ha2UgdXNlIG9m IHNvbWUgb2YgdGhhdCBsYXJnZXIgcGFja2V0IHNpemUgZm9yIHRoZSBwcmUtYXV0aGVudGljYXRp b24uPC9kaXY+DQo8ZGl2PjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdj5CcmVudDwvZGl2Pg0K PGRpdj48YnIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4NCjxk aXYgY2xhc3M9IiI+DQo8ZGl2IGRpcj0ibHRyIiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9ImdtYWls X3F1b3RlIj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8YmxvY2txdW90 ZSBjbGFzcz0iZ21haWxfcXVvdGUiIHN0eWxlPSJtYXJnaW46MHB4IDBweCAwcHggMC44ZXg7Ym9y ZGVyLWxlZnQ6MXB4IHNvbGlkIHJnYigyMDQsMjA0LDIwNCk7cGFkZGluZy1sZWZ0OjFleCI+DQo8 ZGl2IHN0eWxlPSJvdmVyZmxvdy13cmFwOiBicmVhay13b3JkOyIgY2xhc3M9IiI+DQo8ZGl2IGNs YXNzPSIiPg0KPGRpdiBkaXI9ImF1dG8iIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBm b250LXNpemU6IDE4cHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5v cm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1h bGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0 ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBub25l OyIgY2xhc3M9IiI+DQo8ZGl2IGRpcj0iYXV0byIgc3R5bGU9Im92ZXJmbG93LXdyYXA6IGJyZWFr LXdvcmQ7IiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9ImZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7 IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDog MHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFj aW5nOiAwcHg7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsiIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSJn bWFpbC1tXzUyNDQ5MjEyMDM0NzAzOTMzNzNBcHBsZS1pbnRlcmNoYW5nZS1uZXdsaW5lIj4NCjxi ciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBzdHlsZT0iZm9udC12YXJpYW50LWNhcHM6IG5vcm1h bDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50 OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNw YWNpbmc6IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9 IiI+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9ImZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGxldHRl ci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0 ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAw cHg7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsiIGNsYXNzPSIiPg0KQnJlbnQgQmxpZ2VyPC9kaXY+ DQo8ZGl2IHN0eWxlPSJmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzog bm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zv cm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyB0ZXh0LWRl Y29yYXRpb246IG5vbmU7IiBjbGFzcz0iIj4NCkRpcmVjdG9yLVRlY2hub2xvZ3kmbmJzcDtWZXJp em9uIFNEUCZuYnNwOzxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBzdHlsZT0iZm9udC12YXJp YW50LWNhcHM6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3Rh cnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTog bm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyIgY2xhc3M9 IiI+DQo8YSBocmVmPSJtYWlsdG86YnJlbnQuYmlsZ2VyQHZlcml6b24uY29tIiB0YXJnZXQ9Il9i bGFuayIgY2xhc3M9IiI+YnJlbnQuYmlsZ2VyQHZlcml6b24uY29tPC9hPjwvZGl2Pg0KPGRpdiBz dHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAyNHB4OyBmb250LXN0eWxl OiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7 IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDog MHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFj aW5nOiAwcHg7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsiIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIi Pg0KPC9kaXY+DQo8YnIgY2xhc3M9ImdtYWlsLW1fNTI0NDkyMTIwMzQ3MDM5MzM3M0FwcGxlLWlu dGVyY2hhbmdlLW5ld2xpbmUiPg0KPC9kaXY+DQo8L2Rpdj4NCjxiciBjbGFzcz0iZ21haWwtbV81 MjQ0OTIxMjAzNDcwMzkzMzczQXBwbGUtaW50ZXJjaGFuZ2UtbmV3bGluZSIgc3R5bGU9ImZvbnQt ZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMThweDsgZm9udC1zdHlsZTogbm9ybWFsOyBm b250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3Bh Y2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10 cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyB0 ZXh0LWRlY29yYXRpb246IG5vbmU7Ij4NCjxiciBjbGFzcz0iZ21haWwtbV81MjQ0OTIxMjAzNDcw MzkzMzczQXBwbGUtaW50ZXJjaGFuZ2UtbmV3bGluZSI+DQo8L2Rpdj4NCjxiciBjbGFzcz0iIj4N CjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1 b3RlPg0KPC9kaXY+DQo8YnIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBkaXI9ImF1 dG8iIHN0eWxlPSJjYXJldC1jb2xvcjogcmdiKDAsIDAsIDApOyBjb2xvcjogcmdiKDAsIDAsIDAp OyBmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDE4cHg7IGZvbnQtc3R5bGU6IG5v cm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0 dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7 IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6 IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyB0ZXh0LWRlY29yYXRpb246IG5v bmU7IHdvcmQtd3JhcDogYnJlYWstd29yZDsgLXdlYmtpdC1uYnNwLW1vZGU6IHNwYWNlOyBsaW5l LWJyZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsiIGNsYXNzPSIiPg0KPGRpdiBkaXI9ImF1dG8iIHN0 eWxlPSJ3b3JkLXdyYXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgbGlu ZS1icmVhazogYWZ0ZXItd2hpdGUtc3BhY2U7IiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9ImNhcmV0 LWNvbG9yOiByZ2IoMCwgMCwgMCk7IGNvbG9yOiByZ2IoMCwgMCwgMCk7IGZvbnQtdmFyaWFudC1j YXBzOiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0 ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1h bDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgdGV4 dC1kZWNvcmF0aW9uOiBub25lOyI+DQo8YnIgY2xhc3M9IkFwcGxlLWludGVyY2hhbmdlLW5ld2xp bmUiPg0KPGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IHN0eWxlPSJjYXJldC1jb2xvcjogcmdi KDAsIDAsIDApOyBjb2xvcjogcmdiKDAsIDAsIDApOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFs OyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6 IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3Bh Y2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQtZGVjb3JhdGlv bjogbm9uZTsiPg0KPGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IHN0eWxlPSJjYXJldC1jb2xv cjogcmdiKDAsIDAsIDApOyBjb2xvcjogcmdiKDAsIDAsIDApOyBmb250LXZhcmlhbnQtY2Fwczog bm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1p bmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdv cmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQtZGVj b3JhdGlvbjogbm9uZTsiPg0KQnJlbnQgQmxpZ2VyPC9kaXY+DQo8ZGl2IHN0eWxlPSJjYXJldC1j b2xvcjogcmdiKDAsIDAsIDApOyBjb2xvcjogcmdiKDAsIDAsIDApOyBmb250LXZhcmlhbnQtY2Fw czogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4 dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7 IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQt ZGVjb3JhdGlvbjogbm9uZTsiPg0KRGlyZWN0b3ItVGVjaG5vbG9neSZuYnNwO1Zlcml6b24gU0RQ Jm5ic3A7PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IHN0eWxlPSJjYXJldC1jb2xvcjogcmdi KDAsIDAsIDApOyBjb2xvcjogcmdiKDAsIDAsIDApOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFs OyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6 IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3Bh Y2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQtZGVjb3JhdGlv bjogbm9uZTsiPg0KPGEgaHJlZj0ibWFpbHRvOmJyZW50LmJpbGdlckB2ZXJpem9uLmNvbSIgY2xh c3M9IiI+YnJlbnQuYmlsZ2VyQHZlcml6b24uY29tPC9hPjwvZGl2Pg0KPGRpdiBzdHlsZT0iY2Fy ZXQtY29sb3I6IHJnYigwLCAwLCAwKTsgY29sb3I6IHJnYigwLCAwLCAwKTsgZm9udC1mYW1pbHk6 IEhlbHZldGljYTsgZm9udC1zaXplOiAyNHB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFy aWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBu b3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9y bTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQt dGV4dC1zdHJva2Utd2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyIgY2xhc3M9IiI+ DQo8YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxiciBjbGFzcz0iQXBwbGUtaW50ZXJjaGFuZ2UtbmV3 bGluZSI+DQo8L2Rpdj4NCjwvZGl2Pg0KPGJyIGNsYXNzPSJBcHBsZS1pbnRlcmNoYW5nZS1uZXds aW5lIiBzdHlsZT0iY2FyZXQtY29sb3I6IHJnYigwLCAwLCAwKTsgY29sb3I6IHJnYigwLCAwLCAw KTsgZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxOHB4OyBmb250LXN0eWxlOiBu b3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxl dHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4 OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5n OiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBu b25lOyI+DQo8YnIgY2xhc3M9IkFwcGxlLWludGVyY2hhbmdlLW5ld2xpbmUiPg0KPC9kaXY+DQo8 YnIgY2xhc3M9IiI+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_507D5DB7EDF24429A518604A377F92D9oneverizoncom_-- From nobody Mon Jul 22 08:02:11 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 19A54120288 for ; Mon, 22 Jul 2019 08:02:09 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.897 X-Spam-Level: X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9fLTk7TqGpUO for ; Mon, 22 Jul 2019 08:02:08 -0700 (PDT) Received: from emh06.mail.saunalahti.fi (emh06.mail.saunalahti.fi [62.142.5.116]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F2781120274 for ; Mon, 22 Jul 2019 08:02:06 -0700 (PDT) Received: from eggert.org (unknown [62.248.255.8]) by emh06.mail.saunalahti.fi (Postfix) with ESMTP id A4D3A302F5; Mon, 22 Jul 2019 18:02:02 +0300 (EEST) Received: from dhcp-88b7.meeting.ietf.org (dhcp-88b7.meeting.ietf.org [31.133.136.183]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by eggert.org (Postfix) with ESMTPSA id 0268964DC91; Mon, 22 Jul 2019 18:01:56 +0300 (EEST) From: Lars Eggert Message-Id: Content-Type: multipart/signed; boundary="Apple-Mail=_C446469D-B9D4-47CA-950E-3EE5C4227192"; protocol="application/pgp-signature"; micalg=pgp-sha512 Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Subject: Re: [E] DoS-ing QUIC servers is too easy Date: Mon, 22 Jul 2019 11:01:53 -0400 In-Reply-To: <507D5DB7-EDF2-4429-A518-604A377F92D9@one.verizon.com> Cc: Ian Swett , "quic@ietf.org" , brent.bilger@verizon.com To: brent.bilger=40verizon.com@dmarc.ietf.org References: <21E3AE84-02C5-4943-A88E-B62329E21002@one.verizon.com> <507D5DB7-EDF2-4429-A518-604A377F92D9@one.verizon.com> X-MailScanner-ID: 0268964DC91.A442C X-MailScanner: Found to be clean X-MailScanner-From: lars@eggert.org Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 22 Jul 2019 15:02:09 -0000 --Apple-Mail=_C446469D-B9D4-47CA-950E-3EE5C4227192 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii Hi, On 2019-7-22, at 10:38, brent.bilger=3D40verizon.com@dmarc.ietf.org = wrote: > But we can make QUIC much, much better than TCP because the first = packet of the UDP connection that the server receives can = pre-authenticate the client. Therefore, the server could: 1) allocate = very little resource to the client to check that the client is = authorized to connect, 2) eliminate the process intensive crypto for = unauthorized clients, and 3) reject the connection immediately instead = of waiting for some timeout. how is the current Retry token mechanism not fulfilling this goal? Thanks, Lars --Apple-Mail=_C446469D-B9D4-47CA-950E-3EE5C4227192 Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEDrrUO3PMwKM8fddaHbmKvSnuNPgFAl01z+EACgkQHbmKvSnu NPiD/A//V+4NhlNMSvDPDFbziPbHlUQB3eOrVmm4d9cBDS1iE08Zl4rhIBkrSvGV 7DJxb+DJzScbVSveJC3RN0DbyUh8L64vRzd/yc+WAuya5CpPVpKeHYRr3pq2HPwK OJemaMsmT55Tlv++nepaCGU2WKKD1gvqSuz+G+IRbJ//Q1CKVVME3aTfXqz0NeFZ luGQOItSR/Xr68/OKPHgNaWfBeo/fO8MlQFmRZW0Ukuwh34cJPNk5dPp2+Aoi5Q6 Rc1AofosJokQDm9ywjZbBSwpdcNKBuV/YwH8Hla4DFMI/OIRDC9941DkMeNCOxUU QY6PUjlgCbAkn7mhhx8ab8DG2Vnlrj8Hqt3tjvdbadCtGcyH2737WSdr0lzFblix 74AlCM/g/U6S5G84Iw95EUNI5co9Fu86XO5QXVZ5sPNdfIM/7v9Dv33EeYvMp5fn 99O1DlzQIYdlyKb6HfUW63p0Acwf9er9kdL4xqAj0HIkYwxSb2SjL40+YFp5p5jp 9X8aVffEDCoVt+tvG2X4mIhlXvUL+q6lnKMwl9OsNRbyjhmqmvIMsXoqcekGJ6XL TZddjtfkOmMSuGBw17S86DfqucCkKvLm6Izdd4elN3N3ghqdlNI3rYVxfx55jEF0 +n5whLvZ/KXJbM/pHWBN+RwOA8LmUWh0ZYsx7LNsNemX+YZFnVg= =mfHc -----END PGP SIGNATURE----- --Apple-Mail=_C446469D-B9D4-47CA-950E-3EE5C4227192-- From nobody Mon Jul 22 08:19:21 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 093DC120289 for ; Mon, 22 Jul 2019 08:19:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.996 X-Spam-Level: X-Spam-Status: No, score=-1.996 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ROKyhj4BCFiQ for ; Mon, 22 Jul 2019 08:19:17 -0700 (PDT) Received: from mail-ed1-x52d.google.com (mail-ed1-x52d.google.com [IPv6:2a00:1450:4864:20::52d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 674541201D3 for ; Mon, 22 Jul 2019 08:19:17 -0700 (PDT) Received: by mail-ed1-x52d.google.com with SMTP id v15so40983249eds.9 for ; Mon, 22 Jul 2019 08:19:17 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:in-reply-to:references:mime-version:date:message-id:subject:to :cc; bh=PiSeLtpY/wL4XP51Psx0WcWINPnbWJz1DlHyBuLQKbI=; b=Gu+NkEZmaQaWQQd9qLSjaJApP1huxeBkuqzUy0SuyGmiVOD0tQZO8exb/eRDOeBsYi umM4uFqwB2Kwbwl/qvUaO5Fwxoj6BGH4XeRhCpE3UcyTxgXgNLdfsWk4n9/zLrmQTuG4 Zcil7OikfHj014L294yrdpUu0uodAQXECz9zWPW5yLOZUc2iAdriWKLztxqzQyNgB38E w21ax+3JaUmfr/Wjb0ftE0Dan11GqheJbfm2KN82tHSCb0ahoyuIiprpN0x5awYCO0OO QnBIX5+F2+Nib1T6vKCJgUQeAn89nbR6yWtJ+bDmUGc+Zz8ysnAzbuouYwyNe2mr2Rh/ kQJA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:in-reply-to:references:mime-version:date :message-id:subject:to:cc; bh=PiSeLtpY/wL4XP51Psx0WcWINPnbWJz1DlHyBuLQKbI=; b=We9pMXj4axZLK3KraO0k0ULeWDxfKtnIqQeCtFm4d0HHA5ceK2jf2P7CDUNZc1nMBd 2Wryg211pj7e7fw3jSs+PGgZFCnW/MOPFPap3BJMPWCJXTSBdoDYbJmL0/i2R0Fl6eYl mbCzyibZ+PmoOvojVjcpdmsOTQKyts2Lb3JKQZE3ecDPV3dgBZccatxrOBBWAGbkcegU U/LV7yuXnO8yZIwnEI4Dr3DqNoQUoJ5DNjGjny8q1fhSxOr4pGXbUwVNOR1uip+XRZ7h PkiHS5aieigRVa6NR/k0wuJGf+cyp0zCApPZXEUmAALKrXWizDw+mLXCGwOTUyhojleX evJg== X-Gm-Message-State: APjAAAV0KrozNBAmcnwhAz9v/nGi+0EUwS8cOfRFwcQ+lCHF1ekNhDii RoGMUsV+z3ZslJ2K31SJdl7DIv0Fn7hVXfgQTwmsHNBO X-Google-Smtp-Source: APXvYqxbU4NX8IjK87oVbk9gbCVDx6ABTJP1CgqobquwAjiuz7oNOIExY3nVEtp5SadipVBpSEx26qiob6E0LQKvPhY= X-Received: by 2002:a17:906:5446:: with SMTP id d6mr21225686ejp.185.1563808756023; Mon, 22 Jul 2019 08:19:16 -0700 (PDT) Received: from 1058052472880 named unknown by gmailapi.google.com with HTTPREST; Mon, 22 Jul 2019 08:19:15 -0700 From: =?UTF-8?Q?Mikkel_Fahn=C3=B8e_J=C3=B8rgensen?= In-Reply-To: References: <21E3AE84-02C5-4943-A88E-B62329E21002@one.verizon.com> <507D5DB7-EDF2-4429-A518-604A377F92D9@one.verizon.com> X-Mailer: Airmail (420) MIME-Version: 1.0 Date: Mon, 22 Jul 2019 08:19:15 -0700 Message-ID: Subject: Re: [E] DoS-ing QUIC servers is too easy To: Lars Eggert , brent.bilger=40verizon.com@dmarc.ietf.org Cc: brent.bilger@verizon.com, Ian Swett , "quic@ietf.org" Content-Type: multipart/alternative; boundary="0000000000006648ce058e469994" Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 22 Jul 2019 15:19:20 -0000 --0000000000006648ce058e469994 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable The Retry token forces the infrastructure to send data instead of black holing. Why don=E2=80=99t we look into optionally signing long OCIDs that can be us= ed if under attack and otherwise just serve as dumb randomness. The 0-RTT token could also be used in case of an attack. Mikkel On 22 July 2019 at 17.02.22, Lars Eggert (lars@eggert.org) wrote: Hi, On 2019-7-22, at 10:38, brent.bilger=3D40verizon.com@dmarc.ietf.org wrote: > But we can make QUIC much, much better than TCP because the first packet of the UDP connection that the server receives can pre-authenticate the client. Therefore, the server could: 1) allocate very little resource to the client to check that the client is authorized to connect, 2) eliminate the process intensive crypto for unauthorized clients, and 3) reject the connection immediately instead of waiting for some timeout. how is the current Retry token mechanism not fulfilling this goal? Thanks, Lars --0000000000006648ce058e469994 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable = The Retry token forc= es the infrastructure to send data instead of black holing.

Why don=E2=80=99t we look into optio= nally signing long OCIDs that can be used if under attack and otherwise jus= t serve as dumb randomness.

The 0-RTT token could also be used in case of an attack.

Mikkel

On 22 July 2019 at 17.02.22, Lars Eggert (lars@eggert.org) wrote:

Hi,

On 2019-7-22, at 10:38, brent.bilger=3D40verizon.com@dmarc.ietf.org wrote:
> But we can make QUIC much, much better than TCP because the first = packet of the UDP connection that the server receives can pre-authenticate = the client. Therefore, the server could: 1) allocate very little resource t= o the client to check that the client is authorized to connect, 2) eliminat= e the process intensive crypto for unauthorized clients, and 3) reject the = connection immediately instead of waiting for some timeout.

how is the current Retry token mechanism not fulfilling this goal?

Thanks,
Lars

--0000000000006648ce058e469994-- From nobody Mon Jul 22 10:10:55 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F1322120284 for ; Mon, 22 Jul 2019 10:10:52 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.698 X-Spam-Level: X-Spam-Status: No, score=-2.698 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=fb.com header.b=YA6ttAOE; dkim=pass (1024-bit key) header.d=fb.onmicrosoft.com header.b=VpLZM4TL Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gojPBc4vwXpY for ; Mon, 22 Jul 2019 10:10:51 -0700 (PDT) Received: from mx0a-00082601.pphosted.com (mx0a-00082601.pphosted.com [67.231.145.42]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 640BA12013B for ; Mon, 22 Jul 2019 10:10:50 -0700 (PDT) Received: from pps.filterd (m0044012.ppops.net [127.0.0.1]) by mx0a-00082601.pphosted.com (8.16.0.27/8.16.0.27) with SMTP id x6MHA320016155; Mon, 22 Jul 2019 10:10:47 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fb.com; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : mime-version; s=facebook; bh=Z3hDV8g1Uo/L15r3a5iqprMdAbIdiwLN7tp+vPJk7nc=; b=YA6ttAOEy5B9STi2VRhD4p2yHR9TzxMif18Jf1YRov9u6GQCkifdeYlFrhiEE+fHNi9Z S7BXQvyEwG//SBuhA7l1+vDgKskL/aEcABKtvvDw5MYB3Z6LOpJHZP/iCR0qZJDQX6dJ mQBBmxq7ghD1rMvxGv5hLwtfK5Mv6L2EWj0= Received: from mail.thefacebook.com (mailout.thefacebook.com [199.201.64.23]) by mx0a-00082601.pphosted.com with ESMTP id 2twg6a89wx-2 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT); Mon, 22 Jul 2019 10:10:47 -0700 Received: from prn-hub03.TheFacebook.com (2620:10d:c081:35::127) by prn-hub03.TheFacebook.com (2620:10d:c081:35::127) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.1.1713.5; Mon, 22 Jul 2019 10:10:45 -0700 Received: from NAM02-CY1-obe.outbound.protection.outlook.com (192.168.54.28) by o365-in.thefacebook.com (192.168.16.27) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.1.1713.5 via Frontend Transport; Mon, 22 Jul 2019 10:10:45 -0700 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=CJNZbR8/kXCHurDGvSWO8mhT8XPaJuhIogRah+0PfKwajjIkSZv7o0vHOezFXSPGSZN0NWIXlOVPOBUSaI5gboUXDNaHMEGah6FB3FOz9MEevQyW2H8ClWAyFuWzb4zTrv4ZKOUX34W1rLe49T4bifM3cqZ1icDvuhUYncjN5meWseSiWVewZU2WUrzGTG28mVb/qnk0Q26cSVz20Rch7M9ZbEmpjJMPHsbSrjFGBRJUjWnGB0+1FtlWKfZMJFxzhGwkZBw4PeuMgz1Ea1i0CePR4R/cr603NDcoULtWUIK1CIH59AjcjW7RL8j4Op3jvaCE2DLb3dSgJDIaGWYUbg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Z3hDV8g1Uo/L15r3a5iqprMdAbIdiwLN7tp+vPJk7nc=; b=SGvfIq33MSt9kFWFt9S/2lwScsWlCmrW0agbCm+edborS4R+XKfzoredHwiOxkhs82O7PzqnUmBGjwaEjmk6ylho4iIKHC+JAqJD0ENKt5LMEPWD/Mj58hnJqJl+INKKtLf4I+PfCDUvObE+phsr9tSMiBb7txZuqR+tpzYSZnePAXgAEedwKtVrSsrvdBzqr5T9T0YiNLy2TPl+2H7JChAET+AUsuojJbcZGSay9Satu30Ilwi1X7HO0hhPqkf2C2tzaY//6EfhwtqVfqzi5NvE+E2Mjzsu7Q5uoReqrwfHci64io0w2Cr0pLIsuRofNqhZp+PtmDctqtTBV0rhOA== ARC-Authentication-Results: i=1; mx.microsoft.com 1;spf=pass smtp.mailfrom=fb.com;dmarc=pass action=none header.from=fb.com;dkim=pass header.d=fb.com;arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fb.onmicrosoft.com; s=selector1-fb-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Z3hDV8g1Uo/L15r3a5iqprMdAbIdiwLN7tp+vPJk7nc=; b=VpLZM4TLQHj+FV4+E8x+gigaKrnmy+I/jy3POeIUpS0TWNk/ej8GLUfinJMjxBugf4BdQYe23MPjVkomEKwm8gN7LxmXjsEuzO+S/M38HfTPCx/k0pSCi280psCjzukBGMrDx++qa8L6Sred+1dCzQnBD7L0vQM5/ASq9et1fE8= Received: from CY4PR15MB1542.namprd15.prod.outlook.com (10.172.160.9) by CY4PR15MB1447.namprd15.prod.outlook.com (10.172.155.138) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2073.14; Mon, 22 Jul 2019 17:10:43 +0000 Received: from CY4PR15MB1542.namprd15.prod.outlook.com ([fe80::35ce:8d12:c463:7cfc]) by CY4PR15MB1542.namprd15.prod.outlook.com ([fe80::35ce:8d12:c463:7cfc%12]) with mapi id 15.20.2094.013; Mon, 22 Jul 2019 17:10:43 +0000 From: Roberto Peon To: "brent.bilger=40verizon.com@dmarc.ietf.org" , Ian Swett CC: "quic@ietf.org" , "brent.bilger@verizon.com" Subject: Re: [E] Re: DoS-ing QUIC servers is too easy Thread-Topic: [E] Re: DoS-ing QUIC servers is too easy Thread-Index: AQHVPkSdGqqQm7OsKU++bWyymPl7AKbSEYQAgASoUID//+degA== Date: Mon, 22 Jul 2019 17:10:43 +0000 Message-ID: <9BF2DC9D-F14C-4451-9191-1A1557556691@fb.com> References: <21E3AE84-02C5-4943-A88E-B62329E21002@one.verizon.com> <507D5DB7-EDF2-4429-A518-604A377F92D9@one.verizon.com> In-Reply-To: <507D5DB7-EDF2-4429-A518-604A377F92D9@one.verizon.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.1a.0.190609 x-originating-ip: [2001:67c:370:128:4e4:7d58:cf96:a6b8] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 72ca2419-5b31-4b49-3633-08d70ec787d8 x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600148)(711020)(4605104)(1401327)(2017052603328)(7193020); SRVR:CY4PR15MB1447; x-ms-traffictypediagnostic: CY4PR15MB1447: x-ms-exchange-purlcount: 2 x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:6430; x-forefront-prvs: 01068D0A20 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(366004)(346002)(396003)(39860400002)(376002)(136003)(199004)(189003)(53936002)(102836004)(229853002)(256004)(99286004)(14454004)(6436002)(76176011)(4326008)(6246003)(91956017)(68736007)(236005)(66446008)(66946007)(6512007)(6116002)(66556008)(486006)(54896002)(76116006)(53546011)(66476007)(64756008)(33656002)(478600001)(54906003)(6306002)(81166006)(316002)(6506007)(5660300002)(81156014)(6486002)(110136005)(58126008)(476003)(7736002)(14444005)(11346002)(446003)(66574012)(8936002)(8676002)(36756003)(2616005)(71190400001)(25786009)(71200400001)(86362001)(186003)(46003)(2906002); DIR:OUT; SFP:1102; SCL:1; SRVR:CY4PR15MB1447; H:CY4PR15MB1542.namprd15.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: fb.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam-message-info: pARI82EltdE5Jz15nGtfygBcK0nfvB2kZHQhmmAi8yh92Ii1pcv9C1TSxOUao9e5IpFE2nalPxKZI96Eg9AfVl2lxFSlDOCc9HpOL1BX5Z/yIKCJroC6Bse374H+ZP7m59xD7ZM22tsZ0ED/JZJodlvAScQjDrlYLStMe5t/uUvlPursx0+NRGwD05h3tOS2Tukms6zGaJgUAmOWPho5IcOtxNdfGA3cDeVwTriY8kqsJQeaSHjpINFlingdmcDBmWPkiR/vi9VUWzRZkZmfzwQera5X/2gFBb+ixqa9dF9L+YcFgp7gEmcJHHL1yyEaxCkkjxlvFcmh469WpWH91thId8tUPHVdy1MizAn9A2JefHGygH18/6ltY4RsjbEI6JnkKMD1fBeTYU5aNm3OI7wRZc7sKv9vMZYbJI8cy7I= Content-Type: multipart/alternative; boundary="_000_9BF2DC9DF14C445191911A1557556691fbcom_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: 72ca2419-5b31-4b49-3633-08d70ec787d8 X-MS-Exchange-CrossTenant-originalarrivaltime: 22 Jul 2019 17:10:43.4849 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 8ae927fe-1255-47a7-a2af-5f3a069daaa2 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: fenix@fb.com X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY4PR15MB1447 X-OriginatorOrg: fb.com X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2019-07-22_13:, , signatures=0 X-Proofpoint-Spam-Details: rule=fb_default_notspam policy=fb_default score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1011 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=528 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1810050000 definitions=main-1907220190 X-FB-Internal: deliver Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 22 Jul 2019 17:10:53 -0000 --_000_9BF2DC9DF14C445191911A1557556691fbcom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 V2hlbiB5b3XigJlyZSB0YWxraW5nIGFib3V0IHByZS1hdXRoZW50aWNhdGlvbiwgYXJlIHlvdSBy ZWZlcnJpbmcgdG8gdGhlIDAtcnR0IHN0dWZmPw0KSWYgc28sIHRoZW4gSSBhZ3JlZS0tIGJpYXNp bmcgdHJhZmZpYyB0byBjbGllbnRzIHRoYXQgaGF2ZSBzdWNjZXNzZnVsbHkgY29ubmVjdGVkIGlu IHRoZSBwYXN0IGlzIGV4YWN0bHkgd2hhdCBldmVyeSBTWU4tZmxvb2QtbGlrZSBhdHRhY2sgbWl0 aWdhdGlvbiBkb2VzIGF0IGl0cyBjb3JlICh0aG91Z2gg4oCYcGFzdOKAmSBtYXkgYmUgcHJldHR5 IHJlY2VudCBpbiB0aGUgY2FzZSBvZiBzeW4tY29va2llcykuDQotPVINCg0KRnJvbTogUVVJQyA8 cXVpYy1ib3VuY2VzQGlldGYub3JnPiBvbiBiZWhhbGYgb2YgImJyZW50LmJpbGdlcj00MHZlcml6 b24uY29tQGRtYXJjLmlldGYub3JnIiA8YnJlbnQuYmlsZ2VyPTQwdmVyaXpvbi5jb21AZG1hcmMu aWV0Zi5vcmc+DQpEYXRlOiBNb25kYXksIEp1bHkgMjIsIDIwMTkgYXQgMTA6NDAgQU0NClRvOiBJ YW4gU3dldHQgPGlhbnN3ZXR0PTQwZ29vZ2xlLmNvbUBkbWFyYy5pZXRmLm9yZz4NCkNjOiAicXVp Y0BpZXRmLm9yZyIgPHF1aWNAaWV0Zi5vcmc+LCAiYnJlbnQuYmlsZ2VyQHZlcml6b24uY29tIiA8 YnJlbnQuYmlsZ2VyQHZlcml6b24uY29tPg0KU3ViamVjdDogUmU6IFtFXSBSZTogRG9TLWluZyBR VUlDIHNlcnZlcnMgaXMgdG9vIGVhc3kNCg0KT24gSnVsIDE5LCAyMDE5LCBhdCA4OjMxIEFNLCBJ YW4gU3dldHQgPGlhbnN3ZXR0PTQwZ29vZ2xlLmNvbUBkbWFyYy5pZXRmLm9yZzxtYWlsdG86aWFu c3dldHQ9NDBnb29nbGUuY29tQGRtYXJjLmlldGYub3JnPj4gd3JvdGU6DQoNCg0KDQpPbiBGcmks IEp1bCAxOSwgMjAxOSBhdCAxMToxNiBBTSA8YnJlbnQuYmlsZ2VyPTQwdmVyaXpvbi5jb21AZG1h cmMuaWV0Zi5vcmc8bWFpbHRvOjQwdmVyaXpvbi5jb21AZG1hcmMuaWV0Zi5vcmc+PiB3cm90ZToN ClByb2JsZW06DQpRVUlDIHNlcnZlcnMsIGxpa2UganVzdCBhYm91dCBhbGwgb3RoZXIgc2VydmVy cywgYXJlIGZhciB0b28gc3VzY2VwdGlibGUgdG8gRG9TIGF0dGFja3MuICBJbnRlZ3JhbCB0byB0 aGUgY2xpZW50LXNlcnZlciBhcmNoaXRlY3R1cmUgaXMgdGhlIGZhY3QgdGhhdCBzZXJ2ZXJzIG11 c3QgbGlzdGVuIHRvIGFsbCBwb3RlbnRpYWwgY2xpZW50cyBvbiB0aGUgbmV0d29yayhzKSB0aGV5 IHNlcnZlIOKAkyB3aGV0aGVyIHRoZSBjb25uZWN0aW9uIGlzIGZyb20gYSBsZWdpdGltYXRlIGNs aWVudCBvciBub3QuIFRoaXMgd2FzIGZpbmUgd2hlbiBJVCBjb250cm9sbGVkIHRoZSBuZXR3b3Jr LCBidXQgdGhlIHNjb3BlIG9mIHRoZSBJbnRlcm5ldCBjaGFuZ2VkIGFsbCB0aGF0LiBTZXJ2ZXJz IGxpc3RlbmluZyB0byBhbGwgY29tbXVuaWNhdGlvbnMgZW5hYmxlcyByZXNvdXJjZSBEb1MgYXR0 YWNrcy4gUmVzb3VyY2UgRG9TIGF0dGFja3Mgb24gUVVJQyBzZXJ2ZXJzIGFyZSBhbXBsaWZpZWQg YnkgdGhlIHByb2Nlc3NpbmcgcmVxdWlyZW1lbnRzIG9mIHB1YmxpYy9wcml2YXRlIGtleSBjcnlw dG9ncmFwaHkgd2hpY2ggYW4gYXR0YWNrZXIgYSBjYW4gaW5kdWNlIHRoZSBzZXJ2ZXIgdG8gZG8g d2l0aG91dCBidXJkZW5pbmcgdGhlIGF0dGFja2VyLiAgSW4gYWRkaXRpb24sIHNlcnZlcnMgcmVz cG9uZGluZyB0byBhbGwgcXVlcmllcyBjYW4gbGVhayBpbmZvcm1hdGlvbiB0aGF0IGFkdmVyc2Fy aWVzIGNhbiBsYXRlciB1c2UgdG8gYXR0YWNrIHRoZW0uDQoNClJlcXVpcmVtZW50Og0KUHJvdmlk ZSBhIHdheSB0aGF0IFFVSUMgc2VydmVycyBjYW4gZWFzaWx5LCB3aXRoIHZlcnkgbG93IHByb2Nl c3NpbmcgcmVxdWlyZW1lbnQsIHRlbGwgaWYgYSBjb25uZWN0aW9uIGlzIGZyb20gYSBsZWdpdGlt YXRlIGNsaWVudC4NCg0KUVVJQydzIFJldHJ5IHRva2VuIGlzIGRlc2lnbmVkIGZvciB0aGlzIHB1 cnBvc2UuLiAgSSBiZWxpZXZlIHRoYXQgc2hvdWxkIGJlIHN1ZmZpY2llbnQgYW5kIG1ha2UgUVVJ QyBlcXVpdmFsZW50IHRvIFRDUC4uDQoNCkJ1dCB3ZSBjYW4gbWFrZSBRVUlDIG11Y2gsIG11Y2gg YmV0dGVyIHRoYW4gVENQIGJlY2F1c2UgdGhlIGZpcnN0IHBhY2tldCBvZiB0aGUgVURQIGNvbm5l Y3Rpb24gdGhhdCB0aGUgc2VydmVyIHJlY2VpdmVzIGNhbiBwcmUtYXV0aGVudGljYXRlIHRoZSBj bGllbnQuIFRoZXJlZm9yZSwgdGhlIHNlcnZlciBjb3VsZDogMSkgYWxsb2NhdGUgdmVyeSBsaXR0 bGUgcmVzb3VyY2UgdG8gdGhlIGNsaWVudCB0byBjaGVjayB0aGF0IHRoZSBjbGllbnQgaXMgYXV0 aG9yaXplZCB0byBjb25uZWN0LCAyKSBlbGltaW5hdGUgdGhlIHByb2Nlc3MgaW50ZW5zaXZlIGNy eXB0byBmb3IgdW5hdXRob3JpemVkIGNsaWVudHMsIGFuZCAzKSByZWplY3QgdGhlIGNvbm5lY3Rp b24gaW1tZWRpYXRlbHkgaW5zdGVhZCBvZiB3YWl0aW5nIGZvciBzb21lIHRpbWVvdXQuDQoNCg0K DQpBbHNvLCBRVUlDIHJlcXVpcmVzIG11Y2ggbGFyZ2VyIEluaXRpYWwgcGFja2V0IHNpemVzIHRo YW4gYSBUQ1AgU1lOLCBpbmNyZWFzaW5nIHRoZSBhbW91bnQgb2Ygd29yayBhbiBhdHRhY2tlciBo YXMgdG8gZXhwZW5kLg0KDQpZZXMsIHNvIHdlIGNvdWxkIG9wdGlvbmFsbHkgbWFrZSB1c2Ugb2Yg c29tZSBvZiB0aGF0IGxhcmdlciBwYWNrZXQgc2l6ZSBmb3IgdGhlIHByZS1hdXRoZW50aWNhdGlv bi4NCg0KQnJlbnQNCg0KDQoNCg0KDQpCcmVudCBCbGlnZXINCkRpcmVjdG9yLVRlY2hub2xvZ3kg VmVyaXpvbiBTRFANCmJyZW50LmJpbGdlckB2ZXJpem9uLmNvbTxtYWlsdG86YnJlbnQuYmlsZ2Vy QHZlcml6b24uY29tPg0KDQoNCg0KDQoNCg0KDQpCcmVudCBCbGlnZXINCkRpcmVjdG9yLVRlY2hu b2xvZ3kgVmVyaXpvbiBTRFANCmJyZW50LmJpbGdlckB2ZXJpem9uLmNvbTxtYWlsdG86YnJlbnQu YmlsZ2VyQHZlcml6b24uY29tPg0KDQoNCg0KDQoNCg== --_000_9BF2DC9DF14C445191911A1557556691fbcom_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseTpIZWx2ZXRpY2E7DQoJcGFub3NlLTE6MCAwIDAgMCAwIDAgMCAwIDAg MDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJDYW1icmlhIE1hdGgiOw0KCXBhbm9zZS0x OjIgNCA1IDMgNSA0IDYgMyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDYWxpYnJp Ow0KCXBhbm9zZS0xOjIgMTUgNSAyIDIgMiA0IDMgMiA0O30NCi8qIFN0eWxlIERlZmluaXRpb25z ICovDQpwLk1zb05vcm1hbCwgbGkuTXNvTm9ybWFsLCBkaXYuTXNvTm9ybWFsDQoJe21hcmdpbjow aW47DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1m YW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0KYTpsaW5rLCBzcGFuLk1zb0h5cGVybGluaw0K CXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6Ymx1ZTsNCgl0ZXh0LWRlY29yYXRpb246 dW5kZXJsaW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29IeXBlcmxpbmtGb2xsb3dlZA0KCXttc28t c3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6cHVycGxlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRl cmxpbmU7fQ0KcC5tc29ub3JtYWwwLCBsaS5tc29ub3JtYWwwLCBkaXYubXNvbm9ybWFsMA0KCXtt c28tc3R5bGUtbmFtZTptc29ub3JtYWw7DQoJbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87DQoJbWFy Z2luLXJpZ2h0OjBpbjsNCgltc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzsNCgltYXJnaW4tbGVm dDowaW47DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1z ZXJpZjt9DQpzcGFuLkVtYWlsU3R5bGUxOA0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1yZXBs eTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjp3aW5kb3d0ZXh0 O30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQt c2l6ZToxMC4wcHQ7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6OC41aW4gMTEuMGluOw0K CW1hcmdpbjoxLjBpbiAxLjBpbiAxLjBpbiAxLjBpbjt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3Bh Z2U6V29yZFNlY3Rpb24xO30NCi0tPjwvc3R5bGU+DQo8L2hlYWQ+DQo8Ym9keSBsYW5nPSJFTi1V UyIgbGluaz0iYmx1ZSIgdmxpbms9InB1cnBsZSI+DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEi Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+V2hlbiB5b3XigJlyZSB0YWxraW5nIGFib3V0IHByZS1h dXRoZW50aWNhdGlvbiwgYXJlIHlvdSByZWZlcnJpbmcgdG8gdGhlIDAtcnR0IHN0dWZmPzxicj4N CklmIHNvLCB0aGVuIEkgYWdyZWUtLSBiaWFzaW5nIHRyYWZmaWMgdG8gY2xpZW50cyB0aGF0IGhh dmUgc3VjY2Vzc2Z1bGx5IGNvbm5lY3RlZCBpbiB0aGUgcGFzdCBpcyBleGFjdGx5IHdoYXQgZXZl cnkgU1lOLWZsb29kLWxpa2UgYXR0YWNrIG1pdGlnYXRpb24gZG9lcyBhdCBpdHMgY29yZSAodGhv dWdoIOKAmHBhc3TigJkgbWF5IGJlIHByZXR0eSByZWNlbnQgaW4gdGhlIGNhc2Ugb2Ygc3luLWNv b2tpZXMpLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+LT1SPG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXYg c3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0I1QzRERiAxLjBwdDtwYWRkaW5n OjMuMHB0IDBpbiAwaW4gMGluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTIuMHB0O2NvbG9yOmJsYWNrIj5Gcm9tOiA8L3NwYW4+PC9iPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTIuMHB0O2NvbG9yOmJsYWNrIj5RVUlDICZsdDtxdWljLWJvdW5jZXNA aWV0Zi5vcmcmZ3Q7IG9uIGJlaGFsZiBvZiAmcXVvdDticmVudC5iaWxnZXI9NDB2ZXJpem9uLmNv bUBkbWFyYy5pZXRmLm9yZyZxdW90OyAmbHQ7YnJlbnQuYmlsZ2VyPTQwdmVyaXpvbi5jb21AZG1h cmMuaWV0Zi5vcmcmZ3Q7PGJyPg0KPGI+RGF0ZTogPC9iPk1vbmRheSwgSnVseSAyMiwgMjAxOSBh dCAxMDo0MCBBTTxicj4NCjxiPlRvOiA8L2I+SWFuIFN3ZXR0ICZsdDtpYW5zd2V0dD00MGdvb2ds ZS5jb21AZG1hcmMuaWV0Zi5vcmcmZ3Q7PGJyPg0KPGI+Q2M6IDwvYj4mcXVvdDtxdWljQGlldGYu b3JnJnF1b3Q7ICZsdDtxdWljQGlldGYub3JnJmd0OywgJnF1b3Q7YnJlbnQuYmlsZ2VyQHZlcml6 b24uY29tJnF1b3Q7ICZsdDticmVudC5iaWxnZXJAdmVyaXpvbi5jb20mZ3Q7PGJyPg0KPGI+U3Vi amVjdDogPC9iPlJlOiBbRV0gUmU6IERvUy1pbmcgUVVJQyBzZXJ2ZXJzIGlzIHRvbyBlYXN5PG86 cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0i bWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj5PbiBKdWwgMTksIDIwMTksIGF0IDg6MzEgQU0sIElhbiBTd2V0dCAmbHQ7PGEg aHJlZj0ibWFpbHRvOmlhbnN3ZXR0PTQwZ29vZ2xlLmNvbUBkbWFyYy5pZXRmLm9yZyI+aWFuc3dl dHQ9NDBnb29nbGUuY29tQGRtYXJjLmlldGYub3JnPC9hPiZndDsgd3JvdGU6PG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0K PGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286 cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9w Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5PbiBGcmksIEp1bCAxOSwgMjAx OSBhdCAxMToxNiBBTSAmbHQ7YnJlbnQuYmlsZ2VyPTxhIGhyZWY9Im1haWx0bzo0MHZlcml6b24u Y29tQGRtYXJjLmlldGYub3JnIj40MHZlcml6b24uY29tQGRtYXJjLmlldGYub3JnPC9hPiZndDsg d3JvdGU6PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJib3JkZXI6 bm9uZTtib3JkZXItbGVmdDpzb2xpZCAjQ0NDQ0NDIDEuMHB0O3BhZGRpbmc6MGluIDBpbiAwaW4g Ni4wcHQ7bWFyZ2luLWxlZnQ6NC44cHQ7bWFyZ2luLXJpZ2h0OjBpbiI+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+UHJvYmxlbTo8YnI+DQpRVUlDIHNlcnZlcnMsIGxpa2UganVzdCBhYm91 dCBhbGwgb3RoZXIgc2VydmVycywgYXJlIGZhciB0b28gc3VzY2VwdGlibGUgdG8gRG9TIGF0dGFj a3MuJm5ic3A7Jm5ic3A7SW50ZWdyYWwgdG8gdGhlIGNsaWVudC1zZXJ2ZXIgYXJjaGl0ZWN0dXJl IGlzIHRoZSBmYWN0Jm5ic3A7dGhhdCBzZXJ2ZXJzIG11c3QgbGlzdGVuIHRvIGFsbCBwb3RlbnRp YWwgY2xpZW50cyBvbiB0aGUgbmV0d29yayhzKSB0aGV5IHNlcnZlIOKAkyB3aGV0aGVyIHRoZSBj b25uZWN0aW9uIGlzIGZyb20NCiBhIGxlZ2l0aW1hdGUgY2xpZW50IG9yIG5vdC4mbmJzcDtUaGlz IHdhcyBmaW5lIHdoZW4gSVQgY29udHJvbGxlZCB0aGUgbmV0d29yaywgYnV0IHRoZSBzY29wZSBv ZiB0aGUgSW50ZXJuZXQgY2hhbmdlZCBhbGwgdGhhdC4gU2VydmVycyBsaXN0ZW5pbmcgdG8gYWxs IGNvbW11bmljYXRpb25zJm5ic3A7ZW5hYmxlcyByZXNvdXJjZSBEb1MgYXR0YWNrcy4gUmVzb3Vy Y2UgRG9TIGF0dGFja3Mgb24gUVVJQyBzZXJ2ZXJzIGFyZSBhbXBsaWZpZWQgYnkgdGhlIHByb2Nl c3NpbmcNCiByZXF1aXJlbWVudHMgb2YgcHVibGljL3ByaXZhdGUmbmJzcDtrZXkgY3J5cHRvZ3Jh cGh5IHdoaWNoIGFuIGF0dGFja2VyIGEgY2FuIGluZHVjZSB0aGUgc2VydmVyIHRvIGRvIHdpdGhv dXQgYnVyZGVuaW5nIHRoZSBhdHRhY2tlci4mbmJzcDsmbmJzcDtJbiBhZGRpdGlvbiwgc2VydmVy cyByZXNwb25kaW5nIHRvIGFsbCZuYnNwO3F1ZXJpZXMgY2FuIGxlYWsgaW5mb3JtYXRpb24gdGhh dCBhZHZlcnNhcmllcyBjYW4gbGF0ZXIgdXNlIHRvIGF0dGFjayB0aGVtLjxicj4NCjxicj4NClJl cXVpcmVtZW50Ojxicj4NClByb3ZpZGUgYSB3YXkgdGhhdCBRVUlDIHNlcnZlcnMgY2FuIGVhc2ls eSwgd2l0aCB2ZXJ5IGxvdyBwcm9jZXNzaW5nIHJlcXVpcmVtZW50LCB0ZWxsIGlmIGEgY29ubmVj dGlvbiBpcyBmcm9tIGEgbGVnaXRpbWF0ZSBjbGllbnQuPG86cD48L286cD48L3A+DQo8L2Rpdj4N CjwvYmxvY2txdW90ZT4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlFVSUMncyBSZXRy eSB0b2tlbiBpcyBkZXNpZ25lZCBmb3IgdGhpcyBwdXJwb3NlLi4mbmJzcDsgSSBiZWxpZXZlIHRo YXQgc2hvdWxkIGJlIHN1ZmZpY2llbnQgYW5kIG1ha2UgUVVJQyBlcXVpdmFsZW50IHRvIFRDUC4u PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2tx dW90ZT4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4N CjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+QnV0IHdlIGNhbiBtYWtlIFFVSUMgbXVjaCwg bXVjaCBiZXR0ZXIgdGhhbiBUQ1AgYmVjYXVzZSB0aGUgZmlyc3QgcGFja2V0IG9mIHRoZSBVRFAg Y29ubmVjdGlvbiB0aGF0IHRoZSBzZXJ2ZXIgcmVjZWl2ZXMgY2FuIHByZS1hdXRoZW50aWNhdGUg dGhlIGNsaWVudC4gVGhlcmVmb3JlLCB0aGUgc2VydmVyIGNvdWxkOiAxKSBhbGxvY2F0ZSB2ZXJ5 IGxpdHRsZSByZXNvdXJjZSB0byB0aGUgY2xpZW50IHRvIGNoZWNrDQogdGhhdCB0aGUgY2xpZW50 IGlzIGF1dGhvcml6ZWQgdG8gY29ubmVjdCwgMikgZWxpbWluYXRlIHRoZSBwcm9jZXNzIGludGVu c2l2ZSBjcnlwdG8gZm9yIHVuYXV0aG9yaXplZCBjbGllbnRzLCBhbmQgMykgcmVqZWN0IHRoZSBj b25uZWN0aW9uIGltbWVkaWF0ZWx5IGluc3RlYWQgb2Ygd2FpdGluZyBmb3Igc29tZSB0aW1lb3V0 LjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxicj4NCjxicj4NCjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8YmxvY2txdW90ZSBzdHls ZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8ZGl2Pg0K PGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkFsc28sIFFVSUMgcmVxdWlyZXMg bXVjaCBsYXJnZXIgSW5pdGlhbCBwYWNrZXQgc2l6ZXMgdGhhbiBhIFRDUCBTWU4sIGluY3JlYXNp bmcgdGhlIGFtb3VudCBvZiB3b3JrIGFuIGF0dGFja2VyIGhhcyB0byBleHBlbmQuPG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+WWVzLCBzbyB3ZSBjb3VsZCBvcHRpb25hbGx5IG1ha2UgdXNl IG9mIHNvbWUgb2YgdGhhdCBsYXJnZXIgcGFja2V0IHNpemUgZm9yIHRoZSBwcmUtYXV0aGVudGlj YXRpb24uPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPkJyZW50PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48YnI+DQo8YnI+DQo8bzpwPjwvbzpwPjwvcD4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJn aW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+ DQo8YmxvY2txdW90ZSBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgI0NDQ0ND QyAxLjBwdDtwYWRkaW5nOjBpbiAwaW4gMGluIDYuMHB0O21hcmdpbi1sZWZ0OjQuOHB0O21hcmdp bi1yaWdodDowaW4iPg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWJvdHRvbToxMy41cHQiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTMuNXB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYSI+PG86cD4mbmJzcDs8L286cD48 L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMy41cHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhIj48bzpwPiZuYnNwOzwv bzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjEzLjVwdDtmb250LWZhbWlseTpIZWx2ZXRpY2EiPkJyZW50IEJs aWdlcjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTMuNXB0O2ZvbnQtZmFtaWx5OkhlbHZldGlj YSI+RGlyZWN0b3ItVGVjaG5vbG9neSZuYnNwO1Zlcml6b24gU0RQJm5ic3A7PG86cD48L286cD48 L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMy41cHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhIj48YSBocmVmPSJtYWls dG86YnJlbnQuYmlsZ2VyQHZlcml6b24uY29tIiB0YXJnZXQ9Il9ibGFuayI+YnJlbnQuYmlsZ2Vy QHZlcml6b24uY29tPC9hPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTguMHB0O2ZvbnQtZmFt aWx5OkhlbHZldGljYSI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEzLjVwdDtmb250LWZhbWls eTpIZWx2ZXRpY2EiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWJvdHRvbToxMi4wcHQiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNw OzwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2 Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNw OzwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibWFyZ2luLWJvdHRvbToxMy41cHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTMuNXB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYTtjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286 cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMy41cHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhO2NvbG9yOmJsYWNr Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEzLjVwdDtmb250LWZhbWlseTpIZWx2 ZXRpY2E7Y29sb3I6YmxhY2siPkJyZW50IEJsaWdlcjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTMuNXB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYTtjb2xvcjpibGFjayI+RGlyZWN0b3ItVGVjaG5v bG9neSZuYnNwO1Zlcml6b24gU0RQJm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMy41 cHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhO2NvbG9yOmJsYWNrIj48YSBocmVmPSJtYWlsdG86YnJl bnQuYmlsZ2VyQHZlcml6b24uY29tIj5icmVudC5iaWxnZXJAdmVyaXpvbi5jb208L2E+PG86cD48 L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxOC4wcHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhO2NvbG9yOmJs YWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTMuNXB0O2ZvbnQtZmFtaWx5OkhlbHZldGlj YTtjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tYm90dG9tOjEyLjBwdCI+PG86 cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxicj4NCjxi cj4NCjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_9BF2DC9DF14C445191911A1557556691fbcom_-- From nobody Mon Jul 22 13:36:42 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 78F6F1200A3 for ; Mon, 22 Jul 2019 13:36:35 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -17.499 X-Spam-Level: X-Spam-Status: No, score=-17.499 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, ENV_AND_HDR_SPF_MATCH=-0.5, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5, USER_IN_DEF_SPF_WL=-7.5] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rYLJBLrdr36K for ; Mon, 22 Jul 2019 13:36:32 -0700 (PDT) Received: from mail-lf1-x132.google.com (mail-lf1-x132.google.com [IPv6:2a00:1450:4864:20::132]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8E54A1200DE for ; Mon, 22 Jul 2019 13:36:32 -0700 (PDT) Received: by mail-lf1-x132.google.com with SMTP id s19so27645304lfb.9 for ; Mon, 22 Jul 2019 13:36:32 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:from:date:message-id:subject:to:cc; bh=WE5v5GQDtvmu+HJ52A3thcKZ6q79BY8L24gjsBMttSY=; b=v9pX59Fg3ZVNVUkggLIPp8TettOlqAhg/Ho+i0YEFnYgtcbboMBnIfxPxHN2CIdj13 hCvm22HzmaMsdEC0S7RuLVzKWDmBKe3Cjs+c9DIweqfIgjiw3jlYRHAcdkZ5g4bqMqhv 8veL1jiKSUcov/omQoK+GXgf0Ffj+ui8RKMhC0JNWhqoSlUsUwVapFOPYov5118BxHik 6NduFNgHvc1x7queoaujP4agCxr7M/fvvILfxRJGK3bTx9kOHJ5Whq/ty8kpzPdUOmIM rn0MY5dlPGX7its1je8sDolfpdRGt/lKx8mHOJlgViK9sCrPPpzwwsL5X4asyof8egpa fTZQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to:cc; bh=WE5v5GQDtvmu+HJ52A3thcKZ6q79BY8L24gjsBMttSY=; b=fNG+MnLQeGNvYT7z228Io+nM3cwELL6EKn/sUe8/eGsV4NacBFMIEJ4CoREjVyCbPi 3F4hnGNF8r69P6VvqUdMwi8iXVA/Zgm9K2u7gRFyekFrZV1vVMVHTUXlXWP3X4hc+2fT oal7n/V7jL+YemhH2UfMNQGK5R4RU7GysWyjKT+SDO1vQpNfI6B+d4/jyT/3HG+vAFER 6V/XVLS4lXvClKnIiv3GQfwtWP0Qp7MpXlBV+311wciFdfIS8odZW26qbSaMOJ7MIZWC F5KYew8Q+oRPlqEqTZpc4a75OIGXBwEtNUHvb9v2WhUJDbe190xMNYEGYn1IrCCu8d1/ yJwQ== X-Gm-Message-State: APjAAAUXEBqTCrZy3zyATU7aWB/TMXbZp5mtIk2dhp4Eb9hbeAesJvXm Yvtx4+6+GgWveZHRPfaVUPfMGFniRyawoKVNngHgJQ== X-Google-Smtp-Source: APXvYqwUFPGe+8AF/WfWXs15m/AVkEVfqouzUCnyaOjvNAi+Bps3509CZ6HTsQYdin5F4pLJpfg80JjUiQVCg7Hu45w= X-Received: by 2002:a19:48d1:: with SMTP id v200mr31728919lfa.190.1563827790444; Mon, 22 Jul 2019 13:36:30 -0700 (PDT) MIME-Version: 1.0 From: Victor Vasiliev Date: Mon, 22 Jul 2019 16:36:19 -0400 Message-ID: Subject: WebTransport Side Meeting (Tuesday, 15:20) To: dispatch@ietf.org, David Schinazi Cc: IETF QUIC WG , HTTP Working Group , hybi@ietf.org Content-Type: multipart/alternative; boundary="000000000000f0ea9e058e4b0703" Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 22 Jul 2019 20:36:36 -0000 --000000000000f0ea9e058e4b0703 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hello everyone, Today, at the dispatch working group meeting (18:10), I am going to present WebTransport. WebTransport is a protocol framework that allows multiplexed and datagram-oriented transport protocols to be used by the web applications (think =E2=80=9CWebSocket for UDP=E2=80=9D). Since it=E2=80=99s quite likely we will run out of time during dispatch, I scheduled a side-meeting to discuss this in more depth. Below are the side meeting details. *Time:* Tuesday, 15:20 ~ 16:50 *Place:* Room C2 (21st floor) *Organizers:* Victor Vasiliev, David Schinazi *Agenda:* 1. A more in-depth overview of WebTransport. 2. Discussion of the overall design and the use cases. 3. As time permits, some of the major outstanding design issues in Web transport, e.g.: - What fallback protocol to use? - How to multiplex streams and datagrams within a single connection? - Can we let web applications do their own congestion control? - Should WebTransport sessions have URLs associated with them? As usual, here are some helpful links: - WebTransport overview: https://tools.ietf.org/html/draft-vvv-webtransport-overview-00 - QuicTransport: https://tools.ietf.org/html/draft-vvv-webtransport-quic-00 - Http3Transport: https://tools.ietf.org/html/draft-vvv-webtransport-http3-00 - Web API Spec draft: https://wicg.github.io/web-transport/ - Discussion on use cases: https://discourse.wicg.io/t/webtransport-proposal/3508 Cheers, Victor. --000000000000f0ea9e058e4b0703 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hello everyone,

Today, at the dispatch working grou= p meeting (18:10), I am going to present WebTransport. WebTransport is a pr= otocol framework that allows multiplexed and datagram-oriented transport pr= otocols to be used by the web applications (think =E2=80=9CWebSocket for UD= P=E2=80=9D).

Since it=E2=80=99s quite likely we will run out of time= during dispatch, I scheduled a side-meeting to discuss this in more depth.= Below are the side meeting details.

Time: Tuesday, 15:20 ~ 1= 6:50
Place: Room C2 (21st floor)
Organizers: Victor Vas= iliev, David Schinazi
Agenda:
  1. A more in-depth overview= of WebTransport.
  2. Discussion of the overall design and the use case= s.
  3. As time permits, some of the major outstanding design issues in = Web transport, e.g.:
    • What fallback protocol to use?
    • How= to multiplex streams and datagrams within a single connection?
    • Can= we let web applications do their own congestion control?
    • Should We= bTransport sessions have URLs associated with them?
As usual,= here are some helpful links:
Cheers,
=C2= =A0 Victor.
--000000000000f0ea9e058e4b0703-- From nobody Mon Jul 22 14:00:26 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9E280120120; Mon, 22 Jul 2019 14:00:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sjEAunKIUEID; Mon, 22 Jul 2019 14:00:09 -0700 (PDT) Received: from warmcat.com (warmcat.com [46.105.127.147]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9268812008C; Mon, 22 Jul 2019 14:00:08 -0700 (PDT) Subject: Re: [hybi] WebTransport Side Meeting (Tuesday, 15:20) To: Victor Vasiliev , dispatch@ietf.org, David Schinazi Cc: hybi@ietf.org, IETF QUIC WG , HTTP Working Group References: From: Andy Green Message-ID: <5c631764-25e2-ce37-3f84-8eca5a8378eb@warmcat.com> Date: Mon, 22 Jul 2019 13:59:57 -0700 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.8.0 In-Reply-To: Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 22 Jul 2019 21:00:13 -0000 On 7/22/19 1:36 PM, Victor Vasiliev wrote: > Hello everyone, > > Today, at the dispatch working group meeting (18:10), I am going to > present WebTransport. WebTransport is a protocol framework that allows > multiplexed and datagram-oriented transport protocols to be used by the > web applications (think “WebSocket for UDPâ€). "Historically, web applications that needed bidirectional data stream between a client and a server could rely on WebSockets [RFC6455], a message-based protocol compatible with Web security model. However, since the abstraction it provides is a single ordered stream of messages, it suffers from head-of-line blocking (HOLB), meaning that all messages must be sent and received in order even if they are independent and some of them are no longer needed. This makes it a poor fit for latency sensitive applications which rely on partial reliability and stream independence for performance." The HOLB isn't really entirely the case... RFC6455 ws allows arbitrary fragmentation of messages allowing interleaving with control frames. ws-over-h2 allows you to can the h2 stream when you want as well. " Each new stream would require a WebSocket handshake to agree on application protocol used, meaning that it would take at least one RTT for each new stream before the client can write to it." Yes it was knowingly done as a hack to try to encourage uptake from browser vendors... it's not really integrated into the encapsulating protocol. > * WebTransport overview: > https://tools.ietf.org/html/draft-vvv-webtransport-overview-00 > * QuicTransport: > https://tools.ietf.org/html/draft-vvv-webtransport-quic-00 > * Http3Transport: > https://tools.ietf.org/html/draft-vvv-webtransport-http3-00 There's no h2 transport implementation? Not everything that might want to use this will get h3 capability in a reasonable timeframe. If there's more momentum behind it than RFC8441 there's probably room for a generic long-lived bidirectional extension to h2 either reusing DATA or a new frame type. It's a good idea to have it ride on other protocols. Not doing this really hurt RFC6455 ws since deploying it usually needed extra, different servers with the attendant difficulties interoperating with other protocols. I really suggest thinking through the effects of not having an RFC6455 type subprotocol (unless I failed to spot it). It really makes an implicit assumption about what the stream will carry that doesn't scale beyond one server carrying one thing. That's not how things tend to pan out if the protocol is useful. The url path could be hacked to imply the subprotocol but if that's not standardized it's still a mess. And the subprotocol binding may be orthogonal to the url layout complicating things needlessly. -Andy > * Web API Spec draft: https://wicg.github.io/web-transport/ > * Discussion on use cases: > https://discourse.wicg.io/t/webtransport-proposal/3508 > > Cheers, >   Victor. > > _______________________________________________ > hybi mailing list > hybi@ietf.org > https://www.ietf.org/mailman/listinfo/hybi > From nobody Mon Jul 22 14:15:44 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8CACF12008C for ; Mon, 22 Jul 2019 14:15:42 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lwcj3qv4ZgWC for ; Mon, 22 Jul 2019 14:15:41 -0700 (PDT) Received: from emh01.mail.saunalahti.fi (emh01.mail.saunalahti.fi [62.142.5.107]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C903712001B for ; Mon, 22 Jul 2019 14:15:40 -0700 (PDT) Received: from eggert.org (unknown [62.248.255.8]) by emh01.mail.saunalahti.fi (Postfix) with ESMTP id DF892201ED for ; Tue, 23 Jul 2019 00:15:38 +0300 (EEST) Received: from dhcp-88b7.meeting.ietf.org (dhcp-88b7.meeting.ietf.org [31.133.136.183]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by eggert.org (Postfix) with ESMTPSA id E7B0D64DE57 for ; Tue, 23 Jul 2019 00:15:31 +0300 (EEST) From: Lars Eggert Content-Type: multipart/signed; boundary="Apple-Mail=_70859722-4A3E-447A-B832-7D0E2B6DAA05"; protocol="application/pgp-signature"; micalg=pgp-sha512 Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Subject: Wiki for related activities Message-Id: Date: Mon, 22 Jul 2019 17:15:29 -0400 To: QUIC IETF mailing list X-MailScanner-ID: E7B0D64DE57.A4E2C X-MailScanner: Found to be clean X-MailScanner-From: lars@eggert.org Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 22 Jul 2019 21:15:43 -0000 --Apple-Mail=_70859722-4A3E-447A-B832-7D0E2B6DAA05 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii Hi, we've started a a wiki at = https://github.com/quicwg/base-drafts/wiki/Related-Activities to collect = information about the various QUIC-related proposals and activities in = the wider IETF space. The intent is to make it easier for people to find = these activities and join in. Please add to this list and update the various items as needed. Thanks, Lars --Apple-Mail=_70859722-4A3E-447A-B832-7D0E2B6DAA05 Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEDrrUO3PMwKM8fddaHbmKvSnuNPgFAl02J3EACgkQHbmKvSnu NPj2zA//S3JxvK686TkCEZKcosJFzAxdScmoV0f2HrwugwpCn07B6vU6N0YgmMtI SazPmYjTgFWTOjlIIDUN9pbJBIm1C1hlPrAFyHrBqSEN3y76u9GSX6O/29xckYDa 4pnHHcYkB0buOWhZ302JeVdi2bnugQAwIMdV8ygy1skBvcIJCXEsFToeiFjmmdIW YE5ziZc7xnZw/WFmiq3F5iCchPTdF7B7GfmdX1E2C7I19D0oPAOvqm20T87N42BC igZ77JaK5uEEmxOrSJ9GQrhRKk41PgQE3nRhqkJcovqpewhPRI+QRuxkfwgy7zw1 pe87jGZZvosp5M8Zb8KLwLMOxxck7izZEUKO5DvNCUr5np0t8W13GJFjGRklO5jq krbnAJJJvkFNFRFbs/P16b7yMWYsJe6Q3T5gla0ah7V3y5MMS6eDGeOCjsTAofl5 ouwsMUpMi8/M4SKZ1hp9PMRW4LGsIxggBiuFkMIG2IeeET0fTQdwo2Z7U/xoBcjd HscysxwJ4FJVOe9+VvpGKliGb2SaJJ6cxav6fXlldrdw7lXiBmcnH1iQpBbDazuJ DZ+D9XjmCy4KeemVlx5SLeinCNcqzSLyO7zEEni8nISHP+4YwZm4lR3zsMxWDAFp p43KE1FqSQaLe4jhYvm80lYI1q8+s+JCcu/EdJ5CiBht56FCbKE= =Nvdl -----END PGP SIGNATURE----- --Apple-Mail=_70859722-4A3E-447A-B832-7D0E2B6DAA05-- From nobody Mon Jul 22 14:29:32 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 356C512001B; Mon, 22 Jul 2019 14:29:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=apple.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id c6j6GSy2js4I; Mon, 22 Jul 2019 14:29:18 -0700 (PDT) Received: from ma1-aaemail-dr-lapp03.apple.com (ma1-aaemail-dr-lapp03.apple.com [17.171.2.72]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1FECB1200B9; Mon, 22 Jul 2019 14:29:18 -0700 (PDT) Received: from pps.filterd (ma1-aaemail-dr-lapp03.apple.com [127.0.0.1]) by ma1-aaemail-dr-lapp03.apple.com (8.16.0.27/8.16.0.27) with SMTP id x6MLM69N062761; Mon, 22 Jul 2019 14:29:13 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=apple.com; h=sender : content-type : mime-version : subject : from : in-reply-to : date : cc : content-transfer-encoding : message-id : references : to; s=20180706; bh=Mjp+2BlrZ2RjXqmOsoC9wmr6feKbPVzKF5onqcpmZqQ=; b=SSUjTpiePl98fdqT/fXYJCj9LCZJVpF+JZAATCtw6the8n9jJ2S7b455Rb81pAffVeZP oT6nWsN/4TWUcf+OflhbsgVbt0gCZchayfItP748m/KRgewtMxEo8jOlQgdx3ysWNLc3 qtvddUQ/QJIUr1xRGA1Zeo0chKUs5Ftn4Z9P0NeM7R1f0B+vYlNiAIWsyCD7FIts0ngl Pi5TF+xjouvrEhx/KFpLpWdydtvuuiX//ayo6ftd2K3WWIjFprPIBG1dMBFq3sdKBT8/ VngibxOhAM1RUNVlgkdYZOd+ntnXLxsxgKySV2H5sfzapk0dzb6IOwf+OfL19zLNgR/r OQ== Received: from ma1-mtap-s02.corp.apple.com (ma1-mtap-s02.corp.apple.com [17.40.76.6]) by ma1-aaemail-dr-lapp03.apple.com with ESMTP id 2tv1xymqf4-2 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO); Mon, 22 Jul 2019 14:29:13 -0700 Received: from nwk-mmpp-sz10.apple.com (nwk-mmpp-sz10.apple.com [17.128.115.122]) by ma1-mtap-s02.corp.apple.com (Oracle Communications Messaging Server 8.0.2.4.20190507 64bit (built May 7 2019)) with ESMTPS id <0PV200BQ4BOOYL60@ma1-mtap-s02.corp.apple.com>; Mon, 22 Jul 2019 14:29:13 -0700 (PDT) Received: from process_milters-daemon.nwk-mmpp-sz10.apple.com by nwk-mmpp-sz10.apple.com (Oracle Communications Messaging Server 8.0.2.4.20190507 64bit (built May 7 2019)) id <0PV200K00AP1BB00@nwk-mmpp-sz10.apple.com>; Mon, 22 Jul 2019 14:29:12 -0700 (PDT) X-Va-A: X-Va-T-CD: 68f2109845201c7217a51c1ddd85d479 X-Va-E-CD: 0d3c3e2cca636b8155b399dd19473f9c X-Va-R-CD: 8aa891bccd01e26013fb581b8aa95994 X-Va-CD: 0 X-Va-ID: 4910b7c8-b14a-406b-9e46-9a1e7d5a72cc X-V-A: X-V-T-CD: 68f2109845201c7217a51c1ddd85d479 X-V-E-CD: 0d3c3e2cca636b8155b399dd19473f9c X-V-R-CD: 8aa891bccd01e26013fb581b8aa95994 X-V-CD: 0 X-V-ID: be48a199-b79c-4fa2-96ab-7383782d1cc7 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:,, definitions=2019-07-22_15:,, signatures=0 Received: from [17.235.124.103] (unknown [17.235.124.103]) by nwk-mmpp-sz10.apple.com (Oracle Communications Messaging Server 8.0.2.4.20190507 64bit (built May 7 2019)) with ESMTPSA id <0PV2006FQBOM7410@nwk-mmpp-sz10.apple.com>; Mon, 22 Jul 2019 14:29:12 -0700 (PDT) Sender: ekinnear@apple.com Content-type: text/plain; charset=utf-8 MIME-version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Subject: Re: [hybi] WebTransport Side Meeting (Tuesday, 15:20) From: Eric Kinnear In-reply-to: <5c631764-25e2-ce37-3f84-8eca5a8378eb@warmcat.com> Date: Mon, 22 Jul 2019 17:29:09 -0400 Cc: Victor Vasiliev , dispatch@ietf.org, David Schinazi , hybi@ietf.org, IETF QUIC WG , HTTP Working Group Content-transfer-encoding: quoted-printable Message-id: References: <5c631764-25e2-ce37-3f84-8eca5a8378eb@warmcat.com> To: Andy Green X-Mailer: Apple Mail (2.3445.104.11) X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2019-07-22_15:, , signatures=0 Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 22 Jul 2019 21:29:20 -0000 > On Jul 22, 2019, at 4:59 PM, Andy Green wrote: >=20 >=20 >=20 > On 7/22/19 1:36 PM, Victor Vasiliev wrote: >> Hello everyone, >> Today, at the dispatch working group meeting (18:10), I am going to = present WebTransport. WebTransport is a protocol framework that allows = multiplexed and datagram-oriented transport protocols to be used by the = web applications (think =E2=80=9CWebSocket for UDP=E2=80=9D). >=20 > "Historically, web applications that needed bidirectional data stream > between a client and a server could rely on WebSockets [RFC6455], a > message-based protocol compatible with Web security model. However, > since the abstraction it provides is a single ordered stream of > messages, it suffers from head-of-line blocking (HOLB), meaning that > all messages must be sent and received in order even if they are > independent and some of them are no longer needed. This makes it a > poor fit for latency sensitive applications which rely on partial > reliability and stream independence for performance." >=20 > The HOLB isn't really entirely the case... RFC6455 ws allows arbitrary = fragmentation of messages allowing interleaving with control frames. >=20 > ws-over-h2 allows you to can the h2 stream when you want as well. >=20 > " Each new stream would require a WebSocket handshake to agree on > application protocol used, meaning that it would take at least = one > RTT for each new stream before the client can write to it." >=20 > Yes it was knowingly done as a hack to try to encourage uptake from = browser vendors... it's not really integrated into the encapsulating = protocol. >=20 >> * WebTransport overview: >> https://tools.ietf.org/html/draft-vvv-webtransport-overview-00 >> * QuicTransport: >> https://tools.ietf.org/html/draft-vvv-webtransport-quic-00 >> * Http3Transport: >> https://tools.ietf.org/html/draft-vvv-webtransport-http3-00 >=20 > There's no h2 transport implementation? >=20 > Not everything that might want to use this will get h3 capability in a = reasonable timeframe. If there's more momentum behind it than RFC8441 = there's probably room for a generic long-lived bidirectional extension = to h2 either reusing DATA or a new frame type. Definitely agree! I know that we=E2=80=99ve been chatting a bit with = Victor about = https://datatracker.ietf.org/doc/draft-kinnear-httpbis-http2-transport/ = which aims to provide this, and I think it would be worth making sure = that this works nicely with WebTransport.=20 -00 for that document covers effectively what you=E2=80=99d get with a = new frame type, and -01 extends 8441 to cover more than just WebSockets = with the extended CONNECT handshake. I don=E2=80=99t have a particularly strong preference for the mechanism = used, but rather care more about the outcome =E2=80=94 very much agree = that this is a useful component. Thanks, Eric >=20 > It's a good idea to have it ride on other protocols. Not doing this = really hurt RFC6455 ws since deploying it usually needed extra, = different servers with the attendant difficulties interoperating with = other protocols. >=20 > I really suggest thinking through the effects of not having an RFC6455 = type subprotocol (unless I failed to spot it). It really makes an = implicit assumption about what the stream will carry that doesn't scale = beyond one server carrying one thing. That's not how things tend to pan = out if the protocol is useful. The url path could be hacked to imply = the subprotocol but if that's not standardized it's still a mess. And = the subprotocol binding may be orthogonal to the url layout complicating = things needlessly. >=20 > -Andy >=20 >> * Web API Spec draft: https://wicg.github.io/web-transport/ >> * Discussion on use cases: >> https://discourse.wicg.io/t/webtransport-proposal/3508 >> Cheers, >> Victor. >> _______________________________________________ >> hybi mailing list >> hybi@ietf.org >> https://www.ietf.org/mailman/listinfo/hybi >=20 From nobody Mon Jul 22 17:10:55 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 45ACF12010E for ; Mon, 22 Jul 2019 17:10:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=verizon.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sJhz7vk4GhGW for ; Mon, 22 Jul 2019 17:10:51 -0700 (PDT) Received: from smtpout1-tdc.verizon.com (smtpout1-tdc.verizon.com [137.188.104.133]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D9FA2120094 for ; Mon, 22 Jul 2019 17:10:50 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=verizon.com; i=@verizon.com; q=dns/txt; s=corp; t=1563840651; x=1595376651; h=to:subject:date:message-id:references:in-reply-to: mime-version:from:cc; bh=MctMTGY77kniMZNFuJ0sLBc1F1d4spgptPmRSwIz8GU=; b=DzH+TRiXjZBxcuFYHh2gFiJB0lheFhrFF/PcYqcdn2ZN0XcCAFIQ7b3w jhNqphJDpd5FU+HFEsRrM/CVgR5jMKfk2U/To/Vp9hyA1vSdeP6wxxBW1 FyFqOr/Sk2E08xxTd4d3RGXF/6Ba4KXeGggJPmhM8JT05wKeXlsRna+cE M=; From: brent.bilger@verizon.com Cc: "brent.bilger=40verizon.com@dmarc.ietf.org" , Ian Swett , "quic@ietf.org" , brent.bilger@verizon.com Received: from tbwexch02apd.uswin.ad.vzwcorp.com ([153.114.162.26]) by smtpout1-tdc.verizon.com with ESMTP/TLS/ECDHE-RSA-AES256-SHA384; 23 Jul 2019 00:10:49 +0000 Received: from scwexch01apd.uswin.ad.vzwcorp.com (153.114.130.20) by tbwexch02apd.uswin.ad.vzwcorp.com (153.114.162.26) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Mon, 22 Jul 2019 20:10:48 -0400 Received: from scwexch05apd.uswin.ad.vzwcorp.com (153.114.130.24) by scwexch01apd.uswin.ad.vzwcorp.com (153.114.130.20) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Mon, 22 Jul 2019 17:10:47 -0700 Received: from scwexch05apd.uswin.ad.vzwcorp.com ([153.114.130.24]) by scwexch05apd.uswin.ad.vzwcorp.com ([153.114.130.24]) with mapi id 15.00.1473.003; Mon, 22 Jul 2019 17:10:47 -0700 To: Lars Eggert Subject: Re: [E] DoS-ing QUIC servers is too easy Thread-Topic: [E] DoS-ing QUIC servers is too easy Thread-Index: AQHVQJ5v75QGsq6WnUGiOE/GhzOta6bXykIA Date: Tue, 23 Jul 2019 00:10:47 +0000 Message-ID: <6352C686-585B-4D6B-845A-D855244BE971@one.verizon.com> References: <21E3AE84-02C5-4943-A88E-B62329E21002@one.verizon.com> <507D5DB7-EDF2-4429-A518-604A377F92D9@one.verizon.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.11.60.250] Content-Type: multipart/alternative; boundary="_000_6352C686585B4D6B845AD855244BE971oneverizoncom_" MIME-Version: 1.0 Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 23 Jul 2019 00:10:53 -0000 --_000_6352C686585B4D6B845AD855244BE971oneverizoncom_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable On Jul 22, 2019, at 8:01 AM, Lars Eggert > wrote: Hi, On 2019-7-22, at 10:38, brent.bilger=3D40verizon.com@dmarc.ietf.org wrote: But we can make QUIC much, much better than TCP because the first packet of= the UDP connection that the server receives can pre-authenticate the clien= t. Therefore, the server could: 1) allocate very little resource to the cli= ent to check that the client is authorized to connect, 2) eliminate the pro= cess intensive crypto for unauthorized clients, and 3) reject the connectio= n immediately instead of waiting for some timeout. how is the current Retry token mechanism not fulfilling this goal? If every server always requested a Retry token, it would be able to validat= e that the source ID is not being spoofed. However, 1. It adds a round trip time to the connection (a stated goal is to elim= inate this) 2. it does not prove that the client is authorized to access the client, 3. it requires that the server maintain a resource allocation for the cl= ient until the client replies (which maybe never), 4. it enables scanning the internet to find QUIC servers, and 5. it leaks information about the server - information that may be used = by an adversary to attack the server (e.g., that it is a certain Windows se= rver that is vulnerable to some future Eternal Blue vulnerability). Regards, Brent Thanks, Lars Brent Bliger Director-Technology Verizon SDP brent.bilger@verizon.com --_000_6352C686585B4D6B845AD855244BE971oneverizoncom_ Content-Type: text/html; charset="us-ascii" Content-ID: <04156C1C62983742ACE8189CA08FB702@vzwcorp.com> Content-Transfer-Encoding: quoted-printable

On Jul 22, 2019, at 8:01 AM, Lars Eggert <lars@eggert.org> wrote:

Hi,

On 2019-7-22, at 10:38, brent.bilger=3D40verizon.com@dmarc.ietf.org wrote:
But we can make QUIC much, much better= than TCP because the first packet of the UDP connection that the server re= ceives can pre-authenticate the client. Therefore, the server could: 1) all= ocate very little resource to the client to check that the client is authorized to connect, 2) eliminate the proces= s intensive crypto for unauthorized clients, and 3) reject the connection i= mmediately instead of waiting for some timeout.

how is the current Retry token mechanism not fulfilling this goal?

If every server always requested a Retry token, it would be able to validat= e that the source ID is not being spoofed. However, 
  1. It adds a round trip time to the connection (a stated goal i= s to eliminate this)
  2. it does not prove that the client i= s authorized to access the client, 
  3. it requires tha= t the server maintain a resource allocation for the client until the client= replies (which maybe never), 
  4. it enables scanning = the internet to find QUIC servers, and 
  5. it leaks in= formation about the server - information that may be used by an adversary t= o attack the server (e.g., that it is a certain Windows server that is vuln= erable to some future Eternal Blue vulnerability).

Regards,
Brent


Thanks,
Lars





Brent Bliger
Director-Technology Verizon SDP 





--_000_6352C686585B4D6B845AD855244BE971oneverizoncom_-- From nobody Mon Jul 22 17:15:20 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 07BE41202C0 for ; Mon, 22 Jul 2019 17:15:14 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=verizon.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KcK7Qk-DyFcY for ; Mon, 22 Jul 2019 17:15:12 -0700 (PDT) Received: from smtpout3-tdc.verizon.com (smtpout3-tdc.verizon.com [137.188.104.135]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 271FC1202D3 for ; Mon, 22 Jul 2019 17:15:12 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=verizon.com; i=@verizon.com; q=dns/txt; s=corp; t=1563840912; x=1595376912; h=to:subject:date:message-id:references:in-reply-to: mime-version:from:cc; bh=z7w6nvKIhoM2eI1Rnhitr+Rp8I7xHTwt79JyI+yrPUU=; b=l9ro3rzYlxFOjSwZWUA/yywFvBa5MZlxzo6K7YssBHWedtfYDIb13/2+ mhTM5K81yHYzjji+Sa2lXs2iJnOc5BeZ72l2OgYzGuA9KQL9XmIpbNZnI d4azN8BFc4KOri/w4mBvR1aAF+prfN8cODC2MTG4n27NhvfQk2HncuDNB s=; From: brent.bilger@verizon.com Cc: Lars Eggert , "brent.bilger=40verizon.com@dmarc.ietf.org" , brent.bilger@verizon.com, Ian Swett , "quic@ietf.org" Received: from tbwexch03apd.uswin.ad.vzwcorp.com ([153.114.162.27]) by smtpout3-tdc.verizon.com with ESMTP/TLS/ECDHE-RSA-AES256-SHA384; 23 Jul 2019 00:15:10 +0000 Received: from tbwexch11apd.uswin.ad.vzwcorp.com (153.114.162.35) by tbwexch03apd.uswin.ad.vzwcorp.com (153.114.162.27) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Mon, 22 Jul 2019 20:15:09 -0400 Received: from scwexch02apd.uswin.ad.vzwcorp.com (153.114.130.21) by tbwexch11apd.uswin.ad.vzwcorp.com (153.114.162.35) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Mon, 22 Jul 2019 20:15:09 -0400 Received: from scwexch05apd.uswin.ad.vzwcorp.com (153.114.130.24) by scwexch02apd.uswin.ad.vzwcorp.com (153.114.130.21) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Mon, 22 Jul 2019 17:15:07 -0700 Received: from scwexch05apd.uswin.ad.vzwcorp.com ([153.114.130.24]) by scwexch05apd.uswin.ad.vzwcorp.com ([153.114.130.24]) with mapi id 15.00.1473.003; Mon, 22 Jul 2019 17:15:07 -0700 To: =?utf-8?B?TWlra2VsIEZhaG7DuGUgSsO4cmdlbnNlbg==?= Subject: Re: [E] DoS-ing QUIC servers is too easy Thread-Topic: [E] DoS-ing QUIC servers is too easy Thread-Index: AQHVQJ5v75QGsq6WnUGiOE/GhzOta6bXNcGAgACVtwA= Date: Tue, 23 Jul 2019 00:15:07 +0000 Message-ID: References: <21E3AE84-02C5-4943-A88E-B62329E21002@one.verizon.com> <507D5DB7-EDF2-4429-A518-604A377F92D9@one.verizon.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.11.60.250] Content-Type: multipart/alternative; boundary="_000_DF6A77D690694324A770E3A0B48835CBoneverizoncom_" MIME-Version: 1.0 Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 23 Jul 2019 00:15:18 -0000 --_000_DF6A77D690694324A770E3A0B48835CBoneverizoncom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 DQoNCk9uIEp1bCAyMiwgMjAxOSwgYXQgODoxOSBBTSwgTWlra2VsIEZhaG7DuGUgSsO4cmdlbnNl biA8bWlra2VsZmpAZ21haWwuY29tPG1haWx0bzptaWtrZWxmakBnbWFpbC5jb20+PiB3cm90ZToN Cg0KVGhlIFJldHJ5IHRva2VuIGZvcmNlcyB0aGUgaW5mcmFzdHJ1Y3R1cmUgdG8gc2VuZCBkYXRh IGluc3RlYWQgb2YgYmxhY2sgaG9saW5nLg0KDQpXaHkgZG9u4oCZdCB3ZSBsb29rIGludG8gb3B0 aW9uYWxseSBzaWduaW5nIGxvbmcgT0NJRHMgdGhhdCBjYW4gYmUgdXNlZCBpZiB1bmRlciBhdHRh Y2sgYW5kIG90aGVyd2lzZSBqdXN0IHNlcnZlIGFzIGR1bWIgcmFuZG9tbmVzcy4NCg0KVGhlIDAt UlRUIHRva2VuIGNvdWxkIGFsc28gYmUgdXNlZCBpbiBjYXNlIG9mIGFuIGF0dGFjay4NCg0KWWVz LCBhbmQgd2l0aCBhIHNsaWdodGx5IG1vZGlmaWVkIHRva2VuIHdlIGNhbiBlbGltaW5hdGUgdGhl IGF0dGFjayBieSBhbiB1bmF1dGhvcml6ZWQgdXNlciBvbiB0aGUgc2VydmVyIG9uIHRoZSBmaXJz dCBwYWNrZXQgZWxpbWluYXRpbmcgdGhlIG5lZWQgdG8gc3BlbmQgcmVzb3VyY2VzIG9uIGNsaWVu dHMgdGhhdCB3aWxsIGV2ZW50dWFsbHkgYmUgcmVqZWN0ZWQuDQoNCkJyZW50DQoNCg0KDQpNaWtr ZWwNCg0KDQpPbiAyMiBKdWx5IDIwMTkgYXQgMTcuMDIuMjIsIExhcnMgRWdnZXJ0IChsYXJzQGVn Z2VydC5vcmc8bWFpbHRvOmxhcnNAZWdnZXJ0Lm9yZz4pIHdyb3RlOg0KDQpIaSwNCg0KT24gMjAx OS03LTIyLCBhdCAxMDozOCwgYnJlbnQuYmlsZ2VyPTQwdmVyaXpvbi5jb21AZG1hcmMuaWV0Zi5v cmc8bWFpbHRvOjQwdmVyaXpvbi5jb21AZG1hcmMuaWV0Zi5vcmc+IHdyb3RlOg0KPiBCdXQgd2Ug Y2FuIG1ha2UgUVVJQyBtdWNoLCBtdWNoIGJldHRlciB0aGFuIFRDUCBiZWNhdXNlIHRoZSBmaXJz dCBwYWNrZXQgb2YgdGhlIFVEUCBjb25uZWN0aW9uIHRoYXQgdGhlIHNlcnZlciByZWNlaXZlcyBj YW4gcHJlLWF1dGhlbnRpY2F0ZSB0aGUgY2xpZW50LiBUaGVyZWZvcmUsIHRoZSBzZXJ2ZXIgY291 bGQ6IDEpIGFsbG9jYXRlIHZlcnkgbGl0dGxlIHJlc291cmNlIHRvIHRoZSBjbGllbnQgdG8gY2hl Y2sgdGhhdCB0aGUgY2xpZW50IGlzIGF1dGhvcml6ZWQgdG8gY29ubmVjdCwgMikgZWxpbWluYXRl IHRoZSBwcm9jZXNzIGludGVuc2l2ZSBjcnlwdG8gZm9yIHVuYXV0aG9yaXplZCBjbGllbnRzLCBh bmQgMykgcmVqZWN0IHRoZSBjb25uZWN0aW9uIGltbWVkaWF0ZWx5IGluc3RlYWQgb2Ygd2FpdGlu ZyBmb3Igc29tZSB0aW1lb3V0Lg0KDQpob3cgaXMgdGhlIGN1cnJlbnQgUmV0cnkgdG9rZW4gbWVj aGFuaXNtIG5vdCBmdWxmaWxsaW5nIHRoaXMgZ29hbD8NCg0KVGhhbmtzLA0KTGFycw0KDQoNCg0K DQpCcmVudCBCbGlnZXINCkRpcmVjdG9yLVRlY2hub2xvZ3kgVmVyaXpvbiBTRFANCmJyZW50LmJp bGdlckB2ZXJpem9uLmNvbTxtYWlsdG86YnJlbnQuYmlsZ2VyQHZlcml6b24uY29tPg0KDQoNCg0K DQoNCg== --_000_DF6A77D690694324A770E3A0B48835CBoneverizoncom_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgbGluZS1icmVhazogYWZ0 ZXItd2hpdGUtc3BhY2U7IiBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCjxkaXY+PGJyIGNsYXNz PSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPk9u IEp1bCAyMiwgMjAxOSwgYXQgODoxOSBBTSwgTWlra2VsIEZhaG7DuGUgSsO4cmdlbnNlbiAmbHQ7 PGEgaHJlZj0ibWFpbHRvOm1pa2tlbGZqQGdtYWlsLmNvbSIgY2xhc3M9IiI+bWlra2VsZmpAZ21h aWwuY29tPC9hPiZndDsgd3JvdGU6PC9kaXY+DQo8YnIgY2xhc3M9IkFwcGxlLWludGVyY2hhbmdl LW5ld2xpbmUiPg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgaWQ9ImJsb29wX2N1c3RvbWZvbnQiIHN0 eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhLCBBcmlhbDsgZm9udC1zaXplOiAxM3B4OyBmb250 LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBu b3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWlu ZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29y ZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgdGV4dC1kZWNv cmF0aW9uOiBub25lOyBtYXJnaW46IDBweDsiIGNsYXNzPSIiPg0KVGhlIFJldHJ5IHRva2VuIGZv cmNlcyB0aGUgaW5mcmFzdHJ1Y3R1cmUgdG8gc2VuZCBkYXRhIGluc3RlYWQgb2YgYmxhY2sgaG9s aW5nLjwvZGl2Pg0KPGRpdiBpZD0iYmxvb3BfY3VzdG9tZm9udCIgc3R5bGU9ImZvbnQtZmFtaWx5 OiBIZWx2ZXRpY2EsIEFyaWFsOyBmb250LXNpemU6IDEzcHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsg Zm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNw YWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQt dHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsg LXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyB0ZXh0LWRlY29yYXRpb246IG5vbmU7IG1h cmdpbjogMHB4OyIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgaWQ9ImJs b29wX2N1c3RvbWZvbnQiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhLCBBcmlhbDsgZm9u dC1zaXplOiAxM3B4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3Jt YWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxp Z246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUt c3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lk dGg6IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyBtYXJnaW46IDBweDsiIGNsYXNzPSIiPg0K V2h5IGRvbuKAmXQgd2UgbG9vayBpbnRvIG9wdGlvbmFsbHkgc2lnbmluZyBsb25nIE9DSURzIHRo YXQgY2FuIGJlIHVzZWQgaWYgdW5kZXIgYXR0YWNrIGFuZCBvdGhlcndpc2UganVzdCBzZXJ2ZSBh cyBkdW1iIHJhbmRvbW5lc3MuPC9kaXY+DQo8ZGl2IGlkPSJibG9vcF9jdXN0b21mb250IiBzdHls ZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYSwgQXJpYWw7IGZvbnQtc2l6ZTogMTNweDsgZm9udC1z dHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9y bWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRl bnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQt c3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQtZGVjb3Jh dGlvbjogbm9uZTsgbWFyZ2luOiAwcHg7IiBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCjwvZGl2 Pg0KPGRpdiBpZD0iYmxvb3BfY3VzdG9tZm9udCIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRp Y2EsIEFyaWFsOyBmb250LXNpemU6IDEzcHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJp YW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5v cm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3Jt OiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10 ZXh0LXN0cm9rZS13aWR0aDogMHB4OyB0ZXh0LWRlY29yYXRpb246IG5vbmU7IG1hcmdpbjogMHB4 OyIgY2xhc3M9IiI+DQpUaGUgMC1SVFQgdG9rZW4gY291bGQgYWxzbyBiZSB1c2VkIGluIGNhc2Ug b2YgYW4gYXR0YWNrLjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2PjxiciBjbGFz cz0iIj4NCjwvZGl2Pg0KWWVzLCBhbmQgd2l0aCBhIHNsaWdodGx5IG1vZGlmaWVkIHRva2VuIHdl IGNhbiBlbGltaW5hdGUgdGhlIGF0dGFjayBieSBhbiB1bmF1dGhvcml6ZWQgdXNlciBvbiB0aGUg c2VydmVyIG9uIHRoZSBmaXJzdCBwYWNrZXQgZWxpbWluYXRpbmcgdGhlIG5lZWQgdG8gc3BlbmQg cmVzb3VyY2VzIG9uIGNsaWVudHMgdGhhdCB3aWxsIGV2ZW50dWFsbHkgYmUgcmVqZWN0ZWQuPC9k aXY+DQo8ZGl2PjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdj5CcmVudDwvZGl2Pg0KPGRpdj48 YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXY+PGJyIGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlw ZT0iY2l0ZSIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBpZD0iYmxvb3BfY3VzdG9t Zm9udCIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2EsIEFyaWFsOyBmb250LXNpemU6IDEz cHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13 ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7 IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9y bWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyB0 ZXh0LWRlY29yYXRpb246IG5vbmU7IG1hcmdpbjogMHB4OyIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9 IiI+DQo8L2Rpdj4NCjxzcGFuIHN0eWxlPSJjYXJldC1jb2xvcjogcmdiKDAsIDAsIDApOyBmb250 LWZhbWlseTogSGVsdmV0aWNhLCBBcmlhbDsgZm9udC1zaXplOiAxM3B4OyBmb250LXN0eWxlOiBu b3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxl dHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4 OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5n OiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBu b25lOyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7IiBjbGFzcz0iIj5N aWtrZWw8L3NwYW4+DQo8ZGl2IHN0eWxlPSJjYXJldC1jb2xvcjogcmdiKDAsIDAsIDApOyBmb250 LWZhbWlseTogSGVsdmV0aWNhLCBBcmlhbDsgZm9udC1zaXplOiAxM3B4OyBmb250LXN0eWxlOiBu b3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxl dHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4 OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5n OiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBu b25lOyIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQo8cCBjbGFzcz0iYWlybWFpbF9vbiI+T24g MjIgSnVseSAyMDE5IGF0IDE3LjAyLjIyLCBMYXJzIEVnZ2VydCAoPGEgaHJlZj0ibWFpbHRvOmxh cnNAZWdnZXJ0Lm9yZyIgY2xhc3M9IiI+bGFyc0BlZ2dlcnQub3JnPC9hPikgd3JvdGU6PC9wPg0K PGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9ImNsZWFuX2JxIj48c3BhbiBjbGFzcz0iIj4N CjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5IaSw8 c3BhbiBjbGFzcz0iQXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PGJyIGNsYXNz PSIiPg0KPGJyIGNsYXNzPSIiPg0KT24gMjAxOS03LTIyLCBhdCAxMDozOCwgYnJlbnQuYmlsZ2Vy PTxhIGhyZWY9Im1haWx0bzo0MHZlcml6b24uY29tQGRtYXJjLmlldGYub3JnIiBjbGFzcz0iIj40 MHZlcml6b24uY29tQGRtYXJjLmlldGYub3JnPC9hPjxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0 ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj53cm90ZTo8c3BhbiBjbGFzcz0iQXBwbGUtY29udmVydGVk LXNwYWNlIj4mbmJzcDs8L3NwYW4+PGJyIGNsYXNzPSIiPg0KJmd0OyBCdXQgd2UgY2FuIG1ha2Ug UVVJQyBtdWNoLCBtdWNoIGJldHRlciB0aGFuIFRDUCBiZWNhdXNlIHRoZSBmaXJzdCBwYWNrZXQg b2YgdGhlIFVEUCBjb25uZWN0aW9uIHRoYXQgdGhlIHNlcnZlciByZWNlaXZlcyBjYW4gcHJlLWF1 dGhlbnRpY2F0ZSB0aGUgY2xpZW50LiBUaGVyZWZvcmUsIHRoZSBzZXJ2ZXIgY291bGQ6IDEpIGFs bG9jYXRlIHZlcnkgbGl0dGxlIHJlc291cmNlIHRvIHRoZSBjbGllbnQgdG8gY2hlY2sgdGhhdCB0 aGUgY2xpZW50IGlzDQogYXV0aG9yaXplZCB0byBjb25uZWN0LCAyKSBlbGltaW5hdGUgdGhlIHBy b2Nlc3MgaW50ZW5zaXZlIGNyeXB0byBmb3IgdW5hdXRob3JpemVkIGNsaWVudHMsIGFuZCAzKSBy ZWplY3QgdGhlIGNvbm5lY3Rpb24gaW1tZWRpYXRlbHkgaW5zdGVhZCBvZiB3YWl0aW5nIGZvciBz b21lIHRpbWVvdXQuPHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9z cGFuPjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCmhvdyBpcyB0aGUgY3VycmVudCBSZXRy eSB0b2tlbiBtZWNoYW5pc20gbm90IGZ1bGZpbGxpbmcgdGhpcyBnb2FsPzxzcGFuIGNsYXNzPSJB cHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48YnIgY2xhc3M9IiI+DQo8YnIgY2xh c3M9IiI+DQpUaGFua3MsPHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7 PC9zcGFuPjxiciBjbGFzcz0iIj4NCkxhcnM8L2Rpdj4NCjwvZGl2Pg0KPC9zcGFuPjwvYmxvY2tx dW90ZT4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjxiciBjbGFzcz0i Ij4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGRpcj0iYXV0byIgc3R5bGU9ImNhcmV0LWNvbG9yOiBy Z2IoMCwgMCwgMCk7IGNvbG9yOiByZ2IoMCwgMCwgMCk7IGZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7 IGZvbnQtc2l6ZTogMThweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczog bm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0 LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdo aXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tl LXdpZHRoOiAwcHg7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsgd29yZC13cmFwOiBicmVhay13b3Jk OyAtd2Via2l0LW5ic3AtbW9kZTogc3BhY2U7IGxpbmUtYnJlYWs6IGFmdGVyLXdoaXRlLXNwYWNl OyIgY2xhc3M9IiI+DQo8ZGl2IGRpcj0iYXV0byIgc3R5bGU9IndvcmQtd3JhcDogYnJlYWstd29y ZDsgLXdlYmtpdC1uYnNwLW1vZGU6IHNwYWNlOyBsaW5lLWJyZWFrOiBhZnRlci13aGl0ZS1zcGFj ZTsiIGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0iY2FyZXQtY29sb3I6IHJnYigwLCAwLCAwKTsgY29s b3I6IHJnYigwLCAwLCAwKTsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgbGV0dGVyLXNwYWNp bmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJh bnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdl YmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyB0ZXh0LWRlY29yYXRpb246IG5vbmU7Ij4NCjxi ciBjbGFzcz0iQXBwbGUtaW50ZXJjaGFuZ2UtbmV3bGluZSI+DQo8YnIgY2xhc3M9IiI+DQo8L2Rp dj4NCjxkaXYgc3R5bGU9ImNhcmV0LWNvbG9yOiByZ2IoMCwgMCwgMCk7IGNvbG9yOiByZ2IoMCwg MCwgMCk7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7 IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9u ZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1z dHJva2Utd2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyI+DQo8YnIgY2xhc3M9IiI+ DQo8L2Rpdj4NCjxkaXYgc3R5bGU9ImNhcmV0LWNvbG9yOiByZ2IoMCwgMCwgMCk7IGNvbG9yOiBy Z2IoMCwgMCwgMCk7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBu b3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9y bTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQt dGV4dC1zdHJva2Utd2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyI+DQpCcmVudCBC bGlnZXI8L2Rpdj4NCjxkaXYgc3R5bGU9ImNhcmV0LWNvbG9yOiByZ2IoMCwgMCwgMCk7IGNvbG9y OiByZ2IoMCwgMCwgMCk7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGxldHRlci1zcGFjaW5n OiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5z Zm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJr aXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyI+DQpEaXJl Y3Rvci1UZWNobm9sb2d5Jm5ic3A7VmVyaXpvbiBTRFAmbmJzcDs8YnIgY2xhc3M9IiI+DQo8L2Rp dj4NCjxkaXYgc3R5bGU9ImNhcmV0LWNvbG9yOiByZ2IoMCwgMCwgMCk7IGNvbG9yOiByZ2IoMCwg MCwgMCk7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7 IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9u ZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1z dHJva2Utd2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyI+DQo8YSBocmVmPSJtYWls dG86YnJlbnQuYmlsZ2VyQHZlcml6b24uY29tIiBjbGFzcz0iIj5icmVudC5iaWxnZXJAdmVyaXpv bi5jb208L2E+PC9kaXY+DQo8ZGl2IHN0eWxlPSJjYXJldC1jb2xvcjogcmdiKDAsIDAsIDApOyBj b2xvcjogcmdiKDAsIDAsIDApOyBmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDI0 cHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13 ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7 IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9y bWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyB0 ZXh0LWRlY29yYXRpb246IG5vbmU7IiBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0K PGJyIGNsYXNzPSJBcHBsZS1pbnRlcmNoYW5nZS1uZXdsaW5lIj4NCjwvZGl2Pg0KPC9kaXY+DQo8 YnIgY2xhc3M9IkFwcGxlLWludGVyY2hhbmdlLW5ld2xpbmUiIHN0eWxlPSJjYXJldC1jb2xvcjog cmdiKDAsIDAsIDApOyBjb2xvcjogcmdiKDAsIDAsIDApOyBmb250LWZhbWlseTogSGVsdmV0aWNh OyBmb250LXNpemU6IDE4cHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6 IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4 dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3 aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9r ZS13aWR0aDogMHB4OyB0ZXh0LWRlY29yYXRpb246IG5vbmU7Ij4NCjxiciBjbGFzcz0iQXBwbGUt aW50ZXJjaGFuZ2UtbmV3bGluZSI+DQo8L2Rpdj4NCjxiciBjbGFzcz0iIj4NCjwvYm9keT4NCjwv aHRtbD4NCg== --_000_DF6A77D690694324A770E3A0B48835CBoneverizoncom_-- From nobody Mon Jul 22 17:28:48 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 414D21200DE for ; Mon, 22 Jul 2019 17:28:47 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=verizon.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PLIdCKr2zh-K for ; Mon, 22 Jul 2019 17:28:45 -0700 (PDT) Received: from smtpout2-tdc.verizon.com (smtpout2-tdc.verizon.com [137.188.104.134]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2A25B120045 for ; Mon, 22 Jul 2019 17:28:43 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=verizon.com; i=@verizon.com; q=dns/txt; s=corp; t=1563841724; x=1595377724; h=to:subject:date:message-id:references:in-reply-to: mime-version:from:cc; bh=4VcNABNYG3erLrf7gjjVSXNvAay6mXv68mj+O9NWP8g=; b=vDWf+lK5P1m9eDGvrbhLyX9WP1KV0ZXX7K5GDFgTymIlZDB5A8WsHf61 +A7IRd+5tQwiB7yrtFpwLgdIQN3eH5GKz2IK5OrpQPcfxdFxiJSBq1qXP 9PeIeNIP+hRrBkGY0T4cdRa1NN9tC8DNQXYmTrNCAFZtqE+XDmEb6upum k=; From: brent.bilger@verizon.com Cc: "brent.bilger=40verizon.com@dmarc.ietf.org" , Ian Swett , "quic@ietf.org" , brent.bilger@verizon.com Received: from tbwexch01apd.uswin.ad.vzwcorp.com ([153.114.162.25]) by smtpout2-tdc.verizon.com with ESMTP/TLS/ECDHE-RSA-AES256-SHA384; 23 Jul 2019 00:28:42 +0000 Received: from tbwexch23apd.uswin.ad.vzwcorp.com (153.114.162.47) by tbwexch01apd.uswin.ad.vzwcorp.com (153.114.162.25) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Mon, 22 Jul 2019 20:28:42 -0400 Received: from scwexch09apd.uswin.ad.vzwcorp.com (153.114.130.28) by tbwexch23apd.uswin.ad.vzwcorp.com (153.114.162.47) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Mon, 22 Jul 2019 20:28:41 -0400 Received: from scwexch05apd.uswin.ad.vzwcorp.com (153.114.130.24) by scwexch09apd.uswin.ad.vzwcorp.com (153.114.130.28) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Mon, 22 Jul 2019 17:28:40 -0700 Received: from scwexch05apd.uswin.ad.vzwcorp.com ([153.114.130.24]) by scwexch05apd.uswin.ad.vzwcorp.com ([153.114.130.24]) with mapi id 15.00.1473.003; Mon, 22 Jul 2019 17:28:40 -0700 To: Roberto Peon Subject: Re: [E] DoS-ing QUIC servers is too easy Thread-Topic: [E] DoS-ing QUIC servers is too easy Thread-Index: AQHVQO2Tt275XB7zJE2gtLFSLnBhgQ== Date: Tue, 23 Jul 2019 00:28:40 +0000 Message-ID: References: <21E3AE84-02C5-4943-A88E-B62329E21002@one.verizon.com> <507D5DB7-EDF2-4429-A518-604A377F92D9@one.verizon.com> <9BF2DC9D-F14C-4451-9191-1A1557556691@fb.com> In-Reply-To: <9BF2DC9D-F14C-4451-9191-1A1557556691@fb.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.11.60.250] Content-Type: multipart/alternative; boundary="_000_B359940972E74E15954993663CDC561Aoneverizoncom_" MIME-Version: 1.0 Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 23 Jul 2019 00:28:47 -0000 --_000_B359940972E74E15954993663CDC561Aoneverizoncom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 DQoNCk9uIEp1bCAyMiwgMjAxOSwgYXQgMTA6MTAgQU0sIFJvYmVydG8gUGVvbiA8ZmVuaXhAZmIu Y29tPG1haWx0bzpmZW5peEBmYi5jb20+PiB3cm90ZToNCg0KV2hlbiB5b3XigJlyZSB0YWxraW5n IGFib3V0IHByZS1hdXRoZW50aWNhdGlvbiwgYXJlIHlvdSByZWZlcnJpbmcgdG8gdGhlIDAtcnR0 IHN0dWZmPw0KDQowLVJUVCBpcyBnb29kIHN0dWZmLiBJdCByZWR1Y2VzIHRpbWUgZm9yIGEgZGV2 aWNlIHRoYXTigJlzIGFscmVhZHkga25vd24gdG8gYmUgYXV0aG9yaXplZCB0byBjb25uZWN0IHRv IHRoZSBzZXJ2ZXIuDQoNClBhcnQgb2YgdGhlIHByb2JsZW0gaXMgdG8gc3RvcCByZXNvdXJjZSBE b1MuIFRoZSBvdGhlciBwYXJ0IGlzIGFib3V0IGluZm9ybWF0aW9uIGxlYWthZ2UuDQoNCkxldOKA mXMgYXNzdW1lIGEgdGltZSB3aGVuIGFsbCB3ZWJzaXRlIHVzZSBRVUlDIGFuZCBsZXQncyB0YWtl IGFuIGFkdmVyc2FyeSB3aG8gaGFzIGp1c3QgbGVhcm5lZCBhYm91dCBhIHZ1bG5lcmFiaWxpdHkg aW4gV29yZHByZXNzLiBUaGUgYWR2ZXJzYXJ5IHdhbnRzIHRvIHNjYW4gdGhlIEludGVybmV0IGZp bmRpbmcgV29yZHByZXNzIHNpdGVzLiBOb3csIGlmIHRoZSBRVUlDIGNvbm5lY3Rpb24gcmVxdWly ZWQgcHJlLWF1dGhlbnRpY2F0aW9uLCB0aGVuIHRoZSBzZXJ2ZXIgd291bGQgYmUgYmxhY2sgdG8g dGhlIGNvbm5lY3Rpb24gYW5kIHRoZSBhZHZlcnNhcnkgY291bGQgbm90IGRldGVybWluZSBpZiB0 aGUgc2l0ZSB1c2VzIFdvcmRwcmVzcy4gQnV0LCBhcyBpdCBzdGFuZHMgdG9kYXksIGluIHRoaXMg ZnV0dXJlIHRpbWUsIHRoZSBhZHZlcnNhcnkgc2NhbnMgdGhlIEludGVybmV0LCBjb25uZWN0cyB0 byB0aGUgc2VydmVyLCBhbmQgaXMgaGFuZGVkIGEgV29yZHByZXNzIGxvZ2luIHNjcmVlbi4gTm93 IHRoZSBhZHZlcnNhcnkga25vd3Mgd2hlcmUgdG8gYXR0YWNrLg0KDQpJbiB0aGUgZW50ZXJwcmlz ZSBpdCBpcyBhIGxpdHRsZSBkaWZmZXJlbnQuIENvbXBhbmllcyBpbXBsZW1lbnQgcmV2ZXJzZSBw cm94aWVzIHRvIHRyeSB0byBwcm90ZWN0IHNlcnZlcnMgZnJvbSB1bmF1dGhvcml6ZWQgdXNlcnMu IEJ1dCB3aGF0IGlmIHRoZSBzZXJ2ZXJzIHJlcXVpcmVkIGEgcHJlLWF1dGhlbnRpY2F0aW9uIHRv a2VuLiBUaGVuLCByZXZlcnNlIHByb3hpZXMgd291bGQgbm90IGJlIG5lZWRlZC4NCg0KQnJlbnQN Cg0KSWYgc28sIHRoZW4gSSBhZ3JlZS0tIGJpYXNpbmcgdHJhZmZpYyB0byBjbGllbnRzIHRoYXQg aGF2ZSBzdWNjZXNzZnVsbHkgY29ubmVjdGVkIGluIHRoZSBwYXN0IGlzIGV4YWN0bHkgd2hhdCBl dmVyeSBTWU4tZmxvb2QtbGlrZSBhdHRhY2sgbWl0aWdhdGlvbiBkb2VzIGF0IGl0cyBjb3JlICh0 aG91Z2gg4oCYcGFzdOKAmSBtYXkgYmUgcHJldHR5IHJlY2VudCBpbiB0aGUgY2FzZSBvZiBzeW4t Y29va2llcykuDQotPVINCg0KRnJvbTogUVVJQyA8cXVpYy1ib3VuY2VzQGlldGYub3JnPG1haWx0 bzpxdWljLWJvdW5jZXNAaWV0Zi5vcmc+PiBvbiBiZWhhbGYgb2YgImJyZW50LmJpbGdlcj00MHZl cml6b24uY29tQGRtYXJjLmlldGYub3JnPG1haWx0bzpicmVudC5iaWxnZXI9NDB2ZXJpem9uLmNv bUBkbWFyYy5pZXRmLm9yZz4iIDxicmVudC5iaWxnZXI9NDB2ZXJpem9uLmNvbUBkbWFyYy5pZXRm Lm9yZzxtYWlsdG86YnJlbnQuYmlsZ2VyPTQwdmVyaXpvbi5jb21AZG1hcmMuaWV0Zi5vcmc+Pg0K RGF0ZTogTW9uZGF5LCBKdWx5IDIyLCAyMDE5IGF0IDEwOjQwIEFNDQpUbzogSWFuIFN3ZXR0IDxp YW5zd2V0dD00MGdvb2dsZS5jb21AZG1hcmMuaWV0Zi5vcmc8bWFpbHRvOmlhbnN3ZXR0PTQwZ29v Z2xlLmNvbUBkbWFyYy5pZXRmLm9yZz4+DQpDYzogInF1aWNAaWV0Zi5vcmc8bWFpbHRvOnF1aWNA aWV0Zi5vcmc+IiA8cXVpY0BpZXRmLm9yZzxtYWlsdG86cXVpY0BpZXRmLm9yZz4+LCAiYnJlbnQu YmlsZ2VyQHZlcml6b24uY29tPG1haWx0bzpicmVudC5iaWxnZXJAdmVyaXpvbi5jb20+IiA8YnJl bnQuYmlsZ2VyQHZlcml6b24uY29tPG1haWx0bzpicmVudC5iaWxnZXJAdmVyaXpvbi5jb20+Pg0K U3ViamVjdDogUmU6IFtFXSBSZTogRG9TLWluZyBRVUlDIHNlcnZlcnMgaXMgdG9vIGVhc3kNCg0K T24gSnVsIDE5LCAyMDE5LCBhdCA4OjMxIEFNLCBJYW4gU3dldHQgPGlhbnN3ZXR0PTQwZ29vZ2xl LmNvbUBkbWFyYy5pZXRmLm9yZzxtYWlsdG86aWFuc3dldHQ9NDBnb29nbGUuY29tQGRtYXJjLmll dGYub3JnPj4gd3JvdGU6DQoNCg0KDQpPbiBGcmksIEp1bCAxOSwgMjAxOSBhdCAxMToxNiBBTSA8 YnJlbnQuYmlsZ2VyPTQwdmVyaXpvbi5jb21AZG1hcmMuaWV0Zi5vcmc8bWFpbHRvOjQwdmVyaXpv bi5jb21AZG1hcmMuaWV0Zi5vcmc+PiB3cm90ZToNClByb2JsZW06DQpRVUlDIHNlcnZlcnMsIGxp a2UganVzdCBhYm91dCBhbGwgb3RoZXIgc2VydmVycywgYXJlIGZhciB0b28gc3VzY2VwdGlibGUg dG8gRG9TIGF0dGFja3MuICBJbnRlZ3JhbCB0byB0aGUgY2xpZW50LXNlcnZlciBhcmNoaXRlY3R1 cmUgaXMgdGhlIGZhY3QgdGhhdCBzZXJ2ZXJzIG11c3QgbGlzdGVuIHRvIGFsbCBwb3RlbnRpYWwg Y2xpZW50cyBvbiB0aGUgbmV0d29yayhzKSB0aGV5IHNlcnZlIOKAkyB3aGV0aGVyIHRoZSBjb25u ZWN0aW9uIGlzIGZyb20gYSBsZWdpdGltYXRlIGNsaWVudCBvciBub3QuIFRoaXMgd2FzIGZpbmUg d2hlbiBJVCBjb250cm9sbGVkIHRoZSBuZXR3b3JrLCBidXQgdGhlIHNjb3BlIG9mIHRoZSBJbnRl cm5ldCBjaGFuZ2VkIGFsbCB0aGF0LiBTZXJ2ZXJzIGxpc3RlbmluZyB0byBhbGwgY29tbXVuaWNh dGlvbnMgZW5hYmxlcyByZXNvdXJjZSBEb1MgYXR0YWNrcy4gUmVzb3VyY2UgRG9TIGF0dGFja3Mg b24gUVVJQyBzZXJ2ZXJzIGFyZSBhbXBsaWZpZWQgYnkgdGhlIHByb2Nlc3NpbmcgcmVxdWlyZW1l bnRzIG9mIHB1YmxpYy9wcml2YXRlIGtleSBjcnlwdG9ncmFwaHkgd2hpY2ggYW4gYXR0YWNrZXIg YSBjYW4gaW5kdWNlIHRoZSBzZXJ2ZXIgdG8gZG8gd2l0aG91dCBidXJkZW5pbmcgdGhlIGF0dGFj a2VyLiAgSW4gYWRkaXRpb24sIHNlcnZlcnMgcmVzcG9uZGluZyB0byBhbGwgcXVlcmllcyBjYW4g bGVhayBpbmZvcm1hdGlvbiB0aGF0IGFkdmVyc2FyaWVzIGNhbiBsYXRlciB1c2UgdG8gYXR0YWNr IHRoZW0uDQoNClJlcXVpcmVtZW50Og0KUHJvdmlkZSBhIHdheSB0aGF0IFFVSUMgc2VydmVycyBj YW4gZWFzaWx5LCB3aXRoIHZlcnkgbG93IHByb2Nlc3NpbmcgcmVxdWlyZW1lbnQsIHRlbGwgaWYg YSBjb25uZWN0aW9uIGlzIGZyb20gYSBsZWdpdGltYXRlIGNsaWVudC4NCg0KUVVJQydzIFJldHJ5 IHRva2VuIGlzIGRlc2lnbmVkIGZvciB0aGlzIHB1cnBvc2UuLiAgSSBiZWxpZXZlIHRoYXQgc2hv dWxkIGJlIHN1ZmZpY2llbnQgYW5kIG1ha2UgUVVJQyBlcXVpdmFsZW50IHRvIFRDUC4uDQoNCkJ1 dCB3ZSBjYW4gbWFrZSBRVUlDIG11Y2gsIG11Y2ggYmV0dGVyIHRoYW4gVENQIGJlY2F1c2UgdGhl IGZpcnN0IHBhY2tldCBvZiB0aGUgVURQIGNvbm5lY3Rpb24gdGhhdCB0aGUgc2VydmVyIHJlY2Vp dmVzIGNhbiBwcmUtYXV0aGVudGljYXRlIHRoZSBjbGllbnQuIFRoZXJlZm9yZSwgdGhlIHNlcnZl ciBjb3VsZDogMSkgYWxsb2NhdGUgdmVyeSBsaXR0bGUgcmVzb3VyY2UgdG8gdGhlIGNsaWVudCB0 byBjaGVjayB0aGF0IHRoZSBjbGllbnQgaXMgYXV0aG9yaXplZCB0byBjb25uZWN0LCAyKSBlbGlt aW5hdGUgdGhlIHByb2Nlc3MgaW50ZW5zaXZlIGNyeXB0byBmb3IgdW5hdXRob3JpemVkIGNsaWVu dHMsIGFuZCAzKSByZWplY3QgdGhlIGNvbm5lY3Rpb24gaW1tZWRpYXRlbHkgaW5zdGVhZCBvZiB3 YWl0aW5nIGZvciBzb21lIHRpbWVvdXQuDQoNCg0KDQpBbHNvLCBRVUlDIHJlcXVpcmVzIG11Y2gg bGFyZ2VyIEluaXRpYWwgcGFja2V0IHNpemVzIHRoYW4gYSBUQ1AgU1lOLCBpbmNyZWFzaW5nIHRo ZSBhbW91bnQgb2Ygd29yayBhbiBhdHRhY2tlciBoYXMgdG8gZXhwZW5kLg0KDQpZZXMsIHNvIHdl IGNvdWxkIG9wdGlvbmFsbHkgbWFrZSB1c2Ugb2Ygc29tZSBvZiB0aGF0IGxhcmdlciBwYWNrZXQg c2l6ZSBmb3IgdGhlIHByZS1hdXRoZW50aWNhdGlvbi4NCg0KQnJlbnQNCg0KDQoNCg0KDQpCcmVu dCBCbGlnZXINCkRpcmVjdG9yLVRlY2hub2xvZ3kgVmVyaXpvbiBTRFANCmJyZW50LmJpbGdlckB2 ZXJpem9uLmNvbTxtYWlsdG86YnJlbnQuYmlsZ2VyQHZlcml6b24uY29tPg0KDQoNCg0KDQoNCg0K DQpCcmVudCBCbGlnZXINCkRpcmVjdG9yLVRlY2hub2xvZ3kgVmVyaXpvbiBTRFANCmJyZW50LmJp bGdlckB2ZXJpem9uLmNvbTxtYWlsdG86YnJlbnQuYmlsZ2VyQHZlcml6b24uY29tPg0KDQoNCg0K DQpCcmVudCBCbGlnZXINCkRpcmVjdG9yLVRlY2hub2xvZ3kgVmVyaXpvbiBTRFANCmJyZW50LmJp bGdlckB2ZXJpem9uLmNvbTxtYWlsdG86YnJlbnQuYmlsZ2VyQHZlcml6b24uY29tPg0KDQoNCg0K DQoNCg== --_000_B359940972E74E15954993663CDC561Aoneverizoncom_ Content-Type: text/html; charset="utf-8" Content-ID: <04E83A0672097248A5A6CBB50F2ED9C8@vzwcorp.com> Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgbGluZS1icmVhazogYWZ0 ZXItd2hpdGUtc3BhY2U7IiBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCjxkaXY+PGJyIGNsYXNz PSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPk9u IEp1bCAyMiwgMjAxOSwgYXQgMTA6MTAgQU0sIFJvYmVydG8gUGVvbiAmbHQ7PGEgaHJlZj0ibWFp bHRvOmZlbml4QGZiLmNvbSIgY2xhc3M9IiI+ZmVuaXhAZmIuY29tPC9hPiZndDsgd3JvdGU6PC9k aXY+DQo8YnIgY2xhc3M9IkFwcGxlLWludGVyY2hhbmdlLW5ld2xpbmUiPg0KPGRpdiBjbGFzcz0i Ij4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSIgc3R5bGU9InBhZ2U6IFdvcmRTZWN0aW9uMTsg Y2FyZXQtY29sb3I6IHJnYigwLCAwLCAwKTsgZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1z aXplOiAxOHB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7 IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246 IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3Bh Y2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6 IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAw aW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMt c2VyaWY7IiBjbGFzcz0iIj4NCldoZW4geW914oCZcmUgdGFsa2luZyBhYm91dCBwcmUtYXV0aGVu dGljYXRpb24sIGFyZSB5b3UgcmVmZXJyaW5nIHRvIHRoZSAwLXJ0dCBzdHVmZj88YnIgY2xhc3M9 IiI+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2PjxiciBjbGFz cz0iIj4NCjwvZGl2Pg0KMC1SVFQgaXMgZ29vZCBzdHVmZi4gSXQgcmVkdWNlcyB0aW1lIGZvciBh IGRldmljZSB0aGF04oCZcyBhbHJlYWR5IGtub3duIHRvIGJlIGF1dGhvcml6ZWQgdG8gY29ubmVj dCB0byB0aGUgc2VydmVyLjwvZGl2Pg0KPGRpdj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXY+ UGFydCBvZiB0aGUgcHJvYmxlbSBpcyB0byBzdG9wIHJlc291cmNlIERvUy4gVGhlIG90aGVyIHBh cnQgaXMgYWJvdXQgaW5mb3JtYXRpb24gbGVha2FnZS48L2Rpdj4NCjxkaXY+PGJyIGNsYXNzPSIi Pg0KPC9kaXY+DQo8ZGl2PkxldOKAmXMgYXNzdW1lIGEgdGltZSB3aGVuIGFsbCB3ZWJzaXRlIHVz ZSBRVUlDIGFuZCBsZXQncyB0YWtlIGFuIGFkdmVyc2FyeSB3aG8gaGFzIGp1c3QgbGVhcm5lZCBh Ym91dCBhIHZ1bG5lcmFiaWxpdHkgaW4gV29yZHByZXNzLiBUaGUgYWR2ZXJzYXJ5IHdhbnRzIHRv IHNjYW4gdGhlIEludGVybmV0IGZpbmRpbmcgV29yZHByZXNzIHNpdGVzLiBOb3csIGlmIHRoZSBR VUlDIGNvbm5lY3Rpb24gcmVxdWlyZWQgcHJlLWF1dGhlbnRpY2F0aW9uLA0KIHRoZW4gdGhlIHNl cnZlciB3b3VsZCBiZSBibGFjayB0byB0aGUgY29ubmVjdGlvbiBhbmQgdGhlIGFkdmVyc2FyeSBj b3VsZCBub3QgZGV0ZXJtaW5lIGlmIHRoZSBzaXRlIHVzZXMgV29yZHByZXNzLiBCdXQsIGFzIGl0 IHN0YW5kcyB0b2RheSwgaW4gdGhpcyBmdXR1cmUgdGltZSwgdGhlIGFkdmVyc2FyeSBzY2FucyB0 aGUgSW50ZXJuZXQsIGNvbm5lY3RzIHRvIHRoZSBzZXJ2ZXIsIGFuZCBpcyBoYW5kZWQgYSBXb3Jk cHJlc3MgbG9naW4gc2NyZWVuLg0KIE5vdyB0aGUgYWR2ZXJzYXJ5IGtub3dzIHdoZXJlIHRvIGF0 dGFjay48L2Rpdj4NCjxkaXY+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2PkluIHRoZSBlbnRl cnByaXNlIGl0IGlzIGEgbGl0dGxlIGRpZmZlcmVudC4gQ29tcGFuaWVzIGltcGxlbWVudCByZXZl cnNlIHByb3hpZXMgdG8gdHJ5IHRvIHByb3RlY3Qgc2VydmVycyBmcm9tIHVuYXV0aG9yaXplZCB1 c2Vycy4gQnV0IHdoYXQgaWYgdGhlIHNlcnZlcnMgcmVxdWlyZWQgYSBwcmUtYXV0aGVudGljYXRp b24gdG9rZW4uIFRoZW4sIHJldmVyc2UgcHJveGllcyB3b3VsZCBub3QgYmUgbmVlZGVkLjwvZGl2 Pg0KPGRpdj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXY+QnJlbnQ8L2Rpdj4NCjxkaXY+PGJy IGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNz PSIiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIiBzdHlsZT0icGFnZTogV29yZFNlY3Rpb24x OyBjYXJldC1jb2xvcjogcmdiKDAsIDAsIDApOyBmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250 LXNpemU6IDE4cHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1h bDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGln bjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1z cGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0 aDogMHB4OyB0ZXh0LWRlY29yYXRpb246IG5vbmU7Ij4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGlu IDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fu cy1zZXJpZjsiIGNsYXNzPSIiPg0KSWYgc28sIHRoZW4gSSBhZ3JlZS0tIGJpYXNpbmcgdHJhZmZp YyB0byBjbGllbnRzIHRoYXQgaGF2ZSBzdWNjZXNzZnVsbHkgY29ubmVjdGVkIGluIHRoZSBwYXN0 IGlzIGV4YWN0bHkgd2hhdCBldmVyeSBTWU4tZmxvb2QtbGlrZSBhdHRhY2sgbWl0aWdhdGlvbiBk b2VzIGF0IGl0cyBjb3JlICh0aG91Z2gg4oCYcGFzdOKAmSBtYXkgYmUgcHJldHR5IHJlY2VudCBp biB0aGUgY2FzZSBvZiBzeW4tY29va2llcykuPG86cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjxk aXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMXB0OyBmb250 LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0KLT1SPG86cCBjbGFzcz0i Ij48L286cD48L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9u dC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIi Pg0KPG86cCBjbGFzcz0iIj4mbmJzcDs8L286cD48L2Rpdj4NCjxkaXYgc3R5bGU9ImJvcmRlci1z dHlsZTogc29saWQgbm9uZSBub25lOyBib3JkZXItdG9wLXdpZHRoOiAxcHQ7IGJvcmRlci10b3At Y29sb3I6IHJnYigxODEsIDE5NiwgMjIzKTsgcGFkZGluZzogM3B0IDBpbiAwaW47IiBjbGFzcz0i Ij4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMXB0 OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0KPGIgY2xhc3M9 IiI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTogMTJwdDsiIGNsYXNzPSIiPkZyb206PHNwYW4gY2xh c3M9IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjwvc3Bhbj48L2I+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZTogMTJwdDsiIGNsYXNzPSIiPlFVSUMgJmx0OzxhIGhyZWY9Im1haWx0 bzpxdWljLWJvdW5jZXNAaWV0Zi5vcmciIGNsYXNzPSIiPnF1aWMtYm91bmNlc0BpZXRmLm9yZzwv YT4mZ3Q7IG9uIGJlaGFsZiBvZiAmcXVvdDs8YSBocmVmPSJtYWlsdG86YnJlbnQuYmlsZ2VyPTQw dmVyaXpvbi5jb21AZG1hcmMuaWV0Zi5vcmciIGNsYXNzPSIiPmJyZW50LmJpbGdlcj00MHZlcml6 b24uY29tQGRtYXJjLmlldGYub3JnPC9hPiZxdW90Ow0KICZsdDs8YSBocmVmPSJtYWlsdG86YnJl bnQuYmlsZ2VyPTQwdmVyaXpvbi5jb21AZG1hcmMuaWV0Zi5vcmciIGNsYXNzPSIiPmJyZW50LmJp bGdlcj00MHZlcml6b24uY29tQGRtYXJjLmlldGYub3JnPC9hPiZndDs8YnIgY2xhc3M9IiI+DQo8 YiBjbGFzcz0iIj5EYXRlOjxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNw Ozwvc3Bhbj48L2I+TW9uZGF5LCBKdWx5IDIyLCAyMDE5IGF0IDEwOjQwIEFNPGJyIGNsYXNzPSIi Pg0KPGIgY2xhc3M9IiI+VG86PHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5i c3A7PC9zcGFuPjwvYj5JYW4gU3dldHQgJmx0OzxhIGhyZWY9Im1haWx0bzppYW5zd2V0dD00MGdv b2dsZS5jb21AZG1hcmMuaWV0Zi5vcmciIGNsYXNzPSIiPmlhbnN3ZXR0PTQwZ29vZ2xlLmNvbUBk bWFyYy5pZXRmLm9yZzwvYT4mZ3Q7PGJyIGNsYXNzPSIiPg0KPGIgY2xhc3M9IiI+Q2M6PHNwYW4g Y2xhc3M9IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjwvYj4mcXVvdDs8YSBo cmVmPSJtYWlsdG86cXVpY0BpZXRmLm9yZyIgY2xhc3M9IiI+cXVpY0BpZXRmLm9yZzwvYT4mcXVv dDsgJmx0OzxhIGhyZWY9Im1haWx0bzpxdWljQGlldGYub3JnIiBjbGFzcz0iIj5xdWljQGlldGYu b3JnPC9hPiZndDssICZxdW90OzxhIGhyZWY9Im1haWx0bzpicmVudC5iaWxnZXJAdmVyaXpvbi5j b20iIGNsYXNzPSIiPmJyZW50LmJpbGdlckB2ZXJpem9uLmNvbTwvYT4mcXVvdDsNCiAmbHQ7PGEg aHJlZj0ibWFpbHRvOmJyZW50LmJpbGdlckB2ZXJpem9uLmNvbSIgY2xhc3M9IiI+YnJlbnQuYmls Z2VyQHZlcml6b24uY29tPC9hPiZndDs8YnIgY2xhc3M9IiI+DQo8YiBjbGFzcz0iIj5TdWJqZWN0 OjxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48L2I+UmU6 IFtFXSBSZTogRG9TLWluZyBRVUlDIHNlcnZlcnMgaXMgdG9vIGVhc3k8bzpwIGNsYXNzPSIiPjwv bzpwPjwvc3Bhbj48L2Rpdj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1h cmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2Fs aWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0KPG86cCBjbGFzcz0iIj4mbmJzcDs8L286cD48 L2Rpdj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4t dG9wOiA1cHQ7IG1hcmdpbi1ib3R0b206IDVwdDsiIGNsYXNzPSIiIHR5cGU9ImNpdGUiPg0KPGRp diBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1z aXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0K T24gSnVsIDE5LCAyMDE5LCBhdCA4OjMxIEFNLCBJYW4gU3dldHQgJmx0OzxhIGhyZWY9Im1haWx0 bzppYW5zd2V0dD00MGdvb2dsZS5jb21AZG1hcmMuaWV0Zi5vcmciIHN0eWxlPSJjb2xvcjogcHVy cGxlOyB0ZXh0LWRlY29yYXRpb246IHVuZGVybGluZTsiIGNsYXNzPSIiPmlhbnN3ZXR0PTQwZ29v Z2xlLmNvbUBkbWFyYy5pZXRmLm9yZzwvYT4mZ3Q7IHdyb3RlOjxvOnAgY2xhc3M9IiI+PC9vOnA+ PC9kaXY+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9u dC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIi Pg0KPG86cCBjbGFzcz0iIj4mbmJzcDs8L286cD48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2 IGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAw LjAwMDFwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJp ZjsiIGNsYXNzPSIiPg0KPG86cCBjbGFzcz0iIj4mbmJzcDs8L286cD48L2Rpdj4NCjwvZGl2Pg0K PGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDExcHQ7IGZv bnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+DQo8bzpwIGNsYXNzPSIi PiZuYnNwOzwvbzpwPjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2 IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1m YW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4NCk9uIEZyaSwgSnVsIDE5LCAy MDE5IGF0IDExOjE2IEFNICZsdDticmVudC5iaWxnZXI9PGEgaHJlZj0ibWFpbHRvOjQwdmVyaXpv bi5jb21AZG1hcmMuaWV0Zi5vcmciIHN0eWxlPSJjb2xvcjogcHVycGxlOyB0ZXh0LWRlY29yYXRp b246IHVuZGVybGluZTsiIGNsYXNzPSIiPjQwdmVyaXpvbi5jb21AZG1hcmMuaWV0Zi5vcmc8L2E+ Jmd0OyB3cm90ZTo8bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPC9kaXY+DQo8YmxvY2txdW90 ZSBzdHlsZT0iYm9yZGVyLXN0eWxlOiBub25lIG5vbmUgbm9uZSBzb2xpZDsgYm9yZGVyLWxlZnQt d2lkdGg6IDFwdDsgYm9yZGVyLWxlZnQtY29sb3I6IHJnYigyMDQsIDIwNCwgMjA0KTsgcGFkZGlu ZzogMGluIDBpbiAwaW4gNnB0OyBtYXJnaW4tbGVmdDogNC44cHQ7IG1hcmdpbi1yaWdodDogMGlu OyIgY2xhc3M9IiIgdHlwZT0iY2l0ZSI+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFy Z2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxp YnJpLCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+DQpQcm9ibGVtOjxiciBjbGFzcz0iIj4NClFVSUMg c2VydmVycywgbGlrZSBqdXN0IGFib3V0IGFsbCBvdGhlciBzZXJ2ZXJzLCBhcmUgZmFyIHRvbyBz dXNjZXB0aWJsZSB0byBEb1MgYXR0YWNrcy4mbmJzcDsmbmJzcDtJbnRlZ3JhbCB0byB0aGUgY2xp ZW50LXNlcnZlciBhcmNoaXRlY3R1cmUgaXMgdGhlIGZhY3QmbmJzcDt0aGF0IHNlcnZlcnMgbXVz dCBsaXN0ZW4gdG8gYWxsIHBvdGVudGlhbCBjbGllbnRzIG9uIHRoZSBuZXR3b3JrKHMpIHRoZXkg c2VydmUg4oCTIHdoZXRoZXIgdGhlIGNvbm5lY3Rpb24gaXMgZnJvbQ0KIGEgbGVnaXRpbWF0ZSBj bGllbnQgb3Igbm90LiZuYnNwO1RoaXMgd2FzIGZpbmUgd2hlbiBJVCBjb250cm9sbGVkIHRoZSBu ZXR3b3JrLCBidXQgdGhlIHNjb3BlIG9mIHRoZSBJbnRlcm5ldCBjaGFuZ2VkIGFsbCB0aGF0LiBT ZXJ2ZXJzIGxpc3RlbmluZyB0byBhbGwgY29tbXVuaWNhdGlvbnMmbmJzcDtlbmFibGVzIHJlc291 cmNlIERvUyBhdHRhY2tzLiBSZXNvdXJjZSBEb1MgYXR0YWNrcyBvbiBRVUlDIHNlcnZlcnMgYXJl IGFtcGxpZmllZCBieSB0aGUgcHJvY2Vzc2luZw0KIHJlcXVpcmVtZW50cyBvZiBwdWJsaWMvcHJp dmF0ZSZuYnNwO2tleSBjcnlwdG9ncmFwaHkgd2hpY2ggYW4gYXR0YWNrZXIgYSBjYW4gaW5kdWNl IHRoZSBzZXJ2ZXIgdG8gZG8gd2l0aG91dCBidXJkZW5pbmcgdGhlIGF0dGFja2VyLiZuYnNwOyZu YnNwO0luIGFkZGl0aW9uLCBzZXJ2ZXJzIHJlc3BvbmRpbmcgdG8gYWxsJm5ic3A7cXVlcmllcyBj YW4gbGVhayBpbmZvcm1hdGlvbiB0aGF0IGFkdmVyc2FyaWVzIGNhbiBsYXRlciB1c2UgdG8gYXR0 YWNrIHRoZW0uPGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KUmVxdWlyZW1lbnQ6PGJyIGNs YXNzPSIiPg0KUHJvdmlkZSBhIHdheSB0aGF0IFFVSUMgc2VydmVycyBjYW4gZWFzaWx5LCB3aXRo IHZlcnkgbG93IHByb2Nlc3NpbmcgcmVxdWlyZW1lbnQsIHRlbGwgaWYgYSBjb25uZWN0aW9uIGlz IGZyb20gYSBsZWdpdGltYXRlIGNsaWVudC48bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPC9k aXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAw aW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBz YW5zLXNlcmlmOyIgY2xhc3M9IiI+DQo8bzpwIGNsYXNzPSIiPiZuYnNwOzwvbzpwPjwvZGl2Pg0K PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAw MXB0OyBmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyIg Y2xhc3M9IiI+DQpRVUlDJ3MgUmV0cnkgdG9rZW4gaXMgZGVzaWduZWQgZm9yIHRoaXMgcHVycG9z ZS4uJm5ic3A7IEkgYmVsaWV2ZSB0aGF0IHNob3VsZCBiZSBzdWZmaWNpZW50IGFuZCBtYWtlIFFV SUMgZXF1aXZhbGVudCB0byBUQ1AuLjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8L2Rpdj4N CjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxkaXYgY2xhc3M9IiI+DQo8 ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9u dC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4NCjxvOnAgY2xhc3M9IiI+ Jm5ic3A7PC9vOnA+PC9kaXY+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAw LjAwMDFwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJp ZjsiIGNsYXNzPSIiPg0KQnV0IHdlIGNhbiBtYWtlIFFVSUMgbXVjaCwgbXVjaCBiZXR0ZXIgdGhh biBUQ1AgYmVjYXVzZSB0aGUgZmlyc3QgcGFja2V0IG9mIHRoZSBVRFAgY29ubmVjdGlvbiB0aGF0 IHRoZSBzZXJ2ZXIgcmVjZWl2ZXMgY2FuIHByZS1hdXRoZW50aWNhdGUgdGhlIGNsaWVudC4gVGhl cmVmb3JlLCB0aGUgc2VydmVyIGNvdWxkOiAxKSBhbGxvY2F0ZSB2ZXJ5IGxpdHRsZSByZXNvdXJj ZSB0byB0aGUgY2xpZW50IHRvIGNoZWNrIHRoYXQgdGhlIGNsaWVudCBpcw0KIGF1dGhvcml6ZWQg dG8gY29ubmVjdCwgMikgZWxpbWluYXRlIHRoZSBwcm9jZXNzIGludGVuc2l2ZSBjcnlwdG8gZm9y IHVuYXV0aG9yaXplZCBjbGllbnRzLCBhbmQgMykgcmVqZWN0IHRoZSBjb25uZWN0aW9uIGltbWVk aWF0ZWx5IGluc3RlYWQgb2Ygd2FpdGluZyBmb3Igc29tZSB0aW1lb3V0LjxvOnAgY2xhc3M9IiI+ PC9vOnA+PC9kaXY+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPg0KPGRp diBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDExcHQ7IGZvbnQt ZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQo8 YnIgY2xhc3M9IiI+DQo8bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPC9kaXY+DQo8YmxvY2tx dW90ZSBzdHlsZT0ibWFyZ2luLXRvcDogNXB0OyBtYXJnaW4tYm90dG9tOiA1cHQ7IiBjbGFzcz0i IiB0eXBlPSJjaXRlIj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBjbGFz cz0iIj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAx cHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBj bGFzcz0iIj4NCjxvOnAgY2xhc3M9IiI+Jm5ic3A7PC9vOnA+PC9kaXY+DQo8L2Rpdj4NCjxkaXYg Y2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6 ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4NCkFs c28sIFFVSUMgcmVxdWlyZXMgbXVjaCBsYXJnZXIgSW5pdGlhbCBwYWNrZXQgc2l6ZXMgdGhhbiBh IFRDUCBTWU4sIGluY3JlYXNpbmcgdGhlIGFtb3VudCBvZiB3b3JrIGFuIGF0dGFja2VyIGhhcyB0 byBleHBlbmQuPG86cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rp dj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1h cmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2Fs aWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0KPG86cCBjbGFzcz0iIj4mbmJzcDs8L286cD48 L2Rpdj4NCjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250 LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+ DQpZZXMsIHNvIHdlIGNvdWxkIG9wdGlvbmFsbHkgbWFrZSB1c2Ugb2Ygc29tZSBvZiB0aGF0IGxh cmdlciBwYWNrZXQgc2l6ZSBmb3IgdGhlIHByZS1hdXRoZW50aWNhdGlvbi48bzpwIGNsYXNzPSIi PjwvbzpwPjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2lu OiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJp LCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+DQo8bzpwIGNsYXNzPSIiPiZuYnNwOzwvbzpwPjwvZGl2 Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAu MDAwMXB0OyBmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlm OyIgY2xhc3M9IiI+DQpCcmVudDxvOnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8L2Rpdj4NCjxk aXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQt c2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4N CjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+ DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDogNXB0OyBtYXJnaW4tYm90dG9tOiA1cHQ7 IiBjbGFzcz0iIiB0eXBlPSJjaXRlIj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPg0K PGRpdiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAw aW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMt c2VyaWY7IiBjbGFzcz0iIj4NCjxvOnAgY2xhc3M9IiI+Jm5ic3A7PC9vOnA+PC9kaXY+DQo8L2Rp dj4NCjxibG9ja3F1b3RlIHN0eWxlPSJib3JkZXItc3R5bGU6IG5vbmUgbm9uZSBub25lIHNvbGlk OyBib3JkZXItbGVmdC13aWR0aDogMXB0OyBib3JkZXItbGVmdC1jb2xvcjogcmdiKDIwNCwgMjA0 LCAyMDQpOyBwYWRkaW5nOiAwaW4gMGluIDBpbiA2cHQ7IG1hcmdpbi1sZWZ0OiA0LjhwdDsgbWFy Z2luLXJpZ2h0OiAwaW47IiBjbGFzcz0iIiB0eXBlPSJjaXRlIj4NCjxkaXYgY2xhc3M9IiI+DQo8 ZGl2IGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGNsYXNz PSIiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAxMy41cHQ7 IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7Ij4NCjxz cGFuIHN0eWxlPSJmb250LXNpemU6IDEzLjVwdDsgZm9udC1mYW1pbHk6IEhlbHZldGljYTsiIGNs YXNzPSIiPjxvOnAgY2xhc3M9IiI+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRp diBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1z aXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0K PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTogMTMuNXB0OyBmb250LWZhbWlseTogSGVsdmV0aWNhOyIg Y2xhc3M9IiI+PG86cCBjbGFzcz0iIj4mbmJzcDs8L286cD48L3NwYW4+PC9kaXY+DQo8L2Rpdj4N CjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZv bnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0i Ij4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDEzLjVwdDsgZm9udC1mYW1pbHk6IEhlbHZldGlj YTsiIGNsYXNzPSIiPkJyZW50IEJsaWdlcjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9zcGFuPjwvZGl2 Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAu MDAwMXB0OyBmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlm OyIgY2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOiAxMy41cHQ7IGZvbnQtZmFtaWx5 OiBIZWx2ZXRpY2E7IiBjbGFzcz0iIj5EaXJlY3Rvci1UZWNobm9sb2d5Jm5ic3A7VmVyaXpvbiBT RFAmbmJzcDs8bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bhbj48L2Rpdj4NCjwvZGl2Pg0KPGRpdiBj bGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXpl OiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0KPHNw YW4gc3R5bGU9ImZvbnQtc2l6ZTogMTMuNXB0OyBmb250LWZhbWlseTogSGVsdmV0aWNhOyIgY2xh c3M9IiI+PGEgaHJlZj0ibWFpbHRvOmJyZW50LmJpbGdlckB2ZXJpem9uLmNvbSIgdGFyZ2V0PSJf YmxhbmsiIHN0eWxlPSJjb2xvcjogcHVycGxlOyB0ZXh0LWRlY29yYXRpb246IHVuZGVybGluZTsi IGNsYXNzPSIiPmJyZW50LmJpbGdlckB2ZXJpem9uLmNvbTwvYT48bzpwIGNsYXNzPSIiPjwvbzpw Pjwvc3Bhbj48L2Rpdj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdp bjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJy aSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTogMThwdDsg Zm9udC1mYW1pbHk6IEhlbHZldGljYTsiIGNsYXNzPSIiPjxvOnAgY2xhc3M9IiI+Jm5ic3A7PC9v OnA+PC9zcGFuPjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4w MDAxcHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7 IiBjbGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDEzLjVwdDsgZm9udC1mYW1pbHk6 IEhlbHZldGljYTsiIGNsYXNzPSIiPjxvOnAgY2xhc3M9IiI+Jm5ic3A7PC9vOnA+PC9zcGFuPjwv ZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW46 IDBpbiAwaW4gMTJwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fu cy1zZXJpZjsiPg0KPG86cCBjbGFzcz0iIj4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXYg c3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZh bWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0KPG86cCBjbGFzcz0iIj4mbmJz cDs8L286cD48L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8L2Rpdj4NCjwv ZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4g MC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2Vy aWY7IiBjbGFzcz0iIj4NCjxvOnAgY2xhc3M9IiI+Jm5ic3A7PC9vOnA+PC9kaXY+DQo8ZGl2IGNs YXNzPSIiPg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAxMy41cHQ7IGZvbnQt c2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7Ij4NCjxzcGFuIHN0 eWxlPSJmb250LXNpemU6IDEzLjVwdDsgZm9udC1mYW1pbHk6IEhlbHZldGljYTsiIGNsYXNzPSIi PjxvOnAgY2xhc3M9IiI+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdiBjbGFz cz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAx MXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0KPHNwYW4g c3R5bGU9ImZvbnQtc2l6ZTogMTMuNXB0OyBmb250LWZhbWlseTogSGVsdmV0aWNhOyIgY2xhc3M9 IiI+PG86cCBjbGFzcz0iIj4mbmJzcDs8L286cD48L3NwYW4+PC9kaXY+DQo8L2Rpdj4NCjxkaXYg Y2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6 ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4NCjxz cGFuIHN0eWxlPSJmb250LXNpemU6IDEzLjVwdDsgZm9udC1mYW1pbHk6IEhlbHZldGljYTsiIGNs YXNzPSIiPkJyZW50IEJsaWdlcjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9zcGFuPjwvZGl2Pg0KPC9k aXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0 OyBmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyIgY2xh c3M9IiI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOiAxMy41cHQ7IGZvbnQtZmFtaWx5OiBIZWx2 ZXRpY2E7IiBjbGFzcz0iIj5EaXJlY3Rvci1UZWNobm9sb2d5Jm5ic3A7VmVyaXpvbiBTRFAmbmJz cDs8bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bhbj48L2Rpdj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0i Ij4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMXB0 OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZTogMTMuNXB0OyBmb250LWZhbWlseTogSGVsdmV0aWNhOyIgY2xhc3M9IiI+ PGEgaHJlZj0ibWFpbHRvOmJyZW50LmJpbGdlckB2ZXJpem9uLmNvbSIgc3R5bGU9ImNvbG9yOiBw dXJwbGU7IHRleHQtZGVjb3JhdGlvbjogdW5kZXJsaW5lOyIgY2xhc3M9IiI+YnJlbnQuYmlsZ2Vy QHZlcml6b24uY29tPC9hPjwvc3Bhbj48L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwv ZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPGJyIGNsYXNzPSIi Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgZGlyPSJhdXRvIiBzdHlsZT0iY2FyZXQtY29sb3I6IHJn YigwLCAwLCAwKTsgY29sb3I6IHJnYigwLCAwLCAwKTsgZm9udC1mYW1pbHk6IEhlbHZldGljYTsg Zm9udC1zaXplOiAxOHB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBu b3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQt YWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hp dGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Ut d2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyB3b3JkLXdyYXA6IGJyZWFrLXdvcmQ7 IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgbGluZS1icmVhazogYWZ0ZXItd2hpdGUtc3BhY2U7 IiBjbGFzcz0iIj4NCjxkaXYgZGlyPSJhdXRvIiBzdHlsZT0id29yZC13cmFwOiBicmVhay13b3Jk OyAtd2Via2l0LW5ic3AtbW9kZTogc3BhY2U7IGxpbmUtYnJlYWs6IGFmdGVyLXdoaXRlLXNwYWNl OyIgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJjYXJldC1jb2xvcjogcmdiKDAsIDAsIDApOyBjb2xv cjogcmdiKDAsIDAsIDApOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBsZXR0ZXItc3BhY2lu Zzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFu c2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Vi a2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsiPg0KPGJy IGNsYXNzPSJBcHBsZS1pbnRlcmNoYW5nZS1uZXdsaW5lIj4NCjxiciBjbGFzcz0iIj4NCjwvZGl2 Pg0KPGRpdiBzdHlsZT0iY2FyZXQtY29sb3I6IHJnYigwLCAwLCAwKTsgY29sb3I6IHJnYigwLCAw LCAwKTsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsg dGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25l OyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0 cm9rZS13aWR0aDogMHB4OyB0ZXh0LWRlY29yYXRpb246IG5vbmU7Ij4NCjxiciBjbGFzcz0iIj4N CjwvZGl2Pg0KPGRpdiBzdHlsZT0iY2FyZXQtY29sb3I6IHJnYigwLCAwLCAwKTsgY29sb3I6IHJn YigwLCAwLCAwKTsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5v cm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3Jt OiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10 ZXh0LXN0cm9rZS13aWR0aDogMHB4OyB0ZXh0LWRlY29yYXRpb246IG5vbmU7Ij4NCkJyZW50IEJs aWdlcjwvZGl2Pg0KPGRpdiBzdHlsZT0iY2FyZXQtY29sb3I6IHJnYigwLCAwLCAwKTsgY29sb3I6 IHJnYigwLCAwLCAwKTsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6 IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNm b3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtp dC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyB0ZXh0LWRlY29yYXRpb246IG5vbmU7Ij4NCkRpcmVj dG9yLVRlY2hub2xvZ3kmbmJzcDtWZXJpem9uIFNEUCZuYnNwOzxiciBjbGFzcz0iIj4NCjwvZGl2 Pg0KPGRpdiBzdHlsZT0iY2FyZXQtY29sb3I6IHJnYigwLCAwLCAwKTsgY29sb3I6IHJnYigwLCAw LCAwKTsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsg dGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25l OyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0 cm9rZS13aWR0aDogMHB4OyB0ZXh0LWRlY29yYXRpb246IG5vbmU7Ij4NCjxhIGhyZWY9Im1haWx0 bzpicmVudC5iaWxnZXJAdmVyaXpvbi5jb20iIGNsYXNzPSIiPmJyZW50LmJpbGdlckB2ZXJpem9u LmNvbTwvYT48L2Rpdj4NCjxkaXYgc3R5bGU9ImNhcmV0LWNvbG9yOiByZ2IoMCwgMCwgMCk7IGNv bG9yOiByZ2IoMCwgMCwgMCk7IGZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMjRw eDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdl aWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsg dGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3Jt YWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRl eHQtZGVjb3JhdGlvbjogbm9uZTsiIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8 YnIgY2xhc3M9IkFwcGxlLWludGVyY2hhbmdlLW5ld2xpbmUiPg0KPC9kaXY+DQo8L2Rpdj4NCjxi ciBjbGFzcz0iQXBwbGUtaW50ZXJjaGFuZ2UtbmV3bGluZSIgc3R5bGU9ImNhcmV0LWNvbG9yOiBy Z2IoMCwgMCwgMCk7IGNvbG9yOiByZ2IoMCwgMCwgMCk7IGZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7 IGZvbnQtc2l6ZTogMThweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczog bm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0 LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdo aXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tl LXdpZHRoOiAwcHg7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsiPg0KPGJyIGNsYXNzPSJBcHBsZS1p bnRlcmNoYW5nZS1uZXdsaW5lIj4NCjwvZGl2Pg0KPGJyIGNsYXNzPSIiPg0KPC9ib2R5Pg0KPC9o dG1sPg0K --_000_B359940972E74E15954993663CDC561Aoneverizoncom_-- From nobody Mon Jul 22 21:16:25 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2C2E51202B0 for ; Mon, 22 Jul 2019 21:16:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lJwmDd8SmlAy for ; Mon, 22 Jul 2019 21:16:16 -0700 (PDT) Received: from mail-lj1-x241.google.com (mail-lj1-x241.google.com [IPv6:2a00:1450:4864:20::241]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 295E71200F1 for ; Mon, 22 Jul 2019 21:16:16 -0700 (PDT) Received: by mail-lj1-x241.google.com with SMTP id m23so39582409lje.12 for ; Mon, 22 Jul 2019 21:16:16 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=6COTX9IWQY19SPkWW1J+KcbcNGn92EYjr03lSUq/oWw=; b=hG9Qmg0k9eMgT2EF/9ESQMmR1P7IWK+Yb+xqPDWaix/8DmfY1on3xbBD0sR52wtX2y K01xaqwf0dfVPukHcp8EqXL7a3251edBCVSQxI45nupgGxIR2RPSlkPc8gwP5cfnT6hO UiUkJi88V/88eSg4aM0nYE6XLtjnZb/zG3JllBa2LTEZqmQxxSS+13hkB7I3WgchEDTr oHwNmBN7b36aUhlkG/MYVudPUkFlLL4mc0eAOlEhHECO59weoOv0f/uESNE9OYmbIyW9 271zK3kzey+LcsKltQKAf9MvQUU2v+9wSvT3saTVvrpYu9KGxfjzmoPYmSOSIcRWE4ME qv2A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=6COTX9IWQY19SPkWW1J+KcbcNGn92EYjr03lSUq/oWw=; b=iuIua+kNoFy61sqTXKi42HsyAntn1Ypf/bvsZOb1ZA7rwHa9muQCJK6gsR7BctkNKm DITc6x0dnUq5jF5srnDlSaznaSY+EDi3YTRBmxO8v+7eHa3oGCsPAhO5PX7Vk7t40NiI NdonGNmK12ZrPTA9n7mYplRQiwPhR0jVYcK/NQq3lsb5Bw/L3dzo9FokofviQ9PecY3v EPFmAd9L6xNLHpT9g56kKRMo6YFCQnz83lTnPgRfij9/K2qjnoxNZ22OJclUvT94qvDS hGYQzOmb1MECmgfRCohI3+KZN3P3UbwQ58XeicZHEo6icJqWb///ukpvwQN0Zt3pqxu6 xqeg== X-Gm-Message-State: APjAAAUyYUIjz6Bg7A06ATyHmm2fxGbb3IADCKQK/OMMxj+6XJraqfAx clJmmAvoOYg6wqIzvMDHVbRo4FzZ7dFSeZUbelc= X-Google-Smtp-Source: APXvYqw9PjZkpLJYT1WSjxLOcv6KlxEQyx2tzQQ7JtjFiJAm9kd7IdY5Z7p5cYYR7BKOEP7nYDlDZCoQ6aA2cbOkNJ4= X-Received: by 2002:a2e:b0e6:: with SMTP id h6mr36580199ljl.18.1563855374217; Mon, 22 Jul 2019 21:16:14 -0700 (PDT) MIME-Version: 1.0 References: <21E3AE84-02C5-4943-A88E-B62329E21002@one.verizon.com> <507D5DB7-EDF2-4429-A518-604A377F92D9@one.verizon.com> <9BF2DC9D-F14C-4451-9191-1A1557556691@fb.com> In-Reply-To: From: Watson Ladd Date: Mon, 22 Jul 2019 21:16:02 -0700 Message-ID: Subject: Re: [E] DoS-ing QUIC servers is too easy To: brent.bilger=40verizon.com@dmarc.ietf.org Cc: Roberto Peon , "quic@ietf.org" , brent.bilger@verizon.com, Ian Swett Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 23 Jul 2019 04:16:24 -0000 On Mon, Jul 22, 2019 at 5:29 PM wrote: > > > > On Jul 22, 2019, at 10:10 AM, Roberto Peon wrote: > > When you=E2=80=99re talking about pre-authentication, are you referring t= o the 0-rtt stuff? > > > 0-RTT is good stuff. It reduces time for a device that=E2=80=99s already = known to be authorized to connect to the server. > > Part of the problem is to stop resource DoS. The other part is about info= rmation leakage. > > Let=E2=80=99s assume a time when all website use QUIC and let's take an a= dversary who has just learned about a vulnerability in Wordpress. The adver= sary wants to scan the Internet finding Wordpress sites. Now, if the QUIC c= onnection required pre-authentication, then the server would be black to th= e connection and the adversary could not determine if the site uses Wordpre= ss. But, as it stands today, in this future time, the adversary scans the I= nternet, connects to the server, and is handed a Wordpress login screen. No= w the adversary knows where to attack. If connection requires preauthentication then no one can see the site, no? > > In the enterprise it is a little different. Companies implement reverse p= roxies to try to protect servers from unauthorized users. But what if the s= ervers required a pre-authentication token. Then, reverse proxies would not= be needed. So I think there are two different things here, or maybe I'm misunderstandi= ng: 1: We have servers that have a limited number of clients that will ever want to connect to them, and want to enable other devices to filter the traffic, so need some mechanism that enables a middlebox to filter. 2: We have servers generally available to the public and are concerned that the QUIC version of a SYN flood can't be dealt with (despite evidence to the contrary). I don't know much about how Cloudflare (my place of employment) deals with 2 but hopefully some people who do/implementors can speak up about how much of a problem it is. But 1 is I think very much a nongoal: middlebox ossification is part of the reason we have QUIC. Sincerely, Watson Ladd From nobody Tue Jul 23 05:21:15 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8B729120347 for ; Tue, 23 Jul 2019 05:21:13 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=verizon.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ts18ao_TWHJm for ; Tue, 23 Jul 2019 05:21:11 -0700 (PDT) Received: from smtpout3-tdc.verizon.com (smtpout3-tdc.verizon.com [137.188.104.135]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 08B261202CB for ; Tue, 23 Jul 2019 05:21:08 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=verizon.com; i=@verizon.com; q=dns/txt; s=corp; t=1563884469; x=1595420469; h=to:subject:date:message-id:references:in-reply-to: mime-version:from:cc; bh=IpOwHOby0efZrLIY8eJT9zLw9PKuCrwPzEyJ6IXqetU=; b=YhrizJHcD5SYO8HHIxliUuQ2p598DLJU3EqRHZI1ea9Exwm61aF60vHm Av7zsxC+fnSH0OeI+TBwSYB/OZpZCvmhwlosY47FM5uYm1GImy41W+Syz 16haQsviKc1OIdTn5yoES8YxGHdhpXJZtuPYOSNEOMIMRndkDis0RJlgT 4=; From: brent.bilger@verizon.com Cc: "brent.bilger=40verizon.com@dmarc.ietf.org" , Roberto Peon , "quic@ietf.org" ,brent.bilger@verizon.com, Ian Swett Received: from tbwexch02apd.uswin.ad.vzwcorp.com ([153.114.162.26]) by smtpout3-tdc.verizon.com with ESMTP/TLS/ECDHE-RSA-AES256-SHA384; 23 Jul 2019 12:21:07 +0000 Received: from tbwexch18apd.uswin.ad.vzwcorp.com (153.114.162.42) by tbwexch02apd.uswin.ad.vzwcorp.com (153.114.162.26) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Tue, 23 Jul 2019 08:21:07 -0400 Received: from scwexch11apd.uswin.ad.vzwcorp.com (153.114.130.30) by tbwexch18apd.uswin.ad.vzwcorp.com (153.114.162.42) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Tue, 23 Jul 2019 08:21:06 -0400 Received: from scwexch05apd.uswin.ad.vzwcorp.com (153.114.130.24) by scwexch11apd.uswin.ad.vzwcorp.com (153.114.130.30) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Tue, 23 Jul 2019 05:21:05 -0700 Received: from scwexch05apd.uswin.ad.vzwcorp.com ([153.114.130.24]) by scwexch05apd.uswin.ad.vzwcorp.com ([153.114.130.24]) with mapi id 15.00.1473.003; Tue, 23 Jul 2019 05:21:05 -0700 To: Watson Ladd Subject: Re: [E] DoS-ing QUIC servers is too easy Thread-Topic: [E] DoS-ing QUIC servers is too easy Thread-Index: AQHVQO2TMeh9llpV6EqU+Dk6tm4oPqbYDioAgACHhoA= Date: Tue, 23 Jul 2019 12:21:05 +0000 Message-ID: <9DC40032-3852-4237-A621-5C6B1102E74F@one.verizon.com> References: <21E3AE84-02C5-4943-A88E-B62329E21002@one.verizon.com> <507D5DB7-EDF2-4429-A518-604A377F92D9@one.verizon.com> <9BF2DC9D-F14C-4451-9191-1A1557556691@fb.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.11.60.250] Content-Type: multipart/alternative; boundary="_000_9DC4003238524237A6215C6B1102E74Foneverizoncom_" MIME-Version: 1.0 Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 23 Jul 2019 12:21:14 -0000 --_000_9DC4003238524237A6215C6B1102E74Foneverizoncom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 DQoNCk9uIEp1bCAyMiwgMjAxOSwgYXQgOToxNiBQTSwgV2F0c29uIExhZGQgPHdhdHNvbmJsYWRk QGdtYWlsLmNvbTxtYWlsdG86d2F0c29uYmxhZGRAZ21haWwuY29tPj4gd3JvdGU6DQoNCk9uIE1v biwgSnVsIDIyLCAyMDE5IGF0IDU6MjkgUE0NCjxicmVudC5iaWxnZXI9NDB2ZXJpem9uLmNvbUBk bWFyYy5pZXRmLm9yZzxtYWlsdG86YnJlbnQuYmlsZ2VyPTQwdmVyaXpvbi5jb21AZG1hcmMuaWV0 Zi5vcmc+PiB3cm90ZToNCg0KDQoNCk9uIEp1bCAyMiwgMjAxOSwgYXQgMTA6MTAgQU0sIFJvYmVy dG8gUGVvbiA8ZmVuaXhAZmIuY29tPG1haWx0bzpmZW5peEBmYi5jb20+PiB3cm90ZToNCg0KV2hl biB5b3XigJlyZSB0YWxraW5nIGFib3V0IHByZS1hdXRoZW50aWNhdGlvbiwgYXJlIHlvdSByZWZl cnJpbmcgdG8gdGhlIDAtcnR0IHN0dWZmPw0KDQoNCjAtUlRUIGlzIGdvb2Qgc3R1ZmYuIEl0IHJl ZHVjZXMgdGltZSBmb3IgYSBkZXZpY2UgdGhhdOKAmXMgYWxyZWFkeSBrbm93biB0byBiZSBhdXRo b3JpemVkIHRvIGNvbm5lY3QgdG8gdGhlIHNlcnZlci4NCg0KUGFydCBvZiB0aGUgcHJvYmxlbSBp cyB0byBzdG9wIHJlc291cmNlIERvUy4gVGhlIG90aGVyIHBhcnQgaXMgYWJvdXQgaW5mb3JtYXRp b24gbGVha2FnZS4NCg0KTGV04oCZcyBhc3N1bWUgYSB0aW1lIHdoZW4gYWxsIHdlYnNpdGUgdXNl IFFVSUMgYW5kIGxldCdzIHRha2UgYW4gYWR2ZXJzYXJ5IHdobyBoYXMganVzdCBsZWFybmVkIGFi b3V0IGEgdnVsbmVyYWJpbGl0eSBpbiBXb3JkcHJlc3MuIFRoZSBhZHZlcnNhcnkgd2FudHMgdG8g c2NhbiB0aGUgSW50ZXJuZXQgZmluZGluZyBXb3JkcHJlc3Mgc2l0ZXMuIE5vdywgaWYgdGhlIFFV SUMgY29ubmVjdGlvbiByZXF1aXJlZCBwcmUtYXV0aGVudGljYXRpb24sIHRoZW4gdGhlIHNlcnZl ciB3b3VsZCBiZSBibGFjayB0byB0aGUgY29ubmVjdGlvbiBhbmQgdGhlIGFkdmVyc2FyeSBjb3Vs ZCBub3QgZGV0ZXJtaW5lIGlmIHRoZSBzaXRlIHVzZXMgV29yZHByZXNzLiBCdXQsIGFzIGl0IHN0 YW5kcyB0b2RheSwgaW4gdGhpcyBmdXR1cmUgdGltZSwgdGhlIGFkdmVyc2FyeSBzY2FucyB0aGUg SW50ZXJuZXQsIGNvbm5lY3RzIHRvIHRoZSBzZXJ2ZXIsIGFuZCBpcyBoYW5kZWQgYSBXb3JkcHJl c3MgbG9naW4gc2NyZWVuLiBOb3cgdGhlIGFkdmVyc2FyeSBrbm93cyB3aGVyZSB0byBhdHRhY2su DQoNCklmIGNvbm5lY3Rpb24gcmVxdWlyZXMgcHJlYXV0aGVudGljYXRpb24gdGhlbiBubyBvbmUg Y2FuIHNlZSB0aGUgc2l0ZSwgbm8/DQoNCg0KSW4gdGhlIGVudGVycHJpc2UgaXQgaXMgYSBsaXR0 bGUgZGlmZmVyZW50LiBDb21wYW5pZXMgaW1wbGVtZW50IHJldmVyc2UgcHJveGllcyB0byB0cnkg dG8gcHJvdGVjdCBzZXJ2ZXJzIGZyb20gdW5hdXRob3JpemVkIHVzZXJzLiBCdXQgd2hhdCBpZiB0 aGUgc2VydmVycyByZXF1aXJlZCBhIHByZS1hdXRoZW50aWNhdGlvbiB0b2tlbi4gVGhlbiwgcmV2 ZXJzZSBwcm94aWVzIHdvdWxkIG5vdCBiZSBuZWVkZWQuDQoNClNvIEkgdGhpbmsgdGhlcmUgYXJl IHR3byBkaWZmZXJlbnQgdGhpbmdzIGhlcmUsIG9yIG1heWJlIEknbSBtaXN1bmRlcnN0YW5kaW5n Og0KMTogV2UgaGF2ZSBzZXJ2ZXJzIHRoYXQgaGF2ZSBhIGxpbWl0ZWQgbnVtYmVyIG9mIGNsaWVu dHMgdGhhdCB3aWxsDQpldmVyIHdhbnQgdG8gY29ubmVjdCB0byB0aGVtLCBhbmQgd2FudCB0byBl bmFibGUgb3RoZXIgZGV2aWNlcyB0bw0KZmlsdGVyIHRoZSB0cmFmZmljLCBzbyBuZWVkIHNvbWUg bWVjaGFuaXNtIHRoYXQgZW5hYmxlcyBhIG1pZGRsZWJveCB0bw0KZmlsdGVyLg0KDQpObyBtaWRk bGUgYm94ISBQcmUtYXV0aGVudGljYXRpb24gbWFrZXMgc2VydmVycyBzZWxmLWRlZmVuZGluZy4g TGFjayBvZiBwcmUtYXV0aGVudGljYXRpb24gaXMgd2h5IHdlIGhhdmUgbWlkZGxlIGJveGVzLg0K DQoyOiBXZSBoYXZlIHNlcnZlcnMgZ2VuZXJhbGx5IGF2YWlsYWJsZSB0byB0aGUgcHVibGljIGFu ZCBhcmUgY29uY2VybmVkDQp0aGF0IHRoZSBRVUlDIHZlcnNpb24gb2YgYSBTWU4gZmxvb2QgY2Fu J3QgYmUgZGVhbHQgd2l0aCAoZGVzcGl0ZQ0KZXZpZGVuY2UgdG8gdGhlIGNvbnRyYXJ5KS4NCg0K Q29tcGFuaWVzIGFuZCB3ZWJzaXRlIG93bmVycyBoYXZlIHRvIHBheSBmb3IgYW50aS1Eb1Mgc2Vy dmljZXMgZnJvbSB0aGUgbGlrZXMgb2YgVmVyaXpvbiBhbmQgb3RoZXJzIEJFQ0FVU0Ugc2VydmVy cyBsaXN0ZW4gdG8gYWxsIGNsaWVudHMuIFdpdGggcHJlLWF1dGhlbnRpY2F0aW9uLCB0aGUgbmVl ZCB0byBoYXZlIGFuIGFudGktRG9TIHNlcnZpY2Ugd291bGQgYmUgZ3JlYXRseSByZWR1Y2VkIGJl Y2F1c2Ugc2VydmVycyB3b3VsZCBub3QgcmVzcG9uZCB0byB1bmF1dGhvcml6ZWQgY2xpZW50cy4N Cg0KQW5kIHRoZSBwb2ludCBhYm91dCBpbmZvcm1hdGlvbiBsZWFrYWdlIGlzIGltcG9ydGFudCwg dG9vLg0KDQpCcmVudA0KDQoNCkkgZG9uJ3Qga25vdyBtdWNoIGFib3V0IGhvdyBDbG91ZGZsYXJl IChteSBwbGFjZSBvZiBlbXBsb3ltZW50KSAgZGVhbHMNCndpdGggMiBidXQgaG9wZWZ1bGx5IHNv bWUgcGVvcGxlIHdobyBkby9pbXBsZW1lbnRvcnMgY2FuIHNwZWFrIHVwDQphYm91dCBob3cgbXVj aCBvZiBhIHByb2JsZW0gaXQgaXMuIEJ1dCAxIGlzIEkgdGhpbmsgdmVyeSBtdWNoIGENCm5vbmdv YWw6IG1pZGRsZWJveCBvc3NpZmljYXRpb24gaXMgcGFydCBvZiB0aGUgcmVhc29uIHdlIGhhdmUg UVVJQy4NCg0KU2luY2VyZWx5LA0KV2F0c29uIExhZGQNCg0KDQoNCg0KQnJlbnQgQmxpZ2VyDQpE aXJlY3Rvci1UZWNobm9sb2d5IFZlcml6b24gU0RQDQpicmVudC5iaWxnZXJAdmVyaXpvbi5jb208 bWFpbHRvOmJyZW50LmJpbGdlckB2ZXJpem9uLmNvbT4NCg0KDQoNCg0KDQo= --_000_9DC4003238524237A6215C6B1102E74Foneverizoncom_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgbGluZS1icmVhazogYWZ0 ZXItd2hpdGUtc3BhY2U7IiBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCjxkaXY+PGJyIGNsYXNz PSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPk9u IEp1bCAyMiwgMjAxOSwgYXQgOToxNiBQTSwgV2F0c29uIExhZGQgJmx0OzxhIGhyZWY9Im1haWx0 bzp3YXRzb25ibGFkZEBnbWFpbC5jb20iIGNsYXNzPSIiPndhdHNvbmJsYWRkQGdtYWlsLmNvbTwv YT4mZ3Q7IHdyb3RlOjwvZGl2Pg0KPGJyIGNsYXNzPSJBcHBsZS1pbnRlcmNoYW5nZS1uZXdsaW5l Ij4NCjxkaXYgY2xhc3M9IiI+PHNwYW4gc3R5bGU9ImNhcmV0LWNvbG9yOiByZ2IoMCwgMCwgMCk7 IGZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMThweDsgZm9udC1zdHlsZTogbm9y bWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0 ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsg dGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzog MHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQtZGVjb3JhdGlvbjogbm9u ZTsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyIgY2xhc3M9IiI+T24N CiBNb24sIEp1bCAyMiwgMjAxOSBhdCA1OjI5IFBNPC9zcGFuPjxiciBzdHlsZT0iY2FyZXQtY29s b3I6IHJnYigwLCAwLCAwKTsgZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxOHB4 OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2Vp Z2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0 ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1h bDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgdGV4 dC1kZWNvcmF0aW9uOiBub25lOyIgY2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0iY2FyZXQtY29sb3I6 IHJnYigwLCAwLCAwKTsgZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxOHB4OyBm b250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0 OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0 LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsg d29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgdGV4dC1k ZWNvcmF0aW9uOiBub25lOyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7 IiBjbGFzcz0iIj4mbHQ7PC9zcGFuPjxhIGhyZWY9Im1haWx0bzpicmVudC5iaWxnZXI9NDB2ZXJp em9uLmNvbUBkbWFyYy5pZXRmLm9yZyIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZv bnQtc2l6ZTogMThweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9y bWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyBvcnBoYW5z OiBhdXRvOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zv cm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdpZG93czogYXV0bzsgd29yZC1zcGFjaW5n OiAwcHg7IC13ZWJraXQtdGV4dC1zaXplLWFkanVzdDogYXV0bzsgLXdlYmtpdC10ZXh0LXN0cm9r ZS13aWR0aDogMHB4OyIgY2xhc3M9IiI+YnJlbnQuYmlsZ2VyPTQwdmVyaXpvbi5jb21AZG1hcmMu aWV0Zi5vcmc8L2E+PHNwYW4gc3R5bGU9ImNhcmV0LWNvbG9yOiByZ2IoMCwgMCwgMCk7IGZvbnQt ZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMThweDsgZm9udC1zdHlsZTogbm9ybWFsOyBm b250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3Bh Y2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10 cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAt d2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsgZmxv YXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyIgY2xhc3M9IiI+Jmd0Ow0KIHdy b3RlOjwvc3Bhbj48YnIgc3R5bGU9ImNhcmV0LWNvbG9yOiByZ2IoMCwgMCwgMCk7IGZvbnQtZmFt aWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMThweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250 LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2lu Zzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFu c2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Vi a2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsiIGNsYXNz PSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRp Y2E7IGZvbnQtc2l6ZTogMThweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fw czogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyBv cnBoYW5zOiBhdXRvOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10 cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdpZG93czogYXV0bzsgd29yZC1z cGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zaXplLWFkanVzdDogYXV0bzsgLXdlYmtpdC10ZXh0 LXN0cm9rZS13aWR0aDogMHB4OyB0ZXh0LWRlY29yYXRpb246IG5vbmU7IiBjbGFzcz0iIj4NCjxi ciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCk9uIEp1bCAyMiwgMjAx OSwgYXQgMTA6MTAgQU0sIFJvYmVydG8gUGVvbiAmbHQ7PGEgaHJlZj0ibWFpbHRvOmZlbml4QGZi LmNvbSIgY2xhc3M9IiI+ZmVuaXhAZmIuY29tPC9hPiZndDsgd3JvdGU6PGJyIGNsYXNzPSIiPg0K PGJyIGNsYXNzPSIiPg0KV2hlbiB5b3XigJlyZSB0YWxraW5nIGFib3V0IHByZS1hdXRoZW50aWNh dGlvbiwgYXJlIHlvdSByZWZlcnJpbmcgdG8gdGhlIDAtcnR0IHN0dWZmPzxiciBjbGFzcz0iIj4N CjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCjAtUlRUIGlzIGdvb2Qgc3R1ZmYuIEl0IHJl ZHVjZXMgdGltZSBmb3IgYSBkZXZpY2UgdGhhdOKAmXMgYWxyZWFkeSBrbm93biB0byBiZSBhdXRo b3JpemVkIHRvIGNvbm5lY3QgdG8gdGhlIHNlcnZlci48YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9 IiI+DQpQYXJ0IG9mIHRoZSBwcm9ibGVtIGlzIHRvIHN0b3AgcmVzb3VyY2UgRG9TLiBUaGUgb3Ro ZXIgcGFydCBpcyBhYm91dCBpbmZvcm1hdGlvbiBsZWFrYWdlLjxiciBjbGFzcz0iIj4NCjxiciBj bGFzcz0iIj4NCkxldOKAmXMgYXNzdW1lIGEgdGltZSB3aGVuIGFsbCB3ZWJzaXRlIHVzZSBRVUlD IGFuZCBsZXQncyB0YWtlIGFuIGFkdmVyc2FyeSB3aG8gaGFzIGp1c3QgbGVhcm5lZCBhYm91dCBh IHZ1bG5lcmFiaWxpdHkgaW4gV29yZHByZXNzLiBUaGUgYWR2ZXJzYXJ5IHdhbnRzIHRvIHNjYW4g dGhlIEludGVybmV0IGZpbmRpbmcgV29yZHByZXNzIHNpdGVzLiBOb3csIGlmIHRoZSBRVUlDIGNv bm5lY3Rpb24gcmVxdWlyZWQgcHJlLWF1dGhlbnRpY2F0aW9uLCB0aGVuDQogdGhlIHNlcnZlciB3 b3VsZCBiZSBibGFjayB0byB0aGUgY29ubmVjdGlvbiBhbmQgdGhlIGFkdmVyc2FyeSBjb3VsZCBu b3QgZGV0ZXJtaW5lIGlmIHRoZSBzaXRlIHVzZXMgV29yZHByZXNzLiBCdXQsIGFzIGl0IHN0YW5k cyB0b2RheSwgaW4gdGhpcyBmdXR1cmUgdGltZSwgdGhlIGFkdmVyc2FyeSBzY2FucyB0aGUgSW50 ZXJuZXQsIGNvbm5lY3RzIHRvIHRoZSBzZXJ2ZXIsIGFuZCBpcyBoYW5kZWQgYSBXb3JkcHJlc3Mg bG9naW4gc2NyZWVuLiBOb3cNCiB0aGUgYWR2ZXJzYXJ5IGtub3dzIHdoZXJlIHRvIGF0dGFjay48 YnIgY2xhc3M9IiI+DQo8L2Jsb2NrcXVvdGU+DQo8YnIgc3R5bGU9ImNhcmV0LWNvbG9yOiByZ2Io MCwgMCwgMCk7IGZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMThweDsgZm9udC1z dHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9y bWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRl bnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQt c3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQtZGVjb3Jh dGlvbjogbm9uZTsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5bGU9ImNhcmV0LWNvbG9yOiByZ2IoMCwg MCwgMCk7IGZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMThweDsgZm9udC1zdHls ZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFs OyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6 IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3Bh Y2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQtZGVjb3JhdGlv bjogbm9uZTsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyIgY2xhc3M9 IiI+SWYNCiBjb25uZWN0aW9uIHJlcXVpcmVzIHByZWF1dGhlbnRpY2F0aW9uIHRoZW4gbm8gb25l IGNhbiBzZWUgdGhlIHNpdGUsIG5vPzwvc3Bhbj48L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxibG9j a3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj48YnIgc3R5bGU9ImNh cmV0LWNvbG9yOiByZ2IoMCwgMCwgMCk7IGZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6 ZTogMThweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBm b250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBz dGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNl OiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAw cHg7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsiIGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0i Y2l0ZSIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMThweDsgZm9u dC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDog bm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyBvcnBoYW5zOiBhdXRvOyB0ZXh0LWFsaWdu OiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNw YWNlOiBub3JtYWw7IHdpZG93czogYXV0bzsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4 dC1zaXplLWFkanVzdDogYXV0bzsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyB0ZXh0 LWRlY29yYXRpb246IG5vbmU7IiBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCkluIHRoZSBlbnRl cnByaXNlIGl0IGlzIGEgbGl0dGxlIGRpZmZlcmVudC4gQ29tcGFuaWVzIGltcGxlbWVudCByZXZl cnNlIHByb3hpZXMgdG8gdHJ5IHRvIHByb3RlY3Qgc2VydmVycyBmcm9tIHVuYXV0aG9yaXplZCB1 c2Vycy4gQnV0IHdoYXQgaWYgdGhlIHNlcnZlcnMgcmVxdWlyZWQgYSBwcmUtYXV0aGVudGljYXRp b24gdG9rZW4uIFRoZW4sIHJldmVyc2UgcHJveGllcyB3b3VsZCBub3QgYmUgbmVlZGVkLjxiciBj bGFzcz0iIj4NCjwvYmxvY2txdW90ZT4NCjxiciBzdHlsZT0iY2FyZXQtY29sb3I6IHJnYigwLCAw LCAwKTsgZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxOHB4OyBmb250LXN0eWxl OiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7 IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDog MHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFj aW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0aW9u OiBub25lOyIgY2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0iY2FyZXQtY29sb3I6IHJnYigwLCAwLCAw KTsgZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxOHB4OyBmb250LXN0eWxlOiBu b3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxl dHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4 OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5n OiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBu b25lOyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7IiBjbGFzcz0iIj5T bw0KIEkgdGhpbmsgdGhlcmUgYXJlIHR3byBkaWZmZXJlbnQgdGhpbmdzIGhlcmUsIG9yIG1heWJl IEknbSBtaXN1bmRlcnN0YW5kaW5nOjwvc3Bhbj48YnIgc3R5bGU9ImNhcmV0LWNvbG9yOiByZ2Io MCwgMCwgMCk7IGZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMThweDsgZm9udC1z dHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9y bWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRl bnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQt c3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQtZGVjb3Jh dGlvbjogbm9uZTsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5bGU9ImNhcmV0LWNvbG9yOiByZ2IoMCwg MCwgMCk7IGZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMThweDsgZm9udC1zdHls ZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFs OyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6 IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3Bh Y2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQtZGVjb3JhdGlv bjogbm9uZTsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyIgY2xhc3M9 IiI+MToNCiBXZSBoYXZlIHNlcnZlcnMgdGhhdCBoYXZlIGEgbGltaXRlZCBudW1iZXIgb2YgY2xp ZW50cyB0aGF0IHdpbGw8L3NwYW4+PGJyIHN0eWxlPSJjYXJldC1jb2xvcjogcmdiKDAsIDAsIDAp OyBmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDE4cHg7IGZvbnQtc3R5bGU6IG5v cm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0 dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7 IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6 IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyB0ZXh0LWRlY29yYXRpb246IG5v bmU7IiBjbGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJjYXJldC1jb2xvcjogcmdiKDAsIDAsIDApOyBm b250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDE4cHg7IGZvbnQtc3R5bGU6IG5vcm1h bDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVy LXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRl eHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBw eDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyB0ZXh0LWRlY29yYXRpb246IG5vbmU7 IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiIGNsYXNzPSIiPmV2ZXIN CiB3YW50IHRvIGNvbm5lY3QgdG8gdGhlbSwgYW5kIHdhbnQgdG8gZW5hYmxlIG90aGVyIGRldmlj ZXMgdG88L3NwYW4+PGJyIHN0eWxlPSJjYXJldC1jb2xvcjogcmdiKDAsIDAsIDApOyBmb250LWZh bWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDE4cHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9u dC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNp bmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJh bnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdl YmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyB0ZXh0LWRlY29yYXRpb246IG5vbmU7IiBjbGFz cz0iIj4NCjxzcGFuIHN0eWxlPSJjYXJldC1jb2xvcjogcmdiKDAsIDAsIDApOyBmb250LWZhbWls eTogSGVsdmV0aWNhOyBmb250LXNpemU6IDE4cHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12 YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6 IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNm b3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtp dC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyB0ZXh0LWRlY29yYXRpb246IG5vbmU7IGZsb2F0OiBu b25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiIGNsYXNzPSIiPmZpbHRlcg0KIHRoZSB0 cmFmZmljLCBzbyBuZWVkIHNvbWUgbWVjaGFuaXNtIHRoYXQgZW5hYmxlcyBhIG1pZGRsZWJveCB0 bzwvc3Bhbj48YnIgc3R5bGU9ImNhcmV0LWNvbG9yOiByZ2IoMCwgMCwgMCk7IGZvbnQtZmFtaWx5 OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMThweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZh cmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzog bm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zv cm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0 LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsiIGNsYXNzPSIi Pg0KPHNwYW4gc3R5bGU9ImNhcmV0LWNvbG9yOiByZ2IoMCwgMCwgMCk7IGZvbnQtZmFtaWx5OiBI ZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMThweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlh bnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9y bWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06 IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRl eHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsgZmxvYXQ6IG5vbmU7 IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyIgY2xhc3M9IiI+ZmlsdGVyLjwvc3Bhbj48YnIg c3R5bGU9ImNhcmV0LWNvbG9yOiByZ2IoMCwgMCwgMCk7IGZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7 IGZvbnQtc2l6ZTogMThweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczog bm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0 LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdo aXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tl LXdpZHRoOiAwcHg7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsiIGNsYXNzPSIiPg0KPC9kaXY+DQo8 L2Jsb2NrcXVvdGU+DQo8ZGl2PjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KTm8gbWlkZGxlIGJveCEg UHJlLWF1dGhlbnRpY2F0aW9uIG1ha2VzIHNlcnZlcnMgc2VsZi1kZWZlbmRpbmcuIExhY2sgb2Yg cHJlLWF1dGhlbnRpY2F0aW9uIGlzIHdoeSB3ZSBoYXZlIG1pZGRsZSBib3hlcy48L2Rpdj4NCjxk aXY+PGJyIGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+DQo8ZGl2 IGNsYXNzPSIiPjxzcGFuIHN0eWxlPSJjYXJldC1jb2xvcjogcmdiKDAsIDAsIDApOyBmb250LWZh bWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDE4cHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9u dC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNp bmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJh bnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdl YmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyB0ZXh0LWRlY29yYXRpb246IG5vbmU7IGZsb2F0 OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiIGNsYXNzPSIiPjI6DQogV2UgaGF2 ZSBzZXJ2ZXJzIGdlbmVyYWxseSBhdmFpbGFibGUgdG8gdGhlIHB1YmxpYyBhbmQgYXJlIGNvbmNl cm5lZDwvc3Bhbj48YnIgc3R5bGU9ImNhcmV0LWNvbG9yOiByZ2IoMCwgMCwgMCk7IGZvbnQtZmFt aWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMThweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250 LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2lu Zzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFu c2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Vi a2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsiIGNsYXNz PSIiPg0KPHNwYW4gc3R5bGU9ImNhcmV0LWNvbG9yOiByZ2IoMCwgMCwgMCk7IGZvbnQtZmFtaWx5 OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMThweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZh cmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzog bm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zv cm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0 LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsgZmxvYXQ6IG5v bmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyIgY2xhc3M9IiI+dGhhdA0KIHRoZSBRVUlD IHZlcnNpb24gb2YgYSBTWU4gZmxvb2QgY2FuJ3QgYmUgZGVhbHQgd2l0aCAoZGVzcGl0ZTwvc3Bh bj48YnIgc3R5bGU9ImNhcmV0LWNvbG9yOiByZ2IoMCwgMCwgMCk7IGZvbnQtZmFtaWx5OiBIZWx2 ZXRpY2E7IGZvbnQtc2l6ZTogMThweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQt Y2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFs OyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5v bmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQt c3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsiIGNsYXNzPSIiPg0KPHNw YW4gc3R5bGU9ImNhcmV0LWNvbG9yOiByZ2IoMCwgMCwgMCk7IGZvbnQtZmFtaWx5OiBIZWx2ZXRp Y2E7IGZvbnQtc2l6ZTogMThweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fw czogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0 ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7 IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ry b2tlLXdpZHRoOiAwcHg7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsgZmxvYXQ6IG5vbmU7IGRpc3Bs YXk6IGlubGluZSAhaW1wb3J0YW50OyIgY2xhc3M9IiI+ZXZpZGVuY2UNCiB0byB0aGUgY29udHJh cnkpLjwvc3Bhbj48YnIgc3R5bGU9ImNhcmV0LWNvbG9yOiByZ2IoMCwgMCwgMCk7IGZvbnQtZmFt aWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMThweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250 LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2lu Zzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFu c2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Vi a2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsiIGNsYXNz PSIiPg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2PjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0K Q29tcGFuaWVzIGFuZCB3ZWJzaXRlIG93bmVycyBoYXZlIHRvIHBheSBmb3IgYW50aS1Eb1Mgc2Vy dmljZXMmbmJzcDtmcm9tIHRoZSBsaWtlcyBvZiBWZXJpem9uIGFuZCBvdGhlcnMgQkVDQVVTRSBz ZXJ2ZXJzIGxpc3RlbiB0byBhbGwgY2xpZW50cy4gV2l0aCBwcmUtYXV0aGVudGljYXRpb24sIHRo ZSBuZWVkIHRvIGhhdmUgYW4gYW50aS1Eb1Mgc2VydmljZSB3b3VsZCBiZSBncmVhdGx5IHJlZHVj ZWQgYmVjYXVzZSBzZXJ2ZXJzIHdvdWxkIG5vdCByZXNwb25kDQogdG8gdW5hdXRob3JpemVkIGNs aWVudHMuPC9kaXY+DQo8ZGl2PjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdj5BbmQgdGhlIHBv aW50IGFib3V0IGluZm9ybWF0aW9uIGxlYWthZ2UgaXMgaW1wb3J0YW50LCB0b28uPC9kaXY+DQo8 ZGl2PjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdj5CcmVudDwvZGl2Pg0KPGRpdj48YnIgY2xh c3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+ PGJyIHN0eWxlPSJjYXJldC1jb2xvcjogcmdiKDAsIDAsIDApOyBmb250LWZhbWlseTogSGVsdmV0 aWNhOyBmb250LXNpemU6IDE4cHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNh cHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsg dGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25l OyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0 cm9rZS13aWR0aDogMHB4OyB0ZXh0LWRlY29yYXRpb246IG5vbmU7IiBjbGFzcz0iIj4NCjxzcGFu IHN0eWxlPSJjYXJldC1jb2xvcjogcmdiKDAsIDAsIDApOyBmb250LWZhbWlseTogSGVsdmV0aWNh OyBmb250LXNpemU6IDE4cHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6 IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4 dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3 aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9r ZS13aWR0aDogMHB4OyB0ZXh0LWRlY29yYXRpb246IG5vbmU7IGZsb2F0OiBub25lOyBkaXNwbGF5 OiBpbmxpbmUgIWltcG9ydGFudDsiIGNsYXNzPSIiPkkNCiBkb24ndCBrbm93IG11Y2ggYWJvdXQg aG93IENsb3VkZmxhcmUgKG15IHBsYWNlIG9mIGVtcGxveW1lbnQpICZuYnNwO2RlYWxzPC9zcGFu PjxiciBzdHlsZT0iY2FyZXQtY29sb3I6IHJnYigwLCAwLCAwKTsgZm9udC1mYW1pbHk6IEhlbHZl dGljYTsgZm9udC1zaXplOiAxOHB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1j YXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7 IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9u ZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1z dHJva2Utd2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyIgY2xhc3M9IiI+DQo8c3Bh biBzdHlsZT0iY2FyZXQtY29sb3I6IHJnYigwLCAwLCAwKTsgZm9udC1mYW1pbHk6IEhlbHZldGlj YTsgZm9udC1zaXplOiAxOHB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBz OiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRl eHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsg d2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJv a2Utd2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyBmbG9hdDogbm9uZTsgZGlzcGxh eTogaW5saW5lICFpbXBvcnRhbnQ7IiBjbGFzcz0iIj53aXRoDQogMiBidXQgaG9wZWZ1bGx5IHNv bWUgcGVvcGxlIHdobyBkby9pbXBsZW1lbnRvcnMgY2FuIHNwZWFrIHVwPC9zcGFuPjxiciBzdHls ZT0iY2FyZXQtY29sb3I6IHJnYigwLCAwLCAwKTsgZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9u dC1zaXplOiAxOHB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3Jt YWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxp Z246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUt c3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lk dGg6IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyIgY2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0i Y2FyZXQtY29sb3I6IHJnYigwLCAwLCAwKTsgZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1z aXplOiAxOHB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7 IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246 IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3Bh Y2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6 IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5l ICFpbXBvcnRhbnQ7IiBjbGFzcz0iIj5hYm91dA0KIGhvdyBtdWNoIG9mIGEgcHJvYmxlbSBpdCBp cy4gQnV0IDEgaXMgSSB0aGluayB2ZXJ5IG11Y2ggYTwvc3Bhbj48YnIgc3R5bGU9ImNhcmV0LWNv bG9yOiByZ2IoMCwgMCwgMCk7IGZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMThw eDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdl aWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsg dGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3Jt YWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRl eHQtZGVjb3JhdGlvbjogbm9uZTsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5bGU9ImNhcmV0LWNvbG9y OiByZ2IoMCwgMCwgMCk7IGZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMThweDsg Zm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdo dDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4 dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7 IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQt ZGVjb3JhdGlvbjogbm9uZTsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50 OyIgY2xhc3M9IiI+bm9uZ29hbDoNCiBtaWRkbGVib3ggb3NzaWZpY2F0aW9uIGlzIHBhcnQgb2Yg dGhlIHJlYXNvbiB3ZSBoYXZlIFFVSUMuPC9zcGFuPjxiciBzdHlsZT0iY2FyZXQtY29sb3I6IHJn YigwLCAwLCAwKTsgZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxOHB4OyBmb250 LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBu b3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWlu ZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29y ZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgdGV4dC1kZWNv cmF0aW9uOiBub25lOyIgY2xhc3M9IiI+DQo8YnIgc3R5bGU9ImNhcmV0LWNvbG9yOiByZ2IoMCwg MCwgMCk7IGZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMThweDsgZm9udC1zdHls ZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFs OyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6 IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3Bh Y2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQtZGVjb3JhdGlv bjogbm9uZTsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5bGU9ImNhcmV0LWNvbG9yOiByZ2IoMCwgMCwg MCk7IGZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMThweDsgZm9udC1zdHlsZTog bm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBs ZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBw eDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2lu ZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQtZGVjb3JhdGlvbjog bm9uZTsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyIgY2xhc3M9IiI+ U2luY2VyZWx5LDwvc3Bhbj48YnIgc3R5bGU9ImNhcmV0LWNvbG9yOiByZ2IoMCwgMCwgMCk7IGZv bnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMThweDsgZm9udC1zdHlsZTogbm9ybWFs OyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXIt c3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4 dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4 OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsi IGNsYXNzPSIiPg0KPHNwYW4gc3R5bGU9ImNhcmV0LWNvbG9yOiByZ2IoMCwgMCwgMCk7IGZvbnQt ZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMThweDsgZm9udC1zdHlsZTogbm9ybWFsOyBm b250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3Bh Y2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10 cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAt d2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsgZmxv YXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyIgY2xhc3M9IiI+V2F0c29uDQog TGFkZDwvc3Bhbj48L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPGJyIGNsYXNzPSIiPg0K PGRpdiBjbGFzcz0iIj4NCjxkaXYgZGlyPSJhdXRvIiBzdHlsZT0iY2FyZXQtY29sb3I6IHJnYigw LCAwLCAwKTsgY29sb3I6IHJnYigwLCAwLCAwKTsgZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9u dC1zaXplOiAxOHB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3Jt YWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxp Z246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUt c3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lk dGg6IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyB3b3JkLXdyYXA6IGJyZWFrLXdvcmQ7IC13 ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgbGluZS1icmVhazogYWZ0ZXItd2hpdGUtc3BhY2U7IiBj bGFzcz0iIj4NCjxkaXYgZGlyPSJhdXRvIiBzdHlsZT0id29yZC13cmFwOiBicmVhay13b3JkOyAt d2Via2l0LW5ic3AtbW9kZTogc3BhY2U7IGxpbmUtYnJlYWs6IGFmdGVyLXdoaXRlLXNwYWNlOyIg Y2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJjYXJldC1jb2xvcjogcmdiKDAsIDAsIDApOyBjb2xvcjog cmdiKDAsIDAsIDApOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzog bm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zv cm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0 LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsiPg0KPGJyIGNs YXNzPSJBcHBsZS1pbnRlcmNoYW5nZS1uZXdsaW5lIj4NCjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0K PGRpdiBzdHlsZT0iY2FyZXQtY29sb3I6IHJnYigwLCAwLCAwKTsgY29sb3I6IHJnYigwLCAwLCAw KTsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4 dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3 aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9r ZS13aWR0aDogMHB4OyB0ZXh0LWRlY29yYXRpb246IG5vbmU7Ij4NCjxiciBjbGFzcz0iIj4NCjwv ZGl2Pg0KPGRpdiBzdHlsZT0iY2FyZXQtY29sb3I6IHJnYigwLCAwLCAwKTsgY29sb3I6IHJnYigw LCAwLCAwKTsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1h bDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBu b25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0 LXN0cm9rZS13aWR0aDogMHB4OyB0ZXh0LWRlY29yYXRpb246IG5vbmU7Ij4NCkJyZW50IEJsaWdl cjwvZGl2Pg0KPGRpdiBzdHlsZT0iY2FyZXQtY29sb3I6IHJnYigwLCAwLCAwKTsgY29sb3I6IHJn YigwLCAwLCAwKTsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5v cm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3Jt OiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10 ZXh0LXN0cm9rZS13aWR0aDogMHB4OyB0ZXh0LWRlY29yYXRpb246IG5vbmU7Ij4NCkRpcmVjdG9y LVRlY2hub2xvZ3kmbmJzcDtWZXJpem9uIFNEUCZuYnNwOzxiciBjbGFzcz0iIj4NCjwvZGl2Pg0K PGRpdiBzdHlsZT0iY2FyZXQtY29sb3I6IHJnYigwLCAwLCAwKTsgY29sb3I6IHJnYigwLCAwLCAw KTsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4 dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3 aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9r ZS13aWR0aDogMHB4OyB0ZXh0LWRlY29yYXRpb246IG5vbmU7Ij4NCjxhIGhyZWY9Im1haWx0bzpi cmVudC5iaWxnZXJAdmVyaXpvbi5jb20iIGNsYXNzPSIiPmJyZW50LmJpbGdlckB2ZXJpem9uLmNv bTwvYT48L2Rpdj4NCjxkaXYgc3R5bGU9ImNhcmV0LWNvbG9yOiByZ2IoMCwgMCwgMCk7IGNvbG9y OiByZ2IoMCwgMCwgMCk7IGZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMjRweDsg Zm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdo dDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4 dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7 IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQt ZGVjb3JhdGlvbjogbm9uZTsiIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8YnIg Y2xhc3M9IkFwcGxlLWludGVyY2hhbmdlLW5ld2xpbmUiPg0KPC9kaXY+DQo8L2Rpdj4NCjxiciBj bGFzcz0iQXBwbGUtaW50ZXJjaGFuZ2UtbmV3bGluZSIgc3R5bGU9ImNhcmV0LWNvbG9yOiByZ2Io MCwgMCwgMCk7IGNvbG9yOiByZ2IoMCwgMCwgMCk7IGZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZv bnQtc2l6ZTogMThweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9y bWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFs aWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRl LXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdp ZHRoOiAwcHg7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsiPg0KPGJyIGNsYXNzPSJBcHBsZS1pbnRl cmNoYW5nZS1uZXdsaW5lIj4NCjwvZGl2Pg0KPGJyIGNsYXNzPSIiPg0KPC9ib2R5Pg0KPC9odG1s Pg0K --_000_9DC4003238524237A6215C6B1102E74Foneverizoncom_-- From nobody Tue Jul 23 06:26:42 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 87F67120298 for ; Tue, 23 Jul 2019 06:26:31 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.698 X-Spam-Level: X-Spam-Status: No, score=-2.698 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=fb.com header.b=k+cm6/RY; dkim=pass (1024-bit key) header.d=fb.onmicrosoft.com header.b=qL3L7GAD Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WrOEHz84KPog for ; Tue, 23 Jul 2019 06:26:29 -0700 (PDT) Received: from mx0b-00082601.pphosted.com (mx0b-00082601.pphosted.com [67.231.153.30]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id ADFCC1202C1 for ; Tue, 23 Jul 2019 06:26:27 -0700 (PDT) Received: from pps.filterd (m0148460.ppops.net [127.0.0.1]) by mx0a-00082601.pphosted.com (8.16.0.27/8.16.0.27) with SMTP id x6NDOI1T023797; Tue, 23 Jul 2019 06:26:24 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fb.com; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : mime-version; s=facebook; bh=Q2enSM+kdjHgydSb4s7vlE4rnDnP5Kno1f442zyaYFc=; b=k+cm6/RY0nIUmdahwUfrFbFH210/iI/ApbT3Yid7z8TutayD0z1Pfagkg04R99x2piaK jDqCfcmdVRqWsb2setKG6/S5bMCt/lQpg/5FsAnODLa5KgaBlbeMTu0ZomDLRao0r/fg romMh1vZg3VxKPDiRCNYC+qwO/JyaxxH/tw= Received: from maileast.thefacebook.com ([163.114.130.16]) by mx0a-00082601.pphosted.com with ESMTP id 2twk1d321s-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NOT); Tue, 23 Jul 2019 06:26:24 -0700 Received: from ash-exhub102.TheFacebook.com (2620:10d:c0a8:82::f) by ash-exhub102.TheFacebook.com (2620:10d:c0a8:82::f) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.1713.5; Tue, 23 Jul 2019 06:26:23 -0700 Received: from NAM03-CO1-obe.outbound.protection.outlook.com (100.104.31.183) by o365-in.thefacebook.com (100.104.35.172) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256) id 15.1.1713.5 via Frontend Transport; Tue, 23 Jul 2019 06:26:23 -0700 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=SY1Khx5+a3Hg+cxki8D0uhPsRXqY8m4MxjiMG6lDbNCOruRhuD9Y/4qGZbcHTh/IFMxbTWKpUy7QbMqSjG9IlnhL5iQMA00bAeljpR7LhNIwuhUzl7BYooM9ANSaNMqfzUo5bbWhsaSkxDv+XaE5MfZL+uxM7N5H7i//BHCTdctKqaWGkeoSWCU1K9bnkbkTjpDF3TqrduCuAXIJp/qBSyBKJQwuNxc7hrNJrwxDQbAafB2r1HNVVekTSD8Z4d75ArHte1XJYnpT2Nt8wta4RWtFiNiWkjlWd7Rbbm6YAcyn9TWnN6VWQzreh1CeJY55AeqIIBKcXnS/HlqQIYZnIA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Q2enSM+kdjHgydSb4s7vlE4rnDnP5Kno1f442zyaYFc=; b=PNDz4RJFQuf54LtiN9E5DoJeDYm3Vd+MzXifRTYMAI8p7x8EMrpYLLluONmG3OIV7wokPo3TWZA6+WVwrBbN0E3IsVFTV5uysp7fOSwDSeZyCdWXYXMMDvG4ql3IRzI09n3Bm2DDly1UAcV5tEStoHs5O6PJAeb7g9SLqDdE0knZo88JJ9pyFnmM1VQEj8M3LVecmlVQMHHwdEAfvM6LhvHm8WaFv+FQssSC94Xqe4XoYz/JhxdcKM/nXOx7Je2pXbkojdMrm2UQpP3QzDdMWWKOztxS3o+4vHVAVl9DbQKMUC7dsKnE/nO7Fw3gPQaZjHKsZC+z4cMUpNoagPo+jw== ARC-Authentication-Results: i=1; mx.microsoft.com 1;spf=pass smtp.mailfrom=fb.com;dmarc=pass action=none header.from=fb.com;dkim=pass header.d=fb.com;arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fb.onmicrosoft.com; s=selector1-fb-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Q2enSM+kdjHgydSb4s7vlE4rnDnP5Kno1f442zyaYFc=; b=qL3L7GAD1fEAbTWJ03Eoaw1mUnKSnIUKma3Xn2bir102oCgKQstVUKFj9TSmzWsghjt40ZslDjAlGXEHGvsPz60PJ4PsjS7NvY2rp2M8t/g6Izw5Uj/Y9csTdlUJota7OogUcZV7M7VSv1Kr7mKjl5HxsxhehFkGfDb9jtqxUEo= Received: from CY4PR15MB1542.namprd15.prod.outlook.com (10.172.160.9) by CY4PR15MB1704.namprd15.prod.outlook.com (10.174.53.19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2094.11; Tue, 23 Jul 2019 13:26:22 +0000 Received: from CY4PR15MB1542.namprd15.prod.outlook.com ([fe80::35ce:8d12:c463:7cfc]) by CY4PR15MB1542.namprd15.prod.outlook.com ([fe80::35ce:8d12:c463:7cfc%12]) with mapi id 15.20.2094.013; Tue, 23 Jul 2019 13:26:22 +0000 From: Roberto Peon To: "brent.bilger@verizon.com" , Watson Ladd CC: "brent.bilger=40verizon.com@dmarc.ietf.org" , "quic@ietf.org" , "brent.bilger@verizon.com" , Ian Swett Subject: Re: [E] DoS-ing QUIC servers is too easy Thread-Topic: [E] DoS-ing QUIC servers is too easy Thread-Index: AQHVQO2o7IJCZ4s53kuA0LJW4b7AGKbXmNEAgACHhoCAABFu5A== Date: Tue, 23 Jul 2019 13:26:21 +0000 Message-ID: References: <21E3AE84-02C5-4943-A88E-B62329E21002@one.verizon.com> <507D5DB7-EDF2-4429-A518-604A377F92D9@one.verizon.com> <9BF2DC9D-F14C-4451-9191-1A1557556691@fb.com> , <9DC40032-3852-4237-A621-5C6B1102E74F@one.verizon.com> In-Reply-To: <9DC40032-3852-4237-A621-5C6B1102E74F@one.verizon.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [107.77.221.171] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 045f3ab1-57b9-4ae4-3638-08d70f715a7c x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600148)(711020)(4605104)(1401327)(2017052603328)(7193020); SRVR:CY4PR15MB1704; x-ms-traffictypediagnostic: CY4PR15MB1704: x-ms-exchange-purlcount: 1 x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:3513; x-forefront-prvs: 0107098B6C x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(376002)(346002)(39860400002)(366004)(136003)(396003)(189003)(199004)(606006)(81156014)(6116002)(3846002)(256004)(81166006)(14444005)(2906002)(76176011)(8936002)(54906003)(110136005)(102836004)(68736007)(8676002)(14454004)(6506007)(33656002)(99286004)(25786009)(2501003)(486006)(229853002)(4326008)(7696005)(316002)(53546011)(71200400001)(66066001)(66446008)(91956017)(76116006)(476003)(66476007)(86362001)(11346002)(66946007)(66556008)(186003)(66574012)(446003)(64756008)(71190400001)(5660300002)(45080400002)(478600001)(6306002)(236005)(55016002)(53936002)(52536014)(9686003)(6436002)(74316002)(54896002)(26005)(6246003)(7736002); DIR:OUT; SFP:1102; SCL:1; SRVR:CY4PR15MB1704; H:CY4PR15MB1542.namprd15.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: fb.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam-message-info: NLLHvZph82TD0xVYW99NZLwstTnxU1zqC3TvrFjWJYAnOv3B7yfcEACCmsKOC2XfoSE9TM+yeOJm2ho4Z0UObX5qFRhEeOOXtvNQVx1pK0DJvS5OwOnsSfcFcRthTcEiUpphh0MJOUL0K263ycDOfOYQTERDpkLxn3fas+b7e5o97xFMet3OUQgUdAlVALh2DTlk7QJaLPzlrP2XT2IK9x/ixda5QZ9jYVr/M2Ouub9LqPiA8gSGDibYquUSdDqi0aWvCricseSpGYcoCTZvG3LdXyZzOJk9u6rvo95D+yR1FxNdqP9sY60EGL3fwO/p6S80axWf7qiKjxsihxzfk5+E3LrPplXpeYziAqN5hF0PY5qz2KW/fuH8WEr9NkQbHJana5K4mK0QqgCV/rLnGhH7zlDo1vl+1IHofAw8EIk= Content-Type: multipart/alternative; boundary="_000_CY4PR15MB15428FBE1F06FFC56814F593CDC70CY4PR15MB1542namp_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: 045f3ab1-57b9-4ae4-3638-08d70f715a7c X-MS-Exchange-CrossTenant-originalarrivaltime: 23 Jul 2019 13:26:21.8216 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 8ae927fe-1255-47a7-a2af-5f3a069daaa2 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: fenix@fb.com X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY4PR15MB1704 X-OriginatorOrg: fb.com X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2019-07-23_05:, , signatures=0 X-Proofpoint-Spam-Details: rule=fb_default_notspam policy=fb_default score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1011 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=991 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1810050000 definitions=main-1907230133 X-FB-Internal: deliver Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 23 Jul 2019 13:26:41 -0000 --_000_CY4PR15MB15428FBE1F06FFC56814F593CDC70CY4PR15MB1542namp_ Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable I'm trying to understand how anything was pre-authenticated without sufferi= ng from all of the same problems. How would such pre-authentication be done in practice, especially in scenar= ios where the server doesn't have a whitelist of clients, and that service = desires traffic from non-malicious clients? -=3DR Get Outlook for Android ________________________________ From: brent.bilger@verizon.com Sent: Tuesday, July 23, 2019 8:21:05 AM To: Watson Ladd Cc: brent.bilger=3D40verizon.com@dmarc.ietf.org ; Roberto Peon ; quic@ietf.org ; brent.bilger@verizon.com ; Ian Swett Subject: Re: [E] DoS-ing QUIC servers is too easy On Jul 22, 2019, at 9:16 PM, Watson Ladd > wrote: On Mon, Jul 22, 2019 at 5:29 PM > wrote: On Jul 22, 2019, at 10:10 AM, Roberto Peon > wrote: When you=92re talking about pre-authentication, are you referring to the 0-= rtt stuff? 0-RTT is good stuff. It reduces time for a device that=92s already known to= be authorized to connect to the server. Part of the problem is to stop resource DoS. The other part is about inform= ation leakage. Let=92s assume a time when all website use QUIC and let's take an adversary= who has just learned about a vulnerability in Wordpress. The adversary wan= ts to scan the Internet finding Wordpress sites. Now, if the QUIC connectio= n required pre-authentication, then the server would be black to the connec= tion and the adversary could not determine if the site uses Wordpress. But,= as it stands today, in this future time, the adversary scans the Internet,= connects to the server, and is handed a Wordpress login screen. Now the ad= versary knows where to attack. If connection requires preauthentication then no one can see the site, no? In the enterprise it is a little different. Companies implement reverse pro= xies to try to protect servers from unauthorized users. But what if the ser= vers required a pre-authentication token. Then, reverse proxies would not b= e needed. So I think there are two different things here, or maybe I'm misunderstandi= ng: 1: We have servers that have a limited number of clients that will ever want to connect to them, and want to enable other devices to filter the traffic, so need some mechanism that enables a middlebox to filter. No middle box! Pre-authentication makes servers self-defending. Lack of pre= -authentication is why we have middle boxes. 2: We have servers generally available to the public and are concerned that the QUIC version of a SYN flood can't be dealt with (despite evidence to the contrary). Companies and website owners have to pay for anti-DoS services from the lik= es of Verizon and others BECAUSE servers listen to all clients. With pre-au= thentication, the need to have an anti-DoS service would be greatly reduced= because servers would not respond to unauthorized clients. And the point about information leakage is important, too. Brent I don't know much about how Cloudflare (my place of employment) deals with 2 but hopefully some people who do/implementors can speak up about how much of a problem it is. But 1 is I think very much a nongoal: middlebox ossification is part of the reason we have QUIC. Sincerely, Watson Ladd Brent Bliger Director-Technology Verizon SDP brent.bilger@verizon.com --_000_CY4PR15MB15428FBE1F06FFC56814F593CDC70CY4PR15MB1542namp_ Content-Type: text/html; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable
I'm trying to understand how anything was pre-authenticated without sufferi= ng from all of the same problems.

How would such pre-authentication be done in practice, especially in scenar= ios where the server doesn't have a whitelist of clients, and that service = desires traffic from non-malicious clients?

-=3DR

From: brent.bilger@verizon.= com <brent.bilger@verizon.com>
Sent: Tuesday, July 23, 2019 8:21:05 AM
To: Watson Ladd <watsonbladd@gmail.com>
Cc: brent.bilger=3D40verizon.com@dmarc.ietf.org <brent.bilger=3D4= 0verizon.com@dmarc.ietf.org>; Roberto Peon <fenix@fb.com>; quic@ie= tf.org <quic@ietf.org>; brent.bilger@verizon.com <brent.bilger@ver= izon.com>; Ian Swett <ianswett=3D40google.com@dmarc.ietf.org>
Subject: Re: [E] DoS-ing QUIC servers is too easy
 


On Jul 22, 2019, at 9:16 PM, Watson Ladd <watsonbladd@gmail.com> wrote:<= /div>
On Mon, Jul 22, 2019 at 5:29 PM
<brent.bilger=3D40verizo= n.com@dmarc.ietf.org> wrote:



On Jul 22, 2019, at 10:10 AM, Roberto Peon <fenix@fb.com> wrote:

When you=92re talking about pre-authentication, are you referring to the 0-= rtt stuff?


0-RTT is good stuff. It reduces time for a device that=92s already known to= be authorized to connect to the server.

Part of the problem is to stop resource DoS. The other part is about inform= ation leakage.

Let=92s assume a time when all website use QUIC and let's take an adversary= who has just learned about a vulnerability in Wordpress. The adversary wan= ts to scan the Internet finding Wordpress sites. Now, if the QUIC connectio= n required pre-authentication, then the server would be black to the connection and the adversary could not de= termine if the site uses Wordpress. But, as it stands today, in this future= time, the adversary scans the Internet, connects to the server, and is han= ded a Wordpress login screen. Now the adversary knows where to attack.

If connection requires preauthentication then no one can see the site, no?


In the enterprise it is a little different. Companies implement reverse pro= xies to try to protect servers from unauthorized users. But what if the ser= vers required a pre-authentication token. Then, reverse proxies would not b= e needed.

So I think there are two different things here, or maybe I'm misunderstanding= :
1: We have servers that have a limited number of clients that will
ever want to connect to them, and want to enable other devices to
filter the traffic, so need some mechanism that enables a middlebox to
filter.

No middle box! Pre-authentication makes servers self-defending. Lack of pre= -authentication is why we have middle boxes.

2: We have servers generally available to the public and are concerned=
that the QUIC version of a SYN flood can't be dealt with (despite
evidence to the contrary).

Companies and website owners have to pay for anti-DoS services from th= e likes of Verizon and others BECAUSE servers listen to all clients. With p= re-authentication, the need to have an anti-DoS service would be greatly re= duced because servers would not respond to unauthorized clients.

And the point about information leakage is important, too.

Brent


I don't know much about how Cloudflare (my place of employment)  deals<= /span>
with 2 but hopefully some people who do/implementors can speak up
about how much of a problem it is. But 1 is I think very much a
nongoal: middlebox ossification is part of the reason we have QUIC.

Sincerely,
Watson Ladd




Brent Bliger
Director-Technology Verizon SDP 





--_000_CY4PR15MB15428FBE1F06FFC56814F593CDC70CY4PR15MB1542namp_-- From nobody Tue Jul 23 06:59:13 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1DBBD1202D2 for ; Tue, 23 Jul 2019 06:58:59 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=verizon.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id j29XHXnxSnTL for ; Tue, 23 Jul 2019 06:58:55 -0700 (PDT) Received: from smtpout2-tdc.verizon.com (smtpout2-tdc.verizon.com [137.188.104.134]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4A5B5120275 for ; Tue, 23 Jul 2019 06:58:55 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=verizon.com; i=@verizon.com; q=dns/txt; s=corp; t=1563890335; x=1595426335; h=to:subject:date:message-id:references:in-reply-to: mime-version:from:cc; bh=PwLyrBHYf8LJdS7YVBQi5nwGBMCBdRqgsk//noXZ66M=; b=AilbpuN791IDNrL9tDB3vo/x+mUXfbwbUIKNb3h4lOGXs0f6lVBATWPE MTICx8C+9GYKerA/sQfldU+5BXMLXTKmoe7BQ5eaD/9jlM4SRI8es6WH6 NfzgbA3XB9fju/9cIWO1flRXDCXEsKvCJ/KFyNDLRXJGH7/hAwmfKwSjH o=; From: brent.bilger@verizon.com Cc: brent.bilger@verizon.com, Watson Ladd , "brent.bilger=40verizon.com@dmarc.ietf.org" , "quic@ietf.org" , Ian Swett Received: from tbwexch05apd.uswin.ad.vzwcorp.com ([153.114.162.29]) by smtpout2-tdc.verizon.com with ESMTP/TLS/ECDHE-RSA-AES256-SHA384; 23 Jul 2019 13:58:53 +0000 Received: from tbwexch26apd.uswin.ad.vzwcorp.com (153.114.162.50) by tbwexch05apd.uswin.ad.vzwcorp.com (153.114.162.29) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Tue, 23 Jul 2019 09:58:52 -0400 Received: from scwexch09apd.uswin.ad.vzwcorp.com (153.114.130.28) by tbwexch26apd.uswin.ad.vzwcorp.com (153.114.162.50) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Tue, 23 Jul 2019 09:58:51 -0400 Received: from scwexch05apd.uswin.ad.vzwcorp.com (153.114.130.24) by scwexch09apd.uswin.ad.vzwcorp.com (153.114.130.28) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Tue, 23 Jul 2019 06:58:49 -0700 Received: from scwexch05apd.uswin.ad.vzwcorp.com ([153.114.130.24]) by scwexch05apd.uswin.ad.vzwcorp.com ([153.114.130.24]) with mapi id 15.00.1473.003; Tue, 23 Jul 2019 06:58:49 -0700 To: Roberto Peon Subject: Re: [E] DoS-ing QUIC servers is too easy Thread-Topic: [E] DoS-ing QUIC servers is too easy Thread-Index: AQHVQO2TMeh9llpV6EqU+Dk6tm4oPqbYDioAgACHhoCAABI8gIAACRKA Date: Tue, 23 Jul 2019 13:58:49 +0000 Message-ID: References: <21E3AE84-02C5-4943-A88E-B62329E21002@one.verizon.com> <507D5DB7-EDF2-4429-A518-604A377F92D9@one.verizon.com> <9BF2DC9D-F14C-4451-9191-1A1557556691@fb.com> <9DC40032-3852-4237-A621-5C6B1102E74F@one.verizon.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.11.60.250] Content-Type: multipart/alternative; boundary="_000_F09CACA732DC4862AC0CC55F50FFE21Eoneverizoncom_" MIME-Version: 1.0 Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 23 Jul 2019 13:59:11 -0000 --_000_F09CACA732DC4862AC0CC55F50FFE21Eoneverizoncom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 VGhlcmUgYXJlIGxvdHMgb2YgcG9zc2libGUgc2NlbmFyaW9zLCBzbyBwbGVhc2UganVzdCBjb25z aWRlciB0aGVzZSB0byBiZSBleGFtcGxlcy4gTGV04oCZcyBkaXZpZGUgdGhlIHdvcmxkIG9mIHNl cnZlcnMgaW4gdG8gMSkgZW50ZXJwcmlzZSBidXNpbmVzcy10by1idXNpbmVzcyB3ZWJzaXRlcywg Mikgd2Vic2l0ZXMgbWVhbnQgZm9yIGNvbnN1bWVycyB3aGVyZSBhdXRoZW50aWNhdGlvbiBpcyBk ZXNpcmFibGUsIGFuZCAzKSB3ZWJzaXRlcyB0aGF0IHdpbGwgd2FudCB0byBhbGxvdyB0aGVpciB1 c2VycyB0byBiZSBhbm9ueW1vdXMsIHRoZXJlZm9yZSwgcHJlLWF1dGhlbnRpY2F0aW9uIHdvdWxk IG5vdCBhcHBseS4NCg0KRW50ZXJwcmlzZSBidXNpbmVzcy10by1idXNpbmVzcyB3ZWJzaXRlcyBj b3VsZCB1c2Ugc29tZXRoaW5nIHNpbWlsYXIgdG8gdGhlIFNvZnR3YXJlIERlZmluZWQgUGVyaW1l dGVyIChTRFApIFNpbmdsZSBQYWNrZXQgQXV0aG9yaXphdGlvbiAoU1BBKSBwcm90b2NvbCBjcmVh dGVkIGJ5IHRoZSBDbG91ZCBTZWN1cml0eSBBbGxpYW5jZS4gSXQgdXNlcyB0aGUgZmFjdCB0aGF0 IGNsaWVudHMgYXJlIG9uLWJvYXJkZWQgdG8gdGhlIHN5c3RlbSBpbiBhIG9uZSB0aW1lIGV2ZW50 IHRvIHByb3ZpZGUgdGhlIGNsaWVudHMgd2l0aCBhIHNoYXJlZCBzZWNyZXQga2V5LiBUaGUga2V5 IGlzIHVzZWQgaW4gYSBjb3VudGVyLWJhc2VkIEhNQUMgY2FsY3VsYXRpb24uIFNpbmNlIG9ubHkg YW4gYXV0aG9yaXplZCBjbGllbnQgY2FuIGNhbGN1bGF0ZSB0aGUgcHJvcGVyIEhNQUMsIHRoZSBI TUFDIGNhbiBiZSB1c2VkIGZvciBwcmUtYXV0aGVudGljYXRpb24uIFRodXMsIHRoZSBwcmUtYXV0 aGVudGljYXRpb24gdG9rZW4gY291bGQgbG9vayBzb21ldGhpbmcgbGlrZSB0aGlzOg0KQ2xpZW50 LT5TZXJ2ZXI6IENsaWVudElELCBDb3VudGVyLCBITUFDW0NsaWVudElEIHx8IENvdW50ZXIsIEtz XSB3aGVyZSBLcyBpcyBhIHNoYXJlZCBzZWNyZXQga2V5IHRoYXQgYm90aCB0aGUgY2xpZW50IGFu ZCBzZXJ2ZXIgaGF2ZS4NCk9uIHRoZSBzZXJ2ZXIgc2lkZSwgdGhlIHNlcnZlciB3b3VsZCByZWNh bGN1bGF0ZSB0aGUgSE1BQyBhbmQgY29tcGFyZSBpdCB0byB0aGUgb25lIHByb3ZpZGVkIGJ5IHRo ZSBjbGllbnQuDQpOb3RlIHRoYXQgdGhpcyBpbmZvcm1hdGlvbiBpcyBzZW50IGZyb20gdGhlIGNs aWVudCB0byB0aGUgc2VydmVyIGluIGNsZWFyIHRleHQgKGkuZS4sIG5vdCBlbmNyeXB0ZWQpLg0K SW4gcHJhY3RpY2UsIHRoZXJlIHdvdWxkIHByb2JhYmx5IGJlIG1vcmUgZmllbGRzLCBidXQgdGhl IGltcG9ydGFudCBwYXJ0IGlzIHRoYXQgdGhlIG9uZS10aW1lIG9uIGJvYXJkaW5nIGVuYWJsZXMg YSBsaWZldGltZSBvZiBwcmUtYXV0aGVudGljYXRpb24gdG9rZW5zLg0KDQpXZWJzaXRlcyBtZWFu dCBmb3IgY29uc3VtZXJzIHdvdWxkIHByb2JhYmx5IGJlIGhhbmRsZWQgZGlmZmVyZW50bHkgLSBz cGVjaWZpY2FsbHksIG5vIG9uLWJvYXJkaW5nLiBUaGF0IG1lYW5zIHRoZXJlIHdvdWxkIGJlIHNv bWUga2luZCBvZiB0b2tlbiBzZXJ2aWNlIC0gc2ltaWxhciB0byBPQXV0aCwgYnV0IG9wZXJhdGlu ZyBwcmlvciB0byB0aGUgVENQIGVxdWl2YWxlbnQgb2YgU1lOL0FDSy4gUGVyaGFwcyBDbG91ZEZs YWlyIG9yIEdvb2dsZSBvciBNaWNyb3NvZnQgY291bGQgaW52ZW50IHNvbWV0aGluZyBsaWtlIHRo aXMgYW5kIG9mZmVyIGl0IGFzIGEgc2VydmljZT8/Pw0KDQpBZ2FpbiwgdGhlcmUgd2lsbCBiZSBv dGhlciB3ZWJzaXRlcyB0aGF0IHdpbGwgbm90IHdhbnQgcHJlLWF1dGhlbnRpY2F0aW9uIGJlY2F1 c2UgdGhleSB3YW50IHRvIGFsbG93IGFub255bW91cyB1c2VycyB0byB0aGVpciBzaXRlLg0KDQpC cmVudA0KDQpPbiBKdWwgMjMsIDIwMTksIGF0IDY6MjYgQU0sIFJvYmVydG8gUGVvbiA8ZmVuaXhA ZmIuY29tPG1haWx0bzpmZW5peEBmYi5jb20+PiB3cm90ZToNCg0KSSdtIHRyeWluZyB0byB1bmRl cnN0YW5kIGhvdyBhbnl0aGluZyB3YXMgcHJlLWF1dGhlbnRpY2F0ZWQgd2l0aG91dCBzdWZmZXJp bmcgZnJvbSBhbGwgb2YgdGhlIHNhbWUgcHJvYmxlbXMuDQoNCkhvdyB3b3VsZCBzdWNoIHByZS1h dXRoZW50aWNhdGlvbiBiZSBkb25lIGluIHByYWN0aWNlLCBlc3BlY2lhbGx5IGluIHNjZW5hcmlv cyB3aGVyZSB0aGUgc2VydmVyIGRvZXNuJ3QgaGF2ZSBhIHdoaXRlbGlzdCBvZiBjbGllbnRzLCBh bmQgdGhhdCBzZXJ2aWNlIGRlc2lyZXMgdHJhZmZpYyBmcm9tIG5vbi1tYWxpY2lvdXMgY2xpZW50 cz8NCg0KLT1SDQoNCkdldCBPdXRsb29rIGZvciBBbmRyb2lkPGh0dHBzOi8vdXJsZGVmZW5zZS5w cm9vZnBvaW50LmNvbS92Mi91cmw/dT1odHRwcy0zQV9fYWthLm1zX2doZWkzNiZkPUR3TUYtZyZj PXVkQlRSdkZ2WEM1RGhxZzdVSHBKbFBwczNtWjNMUnhwYjZfXzBQb21CVFEmcj1XLU8wdDB6d2hn WEhQOHVqcGg2dXozckgwTXR1YUx3RXJfN2dFMnAxWDVvJm09Q1YtSEloYlJWcC1hcmdpTnJWdV9E SzdyT05rNXh0OUw1cjBFZm13MTcwSSZzPVdYaGpRNWNHZkNydzZCU1hkcTVqeWRLRWJPRjJQdTN0 akwyUVpXWHo2ZVkmZT0+DQoNCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQpGcm9t OiBicmVudC5iaWxnZXJAdmVyaXpvbi5jb208bWFpbHRvOmJyZW50LmJpbGdlckB2ZXJpem9uLmNv bT4gPGJyZW50LmJpbGdlckB2ZXJpem9uLmNvbTxtYWlsdG86YnJlbnQuYmlsZ2VyQHZlcml6b24u Y29tPj4NClNlbnQ6IFR1ZXNkYXksIEp1bHkgMjMsIDIwMTkgODoyMTowNSBBTQ0KVG86IFdhdHNv biBMYWRkIDx3YXRzb25ibGFkZEBnbWFpbC5jb208bWFpbHRvOndhdHNvbmJsYWRkQGdtYWlsLmNv bT4+DQpDYzogYnJlbnQuYmlsZ2VyPTQwdmVyaXpvbi5jb21AZG1hcmMuaWV0Zi5vcmc8bWFpbHRv OmJyZW50LmJpbGdlcj00MHZlcml6b24uY29tQGRtYXJjLmlldGYub3JnPiA8YnJlbnQuYmlsZ2Vy PTQwdmVyaXpvbi5jb21AZG1hcmMuaWV0Zi5vcmc8bWFpbHRvOmJyZW50LmJpbGdlcj00MHZlcml6 b24uY29tQGRtYXJjLmlldGYub3JnPj47IFJvYmVydG8gUGVvbiA8ZmVuaXhAZmIuY29tPG1haWx0 bzpmZW5peEBmYi5jb20+PjsgcXVpY0BpZXRmLm9yZzxtYWlsdG86cXVpY0BpZXRmLm9yZz4gPHF1 aWNAaWV0Zi5vcmc8bWFpbHRvOnF1aWNAaWV0Zi5vcmc+PjsgYnJlbnQuYmlsZ2VyQHZlcml6b24u Y29tPG1haWx0bzpicmVudC5iaWxnZXJAdmVyaXpvbi5jb20+IDxicmVudC5iaWxnZXJAdmVyaXpv bi5jb208bWFpbHRvOmJyZW50LmJpbGdlckB2ZXJpem9uLmNvbT4+OyBJYW4gU3dldHQgPGlhbnN3 ZXR0PTQwZ29vZ2xlLmNvbUBkbWFyYy5pZXRmLm9yZzxtYWlsdG86aWFuc3dldHQ9NDBnb29nbGUu Y29tQGRtYXJjLmlldGYub3JnPj4NClN1YmplY3Q6IFJlOiBbRV0gRG9TLWluZyBRVUlDIHNlcnZl cnMgaXMgdG9vIGVhc3kNCg0KDQoNCk9uIEp1bCAyMiwgMjAxOSwgYXQgOToxNiBQTSwgV2F0c29u IExhZGQgPHdhdHNvbmJsYWRkQGdtYWlsLmNvbTxtYWlsdG86d2F0c29uYmxhZGRAZ21haWwuY29t Pj4gd3JvdGU6DQoNCk9uIE1vbiwgSnVsIDIyLCAyMDE5IGF0IDU6MjkgUE0NCjxicmVudC5iaWxn ZXI9NDB2ZXJpem9uLmNvbUBkbWFyYy5pZXRmLm9yZzxtYWlsdG86YnJlbnQuYmlsZ2VyPTQwdmVy aXpvbi5jb21AZG1hcmMuaWV0Zi5vcmc+PiB3cm90ZToNCg0KDQoNCk9uIEp1bCAyMiwgMjAxOSwg YXQgMTA6MTAgQU0sIFJvYmVydG8gUGVvbiA8ZmVuaXhAZmIuY29tPG1haWx0bzpmZW5peEBmYi5j b20+PiB3cm90ZToNCg0KV2hlbiB5b3XigJlyZSB0YWxraW5nIGFib3V0IHByZS1hdXRoZW50aWNh dGlvbiwgYXJlIHlvdSByZWZlcnJpbmcgdG8gdGhlIDAtcnR0IHN0dWZmPw0KDQoNCjAtUlRUIGlz IGdvb2Qgc3R1ZmYuIEl0IHJlZHVjZXMgdGltZSBmb3IgYSBkZXZpY2UgdGhhdOKAmXMgYWxyZWFk eSBrbm93biB0byBiZSBhdXRob3JpemVkIHRvIGNvbm5lY3QgdG8gdGhlIHNlcnZlci4NCg0KUGFy dCBvZiB0aGUgcHJvYmxlbSBpcyB0byBzdG9wIHJlc291cmNlIERvUy4gVGhlIG90aGVyIHBhcnQg aXMgYWJvdXQgaW5mb3JtYXRpb24gbGVha2FnZS4NCg0KTGV04oCZcyBhc3N1bWUgYSB0aW1lIHdo ZW4gYWxsIHdlYnNpdGUgdXNlIFFVSUMgYW5kIGxldCdzIHRha2UgYW4gYWR2ZXJzYXJ5IHdobyBo YXMganVzdCBsZWFybmVkIGFib3V0IGEgdnVsbmVyYWJpbGl0eSBpbiBXb3JkcHJlc3MuIFRoZSBh ZHZlcnNhcnkgd2FudHMgdG8gc2NhbiB0aGUgSW50ZXJuZXQgZmluZGluZyBXb3JkcHJlc3Mgc2l0 ZXMuIE5vdywgaWYgdGhlIFFVSUMgY29ubmVjdGlvbiByZXF1aXJlZCBwcmUtYXV0aGVudGljYXRp b24sIHRoZW4gdGhlIHNlcnZlciB3b3VsZCBiZSBibGFjayB0byB0aGUgY29ubmVjdGlvbiBhbmQg dGhlIGFkdmVyc2FyeSBjb3VsZCBub3QgZGV0ZXJtaW5lIGlmIHRoZSBzaXRlIHVzZXMgV29yZHBy ZXNzLiBCdXQsIGFzIGl0IHN0YW5kcyB0b2RheSwgaW4gdGhpcyBmdXR1cmUgdGltZSwgdGhlIGFk dmVyc2FyeSBzY2FucyB0aGUgSW50ZXJuZXQsIGNvbm5lY3RzIHRvIHRoZSBzZXJ2ZXIsIGFuZCBp cyBoYW5kZWQgYSBXb3JkcHJlc3MgbG9naW4gc2NyZWVuLiBOb3cgdGhlIGFkdmVyc2FyeSBrbm93 cyB3aGVyZSB0byBhdHRhY2suDQoNCklmIGNvbm5lY3Rpb24gcmVxdWlyZXMgcHJlYXV0aGVudGlj YXRpb24gdGhlbiBubyBvbmUgY2FuIHNlZSB0aGUgc2l0ZSwgbm8/DQoNCg0KSW4gdGhlIGVudGVy cHJpc2UgaXQgaXMgYSBsaXR0bGUgZGlmZmVyZW50LiBDb21wYW5pZXMgaW1wbGVtZW50IHJldmVy c2UgcHJveGllcyB0byB0cnkgdG8gcHJvdGVjdCBzZXJ2ZXJzIGZyb20gdW5hdXRob3JpemVkIHVz ZXJzLiBCdXQgd2hhdCBpZiB0aGUgc2VydmVycyByZXF1aXJlZCBhIHByZS1hdXRoZW50aWNhdGlv biB0b2tlbi4gVGhlbiwgcmV2ZXJzZSBwcm94aWVzIHdvdWxkIG5vdCBiZSBuZWVkZWQuDQoNClNv IEkgdGhpbmsgdGhlcmUgYXJlIHR3byBkaWZmZXJlbnQgdGhpbmdzIGhlcmUsIG9yIG1heWJlIEkn bSBtaXN1bmRlcnN0YW5kaW5nOg0KMTogV2UgaGF2ZSBzZXJ2ZXJzIHRoYXQgaGF2ZSBhIGxpbWl0 ZWQgbnVtYmVyIG9mIGNsaWVudHMgdGhhdCB3aWxsDQpldmVyIHdhbnQgdG8gY29ubmVjdCB0byB0 aGVtLCBhbmQgd2FudCB0byBlbmFibGUgb3RoZXIgZGV2aWNlcyB0bw0KZmlsdGVyIHRoZSB0cmFm ZmljLCBzbyBuZWVkIHNvbWUgbWVjaGFuaXNtIHRoYXQgZW5hYmxlcyBhIG1pZGRsZWJveCB0bw0K ZmlsdGVyLg0KDQpObyBtaWRkbGUgYm94ISBQcmUtYXV0aGVudGljYXRpb24gbWFrZXMgc2VydmVy cyBzZWxmLWRlZmVuZGluZy4gTGFjayBvZiBwcmUtYXV0aGVudGljYXRpb24gaXMgd2h5IHdlIGhh dmUgbWlkZGxlIGJveGVzLg0KDQoyOiBXZSBoYXZlIHNlcnZlcnMgZ2VuZXJhbGx5IGF2YWlsYWJs ZSB0byB0aGUgcHVibGljIGFuZCBhcmUgY29uY2VybmVkDQp0aGF0IHRoZSBRVUlDIHZlcnNpb24g b2YgYSBTWU4gZmxvb2QgY2FuJ3QgYmUgZGVhbHQgd2l0aCAoZGVzcGl0ZQ0KZXZpZGVuY2UgdG8g dGhlIGNvbnRyYXJ5KS4NCg0KQ29tcGFuaWVzIGFuZCB3ZWJzaXRlIG93bmVycyBoYXZlIHRvIHBh eSBmb3IgYW50aS1Eb1Mgc2VydmljZXMgZnJvbSB0aGUgbGlrZXMgb2YgVmVyaXpvbiBhbmQgb3Ro ZXJzIEJFQ0FVU0Ugc2VydmVycyBsaXN0ZW4gdG8gYWxsIGNsaWVudHMuIFdpdGggcHJlLWF1dGhl bnRpY2F0aW9uLCB0aGUgbmVlZCB0byBoYXZlIGFuIGFudGktRG9TIHNlcnZpY2Ugd291bGQgYmUg Z3JlYXRseSByZWR1Y2VkIGJlY2F1c2Ugc2VydmVycyB3b3VsZCBub3QgcmVzcG9uZCB0byB1bmF1 dGhvcml6ZWQgY2xpZW50cy4NCg0KQW5kIHRoZSBwb2ludCBhYm91dCBpbmZvcm1hdGlvbiBsZWFr YWdlIGlzIGltcG9ydGFudCwgdG9vLg0KDQpCcmVudA0KDQoNCkkgZG9uJ3Qga25vdyBtdWNoIGFi b3V0IGhvdyBDbG91ZGZsYXJlIChteSBwbGFjZSBvZiBlbXBsb3ltZW50KSAgZGVhbHMNCndpdGgg MiBidXQgaG9wZWZ1bGx5IHNvbWUgcGVvcGxlIHdobyBkby9pbXBsZW1lbnRvcnMgY2FuIHNwZWFr IHVwDQphYm91dCBob3cgbXVjaCBvZiBhIHByb2JsZW0gaXQgaXMuIEJ1dCAxIGlzIEkgdGhpbmsg dmVyeSBtdWNoIGENCm5vbmdvYWw6IG1pZGRsZWJveCBvc3NpZmljYXRpb24gaXMgcGFydCBvZiB0 aGUgcmVhc29uIHdlIGhhdmUgUVVJQy4NCg0KU2luY2VyZWx5LA0KV2F0c29uIExhZGQNCg0KDQoN Cg0KQnJlbnQgQmxpZ2VyDQpEaXJlY3Rvci1UZWNobm9sb2d5IFZlcml6b24gU0RQDQpicmVudC5i aWxnZXJAdmVyaXpvbi5jb208bWFpbHRvOmJyZW50LmJpbGdlckB2ZXJpem9uLmNvbT4NCg0KDQoN Cg0KDQoNCg0KDQoNCkJyZW50IEJsaWdlcg0KRGlyZWN0b3ItVGVjaG5vbG9neSBWZXJpem9uIFNE UA0KYnJlbnQuYmlsZ2VyQHZlcml6b24uY29tPG1haWx0bzpicmVudC5iaWxnZXJAdmVyaXpvbi5j b20+DQoNCg0KDQoNCg0K --_000_F09CACA732DC4862AC0CC55F50FFE21Eoneverizoncom_ Content-Type: text/html; charset="utf-8" Content-ID: <364997BAF0027944BFDDCEB66D1A5DF3@vzwcorp.com> Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgbGluZS1icmVhazogYWZ0 ZXItd2hpdGUtc3BhY2U7IiBjbGFzcz0iIj4NClRoZXJlIGFyZSBsb3RzIG9mIHBvc3NpYmxlIHNj ZW5hcmlvcywgc28gcGxlYXNlIGp1c3QgY29uc2lkZXIgdGhlc2UgdG8gYmUgZXhhbXBsZXMuIExl dOKAmXMgZGl2aWRlIHRoZSB3b3JsZCBvZiBzZXJ2ZXJzIGluIHRvIDEpIGVudGVycHJpc2UgYnVz aW5lc3MtdG8tYnVzaW5lc3Mgd2Vic2l0ZXMsIDIpIHdlYnNpdGVzIG1lYW50IGZvciBjb25zdW1l cnMgd2hlcmUgYXV0aGVudGljYXRpb24gaXMgZGVzaXJhYmxlLCBhbmQgMykgd2Vic2l0ZXMgdGhh dA0KIHdpbGwgd2FudCB0byBhbGxvdyB0aGVpciB1c2VycyB0byBiZSBhbm9ueW1vdXMsIHRoZXJl Zm9yZSwgcHJlLWF1dGhlbnRpY2F0aW9uIHdvdWxkIG5vdCBhcHBseS4NCjxkaXYgY2xhc3M9IiI+ PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPkVudGVycHJpc2UgYnVzaW5lc3Mt dG8tYnVzaW5lc3Mgd2Vic2l0ZXMgY291bGQgdXNlIHNvbWV0aGluZyBzaW1pbGFyIHRvIHRoZSBT b2Z0d2FyZSBEZWZpbmVkIFBlcmltZXRlciAoU0RQKSBTaW5nbGUgUGFja2V0IEF1dGhvcml6YXRp b24gKFNQQSkgcHJvdG9jb2wgY3JlYXRlZCBieSB0aGUgQ2xvdWQgU2VjdXJpdHkgQWxsaWFuY2Uu IEl0IHVzZXMgdGhlIGZhY3QgdGhhdCBjbGllbnRzIGFyZSBvbi1ib2FyZGVkIHRvIHRoZQ0KIHN5 c3RlbSBpbiBhIG9uZSB0aW1lIGV2ZW50IHRvIHByb3ZpZGUgdGhlIGNsaWVudHMgd2l0aCBhIHNo YXJlZCBzZWNyZXQga2V5LiBUaGUga2V5IGlzIHVzZWQgaW4gYSBjb3VudGVyLWJhc2VkIEhNQUMg Y2FsY3VsYXRpb24uIFNpbmNlIG9ubHkgYW4gYXV0aG9yaXplZCBjbGllbnQgY2FuIGNhbGN1bGF0 ZSB0aGUgcHJvcGVyIEhNQUMsIHRoZSBITUFDIGNhbiBiZSB1c2VkIGZvciBwcmUtYXV0aGVudGlj YXRpb24uIFRodXMsIHRoZSBwcmUtYXV0aGVudGljYXRpb24NCiB0b2tlbiBjb3VsZCBsb29rIHNv bWV0aGluZyBsaWtlIHRoaXM6PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPkNsaWVudC0mZ3Q7U2VydmVy OiBDbGllbnRJRCwgQ291bnRlciwgSE1BQ1tDbGllbnRJRCB8fCBDb3VudGVyLCBLc10gd2hlcmUg S3MgaXMgYSBzaGFyZWQgc2VjcmV0IGtleSB0aGF0IGJvdGggdGhlIGNsaWVudCBhbmQgc2VydmVy IGhhdmUuPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPk9uIHRoZSBzZXJ2ZXIgc2lkZSwgdGhlIHNlcnZl ciB3b3VsZCByZWNhbGN1bGF0ZSB0aGUgSE1BQyBhbmQgY29tcGFyZSBpdCB0byB0aGUgb25lIHBy b3ZpZGVkIGJ5IHRoZSBjbGllbnQuJm5ic3A7PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPk5vdGUgdGhh dCB0aGlzIGluZm9ybWF0aW9uIGlzIHNlbnQgZnJvbSB0aGUgY2xpZW50IHRvIHRoZSBzZXJ2ZXIg aW4gY2xlYXIgdGV4dCAoaS5lLiwgbm90IGVuY3J5cHRlZCkuPC9kaXY+DQo8ZGl2IGNsYXNzPSIi PkluIHByYWN0aWNlLCB0aGVyZSB3b3VsZCBwcm9iYWJseSBiZSBtb3JlIGZpZWxkcywgYnV0IHRo ZSBpbXBvcnRhbnQgcGFydCBpcyB0aGF0IHRoZSBvbmUtdGltZSBvbiBib2FyZGluZyBlbmFibGVz IGEgbGlmZXRpbWUgb2YgcHJlLWF1dGhlbnRpY2F0aW9uIHRva2Vucy48L2Rpdj4NCjxkaXYgY2xh c3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPldlYnNpdGVzIG1lYW50 IGZvciBjb25zdW1lcnMgd291bGQgcHJvYmFibHkgYmUgaGFuZGxlZCBkaWZmZXJlbnRseSAtIHNw ZWNpZmljYWxseSwgbm8gb24tYm9hcmRpbmcuIFRoYXQgbWVhbnMgdGhlcmUgd291bGQgYmUgc29t ZSBraW5kIG9mIHRva2VuIHNlcnZpY2UgLSBzaW1pbGFyIHRvIE9BdXRoLCBidXQgb3BlcmF0aW5n IHByaW9yIHRvIHRoZSBUQ1AgZXF1aXZhbGVudCBvZiBTWU4vQUNLLiBQZXJoYXBzIENsb3VkRmxh aXINCiBvciBHb29nbGUgb3IgTWljcm9zb2Z0IGNvdWxkIGludmVudCBzb21ldGhpbmcgbGlrZSB0 aGlzIGFuZCBvZmZlciBpdCBhcyBhIHNlcnZpY2U/Pz88L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJy IGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPkFnYWluLCB0aGVyZSB3aWxsIGJlIG90 aGVyIHdlYnNpdGVzIHRoYXQgd2lsbCBub3Qgd2FudCBwcmUtYXV0aGVudGljYXRpb24gYmVjYXVz ZSB0aGV5IHdhbnQgdG8gYWxsb3cgYW5vbnltb3VzIHVzZXJzIHRvIHRoZWlyIHNpdGUuPC9kaXY+ DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5CcmVu dDxiciBjbGFzcz0iIj4NCjxkaXY+PGJyIGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0 ZSIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPk9uIEp1bCAyMywgMjAxOSwgYXQgNjoyNiBBTSwg Um9iZXJ0byBQZW9uICZsdDs8YSBocmVmPSJtYWlsdG86ZmVuaXhAZmIuY29tIiBjbGFzcz0iIj5m ZW5peEBmYi5jb208L2E+Jmd0OyB3cm90ZTo8L2Rpdj4NCjxiciBjbGFzcz0iQXBwbGUtaW50ZXJj aGFuZ2UtbmV3bGluZSI+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0id29yZC13cmFwOiBi cmVhay13b3JkOyAtd2Via2l0LW5ic3AtbW9kZTogc3BhY2U7IGxpbmUtYnJlYWs6IGFmdGVyLXdo aXRlLXNwYWNlOyIgY2xhc3M9IiI+DQo8ZGl2IGRpcj0iYXV0byIgc3R5bGU9ImRpcmVjdGlvbjog bHRyOyBtYXJnaW46IDBweDsgcGFkZGluZzogMHB4OyBmb250LWZhbWlseTogc2Fucy1zZXJpZjsg Zm9udC1zaXplOiAxMXB0OyIgY2xhc3M9IiI+DQpJJ20gdHJ5aW5nIHRvIHVuZGVyc3RhbmQgaG93 IGFueXRoaW5nIHdhcyBwcmUtYXV0aGVudGljYXRlZCB3aXRob3V0IHN1ZmZlcmluZyBmcm9tIGFs bCBvZiB0aGUgc2FtZSBwcm9ibGVtcy48YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQo8L2Rp dj4NCjxkaXYgZGlyPSJhdXRvIiBzdHlsZT0iZGlyZWN0aW9uOiBsdHI7IG1hcmdpbjogMHB4OyBw YWRkaW5nOiAwcHg7IGZvbnQtZmFtaWx5OiBzYW5zLXNlcmlmOyBmb250LXNpemU6IDExcHQ7IiBj bGFzcz0iIj4NCkhvdyB3b3VsZCBzdWNoIHByZS1hdXRoZW50aWNhdGlvbiBiZSBkb25lIGluIHBy YWN0aWNlLCBlc3BlY2lhbGx5IGluIHNjZW5hcmlvcyB3aGVyZSB0aGUgc2VydmVyIGRvZXNuJ3Qg aGF2ZSBhIHdoaXRlbGlzdCBvZiBjbGllbnRzLCBhbmQgdGhhdCBzZXJ2aWNlIGRlc2lyZXMgdHJh ZmZpYyBmcm9tIG5vbi1tYWxpY2lvdXMgY2xpZW50cz88YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9 IiI+DQo8L2Rpdj4NCjxkaXYgZGlyPSJhdXRvIiBzdHlsZT0iZGlyZWN0aW9uOiBsdHI7IG1hcmdp bjogMHB4OyBwYWRkaW5nOiAwcHg7IGZvbnQtZmFtaWx5OiBzYW5zLXNlcmlmOyBmb250LXNpemU6 IDExcHQ7IiBjbGFzcz0iIj4NCi09UjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCjwvZGl2 Pg0KPGRpdiBkaXI9ImF1dG8iIHN0eWxlPSJkaXJlY3Rpb246IGx0cjsgbWFyZ2luOiAwcHg7IHBh ZGRpbmc6IDBweDsgZm9udC1mYW1pbHk6IHNhbnMtc2VyaWY7IGZvbnQtc2l6ZTogMTFwdDsiIGNs YXNzPSIiPg0KPHNwYW4gaWQ9Ik91dGxvb2tTaWduYXR1cmUiIGNsYXNzPSIiPg0KPGRpdiBkaXI9 ImF1dG8iIHN0eWxlPSJkaXJlY3Rpb246IGx0cjsgbWFyZ2luOiAwcHg7IHBhZGRpbmc6IDBweDsg Zm9udC1mYW1pbHk6IHNhbnMtc2VyaWY7IGZvbnQtc2l6ZTogMTFwdDsiIGNsYXNzPSIiPg0KR2V0 IDxhIGhyZWY9Imh0dHBzOi8vdXJsZGVmZW5zZS5wcm9vZnBvaW50LmNvbS92Mi91cmw/dT1odHRw cy0zQV9fYWthLm1zX2doZWkzNiZhbXA7ZD1Ed01GLWcmYW1wO2M9dWRCVFJ2RnZYQzVEaHFnN1VI cEpsUHBzM21aM0xSeHBiNl9fMFBvbUJUUSZhbXA7cj1XLU8wdDB6d2hnWEhQOHVqcGg2dXozckgw TXR1YUx3RXJfN2dFMnAxWDVvJmFtcDttPUNWLUhJaGJSVnAtYXJnaU5yVnVfREs3ck9OazV4dDlM NXIwRWZtdzE3MEkmYW1wO3M9V1hoalE1Y0dmQ3J3NkJTWGRxNWp5ZEtFYk9GMlB1M3RqTDJRWldY ejZlWSZhbXA7ZT0iIGNsYXNzPSIiPg0KT3V0bG9vayBmb3IgQW5kcm9pZDwvYT48L2Rpdj4NCjwv c3Bhbj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxociBzdHlsZT0iZGlzcGxheTppbmxpbmUtYmxv Y2s7d2lkdGg6OTglIiB0YWJpbmRleD0iLTEiIGNsYXNzPSIiPg0KPGRpdiBpZD0iZGl2UnBseUZ3 ZE1zZyIgZGlyPSJsdHIiIGNsYXNzPSIiPjxmb250IGZhY2U9IkNhbGlicmksIHNhbnMtc2VyaWYi IHN0eWxlPSJmb250LXNpemU6MTFwdCIgY2xhc3M9IiI+PGIgY2xhc3M9IiI+RnJvbTo8L2I+DQo8 YSBocmVmPSJtYWlsdG86YnJlbnQuYmlsZ2VyQHZlcml6b24uY29tIiBjbGFzcz0iIj5icmVudC5i aWxnZXJAdmVyaXpvbi5jb208L2E+ICZsdDs8YSBocmVmPSJtYWlsdG86YnJlbnQuYmlsZ2VyQHZl cml6b24uY29tIiBjbGFzcz0iIj5icmVudC5iaWxnZXJAdmVyaXpvbi5jb208L2E+Jmd0OzxiciBj bGFzcz0iIj4NCjxiIGNsYXNzPSIiPlNlbnQ6PC9iPiBUdWVzZGF5LCBKdWx5IDIzLCAyMDE5IDg6 MjE6MDUgQU08YnIgY2xhc3M9IiI+DQo8YiBjbGFzcz0iIj5Ubzo8L2I+IFdhdHNvbiBMYWRkICZs dDs8YSBocmVmPSJtYWlsdG86d2F0c29uYmxhZGRAZ21haWwuY29tIiBjbGFzcz0iIj53YXRzb25i bGFkZEBnbWFpbC5jb208L2E+Jmd0OzxiciBjbGFzcz0iIj4NCjxiIGNsYXNzPSIiPkNjOjwvYj4g PGEgaHJlZj0ibWFpbHRvOmJyZW50LmJpbGdlcj00MHZlcml6b24uY29tQGRtYXJjLmlldGYub3Jn IiBjbGFzcz0iIj4NCmJyZW50LmJpbGdlcj00MHZlcml6b24uY29tQGRtYXJjLmlldGYub3JnPC9h PiAmbHQ7PGEgaHJlZj0ibWFpbHRvOmJyZW50LmJpbGdlcj00MHZlcml6b24uY29tQGRtYXJjLmll dGYub3JnIiBjbGFzcz0iIj5icmVudC5iaWxnZXI9NDB2ZXJpem9uLmNvbUBkbWFyYy5pZXRmLm9y ZzwvYT4mZ3Q7OyBSb2JlcnRvIFBlb24gJmx0OzxhIGhyZWY9Im1haWx0bzpmZW5peEBmYi5jb20i IGNsYXNzPSIiPmZlbml4QGZiLmNvbTwvYT4mZ3Q7Ow0KPGEgaHJlZj0ibWFpbHRvOnF1aWNAaWV0 Zi5vcmciIGNsYXNzPSIiPnF1aWNAaWV0Zi5vcmc8L2E+ICZsdDs8YSBocmVmPSJtYWlsdG86cXVp Y0BpZXRmLm9yZyIgY2xhc3M9IiI+cXVpY0BpZXRmLm9yZzwvYT4mZ3Q7Ow0KPGEgaHJlZj0ibWFp bHRvOmJyZW50LmJpbGdlckB2ZXJpem9uLmNvbSIgY2xhc3M9IiI+YnJlbnQuYmlsZ2VyQHZlcml6 b24uY29tPC9hPiAmbHQ7PGEgaHJlZj0ibWFpbHRvOmJyZW50LmJpbGdlckB2ZXJpem9uLmNvbSIg Y2xhc3M9IiI+YnJlbnQuYmlsZ2VyQHZlcml6b24uY29tPC9hPiZndDs7IElhbiBTd2V0dCAmbHQ7 PGEgaHJlZj0ibWFpbHRvOmlhbnN3ZXR0PTQwZ29vZ2xlLmNvbUBkbWFyYy5pZXRmLm9yZyIgY2xh c3M9IiI+aWFuc3dldHQ9NDBnb29nbGUuY29tQGRtYXJjLmlldGYub3JnPC9hPiZndDs8YnIgY2xh c3M9IiI+DQo8YiBjbGFzcz0iIj5TdWJqZWN0OjwvYj4gUmU6IFtFXSBEb1MtaW5nIFFVSUMgc2Vy dmVycyBpcyB0b28gZWFzeTwvZm9udD4NCjxkaXYgY2xhc3M9IiI+Jm5ic3A7PC9kaXY+DQo8L2Rp dj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9 IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+T24g SnVsIDIyLCAyMDE5LCBhdCA5OjE2IFBNLCBXYXRzb24gTGFkZCAmbHQ7PGEgaHJlZj0ibWFpbHRv OndhdHNvbmJsYWRkQGdtYWlsLmNvbSIgY2xhc3M9IiI+d2F0c29uYmxhZGRAZ21haWwuY29tPC9h PiZndDsgd3JvdGU6PC9kaXY+DQo8YnIgY2xhc3M9IkFwcGxlLWludGVyY2hhbmdlLW5ld2xpbmUi Pg0KPGRpdiBjbGFzcz0iIj48c3BhbiBzdHlsZT0iY2FyZXQtY29sb3I6IHJnYigwLCAwLCAwKTsg Zm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxOHB4OyBmb250LXN0eWxlOiBub3Jt YWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRl ci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0 ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAw cHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBub25l OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7IiBjbGFzcz0iIj5Pbg0K IE1vbiwgSnVsIDIyLCAyMDE5IGF0IDU6MjkgUE08L3NwYW4+PGJyIHN0eWxlPSJjYXJldC1jb2xv cjogcmdiKDAsIDAsIDApOyBmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDE4cHg7 IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWln aHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRl eHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFs OyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyB0ZXh0 LWRlY29yYXRpb246IG5vbmU7IiBjbGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJjYXJldC1jb2xvcjog cmdiKDAsIDAsIDApOyBmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDE4cHg7IGZv bnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6 IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQt aW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3 b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyB0ZXh0LWRl Y29yYXRpb246IG5vbmU7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsi IGNsYXNzPSIiPiZsdDs8L3NwYW4+PGEgaHJlZj0ibWFpbHRvOmJyZW50LmJpbGdlcj00MHZlcml6 b24uY29tQGRtYXJjLmlldGYub3JnIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9u dC1zaXplOiAxOHB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3Jt YWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IG9ycGhhbnM6 IGF1dG87IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9y bTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd2lkb3dzOiBhdXRvOyB3b3JkLXNwYWNpbmc6 IDBweDsgLXdlYmtpdC10ZXh0LXNpemUtYWRqdXN0OiBhdXRvOyAtd2Via2l0LXRleHQtc3Ryb2tl LXdpZHRoOiAwcHg7IiBjbGFzcz0iIj5icmVudC5iaWxnZXI9NDB2ZXJpem9uLmNvbUBkbWFyYy5p ZXRmLm9yZzwvYT48c3BhbiBzdHlsZT0iY2FyZXQtY29sb3I6IHJnYigwLCAwLCAwKTsgZm9udC1m YW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxOHB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZv bnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFj aW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRy YW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13 ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyBmbG9h dDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7IiBjbGFzcz0iIj4mZ3Q7DQogd3Jv dGU6PC9zcGFuPjxiciBzdHlsZT0iY2FyZXQtY29sb3I6IHJnYigwLCAwLCAwKTsgZm9udC1mYW1p bHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxOHB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQt dmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5n OiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5z Zm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJr aXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyIgY2xhc3M9 IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGlj YTsgZm9udC1zaXplOiAxOHB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBz OiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IG9y cGhhbnM6IGF1dG87IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRy YW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd2lkb3dzOiBhdXRvOyB3b3JkLXNw YWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXNpemUtYWRqdXN0OiBhdXRvOyAtd2Via2l0LXRleHQt c3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsiIGNsYXNzPSIiPg0KPGJy IGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KT24gSnVsIDIyLCAyMDE5 LCBhdCAxMDoxMCBBTSwgUm9iZXJ0byBQZW9uICZsdDs8YSBocmVmPSJtYWlsdG86ZmVuaXhAZmIu Y29tIiBjbGFzcz0iIj5mZW5peEBmYi5jb208L2E+Jmd0OyB3cm90ZTo8YnIgY2xhc3M9IiI+DQo8 YnIgY2xhc3M9IiI+DQpXaGVuIHlvdeKAmXJlIHRhbGtpbmcgYWJvdXQgcHJlLWF1dGhlbnRpY2F0 aW9uLCBhcmUgeW91IHJlZmVycmluZyB0byB0aGUgMC1ydHQgc3R1ZmY/PGJyIGNsYXNzPSIiPg0K PGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KMC1SVFQgaXMgZ29vZCBzdHVmZi4gSXQgcmVk dWNlcyB0aW1lIGZvciBhIGRldmljZSB0aGF04oCZcyBhbHJlYWR5IGtub3duIHRvIGJlIGF1dGhv cml6ZWQgdG8gY29ubmVjdCB0byB0aGUgc2VydmVyLjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0i Ij4NClBhcnQgb2YgdGhlIHByb2JsZW0gaXMgdG8gc3RvcCByZXNvdXJjZSBEb1MuIFRoZSBvdGhl ciBwYXJ0IGlzIGFib3V0IGluZm9ybWF0aW9uIGxlYWthZ2UuPGJyIGNsYXNzPSIiPg0KPGJyIGNs YXNzPSIiPg0KTGV04oCZcyBhc3N1bWUgYSB0aW1lIHdoZW4gYWxsIHdlYnNpdGUgdXNlIFFVSUMg YW5kIGxldCdzIHRha2UgYW4gYWR2ZXJzYXJ5IHdobyBoYXMganVzdCBsZWFybmVkIGFib3V0IGEg dnVsbmVyYWJpbGl0eSBpbiBXb3JkcHJlc3MuIFRoZSBhZHZlcnNhcnkgd2FudHMgdG8gc2NhbiB0 aGUgSW50ZXJuZXQgZmluZGluZyBXb3JkcHJlc3Mgc2l0ZXMuIE5vdywgaWYgdGhlIFFVSUMgY29u bmVjdGlvbiByZXF1aXJlZCBwcmUtYXV0aGVudGljYXRpb24sIHRoZW4NCiB0aGUgc2VydmVyIHdv dWxkIGJlIGJsYWNrIHRvIHRoZSBjb25uZWN0aW9uIGFuZCB0aGUgYWR2ZXJzYXJ5IGNvdWxkIG5v dCBkZXRlcm1pbmUgaWYgdGhlIHNpdGUgdXNlcyBXb3JkcHJlc3MuIEJ1dCwgYXMgaXQgc3RhbmRz IHRvZGF5LCBpbiB0aGlzIGZ1dHVyZSB0aW1lLCB0aGUgYWR2ZXJzYXJ5IHNjYW5zIHRoZSBJbnRl cm5ldCwgY29ubmVjdHMgdG8gdGhlIHNlcnZlciwgYW5kIGlzIGhhbmRlZCBhIFdvcmRwcmVzcyBs b2dpbiBzY3JlZW4uIE5vdw0KIHRoZSBhZHZlcnNhcnkga25vd3Mgd2hlcmUgdG8gYXR0YWNrLjxi ciBjbGFzcz0iIj4NCjwvYmxvY2txdW90ZT4NCjxiciBzdHlsZT0iY2FyZXQtY29sb3I6IHJnYigw LCAwLCAwKTsgZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxOHB4OyBmb250LXN0 eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3Jt YWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVu dDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1z cGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0 aW9uOiBub25lOyIgY2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0iY2FyZXQtY29sb3I6IHJnYigwLCAw LCAwKTsgZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxOHB4OyBmb250LXN0eWxl OiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7 IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDog MHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFj aW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0aW9u OiBub25lOyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7IiBjbGFzcz0i Ij5JZg0KIGNvbm5lY3Rpb24gcmVxdWlyZXMgcHJlYXV0aGVudGljYXRpb24gdGhlbiBubyBvbmUg Y2FuIHNlZSB0aGUgc2l0ZSwgbm8/PC9zcGFuPjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGJsb2Nr cXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPjxiciBzdHlsZT0iY2Fy ZXQtY29sb3I6IHJnYigwLCAwLCAwKTsgZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXpl OiAxOHB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZv bnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0 YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6 IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBw eDsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJj aXRlIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxOHB4OyBmb250 LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBu b3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IG9ycGhhbnM6IGF1dG87IHRleHQtYWxpZ246 IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3Bh Y2U6IG5vcm1hbDsgd2lkb3dzOiBhdXRvOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0 LXNpemUtYWRqdXN0OiBhdXRvOyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQt ZGVjb3JhdGlvbjogbm9uZTsiIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KSW4gdGhlIGVudGVy cHJpc2UgaXQgaXMgYSBsaXR0bGUgZGlmZmVyZW50LiBDb21wYW5pZXMgaW1wbGVtZW50IHJldmVy c2UgcHJveGllcyB0byB0cnkgdG8gcHJvdGVjdCBzZXJ2ZXJzIGZyb20gdW5hdXRob3JpemVkIHVz ZXJzLiBCdXQgd2hhdCBpZiB0aGUgc2VydmVycyByZXF1aXJlZCBhIHByZS1hdXRoZW50aWNhdGlv biB0b2tlbi4gVGhlbiwgcmV2ZXJzZSBwcm94aWVzIHdvdWxkIG5vdCBiZSBuZWVkZWQuPGJyIGNs YXNzPSIiPg0KPC9ibG9ja3F1b3RlPg0KPGJyIHN0eWxlPSJjYXJldC1jb2xvcjogcmdiKDAsIDAs IDApOyBmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDE4cHg7IGZvbnQtc3R5bGU6 IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsg bGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAw cHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNp bmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyB0ZXh0LWRlY29yYXRpb246 IG5vbmU7IiBjbGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJjYXJldC1jb2xvcjogcmdiKDAsIDAsIDAp OyBmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDE4cHg7IGZvbnQtc3R5bGU6IG5v cm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0 dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7 IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6 IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyB0ZXh0LWRlY29yYXRpb246IG5v bmU7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiIGNsYXNzPSIiPlNv DQogSSB0aGluayB0aGVyZSBhcmUgdHdvIGRpZmZlcmVudCB0aGluZ3MgaGVyZSwgb3IgbWF5YmUg SSdtIG1pc3VuZGVyc3RhbmRpbmc6PC9zcGFuPjxiciBzdHlsZT0iY2FyZXQtY29sb3I6IHJnYigw LCAwLCAwKTsgZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxOHB4OyBmb250LXN0 eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3Jt YWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVu dDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1z cGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0 aW9uOiBub25lOyIgY2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0iY2FyZXQtY29sb3I6IHJnYigwLCAw LCAwKTsgZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxOHB4OyBmb250LXN0eWxl OiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7 IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDog MHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFj aW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0aW9u OiBub25lOyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7IiBjbGFzcz0i Ij4xOg0KIFdlIGhhdmUgc2VydmVycyB0aGF0IGhhdmUgYSBsaW1pdGVkIG51bWJlciBvZiBjbGll bnRzIHRoYXQgd2lsbDwvc3Bhbj48YnIgc3R5bGU9ImNhcmV0LWNvbG9yOiByZ2IoMCwgMCwgMCk7 IGZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMThweDsgZm9udC1zdHlsZTogbm9y bWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0 ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsg dGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzog MHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQtZGVjb3JhdGlvbjogbm9u ZTsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5bGU9ImNhcmV0LWNvbG9yOiByZ2IoMCwgMCwgMCk7IGZv bnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMThweDsgZm9udC1zdHlsZTogbm9ybWFs OyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXIt c3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4 dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4 OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsg ZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyIgY2xhc3M9IiI+ZXZlcg0K IHdhbnQgdG8gY29ubmVjdCB0byB0aGVtLCBhbmQgd2FudCB0byBlbmFibGUgb3RoZXIgZGV2aWNl cyB0bzwvc3Bhbj48YnIgc3R5bGU9ImNhcmV0LWNvbG9yOiByZ2IoMCwgMCwgMCk7IGZvbnQtZmFt aWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMThweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250 LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2lu Zzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFu c2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Vi a2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsiIGNsYXNz PSIiPg0KPHNwYW4gc3R5bGU9ImNhcmV0LWNvbG9yOiByZ2IoMCwgMCwgMCk7IGZvbnQtZmFtaWx5 OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMThweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZh cmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzog bm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zv cm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0 LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsgZmxvYXQ6IG5v bmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyIgY2xhc3M9IiI+ZmlsdGVyDQogdGhlIHRy YWZmaWMsIHNvIG5lZWQgc29tZSBtZWNoYW5pc20gdGhhdCBlbmFibGVzIGEgbWlkZGxlYm94IHRv PC9zcGFuPjxiciBzdHlsZT0iY2FyZXQtY29sb3I6IHJnYigwLCAwLCAwKTsgZm9udC1mYW1pbHk6 IEhlbHZldGljYTsgZm9udC1zaXplOiAxOHB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFy aWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBu b3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9y bTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQt dGV4dC1zdHJva2Utd2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyIgY2xhc3M9IiI+ DQo8c3BhbiBzdHlsZT0iY2FyZXQtY29sb3I6IHJnYigwLCAwLCAwKTsgZm9udC1mYW1pbHk6IEhl bHZldGljYTsgZm9udC1zaXplOiAxOHB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFu dC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3Jt YWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTog bm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4 dC1zdHJva2Utd2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyBmbG9hdDogbm9uZTsg ZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7IiBjbGFzcz0iIj5maWx0ZXIuPC9zcGFuPjxiciBz dHlsZT0iY2FyZXQtY29sb3I6IHJnYigwLCAwLCAwKTsgZm9udC1mYW1pbHk6IEhlbHZldGljYTsg Zm9udC1zaXplOiAxOHB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBu b3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQt YWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hp dGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Ut d2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyIgY2xhc3M9IiI+DQo8L2Rpdj4NCjwv YmxvY2txdW90ZT4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQpObyBtaWRk bGUgYm94ISBQcmUtYXV0aGVudGljYXRpb24gbWFrZXMgc2VydmVycyBzZWxmLWRlZmVuZGluZy4g TGFjayBvZiBwcmUtYXV0aGVudGljYXRpb24gaXMgd2h5IHdlIGhhdmUgbWlkZGxlIGJveGVzLjwv ZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRl IiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+PHNwYW4gc3R5bGU9ImNhcmV0LWNvbG9yOiByZ2Io MCwgMCwgMCk7IGZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMThweDsgZm9udC1z dHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9y bWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRl bnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQt c3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQtZGVjb3Jh dGlvbjogbm9uZTsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyIgY2xh c3M9IiI+MjoNCiBXZSBoYXZlIHNlcnZlcnMgZ2VuZXJhbGx5IGF2YWlsYWJsZSB0byB0aGUgcHVi bGljIGFuZCBhcmUgY29uY2VybmVkPC9zcGFuPjxiciBzdHlsZT0iY2FyZXQtY29sb3I6IHJnYigw LCAwLCAwKTsgZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxOHB4OyBmb250LXN0 eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3Jt YWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVu dDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1z cGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0 aW9uOiBub25lOyIgY2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0iY2FyZXQtY29sb3I6IHJnYigwLCAw LCAwKTsgZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxOHB4OyBmb250LXN0eWxl OiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7 IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDog MHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFj aW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0aW9u OiBub25lOyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7IiBjbGFzcz0i Ij50aGF0DQogdGhlIFFVSUMgdmVyc2lvbiBvZiBhIFNZTiBmbG9vZCBjYW4ndCBiZSBkZWFsdCB3 aXRoIChkZXNwaXRlPC9zcGFuPjxiciBzdHlsZT0iY2FyZXQtY29sb3I6IHJnYigwLCAwLCAwKTsg Zm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxOHB4OyBmb250LXN0eWxlOiBub3Jt YWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRl ci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0 ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAw cHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBub25l OyIgY2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0iY2FyZXQtY29sb3I6IHJnYigwLCAwLCAwKTsgZm9u dC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxOHB4OyBmb250LXN0eWxlOiBub3JtYWw7 IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1z cGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0 LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7 IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyBm bG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7IiBjbGFzcz0iIj5ldmlkZW5j ZQ0KIHRvIHRoZSBjb250cmFyeSkuPC9zcGFuPjxiciBzdHlsZT0iY2FyZXQtY29sb3I6IHJnYigw LCAwLCAwKTsgZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxOHB4OyBmb250LXN0 eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3Jt YWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVu dDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1z cGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0 aW9uOiBub25lOyIgY2xhc3M9IiI+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxkaXYgY2xhc3M9 IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQpDb21wYW5pZXMgYW5kIHdlYnNpdGUgb3duZXJzIGhh dmUgdG8gcGF5IGZvciBhbnRpLURvUyBzZXJ2aWNlcyZuYnNwO2Zyb20gdGhlIGxpa2VzIG9mIFZl cml6b24gYW5kIG90aGVycyBCRUNBVVNFIHNlcnZlcnMgbGlzdGVuIHRvIGFsbCBjbGllbnRzLiBX aXRoIHByZS1hdXRoZW50aWNhdGlvbiwgdGhlIG5lZWQgdG8gaGF2ZSBhbiBhbnRpLURvUyBzZXJ2 aWNlIHdvdWxkIGJlIGdyZWF0bHkgcmVkdWNlZCBiZWNhdXNlIHNlcnZlcnMgd291bGQgbm90IHJl c3BvbmQNCiB0byB1bmF1dGhvcml6ZWQgY2xpZW50cy48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJy IGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPkFuZCB0aGUgcG9pbnQgYWJvdXQgaW5m b3JtYXRpb24gbGVha2FnZSBpcyBpbXBvcnRhbnQsIHRvby48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+ PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPkJyZW50PC9kaXY+DQo8ZGl2IGNs YXNzPSIiPjxiciBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0K PGRpdiBjbGFzcz0iIj48YnIgc3R5bGU9ImNhcmV0LWNvbG9yOiByZ2IoMCwgMCwgMCk7IGZvbnQt ZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMThweDsgZm9udC1zdHlsZTogbm9ybWFsOyBm b250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3Bh Y2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10 cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAt d2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsiIGNs YXNzPSIiPg0KPHNwYW4gc3R5bGU9ImNhcmV0LWNvbG9yOiByZ2IoMCwgMCwgMCk7IGZvbnQtZmFt aWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMThweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250 LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2lu Zzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFu c2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Vi a2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsgZmxvYXQ6 IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyIgY2xhc3M9IiI+SQ0KIGRvbid0IGtu b3cgbXVjaCBhYm91dCBob3cgQ2xvdWRmbGFyZSAobXkgcGxhY2Ugb2YgZW1wbG95bWVudCkgJm5i c3A7ZGVhbHM8L3NwYW4+PGJyIHN0eWxlPSJjYXJldC1jb2xvcjogcmdiKDAsIDAsIDApOyBmb250 LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDE4cHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsg Zm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNw YWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQt dHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsg LXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyB0ZXh0LWRlY29yYXRpb246IG5vbmU7IiBj bGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJjYXJldC1jb2xvcjogcmdiKDAsIDAsIDApOyBmb250LWZh bWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDE4cHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9u dC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNp bmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJh bnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdl YmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyB0ZXh0LWRlY29yYXRpb246IG5vbmU7IGZsb2F0 OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiIGNsYXNzPSIiPndpdGgNCiAyIGJ1 dCBob3BlZnVsbHkgc29tZSBwZW9wbGUgd2hvIGRvL2ltcGxlbWVudG9ycyBjYW4gc3BlYWsgdXA8 L3NwYW4+PGJyIHN0eWxlPSJjYXJldC1jb2xvcjogcmdiKDAsIDAsIDApOyBmb250LWZhbWlseTog SGVsdmV0aWNhOyBmb250LXNpemU6IDE4cHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJp YW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5v cm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3Jt OiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10 ZXh0LXN0cm9rZS13aWR0aDogMHB4OyB0ZXh0LWRlY29yYXRpb246IG5vbmU7IiBjbGFzcz0iIj4N CjxzcGFuIHN0eWxlPSJjYXJldC1jb2xvcjogcmdiKDAsIDAsIDApOyBmb250LWZhbWlseTogSGVs dmV0aWNhOyBmb250LXNpemU6IDE4cHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50 LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1h bDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBu b25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0 LXN0cm9rZS13aWR0aDogMHB4OyB0ZXh0LWRlY29yYXRpb246IG5vbmU7IGZsb2F0OiBub25lOyBk aXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiIGNsYXNzPSIiPmFib3V0DQogaG93IG11Y2ggb2Yg YSBwcm9ibGVtIGl0IGlzLiBCdXQgMSBpcyBJIHRoaW5rIHZlcnkgbXVjaCBhPC9zcGFuPjxiciBz dHlsZT0iY2FyZXQtY29sb3I6IHJnYigwLCAwLCAwKTsgZm9udC1mYW1pbHk6IEhlbHZldGljYTsg Zm9udC1zaXplOiAxOHB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBu b3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQt YWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hp dGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Ut d2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyIgY2xhc3M9IiI+DQo8c3BhbiBzdHls ZT0iY2FyZXQtY29sb3I6IHJnYigwLCAwLCAwKTsgZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9u dC1zaXplOiAxOHB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3Jt YWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxp Z246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUt c3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lk dGg6IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5s aW5lICFpbXBvcnRhbnQ7IiBjbGFzcz0iIj5ub25nb2FsOg0KIG1pZGRsZWJveCBvc3NpZmljYXRp b24gaXMgcGFydCBvZiB0aGUgcmVhc29uIHdlIGhhdmUgUVVJQy48L3NwYW4+PGJyIHN0eWxlPSJj YXJldC1jb2xvcjogcmdiKDAsIDAsIDApOyBmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNp emU6IDE4cHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsg Zm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjog c3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFj ZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDog MHB4OyB0ZXh0LWRlY29yYXRpb246IG5vbmU7IiBjbGFzcz0iIj4NCjxiciBzdHlsZT0iY2FyZXQt Y29sb3I6IHJnYigwLCAwLCAwKTsgZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAx OHB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQt d2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0 OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5v cm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsg dGV4dC1kZWNvcmF0aW9uOiBub25lOyIgY2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0iY2FyZXQtY29s b3I6IHJnYigwLCAwLCAwKTsgZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxOHB4 OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2Vp Z2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0 ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1h bDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgdGV4 dC1kZWNvcmF0aW9uOiBub25lOyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRh bnQ7IiBjbGFzcz0iIj5TaW5jZXJlbHksPC9zcGFuPjxiciBzdHlsZT0iY2FyZXQtY29sb3I6IHJn YigwLCAwLCAwKTsgZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxOHB4OyBmb250 LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBu b3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWlu ZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29y ZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgdGV4dC1kZWNv cmF0aW9uOiBub25lOyIgY2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0iY2FyZXQtY29sb3I6IHJnYigw LCAwLCAwKTsgZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxOHB4OyBmb250LXN0 eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3Jt YWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVu dDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1z cGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0 aW9uOiBub25lOyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7IiBjbGFz cz0iIj5XYXRzb24NCiBMYWRkPC9zcGFuPjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8 YnIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBkaXI9ImF1dG8iIHN0eWxlPSJjYXJl dC1jb2xvcjogcmdiKDAsIDAsIDApOyBmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6 IDE4cHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9u dC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3Rh cnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTog bm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4 OyB0ZXh0LWRlY29yYXRpb246IG5vbmU7IHdvcmQtd3JhcDogYnJlYWstd29yZDsgLXdlYmtpdC1u YnNwLW1vZGU6IHNwYWNlOyBsaW5lLWJyZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsiIGNsYXNzPSIi Pg0KPGRpdiBkaXI9ImF1dG8iIHN0eWxlPSJ3b3JkLXdyYXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQt bmJzcC1tb2RlOiBzcGFjZTsgbGluZS1icmVhazogYWZ0ZXItd2hpdGUtc3BhY2U7IiBjbGFzcz0i Ij4NCjxkaXYgc3R5bGU9ImNhcmV0LWNvbG9yOiByZ2IoMCwgMCwgMCk7IGZvbnQtdmFyaWFudC1j YXBzOiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0 ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1h bDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgdGV4 dC1kZWNvcmF0aW9uOiBub25lOyIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IkFwcGxlLWludGVyY2hh bmdlLW5ld2xpbmUiPg0KPGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IHN0eWxlPSJjYXJldC1j b2xvcjogcmdiKDAsIDAsIDApOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBsZXR0ZXItc3Bh Y2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10 cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAt d2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsiIGNs YXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IHN0eWxlPSJjYXJldC1jb2xvcjog cmdiKDAsIDAsIDApOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzog bm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zv cm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0 LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsiIGNsYXNzPSIi Pg0KQnJlbnQgQmxpZ2VyPC9kaXY+DQo8ZGl2IHN0eWxlPSJjYXJldC1jb2xvcjogcmdiKDAsIDAs IDApOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0 ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7 IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ry b2tlLXdpZHRoOiAwcHg7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsiIGNsYXNzPSIiPg0KRGlyZWN0 b3ItVGVjaG5vbG9neSZuYnNwO1Zlcml6b24gU0RQJm5ic3A7PGJyIGNsYXNzPSIiPg0KPC9kaXY+ DQo8ZGl2IHN0eWxlPSJjYXJldC1jb2xvcjogcmdiKDAsIDAsIDApOyBmb250LXZhcmlhbnQtY2Fw czogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4 dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7 IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQt ZGVjb3JhdGlvbjogbm9uZTsiIGNsYXNzPSIiPg0KPGEgaHJlZj0ibWFpbHRvOmJyZW50LmJpbGdl ckB2ZXJpem9uLmNvbSIgY2xhc3M9IiI+YnJlbnQuYmlsZ2VyQHZlcml6b24uY29tPC9hPjwvZGl2 Pg0KPGRpdiBzdHlsZT0iY2FyZXQtY29sb3I6IHJnYigwLCAwLCAwKTsgZm9udC1mYW1pbHk6IEhl bHZldGljYTsgZm9udC1zaXplOiAyNHB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFu dC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3Jt YWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTog bm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4 dC1zdHJva2Utd2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyIgY2xhc3M9IiI+DQo8 YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxiciBjbGFzcz0iQXBwbGUtaW50ZXJjaGFuZ2UtbmV3bGlu ZSI+DQo8L2Rpdj4NCjwvZGl2Pg0KPGJyIGNsYXNzPSJBcHBsZS1pbnRlcmNoYW5nZS1uZXdsaW5l IiBzdHlsZT0iY2FyZXQtY29sb3I6IHJnYigwLCAwLCAwKTsgZm9udC1mYW1pbHk6IEhlbHZldGlj YTsgZm9udC1zaXplOiAxOHB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBz OiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRl eHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsg d2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJv a2Utd2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyI+DQo8YnIgY2xhc3M9IkFwcGxl LWludGVyY2hhbmdlLW5ld2xpbmUiPg0KPC9kaXY+DQo8YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjwv ZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjxiciBjbGFzcz0iIj4NCjxkaXYg Y2xhc3M9IiI+DQo8ZGl2IGRpcj0iYXV0byIgc3R5bGU9ImNhcmV0LWNvbG9yOiByZ2IoMCwgMCwg MCk7IGNvbG9yOiByZ2IoMCwgMCwgMCk7IGZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6 ZTogMThweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBm b250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBz dGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNl OiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAw cHg7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsgd29yZC13cmFwOiBicmVhay13b3JkOyAtd2Via2l0 LW5ic3AtbW9kZTogc3BhY2U7IGxpbmUtYnJlYWs6IGFmdGVyLXdoaXRlLXNwYWNlOyIgY2xhc3M9 IiI+DQo8ZGl2IGRpcj0iYXV0byIgc3R5bGU9IndvcmQtd3JhcDogYnJlYWstd29yZDsgLXdlYmtp dC1uYnNwLW1vZGU6IHNwYWNlOyBsaW5lLWJyZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsiIGNsYXNz PSIiPg0KPGRpdiBzdHlsZT0iY2FyZXQtY29sb3I6IHJnYigwLCAwLCAwKTsgY29sb3I6IHJnYigw LCAwLCAwKTsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1h bDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBu b25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0 LXN0cm9rZS13aWR0aDogMHB4OyB0ZXh0LWRlY29yYXRpb246IG5vbmU7Ij4NCjxiciBjbGFzcz0i QXBwbGUtaW50ZXJjaGFuZ2UtbmV3bGluZSI+DQo8YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYg c3R5bGU9ImNhcmV0LWNvbG9yOiByZ2IoMCwgMCwgMCk7IGNvbG9yOiByZ2IoMCwgMCwgMCk7IGZv bnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxp Z246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUt c3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lk dGg6IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyI+DQo8YnIgY2xhc3M9IiI+DQo8L2Rpdj4N CjxkaXYgc3R5bGU9ImNhcmV0LWNvbG9yOiByZ2IoMCwgMCwgMCk7IGNvbG9yOiByZ2IoMCwgMCwg MCk7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRl eHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsg d2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJv a2Utd2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyI+DQpCcmVudCBCbGlnZXI8L2Rp dj4NCjxkaXYgc3R5bGU9ImNhcmV0LWNvbG9yOiByZ2IoMCwgMCwgMCk7IGNvbG9yOiByZ2IoMCwg MCwgMCk7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7 IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9u ZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1z dHJva2Utd2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyI+DQpEaXJlY3Rvci1UZWNo bm9sb2d5Jm5ic3A7VmVyaXpvbiBTRFAmbmJzcDs8YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYg c3R5bGU9ImNhcmV0LWNvbG9yOiByZ2IoMCwgMCwgMCk7IGNvbG9yOiByZ2IoMCwgMCwgMCk7IGZv bnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxp Z246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUt c3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lk dGg6IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyI+DQo8YSBocmVmPSJtYWlsdG86YnJlbnQu YmlsZ2VyQHZlcml6b24uY29tIiBjbGFzcz0iIj5icmVudC5iaWxnZXJAdmVyaXpvbi5jb208L2E+ PC9kaXY+DQo8ZGl2IHN0eWxlPSJjYXJldC1jb2xvcjogcmdiKDAsIDAsIDApOyBjb2xvcjogcmdi KDAsIDAsIDApOyBmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDI0cHg7IGZvbnQt c3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5v cm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5k ZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3Jk LXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyB0ZXh0LWRlY29y YXRpb246IG5vbmU7IiBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGJyIGNsYXNz PSJBcHBsZS1pbnRlcmNoYW5nZS1uZXdsaW5lIj4NCjwvZGl2Pg0KPC9kaXY+DQo8YnIgY2xhc3M9 IkFwcGxlLWludGVyY2hhbmdlLW5ld2xpbmUiIHN0eWxlPSJjYXJldC1jb2xvcjogcmdiKDAsIDAs IDApOyBjb2xvcjogcmdiKDAsIDAsIDApOyBmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNp emU6IDE4cHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsg Zm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjog c3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFj ZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDog MHB4OyB0ZXh0LWRlY29yYXRpb246IG5vbmU7Ij4NCjxiciBjbGFzcz0iQXBwbGUtaW50ZXJjaGFu Z2UtbmV3bGluZSI+DQo8L2Rpdj4NCjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9o dG1sPg0K --_000_F09CACA732DC4862AC0CC55F50FFE21Eoneverizoncom_-- From nobody Tue Jul 23 07:39:55 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1896512027E for ; Tue, 23 Jul 2019 07:39:42 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.698 X-Spam-Level: X-Spam-Status: No, score=-2.698 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=fb.com header.b=nTUX4y42; dkim=pass (1024-bit key) header.d=fb.onmicrosoft.com header.b=M53pPme+ Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eOZaIyst4LtU for ; Tue, 23 Jul 2019 07:39:38 -0700 (PDT) Received: from mx0b-00082601.pphosted.com (mx0b-00082601.pphosted.com [67.231.153.30]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3137612024D for ; Tue, 23 Jul 2019 07:39:37 -0700 (PDT) Received: from pps.filterd (m0109331.ppops.net [127.0.0.1]) by mx0a-00082601.pphosted.com (8.16.0.27/8.16.0.27) with SMTP id x6NEbqDl028801; Tue, 23 Jul 2019 07:39:33 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fb.com; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : mime-version; s=facebook; bh=Q4Vq8GYLdyCtzya0VOKRtebJzcJXzG4KhbSkhRd1kqU=; b=nTUX4y42Qc025XuD9TSBFR6iihTdH1RUBqtgA5BuFFyMy6Fqy1wIZobQZIistnMY6boF RtElNTaMoZ2Q0Zoc9alCO/k+aMfoUqddxW/PF82F9Ej+lsO+kGow5OoaVpxHO72pPiWL JtyvugGtIsSzOcexdj/p6cnYNYr+isn0Bb8= Received: from mail.thefacebook.com (mailout.thefacebook.com [199.201.64.23]) by mx0a-00082601.pphosted.com with ESMTP id 2tx1t10k67-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT); Tue, 23 Jul 2019 07:39:33 -0700 Received: from prn-mbx06.TheFacebook.com (2620:10d:c081:6::20) by prn-hub06.TheFacebook.com (2620:10d:c081:35::130) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.1.1713.5; Tue, 23 Jul 2019 07:39:32 -0700 Received: from prn-hub05.TheFacebook.com (2620:10d:c081:35::129) by prn-mbx06.TheFacebook.com (2620:10d:c081:6::20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.1.1713.5; Tue, 23 Jul 2019 07:39:31 -0700 Received: from NAM04-BN3-obe.outbound.protection.outlook.com (192.168.54.28) by o365-in.thefacebook.com (192.168.16.29) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.1.1713.5 via Frontend Transport; Tue, 23 Jul 2019 07:39:31 -0700 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=fZh0nwFWB9+O3GndKO1p4/PeQ5SJVKb936xb5O5Har0Obl5MPBCZ8aBqRzX3k2H7phWyPVd80iXUrE+PPL9IlfCKds0J1TAPROnVV/w+zeaLr+nyjqXIy5FANf/WEyaT2hv/FdvtBhqQ53Vrca/Bpy4KQxuu0N6Mgy4iN466NbJ7E5ANADKh0HDJfRFD6IDWCmBclSrReDj37ANqFPghx5RYYa/U8fZzdygq7CYbzNoA7yvmvATYPYkBVn71Vms3oTA+/1lc2kdbJWjsY9Uu9A3j742aPV4GuE5y84wNqi+LFvuhb/Zlq3RGYummiqjkHiu5Kc2FlR7gYW7epHWueA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Q4Vq8GYLdyCtzya0VOKRtebJzcJXzG4KhbSkhRd1kqU=; b=lHk0iTzRq1tZHcmtDscRZCBCYr1/GNyAqdArUosfWN1CK6dkapXohpqHg2NjvcPpIQjUKQqxT8E3QaHzWAyLVm/WsHCcwvYne3bF+1Ffa8SgbD1y1gceIKwdh39AD9s5kleZl1L2ncaLf1FuH/2eLhNdKWmoXe5dJuKt3t/8GsV2KXRXJQxMcp+a0tBTfn/49LFLzskIxB3heQr1pi9mbnJr+W5GJ1332AQirxfXdUFR82VXtZ/6i/mYLBBai39SaWfaPLRjoi27nv1h3tC9XFRqDA53p2i7MsA/YfT+do+9RisKBkghjZyj/0fJGZsUftUGWrCZORhPJ9mIAy022g== ARC-Authentication-Results: i=1; mx.microsoft.com 1;spf=pass smtp.mailfrom=fb.com;dmarc=pass action=none header.from=fb.com;dkim=pass header.d=fb.com;arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fb.onmicrosoft.com; s=selector1-fb-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Q4Vq8GYLdyCtzya0VOKRtebJzcJXzG4KhbSkhRd1kqU=; b=M53pPme++t9nXfyRjudZ8K8KOcnYpsmIWDnn2B01jMf7dgt0VwCl8DyJCLxExQcZkEBCm97yHcNchcNdh3s93dzNoIfuJE/TiUg1GMJPcEJ/+Smnh89SAM+57USbLIxJsM3dhXWD4+cpjVPidrh/8JXHuQB6T0ApQrAqVMslhb8= Received: from CY4PR15MB1542.namprd15.prod.outlook.com (10.172.160.9) by CY4PR15MB1128.namprd15.prod.outlook.com (10.172.178.139) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2094.16; Tue, 23 Jul 2019 14:39:30 +0000 Received: from CY4PR15MB1542.namprd15.prod.outlook.com ([fe80::35ce:8d12:c463:7cfc]) by CY4PR15MB1542.namprd15.prod.outlook.com ([fe80::35ce:8d12:c463:7cfc%12]) with mapi id 15.20.2094.013; Tue, 23 Jul 2019 14:39:30 +0000 From: Roberto Peon To: "brent.bilger@verizon.com" CC: Watson Ladd , "brent.bilger=40verizon.com@dmarc.ietf.org" , "quic@ietf.org" , Ian Swett Subject: Re: [E] DoS-ing QUIC servers is too easy Thread-Topic: [E] DoS-ing QUIC servers is too easy Thread-Index: AQHVQO2o7IJCZ4s53kuA0LJW4b7AGKbXmNEAgACHhoCAABFu5IAACeCA///IT4A= Date: Tue, 23 Jul 2019 14:39:30 +0000 Message-ID: References: <21E3AE84-02C5-4943-A88E-B62329E21002@one.verizon.com> <507D5DB7-EDF2-4429-A518-604A377F92D9@one.verizon.com> <9BF2DC9D-F14C-4451-9191-1A1557556691@fb.com> <9DC40032-3852-4237-A621-5C6B1102E74F@one.verizon.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.1a.0.190609 x-originating-ip: [2001:67c:370:128:4e4:7d58:cf96:a6b8] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: ea15687a-1be4-4548-ce5f-08d70f7b922b x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600148)(711020)(4605104)(1401327)(2017052603328)(7193020); SRVR:CY4PR15MB1128; x-ms-traffictypediagnostic: CY4PR15MB1128: x-ms-exchange-purlcount: 3 x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:4714; x-forefront-prvs: 0107098B6C x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(376002)(136003)(366004)(396003)(346002)(39860400002)(189003)(199004)(64756008)(446003)(66556008)(66946007)(66446008)(81156014)(81166006)(91956017)(76116006)(66574012)(36756003)(4326008)(256004)(86362001)(45080400002)(478600001)(2351001)(99286004)(8936002)(25786009)(14444005)(54906003)(66476007)(316002)(606006)(14454004)(58126008)(486006)(6116002)(46003)(6246003)(476003)(5660300002)(2906002)(6436002)(5640700003)(53936002)(6506007)(6916009)(53546011)(102836004)(229853002)(33656002)(186003)(71200400001)(2501003)(71190400001)(6486002)(8676002)(76176011)(68736007)(6512007)(236005)(7736002)(790700001)(54896002)(6306002)(11346002)(2616005); DIR:OUT; SFP:1102; SCL:1; SRVR:CY4PR15MB1128; H:CY4PR15MB1542.namprd15.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: fb.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam-message-info: qgjZQRasYJu5GuJNdvSlMDFKsrrIxBcDMYHH3RRakAJSbtheSspDcI1e/BubZodBTovWrlxoE7hDipdxDAlyh4HppQXbpEZG4RhOLBGU8yoh8lwvKE7fs/m1JjU7969FYQOi1pzMBeW2ertqYC2vIsegblqggSgdh21qcLZj7wi0+0wdJxWu0oQ51ZxcjyVjugsEAqt9zqAEyqejNo1/kBTkHYldwb9kGrycyZrfeJ9CWD1yvBs54iG2x3si/hRQJBWtDOlr3lWQvUe44DEXh9GkEOLdy+RK/mCyQiwWh3ieOUaFmpUyuLdx3sK8/z4xCn8Pc1/iTkBt3mmzwsRwc7G1wRzjmG4zW99mielwtleWKyb3jjhrY+M7SRdzT/2WzbFRiqF05JHGe2TqBSO08Ya1fpyX+56AZmWn3n0j+o4= Content-Type: multipart/alternative; boundary="_000_F46932B1942245D69262F0BAADA6A738fbcom_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: ea15687a-1be4-4548-ce5f-08d70f7b922b X-MS-Exchange-CrossTenant-originalarrivaltime: 23 Jul 2019 14:39:30.2623 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 8ae927fe-1255-47a7-a2af-5f3a069daaa2 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: fenix@fb.com X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY4PR15MB1128 X-OriginatorOrg: fb.com X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2019-07-23_06:, , signatures=0 X-Proofpoint-Spam-Details: rule=fb_default_notspam policy=fb_default score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1015 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1810050000 definitions=main-1907230146 X-FB-Internal: deliver Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 23 Jul 2019 14:39:54 -0000 --_000_F46932B1942245D69262F0BAADA6A738fbcom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SeKAmWQgYXNzdW1lICMxIGlzIGxlc3MgbGlrZWx5IHRvIGV4cGVyaWVuY2UgY3JpcHBsaW5nIFNZ Ti1iYXNlZCBEb1MgYXR0YWNrcywgYW5kIGNvdWxkIG90aGVyd2lzZSBiZSBhY2NvbXBsaXNoZWQg YnkgbGltaXRpbmcgYWNjZXNzIGluIElQLXNwYWNlIChpbXBlcmZlY3QsIGJ1dCB3ZeKAmXJlIGxv b2tpbmcgZm9yIOKAnGdvb2QtZW5vdWdo4oCdLCBoZXJlKS4NCg0KLi4gd2hpY2ggbWVhbnMgdGhh dCBJIHRoaW5rIHdlIHNob3VsZCBjb25zaWRlciAyKzMgb25seSwgcmVhbGx5Lg0KDQpGb3IgIzIg YW5kICMzLCB3aGljaCBJIHN1c3BlY3QgaGF2ZSBzaWduaWZpY2FudCBvdmVybGFwcyAoc2l0ZXMg bWF5IHByb3ZpZGUgc2VydmljZXMgYm90aCB0byBsb2dnZWQtaW4gdXNlcnMgYW5kIHVzZXJzIHdo byBhcmVu4oCZdCBsb2dnZWQgaW4pLCB0aGUgcHJlLWF1dGhvcml6YXRpb24gZWl0aGVyOg0KICBh KSBjYW4gYmUgRG9T4oCZZCBpdHNlbGYuDQogIGIpIGNhbiBiZSB1c2VkIHRvIGRvIGEgRG9TIGlu IHRoZSBmdXR1cmUuDQoNCkluIGNhc2UgYiwgYXMgYW4gYXR0YWNrZXIsIHlvdeKAmWQgZ2V0IG9y IHdhaXQgZm9yIHRoZSBjbGllbnQgdG8gYXV0aGVudGljYXRlLCB0aGVuIHVzZSB0aGF0IGF1dGhl bnRpY2F0aW9uIGluIGEgcmVwbGF5IGF0dGFjaywgZS5nLiBieSByZXBsaWNhdGluZyB0aGUgYXV0 aCB0b2tlbiBhY3Jvc3MgbWFueSBob3N0cy4NCkluIGNhc2VzIHdoZXJlIHlvdSBhcmUgZGlzYWxs b3dlZCB0byByZXBsaWNhdGUgdGhlIGF1dGggdG9rZW4sIGUuZy4gYmVjYXVzZSBpdCBpcyB0aWVk IHRvIGEgcGFydGljdWxhciBJUCwgeW91IGNhbiBoZWxwIHNvbHZlIHRoZSByZXBsYXkgYXR0YWNr IGhvd2V2ZXIgeW914oCZbGwgYmUgYmlhc2luZyB0cmFmZmljIHRvIHVzZXJzIHdob3NlIElQIGlz IHN0YWJsZSBhbmQgd2hvIGFyZSBsb2dnZWQgaW4vYXV0aOKAmWQuDQpJbiB0aGUgcHJlLXNoYXJl ZCBrZXkgc2NlbmFyaW8gdGhhdCB3YXMgZGVzY3JpYmVkLCBpZiBhbnkgb25lIGNsaWVudCBsZWFr cyB0aGUgc2hhcmVkLXNlY3JldCwgdGhlbiBpdCBiZWNvbWVzIG5vdCB2ZXJ5IHVzZWZ1bCBhbmQg Y2VydGFpbmx5IGRvZXNu4oCZdCBwcm90ZWN0IGFnYWluc3QgYSBEb1MuIEnigJlkIGd1ZXNzIHRo YXQgdGhlIHByb2JhYmlsaXR5IG9mIHRoZSBsb3NzIG9mIGEgc3ltbWV0cmljIGtleSBpcyBwcm9w b3J0aW9uYWwgdG8gdGhlIGJyZWFkdGggb2YgdGhlIGRpc3RyaWJ1dGlvbiBvZiB0aGUga2V5Lg0K DQpXaGF0IEnigJltIHRyeWluZyB0byBwb2ludCBvdXQgaXMgdGhhdCB0aGlzIGRvZXNu4oCZdCBy ZWFsbHkgc2VlbSB0byBzb2x2ZSB0aGUgZ2VuZXJpYyBEb1MgYXR0YWNrLg0KWW914oCZbGwgc3Rp bGwgbmVlZCB0byBkbyBzb21lIGhldXJpc3RpY3MvcnVsZXMgYmFzZWQgdXBvbiB3aGF0ZXZlciBp cyBvYnNlcnZhYmxlLCBhdCBhIG1pbmltdW0gdGhlIDUtdHVwbGUuDQpHZXR0aW5nIG1vcmUgdGhh biB0aGUgNS10dXBsZSB0byBiZSB2aXNpYmxlIHdpbGwgdGFrZSBtb3JlIHdvcmsgYnkgdGhlIHNl cnZlciwgdHJ1ZSwgYnV0IGdpdmVuIG90aGVyIGRlc2lnbiBjb25zdHJhaW50cywgSSBkb27igJl0 IHNlZSBob3cgdGhhdCBpcyBhdm9pZGFibGUuDQoNCi09Ug0KDQpGcm9tOiAiYnJlbnQuYmlsZ2Vy QHZlcml6b24uY29tIiA8YnJlbnQuYmlsZ2VyQHZlcml6b24uY29tPg0KRGF0ZTogVHVlc2RheSwg SnVseSAyMywgMjAxOSBhdCA5OjU5IEFNDQpUbzogUm9iZXJ0byBQZW9uIDxmZW5peEBmYi5jb20+ DQpDYzogImJyZW50LmJpbGdlckB2ZXJpem9uLmNvbSIgPGJyZW50LmJpbGdlckB2ZXJpem9uLmNv bT4sIFdhdHNvbiBMYWRkIDx3YXRzb25ibGFkZEBnbWFpbC5jb20+LCAiYnJlbnQuYmlsZ2VyPTQw dmVyaXpvbi5jb21AZG1hcmMuaWV0Zi5vcmciIDxicmVudC5iaWxnZXI9NDB2ZXJpem9uLmNvbUBk bWFyYy5pZXRmLm9yZz4sICJxdWljQGlldGYub3JnIiA8cXVpY0BpZXRmLm9yZz4sIElhbiBTd2V0 dCA8aWFuc3dldHQ9NDBnb29nbGUuY29tQGRtYXJjLmlldGYub3JnPg0KU3ViamVjdDogUmU6IFtF XSBEb1MtaW5nIFFVSUMgc2VydmVycyBpcyB0b28gZWFzeQ0KDQpUaGVyZSBhcmUgbG90cyBvZiBw b3NzaWJsZSBzY2VuYXJpb3MsIHNvIHBsZWFzZSBqdXN0IGNvbnNpZGVyIHRoZXNlIHRvIGJlIGV4 YW1wbGVzLiBMZXTigJlzIGRpdmlkZSB0aGUgd29ybGQgb2Ygc2VydmVycyBpbiB0byAxKSBlbnRl cnByaXNlIGJ1c2luZXNzLXRvLWJ1c2luZXNzIHdlYnNpdGVzLCAyKSB3ZWJzaXRlcyBtZWFudCBm b3IgY29uc3VtZXJzIHdoZXJlIGF1dGhlbnRpY2F0aW9uIGlzIGRlc2lyYWJsZSwgYW5kIDMpIHdl YnNpdGVzIHRoYXQgd2lsbCB3YW50IHRvIGFsbG93IHRoZWlyIHVzZXJzIHRvIGJlIGFub255bW91 cywgdGhlcmVmb3JlLCBwcmUtYXV0aGVudGljYXRpb24gd291bGQgbm90IGFwcGx5Lg0KDQpFbnRl cnByaXNlIGJ1c2luZXNzLXRvLWJ1c2luZXNzIHdlYnNpdGVzIGNvdWxkIHVzZSBzb21ldGhpbmcg c2ltaWxhciB0byB0aGUgU29mdHdhcmUgRGVmaW5lZCBQZXJpbWV0ZXIgKFNEUCkgU2luZ2xlIFBh Y2tldCBBdXRob3JpemF0aW9uIChTUEEpIHByb3RvY29sIGNyZWF0ZWQgYnkgdGhlIENsb3VkIFNl Y3VyaXR5IEFsbGlhbmNlLiBJdCB1c2VzIHRoZSBmYWN0IHRoYXQgY2xpZW50cyBhcmUgb24tYm9h cmRlZCB0byB0aGUgc3lzdGVtIGluIGEgb25lIHRpbWUgZXZlbnQgdG8gcHJvdmlkZSB0aGUgY2xp ZW50cyB3aXRoIGEgc2hhcmVkIHNlY3JldCBrZXkuIFRoZSBrZXkgaXMgdXNlZCBpbiBhIGNvdW50 ZXItYmFzZWQgSE1BQyBjYWxjdWxhdGlvbi4gU2luY2Ugb25seSBhbiBhdXRob3JpemVkIGNsaWVu dCBjYW4gY2FsY3VsYXRlIHRoZSBwcm9wZXIgSE1BQywgdGhlIEhNQUMgY2FuIGJlIHVzZWQgZm9y IHByZS1hdXRoZW50aWNhdGlvbi4gVGh1cywgdGhlIHByZS1hdXRoZW50aWNhdGlvbiB0b2tlbiBj b3VsZCBsb29rIHNvbWV0aGluZyBsaWtlIHRoaXM6DQpDbGllbnQtPlNlcnZlcjogQ2xpZW50SUQs IENvdW50ZXIsIEhNQUNbQ2xpZW50SUQgfHwgQ291bnRlciwgS3NdIHdoZXJlIEtzIGlzIGEgc2hh cmVkIHNlY3JldCBrZXkgdGhhdCBib3RoIHRoZSBjbGllbnQgYW5kIHNlcnZlciBoYXZlLg0KT24g dGhlIHNlcnZlciBzaWRlLCB0aGUgc2VydmVyIHdvdWxkIHJlY2FsY3VsYXRlIHRoZSBITUFDIGFu ZCBjb21wYXJlIGl0IHRvIHRoZSBvbmUgcHJvdmlkZWQgYnkgdGhlIGNsaWVudC4NCk5vdGUgdGhh dCB0aGlzIGluZm9ybWF0aW9uIGlzIHNlbnQgZnJvbSB0aGUgY2xpZW50IHRvIHRoZSBzZXJ2ZXIg aW4gY2xlYXIgdGV4dCAoaS5lLiwgbm90IGVuY3J5cHRlZCkuDQpJbiBwcmFjdGljZSwgdGhlcmUg d291bGQgcHJvYmFibHkgYmUgbW9yZSBmaWVsZHMsIGJ1dCB0aGUgaW1wb3J0YW50IHBhcnQgaXMg dGhhdCB0aGUgb25lLXRpbWUgb24gYm9hcmRpbmcgZW5hYmxlcyBhIGxpZmV0aW1lIG9mIHByZS1h dXRoZW50aWNhdGlvbiB0b2tlbnMuDQoNCldlYnNpdGVzIG1lYW50IGZvciBjb25zdW1lcnMgd291 bGQgcHJvYmFibHkgYmUgaGFuZGxlZCBkaWZmZXJlbnRseSAtIHNwZWNpZmljYWxseSwgbm8gb24t Ym9hcmRpbmcuIFRoYXQgbWVhbnMgdGhlcmUgd291bGQgYmUgc29tZSBraW5kIG9mIHRva2VuIHNl cnZpY2UgLSBzaW1pbGFyIHRvIE9BdXRoLCBidXQgb3BlcmF0aW5nIHByaW9yIHRvIHRoZSBUQ1Ag ZXF1aXZhbGVudCBvZiBTWU4vQUNLLiBQZXJoYXBzIENsb3VkRmxhaXIgb3IgR29vZ2xlIG9yIE1p Y3Jvc29mdCBjb3VsZCBpbnZlbnQgc29tZXRoaW5nIGxpa2UgdGhpcyBhbmQgb2ZmZXIgaXQgYXMg YSBzZXJ2aWNlPz8/DQoNCkFnYWluLCB0aGVyZSB3aWxsIGJlIG90aGVyIHdlYnNpdGVzIHRoYXQg d2lsbCBub3Qgd2FudCBwcmUtYXV0aGVudGljYXRpb24gYmVjYXVzZSB0aGV5IHdhbnQgdG8gYWxs b3cgYW5vbnltb3VzIHVzZXJzIHRvIHRoZWlyIHNpdGUuDQoNCkJyZW50DQoNCg0KT24gSnVsIDIz LCAyMDE5LCBhdCA2OjI2IEFNLCBSb2JlcnRvIFBlb24gPGZlbml4QGZiLmNvbTxtYWlsdG86ZmVu aXhAZmIuY29tPj4gd3JvdGU6DQoNCkknbSB0cnlpbmcgdG8gdW5kZXJzdGFuZCBob3cgYW55dGhp bmcgd2FzIHByZS1hdXRoZW50aWNhdGVkIHdpdGhvdXQgc3VmZmVyaW5nIGZyb20gYWxsIG9mIHRo ZSBzYW1lIHByb2JsZW1zLg0KSG93IHdvdWxkIHN1Y2ggcHJlLWF1dGhlbnRpY2F0aW9uIGJlIGRv bmUgaW4gcHJhY3RpY2UsIGVzcGVjaWFsbHkgaW4gc2NlbmFyaW9zIHdoZXJlIHRoZSBzZXJ2ZXIg ZG9lc24ndCBoYXZlIGEgd2hpdGVsaXN0IG9mIGNsaWVudHMsIGFuZCB0aGF0IHNlcnZpY2UgZGVz aXJlcyB0cmFmZmljIGZyb20gbm9uLW1hbGljaW91cyBjbGllbnRzPw0KLT1SDQpHZXQgT3V0bG9v ayBmb3IgQW5kcm9pZDxodHRwczovL3VybGRlZmVuc2UucHJvb2Zwb2ludC5jb20vdjIvdXJsP3U9 aHR0cHMtM0FfX2FrYS5tc19naGVpMzYmZD1Ed01GLWcmYz11ZEJUUnZGdlhDNURocWc3VUhwSmxQ cHMzbVozTFJ4cGI2X18wUG9tQlRRJnI9Vy1PMHQwendoZ1hIUDh1anBoNnV6M3JIME10dWFMd0Vy XzdnRTJwMVg1byZtPUNWLUhJaGJSVnAtYXJnaU5yVnVfREs3ck9OazV4dDlMNXIwRWZtdzE3MEkm cz1XWGhqUTVjR2ZDcnc2QlNYZHE1anlkS0ViT0YyUHUzdGpMMlFaV1h6NmVZJmU9Pg0KDQpfX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KRnJvbTogYnJlbnQuYmlsZ2VyQHZlcml6b24u Y29tPG1haWx0bzpicmVudC5iaWxnZXJAdmVyaXpvbi5jb20+IDxicmVudC5iaWxnZXJAdmVyaXpv bi5jb208bWFpbHRvOmJyZW50LmJpbGdlckB2ZXJpem9uLmNvbT4+DQpTZW50OiBUdWVzZGF5LCBK dWx5IDIzLCAyMDE5IDg6MjE6MDUgQU0NClRvOiBXYXRzb24gTGFkZCA8d2F0c29uYmxhZGRAZ21h aWwuY29tPG1haWx0bzp3YXRzb25ibGFkZEBnbWFpbC5jb20+Pg0KQ2M6IGJyZW50LmJpbGdlcj00 MHZlcml6b24uY29tQGRtYXJjLmlldGYub3JnPG1haWx0bzpicmVudC5iaWxnZXI9NDB2ZXJpem9u LmNvbUBkbWFyYy5pZXRmLm9yZz4gPGJyZW50LmJpbGdlcj00MHZlcml6b24uY29tQGRtYXJjLmll dGYub3JnPG1haWx0bzpicmVudC5iaWxnZXI9NDB2ZXJpem9uLmNvbUBkbWFyYy5pZXRmLm9yZz4+ OyBSb2JlcnRvIFBlb24gPGZlbml4QGZiLmNvbTxtYWlsdG86ZmVuaXhAZmIuY29tPj47IHF1aWNA aWV0Zi5vcmc8bWFpbHRvOnF1aWNAaWV0Zi5vcmc+IDxxdWljQGlldGYub3JnPG1haWx0bzpxdWlj QGlldGYub3JnPj47IGJyZW50LmJpbGdlckB2ZXJpem9uLmNvbTxtYWlsdG86YnJlbnQuYmlsZ2Vy QHZlcml6b24uY29tPiA8YnJlbnQuYmlsZ2VyQHZlcml6b24uY29tPG1haWx0bzpicmVudC5iaWxn ZXJAdmVyaXpvbi5jb20+PjsgSWFuIFN3ZXR0IDxpYW5zd2V0dD00MGdvb2dsZS5jb21AZG1hcmMu aWV0Zi5vcmc8bWFpbHRvOmlhbnN3ZXR0PTQwZ29vZ2xlLmNvbUBkbWFyYy5pZXRmLm9yZz4+DQpT dWJqZWN0OiBSZTogW0VdIERvUy1pbmcgUVVJQyBzZXJ2ZXJzIGlzIHRvbyBlYXN5DQoNCg0KDQoN Ck9uIEp1bCAyMiwgMjAxOSwgYXQgOToxNiBQTSwgV2F0c29uIExhZGQgPHdhdHNvbmJsYWRkQGdt YWlsLmNvbTxtYWlsdG86d2F0c29uYmxhZGRAZ21haWwuY29tPj4gd3JvdGU6DQoNCk9uIE1vbiwg SnVsIDIyLCAyMDE5IGF0IDU6MjkgUE0NCjxicmVudC5iaWxnZXI9NDB2ZXJpem9uLmNvbUBkbWFy Yy5pZXRmLm9yZzxtYWlsdG86YnJlbnQuYmlsZ2VyPTQwdmVyaXpvbi5jb21AZG1hcmMuaWV0Zi5v cmc+PiB3cm90ZToNCg0KDQoNCg0KT24gSnVsIDIyLCAyMDE5LCBhdCAxMDoxMCBBTSwgUm9iZXJ0 byBQZW9uIDxmZW5peEBmYi5jb208bWFpbHRvOmZlbml4QGZiLmNvbT4+IHdyb3RlOg0KDQpXaGVu IHlvdeKAmXJlIHRhbGtpbmcgYWJvdXQgcHJlLWF1dGhlbnRpY2F0aW9uLCBhcmUgeW91IHJlZmVy cmluZyB0byB0aGUgMC1ydHQgc3R1ZmY/DQoNCg0KMC1SVFQgaXMgZ29vZCBzdHVmZi4gSXQgcmVk dWNlcyB0aW1lIGZvciBhIGRldmljZSB0aGF04oCZcyBhbHJlYWR5IGtub3duIHRvIGJlIGF1dGhv cml6ZWQgdG8gY29ubmVjdCB0byB0aGUgc2VydmVyLg0KDQpQYXJ0IG9mIHRoZSBwcm9ibGVtIGlz IHRvIHN0b3AgcmVzb3VyY2UgRG9TLiBUaGUgb3RoZXIgcGFydCBpcyBhYm91dCBpbmZvcm1hdGlv biBsZWFrYWdlLg0KDQpMZXTigJlzIGFzc3VtZSBhIHRpbWUgd2hlbiBhbGwgd2Vic2l0ZSB1c2Ug UVVJQyBhbmQgbGV0J3MgdGFrZSBhbiBhZHZlcnNhcnkgd2hvIGhhcyBqdXN0IGxlYXJuZWQgYWJv dXQgYSB2dWxuZXJhYmlsaXR5IGluIFdvcmRwcmVzcy4gVGhlIGFkdmVyc2FyeSB3YW50cyB0byBz Y2FuIHRoZSBJbnRlcm5ldCBmaW5kaW5nIFdvcmRwcmVzcyBzaXRlcy4gTm93LCBpZiB0aGUgUVVJ QyBjb25uZWN0aW9uIHJlcXVpcmVkIHByZS1hdXRoZW50aWNhdGlvbiwgdGhlbiB0aGUgc2VydmVy IHdvdWxkIGJlIGJsYWNrIHRvIHRoZSBjb25uZWN0aW9uIGFuZCB0aGUgYWR2ZXJzYXJ5IGNvdWxk IG5vdCBkZXRlcm1pbmUgaWYgdGhlIHNpdGUgdXNlcyBXb3JkcHJlc3MuIEJ1dCwgYXMgaXQgc3Rh bmRzIHRvZGF5LCBpbiB0aGlzIGZ1dHVyZSB0aW1lLCB0aGUgYWR2ZXJzYXJ5IHNjYW5zIHRoZSBJ bnRlcm5ldCwgY29ubmVjdHMgdG8gdGhlIHNlcnZlciwgYW5kIGlzIGhhbmRlZCBhIFdvcmRwcmVz cyBsb2dpbiBzY3JlZW4uIE5vdyB0aGUgYWR2ZXJzYXJ5IGtub3dzIHdoZXJlIHRvIGF0dGFjay4N Cg0KSWYgY29ubmVjdGlvbiByZXF1aXJlcyBwcmVhdXRoZW50aWNhdGlvbiB0aGVuIG5vIG9uZSBj YW4gc2VlIHRoZSBzaXRlLCBubz8NCg0KDQoNCkluIHRoZSBlbnRlcnByaXNlIGl0IGlzIGEgbGl0 dGxlIGRpZmZlcmVudC4gQ29tcGFuaWVzIGltcGxlbWVudCByZXZlcnNlIHByb3hpZXMgdG8gdHJ5 IHRvIHByb3RlY3Qgc2VydmVycyBmcm9tIHVuYXV0aG9yaXplZCB1c2Vycy4gQnV0IHdoYXQgaWYg dGhlIHNlcnZlcnMgcmVxdWlyZWQgYSBwcmUtYXV0aGVudGljYXRpb24gdG9rZW4uIFRoZW4sIHJl dmVyc2UgcHJveGllcyB3b3VsZCBub3QgYmUgbmVlZGVkLg0KDQpTbyBJIHRoaW5rIHRoZXJlIGFy ZSB0d28gZGlmZmVyZW50IHRoaW5ncyBoZXJlLCBvciBtYXliZSBJJ20gbWlzdW5kZXJzdGFuZGlu ZzoNCjE6IFdlIGhhdmUgc2VydmVycyB0aGF0IGhhdmUgYSBsaW1pdGVkIG51bWJlciBvZiBjbGll bnRzIHRoYXQgd2lsbA0KZXZlciB3YW50IHRvIGNvbm5lY3QgdG8gdGhlbSwgYW5kIHdhbnQgdG8g ZW5hYmxlIG90aGVyIGRldmljZXMgdG8NCmZpbHRlciB0aGUgdHJhZmZpYywgc28gbmVlZCBzb21l IG1lY2hhbmlzbSB0aGF0IGVuYWJsZXMgYSBtaWRkbGVib3ggdG8NCmZpbHRlci4NCg0KTm8gbWlk ZGxlIGJveCEgUHJlLWF1dGhlbnRpY2F0aW9uIG1ha2VzIHNlcnZlcnMgc2VsZi1kZWZlbmRpbmcu IExhY2sgb2YgcHJlLWF1dGhlbnRpY2F0aW9uIGlzIHdoeSB3ZSBoYXZlIG1pZGRsZSBib3hlcy4N Cg0KDQoyOiBXZSBoYXZlIHNlcnZlcnMgZ2VuZXJhbGx5IGF2YWlsYWJsZSB0byB0aGUgcHVibGlj IGFuZCBhcmUgY29uY2VybmVkDQp0aGF0IHRoZSBRVUlDIHZlcnNpb24gb2YgYSBTWU4gZmxvb2Qg Y2FuJ3QgYmUgZGVhbHQgd2l0aCAoZGVzcGl0ZQ0KZXZpZGVuY2UgdG8gdGhlIGNvbnRyYXJ5KS4N Cg0KQ29tcGFuaWVzIGFuZCB3ZWJzaXRlIG93bmVycyBoYXZlIHRvIHBheSBmb3IgYW50aS1Eb1Mg c2VydmljZXMgZnJvbSB0aGUgbGlrZXMgb2YgVmVyaXpvbiBhbmQgb3RoZXJzIEJFQ0FVU0Ugc2Vy dmVycyBsaXN0ZW4gdG8gYWxsIGNsaWVudHMuIFdpdGggcHJlLWF1dGhlbnRpY2F0aW9uLCB0aGUg bmVlZCB0byBoYXZlIGFuIGFudGktRG9TIHNlcnZpY2Ugd291bGQgYmUgZ3JlYXRseSByZWR1Y2Vk IGJlY2F1c2Ugc2VydmVycyB3b3VsZCBub3QgcmVzcG9uZCB0byB1bmF1dGhvcml6ZWQgY2xpZW50 cy4NCg0KQW5kIHRoZSBwb2ludCBhYm91dCBpbmZvcm1hdGlvbiBsZWFrYWdlIGlzIGltcG9ydGFu dCwgdG9vLg0KDQpCcmVudA0KDQoNCg0KSSBkb24ndCBrbm93IG11Y2ggYWJvdXQgaG93IENsb3Vk ZmxhcmUgKG15IHBsYWNlIG9mIGVtcGxveW1lbnQpICBkZWFscw0Kd2l0aCAyIGJ1dCBob3BlZnVs bHkgc29tZSBwZW9wbGUgd2hvIGRvL2ltcGxlbWVudG9ycyBjYW4gc3BlYWsgdXANCmFib3V0IGhv dyBtdWNoIG9mIGEgcHJvYmxlbSBpdCBpcy4gQnV0IDEgaXMgSSB0aGluayB2ZXJ5IG11Y2ggYQ0K bm9uZ29hbDogbWlkZGxlYm94IG9zc2lmaWNhdGlvbiBpcyBwYXJ0IG9mIHRoZSByZWFzb24gd2Ug aGF2ZSBRVUlDLg0KDQpTaW5jZXJlbHksDQpXYXRzb24gTGFkZA0KDQoNCg0KQnJlbnQgQmxpZ2Vy DQpEaXJlY3Rvci1UZWNobm9sb2d5IFZlcml6b24gU0RQDQpicmVudC5iaWxnZXJAdmVyaXpvbi5j b208bWFpbHRvOmJyZW50LmJpbGdlckB2ZXJpem9uLmNvbT4NCg0KDQoNCg0KDQoNCg0KQnJlbnQg QmxpZ2VyDQpEaXJlY3Rvci1UZWNobm9sb2d5IFZlcml6b24gU0RQDQpicmVudC5iaWxnZXJAdmVy aXpvbi5jb208bWFpbHRvOmJyZW50LmJpbGdlckB2ZXJpem9uLmNvbT4NCg0KDQoNCg0K --_000_F46932B1942245D69262F0BAADA6A738fbcom_ Content-Type: text/html; charset="utf-8" Content-ID: <5872D769413A5147BA2139E4CA1B0313@namprd15.prod.outlook.com> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPCEtLVtp ZiAhbXNvXT48c3R5bGU+dlw6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kb1w6KiB7 YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kd1w6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0 I1ZNTCk7fQ0KLnNoYXBlIHtiZWhhdmlvcjp1cmwoI2RlZmF1bHQjVk1MKTt9DQo8L3N0eWxlPjwh W2VuZGlmXS0tPjxzdHlsZT48IS0tDQovKiBGb250IERlZmluaXRpb25zICovDQpAZm9udC1mYWNl DQoJe2ZvbnQtZmFtaWx5OkhlbHZldGljYTsNCglwYW5vc2UtMTowIDAgMCAwIDAgMCAwIDAgMCAw O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6 MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7 DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAyIDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMg Ki8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBp bjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250LWZh bWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJ e21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1 bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFuLk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1z dHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpwdXJwbGU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVy bGluZTt9DQpwLm1zb25vcm1hbDAsIGxpLm1zb25vcm1hbDAsIGRpdi5tc29ub3JtYWwwDQoJe21z by1zdHlsZS1uYW1lOm1zb25vcm1hbDsNCgltc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzsNCgltYXJn aW4tcmlnaHQ6MGluOw0KCW1zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvOw0KCW1hcmdpbi1sZWZ0 OjBpbjsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNl cmlmO30NCnNwYW4uRW1haWxTdHlsZTE4DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsLXJlcGx5 Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7 fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1z aXplOjEwLjBwdDt9DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo4LjVpbiAxMS4waW47DQoJ bWFyZ2luOjEuMGluIDEuMGluIDEuMGluIDEuMGluO30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFn ZTpXb3JkU2VjdGlvbjE7fQ0KLS0+PC9zdHlsZT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxv OnNoYXBlZGVmYXVsdHMgdjpleHQ9ImVkaXQiIHNwaWRtYXg9IjEwMjYiIC8+DQo8L3htbD48IVtl bmRpZl0tLT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlbGF5b3V0IHY6ZXh0PSJl ZGl0Ij4NCjxvOmlkbWFwIHY6ZXh0PSJlZGl0IiBkYXRhPSIxIiAvPg0KPC9vOnNoYXBlbGF5b3V0 PjwveG1sPjwhW2VuZGlmXS0tPg0KPC9oZWFkPg0KPGJvZHkgbGFuZz0iRU4tVVMiIGxpbms9ImJs dWUiIHZsaW5rPSJwdXJwbGUiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPknigJlkIGFzc3VtZSAjMSBpcyBsZXNzIGxpa2VseSB0byBleHBlcmllbmNl IGNyaXBwbGluZyBTWU4tYmFzZWQgRG9TIGF0dGFja3MsIGFuZCBjb3VsZCBvdGhlcndpc2UgYmUg YWNjb21wbGlzaGVkIGJ5IGxpbWl0aW5nIGFjY2VzcyBpbiBJUC1zcGFjZSAoaW1wZXJmZWN0LCBi dXQgd2XigJlyZSBsb29raW5nIGZvciDigJxnb29kLWVub3VnaOKAnSwgaGVyZSkuPG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48YnI+DQouLiB3aGljaCBtZWFucyB0aGF0IEkg dGhpbmsgd2Ugc2hvdWxkIGNvbnNpZGVyIDImIzQzOzMgb25seSwgcmVhbGx5Ljxicj4NCjxicj4N CkZvciAjMiBhbmQgIzMsIHdoaWNoIEkgc3VzcGVjdCBoYXZlIHNpZ25pZmljYW50IG92ZXJsYXBz IChzaXRlcyBtYXkgcHJvdmlkZSBzZXJ2aWNlcyBib3RoIHRvIGxvZ2dlZC1pbiB1c2VycyBhbmQg dXNlcnMgd2hvIGFyZW7igJl0IGxvZ2dlZCBpbiksIHRoZSBwcmUtYXV0aG9yaXphdGlvbiBlaXRo ZXI6PGJyPg0KJm5ic3A7IGEpIGNhbiBiZSBEb1PigJlkIGl0c2VsZi48YnI+DQombmJzcDsgYikg Y2FuIGJlIHVzZWQgdG8gZG8gYSBEb1MgaW4gdGhlIGZ1dHVyZS48YnI+DQo8YnI+DQo8bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkluIGNhc2UgYiwgYXMgYW4gYXR0YWNrZXIs IHlvdeKAmWQgZ2V0IG9yIHdhaXQgZm9yIHRoZSBjbGllbnQgdG8gYXV0aGVudGljYXRlLCB0aGVu IHVzZSB0aGF0IGF1dGhlbnRpY2F0aW9uIGluIGEgcmVwbGF5IGF0dGFjaywgZS5nLiBieSByZXBs aWNhdGluZyB0aGUgYXV0aCB0b2tlbiBhY3Jvc3MgbWFueSBob3N0cy48YnI+DQpJbiBjYXNlcyB3 aGVyZSB5b3UgYXJlIGRpc2FsbG93ZWQgdG8gcmVwbGljYXRlIHRoZSBhdXRoIHRva2VuLCBlLmcu IGJlY2F1c2UgaXQgaXMgdGllZCB0byBhIHBhcnRpY3VsYXIgSVAsIHlvdSBjYW4gaGVscCBzb2x2 ZSB0aGUgcmVwbGF5IGF0dGFjayBob3dldmVyIHlvdeKAmWxsIGJlIGJpYXNpbmcgdHJhZmZpYyB0 byB1c2VycyB3aG9zZSBJUCBpcyBzdGFibGUgYW5kIHdobyBhcmUgbG9nZ2VkIGluL2F1dGjigJlk Ljxicj4NCkluIHRoZSBwcmUtc2hhcmVkIGtleSBzY2VuYXJpbyB0aGF0IHdhcyBkZXNjcmliZWQs IGlmIGFueSBvbmUgY2xpZW50IGxlYWtzIHRoZSBzaGFyZWQtc2VjcmV0LCB0aGVuIGl0IGJlY29t ZXMgbm90IHZlcnkgdXNlZnVsIGFuZCBjZXJ0YWlubHkgZG9lc27igJl0IHByb3RlY3QgYWdhaW5z dCBhIERvUy4gSeKAmWQgZ3Vlc3MgdGhhdCB0aGUgcHJvYmFiaWxpdHkgb2YgdGhlIGxvc3Mgb2Yg YSBzeW1tZXRyaWMga2V5IGlzIHByb3BvcnRpb25hbCB0byB0aGUgYnJlYWR0aA0KIG9mIHRoZSBk aXN0cmlidXRpb24gb2YgdGhlIGtleS48YnI+DQo8YnI+DQpXaGF0IEnigJltIHRyeWluZyB0byBw b2ludCBvdXQgaXMgdGhhdCB0aGlzIGRvZXNu4oCZdCByZWFsbHkgc2VlbSB0byBzb2x2ZSB0aGUg Z2VuZXJpYyBEb1MgYXR0YWNrLjxicj4NCllvdeKAmWxsIHN0aWxsIG5lZWQgdG8gZG8gc29tZSBo ZXVyaXN0aWNzL3J1bGVzIGJhc2VkIHVwb24gd2hhdGV2ZXIgaXMgb2JzZXJ2YWJsZSwgYXQgYSBt aW5pbXVtIHRoZSA1LXR1cGxlLjxicj4NCkdldHRpbmcgbW9yZSB0aGFuIHRoZSA1LXR1cGxlIHRv IGJlIHZpc2libGUgd2lsbCB0YWtlIG1vcmUgd29yayBieSB0aGUgc2VydmVyLCB0cnVlLCBidXQg Z2l2ZW4gb3RoZXIgZGVzaWduIGNvbnN0cmFpbnRzLCBJIGRvbuKAmXQgc2VlIGhvdyB0aGF0IGlz IGF2b2lkYWJsZS48YnI+DQo8YnI+DQotPVI8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9y ZGVyLXRvcDpzb2xpZCAjQjVDNERGIDEuMHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Y29s b3I6YmxhY2siPkZyb206IDwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7 Y29sb3I6YmxhY2siPiZxdW90O2JyZW50LmJpbGdlckB2ZXJpem9uLmNvbSZxdW90OyAmbHQ7YnJl bnQuYmlsZ2VyQHZlcml6b24uY29tJmd0Ozxicj4NCjxiPkRhdGU6IDwvYj5UdWVzZGF5LCBKdWx5 IDIzLCAyMDE5IGF0IDk6NTkgQU08YnI+DQo8Yj5UbzogPC9iPlJvYmVydG8gUGVvbiAmbHQ7ZmVu aXhAZmIuY29tJmd0Ozxicj4NCjxiPkNjOiA8L2I+JnF1b3Q7YnJlbnQuYmlsZ2VyQHZlcml6b24u Y29tJnF1b3Q7ICZsdDticmVudC5iaWxnZXJAdmVyaXpvbi5jb20mZ3Q7LCBXYXRzb24gTGFkZCAm bHQ7d2F0c29uYmxhZGRAZ21haWwuY29tJmd0OywgJnF1b3Q7YnJlbnQuYmlsZ2VyPTQwdmVyaXpv bi5jb21AZG1hcmMuaWV0Zi5vcmcmcXVvdDsgJmx0O2JyZW50LmJpbGdlcj00MHZlcml6b24uY29t QGRtYXJjLmlldGYub3JnJmd0OywgJnF1b3Q7cXVpY0BpZXRmLm9yZyZxdW90OyAmbHQ7cXVpY0Bp ZXRmLm9yZyZndDssIElhbiBTd2V0dCAmbHQ7aWFuc3dldHQ9NDBnb29nbGUuY29tQGRtYXJjLmll dGYub3JnJmd0Ozxicj4NCjxiPlN1YmplY3Q6IDwvYj5SZTogW0VdIERvUy1pbmcgUVVJQyBzZXJ2 ZXJzIGlzIHRvbyBlYXN5PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPlRoZXJlIGFyZSBsb3RzIG9mIHBvc3NpYmxlIHNjZW5hcmlvcywgc28gcGxl YXNlIGp1c3QgY29uc2lkZXIgdGhlc2UgdG8gYmUgZXhhbXBsZXMuIExldOKAmXMgZGl2aWRlIHRo ZSB3b3JsZCBvZiBzZXJ2ZXJzIGluIHRvIDEpIGVudGVycHJpc2UgYnVzaW5lc3MtdG8tYnVzaW5l c3Mgd2Vic2l0ZXMsIDIpIHdlYnNpdGVzIG1lYW50IGZvciBjb25zdW1lcnMgd2hlcmUgYXV0aGVu dGljYXRpb24gaXMgZGVzaXJhYmxlLA0KIGFuZCAzKSB3ZWJzaXRlcyB0aGF0IHdpbGwgd2FudCB0 byBhbGxvdyB0aGVpciB1c2VycyB0byBiZSBhbm9ueW1vdXMsIHRoZXJlZm9yZSwgcHJlLWF1dGhl bnRpY2F0aW9uIHdvdWxkIG5vdCBhcHBseS4NCjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+RW50ZXJwcmlzZSBidXNpbmVzcy10by1idXNpbmVzcyB3ZWJzaXRl cyBjb3VsZCB1c2Ugc29tZXRoaW5nIHNpbWlsYXIgdG8gdGhlIFNvZnR3YXJlIERlZmluZWQgUGVy aW1ldGVyIChTRFApIFNpbmdsZSBQYWNrZXQgQXV0aG9yaXphdGlvbiAoU1BBKSBwcm90b2NvbCBj cmVhdGVkIGJ5IHRoZSBDbG91ZCBTZWN1cml0eSBBbGxpYW5jZS4gSXQgdXNlcyB0aGUgZmFjdCB0 aGF0IGNsaWVudHMgYXJlIG9uLWJvYXJkZWQNCiB0byB0aGUgc3lzdGVtIGluIGEgb25lIHRpbWUg ZXZlbnQgdG8gcHJvdmlkZSB0aGUgY2xpZW50cyB3aXRoIGEgc2hhcmVkIHNlY3JldCBrZXkuIFRo ZSBrZXkgaXMgdXNlZCBpbiBhIGNvdW50ZXItYmFzZWQgSE1BQyBjYWxjdWxhdGlvbi4gU2luY2Ug b25seSBhbiBhdXRob3JpemVkIGNsaWVudCBjYW4gY2FsY3VsYXRlIHRoZSBwcm9wZXIgSE1BQywg dGhlIEhNQUMgY2FuIGJlIHVzZWQgZm9yIHByZS1hdXRoZW50aWNhdGlvbi4gVGh1cywgdGhlIHBy ZS1hdXRoZW50aWNhdGlvbg0KIHRva2VuIGNvdWxkIGxvb2sgc29tZXRoaW5nIGxpa2UgdGhpczo8 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkNsaWVu dC0mZ3Q7U2VydmVyOiBDbGllbnRJRCwgQ291bnRlciwgSE1BQ1tDbGllbnRJRCB8fCBDb3VudGVy LCBLc10gd2hlcmUgS3MgaXMgYSBzaGFyZWQgc2VjcmV0IGtleSB0aGF0IGJvdGggdGhlIGNsaWVu dCBhbmQgc2VydmVyIGhhdmUuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj5PbiB0aGUgc2VydmVyIHNpZGUsIHRoZSBzZXJ2ZXIgd291bGQgcmVjYWxj dWxhdGUgdGhlIEhNQUMgYW5kIGNvbXBhcmUgaXQgdG8gdGhlIG9uZSBwcm92aWRlZCBieSB0aGUg Y2xpZW50LiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+Tm90ZSB0aGF0IHRoaXMgaW5mb3JtYXRpb24gaXMgc2VudCBmcm9tIHRoZSBjbGll bnQgdG8gdGhlIHNlcnZlciBpbiBjbGVhciB0ZXh0IChpLmUuLCBub3QgZW5jcnlwdGVkKS48bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkluIHByYWN0 aWNlLCB0aGVyZSB3b3VsZCBwcm9iYWJseSBiZSBtb3JlIGZpZWxkcywgYnV0IHRoZSBpbXBvcnRh bnQgcGFydCBpcyB0aGF0IHRoZSBvbmUtdGltZSBvbiBib2FyZGluZyBlbmFibGVzIGEgbGlmZXRp bWUgb2YgcHJlLWF1dGhlbnRpY2F0aW9uIHRva2Vucy48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+V2Vic2l0ZXMgbWVhbnQgZm9yIGNvbnN1bWVy cyB3b3VsZCBwcm9iYWJseSBiZSBoYW5kbGVkIGRpZmZlcmVudGx5IC0gc3BlY2lmaWNhbGx5LCBu byBvbi1ib2FyZGluZy4gVGhhdCBtZWFucyB0aGVyZSB3b3VsZCBiZSBzb21lIGtpbmQgb2YgdG9r ZW4gc2VydmljZSAtIHNpbWlsYXIgdG8gT0F1dGgsIGJ1dCBvcGVyYXRpbmcgcHJpb3IgdG8gdGhl IFRDUCBlcXVpdmFsZW50IG9mIFNZTi9BQ0suIFBlcmhhcHMgQ2xvdWRGbGFpcg0KIG9yIEdvb2ds ZSBvciBNaWNyb3NvZnQgY291bGQgaW52ZW50IHNvbWV0aGluZyBsaWtlIHRoaXMgYW5kIG9mZmVy IGl0IGFzIGEgc2VydmljZT8/PzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj5BZ2FpbiwgdGhlcmUgd2lsbCBiZSBvdGhlciB3ZWJzaXRlcyB0aGF0 IHdpbGwgbm90IHdhbnQgcHJlLWF1dGhlbnRpY2F0aW9uIGJlY2F1c2UgdGhleSB3YW50IHRvIGFs bG93IGFub255bW91cyB1c2VycyB0byB0aGVpciBzaXRlLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5CcmVudDxvOnA+PC9vOnA+PC9wPg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxicj4NCjxicj4NCjxvOnA+PC9vOnA+PC9wPg0KPGJs b2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+T24gSnVsIDIzLCAyMDE5LCBhdCA2OjI2IEFNLCBS b2JlcnRvIFBlb24gJmx0OzxhIGhyZWY9Im1haWx0bzpmZW5peEBmYi5jb20iPmZlbml4QGZiLmNv bTwvYT4mZ3Q7IHdyb3RlOjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tYm90dG9tOjEyLjBwdCI+PHNwYW4gc3R5bGU9ImZv bnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWYiPkknbSB0cnlpbmcgdG8gdW5k ZXJzdGFuZCBob3cgYW55dGhpbmcgd2FzIHByZS1hdXRoZW50aWNhdGVkIHdpdGhvdXQgc3VmZmVy aW5nIGZyb20gYWxsIG9mIHRoZSBzYW1lIHByb2JsZW1zLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tYm90dG9t OjEyLjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMt c2VyaWYiPkhvdyB3b3VsZCBzdWNoIHByZS1hdXRoZW50aWNhdGlvbiBiZSBkb25lIGluIHByYWN0 aWNlLCBlc3BlY2lhbGx5IGluIHNjZW5hcmlvcyB3aGVyZSB0aGUgc2VydmVyIGRvZXNuJ3QgaGF2 ZSBhIHdoaXRlbGlzdCBvZiBjbGllbnRzLCBhbmQgdGhhdCBzZXJ2aWNlIGRlc2lyZXMgdHJhZmZp Yw0KIGZyb20gbm9uLW1hbGljaW91cyBjbGllbnRzPzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tYm90dG9tOjEy LjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2Vy aWYiPi09UjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVv dDssc2Fucy1zZXJpZiI+R2V0IDxhIGhyZWY9Imh0dHBzOi8vdXJsZGVmZW5zZS5wcm9vZnBvaW50 LmNvbS92Mi91cmw/dT1odHRwcy0zQV9fYWthLm1zX2doZWkzNiZhbXA7ZD1Ed01GLWcmYW1wO2M9 dWRCVFJ2RnZYQzVEaHFnN1VIcEpsUHBzM21aM0xSeHBiNl9fMFBvbUJUUSZhbXA7cj1XLU8wdDB6 d2hnWEhQOHVqcGg2dXozckgwTXR1YUx3RXJfN2dFMnAxWDVvJmFtcDttPUNWLUhJaGJSVnAtYXJn aU5yVnVfREs3ck9OazV4dDlMNXIwRWZtdzE3MEkmYW1wO3M9V1hoalE1Y0dmQ3J3NkJTWGRxNWp5 ZEtFYk9GMlB1M3RqTDJRWldYejZlWSZhbXA7ZT0iPg0KT3V0bG9vayBmb3IgQW5kcm9pZDwvYT48 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmIj48bzpwPiZu YnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9Ik1zb05vcm1hbCIgYWxp Z249ImNlbnRlciIgc3R5bGU9InRleHQtYWxpZ246Y2VudGVyIj4NCjxociBzaXplPSIwIiB3aWR0 aD0iMTAwJSIgYWxpZ249ImNlbnRlciI+DQo8L2Rpdj4NCjxkaXYgaWQ9ImRpdlJwbHlGd2RNc2ci Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+RnJvbTo8L2I+IDxhIGhyZWY9Im1haWx0bzpicmVu dC5iaWxnZXJAdmVyaXpvbi5jb20iPmJyZW50LmJpbGdlckB2ZXJpem9uLmNvbTwvYT4gJmx0Ozxh IGhyZWY9Im1haWx0bzpicmVudC5iaWxnZXJAdmVyaXpvbi5jb20iPmJyZW50LmJpbGdlckB2ZXJp em9uLmNvbTwvYT4mZ3Q7PGJyPg0KPGI+U2VudDo8L2I+IFR1ZXNkYXksIEp1bHkgMjMsIDIwMTkg ODoyMTowNSBBTTxicj4NCjxiPlRvOjwvYj4gV2F0c29uIExhZGQgJmx0OzxhIGhyZWY9Im1haWx0 bzp3YXRzb25ibGFkZEBnbWFpbC5jb20iPndhdHNvbmJsYWRkQGdtYWlsLmNvbTwvYT4mZ3Q7PGJy Pg0KPGI+Q2M6PC9iPiA8YSBocmVmPSJtYWlsdG86YnJlbnQuYmlsZ2VyPTQwdmVyaXpvbi5jb21A ZG1hcmMuaWV0Zi5vcmciPmJyZW50LmJpbGdlcj00MHZlcml6b24uY29tQGRtYXJjLmlldGYub3Jn PC9hPiAmbHQ7PGEgaHJlZj0ibWFpbHRvOmJyZW50LmJpbGdlcj00MHZlcml6b24uY29tQGRtYXJj LmlldGYub3JnIj5icmVudC5iaWxnZXI9NDB2ZXJpem9uLmNvbUBkbWFyYy5pZXRmLm9yZzwvYT4m Z3Q7OyBSb2JlcnRvIFBlb24gJmx0OzxhIGhyZWY9Im1haWx0bzpmZW5peEBmYi5jb20iPmZlbml4 QGZiLmNvbTwvYT4mZ3Q7Ow0KPGEgaHJlZj0ibWFpbHRvOnF1aWNAaWV0Zi5vcmciPnF1aWNAaWV0 Zi5vcmc8L2E+ICZsdDs8YSBocmVmPSJtYWlsdG86cXVpY0BpZXRmLm9yZyI+cXVpY0BpZXRmLm9y ZzwvYT4mZ3Q7Ow0KPGEgaHJlZj0ibWFpbHRvOmJyZW50LmJpbGdlckB2ZXJpem9uLmNvbSI+YnJl bnQuYmlsZ2VyQHZlcml6b24uY29tPC9hPiAmbHQ7PGEgaHJlZj0ibWFpbHRvOmJyZW50LmJpbGdl ckB2ZXJpem9uLmNvbSI+YnJlbnQuYmlsZ2VyQHZlcml6b24uY29tPC9hPiZndDs7IElhbiBTd2V0 dCAmbHQ7PGEgaHJlZj0ibWFpbHRvOmlhbnN3ZXR0PTQwZ29vZ2xlLmNvbUBkbWFyYy5pZXRmLm9y ZyI+aWFuc3dldHQ9NDBnb29nbGUuY29tQGRtYXJjLmlldGYub3JnPC9hPiZndDs8YnI+DQo8Yj5T dWJqZWN0OjwvYj4gUmU6IFtFXSBEb1MtaW5nIFFVSUMgc2VydmVycyBpcyB0b28gZWFzeSA8bzpw PjwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4m bmJzcDs8L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGJyPg0KPGJyPg0K PG86cD48L286cD48L3A+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJn aW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5PbiBKdWwgMjIs IDIwMTksIGF0IDk6MTYgUE0sIFdhdHNvbiBMYWRkICZsdDs8YSBocmVmPSJtYWlsdG86d2F0c29u YmxhZGRAZ21haWwuY29tIj53YXRzb25ibGFkZEBnbWFpbC5jb208L2E+Jmd0OyB3cm90ZTo8bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286 cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMy41cHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhIj5PbiBNb24sIEp1bCAyMiwgMjAxOSBhdCA1 OjI5IFBNPGJyPg0KJmx0Ozwvc3Bhbj48YSBocmVmPSJtYWlsdG86YnJlbnQuYmlsZ2VyPTQwdmVy aXpvbi5jb21AZG1hcmMuaWV0Zi5vcmciPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTMuNXB0O2Zv bnQtZmFtaWx5OkhlbHZldGljYSI+YnJlbnQuYmlsZ2VyPTQwdmVyaXpvbi5jb21AZG1hcmMuaWV0 Zi5vcmc8L3NwYW4+PC9hPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTMuNXB0O2ZvbnQtZmFtaWx5 OkhlbHZldGljYSI+Jmd0OyB3cm90ZTo8YnIgc3R5bGU9ImNhcmV0LWNvbG9yOiByZ2IoMCwgMCwg MCk7Zm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDt0ZXh0LWFsaWduOnN0YXJ0Oy13ZWJraXQtdGV4 dC1zdHJva2Utd2lkdGg6IDBweDt3b3JkLXNwYWNpbmc6MHB4Ij4NCjxicj4NCjwvc3Bhbj48bzpw PjwvbzpwPjwvcD4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1i b3R0b206NS4wcHQiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMy41cHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhIj48YnI+DQo8YnI+DQo8YnI+DQpPbiBKdWwg MjIsIDIwMTksIGF0IDEwOjEwIEFNLCBSb2JlcnRvIFBlb24gJmx0OzxhIGhyZWY9Im1haWx0bzpm ZW5peEBmYi5jb20iPmZlbml4QGZiLmNvbTwvYT4mZ3Q7IHdyb3RlOjxicj4NCjxicj4NCldoZW4g eW914oCZcmUgdGFsa2luZyBhYm91dCBwcmUtYXV0aGVudGljYXRpb24sIGFyZSB5b3UgcmVmZXJy aW5nIHRvIHRoZSAwLXJ0dCBzdHVmZj88YnI+DQo8YnI+DQo8YnI+DQowLVJUVCBpcyBnb29kIHN0 dWZmLiBJdCByZWR1Y2VzIHRpbWUgZm9yIGEgZGV2aWNlIHRoYXTigJlzIGFscmVhZHkga25vd24g dG8gYmUgYXV0aG9yaXplZCB0byBjb25uZWN0IHRvIHRoZSBzZXJ2ZXIuPGJyPg0KPGJyPg0KUGFy dCBvZiB0aGUgcHJvYmxlbSBpcyB0byBzdG9wIHJlc291cmNlIERvUy4gVGhlIG90aGVyIHBhcnQg aXMgYWJvdXQgaW5mb3JtYXRpb24gbGVha2FnZS48YnI+DQo8YnI+DQpMZXTigJlzIGFzc3VtZSBh IHRpbWUgd2hlbiBhbGwgd2Vic2l0ZSB1c2UgUVVJQyBhbmQgbGV0J3MgdGFrZSBhbiBhZHZlcnNh cnkgd2hvIGhhcyBqdXN0IGxlYXJuZWQgYWJvdXQgYSB2dWxuZXJhYmlsaXR5IGluIFdvcmRwcmVz cy4gVGhlIGFkdmVyc2FyeSB3YW50cyB0byBzY2FuIHRoZSBJbnRlcm5ldCBmaW5kaW5nIFdvcmRw cmVzcyBzaXRlcy4gTm93LCBpZiB0aGUgUVVJQyBjb25uZWN0aW9uIHJlcXVpcmVkIHByZS1hdXRo ZW50aWNhdGlvbiwgdGhlbg0KIHRoZSBzZXJ2ZXIgd291bGQgYmUgYmxhY2sgdG8gdGhlIGNvbm5l Y3Rpb24gYW5kIHRoZSBhZHZlcnNhcnkgY291bGQgbm90IGRldGVybWluZSBpZiB0aGUgc2l0ZSB1 c2VzIFdvcmRwcmVzcy4gQnV0LCBhcyBpdCBzdGFuZHMgdG9kYXksIGluIHRoaXMgZnV0dXJlIHRp bWUsIHRoZSBhZHZlcnNhcnkgc2NhbnMgdGhlIEludGVybmV0LCBjb25uZWN0cyB0byB0aGUgc2Vy dmVyLCBhbmQgaXMgaGFuZGVkIGEgV29yZHByZXNzIGxvZ2luIHNjcmVlbi4gTm93DQogdGhlIGFk dmVyc2FyeSBrbm93cyB3aGVyZSB0byBhdHRhY2suPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9i bG9ja3F1b3RlPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox My41cHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhIj48YnI+DQpJZiBjb25uZWN0aW9uIHJlcXVpcmVz IHByZWF1dGhlbnRpY2F0aW9uIHRoZW4gbm8gb25lIGNhbiBzZWUgdGhlIHNpdGUsIG5vPzwvc3Bh bj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGJsb2NrcXVvdGUgc3R5 bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMy41cHQ7Zm9udC1mYW1pbHk6 SGVsdmV0aWNhIj48YnIgc3R5bGU9ImNhcmV0LWNvbG9yOiByZ2IoMCwgMCwgMCk7Zm9udC12YXJp YW50LWNhcHM6IG5vcm1hbDt0ZXh0LWFsaWduOnN0YXJ0Oy13ZWJraXQtdGV4dC1zdHJva2Utd2lk dGg6IDBweDt3b3JkLXNwYWNpbmc6MHB4Ij4NCjxicj4NCjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4N CjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQi Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMy41cHQ7Zm9u dC1mYW1pbHk6SGVsdmV0aWNhIj48YnI+DQpJbiB0aGUgZW50ZXJwcmlzZSBpdCBpcyBhIGxpdHRs ZSBkaWZmZXJlbnQuIENvbXBhbmllcyBpbXBsZW1lbnQgcmV2ZXJzZSBwcm94aWVzIHRvIHRyeSB0 byBwcm90ZWN0IHNlcnZlcnMgZnJvbSB1bmF1dGhvcml6ZWQgdXNlcnMuIEJ1dCB3aGF0IGlmIHRo ZSBzZXJ2ZXJzIHJlcXVpcmVkIGEgcHJlLWF1dGhlbnRpY2F0aW9uIHRva2VuLiBUaGVuLCByZXZl cnNlIHByb3hpZXMgd291bGQgbm90IGJlIG5lZWRlZC48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 L2Jsb2NrcXVvdGU+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEzLjVwdDtmb250LWZhbWlseTpIZWx2ZXRpY2EiPjxicj4NClNvIEkgdGhpbmsgdGhlcmUgYXJl IHR3byBkaWZmZXJlbnQgdGhpbmdzIGhlcmUsIG9yIG1heWJlIEknbSBtaXN1bmRlcnN0YW5kaW5n Ojxicj4NCjE6IFdlIGhhdmUgc2VydmVycyB0aGF0IGhhdmUgYSBsaW1pdGVkIG51bWJlciBvZiBj bGllbnRzIHRoYXQgd2lsbDxicj4NCmV2ZXIgd2FudCB0byBjb25uZWN0IHRvIHRoZW0sIGFuZCB3 YW50IHRvIGVuYWJsZSBvdGhlciBkZXZpY2VzIHRvPGJyPg0KZmlsdGVyIHRoZSB0cmFmZmljLCBz byBuZWVkIHNvbWUgbWVjaGFuaXNtIHRoYXQgZW5hYmxlcyBhIG1pZGRsZWJveCB0bzxicj4NCmZp bHRlci48L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+Tm8gbWlkZGxlIGJveCEgUHJlLWF1dGhlbnRpY2F0aW9uIG1ha2Vz IHNlcnZlcnMgc2VsZi1kZWZlbmRpbmcuIExhY2sgb2YgcHJlLWF1dGhlbnRpY2F0aW9uIGlzIHdo eSB3ZSBoYXZlIG1pZGRsZSBib3hlcy48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxicj4NCjxicj4NCjxvOnA+PC9vOnA+PC9wPg0KPGJsb2NrcXVv dGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMy41cHQ7Zm9udC1m YW1pbHk6SGVsdmV0aWNhIj4yOiBXZSBoYXZlIHNlcnZlcnMgZ2VuZXJhbGx5IGF2YWlsYWJsZSB0 byB0aGUgcHVibGljIGFuZCBhcmUgY29uY2VybmVkPGJyPg0KdGhhdCB0aGUgUVVJQyB2ZXJzaW9u IG9mIGEgU1lOIGZsb29kIGNhbid0IGJlIGRlYWx0IHdpdGggKGRlc3BpdGU8YnI+DQpldmlkZW5j ZSB0byB0aGUgY29udHJhcnkpLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9ibG9j a3F1b3RlPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9w Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5Db21wYW5pZXMgYW5kIHdlYnNpdGUgb3du ZXJzIGhhdmUgdG8gcGF5IGZvciBhbnRpLURvUyBzZXJ2aWNlcyZuYnNwO2Zyb20gdGhlIGxpa2Vz IG9mIFZlcml6b24gYW5kIG90aGVycyBCRUNBVVNFIHNlcnZlcnMgbGlzdGVuIHRvIGFsbCBjbGll bnRzLiBXaXRoIHByZS1hdXRoZW50aWNhdGlvbiwgdGhlIG5lZWQgdG8gaGF2ZSBhbiBhbnRpLURv UyBzZXJ2aWNlIHdvdWxkIGJlIGdyZWF0bHkgcmVkdWNlZCBiZWNhdXNlIHNlcnZlcnMNCiB3b3Vs ZCBub3QgcmVzcG9uZCB0byB1bmF1dGhvcml6ZWQgY2xpZW50cy48bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+QW5kIHRoZSBwb2ludCBhYm91dCBp bmZvcm1hdGlvbiBsZWFrYWdlIGlzIGltcG9ydGFudCwgdG9vLjxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5CcmVudDxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGJyPg0KPGJyPg0KPG86cD48L286 cD48L3A+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9t OjUuMHB0Ij4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjEzLjVwdDtmb250LWZhbWlseTpIZWx2ZXRpY2EiPjxicj4NCkkgZG9uJ3Qga25vdyBtdWNo IGFib3V0IGhvdyBDbG91ZGZsYXJlIChteSBwbGFjZSBvZiBlbXBsb3ltZW50KSAmbmJzcDtkZWFs czxicj4NCndpdGggMiBidXQgaG9wZWZ1bGx5IHNvbWUgcGVvcGxlIHdobyBkby9pbXBsZW1lbnRv cnMgY2FuIHNwZWFrIHVwPGJyPg0KYWJvdXQgaG93IG11Y2ggb2YgYSBwcm9ibGVtIGl0IGlzLiBC dXQgMSBpcyBJIHRoaW5rIHZlcnkgbXVjaCBhPGJyPg0Kbm9uZ29hbDogbWlkZGxlYm94IG9zc2lm aWNhdGlvbiBpcyBwYXJ0IG9mIHRoZSByZWFzb24gd2UgaGF2ZSBRVUlDLjxicj4NCjxicj4NClNp bmNlcmVseSw8YnI+DQpXYXRzb24gTGFkZDwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwv bzpwPjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibWFyZ2luLWJvdHRvbToxMy41cHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTMu NXB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYSI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMy41cHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEzLjVwdDtmb250LWZhbWlseTpIZWx2ZXRpY2EiPkJyZW50IEJsaWdlcjxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTMuNXB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYSI+RGlyZWN0b3It VGVjaG5vbG9neSZuYnNwO1Zlcml6b24gU0RQJm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMy41cHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhIj48YSBocmVmPSJtYWlsdG86YnJlbnQuYmls Z2VyQHZlcml6b24uY29tIj5icmVudC5iaWxnZXJAdmVyaXpvbi5jb208L2E+PG86cD48L286cD48 L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxOC4wcHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhIj48bzpwPiZuYnNwOzwv bzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTMuNXB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYSI+PG86cD4mbmJzcDs8L286 cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtYXJnaW4tYm90dG9tOjEyLjBwdCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4N CjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpw PiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWJvdHRvbToxMy41cHQiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTMuNXB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYTtjb2xvcjpibGFjayI+PG86cD4mbmJz cDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMy41cHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhO2NvbG9y OmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEzLjVwdDtmb250LWZhbWls eTpIZWx2ZXRpY2E7Y29sb3I6YmxhY2siPkJyZW50IEJsaWdlcjxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTMuNXB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYTtjb2xvcjpibGFjayI+RGlyZWN0b3It VGVjaG5vbG9neSZuYnNwO1Zlcml6b24gU0RQJm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMy41cHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhO2NvbG9yOmJsYWNrIj48YSBocmVmPSJtYWls dG86YnJlbnQuYmlsZ2VyQHZlcml6b24uY29tIj5icmVudC5iaWxnZXJAdmVyaXpvbi5jb208L2E+ PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxOC4wcHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhO2Nv bG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTMuNXB0O2ZvbnQtZmFtaWx5Okhl bHZldGljYTtjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+ DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tYm90dG9tOjEyLjBw dCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxv OnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_F46932B1942245D69262F0BAADA6A738fbcom_-- From nobody Tue Jul 23 07:53:57 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8598D120347 for ; Tue, 23 Jul 2019 07:53:46 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.996 X-Spam-Level: X-Spam-Status: No, score=-1.996 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DHR69I4rVjp1 for ; Tue, 23 Jul 2019 07:53:41 -0700 (PDT) Received: from mail-ed1-x534.google.com (mail-ed1-x534.google.com [IPv6:2a00:1450:4864:20::534]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 68A8D12034A for ; Tue, 23 Jul 2019 07:53:41 -0700 (PDT) Received: by mail-ed1-x534.google.com with SMTP id s49so9403979edb.1 for ; Tue, 23 Jul 2019 07:53:41 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:in-reply-to:references:mime-version:date:message-id:subject:to :cc; bh=riaBmdcgFhESFMykZhoFOq/PLW3Tr/xUUEGfMHbOCXY=; b=IGa0QkzUSuD533k7hIBAqf8ugijDQxwVIhamVVzK+M13Nl7d1RGxTiKTr0xbAYBmrj +iI3rtJPE2+gGCWa4R7aa2aowCNG1VbJ0tES8JYi+wg7EQd3l4gekLSNiYS/1NJHgGL7 4OeKbDEy5bvXK/GelxesD0HTWm5cnvmJXlql+nrUD3wyTyCoMJWaZSOBIU8Nca6s+9y1 z8XUeGCZv7qQiKBVct860611si+Cbt372d0cch+hsVeq8EYs4kNzAyfRVV+k5N2sPDfM l5ZX5GJFlLgWhMGjGp7al/kL16/o5+BmtkEht1HpSeXedTXoUCXkdHsZCePaEQOALeQa 8JCQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:in-reply-to:references:mime-version:date :message-id:subject:to:cc; bh=riaBmdcgFhESFMykZhoFOq/PLW3Tr/xUUEGfMHbOCXY=; b=nhLeQvJoRStCs6Kgzm4kdz14A/ar06IFXuNwjtMQGXrn3b+96tvldPZEp255OGqBNM XmAd8JnCQPGZpJydBZsAUUr9ObGZIrNDfPqliyYSMKGIKSc3iXYtJ5mgTaTCSlduL0Hq 8GGus7g5WtXmPcti+s6T3UxJKebZaNI1+fOeyCEFOrsNJTkNppTna/Az3hLHQOU/8P+h yuFN3A0Z0GrgWf9y6IuKeay3UNK5BW2RaPFnOk2UYrEz0vXuiT0461wmEoprbKWGgIQY 2NuNv4yjOcjqqhHZpnpA8NkoySNuhK1xCMFYXpM2Hp6QIVcqf2xITNEUHVeOEPmXiD6C +gnA== X-Gm-Message-State: APjAAAVhFeowR2QsgTXleJpxxRVE6k/fXlptxdsJ3NDl+8QrkrkZmM2R Ree6Jhv73M6Ag3nER3X/TfgVyN3ur4ID/Sf83uM= X-Google-Smtp-Source: APXvYqxAKPsU+1uOUKlhhvQsiFStWXL4Oblv6FKE/vdtVWFU8Ph/67+hwYZBGFjxVjfjpsXS2kjgsSTMHTsLBc3Ck1Y= X-Received: by 2002:a50:acc6:: with SMTP id x64mr67841030edc.100.1563893619950; Tue, 23 Jul 2019 07:53:39 -0700 (PDT) Received: from 1058052472880 named unknown by gmailapi.google.com with HTTPREST; Tue, 23 Jul 2019 07:53:38 -0700 From: =?UTF-8?Q?Mikkel_Fahn=C3=B8e_J=C3=B8rgensen?= In-Reply-To: References: <21E3AE84-02C5-4943-A88E-B62329E21002@one.verizon.com> <507D5DB7-EDF2-4429-A518-604A377F92D9@one.verizon.com> <9BF2DC9D-F14C-4451-9191-1A1557556691@fb.com> <9DC40032-3852-4237-A621-5C6B1102E74F@one.verizon.com> X-Mailer: Airmail (420) MIME-Version: 1.0 Date: Tue, 23 Jul 2019 07:53:38 -0700 Message-ID: Subject: Re: [E] DoS-ing QUIC servers is too easy To: Roberto Peon , "brent.bilger@verizon.com" Cc: Watson Ladd , "quic@ietf.org" , "brent.bilger=40verizon.com@dmarc.ietf.org" , Ian Swett Content-Type: multipart/alternative; boundary="000000000000af0b5e058e5a5b7b" Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 23 Jul 2019 14:53:56 -0000 --000000000000af0b5e058e5a5b7b Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable It is not that easy to steal a token and replay, but it can happen. If you add a time factor such an attack will have limited value. In fact a token need not be valid for more than about 10 minutes to account for skewed clocks. On 23 July 2019 at 16.41.09, Roberto Peon (fenix@fb.com) wrote: I=E2=80=99d assume #1 is less likely to experience crippling SYN-based DoS = attacks, and could otherwise be accomplished by limiting access in IP-space (imperfect, but we=E2=80=99re looking for =E2=80=9Cgood-enough=E2=80=9D, he= re). .. which means that I think we should consider 2+3 only, really. For #2 and #3, which I suspect have significant overlaps (sites may provide services both to logged-in users and users who aren=E2=80=99t logged in), t= he pre-authorization either: a) can be DoS=E2=80=99d itself. b) can be used to do a DoS in the future. In case b, as an attacker, you=E2=80=99d get or wait for the client to authenticate, then use that authentication in a replay attack, e.g. by replicating the auth token across many hosts. In cases where you are disallowed to replicate the auth token, e.g. because it is tied to a particular IP, you can help solve the replay attack however you=E2=80=99ll be biasing traffic to users whose IP is stable and who are l= ogged in/auth=E2=80=99d. In the pre-shared key scenario that was described, if any one client leaks the shared-secret, then it becomes not very useful and certainly doesn=E2= =80=99t protect against a DoS. I=E2=80=99d guess that the probability of the loss o= f a symmetric key is proportional to the breadth of the distribution of the key= . What I=E2=80=99m trying to point out is that this doesn=E2=80=99t really se= em to solve the generic DoS attack. You=E2=80=99ll still need to do some heuristics/rules based upon whatever i= s observable, at a minimum the 5-tuple. Getting more than the 5-tuple to be visible will take more work by the server, true, but given other design constraints, I don=E2=80=99t see how t= hat is avoidable. -=3DR *From: *"brent.bilger@verizon.com" *Date: *Tuesday, July 23, 2019 at 9:59 AM *To: *Roberto Peon *Cc: *"brent.bilger@verizon.com" , Watson Ladd < watsonbladd@gmail.com>, "brent.bilger=3D40verizon.com@dmarc.ietf.org" , "quic@ietf.org" , Ian Swett *Subject: *Re: [E] DoS-ing QUIC servers is too easy There are lots of possible scenarios, so please just consider these to be examples. Let=E2=80=99s divide the world of servers in to 1) enterprise business-to-business websites, 2) websites meant for consumers where authentication is desirable, and 3) websites that will want to allow their users to be anonymous, therefore, pre-authentication would not apply. Enterprise business-to-business websites could use something similar to the Software Defined Perimeter (SDP) Single Packet Authorization (SPA) protocol created by the Cloud Security Alliance. It uses the fact that clients are on-boarded to the system in a one time event to provide the clients with a shared secret key. The key is used in a counter-based HMAC calculation. Since only an authorized client can calculate the proper HMAC, the HMAC can be used for pre-authentication. Thus, the pre-authentication token could look something like this: Client->Server: ClientID, Counter, HMAC[ClientID || Counter, Ks] where Ks is a shared secret key that both the client and server have. On the server side, the server would recalculate the HMAC and compare it to the one provided by the client. Note that this information is sent from the client to the server in clear text (i.e., not encrypted). In practice, there would probably be more fields, but the important part is that the one-time on boarding enables a lifetime of pre-authentication tokens. Websites meant for consumers would probably be handled differently - specifically, no on-boarding. That means there would be some kind of token service - similar to OAuth, but operating prior to the TCP equivalent of SYN/ACK. Perhaps CloudFlair or Google or Microsoft could invent something like this and offer it as a service??? Again, there will be other websites that will not want pre-authentication because they want to allow anonymous users to their site. Brent On Jul 23, 2019, at 6:26 AM, Roberto Peon wrote: I'm trying to understand how anything was pre-authenticated without suffering from all of the same problems. How would such pre-authentication be done in practice, especially in scenarios where the server doesn't have a whitelist of clients, and that service desires traffic from non-malicious clients? -=3DR Get Outlook for Android ------------------------------ *From:* brent.bilger@verizon.com *Sent:* Tuesday, July 23, 2019 8:21:05 AM *To:* Watson Ladd *Cc:* brent.bilger=3D40verizon.com@dmarc.ietf.org < brent.bilger=3D40verizon.com@dmarc.ietf.org>; Roberto Peon ; quic@ietf.org ; brent.bilger@verizon.com < brent.bilger@verizon.com>; Ian Swett *Subject:* Re: [E] DoS-ing QUIC servers is too easy On Jul 22, 2019, at 9:16 PM, Watson Ladd wrote: On Mon, Jul 22, 2019 at 5:29 PM wrote: On Jul 22, 2019, at 10:10 AM, Roberto Peon wrote: When you=E2=80=99re talking about pre-authentication, are you referring to = the 0-rtt stuff? 0-RTT is good stuff. It reduces time for a device that=E2=80=99s already kn= own to be authorized to connect to the server. Part of the problem is to stop resource DoS. The other part is about information leakage. Let=E2=80=99s assume a time when all website use QUIC and let's take an adv= ersary who has just learned about a vulnerability in Wordpress. The adversary wants to scan the Internet finding Wordpress sites. Now, if the QUIC connection required pre-authentication, then the server would be black to the connection and the adversary could not determine if the site uses Wordpress. But, as it stands today, in this future time, the adversary scans the Internet, connects to the server, and is handed a Wordpress login screen. Now the adversary knows where to attack. If connection requires preauthentication then no one can see the site, no? In the enterprise it is a little different. Companies implement reverse proxies to try to protect servers from unauthorized users. But what if the servers required a pre-authentication token. Then, reverse proxies would not be needed. So I think there are two different things here, or maybe I'm misunderstanding: 1: We have servers that have a limited number of clients that will ever want to connect to them, and want to enable other devices to filter the traffic, so need some mechanism that enables a middlebox to filter. No middle box! Pre-authentication makes servers self-defending. Lack of pre-authentication is why we have middle boxes. 2: We have servers generally available to the public and are concerned that the QUIC version of a SYN flood can't be dealt with (despite evidence to the contrary). Companies and website owners have to pay for anti-DoS services from the likes of Verizon and others BECAUSE servers listen to all clients. With pre-authentication, the need to have an anti-DoS service would be greatly reduced because servers would not respond to unauthorized clients. And the point about information leakage is important, too. Brent I don't know much about how Cloudflare (my place of employment) deals with 2 but hopefully some people who do/implementors can speak up about how much of a problem it is. But 1 is I think very much a nongoal: middlebox ossification is part of the reason we have QUIC. Sincerely, Watson Ladd Brent Bliger Director-Technology Verizon SDP brent.bilger@verizon.com Brent Bliger Director-Technology Verizon SDP brent.bilger@verizon.com --000000000000af0b5e058e5a5b7b Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable = It is not that easy = to steal a token and replay, but it can happen.

If you add a time factor such an attack will hav= e limited value. In fact a token need not be valid for more than about 10 m= inutes to account for skewed clocks.

On 2= 3 July 2019 at 16.41.09, Roberto Peon (feni= x@fb.com) wrote:

I=E2=80=99d assume #1 is less likely to experience c= rippling SYN-based DoS attacks, and could otherwise be accomplished by limi= ting access in IP-space (imperfect, but we=E2=80=99re looking for =E2=80=9C= good-enough=E2=80=9D, here).


.. which means that I think we should consider 2+3 only, really.

For #2 and #3, which I suspect have significant overlaps (sites may provide= services both to logged-in users and users who aren=E2=80=99t logged in), = the pre-authorization either:
=C2=A0 a) can be DoS=E2=80=99d itself.
=C2=A0 b) can be used to do a DoS in the future.

In case b, as an attacker, you=E2=80=99d get or wait= for the client to authenticate, then use that authentication in a replay a= ttack, e.g. by replicating the auth token across many hosts.
In cases where you are disallowed to replicate the auth token, e.g. because= it is tied to a particular IP, you can help solve the replay attack howeve= r you=E2=80=99ll be biasing traffic to users whose IP is stable and who are= logged in/auth=E2=80=99d.
In the pre-shared key scenario that was described, if any one client leaks = the shared-secret, then it becomes not very useful and certainly doesn=E2= =80=99t protect against a DoS. I=E2=80=99d guess that the probability of th= e loss of a symmetric key is proportional to the breadth of the distribution of the key.

What I=E2=80=99m trying to point out is that this doesn=E2=80=99t really se= em to solve the generic DoS attack.
You=E2=80=99ll still need to do some heuristics/rules based upon whatever i= s observable, at a minimum the 5-tuple.
Getting more than the 5-tuple to be visible will take more work by the serv= er, true, but given other design constraints, I don=E2=80=99t see how that = is avoidable.

-=3DR

=C2=A0

From= : "brent.bilger@verizon.com" <brent.bilger@verizon.com> Date: Tuesday, July 23, 2019 at 9:59 AM
To: Roberto Peon <fenix@fb.com>
Cc: "brent.bilger@v= erizon.com" <brent.= bilger@verizon.com>, Watson Ladd <watsonbladd@gmail.com>, "brent.bilger=3D40verizon.com@dmarc.ietf.org" &= lt;brent.bilger=3D40verizon= .com@dmarc.ietf.org>, "quic@ie= tf.org" <quic@ietf.org>= , Ian Swett <ianswett=3D4= 0google.com@dmarc.ietf.org>
Subject: Re: [E] DoS-ing QUIC servers is too easy

=C2=A0

There are lots of possible scenarios, so please just= consider these to be examples. Let=E2=80=99s divide the world of servers i= n to 1) enterprise business-to-business websites, 2) websites meant for con= sumers where authentication is desirable, and 3) websites that will want to allow their users to be anonymous, there= fore, pre-authentication would not apply.

=C2=A0

Enterprise business-to-business websites could use s= omething similar to the Software Defined Perimeter (SDP) Single Packet Auth= orization (SPA) protocol created by the Cloud Security Alliance. It uses th= e fact that clients are on-boarded to the system in a one time event to provide the clients with a shared sec= ret key. The key is used in a counter-based HMAC calculation. Since only an= authorized client can calculate the proper HMAC, the HMAC can be used for = pre-authentication. Thus, the pre-authentication token could look something like this:

Client->Server: ClientID, Counter, HMAC[ClientID = || Counter, Ks] where Ks is a shared secret key that both the client and se= rver have.

On the server side, the server would recalculate the= HMAC and compare it to the one provided by the client.=C2=A0

Note that this information is sent from the client t= o the server in clear text (i.e., not encrypted).

In practice, there would probably be more fields, bu= t the important part is that the one-time on boarding enables a lifetime of= pre-authentication tokens.

=C2=A0

Websites meant for consumers would probably be handl= ed differently - specifically, no on-boarding. That means there would be so= me kind of token service - similar to OAuth, but operating prior to the TCP= equivalent of SYN/ACK. Perhaps CloudFlair or Google or Microsoft could invent something like this and offer it as a = service???

=C2=A0

Again, there will be other websites that will not wa= nt pre-authentication because they want to allow anonymous users to their s= ite.

=C2=A0

Brent



On Jul 23, 2019, at 6:26 AM, Roberto Peon <fenix@fb.com> wrote:

=C2=A0

I'm trying to understand how anythi= ng was pre-authenticated without suffering from all of the same problems.

How would such pre-authentication be do= ne in practice, especially in scenarios where the server doesn't have a= whitelist of clients, and that service desires traffic from non-malicious clients?

-=3DR

=C2=A0



On Jul 22, 2019, at 9:16 PM, Watson Ladd <watsonbladd@gmail.com> wrote:

=C2=A0

On Mon, Jul 22, 2019 at 5:29 PM
<<= span style=3D"font-size:13.5pt;font-family:Helvetica">brent.bilger=3D40veri= zon.com@dmarc.ietf.org> wrote:




On Jul 22, 2019, at 10:10 AM, Roberto Peon <fenix@fb.com> wrote:

When you=E2=80=99re talking about pre-authentication, are you referring to = the 0-rtt stuff?


0-RTT is good stuff. It reduces time for a device that=E2=80=99s already kn= own to be authorized to connect to the server.

Part of the problem is to stop resource DoS. The other part is about inform= ation leakage.

Let=E2=80=99s assume a time when all website use QUIC and let's take an= adversary who has just learned about a vulnerability in Wordpress. The adv= ersary wants to scan the Internet finding Wordpress sites. Now, if the QUIC= connection required pre-authentication, then the server would be black to the connection and the adversary could not de= termine if the site uses Wordpress. But, as it stands today, in this future= time, the adversary scans the Internet, connects to the server, and is han= ded a Wordpress login screen. Now the adversary knows where to attack.


If connection requires preauthentication then no one can see the site, no?<= /span>




In the enterprise it is a little different. Companies implement reverse pro= xies to try to protect servers from unauthorized users. But what if the ser= vers required a pre-authentication token. Then, reverse proxies would not b= e needed.


So I think there are two different things here, or maybe I'm misunderst= anding:
1: We have servers that have a limited number of clients that will
ever want to connect to them, and want to enable other devices to
filter the traffic, so need some mechanism that enables a middlebox to
filter.

=C2=A0

No middle box! Pre-authentication makes servers self= -defending. Lack of pre-authentication is why we have middle boxes.



2: We have servers generally available to the public and are concerned that the QUIC version of a SYN flood can't be dealt with (despite
evidence to the contrary).

=C2=A0

Companies and website owners have to pay for anti-Do= S services=C2=A0from the likes of Verizon and others BECAUSE servers listen= to all clients. With pre-authentication, the need to have an anti-DoS serv= ice would be greatly reduced because servers would not respond to unauthorized clients.

=C2=A0

And the point about information leakage is important= , too.

=C2=A0

Brent




I don't know much about how Cloudflare (my place of employment) =C2=A0d= eals
with 2 but hopefully some people who do/implementors can speak up
about how much of a problem it is. But 1 is I think very much a
nongoal: middlebox ossification is part of the reason we have QUIC.

Sincerely,
Watson Ladd

=C2=A0

=C2=A0

=C2=A0

Brent Bliger

Director-Technology=C2=A0Verizon SDP=C2=A0

=C2=A0

=C2=A0

=C2=A0

=C2=A0

=C2=A0

=C2=A0

=C2=A0

Brent Bliger

Director-Technology=C2=A0Verizon SDP=C2=A0

=C2=A0

=C2=A0

=C2=A0

=C2=A0

--000000000000af0b5e058e5a5b7b-- From nobody Tue Jul 23 08:01:45 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2A81812033A for ; Tue, 23 Jul 2019 08:01:36 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.698 X-Spam-Level: X-Spam-Status: No, score=-2.698 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=fb.com header.b=Vh52Hh5j; dkim=pass (1024-bit key) header.d=fb.onmicrosoft.com header.b=iZSH4ggR Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6vRDQkNWIvs7 for ; Tue, 23 Jul 2019 08:01:33 -0700 (PDT) Received: from mx0a-00082601.pphosted.com (mx0a-00082601.pphosted.com [67.231.145.42]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 61D071202D2 for ; Tue, 23 Jul 2019 08:01:26 -0700 (PDT) Received: from pps.filterd (m0044010.ppops.net [127.0.0.1]) by mx0a-00082601.pphosted.com (8.16.0.27/8.16.0.27) with SMTP id x6NF0UCC023560; Tue, 23 Jul 2019 08:01:23 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fb.com; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : mime-version; s=facebook; bh=6a1dF74eAV4/GxaDj5/AET9NA8zc6LYtqGq9pbflG/s=; b=Vh52Hh5jyL/bF6y208p8v19hBfC06S0smCDQ9lFtZCqDyGae7enoQxj4AWStRgOLE7fT pD374RcndpeAGXAd2AfM8tHhBTXlaiRblenyryBUva3V3Col6p2IH2hqae4bKtEMjYXT tLaT5f+juAsywknmnogTygPkiVlXbADed1g= Received: from mail.thefacebook.com (mailout.thefacebook.com [199.201.64.23]) by mx0a-00082601.pphosted.com with ESMTP id 2twqq1tdgm-3 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT); Tue, 23 Jul 2019 08:01:23 -0700 Received: from prn-hub05.TheFacebook.com (2620:10d:c081:35::129) by prn-hub05.TheFacebook.com (2620:10d:c081:35::129) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.1.1713.5; Tue, 23 Jul 2019 08:01:18 -0700 Received: from NAM05-DM3-obe.outbound.protection.outlook.com (192.168.54.28) by o365-in.thefacebook.com (192.168.16.29) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.1.1713.5 via Frontend Transport; Tue, 23 Jul 2019 08:01:18 -0700 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=OQHETQgmH0GvCyOu0ZAv0zcuJiOvxYwU74WfNd0y1fo4AIPNCJf8qreItXx0b5h9vC39x/CdA+oIdPyhLIKngPOJc4kRoBkA7GB5ypy0Oa2N+rR3xR40DnpRURpdvgWcPoX9EQuudZYFubw+bb6H+oDI327Lz4cGtluaiq9pTwj02vF2fCiIw0Utis2aTppffcXrI1h5IdIgs4e9iG/wjj8XORlZv4WFVfofjZLs+oeYowqFOFNmn+J4TShnq4vVarL0RIxKekae0Qq99LN14/r+iMTIkP9bspOpatmdUo5VU0Q8yJ2/0J9+Nc8ph8QPWxEHG1MS7XbB5Gl1rGqpMg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=6a1dF74eAV4/GxaDj5/AET9NA8zc6LYtqGq9pbflG/s=; b=VQhBc2ESvgeunSI5F6bHJuJmwon8WgIef1Gjdoer9M60Ri5Fntv+e3OjoAhVlt9e+rrHeMQ3+Hm5g/2EEEPXnZ1gSPYdpPf1aoAzQ9GKHCA8wZ847jY4+gZqz/CuyL3yi7GPVHWPFxET2hBUiHHEJiDa08NUvhkiD1rkKs7jHuSEaU5RPenAkK1x/zJl1osTKEHTRpoSA/kJV8RTQNV+SGd28uMEBH9JHnzyVOu93PO6bQzlAUVcFgxWJas3tBhS4FH1/leH8YUx93m6Si3ot8zk1Iyf0Wl9vK6Ouwxy07TpGAjLlGM8cJeIEsrQsbcTyqj6Lg2j+OnYAwg8xZij+w== ARC-Authentication-Results: i=1; mx.microsoft.com 1;spf=pass smtp.mailfrom=fb.com;dmarc=pass action=none header.from=fb.com;dkim=pass header.d=fb.com;arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fb.onmicrosoft.com; s=selector1-fb-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=6a1dF74eAV4/GxaDj5/AET9NA8zc6LYtqGq9pbflG/s=; b=iZSH4ggRQeeyPvZkuMB1kLlmfNoYVKehFrYXlpxnmHL90+uSf3yKk8i/fTV6sHRuTvSphvehNrqld5aZWOZVYqFyScU47jDxdps8uIG3DSPhX9svSxyp1Fpo/lTU4D9NynZCaRebyTLuAxmqXRYu41bNlhdYQtx3dcu0PyolVt0= Received: from CY4PR15MB1542.namprd15.prod.outlook.com (10.172.160.9) by CY4PR15MB1445.namprd15.prod.outlook.com (10.172.158.13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2073.14; Tue, 23 Jul 2019 15:01:17 +0000 Received: from CY4PR15MB1542.namprd15.prod.outlook.com ([fe80::35ce:8d12:c463:7cfc]) by CY4PR15MB1542.namprd15.prod.outlook.com ([fe80::35ce:8d12:c463:7cfc%12]) with mapi id 15.20.2094.013; Tue, 23 Jul 2019 15:01:16 +0000 From: Roberto Peon To: =?utf-8?B?TWlra2VsIEZhaG7DuGUgSsO4cmdlbnNlbg==?= , "brent.bilger@verizon.com" CC: Watson Ladd , "quic@ietf.org" , "brent.bilger=40verizon.com@dmarc.ietf.org" , Ian Swett Subject: Re: [E] DoS-ing QUIC servers is too easy Thread-Topic: [E] DoS-ing QUIC servers is too easy Thread-Index: AQHVQO2o7IJCZ4s53kuA0LJW4b7AGKbXmNEAgACHhoCAABFu5IAACeCA///IT4CAAEcCAP//vxQA Date: Tue, 23 Jul 2019 15:01:16 +0000 Message-ID: References: <21E3AE84-02C5-4943-A88E-B62329E21002@one.verizon.com> <507D5DB7-EDF2-4429-A518-604A377F92D9@one.verizon.com> <9BF2DC9D-F14C-4451-9191-1A1557556691@fb.com> <9DC40032-3852-4237-A621-5C6B1102E74F@one.verizon.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.1a.0.190609 x-originating-ip: [2001:67c:370:128:4e4:7d58:cf96:a6b8] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: ce536320-68ae-42f3-359c-08d70f7e9cf7 x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600148)(711020)(4605104)(1401327)(2017052603328)(7193020); SRVR:CY4PR15MB1445; x-ms-traffictypediagnostic: CY4PR15MB1445: x-ms-exchange-purlcount: 3 x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:4714; x-forefront-prvs: 0107098B6C x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(376002)(366004)(346002)(396003)(39860400002)(136003)(189003)(199004)(33656002)(6306002)(6246003)(6116002)(6486002)(236005)(6512007)(53936002)(790700001)(7736002)(68736007)(45080400002)(478600001)(76176011)(6436002)(54896002)(446003)(8676002)(46003)(36756003)(4326008)(76116006)(91956017)(2906002)(256004)(8936002)(2501003)(486006)(54906003)(110136005)(81166006)(6506007)(2616005)(66556008)(229853002)(53546011)(606006)(66574012)(66946007)(64756008)(66476007)(66446008)(71200400001)(86362001)(102836004)(476003)(81156014)(71190400001)(186003)(14454004)(14444005)(99286004)(25786009)(58126008)(5660300002)(11346002)(316002); DIR:OUT; SFP:1102; SCL:1; SRVR:CY4PR15MB1445; H:CY4PR15MB1542.namprd15.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: fb.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam-message-info: f/v9W0Go9OL2ktM8xtgHbZYJgIA6y9Ni5ocicHpb0l2bQPSGjw1igALtWYSMJM6+wfmdbK+Bk2KBH18laK7icKYQD7n8reElzRuIHKsAwYtZJ25BYZxUIzlqkioL9fOrKrVDEkfQlaiqLnZcX1sfnicDpNwT474SnEOp1sKGeKocoCLUaqZfXOXz9g03l/rUNqBrZaPOw4/EEq1A7KHcMyLHTT+i3jHtHr7+XsaC+ZWXtluadNuY2bw0MR/L31M3DFEKP4S70B/FbCCXNOGzvVXkYh8CVZQRDrDVQuWXjNOcxz/9Cvc8jqXOKVTfHJnkxBnHKN72UictXa/jpBqRX+8a3VfS58NKiIx5goL/BSiH9Geb+TOXKoGRDal+9DbSZUVlalOixNER2zyNqAc7UKmdJ/zsadY58ge0nvZoiIQ= Content-Type: multipart/alternative; boundary="_000_FB166018E21C4B11819DE77564F80EAFfbcom_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: ce536320-68ae-42f3-359c-08d70f7e9cf7 X-MS-Exchange-CrossTenant-originalarrivaltime: 23 Jul 2019 15:01:16.8587 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 8ae927fe-1255-47a7-a2af-5f3a069daaa2 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: fenix@fb.com X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY4PR15MB1445 X-OriginatorOrg: fb.com X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2019-07-23_06:, , signatures=0 X-Proofpoint-Spam-Details: rule=fb_default_notspam policy=fb_default score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1015 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1810050000 definitions=main-1907230150 X-FB-Internal: deliver Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 23 Jul 2019 15:01:44 -0000 --_000_FB166018E21C4B11819DE77564F80EAFfbcom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 V2l0aCBzaG9ydCB0aW1lb3V0cyBmb3IgdGhlIGF1dGgtdG9rZW4geW91IGhhdmUgYSByZXF1aXJl bWVudCB0byBhdXRoZW50aWNhdGUgb2Z0ZW4sIHdoaWNoIG1lYW5zIHRoYXQgYSBzaWduaWZpY2Fu dCBwZXJjZW50YWdlIG9mIHRoZSBwb3B1bGF0aW9uIG9mIGNsaWVudHMvdXNlcnMgd2lsbCBiZSB1 bmFibGUgdG8gY29ubmVjdCB3aGVuIHRoZSBhdXRoZW50aWNhdGlvbiBlbmRwb2ludCBpcyBEb1Pi gJlkLg0KDQpJZiwgdWx0aW1hdGVseSwgd2Uga2VlcCBuZWVkaW5nIHRvIGxvb2sgYXQgNS10dXBs ZXMgdG8gc29sdmUgdGhlIERvUywgdGhlbiB3aHkgaGF2ZSB0aGUgYWRkaXRpb25hbCBjb21wbGV4 aXR5IG9mIGFuIGFkZGl0aW9uYWwgc2VydmljZT8NCi09Ug0KDQpGcm9tOiBNaWtrZWwgRmFobsO4 ZSBKw7hyZ2Vuc2VuIDxtaWtrZWxmakBnbWFpbC5jb20+DQpEYXRlOiBUdWVzZGF5LCBKdWx5IDIz LCAyMDE5IGF0IDEwOjU0IEFNDQpUbzogUm9iZXJ0byBQZW9uIDxmZW5peEBmYi5jb20+LCAiYnJl bnQuYmlsZ2VyQHZlcml6b24uY29tIiA8YnJlbnQuYmlsZ2VyQHZlcml6b24uY29tPg0KQ2M6IFdh dHNvbiBMYWRkIDx3YXRzb25ibGFkZEBnbWFpbC5jb20+LCAicXVpY0BpZXRmLm9yZyIgPHF1aWNA aWV0Zi5vcmc+LCAiYnJlbnQuYmlsZ2VyPTQwdmVyaXpvbi5jb21AZG1hcmMuaWV0Zi5vcmciIDxi cmVudC5iaWxnZXI9NDB2ZXJpem9uLmNvbUBkbWFyYy5pZXRmLm9yZz4sIElhbiBTd2V0dCA8aWFu c3dldHQ9NDBnb29nbGUuY29tQGRtYXJjLmlldGYub3JnPg0KU3ViamVjdDogUmU6IFtFXSBEb1Mt aW5nIFFVSUMgc2VydmVycyBpcyB0b28gZWFzeQ0KDQpJdCBpcyBub3QgdGhhdCBlYXN5IHRvIHN0 ZWFsIGEgdG9rZW4gYW5kIHJlcGxheSwgYnV0IGl0IGNhbiBoYXBwZW4uDQoNCklmIHlvdSBhZGQg YSB0aW1lIGZhY3RvciBzdWNoIGFuIGF0dGFjayB3aWxsIGhhdmUgbGltaXRlZCB2YWx1ZS4gSW4g ZmFjdCBhIHRva2VuIG5lZWQgbm90IGJlIHZhbGlkIGZvciBtb3JlIHRoYW4gYWJvdXQgMTAgbWlu dXRlcyB0byBhY2NvdW50IGZvciBza2V3ZWQgY2xvY2tzLg0KDQoNCk9uIDIzIEp1bHkgMjAxOSBh dCAxNi40MS4wOSwgUm9iZXJ0byBQZW9uIChmZW5peEBmYi5jb208bWFpbHRvOmZlbml4QGZiLmNv bT4pIHdyb3RlOg0KSeKAmWQgYXNzdW1lICMxIGlzIGxlc3MgbGlrZWx5IHRvIGV4cGVyaWVuY2Ug Y3JpcHBsaW5nIFNZTi1iYXNlZCBEb1MgYXR0YWNrcywgYW5kIGNvdWxkIG90aGVyd2lzZSBiZSBh Y2NvbXBsaXNoZWQgYnkgbGltaXRpbmcgYWNjZXNzIGluIElQLXNwYWNlIChpbXBlcmZlY3QsIGJ1 dCB3ZeKAmXJlIGxvb2tpbmcgZm9yIOKAnGdvb2QtZW5vdWdo4oCdLCBoZXJlKS4NCg0KLi4gd2hp Y2ggbWVhbnMgdGhhdCBJIHRoaW5rIHdlIHNob3VsZCBjb25zaWRlciAyKzMgb25seSwgcmVhbGx5 Lg0KDQpGb3IgIzIgYW5kICMzLCB3aGljaCBJIHN1c3BlY3QgaGF2ZSBzaWduaWZpY2FudCBvdmVy bGFwcyAoc2l0ZXMgbWF5IHByb3ZpZGUgc2VydmljZXMgYm90aCB0byBsb2dnZWQtaW4gdXNlcnMg YW5kIHVzZXJzIHdobyBhcmVu4oCZdCBsb2dnZWQgaW4pLCB0aGUgcHJlLWF1dGhvcml6YXRpb24g ZWl0aGVyOg0KICBhKSBjYW4gYmUgRG9T4oCZZCBpdHNlbGYuDQogIGIpIGNhbiBiZSB1c2VkIHRv IGRvIGEgRG9TIGluIHRoZSBmdXR1cmUuDQpJbiBjYXNlIGIsIGFzIGFuIGF0dGFja2VyLCB5b3Xi gJlkIGdldCBvciB3YWl0IGZvciB0aGUgY2xpZW50IHRvIGF1dGhlbnRpY2F0ZSwgdGhlbiB1c2Ug dGhhdCBhdXRoZW50aWNhdGlvbiBpbiBhIHJlcGxheSBhdHRhY2ssIGUuZy4gYnkgcmVwbGljYXRp bmcgdGhlIGF1dGggdG9rZW4gYWNyb3NzIG1hbnkgaG9zdHMuDQpJbiBjYXNlcyB3aGVyZSB5b3Ug YXJlIGRpc2FsbG93ZWQgdG8gcmVwbGljYXRlIHRoZSBhdXRoIHRva2VuLCBlLmcuIGJlY2F1c2Ug aXQgaXMgdGllZCB0byBhIHBhcnRpY3VsYXIgSVAsIHlvdSBjYW4gaGVscCBzb2x2ZSB0aGUgcmVw bGF5IGF0dGFjayBob3dldmVyIHlvdeKAmWxsIGJlIGJpYXNpbmcgdHJhZmZpYyB0byB1c2VycyB3 aG9zZSBJUCBpcyBzdGFibGUgYW5kIHdobyBhcmUgbG9nZ2VkIGluL2F1dGjigJlkLg0KSW4gdGhl IHByZS1zaGFyZWQga2V5IHNjZW5hcmlvIHRoYXQgd2FzIGRlc2NyaWJlZCwgaWYgYW55IG9uZSBj bGllbnQgbGVha3MgdGhlIHNoYXJlZC1zZWNyZXQsIHRoZW4gaXQgYmVjb21lcyBub3QgdmVyeSB1 c2VmdWwgYW5kIGNlcnRhaW5seSBkb2VzbuKAmXQgcHJvdGVjdCBhZ2FpbnN0IGEgRG9TLiBJ4oCZ ZCBndWVzcyB0aGF0IHRoZSBwcm9iYWJpbGl0eSBvZiB0aGUgbG9zcyBvZiBhIHN5bW1ldHJpYyBr ZXkgaXMgcHJvcG9ydGlvbmFsIHRvIHRoZSBicmVhZHRoIG9mIHRoZSBkaXN0cmlidXRpb24gb2Yg dGhlIGtleS4NCg0KV2hhdCBJ4oCZbSB0cnlpbmcgdG8gcG9pbnQgb3V0IGlzIHRoYXQgdGhpcyBk b2VzbuKAmXQgcmVhbGx5IHNlZW0gdG8gc29sdmUgdGhlIGdlbmVyaWMgRG9TIGF0dGFjay4NCllv deKAmWxsIHN0aWxsIG5lZWQgdG8gZG8gc29tZSBoZXVyaXN0aWNzL3J1bGVzIGJhc2VkIHVwb24g d2hhdGV2ZXIgaXMgb2JzZXJ2YWJsZSwgYXQgYSBtaW5pbXVtIHRoZSA1LXR1cGxlLg0KR2V0dGlu ZyBtb3JlIHRoYW4gdGhlIDUtdHVwbGUgdG8gYmUgdmlzaWJsZSB3aWxsIHRha2UgbW9yZSB3b3Jr IGJ5IHRoZSBzZXJ2ZXIsIHRydWUsIGJ1dCBnaXZlbiBvdGhlciBkZXNpZ24gY29uc3RyYWludHMs IEkgZG9u4oCZdCBzZWUgaG93IHRoYXQgaXMgYXZvaWRhYmxlLg0KDQotPVINCg0KRnJvbTogImJy ZW50LmJpbGdlckB2ZXJpem9uLmNvbTxtYWlsdG86YnJlbnQuYmlsZ2VyQHZlcml6b24uY29tPiIg PGJyZW50LmJpbGdlckB2ZXJpem9uLmNvbTxtYWlsdG86YnJlbnQuYmlsZ2VyQHZlcml6b24uY29t Pj4NCkRhdGU6IFR1ZXNkYXksIEp1bHkgMjMsIDIwMTkgYXQgOTo1OSBBTQ0KVG86IFJvYmVydG8g UGVvbiA8ZmVuaXhAZmIuY29tPG1haWx0bzpmZW5peEBmYi5jb20+Pg0KQ2M6ICJicmVudC5iaWxn ZXJAdmVyaXpvbi5jb208bWFpbHRvOmJyZW50LmJpbGdlckB2ZXJpem9uLmNvbT4iIDxicmVudC5i aWxnZXJAdmVyaXpvbi5jb208bWFpbHRvOmJyZW50LmJpbGdlckB2ZXJpem9uLmNvbT4+LCBXYXRz b24gTGFkZCA8d2F0c29uYmxhZGRAZ21haWwuY29tPG1haWx0bzp3YXRzb25ibGFkZEBnbWFpbC5j b20+PiwgImJyZW50LmJpbGdlcj00MHZlcml6b24uY29tQGRtYXJjLmlldGYub3JnPG1haWx0bzo0 MHZlcml6b24uY29tQGRtYXJjLmlldGYub3JnPiIgPGJyZW50LmJpbGdlcj00MHZlcml6b24uY29t QGRtYXJjLmlldGYub3JnPG1haWx0bzo0MHZlcml6b24uY29tQGRtYXJjLmlldGYub3JnPj4sICJx dWljQGlldGYub3JnPG1haWx0bzpxdWljQGlldGYub3JnPiIgPHF1aWNAaWV0Zi5vcmc8bWFpbHRv OnF1aWNAaWV0Zi5vcmc+PiwgSWFuIFN3ZXR0IDxpYW5zd2V0dD00MGdvb2dsZS5jb21AZG1hcmMu aWV0Zi5vcmc8bWFpbHRvOjQwZ29vZ2xlLmNvbUBkbWFyYy5pZXRmLm9yZz4+DQpTdWJqZWN0OiBS ZTogW0VdIERvUy1pbmcgUVVJQyBzZXJ2ZXJzIGlzIHRvbyBlYXN5DQoNClRoZXJlIGFyZSBsb3Rz IG9mIHBvc3NpYmxlIHNjZW5hcmlvcywgc28gcGxlYXNlIGp1c3QgY29uc2lkZXIgdGhlc2UgdG8g YmUgZXhhbXBsZXMuIExldOKAmXMgZGl2aWRlIHRoZSB3b3JsZCBvZiBzZXJ2ZXJzIGluIHRvIDEp IGVudGVycHJpc2UgYnVzaW5lc3MtdG8tYnVzaW5lc3Mgd2Vic2l0ZXMsIDIpIHdlYnNpdGVzIG1l YW50IGZvciBjb25zdW1lcnMgd2hlcmUgYXV0aGVudGljYXRpb24gaXMgZGVzaXJhYmxlLCBhbmQg Mykgd2Vic2l0ZXMgdGhhdCB3aWxsIHdhbnQgdG8gYWxsb3cgdGhlaXIgdXNlcnMgdG8gYmUgYW5v bnltb3VzLCB0aGVyZWZvcmUsIHByZS1hdXRoZW50aWNhdGlvbiB3b3VsZCBub3QgYXBwbHkuDQoN CkVudGVycHJpc2UgYnVzaW5lc3MtdG8tYnVzaW5lc3Mgd2Vic2l0ZXMgY291bGQgdXNlIHNvbWV0 aGluZyBzaW1pbGFyIHRvIHRoZSBTb2Z0d2FyZSBEZWZpbmVkIFBlcmltZXRlciAoU0RQKSBTaW5n bGUgUGFja2V0IEF1dGhvcml6YXRpb24gKFNQQSkgcHJvdG9jb2wgY3JlYXRlZCBieSB0aGUgQ2xv dWQgU2VjdXJpdHkgQWxsaWFuY2UuIEl0IHVzZXMgdGhlIGZhY3QgdGhhdCBjbGllbnRzIGFyZSBv bi1ib2FyZGVkIHRvIHRoZSBzeXN0ZW0gaW4gYSBvbmUgdGltZSBldmVudCB0byBwcm92aWRlIHRo ZSBjbGllbnRzIHdpdGggYSBzaGFyZWQgc2VjcmV0IGtleS4gVGhlIGtleSBpcyB1c2VkIGluIGEg Y291bnRlci1iYXNlZCBITUFDIGNhbGN1bGF0aW9uLiBTaW5jZSBvbmx5IGFuIGF1dGhvcml6ZWQg Y2xpZW50IGNhbiBjYWxjdWxhdGUgdGhlIHByb3BlciBITUFDLCB0aGUgSE1BQyBjYW4gYmUgdXNl ZCBmb3IgcHJlLWF1dGhlbnRpY2F0aW9uLiBUaHVzLCB0aGUgcHJlLWF1dGhlbnRpY2F0aW9uIHRv a2VuIGNvdWxkIGxvb2sgc29tZXRoaW5nIGxpa2UgdGhpczoNCkNsaWVudC0+U2VydmVyOiBDbGll bnRJRCwgQ291bnRlciwgSE1BQ1tDbGllbnRJRCB8fCBDb3VudGVyLCBLc10gd2hlcmUgS3MgaXMg YSBzaGFyZWQgc2VjcmV0IGtleSB0aGF0IGJvdGggdGhlIGNsaWVudCBhbmQgc2VydmVyIGhhdmUu DQpPbiB0aGUgc2VydmVyIHNpZGUsIHRoZSBzZXJ2ZXIgd291bGQgcmVjYWxjdWxhdGUgdGhlIEhN QUMgYW5kIGNvbXBhcmUgaXQgdG8gdGhlIG9uZSBwcm92aWRlZCBieSB0aGUgY2xpZW50Lg0KTm90 ZSB0aGF0IHRoaXMgaW5mb3JtYXRpb24gaXMgc2VudCBmcm9tIHRoZSBjbGllbnQgdG8gdGhlIHNl cnZlciBpbiBjbGVhciB0ZXh0IChpLmUuLCBub3QgZW5jcnlwdGVkKS4NCkluIHByYWN0aWNlLCB0 aGVyZSB3b3VsZCBwcm9iYWJseSBiZSBtb3JlIGZpZWxkcywgYnV0IHRoZSBpbXBvcnRhbnQgcGFy dCBpcyB0aGF0IHRoZSBvbmUtdGltZSBvbiBib2FyZGluZyBlbmFibGVzIGEgbGlmZXRpbWUgb2Yg cHJlLWF1dGhlbnRpY2F0aW9uIHRva2Vucy4NCg0KV2Vic2l0ZXMgbWVhbnQgZm9yIGNvbnN1bWVy cyB3b3VsZCBwcm9iYWJseSBiZSBoYW5kbGVkIGRpZmZlcmVudGx5IC0gc3BlY2lmaWNhbGx5LCBu byBvbi1ib2FyZGluZy4gVGhhdCBtZWFucyB0aGVyZSB3b3VsZCBiZSBzb21lIGtpbmQgb2YgdG9r ZW4gc2VydmljZSAtIHNpbWlsYXIgdG8gT0F1dGgsIGJ1dCBvcGVyYXRpbmcgcHJpb3IgdG8gdGhl IFRDUCBlcXVpdmFsZW50IG9mIFNZTi9BQ0suIFBlcmhhcHMgQ2xvdWRGbGFpciBvciBHb29nbGUg b3IgTWljcm9zb2Z0IGNvdWxkIGludmVudCBzb21ldGhpbmcgbGlrZSB0aGlzIGFuZCBvZmZlciBp dCBhcyBhIHNlcnZpY2U/Pz8NCg0KQWdhaW4sIHRoZXJlIHdpbGwgYmUgb3RoZXIgd2Vic2l0ZXMg dGhhdCB3aWxsIG5vdCB3YW50IHByZS1hdXRoZW50aWNhdGlvbiBiZWNhdXNlIHRoZXkgd2FudCB0 byBhbGxvdyBhbm9ueW1vdXMgdXNlcnMgdG8gdGhlaXIgc2l0ZS4NCg0KQnJlbnQNCg0KT24gSnVs IDIzLCAyMDE5LCBhdCA2OjI2IEFNLCBSb2JlcnRvIFBlb24gPGZlbml4QGZiLmNvbTxtYWlsdG86 ZmVuaXhAZmIuY29tPj4gd3JvdGU6DQoNCkknbSB0cnlpbmcgdG8gdW5kZXJzdGFuZCBob3cgYW55 dGhpbmcgd2FzIHByZS1hdXRoZW50aWNhdGVkIHdpdGhvdXQgc3VmZmVyaW5nIGZyb20gYWxsIG9m IHRoZSBzYW1lIHByb2JsZW1zLg0KSG93IHdvdWxkIHN1Y2ggcHJlLWF1dGhlbnRpY2F0aW9uIGJl IGRvbmUgaW4gcHJhY3RpY2UsIGVzcGVjaWFsbHkgaW4gc2NlbmFyaW9zIHdoZXJlIHRoZSBzZXJ2 ZXIgZG9lc24ndCBoYXZlIGEgd2hpdGVsaXN0IG9mIGNsaWVudHMsIGFuZCB0aGF0IHNlcnZpY2Ug ZGVzaXJlcyB0cmFmZmljIGZyb20gbm9uLW1hbGljaW91cyBjbGllbnRzPw0KLT1SDQpHZXQgT3V0 bG9vayBmb3IgQW5kcm9pZDxodHRwczovL3VybGRlZmVuc2UucHJvb2Zwb2ludC5jb20vdjIvdXJs P3U9aHR0cHMtM0FfX2FrYS5tc19naGVpMzYmZD1Ed01GLWcmYz11ZEJUUnZGdlhDNURocWc3VUhw SmxQcHMzbVozTFJ4cGI2X18wUG9tQlRRJnI9Vy1PMHQwendoZ1hIUDh1anBoNnV6M3JIME10dWFM d0VyXzdnRTJwMVg1byZtPUNWLUhJaGJSVnAtYXJnaU5yVnVfREs3ck9OazV4dDlMNXIwRWZtdzE3 MEkmcz1XWGhqUTVjR2ZDcnc2QlNYZHE1anlkS0ViT0YyUHUzdGpMMlFaV1h6NmVZJmU9Pg0KDQpf X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KRnJvbTogYnJlbnQuYmlsZ2VyQHZlcml6 b24uY29tPG1haWx0bzpicmVudC5iaWxnZXJAdmVyaXpvbi5jb20+IDxicmVudC5iaWxnZXJAdmVy aXpvbi5jb208bWFpbHRvOmJyZW50LmJpbGdlckB2ZXJpem9uLmNvbT4+DQpTZW50OiBUdWVzZGF5 LCBKdWx5IDIzLCAyMDE5IDg6MjE6MDUgQU0NClRvOiBXYXRzb24gTGFkZCA8d2F0c29uYmxhZGRA Z21haWwuY29tPG1haWx0bzp3YXRzb25ibGFkZEBnbWFpbC5jb20+Pg0KQ2M6IGJyZW50LmJpbGdl cj00MHZlcml6b24uY29tQGRtYXJjLmlldGYub3JnPG1haWx0bzpicmVudC5iaWxnZXI9NDB2ZXJp em9uLmNvbUBkbWFyYy5pZXRmLm9yZz4gPGJyZW50LmJpbGdlcj00MHZlcml6b24uY29tQGRtYXJj LmlldGYub3JnPG1haWx0bzpicmVudC5iaWxnZXI9NDB2ZXJpem9uLmNvbUBkbWFyYy5pZXRmLm9y Zz4+OyBSb2JlcnRvIFBlb24gPGZlbml4QGZiLmNvbTxtYWlsdG86ZmVuaXhAZmIuY29tPj47IHF1 aWNAaWV0Zi5vcmc8bWFpbHRvOnF1aWNAaWV0Zi5vcmc+IDxxdWljQGlldGYub3JnPG1haWx0bzpx dWljQGlldGYub3JnPj47IGJyZW50LmJpbGdlckB2ZXJpem9uLmNvbTxtYWlsdG86YnJlbnQuYmls Z2VyQHZlcml6b24uY29tPiA8YnJlbnQuYmlsZ2VyQHZlcml6b24uY29tPG1haWx0bzpicmVudC5i aWxnZXJAdmVyaXpvbi5jb20+PjsgSWFuIFN3ZXR0IDxpYW5zd2V0dD00MGdvb2dsZS5jb21AZG1h cmMuaWV0Zi5vcmc8bWFpbHRvOmlhbnN3ZXR0PTQwZ29vZ2xlLmNvbUBkbWFyYy5pZXRmLm9yZz4+ DQpTdWJqZWN0OiBSZTogW0VdIERvUy1pbmcgUVVJQyBzZXJ2ZXJzIGlzIHRvbyBlYXN5DQoNCg0K DQpPbiBKdWwgMjIsIDIwMTksIGF0IDk6MTYgUE0sIFdhdHNvbiBMYWRkIDx3YXRzb25ibGFkZEBn bWFpbC5jb208bWFpbHRvOndhdHNvbmJsYWRkQGdtYWlsLmNvbT4+IHdyb3RlOg0KDQpPbiBNb24s IEp1bCAyMiwgMjAxOSBhdCA1OjI5IFBNDQo8YnJlbnQuYmlsZ2VyPTQwdmVyaXpvbi5jb21AZG1h cmMuaWV0Zi5vcmc8bWFpbHRvOmJyZW50LmJpbGdlcj00MHZlcml6b24uY29tQGRtYXJjLmlldGYu b3JnPj4gd3JvdGU6DQoNCg0KDQpPbiBKdWwgMjIsIDIwMTksIGF0IDEwOjEwIEFNLCBSb2JlcnRv IFBlb24gPGZlbml4QGZiLmNvbTxtYWlsdG86ZmVuaXhAZmIuY29tPj4gd3JvdGU6DQoNCldoZW4g eW914oCZcmUgdGFsa2luZyBhYm91dCBwcmUtYXV0aGVudGljYXRpb24sIGFyZSB5b3UgcmVmZXJy aW5nIHRvIHRoZSAwLXJ0dCBzdHVmZj8NCg0KDQowLVJUVCBpcyBnb29kIHN0dWZmLiBJdCByZWR1 Y2VzIHRpbWUgZm9yIGEgZGV2aWNlIHRoYXTigJlzIGFscmVhZHkga25vd24gdG8gYmUgYXV0aG9y aXplZCB0byBjb25uZWN0IHRvIHRoZSBzZXJ2ZXIuDQoNClBhcnQgb2YgdGhlIHByb2JsZW0gaXMg dG8gc3RvcCByZXNvdXJjZSBEb1MuIFRoZSBvdGhlciBwYXJ0IGlzIGFib3V0IGluZm9ybWF0aW9u IGxlYWthZ2UuDQoNCkxldOKAmXMgYXNzdW1lIGEgdGltZSB3aGVuIGFsbCB3ZWJzaXRlIHVzZSBR VUlDIGFuZCBsZXQncyB0YWtlIGFuIGFkdmVyc2FyeSB3aG8gaGFzIGp1c3QgbGVhcm5lZCBhYm91 dCBhIHZ1bG5lcmFiaWxpdHkgaW4gV29yZHByZXNzLiBUaGUgYWR2ZXJzYXJ5IHdhbnRzIHRvIHNj YW4gdGhlIEludGVybmV0IGZpbmRpbmcgV29yZHByZXNzIHNpdGVzLiBOb3csIGlmIHRoZSBRVUlD IGNvbm5lY3Rpb24gcmVxdWlyZWQgcHJlLWF1dGhlbnRpY2F0aW9uLCB0aGVuIHRoZSBzZXJ2ZXIg d291bGQgYmUgYmxhY2sgdG8gdGhlIGNvbm5lY3Rpb24gYW5kIHRoZSBhZHZlcnNhcnkgY291bGQg bm90IGRldGVybWluZSBpZiB0aGUgc2l0ZSB1c2VzIFdvcmRwcmVzcy4gQnV0LCBhcyBpdCBzdGFu ZHMgdG9kYXksIGluIHRoaXMgZnV0dXJlIHRpbWUsIHRoZSBhZHZlcnNhcnkgc2NhbnMgdGhlIElu dGVybmV0LCBjb25uZWN0cyB0byB0aGUgc2VydmVyLCBhbmQgaXMgaGFuZGVkIGEgV29yZHByZXNz IGxvZ2luIHNjcmVlbi4gTm93IHRoZSBhZHZlcnNhcnkga25vd3Mgd2hlcmUgdG8gYXR0YWNrLg0K DQpJZiBjb25uZWN0aW9uIHJlcXVpcmVzIHByZWF1dGhlbnRpY2F0aW9uIHRoZW4gbm8gb25lIGNh biBzZWUgdGhlIHNpdGUsIG5vPw0KDQoNCkluIHRoZSBlbnRlcnByaXNlIGl0IGlzIGEgbGl0dGxl IGRpZmZlcmVudC4gQ29tcGFuaWVzIGltcGxlbWVudCByZXZlcnNlIHByb3hpZXMgdG8gdHJ5IHRv IHByb3RlY3Qgc2VydmVycyBmcm9tIHVuYXV0aG9yaXplZCB1c2Vycy4gQnV0IHdoYXQgaWYgdGhl IHNlcnZlcnMgcmVxdWlyZWQgYSBwcmUtYXV0aGVudGljYXRpb24gdG9rZW4uIFRoZW4sIHJldmVy c2UgcHJveGllcyB3b3VsZCBub3QgYmUgbmVlZGVkLg0KDQpTbyBJIHRoaW5rIHRoZXJlIGFyZSB0 d28gZGlmZmVyZW50IHRoaW5ncyBoZXJlLCBvciBtYXliZSBJJ20gbWlzdW5kZXJzdGFuZGluZzoN CjE6IFdlIGhhdmUgc2VydmVycyB0aGF0IGhhdmUgYSBsaW1pdGVkIG51bWJlciBvZiBjbGllbnRz IHRoYXQgd2lsbA0KZXZlciB3YW50IHRvIGNvbm5lY3QgdG8gdGhlbSwgYW5kIHdhbnQgdG8gZW5h YmxlIG90aGVyIGRldmljZXMgdG8NCmZpbHRlciB0aGUgdHJhZmZpYywgc28gbmVlZCBzb21lIG1l Y2hhbmlzbSB0aGF0IGVuYWJsZXMgYSBtaWRkbGVib3ggdG8NCmZpbHRlci4NCg0KTm8gbWlkZGxl IGJveCEgUHJlLWF1dGhlbnRpY2F0aW9uIG1ha2VzIHNlcnZlcnMgc2VsZi1kZWZlbmRpbmcuIExh Y2sgb2YgcHJlLWF1dGhlbnRpY2F0aW9uIGlzIHdoeSB3ZSBoYXZlIG1pZGRsZSBib3hlcy4NCg0K MjogV2UgaGF2ZSBzZXJ2ZXJzIGdlbmVyYWxseSBhdmFpbGFibGUgdG8gdGhlIHB1YmxpYyBhbmQg YXJlIGNvbmNlcm5lZA0KdGhhdCB0aGUgUVVJQyB2ZXJzaW9uIG9mIGEgU1lOIGZsb29kIGNhbid0 IGJlIGRlYWx0IHdpdGggKGRlc3BpdGUNCmV2aWRlbmNlIHRvIHRoZSBjb250cmFyeSkuDQoNCkNv bXBhbmllcyBhbmQgd2Vic2l0ZSBvd25lcnMgaGF2ZSB0byBwYXkgZm9yIGFudGktRG9TIHNlcnZp Y2VzIGZyb20gdGhlIGxpa2VzIG9mIFZlcml6b24gYW5kIG90aGVycyBCRUNBVVNFIHNlcnZlcnMg bGlzdGVuIHRvIGFsbCBjbGllbnRzLiBXaXRoIHByZS1hdXRoZW50aWNhdGlvbiwgdGhlIG5lZWQg dG8gaGF2ZSBhbiBhbnRpLURvUyBzZXJ2aWNlIHdvdWxkIGJlIGdyZWF0bHkgcmVkdWNlZCBiZWNh dXNlIHNlcnZlcnMgd291bGQgbm90IHJlc3BvbmQgdG8gdW5hdXRob3JpemVkIGNsaWVudHMuDQoN CkFuZCB0aGUgcG9pbnQgYWJvdXQgaW5mb3JtYXRpb24gbGVha2FnZSBpcyBpbXBvcnRhbnQsIHRv by4NCg0KQnJlbnQNCg0KDQpJIGRvbid0IGtub3cgbXVjaCBhYm91dCBob3cgQ2xvdWRmbGFyZSAo bXkgcGxhY2Ugb2YgZW1wbG95bWVudCkgIGRlYWxzDQp3aXRoIDIgYnV0IGhvcGVmdWxseSBzb21l IHBlb3BsZSB3aG8gZG8vaW1wbGVtZW50b3JzIGNhbiBzcGVhayB1cA0KYWJvdXQgaG93IG11Y2gg b2YgYSBwcm9ibGVtIGl0IGlzLiBCdXQgMSBpcyBJIHRoaW5rIHZlcnkgbXVjaCBhDQpub25nb2Fs OiBtaWRkbGVib3ggb3NzaWZpY2F0aW9uIGlzIHBhcnQgb2YgdGhlIHJlYXNvbiB3ZSBoYXZlIFFV SUMuDQoNClNpbmNlcmVseSwNCldhdHNvbiBMYWRkDQoNCg0KDQpCcmVudCBCbGlnZXINCkRpcmVj dG9yLVRlY2hub2xvZ3kgVmVyaXpvbiBTRFANCmJyZW50LmJpbGdlckB2ZXJpem9uLmNvbTxtYWls dG86YnJlbnQuYmlsZ2VyQHZlcml6b24uY29tPg0KDQoNCg0KDQoNCg0KDQpCcmVudCBCbGlnZXIN CkRpcmVjdG9yLVRlY2hub2xvZ3kgVmVyaXpvbiBTRFANCmJyZW50LmJpbGdlckB2ZXJpem9uLmNv bTxtYWlsdG86YnJlbnQuYmlsZ2VyQHZlcml6b24uY29tPg0KDQoNCg0KDQo= --_000_FB166018E21C4B11819DE77564F80EAFfbcom_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPCEtLVtp ZiAhbXNvXT48c3R5bGU+dlw6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kb1w6KiB7 YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kd1w6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0 I1ZNTCk7fQ0KLnNoYXBlIHtiZWhhdmlvcjp1cmwoI2RlZmF1bHQjVk1MKTt9DQo8L3N0eWxlPjwh W2VuZGlmXS0tPjxzdHlsZT48IS0tDQovKiBGb250IERlZmluaXRpb25zICovDQpAZm9udC1mYWNl DQoJe2ZvbnQtZmFtaWx5OkhlbHZldGljYTsNCglwYW5vc2UtMTowIDAgMCAwIDAgMCAwIDAgMCAw O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6 MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7 DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAyIDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMg Ki8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBp bjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250LWZh bWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJ e21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1 bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFuLk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1z dHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpwdXJwbGU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVy bGluZTt9DQpwLm1zb25vcm1hbDAsIGxpLm1zb25vcm1hbDAsIGRpdi5tc29ub3JtYWwwDQoJe21z by1zdHlsZS1uYW1lOm1zb25vcm1hbDsNCgltc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzsNCgltYXJn aW4tcmlnaHQ6MGluOw0KCW1zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvOw0KCW1hcmdpbi1sZWZ0 OjBpbjsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNl cmlmO30NCnAuYWlybWFpbG9uLCBsaS5haXJtYWlsb24sIGRpdi5haXJtYWlsb24NCgl7bXNvLXN0 eWxlLW5hbWU6YWlybWFpbF9vbjsNCgltc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzsNCgltYXJnaW4t cmlnaHQ6MGluOw0KCW1zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvOw0KCW1hcmdpbi1sZWZ0OjBp bjsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlm O30NCnNwYW4uRW1haWxTdHlsZTE5DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsLXJlcGx5Ow0K CWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0K Lk1zb0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1zaXpl OjEwLjBwdDt9DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo4LjVpbiAxMS4waW47DQoJbWFy Z2luOjEuMGluIDEuMGluIDEuMGluIDEuMGluO30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpX b3JkU2VjdGlvbjE7fQ0KLS0+PC9zdHlsZT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNo YXBlZGVmYXVsdHMgdjpleHQ9ImVkaXQiIHNwaWRtYXg9IjEwMjYiIC8+DQo8L3htbD48IVtlbmRp Zl0tLT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlbGF5b3V0IHY6ZXh0PSJlZGl0 Ij4NCjxvOmlkbWFwIHY6ZXh0PSJlZGl0IiBkYXRhPSIxIiAvPg0KPC9vOnNoYXBlbGF5b3V0Pjwv eG1sPjwhW2VuZGlmXS0tPg0KPC9oZWFkPg0KPGJvZHkgbGFuZz0iRU4tVVMiIGxpbms9ImJsdWUi IHZsaW5rPSJwdXJwbGUiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPldpdGggc2hvcnQgdGltZW91dHMgZm9yIHRoZSBhdXRoLXRva2VuIHlvdSBoYXZl IGEgcmVxdWlyZW1lbnQgdG8gYXV0aGVudGljYXRlIG9mdGVuLCB3aGljaCBtZWFucyB0aGF0IGEg c2lnbmlmaWNhbnQgcGVyY2VudGFnZSBvZiB0aGUgcG9wdWxhdGlvbiBvZiBjbGllbnRzL3VzZXJz IHdpbGwgYmUgdW5hYmxlIHRvIGNvbm5lY3Qgd2hlbiB0aGUgYXV0aGVudGljYXRpb24gZW5kcG9p bnQgaXMgRG9T4oCZZC48YnI+DQo8YnI+DQpJZiwgdWx0aW1hdGVseSwgd2Uga2VlcCBuZWVkaW5n IHRvIGxvb2sgYXQgNS10dXBsZXMgdG8gc29sdmUgdGhlIERvUywgdGhlbiB3aHkgaGF2ZSB0aGUg YWRkaXRpb25hbCBjb21wbGV4aXR5IG9mIGFuIGFkZGl0aW9uYWwgc2VydmljZT88YnI+DQotPVI8 bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9w Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjQjVDNERGIDEuMHB0 O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Y29sb3I6YmxhY2siPkZyb206IDwvc3Bhbj48L2I+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Y29sb3I6YmxhY2siPk1pa2tlbCBGYWhuw7hl IErDuHJnZW5zZW4gJmx0O21pa2tlbGZqQGdtYWlsLmNvbSZndDs8YnI+DQo8Yj5EYXRlOiA8L2I+ VHVlc2RheSwgSnVseSAyMywgMjAxOSBhdCAxMDo1NCBBTTxicj4NCjxiPlRvOiA8L2I+Um9iZXJ0 byBQZW9uICZsdDtmZW5peEBmYi5jb20mZ3Q7LCAmcXVvdDticmVudC5iaWxnZXJAdmVyaXpvbi5j b20mcXVvdDsgJmx0O2JyZW50LmJpbGdlckB2ZXJpem9uLmNvbSZndDs8YnI+DQo8Yj5DYzogPC9i PldhdHNvbiBMYWRkICZsdDt3YXRzb25ibGFkZEBnbWFpbC5jb20mZ3Q7LCAmcXVvdDtxdWljQGll dGYub3JnJnF1b3Q7ICZsdDtxdWljQGlldGYub3JnJmd0OywgJnF1b3Q7YnJlbnQuYmlsZ2VyPTQw dmVyaXpvbi5jb21AZG1hcmMuaWV0Zi5vcmcmcXVvdDsgJmx0O2JyZW50LmJpbGdlcj00MHZlcml6 b24uY29tQGRtYXJjLmlldGYub3JnJmd0OywgSWFuIFN3ZXR0ICZsdDtpYW5zd2V0dD00MGdvb2ds ZS5jb21AZG1hcmMuaWV0Zi5vcmcmZ3Q7PGJyPg0KPGI+U3ViamVjdDogPC9iPlJlOiBbRV0gRG9T LWluZyBRVUlDIHNlcnZlcnMgaXMgdG9vIGVhc3k8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGRpdiBpZD0iYmxvb3BfY3VzdG9tZm9udCI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTpIZWx2ZXRpY2EiPkl0IGlz IG5vdCB0aGF0IGVhc3kgdG8gc3RlYWwgYSB0b2tlbiBhbmQgcmVwbGF5LCBidXQgaXQgY2FuIGhh cHBlbi48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXYgaWQ9ImJsb29wX2N1c3Rv bWZvbnQiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4w cHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8 L2Rpdj4NCjxkaXYgaWQ9ImJsb29wX2N1c3RvbWZvbnQiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhIj5JZiB5 b3UgYWRkIGEgdGltZSBmYWN0b3Igc3VjaCBhbiBhdHRhY2sgd2lsbCBoYXZlIGxpbWl0ZWQgdmFs dWUuIEluIGZhY3QgYSB0b2tlbiBuZWVkIG5vdCBiZSB2YWxpZCBmb3IgbW9yZSB0aGFuIGFib3V0 IDEwIG1pbnV0ZXMgdG8gYWNjb3VudCBmb3Igc2tld2VkIGNsb2Nrcy48bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9w Pg0KPHAgY2xhc3M9ImFpcm1haWxvbiI+T24gMjMgSnVseSAyMDE5IGF0IDE2LjQxLjA5LCBSb2Jl cnRvIFBlb24gKDxhIGhyZWY9Im1haWx0bzpmZW5peEBmYi5jb20iPmZlbml4QGZiLmNvbTwvYT4p IHdyb3RlOjxvOnA+PC9vOnA+PC9wPg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4w cHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0 b20tYWx0OmF1dG8iPknigJlkIGFzc3VtZSAjMSBpcyBsZXNzIGxpa2VseSB0byBleHBlcmllbmNl IGNyaXBwbGluZyBTWU4tYmFzZWQgRG9TIGF0dGFja3MsIGFuZCBjb3VsZCBvdGhlcndpc2UgYmUg YWNjb21wbGlzaGVkIGJ5IGxpbWl0aW5nIGFjY2VzcyBpbiBJUC1zcGFjZSAoaW1wZXJmZWN0LCBi dXQgd2XigJlyZSBsb29raW5nIGZvcg0KIOKAnGdvb2QtZW5vdWdo4oCdLCBoZXJlKS48bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6 YXV0bzttYXJnaW4tYm90dG9tOjEyLjBwdCI+PGJyPg0KLi4gd2hpY2ggbWVhbnMgdGhhdCBJIHRo aW5rIHdlIHNob3VsZCBjb25zaWRlciAyJiM0MzszIG9ubHksIHJlYWxseS48YnI+DQo8YnI+DQpG b3IgIzIgYW5kICMzLCB3aGljaCBJIHN1c3BlY3QgaGF2ZSBzaWduaWZpY2FudCBvdmVybGFwcyAo c2l0ZXMgbWF5IHByb3ZpZGUgc2VydmljZXMgYm90aCB0byBsb2dnZWQtaW4gdXNlcnMgYW5kIHVz ZXJzIHdobyBhcmVu4oCZdCBsb2dnZWQgaW4pLCB0aGUgcHJlLWF1dGhvcml6YXRpb24gZWl0aGVy Ojxicj4NCiZuYnNwOyBhKSBjYW4gYmUgRG9T4oCZZCBpdHNlbGYuPGJyPg0KJm5ic3A7IGIpIGNh biBiZSB1c2VkIHRvIGRvIGEgRG9TIGluIHRoZSBmdXR1cmUuPG86cD48L286cD48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdp bi1ib3R0b20tYWx0OmF1dG8iPkluIGNhc2UgYiwgYXMgYW4gYXR0YWNrZXIsIHlvdeKAmWQgZ2V0 IG9yIHdhaXQgZm9yIHRoZSBjbGllbnQgdG8gYXV0aGVudGljYXRlLCB0aGVuIHVzZSB0aGF0IGF1 dGhlbnRpY2F0aW9uIGluIGEgcmVwbGF5IGF0dGFjaywgZS5nLiBieSByZXBsaWNhdGluZyB0aGUg YXV0aCB0b2tlbiBhY3Jvc3MgbWFueSBob3N0cy48YnI+DQpJbiBjYXNlcyB3aGVyZSB5b3UgYXJl IGRpc2FsbG93ZWQgdG8gcmVwbGljYXRlIHRoZSBhdXRoIHRva2VuLCBlLmcuIGJlY2F1c2UgaXQg aXMgdGllZCB0byBhIHBhcnRpY3VsYXIgSVAsIHlvdSBjYW4gaGVscCBzb2x2ZSB0aGUgcmVwbGF5 IGF0dGFjayBob3dldmVyIHlvdeKAmWxsIGJlIGJpYXNpbmcgdHJhZmZpYyB0byB1c2VycyB3aG9z ZSBJUCBpcyBzdGFibGUgYW5kIHdobyBhcmUgbG9nZ2VkIGluL2F1dGjigJlkLjxicj4NCkluIHRo ZSBwcmUtc2hhcmVkIGtleSBzY2VuYXJpbyB0aGF0IHdhcyBkZXNjcmliZWQsIGlmIGFueSBvbmUg Y2xpZW50IGxlYWtzIHRoZSBzaGFyZWQtc2VjcmV0LCB0aGVuIGl0IGJlY29tZXMgbm90IHZlcnkg dXNlZnVsIGFuZCBjZXJ0YWlubHkgZG9lc27igJl0IHByb3RlY3QgYWdhaW5zdCBhIERvUy4gSeKA mWQgZ3Vlc3MgdGhhdCB0aGUgcHJvYmFiaWxpdHkgb2YgdGhlIGxvc3Mgb2YgYSBzeW1tZXRyaWMg a2V5IGlzIHByb3BvcnRpb25hbCB0byB0aGUgYnJlYWR0aA0KIG9mIHRoZSBkaXN0cmlidXRpb24g b2YgdGhlIGtleS48YnI+DQo8YnI+DQpXaGF0IEnigJltIHRyeWluZyB0byBwb2ludCBvdXQgaXMg dGhhdCB0aGlzIGRvZXNu4oCZdCByZWFsbHkgc2VlbSB0byBzb2x2ZSB0aGUgZ2VuZXJpYyBEb1Mg YXR0YWNrLjxicj4NCllvdeKAmWxsIHN0aWxsIG5lZWQgdG8gZG8gc29tZSBoZXVyaXN0aWNzL3J1 bGVzIGJhc2VkIHVwb24gd2hhdGV2ZXIgaXMgb2JzZXJ2YWJsZSwgYXQgYSBtaW5pbXVtIHRoZSA1 LXR1cGxlLjxicj4NCkdldHRpbmcgbW9yZSB0aGFuIHRoZSA1LXR1cGxlIHRvIGJlIHZpc2libGUg d2lsbCB0YWtlIG1vcmUgd29yayBieSB0aGUgc2VydmVyLCB0cnVlLCBidXQgZ2l2ZW4gb3RoZXIg ZGVzaWduIGNvbnN0cmFpbnRzLCBJIGRvbuKAmXQgc2VlIGhvdyB0aGF0IGlzIGF2b2lkYWJsZS48 YnI+DQo8YnI+DQotPVI8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5i c3A7PG86cD48L286cD48L3A+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNv bGlkICNCNUM0REYgMS4wcHQ7cGFkZGluZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0 b20tYWx0OmF1dG8iPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2NvbG9yOmJsYWNr Ij5Gcm9tOg0KPC9zcGFuPjwvYj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtjb2xvcjpi bGFjayI+JnF1b3Q7PGEgaHJlZj0ibWFpbHRvOmJyZW50LmJpbGdlckB2ZXJpem9uLmNvbSI+YnJl bnQuYmlsZ2VyQHZlcml6b24uY29tPC9hPiZxdW90OyAmbHQ7PGEgaHJlZj0ibWFpbHRvOmJyZW50 LmJpbGdlckB2ZXJpem9uLmNvbSI+YnJlbnQuYmlsZ2VyQHZlcml6b24uY29tPC9hPiZndDs8YnI+ DQo8Yj5EYXRlOiA8L2I+VHVlc2RheSwgSnVseSAyMywgMjAxOSBhdCA5OjU5IEFNPGJyPg0KPGI+ VG86IDwvYj5Sb2JlcnRvIFBlb24gJmx0OzxhIGhyZWY9Im1haWx0bzpmZW5peEBmYi5jb20iPmZl bml4QGZiLmNvbTwvYT4mZ3Q7PGJyPg0KPGI+Q2M6IDwvYj4mcXVvdDs8YSBocmVmPSJtYWlsdG86 YnJlbnQuYmlsZ2VyQHZlcml6b24uY29tIj5icmVudC5iaWxnZXJAdmVyaXpvbi5jb208L2E+JnF1 b3Q7ICZsdDs8YSBocmVmPSJtYWlsdG86YnJlbnQuYmlsZ2VyQHZlcml6b24uY29tIj5icmVudC5i aWxnZXJAdmVyaXpvbi5jb208L2E+Jmd0OywgV2F0c29uIExhZGQgJmx0OzxhIGhyZWY9Im1haWx0 bzp3YXRzb25ibGFkZEBnbWFpbC5jb20iPndhdHNvbmJsYWRkQGdtYWlsLmNvbTwvYT4mZ3Q7LCAm cXVvdDticmVudC5iaWxnZXI9PGEgaHJlZj0ibWFpbHRvOjQwdmVyaXpvbi5jb21AZG1hcmMuaWV0 Zi5vcmciPjQwdmVyaXpvbi5jb21AZG1hcmMuaWV0Zi5vcmc8L2E+JnF1b3Q7DQogJmx0O2JyZW50 LmJpbGdlcj08YSBocmVmPSJtYWlsdG86NDB2ZXJpem9uLmNvbUBkbWFyYy5pZXRmLm9yZyI+NDB2 ZXJpem9uLmNvbUBkbWFyYy5pZXRmLm9yZzwvYT4mZ3Q7LCAmcXVvdDs8YSBocmVmPSJtYWlsdG86 cXVpY0BpZXRmLm9yZyI+cXVpY0BpZXRmLm9yZzwvYT4mcXVvdDsgJmx0OzxhIGhyZWY9Im1haWx0 bzpxdWljQGlldGYub3JnIj5xdWljQGlldGYub3JnPC9hPiZndDssIElhbiBTd2V0dCAmbHQ7aWFu c3dldHQ9PGEgaHJlZj0ibWFpbHRvOjQwZ29vZ2xlLmNvbUBkbWFyYy5pZXRmLm9yZyI+NDBnb29n bGUuY29tQGRtYXJjLmlldGYub3JnPC9hPiZndDs8YnI+DQo8Yj5TdWJqZWN0OiA8L2I+UmU6IFtF XSBEb1MtaW5nIFFVSUMgc2VydmVycyBpcyB0b28gZWFzeTwvc3Bhbj48bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRv cC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1h bHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+VGhlcmUgYXJlIGxvdHMgb2YgcG9z c2libGUgc2NlbmFyaW9zLCBzbyBwbGVhc2UganVzdCBjb25zaWRlciB0aGVzZSB0byBiZSBleGFt cGxlcy4gTGV04oCZcyBkaXZpZGUgdGhlIHdvcmxkIG9mIHNlcnZlcnMgaW4gdG8gMSkgZW50ZXJw cmlzZSBidXNpbmVzcy10by1idXNpbmVzcyB3ZWJzaXRlcywgMikgd2Vic2l0ZXMNCiBtZWFudCBm b3IgY29uc3VtZXJzIHdoZXJlIGF1dGhlbnRpY2F0aW9uIGlzIGRlc2lyYWJsZSwgYW5kIDMpIHdl YnNpdGVzIHRoYXQgd2lsbCB3YW50IHRvIGFsbG93IHRoZWlyIHVzZXJzIHRvIGJlIGFub255bW91 cywgdGhlcmVmb3JlLCBwcmUtYXV0aGVudGljYXRpb24gd291bGQgbm90IGFwcGx5Lg0KPG86cD48 L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4t dG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFy Z2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+RW50ZXJwcmlzZSBi dXNpbmVzcy10by1idXNpbmVzcyB3ZWJzaXRlcyBjb3VsZCB1c2Ugc29tZXRoaW5nIHNpbWlsYXIg dG8gdGhlIFNvZnR3YXJlIERlZmluZWQgUGVyaW1ldGVyIChTRFApIFNpbmdsZSBQYWNrZXQgQXV0 aG9yaXphdGlvbiAoU1BBKSBwcm90b2NvbCBjcmVhdGVkIGJ5IHRoZSBDbG91ZCBTZWN1cml0eQ0K IEFsbGlhbmNlLiBJdCB1c2VzIHRoZSBmYWN0IHRoYXQgY2xpZW50cyBhcmUgb24tYm9hcmRlZCB0 byB0aGUgc3lzdGVtIGluIGEgb25lIHRpbWUgZXZlbnQgdG8gcHJvdmlkZSB0aGUgY2xpZW50cyB3 aXRoIGEgc2hhcmVkIHNlY3JldCBrZXkuIFRoZSBrZXkgaXMgdXNlZCBpbiBhIGNvdW50ZXItYmFz ZWQgSE1BQyBjYWxjdWxhdGlvbi4gU2luY2Ugb25seSBhbiBhdXRob3JpemVkIGNsaWVudCBjYW4g Y2FsY3VsYXRlIHRoZSBwcm9wZXIgSE1BQywgdGhlDQogSE1BQyBjYW4gYmUgdXNlZCBmb3IgcHJl LWF1dGhlbnRpY2F0aW9uLiBUaHVzLCB0aGUgcHJlLWF1dGhlbnRpY2F0aW9uIHRva2VuIGNvdWxk IGxvb2sgc29tZXRoaW5nIGxpa2UgdGhpczo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28t bWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Q2xpZW50LSZndDtTZXJ2ZXI6IENsaWVudElELCBDb3Vu dGVyLCBITUFDW0NsaWVudElEIHx8IENvdW50ZXIsIEtzXSB3aGVyZSBLcyBpcyBhIHNoYXJlZCBz ZWNyZXQga2V5IHRoYXQgYm90aCB0aGUgY2xpZW50IGFuZCBzZXJ2ZXIgaGF2ZS48bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFy Z2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+T24gdGhlIHNlcnZl ciBzaWRlLCB0aGUgc2VydmVyIHdvdWxkIHJlY2FsY3VsYXRlIHRoZSBITUFDIGFuZCBjb21wYXJl IGl0IHRvIHRoZSBvbmUgcHJvdmlkZWQgYnkgdGhlIGNsaWVudC4mbmJzcDs8bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2lu LXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Tm90ZSB0aGF0IHRoaXMg aW5mb3JtYXRpb24gaXMgc2VudCBmcm9tIHRoZSBjbGllbnQgdG8gdGhlIHNlcnZlciBpbiBjbGVh ciB0ZXh0IChpLmUuLCBub3QgZW5jcnlwdGVkKS48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bztt c28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+SW4gcHJhY3RpY2UsIHRoZXJlIHdvdWxkIHByb2Jh Ymx5IGJlIG1vcmUgZmllbGRzLCBidXQgdGhlIGltcG9ydGFudCBwYXJ0IGlzIHRoYXQgdGhlIG9u ZS10aW1lIG9uIGJvYXJkaW5nIGVuYWJsZXMgYSBsaWZldGltZSBvZiBwcmUtYXV0aGVudGljYXRp b24gdG9rZW5zLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFs dDphdXRvIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRv bS1hbHQ6YXV0byI+V2Vic2l0ZXMgbWVhbnQgZm9yIGNvbnN1bWVycyB3b3VsZCBwcm9iYWJseSBi ZSBoYW5kbGVkIGRpZmZlcmVudGx5IC0gc3BlY2lmaWNhbGx5LCBubyBvbi1ib2FyZGluZy4gVGhh dCBtZWFucyB0aGVyZSB3b3VsZCBiZSBzb21lIGtpbmQgb2YgdG9rZW4gc2VydmljZSAtIHNpbWls YXIgdG8gT0F1dGgsIGJ1dCBvcGVyYXRpbmcNCiBwcmlvciB0byB0aGUgVENQIGVxdWl2YWxlbnQg b2YgU1lOL0FDSy4gUGVyaGFwcyBDbG91ZEZsYWlyIG9yIEdvb2dsZSBvciBNaWNyb3NvZnQgY291 bGQgaW52ZW50IHNvbWV0aGluZyBsaWtlIHRoaXMgYW5kIG9mZmVyIGl0IGFzIGEgc2VydmljZT8/ PzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4m bmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0 byI+QWdhaW4sIHRoZXJlIHdpbGwgYmUgb3RoZXIgd2Vic2l0ZXMgdGhhdCB3aWxsIG5vdCB3YW50 IHByZS1hdXRoZW50aWNhdGlvbiBiZWNhdXNlIHRoZXkgd2FudCB0byBhbGxvdyBhbm9ueW1vdXMg dXNlcnMgdG8gdGhlaXIgc2l0ZS48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2lu LWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1h cmdpbi1ib3R0b20tYWx0OmF1dG8iPkJyZW50PG86cD48L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21hcmdpbi1ib3R0 b206MTIuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJn aW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1h bHQ6YXV0byI+T24gSnVsIDIzLCAyMDE5LCBhdCA2OjI2IEFNLCBSb2JlcnRvIFBlb24gJmx0Ozxh IGhyZWY9Im1haWx0bzpmZW5peEBmYi5jb20iPmZlbml4QGZiLmNvbTwvYT4mZ3Q7IHdyb3RlOjxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1h cmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPiZuYnNwOzxvOnA+ PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21hcmdpbi1ib3R0b206MTIuMHB0Ij48c3BhbiBz dHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZiI+SSdtIHRyeWlu ZyB0byB1bmRlcnN0YW5kIGhvdyBhbnl0aGluZyB3YXMgcHJlLWF1dGhlbnRpY2F0ZWQgd2l0aG91 dCBzdWZmZXJpbmcgZnJvbSBhbGwgb2YgdGhlIHNhbWUgcHJvYmxlbXMuPC9zcGFuPjxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1t YXJnaW4tdG9wLWFsdDphdXRvO21hcmdpbi1ib3R0b206MTIuMHB0Ij48c3BhbiBzdHlsZT0iZm9u dC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZiI+SG93IHdvdWxkIHN1Y2ggcHJl LWF1dGhlbnRpY2F0aW9uIGJlIGRvbmUgaW4gcHJhY3RpY2UsIGVzcGVjaWFsbHkgaW4gc2NlbmFy aW9zIHdoZXJlIHRoZSBzZXJ2ZXIgZG9lc24ndCBoYXZlIGEgd2hpdGVsaXN0IG9mIGNsaWVudHMs IGFuZCB0aGF0DQogc2VydmljZSBkZXNpcmVzIHRyYWZmaWMgZnJvbSBub24tbWFsaWNpb3VzIGNs aWVudHM/PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21hcmdpbi1ib3R0b206MTIu MHB0Ij48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJp ZiI+LT1SPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2lu LWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1 b3Q7LHNhbnMtc2VyaWYiPkdldA0KPGEgaHJlZj0iaHR0cHM6Ly91cmxkZWZlbnNlLnByb29mcG9p bnQuY29tL3YyL3VybD91PWh0dHBzLTNBX19ha2EubXNfZ2hlaTM2JmFtcDtkPUR3TUYtZyZhbXA7 Yz11ZEJUUnZGdlhDNURocWc3VUhwSmxQcHMzbVozTFJ4cGI2X18wUG9tQlRRJmFtcDtyPVctTzB0 MHp3aGdYSFA4dWpwaDZ1ejNySDBNdHVhTHdFcl83Z0UycDFYNW8mYW1wO209Q1YtSEloYlJWcC1h cmdpTnJWdV9ESzdyT05rNXh0OUw1cjBFZm13MTcwSSZhbXA7cz1XWGhqUTVjR2ZDcnc2QlNYZHE1 anlkS0ViT0YyUHUzdGpMMlFaV1h6NmVZJmFtcDtlPSI+DQpPdXRsb29rIGZvciBBbmRyb2lkPC9h Pjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48 c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZiI+Jm5i c3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSJNc29Ob3JtYWwi IGFsaWduPSJjZW50ZXIiIHN0eWxlPSJ0ZXh0LWFsaWduOmNlbnRlciI+DQo8aHIgc2l6ZT0iMCIg d2lkdGg9IjEwMCUiIGFsaWduPSJjZW50ZXIiPg0KPC9kaXY+DQo8ZGl2IGlkPSJkaXZScGx5Rndk TXNnIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0 bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PGI+RnJvbTo8L2I+DQo8YSBocmVmPSJtYWls dG86YnJlbnQuYmlsZ2VyQHZlcml6b24uY29tIj5icmVudC5iaWxnZXJAdmVyaXpvbi5jb208L2E+ ICZsdDs8YSBocmVmPSJtYWlsdG86YnJlbnQuYmlsZ2VyQHZlcml6b24uY29tIj5icmVudC5iaWxn ZXJAdmVyaXpvbi5jb208L2E+Jmd0Ozxicj4NCjxiPlNlbnQ6PC9iPiBUdWVzZGF5LCBKdWx5IDIz LCAyMDE5IDg6MjE6MDUgQU08YnI+DQo8Yj5Ubzo8L2I+IFdhdHNvbiBMYWRkICZsdDs8YSBocmVm PSJtYWlsdG86d2F0c29uYmxhZGRAZ21haWwuY29tIj53YXRzb25ibGFkZEBnbWFpbC5jb208L2E+ Jmd0Ozxicj4NCjxiPkNjOjwvYj4gPGEgaHJlZj0ibWFpbHRvOmJyZW50LmJpbGdlcj00MHZlcml6 b24uY29tQGRtYXJjLmlldGYub3JnIj5icmVudC5iaWxnZXI9NDB2ZXJpem9uLmNvbUBkbWFyYy5p ZXRmLm9yZzwvYT4gJmx0OzxhIGhyZWY9Im1haWx0bzpicmVudC5iaWxnZXI9NDB2ZXJpem9uLmNv bUBkbWFyYy5pZXRmLm9yZyI+YnJlbnQuYmlsZ2VyPTQwdmVyaXpvbi5jb21AZG1hcmMuaWV0Zi5v cmc8L2E+Jmd0OzsgUm9iZXJ0byBQZW9uICZsdDs8YSBocmVmPSJtYWlsdG86ZmVuaXhAZmIuY29t Ij5mZW5peEBmYi5jb208L2E+Jmd0OzsNCjxhIGhyZWY9Im1haWx0bzpxdWljQGlldGYub3JnIj5x dWljQGlldGYub3JnPC9hPiAmbHQ7PGEgaHJlZj0ibWFpbHRvOnF1aWNAaWV0Zi5vcmciPnF1aWNA aWV0Zi5vcmc8L2E+Jmd0OzsNCjxhIGhyZWY9Im1haWx0bzpicmVudC5iaWxnZXJAdmVyaXpvbi5j b20iPmJyZW50LmJpbGdlckB2ZXJpem9uLmNvbTwvYT4gJmx0OzxhIGhyZWY9Im1haWx0bzpicmVu dC5iaWxnZXJAdmVyaXpvbi5jb20iPmJyZW50LmJpbGdlckB2ZXJpem9uLmNvbTwvYT4mZ3Q7OyBJ YW4gU3dldHQgJmx0OzxhIGhyZWY9Im1haWx0bzppYW5zd2V0dD00MGdvb2dsZS5jb21AZG1hcmMu aWV0Zi5vcmciPmlhbnN3ZXR0PTQwZ29vZ2xlLmNvbUBkbWFyYy5pZXRmLm9yZzwvYT4mZ3Q7PGJy Pg0KPGI+U3ViamVjdDo8L2I+IFJlOiBbRV0gRG9TLWluZyBRVUlDIHNlcnZlcnMgaXMgdG9vIGVh c3kgPG86cD48L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1z by1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDph dXRvIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bWFyZ2luLWJvdHRvbToxMi4wcHQiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9wPg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFy Z2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1z by1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj5PbiBKdWwg MjIsIDIwMTksIGF0IDk6MTYgUE0sIFdhdHNvbiBMYWRkICZsdDs8YSBocmVmPSJtYWlsdG86d2F0 c29uYmxhZGRAZ21haWwuY29tIj53YXRzb25ibGFkZEBnbWFpbC5jb208L2E+Jmd0OyB3cm90ZTo8 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1t YXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpw PjwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdp bi10b3AtYWx0OmF1dG87bWFyZ2luLWJvdHRvbToxMi4wcHQiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTMuNXB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYSI+T24gTW9uLCBKdWwgMjIsIDIwMTkgYXQg NToyOSBQTTxicj4NCiZsdDs8L3NwYW4+PGEgaHJlZj0ibWFpbHRvOmJyZW50LmJpbGdlcj00MHZl cml6b24uY29tQGRtYXJjLmlldGYub3JnIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEzLjVwdDtm b250LWZhbWlseTpIZWx2ZXRpY2EiPmJyZW50LmJpbGdlcj00MHZlcml6b24uY29tQGRtYXJjLmll dGYub3JnPC9zcGFuPjwvYT48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEzLjVwdDtmb250LWZhbWls eTpIZWx2ZXRpY2EiPiZndDsgd3JvdGU6PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPGJsb2NrcXVv dGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1i b3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTMuNXB0O2ZvbnQtZmFtaWx5 OkhlbHZldGljYSI+PGJyPg0KPGJyPg0KPGJyPg0KT24gSnVsIDIyLCAyMDE5LCBhdCAxMDoxMCBB TSwgUm9iZXJ0byBQZW9uICZsdDs8YSBocmVmPSJtYWlsdG86ZmVuaXhAZmIuY29tIj5mZW5peEBm Yi5jb208L2E+Jmd0OyB3cm90ZTo8YnI+DQo8YnI+DQpXaGVuIHlvdeKAmXJlIHRhbGtpbmcgYWJv dXQgcHJlLWF1dGhlbnRpY2F0aW9uLCBhcmUgeW91IHJlZmVycmluZyB0byB0aGUgMC1ydHQgc3R1 ZmY/PGJyPg0KPGJyPg0KPGJyPg0KMC1SVFQgaXMgZ29vZCBzdHVmZi4gSXQgcmVkdWNlcyB0aW1l IGZvciBhIGRldmljZSB0aGF04oCZcyBhbHJlYWR5IGtub3duIHRvIGJlIGF1dGhvcml6ZWQgdG8g Y29ubmVjdCB0byB0aGUgc2VydmVyLjxicj4NCjxicj4NClBhcnQgb2YgdGhlIHByb2JsZW0gaXMg dG8gc3RvcCByZXNvdXJjZSBEb1MuIFRoZSBvdGhlciBwYXJ0IGlzIGFib3V0IGluZm9ybWF0aW9u IGxlYWthZ2UuPGJyPg0KPGJyPg0KTGV04oCZcyBhc3N1bWUgYSB0aW1lIHdoZW4gYWxsIHdlYnNp dGUgdXNlIFFVSUMgYW5kIGxldCdzIHRha2UgYW4gYWR2ZXJzYXJ5IHdobyBoYXMganVzdCBsZWFy bmVkIGFib3V0IGEgdnVsbmVyYWJpbGl0eSBpbiBXb3JkcHJlc3MuIFRoZSBhZHZlcnNhcnkgd2Fu dHMgdG8gc2NhbiB0aGUgSW50ZXJuZXQgZmluZGluZyBXb3JkcHJlc3Mgc2l0ZXMuIE5vdywgaWYg dGhlIFFVSUMgY29ubmVjdGlvbiByZXF1aXJlZCBwcmUtYXV0aGVudGljYXRpb24sIHRoZW4NCiB0 aGUgc2VydmVyIHdvdWxkIGJlIGJsYWNrIHRvIHRoZSBjb25uZWN0aW9uIGFuZCB0aGUgYWR2ZXJz YXJ5IGNvdWxkIG5vdCBkZXRlcm1pbmUgaWYgdGhlIHNpdGUgdXNlcyBXb3JkcHJlc3MuIEJ1dCwg YXMgaXQgc3RhbmRzIHRvZGF5LCBpbiB0aGlzIGZ1dHVyZSB0aW1lLCB0aGUgYWR2ZXJzYXJ5IHNj YW5zIHRoZSBJbnRlcm5ldCwgY29ubmVjdHMgdG8gdGhlIHNlcnZlciwgYW5kIGlzIGhhbmRlZCBh IFdvcmRwcmVzcyBsb2dpbiBzY3JlZW4uIE5vdw0KIHRoZSBhZHZlcnNhcnkga25vd3Mgd2hlcmUg dG8gYXR0YWNrLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvYmxvY2txdW90ZT4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJv dHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMy41cHQ7Zm9udC1mYW1pbHk6 SGVsdmV0aWNhIj48YnI+DQpJZiBjb25uZWN0aW9uIHJlcXVpcmVzIHByZWF1dGhlbnRpY2F0aW9u IHRoZW4gbm8gb25lIGNhbiBzZWUgdGhlIHNpdGUsIG5vPzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4w cHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21hcmdpbi1ib3R0b206MTIuMHB0Ij48bzpwPiZu YnNwOzwvbzpwPjwvcD4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdp bi1ib3R0b206NS4wcHQiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4t dG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEzLjVwdDtmb250LWZhbWlseTpIZWx2ZXRpY2EiPjxicj4NCkluIHRoZSBlbnRlcnBy aXNlIGl0IGlzIGEgbGl0dGxlIGRpZmZlcmVudC4gQ29tcGFuaWVzIGltcGxlbWVudCByZXZlcnNl IHByb3hpZXMgdG8gdHJ5IHRvIHByb3RlY3Qgc2VydmVycyBmcm9tIHVuYXV0aG9yaXplZCB1c2Vy cy4gQnV0IHdoYXQgaWYgdGhlIHNlcnZlcnMgcmVxdWlyZWQgYSBwcmUtYXV0aGVudGljYXRpb24g dG9rZW4uIFRoZW4sIHJldmVyc2UgcHJveGllcyB3b3VsZCBub3QgYmUgbmVlZGVkLjwvc3Bhbj48 bzpwPjwvbzpwPjwvcD4NCjwvYmxvY2txdW90ZT4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMy41cHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhIj48YnI+DQpT byBJIHRoaW5rIHRoZXJlIGFyZSB0d28gZGlmZmVyZW50IHRoaW5ncyBoZXJlLCBvciBtYXliZSBJ J20gbWlzdW5kZXJzdGFuZGluZzo8YnI+DQoxOiBXZSBoYXZlIHNlcnZlcnMgdGhhdCBoYXZlIGEg bGltaXRlZCBudW1iZXIgb2YgY2xpZW50cyB0aGF0IHdpbGw8YnI+DQpldmVyIHdhbnQgdG8gY29u bmVjdCB0byB0aGVtLCBhbmQgd2FudCB0byBlbmFibGUgb3RoZXIgZGV2aWNlcyB0bzxicj4NCmZp bHRlciB0aGUgdHJhZmZpYywgc28gbmVlZCBzb21lIG1lY2hhbmlzbSB0aGF0IGVuYWJsZXMgYSBt aWRkbGVib3ggdG88YnI+DQpmaWx0ZXIuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 L2Jsb2NrcXVvdGU+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJn aW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4t dG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj5ObyBtaWRkbGUgYm94ISBQ cmUtYXV0aGVudGljYXRpb24gbWFrZXMgc2VydmVycyBzZWxmLWRlZmVuZGluZy4gTGFjayBvZiBw cmUtYXV0aGVudGljYXRpb24gaXMgd2h5IHdlIGhhdmUgbWlkZGxlIGJveGVzLjxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJn aW4tdG9wLWFsdDphdXRvO21hcmdpbi1ib3R0b206MTIuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwv cD4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4w cHQiPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1h bHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMy41cHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhIj4yOiBXZSBoYXZlIHNlcnZlcnMgZ2VuZXJh bGx5IGF2YWlsYWJsZSB0byB0aGUgcHVibGljIGFuZCBhcmUgY29uY2VybmVkPGJyPg0KdGhhdCB0 aGUgUVVJQyB2ZXJzaW9uIG9mIGEgU1lOIGZsb29kIGNhbid0IGJlIGRlYWx0IHdpdGggKGRlc3Bp dGU8YnI+DQpldmlkZW5jZSB0byB0aGUgY29udHJhcnkpLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5i c3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Q29tcGFu aWVzIGFuZCB3ZWJzaXRlIG93bmVycyBoYXZlIHRvIHBheSBmb3IgYW50aS1Eb1Mgc2VydmljZXMm bmJzcDtmcm9tIHRoZSBsaWtlcyBvZiBWZXJpem9uIGFuZCBvdGhlcnMgQkVDQVVTRSBzZXJ2ZXJz IGxpc3RlbiB0byBhbGwgY2xpZW50cy4gV2l0aCBwcmUtYXV0aGVudGljYXRpb24sIHRoZSBuZWVk IHRvIGhhdmUNCiBhbiBhbnRpLURvUyBzZXJ2aWNlIHdvdWxkIGJlIGdyZWF0bHkgcmVkdWNlZCBi ZWNhdXNlIHNlcnZlcnMgd291bGQgbm90IHJlc3BvbmQgdG8gdW5hdXRob3JpemVkIGNsaWVudHMu PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPiZu YnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRv Ij5BbmQgdGhlIHBvaW50IGFib3V0IGluZm9ybWF0aW9uIGxlYWthZ2UgaXMgaW1wb3J0YW50LCB0 b28uPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8i PiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDph dXRvIj5CcmVudDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21hcmdpbi1ib3R0b206MTIuMHB0 Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUu MHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMy41cHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhIj48YnI+ DQpJIGRvbid0IGtub3cgbXVjaCBhYm91dCBob3cgQ2xvdWRmbGFyZSAobXkgcGxhY2Ugb2YgZW1w bG95bWVudCkgJm5ic3A7ZGVhbHM8YnI+DQp3aXRoIDIgYnV0IGhvcGVmdWxseSBzb21lIHBlb3Bs ZSB3aG8gZG8vaW1wbGVtZW50b3JzIGNhbiBzcGVhayB1cDxicj4NCmFib3V0IGhvdyBtdWNoIG9m IGEgcHJvYmxlbSBpdCBpcy4gQnV0IDEgaXMgSSB0aGluayB2ZXJ5IG11Y2ggYTxicj4NCm5vbmdv YWw6IG1pZGRsZWJveCBvc3NpZmljYXRpb24gaXMgcGFydCBvZiB0aGUgcmVhc29uIHdlIGhhdmUg UVVJQy48YnI+DQo8YnI+DQpTaW5jZXJlbHksPGJyPg0KV2F0c29uIExhZGQ8L3NwYW4+PG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFs dDphdXRvIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bWFy Z2luLWJvdHRvbToxMy41cHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTMuNXB0O2ZvbnQtZmFt aWx5OkhlbHZldGljYSI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21z by1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEzLjVwdDtm b250LWZhbWlseTpIZWx2ZXRpY2EiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6 YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox My41cHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhIj5CcmVudCBCbGlnZXI8L3NwYW4+PG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1h cmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTMuNXB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYSI+RGlyZWN0b3ItVGVjaG5v bG9neSZuYnNwO1Zlcml6b24gU0RQJm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDph dXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEz LjVwdDtmb250LWZhbWlseTpIZWx2ZXRpY2EiPjxhIGhyZWY9Im1haWx0bzpicmVudC5iaWxnZXJA dmVyaXpvbi5jb20iPmJyZW50LmJpbGdlckB2ZXJpem9uLmNvbTwvYT48L3NwYW4+PG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1h cmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTguMHB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYSI+Jm5ic3A7PC9zcGFuPjxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1h cmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTMuNXB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYSI+Jm5ic3A7PC9zcGFuPjxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttYXJnaW4tYm90dG9tOjEyLjBwdCI+Jm5ic3A7PG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFy Z2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28t bWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8ZGl2Pg0KPGRp dj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4t dG9wLWFsdDphdXRvO21hcmdpbi1ib3R0b206MTMuNXB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEzLjVwdDtmb250LWZhbWlseTpIZWx2ZXRpY2E7Y29sb3I6YmxhY2siPiZuYnNwOzwvc3Bhbj48 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMy41cHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhO2NvbG9yOmJs YWNrIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1i b3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTMuNXB0O2ZvbnQtZmFtaWx5 OkhlbHZldGljYTtjb2xvcjpibGFjayI+QnJlbnQgQmxpZ2VyPC9zcGFuPjxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4t dG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEzLjVwdDtmb250LWZhbWlseTpIZWx2ZXRpY2E7Y29sb3I6YmxhY2siPkRpcmVjdG9y LVRlY2hub2xvZ3kmbmJzcDtWZXJpem9uIFNEUCZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRv cC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMy41cHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhO2NvbG9yOmJsYWNrIj48YSBocmVmPSJt YWlsdG86YnJlbnQuYmlsZ2VyQHZlcml6b24uY29tIj5icmVudC5iaWxnZXJAdmVyaXpvbi5jb208 L2E+PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFs dDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjE4LjBwdDtmb250LWZhbWlseTpIZWx2ZXRp Y2E7Y29sb3I6YmxhY2siPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJn aW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEzLjVwdDtmb250LWZh bWlseTpIZWx2ZXRpY2E7Y29sb3I6YmxhY2siPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10 b3AtYWx0OmF1dG87bWFyZ2luLWJvdHRvbToxMi4wcHQiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1 dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjwvYm9k eT4NCjwvaHRtbD4NCg== --_000_FB166018E21C4B11819DE77564F80EAFfbcom_-- From nobody Tue Jul 23 08:05:55 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B5D3C120398 for ; Tue, 23 Jul 2019 08:05:46 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.996 X-Spam-Level: X-Spam-Status: No, score=-1.996 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id do-MUTs4Qjdj for ; Tue, 23 Jul 2019 08:05:43 -0700 (PDT) Received: from mail-ed1-x541.google.com (mail-ed1-x541.google.com [IPv6:2a00:1450:4864:20::541]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7E670120381 for ; Tue, 23 Jul 2019 08:05:35 -0700 (PDT) Received: by mail-ed1-x541.google.com with SMTP id x19so38348567eda.12 for ; Tue, 23 Jul 2019 08:05:35 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:in-reply-to:references:mime-version:date:message-id:subject:to :cc; bh=WL3600gNZ48ScCJKAyAFo1JTIWbgzqw1wX9FfJqP1ac=; b=EVDo0QJ87V12f3aGLkzoiZ5NowxwR3Xrckn17oMCeuVQgN4cv8U8H1uK3kuqtMNNxL dFJQzjaYHeb5gr75BXI6x9zzem2E2qpbKadrhTNwXn20Cajpfy1I0RoamOoDGAk8fazE iYznQ3CTczK9uVZrMTS86QLjGv8jLQPW7UmNr20HFpk0zLm9b09k8zkxwil6Dx2dNTrt EW8myb3sCx71RkQF6nZvUht5i/efn1+plWcQSuhhOGiLjZhJEPruct+HgD39mVaCZ//o 9mAHQF0Ah3rwvX5hIKMCqs9UA89J6MilMwXh4I2a9z2WQ2phrQIYTiZgAnCbGse5dknv SHvg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:in-reply-to:references:mime-version:date :message-id:subject:to:cc; bh=WL3600gNZ48ScCJKAyAFo1JTIWbgzqw1wX9FfJqP1ac=; b=L7KfbUwxqpWIBHkc9YAH7CeszZ96z6NTqlQm82Wx+TZJbHuElcFDBkLJ3j5Zq3vgI7 q+Gem63juwINr5mTyyLBBBxRcw20nvIlCJPLZhRmAUND9/WycrGhhjHnRgXTcBYXD1Th la/AX98xet4U/UBy4K8rLjBZK2SYK16R4gcEoBOMitM/MpGJtEqBecsHChAcaWwqRFGG gv5MkgJfQhT+oFREnEhs1ymKNZBBtx8tbjhbH+gNKb9VMXYrGRPB3GAbiu0i77zcjQep 5CDbm1ko+jpfwPOG4fuYCTmMyq5eSaSHVUwRKWJP1Y16rX/W+FAmhGsmHKv23ZBigsEC Jmfw== X-Gm-Message-State: APjAAAX6gAZGy9sFD5EbuLeURT9CDAggamL9dyb5oFaYbV1dDTIaBAgd xq6eC84FLiuXGqwST2sENMkS4uDxYYW0/HWZP9403mSmizI= X-Google-Smtp-Source: APXvYqwos0x7G16PXPotQXGHEjNUKR7MevFnOLcM5RQlSc28GlsND6PfSXvL/69Qlujc9mXzl2J+6e896/apJeC8QlQ= X-Received: by 2002:a17:906:fcb8:: with SMTP id qw24mr58605438ejb.239.1563894333939; Tue, 23 Jul 2019 08:05:33 -0700 (PDT) Received: from 1058052472880 named unknown by gmailapi.google.com with HTTPREST; Tue, 23 Jul 2019 08:05:33 -0700 From: =?UTF-8?Q?Mikkel_Fahn=C3=B8e_J=C3=B8rgensen?= In-Reply-To: References: <21E3AE84-02C5-4943-A88E-B62329E21002@one.verizon.com> <507D5DB7-EDF2-4429-A518-604A377F92D9@one.verizon.com> <9BF2DC9D-F14C-4451-9191-1A1557556691@fb.com> <9DC40032-3852-4237-A621-5C6B1102E74F@one.verizon.com> X-Mailer: Airmail (420) MIME-Version: 1.0 Date: Tue, 23 Jul 2019 08:05:33 -0700 Message-ID: Subject: Re: [E] DoS-ing QUIC servers is too easy To: Roberto Peon , "brent.bilger@verizon.com" Cc: Watson Ladd , "quic@ietf.org" , "brent.bilger=40verizon.com@dmarc.ietf.org" , Ian Swett Content-Type: multipart/alternative; boundary="0000000000003da321058e5a8616" Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 23 Jul 2019 15:05:53 -0000 --0000000000003da321058e5a8616 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable No that is not the point. You send a token with the initial packet (which is large anyway). It is not thought to be a high quality authentication token - for that you can use TLS client auth. But you need to pre-qualify before wasting handshake resources. It is intended to get priority over other packets on a load balancer the experience high load, and only for initial packets. After that, the load balancer can track existing sessions either by remembering them, or by algorithmically checking the server assigned CID on subsequent packets. A load balancer may choose to drop or down prioritize intial packets that do not have a signed token. Kind Regards, Mikkel Fahn=C3=B8e J=C3=B8rgensen On 23 July 2019 at 17.01.26, Roberto Peon (fenix@fb.com) wrote: With short timeouts for the auth-token you have a requirement to authenticate often, which means that a significant percentage of the population of clients/users will be unable to connect when the authentication endpoint is DoS=E2=80=99d. If, ultimately, we keep needing to look at 5-tuples to solve the DoS, then why have the additional complexity of an additional service? -=3DR *From: *Mikkel Fahn=C3=B8e J=C3=B8rgensen *Date: *Tuesday, July 23, 2019 at 10:54 AM *To: *Roberto Peon , "brent.bilger@verizon.com" < brent.bilger@verizon.com> *Cc: *Watson Ladd , "quic@ietf.org" , "brent.bilger=3D40verizon.com@dmarc.ietf.org" , Ian Swett *Subject: *Re: [E] DoS-ing QUIC servers is too easy It is not that easy to steal a token and replay, but it can happen. If you add a time factor such an attack will have limited value. In fact a token need not be valid for more than about 10 minutes to account for skewed clocks. On 23 July 2019 at 16.41.09, Roberto Peon (fenix@fb.com) wrote: I=E2=80=99d assume #1 is less likely to experience crippling SYN-based DoS = attacks, and could otherwise be accomplished by limiting access in IP-space (imperfect, but we=E2=80=99re looking for =E2=80=9Cgood-enough=E2=80=9D, he= re). .. which means that I think we should consider 2+3 only, really. For #2 and #3, which I suspect have significant overlaps (sites may provide services both to logged-in users and users who aren=E2=80=99t logged in), t= he pre-authorization either: a) can be DoS=E2=80=99d itself. b) can be used to do a DoS in the future. In case b, as an attacker, you=E2=80=99d get or wait for the client to authenticate, then use that authentication in a replay attack, e.g. by replicating the auth token across many hosts. In cases where you are disallowed to replicate the auth token, e.g. because it is tied to a particular IP, you can help solve the replay attack however you=E2=80=99ll be biasing traffic to users whose IP is stable and who are l= ogged in/auth=E2=80=99d. In the pre-shared key scenario that was described, if any one client leaks the shared-secret, then it becomes not very useful and certainly doesn=E2= =80=99t protect against a DoS. I=E2=80=99d guess that the probability of the loss o= f a symmetric key is proportional to the breadth of the distribution of the key= . What I=E2=80=99m trying to point out is that this doesn=E2=80=99t really se= em to solve the generic DoS attack. You=E2=80=99ll still need to do some heuristics/rules based upon whatever i= s observable, at a minimum the 5-tuple. Getting more than the 5-tuple to be visible will take more work by the server, true, but given other design constraints, I don=E2=80=99t see how t= hat is avoidable. -=3DR *From: *"brent.bilger@verizon.com" *Date: *Tuesday, July 23, 2019 at 9:59 AM *To: *Roberto Peon *Cc: *"brent.bilger@verizon.com" , Watson Ladd < watsonbladd@gmail.com>, "brent.bilger=3D40verizon.com@dmarc.ietf.org" , "quic@ietf.org" , Ian Swett *Subject: *Re: [E] DoS-ing QUIC servers is too easy There are lots of possible scenarios, so please just consider these to be examples. Let=E2=80=99s divide the world of servers in to 1) enterprise business-to-business websites, 2) websites meant for consumers where authentication is desirable, and 3) websites that will want to allow their users to be anonymous, therefore, pre-authentication would not apply. Enterprise business-to-business websites could use something similar to the Software Defined Perimeter (SDP) Single Packet Authorization (SPA) protocol created by the Cloud Security Alliance. It uses the fact that clients are on-boarded to the system in a one time event to provide the clients with a shared secret key. The key is used in a counter-based HMAC calculation. Since only an authorized client can calculate the proper HMAC, the HMAC can be used for pre-authentication. Thus, the pre-authentication token could look something like this: Client->Server: ClientID, Counter, HMAC[ClientID || Counter, Ks] where Ks is a shared secret key that both the client and server have. On the server side, the server would recalculate the HMAC and compare it to the one provided by the client. Note that this information is sent from the client to the server in clear text (i.e., not encrypted). In practice, there would probably be more fields, but the important part is that the one-time on boarding enables a lifetime of pre-authentication tokens. Websites meant for consumers would probably be handled differently - specifically, no on-boarding. That means there would be some kind of token service - similar to OAuth, but operating prior to the TCP equivalent of SYN/ACK. Perhaps CloudFlair or Google or Microsoft could invent something like this and offer it as a service??? Again, there will be other websites that will not want pre-authentication because they want to allow anonymous users to their site. Brent On Jul 23, 2019, at 6:26 AM, Roberto Peon wrote: I'm trying to understand how anything was pre-authenticated without suffering from all of the same problems. How would such pre-authentication be done in practice, especially in scenarios where the server doesn't have a whitelist of clients, and that service desires traffic from non-malicious clients? -=3DR Get Outlook for Android ------------------------------ *From:* brent.bilger@verizon.com *Sent:* Tuesday, July 23, 2019 8:21:05 AM *To:* Watson Ladd *Cc:* brent.bilger=3D40verizon.com@dmarc.ietf.org < brent.bilger=3D40verizon.com@dmarc.ietf.org>; Roberto Peon ; quic@ietf.org ; brent.bilger@verizon.com < brent.bilger@verizon.com>; Ian Swett *Subject:* Re: [E] DoS-ing QUIC servers is too easy On Jul 22, 2019, at 9:16 PM, Watson Ladd wrote: On Mon, Jul 22, 2019 at 5:29 PM wrote: On Jul 22, 2019, at 10:10 AM, Roberto Peon wrote: When you=E2=80=99re talking about pre-authentication, are you referring to = the 0-rtt stuff? 0-RTT is good stuff. It reduces time for a device that=E2=80=99s already kn= own to be authorized to connect to the server. Part of the problem is to stop resource DoS. The other part is about information leakage. Let=E2=80=99s assume a time when all website use QUIC and let's take an adv= ersary who has just learned about a vulnerability in Wordpress. The adversary wants to scan the Internet finding Wordpress sites. Now, if the QUIC connection required pre-authentication, then the server would be black to the connection and the adversary could not determine if the site uses Wordpress. But, as it stands today, in this future time, the adversary scans the Internet, connects to the server, and is handed a Wordpress login screen. Now the adversary knows where to attack. If connection requires preauthentication then no one can see the site, no? In the enterprise it is a little different. Companies implement reverse proxies to try to protect servers from unauthorized users. But what if the servers required a pre-authentication token. Then, reverse proxies would not be needed. So I think there are two different things here, or maybe I'm misunderstanding: 1: We have servers that have a limited number of clients that will ever want to connect to them, and want to enable other devices to filter the traffic, so need some mechanism that enables a middlebox to filter. No middle box! Pre-authentication makes servers self-defending. Lack of pre-authentication is why we have middle boxes. 2: We have servers generally available to the public and are concerned that the QUIC version of a SYN flood can't be dealt with (despite evidence to the contrary). Companies and website owners have to pay for anti-DoS services from the likes of Verizon and others BECAUSE servers listen to all clients. With pre-authentication, the need to have an anti-DoS service would be greatly reduced because servers would not respond to unauthorized clients. And the point about information leakage is important, too. Brent I don't know much about how Cloudflare (my place of employment) deals with 2 but hopefully some people who do/implementors can speak up about how much of a problem it is. But 1 is I think very much a nongoal: middlebox ossification is part of the reason we have QUIC. Sincerely, Watson Ladd Brent Bliger Director-Technology Verizon SDP brent.bilger@verizon.com Brent Bliger Director-Technology Verizon SDP brent.bilger@verizon.com --0000000000003da321058e5a8616 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable = No that is not the p= oint.

You send a toke= n with the initial packet (which is large anyway). It is not thought to be = a high quality authentication token - for that you can use TLS client auth.= But you need to pre-qualify before wasting handshake resources.

It is intended to get priority = over other packets on a load balancer the experience high load, and only fo= r initial packets. After that, the load balancer can track existing session= s either by remembering them, or by algorithmically checking the server ass= igned CID on subsequent packets.

A load balancer may choose to drop or down prioritize intial pa= ckets that do not have a signed token.


Kind Regards,
Mikkel Fahn=C3=B8e J=C3=B8rgensen


<= p class=3D"airmail_on">On 23 July 2019 at 17.01.26, Roberto Peon (fenix@fb.com) wrote:

With short timeouts for the auth-token you have a re= quirement to authenticate often, which means that a significant percentage = of the population of clients/users will be unable to connect when the authe= ntication endpoint is DoS=E2=80=99d.

If, ultimately, we keep needing to look at 5-tuples to solve the DoS, then = why have the additional complexity of an additional service?
-=3DR

=C2=A0

From= : Mikkel Fahn=C3=B8= e J=C3=B8rgensen <mikkelfj@gmail.c= om>
Date: Tuesday, July 23, 2019 at 10:54 AM
To: Roberto Peon <fenix@fb.com>, "brent.bilger@veriz= on.com" <brent.bilg= er@verizon.com>
Cc: Watson Ladd <watsonb= ladd@gmail.com>, "quic@ietf.or= g" <quic@ietf.org>, &qu= ot;brent.bilger=3D40verizon= .com@dmarc.ietf.org" <brent.bilger=3D40verizon.com@dmarc.ietf.org>, Ian Swett <i= answett=3D40google.com@dmarc= .ietf.org>
Subject: Re: [E] DoS-ing QUIC servers is too easy

=C2=A0

It is not that easy to steal a token and replay, but it can happen.

=C2=A0

If you add a time factor such an attack will have limited value. In fact= a token need not be valid for more than about 10 minutes to account for sk= ewed clocks.

=C2=A0

On 23 July 2019 at 16.41.09, Roberto Peon (fenix@fb.com) wrote:

I=E2=80=99d assume #1 is less likely to experience crippling SYN-b= ased DoS attacks, and could otherwise be accomplished by limiting access in= IP-space (imperfect, but we=E2=80=99re looking for =E2=80=9Cgood-enough=E2=80=9D, here).


.. which means that I think we should consider 2+3 only, really.

For #2 and #3, which I suspect have significant overlaps (sites may provide= services both to logged-in users and users who aren=E2=80=99t logged in), = the pre-authorization either:
=C2=A0 a) can be DoS=E2=80=99d itself.
=C2=A0 b) can be used to do a DoS in the future.

In case b, as an attacker, you=E2=80=99d get or wait for the clien= t to authenticate, then use that authentication in a replay attack, e.g. by= replicating the auth token across many hosts.
In cases where you are disallowed to replicate the auth token, e.g. because= it is tied to a particular IP, you can help solve the replay attack howeve= r you=E2=80=99ll be biasing traffic to users whose IP is stable and who are= logged in/auth=E2=80=99d.
In the pre-shared key scenario that was described, if any one client leaks = the shared-secret, then it becomes not very useful and certainly doesn=E2= =80=99t protect against a DoS. I=E2=80=99d guess that the probability of th= e loss of a symmetric key is proportional to the breadth of the distribution of the key.

What I=E2=80=99m trying to point out is that this doesn=E2=80=99t really se= em to solve the generic DoS attack.
You=E2=80=99ll still need to do some heuristics/rules based upon whatever i= s observable, at a minimum the 5-tuple.
Getting more than the 5-tuple to be visible will take more work by the serv= er, true, but given other design constraints, I don=E2=80=99t see how that = is avoidable.

-=3DR

=C2=A0

From: "brent.bilger@verizon.com" <brent.bilger@verizon.com>
Date: Tuesday, July 23, 2019 at 9:59 AM
To: Roberto Peon <fenix@fb.com>
Cc: "brent.bilger@v= erizon.com" <brent.= bilger@verizon.com>, Watson Ladd <watsonbladd@gmail.com>, "brent.bilger=3D40verizon.com@dmarc.ietf.org" <brent.bilger=3D40veriz= on.com@dmarc.ietf.org>, "quic@= ietf.org" <quic@ietf.org&g= t;, Ian Swett <ianswett=3D40google.com@dmarc.ietf.org>
Subject: Re: [E] DoS-ing QUIC servers is too easy

=C2=A0

There are lots of possible scenarios, so please just consider thes= e to be examples. Let=E2=80=99s divide the world of servers in to 1) enterp= rise business-to-business websites, 2) websites meant for consumers where authentication is desirable, and 3) websites tha= t will want to allow their users to be anonymous, therefore, pre-authentica= tion would not apply.

=C2=A0

Enterprise business-to-business websites could use something simil= ar to the Software Defined Perimeter (SDP) Single Packet Authorization (SPA= ) protocol created by the Cloud Security Alliance. It uses the fact that clients are on-boarded to the system in a = one time event to provide the clients with a shared secret key. The key is = used in a counter-based HMAC calculation. Since only an authorized client c= an calculate the proper HMAC, the HMAC can be used for pre-authentication. Thus, the pre-authentication toke= n could look something like this:

Client->Server: ClientID, Counter, HMAC[ClientID || Counter, Ks= ] where Ks is a shared secret key that both the client and server have.

On the server side, the server would recalculate the HMAC and comp= are it to the one provided by the client.=C2=A0

Note that this information is sent from the client to the server i= n clear text (i.e., not encrypted).

In practice, there would probably be more fields, but the importan= t part is that the one-time on boarding enables a lifetime of pre-authentic= ation tokens.

=C2=A0

Websites meant for consumers would probably be handled differently= - specifically, no on-boarding. That means there would be some kind of tok= en service - similar to OAuth, but operating prior to the TCP equivalent of SYN/ACK. Perhaps CloudFlair or Google or Mi= crosoft could invent something like this and offer it as a service???

=C2=A0

Again, there will be other websites that will not want pre-authent= ication because they want to allow anonymous users to their site.

=C2=A0

Brent

=C2=A0

On Jul 23, 2019, at 6:26 AM, Roberto Peon <fenix@fb.com> wrote:

=C2=A0

I'm trying to understand how anythi= ng was pre-authenticated without suffering from all of the same problems.

How would such pre-authentication be do= ne in practice, especially in scenarios where the server doesn't have a= whitelist of clients, and that service desires traffic from non-malicious clients?

-=3DR

From: brent.bilger@verizon.com &l= t;brent.bilger@verizon.com&= gt;
Sent: Tuesday, July 23, 2019 8:21:05 AM
To: Watson Ladd <watsonb= ladd@gmail.com>
Cc: b= rent.bilger=3D40verizon.com@dmarc.ietf.org <brent.bilger=3D40verizon.com@dmarc.i= etf.org>; Roberto Peon <fenix@fb.= com>; quic@ietf.org <quic@ietf.org>; brent.bilger@verizon.com &l= t;brent.bilger@verizon.com&= gt;; Ian Swett <ianswett=3D40google.com@dmarc.ietf.org>
Subject: Re: [E] DoS-ing QUIC servers is too easy

=C2=A0

=C2=A0

=C2=A0

On Jul 22, 2019, at 9:16 PM, Watson Ladd <watsonbladd@gmail.com> wrote:

=C2=A0

On Mon, Jul 22, 2019 at 5:29 PM
<<= span style=3D"font-size:13.5pt;font-family:Helvetica">brent.bilger=3D40veri= zon.com@dmarc.ietf.org> wrote:




On Jul 22, 2019, at 10:10 AM, Roberto Peon <fenix@fb.com> wrote:

When you=E2=80=99re talking about pre-authentication, are you referring to = the 0-rtt stuff?


0-RTT is good stuff. It reduces time for a device that=E2=80=99s already kn= own to be authorized to connect to the server.

Part of the problem is to stop resource DoS. The other part is about inform= ation leakage.

Let=E2=80=99s assume a time when all website use QUIC and let's take an= adversary who has just learned about a vulnerability in Wordpress. The adv= ersary wants to scan the Internet finding Wordpress sites. Now, if the QUIC= connection required pre-authentication, then the server would be black to the connection and the adversary could not de= termine if the site uses Wordpress. But, as it stands today, in this future= time, the adversary scans the Internet, connects to the server, and is han= ded a Wordpress login screen. Now the adversary knows where to attack.


If connection requires preauthentication then no one can see the site, no?<= /span>

=C2=A0


In the enterprise it is a little different. Companies implement reverse pro= xies to try to protect servers from unauthorized users. But what if the ser= vers required a pre-authentication token. Then, reverse proxies would not b= e needed.


So I think there are two different things here, or maybe I'm misunderst= anding:
1: We have servers that have a limited number of clients that will
ever want to connect to them, and want to enable other devices to
filter the traffic, so need some mechanism that enables a middlebox to
filter.

=C2=A0

No middle box! Pre-authentication makes servers self-defending. La= ck of pre-authentication is why we have middle boxes.

=C2=A0

2: We have = servers generally available to the public and are concerned
that the QUIC version of a SYN flood can't be dealt with (despite
evidence to the contrary).

=C2=A0

Companies and website owners have to pay for anti-DoS services=C2= =A0from the likes of Verizon and others BECAUSE servers listen to all clien= ts. With pre-authentication, the need to have an anti-DoS service would be greatly reduced because servers would not res= pond to unauthorized clients.

=C2=A0

And the point about information leakage is important, too.

=C2=A0

Brent

=C2=A0


I don't know much about how Cloudflare (my place of employment) =C2=A0d= eals
with 2 but hopefully some people who do/implementors can speak up
about how much of a problem it is. But 1 is I think very much a
nongoal: middlebox ossification is part of the reason we have QUIC.

Sincerely,
Watson Ladd

=C2=A0

=C2=A0

=C2=A0

Brent Blige= r

Director-Te= chnology=C2=A0Verizon SDP=C2=A0

=C2=A0

=C2=A0

=C2=A0

=C2=A0

=C2=A0

=C2=A0

=C2=A0

Brent Bliger

Director-Technology=C2=A0Verizon SDP=C2=A0

=C2=A0

=C2=A0

=C2=A0

=C2=A0

--0000000000003da321058e5a8616-- From nobody Tue Jul 23 08:08:32 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 905891203A2 for ; Tue, 23 Jul 2019 08:08:22 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=verizon.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Qy8vnXB9pCqf for ; Tue, 23 Jul 2019 08:08:17 -0700 (PDT) Received: from smtpout1-tdc.verizon.com (smtpout1-tdc.verizon.com [137.188.104.133]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6CE52120310 for ; Tue, 23 Jul 2019 08:08:17 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=verizon.com; i=@verizon.com; q=dns/txt; s=corp; t=1563894497; x=1595430497; h=to:subject:date:message-id:references:in-reply-to: mime-version:from:cc; bh=TXOLLy5XBkJPc+zt4ireGT2Bh6B8jprcpwBJLjI8DWo=; b=oaRhXkQl2f2IB0XNTcNrzja5qOo6bmYKvGyPM+VguKalQ+YRxqZHoUkS JJZVher1y49I096shcCvfBjXdm1J4GbWHrilzC1lo6HmMTju5dInWSp0e VDCBcz3XrB7MBhXsOyxdEuPfehGwfyRqEYLnxVmpIGOULgPerTF/ppsKO g=; From: brent.bilger@verizon.com Cc: brent.bilger@verizon.com, Watson Ladd , "brent.bilger=40verizon.com@dmarc.ietf.org" , "quic@ietf.org" , Ian Swett Received: from tbwexch02apd.uswin.ad.vzwcorp.com ([153.114.162.26]) by smtpout1-tdc.verizon.com with ESMTP/TLS/ECDHE-RSA-AES256-SHA384; 23 Jul 2019 15:08:16 +0000 Received: from tbwexch09apd.uswin.ad.vzwcorp.com (153.114.162.33) by tbwexch02apd.uswin.ad.vzwcorp.com (153.114.162.26) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Tue, 23 Jul 2019 11:08:15 -0400 Received: from scwexch01apd.uswin.ad.vzwcorp.com (153.114.130.20) by tbwexch09apd.uswin.ad.vzwcorp.com (153.114.162.33) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Tue, 23 Jul 2019 11:08:15 -0400 Received: from scwexch05apd.uswin.ad.vzwcorp.com (153.114.130.24) by scwexch01apd.uswin.ad.vzwcorp.com (153.114.130.20) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Tue, 23 Jul 2019 08:08:13 -0700 Received: from scwexch05apd.uswin.ad.vzwcorp.com ([153.114.130.24]) by scwexch05apd.uswin.ad.vzwcorp.com ([153.114.130.24]) with mapi id 15.00.1473.003; Tue, 23 Jul 2019 08:08:13 -0700 To: Roberto Peon Subject: Re: [E] DoS-ing QUIC servers is too easy Thread-Topic: [E] DoS-ing QUIC servers is too easy Thread-Index: AQHVQO2TMeh9llpV6EqU+Dk6tm4oPqbYDioAgACHhoCAABI8gIAACRKAgAALXgCAAAgGgA== Date: Tue, 23 Jul 2019 15:08:13 +0000 Message-ID: <3118B75C-AEAC-4A22-954E-592EBCB000EF@one.verizon.com> References: <21E3AE84-02C5-4943-A88E-B62329E21002@one.verizon.com> <507D5DB7-EDF2-4429-A518-604A377F92D9@one.verizon.com> <9BF2DC9D-F14C-4451-9191-1A1557556691@fb.com> <9DC40032-3852-4237-A621-5C6B1102E74F@one.verizon.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.11.60.250] Content-Type: multipart/alternative; boundary="_000_3118B75CAEAC4A22954E592EBCB000EFoneverizoncom_" MIME-Version: 1.0 Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 23 Jul 2019 15:08:30 -0000 --_000_3118B75CAEAC4A22954E592EBCB000EFoneverizoncom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 DQoNCk9uIEp1bCAyMywgMjAxOSwgYXQgNzozOSBBTSwgUm9iZXJ0byBQZW9uIDxmZW5peEBmYi5j b208bWFpbHRvOmZlbml4QGZiLmNvbT4+IHdyb3RlOg0KDQpJ4oCZZCBhc3N1bWUgIzEgaXMgbGVz cyBsaWtlbHkgdG8gZXhwZXJpZW5jZSBjcmlwcGxpbmcgU1lOLWJhc2VkIERvUyBhdHRhY2tzLCBh bmQgY291bGQgb3RoZXJ3aXNlIGJlIGFjY29tcGxpc2hlZCBieSBsaW1pdGluZyBhY2Nlc3MgaW4g SVAtc3BhY2UgKGltcGVyZmVjdCwgYnV0IHdl4oCZcmUgbG9va2luZyBmb3Ig4oCcZ29vZC1lbm91 Z2jigJ0sIGhlcmUpLg0KDQpOb3Qgc28sIGVudGVycHJpc2UgaXMgd2hlcmUgdGhlIGF0dHJhY3Rp b24gaXMgdG9kYXkuIFRoZXJl4oCZcyBEb1Mgb24gc2l0ZXMgdGhhdCBhcmUg4oCcbW92aW5nIHRv IHRoZSBjbG91ZOKAnSwgYnV0IGFsc28gdGhlcmUgaXMgaW5mb3JtYXRpb24gbGVha2FnZSBkZXJp dmVkIGZyb20ganVzdCBjb25uZWN0aW5nIHRvIHRoZSBzZXJ2ZXIgdmlhIFRDUC9JUC4gVGhlIGxl YWthZ2Ugb2Z0ZW4gZGV0ZXJtaW5lcyB0aGUgdHlwZSBvZiBzZXJ2ZXIgYW5kIG9mdGVuIHdoYXQg YXBwbGljYXRpb25zIGNvbGQgYmUgcnVubmluZyBvbiBpdC4gVGFrZSBub3QgcGV0cmEuIFNjYW5u aW5nIHRoZSBpbnRlcm5ldCBhbmQgZmluZGluZyBhIHdpbmRvd3Mgc2VydmVyIHRoZSBtYWx3YXJl IGF0dGVtcHRlZCB0aGUgZXRlcm5hbCBibHVlIHZ1bG5lcmFiaWxpdHkuIElmIHRob3NlIHNlcnZl cnMgd2VyZSBRVUlDIHdpdGggcHJlLWF1dGhlbnRpY2F0aW9uIHRoZSBhdHRhY2sgd291bGQgaGF2 ZSBiZWVuIGRlZmVhdGVkLiBBbmQgdGhlIHNhbWUgb24gdGhlIGludGVybmFsIG5ldHdvcmsuIFRo ZSBaZXJvIFRydXN0IG1vZGVsIGlzIHRoZSBuZXcgYnV6eiB0ZXJtIGluIHNlY3VyaXR5LiBUaGUg YXBwcm9hY2ggcmVjb21tZW5kZWQgaXMgdG8gaXNvbGF0ZSBzZXJ2ZXJzIGFuZCByZXF1aXJlIHBy ZS1hdXRob3JpemF0aW9uIHByaW9yIHRvIGVuYWJsaW5nIGNvbm5lY3Rpdml0eS4NCg0KDQouLiB3 aGljaCBtZWFucyB0aGF0IEkgdGhpbmsgd2Ugc2hvdWxkIGNvbnNpZGVyIDIrMyBvbmx5LCByZWFs bHkuDQoNCkZvciAjMiBhbmQgIzMsIHdoaWNoIEkgc3VzcGVjdCBoYXZlIHNpZ25pZmljYW50IG92 ZXJsYXBzIChzaXRlcyBtYXkgcHJvdmlkZSBzZXJ2aWNlcyBib3RoIHRvIGxvZ2dlZC1pbiB1c2Vy cyBhbmQgdXNlcnMgd2hvIGFyZW7igJl0IGxvZ2dlZCBpbiksIHRoZSBwcmUtYXV0aG9yaXphdGlv biBlaXRoZXI6DQogIGEpIGNhbiBiZSBEb1PigJlkIGl0c2VsZi4NCg0KQSBjb21tb24gIHBoaWxv c29waHkgb2YgcGVvcGxlIGluIHRoZSBzZWN1cml0eSBpbmR1c3RyeSBpcywg4oCccHV0IGFsbCB5 b3VyIGVnZ3MgaW4gb25lIGJhc2tldCBhbmQgcHJvdGVjdCB0aGUgYmFza2V0IHJlYWxseSwgcmVh bGx5IHdlbGwu4oCdIE5vdyBJIHVuZGVyc3RhbmQgdGhpcyBpcyBhIGNvbnRyYXJ5IHRvIHRoZSBw aGlsb3NvcGh5IG9mIG5ldHdvcmtpbmcgcGVvcGxlIHdoZXJlIGV2ZXJ5dGhpbmcgaXMgYWJvdXQg ZGlzdHJpYnV0ZWQgcmVkdW5kYW5jeSwgYnV0IHRoZXJlIGFyZSB2ZXJ5IGdvb2QgcmVhc29ucyBm b3IgdGhlIHNlY3VyaXR5IHBoaWxvc29waHkuDQoNCiAgYikgY2FuIGJlIHVzZWQgdG8gZG8gYSBE b1MgaW4gdGhlIGZ1dHVyZS4NCg0KSSB3YXNu4oCZdCB2ZXJ5IGNvbXBsZXRlIGluIHByb3ZpZGlu ZyB0aGUgZGV0YWlscyBvZiBTaW5nbGUgUGFja2V0IEF1dGhvcml6YXRpb24uIFlvdSBtYXkgd2Fu dCB0byByZWFkIHRoZSBzcGVjaWZpY2F0aW9uIGZvciB0aGUgZnVsbCBkZXRhaWxzLCBidXQgdGhl IHF1aWNrIG9mIGl0IGlzIHRoYXQgU2luZ2xlIFBhY2tldCBBdXRob3JpemF0aW9uIGlzIGJhc2Vk IG9uIFJGQyA0MjI2IHdoaWNoIGlzIEhhc2hlZCBPbmUgVGltZSBQYXNzd29yZCB3aXRoIHJlcGxh eSBwcmV2ZW50aW9uIHZpYSBhIGNvdW50ZXIgdGhhdCBpcyBpbmNyZW1lbnRlZCBlYWNoIHRpbWUg aXQgaXMgdXNlZC4gQW5kIHRoZSBvdGhlciBwYXJ0IHlvdSBzaG91bGQga25vdyBpcyB0aGF0IGVh Y2ggY2xpZW50IHdvdWxkIGhhdmUgaXRzIG93biBzZWNyZXQga2V5IHN1Y2ggdGhhdCBzdGVhbGlu ZyBhIGtleSBpcyB0aGUgY29tcHJvbWlzZSBvZiBqdXN0IG9uZSBjbGllbnQuDQoNCkFnYWluLCB0 aGUgYWJvdmUgaXMganVzdCBhbiBleGFtcGxlLiBJZiB0aGUgUkZDIGNvbnRhaW5lZCB0aGUgY29u Y2VwdCBvZiBwcmUtYXV0aGVudGljYXRpb24sIHRoZXJlIHdvdWxkIGJlIHBsZW50eSBvZiByZWFs bHkgZ29vZCBpZGVhcyBvbiB0aGUgdG9waWMuDQoNCkJyZW50DQoNCg0KSW4gY2FzZSBiLCBhcyBh biBhdHRhY2tlciwgeW914oCZZCBnZXQgb3Igd2FpdCBmb3IgdGhlIGNsaWVudCB0byBhdXRoZW50 aWNhdGUsIHRoZW4gdXNlIHRoYXQgYXV0aGVudGljYXRpb24gaW4gYSByZXBsYXkgYXR0YWNrLCBl LmcuIGJ5IHJlcGxpY2F0aW5nIHRoZSBhdXRoIHRva2VuIGFjcm9zcyBtYW55IGhvc3RzLg0KSW4g Y2FzZXMgd2hlcmUgeW91IGFyZSBkaXNhbGxvd2VkIHRvIHJlcGxpY2F0ZSB0aGUgYXV0aCB0b2tl biwgZS5nLiBiZWNhdXNlIGl0IGlzIHRpZWQgdG8gYSBwYXJ0aWN1bGFyIElQLCB5b3UgY2FuIGhl bHAgc29sdmUgdGhlIHJlcGxheSBhdHRhY2sgaG93ZXZlciB5b3XigJlsbCBiZSBiaWFzaW5nIHRy YWZmaWMgdG8gdXNlcnMgd2hvc2UgSVAgaXMgc3RhYmxlIGFuZCB3aG8gYXJlIGxvZ2dlZCBpbi9h dXRo4oCZZC4NCkluIHRoZSBwcmUtc2hhcmVkIGtleSBzY2VuYXJpbyB0aGF0IHdhcyBkZXNjcmli ZWQsIGlmIGFueSBvbmUgY2xpZW50IGxlYWtzIHRoZSBzaGFyZWQtc2VjcmV0LCB0aGVuIGl0IGJl Y29tZXMgbm90IHZlcnkgdXNlZnVsIGFuZCBjZXJ0YWlubHkgZG9lc27igJl0IHByb3RlY3QgYWdh aW5zdCBhIERvUy4gSeKAmWQgZ3Vlc3MgdGhhdCB0aGUgcHJvYmFiaWxpdHkgb2YgdGhlIGxvc3Mg b2YgYSBzeW1tZXRyaWMga2V5IGlzIHByb3BvcnRpb25hbCB0byB0aGUgYnJlYWR0aCBvZiB0aGUg ZGlzdHJpYnV0aW9uIG9mIHRoZSBrZXkuDQoNCldoYXQgSeKAmW0gdHJ5aW5nIHRvIHBvaW50IG91 dCBpcyB0aGF0IHRoaXMgZG9lc27igJl0IHJlYWxseSBzZWVtIHRvIHNvbHZlIHRoZSBnZW5lcmlj IERvUyBhdHRhY2suDQpZb3XigJlsbCBzdGlsbCBuZWVkIHRvIGRvIHNvbWUgaGV1cmlzdGljcy9y dWxlcyBiYXNlZCB1cG9uIHdoYXRldmVyIGlzIG9ic2VydmFibGUsIGF0IGEgbWluaW11bSB0aGUg NS10dXBsZS4NCkdldHRpbmcgbW9yZSB0aGFuIHRoZSA1LXR1cGxlIHRvIGJlIHZpc2libGUgd2ls bCB0YWtlIG1vcmUgd29yayBieSB0aGUgc2VydmVyLCB0cnVlLCBidXQgZ2l2ZW4gb3RoZXIgZGVz aWduIGNvbnN0cmFpbnRzLCBJIGRvbuKAmXQgc2VlIGhvdyB0aGF0IGlzIGF2b2lkYWJsZS4NCg0K LT1SDQoNCkZyb206ICJicmVudC5iaWxnZXJAdmVyaXpvbi5jb208bWFpbHRvOmJyZW50LmJpbGdl ckB2ZXJpem9uLmNvbT4iIDxicmVudC5iaWxnZXJAdmVyaXpvbi5jb208bWFpbHRvOmJyZW50LmJp bGdlckB2ZXJpem9uLmNvbT4+DQpEYXRlOiBUdWVzZGF5LCBKdWx5IDIzLCAyMDE5IGF0IDk6NTkg QU0NClRvOiBSb2JlcnRvIFBlb24gPGZlbml4QGZiLmNvbTxtYWlsdG86ZmVuaXhAZmIuY29tPj4N CkNjOiAiYnJlbnQuYmlsZ2VyQHZlcml6b24uY29tPG1haWx0bzpicmVudC5iaWxnZXJAdmVyaXpv bi5jb20+IiA8YnJlbnQuYmlsZ2VyQHZlcml6b24uY29tPG1haWx0bzpicmVudC5iaWxnZXJAdmVy aXpvbi5jb20+PiwgV2F0c29uIExhZGQgPHdhdHNvbmJsYWRkQGdtYWlsLmNvbTxtYWlsdG86d2F0 c29uYmxhZGRAZ21haWwuY29tPj4sICJicmVudC5iaWxnZXI9NDB2ZXJpem9uLmNvbUBkbWFyYy5p ZXRmLm9yZzxtYWlsdG86YnJlbnQuYmlsZ2VyPTQwdmVyaXpvbi5jb21AZG1hcmMuaWV0Zi5vcmc+ IiA8YnJlbnQuYmlsZ2VyPTQwdmVyaXpvbi5jb21AZG1hcmMuaWV0Zi5vcmc8bWFpbHRvOmJyZW50 LmJpbGdlcj00MHZlcml6b24uY29tQGRtYXJjLmlldGYub3JnPj4sICJxdWljQGlldGYub3JnPG1h aWx0bzpxdWljQGlldGYub3JnPiIgPHF1aWNAaWV0Zi5vcmc8bWFpbHRvOnF1aWNAaWV0Zi5vcmc+ PiwgSWFuIFN3ZXR0IDxpYW5zd2V0dD00MGdvb2dsZS5jb21AZG1hcmMuaWV0Zi5vcmc8bWFpbHRv OmlhbnN3ZXR0PTQwZ29vZ2xlLmNvbUBkbWFyYy5pZXRmLm9yZz4+DQpTdWJqZWN0OiBSZTogW0Vd IERvUy1pbmcgUVVJQyBzZXJ2ZXJzIGlzIHRvbyBlYXN5DQoNClRoZXJlIGFyZSBsb3RzIG9mIHBv c3NpYmxlIHNjZW5hcmlvcywgc28gcGxlYXNlIGp1c3QgY29uc2lkZXIgdGhlc2UgdG8gYmUgZXhh bXBsZXMuIExldOKAmXMgZGl2aWRlIHRoZSB3b3JsZCBvZiBzZXJ2ZXJzIGluIHRvIDEpIGVudGVy cHJpc2UgYnVzaW5lc3MtdG8tYnVzaW5lc3Mgd2Vic2l0ZXMsIDIpIHdlYnNpdGVzIG1lYW50IGZv ciBjb25zdW1lcnMgd2hlcmUgYXV0aGVudGljYXRpb24gaXMgZGVzaXJhYmxlLCBhbmQgMykgd2Vi c2l0ZXMgdGhhdCB3aWxsIHdhbnQgdG8gYWxsb3cgdGhlaXIgdXNlcnMgdG8gYmUgYW5vbnltb3Vz LCB0aGVyZWZvcmUsIHByZS1hdXRoZW50aWNhdGlvbiB3b3VsZCBub3QgYXBwbHkuDQoNCkVudGVy cHJpc2UgYnVzaW5lc3MtdG8tYnVzaW5lc3Mgd2Vic2l0ZXMgY291bGQgdXNlIHNvbWV0aGluZyBz aW1pbGFyIHRvIHRoZSBTb2Z0d2FyZSBEZWZpbmVkIFBlcmltZXRlciAoU0RQKSBTaW5nbGUgUGFj a2V0IEF1dGhvcml6YXRpb24gKFNQQSkgcHJvdG9jb2wgY3JlYXRlZCBieSB0aGUgQ2xvdWQgU2Vj dXJpdHkgQWxsaWFuY2UuIEl0IHVzZXMgdGhlIGZhY3QgdGhhdCBjbGllbnRzIGFyZSBvbi1ib2Fy ZGVkIHRvIHRoZSBzeXN0ZW0gaW4gYSBvbmUgdGltZSBldmVudCB0byBwcm92aWRlIHRoZSBjbGll bnRzIHdpdGggYSBzaGFyZWQgc2VjcmV0IGtleS4gVGhlIGtleSBpcyB1c2VkIGluIGEgY291bnRl ci1iYXNlZCBITUFDIGNhbGN1bGF0aW9uLiBTaW5jZSBvbmx5IGFuIGF1dGhvcml6ZWQgY2xpZW50 IGNhbiBjYWxjdWxhdGUgdGhlIHByb3BlciBITUFDLCB0aGUgSE1BQyBjYW4gYmUgdXNlZCBmb3Ig cHJlLWF1dGhlbnRpY2F0aW9uLiBUaHVzLCB0aGUgcHJlLWF1dGhlbnRpY2F0aW9uIHRva2VuIGNv dWxkIGxvb2sgc29tZXRoaW5nIGxpa2UgdGhpczoNCkNsaWVudC0+U2VydmVyOiBDbGllbnRJRCwg Q291bnRlciwgSE1BQ1tDbGllbnRJRCB8fCBDb3VudGVyLCBLc10gd2hlcmUgS3MgaXMgYSBzaGFy ZWQgc2VjcmV0IGtleSB0aGF0IGJvdGggdGhlIGNsaWVudCBhbmQgc2VydmVyIGhhdmUuDQpPbiB0 aGUgc2VydmVyIHNpZGUsIHRoZSBzZXJ2ZXIgd291bGQgcmVjYWxjdWxhdGUgdGhlIEhNQUMgYW5k IGNvbXBhcmUgaXQgdG8gdGhlIG9uZSBwcm92aWRlZCBieSB0aGUgY2xpZW50Lg0KTm90ZSB0aGF0 IHRoaXMgaW5mb3JtYXRpb24gaXMgc2VudCBmcm9tIHRoZSBjbGllbnQgdG8gdGhlIHNlcnZlciBp biBjbGVhciB0ZXh0IChpLmUuLCBub3QgZW5jcnlwdGVkKS4NCkluIHByYWN0aWNlLCB0aGVyZSB3 b3VsZCBwcm9iYWJseSBiZSBtb3JlIGZpZWxkcywgYnV0IHRoZSBpbXBvcnRhbnQgcGFydCBpcyB0 aGF0IHRoZSBvbmUtdGltZSBvbiBib2FyZGluZyBlbmFibGVzIGEgbGlmZXRpbWUgb2YgcHJlLWF1 dGhlbnRpY2F0aW9uIHRva2Vucy4NCg0KV2Vic2l0ZXMgbWVhbnQgZm9yIGNvbnN1bWVycyB3b3Vs ZCBwcm9iYWJseSBiZSBoYW5kbGVkIGRpZmZlcmVudGx5IC0gc3BlY2lmaWNhbGx5LCBubyBvbi1i b2FyZGluZy4gVGhhdCBtZWFucyB0aGVyZSB3b3VsZCBiZSBzb21lIGtpbmQgb2YgdG9rZW4gc2Vy dmljZSAtIHNpbWlsYXIgdG8gT0F1dGgsIGJ1dCBvcGVyYXRpbmcgcHJpb3IgdG8gdGhlIFRDUCBl cXVpdmFsZW50IG9mIFNZTi9BQ0suIFBlcmhhcHMgQ2xvdWRGbGFpciBvciBHb29nbGUgb3IgTWlj cm9zb2Z0IGNvdWxkIGludmVudCBzb21ldGhpbmcgbGlrZSB0aGlzIGFuZCBvZmZlciBpdCBhcyBh IHNlcnZpY2U/Pz8NCg0KQWdhaW4sIHRoZXJlIHdpbGwgYmUgb3RoZXIgd2Vic2l0ZXMgdGhhdCB3 aWxsIG5vdCB3YW50IHByZS1hdXRoZW50aWNhdGlvbiBiZWNhdXNlIHRoZXkgd2FudCB0byBhbGxv dyBhbm9ueW1vdXMgdXNlcnMgdG8gdGhlaXIgc2l0ZS4NCg0KQnJlbnQNCg0KDQpPbiBKdWwgMjMs IDIwMTksIGF0IDY6MjYgQU0sIFJvYmVydG8gUGVvbiA8ZmVuaXhAZmIuY29tPG1haWx0bzpmZW5p eEBmYi5jb20+PiB3cm90ZToNCg0KSSdtIHRyeWluZyB0byB1bmRlcnN0YW5kIGhvdyBhbnl0aGlu ZyB3YXMgcHJlLWF1dGhlbnRpY2F0ZWQgd2l0aG91dCBzdWZmZXJpbmcgZnJvbSBhbGwgb2YgdGhl IHNhbWUgcHJvYmxlbXMuDQpIb3cgd291bGQgc3VjaCBwcmUtYXV0aGVudGljYXRpb24gYmUgZG9u ZSBpbiBwcmFjdGljZSwgZXNwZWNpYWxseSBpbiBzY2VuYXJpb3Mgd2hlcmUgdGhlIHNlcnZlciBk b2Vzbid0IGhhdmUgYSB3aGl0ZWxpc3Qgb2YgY2xpZW50cywgYW5kIHRoYXQgc2VydmljZSBkZXNp cmVzIHRyYWZmaWMgZnJvbSBub24tbWFsaWNpb3VzIGNsaWVudHM/DQotPVINCkdldCBPdXRsb29r IGZvciBBbmRyb2lkPGh0dHBzOi8vdXJsZGVmZW5zZS5wcm9vZnBvaW50LmNvbS92Mi91cmw/dT1o dHRwcy0zQV9fYWthLm1zX2doZWkzNiZkPUR3TUYtZyZjPXVkQlRSdkZ2WEM1RGhxZzdVSHBKbFBw czNtWjNMUnhwYjZfXzBQb21CVFEmcj1XLU8wdDB6d2hnWEhQOHVqcGg2dXozckgwTXR1YUx3RXJf N2dFMnAxWDVvJm09Q1YtSEloYlJWcC1hcmdpTnJWdV9ESzdyT05rNXh0OUw1cjBFZm13MTcwSSZz PVdYaGpRNWNHZkNydzZCU1hkcTVqeWRLRWJPRjJQdTN0akwyUVpXWHo2ZVkmZT0+DQoNCl9fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fDQpGcm9tOiBicmVudC5iaWxnZXJAdmVyaXpvbi5j b208bWFpbHRvOmJyZW50LmJpbGdlckB2ZXJpem9uLmNvbT4gPGJyZW50LmJpbGdlckB2ZXJpem9u LmNvbTxtYWlsdG86YnJlbnQuYmlsZ2VyQHZlcml6b24uY29tPj4NClNlbnQ6IFR1ZXNkYXksIEp1 bHkgMjMsIDIwMTkgODoyMTowNSBBTQ0KVG86IFdhdHNvbiBMYWRkIDx3YXRzb25ibGFkZEBnbWFp bC5jb208bWFpbHRvOndhdHNvbmJsYWRkQGdtYWlsLmNvbT4+DQpDYzogYnJlbnQuYmlsZ2VyPTQw dmVyaXpvbi5jb21AZG1hcmMuaWV0Zi5vcmc8bWFpbHRvOmJyZW50LmJpbGdlcj00MHZlcml6b24u Y29tQGRtYXJjLmlldGYub3JnPiA8YnJlbnQuYmlsZ2VyPTQwdmVyaXpvbi5jb21AZG1hcmMuaWV0 Zi5vcmc8bWFpbHRvOmJyZW50LmJpbGdlcj00MHZlcml6b24uY29tQGRtYXJjLmlldGYub3JnPj47 IFJvYmVydG8gUGVvbiA8ZmVuaXhAZmIuY29tPG1haWx0bzpmZW5peEBmYi5jb20+PjsgcXVpY0Bp ZXRmLm9yZzxtYWlsdG86cXVpY0BpZXRmLm9yZz4gPHF1aWNAaWV0Zi5vcmc8bWFpbHRvOnF1aWNA aWV0Zi5vcmc+PjsgYnJlbnQuYmlsZ2VyQHZlcml6b24uY29tPG1haWx0bzpicmVudC5iaWxnZXJA dmVyaXpvbi5jb20+IDxicmVudC5iaWxnZXJAdmVyaXpvbi5jb208bWFpbHRvOmJyZW50LmJpbGdl ckB2ZXJpem9uLmNvbT4+OyBJYW4gU3dldHQgPGlhbnN3ZXR0PTQwZ29vZ2xlLmNvbUBkbWFyYy5p ZXRmLm9yZzxtYWlsdG86aWFuc3dldHQ9NDBnb29nbGUuY29tQGRtYXJjLmlldGYub3JnPj4NClN1 YmplY3Q6IFJlOiBbRV0gRG9TLWluZyBRVUlDIHNlcnZlcnMgaXMgdG9vIGVhc3kNCg0KDQoNCg0K T24gSnVsIDIyLCAyMDE5LCBhdCA5OjE2IFBNLCBXYXRzb24gTGFkZCA8d2F0c29uYmxhZGRAZ21h aWwuY29tPG1haWx0bzp3YXRzb25ibGFkZEBnbWFpbC5jb20+PiB3cm90ZToNCg0KT24gTW9uLCBK dWwgMjIsIDIwMTkgYXQgNToyOSBQTQ0KPGJyZW50LmJpbGdlcj00MHZlcml6b24uY29tQGRtYXJj LmlldGYub3JnPG1haWx0bzpicmVudC5iaWxnZXI9NDB2ZXJpem9uLmNvbUBkbWFyYy5pZXRmLm9y Zz4+IHdyb3RlOg0KDQoNCg0KDQpPbiBKdWwgMjIsIDIwMTksIGF0IDEwOjEwIEFNLCBSb2JlcnRv IFBlb24gPGZlbml4QGZiLmNvbTxtYWlsdG86ZmVuaXhAZmIuY29tPj4gd3JvdGU6DQoNCldoZW4g eW914oCZcmUgdGFsa2luZyBhYm91dCBwcmUtYXV0aGVudGljYXRpb24sIGFyZSB5b3UgcmVmZXJy aW5nIHRvIHRoZSAwLXJ0dCBzdHVmZj8NCg0KDQowLVJUVCBpcyBnb29kIHN0dWZmLiBJdCByZWR1 Y2VzIHRpbWUgZm9yIGEgZGV2aWNlIHRoYXTigJlzIGFscmVhZHkga25vd24gdG8gYmUgYXV0aG9y aXplZCB0byBjb25uZWN0IHRvIHRoZSBzZXJ2ZXIuDQoNClBhcnQgb2YgdGhlIHByb2JsZW0gaXMg dG8gc3RvcCByZXNvdXJjZSBEb1MuIFRoZSBvdGhlciBwYXJ0IGlzIGFib3V0IGluZm9ybWF0aW9u IGxlYWthZ2UuDQoNCkxldOKAmXMgYXNzdW1lIGEgdGltZSB3aGVuIGFsbCB3ZWJzaXRlIHVzZSBR VUlDIGFuZCBsZXQncyB0YWtlIGFuIGFkdmVyc2FyeSB3aG8gaGFzIGp1c3QgbGVhcm5lZCBhYm91 dCBhIHZ1bG5lcmFiaWxpdHkgaW4gV29yZHByZXNzLiBUaGUgYWR2ZXJzYXJ5IHdhbnRzIHRvIHNj YW4gdGhlIEludGVybmV0IGZpbmRpbmcgV29yZHByZXNzIHNpdGVzLiBOb3csIGlmIHRoZSBRVUlD IGNvbm5lY3Rpb24gcmVxdWlyZWQgcHJlLWF1dGhlbnRpY2F0aW9uLCB0aGVuIHRoZSBzZXJ2ZXIg d291bGQgYmUgYmxhY2sgdG8gdGhlIGNvbm5lY3Rpb24gYW5kIHRoZSBhZHZlcnNhcnkgY291bGQg bm90IGRldGVybWluZSBpZiB0aGUgc2l0ZSB1c2VzIFdvcmRwcmVzcy4gQnV0LCBhcyBpdCBzdGFu ZHMgdG9kYXksIGluIHRoaXMgZnV0dXJlIHRpbWUsIHRoZSBhZHZlcnNhcnkgc2NhbnMgdGhlIElu dGVybmV0LCBjb25uZWN0cyB0byB0aGUgc2VydmVyLCBhbmQgaXMgaGFuZGVkIGEgV29yZHByZXNz IGxvZ2luIHNjcmVlbi4gTm93IHRoZSBhZHZlcnNhcnkga25vd3Mgd2hlcmUgdG8gYXR0YWNrLg0K DQpJZiBjb25uZWN0aW9uIHJlcXVpcmVzIHByZWF1dGhlbnRpY2F0aW9uIHRoZW4gbm8gb25lIGNh biBzZWUgdGhlIHNpdGUsIG5vPw0KDQoNCg0KSW4gdGhlIGVudGVycHJpc2UgaXQgaXMgYSBsaXR0 bGUgZGlmZmVyZW50LiBDb21wYW5pZXMgaW1wbGVtZW50IHJldmVyc2UgcHJveGllcyB0byB0cnkg dG8gcHJvdGVjdCBzZXJ2ZXJzIGZyb20gdW5hdXRob3JpemVkIHVzZXJzLiBCdXQgd2hhdCBpZiB0 aGUgc2VydmVycyByZXF1aXJlZCBhIHByZS1hdXRoZW50aWNhdGlvbiB0b2tlbi4gVGhlbiwgcmV2 ZXJzZSBwcm94aWVzIHdvdWxkIG5vdCBiZSBuZWVkZWQuDQoNClNvIEkgdGhpbmsgdGhlcmUgYXJl IHR3byBkaWZmZXJlbnQgdGhpbmdzIGhlcmUsIG9yIG1heWJlIEknbSBtaXN1bmRlcnN0YW5kaW5n Og0KMTogV2UgaGF2ZSBzZXJ2ZXJzIHRoYXQgaGF2ZSBhIGxpbWl0ZWQgbnVtYmVyIG9mIGNsaWVu dHMgdGhhdCB3aWxsDQpldmVyIHdhbnQgdG8gY29ubmVjdCB0byB0aGVtLCBhbmQgd2FudCB0byBl bmFibGUgb3RoZXIgZGV2aWNlcyB0bw0KZmlsdGVyIHRoZSB0cmFmZmljLCBzbyBuZWVkIHNvbWUg bWVjaGFuaXNtIHRoYXQgZW5hYmxlcyBhIG1pZGRsZWJveCB0bw0KZmlsdGVyLg0KDQpObyBtaWRk bGUgYm94ISBQcmUtYXV0aGVudGljYXRpb24gbWFrZXMgc2VydmVycyBzZWxmLWRlZmVuZGluZy4g TGFjayBvZiBwcmUtYXV0aGVudGljYXRpb24gaXMgd2h5IHdlIGhhdmUgbWlkZGxlIGJveGVzLg0K DQoNCjI6IFdlIGhhdmUgc2VydmVycyBnZW5lcmFsbHkgYXZhaWxhYmxlIHRvIHRoZSBwdWJsaWMg YW5kIGFyZSBjb25jZXJuZWQNCnRoYXQgdGhlIFFVSUMgdmVyc2lvbiBvZiBhIFNZTiBmbG9vZCBj YW4ndCBiZSBkZWFsdCB3aXRoIChkZXNwaXRlDQpldmlkZW5jZSB0byB0aGUgY29udHJhcnkpLg0K DQpDb21wYW5pZXMgYW5kIHdlYnNpdGUgb3duZXJzIGhhdmUgdG8gcGF5IGZvciBhbnRpLURvUyBz ZXJ2aWNlcyBmcm9tIHRoZSBsaWtlcyBvZiBWZXJpem9uIGFuZCBvdGhlcnMgQkVDQVVTRSBzZXJ2 ZXJzIGxpc3RlbiB0byBhbGwgY2xpZW50cy4gV2l0aCBwcmUtYXV0aGVudGljYXRpb24sIHRoZSBu ZWVkIHRvIGhhdmUgYW4gYW50aS1Eb1Mgc2VydmljZSB3b3VsZCBiZSBncmVhdGx5IHJlZHVjZWQg YmVjYXVzZSBzZXJ2ZXJzIHdvdWxkIG5vdCByZXNwb25kIHRvIHVuYXV0aG9yaXplZCBjbGllbnRz Lg0KDQpBbmQgdGhlIHBvaW50IGFib3V0IGluZm9ybWF0aW9uIGxlYWthZ2UgaXMgaW1wb3J0YW50 LCB0b28uDQoNCkJyZW50DQoNCg0KDQpJIGRvbid0IGtub3cgbXVjaCBhYm91dCBob3cgQ2xvdWRm bGFyZSAobXkgcGxhY2Ugb2YgZW1wbG95bWVudCkgIGRlYWxzDQp3aXRoIDIgYnV0IGhvcGVmdWxs eSBzb21lIHBlb3BsZSB3aG8gZG8vaW1wbGVtZW50b3JzIGNhbiBzcGVhayB1cA0KYWJvdXQgaG93 IG11Y2ggb2YgYSBwcm9ibGVtIGl0IGlzLiBCdXQgMSBpcyBJIHRoaW5rIHZlcnkgbXVjaCBhDQpu b25nb2FsOiBtaWRkbGVib3ggb3NzaWZpY2F0aW9uIGlzIHBhcnQgb2YgdGhlIHJlYXNvbiB3ZSBo YXZlIFFVSUMuDQoNClNpbmNlcmVseSwNCldhdHNvbiBMYWRkDQoNCg0KDQpCcmVudCBCbGlnZXIN CkRpcmVjdG9yLVRlY2hub2xvZ3kgVmVyaXpvbiBTRFANCmJyZW50LmJpbGdlckB2ZXJpem9uLmNv bTxtYWlsdG86YnJlbnQuYmlsZ2VyQHZlcml6b24uY29tPg0KDQoNCg0KDQoNCg0KDQpCcmVudCBC bGlnZXINCkRpcmVjdG9yLVRlY2hub2xvZ3kgVmVyaXpvbiBTRFANCmJyZW50LmJpbGdlckB2ZXJp em9uLmNvbTxtYWlsdG86YnJlbnQuYmlsZ2VyQHZlcml6b24uY29tPg0KDQoNCg0KDQpCcmVudCBC bGlnZXINCkRpcmVjdG9yLVRlY2hub2xvZ3kgVmVyaXpvbiBTRFANCmJyZW50LmJpbGdlckB2ZXJp em9uLmNvbTxtYWlsdG86YnJlbnQuYmlsZ2VyQHZlcml6b24uY29tPg0KDQoNCg0KDQoNCg== --_000_3118B75CAEAC4A22954E592EBCB000EFoneverizoncom_ Content-Type: text/html; charset="utf-8" Content-ID: <712F3380E86A5740B565A6C62E449474@vzwcorp.com> Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgbGluZS1icmVhazogYWZ0 ZXItd2hpdGUtc3BhY2U7IiBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCjxkaXY+PGJyIGNsYXNz PSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPk9u IEp1bCAyMywgMjAxOSwgYXQgNzozOSBBTSwgUm9iZXJ0byBQZW9uICZsdDs8YSBocmVmPSJtYWls dG86ZmVuaXhAZmIuY29tIiBjbGFzcz0iIj5mZW5peEBmYi5jb208L2E+Jmd0OyB3cm90ZTo8L2Rp dj4NCjxiciBjbGFzcz0iQXBwbGUtaW50ZXJjaGFuZ2UtbmV3bGluZSI+DQo8ZGl2IGNsYXNzPSIi Pg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIiBzdHlsZT0icGFnZTogV29yZFNlY3Rpb24xOyBj YXJldC1jb2xvcjogcmdiKDAsIDAsIDApOyBmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNp emU6IDE4cHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsg Zm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjog c3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFj ZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDog MHB4OyB0ZXh0LWRlY29yYXRpb246IG5vbmU7Ij4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBp biAwLjAwMDFwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1z ZXJpZjsiIGNsYXNzPSIiPg0KSeKAmWQgYXNzdW1lICMxIGlzIGxlc3MgbGlrZWx5IHRvIGV4cGVy aWVuY2UgY3JpcHBsaW5nIFNZTi1iYXNlZCBEb1MgYXR0YWNrcywgYW5kIGNvdWxkIG90aGVyd2lz ZSBiZSBhY2NvbXBsaXNoZWQgYnkgbGltaXRpbmcgYWNjZXNzIGluIElQLXNwYWNlIChpbXBlcmZl Y3QsIGJ1dCB3ZeKAmXJlIGxvb2tpbmcgZm9yIOKAnGdvb2QtZW5vdWdo4oCdLCBoZXJlKS48L2Rp dj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2PjxiciBjbGFzcz0iIj4NCjwv ZGl2Pg0KTm90IHNvLCBlbnRlcnByaXNlIGlzIHdoZXJlIHRoZSBhdHRyYWN0aW9uIGlzIHRvZGF5 LiBUaGVyZeKAmXMgRG9TIG9uIHNpdGVzIHRoYXQgYXJlIOKAnG1vdmluZyB0byB0aGUgY2xvdWTi gJ0sIGJ1dCBhbHNvIHRoZXJlIGlzIGluZm9ybWF0aW9uIGxlYWthZ2UgZGVyaXZlZCBmcm9tIGp1 c3QgY29ubmVjdGluZyB0byB0aGUgc2VydmVyIHZpYSBUQ1AvSVAuIFRoZSBsZWFrYWdlIG9mdGVu IGRldGVybWluZXMgdGhlIHR5cGUgb2Ygc2VydmVyIGFuZCBvZnRlbg0KIHdoYXQgYXBwbGljYXRp b25zIGNvbGQgYmUgcnVubmluZyBvbiBpdC4gVGFrZSBub3QgcGV0cmEuIFNjYW5uaW5nIHRoZSBp bnRlcm5ldCBhbmQgZmluZGluZyBhIHdpbmRvd3Mgc2VydmVyIHRoZSBtYWx3YXJlIGF0dGVtcHRl ZCB0aGUgZXRlcm5hbCBibHVlIHZ1bG5lcmFiaWxpdHkuIElmIHRob3NlIHNlcnZlcnMgd2VyZSBR VUlDIHdpdGggcHJlLWF1dGhlbnRpY2F0aW9uIHRoZSBhdHRhY2sgd291bGQgaGF2ZSBiZWVuIGRl ZmVhdGVkLiBBbmQgdGhlDQogc2FtZSBvbiB0aGUgaW50ZXJuYWwgbmV0d29yay4gVGhlIFplcm8g VHJ1c3QgbW9kZWwgaXMgdGhlIG5ldyBidXp6IHRlcm0gaW4gc2VjdXJpdHkuIFRoZSBhcHByb2Fj aCByZWNvbW1lbmRlZCBpcyB0byBpc29sYXRlIHNlcnZlcnMgYW5kIHJlcXVpcmUgcHJlLWF1dGhv cml6YXRpb24gcHJpb3IgdG8gZW5hYmxpbmcgY29ubmVjdGl2aXR5LjwvZGl2Pg0KPGRpdj48YnIg Y2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9 IiI+DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEiIHN0eWxlPSJwYWdlOiBXb3JkU2VjdGlvbjE7 IGNhcmV0LWNvbG9yOiByZ2IoMCwgMCwgMCk7IGZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQt c2l6ZTogMThweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFs OyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWdu OiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNw YWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRo OiAwcHg7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4g MGluIDAuMDAwMXB0OyBmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5z LXNlcmlmOyIgY2xhc3M9IiI+DQo8bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPGRpdiBzdHls ZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5 OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQouLiB3aGlj aCBtZWFucyB0aGF0IEkgdGhpbmsgd2Ugc2hvdWxkIGNvbnNpZGVyIDImIzQzOzMgb25seSwgcmVh bGx5LjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCkZvciAjMiBhbmQgIzMsIHdoaWNoIEkg c3VzcGVjdCBoYXZlIHNpZ25pZmljYW50IG92ZXJsYXBzIChzaXRlcyBtYXkgcHJvdmlkZSBzZXJ2 aWNlcyBib3RoIHRvIGxvZ2dlZC1pbiB1c2VycyBhbmQgdXNlcnMgd2hvIGFyZW7igJl0IGxvZ2dl ZCBpbiksIHRoZSBwcmUtYXV0aG9yaXphdGlvbiBlaXRoZXI6PGJyIGNsYXNzPSIiPg0KJm5ic3A7 IGEpIGNhbiBiZSBEb1PigJlkIGl0c2VsZi48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjwvZGl2Pg0K PC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2PjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KQSBjb21t b24gJm5ic3A7cGhpbG9zb3BoeSBvZiBwZW9wbGUgaW4gdGhlIHNlY3VyaXR5IGluZHVzdHJ5IGlz LCDigJxwdXQgYWxsIHlvdXIgZWdncyBpbiBvbmUgYmFza2V0IGFuZCBwcm90ZWN0IHRoZSBiYXNr ZXQgcmVhbGx5LCByZWFsbHkgd2VsbC7igJ0gTm93IEkgdW5kZXJzdGFuZCB0aGlzIGlzIGEgY29u dHJhcnkgdG8gdGhlIHBoaWxvc29waHkgb2YgbmV0d29ya2luZyBwZW9wbGUgd2hlcmUgZXZlcnl0 aGluZyBpcyBhYm91dCBkaXN0cmlidXRlZCByZWR1bmRhbmN5LA0KIGJ1dCB0aGVyZSBhcmUgdmVy eSBnb29kIHJlYXNvbnMgZm9yIHRoZSBzZWN1cml0eSBwaGlsb3NvcGh5LjwvZGl2Pg0KPGRpdj48 YnIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4NCjxkaXYgY2xh c3M9IiI+DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEiIHN0eWxlPSJwYWdlOiBXb3JkU2VjdGlv bjE7IGNhcmV0LWNvbG9yOiByZ2IoMCwgMCwgMCk7IGZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZv bnQtc2l6ZTogMThweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9y bWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFs aWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRl LXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdp ZHRoOiAwcHg7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAw aW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBz YW5zLXNlcmlmOyIgY2xhc3M9IiI+DQombmJzcDsgYikgY2FuIGJlIHVzZWQgdG8gZG8gYSBEb1Mg aW4gdGhlIGZ1dHVyZS48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Js b2NrcXVvdGU+DQo8ZGl2PjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KSSB3YXNu4oCZdCB2ZXJ5IGNv bXBsZXRlIGluIHByb3ZpZGluZyB0aGUgZGV0YWlscyBvZiBTaW5nbGUgUGFja2V0IEF1dGhvcml6 YXRpb24uIFlvdSBtYXkgd2FudCB0byByZWFkIHRoZSBzcGVjaWZpY2F0aW9uIGZvciB0aGUgZnVs bCBkZXRhaWxzLCBidXQgdGhlIHF1aWNrIG9mIGl0IGlzIHRoYXQgU2luZ2xlIFBhY2tldCBBdXRo b3JpemF0aW9uIGlzIGJhc2VkIG9uIFJGQyA0MjI2IHdoaWNoIGlzIEhhc2hlZCBPbmUgVGltZSBQ YXNzd29yZCB3aXRoDQogcmVwbGF5IHByZXZlbnRpb24gdmlhIGEgY291bnRlciB0aGF0IGlzIGlu Y3JlbWVudGVkIGVhY2ggdGltZSBpdCBpcyB1c2VkLiBBbmQgdGhlIG90aGVyIHBhcnQgeW91IHNo b3VsZCBrbm93IGlzIHRoYXQgZWFjaCBjbGllbnQgd291bGQgaGF2ZSBpdHMgb3duIHNlY3JldCBr ZXkgc3VjaCB0aGF0IHN0ZWFsaW5nIGEga2V5IGlzIHRoZSBjb21wcm9taXNlIG9mIGp1c3Qgb25l IGNsaWVudC48L2Rpdj4NCjxkaXY+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2PkFnYWluLCB0 aGUgYWJvdmUgaXMganVzdCBhbiBleGFtcGxlLiBJZiB0aGUgUkZDIGNvbnRhaW5lZCB0aGUgY29u Y2VwdCBvZiBwcmUtYXV0aGVudGljYXRpb24sIHRoZXJlIHdvdWxkIGJlIHBsZW50eSBvZiByZWFs bHkgZ29vZCBpZGVhcyBvbiB0aGUgdG9waWMuPC9kaXY+DQo8ZGl2PjxiciBjbGFzcz0iIj4NCjwv ZGl2Pg0KPGRpdj5CcmVudDwvZGl2Pg0KPGRpdj48YnIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0 eXBlPSJjaXRlIiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSJXb3JkU2Vj dGlvbjEiIHN0eWxlPSJwYWdlOiBXb3JkU2VjdGlvbjE7IGNhcmV0LWNvbG9yOiByZ2IoMCwgMCwg MCk7IGZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMThweDsgZm9udC1zdHlsZTog bm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBs ZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBw eDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2lu ZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQtZGVjb3JhdGlvbjog bm9uZTsiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6 IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+DQo8YnIg Y2xhc3M9IiI+DQo8bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2lu OiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJp LCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+DQpJbiBjYXNlIGIsIGFzIGFuIGF0dGFja2VyLCB5b3Xi gJlkIGdldCBvciB3YWl0IGZvciB0aGUgY2xpZW50IHRvIGF1dGhlbnRpY2F0ZSwgdGhlbiB1c2Ug dGhhdCBhdXRoZW50aWNhdGlvbiBpbiBhIHJlcGxheSBhdHRhY2ssIGUuZy4gYnkgcmVwbGljYXRp bmcgdGhlIGF1dGggdG9rZW4gYWNyb3NzIG1hbnkgaG9zdHMuPGJyIGNsYXNzPSIiPg0KSW4gY2Fz ZXMgd2hlcmUgeW91IGFyZSBkaXNhbGxvd2VkIHRvIHJlcGxpY2F0ZSB0aGUgYXV0aCB0b2tlbiwg ZS5nLiBiZWNhdXNlIGl0IGlzIHRpZWQgdG8gYSBwYXJ0aWN1bGFyIElQLCB5b3UgY2FuIGhlbHAg c29sdmUgdGhlIHJlcGxheSBhdHRhY2sgaG93ZXZlciB5b3XigJlsbCBiZSBiaWFzaW5nIHRyYWZm aWMgdG8gdXNlcnMgd2hvc2UgSVAgaXMgc3RhYmxlIGFuZCB3aG8gYXJlIGxvZ2dlZCBpbi9hdXRo 4oCZZC48YnIgY2xhc3M9IiI+DQpJbiB0aGUgcHJlLXNoYXJlZCBrZXkgc2NlbmFyaW8gdGhhdCB3 YXMgZGVzY3JpYmVkLCBpZiBhbnkgb25lIGNsaWVudCBsZWFrcyB0aGUgc2hhcmVkLXNlY3JldCwg dGhlbiBpdCBiZWNvbWVzIG5vdCB2ZXJ5IHVzZWZ1bCBhbmQgY2VydGFpbmx5IGRvZXNu4oCZdCBw cm90ZWN0IGFnYWluc3QgYSBEb1MuIEnigJlkIGd1ZXNzIHRoYXQgdGhlIHByb2JhYmlsaXR5IG9m IHRoZSBsb3NzIG9mIGEgc3ltbWV0cmljIGtleSBpcyBwcm9wb3J0aW9uYWwgdG8gdGhlIGJyZWFk dGgNCiBvZiB0aGUgZGlzdHJpYnV0aW9uIG9mIHRoZSBrZXkuPGJyIGNsYXNzPSIiPg0KPGJyIGNs YXNzPSIiPg0KV2hhdCBJ4oCZbSB0cnlpbmcgdG8gcG9pbnQgb3V0IGlzIHRoYXQgdGhpcyBkb2Vz buKAmXQgcmVhbGx5IHNlZW0gdG8gc29sdmUgdGhlIGdlbmVyaWMgRG9TIGF0dGFjay48YnIgY2xh c3M9IiI+DQpZb3XigJlsbCBzdGlsbCBuZWVkIHRvIGRvIHNvbWUgaGV1cmlzdGljcy9ydWxlcyBi YXNlZCB1cG9uIHdoYXRldmVyIGlzIG9ic2VydmFibGUsIGF0IGEgbWluaW11bSB0aGUgNS10dXBs ZS48YnIgY2xhc3M9IiI+DQpHZXR0aW5nIG1vcmUgdGhhbiB0aGUgNS10dXBsZSB0byBiZSB2aXNp YmxlIHdpbGwgdGFrZSBtb3JlIHdvcmsgYnkgdGhlIHNlcnZlciwgdHJ1ZSwgYnV0IGdpdmVuIG90 aGVyIGRlc2lnbiBjb25zdHJhaW50cywgSSBkb27igJl0IHNlZSBob3cgdGhhdCBpcyBhdm9pZGFi bGUuPGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KLT1SPG86cCBjbGFzcz0iIj48L286cD48 L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAx MXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0KPG86cCBj bGFzcz0iIj4mbmJzcDs8L286cD48L2Rpdj4NCjxkaXYgc3R5bGU9ImJvcmRlci1zdHlsZTogc29s aWQgbm9uZSBub25lOyBib3JkZXItdG9wLXdpZHRoOiAxcHQ7IGJvcmRlci10b3AtY29sb3I6IHJn YigxODEsIDE5NiwgMjIzKTsgcGFkZGluZzogM3B0IDBpbiAwaW47IiBjbGFzcz0iIj4NCjxkaXYg c3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZh bWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0KPGIgY2xhc3M9IiI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZTogMTJwdDsiIGNsYXNzPSIiPkZyb206PHNwYW4gY2xhc3M9IkFwcGxl LWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZTogMTJwdDsiIGNsYXNzPSIiPiZxdW90OzxhIGhyZWY9Im1haWx0bzpicmVudC5iaWxn ZXJAdmVyaXpvbi5jb20iIGNsYXNzPSIiPmJyZW50LmJpbGdlckB2ZXJpem9uLmNvbTwvYT4mcXVv dDsgJmx0OzxhIGhyZWY9Im1haWx0bzpicmVudC5iaWxnZXJAdmVyaXpvbi5jb20iIGNsYXNzPSIi PmJyZW50LmJpbGdlckB2ZXJpem9uLmNvbTwvYT4mZ3Q7PGJyIGNsYXNzPSIiPg0KPGIgY2xhc3M9 IiI+RGF0ZTo8c3BhbiBjbGFzcz0iQXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+ PC9iPlR1ZXNkYXksIEp1bHkgMjMsIDIwMTkgYXQgOTo1OSBBTTxiciBjbGFzcz0iIj4NCjxiIGNs YXNzPSIiPlRvOjxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bh bj48L2I+Um9iZXJ0byBQZW9uICZsdDs8YSBocmVmPSJtYWlsdG86ZmVuaXhAZmIuY29tIiBjbGFz cz0iIj5mZW5peEBmYi5jb208L2E+Jmd0OzxiciBjbGFzcz0iIj4NCjxiIGNsYXNzPSIiPkNjOjxz cGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48L2I+JnF1b3Q7 PGEgaHJlZj0ibWFpbHRvOmJyZW50LmJpbGdlckB2ZXJpem9uLmNvbSIgY2xhc3M9IiI+YnJlbnQu YmlsZ2VyQHZlcml6b24uY29tPC9hPiZxdW90OyAmbHQ7PGEgaHJlZj0ibWFpbHRvOmJyZW50LmJp bGdlckB2ZXJpem9uLmNvbSIgY2xhc3M9IiI+YnJlbnQuYmlsZ2VyQHZlcml6b24uY29tPC9hPiZn dDssIFdhdHNvbiBMYWRkICZsdDs8YSBocmVmPSJtYWlsdG86d2F0c29uYmxhZGRAZ21haWwuY29t IiBjbGFzcz0iIj53YXRzb25ibGFkZEBnbWFpbC5jb208L2E+Jmd0OywNCiAmcXVvdDs8YSBocmVm PSJtYWlsdG86YnJlbnQuYmlsZ2VyPTQwdmVyaXpvbi5jb21AZG1hcmMuaWV0Zi5vcmciIGNsYXNz PSIiPmJyZW50LmJpbGdlcj00MHZlcml6b24uY29tQGRtYXJjLmlldGYub3JnPC9hPiZxdW90OyAm bHQ7PGEgaHJlZj0ibWFpbHRvOmJyZW50LmJpbGdlcj00MHZlcml6b24uY29tQGRtYXJjLmlldGYu b3JnIiBjbGFzcz0iIj5icmVudC5iaWxnZXI9NDB2ZXJpem9uLmNvbUBkbWFyYy5pZXRmLm9yZzwv YT4mZ3Q7LCAmcXVvdDs8YSBocmVmPSJtYWlsdG86cXVpY0BpZXRmLm9yZyIgY2xhc3M9IiI+cXVp Y0BpZXRmLm9yZzwvYT4mcXVvdDsNCiAmbHQ7PGEgaHJlZj0ibWFpbHRvOnF1aWNAaWV0Zi5vcmci IGNsYXNzPSIiPnF1aWNAaWV0Zi5vcmc8L2E+Jmd0OywgSWFuIFN3ZXR0ICZsdDs8YSBocmVmPSJt YWlsdG86aWFuc3dldHQ9NDBnb29nbGUuY29tQGRtYXJjLmlldGYub3JnIiBjbGFzcz0iIj5pYW5z d2V0dD00MGdvb2dsZS5jb21AZG1hcmMuaWV0Zi5vcmc8L2E+Jmd0OzxiciBjbGFzcz0iIj4NCjxi IGNsYXNzPSIiPlN1YmplY3Q6PHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5i c3A7PC9zcGFuPjwvYj5SZTogW0VdIERvUy1pbmcgUVVJQyBzZXJ2ZXJzIGlzIHRvbyBlYXN5PG86 cCBjbGFzcz0iIj48L286cD48L3NwYW4+PC9kaXY+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8 ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9u dC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4NCjxvOnAgY2xhc3M9IiI+ Jm5ic3A7PC9vOnA+PC9kaXY+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAw LjAwMDFwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJp ZjsiIGNsYXNzPSIiPg0KVGhlcmUgYXJlIGxvdHMgb2YgcG9zc2libGUgc2NlbmFyaW9zLCBzbyBw bGVhc2UganVzdCBjb25zaWRlciB0aGVzZSB0byBiZSBleGFtcGxlcy4gTGV04oCZcyBkaXZpZGUg dGhlIHdvcmxkIG9mIHNlcnZlcnMgaW4gdG8gMSkgZW50ZXJwcmlzZSBidXNpbmVzcy10by1idXNp bmVzcyB3ZWJzaXRlcywgMikgd2Vic2l0ZXMgbWVhbnQgZm9yIGNvbnN1bWVycyB3aGVyZSBhdXRo ZW50aWNhdGlvbiBpcyBkZXNpcmFibGUsIGFuZCAzKSB3ZWJzaXRlcyB0aGF0DQogd2lsbCB3YW50 IHRvIGFsbG93IHRoZWlyIHVzZXJzIHRvIGJlIGFub255bW91cywgdGhlcmVmb3JlLCBwcmUtYXV0 aGVudGljYXRpb24gd291bGQgbm90IGFwcGx5LjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8 ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250 LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+ DQo8bzpwIGNsYXNzPSIiPiZuYnNwOzwvbzpwPjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIi Pg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDExcHQ7 IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+DQpFbnRlcnByaXNl IGJ1c2luZXNzLXRvLWJ1c2luZXNzIHdlYnNpdGVzIGNvdWxkIHVzZSBzb21ldGhpbmcgc2ltaWxh ciB0byB0aGUgU29mdHdhcmUgRGVmaW5lZCBQZXJpbWV0ZXIgKFNEUCkgU2luZ2xlIFBhY2tldCBB dXRob3JpemF0aW9uIChTUEEpIHByb3RvY29sIGNyZWF0ZWQgYnkgdGhlIENsb3VkIFNlY3VyaXR5 IEFsbGlhbmNlLiBJdCB1c2VzIHRoZSBmYWN0IHRoYXQgY2xpZW50cyBhcmUgb24tYm9hcmRlZCB0 byB0aGUgc3lzdGVtIGluIGEgb25lDQogdGltZSBldmVudCB0byBwcm92aWRlIHRoZSBjbGllbnRz IHdpdGggYSBzaGFyZWQgc2VjcmV0IGtleS4gVGhlIGtleSBpcyB1c2VkIGluIGEgY291bnRlci1i YXNlZCBITUFDIGNhbGN1bGF0aW9uLiBTaW5jZSBvbmx5IGFuIGF1dGhvcml6ZWQgY2xpZW50IGNh biBjYWxjdWxhdGUgdGhlIHByb3BlciBITUFDLCB0aGUgSE1BQyBjYW4gYmUgdXNlZCBmb3IgcHJl LWF1dGhlbnRpY2F0aW9uLiBUaHVzLCB0aGUgcHJlLWF1dGhlbnRpY2F0aW9uIHRva2VuDQogY291 bGQgbG9vayBzb21ldGhpbmcgbGlrZSB0aGlzOjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8 L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAx cHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBj bGFzcz0iIj4NCkNsaWVudC0mZ3Q7U2VydmVyOiBDbGllbnRJRCwgQ291bnRlciwgSE1BQ1tDbGll bnRJRCB8fCBDb3VudGVyLCBLc10gd2hlcmUgS3MgaXMgYSBzaGFyZWQgc2VjcmV0IGtleSB0aGF0 IGJvdGggdGhlIGNsaWVudCBhbmQgc2VydmVyIGhhdmUuPG86cCBjbGFzcz0iIj48L286cD48L2Rp dj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAw LjAwMDFwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJp ZjsiIGNsYXNzPSIiPg0KT24gdGhlIHNlcnZlciBzaWRlLCB0aGUgc2VydmVyIHdvdWxkIHJlY2Fs Y3VsYXRlIHRoZSBITUFDIGFuZCBjb21wYXJlIGl0IHRvIHRoZSBvbmUgcHJvdmlkZWQgYnkgdGhl IGNsaWVudC4mbmJzcDs8bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IGNs YXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6 IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+DQpOb3Rl IHRoYXQgdGhpcyBpbmZvcm1hdGlvbiBpcyBzZW50IGZyb20gdGhlIGNsaWVudCB0byB0aGUgc2Vy dmVyIGluIGNsZWFyIHRleHQgKGkuZS4sIG5vdCBlbmNyeXB0ZWQpLjxvOnAgY2xhc3M9IiI+PC9v OnA+PC9kaXY+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBp biAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNh bnMtc2VyaWY7IiBjbGFzcz0iIj4NCkluIHByYWN0aWNlLCB0aGVyZSB3b3VsZCBwcm9iYWJseSBi ZSBtb3JlIGZpZWxkcywgYnV0IHRoZSBpbXBvcnRhbnQgcGFydCBpcyB0aGF0IHRoZSBvbmUtdGlt ZSBvbiBib2FyZGluZyBlbmFibGVzIGEgbGlmZXRpbWUgb2YgcHJlLWF1dGhlbnRpY2F0aW9uIHRv a2Vucy48bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0K PGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDExcHQ7IGZv bnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+DQo8bzpwIGNsYXNzPSIi PiZuYnNwOzwvbzpwPjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0i bWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBD YWxpYnJpLCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+DQpXZWJzaXRlcyBtZWFudCBmb3IgY29uc3Vt ZXJzIHdvdWxkIHByb2JhYmx5IGJlIGhhbmRsZWQgZGlmZmVyZW50bHkgLSBzcGVjaWZpY2FsbHks IG5vIG9uLWJvYXJkaW5nLiBUaGF0IG1lYW5zIHRoZXJlIHdvdWxkIGJlIHNvbWUga2luZCBvZiB0 b2tlbiBzZXJ2aWNlIC0gc2ltaWxhciB0byBPQXV0aCwgYnV0IG9wZXJhdGluZyBwcmlvciB0byB0 aGUgVENQIGVxdWl2YWxlbnQgb2YgU1lOL0FDSy4gUGVyaGFwcyBDbG91ZEZsYWlyIG9yIEdvb2ds ZSBvcg0KIE1pY3Jvc29mdCBjb3VsZCBpbnZlbnQgc29tZXRoaW5nIGxpa2UgdGhpcyBhbmQgb2Zm ZXIgaXQgYXMgYSBzZXJ2aWNlPz8/PG86cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjwvZGl2Pg0K PGRpdiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9u dC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIi Pg0KPG86cCBjbGFzcz0iIj4mbmJzcDs8L286cD48L2Rpdj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0i Ij4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMXB0 OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0KQWdhaW4sIHRo ZXJlIHdpbGwgYmUgb3RoZXIgd2Vic2l0ZXMgdGhhdCB3aWxsIG5vdCB3YW50IHByZS1hdXRoZW50 aWNhdGlvbiBiZWNhdXNlIHRoZXkgd2FudCB0byBhbGxvdyBhbm9ueW1vdXMgdXNlcnMgdG8gdGhl aXIgc2l0ZS48bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIi Pg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDExcHQ7 IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+DQo8bzpwIGNsYXNz PSIiPiZuYnNwOzwvbzpwPjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHls ZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5 OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+DQpCcmVudDxvOnAgY2xhc3M9IiI+PC9v OnA+PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAu MDAwMXB0OyBmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlm OyIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQo8bzpwIGNsYXNzPSIi PjwvbzpwPjwvZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6IDVwdDsgbWFyZ2lu LWJvdHRvbTogNXB0OyIgY2xhc3M9IiIgdHlwZT0iY2l0ZSI+DQo8ZGl2IGNsYXNzPSIiPg0KPGRp diBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDExcHQ7IGZvbnQt ZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+DQpPbiBKdWwgMjMsIDIwMTks IGF0IDY6MjYgQU0sIFJvYmVydG8gUGVvbiAmbHQ7PGEgaHJlZj0ibWFpbHRvOmZlbml4QGZiLmNv bSIgc3R5bGU9ImNvbG9yOiBwdXJwbGU7IHRleHQtZGVjb3JhdGlvbjogdW5kZXJsaW5lOyIgY2xh c3M9IiI+ZmVuaXhAZmIuY29tPC9hPiZndDsgd3JvdGU6PG86cCBjbGFzcz0iIj48L286cD48L2Rp dj4NCjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNp emU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+DQo8 bzpwIGNsYXNzPSIiPiZuYnNwOzwvbzpwPjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgY2xh c3M9IiI+DQo8ZGl2IGNsYXNzPSIiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdp bjogMGluIDBpbiAxMnB0OyBmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBz YW5zLXNlcmlmOyI+DQo8c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6IEFyaWFsLCBzYW5zLXNlcmlm OyIgY2xhc3M9IiI+SSdtIHRyeWluZyB0byB1bmRlcnN0YW5kIGhvdyBhbnl0aGluZyB3YXMgcHJl LWF1dGhlbnRpY2F0ZWQgd2l0aG91dCBzdWZmZXJpbmcgZnJvbSBhbGwgb2YgdGhlIHNhbWUgcHJv YmxlbXMuPG86cCBjbGFzcz0iIj48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2IGNsYXNz PSIiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAxMnB0OyBm b250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyI+DQo8c3Bh biBzdHlsZT0iZm9udC1mYW1pbHk6IEFyaWFsLCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+SG93IHdv dWxkIHN1Y2ggcHJlLWF1dGhlbnRpY2F0aW9uIGJlIGRvbmUgaW4gcHJhY3RpY2UsIGVzcGVjaWFs bHkgaW4gc2NlbmFyaW9zIHdoZXJlIHRoZSBzZXJ2ZXIgZG9lc24ndCBoYXZlIGEgd2hpdGVsaXN0 IG9mIGNsaWVudHMsIGFuZCB0aGF0IHNlcnZpY2UgZGVzaXJlcyB0cmFmZmljIGZyb20gbm9uLW1h bGljaW91cyBjbGllbnRzPzxvOnAgY2xhc3M9IiI+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0K PGRpdiBjbGFzcz0iIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW46IDBpbiAw aW4gMTJwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJp ZjsiPg0KPHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiBBcmlhbCwgc2Fucy1zZXJpZjsiIGNsYXNz PSIiPi09UjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdiBjbGFz cz0iIj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAx cHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBj bGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTogQXJpYWwsIHNhbnMtc2VyaWY7IiBj bGFzcz0iIj5HZXQ8c3BhbiBjbGFzcz0iQXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3Nw YW4+PGEgaHJlZj0iaHR0cHM6Ly91cmxkZWZlbnNlLnByb29mcG9pbnQuY29tL3YyL3VybD91PWh0 dHBzLTNBX19ha2EubXNfZ2hlaTM2JmFtcDtkPUR3TUYtZyZhbXA7Yz11ZEJUUnZGdlhDNURocWc3 VUhwSmxQcHMzbVozTFJ4cGI2X18wUG9tQlRRJmFtcDtyPVctTzB0MHp3aGdYSFA4dWpwaDZ1ejNy SDBNdHVhTHdFcl83Z0UycDFYNW8mYW1wO209Q1YtSEloYlJWcC1hcmdpTnJWdV9ESzdyT05rNXh0 OUw1cjBFZm13MTcwSSZhbXA7cz1XWGhqUTVjR2ZDcnc2QlNYZHE1anlkS0ViT0YyUHUzdGpMMlFa V1h6NmVZJmFtcDtlPSIgc3R5bGU9ImNvbG9yOiBwdXJwbGU7IHRleHQtZGVjb3JhdGlvbjogdW5k ZXJsaW5lOyIgY2xhc3M9IiI+T3V0bG9vaw0KIGZvciBBbmRyb2lkPC9hPjxvOnAgY2xhc3M9IiI+ PC9vOnA+PC9zcGFuPjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4g MC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2Vy aWY7IiBjbGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTogQXJpYWwsIHNhbnMtc2Vy aWY7IiBjbGFzcz0iIj48bzpwIGNsYXNzPSIiPiZuYnNwOzwvbzpwPjwvc3Bhbj48L2Rpdj4NCjwv ZGl2Pg0KPGRpdiBjbGFzcz0iTXNvTm9ybWFsIiBhbGlnbj0iY2VudGVyIiBzdHlsZT0ibWFyZ2lu OiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJp LCBzYW5zLXNlcmlmOyB0ZXh0LWFsaWduOiBjZW50ZXI7Ij4NCjxociBzaXplPSIwIiB3aWR0aD0i MTAwJSIgYWxpZ249ImNlbnRlciIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgaWQ9ImRpdlJwbHlG d2RNc2ciIGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBm b250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyIgY2xhc3M9 IiI+DQo8YiBjbGFzcz0iIj5Gcm9tOjwvYj48c3BhbiBjbGFzcz0iQXBwbGUtY29udmVydGVkLXNw YWNlIj4mbmJzcDs8L3NwYW4+PGEgaHJlZj0ibWFpbHRvOmJyZW50LmJpbGdlckB2ZXJpem9uLmNv bSIgc3R5bGU9ImNvbG9yOiBwdXJwbGU7IHRleHQtZGVjb3JhdGlvbjogdW5kZXJsaW5lOyIgY2xh c3M9IiI+YnJlbnQuYmlsZ2VyQHZlcml6b24uY29tPC9hPjxzcGFuIGNsYXNzPSJBcHBsZS1jb252 ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj4mbHQ7PGEgaHJlZj0ibWFpbHRvOmJyZW50LmJpbGdl ckB2ZXJpem9uLmNvbSIgc3R5bGU9ImNvbG9yOiBwdXJwbGU7IHRleHQtZGVjb3JhdGlvbjogdW5k ZXJsaW5lOyIgY2xhc3M9IiI+YnJlbnQuYmlsZ2VyQHZlcml6b24uY29tPC9hPiZndDs8YnIgY2xh c3M9IiI+DQo8YiBjbGFzcz0iIj5TZW50OjwvYj48c3BhbiBjbGFzcz0iQXBwbGUtY29udmVydGVk LXNwYWNlIj4mbmJzcDs8L3NwYW4+VHVlc2RheSwgSnVseSAyMywgMjAxOSA4OjIxOjA1IEFNPGJy IGNsYXNzPSIiPg0KPGIgY2xhc3M9IiI+VG86PC9iPjxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0 ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj5XYXRzb24gTGFkZCAmbHQ7PGEgaHJlZj0ibWFpbHRvOndh dHNvbmJsYWRkQGdtYWlsLmNvbSIgc3R5bGU9ImNvbG9yOiBwdXJwbGU7IHRleHQtZGVjb3JhdGlv bjogdW5kZXJsaW5lOyIgY2xhc3M9IiI+d2F0c29uYmxhZGRAZ21haWwuY29tPC9hPiZndDs8YnIg Y2xhc3M9IiI+DQo8YiBjbGFzcz0iIj5DYzo8L2I+PHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRl ZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxhIGhyZWY9Im1haWx0bzpicmVudC5iaWxnZXI9NDB2ZXJp em9uLmNvbUBkbWFyYy5pZXRmLm9yZyIgc3R5bGU9ImNvbG9yOiBwdXJwbGU7IHRleHQtZGVjb3Jh dGlvbjogdW5kZXJsaW5lOyIgY2xhc3M9IiI+YnJlbnQuYmlsZ2VyPTQwdmVyaXpvbi5jb21AZG1h cmMuaWV0Zi5vcmc8L2E+PHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7 PC9zcGFuPiZsdDs8YSBocmVmPSJtYWlsdG86YnJlbnQuYmlsZ2VyPTQwdmVyaXpvbi5jb21AZG1h cmMuaWV0Zi5vcmciIHN0eWxlPSJjb2xvcjogcHVycGxlOyB0ZXh0LWRlY29yYXRpb246IHVuZGVy bGluZTsiIGNsYXNzPSIiPmJyZW50LmJpbGdlcj00MHZlcml6b24uY29tQGRtYXJjLmlldGYub3Jn PC9hPiZndDs7DQogUm9iZXJ0byBQZW9uICZsdDs8YSBocmVmPSJtYWlsdG86ZmVuaXhAZmIuY29t IiBzdHlsZT0iY29sb3I6IHB1cnBsZTsgdGV4dC1kZWNvcmF0aW9uOiB1bmRlcmxpbmU7IiBjbGFz cz0iIj5mZW5peEBmYi5jb208L2E+Jmd0Ozs8c3BhbiBjbGFzcz0iQXBwbGUtY29udmVydGVkLXNw YWNlIj4mbmJzcDs8L3NwYW4+PGEgaHJlZj0ibWFpbHRvOnF1aWNAaWV0Zi5vcmciIHN0eWxlPSJj b2xvcjogcHVycGxlOyB0ZXh0LWRlY29yYXRpb246IHVuZGVybGluZTsiIGNsYXNzPSIiPnF1aWNA aWV0Zi5vcmc8L2E+PHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9z cGFuPiZsdDs8YSBocmVmPSJtYWlsdG86cXVpY0BpZXRmLm9yZyIgc3R5bGU9ImNvbG9yOiBwdXJw bGU7IHRleHQtZGVjb3JhdGlvbjogdW5kZXJsaW5lOyIgY2xhc3M9IiI+cXVpY0BpZXRmLm9yZzwv YT4mZ3Q7OzxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48 YSBocmVmPSJtYWlsdG86YnJlbnQuYmlsZ2VyQHZlcml6b24uY29tIiBzdHlsZT0iY29sb3I6IHB1 cnBsZTsgdGV4dC1kZWNvcmF0aW9uOiB1bmRlcmxpbmU7IiBjbGFzcz0iIj5icmVudC5iaWxnZXJA dmVyaXpvbi5jb208L2E+PHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7 PC9zcGFuPiZsdDs8YSBocmVmPSJtYWlsdG86YnJlbnQuYmlsZ2VyQHZlcml6b24uY29tIiBzdHls ZT0iY29sb3I6IHB1cnBsZTsgdGV4dC1kZWNvcmF0aW9uOiB1bmRlcmxpbmU7IiBjbGFzcz0iIj5i cmVudC5iaWxnZXJAdmVyaXpvbi5jb208L2E+Jmd0OzsNCiBJYW4gU3dldHQgJmx0OzxhIGhyZWY9 Im1haWx0bzppYW5zd2V0dD00MGdvb2dsZS5jb21AZG1hcmMuaWV0Zi5vcmciIHN0eWxlPSJjb2xv cjogcHVycGxlOyB0ZXh0LWRlY29yYXRpb246IHVuZGVybGluZTsiIGNsYXNzPSIiPmlhbnN3ZXR0 PTQwZ29vZ2xlLmNvbUBkbWFyYy5pZXRmLm9yZzwvYT4mZ3Q7PGJyIGNsYXNzPSIiPg0KPGIgY2xh c3M9IiI+U3ViamVjdDo8L2I+PHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5i c3A7PC9zcGFuPlJlOiBbRV0gRG9TLWluZyBRVUlDIHNlcnZlcnMgaXMgdG9vIGVhc3k8c3BhbiBj bGFzcz0iQXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PG86cCBjbGFzcz0iIj48 L286cD48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4g MC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2Vy aWY7IiBjbGFzcz0iIj4NCiZuYnNwOzxvOnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8L2Rpdj4N CjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAw MDFwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsi IGNsYXNzPSIiPg0KPG86cCBjbGFzcz0iIj4mbmJzcDs8L286cD48L2Rpdj4NCjxkaXYgY2xhc3M9 IiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTFw dDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4NCjxiciBjbGFz cz0iIj4NCjxiciBjbGFzcz0iIj4NCjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8YmxvY2tx dW90ZSBzdHlsZT0ibWFyZ2luLXRvcDogNXB0OyBtYXJnaW4tYm90dG9tOiA1cHQ7IiBjbGFzcz0i IiB0eXBlPSJjaXRlIj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAw aW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMt c2VyaWY7IiBjbGFzcz0iIj4NCk9uIEp1bCAyMiwgMjAxOSwgYXQgOToxNiBQTSwgV2F0c29uIExh ZGQgJmx0OzxhIGhyZWY9Im1haWx0bzp3YXRzb25ibGFkZEBnbWFpbC5jb20iIHN0eWxlPSJjb2xv cjogcHVycGxlOyB0ZXh0LWRlY29yYXRpb246IHVuZGVybGluZTsiIGNsYXNzPSIiPndhdHNvbmJs YWRkQGdtYWlsLmNvbTwvYT4mZ3Q7IHdyb3RlOjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8 L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAx MXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0KPG86cCBj bGFzcz0iIj4mbmJzcDs8L286cD48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJt YXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENh bGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDEz LjVwdDsgZm9udC1mYW1pbHk6IEhlbHZldGljYTsiIGNsYXNzPSIiPk9uIE1vbiwgSnVsIDIyLCAy MDE5IGF0IDU6MjkgUE08YnIgY2xhc3M9IiI+DQombHQ7PC9zcGFuPjxhIGhyZWY9Im1haWx0bzpi cmVudC5iaWxnZXI9NDB2ZXJpem9uLmNvbUBkbWFyYy5pZXRmLm9yZyIgc3R5bGU9ImNvbG9yOiBw dXJwbGU7IHRleHQtZGVjb3JhdGlvbjogdW5kZXJsaW5lOyIgY2xhc3M9IiI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZTogMTMuNXB0OyBmb250LWZhbWlseTogSGVsdmV0aWNhOyIgY2xhc3M9IiI+YnJl bnQuYmlsZ2VyPTQwdmVyaXpvbi5jb21AZG1hcmMuaWV0Zi5vcmc8L3NwYW4+PC9hPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6IDEzLjVwdDsgZm9udC1mYW1pbHk6IEhlbHZldGljYTsiIGNsYXNzPSIi PiZndDsNCiB3cm90ZTo8YnIgc3R5bGU9ImNhcmV0LWNvbG9yOiByZ2IoMCwgMCwgMCk7IGZvbnQt dmFyaWFudC1jYXBzOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyAtd2Via2l0LXRleHQtc3Ry b2tlLXdpZHRoOiAwcHg7IHdvcmQtc3BhY2luZzogMHB4OyIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9 IiI+DQo8L3NwYW4+PG86cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjxibG9ja3F1b3RlIHN0eWxl PSJtYXJnaW4tdG9wOiA1cHQ7IG1hcmdpbi1ib3R0b206IDVwdDsiIGNsYXNzPSIiIHR5cGU9ImNp dGUiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDEx cHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+DQo8c3BhbiBz dHlsZT0iZm9udC1zaXplOiAxMy41cHQ7IGZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IiBjbGFzcz0i Ij48YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQpPbiBKdWwgMjIs IDIwMTksIGF0IDEwOjEwIEFNLCBSb2JlcnRvIFBlb24gJmx0OzxhIGhyZWY9Im1haWx0bzpmZW5p eEBmYi5jb20iIHN0eWxlPSJjb2xvcjogcHVycGxlOyB0ZXh0LWRlY29yYXRpb246IHVuZGVybGlu ZTsiIGNsYXNzPSIiPmZlbml4QGZiLmNvbTwvYT4mZ3Q7IHdyb3RlOjxiciBjbGFzcz0iIj4NCjxi ciBjbGFzcz0iIj4NCldoZW4geW914oCZcmUgdGFsa2luZyBhYm91dCBwcmUtYXV0aGVudGljYXRp b24sIGFyZSB5b3UgcmVmZXJyaW5nIHRvIHRoZSAwLXJ0dCBzdHVmZj88YnIgY2xhc3M9IiI+DQo8 YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQowLVJUVCBpcyBnb29kIHN0dWZmLiBJdCByZWR1 Y2VzIHRpbWUgZm9yIGEgZGV2aWNlIHRoYXTigJlzIGFscmVhZHkga25vd24gdG8gYmUgYXV0aG9y aXplZCB0byBjb25uZWN0IHRvIHRoZSBzZXJ2ZXIuPGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIi Pg0KUGFydCBvZiB0aGUgcHJvYmxlbSBpcyB0byBzdG9wIHJlc291cmNlIERvUy4gVGhlIG90aGVy IHBhcnQgaXMgYWJvdXQgaW5mb3JtYXRpb24gbGVha2FnZS48YnIgY2xhc3M9IiI+DQo8YnIgY2xh c3M9IiI+DQpMZXTigJlzIGFzc3VtZSBhIHRpbWUgd2hlbiBhbGwgd2Vic2l0ZSB1c2UgUVVJQyBh bmQgbGV0J3MgdGFrZSBhbiBhZHZlcnNhcnkgd2hvIGhhcyBqdXN0IGxlYXJuZWQgYWJvdXQgYSB2 dWxuZXJhYmlsaXR5IGluIFdvcmRwcmVzcy4gVGhlIGFkdmVyc2FyeSB3YW50cyB0byBzY2FuIHRo ZSBJbnRlcm5ldCBmaW5kaW5nIFdvcmRwcmVzcyBzaXRlcy4gTm93LCBpZiB0aGUgUVVJQyBjb25u ZWN0aW9uIHJlcXVpcmVkIHByZS1hdXRoZW50aWNhdGlvbiwgdGhlbg0KIHRoZSBzZXJ2ZXIgd291 bGQgYmUgYmxhY2sgdG8gdGhlIGNvbm5lY3Rpb24gYW5kIHRoZSBhZHZlcnNhcnkgY291bGQgbm90 IGRldGVybWluZSBpZiB0aGUgc2l0ZSB1c2VzIFdvcmRwcmVzcy4gQnV0LCBhcyBpdCBzdGFuZHMg dG9kYXksIGluIHRoaXMgZnV0dXJlIHRpbWUsIHRoZSBhZHZlcnNhcnkgc2NhbnMgdGhlIEludGVy bmV0LCBjb25uZWN0cyB0byB0aGUgc2VydmVyLCBhbmQgaXMgaGFuZGVkIGEgV29yZHByZXNzIGxv Z2luIHNjcmVlbi4gTm93DQogdGhlIGFkdmVyc2FyeSBrbm93cyB3aGVyZSB0byBhdHRhY2suPG86 cCBjbGFzcz0iIj48L286cD48L3NwYW4+PC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2IHN0eWxl PSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6 IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6 IDEzLjVwdDsgZm9udC1mYW1pbHk6IEhlbHZldGljYTsiIGNsYXNzPSIiPjxiciBjbGFzcz0iIj4N CklmIGNvbm5lY3Rpb24gcmVxdWlyZXMgcHJlYXV0aGVudGljYXRpb24gdGhlbiBubyBvbmUgY2Fu IHNlZSB0aGUgc2l0ZSwgbm8/PC9zcGFuPjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8L2Rp dj4NCjwvYmxvY2txdW90ZT4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOiA1cHQ7IG1h cmdpbi1ib3R0b206IDVwdDsiIGNsYXNzPSIiIHR5cGU9ImNpdGUiPg0KPGRpdiBjbGFzcz0iIj4N CjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMXB0OyBm b250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZTogMTMuNXB0OyBmb250LWZhbWlseTogSGVsdmV0aWNhOyIgY2xhc3M9IiI+PGJy IHN0eWxlPSJjYXJldC1jb2xvcjogcmdiKDAsIDAsIDApOyBmb250LXZhcmlhbnQtY2Fwczogbm9y bWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyB3 b3JkLXNwYWNpbmc6IDBweDsiIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KPC9zcGFuPjxvOnAg Y2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDogNXB0 OyBtYXJnaW4tYm90dG9tOiA1cHQ7IiBjbGFzcz0iIiB0eXBlPSJjaXRlIj4NCjxkaXYgc3R5bGU9 Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTog Q2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTog MTMuNXB0OyBmb250LWZhbWlseTogSGVsdmV0aWNhOyIgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0K SW4gdGhlIGVudGVycHJpc2UgaXQgaXMgYSBsaXR0bGUgZGlmZmVyZW50LiBDb21wYW5pZXMgaW1w bGVtZW50IHJldmVyc2UgcHJveGllcyB0byB0cnkgdG8gcHJvdGVjdCBzZXJ2ZXJzIGZyb20gdW5h dXRob3JpemVkIHVzZXJzLiBCdXQgd2hhdCBpZiB0aGUgc2VydmVycyByZXF1aXJlZCBhIHByZS1h dXRoZW50aWNhdGlvbiB0b2tlbi4gVGhlbiwgcmV2ZXJzZSBwcm94aWVzIHdvdWxkIG5vdCBiZSBu ZWVkZWQuPG86cCBjbGFzcz0iIj48L286cD48L3NwYW4+PC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8 ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9u dC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJm b250LXNpemU6IDEzLjVwdDsgZm9udC1mYW1pbHk6IEhlbHZldGljYTsiIGNsYXNzPSIiPjxiciBj bGFzcz0iIj4NClNvIEkgdGhpbmsgdGhlcmUgYXJlIHR3byBkaWZmZXJlbnQgdGhpbmdzIGhlcmUs IG9yIG1heWJlIEknbSBtaXN1bmRlcnN0YW5kaW5nOjxiciBjbGFzcz0iIj4NCjE6IFdlIGhhdmUg c2VydmVycyB0aGF0IGhhdmUgYSBsaW1pdGVkIG51bWJlciBvZiBjbGllbnRzIHRoYXQgd2lsbDxi ciBjbGFzcz0iIj4NCmV2ZXIgd2FudCB0byBjb25uZWN0IHRvIHRoZW0sIGFuZCB3YW50IHRvIGVu YWJsZSBvdGhlciBkZXZpY2VzIHRvPGJyIGNsYXNzPSIiPg0KZmlsdGVyIHRoZSB0cmFmZmljLCBz byBuZWVkIHNvbWUgbWVjaGFuaXNtIHRoYXQgZW5hYmxlcyBhIG1pZGRsZWJveCB0bzxiciBjbGFz cz0iIj4NCmZpbHRlci48L3NwYW4+PG86cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjwvZGl2Pg0K PC9ibG9ja3F1b3RlPg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBp biAwLjAwMDFwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1z ZXJpZjsiIGNsYXNzPSIiPg0KPG86cCBjbGFzcz0iIj4mbmJzcDs8L286cD48L2Rpdj4NCjwvZGl2 Pg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDExcHQ7 IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+DQpObyBtaWRkbGUg Ym94ISBQcmUtYXV0aGVudGljYXRpb24gbWFrZXMgc2VydmVycyBzZWxmLWRlZmVuZGluZy4gTGFj ayBvZiBwcmUtYXV0aGVudGljYXRpb24gaXMgd2h5IHdlIGhhdmUgbWlkZGxlIGJveGVzLjxvOnAg Y2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxl PSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6 IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCjxiciBjbGFz cz0iIj4NCjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFy Z2luLXRvcDogNXB0OyBtYXJnaW4tYm90dG9tOiA1cHQ7IiBjbGFzcz0iIiB0eXBlPSJjaXRlIj4N CjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZv bnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0i Ij4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDEzLjVwdDsgZm9udC1mYW1pbHk6IEhlbHZldGlj YTsiIGNsYXNzPSIiPjI6IFdlIGhhdmUgc2VydmVycyBnZW5lcmFsbHkgYXZhaWxhYmxlIHRvIHRo ZSBwdWJsaWMgYW5kIGFyZSBjb25jZXJuZWQ8YnIgY2xhc3M9IiI+DQp0aGF0IHRoZSBRVUlDIHZl cnNpb24gb2YgYSBTWU4gZmxvb2QgY2FuJ3QgYmUgZGVhbHQgd2l0aCAoZGVzcGl0ZTxiciBjbGFz cz0iIj4NCmV2aWRlbmNlIHRvIHRoZSBjb250cmFyeSkuPC9zcGFuPjxvOnAgY2xhc3M9IiI+PC9v OnA+PC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0 eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1p bHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4NCjxvOnAgY2xhc3M9IiI+Jm5ic3A7 PC9vOnA+PC9kaXY+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFw dDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNs YXNzPSIiPg0KQ29tcGFuaWVzIGFuZCB3ZWJzaXRlIG93bmVycyBoYXZlIHRvIHBheSBmb3IgYW50 aS1Eb1Mgc2VydmljZXMmbmJzcDtmcm9tIHRoZSBsaWtlcyBvZiBWZXJpem9uIGFuZCBvdGhlcnMg QkVDQVVTRSBzZXJ2ZXJzIGxpc3RlbiB0byBhbGwgY2xpZW50cy4gV2l0aCBwcmUtYXV0aGVudGlj YXRpb24sIHRoZSBuZWVkIHRvIGhhdmUgYW4gYW50aS1Eb1Mgc2VydmljZSB3b3VsZCBiZSBncmVh dGx5IHJlZHVjZWQgYmVjYXVzZSBzZXJ2ZXJzIHdvdWxkIG5vdCByZXNwb25kDQogdG8gdW5hdXRo b3JpemVkIGNsaWVudHMuPG86cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjwvZGl2Pg0KPGRpdiBj bGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXpl OiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0KPG86 cCBjbGFzcz0iIj4mbmJzcDs8L286cD48L2Rpdj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxk aXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMXB0OyBmb250 LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0KQW5kIHRoZSBwb2ludCBh Ym91dCBpbmZvcm1hdGlvbiBsZWFrYWdlIGlzIGltcG9ydGFudCwgdG9vLjxvOnAgY2xhc3M9IiI+ PC9vOnA+PC9kaXY+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46 IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmks IHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4NCjxvOnAgY2xhc3M9IiI+Jm5ic3A7PC9vOnA+PC9kaXY+ DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4w MDAxcHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7 IiBjbGFzcz0iIj4NCkJyZW50PG86cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjwvZGl2Pg0KPGRp diBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1z aXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0K PGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KPG86cCBjbGFzcz0iIj48L286cD48L2Rpdj4N CjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOiA1cHQ7IG1hcmdpbi1ib3R0b206IDVwdDsi IGNsYXNzPSIiIHR5cGU9ImNpdGUiPg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdp bjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJy aSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTogMTMuNXB0 OyBmb250LWZhbWlseTogSGVsdmV0aWNhOyIgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KSSBkb24n dCBrbm93IG11Y2ggYWJvdXQgaG93IENsb3VkZmxhcmUgKG15IHBsYWNlIG9mIGVtcGxveW1lbnQp ICZuYnNwO2RlYWxzPGJyIGNsYXNzPSIiPg0Kd2l0aCAyIGJ1dCBob3BlZnVsbHkgc29tZSBwZW9w bGUgd2hvIGRvL2ltcGxlbWVudG9ycyBjYW4gc3BlYWsgdXA8YnIgY2xhc3M9IiI+DQphYm91dCBo b3cgbXVjaCBvZiBhIHByb2JsZW0gaXQgaXMuIEJ1dCAxIGlzIEkgdGhpbmsgdmVyeSBtdWNoIGE8 YnIgY2xhc3M9IiI+DQpub25nb2FsOiBtaWRkbGVib3ggb3NzaWZpY2F0aW9uIGlzIHBhcnQgb2Yg dGhlIHJlYXNvbiB3ZSBoYXZlIFFVSUMuPGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KU2lu Y2VyZWx5LDxiciBjbGFzcz0iIj4NCldhdHNvbiBMYWRkPC9zcGFuPjxvOnAgY2xhc3M9IiI+PC9v OnA+PC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFy Z2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxp YnJpLCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+DQo8bzpwIGNsYXNzPSIiPiZuYnNwOzwvbzpwPjwv ZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPg0KPGRp diBjbGFzcz0iIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW46IDBpbiAwaW4g MTMuNXB0OyBmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlm OyI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOiAxMy41cHQ7IGZvbnQtZmFtaWx5OiBIZWx2ZXRp Y2E7IiBjbGFzcz0iIj48bzpwIGNsYXNzPSIiPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rp dj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7 IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFz cz0iIj4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDEzLjVwdDsgZm9udC1mYW1pbHk6IEhlbHZl dGljYTsiIGNsYXNzPSIiPjxvOnAgY2xhc3M9IiI+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvZGl2Pg0K PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAw MXB0OyBmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyIg Y2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOiAxMy41cHQ7IGZvbnQtZmFtaWx5OiBI ZWx2ZXRpY2E7IiBjbGFzcz0iIj5CcmVudCBCbGlnZXI8bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bh bj48L2Rpdj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGlu IDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fu cy1zZXJpZjsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTogMTMuNXB0OyBmb250 LWZhbWlseTogSGVsdmV0aWNhOyIgY2xhc3M9IiI+RGlyZWN0b3ItVGVjaG5vbG9neSZuYnNwO1Zl cml6b24gU0RQJm5ic3A7PG86cCBjbGFzcz0iIj48L286cD48L3NwYW4+PC9kaXY+DQo8L2Rpdj4N CjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZv bnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0i Ij4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDEzLjVwdDsgZm9udC1mYW1pbHk6IEhlbHZldGlj YTsiIGNsYXNzPSIiPjxhIGhyZWY9Im1haWx0bzpicmVudC5iaWxnZXJAdmVyaXpvbi5jb20iIHN0 eWxlPSJjb2xvcjogcHVycGxlOyB0ZXh0LWRlY29yYXRpb246IHVuZGVybGluZTsiIGNsYXNzPSIi PmJyZW50LmJpbGdlckB2ZXJpem9uLmNvbTwvYT48bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bhbj48 L2Rpdj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBp biAwLjAwMDFwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1z ZXJpZjsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTogMThwdDsgZm9udC1mYW1p bHk6IEhlbHZldGljYTsiIGNsYXNzPSIiPjxvOnAgY2xhc3M9IiI+Jm5ic3A7PC9vOnA+PC9zcGFu PjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZv bnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0i Ij4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDEzLjVwdDsgZm9udC1mYW1pbHk6IEhlbHZldGlj YTsiIGNsYXNzPSIiPjxvOnAgY2xhc3M9IiI+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvZGl2Pg0KPC9k aXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW46IDBpbiAwaW4g MTJwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsi Pg0KPG86cCBjbGFzcz0iIj4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9Im1h cmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2Fs aWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0KPG86cCBjbGFzcz0iIj4mbmJzcDs8L286cD48 L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPGRp diBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDExcHQ7IGZvbnQt ZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+DQo8bzpwIGNsYXNzPSIiPiZu YnNwOzwvbzpwPjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGNs YXNzPSIiPg0KPGRpdiBjbGFzcz0iIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJn aW46IDBpbiAwaW4gMTMuNXB0OyBmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJp LCBzYW5zLXNlcmlmOyI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOiAxMy41cHQ7IGZvbnQtZmFt aWx5OiBIZWx2ZXRpY2E7IiBjbGFzcz0iIj48bzpwIGNsYXNzPSIiPiZuYnNwOzwvbzpwPjwvc3Bh bj48L3A+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAw aW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMt c2VyaWY7IiBjbGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDEzLjVwdDsgZm9udC1m YW1pbHk6IEhlbHZldGljYTsiIGNsYXNzPSIiPjxvOnAgY2xhc3M9IiI+Jm5ic3A7PC9vOnA+PC9z cGFuPjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAw aW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBz YW5zLXNlcmlmOyIgY2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOiAxMy41cHQ7IGZv bnQtZmFtaWx5OiBIZWx2ZXRpY2E7IiBjbGFzcz0iIj5CcmVudCBCbGlnZXI8bzpwIGNsYXNzPSIi PjwvbzpwPjwvc3Bhbj48L2Rpdj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9 Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTog Q2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTog MTMuNXB0OyBmb250LWZhbWlseTogSGVsdmV0aWNhOyIgY2xhc3M9IiI+RGlyZWN0b3ItVGVjaG5v bG9neSZuYnNwO1Zlcml6b24gU0RQJm5ic3A7PG86cCBjbGFzcz0iIj48L286cD48L3NwYW4+PC9k aXY+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4g MC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2Vy aWY7IiBjbGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDEzLjVwdDsgZm9udC1mYW1p bHk6IEhlbHZldGljYTsiIGNsYXNzPSIiPjxhIGhyZWY9Im1haWx0bzpicmVudC5iaWxnZXJAdmVy aXpvbi5jb20iIHN0eWxlPSJjb2xvcjogcHVycGxlOyB0ZXh0LWRlY29yYXRpb246IHVuZGVybGlu ZTsiIGNsYXNzPSIiPmJyZW50LmJpbGdlckB2ZXJpem9uLmNvbTwvYT48L3NwYW4+PC9kaXY+DQo8 L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwv YmxvY2txdW90ZT4NCjwvZGl2Pg0KPGJyIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYg ZGlyPSJhdXRvIiBzdHlsZT0iY2FyZXQtY29sb3I6IHJnYigwLCAwLCAwKTsgY29sb3I6IHJnYigw LCAwLCAwKTsgZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxOHB4OyBmb250LXN0 eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3Jt YWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVu dDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1z cGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0 aW9uOiBub25lOyB3b3JkLXdyYXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFj ZTsgbGluZS1icmVhazogYWZ0ZXItd2hpdGUtc3BhY2U7IiBjbGFzcz0iIj4NCjxkaXYgZGlyPSJh dXRvIiBzdHlsZT0id29yZC13cmFwOiBicmVhay13b3JkOyAtd2Via2l0LW5ic3AtbW9kZTogc3Bh Y2U7IGxpbmUtYnJlYWs6IGFmdGVyLXdoaXRlLXNwYWNlOyIgY2xhc3M9IiI+DQo8ZGl2IHN0eWxl PSJjYXJldC1jb2xvcjogcmdiKDAsIDAsIDApOyBjb2xvcjogcmdiKDAsIDAsIDApOyBmb250LXZh cmlhbnQtY2Fwczogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBz dGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNl OiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAw cHg7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsiPg0KPGJyIGNsYXNzPSJBcHBsZS1pbnRlcmNoYW5n ZS1uZXdsaW5lIj4NCjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBzdHlsZT0iY2FyZXQtY29s b3I6IHJnYigwLCAwLCAwKTsgY29sb3I6IHJnYigwLCAwLCAwKTsgZm9udC12YXJpYW50LWNhcHM6 IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQt aW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3 b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyB0ZXh0LWRl Y29yYXRpb246IG5vbmU7Ij4NCjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBzdHlsZT0iY2Fy ZXQtY29sb3I6IHJnYigwLCAwLCAwKTsgY29sb3I6IHJnYigwLCAwLCAwKTsgZm9udC12YXJpYW50 LWNhcHM6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7 IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9y bWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyB0 ZXh0LWRlY29yYXRpb246IG5vbmU7Ij4NCkJyZW50IEJsaWdlcjwvZGl2Pg0KPGRpdiBzdHlsZT0i Y2FyZXQtY29sb3I6IHJnYigwLCAwLCAwKTsgY29sb3I6IHJnYigwLCAwLCAwKTsgZm9udC12YXJp YW50LWNhcHM6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3Rh cnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTog bm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4 OyB0ZXh0LWRlY29yYXRpb246IG5vbmU7Ij4NCkRpcmVjdG9yLVRlY2hub2xvZ3kmbmJzcDtWZXJp em9uIFNEUCZuYnNwOzxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBzdHlsZT0iY2FyZXQtY29s b3I6IHJnYigwLCAwLCAwKTsgY29sb3I6IHJnYigwLCAwLCAwKTsgZm9udC12YXJpYW50LWNhcHM6 IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQt aW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3 b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyB0ZXh0LWRl Y29yYXRpb246IG5vbmU7Ij4NCjxhIGhyZWY9Im1haWx0bzpicmVudC5iaWxnZXJAdmVyaXpvbi5j b20iIGNsYXNzPSIiPmJyZW50LmJpbGdlckB2ZXJpem9uLmNvbTwvYT48L2Rpdj4NCjxkaXYgc3R5 bGU9ImNhcmV0LWNvbG9yOiByZ2IoMCwgMCwgMCk7IGNvbG9yOiByZ2IoMCwgMCwgMCk7IGZvbnQt ZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMjRweDsgZm9udC1zdHlsZTogbm9ybWFsOyBm b250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3Bh Y2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10 cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAt d2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsiIGNs YXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8YnIgY2xhc3M9IkFwcGxlLWludGVyY2hh bmdlLW5ld2xpbmUiPg0KPC9kaXY+DQo8L2Rpdj4NCjxiciBjbGFzcz0iQXBwbGUtaW50ZXJjaGFu Z2UtbmV3bGluZSIgc3R5bGU9ImNhcmV0LWNvbG9yOiByZ2IoMCwgMCwgMCk7IGNvbG9yOiByZ2Io MCwgMCwgMCk7IGZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMThweDsgZm9udC1z dHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9y bWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRl bnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQt c3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQtZGVjb3Jh dGlvbjogbm9uZTsiPg0KPGJyIGNsYXNzPSJBcHBsZS1pbnRlcmNoYW5nZS1uZXdsaW5lIj4NCjwv ZGl2Pg0KPGJyIGNsYXNzPSIiPg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_3118B75CAEAC4A22954E592EBCB000EFoneverizoncom_-- From nobody Tue Jul 23 08:14:56 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E975D120134 for ; Tue, 23 Jul 2019 08:14:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.996 X-Spam-Level: X-Spam-Status: No, score=-1.996 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id w3FTqIjzn5ir for ; Tue, 23 Jul 2019 08:14:49 -0700 (PDT) Received: from mail-ed1-x531.google.com (mail-ed1-x531.google.com [IPv6:2a00:1450:4864:20::531]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 97ECF1200E0 for ; Tue, 23 Jul 2019 08:14:48 -0700 (PDT) Received: by mail-ed1-x531.google.com with SMTP id r12so9507295edo.5 for ; Tue, 23 Jul 2019 08:14:48 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:in-reply-to:references:mime-version:date:message-id:subject:to :cc; bh=ZEeA8GIAaHX+UTVOLcjil4Wq2W7sf23AyPmpGp2ziq0=; b=NBVQnJn7NQE8DhZ3bIuXAisebWo1C/sC1gJuFAbM4ryyRuJ1i4jL66+jm3mD9sl5Sf 75Zkf7hTe9oJAn9YjHWH1WV/Kw7RE1AmpXd5dkWVTlB43kLT4LsoSB850a8BkS+QDbUJ lOLZ3+iTB7LUq5j5+OsFHtAIjs5n4VF8eE1wYY0RAHFsWlswtxc8Q2Zq9CNXpZPVNoUk ghX+M2gwKU7U35HrUPVic+HStIRZ0p7MIygD6SzjMiMXgywseHwQox08nwHjYKllp54n Ek030OHnuuw5jgIXyuZWFHyXdoTUelREZYXPKK9IllbXCAOoG6ojJvTyWZPriFE3QzLL tt+A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:in-reply-to:references:mime-version:date :message-id:subject:to:cc; bh=ZEeA8GIAaHX+UTVOLcjil4Wq2W7sf23AyPmpGp2ziq0=; b=WeOU2DwmjkqzujLgUPiM5ZN15S21TIQVXF12E2YYxS1goBN9yAZMIMFK1Y55S3B9IU f1TtZEmu1o8IvIwmxIRjaUfisWEzsl7h7ub18LODsVna5ai1MeAlKCCkaqIiphElZRld K4bS3zRL54SinoXjBhw8YvgXqd1R/MEKt+lVqCJXETUbOEFGnRu9kbNDoX3Sbgg299SZ MyeVsTUn1SS0TRkd7vFXmq5/B8zUvAGz30gxD9LqyViRs7M92VRZnaTdYr7Y2REO4UyH pzGg58mEqFbJDDc/GKWpKsGrasexLLxCFU3I0Wx5qh70KlrOBwMyL9uZNlp3wch5hNPZ BI1g== X-Gm-Message-State: APjAAAVKekBpf5DfASNT03RsIk6+SrMVg+f6LTuSZVIS2kxBlCugNji7 Zy7uQT4xQoDhye60PDzyedKrxiXEXWW+Xk63sQQ= X-Google-Smtp-Source: APXvYqz0JbO8yyGV1AFvUP9YVmk1Y1IS21ArmmGt4NQhVc1wxWgT18ZThSxLbIs70bPlggQWscUNSEhspcOF5CO51Ek= X-Received: by 2002:a17:906:fcb8:: with SMTP id qw24mr58658453ejb.239.1563894887084; Tue, 23 Jul 2019 08:14:47 -0700 (PDT) Received: from 1058052472880 named unknown by gmailapi.google.com with HTTPREST; Tue, 23 Jul 2019 08:14:46 -0700 From: =?UTF-8?Q?Mikkel_Fahn=C3=B8e_J=C3=B8rgensen?= In-Reply-To: References: <21E3AE84-02C5-4943-A88E-B62329E21002@one.verizon.com> <507D5DB7-EDF2-4429-A518-604A377F92D9@one.verizon.com> <9BF2DC9D-F14C-4451-9191-1A1557556691@fb.com> <9DC40032-3852-4237-A621-5C6B1102E74F@one.verizon.com> X-Mailer: Airmail (420) MIME-Version: 1.0 Date: Tue, 23 Jul 2019 08:14:46 -0700 Message-ID: Subject: Re: [E] DoS-ing QUIC servers is too easy To: Roberto Peon , "brent.bilger@verizon.com" Cc: Watson Ladd , "quic@ietf.org" , "brent.bilger=40verizon.com@dmarc.ietf.org" , Ian Swett Content-Type: multipart/alternative; boundary="00000000000035f864058e5aa7b7" Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 23 Jul 2019 15:14:54 -0000 --00000000000035f864058e5aa7b7 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable And, if you don=E2=80=99t like load balances doing the job, the endpoint ca= n do it too. The endpoint already checks the connection ID for non-initial packets, so it can drop bad traffic very fast, except for the handshake. A signed token would allow it to avoid sending Retry or initiate handshake unless it is lightly loaded. On 23 July 2019 at 17.05.33, Mikkel Fahn=C3=B8e J=C3=B8rgensen (mikkelfj@gm= ail.com) wrote: No that is not the point. You send a token with the initial packet (which is large anyway). It is not thought to be a high quality authentication token - for that you can use TLS client auth. But you need to pre-qualify before wasting handshake resources. It is intended to get priority over other packets on a load balancer the experience high load, and only for initial packets. After that, the load balancer can track existing sessions either by remembering them, or by algorithmically checking the server assigned CID on subsequent packets. A load balancer may choose to drop or down prioritize intial packets that do not have a signed token. Kind Regards, Mikkel Fahn=C3=B8e J=C3=B8rgensen On 23 July 2019 at 17.01.26, Roberto Peon (fenix@fb.com) wrote: With short timeouts for the auth-token you have a requirement to authenticate often, which means that a significant percentage of the population of clients/users will be unable to connect when the authentication endpoint is DoS=E2=80=99d. If, ultimately, we keep needing to look at 5-tuples to solve the DoS, then why have the additional complexity of an additional service? -=3DR *From: *Mikkel Fahn=C3=B8e J=C3=B8rgensen *Date: *Tuesday, July 23, 2019 at 10:54 AM *To: *Roberto Peon , "brent.bilger@verizon.com" < brent.bilger@verizon.com> *Cc: *Watson Ladd , "quic@ietf.org" , "brent.bilger=3D40verizon.com@dmarc.ietf.org" , Ian Swett *Subject: *Re: [E] DoS-ing QUIC servers is too easy It is not that easy to steal a token and replay, but it can happen. If you add a time factor such an attack will have limited value. In fact a token need not be valid for more than about 10 minutes to account for skewed clocks. On 23 July 2019 at 16.41.09, Roberto Peon (fenix@fb.com) wrote: I=E2=80=99d assume #1 is less likely to experience crippling SYN-based DoS = attacks, and could otherwise be accomplished by limiting access in IP-space (imperfect, but we=E2=80=99re looking for =E2=80=9Cgood-enough=E2=80=9D, he= re). .. which means that I think we should consider 2+3 only, really. For #2 and #3, which I suspect have significant overlaps (sites may provide services both to logged-in users and users who aren=E2=80=99t logged in), t= he pre-authorization either: a) can be DoS=E2=80=99d itself. b) can be used to do a DoS in the future. In case b, as an attacker, you=E2=80=99d get or wait for the client to authenticate, then use that authentication in a replay attack, e.g. by replicating the auth token across many hosts. In cases where you are disallowed to replicate the auth token, e.g. because it is tied to a particular IP, you can help solve the replay attack however you=E2=80=99ll be biasing traffic to users whose IP is stable and who are l= ogged in/auth=E2=80=99d. In the pre-shared key scenario that was described, if any one client leaks the shared-secret, then it becomes not very useful and certainly doesn=E2= =80=99t protect against a DoS. I=E2=80=99d guess that the probability of the loss o= f a symmetric key is proportional to the breadth of the distribution of the key= . What I=E2=80=99m trying to point out is that this doesn=E2=80=99t really se= em to solve the generic DoS attack. You=E2=80=99ll still need to do some heuristics/rules based upon whatever i= s observable, at a minimum the 5-tuple. Getting more than the 5-tuple to be visible will take more work by the server, true, but given other design constraints, I don=E2=80=99t see how t= hat is avoidable. -=3DR *From: *"brent.bilger@verizon.com" *Date: *Tuesday, July 23, 2019 at 9:59 AM *To: *Roberto Peon *Cc: *"brent.bilger@verizon.com" , Watson Ladd < watsonbladd@gmail.com>, "brent.bilger=3D40verizon.com@dmarc.ietf.org" , "quic@ietf.org" , Ian Swett *Subject: *Re: [E] DoS-ing QUIC servers is too easy There are lots of possible scenarios, so please just consider these to be examples. Let=E2=80=99s divide the world of servers in to 1) enterprise business-to-business websites, 2) websites meant for consumers where authentication is desirable, and 3) websites that will want to allow their users to be anonymous, therefore, pre-authentication would not apply. Enterprise business-to-business websites could use something similar to the Software Defined Perimeter (SDP) Single Packet Authorization (SPA) protocol created by the Cloud Security Alliance. It uses the fact that clients are on-boarded to the system in a one time event to provide the clients with a shared secret key. The key is used in a counter-based HMAC calculation. Since only an authorized client can calculate the proper HMAC, the HMAC can be used for pre-authentication. Thus, the pre-authentication token could look something like this: Client->Server: ClientID, Counter, HMAC[ClientID || Counter, Ks] where Ks is a shared secret key that both the client and server have. On the server side, the server would recalculate the HMAC and compare it to the one provided by the client. Note that this information is sent from the client to the server in clear text (i.e., not encrypted). In practice, there would probably be more fields, but the important part is that the one-time on boarding enables a lifetime of pre-authentication tokens. Websites meant for consumers would probably be handled differently - specifically, no on-boarding. That means there would be some kind of token service - similar to OAuth, but operating prior to the TCP equivalent of SYN/ACK. Perhaps CloudFlair or Google or Microsoft could invent something like this and offer it as a service??? Again, there will be other websites that will not want pre-authentication because they want to allow anonymous users to their site. Brent On Jul 23, 2019, at 6:26 AM, Roberto Peon wrote: I'm trying to understand how anything was pre-authenticated without suffering from all of the same problems. How would such pre-authentication be done in practice, especially in scenarios where the server doesn't have a whitelist of clients, and that service desires traffic from non-malicious clients? -=3DR Get Outlook for Android ------------------------------ *From:* brent.bilger@verizon.com *Sent:* Tuesday, July 23, 2019 8:21:05 AM *To:* Watson Ladd *Cc:* brent.bilger=3D40verizon.com@dmarc.ietf.org < brent.bilger=3D40verizon.com@dmarc.ietf.org>; Roberto Peon ; quic@ietf.org ; brent.bilger@verizon.com < brent.bilger@verizon.com>; Ian Swett *Subject:* Re: [E] DoS-ing QUIC servers is too easy On Jul 22, 2019, at 9:16 PM, Watson Ladd wrote: On Mon, Jul 22, 2019 at 5:29 PM wrote: On Jul 22, 2019, at 10:10 AM, Roberto Peon wrote: When you=E2=80=99re talking about pre-authentication, are you referring to = the 0-rtt stuff? 0-RTT is good stuff. It reduces time for a device that=E2=80=99s already kn= own to be authorized to connect to the server. Part of the problem is to stop resource DoS. The other part is about information leakage. Let=E2=80=99s assume a time when all website use QUIC and let's take an adv= ersary who has just learned about a vulnerability in Wordpress. The adversary wants to scan the Internet finding Wordpress sites. Now, if the QUIC connection required pre-authentication, then the server would be black to the connection and the adversary could not determine if the site uses Wordpress. But, as it stands today, in this future time, the adversary scans the Internet, connects to the server, and is handed a Wordpress login screen. Now the adversary knows where to attack. If connection requires preauthentication then no one can see the site, no? In the enterprise it is a little different. Companies implement reverse proxies to try to protect servers from unauthorized users. But what if the servers required a pre-authentication token. Then, reverse proxies would not be needed. So I think there are two different things here, or maybe I'm misunderstanding: 1: We have servers that have a limited number of clients that will ever want to connect to them, and want to enable other devices to filter the traffic, so need some mechanism that enables a middlebox to filter. No middle box! Pre-authentication makes servers self-defending. Lack of pre-authentication is why we have middle boxes. 2: We have servers generally available to the public and are concerned that the QUIC version of a SYN flood can't be dealt with (despite evidence to the contrary). Companies and website owners have to pay for anti-DoS services from the likes of Verizon and others BECAUSE servers listen to all clients. With pre-authentication, the need to have an anti-DoS service would be greatly reduced because servers would not respond to unauthorized clients. And the point about information leakage is important, too. Brent I don't know much about how Cloudflare (my place of employment) deals with 2 but hopefully some people who do/implementors can speak up about how much of a problem it is. But 1 is I think very much a nongoal: middlebox ossification is part of the reason we have QUIC. Sincerely, Watson Ladd Brent Bliger Director-Technology Verizon SDP brent.bilger@verizon.com Brent Bliger Director-Technology Verizon SDP brent.bilger@verizon.com --00000000000035f864058e5aa7b7 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable = And, if you don=E2= =80=99t like load balances doing the job, the endpoint can do it too.
=

The endpoint already chec= ks the connection ID for non-initial packets, so it can drop bad traffic ve= ry fast, except for the handshake. A signed token would allow it to avoid s= ending Retry or initiate handshake unless it is lightly loaded.



On 23 July 2019 at 17.05.33, Mikkel Fahn=C3=B8e J=C3=B8rgensen (mikkelfj@gmail.com) wrote:

No that is not the point.

You send a token with the initial pac= ket (which is large anyway). It is not thought to be a high quality authent= ication token - for that you can use TLS client auth. But you need to pre-q= ualify before wasting handshake resources.

It is intended to get priority over other packets on= a load balancer the experience high load, and only for initial packets. Af= ter that, the load balancer can track existing sessions either by rememberi= ng them, or by algorithmically checking the server assigned CID on subseque= nt packets.
<= br>
A load ba= lancer may choose to drop or down prioritize intial packets that do not hav= e a signed token.


Kind Re= gards,
Mikke= l Fahn=C3=B8e J=C3=B8rgensen


On 23 July 2019 at 17.01.26, Roberto Peon (fenix@fb.com) wrote:

With short timeouts for the auth-token you have a re= quirement to authenticate often, which means that a significant percentage = of the population of clients/users will be unable to connect when the authe= ntication endpoint is DoS=E2=80=99d.

If, ultimately, we keep needing to look at 5-tuples to solve the DoS, then = why have the additional complexity of an additional service?
-=3DR

=C2=A0

From= : Mikkel Fahn=C3=B8= e J=C3=B8rgensen <mikkelfj@gmail.c= om>
Date: Tuesday, July 23, 2019 at 10:54 AM
To: Roberto Peon <fenix@fb.com>, "brent.bilger@veriz= on.com" <brent.bilg= er@verizon.com>
Cc: Watson Ladd <watsonb= ladd@gmail.com>, "quic@ietf.or= g" <quic@ietf.org>, &qu= ot;brent.bilger=3D40verizon= .com@dmarc.ietf.org" <brent.bilger=3D40verizon.com@dmarc.ietf.org>, Ian Swett <i= answett=3D40google.com@dmarc= .ietf.org>
Subject: Re: [E] DoS-ing QUIC servers is too easy

=C2=A0

It is not that easy to steal a token and replay, but it can happen.

=C2=A0

If you add a time factor such an attack will have limited value. In fact= a token need not be valid for more than about 10 minutes to account for sk= ewed clocks.

=C2=A0

On 23 July 2019 at 16.41.09, Roberto Peon (fenix@fb.com) wrote:

I=E2=80=99d assume #1 is less likely to experience crippling SYN-b= ased DoS attacks, and could otherwise be accomplished by limiting access in= IP-space (imperfect, but we=E2=80=99re looking for =E2=80=9Cgood-enough=E2=80=9D, here).


.. which means that I think we should consider 2+3 only, really.

For #2 and #3, which I suspect have significant overlaps (sites may provide= services both to logged-in users and users who aren=E2=80=99t logged in), = the pre-authorization either:
=C2=A0 a) can be DoS=E2=80=99d itself.
=C2=A0 b) can be used to do a DoS in the future.

In case b, as an attacker, you=E2=80=99d get or wait for the clien= t to authenticate, then use that authentication in a replay attack, e.g. by= replicating the auth token across many hosts.
In cases where you are disallowed to replicate the auth token, e.g. because= it is tied to a particular IP, you can help solve the replay attack howeve= r you=E2=80=99ll be biasing traffic to users whose IP is stable and who are= logged in/auth=E2=80=99d.
In the pre-shared key scenario that was described, if any one client leaks = the shared-secret, then it becomes not very useful and certainly doesn=E2= =80=99t protect against a DoS. I=E2=80=99d guess that the probability of th= e loss of a symmetric key is proportional to the breadth of the distribution of the key.

What I=E2=80=99m trying to point out is that this doesn=E2=80=99t really se= em to solve the generic DoS attack.
You=E2=80=99ll still need to do some heuristics/rules based upon whatever i= s observable, at a minimum the 5-tuple.
Getting more than the 5-tuple to be visible will take more work by the serv= er, true, but given other design constraints, I don=E2=80=99t see how that = is avoidable.

-=3DR

=C2=A0

From: "brent.bilger@verizon.com" <brent.bilger@verizon.com>
Date: Tuesday, July 23, 2019 at 9:59 AM
To: Roberto Peon <fenix@fb.com>
Cc: "brent.bilger@v= erizon.com" <brent.= bilger@verizon.com>, Watson Ladd <watsonbladd@gmail.com>, "brent.bilger=3D40verizon.com@dmarc.ietf.org" <brent.bilger=3D40veriz= on.com@dmarc.ietf.org>, "quic@= ietf.org" <quic@ietf.org&g= t;, Ian Swett <ianswett=3D40google.com@dmarc.ietf.org>
Subject: Re: [E] DoS-ing QUIC servers is too easy

=C2=A0

There are lots of possible scenarios, so please just consider thes= e to be examples. Let=E2=80=99s divide the world of servers in to 1) enterp= rise business-to-business websites, 2) websites meant for consumers where authentication is desirable, and 3) websites tha= t will want to allow their users to be anonymous, therefore, pre-authentica= tion would not apply.

=C2=A0

Enterprise business-to-business websites could use something simil= ar to the Software Defined Perimeter (SDP) Single Packet Authorization (SPA= ) protocol created by the Cloud Security Alliance. It uses the fact that clients are on-boarded to the system in a = one time event to provide the clients with a shared secret key. The key is = used in a counter-based HMAC calculation. Since only an authorized client c= an calculate the proper HMAC, the HMAC can be used for pre-authentication. Thus, the pre-authentication toke= n could look something like this:

Client->Server: ClientID, Counter, HMAC[ClientID || Counter, Ks= ] where Ks is a shared secret key that both the client and server have.

On the server side, the server would recalculate the HMAC and comp= are it to the one provided by the client.=C2=A0

Note that this information is sent from the client to the server i= n clear text (i.e., not encrypted).

In practice, there would probably be more fields, but the importan= t part is that the one-time on boarding enables a lifetime of pre-authentic= ation tokens.

=C2=A0

Websites meant for consumers would probably be handled differently= - specifically, no on-boarding. That means there would be some kind of tok= en service - similar to OAuth, but operating prior to the TCP equivalent of SYN/ACK. Perhaps CloudFlair or Google or Mi= crosoft could invent something like this and offer it as a service???

=C2=A0

Again, there will be other websites that will not want pre-authent= ication because they want to allow anonymous users to their site.

=C2=A0

Brent

=C2=A0

On Jul 23, 2019, at 6:26 AM, Roberto Peon <fenix@fb.com> wrote:

=C2=A0

I'm trying to understand how anythi= ng was pre-authenticated without suffering from all of the same problems.

How would such pre-authentication be do= ne in practice, especially in scenarios where the server doesn't have a= whitelist of clients, and that service desires traffic from non-malicious clients?

-=3DR

From: brent.bilger@verizon.com &l= t;brent.bilger@verizon.com&= gt;
Sent: Tuesday, July 23, 2019 8:21:05 AM
To: Watson Ladd <watsonb= ladd@gmail.com>
Cc: b= rent.bilger=3D40verizon.com@dmarc.ietf.org <brent.bilger=3D40verizon.com@dmarc.i= etf.org>; Roberto Peon <fenix@fb.= com>; quic@ietf.org <quic@ietf.org>; brent.bilger@verizon.com &l= t;brent.bilger@verizon.com&= gt;; Ian Swett <ianswett=3D40google.com@dmarc.ietf.org>
Subject: Re: [E] DoS-ing QUIC servers is too easy

=C2=A0

=C2=A0

=C2=A0

On Jul 22, 2019, at 9:16 PM, Watson Ladd <watsonbladd@gmail.com> wrote:

=C2=A0

On Mon, Jul 22, 2019 at 5:29 PM
<<= span style=3D"font-size:13.5pt;font-family:Helvetica">brent.bilger=3D40veri= zon.com@dmarc.ietf.org> wrote:




On Jul 22, 2019, at 10:10 AM, Roberto Peon <fenix@fb.com> wrote:

When you=E2=80=99re talking about pre-authentication, are you referring to = the 0-rtt stuff?


0-RTT is good stuff. It reduces time for a device that=E2=80=99s already kn= own to be authorized to connect to the server.

Part of the problem is to stop resource DoS. The other part is about inform= ation leakage.

Let=E2=80=99s assume a time when all website use QUIC and let's take an= adversary who has just learned about a vulnerability in Wordpress. The adv= ersary wants to scan the Internet finding Wordpress sites. Now, if the QUIC= connection required pre-authentication, then the server would be black to the connection and the adversary could not de= termine if the site uses Wordpress. But, as it stands today, in this future= time, the adversary scans the Internet, connects to the server, and is han= ded a Wordpress login screen. Now the adversary knows where to attack.


If connection requires preauthentication then no one can see the site, no?<= /span>

=C2=A0


In the enterprise it is a little different. Companies implement reverse pro= xies to try to protect servers from unauthorized users. But what if the ser= vers required a pre-authentication token. Then, reverse proxies would not b= e needed.


So I think there are two different things here, or maybe I'm misunderst= anding:
1: We have servers that have a limited number of clients that will
ever want to connect to them, and want to enable other devices to
filter the traffic, so need some mechanism that enables a middlebox to
filter.

=C2=A0

No middle box! Pre-authentication makes servers self-defending. La= ck of pre-authentication is why we have middle boxes.

=C2=A0

2: We have = servers generally available to the public and are concerned
that the QUIC version of a SYN flood can't be dealt with (despite
evidence to the contrary).

=C2=A0

Companies and website owners have to pay for anti-DoS services=C2= =A0from the likes of Verizon and others BECAUSE servers listen to all clien= ts. With pre-authentication, the need to have an anti-DoS service would be greatly reduced because servers would not res= pond to unauthorized clients.

=C2=A0

And the point about information leakage is important, too.

=C2=A0

Brent

=C2=A0


I don't know much about how Cloudflare (my place of employment) =C2=A0d= eals
with 2 but hopefully some people who do/implementors can speak up
about how much of a problem it is. But 1 is I think very much a
nongoal: middlebox ossification is part of the reason we have QUIC.

Sincerely,
Watson Ladd

=C2=A0

=C2=A0

=C2=A0

Brent Blige= r

Director-Te= chnology=C2=A0Verizon SDP=C2=A0

=C2=A0

=C2=A0

=C2=A0

=C2=A0

=C2=A0

=C2=A0

=C2=A0

Brent Bliger

Director-Technology=C2=A0Verizon SDP=C2=A0

=C2=A0

=C2=A0

=C2=A0

=C2=A0

 --00000000000035f864058e5aa7b7-- From nobody Tue Jul 23 08:19:23 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 52168120355 for ; Tue, 23 Jul 2019 08:19:11 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=verizon.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0LTwn5vlUfys for ; Tue, 23 Jul 2019 08:19:07 -0700 (PDT) Received: from smtpout1-tdc.verizon.com (smtpout1-tdc.verizon.com [137.188.104.133]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 08A961202EC for ; Tue, 23 Jul 2019 08:19:06 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=verizon.com; i=@verizon.com; q=dns/txt; s=corp; t=1563895147; x=1595431147; h=to:subject:date:message-id:references:in-reply-to: mime-version:from:cc; bh=LiKtmTv2TX7t9ytSpU2MFymDQw4gU3u4f0JAXYbEg0g=; b=j0w622YFNd2S/3omVXFVS6XlMpIZvQPQ/N4RF6TRtDWbOMUWfo6SCJZ5 ZUjAWttNz21Tb57WMPOEDpiE2w9Sw2T6xhZiwGhvwOzgLRhflje6mnD4y tgwUooNgqZYfSWDJfLtCgZAnnJ0jVVn0knRa6fVuAabSnSFm4b4zbF87c g=; From: brent.bilger@verizon.com Cc: Roberto Peon , brent.bilger@verizon.com, Watson Ladd , "quic@ietf.org" , "brent.bilger=40verizon.com@dmarc.ietf.org" , Ian Swett Received: from tbwexch04apd.uswin.ad.vzwcorp.com ([153.114.162.28]) by smtpout1-tdc.verizon.com with ESMTP/TLS/ECDHE-RSA-AES256-SHA384; 23 Jul 2019 15:19:05 +0000 Received: from OHTWI1EXO912.uswin.ad.vzwcorp.com (10.144.218.211) by tbwexch04apd.uswin.ad.vzwcorp.com (153.114.162.28) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Tue, 23 Jul 2019 11:19:05 -0400 Received: from scwexch04apd.uswin.ad.vzwcorp.com (153.114.130.23) by OHTWI1EXO912.uswin.ad.vzwcorp.com (10.144.218.211) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Tue, 23 Jul 2019 11:19:04 -0400 Received: from scwexch05apd.uswin.ad.vzwcorp.com (153.114.130.24) by scwexch04apd.uswin.ad.vzwcorp.com (153.114.130.23) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Tue, 23 Jul 2019 08:19:03 -0700 Received: from scwexch05apd.uswin.ad.vzwcorp.com ([153.114.130.24]) by scwexch05apd.uswin.ad.vzwcorp.com ([153.114.130.24]) with mapi id 15.00.1473.003; Tue, 23 Jul 2019 08:19:03 -0700 To: =?utf-8?B?TWlra2VsIEZhaG7DuGUgSsO4cmdlbnNlbg==?= Subject: Re: [E] DoS-ing QUIC servers is too easy Thread-Topic: [E] DoS-ing QUIC servers is too easy Thread-Index: AQHVQO2TMeh9llpV6EqU+Dk6tm4oPqbYDioAgACHhoCAABI8gIAACRKAgAALXgCAAAPzAIAABxkA Date: Tue, 23 Jul 2019 15:19:03 +0000 Message-ID: <16026C5D-847B-4281-ADE1-A65D394124FF@one.verizon.com> References: <21E3AE84-02C5-4943-A88E-B62329E21002@one.verizon.com> <507D5DB7-EDF2-4429-A518-604A377F92D9@one.verizon.com> <9BF2DC9D-F14C-4451-9191-1A1557556691@fb.com> <9DC40032-3852-4237-A621-5C6B1102E74F@one.verizon.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.11.60.250] Content-Type: multipart/alternative; boundary="_000_16026C5D847B4281ADE1A65D394124FFoneverizoncom_" MIME-Version: 1.0 Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 23 Jul 2019 15:19:23 -0000 --_000_16026C5D847B4281ADE1A65D394124FFoneverizoncom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 DQoNCk9uIEp1bCAyMywgMjAxOSwgYXQgNzo1MyBBTSwgTWlra2VsIEZhaG7DuGUgSsO4cmdlbnNl biA8bWlra2VsZmpAZ21haWwuY29tPG1haWx0bzptaWtrZWxmakBnbWFpbC5jb20+PiB3cm90ZToN Cg0KSXQgaXMgbm90IHRoYXQgZWFzeSB0byBzdGVhbCBhIHRva2VuIGFuZCByZXBsYXksIGJ1dCBp dCBjYW4gaGFwcGVuLg0KDQpZZXMsIGl0IHJlcXVpcmVzIGNvbXByb21pc2luZyBhIGNsaWVudCBh bmQgc3RlYWxpbmcgdGhlIGtleSBvciBqdXN0IHVzaW5nIHRoZSBrZXkgZnJvbSBhIGJhY2sgZG9v ci4gSW4gcHJhY3RpY2UgdGhlIGxhdHRlciBtYXkgYmUgYWR2YW50YWdlb3VzIHRvIHRoZSBhZHZl cnNhcnkgYmVjYXVzZSB0aGUgc291cmNlIG9mIHRoZSBhdHRhY2sgd2lsbCBiZSBmcm9tIGEgbm9y bWFsIGxvY2F0aW9uIGFuZCBiZWNhdXNlIGZ1dHVyZSBkZXZpY2UgYXV0aG9yaXphdGlvbnMgbWF5 IGluY2x1ZGUgYSBmaW5nZXJwcmludCBvZiB0aGUgZGV2aWNlIC0gYSBmaW5nZXJwcmludCB0aGF0 IHdvdWxkIGZhaWwgb24gdGhlIHN0b2xlbiBrZXkuIEJ1dCBsb29rIGF0IHdoYXQgd2XigJl2ZSBk b25lIHRvIHRoZSB1bmF1dGhvcml6ZWQgYWR2ZXJzYXJ5IHdpdGggdGhlIHByZS1hdXRoZW50aWNh dGlvbiB0b2tlbiAtIGRlZmVhdGVkIHJlc291cmNlIERvUywgaW5mb3JtYXRpb24gbGVha2FnZSwg YWxsIHZ1bG5lcmFiaWxpdGllcyBvZiB0aGUgc2VydmVyLCBhbGwgY29uZmlndXJhdGlvbiBlcnJv cnMgb2YgdGhlIGFwcGxpY2F0aW9ucyBvZiB0aGUgc2VydmVyLiBBbmQgaXQgYXVnbWVudHMgVExT IHRvIGRlZmVhdCBtYW4taW4tdGhlLW1pZGRsZSBhdHRhY2tzLg0KDQoNCklmIHlvdSBhZGQgYSB0 aW1lIGZhY3RvciBzdWNoIGFuIGF0dGFjayB3aWxsIGhhdmUgbGltaXRlZCB2YWx1ZS4gSW4gZmFj dCBhIHRva2VuIG5lZWQgbm90IGJlIHZhbGlkIGZvciBtb3JlIHRoYW4gYWJvdXQgMTAgbWludXRl cyB0byBhY2NvdW50IGZvciBza2V3ZWQgY2xvY2tzLg0KDQpBcyBub3RlZCBvbiBhIGRpZmZlcmVu dCBwb3N0aW5nLCBTaW5nbGUgUGFja2V0IEF1dGhvcml6YXRpb24gaXMgYmFzZWQgb24gUkZDIDQy MjYgd2hpY2ggaGFzIGJvdGggYSBjb3VudGVyIGFuZCBhIHRpbWUgYmFzZWQgYXBwcm9hY2guIFBl cnNvbmFsbHksIEkgcHJlZmVyIGEgY291bnRlci4NCg0KQnV0IGFnYWluLCB0aGlzIGlzIGFsbCBp cnJlbGV2YW50IGJlY2F1c2UgSeKAmW0gbm90IHN1Z2dlc3RpbmcgYW55IG9uZSBwcmUtYXV0aGVu dGljYXRpb24uIEnigJltIGp1c3QgdXNpbmcgYW4gZXhhbXBsZSB0byBzaG93IGhvdyBpdCBjYW4g c3RvcCBtdWx0aXBsZSB0eXBlcyBvZiBhdHRhY2tzLg0KDQpCcmVudA0KDQoNCg0KT24gMjMgSnVs eSAyMDE5IGF0IDE2LjQxLjA5LCBSb2JlcnRvIFBlb24gKGZlbml4QGZiLmNvbTxtYWlsdG86ZmVu aXhAZmIuY29tPikgd3JvdGU6DQpJ4oCZZCBhc3N1bWUgIzEgaXMgbGVzcyBsaWtlbHkgdG8gZXhw ZXJpZW5jZSBjcmlwcGxpbmcgU1lOLWJhc2VkIERvUyBhdHRhY2tzLCBhbmQgY291bGQgb3RoZXJ3 aXNlIGJlIGFjY29tcGxpc2hlZCBieSBsaW1pdGluZyBhY2Nlc3MgaW4gSVAtc3BhY2UgKGltcGVy ZmVjdCwgYnV0IHdl4oCZcmUgbG9va2luZyBmb3Ig4oCcZ29vZC1lbm91Z2jigJ0sIGhlcmUpLg0K DQouLiB3aGljaCBtZWFucyB0aGF0IEkgdGhpbmsgd2Ugc2hvdWxkIGNvbnNpZGVyIDIrMyBvbmx5 LCByZWFsbHkuDQoNCkZvciAjMiBhbmQgIzMsIHdoaWNoIEkgc3VzcGVjdCBoYXZlIHNpZ25pZmlj YW50IG92ZXJsYXBzIChzaXRlcyBtYXkgcHJvdmlkZSBzZXJ2aWNlcyBib3RoIHRvIGxvZ2dlZC1p biB1c2VycyBhbmQgdXNlcnMgd2hvIGFyZW7igJl0IGxvZ2dlZCBpbiksIHRoZSBwcmUtYXV0aG9y aXphdGlvbiBlaXRoZXI6DQogIGEpIGNhbiBiZSBEb1PigJlkIGl0c2VsZi4NCiAgYikgY2FuIGJl IHVzZWQgdG8gZG8gYSBEb1MgaW4gdGhlIGZ1dHVyZS4NCg0KSW4gY2FzZSBiLCBhcyBhbiBhdHRh Y2tlciwgeW914oCZZCBnZXQgb3Igd2FpdCBmb3IgdGhlIGNsaWVudCB0byBhdXRoZW50aWNhdGUs IHRoZW4gdXNlIHRoYXQgYXV0aGVudGljYXRpb24gaW4gYSByZXBsYXkgYXR0YWNrLCBlLmcuIGJ5 IHJlcGxpY2F0aW5nIHRoZSBhdXRoIHRva2VuIGFjcm9zcyBtYW55IGhvc3RzLg0KSW4gY2FzZXMg d2hlcmUgeW91IGFyZSBkaXNhbGxvd2VkIHRvIHJlcGxpY2F0ZSB0aGUgYXV0aCB0b2tlbiwgZS5n LiBiZWNhdXNlIGl0IGlzIHRpZWQgdG8gYSBwYXJ0aWN1bGFyIElQLCB5b3UgY2FuIGhlbHAgc29s dmUgdGhlIHJlcGxheSBhdHRhY2sgaG93ZXZlciB5b3XigJlsbCBiZSBiaWFzaW5nIHRyYWZmaWMg dG8gdXNlcnMgd2hvc2UgSVAgaXMgc3RhYmxlIGFuZCB3aG8gYXJlIGxvZ2dlZCBpbi9hdXRo4oCZ ZC4NCkluIHRoZSBwcmUtc2hhcmVkIGtleSBzY2VuYXJpbyB0aGF0IHdhcyBkZXNjcmliZWQsIGlm IGFueSBvbmUgY2xpZW50IGxlYWtzIHRoZSBzaGFyZWQtc2VjcmV0LCB0aGVuIGl0IGJlY29tZXMg bm90IHZlcnkgdXNlZnVsIGFuZCBjZXJ0YWlubHkgZG9lc27igJl0IHByb3RlY3QgYWdhaW5zdCBh IERvUy4gSeKAmWQgZ3Vlc3MgdGhhdCB0aGUgcHJvYmFiaWxpdHkgb2YgdGhlIGxvc3Mgb2YgYSBz eW1tZXRyaWMga2V5IGlzIHByb3BvcnRpb25hbCB0byB0aGUgYnJlYWR0aCBvZiB0aGUgZGlzdHJp YnV0aW9uIG9mIHRoZSBrZXkuDQoNCldoYXQgSeKAmW0gdHJ5aW5nIHRvIHBvaW50IG91dCBpcyB0 aGF0IHRoaXMgZG9lc27igJl0IHJlYWxseSBzZWVtIHRvIHNvbHZlIHRoZSBnZW5lcmljIERvUyBh dHRhY2suDQpZb3XigJlsbCBzdGlsbCBuZWVkIHRvIGRvIHNvbWUgaGV1cmlzdGljcy9ydWxlcyBi YXNlZCB1cG9uIHdoYXRldmVyIGlzIG9ic2VydmFibGUsIGF0IGEgbWluaW11bSB0aGUgNS10dXBs ZS4NCkdldHRpbmcgbW9yZSB0aGFuIHRoZSA1LXR1cGxlIHRvIGJlIHZpc2libGUgd2lsbCB0YWtl IG1vcmUgd29yayBieSB0aGUgc2VydmVyLCB0cnVlLCBidXQgZ2l2ZW4gb3RoZXIgZGVzaWduIGNv bnN0cmFpbnRzLCBJIGRvbuKAmXQgc2VlIGhvdyB0aGF0IGlzIGF2b2lkYWJsZS4NCg0KLT1SDQoN CkZyb206ICJicmVudC5iaWxnZXJAdmVyaXpvbi5jb208bWFpbHRvOmJyZW50LmJpbGdlckB2ZXJp em9uLmNvbT4iIDxicmVudC5iaWxnZXJAdmVyaXpvbi5jb208bWFpbHRvOmJyZW50LmJpbGdlckB2 ZXJpem9uLmNvbT4+DQpEYXRlOiBUdWVzZGF5LCBKdWx5IDIzLCAyMDE5IGF0IDk6NTkgQU0NClRv OiBSb2JlcnRvIFBlb24gPGZlbml4QGZiLmNvbTxtYWlsdG86ZmVuaXhAZmIuY29tPj4NCkNjOiAi YnJlbnQuYmlsZ2VyQHZlcml6b24uY29tPG1haWx0bzpicmVudC5iaWxnZXJAdmVyaXpvbi5jb20+ IiA8YnJlbnQuYmlsZ2VyQHZlcml6b24uY29tPG1haWx0bzpicmVudC5iaWxnZXJAdmVyaXpvbi5j b20+PiwgV2F0c29uIExhZGQgPHdhdHNvbmJsYWRkQGdtYWlsLmNvbTxtYWlsdG86d2F0c29uYmxh ZGRAZ21haWwuY29tPj4sICJicmVudC5iaWxnZXI9NDB2ZXJpem9uLmNvbUBkbWFyYy5pZXRmLm9y ZzxtYWlsdG86NDB2ZXJpem9uLmNvbUBkbWFyYy5pZXRmLm9yZz4iIDxicmVudC5iaWxnZXI9NDB2 ZXJpem9uLmNvbUBkbWFyYy5pZXRmLm9yZzxtYWlsdG86NDB2ZXJpem9uLmNvbUBkbWFyYy5pZXRm Lm9yZz4+LCAicXVpY0BpZXRmLm9yZzxtYWlsdG86cXVpY0BpZXRmLm9yZz4iIDxxdWljQGlldGYu b3JnPG1haWx0bzpxdWljQGlldGYub3JnPj4sIElhbiBTd2V0dCA8aWFuc3dldHQ9NDBnb29nbGUu Y29tQGRtYXJjLmlldGYub3JnPG1haWx0bzo0MGdvb2dsZS5jb21AZG1hcmMuaWV0Zi5vcmc+Pg0K U3ViamVjdDogUmU6IFtFXSBEb1MtaW5nIFFVSUMgc2VydmVycyBpcyB0b28gZWFzeQ0KDQpUaGVy ZSBhcmUgbG90cyBvZiBwb3NzaWJsZSBzY2VuYXJpb3MsIHNvIHBsZWFzZSBqdXN0IGNvbnNpZGVy IHRoZXNlIHRvIGJlIGV4YW1wbGVzLiBMZXTigJlzIGRpdmlkZSB0aGUgd29ybGQgb2Ygc2VydmVy cyBpbiB0byAxKSBlbnRlcnByaXNlIGJ1c2luZXNzLXRvLWJ1c2luZXNzIHdlYnNpdGVzLCAyKSB3 ZWJzaXRlcyBtZWFudCBmb3IgY29uc3VtZXJzIHdoZXJlIGF1dGhlbnRpY2F0aW9uIGlzIGRlc2ly YWJsZSwgYW5kIDMpIHdlYnNpdGVzIHRoYXQgd2lsbCB3YW50IHRvIGFsbG93IHRoZWlyIHVzZXJz IHRvIGJlIGFub255bW91cywgdGhlcmVmb3JlLCBwcmUtYXV0aGVudGljYXRpb24gd291bGQgbm90 IGFwcGx5Lg0KDQpFbnRlcnByaXNlIGJ1c2luZXNzLXRvLWJ1c2luZXNzIHdlYnNpdGVzIGNvdWxk IHVzZSBzb21ldGhpbmcgc2ltaWxhciB0byB0aGUgU29mdHdhcmUgRGVmaW5lZCBQZXJpbWV0ZXIg KFNEUCkgU2luZ2xlIFBhY2tldCBBdXRob3JpemF0aW9uIChTUEEpIHByb3RvY29sIGNyZWF0ZWQg YnkgdGhlIENsb3VkIFNlY3VyaXR5IEFsbGlhbmNlLiBJdCB1c2VzIHRoZSBmYWN0IHRoYXQgY2xp ZW50cyBhcmUgb24tYm9hcmRlZCB0byB0aGUgc3lzdGVtIGluIGEgb25lIHRpbWUgZXZlbnQgdG8g cHJvdmlkZSB0aGUgY2xpZW50cyB3aXRoIGEgc2hhcmVkIHNlY3JldCBrZXkuIFRoZSBrZXkgaXMg dXNlZCBpbiBhIGNvdW50ZXItYmFzZWQgSE1BQyBjYWxjdWxhdGlvbi4gU2luY2Ugb25seSBhbiBh dXRob3JpemVkIGNsaWVudCBjYW4gY2FsY3VsYXRlIHRoZSBwcm9wZXIgSE1BQywgdGhlIEhNQUMg Y2FuIGJlIHVzZWQgZm9yIHByZS1hdXRoZW50aWNhdGlvbi4gVGh1cywgdGhlIHByZS1hdXRoZW50 aWNhdGlvbiB0b2tlbiBjb3VsZCBsb29rIHNvbWV0aGluZyBsaWtlIHRoaXM6DQpDbGllbnQtPlNl cnZlcjogQ2xpZW50SUQsIENvdW50ZXIsIEhNQUNbQ2xpZW50SUQgfHwgQ291bnRlciwgS3NdIHdo ZXJlIEtzIGlzIGEgc2hhcmVkIHNlY3JldCBrZXkgdGhhdCBib3RoIHRoZSBjbGllbnQgYW5kIHNl cnZlciBoYXZlLg0KT24gdGhlIHNlcnZlciBzaWRlLCB0aGUgc2VydmVyIHdvdWxkIHJlY2FsY3Vs YXRlIHRoZSBITUFDIGFuZCBjb21wYXJlIGl0IHRvIHRoZSBvbmUgcHJvdmlkZWQgYnkgdGhlIGNs aWVudC4NCk5vdGUgdGhhdCB0aGlzIGluZm9ybWF0aW9uIGlzIHNlbnQgZnJvbSB0aGUgY2xpZW50 IHRvIHRoZSBzZXJ2ZXIgaW4gY2xlYXIgdGV4dCAoaS5lLiwgbm90IGVuY3J5cHRlZCkuDQpJbiBw cmFjdGljZSwgdGhlcmUgd291bGQgcHJvYmFibHkgYmUgbW9yZSBmaWVsZHMsIGJ1dCB0aGUgaW1w b3J0YW50IHBhcnQgaXMgdGhhdCB0aGUgb25lLXRpbWUgb24gYm9hcmRpbmcgZW5hYmxlcyBhIGxp ZmV0aW1lIG9mIHByZS1hdXRoZW50aWNhdGlvbiB0b2tlbnMuDQoNCldlYnNpdGVzIG1lYW50IGZv ciBjb25zdW1lcnMgd291bGQgcHJvYmFibHkgYmUgaGFuZGxlZCBkaWZmZXJlbnRseSAtIHNwZWNp ZmljYWxseSwgbm8gb24tYm9hcmRpbmcuIFRoYXQgbWVhbnMgdGhlcmUgd291bGQgYmUgc29tZSBr aW5kIG9mIHRva2VuIHNlcnZpY2UgLSBzaW1pbGFyIHRvIE9BdXRoLCBidXQgb3BlcmF0aW5nIHBy aW9yIHRvIHRoZSBUQ1AgZXF1aXZhbGVudCBvZiBTWU4vQUNLLiBQZXJoYXBzIENsb3VkRmxhaXIg b3IgR29vZ2xlIG9yIE1pY3Jvc29mdCBjb3VsZCBpbnZlbnQgc29tZXRoaW5nIGxpa2UgdGhpcyBh bmQgb2ZmZXIgaXQgYXMgYSBzZXJ2aWNlPz8/DQoNCkFnYWluLCB0aGVyZSB3aWxsIGJlIG90aGVy IHdlYnNpdGVzIHRoYXQgd2lsbCBub3Qgd2FudCBwcmUtYXV0aGVudGljYXRpb24gYmVjYXVzZSB0 aGV5IHdhbnQgdG8gYWxsb3cgYW5vbnltb3VzIHVzZXJzIHRvIHRoZWlyIHNpdGUuDQoNCkJyZW50 DQoNCg0KT24gSnVsIDIzLCAyMDE5LCBhdCA2OjI2IEFNLCBSb2JlcnRvIFBlb24gPGZlbml4QGZi LmNvbTxtYWlsdG86ZmVuaXhAZmIuY29tPj4gd3JvdGU6DQoNCkknbSB0cnlpbmcgdG8gdW5kZXJz dGFuZCBob3cgYW55dGhpbmcgd2FzIHByZS1hdXRoZW50aWNhdGVkIHdpdGhvdXQgc3VmZmVyaW5n IGZyb20gYWxsIG9mIHRoZSBzYW1lIHByb2JsZW1zLg0KSG93IHdvdWxkIHN1Y2ggcHJlLWF1dGhl bnRpY2F0aW9uIGJlIGRvbmUgaW4gcHJhY3RpY2UsIGVzcGVjaWFsbHkgaW4gc2NlbmFyaW9zIHdo ZXJlIHRoZSBzZXJ2ZXIgZG9lc24ndCBoYXZlIGEgd2hpdGVsaXN0IG9mIGNsaWVudHMsIGFuZCB0 aGF0IHNlcnZpY2UgZGVzaXJlcyB0cmFmZmljIGZyb20gbm9uLW1hbGljaW91cyBjbGllbnRzPw0K LT1SDQpHZXQgT3V0bG9vayBmb3IgQW5kcm9pZDxodHRwczovL3VybGRlZmVuc2UucHJvb2Zwb2lu dC5jb20vdjIvdXJsP3U9aHR0cHMtM0FfX2FrYS5tc19naGVpMzYmZD1Ed01GLWcmYz11ZEJUUnZG dlhDNURocWc3VUhwSmxQcHMzbVozTFJ4cGI2X18wUG9tQlRRJnI9Vy1PMHQwendoZ1hIUDh1anBo NnV6M3JIME10dWFMd0VyXzdnRTJwMVg1byZtPUNWLUhJaGJSVnAtYXJnaU5yVnVfREs3ck9OazV4 dDlMNXIwRWZtdzE3MEkmcz1XWGhqUTVjR2ZDcnc2QlNYZHE1anlkS0ViT0YyUHUzdGpMMlFaV1h6 NmVZJmU9Pg0KDQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KRnJvbTogYnJlbnQu YmlsZ2VyQHZlcml6b24uY29tPG1haWx0bzpicmVudC5iaWxnZXJAdmVyaXpvbi5jb20+IDxicmVu dC5iaWxnZXJAdmVyaXpvbi5jb208bWFpbHRvOmJyZW50LmJpbGdlckB2ZXJpem9uLmNvbT4+DQpT ZW50OiBUdWVzZGF5LCBKdWx5IDIzLCAyMDE5IDg6MjE6MDUgQU0NClRvOiBXYXRzb24gTGFkZCA8 d2F0c29uYmxhZGRAZ21haWwuY29tPG1haWx0bzp3YXRzb25ibGFkZEBnbWFpbC5jb20+Pg0KQ2M6 IGJyZW50LmJpbGdlcj00MHZlcml6b24uY29tQGRtYXJjLmlldGYub3JnPG1haWx0bzpicmVudC5i aWxnZXI9NDB2ZXJpem9uLmNvbUBkbWFyYy5pZXRmLm9yZz4gPGJyZW50LmJpbGdlcj00MHZlcml6 b24uY29tQGRtYXJjLmlldGYub3JnPG1haWx0bzpicmVudC5iaWxnZXI9NDB2ZXJpem9uLmNvbUBk bWFyYy5pZXRmLm9yZz4+OyBSb2JlcnRvIFBlb24gPGZlbml4QGZiLmNvbTxtYWlsdG86ZmVuaXhA ZmIuY29tPj47IHF1aWNAaWV0Zi5vcmc8bWFpbHRvOnF1aWNAaWV0Zi5vcmc+IDxxdWljQGlldGYu b3JnPG1haWx0bzpxdWljQGlldGYub3JnPj47IGJyZW50LmJpbGdlckB2ZXJpem9uLmNvbTxtYWls dG86YnJlbnQuYmlsZ2VyQHZlcml6b24uY29tPiA8YnJlbnQuYmlsZ2VyQHZlcml6b24uY29tPG1h aWx0bzpicmVudC5iaWxnZXJAdmVyaXpvbi5jb20+PjsgSWFuIFN3ZXR0IDxpYW5zd2V0dD00MGdv b2dsZS5jb21AZG1hcmMuaWV0Zi5vcmc8bWFpbHRvOmlhbnN3ZXR0PTQwZ29vZ2xlLmNvbUBkbWFy Yy5pZXRmLm9yZz4+DQpTdWJqZWN0OiBSZTogW0VdIERvUy1pbmcgUVVJQyBzZXJ2ZXJzIGlzIHRv byBlYXN5DQoNCg0KDQoNCk9uIEp1bCAyMiwgMjAxOSwgYXQgOToxNiBQTSwgV2F0c29uIExhZGQg PHdhdHNvbmJsYWRkQGdtYWlsLmNvbTxtYWlsdG86d2F0c29uYmxhZGRAZ21haWwuY29tPj4gd3Jv dGU6DQoNCk9uIE1vbiwgSnVsIDIyLCAyMDE5IGF0IDU6MjkgUE0NCjxicmVudC5iaWxnZXI9NDB2 ZXJpem9uLmNvbUBkbWFyYy5pZXRmLm9yZzxtYWlsdG86YnJlbnQuYmlsZ2VyPTQwdmVyaXpvbi5j b21AZG1hcmMuaWV0Zi5vcmc+PiB3cm90ZToNCg0KDQoNCg0KT24gSnVsIDIyLCAyMDE5LCBhdCAx MDoxMCBBTSwgUm9iZXJ0byBQZW9uIDxmZW5peEBmYi5jb208bWFpbHRvOmZlbml4QGZiLmNvbT4+ IHdyb3RlOg0KDQpXaGVuIHlvdeKAmXJlIHRhbGtpbmcgYWJvdXQgcHJlLWF1dGhlbnRpY2F0aW9u LCBhcmUgeW91IHJlZmVycmluZyB0byB0aGUgMC1ydHQgc3R1ZmY/DQoNCg0KMC1SVFQgaXMgZ29v ZCBzdHVmZi4gSXQgcmVkdWNlcyB0aW1lIGZvciBhIGRldmljZSB0aGF04oCZcyBhbHJlYWR5IGtu b3duIHRvIGJlIGF1dGhvcml6ZWQgdG8gY29ubmVjdCB0byB0aGUgc2VydmVyLg0KDQpQYXJ0IG9m IHRoZSBwcm9ibGVtIGlzIHRvIHN0b3AgcmVzb3VyY2UgRG9TLiBUaGUgb3RoZXIgcGFydCBpcyBh Ym91dCBpbmZvcm1hdGlvbiBsZWFrYWdlLg0KDQpMZXTigJlzIGFzc3VtZSBhIHRpbWUgd2hlbiBh bGwgd2Vic2l0ZSB1c2UgUVVJQyBhbmQgbGV0J3MgdGFrZSBhbiBhZHZlcnNhcnkgd2hvIGhhcyBq dXN0IGxlYXJuZWQgYWJvdXQgYSB2dWxuZXJhYmlsaXR5IGluIFdvcmRwcmVzcy4gVGhlIGFkdmVy c2FyeSB3YW50cyB0byBzY2FuIHRoZSBJbnRlcm5ldCBmaW5kaW5nIFdvcmRwcmVzcyBzaXRlcy4g Tm93LCBpZiB0aGUgUVVJQyBjb25uZWN0aW9uIHJlcXVpcmVkIHByZS1hdXRoZW50aWNhdGlvbiwg dGhlbiB0aGUgc2VydmVyIHdvdWxkIGJlIGJsYWNrIHRvIHRoZSBjb25uZWN0aW9uIGFuZCB0aGUg YWR2ZXJzYXJ5IGNvdWxkIG5vdCBkZXRlcm1pbmUgaWYgdGhlIHNpdGUgdXNlcyBXb3JkcHJlc3Mu IEJ1dCwgYXMgaXQgc3RhbmRzIHRvZGF5LCBpbiB0aGlzIGZ1dHVyZSB0aW1lLCB0aGUgYWR2ZXJz YXJ5IHNjYW5zIHRoZSBJbnRlcm5ldCwgY29ubmVjdHMgdG8gdGhlIHNlcnZlciwgYW5kIGlzIGhh bmRlZCBhIFdvcmRwcmVzcyBsb2dpbiBzY3JlZW4uIE5vdyB0aGUgYWR2ZXJzYXJ5IGtub3dzIHdo ZXJlIHRvIGF0dGFjay4NCg0KSWYgY29ubmVjdGlvbiByZXF1aXJlcyBwcmVhdXRoZW50aWNhdGlv biB0aGVuIG5vIG9uZSBjYW4gc2VlIHRoZSBzaXRlLCBubz8NCg0KDQoNCkluIHRoZSBlbnRlcnBy aXNlIGl0IGlzIGEgbGl0dGxlIGRpZmZlcmVudC4gQ29tcGFuaWVzIGltcGxlbWVudCByZXZlcnNl IHByb3hpZXMgdG8gdHJ5IHRvIHByb3RlY3Qgc2VydmVycyBmcm9tIHVuYXV0aG9yaXplZCB1c2Vy cy4gQnV0IHdoYXQgaWYgdGhlIHNlcnZlcnMgcmVxdWlyZWQgYSBwcmUtYXV0aGVudGljYXRpb24g dG9rZW4uIFRoZW4sIHJldmVyc2UgcHJveGllcyB3b3VsZCBub3QgYmUgbmVlZGVkLg0KDQpTbyBJ IHRoaW5rIHRoZXJlIGFyZSB0d28gZGlmZmVyZW50IHRoaW5ncyBoZXJlLCBvciBtYXliZSBJJ20g bWlzdW5kZXJzdGFuZGluZzoNCjE6IFdlIGhhdmUgc2VydmVycyB0aGF0IGhhdmUgYSBsaW1pdGVk IG51bWJlciBvZiBjbGllbnRzIHRoYXQgd2lsbA0KZXZlciB3YW50IHRvIGNvbm5lY3QgdG8gdGhl bSwgYW5kIHdhbnQgdG8gZW5hYmxlIG90aGVyIGRldmljZXMgdG8NCmZpbHRlciB0aGUgdHJhZmZp Yywgc28gbmVlZCBzb21lIG1lY2hhbmlzbSB0aGF0IGVuYWJsZXMgYSBtaWRkbGVib3ggdG8NCmZp bHRlci4NCg0KTm8gbWlkZGxlIGJveCEgUHJlLWF1dGhlbnRpY2F0aW9uIG1ha2VzIHNlcnZlcnMg c2VsZi1kZWZlbmRpbmcuIExhY2sgb2YgcHJlLWF1dGhlbnRpY2F0aW9uIGlzIHdoeSB3ZSBoYXZl IG1pZGRsZSBib3hlcy4NCg0KDQoyOiBXZSBoYXZlIHNlcnZlcnMgZ2VuZXJhbGx5IGF2YWlsYWJs ZSB0byB0aGUgcHVibGljIGFuZCBhcmUgY29uY2VybmVkDQp0aGF0IHRoZSBRVUlDIHZlcnNpb24g b2YgYSBTWU4gZmxvb2QgY2FuJ3QgYmUgZGVhbHQgd2l0aCAoZGVzcGl0ZQ0KZXZpZGVuY2UgdG8g dGhlIGNvbnRyYXJ5KS4NCg0KQ29tcGFuaWVzIGFuZCB3ZWJzaXRlIG93bmVycyBoYXZlIHRvIHBh eSBmb3IgYW50aS1Eb1Mgc2VydmljZXMgZnJvbSB0aGUgbGlrZXMgb2YgVmVyaXpvbiBhbmQgb3Ro ZXJzIEJFQ0FVU0Ugc2VydmVycyBsaXN0ZW4gdG8gYWxsIGNsaWVudHMuIFdpdGggcHJlLWF1dGhl bnRpY2F0aW9uLCB0aGUgbmVlZCB0byBoYXZlIGFuIGFudGktRG9TIHNlcnZpY2Ugd291bGQgYmUg Z3JlYXRseSByZWR1Y2VkIGJlY2F1c2Ugc2VydmVycyB3b3VsZCBub3QgcmVzcG9uZCB0byB1bmF1 dGhvcml6ZWQgY2xpZW50cy4NCg0KQW5kIHRoZSBwb2ludCBhYm91dCBpbmZvcm1hdGlvbiBsZWFr YWdlIGlzIGltcG9ydGFudCwgdG9vLg0KDQpCcmVudA0KDQoNCg0KSSBkb24ndCBrbm93IG11Y2gg YWJvdXQgaG93IENsb3VkZmxhcmUgKG15IHBsYWNlIG9mIGVtcGxveW1lbnQpICBkZWFscw0Kd2l0 aCAyIGJ1dCBob3BlZnVsbHkgc29tZSBwZW9wbGUgd2hvIGRvL2ltcGxlbWVudG9ycyBjYW4gc3Bl YWsgdXANCmFib3V0IGhvdyBtdWNoIG9mIGEgcHJvYmxlbSBpdCBpcy4gQnV0IDEgaXMgSSB0aGlu ayB2ZXJ5IG11Y2ggYQ0Kbm9uZ29hbDogbWlkZGxlYm94IG9zc2lmaWNhdGlvbiBpcyBwYXJ0IG9m IHRoZSByZWFzb24gd2UgaGF2ZSBRVUlDLg0KDQpTaW5jZXJlbHksDQpXYXRzb24gTGFkZA0KDQoN Cg0KQnJlbnQgQmxpZ2VyDQpEaXJlY3Rvci1UZWNobm9sb2d5IFZlcml6b24gU0RQDQpicmVudC5i aWxnZXJAdmVyaXpvbi5jb208bWFpbHRvOmJyZW50LmJpbGdlckB2ZXJpem9uLmNvbT4NCg0KDQoN Cg0KDQoNCg0KQnJlbnQgQmxpZ2VyDQpEaXJlY3Rvci1UZWNobm9sb2d5IFZlcml6b24gU0RQDQpi cmVudC5iaWxnZXJAdmVyaXpvbi5jb208bWFpbHRvOmJyZW50LmJpbGdlckB2ZXJpem9uLmNvbT4N Cg0KDQoNCg0KQnJlbnQgQmxpZ2VyDQpEaXJlY3Rvci1UZWNobm9sb2d5IFZlcml6b24gU0RQDQpi cmVudC5iaWxnZXJAdmVyaXpvbi5jb208bWFpbHRvOmJyZW50LmJpbGdlckB2ZXJpem9uLmNvbT4N Cg0KDQoNCg0KDQo= --_000_16026C5D847B4281ADE1A65D394124FFoneverizoncom_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgbGluZS1icmVhazogYWZ0 ZXItd2hpdGUtc3BhY2U7IiBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCjxkaXY+PGJyIGNsYXNz PSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPk9u IEp1bCAyMywgMjAxOSwgYXQgNzo1MyBBTSwgTWlra2VsIEZhaG7DuGUgSsO4cmdlbnNlbiAmbHQ7 PGEgaHJlZj0ibWFpbHRvOm1pa2tlbGZqQGdtYWlsLmNvbSIgY2xhc3M9IiI+bWlra2VsZmpAZ21h aWwuY29tPC9hPiZndDsgd3JvdGU6PC9kaXY+DQo8YnIgY2xhc3M9IkFwcGxlLWludGVyY2hhbmdl LW5ld2xpbmUiPg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgaWQ9ImJsb29wX2N1c3RvbWZvbnQiIHN0 eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhLCBBcmlhbDsgZm9udC1zaXplOiAxM3B4OyBmb250 LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBu b3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWlu ZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29y ZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgdGV4dC1kZWNv cmF0aW9uOiBub25lOyBtYXJnaW46IDBweDsiIGNsYXNzPSIiPg0KSXQgaXMgbm90IHRoYXQgZWFz eSB0byBzdGVhbCBhIHRva2VuIGFuZCByZXBsYXksIGJ1dCBpdCBjYW4gaGFwcGVuLjwvZGl2Pg0K PC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2PjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KWWVzLCBp dCByZXF1aXJlcyBjb21wcm9taXNpbmcgYSBjbGllbnQgYW5kIHN0ZWFsaW5nIHRoZSBrZXkgb3Ig anVzdCB1c2luZyB0aGUga2V5IGZyb20gYSBiYWNrIGRvb3IuIEluIHByYWN0aWNlIHRoZSBsYXR0 ZXIgbWF5IGJlIGFkdmFudGFnZW91cyB0byB0aGUgYWR2ZXJzYXJ5IGJlY2F1c2UgdGhlIHNvdXJj ZSBvZiB0aGUgYXR0YWNrIHdpbGwgYmUgZnJvbSBhIG5vcm1hbCBsb2NhdGlvbiBhbmQgYmVjYXVz ZSBmdXR1cmUgZGV2aWNlIGF1dGhvcml6YXRpb25zDQogbWF5IGluY2x1ZGUgYSBmaW5nZXJwcmlu dCBvZiB0aGUgZGV2aWNlIC0gYSBmaW5nZXJwcmludCB0aGF0IHdvdWxkIGZhaWwgb24gdGhlIHN0 b2xlbiBrZXkuIEJ1dCBsb29rIGF0IHdoYXQgd2XigJl2ZSBkb25lIHRvIHRoZSB1bmF1dGhvcml6 ZWQgYWR2ZXJzYXJ5IHdpdGggdGhlIHByZS1hdXRoZW50aWNhdGlvbiB0b2tlbiAtIGRlZmVhdGVk IHJlc291cmNlIERvUywgaW5mb3JtYXRpb24gbGVha2FnZSwgYWxsIHZ1bG5lcmFiaWxpdGllcyBv ZiB0aGUNCiBzZXJ2ZXIsIGFsbCBjb25maWd1cmF0aW9uIGVycm9ycyBvZiB0aGUgYXBwbGljYXRp b25zIG9mIHRoZSBzZXJ2ZXIuIEFuZCBpdCBhdWdtZW50cyBUTFMgdG8gZGVmZWF0IG1hbi1pbi10 aGUtbWlkZGxlIGF0dGFja3MuPC9kaXY+DQo8ZGl2PjxiciBjbGFzcz0iIj4NCjxibG9ja3F1b3Rl IHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgaWQ9ImJsb29wX2N1 c3RvbWZvbnQiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhLCBBcmlhbDsgZm9udC1zaXpl OiAxM3B4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZv bnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0 YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6 IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBw eDsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyBtYXJnaW46IDBweDsiIGNsYXNzPSIiPg0KPGJyIGNs YXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGlkPSJibG9vcF9jdXN0b21mb250IiBzdHlsZT0iZm9udC1m YW1pbHk6IEhlbHZldGljYSwgQXJpYWw7IGZvbnQtc2l6ZTogMTNweDsgZm9udC1zdHlsZTogbm9y bWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0 ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsg dGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzog MHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQtZGVjb3JhdGlvbjogbm9u ZTsgbWFyZ2luOiAwcHg7IiBjbGFzcz0iIj4NCklmIHlvdSBhZGQgYSB0aW1lIGZhY3RvciBzdWNo IGFuIGF0dGFjayB3aWxsIGhhdmUgbGltaXRlZCB2YWx1ZS4gSW4gZmFjdCBhIHRva2VuIG5lZWQg bm90IGJlIHZhbGlkIGZvciBtb3JlIHRoYW4gYWJvdXQgMTAgbWludXRlcyB0byBhY2NvdW50IGZv ciBza2V3ZWQgY2xvY2tzLjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2PjxiciBj bGFzcz0iIj4NCjwvZGl2Pg0KQXMgbm90ZWQgb24gYSBkaWZmZXJlbnQgcG9zdGluZywgU2luZ2xl IFBhY2tldCBBdXRob3JpemF0aW9uIGlzIGJhc2VkIG9uIFJGQyA0MjI2IHdoaWNoIGhhcyBib3Ro IGEgY291bnRlciBhbmQgYSB0aW1lIGJhc2VkIGFwcHJvYWNoLiBQZXJzb25hbGx5LCBJIHByZWZl ciBhIGNvdW50ZXIuPC9kaXY+DQo8ZGl2PjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdj5CdXQg YWdhaW4sIHRoaXMgaXMgYWxsIGlycmVsZXZhbnQgYmVjYXVzZSBJ4oCZbSBub3Qgc3VnZ2VzdGlu ZyBhbnkgb25lIHByZS1hdXRoZW50aWNhdGlvbi4gSeKAmW0ganVzdCB1c2luZyBhbiBleGFtcGxl IHRvIHNob3cgaG93IGl0IGNhbiBzdG9wIG11bHRpcGxlIHR5cGVzIG9mIGF0dGFja3MuPC9kaXY+ DQo8ZGl2PjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdj5CcmVudDwvZGl2Pg0KPGRpdj48YnIg Y2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9 IiI+PGJyIHN0eWxlPSJjYXJldC1jb2xvcjogcmdiKDAsIDAsIDApOyBmb250LWZhbWlseTogSGVs dmV0aWNhLCBBcmlhbDsgZm9udC1zaXplOiAxM3B4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQt dmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5n OiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5z Zm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJr aXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyIgY2xhc3M9 IiI+DQo8cCBjbGFzcz0iYWlybWFpbF9vbiIgc3R5bGU9ImNhcmV0LWNvbG9yOiByZ2IoMCwgMCwg MCk7IGZvbnQtZmFtaWx5OiBIZWx2ZXRpY2EsIEFyaWFsOyBmb250LXNpemU6IDEzcHg7IGZvbnQt c3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5v cm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5k ZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3Jk LXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyB0ZXh0LWRlY29y YXRpb246IG5vbmU7Ij4NCk9uIDIzIEp1bHkgMjAxOSBhdCAxNi40MS4wOSwgUm9iZXJ0byBQZW9u ICg8YSBocmVmPSJtYWlsdG86ZmVuaXhAZmIuY29tIiBjbGFzcz0iIj5mZW5peEBmYi5jb208L2E+ KSB3cm90ZTo8L3A+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iY2xlYW5fYnEiIHN0 eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhLCBBcmlhbDsgZm9udC1zaXplOiAxM3B4OyBmb250 LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBu b3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IG9ycGhhbnM6IGF1dG87IHRleHQtYWxpZ246 IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3Bh Y2U6IG5vcm1hbDsgd2lkb3dzOiBhdXRvOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0 LXNpemUtYWRqdXN0OiBhdXRvOyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQt ZGVjb3JhdGlvbjogbm9uZTsiPg0KPHNwYW4gY2xhc3M9IiI+DQo8ZGl2IGxhbmc9IkVOLVVTIiBs aW5rPSJibHVlIiB2bGluaz0icHVycGxlIiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+PC9kaXY+ DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPknigJlkIGFzc3VtZSAjMSBpcyBsZXNzIGxpa2VseSB0byBleHBlcmllbmNlIGNy aXBwbGluZyBTWU4tYmFzZWQgRG9TIGF0dGFja3MsIGFuZCBjb3VsZCBvdGhlcndpc2UgYmUgYWNj b21wbGlzaGVkIGJ5IGxpbWl0aW5nIGFjY2VzcyBpbiBJUC1zcGFjZSAoaW1wZXJmZWN0LCBidXQg d2XigJlyZSBsb29raW5nIGZvciDigJxnb29kLWVub3VnaOKAnSwgaGVyZSkuPC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PGJyIGNsYXNzPSIiPg0KLi4gd2hpY2ggbWVhbnMgdGhhdCBJIHRoaW5r IHdlIHNob3VsZCBjb25zaWRlciAyJiM0MzszIG9ubHksIHJlYWxseS48YnIgY2xhc3M9IiI+DQo8 YnIgY2xhc3M9IiI+DQpGb3IgIzIgYW5kICMzLCB3aGljaCBJIHN1c3BlY3QgaGF2ZSBzaWduaWZp Y2FudCBvdmVybGFwcyAoc2l0ZXMgbWF5IHByb3ZpZGUgc2VydmljZXMgYm90aCB0byBsb2dnZWQt aW4gdXNlcnMgYW5kIHVzZXJzIHdobyBhcmVu4oCZdCBsb2dnZWQgaW4pLCB0aGUgcHJlLWF1dGhv cml6YXRpb24gZWl0aGVyOjxiciBjbGFzcz0iIj4NCiZuYnNwOyBhKSBjYW4gYmUgRG9T4oCZZCBp dHNlbGYuPGJyIGNsYXNzPSIiPg0KJm5ic3A7IGIpIGNhbiBiZSB1c2VkIHRvIGRvIGEgRG9TIGlu IHRoZSBmdXR1cmUuPGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KPC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+SW4gY2FzZSBiLCBhcyBhbiBhdHRhY2tlciwgeW914oCZZCBnZXQgb3Igd2Fp dCBmb3IgdGhlIGNsaWVudCB0byBhdXRoZW50aWNhdGUsIHRoZW4gdXNlIHRoYXQgYXV0aGVudGlj YXRpb24gaW4gYSByZXBsYXkgYXR0YWNrLCBlLmcuIGJ5IHJlcGxpY2F0aW5nIHRoZSBhdXRoIHRv a2VuIGFjcm9zcyBtYW55IGhvc3RzLjxiciBjbGFzcz0iIj4NCkluIGNhc2VzIHdoZXJlIHlvdSBh cmUgZGlzYWxsb3dlZCB0byByZXBsaWNhdGUgdGhlIGF1dGggdG9rZW4sIGUuZy4gYmVjYXVzZSBp dCBpcyB0aWVkIHRvIGEgcGFydGljdWxhciBJUCwgeW91IGNhbiBoZWxwIHNvbHZlIHRoZSByZXBs YXkgYXR0YWNrIGhvd2V2ZXIgeW914oCZbGwgYmUgYmlhc2luZyB0cmFmZmljIHRvIHVzZXJzIHdo b3NlIElQIGlzIHN0YWJsZSBhbmQgd2hvIGFyZSBsb2dnZWQgaW4vYXV0aOKAmWQuPGJyIGNsYXNz PSIiPg0KSW4gdGhlIHByZS1zaGFyZWQga2V5IHNjZW5hcmlvIHRoYXQgd2FzIGRlc2NyaWJlZCwg aWYgYW55IG9uZSBjbGllbnQgbGVha3MgdGhlIHNoYXJlZC1zZWNyZXQsIHRoZW4gaXQgYmVjb21l cyBub3QgdmVyeSB1c2VmdWwgYW5kIGNlcnRhaW5seSBkb2VzbuKAmXQgcHJvdGVjdCBhZ2FpbnN0 IGEgRG9TLiBJ4oCZZCBndWVzcyB0aGF0IHRoZSBwcm9iYWJpbGl0eSBvZiB0aGUgbG9zcyBvZiBh IHN5bW1ldHJpYyBrZXkgaXMgcHJvcG9ydGlvbmFsIHRvIHRoZSBicmVhZHRoDQogb2YgdGhlIGRp c3RyaWJ1dGlvbiBvZiB0aGUga2V5LjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCldoYXQg SeKAmW0gdHJ5aW5nIHRvIHBvaW50IG91dCBpcyB0aGF0IHRoaXMgZG9lc27igJl0IHJlYWxseSBz ZWVtIHRvIHNvbHZlIHRoZSBnZW5lcmljIERvUyBhdHRhY2suPGJyIGNsYXNzPSIiPg0KWW914oCZ bGwgc3RpbGwgbmVlZCB0byBkbyBzb21lIGhldXJpc3RpY3MvcnVsZXMgYmFzZWQgdXBvbiB3aGF0 ZXZlciBpcyBvYnNlcnZhYmxlLCBhdCBhIG1pbmltdW0gdGhlIDUtdHVwbGUuPGJyIGNsYXNzPSIi Pg0KR2V0dGluZyBtb3JlIHRoYW4gdGhlIDUtdHVwbGUgdG8gYmUgdmlzaWJsZSB3aWxsIHRha2Ug bW9yZSB3b3JrIGJ5IHRoZSBzZXJ2ZXIsIHRydWUsIGJ1dCBnaXZlbiBvdGhlciBkZXNpZ24gY29u c3RyYWludHMsIEkgZG9u4oCZdCBzZWUgaG93IHRoYXQgaXMgYXZvaWRhYmxlLjxiciBjbGFzcz0i Ij4NCjxiciBjbGFzcz0iIj4NCi09UjwvcD4NCjxkaXYgY2xhc3M9IiI+Jm5ic3A7PGJyIGNsYXNz PSJ3ZWJraXQtYmxvY2stcGxhY2Vob2xkZXIiPg0KPC9kaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXIt c3R5bGU6IHNvbGlkIG5vbmUgbm9uZTsgYm9yZGVyLXRvcC13aWR0aDogMXB0OyBib3JkZXItdG9w LWNvbG9yOiByZ2IoMTgxLCAxOTYsIDIyMyk7IHBhZGRpbmc6IDNwdCAwaW4gMGluOyIgY2xhc3M9 IiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48YiBjbGFzcz0iIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOiAxMnB0OyIgY2xhc3M9IiI+RnJvbTo8c3BhbiBjbGFzcz0iQXBwbGUtY29udmVydGVkLXNw YWNlIj4mbmJzcDs8L3NwYW4+PC9zcGFuPjwvYj48c3BhbiBzdHlsZT0iZm9udC1zaXplOiAxMnB0 OyIgY2xhc3M9IiI+JnF1b3Q7PGEgaHJlZj0ibWFpbHRvOmJyZW50LmJpbGdlckB2ZXJpem9uLmNv bSIgY2xhc3M9IiI+YnJlbnQuYmlsZ2VyQHZlcml6b24uY29tPC9hPiZxdW90OyAmbHQ7PGEgaHJl Zj0ibWFpbHRvOmJyZW50LmJpbGdlckB2ZXJpem9uLmNvbSIgY2xhc3M9IiI+YnJlbnQuYmlsZ2Vy QHZlcml6b24uY29tPC9hPiZndDs8YnIgY2xhc3M9IiI+DQo8YiBjbGFzcz0iIj5EYXRlOjxzcGFu IGNsYXNzPSJBcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48L2I+VHVlc2RheSwg SnVseSAyMywgMjAxOSBhdCA5OjU5IEFNPGJyIGNsYXNzPSIiPg0KPGIgY2xhc3M9IiI+VG86PHNw YW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjwvYj5Sb2JlcnRv IFBlb24gJmx0OzxhIGhyZWY9Im1haWx0bzpmZW5peEBmYi5jb20iIGNsYXNzPSIiPmZlbml4QGZi LmNvbTwvYT4mZ3Q7PGJyIGNsYXNzPSIiPg0KPGIgY2xhc3M9IiI+Q2M6PHNwYW4gY2xhc3M9IkFw cGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjwvYj4mcXVvdDs8YSBocmVmPSJtYWls dG86YnJlbnQuYmlsZ2VyQHZlcml6b24uY29tIiBjbGFzcz0iIj5icmVudC5iaWxnZXJAdmVyaXpv bi5jb208L2E+JnF1b3Q7ICZsdDs8YSBocmVmPSJtYWlsdG86YnJlbnQuYmlsZ2VyQHZlcml6b24u Y29tIiBjbGFzcz0iIj5icmVudC5iaWxnZXJAdmVyaXpvbi5jb208L2E+Jmd0OywgV2F0c29uIExh ZGQgJmx0OzxhIGhyZWY9Im1haWx0bzp3YXRzb25ibGFkZEBnbWFpbC5jb20iIGNsYXNzPSIiPndh dHNvbmJsYWRkQGdtYWlsLmNvbTwvYT4mZ3Q7LA0KICZxdW90O2JyZW50LmJpbGdlcj08YSBocmVm PSJtYWlsdG86NDB2ZXJpem9uLmNvbUBkbWFyYy5pZXRmLm9yZyIgY2xhc3M9IiI+NDB2ZXJpem9u LmNvbUBkbWFyYy5pZXRmLm9yZzwvYT4mcXVvdDsgJmx0O2JyZW50LmJpbGdlcj08YSBocmVmPSJt YWlsdG86NDB2ZXJpem9uLmNvbUBkbWFyYy5pZXRmLm9yZyIgY2xhc3M9IiI+NDB2ZXJpem9uLmNv bUBkbWFyYy5pZXRmLm9yZzwvYT4mZ3Q7LCAmcXVvdDs8YSBocmVmPSJtYWlsdG86cXVpY0BpZXRm Lm9yZyIgY2xhc3M9IiI+cXVpY0BpZXRmLm9yZzwvYT4mcXVvdDsNCiAmbHQ7PGEgaHJlZj0ibWFp bHRvOnF1aWNAaWV0Zi5vcmciIGNsYXNzPSIiPnF1aWNAaWV0Zi5vcmc8L2E+Jmd0OywgSWFuIFN3 ZXR0ICZsdDtpYW5zd2V0dD08YSBocmVmPSJtYWlsdG86NDBnb29nbGUuY29tQGRtYXJjLmlldGYu b3JnIiBjbGFzcz0iIj40MGdvb2dsZS5jb21AZG1hcmMuaWV0Zi5vcmc8L2E+Jmd0OzxiciBjbGFz cz0iIj4NCjxiIGNsYXNzPSIiPlN1YmplY3Q6PHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRlZC1z cGFjZSI+Jm5ic3A7PC9zcGFuPjwvYj5SZTogW0VdIERvUy1pbmcgUVVJQyBzZXJ2ZXJzIGlzIHRv byBlYXN5PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+ Jm5ic3A7PGJyIGNsYXNzPSJ3ZWJraXQtYmxvY2stcGxhY2Vob2xkZXIiPg0KPC9kaXY+DQo8L2Rp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlRoZXJlIGFyZSBsb3RzIG9mIHBvc3NpYmxlIHNjZW5h cmlvcywgc28gcGxlYXNlIGp1c3QgY29uc2lkZXIgdGhlc2UgdG8gYmUgZXhhbXBsZXMuIExldOKA mXMgZGl2aWRlIHRoZSB3b3JsZCBvZiBzZXJ2ZXJzIGluIHRvIDEpIGVudGVycHJpc2UgYnVzaW5l c3MtdG8tYnVzaW5lc3Mgd2Vic2l0ZXMsIDIpIHdlYnNpdGVzIG1lYW50IGZvciBjb25zdW1lcnMg d2hlcmUgYXV0aGVudGljYXRpb24gaXMgZGVzaXJhYmxlLA0KIGFuZCAzKSB3ZWJzaXRlcyB0aGF0 IHdpbGwgd2FudCB0byBhbGxvdyB0aGVpciB1c2VycyB0byBiZSBhbm9ueW1vdXMsIHRoZXJlZm9y ZSwgcHJlLWF1dGhlbnRpY2F0aW9uIHdvdWxkIG5vdCBhcHBseS48L3A+DQo8ZGl2IGNsYXNzPSIi Pg0KPGRpdiBjbGFzcz0iIj4mbmJzcDs8YnIgY2xhc3M9IndlYmtpdC1ibG9jay1wbGFjZWhvbGRl ciI+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PkVudGVycHJpc2UgYnVzaW5lc3MtdG8tYnVzaW5lc3Mgd2Vic2l0ZXMgY291bGQgdXNlIHNvbWV0 aGluZyBzaW1pbGFyIHRvIHRoZSBTb2Z0d2FyZSBEZWZpbmVkIFBlcmltZXRlciAoU0RQKSBTaW5n bGUgUGFja2V0IEF1dGhvcml6YXRpb24gKFNQQSkgcHJvdG9jb2wgY3JlYXRlZCBieSB0aGUgQ2xv dWQgU2VjdXJpdHkgQWxsaWFuY2UuIEl0IHVzZXMgdGhlIGZhY3QgdGhhdCBjbGllbnRzIGFyZSBv bi1ib2FyZGVkDQogdG8gdGhlIHN5c3RlbSBpbiBhIG9uZSB0aW1lIGV2ZW50IHRvIHByb3ZpZGUg dGhlIGNsaWVudHMgd2l0aCBhIHNoYXJlZCBzZWNyZXQga2V5LiBUaGUga2V5IGlzIHVzZWQgaW4g YSBjb3VudGVyLWJhc2VkIEhNQUMgY2FsY3VsYXRpb24uIFNpbmNlIG9ubHkgYW4gYXV0aG9yaXpl ZCBjbGllbnQgY2FuIGNhbGN1bGF0ZSB0aGUgcHJvcGVyIEhNQUMsIHRoZSBITUFDIGNhbiBiZSB1 c2VkIGZvciBwcmUtYXV0aGVudGljYXRpb24uIFRodXMsIHRoZSBwcmUtYXV0aGVudGljYXRpb24N CiB0b2tlbiBjb3VsZCBsb29rIHNvbWV0aGluZyBsaWtlIHRoaXM6PC9wPg0KPC9kaXY+DQo8ZGl2 IGNsYXNzPSIiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Q2xpZW50LSZndDtTZXJ2ZXI6IENsaWVu dElELCBDb3VudGVyLCBITUFDW0NsaWVudElEIHx8IENvdW50ZXIsIEtzXSB3aGVyZSBLcyBpcyBh IHNoYXJlZCBzZWNyZXQga2V5IHRoYXQgYm90aCB0aGUgY2xpZW50IGFuZCBzZXJ2ZXIgaGF2ZS48 L3A+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5PbiB0aGUg c2VydmVyIHNpZGUsIHRoZSBzZXJ2ZXIgd291bGQgcmVjYWxjdWxhdGUgdGhlIEhNQUMgYW5kIGNv bXBhcmUgaXQgdG8gdGhlIG9uZSBwcm92aWRlZCBieSB0aGUgY2xpZW50LiZuYnNwOzwvcD4NCjwv ZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPk5vdGUgdGhhdCB0aGlz IGluZm9ybWF0aW9uIGlzIHNlbnQgZnJvbSB0aGUgY2xpZW50IHRvIHRoZSBzZXJ2ZXIgaW4gY2xl YXIgdGV4dCAoaS5lLiwgbm90IGVuY3J5cHRlZCkuPC9wPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIi Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SW4gcHJhY3RpY2UsIHRoZXJlIHdvdWxkIHByb2JhYmx5 IGJlIG1vcmUgZmllbGRzLCBidXQgdGhlIGltcG9ydGFudCBwYXJ0IGlzIHRoYXQgdGhlIG9uZS10 aW1lIG9uIGJvYXJkaW5nIGVuYWJsZXMgYSBsaWZldGltZSBvZiBwcmUtYXV0aGVudGljYXRpb24g dG9rZW5zLjwvcD4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+Jm5ic3A7 PGJyIGNsYXNzPSJ3ZWJraXQtYmxvY2stcGxhY2Vob2xkZXIiPg0KPC9kaXY+DQo8L2Rpdj4NCjxk aXYgY2xhc3M9IiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5XZWJzaXRlcyBtZWFudCBmb3IgY29u c3VtZXJzIHdvdWxkIHByb2JhYmx5IGJlIGhhbmRsZWQgZGlmZmVyZW50bHkgLSBzcGVjaWZpY2Fs bHksIG5vIG9uLWJvYXJkaW5nLiBUaGF0IG1lYW5zIHRoZXJlIHdvdWxkIGJlIHNvbWUga2luZCBv ZiB0b2tlbiBzZXJ2aWNlIC0gc2ltaWxhciB0byBPQXV0aCwgYnV0IG9wZXJhdGluZyBwcmlvciB0 byB0aGUgVENQIGVxdWl2YWxlbnQgb2YgU1lOL0FDSy4gUGVyaGFwcyBDbG91ZEZsYWlyDQogb3Ig R29vZ2xlIG9yIE1pY3Jvc29mdCBjb3VsZCBpbnZlbnQgc29tZXRoaW5nIGxpa2UgdGhpcyBhbmQg b2ZmZXIgaXQgYXMgYSBzZXJ2aWNlPz8/PC9wPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGRp diBjbGFzcz0iIj4mbmJzcDs8YnIgY2xhc3M9IndlYmtpdC1ibG9jay1wbGFjZWhvbGRlciI+DQo8 L2Rpdj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkFnYWlu LCB0aGVyZSB3aWxsIGJlIG90aGVyIHdlYnNpdGVzIHRoYXQgd2lsbCBub3Qgd2FudCBwcmUtYXV0 aGVudGljYXRpb24gYmVjYXVzZSB0aGV5IHdhbnQgdG8gYWxsb3cgYW5vbnltb3VzIHVzZXJzIHRv IHRoZWlyIHNpdGUuPC9wPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj4m bmJzcDs8YnIgY2xhc3M9IndlYmtpdC1ibG9jay1wbGFjZWhvbGRlciI+DQo8L2Rpdj4NCjwvZGl2 Pg0KPGRpdiBjbGFzcz0iIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkJyZW50PC9wPg0KPGRpdiBj bGFzcz0iIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0i Ij4NCjwvcD4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOiA1cHQ7IG1hcmdpbi1ib3R0 b206IDVwdDsiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi Pk9uIEp1bCAyMywgMjAxOSwgYXQgNjoyNiBBTSwgUm9iZXJ0byBQZW9uICZsdDs8YSBocmVmPSJt YWlsdG86ZmVuaXhAZmIuY29tIiBjbGFzcz0iIj5mZW5peEBmYi5jb208L2E+Jmd0OyB3cm90ZTo8 L3A+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+Jm5ic3A7PGJyIGNsYXNzPSJ3ZWJraXQtYmxvY2st cGxhY2Vob2xkZXIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj4NCjxk aXYgY2xhc3M9IiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWJvdHRvbTog MTJwdDsiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTogQXJpYWwsIHNhbnMtc2VyaWY7IiBjbGFz cz0iIj5JJ20gdHJ5aW5nIHRvIHVuZGVyc3RhbmQgaG93IGFueXRoaW5nIHdhcyBwcmUtYXV0aGVu dGljYXRlZCB3aXRob3V0IHN1ZmZlcmluZyBmcm9tIGFsbCBvZiB0aGUgc2FtZSBwcm9ibGVtcy48 L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1hcmdpbi1ib3R0b206IDEycHQ7Ij48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6IEFy aWFsLCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+SG93IHdvdWxkIHN1Y2ggcHJlLWF1dGhlbnRpY2F0 aW9uIGJlIGRvbmUgaW4gcHJhY3RpY2UsIGVzcGVjaWFsbHkgaW4gc2NlbmFyaW9zIHdoZXJlIHRo ZSBzZXJ2ZXIgZG9lc24ndCBoYXZlIGEgd2hpdGVsaXN0IG9mIGNsaWVudHMsIGFuZCB0aGF0IHNl cnZpY2UgZGVzaXJlcw0KIHRyYWZmaWMgZnJvbSBub24tbWFsaWNpb3VzIGNsaWVudHM/PC9zcGFu PjwvcD4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtYXJnaW4tYm90dG9tOiAxMnB0OyI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiBBcmlhbCwg c2Fucy1zZXJpZjsiIGNsYXNzPSIiPi09Ujwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9 IiI+DQo8ZGl2IGNsYXNzPSIiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtZmFtaWx5OiBBcmlhbCwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPkdldDxzcGFuIGNsYXNzPSJB cHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48YSBocmVmPSJodHRwczovL3VybGRl ZmVuc2UucHJvb2Zwb2ludC5jb20vdjIvdXJsP3U9aHR0cHMtM0FfX2FrYS5tc19naGVpMzYmYW1w O2Q9RHdNRi1nJmFtcDtjPXVkQlRSdkZ2WEM1RGhxZzdVSHBKbFBwczNtWjNMUnhwYjZfXzBQb21C VFEmYW1wO3I9Vy1PMHQwendoZ1hIUDh1anBoNnV6M3JIME10dWFMd0VyXzdnRTJwMVg1byZhbXA7 bT1DVi1ISWhiUlZwLWFyZ2lOclZ1X0RLN3JPTms1eHQ5TDVyMEVmbXcxNzBJJmFtcDtzPVdYaGpR NWNHZkNydzZCU1hkcTVqeWRLRWJPRjJQdTN0akwyUVpXWHo2ZVkmYW1wO2U9IiBjbGFzcz0iIj5P dXRsb29rDQogZm9yIEFuZHJvaWQ8L2E+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0i Ij48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6IEFyaWFsLCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+ Jm5ic3A7PC9zcGFuPjxiciBjbGFzcz0id2Via2l0LWJsb2NrLXBsYWNlaG9sZGVyIj4NCjwvZGl2 Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSJNc29Ob3JtYWwiIGFsaWduPSJjZW50ZXIiIHN0eWxlPSJ0 ZXh0LWFsaWduOiBjZW50ZXI7Ij4NCjxociBzaXplPSIwIiB3aWR0aD0iMTAwJSIgYWxpZ249ImNl bnRlciIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgaWQ9ImRpdlJwbHlGd2RNc2ciIGNsYXNzPSIi Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGIgY2xhc3M9IiI+RnJvbTo8L2I+PHNwYW4gY2xhc3M9 IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxhIGhyZWY9Im1haWx0bzpicmVu dC5iaWxnZXJAdmVyaXpvbi5jb20iIGNsYXNzPSIiPmJyZW50LmJpbGdlckB2ZXJpem9uLmNvbTwv YT48c3BhbiBjbGFzcz0iQXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+Jmx0Ozxh IGhyZWY9Im1haWx0bzpicmVudC5iaWxnZXJAdmVyaXpvbi5jb20iIGNsYXNzPSIiPmJyZW50LmJp bGdlckB2ZXJpem9uLmNvbTwvYT4mZ3Q7PGJyIGNsYXNzPSIiPg0KPGIgY2xhc3M9IiI+U2VudDo8 L2I+PHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPlR1ZXNk YXksIEp1bHkgMjMsIDIwMTkgODoyMTowNSBBTTxiciBjbGFzcz0iIj4NCjxiIGNsYXNzPSIiPlRv OjwvYj48c3BhbiBjbGFzcz0iQXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+V2F0 c29uIExhZGQgJmx0OzxhIGhyZWY9Im1haWx0bzp3YXRzb25ibGFkZEBnbWFpbC5jb20iIGNsYXNz PSIiPndhdHNvbmJsYWRkQGdtYWlsLmNvbTwvYT4mZ3Q7PGJyIGNsYXNzPSIiPg0KPGIgY2xhc3M9 IiI+Q2M6PC9iPjxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bh bj48YSBocmVmPSJtYWlsdG86YnJlbnQuYmlsZ2VyPTQwdmVyaXpvbi5jb21AZG1hcmMuaWV0Zi5v cmciIGNsYXNzPSIiPmJyZW50LmJpbGdlcj00MHZlcml6b24uY29tQGRtYXJjLmlldGYub3JnPC9h PjxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj4mbHQ7PGEg aHJlZj0ibWFpbHRvOmJyZW50LmJpbGdlcj00MHZlcml6b24uY29tQGRtYXJjLmlldGYub3JnIiBj bGFzcz0iIj5icmVudC5iaWxnZXI9NDB2ZXJpem9uLmNvbUBkbWFyYy5pZXRmLm9yZzwvYT4mZ3Q7 Ow0KIFJvYmVydG8gUGVvbiAmbHQ7PGEgaHJlZj0ibWFpbHRvOmZlbml4QGZiLmNvbSIgY2xhc3M9 IiI+ZmVuaXhAZmIuY29tPC9hPiZndDs7PHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRlZC1zcGFj ZSI+Jm5ic3A7PC9zcGFuPjxhIGhyZWY9Im1haWx0bzpxdWljQGlldGYub3JnIiBjbGFzcz0iIj5x dWljQGlldGYub3JnPC9hPjxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNw Ozwvc3Bhbj4mbHQ7PGEgaHJlZj0ibWFpbHRvOnF1aWNAaWV0Zi5vcmciIGNsYXNzPSIiPnF1aWNA aWV0Zi5vcmc8L2E+Jmd0Ozs8c3BhbiBjbGFzcz0iQXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJz cDs8L3NwYW4+PGEgaHJlZj0ibWFpbHRvOmJyZW50LmJpbGdlckB2ZXJpem9uLmNvbSIgY2xhc3M9 IiI+YnJlbnQuYmlsZ2VyQHZlcml6b24uY29tPC9hPjxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0 ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj4mbHQ7PGEgaHJlZj0ibWFpbHRvOmJyZW50LmJpbGdlckB2 ZXJpem9uLmNvbSIgY2xhc3M9IiI+YnJlbnQuYmlsZ2VyQHZlcml6b24uY29tPC9hPiZndDs7DQog SWFuIFN3ZXR0ICZsdDs8YSBocmVmPSJtYWlsdG86aWFuc3dldHQ9NDBnb29nbGUuY29tQGRtYXJj LmlldGYub3JnIiBjbGFzcz0iIj5pYW5zd2V0dD00MGdvb2dsZS5jb21AZG1hcmMuaWV0Zi5vcmc8 L2E+Jmd0OzxiciBjbGFzcz0iIj4NCjxiIGNsYXNzPSIiPlN1YmplY3Q6PC9iPjxzcGFuIGNsYXNz PSJBcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj5SZTogW0VdIERvUy1pbmcgUVVJ QyBzZXJ2ZXJzIGlzIHRvbyBlYXN5PHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+ Jm5ic3A7PC9zcGFuPjwvcD4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPiZuYnNwOzxi ciBjbGFzcz0id2Via2l0LWJsb2NrLXBsYWNlaG9sZGVyIj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rp dj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPiZuYnNwOzxiciBjbGFzcz0id2Via2l0 LWJsb2NrLXBsYWNlaG9sZGVyIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCjwvcD4NCjxibG9ja3F1b3Rl IHN0eWxlPSJtYXJnaW4tdG9wOiA1cHQ7IG1hcmdpbi1ib3R0b206IDVwdDsiIGNsYXNzPSIiPg0K PGRpdiBjbGFzcz0iIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPk9uIEp1bCAyMiwgMjAxOSwgYXQg OToxNiBQTSwgV2F0c29uIExhZGQgJmx0OzxhIGhyZWY9Im1haWx0bzp3YXRzb25ibGFkZEBnbWFp bC5jb20iIGNsYXNzPSIiPndhdHNvbmJsYWRkQGdtYWlsLmNvbTwvYT4mZ3Q7IHdyb3RlOjwvcD4N CjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4mbmJzcDs8YnIgY2xhc3M9IndlYmtpdC1ibG9jay1wbGFj ZWhvbGRlciI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOiAxMy41cHQ7IGZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IiBj bGFzcz0iIj5PbiBNb24sIEp1bCAyMiwgMjAxOSBhdCA1OjI5IFBNPGJyIGNsYXNzPSIiPg0KJmx0 Ozwvc3Bhbj48YSBocmVmPSJtYWlsdG86YnJlbnQuYmlsZ2VyPTQwdmVyaXpvbi5jb21AZG1hcmMu aWV0Zi5vcmciIGNsYXNzPSIiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDEzLjVwdDsgZm9udC1m YW1pbHk6IEhlbHZldGljYTsiIGNsYXNzPSIiPmJyZW50LmJpbGdlcj00MHZlcml6b24uY29tQGRt YXJjLmlldGYub3JnPC9zcGFuPjwvYT48c3BhbiBzdHlsZT0iZm9udC1zaXplOiAxMy41cHQ7IGZv bnQtZmFtaWx5OiBIZWx2ZXRpY2E7IiBjbGFzcz0iIj4mZ3Q7DQogd3JvdGU6PGJyIHN0eWxlPSJm b250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgd29yZC1zcGFjaW5n OiAwcHg7IiBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCjwvc3Bhbj48L3A+DQo8YmxvY2txdW90 ZSBzdHlsZT0ibWFyZ2luLXRvcDogNXB0OyBtYXJnaW4tYm90dG9tOiA1cHQ7IiBjbGFzcz0iIj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDEzLjVwdDsgZm9u dC1mYW1pbHk6IEhlbHZldGljYTsiIGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0i Ij4NCjxiciBjbGFzcz0iIj4NCk9uIEp1bCAyMiwgMjAxOSwgYXQgMTA6MTAgQU0sIFJvYmVydG8g UGVvbiAmbHQ7PGEgaHJlZj0ibWFpbHRvOmZlbml4QGZiLmNvbSIgY2xhc3M9IiI+ZmVuaXhAZmIu Y29tPC9hPiZndDsgd3JvdGU6PGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KV2hlbiB5b3Xi gJlyZSB0YWxraW5nIGFib3V0IHByZS1hdXRoZW50aWNhdGlvbiwgYXJlIHlvdSByZWZlcnJpbmcg dG8gdGhlIDAtcnR0IHN0dWZmPzxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCjxiciBjbGFz cz0iIj4NCjAtUlRUIGlzIGdvb2Qgc3R1ZmYuIEl0IHJlZHVjZXMgdGltZSBmb3IgYSBkZXZpY2Ug dGhhdOKAmXMgYWxyZWFkeSBrbm93biB0byBiZSBhdXRob3JpemVkIHRvIGNvbm5lY3QgdG8gdGhl IHNlcnZlci48YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQpQYXJ0IG9mIHRoZSBwcm9ibGVt IGlzIHRvIHN0b3AgcmVzb3VyY2UgRG9TLiBUaGUgb3RoZXIgcGFydCBpcyBhYm91dCBpbmZvcm1h dGlvbiBsZWFrYWdlLjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCkxldOKAmXMgYXNzdW1l IGEgdGltZSB3aGVuIGFsbCB3ZWJzaXRlIHVzZSBRVUlDIGFuZCBsZXQncyB0YWtlIGFuIGFkdmVy c2FyeSB3aG8gaGFzIGp1c3QgbGVhcm5lZCBhYm91dCBhIHZ1bG5lcmFiaWxpdHkgaW4gV29yZHBy ZXNzLiBUaGUgYWR2ZXJzYXJ5IHdhbnRzIHRvIHNjYW4gdGhlIEludGVybmV0IGZpbmRpbmcgV29y ZHByZXNzIHNpdGVzLiBOb3csIGlmIHRoZSBRVUlDIGNvbm5lY3Rpb24gcmVxdWlyZWQgcHJlLWF1 dGhlbnRpY2F0aW9uLCB0aGVuDQogdGhlIHNlcnZlciB3b3VsZCBiZSBibGFjayB0byB0aGUgY29u bmVjdGlvbiBhbmQgdGhlIGFkdmVyc2FyeSBjb3VsZCBub3QgZGV0ZXJtaW5lIGlmIHRoZSBzaXRl IHVzZXMgV29yZHByZXNzLiBCdXQsIGFzIGl0IHN0YW5kcyB0b2RheSwgaW4gdGhpcyBmdXR1cmUg dGltZSwgdGhlIGFkdmVyc2FyeSBzY2FucyB0aGUgSW50ZXJuZXQsIGNvbm5lY3RzIHRvIHRoZSBz ZXJ2ZXIsIGFuZCBpcyBoYW5kZWQgYSBXb3JkcHJlc3MgbG9naW4gc2NyZWVuLiBOb3cNCiB0aGUg YWR2ZXJzYXJ5IGtub3dzIHdoZXJlIHRvIGF0dGFjay48L3NwYW4+PC9wPg0KPC9ibG9ja3F1b3Rl Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTogMTMuNXB0OyBm b250LWZhbWlseTogSGVsdmV0aWNhOyIgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KSWYgY29ubmVj dGlvbiByZXF1aXJlcyBwcmVhdXRoZW50aWNhdGlvbiB0aGVuIG5vIG9uZSBjYW4gc2VlIHRoZSBz aXRlLCBubz88L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8YmxvY2txdW90ZSBz dHlsZT0ibWFyZ2luLXRvcDogNXB0OyBtYXJnaW4tYm90dG9tOiA1cHQ7IiBjbGFzcz0iIj4NCjxk aXYgY2xhc3M9IiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OiAxMy41cHQ7IGZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IiBjbGFzcz0iIj48YnIgc3R5bGU9ImZv bnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB3b3JkLXNwYWNpbmc6 IDBweDsiIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KPC9zcGFuPjwvcD4NCjxibG9ja3F1b3Rl IHN0eWxlPSJtYXJnaW4tdG9wOiA1cHQ7IG1hcmdpbi1ib3R0b206IDVwdDsiIGNsYXNzPSIiPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTogMTMuNXB0OyBmb250 LWZhbWlseTogSGVsdmV0aWNhOyIgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KSW4gdGhlIGVudGVy cHJpc2UgaXQgaXMgYSBsaXR0bGUgZGlmZmVyZW50LiBDb21wYW5pZXMgaW1wbGVtZW50IHJldmVy c2UgcHJveGllcyB0byB0cnkgdG8gcHJvdGVjdCBzZXJ2ZXJzIGZyb20gdW5hdXRob3JpemVkIHVz ZXJzLiBCdXQgd2hhdCBpZiB0aGUgc2VydmVycyByZXF1aXJlZCBhIHByZS1hdXRoZW50aWNhdGlv biB0b2tlbi4gVGhlbiwgcmV2ZXJzZSBwcm94aWVzIHdvdWxkIG5vdCBiZSBuZWVkZWQuPC9zcGFu PjwvcD4NCjwvYmxvY2txdW90ZT4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6IDEzLjVwdDsgZm9udC1mYW1pbHk6IEhlbHZldGljYTsiIGNsYXNzPSIiPjxiciBj bGFzcz0iIj4NClNvIEkgdGhpbmsgdGhlcmUgYXJlIHR3byBkaWZmZXJlbnQgdGhpbmdzIGhlcmUs IG9yIG1heWJlIEknbSBtaXN1bmRlcnN0YW5kaW5nOjxiciBjbGFzcz0iIj4NCjE6IFdlIGhhdmUg c2VydmVycyB0aGF0IGhhdmUgYSBsaW1pdGVkIG51bWJlciBvZiBjbGllbnRzIHRoYXQgd2lsbDxi ciBjbGFzcz0iIj4NCmV2ZXIgd2FudCB0byBjb25uZWN0IHRvIHRoZW0sIGFuZCB3YW50IHRvIGVu YWJsZSBvdGhlciBkZXZpY2VzIHRvPGJyIGNsYXNzPSIiPg0KZmlsdGVyIHRoZSB0cmFmZmljLCBz byBuZWVkIHNvbWUgbWVjaGFuaXNtIHRoYXQgZW5hYmxlcyBhIG1pZGRsZWJveCB0bzxiciBjbGFz cz0iIj4NCmZpbHRlci48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2IGNs YXNzPSIiPg0KPGRpdiBjbGFzcz0iIj4mbmJzcDs8YnIgY2xhc3M9IndlYmtpdC1ibG9jay1wbGFj ZWhvbGRlciI+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Tm8gbWlkZGxl IGJveCEgUHJlLWF1dGhlbnRpY2F0aW9uIG1ha2VzIHNlcnZlcnMgc2VsZi1kZWZlbmRpbmcuIExh Y2sgb2YgcHJlLWF1dGhlbnRpY2F0aW9uIGlzIHdoeSB3ZSBoYXZlIG1pZGRsZSBib3hlcy48L3A+ DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48YnIgY2xhc3M9 IiI+DQo8YnIgY2xhc3M9IiI+DQo8L3A+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDog NXB0OyBtYXJnaW4tYm90dG9tOiA1cHQ7IiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOiAxMy41cHQ7IGZvbnQtZmFt aWx5OiBIZWx2ZXRpY2E7IiBjbGFzcz0iIj4yOiBXZSBoYXZlIHNlcnZlcnMgZ2VuZXJhbGx5IGF2 YWlsYWJsZSB0byB0aGUgcHVibGljIGFuZCBhcmUgY29uY2VybmVkPGJyIGNsYXNzPSIiPg0KdGhh dCB0aGUgUVVJQyB2ZXJzaW9uIG9mIGEgU1lOIGZsb29kIGNhbid0IGJlIGRlYWx0IHdpdGggKGRl c3BpdGU8YnIgY2xhc3M9IiI+DQpldmlkZW5jZSB0byB0aGUgY29udHJhcnkpLjwvc3Bhbj48L3A+ DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPiZu YnNwOzxiciBjbGFzcz0id2Via2l0LWJsb2NrLXBsYWNlaG9sZGVyIj4NCjwvZGl2Pg0KPC9kaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5Db21wYW5pZXMgYW5kIHdlYnNpdGUgb3duZXJzIGhhdmUg dG8gcGF5IGZvciBhbnRpLURvUyBzZXJ2aWNlcyZuYnNwO2Zyb20gdGhlIGxpa2VzIG9mIFZlcml6 b24gYW5kIG90aGVycyBCRUNBVVNFIHNlcnZlcnMgbGlzdGVuIHRvIGFsbCBjbGllbnRzLiBXaXRo IHByZS1hdXRoZW50aWNhdGlvbiwgdGhlIG5lZWQgdG8gaGF2ZSBhbiBhbnRpLURvUyBzZXJ2aWNl IHdvdWxkIGJlIGdyZWF0bHkgcmVkdWNlZCBiZWNhdXNlIHNlcnZlcnMNCiB3b3VsZCBub3QgcmVz cG9uZCB0byB1bmF1dGhvcml6ZWQgY2xpZW50cy48L3A+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+ DQo8ZGl2IGNsYXNzPSIiPiZuYnNwOzxiciBjbGFzcz0id2Via2l0LWJsb2NrLXBsYWNlaG9sZGVy Ij4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ QW5kIHRoZSBwb2ludCBhYm91dCBpbmZvcm1hdGlvbiBsZWFrYWdlIGlzIGltcG9ydGFudCwgdG9v LjwvcD4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+Jm5ic3A7PGJyIGNs YXNzPSJ3ZWJraXQtYmxvY2stcGxhY2Vob2xkZXIiPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXYgY2xh c3M9IiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5CcmVudDwvcD4NCjwvZGl2Pg0KPGRpdiBjbGFz cz0iIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4N CjwvcD4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOiA1cHQ7IG1hcmdpbi1ib3R0b206 IDVwdDsiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6IDEzLjVwdDsgZm9udC1mYW1pbHk6IEhlbHZldGljYTsiIGNs YXNzPSIiPjxiciBjbGFzcz0iIj4NCkkgZG9uJ3Qga25vdyBtdWNoIGFib3V0IGhvdyBDbG91ZGZs YXJlIChteSBwbGFjZSBvZiBlbXBsb3ltZW50KSAmbmJzcDtkZWFsczxiciBjbGFzcz0iIj4NCndp dGggMiBidXQgaG9wZWZ1bGx5IHNvbWUgcGVvcGxlIHdobyBkby9pbXBsZW1lbnRvcnMgY2FuIHNw ZWFrIHVwPGJyIGNsYXNzPSIiPg0KYWJvdXQgaG93IG11Y2ggb2YgYSBwcm9ibGVtIGl0IGlzLiBC dXQgMSBpcyBJIHRoaW5rIHZlcnkgbXVjaCBhPGJyIGNsYXNzPSIiPg0Kbm9uZ29hbDogbWlkZGxl Ym94IG9zc2lmaWNhdGlvbiBpcyBwYXJ0IG9mIHRoZSByZWFzb24gd2UgaGF2ZSBRVUlDLjxiciBj bGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NClNpbmNlcmVseSw8YnIgY2xhc3M9IiI+DQpXYXRzb24g TGFkZDwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPGRpdiBjbGFz cz0iIj4mbmJzcDs8YnIgY2xhc3M9IndlYmtpdC1ibG9jay1wbGFjZWhvbGRlciI+DQo8L2Rpdj4N CjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgY2xh c3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tYm90dG9tOiAxMy41cHQ7IiBjbGFzcz0iIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOiAxMy41cHQ7IGZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IiBjbGFz cz0iIj4mbmJzcDs8L3NwYW4+PGJyIGNsYXNzPSJ3ZWJraXQtYmxvY2stcGxhY2Vob2xkZXIiPg0K PC9kaXY+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6IDEzLjVwdDsgZm9udC1mYW1pbHk6IEhlbHZldGljYTsiIGNsYXNzPSIiPiZu YnNwOzwvc3Bhbj48YnIgY2xhc3M9IndlYmtpdC1ibG9jay1wbGFjZWhvbGRlciI+DQo8L2Rpdj4N CjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6IDEzLjVwdDsgZm9udC1mYW1pbHk6IEhlbHZldGljYTsiIGNsYXNzPSIiPkJy ZW50IEJsaWdlcjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOiAxMy41cHQ7IGZvbnQtZmFtaWx5OiBI ZWx2ZXRpY2E7IiBjbGFzcz0iIj5EaXJlY3Rvci1UZWNobm9sb2d5Jm5ic3A7VmVyaXpvbiBTRFAm bmJzcDs8L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTogMTMuNXB0OyBmb250LWZhbWlseTogSGVsdmV0 aWNhOyIgY2xhc3M9IiI+PGEgaHJlZj0ibWFpbHRvOmJyZW50LmJpbGdlckB2ZXJpem9uLmNvbSIg Y2xhc3M9IiI+YnJlbnQuYmlsZ2VyQHZlcml6b24uY29tPC9hPjwvc3Bhbj48L3A+DQo8L2Rpdj4N CjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDE4 cHQ7IGZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IiBjbGFzcz0iIj4mbmJzcDs8L3NwYW4+PGJyIGNs YXNzPSJ3ZWJraXQtYmxvY2stcGxhY2Vob2xkZXIiPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXYgY2xh c3M9IiI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTogMTMuNXB0OyBmb250LWZhbWlseTogSGVsdmV0 aWNhOyIgY2xhc3M9IiI+Jm5ic3A7PC9zcGFuPjxiciBjbGFzcz0id2Via2l0LWJsb2NrLXBsYWNl aG9sZGVyIj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1ib3R0 b206IDEycHQ7IiBjbGFzcz0iIj4mbmJzcDs8YnIgY2xhc3M9IndlYmtpdC1ibG9jay1wbGFjZWhv bGRlciI+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4mbmJzcDs8YnIgY2xhc3M9Indl YmtpdC1ibG9jay1wbGFjZWhvbGRlciI+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4N CjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4mbmJzcDs8YnIgY2xhc3M9Indl YmtpdC1ibG9jay1wbGFjZWhvbGRlciI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGNs YXNzPSIiPg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJn aW4tYm90dG9tOiAxMy41cHQ7IiBjbGFzcz0iIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOiAxMy41 cHQ7IGZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IiBjbGFzcz0iIj4mbmJzcDs8L3NwYW4+PGJyIGNs YXNzPSJ3ZWJraXQtYmxvY2stcGxhY2Vob2xkZXIiPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXYgY2xh c3M9IiI+DQo8ZGl2IGNsYXNzPSIiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDEzLjVwdDsgZm9u dC1mYW1pbHk6IEhlbHZldGljYTsiIGNsYXNzPSIiPiZuYnNwOzwvc3Bhbj48YnIgY2xhc3M9Indl YmtpdC1ibG9jay1wbGFjZWhvbGRlciI+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDEzLjVwdDsgZm9u dC1mYW1pbHk6IEhlbHZldGljYTsiIGNsYXNzPSIiPkJyZW50IEJsaWdlcjwvc3Bhbj48L3A+DQo8 L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOiAxMy41cHQ7IGZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IiBjbGFzcz0iIj5EaXJl Y3Rvci1UZWNobm9sb2d5Jm5ic3A7VmVyaXpvbiBTRFAmbmJzcDs8L3NwYW4+PC9wPg0KPC9kaXY+ DQo8ZGl2IGNsYXNzPSIiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZTogMTMuNXB0OyBmb250LWZhbWlseTogSGVsdmV0aWNhOyIgY2xhc3M9IiI+PGEgaHJlZj0i bWFpbHRvOmJyZW50LmJpbGdlckB2ZXJpem9uLmNvbSIgY2xhc3M9IiI+YnJlbnQuYmlsZ2VyQHZl cml6b24uY29tPC9hPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4N CjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9zcGFuPjwvYmxvY2txdW90ZT4NCjwv ZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8YnIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIi Pg0KPGRpdiBkaXI9ImF1dG8iIHN0eWxlPSJjYXJldC1jb2xvcjogcmdiKDAsIDAsIDApOyBjb2xv cjogcmdiKDAsIDAsIDApOyBmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDE4cHg7 IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWln aHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRl eHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFs OyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyB0ZXh0 LWRlY29yYXRpb246IG5vbmU7IHdvcmQtd3JhcDogYnJlYWstd29yZDsgLXdlYmtpdC1uYnNwLW1v ZGU6IHNwYWNlOyBsaW5lLWJyZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsiIGNsYXNzPSIiPg0KPGRp diBkaXI9ImF1dG8iIHN0eWxlPSJ3b3JkLXdyYXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1t b2RlOiBzcGFjZTsgbGluZS1icmVhazogYWZ0ZXItd2hpdGUtc3BhY2U7IiBjbGFzcz0iIj4NCjxk aXYgc3R5bGU9ImNhcmV0LWNvbG9yOiByZ2IoMCwgMCwgMCk7IGNvbG9yOiByZ2IoMCwgMCwgMCk7 IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQt YWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hp dGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Ut d2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyI+DQo8YnIgY2xhc3M9IkFwcGxlLWlu dGVyY2hhbmdlLW5ld2xpbmUiPg0KPGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IHN0eWxlPSJj YXJldC1jb2xvcjogcmdiKDAsIDAsIDApOyBjb2xvcjogcmdiKDAsIDAsIDApOyBmb250LXZhcmlh bnQtY2Fwczogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFy dDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBu b3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7 IHRleHQtZGVjb3JhdGlvbjogbm9uZTsiPg0KPGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IHN0 eWxlPSJjYXJldC1jb2xvcjogcmdiKDAsIDAsIDApOyBjb2xvcjogcmdiKDAsIDAsIDApOyBmb250 LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWdu OiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNw YWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRo OiAwcHg7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsiPg0KQnJlbnQgQmxpZ2VyPC9kaXY+DQo8ZGl2 IHN0eWxlPSJjYXJldC1jb2xvcjogcmdiKDAsIDAsIDApOyBjb2xvcjogcmdiKDAsIDAsIDApOyBm b250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFs aWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRl LXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdp ZHRoOiAwcHg7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsiPg0KRGlyZWN0b3ItVGVjaG5vbG9neSZu YnNwO1Zlcml6b24gU0RQJm5ic3A7PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IHN0eWxlPSJj YXJldC1jb2xvcjogcmdiKDAsIDAsIDApOyBjb2xvcjogcmdiKDAsIDAsIDApOyBmb250LXZhcmlh bnQtY2Fwczogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFy dDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBu b3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7 IHRleHQtZGVjb3JhdGlvbjogbm9uZTsiPg0KPGEgaHJlZj0ibWFpbHRvOmJyZW50LmJpbGdlckB2 ZXJpem9uLmNvbSIgY2xhc3M9IiI+YnJlbnQuYmlsZ2VyQHZlcml6b24uY29tPC9hPjwvZGl2Pg0K PGRpdiBzdHlsZT0iY2FyZXQtY29sb3I6IHJnYigwLCAwLCAwKTsgY29sb3I6IHJnYigwLCAwLCAw KTsgZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAyNHB4OyBmb250LXN0eWxlOiBu b3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxl dHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4 OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5n OiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBu b25lOyIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxiciBjbGFzcz0iQXBwbGUt aW50ZXJjaGFuZ2UtbmV3bGluZSI+DQo8L2Rpdj4NCjwvZGl2Pg0KPGJyIGNsYXNzPSJBcHBsZS1p bnRlcmNoYW5nZS1uZXdsaW5lIiBzdHlsZT0iY2FyZXQtY29sb3I6IHJnYigwLCAwLCAwKTsgY29s b3I6IHJnYigwLCAwLCAwKTsgZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxOHB4 OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2Vp Z2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0 ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1h bDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgdGV4 dC1kZWNvcmF0aW9uOiBub25lOyI+DQo8YnIgY2xhc3M9IkFwcGxlLWludGVyY2hhbmdlLW5ld2xp bmUiPg0KPC9kaXY+DQo8YnIgY2xhc3M9IiI+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_16026C5D847B4281ADE1A65D394124FFoneverizoncom_-- From nobody Tue Jul 23 08:31:00 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3F9BF1203E5 for ; Tue, 23 Jul 2019 08:30:58 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.996 X-Spam-Level: X-Spam-Status: No, score=-1.996 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lDN8yQZYBy3F for ; Tue, 23 Jul 2019 08:30:53 -0700 (PDT) Received: from mail-ed1-x52f.google.com (mail-ed1-x52f.google.com [IPv6:2a00:1450:4864:20::52f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 084C71203E3 for ; Tue, 23 Jul 2019 08:30:53 -0700 (PDT) Received: by mail-ed1-x52f.google.com with SMTP id w13so44385480eds.4 for ; Tue, 23 Jul 2019 08:30:52 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:in-reply-to:references:mime-version:date:message-id:subject:to :cc; bh=0H4ITagVMp+pzNwvCKH+5UY0V4uaR0EWRhM/33JEChc=; b=bppQgQKISb+qjk1PwLY8pcxLkrRTZmHWlf3o7mwOv4QYHCI59UXLpKCySrLCcXvnx3 WVgvMFPUf1ATDZRMDW5XuEYfjapUCrEKCsmDleBIYmSuVevHaB0XRl6N6OYluhmLz6sI jBDV4W3SJDt6yEoQVZtqEzTtOXuWI1r+pPs7Flz3JyCn5P1EIGFvyOHN0YgR2+MC79/K N73w0ANXIHd5U1bM/SRK5g7nvbt5CNxp854M2y+oG3XkcKdygJ2g6tosCuWQMXNYE199 rXjIsUTHV7W+wp6aXNUfQQddeB5SC9/1I7z81MvlKGYuxhyZQVhLB6kAgS7sGRELThdE Fg0w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:in-reply-to:references:mime-version:date :message-id:subject:to:cc; bh=0H4ITagVMp+pzNwvCKH+5UY0V4uaR0EWRhM/33JEChc=; b=OMZHN9QpN5NgRVEK2AIq0Mm8bMeHvbT9YdEV+peo8ZGaYjfNYk+V2e1AYNig40XRR7 1DJuAUvGE+LFfvw4HzCJXTig39hxQ9bkcrm0IaK9Rqk2kNG3XGYb8jGyQrnPzJaHo6kF s79UmohWbP8Zz9XwVzod30/0o0TXHtgO+4/CUn/vf12US4D1KwTQ/SlMqT3FhalqgXKH eXdHjnajLT2kXK5P7/f/HilCvRLGMfHT3XAvSTfokCXIJekPti0j3EYhrMw/RYqy5l7b knJfRbzM4w13LJ3gn7xZavpQNmzP/N12DRextv8IlJZEYGzOSg5+qnKHsdbe9QUNtggY 0HgA== X-Gm-Message-State: APjAAAUcD947U7jFf6ya7Zz6ryZXFDOAwoqFIeAnGsAjVjXvHxQlPFdz SjrPi5x9VP9ua0JMBlnE+RQ39dQwhBrpMoS/eAc= X-Google-Smtp-Source: APXvYqzljKrAsM4iBhlJZwVXoAsHey0GisFE9vIjXxYWE4BAUmdrdBObo2TdAhc2U7lpuXbcMFvEK+g1Znzm0fLWkNQ= X-Received: by 2002:a50:a56b:: with SMTP id z40mr65110767edb.99.1563895851486; Tue, 23 Jul 2019 08:30:51 -0700 (PDT) Received: from 1058052472880 named unknown by gmailapi.google.com with HTTPREST; Tue, 23 Jul 2019 08:30:51 -0700 From: =?UTF-8?Q?Mikkel_Fahn=C3=B8e_J=C3=B8rgensen?= In-Reply-To: <16026C5D-847B-4281-ADE1-A65D394124FF@one.verizon.com> References: <21E3AE84-02C5-4943-A88E-B62329E21002@one.verizon.com> <507D5DB7-EDF2-4429-A518-604A377F92D9@one.verizon.com> <9BF2DC9D-F14C-4451-9191-1A1557556691@fb.com> <9DC40032-3852-4237-A621-5C6B1102E74F@one.verizon.com> <16026C5D-847B-4281-ADE1-A65D394124FF@one.verizon.com> X-Mailer: Airmail (420) MIME-Version: 1.0 Date: Tue, 23 Jul 2019 08:30:50 -0700 Message-ID: Subject: Re: [E] DoS-ing QUIC servers is too easy To: brent.bilger@verizon.com Cc: Ian Swett , Watson Ladd , "quic@ietf.org" , Roberto Peon , "brent.bilger=40verizon.com@dmarc.ietf.org" Content-Type: multipart/alternative; boundary="000000000000b1928d058e5ae041" Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 23 Jul 2019 15:30:58 -0000 --000000000000b1928d058e5ae041 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable I believe that we largely agree, but a counter is not very good from a distributed perspective. I=E2=80=99d consider it a non-starter. I do have a proposal for QUIC v2 about preventing replay attacks on 0-RTT that involves something similar - but 0-RTT is sort of guaranteed to land on the same server based on routing on said token. An initial packet is guaranteed to not land on the same server because otherwise an attacker could target that single server. Placing the counter in the load balancer infrastructure also isn=E2=80=99t = good because it requires coordination which is a vary scarce resource in high volume areas. But a counter isn=E2=80=99t necessary as you can just share some comparativ= ely weak keys and hash a timestamp. It will be good enough, and otherwise you can use stronger 0-RTT tokens for return visits. The keys can be rotated periodically and shared to an extend, and so forth. On 23 July 2019 at 17.19.06, brent.bilger@verizon.com ( brent.bilger@verizon.com) wrote: As noted on a different posting, Single Packet Authorization is based on RFC 4226 which has both a counter and a time based approach. Personally, I prefer a counter. But again, this is all irrelevant because I=E2=80=99m not suggesting any on= e pre-authentication. I=E2=80=99m just using an example to show how it can st= op multiple types of attacks. --000000000000b1928d058e5ae041 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable = I believe that we la= rgely agree, but a counter is not very good from a distributed perspective.= I=E2=80=99d consider it a non-starter.

I do have a proposal for QUIC v2 about preventing replay= attacks on 0-RTT that involves something similar - but 0-RTT is sort of gu= aranteed to land on the same server based on routing on said token.

An initial packet is guarant= eed to not land on the same server because otherwise an attacker could targ= et that single server.


Bu= t a counter isn=E2=80=99t necessary as you can just share some comparativel= y weak keys and hash a timestamp. It will be good enough, and otherwise you= can use stronger 0-RTT tokens for return visits. The keys can be rotated p= eriodically and shared to an extend, and so forth.

On 23 July 2019 at 17.19.06, brent.bilger@verizon.com (brent.bilger@verizon.com) wrote:

As noted on a different posting, Single Packet Authoriza= tion is based on RFC 4226 which has both a counter and a time based approac= h. Personally, I prefer a counter.

But again, this is all irrelevant = because I=E2=80=99m not suggesting any one pre-authentication. I=E2=80=99m = just using an example to show how it can stop multiple types of attacks.
--000000000000b1928d058e5ae041-- From nobody Tue Jul 23 08:36:37 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1A2F81202BF for ; Tue, 23 Jul 2019 08:36:26 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.698 X-Spam-Level: X-Spam-Status: No, score=-2.698 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=fb.com header.b=lkCNohwy; dkim=pass (1024-bit key) header.d=fb.onmicrosoft.com header.b=UnwTwFfP Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7pXEwldjFx9L for ; Tue, 23 Jul 2019 08:36:22 -0700 (PDT) Received: from mx0a-00082601.pphosted.com (mx0a-00082601.pphosted.com [67.231.145.42]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 27B531203AA for ; Tue, 23 Jul 2019 08:36:22 -0700 (PDT) Received: from pps.filterd (m0109334.ppops.net [127.0.0.1]) by mx0a-00082601.pphosted.com (8.16.0.27/8.16.0.27) with SMTP id x6NFXX3d022897; Tue, 23 Jul 2019 08:36:20 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fb.com; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : mime-version; s=facebook; bh=Rk61HY6jaaypu1o5KFIODxzpwZUcbMqNuTIH6bM1mdI=; b=lkCNohwyL/04aSkp1FSOtL8YLj91KK6QTvf23a1hEzcpqNegSyngaNTulHG6cfLafTdn KfZODZhuIMvK7MWLQWBaD52LicQUEvPKhWdcQT1QcZpd71Yl3AbPZ227tbRI64Omaxme 9xm/w7gEdr4mC+y6mXU8QTfMloHxhSX6CZg= Received: from maileast.thefacebook.com ([163.114.130.16]) by mx0a-00082601.pphosted.com with ESMTP id 2tx37trf2v-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NOT); Tue, 23 Jul 2019 08:36:20 -0700 Received: from ash-exhub104.TheFacebook.com (2620:10d:c0a8:82::d) by ash-exhub202.TheFacebook.com (2620:10d:c0a8:83::6) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.1713.5; Tue, 23 Jul 2019 08:36:18 -0700 Received: from NAM01-BN3-obe.outbound.protection.outlook.com (100.104.31.183) by o365-in.thefacebook.com (100.104.35.175) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256) id 15.1.1713.5 via Frontend Transport; Tue, 23 Jul 2019 08:36:18 -0700 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=iw029hPKAXqhNDjvPkttqff7hF4svTgYTUT9VWGy9uAiE0N6Qc/b70jvkibP9fkmCc1rAMRKDUAL5zg8kZEFQwaRx4UReC8OFSkCPNLCOryd9Tl+kyuaFAW384+j2wfjxEHTuZLY1aZoIby3FjTGzOZg+EFTJpgYmJKdqhQUJbK8iG2yW5IFyJ1Oatz3QQyUPI8DFTndc4YEtHDx6YX9jxp3sQiZ+zAI0dQB4VPwxv7C9NJKQIr0xQ/cxvuY7kMxTRzRUQxciBHz5lf7RRtZR4E09aKxlbrNGNMmzNGrnFIgBtHSLhcdgRwLfHf36acJkTx1tzHaQhoD93PVZFHgVg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Rk61HY6jaaypu1o5KFIODxzpwZUcbMqNuTIH6bM1mdI=; b=ZqR45rugDRyUDVwTNljp9dtlvQMtY0lHRJGtg/MMtd68Wd2CCGOXzN+eYW6KpsfKJD0n5PNfEv/pL1jLJWVuvvenLfOS+ANfEcHU6my0Hmp/sL94Yv8Qp3Fsz7Qzgcq0dl3Yrz1W++prRWA/LJOjs5puzdziarVmCeIBr1oyrvcr5Fc/+ihEUBNxDXIQ6MkWd4sJRMeLvFddK7zHTWO4y2kinzq5dgaEC2zqbpS5hmPOfQ700jAO9DxyT1wz8ePAivwoPQ9h4T5C+1b7w7Rp5F7Lg7w5heuenQW3+OloWHA1NBUXAdOQddoEWWc5htkhlXO4ohVjn90hV8ueIytt/Q== ARC-Authentication-Results: i=1; mx.microsoft.com 1;spf=pass smtp.mailfrom=fb.com;dmarc=pass action=none header.from=fb.com;dkim=pass header.d=fb.com;arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fb.onmicrosoft.com; s=selector1-fb-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Rk61HY6jaaypu1o5KFIODxzpwZUcbMqNuTIH6bM1mdI=; b=UnwTwFfPcHyfiCTYOnCxiOcljx3zt58saBx/m5nD2JThQHzb0LgMQ++UGvE404OiQ0+LDtsxeQ4GFI+UVxQO/R64BIne4cf14km5bh9Ye+zjQR3cy3vrbMpQHi3KHTMUy+w5Za1qJMqUna2BERnk642lM/5vl+V5neUOSjB/55s= Received: from CY4PR15MB1542.namprd15.prod.outlook.com (10.172.160.9) by CY4PR15MB1367.namprd15.prod.outlook.com (10.172.159.23) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2094.17; Tue, 23 Jul 2019 15:36:17 +0000 Received: from CY4PR15MB1542.namprd15.prod.outlook.com ([fe80::35ce:8d12:c463:7cfc]) by CY4PR15MB1542.namprd15.prod.outlook.com ([fe80::35ce:8d12:c463:7cfc%12]) with mapi id 15.20.2094.013; Tue, 23 Jul 2019 15:36:17 +0000 From: Roberto Peon To: "brent.bilger@verizon.com" , =?utf-8?B?TWlra2VsIEZhaG7DuGUgSsO4cmdlbnNlbg==?= CC: Watson Ladd , "quic@ietf.org" , "brent.bilger=40verizon.com@dmarc.ietf.org" , Ian Swett Subject: Re: [E] DoS-ing QUIC servers is too easy Thread-Topic: [E] DoS-ing QUIC servers is too easy Thread-Index: AQHVQO2o7IJCZ4s53kuA0LJW4b7AGKbXmNEAgACHhoCAABFu5IAACeCA///IT4CAAEcCAIAABxqA///BwQA= Date: Tue, 23 Jul 2019 15:36:17 +0000 Message-ID: <2B1A8CB8-B012-465C-B1CE-6DECE9BDEC72@fb.com> References: <21E3AE84-02C5-4943-A88E-B62329E21002@one.verizon.com> <507D5DB7-EDF2-4429-A518-604A377F92D9@one.verizon.com> <9BF2DC9D-F14C-4451-9191-1A1557556691@fb.com> <9DC40032-3852-4237-A621-5C6B1102E74F@one.verizon.com> <16026C5D-847B-4281-ADE1-A65D394124FF@one.verizon.com> In-Reply-To: <16026C5D-847B-4281-ADE1-A65D394124FF@one.verizon.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.1a.0.190609 x-originating-ip: [2001:67c:370:128:4e4:7d58:cf96:a6b8] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 922fe0d4-7353-454b-02a2-08d70f838103 x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600148)(711020)(4605104)(1401327)(2017052603328)(7193020); SRVR:CY4PR15MB1367; x-ms-traffictypediagnostic: CY4PR15MB1367: x-ms-exchange-purlcount: 3 x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:4714; x-forefront-prvs: 0107098B6C x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(376002)(346002)(396003)(366004)(39860400002)(136003)(189003)(199004)(81156014)(81166006)(71190400001)(53546011)(6246003)(2906002)(316002)(790700001)(6506007)(6116002)(71200400001)(66476007)(6436002)(54896002)(66946007)(76116006)(91956017)(64756008)(7736002)(6512007)(4326008)(76176011)(66556008)(2501003)(66446008)(256004)(6306002)(6486002)(236005)(30864003)(102836004)(14444005)(8936002)(54906003)(86362001)(229853002)(8676002)(58126008)(110136005)(186003)(14454004)(68736007)(11346002)(606006)(25786009)(478600001)(476003)(45080400002)(46003)(99286004)(486006)(53936002)(66574012)(53946003)(33656002)(446003)(5660300002)(2616005)(36756003); DIR:OUT; SFP:1102; SCL:1; SRVR:CY4PR15MB1367; H:CY4PR15MB1542.namprd15.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: fb.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam-message-info: 2hHoj4I6t1eWVH0JVHlflM7bVgvtJqt9kEG1Yx1zQtjOjMhdNvrhmwzeCj1AaLs+8vP6lsbmWKQ8TU2BW/KCAxxOgrj+NgUNVtiQgtaEPRF6/hzoJXyqiIfAXGmqLByoO57hKAlP4wzwvwPtA48K5uMTUaCKPX0gqXkGfbCNh9SzxcFZGk0nLHIotMrrDYb65k1mZT6j5cIy18dvsdOYronlrq2q8WlJ1xvlNJiYryPVMvww4d6IBpzuphSc9NpMMP+cIXT9OpoTqsWILEo+wbfiXwpelqobxSY6b0dl7ksWA0jLT5bpNXSA4cAzhWpYJ4d8mBnUzzx4AwI8PXkSwph3qWmvQIJCs463eqhPM96LuSruGoHttvcrFfw8JxadMnac0jm4Qql1tGvVrop2gGAYU7FllAQ/LloTm/t6HHs= Content-Type: multipart/alternative; boundary="_000_2B1A8CB8B012465CB1CE6DECE9BDEC72fbcom_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: 922fe0d4-7353-454b-02a2-08d70f838103 X-MS-Exchange-CrossTenant-originalarrivaltime: 23 Jul 2019 15:36:17.4465 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 8ae927fe-1255-47a7-a2af-5f3a069daaa2 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: fenix@fb.com X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY4PR15MB1367 X-OriginatorOrg: fb.com X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2019-07-23_07:, , signatures=0 X-Proofpoint-Spam-Details: rule=fb_default_notspam policy=fb_default score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1015 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1810050000 definitions=main-1907230155 X-FB-Internal: deliver Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 23 Jul 2019 15:36:34 -0000 --_000_2B1A8CB8B012465CB1CE6DECE9BDEC72fbcom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SWYgeW914oCZcmUgaW4gYSDigJxzbWFsbOKAnSBkZXBsb3ltZW50IHRoYXQgaXMgZXhwb3NlZCB0 byB0aGUgaW50ZXJuZXQsIHRoZW4geW914oCZcmUgZ29pbmcgdG8gYmUgZGVhZCByZWdhcmRsZXNz IG9mIHRoZSB0b2tlbnMgYmVjYXVzZSB0aGUgbGlua3Mgd2lsbCBiZSBmdWxsIG9mIHVzZWxlc3Mg cGFja2V0cyBpZiBzb21lb25lIGRlY2lkZXMgdG8gZG8gYW4gYXR0YWNrIGF0IGFueSByZWFzb25h YmxlIHNjYWxlLg0KDQpJZiB5b3XigJlyZSBpbiBhIOKAnGxhcmdl4oCdIGRlcGxveW1lbnQgdGhh dCBpcyBleHBvc2VkIHRvIHRoZSBpbnRlcm5ldCwgdGhlbiBhIGNvdW50ZXItYmFzZWQgaW1wbGVt ZW50YXRpb24gdGhhdCByZXF1aXJlcyBhbnkgc3RhdGUgYXQgc2VydmVycyAodG8gdmVyaWZ5IHRo ZSBjb3VudGVyKSBpcyBsaWtlbHkgdG8gYmUgdmVyeSBleHBlbnNpdmUgYXMgaXQgZWl0aGVyIHJl cXVpcmVzIGFuIFJQQyBmb3IgZWFjaCBpbmNvbWluZyBwYWNrZXQtdG8tYmUtYXV0aGVudGljYXRl ZCwgb3IgaXQgcmVxdWlyZXMgdGhhdCB0aGUgcGFja2V0IGJlIHJvdXRlZCB0byBhIHNwZWNpZmlj IHNlcnZlciwgd2hpY2ggbWFrZXMgdGhlIGluZGl2aWR1YWwgc2VydmVycyBEb1NhYmxlLg0KDQpJ ZiB5b3UgaGF2ZSBhIOKAnGxhcmdl4oCdIGRlcGxveW1lbnQgYW5kIHVzZSBhIHRpbWUtYmFzZWQg aW1wbGVtZW50YXRpb24sIHRoZW4geW91IGhhdmUgdGhlIGdvbGRpbG9ja3MtbGlrZSBwcm9ibGVt IG9mIGNob29zaW5nIHRoZSBjb3JyZWN0IFRUTCwgYW5kIHRoYXQgaXMgZ29pbmcgdG8gYmUgZGlm ZmljdWx0IGFzIHRoZSBEb1MgZWZmZWN0aXZlbmVzcyBiZWNvbWVzIGRpcmVjdGx5IChpbnZlcnNl bHkpIHJlbGF0ZWQgdG8gdGhlIFRUTCBsZW5ndGggYXMgVFRMIGxlbmd0aCBkZXRlcm1pbmVzIHRo ZSBhbW91bnQgb2YgdGhlIHBvcHVsYXRpb24gdGhhdCBpcyBubyBsb25nZXIgYXV0aGVudGljYXRl ZC4gQSBzaG9ydCBUVEwgbWVhbnMgdmVyeSBsaXR0bGUgYmVuZWZpdCBjYW4gYmUgYXNjcmliZWQg YnkgaGF2aW5nIHRoZSB0b2tlbiBiZWNhdXNlIGZldyBjbGllbnRzIHdpbGwgcmVtYWluIGF1dGhl bnRpY2F0ZWQuDQoNClRoZSBjb21iaW5hdGlvbiBvZiB0aW1lIGFuZCBjb3VudGVyIGRvZXNu4oCZ dCBuZWdhdGUgYW55IG9mIHRoZSBkaXNhZHZhbnRhZ2VzIG9mIGVpdGhlci4NCg0KSSBkb27igJl0 IHVsdGltYXRlbHkgc2VlIGEgd2F5IG91dCBvZiBoYXZpbmcgdG8gaGV1cmlzdGljYWxseSBleGFt aW5lIDUtdHVwbGVzLg0KLT1SDQoNCg0KRnJvbTogImJyZW50LmJpbGdlckB2ZXJpem9uLmNvbSIg PGJyZW50LmJpbGdlckB2ZXJpem9uLmNvbT4NCkRhdGU6IFR1ZXNkYXksIEp1bHkgMjMsIDIwMTkg YXQgMTE6MTkgQU0NClRvOiBNaWtrZWwgRmFobsO4ZSBKw7hyZ2Vuc2VuIDxtaWtrZWxmakBnbWFp bC5jb20+DQpDYzogUm9iZXJ0byBQZW9uIDxmZW5peEBmYi5jb20+LCAiYnJlbnQuYmlsZ2VyQHZl cml6b24uY29tIiA8YnJlbnQuYmlsZ2VyQHZlcml6b24uY29tPiwgV2F0c29uIExhZGQgPHdhdHNv bmJsYWRkQGdtYWlsLmNvbT4sICJxdWljQGlldGYub3JnIiA8cXVpY0BpZXRmLm9yZz4sICJicmVu dC5iaWxnZXI9NDB2ZXJpem9uLmNvbUBkbWFyYy5pZXRmLm9yZyIgPGJyZW50LmJpbGdlcj00MHZl cml6b24uY29tQGRtYXJjLmlldGYub3JnPiwgSWFuIFN3ZXR0IDxpYW5zd2V0dD00MGdvb2dsZS5j b21AZG1hcmMuaWV0Zi5vcmc+DQpTdWJqZWN0OiBSZTogW0VdIERvUy1pbmcgUVVJQyBzZXJ2ZXJz IGlzIHRvbyBlYXN5DQoNCg0KDQoNCk9uIEp1bCAyMywgMjAxOSwgYXQgNzo1MyBBTSwgTWlra2Vs IEZhaG7DuGUgSsO4cmdlbnNlbiA8bWlra2VsZmpAZ21haWwuY29tPG1haWx0bzptaWtrZWxmakBn bWFpbC5jb20+PiB3cm90ZToNCg0KSXQgaXMgbm90IHRoYXQgZWFzeSB0byBzdGVhbCBhIHRva2Vu IGFuZCByZXBsYXksIGJ1dCBpdCBjYW4gaGFwcGVuLg0KDQpZZXMsIGl0IHJlcXVpcmVzIGNvbXBy b21pc2luZyBhIGNsaWVudCBhbmQgc3RlYWxpbmcgdGhlIGtleSBvciBqdXN0IHVzaW5nIHRoZSBr ZXkgZnJvbSBhIGJhY2sgZG9vci4gSW4gcHJhY3RpY2UgdGhlIGxhdHRlciBtYXkgYmUgYWR2YW50 YWdlb3VzIHRvIHRoZSBhZHZlcnNhcnkgYmVjYXVzZSB0aGUgc291cmNlIG9mIHRoZSBhdHRhY2sg d2lsbCBiZSBmcm9tIGEgbm9ybWFsIGxvY2F0aW9uIGFuZCBiZWNhdXNlIGZ1dHVyZSBkZXZpY2Ug YXV0aG9yaXphdGlvbnMgbWF5IGluY2x1ZGUgYSBmaW5nZXJwcmludCBvZiB0aGUgZGV2aWNlIC0g YSBmaW5nZXJwcmludCB0aGF0IHdvdWxkIGZhaWwgb24gdGhlIHN0b2xlbiBrZXkuIEJ1dCBsb29r IGF0IHdoYXQgd2XigJl2ZSBkb25lIHRvIHRoZSB1bmF1dGhvcml6ZWQgYWR2ZXJzYXJ5IHdpdGgg dGhlIHByZS1hdXRoZW50aWNhdGlvbiB0b2tlbiAtIGRlZmVhdGVkIHJlc291cmNlIERvUywgaW5m b3JtYXRpb24gbGVha2FnZSwgYWxsIHZ1bG5lcmFiaWxpdGllcyBvZiB0aGUgc2VydmVyLCBhbGwg Y29uZmlndXJhdGlvbiBlcnJvcnMgb2YgdGhlIGFwcGxpY2F0aW9ucyBvZiB0aGUgc2VydmVyLiBB bmQgaXQgYXVnbWVudHMgVExTIHRvIGRlZmVhdCBtYW4taW4tdGhlLW1pZGRsZSBhdHRhY2tzLg0K DQoNCg0KSWYgeW91IGFkZCBhIHRpbWUgZmFjdG9yIHN1Y2ggYW4gYXR0YWNrIHdpbGwgaGF2ZSBs aW1pdGVkIHZhbHVlLiBJbiBmYWN0IGEgdG9rZW4gbmVlZCBub3QgYmUgdmFsaWQgZm9yIG1vcmUg dGhhbiBhYm91dCAxMCBtaW51dGVzIHRvIGFjY291bnQgZm9yIHNrZXdlZCBjbG9ja3MuDQoNCkFz IG5vdGVkIG9uIGEgZGlmZmVyZW50IHBvc3RpbmcsIFNpbmdsZSBQYWNrZXQgQXV0aG9yaXphdGlv biBpcyBiYXNlZCBvbiBSRkMgNDIyNiB3aGljaCBoYXMgYm90aCBhIGNvdW50ZXIgYW5kIGEgdGlt ZSBiYXNlZCBhcHByb2FjaC4gUGVyc29uYWxseSwgSSBwcmVmZXIgYSBjb3VudGVyLg0KDQpCdXQg YWdhaW4sIHRoaXMgaXMgYWxsIGlycmVsZXZhbnQgYmVjYXVzZSBJ4oCZbSBub3Qgc3VnZ2VzdGlu ZyBhbnkgb25lIHByZS1hdXRoZW50aWNhdGlvbi4gSeKAmW0ganVzdCB1c2luZyBhbiBleGFtcGxl IHRvIHNob3cgaG93IGl0IGNhbiBzdG9wIG11bHRpcGxlIHR5cGVzIG9mIGF0dGFja3MuDQoNCkJy ZW50DQoNCg0KDQoNCg0KT24gMjMgSnVseSAyMDE5IGF0IDE2LjQxLjA5LCBSb2JlcnRvIFBlb24g KGZlbml4QGZiLmNvbTxtYWlsdG86ZmVuaXhAZmIuY29tPikgd3JvdGU6DQpJ4oCZZCBhc3N1bWUg IzEgaXMgbGVzcyBsaWtlbHkgdG8gZXhwZXJpZW5jZSBjcmlwcGxpbmcgU1lOLWJhc2VkIERvUyBh dHRhY2tzLCBhbmQgY291bGQgb3RoZXJ3aXNlIGJlIGFjY29tcGxpc2hlZCBieSBsaW1pdGluZyBh Y2Nlc3MgaW4gSVAtc3BhY2UgKGltcGVyZmVjdCwgYnV0IHdl4oCZcmUgbG9va2luZyBmb3Ig4oCc Z29vZC1lbm91Z2jigJ0sIGhlcmUpLg0KDQouLiB3aGljaCBtZWFucyB0aGF0IEkgdGhpbmsgd2Ug c2hvdWxkIGNvbnNpZGVyIDIrMyBvbmx5LCByZWFsbHkuDQoNCkZvciAjMiBhbmQgIzMsIHdoaWNo IEkgc3VzcGVjdCBoYXZlIHNpZ25pZmljYW50IG92ZXJsYXBzIChzaXRlcyBtYXkgcHJvdmlkZSBz ZXJ2aWNlcyBib3RoIHRvIGxvZ2dlZC1pbiB1c2VycyBhbmQgdXNlcnMgd2hvIGFyZW7igJl0IGxv Z2dlZCBpbiksIHRoZSBwcmUtYXV0aG9yaXphdGlvbiBlaXRoZXI6DQogIGEpIGNhbiBiZSBEb1Pi gJlkIGl0c2VsZi4NCiAgYikgY2FuIGJlIHVzZWQgdG8gZG8gYSBEb1MgaW4gdGhlIGZ1dHVyZS4N CkluIGNhc2UgYiwgYXMgYW4gYXR0YWNrZXIsIHlvdeKAmWQgZ2V0IG9yIHdhaXQgZm9yIHRoZSBj bGllbnQgdG8gYXV0aGVudGljYXRlLCB0aGVuIHVzZSB0aGF0IGF1dGhlbnRpY2F0aW9uIGluIGEg cmVwbGF5IGF0dGFjaywgZS5nLiBieSByZXBsaWNhdGluZyB0aGUgYXV0aCB0b2tlbiBhY3Jvc3Mg bWFueSBob3N0cy4NCkluIGNhc2VzIHdoZXJlIHlvdSBhcmUgZGlzYWxsb3dlZCB0byByZXBsaWNh dGUgdGhlIGF1dGggdG9rZW4sIGUuZy4gYmVjYXVzZSBpdCBpcyB0aWVkIHRvIGEgcGFydGljdWxh ciBJUCwgeW91IGNhbiBoZWxwIHNvbHZlIHRoZSByZXBsYXkgYXR0YWNrIGhvd2V2ZXIgeW914oCZ bGwgYmUgYmlhc2luZyB0cmFmZmljIHRvIHVzZXJzIHdob3NlIElQIGlzIHN0YWJsZSBhbmQgd2hv IGFyZSBsb2dnZWQgaW4vYXV0aOKAmWQuDQpJbiB0aGUgcHJlLXNoYXJlZCBrZXkgc2NlbmFyaW8g dGhhdCB3YXMgZGVzY3JpYmVkLCBpZiBhbnkgb25lIGNsaWVudCBsZWFrcyB0aGUgc2hhcmVkLXNl Y3JldCwgdGhlbiBpdCBiZWNvbWVzIG5vdCB2ZXJ5IHVzZWZ1bCBhbmQgY2VydGFpbmx5IGRvZXNu 4oCZdCBwcm90ZWN0IGFnYWluc3QgYSBEb1MuIEnigJlkIGd1ZXNzIHRoYXQgdGhlIHByb2JhYmls aXR5IG9mIHRoZSBsb3NzIG9mIGEgc3ltbWV0cmljIGtleSBpcyBwcm9wb3J0aW9uYWwgdG8gdGhl IGJyZWFkdGggb2YgdGhlIGRpc3RyaWJ1dGlvbiBvZiB0aGUga2V5Lg0KDQpXaGF0IEnigJltIHRy eWluZyB0byBwb2ludCBvdXQgaXMgdGhhdCB0aGlzIGRvZXNu4oCZdCByZWFsbHkgc2VlbSB0byBz b2x2ZSB0aGUgZ2VuZXJpYyBEb1MgYXR0YWNrLg0KWW914oCZbGwgc3RpbGwgbmVlZCB0byBkbyBz b21lIGhldXJpc3RpY3MvcnVsZXMgYmFzZWQgdXBvbiB3aGF0ZXZlciBpcyBvYnNlcnZhYmxlLCBh dCBhIG1pbmltdW0gdGhlIDUtdHVwbGUuDQpHZXR0aW5nIG1vcmUgdGhhbiB0aGUgNS10dXBsZSB0 byBiZSB2aXNpYmxlIHdpbGwgdGFrZSBtb3JlIHdvcmsgYnkgdGhlIHNlcnZlciwgdHJ1ZSwgYnV0 IGdpdmVuIG90aGVyIGRlc2lnbiBjb25zdHJhaW50cywgSSBkb27igJl0IHNlZSBob3cgdGhhdCBp cyBhdm9pZGFibGUuDQoNCi09Ug0KDQpGcm9tOiAiYnJlbnQuYmlsZ2VyQHZlcml6b24uY29tPG1h aWx0bzpicmVudC5iaWxnZXJAdmVyaXpvbi5jb20+IiA8YnJlbnQuYmlsZ2VyQHZlcml6b24uY29t PG1haWx0bzpicmVudC5iaWxnZXJAdmVyaXpvbi5jb20+Pg0KRGF0ZTogVHVlc2RheSwgSnVseSAy MywgMjAxOSBhdCA5OjU5IEFNDQpUbzogUm9iZXJ0byBQZW9uIDxmZW5peEBmYi5jb208bWFpbHRv OmZlbml4QGZiLmNvbT4+DQpDYzogImJyZW50LmJpbGdlckB2ZXJpem9uLmNvbTxtYWlsdG86YnJl bnQuYmlsZ2VyQHZlcml6b24uY29tPiIgPGJyZW50LmJpbGdlckB2ZXJpem9uLmNvbTxtYWlsdG86 YnJlbnQuYmlsZ2VyQHZlcml6b24uY29tPj4sIFdhdHNvbiBMYWRkIDx3YXRzb25ibGFkZEBnbWFp bC5jb208bWFpbHRvOndhdHNvbmJsYWRkQGdtYWlsLmNvbT4+LCAiYnJlbnQuYmlsZ2VyPTQwdmVy aXpvbi5jb21AZG1hcmMuaWV0Zi5vcmc8bWFpbHRvOjQwdmVyaXpvbi5jb21AZG1hcmMuaWV0Zi5v cmc+IiA8YnJlbnQuYmlsZ2VyPTQwdmVyaXpvbi5jb21AZG1hcmMuaWV0Zi5vcmc8bWFpbHRvOjQw dmVyaXpvbi5jb21AZG1hcmMuaWV0Zi5vcmc+PiwgInF1aWNAaWV0Zi5vcmc8bWFpbHRvOnF1aWNA aWV0Zi5vcmc+IiA8cXVpY0BpZXRmLm9yZzxtYWlsdG86cXVpY0BpZXRmLm9yZz4+LCBJYW4gU3dl dHQgPGlhbnN3ZXR0PTQwZ29vZ2xlLmNvbUBkbWFyYy5pZXRmLm9yZzxtYWlsdG86NDBnb29nbGUu Y29tQGRtYXJjLmlldGYub3JnPj4NClN1YmplY3Q6IFJlOiBbRV0gRG9TLWluZyBRVUlDIHNlcnZl cnMgaXMgdG9vIGVhc3kNCg0KVGhlcmUgYXJlIGxvdHMgb2YgcG9zc2libGUgc2NlbmFyaW9zLCBz byBwbGVhc2UganVzdCBjb25zaWRlciB0aGVzZSB0byBiZSBleGFtcGxlcy4gTGV04oCZcyBkaXZp ZGUgdGhlIHdvcmxkIG9mIHNlcnZlcnMgaW4gdG8gMSkgZW50ZXJwcmlzZSBidXNpbmVzcy10by1i dXNpbmVzcyB3ZWJzaXRlcywgMikgd2Vic2l0ZXMgbWVhbnQgZm9yIGNvbnN1bWVycyB3aGVyZSBh dXRoZW50aWNhdGlvbiBpcyBkZXNpcmFibGUsIGFuZCAzKSB3ZWJzaXRlcyB0aGF0IHdpbGwgd2Fu dCB0byBhbGxvdyB0aGVpciB1c2VycyB0byBiZSBhbm9ueW1vdXMsIHRoZXJlZm9yZSwgcHJlLWF1 dGhlbnRpY2F0aW9uIHdvdWxkIG5vdCBhcHBseS4NCg0KRW50ZXJwcmlzZSBidXNpbmVzcy10by1i dXNpbmVzcyB3ZWJzaXRlcyBjb3VsZCB1c2Ugc29tZXRoaW5nIHNpbWlsYXIgdG8gdGhlIFNvZnR3 YXJlIERlZmluZWQgUGVyaW1ldGVyIChTRFApIFNpbmdsZSBQYWNrZXQgQXV0aG9yaXphdGlvbiAo U1BBKSBwcm90b2NvbCBjcmVhdGVkIGJ5IHRoZSBDbG91ZCBTZWN1cml0eSBBbGxpYW5jZS4gSXQg dXNlcyB0aGUgZmFjdCB0aGF0IGNsaWVudHMgYXJlIG9uLWJvYXJkZWQgdG8gdGhlIHN5c3RlbSBp biBhIG9uZSB0aW1lIGV2ZW50IHRvIHByb3ZpZGUgdGhlIGNsaWVudHMgd2l0aCBhIHNoYXJlZCBz ZWNyZXQga2V5LiBUaGUga2V5IGlzIHVzZWQgaW4gYSBjb3VudGVyLWJhc2VkIEhNQUMgY2FsY3Vs YXRpb24uIFNpbmNlIG9ubHkgYW4gYXV0aG9yaXplZCBjbGllbnQgY2FuIGNhbGN1bGF0ZSB0aGUg cHJvcGVyIEhNQUMsIHRoZSBITUFDIGNhbiBiZSB1c2VkIGZvciBwcmUtYXV0aGVudGljYXRpb24u IFRodXMsIHRoZSBwcmUtYXV0aGVudGljYXRpb24gdG9rZW4gY291bGQgbG9vayBzb21ldGhpbmcg bGlrZSB0aGlzOg0KQ2xpZW50LT5TZXJ2ZXI6IENsaWVudElELCBDb3VudGVyLCBITUFDW0NsaWVu dElEIHx8IENvdW50ZXIsIEtzXSB3aGVyZSBLcyBpcyBhIHNoYXJlZCBzZWNyZXQga2V5IHRoYXQg Ym90aCB0aGUgY2xpZW50IGFuZCBzZXJ2ZXIgaGF2ZS4NCk9uIHRoZSBzZXJ2ZXIgc2lkZSwgdGhl IHNlcnZlciB3b3VsZCByZWNhbGN1bGF0ZSB0aGUgSE1BQyBhbmQgY29tcGFyZSBpdCB0byB0aGUg b25lIHByb3ZpZGVkIGJ5IHRoZSBjbGllbnQuDQpOb3RlIHRoYXQgdGhpcyBpbmZvcm1hdGlvbiBp cyBzZW50IGZyb20gdGhlIGNsaWVudCB0byB0aGUgc2VydmVyIGluIGNsZWFyIHRleHQgKGkuZS4s IG5vdCBlbmNyeXB0ZWQpLg0KSW4gcHJhY3RpY2UsIHRoZXJlIHdvdWxkIHByb2JhYmx5IGJlIG1v cmUgZmllbGRzLCBidXQgdGhlIGltcG9ydGFudCBwYXJ0IGlzIHRoYXQgdGhlIG9uZS10aW1lIG9u IGJvYXJkaW5nIGVuYWJsZXMgYSBsaWZldGltZSBvZiBwcmUtYXV0aGVudGljYXRpb24gdG9rZW5z Lg0KDQpXZWJzaXRlcyBtZWFudCBmb3IgY29uc3VtZXJzIHdvdWxkIHByb2JhYmx5IGJlIGhhbmRs ZWQgZGlmZmVyZW50bHkgLSBzcGVjaWZpY2FsbHksIG5vIG9uLWJvYXJkaW5nLiBUaGF0IG1lYW5z IHRoZXJlIHdvdWxkIGJlIHNvbWUga2luZCBvZiB0b2tlbiBzZXJ2aWNlIC0gc2ltaWxhciB0byBP QXV0aCwgYnV0IG9wZXJhdGluZyBwcmlvciB0byB0aGUgVENQIGVxdWl2YWxlbnQgb2YgU1lOL0FD Sy4gUGVyaGFwcyBDbG91ZEZsYWlyIG9yIEdvb2dsZSBvciBNaWNyb3NvZnQgY291bGQgaW52ZW50 IHNvbWV0aGluZyBsaWtlIHRoaXMgYW5kIG9mZmVyIGl0IGFzIGEgc2VydmljZT8/Pw0KDQpBZ2Fp biwgdGhlcmUgd2lsbCBiZSBvdGhlciB3ZWJzaXRlcyB0aGF0IHdpbGwgbm90IHdhbnQgcHJlLWF1 dGhlbnRpY2F0aW9uIGJlY2F1c2UgdGhleSB3YW50IHRvIGFsbG93IGFub255bW91cyB1c2VycyB0 byB0aGVpciBzaXRlLg0KDQpCcmVudA0KDQpPbiBKdWwgMjMsIDIwMTksIGF0IDY6MjYgQU0sIFJv YmVydG8gUGVvbiA8ZmVuaXhAZmIuY29tPG1haWx0bzpmZW5peEBmYi5jb20+PiB3cm90ZToNCg0K SSdtIHRyeWluZyB0byB1bmRlcnN0YW5kIGhvdyBhbnl0aGluZyB3YXMgcHJlLWF1dGhlbnRpY2F0 ZWQgd2l0aG91dCBzdWZmZXJpbmcgZnJvbSBhbGwgb2YgdGhlIHNhbWUgcHJvYmxlbXMuDQpIb3cg d291bGQgc3VjaCBwcmUtYXV0aGVudGljYXRpb24gYmUgZG9uZSBpbiBwcmFjdGljZSwgZXNwZWNp YWxseSBpbiBzY2VuYXJpb3Mgd2hlcmUgdGhlIHNlcnZlciBkb2Vzbid0IGhhdmUgYSB3aGl0ZWxp c3Qgb2YgY2xpZW50cywgYW5kIHRoYXQgc2VydmljZSBkZXNpcmVzIHRyYWZmaWMgZnJvbSBub24t bWFsaWNpb3VzIGNsaWVudHM/DQotPVINCkdldCBPdXRsb29rIGZvciBBbmRyb2lkPGh0dHBzOi8v dXJsZGVmZW5zZS5wcm9vZnBvaW50LmNvbS92Mi91cmw/dT1odHRwcy0zQV9fYWthLm1zX2doZWkz NiZkPUR3TUYtZyZjPXVkQlRSdkZ2WEM1RGhxZzdVSHBKbFBwczNtWjNMUnhwYjZfXzBQb21CVFEm cj1XLU8wdDB6d2hnWEhQOHVqcGg2dXozckgwTXR1YUx3RXJfN2dFMnAxWDVvJm09Q1YtSEloYlJW cC1hcmdpTnJWdV9ESzdyT05rNXh0OUw1cjBFZm13MTcwSSZzPVdYaGpRNWNHZkNydzZCU1hkcTVq eWRLRWJPRjJQdTN0akwyUVpXWHo2ZVkmZT0+DQoNCl9fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fDQpGcm9tOiBicmVudC5iaWxnZXJAdmVyaXpvbi5jb208bWFpbHRvOmJyZW50LmJpbGdl ckB2ZXJpem9uLmNvbT4gPGJyZW50LmJpbGdlckB2ZXJpem9uLmNvbTxtYWlsdG86YnJlbnQuYmls Z2VyQHZlcml6b24uY29tPj4NClNlbnQ6IFR1ZXNkYXksIEp1bHkgMjMsIDIwMTkgODoyMTowNSBB TQ0KVG86IFdhdHNvbiBMYWRkIDx3YXRzb25ibGFkZEBnbWFpbC5jb208bWFpbHRvOndhdHNvbmJs YWRkQGdtYWlsLmNvbT4+DQpDYzogYnJlbnQuYmlsZ2VyPTQwdmVyaXpvbi5jb21AZG1hcmMuaWV0 Zi5vcmc8bWFpbHRvOmJyZW50LmJpbGdlcj00MHZlcml6b24uY29tQGRtYXJjLmlldGYub3JnPiA8 YnJlbnQuYmlsZ2VyPTQwdmVyaXpvbi5jb21AZG1hcmMuaWV0Zi5vcmc8bWFpbHRvOmJyZW50LmJp bGdlcj00MHZlcml6b24uY29tQGRtYXJjLmlldGYub3JnPj47IFJvYmVydG8gUGVvbiA8ZmVuaXhA ZmIuY29tPG1haWx0bzpmZW5peEBmYi5jb20+PjsgcXVpY0BpZXRmLm9yZzxtYWlsdG86cXVpY0Bp ZXRmLm9yZz4gPHF1aWNAaWV0Zi5vcmc8bWFpbHRvOnF1aWNAaWV0Zi5vcmc+PjsgYnJlbnQuYmls Z2VyQHZlcml6b24uY29tPG1haWx0bzpicmVudC5iaWxnZXJAdmVyaXpvbi5jb20+IDxicmVudC5i aWxnZXJAdmVyaXpvbi5jb208bWFpbHRvOmJyZW50LmJpbGdlckB2ZXJpem9uLmNvbT4+OyBJYW4g U3dldHQgPGlhbnN3ZXR0PTQwZ29vZ2xlLmNvbUBkbWFyYy5pZXRmLm9yZzxtYWlsdG86aWFuc3dl dHQ9NDBnb29nbGUuY29tQGRtYXJjLmlldGYub3JnPj4NClN1YmplY3Q6IFJlOiBbRV0gRG9TLWlu ZyBRVUlDIHNlcnZlcnMgaXMgdG9vIGVhc3kNCg0KDQoNCk9uIEp1bCAyMiwgMjAxOSwgYXQgOTox NiBQTSwgV2F0c29uIExhZGQgPHdhdHNvbmJsYWRkQGdtYWlsLmNvbTxtYWlsdG86d2F0c29uYmxh ZGRAZ21haWwuY29tPj4gd3JvdGU6DQoNCk9uIE1vbiwgSnVsIDIyLCAyMDE5IGF0IDU6MjkgUE0N CjxicmVudC5iaWxnZXI9NDB2ZXJpem9uLmNvbUBkbWFyYy5pZXRmLm9yZzxtYWlsdG86YnJlbnQu YmlsZ2VyPTQwdmVyaXpvbi5jb21AZG1hcmMuaWV0Zi5vcmc+PiB3cm90ZToNCg0KDQoNCk9uIEp1 bCAyMiwgMjAxOSwgYXQgMTA6MTAgQU0sIFJvYmVydG8gUGVvbiA8ZmVuaXhAZmIuY29tPG1haWx0 bzpmZW5peEBmYi5jb20+PiB3cm90ZToNCg0KV2hlbiB5b3XigJlyZSB0YWxraW5nIGFib3V0IHBy ZS1hdXRoZW50aWNhdGlvbiwgYXJlIHlvdSByZWZlcnJpbmcgdG8gdGhlIDAtcnR0IHN0dWZmPw0K DQoNCjAtUlRUIGlzIGdvb2Qgc3R1ZmYuIEl0IHJlZHVjZXMgdGltZSBmb3IgYSBkZXZpY2UgdGhh dOKAmXMgYWxyZWFkeSBrbm93biB0byBiZSBhdXRob3JpemVkIHRvIGNvbm5lY3QgdG8gdGhlIHNl cnZlci4NCg0KUGFydCBvZiB0aGUgcHJvYmxlbSBpcyB0byBzdG9wIHJlc291cmNlIERvUy4gVGhl IG90aGVyIHBhcnQgaXMgYWJvdXQgaW5mb3JtYXRpb24gbGVha2FnZS4NCg0KTGV04oCZcyBhc3N1 bWUgYSB0aW1lIHdoZW4gYWxsIHdlYnNpdGUgdXNlIFFVSUMgYW5kIGxldCdzIHRha2UgYW4gYWR2 ZXJzYXJ5IHdobyBoYXMganVzdCBsZWFybmVkIGFib3V0IGEgdnVsbmVyYWJpbGl0eSBpbiBXb3Jk cHJlc3MuIFRoZSBhZHZlcnNhcnkgd2FudHMgdG8gc2NhbiB0aGUgSW50ZXJuZXQgZmluZGluZyBX b3JkcHJlc3Mgc2l0ZXMuIE5vdywgaWYgdGhlIFFVSUMgY29ubmVjdGlvbiByZXF1aXJlZCBwcmUt YXV0aGVudGljYXRpb24sIHRoZW4gdGhlIHNlcnZlciB3b3VsZCBiZSBibGFjayB0byB0aGUgY29u bmVjdGlvbiBhbmQgdGhlIGFkdmVyc2FyeSBjb3VsZCBub3QgZGV0ZXJtaW5lIGlmIHRoZSBzaXRl IHVzZXMgV29yZHByZXNzLiBCdXQsIGFzIGl0IHN0YW5kcyB0b2RheSwgaW4gdGhpcyBmdXR1cmUg dGltZSwgdGhlIGFkdmVyc2FyeSBzY2FucyB0aGUgSW50ZXJuZXQsIGNvbm5lY3RzIHRvIHRoZSBz ZXJ2ZXIsIGFuZCBpcyBoYW5kZWQgYSBXb3JkcHJlc3MgbG9naW4gc2NyZWVuLiBOb3cgdGhlIGFk dmVyc2FyeSBrbm93cyB3aGVyZSB0byBhdHRhY2suDQoNCklmIGNvbm5lY3Rpb24gcmVxdWlyZXMg cHJlYXV0aGVudGljYXRpb24gdGhlbiBubyBvbmUgY2FuIHNlZSB0aGUgc2l0ZSwgbm8/DQoNCg0K SW4gdGhlIGVudGVycHJpc2UgaXQgaXMgYSBsaXR0bGUgZGlmZmVyZW50LiBDb21wYW5pZXMgaW1w bGVtZW50IHJldmVyc2UgcHJveGllcyB0byB0cnkgdG8gcHJvdGVjdCBzZXJ2ZXJzIGZyb20gdW5h dXRob3JpemVkIHVzZXJzLiBCdXQgd2hhdCBpZiB0aGUgc2VydmVycyByZXF1aXJlZCBhIHByZS1h dXRoZW50aWNhdGlvbiB0b2tlbi4gVGhlbiwgcmV2ZXJzZSBwcm94aWVzIHdvdWxkIG5vdCBiZSBu ZWVkZWQuDQoNClNvIEkgdGhpbmsgdGhlcmUgYXJlIHR3byBkaWZmZXJlbnQgdGhpbmdzIGhlcmUs IG9yIG1heWJlIEknbSBtaXN1bmRlcnN0YW5kaW5nOg0KMTogV2UgaGF2ZSBzZXJ2ZXJzIHRoYXQg aGF2ZSBhIGxpbWl0ZWQgbnVtYmVyIG9mIGNsaWVudHMgdGhhdCB3aWxsDQpldmVyIHdhbnQgdG8g Y29ubmVjdCB0byB0aGVtLCBhbmQgd2FudCB0byBlbmFibGUgb3RoZXIgZGV2aWNlcyB0bw0KZmls dGVyIHRoZSB0cmFmZmljLCBzbyBuZWVkIHNvbWUgbWVjaGFuaXNtIHRoYXQgZW5hYmxlcyBhIG1p ZGRsZWJveCB0bw0KZmlsdGVyLg0KDQpObyBtaWRkbGUgYm94ISBQcmUtYXV0aGVudGljYXRpb24g bWFrZXMgc2VydmVycyBzZWxmLWRlZmVuZGluZy4gTGFjayBvZiBwcmUtYXV0aGVudGljYXRpb24g aXMgd2h5IHdlIGhhdmUgbWlkZGxlIGJveGVzLg0KDQoyOiBXZSBoYXZlIHNlcnZlcnMgZ2VuZXJh bGx5IGF2YWlsYWJsZSB0byB0aGUgcHVibGljIGFuZCBhcmUgY29uY2VybmVkDQp0aGF0IHRoZSBR VUlDIHZlcnNpb24gb2YgYSBTWU4gZmxvb2QgY2FuJ3QgYmUgZGVhbHQgd2l0aCAoZGVzcGl0ZQ0K ZXZpZGVuY2UgdG8gdGhlIGNvbnRyYXJ5KS4NCg0KQ29tcGFuaWVzIGFuZCB3ZWJzaXRlIG93bmVy cyBoYXZlIHRvIHBheSBmb3IgYW50aS1Eb1Mgc2VydmljZXMgZnJvbSB0aGUgbGlrZXMgb2YgVmVy aXpvbiBhbmQgb3RoZXJzIEJFQ0FVU0Ugc2VydmVycyBsaXN0ZW4gdG8gYWxsIGNsaWVudHMuIFdp dGggcHJlLWF1dGhlbnRpY2F0aW9uLCB0aGUgbmVlZCB0byBoYXZlIGFuIGFudGktRG9TIHNlcnZp Y2Ugd291bGQgYmUgZ3JlYXRseSByZWR1Y2VkIGJlY2F1c2Ugc2VydmVycyB3b3VsZCBub3QgcmVz cG9uZCB0byB1bmF1dGhvcml6ZWQgY2xpZW50cy4NCg0KQW5kIHRoZSBwb2ludCBhYm91dCBpbmZv cm1hdGlvbiBsZWFrYWdlIGlzIGltcG9ydGFudCwgdG9vLg0KDQpCcmVudA0KDQoNCkkgZG9uJ3Qg a25vdyBtdWNoIGFib3V0IGhvdyBDbG91ZGZsYXJlIChteSBwbGFjZSBvZiBlbXBsb3ltZW50KSAg ZGVhbHMNCndpdGggMiBidXQgaG9wZWZ1bGx5IHNvbWUgcGVvcGxlIHdobyBkby9pbXBsZW1lbnRv cnMgY2FuIHNwZWFrIHVwDQphYm91dCBob3cgbXVjaCBvZiBhIHByb2JsZW0gaXQgaXMuIEJ1dCAx IGlzIEkgdGhpbmsgdmVyeSBtdWNoIGENCm5vbmdvYWw6IG1pZGRsZWJveCBvc3NpZmljYXRpb24g aXMgcGFydCBvZiB0aGUgcmVhc29uIHdlIGhhdmUgUVVJQy4NCg0KU2luY2VyZWx5LA0KV2F0c29u IExhZGQNCg0KDQoNCkJyZW50IEJsaWdlcg0KRGlyZWN0b3ItVGVjaG5vbG9neSBWZXJpem9uIFNE UA0KYnJlbnQuYmlsZ2VyQHZlcml6b24uY29tPG1haWx0bzpicmVudC5iaWxnZXJAdmVyaXpvbi5j b20+DQoNCg0KDQoNCg0KDQoNCkJyZW50IEJsaWdlcg0KRGlyZWN0b3ItVGVjaG5vbG9neSBWZXJp em9uIFNEUA0KYnJlbnQuYmlsZ2VyQHZlcml6b24uY29tPG1haWx0bzpicmVudC5iaWxnZXJAdmVy aXpvbi5jb20+DQoNCg0KDQpCcmVudCBCbGlnZXINCkRpcmVjdG9yLVRlY2hub2xvZ3kgVmVyaXpv biBTRFANCmJyZW50LmJpbGdlckB2ZXJpem9uLmNvbTxtYWlsdG86YnJlbnQuYmlsZ2VyQHZlcml6 b24uY29tPg0KDQoNCg0KDQoNCg== --_000_2B1A8CB8B012465CB1CE6DECE9BDEC72fbcom_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPCEtLVtp ZiAhbXNvXT48c3R5bGU+dlw6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kb1w6KiB7 YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kd1w6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0 I1ZNTCk7fQ0KLnNoYXBlIHtiZWhhdmlvcjp1cmwoI2RlZmF1bHQjVk1MKTt9DQo8L3N0eWxlPjwh W2VuZGlmXS0tPjxzdHlsZT48IS0tDQovKiBGb250IERlZmluaXRpb25zICovDQpAZm9udC1mYWNl DQoJe2ZvbnQtZmFtaWx5OkhlbHZldGljYTsNCglwYW5vc2UtMTowIDAgMCAwIDAgMCAwIDAgMCAw O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6 MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7 DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAyIDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMg Ki8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBp bjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250LWZh bWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJ e21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1 bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFuLk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1z dHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpwdXJwbGU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVy bGluZTt9DQpwLm1zb25vcm1hbDAsIGxpLm1zb25vcm1hbDAsIGRpdi5tc29ub3JtYWwwDQoJe21z by1zdHlsZS1uYW1lOm1zb25vcm1hbDsNCgltc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzsNCgltYXJn aW4tcmlnaHQ6MGluOw0KCW1zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvOw0KCW1hcmdpbi1sZWZ0 OjBpbjsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNl cmlmO30NCnAuYWlybWFpbG9uLCBsaS5haXJtYWlsb24sIGRpdi5haXJtYWlsb24NCgl7bXNvLXN0 eWxlLW5hbWU6YWlybWFpbF9vbjsNCgltc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzsNCgltYXJnaW4t cmlnaHQ6MGluOw0KCW1zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvOw0KCW1hcmdpbi1sZWZ0OjBp bjsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlm O30NCnNwYW4uYXBwbGUtY29udmVydGVkLXNwYWNlDQoJe21zby1zdHlsZS1uYW1lOmFwcGxlLWNv bnZlcnRlZC1zcGFjZTt9DQpzcGFuLkVtYWlsU3R5bGUyMA0KCXttc28tc3R5bGUtdHlwZTpwZXJz b25hbC1yZXBseTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjp3 aW5kb3d0ZXh0O30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5 Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6OC41aW4g MTEuMGluOw0KCW1hcmdpbjoxLjBpbiAxLjBpbiAxLjBpbiAxLjBpbjt9DQpkaXYuV29yZFNlY3Rp b24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi0tPjwvc3R5bGU+PCEtLVtpZiBndGUgbXNvIDld Pjx4bWw+DQo8bzpzaGFwZWRlZmF1bHRzIHY6ZXh0PSJlZGl0IiBzcGlkbWF4PSIxMDI2IiAvPg0K PC94bWw+PCFbZW5kaWZdLS0+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWxheW91 dCB2OmV4dD0iZWRpdCI+DQo8bzppZG1hcCB2OmV4dD0iZWRpdCIgZGF0YT0iMSIgLz4NCjwvbzpz aGFwZWxheW91dD48L3htbD48IVtlbmRpZl0tLT4NCjwvaGVhZD4NCjxib2R5IGxhbmc9IkVOLVVT IiBsaW5rPSJibHVlIiB2bGluaz0icHVycGxlIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5JZiB5b3XigJlyZSBpbiBhIOKAnHNtYWxs4oCdIGRlcGxv eW1lbnQgdGhhdCBpcyBleHBvc2VkIHRvIHRoZSBpbnRlcm5ldCwgdGhlbiB5b3XigJlyZSBnb2lu ZyB0byBiZSBkZWFkIHJlZ2FyZGxlc3Mgb2YgdGhlIHRva2VucyBiZWNhdXNlIHRoZSBsaW5rcyB3 aWxsIGJlIGZ1bGwgb2YgdXNlbGVzcyBwYWNrZXRzIGlmIHNvbWVvbmUgZGVjaWRlcyB0byBkbyBh biBhdHRhY2sgYXQgYW55IHJlYXNvbmFibGUgc2NhbGUuPGJyPg0KPGJyPg0KSWYgeW914oCZcmUg aW4gYSDigJxsYXJnZeKAnSBkZXBsb3ltZW50IHRoYXQgaXMgZXhwb3NlZCB0byB0aGUgaW50ZXJu ZXQsIHRoZW4gYSBjb3VudGVyLWJhc2VkIGltcGxlbWVudGF0aW9uIHRoYXQgcmVxdWlyZXMgYW55 IHN0YXRlIGF0IHNlcnZlcnMgKHRvIHZlcmlmeSB0aGUgY291bnRlcikgaXMgbGlrZWx5IHRvIGJl IHZlcnkgZXhwZW5zaXZlIGFzIGl0IGVpdGhlciByZXF1aXJlcyBhbiBSUEMgZm9yIGVhY2ggaW5j b21pbmcgcGFja2V0LXRvLWJlLWF1dGhlbnRpY2F0ZWQsDQogb3IgaXQgcmVxdWlyZXMgdGhhdCB0 aGUgcGFja2V0IGJlIHJvdXRlZCB0byBhIHNwZWNpZmljIHNlcnZlciwgd2hpY2ggbWFrZXMgdGhl IGluZGl2aWR1YWwgc2VydmVycyBEb1NhYmxlLjxicj4NCjxicj4NCklmIHlvdSBoYXZlIGEg4oCc bGFyZ2XigJ0gZGVwbG95bWVudCBhbmQgdXNlIGEgdGltZS1iYXNlZCBpbXBsZW1lbnRhdGlvbiwg dGhlbiB5b3UgaGF2ZSB0aGUgZ29sZGlsb2Nrcy1saWtlIHByb2JsZW0gb2YgY2hvb3NpbmcgdGhl IGNvcnJlY3QgVFRMLCBhbmQgdGhhdCBpcyBnb2luZyB0byBiZSBkaWZmaWN1bHQgYXMgdGhlIERv UyBlZmZlY3RpdmVuZXNzIGJlY29tZXMgZGlyZWN0bHkgKGludmVyc2VseSkgcmVsYXRlZCB0byB0 aGUgVFRMIGxlbmd0aCBhcw0KIFRUTCBsZW5ndGggZGV0ZXJtaW5lcyB0aGUgYW1vdW50IG9mIHRo ZSBwb3B1bGF0aW9uIHRoYXQgaXMgbm8gbG9uZ2VyIGF1dGhlbnRpY2F0ZWQuIEEgc2hvcnQgVFRM IG1lYW5zIHZlcnkgbGl0dGxlIGJlbmVmaXQgY2FuIGJlIGFzY3JpYmVkIGJ5IGhhdmluZyB0aGUg dG9rZW4gYmVjYXVzZSBmZXcgY2xpZW50cyB3aWxsIHJlbWFpbiBhdXRoZW50aWNhdGVkLjxicj4N Cjxicj4NClRoZSBjb21iaW5hdGlvbiBvZiB0aW1lIGFuZCBjb3VudGVyIGRvZXNu4oCZdCBuZWdh dGUgYW55IG9mIHRoZSBkaXNhZHZhbnRhZ2VzIG9mIGVpdGhlci48YnI+DQo8YnI+DQpJIGRvbuKA mXQgdWx0aW1hdGVseSBzZWUgYSB3YXkgb3V0IG9mIGhhdmluZyB0byBoZXVyaXN0aWNhbGx5IGV4 YW1pbmUgNS10dXBsZXMuPGJyPg0KLT1SPGJyPg0KPGJyPg0KPG86cD48L286cD48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXYgc3R5bGU9ImJvcmRl cjpub25lO2JvcmRlci10b3A6c29saWQgI0I1QzRERiAxLjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAw aW4gMGluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTIuMHB0O2NvbG9yOmJsYWNrIj5Gcm9tOiA8L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTIuMHB0O2NvbG9yOmJsYWNrIj4mcXVvdDticmVudC5iaWxnZXJAdmVyaXpvbi5jb20mcXVv dDsgJmx0O2JyZW50LmJpbGdlckB2ZXJpem9uLmNvbSZndDs8YnI+DQo8Yj5EYXRlOiA8L2I+VHVl c2RheSwgSnVseSAyMywgMjAxOSBhdCAxMToxOSBBTTxicj4NCjxiPlRvOiA8L2I+TWlra2VsIEZh aG7DuGUgSsO4cmdlbnNlbiAmbHQ7bWlra2VsZmpAZ21haWwuY29tJmd0Ozxicj4NCjxiPkNjOiA8 L2I+Um9iZXJ0byBQZW9uICZsdDtmZW5peEBmYi5jb20mZ3Q7LCAmcXVvdDticmVudC5iaWxnZXJA dmVyaXpvbi5jb20mcXVvdDsgJmx0O2JyZW50LmJpbGdlckB2ZXJpem9uLmNvbSZndDssIFdhdHNv biBMYWRkICZsdDt3YXRzb25ibGFkZEBnbWFpbC5jb20mZ3Q7LCAmcXVvdDtxdWljQGlldGYub3Jn JnF1b3Q7ICZsdDtxdWljQGlldGYub3JnJmd0OywgJnF1b3Q7YnJlbnQuYmlsZ2VyPTQwdmVyaXpv bi5jb21AZG1hcmMuaWV0Zi5vcmcmcXVvdDsgJmx0O2JyZW50LmJpbGdlcj00MHZlcml6b24uY29t QGRtYXJjLmlldGYub3JnJmd0OywgSWFuDQogU3dldHQgJmx0O2lhbnN3ZXR0PTQwZ29vZ2xlLmNv bUBkbWFyYy5pZXRmLm9yZyZndDs8YnI+DQo8Yj5TdWJqZWN0OiA8L2I+UmU6IFtFXSBEb1MtaW5n IFFVSUMgc2VydmVycyBpcyB0b28gZWFzeTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48YnI+DQo8YnI+DQo8bzpwPjwvbzpwPjwvcD4NCjxibG9ja3F1b3Rl IHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPk9uIEp1bCAyMywgMjAxOSwgYXQgNzo1MyBBTSwgTWlra2VsIEZh aG7DuGUgSsO4cmdlbnNlbiAmbHQ7PGEgaHJlZj0ibWFpbHRvOm1pa2tlbGZqQGdtYWlsLmNvbSI+ bWlra2VsZmpAZ21haWwuY29tPC9hPiZndDsgd3JvdGU6PG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXYg aWQ9ImJsb29wX2N1c3RvbWZvbnQiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhIj5JdCBpcyBub3QgdGhhdCBl YXN5IHRvIHN0ZWFsIGEgdG9rZW4gYW5kIHJlcGxheSwgYnV0IGl0IGNhbiBoYXBwZW4uPG86cD48 L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+WWVzLCBpdCByZXF1aXJlcyBjb21wcm9taXNpbmcgYSBjbGllbnQgYW5k IHN0ZWFsaW5nIHRoZSBrZXkgb3IganVzdCB1c2luZyB0aGUga2V5IGZyb20gYSBiYWNrIGRvb3Iu IEluIHByYWN0aWNlIHRoZSBsYXR0ZXIgbWF5IGJlIGFkdmFudGFnZW91cyB0byB0aGUgYWR2ZXJz YXJ5IGJlY2F1c2UgdGhlIHNvdXJjZSBvZiB0aGUgYXR0YWNrIHdpbGwgYmUgZnJvbSBhIG5vcm1h bCBsb2NhdGlvbiBhbmQgYmVjYXVzZQ0KIGZ1dHVyZSBkZXZpY2UgYXV0aG9yaXphdGlvbnMgbWF5 IGluY2x1ZGUgYSBmaW5nZXJwcmludCBvZiB0aGUgZGV2aWNlIC0gYSBmaW5nZXJwcmludCB0aGF0 IHdvdWxkIGZhaWwgb24gdGhlIHN0b2xlbiBrZXkuIEJ1dCBsb29rIGF0IHdoYXQgd2XigJl2ZSBk b25lIHRvIHRoZSB1bmF1dGhvcml6ZWQgYWR2ZXJzYXJ5IHdpdGggdGhlIHByZS1hdXRoZW50aWNh dGlvbiB0b2tlbiAtIGRlZmVhdGVkIHJlc291cmNlIERvUywgaW5mb3JtYXRpb24gbGVha2FnZSwN CiBhbGwgdnVsbmVyYWJpbGl0aWVzIG9mIHRoZSBzZXJ2ZXIsIGFsbCBjb25maWd1cmF0aW9uIGVy cm9ycyBvZiB0aGUgYXBwbGljYXRpb25zIG9mIHRoZSBzZXJ2ZXIuIEFuZCBpdCBhdWdtZW50cyBU TFMgdG8gZGVmZWF0IG1hbi1pbi10aGUtbWlkZGxlIGF0dGFja3MuPG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48YnI+DQo8YnI+DQo8bzpwPjwvbzpw PjwvcD4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206 NS4wcHQiPg0KPGRpdj4NCjxkaXYgaWQ9ImJsb29wX2N1c3RvbWZvbnQiPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6SGVsdmV0 aWNhIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXYgaWQ9ImJsb29w X2N1c3RvbWZvbnQiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMC4wcHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhIj5JZiB5b3UgYWRkIGEgdGltZSBmYWN0b3Ig c3VjaCBhbiBhdHRhY2sgd2lsbCBoYXZlIGxpbWl0ZWQgdmFsdWUuIEluIGZhY3QgYSB0b2tlbiBu ZWVkIG5vdCBiZSB2YWxpZCBmb3IgbW9yZSB0aGFuIGFib3V0IDEwIG1pbnV0ZXMgdG8gYWNjb3Vu dCBmb3Igc2tld2VkIGNsb2Nrcy48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2 Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5BcyBub3RlZCBvbiBhIGRp ZmZlcmVudCBwb3N0aW5nLCBTaW5nbGUgUGFja2V0IEF1dGhvcml6YXRpb24gaXMgYmFzZWQgb24g UkZDIDQyMjYgd2hpY2ggaGFzIGJvdGggYSBjb3VudGVyIGFuZCBhIHRpbWUgYmFzZWQgYXBwcm9h Y2guIFBlcnNvbmFsbHksIEkgcHJlZmVyIGEgY291bnRlci48bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+QnV0IGFnYWluLCB0aGlzIGlzIGFsbCBp cnJlbGV2YW50IGJlY2F1c2UgSeKAmW0gbm90IHN1Z2dlc3RpbmcgYW55IG9uZSBwcmUtYXV0aGVu dGljYXRpb24uIEnigJltIGp1c3QgdXNpbmcgYW4gZXhhbXBsZSB0byBzaG93IGhvdyBpdCBjYW4g c3RvcCBtdWx0aXBsZSB0eXBlcyBvZiBhdHRhY2tzLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5CcmVudDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGJyPg0KPGJyPg0KPG86cD48L286cD48L3A+ DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0 Ij4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEw LjBwdDtmb250LWZhbWlseTpIZWx2ZXRpY2EiPjxiciBzdHlsZT0iY2FyZXQtY29sb3I6IHJnYigw LCAwLCAwKTtmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsO3RleHQtYWxpZ246c3RhcnQ7LXdlYmtp dC10ZXh0LXN0cm9rZS13aWR0aDogMHB4O3dvcmQtc3BhY2luZzowcHgiPg0KPGJyPg0KPC9zcGFu PjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9ImFpcm1haWxvbiI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhIj5PbiAyMyBKdWx5IDIwMTkgYXQgMTYu NDEuMDksIFJvYmVydG8gUGVvbiAoPGEgaHJlZj0ibWFpbHRvOmZlbml4QGZiLmNvbSI+ZmVuaXhA ZmIuY29tPC9hPikgd3JvdGU6PG86cD48L286cD48L3NwYW4+PC9wPg0KPGJsb2NrcXVvdGUgc3R5 bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdDtmb250LXZhcmlhbnQtY2Fw czogbm9ybWFsO29ycGhhbnM6IGF1dG87dGV4dC1hbGlnbjpzdGFydDt3aWRvd3M6IGF1dG87LXdl YmtpdC10ZXh0LXNpemUtYWRqdXN0OiBhdXRvOy13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBw eDt3b3JkLXNwYWNpbmc6MHB4Ij4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1h bHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6SGVsdmV0 aWNhIj5J4oCZZCBhc3N1bWUgIzEgaXMgbGVzcyBsaWtlbHkgdG8gZXhwZXJpZW5jZSBjcmlwcGxp bmcgU1lOLWJhc2VkIERvUyBhdHRhY2tzLCBhbmQgY291bGQgb3RoZXJ3aXNlIGJlIGFjY29tcGxp c2hlZCBieSBsaW1pdGluZw0KIGFjY2VzcyBpbiBJUC1zcGFjZSAoaW1wZXJmZWN0LCBidXQgd2Xi gJlyZSBsb29raW5nIGZvciDigJxnb29kLWVub3VnaOKAnSwgaGVyZSkuPG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDph dXRvO21hcmdpbi1ib3R0b206MTIuMHB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtm b250LWZhbWlseTpIZWx2ZXRpY2EiPjxicj4NCi4uIHdoaWNoIG1lYW5zIHRoYXQgSSB0aGluayB3 ZSBzaG91bGQgY29uc2lkZXIgMiYjNDM7MyBvbmx5LCByZWFsbHkuPGJyPg0KPGJyPg0KRm9yICMy IGFuZCAjMywgd2hpY2ggSSBzdXNwZWN0IGhhdmUgc2lnbmlmaWNhbnQgb3ZlcmxhcHMgKHNpdGVz IG1heSBwcm92aWRlIHNlcnZpY2VzIGJvdGggdG8gbG9nZ2VkLWluIHVzZXJzIGFuZCB1c2VycyB3 aG8gYXJlbuKAmXQgbG9nZ2VkIGluKSwgdGhlIHByZS1hdXRob3JpemF0aW9uIGVpdGhlcjo8YnI+ DQombmJzcDsgYSkgY2FuIGJlIERvU+KAmWQgaXRzZWxmLjxicj4NCiZuYnNwOyBiKSBjYW4gYmUg dXNlZCB0byBkbyBhIERvUyBpbiB0aGUgZnV0dXJlLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFy Z2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1m YW1pbHk6SGVsdmV0aWNhIj5JbiBjYXNlIGIsIGFzIGFuIGF0dGFja2VyLCB5b3XigJlkIGdldCBv ciB3YWl0IGZvciB0aGUgY2xpZW50IHRvIGF1dGhlbnRpY2F0ZSwgdGhlbiB1c2UgdGhhdCBhdXRo ZW50aWNhdGlvbiBpbiBhIHJlcGxheSBhdHRhY2ssDQogZS5nLiBieSByZXBsaWNhdGluZyB0aGUg YXV0aCB0b2tlbiBhY3Jvc3MgbWFueSBob3N0cy48YnI+DQpJbiBjYXNlcyB3aGVyZSB5b3UgYXJl IGRpc2FsbG93ZWQgdG8gcmVwbGljYXRlIHRoZSBhdXRoIHRva2VuLCBlLmcuIGJlY2F1c2UgaXQg aXMgdGllZCB0byBhIHBhcnRpY3VsYXIgSVAsIHlvdSBjYW4gaGVscCBzb2x2ZSB0aGUgcmVwbGF5 IGF0dGFjayBob3dldmVyIHlvdeKAmWxsIGJlIGJpYXNpbmcgdHJhZmZpYyB0byB1c2VycyB3aG9z ZSBJUCBpcyBzdGFibGUgYW5kIHdobyBhcmUgbG9nZ2VkIGluL2F1dGjigJlkLjxicj4NCkluIHRo ZSBwcmUtc2hhcmVkIGtleSBzY2VuYXJpbyB0aGF0IHdhcyBkZXNjcmliZWQsIGlmIGFueSBvbmUg Y2xpZW50IGxlYWtzIHRoZSBzaGFyZWQtc2VjcmV0LCB0aGVuIGl0IGJlY29tZXMgbm90IHZlcnkg dXNlZnVsIGFuZCBjZXJ0YWlubHkgZG9lc27igJl0IHByb3RlY3QgYWdhaW5zdCBhIERvUy4gSeKA mWQgZ3Vlc3MgdGhhdCB0aGUgcHJvYmFiaWxpdHkgb2YgdGhlIGxvc3Mgb2YgYSBzeW1tZXRyaWMg a2V5IGlzIHByb3BvcnRpb25hbCB0byB0aGUgYnJlYWR0aA0KIG9mIHRoZSBkaXN0cmlidXRpb24g b2YgdGhlIGtleS48YnI+DQo8YnI+DQpXaGF0IEnigJltIHRyeWluZyB0byBwb2ludCBvdXQgaXMg dGhhdCB0aGlzIGRvZXNu4oCZdCByZWFsbHkgc2VlbSB0byBzb2x2ZSB0aGUgZ2VuZXJpYyBEb1Mg YXR0YWNrLjxicj4NCllvdeKAmWxsIHN0aWxsIG5lZWQgdG8gZG8gc29tZSBoZXVyaXN0aWNzL3J1 bGVzIGJhc2VkIHVwb24gd2hhdGV2ZXIgaXMgb2JzZXJ2YWJsZSwgYXQgYSBtaW5pbXVtIHRoZSA1 LXR1cGxlLjxicj4NCkdldHRpbmcgbW9yZSB0aGFuIHRoZSA1LXR1cGxlIHRvIGJlIHZpc2libGUg d2lsbCB0YWtlIG1vcmUgd29yayBieSB0aGUgc2VydmVyLCB0cnVlLCBidXQgZ2l2ZW4gb3RoZXIg ZGVzaWduIGNvbnN0cmFpbnRzLCBJIGRvbuKAmXQgc2VlIGhvdyB0aGF0IGlzIGF2b2lkYWJsZS48 YnI+DQo8YnI+DQotPVI8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6SGVsdmV0 aWNhIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9ImJv cmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0I1QzRERiAxLjBwdDtwYWRkaW5nOjMuMHB0IDBp biAwaW4gMGluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1h bHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PGI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhIj5Gcm9tOjxzcGFuIGNsYXNzPSJhcHBs ZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYSI+JnF1b3Q7PGEgaHJlZj0ibWFp bHRvOmJyZW50LmJpbGdlckB2ZXJpem9uLmNvbSI+YnJlbnQuYmlsZ2VyQHZlcml6b24uY29tPC9h PiZxdW90Ow0KICZsdDs8YSBocmVmPSJtYWlsdG86YnJlbnQuYmlsZ2VyQHZlcml6b24uY29tIj5i cmVudC5iaWxnZXJAdmVyaXpvbi5jb208L2E+Jmd0Ozxicj4NCjxiPkRhdGU6PHNwYW4gY2xhc3M9 ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjwvYj5UdWVzZGF5LCBKdWx5IDIz LCAyMDE5IGF0IDk6NTkgQU08YnI+DQo8Yj5Ubzo8c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVk LXNwYWNlIj4mbmJzcDs8L3NwYW4+PC9iPlJvYmVydG8gUGVvbiAmbHQ7PGEgaHJlZj0ibWFpbHRv OmZlbml4QGZiLmNvbSI+ZmVuaXhAZmIuY29tPC9hPiZndDs8YnI+DQo8Yj5DYzo8c3BhbiBjbGFz cz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PC9iPiZxdW90OzxhIGhyZWY9 Im1haWx0bzpicmVudC5iaWxnZXJAdmVyaXpvbi5jb20iPmJyZW50LmJpbGdlckB2ZXJpem9uLmNv bTwvYT4mcXVvdDsgJmx0OzxhIGhyZWY9Im1haWx0bzpicmVudC5iaWxnZXJAdmVyaXpvbi5jb20i PmJyZW50LmJpbGdlckB2ZXJpem9uLmNvbTwvYT4mZ3Q7LCBXYXRzb24gTGFkZCAmbHQ7PGEgaHJl Zj0ibWFpbHRvOndhdHNvbmJsYWRkQGdtYWlsLmNvbSI+d2F0c29uYmxhZGRAZ21haWwuY29tPC9h PiZndDssDQogJnF1b3Q7YnJlbnQuYmlsZ2VyPTxhIGhyZWY9Im1haWx0bzo0MHZlcml6b24uY29t QGRtYXJjLmlldGYub3JnIj40MHZlcml6b24uY29tQGRtYXJjLmlldGYub3JnPC9hPiZxdW90OyAm bHQ7YnJlbnQuYmlsZ2VyPTxhIGhyZWY9Im1haWx0bzo0MHZlcml6b24uY29tQGRtYXJjLmlldGYu b3JnIj40MHZlcml6b24uY29tQGRtYXJjLmlldGYub3JnPC9hPiZndDssICZxdW90OzxhIGhyZWY9 Im1haWx0bzpxdWljQGlldGYub3JnIj5xdWljQGlldGYub3JnPC9hPiZxdW90OyAmbHQ7PGEgaHJl Zj0ibWFpbHRvOnF1aWNAaWV0Zi5vcmciPnF1aWNAaWV0Zi5vcmc8L2E+Jmd0OywNCiBJYW4gU3dl dHQgJmx0O2lhbnN3ZXR0PTxhIGhyZWY9Im1haWx0bzo0MGdvb2dsZS5jb21AZG1hcmMuaWV0Zi5v cmciPjQwZ29vZ2xlLmNvbUBkbWFyYy5pZXRmLm9yZzwvYT4mZ3Q7PGJyPg0KPGI+U3ViamVjdDo8 c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PC9iPlJlOiBb RV0gRG9TLWluZyBRVUlDIHNlcnZlcnMgaXMgdG9vIGVhc3k8L3NwYW4+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhIj48bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhIj4mbmJzcDs8bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTpIZWx2ZXRpY2EiPlRoZXJl IGFyZSBsb3RzIG9mIHBvc3NpYmxlIHNjZW5hcmlvcywgc28gcGxlYXNlIGp1c3QgY29uc2lkZXIg dGhlc2UgdG8gYmUgZXhhbXBsZXMuIExldOKAmXMgZGl2aWRlIHRoZSB3b3JsZCBvZiBzZXJ2ZXJz IGluIHRvDQogMSkgZW50ZXJwcmlzZSBidXNpbmVzcy10by1idXNpbmVzcyB3ZWJzaXRlcywgMikg d2Vic2l0ZXMgbWVhbnQgZm9yIGNvbnN1bWVycyB3aGVyZSBhdXRoZW50aWNhdGlvbiBpcyBkZXNp cmFibGUsIGFuZCAzKSB3ZWJzaXRlcyB0aGF0IHdpbGwgd2FudCB0byBhbGxvdyB0aGVpciB1c2Vy cyB0byBiZSBhbm9ueW1vdXMsIHRoZXJlZm9yZSwgcHJlLWF1dGhlbnRpY2F0aW9uIHdvdWxkIG5v dCBhcHBseS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OkhlbHZl dGljYSI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNv LW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2Zv bnQtZmFtaWx5OkhlbHZldGljYSI+RW50ZXJwcmlzZSBidXNpbmVzcy10by1idXNpbmVzcyB3ZWJz aXRlcyBjb3VsZCB1c2Ugc29tZXRoaW5nIHNpbWlsYXIgdG8gdGhlIFNvZnR3YXJlIERlZmluZWQg UGVyaW1ldGVyIChTRFApIFNpbmdsZSBQYWNrZXQgQXV0aG9yaXphdGlvbg0KIChTUEEpIHByb3Rv Y29sIGNyZWF0ZWQgYnkgdGhlIENsb3VkIFNlY3VyaXR5IEFsbGlhbmNlLiBJdCB1c2VzIHRoZSBm YWN0IHRoYXQgY2xpZW50cyBhcmUgb24tYm9hcmRlZCB0byB0aGUgc3lzdGVtIGluIGEgb25lIHRp bWUgZXZlbnQgdG8gcHJvdmlkZSB0aGUgY2xpZW50cyB3aXRoIGEgc2hhcmVkIHNlY3JldCBrZXku IFRoZSBrZXkgaXMgdXNlZCBpbiBhIGNvdW50ZXItYmFzZWQgSE1BQyBjYWxjdWxhdGlvbi4gU2lu Y2Ugb25seSBhbiBhdXRob3JpemVkDQogY2xpZW50IGNhbiBjYWxjdWxhdGUgdGhlIHByb3BlciBI TUFDLCB0aGUgSE1BQyBjYW4gYmUgdXNlZCBmb3IgcHJlLWF1dGhlbnRpY2F0aW9uLiBUaHVzLCB0 aGUgcHJlLWF1dGhlbnRpY2F0aW9uIHRva2VuIGNvdWxkIGxvb2sgc29tZXRoaW5nIGxpa2UgdGhp czo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0 OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OkhlbHZldGlj YSI+Q2xpZW50LSZndDtTZXJ2ZXI6IENsaWVudElELCBDb3VudGVyLCBITUFDW0NsaWVudElEIHx8 IENvdW50ZXIsIEtzXSB3aGVyZSBLcyBpcyBhIHNoYXJlZCBzZWNyZXQga2V5IHRoYXQgYm90aCB0 aGUgY2xpZW50IGFuZCBzZXJ2ZXINCiBoYXZlLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6 YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MC4wcHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhIj5PbiB0aGUgc2VydmVyIHNpZGUsIHRoZSBzZXJ2 ZXIgd291bGQgcmVjYWxjdWxhdGUgdGhlIEhNQUMgYW5kIGNvbXBhcmUgaXQgdG8gdGhlIG9uZSBw cm92aWRlZCBieSB0aGUgY2xpZW50LiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6 YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MC4wcHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhIj5Ob3RlIHRoYXQgdGhpcyBpbmZvcm1hdGlvbiBp cyBzZW50IGZyb20gdGhlIGNsaWVudCB0byB0aGUgc2VydmVyIGluIGNsZWFyIHRleHQgKGkuZS4s IG5vdCBlbmNyeXB0ZWQpLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFy Z2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1m YW1pbHk6SGVsdmV0aWNhIj5JbiBwcmFjdGljZSwgdGhlcmUgd291bGQgcHJvYmFibHkgYmUgbW9y ZSBmaWVsZHMsIGJ1dCB0aGUgaW1wb3J0YW50IHBhcnQgaXMgdGhhdCB0aGUgb25lLXRpbWUgb24g Ym9hcmRpbmcgZW5hYmxlcyBhIGxpZmV0aW1lDQogb2YgcHJlLWF1dGhlbnRpY2F0aW9uIHRva2Vu cy48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6SGVs dmV0aWNhIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bztt c28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7 Zm9udC1mYW1pbHk6SGVsdmV0aWNhIj5XZWJzaXRlcyBtZWFudCBmb3IgY29uc3VtZXJzIHdvdWxk IHByb2JhYmx5IGJlIGhhbmRsZWQgZGlmZmVyZW50bHkgLSBzcGVjaWZpY2FsbHksIG5vIG9uLWJv YXJkaW5nLiBUaGF0IG1lYW5zIHRoZXJlIHdvdWxkIGJlDQogc29tZSBraW5kIG9mIHRva2VuIHNl cnZpY2UgLSBzaW1pbGFyIHRvIE9BdXRoLCBidXQgb3BlcmF0aW5nIHByaW9yIHRvIHRoZSBUQ1Ag ZXF1aXZhbGVudCBvZiBTWU4vQUNLLiBQZXJoYXBzIENsb3VkRmxhaXIgb3IgR29vZ2xlIG9yIE1p Y3Jvc29mdCBjb3VsZCBpbnZlbnQgc29tZXRoaW5nIGxpa2UgdGhpcyBhbmQgb2ZmZXIgaXQgYXMg YSBzZXJ2aWNlPz8/PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQt ZmFtaWx5OkhlbHZldGljYSI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3At YWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTAuMHB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYSI+QWdhaW4sIHRoZXJlIHdpbGwgYmUgb3Ro ZXIgd2Vic2l0ZXMgdGhhdCB3aWxsIG5vdCB3YW50IHByZS1hdXRoZW50aWNhdGlvbiBiZWNhdXNl IHRoZXkgd2FudCB0byBhbGxvdyBhbm9ueW1vdXMgdXNlcnMgdG8gdGhlaXINCiBzaXRlLjxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTpIZWx2ZXRpY2Ei PiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJn aW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZh bWlseTpIZWx2ZXRpY2EiPkJyZW50PG86cD48L286cD48L3NwYW4+PC9wPg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttYXJnaW4tYm90 dG9tOjEyLjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6SGVs dmV0aWNhIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8YmxvY2txdW90ZSBzdHlsZT0i bWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0 b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5Okhl bHZldGljYSI+T24gSnVsIDIzLCAyMDE5LCBhdCA2OjI2IEFNLCBSb2JlcnRvIFBlb24gJmx0Ozxh IGhyZWY9Im1haWx0bzpmZW5peEBmYi5jb20iPmZlbml4QGZiLmNvbTwvYT4mZ3Q7IHdyb3RlOjxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYSI+Jm5i c3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bWFyZ2lu LWJvdHRvbToxMi4wcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWYiPkknbSB0cnlpbmcgdG8gdW5kZXJzdGFuZCBo b3cgYW55dGhpbmcgd2FzIHByZS1hdXRoZW50aWNhdGVkIHdpdGhvdXQgc3VmZmVyaW5nIGZyb20g YWxsIG9mIHRoZSBzYW1lIHByb2JsZW1zLjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEw LjBwdDtmb250LWZhbWlseTpIZWx2ZXRpY2EiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6 YXV0bzttYXJnaW4tYm90dG9tOjEyLjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZiI+SG93IHdvdWxkIHN1Y2gg cHJlLWF1dGhlbnRpY2F0aW9uIGJlIGRvbmUgaW4gcHJhY3RpY2UsIGVzcGVjaWFsbHkgaW4gc2Nl bmFyaW9zIHdoZXJlIHRoZSBzZXJ2ZXIgZG9lc24ndCBoYXZlIGEgd2hpdGVsaXN0DQogb2YgY2xp ZW50cywgYW5kIHRoYXQgc2VydmljZSBkZXNpcmVzIHRyYWZmaWMgZnJvbSBub24tbWFsaWNpb3Vz IGNsaWVudHM/PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5 OkhlbHZldGljYSI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21hcmdpbi1ib3R0 b206MTIuMHB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVv dDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmIj4tPVI8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMC4wcHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJn aW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlm Ij5HZXQ8c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PGEg aHJlZj0iaHR0cHM6Ly91cmxkZWZlbnNlLnByb29mcG9pbnQuY29tL3YyL3VybD91PWh0dHBzLTNB X19ha2EubXNfZ2hlaTM2JmFtcDtkPUR3TUYtZyZhbXA7Yz11ZEJUUnZGdlhDNURocWc3VUhwSmxQ cHMzbVozTFJ4cGI2X18wUG9tQlRRJmFtcDtyPVctTzB0MHp3aGdYSFA4dWpwaDZ1ejNySDBNdHVh THdFcl83Z0UycDFYNW8mYW1wO209Q1YtSEloYlJWcC1hcmdpTnJWdV9ESzdyT05rNXh0OUw1cjBF Zm13MTcwSSZhbXA7cz1XWGhqUTVjR2ZDcnc2QlNYZHE1anlkS0ViT0YyUHUzdGpMMlFaV1h6NmVZ JmFtcDtlPSI+T3V0bG9vaw0KIGZvciBBbmRyb2lkPC9hPjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEwLjBwdDtmb250LWZhbWlseTpIZWx2ZXRpY2EiPjxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWYiPiZu YnNwOzwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTpIZWx2 ZXRpY2EiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IGNsYXNz PSJNc29Ob3JtYWwiIGFsaWduPSJjZW50ZXIiIHN0eWxlPSJ0ZXh0LWFsaWduOmNlbnRlciI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhIj4NCjxociBz aXplPSIwIiB3aWR0aD0iODklIiBhbGlnbj0iY2VudGVyIj4NCjwvc3Bhbj48L2Rpdj4NCjxkaXYg aWQ9ImRpdlJwbHlGd2RNc2ciPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJn aW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48Yj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTpIZWx2ZXRpY2EiPkZyb206PC9zcGFuPjwv Yj48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjEwLjBwdDtmb250LWZhbWlseTpIZWx2ZXRpY2EiPiZuYnNwOzwvc3Bhbj48L3NwYW4+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhIj48YSBocmVm PSJtYWlsdG86YnJlbnQuYmlsZ2VyQHZlcml6b24uY29tIj5icmVudC5iaWxnZXJAdmVyaXpvbi5j b208L2E+PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPiZs dDs8YSBocmVmPSJtYWlsdG86YnJlbnQuYmlsZ2VyQHZlcml6b24uY29tIj5icmVudC5iaWxnZXJA dmVyaXpvbi5jb208L2E+Jmd0Ozxicj4NCjxiPlNlbnQ6PC9iPjxzcGFuIGNsYXNzPSJhcHBsZS1j b252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj5UdWVzZGF5LCBKdWx5IDIzLCAyMDE5IDg6MjE6 MDUgQU08YnI+DQo8Yj5Ubzo8L2I+PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+ Jm5ic3A7PC9zcGFuPldhdHNvbiBMYWRkICZsdDs8YSBocmVmPSJtYWlsdG86d2F0c29uYmxhZGRA Z21haWwuY29tIj53YXRzb25ibGFkZEBnbWFpbC5jb208L2E+Jmd0Ozxicj4NCjxiPkNjOjwvYj48 c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PGEgaHJlZj0i bWFpbHRvOmJyZW50LmJpbGdlcj00MHZlcml6b24uY29tQGRtYXJjLmlldGYub3JnIj5icmVudC5i aWxnZXI9NDB2ZXJpem9uLmNvbUBkbWFyYy5pZXRmLm9yZzwvYT48c3BhbiBjbGFzcz0iYXBwbGUt Y29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+Jmx0OzxhIGhyZWY9Im1haWx0bzpicmVudC5i aWxnZXI9NDB2ZXJpem9uLmNvbUBkbWFyYy5pZXRmLm9yZyI+YnJlbnQuYmlsZ2VyPTQwdmVyaXpv bi5jb21AZG1hcmMuaWV0Zi5vcmc8L2E+Jmd0OzsNCiBSb2JlcnRvIFBlb24gJmx0OzxhIGhyZWY9 Im1haWx0bzpmZW5peEBmYi5jb20iPmZlbml4QGZiLmNvbTwvYT4mZ3Q7OzxzcGFuIGNsYXNzPSJh cHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48YSBocmVmPSJtYWlsdG86cXVpY0Bp ZXRmLm9yZyI+cXVpY0BpZXRmLm9yZzwvYT48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNw YWNlIj4mbmJzcDs8L3NwYW4+Jmx0OzxhIGhyZWY9Im1haWx0bzpxdWljQGlldGYub3JnIj5xdWlj QGlldGYub3JnPC9hPiZndDs7PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5i c3A7PC9zcGFuPjxhIGhyZWY9Im1haWx0bzpicmVudC5iaWxnZXJAdmVyaXpvbi5jb20iPmJyZW50 LmJpbGdlckB2ZXJpem9uLmNvbTwvYT48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNl Ij4mbmJzcDs8L3NwYW4+Jmx0OzxhIGhyZWY9Im1haWx0bzpicmVudC5iaWxnZXJAdmVyaXpvbi5j b20iPmJyZW50LmJpbGdlckB2ZXJpem9uLmNvbTwvYT4mZ3Q7Ow0KIElhbiBTd2V0dCAmbHQ7PGEg aHJlZj0ibWFpbHRvOmlhbnN3ZXR0PTQwZ29vZ2xlLmNvbUBkbWFyYy5pZXRmLm9yZyI+aWFuc3dl dHQ9NDBnb29nbGUuY29tQGRtYXJjLmlldGYub3JnPC9hPiZndDs8YnI+DQo8Yj5TdWJqZWN0Ojwv Yj48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+UmU6IFtF XSBEb1MtaW5nIFFVSUMgc2VydmVycyBpcyB0b28gZWFzeTxzcGFuIGNsYXNzPSJhcHBsZS1jb252 ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0 O2ZvbnQtZmFtaWx5OkhlbHZldGljYSI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9k aXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTpIZWx2ZXRpY2EiPiZuYnNw OzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttYXJnaW4tYm90dG9tOjEyLjBwdCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhIj48bzpw PiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1 LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8i PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYSI+T24g SnVsIDIyLCAyMDE5LCBhdCA5OjE2IFBNLCBXYXRzb24gTGFkZCAmbHQ7PGEgaHJlZj0ibWFpbHRv OndhdHNvbmJsYWRkQGdtYWlsLmNvbSI+d2F0c29uYmxhZGRAZ21haWwuY29tPC9hPiZndDsgd3Jv dGU6PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNh Ij4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bWFyZ2luLWJvdHRvbTox Mi4wcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTMuNXB0O2ZvbnQtZmFtaWx5OkhlbHZldGlj YSI+T24gTW9uLCBKdWwgMjIsIDIwMTkgYXQgNToyOSBQTTxicj4NCiZsdDs8L3NwYW4+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhIj48YSBocmVmPSJt YWlsdG86YnJlbnQuYmlsZ2VyPTQwdmVyaXpvbi5jb21AZG1hcmMuaWV0Zi5vcmciPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTMuNXB0Ij5icmVudC5iaWxnZXI9NDB2ZXJpem9uLmNvbUBkbWFyYy5p ZXRmLm9yZzwvc3Bhbj48L2E+PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTMuNXB0O2Zv bnQtZmFtaWx5OkhlbHZldGljYSI+Jmd0Ow0KIHdyb3RlOjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEwLjBwdDtmb250LWZhbWlseTpIZWx2ZXRpY2EiPjxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4w cHQiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRv O21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEzLjVw dDtmb250LWZhbWlseTpIZWx2ZXRpY2EiPjxicj4NCjxicj4NCjxicj4NCk9uIEp1bCAyMiwgMjAx OSwgYXQgMTA6MTAgQU0sIFJvYmVydG8gUGVvbiAmbHQ7PGEgaHJlZj0ibWFpbHRvOmZlbml4QGZi LmNvbSI+ZmVuaXhAZmIuY29tPC9hPiZndDsgd3JvdGU6PGJyPg0KPGJyPg0KV2hlbiB5b3XigJly ZSB0YWxraW5nIGFib3V0IHByZS1hdXRoZW50aWNhdGlvbiwgYXJlIHlvdSByZWZlcnJpbmcgdG8g dGhlIDAtcnR0IHN0dWZmPzxicj4NCjxicj4NCjxicj4NCjAtUlRUIGlzIGdvb2Qgc3R1ZmYuIEl0 IHJlZHVjZXMgdGltZSBmb3IgYSBkZXZpY2UgdGhhdOKAmXMgYWxyZWFkeSBrbm93biB0byBiZSBh dXRob3JpemVkIHRvIGNvbm5lY3QgdG8gdGhlIHNlcnZlci48YnI+DQo8YnI+DQpQYXJ0IG9mIHRo ZSBwcm9ibGVtIGlzIHRvIHN0b3AgcmVzb3VyY2UgRG9TLiBUaGUgb3RoZXIgcGFydCBpcyBhYm91 dCBpbmZvcm1hdGlvbiBsZWFrYWdlLjxicj4NCjxicj4NCkxldOKAmXMgYXNzdW1lIGEgdGltZSB3 aGVuIGFsbCB3ZWJzaXRlIHVzZSBRVUlDIGFuZCBsZXQncyB0YWtlIGFuIGFkdmVyc2FyeSB3aG8g aGFzIGp1c3QgbGVhcm5lZCBhYm91dCBhIHZ1bG5lcmFiaWxpdHkgaW4gV29yZHByZXNzLiBUaGUg YWR2ZXJzYXJ5IHdhbnRzIHRvIHNjYW4gdGhlIEludGVybmV0IGZpbmRpbmcgV29yZHByZXNzIHNp dGVzLiBOb3csIGlmIHRoZSBRVUlDIGNvbm5lY3Rpb24gcmVxdWlyZWQgcHJlLWF1dGhlbnRpY2F0 aW9uLCB0aGVuDQogdGhlIHNlcnZlciB3b3VsZCBiZSBibGFjayB0byB0aGUgY29ubmVjdGlvbiBh bmQgdGhlIGFkdmVyc2FyeSBjb3VsZCBub3QgZGV0ZXJtaW5lIGlmIHRoZSBzaXRlIHVzZXMgV29y ZHByZXNzLiBCdXQsIGFzIGl0IHN0YW5kcyB0b2RheSwgaW4gdGhpcyBmdXR1cmUgdGltZSwgdGhl IGFkdmVyc2FyeSBzY2FucyB0aGUgSW50ZXJuZXQsIGNvbm5lY3RzIHRvIHRoZSBzZXJ2ZXIsIGFu ZCBpcyBoYW5kZWQgYSBXb3JkcHJlc3MgbG9naW4gc2NyZWVuLiBOb3cNCiB0aGUgYWR2ZXJzYXJ5 IGtub3dzIHdoZXJlIHRvIGF0dGFjay48L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4w cHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Jsb2Nr cXVvdGU+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1 dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTMu NXB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYSI+PGJyPg0KSWYgY29ubmVjdGlvbiByZXF1aXJlcyBw cmVhdXRoZW50aWNhdGlvbiB0aGVuIG5vIG9uZSBjYW4gc2VlIHRoZSBzaXRlLCBubz88L3NwYW4+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhIj48bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxibG9ja3F1b3RlIHN0 eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttYXJnaW4tYm90 dG9tOjEyLjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6SGVs dmV0aWNhIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8YmxvY2txdW90ZSBzdHlsZT0i bWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6 YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMy41cHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNh Ij48YnI+DQpJbiB0aGUgZW50ZXJwcmlzZSBpdCBpcyBhIGxpdHRsZSBkaWZmZXJlbnQuIENvbXBh bmllcyBpbXBsZW1lbnQgcmV2ZXJzZSBwcm94aWVzIHRvIHRyeSB0byBwcm90ZWN0IHNlcnZlcnMg ZnJvbSB1bmF1dGhvcml6ZWQgdXNlcnMuIEJ1dCB3aGF0IGlmIHRoZSBzZXJ2ZXJzIHJlcXVpcmVk IGEgcHJlLWF1dGhlbnRpY2F0aW9uIHRva2VuLiBUaGVuLCByZXZlcnNlIHByb3hpZXMgd291bGQg bm90IGJlIG5lZWRlZC48L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1m YW1pbHk6SGVsdmV0aWNhIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Jsb2NrcXVvdGU+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1h cmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTMuNXB0O2ZvbnQt ZmFtaWx5OkhlbHZldGljYSI+PGJyPg0KU28gSSB0aGluayB0aGVyZSBhcmUgdHdvIGRpZmZlcmVu dCB0aGluZ3MgaGVyZSwgb3IgbWF5YmUgSSdtIG1pc3VuZGVyc3RhbmRpbmc6PGJyPg0KMTogV2Ug aGF2ZSBzZXJ2ZXJzIHRoYXQgaGF2ZSBhIGxpbWl0ZWQgbnVtYmVyIG9mIGNsaWVudHMgdGhhdCB3 aWxsPGJyPg0KZXZlciB3YW50IHRvIGNvbm5lY3QgdG8gdGhlbSwgYW5kIHdhbnQgdG8gZW5hYmxl IG90aGVyIGRldmljZXMgdG88YnI+DQpmaWx0ZXIgdGhlIHRyYWZmaWMsIHNvIG5lZWQgc29tZSBt ZWNoYW5pc20gdGhhdCBlbmFibGVzIGEgbWlkZGxlYm94IHRvPGJyPg0KZmlsdGVyLjwvc3Bhbj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTpIZWx2ZXRpY2EiPjxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZh bWlseTpIZWx2ZXRpY2EiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9k aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87 bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0 O2ZvbnQtZmFtaWx5OkhlbHZldGljYSI+Tm8gbWlkZGxlIGJveCEgUHJlLWF1dGhlbnRpY2F0aW9u IG1ha2VzIHNlcnZlcnMgc2VsZi1kZWZlbmRpbmcuIExhY2sgb2YgcHJlLWF1dGhlbnRpY2F0aW9u IGlzIHdoeSB3ZSBoYXZlIG1pZGRsZSBib3hlcy48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0 OmF1dG87bWFyZ2luLWJvdHRvbToxMi4wcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0 O2ZvbnQtZmFtaWx5OkhlbHZldGljYSI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPGJs b2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRv O21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEzLjVw dDtmb250LWZhbWlseTpIZWx2ZXRpY2EiPjI6IFdlIGhhdmUgc2VydmVycyBnZW5lcmFsbHkgYXZh aWxhYmxlIHRvIHRoZSBwdWJsaWMgYW5kIGFyZSBjb25jZXJuZWQ8YnI+DQp0aGF0IHRoZSBRVUlD IHZlcnNpb24gb2YgYSBTWU4gZmxvb2QgY2FuJ3QgYmUgZGVhbHQgd2l0aCAoZGVzcGl0ZTxicj4N CmV2aWRlbmNlIHRvIHRoZSBjb250cmFyeSkuPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTAuMHB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYSI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9k aXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYSI+Jm5ic3A7 PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6 YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNh Ij5Db21wYW5pZXMgYW5kIHdlYnNpdGUgb3duZXJzIGhhdmUgdG8gcGF5IGZvciBhbnRpLURvUyBz ZXJ2aWNlcyZuYnNwO2Zyb20gdGhlIGxpa2VzIG9mIFZlcml6b24gYW5kIG90aGVycyBCRUNBVVNF IHNlcnZlcnMgbGlzdGVuIHRvDQogYWxsIGNsaWVudHMuIFdpdGggcHJlLWF1dGhlbnRpY2F0aW9u LCB0aGUgbmVlZCB0byBoYXZlIGFuIGFudGktRG9TIHNlcnZpY2Ugd291bGQgYmUgZ3JlYXRseSBy ZWR1Y2VkIGJlY2F1c2Ugc2VydmVycyB3b3VsZCBub3QgcmVzcG9uZCB0byB1bmF1dGhvcml6ZWQg Y2xpZW50cy48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1p bHk6SGVsdmV0aWNhIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6 YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MC4wcHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhIj5BbmQgdGhlIHBvaW50IGFib3V0IGluZm9ybWF0 aW9uIGxlYWthZ2UgaXMgaW1wb3J0YW50LCB0b28uPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYSI+Jm5ic3A7PG86cD48L286cD48L3Nw YW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYSI+QnJlbnQ8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bWFyZ2luLWJvdHRvbToxMi4wcHQiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYSI+PG86cD4m bmJzcDs8L286cD48L3NwYW4+PC9wPg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4w cHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjEzLjVwdDtmb250LWZhbWlseTpIZWx2ZXRpY2EiPjxicj4N CkkgZG9uJ3Qga25vdyBtdWNoIGFib3V0IGhvdyBDbG91ZGZsYXJlIChteSBwbGFjZSBvZiBlbXBs b3ltZW50KSAmbmJzcDtkZWFsczxicj4NCndpdGggMiBidXQgaG9wZWZ1bGx5IHNvbWUgcGVvcGxl IHdobyBkby9pbXBsZW1lbnRvcnMgY2FuIHNwZWFrIHVwPGJyPg0KYWJvdXQgaG93IG11Y2ggb2Yg YSBwcm9ibGVtIGl0IGlzLiBCdXQgMSBpcyBJIHRoaW5rIHZlcnkgbXVjaCBhPGJyPg0Kbm9uZ29h bDogbWlkZGxlYm94IG9zc2lmaWNhdGlvbiBpcyBwYXJ0IG9mIHRoZSByZWFzb24gd2UgaGF2ZSBR VUlDLjxicj4NCjxicj4NClNpbmNlcmVseSw8YnI+DQpXYXRzb24gTGFkZDwvc3Bhbj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTpIZWx2ZXRpY2EiPjxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 SGVsdmV0aWNhIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tYm90dG9tOjEzLjVwdCI+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEzLjVwdDtmb250LWZh bWlseTpIZWx2ZXRpY2EiPiZuYnNwOzwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBw dDtmb250LWZhbWlseTpIZWx2ZXRpY2EiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0K PC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTMuNXB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYSI+Jm5ic3A7PC9zcGFuPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYSI+PG86cD48L286 cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1 dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTMuNXB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYSI+ QnJlbnQgQmxpZ2VyPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFt aWx5OkhlbHZldGljYSI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJn aW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEzLjVwdDtmb250LWZh bWlseTpIZWx2ZXRpY2EiPkRpcmVjdG9yLVRlY2hub2xvZ3kmbmJzcDtWZXJpem9uIFNEUCZuYnNw Ozwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTpIZWx2ZXRp Y2EiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1h bHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMy41cHQ7Zm9udC1mYW1pbHk6SGVsdmV0 aWNhIj48YSBocmVmPSJtYWlsdG86YnJlbnQuYmlsZ2VyQHZlcml6b24uY29tIj5icmVudC5iaWxn ZXJAdmVyaXpvbi5jb208L2E+PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2Zv bnQtZmFtaWx5OkhlbHZldGljYSI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTgu MHB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYSI+Jm5ic3A7PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYSI+PG86cD48L286cD48L3NwYW4+PC9w Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjEzLjVwdDtmb250LWZhbWlseTpIZWx2ZXRpY2EiPiZuYnNwOzwvc3Bhbj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTpIZWx2ZXRpY2EiPjxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9Im1h cmdpbi1ib3R0b206MTIuMHB0Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYSI+Jm5ic3A7PG86cD48L286cD48 L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTpIZWx2ZXRpY2EiPiZuYnNw OzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0K PC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhIj4mbmJzcDs8bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8 ZGl2IHN0eWxlPSJtYXJnaW4tYm90dG9tOjEzLjVwdCI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjEzLjVwdDtmb250LWZhbWlseTpIZWx2ZXRpY2EiPiZuYnNw Ozwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTpIZWx2ZXRp Y2EiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTMuNXB0O2ZvbnQt ZmFtaWx5OkhlbHZldGljYSI+Jm5ic3A7PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAu MHB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYSI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10 b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTMuNXB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYSI+QnJlbnQgQmxpZ2VyPC9zcGFuPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYSI+PG86cD48 L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjEzLjVwdDtmb250LWZhbWlseTpIZWx2ZXRpY2EiPkRpcmVj dG9yLVRlY2hub2xvZ3kmbmJzcDtWZXJpem9uIFNEUCZuYnNwOzwvc3Bhbj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTpIZWx2ZXRpY2EiPjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFy Z2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMy41cHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhIj48YSBocmVmPSJtYWlsdG86 YnJlbnQuYmlsZ2VyQHZlcml6b24uY29tIj5icmVudC5iaWxnZXJAdmVyaXpvbi5jb208L2E+PC9z cGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYSI+ PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8 L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPC9i bG9ja3F1b3RlPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpw PjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibWFyZ2luLWJvdHRvbToxMy41cHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTMuNXB0 O2ZvbnQtZmFtaWx5OkhlbHZldGljYTtjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3Nw YW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMy41cHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhO2NvbG9yOmJsYWNrIj48bzpw PiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEzLjVwdDtmb250LWZhbWlseTpIZWx2ZXRpY2E7 Y29sb3I6YmxhY2siPkJyZW50IEJsaWdlcjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTMuNXB0 O2ZvbnQtZmFtaWx5OkhlbHZldGljYTtjb2xvcjpibGFjayI+RGlyZWN0b3ItVGVjaG5vbG9neSZu YnNwO1Zlcml6b24gU0RQJm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMy41cHQ7Zm9u dC1mYW1pbHk6SGVsdmV0aWNhO2NvbG9yOmJsYWNrIj48YSBocmVmPSJtYWlsdG86YnJlbnQuYmls Z2VyQHZlcml6b24uY29tIj5icmVudC5iaWxnZXJAdmVyaXpvbi5jb208L2E+PG86cD48L286cD48 L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxOC4wcHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhO2NvbG9yOmJsYWNrIj48 bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTMuNXB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYTtjb2xv cjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tYm90dG9tOjEyLjBwdCI+PG86cD4mbmJz cDs8L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxicj4NCjxicj4NCjxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_2B1A8CB8B012465CB1CE6DECE9BDEC72fbcom_-- From nobody Tue Jul 23 08:38:03 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7756F120406 for ; Tue, 23 Jul 2019 08:37:45 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -17.499 X-Spam-Level: X-Spam-Status: No, score=-17.499 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, ENV_AND_HDR_SPF_MATCH=-0.5, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5, USER_IN_DEF_SPF_WL=-7.5] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3Na3Qe1SSRsO for ; Tue, 23 Jul 2019 08:37:41 -0700 (PDT) Received: from mail-vs1-xe30.google.com (mail-vs1-xe30.google.com [IPv6:2607:f8b0:4864:20::e30]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2D2C71203B6 for ; Tue, 23 Jul 2019 08:37:41 -0700 (PDT) Received: by mail-vs1-xe30.google.com with SMTP id v129so29066508vsb.11 for ; Tue, 23 Jul 2019 08:37:41 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=KjFcZbFOXA/3xLyOLWBZeTKs+2je2pU6jKp0rUuAZSk=; b=v8bVtu+ksIn4kO98yh1XYwHvJuJBKtS5YkFfkAlAcduEe6sVZVfLMg86uSAqMrnYsf RLf8wGrUoYZ713s4t+x70W8rOrYERX/Jb2AY5VB9OzM0V294M9xsvF61hcbeFCRRuSfs HgN54dNVjbVWpk0WAzI+nknKLVbuO6bv01JiskhHSFWLJ0xzjMP5Q6YStL5zu8JXSz/8 H8S6YOlBYh7fr4OXtOnaWLVOnDHYtTBLbTiQO7Mg+o+QQBHrbgu+X0YmrxUPp7IFEA17 /Mh7ZVuflNLZYVpWdpYjhoYpq8ANUQ3n74GQS9mHloiO+6XZ+AmLLfbE4KoUgBKf4xB6 Icmw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=KjFcZbFOXA/3xLyOLWBZeTKs+2je2pU6jKp0rUuAZSk=; b=lzeFeSzFeEuc0TSoQltLib8S6AQNVpOSo2sYReYAMrLJkkcBKBQNPV4Kj1IDIS8e1l /d3smxtBBSGoXyjcrGbp/fy/FlrdFAqMFUKC6O8y/hAJ6ndcOBLD/8dyc351bnZDnTyj ALhEiH0211TbGg1wnK8h3DFDm0lXBJM9c9tW8l4mXYSdumSdNDCaoDPniJXfllA/Blui u8oAa+tPuU5K8Y/FAYxNNUhpY7AR4bsBEGYWc+WfeIOG22iwadSOqemA7EpbIo/3dmph f7a7vvnGTUkGTHy9yAHY9TBI3ffsKsT7LhkZeKzi/KxQ+GYZ54T8lvdBpcrRS1ItcJ0t KbTw== X-Gm-Message-State: APjAAAXzF9b5MBMqWZ2SD9uxWR5AJ1Bce/qWdqwWvQCnuQqoy7NzEVSX tcieC5TO0YFao60pAKRJCPSQ+euyoMStqJMSThtuDQ== X-Google-Smtp-Source: APXvYqw7328LdDEQuf8TIIo3b4QPI68nnE4n3lb6TUzHIjictqDKuBR6RAkmD3724k5hN1P4PH4rVaJUM0lOrsacsc0= X-Received: by 2002:a67:e41a:: with SMTP id d26mr47807623vsf.71.1563896259834; Tue, 23 Jul 2019 08:37:39 -0700 (PDT) MIME-Version: 1.0 References: <5c631764-25e2-ce37-3f84-8eca5a8378eb@warmcat.com> In-Reply-To: From: Peter Thatcher Date: Tue, 23 Jul 2019 11:37:04 -0400 Message-ID: Subject: Re: [dispatch] [hybi] WebTransport Side Meeting (Tuesday, 15:20) To: Eric Kinnear Cc: Andy Green , Victor Vasiliev , hybi@ietf.org, David Schinazi , dispatch@ietf.org, HTTP Working Group , IETF QUIC WG Content-Type: multipart/alternative; boundary="00000000000008df14058e5af90e" Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 23 Jul 2019 15:37:55 -0000 --00000000000008df14058e5af90e Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable At a quick glance, https://datatracker.ietf.org/doc/draft-kinnear-httpbis-http2-transport/?inc= lude_text=3D1 seems like a decent fit for the WebTransport API. It seems better than trying to fit the WebSocket API. But do we expect people to implement it on servers before they implement QUIC? I suppose even if it takes longer, it may have the advantage of working on more networks than QUIC and HTTP/3 potentially (for networks that still block UDP, for example). On Mon, Jul 22, 2019 at 5:29 PM Eric Kinnear wrote: > > > > On Jul 22, 2019, at 4:59 PM, Andy Green wrote: > > > > > > > > On 7/22/19 1:36 PM, Victor Vasiliev wrote: > >> Hello everyone, > >> Today, at the dispatch working group meeting (18:10), I am going to > present WebTransport. WebTransport is a protocol framework that allows > multiplexed and datagram-oriented transport protocols to be used by the w= eb > applications (think =E2=80=9CWebSocket for UDP=E2=80=9D). > > > > "Historically, web applications that needed bidirectional data stream > > between a client and a server could rely on WebSockets [RFC6455], a > > message-based protocol compatible with Web security model. However, > > since the abstraction it provides is a single ordered stream of > > messages, it suffers from head-of-line blocking (HOLB), meaning that > > all messages must be sent and received in order even if they are > > independent and some of them are no longer needed. This makes it a > > poor fit for latency sensitive applications which rely on partial > > reliability and stream independence for performance." > > > > The HOLB isn't really entirely the case... RFC6455 ws allows arbitrary > fragmentation of messages allowing interleaving with control frames. > > > > ws-over-h2 allows you to can the h2 stream when you want as well. > > > > " Each new stream would require a WebSocket handshake to agree on > > application protocol used, meaning that it would take at least one > > RTT for each new stream before the client can write to it." > > > > Yes it was knowingly done as a hack to try to encourage uptake from > browser vendors... it's not really integrated into the encapsulating > protocol. > > > >> * WebTransport overview: > >> https://tools.ietf.org/html/draft-vvv-webtransport-overview-00 > >> * QuicTransport: > >> https://tools.ietf.org/html/draft-vvv-webtransport-quic-00 > >> * Http3Transport: > >> https://tools.ietf.org/html/draft-vvv-webtransport-http3-00 > > > > There's no h2 transport implementation? > > > > Not everything that might want to use this will get h3 capability in a > reasonable timeframe. If there's more momentum behind it than RFC8441 > there's probably room for a generic long-lived bidirectional extension to > h2 either reusing DATA or a new frame type. > > Definitely agree! I know that we=E2=80=99ve been chatting a bit with Vict= or about > https://datatracker.ietf.org/doc/draft-kinnear-httpbis-http2-transport/ > which aims to provide this, and I think it would be worth making sure tha= t > this works nicely with WebTransport. > -00 for that document covers effectively what you=E2=80=99d get with a ne= w frame > type, and -01 extends 8441 to cover more than just WebSockets with the > extended CONNECT handshake. > I don=E2=80=99t have a particularly strong preference for the mechanism u= sed, but > rather care more about the outcome =E2=80=94 very much agree that this is= a useful > component. > > Thanks, > Eric > > > > > It's a good idea to have it ride on other protocols. Not doing this > really hurt RFC6455 ws since deploying it usually needed extra, different > servers with the attendant difficulties interoperating with other protoco= ls. > > > > I really suggest thinking through the effects of not having an RFC6455 > type subprotocol (unless I failed to spot it). It really makes an implic= it > assumption about what the stream will carry that doesn't scale beyond one > server carrying one thing. That's not how things tend to pan out if the > protocol is useful. The url path could be hacked to imply the subprotoco= l > but if that's not standardized it's still a mess. And the subprotocol > binding may be orthogonal to the url layout complicating things needlessl= y. > > > > -Andy > > > >> * Web API Spec draft: https://wicg.github.io/web-transport/ > >> * Discussion on use cases: > >> https://discourse.wicg.io/t/webtransport-proposal/3508 > >> Cheers, > >> Victor. > >> _______________________________________________ > >> hybi mailing list > >> hybi@ietf.org > >> https://www.ietf.org/mailman/listinfo/hybi > > > > _______________________________________________ > dispatch mailing list > dispatch@ietf.org > https://www.ietf.org/mailman/listinfo/dispatch > --00000000000008df14058e5af90e Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable

At a quick glance,=C2=A0https://datatracker.ietf.org/doc/draft-kinnear-httpbis-http2-transpo= rt/?include_text=3D1=C2=A0seems like a decent fit for the WebTransport= =C2=A0=C2=A0API.=C2=A0 It seems better than trying to fit the WebSocket API= .=C2=A0 But do we expect people to implement it on servers before they impl= ement QUIC?=C2=A0 I suppose even if it takes longer, it may have the advant= age of working on more networks than QUIC and HTTP/3 potentially (for netwo= rks that still block UDP, for example).=C2=A0


=

= On Mon, Jul 22, 2019 at 5:29 PM Eric Kinnear <ekinnear=3D40apple.com@dmarc.ietf.org> wrote:


> On Jul 22, 2019, at 4:59 PM, Andy Green <andy@warmcat.com> wrote:
>
>
>
> On 7/22/19 1:36 PM, Victor Vasiliev wrote:
>> Hello everyone,
>> Today, at the dispatch working group meeting (18:10), I am going t= o present WebTransport. WebTransport is a protocol framework that allows mu= ltiplexed and datagram-oriented transport protocols to be used by the web a= pplications (think =E2=80=9CWebSocket for UDP=E2=80=9D).
>
> "Historically, web applications that needed bidirectional data st= ream
>=C2=A0 =C2=A0between a client and a server could rely on WebSockets [RF= C6455], a
>=C2=A0 =C2=A0message-based protocol compatible with Web security model.= =C2=A0 However,
>=C2=A0 =C2=A0since the abstraction it provides is a single ordered stre= am of
>=C2=A0 =C2=A0messages, it suffers from head-of-line blocking (HOLB), me= aning that
>=C2=A0 =C2=A0all messages must be sent and received in order even if th= ey are
>=C2=A0 =C2=A0independent and some of them are no longer needed.=C2=A0 T= his makes it a
>=C2=A0 =C2=A0poor fit for latency sensitive applications which rely on = partial
>=C2=A0 =C2=A0reliability and stream independence for performance."=
>
> The HOLB isn't really entirely the case... RFC6455 ws allows arbit= rary fragmentation of messages allowing interleaving with control frames. >
> ws-over-h2 allows you to can the h2 stream when you want as well.
>
> " Each new stream would require a WebSocket handshake to agree on=
>=C2=A0 =C2=A0 =C2=A0 application protocol used, meaning that it would t= ake at least one
>=C2=A0 =C2=A0 =C2=A0 RTT for each new stream before the client can writ= e to it."
>
> Yes it was knowingly done as a hack to try to encourage uptake from br= owser vendors... it's not really integrated into the encapsulating prot= ocol.
>
>>=C2=A0 * WebTransport overview:
>>=C2=A0 =C2=A0 https://tools.ie= tf.org/html/draft-vvv-webtransport-overview-00
>>=C2=A0 * QuicTransport:
>>=C2=A0 =C2=A0 https://tools.ietf.o= rg/html/draft-vvv-webtransport-quic-00
>>=C2=A0 * Http3Transport:
>>=C2=A0 =C2=A0 https://tools.ietf.= org/html/draft-vvv-webtransport-http3-00
>
> There's no h2 transport implementation?
>
> Not everything that might want to use this will get h3 capability in a= reasonable timeframe.=C2=A0 If there's more momentum behind it than RF= C8441 there's probably room for a generic long-lived bidirectional exte= nsion to h2 either reusing DATA or a new frame type.

Definitely agree! I know that we=E2=80=99ve been chatting a bit with Victor= about https://datatracker.ie= tf.org/doc/draft-kinnear-httpbis-http2-transport/ which aims to provide= this, and I think it would be worth making sure that this works nicely wit= h WebTransport.
-00 for that document covers effectively what you=E2=80=99d get with a new = frame type, and -01 extends 8441 to cover more than just WebSockets with th= e extended CONNECT handshake.
I don=E2=80=99t have a particularly strong preference for the mechanism use= d, but rather care more about the outcome =E2=80=94 very much agree that th= is is a useful component.

Thanks,
Eric

>
> It's a good idea to have it ride on other protocols.=C2=A0 Not doi= ng this really hurt RFC6455 ws since deploying it usually needed extra, dif= ferent servers with the attendant difficulties interoperating with other pr= otocols.
>
> I really suggest thinking through the effects of not having an RFC6455= type subprotocol (unless I failed to spot it).=C2=A0 It really makes an im= plicit assumption about what the stream will carry that doesn't scale b= eyond one server carrying one thing.=C2=A0 That's not how things tend t= o pan out if the protocol is useful.=C2=A0 The url path could be hacked to = imply the subprotocol but if that's not standardized it's still a m= ess.=C2=A0 And the subprotocol binding may be orthogonal to the url layout = complicating things needlessly.
>
> -Andy
>
>>=C2=A0 * Web API Spec draft: https://wicg.github.io/web= -transport/
>>=C2=A0 * Discussion on use cases:
>>=C2=A0 =C2=A0 https://discourse.wicg.i= o/t/webtransport-proposal/3508
>> Cheers,
>>=C2=A0 =C2=A0Victor.
>> _______________________________________________
>> hybi mailing list
>> hybi@ietf.org
>> https://www.ietf.org/mailman/listinfo/hybi >

_______________________________________________
dispatch mailing list
dispatch@ietf.org
https://www.ietf.org/mailman/listinfo/dispatch
--00000000000008df14058e5af90e-- From nobody Tue Jul 23 08:42:59 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8ED3512033C for ; Tue, 23 Jul 2019 08:42:35 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.698 X-Spam-Level: X-Spam-Status: No, score=-2.698 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=fb.com header.b=GpuzMUw3; dkim=pass (1024-bit key) header.d=fb.onmicrosoft.com header.b=kHK5+GCA Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YAxaAX0L6QLn for ; Tue, 23 Jul 2019 08:42:32 -0700 (PDT) Received: from mx0b-00082601.pphosted.com (mx0b-00082601.pphosted.com [67.231.153.30]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8A9DB12034B for ; Tue, 23 Jul 2019 08:42:26 -0700 (PDT) Received: from pps.filterd (m0109332.ppops.net [127.0.0.1]) by mx0a-00082601.pphosted.com (8.16.0.27/8.16.0.27) with SMTP id x6NFci1K022585; Tue, 23 Jul 2019 08:42:23 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fb.com; h=from : to : cc : subject : date : message-id : content-type : mime-version; s=facebook; bh=3BELe0PvCjyef0hkA95J3u+6+3Lizw+gKk4g1jMIHW4=; b=GpuzMUw3ETU/764Fayf+N+bNJK4W8m1RKPaoYi2hSTh2xjVBfoZUKDnP2YuZ75QNQ+jH S4qWc8kk5CmSAi81HZeauCuKJoTtP+7mC4fXEP3rld8RGFFtbhR7GunkjBtyIfq/wV1Q jOPeN3kcJN48QIlv6M6nspZkhmQlyr8xoMo= Received: from maileast.thefacebook.com ([163.114.130.16]) by mx0a-00082601.pphosted.com with ESMTP id 2twyfk9a37-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NOT); Tue, 23 Jul 2019 08:42:22 -0700 Received: from ash-exhub203.TheFacebook.com (2620:10d:c0a8:83::5) by ash-exhub102.TheFacebook.com (2620:10d:c0a8:82::f) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.1713.5; Tue, 23 Jul 2019 08:42:21 -0700 Received: from NAM02-CY1-obe.outbound.protection.outlook.com (100.104.31.183) by o365-in.thefacebook.com (100.104.36.102) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.1713.5 via Frontend Transport; Tue, 23 Jul 2019 08:42:21 -0700 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=dgD2Je1ugOoZ8iPN5KSSDLV1AOM8Uy4F4FrDmgV+XVo8CJgTLorB1twQNmqUgs/WWv0ykhS+UPtMkXjFXG2PsX0INjHqu+kx31YB5kfZDQev1tzlRfLUuD4+hsT4TYFcZqcrayxabxRm37oaO7z6n//SvsNc+SElCD08xvGWEkva94FNmfpbVYqI/PC5a65ATlPXCMW4BTjAQU6DllErHGinzjltLfqrtmKzIvMdWu/Qvpq0kEKyeCzgICdrOXAsWiyA36Omf5dgsVFgoLUiJzBKrX4eR9RN55UapM3gBicYTKUr5AMuekEJikwFuZRracDU9HbjJZnIiEeUKcBCNg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=3BELe0PvCjyef0hkA95J3u+6+3Lizw+gKk4g1jMIHW4=; b=Owjmf7Jh0acLq6xt9EWdUmSZRIwVPCRn/T5/HODIIct39Pyk1TTUbnnm6n+kNYGS+tRHuNIXv/Mq3DxmVZ14hgijx5+F4ad8Mo6M3KJ75Yc8LCP6tlOFWX9TXq19sS2Djg0XX07Roe3gRzfCCZF1VG19d7+j4/B+BdR3Hed1aYZTHafEo6PsEVt2o2EQhjdRjQMqqWO1Xv/pQkTGV+n+LS68qPMAO7ZNfheqXpS+AP0eh3NfW79vSfUzlOum7YblgVUZXFTpopNa4aGPP7Q6n1RK/60A9iG+QktJ+OCtku9WC0XG4mNHCR5HJe8kkGM9i7HcoPIK6yjmKF8aA6x6oA== ARC-Authentication-Results: i=1; mx.microsoft.com 1;spf=pass smtp.mailfrom=fb.com;dmarc=pass action=none header.from=fb.com;dkim=pass header.d=fb.com;arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fb.onmicrosoft.com; s=selector1-fb-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=3BELe0PvCjyef0hkA95J3u+6+3Lizw+gKk4g1jMIHW4=; b=kHK5+GCAH0hX9EZti3/5i/SeECOSSI1HCkJVg97QqBiYQsgxJUhfatK4+kZ4znBxPT/G6Ey/+i3VVooSM1zyAalCqjbIOOn07w9jyQfb/ine+fIIDpznwzThfCIj7eIzaHulP6wnNeMeFVDjzPiWHwzeLalYT/LM5jbMZw9hiXY= Received: from CY4PR15MB1542.namprd15.prod.outlook.com (10.172.160.9) by CY4PR15MB1367.namprd15.prod.outlook.com (10.172.159.23) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2094.17; Tue, 23 Jul 2019 15:42:20 +0000 Received: from CY4PR15MB1542.namprd15.prod.outlook.com ([fe80::35ce:8d12:c463:7cfc]) by CY4PR15MB1542.namprd15.prod.outlook.com ([fe80::35ce:8d12:c463:7cfc%12]) with mapi id 15.20.2094.013; Tue, 23 Jul 2019 15:42:20 +0000 From: Roberto Peon To: "brent.bilger@verizon.com" , =?utf-8?B?TWlra2VsIEZhaG7DuGUgSsO4cmdlbnNlbg==?= CC: Watson Ladd , "quic@ietf.org" , "brent.bilger=40verizon.com@dmarc.ietf.org" , Ian Swett Subject: Re: [Potential Spoof] Re: [E] DoS-ing QUIC servers is too easy Thread-Topic: [Potential Spoof] Re: [E] DoS-ing QUIC servers is too easy Thread-Index: AQHVQW022GUx7VzY/0iKzxymPkVU0g== Date: Tue, 23 Jul 2019 15:42:20 +0000 Message-ID: <6A50F13B-0526-421F-9D20-B997DB503CE6@fb.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.1a.0.190609 x-originating-ip: [2001:67c:370:128:4e4:7d58:cf96:a6b8] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 188f8ca8-620c-4574-f0a2-08d70f845924 x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600148)(711020)(4605104)(1401327)(2017052603328)(7193020); SRVR:CY4PR15MB1367; x-ms-traffictypediagnostic: CY4PR15MB1367: x-ms-exchange-purlcount: 3 x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:4714; x-forefront-prvs: 0107098B6C x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(136003)(39860400002)(396003)(366004)(346002)(376002)(199004)(189003)(478600001)(45080400002)(476003)(46003)(606006)(25786009)(33656002)(53946003)(36756003)(2616005)(5660300002)(486006)(99286004)(66574012)(53936002)(68736007)(4326008)(6512007)(7736002)(54896002)(6436002)(66476007)(64756008)(91956017)(76116006)(66946007)(66446008)(66556008)(2501003)(2906002)(6246003)(53546011)(81156014)(81166006)(71190400001)(71200400001)(6116002)(6506007)(790700001)(316002)(86362001)(54906003)(8936002)(14444005)(102836004)(30864003)(110136005)(14454004)(186003)(8676002)(229853002)(58126008)(236005)(6486002)(6306002)(256004); DIR:OUT; SFP:1102; SCL:1; SRVR:CY4PR15MB1367; H:CY4PR15MB1542.namprd15.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: fb.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam-message-info: hWxS3Lulu8E10Q450UFi1ErI7serqgWqWlIUzghE1ZhXZ5lePYVqqXTcAAyHxZ+akgUQQaVHcfiCQCfMb9btqElNGFvpNssbVu097NKerfYKABaqPFpXquAkvv/LfUSwgWeTN2TaKIE/HqYPt3WlnEZBch8Fu+yOAsjIjBpIZx+4L442uwmuXJUmVPvyhKcTo6PcNHIkQcKm2iqVczqJahswLuIKSUouojtz85rbsKvpBnEphxD898E5nMu2/wb+K99xY9DfeUmREcGgGrgydw72CVflsyUVH3sLt45Vtu7qmRxEwXsQoLm78fWYBd2lnmMm2Ko8JdtnjBPwFOhOmHZaM0U9S9m4YLS02XFpplu9Xt3v9wvZUi6lOyhL+P9zn9yF9JX49cNqck2AP0MSDJVhxY8pBjQaGbdV+VnSyp4= Content-Type: multipart/alternative; boundary="_000_6A50F13B0526421F9D20B997DB503CE6fbcom_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: 188f8ca8-620c-4574-f0a2-08d70f845924 X-MS-Exchange-CrossTenant-originalarrivaltime: 23 Jul 2019 15:42:20.1287 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 8ae927fe-1255-47a7-a2af-5f3a069daaa2 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: fenix@fb.com X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY4PR15MB1367 X-OriginatorOrg: fb.com X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2019-07-23_07:, , signatures=0 X-Proofpoint-Spam-Details: rule=fb_default_notspam policy=fb_default score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1015 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1810050000 definitions=main-1907230156 X-FB-Internal: deliver Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 23 Jul 2019 15:42:45 -0000 --_000_6A50F13B0526421F9D20B997DB503CE6fbcom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SSB0aGluayBNaWtrZWwgaXMvd2FzIHNheWluZyB0aGUgc2FtZSB3LnIudC4gY291bnRlcnMuDQot PVINCg0KRnJvbTogUVVJQyA8cXVpYy1ib3VuY2VzQGlldGYub3JnPiBvbiBiZWhhbGYgb2YgUm9i ZXJ0byBQZW9uIDxmZW5peEBmYi5jb20+DQpEYXRlOiBUdWVzZGF5LCBKdWx5IDIzLCAyMDE5IGF0 IDExOjM4IEFNDQpUbzogImJyZW50LmJpbGdlckB2ZXJpem9uLmNvbSIgPGJyZW50LmJpbGdlckB2 ZXJpem9uLmNvbT4sIE1pa2tlbCBGYWhuw7hlIErDuHJnZW5zZW4gPG1pa2tlbGZqQGdtYWlsLmNv bT4NCkNjOiBXYXRzb24gTGFkZCA8d2F0c29uYmxhZGRAZ21haWwuY29tPiwgInF1aWNAaWV0Zi5v cmciIDxxdWljQGlldGYub3JnPiwgImJyZW50LmJpbGdlcj00MHZlcml6b24uY29tQGRtYXJjLmll dGYub3JnIiA8YnJlbnQuYmlsZ2VyPTQwdmVyaXpvbi5jb21AZG1hcmMuaWV0Zi5vcmc+LCBJYW4g U3dldHQgPGlhbnN3ZXR0PTQwZ29vZ2xlLmNvbUBkbWFyYy5pZXRmLm9yZz4NClN1YmplY3Q6IFtQ b3RlbnRpYWwgU3Bvb2ZdIFJlOiBbRV0gRG9TLWluZyBRVUlDIHNlcnZlcnMgaXMgdG9vIGVhc3kN Cg0KSWYgeW914oCZcmUgaW4gYSDigJxzbWFsbOKAnSBkZXBsb3ltZW50IHRoYXQgaXMgZXhwb3Nl ZCB0byB0aGUgaW50ZXJuZXQsIHRoZW4geW914oCZcmUgZ29pbmcgdG8gYmUgZGVhZCByZWdhcmRs ZXNzIG9mIHRoZSB0b2tlbnMgYmVjYXVzZSB0aGUgbGlua3Mgd2lsbCBiZSBmdWxsIG9mIHVzZWxl c3MgcGFja2V0cyBpZiBzb21lb25lIGRlY2lkZXMgdG8gZG8gYW4gYXR0YWNrIGF0IGFueSByZWFz b25hYmxlIHNjYWxlLg0KDQpJZiB5b3XigJlyZSBpbiBhIOKAnGxhcmdl4oCdIGRlcGxveW1lbnQg dGhhdCBpcyBleHBvc2VkIHRvIHRoZSBpbnRlcm5ldCwgdGhlbiBhIGNvdW50ZXItYmFzZWQgaW1w bGVtZW50YXRpb24gdGhhdCByZXF1aXJlcyBhbnkgc3RhdGUgYXQgc2VydmVycyAodG8gdmVyaWZ5 IHRoZSBjb3VudGVyKSBpcyBsaWtlbHkgdG8gYmUgdmVyeSBleHBlbnNpdmUgYXMgaXQgZWl0aGVy IHJlcXVpcmVzIGFuIFJQQyBmb3IgZWFjaCBpbmNvbWluZyBwYWNrZXQtdG8tYmUtYXV0aGVudGlj YXRlZCwgb3IgaXQgcmVxdWlyZXMgdGhhdCB0aGUgcGFja2V0IGJlIHJvdXRlZCB0byBhIHNwZWNp ZmljIHNlcnZlciwgd2hpY2ggbWFrZXMgdGhlIGluZGl2aWR1YWwgc2VydmVycyBEb1NhYmxlLg0K DQpJZiB5b3UgaGF2ZSBhIOKAnGxhcmdl4oCdIGRlcGxveW1lbnQgYW5kIHVzZSBhIHRpbWUtYmFz ZWQgaW1wbGVtZW50YXRpb24sIHRoZW4geW91IGhhdmUgdGhlIGdvbGRpbG9ja3MtbGlrZSBwcm9i bGVtIG9mIGNob29zaW5nIHRoZSBjb3JyZWN0IFRUTCwgYW5kIHRoYXQgaXMgZ29pbmcgdG8gYmUg ZGlmZmljdWx0IGFzIHRoZSBEb1MgZWZmZWN0aXZlbmVzcyBiZWNvbWVzIGRpcmVjdGx5IChpbnZl cnNlbHkpIHJlbGF0ZWQgdG8gdGhlIFRUTCBsZW5ndGggYXMgVFRMIGxlbmd0aCBkZXRlcm1pbmVz IHRoZSBhbW91bnQgb2YgdGhlIHBvcHVsYXRpb24gdGhhdCBpcyBubyBsb25nZXIgYXV0aGVudGlj YXRlZC4gQSBzaG9ydCBUVEwgbWVhbnMgdmVyeSBsaXR0bGUgYmVuZWZpdCBjYW4gYmUgYXNjcmli ZWQgYnkgaGF2aW5nIHRoZSB0b2tlbiBiZWNhdXNlIGZldyBjbGllbnRzIHdpbGwgcmVtYWluIGF1 dGhlbnRpY2F0ZWQuDQoNClRoZSBjb21iaW5hdGlvbiBvZiB0aW1lIGFuZCBjb3VudGVyIGRvZXNu 4oCZdCBuZWdhdGUgYW55IG9mIHRoZSBkaXNhZHZhbnRhZ2VzIG9mIGVpdGhlci4NCg0KSSBkb27i gJl0IHVsdGltYXRlbHkgc2VlIGEgd2F5IG91dCBvZiBoYXZpbmcgdG8gaGV1cmlzdGljYWxseSBl eGFtaW5lIDUtdHVwbGVzLg0KLT1SDQoNCg0KDQpGcm9tOiAiYnJlbnQuYmlsZ2VyQHZlcml6b24u Y29tIiA8YnJlbnQuYmlsZ2VyQHZlcml6b24uY29tPg0KRGF0ZTogVHVlc2RheSwgSnVseSAyMywg MjAxOSBhdCAxMToxOSBBTQ0KVG86IE1pa2tlbCBGYWhuw7hlIErDuHJnZW5zZW4gPG1pa2tlbGZq QGdtYWlsLmNvbT4NCkNjOiBSb2JlcnRvIFBlb24gPGZlbml4QGZiLmNvbT4sICJicmVudC5iaWxn ZXJAdmVyaXpvbi5jb20iIDxicmVudC5iaWxnZXJAdmVyaXpvbi5jb20+LCBXYXRzb24gTGFkZCA8 d2F0c29uYmxhZGRAZ21haWwuY29tPiwgInF1aWNAaWV0Zi5vcmciIDxxdWljQGlldGYub3JnPiwg ImJyZW50LmJpbGdlcj00MHZlcml6b24uY29tQGRtYXJjLmlldGYub3JnIiA8YnJlbnQuYmlsZ2Vy PTQwdmVyaXpvbi5jb21AZG1hcmMuaWV0Zi5vcmc+LCBJYW4gU3dldHQgPGlhbnN3ZXR0PTQwZ29v Z2xlLmNvbUBkbWFyYy5pZXRmLm9yZz4NClN1YmplY3Q6IFJlOiBbRV0gRG9TLWluZyBRVUlDIHNl cnZlcnMgaXMgdG9vIGVhc3kNCg0KDQoNCg0KDQpPbiBKdWwgMjMsIDIwMTksIGF0IDc6NTMgQU0s IE1pa2tlbCBGYWhuw7hlIErDuHJnZW5zZW4gPG1pa2tlbGZqQGdtYWlsLmNvbTxtYWlsdG86bWlr a2VsZmpAZ21haWwuY29tPj4gd3JvdGU6DQoNCkl0IGlzIG5vdCB0aGF0IGVhc3kgdG8gc3RlYWwg YSB0b2tlbiBhbmQgcmVwbGF5LCBidXQgaXQgY2FuIGhhcHBlbi4NCg0KWWVzLCBpdCByZXF1aXJl cyBjb21wcm9taXNpbmcgYSBjbGllbnQgYW5kIHN0ZWFsaW5nIHRoZSBrZXkgb3IganVzdCB1c2lu ZyB0aGUga2V5IGZyb20gYSBiYWNrIGRvb3IuIEluIHByYWN0aWNlIHRoZSBsYXR0ZXIgbWF5IGJl IGFkdmFudGFnZW91cyB0byB0aGUgYWR2ZXJzYXJ5IGJlY2F1c2UgdGhlIHNvdXJjZSBvZiB0aGUg YXR0YWNrIHdpbGwgYmUgZnJvbSBhIG5vcm1hbCBsb2NhdGlvbiBhbmQgYmVjYXVzZSBmdXR1cmUg ZGV2aWNlIGF1dGhvcml6YXRpb25zIG1heSBpbmNsdWRlIGEgZmluZ2VycHJpbnQgb2YgdGhlIGRl dmljZSAtIGEgZmluZ2VycHJpbnQgdGhhdCB3b3VsZCBmYWlsIG9uIHRoZSBzdG9sZW4ga2V5LiBC dXQgbG9vayBhdCB3aGF0IHdl4oCZdmUgZG9uZSB0byB0aGUgdW5hdXRob3JpemVkIGFkdmVyc2Fy eSB3aXRoIHRoZSBwcmUtYXV0aGVudGljYXRpb24gdG9rZW4gLSBkZWZlYXRlZCByZXNvdXJjZSBE b1MsIGluZm9ybWF0aW9uIGxlYWthZ2UsIGFsbCB2dWxuZXJhYmlsaXRpZXMgb2YgdGhlIHNlcnZl ciwgYWxsIGNvbmZpZ3VyYXRpb24gZXJyb3JzIG9mIHRoZSBhcHBsaWNhdGlvbnMgb2YgdGhlIHNl cnZlci4gQW5kIGl0IGF1Z21lbnRzIFRMUyB0byBkZWZlYXQgbWFuLWluLXRoZS1taWRkbGUgYXR0 YWNrcy4NCg0KDQoNCg0KSWYgeW91IGFkZCBhIHRpbWUgZmFjdG9yIHN1Y2ggYW4gYXR0YWNrIHdp bGwgaGF2ZSBsaW1pdGVkIHZhbHVlLiBJbiBmYWN0IGEgdG9rZW4gbmVlZCBub3QgYmUgdmFsaWQg Zm9yIG1vcmUgdGhhbiBhYm91dCAxMCBtaW51dGVzIHRvIGFjY291bnQgZm9yIHNrZXdlZCBjbG9j a3MuDQoNCkFzIG5vdGVkIG9uIGEgZGlmZmVyZW50IHBvc3RpbmcsIFNpbmdsZSBQYWNrZXQgQXV0 aG9yaXphdGlvbiBpcyBiYXNlZCBvbiBSRkMgNDIyNiB3aGljaCBoYXMgYm90aCBhIGNvdW50ZXIg YW5kIGEgdGltZSBiYXNlZCBhcHByb2FjaC4gUGVyc29uYWxseSwgSSBwcmVmZXIgYSBjb3VudGVy Lg0KDQpCdXQgYWdhaW4sIHRoaXMgaXMgYWxsIGlycmVsZXZhbnQgYmVjYXVzZSBJ4oCZbSBub3Qg c3VnZ2VzdGluZyBhbnkgb25lIHByZS1hdXRoZW50aWNhdGlvbi4gSeKAmW0ganVzdCB1c2luZyBh biBleGFtcGxlIHRvIHNob3cgaG93IGl0IGNhbiBzdG9wIG11bHRpcGxlIHR5cGVzIG9mIGF0dGFj a3MuDQoNCkJyZW50DQoNCg0KDQoNCg0KDQoNCk9uIDIzIEp1bHkgMjAxOSBhdCAxNi40MS4wOSwg Um9iZXJ0byBQZW9uIChmZW5peEBmYi5jb208bWFpbHRvOmZlbml4QGZiLmNvbT4pIHdyb3RlOg0K SeKAmWQgYXNzdW1lICMxIGlzIGxlc3MgbGlrZWx5IHRvIGV4cGVyaWVuY2UgY3JpcHBsaW5nIFNZ Ti1iYXNlZCBEb1MgYXR0YWNrcywgYW5kIGNvdWxkIG90aGVyd2lzZSBiZSBhY2NvbXBsaXNoZWQg YnkgbGltaXRpbmcgYWNjZXNzIGluIElQLXNwYWNlIChpbXBlcmZlY3QsIGJ1dCB3ZeKAmXJlIGxv b2tpbmcgZm9yIOKAnGdvb2QtZW5vdWdo4oCdLCBoZXJlKS4NCg0KLi4gd2hpY2ggbWVhbnMgdGhh dCBJIHRoaW5rIHdlIHNob3VsZCBjb25zaWRlciAyKzMgb25seSwgcmVhbGx5Lg0KDQpGb3IgIzIg YW5kICMzLCB3aGljaCBJIHN1c3BlY3QgaGF2ZSBzaWduaWZpY2FudCBvdmVybGFwcyAoc2l0ZXMg bWF5IHByb3ZpZGUgc2VydmljZXMgYm90aCB0byBsb2dnZWQtaW4gdXNlcnMgYW5kIHVzZXJzIHdo byBhcmVu4oCZdCBsb2dnZWQgaW4pLCB0aGUgcHJlLWF1dGhvcml6YXRpb24gZWl0aGVyOg0KICBh KSBjYW4gYmUgRG9T4oCZZCBpdHNlbGYuDQogIGIpIGNhbiBiZSB1c2VkIHRvIGRvIGEgRG9TIGlu IHRoZSBmdXR1cmUuDQpJbiBjYXNlIGIsIGFzIGFuIGF0dGFja2VyLCB5b3XigJlkIGdldCBvciB3 YWl0IGZvciB0aGUgY2xpZW50IHRvIGF1dGhlbnRpY2F0ZSwgdGhlbiB1c2UgdGhhdCBhdXRoZW50 aWNhdGlvbiBpbiBhIHJlcGxheSBhdHRhY2ssIGUuZy4gYnkgcmVwbGljYXRpbmcgdGhlIGF1dGgg dG9rZW4gYWNyb3NzIG1hbnkgaG9zdHMuDQpJbiBjYXNlcyB3aGVyZSB5b3UgYXJlIGRpc2FsbG93 ZWQgdG8gcmVwbGljYXRlIHRoZSBhdXRoIHRva2VuLCBlLmcuIGJlY2F1c2UgaXQgaXMgdGllZCB0 byBhIHBhcnRpY3VsYXIgSVAsIHlvdSBjYW4gaGVscCBzb2x2ZSB0aGUgcmVwbGF5IGF0dGFjayBo b3dldmVyIHlvdeKAmWxsIGJlIGJpYXNpbmcgdHJhZmZpYyB0byB1c2VycyB3aG9zZSBJUCBpcyBz dGFibGUgYW5kIHdobyBhcmUgbG9nZ2VkIGluL2F1dGjigJlkLg0KSW4gdGhlIHByZS1zaGFyZWQg a2V5IHNjZW5hcmlvIHRoYXQgd2FzIGRlc2NyaWJlZCwgaWYgYW55IG9uZSBjbGllbnQgbGVha3Mg dGhlIHNoYXJlZC1zZWNyZXQsIHRoZW4gaXQgYmVjb21lcyBub3QgdmVyeSB1c2VmdWwgYW5kIGNl cnRhaW5seSBkb2VzbuKAmXQgcHJvdGVjdCBhZ2FpbnN0IGEgRG9TLiBJ4oCZZCBndWVzcyB0aGF0 IHRoZSBwcm9iYWJpbGl0eSBvZiB0aGUgbG9zcyBvZiBhIHN5bW1ldHJpYyBrZXkgaXMgcHJvcG9y dGlvbmFsIHRvIHRoZSBicmVhZHRoIG9mIHRoZSBkaXN0cmlidXRpb24gb2YgdGhlIGtleS4NCg0K V2hhdCBJ4oCZbSB0cnlpbmcgdG8gcG9pbnQgb3V0IGlzIHRoYXQgdGhpcyBkb2VzbuKAmXQgcmVh bGx5IHNlZW0gdG8gc29sdmUgdGhlIGdlbmVyaWMgRG9TIGF0dGFjay4NCllvdeKAmWxsIHN0aWxs IG5lZWQgdG8gZG8gc29tZSBoZXVyaXN0aWNzL3J1bGVzIGJhc2VkIHVwb24gd2hhdGV2ZXIgaXMg b2JzZXJ2YWJsZSwgYXQgYSBtaW5pbXVtIHRoZSA1LXR1cGxlLg0KR2V0dGluZyBtb3JlIHRoYW4g dGhlIDUtdHVwbGUgdG8gYmUgdmlzaWJsZSB3aWxsIHRha2UgbW9yZSB3b3JrIGJ5IHRoZSBzZXJ2 ZXIsIHRydWUsIGJ1dCBnaXZlbiBvdGhlciBkZXNpZ24gY29uc3RyYWludHMsIEkgZG9u4oCZdCBz ZWUgaG93IHRoYXQgaXMgYXZvaWRhYmxlLg0KDQotPVINCg0KRnJvbTogImJyZW50LmJpbGdlckB2 ZXJpem9uLmNvbTxtYWlsdG86YnJlbnQuYmlsZ2VyQHZlcml6b24uY29tPiIgPGJyZW50LmJpbGdl ckB2ZXJpem9uLmNvbTxtYWlsdG86YnJlbnQuYmlsZ2VyQHZlcml6b24uY29tPj4NCkRhdGU6IFR1 ZXNkYXksIEp1bHkgMjMsIDIwMTkgYXQgOTo1OSBBTQ0KVG86IFJvYmVydG8gUGVvbiA8ZmVuaXhA ZmIuY29tPG1haWx0bzpmZW5peEBmYi5jb20+Pg0KQ2M6ICJicmVudC5iaWxnZXJAdmVyaXpvbi5j b208bWFpbHRvOmJyZW50LmJpbGdlckB2ZXJpem9uLmNvbT4iIDxicmVudC5iaWxnZXJAdmVyaXpv bi5jb208bWFpbHRvOmJyZW50LmJpbGdlckB2ZXJpem9uLmNvbT4+LCBXYXRzb24gTGFkZCA8d2F0 c29uYmxhZGRAZ21haWwuY29tPG1haWx0bzp3YXRzb25ibGFkZEBnbWFpbC5jb20+PiwgImJyZW50 LmJpbGdlcj00MHZlcml6b24uY29tQGRtYXJjLmlldGYub3JnPG1haWx0bzo0MHZlcml6b24uY29t QGRtYXJjLmlldGYub3JnPiIgPGJyZW50LmJpbGdlcj00MHZlcml6b24uY29tQGRtYXJjLmlldGYu b3JnPG1haWx0bzo0MHZlcml6b24uY29tQGRtYXJjLmlldGYub3JnPj4sICJxdWljQGlldGYub3Jn PG1haWx0bzpxdWljQGlldGYub3JnPiIgPHF1aWNAaWV0Zi5vcmc8bWFpbHRvOnF1aWNAaWV0Zi5v cmc+PiwgSWFuIFN3ZXR0IDxpYW5zd2V0dD00MGdvb2dsZS5jb21AZG1hcmMuaWV0Zi5vcmc8bWFp bHRvOjQwZ29vZ2xlLmNvbUBkbWFyYy5pZXRmLm9yZz4+DQpTdWJqZWN0OiBSZTogW0VdIERvUy1p bmcgUVVJQyBzZXJ2ZXJzIGlzIHRvbyBlYXN5DQoNClRoZXJlIGFyZSBsb3RzIG9mIHBvc3NpYmxl IHNjZW5hcmlvcywgc28gcGxlYXNlIGp1c3QgY29uc2lkZXIgdGhlc2UgdG8gYmUgZXhhbXBsZXMu IExldOKAmXMgZGl2aWRlIHRoZSB3b3JsZCBvZiBzZXJ2ZXJzIGluIHRvIDEpIGVudGVycHJpc2Ug YnVzaW5lc3MtdG8tYnVzaW5lc3Mgd2Vic2l0ZXMsIDIpIHdlYnNpdGVzIG1lYW50IGZvciBjb25z dW1lcnMgd2hlcmUgYXV0aGVudGljYXRpb24gaXMgZGVzaXJhYmxlLCBhbmQgMykgd2Vic2l0ZXMg dGhhdCB3aWxsIHdhbnQgdG8gYWxsb3cgdGhlaXIgdXNlcnMgdG8gYmUgYW5vbnltb3VzLCB0aGVy ZWZvcmUsIHByZS1hdXRoZW50aWNhdGlvbiB3b3VsZCBub3QgYXBwbHkuDQoNCkVudGVycHJpc2Ug YnVzaW5lc3MtdG8tYnVzaW5lc3Mgd2Vic2l0ZXMgY291bGQgdXNlIHNvbWV0aGluZyBzaW1pbGFy IHRvIHRoZSBTb2Z0d2FyZSBEZWZpbmVkIFBlcmltZXRlciAoU0RQKSBTaW5nbGUgUGFja2V0IEF1 dGhvcml6YXRpb24gKFNQQSkgcHJvdG9jb2wgY3JlYXRlZCBieSB0aGUgQ2xvdWQgU2VjdXJpdHkg QWxsaWFuY2UuIEl0IHVzZXMgdGhlIGZhY3QgdGhhdCBjbGllbnRzIGFyZSBvbi1ib2FyZGVkIHRv IHRoZSBzeXN0ZW0gaW4gYSBvbmUgdGltZSBldmVudCB0byBwcm92aWRlIHRoZSBjbGllbnRzIHdp dGggYSBzaGFyZWQgc2VjcmV0IGtleS4gVGhlIGtleSBpcyB1c2VkIGluIGEgY291bnRlci1iYXNl ZCBITUFDIGNhbGN1bGF0aW9uLiBTaW5jZSBvbmx5IGFuIGF1dGhvcml6ZWQgY2xpZW50IGNhbiBj YWxjdWxhdGUgdGhlIHByb3BlciBITUFDLCB0aGUgSE1BQyBjYW4gYmUgdXNlZCBmb3IgcHJlLWF1 dGhlbnRpY2F0aW9uLiBUaHVzLCB0aGUgcHJlLWF1dGhlbnRpY2F0aW9uIHRva2VuIGNvdWxkIGxv b2sgc29tZXRoaW5nIGxpa2UgdGhpczoNCkNsaWVudC0+U2VydmVyOiBDbGllbnRJRCwgQ291bnRl ciwgSE1BQ1tDbGllbnRJRCB8fCBDb3VudGVyLCBLc10gd2hlcmUgS3MgaXMgYSBzaGFyZWQgc2Vj cmV0IGtleSB0aGF0IGJvdGggdGhlIGNsaWVudCBhbmQgc2VydmVyIGhhdmUuDQpPbiB0aGUgc2Vy dmVyIHNpZGUsIHRoZSBzZXJ2ZXIgd291bGQgcmVjYWxjdWxhdGUgdGhlIEhNQUMgYW5kIGNvbXBh cmUgaXQgdG8gdGhlIG9uZSBwcm92aWRlZCBieSB0aGUgY2xpZW50Lg0KTm90ZSB0aGF0IHRoaXMg aW5mb3JtYXRpb24gaXMgc2VudCBmcm9tIHRoZSBjbGllbnQgdG8gdGhlIHNlcnZlciBpbiBjbGVh ciB0ZXh0IChpLmUuLCBub3QgZW5jcnlwdGVkKS4NCkluIHByYWN0aWNlLCB0aGVyZSB3b3VsZCBw cm9iYWJseSBiZSBtb3JlIGZpZWxkcywgYnV0IHRoZSBpbXBvcnRhbnQgcGFydCBpcyB0aGF0IHRo ZSBvbmUtdGltZSBvbiBib2FyZGluZyBlbmFibGVzIGEgbGlmZXRpbWUgb2YgcHJlLWF1dGhlbnRp Y2F0aW9uIHRva2Vucy4NCg0KV2Vic2l0ZXMgbWVhbnQgZm9yIGNvbnN1bWVycyB3b3VsZCBwcm9i YWJseSBiZSBoYW5kbGVkIGRpZmZlcmVudGx5IC0gc3BlY2lmaWNhbGx5LCBubyBvbi1ib2FyZGlu Zy4gVGhhdCBtZWFucyB0aGVyZSB3b3VsZCBiZSBzb21lIGtpbmQgb2YgdG9rZW4gc2VydmljZSAt IHNpbWlsYXIgdG8gT0F1dGgsIGJ1dCBvcGVyYXRpbmcgcHJpb3IgdG8gdGhlIFRDUCBlcXVpdmFs ZW50IG9mIFNZTi9BQ0suIFBlcmhhcHMgQ2xvdWRGbGFpciBvciBHb29nbGUgb3IgTWljcm9zb2Z0 IGNvdWxkIGludmVudCBzb21ldGhpbmcgbGlrZSB0aGlzIGFuZCBvZmZlciBpdCBhcyBhIHNlcnZp Y2U/Pz8NCg0KQWdhaW4sIHRoZXJlIHdpbGwgYmUgb3RoZXIgd2Vic2l0ZXMgdGhhdCB3aWxsIG5v dCB3YW50IHByZS1hdXRoZW50aWNhdGlvbiBiZWNhdXNlIHRoZXkgd2FudCB0byBhbGxvdyBhbm9u eW1vdXMgdXNlcnMgdG8gdGhlaXIgc2l0ZS4NCg0KQnJlbnQNCg0KT24gSnVsIDIzLCAyMDE5LCBh dCA2OjI2IEFNLCBSb2JlcnRvIFBlb24gPGZlbml4QGZiLmNvbTxtYWlsdG86ZmVuaXhAZmIuY29t Pj4gd3JvdGU6DQoNCkknbSB0cnlpbmcgdG8gdW5kZXJzdGFuZCBob3cgYW55dGhpbmcgd2FzIHBy ZS1hdXRoZW50aWNhdGVkIHdpdGhvdXQgc3VmZmVyaW5nIGZyb20gYWxsIG9mIHRoZSBzYW1lIHBy b2JsZW1zLg0KSG93IHdvdWxkIHN1Y2ggcHJlLWF1dGhlbnRpY2F0aW9uIGJlIGRvbmUgaW4gcHJh Y3RpY2UsIGVzcGVjaWFsbHkgaW4gc2NlbmFyaW9zIHdoZXJlIHRoZSBzZXJ2ZXIgZG9lc24ndCBo YXZlIGEgd2hpdGVsaXN0IG9mIGNsaWVudHMsIGFuZCB0aGF0IHNlcnZpY2UgZGVzaXJlcyB0cmFm ZmljIGZyb20gbm9uLW1hbGljaW91cyBjbGllbnRzPw0KLT1SDQpHZXQgT3V0bG9vayBmb3IgQW5k cm9pZDxodHRwczovL3VybGRlZmVuc2UucHJvb2Zwb2ludC5jb20vdjIvdXJsP3U9aHR0cHMtM0Ff X2FrYS5tc19naGVpMzYmZD1Ed01GLWcmYz11ZEJUUnZGdlhDNURocWc3VUhwSmxQcHMzbVozTFJ4 cGI2X18wUG9tQlRRJnI9Vy1PMHQwendoZ1hIUDh1anBoNnV6M3JIME10dWFMd0VyXzdnRTJwMVg1 byZtPUNWLUhJaGJSVnAtYXJnaU5yVnVfREs3ck9OazV4dDlMNXIwRWZtdzE3MEkmcz1XWGhqUTVj R2ZDcnc2QlNYZHE1anlkS0ViT0YyUHUzdGpMMlFaV1h6NmVZJmU9Pg0KDQpfX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fXw0KRnJvbTogYnJlbnQuYmlsZ2VyQHZlcml6b24uY29tPG1haWx0 bzpicmVudC5iaWxnZXJAdmVyaXpvbi5jb20+IDxicmVudC5iaWxnZXJAdmVyaXpvbi5jb208bWFp bHRvOmJyZW50LmJpbGdlckB2ZXJpem9uLmNvbT4+DQpTZW50OiBUdWVzZGF5LCBKdWx5IDIzLCAy MDE5IDg6MjE6MDUgQU0NClRvOiBXYXRzb24gTGFkZCA8d2F0c29uYmxhZGRAZ21haWwuY29tPG1h aWx0bzp3YXRzb25ibGFkZEBnbWFpbC5jb20+Pg0KQ2M6IGJyZW50LmJpbGdlcj00MHZlcml6b24u Y29tQGRtYXJjLmlldGYub3JnPG1haWx0bzpicmVudC5iaWxnZXI9NDB2ZXJpem9uLmNvbUBkbWFy Yy5pZXRmLm9yZz4gPGJyZW50LmJpbGdlcj00MHZlcml6b24uY29tQGRtYXJjLmlldGYub3JnPG1h aWx0bzpicmVudC5iaWxnZXI9NDB2ZXJpem9uLmNvbUBkbWFyYy5pZXRmLm9yZz4+OyBSb2JlcnRv IFBlb24gPGZlbml4QGZiLmNvbTxtYWlsdG86ZmVuaXhAZmIuY29tPj47IHF1aWNAaWV0Zi5vcmc8 bWFpbHRvOnF1aWNAaWV0Zi5vcmc+IDxxdWljQGlldGYub3JnPG1haWx0bzpxdWljQGlldGYub3Jn Pj47IGJyZW50LmJpbGdlckB2ZXJpem9uLmNvbTxtYWlsdG86YnJlbnQuYmlsZ2VyQHZlcml6b24u Y29tPiA8YnJlbnQuYmlsZ2VyQHZlcml6b24uY29tPG1haWx0bzpicmVudC5iaWxnZXJAdmVyaXpv bi5jb20+PjsgSWFuIFN3ZXR0IDxpYW5zd2V0dD00MGdvb2dsZS5jb21AZG1hcmMuaWV0Zi5vcmc8 bWFpbHRvOmlhbnN3ZXR0PTQwZ29vZ2xlLmNvbUBkbWFyYy5pZXRmLm9yZz4+DQpTdWJqZWN0OiBS ZTogW0VdIERvUy1pbmcgUVVJQyBzZXJ2ZXJzIGlzIHRvbyBlYXN5DQoNCg0KDQpPbiBKdWwgMjIs IDIwMTksIGF0IDk6MTYgUE0sIFdhdHNvbiBMYWRkIDx3YXRzb25ibGFkZEBnbWFpbC5jb208bWFp bHRvOndhdHNvbmJsYWRkQGdtYWlsLmNvbT4+IHdyb3RlOg0KDQpPbiBNb24sIEp1bCAyMiwgMjAx OSBhdCA1OjI5IFBNDQo8YnJlbnQuYmlsZ2VyPTQwdmVyaXpvbi5jb21AZG1hcmMuaWV0Zi5vcmc8 bWFpbHRvOmJyZW50LmJpbGdlcj00MHZlcml6b24uY29tQGRtYXJjLmlldGYub3JnPj4gd3JvdGU6 DQoNCg0KDQpPbiBKdWwgMjIsIDIwMTksIGF0IDEwOjEwIEFNLCBSb2JlcnRvIFBlb24gPGZlbml4 QGZiLmNvbTxtYWlsdG86ZmVuaXhAZmIuY29tPj4gd3JvdGU6DQoNCldoZW4geW914oCZcmUgdGFs a2luZyBhYm91dCBwcmUtYXV0aGVudGljYXRpb24sIGFyZSB5b3UgcmVmZXJyaW5nIHRvIHRoZSAw LXJ0dCBzdHVmZj8NCg0KDQowLVJUVCBpcyBnb29kIHN0dWZmLiBJdCByZWR1Y2VzIHRpbWUgZm9y IGEgZGV2aWNlIHRoYXTigJlzIGFscmVhZHkga25vd24gdG8gYmUgYXV0aG9yaXplZCB0byBjb25u ZWN0IHRvIHRoZSBzZXJ2ZXIuDQoNClBhcnQgb2YgdGhlIHByb2JsZW0gaXMgdG8gc3RvcCByZXNv dXJjZSBEb1MuIFRoZSBvdGhlciBwYXJ0IGlzIGFib3V0IGluZm9ybWF0aW9uIGxlYWthZ2UuDQoN CkxldOKAmXMgYXNzdW1lIGEgdGltZSB3aGVuIGFsbCB3ZWJzaXRlIHVzZSBRVUlDIGFuZCBsZXQn cyB0YWtlIGFuIGFkdmVyc2FyeSB3aG8gaGFzIGp1c3QgbGVhcm5lZCBhYm91dCBhIHZ1bG5lcmFi aWxpdHkgaW4gV29yZHByZXNzLiBUaGUgYWR2ZXJzYXJ5IHdhbnRzIHRvIHNjYW4gdGhlIEludGVy bmV0IGZpbmRpbmcgV29yZHByZXNzIHNpdGVzLiBOb3csIGlmIHRoZSBRVUlDIGNvbm5lY3Rpb24g cmVxdWlyZWQgcHJlLWF1dGhlbnRpY2F0aW9uLCB0aGVuIHRoZSBzZXJ2ZXIgd291bGQgYmUgYmxh Y2sgdG8gdGhlIGNvbm5lY3Rpb24gYW5kIHRoZSBhZHZlcnNhcnkgY291bGQgbm90IGRldGVybWlu ZSBpZiB0aGUgc2l0ZSB1c2VzIFdvcmRwcmVzcy4gQnV0LCBhcyBpdCBzdGFuZHMgdG9kYXksIGlu IHRoaXMgZnV0dXJlIHRpbWUsIHRoZSBhZHZlcnNhcnkgc2NhbnMgdGhlIEludGVybmV0LCBjb25u ZWN0cyB0byB0aGUgc2VydmVyLCBhbmQgaXMgaGFuZGVkIGEgV29yZHByZXNzIGxvZ2luIHNjcmVl bi4gTm93IHRoZSBhZHZlcnNhcnkga25vd3Mgd2hlcmUgdG8gYXR0YWNrLg0KDQpJZiBjb25uZWN0 aW9uIHJlcXVpcmVzIHByZWF1dGhlbnRpY2F0aW9uIHRoZW4gbm8gb25lIGNhbiBzZWUgdGhlIHNp dGUsIG5vPw0KDQoNCkluIHRoZSBlbnRlcnByaXNlIGl0IGlzIGEgbGl0dGxlIGRpZmZlcmVudC4g Q29tcGFuaWVzIGltcGxlbWVudCByZXZlcnNlIHByb3hpZXMgdG8gdHJ5IHRvIHByb3RlY3Qgc2Vy dmVycyBmcm9tIHVuYXV0aG9yaXplZCB1c2Vycy4gQnV0IHdoYXQgaWYgdGhlIHNlcnZlcnMgcmVx dWlyZWQgYSBwcmUtYXV0aGVudGljYXRpb24gdG9rZW4uIFRoZW4sIHJldmVyc2UgcHJveGllcyB3 b3VsZCBub3QgYmUgbmVlZGVkLg0KDQpTbyBJIHRoaW5rIHRoZXJlIGFyZSB0d28gZGlmZmVyZW50 IHRoaW5ncyBoZXJlLCBvciBtYXliZSBJJ20gbWlzdW5kZXJzdGFuZGluZzoNCjE6IFdlIGhhdmUg c2VydmVycyB0aGF0IGhhdmUgYSBsaW1pdGVkIG51bWJlciBvZiBjbGllbnRzIHRoYXQgd2lsbA0K ZXZlciB3YW50IHRvIGNvbm5lY3QgdG8gdGhlbSwgYW5kIHdhbnQgdG8gZW5hYmxlIG90aGVyIGRl dmljZXMgdG8NCmZpbHRlciB0aGUgdHJhZmZpYywgc28gbmVlZCBzb21lIG1lY2hhbmlzbSB0aGF0 IGVuYWJsZXMgYSBtaWRkbGVib3ggdG8NCmZpbHRlci4NCg0KTm8gbWlkZGxlIGJveCEgUHJlLWF1 dGhlbnRpY2F0aW9uIG1ha2VzIHNlcnZlcnMgc2VsZi1kZWZlbmRpbmcuIExhY2sgb2YgcHJlLWF1 dGhlbnRpY2F0aW9uIGlzIHdoeSB3ZSBoYXZlIG1pZGRsZSBib3hlcy4NCg0KMjogV2UgaGF2ZSBz ZXJ2ZXJzIGdlbmVyYWxseSBhdmFpbGFibGUgdG8gdGhlIHB1YmxpYyBhbmQgYXJlIGNvbmNlcm5l ZA0KdGhhdCB0aGUgUVVJQyB2ZXJzaW9uIG9mIGEgU1lOIGZsb29kIGNhbid0IGJlIGRlYWx0IHdp dGggKGRlc3BpdGUNCmV2aWRlbmNlIHRvIHRoZSBjb250cmFyeSkuDQoNCkNvbXBhbmllcyBhbmQg d2Vic2l0ZSBvd25lcnMgaGF2ZSB0byBwYXkgZm9yIGFudGktRG9TIHNlcnZpY2VzIGZyb20gdGhl IGxpa2VzIG9mIFZlcml6b24gYW5kIG90aGVycyBCRUNBVVNFIHNlcnZlcnMgbGlzdGVuIHRvIGFs bCBjbGllbnRzLiBXaXRoIHByZS1hdXRoZW50aWNhdGlvbiwgdGhlIG5lZWQgdG8gaGF2ZSBhbiBh bnRpLURvUyBzZXJ2aWNlIHdvdWxkIGJlIGdyZWF0bHkgcmVkdWNlZCBiZWNhdXNlIHNlcnZlcnMg d291bGQgbm90IHJlc3BvbmQgdG8gdW5hdXRob3JpemVkIGNsaWVudHMuDQoNCkFuZCB0aGUgcG9p bnQgYWJvdXQgaW5mb3JtYXRpb24gbGVha2FnZSBpcyBpbXBvcnRhbnQsIHRvby4NCg0KQnJlbnQN Cg0KDQpJIGRvbid0IGtub3cgbXVjaCBhYm91dCBob3cgQ2xvdWRmbGFyZSAobXkgcGxhY2Ugb2Yg ZW1wbG95bWVudCkgIGRlYWxzDQp3aXRoIDIgYnV0IGhvcGVmdWxseSBzb21lIHBlb3BsZSB3aG8g ZG8vaW1wbGVtZW50b3JzIGNhbiBzcGVhayB1cA0KYWJvdXQgaG93IG11Y2ggb2YgYSBwcm9ibGVt IGl0IGlzLiBCdXQgMSBpcyBJIHRoaW5rIHZlcnkgbXVjaCBhDQpub25nb2FsOiBtaWRkbGVib3gg b3NzaWZpY2F0aW9uIGlzIHBhcnQgb2YgdGhlIHJlYXNvbiB3ZSBoYXZlIFFVSUMuDQoNClNpbmNl cmVseSwNCldhdHNvbiBMYWRkDQoNCg0KDQpCcmVudCBCbGlnZXINCkRpcmVjdG9yLVRlY2hub2xv Z3kgVmVyaXpvbiBTRFANCmJyZW50LmJpbGdlckB2ZXJpem9uLmNvbTxtYWlsdG86YnJlbnQuYmls Z2VyQHZlcml6b24uY29tPg0KDQoNCg0KDQoNCg0KDQpCcmVudCBCbGlnZXINCkRpcmVjdG9yLVRl Y2hub2xvZ3kgVmVyaXpvbiBTRFANCmJyZW50LmJpbGdlckB2ZXJpem9uLmNvbTxtYWlsdG86YnJl bnQuYmlsZ2VyQHZlcml6b24uY29tPg0KDQoNCg0KQnJlbnQgQmxpZ2VyDQpEaXJlY3Rvci1UZWNo bm9sb2d5IFZlcml6b24gU0RQDQpicmVudC5iaWxnZXJAdmVyaXpvbi5jb208bWFpbHRvOmJyZW50 LmJpbGdlckB2ZXJpem9uLmNvbT4NCg0KDQoNCg0KDQoNCg== --_000_6A50F13B0526421F9D20B997DB503CE6fbcom_ Content-Type: text/html; charset="utf-8" Content-ID: <1CBEB2BB46A1714487D2D18D1E2B2AF7@namprd15.prod.outlook.com> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPCEtLVtp ZiAhbXNvXT48c3R5bGU+dlw6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kb1w6KiB7 YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kd1w6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0 I1ZNTCk7fQ0KLnNoYXBlIHtiZWhhdmlvcjp1cmwoI2RlZmF1bHQjVk1MKTt9DQo8L3N0eWxlPjwh W2VuZGlmXS0tPjxzdHlsZT48IS0tDQovKiBGb250IERlZmluaXRpb25zICovDQpAZm9udC1mYWNl DQoJe2ZvbnQtZmFtaWx5OkhlbHZldGljYTsNCglwYW5vc2UtMTowIDAgMCAwIDAgMCAwIDAgMCAw O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6 MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7 DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAyIDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMg Ki8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBp bjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250LWZh bWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJ e21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1 bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFuLk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1z dHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpwdXJwbGU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVy bGluZTt9DQpwLm1zb25vcm1hbDAsIGxpLm1zb25vcm1hbDAsIGRpdi5tc29ub3JtYWwwDQoJe21z by1zdHlsZS1uYW1lOm1zb25vcm1hbDsNCgltc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzsNCgltYXJn aW4tcmlnaHQ6MGluOw0KCW1zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvOw0KCW1hcmdpbi1sZWZ0 OjBpbjsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNl cmlmO30NCnAuYWlybWFpbG9uLCBsaS5haXJtYWlsb24sIGRpdi5haXJtYWlsb24NCgl7bXNvLXN0 eWxlLW5hbWU6YWlybWFpbF9vbjsNCgltc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzsNCgltYXJnaW4t cmlnaHQ6MGluOw0KCW1zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvOw0KCW1hcmdpbi1sZWZ0OjBp bjsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlm O30NCnNwYW4uYXBwbGUtY29udmVydGVkLXNwYWNlDQoJe21zby1zdHlsZS1uYW1lOmFwcGxlLWNv bnZlcnRlZC1zcGFjZTt9DQpzcGFuLkVtYWlsU3R5bGUyMA0KCXttc28tc3R5bGUtdHlwZTpwZXJz b25hbDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjp3aW5kb3d0 ZXh0O30NCnNwYW4uRW1haWxTdHlsZTIxDQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsLXJlcGx5 Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7 fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1z aXplOjEwLjBwdDt9DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo4LjVpbiAxMS4waW47DQoJ bWFyZ2luOjEuMGluIDEuMGluIDEuMGluIDEuMGluO30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFn ZTpXb3JkU2VjdGlvbjE7fQ0KLS0+PC9zdHlsZT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxv OnNoYXBlZGVmYXVsdHMgdjpleHQ9ImVkaXQiIHNwaWRtYXg9IjEwMjYiIC8+DQo8L3htbD48IVtl bmRpZl0tLT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlbGF5b3V0IHY6ZXh0PSJl ZGl0Ij4NCjxvOmlkbWFwIHY6ZXh0PSJlZGl0IiBkYXRhPSIxIiAvPg0KPC9vOnNoYXBlbGF5b3V0 PjwveG1sPjwhW2VuZGlmXS0tPg0KPC9oZWFkPg0KPGJvZHkgbGFuZz0iRU4tVVMiIGxpbms9ImJs dWUiIHZsaW5rPSJwdXJwbGUiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPkkgdGhpbmsgTWlra2VsIGlzL3dhcyBzYXlpbmcgdGhlIHNhbWUgdy5yLnQu IGNvdW50ZXJzLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+LT1SPG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxk aXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0I1QzRERiAxLjBwdDtwYWRk aW5nOjMuMHB0IDBpbiAwaW4gMGluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTIuMHB0O2NvbG9yOmJsYWNrIj5Gcm9tOiA8L3NwYW4+PC9iPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2NvbG9yOmJsYWNrIj5RVUlDICZsdDtxdWljLWJvdW5j ZXNAaWV0Zi5vcmcmZ3Q7IG9uIGJlaGFsZiBvZiBSb2JlcnRvIFBlb24gJmx0O2Zlbml4QGZiLmNv bSZndDs8YnI+DQo8Yj5EYXRlOiA8L2I+VHVlc2RheSwgSnVseSAyMywgMjAxOSBhdCAxMTozOCBB TTxicj4NCjxiPlRvOiA8L2I+JnF1b3Q7YnJlbnQuYmlsZ2VyQHZlcml6b24uY29tJnF1b3Q7ICZs dDticmVudC5iaWxnZXJAdmVyaXpvbi5jb20mZ3Q7LCBNaWtrZWwgRmFobsO4ZSBKw7hyZ2Vuc2Vu ICZsdDttaWtrZWxmakBnbWFpbC5jb20mZ3Q7PGJyPg0KPGI+Q2M6IDwvYj5XYXRzb24gTGFkZCAm bHQ7d2F0c29uYmxhZGRAZ21haWwuY29tJmd0OywgJnF1b3Q7cXVpY0BpZXRmLm9yZyZxdW90OyAm bHQ7cXVpY0BpZXRmLm9yZyZndDssICZxdW90O2JyZW50LmJpbGdlcj00MHZlcml6b24uY29tQGRt YXJjLmlldGYub3JnJnF1b3Q7ICZsdDticmVudC5iaWxnZXI9NDB2ZXJpem9uLmNvbUBkbWFyYy5p ZXRmLm9yZyZndDssIElhbiBTd2V0dCAmbHQ7aWFuc3dldHQ9NDBnb29nbGUuY29tQGRtYXJjLmll dGYub3JnJmd0Ozxicj4NCjxiPlN1YmplY3Q6IDwvYj5bUG90ZW50aWFsIFNwb29mXSBSZTogW0Vd IERvUy1pbmcgUVVJQyBzZXJ2ZXJzIGlzIHRvbyBlYXN5PG86cD48L286cD48L3NwYW4+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+ DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPklmIHlvdeKAmXJlIGluIGEg4oCcc21hbGzi gJ0gZGVwbG95bWVudCB0aGF0IGlzIGV4cG9zZWQgdG8gdGhlIGludGVybmV0LCB0aGVuIHlvdeKA mXJlIGdvaW5nIHRvIGJlIGRlYWQgcmVnYXJkbGVzcyBvZiB0aGUgdG9rZW5zIGJlY2F1c2UgdGhl IGxpbmtzIHdpbGwgYmUgZnVsbCBvZiB1c2VsZXNzIHBhY2tldHMgaWYgc29tZW9uZSBkZWNpZGVz IHRvIGRvIGFuIGF0dGFjayBhdCBhbnkgcmVhc29uYWJsZSBzY2FsZS48YnI+DQo8YnI+DQpJZiB5 b3XigJlyZSBpbiBhIOKAnGxhcmdl4oCdIGRlcGxveW1lbnQgdGhhdCBpcyBleHBvc2VkIHRvIHRo ZSBpbnRlcm5ldCwgdGhlbiBhIGNvdW50ZXItYmFzZWQgaW1wbGVtZW50YXRpb24gdGhhdCByZXF1 aXJlcyBhbnkgc3RhdGUgYXQgc2VydmVycyAodG8gdmVyaWZ5IHRoZSBjb3VudGVyKSBpcyBsaWtl bHkgdG8gYmUgdmVyeSBleHBlbnNpdmUgYXMgaXQgZWl0aGVyIHJlcXVpcmVzIGFuIFJQQyBmb3Ig ZWFjaCBpbmNvbWluZyBwYWNrZXQtdG8tYmUtYXV0aGVudGljYXRlZCwNCiBvciBpdCByZXF1aXJl cyB0aGF0IHRoZSBwYWNrZXQgYmUgcm91dGVkIHRvIGEgc3BlY2lmaWMgc2VydmVyLCB3aGljaCBt YWtlcyB0aGUgaW5kaXZpZHVhbCBzZXJ2ZXJzIERvU2FibGUuPGJyPg0KPGJyPg0KSWYgeW91IGhh dmUgYSDigJxsYXJnZeKAnSBkZXBsb3ltZW50IGFuZCB1c2UgYSB0aW1lLWJhc2VkIGltcGxlbWVu dGF0aW9uLCB0aGVuIHlvdSBoYXZlIHRoZSBnb2xkaWxvY2tzLWxpa2UgcHJvYmxlbSBvZiBjaG9v c2luZyB0aGUgY29ycmVjdCBUVEwsIGFuZCB0aGF0IGlzIGdvaW5nIHRvIGJlIGRpZmZpY3VsdCBh cyB0aGUgRG9TIGVmZmVjdGl2ZW5lc3MgYmVjb21lcyBkaXJlY3RseSAoaW52ZXJzZWx5KSByZWxh dGVkIHRvIHRoZSBUVEwgbGVuZ3RoIGFzDQogVFRMIGxlbmd0aCBkZXRlcm1pbmVzIHRoZSBhbW91 bnQgb2YgdGhlIHBvcHVsYXRpb24gdGhhdCBpcyBubyBsb25nZXIgYXV0aGVudGljYXRlZC4gQSBz aG9ydCBUVEwgbWVhbnMgdmVyeSBsaXR0bGUgYmVuZWZpdCBjYW4gYmUgYXNjcmliZWQgYnkgaGF2 aW5nIHRoZSB0b2tlbiBiZWNhdXNlIGZldyBjbGllbnRzIHdpbGwgcmVtYWluIGF1dGhlbnRpY2F0 ZWQuPGJyPg0KPGJyPg0KVGhlIGNvbWJpbmF0aW9uIG9mIHRpbWUgYW5kIGNvdW50ZXIgZG9lc27i gJl0IG5lZ2F0ZSBhbnkgb2YgdGhlIGRpc2FkdmFudGFnZXMgb2YgZWl0aGVyLjxicj4NCjxicj4N CkkgZG9u4oCZdCB1bHRpbWF0ZWx5IHNlZSBhIHdheSBvdXQgb2YgaGF2aW5nIHRvIGhldXJpc3Rp Y2FsbHkgZXhhbWluZSA1LXR1cGxlcy48YnI+DQotPVI8YnI+DQo8YnI+DQo8YnI+DQo8bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPGRp diBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjQjVDNERGIDEuMHB0O3BhZGRp bmc6My4wcHQgMGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Y29sb3I6YmxhY2siPkZyb206IDwvc3Bhbj48L2I+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Y29sb3I6YmxhY2siPiZxdW90O2JyZW50LmJpbGdlckB2 ZXJpem9uLmNvbSZxdW90OyAmbHQ7YnJlbnQuYmlsZ2VyQHZlcml6b24uY29tJmd0Ozxicj4NCjxi PkRhdGU6IDwvYj5UdWVzZGF5LCBKdWx5IDIzLCAyMDE5IGF0IDExOjE5IEFNPGJyPg0KPGI+VG86 IDwvYj5NaWtrZWwgRmFobsO4ZSBKw7hyZ2Vuc2VuICZsdDttaWtrZWxmakBnbWFpbC5jb20mZ3Q7 PGJyPg0KPGI+Q2M6IDwvYj5Sb2JlcnRvIFBlb24gJmx0O2Zlbml4QGZiLmNvbSZndDssICZxdW90 O2JyZW50LmJpbGdlckB2ZXJpem9uLmNvbSZxdW90OyAmbHQ7YnJlbnQuYmlsZ2VyQHZlcml6b24u Y29tJmd0OywgV2F0c29uIExhZGQgJmx0O3dhdHNvbmJsYWRkQGdtYWlsLmNvbSZndDssICZxdW90 O3F1aWNAaWV0Zi5vcmcmcXVvdDsgJmx0O3F1aWNAaWV0Zi5vcmcmZ3Q7LCAmcXVvdDticmVudC5i aWxnZXI9NDB2ZXJpem9uLmNvbUBkbWFyYy5pZXRmLm9yZyZxdW90OyAmbHQ7YnJlbnQuYmlsZ2Vy PTQwdmVyaXpvbi5jb21AZG1hcmMuaWV0Zi5vcmcmZ3Q7LCBJYW4NCiBTd2V0dCAmbHQ7aWFuc3dl dHQ9NDBnb29nbGUuY29tQGRtYXJjLmlldGYub3JnJmd0Ozxicj4NCjxiPlN1YmplY3Q6IDwvYj5S ZTogW0VdIERvUy1pbmcgUVVJQyBzZXJ2ZXJzIGlzIHRvbyBlYXN5PC9zcGFuPjxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9w Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxicj4NCjxicj4NCjxicj4NCjxvOnA+PC9v OnA+PC9wPg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRv bTo1LjBwdCI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+T24gSnVsIDIzLCAyMDE5LCBh dCA3OjUzIEFNLCBNaWtrZWwgRmFobsO4ZSBKw7hyZ2Vuc2VuICZsdDs8YSBocmVmPSJtYWlsdG86 bWlra2VsZmpAZ21haWwuY29tIj5taWtrZWxmakBnbWFpbC5jb208L2E+Jmd0OyB3cm90ZTo8bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286 cD48L3A+DQo8ZGl2Pg0KPGRpdiBpZD0iYmxvb3BfY3VzdG9tZm9udCI+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTpIZWx2ZXRp Y2EiPkl0IGlzIG5vdCB0aGF0IGVhc3kgdG8gc3RlYWwgYSB0b2tlbiBhbmQgcmVwbGF5LCBidXQg aXQgY2FuIGhhcHBlbi48L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9i bG9ja3F1b3RlPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5ZZXMsIGl0IHJlcXVpcmVzIGNvbXBy b21pc2luZyBhIGNsaWVudCBhbmQgc3RlYWxpbmcgdGhlIGtleSBvciBqdXN0IHVzaW5nIHRoZSBr ZXkgZnJvbSBhIGJhY2sgZG9vci4gSW4gcHJhY3RpY2UgdGhlIGxhdHRlciBtYXkgYmUgYWR2YW50 YWdlb3VzIHRvIHRoZSBhZHZlcnNhcnkgYmVjYXVzZSB0aGUgc291cmNlIG9mIHRoZSBhdHRhY2sg d2lsbCBiZSBmcm9tIGEgbm9ybWFsIGxvY2F0aW9uIGFuZCBiZWNhdXNlDQogZnV0dXJlIGRldmlj ZSBhdXRob3JpemF0aW9ucyBtYXkgaW5jbHVkZSBhIGZpbmdlcnByaW50IG9mIHRoZSBkZXZpY2Ug LSBhIGZpbmdlcnByaW50IHRoYXQgd291bGQgZmFpbCBvbiB0aGUgc3RvbGVuIGtleS4gQnV0IGxv b2sgYXQgd2hhdCB3ZeKAmXZlIGRvbmUgdG8gdGhlIHVuYXV0aG9yaXplZCBhZHZlcnNhcnkgd2l0 aCB0aGUgcHJlLWF1dGhlbnRpY2F0aW9uIHRva2VuIC0gZGVmZWF0ZWQgcmVzb3VyY2UgRG9TLCBp bmZvcm1hdGlvbiBsZWFrYWdlLA0KIGFsbCB2dWxuZXJhYmlsaXRpZXMgb2YgdGhlIHNlcnZlciwg YWxsIGNvbmZpZ3VyYXRpb24gZXJyb3JzIG9mIHRoZSBhcHBsaWNhdGlvbnMgb2YgdGhlIHNlcnZl ci4gQW5kIGl0IGF1Z21lbnRzIFRMUyB0byBkZWZlYXQgbWFuLWluLXRoZS1taWRkbGUgYXR0YWNr cy48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxi cj4NCjxicj4NCjxicj4NCjxvOnA+PC9vOnA+PC9wPg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdp bi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPGRpdiBpZD0iYmxvb3Bf Y3VzdG9tZm9udCI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEwLjBwdDtmb250LWZhbWlseTpIZWx2ZXRpY2EiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdiBpZD0iYmxvb3BfY3VzdG9tZm9udCI+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTpIZWx2ZXRpY2Ei PklmIHlvdSBhZGQgYSB0aW1lIGZhY3RvciBzdWNoIGFuIGF0dGFjayB3aWxsIGhhdmUgbGltaXRl ZCB2YWx1ZS4gSW4gZmFjdCBhIHRva2VuIG5lZWQgbm90IGJlIHZhbGlkIGZvciBtb3JlIHRoYW4g YWJvdXQgMTAgbWludXRlcyB0byBhY2NvdW50IGZvciBza2V3ZWQgY2xvY2tzLjwvc3Bhbj48bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPkFzIG5vdGVkIG9uIGEgZGlmZmVyZW50IHBvc3RpbmcsIFNpbmdsZSBQYWNrZXQg QXV0aG9yaXphdGlvbiBpcyBiYXNlZCBvbiBSRkMgNDIyNiB3aGljaCBoYXMgYm90aCBhIGNvdW50 ZXIgYW5kIGEgdGltZSBiYXNlZCBhcHByb2FjaC4gUGVyc29uYWxseSwgSSBwcmVmZXIgYSBjb3Vu dGVyLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij5CdXQgYWdhaW4sIHRoaXMgaXMgYWxsIGlycmVsZXZhbnQgYmVjYXVzZSBJ4oCZbSBub3Qgc3Vn Z2VzdGluZyBhbnkgb25lIHByZS1hdXRoZW50aWNhdGlvbi4gSeKAmW0ganVzdCB1c2luZyBhbiBl eGFtcGxlIHRvIHNob3cgaG93IGl0IGNhbiBzdG9wIG11bHRpcGxlIHR5cGVzIG9mIGF0dGFja3Mu PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJz cDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkJy ZW50PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 YnI+DQo8YnI+DQo8YnI+DQo8bzpwPjwvbzpwPjwvcD4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJn aW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OkhlbHZldGlj YSI+PGJyPg0KPGJyPg0KPGJyPg0KPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9ImFp cm1haWxvbiI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6SGVsdmV0 aWNhIj5PbiAyMyBKdWx5IDIwMTkgYXQgMTYuNDEuMDksIFJvYmVydG8gUGVvbiAoPGEgaHJlZj0i bWFpbHRvOmZlbml4QGZiLmNvbSI+ZmVuaXhAZmIuY29tPC9hPikgd3JvdGU6PC9zcGFuPjxvOnA+ PC9vOnA+PC9wPg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJv dHRvbTo1LjBwdDtmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsO29ycGhhbnM6IGF1dG87dGV4dC1h bGlnbjpzdGFydDt3aWRvd3M6IGF1dG87LXdlYmtpdC10ZXh0LXNpemUtYWRqdXN0OiBhdXRvOy13 ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDt3b3JkLXNwYWNpbmc6MHB4Ij4NCjxkaXY+DQo8 ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1h bHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMC4wcHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhIj5J4oCZZCBhc3N1bWUgIzEgaXMgbGVzcyBs aWtlbHkgdG8gZXhwZXJpZW5jZSBjcmlwcGxpbmcgU1lOLWJhc2VkIERvUyBhdHRhY2tzLCBhbmQg Y291bGQgb3RoZXJ3aXNlIGJlIGFjY29tcGxpc2hlZCBieSBsaW1pdGluZw0KIGFjY2VzcyBpbiBJ UC1zcGFjZSAoaW1wZXJmZWN0LCBidXQgd2XigJlyZSBsb29raW5nIGZvciDigJxnb29kLWVub3Vn aOKAnSwgaGVyZSkuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21hcmdpbi1ib3R0b206MTIuMHB0Ij48c3Bh biBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTpIZWx2ZXRpY2EiPjxicj4NCi4u IHdoaWNoIG1lYW5zIHRoYXQgSSB0aGluayB3ZSBzaG91bGQgY29uc2lkZXIgMiYjNDM7MyBvbmx5 LCByZWFsbHkuPGJyPg0KPGJyPg0KRm9yICMyIGFuZCAjMywgd2hpY2ggSSBzdXNwZWN0IGhhdmUg c2lnbmlmaWNhbnQgb3ZlcmxhcHMgKHNpdGVzIG1heSBwcm92aWRlIHNlcnZpY2VzIGJvdGggdG8g bG9nZ2VkLWluIHVzZXJzIGFuZCB1c2VycyB3aG8gYXJlbuKAmXQgbG9nZ2VkIGluKSwgdGhlIHBy ZS1hdXRob3JpemF0aW9uIGVpdGhlcjo8YnI+DQombmJzcDsgYSkgY2FuIGJlIERvU+KAmWQgaXRz ZWxmLjxicj4NCiZuYnNwOyBiKSBjYW4gYmUgdXNlZCB0byBkbyBhIERvUyBpbiB0aGUgZnV0dXJl Ljwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28t bWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhIj5JbiBjYXNlIGIsIGFz IGFuIGF0dGFja2VyLCB5b3XigJlkIGdldCBvciB3YWl0IGZvciB0aGUgY2xpZW50IHRvIGF1dGhl bnRpY2F0ZSwgdGhlbiB1c2UgdGhhdCBhdXRoZW50aWNhdGlvbiBpbiBhIHJlcGxheSBhdHRhY2ss DQogZS5nLiBieSByZXBsaWNhdGluZyB0aGUgYXV0aCB0b2tlbiBhY3Jvc3MgbWFueSBob3N0cy48 YnI+DQpJbiBjYXNlcyB3aGVyZSB5b3UgYXJlIGRpc2FsbG93ZWQgdG8gcmVwbGljYXRlIHRoZSBh dXRoIHRva2VuLCBlLmcuIGJlY2F1c2UgaXQgaXMgdGllZCB0byBhIHBhcnRpY3VsYXIgSVAsIHlv dSBjYW4gaGVscCBzb2x2ZSB0aGUgcmVwbGF5IGF0dGFjayBob3dldmVyIHlvdeKAmWxsIGJlIGJp YXNpbmcgdHJhZmZpYyB0byB1c2VycyB3aG9zZSBJUCBpcyBzdGFibGUgYW5kIHdobyBhcmUgbG9n Z2VkIGluL2F1dGjigJlkLjxicj4NCkluIHRoZSBwcmUtc2hhcmVkIGtleSBzY2VuYXJpbyB0aGF0 IHdhcyBkZXNjcmliZWQsIGlmIGFueSBvbmUgY2xpZW50IGxlYWtzIHRoZSBzaGFyZWQtc2VjcmV0 LCB0aGVuIGl0IGJlY29tZXMgbm90IHZlcnkgdXNlZnVsIGFuZCBjZXJ0YWlubHkgZG9lc27igJl0 IHByb3RlY3QgYWdhaW5zdCBhIERvUy4gSeKAmWQgZ3Vlc3MgdGhhdCB0aGUgcHJvYmFiaWxpdHkg b2YgdGhlIGxvc3Mgb2YgYSBzeW1tZXRyaWMga2V5IGlzIHByb3BvcnRpb25hbCB0byB0aGUgYnJl YWR0aA0KIG9mIHRoZSBkaXN0cmlidXRpb24gb2YgdGhlIGtleS48YnI+DQo8YnI+DQpXaGF0IEni gJltIHRyeWluZyB0byBwb2ludCBvdXQgaXMgdGhhdCB0aGlzIGRvZXNu4oCZdCByZWFsbHkgc2Vl bSB0byBzb2x2ZSB0aGUgZ2VuZXJpYyBEb1MgYXR0YWNrLjxicj4NCllvdeKAmWxsIHN0aWxsIG5l ZWQgdG8gZG8gc29tZSBoZXVyaXN0aWNzL3J1bGVzIGJhc2VkIHVwb24gd2hhdGV2ZXIgaXMgb2Jz ZXJ2YWJsZSwgYXQgYSBtaW5pbXVtIHRoZSA1LXR1cGxlLjxicj4NCkdldHRpbmcgbW9yZSB0aGFu IHRoZSA1LXR1cGxlIHRvIGJlIHZpc2libGUgd2lsbCB0YWtlIG1vcmUgd29yayBieSB0aGUgc2Vy dmVyLCB0cnVlLCBidXQgZ2l2ZW4gb3RoZXIgZGVzaWduIGNvbnN0cmFpbnRzLCBJIGRvbuKAmXQg c2VlIGhvdyB0aGF0IGlzIGF2b2lkYWJsZS48YnI+DQo8YnI+DQotPVI8L3NwYW4+PG86cD48L286 cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMC4wcHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0I1 QzRERiAxLjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGluIj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6 YXV0byI+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6SGVsdmV0 aWNhIj5Gcm9tOjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bh bj48L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5Okhl bHZldGljYSI+JnF1b3Q7PGEgaHJlZj0ibWFpbHRvOmJyZW50LmJpbGdlckB2ZXJpem9uLmNvbSI+ YnJlbnQuYmlsZ2VyQHZlcml6b24uY29tPC9hPiZxdW90Ow0KICZsdDs8YSBocmVmPSJtYWlsdG86 YnJlbnQuYmlsZ2VyQHZlcml6b24uY29tIj5icmVudC5iaWxnZXJAdmVyaXpvbi5jb208L2E+Jmd0 Ozxicj4NCjxiPkRhdGU6PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7 PC9zcGFuPjwvYj5UdWVzZGF5LCBKdWx5IDIzLCAyMDE5IGF0IDk6NTkgQU08YnI+DQo8Yj5Ubzo8 c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PC9iPlJvYmVy dG8gUGVvbiAmbHQ7PGEgaHJlZj0ibWFpbHRvOmZlbml4QGZiLmNvbSI+ZmVuaXhAZmIuY29tPC9h PiZndDs8YnI+DQo8Yj5DYzo8c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJz cDs8L3NwYW4+PC9iPiZxdW90OzxhIGhyZWY9Im1haWx0bzpicmVudC5iaWxnZXJAdmVyaXpvbi5j b20iPmJyZW50LmJpbGdlckB2ZXJpem9uLmNvbTwvYT4mcXVvdDsgJmx0OzxhIGhyZWY9Im1haWx0 bzpicmVudC5iaWxnZXJAdmVyaXpvbi5jb20iPmJyZW50LmJpbGdlckB2ZXJpem9uLmNvbTwvYT4m Z3Q7LCBXYXRzb24gTGFkZCAmbHQ7PGEgaHJlZj0ibWFpbHRvOndhdHNvbmJsYWRkQGdtYWlsLmNv bSI+d2F0c29uYmxhZGRAZ21haWwuY29tPC9hPiZndDssDQogJnF1b3Q7YnJlbnQuYmlsZ2VyPTxh IGhyZWY9Im1haWx0bzo0MHZlcml6b24uY29tQGRtYXJjLmlldGYub3JnIj40MHZlcml6b24uY29t QGRtYXJjLmlldGYub3JnPC9hPiZxdW90OyAmbHQ7YnJlbnQuYmlsZ2VyPTxhIGhyZWY9Im1haWx0 bzo0MHZlcml6b24uY29tQGRtYXJjLmlldGYub3JnIj40MHZlcml6b24uY29tQGRtYXJjLmlldGYu b3JnPC9hPiZndDssICZxdW90OzxhIGhyZWY9Im1haWx0bzpxdWljQGlldGYub3JnIj5xdWljQGll dGYub3JnPC9hPiZxdW90OyAmbHQ7PGEgaHJlZj0ibWFpbHRvOnF1aWNAaWV0Zi5vcmciPnF1aWNA aWV0Zi5vcmc8L2E+Jmd0OywNCiBJYW4gU3dldHQgJmx0O2lhbnN3ZXR0PTxhIGhyZWY9Im1haWx0 bzo0MGdvb2dsZS5jb21AZG1hcmMuaWV0Zi5vcmciPjQwZ29vZ2xlLmNvbUBkbWFyYy5pZXRmLm9y ZzwvYT4mZ3Q7PGJyPg0KPGI+U3ViamVjdDo8c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNw YWNlIj4mbmJzcDs8L3NwYW4+PC9iPlJlOiBbRV0gRG9TLWluZyBRVUlDIHNlcnZlcnMgaXMgdG9v IGVhc3k8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 SGVsdmV0aWNhIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1t YXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250 LWZhbWlseTpIZWx2ZXRpY2EiPlRoZXJlIGFyZSBsb3RzIG9mIHBvc3NpYmxlIHNjZW5hcmlvcywg c28gcGxlYXNlIGp1c3QgY29uc2lkZXIgdGhlc2UgdG8gYmUgZXhhbXBsZXMuIExldOKAmXMgZGl2 aWRlIHRoZSB3b3JsZCBvZiBzZXJ2ZXJzIGluIHRvDQogMSkgZW50ZXJwcmlzZSBidXNpbmVzcy10 by1idXNpbmVzcyB3ZWJzaXRlcywgMikgd2Vic2l0ZXMgbWVhbnQgZm9yIGNvbnN1bWVycyB3aGVy ZSBhdXRoZW50aWNhdGlvbiBpcyBkZXNpcmFibGUsIGFuZCAzKSB3ZWJzaXRlcyB0aGF0IHdpbGwg d2FudCB0byBhbGxvdyB0aGVpciB1c2VycyB0byBiZSBhbm9ueW1vdXMsIHRoZXJlZm9yZSwgcHJl LWF1dGhlbnRpY2F0aW9uIHdvdWxkIG5vdCBhcHBseS48L3NwYW4+PG86cD48L286cD48L3A+DQo8 ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTAuMHB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYSI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNv LW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYSI+RW50ZXJwcmlzZSBi dXNpbmVzcy10by1idXNpbmVzcyB3ZWJzaXRlcyBjb3VsZCB1c2Ugc29tZXRoaW5nIHNpbWlsYXIg dG8gdGhlIFNvZnR3YXJlIERlZmluZWQgUGVyaW1ldGVyIChTRFApIFNpbmdsZSBQYWNrZXQgQXV0 aG9yaXphdGlvbg0KIChTUEEpIHByb3RvY29sIGNyZWF0ZWQgYnkgdGhlIENsb3VkIFNlY3VyaXR5 IEFsbGlhbmNlLiBJdCB1c2VzIHRoZSBmYWN0IHRoYXQgY2xpZW50cyBhcmUgb24tYm9hcmRlZCB0 byB0aGUgc3lzdGVtIGluIGEgb25lIHRpbWUgZXZlbnQgdG8gcHJvdmlkZSB0aGUgY2xpZW50cyB3 aXRoIGEgc2hhcmVkIHNlY3JldCBrZXkuIFRoZSBrZXkgaXMgdXNlZCBpbiBhIGNvdW50ZXItYmFz ZWQgSE1BQyBjYWxjdWxhdGlvbi4gU2luY2Ugb25seSBhbiBhdXRob3JpemVkDQogY2xpZW50IGNh biBjYWxjdWxhdGUgdGhlIHByb3BlciBITUFDLCB0aGUgSE1BQyBjYW4gYmUgdXNlZCBmb3IgcHJl LWF1dGhlbnRpY2F0aW9uLiBUaHVzLCB0aGUgcHJlLWF1dGhlbnRpY2F0aW9uIHRva2VuIGNvdWxk IGxvb2sgc29tZXRoaW5nIGxpa2UgdGhpczo8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1 dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAu MHB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYSI+Q2xpZW50LSZndDtTZXJ2ZXI6IENsaWVudElELCBD b3VudGVyLCBITUFDW0NsaWVudElEIHx8IENvdW50ZXIsIEtzXSB3aGVyZSBLcyBpcyBhIHNoYXJl ZCBzZWNyZXQga2V5IHRoYXQgYm90aCB0aGUgY2xpZW50IGFuZCBzZXJ2ZXINCiBoYXZlLjwvc3Bh bj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhIj5PbiB0 aGUgc2VydmVyIHNpZGUsIHRoZSBzZXJ2ZXIgd291bGQgcmVjYWxjdWxhdGUgdGhlIEhNQUMgYW5k IGNvbXBhcmUgaXQgdG8gdGhlIG9uZSBwcm92aWRlZCBieSB0aGUgY2xpZW50LiZuYnNwOzwvc3Bh bj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhIj5Ob3Rl IHRoYXQgdGhpcyBpbmZvcm1hdGlvbiBpcyBzZW50IGZyb20gdGhlIGNsaWVudCB0byB0aGUgc2Vy dmVyIGluIGNsZWFyIHRleHQgKGkuZS4sIG5vdCBlbmNyeXB0ZWQpLjwvc3Bhbj48bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFy Z2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhIj5JbiBwcmFjdGljZSwgdGhl cmUgd291bGQgcHJvYmFibHkgYmUgbW9yZSBmaWVsZHMsIGJ1dCB0aGUgaW1wb3J0YW50IHBhcnQg aXMgdGhhdCB0aGUgb25lLXRpbWUgb24gYm9hcmRpbmcgZW5hYmxlcyBhIGxpZmV0aW1lDQogb2Yg cHJlLWF1dGhlbnRpY2F0aW9uIHRva2Vucy48L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMC4wcHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhIj5XZWJzaXRlcyBt ZWFudCBmb3IgY29uc3VtZXJzIHdvdWxkIHByb2JhYmx5IGJlIGhhbmRsZWQgZGlmZmVyZW50bHkg LSBzcGVjaWZpY2FsbHksIG5vIG9uLWJvYXJkaW5nLiBUaGF0IG1lYW5zIHRoZXJlIHdvdWxkIGJl DQogc29tZSBraW5kIG9mIHRva2VuIHNlcnZpY2UgLSBzaW1pbGFyIHRvIE9BdXRoLCBidXQgb3Bl cmF0aW5nIHByaW9yIHRvIHRoZSBUQ1AgZXF1aXZhbGVudCBvZiBTWU4vQUNLLiBQZXJoYXBzIENs b3VkRmxhaXIgb3IgR29vZ2xlIG9yIE1pY3Jvc29mdCBjb3VsZCBpbnZlbnQgc29tZXRoaW5nIGxp a2UgdGhpcyBhbmQgb2ZmZXIgaXQgYXMgYSBzZXJ2aWNlPz8/PC9zcGFuPjxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYSI+Jm5ic3A7PC9zcGFuPjxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1 dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYSI+ QWdhaW4sIHRoZXJlIHdpbGwgYmUgb3RoZXIgd2Vic2l0ZXMgdGhhdCB3aWxsIG5vdCB3YW50IHBy ZS1hdXRoZW50aWNhdGlvbiBiZWNhdXNlIHRoZXkgd2FudCB0byBhbGxvdyBhbm9ueW1vdXMgdXNl cnMgdG8gdGhlaXINCiBzaXRlLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBw dDtmb250LWZhbWlseTpIZWx2ZXRpY2EiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJn aW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTpIZWx2ZXRpY2EiPkJyZW50PC9zcGFuPjxvOnA+ PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2lu LXRvcC1hbHQ6YXV0bzttYXJnaW4tYm90dG9tOjEyLjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMC4wcHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48 L3A+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUu MHB0Ij4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3At YWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTAuMHB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYSI+T24gSnVsIDIzLCAyMDE5LCBhdCA2OjI2 IEFNLCBSb2JlcnRvIFBlb24gJmx0OzxhIGhyZWY9Im1haWx0bzpmZW5peEBmYi5jb20iPmZlbml4 QGZiLmNvbTwvYT4mZ3Q7IHdyb3RlOjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2Zv bnQtZmFtaWx5OkhlbHZldGljYSI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1h cmdpbi10b3AtYWx0OmF1dG87bWFyZ2luLWJvdHRvbToxMi4wcHQiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWYiPkkn bSB0cnlpbmcgdG8gdW5kZXJzdGFuZCBob3cgYW55dGhpbmcgd2FzIHByZS1hdXRoZW50aWNhdGVk IHdpdGhvdXQgc3VmZmVyaW5nIGZyb20gYWxsIG9mIHRoZSBzYW1lIHByb2JsZW1zLjwvc3Bhbj48 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttYXJnaW4tYm90dG9tOjEyLjBwdCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1z ZXJpZiI+SG93IHdvdWxkIHN1Y2ggcHJlLWF1dGhlbnRpY2F0aW9uIGJlIGRvbmUgaW4gcHJhY3Rp Y2UsIGVzcGVjaWFsbHkgaW4gc2NlbmFyaW9zIHdoZXJlIHRoZSBzZXJ2ZXIgZG9lc24ndCBoYXZl IGEgd2hpdGVsaXN0DQogb2YgY2xpZW50cywgYW5kIHRoYXQgc2VydmljZSBkZXNpcmVzIHRyYWZm aWMgZnJvbSBub24tbWFsaWNpb3VzIGNsaWVudHM/PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFs dDphdXRvO21hcmdpbi1ib3R0b206MTIuMHB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBw dDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmIj4tPVI8L3NwYW4+PG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRv Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZx dW90OyxzYW5zLXNlcmlmIj5HZXQ8c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4m bmJzcDs8L3NwYW4+PGEgaHJlZj0iaHR0cHM6Ly91cmxkZWZlbnNlLnByb29mcG9pbnQuY29tL3Yy L3VybD91PWh0dHBzLTNBX19ha2EubXNfZ2hlaTM2JmFtcDtkPUR3TUYtZyZhbXA7Yz11ZEJUUnZG dlhDNURocWc3VUhwSmxQcHMzbVozTFJ4cGI2X18wUG9tQlRRJmFtcDtyPVctTzB0MHp3aGdYSFA4 dWpwaDZ1ejNySDBNdHVhTHdFcl83Z0UycDFYNW8mYW1wO209Q1YtSEloYlJWcC1hcmdpTnJWdV9E SzdyT05rNXh0OUw1cjBFZm13MTcwSSZhbXA7cz1XWGhqUTVjR2ZDcnc2QlNYZHE1anlkS0ViT0Yy UHUzdGpMMlFaV1h6NmVZJmFtcDtlPSI+T3V0bG9vaw0KIGZvciBBbmRyb2lkPC9hPjwvc3Bhbj48 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNh bnMtc2VyaWYiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8 ZGl2IGNsYXNzPSJNc29Ob3JtYWwiIGFsaWduPSJjZW50ZXIiIHN0eWxlPSJ0ZXh0LWFsaWduOmNl bnRlciI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNh Ij4NCjxociBzaXplPSIwIiB3aWR0aD0iNzklIiBhbGlnbj0iY2VudGVyIj4NCjwvc3Bhbj48L2Rp dj4NCjxkaXYgaWQ9ImRpdlJwbHlGd2RNc2ciPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48Yj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTpIZWx2ZXRpY2EiPkZyb206 PC9zcGFuPjwvYj48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTpIZWx2ZXRpY2EiPiZuYnNwOzwvc3Bhbj48 L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNh Ij48YSBocmVmPSJtYWlsdG86YnJlbnQuYmlsZ2VyQHZlcml6b24uY29tIj5icmVudC5iaWxnZXJA dmVyaXpvbi5jb208L2E+PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7 PC9zcGFuPiZsdDs8YSBocmVmPSJtYWlsdG86YnJlbnQuYmlsZ2VyQHZlcml6b24uY29tIj5icmVu dC5iaWxnZXJAdmVyaXpvbi5jb208L2E+Jmd0Ozxicj4NCjxiPlNlbnQ6PC9iPjxzcGFuIGNsYXNz PSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj5UdWVzZGF5LCBKdWx5IDIzLCAy MDE5IDg6MjE6MDUgQU08YnI+DQo8Yj5Ubzo8L2I+PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRl ZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPldhdHNvbiBMYWRkICZsdDs8YSBocmVmPSJtYWlsdG86d2F0 c29uYmxhZGRAZ21haWwuY29tIj53YXRzb25ibGFkZEBnbWFpbC5jb208L2E+Jmd0Ozxicj4NCjxi PkNjOjwvYj48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+ PGEgaHJlZj0ibWFpbHRvOmJyZW50LmJpbGdlcj00MHZlcml6b24uY29tQGRtYXJjLmlldGYub3Jn Ij5icmVudC5iaWxnZXI9NDB2ZXJpem9uLmNvbUBkbWFyYy5pZXRmLm9yZzwvYT48c3BhbiBjbGFz cz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+Jmx0OzxhIGhyZWY9Im1haWx0 bzpicmVudC5iaWxnZXI9NDB2ZXJpem9uLmNvbUBkbWFyYy5pZXRmLm9yZyI+YnJlbnQuYmlsZ2Vy PTQwdmVyaXpvbi5jb21AZG1hcmMuaWV0Zi5vcmc8L2E+Jmd0OzsNCiBSb2JlcnRvIFBlb24gJmx0 OzxhIGhyZWY9Im1haWx0bzpmZW5peEBmYi5jb20iPmZlbml4QGZiLmNvbTwvYT4mZ3Q7OzxzcGFu IGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48YSBocmVmPSJtYWls dG86cXVpY0BpZXRmLm9yZyI+cXVpY0BpZXRmLm9yZzwvYT48c3BhbiBjbGFzcz0iYXBwbGUtY29u dmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+Jmx0OzxhIGhyZWY9Im1haWx0bzpxdWljQGlldGYu b3JnIj5xdWljQGlldGYub3JnPC9hPiZndDs7PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1z cGFjZSI+Jm5ic3A7PC9zcGFuPjxhIGhyZWY9Im1haWx0bzpicmVudC5iaWxnZXJAdmVyaXpvbi5j b20iPmJyZW50LmJpbGdlckB2ZXJpem9uLmNvbTwvYT48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVy dGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+Jmx0OzxhIGhyZWY9Im1haWx0bzpicmVudC5iaWxnZXJA dmVyaXpvbi5jb20iPmJyZW50LmJpbGdlckB2ZXJpem9uLmNvbTwvYT4mZ3Q7Ow0KIElhbiBTd2V0 dCAmbHQ7PGEgaHJlZj0ibWFpbHRvOmlhbnN3ZXR0PTQwZ29vZ2xlLmNvbUBkbWFyYy5pZXRmLm9y ZyI+aWFuc3dldHQ9NDBnb29nbGUuY29tQGRtYXJjLmlldGYub3JnPC9hPiZndDs8YnI+DQo8Yj5T dWJqZWN0OjwvYj48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3Nw YW4+UmU6IFtFXSBEb1MtaW5nIFFVSUMgc2VydmVycyBpcyB0b28gZWFzeTxzcGFuIGNsYXNzPSJh cHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48L3NwYW4+PG86cD48L286cD48L3A+ DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTAuMHB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYSI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTpIZWx2ZXRp Y2EiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttYXJnaW4tYm90dG9t OjEyLjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6SGVsdmV0 aWNhIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFy Z2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20t YWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OkhlbHZl dGljYSI+T24gSnVsIDIyLCAyMDE5LCBhdCA5OjE2IFBNLCBXYXRzb24gTGFkZCAmbHQ7PGEgaHJl Zj0ibWFpbHRvOndhdHNvbmJsYWRkQGdtYWlsLmNvbSI+d2F0c29uYmxhZGRAZ21haWwuY29tPC9h PiZndDsgd3JvdGU6PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 SGVsdmV0aWNhIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bWFyZ2lu LWJvdHRvbToxMi4wcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTMuNXB0O2ZvbnQtZmFtaWx5 OkhlbHZldGljYSI+T24gTW9uLCBKdWwgMjIsIDIwMTkgYXQgNToyOSBQTTxicj4NCiZsdDs8L3Nw YW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhIj48 YSBocmVmPSJtYWlsdG86YnJlbnQuYmlsZ2VyPTQwdmVyaXpvbi5jb21AZG1hcmMuaWV0Zi5vcmci PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTMuNXB0Ij5icmVudC5iaWxnZXI9NDB2ZXJpem9uLmNv bUBkbWFyYy5pZXRmLm9yZzwvc3Bhbj48L2E+PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTMuNXB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYSI+Jmd0Ow0KIHdyb3RlOjwvc3Bhbj48bzpwPjwv bzpwPjwvcD4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0 b206NS4wcHQiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFs dDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEzLjVwdDtmb250LWZhbWlseTpIZWx2ZXRpY2EiPjxicj4NCjxicj4NCjxicj4NCk9uIEp1bCAy MiwgMjAxOSwgYXQgMTA6MTAgQU0sIFJvYmVydG8gUGVvbiAmbHQ7PGEgaHJlZj0ibWFpbHRvOmZl bml4QGZiLmNvbSI+ZmVuaXhAZmIuY29tPC9hPiZndDsgd3JvdGU6PGJyPg0KPGJyPg0KV2hlbiB5 b3XigJlyZSB0YWxraW5nIGFib3V0IHByZS1hdXRoZW50aWNhdGlvbiwgYXJlIHlvdSByZWZlcnJp bmcgdG8gdGhlIDAtcnR0IHN0dWZmPzxicj4NCjxicj4NCjxicj4NCjAtUlRUIGlzIGdvb2Qgc3R1 ZmYuIEl0IHJlZHVjZXMgdGltZSBmb3IgYSBkZXZpY2UgdGhhdOKAmXMgYWxyZWFkeSBrbm93biB0 byBiZSBhdXRob3JpemVkIHRvIGNvbm5lY3QgdG8gdGhlIHNlcnZlci48YnI+DQo8YnI+DQpQYXJ0 IG9mIHRoZSBwcm9ibGVtIGlzIHRvIHN0b3AgcmVzb3VyY2UgRG9TLiBUaGUgb3RoZXIgcGFydCBp cyBhYm91dCBpbmZvcm1hdGlvbiBsZWFrYWdlLjxicj4NCjxicj4NCkxldOKAmXMgYXNzdW1lIGEg dGltZSB3aGVuIGFsbCB3ZWJzaXRlIHVzZSBRVUlDIGFuZCBsZXQncyB0YWtlIGFuIGFkdmVyc2Fy eSB3aG8gaGFzIGp1c3QgbGVhcm5lZCBhYm91dCBhIHZ1bG5lcmFiaWxpdHkgaW4gV29yZHByZXNz LiBUaGUgYWR2ZXJzYXJ5IHdhbnRzIHRvIHNjYW4gdGhlIEludGVybmV0IGZpbmRpbmcgV29yZHBy ZXNzIHNpdGVzLiBOb3csIGlmIHRoZSBRVUlDIGNvbm5lY3Rpb24gcmVxdWlyZWQgcHJlLWF1dGhl bnRpY2F0aW9uLCB0aGVuDQogdGhlIHNlcnZlciB3b3VsZCBiZSBibGFjayB0byB0aGUgY29ubmVj dGlvbiBhbmQgdGhlIGFkdmVyc2FyeSBjb3VsZCBub3QgZGV0ZXJtaW5lIGlmIHRoZSBzaXRlIHVz ZXMgV29yZHByZXNzLiBCdXQsIGFzIGl0IHN0YW5kcyB0b2RheSwgaW4gdGhpcyBmdXR1cmUgdGlt ZSwgdGhlIGFkdmVyc2FyeSBzY2FucyB0aGUgSW50ZXJuZXQsIGNvbm5lY3RzIHRvIHRoZSBzZXJ2 ZXIsIGFuZCBpcyBoYW5kZWQgYSBXb3JkcHJlc3MgbG9naW4gc2NyZWVuLiBOb3cNCiB0aGUgYWR2 ZXJzYXJ5IGtub3dzIHdoZXJlIHRvIGF0dGFjay48L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Js b2NrcXVvdGU+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0 OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTMuNXB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYSI+PGJyPg0KSWYgY29ubmVjdGlvbiByZXF1aXJl cyBwcmVhdXRoZW50aWNhdGlvbiB0aGVuIG5vIG9uZSBjYW4gc2VlIHRoZSBzaXRlLCBubz88L3Nw YW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxibG9ja3F1b3RlIHN0 eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttYXJnaW4tYm90 dG9tOjEyLjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6SGVs dmV0aWNhIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8YmxvY2txdW90ZSBzdHlsZT0i bWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6 YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMy41cHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNh Ij48YnI+DQpJbiB0aGUgZW50ZXJwcmlzZSBpdCBpcyBhIGxpdHRsZSBkaWZmZXJlbnQuIENvbXBh bmllcyBpbXBsZW1lbnQgcmV2ZXJzZSBwcm94aWVzIHRvIHRyeSB0byBwcm90ZWN0IHNlcnZlcnMg ZnJvbSB1bmF1dGhvcml6ZWQgdXNlcnMuIEJ1dCB3aGF0IGlmIHRoZSBzZXJ2ZXJzIHJlcXVpcmVk IGEgcHJlLWF1dGhlbnRpY2F0aW9uIHRva2VuLiBUaGVuLCByZXZlcnNlIHByb3hpZXMgd291bGQg bm90IGJlIG5lZWRlZC48L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Jsb2NrcXVvdGU+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdp bi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTMuNXB0O2ZvbnQtZmFt aWx5OkhlbHZldGljYSI+PGJyPg0KU28gSSB0aGluayB0aGVyZSBhcmUgdHdvIGRpZmZlcmVudCB0 aGluZ3MgaGVyZSwgb3IgbWF5YmUgSSdtIG1pc3VuZGVyc3RhbmRpbmc6PGJyPg0KMTogV2UgaGF2 ZSBzZXJ2ZXJzIHRoYXQgaGF2ZSBhIGxpbWl0ZWQgbnVtYmVyIG9mIGNsaWVudHMgdGhhdCB3aWxs PGJyPg0KZXZlciB3YW50IHRvIGNvbm5lY3QgdG8gdGhlbSwgYW5kIHdhbnQgdG8gZW5hYmxlIG90 aGVyIGRldmljZXMgdG88YnI+DQpmaWx0ZXIgdGhlIHRyYWZmaWMsIHNvIG5lZWQgc29tZSBtZWNo YW5pc20gdGhhdCBlbmFibGVzIGEgbWlkZGxlYm94IHRvPGJyPg0KZmlsdGVyLjwvc3Bhbj48bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTpI ZWx2ZXRpY2EiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1h cmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQt ZmFtaWx5OkhlbHZldGljYSI+Tm8gbWlkZGxlIGJveCEgUHJlLWF1dGhlbnRpY2F0aW9uIG1ha2Vz IHNlcnZlcnMgc2VsZi1kZWZlbmRpbmcuIExhY2sgb2YgcHJlLWF1dGhlbnRpY2F0aW9uIGlzIHdo eSB3ZSBoYXZlIG1pZGRsZSBib3hlcy48L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87 bWFyZ2luLWJvdHRvbToxMi4wcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQt ZmFtaWx5OkhlbHZldGljYSI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPGJsb2NrcXVv dGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1t YXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEzLjVwdDtmb250 LWZhbWlseTpIZWx2ZXRpY2EiPjI6IFdlIGhhdmUgc2VydmVycyBnZW5lcmFsbHkgYXZhaWxhYmxl IHRvIHRoZSBwdWJsaWMgYW5kIGFyZSBjb25jZXJuZWQ8YnI+DQp0aGF0IHRoZSBRVUlDIHZlcnNp b24gb2YgYSBTWU4gZmxvb2QgY2FuJ3QgYmUgZGVhbHQgd2l0aCAoZGVzcGl0ZTxicj4NCmV2aWRl bmNlIHRvIHRoZSBjb250cmFyeSkuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Js b2NrcXVvdGU+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYSI+Jm5ic3A7PC9zcGFuPjxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhIj5Db21wYW5p ZXMgYW5kIHdlYnNpdGUgb3duZXJzIGhhdmUgdG8gcGF5IGZvciBhbnRpLURvUyBzZXJ2aWNlcyZu YnNwO2Zyb20gdGhlIGxpa2VzIG9mIFZlcml6b24gYW5kIG90aGVycyBCRUNBVVNFIHNlcnZlcnMg bGlzdGVuIHRvDQogYWxsIGNsaWVudHMuIFdpdGggcHJlLWF1dGhlbnRpY2F0aW9uLCB0aGUgbmVl ZCB0byBoYXZlIGFuIGFudGktRG9TIHNlcnZpY2Ugd291bGQgYmUgZ3JlYXRseSByZWR1Y2VkIGJl Y2F1c2Ugc2VydmVycyB3b3VsZCBub3QgcmVzcG9uZCB0byB1bmF1dGhvcml6ZWQgY2xpZW50cy48 L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6SGVsdmV0 aWNhIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28t bWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9u dC1mYW1pbHk6SGVsdmV0aWNhIj5BbmQgdGhlIHBvaW50IGFib3V0IGluZm9ybWF0aW9uIGxlYWth Z2UgaXMgaW1wb3J0YW50LCB0b28uPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAu MHB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYSI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1h cmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYSI+QnJlbnQ8L3NwYW4+PG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bWFyZ2luLWJvdHRvbToxMi4wcHQiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYSI+Jm5ic3A7PC9zcGFuPjxv OnA+PC9vOnA+PC9wPg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2lu LWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1t YXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjEzLjVwdDtmb250LWZhbWlseTpIZWx2ZXRpY2EiPjxicj4NCkkgZG9uJ3Qg a25vdyBtdWNoIGFib3V0IGhvdyBDbG91ZGZsYXJlIChteSBwbGFjZSBvZiBlbXBsb3ltZW50KSAm bmJzcDtkZWFsczxicj4NCndpdGggMiBidXQgaG9wZWZ1bGx5IHNvbWUgcGVvcGxlIHdobyBkby9p bXBsZW1lbnRvcnMgY2FuIHNwZWFrIHVwPGJyPg0KYWJvdXQgaG93IG11Y2ggb2YgYSBwcm9ibGVt IGl0IGlzLiBCdXQgMSBpcyBJIHRoaW5rIHZlcnkgbXVjaCBhPGJyPg0Kbm9uZ29hbDogbWlkZGxl Ym94IG9zc2lmaWNhdGlvbiBpcyBwYXJ0IG9mIHRoZSByZWFzb24gd2UgaGF2ZSBRVUlDLjxicj4N Cjxicj4NClNpbmNlcmVseSw8YnI+DQpXYXRzb24gTGFkZDwvc3Bhbj48bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhIj4m bmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4N CjxkaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tYm90dG9tOjEzLjVwdCI+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEzLjVwdDtmb250LWZhbWlseTpIZWx2ZXRp Y2EiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTMuNXB0 O2ZvbnQtZmFtaWx5OkhlbHZldGljYSI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdp bi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTMuNXB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYSI+QnJlbnQgQmxpZ2VyPC9zcGFu PjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjEzLjVwdDtmb250LWZhbWlseTpIZWx2ZXRpY2EiPkRpcmVj dG9yLVRlY2hub2xvZ3kmbmJzcDtWZXJpem9uIFNEUCZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2lu LXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMy41cHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhIj48YSBocmVmPSJtYWlsdG86YnJl bnQuYmlsZ2VyQHZlcml6b24uY29tIj5icmVudC5iaWxnZXJAdmVyaXpvbi5jb208L2E+PC9zcGFu PjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTguMHB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYSI+ Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEzLjVwdDtmb250LWZhbWls eTpIZWx2ZXRpY2EiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+ DQo8L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1ib3R0b206MTIuMHB0Ij4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OkhlbHZl dGljYSI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250 LWZhbWlseTpIZWx2ZXRpY2EiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1p bHk6SGVsdmV0aWNhIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tYm90dG9tOjEzLjVwdCI+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEzLjVwdDtmb250 LWZhbWlseTpIZWx2ZXRpY2EiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTMuNXB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYSI+Jm5ic3A7PC9zcGFuPjxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8i PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTMuNXB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYSI+QnJl bnQgQmxpZ2VyPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90 dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEzLjVwdDtmb250LWZhbWlseTpI ZWx2ZXRpY2EiPkRpcmVjdG9yLVRlY2hub2xvZ3kmbmJzcDtWZXJpem9uIFNEUCZuYnNwOzwvc3Bh bj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMy41cHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhIj48YSBo cmVmPSJtYWlsdG86YnJlbnQuYmlsZ2VyQHZlcml6b24uY29tIj5icmVudC5iaWxnZXJAdmVyaXpv bi5jb208L2E+PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0K PC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwv ZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8 bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibWFyZ2luLWJvdHRvbToxMy41cHQiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTMuNXB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYTtjb2xvcjpibGFjayI+Jm5ic3A7PC9zcGFu PjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMy41cHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhO2NvbG9yOmJs YWNrIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEzLjVwdDtmb250LWZhbWlseTpI ZWx2ZXRpY2E7Y29sb3I6YmxhY2siPkJyZW50IEJsaWdlcjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTMuNXB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYTtjb2xvcjpibGFjayI+RGlyZWN0b3ItVGVj aG5vbG9neSZuYnNwO1Zlcml6b24gU0RQJm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox My41cHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhO2NvbG9yOmJsYWNrIj48YSBocmVmPSJtYWlsdG86 YnJlbnQuYmlsZ2VyQHZlcml6b24uY29tIj5icmVudC5iaWxnZXJAdmVyaXpvbi5jb208L2E+PC9z cGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxOC4wcHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhO2NvbG9y OmJsYWNrIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTMuNXB0O2ZvbnQtZmFtaWx5OkhlbHZl dGljYTtjb2xvcjpibGFjayI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tYm90dG9tOjEyLjBwdCI+ Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxicj4N Cjxicj4NCjxicj4NCjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_6A50F13B0526421F9D20B997DB503CE6fbcom_-- From nobody Tue Jul 23 08:46:08 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9167C1203E1 for ; Tue, 23 Jul 2019 08:46:01 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.996 X-Spam-Level: X-Spam-Status: No, score=-1.996 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VEgSM1zo4RTn for ; Tue, 23 Jul 2019 08:45:57 -0700 (PDT) Received: from mail-ed1-x541.google.com (mail-ed1-x541.google.com [IPv6:2a00:1450:4864:20::541]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CE20112039B for ; Tue, 23 Jul 2019 08:45:56 -0700 (PDT) Received: by mail-ed1-x541.google.com with SMTP id d4so44432200edr.13 for ; Tue, 23 Jul 2019 08:45:56 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:in-reply-to:references:mime-version:date:message-id:subject:to :cc; bh=kucUMm0UVnIMluESemTWXwpNbts48PVLnd8nf+lysG8=; b=AsdS7JHIyT8xRpJOsN8lc7SWWN63YNKptUomJXV0wTW0vd2g9tTwGWY+WG6olAYS2P hyNXJmkO/lGmadRCpgB4mEnq6Im1XK+mpppk2Uc5dKiNltuBWHQS5b8HWmTp7xKc0emL WS7bL821IKJaKypGlMgU1YE2cSqDBv5rkXinJGmqQvezBtw9gTolSzffmdRITgGsrH+m OXsqbf9GxPLdYWCllKv61NacLL237lnqHiytjX7PmzA5lj+K0uI1mb2qlTzy4PuUc5EW pXMWDV2XCMcDK4aLlGpJV2LO42oztFMFCvceKOa6RpQIdqmWGreXtIHaWL37sadRJYlI wXAA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:in-reply-to:references:mime-version:date :message-id:subject:to:cc; bh=kucUMm0UVnIMluESemTWXwpNbts48PVLnd8nf+lysG8=; b=UEeWVps0xCt6aPKuc5ttPoSrpBKVvOJRQPQZHqwaIm6yHdwRszIi4chNYbGGqp5MFi 5aWr/C/gfNtug7NK85wUtM5Qc1QZX0YY77eXq072Kl7oxxxTC2I2xMfG6fAljw/a7iKk Zg5uP2mfgWv/71LoChjPSpF8W0Chb5JMZpGZ6jeTTSTemf6SjW0AL4PSupXUooiuQfet HsutizPQ7Ro8zq+zaIun9eUszX+RqVy6Lv4lVl7ZE5WErLKLD1bEABlq8QEKSkNb/1fs ReN4NF4T09+Pqp/9w+4SZFY+hMevuHdoaEDne9WJBVu/T10CM+q6ev5ZeQn1p4JZyR2r 2Qtg== X-Gm-Message-State: APjAAAVQ7F4nbrhaqGf7EyH2BCsRv1EJruXV4RNfU+jqTcZeuP/ZQkTO vTLw8l+ngor823fcdC3y3d6ckSXwWzeTeAPUJBTj/iaE X-Google-Smtp-Source: APXvYqzy58KIAXlSTjHobfhbzRqOljYQMMgqg9vkEYh/PIXgkr7/gfDZNeay8RmXj/RpWLBW/uojI56/zms3oiQEgPQ= X-Received: by 2002:a17:906:f211:: with SMTP id gt17mr57790711ejb.263.1563896755294; Tue, 23 Jul 2019 08:45:55 -0700 (PDT) Received: from 1058052472880 named unknown by gmailapi.google.com with HTTPREST; Tue, 23 Jul 2019 08:45:54 -0700 From: =?UTF-8?Q?Mikkel_Fahn=C3=B8e_J=C3=B8rgensen?= In-Reply-To: <2B1A8CB8-B012-465C-B1CE-6DECE9BDEC72@fb.com> References: <21E3AE84-02C5-4943-A88E-B62329E21002@one.verizon.com> <507D5DB7-EDF2-4429-A518-604A377F92D9@one.verizon.com> <9BF2DC9D-F14C-4451-9191-1A1557556691@fb.com> <9DC40032-3852-4237-A621-5C6B1102E74F@one.verizon.com> <16026C5D-847B-4281-ADE1-A65D394124FF@one.verizon.com> <2B1A8CB8-B012-465C-B1CE-6DECE9BDEC72@fb.com> X-Mailer: Airmail (420) MIME-Version: 1.0 Date: Tue, 23 Jul 2019 08:45:54 -0700 Message-ID: Subject: Re: [E] DoS-ing QUIC servers is too easy To: Roberto Peon , "brent.bilger@verizon.com" Cc: Watson Ladd , "quic@ietf.org" , "brent.bilger=40verizon.com@dmarc.ietf.org" , Ian Swett Content-Type: multipart/alternative; boundary="000000000000909469058e5b168e" Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 23 Jul 2019 15:46:07 -0000 --000000000000909469058e5b168e Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable I agree that only the time based approach is workable. But again, it is not about keeping clients authenticated. It is only to allow the initial packet to survive end to end, once. An since timers are inaccurate, you need some slack. That opens for an attack. But that attack assumes that an earlier token has been intercepted within the last few minutes, and if that is possible, you have a compromised machine that can do this all day long. So it is no better than no token. It is not perfect. But even then, you can filter on high volume tokens - it will kill a few clients that generate tokens the same way, but that is it. However, you would not normally have a compromised client, and if you do, well, you have bigger problems. And if somehow the 10minute pre-auth token was stolen without any means to regenerated, that is useless, so nobody would bother to raise such an attack. On 23 July 2019 at 17.36.21, Roberto Peon (fenix@fb.com) wrote: If you=E2=80=99re in a =E2=80=9Csmall=E2=80=9D deployment that is exposed t= o the internet, then you=E2=80=99re going to be dead regardless of the tokens because the links = will be full of useless packets if someone decides to do an attack at any reasonable scale. If you=E2=80=99re in a =E2=80=9Clarge=E2=80=9D deployment that is exposed t= o the internet, then a counter-based implementation that requires any state at servers (to verify the counter) is likely to be very expensive as it either requires an RPC for each incoming packet-to-be-authenticated, or it requires that the packet be routed to a specific server, which makes the individual servers DoSable. If you have a =E2=80=9Clarge=E2=80=9D deployment and use a time-based imple= mentation, then you have the goldilocks-like problem of choosing the correct TTL, and that is going to be difficult as the DoS effectiveness becomes directly (inversely) related to the TTL length as TTL length determines the amount of the population that is no longer authenticated. A short TTL means very little benefit can be ascribed by having the token because few clients will remain authenticated. The combination of time and counter doesn=E2=80=99t negate any of the disad= vantages of either. I don=E2=80=99t ultimately see a way out of having to heuristically examine 5-tuples. -=3DR *From: *"brent.bilger@verizon.com" *Date: *Tuesday, July 23, 2019 at 11:19 AM *To: *Mikkel Fahn=C3=B8e J=C3=B8rgensen *Cc: *Roberto Peon , "brent.bilger@verizon.com" < brent.bilger@verizon.com>, Watson Ladd , " quic@ietf.org" , "brent.bilger=3D40verizon.com@dmarc.ietf.or= g" , Ian Swett *Subject: *Re: [E] DoS-ing QUIC servers is too easy On Jul 23, 2019, at 7:53 AM, Mikkel Fahn=C3=B8e J=C3=B8rgensen wrote: It is not that easy to steal a token and replay, but it can happen. Yes, it requires compromising a client and stealing the key or just using the key from a back door. In practice the latter may be advantageous to the adversary because the source of the attack will be from a normal location and because future device authorizations may include a fingerprint of the device - a fingerprint that would fail on the stolen key. But look at what we=E2=80=99ve done to the unauthorized adversary with the pre-authenticatio= n token - defeated resource DoS, information leakage, all vulnerabilities of the server, all configuration errors of the applications of the server. And it augments TLS to defeat man-in-the-middle attacks. If you add a time factor such an attack will have limited value. In fact a token need not be valid for more than about 10 minutes to account for skewed clocks. As noted on a different posting, Single Packet Authorization is based on RFC 4226 which has both a counter and a time based approach. Personally, I prefer a counter. But again, this is all irrelevant because I=E2=80=99m not suggesting any on= e pre-authentication. I=E2=80=99m just using an example to show how it can st= op multiple types of attacks. Brent On 23 July 2019 at 16.41.09, Roberto Peon (fenix@fb.com) wrote: I=E2=80=99d assume #1 is less likely to experience crippling SYN-based DoS = attacks, and could otherwise be accomplished by limiting access in IP-space (imperfect, but we=E2=80=99re looking for =E2=80=9Cgood-enough=E2=80=9D, he= re). .. which means that I think we should consider 2+3 only, really. For #2 and #3, which I suspect have significant overlaps (sites may provide services both to logged-in users and users who aren=E2=80=99t logged in), t= he pre-authorization either: a) can be DoS=E2=80=99d itself. b) can be used to do a DoS in the future. In case b, as an attacker, you=E2=80=99d get or wait for the client to authenticate, then use that authentication in a replay attack, e.g. by replicating the auth token across many hosts. In cases where you are disallowed to replicate the auth token, e.g. because it is tied to a particular IP, you can help solve the replay attack however you=E2=80=99ll be biasing traffic to users whose IP is stable and who are l= ogged in/auth=E2=80=99d. In the pre-shared key scenario that was described, if any one client leaks the shared-secret, then it becomes not very useful and certainly doesn=E2= =80=99t protect against a DoS. I=E2=80=99d guess that the probability of the loss o= f a symmetric key is proportional to the breadth of the distribution of the key= . What I=E2=80=99m trying to point out is that this doesn=E2=80=99t really se= em to solve the generic DoS attack. You=E2=80=99ll still need to do some heuristics/rules based upon whatever i= s observable, at a minimum the 5-tuple. Getting more than the 5-tuple to be visible will take more work by the server, true, but given other design constraints, I don=E2=80=99t see how t= hat is avoidable. -=3DR *From: *"brent.bilger@verizon.com" *Date: *Tuesday, July 23, 2019 at 9:59 AM *To: *Roberto Peon *Cc: *"brent.bilger@verizon.com" , Watson Ladd < watsonbladd@gmail.com>, "brent.bilger=3D40verizon.com@dmarc.ietf.org" , "quic@ietf.org" , Ian Swett *Subject: *Re: [E] DoS-ing QUIC servers is too easy There are lots of possible scenarios, so please just consider these to be examples. Let=E2=80=99s divide the world of servers in to 1) enterprise business-to-business websites, 2) websites meant for consumers where authentication is desirable, and 3) websites that will want to allow their users to be anonymous, therefore, pre-authentication would not apply. Enterprise business-to-business websites could use something similar to the Software Defined Perimeter (SDP) Single Packet Authorization (SPA) protocol created by the Cloud Security Alliance. It uses the fact that clients are on-boarded to the system in a one time event to provide the clients with a shared secret key. The key is used in a counter-based HMAC calculation. Since only an authorized client can calculate the proper HMAC, the HMAC can be used for pre-authentication. Thus, the pre-authentication token could look something like this: Client->Server: ClientID, Counter, HMAC[ClientID || Counter, Ks] where Ks is a shared secret key that both the client and server have. On the server side, the server would recalculate the HMAC and compare it to the one provided by the client. Note that this information is sent from the client to the server in clear text (i.e., not encrypted). In practice, there would probably be more fields, but the important part is that the one-time on boarding enables a lifetime of pre-authentication tokens. Websites meant for consumers would probably be handled differently - specifically, no on-boarding. That means there would be some kind of token service - similar to OAuth, but operating prior to the TCP equivalent of SYN/ACK. Perhaps CloudFlair or Google or Microsoft could invent something like this and offer it as a service??? Again, there will be other websites that will not want pre-authentication because they want to allow anonymous users to their site. Brent On Jul 23, 2019, at 6:26 AM, Roberto Peon wrote: I'm trying to understand how anything was pre-authenticated without suffering from all of the same problems. How would such pre-authentication be done in practice, especially in scenarios where the server doesn't have a whitelist of clients, and that service desires traffic from non-malicious clients? -=3DR Get Outlook for Android ------------------------------ *From:* brent.bilger@verizon.com *Sent:* Tuesday, July 23, 2019 8:21:05 AM *To:* Watson Ladd *Cc:* brent.bilger=3D40verizon.com@dmarc.ietf.org < brent.bilger=3D40verizon.com@dmarc.ietf.org>; Roberto Peon ; quic@ietf.org ; brent.bilger@verizon.com < brent.bilger@verizon.com>; Ian Swett *Subject:* Re: [E] DoS-ing QUIC servers is too easy On Jul 22, 2019, at 9:16 PM, Watson Ladd wrote: On Mon, Jul 22, 2019 at 5:29 PM wrote: On Jul 22, 2019, at 10:10 AM, Roberto Peon wrote: When you=E2=80=99re talking about pre-authentication, are you referring to = the 0-rtt stuff? 0-RTT is good stuff. It reduces time for a device that=E2=80=99s already kn= own to be authorized to connect to the server. Part of the problem is to stop resource DoS. The other part is about information leakage. Let=E2=80=99s assume a time when all website use QUIC and let's take an adv= ersary who has just learned about a vulnerability in Wordpress. The adversary wants to scan the Internet finding Wordpress sites. Now, if the QUIC connection required pre-authentication, then the server would be black to the connection and the adversary could not determine if the site uses Wordpress. But, as it stands today, in this future time, the adversary scans the Internet, connects to the server, and is handed a Wordpress login screen. Now the adversary knows where to attack. If connection requires preauthentication then no one can see the site, no? In the enterprise it is a little different. Companies implement reverse proxies to try to protect servers from unauthorized users. But what if the servers required a pre-authentication token. Then, reverse proxies would not be needed. So I think there are two different things here, or maybe I'm misunderstanding: 1: We have servers that have a limited number of clients that will ever want to connect to them, and want to enable other devices to filter the traffic, so need some mechanism that enables a middlebox to filter. No middle box! Pre-authentication makes servers self-defending. Lack of pre-authentication is why we have middle boxes. 2: We have servers generally available to the public and are concerned that the QUIC version of a SYN flood can't be dealt with (despite evidence to the contrary). Companies and website owners have to pay for anti-DoS services from the likes of Verizon and others BECAUSE servers listen to all clients. With pre-authentication, the need to have an anti-DoS service would be greatly reduced because servers would not respond to unauthorized clients. And the point about information leakage is important, too. Brent I don't know much about how Cloudflare (my place of employment) deals with 2 but hopefully some people who do/implementors can speak up about how much of a problem it is. But 1 is I think very much a nongoal: middlebox ossification is part of the reason we have QUIC. Sincerely, Watson Ladd Brent Bliger Director-Technology Verizon SDP brent.bilger@verizon.com Brent Bliger Director-Technology Verizon SDP brent.bilger@verizon.com Brent Bliger Director-Technology Verizon SDP brent.bilger@verizon.com --000000000000909469058e5b168e Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable = I agree that only th= e time based approach is workable. But again, it is not about keeping clien= ts authenticated. It is only to allow the initial packet to survive end to = end, once. An since timers are inaccurate, you need some slack. That opens = for an attack. But that attack assumes that an earlier token has been inter= cepted within the last few minutes, and if that is possible, you have a com= promised machine that can do this all day long. So it is no better than no = token. It is not perfect. But even then, you can filter on high volume toke= ns - it will kill a few clients that generate tokens the same way, but that= is it.

<= /div>
However, you = would not normally have a compromised client, and if you do, well, you have= bigger problems. And if somehow the 10minute pre-auth token was stolen wit= hout any means to regenerated, that is useless, so nobody would bother to r= aise such an attack.
<= br>

On 23 July 2019 at 17.36.21, Ro= berto Peon (fenix@fb.com) wrote:

If you=E2=80=99re in a =E2=80=9Csmall=E2=80=9D deplo= yment that is exposed to the internet, then you=E2=80=99re going to be dead= regardless of the tokens because the links will be full of useless packets= if someone decides to do an attack at any reasonable scale.

If you=E2=80=99re in a =E2=80=9Clarge=E2=80=9D deployment that is exposed t= o the internet, then a counter-based implementation that requires any state= at servers (to verify the counter) is likely to be very expensive as it ei= ther requires an RPC for each incoming packet-to-be-authenticated, or it requires that the packet be routed to a specific server, which makes= the individual servers DoSable.

If you have a =E2=80=9Clarge=E2=80=9D deployment and use a time-based imple= mentation, then you have the goldilocks-like problem of choosing the correc= t TTL, and that is going to be difficult as the DoS effectiveness becomes d= irectly (inversely) related to the TTL length as TTL length determines the amount of the population that is no longer authe= nticated. A short TTL means very little benefit can be ascribed by having t= he token because few clients will remain authenticated.

The combination of time and counter doesn=E2=80=99t negate any of the disad= vantages of either.

I don=E2=80=99t ultimately see a way out of having to heuristically examine= 5-tuples.
-=3DR

=C2=A0

From= : "brent.bilger@verizon.com" <brent.bilger@verizon.com> Date: Tuesday, July 23, 2019 at 11:19 AM
To: Mikkel Fahn=C3=B8e J=C3=B8rgensen <mikkelfj@gmail.com>
Cc: Roberto Peon <fenix@fb.com>, "brent.bilger@veriz= on.com" <brent.bilg= er@verizon.com>, Watson Ladd <watsonbladd@gmail.com>, "quic@ietf.org" <quic@ietf.org= >, "brent.bilger=3D40verizon.com@dmarc.ietf.org" <brent.bilger=3D40verizon.com@dmarc.ietf.org>, Ia= n Swett <ianswett=3D40goog= le.com@dmarc.ietf.org>
Subject: Re: [E] DoS-ing QUIC servers is too easy

=C2=A0

=C2=A0



On Jul 23, 2019, at 7:53 AM, Mikkel Fahn=C3=B8e J=C3= =B8rgensen <mikkelfj@gmail.com= > wrote:

=C2=A0

It is not that easy to steal a token and replay, but it can happen.

=C2=A0

Yes, it requires compromising a client and stealing = the key or just using the key from a back door. In practice the latter may = be advantageous to the adversary because the source of the attack will be f= rom a normal location and because future device authorizations may include a fingerprint of the device - a f= ingerprint that would fail on the stolen key. But look at what we=E2=80=99v= e done to the unauthorized adversary with the pre-authentication token - de= feated resource DoS, information leakage, all vulnerabilities of the server, all configuration errors of the applica= tions of the server. And it augments TLS to defeat man-in-the-middle attack= s.



=C2=A0

If you add a time factor such an attack will have limited value. In fact= a token need not be valid for more than about 10 minutes to account for sk= ewed clocks.

=C2=A0

As noted on a different posting, Single Packet Autho= rization is based on RFC 4226 which has both a counter and a time based app= roach. Personally, I prefer a counter.

=C2=A0

But again, this is all irrelevant because I=E2=80=99= m not suggesting any one pre-authentication. I=E2=80=99m just using an exam= ple to show how it can stop multiple types of attacks.

=C2=A0

Brent





On 23 July 2019 at 16.41.09, Roberto Peon (fenix@fb.com) wrote:

I=E2=80=99d= assume #1 is less likely to experience crippling SYN-based DoS attacks, an= d could otherwise be accomplished by limiting access in IP-space (imperfect, but we=E2=80=99re looking for =E2=80=9Cgood= -enough=E2=80=9D, here).


.. which means that I think we should consider 2+3 only, really.

For #2 and #3, which I suspect have significant overlaps (sites may provide= services both to logged-in users and users who aren=E2=80=99t logged in), = the pre-authorization either:
=C2=A0 a) can be DoS=E2=80=99d itself.
=C2=A0 b) can be used to do a DoS in the future.

In case b, = as an attacker, you=E2=80=99d get or wait for the client to authenticate, t= hen use that authentication in a replay attack, e.g. by replicating the auth token across many hosts.
In cases where you are disallowed to replicate the auth token, e.g. because= it is tied to a particular IP, you can help solve the replay attack howeve= r you=E2=80=99ll be biasing traffic to users whose IP is stable and who are= logged in/auth=E2=80=99d.
In the pre-shared key scenario that was described, if any one client leaks = the shared-secret, then it becomes not very useful and certainly doesn=E2= =80=99t protect against a DoS. I=E2=80=99d guess that the probability of th= e loss of a symmetric key is proportional to the breadth of the distribution of the key.

What I=E2=80=99m trying to point out is that this doesn=E2=80=99t really se= em to solve the generic DoS attack.
You=E2=80=99ll still need to do some heuristics/rules based upon whatever i= s observable, at a minimum the 5-tuple.
Getting more than the 5-tuple to be visible will take more work by the serv= er, true, but given other design constraints, I don=E2=80=99t see how that = is avoidable.

-=3DR

=C2=A0

=C2=A0

There are l= ots of possible scenarios, so please just consider these to be examples. Le= t=E2=80=99s divide the world of servers in to 1) enterprise business-to-business websites, 2) websites meant for consume= rs where authentication is desirable, and 3) websites that will want to all= ow their users to be anonymous, therefore, pre-authentication would not app= ly.

=C2=A0

Enterprise = business-to-business websites could use something similar to the Software D= efined Perimeter (SDP) Single Packet Authorization (SPA) protocol created by the Cloud Security Alliance. It uses the fact th= at clients are on-boarded to the system in a one time event to provide the = clients with a shared secret key. The key is used in a counter-based HMAC c= alculation. Since only an authorized client can calculate the proper HMAC, the HMAC can be used for pre-authent= ication. Thus, the pre-authentication token could look something like this:=

Client->= Server: ClientID, Counter, HMAC[ClientID || Counter, Ks] where Ks is a shar= ed secret key that both the client and server have.

On the serv= er side, the server would recalculate the HMAC and compare it to the one pr= ovided by the client.=C2=A0

Note that t= his information is sent from the client to the server in clear text (i.e., = not encrypted).

In practice= , there would probably be more fields, but the important part is that the o= ne-time on boarding enables a lifetime of pre-authentication tokens.

=C2=A0

Websites me= ant for consumers would probably be handled differently - specifically, no = on-boarding. That means there would be some kind of token service - similar to OAuth, but operating prior to the = TCP equivalent of SYN/ACK. Perhaps CloudFlair or Google or Microsoft could = invent something like this and offer it as a service???

=C2=A0

Again, ther= e will be other websites that will not want pre-authentication because they= want to allow anonymous users to their site.

=C2=A0

Brent

=C2=A0

On Jul 23, = 2019, at 6:26 AM, Roberto Peon <fenix@fb= .com> wrote:

=C2=A0

I'm trying to unde= rstand how anything was pre-authenticated without suffering from all of the= same problems.

How would such pre-aut= hentication be done in practice, especially in scenarios where the server d= oesn't have a whitelist of clients, and that service desires traffic from non-malicious clients?

-=3DR

=C2=A0

From:=C2=A0brent= .bilger@verizon.com=C2=A0&= lt;brent.bilger@verizon.com= >
Sent:=C2=A0Tuesday, Jul= y 23, 2019 8:21:05 AM
To:=C2=A0Watson Ladd &l= t;watsonbladd@gmail.com> Cc:=C2=A0brent.bilger=3D40verizon.c= om@dmarc.ietf.org=C2=A0<= ;brent.bilge= r=3D40verizon.com@dmarc.ietf.org>; Roberto Peon <fenix@fb.com>;=C2=A0quic@ietf.org=C2=A0&l= t;quic@ietf.org>;=C2=A0brent.bilger@verizon.com=C2=A0<= /span><brent.bilger@verizon.= com>; Ian Swett <ia= nswett=3D40google.com@dmarc.ietf.org>
Subject:=C2=A0Re: [E] D= oS-ing QUIC servers is too easy=C2=A0=

=C2=A0

=C2=A0

=C2=A0

On Jul 22, = 2019, at 9:16 PM, Watson Ladd <= watsonbladd@gmail.com> wrote:

=C2=A0

On Mon, Jul 22, 2019 at 5:29 PM
<brent.bilger=3D40verizon.com@dmarc.ietf.org= > wrote:




On Jul 22, 2019, at 10:10 AM, Roberto Peon <fenix@fb.com> wrote:

When you=E2=80=99re talking about pre-authentication, are you referring to = the 0-rtt stuff?


0-RTT is good stuff. It reduces time for a device that=E2=80=99s already kn= own to be authorized to connect to the server.

Part of the problem is to stop resource DoS. The other part is about inform= ation leakage.

Let=E2=80=99s assume a time when all website use QUIC and let's take an= adversary who has just learned about a vulnerability in Wordpress. The adv= ersary wants to scan the Internet finding Wordpress sites. Now, if the QUIC= connection required pre-authentication, then the server would be black to the connection and the adversary could not de= termine if the site uses Wordpress. But, as it stands today, in this future= time, the adversary scans the Internet, connects to the server, and is han= ded a Wordpress login screen. Now the adversary knows where to attack.


If connection requires preauthentication then no one can see the site, no?<= /span>

=C2=A0


In the enterprise it is a little different. Companies implement reverse pro= xies to try to protect servers from unauthorized users. But what if the ser= vers required a pre-authentication token. Then, reverse proxies would not b= e needed.


So I think there are two different things here, or maybe I'm misunderst= anding:
1: We have servers that have a limited number of clients that will
ever want to connect to them, and want to enable other devices to
filter the traffic, so need some mechanism that enables a middlebox to
filter.

=C2=A0

No middle b= ox! Pre-authentication makes servers self-defending. Lack of pre-authentica= tion is why we have middle boxes.

=C2=A0

2: We have = servers generally available to the public and are concerned
that the QUIC version of a SYN flood can't be dealt with (despite
evidence to the contrary).

=C2=A0

Companies a= nd website owners have to pay for anti-DoS services=C2=A0from the likes of = Verizon and others BECAUSE servers listen to all clients. With pre-authentication, the need to have an anti-DoS service= would be greatly reduced because servers would not respond to unauthorized= clients.

=C2=A0

And the poi= nt about information leakage is important, too.

=C2=A0

Brent

=C2=A0


I don't know much about how Cloudflare (my place of employment) =C2=A0d= eals
with 2 but hopefully some people who do/implementors can speak up
about how much of a problem it is. But 1 is I think very much a
nongoal: middlebox ossification is part of the reason we have QUIC.

Sincerely,
Watson Ladd

=C2=A0

=C2=A0

=C2=A0

Brent Blige= r

Director-Te= chnology=C2=A0Verizon SDP=C2=A0

=C2=A0

=C2=A0

=C2=A0

=C2=A0

=C2=A0

=C2=A0

=C2=A0

Brent Blige= r

Director-Te= chnology=C2=A0Verizon SDP=C2=A0

=C2=A0

=C2=A0

=C2=A0

Brent Bliger

Director-Technology=C2=A0Verizon SDP=C2=A0

=C2=A0

=C2=A0

=C2=A0



 --000000000000909469058e5b168e-- From nobody Tue Jul 23 08:46:50 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 474FF1202EC for ; Tue, 23 Jul 2019 08:46:40 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.996 X-Spam-Level: X-Spam-Status: No, score=-1.996 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cYN9HtymTRIQ for ; Tue, 23 Jul 2019 08:46:32 -0700 (PDT) Received: from mail-ed1-x52d.google.com (mail-ed1-x52d.google.com [IPv6:2a00:1450:4864:20::52d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4A7E31203E2 for ; Tue, 23 Jul 2019 08:46:31 -0700 (PDT) Received: by mail-ed1-x52d.google.com with SMTP id d4so44433885edr.13 for ; Tue, 23 Jul 2019 08:46:31 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:in-reply-to:references:mime-version:date:message-id:subject:to :cc; bh=KYdDULKWtT0G0OoGciQjO1oqdrZ1XAsqjrdFMkFZZ2A=; b=TuUhh6NyJxlnotmrz3nAkGhf08B3f6pMDpcPOdb3m9Zy2IsCCz7xMJa7JkPbXheGIR aoanHqSDOwzo+emOuppm1A62X+zYIMo2ND1WHKxaI18MgwcmezDr4j82VLXvwXAoLAjt 0WR+LQVPoJw0FZnkCGateqodABEowg+PZEC6LjfpxLSawGu4Jo+wSN6gYa4YpUtqPoAI JAZb9si/bjmoMgjy3Xo0k4Xn2TdUqHby5T56AT/Gj2L3K0muPy+ZuqcTPD1vDuqGthJu hkRgS+tutP637l6qTq8Rqfz07yAY9RrkZmqcQe74T2965xCmHbFKnsQx7WMVxzxOY+oo enog== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:in-reply-to:references:mime-version:date :message-id:subject:to:cc; bh=KYdDULKWtT0G0OoGciQjO1oqdrZ1XAsqjrdFMkFZZ2A=; b=FSVnC80R7CPGDpMdqEUmtF5yMi4+cgtO+ztRCMwcv4sMS+CIeR/u/H3fftVP5U0NIZ MgSsYU6Hja3zBeOgdrIyIeKbfHuSyV0CW+z0UgUm41g7qw2Ct5YoE37GjZ6QH96+jkAj Z8WA5vH27WsmWfhqN4kRjyjiM7E8JdQ72krF+aArmvpDKlUtMzarywfMWw7OXeCscC4/ Mcoea/SYkCgMJnRateOvBlShMyL5M0hoO5wOASoqS0FMCRVuCy1c81E0Wz45mXQRJtX4 9rUF3W7ACRHUbOy9ML2GvI4qcT4/tbEsv1y19uz2Nf67BqfRrQ1E3E/wbycEM0Z6HJSU BmCg== X-Gm-Message-State: APjAAAUP48rcxCoKuFTQtKJgNXVi8qYCHU29l5IbaLlfhVMSm5NNi89s me8slrbDAOqvmcBgX2n2/mthLYIQbGSFdZGxZCU= X-Google-Smtp-Source: APXvYqwIGJvKIr8RFLCfAX34cpBFL2lxMY/g0hdeN9dwizFHOPf48B/XhIztPO4aRYeiJrDfwpk/PEyOQDpYTjFgHU8= X-Received: by 2002:a50:a56b:: with SMTP id z40mr65188285edb.99.1563896789771; Tue, 23 Jul 2019 08:46:29 -0700 (PDT) Received: from 1058052472880 named unknown by gmailapi.google.com with HTTPREST; Tue, 23 Jul 2019 08:46:29 -0700 From: =?UTF-8?Q?Mikkel_Fahn=C3=B8e_J=C3=B8rgensen?= In-Reply-To: <6A50F13B-0526-421F-9D20-B997DB503CE6@fb.com> References: <6A50F13B-0526-421F-9D20-B997DB503CE6@fb.com> X-Mailer: Airmail (420) MIME-Version: 1.0 Date: Tue, 23 Jul 2019 08:46:29 -0700 Message-ID: Subject: Re: [Potential Spoof] Re: [E] DoS-ing QUIC servers is too easy To: Roberto Peon , "brent.bilger@verizon.com" Cc: Watson Ladd , "quic@ietf.org" , "brent.bilger=40verizon.com@dmarc.ietf.org" , Ian Swett Content-Type: multipart/alternative; boundary="0000000000009ea97d058e5b1811" Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 23 Jul 2019 15:46:48 -0000 --0000000000009ea97d058e5b1811 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Yes On 23 July 2019 at 17.42.25, Roberto Peon (fenix@fb.com) wrote: I think Mikkel is/was saying the same w.r.t. counters. -=3DR *From: *QUIC on behalf of Roberto Peon *Date: *Tuesday, July 23, 2019 at 11:38 AM *To: *"brent.bilger@verizon.com" , Mikkel Fahn=C3= =B8e J=C3=B8rgensen *Cc: *Watson Ladd , "quic@ietf.org" , "brent.bilger=3D40verizon.com@dmarc.ietf.org" , Ian Swett *Subject: *[Potential Spoof] Re: [E] DoS-ing QUIC servers is too easy If you=E2=80=99re in a =E2=80=9Csmall=E2=80=9D deployment that is exposed t= o the internet, then you=E2=80=99re going to be dead regardless of the tokens because the links = will be full of useless packets if someone decides to do an attack at any reasonable scale. If you=E2=80=99re in a =E2=80=9Clarge=E2=80=9D deployment that is exposed t= o the internet, then a counter-based implementation that requires any state at servers (to verify the counter) is likely to be very expensive as it either requires an RPC for each incoming packet-to-be-authenticated, or it requires that the packet be routed to a specific server, which makes the individual servers DoSable. If you have a =E2=80=9Clarge=E2=80=9D deployment and use a time-based imple= mentation, then you have the goldilocks-like problem of choosing the correct TTL, and that is going to be difficult as the DoS effectiveness becomes directly (inversely) related to the TTL length as TTL length determines the amount of the population that is no longer authenticated. A short TTL means very little benefit can be ascribed by having the token because few clients will remain authenticated. The combination of time and counter doesn=E2=80=99t negate any of the disad= vantages of either. I don=E2=80=99t ultimately see a way out of having to heuristically examine 5-tuples. -=3DR *From: *"brent.bilger@verizon.com" *Date: *Tuesday, July 23, 2019 at 11:19 AM *To: *Mikkel Fahn=C3=B8e J=C3=B8rgensen *Cc: *Roberto Peon , "brent.bilger@verizon.com" < brent.bilger@verizon.com>, Watson Ladd , " quic@ietf.org" , "brent.bilger=3D40verizon.com@dmarc.ietf.or= g" , Ian Swett *Subject: *Re: [E] DoS-ing QUIC servers is too easy On Jul 23, 2019, at 7:53 AM, Mikkel Fahn=C3=B8e J=C3=B8rgensen wrote: It is not that easy to steal a token and replay, but it can happen. Yes, it requires compromising a client and stealing the key or just using the key from a back door. In practice the latter may be advantageous to the adversary because the source of the attack will be from a normal location and because future device authorizations may include a fingerprint of the device - a fingerprint that would fail on the stolen key. But look at what we=E2=80=99ve done to the unauthorized adversary with the pre-authenticatio= n token - defeated resource DoS, information leakage, all vulnerabilities of the server, all configuration errors of the applications of the server. And it augments TLS to defeat man-in-the-middle attacks. If you add a time factor such an attack will have limited value. In fact a token need not be valid for more than about 10 minutes to account for skewed clocks. As noted on a different posting, Single Packet Authorization is based on RFC 4226 which has both a counter and a time based approach. Personally, I prefer a counter. But again, this is all irrelevant because I=E2=80=99m not suggesting any on= e pre-authentication. I=E2=80=99m just using an example to show how it can st= op multiple types of attacks. Brent On 23 July 2019 at 16.41.09, Roberto Peon (fenix@fb.com) wrote: I=E2=80=99d assume #1 is less likely to experience crippling SYN-based DoS = attacks, and could otherwise be accomplished by limiting access in IP-space (imperfect, but we=E2=80=99re looking for =E2=80=9Cgood-enough=E2=80=9D, he= re). .. which means that I think we should consider 2+3 only, really. For #2 and #3, which I suspect have significant overlaps (sites may provide services both to logged-in users and users who aren=E2=80=99t logged in), t= he pre-authorization either: a) can be DoS=E2=80=99d itself. b) can be used to do a DoS in the future. In case b, as an attacker, you=E2=80=99d get or wait for the client to authenticate, then use that authentication in a replay attack, e.g. by replicating the auth token across many hosts. In cases where you are disallowed to replicate the auth token, e.g. because it is tied to a particular IP, you can help solve the replay attack however you=E2=80=99ll be biasing traffic to users whose IP is stable and who are l= ogged in/auth=E2=80=99d. In the pre-shared key scenario that was described, if any one client leaks the shared-secret, then it becomes not very useful and certainly doesn=E2= =80=99t protect against a DoS. I=E2=80=99d guess that the probability of the loss o= f a symmetric key is proportional to the breadth of the distribution of the key= . What I=E2=80=99m trying to point out is that this doesn=E2=80=99t really se= em to solve the generic DoS attack. You=E2=80=99ll still need to do some heuristics/rules based upon whatever i= s observable, at a minimum the 5-tuple. Getting more than the 5-tuple to be visible will take more work by the server, true, but given other design constraints, I don=E2=80=99t see how t= hat is avoidable. -=3DR *From: *"brent.bilger@verizon.com" *Date: *Tuesday, July 23, 2019 at 9:59 AM *To: *Roberto Peon *Cc: *"brent.bilger@verizon.com" , Watson Ladd < watsonbladd@gmail.com>, "brent.bilger=3D40verizon.com@dmarc.ietf.org" , "quic@ietf.org" , Ian Swett *Subject: *Re: [E] DoS-ing QUIC servers is too easy There are lots of possible scenarios, so please just consider these to be examples. Let=E2=80=99s divide the world of servers in to 1) enterprise business-to-business websites, 2) websites meant for consumers where authentication is desirable, and 3) websites that will want to allow their users to be anonymous, therefore, pre-authentication would not apply. Enterprise business-to-business websites could use something similar to the Software Defined Perimeter (SDP) Single Packet Authorization (SPA) protocol created by the Cloud Security Alliance. It uses the fact that clients are on-boarded to the system in a one time event to provide the clients with a shared secret key. The key is used in a counter-based HMAC calculation. Since only an authorized client can calculate the proper HMAC, the HMAC can be used for pre-authentication. Thus, the pre-authentication token could look something like this: Client->Server: ClientID, Counter, HMAC[ClientID || Counter, Ks] where Ks is a shared secret key that both the client and server have. On the server side, the server would recalculate the HMAC and compare it to the one provided by the client. Note that this information is sent from the client to the server in clear text (i.e., not encrypted). In practice, there would probably be more fields, but the important part is that the one-time on boarding enables a lifetime of pre-authentication tokens. Websites meant for consumers would probably be handled differently - specifically, no on-boarding. That means there would be some kind of token service - similar to OAuth, but operating prior to the TCP equivalent of SYN/ACK. Perhaps CloudFlair or Google or Microsoft could invent something like this and offer it as a service??? Again, there will be other websites that will not want pre-authentication because they want to allow anonymous users to their site. Brent On Jul 23, 2019, at 6:26 AM, Roberto Peon wrote: I'm trying to understand how anything was pre-authenticated without suffering from all of the same problems. How would such pre-authentication be done in practice, especially in scenarios where the server doesn't have a whitelist of clients, and that service desires traffic from non-malicious clients? -=3DR Get Outlook for Android ------------------------------ *From:* brent.bilger@verizon.com *Sent:* Tuesday, July 23, 2019 8:21:05 AM *To:* Watson Ladd *Cc:* brent.bilger=3D40verizon.com@dmarc.ietf.org < brent.bilger=3D40verizon.com@dmarc.ietf.org>; Roberto Peon ; quic@ietf.org ; brent.bilger@verizon.com < brent.bilger@verizon.com>; Ian Swett *Subject:* Re: [E] DoS-ing QUIC servers is too easy On Jul 22, 2019, at 9:16 PM, Watson Ladd wrote: On Mon, Jul 22, 2019 at 5:29 PM wrote: On Jul 22, 2019, at 10:10 AM, Roberto Peon wrote: When you=E2=80=99re talking about pre-authentication, are you referring to = the 0-rtt stuff? 0-RTT is good stuff. It reduces time for a device that=E2=80=99s already kn= own to be authorized to connect to the server. Part of the problem is to stop resource DoS. The other part is about information leakage. Let=E2=80=99s assume a time when all website use QUIC and let's take an adv= ersary who has just learned about a vulnerability in Wordpress. The adversary wants to scan the Internet finding Wordpress sites. Now, if the QUIC connection required pre-authentication, then the server would be black to the connection and the adversary could not determine if the site uses Wordpress. But, as it stands today, in this future time, the adversary scans the Internet, connects to the server, and is handed a Wordpress login screen. Now the adversary knows where to attack. If connection requires preauthentication then no one can see the site, no? In the enterprise it is a little different. Companies implement reverse proxies to try to protect servers from unauthorized users. But what if the servers required a pre-authentication token. Then, reverse proxies would not be needed. So I think there are two different things here, or maybe I'm misunderstanding: 1: We have servers that have a limited number of clients that will ever want to connect to them, and want to enable other devices to filter the traffic, so need some mechanism that enables a middlebox to filter. No middle box! Pre-authentication makes servers self-defending. Lack of pre-authentication is why we have middle boxes. 2: We have servers generally available to the public and are concerned that the QUIC version of a SYN flood can't be dealt with (despite evidence to the contrary). Companies and website owners have to pay for anti-DoS services from the likes of Verizon and others BECAUSE servers listen to all clients. With pre-authentication, the need to have an anti-DoS service would be greatly reduced because servers would not respond to unauthorized clients. And the point about information leakage is important, too. Brent I don't know much about how Cloudflare (my place of employment) deals with 2 but hopefully some people who do/implementors can speak up about how much of a problem it is. But 1 is I think very much a nongoal: middlebox ossification is part of the reason we have QUIC. Sincerely, Watson Ladd Brent Bliger Director-Technology Verizon SDP brent.bilger@verizon.com Brent Bliger Director-Technology Verizon SDP brent.bilger@verizon.com Brent Bliger Director-Technology Verizon SDP brent.bilger@verizon.com --0000000000009ea97d058e5b1811 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable = Yes

On 23 July 2019 at 17.42.25, Roberto Peon (fenix@fb.com) wrote:

<= div>

I think Mikkel is/was saying the same w.r.t. counter= s.

-=3DR

=C2=A0

From= : QUIC <quic-bounces@ietf.org> on behalf o= f Roberto Peon <fenix@fb.com>
Date: Tuesday, July 23, 2019 at 11:38 AM
To: "brent.bilger@v= erizon.com" <brent.= bilger@verizon.com>, Mikkel Fahn=C3=B8e J=C3=B8rgensen <mikkelfj@gmail.com>
Cc: Watson Ladd <watsonb= ladd@gmail.com>, "quic@ietf.or= g" <quic@ietf.org>, &qu= ot;brent.bilger=3D40verizon= .com@dmarc.ietf.org" <brent.bilger=3D40verizon.com@dmarc.ietf.org>, Ian Swett <i= answett=3D40google.com@dmarc= .ietf.org>
Subject: [Potential Spoof] Re: [E] DoS-ing QUIC servers is too easy<= /span>

=C2=A0

If you=E2=80=99re in a =E2=80=9Csmall=E2=80=9D deplo= yment that is exposed to the internet, then you=E2=80=99re going to be dead= regardless of the tokens because the links will be full of useless packets= if someone decides to do an attack at any reasonable scale.

If you=E2=80=99re in a =E2=80=9Clarge=E2=80=9D deployment that is exposed t= o the internet, then a counter-based implementation that requires any state= at servers (to verify the counter) is likely to be very expensive as it ei= ther requires an RPC for each incoming packet-to-be-authenticated, or it requires that the packet be routed to a specific server, which makes= the individual servers DoSable.

If you have a =E2=80=9Clarge=E2=80=9D deployment and use a time-based imple= mentation, then you have the goldilocks-like problem of choosing the correc= t TTL, and that is going to be difficult as the DoS effectiveness becomes d= irectly (inversely) related to the TTL length as TTL length determines the amount of the population that is no longer authe= nticated. A short TTL means very little benefit can be ascribed by having t= he token because few clients will remain authenticated.

The combination of time and counter doesn=E2=80=99t negate any of the disad= vantages of either.

I don=E2=80=99t ultimately see a way out of having to heuristically examine= 5-tuples.
-=3DR


=C2=A0

From= : "brent.bilger@verizon.com" <brent.bilger@verizon.com> Date: Tuesday, July 23, 2019 at 11:19 AM
To: Mikkel Fahn=C3=B8e J=C3=B8rgensen <mikkelfj@gmail.com>
Cc: Roberto Peon <fenix@fb.com>, "brent.bilger@veriz= on.com" <brent.bilg= er@verizon.com>, Watson Ladd <watsonbladd@gmail.com>, "quic@ietf.org" <quic@ietf.org= >, "brent.bilger=3D40verizon.com@dmarc.ietf.org" <brent.bilger=3D40verizon.com@dmarc.ietf.org>, Ia= n Swett <ianswett=3D40goog= le.com@dmarc.ietf.org>
Subject: Re: [E] DoS-ing QUIC servers is too easy

=C2=A0

=C2=A0




On Jul 23, 2019, at 7:53 AM, Mikkel Fahn=C3=B8e J=C3= =B8rgensen <mikkelfj@gmail.com= > wrote:

=C2=A0

It is not that easy to steal a token and replay, but it can happen.

=C2=A0

Yes, it requires compromising a client and stealing = the key or just using the key from a back door. In practice the latter may = be advantageous to the adversary because the source of the attack will be f= rom a normal location and because future device authorizations may include a fingerprint of the device - a f= ingerprint that would fail on the stolen key. But look at what we=E2=80=99v= e done to the unauthorized adversary with the pre-authentication token - de= feated resource DoS, information leakage, all vulnerabilities of the server, all configuration errors of the applica= tions of the server. And it augments TLS to defeat man-in-the-middle attack= s.




=C2=A0

If you add a time factor such an attack will have limited value. In fact= a token need not be valid for more than about 10 minutes to account for sk= ewed clocks.

=C2=A0

As noted on a different posting, Single Packet Autho= rization is based on RFC 4226 which has both a counter and a time based app= roach. Personally, I prefer a counter.

=C2=A0

But again, this is all irrelevant because I=E2=80=99= m not suggesting any one pre-authentication. I=E2=80=99m just using an exam= ple to show how it can stop multiple types of attacks.

=C2=A0

Brent







On 23 July 2019 at 16.41.09, Roberto Peon (fenix@fb.com) wrote:

I=E2=80=99d= assume #1 is less likely to experience crippling SYN-based DoS attacks, an= d could otherwise be accomplished by limiting access in IP-space (imperfect, but we=E2=80=99re looking for =E2=80=9Cgood= -enough=E2=80=9D, here).


.. which means that I think we should consider 2+3 only, really.

For #2 and #3, which I suspect have significant overlaps (sites may provide= services both to logged-in users and users who aren=E2=80=99t logged in), = the pre-authorization either:
=C2=A0 a) can be DoS=E2=80=99d itself.
=C2=A0 b) can be used to do a DoS in the future.

In case b, = as an attacker, you=E2=80=99d get or wait for the client to authenticate, t= hen use that authentication in a replay attack, e.g. by replicating the auth token across many hosts.
In cases where you are disallowed to replicate the auth token, e.g. because= it is tied to a particular IP, you can help solve the replay attack howeve= r you=E2=80=99ll be biasing traffic to users whose IP is stable and who are= logged in/auth=E2=80=99d.
In the pre-shared key scenario that was described, if any one client leaks = the shared-secret, then it becomes not very useful and certainly doesn=E2= =80=99t protect against a DoS. I=E2=80=99d guess that the probability of th= e loss of a symmetric key is proportional to the breadth of the distribution of the key.

What I=E2=80=99m trying to point out is that this doesn=E2=80=99t really se= em to solve the generic DoS attack.
You=E2=80=99ll still need to do some heuristics/rules based upon whatever i= s observable, at a minimum the 5-tuple.
Getting more than the 5-tuple to be visible will take more work by the serv= er, true, but given other design constraints, I don=E2=80=99t see how that = is avoidable.

-=3DR

=C2=A0

=C2=A0

There are l= ots of possible scenarios, so please just consider these to be examples. Le= t=E2=80=99s divide the world of servers in to 1) enterprise business-to-business websites, 2) websites meant for consume= rs where authentication is desirable, and 3) websites that will want to all= ow their users to be anonymous, therefore, pre-authentication would not app= ly.

=C2=A0

Enterprise = business-to-business websites could use something similar to the Software D= efined Perimeter (SDP) Single Packet Authorization (SPA) protocol created by the Cloud Security Alliance. It uses the fact th= at clients are on-boarded to the system in a one time event to provide the = clients with a shared secret key. The key is used in a counter-based HMAC c= alculation. Since only an authorized client can calculate the proper HMAC, the HMAC can be used for pre-authent= ication. Thus, the pre-authentication token could look something like this:=

Client->= Server: ClientID, Counter, HMAC[ClientID || Counter, Ks] where Ks is a shar= ed secret key that both the client and server have.

On the serv= er side, the server would recalculate the HMAC and compare it to the one pr= ovided by the client.=C2=A0

Note that t= his information is sent from the client to the server in clear text (i.e., = not encrypted).

In practice= , there would probably be more fields, but the important part is that the o= ne-time on boarding enables a lifetime of pre-authentication tokens.

=C2=A0

Websites me= ant for consumers would probably be handled differently - specifically, no = on-boarding. That means there would be some kind of token service - similar to OAuth, but operating prior to the = TCP equivalent of SYN/ACK. Perhaps CloudFlair or Google or Microsoft could = invent something like this and offer it as a service???

=C2=A0

Again, ther= e will be other websites that will not want pre-authentication because they= want to allow anonymous users to their site.

=C2=A0

Brent

=C2=A0

On Jul 23, = 2019, at 6:26 AM, Roberto Peon <fenix@fb= .com> wrote:

=C2=A0

I'm trying to unde= rstand how anything was pre-authenticated without suffering from all of the= same problems.

How would such pre-aut= hentication be done in practice, especially in scenarios where the server d= oesn't have a whitelist of clients, and that service desires traffic from non-malicious clients?

-=3DR

=C2=A0

From:=C2=A0brent= .bilger@verizon.com=C2=A0&= lt;brent.bilger@verizon.com= >
Sent:=C2=A0Tuesday, Jul= y 23, 2019 8:21:05 AM
To:=C2=A0Watson Ladd &l= t;watsonbladd@gmail.com> Cc:=C2=A0brent.bilger=3D40verizon.c= om@dmarc.ietf.org=C2=A0<= ;brent.bilge= r=3D40verizon.com@dmarc.ietf.org>; Roberto Peon <fenix@fb.com>;=C2=A0quic@ietf.org=C2=A0&l= t;quic@ietf.org>;=C2=A0brent.bilger@verizon.com=C2=A0<= /span><brent.bilger@verizon.= com>; Ian Swett <ia= nswett=3D40google.com@dmarc.ietf.org>
Subject:=C2=A0Re: [E] D= oS-ing QUIC servers is too easy=C2=A0=

=C2=A0

=C2=A0

=C2=A0

On Jul 22, = 2019, at 9:16 PM, Watson Ladd <= watsonbladd@gmail.com> wrote:

=C2=A0

On Mon, Jul 22, 2019 at 5:29 PM
<brent.bilger=3D40verizon.com@dmarc.ietf.org= > wrote:




On Jul 22, 2019, at 10:10 AM, Roberto Peon <fenix@fb.com> wrote:

When you=E2=80=99re talking about pre-authentication, are you referring to = the 0-rtt stuff?


0-RTT is good stuff. It reduces time for a device that=E2=80=99s already kn= own to be authorized to connect to the server.

Part of the problem is to stop resource DoS. The other part is about inform= ation leakage.

Let=E2=80=99s assume a time when all website use QUIC and let's take an= adversary who has just learned about a vulnerability in Wordpress. The adv= ersary wants to scan the Internet finding Wordpress sites. Now, if the QUIC= connection required pre-authentication, then the server would be black to the connection and the adversary could not de= termine if the site uses Wordpress. But, as it stands today, in this future= time, the adversary scans the Internet, connects to the server, and is han= ded a Wordpress login screen. Now the adversary knows where to attack.


If connection requires preauthentication then no one can see the site, no?<= /span>

=C2=A0


In the enterprise it is a little different. Companies implement reverse pro= xies to try to protect servers from unauthorized users. But what if the ser= vers required a pre-authentication token. Then, reverse proxies would not b= e needed.


So I think there are two different things here, or maybe I'm misunderst= anding:
1: We have servers that have a limited number of clients that will
ever want to connect to them, and want to enable other devices to
filter the traffic, so need some mechanism that enables a middlebox to
filter.

=C2=A0

No middle b= ox! Pre-authentication makes servers self-defending. Lack of pre-authentica= tion is why we have middle boxes.

=C2=A0

2: We have = servers generally available to the public and are concerned
that the QUIC version of a SYN flood can't be dealt with (despite
evidence to the contrary).

=C2=A0

Companies a= nd website owners have to pay for anti-DoS services=C2=A0from the likes of = Verizon and others BECAUSE servers listen to all clients. With pre-authentication, the need to have an anti-DoS service= would be greatly reduced because servers would not respond to unauthorized= clients.

=C2=A0

And the poi= nt about information leakage is important, too.

=C2=A0

Brent

=C2=A0


I don't know much about how Cloudflare (my place of employment) =C2=A0d= eals
with 2 but hopefully some people who do/implementors can speak up
about how much of a problem it is. But 1 is I think very much a
nongoal: middlebox ossification is part of the reason we have QUIC.

Sincerely,
Watson Ladd

=C2=A0

=C2=A0

=C2=A0

Brent Blige= r

Director-Te= chnology=C2=A0Verizon SDP=C2=A0

=C2=A0

=C2=A0

=C2=A0

=C2=A0

=C2=A0

=C2=A0

=C2=A0

Brent Blige= r

Director-Te= chnology=C2=A0Verizon SDP=C2=A0

=C2=A0

=C2=A0

=C2=A0

Brent Bliger

Director-Technology=C2=A0Verizon SDP=C2=A0

=C2=A0

=C2=A0

=C2=A0




--0000000000009ea97d058e5b1811-- From nobody Tue Jul 23 09:04:06 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0C2F3120355 for ; Tue, 23 Jul 2019 09:03:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=verizon.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zKVJfFWqG3Z8 for ; Tue, 23 Jul 2019 09:03:52 -0700 (PDT) Received: from smtpout3-tdc.verizon.com (smtpout3-tdc.verizon.com [137.188.104.135]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8B90A120378 for ; Tue, 23 Jul 2019 09:03:52 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=verizon.com; i=@verizon.com; q=dns/txt; s=corp; t=1563897832; x=1595433832; h=to:subject:date:message-id:references:in-reply-to: mime-version:from:cc; bh=ckFJcc0qRQgen7rfzRTban52AXP23/PTBy4ZPvrKSLk=; b=I67PFiHZvfUMZ0YomYW/KW8BqEXJhfJ1VQaa+9Sfpar5i+VARhDMEX8+ 7tC2fUnbipExq/bDci50J1vaoMIjYeS02FbFBwt9s4qF9pHI0YR7GvyU/ p0OyvFkybFDXiUlmz7IE9yv/TQ3zGAWp9SY3n2DkZ4gGx35hu1lMQfbOO I=; From: brent.bilger@verizon.com Cc: brent.bilger@verizon.com, Ian Swett , Watson Ladd , "quic@ietf.org" , Roberto Peon , "brent.bilger=40verizon.com@dmarc.ietf.org" Received: from tbwexch03apd.uswin.ad.vzwcorp.com ([153.114.162.27]) by smtpout3-tdc.verizon.com with ESMTP/TLS/ECDHE-RSA-AES256-SHA384; 23 Jul 2019 16:03:50 +0000 Received: from tbwexch20apd.uswin.ad.vzwcorp.com (153.114.162.44) by tbwexch03apd.uswin.ad.vzwcorp.com (153.114.162.27) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Tue, 23 Jul 2019 12:03:50 -0400 Received: from scwexch12apd.uswin.ad.vzwcorp.com (153.114.130.31) by tbwexch20apd.uswin.ad.vzwcorp.com (153.114.162.44) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Tue, 23 Jul 2019 12:03:49 -0400 Received: from scwexch05apd.uswin.ad.vzwcorp.com (153.114.130.24) by scwexch12apd.uswin.ad.vzwcorp.com (153.114.130.31) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Tue, 23 Jul 2019 09:03:48 -0700 Received: from scwexch05apd.uswin.ad.vzwcorp.com ([153.114.130.24]) by scwexch05apd.uswin.ad.vzwcorp.com ([153.114.130.24]) with mapi id 15.00.1473.003; Tue, 23 Jul 2019 09:03:48 -0700 To: =?utf-8?B?TWlra2VsIEZhaG7DuGUgSsO4cmdlbnNlbg==?= Subject: Re: [E] DoS-ing QUIC servers is too easy Thread-Topic: [E] DoS-ing QUIC servers is too easy Thread-Index: AQHVQO2TMeh9llpV6EqU+Dk6tm4oPqbYDioAgACHhoCAABI8gIAACRKAgAALXgCAAAPzAIAABxkAgAADTACAAAk2AA== Date: Tue, 23 Jul 2019 16:03:48 +0000 Message-ID: References: <21E3AE84-02C5-4943-A88E-B62329E21002@one.verizon.com> <507D5DB7-EDF2-4429-A518-604A377F92D9@one.verizon.com> <9BF2DC9D-F14C-4451-9191-1A1557556691@fb.com> <9DC40032-3852-4237-A621-5C6B1102E74F@one.verizon.com> <16026C5D-847B-4281-ADE1-A65D394124FF@one.verizon.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.11.60.250] Content-Type: multipart/alternative; boundary="_000_BB953FE469544CBBA0DEC5E1EB617A85oneverizoncom_" MIME-Version: 1.0 Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 23 Jul 2019 16:04:05 -0000 --_000_BB953FE469544CBBA0DEC5E1EB617A85oneverizoncom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 QWdhaW4sIEnigJltIG5vdCBzdXJlIGl0IG1hdHRlcnMgYXQgdGhpcyBwb2ludCBiZWNhdXNlIHdl 4oCZcmUgbm90IHJlY29tbWVuZGluZyBhIG1ldGhvZCBmb3IgY3JlYXRpbmcgYSBwcmUtYXV0aGVu dGljYXRpb24gdG9rZW4sIGJ1dCBJIGFtIGN1cmlvdXMgYWJvdXQgY291bnRlciB2cy4gdGltZXIu IEluIGNvdW50ZXItYmFzZWQgSE9UUCAoaGFzaGVkIG9uZSB0aW1lIHBhc3N3b3JkKSwgdGhlIGNv dW50ZXIgdmFsdWUgaXMgc2VudCBhcyBwYXJ0IG9mIHRoZSB0b2tlbi4gU2luY2UgdGhlIGNsaWVu dCBpcyBzdG9yaW5nIHRoZSBzZWNyZXQgc2hhcmVkIGtleSwgcHJlc3VtYWJseSwgaXQgd291bGQg a2VlcCB0aGUgY291bnRlciBpcyB0aGUgc2FtZSBnZW5lcmFsIGxvY2F0aW9uIGluIGxvbmcgdGVy bSBtZW1vcnkuIFNpbmNlIHRoZSBjb3VudGVyIGNoYW5nZXMgZXZlcnkgdGltZSwgdGhlIE9UUCBj aGFuZ2VzIGV2ZXJ5IHRpbWUuIFdoYXQgaXMgaXQgYWJvdXQgdGhlIGFib3ZlIHRoYXQgbWFrZSBp dCBkaWZmaWN1bHQgdG8gZGlzdHJpYnV0ZSBpbiBhbiBlbnRlcnByaXNlIGVudmlyb25tZW50Pw0K DQpCcmVudA0KDQpPbiBKdWwgMjMsIDIwMTksIGF0IDg6MzAgQU0sIE1pa2tlbCBGYWhuw7hlIErD uHJnZW5zZW4gPG1pa2tlbGZqQGdtYWlsLmNvbTxtYWlsdG86bWlra2VsZmpAZ21haWwuY29tPj4g d3JvdGU6DQoNCkkgYmVsaWV2ZSB0aGF0IHdlIGxhcmdlbHkgYWdyZWUsIGJ1dCBhIGNvdW50ZXIg aXMgbm90IHZlcnkgZ29vZCBmcm9tIGEgZGlzdHJpYnV0ZWQgcGVyc3BlY3RpdmUuIEnigJlkIGNv bnNpZGVyIGl0IGEgbm9uLXN0YXJ0ZXIuDQoNCkkgZG8gaGF2ZSBhIHByb3Bvc2FsIGZvciBRVUlD IHYyIGFib3V0IHByZXZlbnRpbmcgcmVwbGF5IGF0dGFja3Mgb24gMC1SVFQgdGhhdCBpbnZvbHZl cyBzb21ldGhpbmcgc2ltaWxhciAtIGJ1dCAwLVJUVCBpcyBzb3J0IG9mIGd1YXJhbnRlZWQgdG8g bGFuZCBvbiB0aGUgc2FtZSBzZXJ2ZXIgYmFzZWQgb24gcm91dGluZyBvbiBzYWlkIHRva2VuLg0K DQpBbiBpbml0aWFsIHBhY2tldCBpcyBndWFyYW50ZWVkIHRvIG5vdCBsYW5kIG9uIHRoZSBzYW1l IHNlcnZlciBiZWNhdXNlIG90aGVyd2lzZSBhbiBhdHRhY2tlciBjb3VsZCB0YXJnZXQgdGhhdCBz aW5nbGUgc2VydmVyLg0KDQpQbGFjaW5nIHRoZSBjb3VudGVyIGluIHRoZSBsb2FkIGJhbGFuY2Vy IGluZnJhc3RydWN0dXJlIGFsc28gaXNu4oCZdCBnb29kIGJlY2F1c2UgaXQgcmVxdWlyZXMgY29v cmRpbmF0aW9uIHdoaWNoIGlzIGEgdmFyeSBzY2FyY2UgcmVzb3VyY2UgaW4gaGlnaCB2b2x1bWUg YXJlYXMuDQoNCkJ1dCBhIGNvdW50ZXIgaXNu4oCZdCBuZWNlc3NhcnkgYXMgeW91IGNhbiBqdXN0 IHNoYXJlIHNvbWUgY29tcGFyYXRpdmVseSB3ZWFrIGtleXMgYW5kIGhhc2ggYSB0aW1lc3RhbXAu IEl0IHdpbGwgYmUgZ29vZCBlbm91Z2gsIGFuZCBvdGhlcndpc2UgeW91IGNhbiB1c2Ugc3Ryb25n ZXIgMC1SVFQgdG9rZW5zIGZvciByZXR1cm4gdmlzaXRzLiBUaGUga2V5cyBjYW4gYmUgcm90YXRl ZCBwZXJpb2RpY2FsbHkgYW5kIHNoYXJlZCB0byBhbiBleHRlbmQsIGFuZCBzbyBmb3J0aC4NCg0K DQpPbiAyMyBKdWx5IDIwMTkgYXQgMTcuMTkuMDYsIGJyZW50LmJpbGdlckB2ZXJpem9uLmNvbTxt YWlsdG86YnJlbnQuYmlsZ2VyQHZlcml6b24uY29tPiAoYnJlbnQuYmlsZ2VyQHZlcml6b24uY29t PG1haWx0bzpicmVudC5iaWxnZXJAdmVyaXpvbi5jb20+KSB3cm90ZToNCg0KQXMgbm90ZWQgb24g YSBkaWZmZXJlbnQgcG9zdGluZywgU2luZ2xlIFBhY2tldCBBdXRob3JpemF0aW9uIGlzIGJhc2Vk IG9uIFJGQyA0MjI2IHdoaWNoIGhhcyBib3RoIGEgY291bnRlciBhbmQgYSB0aW1lIGJhc2VkIGFw cHJvYWNoLiBQZXJzb25hbGx5LCBJIHByZWZlciBhIGNvdW50ZXIuDQoNCkJ1dCBhZ2FpbiwgdGhp cyBpcyBhbGwgaXJyZWxldmFudCBiZWNhdXNlIEnigJltIG5vdCBzdWdnZXN0aW5nIGFueSBvbmUg cHJlLWF1dGhlbnRpY2F0aW9uLiBJ4oCZbSBqdXN0IHVzaW5nIGFuIGV4YW1wbGUgdG8gc2hvdyBo b3cgaXQgY2FuIHN0b3AgbXVsdGlwbGUgdHlwZXMgb2YgYXR0YWNrcy4NCg0KDQoNCg0KQnJlbnQg QmxpZ2VyDQpEaXJlY3Rvci1UZWNobm9sb2d5IFZlcml6b24gU0RQDQpicmVudC5iaWxnZXJAdmVy aXpvbi5jb208bWFpbHRvOmJyZW50LmJpbGdlckB2ZXJpem9uLmNvbT4NCg0KDQoNCg0KDQo= --_000_BB953FE469544CBBA0DEC5E1EB617A85oneverizoncom_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgbGluZS1icmVhazogYWZ0 ZXItd2hpdGUtc3BhY2U7IiBjbGFzcz0iIj4NCkFnYWluLCBJ4oCZbSBub3Qgc3VyZSBpdCBtYXR0 ZXJzIGF0IHRoaXMgcG9pbnQgYmVjYXVzZSB3ZeKAmXJlIG5vdCByZWNvbW1lbmRpbmcgYSBtZXRo b2QgZm9yIGNyZWF0aW5nIGEgcHJlLWF1dGhlbnRpY2F0aW9uIHRva2VuLCBidXQgSSBhbSBjdXJp b3VzIGFib3V0IGNvdW50ZXIgdnMuIHRpbWVyLiBJbiBjb3VudGVyLWJhc2VkIEhPVFAgKGhhc2hl ZCBvbmUgdGltZSBwYXNzd29yZCksIHRoZSBjb3VudGVyIHZhbHVlIGlzIHNlbnQgYXMgcGFydCBv ZiB0aGUNCiB0b2tlbi4gU2luY2UgdGhlIGNsaWVudCBpcyBzdG9yaW5nIHRoZSBzZWNyZXQgc2hh cmVkIGtleSwgcHJlc3VtYWJseSwgaXQgd291bGQga2VlcCB0aGUgY291bnRlciBpcyB0aGUgc2Ft ZSBnZW5lcmFsIGxvY2F0aW9uIGluIGxvbmcgdGVybSBtZW1vcnkuIFNpbmNlIHRoZSBjb3VudGVy IGNoYW5nZXMgZXZlcnkgdGltZSwgdGhlIE9UUCBjaGFuZ2VzIGV2ZXJ5IHRpbWUuIFdoYXQgaXMg aXQgYWJvdXQgdGhlIGFib3ZlIHRoYXQgbWFrZSBpdCBkaWZmaWN1bHQNCiB0byBkaXN0cmlidXRl IGluIGFuIGVudGVycHJpc2UgZW52aXJvbm1lbnQ/DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0i Ij4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5CcmVudDxiciBjbGFzcz0iIj4NCjxkaXY+PGJyIGNs YXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIi Pk9uIEp1bCAyMywgMjAxOSwgYXQgODozMCBBTSwgTWlra2VsIEZhaG7DuGUgSsO4cmdlbnNlbiAm bHQ7PGEgaHJlZj0ibWFpbHRvOm1pa2tlbGZqQGdtYWlsLmNvbSIgY2xhc3M9IiI+bWlra2VsZmpA Z21haWwuY29tPC9hPiZndDsgd3JvdGU6PC9kaXY+DQo8YnIgY2xhc3M9IkFwcGxlLWludGVyY2hh bmdlLW5ld2xpbmUiPg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgaWQ9ImJsb29wX2N1c3RvbWZvbnQi IHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhLCBBcmlhbDsgZm9udC1zaXplOiAxM3B4OyBm b250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0 OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0 LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsg d29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgdGV4dC1k ZWNvcmF0aW9uOiBub25lOyBtYXJnaW46IDBweDsiIGNsYXNzPSIiPg0KSSBiZWxpZXZlIHRoYXQg d2UgbGFyZ2VseSBhZ3JlZSwgYnV0IGEgY291bnRlciBpcyBub3QgdmVyeSBnb29kIGZyb20gYSBk aXN0cmlidXRlZCBwZXJzcGVjdGl2ZS4gSeKAmWQgY29uc2lkZXIgaXQgYSBub24tc3RhcnRlci48 L2Rpdj4NCjxkaXYgaWQ9ImJsb29wX2N1c3RvbWZvbnQiIHN0eWxlPSJmb250LWZhbWlseTogSGVs dmV0aWNhLCBBcmlhbDsgZm9udC1zaXplOiAxM3B4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQt dmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5n OiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5z Zm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJr aXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyBtYXJnaW46 IDBweDsiIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGlkPSJibG9vcF9j dXN0b21mb250IiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYSwgQXJpYWw7IGZvbnQtc2l6 ZTogMTNweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBm b250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBz dGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNl OiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAw cHg7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsgbWFyZ2luOiAwcHg7IiBjbGFzcz0iIj4NCkkgZG8g aGF2ZSBhIHByb3Bvc2FsIGZvciBRVUlDIHYyIGFib3V0IHByZXZlbnRpbmcgcmVwbGF5IGF0dGFj a3Mgb24gMC1SVFQgdGhhdCBpbnZvbHZlcyBzb21ldGhpbmcgc2ltaWxhciAtIGJ1dCAwLVJUVCBp cyBzb3J0IG9mIGd1YXJhbnRlZWQgdG8gbGFuZCBvbiB0aGUgc2FtZSBzZXJ2ZXIgYmFzZWQgb24g cm91dGluZyBvbiBzYWlkIHRva2VuLjwvZGl2Pg0KPGRpdiBpZD0iYmxvb3BfY3VzdG9tZm9udCIg c3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2EsIEFyaWFsOyBmb250LXNpemU6IDEzcHg7IGZv bnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6 IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQt aW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3 b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyB0ZXh0LWRl Y29yYXRpb246IG5vbmU7IG1hcmdpbjogMHB4OyIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQo8 L2Rpdj4NCjxkaXYgaWQ9ImJsb29wX2N1c3RvbWZvbnQiIHN0eWxlPSJmb250LWZhbWlseTogSGVs dmV0aWNhLCBBcmlhbDsgZm9udC1zaXplOiAxM3B4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQt dmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5n OiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5z Zm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJr aXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyBtYXJnaW46 IDBweDsiIGNsYXNzPSIiPg0KQW4gaW5pdGlhbCBwYWNrZXQgaXMgZ3VhcmFudGVlZCB0byBub3Qg bGFuZCBvbiB0aGUgc2FtZSBzZXJ2ZXIgYmVjYXVzZSBvdGhlcndpc2UgYW4gYXR0YWNrZXIgY291 bGQgdGFyZ2V0IHRoYXQgc2luZ2xlIHNlcnZlci48L2Rpdj4NCjxkaXYgaWQ9ImJsb29wX2N1c3Rv bWZvbnQiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhLCBBcmlhbDsgZm9udC1zaXplOiAx M3B4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQt d2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0 OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5v cm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsg dGV4dC1kZWNvcmF0aW9uOiBub25lOyBtYXJnaW46IDBweDsiIGNsYXNzPSIiPg0KPGJyIGNsYXNz PSIiPg0KPC9kaXY+DQo8ZGl2IGlkPSJibG9vcF9jdXN0b21mb250IiBzdHlsZT0iZm9udC1mYW1p bHk6IEhlbHZldGljYSwgQXJpYWw7IGZvbnQtc2l6ZTogMTNweDsgZm9udC1zdHlsZTogbm9ybWFs OyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXIt c3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4 dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4 OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsg bWFyZ2luOiAwcHg7IiBjbGFzcz0iIj4NClBsYWNpbmcgdGhlIGNvdW50ZXIgaW4gdGhlIGxvYWQg YmFsYW5jZXIgaW5mcmFzdHJ1Y3R1cmUgYWxzbyBpc27igJl0IGdvb2QgYmVjYXVzZSBpdCByZXF1 aXJlcyBjb29yZGluYXRpb24gd2hpY2ggaXMgYSB2YXJ5IHNjYXJjZSByZXNvdXJjZSBpbiBoaWdo IHZvbHVtZSBhcmVhcy48L2Rpdj4NCjxkaXYgaWQ9ImJsb29wX2N1c3RvbWZvbnQiIHN0eWxlPSJm b250LWZhbWlseTogSGVsdmV0aWNhLCBBcmlhbDsgZm9udC1zaXplOiAxM3B4OyBmb250LXN0eWxl OiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7 IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDog MHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFj aW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0aW9u OiBub25lOyBtYXJnaW46IDBweDsiIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8 ZGl2IGlkPSJibG9vcF9jdXN0b21mb250IiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYSwg QXJpYWw7IGZvbnQtc2l6ZTogMTNweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQt Y2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFs OyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5v bmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQt c3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsgbWFyZ2luOiAwcHg7IiBj bGFzcz0iIj4NCkJ1dCBhIGNvdW50ZXIgaXNu4oCZdCBuZWNlc3NhcnkgYXMgeW91IGNhbiBqdXN0 IHNoYXJlIHNvbWUgY29tcGFyYXRpdmVseSB3ZWFrIGtleXMgYW5kIGhhc2ggYSB0aW1lc3RhbXAu IEl0IHdpbGwgYmUgZ29vZCBlbm91Z2gsIGFuZCBvdGhlcndpc2UgeW91IGNhbiB1c2Ugc3Ryb25n ZXIgMC1SVFQgdG9rZW5zIGZvciByZXR1cm4gdmlzaXRzLiBUaGUga2V5cyBjYW4gYmUgcm90YXRl ZCBwZXJpb2RpY2FsbHkgYW5kIHNoYXJlZCB0byBhbiBleHRlbmQsIGFuZA0KIHNvIGZvcnRoLjwv ZGl2Pg0KPGJyIHN0eWxlPSJjYXJldC1jb2xvcjogcmdiKDAsIDAsIDApOyBmb250LWZhbWlseTog SGVsdmV0aWNhLCBBcmlhbDsgZm9udC1zaXplOiAxM3B4OyBmb250LXN0eWxlOiBub3JtYWw7IGZv bnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFj aW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRy YW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13 ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyIgY2xh c3M9IiI+DQo8cCBjbGFzcz0iYWlybWFpbF9vbiIgc3R5bGU9ImNhcmV0LWNvbG9yOiByZ2IoMCwg MCwgMCk7IGZvbnQtZmFtaWx5OiBIZWx2ZXRpY2EsIEFyaWFsOyBmb250LXNpemU6IDEzcHg7IGZv bnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6 IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQt aW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3 b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyB0ZXh0LWRl Y29yYXRpb246IG5vbmU7Ij4NCk9uIDIzIEp1bHkgMjAxOSBhdCAxNy4xOS4wNiw8c3BhbiBjbGFz cz0iQXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PGEgaHJlZj0ibWFpbHRvOmJy ZW50LmJpbGdlckB2ZXJpem9uLmNvbSIgY2xhc3M9IiI+YnJlbnQuYmlsZ2VyQHZlcml6b24uY29t PC9hPjxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj4oPGEg aHJlZj0ibWFpbHRvOmJyZW50LmJpbGdlckB2ZXJpem9uLmNvbSIgY2xhc3M9IiI+YnJlbnQuYmls Z2VyQHZlcml6b24uY29tPC9hPikNCiB3cm90ZTo8L3A+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRl IiBjbGFzcz0iY2xlYW5fYnEiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhLCBBcmlhbDsg Zm9udC1zaXplOiAxM3B4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBu b3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IG9ycGhh bnM6IGF1dG87IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5z Zm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd2lkb3dzOiBhdXRvOyB3b3JkLXNwYWNp bmc6IDBweDsgLXdlYmtpdC10ZXh0LXNpemUtYWRqdXN0OiBhdXRvOyAtd2Via2l0LXRleHQtc3Ry b2tlLXdpZHRoOiAwcHg7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsiPg0KPHNwYW4gY2xhc3M9IiI+ DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0iZm9udC1mYW1pbHk6ICZxdW90O2hlbHZldGlj YSBOZXVlJnF1b3Q7LCBoZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTRweDsgZm9udC1zdHlsZTogbm9y bWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0 ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsg dGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzog MHB4OyB0ZXh0LWRlY29yYXRpb246IG5vbmU7IiBjbGFzcz0iIj4NCkFzIG5vdGVkIG9uIGEgZGlm ZmVyZW50IHBvc3RpbmcsIFNpbmdsZSBQYWNrZXQgQXV0aG9yaXphdGlvbiBpcyBiYXNlZCBvbiBS RkMgNDIyNiB3aGljaCBoYXMgYm90aCBhIGNvdW50ZXIgYW5kIGEgdGltZSBiYXNlZCBhcHByb2Fj aC4gUGVyc29uYWxseSwgSSBwcmVmZXIgYSBjb3VudGVyLjwvZGl2Pg0KPGRpdiBzdHlsZT0iZm9u dC1mYW1pbHk6ICZxdW90O2hlbHZldGljYSBOZXVlJnF1b3Q7LCBoZWx2ZXRpY2E7IGZvbnQtc2l6 ZTogMTRweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBm b250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBz dGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNl OiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyB0ZXh0LWRlY29yYXRpb246IG5vbmU7IiBjbGFz cz0iIj4NCjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBzdHlsZT0iZm9udC1mYW1pbHk6ICZx dW90O2hlbHZldGljYSBOZXVlJnF1b3Q7LCBoZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTRweDsgZm9u dC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDog bm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1p bmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdv cmQtc3BhY2luZzogMHB4OyB0ZXh0LWRlY29yYXRpb246IG5vbmU7IiBjbGFzcz0iIj4NCkJ1dCBh Z2FpbiwgdGhpcyBpcyBhbGwgaXJyZWxldmFudCBiZWNhdXNlIEnigJltIG5vdCBzdWdnZXN0aW5n IGFueSBvbmUgcHJlLWF1dGhlbnRpY2F0aW9uLiBJ4oCZbSBqdXN0IHVzaW5nIGFuIGV4YW1wbGUg dG8gc2hvdyBob3cgaXQgY2FuIHN0b3AgbXVsdGlwbGUgdHlwZXMgb2YgYXR0YWNrcy48L2Rpdj4N CjwvZGl2Pg0KPC9zcGFuPjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9k aXY+DQo8YnIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBkaXI9ImF1dG8iIHN0eWxl PSJjYXJldC1jb2xvcjogcmdiKDAsIDAsIDApOyBjb2xvcjogcmdiKDAsIDAsIDApOyBmb250LWZh bWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDE4cHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9u dC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNp bmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJh bnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdl YmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyB0ZXh0LWRlY29yYXRpb246IG5vbmU7IHdvcmQt d3JhcDogYnJlYWstd29yZDsgLXdlYmtpdC1uYnNwLW1vZGU6IHNwYWNlOyBsaW5lLWJyZWFrOiBh ZnRlci13aGl0ZS1zcGFjZTsiIGNsYXNzPSIiPg0KPGRpdiBkaXI9ImF1dG8iIHN0eWxlPSJ3b3Jk LXdyYXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgbGluZS1icmVhazog YWZ0ZXItd2hpdGUtc3BhY2U7IiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9ImNhcmV0LWNvbG9yOiBy Z2IoMCwgMCwgMCk7IGNvbG9yOiByZ2IoMCwgMCwgMCk7IGZvbnQtdmFyaWFudC1jYXBzOiBub3Jt YWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVu dDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1z cGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0 aW9uOiBub25lOyI+DQo8YnIgY2xhc3M9IkFwcGxlLWludGVyY2hhbmdlLW5ld2xpbmUiPg0KPGJy IGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IHN0eWxlPSJjYXJldC1jb2xvcjogcmdiKDAsIDAsIDAp OyBjb2xvcjogcmdiKDAsIDAsIDApOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBsZXR0ZXIt c3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4 dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4 OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsi Pg0KPGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IHN0eWxlPSJjYXJldC1jb2xvcjogcmdiKDAs IDAsIDApOyBjb2xvcjogcmdiKDAsIDAsIDApOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBs ZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBw eDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2lu ZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQtZGVjb3JhdGlvbjog bm9uZTsiPg0KQnJlbnQgQmxpZ2VyPC9kaXY+DQo8ZGl2IHN0eWxlPSJjYXJldC1jb2xvcjogcmdi KDAsIDAsIDApOyBjb2xvcjogcmdiKDAsIDAsIDApOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFs OyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6 IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3Bh Y2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQtZGVjb3JhdGlv bjogbm9uZTsiPg0KRGlyZWN0b3ItVGVjaG5vbG9neSZuYnNwO1Zlcml6b24gU0RQJm5ic3A7PGJy IGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IHN0eWxlPSJjYXJldC1jb2xvcjogcmdiKDAsIDAsIDAp OyBjb2xvcjogcmdiKDAsIDAsIDApOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBsZXR0ZXIt c3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4 dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4 OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsi Pg0KPGEgaHJlZj0ibWFpbHRvOmJyZW50LmJpbGdlckB2ZXJpem9uLmNvbSIgY2xhc3M9IiI+YnJl bnQuYmlsZ2VyQHZlcml6b24uY29tPC9hPjwvZGl2Pg0KPGRpdiBzdHlsZT0iY2FyZXQtY29sb3I6 IHJnYigwLCAwLCAwKTsgY29sb3I6IHJnYigwLCAwLCAwKTsgZm9udC1mYW1pbHk6IEhlbHZldGlj YTsgZm9udC1zaXplOiAyNHB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBz OiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRl eHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsg d2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJv a2Utd2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyIgY2xhc3M9IiI+DQo8YnIgY2xh c3M9IiI+DQo8L2Rpdj4NCjxiciBjbGFzcz0iQXBwbGUtaW50ZXJjaGFuZ2UtbmV3bGluZSI+DQo8 L2Rpdj4NCjwvZGl2Pg0KPGJyIGNsYXNzPSJBcHBsZS1pbnRlcmNoYW5nZS1uZXdsaW5lIiBzdHls ZT0iY2FyZXQtY29sb3I6IHJnYigwLCAwLCAwKTsgY29sb3I6IHJnYigwLCAwLCAwKTsgZm9udC1m YW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxOHB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZv bnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFj aW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRy YW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13 ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyI+DQo8 YnIgY2xhc3M9IkFwcGxlLWludGVyY2hhbmdlLW5ld2xpbmUiPg0KPC9kaXY+DQo8YnIgY2xhc3M9 IiI+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_BB953FE469544CBBA0DEC5E1EB617A85oneverizoncom_-- From nobody Tue Jul 23 09:30:29 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E3F101200BA for ; Tue, 23 Jul 2019 09:30:27 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.996 X-Spam-Level: X-Spam-Status: No, score=-1.996 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bvw0od2TB09l for ; Tue, 23 Jul 2019 09:30:25 -0700 (PDT) Received: from mail-ed1-x530.google.com (mail-ed1-x530.google.com [IPv6:2a00:1450:4864:20::530]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B5CA7120121 for ; Tue, 23 Jul 2019 09:30:24 -0700 (PDT) Received: by mail-ed1-x530.google.com with SMTP id w20so44515302edd.2 for ; Tue, 23 Jul 2019 09:30:24 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:in-reply-to:references:mime-version:date:message-id:subject:to :cc; bh=YEQEjabMGONJIE9BkXUqAad43SQ0wwyIdUT7NJXW5fE=; b=n+fwWXL0wmm3N1UZENSZ6+parp7CPNgTsiCenETwMn7nZonseYJxk/SkuB0IV1hYOF GXu6eAiPUdTEeLi5AE7DXtgd8l9x+UfZBhGdjLSJYhxXQweA+wqM3p5JjEvPEE6QnqGX nQFq0F1t2f9iX/OqjpBW/FOyAjGlRj5SDfdj+CKXjqHZo+tn5L8HRBy4GF9OnQiZi0xG 88wwZqoPoFMWgmal8/TdGarElEEC40UbRnpJjD5hUE+UhkKpWaauoY2zH+EOnMCi0+XB yl5JlqCY2wLBUovnEuPPMN4+oDAHv5ix19btD7FMK2o3DOe8c8ANRR615oQDokQIQw3i SkQg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:in-reply-to:references:mime-version:date :message-id:subject:to:cc; bh=YEQEjabMGONJIE9BkXUqAad43SQ0wwyIdUT7NJXW5fE=; b=PuNwexE+Pr+IoeisVqY7nD0tuKu50qFzMPtj5Vsq6689K2G44oN+41mKG8dafX9Kle onGnw8pPvxTGIC8YiLcdwNgavUThc72fOTCB7VyPTZ1IKl4HBw2e8ZMOxo+A3Vt+IQ70 W644I1TYekGGtVpc4B6UeW3UiewfWASJk2dq6QVilfMQA4w7rl1ir+cdKt3o3am/9k5n 7+Jsdaov2inuLL14SOjBl2npneo4zM25kXArXwiBI2Cm6NmYpzWX737l7ngPw+5UWA8h taSGKIm15OvsJ+ZMqyc4jrzkXN6wWaVRmzqiDQL0P8RijRbE4rXhEy05ORA6DiS9St6T pmnA== X-Gm-Message-State: APjAAAVRRuyFLCUtGljkOmcxpbOSoMh5Nh/TL5O3YzvUt/wUG0GjQCja BdCqnxp4u8VrhPiFAjOAZdz0uZaymot8NW33ohQ= X-Google-Smtp-Source: APXvYqxHSxHzJaBEkUiwW2VDd17aCgIdbP51Zt4UEzNLpH6lTvR14WC3x0hnhGr9LdZY+jXspXANqfK5hUOxnvRtQ7k= X-Received: by 2002:a50:b635:: with SMTP id b50mr66393375ede.293.1563899423232; Tue, 23 Jul 2019 09:30:23 -0700 (PDT) Received: from 1058052472880 named unknown by gmailapi.google.com with HTTPREST; Tue, 23 Jul 2019 09:30:21 -0700 From: =?UTF-8?Q?Mikkel_Fahn=C3=B8e_J=C3=B8rgensen?= In-Reply-To: References: <21E3AE84-02C5-4943-A88E-B62329E21002@one.verizon.com> <507D5DB7-EDF2-4429-A518-604A377F92D9@one.verizon.com> <9BF2DC9D-F14C-4451-9191-1A1557556691@fb.com> <9DC40032-3852-4237-A621-5C6B1102E74F@one.verizon.com> <16026C5D-847B-4281-ADE1-A65D394124FF@one.verizon.com> X-Mailer: Airmail (420) MIME-Version: 1.0 Date: Tue, 23 Jul 2019 09:30:21 -0700 Message-ID: Subject: Re: [E] DoS-ing QUIC servers is too easy To: brent.bilger@verizon.com Cc: "brent.bilger=40verizon.com@dmarc.ietf.org" , Watson Ladd , "quic@ietf.org" , Roberto Peon , Ian Swett Content-Type: multipart/alternative; boundary="000000000000961827058e5bb561" Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 23 Jul 2019 16:30:28 -0000 --000000000000961827058e5bb561 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable We are talking about an architecture where you have K load balancers that routes traffic to N endpoints. It is assumed that the load balancers are trusted by the the N endpoints. Sometimes the endpoints can coordinate with the load balancers, but not always (e.g. public cloud computing). Initially the endpoint is chosen at random (sort of). It must be. If the client can decide, an attacker can send all traffic to that end point. After that, obviously traffic should land on the same endpoint throughout the connection. Since we are discussing a token for the initial packet, it can pass through any of the K load balancers and land on any of the N endpoints. Where should the counter be stored? It must be server side (i.e. either endpoint or load balancer) in order to validate the token. And of course also client side. Aside from problems with clients and servers crashing and persistent recovery, which is a whole problem on its own, we now have KxN places to have a counter. This is reduced to N if we decide to store at the end points, or K if the load balancers take on the job. Let's just say K. How do you increment the counter or check it? You add a separate service that all K load balancers talk to. This is either a single point of failure, and a very slow bottleneck with network latency, or it is a distributed service like etcd. Both of these coordination approaches are used for load balancers, but that happens at an entirely different time scale. If for super high speed distributed coordination servers, you typically cannot go faster than a single machine. They also typically need to have persistent crash safe storage. This is way way too slow for high volume traffic. Especially under attack. Now, even if it was fast enough it would be vulnerable to single point of failure and getting out of sync. A lot of cryptography and security these days work really hard to avoid having such shared state. Public key cryptography is a prominent example, and we could use that to authenticate tokens - only - it is also too slow - in fact - slow crypto is largely what we are trying to avoid with the token in the first place. What is not too slow is a pre-shared secret with a timestamp. It is on the other hand not strong enough for proper authentication, but it is good enough for our purposes. Each of the KxN locations can independently check the token with low overhead. On 23 July 2019 at 18.03.51, brent.bilger@verizon.com ( brent.bilger@verizon.com) wrote: Again, I=E2=80=99m not sure it matters at this point because we=E2=80=99re = not recommending a method for creating a pre-authentication token, but I am curious about counter vs. timer. In counter-based HOTP (hashed one time password), the counter value is sent as part of the token. Since the client is storing the secret shared key, presumably, it would keep the counter is the same general location in long term memory. Since the counter changes every time, the OTP changes every time. What is it about the above that make it difficult to distribute in an enterprise environment? Brent On Jul 23, 2019, at 8:30 AM, Mikkel Fahn=C3=B8e J=C3=B8rgensen wrote: I believe that we largely agree, but a counter is not very good from a distributed perspective. I=E2=80=99d consider it a non-starter. I do have a proposal for QUIC v2 about preventing replay attacks on 0-RTT that involves something similar - but 0-RTT is sort of guaranteed to land on the same server based on routing on said token. An initial packet is guaranteed to not land on the same server because otherwise an attacker could target that single server. Placing the counter in the load balancer infrastructure also isn=E2=80=99t = good because it requires coordination which is a vary scarce resource in high volume areas. But a counter isn=E2=80=99t necessary as you can just share some comparativ= ely weak keys and hash a timestamp. It will be good enough, and otherwise you can use stronger 0-RTT tokens for return visits. The keys can be rotated periodically and shared to an extend, and so forth. On 23 July 2019 at 17.19.06, brent.bilger@verizon.com ( brent.bilger@verizon.com) wrote: As noted on a different posting, Single Packet Authorization is based on RFC 4226 which has both a counter and a time based approach. Personally, I prefer a counter. But again, this is all irrelevant because I=E2=80=99m not suggesting any on= e pre-authentication. I=E2=80=99m just using an example to show how it can st= op multiple types of attacks. Brent Bliger Director-Technology Verizon SDP brent.bilger@verizon.com --000000000000961827058e5bb561 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable = We are talking about= an architecture where you have K load balancers that routes traffic to N e= ndpoints. It is assumed that the load balancers are trusted by the the N en= dpoints. Sometimes the endpoints can coordinate with the load balancers, bu= t not always (e.g. public cloud computing).

Initially the endpoint is chosen at random (sort of)= . It must be. If the client can decide, an attacker can send all traffic to= that end point. After that, obviously traffic should land on the same endp= oint throughout the connection.

Since we are discussing a token for the initial packet, it can p= ass through any of the K load balancers and land on any of the N endpoints.=

Where should the cou= nter be stored? It must be server side (i.e. either endpoint or load balanc= er) in order to validate the token. And of course also client side.
Aside from problems with cli= ents and servers crashing and persistent recovery, which is a whole problem= on its own, we now have KxN places to have a counter. This is reduced to N= if we decide to store at the end points, or K if the load balancers take o= n the job. Let's just say K.

How do you increment the counter or check it? You add a separat= e service that all K load balancers talk to. This is either a single point = of failure, and a very slow bottleneck with network latency, or it is a dis= tributed service like etcd.

Both of these coordination approaches are used for load balancers, b= ut that happens at an entirely different time scale. If for super high spee= d distributed coordination servers, you typically cannot go faster than a s= ingle machine. They also typically need to have persistent crash safe stora= ge.

This is way way t= oo slow for high volume traffic. Especially under attack.

Now, even if it was fast enough it wou= ld be vulnerable to single point of failure and getting out of sync.
<= div id=3D"bloop_customfont" style=3D"font-family:Helvetica,Arial;font-size:= 13px;color:rgba(0,0,0,1.0);margin:0px;line-height:auto">
A lot of cryptography and= security these days work really hard to avoid having such shared state. Pu= blic key cryptography is a prominent example, and we could use that to auth= enticate tokens - only - it is also too slow - in fact - slow crypto is lar= gely what we are trying to avoid with the token in the first place.

What is not too slow is a pr= e-shared secret with a timestamp. It is on the other hand not strong enough= for proper authentication, but it is good enough for our purposes. Each of= the KxN locations can independently check the token with low overhead.


<= p class=3D"airmail_on">On 23 July 2019 at 18.03.51, brent.bilger@verizon.com (brent.bilger@verizon.com) wrote:

Again, I=E2=80=99m not sure it matters at this point because we=E2=80=99re = not recommending a method for creating a pre-authentication token, but I am curious about counter vs. timer. In counter-based HOTP (hashed one time password), the counter value is sent as part of the token. Since the client is storing the secret shared key, presumably, it would keep the counter is the same general location in long term memory. Since the counter changes every time, the OTP changes every time. What is it about the above that make it difficult to distribute in an enterprise environment?

Brent

On Jul 23, 2019, at 8:30 AM, Mikkel Fahn=C3=B8e J=C3=B8rgen= sen <mikkelfj@gmail.com= > wrote:

I = believe that we largely agree, but a counter is not very good from a distributed perspective. I=E2=80=99d consider it a non-starter.
I = do have a proposal for QUIC v2 about preventing replay attacks on 0-RTT that involves something similar - but 0-RTT is sort of guaranteed to land on the same server based on routing on said token.
An= initial packet is guaranteed to not land on the same server because otherwise an attacker could target that single server.
Pl= acing the counter in the load balancer infrastructure also isn=E2=80=99t good because it requires coordination which is a vary scarce resource in high volume areas.
Bu= t a counter isn=E2=80=99t necessary as you can just share some comparatively weak keys and hash a timestamp. It will be good enough, and otherwise you can use stronger 0-RTT tokens for return visits. The keys can be rotated periodically and shared to an extend, and so forth.

On 23 July 2019 at 17.19.06,=C2=A0brent.bilger@ver= izon.com=C2=A0(brent.bilger@verizon.com) w= rote:

As noted on a different posting, Single Packet Authorization is based on RFC 4226 which has both a counter and a time based approach. Personally, I prefer a counter.

But again, this is all irrelevant because I=E2=80=99m not suggesting any one pre-authentication. I=E2=80=99m just usi= ng an example to show how it can stop multiple types of attacks.




Brent Bliger
Director-Technology=C2=A0Verizon SDP=C2=A0





--000000000000961827058e5bb561-- From nobody Tue Jul 23 11:40:05 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D5D47120845 for ; Tue, 23 Jul 2019 11:39:42 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=verizon.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VBgA7UVUdric for ; Tue, 23 Jul 2019 11:39:41 -0700 (PDT) Received: from smtpout1-tdc.verizon.com (smtpout1-tdc.verizon.com [137.188.104.133]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3FF1D120843 for ; Tue, 23 Jul 2019 11:39:39 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=verizon.com; i=@verizon.com; q=dns/txt; s=corp; t=1563907180; x=1595443180; h=to:subject:date:message-id:references:in-reply-to: mime-version:from:cc; bh=lGXpiOUxS0U8Y9jS7aoLpPUucuySErGv4ciKgAu8xDE=; b=BNZvgalc6cG+jANZfzhhWSJ1cGWjXMTHwcZMLNGZ9r9Iub1uu3IgRs91 qfKRDyxQiaHatlWhAkbA/NKICwA2m4WPb34XQQvlEmqV37ALSM7ZuE4sq cnj2pNVZ1X6ktOYGWBBdGl9BCPGPWU0Ls1JHDJCt69fOwDWdiEKU8uiET I=; From: brent.bilger@verizon.com Cc: brent.bilger@verizon.com, "brent.bilger=40verizon.com@dmarc.ietf.org" , Watson Ladd , "quic@ietf.org" , Roberto Peon , Ian Swett Received: from tbwexch04apd.uswin.ad.vzwcorp.com ([153.114.162.28]) by smtpout1-tdc.verizon.com with ESMTP/TLS/ECDHE-RSA-AES256-SHA384; 23 Jul 2019 18:39:38 +0000 Received: from tbwexch28apd.uswin.ad.vzwcorp.com (153.114.162.52) by tbwexch04apd.uswin.ad.vzwcorp.com (153.114.162.28) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Tue, 23 Jul 2019 14:39:37 -0400 Received: from scwexch05apd.uswin.ad.vzwcorp.com (153.114.130.24) by tbwexch28apd.uswin.ad.vzwcorp.com (153.114.162.52) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Tue, 23 Jul 2019 14:39:36 -0400 Received: from scwexch05apd.uswin.ad.vzwcorp.com (153.114.130.24) by scwexch05apd.uswin.ad.vzwcorp.com (153.114.130.24) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Tue, 23 Jul 2019 11:39:35 -0700 Received: from scwexch05apd.uswin.ad.vzwcorp.com ([153.114.130.24]) by scwexch05apd.uswin.ad.vzwcorp.com ([153.114.130.24]) with mapi id 15.00.1473.003; Tue, 23 Jul 2019 11:39:35 -0700 To: =?utf-8?B?TWlra2VsIEZhaG7DuGUgSsO4cmdlbnNlbg==?= Subject: Re: [E] DoS-ing QUIC servers is too easy Thread-Topic: [E] DoS-ing QUIC servers is too easy Thread-Index: AQHVQO2TMeh9llpV6EqU+Dk6tm4oPqbYDioAgACHhoCAABI8gIAACRKAgAALXgCAAAPzAIAABxkAgAADTACAAAk2AIAAB2uAgAAkGgA= Date: Tue, 23 Jul 2019 18:39:35 +0000 Message-ID: References: <21E3AE84-02C5-4943-A88E-B62329E21002@one.verizon.com> <507D5DB7-EDF2-4429-A518-604A377F92D9@one.verizon.com> <9BF2DC9D-F14C-4451-9191-1A1557556691@fb.com> <9DC40032-3852-4237-A621-5C6B1102E74F@one.verizon.com> <16026C5D-847B-4281-ADE1-A65D394124FF@one.verizon.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.11.60.250] Content-Type: multipart/alternative; boundary="_000_FAC1E13E4A314A28BD8E75B83C5C9B16oneverizoncom_" MIME-Version: 1.0 Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 23 Jul 2019 18:39:56 -0000 --_000_FAC1E13E4A314A28BD8E75B83C5C9B16oneverizoncom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SW4gY291bnRlci1iYXNlZCBIT1RQLCB0aGUgY2xpZW50IGhhcyB0aGUgY291bnRlciwgbm90IHRo ZSBzZXJ2ZXIuIFdoZW4gdGhlIGNsaWVudCB3YW50cyB0byBjb25uZWN0IHRvIHRoZSBzZXJ2ZXIs IHRoZSBjbGllbnQgaW5jcmVtZW50cyB0aGUgY291bnRlciBhbmQgY3JlYXRlcyB0aGUgT1RQIChm cm9tIHRoZSBoYXNoIHRoZSBjb3VudGVyIHdpdGggdGhlIHNlY3JldCBrZXkpLiBUaGUgY2xpZW50 IHRoZW4gc2VuZHMgdGhlIENvdW50ZXIgYW5kIHRoZSBPVFAgdG8gdGhlIHNlcnZlci4gSXQgd291 bGQgYWxzbyBzZW5kIGl0cyBjbGllbnQgSUQuIFRoZXJlZm9yIGFsbCBLIHNlcnZlcnMgd2lsbCBn ZXQgdGhlIGNvdW50ZXIgYW5kIGRvbid0IG5lZWQgc29tZSBvdGhlciBzZXJ2aWNlIHRvIHByb3Zp ZGUgaXQuDQoNCk5vdywgeW91IG1heSBhc2sgYWJvdXQgdGhlIHNoYXJlZCBrZXkuIE9uZSB3YXkg dG8gaGFuZGxlIHRoaXMgaXMgdG8gZ2l2ZSB0aGUgc2VydmVycyBhIG1hc3RlciBrZXksIEttLCBh bmQgdXNlIGl0IHRvIGdlbmVyYXRlIHRoZSBjbGllbnQgc3BlY2lmaWMga2V5LCBLcy4gT25lIHdh eSB0byBkbyB0aGF0IGlzIEtzID0gSE1BQ1tDbGllbnRJRCwgS21dLiBUaGVyZWZvcmUsIHRoZSBv bi1ib2FyZGluZyBvZiB0aGUgY2xpZW50IHdvdWxkIGludm9sdmUgZ2VuZXJhdGluZyBhIHJhbmRv bSBjbGllbnQgSUQgYW5kIHRoZSBzaGFyZWQga2V5IGZyb20gaXQsIEtzID0gSE1BQ1tDbGllbnRJ RCwgS21dLiBUaGVuLCBhbGwgSyBzZXJ2ZXJzIHdvdWxkIGdldCB0aGUgY291bnRlciBmcm9tIHRo ZSBjbGllbnQgYW5kIGdlbmVyYXRlIHRoZSBjbGllbnQgc3BlY2lmaWMgc2hhcmVkIGtleSBmcm9t IHRoZSBtYXN0ZXIga2V5LiBOb3RlIHRoYXQgSE1BQyBpcyBhIGNvbXB1dGF0aW9uYWxseSBlZmZp Y2llbnQgYWxnb3JpdGhtLg0KDQpUaGUgYWJvdmUgd2FzIGFsbCBtYWRlIHVwLiBBZ2FpbiwgdGhl IGdvYWwgaXMgdG8gZ2V0IHRoZSBwcmUtYXV0aGVudGljYXRpb24gdG9rZW4gaW4gdGhlIHNwZWMs IG5vdCBkZXNpZ24gaXQuDQoNClJlZ2FyZHMsDQpCcmVudA0KDQpPbiBKdWwgMjMsIDIwMTksIGF0 IDk6MzAgQU0sIE1pa2tlbCBGYWhuw7hlIErDuHJnZW5zZW4gPG1pa2tlbGZqQGdtYWlsLmNvbTxt YWlsdG86bWlra2VsZmpAZ21haWwuY29tPj4gd3JvdGU6DQoNCldlIGFyZSB0YWxraW5nIGFib3V0 IGFuIGFyY2hpdGVjdHVyZSB3aGVyZSB5b3UgaGF2ZSBLIGxvYWQgYmFsYW5jZXJzIHRoYXQgcm91 dGVzIHRyYWZmaWMgdG8gTiBlbmRwb2ludHMuIEl0IGlzIGFzc3VtZWQgdGhhdCB0aGUgbG9hZCBi YWxhbmNlcnMgYXJlIHRydXN0ZWQgYnkgdGhlIHRoZSBOIGVuZHBvaW50cy4gU29tZXRpbWVzIHRo ZSBlbmRwb2ludHMgY2FuIGNvb3JkaW5hdGUgd2l0aCB0aGUgbG9hZCBiYWxhbmNlcnMsIGJ1dCBu b3QgYWx3YXlzIChlLmcuIHB1YmxpYyBjbG91ZCBjb21wdXRpbmcpLg0KDQpJbml0aWFsbHkgdGhl IGVuZHBvaW50IGlzIGNob3NlbiBhdCByYW5kb20gKHNvcnQgb2YpLiBJdCBtdXN0IGJlLiBJZiB0 aGUgY2xpZW50IGNhbiBkZWNpZGUsIGFuIGF0dGFja2VyIGNhbiBzZW5kIGFsbCB0cmFmZmljIHRv IHRoYXQgZW5kIHBvaW50LiBBZnRlciB0aGF0LCBvYnZpb3VzbHkgdHJhZmZpYyBzaG91bGQgbGFu ZCBvbiB0aGUgc2FtZSBlbmRwb2ludCB0aHJvdWdob3V0IHRoZSBjb25uZWN0aW9uLg0KDQpTaW5j ZSB3ZSBhcmUgZGlzY3Vzc2luZyBhIHRva2VuIGZvciB0aGUgaW5pdGlhbCBwYWNrZXQsIGl0IGNh biBwYXNzIHRocm91Z2ggYW55IG9mIHRoZSBLIGxvYWQgYmFsYW5jZXJzIGFuZCBsYW5kIG9uIGFu eSBvZiB0aGUgTiBlbmRwb2ludHMuDQoNCldoZXJlIHNob3VsZCB0aGUgY291bnRlciBiZSBzdG9y ZWQ/IEl0IG11c3QgYmUgc2VydmVyIHNpZGUgKGkuZS4gZWl0aGVyIGVuZHBvaW50IG9yIGxvYWQg YmFsYW5jZXIpIGluIG9yZGVyIHRvIHZhbGlkYXRlIHRoZSB0b2tlbi4gQW5kIG9mIGNvdXJzZSBh bHNvIGNsaWVudCBzaWRlLg0KDQpBc2lkZSBmcm9tIHByb2JsZW1zIHdpdGggY2xpZW50cyBhbmQg c2VydmVycyBjcmFzaGluZyBhbmQgcGVyc2lzdGVudCByZWNvdmVyeSwgd2hpY2ggaXMgYSB3aG9s ZSBwcm9ibGVtIG9uIGl0cyBvd24sIHdlIG5vdyBoYXZlIEt4TiBwbGFjZXMgdG8gaGF2ZSBhIGNv dW50ZXIuIFRoaXMgaXMgcmVkdWNlZCB0byBOIGlmIHdlIGRlY2lkZSB0byBzdG9yZSBhdCB0aGUg ZW5kIHBvaW50cywgb3IgSyBpZiB0aGUgbG9hZCBiYWxhbmNlcnMgdGFrZSBvbiB0aGUgam9iLiBM ZXQncyBqdXN0IHNheSBLLg0KDQpIb3cgZG8geW91IGluY3JlbWVudCB0aGUgY291bnRlciBvciBj aGVjayBpdD8gWW91IGFkZCBhIHNlcGFyYXRlIHNlcnZpY2UgdGhhdCBhbGwgSyBsb2FkIGJhbGFu Y2VycyB0YWxrIHRvLiBUaGlzIGlzIGVpdGhlciBhIHNpbmdsZSBwb2ludCBvZiBmYWlsdXJlLCBh bmQgYSB2ZXJ5IHNsb3cgYm90dGxlbmVjayB3aXRoIG5ldHdvcmsgbGF0ZW5jeSwgb3IgaXQgaXMg YSBkaXN0cmlidXRlZCBzZXJ2aWNlIGxpa2UgZXRjZC4NCg0KQm90aCBvZiB0aGVzZSBjb29yZGlu YXRpb24gYXBwcm9hY2hlcyBhcmUgdXNlZCBmb3IgbG9hZCBiYWxhbmNlcnMsIGJ1dCB0aGF0IGhh cHBlbnMgYXQgYW4gZW50aXJlbHkgZGlmZmVyZW50IHRpbWUgc2NhbGUuIElmIGZvciBzdXBlciBo aWdoIHNwZWVkIGRpc3RyaWJ1dGVkIGNvb3JkaW5hdGlvbiBzZXJ2ZXJzLCB5b3UgdHlwaWNhbGx5 IGNhbm5vdCBnbyBmYXN0ZXIgdGhhbiBhIHNpbmdsZSBtYWNoaW5lLiBUaGV5IGFsc28gdHlwaWNh bGx5IG5lZWQgdG8gaGF2ZSBwZXJzaXN0ZW50IGNyYXNoIHNhZmUgc3RvcmFnZS4NCg0KVGhpcyBp cyB3YXkgd2F5IHRvbyBzbG93IGZvciBoaWdoIHZvbHVtZSB0cmFmZmljLiBFc3BlY2lhbGx5IHVu ZGVyIGF0dGFjay4NCg0KTm93LCBldmVuIGlmIGl0IHdhcyBmYXN0IGVub3VnaCBpdCB3b3VsZCBi ZSB2dWxuZXJhYmxlIHRvIHNpbmdsZSBwb2ludCBvZiBmYWlsdXJlIGFuZCBnZXR0aW5nIG91dCBv ZiBzeW5jLg0KDQpBIGxvdCBvZiBjcnlwdG9ncmFwaHkgYW5kIHNlY3VyaXR5IHRoZXNlIGRheXMg d29yayByZWFsbHkgaGFyZCB0byBhdm9pZCBoYXZpbmcgc3VjaCBzaGFyZWQgc3RhdGUuIFB1Ymxp YyBrZXkgY3J5cHRvZ3JhcGh5IGlzIGEgcHJvbWluZW50IGV4YW1wbGUsIGFuZCB3ZSBjb3VsZCB1 c2UgdGhhdCB0byBhdXRoZW50aWNhdGUgdG9rZW5zIC0gb25seSAtIGl0IGlzIGFsc28gdG9vIHNs b3cgLSBpbiBmYWN0IC0gc2xvdyBjcnlwdG8gaXMgbGFyZ2VseSB3aGF0IHdlIGFyZSB0cnlpbmcg dG8gYXZvaWQgd2l0aCB0aGUgdG9rZW4gaW4gdGhlIGZpcnN0IHBsYWNlLg0KDQpXaGF0IGlzIG5v dCB0b28gc2xvdyBpcyBhIHByZS1zaGFyZWQgc2VjcmV0IHdpdGggYSB0aW1lc3RhbXAuIEl0IGlz IG9uIHRoZSBvdGhlciBoYW5kIG5vdCBzdHJvbmcgZW5vdWdoIGZvciBwcm9wZXIgYXV0aGVudGlj YXRpb24sIGJ1dCBpdCBpcyBnb29kIGVub3VnaCBmb3Igb3VyIHB1cnBvc2VzLiBFYWNoIG9mIHRo ZSBLeE4gbG9jYXRpb25zIGNhbiBpbmRlcGVuZGVudGx5IGNoZWNrIHRoZSB0b2tlbiB3aXRoIGxv dyBvdmVyaGVhZC4NCg0KDQoNCk9uIDIzIEp1bHkgMjAxOSBhdCAxOC4wMy41MSwgYnJlbnQuYmls Z2VyQHZlcml6b24uY29tPG1haWx0bzpicmVudC5iaWxnZXJAdmVyaXpvbi5jb20+IChicmVudC5i aWxnZXJAdmVyaXpvbi5jb208bWFpbHRvOmJyZW50LmJpbGdlckB2ZXJpem9uLmNvbT4pIHdyb3Rl Og0KDQpBZ2FpbiwgSeKAmW0gbm90IHN1cmUgaXQgbWF0dGVycyBhdCB0aGlzIHBvaW50IGJlY2F1 c2Ugd2XigJlyZSBub3QgcmVjb21tZW5kaW5nIGEgbWV0aG9kIGZvciBjcmVhdGluZyBhIHByZS1h dXRoZW50aWNhdGlvbiB0b2tlbiwgYnV0IEkgYW0gY3VyaW91cyBhYm91dCBjb3VudGVyIHZzLiB0 aW1lci4gSW4gY291bnRlci1iYXNlZCBIT1RQIChoYXNoZWQgb25lIHRpbWUgcGFzc3dvcmQpLCB0 aGUgY291bnRlciB2YWx1ZSBpcyBzZW50IGFzIHBhcnQgb2YgdGhlIHRva2VuLiBTaW5jZSB0aGUg Y2xpZW50IGlzIHN0b3JpbmcgdGhlIHNlY3JldCBzaGFyZWQga2V5LCBwcmVzdW1hYmx5LCBpdCB3 b3VsZCBrZWVwIHRoZSBjb3VudGVyIGlzIHRoZSBzYW1lIGdlbmVyYWwgbG9jYXRpb24gaW4gbG9u ZyB0ZXJtIG1lbW9yeS4gU2luY2UgdGhlIGNvdW50ZXIgY2hhbmdlcyBldmVyeSB0aW1lLCB0aGUg T1RQIGNoYW5nZXMgZXZlcnkgdGltZS4gV2hhdCBpcyBpdCBhYm91dCB0aGUgYWJvdmUgdGhhdCBt YWtlIGl0IGRpZmZpY3VsdCB0byBkaXN0cmlidXRlIGluIGFuIGVudGVycHJpc2UgZW52aXJvbm1l bnQ/DQoNCkJyZW50DQoNCk9uIEp1bCAyMywgMjAxOSwgYXQgODozMCBBTSwgTWlra2VsIEZhaG7D uGUgSsO4cmdlbnNlbiA8bWlra2VsZmpAZ21haWwuY29tPG1haWx0bzptaWtrZWxmakBnbWFpbC5j b20+PiB3cm90ZToNCg0KSSBiZWxpZXZlIHRoYXQgd2UgbGFyZ2VseSBhZ3JlZSwgYnV0IGEgY291 bnRlciBpcyBub3QgdmVyeSBnb29kIGZyb20gYSBkaXN0cmlidXRlZCBwZXJzcGVjdGl2ZS4gSeKA mWQgY29uc2lkZXIgaXQgYSBub24tc3RhcnRlci4NCg0KSSBkbyBoYXZlIGEgcHJvcG9zYWwgZm9y IFFVSUMgdjIgYWJvdXQgcHJldmVudGluZyByZXBsYXkgYXR0YWNrcyBvbiAwLVJUVCB0aGF0IGlu dm9sdmVzIHNvbWV0aGluZyBzaW1pbGFyIC0gYnV0IDAtUlRUIGlzIHNvcnQgb2YgZ3VhcmFudGVl ZCB0byBsYW5kIG9uIHRoZSBzYW1lIHNlcnZlciBiYXNlZCBvbiByb3V0aW5nIG9uIHNhaWQgdG9r ZW4uDQoNCkFuIGluaXRpYWwgcGFja2V0IGlzIGd1YXJhbnRlZWQgdG8gbm90IGxhbmQgb24gdGhl IHNhbWUgc2VydmVyIGJlY2F1c2Ugb3RoZXJ3aXNlIGFuIGF0dGFja2VyIGNvdWxkIHRhcmdldCB0 aGF0IHNpbmdsZSBzZXJ2ZXIuDQoNClBsYWNpbmcgdGhlIGNvdW50ZXIgaW4gdGhlIGxvYWQgYmFs YW5jZXIgaW5mcmFzdHJ1Y3R1cmUgYWxzbyBpc27igJl0IGdvb2QgYmVjYXVzZSBpdCByZXF1aXJl cyBjb29yZGluYXRpb24gd2hpY2ggaXMgYSB2YXJ5IHNjYXJjZSByZXNvdXJjZSBpbiBoaWdoIHZv bHVtZSBhcmVhcy4NCg0KQnV0IGEgY291bnRlciBpc27igJl0IG5lY2Vzc2FyeSBhcyB5b3UgY2Fu IGp1c3Qgc2hhcmUgc29tZSBjb21wYXJhdGl2ZWx5IHdlYWsga2V5cyBhbmQgaGFzaCBhIHRpbWVz dGFtcC4gSXQgd2lsbCBiZSBnb29kIGVub3VnaCwgYW5kIG90aGVyd2lzZSB5b3UgY2FuIHVzZSBz dHJvbmdlciAwLVJUVCB0b2tlbnMgZm9yIHJldHVybiB2aXNpdHMuIFRoZSBrZXlzIGNhbiBiZSBy b3RhdGVkIHBlcmlvZGljYWxseSBhbmQgc2hhcmVkIHRvIGFuIGV4dGVuZCwgYW5kIHNvIGZvcnRo Lg0KDQoNCk9uIDIzIEp1bHkgMjAxOSBhdCAxNy4xOS4wNiwgYnJlbnQuYmlsZ2VyQHZlcml6b24u Y29tPG1haWx0bzpicmVudC5iaWxnZXJAdmVyaXpvbi5jb20+IChicmVudC5iaWxnZXJAdmVyaXpv bi5jb208bWFpbHRvOmJyZW50LmJpbGdlckB2ZXJpem9uLmNvbT4pIHdyb3RlOg0KDQpBcyBub3Rl ZCBvbiBhIGRpZmZlcmVudCBwb3N0aW5nLCBTaW5nbGUgUGFja2V0IEF1dGhvcml6YXRpb24gaXMg YmFzZWQgb24gUkZDIDQyMjYgd2hpY2ggaGFzIGJvdGggYSBjb3VudGVyIGFuZCBhIHRpbWUgYmFz ZWQgYXBwcm9hY2guIFBlcnNvbmFsbHksIEkgcHJlZmVyIGEgY291bnRlci4NCg0KQnV0IGFnYWlu LCB0aGlzIGlzIGFsbCBpcnJlbGV2YW50IGJlY2F1c2UgSeKAmW0gbm90IHN1Z2dlc3RpbmcgYW55 IG9uZSBwcmUtYXV0aGVudGljYXRpb24uIEnigJltIGp1c3QgdXNpbmcgYW4gZXhhbXBsZSB0byBz aG93IGhvdyBpdCBjYW4gc3RvcCBtdWx0aXBsZSB0eXBlcyBvZiBhdHRhY2tzLg0KDQoNCg0KDQpC cmVudCBCbGlnZXINCkRpcmVjdG9yLVRlY2hub2xvZ3kgVmVyaXpvbiBTRFANCmJyZW50LmJpbGdl ckB2ZXJpem9uLmNvbTxtYWlsdG86YnJlbnQuYmlsZ2VyQHZlcml6b24uY29tPg0KDQoNCg0KDQpC cmVudCBCbGlnZXINCkRpcmVjdG9yLVRlY2hub2xvZ3kgVmVyaXpvbiBTRFANCmJyZW50LmJpbGdl ckB2ZXJpem9uLmNvbTxtYWlsdG86YnJlbnQuYmlsZ2VyQHZlcml6b24uY29tPg0KDQoNCg0KDQoN Cg== --_000_FAC1E13E4A314A28BD8E75B83C5C9B16oneverizoncom_ Content-Type: text/html; charset="utf-8" Content-ID: <1BF040E4C99F3C4084EDBB929103B896@vzwcorp.com> Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgbGluZS1icmVhazogYWZ0 ZXItd2hpdGUtc3BhY2U7IiBjbGFzcz0iIj4NCkluIGNvdW50ZXItYmFzZWQgSE9UUCwgdGhlIGNs aWVudCBoYXMgdGhlIGNvdW50ZXIsIG5vdCB0aGUgc2VydmVyLiBXaGVuIHRoZSBjbGllbnQgd2Fu dHMgdG8gY29ubmVjdCB0byB0aGUgc2VydmVyLCB0aGUgY2xpZW50IGluY3JlbWVudHMgdGhlIGNv dW50ZXIgYW5kIGNyZWF0ZXMgdGhlIE9UUCAoZnJvbSB0aGUgaGFzaCB0aGUgY291bnRlciB3aXRo IHRoZSBzZWNyZXQga2V5KS4gVGhlIGNsaWVudCB0aGVuIHNlbmRzIHRoZSBDb3VudGVyIGFuZCB0 aGUNCiBPVFAgdG8gdGhlIHNlcnZlci4gSXQgd291bGQgYWxzbyBzZW5kIGl0cyBjbGllbnQgSUQu IFRoZXJlZm9yIGFsbCBLIHNlcnZlcnMgd2lsbCBnZXQgdGhlIGNvdW50ZXIgYW5kIGRvbid0IG5l ZWQgc29tZSBvdGhlciBzZXJ2aWNlIHRvIHByb3ZpZGUgaXQuJm5ic3A7DQo8ZGl2IGNsYXNzPSIi PjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5Ob3csIHlvdSBtYXkgYXNrIGFi b3V0IHRoZSBzaGFyZWQga2V5LiBPbmUgd2F5IHRvIGhhbmRsZSB0aGlzIGlzIHRvIGdpdmUgdGhl IHNlcnZlcnMgYSBtYXN0ZXIga2V5LCBLbSwgYW5kIHVzZSBpdCB0byBnZW5lcmF0ZSB0aGUgY2xp ZW50IHNwZWNpZmljIGtleSwgS3MuIE9uZSB3YXkgdG8gZG8gdGhhdCBpcyBLcyA9IEhNQUNbQ2xp ZW50SUQsIEttXS4gVGhlcmVmb3JlLCB0aGUgb24tYm9hcmRpbmcgb2YgdGhlIGNsaWVudA0KIHdv dWxkIGludm9sdmUgZ2VuZXJhdGluZyBhIHJhbmRvbSBjbGllbnQgSUQgYW5kIHRoZSBzaGFyZWQg a2V5IGZyb20gaXQsIEtzID0gSE1BQ1tDbGllbnRJRCwgS21dLiBUaGVuLCBhbGwgSyBzZXJ2ZXJz IHdvdWxkIGdldCB0aGUgY291bnRlciBmcm9tIHRoZSBjbGllbnQgYW5kIGdlbmVyYXRlIHRoZSBj bGllbnQgc3BlY2lmaWMgc2hhcmVkIGtleSBmcm9tIHRoZSBtYXN0ZXIga2V5LiBOb3RlIHRoYXQg SE1BQyBpcyBhIGNvbXB1dGF0aW9uYWxseQ0KIGVmZmljaWVudCBhbGdvcml0aG0uPC9kaXY+DQo8 ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5UaGUgYWJv dmUgd2FzIGFsbCBtYWRlIHVwLiBBZ2FpbiwgdGhlIGdvYWwgaXMgdG8gZ2V0IHRoZSBwcmUtYXV0 aGVudGljYXRpb24gdG9rZW4gaW4gdGhlIHNwZWMsIG5vdCBkZXNpZ24gaXQuPC9kaXY+DQo8ZGl2 IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5SZWdhcmRzLDwv ZGl2Pg0KPGRpdiBjbGFzcz0iIj5CcmVudDxiciBjbGFzcz0iIj4NCjxkaXY+PGJyIGNsYXNzPSIi Pg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPk9uIEp1 bCAyMywgMjAxOSwgYXQgOTozMCBBTSwgTWlra2VsIEZhaG7DuGUgSsO4cmdlbnNlbiAmbHQ7PGEg aHJlZj0ibWFpbHRvOm1pa2tlbGZqQGdtYWlsLmNvbSIgY2xhc3M9IiI+bWlra2VsZmpAZ21haWwu Y29tPC9hPiZndDsgd3JvdGU6PC9kaXY+DQo8YnIgY2xhc3M9IkFwcGxlLWludGVyY2hhbmdlLW5l d2xpbmUiPg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgaWQ9ImJsb29wX2N1c3RvbWZvbnQiIHN0eWxl PSJmb250LWZhbWlseTogSGVsdmV0aWNhLCBBcmlhbDsgZm9udC1zaXplOiAxM3B4OyBmb250LXN0 eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3Jt YWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVu dDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1z cGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0 aW9uOiBub25lOyBtYXJnaW46IDBweDsiIGNsYXNzPSIiPg0KV2UgYXJlIHRhbGtpbmcgYWJvdXQg YW4gYXJjaGl0ZWN0dXJlIHdoZXJlIHlvdSBoYXZlIEsgbG9hZCBiYWxhbmNlcnMgdGhhdCByb3V0 ZXMgdHJhZmZpYyB0byBOIGVuZHBvaW50cy4gSXQgaXMgYXNzdW1lZCB0aGF0IHRoZSBsb2FkIGJh bGFuY2VycyBhcmUgdHJ1c3RlZCBieSB0aGUgdGhlIE4gZW5kcG9pbnRzLiBTb21ldGltZXMgdGhl IGVuZHBvaW50cyBjYW4gY29vcmRpbmF0ZSB3aXRoIHRoZSBsb2FkIGJhbGFuY2VycywgYnV0IG5v dCBhbHdheXMNCiAoZS5nLiBwdWJsaWMgY2xvdWQgY29tcHV0aW5nKS48L2Rpdj4NCjxkaXYgaWQ9 ImJsb29wX2N1c3RvbWZvbnQiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhLCBBcmlhbDsg Zm9udC1zaXplOiAxM3B4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBu b3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQt YWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hp dGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Ut d2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyBtYXJnaW46IDBweDsiIGNsYXNzPSIi Pg0KPGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGlkPSJibG9vcF9jdXN0b21mb250IiBzdHls ZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYSwgQXJpYWw7IGZvbnQtc2l6ZTogMTNweDsgZm9udC1z dHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9y bWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRl bnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQt c3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQtZGVjb3Jh dGlvbjogbm9uZTsgbWFyZ2luOiAwcHg7IiBjbGFzcz0iIj4NCkluaXRpYWxseSB0aGUgZW5kcG9p bnQgaXMgY2hvc2VuIGF0IHJhbmRvbSAoc29ydCBvZikuIEl0IG11c3QgYmUuIElmIHRoZSBjbGll bnQgY2FuIGRlY2lkZSwgYW4gYXR0YWNrZXIgY2FuIHNlbmQgYWxsIHRyYWZmaWMgdG8gdGhhdCBl bmQgcG9pbnQuIEFmdGVyIHRoYXQsIG9idmlvdXNseSB0cmFmZmljIHNob3VsZCBsYW5kIG9uIHRo ZSBzYW1lIGVuZHBvaW50IHRocm91Z2hvdXQgdGhlIGNvbm5lY3Rpb24uPC9kaXY+DQo8ZGl2IGlk PSJibG9vcF9jdXN0b21mb250IiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYSwgQXJpYWw7 IGZvbnQtc2l6ZTogMTNweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczog bm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0 LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdo aXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tl LXdpZHRoOiAwcHg7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsgbWFyZ2luOiAwcHg7IiBjbGFzcz0i Ij4NCjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBpZD0iYmxvb3BfY3VzdG9tZm9udCIgc3R5 bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2EsIEFyaWFsOyBmb250LXNpemU6IDEzcHg7IGZvbnQt c3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5v cm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5k ZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3Jk LXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyB0ZXh0LWRlY29y YXRpb246IG5vbmU7IG1hcmdpbjogMHB4OyIgY2xhc3M9IiI+DQpTaW5jZSB3ZSBhcmUgZGlzY3Vz c2luZyBhIHRva2VuIGZvciB0aGUgaW5pdGlhbCBwYWNrZXQsIGl0IGNhbiBwYXNzIHRocm91Z2gg YW55IG9mIHRoZSBLIGxvYWQgYmFsYW5jZXJzIGFuZCBsYW5kIG9uIGFueSBvZiB0aGUgTiBlbmRw b2ludHMuPC9kaXY+DQo8ZGl2IGlkPSJibG9vcF9jdXN0b21mb250IiBzdHlsZT0iZm9udC1mYW1p bHk6IEhlbHZldGljYSwgQXJpYWw7IGZvbnQtc2l6ZTogMTNweDsgZm9udC1zdHlsZTogbm9ybWFs OyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXIt c3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4 dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4 OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsg bWFyZ2luOiAwcHg7IiBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBpZD0i Ymxvb3BfY3VzdG9tZm9udCIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2EsIEFyaWFsOyBm b250LXNpemU6IDEzcHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5v cm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1h bGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0 ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13 aWR0aDogMHB4OyB0ZXh0LWRlY29yYXRpb246IG5vbmU7IG1hcmdpbjogMHB4OyIgY2xhc3M9IiI+ DQpXaGVyZSBzaG91bGQgdGhlIGNvdW50ZXIgYmUgc3RvcmVkPyBJdCBtdXN0IGJlIHNlcnZlciBz aWRlIChpLmUuIGVpdGhlciBlbmRwb2ludCBvciBsb2FkIGJhbGFuY2VyKSBpbiBvcmRlciB0byB2 YWxpZGF0ZSB0aGUgdG9rZW4uIEFuZCBvZiBjb3Vyc2UgYWxzbyBjbGllbnQgc2lkZS48L2Rpdj4N CjxkaXYgaWQ9ImJsb29wX2N1c3RvbWZvbnQiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNh LCBBcmlhbDsgZm9udC1zaXplOiAxM3B4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFu dC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3Jt YWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTog bm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4 dC1zdHJva2Utd2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyBtYXJnaW46IDBweDsi IGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGlkPSJibG9vcF9jdXN0b21m b250IiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYSwgQXJpYWw7IGZvbnQtc2l6ZTogMTNw eDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdl aWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsg dGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3Jt YWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRl eHQtZGVjb3JhdGlvbjogbm9uZTsgbWFyZ2luOiAwcHg7IiBjbGFzcz0iIj4NCkFzaWRlIGZyb20g cHJvYmxlbXMgd2l0aCBjbGllbnRzIGFuZCBzZXJ2ZXJzIGNyYXNoaW5nIGFuZCBwZXJzaXN0ZW50 IHJlY292ZXJ5LCB3aGljaCBpcyBhIHdob2xlIHByb2JsZW0gb24gaXRzIG93biwgd2Ugbm93IGhh dmUgS3hOIHBsYWNlcyB0byBoYXZlIGEgY291bnRlci4gVGhpcyBpcyByZWR1Y2VkIHRvIE4gaWYg d2UgZGVjaWRlIHRvIHN0b3JlIGF0IHRoZSBlbmQgcG9pbnRzLCBvciBLIGlmIHRoZSBsb2FkIGJh bGFuY2VycyB0YWtlIG9uIHRoZQ0KIGpvYi4gTGV0J3MganVzdCBzYXkgSy48L2Rpdj4NCjxkaXYg aWQ9ImJsb29wX2N1c3RvbWZvbnQiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhLCBBcmlh bDsgZm9udC1zaXplOiAxM3B4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBz OiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRl eHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsg d2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJv a2Utd2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyBtYXJnaW46IDBweDsiIGNsYXNz PSIiPg0KPGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGlkPSJibG9vcF9jdXN0b21mb250IiBz dHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYSwgQXJpYWw7IGZvbnQtc2l6ZTogMTNweDsgZm9u dC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDog bm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1p bmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdv cmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQtZGVj b3JhdGlvbjogbm9uZTsgbWFyZ2luOiAwcHg7IiBjbGFzcz0iIj4NCkhvdyBkbyB5b3UgaW5jcmVt ZW50IHRoZSBjb3VudGVyIG9yIGNoZWNrIGl0PyBZb3UgYWRkIGEgc2VwYXJhdGUgc2VydmljZSB0 aGF0IGFsbCBLIGxvYWQgYmFsYW5jZXJzIHRhbGsgdG8uIFRoaXMgaXMgZWl0aGVyIGEgc2luZ2xl IHBvaW50IG9mIGZhaWx1cmUsIGFuZCBhIHZlcnkgc2xvdyBib3R0bGVuZWNrIHdpdGggbmV0d29y ayBsYXRlbmN5LCBvciBpdCBpcyBhIGRpc3RyaWJ1dGVkIHNlcnZpY2UgbGlrZSBldGNkLjwvZGl2 Pg0KPGRpdiBpZD0iYmxvb3BfY3VzdG9tZm9udCIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRp Y2EsIEFyaWFsOyBmb250LXNpemU6IDEzcHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJp YW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5v cm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3Jt OiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10 ZXh0LXN0cm9rZS13aWR0aDogMHB4OyB0ZXh0LWRlY29yYXRpb246IG5vbmU7IG1hcmdpbjogMHB4 OyIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgaWQ9ImJsb29wX2N1c3Rv bWZvbnQiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhLCBBcmlhbDsgZm9udC1zaXplOiAx M3B4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQt d2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0 OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5v cm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsg dGV4dC1kZWNvcmF0aW9uOiBub25lOyBtYXJnaW46IDBweDsiIGNsYXNzPSIiPg0KQm90aCBvZiB0 aGVzZSBjb29yZGluYXRpb24gYXBwcm9hY2hlcyBhcmUgdXNlZCBmb3IgbG9hZCBiYWxhbmNlcnMs IGJ1dCB0aGF0IGhhcHBlbnMgYXQgYW4gZW50aXJlbHkgZGlmZmVyZW50IHRpbWUgc2NhbGUuIElm IGZvciBzdXBlciBoaWdoIHNwZWVkIGRpc3RyaWJ1dGVkIGNvb3JkaW5hdGlvbiBzZXJ2ZXJzLCB5 b3UgdHlwaWNhbGx5IGNhbm5vdCBnbyBmYXN0ZXIgdGhhbiBhIHNpbmdsZSBtYWNoaW5lLiBUaGV5 IGFsc28gdHlwaWNhbGx5IG5lZWQNCiB0byBoYXZlIHBlcnNpc3RlbnQgY3Jhc2ggc2FmZSBzdG9y YWdlLjwvZGl2Pg0KPGRpdiBpZD0iYmxvb3BfY3VzdG9tZm9udCIgc3R5bGU9ImZvbnQtZmFtaWx5 OiBIZWx2ZXRpY2EsIEFyaWFsOyBmb250LXNpemU6IDEzcHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsg Zm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNw YWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQt dHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsg LXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyB0ZXh0LWRlY29yYXRpb246IG5vbmU7IG1h cmdpbjogMHB4OyIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgaWQ9ImJs b29wX2N1c3RvbWZvbnQiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhLCBBcmlhbDsgZm9u dC1zaXplOiAxM3B4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3Jt YWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxp Z246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUt c3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lk dGg6IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyBtYXJnaW46IDBweDsiIGNsYXNzPSIiPg0K VGhpcyBpcyB3YXkgd2F5IHRvbyBzbG93IGZvciBoaWdoIHZvbHVtZSB0cmFmZmljLiBFc3BlY2lh bGx5IHVuZGVyIGF0dGFjay48L2Rpdj4NCjxkaXYgaWQ9ImJsb29wX2N1c3RvbWZvbnQiIHN0eWxl PSJmb250LWZhbWlseTogSGVsdmV0aWNhLCBBcmlhbDsgZm9udC1zaXplOiAxM3B4OyBmb250LXN0 eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3Jt YWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVu dDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1z cGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0 aW9uOiBub25lOyBtYXJnaW46IDBweDsiIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KPC9kaXY+ DQo8ZGl2IGlkPSJibG9vcF9jdXN0b21mb250IiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGlj YSwgQXJpYWw7IGZvbnQtc2l6ZTogMTNweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlh bnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9y bWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06 IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRl eHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsgbWFyZ2luOiAwcHg7 IiBjbGFzcz0iIj4NCk5vdywgZXZlbiBpZiBpdCB3YXMgZmFzdCBlbm91Z2ggaXQgd291bGQgYmUg dnVsbmVyYWJsZSB0byBzaW5nbGUgcG9pbnQgb2YgZmFpbHVyZSBhbmQgZ2V0dGluZyBvdXQgb2Yg c3luYy48L2Rpdj4NCjxkaXYgaWQ9ImJsb29wX2N1c3RvbWZvbnQiIHN0eWxlPSJmb250LWZhbWls eTogSGVsdmV0aWNhLCBBcmlhbDsgZm9udC1zaXplOiAxM3B4OyBmb250LXN0eWxlOiBub3JtYWw7 IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1z cGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0 LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7 IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyBt YXJnaW46IDBweDsiIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGlkPSJi bG9vcF9jdXN0b21mb250IiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYSwgQXJpYWw7IGZv bnQtc2l6ZTogMTNweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9y bWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFs aWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRl LXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdp ZHRoOiAwcHg7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsgbWFyZ2luOiAwcHg7IiBjbGFzcz0iIj4N CkEgbG90IG9mIGNyeXB0b2dyYXBoeSBhbmQgc2VjdXJpdHkgdGhlc2UgZGF5cyB3b3JrIHJlYWxs eSBoYXJkIHRvIGF2b2lkIGhhdmluZyBzdWNoIHNoYXJlZCBzdGF0ZS4gUHVibGljIGtleSBjcnlw dG9ncmFwaHkgaXMgYSBwcm9taW5lbnQgZXhhbXBsZSwgYW5kIHdlIGNvdWxkIHVzZSB0aGF0IHRv IGF1dGhlbnRpY2F0ZSB0b2tlbnMgLSBvbmx5IC0gaXQgaXMgYWxzbyB0b28gc2xvdyAtIGluIGZh Y3QgLSBzbG93IGNyeXB0byBpcyBsYXJnZWx5IHdoYXQNCiB3ZSBhcmUgdHJ5aW5nIHRvIGF2b2lk IHdpdGggdGhlIHRva2VuIGluIHRoZSBmaXJzdCBwbGFjZS48L2Rpdj4NCjxkaXYgaWQ9ImJsb29w X2N1c3RvbWZvbnQiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhLCBBcmlhbDsgZm9udC1z aXplOiAxM3B4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7 IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246 IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3Bh Y2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6 IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyBtYXJnaW46IDBweDsiIGNsYXNzPSIiPg0KPGJy IGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGlkPSJibG9vcF9jdXN0b21mb250IiBzdHlsZT0iZm9u dC1mYW1pbHk6IEhlbHZldGljYSwgQXJpYWw7IGZvbnQtc2l6ZTogMTNweDsgZm9udC1zdHlsZTog bm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBs ZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBw eDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2lu ZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQtZGVjb3JhdGlvbjog bm9uZTsgbWFyZ2luOiAwcHg7IiBjbGFzcz0iIj4NCldoYXQgaXMgbm90IHRvbyBzbG93IGlzIGEg cHJlLXNoYXJlZCBzZWNyZXQgd2l0aCBhIHRpbWVzdGFtcC4gSXQgaXMgb24gdGhlIG90aGVyIGhh bmQgbm90IHN0cm9uZyBlbm91Z2ggZm9yIHByb3BlciBhdXRoZW50aWNhdGlvbiwgYnV0IGl0IGlz IGdvb2QgZW5vdWdoIGZvciBvdXIgcHVycG9zZXMuIEVhY2ggb2YgdGhlIEt4TiBsb2NhdGlvbnMg Y2FuIGluZGVwZW5kZW50bHkgY2hlY2sgdGhlIHRva2VuIHdpdGggbG93IG92ZXJoZWFkLjwvZGl2 Pg0KPGRpdiBpZD0iYmxvb3BfY3VzdG9tZm9udCIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRp Y2EsIEFyaWFsOyBmb250LXNpemU6IDEzcHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJp YW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5v cm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3Jt OiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10 ZXh0LXN0cm9rZS13aWR0aDogMHB4OyB0ZXh0LWRlY29yYXRpb246IG5vbmU7IG1hcmdpbjogMHB4 OyIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxiciBzdHlsZT0iY2FyZXQtY29s b3I6IHJnYigwLCAwLCAwKTsgZm9udC1mYW1pbHk6IEhlbHZldGljYSwgQXJpYWw7IGZvbnQtc2l6 ZTogMTNweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBm b250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBz dGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNl OiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAw cHg7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsiIGNsYXNzPSIiPg0KPHAgY2xhc3M9ImFpcm1haWxf b24iIHN0eWxlPSJjYXJldC1jb2xvcjogcmdiKDAsIDAsIDApOyBmb250LWZhbWlseTogSGVsdmV0 aWNhLCBBcmlhbDsgZm9udC1zaXplOiAxM3B4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFy aWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBu b3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9y bTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQt dGV4dC1zdHJva2Utd2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyI+DQpPbiAyMyBK dWx5IDIwMTkgYXQgMTguMDMuNTEsPHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+ Jm5ic3A7PC9zcGFuPjxhIGhyZWY9Im1haWx0bzpicmVudC5iaWxnZXJAdmVyaXpvbi5jb20iIGNs YXNzPSIiPmJyZW50LmJpbGdlckB2ZXJpem9uLmNvbTwvYT48c3BhbiBjbGFzcz0iQXBwbGUtY29u dmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+KDxhIGhyZWY9Im1haWx0bzpicmVudC5iaWxnZXJA dmVyaXpvbi5jb20iIGNsYXNzPSIiPmJyZW50LmJpbGdlckB2ZXJpem9uLmNvbTwvYT4pDQogd3Jv dGU6PC9wPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9ImNsZWFuX2JxIiBzdHlsZT0i Zm9udC1mYW1pbHk6IEhlbHZldGljYSwgQXJpYWw7IGZvbnQtc2l6ZTogMTNweDsgZm9udC1zdHls ZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFs OyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyBvcnBoYW5zOiBhdXRvOyB0ZXh0LWFsaWduOiBzdGFy dDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBu b3JtYWw7IHdpZG93czogYXV0bzsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zaXpl LWFkanVzdDogYXV0bzsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyB0ZXh0LWRlY29y YXRpb246IG5vbmU7Ij4NCjxzcGFuIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIiBzdHlsZT0id29y ZC13cmFwOiBicmVhay13b3JkOyBsaW5lLWJyZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsiPg0KPGRp diBjbGFzcz0iIj48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+QWdhaW4sIEnigJltIG5vdCBzdXJlIGl0 IG1hdHRlcnMgYXQgdGhpcyBwb2ludCBiZWNhdXNlIHdl4oCZcmUgbm90IHJlY29tbWVuZGluZyBh IG1ldGhvZCBmb3IgY3JlYXRpbmcgYSBwcmUtYXV0aGVudGljYXRpb24gdG9rZW4sIGJ1dCBJIGFt IGN1cmlvdXMgYWJvdXQgY291bnRlciB2cy4gdGltZXIuIEluIGNvdW50ZXItYmFzZWQgSE9UUCAo aGFzaGVkIG9uZSB0aW1lIHBhc3N3b3JkKSwgdGhlIGNvdW50ZXIgdmFsdWUgaXMgc2VudA0KIGFz IHBhcnQgb2YgdGhlIHRva2VuLiBTaW5jZSB0aGUgY2xpZW50IGlzIHN0b3JpbmcgdGhlIHNlY3Jl dCBzaGFyZWQga2V5LCBwcmVzdW1hYmx5LCBpdCB3b3VsZCBrZWVwIHRoZSBjb3VudGVyIGlzIHRo ZSBzYW1lIGdlbmVyYWwgbG9jYXRpb24gaW4gbG9uZyB0ZXJtIG1lbW9yeS4gU2luY2UgdGhlIGNv dW50ZXIgY2hhbmdlcyBldmVyeSB0aW1lLCB0aGUgT1RQIGNoYW5nZXMgZXZlcnkgdGltZS4gV2hh dCBpcyBpdCBhYm91dCB0aGUgYWJvdmUgdGhhdA0KIG1ha2UgaXQgZGlmZmljdWx0IHRvIGRpc3Ry aWJ1dGUgaW4gYW4gZW50ZXJwcmlzZSBlbnZpcm9ubWVudD8NCjxkaXYgY2xhc3M9IiI+PGJyIGNs YXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPkJyZW50PGJyIGNsYXNzPSIiPg0KPGRpdiBj bGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4N CjxkaXYgY2xhc3M9IiI+T24gSnVsIDIzLCAyMDE5LCBhdCA4OjMwIEFNLCBNaWtrZWwgRmFobsO4 ZSBKw7hyZ2Vuc2VuICZsdDs8YSBocmVmPSJtYWlsdG86bWlra2VsZmpAZ21haWwuY29tIiBjbGFz cz0iIj5taWtrZWxmakBnbWFpbC5jb208L2E+Jmd0OyB3cm90ZTo8L2Rpdj4NCjxiciBjbGFzcz0i QXBwbGUtaW50ZXJjaGFuZ2UtbmV3bGluZSI+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBpZD0iYmxv b3BfY3VzdG9tZm9udCIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2EsIEFy aWFsOyBmb250LXNpemU6IDEzcHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNh cHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsg dGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25l OyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgdGV4dC1kZWNvcmF0aW9u OiBub25lOyBtYXJnaW46IDBweDsiPg0KSSBiZWxpZXZlIHRoYXQgd2UgbGFyZ2VseSBhZ3JlZSwg YnV0IGEgY291bnRlciBpcyBub3QgdmVyeSBnb29kIGZyb20gYSBkaXN0cmlidXRlZCBwZXJzcGVj dGl2ZS4gSeKAmWQgY29uc2lkZXIgaXQgYSBub24tc3RhcnRlci48L2Rpdj4NCjxkaXYgaWQ9ImJs b29wX2N1c3RvbWZvbnQiIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhLCBB cmlhbDsgZm9udC1zaXplOiAxM3B4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1j YXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7 IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9u ZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IHRleHQtZGVjb3JhdGlv bjogbm9uZTsgbWFyZ2luOiAwcHg7Ij4NCjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBpZD0i Ymxvb3BfY3VzdG9tZm9udCIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2Es IEFyaWFsOyBmb250LXNpemU6IDEzcHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50 LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1h bDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBu b25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgdGV4dC1kZWNvcmF0 aW9uOiBub25lOyBtYXJnaW46IDBweDsiPg0KSSBkbyBoYXZlIGEgcHJvcG9zYWwgZm9yIFFVSUMg djIgYWJvdXQgcHJldmVudGluZyByZXBsYXkgYXR0YWNrcyBvbiAwLVJUVCB0aGF0IGludm9sdmVz IHNvbWV0aGluZyBzaW1pbGFyIC0gYnV0IDAtUlRUIGlzIHNvcnQgb2YgZ3VhcmFudGVlZCB0byBs YW5kIG9uIHRoZSBzYW1lIHNlcnZlciBiYXNlZCBvbiByb3V0aW5nIG9uIHNhaWQgdG9rZW4uPC9k aXY+DQo8ZGl2IGlkPSJibG9vcF9jdXN0b21mb250IiBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1p bHk6IEhlbHZldGljYSwgQXJpYWw7IGZvbnQtc2l6ZTogMTNweDsgZm9udC1zdHlsZTogbm9ybWFs OyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXIt c3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4 dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4 OyB0ZXh0LWRlY29yYXRpb246IG5vbmU7IG1hcmdpbjogMHB4OyI+DQo8YnIgY2xhc3M9IiI+DQo8 L2Rpdj4NCjxkaXYgaWQ9ImJsb29wX2N1c3RvbWZvbnQiIGNsYXNzPSIiIHN0eWxlPSJmb250LWZh bWlseTogSGVsdmV0aWNhLCBBcmlhbDsgZm9udC1zaXplOiAxM3B4OyBmb250LXN0eWxlOiBub3Jt YWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRl ci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0 ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAw cHg7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsgbWFyZ2luOiAwcHg7Ij4NCkFuIGluaXRpYWwgcGFj a2V0IGlzIGd1YXJhbnRlZWQgdG8gbm90IGxhbmQgb24gdGhlIHNhbWUgc2VydmVyIGJlY2F1c2Ug b3RoZXJ3aXNlIGFuIGF0dGFja2VyIGNvdWxkIHRhcmdldCB0aGF0IHNpbmdsZSBzZXJ2ZXIuPC9k aXY+DQo8ZGl2IGlkPSJibG9vcF9jdXN0b21mb250IiBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1p bHk6IEhlbHZldGljYSwgQXJpYWw7IGZvbnQtc2l6ZTogMTNweDsgZm9udC1zdHlsZTogbm9ybWFs OyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXIt c3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4 dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4 OyB0ZXh0LWRlY29yYXRpb246IG5vbmU7IG1hcmdpbjogMHB4OyI+DQo8YnIgY2xhc3M9IiI+DQo8 L2Rpdj4NCjxkaXYgaWQ9ImJsb29wX2N1c3RvbWZvbnQiIGNsYXNzPSIiIHN0eWxlPSJmb250LWZh bWlseTogSGVsdmV0aWNhLCBBcmlhbDsgZm9udC1zaXplOiAxM3B4OyBmb250LXN0eWxlOiBub3Jt YWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRl ci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0 ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAw cHg7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsgbWFyZ2luOiAwcHg7Ij4NClBsYWNpbmcgdGhlIGNv dW50ZXIgaW4gdGhlIGxvYWQgYmFsYW5jZXIgaW5mcmFzdHJ1Y3R1cmUgYWxzbyBpc27igJl0IGdv b2QgYmVjYXVzZSBpdCByZXF1aXJlcyBjb29yZGluYXRpb24gd2hpY2ggaXMgYSB2YXJ5IHNjYXJj ZSByZXNvdXJjZSBpbiBoaWdoIHZvbHVtZSBhcmVhcy48L2Rpdj4NCjxkaXYgaWQ9ImJsb29wX2N1 c3RvbWZvbnQiIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhLCBBcmlhbDsg Zm9udC1zaXplOiAxM3B4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBu b3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQt YWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hp dGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IHRleHQtZGVjb3JhdGlvbjogbm9u ZTsgbWFyZ2luOiAwcHg7Ij4NCjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBpZD0iYmxvb3Bf Y3VzdG9tZm9udCIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2EsIEFyaWFs OyBmb250LXNpemU6IDEzcHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6 IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4 dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3 aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBu b25lOyBtYXJnaW46IDBweDsiPg0KQnV0IGEgY291bnRlciBpc27igJl0IG5lY2Vzc2FyeSBhcyB5 b3UgY2FuIGp1c3Qgc2hhcmUgc29tZSBjb21wYXJhdGl2ZWx5IHdlYWsga2V5cyBhbmQgaGFzaCBh IHRpbWVzdGFtcC4gSXQgd2lsbCBiZSBnb29kIGVub3VnaCwgYW5kIG90aGVyd2lzZSB5b3UgY2Fu IHVzZSBzdHJvbmdlciAwLVJUVCB0b2tlbnMgZm9yIHJldHVybiB2aXNpdHMuIFRoZSBrZXlzIGNh biBiZSByb3RhdGVkIHBlcmlvZGljYWxseSBhbmQgc2hhcmVkIHRvIGFuIGV4dGVuZCwgYW5kDQog c28gZm9ydGguPC9kaXY+DQo8YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRp Y2EsIEFyaWFsOyBmb250LXNpemU6IDEzcHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJp YW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5v cm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3Jt OiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgdGV4dC1kZWNv cmF0aW9uOiBub25lOyI+DQo8cCBjbGFzcz0iYWlybWFpbF9vbiIgc3R5bGU9ImZvbnQtZmFtaWx5 OiBIZWx2ZXRpY2EsIEFyaWFsOyBmb250LXNpemU6IDEzcHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsg Zm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNw YWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQt dHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsg dGV4dC1kZWNvcmF0aW9uOiBub25lOyI+DQpPbiAyMyBKdWx5IDIwMTkgYXQgMTcuMTkuMDYsPHNw YW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxhIGhyZWY9Im1h aWx0bzpicmVudC5iaWxnZXJAdmVyaXpvbi5jb20iIGNsYXNzPSIiPmJyZW50LmJpbGdlckB2ZXJp em9uLmNvbTwvYT48c3BhbiBjbGFzcz0iQXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3Nw YW4+KDxhIGhyZWY9Im1haWx0bzpicmVudC5iaWxnZXJAdmVyaXpvbi5jb20iIGNsYXNzPSIiPmJy ZW50LmJpbGdlckB2ZXJpem9uLmNvbTwvYT4pDQogd3JvdGU6PC9wPg0KPGJsb2NrcXVvdGUgdHlw ZT0iY2l0ZSIgY2xhc3M9ImNsZWFuX2JxIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYSwg QXJpYWw7IGZvbnQtc2l6ZTogMTNweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQt Y2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFs OyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5v bmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyB0ZXh0LWRlY29yYXRp b246IG5vbmU7Ij4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiIHN0eWxlPSJmb250LWZh bWlseTogJnF1b3Q7aGVsdmV0aWNhIE5ldWUmcXVvdDssIGhlbHZldGljYTsgZm9udC1zaXplOiAx NHB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQt d2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0 OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5v cm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsiPg0KPHNwYW4g Y2xhc3M9IiI+QXMgbm90ZWQgb24gYSBkaWZmZXJlbnQgcG9zdGluZywgU2luZ2xlIFBhY2tldCBB dXRob3JpemF0aW9uIGlzIGJhc2VkIG9uIFJGQyA0MjI2IHdoaWNoIGhhcyBib3RoIGEgY291bnRl ciBhbmQgYSB0aW1lIGJhc2VkIGFwcHJvYWNoLiBQZXJzb25hbGx5LCBJIHByZWZlciBhIGNvdW50 ZXIuPC9zcGFuPjwvZGl2Pg0KPGRpdiBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6ICZxdW90 O2hlbHZldGljYSBOZXVlJnF1b3Q7LCBoZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTRweDsgZm9udC1z dHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9y bWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRl bnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQt c3BhY2luZzogMHB4OyB0ZXh0LWRlY29yYXRpb246IG5vbmU7Ij4NCjxzcGFuIGNsYXNzPSIiPjxi ciBjbGFzcz0iIj4NCjwvc3Bhbj48L2Rpdj4NCjxkaXYgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFt aWx5OiAmcXVvdDtoZWx2ZXRpY2EgTmV1ZSZxdW90OywgaGVsdmV0aWNhOyBmb250LXNpemU6IDE0 cHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13 ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7 IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9y bWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyI+DQo8c3BhbiBj bGFzcz0iIj5CdXQgYWdhaW4sIHRoaXMgaXMgYWxsIGlycmVsZXZhbnQgYmVjYXVzZSBJ4oCZbSBu b3Qgc3VnZ2VzdGluZyBhbnkgb25lIHByZS1hdXRoZW50aWNhdGlvbi4gSeKAmW0ganVzdCB1c2lu ZyBhbiBleGFtcGxlIHRvIHNob3cgaG93IGl0IGNhbiBzdG9wIG11bHRpcGxlIHR5cGVzIG9mIGF0 dGFja3MuPC9zcGFuPjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjwvYmxv Y2txdW90ZT4NCjwvZGl2Pg0KPGJyIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgZGly PSJhdXRvIiBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXpl OiAxOHB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZv bnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0 YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6 IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsgd29yZC13 cmFwOiBicmVhay13b3JkOyBsaW5lLWJyZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsiPg0KPGRpdiBk aXI9ImF1dG8iIGNsYXNzPSIiIHN0eWxlPSJ3b3JkLXdyYXA6IGJyZWFrLXdvcmQ7IGxpbmUtYnJl YWs6IGFmdGVyLXdoaXRlLXNwYWNlOyI+DQo8ZGl2IHN0eWxlPSJmb250LXZhcmlhbnQtY2Fwczog bm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1p bmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdv cmQtc3BhY2luZzogMHB4OyB0ZXh0LWRlY29yYXRpb246IG5vbmU7IiBjbGFzcz0iIj4NCjxiciBj bGFzcz0iQXBwbGUtaW50ZXJjaGFuZ2UtbmV3bGluZSI+DQo8YnIgY2xhc3M9IiI+DQo8L2Rpdj4N CjxkaXYgc3R5bGU9ImZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBu b3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9y bTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IHRleHQtZGVj b3JhdGlvbjogbm9uZTsiIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IHN0 eWxlPSJmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0 ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7 IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyB0ZXh0LWRlY29yYXRpb246 IG5vbmU7IiBjbGFzcz0iIj4NCkJyZW50IEJsaWdlcjwvZGl2Pg0KPGRpdiBzdHlsZT0iZm9udC12 YXJpYW50LWNhcHM6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjog c3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFj ZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyIgY2xh c3M9IiI+DQpEaXJlY3Rvci1UZWNobm9sb2d5Jm5ic3A7VmVyaXpvbiBTRFAmbmJzcDs8YnIgY2xh c3M9IiI+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9ImZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGxl dHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4 OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5n OiAwcHg7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsiIGNsYXNzPSIiPg0KPGEgaHJlZj0ibWFpbHRv OmJyZW50LmJpbGdlckB2ZXJpem9uLmNvbSIgY2xhc3M9IiI+YnJlbnQuYmlsZ2VyQHZlcml6b24u Y29tPC9hPjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwv ZGl2Pg0KPC9zcGFuPjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+ DQo8YnIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBkaXI9ImF1dG8iIHN0eWxlPSJj YXJldC1jb2xvcjogcmdiKDAsIDAsIDApOyBjb2xvcjogcmdiKDAsIDAsIDApOyBmb250LWZhbWls eTogSGVsdmV0aWNhOyBmb250LXNpemU6IDE4cHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12 YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6 IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNm b3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtp dC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyB0ZXh0LWRlY29yYXRpb246IG5vbmU7IHdvcmQtd3Jh cDogYnJlYWstd29yZDsgLXdlYmtpdC1uYnNwLW1vZGU6IHNwYWNlOyBsaW5lLWJyZWFrOiBhZnRl ci13aGl0ZS1zcGFjZTsiIGNsYXNzPSIiPg0KPGRpdiBkaXI9ImF1dG8iIHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgbGluZS1icmVhazogYWZ0 ZXItd2hpdGUtc3BhY2U7IiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9ImNhcmV0LWNvbG9yOiByZ2Io MCwgMCwgMCk7IGNvbG9yOiByZ2IoMCwgMCwgMCk7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7 IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDog MHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFj aW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0aW9u OiBub25lOyI+DQo8YnIgY2xhc3M9IkFwcGxlLWludGVyY2hhbmdlLW5ld2xpbmUiPg0KPGJyIGNs YXNzPSIiPg0KPC9kaXY+DQo8ZGl2IHN0eWxlPSJjYXJldC1jb2xvcjogcmdiKDAsIDAsIDApOyBj b2xvcjogcmdiKDAsIDAsIDApOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBsZXR0ZXItc3Bh Y2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10 cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAt d2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsiPg0K PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IHN0eWxlPSJjYXJldC1jb2xvcjogcmdiKDAsIDAs IDApOyBjb2xvcjogcmdiKDAsIDAsIDApOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBsZXR0 ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsg dGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzog MHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQtZGVjb3JhdGlvbjogbm9u ZTsiPg0KQnJlbnQgQmxpZ2VyPC9kaXY+DQo8ZGl2IHN0eWxlPSJjYXJldC1jb2xvcjogcmdiKDAs IDAsIDApOyBjb2xvcjogcmdiKDAsIDAsIDApOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBs ZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBw eDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2lu ZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQtZGVjb3JhdGlvbjog bm9uZTsiPg0KRGlyZWN0b3ItVGVjaG5vbG9neSZuYnNwO1Zlcml6b24gU0RQJm5ic3A7PGJyIGNs YXNzPSIiPg0KPC9kaXY+DQo8ZGl2IHN0eWxlPSJjYXJldC1jb2xvcjogcmdiKDAsIDAsIDApOyBj b2xvcjogcmdiKDAsIDAsIDApOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBsZXR0ZXItc3Bh Y2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10 cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAt d2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsiPg0K PGEgaHJlZj0ibWFpbHRvOmJyZW50LmJpbGdlckB2ZXJpem9uLmNvbSIgY2xhc3M9IiI+YnJlbnQu YmlsZ2VyQHZlcml6b24uY29tPC9hPjwvZGl2Pg0KPGRpdiBzdHlsZT0iY2FyZXQtY29sb3I6IHJn YigwLCAwLCAwKTsgY29sb3I6IHJnYigwLCAwLCAwKTsgZm9udC1mYW1pbHk6IEhlbHZldGljYTsg Zm9udC1zaXplOiAyNHB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBu b3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQt YWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hp dGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Ut d2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9 IiI+DQo8L2Rpdj4NCjxiciBjbGFzcz0iQXBwbGUtaW50ZXJjaGFuZ2UtbmV3bGluZSI+DQo8L2Rp dj4NCjwvZGl2Pg0KPGJyIGNsYXNzPSJBcHBsZS1pbnRlcmNoYW5nZS1uZXdsaW5lIiBzdHlsZT0i Y2FyZXQtY29sb3I6IHJnYigwLCAwLCAwKTsgY29sb3I6IHJnYigwLCAwLCAwKTsgZm9udC1mYW1p bHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxOHB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQt dmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5n OiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5z Zm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJr aXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyI+DQo8YnIg Y2xhc3M9IkFwcGxlLWludGVyY2hhbmdlLW5ld2xpbmUiPg0KPC9kaXY+DQo8YnIgY2xhc3M9IiI+ DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_FAC1E13E4A314A28BD8E75B83C5C9B16oneverizoncom_-- From nobody Tue Jul 23 14:35:47 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EA7C41209A4; Tue, 23 Jul 2019 14:35:24 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.997 X-Spam-Level: X-Spam-Status: No, score=-1.997 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sh2GnKW_UmCA; Tue, 23 Jul 2019 14:35:21 -0700 (PDT) Received: from mail-lf1-x132.google.com (mail-lf1-x132.google.com [IPv6:2a00:1450:4864:20::132]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5FDD61209A8; Tue, 23 Jul 2019 14:35:19 -0700 (PDT) Received: by mail-lf1-x132.google.com with SMTP id b29so23160277lfq.1; Tue, 23 Jul 2019 14:35:19 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=x3A94tRpsxJqiVWbazIcBPq8Ii4pxMTWmsJBEWrrTd4=; b=IXYTAEA+gJhGti7FYN84p4MKxZRtMfP/dsMXZlG4YTz0YEEKvdmoY0VswHUs7T5OoE hPQrplt7wzCl7yTPyfckN4IKHN5pbRUZC/mAuzOPGsxaWH9veNB1GKZ5pqa8lsnxPfJN QF6EHMNfUUXJTUhdCcAnd394xhW9UMWnxkamgb9X6e3Ki2T+BDKt4KyO/MzTzfjKZv0/ eZVe/Wt+pO/s/SLEKE8uC9WNOMTXl53YlRV73RG9o6IIw6YMBnxqLQEQKsL5oOcp8pqo 7jcD8Mu9c3Eul/7QdC17fUSbHCMWdPrS/Llrw8JrlMftvOEr1fXCMLCnYD6L8WgCIVA2 NuGA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=x3A94tRpsxJqiVWbazIcBPq8Ii4pxMTWmsJBEWrrTd4=; b=GEr4xo8pA3w25cruHNRV5IR4VJ6IxOjujjVSsUj4Ule6mLmTrhaBssn4R7vjNz0sk9 Fy81gAGsXb9ADdlJUXQEnxuh2KmYp4njnfRi1HQXIfaE/SPToITHnMhYxLkgyZPRrCws 4hbbDiaIo69EWlmzsum3K6Rdk/lequCUpEyrvWhEc9Ti72Y1kTyV7P00MkSjNe7e9/tF iT60HqQxpa9+VEkbBYIXJ8PUXN6EWfLu9S+q/Hx2YBrA6m9V34bR4bDeVmYBTmM19BEq EJzI2ZdvB85h8Rdgo/oxdEVr7oV7E4ZFu2afJgaHZOCHBmwpduwJc5Q01bWTI8U/WDMX WgtA== X-Gm-Message-State: APjAAAXXj+bxkj3gDQR5TDaW+6+Dni4grxCA1OZZ6uERQ9JtXeJnWwQu rMuvtII6Dj56kVg2S0JXVjfKWCeeFTytZbWYDNk= X-Google-Smtp-Source: APXvYqzItvzfMFoYnVjcLV9pHsCmzz4yQHNV03TCNsbLMddmcQeg8frISmrbm+1KdE1a56QZSWVK8OwpJeph0b3rL74= X-Received: by 2002:a05:6512:51c:: with SMTP id o28mr37606034lfb.67.1563917717582; Tue, 23 Jul 2019 14:35:17 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: David Schinazi Date: Tue, 23 Jul 2019 17:35:06 -0400 Message-ID: Subject: Re: WebTransport Side Meeting (Tuesday, 15:20) To: Victor Vasiliev Cc: dispatch@ietf.org, hybi@ietf.org, IETF QUIC WG , HTTP Working Group Content-Type: multipart/alternative; boundary="00000000000003b8ff058e5ff839" Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 23 Jul 2019 21:35:33 -0000 --00000000000003b8ff058e5ff839 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Thanks to everyone who came to the side-meeting today. We had 27 people in the room and strong interest in the topic. In terms of next steps: this work will proceed in parallel at the W3C, and we will seek to open an IETF mailing list to discuss WebTransport (we'll report the list here when it exists). Thanks in particular to Steve Anton for recording the following minutes: Roberto Peon: best to share connection even for data with different congestion controllers Seth Blank: many games open many TCP connections for reliable data, in addition to UDP Seth: others will layer a reliable layer on top of UDP Jana Iyengar: having all types of data under the same cc is very useful, but needs a way to prioritize traffic. Another issue with existing approaches: some connections (if multiple TCP/UDP/etc) may fail which is awkward (e.g., TCP may work but UDP not). Is connection setup latency important? Yes, RTC use cases find call setup very important QUIC should help a lot here Use case: for legacy apps, map UDP sockets to QUIC datagrams, TCP sockets to QUIC streams Brian Trammell: but these legacy apps want to interop with things that speak TCP and UDP, not QUIC Solution: host a shim proxy Roberto: a L7 proxy wants very low level APIs to forward data avoid compounding delays. Partial reliability models Jana: agree that datagrams are too low level for from-scratch applications. SCTP made this mistake. What is the API for sending application-sized messages? (streams?) Roberto: QUIC is missing the concept of =E2=80=9Csession=E2=80=9D (bundling= streams together to the same endpoint). Use case: L7 proxies that route at the session level. Roberto: protocol needs to know about framing and ordering (for flow control) Martin Thomson: don=E2=80=99t invent partial reliability here, or else it c= ould be the hill to die on. Victor Vasiliev: want to just expose APIs for QUIC primitives that are already defined (imagine streams are a useful abstraction, datagrams are the most minimal abstraction) Target application: real-time client-server streaming Not going to solve this in WebTransport, instead offer primitives to build on. TAPS Brian: Underlying transport depends on application and deployment. Will likely need a transport selection algorithm. Victor: want to do transport selection as a higher level layer, not in WebTransport. Victor: some of the data API will use Web primitives (like WHATWG Streams). Don=E2=80=99t want to over abstract. Brian: take a close look at the TAPS architecture document. QuicTransport vs. Http3Transport Roberto: things we implement in HTTP: redirection, shut down state, caching, multiplexing. These are very valuable, let=E2=80=99s not forget. Important to ship an API which performs and is what people want to use. Eric Kinnear: HTTP has a few downsides, e.g. bidirectionality. There=E2=80= =99s a use case for just a QUIC transport. Peter Thatcher: HTTP doesn=E2=80=99t make sense for P2P. Martin: How does this spec handle fallback if e.g. QUIC can=E2=80=99t conne= ct? There should be a transparent fallback. Victor: WebSocket fallback (can even implement as a polyfill). Jana: may need to break down spec into pieces before bringing it into the IETF. Victor: wire format changes are clearly IETF. API design is clearly W3C. Framework definition could go either way, not sure which venue right now. Martin: kind of weird but seems to work to have the same people wear IETF and W3C hats David Schinazi: seems to be interest: in terms of process, should a new IETF mailing list be formed? Martin: get an AD to form a mailing list. IETF should do work for W3C, not the other way around. Roberto: implementations of WebTransport could be useful without it necessarily being a Web API. Mark Nottingham/Martin/Peter: W3C work is in WICG right now. Needs to be a working group before IETF would form a working group. Can still make a mailing list, have a BOF before the working group was formed. Jana: Other way of doing it: W3C driving requirements for IETF protocol, creates API. Roberto: some use cases for L7 proxies even if this doesn=E2=80=99t end up = in the browser. Jana: Is the RTCDataChannel a first application for WebTransport? Harald Alvestrand: desire in WebRTC to redesign the RTCDataChannel API. Roberto: a major application that wants this is low latency broadcast video= . Bandwidth prediction APIs Roberto: value for this, very complicated though. Today the server which has lower level control can send the browser cc info. Harald: started with receiver cc, went back to sender cc later Brian: should take this out of scope for a BOF Roberto: defer this or else it will fail (e.g., HTTP2 started without QUIC even though they knew QUIC was needed). Jana: don=E2=80=99t bring bandwidth prediction up or else it will be front = and center and kill the effort On Mon, Jul 22, 2019 at 4:36 PM Victor Vasiliev wrote: > Hello everyone, > > Today, at the dispatch working group meeting (18:10), I am going to > present WebTransport. WebTransport is a protocol framework that allows > multiplexed and datagram-oriented transport protocols to be used by the w= eb > applications (think =E2=80=9CWebSocket for UDP=E2=80=9D). > > Since it=E2=80=99s quite likely we will run out of time during dispatch, = I > scheduled a side-meeting to discuss this in more depth. Below are the sid= e > meeting details. > > *Time:* Tuesday, 15:20 ~ 16:50 > *Place:* Room C2 (21st floor) > *Organizers:* Victor Vasiliev, David Schinazi > *Agenda:* > > 1. A more in-depth overview of WebTransport. > 2. Discussion of the overall design and the use cases. > 3. As time permits, some of the major outstanding design issues in Web > transport, e.g.: > - What fallback protocol to use? > - How to multiplex streams and datagrams within a single connection= ? > - Can we let web applications do their own congestion control? > - Should WebTransport sessions have URLs associated with them? > > As usual, here are some helpful links: > > - WebTransport overview: > https://tools.ietf.org/html/draft-vvv-webtransport-overview-00 > - QuicTransport: > https://tools.ietf.org/html/draft-vvv-webtransport-quic-00 > - Http3Transport: > https://tools.ietf.org/html/draft-vvv-webtransport-http3-00 > - Web API Spec draft: https://wicg.github.io/web-transport/ > - Discussion on use cases: > https://discourse.wicg.io/t/webtransport-proposal/3508 > > Cheers, > Victor. > --00000000000003b8ff058e5ff839 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Thanks to everyone who came to the side-meeting today. We = had 27 people in the room and strong interest in the topic.

<= div>In terms of next steps: this work will proceed in parallel at the W3C, = and we will seek to open an IETF mailing list to discuss WebTransport (we&#= 39;ll report the list here when it exists).

Thanks i= n particular to Steve Anton for recording the following minutes:
=
Roberto Peon: best to share connection even for data with different con= gestion controllers
Seth Blank: many games open many TCP connections for= reliable data, in addition to UDP
Seth: others will layer a reliable la= yer on top of UDP
Jana Iyengar: having all types of data under the same = cc is very useful, but needs a way to prioritize traffic. Another issue wit= h existing approaches: some connections (if multiple TCP/UDP/etc) may fail = which is awkward (e.g., TCP may work but UDP not).
Is connection setup l= atency important?
Yes, RTC use cases find call setup very important
Q= UIC should help a lot here
Use case: for legacy apps, map UDP sockets to= QUIC datagrams, TCP sockets to QUIC streams
Brian Trammell: but these l= egacy apps want to interop with things that speak TCP and UDP, not QUIC
= Solution: host a shim proxy
Roberto: a L7 proxy wants very low level API= s to forward data avoid compounding delays.
Partial reliability modelsJana: agree that datagrams are too low level for from-scratch application= s. SCTP made this mistake. What is the API for sending application-sized me= ssages? (streams?)
Roberto: QUIC is missing the concept of =E2=80=9Csess= ion=E2=80=9D (bundling streams together to the same endpoint). Use case: L7= proxies that route at the session level.
Roberto: protocol needs to kno= w about framing and ordering (for flow control)
Martin Thomson: don=E2= =80=99t invent partial reliability here, or else it could be the hill to di= e on.
Victor Vasiliev: want to just expose APIs for QUIC primitives that= are already defined (imagine streams are a useful abstraction, datagrams a= re the most minimal abstraction)
Target application: real-time client-se= rver streaming
Not going to solve this in WebTransport, instead offer pr= imitives to build on.
TAPS
Brian: Underlying transport depends on app= lication and deployment. Will likely need a transport selection algorithm.<= br>Victor: want to do transport selection as a higher level layer, not in W= ebTransport.
Victor: some of the data API will use Web primitives (like = WHATWG Streams). Don=E2=80=99t want to over abstract.
Brian: take a clos= e look at the TAPS architecture document.
QuicTransport vs. Http3Transpo= rt
Roberto: things we implement in HTTP: redirection, shut down state, c= aching, multiplexing. These are very valuable, let=E2=80=99s not forget.Important to ship an API which performs and is what people want to use.Eric Kinnear: HTTP has a few downsides, e.g. bidirectionality. There=E2=80= =99s a use case for just a QUIC transport.
Peter Thatcher: HTTP doesn=E2= =80=99t make sense for P2P.
Martin: How does this spec handle fallback i= f e.g. QUIC can=E2=80=99t connect? There should be a transparent fallback.<= br>Victor: WebSocket fallback (can even implement as a polyfill).
Jana: = may need to break down spec into pieces before bringing it into the IETF.Victor: wire format changes are clearly IETF. API design is clearly W3C. = Framework definition could go either way, not sure which venue right now.Martin: kind of weird but seems to work to have the same people wear IETF= and W3C hats
David Schinazi: seems to be interest: in terms of process,= should a new IETF mailing list be formed?
Martin: get an AD to form a m= ailing list. IETF should do work for W3C, not the other way around.
Robe= rto: implementations of WebTransport could be useful without it necessarily= being a Web API.
Mark Nottingham/Martin/Peter: W3C work is in WICG righ= t now. Needs to be a working group before IETF would form a working group.<= br>Can still make a mailing list, have a BOF before the working group was f= ormed.
Jana: Other way of doing it: W3C driving requirements for IETF pr= otocol, creates API.
Roberto: some use cases for L7 proxies even if this= doesn=E2=80=99t end up in the browser.
Jana: Is the RTCDataChannel a fi= rst application for WebTransport?
Harald Alvestrand: desire in WebRTC to= redesign the RTCDataChannel API.
Roberto: a major application that want= s this is low latency broadcast video.
Bandwidth prediction APIs
Robe= rto: value for this, very complicated though. Today the server which has lo= wer level control can send the browser cc info.
Harald: started with rec= eiver cc, went back to sender cc later
Brian: should take this out of sc= ope for a BOF
Roberto: defer this or else it will fail (e.g., HTTP2 star= ted without QUIC even though they knew QUIC was needed).
Jana: don=E2=80= =99t bring bandwidth prediction up or else it will be front and center and = kill the effort

On Mon, Jul 22, 2019 at 4:36 PM Victor Vasil= iev <vasilvv=3D40google.c= om@dmarc.ietf.org> wrote:
Hello everyone,

Today, at the disp= atch working group meeting (18:10), I am going to present WebTransport. Web= Transport is a protocol framework that allows multiplexed and datagram-orie= nted transport protocols to be used by the web applications (think =E2=80= =9CWebSocket for UDP=E2=80=9D).

Since it=E2=80=99s quite likely we w= ill run out of time during dispatch, I scheduled a side-meeting to discuss = this in more depth. Below are the side meeting details.

Time:= Tuesday, 15:20 ~ 16:50
Place: Room C2 (21st floor)
Organiz= ers: Victor Vasiliev, David Schinazi
Agenda:
  1. A mor= e in-depth overview of WebTransport.
  2. Discussion of the overall desi= gn and the use cases.
  3. As time permits, some of the major outstandin= g design issues in Web transport, e.g.:
    • What fallback protocol = to use?
    • How to multiplex streams and datagrams within a single conn= ection?
    • Can we let web applications do their own congestion control= ?
    • Should WebTransport sessions have URLs associated with them?
      • =
As usual, here are some helpful links:
Cheers,
=C2=A0 Victor.
--00000000000003b8ff058e5ff839-- From nobody Wed Jul 24 10:15:21 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CB4BA1204D6 for ; Wed, 24 Jul 2019 10:15:13 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.988 X-Spam-Level: X-Spam-Status: No, score=-1.988 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_FREEMAIL_DOC_PDF=0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rnq94qHm_s7m for ; Wed, 24 Jul 2019 10:15:10 -0700 (PDT) Received: from mail-lj1-x235.google.com (mail-lj1-x235.google.com [IPv6:2a00:1450:4864:20::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 05EC3120112 for ; Wed, 24 Jul 2019 10:15:08 -0700 (PDT) Received: by mail-lj1-x235.google.com with SMTP id h10so45265349ljg.0 for ; Wed, 24 Jul 2019 10:15:08 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=YJll1xHnEKpevHWk8llkmbOiEasIYGNUcN30I/SA4mQ=; b=Co/3oSDU7EXHrEq4ndxWCPqdFDxxIcWEWCZdVwdVKABFX6363Snofy9uXzy+5eYXGT 5XIAZeNbTH3gs8k8q/iYbDp3z1P7Ca11hxpHW4RKn3lPbIt22mfSFwQN+L0WFfWp5UfJ 1HUD1pD42sivl4V7JQY2kflhbTYLvAoiBpnrgYr7ZojpQ8Uz6DraTx3ZXZ+6Lwbfeuui D+IYR663wNYdhcqkamCphF1lrTh9EkL9ZYgGJlDs6k3+1gkJUsrx+mNXG3FFMCQQlHwo IwyEpS7I2yZRgw8NcND5dwmoI1rC+KZ73puMkWr46puIKBHupAjW4PyHSJo8gP25Wz4g RdJQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=YJll1xHnEKpevHWk8llkmbOiEasIYGNUcN30I/SA4mQ=; b=MILNkKW9CXsFQpFkY/S3IpRRBKxZJmMe0XQtukwCUC7TH7l2ei90biKsPQHm5La718 /K5kJAgkQBCDOvvzreLkhUtZmNo3TQvGuMnc9Si/6AvWM+jnsn/30tv59lpouxVQjadF LvAu80/oYBj86tkMpeC3CzjcLLlCf7xpBdGlpAMKIMu1zuLU2zMQ+YNAYxGz+Own4x5i 1Lv0UKppQl1A77FNftvbso+HkSplVHMM/Ji0L99LYFbHVBmGgPEl5ScZG34Y2+/wTOo5 i8AfeUsdK+CdVYuD0MDMh4WNA6/PXH/IdCfn2eOibPruqIBaQG0LXYkPW6GsWPIe89X9 8+TQ== X-Gm-Message-State: APjAAAX3Q737hrNPCu1dK7Y9G59GYY5AsmjcR3WA1BOfiv4QPDxC+bvS o2DIuvNOLUAoVF0BQk78Wrfx3ixgBc0tqIRx4m8= X-Google-Smtp-Source: APXvYqyLQ317OIl4TLtsF1wzRQhr4X575OFfMdguiaji80+mr9ueQKzIDMwhZnAv4/91FVpiZ2GGp6gOk/LLG1/S8NQ= X-Received: by 2002:a2e:89ca:: with SMTP id c10mr28126501ljk.106.1563988507005; Wed, 24 Jul 2019 10:15:07 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: Kazuho Oku Date: Wed, 24 Jul 2019 13:14:55 -0400 Message-ID: Subject: Re: HTTP(3) priorities To: Ian Swett Cc: IETF QUIC WG , HTTP Working Group Content-Type: multipart/mixed; boundary="00000000000064bbb7058e7073b2" Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 24 Jul 2019 17:15:16 -0000 --00000000000064bbb7058e7073b2 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi! Attached are the slides that Lucas and I presented during the side meeting. Thank you all for the feedback. 2019=E5=B9=B47=E6=9C=889=E6=97=A5(=E7=81=AB) 21:00 Ian Swett : > > There has been quite a bit of discussion of HTTP priorities lately on bot= h the QUIC and HTTP mailing lists, with more to follow. The plan for IETF = in Montreal is as follows: > > Monday: Overview of priorities for 15 minutes in HTTP, with 15 minutes di= scussion. > Wednesday: A side meeting will be held from 8:30-9:45am in Van Horne. > Thursday: I'll summarise the side meeting in Wednesday's HTTP session. > > Thanks, Ian --=20 Kazuho Oku --00000000000064bbb7058e7073b2 Content-Type: application/pdf; name="The Priority Header Field.pdf" Content-Disposition: attachment; filename="The Priority Header Field.pdf" Content-Transfer-Encoding: base64 Content-ID: X-Attachment-Id: f_jyhic2r50 JVBERi0xLjQKJSDi48/TCjQKMApvYmoKPDwKL1R5cGUKL0NhdGFsb2cKL05hbWVzCjw8Ci9KYXZh U2NyaXB0CjMKMApSCj4+Ci9QYWdlTGFiZWxzCjw8Ci9OdW1zClsKMAo8PAovUwovRAovU3QKMQo+ PgpdCj4+Ci9PdXRsaW5lcwoyCjAKUgovUGFnZXMKMQowClIKPj4KZW5kb2JqCjUKMApvYmoKPDwK L0NyZWF0b3IKKP7/AEcAbwBvAGcAbABlKQo+PgplbmRvYmoKNgowCm9iago8PAovVHlwZQovUGFn ZQovUGFyZW50CjEKMApSCi9NZWRpYUJveApbCjAKMAo3MjAKNDA1Cl0KL0NvbnRlbnRzCjcKMApS Ci9SZXNvdXJjZXMKOAowClIKL0Fubm90cwoxMAowClIKL0dyb3VwCjw8Ci9TCi9UcmFuc3BhcmVu Y3kKL0NTCi9EZXZpY2VSR0IKPj4KPj4KZW5kb2JqCjcKMApvYmoKPDwKL0ZpbHRlcgovRmxhdGVE ZWNvZGUKL0xlbmd0aAo5CjAKUgo+PgpzdHJlYW0KeJy1VNtOAjEQbeLbfIloLG2nl+mjBoFEo5Es wgM+GA0Qs6Cg/x+niwvLxWCIbLNt57Q7c2ZOuzPQUkFqF4uJVY7HlwnMQEmldPTklC12bNq8KQ0T QO+CV8Xn+cowygWbJjlsGKkfQw+mHGQG9cv8Y/ysYPRZcCnf+egg72MYnsEDt1nFuU7OF2myW22s J4lowcRAKIsgDk00soLlFUxrTRQKcPVxBVwGTWGRypKuZkU9SyONaGQwzpCDQFIH5X9KXnK8ynjM 5lBvvk+/DPjIIfnxkA3XFUMtTTCRQEcugPPsKVvokr3CqQjiRrTFiUDRFbeiU/Q9MRgwdM4LDdHi vsvWoMYrbXEvWjXI3uA6O4ALeWQyZHZzKf3uqdN+5biCmsO7qnAVLK9g1immu9JtDTpQNWt1OiTS WRexvCloY7ob5pfpdhUxLKpothW1TgbtCcFaSRhjXJdUsmpPos/Cdlg3I+5EfynZf/Jwlji8Rbeb x1Fi8r2S6LX3QFGSXcu7zjk3OffH4jg3+NS2GGkfJ3f+x2iKO2j8+RSn9g2EQwCLCmVuZHN0cmVh bQplbmRvYmoKOQowCm9iago0MTcKZW5kb2JqCjEwCjAKb2JqClsKXQplbmRvYmoKMTQKMApvYmoK PDwKL1R5cGUKL1BhZ2UKL1BhcmVudAoxCjAKUgovTWVkaWFCb3gKWwowCjAKNzIwCjQwNQpdCi9D b250ZW50cwoxNQowClIKL1Jlc291cmNlcwoxNgowClIKL0Fubm90cwoxOAowClIKL0dyb3VwCjw8 Ci9TCi9UcmFuc3BhcmVuY3kKL0NTCi9EZXZpY2VSR0IKPj4KPj4KZW5kb2JqCjE1CjAKb2JqCjw8 Ci9GaWx0ZXIKL0ZsYXRlRGVjb2RlCi9MZW5ndGgKMTcKMApSCj4+CnN0cmVhbQp4nL1VS3PTMBAW w02ntgxHbhx4DKrejyNMSlLKUJqaGJhwYGDaDOMWUvgp/GA+yXX8iNOSUmKNrd2VtKv9dr07p4Jx GsezktDcYP5yRueUM85FsN5wnXZ0eWyK0xlV1jjL0/GiZiQ3TkeioB0mfmc0p+cwMqe7z4sfs8+c nv5Md6nei9MbaZ/Rkyf0CGPeUC6i8tJNqBVSW4/N2vIQWDJhlAyyISpqkfDSGZNk1cGGaGEuGlS+ ArOmEpIVE2clmZNaC2jjLATtTIW20iHiK1eQuPmLDEqyC7r78vv5LxVVgT1ph1AoZp3wUKsCLNGs jFL2lT668/sxzb7RvWx9Y7LfmHHRo64d8pSMyUdylxyTd+Q16PjN8Y7IBNIB+BHmYZJ/AH0ELse+ Idam01u/pNRMSS+WL3pjS9di79VmsF+yQxRQHQP5MbAekEMgu58iEBE+SLirVlSmU4jiwgDwj9LG /RSqQzK87StbYZnsx+e/oCO034QZKTbijXSrvOmvc7GQKR6YlEobVDnnDLPW6oawaAi1ZcqhtBfl wQ7bOIKah3IX+4EJUhgbQFkDj/rckTaqx7PkU1KrPLOt9D1ASuZI3wl5QHYwYlkYIxcnZDtlZY7s 3E7J+wqrcfdbrO6kYjLAWk62yBtQn8h7rI7BVRr3cH4C/rib/lvkHrnfDyU6nqp8LEHtAXENZK+W LWO8fvqsxru20wV9ka0rQlrmA8zi0S13F8KWa+hwl8LyZJevD5VuXtk9/6aTC+e5aHfyStTo5Jo7 HlqNvJb8Qx9HJJ2EOXvZx6vLdf9rl7xWsvdH0Jp5FUJo/wwPkeSxO6IvNmK0pnqBJaGU8P1GKsXX hiGOP9LL5UEKZW5kc3RyZWFtCmVuZG9iagoxNwowCm9iago2NDUKZW5kb2JqCjE4CjAKb2JqClsK PDwKL1R5cGUKL0Fubm90Ci9TdWJ0eXBlCi9MaW5rCi9SZWN0ClsKMzEuMjkzMzA2CjU1LjUwMzkz Mwo2MDYuMjkzMQo3OS41MDM5MwpdCi9Cb3JkZXIKWwowCjAKMApdCi9BCjw8Ci9UeXBlCi9BY3Rp b24KL1MKL1VSSQovVVJJCihodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQta2F6dWhv LWh0dHBiaXMtcHJpb3JpdHktMDIpCj4+Cj4+Cl0KZW5kb2JqCjIwCjAKb2JqCjw8Ci9UeXBlCi9Q YWdlCi9QYXJlbnQKMQowClIKL01lZGlhQm94ClsKMAowCjcyMAo0MDUKXQovQ29udGVudHMKMjEK MApSCi9SZXNvdXJjZXMKMjIKMApSCi9Bbm5vdHMKMjQKMApSCi9Hcm91cAo8PAovUwovVHJhbnNw YXJlbmN5Ci9DUwovRGV2aWNlUkdCCj4+Cj4+CmVuZG9iagoyMQowCm9iago8PAovRmlsdGVyCi9G bGF0ZURlY29kZQovTGVuZ3RoCjIzCjAKUgo+PgpzdHJlYW0KeJy9V0tvEzEQNsrNF0p5XIALQgio uvV77SOoWUIbkZa8SgUHBGorlBZSOPIz+MF89nab3XhDH2ya1dqeie3xfN/Ynp1SnjDqn/W8oZhG /eWYTilLGOPOWM1U6DEvo5Ovjqk0OjUsDJ/MBMF0qnxjQucEXx7RMT2BkSndeDX5cfSZ0cOfYS3F e3p4rdmP6MFLuotnWpqc+8lzNzEtF8pYbyW1zFuCCS2FEyXVZKZSLGUuqIpxM825MW9O2gLKWSvg WAi+liJJhVKcKoMGzJkzrIvFvR6gHpzSjez7yS9BZZpI/xN0cFClyq9AqcRK55yhg5yLwVf6nKyR 92SftMiIbKO1R3rkDaR90kHZJ0PShdaXY7yfoH3ygg6+0fbgGotQOk1S6bSpX0ox8QUQXYYsZZhz VbIKVYksbkWqdYWtkuo/6OKCJc6pVBdbQyrnN4NY0JwHUfqpWIQfl4lJucW00sFSGbtbf85puaox UW8MXLHYDkLBB8kWgqVFMrR3ETidUO7hbQVNC8GyHQKojXIEqYURvlcnhFIW+g0RaLm8S7aaXn0q VSIdM7EH17a0gBTDC1KsnCfld9Nu8XDeRoYCB0PyIWA+DEjn2K6AgR6wzsi7HGf8v04MuY36GWrT eNQYkzhZB8bycOcivSHgY0sV5NdIShjZaNq2sBZjZK2nS0Q15TeFamSpgmqX7JDNcH6MGkfWmSQH NlrC8oAVXN8QsLGlCrCbkD5+xKmQhes/C2dxH6d14zhLB+9FnetNwzy7IoW+oTsyNgQY/fG7iaM3 uuig8VL/7JCOr0yfebWh9xlXp+kFG6GSBegsL+AlW3wxLkjj8vBFRqa0khZpnMUG1anlJeVkppSg nSnLpc/kwthYUx6I1A5Znf9G0Q4xaRxaRsPBK26w2DOQOMbTB4GPySqeHoj0GdCI3AG1D1D6gNjC P09RZ+jfDdtxBI1EDtUOIzJIXWjH5C3u8GLOFcyAkaUEvHb9xdp0UkEuV5RRYzYxdgbZvJh391j9 iyXJxTlLSvMER6m1Je2krPUbpspTrCmNbIwnFd3b98ldco88QjbkP3lM2JKr0PnnIVjymO+QXn2c 4tNWFgvKsajz/Gp4XKiNcWnoUCjZiHC6ZKwpl8z5GzRVr0QlvObEs/65Zxd8//nnL7v0D8QKZW5k c3RyZWFtCmVuZG9iagoyMwowCm9iago4NzIKZW5kb2JqCjI0CjAKb2JqClsKPDwKL1R5cGUKL0Fu bm90Ci9TdWJ0eXBlCi9MaW5rCi9SZWN0ClsKMTAzLjI5MzMwNAo4MC43MDM5Mwo2NzguMjI2OQox MDkuNTAzOTQKXQovQm9yZGVyClsKMAowCjAKXQovQQo8PAovVHlwZQovQWN0aW9uCi9TCi9VUkkK L1VSSQooaHR0cHM6Ly9saXN0cy53My5vcmcvQXJjaGl2ZXMvUHVibGljL2lldGYtaHR0cC13Zy8y MDE5SnVsU2VwLzAwMDguaHRtbCkKPj4KPj4KPDwKL1R5cGUKL0Fubm90Ci9TdWJ0eXBlCi9MaW5r Ci9SZWN0ClsKMTAzLjI5MzMwNAo0Ny43MDM5MzgKMzYyLjkyMjIKNzYuNTAzOTQKXQovQm9yZGVy ClsKMAowCjAKXQovQQo8PAovVHlwZQovQWN0aW9uCi9TCi9VUkkKL1VSSQooaHR0cHM6Ly9saXN0 cy53My5vcmcvQXJjaGl2ZXMvUHVibGljL2lldGYtaHR0cC13Zy8yMDE5SnVsU2VwLzAwMDguaHRt bCkKPj4KPj4KXQplbmRvYmoKMjUKMApvYmoKPDwKL1R5cGUKL1BhZ2UKL1BhcmVudAoxCjAKUgov TWVkaWFCb3gKWwowCjAKNzIwCjQwNQpdCi9Db250ZW50cwoyNgowClIKL1Jlc291cmNlcwoyNwow ClIKL0Fubm90cwoyOQowClIKL0dyb3VwCjw8Ci9TCi9UcmFuc3BhcmVuY3kKL0NTCi9EZXZpY2VS R0IKPj4KPj4KZW5kb2JqCjI2CjAKb2JqCjw8Ci9GaWx0ZXIKL0ZsYXRlRGVjb2RlCi9MZW5ndGgK MjgKMApSCj4+CnN0cmVhbQp4nK1U308UMRBuwlv1AQSNL74awVj6+8ejBu4ONSq4t6tRH4jKXcwC Hvr/x69d9rp3twISt+m287XTaWe+mRkVjNPYnjUTzQ3Gr6d0RjnjXATrDddpx7KMTXE4pcoaZ3lS r7MguXE6Tmq6JMT/lFb0DEZmdPd5/XN6zOnkV7pL2y8mtzp9Sk926CHarHO4iIc3z8SxQmrroxXn ebQEE0bJIDtQnSHNHQ8JavUyMjcWzSnfujLPkh9bIY5KMie1FlRbTGDOXvq6vdyLAmNxQXcH52e/ JVWOqfhJWpwshireQGvmVQjB0qKJRfGNPiGPyVvymozIIanIOhmSMaSPSV4j75N0lP4V+heyl8aj tLqO/nkb4hjbDwB+AnCHPCX3yd1tWvyg+8UtbuqUYU4o7/rv2x58jR+viqhBQFJkpHFNRCWMGM/k HKozJILRomFLq9iBOgT6v8dWO4nwEqpgsAiXDjISLsGWFR28effg9HjyXdO987l3/kpqLa2O6j4o oees9r6L1RmTCEhortaqdqBbENsxrTyir4Nl3jthria2sFDq47TUTC3yuQQRP4CSA5DyEVlr+bLo B9QmFaQwNrQGrWPOOC9ozDQnvIdLPJfMuuAyVmdMwrzU3CqAc+VesKMNT8FJsTia1jyzRgcub/ro bGrl5a+QmxVytsS776ENU7bGPsZ/QN7AI2OykbK9QsJupMx+iZ3vgIxSZh8meYtskocJj9qjlP97 qBMlsDLViyHQEhWg2bk+t72PtYiXab2EVl57gPlyRWlO2SRb/XFqo7MaiX+IztVgX3RuzsF89nI4 OhWwN9g5kIZpjk9235TB7v2RK3qBbitAR615zTVVMrY/q9ltWQplbmRzdHJlYW0KZW5kb2JqCjI4 CjAKb2JqCjY0NwplbmRvYmoKMjkKMApvYmoKWwo8PAovVHlwZQovQW5ub3QKL1N1YnR5cGUKL0xp bmsKL1JlY3QKWwo3OC44OTcxCjExLjE4NDY0Ngo2MzAuMDg4NQoyNS41ODQ2NDQKXQovQm9yZGVy ClsKMAowCjAKXQovQQo8PAovVHlwZQovQWN0aW9uCi9TCi9VUkkKL1VSSQooaHR0cHM6Ly9kYXRh dHJhY2tlci5pZXRmLm9yZy9tZWV0aW5nLzEwNS9tYXRlcmlhbHMvc2xpZGVzLTEwNS1odHRwYmlz LXNlc3NhLWh0dHAzLXByaW9yaXRpZXMtMDEpCj4+Cj4+Cl0KZW5kb2JqCjMxCjAKb2JqCjw8Ci9U eXBlCi9QYWdlCi9QYXJlbnQKMQowClIKL01lZGlhQm94ClsKMAowCjcyMAo0MDUKXQovQ29udGVu dHMKMzIKMApSCi9SZXNvdXJjZXMKMzMKMApSCi9Bbm5vdHMKMzUKMApSCi9Hcm91cAo8PAovUwov VHJhbnNwYXJlbmN5Ci9DUwovRGV2aWNlUkdCCj4+Cj4+CmVuZG9iagozMgowCm9iago8PAovRmls dGVyCi9GbGF0ZURlY29kZQovTGVuZ3RoCjM0CjAKUgo+PgpzdHJlYW0KeJytVEtvEzEQtpSb4RBo QVy4VlCE48f4dQSlSUoRkLDZwIFDBTRRtWlJ4f+LsRfvbpIlLRFreW1/9szYM9/MigrGaWgvywlw jePXJV1RzjgX3jjNIZ7YXOOhMCypMtoaHsWLeiG5thAmBd1YhP+CzugVGlnR3qvix+Kc0/nPeJfU b+Z7aV/Qi2M6xrZqKBdBeflMVCskGBesWMeDJTShlfSyARU1BNxyH6EkVyOVsWBOueTKehb9mBZh VJJZCSAoGJygOfPH1+lyrzMcsxvaG1xf/ZJUWabCJ2l2sR6qcAMA5pT33tCsjEX2jT4jR+Q9eUtG ZExmpEuGZIqrz3HdIR/jahL/M+xfSD+Ok7jbxX5EznB3Qj6gRIfcIy/II3L/Oc0u6Um2xzWtAmaU g/a7Jr23+HBXNLXwMWTgbIzXkkonlNXM2worGpgItyjBJNqAGvT534pnx5HwUnqwEARKHykteaDu lgy+u3e6PJ9/17R/XXnor6QGaSCKeyWgYrVzTayoMSmU82XKJNEGtAexLQPlkADgDXPOCr2b2MKg UBunJTC1zucc2fgJOTlARj4lncSZdT9gbVJeCm18Mmgss9o6QUOmWeEcusRxyYxF31dYUWMSzUvg RiFYCbeCDWn0FDopFEedzDOjwXN510fXprZefoa5OcOczfHdD7ENY7aGPsX/gLxDj0zJg5jtM3KK s5DZb/BkyN5RzOxxXB+SA/Ik4kF6FPO/j3UiRyyP9WKIaI4VoDzZrWyf4F7A87ifo1S99xjnmxWl 1HJADtvjlKKzHYl/iM5usC06d+dgrXszHI0i2BrsOpCaAcdPNt9Ug837Y67AGt22gIZY+ZpbKmVo vwGCb21ZCmVuZHN0cmVhbQplbmRvYmoKMzQKMApvYmoKNjQ4CmVuZG9iagozNQowCm9iagpbCjw8 Ci9UeXBlCi9Bbm5vdAovU3VidHlwZQovTGluawovUmVjdApbCjc4Ljg5NzEKMTEuMTg0NjQ2CjYz MC4wODg1CjI1LjU4NDY0NApdCi9Cb3JkZXIKWwowCjAKMApdCi9BCjw8Ci9UeXBlCi9BY3Rpb24K L1MKL1VSSQovVVJJCihodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL21lZXRpbmcvMTA1L21h dGVyaWFscy9zbGlkZXMtMTA1LWh0dHBiaXMtc2Vzc2EtaHR0cDMtcHJpb3JpdGllcy0wMSkKPj4K Pj4KXQplbmRvYmoKMzcKMApvYmoKPDwKL1R5cGUKL1BhZ2UKL1BhcmVudAoxCjAKUgovTWVkaWFC b3gKWwowCjAKNzIwCjQwNQpdCi9Db250ZW50cwozOAowClIKL1Jlc291cmNlcwozOQowClIKL0Fu bm90cwo0MQowClIKL0dyb3VwCjw8Ci9TCi9UcmFuc3BhcmVuY3kKL0NTCi9EZXZpY2VSR0IKPj4K Pj4KZW5kb2JqCjM4CjAKb2JqCjw8Ci9GaWx0ZXIKL0ZsYXRlRGVjb2RlCi9MZW5ndGgKNDAKMApS Cj4+CnN0cmVhbQp4nK1TzU4CMRAe4230wMVXMP7Epf/dHjWiJpogsIoePBgNELOgoI/iAzstll1W jIhu0858s+1805npGHnC0I+DqaKYJvkwxDGyhDHuTKqZCjuqmDZ5MURptDUsHM8LIJi2yis5VoBf B9jFEZGMsX6YvwzuGfZfQyxxTvoreR9gbw9bNMYl59w7n16T3HKhTOpZbMo8E1FoKZwomfLCpJhl LpjiucIyI/N0Mo2pLLSQxwi8lCKxQimOypBCdOYz1zG4o4xkNsH6yfPoTaC0ifSfwKw3XyofgVJJ Kp1zBrNpLbJH3IFtaMIFnEELulCDU7gidBvwOnQCaoe1S/MOjoNsh781moLwOe2+gmtCG7APW7C5 i9kTNrIVwrSCArVO6sXBRsc/JHGZcirDnJsvZzSVyslTYbWeq2fJ9IeCcsES55TV8fFI5fxzEd+o 1SRK74p9yR+XibE8JbfSEVM5d2vvs7L8lkwsJtPW36jKQ41wAw1qkU5olUtqmeZ/MwtuksW3XLpD /PgA6OPjfwplbmRzdHJlYW0KZW5kb2JqCjQwCjAKb2JqCjM5NQplbmRvYmoKNDEKMApvYmoKWwpd CmVuZG9iago0MgowCm9iago8PAovVHlwZQovUGFnZQovUGFyZW50CjEKMApSCi9NZWRpYUJveApb CjAKMAo3MjAKNDA1Cl0KL0NvbnRlbnRzCjQzCjAKUgovUmVzb3VyY2VzCjQ0CjAKUgovQW5ub3Rz CjQ2CjAKUgovR3JvdXAKPDwKL1MKL1RyYW5zcGFyZW5jeQovQ1MKL0RldmljZVJHQgo+Pgo+Pgpl bmRvYmoKNDMKMApvYmoKPDwKL0ZpbHRlcgovRmxhdGVEZWNvZGUKL0xlbmd0aAo0NQowClIKPj4K c3RyZWFtCnicvVVLb9NAEF7k28IhF/4C4iHcfa/3CMqratS0jhNDVQ4I1EYoLaRw5GfwgzszthPH SSiEBFvenRmv55vHt+s5l7HgeL8uBCMszJ9u+JyLWAgZXGKFoRVNHRbhdMO1s94J+ny2VJSw3qAw 4w0FxynP+S2AzPnRm9m36UfBr79TLNVzd72T9ym/esnP4Z7XnEt0XqQJbqUyLkEUnwhEAgirVVA1 02xpMsKLQKbqu6VlAYZwOqlKuZSojpWCs1axV8ZIbhwIAOfKWlfBvc1gzu74Uffr7Q/FtY81Xopn V6utwgiMiRMdQnA8K3qRfebP2TM2ZAPWZ+csZy3WY2PQ3pMesRFpKY05PB9Ym+aU3rbgydkJrC1W pqwDvvrs7AXPvvBOtkOYXmlIVPjNsVZ+H6jhn3TTOBHCajcrU62bMlHe2pV21kz/0E+pRByC8bba O9oE3C1qi9isoUZXYq18UsfOywTc6gBI9do9+rXoyt+Cqc1g1mNGTRz2ij0FPkxYl5hxRuy4IA6d ghXlPrBkCBKyaMguL8l4UlKuA2YkVQQOlsTED9sg9Vh0kDQS3UxjAshj2ghjQh9AKqOC3mVMEW0K jBOTG4O1CzomtPcQpYqV0HI9zJ2RthDIyYpAUvkmg37uOy9Jf491JChiG4p5Shw5hvExlTiC9g+g GQMqf59KPqEW5PD+CbHuHTRpRKvzkmGLM+pA0Xv5O+q0KN4e6+8bXXkXS+uU3RDB4VihpP1PrFhH gkqm5XnSPBp68CYCLS235batOiA+tGlMYU1Oa9t0Gl3AvP+tm8Cfe1PZDnKKqURsgXnwj4n3PZD8 yMQKZW5kc3RyZWFtCmVuZG9iago0NQowCm9iago2MjIKZW5kb2JqCjQ2CjAKb2JqClsKXQplbmRv YmoKNDcKMApvYmoKPDwKL1R5cGUKL1BhZ2UKL1BhcmVudAoxCjAKUgovTWVkaWFCb3gKWwowCjAK NzIwCjQwNQpdCi9Db250ZW50cwo0OAowClIKL1Jlc291cmNlcwo0OQowClIKL0Fubm90cwo1MQow ClIKL0dyb3VwCjw8Ci9TCi9UcmFuc3BhcmVuY3kKL0NTCi9EZXZpY2VSR0IKPj4KPj4KZW5kb2Jq CjQ4CjAKb2JqCjw8Ci9GaWx0ZXIKL0ZsYXRlRGVjb2RlCi9MZW5ndGgKNTAKMApSCj4+CnN0cmVh bQp4nL1YTW/cNhBlsDde4j9QBLkEcQEr/JZ4bOFslNiJ4/XuKincQ9HCMYp1UqdFT/kZ/cF9M5J2 paUMJ47WFkSRsxJn+N58kL6WOlOSroO645TH8/creS1VppSOofDK8RvbY7xEjytpg8+D4s9Xm4FR PnfUWcmtAbWXspIfoeRaPvtp9dflb0p++Jttae/PH+40+6W8+FGe4rruTK5p8nqZmFYbFwrSkheK NEGFtyaajmi1ETmVq8ii9ruNZK2M1NmihXLTYxzbAT2tyXLjnJYuoAN1ocG6Ne7nOZ7zz/LZ9NPH f4y0eWbpz8j5RZ8qssC5rLAxxiDnNRfzP+RTEUQpFuI9t3viBdpjHp2KiTjj0YzbCvev4pCfM/51 D/f5PkRLCE/E+fm+nP8pn8/vYF4AH4VzZtjGdt5bsPsaFl1QMfZZbEUdFnVhcu97NHZE38GjNiqL 0eW+jRnrIkWJuaG7jaGlqVQCn7ZZyHWBaW2Epi52D/5bs/KtysywMp/Tirb1iCl7RcWeU8E3KjgE HKhE9zn7SAnnus2l6D1qJ/zNVLwR78TZ2AvIYbxyIaaLuLOmG3gJuuWlsNu8fBl7WZpzcaJIvGS0 CdEFer8wEwvGuRJHjP4EzMzQnqKtGo5mSALHkJcYv8JoxuwtIXuF9w7FyeishJgNIjU2KZtg0Sa/ n2hJFYGHoybJVtybwNtPgG4dPjUjJbPUsvKOmauj4wzvUnyU+HaGPvG0GNv0UBRZbp0bMH93gaJz fU+RkmpqQuM9w/wElTGIh+gd4EnhUzahRL/OGtoWTNwNmW85eow4n0Wj44Dtu4sSo/39REmqaB0b x6BmiQigiPhhbOXYWGUq2sGl7s7RjU9K9Y4cPdXETryEj5LjLps809aJRxhNuT6fcd6hmgyHPoXw cVIcXnACm3H5KPHqor8RHGkdBdZR+OgGljK632Oz3u6lVFK0/x2dIW9pN5VoAtxlA+/bddI5AuiU Yja1m+rHa64MVa+SDCek8Wkxmc8LPWD/7uLGuqRo7yhuUk1rhMn1Cd9pZ++6AA8n62w1aW3qn0dw KLbI4B67z+Zk4nAkMMpqmKJN5ryzBU4nHlIcPGi9a+mqK6WM6QptIe3MMCztzICzC44tY+HU0ZFi 9RKIHGK3eEyoDKPRYjC02isZjM2M3sagI+2sdhiZYRTHxaCjI8Wg3nO/oUgcfXe2wSHR+y26Ovbb kIUt4GtRD3Wcmnzogzskaj4ksL/GjK4r4SDQDwGW9Ek29fRd309FzXc14bf874Cu/wGHdXtlCmVu ZHN0cmVhbQplbmRvYmoKNTAKMApvYmoKOTY0CmVuZG9iago1MQowCm9iagpbCl0KZW5kb2JqCjUy CjAKb2JqCjw8Ci9UeXBlCi9QYWdlCi9QYXJlbnQKMQowClIKL01lZGlhQm94ClsKMAowCjcyMAo0 MDUKXQovQ29udGVudHMKNTMKMApSCi9SZXNvdXJjZXMKNTQKMApSCi9Bbm5vdHMKNTYKMApSCi9H cm91cAo8PAovUwovVHJhbnNwYXJlbmN5Ci9DUwovRGV2aWNlUkdCCj4+Cj4+CmVuZG9iago1Mwow Cm9iago8PAovRmlsdGVyCi9GbGF0ZURlY29kZQovTGVuZ3RoCjU1CjAKUgo+PgpzdHJlYW0KeJy9 V11v0zAUNar2YpCYQOKNV8SQyPwVO3kEdV27RqztStON8oBAY0LdoINHfgY/mOObpGmbThsj7SJ/ zva1z/G5151xGQjuv9dZxYgQ5edLPuMiEELGNgqFoRGrbQzyxSXXNnRW0PRp2VAidMZXpnyl4fML nvIrGJnx/TfTHxefBP/6k/ZSpOuv91r9gp+/4n18s4XFpV88OyaWlcrYyFtxkfCWYCLUKlYLXdOy ywgnYuoq5pU9c2PenI4KKMsa4Vg0fKlV4JQxkhuLCszZHOtic2+HKIfXfL/1/eqX4toF2v8pPjxf psrvwJgg0nEcWz7MuBh+4S+ZZW32np1SvssOkSfU6rMGO6HWgPIU6SNrUjmg/+4ivWDHaI0xr4Na EyPbe3z4jR8M77FJJ00gjNJ2/VaLhW+B8C5kGivieJnMomuBTBkpF4ZLbC50/QedUokgjo0LC+lo E3uxqBuqqyBqv5So4Cd1YJ2MsKyOYWkRuwd/5rT8qzG13ljo/IlW7bADNpngXhziBnVwH8a4FSl7 jJ4R7k0PKbslDeQndL8GqLVYl3r6mNfAmBG+MVYYUa/PJ3tUSTF9Mqn7KM7ZYA1m9zZzAz1WFvRE epWe33WfSZJnrhgCP2MiIQO6D0S98PtA9/hWwfdQemL9yA5R10OthXZCDiNFq5uvOqr7QJEFSTK0 1TPVzVMpI6ncdnRUNcSOcj/cIHV4bbSolQL2BmkpU0825oRo7BB1vYXRpxjZpFlnaDfZu/qJcWEU 2NCqdXBtTkLSyS1pqGqJ7QDdDuLfslzg+J4D6mfsKXuCtFP3dnRkA2sEJlS3tDmglQy3BHTVEqD1 QcIDnMJv9QuYCxW02QdyYFncKO+4d0FHpBwfZZpwegk5qXQTwUPhbaaNWbP9zTkmFW4pwFcNUQRJ V/y+D9Fj5G0K/QnE0SGHVEQFT0wCSrr52IfzYO/jyUlOYZvcVkKB/xFr1B5B8HBT67DbnHi02Fak r1qaE5EA1OwdVuimVIqvd3O9jPInQYMixhnyXGpdegU05gEnIa5G9TOUH8VUgmGLXiAjehqm+T2h zZ2Rqrv0GyQlj9CnweP506b0BQOKmcfkNQpHUrs3wOufYmH1EHf++eK/v6H9yf0KZW5kc3RyZWFt CmVuZG9iago1NQowCm9iago4NDgKZW5kb2JqCjU2CjAKb2JqClsKXQplbmRvYmoKNTcKMApvYmoK PDwKL1R5cGUKL1BhZ2UKL1BhcmVudAoxCjAKUgovTWVkaWFCb3gKWwowCjAKNzIwCjQwNQpdCi9D b250ZW50cwo1OAowClIKL1Jlc291cmNlcwo1OQowClIKL0Fubm90cwo2MQowClIKL0dyb3VwCjw8 Ci9TCi9UcmFuc3BhcmVuY3kKL0NTCi9EZXZpY2VSR0IKPj4KPj4KZW5kb2JqCjU4CjAKb2JqCjw8 Ci9GaWx0ZXIKL0ZsYXRlRGVjb2RlCi9MZW5ndGgKNjAKMApSCj4+CnN0cmVhbQp4nL1VS2/TQBBe 5Ntc4GcAEu6+H0eQ61Rp1CqpUxckDgjURigtpHDkZ/CDOzOJG8dJVAgJsXZmZ7ye1zezmYHKJdDz Zr6x0iH/fAszkLmUKvnopOUTXRkPEbsF413wkj+fLgUtXbC0mUJHIDqBGu7QyQyO3k6/Tz5JuPnB sTTr/mYn6xO4fg1DfGYt44qMz9NEs0pbH8lLiJI8oQtndNIt1XSpsjLIxKrmu6Xm0Rm5M7Ep5XLH dWwE4kbnQVurwHrcoDu/qHUT3LsKeXUPR+W3u58aTMgN/TRU16tQUQTW5tGklDxUcyyqL/BSeHEi xuI90xeih3TA0lBk4oKlEdMa10dRMB+J4SuovsJxtUMoNrk8Kpvs5oAaw08U6k8gs16mtApZo2pB pqIOzq1g1lL9A2hKyzwlG1wzIMYmGgm9ZdstoiFTcq1+yuQ+qIhmTUJP7do9+/0Iy98605uduUAZ df1gE5xii2TYLifiEhtizFKNjZGhXGObDPFdgfoetw29LXCN+fwFNRBy0pKdgu2MxXO2cUpNtu88 orT55prt7GkLPF418ETThefXvtNSfP+uOeKqnmOdL7GiV0xr8YErfYb7Et8NeMRrHHka8hGO/IBR 6G0Ye8Rs34EHiTeaNGo99sPhoXT4T4Cse+JqZogB8TNGpFjQTBwjLVF7hZUnTR/XgCekXpxoI5Yh HTFvI0fn+yI7UD5BdfMpOROa55JjoVugjzEU4nzfMRiFFC/muCGOg9x32vgtbp78U6LnAaQrq1UK ZW5kc3RyZWFtCmVuZG9iago2MAowCm9iago1NzkKZW5kb2JqCjYxCjAKb2JqClsKXQplbmRvYmoK NjIKMApvYmoKPDwKL1R5cGUKL1BhZ2UKL1BhcmVudAoxCjAKUgovTWVkaWFCb3gKWwowCjAKNzIw CjQwNQpdCi9Db250ZW50cwo2MwowClIKL1Jlc291cmNlcwo2NAowClIKL0Fubm90cwo2NgowClIK L0dyb3VwCjw8Ci9TCi9UcmFuc3BhcmVuY3kKL0NTCi9EZXZpY2VSR0IKPj4KPj4KZW5kb2JqCjYz CjAKb2JqCjw8Ci9GaWx0ZXIKL0ZsYXRlRGVjb2RlCi9MZW5ndGgKNjUKMApSCj4+CnN0cmVhbQp4 nM1YXW8cNRS1xJtfaAC1T0gVTyUSru/19yNVaEJoFZJdElDDA6Jqo2paSEHi73Ps+dzsZj+G3ZCs MuM5O/a9Y59z5nqvJSkt8+ebumG1w/n39/JaaqU1JR+dtuWOm9e4KZ/eS+Nd8Lp0r/oL1i7Y3Kjk jYt8vJIX8gOCXMun31Z/Xv2m5du/Si7t/8e3o0a/km/25Sk+14PBKQ9ePyaGJbY+5igh6hwJIZzh xAOo6iGrg04Favv1SBcshzOxncq+VeaxvchnwyqwtSStRwPhfDPXbXLPpjhPP8qnz//48DdLE5TJ fyynb2aXKmdgrYompeTltF6L6Wv5RLD4WfwkPhETHM9wPBPn4kCciC+BGWAvgOTjhbi8BPSDOMLX hzjmTt/jiyPcfPi1nL6T301HZOaJVfTemMX5tQOvmLdlK8hJk8/LlYi8LUvIPljWQ6xqF2dAsDrC PxjlWJJ8J/NyvpSvftXyNehtbMoE51uaZ4eLAzsydjbwZCaQRiDSG0ZaeU+ehkHokIwyVPLx0ZvZ fAY3aoeGT4W8z/bXnWXtuH7YBnI6NXrb6RzPhTXM/k5nOHnr8ry2kQe5kE1epWjz/EYTfZ7VPsF1 ZpeL5cSYyDVU4ujsEKsGWArW1bbTde2hzZ0oeEUB6TppkysyXe5EZGq9mzm9M6inDV4KTCrOONEF zORHcbTKSm4f2kDSAasxN/QWTMSyCXmOiZw3tZY7KFNvQw+pYSKbtbc2CddLYrL0QVwMuA9GHMCL mkkdVAYJd/Eka2ax/FGiCSGV4MlQLIN00J2tyXpJLH8QCsGUt1Fko00Zo4U8zNjN6Hge6bqtq+xG L00N55UzzhpIO0Rlo3NhrLaJgwoUrJkXdy4yjlErnIrnKCTGa5yyE8Wo4y5FHi3boFw2WW18WcsW qnooqzClgg2F2UBXG7/sYN5waFrYGoh/O8lN1vd+IlLM2gZ4Niadcns5QziTflEJioIWfYe82BeX T0RAKfkZ3P+0FJavxB7KzAu8C05W8WRhIAhREaaB58ONGi+VKvVm4nO1cS6YZ1kuHovPxaddbX2M 4xGq63P0+AWtx+Ir8cWojCy2HQH7CjOf1xZU0Bmx02xqRyNUhLCaXNo0WDXAIvlU13dd1x7aug62 nd4mSkBvJh2zQcF9XOQVG7JxQjivCXUCjuyBSGDMOB0EVsk6zMD/r4MHI5nOnBRpGNd/ZPrtPxv0 7+/IrqYTW6ejGWLVALMpUM2drmsPNWzfFte3ndwGXGdKKia20qC3idHuhOq54j8oVNkTL+GTx+OY HjX2JHj33QOmP7zXjn+7DhJqwFA8DpvShmoO1SANsWqAgWBc86rr2kNb1sG2k9tEB9jSO6MpSmx6 lUepbHYhhAMwKP/sBg7lfXB2/ayIcc7PYIu3sP57oIdHI30/v7sS804qnJ5Ojmy9j+4g7Nn8hj9W jds4rpfEpHnOfwHWp2TmCmVuZHN0cmVhbQplbmRvYmoKNjUKMApvYmoKMTA5OQplbmRvYmoKNjYK MApvYmoKWwpdCmVuZG9iago2NwowCm9iago8PAovVHlwZQovUGFnZQovUGFyZW50CjEKMApSCi9N ZWRpYUJveApbCjAKMAo3MjAKNDA1Cl0KL0NvbnRlbnRzCjY4CjAKUgovUmVzb3VyY2VzCjY5CjAK UgovQW5ub3RzCjcxCjAKUgovR3JvdXAKPDwKL1MKL1RyYW5zcGFyZW5jeQovQ1MKL0RldmljZVJH Qgo+Pgo+PgplbmRvYmoKNjgKMApvYmoKPDwKL0ZpbHRlcgovRmxhdGVEZWNvZGUKL0xlbmd0aAo3 MAowClIKPj4Kc3RyZWFtCnicvVbbctMwEBXjN8EDL3wDt8HVXdYjTBucNENuTgwlPDAwbYZJW1J4 5DP4YHbXceLE6VCC03qsXW0sndWeI6kLLmPB8XlVOEZYsF8u+YKLWAgZXGKFoS+2+/ARmkuunfVO 0PD5uqOE9QadOd/qYDvjOb8CkAU/ej3/Pvss+MUPyqV8by72mn3Gz1/wATyLyuQSJy+WCdNKZVyC KD4RiAQQVqugKqH5OmSEF4FC5bh1ZAWGcDopS7n2qI5lB61WsVfGSG4cOADnlrUuk3uTgc1u+FHr +uqn4trHGv8Uz843qcIMjIkTHUJwPCu4yL7yZ+wpS9mEdVmHDVjERmwM/oC1oB2xHv72nGff+Em2 B6iG6iTOGrUbupz4LyW5CznGiRA2ySlDFXJkory1G+xUQv9Bj1QiDsF4W24FbQKKX93ibhdR41Si Vj+pY+dlAtPqAEjV2j34vaLlX8HUbjDrcUXbOCCEMYjgmOXQRmAj1ieBdMEeg0AiEM8IfmuBdwKR CfhvwR+SnE7BnoE9o9GFuIbU5vB+ougAv2l6NYlJYq0SWV/R3ki3kORkSVKit0n61fSyJJ23NSCo cwpcjKD6EXtPbQ5VRb46xF+6YmQCtg/9HMYgjx2IIb9jGD+dNp2vMz6WIph6yoejQSp/TzzUkSqb o5B3QcUpEYCyn7B3REWbtkMKsTZtCNxMeOqmtI1wOw2XcwFBB8rey+3sEa9NWRXbtJTRS/ak6Ry0 dLESWqodeRxOG0rae9JGHYmOxjH7QO1j6g2gvtHq9i2O06LiqCA8Lof0fcQeLvloLSPjiq56MLK1 0tWjQ+lF2drlUGZQHCU5qb1NWfcp1x7EaZVNZ2RAPXZHRk0rp3IDi9rpfqAruAa0EkIXbtaUzuuP dB8PSDon8PboRp1Oqf7DDXW04ULI4YVroPF8g4iVs25Hznf+3w6fP7xaPb8KZW5kc3RyZWFtCmVu ZG9iago3MAowCm9iago3MTIKZW5kb2JqCjcxCjAKb2JqClsKXQplbmRvYmoKNzIKMApvYmoKPDwK L1R5cGUKL1BhZ2UKL1BhcmVudAoxCjAKUgovTWVkaWFCb3gKWwowCjAKNzIwCjQwNQpdCi9Db250 ZW50cwo3MwowClIKL1Jlc291cmNlcwo3NAowClIKL0Fubm90cwo3NgowClIKL0dyb3VwCjw8Ci9T Ci9UcmFuc3BhcmVuY3kKL0NTCi9EZXZpY2VSR0IKPj4KPj4KZW5kb2JqCjczCjAKb2JqCjw8Ci9G aWx0ZXIKL0ZsYXRlRGVjb2RlCi9MZW5ndGgKNzUKMApSCj4+CnN0cmVhbQp4nNVaW2/bNhQmkDdu wAbsjj0MA4ata1GG98vjija3ZkvsOEnXpg/DijYIkm7pBuzv7yNtSpZi2akYzVgERdKxpe8cfh95 DilfU8E4jdvD6YnmBsffr+g15YxzEaw3XKdvtK/xpXi4osoaZ3m6/bK+kNw4HU8uaesi/j+np/Qt QK7p5k+Xf57/xumbv5IveX/3ptfTz+nr+3SE7Xru4SI+fBomHiuktj6iOM8jEiCMkkHOmS5rk+aO h2TK99WWCizCKZ+bsj5L7Zgv4lFJ5qTWgmqLE8DZWVtn5x5NcJy8o5tbf7z9W1LlmIp/kk5eN6mK HmjNvAohWDqZcjF5Re+Rr8kGOSE75JA8JiNySvbJFizPyDHZg3WEq7MzGA5w8Sv2A3LyI51c0CeT Hl5oI5mwCGSxL/nBK9po1JRBlB5UFnwU2oIzOOiUkVGo2gXpE4dCWav9nOmyNlnlnE2mfN9NS30b WIVH7+fPDXQ45JVXuulQNtXwC3xcEEkvl9r4VxSKlqoZbGWaw1/g5c1Ybrg0ZfQfMLqH/YKK2CF/ pi9ecvoKnlkMHdx513E63p5jwqmpv9kiAhdaJtijO4Wca+qMWZmGA60bswLNpsFA56jPoJVpMFCH MaPZS4GpW91tGMis3TnIWs7DQLqgnWxCZtNQkAFZijchs2mArqJN6hdCcNFq2so2HKq03uoWarYN h6qlEy1OK9twqMYb26K1sg0lJeEA1KY12wYD9SGYdvtmWwTtLBkauXC+whKo2oILEIdhDg9yywos BTRm09+N0sY4FowJQVNpWRAobXyjzBIorw7JzvLaaRmA4C7WgMLZxQjzxVOrioRMrLHClkcpHUOD K6c6ovSNsrF/sMHCY9/Rlt2Rai+Z4QokFEeKEYopjpTXEenZPfIiUXqUSuMVRfFSJK+YFNp3IHVH W2nXouAOgvu+scbJweIoj8DnTtonmBLsY6KwjylCkYot0553CehWIi4O1zNpgvIdMX9MPi2IT2Bi g6LJFUh3ODq/JxbbR5jOPcRxA2SO8P8b8iDK+TvyA/m2IHKHZMS96atiyT0zHnXe3Ye9Df3uorM+ Q1c97R+hRb4RukC5xSEKrhlKRN7RyOSTtQp3QAYfEEc42UzS3SXjtFBRMuSiBDHBS9lbrIYjEcY8 WBBq8kJwYxqhnkCmR7OscphS6Smke1yUToVCMrOxmlqIeSvtlka8SrvrHXTvhNDFgX2QlteO0+rZ MbJLVO9BXFT7sCRixWww+r1H2zlCAzThuemdZlYR+tl6CS0Nr5vQp4nIccqfcdV0r7D+EwIfaV6Q WJSKw5JVg3H5+Vq5LA6vm8s7YdAGJjQPBfw5zUxc4B+Kvy/Wy19peN38PcbgiqF0lF5aoKjtH6fX GFG5F/1Z1MIyFO9hMBa/XCuLxeH9T1JkrvG0wTzMaq/vPt4n0O0W+QXjTswjzxDtduGUOvhQUAsU h7pKuV+tV7nDMTldINnFfgpGn84mKPupet/AxHNMnictj8F4CcfBMOt5uMWEZfnbbIk8KhVrrctn G2ZvsxfjszfVHau4gl7QuPRcL+IqHeLbftlxml4pVchKcdlGttrktfkV68WroVZ+JzWEl0Yytdgd IZCvWIBi4jtPG4Jirv5mfJ356P5/5WdGz03UJCyuHnKZ3MwB1W2Z3FwhBy1dfJIL1ldymNoC526q BiWUEWGxqbrztj9wyJJONuc5s3HtUztUwcIuLfFkry76HN1xD9u0S8YBd4yib7qOcIzjFj7Zn020 V/62YcnSOHcMXNlbLFov/W1D3P4FU0W4hwplbmRzdHJlYW0KZW5kb2JqCjc1CjAKb2JqCjEzNDkK ZW5kb2JqCjc2CjAKb2JqClsKXQplbmRvYmoKNzcKMApvYmoKPDwKL1R5cGUKL1BhZ2UKL1BhcmVu dAoxCjAKUgovTWVkaWFCb3gKWwowCjAKNzIwCjQwNQpdCi9Db250ZW50cwo3OAowClIKL1Jlc291 cmNlcwo3OQowClIKL0Fubm90cwo4MQowClIKL0dyb3VwCjw8Ci9TCi9UcmFuc3BhcmVuY3kKL0NT Ci9EZXZpY2VSR0IKPj4KPj4KZW5kb2JqCjc4CjAKb2JqCjw8Ci9GaWx0ZXIKL0ZsYXRlRGVjb2Rl Ci9MZW5ndGgKODAKMApSCj4+CnN0cmVhbQp4nLVVy24TMRQ1irrxhl+ATQVInfo19ngJ6mOSRs1r kmmXCNRGKC2kdMln8MGc64mbyTRRISSxcl+277kvJ3MuE8FpHVWCESn4lzs+5yIRQnqbpcKEE00d h4jdcW1TZ0W4PlsqSqTOkDDjDYXolJf8HiBzfvxx9mP6WfDbnyGW+H243cr7lN984AOsec25JOdV mnArlbEZobhMEBIgUq28qplmS5MRTvhgiveWlicwgtNZLOVSCnWMCnGtEqeMkdxYCICzi1rH4D4V 4MUDPz77fv+ouHaJpo/ixc1qqygCY5JMe+8tL6peFF/5O3bARmzMhqwDmrMJVpddQzpgLdZmPXbC Ou958Y2fFlvAagXqLHbWgkfHLxTlb9pjrPB+tT3RVGuPzJRL05X+1Ez/0SCpROK9cWl8DNp4Gn+1 QWwWUZMr8ax+UifWyQxutQdSvXavfj+15V/B1Hqw1FFGTRwMQIudYkCGGIYc2gB6F/Qc9Ax6GbRO sLZBS3aBcy3s9WDJsVdCOwmcbnQxcHSLho3ulOFs8LuXjDLdzKga+Gtgn4dIJ9D6QeovMqwyarMr 5NDC7hWiHAVKmUxWsryAfcAug3VYr8BespHKNdOp3u0I4APwPIQ4xqre8WTXYWiBoRReZ2ti2Rpr w/xbGedfOtl8AL92nZkM/2bPkVDJPv0OLkb2DXsbmjxG43P2GvIhs1gkHYHHE23c6VFHdj4INNIb qrKXoVPaboB58Zeb1h/bOXsaCmVuZHN0cmVhbQplbmRvYmoKODAKMApvYmoKNTYyCmVuZG9iago4 MQowCm9iagpbCl0KZW5kb2JqCjgyCjAKb2JqCjw8Ci9UeXBlCi9QYWdlCi9QYXJlbnQKMQowClIK L01lZGlhQm94ClsKMAowCjcyMAo0MDUKXQovQ29udGVudHMKODMKMApSCi9SZXNvdXJjZXMKODQK MApSCi9Bbm5vdHMKODYKMApSCi9Hcm91cAo8PAovUwovVHJhbnNwYXJlbmN5Ci9DUwovRGV2aWNl UkdCCj4+Cj4+CmVuZG9iago4MwowCm9iago8PAovRmlsdGVyCi9GbGF0ZURlY29kZQovTGVuZ3Ro Cjg1CjAKUgo+PgpzdHJlYW0KeJztWEtvGzcQZiHkwpP7Qk8FeipSF6H5HvLYQH7WgWNZtlLEPQRN YyOQkzot0D/SH9yPlHaXK60jW7LcAq0Ea5djDmf4zTfkkNdcCcnT98nkxUqH5y9X/JpLIaWKPjhp c4/ZNjqlxxU33pGXWX3cNLR0ZNPLmM800u8lH/F3MHLNt34Y/3b5SvKL37Mv1d+Hi6VGv+RvNvkx vtfF4CoNPpkmhlXa+pCsUJDJEkw4o6MuRONGZCXJmEWVXiOpjSVzJlRQNm8Zx6qRnkYL0tYqbj1e YM5Psa6cezrEc/iBb+28f/eH5oaESR/Nh2/aoUoeWCuCiTF6PpzEYviaP2bfsiN2yPbYMRuxDXaG t1P2U/7tsR02wH+PWJ9t4+0UzxH6Dtjxd3z4lm8Pl3DEkhHRGum63akGXgDTbQJmvYyxHbBKVARM BU3OtSJWiFYImdJSxGjJVelhbEwJoW94nQXRpKHkHH7KCE8qYFgTYanE7pO/6rDc1ZjuNuYozWjW DkgyADlG7MdMiN4cafogU489YvsgyzGkG+j1Ir89murt4XmC3oeZVoeZVnvs7L79J+VEN1ZLW1oY lmAeJixzdlph2MjwDtA6ZLuQ7GbA+zmHn6M9yr3OIB1MNU6nPScBGuTRevOjrGUuStPsZLbZ+XlB lp1mlbpvD5D1wkQJhXk31kcTRepheDJvCDC+zDQ4Aah77Osig1O+HqDdhwT4HwP3HnvCPH630WU/ p2uKxyHU++i6hqT1JIX2znd4ft+mVC5ftPE32FllF/IY1mOrQ8xJ+UnloKUx2HVK4bgUBgctESlt Ro1+IS3qlXUZGG3mSssqqR02MD1BywbrMYR3nXrAYmv/6tXFr57339eo3QSNDh5b5IznRhM5OeN5 ISx8LPS7oVmXgUXQdOndDRqKBDKCmM7E4LLfwFtm8taycTXTohae8PJPjHLAFX/LUx3zjL/8WfLX i7NlsNtp2EWyvm34pGVIwpCSd7R0m9wtTFuvrDAqA6FQTQmpS4dKJw2KNh9zpJ5ufpyB0pAO7eki eBLBWzPO3ZYNmfCPAF2YboDWAQ1q+1P6uAzOXqUlyLVwrmTrwdlLZRdbfiicG3ckeSNUzIu11QHL RSgdKnpqqZUI6jZAB2tj3tB0tDJO09dH1ZKNC1kT2Vq1Ed391KPhKXmlUGmj1MbmrRacVFUQPn86 T6oa+4vC0TC0ypZNdv6YEYqPz1CWVKeGdNo4Yp+yZ0UhcmebCmdRm87X3ZaXHzgfu4OI7frLtE4+ qLNSCfYCzYNc4e4k0TfsqxXmg3XS4AAa543fQ2mjZQg2ttmmg9I+ttnWyIp1pNZdhW4O00Imqf/Z 9l9iW1okzQzbKlnJtuCijzNsa2QrsM2ipPPSeLp/tn3JPse3xzQTywciV0fOG/dvItYXqxBLC6Ot ovUQy0mFyjHVk806hmrSuLwlN+tYIwOHQvZkXGoX0vIQspbhp0cQHDNUTDoZK0+O0DKdWvUBhG5z AFFOTe6060vQqzKL6ovRWqYlGaOm1cVUt5AtcYEaA1ZHCoZbTMoTSqUlsw2VToQfQd+Qc98j63rT m7Dn+eojXWeCzysw1pCgGNXHE3AV0lKgSXnYxAcFOfmZu+xaVsSi1l0pPgRNZ1C4rh6fKIz3ztyA 1nRlOciRaV0yrxIf1OXe0YIVcmGA0vdvGC4TWwplbmRzdHJlYW0KZW5kb2JqCjg1CjAKb2JqCjEy NjQKZW5kb2JqCjg2CjAKb2JqClsKXQplbmRvYmoKODkKMApvYmoKPDwKL1R5cGUKL1BhZ2UKL1Bh cmVudAoxCjAKUgovTWVkaWFCb3gKWwowCjAKNzIwCjQwNQpdCi9Db250ZW50cwo5MAowClIKL1Jl c291cmNlcwo5MQowClIKL0Fubm90cwo5MwowClIKL0dyb3VwCjw8Ci9TCi9UcmFuc3BhcmVuY3kK L0NTCi9EZXZpY2VSR0IKPj4KPj4KZW5kb2JqCjkwCjAKb2JqCjw8Ci9GaWx0ZXIKL0ZsYXRlRGVj b2RlCi9MZW5ndGgKOTIKMApSCj4+CnN0cmVhbQp4nLVU224TMRA1ytu8IPEJPAESru8X3kBtitpI 6aabLlR9QaA2QmkhhU/hgznjZJvNEkopJZbjmZPxzJmLsyAtFfF6uRSc8jg/XtKClFRK55C8csWi r8OIj0uywcegyvX5WjHKR8fCnHoKf8+ooSsEWdDO6/nX2QdFF98Kl3ZfX9zL+4zOX1CFteg41+x8 mSbcauNC4igxKY6EEN6abDrQfA05FVUuUHtvjdwE43A2taVcS6WOrcKnNTIa5zS5AAHhwqrWLbk3 Nc76mnaGX66+G7JRWv4Yqs83W8UMnJPJ5pwD1cte1J/omXglDsXZmRiIE/FWHIldUYlGjMQQyDsx FQdAK2jFZAzlPfYYxk/F4DnVn2mvvgcdb7NMKYDKVlKt4z8U6y5tc0HlvNm2Fuq0TScTvd/oWwf6 h8Zpo2TOLvr2kViX+VmY34j9Ilp2pX6pn7YyRJ3gFoWMplu7Rz9u2vK3wcz2YD5yRv044hRT0mB4 JpiTBsNxhMHg6RlhH2BABtAarF1MzyF+2wfSwHpQ7Bi7dcIed+brIRNJtp8ID/60RJ0W2sOSRgWq TaHMbMZF4jRuJd1meArT0SrH1bX/kow2sZ/NFMFOxDFoVCUzftjLJo1LC/YKdgy7CVo2Kfkx/gR7 v/wFrLCHJhx8kFkF47ewvvOD5/UTE7oqtQplbmRzdHJlYW0KZW5kb2JqCjkyCjAKb2JqCjUwOQpl bmRvYmoKOTMKMApvYmoKWwpdCmVuZG9iago5NAowCm9iago8PAovVHlwZQovUGFnZQovUGFyZW50 CjEKMApSCi9NZWRpYUJveApbCjAKMAo3MjAKNDA1Cl0KL0NvbnRlbnRzCjk1CjAKUgovUmVzb3Vy Y2VzCjk2CjAKUgovQW5ub3RzCjk4CjAKUgovR3JvdXAKPDwKL1MKL1RyYW5zcGFyZW5jeQovQ1MK L0RldmljZVJHQgo+Pgo+PgplbmRvYmoKOTUKMApvYmoKPDwKL0ZpbHRlcgovRmxhdGVEZWNvZGUK L0xlbmd0aAo5NwowClIKPj4Kc3RyZWFtCnicvVdLb9NAEF4U9bIXQIIjl56ACndf3kdvIDd9pIIk zaOtekGgtkJpIYUjP4MfzMzYju3YEW1xGivr3fF4Z3bmm4fnXEaC4/UunRgRw/3LNZ9zEQkhg/Wx MMSxvAYmvF1zbWNnBb0+KxZKxM7gZMaXFjhe8Sm/ASFzvv1+9uPqs+CXP0mX/H97+aDdr/jFWz6A a17aXOLm6TFhW6mM9SjFeYGSQESsVVAl0qwgGeFEIFL+XkFZCENx2uemLGZkx3yBd60ip4yR3FiY gDib2TpX7sMI7qNbvt39fvNLce0ijT/FRxdVV6EGxkRehxAsH6W+GH3lr9kO67Hzc9ZhJ2zC9uGe wL8Hs4TtwTiG1QE7gtknWD+F1REbAOc04+iwITxP3zoA7oT14cnmGz76xndHD9DUOR8FMGazuvm+ /zDjXRxqrAghdagVytkSaVaQpFcujiseLZH+w6VSiSgE4+I8fLQJGDBqxXTZhhq3EjXzSR1ZJz1s qwNIKtvuyZ+FV+4rTDULix2eaFkOYKNHSJoAVg4BLQlgBzGVAKUDT4cw7hJHF2hjuBBfe0QlKNYh iOxTdgbjPmzYWYjYYi9ZZy3H8rp+LNSlTwGQ0DHGpOuAVM81GtJxDpGrbb2MNpGDlOrryj1Y1AoY WZnDSCq3jKPfbR9MUhmpSyK3I0by3DQB8/Zp1oPZMeFpFTSQhkjrkzt6sM5Rt8VetH0Cr3VkdKO5 1ugaJx/LNTVJ5JAxO6XxGbhiDMY+BVPvZaFcDf4JOeyEikg5+LtZnO/Ck/22dXdQQkysZYP6bTul SLtKxo+Td+uCKDQSKs9pGCQE+iIgmvJXNS3j6jTj7mVeGpJPSzuu5zhxrY70suQK0FgcCRU5phSb JtppWjE2YIFMx0AeEDY3qjWkbZ2ttlEsY9ug9/qwpcVy3l9XTa8Jyow/oBbwLO8ZB2DuEiCqDRd8 AOgAKLUhb70U9k/OS0UzExvtqf0CYWnsLKizElWDAYTxUgO12KGZWt4BmjPoy9qyS0ly3TiY5M5g BKNM2nZIyRB1wavb9s32gREiHYRtUOM+osp2jKOq/1NKxffCR9ZXHd9ESt9Dj7dfZrV5rA6oLgkK IyY0dPKrrGQOFgV0Qp3Pomu2WUU+AjZ8vEMp8iNRMWqRucuet15ltYy0VE12uvPXGl5/AXtr9EoK ZW5kc3RyZWFtCmVuZG9iago5NwowCm9iago4ODYKZW5kb2JqCjk4CjAKb2JqClsKXQplbmRvYmoK OTkKMApvYmoKPDwKL1R5cGUKL1BhZ2UKL1BhcmVudAoxCjAKUgovTWVkaWFCb3gKWwowCjAKNzIw CjQwNQpdCi9Db250ZW50cwoxMDAKMApSCi9SZXNvdXJjZXMKMTAxCjAKUgovQW5ub3RzCjEwMwow ClIKL0dyb3VwCjw8Ci9TCi9UcmFuc3BhcmVuY3kKL0NTCi9EZXZpY2VSR0IKPj4KPj4KZW5kb2Jq CjEwMAowCm9iago8PAovRmlsdGVyCi9GbGF0ZURlY29kZQovTGVuZ3RoCjEwMgowClIKPj4Kc3Ry ZWFtCnic3VZZbxMxEDbKm4sQiFLOdyjH1vfxCEpDKpDahE1KUVCFQG2F0kIKP4UfzGen22x2A91k U5C61vgY2zOeb8bjHVGeMBrKi3FHMY328zEdUZYwxr1xmqm4ojjGotAcU2m0NSxuH04GgmmrQmdI C4NQH9FdegIlI7rxcvj96BOjhz/iWTI6PVxI+hE9eEo7KKOccB6Ej82EWC6UcUGLdSxoggothRc5 1nDCUswyH1nZvgnnXFlQJ10G5aQXccwGoZUisUIpTpVBB+rMGdbZ4V6laNNTutH6dvJTUGkTGT5B 04NpV4UTKJU46b03NB37Iv1CnxBN2uQd6ZG3pBvrXdBH0oxtl3TWafqVbqYLqBROJlY5bmcrzgRf AEgV1yjDvJ92TcbKuYY7YbWe8k2OVcM5XLDEe2V1dhGk8iH0xR+6RRBlEMVK+HGZGMsdxEoPTXns rv06d8u8ysRsZdoGi4p6SAfB0SavSZ80EBBd1JsYN8DpxrkGgqSDugl6RiyKJDfJHmZ62BMDCOM+ AqxNWhhvgVpYu4MdnSiht2xLnJQJvDsLtoVVXeihEOr/wkMlPeRD9EILSL8n2/BL8FMvotsHyuE6 j72zFbk7cfUueRMv+HhfB71m9GP/bC6s2QNvGzJDv4vdjUuxhwtbNCg7wHROGgzAChNN2BiiqxFj qR1sXvbJlNCJNkLPON0SkhaSuDTBdM6YVzFrCWeRkfK8YY5nvOXj1+p864Q1f9oSzCTSSwsNLvGG Gfm3N8WFII8JXpZwMgbxbwwk8cRN+bCRC5e5xYa0jVdlWuLtILNCWa247k7FdWuL26G8SRy+kjH1 oNFyBjSrZyatge6C7oHugx6AHoIegS5l3eK2aC4Aj+ayZFE9fIwv4HMDL9D/LDdqYCQcMOK6ZFQ9 iJwuQLSPv8D9ijdiUkx8atrxWWmQ5+Qx6hWEzCq5Pqek/SVAVDSqHkScFXPaVQijklU1QeLFNF01 iGT5cR+sZ+85Bj7397FCBqcVI+pWKMvAqWhYTZxkMWdfiWAqWlX55yiU30Zie00KZW5kc3RyZWFt CmVuZG9iagoxMDIKMApvYmoKNzg0CmVuZG9iagoxMDMKMApvYmoKWwpdCmVuZG9iagoxMDUKMApv YmoKPDwKL1R5cGUKL1BhZ2UKL1BhcmVudAoxCjAKUgovTWVkaWFCb3gKWwowCjAKNzIwCjQwNQpd Ci9Db250ZW50cwoxMDYKMApSCi9SZXNvdXJjZXMKMTA3CjAKUgovQW5ub3RzCjEwOQowClIKL0dy b3VwCjw8Ci9TCi9UcmFuc3BhcmVuY3kKL0NTCi9EZXZpY2VSR0IKPj4KPj4KZW5kb2JqCjEwNgow Cm9iago8PAovRmlsdGVyCi9GbGF0ZURlY29kZQovTGVuZ3RoCjEwOAowClIKPj4Kc3RyZWFtCnic vVZNbxMxEDXKzafQA0JC3DgAElt/r30ENaVfos1HE1SVAwK1FUoLLfwUfjBvvNmsdzeQpASyitfz 1vbsvDce7y2XmeB0vSo6RljcP13zWy4yIWRw3goTRzRtDKLbNdfO5k7E6dPKUMLmhjpT3jCoveIT fgMnt3z79fTb1UfBL7/Hdyn/d5f3Wv2KX7zkfVy3yeKSFi/CxLJSGefJS+4FeYILq1VQCTStICNy ESJUzquQuTNyp31JZdWLPJYG3bXKcmWM5MahA3duxnX5cm9GuI/u+Pbu15sfius80/RTfHRRl4re wJjM6xCC46NCi9Fn/pw9Y7vsHeuzATtjx2yPvWUHaE/w77MJG7/goy+8N7qHS41HwRrpFjsuF15C yCrSGCdCqEtTQok00qvc2po2CfQX4kglshBMbsuNoE2g1Fe/6TZJ1LSUaPEndeZy6bGsDvCUcvfg 51yWdZ2pxc5sThE1/bBDpMEOUmKPnbIu66E/jinSYUMgR0gaaif4f8CzSUT6s6c0jrA9zOngPmCd 8q3rcqJQ6KCkdaEUNr6N8ZmxRucOuvocIQXhEnBagUFnwnipgcWZTTudBJ0hMZUnW/rMnAVb61Hl dZuqCa4he8q2cFG4A+ynMXsIUvZg76NHdB3g6U7cY/1I0BZ7wh6hHWP0UaR63LC6cUS39JDsyIUx FO9nM5/yFu2EMu8z50t+6kYxknhaSSbsLSKXvEkQb7VUtgKnCShREGq6tIBk2oZ0kipvCtUDsUTq YwgyBMX7i7NyXmTaQa0V6TK0HfOGtnTiuEXCSjkkVcjqwRZIPSaF3MFJX2naBGZzKLjNl0aZy/9T G9uOYimkPXyE9iCWOCqXdH+PxDqO/QH2fQf26WzH77LzcwA7cWIH5iCCNOA0HXAWS20Hs4/wYIw1 O/8kLEjfDItq9wDtYF7rKcD1ardSZr5XfI7s85QsFTpNURfqVaANJPM2VBeUXXDWFQV8PCvhB/Fk O4Q2PVQKUuoE6DB+GpFSpOHWfBYV6D+did2S15W2nnIya3AXkTpvJinbTUuuV8WV81Vxkyaz+EDK bQJPU1jLxgnbAtKJG5JMi9aZSym6w46XFPBF4awb5XJ4QcSbKuSJ7xYHK6WTFsXnQG2l4pyvQel3 QNOqPguWfrHT9QtM7pzNCmVuZHN0cmVhbQplbmRvYmoKMTA4CjAKb2JqCjg3MgplbmRvYmoKMTA5 CjAKb2JqClsKPDwKL1R5cGUKL0Fubm90Ci9TdWJ0eXBlCi9MaW5rCi9SZWN0ClsKNjcuMjkzMzA0 CjI0NS43MDM5Mwo2NzcuMzM2MwoyNzQuNTAzOTQKXQovQm9yZGVyClsKMAowCjAKXQovQQo8PAov VHlwZQovQWN0aW9uCi9TCi9VUkkKL1VSSQooaHR0cDovL3Rvb2xzLmlldGYub3JnL2FnZW5kYS84 My9zbGlkZXMvc2xpZGVzLTgzLWh0dHBiaXMtNS5wZGYpCj4+Cj4+Cjw8Ci9UeXBlCi9Bbm5vdAov U3VidHlwZQovTGluawovUmVjdApbCjY3LjI5MzMwNAoyMTIuNzAzOTMKMTY5LjY5MTc0CjI0MS41 MDM5NApdCi9Cb3JkZXIKWwowCjAKMApdCi9BCjw8Ci9UeXBlCi9BY3Rpb24KL1MKL1VSSQovVVJJ CihodHRwOi8vdG9vbHMuaWV0Zi5vcmcvYWdlbmRhLzgzL3NsaWRlcy9zbGlkZXMtODMtaHR0cGJp cy01LnBkZikKPj4KPj4KPDwKL1R5cGUKL0Fubm90Ci9TdWJ0eXBlCi9MaW5rCi9SZWN0ClsKNjcu MjkzMzA0CjExMy43MDM5Mwo2ODIuODc5MwoxNDIuNTAzOTQKXQovQm9yZGVyClsKMAowCjAKXQov QQo8PAovVHlwZQovQWN0aW9uCi9TCi9VUkkKL1VSSQooaHR0cHM6Ly9naXRodWIuY29tL3BtZWVu YW4vaHR0cDMtcHJpb3JpdGl6YXRpb24tcHJvcG9zYWwpCj4+Cj4+Cjw8Ci9UeXBlCi9Bbm5vdAov U3VidHlwZQovTGluawovUmVjdApbCjY3LjI5MzMwNAo4MC43MDM5MwoxMTAuNDUzNDYKMTA5LjUw Mzk0Cl0KL0JvcmRlcgpbCjAKMAowCl0KL0EKPDwKL1R5cGUKL0FjdGlvbgovUwovVVJJCi9VUkkK KGh0dHBzOi8vZ2l0aHViLmNvbS9wbWVlbmFuL2h0dHAzLXByaW9yaXRpemF0aW9uLXByb3Bvc2Fs KQo+Pgo+PgpdCmVuZG9iagoxMTAKMApvYmoKPDwKL1R5cGUKL1BhZ2UKL1BhcmVudAoxCjAKUgov TWVkaWFCb3gKWwowCjAKNzIwCjQwNQpdCi9Db250ZW50cwoxMTEKMApSCi9SZXNvdXJjZXMKMTEy CjAKUgovQW5ub3RzCjExNAowClIKL0dyb3VwCjw8Ci9TCi9UcmFuc3BhcmVuY3kKL0NTCi9EZXZp Y2VSR0IKPj4KPj4KZW5kb2JqCjExMQowCm9iago8PAovRmlsdGVyCi9GbGF0ZURlY29kZQovTGVu Z3RoCjExMwowClIKPj4Kc3RyZWFtCnicvZZLbxMxEMeNol584o64AxKu348jKA1pi7RsunkgckGg NkJpIYWPwgfmP063eWxQS0gSy2vP7O78vb8ZW5lxJSSn9no+sdJh/HLNZ1wKKVXy0Umbn1i38RAN 19x4F7zMr08XhpYuWJpM+ZpB1wkf8huIzPjxm+mPyWfJr37mtdT99mqr6BN++YqXaLOl4IqCzz8T YZW2PpJKiJKUIOGMTnrJNV24rAwyZVf93sJzL0ZyJtYoF7PMsTZoNFoEba3i1mMCOX/Hul7c2wpj dcuPO99vfmlugjD007y6XE0VrcBaEU1KyfNqnovqK3/BDOuzHrtAH7A2K9hz1sJsxD6gtXFvPH7J q2/8pNpC1eggrAkmbtauAz/A5DHZsV6mtJqd2rWUHRV1cG4lPUuu/8iP0lKkZIOr94Kxiapf/2W6 DtFQKNngp4zwQUWENQlKy+ye/L5Py7+K6c1iLtAXreuwZ7keurkaSjZk71kHnhEq4wzeEtZ4DEcB 4yN6wQa7Xpg1XiTp9QYKW0s9CDyawwBv6LAjbEbakme4doF+AORE9giUL/KWbCMZXaSiy/o7Z62V 2PT1+wOtcEYchHRTCLVbAG431/XTXOX9jLoP1B2koEBrsxPMCDrVfo+VO0fucIoYi0OyucI9Yg/q QNgbQrm6e6jhFjvNaGkcAe8oV3wL/VOu7jLX/j6Q2yRszMgbq9sfcq3cYZA3hYB2kNGe49pm7+5q /DRXfwF7AGuIu5SaEY6e8zwOdw4+KRFdAvjmGh/9b4DaH7Ya940KZW5kc3RyZWFtCmVuZG9iagox MTMKMApvYmoKNTg2CmVuZG9iagoxMTQKMApvYmoKWwpdCmVuZG9iagoxMQowCm9iago8PAovQ0EK MS4wCi9jYQoxLjAKPj4KZW5kb2JqCjEyCjAKb2JqCjw8Ci9DQQowCi9jYQowCj4+CmVuZG9iagoz MAowCm9iago8PAovU3VidHlwZQovSW1hZ2UKL0ludGVycG9sYXRlCnRydWUKL1dpZHRoCjkzMAov SGVpZ2h0CjU4NgovQ29sb3JTcGFjZQovRGV2aWNlUkdCCi9CaXRzUGVyQ29tcG9uZW50CjgKL0Zp bHRlcgovRENURGVjb2RlCi9MZW5ndGgKMTE1CjAKUgo+PgpzdHJlYW0K/9j/4AAQSkZJRgABAgAA AQABAAD/2wBDAAYEBQYFBAYGBQYHBwYIChAKCgkJChQODwwQFxQYGBcUFhYaHSUfGhsjHBYWICwg IyYnKSopGR8tMC0oMCUoKSj/2wBDAQcHBwoIChMKChMoGhYaKCgoKCgoKCgoKCgoKCgoKCgoKCgo KCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCj/wAARCAJKA6IDASIAAhEBAxEB/8QAHwAAAQUB AQEBAQEAAAAAAAAAAAECAwQFBgcICQoL/8QAtRAAAgEDAwIEAwUFBAQAAAF9AQIDAAQRBRIhMUEG E1FhByJxFDKBkaEII0KxwRVS0fAkM2JyggkKFhcYGRolJicoKSo0NTY3ODk6Q0RFRkdISUpTVFVW V1hZWmNkZWZnaGlqc3R1dnd4eXqDhIWGh4iJipKTlJWWl5iZmqKjpKWmp6ipqrKztLW2t7i5usLD xMXGx8jJytLT1NXW19jZ2uHi4+Tl5ufo6erx8vP09fb3+Pn6/8QAHwEAAwEBAQEBAQEBAQAAAAAA AAECAwQFBgcICQoL/8QAtREAAgECBAQDBAcFBAQAAQJ3AAECAxEEBSExBhJBUQdhcRMiMoEIFEKR obHBCSMzUvAVYnLRChYkNOEl8RcYGRomJygpKjU2Nzg5OkNERUZHSElKU1RVVldYWVpjZGVmZ2hp anN0dXZ3eHl6goOEhYaHiImKkpOUlZaXmJmaoqOkpaanqKmqsrO0tba3uLm6wsPExcbHyMnK0tPU 1dbX2Nna4uPk5ebn6Onq8vP09fb3+Pn6/9oADAMBAAIRAxEAPwD6pooooAKKKKACiiigAooooAKK KKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooo oAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiig AooooAKKK5Lxj8RvCfg4Fdf1u1t5wM/Z1bfKf+ALkj8aAOtorwW4/aW0S4nMfh3w3r+sY/iihC/p yaiH7Q1/GN918N/EscWM7tjdPXlBRYD3+ivFtB/aQ8D6hcLb6mb/AEacnDC8gO1T7lc4/KvW9G1f TtbskvNIvra9tW6S28gdfpkd/agC9RRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFA BRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAF FFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUU UUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRR QAUUUUAFFFFABRRRQAVV1TULTStPuL/UrmK1s7dC8s0rbVRR3Jq0SACScAdSa+Y/FV7ffHn4hy+H NJuJbfwJosoN7cxcfapAcceuTkL7Zb0oSuDdizqnxA8Z/F7VLjSPhkkmj+HImMdzrcwKs49FPUcd h83qRXW+CfgL4U0Mi61O3fXtUY7pLrUPnUt3ITp+eTXp/hzQrDQdJttO0u1jtrK3QJFEg4A9T6n1 PetcDHSqukTqyhZ6Zb2kKxW0MUEajCpEgVR9AKsG2UjqanopczHyo5zxF4O0PxFbmHWtKsr6MjH7 6EFh9G6j8DXjWv8AwS1TwrePrXwj1m60q+X5m06aUtDMP7oJ4/Bs/UV9EUjKCORTv3C3Y8f+Evxj XxDqR8MeMrT+xPF8J8swSAqlwR/cz0Pfb37E17DXlvxq+Flp460r7TY7bPxJaDfZXq/K2RyEYjnB PQ9jzVb4AfEW58Vabd6D4mBg8WaMfJu0cYaZQceZj1zwffB70mgTPW6KKKQwooooAKKKKACiiigA ooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACi iigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKK KACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAoooo AKKKKACiiigAooooAKKKKACiiigAooooAKKKKAPJ/wBpXxfN4Y+Hctrppb+1dYkFhbBfvDd94j3x x9SK3Pg34Jt/A/gbT9LjUfaiomu5McvMwyx/DoPYV5v8TVHij9pjwVoMmHtdLtjfyIehbJbp/wAA X86+gkGFFPZC6jqKKKQworhvjF46/wCEC8JG/t4Bdancyra2Vuejyt0z7DrXmWqw/G3RNHm8TT+I 9KvGgi+0TaMtqNoUDLKG2gkgf7VJPd9F1BrZdWfQ1Fc38OfFUHjXwZpmvWyeWLqPLx5z5bg4ZfwI NdJVSi4uzFGSkroCMjBr5z+PNjL4A+Ifh34l6QpSIzLZ6oicCRTxk/Vcj6ha+jK4b43aEniL4W+I rFkDSC1aaLPZ0+YH9KEDO0tZ47q1huIGDwyoJEYd1IyDUteafs46y+t/B3w/NKS0kEbWrEnJPlsV GfwAr0ukMKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKK KACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAoooo AKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigA ooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigDwDTtj/tg6t5r HemkKIwf9xc/1r3+vnzxq/8Awjn7VvhXU5cLbaxYmzLE4G/5l/qlfQdNiQUUUUhnhX7SJJ8TfDZJ CfIOsAsD0z8uP617J4gSM6FqIlwI/s8m4n02nNcT8cfA0/jfwtFDps0cGr2M63dlK/3RIv8ACT2B 9a4LUda+MniTRZfDUvhOz0uS4jNtPrDXAKbDwzKoPUj61Nm4OC3u/wAUv8g0U1N7WX4N/wCZvfsl 7v8AhUkYP+rF9ceX/u7v8c17NXN/Dvwxb+DvB2maHasZEtItrSEY3ueWb8STXSVrUactCKadtet3 9+oVQ8QqraBqQfGw20oOfTYav1yXxb1hdB+GniPUHIBjspFXPdmG0D8zUFnnv7IR/wCLTAA/KL6b H5ivb68p/Zi0ptK+DehrIMPch7rp2diR+mK9WpsSCiiikMKKKKACiiigAooooAKKKKACiiigAooo oAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiig AooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKAC iiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKK KKACiiigAooooAKKKKAPF/2pfDVzqfgi317SlP8Aafh+4W9jKjJ2Ajd+WA34V6F8NvFdt418FaXr loR/pMQ81Ac+XKOHU/Q5rormGO4gkhmRZIpFKOjDIYEYINfM2m3Vz+z98R57K9WV/h9rku+GYAsL ST3+nQ+q4PamI+naKitLmG8tYrm1lSa3lUPHIjblZTyCD3FS0hiMoYYNRiFAc4qWii4BRRRQAV8+ ftMapL4l1rw58NNGfdeancJcXu3ny4gfl3endv8AgI9a9N+LHxE0v4deGpNQ1B1kvZAVs7QH5p3/ AKKO5/riuB/Z/wDBOpm9v/HvjIM3iPWsvGjjm3hbkDHYkYGOygDuaaQmz2fRrGHTNLtLG1ULBbRL DGAMYVRgfyq7QBgUUhhRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUU AFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQA UUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABR RRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFYn i/wzpnizQ7jStbtUurOYco3BU9mU9mHY1r3FxDbRGW5ljhjHV5GCgfia5TWPiX4K0fjUPE+lRn+6 twJD+S5NC0A8RgPjj4B3TpFDP4m8AliwA/1toP8A2X/0E+1ex+C/ix4N8XWazabrVtDMcbra7cQy qT2wx5/DNcnq37QvgCOR7e0nvtUmIICWlozB/b5sV4n8SYNH8Zaff6h4b+Fuvaddxo0zaht+zxgD kuyY2sMZPGD709GLVH2kCCMg5Bor87/hdq3xGvdWh0jwLqureYTuMSTnyYx3Zw2VA9zXVXXjz4p3 EevrpnjCbUl0eTbcm0RQ3l5IMq/KCUDDBI6ZB6Giw7n3DdXEFpA891NHBCgy0kjBVUepJ4FeM+PP j9o2nXJ0jwVbyeJtfkOyOO1BaFW92H3sei/mK+RrDxJP4l8T2H/CwNd1e60fzQbpzM8rLH32jnHp 0r7K+EkvwvtbdYfAl3pEczABvnxcv7Ev8xoSE2c18P8A4U6xrviNPGXxXnF/rOQ1tp5wYbUZyMjp x2Ucdzk177GgRcUIgQYAp1DYJBRRRSGFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUU UUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRR QAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFA BRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUVU1DU7DTk36he2tqvrPKq D9TXHav8XvAWkllu/FGnF1GdkL+aT/3yDQB3lFeK3P7RvhGRmj0Ox1vWZgcbLWzPP51XPxa8e6uA fDPwv1IxN92XUJfKx7kYH86APcqK8Nz8eNbOP+Ka8Pwt0YDzXX6/eH6UL8J/iBq6n/hJvilqSq33 otOi8pT6jgr/ACoA9rvL21so/MvbmC3j/vSyBB+ZrkdY+KvgbR2K33ijS1cfwxzCU/8Ajua4m0/Z w8IlxLrV/rusTHljdXhAY/8AAQD+tddpPwe+H+lbfsvhXTWZejXCGc/m5NAHLXv7RnglZGi0ldV1 a4HSO0tGOfxOKp/8Lj8YasP+KY+F+tTD+/fN5A/l/WvZ7HTLCwjCWNlbWyDosUSoB+Qq3QB4abz4 76yR5On+G9CgfvI3myL+p/lS/wDCsfiZrBb/AISL4o3Nuh6ppkHlj6ZGyvcaKAPEbX9nLw3Kwk8Q a34h1mb+Iz3e1W/ADP611WkfBX4eaVtNv4XsZWH8V1un/wDQyRXolFAFDTtF0vTYxHp2m2dqg6LD AqD9BU+o2kd/p9zZz58m4iaF8ddrAg/oasUUAeM/EHSYPhd8I7vSvh3oly+oX3+io1tC0spLA7pZ GAySFzj3IxXyz8HZ/Efhf4gw6jY6NqV0tlL9n1O3jtmciJ8h0cY4OATg9xX6GV4h8Bf+So/GD/sL R/8AoU1AHSeEfhH4c8O+ONR8TaTAqW+o2vlfYJIwY4mZgzMoPQEAfL25+lO8UfBHwF4iZpZtDjsb pufP09jbsD64X5SfqDXpNFAHhP8AwqXxz4V+b4f/ABBuzbLkrY6qvmxgf3QeR+QFA+I3xO8J5Xxr 4E/tK1T717oz7uP9zn+le7UUAeVeGvj34E1pxDcak+k3mQrQahGYiG9N3T9a9Nsb201C3WewuYLq BukkMgdT+I4rG8S+CfDXieIpr2h2F7kYDyQjePow5H4GvMr/APZ70uyuTd+BvEOt+GbvqBbztJH9 MEhv/HjQB7dRXhGPjh4PA+bSPGVinUY8mcj0H3efzqxZ/tBafp9wtp478N614bus7S0sJkiLezYB I/CgD2+iuc8M+OPDHidQdB1ywvGP/LNJQH/75OD+ldHQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQ AUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFAB RRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFByQcHB9aACivFvi d4b13w14V1XxZbePvELapp6G4WJ5EWzcA/cMAXHQ4zk1d8S+J9b1seBfD2m3Umj6j4igN3e3MKgy W8KRhmCZ6MScA9qSd9Fv/n/wzE2lvtr+Fv8ANWPXKK8ftG1b4efEvw9ok/iDVtb0HX0liX+1JBNN b3CAMCJMA7SDjFZvxX1DxxZeINBvZNSj0rRH1yCyhsrJyZLmNif3kr8YBAxsHHPNNauKXV2/GwN2 Tv0V/wAL/oe5UUUUDCiiigAooooAKKKKACiiigAorL1PxFoulbv7S1fT7Qr1E1wiH8ia4nWPjl8P NKVvM8R29wy8FLVGlP6DFAHpVFeIzftEaPdNt8NeGvEmtZ+60FptU/jz/Kox8RfirrB26F8NRZI3 3ZtRucDHuPloA9yorw0aT8dtaB+1a94d0BD1W2h8wge2Q386D8E/EerqP+Eq+JviC7U/ehtiYk/D 5iP0oA9j1LWdL0sE6lqNnaAf8951j/ma4vV/jR8PtL3ifxNZSOnVLfdKf/HQRWBpv7OngK2dXvrf UtVkH8V5eMcn6Jtrs9H+GfgrRyraf4X0mJ16ObdXb/vpsmgDgbj9ozw5Odvh7RfEGtt0H2azIH68 /pUR+J/xJ1f/AJF34Y3MMT/dm1GfYB9VwP517bBbQW6hbeGOJRxhFCj9KloA8NW1+PGtEia/8NeH 4z0MUfmsB+O+j/hTvjPVlz4n+KWtSA/ehslMSH/x4D9K9yooA8Ysf2cfA8bB9UbV9Wk6k3d62Cf+ A7f512Oj/CnwJpG02PhbSw69HlhErD8Xya7aigCC1srW0ULa20ECjgCOMKB+VT0UUAFFFFABRRRQ AUUUUAFFFIxIUlRk44HrQ9AForw59Q8b2/xl8IJ4k1SO2s9SW6I0ixY+TEqLxvf/AJaMc56YGOK6 j4k6tql94w8PeC9D1GbS31JJbq9vbdQZY4Ix0QnhWYnGe1LVpW3f6f8ADCbs3foek0V5DpUuq+Av iho3hy617VNb0PXLeUwtqcgmmgnjwSPMwMqQeh6VmeM7/wAcWnxG8HT6nqcWn6Re6ubWLS7Fid8Q UnfM/G4nH3egprVxt1/zsJvlTv0/yue414f8Bf8AkqXxg/7C0f8A6FNXuFeH/AX/AJKl8YP+wtH/ AOhTUFHuFFFFABRRRQAUUUUAFQXtnbX0DQ3tvDcQsMFJUDqfwNT0UAeWeJfgN4C1uRpotKbSro8i bTZDCQf93lf0rnB8NviX4SG7wR49bULVB8tjrCbxjsoY7sfhtr3aigDwkfFbx94WBXx78P7mWFOG vdIbzEPvt5wPxrqvC/xx8BeIWWKPWo7G5J2+RfqYWz6ZPH61zXiq+8cW3xK8GzavqUVhpN9qrW0e lWTEhogpO6Z+NxP93GBXo/ij4eeEvFKka5oFhcyEY83ywkg+jrhv1ojqr/10/wAxN2ly/wBdf8jp ra4huoFmtZo5oXGVeNgyn6EVJXh1z8AV0iZrn4feLtb8Oz9RD5pliPoMZBx9c1EdR+N3g8gXunaV 4xsk432x8mc/gMf+gmgZ7tRXiumftC6BHdLZ+L9J1fw1eZ2kXluSme+COce+K9P8O+LNA8SxCTQd Ysb8HnEMwLD6r1H5UAbdFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRR QAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFA BRRRQAUUUUAFFFFABQxCgliABySaKRlDqVYAqRgg9xQ/IDwzWfEOl/FDxQdOn1jT7LwRpNwDcGa6 SN9TuEOQgBOfKU9T/Ea0fiBf2ej/ABT+H/ihrm3Xw+8Vxpz3aODFGzr8mWHABIxnPauyb4X+BWYs 3hDQixOSTYx8/pW7/YOjRaF/ZB02xXR0Tb9kMK+SF9NuMYpL3Urbr8dLP8NuwpLmbv1/Dt+Or7nm finUbTxb8ZPA9loN1Bfx6R5+oXsttIJFhUqFQFhxknt1qH9oHWdLaPwpbrqdiZ7fxDatNH9oTdGB uyWGcgD3rsbfVvh/4GtJIrW88PaNATueOB4o8n1KrzXmnifx78CTqM9ze2Gk6tfTsXkkh0zzmkY+ rFeSfrTWnLbo7/O6f/ABq/NfqrfKz/zue82N5a39utxY3MNzA3AkhkDqfxHFT14BpHxlsrOyTTfh /wDDbXZbVSTEkNoLeEk85GAcZNXT4v8AjTrQP9keBdM0hezajc7iPwyv8qb8hrzPcqK8N/4RP416 0o/tTxxpekRN96OwtgWX6HaD/wCPUf8ACgpdTkD+K/H/AIn1b1VZvLH6lqQHq+q+LfD2kqx1PXNN tdvUS3KA/lnNcTrHx6+HWmD5vECXR9LSJ5f5DFQ6V+z98O7Bg8mjyX0vd7u5kfP1GQP0rttH8E+F 9Fx/ZXh7SrQjvFaoD+eKAPMH/aDtL19nhrwd4l1YnhHS22Ifx5xTT46+MOsnbovw8tNMU/dk1K5z +Yyte4RokahY1VVHZRgU6gDww+HvjjraZv8AxXomho3WOzt97D6EqT/49S/8KK1TVcHxZ8R/EmpK fvRQyeUvuBksP0r3KigDyLTP2ePh9ZuJLnT7vUZR/HeXbt+ikD9K7XR/h94Q0YqdM8NaTbsvR1tU LfmRmuoooAZFFHCu2GNI19FUAU+iigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACii igAoPA5ooIBBB5BoA8V8d6/o0nxs+H06avpzQQR3olkF0hWMlFwGOePxq144v7bRPjN4L8S3dzDH ol5ZT6ebwuPKV2wyZboAexzXYP8ADDwK7sz+ENCLMckmyj5P5VvzaFpM+jLpE+m2cmlqgjFo8KmI KOAApGMUloo903+N7/mKS5m+zX5bHmOtaha+LPjj4Rh0K6gvrfRLe4u72a3cOkRcBUUsOMn0qt8Z Nc0l/Gfw7CarYE2utEzgXKfuh5ZGW5+Xn1r1bQtB0nw/am20PTbPT7cncY7WFY1J9SAKxLr4beCb u5luLrwpoks8rl5JHsoyzsTkknHJJprTlt0d/wAb/wDABrm5r9Vb8DqLS5gvLdLi0ningcZWSJwy sPYjg14p8Bf+SpfGD/sLR/8AoU1ezaVptlpFhDY6XawWlnCMRwQIERB14A4FeM/AX/kqXxg/7C0f /oU1D8gV+p7hRRRQMKKKKACiiigAooooAKKKKAPGfi7rukP46+HW3VdPP2bV3M+LlP3Q8sj5ufl5 9a9htLmC8t0ntJop4HGVkicMrD2I4Ncvc/DXwTdXEtxc+E9ElnlYu8j2UZZmJySTjk10el6dZ6TY Q2OmWsNpZwjbHDCgREHoAOBSirRs+9/y/wAhNe9den5/5lqiiimMp6npdhqtu0Gp2VtdwsMFJ4g4 I+hFeYeIv2fvA+qStcada3Wh3h5E2mzmMA/7pyo/ACvW6KAPCf8AhB/i34S58J+NYNetEA22msR/ Mfbcc/8AoQpV+Mvirw1hPiF8P9Rto1OGvNO/fRH1bHYf8Cr3WkZQylWAIPBB70Aef+FfjJ4E8TFE sNftoZ36Q3f7h/8Ax7A/Wu/ikSWNZInV0YZDKcgj2Ncb4q+F3gvxTubWPD9k8zdZ4k8qT/vpMGvP 5fgXqWgSPP8ADnxxrGjN1Frcv50JPoenH1BoA90orwn/AISP40eEDt1zw5p3iqyU4+0ac/lykD+I qP8A4kVpaJ+0L4TuLhbTxFBqXhy9zgxahbkAe+4dvqBQB7JRWZoXiDSNft1n0XU7O+iI3Zt5lfA9 wOR+NadABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRR QAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUVFcXENtGZLmaOGMfxSMFH5mgCWiuR1j4leC9HONR 8TaVE3oLgOfyXNcbf/tEeBIZWh0+fUNUnHRLO0Zs/QnFAHsFFeHf8Lr8Raqp/wCEW+GXiC79Gux5 C/Xof50h1j4661g2egeHtDhb+K5l8x1/8eP/AKDQB7lTZZY4YzJK6xovJZjgD8a8QPw8+LGstnXv iWtih6ppdttx7ZGynQfs76RdP5niXxR4l1mT+IS3WxT68YJ/WgD0jWPiB4R0cE6l4k0qDHUG5Un8 gSa4rVf2hvh9ZSmKDUrjUJf4VtLZ33fQkAVo6P8AAz4daVgxeG7e4YfxXbvPn8GJH6V22meG9E0q MJpukafaqOght0X+QoA8jPx01PVCU8K/DrxHqD/wtPH5KH8cGmjxL8b9aXOm+EdE0WMn719PvZfw 3D+Ve5gYGB0ooA8NPgf4xaywOs/EO002I9U022+ZfbO1f50q/s+W2oSeZ4p8aeJ9Yk6nNx5an8Du P617jRQB5do/wF+HWmEMNAW7kHV7uZ5c/UE4/Su20jwl4d0ddulaHploP+mNsi/yFbdFACKoVQFA AHQCloooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKK KACiiigAooooAKKKKACiiigAooooAK8P+Av/ACVL4wf9haP/ANCmr3CvD/gL/wAlR+MH/YWj/wDQ pqAPcKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACs3WtC0nXLZoNZ02zv oWGClxCrj9RWlRQB45rv7PXg+6na60CTUfDt9ncsun3DBQf905/Qisw+GfjN4QOdA8UWHimyU8W+ qR7ZSP8AeJz/AOP17tRQB4XH8ctW8PusXxF8C6vpH967tV86HHdu2B+JrvfCvxW8FeKAg0rxBZmZ hnyZ28mQf8BbFdrJGkqFJFV0PBVhkGuD8VfB/wADeJ2eTUdAtY7huTPa5gkz65XGfxzQB3ykMoKk EHkEd6K8KPwW8S+GmaT4dfEDU7FN25bPUf30P49v/HaQeNPi94SO3xR4OtvEFouc3ekvh9o7lRnn 2wKAPdqK8i0D9oHwXfzC21eW80C+/ih1KAx7fqwyPzr1DStW07V7cT6VfWt5CQDvglVxz9DQBdoo ooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKrapcNaaZeXKAFoYXkAPchS aAPDPip8U9fvvF8ngn4ZJEdRgH+n6m4DJbeqjPGR3PPPAGa5VPhr4gu/32sfEPX5rxuXaKVgv0GW /wAKZ+zvahvCV/rExEl9qd9K80p5ZgD0J+pY/jXqlAHmH/CrNQ/6H3xL/wB/j/jR/wAKs1D/AKH3 xL/3+P8AjXp9FAHmH/CrNQ/6H3xL/wB/j/jR/wAKs1D/AKH3xL/3+P8AjXp9FAHmH/CrNQ/6H3xL /wB/j/jR/wAKs1D/AKH3xL/3+P8AjXp9FAHmH/CrNQ/6H3xL/wB/j/jR/wAKs1D/AKH3xL/3+P8A jXp9FAHmH/Cq9QbgePPEp/7bH/Gsu5+BkNzkXvinWJyevmYP8zXo/ivR9O1e0jTWr2a3sUPzot2b dJCegZgQT9M1ynw7g+weMtdsNDubi58LRQxtE0srSpHOT8yxueoxyeTQtXYHornMj9nvSQcjXL7P /XJK07T4M/YwBaeLtZgx08sKv8q9aooA8xPwv1IjB8feJiP+u5/xpP8AhVmof9D74l/7/H/GvT6K APMP+FWah/0PviX/AL/H/Gj/AIVZqH/Q++Jf+/x/xr0+igDzD/hVmof9D74l/wC/x/xo/wCFWah/ 0PviX/v8f8a9PooA8vb4Y61BiXT/AIheIYrpDlHeViAfwYVueAvif4l8JeK7Lwp8T3jura8Pl2Os oMBm6AOeMjtk8gnnPWu0rzr4+adFe/De9uHAE9jIlxDJjlW3AHH1BoA+mqKwfAV7LqPgrQry5O6e ayhdz6koMmt6gAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiii gAooooAKKKKACiiigDzH42fE8eArG0sdKtf7Q8S6kdlla9QO29gOcZ6DufxryVPB3jzxKRfeMfHO o2tw+W+x2DFUiz24IUfgD9atXDDW/wBqDxNPeDedItI4rUN0T5Uyfzdj+Nek0AeYf8Ks1D/offEv /f4/40f8Ks1D/offEv8A3+P+Nen0UAeYf8Ks1D/offEv/f4/40f8Ks1D/offEv8A3+P+Nen0UAeY f8Ks1D/offEv/f4/40f8Ks1D/offEv8A3+P+Nen0UAeYf8Ks1D/offEv/f4/40f8Ks1D/offEv8A 3+P+Nen0UAeYf8Ks1D/offEv/f4/41Usfgxc2VxeTweMtdiluZN8skPyNJ6Fzn5jyefevRfFjMnh bWGRirCzlIIOCDsNeY/DvSfh9qFtozw6gs2vCKOWSL+0Zg3mjBPylsHntQtXb+uv+QPRGp/wqzUP +h98S/8Af4/40f8ACrNQ/wCh98S/9/j/AI16eeTzRQB5h/wqzUP+h98S/wDf4/40f8Ks1D/offEv /f4/416fRQB5h/wqzUP+h98S/wDf4/40f8Ks1D/offEv/f4/416fRQB5h/wqzUP+h98S/wDf4/40 f8Ks1D/offEv/f4/416fRQB5efhZqODjx74kB7EzE/1psHif4gfCS5hu9X1OTxV4S3hJzLkzQKeM gnJHtyR9K9SqvqNnDqOn3NlcoHguI2idSOCCMUAenaBq9lr2jWeq6XMJrK7iEsTjup/kfar9eF/s iXkz+ANV02V2aLTNUlt4iT0UgN/MmvdKACiiigAooooAKR3VEZ3YKqjJJOABS1wPx61GfSvhB4ou bVmSb7IYgynBXeQhI/BjQB5N4m+JHi34keIL3SfhvdDSPD1m/lz6wR88x/2D1A9AOT1JFUE+F2rO u65+IHiJ5jy7LKQCfoWNdJ8J9Lh0n4eaJBAqqZIBPIQPvO/JJ/QfhXW0AeYf8Ks1D/offEv/AH+P +NH/AAqzUP8AoffEv/f4/wCNen0UAeYf8Ks1D/offEv/AH+P+NH/AAqzUP8AoffEv/f4/wCNen0U AeYf8Ks1D/offEv/AH+P+NH/AAqzUP8AoffEv/f4/wCNen0UAeYf8Ks1D/offEv/AH+P+NA+FuoA 5Hj3xKD/ANdz/jXp9FAHkOpfBRNU/wCQl4r1i775mCufzNRWPwIt7FxJp3ibV7Zwc7oVCn9DXsdc 34j8E6F4jvlu9Wt7iSdUEYMd1JENo9lYCgDlT8KtRHXx34mH1mP+NJ/wqzUP+h98S/8Af4/40vwr 0Sxi8T+ItU0dZ49Jif7BapJO8okZf9Y+WJ78fhXp1HRB1aPMP+FWah/0PviX/v8AH/Gj/hVmof8A Q++Jf+/x/wAa9PooA8w/4VZqH/Q++Jf+/wAf8aP+FWah/wBD74l/7/H/ABr0+igDzD/hVmof9D74 l/7/AB/xo/4VZqH/AEPviX/v8f8AGvT6KAPMP+FWah/0PviX/v8AH/Gj/hVmof8AQ++Jf+/x/wAa 9PooA8tfwB4v0g/a/C/xB1cXqciO8ctHJjseSMfUGvRfgn8Vb3xLqN34W8ZWqWPiyxUkhRtS5QdW Udj0PHBByPSrteYfEJTpPxW+Huu2fyXb3otJCON6EgYP4MR+NAH1JRRRQAUUUUAFFFFABRRRQAVn +If+QBqf/XrL/wCgGtCqHiH/AJAGp/8AXrL/AOgGhAz5v/Z5/wCSZ23/AF8zf+hV6VXmv7PP/JM7 b/r5m/8AQq9KoAKKKKACiiigAooooAKKKKAOa8Z6l4Yt4obLxf8AZvss37xRdxFocqe5xgHnjNch 4Hayb4jXP/CEFv8AhFfseboRhhbfaM/L5WeM4644r1KRElQpKiSIequoYfkaI0SJAkSJGg6KihQP wFC0dweqsOooooAKKKKACiiigAooooAK4f42f8kv13/rmv8A6EK7iuH+Nn/JL9d/65r/AOhCgD2X 4X/8k78N/wDYPh/9BFdRXL/C/wD5J34b/wCwfD/6CK6im9xLYKKKKQwooooAKKKKACiiigAooooA KKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKDRQaAPl7R/+TlfiD/1yT+UdemV5 no//ACcr8Qf+uSfyjr0ygAooooAKKKKACiiigAooooAq6pe2+nafPd3u4W0S7pMIX4/3R1ry34h6 v4Z8UaHHpnhZrTUNdlnjNobKH54GDAl2YAbQBnrXrlRxQQwszQwQxs3UpGFJ+uBR1D0FhVkhjWRt 0ioAzepxyafRRQCVgooooAKKKKACiiigApV6ikpV6igDlv2RP+Rc8W/9hyT/ANAWvfa8C/ZE/wCR c8W/9hyT/wBAWvfaACiiigAooooAK80/aR/5Ir4m/wCuKf8Aoxa9LrzT9pH/AJIr4m/64p/6MWgD mPAn/Ik6D/15Rf8AoIrdrC8Cf8iToP8A15Rf+git2gAooooAKKKKACiiigAooooAK5f4k63JofhW 4a051G7Is7NB1aV+Bj6cn8K6imvGjlS6I5U5XcoOD6j0NJq+jGnbUyvCWix+HvDen6XDyLeIK7f3 nPLN+JJrXooqm7u5KVlYKKKKQwooooAKKKKACiiigArzL4tf8jb8PP8AsLp/6Etem15l8Wv+Rt+H n/YXT/0Jaa3Bn1EKKBRSAKKKKACiiigAooooAKoeIf8AkAan/wBesv8A6Aav1Q8Q/wDIA1P/AK9Z f/QDQgZ83/s8/wDJM7b/AK+Zv/Qq9KrzX9nn/kmdt/18zf8AoVelUAFFFU9au/sGjX94OtvbySj/ AICpNJuyuNK7sV9E1qDWJdQFpHJ5VncG2MrY2yOoG7b7AnH1pbDX9J1C9azsr6KW6VSxiAYNgHBP IGaxfhPAIfh5orZJe4iNy7E8szksT+tXb5mbx9pW4k4sJ+p/2kqmrS5X/WglqrnQUVk+I9YTSLaD mD7RcyiGETyiOPd1JZj0AHNYlz4km0q2e8vtZ8P6hbx4aWK1cRSIvcrmRt+PTikB2NFVrqaQ2Qms mtzkBw8zFUCHndke1c/ba7cQ6rY21xqGk6nFeSmIGx+VoWwSNw3tkHGM8UdbB0udTVL+1bAaqNMN 1GNQKlxAc7ivUkcYNVLy+u7jUptO0kwJNAivPcTqXWPdnaoUEFicE9RisaabUl8deH7XU0hk2w3L pcwAqj/KAQUJJU/iaFuJuyOxormNR1931a50+x1DSbE2u0TTXzgkuRnase5SeCMnPepdI8QCXV00 q7u9OuriSJpYp7KUFXC43ArklSM56nIoWo3odFRXL6pqus2Hie0sIYba9gvY5XiRYzG0O3by7liC vJ6LmtnTV1RJJBqctlNGRlDbxtGVP90gk5+uR9KOlwL9Z3iHVY9D0a51KeGaaG3AaRYQCwXOC3PY dTWDY67qeowG4hutHtpjvEel3GfPJBIAZtwwTjsp+tbdstxqnhkJq9sILm5tStxAOiMykFaTuk2N b2ZowyJNDHLEweORQ6sOhBGQafXG/CC8e8+Hul+axZ7ffbEnqRG5UfoK7KqkrPQlbahXD/Gz/kl+ u/8AXNf/AEIV3FcP8bP+SX67/wBc1/8AQhSGey/C/wD5J34b/wCwfD/6CK6iuX+F/wDyTvw3/wBg +H/0EV1FN7iWwUUUUhhRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUU AFFFFABRRRQAUGig0AfL2j/8nK/EH/rkn8o69MrzPR/+TlfiD/1yT+UdemUAZeta1BpU+nQSRyzX F/cC3hjjxnOCSxz/AAgDJrUrhriT7b8ZrSB8lNN0p50HbfI+3P5Ct5r++h8XwafI9s9jcW0k6BYi siFSowW3EEHJ7ChbLzv/AF+APf7v6/E26KwY7/UYvF66bcyWstnPayXEflwskibWUAEliG69cCqN lqPiC91rWNOiOnxJZSoFvHgYqQyhgmzfksM8tkD2oHY6maVIIXlmbbGilmbGcAd6g0zUbPVLRbrT rhLm3YlRImcZBwRz3BqroGpS3kl7b3Sot3Yz+TK0edj5UMGGeRkEcdq5nwdLrFzaalFp32W1hi1K 6BuLqNpTKxlY4VQy4Az1J69qdhdDuqzNO1/SdSvHtLC+imuUUu0QDBgoOCeQOMmo9F1Sa5u7zT7+ KOLULTaziNiUkRs7XXPIzgjB6EVUumZviLYbiT/xK5up/wCmsdCV3b+tg6HRUVS1jUItL0+W7mVn CkKqL1dicKo+pNU5P7fiD3BfT5VVd32NYmD5x90S7sZ/4DSA2aKw5vEEcmn6ZNp0Ynn1NgttG7bQ OCWLHsFAOfpVfUpPFNjAJbcabqRaVFMUcLxNGhbDMPmbdgfSnbWwdLmvdarYWl9bWV1dRxXVycQx tnMh9AcYzV2ua8c3MNmuiz3U6Q20WpRu8kjbVUAHkmpdJu9Y1O9a8je0h0NiDAklu3nypjls78KD 1HHTtSWom9ToKK5i/wBfeXVbqxsdR0iwFoQk0184Ys5GdqpuXgAjJzUujeIBPq/9lXV1p9zctCZo p7KUMkiggNlckoRkcZPB60LUZ0VULHV7HUYbqTTJ1vDbErIkeQwcDO3nHJ/rWdbXuq6xELvSZbG2 sSxERuImladQcbuGXaCQcdap+Cbi4n13xU95B5Fwt5GrIG3DiFeQfQ9RTSvf0/yDY2vDusW+vaNb 6lZh1imBykmN0bA4KtjuCMVpr1FcL8On+za/4z0pSfJttS86NeyiVQxA/HNd0vUUuz7h3Ry37In/ ACLni3/sOSf+gLXvteBfsif8i54t/wCw5J/6Ate+0AFFFFABRRRQAV5p+0j/AMkV8Tf9cU/9GLXp deaftI/8kV8Tf9cU/wDRi0Acx4E/5EnQf+vKL/0EVu1heBP+RJ0H/ryi/wDQRW4zBFZj0UE/lRsB jJ4jsW1DVrZt6RaWE+03JGYwzDOwYycgYzx3rTsbu3v7SK6spkntpRujkTow9RXG/CBjP4SutSYk z6hfXNw7HqfmIH5AAUeBpdbvPC9kbH7HZ20e9FNzE0rTYdsnCsNoz06n2p/8AV9fvO5orI0fVJtQ gvYmgjh1OzcwywlyU3YypDYztI5zjNZGoa/d6YGuZtS0S8iR1WSztziZQWAJDbzkjOcbRSH5nXUV Q1vUl0qwNwY2lkZ1iiiXgu7HCj25PX0rL1J/FNrZXN1af2XeTLGWSyEToS3oJNxz/wB8jPtQBran qthpYhOo3UdsJm2Rl84ZvTIHHUdau1zPjiVx4KmkuMRMTbtICcBT5iE5+lOtdS1PWr/z9Dnsk0NB t+0TW7O1wwPzeWQ4G3tuI6+tAdLnSUVj32oXU2qPpmk+QtxHEJpp51LpECcKNoILE4PccVlS6rr0 XizTNEkFgqTwyXD3YhYrIEIyqrv+Rue5YULUHodbRXN+I9U1XStW0wWscF3aXs3kC2WIiUHaTu8z djGR/d6Vo2Z1aKZpNTlsDa7CxWFHVoiO2SSHHvhfpR5h5GnRWDaXWravbQX2nTWVpZy/PGk8DSvI nZshlC5HbB6/hVmwv59RtL2KIR2uo20hhkDqZER8Ag4BBZSCCORRsBq0Vg6Hfajq/heG6WW0g1By 4LmFmi+Vyv3NwPIH96qT65qT/D2TWojaLfxQPMwaJmjbYWyAu4EZx68UPQFrax1dFctLqmt22i/2 3eR2MdqkInlsQjGVV6n95uxkDnG32z3rY1XUxZ21s0EfnXF26xW8ZO0MxGeT2AHJptWFcl1XVLHS bdZ9TuUtoS20O4OM/gOKr3Gt29vr9jpMscqyXsTywTceW5XGUz13YOfpXO+OJNds/CerPcmzvbd4 SrJbRNE8YJHPLEOB36VX+KLmy0bw5qkfE1jqVsVYf3X+Vh+INJbr1/MP8jvq8y+LX/I2/Dz/ALC6 f+hLXpx68dK8x+LX/I2/Dz/sLp/6EtNbjZ9RCigUUgCiiigAooooAKKKKACoL6BbqyuLdyQs0bRk jsCMVPRQB8pfAm6bSV1vwZqX7rVdKvZCIm4LoTyV9RkZ+jCvWKr/ABe+EUPi7UIde0G9bRvE9vjZ eRg4lA6B8c/j/OuAGmfG2w/0c6foOpBOBcGVFL/huX+VO3YV+56PVbVLQX+mXlm33biF4j/wJSP6 1wXk/Gz/AKF3QP8AwIT/AOOUeT8bP+hd0D/wIT/45ScG1Yakk7mp8K7lz8PdPiMZa5sFe0kiBAO+ Niu3J4HQdfWnXE2tSeJrPUh4auxDBbSwMpvLfcSzKQR8/Tiub07RPjDp097NZ+GdCja8l8+YfalK l8AEgebgZxzjrV7yfjZ/0Lugf+BCf/HKppt3EmkrHT63pkut2FjcG2jgv7SX7RFb3W2RM4IKPjIw QeoziqxhuZVaODwlp9tMOBPceQ0WfUBMsfpgfhWD5Pxs/wChd0D/AMCE/wDjlHk/Gz/oXdA/8CE/ +OUrPsF13On8S6ddXR0yWKBL2G0kLzWW8RrP8uARnj5TyATisjUrHUZL/Rr+w8N21vHaXBklgR4U nYbSOCCExyO5NZ/k/Gz/AKF3QP8AwIT/AOOUeT8bP+hd0D/wIT/45RZg2nodVPbXlhqlxqVha/al u40E9qJFRw68BlJO3ocEEjoKy7qLXrjxRo+qtpgWyt0lia1WeMyoXAG9iTtOPRSa53WLz4xaPpV3 qWo6H4fgs7WMyyyG4T5VH/bSoPDerfFzxJodpq+j6LoFxYXS7o5PPUZ5wQQZMggjoaEncLqx2V3o zWes3uoW2l2uqRXpV5YZAglV1AXKM/GCAMgkdKuaTDcG8Wb+xbHS4ApDDEZnJ7cp8oH4muU8n42f 9C7oH/gQn/xyjyfjZ/0Lugf+BCf/AByhJg2mbOovrDeKrK+h8P3MttawzQlhdQAvuK4YAv04781v xz3lxpc0n2R7O8KOI4pXRyGwdpJUleuO9cP5Pxs/6F3QP/AhP/jlHk/Gz/oXdA/8CE/+OUcrtYOZ XublsNUks7ddZ8NWl3qLxBZrmKWLZuxjknDj/gIPtV+Ay+H/AAe76pc+dJZ2rvLLng4BOAT2HA5r lPJ+Nn/Qu6B/4EJ/8cqlrOjfGLWdOlsNQ8NaFJay43oLtV3YOcEiXpx0ocW013GpJNHT/CnT5NN8 AaTHMpSaZGuXU9QZGLf1rrK84W3+NaqFXw5oAUDAAuEwB/38pfJ+Nn/Qu6B/4EJ/8cpyTbvYlNJb no1eYfHzVlj8Kx+H7Q+Zq2sTRwwwLyxXcMnHoTgfjVhrH423I8ldJ0Gz3cef5yNs98bz/I15JZ+K Lr4a/FrU7vxhp0fiTXLKTyhO9yyLGcfeTK+h4447Urdx37H2/wCDtNfR/C2k6dIcyWtrHCx/2lUA /rWxXjvwp+O2j/EDXY9FstG1K1vmjaUlyjxKq9SWBz6Dp3FexUMaCiiikAUUUUAFFFFABRRRQAUU UUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFAHzD4qK+Df2lb241EeVYe JbVPInbhRIAq7c/7yf8Ajwr0kjB5ro/ih4A0n4g6AdO1ZGSSM77e5j/1kD+qn09R3rxRfB/xg8Kg WWlXWleIbCMbYnuWCSKo6Z3EH9TTtfYV7bmhqEY0/wCL+l3jjEWqadJZhs/8tIzvA/EZ/KtzWbW7 j1qx1aytjeGCGSCS3WRUYhiCGUsQOCO5FcPqmifGHVDaG88M6E7Wsy3ELLdKrI46EES/mO9XvJ+N n/Qu6B/4EJ/8co5XZeX9fqHMr3/r+tjdWHWJfGVjqU2mrHY/ZHt2CzoXhLMrZfnB6fw5qXw5HqMe v63Ne6XLa293KkkUrTxvwqBcEKxIzjNc75Pxs/6F3QP/AAIT/wCOUeT8bP8AoXdA/wDAhP8A45Ts +wcyOg8PpqVtq3iG4udKljjuZhPAfPibzNqKu3huCdueeKo+F4fEGi2l39p0r7THc3c1wlvHcRrL AHckBiTtYY54ORms3yfjZ/0Lugf+BCf/AByjyfjZ/wBC7oH/AIEJ/wDHKLMHJM6vTLK6hu9Q1a8i Vr24RUS2icELGmSq7jgFiWOT0/nWRLLrb+KrbVB4au/Jis5LYp9st9xZnVgfv4x8prL8n42f9C7o H/gQn/xys/XtS+LugaVNqWsaN4etbGHHmSvcLhcnA6SetFmncOZHoOqWL63oZgmR7KdtsqhirmKR TkZwSDyOxqJ73W5FeBdJWK4K4F01whgDY67Qd+PbFfPkvx78UxyMhtNHYqcZWNiD9DuqR/jp4uS0 jum0/SxbyO0av5L4LKASPvf7Q/OpGe6yeHXs9P0VdLdDdaUxaPzchZgwIcHHTOTg9qnlutdvf3Nt pw0v5huubmaOUhe+xEJyf97HWvEvD3xh8Za/fRWdhb6ALmVxHHHMTGXY9AMvzXohg+NoPPh3QP8A wIT/AOOVWr1FdI6TxVYT6pd6PbDTxc2cV2lxPLI6bFVc8FSck/QYqPT4dT0XVXsbPT5brQnw8Unn xg2pJ+ZAGOSg6juOgzXP+T8bP+hd0D/wIT/45R5Pxs/6F3QP/AhP/jlCTQm0zeutGex1e+vrfSrX VYL1hJJDIIxLHIAFyrPwVIGcEjB+tXtIgn+1+a2jWOmW+wgoAhmZvQlPlAx7nPtXJ+T8bP8AoXdA /wDAhP8A45R5Pxs/6F3QP/AhP/jlLlY+ZHR6fFqWgWiada6a2oWkbMIJI50jKITkK4cjpk8jPFQ+ FLPWLTXtcfVrZCl9Os8dxDIpjUBFXZgndkY64wawvJ+Nn/Qu6B/4EJ/8cpstr8a5Ynjbw9oQV1Kn FyoOCMcHzOKdpbhdF/4ap9r1HxXrQH7q/wBSZIWz95Ihsz+ea6TxTrdr4c8P3uqX0gjhgjJGerPj 5VHuTXBaTo/xi0nTLfT9O8M6BDawLsjX7SpwPUkycn3Naui/BzxL4s1i21D4patFNaW7b49JsziM n/aIwMfTJPrRyvYXMtzqf2UtGudO+G0l/exmKbWLyS+Cn+6cKp/HGa9pqCyto7W2jhhRY441Cqij AUAYAA9KnpMaCiiikMKKKKACuO+MGhTeJPhn4i0q1Uvcz2jGFf7zr8yj8SBXY0EZFAHzf8Fdfh1v wHYwhx9t09PstzEeGQrwCR7j+Vd2QGBU9CMGuc+IfwZvf+Ekn8T/AA71NdG1eYlp7Zh+4nPc98E9 wQRn0rmxa/G2L922h6BOV48zz0G73xvH8qbiLmLPwxaXTvDGraUlu093pd/PB5COqlgzblwWIA4b vVzwpF4g0HQbWyu9LF6RuKmG4jVoQzE7X3HBxnqufpXPW+i/GG21W71GDwzoSXd2qLOwulw+37p2 +bjPvV3yfjZ/0Lugf+BCf/HKdn+QXVzbvNAvrjSdSYyRDUb+4jnnjRyqMiEfud3XBUEE+9UfEGmX 2paHNBpvhe0sbgMh/evDvYBgcIyHrx1YiqXk/Gz/AKF3QP8AwIT/AOOUeT8bP+hd0D/wIT/45Ssw ujrdXsZ9a0aLCNY3sciXESyEP5ciNkBipIIPQ4Peo5r3XpkaC20hLacjH2qe5RoVPqFUlj7AgfhX LeT8bP8AoXdA/wDAhP8A45R5Pxs/6F3QP/AhP/jlHK+wXR0Xi+xvr7w4mmQ2x1CWYxLNKWSNQFdS zMpI4ODwM0yS21DQtXH9haY93pNyC09uk0cYt5OzRhiOD3HTvWB5Pxs/6F3QP/AhP/jlHk/Gz/oX dA/8CE/+OUWe4XWx1V1aXVlrE2q6fbfavtMKR3FsJFRyV+6yk/LnBIIJFY27Urj4kaNPewLbQfYL gJb7g7ocrlnYcc9ABn61i6hpvxqvrcwvoelQqSDvtr4RP/30sucVzuv6h8S/h9pn9qa3pWjxRzSL b/aLm8+0SsT0XJkJwOT6ChJp3BtM9H8RnVZtZ0t7PQ7i4gsbkzNKLmFRIChHyhmB6nvit2ylnv7S Vb7T5rHdlDHJKjlgR1yhIrhI0+NUsaSR+H/D7I4DKwuUIIPQj95TvJ+Nn/Qu6B/4EJ/8co5XawXV 7nSacNT0SxttNj01tQhgHlRTxTxpiMcLvDkHIHXGen4Vf0PT5bM3lxdsjXd7N50vl/dXgBVGeoAH X61xnk/Gz/oXdA/8CE/+OUeT8bP+hd0D/wACE/8AjlOze4XR0GixarpFkdLj00TLG0hivDOgiIZi w3LneCM84Has2PT9Zj+GtxpD6Wz6k0MtsESeMK27d84JbAXnoefaqPk/Gz/oXdA/8CE/+OUeT8bP +hd0D/wIT/45S5WCkk7o6DXIdRvfAlxZw6ZJ9vntvs/2czxgqcYyW3bcd+DnmrV3YXN9pmmTLELX UbJlmjjlYMAwG1kYrkYI7j2rlfJ+Nn/Qu6B/4EJ/8co8n42f9C7oH/gQn/xym02LQ1/FK+INb8P3 +n2WliylkjK+ZPcRvv56IFPGcYy2MZrN+IIm1TTvC2jyWz211e6lCWgZ1YokXzMSVJBGB+tReT8b P+hd0D/wIT/45VGXRPjDLrMGqyeGdBa+giaCJzdLhFY5OB5uMnHXrQk7rT+kO6/rzPVT14ryzxJI fFvxu8H+HdNPmrpU3269kTkRYwcE/QAf8CFWn8P/ABp1wG0nGi6FC/D3EUoZ8e2CxH6V6r8Ifhhp 3w/spmhkkvdVu/mu76YfPKeuB6Lnt370JW1Yr9Eejr0paKKkoKKKKACiiigAooooAKKKKAAjPWmG JD1Ap9FADPJT+6KPJT+6KfRTuKwzyU/uijyU/uin0UXCwzyU/uijyU/uin0UXCwzyU/uijyU/uin 0UXCx8x/tj+MXttMs/COmh83GLq+dVOFjB+RCfcgn8B61jfsb+MZILu88JagHNtc5urF2B2rIPvo D7gZ+oPrXuXx+giPwg8WSGKMyfYm+YqM9R3rF/ZZgiPwT8PyGKMyBrj59oz/AK+TvSuOx615Kf3R R5Kf3RT6KdxWGeSn90UeSn90U+ii4WGeSn90UeSn90U+ii4WGeSn90UeSn90U+ii4WGeUn90V8P/ ALRng/WtS+NGvto2k3t5F5Mdy7wwsygeUCxz04wa+46MDngc9fekM/PT4H+M9T8C+KJNQ0uxi1AS RbbizYfvJIgckxnqGHXA/I9vuXwB440Px3oq6j4fu1lUYEsLcSwN/dde38j2r5e+M/w5g8I/EaKa 2mOnaPrk3m2F8nyjT70HO0kdEJ/IHP8ADU/hfT9U1TWru68LSL4a+K2kZGoaYcJb6qg6yKvTJ6kf dOcjGc0AfYFFeYfCz4tWXi64k0TW7ZtE8W2x2XGnXGV3kdTGT1Ht1HuOa9PoAKKKKACiiigAoooo AKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAprRq3UU6igBnkp/d FHkp/dFPop3FYZ5Kf3RR5Kf3RT6KLhYZ5Kf3RR5Kf3RT6hvLqCytJbq8mjgt4lLySyMFVFHUknpR cLD/ACU/uivHvi/8S9Os2n8HeHNNTxJ4mv0NubBBviiDDB80j0Hb8yKw9f8AiD4k+KWq3Hhv4Tq9 rpMbeXfeIZVKqo7iL/OT2wOa9J+GXw00L4faeyabGbjUZubnUJ+Zpm789hnsP1ouFj4U+IPw68R+ Br4Q65YOkboJBPEpaE5xkBunBIFdL8L/AA//AMJn8OfGmhwx79U08RavZDv8m5ZVH+8pUfUCvov9 pmZ9Zn8G+CLYgya3qStMv/TGMjOfxOf+A169Y+H9Isbxbuz020huxF5HnRxKrlOPlJA5HA/KkM+N vhj4V8U/DODSviNeeGk1XS5EbzIBn7TaxnpMF7EjODzwecZzX1z4I8VaD410WPVPD10lzbtw69Hi b+669Qa6MqGUqwBUjBBHGK8Q8b/CfUtB1qTxd8I7gaZq4+e50vpb3g6kBegJ9Onpg0XA9t8lP7oo 8lP7orzb4V/FnTfGckmk6lC2jeKrbK3OmXGVYsOpTPUe3UfrXplO4rDPJT+6KPJT+6KfRRcLDPJT +6KPJT+6KfRRcLDPJT+6KcqhegpaKVx2CiiigAooooAKKKKACiiigAIB6imeUn90U+igBnkp/dFH kp/dFPop3FYZ5Kf3RR5Kf3RT6KLhYZ5Kf3RR5Kf3RT6KLhYZ5Kf3RR5Kf3RT6KLhYZ5Kf3RXxD+1 f4xl8ReOP7JsxJ/ZOjZhDbSFec/fb8MbfwNfcNeGfteQQx/CqJ0ijVzqkGWCgE8PSuOxJ+yt4wfx H4EGj6orjUtGxDmRSDJAfuHnrjBX8BXtnkp/dFMtoIYkVooo0JUZKqBmpqdxWGeSn90UeSn90U+i i4WGeSn90UeSn90U+ii4WGeSn90UeSn90U+ii4WGeSn90UeSn90U+ii4WGCJAeFFPHFFFIYUUUUA FFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAcB8ff+SN+LP+vJv5isX9lf8A5Id4 f/3rn/0fJW18ff8Akjfiz/ryb+YrF/ZX/wCSHeH/APeuf/R8lAHrNFFFABRRRQAUUUUAFFFFABRR RQBzPxI8IWXjnwff6FqAAE65ilxkwyj7rj6H9Mivm7R9H1XxdYSWUUzad8WfBDbIZQ2GvrdeFBP8 XYZPYjPDV9b14b8fNAvvD2sab8T/AArETqekkJqMK/8ALza9DnHXAOD7HP8ADQBmafaaD8evDxlu w2g/ELR8RzSxDZNBIp4JHVkJH1U56d73hD4oa14M1uLwj8X4/s9wflstcUfuLpeg3noD/tfmB1qt 450KXWrbS/i58KX26ysImubZOl7Fj5kZe7jBBHfHqBXbeHtT8KfHD4fn7daRzxt+7urV+JbSbHY9 Qe4YdR+IoA9JR1kRXjYMjDKspyCPUUtfOcdz4r+Al2sN8bnxH8OnfCTj5rjTwT0Pt+h7YPFe8eGv EGl+JtHg1TQr2K8sphlZIz0PcEdQR6GgDUooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKA CiiigAooooAKKKKACiiigAooooAKKKKACiiigAoory74p/Fyy8J3KaHoVs2ueLbg7INPt8tsY9DI R0+nX6DmgDrvHfjXQ/A2ivqXiG8WCLpHGOZJm/uovc/oO9eMWei+Lfjpdx3/AIoNx4e8BK++30yN ts14B0Zz6e549B3re8CfCW+1TWk8XfFi5XV9ebDwWB5t7MdQNvQkenQe/WvbAAAAAABwAKAM/QdF 07w/pUGm6NZw2dlCMJFEuAPf3Pua0KKp6zqEWk6Re6hckCG1heZ+eyqT/SgDxXRv+Kv/AGpdWvcl 7HwtYC1j4yomfr+OWf8A75r3avFv2V9PlfwZqvia9BN74h1GW7Zm6lAxVf13n8a9poAKKKKAPOvi p8KtJ8dRpexO2l+I7bDWup242yKw6BsfeH6jtXHeEPilrPg/W4fCfxghFrdN8lnraj9xdDoCx6A+ /wCYFe7VieMPC2j+MNFm0rxBZR3dpIOA3DIf7yt1Uj1FAG1G6yIrxsGRgCrKcgj1FLXzmk3i34CX Qjujc+JPh0zYWXrcaeD2PsP++T/smvdvC3iPSfFWjQapoN7FeWUo4dDyp7qw6gj0NAGtRRRQAUUU UAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFeI/tf/wDJJ4f+wpb/AMnr26vE f2v/APkk8P8A2FLf+T0Ae2Rf6pPoKdTYv9Un0FOoAKKKKACiiigAooooAKKKKACiiigAooooAKKK KACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooA4D4+/8AJG/Fn/Xk38xWL+yv/wAkO8P/ AO9c/wDo+Str4+/8kb8Wf9eTfzFYv7K//JDvD/8AvXP/AKPkoA9ZooooAKKKKACiiigAooooAKKK KACo7iCK5t5YLiNZIZVKOjDIZSMEGpKKAPnz4fzy/CL4q3PgbUXYeF9cc3OjTueIpCeYs+/T67T/ ABVN8T/C2qfDnxS/xH8AwF7Zv+Q3pacLNHnLSKP1PoefWu/+NXgNPHvgya0gIi1e0P2nT5wcFJl6 DPYN0P4HtVP4GeOW8b+EXt9XXZ4g0tvsepQSD5t443kejYP4g0AdV4T8RaN468Kwanpjx3enXaFX jcA7T/FG6nuOhFeQ+Jfhzr/w21mbxT8IyZLNzvv/AA85JjlXuYx/TqO2elU/FGlah8DPGEnirw1B JceBtSkA1XTo/wDl1c9JEHYc8H/gJ4xXvmh6tY67pNrqek3KXNjcoJIpUPDA/wAj7dqAOT+F3xM0 T4g2DNYObXVIOLrTp+JYW78d1z3H44Nd1Xk/xR+EkWv36+JPCF2dC8YW53x3UPypcEfwyAevTd+e aqfDf4uzTax/wiXxHtBofiyLCK0g2wXnoUPQE+nQ9j2oA9jooooAKKKKACiiigAooooAKKKKACii igAooooAKKKKACiiigAooooAKK4z4weM18B+AdS1sKr3KARWyN0aZuFz7DqfpUHwwuPEd14E0qfx lLFJq80fmv5abMIeVDDpux1xQBi6n8ffh5puo3VjeazMlzaytDKospjtdSQRkLg8g1W/4aK+Gv8A 0G5//AGf/wCIruJfDuhzSvJLoumSSOSzO1qhLE9STjk0z/hGNA/6AWlf+Acf+FAHFf8ADRXw1/6D c/8A4Az/APxFek+Gtf07xJodpq+kTGWwul3xOyFCwyR0IBHSsv8A4RjQP+gFpX/gHH/hWnbW8NrA kNtDHDCgwscahVUewHSgDi/E/wAbPAvhjXbvR9Z1WWDULVgssYtJXCkgEchSDwRWX/w0V8Nf+g3P /wCAM/8A8RXR+NJvCPh/TrjW/FVrpccQ+9NPbo8krY4UZGWPtXj1p4Xv/jJdpdS6Pb+FfAiMGiSO 2jS7vwO5IHyr+npnrQBU+Kn7R1vqLxaN4DvWsbefC3GtTwvmJT18tMbsj1xn0HevSv2fPDPg6x8N DXfDV1JrF7du63Gr3cTJLM4PzAB+VXP59ya6vTPBXhjTLCGzs9A0xLeFdqhrZHP4sRkn3rZs7S2s oBBZW8NtACSI4UCKCfYcUAcv4z+L/gzwZrbaT4h1KW2vljWUotrLINrdDlVI7Vhf8NFfDX/oNz/+ AM//AMRXe3ui6Vfz+dfaZY3M2MeZNbo7Y9MkVX/4RjQP+gFpX/gHH/hQBxX/AA0V8Nf+g3P/AOAM /wD8RXN/GL4paL4q+Dupr4Nu3vJL+7i0kboXjJd8MQNwGfl/nXrP/CMaB/0AtK/8A4/8K8q8Y6fZ 6t8c/BnhnTrS3t7HS431m8ighVELDhM4HX5cfjQB1cvjjwf8ItB8P+GvEF/JaTQ2EYRVtpJNwAwT lQRnINVP+Givhr/0G5//AABn/wDiK7/UNJ03UZFk1HT7O7kUYVp4FkIHoMiqv/CMaB/0AtK/8A4/ 8KAOK/4aK+Gv/Qbn/wDAGf8A+IrrPAXxJ8MePHvU8MX73TWYQzb4Hi2hs4+8Bn7pqz/wjGgf9ALS v/AOP/Crdhpen6dv/s6wtLTfjf5EKx7sdM4HNAFDx58QvDfgOKzl8TXr2qXbMsRSB5dxXGfug46j rXHf8NFfDX/oNz/+AM//AMRXoN/ptjqKouoWVrdqhyoniWQL9Mjiqf8AwjGgf9ALSv8AwDj/AMKA OHm/aF+GM8LxT6xJJE4Ksj2ExDA9QQU5FeWaZc6dH4tvNZ/Z61WS4ukiN1qHh2a3kjhmiDAEx7gB nLD5RyM8elfRf/CMaB/0AtK/8A4/8Ks2GkaZp8rS6fp1laSsNpeCBYyR6ZA6cUAef6P+0D4Nk8Pi 91+efR7+KYW1zp8sLvLFJgnooJK/Kecexwad/wANFfDX/oNz/wDgDP8A/EU74qfCbS/GrrqliyaZ 4mtxmC+VAVkI6CVejD36iuX8FeKdLtNaTwp8TvDOj6P4iGFgu/skYtr4dAytjAJ/I+x4oA6b/hor 4a/9Buf/AMAZ/wD4itnwj8ZvBHi3X7fRtC1WWfULgMY42tZYwdqljyygdAa3P+EY0D/oBaV/4Bx/ 4VNZ6HpFlcLPZaVYW8652yQ26IwzwcEDNAFjxd4n0nwloFxrOu3Jg0+AqskiozkFmCjhQT1Irzz/ AIaK+Gv/AEG5/wDwBn/+Ir0a7tbe9t2gvLeG4gbBaOVA6nHIyDxWd/wjGgf9ALSv/AOP/CgDkbL9 oH4b3dykKa+Y2Y4DTWssaj6sVwK9N03ULPVLKK8026hurSUbkmhcOrD2IrltS8E+FtTtHtb7w9pU kLjBAtlU/gQAQa5D4afDbUvh/wCOb5tD1j/ii7qPf/Z0+XdJT/dPbH97uOCO9AHsNFFFABRRRQAU UUUAFFFFABRRRQAUUUUAFFFFABXiP7X/APySeH/sKW/8nr26vEf2v/8Akk8P/YUt/wCT0Ae2Rf6p PoKdTYv9Un0FOoAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAoo ooAKKKKACiiigDyTxL8V7+18YaNpmjaDK+k3OpjTbjU7xWjRpMncsK8FsYPzdPrXrdeUfHP/AJC/ w7/7GCL/ANBavV6IfBr3f5L/ADFL47eSf4y/yOA+Pv8AyRvxZ/15N/MVi/sr/wDJDvD/APvXP/o+ Str4+/8AJG/Fn/Xk38xWL+yv/wAkO8P/AO9c/wDo+SgZ6zRRRQAUUUUAFFFFABRRRQAUUUUAFFFF ABXz/wDFiyufhh8RbL4laLE7aReutpr1vH0IbgS49enP94D+9X0BVHXtJs9d0a80vU4RNZXcTQyo e6kfzoAEbT/EGiBh5N7pl9BnkbkljcfyINfP8bX37P3jDypDNdfDXWJsq3LHTpT6+38x7jnV+B+r XngjxbqPwt8STFjblrjRbiT/AJbwHnYPccnHsw7V7T4h0Ww8Q6Nd6Vq9ulzY3SFJI3HUeo9CDyD6 0AW7W4hu7aK4tZUmglUPHIhyrKeQQfSuW+JHw+0L4gaQbPW7fE6Am3u4uJoG9VPp7Hg15L4O1nUf gl4uj8GeLJ5LjwdfuTo+qSdICT/q3PYZPI7deh4+iFIZQVIIPII70AfPejeNPE/wf1O38P8AxM83 U/DUjeXY6/GpYoOyy9+Pfkf7Qr3zT7221GyhvLCeK4tZlDxyxMGV1PcEVFrWk2Gt6ZPp+r2kN3ZT rtkhlXcrD/PevAr7w94q+Bl7Lqng/wC0a74FdzJdaTIxaW0HdkPp7j/gQ70AfRVFc34D8a6H450R NT8PXazxcCSI8SQt/ddex/Q9q6SgAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKAPDP2t kWXwboMUgDRPq8Kup6MCDwa9gjAEaADACgAfhXkP7WP/ACKXh3/sMwf1r19fuL/uj+VAC0UyaSOG J5ZpEjijUs7ucKoHUk9hXi2r/GLU/EWsS6J8JNDfXLqM7ZdRmBW2i5xkdMj3JA9M0Ae2AZ6VwfxK +JWm+CzDYQwyar4juvltdLtvmkYnoXx91f1rkU+G3xY10LN4h+I401m+9badCSoHpkFBn86yrb4A eK/D2uXOueFfHv8AxNJAf3l5a5aT2Z8t1PtQBu+FfhpqfiTWIfFXxYnW/wBQU77TR15trIdQCOjM PT8817EAAAAAABgADAArws/Evxv8PrqK3+K2gLPpbMEGtaYMoPdlHHpxhT7GvZtE1aw13S4NR0i7 iu7Gdd0csRyD7ex9qAL1FFFABRTJZI4YnlmdY4o1LO7nCqB1JPYV4trHxh1TxFrMmifCPQzrlzGd s2pTgrbRe46Aj3JA9AaAPbVGSAK8Z+CmPEfxB+IHjQ/PFNeDTLN+v7qMDOPY4T9ahHw1+K+voJfE XxGXTS/DWunQkoB6ZBQZ/Oq2m/BHxx4Ut2i8F/EaWC3VjIlpcW5EbMeu4gkcn/ZoA90orwv/AIWX 42+H1zHb/FfQBPprMEXWdMG5Pqyjj8PlPsa9m0TVrDXdLt9S0i6iu7Gdd0csZyD7ex9qAL1FFFAB RRRQAUUUUAFYHjTwjovjTRn0zxBaLcQHmNxxJE395G7Gt+vO/iZ8V9H8EzppsUUureIpsCHTLXl8 npvIzt+nJ9qAOPtde8T/AAcuotP8Xm417wSzCO21iNd01mOyyjuB/wDq9K9q0rUbPV9Ogv8ASrqK 7sp13RzQtuVh9a8VbQvjL8QbOQatfaZ4S0m5QqbRYvMlKnsw5P5sPpUGg/s9eI/Dlh5Xh/4kX1hI z73WG2KxH/gPmcH3oA97orw+6Hxn8BZuJ2svG2kRjMiouy5CjqcYBz9N1dz8NfiXoXj+2kGmvJa6 nB/x8afcjbLEe/H8Q9x+OKAO3rjfip49t/h3oFrq11Yy3qz3aWqxxuFILKzZJPb5a7KvDv2vf+Sc 6R/2GIf/AEXJQB77aTC4tIZgNokRXx6ZGalqpo//ACCbL/rgn/oIq3QAUUUUAFFFFABRRRQAUUUU AFFFFABVfULyHT7C4vLksILeNpZCqliFAycAcn6CrFFJ7aDXmeW+DfiTqviP4jyaJcaBJpWlPYG9 tXu8i5mXeFDFc4QHngjNYf7X/wDySeH/ALClv/J62j/ycov/AGLx/wDRtYv7X/8AySeH/sKW/wDJ 6a1gn6/hJonXmkvT8kz2yL/VJ9BTqbF/qk+gp1AwooooAKKKKACiiigAooooAKKKKACiiigAoooo AKKKKACiiigAooooAKKKKACiiigAooooAKKKKAPLvFHwkk8Rasl7eeNvEyCG6N3awpJFstn5xs+T jAOBXf8AhzTJtH0eCxudSvNUlizm6vCplfJJ5IAHHTpWlRQtFZA9XdnAfH3/AJI34s/68m/mKxf2 V/8Akh3h/wD3rn/0fJW18ff+SN+LP+vJv5isX9lf/kh3h/8A3rn/ANHyUAes0UUUAFFFFABRRRQA UUUUAFFFFABRRRQAUUUUAeU/tAeCLnxDoNtr/h7dF4p0B/tdnJH96RQctH79Mj3GO5rpfhN43tfH /guz1i3wlzjyruDPMUy/eH07j2Irsa+edbVvgt8X49ZhUp4J8USCK8RfuWtznO/HYck/Qt6CgD2b x34S0vxt4butF1uHfbzDKuB88T9nU9iP/rV5N8K/F2qeBPEy/Db4hSksONF1RydlzF/ChJ79h7/L 6Z94RldFZGDKwyCDkEVxvxV+H+nfELw0+nXv7m8i/eWd4o+eCTsQfQ9x/wDWoA7OgjIweleM/Brx /qMeqzeAPiBm38V6eNsE7n5b+IdGUnq2Ofcc9Qa9moA8S8e/CfUNJ1p/GHwnuF0vXly9xp4wLe9H Ujb0BPp0Psea6D4VfFqw8ZSyaRq1u2i+K7b5bjTbjKliOpjzyR7dR79a9Nrzv4q/CvSvHcSXkcja X4itvmtdTt/lkRh0DYxuH6jsaAPRKK8L8G/FLWPCWtQ+Efi/ELS9PyWetAf6PdjoCzdAf9r8wK9z RldFdGDKwyCDkEUALRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQBzHj3wfpPjLTrW11xJnhtbh bmMRSFDvXpkjtzWsBgADtxXB/HnxlqvgvQNIu9FMHm3Wox20nnR7wUbOce9dB421r/hHfBmsaycb rOzeZc9N+35f/HiKAPIviDeal8V/iC3w98O3T23h/TiH1y9j/iP/ADzB7+mPXOele5+FfDeleFdF g0rQrOO1s4VACqOWP95j3Y+przj9l3w9/ZPwxt9UuVJ1LXJXvriVuWYFiEyfpz/wI169QAUUUUAQ X9nbahZzWl9BFcWsylJIpVDK49CDXzjqen3HwC8cwX9g8svw91qfy7iAkn7DKejD2HY9wCOwr6Vr mPib4ah8XeBNZ0aZFdri3bySf4ZQMofb5gKANSN0kjWSNg8bgMrDoQehp1eW/s26/LrvwrsI7py9 1psj2EpOc/J93/x0rXbeOdaHhzwbrWsZAaztJJUz/fxhf1IoA8j8e3+p/Fb4hv8AD3w9cva+HtPw +uXsR5c/88gfrxjuc54Fe5eFfDek+FdGg0rQbOK0s4hwqDlj3Zj1JPqa84/Ze8Pf2T8MoNVufn1L XZWv7iU8lgxIQZ+nP1Y169QAUUUUAQX9nbahZzWl9BFcWsylJIpVDK4PYg185atY3PwE8c217pzS yfDzWpxHcQMxYWMp/iHt3HqAQegr6Url/ib4Zg8XeBNY0a4QOZ4GMRP8MqjKEfiBQBqxuksaSRMH jcBlZTkEHkEU6vLv2b9fm1z4WWEd4+680yR7CXnJGw/Ln32la9RoAKKKKACiiigDzr42ePZPBPh2 GHSUE/iTVJPs2nQAZO44BfHfGR+JFS/Br4XQeELQ6xrpGoeL74ebeXsx3tGzclEJ6ehPf6VyGgQD xt+09q15ckS6f4StlggQ8gTtxn65Ln/gIr6AoAKKKKACvGfjV8Mpbxx4z8Df6B4w079/uh+UXagc qw6Fsd+/Q17NRQB558J/G9v4+8HW2rRqsN4p8m8twf8AVTDqPoeo+tcB+17/AMk50j/sMw/+i5KT wrAPA/7SevaDBti0rxDafb4Is4AlGSQo/wC/n4AV1fx38D6l4+8JWOmaNNaQ3EF+l0zXLsqlFRwQ MA85YUAem6P/AMgmy/64J/6CKt1X02Mw6fbRNjdHGqHHqABVimxLYKKKKQwooooAKKKKACiiigAo oooAKhvoGubKeCOeS3eWNkE0WN8ZIxuXPGR1qaik1dWBOx5KPg3cf22NX/4T/wAWHUhD9n+0ebFu 8vOdv3OmeayP2uUMfwitkLs5XUrcFm6t8r8mvca8R/a//wCSTw/9hS3/AJPTvpYVtbntkX+qT6Cn U2L/AFSfQU6gYUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQ AUUUUAFFFFABRRRQBwHx9/5I34s/68m/mKxf2V/+SHeH/wDeuf8A0fJW18ff+SN+LP8Aryb+YrF/ ZX/5Id4f/wB65/8AR8lAHrNFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABXP8Aj3wrY+NPCeoa Fqagw3SYV8cxOOVce4ODXQUUAeL/ALPfiq+jGofD/wAVNt8Q+Hz5cZY83FuDhWHrjI/Ar717RXif 7QXhu/065074keFExrmhHN1Go/4+Lb+IN64BOfYn0Feo+C/Etj4u8MWGt6U+62u4w+3PKN/Ep9wc igDk/jN8NovHOlw3emy/YfE+nHzdPvkO0qwOdjEc7SR+B59c1Pgt8SZPFMVz4f8AE0X2DxlpX7u8 tZBtMoHHmKO/uB0znoRXqVeSfGr4cXeszW3i3wZJ9j8Z6V+8hdOPtSDP7tvU9hn6Hg8AHrdFcB8H /iPafEDQmZ0+x67ZHytQsH4aJxwSAedpOfpyDXf0AYXjLwno3jLRJdK8QWaXVq/Qnh42/vI3UH3r xC3vfFfwFu0ttWNz4j+HjvtiulG6ewBPAI9Pboe2OlfRlR3NvDdW8kFzEk0EilHjkUMrA9QQeooA o+Hdd0zxJpEGp6JeRXljMMpLGc/gR1BHoea0q8A8SfDzxD8MdWn8T/CUtPpznzL/AMPOSyOO5jH9 Oo7Z6V6R8MPiXofxC05pNMkNvqMIxdafOcSwN347jPcfp0oA7eiiigAooooAKKKKACiiigAooooA KKKKAPDv2sf+RS8O/wDYZg/rW1+0KGPwW8S7M8W8ZOPTzErF/ax/5FLw7/2GYP616R4t0hNf8J6n pMmAt7aPBk9iV4P4HFMRF8ICjfCvwiYvu/2Xb/n5a5/XNddXjH7LXiFr3wFJ4cvyU1bw9cPZzROf mCbiVP0HK/8AARXs9IYUUUUAFFFcd8XvFcPg34eaxq0kgWZYTFbDu0zjCgfjz9AaAPL/ANlkxnRf FbWoxaNrcxh4wNuBjH4Yrq/2ht5+DfiXy/8Aniu76b1zVb9nbw7J4d+GGmpdIUvL4tfTgjB3ScjP vtCiu28Y6OniDwrq2kSYxe2zwjPQEj5T+eKYiv8ABsofhR4RMX3P7Lt8ZOf+WYrsa8Z/Zb8RG+8B yeHL8lNX8PTvZzRNwwTcShx6Dlf+A17NSGFFFFABQenNFcd8XvFUPg74eaxq0rhZhC0VuucF5XGF A/E5/CgDyv8AZQJ/4R/xURjyzrUuMf7q/wD1q90rzP8AZ58OzeHPhjpkV6u28uy17MCMHMhyAfcL ivTKbEgorj7SXxkfibex3UNoPBQtQbeQbfNM3Gc87uu7rxjFFrL4yPxNvI7mG0HgoWoMEg2+YZuM 553dd3UYxiktbeY3pc7ClHUVx1rL4zPxNu47iG0HgoWgMEg2+YZuPfd1z2xiuwo6Jh1seL/s8lB8 TPiukgb7Z/aMZZieCu6XHH1z+Yr3mvnu0uf+ED/acuDdERaT4utgEc8L9oXHU+u4Ef8AAxX0JQAU UUUAFFFBIAyeBQB4F8RCD+1R4ECfeGmyZx/22r0L4i+ONM8AaLbanrUN3Nbz3K2qraorMHZWYE5I 4wprzHwLOfHX7QXiTxXCd+k6PD/ZtnJjKu/QlT+Dn/gQqf8Aa8/5JzpH/YYh/wDRclMR77aSrPaw yoCFkQOAeuCM1LVTR/8AkE2X/XBP/QRVukMKKKKACiiigAooooAKKKKACiiigAooooAK8R/a/wD+ STw/9hS3/k9e3V4j+1//AMknh/7Clv8AyegD2yL/AFSfQU6mxf6pPoKdQAUUUUAFFFFABRRRQAUU UUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQBwHx9/5I34s/wCv Jv5isX9lf/kh3h//AHrn/wBHyVtfH3/kjfiz/ryb+YrF/ZX/AOSHeH/965/9HyUAes0UUUAFFFFA BRRRQAUUUUAFFFFABRRRQAUUUUAFFFFADZY0lieOVQ8bgqysMgg9Qa+fPCUknwb+Lkvha7Zl8HeJ JDPpkjH5bec4Bjz25wv/AHyfWvoWuI+MPgWDx/4LudLYrHfxnz7GfvFMvTn0PQ/X2oA7eivL/gH4 5n8V+GZdN1zdF4m0V/sl/FJw7FeBJ+ODn3Br1CgDxH4weBtU0bXk+I3w8TZrtoM39kg+W+i/i+Ud Wx19eo5HPofw08c6V4/8Mw6tpL7W+5cWzH57eTurf0PcV1dfP/xG8Nan8LfFcnxD8CwNLpcx/wCJ 5pKcKyZyZVHb19jz0JoA+gKKxvB/ibTPF3h601nQ7hZ7O4XIP8SN3Rh2YHgitmgAryX4n/CNNa1F fE3gu7/sHxhB86XEPyx3J/uyAevr+YNetUUAeP8Aw2+Lj3er/wDCKfEK0/sLxbFhAJBthu/RkPTJ 9M4Pb0r2CuO+JXw70P4g6T9k1mEpcxgm2vYuJYG9Qe4z2PFeW6H448S/CPVLfw78UPMv/D8jeXYe II1LbR2WXvx78j3HNAH0HRUNld29/aQ3VlPHcW0yh45Y2DK6noQR1qagAooooAKKKKACiiigAooo oA474neB7Lx1pVlZ6hd3NrHaXSXatAFyzL0ByDxzW/j5QPQYrjfjZ44vfAuh6XeafaW1093fx2jL OWAVWzyMEc8V2QOVB9QDQB4V8TtD1fwF44X4k+DrdriJl2azYJ/y2j4y4H0Az6EA+tew+APG+h+O 9ETUtAu1lXpLC3EkLf3XXt9eh7VpSxiRSrAEH1rxvxb8F4f7YbXPAmqXHhjWs7ibbPkyH3QdP5e1 O1xbHvFFfPkfiH446AvkXGkaH4iUcLOjiNse43L/ACpW8ZfG7Uwbe38K6HpTMP8Aj5ll3Bfw3n+R o5WF0e5a/rem+HtKn1LWryGzsoRl5ZWwPoPU+wr53SS++O/ji21GeCa2+H+jy5t4pRg30o/iI9P5 DjqTWhYfCDV/E+pQ6l8U/EM+tyoQyWEDFLdD6dsj6AV7Vpmn2+nWkVtaQRwQRKEjjjUKqAdgKdrb ivfYswRiONVUAADAA6CpDyKKKko8I+KGiax4A8bj4k+DLc3EbLs1nT1HEsfd+Pwz6EA+texeAPHG h+OtEj1HQbtJQQPNgJHmQN/ddex/Q1pSRiRSGAIPHNeN+LPgvD/bDa74E1S48MaySWY22fJkJOeV HT+XtT3Fex7xRXz3F4i+OWgIILjR9D8QqOBOjhDj3+ZOfwpX8ZfG/Uwbe28KaJpbN/y8yShgv4bz /I0crC6Pctf1vTfD2lT6lrV5DZ2UK7nllbA+g9T7DmvnaGW/+PHjq21K4t5rX4f6PLutopRg3so/ iI/n6DjqTWnp/wAIdW8TajDqXxT8Qz63LGdyWELFLZD6dsj6AV7TpmnW+nWkVtaQRwQRKFSONQqq PQAU7W3Fe+xahQRxhQAABjA7U+iipKCiiigAooooA4L4x+BI/HXhc20Mn2fVbR/tFjcjgxyDtn0P T8j2rI+DnxY/tOQeFPHJGmeMLL9yyz/ILvHRlJ6sQMkd+or1QjPWuD+JHwz0Hx1bqdTgaK+iGIL2 A7ZYvTnuPY09xbHptFfOttpXxj8DjyNB1mx8TaXGP3cOocTY7Lk//FVZ/wCFgfGojaPAWkBjxn7R /wDbaOVhdH0CSACScAd68F+MHxMudcvX8A/DVzea1dkxXl9Ccx2kfRvmHGcHBPb61mXXhj4q+PCY fGPiO30PSH+/Z6WPncHqpI/qSK9L8AeAdD8Fad9l0SzWLd/rZn+aWU+rN/TpT5e4r9h/wy8H2fgn wpZ6RZYYxjdNLjmWQ/eY/wBPavPP2vf+Sc6R/wBhmH/0XJXuIGBgV5V+0b4T1rxh4K06w8O2f2u6 h1KO4dPMVMRhHBOWIHVhxSvcaVj1vR/+QTZf9cE/9BFW6raWjR6baxuMOkSKw9CFANWaGC2Ciiik MKKKKACiiigAooooAKKKKACiiigArxH9r/8A5JPD/wBhS3/k9e3V4j+1/wD8knh/7Clv/J6APbIv 9Un0FOpsX+qT6CnUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRXhnx X+LOrp4nbwX8N7aK615R/pd5IMxWnqPTI7k9M4wTXIReDPH15mfV/iTqQuWAytsCFX1HUfyFAH1F RXzD/wAIH4t/6KTrn5n/AOKo/wCED8W/9FJ1z8z/APFUAfT1FfMP/CB+Lf8AopOufmf/AIqj/hA/ Fv8A0UnXPzP/AMVQB9PUV8w/8IH4t/6KTrn5n/4qj/hA/Fv/AEUnXPzP/wAVQB9PUV8w/wDCB+Lf +ik65+Z/+Ko/4QPxb/0UnXPzP/xVAHr/AMff+SN+LP8Aryb+YrG/ZY/5Id4f/wB65/8AR8leY6j8 NPEmpWE1nqHxB1i4tJ12SRSgsrj0IzzUej/C/X9HsIrDSfH2rWlpHnZDCCqrk5OAD6kmgD6qor5h /wCED8W/9FJ1z8z/APFUf8IH4t/6KTrn5n/4qgD6eor5h/4QPxb/ANFJ1z8z/wDFUf8ACB+Lf+ik 65+Z/wDiqAPp6ivmH/hA/Fv/AEUnXPzP/wAVR/wgfi3/AKKTrn5n/wCKoA+nqK+Yf+ED8W/9FJ1z 8z/8VR/wgfi3/opOufmf/iqAPp6ivl+TwR44gAl0/wCJWqi4XlfO3FT+tb/w6+LOv6N4stvB/wAU YoRcXWFsdWiGEmPQBu3PTPHPUc5oA+gaKKKACiiigAooooAKKKKAPA/jNpt18PPHOn/FDw/CzWhZ bXXLaPpJExAEn16DPqFPrXuOkalaaxpdrqOnTLPZ3UayxSL0ZSMijVtOtdX0u607UYVns7qNoZY2 6MrDBFeHfBvUbr4deO7/AOF+vzM1m7NdaFcydJIySTHn16n6hvUUAe+U2RFkjZJFDIwKsrDIIPY0 6igD5z17Tr74DeL5PEOhQy3PgDVJQNQsU5Nk56Og9PT/AL5PY19AaPqdlrOl22o6Xcx3NlcoJIpY zkMpqTUbK21KwuLK/gjuLS4QxyxSDKupGCCK+erCe+/Z/wDF4sL55br4cavMTbztljp0p7N7fzHP UGgD6NoplvNFcQRzW8iSwyKHR0OVYHkEHuKfQAVR1zSNP13S59O1i0hvLKddskUq5BH9D71eooA+ dL3RPFXwKvZdR8Ki41/wE7l7nTHYtNZg9WQ+nuPxHevafA3jPRPG+ipqfh68W4hOBJGeJIW/uuvY /wCRXREBgQQCDwQa8Q8dfCjUdD1uTxh8JZ103Wh81zpnS3vBnJG3oCfTp6YNAHt9FeafCv4sad40 eTStRgbR/FNrlbnTLj5W3DqUz1Ht1H616XQAUUUUAFFFFABRRRQB5h+0X4RufF/wzvbfTVZ9Rs3W 8t1X7zlM5Ue5BOPcCk+DfxCsPHnhe2dZkj1q2jWK9s2OHRwMFgDyVOM5/CvT2GRivHvHvwN0PxBr Da1pNzd6DrTHc1zYNtDn1K+vqRjNNK4m7HqW0+h/KgqT2P5V4iPhL45UBR8UNWwOB+6P/wAVS/8A CpvHP/RUNW/79H/4qnysXMj2owg9V/Sm+SgPSvGF+Evjpjj/AIWjqw/7ZH/4qvXPD+mX2maHYWV7 eNf3NvCscl1IMNMwHLH3NFmF0XwmBwv6Uu0+hryTxL8NfGOqa9fX1j8QtR0+1nlLx2sUZKxD+6Oa zf8AhU3jn/oqGrf9+j/8VRysOZHtu0+hpDx1rxMfCXxyTj/haGrf9+j/APFV6h4K0HVdB8OW+n6r q0usXcbOWvJlwzgsSAfoDj8KOUOY3QCegNG0+h/KvMfHPw/8V694hlv9J8cX+jWjoqraQRkqpAwT 171gf8Km8c/9FQ1b/v0f/iqOVhzI9qaEHqv6U3yVB+7Xi4+E3jkn/kqGrf8Afo//ABVejfD3wxrX hrRZrPWten164ecyrczrhkUqo2Dk8ZBP40WYXR0yr/dFLtPoa86+IngXxP4j1uG80Xxle6FbJAsT W0CEqzBmJfqOSCB+Fcv/AMKm8c/9FQ1b/v0f/iqOVhzI9t2n0NIQR1FeJ/8ACpvHP/RUNW/79H/4 qu5+G/g7xB4YXUP7c8UXXiD7T5flfaFx5O3dnHJ65H5UcrDmR2gBPQUbT6GuF+JPg7xF4mmsX0Px Vd6AturiRbdCfOJIwTyOmD+dcZ/wqbxz/wBFQ1b/AL9H/wCKo5WHMj23afQ0EEdQa8S/4VN45/6K hq3/AH6P/wAVXYfDnwR4k8NX13Prfi671+KaIIkVwhAjbOdw5P0o5WHMjvACegpdp9DXJfEbwxrf iTTLa20TxBcaDNFN5jz265Mi4I2nkcZOfwrz7/hU3jn/AKKhq3/fo/8AxVHKw5ke2GPPVT+VMMCj qv6V4v8A8Km8c/8ARUNW/wC/R/8Aiq6bwB4A8U+Htc+3ax42vdbtfKaP7JOhC7jjDdTyMfrRZoLo 9EWMDoKftPoa5zx5oGr6/wCH3sdI1iXRrppFcXcK5YAHkdR1rzT/AIVN45/6Khq3/fo//FUcrDmR 7cQQCSMAckngCuN0T4i+H9d8c3fhXSp5Lu9tYvNkmiTdDkHDLvHGRx7c4rz64+CfiTVQLfXviNrd 1Yn70UYKFvbrj869V+HfgLQvAmlGz0CzWEPzLMx3Syn1Zv6dBRa2rC9zrVG1QKWiipKCiiigAor5 88a/GDxD4g8SXfhv4U2sEn2Vtl1q84zHG3Qhc8Y6jPOew71iLoPxVkG+b4lSRyNyVSDIH06UAfT1 FfMX/CPfFL/ops//AID0f8I98Uv+imz/APgPQB9O0V8xf8I98Uv+imz/APgPR/wj3xS/6KbP/wCA 9AH07RXzF/wj3xS/6KbP/wCA9H/CPfFL/ops/wD4D0AfTtFfMX/CPfFL/ops/wD4D0f8I98Uv+im z/8AgPQB9O14j+1//wAknh/7Clv/ACeuQ/4R74pf9FNn/wDAesvxH8PPHvijTxYa74+a/tBIJRFJ bnG4ZweD7mgD6vi/1SfQU6vmM+HfikOD8TJx9bek/wCEe+KX/RTZ/wDwHoA+naK+Yv8AhHvil/0U 2f8A8B6P+Ee+KX/RTZ//AAHoA+naK+Yv+Ee+KX/RTZ//AAHo/wCEe+KX/RTZ/wDwHoA+naK+Yv8A hHvil/0U2f8A8B6P+Ee+KX/RTZ//AAHoA+naK+Yv+Ee+KX/RTZ//AAHo/wCEe+KX/RTZ/wDwHoA+ naK+YHt/jDoebzTfGUOtSIMm1uoQA49BkdfxFeofBr4qw+PFu9M1SzOl+JrDi6s26MM4LJnnGeoP TI60Aen0UUUAFFFFABRRRQAUUUUAFV9SuDZ6ddXIXcYYnkA9cAnH6VYqh4h/5AGp/wDXrL/6AaAP mT9nq087w3qevXP7zUdVvpXlmPLMAeh/4EWNeq15r+zz/wAkztv+vmb/ANCr0qgAooooAKKKKACi iigAqpq327+zp/7JFv8AbyuIvtBPlg+rY5q3UF7d29haS3V7PFb20Q3PLKwVUHqSelDBHn3w7TUr Xx94sstW1afU5Yo7djI/yqCwJIVOijnFTfF6HX38OarcWOprp2l2tqZT9nB8+d8/dLfwr06cmszw r4n0E/FLxXMNZ07yrtLVLd/tC4mYLghTnk544rb+L+t6VaeCtd0661Kzh1CazPl20koWR8njC9T0 NTP4E/IuNue3p+h1Xh1mfw9pbuxZmtYySTkk7R1NaFYHgjV9N1Tw9Yrpt/a3bW9vEkwglDmNtvRs dDwa360n8TMofCgoooqSgooooAKKKKACvOfj7psd58PLm84S606VLiCUdVO4A4PuDXo1cP8AGz/k l+u/9c1/9CFAHuPga/l1Twbol9cnM9xZxSOfVigya3K5f4X/APJO/Df/AGD4f/QRXUU2JBRRRSGF FFFABRRRQAV5h8e/Ak3i3wxHqOiZi8TaK/2vT5k4YleTHn3xx7ge9en0UAcP8HPHcPj/AMF22pYE eoxHyL6DoYpl68dgeo+tdxXz14wjf4N/FqDxXaIy+D/Ecgt9UjQfLbznkSY7d2/76HpX0HFIk0SS ROrxuAyspyGB6EGgB1ZfibQdO8TaFd6RrNutxY3SbHRv0IPYg8g1qUUAfPXgbXdS+DfiuLwL4yuG n8MXjn+xdVfpHk/6pz26/gfY8fQoIIyORXN/EHwbpXjrwzc6LrUeYpBujlUfPDJ2dT6j9eleXfCb xjqvg/xGPht8Q5P9Mi40jUmPyXcX8Kbj3wMD8jyBkA91ooooAKKKKAPOPir8KdL8crHf20raV4lt sNa6nb/K4YdA+PvD9R2rk/BXxU1bwxrcXhD4vQrY6j9201gcW92OgLN0B9/zANe51g+NfCOi+NNF k0vxDZpc2zcqejxN/eRuoNAG6rBlDKQVIyCDkEUtfOdtqfiz4DXkdnrxufEPw+d9kN6o3T2IPRWH p7dD2I6V734f1vTfEWkwanot5DeWMwyksTZH0PofY80AaNFFFABRRRQAVT1XVLDSbdJ9VvLezgeR YlknkCKXY4C5Pc+lXKxfGehWHiXwxqOk6uALO4iIZzwYyOQ4PYg859qmT5VcaV3Yvahqdhpxtxf3 dvbG5lEMIlkC+Y56KuepPoKWz1Kxvbm7t7O7t557RxHcRxuGaJiMhWA6HHPNeBfA+/ufHXi2KfxP dxXMnhe28nTU2kC6DMy/bOeuQoUEe9XPDev+I9G+I/xGj8PeDp/EEUmpxtJLHfw24jPlL8uH5P1F V1t5N/ikvzv+G5F3+KX4N/19+x7U2u6SkeoO2pWYTTji8YzLi3OM/Pz8vHPNU9D8ZeGdfumttE1/ StQuFG4xW10kjAeuAc14Nb3d5f8Ag3433Oqac2l3ssgMtm8qymI+SOC68H149aNGuNM8T694B0vQ fC8/h3WLExX019e2iWTTwogDiLBzKGP6c0Q1aT7R/FXf3BKVot/4vwtb77n0vgelGB6UVk+J9dt/ DultfXcU8qbggWJM8k4G49FX1YkAUm7blGtgelUrLVtPvr27s7O9t57q0IW4hjkBaInoGHboax7D Tr/V5oNQ1q8CwjEkNjZynylPYu4wZD+S+1c7cJrNz8VdatdHnhsom021aa8eMSOmGlwqIeCTzyem OlPW9mK+ja8vzt+p6PgUYHpXJaTrN/pusX2j+IZ4bp4LT7dDeRx+WZYgcMHQcBgcdOCCOlM00+I9 ZsLbWINTgsknj82LTzbq6FTyod/vZxjOMe1K/X+v60YX6df6/wA0dhgelUrzVtPsr60sru8t4Lu7 JFvDI4VpSOoUd65uTxbNeaJoj6ZDHHqWrymCNZsskJUEyE467QrY9eKx/Etpr1jq3hdNQ1KHVLKT Voy0jQLDJE2GwAF4ZT780+qXml/X3ik7Rb8r/wBfcek4FGB6Vy2m3epW/jrUdP1TUPNs5oBc2EXk KgCg4dSw5Yqcfgw9Ki8HPqGtW+sXOp35vNKubiSKyQQiIiFSVLblOTk5weOAKFrt2/4BTsddgelF cZqV3e+CbR7qe5Oo6HHj93M4+0wj0Rj/AK3/AHT83oT0rrrWdbm2injDqkihwJEKMAR3U8g+xo31 Qr9GQrqVi+qSaat3btqEcYme2DjzFQnAYr1xnvWcni3w4+tHSE1zS21UHBtBdJ5ufTbnOa4a3iM/ 7QniCJXaNpPDkKB16rmVhkVyfhnT9N+H66dovxC8JWnlx3g+yeJoIllSWUuSjSt9+N8kdeM0oO9r 9f8ANr9PmKTtzeX+Sf8AXY+gcD0ooHIyKKZQYowPSiigAwPSiiigAowPSiigAwPSiiigAooooAK4 j42axPoPwq8S6hZuyXKWjJG69VZyEBH03Zrt680/aR/5Ir4m/wCuKf8AoxaAOA+DmiQaJ8PdJSFF Wa6iFzO4HLs3Iz9BgV2tYXgT/kSdB/68ov8A0EVu0AFFFFABRRRQAUUUUAFFFFABXn+uJN4m+Ikn hu4v72z0y0sVunitJfKe5dmxyw5wuO1egVxXjq28G3WoW/8Awk2ow6dqMUeYp1vDazbD2DA8j2pd UPoyDwbJc6L411jwrLe3N5Yw28d5aNcvvkiVjhkLdSM+td5XmXwx0mwbxXrOuaHHcro5hSzgnuHZ 2unU5eTLckdBmvTaror/ANf0iert/X9MKKKKQwooooAKKKKACiiigAry/wAZofDvxm8C+I9P+Se8 uRY3Krx5qn5efwY/kK9QrzL4tf8AI2/Dz/sLp/6EtNAz6iooFFIAooooAKKKKACiiigAqh4h/wCQ Bqf/AF6y/wDoBq/VDxD/AMgDU/8Ar1l/9ANCBnzf+zz/AMkztv8Ar5m/9Cr0qvNf2ef+SZ23/XzN /wChV6VQAUVnW+sW1zrt5pUIka4tIklmcL8i7s7Vzn72BnHpVm/vrTT7cz39zDbQg43yuFH60AWK Kp6bqlhqkbyabeW93Gh2s0LhgD6HFXKACimSyJDE8srqkaAszMcBQOpNVNM1jTdV8z+zL+1u/Lxv 8mQPtz0zjp0oAvVHcQRXMLw3MUc0LjDRyKGVh7g8Go7+9tdPtmuL+4itrdSAZJW2qM9OaTT7+01K 2Fxp91DdQElRJC4ZcjqMigCrHoGixurx6PpiOpyrLaRgg+oOKmvdJ02+lEt9p1ldSgbQ89ukjY9M kGrtFAFax0+ysA4sLK1tQ/LCCFY9312gZqzRRQAUUUUAFFFFABRRWbrWs2ujCza9EoiurhbZZFXK o7fd3HsCeM+poA0q4f42f8kv13/rmv8A6EK7jpXD/Gz/AJJfrv8A1zX/ANCFAHsvwv8A+Sd+G/8A sHw/+giuorl/hf8A8k78N/8AYPh/9BFdRTe4lsFFFFIYUUUUAFFFFABRRRQBi+M/Ddj4t8M6hoeq putbyMoTjlG6qw9wcEfSvLP2fvEd/pd5qPw28VvjWtDJ+ySN/wAvNt2K+uAR+BHoa9trxj9oTwpf LHp/j7wopTxH4ePmuEHNxbjllPrgZ47gsPSgD2eiue8AeKrHxr4T0/XdNYeVcpl0zkxSDhkPuDXQ 0AFcP8Wvh5p/xD8ONZ3B+z6lBmSxvVHzQSdueu08ZH9RXcUUAeO/Bj4h6hcX8/gbx6ptvF+mgqru eL6MdHU9zjn3HPrj2KvNPjP8NR40sINS0Wb7B4s0wiWwvUO0kg52MfQ9j2PtmmfBb4kt4wtLjR/E EB0/xfpf7q+s5BtL448xR6HuOxPoRQB6dRRRQAUUUUARXdtBeW0tvdwxzW8qlJI5FDKwPUEHqK8E 1/wB4j+FmrXHiX4Ub7rSJG8y/wDD0jFlYdzF3/Acj3HFfQFFAHFfDL4kaH8QdMM+lSmG+hGLqwmO JoG9x3Ge4/TpXa15H8TfhGNV1QeKfA13/YXjCE7xNF8sdyfSQDufXHPcGm/DL4uHUtV/4RXx7af2 F4vh+Qxy/LFdH1jPTJ64zg9iaAPXqKKKACua+IXh+98UeGZ9HsNS/s5LplS5mCbnMGfnReRgkcZ9 66Wik0nuCdtjhdU8ARprfhjVPDVxFpdxoqi1K+VuWe0xgxHBHpkHsav+EPCkmgeIvFWpvdpOutXa XKxhNpiAQLgnPPT2rq6Kfn6/i03+KuLlWn9bafqeb3vw3muLD4g241ONW8UOHRvJOLf92F55+bpn tVzxL4Dk1XRvC8dnfpa6voEsMlveGIsGCqFdSMg4Ye9d5RSSta3S34bA0n+P47nF2z6/ffFG4ZWu bbw3p9kIWSRMJd3DnO5MjJCjAznGTiuzZQylWAKkYIPQ0tFPpYfW5z8Hh59Mv0m0G6+yWrN++sXX dAR3KD/lmfpx7VjXHhbX18Z6j4jsNXs4ZpoI7WG1aBmieNSx/e/NktluCuP1ruaKAtv5nP6LoVxH eXWo65cxXmo3MQgIij2RRRDnYikk4JJJJJJ49KpWeh6/plvHpml6rZrpKKUjee3Z7mJOyq24KcDo SPrXW0UWQrHOXPhS2/sTTrHTpntJtOcS2lxgOyOM5LA/eDAkH1zWNrHhvxTq9xpl3daxpsc2nXS3 EVvDauIZMAjMmX3E4JxggfWu8oo63+YWTVjgvigYrq00y2s9Qittde7WG2dHG5d4IlyM9Nm79K7C 2sv7P0eOy0wRx+RCI4fMBKjAwM45NVbjwxoNzeNeXGiaXLds28zyWkbOW9SxGc1r0ktH5g1rcwdL 8OpFdrqGrTtqWqDlZZRhIfaJOiD36+9bN1E01tNEkrwu6FRIn3kJHUZ7ipaKbWlhrTU878KeAtX0 /WtZ1rXvEh1DWL2zXT4LmG1WHyIlyQ2MkF8nOentWbdfDrxVryW+neL/ABnHqOgQzJM0EOnrDNcb GDKJHyeMgZwBmvVqKFo0+3/D/mK2/mcX4bbXr34ga/d3LXVt4ctoo7KztZk2iWUcvMvGdvO0HocV q+K9K1jU5dJOi6ydLW2vFmugIg/2mIZzFz0z61v0ULS3l/w/9fcFt/P/AIb+vvOe0nSdZtfEOu3l 7rZutOvPL+xWfkhRZ4XDfN/Fk81J4L0zVtI0JLXxBrB1i+EjsboxCPKliVXA9BxW7RQtBvUKKKKA CiiigAooooAKKKKACvNP2kf+SK+Jv+uKf+jFr0uvNP2kf+SK+Jv+uKf+jFoA5jwJ/wAiToP/AF5R f+git2sLwJ/yJOg/9eUX/oIrRGpWjas2mLMDfLCJ2iCn5UJwCT0GT260AXKKKKACiiigAooooAKK KKACqt7p9lfbPt1la3Wz7vnwrJt+mQcVapkksUZAlljQnoHcDP50AOUBVCqAFAwABgClo+lFABRR RQAUUVCLq3N4bQTxG6CeaYdw3hM43Y64z3oAmooooAKKKKACvMvi1/yNvw8/7C6f+hLXoK6nZtq8 mliYfb0hE5iIIPlk43A9Dz6V598Wv+Rt+Hn/AGF0/wDQlpoGfUQooFFIAooooAKKKKACiiigAqh4 h/5AGp/9esv/AKAav1BqFuLuwubYnaJo2jJ9Mgj+tAM+Z/2ef+SZ23/XzN/6FXpQ615R8A7s2Fjr PhO//dappN7JuibglCcEj1wQfzFerjrQBw3wnc3thrmrSHdLf6pOxb/YQ7FH4AU7VY9ck8facI30 YhLWeSASxSkINyjJw33scZHvTfhShsbXXtHk+WWw1SYbc/wOd6H8QatX11qH/CXWt9H4f1aS2t7a W3Zl8n5mZgQVBk6cd8Ufy+n6B/N6v8zee8l03R5bvW3tt0ILObVWCkdgAxJyeB9ariXXmxOsGnCA pu+zMX876b87c/hTtQtT4h8PXFtPBcWLTjAScLvRlIKkhSRjIHfpTF1LU1CwNotw10Fx5yyJ9nLe u7dux/wGhgaGl30WpWEN3b7hHIPut1Ug4IPuDkVjaZ/yPuv/APXpaf8AtSrml2j6DoKxLFLeTIWk kS3A3SO7Fm2hiB1J6msOyvNRh8UapqD+G9Y+z3MEEaAeRuym/OR5v+0KpbsFsdmOtc94L/1Gr/8A YTuf/Qq1L++ltLeKWPTr27ZzzFbhNycd9zAfkTXO+FrnULNryK60DVYhc30s6yHySqo7ZBbEmfrg GpW/9d0D2+f+Zu6jqLQ3sFhZxrLfTo0gDnCRoOC7Y5xkgYHWq39oahp0lsuuLZvFcSiFZ7MOqox+ 6GViTyeMg07U7K4i1q21eyjE8kcLW00G7aXjJDZUnjcCBwetVrtLvxALaGXT7jT7OKdJpvtRTfJs OQqhWYYJ6knt0oXT+v60BhFrdxZ3WuPrr2Nvp+nbWDxK+8owyGbJPuMAdRUo1O+m8SWlrafYpNMm tTdNIVfzVXIA5zt5J9Oxqvrej3F94mspURTp0ig3pJ5JjO6NcdwSxzTfCOj3mnahqrXy/uQy29mc 5zbjLD6HLkf8BoWwMW31rUdUBuNKfR4LDcVja8kZnmAONwCkbQecZzWloerrqTXcEiLFeWjhJo0c OvIyGVh1BFczZeHrTQ4DZz+FLfVoUY+TcwW8DyMpOQJA5XkdM5Oa6PQLQWq3DJpFlpcTkFIrdVDs AOr7QBn0HP1oB7madb1iLxLNo7WVpcu0AuIZYd6LGpYj96WJ9P4eta8FxqFtY3c2rRW0jwqZF+xb v3gAzgK3IPbqc1gLeainiy41D/hHNYNs9mluMeRksrsSceb0wRW9qVxqL+Hri40q1aPUzEWgt7jb kP2DYJH60vsj3lYxV1vXZtGbU7O20m53wedFYRyuZzx0LdCfYAU/4i251D4c6t5ilJhafaFHdJFA YfkRUN1bNcwzKPCnkavNFzeR+UqLIR180EPwefu0vxAnm074Z6ktzN5141oLbeBjzJXwvH1Jons7 fIIfErm74avjqfh3S75jlri2jkY+5UZrmfjZ/wAkv13/AK5r/wChCuo8O2J0zw/pliRg29tHER7h Rn9a4T4+6qlv4L/saHEmpavMkEEI5ZhuGTj8h9TVztzOxEPhVz3j4X/8k78N/wDYPh/9BFdRWL4L 06TSPCekafMcy2tpFC/+8FAP61tUnuNbBRRRSGFFFFABRRRQAUUUUAFIyhlKsAVIwQe4paKAPnnR 2b4LfF9tImJj8EeKJC9ox+5aXOfu+wyQPoVPY19DVx/xX8E2vj7wXe6Nc4S4I820nxzDMv3W+nY+ xNcx+z941ute0K58PeIt0fijQH+yXkcn3pFBwsnv0wT6896APV6KKKACvIPjR8Or6/vLfxp4Fb7J 4x0wbwEGBexjrGw7nHAz1HHpj1+igDhPhF8RbL4heHvtCJ9l1e1PlX9i3DQSDg8HnaTnB/DqK7uv Dfi54L1Xwx4g/wCFkfDuPGqQDdqmnoPkvYv4m2jqcde/ccjn0v4deNdK8e+GbfWNGk+VhtmgYjfB J3Rh/XuOaAOnooooAKKKKACuM+Jnw50P4g6WLbV4jHdxDNtfQ8TQN6g9xnseK7OigD598P8AjzxJ 8KNVt/DfxU33miOfLsPEMalhjssvfp68j3HNe+Wd1Be2kV1ZzRz28yh45Y2DK6noQR1qrr2jad4g 0qfTdZs4byxnG14pVyD7+x9xzXgl1pPiv4EXkt94dFz4h+H7OXn0923TWIPVlPp79PUd6APouiuf 8EeMNF8a6JHqnh68S4t24dejxN/ddeoP+RXQUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFAB RRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFeaftI/wDJFfE3/XFP/Ri16XXDfHDSJ9c+ FHiaxs1Z7hrRpERerFCHwPrtxQBw/gIZ8FaAP+nKL/0EVh/DaT+0tR8Va053Pcai1sh9I4htAH45 NTfB3WYNa+HujyxODJbRC2mUdVdOP5YNQfCmP7GviTS5MiW01eYkHrtkwyn8jQt36fqge3z/AEZu x61d3t5dQ6Ppn2uK0mME80lwIsOACQowS2M98VWbxNOfDN5rEWkyKbSSVZra4mEbBY/vMDgg+w/W s1LmwvXe68QaFqNndrcOiPbxTkTKrYV/3R5yAPvD9Kn1D7e3gTxF9vEir5U4tRPgyeVt+Xfjv198 YzSbtFvyKSvJLzNCy1y/1C2ivLHRXfT5EDrJJcBJGGM5WPHI9MkZq82tWY0YamrO1uRhVVfnZs7d gH97dxj1rN0bXTb6ZY297p96l8sCDy4bd5I3IUYKyAbQD/tEVSvPDNzc+DjZOFa8N19vMIkKqW8z f5e4EEccZHeqkrO3QiLuk+pqPqurW0L3N/oEkVmi7maK5Esqr6mMKOg5OGP41dvdXtbWxt7oMZ1u Sq26RctMzDIC/hz9BXKfY/DzqY/7E1w3e3m2LXXXH3d+/wAv/wAexWrfabNBZaBPp1iIxpjhjYq+ 4iMoVKqT1Zc8fjQMdqev6npdubi+0BzAZEjVra6WUjcwXLDaMDntmrur6tNp2p6ZbmzEttfTC388 TAGNyrN9zHIwvXNQTeIJLgGLRtOvLi7J2/6RbvBFH7szgZA/2c0ni2CZl0m8jjeVbG9W4mSJSzFN jKSoHJxuBwOaF0uBNqWr3FhrOn2j2CvaXsvkJci4G5X2luY9vT5euah8b6fZXnhvU5byztriWK0l MbyxK7J8p+6SOPwrL1/Uze6j4duLaw1F7OG+3yzm1kXZ8jKPkI39SOcY96v+M9Ugi0fUrDyb6W6m tXVFgs5ZVJZSANyqR+tTL4SoP318jZ0f/kEWP/XCP/0EVBeXWqrKyado/wBpVTgvLciEN7rw2fxx Vfw1qtveWltaxx3qTRQIHE9nLCBgAEZdQDWBDFb3E0ieJ7bV7jVPNk2LEJxDs3HYEaMhANuPvHOc 1UviZEPhOq0jUk1Sxa4gjdHR3ieKTgpIpwVP4965jR9R8Qt4h19RpFvJteEeW2p4WP5D9393369q s/Dxmhsr6yns7u0nS7mk8udHICM3y4kIw/HoTUouf7E8R6xNfW941tfeU8MtvbvMMqpDKQgJB+ox S/y/yDX8TorV53tUe5gSG4Iy0Sybwp9N2Bn8q5/TbkyeMZY9Q0aGz1NrHcLqO687fEHxsPyrjk5r Yt9RWW0muXtruGKPnEkR3uMZyqjLH6Yz7Vyp122/4Tdb/wCzar9kGnGDzP7MuPv+YDjGzPSmt/67 D6f13Ol8Q393pmmyXdlYLfeUC8kZn8ohQOSPlOfpVfUNYu7Pw2NU+wQyShQ7QLd4GD02vs+YnjAw Ota1vLHdWySoH8uRcgSIUOD6qQCPoa5KxtLpr+30Ca3mGnafKbjz2U+XLGOYow3QkE8j0UUrdA8z Zk1e6htLRZtNY6rdZ8uyhmD4wMks+AABxk4/OkXV7y1lhXXNMNik8gijmjnE8YY9Ax2qVz0HGKoe LtGF5qmnanLazXsFujwzW8MrRvtYg712suSCORnpWemneH7t4lsND1S7cSoSLhrmJEwc7j5rAHGM 8A01qDF8dyf2Z4t8H6qh2lrt9Pm945F6H/gQFZfxbGPF3w8H/UXT/wBCWtP4kxm+1vwbpqZMkmp/ aGx2SNSSf5Vk+OXPiD4xeBfD1h+8uLW6+3XBXnylBB5/BT+lEdvn/l+txS3+X+f/AAD6kFFC9KKQ wooooAKKKKACiiigAoNFFAHjXxd+EUniHWo/E/hK/wD7I8UwgDzekdwAMAPjoccZ5yOorhRN8Z7D /R5/COnai6cfaYp0VX98bx/Kvp8jPWo2hQ9VFVddRWfQ+VYIvitBrV1qsPw/tku7qJIpsXibHC/d JXzPvDOM+lX/AO0vjD/0INn/AOBSf/HK+mvs8f8AdFH2eP8Auij3RanzL/aXxh/6EGz/APApP/jl H9pfGH/oQbP/AMCk/wDjlfTX2eP+6KPs8f8AdFHuhqfMv9pfGH/oQbP/AMCk/wDjlH9pfGH/AKEG z/8AApP/AI5X019nj/uij7PH/dFHuhqfMv8AaXxh/wChBs//AAKT/wCOVh+JvH/xC8LojeIPC+kW HmAsizXqBnA6kL5mT+FfWrQxKpZgAoGST2r5q+OGu2fxUuh4I8CaQut6haSedNqinENnj7wVx1z0 PY9smjQep5l/w0Jrf/QH03/vp/8AGpbr4+eIbSdobjQ9OjkXBIJfoRkHr6V43q+l32j381nqdpPa 3MTlHjmQoQR7H6j869I8UeEp9e+HHgfxNoltJcXVxnRbqKJcnzo2Kwn6sgA/AVIzv/DHxH8e+KWK eH/DWj30qrvMUd6gcL6lTICB+FdD/aXxh/6EGz/8Ck/+OVU+Dl5D8E9Zn8O/ETR006bU2V4dcQ74 pBgfu2bsoPp0PUYwa+ooUt5oklhKSRuAyupyGB6EHvVaC1Pmj+0vjD/0INn/AOBSf/HKP7S+MP8A 0INn/wCBSf8Axyvpr7PH/dFH2eP+6KPdFqfMv9pfGH/oQbP/AMCk/wDjlH9pfGH/AKEGz/8AApP/ AI5X019nj/uij7PH/dFHuhqfMv8AaXxh/wChBs//AAKT/wCOVn6vF8VtX+xi/wDh/bOlrOtyiC8Q Kzr03DzOQOuPWvqr7PH/AHRR9nj/ALoo0DU+ZTd/GW5/dReC9PtHfgTSXCMqe5G811Pwy+EN9b+J E8V+PtQXVdfXmCJOYbU+o9SO2AAPrXuIgjH8IqRVC9BRdLYLN7gi7VApaKKkoKKKKACiiigAoooo AKKKKACiiigArwb44aReeCPFenfFPw1CWa2It9Ztk4E8BwNx/QZ9dp7V7zUGoWdvqFjcWd7Ek1rc RtFLG4yHUjBB/CgCvoGr2WvaLZarpcwmsruJZYnHcH19+xHrV+vn/wCFN7cfC/4j3vw21mV20e+Y 3WhXEh4IPWLPr/UH+9X0BQAUUUUAFfPnj/w/qXwi8Vy+PvBNu03h+5Yf23pMfCgE8yoO39D7E4+g 6bNGk0TxTIskbqVZGGQwPUEdxQBl+FPEOm+KtBtNY0W4W4srlNysOqnurDsw6EVrV85ata33wB8X Nq+lRzXXw61WYC7tF+Y2Eh/iX29PUcdQDX0Jpd/aarp1vf6dcR3NncIJIpYzlXU9CKALNFFFABRR RQAUMAylWAIIwQe9FFAHhvjf4U6p4c1uXxf8Ipl0/VfvXWlZxb3Y6kBegPt09MV1Xwp+K+meOA+n XkTaT4ntsrdaZcfKwYdSmeo9uo7+tekV5t8VfhRpvjby9SsZm0jxRbYa11O3+Vtw6B8feHv1H6UA ek0V4d4H+K2qeHtai8IfFyBdO1YfJa6rjFveDoCW6An16euDXuKkMoKkEHkEd6ACiiigAooooAKK KKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKRgGUg9DS0UAfO njP4UeI/C3iW68Q/CyWERXbb7vR52wjnOSUzxz6cY7HtXKWl/wDEOz8R3erH4e3QubqBIbmKOUeX IyE7XHJOcHFfWrKGHIqI2yHtVJrdk2ex8z/8Jb8RP+ib3X/f+s3xDrXxI1fSZ7GLwHeWYnUpJIpW QlSMEANwPrX1T9mT0o+zJ6UWiwTktT5a0fxD8TrG0EF54Gu77aAqMdsW1QMYwvX61e/4Sz4h/wDR Nrr/AL/19L/Zk9KPsyelNuLBXR80f8Jb8RP+ib3X/f8Ao/4Sz4h/9E2uv+/9fS/2ZPSj7MnpS90P ePmj/hLfiJ/0Te6/7/0f8JZ8Q/8Aom11/wB/6+l/syelH2ZPSj3Q94+aP+Et+In/AETe6/7/ANH/ AAlvxE/6Jvdf9/6+l/syelH2ZPSj3Q94+aP+Et+In/RN7r/v/R/wlvxE/wCib3X/AH/r6X+zJ6Uf Zk9KPdD3j5o/4Sz4if8ARN7r/v8A0f8ACW/ET/om91/3/r6X+zJ6UfZk9KPdD3j5o/4Sz4if9E3u v+/9H/CW/ET/AKJvd/8Af+vpf7MnpR9mT0o90PePmj/hLPiH/wBE2uv+/wDR/wAJZ8RP+ib3X/f+ vpf7MnpR9mT0o90PePmj/hLPiH/0Ta6/7/0f8Jb8RP8Aom91/wB/6+l/syelH2ZPSj3Q94+Tpo/i jrnilNQ07wf/AGfdLam1ilvJFMdsGbLOMnkngdD0r1z4L/CpfBkl1q+sXZ1PxLfc3N23RAeSiZ5+ p747CvV1t4x2qQAAcUXSVkFm9xaKKKkoKKKKACiiigAooooAKKKKACiiigAooooAKKKKACs7xDre m+HdJn1PWryGzsYBl5ZWwPoPU+w5rmvid8StD+HumrLqkhn1Cbi10+A5mnb2HYZ7n9elea+Hfh94 j+KGrQeJfiyWttKQ+ZY+Ho2Kqq9jKOv4Hk98dKAKlzqfiv48XclnoJufD3w+Vyk1867Z74A8qo9P bp6k9K9s8E+ENF8FaJHpfh6zS2t15duryt/edupNbVpbQWdrFbWkMcNvEoSOONQqqo6AAdBSXlzF Z2c9zcNthhjaR29FAyT+QoA8Iu7S28c/tRSW1zbwXOl+GtOzLHIgZHmkA6gjBPzKOf7le0aH4d0f QrV7bR9OtrO2eY3BiiQBfMOPmA6A8DpXkn7LttLqWm+KPGV4M3Ov6pI6MR/yyQnGPbczD/gNe4UA ZHirw5pPirRp9L16yiu7KUco45U9mU9QR6ivCj/wlnwDuuPtPiP4cu3TrcaeD/T/AMdP+yev0ZTZ Y0mieKZFkjcFWRhkMD1BHcUAZXhTxJpPivRodV0C9iu7OUcMh5U91YdQR6GtevBfFXwy13wFrU3i v4QPsDHffaCxzFcL1Plj19uo7HtXefCz4oaN4/s3jt91jrVvxd6ZcfLLERwSAfvLnv274oA76iii gAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigDzf46+A28beEvM0z914i0t/tenT qcMJF52Z/wBrH5gGrPwU8eL488GxXVyBFrNmfs2oQEbSkq8E47A9fzHau/r58+IUEvwi+Kdr4606 Nv8AhGNbcWutQIOI3J4lx+v1DD+KgD6DoqO2niuraK4t5FlglQOjqchlIyCD6YqSgAooooAq6rp9 pq2m3On6lbx3NncxmKWKQZV1PUGvn3Sb2++AfjBNF1aWa5+HmqzE2V2+WNhIT91vb19evqK+jKyf Ffh3TfFWgXej63brcWVyu1lPVT2ZT2IPINAGpFIksSSROrxuAyspyGB6EGnV8+fD/wARal8JfFkX w/8AG9w02h3Df8STVpOF2k8ROe3Jx7H2Ix9B0AFFFFABRRRQAUUUUAc/448H6L420STS/ENmtxAe Ufo8Tf3kbsa8VtNX8V/Ai7isPEpuPEHgBn8u31BF3TWQPRXHp7dPQ9q+iqhvbS3vrSW1vYI57aZS kkUihldT1BB60AVtC1jTtf0qDUtGu4byxnXdHNE2Qf8AA+x5FX6+fNe8B+JPhNqlx4j+FnmXuhyN 5l94fkYsMd2j78e3I9xxXqPw0+IuhfEHSvtOjzGO7jGLmxmOJoG7gjuM9xx/KgDsqKKKACiiigAo oooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACii igAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooqG8urex tZbm9nit7aJd0ksrhEQepJ4AoAmormf+FgeDf+hs0D/wYw//ABVH/CwPBv8A0Nmgf+DGH/4qgDpq K5yHx34RmlSKHxToUkrsFRF1CIlieAAN3JroZpEhieWZ1jjRSzOxwFA5JJ7CgB1Fcz/wsDwb/wBD ZoH/AIMYf/iqRviF4NVSx8WaBgDJxqER/wDZqAOnrx74k/F2S11f/hE/h3aDXPFsuUPljdDaerOe hI9M4Hc9q4Xxj8XLj4ja3N4Y8F63Y+HtCX5bzW765SB5F6ERBiDg+3J9q9q+GfgDQPAeipb6BEJJ JlDTXz4aW5PXcW9PQDigDlvhh8Ik0XUT4m8aXf8Ab3jCc73uJvmjtz6Rg9x6/kBXrVc3J498IRSN HJ4p0FHUlWVtQiBBHUEbqb/wsDwb/wBDZoH/AIMYf/iqAOmrzL9o/XjoPwj1loWIub1VsoQp+YmQ 4OP+A5rp/wDhYHg3/obNA/8ABjD/APFV5V8Y7iDxr8UPhx4WsJ47qxeT+2J3hcMrRL9xgRwQQr8+ 9AHqfwv0BfDHw+0DSAoD21ogkx3kI3Of++ia6iueu/G3hWyupbW88S6Jb3ELFJIpb6JWRhwQQWyC PSov+FgeDf8AobNA/wDBjD/8VQB01Fcz/wALA8G/9DZoH/gxh/8Aiq3NM1Gy1WyS80u8t720fISa 3lWRGwcHDAkHBBFAFqvLPin8JLXxRdpr/hu6bQ/F9sd8N/B8olI7SAdfr19cjiu21Lxj4Z0y8ktN S8Q6PaXUeN8M97HG65GRlScjiq3/AAsDwb/0Nmgf+DGH/wCKoA89+HfxcuYdZHhD4n2o0XxPHhIr h8LBeDsVboCfyPseK9ory/4hyfDHx9ozWGveIvD7lcmC5TUYRLA3qrbv06GvO/CfxC1f4XzQ6b4p v4vE/gh5PIs/ENjIJ/IPH7uUqT0BHBOR2yOKAPpSiudk8c+FIobaWbxLo0UdzEJoTLexpvQ9GAJH HWo/+FgeDf8AobNA/wDBjD/8VQB01Fcz/wALA8G/9DZoH/gxh/8Aiq1dG1zSdcjkk0XVLHUI4yFd rSdJQpPYlScUAaNFZWs+I9E0OSNNa1jTtPeUFkW7uUiLgdSNxGazv+FgeDf+hs0D/wAGMP8A8VQB 01FZmkeIdG1kkaRq+n35HJFtcpLj/vkmtOgAooooAKKKKACiiigAooooAKKKKACsrxToNj4n8PX+ jarEJLO8iMTjuM9GHoQcEe4rVqtqV/Z6ZZSXmpXUFpaRY3zTyCNEycDLHgckD8aAPFvgHrt94c1r Uvhh4plJ1DSiZNNmb/l5tjyMfQHI9sj+Gvcq+e/j/d+HdTs7Dxd4S8U6EPFfh9xPCIr+ItcRA5aP Ab5j1IHcbh3r0TwZ8WvCXiHwzYanca9pOn3E8YM1rc3kcbxP0ZSGIOM9D3FAHoFFc/Z+NvCt7dRW 1n4l0S4uJWCRxRX0TO7HoAA2Sa27u5gsrWW5vJooLeJS8ksrBVRR1JJ4AoAlormf+FgeDf8AobNA /wDBjD/8VR/wsDwb/wBDZoH/AIMYf/iqAG/EfwTpXj3wzPo+sR8N80E6j54JOzr/AIdxXm3wi8ba r4c8Qn4b/EN8atbjbpl+x+W9i/hGT1bA4PfoeRz6Ynj7we7qqeKtBZmOABqERJP/AH1WP8YPh5p/ j/w75csgs9Ws8zWN+vDQOOeT/dOBn8+ooA72ivDPgx8aLLUbO40LxzqunWmvaYTE149yggvFBxvV 87S3rg89fXHpv/CwPBv/AENmgf8Agxh/+KoA6aiuZ/4WB4N/6GzQP/BjD/8AFV0kUiTRJJE6vG4D KynIYHoQaAHUVzcvjzwjDK8UvinQkkRirI2oRAqR1BG7g03/AIWB4N/6GzQP/BjD/wDFUAdNRXM/ 8LA8G/8AQ2aB/wCDGH/4qt+xvLa/tIrqxuIbm1lXdHNC4dHHqCOCKAJ68g+JnwjN/qo8VeALoaF4 vh+ffF8sV16rIOmT69D3Brv7zxt4VsbqW2vfEui29zExSSKW+iR0YdQQWyDUP/CwPBv/AENmgf8A gxh/+KoA4n4Y/F1dX1M+F/HFp/YXjCD5Ggl+WO5PrGT3PXHfsTXrleR/E62+GXxC0xYdU8UaDBfw jNrfw6hCJoG7YO7kZ7H9K5HwZ8UdV8BXVpovxEu4dW8PzsY9O8UWbiaGQA42yMuckdD3HfPWgD6K orn7rxt4VtHVLvxLosDsiyBZb6JSVYZBwW6Ec1D/AMLA8G/9DZoH/gxh/wDiqAOmormf+FgeDf8A obNA/wDBjD/8VWxo+sabrVs1zo+oWl/bqxQy2syyqGABxlSRnBHHvQBeorH1jxRoGi3K22sa5pdh cMgcRXV3HExUkjOGIOMg8+1Uf+FgeDf+hs0D/wAGMP8A8VQB01FZ+k65pWsIW0jU7G+UdTbTpKB/ 3yTWhQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUA FFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQB5t8YviU/gVtEsNK08 aprmq3KxQWe4jKZAY5/EAfn2rrdXsodd0e40/VoM213CYp4N3ZhyuR+Wa8e8QIL/APa50aK4AeOy 0czwhhna3z8j35r2ygDy7/hQvw6/6ATf+BMn+NL/AMKF+HX/AEAm/wDAmT/GvUKKAPNbL4H+ALK8 gurbRGSeCRZY2+0SHDKcg9fUV6PdRLdW80E+WimRo3GeqkYP86fXnvxI+Jtn4WnTR9Htn1rxXc/L b6Zb/MVJ6NIR90e3WgDkvG3w0+EPgvRpNT8QaaIIRnZGLmQyTN/dRc8muG8DfBK28b6uuvanoreG fC2M2unLKzXNyvZnZvug/wD6vWvTvBXwwvLzWU8V/E+5TWPERw0FoRm2sR1AVehI/Ie55r1qgDy/ /hQvw6/6ATf+BMn+NenQILeGKKLKxxqEUZ6ADAp1FAHml38Dvh/d3U1zcaIWmmcyO32iQZYnJPX1 qL/hQvw6/wCgE3/gTJ/jXqFFAHl4+Avw6J/5ATf+BMn+NYHwd0+1vviz4u1WwiKaVoMMXh/TQTnY kY+YAnk/dPP+1XrPi3WI/D3hbVtXlIC2VrJMMn+ID5R+JwK4f9nHR20v4V6fdTjN3q0kmpTv3YyH 5Sf+AhaALOsfBfwJrGrXmpajoxlvLuVp5n+0ONzsck4B9TVT/hQvw6/6ATf+BMn+NeoUUAeX/wDC hfh1/wBAJv8AwJk/xru/C2gad4W0ODSNDgNtp8BYxx7y2CzFjyeepNatFAHB+JvhJ4L8Ta3c6vrW km4v7jHmyee67sAKOAcdAKy/+FC/Dr/oBN/4Eyf416hRQB5f/wAKF+HX/QCb/wACZP8AGut0DwV4 e0Hw5PoGnabF/Y87M0ttMTIrlsZzu+gro6KAPl74hfBSDwnq3/CQaRpDeIvDKZNzpDSOJrZCckxM DkgEk/5zXX+Bvhv8IPG+jLqWgaZ50Y4lia5kEkLf3XXPB/Q17kOOleT+OPhjdQ6y/iz4bXK6P4mX 5pbcHFtfDurr0BP5fQ80AWP+FC/Dr/oBN/4Eyf4113grwXoXgm0ubbw3Zm0huHEkq+Yz7mAxnk+l c58N/ifaeJ7qTRNctm0TxbbfLPptwcbyOrRk/eHfHX6jmvRaAOU8bfD/AMN+N5rWXxLYG8e1VkiP msm0EgnofYVzX/Chfh1/0Am/8CZP8a9QooA8X8Q/s9+GpIPtHhC4vfD+tQjdb3EU7MgbtuGcj6g1 3XwZu/GMvhmS2+IFqkepWkzQR3IcE3SDo5A6fXv1xXXViSeMNIs/G+n+FZ5ZRrN9C08MYjJUooYk lu33GoA6yiiigAooooAKKKKACiiigAooooA8z+J3xMm8LeLPDfhvQ9MGrazqkwL2/mbPLh5BOex4 J54wprqvFGi2PijRLrSNbhNxp9ztEsW4rnawYcj3ArxvSX+2ftg60bgBjbaORFn+HAj6f99H8691 oA8v/wCFC/Dr/oBN/wCBMn+NeU+JPhj4S8D/ABTsI9e0wz+Ddd/c28rSuPsNx/dLA8g+/Y+xr6mr nfiB4Us/GvhO/wBDv8Ks6ZilxzDKPuuPof0zQBz2i/BnwNomr2upabo5hvbWQSxSee7bWHQ4JxXc 6xp9trGl3enagnm2d3E0M0eSNyMMEZ+ledfA3xVeajpl34W8SEp4n8PN9muA55miHCSD14wCfoe9 en0AeXf8KF+HX/QCb/wJk/xpf+FC/Dr/AKATf+BMn+NeoUUAeZW/wL+H1vPHNFoZWSNg6n7RIcEH I716ZIvmRtG2SrKVIz26UtFAHhnj/wDZ38M6h4duB4StP7P1qP8AeQF5maOUj+Bs9AfUdDWJ8JvA vw38ZWFxZ6n4bbT/ABPpp8rULB7iRWVhxvUE/dP6V9HV5Z8WfA1/PqFv418DkW/i7TRlkUYW/iHW Nh3bHA9enpQA/wD4UL8Ov+gE3/gTJ/jXpttGttbxQQ5WOJAiDPQAYFcr8NPHNh488Pi+swYL2E+V e2T8PbSjqpHXGc4NdbQB5re/A/wBe3k91c6IXnnkaWRvtEgyzHJPX1NQ/wDChfh1/wBAJv8AwJk/ xr1CigDy/wD4UL8Ov+gE3/gTJ/jXoeh6ZaaHpFppmmRmGytYxFDHuJ2qOgyau0UAee658G/A2uav d6nqejma9upDLNJ57ruY9TgHFUf+FC/Dr/oBN/4Eyf416hRQB5f/AMKF+HX/AEAm/wDAmT/Gutsv BPh2z8IHwvHpkT6Ed3+iykuPmJJOTznJJz1FdHRQB8q+NvhDbeAtaOtS6NL4o8GYxNB5rC6sEz1U g/Mo/wD14616F4U+FXwk8WaNFqmgact3aSDqtzIGQ/3WGcqfY17QQCCCAQeCD3rx7xb8NtU8O61L 4s+FEqWWpN815pDcW16OpwOgb2/LFAGj/wAKF+HX/QCb/wACZP8AGuz8GeE9G8GaXJp3hy1NpaST Gdk3lsuQATk+yj8qwfhr8StL8bLJZtG+meIbbi70u5+WSNh1K5+8v6jvXd0Acb4z+GfhTxnqseo+ I9NN3eRwiBZPOZMICSBgH1Y/nWD/AMKF+HX/AEAm/wDAmT/GvUKKAPEfEnwA0m3X+0vh7fXvh/Xr cboGS4Yxuw/hPcZ9c49q9O+E+oeJ9Q8HWz+OLFLPWkYxuFYHzVHAkIHCk+n498V0FYtn4w0lvHEn hQSynWUt/tTR+Wdgj453evPSgDq6KKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAK KKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAoo ooA8F1D/AJO+tf8AsAH/ANmr2muPvfAat8XYvHBvzuSw+xC08vr1+bd+PSuvd1jRnkYKigszMcAA dSaAI7u5gs7WW5u5o4LeJS8ksjBVRR1JJ6CvHdX+N41HUpdL+Gnh698UXqHDXCqUt1P17j3OBWFI dS+P3i+5sra4uLH4c6VLslkjO1tQkHof84GD1Ir6B8N+H9K8NaVDpuhWMNlZxDCxxLjPuT1J9zzQ B4leRfH3WLabyY/DujpMpCqHHmxZ9G+bn3rk/Bvh/wCJfwmku9Qm8Haf4ikuWL3N7BOZbvb1I3Z3 H6Ac96+raKAPK/h78W/DvjO5/s9TNpWuLw+nXw2SZHUKf4vpwfavQ64r4s/CjRvH9i0wVdP8QQjd a6lCNrqw+6HI5Zc/iO1cv8FvHOrXOo3/AIH8dDy/FekjCysf+PyIfxA9yBg57g59aAPXaKKR2VEZ 3YKigszE4AA6k0AR3VxBZ20tzdzRwW8Sl5JZGCqgHck9K8b1b44/2lqkulfDTw7eeKL1DhrhQUt1 P19Pc4FYh/tH4/8Ai25tLe4nsfhzpM2yR4sq2oSDtn9fYYPUivoLw5oGleG9Li07Q7GCys4xgRxL jPuT1J9zQB8/eL/D/wAb/HXh+60zULbw9punXYXfbrJiQAEHaWG7uKv22sfGXwZp9vFqXhPSdb06 2QRhdNfDpGoxwAck4HpX0LRQB5T8PPi74c8aXR05TNpWuLkPp18Nj7h1Cno2PTg+1ei1xfxW+FGi +PrMz7Rp/iCEbrbU4BtkRhyA2PvDP4jtXL/Bbxzqt1qF/wCCPHI8vxXpPAkb/l7hH8YPcgYOe4IP rQB65RRRQAUUUUAFFFFABXnfxE+Lnh3wXcDT2M2q64xCpp1iN8mT0DH+H6cn2rJ+M/jrVLPUbDwT 4IXzfFmrjHmD/l0iOcufQ4BOewBPpXT/AAq+FWjeA7MT7RqGvzDddalON0jseTtJ+6M/ie9AHjPj PQfiX8WDaXsfg3T/AA9JbOJLa9nnMd0F6gbvvDtwRXU2cPx90e0iEyeHdXSFMFWcebLj1b5efevo GigDwXSvjj/ZmpxaV8TPDt54XvX4W4ZS9u3vnrjpyMjmvZLW4gvLaK5tJo57eVQ8csbBlcHuCOtP 8R6BpXiXSptN12xgvbOUYaOVc49weoPuOa+e0TU/gB4wtrWe5nvvhxq02xHlO5tPkP8AL+TDJ6ig D6GrxTxIcftZ+DD/ANQmb/0CevaY3WSNXjZXRwGVlOQQehFeK+Jf+TsvBn/YKm/9AnoEz32igdKK BhRRRQAUUUUAFFFFABRRRQB87+Hf+TwPEn/YIb+UVe71xFn8PFsPi/qXjj+0C73lobX7J5eAownO 7P8AsfrXY3t1b2NnPd3kqQ2sEbSyyOcKigZJP4UAM1O/tNLsJr3UrmG1s4V3STTMFVR7mvHL3423 uu30tj8L/Cl94ikj4a8lUxQA/jj9SKxtH03Uvj/4mk1TVnuLL4d6fMUtbRSVN669WP8AU9ug5ya+ idG0qw0TTobDSLOCzs4RtSGFAqj/AD60AfNt14J+M+o+ObfxjFB4d03V4oTBtjkwJIz/AAyDB3fn 2FdBN4s+MXhVBN4l8H2GuWS5aSXSn+dV/wB0ZJP4V7/RQB5p8O/ij4b8dZg02d7XVUH73T7sbJlI 64H8WPau6rz34t/CPT/GCf2vohGk+Lbb95bX8HyF2HIEmOv+91H04ql8FfH134lgvtA8UR/ZvFuj N5V5GRjzgDgSAfz/AAPegD0+iiob26gsbOe7vJVhtoEaWWRzgIoGST+FADNTv7PS7Ca91K5htbSF d0k0zBVUe5NeN3nxuvdev5bD4XeFL7xDJGcNeSqYoAf0/UjNY+jabqP7QHiOTVNYa4sfh7p0xSzt EJU3rg8sx/me2cDua+itI0ux0bT4bHSrSCzs4V2pFCgVVH0FAHzNaeAfjInjefxfpsHh3SNRuk2T 28UuI5R/00QAgnpznqK6Wbxb8YvCqed4l8H2GuWS/NJLpbfOq/7oJJP4V9AUUAeZ/Dr4p+G/HZa3 02d7XVEz5mn3Y2TLjrj+9j2ru68++LXwj07xen9raKw0jxZbfvLe/t/kLsOgkx1/3uo/SqPwV+IF 34nt77QfE8JtfFujN5V5Ew2+aAceYB/P6g9DQB6fRRRQAUUUUAFFFFAB1rzLx58ZdA8Maj/ZGnRX Gv6+x2ix08byrejMM8+wyfpWP8W/F+s6v4mt/hz4BfZrN2obUL5TxZQnryOhwck9eQBya774Y/DP Qfh9pYh0uATX7jNxfzAGaVu/PYew/WgDwnxV4S+KPxJ1az12Dwtpvhe/tHDQ3ZuTHcsO25gSSB7j P4V2CSfHvSIlluLLw7rMca/NFGwWSTj1+XmvfqKAPDPD3xws49VTRviBo134U1Y8brlSbdj7MeQP fke9ewRyJLEkkTq8bgMrqchgehB7iq3i/wAKaL4w0iTTfENhFeWzDjcPmjP95W6qfcV4X4evtV+C Xja18KeIbqW98Fao+3S7+Xk2znHyMewycEfiO9AHv9eL6dx+1xe/9gNf6V7RXi+nf8nb3v8A2A1/ pTQme80UUUhhRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFAB RRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAeeXvjxl+MUXgc2C7X0 /wC2i78zkdfl249utc5+0nr9zo/w5fT9NYjUdbnXToQDgkN9/H1HH/Aqy9Q/5O+tf+wAf/ZqPjxG lz4++F1vcLutzq24gnA3AqR/IUAerfDnwvbeDPBelaHaKALWECVgP9ZKeXY/Via6SiigAooooAK8 E/aY05/D1/4b+I2lqUvdJu0guig5lhY9D69xz/er3uvNv2j40k+CvijeoO2BGGex8xeaAOztLiO7 tIbmE5imRZF+hGRXl/7SfiC40j4dNp2nNjUdcnXToQDg4b72PwwPxrp/hFLJP8L/AApJMWaQ6bBk sck/IOa4b45rHcfEL4XWtzg27aoXZT0yCuKAPVfh14XtfBvgzS9Ds1AW2hAkYDmSQ8ux9yc10dFF ABRRRQAV4J+0vYN4dv8Awz8RdLHl3ulXaQXTLx5sDHofXuP+BV73Xm/7RkUcvwX8T+bjC26uuf7w dcUAdlaXEd3aw3MBzFMiyIfYjI/nUtcn8J55br4ZeFprjmZ9NhLcY52iusoAKKKKACorq4itLWe5 uDthgjaVz6Koyf0FS1zfxKkaL4eeJXRirDT5sEf7poA85/Zo0+TxDqPib4jaoA97q129vak8+XAp GcenOB/wGve682/Zyghg+C/hkQBQHgaRsf3i7E/rXpNABRRRQAVznxD8L2vjHwbqmh3iKy3MJEbH +CQcow9wcV0dFAHi/wCzX4huNZ+Hg0/UXLaholw+nyk9cL9368cZ9qNe8O6vcftH+FdfhsJX0e20 6SGa6GNiOVlwDzn+Je3esj4GMYfih8VbOH/jzj1FZEwMDcWkz/IV682u6VB4itNEnv4U1a5Qyw2h J3uoBJIHphT+VMR0I6UUUUhhRRRQAUUUUAFFFFABRRRQB5pZfENr/wCMep+B205UFnaG6F2JMlsB ONuP9v8ASuU/aZ1O7k8P6L4S0pyl74kvktCR/wA8wRkH2JZfwBrN8O/8ngeJP+wQ38oqtfEcmX9p P4ZQS8wrDNIqnpu/ec/XgflQB7V4X0Oz8N+HtP0fTYxHaWcKxIAOuByT7k5J9zWpRRQAUUUUAFfP vx1tR4J+JnhL4g2I8uOacadqeOA6NwGb/gOf++RX0FXjX7WsMcnwbvXkALRXUDxn0bdj+RNAHqYI YAryDyK8a/aa1O7l8P6J4S0pyt74kvktWIycRgjOcdskZ9ga9V8OSPL4f0x5c+Y1tEWz67BmvIvi RiX9pP4YxyH92sUzAHoDhz/MCgD2vwvoln4b8Pafo+mxiO0s4ViQAYzjqT7k5J9zWpRRQAUUUUAF fP8A8crY+Cvib4S+IGnr5cc8407U9vAdG4Bb8M/98ivoCvGf2toYZfg1etM+xo7qB4/dt2MfkTQB 6oCGAKnIPIPtS1n+HnaXQdOdzlmtoyT77RWhQAUUUUAFZ/iHVItE0HUdUuOYrK3edh67VJx+J4rQ rz79oB2T4N+KShIJtgpx6F1zQBhfstaFI/hzUfGuqjzNY8RXMkxlYfMsIYgAexYE/Tb6V7fXGfBd Ej+EvhAR4x/ZdufxKAn9Sa7OgAooooAK4b41eEYfGfw61bTmjDXccRuLRscrKgJXH15H413NB5GD 0oA8s+A3ieXxV8MtKu7xi19bA2dwSeS8Zxk+5GD+NZ1j4e1ZP2lLnX2sZRoz6SIFuuNhkGPl65z+ FYP7LIWHS/GFtBJ5ltFrcojfGNwwBn9BXsVtrulP4kOhi/hOrrF55tMneE/vfSmhM6CiiikMKKKK ACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooA KKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigDwXUP+TvrX/sAH/wBmo/aisp4/C+ieJbSM vNoGpRXTKO6Ej9NwX866+98CXjfG+Hxt9rtxZJpv2L7Pg+YW559Mc11evaXa61o95puoRiS0uomh lX1UjH50xGloWqW2t6LY6pYSCS1vIUnjYd1YZq9Xzn8JvE8/wr8SS/DrxpN5emPI0mjajJxGysc7 CegyT+BJHcV9GAggEHIPekMKKKKACvEv2rdXZPA9l4asju1LXryO3jjHJKBgSfpnaK9X8U+ItL8L aJcatrt3Ha2UC5LMeWPZVHdj2Arwb4cWmpfE74iSfEXxBbPb6Tagw6JaSf3cn95j9c9yfQCmlcTd j2zw5p6aToOn6fEAqWtukAAGANqgf0ryn9qCzuIfDGieJLJWaXQdSjuWC9ShI79uQPzr2dRhQKo6 7pltrWj3mm38YktLqJoZUPdSMfnR1A09D1O31nRrHUrJ1ktruFJ42U5BDDNXa+cfhP4rn+FfiWT4 c+NpmXT3kL6NqUnEZRjwhPYZ/IkjoRX0cCCAQcg0hhRRRQAV4l+1bq7L4JsfDNk+dS168jt4415J QMCxx6Z2j8a9W8V+I9L8KaHc6vrt0ltZQLlmY8seyqO7HsK8H+G9pqPxP+Ib/EbX7eS20u1zDoln J2UZ/eH8yc9z7AU0ribse3eH7BdL0SwsV6W0CQ/98qBVm/me2sLmeGFp5YomkSJeshAJCj69KmUY GKWk9RrQ4/wH4p1bxD4Gk1vVfD8+maivnY09twZ9mduNwB+bGORU/wANPEep+KvCsWp63osui3jy uhtZAwOFOA3zAHn3FdUSSckkmgkk5Jyab6gcb8N/FOreKIdXfWvD8+itZ3jW8Ky7v3yD+MbgP04r pNcsV1TRb+wc4W6t5Ic+m5SM/rV4knqSaQ0AeRfso6q3/CE6h4YvSy6loF7LbyRufm2MxKnHYZ3D 8K9ur5z+JlnqPwx+IcfxI8P28lxpV0BDrdnH/ED/AMtP5HPYj3Ne6+FfEel+KtDttW0O7jurKdch lPKnurDsR3FIDXooooAKpa5qdtouj3up30gjtbSFppGJwAqjNXSQASTgCvnD4teLZ/ij4kj+HPgm UyackgfWdSjOY1RT9xSOoyPxOB0BoA0/2YbW5ufD+ueJb0MJdd1KS5TcOdgOBn8c0eIzj9rPwYf+ oTN/6BPXrPh3SrXRNGs9NsIxFa2sSxRIOwAryXxL/wAnZeDP+wVN/wCgT03uLoe+0UDpRSGFFFFA BRRRQAUUUUAFFFFAHzv4d/5PA8Sf9ghv5RVP+0YZdA1vwP42iQtFo+oCO5wMny3IP8gw/EV1un/D 69sPjjqvjaS8tmsryyNqluobzFJCck9MfKfzrqPGfh6z8VeGdQ0bUVzbXcRQkdUPUMPcHB/CmI6e 1uIbu1hubaRZYJkEkbqchlIyCPYg1LXz/wDBPxtc+ENTPw18eyC2vbM7NLvJThLmIn5VDHv6fl1F fQFIYUUUUAFeB/tT3f8AbH/CJ+CLT573VtQSZ1XqkS5G7/x4n/gJr1vx14v0jwT4fn1bXblYYIwd kYPzzN2RB3Jrxr4O6Nqvi/xde/EvxZCYp7tfL0q1Yf6iDsw/DgeuSe9NK4mz3C0iWG2jiQYVFCge wGK8U/aKMnh/X/A3jeKPdFpF/wCTcsP4YnIP6jcK9vAwKxfGfh608VeGdQ0bUVzb3cRQkdUPZh7g 4NG4HUW08dzbxTwOskMqh0dTkMpGQR+FSV8//BHxvdeEtRPw18fSC31CzOzTLtziO5i/hUMf0/Lq K+gKQwooooAK8E/alu/7ZPhTwNaHfdaxfpLKo+8sS8bv1P5V61478YaR4I8Pz6vrtwIoUGEjB+eZ +yIO5NeNfBzRtV8XeLr34l+K4TFcXgMWl2rDHkQdAfy4HrknvTSuJs9vtIlht44k+6ihR9AMVFq1 zLZaVeXVvbtdTwQvJHAvWVgpIUfU8VaAwKWk9RrQ47wb4p1bW/h82vaj4fnsNTEczjTW3BnKZ2gb gCN2O4o8GeKdW1z4ftr2peH59P1NUmYaa24M5TO0DcARux3FdkSScknNBJJySc0PW9gWlrnL/Dfx DqXijwnbarrWjy6Neyu6taSBgVAbAOGAPPuKm+IWjHxD4H13SVXc93ZyRoPV8ZX9QK6Ikk5JyaQ9 KbeorHm37MPiBdZ+FNhZSkC+0d2sJ4+67T8uR/ukD8DXrVfNnigXvwY+J0vi7T7eSbwfrbhNUgi5 8iUn7+O3JyPqw7ivoXQ9XsNd0q31LSLqK7srhQ8csZyGH+PtSGXqKKKACsLx1r8Hhfwhq2tXLqiW du8i57vjCj8WwK25HSKNpJGVEUFmZjgADuTXzV4912X42+Nbfwh4akY+EdNmE2qXyj5Z2B4VT3HU D1PPQUbgdT+zBo8unfDOK8uU2z6rcSXzD2Y4X8woP41U07/k7i9/7Aa/0r1/TrWKysoba2jEcESC NEXoqgYAryDTv+Tt73/sBr/Sn1F0PeaKKKQwooooAKKKKACiiigAooooAKKKKACiiigAooooAKKK KACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAoooo AKKKKAOJvPHNgPiZH4KNtcf2g1n9tE3Hl7eePXPFdLXhfxkn/wCEI+OPhLxvdo39j3EJ067mA4i6 4J/Bs/ga9xgmiuII5reRJYZFDpIhyrKehB7igDmvHvgrR/G2jPp2t2wlj5Mci8SRN/eU9j+hrymx tPit8LwbfQ5IvGHh2P8A1Vvcti4iX0B6/qR6AV79TGjVuop37it2PG7b9oUxOYtZ8CeJbOZQQ2yE uNw7DgVBL8cPFWuJ5Pg74dao1w3Hm6hlI1z36DP517O9sjdefrSrboB/SnoLU8M0z4XeIfGesQ6z 8WtVF+Yjug0m2OLeL644/Acnua9xsrWO1gSKFFjjRQqoowFA6ACplUL0FOpN9ENLuFFFFIZy/j7w Vo3jbR20/XLUTIMmOReJIW/vK3Y/oa8qsbX4rfC5BbaK8XjHw7H/AKu3uDtuIl9Ac5wPxHoK99pr IrdRTv3FbseNW37QphkMOs+BPEtnMoIbZCXG4emQOPeoJfjj4q1xDB4O+HWqNcNwJdQyka579AD+ deztbI3Xn60q26ge3pT0FqeGab8LvEHjPWodb+LOqi/aM7odItmIt4vrjj645Pc17jZWkVpbxwwR pHEihURBhVA6ADsKnVQo4FLSb6IaXcKKKKQwooooAKKKKAIbu3iureSGeNJIpFKujjKsD1BHcV4f qnwt8QeDdan1v4S6sLAyndNpFyc28v0zx+B5HY17tSEAjmmn3E0eJRfHDxVoSiDxl8O9TFwvBm0/ LxtjqehA/OrFx+0KZpRDo3gTxLeSsMLvh2Dd6Hg17C0Ct9PSmLbIvTj6U9BanhOoW/xU+KKfZtZa Lwd4dk/1kFuxa4lX0JznB/AeoNepeAPA+j+CtHWw0S1ESdZJW5kmb+8zd/5CupSJV6Cn0XtsFu4V 474i06+k/ai8IX8dlcvYRaZKklysTGJGKzYBfGAeRxnuK9iPAJJAA5JPQVn+Gte0rxHDJPomoQXt vDK0UjQvkK46g0kNnQjpRRRSGFFFFABRRRQAUUUUAFFFFAHB2/j/AE6/+Jt/4LjtrldRs7f7S0zY 8tlwpwO+fmFdXXgvjO4j8AftMaf4j1QCLRtesvsRuTwsUnAO4/VV/A5r3kEMoZSGUjIIOQR6igDj fiT8PtG8eaWLXV4SJo8mC6i4lhb1B9PY8V5vY3Xxb+Gqi1SGHxpoUfyxlmK3MaDsT16eu6ve6Y0a t1FO/cVux45B+0RGhdNT8DeJrWZR90Qb8n06Cqs/xn8a+Il8jwT8Pr6GVvl+06mSqRk9DjgEfjXt DWqMcnk+9OFuop6C1PEvDnwn1TXtch8Q/FTVTrWpRndDYof9Gg74wMA49AMeua9ut4VhQKoAAGAB 0FSKoUYFLSb6IaXcKKKKQzi/iT8PdF8eaWLXV4SJo+YLqLAlhPsfT2rzmyu/i38NVW1SCHxroUfE bFitzGvoT14Hrur3qmNGrdRTv3FbseNwftEIhdNS8C+JrWZV+6IN2T6cgVXn+M/jXxEnkeCvh9fQ ytlftOpkqiHsccZH417O1sjHJ5PvThbqMdxT0FqeJeHPhPqmva9F4i+Kmqf21qKHdDYr/wAe1v3x joQD2Ax65r263hWFFVAFAGAAMAVIqhelLSb7DSCiiikMKKKKACiiigCpqdhbanYzWl9BHcW0ylJI pF3K4PYivD5vhx4u+Hmo3Go/CjVgbGVi8ui3x3RE/wCyT/8AWPua97pGUN1FNPuK3Y8Uh+O+v6Ts g8XfDvWbe4Bw0lmDJHj1HH6ZqS4/aCubp2g8P+AfEV5ORiMzRGNN3vgHAr2JrdW4PT0pFtkXpx9K egtTwW+0L4mfFNxH4wuo/DHhtiC+m2ZzLKPRj+Hc456V7B4M8KaV4T0eLTdFtEtraPnA5Z2/vMe5 963ljVegp9F+w7dwryHT9OvR+1Pd6gbO5Fg2jLGLkxN5Rbj5d+MZ9s163NJHDDJLM6xxRqXd3OFU DqSewqr4X1vTfEunxajol9Fe2LEhZImyMjqD6GkgZvUUUUhhRRRQAUUUUAFFFFABRRRQAUUUUAFF FFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUU UAFFFFABRRRQAUUUUAYvjDw3pvivQbnSdatluLKcYZTwQezKexHY14dbfDv4neA/MtfAPia1vtGy fJstTHMQ9ASMfkQPavoukKg9RTT7ia7Hzz/xf/18Nf8AfS0f8X/9fDX/AH0tfQnlJ6UeUnpT0Fqe DaOvx0Oq2Z1I+HTYecn2jy2Xd5e4bse+M16/rBvf7Lvv7LRft3kyfZvMPy+btOzd7bsZrbCKOgpS oPaldDsz55/4v/8A3vDX/fSUf8X/APXw1/30tfQnlJ6UeUnpT0FqfP8Abj4+GePzT4bMe4bwGXOM 817aTKIv9X8+3174/wAa1AijoKUgHtSuh2Z89yf8L98xth8NbMnGWXpTf+L/APr4a/76WvoTyk9K PKT0o0FqfPYHx/PQ+Gv++lr2jRzfjSbL+1o0/tDyU+0+Wcr5mPmx7ZrdEajoKdgelF0OzPBtd/4X edavzo3/AAj40zz3+yiVl3+Vk7d3vjFUf+L/APr4a/76WvoTy09KPKT0p6C1PnsD4/nofDX/AH0t eveFP7bHh2xHiZITrPl/6V5BBj35/h9q6cRqOgp2B6Uroep4j4xPxjPiW+PhT+wl0XcPswuWXzNu Bndn3zWN/wAX/wDXw1/30tfQpjUnkUnlJ6U9Banz2B8fz38Nf99LXqfgP/hJ18Nwjxqtqdb3v5ht SDHtz8uMe1diI1Han4HpSuh6njnxBPxXPiJ/+EHGjLo3lptF2y+Zvx83XtXN/wDF/wD18Nf99LX0 KY1J5FJ5SelPQWp89/8AF/8A18Nf99LXovw1HjZdLu/+FgrYNf8AnfuDZEFfL2jrjvnNd/5SelOA HpS0HqeV/Ew/Ek39n/wr4aWtoIj9o+2suS+eMZ7Yrjf+L/8Ar4a/76WvoUxqeopPKT0p6C1Pna78 E/FzxrELDxf4msdK0l+J4dNGXlX0yP5E4r2f4f8Ag3SPBHh6HSdCt/KgX5nduXlfuznuf5V0YRR0 FOpN9hpdwooopDCiiigAooooAKKKKACiiigDmvH/AIO0nxv4fl0nXIPNt3O5WU4eJx0ZT2NeMWvg j4t+CYjY+EPE1jqukp8sEOpDDRL2AJ/kDj2r6MppRT1FNPuJrsfPX/F//Xw1/wB9LR/xf/18Nf8A fS19CeUnpR5SelPQWp4l4THxo/4SKwPiX+wW0bzP9KFuy+Zsx/D79K9K8TnV/wDhH9Q/4R9Iv7X8 pvsvnHCeZ23e1dKEUdBQVB6ildDsz55/4v8A+vhr/vpaP+L/APr4a/76WvoTyk9KPKT0p6C1PBtI Hx0OqWZ1I+HTYecn2gRsu7y9w3Y98Zr2HUmuxp919hjH2vym8jecDfg7c+2cVshFHQUpUHtSuh2Z 88/8X/8AXw1/30tH/F//AF8Nf99LX0J5SelHlJ6UaC1PnwL8fz0Phr/vpa9vhMwgj86P97tG/B43 Y5/WtUIo6ClwPSi6HZnz9ef8L4+1z/ZD4cFvvbywzLkLnjPviov+L/8Ar4a/76WvoTy09KPKT0p6 C1PnsD4/nofDX/fS17LoB1MaHp39uJH/AGoLeP7X5J+Tzdo37fbOcV0AjUdBS4HpSuh2Z4Pr3/C7 /wC29QOinw8NL+0SfZRKy7/K3HZu99uM1R/4v/6+Gv8Avpa+hTGp7Ck8pPSjQWp89gfH89/DX/fS 1654R/t0eHLEeKEg/toIftP2cgx7sn7uPbFdSI1HQU7A9KLodmeJeM/+FxHxNfHwn/Ya6JuX7MLl l8zG0Z3Z/wBrNYv/ABf/ANfDX/fS19CmNT1FJ5SelPQWp89j/hf/AK+Gv++lr0/4ff8ACWDw8B45 S0Osea3NoQU8vjb079a7URqO1OwPSloPU8h+Ip+KZ19T4D/sddI8hci8Zd/m5O7r2xtrl/8Ai/8A 6+Gv++lr6FMak8ik8pPSnoLU+dbn4efE7x2UtfH3ie2sdGJHm2WmDmUe5Ax+ZI9q9z8H+GtM8J6D baTolqttZwDAUdWPdmPdj3NbARR0FOpN9hpdwooopDCiiigAooooAKKKKACiiigAooooAKKKKACi iigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKK KACiiigAooooAKxbzxNp1p4q0/w9M0v9pX0ElxCAhKlExuy3Y81tV4t8T49dl+NvhFfC1xp9vqf9 m3W17+N3i25XIwpBzS+0l3v+TYP4W/63R6Vq/izTNK1+20a5+0Nf3FrLdxJHEX3JH97p39B3ri3+ OPhtLyOzfTPE63cil0hOkSh2UdSFxkgetc7Zw+Kofj34WHjK70e5mOm3fkHTYZIwq/LndvJyfpXS a8T/AMNE+Fuf+YLd/wDoa04q/L53/Dm/yFJ2v5W/G3+Zra/8U/Dnh/SdE1HWPt9pBq7FYFltWV0x 18xTyv412lxdwW9jJeTSoltHGZWkJ+UIBknPpivKPjTpdvrfjnwFpd6ge2vJLyGQezQEZ/rXKweI L7W/AWl/DqaVx4hk1E6JfH+JbaE7nl+jRhRn3qU3JNLe+n32/C6v6+QN8rXNtbX8/wAUmen6J8Uf DeteD9W8TWMt02l6YzLcM0BV/lAJwvfgiux067i1Cwtry33GG4jWVNwwdrDIyPoa+ebW3itPhX8Z ba2QRwQ6jdRxoowFUKoAr3bwZ/yKGh/9eMH/AKLFWrPVdov702K7TSfeX4NI2Ky9P1uC+1nUtNig vEmsCgkklt2SJ9wyNjnh8d8dK1K8W1XXNVj8QfF+JNSu1isNNhktEEpxbsYGJKD+Ek88VEpct2+i b+4tK/3r8XY9por5ouofFmmeCfBPii38c61JqmsS21rPHOyvbLHMMAiIjG5f7xySa7nwxDqnhH4u r4fn8R6rrOl3+lvet/acvmtFKjgEqcDapz90cCratJxfRtfNK/5GfNpf0f3u35nr1FfLHiTxRrEc c/irw5qXjm/t4bwKNQmlij0th5u1l+z9SvO0N1rqPil4mgf4gzaT4l8X6t4Z0eHS47m0OlyGNpp3 LZDsoJPThTjNRzaJ/wBbXLv7zX9b2Pf6K+a/7Z8U+HvhN4St1uvEd1rHiO/KTvLOHvFjwSFhMnCF lVSM9Mmus+En/CX2Xi6e0vLHxUvhyW1Lb/EN1HcSRTg8bXU52kdj6VdtWu36K/8AXmTzaJ9/87f1 5HtFFeD+EpdY0jx9bJ4713xLZazd3kkcCPIJNJvU52RxqBhGxjrg5Br3iktYpjv7zj2OP8eeOIvC l1pdjDpd9q+q6kzi3srMLvZUGXYliAAARXVWU5ubOCdopIWkQOYpBhkJHQ+4rxD4o+Fl1P46+DM6 1rtp9uhuSfsl4Y/I8tF/1XHy7v4vWtO4ttS8efEjxFoUviXWdH0rQIreOOLTLgQTTySJuMjvgkjt ilG7iu7v9y0/r/IctJeVl97PYqK+btf8T+JbL4ZeKrAa9cy6hoevQ6fb6orYlkjLoQHI6kZwfXvX Tx2Ws+D/AImeFLNvFWs6tbeIYrhL2K+lDIrogYPCAMR8noKa97brt9ya/MTdt+l/wdmetaZrWnap dX9tp93HPPYS+RcoucxSYztPvg1oV4H8HPCBg8ceObq317Xnn07VHijimvS0VwTEMNOuPnIJ68dB Vj4cTappXjaytfG2ueJrbxHdtMGtbuRZdOvgM4+z4GEwMHHB4ojryruk/wALhJ8t/JtHulcj498b w+E5tLs4tMvtW1XU3dLWyswu9wgy7ZYgAAV11eFfFnwsuqfG3wNnWtctPtyXQP2S8MfkeXGD+64+ Td/F60tXJR7/APDldG+yPbrC4a6soLh4JLdpUDmKUYZCR90+4qevCfibe3F94tudI0bUPHN/dadb RNLa6DPHbpbEqcNLI3MjN1xVXRvFev8A/CLfDnxjqOo3Jt/tbaZq0RfCSrIxRJXUcblYDn3pxak9 O/56L8SG3Fa9vyV/yPbfEeswaDpb391BeTxKypstIGmkJY4GFXnHPNaSncoIzyM8189+NPEOtXmg fEDxNp2sX1tYwX1tpmnLb3DKqiOVBLIuDjLMSM+grpNVXU/HHxOvfDTeIdW0XStK02C5ZdMm8ia5 lk/iMmCdoxjHrSi+ZK3X8rXG3Z/13S/NnsNFeP8Ai9dbsr/wV4Dh8T6hGdTNwbrV8qt1JHEu4Ird mOQN3XipvCy6p4Q+LEfhQ6/qWt6RfaY98n9pzedPbSI4X7+ASrZ6Gmtfxt8tX+TBuy+78XY9aor5 m0q28Saz8PfFniibxt4ggudHu71rG3guNsY8ti2JO8gPQAnAFfQHgvUZ9X8I6NqN3t+0XVnFNJtG BuZQT+tC1V/T8dgbs7eq+52f5mzRRRQMKKKKACiiigAoorl/FHiKfTtTtNMtYUhlux8t/efLbRnO NuR95z2XjPrSv0DZXOnkcRozt91Rk8Z4qjomsWOuWIvNLn8+3LMm7aykMDgghgCCPcVX0bQo9Pme 7uLie+1KQbXupzzj+6qjhF9h+OTzXF+GdO1e6sdfuYNcmsVi1O6a3it4kZTg/wDLXepLZPZSvHel ezs+1/xX+YtdPX9Gel0VwGreNbi3+HOjayBHb3uqeRCH8ppUgaQcvsX5mAAJA7nArKh8WLptzZvY +INX10yzRxT2t1pjqSrMFLRssK7duc4YkYB5q7e9y+dvmDdlf5nqlFcr431KCyNtHceIpdISTOY7 W3E1xJ7qNrYA7naawfD/AI1aDSvFUst1Nq1toqLNDcSw+TLKrIWCOu1eQRjOB16VKd032H1SO71n VLPRtOmv9SlMNpCMu4Rn2j1woJq1bzR3EEc0DB4pFDow6EEZBrgvE+meIB4O1S/GuySXrWMjvZvF GLXlCSq4XeOOA24/SugsdKtdW8J6RDeI3yW0LxujFXjcIMMrDkGjXVdrfjf/ACJve1ut/wBP8zoK GIVSWIAHJJrjoNavtG1+00O9kOsCc4SaBR58C4+9Oo4C/wC2MZ9K3vE+p2OjeHdR1HV3KafbwO85 AyduOQB69qUnaLkio6uxxtv8ZPCFxq0VnHc3nkzT/Zor82kgtHlzjaJcYJzxXotfL3g+3nt30Dw5 48eTSPB6yHVdEimC/wCk4YyRwzyg4VlBzt4J9a98+HPiKfxZ4OsNburJbJrsOywq5YbAxCnJA6gA /jVpaf1/V730J5ve8v6/C1tTpahvLmKztZbm4JWGJS7lVLEAdeBkn8K5zxH4gurfWbfRrKNLSa5X K6heDEAJ/hT+/J/s5H1rT0fQ4dMaW4eae7v5lxLdTtl29gOir/sgAVDejaKvrYt6TqNpq+nQX+nT Ce0nXfHIARuH0PNW68x+Hmla9qPg6zuP7el00KZRawWsUbptEjYaXepLE9wCuK07fxbfXXhrTmWO GPV7u/bS3YAmOORGZXkAPUYQkD3Aqr3Jvpdnd0Vx+p/2l4XW3vm1e61K0kuY4biG7SPKq7BQYyiL jBI4OcjvUtxNf674h1HTbTUZ9Ms9PWMSS2yIZpZHG7gurAKBj+E5z1GKVx3V7P8Ar+rG1p+t6fqG pX1haXG+8sSouIijKU3Zx1AyDg8jI4rRrzvw5Z6n/wAJx4ts7zUi85sbVIL2KNVkCnzcFlIK7gc9 sH0oTWL+H4c3Uc+o3jeIoZTYGXEXmm6LYXA2bdpyrD5fumm9v6/r/hx9bf1tc9EorDPh9bzRbG21 e5nur62UEXwIjmWTHLqVAAPtjGOoNZmn63faf4ih0G/b+1nkBK3VqgDwL2+0KOFz2YdfQUdbCvpc 6/p1rjJfil4Hi1n+yn8T6aL7f5fl+bkbvTd93P41W+OuoXOmfCnxBcWUjRSmERmReqK7BWP5E1r+ HfCnh+08J6fpdtpdjJpyQoQjQqwfgHccjkk85pR1b7IHpZdyLxF8Q/CPhvUo9P1zX7GzvXAIikfk A9M4+7+OKv8AiDxXoPh3So9S1vVbSzsZceXLI/EmeRtxy34V5nrOi6r4E8Q+J9cXQbXxN4Z1d/tV 5GAv2u1AXDAK3EkeBnbkYq/4o0SbxRH4P8aeA47C9XTYWa2067HlwzQyKBhTj5HXHBxxSTvFP0v5 fL9eu43vb1t5/P8Aqx6H4a8RaR4n00X+gahb39oW2+ZC2QD6HuD7GtWuK+GniPTddTVorbRjomsW lwF1OxeNVdZSowxK8OCBw3oK7WrYk7hVDW9XsdD0977VJjBaoQGk2MwXPrtBOPeuah1a98T6neab bzS6JDauUlVwBeTL/eQHhEPZuT9KseLtOt9K+Het22nxiNBayt8zElmIOWYnkknqTzWcpWg5fMfW x1UbrJGroQyMAwI7g06vPJn1rw7pmhanPrMl4Z5ba1ubNokWDEhC5jwu9SM55Y5o8Z+Klh8VjQn1 W70e3htkupri1tDPLKWZgqL8jqoG0kkjuMd60krO3nb9SYu6u+yf36HodFcN4I8Rvea7caUl9d6r ZrB58V7cWTwOhDAGNyUVWPIIIA78cZqh4k1yGLUb5V8aXUFzCT5VvZ2AlhjI/glYI+eRz8yn6VLd tWUtT0is6/1rT9P1KxsLy48q6vWK26lGIcjnG4DAPsTXNDxNe3+h+F1tfLg1DXMAzbdywgRl3YA9 ThcAe/tVDxFp2qadrvhUSavPqVi+qL5gu1QSxt5b4KlFUEdsEZ96bupJPvYjnvHmXa56LRWNrGhJ eXIvrO5lsNTRQouYudyjna6nh19jz6EVS8JeIp9Wu72xuYFeWzwGvrXLWsxPZWP8Q7rzj1oWuhTd jZ1rVbLRNLuNR1W4S2sbdd8sz5wg9Tis7xF4w8PeG9Mg1DXdWtbK0nAMTyt/rMjPyjqeo7Vz3x8/ 5I/4o/69D/6EKxPEvhXWZ7vwl4t8N29jqV7pmni3fTb1tqSo6qdyNghXGOpFTfV/L9f8hvp8/wBP 8z0jw9rul+I9MTUNDvoL6yckLLC2RkdR7H2rSrjvhn4h0rX9Pv8A+ztKbRr21umi1CweNUeKfqc7 eGyMHd3rsatiTuFFFFIYUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFF FABRRRQAUUUUAFFFFABRRRQAUUUUAFYV74XsLzxfp3iSV7gahYQSW8Sq4EZV8ZyMZJ49a3aKOtw6 WMK98L2F54v07xHM0/8AaFhBJbxKrgR7XxnIxknj1ou/C9hdeMbDxLI841CztpLWNQ48so5BORjO ePWt2ihaW8v1vf8ANg9TD1vwxY6xr2iavdvOLrSJHktxG4Ckuu07hjnj6VRsvAeiWfj698YQQyDW LuAQSEkbABj5gMZ3EAAnPauqooWmq/q4PXc48fD3RhovibS/MvDbeIZ5Li7JkG5WcAHYccDjvmsb T/hzP4Wt5bvQfEPijVLuC2eK1sNT1Xfaliu1Qy7RgDj8q9JopOKat5W+Wwevqc18N/DJ8IeDNN0a S4e5ngQtNKxJ3SMSzYz2yTj2qG48CaTcXvie6ke783xDAtveYkGFVUKDZxwcHvmuropy99tvqKPu qyOSuvAOkXPhnQdCkkvPsejSwTWzCQby0P3dxxyPXgVoXHhewuPGFt4kkaf7fBaPZqm4eWY2OTkY zn8a3aKHq7v1+9Wf4BZJW/rTU8quvgX4XuEmtzfa/HprzfaI9OTUCLaCTduLJGRgHOeueprkviP4 U19viNqGpjTfE9xps1tBDayeG72K3c7Bz5+/ljk8H0r6CopW28v+GH3v1/4c8t8LeCdR8R/D3+yv iS1zPP8Aamns2acG7tUH+r3SpjMg5yR6966Lwl4AsPDd5Nd/2prurXcsRg87Vb5rhljJBKr0AHHp muwopvW/n/wwkrK39dzz3SvhRoumazbak1/ruoiykM1lZX1+01vbOe8aEcHnjJNX/hp4cv8ARINY v9acf2rrF897PCkheOAHhEU98KBk+prs6KFp/X9dkDS/r+vNmFqnhaw1LxVo2v3D3AvtKSVIFRwE IkADbhjJ6ccisXxb8NdI8R60NYF7rGkaqYxDJd6TeG3eZB0V8Agj9a7eilZaeQziLj4Y+HZfBY8M Rx3MGnmdbp3jlzNJKrBt7OwOSSOSa2dW8K2GqeIdD1m5e4F3o/mfZwjgId6hTuGOeB6it6in1v8A 12FZHFN8N9H/AOEuvfEEV1qsE18D9qs4bspbTsUKb3QdWweuaqeH/hbpGg6vb6qt9rmqz2SsLGDU r8zRWuRjEYI+XjjJzXoFFJK2w3rucb8MfDV7oGnanc6zIG1XVr6S/uY0cvHCWOFRSewUDn1rU1fw tYar4n0TXbl7gXukeb9nVHAQ+YoVtwxzwOORW9RT2tbp/lb8g7+f6nB+KPhboniDxBPrD3us6fdX UaxXi6detAl2i8BZQByMccYq1b/DnQ4Ph3J4LX7U2jOjJl5AZVy27IbHUHocdq7KilZW5egdebqc XJ8N9Cb4exeDV+1R6THsO5JAJWKuHyWxgkkc8U3xf8NtI8S6na6mbzVtK1W3i+zi90q7NvK8X9xi Acj8K7aim9XdglZWRxGp/DLQNR8M6fo051BRp7mW1vUumF1DIeriXrk5+ntVvwZ4C0rwrdXN7Bca jqOqXKiOW/1O5NxOyDom49F9gK6yijuKytY5HTvh/pGn+E9Z8PQSXn2DVXnknLSAuDN97acce3Br Lg8E3C+NfDcyu0Wg+GrEw2eZsyXErqEJcDAwqgfUmvQqKFo01/WjS+64NXVvX8Xd/fbUyvFOh23i Xw9faPfSXEVteRmOR7d9jgexwcVmxeC9Oj17RNWW4vzcaRaGygQz5RkIxlxj5m465rp6KFo7/wBf 1qxtX3/r+rGD4e8L2Whatreo2k13JPq04uJ1ml3KjAYwgxwPzreooo6WAKKKKACorq3hu7d4LqKO aFxhkdQwI9walooauBjaTosmkySx2V/MbBlxHbT/ALzyW/2WJ3bf9k59iOlZmgeG9W0rSNVtJNbt 7ia8lkmjmFhsETuctlfMO4e2RXWUUmr7+grf5nK6P4SNt4NtdA1K/N2bUKIbqGLyHjKEFGAy3zAj r0PpUkeha3NKi6l4kkks0cOEtLUW8j4OQHkDHI9doXNdNRVN3dwtpY5nV/Dl7LrzaxouqpYXkkC2 8ontRcIyqSQQNylTye+D6VV0bwZLZ6prdxqOqvqlrrESpcwXFuoJIUrwykALgkbcfjXYUVKVlb+t R+Zxmo+ENS1DSbnRp/Ecw0eWAwBFtwJ9pGAGl3cj/gIJHetS20bUovD1lpjazskhCxyXMFsEZ4wM AKCxCHGOefpW/RTtv5isiho+kWWj25hsIBGGO53JLPI395mPLH3JpPEOj2fiDQ77SdTjMlneRNDK oODtPoexrQopSSkrMa02PIZPg1c6jp0OieI/Gmrat4Zg2+Vp0kESMAv3Q0wG84/Cu68B+GrjwppD aZLrN1qlrG+LX7Sih4IgMCPcPvY9TXSUVV9/P+v6YuVfcQX1nbX9rJbXsEc9vIMNHIoYEfSsux0a 602G6gsNUl+zumLeO5Tzvs7ezZBZf9kn8a26KmwzhfD/AIK1Xw/pUWn6V4mkS2O5phLaLId7Elmi Jb92CT0O4Ctx/Cun/wBgW+lRebGlu4mhnDZlSUEt5mT1YkknPXJreopisjmo/D1/d3MD+INXW/t7 aUTQwQ23kKWH3TJ8zbsdewz2qbVdBuX1KTUtE1EadfTRrFMXgE0UqrnaWTKncMkAgjr3rfooHY47 RvDNxoHiLUdfvNf8+K7gQXguYVUAx7sMrbgEQBj8uD9axtOk0XxF8VpLnStVtLmCztkmmhguEkWW 4OVSQAE5KoSCfdfSvSXVXQq6hlIwQRkGoYLO2t23QW8MTYxlECn9KFun2E1dPzKutWN1qEUcNvqE llCSfOMKDzHXHRWP3Prgn0x1qTSdKstItfs+nW6QRk7mxyXY9WYnlifU81dooGVNY0201jS7rTtR hWezuo2iljboykYNecWHwx17TkisLD4ia5DoEJAjsvIiMqoOiCfG/Hb6V6lRQlZ3B6qzPNdY+HWv X91eRQ/EHW7fRbxm86yMMUjhWzlUmYblGDjjpV3VfAN7HY6Ta+DvFOo+G4tOtxbJFFElxFIg7sjj Bb3rvaKVtLB1ueV6j4M1Pw14N1uHw9d6jqvirXpkS41WRxHIjH5fN4xsRFzgLXpWk20llpdpaz3E lzLDEsbzyHLSEAAsfc9atUU/6+7YVv69dzO1nRbLWI0F3GwljO6KeJiksR9VYcis3WdC1LUvCl1p B1lRPODGbuS1Dnyz2KhgC2O/HriujopNJqw/M5HXvC+qar4f0vTxrcENxZzRTPcfYdwlMZBXCb/l GQM8n8K0NW0Ke5uodQ0/UDY6vHF5LTiIPHKvXa8ZPIB5GCCMnnk1vUU3r+YkklYxdH0m/t7trvVt YmvpzH5Yjjj8iBRnORGCct7kn2xzWJaeDdRsbKbS9P8AEL2ujuXKxpaKbhN5JIEpJB5J5KZ967Wi k0noxrQ5TTvCDQeGdO0y61Ay3WmsGs72KERvFgYHBLA8Eg+oJ6VT1PwfrGqXWm3t74kVr3Trn7Rb 7LELD0KndHvyxwTzu49K7ein1uLlVrfL5GLquhtq1yq397K2mhRmziHliRu5dgcsv+zwPXNa1tBF awJDbRJFCg2qiKFVR6ACpKKNgscP8RfAlx4z2QDxHqGnaZKghvbKFFeO5QNux83KN23DqOKd4o8H axf3VrP4a8Yal4f8mBbcwxwx3ELKucHY/Abnr7V21FK3Qe7ueTat4H1TQvCr6R4WvtTn1vXNQSXU NcaQJJGAQXkJGMDau0KPWvVkjKwLHvYsF27z1PHWn0U+lv62sK1nc4VfBGrjwxa6WfGWrm6iv/tj 3/8Ay1kj3E+Sefuc469unaty90O8uPF+nazHrV5DZ2sEkUmmp/qZ2bo7c9R24reoo/r8LfkDV/68 7hRRRQMKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKA CiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAK KKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAoo ooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiii gAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKA CiiigAooooAKKKKAP//ZCmVuZHN0cmVhbQplbmRvYmoKMzYKMApvYmoKPDwKL1N1YnR5cGUKL0lt YWdlCi9JbnRlcnBvbGF0ZQp0cnVlCi9XaWR0aAo5NDIKL0hlaWdodAo1NTUKL0NvbG9yU3BhY2UK L0RldmljZVJHQgovQml0c1BlckNvbXBvbmVudAo4Ci9GaWx0ZXIKL0RDVERlY29kZQovTGVuZ3Ro CjExNgowClIKPj4Kc3RyZWFtCv/Y/+AAEEpGSUYAAQIAAAEAAQAA/9sAQwAGBAUGBQQGBgUGBwcG CAoQCgoJCQoUDg8MEBcUGBgXFBYWGh0lHxobIxwWFiAsICMmJykqKRkfLTAtKDAlKCko/9sAQwEH BwcKCAoTCgoTKBoWGigoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgo KCgoKCgo/8AAEQgCKwOuAwEiAAIRAQMRAf/EAB8AAAEFAQEBAQEBAAAAAAAAAAABAgMEBQYHCAkK C//EALUQAAIBAwMCBAMFBQQEAAABfQECAwAEEQUSITFBBhNRYQcicRQygZGhCCNCscEVUtHwJDNi coIJChYXGBkaJSYnKCkqNDU2Nzg5OkNERUZHSElKU1RVVldYWVpjZGVmZ2hpanN0dXZ3eHl6g4SF hoeIiYqSk5SVlpeYmZqio6Slpqeoqaqys7S1tre4ubrCw8TFxsfIycrS09TV1tfY2drh4uPk5ebn 6Onq8fLz9PX29/j5+v/EAB8BAAMBAQEBAQEBAQEAAAAAAAABAgMEBQYHCAkKC//EALURAAIBAgQE AwQHBQQEAAECdwABAgMRBAUhMQYSQVEHYXETIjKBCBRCkaGxwQkjM1LwFWJy0QoWJDThJfEXGBka JicoKSo1Njc4OTpDREVGR0hJSlNUVVZXWFlaY2RlZmdoaWpzdHV2d3h5eoKDhIWGh4iJipKTlJWW l5iZmqKjpKWmp6ipqrKztLW2t7i5usLDxMXGx8jJytLT1NXW19jZ2uLj5OXm5+jp6vLz9PX29/j5 +v/aAAwDAQACEQMRAD8A+qaKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKAC iiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKK KKACiiigAooooAKKKKACiiq1xqFnbDNxd28Q6fPIF/maALNFZcXiHRpndYtWsHZG2sBcLwfTrWjF NHKMxSI4/wBlgaAH0UUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABR RRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFF FABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUU AFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQA UUUUAFFFVtTv7XS9PuL7UJ47e0t0MksshwqKOpNAE8siRRtJK6pGoLMzHAAHcmvDPiF+0Ro+k3ja T4Ms5PEWsklF8kEwq3oCOXPsOPeuF8S+KPFPx58RTaD4OaXTfB1u+24vGyolHq5757IPxr2r4afC 7w/4EsUTSbRZL0j97fTKDK59j/CPYU0hNnj66F8bfiIRPrOsDwzpsnKwRN5TBT6KnzH/AIE1XbP9 mLTZ2Euv+JdVvrg/eeMKuf8Avrca+kkgUcnk+9ShQO1O6QrNnzrJ+y54R2HZqeuhuxMkRH/oFZc/ 7PWvaF++8E+N76zlXlYpC0YP/AlOP0NfT+B6U0op6ii6CzPlsfET4tfDCRV8c6Suu6OpwbuMDO32 kUcf8CWvbfht8UfDPxBts6LebL1RmSyn+WZPfH8Q9x+ldhcWkc0TI6K6MMMrDIP1BrwL4pfAmOS5 PiH4dyHRtfgbzRDC2yOVhz8v91v0NFk9gu1ufQ1FeHfA34xyeIbtvCvjWL+z/FVufLXzF2C5x1GO z+3fqK9xqSgooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAo oooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACii igAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKK AOf8ZWviO8sYoPCt/ZafO74mubmEylEx/AuQC31rym81rxt8NPGnh218SeIk8T6LrdwLQs1osEsE h6FQvUc969znmjt4JJp3WOKNSzuxwFA6kmvFNIEvxZ+Jll4iSNk8H+HXYWTsMfbbju4H90djShpU VvV+n9beYqnwP8PX+t/I1fi9f+JJPGnhDw/4Z199D/tPzzNcJbpMfkUEfK3+Irc8GeE/GGj6yLrx B48n12yCFfsj6dFACT0bcpzxT/iL8PE8Z6jpN/Hrmp6Ne6bv8mawZVb58Z5I9q4iO88T/DX4i+HN G1DxFd+I9C12RoFN8AbiCT13DqPailpaL3bf/ACps5dEl+G50njzxTr174xtvBXgd7e31N4PtV7q E6b1tIicDC92PbNangfw74x0TU5G8Q+MF8QWDx8JJYpA8b9sFTyPrXl0Gia34g/aA8c2th4kn0NB b2/mSW0atM8e3gIx+7g9a3dGvPEHgH4saP4X1LxFfeINI1q3d43vwGmgkX/aHUUUto95X/XTy0X3 hV0cu0bfkvv3+49tooopjCiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAK+XfjX4i1L4o /EO3+G3hOYrp1tJu1K4Q/KWX72fVU6Y7t9K9r+M/i4eCfh1q2rowF0I/Jth6yv8AKv5Zz+Feffsr eDDpHg1vEGoKz6trbee0j8sIs/KM/wC1y3400hNnqXgbwnpvhPw/aaRpEIjtYFxnHzSN3dvUmumA AHFIowMClobuCVgooopDCiiigApHUMORS0UAeEftE/C99bs/+Er8NBrfxNpoEu+Lhp0XnH+8OoP4 V1XwC+Iy/EHwakl2VXWrHEF7H0y2OHA9D+hzXpbqGXmvlfUI/wDhTn7RtrdW5EPhzxEcSL0RN7YY f8BfBHsarcWx9VUUUVIwooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKK KACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAoooo AKKKKACiiigAooooAKKKKACiiigAopHYIjMxwqjJPoK8Uu/2mPh/b3U0KyapOI3KCWK1BR8HGVJY HB7cUAe2UV4d/wANPeAPTWP/AAEH/wAVR/w094A9NY/8BB/8VQB7jRXh3/DT3gD01j/wEH/xVH/D T3gD01j/AMBB/wDFUAe40V4d/wANPeAPTWP/AAEH/wAVR/w094A9NY/8BB/8VQB7jRXh3/DT3gD0 1j/wEH/xVH/DT3gD01j/AMBB/wDFUAe40V4d/wANPeAPTWP/AAEH/wAVR/w094A9NY/8BB/8VQB7 jRXh3/DT3gD01j/wEH/xVH/DT3gD01j/AMBB/wDFUAe40V4d/wANPeAPTWP/AAEH/wAVR/w094A9 NY/8BB/8VQB7jRXh3/DT3gD01j/wEH/xVH/DT3gD01j/AMBB/wDFUAe40V4d/wANPeAPTWP/AAEH /wAVR/w094A9NY/8BB/8VQB1nxt8JeJfGfhuHSfDGp2djE8mbwXJcCZB0TKgnGeorE0bQ/i9pVpa WNrfeBYLC3CxrFFbzjag7Dis7/hp7wB6ax/4CD/4qj/hp7wB6ax/4CD/AOKoj7t7ddQl71r9DufG ml+O5dQhvPBuu6XbqIRHJZajbs8TNk5cMvzA9OKyPDPgDXrrxbaeJ/iFrNrqWo2KlbK0sYiltbk9 WG7kt9a53/hp7wB6ax/4CD/4qj/hp7wB6ax/4CD/AOKoj7ruJq6sdN448Ba1N4vi8W+BdVtdO13y Ps1xFeRl7e5jB43beQRS+DvAWsjxaPFfjzVbbUtbihMFrDZxlLe1U9dueST6muY/4ae8Aemsf+Ag /wDiqP8Ahp7wB6ax/wCAg/8AiqI+7t5/K+9vx+8JLm3/AOHse40V4d/w094A9NY/8BB/8VR/w094 A9NY/wDAQf8AxVAz3GivDv8Ahp7wB6ax/wCAg/8AiqP+GnvAHprH/gIP/iqAPcaK8O/4ae8Aemsf +Ag/+Ko/4ae8Aemsf+Ag/wDiqAPcaK8O/wCGnvAHprH/AICD/wCKo/4ae8Aemsf+Ag/+KoA9xorw 7/hp7wB6ax/4CD/4qj/hp7wB6ax/4CD/AOKoA9xorw7/AIae8Aemsf8AgIP/AIqj/hp7wB6ax/4C D/4qgD3GivDv+GnvAHprH/gIP/iqP+GnvAHprH/gIP8A4qgD3GivDv8Ahp7wB6ax/wCAg/8AiqP+ GnvAHprH/gIP/iqAPcTx1or5n+Jn7QvhDX/AusaZoz6vFqNxDtgdoAgV8gg7g3Fec/Db9pDxL4bE Vp4iX+3NOXA3SNidB7P/ABf8CzQB6V+1tcTaxrngrwfbsf8ATrrzHA9SwRf/AEJq+htGsodP062t LZNkFvEsUajsqjAFfKF7400n4jftHeC9Q0gzPZRRx/LMu0pINxIx7cV9eIMCn0F1FooopDCvN/jH 8TovANpZW1lZNqev6i/l2dkh6/7RxzjOB716RXznqWNX/a9tIbsb49PsN0KtyA20nI/OlbmnGHf8 krg5csXLt+bdiDUPiT8ZPDFudb8TeEtPfQ0+aVISPMjU9yQ7EY9xXu/grxNY+L/DNjrelsTbXSbg rdUPdT7g1N4jsYrzw9qVtKoZJraRGB75U141+x7cP/wgmq2LMStpqLqo9AR/9ari0+aPZJr77ESu uWXd2/C573RRRUlhXhH7Xuh/bvhxDqsKn7TpV0kqsOoVuD+XBr3euA+PkKTfB7xWHGdtk7j6jBFN CZsfDHWj4h+H3h/VGYs9xZxl2PdwNrH8wa6evJv2XLn7R8GNETcT5Jlj6dP3jH+tes0MEFFFFIYU UUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRR RQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFF AEN9/wAeVx/1zb+VfG/7JPg7w94uvPFCeJdKt9RFstuYfOz8m4yZxg98D8q+yL7/AI8rj/rm38q+ Vv2Hf+P/AMY/7lr/ADloA9u/4Ux8O/8AoU9O/Jv8aP8AhTHw7/6FPTvyb/GvQaKAPPv+FMfDv/oU 9O/Jv8aP+FMfDv8A6FPTvyb/ABr0GigDz7/hTHw7/wChT078m/xo/wCFMfDv/oU9O/Jv8a9BooA8 +/4Ux8O/+hT078m/xo/4Ux8O/wDoU9O/Jv8AGvQaKAPPv+FMfDv/AKFPTvyb/Gj/AIUx8O/+hT07 8m/xr0GigDz7/hTHw7/6FPTvyb/Gj/hTHw7/AOhT078m/wAa9BooA8+/4Ux8O/8AoU9O/Jv8aP8A hTHw7/6FPTvyb/GvQaKAPPv+FMfDv/oU9O/Jv8aP+FMfDv8A6FPTvyb/ABr0GigDz7/hTHw7/wCh T078m/xo/wCFMfDv/oU9O/Jv8a9BooA8+/4Ux8O/+hT078m/xo/4Ux8O/wDoU9O/Jv8AGvQaKAPP v+FMfDv/AKFPTvyb/Gj/AIUx8O/+hT078m/xr0GigDz7/hTHw7/6FPTvyb/Gj/hTHw7/AOhT078m /wAa9BooA8+/4Ux8O/8AoU9O/Jv8aP8AhTHw7/6FPTvyb/GvQaKAPPv+FMfDv/oU9O/Jv8aP+FMf Dv8A6FPTvyb/ABr0GigDz7/hTHw7/wChT078m/xo/wCFMfDv/oU9O/Jv8a9BooA8+/4Ux8O/+hT0 78m/xo/4Ux8O/wDoU9O/Jv8AGvQaKAPPv+FMfDv/AKFPTvyb/Gj/AIUx8O/+hT078m/xr0GigDz7 /hTHw7/6FPTvyb/Gj/hTHw7/AOhT078m/wAa9BooA8+/4Ux8O/8AoU9O/Jv8aP8AhTHw7/6FPTvy b/GvQaKAPPv+FMfDv/oU9O/Jv8aP+FMfDv8A6FPTvyb/ABr0GigDxr4i/BTwrL4K1aPwt4VsV1t4 dtqyEqQ+RzknA/GuI+G37L1pa+Te+Orz7VMMN9htWxGDwcM/U/Qce9fTlFAHyz8QNI07wf8AtJ+A zp1jBZadLHFbxxxJtUHcU/8AZhzX1MOlfOf7YWmT21h4Z8V2Qbz9Lu9jOP4QxDAn/gSgfjXvHhfV 7fXvDunarZsGt7yBJkOexAOKbEjUooopDCvmrx3dR+C/2otF13VGWHStTtfIM7HCqcFTk/Xb+dfS tcv4+8FaL410r7Br9mtzCp3IwJV429VYcihXUlJdP1VhSSlFxfUr/EPxjpHhzwTqOp3OoW4Q27CE LICZXKnaFHfrXDfspaLcab8Nvtt4rJLqdy90FYY+U8A/jzVHQv2bfBel6kl3MdS1EI25YLqVfLz7 hQCfxr2+yto7W3SKFFjjQBVVRgKB0AFVFKPM+r09FuS25NLotfV2sWKKKKksK86/aFvI7L4OeJ2k IHm2phXPqxAFei189fth62R4Z0fwvandd6rdqxQdding/wDfRFAHYfsyWjWvwa0DeoUyrJLjHYyN jP4CvVaw/BOkDQfCuk6WAAbS2jhbH94KN365rcpvcSCiiikMKKKKACiiigAooooAKKKKACiiigAo oooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACii igAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigCG+/48rj/rm38q+Vv2Hf8Aj/8A GP8AuWv85a+qb7/jyuP+ubfyr5W/Yd/4/wDxj/uWv85aAPq+iiigAooooAKKKKACiiigAooooAKK KKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooo oAKKKKAOc+InhmDxf4M1XQ7nAW7hKoxGdjjlW/A4NeLfsp+LZ7Ian8PfEJMOqaXK5t0k4JTPzoPX B5+hr6MIyK+df2ifAGpWmrW/xE8FB49a08h7qOIZMir0cAdcDgjuKa1E9D6Korz/AODnxL034j+H Uubdlh1WBQt5Zk/NG394eqnsfwr0CkMKKKKADAooooAKKKKAI7meK1t5Z7iRY4YlLu7HAVQMkmvl rwSZPjF8fLvxRKjnw9oRC2oboxB+QfUnLEVofHj4h3vjLWk+G/w+Y3M9w/l39zEcqADym4fwj+I/ hXsvwr8E2XgXwnaaPZYdkG+ebGDNKerH+ntVLuJ9jsoxhRTqKKkYUUUUAFFFFABRRRQAUUUUAFFF FABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUU AFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQBDff8eVx/1zb+VfK3 7Dv/AB/+Mf8Actf5y19U33/Hlcf9c2/lXyt+w7/x/wDjH/ctf5y0AfV9FFFABRRRQAUUUUAFFFFA BRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAF FFFABRRRQAUUUUAFMlQSIVIBBGMGn0UAfNfxM+EGr+HNfPjL4USPaahGTJNp8XAf12DoQe6H8K3/ AIZ/tCaPrLLpfjOP+wdcQ+W/mgrC7fU/dPsa9zdAw5rz74ifCjwx44Rn1iwC3uMLeW52Sj6no34g 1W5Ox6BBNFcRLLBIksTDKujBgfoRT6+XP+FQfEfwPI7/AA88XNLaDpaztsP02tlPx4qdfiB8ctD/ AHeq+EYNQCj70MO4n8UYg/lS5WO6PpyivmUfGb4rXGyO3+HFxHJt5Z7eYAn15Ax9M1FLqPx+8V4j jt7XQLduDIoSMgfiWb8hRZhdH0L4o8U6J4VsHvNf1K2soFH/AC0cBm9gOpNfOHi74peKfi5fyeGf hfZXNrpbnZc6i/yMyd8t/AuO3U1reHf2djfX6aj8Q9fu9bu85MMbtsz/AL7ckewAr3jw74d03QNO isdIsoLK0jGFihXA+p7k+5p2tuK99jjPg58LNM+HulFIMXWq3ABur11+Zz/dX0UV6aoCjAoVQBxS 0m7jSsFFFFIYUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQA UUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABR RRQAUUUUAFFFFABRRRQBDff8eVx/1zb+VfK37Dv/AB/+Mf8Actf5y19U33/Hlcf9c2/lXyt+w7/x /wDjH/ctf5y0AfV9FFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUU UUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQA1o1bqKjNuvbIqa indisQfZx/eP50ot0FTUUXYWQgUDoKWiikMKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiii gAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKA CiiigAooooAKKKKACiiigAooooAKKKKACiiigAooqr/aNmdR+wC6g+27PM8jeN+31x1xQBaoqlrO p2uj6Vd6jfyeXaWkTTSsBnaqjJOBXmX/AA0L8Of+gzL/AOA0n+FAHrVFeS/8NC/Dn/oMy/8AgM/+ FH/DQvw5/wCgzL/4DP8A4UAeqX3/AB5XH/XNv5V8rfsO/wDH/wCMf9y1/nLXvXhL4i+G/HVpqa+G r17k2sRMu6Jk25Bx1FfNn7JXiTTPCdj441fXJmgsIVtA7hC2MtKBwPc0AfZFFeS/8NC/Dn/oMy/+ Az/4Uf8ADQvw5/6DMv8A4DP/AIUAetUV5L/w0L8Of+gzL/4DP/hXa+B/G+heN9PnvfDt01xbQyeU 7NGUw2M45oA6Wiuc8ceNdE8EabFf+Irlre1lk8pXWMv82M44qj4V+Jng/wAVTLBomvWc9ywyIGfZ If8AgJ5oA7GiiigAooooAKKKKACiiigAooooAKKKgvry2sLWS5vZ4re3jGXklYKqj3JoAnopkM0c 0KSxSK8bqGVlOQwPQiuE8ZfFzwf4O1ttJ1/UXt71Y1kKCFmG1uhyB7UAd9RXkv8Aw0L8Of8AoMy/ +Az/AOFH/DQvw5/6DMv/AIDP/hQB61RXlNt8f/h7c3MUEOrytLK4RB9mfkk4HavVFdWUEHgjIoAd RXmmvfG/wLoOsXel6nqkkV7av5cqfZ3OG+oFUP8AhoX4c/8AQZl/8Bn/AMKAPWqK8l/4aF+HP/QZ l/8AAZ/8K0PD/wAbvA2v61Z6VpeqSS3t3J5cSG3cZb6kcUAelUU1nVVYkjAGTXmlr8dPh9PfPaNr 0dvKjFGNxG0agg4PJGKAPTaKr6ffWuo2kd1YXEVzbSDKSROGVh9RVigAooooAKKKKACiiigAoooo AKKKKACiszT9f0nUdSvNPsNRtbi9s8faIYpAzRZ6bgOlVvGPinS/CGgz6xrcskdjCVV2jjLkZOBw OetAG5RXjf8Aw0j8Of8AoI3v/gFJ/hR/w0j8Of8AoI3v/gFJ/hQB7JRXjf8Aw0j8Of8AoI3v/gFJ /hXdeAPH2g+PdPub3w5PNNb28nlO0sLR/NjOBnrxQB1VFcx498c6J4F0qLUfEM8sVrLL5StFE0nz YzyB9K4L/hpH4c/9BG9/8ApP8KAPZKK8b/4aR+HP/QRvf/AKT/Cj/hpH4c/9BG9/8ApP8KAPZKKw vBvirSvGGgQazoczyWEzMqNJGUJKkg8HnqDWN8Qfid4a8ATWcfiS5uIWu1ZojFA0gIBweR0oA7ai uK8FfFHwh4zlEOhazDJdEZFvLmOUj2VuTXa0AFFFFABRRRQAUUUUAFFFFABRRRQAUVV1HUbPTYVm 1C6gtomYIGlcKCxOABnvk1ayPUUAFFea6/8AG7wNoGs3elapqkkV7av5cqfZ3OD9QKz/APhoX4c/ 9BmX/wABn/woA9aoryX/AIaF+HP/AEGZf/AZ/wDCrmjfHPwHrOq2unafqskt3dSCKJPs7jLHpzig D06ikZ1UEkjjk15VcftAfDy3nkhl1eVZI2KMPsz8EHB7UAerUV5L/wANC/Dn/oMy/wDgM/8AhR/w 0L8Of+gzL/4DP/hQB61RXn3hH4weDfF2uRaRoWpST30qsyoYHUEKMnkiu5vryGxsri7uGxDBG0rk DJCqMnigCxRXmuj/ABx+HuqziGHxDBC5O0faVaIE/UivR4JoriFJYJElicZV0YEEexFAD6KKKACi iigAooooAKKKKACiiigAoorMsdf0m/1S806y1G2uL6zCtcQxyBmiDdN2OnSgDTorG8W+JdN8KaDc 6xrEjpY2+PMaNC5GTjoOa80/4aR+HP8A0Eb3/wAApP8ACgD2SivG/wDhpH4c/wDQRvf/AACk/wAK P+Gkfhz/ANBG9/8AAKT/AAoA9korlfAHj7QfHunXN74cuJZre3l8mRpYmjw2AcYPXginePfHWh+B NLg1DxFNNFazS+SrRRNJ82M8gdOlAHUUV43/AMNI/Dn/AKCN7/4BSf4Uf8NI/Dn/AKCN7/4BSf4U AeyUV43/AMNI/Dn/AKCN7/4BSf4V6L4K8XaT4z0GPWNCmklsZHaNWkjMZJU4PBoA36K4n4g/E/wx 4AuLKHxJdTwveIzxCKBpMhSAc46dRSeDPin4O8YyrDoetQPdNnbbS5ilOPRW5NAHb0UUUAFFFFAB RRRQB5R+0J8SZvAfh23tdFUS+ItUcw2iY3bB0L47nkAD1PtWB8FvhNc+HL5fFfinUru88UXUZMit ISsYcchu7H9BWD4zt/7c/a50C1vCGt7CzWVEIyDgO3/oRz+FfQZOTk0AQX9pb39lPaXkSzW06GOS NujKRgg1x3/CpvAf/Qsaf/3yf8a7iigDiP8AhU/gP/oWNP8A++T/AI1Fc/C74e2sDz3Xh3S4YUGW kk+VVHuSazfi/wDFrT/AaLp1jD/afiW4AENlHk7M9C+OfwHJrhdH+EnjT4lSR6v8UdcubK0f54tL tzgqp7EdF/U0AdXF4z+EngSO9i0jUNMtJbmMq62StLvOCBkqCO9eEfs2a54PsB4n03x1cW0dnqS2 6xR3CsUkKM5OSBgYyOuK+mtE+Bnw90m3ES+Hbe7I/jvCZWP51du/g78PrqIo/hTTEz3ii2EfiKAM XR/AHww1u38/R9I0S+i7tbuHx9cHitD/AIVP4D/6FjT/APvk/wCNcD4k/ZzTTpf7S+Guu3ui6jH8 yQyTEoxwf4uoJ6c5FR+A/i/q2ieIE8JfFq0On6qW2QagVCxy5OBuxxg9mH40Aehf8Kn8B/8AQsaf /wB8n/Guh8OeHNI8NWklroNhDY28j72jiGAW9a1hggEEEHkEd6KAMrxF4e0nxJZpaa7YQ31sj71j lGQG9a8s8d/s++GdXtZLjwvG+h6ynzwyQyN5bOOmQTx9VxivaKKAPGf2ePiHq95qWoeBfHBb/hIt Lz5csh+aaNeCCe5HBz3Br3evmH4lMujftVeDb21BSS7gj8/bxvyZE5/AD8q+nhQAUUUUAFFFFABR RRQAUUUUAQX13DYWU93dSCO3gQySOTwFAyTXynBBrv7Rfiu8uLu8m0zwLp0vlxRRHmQ9uOhcjkk/ dyBivav2jLqW0+DfiNoW2tJAIyR6MQDVX4AaZDpfwi8OxwAZmhM8jAY3MzE5P4YH4UAdpoemW+i6 NZaZZGQ2tpEsMXmMWbaBgZJ61j6/4D8L+IdRN/reiWl7eFQhllBJ2joK6aigDiP+FT+A/wDoWNP/ AO+T/jR/wqfwH/0LGn/98n/Gu3rwj4gfFzVtW8RN4Q+FFp/aOrZ2T34XdHD2O3tx3Y8elAHZan4G +Gfh0R3mp6XounbGDRyTuI/mHIxk8niobr45fDu0naE+IUdkO0mOCRhx77cH8K5Xw3+zoupTHU/i Zrl7rOoy/M8UczKin0LdT+GBXpFp8Hfh9axLGnhTS5MDG6WLeT+JoA8/j1v4IeK9VnuZ5NIlv523 SSXaPEXPrlgBXY2vwv8Ah7dwLPaeHtKnhblZIvmU/Qg0/Wvgd8PdVt2ibw5bWpP8dpmFh+IrzHWP g94x+HMkmr/CvXrm6gUl5NMuCCWXngDo2OmODQB6h/wqfwH/ANCxp/8A3yf8ataX8N/B2lahBf6b 4fsre8gbfFKikMh9RzXN/CL4u2HjlpNL1KD+yvE1vkS2UnAkx1KZ5+qnkV6jQAHkEHoeDXAav8Hv AeqxSpc+HrdHkYuZYmZH3HvkH3rv6KAPl3UbDXf2dvFFtqWlXc+peCL6Xy57eU8x57HsGA6MOvQ1 9VaXfW+qaba39lIJbW5iWaJx/ErDIP61518eLKC++EHihblA4htGuEyOjpyDUX7Mt5Nd/BjQPPYu 0ayRqT12iRsD8uKAPU6KKq6pqFrpWnXN/qM6W9nboZJZXOAigZJNJtJXYJX0Raorx3w78ZJfEXxM 07QdO0WWHRbyGSWK/ugyPOF/ijX+7n1rt/iT4ztvA/h8ahPbyXdxNKtva2sZw00rcBc9vrQ3aKl3 /wA7fmCaba7f8OdXRXjWofEbxz4W+z6j438JWNtoE0yxPNY3fmS2+44BcHjHPOK7Txnr/iW1NpB4 N8Orq01xH5v2m4nENvEOwY9STnOBT6X+Qk9bHY0V5f4K+Imsz+Nm8I+ONEh0rWngNzbPbTeZDOg6 4J5z/ga9Qp20T7gnq12CvBf2ifHusR6np/gDwSW/t7VQBPLGcNFG3RQexIySewr3qvmjwLs1b9rD xfd3SlpbKJ44c/w4Crn8hSGd98IfhRpnw7t5LhJ5rzWrmPZdXLOdp5BIVfTI6nmu+1LT7PVLN7TU rWG6tXxuimQOrY9QatUUAcz/AMID4Q/6FjRv/ANP8KP+EB8If9Cxo3/gGn+FdNXA/Fv4maX8OtJS S5X7Xq1xxaWKH5pD/eb0UevfoKANS58EeCrWB57rw9oUMKDLSSW0aqo9yRXJSfFT4W+DfNstNv7G HJ3vFptuSpPrlRtJ/GuJ0b4a+N/i5LFrXxI1WfStHc74NLgG1th6fL0UY7nJr1zw58GfAWgRRi08 PWk8seSJroec/Pu1AHB6j8c/hdrsS2usCS5tw24LdWW9AfXHNb3hd/hL4oKrodr4auJW6Qm2RJD/ AMBYA16BeeC/DN5b+RdaBpksOMbWtkxj8q838Y/s6+DdaRptGil0K/A+SS0Y7AfdDx+VAHZf8ID4 Q/6FjRv/AADT/Ck/4QHwh/0LGjf+Aaf4V4nZeLvG/wAFtXt9J+IKya14XlYJBqceWZPox54/un8K +iNK1Gz1bTre/wBNuI7mzuEDxSxnIYGgA0zT7PS7NLTTbWG0tUyVhhQIq5OTgCq2s+H9H1zy/wC2 dMs7/wAoEJ9ohWTbnrjPStOigDxT4lfAbRNXs5NQ8HRDRdfh/eQmBykcjDkAj+E+hGK1P2cPiLf+ KNNvvD/ifcPEejN5czPw0qZxk/7QIwfzr1evnrR0Gmftj38Np+7iurLzJVHAZmiViT+PNAH0tRQK KACiiigAooooAKKKKACsnxZr9n4X8OahrWpMVtbOJpXx1bHRR7k8VrV4X+2HeSwfC6G1jOEu76KO T6DLD9QKAOA8H+Fdd+PGsyeLfGd/cWfhyOYrY2du+M7T0X0A6FupOelfT8EawwRRJnbGoRcnJwBg ZNY3gfTIdG8G6Jp9soWK3tI047naMn6k81uUAclqnw38H6tqE99qXh+yuLydt0krqSzH1PNVf+FT +A/+hY0//vk/4129Mnmit4JJriRIoY1Lu7nCqo6kmgDi/wDhU/gP/oV9P/75P+NUb3wv8MvB11b3 97Z6LpVzE3mQvJIEcEd1BOTXn/iX4p+JfH/iCTwz8ILZvJQlbjWGGAo9VJ4Vffqe1bPhn9m7SC4v vHOqXuvam53yZlZIw3f3P40AdBc/HX4dQyvG3iFZCOCUt5CPz21z2kSfA3xFcO1qNDa4kbLfaA0L Fj/v4zXocHwg+H8MYRfCWktgYy8IY/mayPEHwF+H2sQFBoaWD9pLJzEQfp0NAFiP4U+AZEV4/DWm ujDIZQSD+Oad/wAKn8B/9Cxp/wD3yf8AGvJtV8A/EL4Ps+qeBNWn13Qozvn0+cbmC8ZJToenVcEV 6n8KPibpHxE013s82uqW4H2qxkPzIfVfVfegDW0LwB4V0DUk1DRtDtLO9QFVliBDAHgiujuIY7iC SCZQ8UilHU9weCKkooA83134JeAdXs2gOhx2khB2z2rsjqT364P4g15ToWoa7+z/AOPrPRdXvZdQ 8D6m2IZX6Q5ONw/ukE8joRzX09Xjv7V+nw3fwfu7qVFaWxuYZImI5Us4Q4/AmgD3JGDqGUgqRkEd xS1yPwjvZdQ+GXhi6uGLTSafDvY9yFAzXXUAFFZviPXNO8OaNcaprNyltYwAF5G9zgADuScACvOP h78V7zxh8Q73RDocum6dHaC6gkugVnlUnAYr0Ckc+tEXzS5Vv/TFJ8q5n/Wtv1PWaK57xt4u0rwb pIvtYlceY3lwQxIXknkxwiKOprlfg/8AEXUPHd74hi1HRxpP9mzrEkLsTKARn5+wP0oi+ZtLp/X6 hJ8qTfU9Lorz3x149v8ATfEdt4Y8I6QNY8RzQm4ZJZPLht4um6Rvc9qq+DviDq8ni4eFfHOiw6Rr U0JuLV7abzYLhB1CnrkUR97b/h7b2CT5d/6uemUUUUDPB/2jPHmr29/pvgTwWzjXtWx5ssRw8UbH AAPYnk57AVufCD4Tab8PIWu/PmvdduI9tzdM5CnJBKqvTGR1OTXD+EIF1T9rLxVd3hMkmnwMsGei jaFH5AmvoOgCvqFja6lZyWmoW0VzaycPFKoZW+oNYP8AwgPhD/oWNG/8A0/wrpqKAOZ/4QHwh/0L Gjf+Aaf4VHceCPBVrA81z4d0KGFBlpJLaNVUe5IrN+LHxL0r4d6Skl2PtWqXHFrYofmkP94+i15d ovw58c/F2SPWPiNqtxpOiSYkt9Mg+Vip6fL0UY7nmgDt5Pil8LfBnm2WnX9hBube8Wm25KlumcqN pPHrWRqPxz+F2uxJa6wsl1bhtwW6st6A+uOea7rw58GPAWgRRrbeHrW4lQ5E12POfP1aujvPBXhi 8tjb3WgaZLCRt2NbLjH5UAef+F5vhH4oKpolt4anmbgQtbJHIT7KwBNdX/wgPhD/AKFjRv8AwDT/ AArj/GX7O3gzXI2k0eCTQr4D5JbM4QH3Q8flXA2nivxz8FNVt9M8fCTW/CkjbIdSjyzRj2J54/un 8KAPbf8AhAfCH/QsaN/4Bp/hW3pem2Ok2a2ml2kFnaqSRFAgRQT1OBSaNqllrWl22o6XcJc2Vyge KVDww/x9quUAZes+HtG1x4m1nSrK/aIERm5hWQoD1AyOK8r+JHwE0HWrSS98JRDRNei/eQNbsVjd hyAR/CfQjGK9oooA8n/Zx+I2oeJrK/8ADfincPEmjHZIzDDTRg7cn/aB4Prwa9pr5osimlftjyR2 o8uO+sy0yrwGZos5P4gGvpegAooooAKKKKAPnPU/+Tw7P/sHD/0E173WRd+EdEPi5fExsgdbEflC 53HIUDGMdK16ACuN+LfjaDwF4Ku9Xfa92f3NpEf45SOPwHU12VfO/wAU4f8AhPv2g/DPg93Labps YurqMcZON7c+u3aKAOg/Z5+Gzon/AAnvjFWu/EuqE3EJm58hG6Nj+8R+QxXvNIiqiKqAKqjAAGAB S0AFFFFABXEfFn4d6X8RfDUun36JHeoC1pd7fmhf691PcV29FAHz7+zx4w1GO4v/AIf+LWZdc0cl YGkOWliU8jPfHUH0r3Gvnv8AaKtv+EN+KPg/x1p6bXmmFtdBePM24HJ91OPwr6CjdZEV4zlGGVPq D0oAdRRRQBxniX4daL4h8a6T4ov3vRqemqqQrFKFjIVmYbhgk8se9ehr05ry7xb8Trbwz8R9C8JS 6XNczaoiOtyswVY9zMuCuMnG3PXvXqVPoLqFFFFIYUUUUAFFFFABRRRQB5f+0v8A8kZ1/wD3E/8A QhVv4Mf8kp8L/wDXkv8AM12HijQtP8SaJcaXrMH2ixmA8yPcV3YOeoqDSNNtNH0y30/ToRDZ26bI owchV9KALdFFIzBFZm+6oJP0FAHiP7RHjPUkm07wF4TLHXtbIWVkODHExwAD2Jwc+gHvXpHwk+He m/DvwzFY2aJJfyKGvLvHzTSd+f7o7CvIv2ebYeNfiv4x8eXZEqRTG1syf4Qen5IFH4mvpWgAoooo AKKKKAPBv2ivhi95AfHHg8PaeJ9MxPIbfg3CLznA/jA/McGuw+DvjqHx/wCCrbVMKl9GfIvIh/BK Op+h6j616QyhlKsAQRgg96+ZvhnbnwB+0V4l8Jwhk0rU4zdWydFXjeoA9txXP+zQB9E0UhIClmIC qMkk4AHvVTTNUsdVikl0y7gu4o3MTvC25Qw6jI4oAh8SaNbeIdA1DR78yi0voWglMTbW2nrg4ODT Ph74YsPB3hu30TSTO1lblihncM/zMSckAdz6U3xhraeGvC2q63LA1xHp9u1w0SttLgdge1R/C7xZ F438G2evW9nJZx3JcCGRw5XaxXqAPSmI6yo7mCG6geC5ijmhcbXjkUMrD0IPWpKp61dz2Ok3d1aW cl9cQxs8dtGwVpWA4UE8AmpbsrspK7seSeKUWP8AaV8GoihUXSpgFAwAMngV0Px4tdEuvAzjXb+W wkjmSSxlgTfL9oB+QIn8RJ7V5rrGreN9Q+KWi+LV+GuspFp9pJbNbG5jLOWJ5DduvpXa/EfQvEfi /RfCniLSdNFprek3QvjpF5IPm7FCw4z/AI1LT9nFPvr3V5N3/Um9qkml0087Rtb9Dz7W9c8WanBo Fn8X9On0nwo0qSS3dtGGM7gjyxPgnygTyR617v4u1TWtM0KC48H6HFrs7FQsH2tbdRHj7wZuD2rz DxdqXjz4i+HbjwuvgSfQ0vdsdxfX10jRxoCCxUAZJ44rsdZ1DxT4LtNMstB8Mf8ACQ6TbWqQs0N0 I7gOBj7rcEVbfuu+mv3+v3W/yElaStrp93p+L6nBeENVm1L44Q3nxEtJ9D8Ri0aDStPKhoGQklis wJ3t+VfQFeI2+heKfiJ8RfD/AIi8R6H/AMI5pGhFpIbeWYSXE8h9dvAXgV7dTWkIp6PX8/13D7cm tdvy2+WgV8zfCz/k6Dx99Jf/AEIV9M1y9r4T0PTPEV7rVhp0MOq3mTPcr96TPXNIo16KKKAMbxj4 htPCnhjUNb1A/wCj2kRfb3dv4VHuTXivwE8FXPjjXrj4neOE+0T3MpOnW0gyiAHAfB7Doo+p61J+ 1Jdz6vfeEPBNk5WTVrsSSehG4KoP4nNfQuj6db6RpVnp1kgjtrWJYY1AxhVGBQBbooooAKKKKAM7 xFomn+ItGutL1i2S5srhCjxsP1HoR2NfOHw4u7/4Q/FWbwBrVw8vh7U28zTJn6KzH5ee2fukeuDX 1BXhX7XPh77b4DtvEFqGF/otykqunXYxAPPoDg/hQB7JRWF4F1n/AISHwdo2rHh7u1jlcejFRn9c 1u0AFcwvgbRj8QV8YCKYa2Y/JL+Z8hUKF+79BXT1wcPxHj/4XKfAf9mt5iwCc3nmjHMYfG3HvjrT QmemjpRRRSGFFFFABRRRQAUUUUAFeBftk/8AJPdL/wCwkn/oLV77WB4z8K6N4s06K08QWa3lvDIJ kRmIAYDGePrQA7Rf+QNYf9e8f/oIq5TIY0hhjijGI0UKo9AOlPoAK+ffjhr+p+NfGll8LvCkpQzE Pqcy9FXqVJ9AOT78V7rreoR6Ro1/qM/+qtIHnb6KpP8ASvF/2S9HfULbxB441I+bqGrXTxpIeuwH Lcdssf0oA9j8AeDdJ8DeHYNI0SAJEgzJKR88z92Y9z/KujoooAKKKKACvm349eBbrwbrcHxM8Bx/ Zrm0kDahbRDCOpOC+B2PRh+NfSVV9RsoNS0+5sryNZba4jaKRG6MrDBH60Acx4F8TWfjDwrp+uae R5VymWQHJjcfeQ+4Nb1fPv7Ns8vhvxh408CXEjNHYXLTW+70DbTj8MGvf5pI4IXmnkSKJBlndgqq PUk8CgB9YPjjwtp/jPwzdaFrDTrZXDIzmBwr5RgwwSD3HpWppuoWmqWaXenXMdzauSFljOVYg4OD WF8SfF0XgXwbe+Ibi0kvIrZ41MCOELb3C9SD0zQB0HhHRrfw94dsNIsTKbWzhWGIytubaBgZPc1s VieCdcTxL4U0vWooGt0voFnETMGKBhnBI61t03uJEV1a295D5V3BFPFkHZKgZcg5BwfevHtJ/wCT pNa/7AsX8xXqPinUrzSNDub3TdKn1e7jxss4HCPJkgcE8cdfwrwSz1bxvB8Wb7xgfhrrJhubFLQW 32mPcpB+9u/pUwf7xPtf8YsJq9Nrvb8JJn0VPa29xJC88EUrwtvjZ0DFG6ZUnofpXkHwR/5KL8UP +wqP5Gu78U+JNY0jQLG/03wrfateTlfNsYZkR4Mrk7ieDg8cV5B8N9R8aaB4x8SX918O9XMGvX6z 5+0Rj7OvQ7vXGc9qcF+8a8mvneIp600/NP5anR/DlzcftAfESS4yZooYIo89o8A/zpvxkXy/i38L 5oSVnN5LGSp5KbRkfSrPizQ/EfhT4ky+NfCekDWrbULZbbUNPjlEcu5T8roTwaXw9oviPxp8Q9P8 W+K9I/sKw0mF47HT5JRJM0jfedyOAPQUqX/Lv+7v8r/n+oVP+Xn97b5pL8P0PXqKKKZR84fDv/k6 Tx5/1xP81r36suHwvoun+IrzW7PT4YtVvBie5UfNIPf8q1KACsfxh4hs/Cvhq/1rUnC21pGXIzje 3RVHuTgVsV4D+1Tez6nL4R8GWkjI+sXqmTb3AYKAfxYH8KAIvgN4OuvHniK4+J3jZPOeaQ/2bayD KIBwGwew6L+Jr6UqloemW2i6PZabYxrHa2kKwxoowAqjFXaACiiigArN8RaJp3iPRrnS9ZtkubK4 Xa8bj9R6EdjWlRQB8t/D67vvg58V5fAms3Ek3hzVW36bNJ0RmPy/n90gd8HvX0nXjv7XHhpdR+H0 Wv2wKajok6SxyoPmCMwDDPbB2t/wGvQfh7rn/CSeCNE1cjD3dpHI4znDY5H50AdDRRRQByz+A9Em 8fw+L2im/tpE8sOJPkxt2/d+hruh0ry8/EqOH4yQeBP7McySQ+b9r80YHyFsbce2OteoU2IKKKKQ wooooA8sv/iLdJ8bofA32CA2r2wuPtW87wcE4x0r0KvBNT/5PDs/+wcP/QTXvdABXg3w5jS6/an8 ZXE5Xzre22RZHOPlBx+Ar3mvnsTnwr+1vHJct5dprtqI4z/eYqAM/wDAlNAH0rRRRQAUUUUAFFFF AHh37YUan4TLN0kiv4Sh9M7q9H8GSNN4Q0OSRizvYW7Mx6kmNcmvI/2u9Q+1WHhjwtbDzbrUr1ZG jX72wHAOPck/lXtOkWq2OmWtpHjZbxJCuPRVAH8qfQRcooopDPm/40cftMeAf+uEP/o2SvqEV8u/ Gj/k5jwD/wBe8P8A6Nkr6iFPoLqFFFFIYUUUUAFFFFABRRRQByPxX8Uz+DPAmpa7a20dzLaqpEUj EK2SB1FHgXW5PEvg/SdZnhSCS9gEzRIchSewNc7+0v8A8kZ1/wD3E/8AQhVz4Mf8kp8L/wDXkv8A M0AdnWd4kkaLw9qboCWW2kIA6k7TWjUF9At1ZXFu/wB2WNkP4jFAHkP7HNvHF8LrmZExJPqErSH1 ICgfoK92r50/ZCu201PF3hO8dvtmnX5l2HoFPyHH4pn8a+i6ACiiigAooooAK+Wvj3qF1oX7RfhL UtLsX1C9jsg62kRw0zAyALX1LXzTezDxZ+1tGYBvtvD1vtMitkB1XkH/AIE7DHtQgZ4f8T/i14z8 U3c9jqs0ulWiMVOnwAxBeej9yfrXc/BD4h+MPDXgdbDw/wCArvXLIXDv9riEuCx6r8qkcV9HeOPh 34Z8b2pj17TY5J8YS6j+SZPow6/Q8Unwt8FR/D/w0+i2t5Jd24uHmjkddrAN2OOM0AeI/ED4peO9 V8D65Yal8NL3TrK5tHjmu3E2IVPVjlAOKo/Bz4meN/D/AMP9P03Qvh5e6zYRF9l5EJdsmXJPRCOD x17V7x8aSf8AhUfi/k/8g2X+VZH7LP8AyRnRf96X/wBGNQI5T/hcvxL/AOiSan+U3/xuj/hcvxL/ AOiSan+U3/xuvoaigZ88/wDC5fiX/wBEk1P8pv8A43VkfFn4oEAj4TXnPP8ArX/+Ir32igDwL/hb HxQ/6JNd/wDf5/8A4mopvit8V2I8n4V3CDuGZ2/oK+gqKAPnn/hanxc/6JfL/wCRP8KP+FqfFz/o l8v/AJE/wr6GooA+ef8Ahanxb/6JfL/5E/wrnNF+N/xI1PxVqGkxeDrW6vbbJksV3JJAB/ePfFfV NfM/wsP/ABlB4++kv/oQoA1/+Fj/ABV/6Jkv/f8Aaj/hY/xV/wCiZL/3/avccn1pMn1oA+V49Z8Q +I/2i/BUvjDw+uj3EP8AqbfcWyBk78n3r65r5p/aMZ/DnxF8A+MCHNta3Aim2jnhg2P++c19KRSJ LEkkbBkcBlYdCD0NADqKKKACiiigArhPjsiv8H/FocAgWEhGfUDiu7rx/wDaq14aP8JL62R1FzqU iWkaHqwJy2PwBoAZ+zPI7/BnQPMzx5wUk5yPNf8A/VXqVcb8INIbQvhv4fsHj8qSO0R5Exja7fMw PvkmuypsSCvn2I4/bOk/7B6/+iFr6Cr58T/k82T/ALB6f+iFoW4M+lBRQOlFIYUUUUAFFFFABRRR QAV5v8c/iBdfDvwzZ6lZ2MN6890tuY5XKgAgnOR9K9IrwP8AbJ/5J7pf/YST/wBBagD2SxmNzY20 7AKZY1cgdsjNT1T0X/kDWH/XvH/6CKuUAcV8apXh+FPid4zhvsbj8Dwag/Zstobb4M+HRBtxJG0r YH8TMSa3PiDpj6z4H13ToQGmuLOVIwe7bTgfniuC/ZG1lb/4Xf2a77rrS7qSGRT/AAgncv8AM0Ae 3UUUUAFFFFABRRRQB8leOfEGpeEP2mtcv9B0qbVrg6fua0i/izECWOBnA68V438Q/if4s8a3Eket 30kVqCQLKEGOJPYr3/GvoH4WTDxT+0T408RxBXtLNWtoJlHBGdg59cAmvSPiD8JfCnjiN5NRsRa6 gRxe2oCSZ/2uzfjTEeLfCz4m+N9E8BaVp2j/AA5vNVsIEIivEEu2UZ6jCkfrVX4x/Ejxp4h+Hmo6 brnw+vNF0+V4jJeyCXbGVkBA+ZQOSMde9fSHw88Nnwf4P0/QRdfalswyrLt27gTkcVxn7URJ+COu c/8ALW2/9HLSGeffD34reP8ASvBOi2Gl/DK/1Cyt7VI4bqMS7ZlA4YYQjn610P8AwuX4l/8ARJNT /Kb/AON16d8Ef+STeFf+wfF/6CK7ihiR88/8Ll+Jf/RJNT/Kb/43R/wuX4l/9Ek1P8pv/jdfQ1FA z58h+MPxNlfavwl1AHr8xlUfmUqb/hbHxQ/6JNd/9/n/APia99ooA8Bf4sfFIqQnwoug3YmVyB/4 7Vf/AIWp8XP+iXy/+RP8K+hqKAPnn/hanxc/6JfL/wCRP8KP+FqfFv8A6JfL/wCRP8K+hqKAPl3S /jf8RdS8TX2jw+CLefULUbpbMOyvEPc/jXQ/8LH+Kv8A0TJf+/7VS+Hf/J0fjz/rif5rXv2T60Ae Hf8ACx/ir/0TJf8Av+1cSNa8Q+I/2iPA8njDQF0aeLPlW+/duABO7n3FfU+T6188ftJs/h3x74B8 YZ229pdCGdgOcBg2P++Q1AH0vRTIZUmhjliYNG6hlI7g9KfQAUUUUAFFFFAHF/GpI5PhP4rWUgL/ AGfKefULkfrXG/sxXElx8GdEMxyyPPGP91ZCB+lWf2pvECaH8ItRgEgW51J0s4l7tk5b/wAdDVsf BzSZNE+Gvh6xnXZOlojSL6MwyR+tNCO0ooopDPne7OP2y7M/9OY/9EmvpkV8y3v/ACeVZ/8AXmv/ AKJNfTS9BT6C6hRRRSGFFFFAHznqf/J4dn/2Dh/6Ca97rwTU/wDk8Oz/AOwcP/QTXvdDBBXi37S/ hG71bw7Z+ItEVv7Z0KQTpsHzNHnJx9CM/nXtNMmQSRsrAEEYIIyCKaEznfhD47s/iB4NtNUgdReq ojvIARmOUdePQ9R9a7avlnxh4P8AEfwo8YS+M/h2jXGkyktfaYMkBc5I2jqvcEcqa9d+Gnxk8K+O rWJYLyOw1Q4D2N04R93+yejD6c+1DVgTuek0UUUhhVbU7+10vT7i+1CdILS3QySyucBFAySax/GH jTw/4OsWuvEOqW9ooGVjZsyP7Kg5NfOOveIvFHx91caVocE+keBopAZ7lxhp8Hv6n0UcDvQlcL2L Pw+Nx8WfjTfeN7qNxoWkt5Ono/TI+5gev8R9zX0mgwoFYXg7w3YeGNDtdL0mAQ2luuFHdj3YnuT6 1v032Eu4UUUUhnzd8aP+TmPAP/XvD/6Nkr6iFcZrPgnw/rXiXT9e1LTln1eyCrb3BkdSgBJAwDg8 seo712S/d5p9BdRaKKKQwooooAKKKKACiiigDy/9pf8A5Izr/wDuJ/6EKufBj/klPhf/AK8l/map /tL/APJGdf8A9xP/AEIVb+C//JKfC/8A15L/ADNAHaUHpRRQB82/E5bn4VfGbTvHtlE76NqZ8jUF QZAJwG+mQAw9wa+mdK1C11bTba/0+ZJ7S4QSRSIchlNc/wCLPD9h4m0K70rVoBNZ3C7XXuPQg9iP WvnzRtc8T/s/6u2navBPrPgaeQmGdBloM+nYH1U8HtT8xeR9W0Vzfgzxx4d8Z2K3Ph7VILrIy0W7 bKn+8h5H8q6SkMKKK83+Jfxj8LeBbaVJ7tL/AFUcJY2rBnLf7R6KPrz7UAanxb8eWPw+8H3Wq3bq bpgY7ODPMspHAA9B1PsK8y/Zn8J3mn6LfeJtbDHV9ek89i4+YRkkjPuSSfxrmPCXhPxH8WvFUPjD 4ixmDSIjmx0sghSuePlPRfUnlvpX0jbQrDGqqAABgAdhVWtqTe+hNRRRUlHGfGn/AJJH4v8A+wbL /Ksj9ln/AJIzov8AvS/+jGrvtZ0yz1nSrvTdThE9jdxmKaIsV3qeoyOR+FL4O0DTvDOixaXolqLW whLGOIMzbckk8kk9TTQmblFFFIYUUUUAFFFFABRRRQAV8zfCz/k6Dx99Jf8A0IV9M18zfCw/8ZQ+ PvpL/wChCgD6IooooA4n4weDk8b+Bb/SR8t1jzrZ/SVeR+B6Vy37MvxAOs6A3hLXWMPiLRAYDHLw 0kSnAPuV+6foDXrzDIxXiHxk+Ft9e6vF4w8CzGy8T2uHKxnb9ox7/wB7HHPBHBp7i2PoGivCfhr8 f9PvpBovxAiOg+IIf3cjzIUhkb8fuH68e9e4Wd3bX1ulxZXENxA4yskTh1b6EcUhk1FFYHivxj4f 8J2b3PiDVbWzVRnY7gu30Qcn8BQBuyyJFG8krKkaAszMcAAdSa+WdZvj8bfjVa29mGk8IeHm3PJ/ BM4PJ/4EQAPYUnirx74n+Nl7L4c8C2k+m+Gd2271GXKmVO4PoP8AZBJPevaPhx4K03wV4fh0zS48 KvzSykfNM/dj/niqS6sTfQ6yFdqAAYqSiipGFfPkf/J5sn/YPT/0QtfQdZieHdJbxIuuf2fb/wBr 7dhu9v7zbjGM/QYprcT2OkHSigdKKQwooooAKKKKACiiigArwP8AbJ/5J7pf/YST/wBBavfK8C/b J/5J5pf/AGEk/wDQWoA9g0X/AJA1h/17x/8AoIq5VPRf+QNYf9e8f/oIq5QAjDIr5sium+Cvx1nm uEZPCfiQ8yfwQuTn/wAdJP4GvpSuT+JHgvTvHHhu40rU0wG+aKZR80L9mH+HemhM7uKRJY0kidXj cBlZTkEHuDTq+VvBfxA8Q/BW/j8L/EO3nvPD27bZajCN3lrnt6r329R2zX0l4a8S6N4msVu9A1K1 v4CASYZASuf7w6g/WkM16KKCQoJYgAckmgAryv8AaF+IcXgjwZNb2coOvampt7OJT84zw0mPbPHv ioPif8cvDng+OSz0yVda15vkitLU71Vj03sPfsMmuB+Gnw/1vxX4pHjz4mDzNRYhrOxdcLEB90le wHZfxPNNK4m7Hbfs++C5PB/gaFL1NuqXzfarrPUE/dU/QV6lTIk2LT6GCCvKv2ov+SI65/11tv8A 0cteq1l+JtA0zxPos+k67ai70+Yq0kJdl3FSGHKkHqBSGZnwQ/5JP4V/7B8X/oIruKzfDml2ui6P aabp0IgsraMRQxAk7FHQZPNaVN7iWwUUUUhhRRRQAUUUUAFFFFAHzj8O/wDk6Px5/wBcT/Na99rw H4dkf8NSePP+uR/mte/UAFcX8XvB6eN/AuoaR8ouivm2zt/DKvK/geh9jXaUhGRQgPHf2YvHx1PQ 28G68zQ+IdEBhEcvDSRKcDHqV6H8DXuleBfGL4X3l/qkXi7wPMbHxTakOdh2i4A/9m7eh71N8Ofj /YXUo0T4hQtoGvwkRu8qlYZD6n+4T78e9NoSZ7vRUFleW19bJcWVxDcQOMrJE4dWHsRxU9IYU2R0 ijaSRlRFBZmY4AA7msPxV4w8P+FLVrjxBq1pZKAWCSSDe3+6g5P4CvnTxf8AEDxP8aL+Tw38P7We w8OE7bvUZQVMi98nsP8AZHJ70bgJr+oN8bvjTaWNjuk8IeHm3ySY+SZweT/wIgAewJr6VgQJGoAw AMAelcj8NfBGneCPD0OmaYmcfNNMw+aZ+7H+g7V2VU9NBLXUKKKKkZ8633/J5Vn/ANea/wDok19N r0Fcz/wjekSeI49bbTrc6sg2i72/vAMYxn6V0w6U3sLqFFFFIYUUUUAY11o2mf2yNV+wW39p7dv2 rYPMwO26rFeX6h481lP2hIPBwNt/Yz2gnI8v95u2k/ez0/CvUKACiij8R+dAEcsYcEGvKvHnwT8L eKJ2uxbPpmonJ+02WEJPqV6E16zQRmmmJo+bZ/hz8Q/CNrJPonxFli0u0QyFLlnARQMnIORWJ4IT 4mfE3RDqFl8Qmt7ZJWgljUsjKR/eC+owfxrrf2t/Go0fwvB4ZspMXuqfPcYPKwDt/wACPH0ryH9l /wAbL4Y8erpt9KF0zV8QPuPCS/wN7c5H4inddgsz2Tw5+z7o8d99u8Uahe6/dk7iJ2Ijz3z3P0Ne 1aXpdtp1rFbWcEUFvGAqRRqFVR7Cr+0KcYpaObsLl7gBgcUUUVJQUUUUAeXeOPibfeGfix4b8J2+ nWs9tqkcbvcSOwdNzupwBx/CPzr2Kvl340f8nMeAf+uEP/o2SvqIUxBRRRSGFFFFABRRRQAUUUUA U9Y06z1XT5bTUraK6tZPvxSruVvqKqWltBZ20dvaQpBbxjakcYwqj0Arn/jP4kv/AAl8OdV1nSDE L22VSnmruXkgcipPh1rF14g8DaLq2oeX9rvLcSy+Wu1cnPQUAdFRWXfeIdF0++jsr/V9PtryTGyC a4RJGz6KTk1a1HUbLTLRrrUry2s7Zess8gRB+J4o8w8i1VLUtOttQtZLe7gjngkG145FDKw9xT9N 1Gy1S1W60y8t7y2bhZbeQSIfxHFVbzxFollqKafe6xp1vfyYCW0tyiyNnphSc09Uxbo8c8Tfs96F cXhvfDV7eaFdbt2Ldsx57YHUfhXFeOLH4qfDfQW1R/Hk17ZiRIAu5iQWPBAbpX1WQDXj37VSAfCh yP8An/t//Qqd0KzOPg+GnxH8T2scniL4g3P2G6QSNDEznhhnAHAHWu28CfBLwx4YnS7e3fU9RU5+ 03vzYPqF6A16XoEajQtN4/5dYv8A0AVoAYoulsgs3uRQwhB0qaiipbuUlYKKKKAMLx3rcvhrwXrW t28Mc81havcLFISFcjscc1B8HfFlx438BWGvXlrDazXLODFCxKjaxA5PPaqHxp/5JH4v/wCwbL/K sn9lo/8AFmNFH+1N/wCjGpiPWqKKKQwooooAKKKKACiiigArMeytYbySeG2gjnk+/IqAM31PU1p1 4X4D8b69q/x28XeHL+8Euk2HmG3i2AFMEAc96APY6KCQASSABySe1VdO1Gy1OFptNvLe8hVzGzwS B1DDqMjuPSgC1TXUMMGsz/hI9D/tT+zP7Z03+0s4+y/aU83P+7nNWtT1Kx0q1a51S9trK2U4MtxK I1H4nijzDyOX8b/Dzw74xgKa5psU0g+7OnySr9GHNeVS/AO80iaWXwh4y1PS85Ko5O1R6ZU9K9+0 7ULLVLVbrTbu3vLZvuywSB0P0I4rzL9pDxqPB/w+uIrWTbqmqZtbfB5VSPnf8Bx9SKq/cm3Y8T8B WvjDx5r+s6NH8S70ppzkE+ZIftCA4Lpz0z616V4d/Z50C2uVutfvL/W5wd2Lh9qZ9x1P418wfDDx ZP4L8b6brURJjik2zp/fibhgfw5/Cv0QsLm3vrK3u7NxJbTxrLG47qRkGhNLoDTKekaPZ6XZx2th bQ21tGMLFEgVR+FaYAA4paKTdxpWCiiikMK8xh+IWp/8NAnwQILYaYtqJ/NwfMJMQfr9TXp1fPsR x+2dJ/2D0/8ARC00Jn0nRQOlFIYUUUUAFFFFABRRRQAVm69pGnaxapFqtjb3kUbb0SdAwVvUe9aV eT/tHeNNY8D+EbDUNAkijuJb1YX8xN4KlT2/CgD0ZFVEVEUKijAA6AUtVtNlefTbSaQ5eSJHY+5G TTbnUrG1vLezub22hu7jPkwSShXlx12qeT+FAFuimyyJDE8szrHGgLM7HAUDqSfSqNnrWlX2nSah ZalZXFhHnfcxTK0a465YHAxQBFr2h6frdhLZ6paQXdrIMNFKgYH/AArxXWf2fbO2vjfeDNb1DQbo Esqq5ZAfqOcV61/wnvg4/wDM16D/AOB8X+NdDG8c8SSxOskbgMrqchge4NUn3Jt2PlXxl/wtjwAm lRS+NpL1NRu1tYTksQxH+0M4roJPhH498Q5j8XfEC7ltG5aGFnb374GK6X9o9AJ/h/jvr0X8q9n8 tR2ougszzPwB8IfDPg90uLKzNzqA63l18759QOi/hXpUUQQe9SYopOVxpBRRRSGFcf8AFzxbceBv AOoeILO1hu5rZ4lEMxIVt7hTnHPeuwryr9qL/kiOuf8AXW2/9HLQB6L8Ptbl8SeCtG1m4hjgmvrZ J2jjJKqWGcAnmuhrh/gic/Cbwp/2D4v/AEGu4oYIKKKKACiiigAooooAKKKKAM2Wztorx547eFJ3 +/IqAM31PU0teSeD/Gmuap8ePFnhu9uhJpNgha3i2AFTx379a9boAKKqafqdhqJnGnXttd+Q/ly+ RKH8t/7rY6H2ouNSsba+t7K5vbaK8uM+TA8oWSXHXavU/hQBaZQwwa43xv8ADzw94xgKa5psU8gG FnX5JV+jDmusvry2sLWS5v7iG2toxl5ZnCKo9yeKh0nVtN1m3NxpGoWl/ADtMltMsig+mQaaYmjw ST4A3mkTyTeEPGOp6WT91XJ2r7ZU9K4bwJaeMfHXiDWdGi+Jl4V06TBIklP2iMHBdB6Z9a9u/aM8 ar4O+HtyltIF1TU82tsAeVBHzv8AgOPqwr47+GHi2fwZ4307WoyzRxybbhM/6yNuGH5U7rsFmfTv h/8AZ50GG7W68QX1/rc+7did9qZ9+5r2XRtFstJsorTT7WG1tYxhIokCqKu2Fzb31lb3dnIsttPG ssbr0ZSMg/lVijm7C5e4gGBS0UVJQUUUUAeWyfEXVIvj/beCFgtv7MeAStKQfMz5Zbr9RXsdfM14 cftl2Z/6cx/6JNfTI6UxBRRRSGFFFFAHznqf/J4dn/2Dh/6Ca9K8afD7R/GF2s/iK61GSzijwLSK 6aGFSOd52kZP1rzXU/8Ak8Oz/wCwcP8A0E1t/GXX9c/tq30CDw94iu/DkkQkvrjSLcvJPn/liG6K P7x60pbpDichpy303wE8ZWyzX9/pMN+0GmO255Xt1kUfKRyRwcVrfCVPhbF4ss/7At9Z07xD5ZEM epvMnm5HzbVYkNXYaD41u18LzvoPw/1+yj0wRxpYXUSwPJGc58oZ+YjHT3rBuZNZ+JvjLwvdjwtq mgadol0bqe61VBHLIccRovUj36Va+P7vXbf+vQl/D9/p6GB8T/Euj6x8StS0Lxbd6u3h/SoYwum6 VG5e6mbks5TnCjHevTPg7J4Xfwq48FXV5LpqzENDdyM0ls+OUIbJX6Vy+sNrPgD4qa14itPDeo67 o+uQRhv7MQPNDMnHI/ukd62vg1oWqWP/AAkeua3YjTbjXL43SWOQTCmMDdjjcepqafw/L8b7DqfF /W1hnxt8I+Hr/wADeKtbvdHs59Xg0yVoruSPMiFVO3B7YrzH9lDwd4c17wNqF/rWjWV7ewamUinm jDOgEaEAH6kmva/jB/ySjxh/2Cp//QDXmf7Gn/JNdX/7Crf+io6APegAAAOgGBRRRQAUUUUAFFFF AHzd8aP+TmPAP/XvD/6Nkr6iFfLvxo/5OX8Bf9cIf/RslfUQp9BdQooopDCiiigAooooAKKKKAPL /wBpf/kjOv8A+4n/AKEKufBf/klPhf8A681/map/tL/8kZ1//cT/ANCFXPgv/wAkq8L/APXkv8zQ Byvxc8G+CdL8G67qN1oltNq18W+zytlrmW5c/KsbHkc9hXQ6L4E07UvCPhqHxvYxalfadZKjLdHd GpIBO5ehIwBk+lcVeQfEk+O7vWrvwTZ60lvIyaWJdUjjjto+m4Jn75HVjyK0/iD/AMLH1/QdHt7P wzCiTlm1eyi1NEJAPyxCXP3WHJx9KS+H1t8t/wCn8kN/F6X+f9W0KXwrtoNJ1L4i634bg+zeFhkW EUY/dvLEh3vGP7uRjj0rL8DeAvD/AIl+C9zrmtWEd3rmoxT3b6hKMzo+Tja3UAY6V6D4Fm8T3VvL o3iLwZZeHtFS1MMRtb9Zuoxt2r04PWuJ07QPiZ4d8N3ngrR9N0u50qQyRWusyXQUwQuehi6kjJom m00uyS+X5dAi1dN97v8Arqd18DtVuda+FPh68vXaS4MHls7dW2MVBP4CuZ/ar/5JO/8A1/2//oVe ieCfD8fhbwlpmiW7+atlCI9543t3P4nNfNPx9+Mdh4i0G98KHRdRsdRtr5DIZ2QqDGxyODWlRpzb RnTTUUmfUmg/8gHTP+vWL/0AVeryL4O/F+y8dXkGiaZomowmztVM91KU8tNoC9jnJPQfWvXagsKK KKACiiigDjPjT/ySPxf/ANg2X+VZH7LP/JGdF/3pf/RjVr/Gj/kkni//ALBsv8qyP2Wf+SM6N/vS /wDoxqaEz1uiiikMKKKKACiiigAooooAK+ZvhZ/ydB4++kv/AKEK+ma+ZvhZ/wAnQePvpL/6EKAP b/FegQ+JNNWxu7u7gs9++aO3fYZ1A+4zdQp74615v8ALID4deIrGyf7IP7SvIYnX/ll1AP4f0r0T xjfa9p+kiXwvosOs3xcKbeW5EAC923H+VeU/Djw747tdB1zw1rWgQaVY6q11N/aUd+kjwvL0UIpJ I561P8yXZ/foN7xfZ/5nmy2Hh9/C9v4Wl0i1g8Vf2iIG8Tkn7Ozb8lxcY5JHG3171738S7bwnYaZ pWo+NNJudbS2/wBGhWK3a5BJXJZowcH7vU1wb+HPiRc/D8fD+XwzocWnCP7N/a/2tSuwHPmCLru9 +ua9E1c+NfDem6Rb+E7Cw12C2tUt54rm48iZ3UABw54x7GtJPT5/p26f8Elb/J/n36/8DzOT/Z8i 06TUfF2o6D5NlpN1cp5GlKx322ByXQj5CfSvVtS0bTNUZX1PT7W7ZFIQzxB9o9s1wvw68NeIF8Y6 14v8VW9npt7qMEdumn2knmCNV/idhwze9ek9j9DSey9AW79T5L/ZH0nTtT8S+Lk1KxtrtIooyizR hwv7xumelfV9rbw2lvHb2sSQwRjakaDCqPQCvl39jX/kaPGf/XGL/wBGNX1PSGFFFFABRRRQAV8+ J/yebJ/2D0/9ELX0HXz6it/w2XI207f7PTnHH+oWmtxPY+kx0ooHSikMKKKKACiiigAooooAK8D/ AGyf+Se6X/2Ek/8AQWr3yvA/2yf+Se6X/wBhJP8A0FqEDPX9F/5A2n/9e8f/AKCK8a8V+GbXRPjH 4CvRcXV7qF9eTNPc3L7mIC/KgHRVHYCvZdF/5A+n5/594/8A0EV4z41g+JWreN9E1a08E2bQaHcS PB/xNIx9pVhgE5OV45pLScWEleEkdj8RprjxHq9l4G0t2U3i/aNVmTOYLQHlcjoXPyj2zWH+z1pt p/whHiDTmtY2sP7WuYPIdcoUBxtI7jFaF98K9M8U33/CQa8+taTrl7En2uDT9S2xowGNoIHIFVPg V8OLjwUurXOptex3c9zIkUcl2JY2g3ZV9o43nuetOKtdPs/zX9fewk72a7r8nf8Ar0RifFvwV4T8 3Q/C3h/w1pFrrGtXIBmgtVDwW6HdI4Pbjj8a9ts7aKys4LW3G2GCNY0HoAMCuF8LeHNUm+JPiDxV 4igWE7VsdKiEgfZbjln4PBY/jXdXsz29nPNFC07xxs6xIQGcgZ2jPc00/dS76/5fh+Nwfxemn+f9 eR49+0h/r/h9/wBh6L+Vezmvj/4tfG7SvFlz4cSDR9RtJNH1NbuZZymWC8FRg9frXvvwn+KNp8ST fvpmkX1nbWe0PPcFSrMf4RgnnHP40gPQ6KKKACiiigAryr9qL/kiOuf9dbb/ANHLXqteVftRf8kR 1z/rrbf+jloA674If8kn8K/9g+L/ANBFdxXD/BD/AJJP4V/7B8X/AKCK7im9xIKKKKQwooooAKKK KACiiigD5x+Hf/J0fjz/AK4n+a17V4j0dde0qTT5Ly7s4ZSPMe1fY7Lnld3UA9DjmvFfh3/ydH48 /wCuJ/mtezeKrzWLDRpbjw5pUWrakrKEtZbgQKwzydx6YHND8wXkebfs82Vvptz4+srKMRW1vrjx xoOdqheBWX4o8M2uh/GzwDdi4ur2/vp7p57q5fczAL8qgdFVQcACrnwksPH2heJdY/trwpa22na1 qDXs9wuoI5tsj7oUElqp+Mbf4l6t470LWrbwRZmHQ5ZvJH9qRj7QrjAJycrxzVX96D7JX+Ss/wAR 6e+vX8b2Nb4j20Hib4y+EvDGrIZ9HS1lv5bVv9XM4OFDDuBjpVay0uw8GftBadp/hy1Sw07WdMke 4tIBtiDpyGCjgHitXxroHiq+v/DHjLQrC0TxNp0JjutLluBskR/vRiTpwc81L4N8PeJtU8ev4x8a 2tppk8NqbOy063mE3lKT8zM44JNKHuteXNf53t69PuFPVO3W1vvV/TqegX2jaZqs0J1PT7W8KHCG eIPtz6Zr5X/Za0nTtR+IfjGHULG2uoYoWKJNGGC/vscA9OK+t4v9Yn1FfKv7JX/JSvG3/XFv/R9I D6jtreG1t0gtYkhgjGEjQYVR6AVLRRQAUUUUAFFFFAHztff8nk2f/Xmv/ok19NL0FfM16rf8NkWb bTt+xjnHH+pNfTK9BT6C6hRRRSGFFFFAHzxqVvOf2u7WcQy+QNPAMmw7Qdp79K93BI6E1LdRr5gf Yu7+9t5/OoaAFyfU0hJPU0UUAAJHQ0VieL/FOj+ENGk1TX7xLa1ToDy0h/uqvUmvDl+IXxK+KF3J D8N9J/sfRMlDqNyBuI9d54BHPC5oA9e+MII+E3jAkED+y5+f+AGvM/2MgT8NtXAGT/arcD/rlHUZ /Z41/XozJ4x8fX9xcMCGWBWdMHt8xH8qbB+zANOTdo3jbVLaUHcNsWwbvX5WoA+gOnWivne5h+NP wzT7RJPD4u0WEbpF5d1X0H8Y9cjNejfCz4r6D8QYDFaM1lq8Y/e2E5w491P8Q/lQB6FRRRQAUUUU AU7nSrG8vILm5sraa5hI8uaSMM6Y9D1HWtxfuivCviP4/wBe0D42eE/DemzwJpWoRxPOjRBmJMjg 4btwor3an0F1CiiikMKKKKACiiigAooooA8y/aSikm+DuvJCjyOUQBUBJPzDsKt/BxHi+FvhlJUZ HWzUFWGCDk9Qa7+dFeJlZQw9CMiqIAAwAAPQDFABRRRQAUUUUAFfJ37X3gc2mrWni2wiPk3mILva Oko+634j9RX1jWd4g0XT/EOlyadq9slzZyMrNG3qpyD+dAHnP7N3ggeD/h9BPdRBdU1XF1OSOVQj 5E/AHP1Y16vR04AAHoKKACiiigAooooAjnhiuIHhuI0lhkG10cZVh6Ed6l0ayt7C1EFlbxW8CklY 4lCqM+wrmviTq13oHw/8Q6tpzKt5ZWbzQs67gGHTI71U+BHiTUfFnw00zWNakjkvp2kDsibBw5A4 +gpiPQKKKKQwooooAKKKKACiiigAr5w+GenX1v8AtK+ObueyuorWUS+XM8LKj/MOjEYNfR9VLndu 77f0oAhooooAKKKzfEOuab4c0ifU9bu4rSyhGWkc/kAO5PpQBpU2aSOBC08iRLg8uwUfrXzxN8Sv HvxOvp7D4WaU2n6UjbH1W5ABx6gnhT3wMmtGx/Z0vtUlF3418a6nfXT/AOsSAkKfxY/0oA4z9jqe GLxT4wEs0aF4ogu5wN37xumetfVmDgHsehrxD/hl7wvG1w1rrGrwO5BiZXGY8DB+vPNZM/wm+Jfg Tdc+AfF0mp26HebK7ODJx6MSp+mRQB9CUV4v8OfjdDqmrDw745sG8P8AiEN5YEqlI5G9Ofuk/lXt FABRRRQAU2O3ja6SXyk80fx7Ru/OnV47F4w1w/tPN4X+3ONDWzEotgBjcYVbOevU00JnuY6UUUUh hRRRQAUUUUAFFFFABXg/7YNvPc+ANLS2hlmf+0UO2NCxxtbsK94qK5RXj+ZFbHIyM4oAx9GBGj2A IwRAnB/3RVyjpRQAUUUUAFAODkdaKKAPiv8Aae8AyaF8QY7/AEu3JstcbfGiDgT5wyD6k5H1NfUP wh8HR+B/AenaSFH2sr512w/ilbk/l0/Cui1jRdP1lrFtStknayuFurcsPuSDowrRoAKKKKACiiig AqG8tbe9t2t7yCK4gb70cqhlOOmQamrhPjj4l1Hwh8M9U1vRXjjv7eSFUaRA6gNIqng+xoA9B0y2 is7SOC3iSGFBtSNFwqj0A7Vbrl/hhq13rvw+0DVdSdXvLu0jmlZV2gsRzgdq6im9xIKKKKQwoooo AKKKKACiiigD568A6few/tMeOLuazuY7SWIiOd4mCP8Ad6MRg17pU9zu3d9v6VBQAUUUUAFFZ3iH W9O8O6RcaprV3HaWMAy8jn9AO5PpXgtx8TfHvxN1CWw+FekvYaUjbH1W4UA/XceF9cDJoA+izIkB V53SNM/edgo/WvlP9k6eGP4k+MzJLGgeFgpZgN37/t612dl+zrqOqyLd+NfG+pXt03+sjtydp9tz H+lWIv2XPDcLXbQ63q8byNmFkZQYh6H+99aAPcccA9j0PrRXz5cfCb4k+BVN14A8XS6nEnzGyuzg v+DEqfpkVs/Dr43x3+rjw54+sG8P+IVIQGVSkUrehz90n8qAPaqKKKACiiigBqW8T3KS+VGZR/Ht G7860x0rwefxlrqftOWnhdL910NrYSG2AGC3lE5z1617xTEFFFFIYUUUUAeF6j4m1lf2n7bQF1CY aM9iJDa8bC20817HXgmp/wDJ4dn/ANg4f+gmve6GAVl+J9dsfDOgXusarJ5dnaRmRz3Poo9yeK1K +fv2ibq68V+NfCvw609ysd5KtzeFewycZ+ign8aAM34feE9R+OHid/GnjfzU8NW8hTTtPBwsgB6f 7vqe5+lfTtjaW1hZw2ljBFb20KhI4olCqijoAB0qLRtMtdG0m003T4lhtLWNYo0UdABVygAooooA K8L+OHwe/tNv+Et8CA6b4qsj5223+QXOOvTo/wDPoa90ooA8m+B/xGTx/wCGmN6qw67YERXsIGMn oHA9D+hr0ivnTx3bL8LP2hNI1+xxBoniI+XeJ0QOTh/xyQ31NfRdABRRRQB83fGj/k5jwD/1wh/9 GyV9RCvl340f8nMeAf8Ar3h/9GyV9RCn0F1CiiikMKKKKACiiigAooooA89+PmrX+h/CvWtQ0m6k tbyFVKSx9V+YVP8ACzULrVfh14fv9Qmae7uLVXllbqzEnmsr9pf/AJIzr/8AuJ/6EKufBj/klPhf /ryX+ZoA7OiiigAooooAK57x94qtPBXhe61zUYZ5reAqpSEZYljgV0NZXifVdJ0XRZ73xFNBDpiY EjTrlOegx3pS2HHcr+B/E1p4w8L2WuafHNFbXQJVJRhhgkHP5Vu1m+HdS0vV9Gtr3QZYJtNlH7l4 BhMA4OB25rSqpb7ErYKKKKQwooooA4z40/8AJI/F/wD2DZf5VkfstH/izGij/am/9GNWv8af+SR+ L/8AsGy/yrI/ZZ/5Izov+9L/AOjGpoTPW6KKKQwooooAKKKKACiiigAr51+G2s6nd/tIeOLC61K8 nsIPN8q2knZo4+RjapOB+FfRVfM3ws/5Og8ffSX/ANCFAH0RRRRQBDe3UFjZz3d3KsVtAhkkkY4C qBkmvmfS9O1P9ofx7Nf38k1p4C0mXZFEuVM59B/tHqT2BAHNdl+1Tr9xZ+DrDw7ppY3uu3AgKofm MYPIx3BOBXrPw68LWvgzwbpmh2ajFtEPMcD/AFkh5dj9TmgDY0jTLLR9OgsNLtorWzgUJHFEuFUV coooAKKKKAPP/i78MNI+IuitFcotvq0S5tb5R88bdgfVfb8q88+AvjfVLfVbv4eeNd6a7pmVtpZD zPGvbJ6nHIPcV9B187ftT6NLoV5oHxE0YCLUNNuUiuHHG9M/Ln15yPoaAPeKKo6HqUOs6NY6lanM F3Ak6fRgD/Wr1ABXz7Gcftmyf9g9P/RC19BV8+J/yebJ/wBg9P8A0QtNbiex9KDpRQOlFIYUUUUA FFFFABRRRQAV4z+1J4k1fwx4K0670G/lsrh79I2ePGSpU8c17NXgf7ZP/JPdL/7CSf8AoLUAew6U 7S6VZSSEs7wozE9yQKtVT0X/AJA1h/17x/8AoIq5QAUUUUAFFFFAHI/E3x3p/wAPdBi1XVLe5uIp JhCqQAE5Izk56Ct7w9q0Gu6FYaraLItveQrPGsgwwDDIzVLxjrnh/QNKW58VXFrBYvIEU3ChlZuo AHrWppl1aX2nW11p0kcllNGHheP7rIRwR7ULZg90WaKKKACiiigAryr9qL/kiOuf9dbb/wBHLXqt eVftRf8AJEdc/wCutt/6OWgDrvgic/Cbwr/2D4v/AEGu4rh/gh/ySfwr/wBg+L/0EV3FNiQUUUUh hRRRQAUUUUAFFFFAHz94D1fUrn9pPxtp9zqF5LYQRExW0kzNHH937qk4H4V7hXgXw7/5Oj8ef9cT /Na99oAKhvLmCytJ7q7lWG3gQySSOcBVAySTU1eKftU+ILmx8FWXh/TC327XblbfapwxjB5H4nA/ GgDj9LtNT/aG8eTXN601r4A0mUrHErbTOw6D/eI5J7A4FfT+jaVY6JpkGn6TaxWllAoWOKJcKo/z 3rG+GvhS28F+CtL0S0Uf6PEPNcD/AFkp5dj9TmumoAKKKKACuA+Lfww0b4i6M8V5EsGqxKfst8gw 8bdgT3XPb8q7+igD55+A3jfVbPWbv4d+OSya5p2VtJZDkzRj+HPfjkHuPpXuteD/ALVehy6PLoPx D0RPL1LS7lI7h143x5+Xd7Z+X6NXtHh/VIdb0LT9UtWDQXkCToR6MM0AaFFFFAHzteHH7ZVn/wBe Y/8ARJr6aHSvmW+/5PJs/wDrzX/0Sa+ml6Cn0F1CiiikMKKKKAPnPU/+Tw7P/sHD/wBBNe914zqP h3WG/ajttdXTrg6OtiIzd7f3YbaeM17NQwQV4H4MgOr/ALWfiO+kyRp1p5ag9vlVR/WvfK8C8KTH Rf2tdctJQUTVLPehJwGO0MPr0NAH0dRRRQAUUUUAFFFFAHg/7YlnG3w4sNSIHn2OoRmM+m4HP8hX qnhe6a98NaTdScPPZwyt9WQE/wA68o/bFvkXwFpWk5/fahqCBAP9kc/+hCvV/DNqbHw9plo2S1va xQnP+ygH9KfQRp0UUUhnzx8YtPvZ/wBozwLdQWlxJaxwwh5kjJRT5knBPQV9MCs4R72X5QcHritB RhRT6C6i0UUUhhRRRQAUUUUAFFFFAHl/7S//ACRnX/8AcT/0IVc+DH/JKfC//Xkv8zR8f9LvtZ+F WtWOlWst3eSqoSGIZZvmHSrHwpsbrTPhx4estQge3u4LVUlikGGRueDQB1dFFFABRRRQAVk+KdF0 rxDodxp3iCCOfTpcGRZG2jjoc9q1q534geFYPGnhW70O6up7SKcq3nQfeUqcj6ilLYcdy94Z0bTN A0S203QoUg06EHykRiw5OScnOeTWpWB4E8NQ+D/CtjodtdT3cVqCBNP95skn+tb9XLfe5Mdgoooq RhRRRQByHxhhlufhV4rht43lmk0+RURFLMx9AB1rJ/Zjtp7T4QaRDdQyQTK0u5JFKsP3jdQa9F6+ 9WbNNinjHtjFNbCZYooopDCiiigAooooAKKKKACvmb4Wf8nQePvpL/6EK+ma8B+HvhTXdN/aC8Za 3f6XcQaTeeZ5F04GyTJGMc96APbaKKKAPn/4oxpqn7S/w/sZifLtlWXGOD8xbH6V9I182fGWY6F8 ffh5rciqtrIwhklbgAb9pyfXBzX0nQAUUUUAFFFFABXnv7QVnFe/BzxQs6qwitGmXIzhlIIP5ivQ q8z/AGkdVi0n4N+IWlPN1ELVAO7OQKAKP7Ol/JqHwe8PSTMDJHG8PA7JIyj9AK9Jrzz4Baa2lfCX w5byZ3NAZzkYP7xi/wD7NXodNiQV4Qml34/a7fUTY3X9nmxVRc+U3lE+QoxuxjrxXu9PiQs6nBwO +KFuDLw6UUCikMKKKKACiiigAooooAK8D/bJ/wCSe6X/ANhJP/QWr3yvFv2qfD+r+I/BGnWuhafc X9wl+sjRwrkhQp5oA9M0X/kDWH/XvH/6CKuVV0lGj0qyjkUq6worKeoIA4q1QAUUUUAFFFFAGB41 8NaD4p0hbLxRbRT2SSCRRJIU2t6ggitXSrG00zTLWx06JYrK3jWOFFOQqAcAGuZ+KPgS1+IPh+LS ry+urFY5hMslvjJIGMEHqK3/AA5pUehaDp+lQzSzx2cKwLJKcu4UYyfeiOz9fv8AMHujRooooAKK KKACvLv2moJbn4La3FbxPLIZbYhEUsTiZc8CvUaCoYYIDD0IzQBzPwTRo/hT4XSRSrrYRAqwwR8o rt6htY/LjAAA9gMVNTe4lsFFFFIYUUUUAFFFFABRRRQB84/Dv/k6Px5/1xP81r32vGvBXhfW7D9o Xxjrd7plxDpN3GVgumA2SH5enP1r2WgArwL4sW41b9o34dWFxzBD+/Ue4bf/ADQV77Xz78bLhtB+ Ovw51xwfs7yfZ3Y9FBcKf0Yn8KAPpOiiigAooooAKKKKAOC+O9hHqPwi8UQyqGCWbTDPYp8wP5iu e/Zvvm1D4OaBIwI8pZLfn0Ryv9K1/wBonVk0j4O+I5X5M0AtlGepkYL/AFJ/Cs/9nvTf7L+EXh2H aVMsJuSD6yHd/WmI9GooopDPArzStQP7W9pqIsbo6eLQL9p8pvKz5RGN2Mda+jl6CqMaFnU4OB7V eHSm9hdQooopDCiiigCrdEbgMjPpmoK8K1K6uB+11a2wnlFu2ngmLedpO0846V7rQAV8+/tJafee Htf8NfELSUZpdMmWK5A6bM5Un65I/KvoKs7xBpNnrmj3Wm6lCs9pcxmORD3B/r3poTL/AIY1uz8R 6BY6vpkqy2l3EJEKnOM9QfcHIP0rTr5R8L+INX/Z/wDFcmheIEnvPA97KXtrpVz5JPce/wDeXv1F fUGiavp+uabDqGkXkN5ZzDKSxNuB/wAD7Uhl6iiigAopHZUUs5CqBkknAAr54+M/xfn1O7fwP8NN 1/rN3+5nvbc5WEHhlU+uM5boPrQBieI71fiz+0LZWNmfP8O+Gvmlcco7qct+bfKD6Cvo+MELz1rz z4M/D6DwH4ZW0JE2oznzby4/vv6D2FejDpTemglrqFFFFIZ4N8V/Ems6d+0D4K0mx1K4g025iiaa 3RsI5MkgJI+gH5V9FV8u/Gj/AJOY8A/9cIf/AEbJX1EKfQXUKKKKQwooooAKKKKACiiigBspxGST j8aodfeuD/aRlkg+DuvSQyPHIqJhkOCPmHerfwdlkn+F3hqSZ2kkezUs7HJJyeSaAOxorldX+Ing /R9WXTNT8Rafb35IXyWckg5xgkAhT9SK0vEHifQ/Dunpfa5qtpZWkmCkkj/f/wB0DJb8KL6XC2tj YorK8N+ItH8T2H23w/qNvqFru2l4T0PoQeR+IrJ1T4i+D9K1kaTqPiKwg1EsF8lnJIJ6AkDA/E0W 1sHS51dcX8XvGcvgPwZJrVtaJdzC4igWN22r8xwSa7NWDqGUhlYZBByCK8g/ar/5JO//AF/2/wD6 FQB6zY3H2uxtrkLtE0SybfTcAcfrU9UdB/5AOmf9esX/AKAKvUAFFFFABRRRQBynxXvrnTfhn4nv bCZ4Lu3sJJIpUOGRh0IrP/Zy1S+1n4S6TfardS3d5I0u+WU5ZsSECrHxp/5JH4v/AOwbL/Ksj9ln /kjOi/70v/oxqYj1uiiikMKKKKACiiigAooooAKpXDKZSAykjsDzV2vmf4Wsx/af8egsxGJeCePv CgD6HooooA8m/aT8Iy+J/h9JcWSFtQ0p/tkIHVgPvD8q6r4H+OYPHngGxvvMB1GBRb3qZ5WVRjdj 0br+NdbIodCpAIIwQe9fNPi3Qda+Cvjabxp4Ohe68N3bf8TGwBJEYJyePTOSD/D06U9xH1TRXJ/D 34gaB490pLzQrxGk25ltXIEsJ9GX+o4rrKQwoooJABJOAO9ABXzJ8fdVb4h/EnQvh3osnmW9rOJ9 RkQ5CEdQf91c/ia6j4x/Gy30pn8NeBf+Jt4nuT5Ia3+dLcnvkfebntwO9TfA34bP4PsJ9Q1lxc+I 9QO+6mJ3FATnYD356n1ppCbPU9Oto7Szht4VCRRIERR2AGAKs0gGBS0mNBXh0Ws6mf2tm0k31x/Z i2KuLXefLBMKnO3p15r3Gvn2P/k82T/sHp/6IWmhM+k6KB0opDCiiigAooooAKKKKACo7ggRnJA+ pxUleEftf3VxaeAdLktJ5YJP7RQbo2KnG1u4oA9moqnoxJ0ewJOSYEyf+Aiql94l0Wx12z0W71K2 i1a8/wBRaFsyP+A6fjijyDzNeimTzR28Ek07rHFGpd3Y4CqBkk1h6R4y8O6zot5q+l6tb3OmWeft FwgbbHgZOcjPSi4G/RXn/wDwub4d/wDQ12P/AHxL/wDE13drcRXdtFcWziSCVA8bjoynoaLdQucT 8T/HU3gy88MwQ2Ud0NWv1tJC7lfLU9SPU13deI/tJf8AIX+Hf/YZT+Yr240AFFFFABRRRQAV5x+0 Rq1/ofwj1jUNIupbS9jktwk0RwygyqD+YNej15V+1F/yRHXP+utt/wCjloA7f4QXlxqHwx8NXd9M 891NYxvJK5yzsRyTXX1w/wAEP+STeFf+wfF/6DXcU2JBRRRSGFFFFABRRRQAUUUUAU7hlMuAyk9x nmoq8D+HjMf2ovHgLMQIjxnj+GvfKACvJ/2k/CMvij4dzy2MZfUdMf7ZAF+8QPvAY74zj3FesU2R Q6kEZB7GhAzjvgT46i8eeALK7eRf7TtVFvex9xIoxux6MOR9a9Er5Y8YaDrXwY8by+NfBlu1z4eu j/xMbBc4QE5PHZc8g9vpXvPw6+IXh/x9pSXehXiGYLma0kIEsJ7gr6e44oasCZ11FFFABRQSACSc Ad68O+MXxrt9IZvDngUjVvFNwfJX7ON6W5PuOre3Qd6AOU/aG1WT4gfELQvhzokhkignE+ovGeEO Oh/3VJP1Ir6B0y1jsrGC2gULFCixoB2AGBXlXwM+Gr+FLObVtcP2jxNqOXupmO4xgnOwH68k+v0r 14DAxVPRWEtRaKKKkZ4Rc61qY/a0s9KF/cjTfsgb7KJD5efKJzt6da+iK+Zb04/bKs/+vMf+iTX0 0OlMQUUUUhhRRRQB856n/wAnh2f/AGDh/wCgmve68E1P/k8Oz/7Bw/8AQTXvdNggooopAZHiTQNP 8Q6ZNYataRXVpKMNHIM/iPQ+9eEXfwi8W+CNTl1H4WeIJIIWO46fcv8AKf8AZyflYfXBr6OprIG6 infuK3Y+e1+L3xX0GMwa74CF/LGMtcQK6o34qCKSH9oDxprkYfwv8PpriBzsWYl3G4HB6DH611n7 R/i9PB3w/njtZNmqanm2t8HlVI+d/wAB+teR/sieMVt9Yu/Cd/LiG8zPZ7j0lA+ZR9Rz+Bp6BqdN d+Hvi58SHMXizVYtA0Zj81takBnX02qck/7xr1T4cfDfQ/A9l5WkW3+kOMS3cvMsn49h7Cu4WFV7 VIBjpRdLYVm9xEUKuBTqKKkoKKKKAPm740f8nMeAf+veH/0bJX1EK+dvix4Y1rUvj54L1ix02efT LWKJJrhACsZEkhIP4EfnX0SOlPoLqFFFFIYUUUUAFFFFABRRRQB5f+0v/wAkZ1//AHE/9CFXPgx/ ySnwv/15r/M1T/aX/wCSM6//ALif+hCrnwX/AOSVeF/+vJf5mgDF+LWn+G9I8FapbRaJYTaprLNF a26Qgy3Fy5+8D146k9q3fDfhTTtN8JaDH4ktrS7vNIshE1zdKHEXGWwTxjjr7Vwkvhn4qW/jbUtf tU8IX0kjlLOS/llLW0PZUVQAuR1PU+tXvHvh34leJtF0O3B8N74y0mp2jTSrb3DA/IvA3FMdRkc0 L4fN2+W/+f6Dfxel/n/Viv8ADi28q9+IXjDR7X7Ho18h/s+KNdiy+UhzMF7At0qr8NfC+jap8AZp 9Q0+3uLrUre4ubi4kjDStISfm3dQRiu38FweOmeez8bWvhiLSDbmKOPSTJuHGNpDcbcVxVv4A+Im j6ReeE9A1nRV8K3DuI7qdX+128TnLIqj5TSmrpxXVJL5d/zCMtVJ9Hd/8A674CXtxqHwi8OT3hZp RAY8t1KqxUfoBXPftV/8knf/AK/7f/0KvSvCuh2/hrw3p+jWG5oLKERKW6sR1J+pr5q+P/xh0XxJ 4Zu/DMGn6na6nb3yGQXMaqF8tjuHDE1pUkpTbRnTTUUmfTug/wDIB0z/AK9Yv/QBV6vKPhN8XtG8 a3droWkafqa3FvaK0s0saiNAoA5IJ6npXq9QWFFFFABRRRQBxnxp/wCSR+L/APsGy/yrI/ZZ/wCS M6L/AL0v/oxq6D4rWF1qnw08TWGnwtPeXFjJHFEnV2PQCs39nPSb/RPhVpdhq1rJaXkTS74pBhly 7EU0JnptFFFIYUUUUAFFFFABRRRQAV8zfCz/AJOg8ffSX/0IV9M18zfCz/k6Dx99Jf8A0IUAfRFF FFABUN1bx3ETxyoro4KsrDIYehFTUUAeD+MvgTbtqja14F1Kbw9qobeFiJEJbOe3K/TkVQtNf+On hZ/Iu7Cz8Q20Ywsnyl398gg/mK+hioPWuP8Air4nt/BXgfUtZl2+eieXbof45W4Ufnz9BVXT3Js1 seRad8cfiVrtzd2Oj+B4Ptlo3l3Gd58l/Rs4APtTbrw38YPH/wC68Va5DoemNw9vaEAuv0Q9fqa8 i+Anj2Tw78S0n1SdmstXfybxmP8AEx4c/Rj+tfdKwovTB9xQrA7nnvw2+FmgeB4t+mwGa/cYkvZ+ ZG9cf3R9K9DjQIMCngY6UUm7jSsFFFFIYV8+J/yebJ/2D0/9ELX0HXjSeEde/wCGn38Uf2dJ/YLW axC83Lt3CFVxjOeoI6U1uJ7Huw6UUDpRSGFFFFABRRRQAUUUUAFeB/tk/wDJPdL/AOwkn/oLV75X gf7ZP/JPdL/7CSf+gtQgZ6/ovGjaf/17x/8AoIrx/wAW+GtM0D4t/D+XT4X+03l7PLcXEzl5ZWK9 2PYdh0FewaL/AMgfT89Ps8f/AKCK8f8AF/hn4q6z4x0rWLdPCCx6PPJJZK8soLq3A8wY649MUlpO LBq8Gjp/iTdtr+s2PgezuFhW7AuNVm3hfKtQfuZ9XPH0zWN+z9BZwxeN7K3SAWya3KiQjBXYBgDH cVu6p8LfDni57bVPHWi21zr7QolzJbXMqR5HZQGHHPes34PfCm08CarrWoS2tutzPcutk8M7v5dq eiMDxn8z71UNLp9n+at+X5sU9Umu6/J3/r0RV+LthYarqOg+CNL0+yiutXmE13JDborRWkZy5yBw ScCvWbeGO2t4oIFCxRKERR2AGBXF+FPCmoW3jzxF4o197aS6vNttYpExbyLZexJAwSeTXZXs5trO e4EUkxijaTy4xlnwM4HvQtIpd9f69F+Nxv4vTT+vn+Fjx79pED7R8Pjjn+3ov5V7Oa+SPi98afD/ AIsuPDAsbLUoW0nVFu51njVSVXggYbr9a94+GPxS0n4jXF7HolhqMMdmqtJLcIqpk9FBBPPFIDv6 KKKACiiigAryr9qL/kiOuf8AXW2/9HLXqtec/tC6PqGv/CXV9O0e0ku76WSApDH95gsqk/kBQBv/ AAQ/5JP4V/7B8X/oIruK474QWVzp3w08OWd9C8F1BZRpLE/VGA5Brsab3EtgooopDCiiigAooooA KKKKAPnH4d/8nR+PP+uJ/mte+14F8O/+To/Hn/XE/wA1r32gAooooAhuYEnjZJFV0YYZWGQR6EV4 f4z+BVrJqb6z4H1Cbw9q+SwELERE/hyv6j2r3akIB6immJo+erTX/jn4WPkXen2fiG2jGFkG0u/v kEH8xVbTfjl8Sddubyw0jwPAb2zPl3HLnyn9GBxg+1eu/FbxPb+CfA+o6zIV+0Inl2yH+OVuF/Lr 9BXyB8CfHknhr4lxXWpzsbLVH8m9Zj/ePDn6NzT0DU9huvDvxh8fgQ+Kdbg0PTG4eC1IBdfoh/ma 9I+Gvwr0HwPGH0+Az6gwxJez8yN64/uj6V6IkKLyMH3FSAAdKLpbCs3uMjQIMCn0UVJQUUUUAfO1 9/yeTZ/9ea/+iTX00vQV4JdeDtff9p218Tppsh0FbYRm73LtDeURjGc9eOle9L0FPoLqLRRRSGFF FFAHi+oeCtcf9o238WC2j/sRLMQmbzBu3bSPu9a6fxjD46vL6O38IXWjadZhAz3V7GZnd/7oQcAe 9dddX9n9vFn9rt/tmM+R5g8zHrt61wHxK8fW+hXcPh7Tr2xt9fvoyyzXsyxQ2kf/AD1cseT6KOTS kNHM2/xF8Ry/CzxPfXC2dv4j0S7+wvOiB4JG3KC4U8dzx2rpvBVt48fU4LjXfFXh7U9L2Zlt7K0C ycjj5h0qhpdr8PdM+Hk+j3us6ZqekSyD+0LgXQYTTuc7pGQ/LkjjkdK4mTTPCehfEvwcnwouovtV xcsNRt9Pu2nhNuBy0nzED86tfHbvZfhrp+PoS/hv6v5dNfwO78Y+K/EF54vl8LeC5NOsp7SFbi+1 TUfmih3H5UVe7Gut8GJ4gTSCviq806+vA52XNghSOROxx2P0rxfVtD8Iz/HPxXb/ABFeNLW7ghub L7XctBC4AweQwBI7c11H7O+1LXxTDpU083hiHUmj0p5WLDYByEJ6rnpU09Y/K/42+Q56S+aX4X+Z mftF/DGDxLpWreK7zWrxG0nTpJLeyWNfKG0EnnryeteW/s4fCm28XaYfE51q+06+07URHEtvGrA7 VRs5PruIr6V+MH/JKPGH/YKn/wDQDXmf7Gn/ACTXV/8AsKt/6KjoA965wMnJ7n1ooooAKKKKACii igABG9VLAZPQnGa0VGAK+ZvjFe3UP7SHgS3iuZ0t3hhLRLIQrHzZOSOhr6Zp9BBRRRSGFFFFABRR RQAUUUUAcJ8b/D+oeJ/hrq+k6NEs19cKojRmCg4YHqal+GmlXeh+AdC0vUkWO8tbZY5VVtwDDPfv XXahdW9naPPeTxW8K/eklcKo+pNU4ZY54llgkSSJhlXQ5BHsaAH0UUUAFFFc7448aaF4J0r7f4hv Vt0biOIfNJKfRV6n69KAOir5H/a88DnT9dtvFdjERbah+6uto4WYDg/8CH612EfxW+Ivj+4ZPhp4 W+zaduwL+9GQR0zkkKOc8DdTdR+Efxb8WWElt4s8Z2JtnYP5G3eNwOQeEAGPagDqP2YfA/8Awing JNRvItmp6xid8jlIv4F/Ilvxr2Kvn5/B/wAdvDm6XSvE1hrEEQ+S2cgFwB0wygD/AL6qTRPjtqWg 6jHpPxV8OXOjXJO0XkUZ8tj3OPT3UmgD32iqul6jZ6tYQ32mXUN3ZzDdHNCwZWH1q1QAUUUUAGcc 5x71ZswNm4MGz3BzXDfGKWSD4U+LJYJHjlTTpSroxBU+oIrL/Zinlufg3o0txLJLKzTZeRizH943 c0xHqtFFFIYUUUUAFFFFABRRRQAV4v4L+Hus6H8afFPim9Nt/ZupeYIAkmX5IIyO1e0VgR69pN7r FzplnqVrPqFtnzrZJAZI8dcr1FAFPxWddbTVi8MC0W9lfY1xdH5bdMcuF/iPoK4f4K6zrl/4B1u5 1K9m1fVLS9uoonmPMhTO1R6AkdPeu38X+KdG8IaV/aHiK8+x2bN5Qk8tnyxHAwoJrxL4J+O9OPhP xLpOgXYuPE0tzeXtjamJ/wB4OSrZxj04zmpv8Vuz/T9BveHr+jM5fEPiyXwhB4sg8dXcniOS7EB8 OCEeWGL48ry+vA5z0r2nxjpWuazaaelt4o/4Rm22Zu3gVfOaTAICOxwoHOfWvn6TW/CMvhVbuzl1 b/hbobzS6wSi6N1nlTxs2Y/h9K9e+IWseFP+Ed0Oy+LVhN5c0KXMknkytDHOFwQWj5ByTxWklZfP 5bdO/wDwxKfvfJ+u/Xt/w5J8GtU1u41LxPpOqatJrunaZcLHaarImGmyMlSejY9RW78R/h5pPxBt 7S312e8W3tSzpFBJtUsR1Pqf8a4r4GyxP4o19PCX28+ARDGbI3Yfb538Xlb+dlez9j9DQ9l6At36 nxJ+zz8N9E8e654htdba6WOwjR4TBJtOS5HP5V9o6XZjT9NtbNZZJlt41iWSU5ZgBgZPc4r5i/Y1 /wCRo8Z/9cYv/RjV9T1IwooooAKKKKACkhlga7WEzRecOfL3jd+XWlr59hA/4bOk/wCwev8A6IWm hM+k6KKKQwooooAKKKKACiiigAryT9pPwbrXjXwfYWHh63jnuYr1ZnV5AgChTzk/WvW6p6pfWljA HvbqC2RjtVppAgJ9BnvQBR0yJ4NNtIZBiSOFEYehAwas0isGUMpBUjII6GloAKKKKACgHBBHWuN+ IvxH8O+AbIS65dZunBMVpD80sn4dh7nArym38d/Fz4hMX8EeHYdE0lxhLy7HzH/aDNjP4KaAPKv2 nPAjeGfiAb3T4CNO1kmaIKvCy5+dB+PP419P/A/wUvgX4fWGnyxhdRuB9pvD38xh93/gIwv4V5le /Br4qeIhay+JfGti81rMtxbrsMnluOjD5Bg1Zl0D4+eGN89nrVh4ghXpbsVJYeuGVefbdQB9BUV4 X4U+PccWrLonxH0efw7qeQvnMpERPqQeVHvyPevcLeaK5gjnt5ElhkAZJEbcrD1BHWgCSiiigAoJ wMkge5OKK8v/AGmbie0+C+tzWs0kEyy2wDxsVYZmXPIoA9ctgPLBBBB7g5qWuL+C8jy/CnwtJK7S SNYRFmY5JOO5rtKbEgooopDCiiigAooooAKKKKAPHvCvgHV9H+NfijxVdtb/ANm6khWEK+X7dR26 V3niR9YXSpB4citZNSchUN02I4wTy5xycDnHerA1zSrvWLjTLXULWXUbcfvrZJAZI/qvUVW8T+It L8LaRJquvXX2SwiZVeXYz4JOBwoJ60n5gvI4L4F6nrV+3jG28RatNqlxYas1skrjACheir/CM9qz Na1bxlafFzwfDquoR2emajNcINMtGyvlovymRv4mPBx2rG+Anjvw3P4q8W6fFqQa71jWXuLGPyXH nR7eucYH0OKqfEb4neEJfix4Muo9XBt9HmuUvn8iT9ySMAfd55HbNXf3oN9l+Wv4j3516/rY774l 6zrV14w0DwZ4b1D+yp9SSS5ur9FDSRQpxhAejE96o+Er7X/CvxQXwdruuXGvWGoWbXlldXSgTIy/ eQkdRWd4+1mz0rx94N+IoE1x4Zls3tpruKJj5Sv8yyMuMgc+lSeG9TtviD8abXxLoMc8ugaPp726 30kTRpNK/ZAwBOKVNWaT/vX/ABt6dCaj0dvK33q/6/I7X4i/DrSfiHHY2+uz3q29s5ZIoJNisx4y fU+n1NfKnwH+G+ieN/GPiPTNZa6W30+MvCYZNrZEu3k/Svt6L/WJ9RXyr+yV/wAlK8bf9cW/9H0h n07pFiumaXaWKTSzJbRLEskpy7BRgZPc4q3RRQAUUUUAFFFFADYpoDdrCZ4vO6iPeN35da0x0r5m usf8NmWf/XmP/RJr6ZpiCiiikMKKKKAPnPUif+GwrQZOP7OH/oJr1zXPBfhjX737ZrmgabqF1tCe dcQB22joMntXkep/8nh2f/YOH/oJr3uhgjA07wX4Y02zu7TT/D+mW1rdgC4hjt1CygdNw79TVjQP DGheHRINB0ew07zPv/ZoQm764rXoouBk6/4b0TxFHEmv6TY6kkRyguYg+0+2a0LO1t7G1jtrKCK3 t4xtSKJQqqPQAVNRQByPxg/5JR4w/wCwVP8A+gGvM/2NP+Sa6v8A9hVv/RUdeveO9In8QeCde0e0 eNLm/spbeNpCQoZlwM47Vw/7OHgnWPAvgS6sfEMcUN7dXrXPko4cxrtVQGI4ydueCeCKAPVKKKKA CiiigAooooA+bvjR/wAnMeAf+uEP/o2SvqIV8u/Gj/k5jwD/ANe8P/o2SvqIU+guoUUUUhhRRRQA UUUUAFFFFAHl/wC0t/yRnX/9xP8A0IVc+DH/ACSrwvn/AJ81/map/tL/APJGdf8A9xP/AEIVc+DH /JKfC/8A15L/ADNAHZ0UUCgDkPij460/4f8AhabVr/Esx/d2tsDgzSdh9B1Jryr4W/Cy/wDH+or4 6+KjPdtc4ez01+ECdiy9l9F/E1TlgX4wftEPaXCmbw14XBDp/C8gbBBH+04P4JX1AqhVCqAFAwAO gFADLa3htYEgtokhhQYVEUKqj2AqSiigArJ8TeHNJ8T6VLp2u2MN5ayDBWRclfcHqD7itaigD5Q1 G01z9nbxbFc2slxqPgDUJdrxscmEnt7MOx7gV9KaXf2uq6bbX+nzLNaXMYlikU5DKRkU/wAXeHrH xV4cv9G1SISWt3GUORyp7MPcHBrwj9mfVr3RdT8RfDzW3b7VpE7vbbu6bsMB7dGH+9QB79RRRQBx nxp/5JH4v/7Bsv8AKsj9ln/kjOi/70v/AKMatf40/wDJI/F//YNl/lWR+yz/AMkZ0X/el/8ARjU0 JnrdFFFIYUUUUAFFFFABRRRQAV8zfCwD/hqHx8cdpf8A0IV9M18zfCz/AJOg8ffSX/0IUAfQ0kaS LtkjR19HUMP1pscEMbbo4IUb1SMKfzAqSigBghiEnmCGISf3wg3fnjNK6JIu2REdfR1DD9adRQAi qqKFRVVR0CjAH4UvY/Q0UUAfLH7Gv/I0eM/+uMX/AKMavqevGvgX8LdU+HfinxXPe3MFxp935cdp KvDyKCW3Mv8ADjOCPUccc17LQAUUUUAFFFFABXz5H/yebJ/2D0/9ELX0HXz4n/J5sn/YPT/0QtNb iex9KDpRQOlFIYUUUUAFFFFABRRRQAV4H+2QSPh7pRBIP9pJ0/3Wr3yvA/2yf+Se6X/2Ek/9BagD 1/Rf+QNYf9e8f/oIq5VPRf8AkDWH/XvH/wCgirlABXnXxr+I8Xw/8Pp9kRbjXr7MdjbYzz03keg/ U16IzKilnIVQMknsK+dfhVZj4r/GnWvGeqIZNJ0aQQWEL/dDD7nHsPm+poA3fhD8F3muV8X/ABML ap4guiJ0trj5lt+43DoW6cdBXvyKqKFRQqjgADAFLRQAUUUUAc3458E6F430mSw8QWMc6kHy5QMS RH+8rdQa+e9D1LWvgF4yt/DniO4kv/BWoufsl2w5gOevtjI3L+Ir6orj/iz4MtvHfgfUdHnRftDI ZLWQ9Y5l5U57A9D7E0AbsbpJGskbB0cBlYHIIPQ06vGf2YPFNzq3g650HVS39paFL9mO/wC8Y/4f fg8V7NQAV5V+1F/yRHXP+utt/wCjlr1WvKv2ov8AkiOuf9dbb/0ctAHXfBD/AJJN4V/7B8X/AKCK 7iuH+CH/ACSfwr/2D4v/AEEV3FN7iQUUUUhhRRRQAUUUUAFFFFAHzh8OwP8AhqTx5/1xP/ste+Oi SLtkRXX0ZQR+RrwT4d/8nR+PP+uJ/mte+0ARJbwIwZLeBGHQrGoI/ECg2tsSSba3JPUmJf8ACpaK AGlEKbCiGPpsKjb+XSlRFRdsaKi+iqAPyFLRQA6L/WJ9RXyr+yV/yUrxt/1xb/0fX1Sh2upPY5rw 74C/DLX/AAR408V6jrf2YWt3mK2aKTcZQZN+8DsMcc4Oe1AHuFFFFABRRRQAUUUUAfO17/yeVZ/9 ea/+iTX00OlfMt9/yeTZ/wDXmv8A6JNfTS9BT6C6hRRRSGFFFFAHznqf/J4dn/2Dh/6Ca97rzq/+ Hd+/xzg8cC9tBYJa+QbbDeaTgjPTGPxr0WhgFFFFABRRRQAjEKpLEAAZJPaqWl6vpurLK2l39reC JtrmCQPtPocVbniSeCWGUZjkUow9QRg1yHw6+HGhfD5b8aALofbWDSefJvxjOAOPehbu4PbQ7Kii igAooooAKKKKAPG/iT8P9d174z+FPE2npbtpenRRxzl5drgh3Y4XHPDCvdF5GawrnVtMtNQt7O8v 7WC7nI8qGSQK756YHfoa3gMDFPoLqFFFFIYUUUUAFFFFABRRRQB5f+0v/wAkZ1//AHE/9CFXPgx/ ySnwv/15L/M1qfFvwvc+MvAWp6HY3ENvcXSqFkmB2jBB5xzS+AtEm8N+DdI0a6limnsoBE8kWdrE dxnmgDeqtqlx9k0y8uAMmKF3/IGrNUNfgN1oWo24G4y28iY9cqaAPHf2OLKRvCWv61dYe51DUWzJ /EwUDOf+BFq+gq8C/Y0vln+HOo2e3bJaai6n3DKrA/zH4V77QAUUUUAFFFFABXzZ4vCeHv2uNCuY Bt/tm1VJueOQUz/44K+k6+bfiUDqn7V3g63tzvNjbI8wBHyDLt/7MPzoQH0AOlLSL05paAOc+I+k XXiDwD4g0jTghvL2zeCIO21dx6ZPaqPwJ8N6h4S+HOnaNrCxLe27SbxG+5eXJGD9DXW3M8NrbyT3 MqQwRrueRzhVHqTUuiXlpqFkt1p9zDdW7khZYWDKcHBwRTQmaFFFFIYUUUUAFFFFABRRRQAV8zfC z/k6Dx99Jf8A0IV9M15X4Y+GjeH/AIp+IPFzaiJhqm/FsI8eWGOevegD0OiiigAooooAKKKKAKEO s6ZPqcmnQ6hayX8Yy9usoMij3XrV+uJ0r4Z+H9L8f3fjC0W5GrXO4uDLmMFvvELXbULZdwe7tsFF FFABRRRQAV5SngHWR+0S3jXNp/YrWqwgeb+93CIL93HqPWvVqzIfEei/8JONBOpW39tBPM+x7/3g XGc4+hzTW4mdIOlFFFIYUUUUAFFFFABRRRQAV4H+2T/yT3S/+wkn/oLV75Xmnx58AX/xD8L2em6b eWtpLBdLcM9wGKkAEYG0HnmgDrtF/wCQNYf9e8f/AKCKuVBYQtbWFtA5DNFEqEjoSBip6AOV+Kl8 2m/DfxJdRuUdLGUKw6glSAR+dc3+yppQ034P6dMQPNvZZLl2xyctgZ/AVu/GO2a7+F3iaFM7vsUj 8f7Iz/Ss39mPUV1H4M6GVPNuHt2GOhViKAPVKKKKACiiigAooooA+bPBaL4e/ar8V6ZEGEeqW7XG McA4En+NfQVfPujONV/a81u7tnRorCzaCXH97ywmPrmvoIdKBBXC/G7wxqPjH4aanoejLE19cSQs glfYuFkDHn6Cu6qvf3lrp9q9zf3EVtbJjdLKwVVzwMk0DM/4XaVdaF4A0LStQCLeWdokMoRtwDAY OD3rqaq6ZPb3dlFcWc0c9vKoZJIzlWHqDVqm9xIKKKKQwooooAKKKKACiiigD5x+Hf8AydH48/64 n+a177Xnvh74dXGifFnxD4vkv4pYtUUqtuqEMnTqfwr0KgAooooAKKKKACqEesaZJqj6bHqFq2oo MtbCUeYB/u9av1xVp8M/D9p8Q5/GcK3I1ibcWBl/d5YYJ249KFvrsD28ztaKKKACiiigAooooA8k ufh9rcv7Q1t40U2n9jJbiI5l/e58sr93HqfWvbF6CuZTxJoi+Jo9BfU7Yayy71sy/wC8IxnOPpzX TU+guoUUUUhhRRRQBzN54t0JfFieGm1GMa60fmi02tuK4znOMfrWrXgmp/8AJ4dp/wBg4f8AoJr3 ugAooooAKKKKAI7lZGtplgYJMUIRj0DY4NcD8JNL8d6ZHqg+IGp29+ZJAbTymBKjnOcAYB44rvrl pEtpnhTzJVQlE/vHHArgvhL4o8WeJI9UPjDw6dGNvIFgyrL5g5yOeuOOfeiO79AlsvU9BooooAKK KKACiiigD5v+M/8Aycz4B/64Q/8Ao2SvqGvl340f8nMeAf8ArhD/AOjZK+ohT6C6hRRRSGFFFFAB RRRQAUUUUAZniTW9O8O6NcanrV0tpYwgeZMwJC5OBwATVbSNSs9Y0y21HTJ1uLK5TzIpVBAdfXnm uL/aX/5Izr/+4n/oQq58GP8AklPhf/ryX+ZoA7OkPIIPSlooA+c/htdD4a/tC694bvS0Wl6+fOs2 Y4XeSWXA/Flz/sivp2vGfjz8On8a6HDeaS3k+INNPm2kinBfvsz9eR7/AFo+Bnxch8T2yeHfFDfY fFtkPJlim+T7QV43DP8AF6imxI9mooopDCiimyyJFG0krqkajLMxwAPUmgCK/vINPsbi8vJVitoI 2kkkY4CqBkk180fAnzvHPxV8VfEG5iZbZnNtZ7uCAcAD8EC/jmm/F/x/e/E/Xl+Hvw+Yy2LuBqOo L9xlB5AP9wdz3PAr2vwF4YsvCXhqy0fTU2wW6YLd3Y8sx9yaa7ifY6McCloopDOM+NP/ACSPxf8A 9g2X+VZX7LR/4stog/2pv/RjVq/Gn/kkfi//ALBsv8qyP2Wf+SM6L/vS/wDoxqYj1uiiikMKKKKA CiiigAooooAK4zTvHOhaz4u1Hw5YXLvq2n7hcRFCAuOuD3rs6+ZvhZ/ydB4++kv/AKEKAPoiiiig AooooAKKKKAPOdD8Aavp3xT1DxRP4muLnTLkPs01t21Nw4HXGB24r0avOtDX4iD4o351ZrM+DMP9 n2ld3T5PfPrXotC+GPoD+JhRRRQAUUUUAFfP0P8AyedJ/wBg9f8A0QtfQNfPif8AJ5sn/YPT/wBE LTW4mfSlFA6UUhhRRRQAUUUUAFFFFABWB4y8VaJ4S02O88R6hHYW0snlJI6swLEZx8oPoa368C/b J/5J7pf/AGEk/wDQWoA9phkSaFJYm3RuoZW9Qehp9U9F/wCQNYf9e8f/AKCKuUAQX9tHeWU9rOu6 GaNo3HqpGD/OvA/2a9Uk8HeNvEnw51h9kiztcWRbgP6hR6FcNX0HXiXx+8B399LZ+MvCRaPxHpBE mIx80yLz+JHp3HFNaiPfqK8y+C/xZ0z4h6UsMzR2fiCAYubJjgkjqyA9R/KvTaQwooooAKyPF2v2 nhfw1qOs6g4W3s4WkOTjcQOFHuTgfjWhf3ttp9nLd308dvbRKXklkYKqgdyTXyv448Sah8efGcHh nwx5sPg6wlEl5eEECUj+L+YUfjRuB0P7L+mXV+viHxrqaYutaum8skYJQNkn8z+le+1m+H9KttG0 q10+wiEVrbRiKJB2UCtKmxIK8q/ai/5Ijrn/AF1tv/Ry16rXlX7UX/JEdc/6623/AKOWkM6/4Jf8 kl8Kf9g+L/0Gu3rh/gh/ySfwr/2D4v8A0EV3FNiQUUUUhhRRRQAUUUUAFFFFAHH2fjXRNV8X6h4c srln1awGbiIoQFHHfoeorfrwL4d/8nR+PP8Arif5rXvtABRRRQAUUUUAFedWHgHV7b4sXPit/E1x LpcobGmHdtXK4x1xgdelei151YL8Qx8V7k3jWh8E4bysFd+Nvy++c0R+JfMH8LPRaKKKACiiigAo oooA+d7rj9suz/68x/6JNfTNfMt7/wAnlWf/AF5r/wCiTX00vQU+ggooopDCiiigD5z1P/k8Oz/7 Bw/9BNe914Jqf/J4dn/2Dh/6Ca97psEFFFFIAooooAKKxfGfiC18K+FtS1u/OIbSEvju7fwqPcmv Pv2c/iPN498NXserSK2tWM7GUDjdE5JQgeg5X/gNAHrdFFFABRRRQAUUUUAfN3xo/wCTmPAP/XvD /wCjZK+ohXjfj34aX3iT4reG/Flvf20NtpkccbwOpLvtd2JB6fxCvY1ORmn0F1FooopDCiiigAoo ooAKKKKAPL/2l/8AkjOv/wC4n/oQq58GP+SU+F/+vJf5mqf7S/8AyRnX/wDcT/0IVc+DH/JKfC// AF5L/M0AdnRRRQAjLuFeUfFb4QaX4zlXUrWV9L16L5o72AYLEdN4HXHqOa9YoIzTTsJo+cLDxr8W /hqq2niPRf8AhKNKiwq3UJLSbf8AeUE/99L+NbsH7U3hiP5NT0PXLW4H34wiNtPpywNe2PArZ96+ cv2yrOG38K+HZI4o1ka9kBZUAJHljqabt0DU2rv9p6wvI3Twt4U1jUrsdEcBQPrs3GufvNN+K3xc k2eIph4Z8OOebWMbWdfdc7mP+8QPavbfh/psEfgnw68cMSFtOtmJVACSYl7106Qqpz1NGiFqcl8P fAmj+CtKWy0a2EecGWZuZJSO7H+ldiBgYFKBiik3caVgooopDOM+NP8AySPxf/2DZf5Vkfss/wDJ GdF/3pf/AEY1db470SXxL4L1rRLeZIJb+1e3WRwSqk9ziqnwa8K3HgrwJY6FeXEVzNbM5MsQIU7m J7/WmhM7miiikMKKKKACiiigAooooAK+ZvhZ/wAnQePvpL/6EK+ma+ZvhZ/ydB4++kv/AKEKAPoi iiigAooooAKKKr6heQadYXN7eSCK2t42lkc9FVRkmgCxRXgPwG+L0vjDx34h0vU5NqXkhudNVj9x F48v8sH65r36gAooooAKKKKACvnxP+TzZP8AsHp/6IWvoOvPV+HJ/wCF0jx2NRGGtxAbTy+eIwmd 34ZprcT2PUx0ooHSikMKKKKACiiigAooooAK8D/bJ/5J7pf/AGEk/wDQWr3yvA/2yf8Aknul/wDY ST/0FqEDPX9F/wCQNYf9e8f/AKCKuVT0X/kDWH/XvH/6CKuUAFNdQwxTqKAPFfib8FrbW9T/ALe8 LXbaH4iRt4mhyqSN6nHKn3H4g1z1l8U/if4CK2Xjbwu+uWyfKt7ag7mA7kqCD+IWvoogHrUMlsrg gjg9qq6e5Oq2PFYv2p/CQBW70jXIZRwUEcbYP4uKqXn7TH9pJ5fgzwdqupXBO3Mowqn3CBv5iuM/ bEtIbbX/AAh5UUaF4Zt21AM/vF64r6ftdNgt40EMUUQ2j/VoF7e1FkO7Pnh/BvxH+K90k/xD1D+x 9EDbl0224Lf8BBI/FiT7V7p4N8KaX4V0iLTtGtEtrZOTgfM5/vMe5reSFV7VLRdLYVr7gOKKKKko K8q/ai/5Ijrn/XW2/wDRy16rXH/FzwlceOPAGoeH7S5itZrl4nEsoJUbHDHgfSgCz8EP+ST+Ff8A sHxf+giu4rm/h1o0vh3wVo+j3EqTTWVskDSICFYgYyM10lN7iWwUUUUhhRRRQAUUUUAFFFFAHzj8 O/8Ak6Px5/1xP81r32vAvh3/AMnR+PP+uJ/mte+0AFFFFABRRRQAUVDfXUFhZXF3eSCK2t42llc9 FVRkn8hXg3wM+MEni/4heINL1N9sV7IZ9MRj9xV/5Zj/AIDz+FAHv9FFFABRRRQAUUUUAfO19/ye TZ/9ea/+iTX00vQV5TP8NjL8Z7fx0NRUBIfKNp5ZycIVzu/HNerL0FPoLqFFFFIYUUUUAeb33w5j f4uw+Ov7TcSJb/Z/sXkjB4xnfn39Km8a+P7PwtdpZjSda1i/ZPNNtplqZWRP7xPQfnVq98f6SnxG j8FlLr+1nh88NsHl7cZ659qu+LPEtj4V0p7++YmRjst4IxmW4k/hRB1JNKWg0jnoPihoVz4AvfFl pFezWlm3l3FqEC3EcmQChUnGQSO9M8I/Ek+JNZh0/wD4Q7xXpiyqWF1qFmI4VAGeWz3rC0T4b6ne fDTXtPv7iKw1vxDdG/mbZvW2YsGVMDrgDB96iXWfHPgXxP4c0/xXrFh4g0jWJ/sSyQ2ot5YHA4wB ww+tWl71n5ffb/Ml/Ddef3f8Mdh44+IGleEZ7ezmtr/U9WuBvi07TofNnZe7Y7D61p+DfEkXijSj exadqOmsrmN7bUITFKh9x/hXka2XirV/jl42HhrVtP0i5ght4vtNza/aJBFjICA8AE9a7j4SeJ9a 1r+39J8Ttbzatol39lkurddqTjGQ2OgPtUw1jfyv+I56O39bXPKv2u9V1q9t7XQtL02/k0q2X7Zf XUcDGLP8ILYxgDk+hryT9n3Udd8PeOLLWNM0vUb3Snk+yXpt4GddjYzkgYBHB+n1r7D+MH/JJ/GH /YKn/wDQDXmf7GZ/4trq/wD2FW/9FR0Ae9ZB5HIPIooooAKKKKACiiigDm9Y8ceHdE8U6d4e1S+a HV78K9vCIXYOCSB8wGByp6mu1AwK+XvjP/ycz4B/64Q/+jZK+oafQQUUUUhhRRRQAUUUUAFFFFAH MfErwqvjTwbf6FJdtZrdAAzLHvK4OemRn86b4N0NfDXhbTNFW4NytlCIRMU2l8d8dqt+OfE1l4Q8 M3mtaoszWlsAXEK7m5OOBUXhrWbbxFoNjq9gJBa3kYljEi4bB9RQB5/4y1n4naampavpth4dh0XT 9z/ZbiRnuLiJT98MPlXI7dq1Z/EHivxF4X0PUPA9hpsT6lbieW41KRvLtz/d2AZbPPPtWJ438Q2v jS/u/B2m6pZ2emRuI9Z1CW4SPC9TBECclj0J6Cuh8S+L9F8F6BplppbW1zPcKLbTLWOdAkm0YyXz gKO5zQvh+639eelv8hv4vvv/AF5alD4ceM9Zv9V8R6D4zt7OHV9DCyzT2WfJljYZBAPQ4FcyPHXx E1vRLzxZ4Z03RF8M2zOY7S53m6uokPzMpHAzjiuk8HaBb2/h3xE39r2Wp+J9aillvZbWdXw5QhUU AnCrwBXKfDfxboek/AKa31HUra3u9OguLWe3kkAlEmSAoXqc5FKbaTfVJff1/rzCKTaXRv8AA9b8 H69b+J/DGm61ZqVhvYRKEJyUPdfwORXhv7af/Io+G/8Ar+k/9FivTfgRp0+lfCXw7bXauk3kGQq4 wQGYsP0NeZftp/8AIoeG/wDr+k/9FitKiUZtIzptuKbPbvAf/Ii+G/8AsGW3/opa3KwvAeP+EF8N cj/kGW3f/pktbtQWFFFFABRRRQBS1vVLPRNIvNU1OUw2NpGZppApbao6nA5P4U7wbr+meKNCg1fQ rg3NhOWCSFGTODg8MAeorl/jT/ySPxf/ANg2X+VZX7LR/wCLL6IP9qb/ANGNTEes0UUUhhRRRQAU UUUAFFFFABXnehfDjTtA+IWs+LLe6uZL3VN3mRPjYu454r0SvPdE+I2ma/8AEDWPCltbXMd/pm7z ZHA2NtOOKAOg8Qa3p3h7TJdQ1e5S2tY+Nzclj2VR1JPYCsjwL4203xl4fuNZsYrm1s4JZIn+1qFY bOrEA8D681v3lla3nlNd20M7QMZIjIgby2xjcM9DXk3wUlsoPhz4rl1ZgunrqV8bgn/nnk7v0qb2 5vJX/Ff5g94+bt+D/wAi43xy8PLOsh0rXxojS+UNa+xn7IWzj73Xrx0rq/Gfjiw8Lw2m6x1PVbq8 Uvb2mm25mkkUYy3oByOprw97XXoPhnAlzbyy/C1LgXGAVGoC03ZBIxjZnn+9jvXumu3euv4a0+7+ H1rpV5JIEZP7QkaOMQlcggrzn7vFW1ZfP+r9gTu/v/pf12I/APjrS/G1vdtp8N5Z3dm4jurK9i8u aFj0DCuN/aTHiXUfByaD4T0u7vHv3/0uSEcJEvO3Pucfhml+D00sPjTxZa+JbaS38ZXHl3V2AytC 8WMKYiAPl+vNeugkA4PY0PZPyEt2j87PhnpniiXxPFqHhHT7i7vtKkSdxCOVGcYPseRX6EaXdPfa ba3UtvJbSzRq7wyDDRsRyp+hzXzF+xr/AMjT4z/64xf+jGr6npDCiiigAooooAK52HxtoX/Ce/8A CIm5f+3RH5ph8ptoUqGzuxjoa6Kvn2Lj9s6T/sHr/wCiFpoTPpOiiikMKKKKACiiigAooooAK4f4 teALT4h6DbadfXk1pFBcC43RKCWIBGOfrXcVyHxM8daV4B0WDUNbS5e3nmEC/Z03MGIJ6ZHHFAGz ZwC2tILdTuESLGCe+BivLvE/xB8RWXjvw7ptpo6Weh3+o/YHuLxf3txgZLRrn5V9CevpXqVrMtzb Qzx52SoHXPXBGa8h+MuqaefG/wAOB/aFmWt9YJmHnpmIbf4ufl/GnH4437g/hl6M9D8c+IovC/hy 51Bk824yIrWAdZpmOEQfUn8q5H4U+KvFPivw14i/tVdNg1/T7t7SLZGRCrgcbhkkjNZfjq+8QyfE fTNSsfCN54l8P6dB5tk1ncRiJrhsgyEnOSo4H1NZv7Oms6ndaz4vt7rw/d2kE+pzXEtw8qlYJf8A niR1Le44pQXNdPs/lZr/AIP4dRTdrW7r53T/AOB+I/xrr3xc8I6E2p6hfeDJl8xIY4ILaZpJXYgB VBxk817PprXL6davfBFu2iUzBBgByOcfjXmWqN/wm3xntNMX59G8KoLq5/uvduPkU/7oya9WJ7mm vhv3/L+vwsD+K3b8/wCv1Pln9s//AJGDwZ/1xm/9GJX1Kv3E/wB0fyr5a/bP/wCRg8Gf9cZv/RiV 9Sr9xOR90fypDFooooAKKKKACsnxT4h0zwroc+sa9cG206AqskojZ8FmCjhQT1IrWryr9qL/AJIj rn/XW2/9HLQB6r4e1Oz1rRbPU9Ll86yuoxLDJtK7lPQ4PIrRriPgif8Ai0vhT/sHxf8AoNdvTYIK KKKQBRRRQAUUUUAFFFFAHn+k/D3T9F+IWseLYLm4e+1NSssTY2KOOn5V0er6nZaNp01/qlzHa2cI 3PLIcAf/AF/aue0r4g6brXxA1fwnb29ymoaYpaWRwNjDjp+ddNd2VrfIkd7bxXEauHVZVDAMOhwe 4oYI5v4feOtN8dW+pTaRb3kMdjc/Zn+0oELnGcgZyB9cGqdx8TfD6eOLHwrbNPeX907RmaBQYYnU ZKsxPJ9hnHeuf+Bf/IX+I3/Yfk/9Bqv49srXT/i58M4LC2htofNu22RIFGSuSeO5NUrc0PNL8Vcd vi8r/gd1458aaX4Ns7eXUluLi5un8u1s7SPzJrhvRVqj4F+ImmeL727sI7LUtK1a1UPLYalD5UwQ 9Gx6VzfijL/tGeEEnCmFNMneHd/z03HJHvik11WH7SnhtrcAM+kT/aCOpUfdz+NTDW1+t/wv/kKe l7dLfjb/ADG/tH/8JLqHg1NC8JaXd3suoPi6kgHCRLztz6scfgD618ifDvSvE7+Ko7rwpYXFzqel SLO6RDJTDY59s8V+jER/eL9RXyr+yV/yUrxt/wBcW/8AR9AH05pF3Jf6VaXc9tJazTRK8kEgw0bE cqfoat0UUAFFFFABRRRQBza+OdBj8eReEXuZP7cdPMEPlNt27d33sY6Cu1r5muzj9suz/wCvMf8A ok19M0xBRRRSGFFFFAHznqf/ACeHZ/8AYOH/AKCa7bxv8OL7xH4utvEFh4uv9HuLaDyYY4bdJFjz 95huPBP0ridT/wCTw7P/ALBw/wDQTXvdDWtwT0sef23gLWW0W+sdW8d63fzTMklvdBEie1Zc8rgn cDnkH0pvh74ata6/a6z4n8San4mv7LJszeKqRwE9WCDILe9ehUU72dxNXVjgfGHw5/tnxIviDQ9f 1Dw7rLQ/Z57izUOJ4x0DKSBn3ra8CeD7DwbpMtpYyT3E1xKbi6u7ht0k8h6sx/pXSVg+KvGHh/wn bmbxDqttZDGQjtl2+ijk/lSWishvXVmf8YP+SUeMP+wVP/6Aa8z/AGNP+Sa6v/2FW/8ARUdZvxG+ PnhjX/CviDQNCs9VvLi9s5bZJRCAmWGN3XOPwriPgB8W9K+HfhG7sNc03Uniur03CXMEYKY2KuOS MnKmgD7DorhfB3xX8G+LXSLStYiS6bGLa6/dSHPYZ4J9ga7ojHWgAooooAKKKKAPm740f8nMeAf+ uEP/AKNkr6iFfLvxo/5OY8A/9e8P/o2SvqIU+guoUUUUhhRRRQAUUUUAFFFFAHl/7S//ACRnX/8A cT/0IVc+DH/JKfC//Xkv8zVP9pf/AJIzr/8AuJ/6EKufBj/klPhf/ryX+ZoAjvPhP4Dvbua6uvC+ ny3EzmSRzvyzE5JPzetT3nwz8F3tjZWV14csZbWyVlt4juxEGOWA57nmuwoo6WDzOa8MeBPC/ha8 ku/D2iWmn3MieW0kO7JX05Jpl58PvCN7rf8AbF34d06XU9wcztHyWHcjOCfwrqKKPMP1AAAAADA4 xjivhD9orwveeE/HtxatPcy6Tdk3dkJZWdVVjyoyT0ORX1t4w+K/g3wmzx6prML3Sgk21r+9k47c cA/Uivn342fEnQfih4et7TR9C1l7y0n8yG68nICnhlIXPUfkaAOk/ZD8NX80F54p1S4unt1H2Sxi klYr23sAeMDgD8a+l6+efBXx28GeGdF0zQLjSdY0uG1iWIGSAHnu5GQeTknjvXsvhLxn4d8XQeb4 e1a2vMfejVtsi/VDg/pQB0NFFFABRRRQBxnxp/5JH4v/AOwbL/Ksj9ln/kjOi/70v/oxq1/jT/yS Pxf/ANg2X+VZH7LP/JGdF/3pf/RjU0JnrdFFFIYUUUUAFFFFABRRRQAV8zfCz/k6Dx99Jf8A0IV9 M18zfCz/AJOg8ffSX/0IUAe2eMNH1HXNLW10jX7vQbgSBjc20auxH93B7VxHgz4TT+HkvLS88Xah qujXol+06dLbpGkrSfeckEnPevU6KVlr5g9beR5EvwXlNgNGm8b69L4WBwNJwoGzOQnmZzj8K6rx N4Hk1GPT/wCwPEOqeHZrGEW8RsyGQxjGAyNwenWuzop7gcd4F8CW/ha8vtSuNSvdY1u+Crc6heEb mUdFCjhR7V2PY/Q1heK/Fug+E7T7R4h1S3skIyqu2Xf6KOTXkuo/tI6PJNLD4X8O6vrTpwSq7B9e Axx+FNu4WOP/AGNf+Ro8Z/8AXGL/ANGNX1PXxN8GPFet/DPVdZv7vwbrF7DqKKuBE8XlgMWzkoc9 fave/DH7QXgrWLr7JfS3Wj3O4Li9jwuTxjcM4/HFID16iora4hu7eO4tZo54JBuSSJgysPUEcGpa ACiiigAr58T/AJPNk/7B6f8Aoha+g6+fE/5PNk/7B6f+iFprcT2PpQdKKB0opDCiiigAooooAKKK KACvAv2yf+Se6X/2Ek/9Bavfa8D/AGyf+Se6X/2Ek/8AQWoA9f0X/kDaf/17x/8AoIrltR+FfgXU r6e9vvDFhNdTuZJZG35dj1Jw1dTov/IGsP8Ar3j/APQRVyiwFPR9MstG0230/SraO1srddsUMedq D0Gaj0fRdN0VrttJsorQ3cxuLgx5/eSHqxz3rQoov1FboZ2kaJpmjyXkml2UNs95KZ7hkzmWQ/xM TVy6gjuraa3nBMMyGNwDg4IwcGpSQASSAAMkntXnXi/4z+CPC7yQ3erLd3SdYLJfNb6Z+7+tAz41 +Lnh/UfCvji/0bUbm4uEt3LWzzSFsxNypGT/AJxX0z+yj4av7PwpP4j1m4upbjUzttkmlZgkKn72 D3Y559MV5V8avGug/E660a90vQtaV7R9s84hz5kGeQMZGQehNer+G/2hfA9tFa6VPY6lo0VvGsSJ JACkagDAODkce1AHulFZPhzxHo3iWy+1aDqVtfwYyTC+Sv1XqPxFa1ABRRRQAV5V+1F/yRHXP+ut t/6OWvVa8q/ai/5Ijrn/AF1tv/Ry0Add8EP+ST+Ff+wfF/6CK7iuH+CH/JJ/Cv8A2D4v/QRXcU3u JBRRRSGFFFFABRRRQAUUUUAfOPw7/wCTo/Hn/XE/zWvZvFWmX2saNLZ6XrNzot07KVvLdFd1AOSM HjnpXjPw7/5Oj8ef9cT/ADWvfaGrgjy/wJ8LtS8Ja9LqCeN9TvYbm4NzeWj2yIl1IRgljkn8qqa5 8JNa1fxBb6vN8RNXW5tJJHs/9EjP2YP1Cnd6cV63RR28g7+Zwvin4eL4j0nRVudbv4de0nBt9ZiU CYvgbmZehzjpUngj4fw+G9WvNZ1HVr3XdeukEUl/eAAiMdFVRwortqw/FXizQvCdn9q8Q6nb2Uf8 Ku2Xf6KOT+VO9m2D1Vjei/1ifUV8q/slf8lK8bf9cW/9H12V9+0lo73DR+GPDusa06Nj5V2A+/AY 4/CvHPhD4q1r4d+J9Z1i78HaxdwamhUqInj8sGTfnJQ5/SkB9s0V5B4Y/aD8F6xc/Zb+S60a5ztx ex4TPpuGcfiBXrVpcwXltHc2c0U9vINySxMGVh7EcGgCWiiigAooooA+dr3/AJPKs/8ArzX/ANEm vppegr5lvv8Ak8mz/wCvNf8A0Sa+ml6Cn0F1CiiikMKKKKAPnPU/+Tw7P/sHD/0E173XOXngTRm+ ICeMSLj+2Fi8kHf8gUDH3fxro6ACjrRXmnx+8dyeB/BLNpx/4nOot9lswOqk/ecfQHj3NAHOfFj4 s6hFr6+Cvhxb/wBoeJpm8uWdBuW39QO24dyeBT/A/wCzzZeeNY+I17Nr+synfJE8hMSk9ierfyrp P2ffhpB4I8NJqGoRiXxJqSCW7nflkDc+WD+p9T9K9YoAy9L8O6NpUCQ6bpVjbRIu0CKBVwPTpU76 TpzwCB7C0aEdIzCpX8sVdooA8n8d/Afwd4oSSa2s/wCx9TPzJdWXyfN6svQ/pXmmkeLfF/wV1630 H4gmTVPC0zbLXU1yxjHseuB3U8+lfUdYnjTwxpvjDw5eaLrMXmWtyhGR96NuzqexB5oAfY3dvf2c F3ZTJPazoJIpUOVdT0Iqevnv4E6vqPgjxvqfwv8AEkpkEJaXTZm6MvXA9iOR75r6EoAKKKKAPP8A xd8MrPxL8Q9D8WT6lcwXOlokaW6RqUfazNkk8j736V6gvIzXnniP4kaN4c8daP4Wv4L59R1NVeF4 kUxgMzKNxLA9VPQGvRBwKfQXUK4nxmnj671H7N4Qk0XT7JUDG8vQ0rs3dQg4A9zXbVm+ItbsPDuj XWq6vcJb2Vshd3Y/oPUn0qJWSu+hSu9Eed/DTxxr83jbVPBPjeK0bWrKEXMV3ZgiO4jJ67ex5FXP EUPxUv7+7fQbrw7pNjDIwt0nRp5J1HRmPRc+nvWV8GtJv9b8Ta58RNat2tX1ZVg0+2cfNHar0Y+7 YBrs/iV40s/BPh17y4zNezHybK0Tl7iU/dUD+ZondRi5fFb8emnfbTuTDVyttf8ADr8r317eRjfC L4gT+LdB1Rtdto7LVdHna3vljOY8qPvD24Nc1pXiP4kePrWfXPBsmi6ToQkdLOO+iaWW7VTjcSOF BIpPDnhLUfCnwR8Uz6kca9qtvcX90FP+rdlJCfgK6r4AGM/B7wx5IAX7KM49cnP61bV5SvulHbu7 3/LToSnZK2zct97K1vz9S18J/GsnjTQbiS/tFstXsLhrS9t1OVSRe49jXb14v8DUH/CxPie8A/0c 6ooBHTdg5r2ilfmjGXdJ/erjWjlHs2jy/wDaX/5Izr/+4n/oQq58GP8AklPhf/ryX+ZrqPGvhux8 W+G7vRtW837HcAB/Kba3Bzwai8PaRa6BolnpWnhxaWkYjiDnJC+5oKNCiiigCG8uoLK0muryZILa FDJJK5wqKOpJr501fxh4u+NHiC58P/DtpNM8LwNsutUIKmQe56gHso5Per3x51nUvGXjPSvhh4Zl Km4Ky6lKp4Veu1iOwXk/UCvePBfhjTfB/hy00bRoVitoFwTj5pG7ux7k0AcH4D+A/g7wtHHNdWY1 jUwQzXV6N3zeqr0H616fbWFnaIEtbS3hQdFjjCj9BVmigDN1PQdJ1SFotR0yzuUYYIlhVuPyrxbx z+zxp8k51f4eXkvh/WYjvjjjciFiMYA7r0+nNe90UAfP3ws+K+pJ4g/4Qr4lW5sfEcZ8uG5YbUuP TPbJ7EcGvcK88+P3w0h8d+GHubBBF4i09TNZzrwzY5MZPv29DiqP7PfjuTxp4KEepMx1rTGFtd7v vPj7rn69/cGgD1GiiigDJ8XaJH4l8L6pok8zwRX9u1u0qAFkB7gGoPhf4Ug8E+ErXQbW6lu4bYuV mlUKzbmLdBx3q14m1m28O+HtR1m+SV7WxhaeVYgC5UdcAkDP40fDzxRY+M/C1rrmlR3EdpcFgi3C hXG1iDkAkdR60xM6SiiikMKKKKACiiigAooooAK+ZvhZ/wAnQePvpL/6EK+ma47T/BGg6P4s1DxF p9mY9Xv8/aJvMY7s9eCcCgDoKKKKACvJPjJ8VZPDV1D4a8JQDUfF14QiRKu8W+7oWHdvQfia7D4o +LofA/gfUtbk2tNEmy3Q/wAcrcKPzrgf2ZvAMtvYy+O/E2648Q6zmaJ5eTFExzke7dfYYFAFfwH8 AhfXKa/8VL2bW9Zm+drV5CYo/Zj/ABfQYFe56ToumaPAsOlafa2cSjAWGILx+FX6KAAgEEEAg9jX I+Mfhx4U8X2rxa3o1tI5BAnjQRyoT3DDvXXUUAfK2s+H/GfwDvv7V8OXM2u+Cy3+kWkuSYV9x/D7 MPxr3rwR4r0vxp4et9Y0SbzLeXh0P34n7ow7EV1dzBFdW8tvcRrLDKpR0YZDKRgg18uwwv8AA341 xWMTOPB3iNhsU/dhYnA5/wBkn/vk0AfStFFFABXIL4A0r/hZg8aiS4/tZohCybv3e0IF6fQV19cX D8RLH/hbH/CC/Y7g3ywCc3GR5eCgfHr0NNbiZ6KOlFFFIZ4/8Yfibreg22rWvg7RZrq606HzrzUL hMW9suM4Gfvt7CvQ/AmpXOs+DNE1K+ZWurq0jmlKLtBZlBOB2rn/AI8/8kg8Vf8AXk9S+BdUttF+ D2i6nfv5draaVHNI3oBGDUwkowm5dLa/+Bf5Cldzil1v+hkfGjxxqnh63h0vwkIJPEE0T3bGVd6W 9vGMs7D36CtbwvqniDxT8J9N1KwurO28QXtosizyw7olfPJKDtivL9H1nRb7wZ4w8V63rujjxBrt pKIbU3sZkt7cKRHCBnOe5Hqa9G+Amo2N58LPD0Fne21xPb2iLNHFKrNEeeGAOQfrTjF2lGW/uv0v zafKyv5icvfi1tr87cuv528jmPEKfFrQNDvtV1Dxf4XS1tImlkJsG6AdPx6V2/wf1XXdc+H+map4 p8r+0btTLiOPYAhPy8euK5H44XEniPXvDfw/snOdTmF1qBU/dtozkg/UivXbaCO2t4oIFCRRKERR 2AGAKcHeLb6uy+W7+/T5MJfEkumr+e3+fzRJXgX7ZP8AyT3S/wDsJJ/6C1e+1ynxF8E6R460iCw1 5Z2t4JhOoifaSwBHJ9OaCi9ov/IGsP8Ar3j/APQRVyo7eFbe3ihjzsjQIueuAMVJQAVQ1/WLHQNG utU1a4W3sbZC8kjfyHqT6Vfr5v8AiLNd/F/4vW/gPTpnj8PaS3m6jLGeGYfe/L7o98mgCuNQ8a/H /VJ7fRJJfD/gaGTY8/IafHYkfeb2HA71694G+CngvwlFG0Olx398vJu70CRye+AeB+Vd7oek2Oha Ta6ZpVvHbWVsgjjjQYAA/r71eoAghsrWBAkFtBGgGNqRgDH4Vma14U0DW7eSHVtGsLqNxhhJApJ/ HGa2qKAPnfxl8A7jQ7tvEHwn1K40vVIf3n2JpTsk68KT069DxW18Gvi1/wAJVdSeHPFNuNN8WWmU kiYbBOV6lR2b1H5V7dXhP7Sfw6e/sE8beF0a38S6ORO7QjDTxrySfVlxn3GR6UAey0Vx3wl8ZxeO /A9hrC7VuiPKuox/DKvX8D1rsaACua+I/hKDxz4PvPD93dS2kNy0bmaJQzLscMOD64rpawPHfiqx 8FeF7rXtWjuJbO2ZFdbdQzkuwUYBIHU+tAGn4I0WPw54W0zRoZnnisYFgWV1AZwBjJArdrJ8Jazb eIvDenaxYpKlrewrNGsoAcKRkZAJ5rWpsSCiiikMKKKKACiiigAooooA+cfh3/ydH48/64n+a177 WFaeDND0vxbqHiKyszHq9+MXE/mMd447ZwOgrdoAKKK5X4n+LYfBHgjUtcmAaSFNkEZ/jlbhR+Zo A434zfFd/C1zD4c8KW/9peLbzCxwqu8QZ6Eju3oPxNZPgT4CNqV0PEHxWvZtZ1ib5zaNITHHnsx7 /QYFWP2Z/AUsdlL488UZuvEGsEzQvMMtFG38XsW6+wwK97oAoaTo2maRAkOl2FraRKMBYYgvH4Vf IBGCMg9jRRQByPjH4ceFPF9q8Ot6NayOwIE8aCOVCe4Yc5rwbWvDfi/4CXzax4Yupta8GM/+k2cp JMKk9x2/3h+NfU9R3EEVzBJBcRrLDIpR0cZDA9QRQByXgTxbpfjbw5bazo0m6GUYeNj88LjqjD1H 610FfNLQS/A342QW8LsPBviNsLH/AAwsSB+akj/gLe1fS3B5ByD0NABRRRQBx0nw90mX4lQeNDJc jVUj8raG/dkbdvT6GvQh0rzc/Eewh+K8HgY2Vwb6SLzftGR5YGwt9e1ekU3sLqFFFFIYUUUUAecX 3xFhT4uReBjp0hme388XfmDaBjONvWu2rwTU/wDk8Oz/AOwcP/QTXvdABXzz4qiXxv8AtS6Lotxl tP0OAXDIRlWYDecj6kD8K+hq8I+Gu3/hqPxt5+7zfs/7vPp8v9KAPoiiiigAooooAKKKKAPnL9qi xfRPEPg3xrp67Lq0ult5XBwNudy5/wDHhXu0VzFJZLdl1S3ZBJvdgFVSM5JNeTfth7f+FRc43/b4 dvr/ABdK+fvip/wtBvDult4ga4bw59jh8k2OfI2eWMeZjnOMZ3cZoA+tNC+IPhzxB4puNA0S/F9e 28RlmeEZiQA4xu7nPausr8+fg9D44m166X4bySJqYgJlKPGp8vP/AE0461699g/aQ/5+bv8A7/2l AGx8aOP2mPAP/XCH/wBGyV9QivgHxlb/ABPj+JOgx+JZZj4taNP7OZpISwXc23BX5R827rXpX9nf tJ/8/Nz/AN/7OgD60rxH4weF/HniTxrp0um6bpep+GdP2zR2V1dmJZpv70gHJweg6V5z/Z37Sf8A z83P/f8As6P7O/aT/wCfm5/7/wBnStqn2Do13PcfCOo/EibWbeDxL4d0Gx0jBEktpds7rgcAL9cV wWpeG/ic/wATbzxNJoeh6ukJaLS0ur0qlrHnhlUfxEdSa4v+zv2k/wDn5uf+/wDZ0f2d+0n/AM/N z/3/ALOn9pS6r9RW0a6M9+8ITeMtXTULXx5ouk2NpJFsj+xXJlMmeGDA9BiuH0Lw18S/ANnL4f8A CUeiapoXmO1nc3srRy2qsSdpUfexmvOf7O/aT/5+bn/v/Z0f2d+0n/z83P8A3/s6TWt/k/Mf9eh9 BfC3wWfBehTQXV19t1S9na6vbrbgSSt1wOwHauyr5L/s79pP/n5uf+/9nR/Z37Sf/Pzc/wDf+zqm 7iSsfRvxJ8VJ4L8HX+uy2rXaWoBMSttLZOOtN8H64niXwvputRwNbpewiYRM2SmexIr5P+I1l8cY vB9+/jOedtCCj7SGltiCM8cJ83XHSrHg2y+PL+FtMbw1cXS6MYQbULNbAbO3Dc/nSGfYFMmkWGGS VzhY1LE/QZr5a+wftIf8/N3/AN/7SoNQsf2iBYXJvLm7+zCNvNzPa/dxz09qAOv/AGWLf/hJPFXj Xxzd5e4uLs20O/kxqfnIB+hQfhX0jXgv7GgkHwwvC5gwdRk27B833Vzv989PbFe9UAFFFFABRRRQ AV806DCfBH7VWq6bCqxad4ghM0aDoXYbuB2w2+vpavmz4t8ftT+APJz5nkJn/vqT+lAH0FRSKcil oA4z40/8kj8X/wDYNl/lWT+y0f8Aiy+ij/am/wDRjVrfGn/kkfi//sGy/wAqyP2Wf+SM6L/vS/8A oxqaEz1uiiikMKKKKACiiigAooooAK8o8LfEubxB8VvEXhGTTooY9LL7blXJMgUgcjtXq9fM3ws/ 5Og8ffSX/wBCFAH0RRRRQB8+/tJs3iDxv4C8GhnEN5dCabb7sF6fTNfR9vDHb28UECBIo1CIo6KA MAV86+PiyftSeB2lYCJoQI8nvzn9a+jqACiiigAooooAK8a/at8PjV/hVcX0aZu9JlS7jbuq5w36 H9K9lrhPjsVX4P8Ai3cQP+JfIBn1xQAnwt1s698OdB1WeVWeW0TzpDwN6jDE+nINUW+KXheTxlY+ GNPvRqGqXMhjP2b5o4sDJ3N0z7Cvl2Lw58S9S+DujS6LcTXPhkJKRZWRKyr+8bJdergnJ4zwelcX 8KLTX2+IumW3huWKz1wSFYmulIVGwc7hj+lAH6H18+xHH7Z0n/YPX/0QtaX9i/HX/oY9A/I//EV5 NJpvxHb9oKS0TVtPXxl9lUm6X/VeX5Q45Xrtx2poTPtqivnj/hGvj9/0NGkf+O//ABurEGifH2KM Kdf0GQ/3nHP6JSGdJ8X7P4h+IbLWPD+g6Lo02iXsHkrdTXZSYZHJ29ODV34Z6Z4uGgp4c8d6Foya LBZLbIYZzMZsADDqeMEVyX9kfHz/AKDfh7/vn/7GobjTPj/EAY9V0GXPUKAMfmBSiuVNb3/4P+YS 1afb/gf5Hb+JvhB4OuPD2pQ6R4U0aPUJLd1t38hV2uR8pz25rR+D/gq38F+DbC1bTrO01ZoVF89u AfNcZ5Lfxda8x+xftB/8/ui/mn+FH2L9oP8A5/dF/NP8Ka0vbrb8L/5/kJpO1+n62/yO/wDAfhHV ofiB4m8WeKEgW7u2FtYRxyb/ACrZenPYnvXpFfPH2L9oP/n90X80/wAKPsX7Qf8Az+6L+af4ULRK PbQfVvufQ9cH8YfiBD8OvD9tqVxp8l8k9wLfy45AhBIJzk/SvNPsX7Qf/P7ov5p/hXmvx5t/inF4 Vsz4+uNOk077Wvli3xu8zBxnHbGaAPrqzn+02cE4XaJY1fHpkZxU1eHaVH8cl0y0EE/hdofKXYXR t23HGatbfjr/AM9fCn/fDUAepeK9VGh+GNW1TGTZ2sk6j1KqSB+deVfshaKsfgzUvElxl77WLtyz sPm2qSMZ75OTXN/Es/GZfA+sDW/+EffSzbt9p+yqRIE74ya9U/Zw8v8A4U14c8rp5J3f7245oA9L ooooAKKKKACmyIskbJIoZGBVlIyCD2p1FAHzV8B438I/F3xz4NyRZiQ3NurHnAPB/wC+TX0JXz9A R/w2TfeV93+zjvx0z5I6/jX0COlABXlX7UX/ACRHXP8Arrbf+jlr1WvKv2ov+SI65/11tv8A0ctA HX/BE5+E3hT/ALB8X/oNdvXD/BD/AJJP4V/7B8X/AKCK7imxIKKKKQwooooAKKKKACiiigDy7w/8 Rpdb+K/iDwg+nxxJpalluQ5Jk6dR2616BXgXw7/5Oj8ef9cT/Na99oAK+e/2mjL4g8YeAvBqBjBf XYlmCnnlgufwVmP4V9CV4N8RGRP2n/ALSgbTCQCR3w2P1oA+hrWCO1toreBQkUSBEUDAAAwBUlFF ABRRRQAUUUUAeO/tV+H11r4S3t0ke660yRLuJu6jO1//AB0k/hXSfCfWn8QfDnw/qMx3Ty2iCU+r gYP8qtfGlo1+E/isy/d/s+Ufjt4/WuN/ZhSWP4M6Ks4YMXnZcnPymQkfpQB6rRRRQB873Zx+2XZ/ 9eY/9EmvpkV8y3v/ACeVZ/8AXmv/AKJNfTS9BT6C6hRRRSGFFFFAHznqf/J4dn/2Dh/6Ca97rwTU /wDk8Oz/AOwcP/QTXvdDBBXzx4llXwX+1Ro2sXPyWOt24gLnhVYjYST9QD+NfQ9eXftA+BpPGXgw tp6/8TjTWNzaMOrED5kH1wPxFNCPYqK8p/Z++JUXjnwwtnqDmPxFpqiG8hk4Z8cCQD37+hr1akMK KKKACiisbxf4k03wl4fu9Y1qdYbS3XJyeXPZVHcn0oA8L/apv5NZ17wd4K09t1zd3QuJkHPy5wuf /HjXudpbRR2CWpRXhVBHtYZBUDHSvnz4IaZqXjrx5qfxL8RRFBKxi06I9FXplfZRwD65r6LUYUCn shbs5XQvh/4c0DxRca9olgtje3ERimSE4jcE5zt6A/SuroopDPm740f8nMeAf+veH/0bJX1EK4XX /Aeha94q0zxDqFvK+q6eFWCRZCoABJAI78sa7lenNPoLqLRRRSGFFFFABRRRQAUUUUAeX/tL/wDJ Gdf/ANxP/QhVz4Mf8kp8L/8AXkv8zVP9pf8A5Izr/wDuJ/6EKt/Bf/klPhf/AK8l/maAO0qO4jWa 3kicZV1Kn8RipKDQB8/fsrXP/COeKPGfga8JW4tro3MO/gyKPkJx9Ah/GvpKvmf48aVqPgrxrpfx M8NxsxgZYdRjQffTplvYj5SfUCvfPBXijTfGPhyz1nRphLbXC5Iz80bd1YdiDQwRuUUUUAFFFFAB XzNo9x/wm37VGqalAVl07QITAjjoHUbePq2+vRPj/wDEyDwJ4XktrGRZPEV+pis4F5ZM8GQj0Hb1 OKyf2efAsvg/wgJdRVv7Y1JhcXW7kpn7qZ9u/uTTQmesr0paKKQzjPjT/wAkj8X/APYNl/lWR+yz /wAkZ0X/AHpf/RjV3muaXaa5o17peooZLK8iMMyA4JU9ee1N8DeHdP8ACmgw6Ro0TxWMJYxq7biM kk8/U00JnQ0UUUhhRRRQAUUUUAFFFFABXzN8LP8Ak6Dx99Jf/QhX0zXzN8LP+ToPH30l/wDQhQB9 EUUUUAfPv7T0E2ia74M8a2sZY6XdiOXHQDcGBP5EV9Fabewalp1tfWcgktrmNZY3HQqwyD+tcp8Q PDFr4v8ACWo6LegbLmMhHx9xxyrfga8m/Z18dT+Hb6f4a+NHFtqVjIU0+SQ4WVOuwE9fVfUHHamI +jaKKKQwooooAK8Q/a28QjTfhwujW7t9u1i4SBEXklActx6HgfjXsWs6pZaLpdzqOqXMdtZW6F5Z ZDgKBXzH4S+1/Gj4uv4uvoZY/DGjMEsIpBw7A5H45+Y/gKaVxN2Pc/hxo7eH/BOi6Y4AltrWNJMf 38fN+ualvvB2g3niOy16TToU1i0bdHdRjYx7YbH3h9a3Yl2qKfQ9wQV8+J/yebJ/2D0/9ELX0HXP r4N0Q+Nl8UizxrhTyjcbjyu0LjHToAKFuD2OxHSigdKKQwooooAKKKKACiiigArwP9sn/knul/8A YST/ANBavfK8C/bJ/wCSe6V/2Ek/9BagD2DRf+QNYf8AXvH/AOgirlU9F/5A1h/17x/+girlAGR4 u0v+2/C2raX3u7WSEH0LKQD+deWfsgayr+CdS8OT/Je6ReOGRj8xVjnOPrkV7SRkV82ePhd/B34v weNtOgkk8O6u3l6hFGOFY/e/HPzD34piPqWiqejapZ61pdtqOmXCXFlcoJIpUOQwNXKQwooooAKb I6xRtJIwVFBZmJwAB3p1eGftK/EN9M0tfBnhs/aPEesgQskRy0MTcH6Fun0yaAOZ+Bsr+LPjD448 YDLWZkNtbMR2LcD/AL5FfRArhfg94Nj8EeCrLS+GusebcuP4pW6/gOld1TfYSCvKv2ov+SI65/11 tv8A0cteq1keLPDum+K9BuNH1uJprCcqzorbSSrBhz9QKQzP+CH/ACSfwr/2D4v/AEEV3FZXhfSb bQtCstL09GSztIhFErHJCjpzWrTe4lsFFFFIYUUUUAFFFFABRRRQB84/Dv8A5Oj8ef8AXE/zWvfa 8B+HZ/4yk8ef9cj/ADWvfqACvnz9qSCfRtU8G+NLWNn/ALKvAkoXjI3Bxk9h8pH419B1z3j3w1a+ LvCmo6Le4Ed1GVVsZ2P1Vh9Dg00DOo0q/g1TTLS/s5FktrmJZo3U5BVhkH9atV84/s7eOJ/DepT/ AAz8Zv8AZ9RsZClhJIcLIvURgn819QcV9HUgCiiigAooqpq+pWmkaZc6hqU6W9nboZJZXOAqigDx z9rfxGulfDE6VC7fbdYnSBEQ/MUUhm4644A/4FXafDHRW8PeA9C0uQgy21oiyEd3xk/rXhvhhrr4 2fGA+KruGRPCuiMFso5F4kYHK/jnDH6KK+mI12qKfQXUfRRRSGfO19/yeTZ/9ea/+iTX00vQVxje C9Dl8aw+KGs862i7Bcbz027cY6dK7MdKb2F1CiiikMKKKKAOeu/DWjnxIuvHT4DrATyxd4+cL6Zr QrE+KB8RL4M1F/BghOtqmYhJ3Hfb23Y6Z715R8OPj3pN3brpXj0tomvWw8uaSdCsUpHUn+6fY/hT Ee5UjDIrjv8AhaPgP/ob9E/8CRR/wtHwH/0N+if+BIpDPOfir8LNUh18eMvhvcGw8QRnfNAh2rce pHbJ7g8Gr3gP9ofTZXXSfiHay6BrUXySSPG3kuemfVc/iPeu3f4n+AmHPi/RP/AkVian/wAK2+I9 yunNfaJrV6ykokMgMwA6kEc8VWjJ1R6dpeuaVq0Qk0zUrO7Q94Jlf+Rq1c3lraxmS6uYYYwMlpHC gD6mvnTVP2dvD0CSTaZrOraRGoLsyyBwAOuc4ri4PAHw2Mv/ABMfiqLyDBBia5VQfxyaOVhzI9x8 efHbwZ4Uhkjhvl1fURwlrYnfk9sv90D868p0/wAPeL/jXrttrPjxH0zwxbvvttNTKmQfQ8+xY8+m K6DwfY/Bbwu6S6frWgSXK9J7q6Erj6Z4FehRfErwCn/M36J/4EiiyW4Xb2Oq0nT7fTrKG1tIUgt4 VCRxoMKqjoAKvVh+HvF3h3xHPLD4f1uw1KWJd8iW0ocqucZPtWlqeoWelWE19qdzFaWcI3STSttR B6k0m7jSsWqK43/haPgP/ob9E/8AAkVyfjv49+EtA09xod5HruqOMQw2p3Ju7Fm9PYc0hm1rPxMG m/F7SfBFtpn2yS8jV5LhZtvkE7icrg5G1Qe3WvVa+ff2evA+svr+oeP/ABqG/trUgfs8TjmJG5JI 7cYAHYCvoKm1YSdwooopDCiiigAooooAKKKKAM7xBpFhrulTafq1tHdWco+eJ+jYqtp1jbaZYwWV hCkFrAuyOJBhUHoK2mGRzXzt4v8Aid4p+HXxLuh4ysBceELzC2ktmpIiA75PVufmB9sUxHvFFcLY fFzwBe2qTx+KtMiVxnZcSeW4+qnkVY/4Wj4D/wChv0T/AMCRSGdRqVlBf2c1tdwpNbyqUkjcZVlP UEV85ar4Z8W/BbxBca74AR9R8MTtvutMbLbB9OvHZhz65r2X/haPgP8A6G/RP/AkUyT4m+AnHPi/ RP8AwJFNPoxNdjM8A/Hnwd4qjSK7uxo2p9Htr47Ru77X6EfXB9q9RtL60vIxJaXUE8ZGQ0UgYEfU V5T4l+FvgrxvbJqEmn28n2lBJHe2TeWZFPIII4IOfSvKfEnwj8FeHr9bS6+IdzoLlNy2s0y52noR yOKfL2Fzdz6i1XXtI0mIy6pqdlaIO80yp/M14x47/aH0uFzpXw/tZfEGtS/JG8cbeSh6Z9W/Qe9e c2HgD4TBlOs/EOPU8HP7y9WP+Wa9Q8J6v8JfC0RTQ9c8N2ZP3nWcF2+rHmjl7hzdjA+GHwt1S78R /wDCZ/Eac3viCQ+ZFbMcrB6E9sjsBwK96iQIuK42P4m+Ak4Hi/RP/AkV2iMroroQysMgjuKTfRDS 6sWiua1jx74S0XUJLHV/Eel2V7FjfBNOFdfqKy774t+AbO1knfxXpcqoCSkEvmOfoo5JpDNf4heJ 4vB3g3U9dmRZPskeUiZtvmOTgLn3q18MvEj+L/BWna89i1h9sVmEDPvIAYgHOB1xn8a+cvEuu6v+ 0D4ltdB8OW09l4Ps5RJdXcox5mD94++Oi+/NfVGh6fb6TpFnp9jH5VraxLDEnoqjAp20FfUvUUUU hhRRRQAUUUUAFFFFABXPReHdHsNaudVstNtYNSus+dcpGBJJnrk966GvOvjlB4wk8GvJ4BufJ1GF xJIiqPMljHJVCeh9u44poTO0orw7wH+0HoV7bJY+Nll0PW4RsmMkZ8p2HUj+79DXcj4teASAf+Es 0v8A7+0hncHkV5Z8ZPhTZeO7eO8t5PsOvWo/0e8TjOOQrY7Z6HqK3P8AhbPgH/obNK/7+0h+LHgA jnxZpX/f2mmJo8u8L/GfxH8PrmPQfizpVy8aHZDqkK7i6jjJ7P8AUYPqK9s8P/Enwd4ggSTTPEWn Pv4CSTCN8+m1sHNZNlrXg7x4txp+n3+ma0ETdLAMSbVPGeelcF4v+B/w+itZ9TvIZNItoBuklhnK RoPUg5p2T2Fe257fca9o9tEZLnVdPhjBxukuUUZ+pNefeNPjt4H8MxSKmpDVL1eFtrEbyT2y33R+ ZrxM+Cfgy5Am8aGRAc7WvRz+ldf4Ui+CfhqSOXT9T0V7hPuz3M3muPxPH6Ucocxgz2fjn466lDNr 8cnh/wAGRuGW1GQ8uOhweWPueB2FfQfhfQbHw9pFtpul26wWluu1EH8z6k+tc3F8Ufh+gH/FWaVx wP3vSul8NeJ9D8Twzy+HtUttQigYLK0DbghIyAfyNDaWiBJvVmzRWX4i8QaT4bsFvde1CCwtGkEQ lmbCliCQPrgH8q5tvi14AVSf+Er0s49JcmpKO4rzbw58S59Y+NGp+DrOxhl0+wiLSXqsdysAMqR0 +8SPwrjfH/x+sZIn0b4cQXGsa5cfuY5kiOyMnjKj+I88dq6z9nr4cT+CtJu9Q1txN4i1RhJdPnPl jqEz3OSST600uom+h7BRRRSGFFFFABRRRQAUUUUAFY3inw7pPiSxjttcsIb6CJ/NSOUZAbpmtmmy gmNsYzjjNAGdFGsUSRxgKiAKoHYCnV892/xd8ReBPHWo6T8VLNhptxMWs721i+SNO23+8uPxBzXp 9v8AFfwFPCsi+LdIQMM7ZJwrD6g9KAO1rK8S6HYeIdHudM1W3W4s7hdro38x6EetYX/C0fAf/Q36 J/4Eij/haPgP/ob9E/8AAkUAeJwx+NfgHqssunJNr/geVyzQcloc9/8AZI9eh717R4I+M/grxdAn 2bVorK7Iy1tekRMv4n5T+BpJ/iV4AmRlbxdoZVhgg3CkEe9YHir4K+DPEzG6fTRbTSfP51k3l7sj gkdDVWT2Ju0exQ3EM6B4Zo5EPRkYEVma14n0LQ4Wl1fV7GzVQSfNnVTx6DOT+FfLmu/CzwVoupy2 N38TrjSp48brSaZdyfX5hRpfgL4QxSJJrPj2DVZFOcy3oQHnoQM/zo5WHMdl44/aAk1W4fQfhTp8 +q6pKdgvTEfLT3VT1+rYFX/g/wDCqTQb6XxH4ruP7S8U3RLvM53iDPUAnq3v+ArV8M+I/hX4btRb 6Lr/AIbsou4imALfU9TXS2XxH8D3FxDbWvirR5Z5nEccaXALOxOAB7k0aINWdai7VxTqXBzjHPTF cjc/ErwRa3Mtvc+K9HinicxyRtcAFWBwQfcGpKOtrivi347h+HnhP+2JbYXcrTJDFbmTYZCTzg4P QZNVdX+MXgDS7J7l/E1jdBRnyrRvNdvYAV43bLrP7QPj6zvLuzmsfAmmSbkRxjzfbPdm746CmlcT dj6f8K6jJrHhvTNSmtWs5Ly3Sc27NuMW5QdpPcjNatMhVUiREAVVAAA7Cn0hhRRRQAUUUUAFFFFA BRRRQBgr4f0my1u51W1062h1K5GJrlIwJJPqepq7XH/GuDxfJ4Pkl8BXKw6lC3mOm0GSWMdVQnof 59K8/wDAv7Qeh3kC2PjZJdD1qH5JvMjPlOw6n/Z+hpiPcKCMiuHHxa8AkZ/4SzS/+/tL/wALZ8A/ 9DZpX/f2kMxvjH8LLLx3ZpcwSCx121Gba9XrxyFbHbPfqK4Xwt8ZfE3w8uE0L4s6XdTQR4SHVIF3 Fh6k9H+vB9a9SPxY8AEc+LNK/wC/tSWWv+DfHTTaZp+o6ZrJVDJJbjEmFzjOD061Wj3FqtjW8PfE vwb4gt1l0zxFpzZ42SzCJwfTa2Dmt6413SLaIy3Gq2EUY4LvcIoH4k14d4y+CPw8gs7jVb+F9HtI ADJLDOUjQEgAkHPciuCPgr4NOQJvGpkTOSrXwwf0o5Rcx7b41+OvgjwvFKq6muqXqj5bax+ck9st 90D8TXkdxb+OfjvqEMutJJ4e8GRvuW2GQ0wz6Hlj7ngdhW94Wh+CXhyRJbDUtEe4T7s1zN5rj8+P 0r0CH4o/D+MAf8JXpWBwB5vSiyW4Xb2Ok8LaBYeHdIttO0q2S3tIF2oij8yfUn1rbrE8M+KtB8Tp cN4d1W11FbcqJTA27ZuzjP1wfyqz4g13S/Dun/b9dvoLGz3iPzpmwu45wP0NJu40rGlRXDt8W/AC qT/wlelnAzgS5Nee+Pvj/YujaP8ADiC41jXLj93FOkR8uNj3A6seeO1IZ2OgfEufVvjVqHgyysYZ rCyjZprxWO5GUcgjofmIFetV47+zv8O7rwdpV5qevt5viPVW8y6YncY1zkJnuc8n3r2Km1YS1Cii ikMKKKKAEdQwwa4nxn8NvDHi1/M13R7a5nxjzgCkn/fS4Jrt6KadhNXPD3/Zz8ClyRYXSg9hcNgU n/DOXgX/AJ8rv/wIavcaKrm8hcp4d/wzl4F/58rv/wACGrf8G/BXwr4T1uHV9Gt7mK9iUqrPMWGD 14r1KilzBymRf6Ut3ZT20xYxTIY3wcHBGDXkv/DOXgX/AJ8rv/wIavcaKOYOU8O/4Zy8C/8APld/ +BDUf8M5eBf+fG7/APAhq9xop83kHKedeAfhP4d8D3lzd+H4Z4ZriMRSGSUsCoOa6HxT4YtfEehX ekamJHs7lQsioxUkZz1rpKKXMw5Tw7/hnLwL/wA+N3/4ENXVeEvhH4Q8MXK3GlaJAtyORNMTKw9x uJx+Fej0U+YOUihiEY96looqCgooooAKKKKACiiigAooooAKztZ0iy1ezktdQtYbq2kGGimQOp/A 1o0U07CaueNal+z74DvJmkXR3tyxyRDO4H5E8fhVP/hnLwL/AM+V3/4ENXuNFVzeQuU8O/4Zy8C/ 8+V3/wCBDUqfs4+BCebK7H/bw1e4UUc3kHKYejaBBo+kWem2O9bW0iWGJWbJCqMAZri/HPwg8N+M 9ZGp67b3Et0IxECkxUBR04r1CilzMOU8O/4Zy8C/8+N3/wCBDUf8M5eBf+fK7/8AAhq9xop83kLl PEY/2cfAhPNldj/t4avXIdO8mGONGbaihRk9hWlRS5h8p5L4s+CXhTxPr11q+r21zJe3JBkZZyo4 GOBVLT/2fPAdrKHbSJLgg5AmuHI/IEV7PRT5g5TJ0TQ7LR7OO0060gtLaP7sUKBVH4CtYDAxRRUt 3GlYKKKKQwooooAKKKKACiiigAprqGGDTqKAON8VfDvwz4ncvrei2d3If+WpTa5/4EMH9a5X/hQf w9/6FxP/AAKm/wDi69coquYnlPIv+FB/D7/oW0/8Cpv/AIul/wCFB/D7/oXE/wDAqb/4uvXKKOYO U4bwd8MfDHg+7nuvDmmCxuJ08uRxNI+5c5x8zHvW14g8N2Wu6Rc6ZqsP2ixuF2yxFiu4Zz1BBrfo o5mHKjyP/hQfw+/6FtP/AAKm/wDi6T/hQfw+/wChbT/wKm/+Lr12ijmDlPIx8A/h738OJ/4FTf8A xddb4O8AaD4NtrmDw1YCxiuWV5lEjvvKggH5ifU119FHMHKcr4v8F6R4t0tNP8Q2f22zSUTLGZGT DgEA5Ug9Cfzrjf8AhQfw+Bz/AMI2n/gTN/8AF165RRzBynJ+F/A2geGhjQ9Js7IkYLxxjeR6Fuv6 11UcYQYFOopOTY0kgooopDCiiigAooooAKKKKACiiigDG8R+HdM8QWTWmr2Nve2558udAwB9R6H3 FeXXn7PHgOeUumlTQA/wx3D4/UmvaqKpSJcTw7/hnLwL/wA+V3/4ENR/wzl4F/58rv8A8CGr3Gin zeQuU8Qj/Zx8CE82V3/4ENXrkOneRBHFGzbI1CLk9gMVp0UuZj5Tybxb8EvCvijXrnV9XtrmS9uC C7LOVHAxwKx/+GcvAv8Az5Xf/gQ1e40U+YOU8O/4Zy8C/wDPld/+BDVc0n9n3wVp+o2t9bWl0txb SpNGTcMQGUgj9RXstFLmDlKJtXDb9x3ZzXkmo/s++Cr/AFC6vLmzumnuJWmkIuGALMST+pr2mijm DlPHtH+AfgTTrhJhov2iRDlftErOP++c4P416np2nQWNvHDbQxwwxjakcahVUegA6VeoocgUQooo qSgooooAKKKKACiiigAooooAR1DDBrkPFXw98N+J2L63otndyYx5rJh8f7wwf1rsKKabQmrnkX/C g/h9/wBC2n/gVN/8XR/woP4ff9C2n/gVN/8AF167RT5hcp5F/wAKD+Hv/Qtp/wCBU3/xddD4Q+Fv hXwhfyXvh3SxZXUkflPIJpHyuQcYZiOoFd5RRzBynP8AiHw1Y6/o9zperw/abC5ULLEWK7gCCOQQ eoFcH/woP4ff9C2n/gVN/wDF165RRzMOU8i/4UH8Pv8AoW0/8Cpv/i6UfAP4e9/Dif8AgVN/8XXr lFHMHKcb4N+Hnh7wZHdp4a08WK3RUzASu+/bnb94npk/nVrxb4O0vxXpJ0zX7X7ZYmRZfKLsvzDO DlSD3NdRRRzMOVHkX/Cg/h9/0Laf+BU3/wAXXX+FvAfh/wAMj/iR6RaWTEYLxxjeR6bjz+tddRRz ByjI4wgwKfRRUlBRRRQAUUUUAFcddahrn/Cy7fSoL2zTSWsvtbxNalpThtpUPvAGeudtdjXmHia3 03Wfi3Z2Nxq89pMmlsAtlqBt5SxkHynYwJ45xRH4l8/yY/sv+uqN/Rb/AFyT4g6xpt7fWcumWtvF PFHHaFJP3hYAF95Bxs9Oc9sVHc+IrW58eaZp8WrX9k8fnRvYyadIsV4wHUTMoHy9flPOayPA8Wm6 X8S/EWn2urS3kps7Y4u783M24GXIyzFsDjjtn3o8ZeINGPj3wYRq+nbYprnzD9qT5P3Y688U1a8R SXx/10ueh6hfW2nWcl1fTJBbxjLO5wBXLzfEbw3bwGW5uLu3O8IkU1jOkkpPTy0Kbn+qg1W8eTRX aeHdTimjutFtdQWW7aJhIm3ayqxxnIVypPpjNYvxS1vRNQPhmC0ngv7savA8bWzh/JAJyzEdB7Hr UrVpeaX5f5im+VN9lf8APT8PxNLxprUmjeKvCl+2r3Vtpl7I8M9rIqiNx5TMvyld+/OOM+2K6fQf E+l65LJDZSzJcRjc0FzbyQSbf72xwCR74xXLfEK809PHHgaG8ubRHW9lfZNIoI/ctg4J9envVjXr +xh+LHhyJ7y1juDZXSFGlUOcmLaMZz64/GqjrZd7/gmxyTv8l+bNjV/GejaVftZTyXc9ygBkSzs5 rny89N/lq238a1tM1Wx1TTxfWF1FNanP7xTwMdQfQjuDXk/h6K90+91myvvG0mg3gvZZmgltbYLI rHKuryLlwR78YrotGXStA0TxVf32uza3bspnvmWCNQB5eDtEahSSo7VF/c5vK4fat52NWb4ieG4I Zp5bu4W0iALXRtJvIOTgbZNu1ufQmq3xL8bp4U0WC4t455Z55IthWzlmTY0ihslRgHBOATknsa5q 7ubGy8LySad4pttR0pbdWt9EvYIXDpxhCAPNJ9M98V0PxMMtx8OkmW3eLElpPJEBkxKJUZs4/ugH P0qtmr91+f8AXUUJXtfr/wAA3NB8V6frd0bezh1NJAu4m506e3XH+86AZ9s1v1iweKdCnuLa2t9W s7ie4O2NIJBIScf7OcfjW1TYJhRRRSGFFFFABRRRQAUUUUAFFFFABRRQSACSQAOpNAHG+FbrxDf3 niCO+1OxdLadra28uyKlCBkM37w7uvTj61J4B1bVLzw5dX3iC5guZY55UH2S1aPCoSPu7mJJxniu X8P6Xo2v634ouh4hv4il6zMun6w8MYUKPmKowA+prX+Et9ptv4MmEepQSwW11PvmkulkKjzDgu+e /qetRBtpX35V+mpLev8A281+en4Gj4N1uDWdc1t7fVb24QGNlsLqwe1NoNuON6gsGIJzW3rmu6fo cSPqErhpMiOKKNpZZMddqKCx/AVx2ieIdFHxH8RSHWdN2Pb2yo32uPDHDcDmrd5cW+mfEv7fq8kc VpcaeIrS5lIEaMGy67jwCRg++Kad1H+tr/5C5t3/AF0NGz8d6Beanaadb3M739znbb/ZZQ8eMZ8w bf3fUfex1rBg8Rjw/wCO9esdV1W/vLbyYri3tfJ86RN2dwRI03FR+OPWo7TUtL1L41QSaUUmdNKk Sa5i5RzvUhQw4YjOePWrWhXunTfF3xAI7qzkuhZwIAsqlxjO4YznjvQteR9+b8L/AOQSfxLty/jZ /qdjour2WtWQutNnEsWSrAqVZGHVWU4Kn2IBq/XD+Br7T5vFvi+Gzu7SSRrtHMcUqsf9WoJwD68G u4qk7pPuUuqCiiigYUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAeZfFW88Qad4j8NS+G9SuUa eWXzbAhDFcLHG0hXlchjjGc0/wAQXlxqmpeEdT0bxBqlrY6rOqSW8Ji2FdhbGGQkHIweaT4la3p+ l+O/Bb30zxpbzTyyssMjhFaFlBJVTjLECsu/tLjSfiH4e0+1tppdFvL9tStZUjJSBijeYjf3QSQw z/eI7UofZ9f11X3fl5kVL627f0/67+R3up+Jvs95NZ6Xpd9rF1b7fPS18tRFnplpGVc+wOau6Vrc Op29yYIZku7Y7ZrSQBZEbGQOuOexzj3rkdJ1G28D3+uw+Inmhgvb97y3u/KaRJA+PkyoJBXHermh SeZ4i13xVMs1rpL2sUMZkQgyrHuZpdvXHzYHGeKE9N+n3Mp6O3n9/wDW/wCAtn8QIruW9sotE1Q6 1aPtk00eU0oGMhiwfYAR0ywzUmu+PbbR9E0/VZdJ1WazupRA3lRLvgkLbQrIWDH5uPlB/Kub8LeP PDFv4i8RTy35QXl1G0Tm0mHmAIB12evFavxc1aystN0VbiV1aTUbeZQsLv8AIrgs3yg4wOeaFdqP ny/ja5N3aTXTmt8r2H/8LMthNdW8mha1Hd2ID30LRJ/osRGRIzbtpBHOFJb2ro9W8QLZ21rJZaff 6m90m+FLSPO4YyCWYhVzkdSK4DU5lOufEiALKZbiwhmhURN+8UQ4JU4weeMdaqy65FPb6Kur6tqm l+GDpsQhmsVliaecYDq7qN67cdOAcmknfT0/G/8Al9/4Nu0vL/8AZ/z+7U9G8OeJYdYurmyms7rT tTtlV5bO6C71Rs7WBUlSDg8gnpWF4r0e0s/Feg6rbfao724v1jlYXUuxl2njy92z9K5j4f3NlafF XU4421vybvT4VtJtVMsrT7XcsUd84UZ6Ej6Vp+NvHHh46xo0Qv3MllqAa4AtZjsABBJITFOW8Gu6 /wDStf8Agid3Ga8n+V1/wD0+is/QtasNesReaVP59sWK79jJyOvDAGtCnsWncKKKKACiiigAoooo AKKKKACiiigAooooAjuVle3kW3kWOYqQjsu4K2OCRkZ+ma4bwtceLLnxVqdnqetaZNZ6c8ausWmt G8wdd33jKduPoa7uSRIo2klZURRlmY4AHqTXn3hnxHocfjLxY76zpio8lvtY3ceG/d9uaI/F8v1R M27Jef6M7y/vLbT7SS5vZo4LeMZZ3OAKxtM8X6RqF4LaN7qCVm2J9rtJbcSH0QuoDfhmuL1jXn8Q C21AGGXRtI17y7lrdvNWSER/K5xnOHdScentWr8RNVsNY8Ntp+i3tvearcSxrarbSCRo5AwO44+6 AAeTSi72fe342/zByXT+rNr9DpNP8UaZqHiC90W2a5N/ZgNMrWsqIoPT5yoU57YPODSSeKdMj8TR 6A7XQ1KRd6r9kl2MuMkiTbs/WvOPiut1b642ladK8OoeKrSOwSZSRtaNxuYe4R3P4VofC2+uNc8S XM99MZLrRbGPSrgdhcBiZD9TxRD3rP1v8r/he33ilJrT0/G3/B+49ToooplhRRRQAUUUUAFFFFAB RRRQAUUUUAFFFFABRRRQAUUUUAFct8SLa7bwtqF7YavqGmXFlbSzobQxjeyoSA29WyMjtiuprkPi nrVhpXg7VIb6Zo5by0mhgVYncu5Q4A2g+tTPY0pWc1fYv+CLK4tdCt5bvVdQ1OW5jSUveFCVJUZC 7FXj86drHiRbK8kstP0+71bUI0EkltabAY1PQszsqjPPGcnFcJqHxL0u18CxQ6BqDvriQRRxRfY5 WO/KgjBTHTNbNtqEfg/X9dutf8+Ow1J47mG9EbSKDtCmIhQSMEZHHc1pP4n0X/DGELqC7/1/X/DG 03i6FdL1K4bT71b7T4vOuNOIQTBcZyDu2sMZ5DY4I61Z0TxHHq2iW9/HaTQ3FxAbiGxlkj8907EA MRzkd+/NYmjj/hI/GdzrdtDKmkLYCySWVCn2olixIB52gHGSOua8qhh1iwu7jxC9rekeEidLjjSJ gbiN2PmOF/iChkxj0rNtrddPu3X58v3+RXpr+u3/AAfuPY9E8a2l/wCGrnW72yvNLtIJXhK3QQu7 K207QjNnLcD1NQp42aHbNq/h7WNL09iALy4WJkGTwWCOzIPdgMd6wtS8L31x8ItKsIRcPfW6wXcs cEhiklYHe6qw5DHJx74rKCeENSSSxl1nxlPdMhEmnSX14ZD6oQTtJ/Gqekmu39X/ADFF3SfR/wBW PSPEPiGDRhaxiC4vby7Yrb2tsAXlIGTySFAx3JAqnpHi1b7X10a60rUdP1A2v2spcKhULu243KxB OfQ1j+Lb7SoLjR9K1LTdUS1+yPOmo25cSWWwKuC6/MpIJ5B7GovBeoC48Qww+Hb7UdT0AW7G4uL4 yOY5c/KFkk+ck9x0xzRFXf3/AIX+7VfMTk7Xfl+n36fduU4fGniAfELV7EeGdZuLSG1iaO3SS1G0 lnBkyZBw2BxnPHQV6JpN3Ne2Ec91Yz2ErdbedkZ0+pRiPyNcPqepW3hf4kX+q62ZbfTr2whghuFi aRTIjMSp2gkHDA12Gg6zDrVvJPawXUcCttR54jGJB/eUHkj8qI6xX9dS5/G/l+SNOiiigAooooAK KKKACiiigAqi2j6Y1+L5tOsjeg5FwYF8zPruxmr1FAFCHRtMgvmvYdNso7xiSZ0gUSHPXLAZ5qq3 hXw87Mz6DpLMxyxNnGST78Vs0UAVEsorPTXttMtbWFFUiOEIEiyexCjgevFcVZ+E9UvZ7ePVbHw/ pVjDcpdtHpG4tcOudoclFwOc9zXoFFHW4mrrlKN5o+mXtylxe6dZXFwmNsssCuy46YJGaJ9G0ye+ W9n06ylvFwVneBWkGOmGIzxV6igZT1LStO1RUXUrC0vAnKi4hWTb9Mg4qWOzto7T7LHbwrbY2+Sq AJj029MVPRQBnjRNKF6t4NMsReL0nFunmD/gWM1fZQylWAKkYII4NLRR5B5lHT9I03TWdtO0+ztG f7xggWMt9cCr1FFABRRRQAUUUUAFFFFABRRRQAUUUUAFBAYEEAg8EGiigDOtNC0mzE32TS7CDzl2 SeVbou9fRsDkfWiDQtIt7aa2g0qwit5+JYkt0VJP94AYP41o0UAYo8J+HQQRoGkAg5GLOPj/AMdp /ia0u7rSGt9NsdLvHJA8jUSRCV98K38q16KTV9A8zkfDPhy9g1dNU1dNNtpYbc2tvZ6aD5MKlssc lVJJwOMDGK34NG0u3vWvINNsortslp0gVXOeuWAzzV+imJJIoWWjaZY3L3FlptlbXD5DSwwKjNk5 OSBk81foooGFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAF FFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQA2WNJY3jlRXjcFWVhkEHsRWMfCXhw9fD+kf +AUf/wATW3RQBWsdPs7C2+z2Npb20HJ8uGNUXn2AxUdjpGm6fLJLYafZ2ssn33hhVC31IHNXaKPM COS3hlliklijeSIkxuyglCeDg9qSG2ggeVoIY42lbfIUUAu3qcdTUtFABRRRQAUUUUAFFFFABRRR QAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFA BRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAF FFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUU UUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRR QAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFA BRRRQAUUUUAf/9kKZW5kc3RyZWFtCmVuZG9iago4NwowCm9iago8PAovU3VidHlwZQovSW1hZ2UK L0ludGVycG9sYXRlCnRydWUKL1dpZHRoCjY2MgovSGVpZ2h0Cjc4MgovQ29sb3JTcGFjZQovRGV2 aWNlUkdCCi9CaXRzUGVyQ29tcG9uZW50CjgKL1NNYXNrCjExNwowClIKL0ZpbHRlcgovRENURGVj b2RlCi9MZW5ndGgKMTE4CjAKUgo+PgpzdHJlYW0K/9j/4AAQSkZJRgABAgAAAQABAAD/2wBDAAYE BQYFBAYGBQYHBwYIChAKCgkJChQODwwQFxQYGBcUFhYaHSUfGhsjHBYWICwgIyYnKSopGR8tMC0o MCUoKSj/2wBDAQcHBwoIChMKChMoGhYaKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgo KCgoKCgoKCgoKCgoKCgoKCj/wAARCAMOApYDASIAAhEBAxEB/8QAHwAAAQUBAQEBAQEAAAAAAAAA AAECAwQFBgcICQoL/8QAtRAAAgEDAwIEAwUFBAQAAAF9AQIDAAQRBRIhMUEGE1FhByJxFDKBkaEI I0KxwRVS0fAkM2JyggkKFhcYGRolJicoKSo0NTY3ODk6Q0RFRkdISUpTVFVWV1hZWmNkZWZnaGlq c3R1dnd4eXqDhIWGh4iJipKTlJWWl5iZmqKjpKWmp6ipqrKztLW2t7i5usLDxMXGx8jJytLT1NXW 19jZ2uHi4+Tl5ufo6erx8vP09fb3+Pn6/8QAHwEAAwEBAQEBAQEBAQAAAAAAAAECAwQFBgcICQoL /8QAtREAAgECBAQDBAcFBAQAAQJ3AAECAxEEBSExBhJBUQdhcRMiMoEIFEKRobHBCSMzUvAVYnLR ChYkNOEl8RcYGRomJygpKjU2Nzg5OkNERUZHSElKU1RVVldYWVpjZGVmZ2hpanN0dXZ3eHl6goOE hYaHiImKkpOUlZaXmJmaoqOkpaanqKmqsrO0tba3uLm6wsPExcbHyMnK0tPU1dbX2Nna4uPk5ebn 6Onq8vP09fb3+Pn6/9oADAMBAAIRAxEAPwD5UooooAKKKKACiiigAooooAKKKKACiiigAooooAKK KKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooo oAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiig AooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigArvPAXww1vxh ai+gaCz07zAnnz5zIM4YxqB8233IBPGeDjpf2WoBL8Sp5iwDW+nTSL8iNnLIhGWBK8OeVIPbO0sD 9S6ikRillIAlJ3Fu7E+tAHz/AHXwD0t7CFLTWr2K9GPNlliWSNuOdqDaVycEZY4HHPWqtv8As/RB iZ/EjspVgAlkFIbB2nJc8A4JGOQCMjOR7lhm6459KArZxxQB84f8Kms7Kae31HULiaeOVgHtwEUp n5eGBOccnsCcc4ydzRvgzoWp2VyRqGpxXC5VGLIyqSOCV2gkZ7ZH1rtfE8jNrcwZcbcL9Rit7waE GmylUxIX+Y56+lMDxGx+A2uvdot/qmmQ2xzvkhMkrjjjClVB5x/EP6U+H4DawdRKT6vYJYbmAmRX aXbztPlkAZPGRv4yeTjn6JQ9c4x6VJxwDjIpAeG6f8AbVbtGv9fnmthnfHDaiJzwcYYswHOOx/rW 1/wobwtgf6frQP8A12i/+N16wn3gR0704gDBySaAPCv+GfYhA6nxI5mLKVcWQChcHcCu/JJO3ByM YPBzxbk+AOlt9h8rW71dmPte6JW83pny+nl/xdd/Udcc+1AEjHQUYxwKAPE7f4B6ZHfzPd6zezWR 3eVFFEqSJzxuc7g2BkHCjJ546VoD4D+GO99rWPTzov8A43XrhYgc/nTS3PvQB4vc/AHS2+2fZdav Y9+z7N5kSv5X9/fjG/PbG3HfdVDQPgLEqB/EOruzlTmGwUAK2eD5jg5GO2wcnrxz7znHJP4CmL14 AoA8Z0r4CaOtuy6nq2oXE+7Ie3CQqFwONrByTnPOfwqzL8CNEbQBaw31zHqm5XN843A8AMvlggbT yRzuBI+YgYPr4+nWkaQHC9/WgDyOH4C+G0tYxcalq8k4UB3jkjRWbHJClCQM9snHqar3vwF0OS1d bDVNThuDjZJMY5UHPOVCqTxnuP6V7C42xkfrSE8DHAoA8Sm+AFqbaBIfEE6XK7vOka1DJJz8u1dw K4HXJbPt0q/oPwI0i0F2da1GfUfNj2Q+XH9n8knq/wB5tzDjGeOuQe3rsZ+bk5qbndwBtNAHkB+A /hvz0P8AaWriEKwZPMj3M2RtIbZwAN2Rg5yORjlkHwE0I3U7yapqb2rbfJjUxq6YHzbm2kNk9MKu PfrXsMgyeMUinCnH6UAeRXfwI8Ptqsk6ahqEVg6nbaoV3I5bPDsD8oHGCCe+41NefA3wzLp0cNtc ahb3CI4Fz5gcux+6XUjBC+i7cjqc816nLneCcEUqsCoxmgDyKx+AmgpaIt9qupz3Izukh8uJDzxh SrEcY/iP9KdafAPQFE32vVdUlzKxi8oxx7I/4VbKtuYc5YYB9BXrobdjOBTt+MAZ4oA8it/gN4cF tGs+patJcBQHdJI0VmxyQpQkDPbJ+prnrz9n+5QwC08Qwy7pVEvmWhj2R/xMuGbcw7KcA+or30Ln POKfuG3PegDxf/hRGh2ukO91qep3F7GjMzxGOKNuuMIVYjjH8R/DpXJ6N8KbGS8WK/1K4lV2UAwq sOPXJO72/wDr19FakAbGbecLtOcelefWYAu4MDjeM+/NAFBfgL4Yxzfazn2ni/8AjdZVz8ALFri5 Nrrt1FAVAgWWBXZGyuSxBAYY3cALjI5ODn24HIBB6/rTSxA7/SgDxi2+AOlx6fOt7rd7Je/N5UsU SxxpxxuQ7i2DknDDI4461yDfBLVdl2U1WxZlYC2G18SLnkvx8hxg4G7njPevpSbJibqSFOaxlxnG APpQB4JffBLVY4bc2mq2MszL+/WVXjWNsDhSA24ZzyQvQcc8cJrvhDX9CQyappVzDCFDNMAJI1BO Bl1yoOexOeR6ivrc/M+3qvrTH2r0BOKAPlG68DeJ7aG3lk0O+ZZ13IIo/MYDAPzKuSp56MAevoax dR0690ydYdSs7m0mZd4juImjYrkjOCBxwfyr7IA+QbeDVa+ggvrZra/hiuLeTG+OZA6tg5GQeDyA fwoA+NqK+uV8J+HCP+QBpQ/7co//AImsLVfhd4X1Gwt7SGyexFuzMs1q2JGB6h2YNuGfXJGMAgZF AHzHRX0hN8IPDLaNJaQJcR3hUhL55WZw2cglQQhHbGBx3B5rH0z4IadGZf7T1e7uAcbPs8aw465z nfnt6fjQB4PRXq198EtaS5cWOpadNb8bXl3xueOcqFYDnPc/0qtf/BzXIbqzitLm0njljzPM5MaQ OByD1ZlPQEDPqFoA8yorsdS+G3iqwSeQ6W1xDE23fbOshcZwCqA7yD1+7nHUDmub1LSdR0vy/wC0 7C7s/Mzs+0QtHuxjOMgZxkfnQBSoqe9tLmwuXtr63mtrhMbopkKOuRkZB5HBB/GoKACiiigAoooo AKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigA ooooA+jP2QgD/wAJZn/p0/8Aa1fQeoMEtJMD73HSvm/9kaeZdZ8RW6y2gge3ikeJmPnsyswVkHQo AzBj2LR+tfRmpBntJMEDAzyKAMFhswT+lKCHGQDTSM45H0ApytxgDmgDhPFbj+15dqEcDP1p/hvW INOjmiuQ+GIYMvP4YqPxZOJdYk+Rl2qFJ/vVTstOuryLdbQNJ7ngUwOubxFY7gV3lO7Yx+lK/iLT SjMryEr0Gw5b6Vy40TUArF4FXHYsDn6YqI6XetGvl2svJ9MYoA6iPxPZGQL+92HuRg/lTv8AhJ7I nJEmM4BA7eprlU0nUQxxaynBxnbUqaPfHdm3YEcjPegDqD4nsR90u59CMfzpZ/E9lG6hEkcEfMVA GK5g6FqLRBmtjjPIBGfyoGg6gAQLQkjnkgf1oA6BvFMABLRsGPQZHT60L4qsj96OZG9gCD+Oa55t C1BIw7WzEE/dXkinf2FfrGW+z++M/N+VAHRf8JHZiZQWIVhnd6UyTxNaK3yo7ccHpmudj0TUCQ5t HAbkdDipG0K+cgpGG7nnkUAdAPE1iyjHmhsdMd/rSt4jtBIgRHcd2PGPpXNJo15K4/0aSP3cYFTf 2Lfo237Kze46UAdJP4is0GHWXafRRn+dRyeJbLACrIw9CMVzo0W/JbMBVhzgkCopdJ1ARs32cnHY daAOjbxJY7SY1kLDsRj9akPii0SNTsdmI5Udq5RtHv1hEhtn2jrjBNSDR70hcQkkjpkZFAHSxeKL Rk3Mrpk9CATSf8JTYlwqrKVbq+3gfh1rm/7IvQmfs7nnGMc0xNEv24FuysOQCQKAOmfxVZr92KV1 zjgDP1waZH4ptjwI5QPcjNcpcabe2qs08Doq9WqrCkk0qRpksx2gZ6k0Ad0viKzyBIrqueo5/OmN 4ptzIwiiLIM/Mzbcj1xXNjRNTMjAQEqON24Y+tFtol9JI6iEjYcMzcD8PWgDpP8AhKbVnGIpSMde BzU48S6eUPMisB0K5yfwrlzod/EQGiBDHghuKkt9Gupdx8tU2nb8xxn6UAa+q67aXOnPEjP5kgwQ O1YGl4N/bK/3TIo/Wp5tKu4vM8yAqsfVjwD9D3rOg2G8hAY7d43c9s80AeosNx6ewANLIVRORj2q OM72JUjGKWXB+8PxpANVyQxA7VhSyFXOFXOTyK3hBiNjuG0j0rG2Ju29we9ADFZ5MdBTH5IAGKss CnOe2KgdT1HNAEZOCMfnTtwypYZxTWHAPpRgnrz9KAJt4znNNebGNtR9s80AA4zQBLu3YHNKCYzg cikUqOD1J605zkHJFACl8/d49abJhselMOMk9KFJJwaAAR4+7imvEkpjaSON2ibejEZKNgjI9Dgk Z9CasABsZJ/Cm7FPYfnQBU1LTrLU7dYdQtLe7iVt4S4RZFDYIyAc84J5965/U/AfhW/EQn0S0Qx5 x9nBgznHXYRnp3zj8a6tF2sRigoWbJxj6UAcXp/w38KWRum/slZRcKUxM7OI1IAITJyDxnd94EnB A4GNJ8GvDbpEEn1SPYu1mEyZc5JycoecEDjAwBxnJPppjBbJBxjtTCoyME47igDxe++CAEkjWWuY jMg2JNb8qhbnLBuSFz2AJHbORif8KZ8Q4/4/dJ/7+yf/ABFfQbADGcexNBO1RhRzz0oA+cNS+Efi m0MYt4rS+3Zz9nnA2dOvmbeue2elZGofD7xVYRCSfRbh1LbcQFZmzz/ChJxx16V9ScnlvXnAqQEK p9aAPjrUtJ1HS/L/ALSsLuz8zOz7RC0e7GM4yBnGR+dUq+xNRsLPU4RDqNpb3cStvCTxLIoOCM4I xnBP51HcaRYXlnFaXNhaz2kWPLgkhVkTAwNqkYGBwMdqAPj+ivo3xd8L9G1iyuH0q1h03Uzho5I8 rESBjayD5QD3KjOeeeQfnaeKSCaSGeN4po2KOjqVZWBwQQehFAEdFFFABRRRQAUUUUAFFFFABRRR QAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAe6/smSWI8U65HLDIdSayVoJQflWISDzFPPUsY iOD908jv9LagWSykI78fhXzb+yXdWieItetHg3X8tqksU2wHZGj4dd3UZLxnA4O3noK+ktQRpbSQ ZAxzzQBhq4GeeaQsGUkDmm7Ru7/WnbQOS2fSgDhPFiRx6uxRXDMoL5ORn2roPB8m7RwoXBVjyfc1 z3iWaK41Z2hGdihGPqRXQ+ECU0o/KclyckdaYGzt555NP3YTnnPpXHfETVNSsreBbDdDC335k657 DPauJPinWHj8t71yM56D/CkB7MWJxjjHanpgjHAHtXidnr+prcvMt7L5nQsec1am8R6tLJve8duw GAB+QFAHsZXb070Yx1Jx6CvLPDfiLURq9pC05aKSTDowzuzXqW4EZJOaAHlVIAxzTMDk5AxxXM+O NavdLsYmsYj+9Yq02MiP0/E8/ka83j1rUN7kXUvJ3HBxk0Ae2k4z9KVW9K8Z/wCEm1gI0LXsrK/d uT9M9abPr+pzRGC4vZJI+u0//WoA9oDNwSKheZtwA656+leUeGdantNVgHmkW7na6j+eK9ZjWLaJ FIO4bh9KAJIxnk9SO9NK4zgfWs3xJffYNHnuFfbIF+THc15THruqR3DSx3sokbg/NnP50AezBiBg 9KcuOCPzrx+HxRrUJA+2uSB0cBv5iq9z4h1W4uBK97ICOmw7QPoBQB7TJyOTmo8gZJ6ivJLDxRrC 6hGj3rOkrqGDgbcZx+H4V6wgaSJGJGSueBQBkeLnA0sg8bjgYHWuW8Oxyf21aiPafmJz7YOf0zXU +Kox/Zb7sHHIz2ORXHaSzDUrRQeTMv3Tz1pgemJwOO9PByPSom+TGOD600MSw5OaQEzD357UhDBT TVYkg4H41J95SCfyoAoaujSaVON4X5TlvQV53D8si4B3k4zXoWv/AC6JeFSdwTFeewuWdAo5zTA9 JsYzHbQockqgB+uKtAErnjb3FMgO+GNw2dyg5HfjrUo3JyelIBpcIhUjINYbsDuJU5BxW843qTgd KwjkbgATzQAw4JG7OPrQ3HPb0zUuMrjg00hScdV9qAImPzDjgipWQYBQcjrUUjDzDtzj+VIZCuM5 /wAaAHqo2bj16YpDjHIxTkbsRTWHoOfQ0AI64wRimsdzZIFP29Of/r0hQYPr60AMzzx0qRAckmmA A8VKgIA6ce9AB6kDmgEAdefah2I/h4HFDAH0BoAkx3zmo5RycE5p6EnoeelNmPy8DnNADARyCBnt ScKc9aEUscgVJlQpU7RmgBrIrJwcHrzVeBhu2n8xVuTaVAKj2qJYVA3KMEc0AObA696aNuMnvQzg sOzDvmmshzkEfnQAu0E8CmkEYxwacA69SfzpS2VCnNACr8q896+fvj34fGm+IbTVLazSCz1KNsyI wxJcIQZDtzkHa8RJwASxPJzXvxbYeD9c181/Go3J+IV8bjzfL8uLyN+cbNgztz23b+nfPfNAHC0U UUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQB79+yRBZNrXiGeQ x/2klvEkIMmG8pmYyYXPI3LFk4446Z5+i9UwLY5znPGK+Z/2TYrc+M9Yme523aafsjt/LJ8xDIhZ 93QbSqDHff7GvpzUE8y1cHjA3daAMAthTnrUZOWBxjFSZGCD+FInJ5GaAOA8SNt1qfCFQ2CQPXHW ug8GyPJpzx7G2q52se+a5/xIkiazMZjljzx2Hb9K6HwarJpm8vuVpCQv93tTA17+xt7+0ktrxN8T jBU/z+tYh8K6THarEYIyB91mA3H6nvUfxBvr200xDZP5YZv3jDqF7frXnEep34Rv9Mnw5y2H7/0/ CkB6PH4I0dmYlZkZuyvgfgKms/B2j2oYSLJPnvK3T8sV5sus6mQub2f5cAYfBqK6vr24ZXmuJpCn 3SznIPtTA9bsvD2lW0yzQWsfmocq3Ug1qlc44/OvLPAt/e/29BB5s0kMm5nUknoDz+eBXqpYngik BBc20V1bvBOgeJxhlPINYcvh7ShIFNvCpXplQOKTx3qV1p2kN9mDJ5nymRRkqO/Pb615SNRvkbKX k/J5y5NAHqg8GaSLl7llbawxsJ+Qe4FR23gvS4ZHkwZlb7oY52j2rzWG/u4iCl3P13ffPX1pV1a+ 80yC8nWQ91cj+VMD1iw8N6XaDekSM69GxzWwu3k9+4rxvSNY1IajG0VzIzSMAys3DV7FEGEas64Z hkjOcGkBBqFrDfW0ltcrvhcYIrBtvBWmWxzJK8sjDA8zH6AVa8YXlzYaI8lpuVmbBdT92vMl1i/P mMLybMmdxLZJ/wAKAPSrPwxp+nxSFysnmNkmRQcD0GaZH4Q0VZ/tCRl1I4RnymfpXnUGr3tu7NHd ylpBhtx3fzpk2s3sjAtdykjj73FMD01/CejSOHW32vnOUYgfl0rcVNibUGABgc9q8d0nUdTfUbeO C6nEjOMhW6j3HfjNew2khkgRnGHI5470gMTxlhdJyxOSwA+vX+hrkNJlVNRt5G5KMGwO9dn4vUNp D5bacgj3rjdIEa6nA0gyFcEgd+aYHou/I6nNa+nWIaMSSqCW5XNZW1WkUAhRnBPpXUwLsiVQchQA DSAjktYZECsvA6Vk31qbaRtvEbcitw++Kp6vj7ISAcgjGKAOY1tGl0q5WMKWKcA968+tgBKmOTmu 48Tu66NP5RILYB+mea4azR3njRfmZmAH1NMD0qyBhtoUUh1VAAfWrBbdwQBVW3DraRRyfeVQCV6V Oqkg8/nSAWRsRtjkgcVj55JJ69a1j8xJPA9axWc9UAxzkGgB7Mv8JxnvTVhOCc9utIHUnO3BFPBJ +UZoAZEudxOPpSbVJyf1p+VU8nPtSqqFcNwfU0AMI6bc05sYyTT/ACwMDNNZBnjmgAfaVAOKiYEH HIp7L26mkQE5B6UAMUfMcgcVIrDuAKYHzntRnBGCTQA8tnIyeTTWUe2OBjNDZ2nBOaacH7p5PUUA TA7SxK/l2qJid5POc/hSpuBINOPUZUY7mgBEzztI6dMUw53fMMnpxUhAPPTHGRSKQvPvQAP046in AkKPWiQbjjoc9aJOuDx9KAGFQCeKTkD5d3404+p60KRg0ARvkMDkmkOCdwOCKdKpzyaRYl79+1AE bPnBPJrxD9oXy/7S0bFtKk3kybpzGAjrkYUN3KncSO28ete7JCARlcGvAf2iJZP+EusITI5gWxV0 jLHarNI4JA7E7VyfYelAHldFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFAB RRRQAUUUUAfQ37I0ETXHim4MUZnjW2jWQqNyqxlLKD1AJVSR32j0FfQmorutH/pXz5+yLPEtx4pt 2liE7pbSJGWG5lUyhmA6kAsoJ7bh6ivoXUWdLR9nzZHP0oA584XnHFAcZBP4Uo5Y5Bo8oE5oA4Lx KJ/7ZnLqFD4K+4xj+ldB4MiWHS3kZgzSSE4B6Y4xWD4p3pq0nmOWwAVyOgPatfwUZntJt64hD5Un ue/9KYG5qNraX9q1veqrxMcAE4yfas9PDWjlBF9iiKIemSSOPXOa534lyXca2piLC3II3A9G/wA4 rhVurgDYs7jJycOetID1yLw/ouGiSzgG/keuPY9aH8NaPHAFkt0443s2CfxryPzZN+4yMzjuTyKc 11cSqiSTSuicKC5wBTA9g0vRrLS5D9jTax9Tk/41rbgD8vJ968p8GS3r69brFK5j/jy2RtHb616r nK5wAaQEF3ElxC0M4DIeqnvXPXWg+HbaUPdw28RYcK8m0E+oGab49vp7LRWMCHMrBGkB+4Ov/wBa vKLh5bh/MmkeR8Y3MSTigD10eGtDmKSw2seGHylJDg+4waiTwzpLF0QM7r9795kj615MMsNjMcdg DwKnR2iX91I6g9cEimB6/YaFpkdw9xbwRhwdvByFI6jH881towHB/OvDrCeeK/t2t5nWXzVxtbuT Xt+SVGAMUgI7uGK6geCZA0bjBBrMTw7oksAxawyo38Q6n8RVPx3JdroEv2PfyQrlM52nr07V5VFe XUSmJJpQgPCByAPwoA9Ym8M6EpSIxKjn7o34Zv6mi38JaNFn9wZSCP8AWH7v5YrygXErH55W3dsk 02W5nZjmV245yxNMD2PTdN0qOWR7RYGmT5WZWDMvsfTpWmCBgCvEdHmkg1G2kt2YOsin5T717XZy NLbRSOoVyuWHoaQGX4rRX0uTfgLjIOOhyMVymgLI2qW+1grB8g4/z2rsPEh/4lMufb+Yrj9IDf2p AImKOW4bsDTA9CU7mz/Sug064863AOA68YrFRcA9cDtTdzIcqce4pAdP1FZWsXIYLCjZ5y2KpfaZ 9u3zG2+lQE59jQBT1lFbTbj5c4Q8evBrz21z9piVepcY5xzmu/1t2GlXO1gDsOM15xDIfOUAHOc0 wPVUz5aBuTjB+tKQQ2agsm86zidG3LtGDjGasMp4x+GaQDXzjseKxMKZTgtjnAFbb/LE5xlsHBrJ XIAOcN9KAItpBztyKFG4/wB3HpUgdh3zz2pr4wSuRn1oAUrjHzbh1Bpqk7e/HHWkQZ65Ip+Djg0A CqzcFqcv4mmr+7OCDnualJUrjNADctyRimE4B96ex2jIGai3bn5HFACFS2cZAA70mMYAIzT1Y8Ak HFOwduf5igBhJXhj1puQAD0NOl2jBpZEyMg5oAYWO7gYNSOWbn17U2PnqalBHpzQAxQuwk/dPb3p oVcZ49zSMByCT7VIgAQepHOaAGnOAN3Smk89Tj1pQvIAyadKmEx0zQBEXBbJ60quM85quB+easxR 7QS/PtQArNk84zTozzx19xTMfKAF6enNLk7eAaAJywXhjzXy78ZL+8vfH+oJfR+V9l228Me5WxEB uU5A/i3F8Hkbsdq+nwAI8nrjPNfOfx8toYfHKSxIFkubSOWU5J3MGZAfb5UUcelAHm1FFFABRRRQ AUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAe5fsp6EL3xTqes/bbiH+zY ki8iI4Wfzg4+c91XZnbj7205+XB+mdV/49Wx2IzXzB+yhPKvjvVLdZZFt301pHjDHazLLGFYjoSA zAHtuPqa+n9RTzbVucbfm+uKAMLbycHinMQDzTV+UE8/So9vrwKAOD8TSpLrFz5YICkKc+o610Xg +dpNPMLR/LEflcdGySSKwPEsAh1Wbe27zPn+me1T6Tr7WFkbfyhIAf3Z9PrTA7O4hjmj2TRxyIed rAEZ/Gqv9kacUCmwtdgOcCJQPxGK57/hLiAd1uN2CBg8ZpsviuZogIbcRsR95m3UgOlbTNPSRnFj bbnHzHyhzjpUdvoumxxy7bK3xIfnygOfzrCi8VssP76BWk9VPH1pLjxXyPs1vuAGTvbv+FAHVRW1 tCkYhhSMIMKEHAFDZPtXMReLF+QzWhHqVbrUc/i2Vi4gt0A/h3HJH1oA6kxxyJsljWRT2YAimX1h aX9qtvdW0csQOQpGMH29K5dPFdwFAa1jLDgkMRmrMPi5UJE1o2e2xs0AX5vDekzNF5lhB8gwNuV4 9DjrVuHTrK2DLFawqD6IOc9a59/FzqwJtV9/m6U+48VqQPItjkrklj3/AA7UAa9roum2zq8Fjbxu pyHVBkfjWgBsPXIrjLTxfKHYXcCFP4TEMHP4mrEfixxHlrQE55AbH64oA6iRVliKSKDG3BB71QPh 3SZZt72MBb1IrHh8WZf9/alY+cFXyR+YqRfFkIiJ8iXzOwGCKAN6XSNOeFI3srZkT7qmIYX6VTXw 9pCTrImn24ccjK5H5dKzY/Fq+YwmtW6cFTSS+LUCYhtiJO29uKANs6ZZLKjrawBl6bUA/lVtcLx0 Fcuvi3Mke62wn8eGyc+1JJ4sIhH+jDeW7njH+NAF/wAWMyaSxGSN4BI7CuW0lgNStS/+rMig/nVz XNeXUbTyYo2jGcvk5zWLDIIpY2dSyggkA0wPVg5wcCmkDHHeuTi8Wybx5tshT/ZPNOuvFyjH2e2Y n/bPH6UgOqBIPWkLYYVysXi0FD5loRJ/svwf0ps3i4/L5dqffc//ANagDW8Svt0a7OeSuPzIrgbO MiaPP94Vv6n4jivbMwrbcsPm3NwD7Vg2xc3tuoYjMi9O3NMD1S1Gy1iPlhMqPkB+77U45Y4zjFI7 EAijOGxikA19yoxwTwfxrGJO09Cf5VsSSBlJzjisR+o2kk9aAFxl8nCinFlA45+tRgd2YZqUICck Ad+aAGIdxwvGetO+YZxz65pQF3H5T6D0pHYEEMOPSgBFB+9xj6UmWkc44HrmkxkjHpxxT1RwAc/m aAExkbTyPakJw2fSnr1IODimjDMBnA/nQAAg/T0qRCQuMVGRhiwB4oOQucmgBDHkk5GAadkKflz+ dIDyDnIPbFOfBXgAUAIT325HtSqCR0wfWlA+UZY+9DS7TxyKAEZN3UfjTimV4+lNLccZpVOMZzgf rQA37jYB9alwGUZ5qLIwuM5zxmnIdmQOQeaAITHtc4qQ/Lwx4H86JPXuKaSrqMdTyaAFHy8rjFOD jblfvU0x/KSOfrTeg4GQKAHA/LknNfOPx2vorzxz5USurWdrHBJuAwWJaTI9sSD8Qa+iyRn5eMda +d/jz9m/4TeP7MYTJ9jj8/ZjO/c2N2O+3Z15xjtigDziiiigAooooAKKKKACiiigAooooAKKKKAC iiigAooooAKKKKACiiigAooooAKKKKAPX/2XIbiX4lStBc+THFp8rzp5Ybz03IoTJ+78zI2Rz8mO hNfVWptttWVc5bg181fsm3kUfirW7JrSNp5rJZluTjdGqOAyDjOGMik8j/Vjg9vpq7bNrL06d6AM HKgDIIFIxUY4prZJ5NAUnoRQBw/jFW/tUMynY6jaT0OKq6do1zf2gmg8pUYkYLY6VN4xluDqeyVS saD90OxB6mtvwXbhdKEoJJlYkjsMHH9KYHOnw/qYLkW/y9MB1JP61Knh7UPJMhEYbtGW5/wru2OD imMvA60gOMi8OX5jff5aMBkDdnd7VBD4d1QgnyFUr2ZhzXepGcHnpUjJxnPagDh28NX7bTuibI5G 7GD6UreHL9SqrHFg/wAW/j/Gux3EE7hx7UvLEdcelAHJv4YuEjLRzJI/93pTLfwzdSh/tEiwAdP4 ifyNdqFCjJ61XbLscdKAORl8I3WM+fEST74x61JP4WkWNFtrhWbHzb+OfbFdccqoUZNKAMA459qA OMm8KXMcZMcsUjgfd6Z/OiLwzeNb7nkjSQ9E6/rXadeSDSooJxQBxU/hS5FvuWdHlJGU6AfjTLPw tdyXBFw6QxgfeX5s/hXbuqqTkHNN4PTNAHHyeFrpPMaOWF8fd5ILf4Uy28Lzywl55Vgl7Jjd+Zrs h09DSkAgHP4UAcTD4WvXdhI8SKOhzndUsfhe7+zszPGso6RnnP412K8cYpRgjJzmgDjLXwrdPLm6 kWNO4X5jT38JTFTm5jD54G04xXYZ7kmg9fUmgDik8KXO757iNV9QCakk8KXChjDPHIAueRtJPp3r sMcGnr8oPvQBwUPh/UJGKm3CH1ZxilXwzqDMQyIgzjLOCPrxXeAgAcCnZDDnH4UAef6n4cubC1Mm 6OVRy23ORWTau0dxE8eNysGBI7ivRdfVW0m5V3KAryw7V57ZrGby3WRWKGRdw9RnmmB6jGwZVbg5 UGlzg5IpsQARQAAAMAU8AEnHH1pAQygbTjAHpWNj5sDOQTzW433W2jjHpWOQXfgjDc570AMTaM9C aQBsnJPPPNCDYQQBinghie2emaABzs7nP6U1wT94/NTCCX5Ofehs5GGyaAFACEAP9cU7cXAJJx0N AGFGMbge/ekYts2kDr2oATcUK56ClJ43dR24qNgxwuRT1Ukbe3vQBJjcQc9PbFKSoyByaYq4XgHk 04pwMt2oAdnJ4bHtScKPmP5UKvyjpx0PrUZyclic+mKAHtnsc4pHHy5OT6U35lIGO1OwAAcDNACH Pcj6CpegpidSCc56cU7kEA8kc/hQAEZPHam7cHJGDT8gYYH2pjuMfMRkdqAHEZJB/iFRbQuSB1I4 pN+QOTUjDK/hQAu/AAGcUxTuUk/rSZYLyvzeopDg5yCpFAAfkzjr3r5s+NyWi+P7lrWV3leGJrlW HCSbcADjpsCHvyTz2H0grbiM9q+b/jbcxz+P7qOO3SFoIYo5HXGZW27tx464YL34UfQAHBUUUUAF FFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQB9Dfsk3d0bnxFZC1RrE JFM9yNgZJMsFQ8bmDDcRzhdh4y/P0Nfov2STcMjGfxr5o/ZMhvT4r1ueMv8A2alkqTASYUytIDHl c8nasuDjjnpnn6bvGQW0u7oVNAHOKcOPSnMQScA0ir6jFPzkEHigDz/xNdSXepuhUJHASig9fc/j Wh4W1aGzspIrqZY1D5QEE8d+lZOuxvDq1xG3zEvu3HvnmqUEEt1OIYYzK+M4UUwO9l1rT48FrpGy f4cn+VH9uacdwMpBA7iuGltJUO3yZFbOCuOhqRdLvWXAgdR3yQKAOwXxJp25lYyAAcHbwakh12wn DN5vlBf+emBke1cLHbXE0jRJC5ccEEYxTJLG7WcR/Z33kdAMj8+lAHcPrunDDfaQxPZVJpn/AAkG nIgY3I54ChTmuFMMwbb5UgbOMFTT5LK5A3G3k2qCSdvFAHcjXrAgmRnTjIBHX8qlTXLEqSpbGM/d rzwxzKq7Ym+bpkdanWKfaxeKRFHXKHH50Ad3Br1g0bPuYbezcE/Sppdaso4VkEoYN2HUfWvPre0n uXxbxs+OpA4FW/7NvXB/0dlwOpOM0Adjd69ZwxBkcTFudqH+dWRq1kLeOdrhFjfpzz+QrzuO3lbe FikbbwxCng+hqUafdfJ/o8mH+7gZzQB3B1/TmDEz4K8AEdfpSDXtOCZNyu7sO9cTNpd/GNz2z7Rz kYJH4VE9hOZvL8pvMxnb0oA7ka9p7TshmAA/j/hqOTXbQFdpZkJ++Bgf41wiwN5vlIrNIeNoXn8q m+xXYUE28m0Eg5XFAHdHW7Extsm3EHlQOacus6eFVnuVGf4SDmuEbT7wMFW3kyRngUw2N2j7XgkD Y/u5/WgDvJdb05GQNcghujKCQKR9csVeNRMZNwzlRwPrXDzWc8BX7TC6KeckcfnUQLA4xkdqAPRP 7XsAyr56E+i05tYsdj/6Qm5R0A5NedMHR8SAr7GrVvZ3MqGSKNnT1FAHYw6/YvMEbzEPckDH86kG uWAkK+bkA4LY4rjDaXYLZt5PlGT8p4pV028lj3R2zkEZzjFAHS6lr+nS20sZLOSMBccP+NcnZv5d 3DICMo4YH6HNLdWFxbojXELxq33SwxmoIGEcqnpz1oA9OVg4BQ/KQCM08beBn65qvbkyQxA4BKA8 /Sp1UAZpAO4VSR+WaxN4LsANoyetbMuNhPJ49OlYbHDnJ+bNAEm4buBn2o2JnBBqMjkE9/fFSoM/ xA+1ACsFyOORUbfICQf0prgsSBn04o25HU5HagB8bbgfl5pZAePlwfWmhivBGaTec4OD+NACLhWz ySaeoyQe3vQjYX3qPfg9eaAJdzMPlOKWMg43HketRNKNuOKA2R8oPSgCwzqoODmoyV61DkYyBzmn F94HoOwoAUyZOMfjQ3XBNCsV/hB+tIWPAwCTQA/BUcH3pzg7QM49qHOCPUjrSkhhnrigBsfK44wa Y0JJJJBNSHAGQVx/KlXOOBk0ARqiMgxwaVflG0kEetOGT1AyKNoxkHrQAjbhkKBj0prFmJB6Z64p 4cqSGxzTSfmKnGPSgCJwqH5Qc+tfPnx/iij8a2zwxojS2KPIVGC7b5Bk+pwAPoBX0MAWUdeD0r58 /aDGPGdl/wBg9P8A0ZJQB5jRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQA UUUUAFFFFAHt/wCyh9r/AOEy1jZ9o+wfYP3u3Pl+Z5ibN3bdjzMZ5xux3r6Z1KXy7Q8feOCa+c/2 THvhrHiKOKGNtOa3iaaUn5llDN5ajnoVMpPB+6OR3+idVX/QWye4oAxmPmMMUcAeh/nRC6qACBzS sCW4FAHCeJ5GbVpd7KxUBRtPQen1rW8H22y2nmA+Z2A49BWH4hCR6zcBEC8+vf1roPBskjWEwdCF 3/K3r60wN3CO371F3DvTzGhACAY965rxzrFxo9pbG1KCWVyPmGeBXIReONZQNl4W9MxDj6UgPVGU KGHWgKjJtxjPbivKh411VCcSKwf725Rn8PSo28W6rLJuW4ZABgAf19aAPVDCpPzKCR0yKlWJXXa4 G30xXmOn+KdSOo2y+Y8zSOIxGTw2T/nmvTPMbAGMfWgBxhhAx5atjplRxUYjVTlQPwqnr2qxaVpk lxOxHGFwMkt2ArzhPGGofa/OikY9gjHK49xQB6vDEqoQsaqGOTgYz7087FBwvT2ryW48Za0zb/tA UjpsUAD8O/40xfGGuAZe5DDO7BRQP5dPagD1wEMpG3g9RSgbSCiAH6dBXmek+NtQF5ELxYpYWbBC LtP4V6Uk6Txo6Z2uoIyOxoAcQMngZIqHyI+oSPPrt5rN8W6hPpmhXF1a4Ey7QrEAgZYDpXn48a6s 7fPMFUjB2KBQB6myKjZVQD7UhKt1GT9K8oHjDU4tyx3DEN3kG4/h6VGvinV8bDdSGIc4GAT/AMC6 0AesDbgALg54pwRWzlQR34ryy08a6jDchpGEsWfmVgM16nbMZrSOQcF1DY+ooAyfFhH9kuAdhJHI GenauQ0kM+owoqiQswwG/Ouv8VgjRXIYD5gPzrkNIuTbatauF3AOAR9eP60wPRlihwwKLk9cqMU8 JGqj92gA6fKOKYRg8/rQQPQUgJEkBYnAB9cUckZHI/nTEXHPapgRjjkUAVdS2yWE29QcKeCOK88t E865jjIQbmAGeld/rC50+44JOw/yrziDd58ajJywAApoD05YyVGSC3f3p44I44pYV2qoIHAAp5TP JPNICNiQrE8YrEdSZCTnFbkg2qzknaOtYzDKZwc0AQ5BPHIqQFPXP4UeWQOnPtSeXjkNg+9ACKpw T0PbFODhSQc/hTcHHJJNIqqTzQBJ5md3HemH5Rn5ee4ppYfwqAKVRkckHHbNACMS/vS4AA4pXIUg AAVGScYzQA4hMHk5pUBIIBOKZwMEg07ALcDA+tACbevXinJkgjjFLgbh7+9Ky4X5c0ABAUkjmkjU mU9iKcUXflieOakXkEjgmgBX+6FwT71EOu3J6dKVmO4Y6c5Ap8eMnoKAIwTtwQeKlXoOvFHVePzp sjhT0ODQAb235A4+lOyM/KMetNaRcBRyPpUZLDjnBoAc5LPxijGcZbH0NMXhjk0/CjJJzQA5wQNw xx3FfOHx6vo7vx4YY1cNZ2scEhbGCx3SZHtiQfjmvo124yucV89/tBgjxnZZOf8AiXp/6MkoA8wo oooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigD339kqS+GseIoo oYzprW8TTSk/MsoZvLUc9CplJ4P3RyO/0bqKg2UnGePy5rwD9kL/AJmz/t0/9rV9A6lt+xy5bHHF AGEqDqDz6YprHIJwRS52kcZz6007cY6496AOB8TeU2s3CoWzxnd647e1dH4QhdNNLs+6Nm+RfTHW ud8VSRza1J5JJZcI3HGRW94JdmsJ43bO1+B6ZFMCx4i0C21zyTO7o0ZPIPY9R+lYn/CA2RUrFczo f7zYY1a8caxc6ULZYYx5UuQWzjkdq4aXxHcRlvs37lj1bJJNIDsJvh7YkLsurkY+9v2nP0wOKbL8 P7QvGY7mWIL95QM7vx7VyS+LNWmUK1yV2cBl4NFx4n1eTJe/k3dPlwAR9BxTA7Wy8GWNndxzJLcS PGcgsw4+mBxXUA7uDivNfDHii+W+jhnAnikOMLwR716SB8wwCaQFTW9Mg1fTntJSygkMG7giuVi8 A24uQ73cnljqiry349q3vF99Jp2jTTQ5EowAR2yQP615yPEmrF97Xj5xge35UAdk/gTT/OJQyshG NrSfd9+lRr4AtVkJN1KYj0XABH41x7eItW+bF7KAeoB4ps2v6nOsam+mUIcjYxXn3x1pgeiWHg7T oblbh0zsO4Jn5a6NjnpgV5LoHiHULfV4XuriWeJiEcOdxxXrDHgHBAIBweDSAhvLeK8tZILlBJG4 wykZBFck/gKwYsIri5XuM4OB+Va/jDVJtL0l5bQETN8obGQvvXmx8S6wwLfb5s4wSDjNAHZJ8PbL cDJeXLKOcKFGf0ok8A2QnjZLicRD7y5BLe3TiuSi8UavhA17I2zpnGfxPf8AGm/8JHq4PF7KMnJI PX60wOzi8DWK3vnpJIIf+eLjdg/WuujTy0VV4CjAryTT9e1X7ZGxvrhi7gbWkJXk+nSvWrWQywpI UZSwztPakBl+JwraJOW6qVI477gP61y+goW1a1IPJcY4ziul8WeY2mMqEAZDMPUCuZ0Fsata/wAO HB69aYHokgDEY69Kv2WmjIaYcEdKz1T5wScc9a6ZVAVVySQMZpAVJdOgkj2hAp7FeDWPdwG1kKcn PQ10QHJ61T1SINaMx6jGKAOV1aRYtMuZGOMIfxrzu0JM8eOu7iu+8RqP7JnUsFUjqe3f+lcFZkR3 cLkFlDgkZ6jPSmB6fbgi2jDtlgoBPrUp64z0psbgxK+08gEAjsaVSD1pAK2CjenWsaTnODjPb0rX b5VY8YArJ68MBQBBuIYk5pXGRwf1pjnJK9qcigY3A0AKm0nHI9ahmBhYHPBq0Au7IA6etQyxJI/U ke9ACptZCQTg0jDJAzk0qgRLtY8dqbglfl7dx3oAVwO/b0ppGDyOPamqHHIHPfNSBiCNw60ANTLE A9KlAVvr7VH3JBwPakMnsKAJGXJIx1ozzgg5HvTQ+RzT1favH60AMIw2cZBPr0pznaCpzTE5JycG pGAc4HX3oAawyVKEdKEG3cGPAPb1oLbQcZznFDybgeep9KAHk+WOOaiXLnB4+tLwo4PXrmnZAjYK OnXPegBpGEBHByaVtoQHPPpmo/M3nbnpS7Dt5JNAAxYY/lUiA8ZI5phw3qCBzTlYE4weaAJNwPBx n1r57/aHIPjWyx/0D0/9GS19BsScfKePUV84/HqS7fx5i6iSOFbWNbYqeXjyxJPJ53lx24A47kA8 5ooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigD6K/ZEBP/CWf 9un/ALWr6B1M7bR8AHPr2rwD9kE4/wCEs/7dP/a1fQGqBWtT0GCDz3oAwctnGMnvSOOc9fan4H0p Cu4884oA871ze2s3RZdp34x6gcD9K6rwlAi6SHUYaRiWPrg4FYHiyQS6wRGMbFCNxjJ5Of1FbnhK R5tKCbMCJyoIPXv/AFpgaOraXaarZGC7TcgOQQcMp9QaxLnwbojQlBDIG7ESHIpnj/VbnTdOihtW 8uW4Yr5g6qoHOPQ8jmvOW1jU22k39wCo4IkIP/16QHoNv4K0dMl45HAP8UhGPyq03gzRTudbdhkY wJWI/U5rzSHVdRWbzDezs/B5ckH6jpTp9W1CZmLXdyd2cgSED8qYHpWj+EtMsLxbq3luJJF6K7gq PyFdOFxzx9K8s8I+J7+K+gs5QJ4GypyPmHpzXqJf5QOBSAhu7WG8hkiuI1eNwVZT3Fc43gywQgRK ojP3t/J/A074gXs9ppEYt5WhkeQZaM7SR6ZFedTa3qD7Ab25O3kHzD+vrQB6AngbTMOZHk+ccbTg A+op8XgvSFiKyo7uRhXDlSPw6V563iDVHt3he5dlbqSBkfQ9azd8m/duYt2OelMD1zTPCun6ddef GrSsvKeZg7Tit9skAnFeLaBeXUerWyQysA8i7hknvyfyr2QTM2BtOPWkBHdwRTROkwDRkc5HFc5d +EdIuZBISYw33vLYDcfUelaPi6eaLRJ/s6sZGwoI6CvKJdUvnh8p7mZoj/Du4oA9Eg8F6TDGwfe/ PyuWwR9fWrMXg7SY4h58ZkJ/iDlf5GvMINSvLeMrBdTov90McflSS6rfSFS93O2Dn75pger6f4X0 60uFlhiDbTuVW+bB+tb5O0dOleOaT4g1SHUoWhuJJWZgvlt8wfPbFexyBcZHWkBi+JZUOmzFwc7C K4zSMC/iPQBgc4ziuw8Tof7JmH8RGR+dclokbf2rbbV35cAjpmmB6VkEHPUdhXQWFws8C469CDWD kDO4U+JigOxsD0pAdKBzWZrZxAgVjkt09apre3CjG/jp0yaquW3EliWJ70AZXiDH9kXO84UrgtjO P8nFcDa7VdNx6kV6Fr8iQ6TOXQujLgj6159b4NzEcrjcBj8aYHqCYEKDI6DkGl+9k0yL/VqMAYA4 9KXqWG7HpSASQAxyBgemPwxWRIwCADH51qybvLYdj1rLf7zAjmgCIHPQjI6Zp0jNgAjj2pV2suSC M/pSNkAAnIz0oAIwO2eKE4fHanLgowxnnFCg/Meo7e1ACSAMOe1MwAwxkU7rketHyg+n40AMySDj AI9utIOVIOc+tSP/ALOPxqEpknOR9KADJUFeMGmcdKc6DGcnPpSRjoMUAPUZPHanP1xmnKuSccUE ELgfjQBEflyV5zSRqd29qlIAxytKSN3BB9qAGMSzEAcE01gNvB5pz8nI4FNBCOOc47UAOA+UZH/6 6b5nzA4GelTMMpjHJqAoQQfSgCQgAfKMH1pIwwJwPzp2eCCc+1NJIIU4x9aABvvcgfhTRgSf7J6U AdjT1XG4H9aAJjhlU8e1fMXxrkkf4kaokkjssSwogZshF8pWwPQZYn6k19KgEfez7V8wfFqOaL4i aytxcfaHMiMH2BMKY1Krgf3VIXPfGe9AHIUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFA BRRRQAUUUUAFFFFABRRRQB7r+yXps0vivW9TVo/s9tZLbOpJ3FpXDKQMYxiJs89x15x9L6kAbVsj pg184/sk3s0es+IrNbSR7ea3ime5GdsbIzBUPGMsJGI5H3Dwe30hfHFnL1GRigDEzng/lTGJHTAA pMADOenc0Ehh0A9yetAHn/ii5W41a4CKRtwme5Ird8GRGLS2fLtukOVJ4GPSuY1os2r3YKnd5rYy O2eP0rV8LaqLFngvGIhblcLnB79KYHYTQQXWBPAkg6gMM4rLTw5pCzzN9hhbf13rnH09KY/iexSQ gJcFR0IA5/WoH8VWexm8qTcDgKcZI9aQE7eFtHQYitPLHfa7c/rSWnhjTIDJviMwcYxLyF+mKX/h KLDapImBJxgp/wDXouPEmnqilGck/wAIQ5H50AWLXRNPtZA1vaxK69HA5zWn91eOtc6fFVslwU8u Qw4+/wB8/Skt/Fdu8yrNBJGpz8wOfzFAG9c20N3A0VzEssbdVYZrKXw1pAdcWERK9Nwzx/WkHiaw 8xl/ehR1JWoX8U22W2QTEDoeBn9aAC68J6Q0eEgaEk5LIefpznio18JaU9usbo7kcl84P6VZXxRZ +U2+KbgZxjg1Ti8VWqzLmOYIRyQOQfTFAGpYaFp1ht+zWkKyAY3lAWP41pgnBAGBWBceKraOcJHE 7oRneTj9KU+KLLaMLIRn5vl6UAbUkSTIUlUMrDBBNZdx4b0qePZ9kjjbOd0Yw34nvVZPFNoSVeGZ FA4OAc0xvFlqHISCUpj7xIz+VAFiHwtpEUewWiMc5Lvyx/Glm8L6TJG0Zs0GTncPvD6GmL4psON4 mVs/3c0n/CU2Ak2hZj7hR/jQBZtPDOlWt1FcwWqrLHgrg8Z9cetajkeYBWQniewIO7zlI/vL1/I1 RbxVaEuVimJHK8AZ/wAKALnizH9kSMw6EY9jmuU0Jj/bFoFHJkHStHWtdi1CwaEI8RJBOeQaw9Pu zaXcUqqpKNnIpgepsSVxilX5UIANcwniyHad1vJn2Iqwviu0yN0cyqQCW2jg+lIDoC/Y5xQ55JwA BWB/wlNiSw2zEAZGF6mibxPZpFuQSs5x8m3p+NAGjrPzaZcEkDCHk9Bx1rze1X/SYtwyhYE464zX W6n4itZ9NkijV2kkXGGGAK5iy/4+oo8/ebGWPTNMD0qJ90asv3WAIpxIJGRwfemJGUVVzkgAE+tA BGT2pAK7YjYZ/GsdXYhgck561rscgg+nasrgE9880AR4JJ68Usq+/B5NCgsRgEUkgwpORgdeaABc jkZwaEZmB6Y9KZFMqgjBYUvAJOCB6UAOVugA5pp4Pzc0D5iccUEKeOc+tAC7sr7U0EgEEZp64HTr in4wAQMGgCFn3kYGG9qcgAIJp4jG/cepp7BVYKRQBGmR97FDIeSRxmpSoK4IGKYrbkwVIoAjxxty R+FKU2rxSyjBBK8Y9aQDecZ7UAOZchc/KKaFGe2fpSZBPcmnP8yqQKAHKDwR0Pao3BBIxxUqHag4 7evSmvg9W+mKAEjYAfMMGkI3HAwD600FmcZ+mTTsKGyMY9RQA1V654Ipwcj3FP4OOn1NIe2ePWgB Vy3zMRXzd8d3L+P5VNn9n2W8S+Ztx9p4J8zoM4zszz9zrxgfR7soJIx7V8+ftCHPjOy/7B6f+jJK APMKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooA+hv2RbiFL jxTbtLGLh0tpEjLDcyqZQzAdSAWUE9tw9a+htRRntJBuxgZr51/ZGsrd9R8S37x5uoIoIY33HhHL lhjpyY059vc19E6nuNm5XPvigDD6pzyKXcvAbkUzDAHPaiPPf+VAHDeKHjbWJvKk3kADp0PpVews Lm8GYU37eCfSl8QRMus3WTtLNuGRjINdB4OtXS1nuHJ2OQqj1x3/AFpgYF7pOoI4AtSyg7TtIJ+v 0p6eH9RlUN5SRjOPnbBruEweR1pykjk4+lIDg59B1G2kQeSJg/H7sk4/PpS/2DqbyAG3K57lhj+d egIeD0OOlNJznjvQB562hajhs2xG04wDnPuKZBo+pNcrEbZ1J/ibhR9TXobcY55NK4DY55oA4W60 O/hK5hEvoYjmnSeHNRjAbYh45ww49q7pVyeO3amupI4NAHBvoupeaI/IJ/2gRt/OnL4d1LYxMAyB x868/rXeBScgc8UBuQoBJFAHnUehapJz9lbYP7zBT+pqRtDvQufs7hiMcEGu/lzkDOPemptBoA89 j0DUZVkJhK7BkBjgn6VLbeHdQkTf5QQHgiQ4P1rv9uRwetICwYqScUAefDw/fus2Yj8nTn730qSD QNQckfZyOMjc4GP1rv1IY/SmOMMcDNAHn1xoepIcm2LZ4+Vgf5U1NB1AJxavn6ivQ2UcHrUecN1o A4SLw9qUwYGERr0yzimS6HqFtG2+AMoOMpzXoqjFDAfxd/SgDzs6NqIyTbSAL6YOalGiagpQNbPl zjscfXHSu9UDnr7VIMZGTyPegDgJdA1AFj9nOVOMKc596fB4d1J0P7kJ7M45rvRg5o3AYywoA841 LSr6wQvLCTEByQQQKzbYu8q5Pfr6V6H4mYnRp9pwMZJ9q4K3CmVFBIDHoPWmB6bCpW3RT1CgfpTw Pf61Gh/dIcnO0Zp4zkk9aQAyBVJzmsdZFOSQcDitgtkMO2PWsiRBzt6+hoAaWcyFlxjp9KawDDJw fpTiuMleO55qMEMxzxn3oAcq4DYGPSmtkjJ4PcUu5sAKSKQ8k9fpQA0g4yAaQHHPen9iORQF6ZBo AazEnjFThuOOcGhVQLwSTmgY5GevvQA5nCAAdTQu2QDPHNRFWyGPJxjk0BQVUAYIz0NAEjnYBjmm OTsODg+9Jk7R6Dt3NCjcAGzmgBiNJ91sFfXHSnbDuOOPel5DYwSKHAz7DpzQAwELyckU5sdRnFIM MoyaaORjGSfSgCQnPygcYpOgI/pU0S7Rg0xo+flOM9qAIypLc4x9KVEK5yuV96k6HBGaaWCxkfxU ANDjoBgdqGBP+FEZbPBB9DUhTacswBoAj24Oe3cGvmr423M0/wARL+KVw0dtHFFEAANqmMPj3+Z2 PPrX0wD8pzz6ivAP2gdOsbbxDZXtu+L69jY3MW7OAm1UfHbIyPT5PXNAHlVFFFABRRRQAUUUUAFF FFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAfQP7JF/bxah4msGfF1PFBNGm08ohcM c9ODInvz7Gvoe/d1tG24IJxXz/8AsjjP/CV/9un/ALWr6A1HAs2z2IoAxsnB4FIp5OKQ/KvJpscm WAPSgDifFkkk2qsrrsEYCrx1HrWr4T1GCOye2nlVPLJZd7dR3rC165efU7kyMTtcov0BwKoLE7km NGbBxkDNMD0Zb6zyoFzEd/3QGHNPiuoJSVSVGPbBrzXazDC5LHsKJoZo0VnjdFblSykZ+nrRYD0K 61Wzs22z3CK3oMtj8qZJrunhci7iz9c15+sMjjDI2PpTTGwmEe1s/wC7QB6VHe2swOy4iyOvzYpp 1KzjdgbqIOOo3dK89S3lEbv5MmxeWOw4AqMJuO2NSxPIA5oA9GN9BuVPtEI38j5xzUf9oWiZ3XkI P+9nNed+XOpIMbEDkjbjFOSKVwCqsQT2HSgD0Ww1e1uS4jmT5Tg7jg//AKqa2raeJWU3KFh14OPz 6V5/9nl3FPLfd16HNSW9hdspKW0pA9ENAHcPrVgDg3sIx6GrNtdwXMBnjmUxjqxPT6151JZzFGYx vgHB+U8Goza3MSr5kUsYc4G5SNxoA9HtNRtLid44LiOSRRnappJdTsknML3EaSg4KlsV5vs8uQhn KuPbmnC2mIMhjcJ/e2kigD0VdUsE+/dRZzt+93qWLULWfIguYXI6jcK8yjBMoCqWPXAGeKlUqMlc EehFFgPS3ubeJNzzRIucFmcCkSa3mlxFLG59FcGvM5IZFIDqyhuRuUjNEkU0ZVnikUYzkgjj1oA9 Le/tI5DFLcRq6jJUsAQKhh1ewuSyw3MfyfeycfzrzoEdRmmME5JHzUWA9MTULQp5i3URQ9DuH8qk t722ud5t5o5CoycEcCvNUgkVN207QeuKTdJuO3r0wO9AHo8Gp2UzFIrmIuG243Y59s9amnlt0OHm jRvRmANea3EMkO1biNoyRu+YYOKIUkcAqrnnAwM0Add4kvrcaXcRJIjSOAoAOe4/pXLaWiLfWnmg BRKu7ntmq84J+Uj51PPrUtkQ1zCWUn5xkeozQB6fsUgfKMDtmmnB6AUu4sgIyM9iOaQ8cgCkBHKM xsMgHBxWXjB561qSOPLORzgnNY2WADFuDQBIeQd2RzSMDxzg0Eg5GM/0poBB/wAaACTjlQc0yQhh wcGnkErnd1PWoiMg5xmgBQCfSplATgYz9KjXbHxnt1pxBIIzQApbDMD69aAQCcgntmmAZBzjGaPN 6qw/KgBGkKr83UdKb9oAUfLzTSp3HAyM1L5C55HFABGd67gv4Zp64Ve+fUdqZwowCMHpTo8bSAeB QApYlcN/9emdBgjNK4IbJO7Bx+FPYg4x1oAQoMc4xSRBcg4/KlY543ZpAQASccUAPd8Dg4qIk5B6 UxjuPPSl6Kd2TQAu5g2N35U5gCSMnPrSDbjqTmmhckbc/U0ALwPubjTjzyR1HFHJC4O04xxTWywC sfxoACxR+T2xXzp8eEul8dlrqVXhe1ja2UdUj+YEHjrvDnvwRz2H0QF3tgkkCvn74+Xaz+MILf7I 0T21sqmdgwMwJLDbzgqMkZAB3bwc4GADzOiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooA KKKKACiiigAooooAKKKKAPeP2TNT8nxDr2l+Tu+02qXPm7vu+U+3bjHOfOznPG3vnj6T1FFe0bJw RyPrXzz+yN5pn8UqqRmDbbF3LkMGzLtAXGCCN2TkYwODnj6E1FR9jJPYg0AYTKSdpJBPWhI1OfUV KyA4Ix0pmc8gkHuKAOA8TrGNZnEahRwTz371teCfMENwrKTGCCHz39KyPFSx/wBtTY3ZIUkY74rZ 8FvKlhOHx5Yk+X1GRzTA6JIkUkhVB+lNuLeGVFWWNZApyAwzzWP4p8QLoVlFctbtMrPsxnHJBP8A Q1zFv8RCwka4sBkt+7CSY49896QHfmLgk8c5+tQn73QZPfFeZzeOdWkeQI0Me45XEedo9OabeeN9 Uli2IIInxjzEXJ+uDmgD1EplCDyuOlEUaQp+7iRP91cV554Y8XajdajbWlwI5t525xtJr0cFhxya AD5WyGUEsMHNM+RAFRFH0GKxvFOsSaNaJKkRYyNt3EcKcVw48b6qLrzC0JjU58rYMEemetAHqkZQ uSUXd/exzRICecfjXmU/j2/ltysMVvDKW4cZOB6YNSxePr5bdFlgt5HX7znI3fgOlAHpA+XnA560 x1UlcqCVO4Z5wfWvN9O8Z6nNqkYuWja3eUAoqDhTxwevFelkKh+8SaAIWtbd5fNmhiZ+oYoM/nUj YAAXoO1Z2u6pFpVi91MC20fKgPLGuGfx1qJjkKQQpuHyd9n+NAHpNpZW8D74YIUY9SiAE1K9vFjb 5aFc527RxXm3/Cd6h/Z0UYjjNyp+abHB/D+dJJ4+1IbNttbgDqADlvxzQB6XtVnBZVO3oSOlMkji mUrIiMCP4hmuB0/x5I8qrfQxojvyUB4H/wBavQUA2g5BFAHP+K4IrfRAII44kWQEhVA4/wD14rld Hw2oRZ2gFsbm/h967LxhIg0mUMyhjjb7nIridJDSX8KudqlgCQO2aYHp3BXaygg9scVFFbwRSM0U EUbN95lQAn8akwfxoYcYFICOaGGbaZI43K9Nyg4qdflJ6fhUfBxt4NKgIJGeaAMvW4YYbG8nEEfm lclgACfr+dcRpsqxX8MrgsqsCV9ea9D1SMy2M0Rxh12nNecwkeejbQxDAAUwPTgxPAIPoRS5wfmq OA7IkU4yAOlTPyRnpSAgkGUYHoQayCgGV3ZANbMqgZ57VjMFGVHHPU0AN5RyckipUyy84561GCFX 5tu4VIMAg9j2oAEC9ADgVC3yt2we1S7wF3FgcdKhb94ueB2oAUOGVV4ODUigAEGoIVVF+brnrSkH O4EstAD0+bGenpSbARjoRSLncccCpHwFGCM+9ACYJUgsOKaWYnCtSM5Dg8UrH0GPcUAOYBuB1HtT BndgZFSJ9zf1A704jOTkfWgBzZwMevpTd/GVH4YpgLbs549qkZwik0AMdieQQMd6VFXgk9P1qKM5 yTjBqQHsSMelADyintzSCJcURn5vlGKJGO0EflQAxUCuc0j/AC/dJ+lK3zrgAZznNJs3fdByO9AD 4yxQcAelJKD/ABY/A0mXHBwM00En0NACp8v3R9a+fPj/AHvn+Lra1+ymL7NbL++ePaZtxJ4bPzIO g9G3ivoVT8u0ccda+cPju7t46w92k4W1jCxqADAMsdhx1JJL884cdsUAed0UUUAFFFFABRRRQAUU UUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQB9Dfsi3EK3Him3aWMTyLbSJEWG5lUyh iB1IBZQT23D1FfQmqj/RCR0yK+ef2RLG3k1HxNfNHm7higgjfcflRy7OMdOTGn5cdTX0TqKr9jcH PBB4oAwckHj07UjAhDjr60p+V8LjApdo6Z4oA821y7Z9ZuvMKsQxQY9BxXV+DijaOABlg58we/b9 MVzuv2622s3IC8s28Ej+9z/Wt7wTG0dtcSEHa79+hwO1MCTxNo/9t6a1o0nl7WDI3uPWuUl+Hs2+ NbW9iKY+YyKQQfbHWt7xprFzowha3MZVyRtIyf8A9VcnB421KJsKEcEYIcEke4pAb8fw/shConur hpu7IVCn8CDVK8+H0gjH2G7SR88iVdv5EZqlP44vyMJGqkcAsc/pgVBD411aEjfIkvplAPzx1oA6 fRfBCadqMF09z5rRANjbj5vb2rrypRsL2PWuA0TxhcS31uLtZHMjBCqDg544Feh7STnt1oAo6tpt vqdg9veKWRuQQcEH1HvXFWnw7zI5ur4tGCQojTBx2JJ6fSt3xnrkujxRrEikyA/MTyPpXFp4y1ZZ AVdREDnYwBJ+poAsf8IHfJeGLzYjbbs+bnnH09a1NP8AANuYP+Jhcy+dk58kgLjt1FYM/jPV5pg6 mOMDjCAgH8zVqHx1qSwsksMDnbgOuVYfqRTA19M8Brbaos9xcia3jbcikYJweM12x5JyM15rpHjX Vft9vHceVLCzgMCuDg+9elE+YQB9TmkBQ1nTI9Usmt5BglTtb0rkYfh/vQfaL0hxknYuRjtjNdX4 j1VNF0xrp42lOQqoDjJ+vYV51P431GW53Qfux/dLZA9qANpfh/tjGL47yfmBTj8Ktv4AsioAvbkP 3JAx+Vc7P421d7cqJIQzcbwgyPpUI8Yar5KrPMJNnIIG0n6kUwOltfAkdtqKTG7aSFSCEMfP55rt YB5NusafdUY5615hpfjrUmvIxcosyEhdo44/xr0m0uEu4lkQEKR0IwaQGX4tXOjyllBIwc+hrkNH IfUIBIeCQDj0rsvFYjGmN5hIycDHdu1cjo4X+1bYNgZcDNMD0bgcdau2li84DM2xPp1qiTtwcdK6 W2UG1iwMfKP5UgKUmloV+RyCOnFZVxG0NwY2I3r39a6U/LVTUIont2kZQHXo39KAOV19pF0m5aMK W24IPp3rgbNd9xGigszMAAPWu/8AETSLo1y6dQuPzOP61wNmh8+AR53M3G04Oe1MD0mJVQIgwcDG aVwV2gniq9uJUhjWU75QPmYdM1YJkIw+PrSASQgIT2xzmsVmBz83fgVsS8owwMYrGYhckDnoc0AH mbuOPyp/mDgZ/Gm55LbRTo+SDxQA2PAA7g0shBJAocBRyKaygg4PQ8UANK4AJ5FOXKrkAEehpi9s HgUu3k56e1ACl8t8oprt8309KkTYO5zTJmWMkdT7UACgsT0zSL1wevSokZi+RwDVhtpO4EUAOj/u nFSNhBxjkVGhBBoxypJNAAcbgVIz3FK2MkcHvTZFJI4FNJGc4IPSgBCmw8HrTjyRg59yKaduc85p 0ciqvNADgSR2HajgZPOewpjEbht6U7pjPIoAc5LAZA4pokx8uM/jShAWwSeKNvOMArQAgkZhgkA0 Dd+P0oyozwQfanx9/mOKAECMU6nB7V81/G7RrXR/GzGzDqL2EXkis2QJGdw2PYlc49Se2APpN24w GJr5y+PF/HeeOvKjDh7S1jgkLAYLEtJxz0xIPTnNAHnVFFFABRRRQAUUUUAFFFFABRRRQAUUUUAF FFFABRRRQAUUUUAFFFFABRRRQAUUUUAe1fsn/wDJRdR/7BUn/o6GvqXU5vKtW45b5R+NfNX7JOme b4j17VfOx9mtY7Xytv3vNfduznjHk4xjnd2xz9J6oStnJgZOOh7e9AGDjIPPOaT5l45zQvfJHNSH 5gc9BQB534mbdrFwCxLAgHPbiui8HKRpbfvMnzD8pOdvArm9fUjVrsdzIcVv+DbdUs5597F2ONvY AUwLfiLw/ba1GonZ0lQYV0PT6jvWFb+AbSKL/SLqSSXsVAC/41b8aa4+mWSJC2LiVsL7AdT/ACri W8Vav1N2XH91lGP0pAdFc+AfNdPKnjhXPzEAt+h/xpY/h/CrqHvZSuPmYAD8hzXJ3XiTVpZI2F5L GR0CHb+dPt/EerIzNJeSSAjGHOQPwpgd5ong+z064jmaaSaWNsqTwM/SusHGBxmvKNC8T6kuqwie VriKRwjIegBPb6V6sOCVz1pAZmvaLa61CFuw29QdjKcFT61yieAg0Q8y8w5P3lGePpW74y1i60mx hezjiYyMVZpMnbx2ANcJH4t1eMN+9jAz/d4+lAG4fh84OVvgQOMFcZ/Ht+Rq2ngCy8r95cz+Z/sk bf1H+FcxL4v1SZAoMaD/AGAf6moLjxXq7CJEumj2d07/AFzTA7SDwTZQXNvMlxOTE24q2CCR0x6f rXVgHeDjA715fo3i6/hu41uT9pVjgluuTXqEbM0SM64LAHGOlICLUrGDUrV7e4XMZB/CuRj+H9gJ Haa4nK/wBCOPrxzW/wCK9UfSdKM8A/fMdq5FebHxVq0Y2pcqM8FiuT+tAHUj4f2/kn/SpA+c54xj 6YqP/hBYWgKPMu7PDjOSP5Cudi8Y6zEpQ3KSrjGGQf0xVRvEmsNJlbxo1/uoMCmB3Nn4E062uLeU TTFom3MpwQ57fSusjVY02qMAdAK8usfF+oxeSipE8pcAkg/MPTAr0yymM9tHKyFS4yVPakBn+LiP 7Edj/Cynke+K47Rv3mpQjGSXAAH1rsfFZxpTNgdQMHpzXH6AY01y38w7I9x3flTA9IjfacEZ710l rIJYFb2rnNg4P5VYtLqS3UhMEE8g0gOgAGKztYn2J5QGd3J5qm+p3BzsIH4CoDKZGLOc5oAzPEMj DSLnYMkL+GK4GzLRXMLRsxYNxzXoesfLpd5gbg0TDA+ledWmFvoM52eYpbB5xnmmB6XDuaKPeMMQ CR6GpGHOc8elJzgYApAPlyOtIBj/AMW3HPrWJIMStkjrzitxzhG5HTnisVjuckD6cUAMU8Ec80+I MvUZJOKeF2jLqT+FOOTyAM0AR8kEsv0pinbnI6VJIx4AGQOoppGNpxQAoGORjntQ8iJhc0x1zwci msgTB5zQArSRjkZLU1F3gsQacoWQbiAPpTyAFwD+QoAYkbY9B6YpfK65NOjyeAT+NDcHpzQApXGQ DxUi4K4Jx9KiGQRnoeacGwDxQAwljg5oZSV680Oc7qYZCSc89qAAjpmjg/KQKfuVsAjikIAb5Rke 9ADwoxx2oZcZGTTNwHU89xT1kB+tAAF5z+ZpCSBgZpd4yck80m7AIHINAEfzE88mnR7ge3405c7u fzp5B46cCgBoBZuuM+1fPv7QGn2dp4strm3l/wBMu7cPcRbW42nar7jxyAVwOmzP8VfQCg7sjrXz /wDtC/8AI6WX/YPT/wBGSUAeX0UUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUU UAFFFFABRRRQB71+yUNQPiHX/K/5BX2WPz/u/wCu3/uv9r7vndOPXtX0nfgtZyAAnivn39kLp4s9 f9E/9rV9B3zMLWTGOmKAMHIDHjigOG/wo2L6cn3phyCCAMUAcN4oieLWJyejYYAemP8A61bng2cS adLHjAjc5JPXNYnit0k1liJN2EAIz90+n+fWrXhrUrLT7KUSlhKzbsAZ3cdB/wDXpgbOr6Va6ggW 8hWUKcqT1FZSeDNLdgVjYJg5Xr+tacfiGxmXaxaPH99cfyzTE8RWCcCSRucHC9KQGdH4E053/eSS tGOwAU5+tPu/AmnTBfs0jQ7Rg5G7P8q1IPEdk7MpcJg9W6Gkk8RWCMwaU5Xuqkg0AVdI8IWGmSrM jPLKuCWf19h6VvODk89+KyZPEmnqUHmFt3OQOn19KefEGnjlZgVPGaALWpabb6la+Tdx7l6g5wVN YcngvTGUqDIAecqB/hWkdf08RM5n3Y7Ac/hUf/CU6cI92ZPTbs5oAzm8F6YIGSMuJT/Gwzj8Khh8 B6cIHWeaZpSch0IXA9MHNbMfiGxcFzJhAMkHr+VNPiLTsEiRjjrlSPyoApWPg/Tra7SZFZ1QZCtz k+5rpW5xkHPSsEeKLDjaZhk90/8Ar1MviOwJJMhUDGcigDU1C0hvLYxXMYdMdK5f/hBdOZyTJKQW ztHAx6VrjX7Is37zIHQjvTJvEdhGxG9mwcfKMmgDCPw+sPtJIuZ1iPRQAWH4n/Cp/wDhAtODAiec JjkEDJ/GtdfEOn/Md0nH+x1pT4isflBlbJ/2TxQBJpmg6ZpiKLe1jZwdwlkAZ84x1PT8K1Bjj16Y FZU+vWUMZLOrY5whDE1FceJLKGNGQPIW7KOQPxoAseJVV9MlDMANhOD7VxOjbU1K3LIGG8fQ10Wu atZ3emsEfc7jAUHkfWud0sxR6hbtOx8pWyf6frTA9KDgrjOPwpB61jtr+nshbzTnOOQRQfE1h5Qc M7Z42heaQGvjoefzoUjgEYrFPiOw3KRI2T6qePrSR+IrF3bfJtxxz3+lAGpqjMthM6bQyrnnpXnC tmYHID7s9O9dRrWv2UmnSwQMZJHG32H41yse5mRurZ9KYHp8LBolfoGA60mSueQRSQ8RRBjk7Rz+ FLIMHPT+tICKQqQ27vxissIFY5znPFbDAlW2/exxmsVifmVxgg80AKxHA75pC7J8pwCaR1B5XPWo 2yy884oAeZD5nTcMUpcIcE8egqCPJ/8A11OVCjd39KAEWQmTJx7U5gvc9aYhUgZPPpU24dMDPagC tJGUbcp696ej5XBXFPcE9eaYse49cCgB4TC8D5j3o2ndz+dO4XODyfWmOzZGDn6UAOA6A80pQ+X/ AEojG89TjuMUYAbPc0ARhSoGDn60vHULk+maXHAzz9aXaF5x27UARj5gegPakU7c7s01s5O3r70M rFc5FACH68inoDxx09KiXJJJOTU33MAHmgBUCu2M0Nkcjk0ZwcAg+9AOH7GgBm8ggY59alXL43Ei gKCRjGaUjaAD19aAELBOBzXzX8cLKW1+IF1NKU23kMU8YU8hQvl8++Yz+GK+k2TawLHP0r5s+N97 Jd/EC6hkVFS0higj2g5KlfM598ufwxQBwNFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQA UUUUAFFFFABRRRQAUUUUAe2/spajdQ+NtS06NZHs7qyMswUJhGjddjsSQcDey4XPLjIwMj6hvyqW sgcgZGB9a+Z/2So7E+K9bllmkGpLZKsMQHytEZAZGPHUMIgOR948Ht9K6rte0bdnqCKAMYqCM5xi lVQBxzTN6qMLzRyW6ce1AHnviS1MOtXAzw7b8/XmqttA8+VjUlhxgCtLxiynVtigAqoDc8nv/Wuj 8JiL+x0ZBtO4hiRyTn/DFMDkP7PukJXynJ6HioBp94JgEglOTj7ten5yOKbLhu+DRcDziTRr7azC 0cLjLFu1RwaddTBvKjZwDg7OcV6LggE/nSA9sDPelcDzl9Jv9zbrOY477DTV025fCiKRmP8AdB4r 0lOVx6Uij1PPtTuBwEGi3siEi3cjOOoFKukXhdgttIdpwygdK71jg96nUllBzikB5x/Zd4khBhYO BkrjtQuk388TSQ2zsg5/z6/hXowOWwOaXbggc0AeZnT77y1LW8hVuhC0+00q/uSBHbSlOecYH516 U+FBxjmlQkdc07geeHTLyOTy2t3VicLx1pp0q8JbNrIxTrhea9CkfP8AjTcilcDzlbO5ByLeXrgA qRzU7aVfLhpLZwp9q78A7sg8A1LkYIwKdwPOZdKvVjD/AGSbB6YXJH5UxdJv5FLJbO+32xXo4UYz jH05pc9ORSA86Gj35jJ+xy4Bx0wfy61GNOu8EtbyKB/eWvSC2Fz1IpAC2SRRcDzZNPuJRlYWZO7A cU86Rfoqv9mlKtwuOf0r0jaqr8uAPQU3nINFwPNpdLv0Hz2kqqPRM0610u8uXCxwM5A65AA/OvSt uRtPXvTAAvGRntRcDzi40u7iRmlt5EA6kiq9n8tzEWUlAwyoPWvQtbbbp07EMTgjA6njtXn9qGku Qqg9cYNMD06FleCN4vuMoIz2GKdJyuMcdfxqKACKCGNh91QOPpTmLFu4WkBBLLsQ5JBANYhuFc8d WP5Vt3UIkicf7JrnwnzZwABQBNGpYHPX3NSxKGwMfXmm9CPWmB2L5yB9KAJHgGRt6etRyBozgHNS EkYZj8vfFJIA4BU5FAECZYk7vyp6gq/PNMAAGRUiMdvy8e9ADmZixPTHanoylcnqe1MYsw6HJ70B WOSRn2oAXgsOuKcygMO9IPlAGKUnOB29TQA/DAEofxpgP94inMRtUIPxqIjJ4HPWgBSxz1P1zShu OtNIZsEkAntilRcAE80AIrZJBx9aGI2DaeR1Bp+wYBwCBUbx/PkHFACKoznjFPcA/MOtKVwvJ4pG UkAjHHc0ALjOSABSRwsepp8ZJ68/SpWO0HAoAjXrgrSDPUnntmlLBwWOQR0pksi84XOaAFL8jgfS vnX4+QJF45SVOtxZxyMNqjBDMvYAnhRycntnAAH0QASmeBk187fHq6huPG8ccT7pLazjilGCNrFm fHv8rqePWgDziiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKA PcP2T4rc+M9Xma523aWGyO38snehkQu+7oNpVBjvv9jX05qAxaSFcHjBzXzj+yRpsU2s+I9TLSfa La3itkUEbSsjMzEjGc5hXHPc9eMfSV8ubOQH0oA5pUz3wc9qkwykAGn4wx6EdqXGFPY0Aeb+Ih5m t3RLZIbH6Cur8KmFNGULKrHcS+f4D7/lXOeKHjOtTBNoAA3EDHOOaxS5BYKSARjg8GmB6nvBUFCG U9GBp2EJIyN4GeteW/aJE2rvkCDsG4FL9pkZiTJJz1G7rRYD1AMuW2svHXnpQFQMDx83I968x82Q bzFKw3cNz1FMkZ5FUF2YAcDPAosB6ZKyKruWVUX7zE4ApvmxiLzd6iPruzx+deZEyYKFjtHOM8Gk kZlAXLFfTPFFgPTmmg8tZGljETdGLjB/Gpo3AIXcpJG4DPb1rymR22hQW2jkLngVPC7dsjPHBosB 6eJYiCUlTCkg4YcH3qRmCgb2UfU4rysF4yyBiFPoaed7gM7ZI9aLAenGRcjDrz0wetIzhF+YhR/e Y4ryzcZACOcdMnpU5kZgAzbsDHXOKLAejSTRRBWlljUN90swGfpUu8YwpGcbse1ebBy6qrNwucAn pTvOZWBDtuxgMD2osB6Q0oVNzkKo6knAoM0exWMiAMcKdwwa80Z5XyJXZkPZmJoDAqAGOB0APSiw HpeRu2hwWHJUHmhRu+4QecEeleYsSCSWIz+JNSRzTxo0aTSLGwwVDEA59RRYD00Ffu8H2pjSRoxB kVT6E15gWeNg0bsrD04qO5LyZySx6knkmiwHqJbLj5htPT3qR3SMlmO0AZJY4AryuK5kcbS75A6b qPOcrtZm29xmiwHqe9Chk8wFOu4Hgj60kUiTqTE6uAccHOK8z81pIRGHYxjnaW4z9KSNpIw3lyMF bqAcUWA9C1mZYNNuGZwHxhQx6mvPISY7hDnndinyPI6ne5fjHJzxS2hVLuCSTBCuDj6GgD0mL/VR 9SNo59akR+xYD0pqt8qkDBx0NNdSSMgUgHSEFJARxtOcVz+3nqODW7LuELkAdKxz97kEE96AAFdo yV600AbsgCkuQPLAGAaitnwCDyR60ASNnfg9KcQBtxgihmy2e9KwwQw7etAAykqdoA9KRISASTmp Y+cZ5pzjsBQBEgZhyT9Kew20uzGKaVBJ3UAITgZGDn1oGGHOKJAB8u3j1NIv0HtQA9VAAAP5VByp 47U8DLA/z4pSME4xQBFnPzf5FOcgYPNJtz3FBBzjqKAJlOU5pABn72ajQ4ODyvpTh85wOAKAJJDl iARim7cjGeaUL3GcntUMxYAkZoAcpCDnOPapQcgZqsHY9TUy/MnHP1oAcSB7fWmiMNnsppXDEAsM j0FEZGec8djQA1sgfKOPevm344vaP8QLkWkTpMkMS3JY8PJtyCOTxsKDtyDx3P0kBk/U+lfPHx+b PjmJPPhl8uzjXbGOYvmc7X5Pzc7u3DLx3IB5rRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUU UUAFFFFABRRRQAUUUUAFFFFAHu37JepTReKtb0xVjMFzZLcuxB3Bo5AqgHOMYmbPHYdO/wBMXw/0 SSvmf9kqFT4r1ucm03pZKgDyMJ8NICdi5wU+UbiRkHy8Yyc/S+qORaNj+IgdKAMRfvYNDNhc/wA6 GwMZNMdSW+YgqOlAHmniCWRtYuhJgt5h+mO36YrqPCNjYyWS3BjR7kMQ2edp+n0rltYgYa1eCQEE ysRn0zx+mK63wVs/s6TYwL78Px0pgasmm2jTGRraPe3UhcZqRrO3aMIYIxGD0296zvFOstpGl+ci 75HYKBjpXNp8QP8ASlD2R+zFfmw2W3e3bFIDsZdLspB+8tYmAH93H8qjfSLRvKX7Om2P7gx92uOP xDdJn/4l4aIfd/eYJ/Q1XuPiBdtHGYLaNHzubPII9KAPRVs4EwwhiDr0IQDFVpNMsmd5Gt4zI5yx x1rnNJ8cRX15BbTWskRk4Lh9wB+mOldiVGOg+uKAM6DSrJG3LawhyMZ28Y+lTJZ2yzCRYIxKBjdt HSqHiXW4NEtkeXLyyZCIO+K4678d38ghNvBFGVOXBGd49PagD0E2Vl85NpAC3X92OagubC2uColg jYIMDI6CuUPxBtguTYzbsdA4xmoIviBm0/f2R+0542H5CPx5BoA7WKwtUuTcLAgmxt3baWaxtZn3 T20TvjAJWuZ07x3YXDxRXEM0JYgF8AqD+ecV1gkWRVdSGRhkEHg0ANS1tkQL5EYAGAuwVC+mWMjh vslvuzkkoKNR1G3020a5uztjX0GST7CuHvPiJJ5yLaWSrGPvea3J+mOlAHevp9pLtE9vC237vyji iCwtIdwgtolDdeK4m08fkpN9psv3mP3Qjfj6Nn+Ypo+ILeQR9gXz+xEny/ljNAHcPpti4O+1gOeu IwDUaaXZR4C2sfB3DI71zNh45iup7SB7VonlYJIxb5VycZFdiBkZGfrQBzviewt1sjOIlWYHqgx+ dc9osSvqtus2DG7YxXX+KYy+iTlcgqQc+ozXF6GjyarbIOCHBHPpzTA7lNKsIw6x2sIVxhsrkmmS aFp0ijNpGMHgDI//AF1oKQz9RUn8WMEg96QFGHTLGKBoRbReWeSNvf69aljsrZHV4oYwQNudo4Ht U8ijuOKFOBjOM9qAMfXIobLTbu5t4IhJgAlU65OP61w1oczx7hnBBFd9rsiQ6ZcSOu9QMbT3JOP6 1wVod1xGqsRlgtMD0tTuRXRsqQCp9akxkjJyajgjMMSRdQihc4qVsZAGMdiKQEczfI+w/NjgVig4 XknOelbTuI1YkfrWGHJJIPGe9AEkgWRRkY96oFeeDV8DPViPYVDMAiZUc+tAD48FOWGTTjyv3vzq mkZY981ZzhQpweKAHIdvHOfUU7qSTjFIqhcdM9uaDyd3p2oAeGIXg1GxLA7j0NK2SODjNIg56/NQ Ag5POfxpCQDjJJHpTZg8bBuCKdHhlzkc0AMKl/unbjsKcEZB8zbiaeykc5G7pxTWAGAc5+tACqc+ uPpSNlQSDn2xS9BjGT9aXPTJwe1ADc7uaapKk+9PGAOnNLGoyM9qAHoSi5qNisjZOcDrUkrbVY88 VWjbOc0ASqgBPepAo4AJyahzg4AyaeAR1OD2FAD2cqcdR2pARuBA5NAGGyDihnXd05NABnnua+bv jrffa/H80HllPsdvFBktnfkeZn2/1mO/TPevo92YA4X6V83fHKCCLx7NJFLvmnt45J13A+W+NoXA 6fKqHB55z0IoA8/ooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACii igD3r9kpbM+IdfaSLN+LWMQyeYBtj3/Ouzdk5Ij5CkDbgldwDfR+qOVsyTwSQMetfM/7Jtrv8Z6v eefAvk6f5Xkl8SvvkQ7lXuo2YJ7Fl9a+mdVP+gufcfzoAxApJzkfQ0o5A3DPtSIw/i5Pb2pwIC9j QBwvjElNYU7l2mMYUdR161qeDpS2nyxBMbHzn1zXOa6XbWrppshvMIH07fpiu08MqI9Ft9pBLZJP 4mmBT8XaTJrOnRwxNhw4I/LHNcbD4F1MxzM8sCOp+RNxO78e1dv4t1oaPpokRczSPsjB6Z6kmuQf x7ergJa2+cfNnPJ/OkAyXwJqJtQ6zwNODzFk4x/vVXs/AmqTF1uPLgC5AYuG3fTHb61Zg8d3sd4Z Zo1kjkH+q+6B9OtXn+IB83Kad8gHIM3OfrtpgSeFvB01lepdai6MyH5YhyPqT/Su5LnBC9fWuP0X xvHeXi293bCEuQFYPkfjxXYMhHBPPqKQGJ4p0M67axKrKssRyCR1B7Zrm5Ph/cKP3N/ExxnayEc+ ma6/XtRGk6VNdAAlAAAT1J6VxKfEC/VgJLe2f3wQcfnQAH4eXbDd9thRivIKk8+n/wBeoD8P9RMb E3dsHUHaqlju/MCrEXj26Dyebbxy55UBtu3296ifx7fNKdlrCqdMHLYpgTeHPBFxHfpLq0aNCnIV XyCffFegBdiqFGFUYAAwAK8/0nxxcfb4lvRmAnDEKMj34r0JJFkjVlIZGAIIOQfekBl+JdNk1XS2 gjVS45APGeK8/j8D6rNbuZRBA6n5VkfJb8VzivRPEmrf2NpLXIiMr7gir2BPc+3Brg5PHeou37pI V9iuaAIW8DawpARYHK91k4P54q5b+Ar9wpnnt4SeoGWNRJ471OMtvCHPOdowKenjy9MBUxRmQHPm EfpjpTAu2nw+bzFN5fL5fdYlOT+Jrvo4xFGkaZ2qABk5OBXmmneOL2C4DXq+fARyoADA+owBXpFn dJd2sVxCcpIuRuGDSAy/FZK6RJyx5xgVxmlMf7QhG5lOflI65rs/EyK2lTFhk8YGfeuNsJFj1K3O MlHBB9OaYHogXHTrWjZWpmyXyqgdaoKTtBHHrXTWybII14yFHTvSAoHTAQxVzntkVlzwNC/zYzXT E9jWXrMQMSvzwcUAcr4kAOh3WVzhR+HI5/CuCtgDIBnGSOa9D11h/ZF0cD7hGMZzXntmf9Kh3Dcu 8cHvzTA9OgIe3Rs5yoP6U/gDqcGkJ4BJwT29KiJPHGaQCzN+7bjJAPWsWLBZuK2ZELRMD0INY0Kk PnoBQA8g8t+GKcUDjnoO1OIBHHegnCgAfrQBBsIfgnFOC8k96kODzg+9MYqy5BxQAnGQD271KgLB uRntURAbODjvikQ4JHJoAkZTznjt+NOVVJVuh5pFfJJPSmbxvwO1ABcR7gF3nHpSQx+Vw2Np9KeP vD0JpZAGBHcUARYyWxkn1pxxgZ+XNIrLEcLk+ozSuzOg3KM9qAGbgDwf/r0pPAPbFCYGA3GPanYy AODnmgBisd2DUiLxluvUU3JC57AYFBYmIDuBQAyY5QAZ5NLENpHv601OD82aczBgTjmgBsh+YDgk /hThGRw386Gj3D2FKDtABBoAcNvQEAelJ95vQjpS55AFSL36YxQAHkgD86+cfj3DbxePN1vG6SS2 sbzsysA75ZcjPBG1UGV4yD3zX0f+GRXz1+0Iyt4usPkcSfYV+YsMFfMkwAMcHO7vzkcDHIB5dRRR QAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFAHvH7JlmjeIdevzHO ZILVIFdWXywHfJDA/NuPljGOMBs8la+kNQTzLOTttG78q+c/2S9Rij1nxDphV/tFzBFcowA2hY2Z WBOc5zKuOOx6d/o3UWEdpMcnlSB9aAOcVjvGPxp8a885INJFHg5NPIxigDz7xE8j61cmVdhVtoGO w6fmOa6jwd5o0s7zmPefLHoO/wCtc74o806xMZVUYACY/u9q6PwltGhoFYlgzBvrn/8AVTAd4r0c 6zpZgBRZV+aN2HQ1x83gG4KR+Vex7uN4ZSPrg10/i3xC2jWypHGHmkBCFjwPf3rhLbxZqsETxiYF pDkuw3EfT0pAbI8CSSBsXB3DGCwGP0pV8A3BcYuo/L/iG05/Csv/AITDVY1AEoJ7kipD401Z8hnj VCMFUXafrnrTA6fRfBUNncx3N1N5rodwQDK8dM11nmFsDHSvN9C8Zai+oW1rMIpI5JVjLHO75iB1 r0aP0z0pAV9W0+HVLCS0uc7H5yDyp7EVxsnw+JyI70kdQxT+fNdT4k1IaTpM12ieZKmAq9iScc+1 edw+M9bEpLyxlD0UIBigDWk8ATl2Ed3GF/hLL/Op08AAbWe4kOB8yrgbj7HtWK/jbVQdpeMevy5o /wCE11bcoWVdndduc/j1FMDoLDwLBFcCSSabYpyFbGT+NdqgKjoABXnel+ObtrqGC4jiZGbGR1x7 16ErB1VgflIzSAqaxYR6pp8ttKQNw4bHSuIHw/nMhJvIVTHBVSTXZeIdRfSdJmvERZGTAAPTmuBm 8d6s6HbHaIT3CNkf+PUAXj8PZeCb5Snps5/nUFr4CvNrefdRLk4ARSePU5xVE+NNW8nZHIinOd5X JH51JH441WOMiQW0pI+8yYI/IimBpReAp/tMfnXUZiHLYU5/AV39tEkNskaD5EGBXmMHjrVDcQ+Y LfywwDYTqK9LhkWe1SWNgUkUMCOhBpAZ3iZVbSZC8mzkbfc+n41xmlIsmrW6MMB3AbPTrXUeMFd9 Gb1jdWGO3b+tcno4dtQhAYuSw49s0wPTli2bWJBwc10VvIskSupB4rnhLhelS293JB/qwMHqKQG8 cZqpqkgW3MfBZsfhVM6qxGBGBVSSV5TukbJoAz9VGLGb5dw2nI9a8+01C+qWowRmVRj8RXf65I6a XcGIgPt4Jrz+0eSO7geNgHDAgt0B96YHpjKXIx+tBTpnOKWI5wwOQeQalbg5HNICKSNTGwOQMckV i5zhep59q3JGKoTzjGTWK+eHHJoATJA7e2Kbu5BAOB2pccDAGaQEZAIwaAFXKtgLjPekAxnK/KKe BzlRn8aa7EYHOe4oAjBIYk+lO7buM+lJjMe7b+NEmDnPHvQA53RAPU01ShYkcmm+UNvYj1pzKpGM YYdx3oAlZNiAg/N70yNuMvuyaAdgA6/UUsijgjp6GgCLgMcEZ/nSqxK4IHHWo+mR79RTyQQcgUAP IDKSB+lMB2pjvS7iVGOKT72D6UASqcp07cUzaVIzzxShnIyOg7UrptG8UAMdGIP8qZCOeRxU24bi Fyc96aCcEKO9AD8ZPIz9Ka/UrninbiE461ECcN8vJPegB+CQvPHtUuQNvTj1qJFBOC2PpTS2Rxkn 3FAE4GWyvT0r5z+P8UsfjtGln8yOSzjaJNgXyl3MCuf4vmDNk/3sdq+h1LfxY5/CvBf2h7WZfEmm XjIBbS2fkxvuHLI7FhjqMCReT68dDQB5RRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAF FFFABRRRQAUUUUAFFFFAHvH7Jn/Iwa//AMeH/HrH9/8A4+fv/wDLP/pn/f8Afyq+ktS+aykzjgV8 1fsmx2J8Va3LLNINSWyCwxAfK0RceYx46hhEByPvHg9vpPUm22b988c0AYQcbMYpUHrmmgYFLuwB nkUAcN4tl8zVZflwVUDrn8a6HwfJC+kbIQQyMd5PdjXJa5bNb6pcYkEhZixIOevY10XhjUbW202K F/lfJJx3OetMDQ8QaFb63AsczGOVejgZx+Fcwnw+j+0nfeMbcLxtXD7v5YrrG1qwZs+eoUDlj0Ht QmrWODJ9qjCepOP0pAcvF8P4ASTdyfQ04fD6HfuN+wH93y8n88/0rq/7RtBEZGuUCnuaSHVLaRSY 5QB3LUAY+leDLHT7uO6aRppF5VWA2qfX610e0AjB/OqLatZpJsa7hbPcOCAfrUg1bT+VN3FkehoA fqtql7Yy27gbZEKnIrjl8BKrbmvmKkfdCd/rXVHWbExO4uI1VeCScfpU0eo20luHD/KeOnNAHIQ+ Bowh8yRJXz1JIz+VWP8AhBbMIpjlcSD7wJ+X8O9dD/atkhdWuI0KjPzHGfpSx6zZvGG37U/vnpQB i6b4LsoJVlm+eUHIAJwP8a6ldqJtUYAHFZkuuWKuQ0vTjIGRUqanYyICtxG30PP5UAP1Wwg1Sxkt Zy2x+4OCPcVyEfw/iz+9v3fB7RhQfbqa6mPWLPzNjSYbOAfWnSaxYqGLSYK9RjmgDm/+EAtOf9Ll Vyc4GCtMufAUD48u4MePRciuptNWs7pN8cpAzjkUDVbN2KmYFhx/nFAHMxeBLQyK0lxIyg8oBgEf Wurt4kt7eK3gXbFGoRV64Aqumq2qoZFlBA6jvQur2LkETYPvxigCr4rBOkSjO3GM++D0ri9KLpqM LQj96pytdV4j1axuNPkSGVJXPGB6+tcpp0qw30MkrMI1IJKjnFMD0yPJI9aeGwTkGs99WsokDm4R sjIwetImr2sgyJfmI+6Bk0gNJlzjHWkJJG0jFZq61aOWUyldnUntSw6zYT7wt1Fn/abH86AF1sld IuiFDHyzxXAWpV7qMS8IWAJ9K67WtYsvsEsaTCRmG35DmuS007ryHcoxvXg9+aYHp4jEUaohIVRg fShODzz605jg47UxSN3BxnqKQCzN+6f3GBWLgKMCtl2AG0Yxjqawy2ScDkHGaAEOQwZTimr94F+e KVs4Oc4HahT8wA5470APD7SR27YpjSHJBH5U/K7hkYI44pGGScDPOaAEDBTlvu0MAw67sdKhk3nI XoOtJESfYjmgCZEwQOcGnqF3EY49aj3HAyeaZhxkmgCy6ADrmo1cbsFf1pYySoXPSmFVVzk8Dnmg BZMMAQOKF2gMcdOmaaWAcgdPrQig8nkd6AFDbwAy4B7igsBwAPrSeZxtAAFOVPmBOADQA6NWCE5G O9KefT39KkGFBAGcdvWmsMZAzyM4oAZswv8AhTQGVsDPNOLbcKKeilv8aAGHjvzSgkgfKAfU01mL MQMAD3oG0nAPHpmgBcEr1/HFIgOePSnqdo4yfakSQHknigBxHGeMD1r50+PlzfyeNlguwFs4rdDa KrZBVvvORk4YsGXoOEX2J+isg/LjP414F+0LLpkniLT0tpJm1WKApdLlTEiZzEBj5g/MhbPGDHjv QB5RRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFAHv37JMl8N Z8RRRQxtprW8TTyk/MsoZvLUc9CplJ4P3RyO/wBG6hGr2cmeNo3flXzb+yVd3kfiLXrSO33WEtrH LNNsY7JEfEa7ugyHkODydvHQ19IaqzLasUzjPzY9KAMEkDAPajGOnTrSkblBxkihV74/KgDzrX8R axc7JS4LknPY+lU4YZZY2kVCwXrirWtEPqt26AbTIf04rpPBKRPZTuyAnftOR04pgcmun3kiGRLa Vk7lVzSNaTKArROjN90Eda9KJCgLEionoBSpEjEGRVYDnkZxRcDzWG2uTlRE3y9d3FOSGYruKME9 cV6W0MTZ3xq2RjkU0xRkhWRML046UXA85WxuWYFYmIbkGpUsLogsIWIHXFejeUm37i9fShI1AIVR z1wKQHmjWkoJ3wOceiEinGzu2XPkuNvqMfzr0pY9vZFPsKHjV+WRW49KLgeXtFIxUeXJtPHKkU9Y JM+WysD1Ar0qSKORAjRqQP4SMimpBGMDy12joMU7gebNaTxqsrROE7kjtTzbTsu7yZAAMk7e1emu ilg+1Sw7mmsochjGCenIzSuB5rBaTXKt5UZcDrzilWyu8tmJyw9s8V6Syhl3EDimpgEhFA9wKdwP OhazgAeS+f8AaG2mHT7wyDfbTDPQshAr0iSFJHV2QHb0yKlTBHTikB5c9tPHKEeJ92OiqTkUwwSg keTKD1+7XqXGDu6CoXYO2CODTuB5l9mmK7kikYMePlNNFvdOdqwS5Bx9w16eI02naoH4UcZw3IJo uB5t/Z11lQ8EgYjI+XrT2tLiMfPC4A7Yr0gD5QcDI9aikiSY/OgIBzyKQHmbwyB+UcEjPTtTFtpp SWjRmA616oY0IBKKQeoIFOSGBYwFjQAdMKBincDy+G3lEbOYZCgOCdhwKlsZPLu4mQAkMGUH17V3 2tIBpVwI2CvtO04/GvOrZDvTDc56mgD1KDdsUuu1yASPQ0EZcZwaeTujyMg1GqsXz09zSAZOCiMR jIBxWOAc5HXtW5KA8bIxzkYzWK4CS4A6cZzQA/BxtPBH61GMI2BnnvQcDOck0qqXUk/lQAbSTnGG HQ0nTJ5zTkCgMDwKXbxgc46CgCIEhiB0IpmADkfQ08qODk5oVgeoyM0ANYqDihmOBxSYAzxkDmpG C7dwzz0oAOjH5RmhirA8ADHWmHc3JNSRqSOcY96ABSAD8oz6kVG5ZjgjA9ql2/LkH8zmo88gEk4o AEQHGeFHJzTmcK3fA7U04AwSaQoswBJwe9AE525yCeaafv5ycjtTE+U4B6Uq+jYBPc0APGWbJAxT n+Qc457ZqEA84b9KDgngHGP1oAjUeYxzgVIoC8/0ppjGQQQf6U5Sc8r1oAd0+7nPrTAcEHPPcU9c nnkU3GMls0AAAz0APqTXz/8AtAaX9k8WW2oRxYivrcbpN2d8qHaeM8YTy/QfjmvfgQW55WvnD44S 3MnxBuluN/kxwxLbFk2gx7QTg45G8vzzzkdqAOAooooAKKKKACiiigAooooAKKKKACiiigAooooA KKKKACiiigAooooAKKKKACiiigD6H/ZIu7sz+I7JbSNrLZFM1yNgZJMsFQ8bmDDcRzhdh4y/P0Jq uFsZATwcfzr5y/ZH1GKLWvEWmFZPPuLeK5VgBtCxMysCc5zmZccdj04z9G6kM2jkjI/lQBgAngdq XeqtyTTip3Z4+opu3JOcH3oA898Tlo9amHlYDfN9c963fB0szadIDGFj8z5fU+tY3jCB7bVmkDZE o3DJ5HbH6VFpOuT2Nu0cOxgxzhh0NMD0Hb8oGRTJl2oMHn2rjJPE995eNkQb+9j+lMk8R37RqQ0I C8nK/e9qQHcQvwCevoafxu47155D4nvRKWkWM88BeAKuL4lv9wcCEqf4StAHdKDkYow3I6DvxXFx +LLtVPmRxlh93Ax+dRyeKbsnIQIeuD0oA7np70jOFzjANcHF4mvyGDbCScqx4wP60v8Awk1+O0LZ /wBkj+tAHd8KoNKQCuQa4VPE1+2NpQY65XOakHii+Q4KwuD6of6GgDs1+9nOe1SBwM8HiuHHiu7L jMcAHfCkf1qKPxJexOQWVwxyQe3tQB3gC4PoaaFK9SPwrgbvxTqBOISiD2UH+dSx+Kb1YlV1jZsc nGDQB24BycfrTGkZTwP0rik8T3o+8EcdxjBp8vim6KgJHEuOu75qAOw3bj6GlcEHLYrh28S3+4nE QU9Bt6Uf8JRfA5byyvYYoA7bqMdKB0AHWuJHiy7IGYYt/rzj8R/9elHiS8bkCMZ6+maAO7VCFwTw abGOuetcRL4pv5JFwsSoBgqB19804+Jbs4MSBfTJ3UAdo+ccZHrTkXgf41xn/CXzBtvkrn0JPWmp 4mvhE+8Ryf3crjH5UAdTqzf8Sy6UgH5DjI71wGmRh7+3ifgNKq59Mmrlxrt7dWxgmZNjcHaMGqcB IuI3Xswx9aYHp27oMde1KuTwRjFNQq6ISc7gDxT8D+6PqKQDJOAdvpnpWCWIz6Z5relB2YBOSOKx GXIyetADlPmDA4xSKvJI455pEITjNKBuwykjPWgB2PlOG/SmLkEnGTTmXb83XmnHaeT0NAEDMWYg DGKcBnoQKNwXJxxUmV8sbRnPWgCPh128KB196G24ABxnpTZTtZSAaU5cnOCD+lACgADOTRwSBmkY bcAgmmkAtgDmgAOF+7mnQgHHHzd6aUJHp706MFchRg9aAGSj5sDtSQ8A5GTmpm4QcfXiowckZPBo AeV+YnbgVDcHJValmO1AAcj61GoDEs3SgBGBEQPO7p7VLGOMHg0hPy+mKUbic5oAfghSTio85OSa JS2MqPlHWj7yg59sUABVlZccg1I2Dxg5piFiOSwxT1chePzNADGwDjPP1r58/aDGPGdkP+oen/oy SvoKQs2OM59q+cfjpbXNv49ke5l3xz28ckC7y3lpgqVwenzK5wOPmz1JoA89ooooAKKKKACiiigA ooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigD6B/ZLi086jr07W0/9qRxIiz5YxiF jkpgLtDbkU/MSSB8oG1ifou7ZRaTb87cdP5V87/skTRCfxRbtKguHW2kSMsNzKplDMB1IBZQT23D 1r6FvGRbSTzOARjp37UAYW48hcgetLFxwc0khGMpihZF9MCgDz/XpZbjV7kyg4DlV3DoAeKTStAl vlMqkKmcbiak8RStLrM4aNk5wMD7w9a6TwlAY9IVixIkYsFPQdv6UwM+LwqrTETXLGLsV4Y/0om8 LDDAXOBn5RtzxXVqFGCQSTSMQW6UgORi8HhsEXAIJ5BXGPpVs+EYkHy3T57ZUYrpGyCSBg9hTt2F +bFAHLDwuwYZnG3HUClHhOPBJuGPHYV06nPODTD9485/GgDnT4UiyC125A6jYOn500eFYN5KzttH RSOv410OGYjn61IMBuenrQBzS+FUOf3xUH0FIfCQWQMlxuHoy4rp8e/4mpP4Mc9KAOWfwlAQoNzL vzzwMflUUvhEBwRc4UHpt7V1G1mcdcetPJHRjmgDll8IodzG4wMcfL/9elbwom1gLgM+eMrgD9a6 fAGcHFPRQST3oA5SLwmgjffct5h5XjAFQx+EWJ/fXQB/2VzXX85IYjApCufvZoA5VvCQaJSLsg9D 8mfy5qJ/Cm51UTL5fdtuG/Kutb2J20w5Q8dKAOUbwkgQkzneDxxxinL4TRxzcMPZFrqx8x5FNTKv jjBoA5uDwkEDCW4G3PylV5x71MPCcOCUuZfYFQa6Bi3JHp0qSNiFA6Y70AcU/hECVW+1E88jZjj8 6uReGIWOPtMmPoK6K4A4wB+FJCuG6cdzQByV34aktbQypL5sgPKhcce1Y8ERMqqp+csAK9A1fzBp 8zQFVcDjceBXn0fmy3MZ83a7OMMvUHPWmB6bEojiRfQAc0u4DvTSpfqR9TShfl4XPqaQDGbAYtjg GsrndwBtP6VqyLlWwKyiQpIAOPSgBsgyeMdKRThTj8hRztJGBz3FNR8E8fjQBKSQRzkGmSzbOCM5 7UxWJDY60xY2d8saAGqryE7iQOwqYDYAFZach2HDcjPBoLJu2n8xQArBWHK8jvSMP7v50vfHX1zQ QyqeRQAmcZySTTFBVsnqemaDnBJx6EikYkgZHSgB6AE4YmkjB3jHH4UKoC8NyPSnLwck0APYjHHI 7ioWwmcqCP5U7JLZXjjGKRgBkkc0AMG1hk05EGOe9LGDwSQPqKeTzgYNACPHkkcUkakjrilbduIN PXI5PHtQAx+FIU5J7iiFSFAYAA9aGILZ24B70EfxBsketADpFA9M8UDufWkVizBce+adtGMmgCJ9 30Ir5l+M8UsfxF1N5UdVlWF0ZlIDr5SjI9RkEfUGvp5CMGvnP4+i5HjpPtPleUbOPyNmc7NzZ3Z7 7t/TjGO+aAPNqKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooA 97/ZI08SeItf1Ern7PaJb58zH+sfd93bz/quu4Y9GzlfpDU9gtHzg5wMV82/sl6l5XiLXtL8rP2m 1S683djb5T7duMc587Oc8be+ePpLUAPssmRuwM/jQBzco2k44HpSptI96e6g9OophBHOMCgDh/FJ D6zJ5Z5VQDnjn/OK3/CAA0ZdrZPmNkHsfaub8TiQ6xKZWBbA247DtW14KZmguYmYnaysPTnP+FMD qS/HAFIARz0FGzHQ/mK4nVNb1BdSmWNxEiEoEA4GO/vSA7oAZzUcrYA9zXnZ1e/GX+1yBj1wcZqK 71m+klUJcunchCRmgD0qRguCDzUb/MM5rzuPVbuKAJ57YByO5qRdZvCCEfgjknNAHoiLxnGKMZJH p3rztNbvhlPtEmMdc9PaohqN0JCwnkUng7TigD0gcN6inZx7dq8+/trUjICbl8AYHAx/9elk1i7d FUy4A4+Xr+dAHoAznBBAofjBWvPU1a9RyY5ME+mf1qT+29QwczkZ6g4FAHoAXJAOMUruqketefSa 5qEi7ZJtw6gYA/lVafWtQOB9qYAdAO1AHorTL/Fyw70jSZ5xkZrzRdYvuBJN5v8Av9qcupXnmF2u phz91WIH5UAej7snAyBT3lGF4P5V52dd1ERlRdMVHQgDP54zUK6neqzOLqQluuWzQB6QWzg4pM/N nGK84h1nUEfK3chJ4+bn+dDazfsSTKT60AekocdacQTwOlebx6pqG0lbqXGemelH9p6grq63lxgc 48wkUAehlGLZHap49oBGKztDvTf6ekr8PjDAetaCrzn0oAp65C0umzRrney4XHrXndsmZ0GcZYDL cYr0XVvMaxlWNgjFSA3933rzqL7689wKYHpsbDahLbjjr2J9aVpS3C1UsZDLY25YZYoCcfSrSrgH jr60gGy5EJI4IBFZA5OPT3rYcny2U9MVkYAb5eR0z60ABwvBP0pke0lgeKfINwGTSKioCOp96AGM hDZ5x7VICBjHp3pFJx2oAJYjaOKAFk+ZcimIAZCdvFS7cdMUKADk45oAYxIYlRxSDd14IFCuSdvA HqKfleh5WgBo+7kYwO3vTc5bnH404nB4Hyk803YGOeTigBm3a3bPtT0UlsdR3oaMg9fpUqKBHxye 9ABInyjbwaYoxuyuAadJJjjAyKY0jBecUASbNwz2HSmhSOmM+tIrbxwOnbNPLMgA2n8KAGY55JH9 aBy2cH0oJ3NyB9DShRnng+maAAEjg5/Gj5cHijBxkn6Uik9Oo7E0AMbO4HJHvTw2UApSBtIyaYV3 DjK0APTCsR04zXz9+0NFL/wlmn3Bjk8h7IRrIVO1mWRyyg9CQGXI7bh619AY4BJ9q+d/j5LeHxlD FcyIbVbVXtkQtwCSGLA8biynp/CF7igDzSiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooA KKKKACiiigAooooAKKKKAPdf2S1U+KtbY2MjuLIAXgZtsI8wZjI6EvgMCef3Rx1NfS92dlrMcZ4I r58/ZEbB8V+/2T/2tX0HfZFrJhd3HP8AjQBgDlmxmlKBupOaa3Bzk1NGc9xQB514mQ/2vPufcc4+ g7Cum8FpGNJJGN5kIY9z0rJ8Y2yx6ikwbmYcjHTGBWt4OaNtPkRQd6N8xPQ56UwNxmAJ5rzPVkSP UZkidmTecE16buC9Rj3xXmGoY+2zhQwG8gA9uaQEDjcuB1rkbnxX5F1KiQq6o23JPUD0rq5g7QSJ EcPjCk9jXnl94evYXXyoHkVhkbecfWmBrv4xQ48u1YfVqiXxbOrEmNCP7vOf51jw6DqT3HlG3MbY zub7v51LdeHtSgkC/ZzKSM7kORQBrt4vDKQbUiQ9weKcvjAFCHtTuH3drcfjWJ/YGpJEZGtmPOMA gn8qdHoGpmRVNo6gjOSQAPrQBsnxiwiUJbASdyWyKD4ucAk2wLH0Yis5/DOpqfkijYY6hx/WhPDO psCxhQcd5F5oA2IPF6NIgeDan8XPeulVzNGsiEFWwynPY1wKeHNQe7EBiwowTJn5cV3FlALO2ihG W2jFAFkZKgnPTFI8WZCOCfWl2sxCg4zzQpKygD5j3NBUEnJKWxdis4lQEgMSO9V7632BSpwp/StG I7wDweO1QahjaF4J6kVrJKx9fmOGw0MG3GKVrWaMhQWOFGB/OnouG2N36GpYseYRgAe1KpVZdxOf esJtqLa3PjZNpNoux20SAKUBPqe9UL+3MThlGFPYCtZCGUc1S1GUb1TqV7183l9evLE2bb7nlYWp UdWzZViO1SMmgnapBNOCDHy9aidS+ATkV9MeseieGZlk0yIKFARQMjvxWuSCBzisDwbCq6MhQ5+c 5rbdxuPTpSAztbkxpd6c/wDLM157bMz3UbAZAYceteiamAumzlsDchGfTivO4yxlUKQvOOKYHp1v ny4yy7TtGVHY4qdjgdOvtUcLb4UfGGZdxFKhyAhPNIBzD91nGfWsV1KyFT69q2Wb5XFY5woOTkg0 AM6sQM47Yp65VeQePWkDA5GOD2pcADOcY70ANVQXJzT8hQQMk+1N3A5AyPx603GM9cfWgBwkLDDA fSkJ5ORz2ppI3HbwP51JjAwTye4oAZk7uMbfpTmBC8L1qJgVPXOOlSxkuOaAEjGQcnkGnj5d3GRS YXJz1FGVwQR+VADG+9k/hildsLg9aauWIGMU/wArP3icmgCHJzn+dOwTkZFPERB60142GDkZoAcq hScYoZh3yOfWmqrccZBp7AZBxmgBGcZ46d+KQNkjAGKNo4wcZ6ilVVGSOpoAa4O8E5xinqQAMc/W kDHGM0AMT90UALJgrxxUe7L4HHpUr/KMjGT2qEjdg45oAJQy8Hp7V81fGfV4dW8bzpb8pYxizL8/ OysxbggYwzFe+duc819L7iF+YZr5z+OWkXVn4xk1KURm01FVMDK2TmNEVgw6gjg+hBHOcgAHnVFF FABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAfQH7JVhby6h4lv2 jzdQRQQxvk/Kjlywx05Mafl7mvorUZAlo+A2TxxXzt+yRdbdQ8S2nkXB82KCXzlTMSbC42s3Zjvy B3Ct6V9E6mrNaMACfU+lAGG5A6gihSx6du9SGPd34FM9gDkUAcL4sm8zVyiyFwigYzkA9xWx4Mi2 2NxLkjfJtAx6Dr+v6Vi+J9OWxvw8Odk+XKnsc81ueEJTLpjRkYWNyq/zP86YG4VBUjGTivPtVs5E vp9iO6k7s4zXoi7WzkEY71VuYog+GVWU80gPNdkuzcI2A9lPNRwGQylTGTgcgDmvUhbx7F2IFX6V HDZW8JcRRIPM+8cdR6U7geYuhZ8YIPYEVJGj7SArNg9u1eijSbEMG8lWYHPzc1KlhaqxZIUDHrgY ouB5skUjOAsZYntjmntHImQ6lQeOa9MS0t1UgRL9cc1KYY3QKyghegI4FFwPKydp2njiiJSvUfL1 ORXpj2tsT/qItw77QaYtnb7GURIVPXjNFwPOXLKqsFKq/wB1scHHpTFLl8YLN7DmvTGjieMRtEjK v3QVHH0pUt4lTaYk2kc8UXA81aJ2j3hHIBxux0pCrRr8ysoPcqRmvSlgg24SGPj2pYbO23AiFCRz yO9FwPMV81GK/OpHOOhp0rvnLbiT6ivUHtoACGijbPquaI4o40AjRVT0C0XKcpNWb0PMUTnLKc4p PKZ22qCfQAZr0xbW2I/1ScnJ4p8trDMVZ4lyvA7cf4UXJPLpxKgx86+owaiKlgO9eqCztxKJBEgZ Tx7fhR9lgZncxKS3BJFSklshWSPM4on4yrflSyQMrllQ9OnrXpQtoQpUxLt9KFt4kbKxIGHQ4qrj M/wzHJBo8IkABYkhe4BNaLIS2aGUBsn9KftyOT36UgM3XHb+y7gKuSFPA4rz6zUNPHlgvIH616Br yhNMuNzhAUI3E9K4CyXFwjsAQp5HrTA9PVdqjBICjApVTjPc0BAAB1AGKeDkcjApAMlU+WzDBIBN ZO3cWL8E+netiUlYiF5yDWIflIOcnv7UAOC/MpXr70ki8d8dxUm9ABnrTS+9hgUAR7cnPPHrSjIU 7sHFLux0GPWmM4K46CgAA7sfwpcZY55FInzAgmlABU880AOO3aAcZpC4jz+VJwBgkjNRs2eCMket AE6kOASRkdabMwGAnUnmo4sFmwKeVOS3HpigBVxw2OfrTycdeKaFDD29KbzkA5OKAJ1YEDgVHv3Z DZpCzHuBjoKMKM7hz7GgB/3eFHFKSSOTgUm/5AB+VIpXOep9zQAAZzwAKX5VByQAPWlJ3Y5AFQ3E e8Bd/HcUAKhDEsCDQdwHXmmwx+Vw2Np9KTGS2Mk+tACsOgOSfXNHQYxk/WlOMDPy5pm4A8H/AOvQ A/PTJwe1fN/xyvvtfj2WDytn2O3igzuzvyDJnpx/rMY56e9fRxPAPbFfPnx70+K18WwXcTRh7y3V pUDkvuU7QxHYFQoGOu00AeZ0UUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUA FFFFABRRRQB7t+yXfvF4q1vTwZNk9ks5wV25jkCjI25z+9OCGA65ByCv0rqU5ig2KOZOPw7182/s l6d5niLXtV83H2a1S18rb97zX3bs54x5OMY53dsc/SOrLus2288gj86AMUkjnGPXnrTSQRzQCTnJ x9ajPJ9/agDiPEt0bvUpEPCwExqPp3roPB8appO9TuZ5Czf7PbH6VzXilQNXl2IYjgE8fePc1q+E b+2tLKYTERsWyWJ+9xTA68EfNwPeojGjNnGM1Si1WzYbjcRKp7lgKc2rWEOd93CR/stux+VIC0yh fl6/U0I20ZwKpPqtm4DpKrKM55xT11Oz2lmlQK3qwoAsu2SMAUoBxkgZPvVBtUsXG5bqLjjG4ZFT rf2oXIlXGOoI6UAXF+XqfwokOGGOKzW1nTgSouV3Zx0psmr6eQC11GAOOtAF5wTyKUhuD0qsuo2W 4BrmJc8glgBQNVsmTcLmNlPHBoAsYwMetLuPGBxVCXV7CNAXuYiCcDBzUy39o3K3EQ45BcCgC0Ey Ny8etOiG04Gc1nyarZIw23EZPcKwOKdb6pZs4xdRZPTLCgDQ75PT3ppJVhxkVUl1K1jYb7hOfQ0x dUs5DtE8Y92fFAFxTufnjinqfXJxVIajabgXmjUY4bcMGnm9smB23VuT7SCgC0w3DJAzQeoDYBz0 rOj1qwYgC6XAOMdDn8alGrWDci5jY524zg5+lAFpxg/40Dqcc+gqtLqVnwnnJk89RVeTW9PhxuvI cgdmz/KgDQO3jNAOBgDn1qkuq2LlgJ4yR15HFPTU7HKgXEe5ug3CgCv4kiNxo1wgPzYDD8CDXAwZ E0YHUsBgdTXearq1vBp8jJJHI/QJnJNcTZbp9RgCnYzSLgAdOaYHpMX3E+UAADinO+cfypu7kjNA Hr1pAI0hVCeaxTJukbI5J71tSEBWyOcVjbN7FhkDuaAE+YvggGlztypPHtS8A7hzUZxnv+NABgk4 OcU5myDgAU9QeeRUb5BwBxQAKxBz2FOc4OS30GKbg5yeOKVlLkEcfWgCEk8cZpwUke1SGPOM5x7U 9UUEfKcDrQBFAp356cc1OQCOO9NznCjk80uSB29sUAKThQAP1pDg84PvTd3IIBwO1KuVbAXGe9AC MwK5BxSDk/KcHvmlAxnK/KKYCQxJ9KAJTnofSkjIBJP0+tG4lck/hSO6IB6mgBN434HanD7w9CaY pQsSOTUrJsQEH5vegBJAGBHcVGrLEcLk+ozTo24y+7JqPgMcEZ/nQA92Z0G5RntTUwMBuMe1CsSu CBx1pxAZSQP0oAMZAHBzzXzl8do7VPHW61KGZ7WNrna+4+ZyBkZ4OwJxxxg9819FA7Ux3r51+Omm NZ+NmvDKjpfwpIFBG5CqhCCM5x8oIJAByQM7TQB53RRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRR QAUUUUAFFFFABRRRQAUUUUAFFFFAHuH7J7P/AMJlrCC72RnT9xtct+8IkTD4xt+XJHJz+84BG7H0 rquRZk5IwR0r54/ZJaH+2fESNZyPcG3iZLsRApEoZt0ZfqCxKkL38sn+Gvo3UtotJNwyDjH1oA57 dxyOTSp8y4xyKcIwGOe9MYYJK5wOtAHA+KPOOsS+ey4UDYAf4e341lKshyyqzAenNbHi9GXWS+Dt ZFI/lWx4KSNrKcgkuZMNnsMcf1pgcqqtlQUOD2AzT7i3kYDZE4U99vBr0lII1OfKQH1CilWKNQIx Egj/ALuOPyouB5hNbT4wsTAL3C8UyKOdiV2HI9q9Uk2qDwNp6io7a3hUHZFGnOflUCi4Hm0VvKy7 hC5BO0EKTk+lLJG8ZIeJ0YdVIwa9Ozj5cD8aZJDFI2WRWPTJGTRcDzFkmMwVo2U+hFSGwmyFaJt+ fuY5/KvTGijB3lQSe5FO2xgjaFB+lFwPMBBOASsUmB1wOn1py21wFDLBK+ehCEivTcLtYBEG7rgd frTgEVQqgADtRcDylonc7Qh8wEjaBzThZ3AIDQSBmHAKkEj2r1BlG7dgZprlPMVmQEr045H0ouB5 h9mlVigVtw6qwxikAdl2srD8Oa9NbMr5ZFYjpkUKv74sURWPUhcE/jRcDzNYX3hfLbjsasfYZmQj ysP1I74r0kom4ZAPtilZAfvBcDtii4Hl0cDjOEyRTxbTvukSGRlHX5Tge9eliKNlIEabfTAqSJML tXAA6ADGKLgeYxxSSFhGjso44XvT5LeZMeZFKn1UivSsBGJIxnqRTWCSFS4BI6EjpRcDy9i5Pyqd g74qG4s3ZN4VsetesRqm3aEQc5ximrDF80axIAeowMUXA8iS3cyDbG3HfFXGR4gNykHHSvSo7eNA QkUag8HCgZqZIIkAKxIp9gBRcDy9A5jLdQODxS2RIvYHJwVccgdDmu/1yKL+yblcKgIyDjofWuDi AFwhPXPSgD06Mjyx6kUxiTTbU7raJ2OSygn8qkwOvGKQDHTKNk4zWX5oUYAyOnHetObBVi3Awc1i x5JGKAJC2QML1qMHtjn3qQNhiGB4pXTONvWgBEGFGT0pGfkDFKxJG0jbTVYrzgGgBW4xk9aIs7ua UNk5YD/CnuMDqfrQAr8HcOQO1JlhyM4PWmx8Hn5h3p+8Y56dqAEbOAw5P1puOBgDNO4CjHeozkMG U4oAUEZAIwaeBzlRn8ahX7wL88VIH2kjt2xQAOxGBznuKZjMe7b+NDSHJBH5UoYKct92gBJMHOeP em+UNvYj1p7AMOu7HSkRMEDnBoAGVSMYww7jvTgdgA6/UUqhdxGOPWnOgA65oAbIo4I6ehqv0yPf qKmVxuwV/WkkwwBA4oAaSCDkCl3EqMcUq7QGOOnTNIG3gBlwD3FACfewfSvnb47yB/HWPKuUK2sa lpSdr/eOY8n7vOOMDcG75J+iiwHAA+tfO/x6inj8bxtPOJUks42iXYF8pdzDbnv8wZsn+9jtQB5x RRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFAHuP7Jt9cR+M9Y sVkxaT6eZ5I9o+Z0kRVOeowJH/PnoK+n7sD7NKOo2k180fslXN4viPXrSODNhLapLLNsJ2SI+EXd 0GQ8hweTt46GvpLUspZvg8HGfpQBhvuOKaSxJB4NN2urcHg1OAdmTgGgDzjxRLK2sTCZmIU7VHYL UVr4k/sO2CCBZFd8k96ueLA0mqy712EAAd8jsaw10G/1oo1nGrKh2MWYBVz3/wD1UwOkh+IFpJ96 0lT3Jz/KkvPH9tHjyLKV8/3nAx+GKwovBGqrMY2ERC87lbIP54om8E6sInk2wEj+FXyT9OKANk+P 7ZwR9mkyP4s8GpYvHtkEJeCYnHAQd/fNc1F4L1RkJWPHoGBGfrnpUsPgjU5DtJVCOpPA/A96QG/L 4/sxFuFnPvzyDjH55qJviBAykJZvuHOc8fSsa88EaoqqIzHI3puA4oh8D6uyEssCHpgyZz+QNMDW /wCFhq8Sq1i6PnB+bcMevrSt8QIQQBZM57kNt/pWLN4L1OOJpHEQC9cNk/pUCeE9VZA8cSOh75I/ SgDqYviBakRj7HKCepZhhf8AGpF8ZQyZcfZwB2JIP5d65hPBuqOudihf1/KpU8E3zuVVyr7cjcmB +JzxSA3x49tVjz5DMR1A7/Soj48gcFo7cqB1D8k/QjpWFB4H1OfKkpG4HJkyF/A96VvBWpR25lZU LZxsHWgDWn+ICKybbJmX+Ih8bf05qx/wsCzK5SBnYDlckE/jisAeCtZ3jfFEqnvvz/KpV8AakJQU mtdjDksxBH4YoA1D8Q4WChbCRXJ5JfIX9Of0q5N47shEvlwSTScE7TtH6iubk8CatvdUEBUHAbfw ff1qaHwFqqg7pLPjtvbn/wAdoA2o/H0JUn7KyYOdpOcj2IH86fJ49tNgMdrNkjndjg/ga56XwTqy EhBC/rgnH4cc1DJ4O1dDzGm0jOQ2aYHSXHjq2+zh44C82fu5IBH1pD8QbRUQ/ZJSxHK7hwf61zn/ AAhurBSWRcAZXac5/DtSDwTrW3f5cAI6KZOaQHQr47tS2JIXyejAHH+NEvjuJQTDEGH+6awk8E6t JJ86IqDPzE8njsKhbwhq4AMcKn5sYzgj35pgdIPHVuFO6MF+2FODUTePIiql7byxnkZJJ+lYEfhL U2J3xkKOjbSSfwqS58E6s0O9Y4z7B+fypAasvjWG+hktkiPz/KMjpVaxIa/tyMFt6jB781kP4T1L TYYr2VotgPzqCcr2Ga0rHImiJOOR0pgepbMc4H0pjYpQT5YyTwB160xiBkg5zSAbINyMDyCKxWIj YjqecVsSO20gcVkbRISx4NABliC3QGlDF05YgjtS7gvBIqIkFsjr2oAPMzuB4JpUI25P0pjrgg5p 8LIAcn8KAJIjuJyMCns2Djt7U3I5A+ooVdp6daAEUru4OM9RSlgCFGMepppXMgzg01gUYcUAO37u g56UjZwc5wO1KAcgjr2qXBxtPBH60AQqfmAHPHen5XcMjBHHFIMI2BnnvS7STnGGHQ0AIwyTgZ5z UEm85C9B1qfpk85poJDEDoRQBDESfYjmpdxwMnmm4AOR9DSsVBxQA3DjJNTRklQuelRsxwOKf0Y/ KM0ANKqrnJ4HPNIWAcgdPrT2KsDwAMdaVSAD8oz6kUARooPJ5HejzONoAAocsxwRge1KiA4zwo5O aAFVPmBOADXzd8crWK3+IV08VwkrTwxSSIuMwsF27Tz1wobtww+p+kmcK3fA7V8yfGcg/ErWCOn7 n/0SlAHE0UUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQB9Cfs i3WzUfE1n5E7edFBL5ypmJNhcbWbsx35A7hW9K+htWfZakN3YCvnf9kdrtdR8S+X9n+weVB5u7Pm eZl/L29tuPMznnO3HevozUtrWcmcHAz+PagDB3HOR9RTtzHg1EQ20cnPSnIxB5oA4LxPbCLWJsks Xw+TnvW34LikSxmcrtjZ/lPrxzWL4quHfVpQTkqAq+w/zmsWbW7+y8mG1naJFPmYHQn0PtTA9XI4 B284pucHPb0ryNvE2sveef8AbXVj0VeF+m3pTLjxPrMk0kgvnBK7dgACj3A9aQHsCkkEk/nSqw5x 29a8VvvFGtSW8MAv5VCA5ZOGbp1I5ptl4j1aMBhfzuRxh3LfzoA9pfBcNinIcnAFeP2/i7V7e3mj +0eYZOjv8zR/SgeLNZZosXJARduAOvufegD10lS2AAM9aeFJC8civIIvF+sWy83AmJOf3ig0+fxb rNxIki3ZiKjlYwADQB6+u0Y4H4UjAZyK8jj8X6xEpH2reW6llHFOl8YazNGUa7EYPdEUH88UAesj J5BJpSOPevJbPxjq1rFJGs6zbzndKNxX6f5xUd34u1q4jCG8KAf88lCn8xQB64pLHBpF5fivJrrx nq00caJMsRVcFlXkn1NQjxhrahMXS/KAD+6X5vrkUAexE/MRzz0psgHuB9a8tk8b6q8UIDRRvHyz BeX+vbH0qHUPGurXm0xutuFGCIR1/PNAHrKnC8dD0qPox54ryKbxbrTxBftQGMfMFAb86r33ibVr 23jilu2UJ3QBST7kUAezg+mPTpSEncQcV5Hp/i/WLYSD7QsxdcDzlzt9xjHP1p6eM9bFts+0ozA/ 6wxgt/h+lAHrZGCAOPf1pgIXJYZP0rze08fXscG24t4JpO0mSv6CsKTxRqzXxuftkofJPlg/u/pt 6UAeyBs9AMVIASOuBXj03jDWLnKi5WIA5xEoX9agHiTWV3EahPhuuWz/APqoA9S8SQq2j3KAZZgO foc/0rz7RwG1K3Ezfuy43c9Bmk0vxPqJJgupjcROMDzOSp9c1LYx7tRgR22ozgEgdAT1pgeoSOGw MYB703AK8dqbs8pVXqqjAz6UnUY6UgBwMMGyQc1ksNuQhyAe9arf6s461lKhC/MetAEJG9uBj1qb phhTYx1JpHyBxkUAT/KY+ec98VGyIFPc02NeB/PNKj8lCOPXFABGuFHPSpn5Q4zntUS/Lkd+xp27 oAOvagBio5fPT0Jp/B4Ygn1pVy3BGMUjAhvl/lQAmQHGB+NBwM5yTTMkZ7DPNTKfMGBxigBqqXUk /lSoFAYHgUKvJI455p2PlOG/SgBNvGBzjoKiKjg5OaeuQScZNMZizEAYxQAKwPUZGaZgDPGQOalA z0IFHDrt4UDr70AIwXbuGeelMO5uSakbbgAHGelAAAzk0AEakjnGPel2/LkH8zmk4JAzTDhfu5oA M8gEk4oOAMEmnQgHHHzd6ZKPmwO1AAUWYAk4Pevnv47aI2n+K11Lz45I9RXIjAIaMxqinPYg8EH6 jHAJ+g4eAcjJzXzv8eST48YG6SYC1jCxqADbjn5DjqTy/POHHbFAHnVFFFABRRRQAUUUUAFFFFAB RRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAe2fsoW8zeO9VuFicwR6a0bybSVVmljKqT0 BIViB32n0r6e1Xm242gEjNfOv7Jt7qn9oa9ZoN+jCJJpCz/6ucnC7Vz/ABKHycf8s15GAD9GXi+f ayBuNo3D8KAMMrzwRx2pQMsRTQ4yRg4NSZ6k9DQB574rSRdZmDBVOBtI7jFTeH/Dtvqima/VmhXh MHBJ7/hVPxBMzaxcrIxdlfqfTsK6PwpqMAsYrSRwsqk4B4zk5pgVrjwNpzXqyRSSJCBzD1z/AMC7 UJ4E04SzM7zMjD5Ez9z3z3rpHu7YSeWZ4xJ1wWFV31jTlfZ9riDfU/zpAc1pvgKwUsb+WSds8BTt AH4d6WL4f6fFKp+03LJn5lOOR9QK6dby3dA63EQU8Z3ij+1LCNzGb23MuMlfMGRQByN18P4JCPs1 88ak8h4w2B+BFXl8B6cbNY/OnEoOTMCOR6Y6VuNq1gqFvtcPX+9U6ahbNAX+0ReWP4gwIoA52TwN pDSA7Z1U9g/FVZ/ANpvJivJlU87cA4H1rrZZ4zEriZCjEYYEYNNa6t0UNJNEBjOdwoA5a28B2CMT NcTyqRgAYUg+uajk8A2eTturlRnIBCnFdZ9vtHA2XUWT2B5qFNWsJZTGt5AWX7w3gY+tAHKz+ALZ lPlXsyntuUEVNbeArAJIjXNwQeVbgEf0P5V1X2y02hlnjIb7uDnNIuoWeeLiM+oDA4oAxk8F6Okb qbd5Cf42kOR9MYrObwDY+UipczLIM7m4O7049q6xb60eNil1CQvX5hkfhUL6haIRmeMn/Z5x+VAH Op4DsDZujTSvOekp4x7Y6Up8B6cI0Tz51YY3EEfNXTz3tusG8yoFHOQ2ap2+s6fO5RLpGccEcgg+ /pQBz8ngKweSTbc3CocbQMHb+Peo2+H1mW4vJtuehUZrsp7qC2RWuJY41boXYCoYr60mB8i5hlUH ko4NAHMWvgPT40cTTzyOeAwwoH4d6UeAbBYsNczlt2QwwOPpXSjUbMqWFzFtBwfm7/Snvd27KXWa MooyW3DGKAOSl8B6e1xv+0XKxZ4RSOPxIptx8P7OSRTBdTxR9wQGJ/GuvS5tpFRkuIipGQQwxSPf 2UJw9ymR1Cnd/KgDlm8AWDzqYJ7iJNuGU4bJ9cmrR8B6WIFQSXHmdS5Yc/hit9tTshGrefHhs4x/ hU1ve286nyZY22jJAPIHuO1AHO3PhPSbOzMkUUolUf6wuT+JHSuatQDeQdTl1/nXY6vq9jLZ3MEd wGcKVZRnIrirdwkoBzk+tMD0wkAD0HQVFn5qisBIbKDzOX2Lk++KmYEHmkA5lyjH1H5VjyMzEjH6 1rPlozs7CssArndjnrxzQA2PIIOCfpSNKudnSpY8gZOT7CqMvEuRnjtQBbYZQnsKSPjGRkU2OXdk D8qkiGT7mgBxGckY/GghCQCc/TtTtgCnJ5pMKvp+NABtH90fUdaRgRt5IPtRvA6H8qYrfP8ANigB WXIyetKhCcZp/O7gDaf0psgyeMdKAADdhlJGetKy7fm6801ThTj8hTySCOcg0AKdp5PQ1FuC5OOK WWbZwRnPaq6q8hO4kDsKALeV8sbRnPWoZTtZSAaUDYAFZaewVhyvI70AMOXJzgg/pQw24BBNOYf3 fzozjOSSaAIyAWwBzQUJHp70qgq2T1PTNOQAnDE0AJGCuQowetObhBx9eKbGDvGOPwqViMccjuKA IAckZPBrwD9oYY8Z2IByP7PT/wBGy19ANhM5UEfyr5p+NUcK/EG+aGfzXkjiaVNhXym2Abc/xfKF bI/vY7UAcLRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFAHvv 7JN3KuteIbIWjtbzW8Uz3IztjZGYKh4xlhIxHP8AyzPB7fR+o5js5Md8fzr5w/ZJSE6z4ika9kSd beIJaCUBZVLNukKdSVIUBu3mEfxCvo++Yi0kON2Rj6UAYYBA+X8aTOM47U7pyaR1+UYAGaAPOvEC yLrVyJCpYkEY9McfpXLawJDcr8zYA4ArrPE0cY1qcxdRjf7tiug8MaZBcaTm4hjkV2JGevBxTA8m SWcEIxfGOhJp21yP3SvkfewK9visLSBFjjtoiqncNyg4P40xtOs/OkdbaNS53MQMZNAHhypLMx27 iFGWIGePekmLxKhVWXPRiMflXuRsrXcd1vECfRAKQ6VYyKQ9pA6t1DRg0gPDbdHbe4ZiT941ajN0 6eTAJmUD7iMT+lezRaNYW6t5drHhuGyM5FPh0+zt5FNtZwREcjZGBTA8b2X8C+QVuYwRjy8MP0qC PzZVaNd5UD5lGcV7pJBFIxMkaEkckioWsLIxsgtoQCcnCgZP4UAeILJOjgxtIrNwCCcn6UzZJlmA kL878A5/GvcF02zVcC1hAAwBtFRnSbLZs+zR9c8dfzoA8XjurmNdiyzKpONu4imiSQOxDuAT83X9 a9sgsLKB2KWkKluC20UiaZYpP5qWsQk65AwD+HSkB4wpmUb0EiryN65/nTUiutjSW6TBccumcV7a LC2EqzfZ4w4OQQuOfWnTWkE+5ZIUOeScYz+NAHhkRuAGkBkwThnBP6mljaSNiyMQ3cg4zXtUuj2E inzbWM56gDGfyoj0bTo5EaKyhjKdNq4AP0pgeLSMTjeWPQ4J60pWVFX5XUMMjGeRXt5sbQbwII8S feyuQaZ/ZdhuB+zIT29qAPFI/tO1/K83aR8+3P61HEZAASXCdj2r3JNPs49wS2hUMcsAo5+tQS6H pzLg2kQGc4AIFIDx5ftSRusQm8phlgoOCKhSaWB8ozISOccHFez2+j2MTf8AHuuD2JJAqf8As2w2 sDaw4bqdnJ/GgDxEyyKA29+TnAPf1+tJHPNExkikkV24JV8E/Wvbk06whiCLaW+308sf4U1LO0SR WjtbdcHI/dgYP5UwPF7BZJrkeUHLk5P/ANeumt8C4jLZbDDI9ea7y8srUb5Wt4tx+8wUVwkUiteE Rj5C+R+dAHowBjACD5cdDTx8x5FOjdnijYj5toJpG3cEikBGPlJ6YNY8rEu7L07CthzwTtxWSWxK /HU0ALG5CgdMdTVe6A4wB9QetTkE8A8VCY2LZHGKAGwJhunHc1aABBI4oi2gEYoZeRkflQAjBiBl hj2ppVpMZI+ppQAoJ7e9JuXcD/OgAVcLwufU0hXklRStKWOFpP4QeR2+tAEobaMYzkU3naSMDnuK BycelKcLwT9KAGI+CePxpFYkNjrSx7SWB4pGQhs849qAGLGzvljUyHYcNyM8GlBAxj070SfMuRQA hZN20/mKXvjr65piAGQnbxTmJDEqOKAFIZVPIqM5wScehIpw3deCBSj7uRjA7e9AEbEkDI6U5VAX huR6UZy3OPxpm3a3bPtQBKvByTSZJbK8cYxSIpLY6jvUsifKNvBoAiYAZJHNfOXx2so7Xx15yM5e 8tY53DYwCN0fHtiMfjmvo9RjdlcA14J+0TJAfEulxJb7blbPe8+8nehdgq7eg2lXOe+/2FAHk9FF FABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAe+/skw2R1rxDPKY /wC0Ut4khBfDeUzMZMLnkbliycccdM8/ReqOVtSAeWNfNf7J13EvinXLI2kb3E1ksyXJxujVJAGQ cZwxkUnkf6scHjH0pqO02h3HByMH3oAxVYAdiTQTuIz+VBUrySDjpTtvyZPWgDifF9vHFfpLH96V SzgEcY4zVG38Xf2TbQWi23mEMWZi38JJ6e9WvFp83Viq4Ploq+uep/rWInhnUtTP2m1jUxtx87be np7UwN5fiBbIW3WU23swYZP4VZXx5pYm+QTuu3JwnIPpzXJS+D9YjKqLZWJPVXGB9aZd+E9Xt2UL bCUMduYju5oA7O48b6SIlaIzPIc/Jsxt+pP9M1QtviBGUf7VZuCPu+WwOR+PSuah8I6y4kP2TYyd mcAt9PWoZvC+sQIJH0+fYTjCYc/kuSKAOssfHyTXojvbXyLVhgOGLlT6njkfSrZ8caYLmVFWdkjU lJNvDn0A6j8a5G28J6vcBgLNk2/89CFz9Kjg8MatJd/Z/sUiHu7jCAfWgDpYvH6vJ/pNgyIAeUky fyxWivjTSmsGnPm+cDgQBfmP49MVxH/CI6y16Yvsh7nfvGw/jSX3hnWbQbpLJ2A7xfP/ACoA60eP 7TfGDaTBedxJGV+lP1Dx1psVmslmsk05OPKZSu33J6flmuct/A2rXNuJXNvA55CSOd36AiqkPhLW pZ5I/sRBXPzMwAP0JPNAHXzeO9LWGJ4kmZ2++hGCn49DVa58e2/nRizs3liAy7M2059B1rDuvBGq w24k2RSv3RGyw/8Ar1BZeFdYnbZ9jMS5wXkYKB/XH0oA7SPx3pkkyo8NzHERzI6jg/QE1Fd+OdNh QNapNO3oRtA/E1yb+DdZMzxrFGQo+95gAP0qIeDdZM/k/Z1B2by5cbfpn19qAO0sfHemyoxvI5bZ x90Y35/EUyfx3pqxEwQXDvn7rAIPzya43T/CWs3LzK1sYfLH/LVsbj6L6/y96qyaFqissYsLsMRn /Vn+dAHcL4+shES1rOJRjCZBB9ef/rVd/wCE00byS5nk8zj92Imz/LH61xVv4M1mWfY8KomM+Y7g D/GoI/C2stcvCthLlTgsxCr9Qx4P4UAd6/jTRQFIuJTkZIETcexqpaeP9Nl8wXEU0IUZU43bvbjp XFXnhnV7aRl+wSyEDO6P5h+lMXwxrLRmT+zptuM84B/LrQB2J8f2SygLaztGfvMCMj6A1Kvj3Tiu WhnUl9oUgZ2/3j/hzXBXGhaparEZbKbEi5UKu4j6gcg1Z/4RHWT5K/ZMebzksAF/3vTr0oA61/iB Zl3CWlwwzwcgZHrVu28Z6NJAGmne3c9Y3jZiPxAIrhZvCOsWkyD7OZSw4MRyM+/pUkfhHWHb5rXA 9zSA6+98Y6dd2Tx2rOJidqBlI/E1g2Y/0hFRTksMY9e1VoPCup26NPNEEijPIzk/XFWrNM3kG3O4 yKAe2c0wPTLZWjgTe2ZFUA/WpDlhkk0iDagDNlu5pHJBz2pAGQ0ZyO1YzRcnkAA1qSEGCToMA1k5 ZhntQAjA9jx7UIMqecj2pqkn7vHapcbcHp60AIqc7vSg7iwGccU4kFRzUCSYlYk8YoAlJ+U85+tQ k7hjBJHvShmdsjpSgDdnt7UAKi7QcDr60oYjg9KcxwAMdR1xRj5BgZ9aABccEDj19aWQbgMmmAEY Xt7UvViBnHbFACqioCOp96FJx2py5VeQePWmqoLk5oAACWI2jin7cdMUZCggZJ9qaJCwwwH0oAco AOTjmo1ck7eAPUUpPJyOe1Jk7uMbfpQA/K9DytNJweB8pPNKwIXhetJGMg5PINADdgY55OKGjIPX 6VKPl3cZFRt97J/DFAEiKBHxye9JJJjjAyKa7YXB61Fk5z/OgCRpGC84r5l+NPlH4jamY2YsVhMg KgBW8peAcnIxg545JGOMn6YwTkZFfPfx70mKx8XRX0U6M1/CHki3gsjIAmduOFIAx1yQ/pQB5nRR RQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFAHvP7Jem+Z4i17VT LgW1qlt5W373mvu3ZzxjycYxzu7Y5+ktQwbOTC56fh7187fsjsn9o+JUN3skMUDC1yv7wAvl8Ebv lyBwcfvOQSVx9E6gTHZuUPXg/SgDDA4zjing9uvrSHkZ6ZpuTuHpQBwXiRlOs3B+VcY+73wO/vW5 4MZjZ3C7jtVwQPTjmsfxaIhrJMSc+WC+P73P9MVzza3f6RK6WpCrJ8ysef0pget7TuznGPx4oAwO p59RXk8/jXVbiGKKUQheAxRSpb68/wAqdJ411QRBEdEK9DtyT9c9aQHq/fJ/Ok38kA4H0ryj/hON Sbb5pB4x8h25NKfGeolsxscDnBbJ/OgD1MZB78+tO9wfrmvJU8bawjtmSJ89nXOPpVhvHurYXalq CBziM8+/JoA9PJU9T7CpCMr15NeU/wDCbath2xCdwxnZjb7/AFotfGeopIGPJ6Hc2R+VAHqq/KTg cGnd84Iry6PxzqkTZZYpEz0I5/Ok/wCE61VZHcpBgjhSp2j9aAPTye/60jN8uF/GvKG8Z6uzjMq/ M24gJ+ntUreM9UK4LoPoMfnQB6f1PNOOARxXlz+K799jAHK46sf5U2XxjqrZzNHj+6EAx+PWgD1U Fe3FKd2OO/T2ryuXxnqdwE27IiowdgIz7806Xxrq7BMSQoqjBATlvqf8KAPUWJJ54x0oA+UEk815 R/wnWrp8u6EjOcmPnHpSf8JvqwUjzkDE9SgIA9MUAeskE/nzSorruyc4ryiPxprBXLTIw/65gfyp i+MtXO8NMGzyMDGPyoA9SuAxkyq4x61ICGUEgk/SvLB401ZypLpuXuBS3PjbVHCDEYYd0GM/hQB6 mF3NnGPahuOCOK8jj8VamhZg7FxzyzEfzqa48bahIIy4CzIOChwpPqRQB6TrDMul3Plx73KEAVwN qczqOhz0qnD4t1WfbFM6srHGQgB/DFW7Uk3MYQcs4XJPUk0wPTLZv9HjDNuJUfN60jv2PSmjEcca AY2rjApSoPXrSAa+CjA/xDisMZwcngcVuyxgxMB1xWIykdvrQA5RgDHXFMDE5D8UmM9Tg1IMEBXz mgAiO/OSKjRNpy2Klj5YAHgUrgNxnmgBm454wB0xSgADIPzUxUz1OCB0pf8AayRigBUbICE804Ng kE4qNIzjPc1IEyQetAD8BVPIJFIGByMcHtQEzktgZ7CgL8ylevvQAuABnOMd6TcDkDI/HrSSLx3x 3FN25OeePWgBcYz1x9aQkbjt4H86UZCndg4poHdj+FAEuMDBPJ7ioWBU9c46U7GWOeRTjt2gHGaA FjJcc0uFyc9RTC4jz+VOUhwCSMjrQAuVwQR+VRrliBjFLMwGAnUnmhccNjn60AO8rP3icmkERB60 4nHXinqwIHAoAgeNhg5Ga+bfjhDdxeP7lrsuYZYYnttz7h5e3BwM/KN4fjjnJ75P0rv3ZDZr5h+M plHxF1WKW4mnWPyxH5pB2KY1baMAAAFjj8zkkkgHE0UUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUU UAFFFFABRRRQAUUUUAFFFFABRRRQB7t+yXFYt4q1uSSaQaktkqwxAfK0RkHmMeOoYRAcj7x4Pb6S 1UKbNyynjpivl/8AZRGfiJqP/YKk/wDR0NfTutK/2PCHAJG76UAZIZSmcn0xSrkRgcc1XjcpncKd vdzntQBw3iKVZdauSDuwQvPqAAf1FRaToFtq5mkYr5qEKSSRgHoR+tVtWQR6zdIpbAc/e9e9bfgu eNby4t8rvkQMOeTg/wD16YDpPANk7jbNIEB/E1FP4ChCHy5c54ALHj3zXYx3SOdkUkbuOSFYEila QAFpGCqOpJ6UgOJi+H8JJaa5cHsq8j88Ck/4V7bqWYXshHPBQD9c11x1CzIc/a4CF5b94OB70/7T Ebb7R58RgxkSbxt6469OtAHH23gG2Rt0l08gPJ+XBFObwDZuoP2qdXxzgAiuxR0AQl0wxwDnrn0p 0skcCO8zIiDksxwAPc0AcX/wgVsZAwvHCj7y7ev454plx4BiYhoLxkHdSu7P48V2aXMTqWikSQDn KkEYqJbu3kjMsdxE0ecblcEZ9M0AcangJWwv2vyyOThd+f5U+58Ao8ARLxvMzk5Xg12dvKkj/I6s PY5qVmjD+WXUSEZAJ5P4UAcX/wAIBbeSMXkySZ7AEY/nSf8ACAQbMG9cH+9s5/Ku5GApZug7+lQP PCksaGaNXk+4pYZb6DvQBydt4Et41PnzbyD8vJGfqKSfwPDJJuV1U9woOK6w3NuHZTPFvXgqXGRR bXtrcNttLiGUgZOxw2PyoA5N/h/byruF5JGSPuhcgH86YPAdsFKtcM3HXHX9a7TzASUV1L9SM8io WkVCAzhcttG44yT2oA4yX4f27IPJunTI6lc/pVeL4ejgSagNvfEXP867xXUP5bMA2MgZ5xTPtFus 3ktLH5x6IXG78qAOQ/4QG2DfJeykdgyjikHgCMRkCYFgflbkFvr6V1dxe20EojluYEkJACNIAxz7 VIt7CGP+kQsV5Pzjj680AcnB4Bt4izXVzJz/AAp/iaZL4Bt+CbmQdcD1+tdrJcwOgZp4wuNwJYYx 65pqSRXClonSRR3Qg/yoA4pPAaMQ5udn/TPr+tSN8PrV45MXUwkbBU4GFPfjvXXwtGzModWYdQD0 qXz4VyPNjyOMFhQBw194Ni0+xFykzNJFgtk8H6VnwyPHcxFCBIGDD613evTx/wBiXR3qVaMhWzwT 2/WvPbLcLyM5GQwOcdKYHqAO5FIByfWpFGM5x9DSRf6pd3PGc4p5Q4zntSAjfJjbbjOKwXDA56Z6 10DqxjOBxWE4GNvvxQBHkt1GcDrRywwT0qRVGcc59qVgvQ4zQA1VCLuNAIJGF5NJjZ/ECfanAfN1 +agA2ncGOTjuelNZQScjNTfLjaTwO9RnAYccUAAOQAQQKdkqAB0PemSSZxj8qashX1oAf90g5ye9 S70AGetVxIGbpz6mgsQ3zAGgCYvvYYFN3EEYU+9NXKtgj6AVLtGBjAoAjl4TgcUxwwUHtU7DsefU CkZduT27CgCJcMpHel4AwSRmjGT6Z5FRSqVI70AKzZ4IyR60sWCzYFNCkj2p0CnfnpxzQA8qcluP TFOChh7elOIBHHegnCgAfrQBHzkA5OKcWY9wMdBSnB5wfemswK5BxQAuFGdw59jXy18VtHm0bxxq QmO6O8ka9ibgZWRiemT0bcvPXbnHNfUY5PynB75r54+Pxuf+E5iFz5PlizjEHl5zs3Pnfnvu39OM be+aAPNaKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooA91/ZM nvl8Va3BEJP7NeyV5yI8r5qyAR5bHB2tLgZ55644+ltRYraPzgHjPtXz7+yL/wAzX/26f+1q991Q eZZtwcKQaAMOVSfoaYPlxzU2MMAeRSFCR8q0AcB4qSVdVdmC4cAqR1xXIavI8dxGRuQ4+8OM11fi ITLq1w0oIO7CgnPy9sVv+D7K1vdNkW5hR5FfLbhnPp/WmB5VDJJDKGglkiYjBKMQcfhUkl7c7nH2 iY7vvZc/N9a9pvdF0+8YNdWMDsvRtoB+mR29qrw6BpcN2LmGyhSZeAQOB9B0oA8XwZGyWy3vTjNL 5LQmR/KznZuO3P0r2qTRNKuHMk2n27MeCdg5NPt9F0+2Qrb2dugIwT5YyR7mgDxITzAAebIBjAAY 4FOluJvLI8xyH+98x5r2S38PaRAWMdhbkt13pu/LPSn2+haXCWEdlCN3JGMj8qAPFEuLiFGWKaRF cbSFY4IpqbvL25cKTz6H8K9z/sXTftJm+xW3msME+WOR9Pwp0Oj6bDxHZWqdziJf8KAPDow0ZJDM AD0DVK0jyHc7Et7nJr2hdF02O9N0llbiZuCwQY/Lpn3pt1oOlXLlprCEtjGQuOPwoA8ckvLh/vXE xJG3755HpTBLKZFYyOHT7rZ5GOmK9rbSrI2gtmtYTAoAVCgIGKil0HTJYo4WsoPLQnaoTGM0AeLP JLI7NIzO7H7xOSaSCWSGVTG7I46MrYI/GvcbPSrGyDC1t4ogeflXv9arXGh6ZOR5thbHDbuIwOff FAHjbyyyuWaV2cnJJY5ye9K8rqvltI2zOSpPGa9mi0TS1kEsWn26upyCIxxStpWmSzyyvZ27SS/f Lxg7j6896APFnubgyiQ3MnmKMK285A9M1CHfzPMMh80chs817jJo9i6lXtIHQnO1kBH5VVm8O6T5 nmf2fblj1yv9KAPF3cvJvkYs56k85qQZGTknPXnrXsNz4a0i4jCPp8AHXKDYfzGD+FTR+HdKa2jg NjCY0+7xz+fWgDxhi5YFmJA6ZPSmSucfKevoa9yn0bT2CA2UB2LsXKDgVWl0HS7iTzJrCAuBgfLg Y+g4oA8atLiWH7ssin/ZYilkmmaUO0sjEEnJYk+9exx+HtIRGUWMO1jkjGRmrz2dorxyrbQ+cnCP sGV+hoA8RglkEqDcygHA9q6uzP8ApdsQwyZFH611+q6Hp0kF1cNbxpMw3mUDnI9K4qyHlX0Eh5Cy K3P1oA9RMh4yM4py/MBjofeo1G5QeMU9flApAEshVT8p4FYZG45xg/Wtp3Cgkk9KxZJBuJHQ9OKA ImL5yrUzYqsS7dfSp15J+U59qa8W7vzQAxYgr7hyPepWb5hgcetRwlySrdh1pcsOvQfrQBIwAzxn nihQSh5wfanIS46H8qAo57EdaAIAuCM9aUle4ol+9xRHHk/N+VACAbm+QcVMIwee9IRtyMcY7UoO VyTj+lAEmNxG4Z4zSAkEDjGaYCQBhx1qszO7hVyRmgC2WyxUA+pNRMSdwGfxqWPCjn09KQ4Hf5e4 oAjwdgJ59KeOR9e9OGORjAHeo1O8nHGaAFRFBGRzQTkhep59qa0ZLcE8dqVdwPQnn8aAHZIHb2xT d3IIBwO1KcdgM0DsCMGgAXKtgLjPekAxnK/KKeBz8oJP1prsRgc57igCMEhiT6V86/HizjtvHfnx ly95axzyBiMBhuj446YjX15zX0XjMe7b+NfPf7QJkPje33oiqLGMIVYksu9+SMDBzkY54AOecAA8 zooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigD6B/ZItN+oeJ bvzrgeVFBF5KviJ95c7mXuw2YB7Bm9a+iNSVvsjBB3+b6V4F+yEcDxb/ANun/tavoHUGCWknuMUA c8Rhs49qlXB60xwSOuaEO0gc59MUAcZ43aFdQQIG8woN57e36VU0DxHaaSrQXG5WlbO/PAFN8Snf q92WYnDY57cCuan0m9vrjdawtKOmB1zTA9AHjLS2JxIxjHVsYP5GopPGmlx5JMpQf3VyTXDzeFdb h3P9ifAGflZWP5A5NRLoeotArtauu4/dYbSPwNAHfQ+NtL8hpHEi45CgZJ/+vUcXjrT53Cxxzoev 73Cj9Ca4SXw9qUSqwtpGVuV4zn6Uw+H9TCgi0kwTg4Gdv1pAeif8JrpjIQvmeaGwAwwD759KG8Za bCy+bu3N02EMB9fSuHuPCOs20Yc2pkHT90dx/LrVZ9F1ILhrKYMOoCZ59KYHof8AwnOjsSpaYsq5 +VMgn0BpT4z0owB1eUuDyhTDf4GuCt/C+qy8m1aLHJ35B/lQPDmrtIyxWryOPTj+eKAO+g8Z6ZKN u5kxySxxUZ8a6YJFiy25uhJ4/OuDPh7WPJLnTrjA68c/l1qGTQNS2AtaPz0B4NAHoD+NNNRQy7nX cQdpzUz+NdJVV/eSFscqFPH415w/h7UYoxIYGznpg5qUeHNW2+Y9s0a9CzdKQHfW/jXS5ocu0sJB 5V15x7Y60tt410iUtuaZAOSXT/DNeeN4d1I4YQ5z0wev0q3F4V1gIrPaEBu24E/kKAO8bxppIB8u R2Pb5cA0xfGGjPMAZJFU/wATIetefr4b1hgzx2E20NjkY/Q9RTDoOqkHdYzr2O5cc+2aYHoi+N9J 3eWBcf75Ubf55/SpL3xdpduqBJPNLckD+H6155H4c1OT7lq7kdUHJFJLoGpxgBrGf6BSf5UAd83j DToYldizRn+6QW/KnR+MdPbJBxEBwSwBP4VwX/CMaqYkkFk+1h970+tOufC2sQLlrOVgBjcmG/lQ B3R8a6aOGY5PTBzTz4x0VIWb7S7vj7ixkn8+n6156PDGssxC2MpI7kgfzqQ+FdZjt2kezPGTt3ru P0GeaQHfJ4w0drUypM28cmFlIb/D8jVe78b6cJImVZGjI5xjcP8AgNcJbeHtXnUsljKVx3+XH50S +GtZQB2sn29dwIPH50AdneeMLW7gMFsh/egqNx5/Ef8A16wIWPmgFCTuGBWVbaNqEU3mS20ojTku F4H41qQO0d3C5GQGBFMD02AMYo2I2llBIHapkVs/MOKZbMJIIWYYLqGx+FTAn0pARyqGVlI6jrWI QAxXPHpW7KfkJOM4rF5fJbgk9KAGABRgevWnfJ94cmnEfKeRj0qMDYcscj2oAaeX9DinFQQc9aYj 5YEg1LyWyCMHrQA0MI80oAcBumKWTJPynPGcVGHAODnPegA4dzz+dLGcuemccfWm5AbJ6UFVYlhm gB7Z3gdj1ApxKq2McGm8Bt2Tk+1O4PU9DQA1ssFIGCPSpQgAwBg+tRHoCh5pQPUgfUUADMCSBnPQ YprcEZJI9BQFz0/MUbQfvNyaAHKxfjtS7T3AH0oiHXuopX5xtoAVV5z39aMqDwcmnBsLgjHpTGA3 bs5+lACE7iOMHPJFO25OOTilQ8kYzgdaM8g8DjNADWDjgDAI603OSN3APenEHJOTTBkKAMEn1oAc VVT1JFfOHx5itI/Hha1ZTNJaxtc4fcRJyBkdjsCcccYPevoPULuKxsri6uXCW8EbSyNgttVRknA5 6DtXyh4z1eLXvFGoanbRzRQ3Em5FmkLsAABySTjpnaOF6DgCgDFooooAKKKKACiiigAooooAKKKK ACiiigAooooAKKKKACiiigAooooAKKKKACiiigD6L/ZK1r/kPaFNcdNl7bwbP+AStux/1xGCfoOt e/arCZbZiGxs+f8AKvn39kQS/afFBEkYtwtsHQoSzNmXaQ2cAAbsjBzkcjHP0Lqkm2zbaOvB+lAH ONIR0704OSQTgUbdxzk+3FKqDoc5zQBwfiSLydYm2nfvO7r0z2roPCpA0dNgAcOwc985/wACKwvE 0SprU/ltuBAZseuOlYreI7/SpPJtCqoxDsHXOT0pgepouV96FOwkEZz+leaz/EO9GwLZwJg5Y5J3 ew9KSX4gX7yFo7W3RWXgMSce/vSA9HJ2E4PFOjJ5AxmvP/8AhPZ/syA2EbTgfO3mYUn2GP61Fa/E K6WcGexiMXcRsc/rQB6SgKsS3Udqczbm4yPevK9R8d6jc3O6xItYhxtKqxP1JFRR+MtajYO1yjqO qtEuD+QBoA9XJIboDz2pHYlhx3rzX/hYN5vO60tmzjGCwx+tQX3jbVJyTbiCFcgjauTx7mgD1Ak7 jnoelP2cEgj0FebJ4/vFiVTZQmTAG/Jx9cUr/EC98/8Ad2tuIsYKEEn65z/SgD0UAkj2705jgcfd PFeW2/jrVopmaXyZlI/1ZTbj3yOadaeOdUW4d5hHNGesZQKPwI5oA9ROCwHT6VGM/Nj9a84m8f6g 6OIba3iyflJyxH61Yf4hSeXHiwj34+cmQ4J9uOP1oA9EYMeMYxTSo2gH1rzu7+IF1yttaRJnozMW K/WoIPHeorMzzQ28seMbMEc+uaAPTAuDmmsSRgnArzyLx9eKjCS0gZ+zBiB+VQW/jjUIYXWaGG4Z myrEbdvtx1oA9OhOB6ingAMODXkx8bayZxIksSpjHliMEfj3/Wp/+E81MQSI8cDO33ZAuCv4dDQB 6fIFPXGe2KgnAZlGOma8wTxtrCZy8TccFoh/Sprbx/qEaFZ4LaQ5yGII4/OgD0uEErg0rLxuGOK8 2u/HuoXEe2zhht+fvY3H9eP0qCDx3qyTBpUt5EHVNmP1zQB6LrJ8rSriRuQExjPXPFedRgmWNVBP ParcvjW4vLeWG5tIPKkBACk5H5//AFqqwMkdxC7HKb1De4NMD0vT4jBYwxSfeRAOvfvVgkkD0FRn GAACAB2NHQckD39aQDnfahIGTjoaxHfnLcVrSghGKkk4NYhzn396AJFYOCRxzimtwwDYxTYhhiTy cdPQ1IwBUsc9ePagBgXI47VKCVHAzkVCMA8DHqc9Ke3yLl+aADkLljimsFxnPNBcHpyKQISScCgA UHgEZ5qZsKnvUWSevrU+FK89fagCHdnqMc09F4POT6U/ywRjp70IpXqaAGqMHOM+lKctwQSfpT25 601uvAOKABkbbwce1MIwfanPIFxjn270gbLbecHrQAgIA2n0pE3DBGfzpXAHPXuKQseccegoAkZQ BuzSAFunH1prfd65AoBPO4/QGgBxAXoefpQOcg9fpTgwO3jn6VwfiH4o+GtKiuhb3q393CoMcFvl lkYgYHmAbMc8nJxzwTxQB3THCg8knsK4Pxl8TNE8PStagtfXoV8xWxUiNgcbZGz8pyCMAEjHI6Z8 n1f4ueJtRs2t43tLHdwZbSNlfBBBALMcdc5GCCBgivPaAO/+IPxIuvFun29jDavp9qrFpo1n8wTn jbn5RwME45BJB7CuAoooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACi iigAooooA99/ZJs5n1rxFerdOsENvFC9sM7ZGdmKuecZURsBwf8AWHkd/ofWd/2YEdNwya8B/ZFn iW48U27SxieRLaRIywDMqmUMwHUgFlBPbcPUV9B6spNnwRgEZ5oAwm5wOmaQNz8ufyp2c5xj2qPJ 3EJnPtQBwniSOSPWbjzCuZCGG30xxUWmeGbfXEleW5aKRMDAXNTeKS761IXQptULwevvW94NtfKs pbhiuZTgYOeB60wONv8AwHqEdztsnS4h7EsFI+ua0bLwCTZ5vrsx3GDhUUEKe2T3rvFnh38Splug 3DmpWTg89KQHn9t4DlEgEt6hhzyUQ7qfceAHaZvsl4gh2/8ALRfmz6cdq7tdoTdkEdeDQh3sHQ8H 0oA83m8AXyhfs9xbydNwYlcH8q0bH4fj7Mftt6RMR0iXKj8T1/Su5YhSMsAW6DOM0p4HXpQBwN38 Ok+RrW9bjhllT9Rilk+H2Jk8q/Ai43Bk598c13yg5zhiPpQWDY5GAcGgDgI/h+TeuJr7/RFGV2jD k/yFWbr4f27PGbS7lSPHziQBifpjFdbLcW8bqjTxBm+6pcZP0qRbmFcebNGoPTcwFAHCw/D/AG3x WW9LWm3O4LhyfT0pZfh84ceRfJt7l1P9K7lby2aby1niZuwDA1OWAyCB0oA4XTPAUYkl/tKfzFK4 UQ/KQfU5ptz8PbRpXEV7cBNvyghSQfU9M/Su6AHUH73TFNwA+SM/WgDgf+FeARnydRbzMD/WR8E9 +h4qtdeAb+OMPa3kMz4+ZGXZz6Drn9K9CW7tZG2xTwu3oHBqdigHzkADuelAHBaV4DZ4t+p3JRiP uRY4+pNWm8Bae6/JdXSnsSynn8q66aeKIM0siIM92xUUF3budsc8T/7rg0AcK3gCb5gt9GMH5coe frV1fh9bsgB1CQtj/nmBz+ddpLKka/vCqD1ZgKcir94OMAZJzQBw/wDwr+Lcd985THGIwDn86bP8 PrT5fKvJl558zDce2AK7cTpLny3DqpxlTnmmiaEsf3iHb/tCgDi5vAEZSNYb9kHO9mTP0wM1Wu/A IeILZXx80dTKnyt9Mcj9a7qSUOyDcoDcLz1+lTLtj4k2r6E9KAPN5PA13ZRPK11HLGozjaVJqGON XaNRwcjAwK77XJrSSwuIJblFZl6bufyriNNBOoWyf3pFX16mmB6PECIUycnaOnIp/wB7qF4H40D5 RjbwOlNJyehHsaQDHbaGbacAdB3rIGWJHABP41sSt+6I7+1YwU5OORn6cUAGTvA6kHHapCAByBg/ pUYyWBwOuc9s05mIYY5B60ARlVDfMSB1BxSHLrjdkCnN82QTgY6GmxgZ4BxnsetACRoeQDweKlC7 eOef1pSAOoI/pQXOeOD2NADNhLjHrT2UBhwfpQvUEA8daViTyc/TFAEgyVzk8dhSds01D2prE7uw /GgBzqcfLg/Wo239ASacrZJGAB9acwXHFAEajH8OT9aYHCyMDgg8HnpU4AxVN8iUsp6ntQBa+Y7s 0h49MjvisfxN4p0jw3aTPqd5DHKkfmLbhwZpBnA2pnJyRjPTrkgAmvGdW+NOrz7l0uwtLJGjK7pC ZnVufmB+VfTgqeR36UAe3a5rmnaFYte6vdJbW24JvYEksegAAJJ74A6AnoDXnXjf4uabDpDR+F5x d6hNlRK0TKsA/vEOBuPoOnc9MHxXXtf1TX7kT6xey3Tr90McKnAB2qMKucDOAM45rLoA3tT8X6/q mnz2OoarcT2k83nyRuRgt6eyg8hB8oIBxxWDRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUU AFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFAHu37JWmyy+Ktb1MNH9ntrJbZ1JO4tLIGUgYxjE LZ57jr2+ktXB+zjH3c814F+yH/zNn/bp/wC1q+gtUINlJltlAHPHk4GaaVYEMOPpT1B55zTv0oA4 Hxb/AMhp9xADIp/SubvtRvbY+TbTPFA64OzjPqM1v+JZFl1ibYGUKdvzeo7/AErd8O6bbzaZDNLE DIzNuweDzjmmB5bHd3CRtBHIVjJ+6Dio21G9h2qtzMqcALvOK9duPCOkTOXMDCTrkNj9OlNn8L6X KqrLASykENnmkB5YdQu5OXups44w5GKI9Svl3Kt5cAEbSBIcEelesf8ACPaZuA+wwrgYDquD/wDX /Gp7bQNMgTatnFk8lio3fnQB5EuoXYyDczHAwAXJApFvrrI2zzDHfzCc16xL4V0ZoZENttDnduDY IPtVibRNNa1EK2yKgXAC9qYHllvr+qQKVjvZlB5IznNV/wC1b9N6pfXA3/exIcH6ivXLHSLC1YSQ WkYlC48zaM4qL+wtLDSbrCBt+SdyZx9PT8KQHjzM7tlySx9akkvLrCAzP8uMfN0r13/hGdKZf3Vq kTn+Nc5/WlPhrSGI32UbMDnJ4P6UwPK/7ZvJIjG8gX3C84pialeIjLHdzLuGCQ5r1h/D9hLHLE8Z KOMden0qK28L6PbhVS0Usv8AExJOfWgDyqS9vJQPOuZnZRxucnj2qGTUrt2dGvJyW4KmRjx+derz eHdLM6S+RumH8RP+RSJ4W0tpTKbdS/qaAPJ4bmZF2iV8KRjDdKtNql/LEYjdTmPGCochfyr1L/hG dKZNklvlO654P5VYXRdOFstvHaQog+6UXBH49aQHjfnOjZjdw564PWlFxMFwJZAPTca9Yj8Laak4 lEJx3HGDU3/CP6WygC0RB1wgAGaYHk731w5QyTynb05pF1K8MgdbqXA4GWyPyr2G10a1hjZPLEgb qX5OPSoU8OaTGQ0dlGHBzu5zSA8ibUbyWQ5upBx0DY/l1pjX96vAuZcE8/Ma9UuPB+m3Nz5syMB1 2q2Cfx61Zi8NaWgCi2BUHI3c4oA8kjvLhDu+0yAkluGNT6jqt7fIPtFy8hHOelerP4e0tgirapGV 6bFANQ3HhHSrj5pYpGPqHwf0pgeVWd3cGZIRM7IxyVPNdRYSLBqVq7H5VkUk+2RXV3vhzS7e2mmg tY4JAv3wTx+dcdCyi4VcEkHHIoA9P8wkd9p/lSgcHGSD1PpSQBPJTZwrKCvfApeEzjnPFICOU4jO AenHesM7lfqQOmDW7Kp2nB6d6xJNxOfvdwaAEBORkEA9PapDHhcjk96IU4LN16DvT2cBcEnI5oAi XDHk8Y6dMGnbSFwv1zR5i4OV5oVxjCnr1yOaAEwQec8cAGglmI6emD2FPDBVy3f14prMrH5T+I60 ABPGCcfSmsQFGwkj0zTdzAlcjHuKYoO057UAWBtVT82T1waXcCgyBk1DGMHnPvT2K7flP6UAKSOn cdqXAGSwwPavOdf+LPh3S2dLOSXU7hd64gXCBl6Au2Bgn+Jd3Az6Z8u8X/FHXNedEspH0m0Rtypb TMJGOMfM4xkdeAAOec4BoA9n8YfEPQvDM32S7llmvflL29sgZ0BBILEkKOg4znkHGDmvMfF3xhvr xki8MxvYRI24zzKjySDA42kFVGc9yTx05B8snmkuJ5Jp5HlmkYu7uxZmYnJJJ6kmo6AJ727ub65e 5vria5uHxulmcuzYGBknk8ACoKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKK ACiiigAooooAKKKKACiiigAooooAKKKKACiiigD6D/ZJu9TOo6/ZoN+jLEk0hZ/9XOThdq5/iUPk 4/5ZryOAfoXVjtsXGATkfzr52/ZHkvhrPiKOOGM6a1vE08pPzLKGby1HPQqZSeD90cjv9IX5zbSn aDx3oA5xWIHT9ae7FQByaU9M471GDk57ZxxQBwni2Ly9XZggXeob69s/pVrQtfsdLszDeSsrFsqo Ut/KovF2W1l9xPyooHPbr/WuZ1DTbu5j+0WttJNGgw7pzj8KYHojeK9GVsG+iJIzkBj/AEp9n4i0 m5nZFvYFI7u4UN9M15fB4e1W5gSaOxlaJjgHgE/gece/Si78P6lZzRxzWU+9/uBRvz/3zmgD0ibx do0Nw0TXLOdwGVQ7fz9KuJ4i0h3Cf2jbFj0zIAPz6V5Bc2c9pMY7uNo3/uuKfbafc3IL29pPMFGc xxlsD8KAPXLrX9Itonke9t229o5A7H6AVUbxXowjic3QYyNgIByP970ry5NPu5rlYI7WYzOdoXYR z/StW/8AB2s2lu0pjimCn7sTZP8AKgDvD4s0cSMhudo3YBA4P/1qfc+KNGglRHvkbfwGj+cD6kV5 aug6w8TS/YJzEo3EgdvpUQ0u+8xIfss3mufkQocn/OKAPXbzxHpNnDua+hc4ztiYOT+VUT4y0b7I 03nOz/8APLyyG/w/WvLjZXS3n2VreUT5x5e05yPatBvD2r+UZVsJgq9dwx/OgD0Sy8WaRcHi7EJI 6SjbVS48c6RC0oDTyEcLsThvpk15pZ2d5cmV7a2llWLh9qk4qS8066tWAureaBs/xoRQB6PH410c iJiLjLnDDy/ufXn+Wamu/Gmk26F43klkBHyqnX8electo+praJcNZziFujbeuarSW06gCWCVS3Ch lIzQB6zceKNJgtBcm6R1YArHGQz/AJdvxpI/FWiyRqRdrGW52spyPrxXmcXh3VnWKRbKYxyD5Dj/ ADinnw7q4LD+z7nK99vH50AemR+KdIe1uJEucLCcEFeW91HcVV/4TXRdpJkmJ44ERzXnx8PauJNh 0+fcB0C5qG10vULp9kFnM7Z2/dxg++aAPVbfxJo7qxW/iCrjJfK5z6ZqObxTo8SyE30R2jOFOd30 x1ryq/sLqym8i7geKUfw4zn6YqO6s5rSQJdQSRuRuXzF/WgD1Q+MNFEcTG6DGQgYVTlB6t6Yq+us 6YzjbqFpg+syj+teO21jd3JRbe3kl3nC7U+9Wg/hnV47drhrKTavVerD3x1oA9H1XxTpmlz+VNI0 suM4iAbb9eacfFujfYmuFvFbAzsX7/029a8u/sLVTLApspt0/wDqwyEZ+vp+NQ3WkX9rei1mtZft BGdijPHqCOKAPQbrxlpd7A1vGJ/nXo6AZ9utc9bFVu4SylhuBOTnHNZI0LVIAJZ7KWJAR8zjArSg LrMnAzkZPagD1NNuwHPGO3SlUbgcjAHrUGmrtsIIznIQZzVjb8xwcetIBrAANuGARzWLIcthD8o5 BxW433G5/SsFiCxAOTnGB0oAeGwp7fjmoWfLDPb0p5VmHOAOg9zTQjA9M460AHbGDjHFLGpVsnPI 6GkbcMHBwOPWjec896AJWOR1HA7jpTXwF46+x6UMg2jJ4PX3rOu9V020v4rW51C0hupceXDLMqu+ TgYUnJyRjjvQBc3FsZ7VBqV9a6Xp017qE6W9pAu93foB/Uk4AA5JIAryn4j/ABT+wzXGleGSwvIZ jHNePGCq7eqoDnPOQSRjg4zkEec+JvH2v+I9PjsdQuUW0CoJI4YwgmZf4n9STzgYXIBAGKAPdNf+ I/hrRIoXa+XUGdsCKwdJioxyxO4ADp1OTngdceHeNvH2r+K5DHM4tNPGQtpAxCsN2QX/AL5GF56c ZAGTXI0UAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFF FABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFAHvv7JSw/2x4ika9kSdbeIJaCUBZVLNukKdSVIUBu3m EfxV9Fasx+xkAkEsAcd6+Y/2UreZ/HWqTrFI0Caa0byBTtVmljKgnoCQrYHfafSvp7UsfZGzwQRQ BglnxtycUgJxtFSnHqOKZ0zgjBoA4jxdFDHqZeKQ+a65kU9j0H6Vu+DUVNILK5LM5JX+7XNeKIEg 1iXY+8v87eqk9q3PAwcWdwzglC4Cn3xz/SmB0MilTuB/CpEbchJ4PeleTIxQnT7vWkAihWPKggeo qVWxwBxTFUqpA7+val+ZTg4IoAV1BYFT1owdp9KTcpHpig8c5PtQBH6g89qaD83oac2c5460oXoT igBQmCWwN3qO9KTxyP0oLAAA5/CgHg4BOKAD6YGaTZu4wCD+NP27gOnuaGIAIA6UARkYPf6U7I20 DGBxk0nl5ye9ACHJT1pV4X2pAvykk4FKCOnT3xQAKM/OKdg9mJ+lJwqDPempIPujpQA14Umcb0Vy vQsAcU4oBg4Bx196Usw56L7VIqgjOcc5oAjb5VO3GP5U3ByMEHsSDUrkHj86ZkDv7YHFACKScjBH uKYVDOGwCV4BPanswwcdaavIx3oAo6/g6Rcq7YXZ94dq4G3UNPHvYr84y3brXoWrJu024DDICHIP evO7XPnJnB5z1xmmB6gmF5zkfzp33xkZBzVW3dJLWIrlV2gAZ5xUkZ+bg8UgJLj5InbqcdKwxydw IA78VsXALRvjPAP51jhTjAzQBJuOOOn5U4EEck5z2FQlj0OOO54zWV4i8TaR4aghk1i8W2WZiqZD MzEDJwqgnA4ycYGR6igDZZw2V4496ztc1nT/AA9p5vdZu0trYMF3FSSWPQADJJ6ngdAT0Bryrxb8 Zbf7PPB4ZtpmuG3ILq4UKqcjDqnJbIzjdjHGQeRXlHiTxNrHiWeGbW717p4VKRjaqKoJycKoAyeM nGTgegoA9c8afGOzS2ltfC0Tz3DAgXsq7UjyBhlU8seWHzAAED7wrxTU9QutU1Ce91Cd57qZt0kj 9Sf6AdABwAMCqtFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAF FFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFAHT+AfHGs+BtVkvdEljIlTZNb zgtFMOcblBByCcgggjkdCQfovwh8YdH8WWOnWuozpYa9M/kvaFW8uR8cNG+MAN2Vjuzx83BPybRQ B9vXGr6XZ30Nje6lZ297Pt8q3lnVZJMnC7VJyckEDHel13VNO0Kxe91e8htLVSRulbG44Jwo6s2A cKMk44FfEFFAH1Jq0tv/AGs7QzwzLcg3ELJKHDocHcMdR8w59x610Oj6/pWm6RbrqeoWdgSWVTcT LEJMHJ27iM4yM46ZHrXx1RQB9wR6jZSanJp8d9avfxLvktllUyovHLJnIHzLyR3HrWgpJzXwfRQB 9pX/AIy8OaebkXmvaZHJbbhLF9pQyKVzkbAdxbgjaBnPGKv2esaffaNHq1rewvprxGYXG7CBBnJY n7uMHOcYwc4xXw9RQB9uad4g0bVJTDpmrafezhd7R29ykjBcgZIUk4yRz71ojg45OR69K+FreaW2 njnt5HimiYOkiMVZGByCCOQQe9WINTv7fUjqEF7dRX5ZnNykrLKWbO47wc5OTk55yaAPuA4YHr9K wR4x8NAD/io9G/8AA6L/AOKr41uJpbmeSe4keWaVi7yOxZnYnJJJ5JJ71HQB9v6XrGm6sJf7K1Kx vvKxv+zTrLsznGdpOM4P5GtOPOBnpivg2igD7fl1/R4NMh1GTWLBdPmbZHctcoInbngPnBPytxns fSrN9e2tmIfttxFB58iwxebIF8yRuiLnqxwcAc18L1JLNLKkSSyu6QrsjVmJCLuLYHoMsxx6knvQ B9u3esaXY3ItrzUrK3ujE03lTTqjmMAkvtJztAViT0+U+lZzeM/DJGB4j0ce/wBui/8Aiq+L6KAP uPS9TsdUt2n02+try3VijPbyrKu7AOMqSM4I49xRd3ltZ+T9ruYrcTyrDF5rhfMkP3UXPVjjgDmv iS0vLqz877JczQedG0MvlSFfMjPVGx1U4GQeKr0Afd+AU+Y1S1LULDSIln1O9trO3ZtgkuJVjUtg nGSRzgHj2r4pl1O/leJ5b26d4YPssbNKxKQ4K+WOeEwzDaOMEjvVOgD7Ug8WeHbm4jht9e0mSaVg iRx3sbM7E4AAB5JParunapYarAZtMvba8gRtjSW8qyKGwDglSRnBHHuK+HqKAPu5eD6+mapTapZR alFp8t5apfzLvjt2lUSuvPIXOSPlbnHY+lfD1FAH27c6xpdst59p1Gzi+xhPtO+dV8jf9zfk/Lu7 Z69qL3WdO0/SH1W7u4U05IxMbjfuQoehBH3s5GMZzkYzmviKigD7TXXtK1Lw/Nqun31vcafGnmPK kgwmFDEN/dIBBIOCO9eepqlit/GJLmBFMwTYJBnJYgKOeTlWGPVT6Gvm6igD7mQ5RSoIGOM0+Phx 69DxXw9d3lzeeT9ruJp/JjEMXmuW8uMdEXPRRk4A4ohvLqC1uLWG5mjtrjb50SSEJLtOV3DocHkZ 6UAfaOseI9F0mC9fUNVsoPsuBMjTLvQspZVK5zuZVJAxk44BrzbxL8WdC03T4LjSJE1W4mf/AFCl 4SifMCxJQ4OVA2nBwwPTr830UAek6x8YPEF1qbT6aIbG08sotsUWXBKkbyxAJIJyOg4AIPOeF1nV 9Q1u+e81W7lurhs/NI2doJJ2qOirknCjAGeBVCigAooooAKKKKACiiigAooooAKKKKACiiigAooo oAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiig AooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKAC iiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKK KKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKAP/9kKZW5kc3RyZWFtCmVuZG9i ago4OAowCm9iago8PAovU3VidHlwZQovSW1hZ2UKL0ludGVycG9sYXRlCnRydWUKL1dpZHRoCjc3 OAovSGVpZ2h0CjcyNgovQ29sb3JTcGFjZQovRGV2aWNlUkdCCi9CaXRzUGVyQ29tcG9uZW50CjgK L1NNYXNrCjExOQowClIKL0ZpbHRlcgovRENURGVjb2RlCi9MZW5ndGgKMTIwCjAKUgo+PgpzdHJl YW0K/9j/4AAQSkZJRgABAgAAAQABAAD/2wBDAAYEBQYFBAYGBQYHBwYIChAKCgkJChQODwwQFxQY GBcUFhYaHSUfGhsjHBYWICwgIyYnKSopGR8tMC0oMCUoKSj/2wBDAQcHBwoIChMKChMoGhYaKCgo KCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCj/wAARCALWAwoD ASIAAhEBAxEB/8QAHwAAAQUBAQEBAQEAAAAAAAAAAAECAwQFBgcICQoL/8QAtRAAAgEDAwIEAwUF BAQAAAF9AQIDAAQRBRIhMUEGE1FhByJxFDKBkaEII0KxwRVS0fAkM2JyggkKFhcYGRolJicoKSo0 NTY3ODk6Q0RFRkdISUpTVFVWV1hZWmNkZWZnaGlqc3R1dnd4eXqDhIWGh4iJipKTlJWWl5iZmqKj pKWmp6ipqrKztLW2t7i5usLDxMXGx8jJytLT1NXW19jZ2uHi4+Tl5ufo6erx8vP09fb3+Pn6/8QA HwEAAwEBAQEBAQEBAQAAAAAAAAECAwQFBgcICQoL/8QAtREAAgECBAQDBAcFBAQAAQJ3AAECAxEE BSExBhJBUQdhcRMiMoEIFEKRobHBCSMzUvAVYnLRChYkNOEl8RcYGRomJygpKjU2Nzg5OkNERUZH SElKU1RVVldYWVpjZGVmZ2hpanN0dXZ3eHl6goOEhYaHiImKkpOUlZaXmJmaoqOkpaanqKmqsrO0 tba3uLm6wsPExcbHyMnK0tPU1dbX2Nna4uPk5ebn6Onq8vP09fb3+Pn6/9oADAMBAAIRAxEAPwD5 UooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKAC iiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKK KKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooo oAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiig AooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKAC iiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKK KKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooo oAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAoopdpJAwcmgBKKesbk/dI+oqRLdjjcc UAQUVpw6crAlnbB+7jipxpkOQTv+meDQBi0VuNp1uSpCsMHkButQz6ZGkRZHfPvg0AZNFTvbsPun cfyqNo2X7ykUAMooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiii gAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKA CiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAK KKKACiiigAoq5bWMk4DEhEPc9a0orKGEfKMkjBJOcigDFEMhwdjAEZBI4qVLY4G4/gK07s/IigbQ OAB0qrzQBEkKKDkBj7ipAAOgpaAKADNKME80nUUqDLAZ6nvQBpw4CKPanNkjrSIAFAJBNAYdKBAu T1qK64gYHNTA+tV7wjyvqeKAKNLSUUDK8lvlxswFoFrgjLZH0qfmloAsW8EDRDfEpwc9KWTT4Xk3 8qM8qOBUsK4iUjmpgaBFKbTomUiEbG7ck1TuNOmi5T94v+z1/KtkcZoY56CgDm3jdPvqy/UYptb1 2iNHudVYjpmsqW36lOuelAytRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQ AUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFAB RRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRTlUswA6mgA VSxwoya1LWxiMQMilmPXJxiq8MQjH+0eprWhGI13EE+1AC7cDaoAA4wKXGR15oA4zz+FGcA9fagR Tu3bdsJBHWq+aViSTu6038qBiikzSjNGKADtT4F3SDNM7VPaAl88cetAF7GBgcGkXAPNGQW5pxKn jj8KBAWqtef6sDrz19Kn4z3qvenKKB680AU+lApDzSigYnU0uPejNBoA0YCfKUFRwBThn0pIx8o2 ntwafj35oEJnBpP5UYyOacBQBBd48r5uPSqNXrzHlYI/OqIoGRzRh161TkQo2DzV/Gaa0YYfMAaA KFFSzReWR3BqKgAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACii igAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKK ACiiigAooooAKKKKACiiigAooooAKKKKACiiigAoopVBYgAZNACojOcKKuJEqYOPm9aIYhGvuetS d6AHwgmVR71oBcYqhbjMq8ZrRC8c9aBCAEnrzSSfKpPoOtOIqK4I8p888UAZ5xnuaBSdqWgYGgmj tRigBOasWikyZHUVX71cshwze+KALG0nk4pcHI5pyngimsfrmgQtQXuFTHHNSg4qvfn7hHvQBUzS ZpcUhFAwzQOSMdaTk09BhhjrQBfXIRR3xTg2etIuSgJ60BeM0CHZ96kA496YoHFObqKAK97/AKrg 9+aoVo3Cbom4Geuazz70DEopaSgBrosg+YfSqk0Lw43jGelXatTQ+fbbOSRyOe+KAMSilIIJBGCO oNJQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFF FFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUU UAFFFFABRRRQAUUUUAFFFFABVu2j2qGI5PI+lJYw+a5Y4ITqCOtWWPzHI/KgBKBRSUAWbMncx7Vc BJqpZKTuParX0oEB6cVDcNtQg9xU46dKrXo4XjrmgCoOtFJTgKBic0c0ppKAD8KtWJOW9KqmtDTw PKzjHPWgCUjnrQ3IGakYA9P1pnHTPNAhMCql8DhTxirrcY4qnfE/KDwOtAFTPFFGaKBhj0p8K7pV HXmmGp7T/WgjFAF5etB46UZx/jSHOOM80CADAJHenbgOv603npnpRtyeOaACUgxnPT0FZR68VrKj u4jjUs7HaqgZJJ6AV2kHw0uIvhjqHifU2Fq8TZijkDByu4KOPdiRzUymo7lwg5Xsea4pce9HUUdD VEiGtGE/ukx6Vnmr9vgQLwelAmZWqKouztPJAJHoap1r6xgwJkqDnj1rIoGFFFFABRRRQAUUUUAF FFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUU UUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRV zS4y12jFMouckjjOP/1UAaUcQtrT5Ywr4G455zVPPNaV0R5Dc81m9aACgHNIaTPpQBetBsQt2NWB zTIRiEZGKkxwMUCADr3xVW9zhfSrPTvVO9PzqM9ulAFfODS03HNLQMWkoooATHrWlaDbCOePWs4D JFaartRVGeBQIkBB4qJlIbPOaeuR0pWOSKABXDDnrVG+OZQM5wKvPjgKKp3MTSSII0LO52gKMkns KAG6ZaPf6hbWcJAknkWJSckZY4HTnvXWfEzwQPAt5Y2Nxefab2aHzpAsZEajOBtY9eQ3GK9p+B3w tl0FW1bxNaWxvn2Paxlizw9Dlh90MDj1Iql+1Qkx0vR2aFnt97bHUf6t+M7j6EEY+h9q5PrHNVUI 7HX9X5aTnLc+b8ZFWLEEMx6ioOoq5YgiNuOCetdZyk/PpTu1A4P/ANekOT1oELSKCzBUBLE4AA6m r2i6Pf61eraaZbPcTtgBQQBknAyTwOeOa+gvhN8JYdKjh1XxPbE6qjlorcuGSIdAWwSGPU+gz61l VrRpK7NaVGVR2Rz3wt+EsGpadBrOtTXUTOMxQCPyyhDDDZOc9D6fjXtXi3QbfxN4bvdHvWKw3SgF lGSpDBlOO+Co4rbx04BoIBOK8epWnOXM2etTpRhHlSPjX4r/AA/Pgi7hCXiXMMvYIV2ZzjqTnof0 9a4A8195eIvD2la/bLFq9jBdiPJjEoyFJHWvj34p+EP+EN8Uz2MUvmWzYeEnqFIzg+uOR+FelhsR 7T3Zbnn4jD+z96OxxxrUjAMSY9BWag3MAa0wCFU11nIyG6hjmixKCNvO4dRWAQQSCMEV0Vy2Izzg dDWHdJtbcO/WgCCiiigYUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFF FABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUU AFFFFABRRRQAUUUUAFFFFABRRRQAVvabAIYBuXEhOWzWPawtNMFUA45IJxxXQKce9AiK8/1WAce3 rzWeau35GFyOap4oGIaWNdzqp6E0YqSBcyrnsc0AaIGFGKdjjrTTwRimufmAPSgQ4dD3qhdKBKel aI4PFZk5DSMQc0AR5pKB096DQMWigYooAfAN0qg9M5rS+tZ9upMo24455q+RQIUn0oGCabyOtABP egBSTmvdfgl8NZGn0nxVdXkLRYaRbcJu3AqyjORgEHnisn4PfC7+2pYNY8QJMmnKRLFbtFxcjqMk /wAPqMcg8GvpOGKOGNIoUCRooVVUYCgdAB2FefisRb3IfM78Lh7+/L5DvugADgV5j+0PrEdj8P7m xawkumvxsDnhIdrK25iO+cYHcj2wfUWBzmvEP2nr6VPD1jZ2t2qZcyTwElS6EYUjscHPHvXJh1eo jqru1NnzIOlaFuuyID9azRmtqytZ7qRILWCWeTHCRoWJ/AV7Z45HkDmuq8B+Cr/xfebLZZYrMNse 5WPeqMRxnkV6R4E+CNw95Zaj4iubVrRSJDZxhnL8Z2sTgDnGcZzgivdtO0mx0qJotMs7azjY7isE YQE+pArir4tR0hqzro4Ry1nojmPh78PrDwhpDQZW6u5XEktwyBTwBhB32jBOD6muzA5HSnc45xRj HTGa82UnN3Z6MYqCshBknjijBHU0pAyDRnBxUlCcY71zHxB8Lx+LfDtxpxaKOVv9XI6528jPTpkD rXU+9M6k9Kabi7olpSVmfA2oaZcaZrE9hewSQXFu5WSOUYZSKk5z3xX038a/h0fE00OtW10IZ7aD ypE8oEMgLNuLZHTJ4/KvmdevWvao1VVjdbnj1qTpysRTKDG3XpWTKm9Md+1atwQI3+lZ3XoK2MzO IwSD2pKluE2yZHQ81FQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFF FABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUU AFFFFABRRRQAUUUUAFFFFABRRRQBoaMmZ3bngY/OtgqM96qaUmyzHBy5Lc1dHA5PFAihfMPMUY7V XxUt5/ruPSoqBh0NWLNMuW9PWq4qxaEkMBQBcJ+YDikYZ570KgHJzSg80CFLYHH61lyj52z61ozc RsRjOKzRyeaAEFBFKetN70DFHFFA6UUAWbNOSxH45q5xjIqtYtlWBHQ1Z70CEYZHFei/BDwhH4n8 TrPfQpPp1iPMmjkB2yHoq8DB55weoGOmasfD/wCFmq67Fp+q3C2jaVO3zRGU+YyE7S3AwMcnGQeK +nNI0+30nTbexsYkit4ECKqqFHHfA7nrXFicSorljudmHwzk+aWxYt4Ira2jht4o4oEXascahVUe gA6VPGPlzTFBbFPzjgDNeX5npPsK3Ir5u/aqvJW1HR7LyEESRtIJgQWJOMqeeOx5H09vo85GM9K4 3xT8PNG8ReIbDWLrzI7m1lWR1XaUuNpGA6kHP3QPpwc1vQnGE+aRjWg5w5Ynzb4G+Feu69GL2aze K1DJhXIVmU4JbBOcAYPvn2r6W8B+BNO8JaasUKrLdEsXnK4Zwex/TjJxXWxRxxLtjRUHHCrinFs8 VVXESqadBUsPGnr1BR6ClJA7Ug+XqaCQfrXObiMMikX3pQaDzxSAT2o/WjGOCeaU9OOaAEY8GkA9 qCMHnmnZGRQMbIiyRukgBRgQQRwR6V8o/GjwZB4X8QI2mQpDp9yhkSNZC5jwcc55APbk/pX1c+el cN8WPCMvinQHW1MYvII3MIZOWY44yD6Ajv1row1X2c9djnxFL2kNNz5AmX90xIyPSs7PFadwpQOj 5V1JH41mfhXsnkle7B2rgcetVavTDMbZ9Ko0AFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABR RRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFF FABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUoGTikpVGWAwTk9B1NAHR2oKQRqy/MFAP5U/ dSBuaMgDr+NAjPuuJm5zUZPFLJnzGznrSdqBiHmtC1iCwg45PNUUHzDIzzWonyrjsOlAhd3Bz1oB yKRupNKvAAoAgumzEQvWqHNXL4nYuMYJ5qmRQMTNFAooAXNFJSigC/ar+7Bxiu6+Gnga98X61BG8 csOmDLTXJQ7cD+EHuScD8/SqPw18Kv4r162sd/lWwGZZBjjg449zx+dfV/gzwxaeFNEisLPJYfNK /Pzt64zgdhx6CuXE4j2astzpw9D2ju9jS0fTbfR9KtNPsY1it7aJY0VfQD9Seue5q91FNHT61z3i Hxdp+h3SWs2+W6YbikePkH+0T0ryL31PVtbQ6MAj0xRnriuWu/HeiQXQhM8kjeWH3RruXnoufWre m+KdJ1G6itbedvtL8+W6kYOM4J6Z49aAN8Hs1ITzgU3A7n8qcRkUANLEdDij696TBBpxGQRSGIWz TiM9+KhXjrUqnHehO4NWE74ApQD6801uuKqanf2ul2j3F9KscagnBPLewHc0AXgOcigsM9K4BPiV YNcSI1u6wLJhX3ZLJ64xwc9qjh+Jtm9w3n2U0cPRSCC3Xqf1pknohpCAfUCqdhqNrqFvHNazK6OM jB5NXQCcY6e9ACkDHemupwduM4780r5H1poyQc0DPjX4v6Hd6F4svUvwC9yxuVkTASTcSSQB0Gc8 dvpiuAr6s/aH8IHV/CkmrWewXOn5nmDE5eLGDjnAxjPTnH5/Kea9rD1PaQTPHr0/ZzaGt9084461 n1fkI2NuPGKoVuYhRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFF FFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUU UAFFFFABRRRQAUUUUAFT2IJuowpIPPI+lQVe0lczsd2ML045oA2ODjrRgcg0oxjA5oIzkCgRlucs SDmkJopMc0DLFngzY9qvjrzVSyTCk+verXfmgQ4jtSjBHtTTx3oGD70AVb4fdGeDVSrF62ZQOyiq xoGHFGKMUtACda0vD2i3mv6rDp+nKjXEpAG9wqjkDJPpzR4c0S+8Ra1a6TpUayXtyxVFZgo4BJJJ 7AAn8K+t/hd8PLXwtoNpFq1jpVxrMLOTdwwhmwWJHzsoY8HH6VhXrqkvM3o0XVfkdN4R8OWHhjSI bHTYEiVAN7Dku2OSSeTmrusarZ6RbGe+kKJg4wpOcDp9avfj1rlPiHol7relRx6e6l4iXMLHHmeg z0z1614zbbuz1kklZHFeIfH9/e3KDTGazgU5Ujlm4H3u1czZWV3q9+QrGSeVslpWJLknqTXW+EfA N1LdJPrA8m2XJ8sN87HkY9sHmvTLLStPs3Rrazt45FXaJFjUN0x1oA8dXwHrkkxVoEjUZxJ5g2nH T35+lc9i50+7X78NxGQwI4ZWz+hr6Q78VWm06ymnaaS1gMzLtaQxgsR9cUAeffDnWdY1HWCtzvks 9jb5THgFuMHd69BXpOOc1Ba2UNoSbdNuePrVjdzzxSAGwBSZ2jnNBHOc5pCPTOaQ0M707tTtpoxy OBRYdxCua8Z+JtxqcmvtBfKy2sf/AB7hV+Uqe+e59a9pqrf2dvfwGC8iWWLIba3qKYtzyXwn4KbV oEuribZAw4RBhhkcEk/yp2u/DrUrf59PZbqIfwZw/X06frXryII4lWMAIowAOwp46c0CsfPdtfan 4b1DZG/lSwSbmjPIz3Bx7V7N4R12PW9PWRprc3QGZI4j9wHOP5Vz/wAS/DTX0EeoWMZaaP5WijTJ fJHPHU//AFqwvhXYakmtyXCgxWixlZRJGRvB6be2cj8s0AetYy3BoB9TRzQR60DIb+FLuyuLZ1Vl miaMhxlSCCOR6V8Q/EXw7N4Y8W3+myW3kRRvmHDFlZCOGBPr1weR0r7kCj1r55/aT8Kxz3y65bz7 Zkg/eRNHhWUHqGz15PGP512YOpyz5X1OTF0+aF10Pna5famBjnjmqdXbxWEKkjgnrVKvVPMCiiig AooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKAC iiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKv aQFN0clc7eAf6VRrR0VgJ3UuBuHC+tAGr92myvsQt6VIeoqGf/VNmgRnUveg0gByAKBmnAuyIA07 GTxSRg7Ru5PenMfSgQuBRnA/wpoz60oHcmgDOuSfObOeveoyD2p9zgzMVORmmA5FAw7Vc0PS7rWt XtNNsVDXNzII0BIHJ+tRWNrPfXkNrZxPNcTMEjjQZLMegFfR37P3w3m0pn8Q6/bXFtqCs0VvbTR7 dqlV/eYPIPLDt0rKtVVON2a0qTqSsdJ8Ffhx/wAIZBd313LHPd3iRjaY/mt2XeHAc84O70HQV6eA SaVWzxQ3qK8Wc3UfMz14QUFyoUYHakAz26UuMjpQFP1qShmeeTinAj1pCDvx0FSiB1x8jHPtQk2D aQ0fSjBqVreZCAYpBnkZU80rQSois6MA3QnvVcr7E8y7kHzZ7UpHrUxglViPKfIGSMdqgOSc0mmt xpphn1paQdeQM07ANIAUce9JyfSlxmrNrZy3O4xLuI9TiqUXJ2QnJRV2VMkA+vtSKc5Hf3roU0SP ALMwOeQD0FKNCgBz5j5yef5Vv9TqvoYfWqZzoJBxThweea6NdEtsKGLk9+2ad/Y9sUwQc9ivFUsF UE8XTOZY5pqLxgcAdBXV2+lW8QG5fMYZBJHXPtTv7MtP+eQx6U1gZvW4vrkFpY5Mg/lS56Zrq/7M tsn92uDVS60SNgPs7FTnndyKUsFUSuhrFwejOdY57VyfxM8Pp4j8K3Fq0UsrIDIEhwJHwM7Vz3JA rsLiIwzFG7frTCMg9RxxiuZNxlfqjpaUo26M/PfXrWWyuhDIJAuDt3jGcMw6fUGsyu4+MugQeGfH V3pkGqyaiUUSv5kRQ25clxFyTuwrKdw4+boCDXD17sZcyTR4ko8rswoooqiQooooAKKKKACiiigA ooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACi iigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAK0dFYCZl2/MRndntWdV 7SCBdEE4ypA/SgDaOG6ZxVa7yIsLnGeaskccV7T8Nfg5/aCQ6h4qijfTrm13xwLK6Sq5I2lsAfwg 9/4h6VnUqRpq8i6dOVR2ieDWtpc3W/7LbzTbBlvLQttHvjpRHDL5sY2OGYBhx1Hr9K+19J8CeG9G unn03TEt9wIZEZtpPHOCeDx2p2t+D9F1fSlsLu1Xy48COVceanPZiMjPQ1y/Xo32Ov6jK258bdB3 FN6c8V9TeJvhN4e1hSbRTpkoiEai3RfLJHRmXGSffIzXi/jn4Xa14XHno0eoWTOwV7dG3qAN251x 8oxnuelbU8TCpp1MauFqU9bXRwJozgc9KUdcHmmyjchxxXQcxmsRk1f0XR73WLtLewgeRmZULBSV Tc20FiBwMmu3+G3wrv8AxeIb26nFppTMwZwpMjY/ugjHPrmvpLwN4Q07whBcxab5mJ2BbJOBjPbP qSfx7DiuatiY09Fqzso4SVTV6I4v4N/CWTwnef2trz2s9+yFY4Vj3fZznG4PnkkEg8fia9j3DAA6 VCrdT709SN3U15lSpKo+aR6UKUaa5Yj/AEA610GjadG9sJrhd7P0U9AKwrLDXkOeQHBIxnPNduOB gdK6cHSUm5PocmMqOCUV1I4oIogBHGi46YFKYYiwYxpuxjOKfRXpcq2POuxqRoihVRQAMYApVVUG EUKPQCloosguFGB6UV5p8ePHV54F8Kw3elw776aYRxs4OxPlJyR3xxx09T0BaVyW+VXZ6XgVHPDH NE0bqNpGOnSvG/2evihfePJNXtNbW2jvrcJMnlkjzFPDEKRwAQvf+KvaKJR6MITuro5K/thbXDJy QDwT3qvnFbHiPd5sPynaAeayxDKwysbMPbnFeLWp8tRxiexSnzQTY2L5pFBGcnpXW2cXk2yJ6CuY toZEnjk2EDI6j1rrE+4uPSuvBRtds5sZK9khaKKK7zhCo7ieK2hea4lSKJBlndgoH1JqSvm/9sUa r/Z+itBesNH3sk9qr4zKeUZh/EMKwGeAR700rsmcuVXPoTTNUstUieTT7mK4RG2sUOcGrlfNv7H0 8N1BrpeSU6jCyB2ckh4SPlA56hlb/voV9JUNWYQlzK4UUUUijA8TptMUhIwflA71hh/QV0Picbra MdNrZzjrXNjg4rx8UrVWexhdaSPk/wDai0K+sfHMes3T2hs9TTZarEuJAIkjDeZ8oydzcHLHGBwA APGa97/azOqSeIdGDxXB0S3tf3cvlHyluJHbeu/H3isSHbnoucda8Er0sO700ebiFaowooorYxCi iigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKK KACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigArS0U HzJThcYAyetZtdH4H0ebWtYjtLVXkmkYJ5cYy5XBLEL1OAtJuyuwtfRHufwd+GCXhs9c1tXMQ23E EXyNHIDyA4IOcgg9q+gRhVAQAADAAHSqekRCz062t0ZnEcarvZdpbAAyR2PtVhmyeOMV4tWq6srs 9ujRVONkBPqaiZ80SDPANQElG5GQO1ZHTFErPjBAqhq1kup6fPaSySRpKpXeuMrkYyM1bZ8juKbn HU5zVLR3K5U1Znzj8TfhofD62V3pMrz29xKLd/NYbhI2dpAA6ED35+ta3w8+FSXcNlqWqTvG0c5M kSng7W4AxgjOOv8AKvdHiV2TeobY25Qex9f1NPUjpgAd66XiZ8vKciwVNT5unYeOgAwAOlPVwcjN RAikB9O1cx2WLIYiplOe+KqBj6dqmjOeooIkjS0kbtQh6ghgeK7OuI0d2F9GFIyTzn0rt69HBfCz ycd8aCiiiu04QrnvHHi/TPBekHUtZ8/7MDj9ym459Ooroa+G/j34r1zWPHms6df30gsrWcQizhnd rdSgxuCnjOcknHX6VUVdmdSfIj3MftMeDMyf6BrxCkbcQRfN/wCROK8A+LnxJvfiHqnnTGW302Bz 9kssghBjG4kdWP44zgcV55jFKOtaKKRyyqSkrM+nv2TvBsMcV14kub0PcOBHDawyn5F5yZR0JPyk Dtj14H0pXnHwBtdOt/hxYHTNMkslI2vNKAWuz183djJUlmx6YwOK9HrKTuzrpq0UNdFfG9Q2ORmm STQxKXdlAHy5rL8RzlUihXI3fMT/AErDDMQcHj61w1sUqcnFI7qWGc4qTZ1yXlvIMpKjDpwanrjr N2S5jMX3ge9diDkA+ta4eu6qdzOvRVJqwVkeJPEemeHLaKfV7gQRytsUkd8ZNa9fG37VOtajP8Q5 9Le9lk0yGON4YQfkRigDfU5HNdMVdnLUlyq56XrX7RWkDxlpllo7o2g+Zi9v54H5XoPLUfNgdckf h6+FfGH4hXnjvxDLK0iDTI2xbQIm3aoztLE8lsE+2ScAV54adFIySI4CkqQw3KGHHqDwa1UUjllO UlqfaX7NXhGPQ/BNlqjLJHd6jAJZEc5G1jlWX2KhTj/69exVxnwd1C71T4b6HeaiIvtUtuGYwptQ g/d2jAAwuAQOAQRXZ1k9zrgrRVgooopFGH4qX/R4X5xuwTXNliB1rd8WSIRGgOXXkjd0z7VzZk4F eRiv4jPawkX7JHi37WN9bp4M0iwd8Xc1+J40weUSN1Y56cGRPz9jj5br6x/afuLdfhvElxbGaWS/ iSB/MK+S+1yXwPvfKHXB/v56gV8nV24T+GcGNVqoUUUV1HIFFFFABRRRQAUUUUAFFFFABRRRQAUU UUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRR QAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABX0l+yv4c0u70i81yfTpTqlretDFeecw RkMaEx7A+CVJ3ZZf4lIJI+X5tr7G/Z+8Eaj4M8NSy6reyNJqiRXP2Bo2QWjYbIO4/fKlA3yjBTHO Aa5cXK1O19zqwkb1L2PT8fN9386Y2etSt0qCUgjivKSPXWo04z/WonK96cWwDnj61DIRnPX6VRqk MkZuMCmBiw64oZ/xpjnA44oNEiTdjvhhSA4xzyfSo0bj3zTs9wKY7Ejv8o7UiHnqTULNgAGnxtxj vSC2hOH9cj8anQgglTVcZJ5x9RUsagd80GbLuk5/tCFSCdzAHFd/XnNtj7RGTwAwz+dejKcgEYIP pXfgXo0eTmK96LCiiiu484K+Qf2ivhjqVh4um1Xw/pd3c6ZffvpGhVpmE7FmfOASBxnn1/L6+qC+ tY720ltp8mKVdjgHGVPUfiOKadiJwU1Y/NR1KOyOrK6kgqwwQR61qeFdDvvEOtWthp8LyPLKkZYI zKm44BbA4H1r7l/4VX4UTWJNRtdMht5pkEcwUZDjnJIPGTnBPU1veGfCmheGIXj0HSrOx8z77QxB Wf0y3U/jV85iqD6jfA3h6Pwr4U07RYbiW5jtEKiWRQrHLFug6AZwB6AVu0UVmdKVtDB8RKDMjFjn GNvb61i8ZxW34iKefCM/PtOfp2/rWK3FeNif4rPXw38NCxyeVMjFdwVgSPX2rtY2DIrL0IBFcNnJ 5rrdJlV7RFDKzKMEr61tgZ6uJjjY6KRdr5i/a38FzBrTxVYxx/ZifJvTuJfzDgI3PbChe2MD1r6d qC+s7a/tXtr63hubZ8bopkDo2DkZB4PIB/CvUTszzJx5lY/NILVrTLSS+v4bWCKSWSVtoSMZY+uB +tfcnj74QeGvGkvnX0TWdyOk9kiRyE4wNx2ncOnB9OMc1N4B+FHh7wbfrqNpAs2ppH5aXBXbsGCD gA9TnknPStOdHP7CVzR+ENi+mfDTw9aSgh47UZDdRkk8+h56dq6+iisjpSsrBRRQSACScAUDOb8Y pGkULhRvZiCR1IArlC5JOBgVt+K7yO5v0jhZGWJcFg2QSe1YIBz6V5GIalUdj38JBxpLmPNv2i7a 1l+F19JdRyPNDPC9uyq7BJN4UlivAGxnGW4yQOpWvkavqD9p/Wb2y8IWOm20L/ZNQnIuZwMqBHhl jPHBZvmByD+7PUE18v124RWpnm49p1fkFFFFdRxBRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQ AUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFAB RRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAV9t/BC71W/+Gmk3Ou3JvLqXzHFy92bmSVDIxBdu zDJXbkkbQDg5VfiSvcP2ZvFw0W81vTLsStaTxpcxnzDsjkVgpAXBGXDDnj/Vgc9ubFQc6enQ6cJN Qqa9T6kYgdcVXfIJx/OpAyyRrIhBRwGBBzn8RUEjenFeSe1EbJg896gJzwO9Pc/LjrVZmI71aNoo cxCk03ce1NLjFRSOd3y5wKZolckLjv0NODEgE9PSqxYYHr60bs8k0FcpYLgtkY/EVIG5H+FVCT35 qQNk+hz60iXEt+YF7Z/GpIz39aroMjOc1Yj6YxikzNkkWcV1/hrUFktvs0pCvEOGJ+8M1yUakLxU 8PB68VdKq6Uro5cRSVWPKz0PIxnIxRXGRX1xFEsaykIvQEA4pY7y5EZQTPsJ3Ee9dn16PY836jLu dlRXJpqN0qkCd+ueeah+0yiQP5rFw24HPeh46PRCWCl1Z2VFclJqN1I4JmZfYcD8qcNSukZ38zLM MZIp/Xodg+pz7nV1HLPFEpMkiLj1IFcm97cOzMZn3N1IOKqseRUSx6+yi44J9WWb64a5u5HY8E4X 6VnanfW+mWUl3eyBII8bmPQZIH8yKshuORzXm3xbbUrwWunWNjqDwk+ZJLCrMkmei4XqQRnn8u9c UV7SevU9XDUFUmqeyNbw547s9a1y6sBGsKq2LeTeT53OOmOPWu9069ezkLIAVI5U18waY1zpWpWV 95MqCGUSDIKkhSMivofQb6TU9Jt7ua3a3aUE+Wx5Az34Fa1YeyalA6cxwcKdnH4WdOdbcYO3PcqO lS/26CWAQAYyM/yrBJ646UzoeaSxVVdTyfqtN9DcHiHb9+EMP9k4oPiVCybLdsZ+bJ/lWC4DHOaj IAzxQsVV7lfVKXY3pfE2GULb4G75stn5fb3p0niiLeoigYoepc4P6ZrmJGy3GKrtkEflVfWqvctY Kk+h0tz4oYovlxtGc84w3r/9asvVNdkv9oCskeMFd+QT64rMY88gn2qI8DI6fWlKtUkrNm9PC0oO 6RJu56YNIGO7kn8Kj3egA/GkLY4IzWR0WPFf2pLqBtA0m2NlO10t15gu/s58uNCjgx+bjG5iAdoP RMnHy5+b6+jv2pJ8eH9Dg+27N907/ZPKz5u1MeZv/h27sbe/mZ/hr5xr1cL/AA0eBj/4zCiiiug4 wooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKAC iiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKu aVJ5V6jKGL9FI7H1/LNU6ltWK3MRGfvDgd/agD6W+C3xLcKmg+JLmJYYo8Wl1I2DwQBEfXg8fTHP GPaYriG5tkntpY5YXztdTkMPY96+JA2CSMj3pkGt6rZXfm2uoXUTpkLiU8A8EY9MVx1cIpvmi7Hd Qxrprlkrn207DPJ9qryEkkYGfavkXS/iB4m0+WA2upyAxkBVfDAjP3Tnt04/LFddB8XfE8duqObO WQOXMjw8kH+HggYH0zWLwk1szthmVL7SZ9EMMDjmo+voBXzzefFnxLPOrxyW0Eatu8tIhyOwJPP5 Yqz4b+IWu6n410031+kdrNOsbwBQsQVjjGOvfgkk5x1xR9VmldmizKk2krnveQDwM0dTzjApWX0x SE4PbNc9j0iQ8gYxmnKAVwRzUSHmpRuHbjOaCWTxnaeen0qyhHGcVTJbpirMKkkFjkj2qWZSXUsA nGOOakTOcdajAwc45qzHz1BFQzFksYHBp+ecDimjjAHSn4AIwOaRkwGcZzSrxzmmnOf6UvINIQjA g5pQ26ndaQgZ4oC4jAj/AOtQFOSMc09QOozQeDwcmiwXIz2yKA3pSkFjjPNMYFT7ikPchubG2vQF u7eGYDkeYgbH0z0qy52gUgJxRjPLHijoF+41Sc5xxij7xxTiPTpSHA9qBjCOMDFQSE+tTMahlwVz mqRSIJCRwG96r7vmyamkGf8AGoZBgZxmqRtEQMHBAyKYCBkEGkXI56UrnB5zVlkbDaSeMUdDngj6 UFi3QfnQpJwMD3pFHzh+1BqEsvibR9PZIxBBZm4UgHcWkcqwPPTES447n8PFq7P4yXLXXxN1+R2R is4jym3GERVA4ZhkBcHnOc5CnKjjK9ijHlgkfM4mfPVk/MKKKK0MAooooAKKKKACiiigAooooAKK KKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooo oAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKVTtYHAODnB6UlFAHSwMHhVhnB +v8AWqE3+tbB70aVMPIaM5ypyOOMf5zUR4YjOaBEkYBcAmtRcgDnp61lx8uPrWn/AAKOelAAT1rQ 8P3rafrNpdou54nDKuM5NUAOOc596AdpGAeOlJq+g07O6PrzTLxb7T7a6i2lZIw2V6Z7j881KR8x 5yPXNcX8JdaXU/CsFosHlPZosbMpyr8nn2PHIrtyvHArx5rlk0fXUKiqQUl1HRAEHaTkVNFlvvYp lsu1Wzz6VKoweh/KpHJkyZ9OtTx5xUS8DP8AOngnIxxSbMWWFXJJY8CrEOcCoYQWHPrzViLheBmo ZjIkXgc07J/Ko9xI/nT1Hy9etSQxxyeadUZyKUZPWgmwrdeTTlHY0nAHFICTQA6kJweleH+KfHes XF9c2kDC0gjmdGRGyWAOMFvTg9MZzXqXg7WDrOg20+GLrGqyOedzgYb9R+tazpShHmZ1VsFUowU5 dTePam4yaVGBPPX0oPBrI5QABOOtO44+WqWrajBpenzXVwQEiQuQOpx6VyHhPx9FreuvZzxC2jmP +jBuSTjkE9Oxx9cVcYSkm0awoVKkXOK0R3f+6cUxgSak/KmkY5NTYyRDIMDr0qBueatNjGCKgcDn HFOxpFleQZ96gycHNWHxjgcVAwIz8uT7VRrErufmwOKY2f8A61OZsPkAg0oK5wcj60zUZg8HOPaq +oXsGnWNzfXj+XbW8TSyvgnaigljgcngHpVrBxwa8++N/igeHvA14lrLH/aNw8VuqGOOUKshYkyI +RsZIpV5ByfxIqMXJpEVJqEXJ9D5e8YXkGo+LtbvbSTzLa5vp5onwRuRpGIODyOCOtY9FFeylZWP l27u4UUUUxBRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABR RRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFF FABRRRQAUUUUAaWkHiUHpwf50SYDnb07VVsP+PuMZIBPOD19qtN948UALGSHXb1zWmD0xWbGMuMc VpduD+NAmSA44NNc+lNGc4NKMdOvvQB7D+zzdTNcavZlSbcIku7cMBskYx1OR6enPUV7cqqf4a+U PAWpjSPGOlXbzmCATqksgOB5ZOG3e2DzX1nEA6BlIKEZBHIIrzMVHlnfue/l1XmpcvYEGCcU4Ic8 c08YwOtSqOMCuY7WxmNq08L8owOaQAk84xUsKc5bpUtkNkkOR1HGatx8A561COnQe1SKDU3MZakq gFqD9aB8vIpR15pEC9R/9alxzSHHbrRnnFBIhBJ74prqHQqw+UjBp200Dgc8UDPm3xZpw0nX7q0S XzVDEhmGDgngf/Xr0n4KXayWF/aGaQvCysIyRtAbPI98jn8Kp/Ffw5cSzJeWVvH9ljRpJCrDcWJy xI9AAPXvXAeHtSbSNUgu1LbAcSKjbSy9x/I/hXofxafmfRtfXMLZPX9T6VC89KCvNchF8QtAjsI5 pbxgzKf3ewl8jsQOhPvxWB4o+JVrLpix6HLOtzIcmQx4MY9DkdfpmuNUZN2seLDB1py5eVmf8ZNW jkvraytbkuEVvPjA4BB45/OuS8EJ5nifTg3lEiVSol+6TngGsJi0r7nLs7HPXJJNesfCjw4qLJfX sEm7ICiRdoUggj612u1KnY9ypy4TDctz1EH0FI2COaCRzSEY615580RyHHAqCQDbz+WanZc8Dmon X8fxplxKszEYwOKYTkcVYkUFeagCDJwcfWmbJqxDgE845qN0OTiptmCcj9aVlHcUy72KNzLFbW0l xPKkUESl3kdgqooGSSTwAB3r42+KXiNPFPjjUtRt5JHstwhttzsR5SDaCoIBUMQX244Lnvk17Z8e /H2l2nhu88OaXeG41a7PlTG2lG22RX+dXYH7x2lNnoW3Y4DfM9ehhKTS52eRmOIUmqcdkFFFFdp5 gUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFAB RRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFF FFABRRRQBJbyeXKrYB+taD43HHArLq/EwZF5ycc0AT2/+sFXyckYqhB/rlx34rQCnJFAgyQMetOU AnmmNkdRmgN6daAHFhmvffgT4yN/p76FfLbwpYIBBKZMNKCTkFT6ZHI/KvAVGetavgzxK3hbxOl8 U3wlTHIo5OD/ABAeoIFZVqfPBo6MNV9lUUuh9jlSx4+tPXJFZvhfUodc0e2vrSUSxyIMsMYzgZrZ 2AADvXjO6ep9BzJrQYi5IxUoHHH6U5U44zUipxyKkhyEUY69amXjHBpoUl8EcVKDjg0GbYw5H0py n1oUZbmlxjgD8aRIhIFKDx0owD9aXpwBQIbkk8HijBJ9qUHnpSj1PFAynqmnwapp81ndbvKkGCVO D+BrwvWPA2t6XA08lsssAzlo3DFR6mvoDPbAxQcYIIzkdCK1p1XT2OrDYyeHuo6pny/NaTxQxyyx Okcn3WI61oaN4c1LV9hsLfzVZ9hbcAF9z6D/AAr6CfS7GSaOV7SJpEbcpK5APrjpn+VWLe0trZ3a CCKJnOWKIFyfU1u8Vpojvlm75fdjqeZeEvhtLb3MV5rU4DRu3+jxgMGHQHdn8cYr0+3iSGJY4wQi 8AE5qbHtxSbcVzTnKbvI8yviZ13ebEIOc0GnE8c0wtngVJghrDjGRmoHAyMGpTjOf5Uw/nQWitJ1 PpSYXHb8amZen60wgYPHNNGiZCcHP1rkPib4yi8CeHF1OezkvWkuFt4oUcRgsQzZZsHA2q3QHnA7 5Gz4u8SaZ4T0SfVNZn8u3j4VV5eVz0RB3Y4/QkkAEj44+InjfUPHOs/bdQit4Yoyy20McS7oozj5 DJgM/TPzHALMVC7iK6cPR9o7vY58TifYxst2YOtajLq+sX+pXKxpPeTyXEixghQzsWIGSTjJ9TVK iivWWh4bd9QooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAo oooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACii igAooooAKKKKACiiigAooooAKmtmw2CcCoaUHBBHUUAatsQsoz0rSJHrWVZkyupXr1xmtNqBMRvS mnIxSgil60AAJxiqF0MTtmro4+tUrk5mbrQB7d+zh4snGrf2BdMPsogd4TtHy4bccnPufX0+n0eM Nhs5B9K+A7O6ns7hJ7WVoplzhlOCO1e3+AfjdfJf6bYa7DA1mQsM1wWIfPChx2A7kfliuDE4aUnz wPRw2KUVyTPo/p0zTlz3FZ+ha5pevQPNo97Ddxxtscpn5T6EHoa1DjFec01ozv5k1oJnGTUgwBk9 6Z2wRTz92gTEYEkHOKARnBPalPGO9MdATn1oEh4xxzQeRmmrwtOGCMd6AExQQcf0pxBpFORzk0AI oOehoA5z1pS3OKOmKAExk46Urjilz7U3v1oAUHjmmmT5unFOA+agrk5OKAEbBHFIB68UMQMYHFGc 8gUhjcY4xSFQePWpCehpmDnPrTAjK+hrN1jU7LRrBr3VLmO1tEdEeaThVLuEXJ7Dcw5PA6nApPE/ iLSfDNgl5rl6lnbO5jWSQEgsEZ9vAPJVGwO5wBkkA/Efj/xjqvjLWnutUvnuYIndbRDEIVijLEjE YJAOMZyzHgAs2Aa6KFB1X5GVbEqku7Oi+LXxQ1DxwkOnNDaQada3DyA25ZhOwZwj7nVWAEbAYwuS WJAyFXzaiivWhBQVonkTnKb5pBRRRVEhRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFF FFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUU UAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAWbGbybhSeFJwTW7xu5rma19Nun mYpKVJHQ5wT+FAi8yjqKF46U/j6UY568UARtjrVC4H7wmtBhn0qldkeZgdR1oAgBp2fQ03FAoGdH 4Q8V6z4a1FZ9JvJIsgh0B+Vwf7w78819FeAvjDYXumO3ii5tbS5iTkIrAyHOBgcjkY9BnPQV8s2a M9wgUEk5xW7BbKFBcHd7npUvCKv0+Y/rbodfkfbmm38Go2qXFs6ujgHgg4z24q3k49K+M7HWdTsd 32HUb23LIsbNFMyllHRSQeg9K6uw+K3iy0tlhN/HOF6PPEGfHoT3/HmueeUVF8EkzaGb038cWj6h VuR60uc1yvwX1e78Y+H5LnU50+1B2QBYioIGOc4A79Bmu8OjXIcgFGGM5zXDPCVabs0d1PFUqi5k zPIyvBpgP0qaS1miZvMjcY56cH/GoWPP3SK52mtzdNPYcDjNIT7CmgkUp9TSuOwdTk5o3EDAHFB5 +gpueaBikk854oz6UoUc0YA6UAPXGDSMDmmTyxwJvmkSJDxudgoz6c1yupfETwzp8l3FNqSST2wy 8UakljnGFPRj9DWkKc56RVzKdSENZOx1nWkPyivHvE/xptYopovDtm80xGEuLgbUHTnZ1Pcc459a 8p8e/F3xm9+sumarLZafJ5TCBIIv3ciBSw37clWZS2CcEEqQR16ll9dx5mrHM8woc3Knc+qda1Wx 0XSrnU9WuY7Wxt03yzOeFH8yScAAckkAZJrxa6/aP0FtLvDa6XqkepbJRbCSON4d/wA3lFyJAcH5 SwHTJAJwCfnXWPFfiDWZb19T1m/uPtu0XCNO2yQK5dVKA7dqszFVxhSeAKxK2p4KKXv6mdTGSfwa G/4o8X674nubh9X1O7mgluGuVtGnkaCFiTgIjMQoAYgeg4rAoorsSSVkcjberCiiimIKKKKACiii gAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKA CiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAK KKKACiiigAooooAKkhlaGQOhwR+tR0UAbtnci4VsKQVxkH39KtrkjHSuYVirBlOCDkVpw6p8+JUA U9x2oEaYGOTiqV6f3uMD6+tW0cOoYNkEZqlen97+GKAIKuWdhJcYbG2POCTVnTLBWAkuF4PRW7j1 rbBAUBcYHFdNKhzayOariOXSJFHGsSIqD5QMDipFHPTNAIx3p5HBxkV2JHC2IgweaUgZ65ppYRpk 9Omajik3lmGRii/QVup9RfspSu/h7WI9z+VFcL8rYwGZecdxwBx717rXyx+yxd48a3tmUjAa0acS EkOSrKu0diMOTj2r6nrgrq02elh3emgIB6gGq8lnA6MpiTnvjmrFFYOKe6OhSa2OK1jStRtRcXMM ivEhL7AOif8A1hWINYJOWjAx2r06RFkRkkUMjDBBHBFc/qfhe0uZkeCPygc7wpx6dK8jE4CafNQf yPVw2Og1y1l8zjTq8xYlQoHoelPTU5pcLFHmRjgADPNXdS8Ow6c8TXN6ghaTaQB8yjsTXTeGtJsr JDLaz/aC3IYgAjt/jXJRwWJnK09EdVXGYaEbw1Y3SdGl+zxtqG3zMhmUdvatc2NqTnyIwenAqzRX u06EKaskeJOvObu2eS/tJ6VFd/DcyogV7GdJkPQBeVI/HcOPWvkkNnHtX3/4g0uPWNJuLKZUYSKc CQZUtjjcO4zg49q+EfEmkXmhazd6fqUEkNzCxyHTbkdmA9COR9a9LDSXLynl4uL5uYocEZz+tQXU UU6hJo1kUENgjuKh89lc787R6DmrCEPyuTXRdPQ5rOOpw1/AYLqVfLZE3sEyD0z29ar13WoWaXds 8UhIzyGxnafWuIljeGVo5FKupwQa4a1PkfkejQq+0VuoyiiisTcKKKKACiiigAooooAKKKKACiii gAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKA CiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAK KKKACiiigAooooAUEggg4I71rabBNfFpHA2A4LZ7+mKyK7LR7JrO0McrBmZy3y9B0H9K1ow55amN epyR03LWMDpx7UAnpUoTI68UmML1Ga77Hm3BFJfBHvTySeAfwpAxA5xn2pFIBO7j6UxEV4SIeSOT 2qGzBLtgkcfnT7s7io5GM1LbIBEOOTU7yL2id98ENVfSfiRpTrFLKs7/AGd1hYKxDcdT2zjI79K+ 2ByM18C+ENebw14q07Vo7eO5FrKHaKTo69CPY4Jwexwea+3/AAVr3/CT+F7DWPsrWgu0LiJnD4GS Oo6jj0B9q5cTHVM68LLRo26KKK5jrCua8T+I/wCzJ/s1t5bT7Nx3DOM9B/X8qz/FHiWdWazs43gd W+aRyASB6Dt25rK0bQLzVrlrmcGKItvLSL9/J5xQBmw219qkw2+dOxPXlse59verMNxqfh3U8sjI ccrJysi16VaWUNqzmFcFsA1HqmmW+owukyLvK7Q5GStAjK0LxRa30L/bXitZlPRmwpHrk10EbpIg eNldD0ZTkGvOtd8MT2P7y3bz42ydqrggAcmup8GTTzaPGZtu1MxgAY244xQM3q+X/wBqfSr/AP4T Cy1MwO2nmxSISqh2qwdshj0z8w/MV9QV5j+0B4ZOv+CZZ7ckXVmfNGZdiFBy24d+Bx71rRlyzRjX jzQZ8aXMPV1GfamW77CQeQfSrx54H61QuV2t29Tiu5q2qPOi76Mu49P5VyPiWEx6kX3AiRQ2PTAx /SultZi3ykDPrmjU7cXVnLDnBYcH/aHI/UVNSPtI6F0p+ynqcJRT5onhlaOVSrqcEGmV5x6m4UUU UAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQ AUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFAB RRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQBt+GIFe4ebJLxDAGOme+c/WuoUZAyay/Ddt5FkS4 TdKQ4I/u4GAf1rT3BTkkV6NGPLBHl15c03YVuDxxScE80FxnPWkOPzrQyFPTgU1uBnJpS2RxnJqr cb1BJJBPek2NK5CWaSTn1xWlDnYCcD8KyLdmMgyO+a0VJY/KcY9KmD6lzXQsYGAcA/hX0T+yjq08 n9uadc35kiRIXt7eRySn39xQHgDpkD2r5zBfaA2eO9T213PbZNvM8TEFSUYgkEEEfiCR+NOcOeNh U5+zlzH1/wDET4vaR4QkhhiiTUroyFZYI59jRqP4vukHkEY4ry7RPjnf3fj5LzUt1toe10SzR/ly eFZ2xzj2FeF5Hf8AlQpIcHOCDkH0rONCKVjSWIm3c+/RYaXqcsGpRCG4LYdJ4n3K44wcjhulaleP /s2+JP7Z8OXlgc7tP8rdn/bB6DsPk/me9ewVxTjyux6EJc8VIKKKKkoCARg8iuB+M/iC48IeALq9 0eZLO+eaOKB1hVhuLZPB4+6rckGu+ryn9pXVYLH4bS2ckbvPfzxxREJlU2sHJJI44Uj1yfQGrpq8 kjOq7QbPn3TPid4m0yfzLe9BJyXWQFlkYnO4jPWqPizx54j8U3jzanqc4RlKCCFikSqQAQFB6HHO c5rlW+v6UmTnivR5Y3vY8vnk1a4hBx15pjx7lI6E98VNlcc9fpQKdhXMt2a3m+UjIq/G4ljUqBz1 FU9QCmTKnJ9qk01ioYE8H3qFo7GkleNzK8Saby13FvZiR5i44AAxkflXOV6BPGJopImJCupU464I rg7iF7ed4pBh0ODXLiIWfMup14WpzR5X0I6KKK5zqCiiigAooooAKKKKACiiigAooooAKKKKACii igAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKK ACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooA 7mxDJbRIyBHCAbQenFT7M45qtpwUWcWyYzDGfMJyT/n0q0Wx2NepHY8iW46MKD3xTXXB55FKg3Zx 37UPxxz9aZIjHaOKhuTvgOclqkIPfkelPKK0eOlJ6jTsZ9ogMo3ccVfUKGyKpyRuo+7keoFNO4Ln 5h9alOxbXNqaRHAJ6elNc44GDWakjjGCfp2qxFcLzv4+nNNSTJcGiwSe2aQ9OSaI3D8r0HanE5P1 qiTsvhB4ij8MfEDSr+5llSzDtHOEz8ysjKMgdcFgfwr7fjdZEV42VkYAqynIIPcV+dyF4pEeJtrK cg+9fXnwH8bp4j0OLTRAI5NOt0WZuihiSFA+u1jjtj8uXEQv7x2YWpb3WerUUUVyHaFeb/tAs6/D PUiRam3wofzs7t24bNmO+f8AOM16RXlH7R8scXgcC7j3W0j7QwXJWTHy/wDs3p0q6fxozq/Az5HB I7DFNJGOaVjluOBSlQQOv1r0zyRByATjFVp7rGVjHI45qwQGBAJB9qzbmMqevFTJtLQuCTeo2NDI +M1ejRY1+U5PTNVreTGU/EGrK9sVMUVNsUtzkjNYfiS3aVFuF2BYxhuPmOSMVvbCRk4qG/s0vLR4 m+XPIbGcH1oqR5otBTnySTOFooorzT1QooooAKKKKACiiigAooqS3glubiKC2ieaeVgkccalmdic AADkkntQBHRXtGmfAbVA1sdZ1KzhV1fzkt2MjQkxgpg42uQ5IYAgYX5WO7I7OL9mmwvNHs5YfENz bXzQQmbMIni8zDebt+4dpJXbnkBTnduG0Cx8yUV9kaL+zz4M0zUEupJNUv0COjW15LG0bh0KnO2N WBG7IIIIIBHSuv0b4ZeD9I0mTT7fQ7NkdJ4jO8am48ubeGTzgA+NrlAc524GT1oHY+CKK+7dY+EX gHVrpZ7rw1ZxuqBALRntlxknlYmVSeepGenPAqjN8EvAs+jadpz6P/x5YxcpIUnm+ZWbzXXG/dgj kfKGITZxgCx8QVNNbTwRwSTwyxx3CGSFnQgSIGZSyk9RuVlyO6kdjX3g3wy8KL4Ov/DVnpMdlp18 gWZrdiJmKsXRjIcsxVjkbiQOmMcV0z6TpsttY20un2bW1i6SWsTQKUt2QYRkGMKVHAIxjtSuOx+c dX5dG1OKSGOXTr1JJ7Y3kStAwMkAVmMqjHKbVZtw4wpOeK/Rw/McnJ7cmq1xYWdxe2t5cWdvJd2m /wCzzvGGeHcMNsYjK5HBx1FFw5T88LTQNYvPsP2TSdQn+3+Z9k8q2dvtGz7/AJeB8+3BzjOO9acP gLxdPZJd2/hrWJoGmlgzHZu5DxkBwVAyME4yQBkMOqsB+gpAzkY+lQ20EVtGY7eKOGNnaQrGoUFm YszYHcsSSe5JNFw5T837q3mtLmW3uopIbiFzHJFIpVkYHBUg8gg8YNdD4X8CeJvFOm32oeH9HuL2 0s+JpEKjnbu2oCQXbH8KgnleORn9BP8AOaUH16UXDlPhbwZ8IPFvinUryySx/smW0hSaQ6qslvw7 MEwu0sc7H5xj5Dkg4BLz4N+O7e7aGPQLi5TzpIUmiI2SbJRFuG7BVSWBBYDKZf7qsR914B54pPeg LHw/4v8Agv4s0HxBZ6XY2FxrIuIYnFzZW7+SkjfKyM5G1drA8kj5drHbkgb9x+zd4zijVo7zQ52L qu2O4kBALAFvmjAwoJY98A4BOAfr8kdqBwf60BY+V7X9mPWWspXu/EGnxXYh3Rxxwu6NLl/lLnaQ uBGd20nLMNvygtH4c/Zo1u8tvN1/WrPTHZEZIYIjcsCRllflFBHA+UsDzzwM/VpGaD0oCyPnfT/2 YtMSSD+0fEl5Oiu5mEFssRdSo2BSWbaQ2SSQ2QQAFxkyr+zPpUWvwXMevXEukxzRu9jcW+55EGN6 GVHTG7DDIUEA98ZP0Fj5aQc8YoHY8R039nDwpaa/Fdz3moX+lJCVaxuGALynPzGWPadoB+6ADkZ3 EfLXGat+zJqX9uIuja7Zto7uCz3SMJ4lLHICqCshC45ym454Uc19SAUh68UBY+cPFv7N32m50NfD N9ZWdvFbRwak8wlLSyqfmuEUlhlgT+7yqjaMHkkZcn7Mmoxx6sI9dtJ5FSMacWVoQ7ll8wzDD7QF 3gBSckgkrgg/USDvR0NAWR8i6d+zf4puLe/+2Xun2lzFt+ygsXiuP3jq2XHzJhVVx8hyJFB2kMF8 x8c+DtX8EatBp2vxRRXM1tHdKI5RINrZ4JHQqysp91JGVIJ/QjHGa+Tv2vrwv420azMFuPJ07zfP VMSvvlcbWbuq7MqOxd/WgTR4NRRRTJCiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKK KACiiigAooooAKKKKACiiigAooooAKKKKACpbWQRXMMjAkI4YgexqKnwxmaaONcBnYKM+9Nb6Ce2 p3w4PTI9qeNpHvR90nigsOwr1Txw+6DjFRsctjrTicA5poHHSkCHJ19adtPQ8U1AVGaeGDDntTEy LBHakZ1wN5x9elPLbjjtVa6Q43AcDrmpehS13HhI2bciA5HYcVBLD5WORg/nT7OQZKNnnpReg5Xk 4qXZq5aunYLaM7g+cDnjPWrRHTAGOtV7Ufu89WzVgZzx0HrVR2JluKOB/Otzwfr154e1qC6sr6Wy DMEkli5KoSAxx3OM1guxJ45FKgz1xx3pvXQlaan6FadeW+oWNvd2U6XFtMgkjlQ5DqRwasV84/sy +MpjqI8L3d1m3Nu720b9pFbcVT6qXYj/AGfrX0dXm1IckrHq05qcboK8i/aXgMvgZZJNTgtYI33f ZpDhrl8jAX1IG44x6167XgP7WoszpPh8vPIL9Z5PLhBG0xFRvYjrkEIB9Wp0VeaFXdoM+bAfm9fe pOCvJqEZUnbxQpJ74NeieXYV2wTjqOajwG4fp6VJgEetNOB680AipNAIxuXp/KnRT84cE+mBVrar L84GD2rPnwJDt+7nioa5dUaRfNozRzjr3poPXk4pkJzCuW6UFtvX9Ku5FjjdUtxbXkixo6xZwpYH 8cZ61Uro/Eql7aFxGSFY5fP3c+3v6+3vXOV51WPLJpHp0Zc0E2FFFFZmoUUUUAFFFFABXrP7P/hC 31rWpda1ETeRpckbW6AFUkm5YEt/sYU7R/eXPHB810HT/wC1tc07TvN8n7Xcx2/mbd2zewXOMjOM 9M19heEfDemeFdHFho8TxxFvMdncu0j7Qpc56EhRwAB6AUAb0IDzoGzsLAMvtXcx4EagDjHArj9I gaa+i8vGEYO3PYGuxzmkykKfWmt7UppCKBjQMmpEFNzgdKep+Ue9AAcY4pCTRnpSk8e9AAD7YFIT 9aOcZpMk9KAHYwOcUnGf8aMZ+tG3kc80ALz3pM5xxTv503p0NACk4wBRk96bznpTupoAQijrSmkI x0oAcvBprZzxS59KTPcUAA4A/lSnHWlI4pBmgA79aCPwpRgDmjI/CgBAOKPr0pQT2oPPcUAL1FfF f7UF6l18XL6BY5ENnbwQMzTM4clBJlVPCDEgG0cZBbqxr7TXOfXNfAfxbfVZviFqs+v3mn3uoT+V M0+nEm3ZHhRo/LJAJUIUAJ5OM5PUgmcfRRRTJCiiigAooooAKKKKACiiigAooooAKKKKACiiigAo oooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACrmkFhqdv5Zwd3pnjv+map1d0Z0TUoC+fvY B3EYJ+g5+n9KqHxImfws7cfMcikdT2p2Vxg9aYWKnA5FemeOhAATnqadxzx1pjZ60/fge/egYEno ARSMQCB3pyfMM4JpCgJDc5+tAEYPPH50OFZdrcj2pzDHGDmjADDI4oGZhyrfJ0B9KfLIZCpOc1Zv Ig2GXjHWqmSCP61k1bQ1TvqXbVMR8EHJzU6jjkjNMjI2rng09z1GMfhWq2MnqwKgDqKQHAOMU3nG MGkI9qBHQ+ANe/4RjxnpGr72VLWdTKQuT5Z+VwB/ulhX2z4Q8R2fijSTf6cwaEStEcHPzDB/qK+A ydx4zXrPwA8cR+E9fNlf3Pl6fqEiIxml2wwnvIcnAPQZ9BWFanzK63OmhV5HZ7M+vq8D/axbTTpW hiZ3/tVJZDCqkY8ogb9w+oTB+te8280VzBHPbyJLDKodJEYMrqRkEEcEEd6+Vv2q7yG58e6fawzC SS2sVWVAc+WzOzAH0JUqfoRXPQXvo6cQ7U2eLZ+Y4/nTtwPAH1pAp25wKQkBua7zziQKMEkmgEFq jLHbgEGlRc85xQIWYgITkYHrWdGDJKvA5OTUl/IQ+zjA5pbEEKzOPoTUN3djRLljctJhflPTt6Uh X5ue/pShQ3OelJIwUKTjjiqII74YsZwI2fKEbV6nI7VwzAqxDAgjgg9q7/BPeub8TWIhlW4jACyH DAf3vX8f6e9c+Ig2uZdDpw1RJ8r6mHRRRXGd4UUUUAFFFFAHZ/CLSpNW8dWKCxhvraHMtzFNGkiC I/IWKsyg4Lj1I6gNjB+tASBgdK+e/wBm7TtNu9b1O6u1jbU7NY3tCZCGVWEiyEKDhhyoJIOMjpmv oXHIoA2vC0Re6klycIuMeuf/ANVdQAKwfCSIsE7gncWAPpjt/M1vYFItARTQO9ScH1pp6UAN7c04 dBSY60D0oAU4/CkYc5HNOx0oIoAb260uCT/hS4A96Q5zz+VABnBwMU7qOf1o44prE9KAFPPQYpuD +FHOOlL1HNAC5wOBzSE+tAxzxTSTjkUAOPPSl6jjrTV9+9KMigBwFIAO3NGCaB39aAFx7Yo6DikJ PSkzigBeopBS9QfSj0HagBR0oIGKOgNL9KAMbxfLfweF9Uk0i5s7S/S3cxXN5L5cNucf6122sMKM tgjB24OAcj88bm5nupBJdTSzSKiRhpHLEIihUXJ7BVCgdgAO1fbn7RHiYeGvhdqeyLzJ9T/4lkeV yq+arbyeQR8ivg8/NtyCM18O0yWFFFFAgooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKAC iiigAooooAKKKKACiiigAooooAKKKKACiiigAq3pILalbbVDkODgn05z+HWqlWdNYrqFsVJB8xRk e5qo/EiZ/CzuCT1GDR5iEfK4akPKbQaoP+7kJQcqa9Jux5UY3LTSNu6YHoKBKNpGCCe9EUiyLnbU hRcDjigNgEhGAgzinh8oPlwe9NRVHc/Q09jjqPxpksUYKikwOlBK46nnvTSw68fnQAFd2RgH1BrN ljKSFa0sk84x+NV7uMkBgOe5qZK6Lg7Mkh+ZMjJHQ1IeOpzVGORo+jYHpViGYSfKThqFIHHqWeBj Bph59TTwB0PJpM7ckkfhVEDAAp5BzSsd3YilP0P1pdvy5zkd80AfS3wB+J9tdwW/hvWpfJukWK10 8KrssiqpGCecHgdcDmvNv2h9XsdV+JN0tjaywTWaC1uJJFKmWRSRuA/u4wAe/XpivNrO4ls7mO4t pGjniYMjKcFSOhou7me9uZLm9mluLmVi0ksrl3cnuSeSazVJRlzI1lVcocrIzwMA5qJuTwKVjjoT SD2rQzQ3ODinu5VCw7U1uhPeq9zNgFFPHek3YaV2Q7fMlJc9TWgqhVCk8AVXs0VhvI3H0NWmyKUV 1HN62FwMccimTBWiORin8Y54NRzAGMlgcVTJW4yzOU5OSD60mqWq3lo0bKCwyUJOMNg46fWobVgj 4559Kuscde/epVmrMp3jK6PP2UqxVgQwOCD2pKu6raG0umATbExJT5s8f5/yetUq82UXF2Z6sZKS ugooopDCiiigD3T9mjSONa1mSH+5aQzb/wDgci7c/wDXI5I+h617sOh5Oa87+AdtZ2vw9geykupD czvNOZ4vLAl4UhOzINoG4E5Oehyq+jbgeAM0AdV4bj26f1ByxPA6exrVwfpWdocMsNsfNYNk/KB2 FaeaRaGYwaU9KU03HFABigjBoHHekJ6UAKM9aXHP+NNAJ60v+c0AKSO35Up96aetIfyoAdj0NKRx yeaQZPvQxxQAhFAIJ64oGSKFwOtACnGOtN7+lOLUgwT7UAH0p2fxNNzg8UoI/GgABzx0p+Kjzznv RknvQA480hwBg0gIxx1pOM80ALnigDrmgke+KUY2g9KAFzkZxSA8nNL/AA8cUY7igD5b/a7m1tdQ 0eC/Gl/2K7yvYGGMm5yqRCTzWYcDc3AQ4IxuBIGPnevXv2o9Yt9W+KLpaTW8y2FpHZu0MhfDhnZl b5QAwLkEAsBjkg5VfIaZLCiiigQUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAU UUUAFFFFABRRRQAUUUUAFdf4T8FT63ai8nnWC0cOI9vzOzDgHHTGc98nGOM5rko43lkSOJGeRyFV VGSSegAr3jw7avaaHp9vLCkE0cIV40bI3dzkDqTyfcnk9a5sTVdOPu7s3oU1N6lW28JaHaSGSHTI WYgriUmQY+jEjPvXQAd2ySabgg5JGOvWms2G55OPXpXmSk5bu53qKWyI1RGnWR0HmAFVYjkA4yM+ hwPyFEuWR1QLuYEYPQ0hbb0IPHWh2UEEc+4oTswaujz66jEdxJHtKlSRgjBrPu4tp3rnnrWtqsZh 1K4UhAd5I2jAwfaqTgyIVPU+lfWwfPBM+Ul7k2ipZEfMpPfpVs5GB2qgC0UmPutmtEMrqNvIxVR7 CnvcE9DjGKHOAaTv6YpJG+X61RJDudvxqRBt6UiKenWpDxjjPvikNhnJ6UbTyM0mDnvQT8oApiKM ybHwTnvTS20fLwatunmKfX1qnF8kmXHTsayaszVO6LMNy3Rzk9sVaT5uc8VTmgB+aI7gevtUcMjR twcA+1Um1uS4p7GhICRkGkV9wwSQaSOdHT39KCARn0qyPUcynGQR9KQAhgT3oTg81I+OoOQO1AiN VBzk/rTCmGxUqgZ6nH1p5TjJPvzRYLkK/dI61SK75TwAGNWp5AsL4PPTiq9oPMkz0281EtXY0jor lhY9gAHbvUinJ5peDTgQo6VZDYuM8moLh1RCAQSe1SFxyTWfM++QkfdHTilJ2Q4xuxYQDIvzEc9R WicHB6fWqEP31x1z6Vf+tKA57mVr1kLm0d44szJgqVAyR3H6niuRr0IEE1xWrQSQ30xkQqryMyk9 CM1zYmH2kdWFn9hlKiiiuU7AooqxYQfar62t9szebIseII/MkOSB8qZG5vQZGTxmgD6g+A8s8nwz 05J7fyoo5JlifeG81fMY7sD7vzFlwf7ue4r0FB8/XA9+KjgmWa2jmUOFkUOA6FGAIzyrAEH2IBFT WoRp18xGdO4U4NAHd2qosCCIEJtGOe2KlyOlRRtmNSCSCAeaUDmkWSEntQDngdaAKQ9eKAFOO9MZ eeKXOKUUAJn1peO1KQTnFJzxigBD+VHSnDpTcZNACjOAc0HJbrSYPUUoz6YoABS5HT+VSQWs1wwC KcepHH51YGmTBCT1HagLlI/jikJ4qxNZzwqCyHB9OagxgZoAbjPWjGaXNJ1oABxQc57UdOhpT696 AEHWnYNGO9HJHFADT1AFSD7vPFIAMj1FKTxQAnQ0A9QaMA4/pWd4nnuLTw3q1zYxXE13DaTSQx2w BldwhKhMqw3E4AyrDOOD0oA+AfHV9bap438Q6hYyebaXeo3E8Mm0ruRpWZTg4IyCODzWHRRTICii igAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooA6PwB uHiWBkRmdVOGETSbc8EnaRgYJG45AzyO49dR5QwPSvNvhZYC51O5uRLcwtbqvzRsoRgSco4OSQcd vQ8g4r1NgOSCBXmYtp1LHfhlaBIWzk+oqvjkHrUoBK8EGkxlCOBXKbld8Mdq9O5qYLhRnPQUkSAk 9Mdakc4Yrj9aAOI8ROsmqSmNflHy59SOtZoOCe/vWlrsYTVZ1APXd+fP9azeckV9Zh7eyjbsj5bE fxZX7lS8UFgQAPU4pLSQAlSOPWrMkfmKwzk1RXMb4xyKt6O5K1Vi8Qc9ePWmvjIwacrDyxxk4pUi zyW59KsgUJxkUEZJyKcfQGmjcG5HFAgwccn8KXtkDrS4AIPWjHORQAxQeccVXuoN3zDJPTireBmm 9uenoKTVxp21KltIFbaQKsSQrLyeCe4qpOuyXI4B5HtVi3fdEATyKldmXLuis8TRtycEdDUkdwQo B59TmreAwwwzxVSe32DKEk+lFmtgUk9GWoyG5DAinMOCAKqWkciuC3A96t7/AOHHPrVJ3RDVnoNG Qf8AGiVyFxxzUmP071GQT0HNMRVuV3KMA/hT7OIqjFiAT2qRgQacAOKm2ty76WDABGOtOLk9OhpN oJ65p20D29qogr3LlMAEiqg6kdasXeSw54FVgSDWctzaOxctkG0sRyTU4JPHSqKTNGMdc/pVpJEZ AdwqotEST3HZx7n61T1i0N5ZMi53qdy47kA8VdGD2704YNNpSVmJScXdHBy208MYeWJ0UnaCy45q xHpV284iMW0kZ3H7o/EV2rAAn0pEUZOMVzrDLudDxcrbHHNo18DgQg8A5Dj/ABrW8NeH5ZNYsDd4 VPPTMYVXZuemGBU5OByCOeQeh2zwfatHw5by3HiDT47Rd0/nKyDPcHP9Kf1eC1EsTN6H0wiEou8A sBzjpmtPQ4EbUIskgqCQPX2rPjYY7gkdK2PDpP2w/KfukbvSuI9FHR7fyoxinHpSd6RQgODyaMk9 KU8mm4oAKcvSm09aADPFKKTjtRyDQAoFNzjAp/FMbg0AL24qWziM86p+f0qAZ7mtzSoNkQdlwx45 HagGXkUKoUAAAYwKWiimQFc/qVusE+1M7SMjNdBWPrpHmRYYZAORQNGXij24pQRigjB4pFCgcUYp M/nShqAAHjGaD+lKPekJ+bA6UAKOKQ9M96XtSDgc0AAJz0rnPiTBq1x4C16Pw7dXFtq32R2t3toz JKzKM7EA53OAUBHILAjkCukyODiud+IN7f6b4E1+/wBIuY7a+tLGa4ileLzApRC33cgZwDjOQDgk MBggH593VxNd3M1zdTST3EzmSSWRizOxOSzE8kknJJqKiimQFFFFABRRRQAUUUUAFFFFABRRRQAU UUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQB6X8KLM/Y7u7WdlV3MTxYGG2hSrZ6j G5h759q7tyCRjsK5f4ZWs0Xh1JpLppYZiWihK/6nDMDg55zgHHGPxNdcy8D5Bx+deRXd6jPSoq0E BOF+XrTCApGc+tO7ZHGaRl7nmsTUaxzINmMe1OUfeyTn3pVA42/kRUroRyMYoA5Dxi0v2qAlR5YU hcHv3+naufGd3y8iuk8VxRRyoCHLsc5zwK54KAo+bB+lfT4HWhGx8zjv48hpYcjPPpVW7iPDovTr zUwiJbcDk06QBk2nvwQK6mro5k7Mq2j4cjJ5q3k54zWbMrRSELnHUHFXLaUunI5HGcVMX0LkupMo OM4696U8+/pQGBHf86XPoBVmYik46g0h4PU07160o4FADTnGSaMjHI4p5UHv+FNK479KAK11Hvj3 L1Hcmq0EmyQZ5HTFaLDK4OKqz2+0bkHHepkuqLjLSzLSOHUFcYpQpPWqEMrRtyflPUVZW5UkckZ7 01JMTi1sSsMioVPJPcU4zRnjPWmh0BHK/nRdCSJQS3rQvOewqL7RGAee9Ma5QH5QTRdD5WWtgPOM 0OBwBUC3Y5yp9qQXgz9w/nRzIXLIsrjvmkzzwDVU3Lc/dHpU0E/mKcjGOCaFJMHFrUrXoxIOuTUO farVxEX2leveohbNzyKhp3NItWIScjpTCCMGrKxKMgtXtnwv+FNhq+gHUdejYpdIPs6oxVlXPL/j 29qwr1o0I80zehSlXlyQPDVldSMN06VetxcPG0pglaJRlnVCQPqe1fVml/DTwnpsdt5GkxPLburr NKS7lgc5JPB+mMV1Gn6faadb+RYW8NvFksVjUKCT3PqfevPlm0V8EbnoRylv45WPmnQPhrruseVJ EkSWskQlExbKkHoo9/8A9ddBb/BvVG028kldUvEUGCESKRIc8gnoOPevfh8qgDgDgCngjArmlmta T0sjojlVFLW7PAdI+CWqSsr6rqFpBGY922HMj7v7pyAB255rf8OfC230G7GpXlzLNcQvmGPACgY6 kjqRk+nTPsPYSMjrWD4ikYLEikgHJbH+frThjq9Wai3owlgKFKDklqjJDcgbvl9K6Xw0VCOvIcnP TgjFcuuRggV13hyKL7EsgRlkyQWbv9Pau45Uaw680Y55pQvPFJzmkUBGD1ppNOJOe1J70ACj16U6 m444oBoAXHTFJ360dDj1oyR1FADh05pp569adwRTQAe9AC5AHStvSJd9uQWBIPAzzisTkds1NaTP byBkP1B70A0dHRVOLUYHKjJUnjkVILyA/wDLQDnHNMixO7BFLHtXOXjmS5dmwWPp0rQ1C9R4CsLH JOMj0rKx3pFJDevXigcHmkPWjBIoGIaUDim9+aeB0oAXoKTnNLj1pMZFADdxJ4p7H1oxgcUHGOKA G4NeWftIeJrzw38NpfsMdvJ/acx0ybzlY7YpYZdxXBGG+UYJyPY16mc187ftd+Iri3sNI8PQLqEM F1m6mlUhbecKcCM8ZdlOGIyAMqSGJUqAz5gooopkBRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRR QAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAetfCeyeDQ5bqUvtuJTsQuNu1eNwHYk5B/3RXa g5J3Dr71jeD7tbnwvpckYYKIFi+brlPkP4ZU1rjJHI6da8Wq3KbbPUpq0UkLwpAIIPamcDIznuDT 2JZQ205HqabIPlAxg1BYx12kMDxTw529MH60A5wvFOXAJ3EYFAGH4xBbT4yGXYjgkZ5PHH9a48HK 9/Wu18ShLjSpACPkIbJ4xiuMRQxwDj1r6HK5Xo27M+fzONq1+6BemaYUBOe31pWyGAHSgkY6H616 J55FNGHXr096olniYY4xWlkEcZps8SSAcDpUuN9i4ytoyGKUPgH7386mY57YqgY2icZzx0q5DKrq MkBu9EX0YSXVEquOhpScCjtwKYrEtwDgVRBJweM08YxxzTDzxkUYPTIpiFPHck0Bh9KCc8d/QVHj B5PNAyGdGkbOQD9KiNuxAwQat5z/AA5qQpjkY5NTy3K5mjOeBwRx78U82zgA5yfQVcbnnPNAI20u VD52VPs5z1FAtuAX4J9KtnAHH5U1T60cqFzMrra5B3N+lO+zKR8rGrGc57Y9aXGDn9KfKg5mVxAg BzyakChV+UAAdqeRn69aUEEHcOOlOwmxueCRzSEE9TUTEJL8vIqfjbzjFAbGp4S0mTWvEVjZW8Pm vJKCy7ivyjkksOnHevsGCMQxJGpOEAUEjsPpXzx8CdIu38TwawkTmziLwMwUn5inT9V9etfRf1r5 3NqnNUUF0Pocpp8tNzfUUelNI54/KlHJ5ozXlnqiEUqDNBpwOAaAGscDisTxA43Qr14OcVsyHLYr m9Vffdu4GF6Dnr711YON6t+xzYt2p27lVGAwTwO/Fdxp6eXaqN4dcZXHQCuHt4zLMkYDMzHAFd7E FRFSNdqKMADsK9ZnmIev1pc0gIoyDQMU4xSHkYo6YxQKAG9OnSgcGnDjrSH2oADijvzzTTS5FACg jODRmhVx16UHrQAp6UgJGKU5xSKcHnpQAu7nikz1zSHGeDmg80AKTzQD+NJye+KAKADPPNHGOvNL gYpCuTxxQAgGacPvUu3ApcUAIc0lOHBIzzTWHFACAHvS9vejPGAaOcYoAQrXxp+1LDcxfFidrhbh YpLSB4DLOJFZMEExqB+7XcHG05JYM3RgK+zeNtfEf7StxNN8Y9bjmmkkSBLeOJXYkRr5CNtUHoNz McDuxPegTPMKKKKZIUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFAB RRRQAUUUUAFFFFAHvnht4z4f04wb2hW3RVaRNjHCgZI7dPUj0JHNaa4I46+gNU7NJY7C3ilWJXSN VZYRhFIHIUenp7Va3AIMD5h3rw5as9aOxIcjqCFHfvUWdzYKkk05pDgEUwNnpwR07UhjsYZgQfpU exWbOefSpA6nA3EH0phQbvlH40AUtZhB0u6AVSQhOG9uTXBhQGyDXot9CstjKjqzBlxgHFefsgDs Mg4JFe5lMrwlHzPEzVWnF+QwEHrx74pAoBPcfTrTgvU0jgdD1r1jyhCM88/SnAE4HGKQn5flIz9a AxAGeuKYCSxq45Xn1qlMnltggYPQ1eyPU+mKjlVWGG5AqZK5UXYihmUgK5xjvUwXPOetU5U2MCuc UsNydwD8r+tSpW0ZTjfVFzp0HFOU+opNylRsOaQMc+9WZjlAA/rS+WM9c++ajBycf1p+DjgUAOyC pyOB3pZmVUyTyTSAEr6VC43NgngUxJDzjbnn8KaGH4UZPQZxTlAPHOD3pDFbGMCm/hyO1OOOg9Ka c9RQAmQODyKkyCPfHFMxlRgc0AHbQA/pyvSl3DBOBTSSF4pq5xznmgBQgJORSMcLtxxTgdoOTVXU b6OyiWWUOwJ2jb/n2obSV2NJt2R9Gfs9WY/4Rue6S5J3TsjwhjgEAYOOxwa9VbIOMV8neEvjvc+G tI03TbXQLeW2gaRrotcbXnJ+5tIUBMHqWDlhgfLXrXhX426Bqvhe61fWjb6VcQzSxx6eLtZppgkQ kyoIXG75lGcAsAM5IFfL4ynUnUlO2jZ9Rg6kIU4wb1R6uAe9BHOO1efp8YPB5WyL6lEpultGVTLG ShnZhtchyEMYUtJuICgrySQD554m/aOtrbXYI/Duk/btKj3i4kuWMLzHkKYsZ2rwGyyknONq4yea OHqSdkjplXhHVs9p8V+KNG8JabFfeIrz7JaSTCBZPKeTLkMwGEBPRT+Vc54B+K3hvxpJFaWdz9m1 WTzWWxmDB9iuQDuxtLFAHKqTjJ67Sa+NNY17V9b8n+2dVv8AUPJz5X2u4eXZnGdu4nGcDOPQVHou q32iarbalpNzJa31s++KWM8qen0IIyCDwQSDkGu1YFcur1OR4182i0P0KbOGb0Ga5S4cNM2M7c8Z rxv4YfHjULzW5NN8WQ/aBqFwqWctpGq/Z2dgojYEjMYzncSWGDndnj2EZZix71WFoSpN8xOJrRqJ cpc8PYGpqWzkZx368V2lc34ZhJleRVIVeCx/lXR85xmuw5UOH4UEelAHFLQMTv8A0oPA5FLQx9aA GbsnA/OloAHXrSnpQAgz1pNvPtS55FLmgAXpihsDoKXb3FNHTP6UAKTnnpTQoz60uaM4zQAfSm04 nPYUDrQA3OeaUnijFKF/KgBVPGacMfhTcYpGz096AH8EYowQOaYO5BIpcnBzyaAF4OSBTA/Yg4pR +FB460AJ0oPJ5FOPtSdc0ALj071+ePjnRX8O+LdT0qaTTpJbaXDjTpXkgjJAYxqz/N8hOw7skFSC TjNff2uRX8uiajFo88dvqb28i2s0gykcpU7Gbg8BsE8H6GvzkoFIKKKKZIUUUUAFFFFABRRRQAUU UUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFW9Ime31WyniiaaSOdHWNerkM CFHuelVK1PCys3iXStisxF1E2FGeAwJP5CplpF3Kim5JI90jcsisyPG5UEo2MjPY4JH5GpVOUyV4 pzKPvA5OeKTO4cDI6YzXiHqhldnGeDUcmVGQMemKkxgkEYWmtyucE4HHNAFZtytllxUykr0JA96V 8uAW644zSD7pDHoKAGzhijBCQcHmuB1CMQX0ix8KO1egK3PHPtXD68vl6tPuxljuwO1erlUrVHHy PLzSP7tPzKQJ4oYZORnNMDcjORTlz1r3TwxsijbnI45piA+vFOmX5go6etKq8HPGaB9A/Ek96Q89 BjFNIKnvRyCDzzQAp2/xDNVJodr5Vfl/2RVs4znqKRumRik1cadijHM8TELnBq7BcK5CkHP0piwC Rjx8x9KdDD5bljye1Sk0OTTJRjPHSnd+M1b0rTLzVrpYNPgM8zNtADAc/ia228EeIUuHt30yVZ1O NnBz05BHBHIGc9TjrUyr0oPllJJ+o40qkleMW0c0CwByRUZX581ry+HtajXc+k6gq9c/Z3x+ePeq M9tPAEaeGSMMPl3qRu+mauNSEvhdyXCUd0V8DPPfvQDg07BYdCcc8dqvDRtU+xfa/wCzrsWxOPN8 ltvr1xRKcY7sFFvZFEkYz3poO4dxWjYaBquoSqlnp91MzNtBWM4zjOCeg45rTuvBOvWlvbySabdG SbOIUjLOMeoGazliKUXyykr+pSoza5lF2OaAPSl3hWzg16lpXwe1C609J76/SyuWbmBo/MwvY7g3 Xrxiqlj8J9Vu3ud80dssUhjUzqcyY7jH8PvXJ/a2D1/eLT+vn8jo/s/EO3ubnm25y3Sno+GG4EH0 r1T/AIU3fhogNRt2BI8xtpAUd8dcn8hWncfBeBpiYNYkSLYNvmQB23d84I4qHnWCj9v8H/kWssxL +x+R4brU7W9lJKjIjjhS3c+w9a4kkkDJPHAr62tfgz4fLINUkub+MctGzeWrH6rhh+Bpb/4HeCrl J1gsru0MiIqtDdOTEQxJZd5YZYEA7sjAGADknz8RnmGlL3bteh34fLa0I+9a58j0V9faJ8HPB+ma Zd2M1g+oi5dWaa8fMqBeioyBSgznO3BOcEkYA0fBXwy8NeEbmG70yzkk1GJWQXlzIXkwx5wOFU4+ XKqDjI7nPLLOqKT5U2+h0rAT0u0fGFFfZPi34T+GfFGrC/u7OW3u2WQStZkRCdnyfMfjlwxLbu5+ 9uHFZ2kfA/whpt5b3T213feSu3Zdy7o3ffuDsoABOPl2/dIHKk5JqOcUnG7i79hPAzva6Pkeivvr TPDmn6Rg6ZpFrZAbv+Pe2WPG7bu+6B12Jn12r6Cqln4T0LS7yO70/QNMtLlAdk0NnHG65BBwwUEZ BI/GoecWvem/6+RSwN9pHy98FvC883irRNXvxbQ2TvO1ql1kNdtGmGMQwQSjOhySOh25KNt+nUGB g1p6gWjtiGU5PHPassKOua7sDiZYmm5yjbU569JUpcqdzrPD0Ais/NDE+Z27cVqfhVHR0A06ELkD H696vDOa6zNC0D1oJ9qOCKAAgkcGmfU1IvHFDAEc9aAGKODTtvHXmhTxSg8cUAJjA60mKU88mk4O ecUAOGaX/wDXTATzxxTs0AJikI4z3pSffij/AAoATqM0mc9aD+VAODyetACgcc9KU4zUDXlupYNM gKDJG7kVE+o26lA0n3l3DHPFAFz8cUZ5IqkNTtDt2zIxIJ644qo+uWu1yC2FXIHTJ9KAua+4c0ZB PFc+2vIyEpEQT03US65sdTEjbQATnuaAudCMH6UZB69a56PxA21t0O5ieDnAxUTa9chWHloSQSG9 KAujpfr0oxXIz6rdTqh87YV5GzjP1qzpmo3L30YldnViQRn29KBXF+IOj6lrnhmfT9H1mXRZ5XQt eQxs0qKp3EIVdCpJABOTxkY5yPk7xH8EfEGiafrOpTXmnvp2nB3Vx5pknjABDKiI23rg7iApBJO0 bq+ydUYCALzuJzxWMzdq8TH5hUw9bkhsd+HwsasLyPguLRNVl+3+Vpl8/wDZ+ftm23c/ZsZz5nHy Y2t1x0PpWdX6ATwRXVvLb3MUc0EqFJI5FDK6kYIIPBBHaqmg6Lpug6fHZaNZQWdqmDshXGWAA3Me rNhRljknHJrNZ5prDX1G8v1+I+CqK+stU+Bng27ybeG9sM7cfZrknGN2f9YG67hn/cXGPmziav8A s96I2lXP9janqSaltzAbuRGi3ejBUBwemQeM5wcYPZHOMPLe6+Ri8DVR80UV6jafAzxnPqE9vNBY 2sMe7bdS3IMcuDgbQoZ+eo3KOBzg8Vw+r+F9d0eGKXVdIvrSOWIzAzQsuEDhCW/u/MVHOPvL2Zc9 sMTSqO0JJ/M55UpxV5IxqKknglt3CXEUkTlVcK6lSVZQynnsVIIPcEGo63MwooooAKKKKACiiigA ooooAKKKKACiiigAooooAKKKKACiiigAoor0/wCHXwkuPG+gLqlnrNrAgnaCWIwuzREGPr0BOxnb jjhBn5m2ZVq0KMeao7IuFOVR2ieYVLbed9oi+zeZ5+8eX5ed27PGMc5zX1NH8A/CEVpcwtJqsry7 dk73C74cHJ2gIFOeh3BvbB5rsrDwD4UsNZl1S00KyhvZE8vKIQiggA7Y87FJAxlQDyfU58yedUF8 KbOuOAqPdnlFi872dubqNUumjUyqDkK+OQOTxnPerLJg9O/GK9hbw5pZgMYtY1yxbcF5yaij8KaT HcRSi3+ZOSpOQ3HcGvN+vQfQ7vYs8lYKxyPxpjLzyDjvivaW0XThOsy2Vusq8grGB/KnSaXp5idD Y2+1jkgRgZqfr8ew/YvueJrE4RWVHZS20NjPPpU7afeO7ItnP5in5lKEY+vpXtrQxyKqyRoyDBAK ggEdKkIAJO1ST7VH19/yj9j5njB0HUE2g2jsX+6EwxH1x0rjNX8N6zqOp3T2WmXEyxBdwRMsB0GR 1zwfyr6ZSJAx2quW9qkI28kjFb4bNp4eXMopswxGCjXjyt2PlZvCWuRpCZdMuFaYAxJsy7A+ijnj vXQaX8MtdvUhkliEETKzEucMOCQMHnn6V9CkHOetGeCP1rpnxHiJK0YpHLHJaKd22zxYfBq88hnO qwGYAbEMRAPsWzx+ANXk+D0IhiDX+6UhTISCAp4yF9R16164MHPJpu7J5Fcks7xkvt/gjoWV4ZfZ PMx8HNKCOft915hPy5ClV59OCfzq5Y/CfQYFczyXFyZF2sHICr7qAMg++TXoO5QMZpduRlTk1jLN cXJWdRmiwGHi78iOSg+H3hq3acx6bF+8jCElmJXrkjJ4Jz2xU1l4G8OWlq0S6XbOXQK8jruY++T0 z7V1BHBpgyQRWDxmIe8397NlhqK2ivuMG08HeH7a4s7i20yGKaz/ANS6ZBHuefmPPU5q82g6Ub03 Z020+07ShfylyQeufX6/X1rQQHmpGXIHX8qh16stXJ/eylSpx0UV9xjaT4c0rSy39n6fb27M5kJR OQT6Ht06DitjGBg9TR346j3oznAyM/WolOU3eTuylFRVoqyGsgZCrDKnjHrWXc+HNJu4fJurC3ni 8zzcSJnDVq5wcckUpdcZyBRCpKGsXYUoRl8SuY+peF9H1FVF1p8B2DapQbCB6ZXHHtWhb28dvCsM KARpjavUDFTbw33T+NKpPA6U5VZySi22kChGLulqQRxxwR+XFEka5J2ooAyevSnBioz0HqaS4+VG OCe/FY25gfmPWuzA4B4y7crWMcRiVQSSV7m9GcqzZyAcE9qsm0lODtzxnArnEkKdOh71K17P5YQS sVHTnkfSvVjklNL3pNnG8wl0R0a6fLyDgD1JqWPTztG5xk1jprl3sVGC8DG7byfenwa7Ojkuvmrj GOF59eldEcpw8el/mZvG1GbI05FkBZiy+mMc1ItlDg5UnnrmsqDxA+1zNACSflCnHHvU0evRG3Jd Ns2OE9fxrojgcPBWUF+Zm8RUl9o0BZQKSQuR6E09raJ8AxjAqnDqsLRM0rKpUZIBzmpE1S2eJn3l FH94VosPSirKK+4l1ZPqXGjXYFwMA5HtSCNGGCgIznHvUUV5bySKqTKxbgEHrViKSNwTG6sOmVOa 05I9ieZ9x5GOgpjIpILKCfWng+9NLAKWJ4FNpPcDnvErIGSJGxg/Mq/SsSCItIqhS7E4Cjqav65O lxenywMIMbh3NM0y3ae7jVN/B3MynBAppWRD1Z1FjD5FrHHzwOh7e1WQRTQcdBXNarqN7FcvEWWM KcrtOTjtQVsdOSM/0pjSRqcFwD9elcXLe3E0ZWWUsp9arBm2sQ5BPBGetFhXO6FxCMZlQAnAJYcn 0FUbnXLVJTGjbsD738NcpF5jOqhSR2FOcEcMjZHUelMVzp2121UHaGZuMADrVe419Qo8mP5jyd2f yrAEe77gJI5JHarn9k3pkCmE9MjJFAXZbXxBOQMxqOCCfftimSa9NtRVQZAwzHqTTW0a5IAZOq5B HIz6Gnf8I/cny/3iAH72f4f8aA1If7YvS5YycYxgDA+tN/te+VVXzc474BNXx4dKxZ8/Mh6gLxTT 4flZVAlAPfI6CgNSsNZvGGPMPHUgDmozqN0ZJGaXO/Hynt9PSr6+H3XkTKQOwHNPXQC87s0myMH5 ccnFAamSdQu4iFWdyvvz/OoZbmSYuZJGLE7s5xzXRtoNqy4LyZBzkEc0sWiWu3ZKCwBzkcZoHZnM AszZYlj1ye9NOQxA612KaXaxtlYgVxjDc1NHawRpEiRrtT7uecUXCxxDROwyAxB4U44JqSO2mZwg hdmxkYGeK7vaCoyBgdOKYFVSWVQGPUgdaVwscfHp96di/Zn56Ejj86mGi3bIS6hR7Nmus460o5oC xyK6Le9QEz0wWxmpoNDupG/ehY1GeS2f5V1JGccUZI7UBYwbfQEI/fSMOOikdau2OlRWkqyo7s4B HPFaQx1phPzcdKB2MvVuZkwx3Y+76VR2DsamvGLXUhPPOBgdqhzjvXxWMmqlecvM9yjFxppCBD60 3aVPWpSeCQKYSGGcnpXNY1uBGOeKFYNnOc03kjkilBx1FAxzcjoaYB82SacWJ4INC4zk/rQIz9W0 TSta8n+19Msr/wAnPl/ardJdmcZxuBxnAzj0FcdefB3wPdTwSf2KIjFtDJFcSosihNgDAN9GJGGL DJJy2fQM4JHANKCCM45rWFepT0hJr0ZMqcZayVz5k8bfAbVrTUXbwgTf6f5QcJczIkyuCoKZwqnO SwPHCsDyF3ZHiL4G+LNH0+O4t47fVZB5rTR2T58tFClSN+1nZsv8qqfujqWwPrBck96kBJ9K76eb 4iKSdnb8TmlgqbufCGu+F9d0DedZ0i+so1lMPmywsI2fnhXxtboSME5AyOKxq++9W0vT9Xt1t9Vs LS+hV94iuYVlVWwRuAYEZwTz71xfif4SeF9a062srext9LjS6NzLNZQIs0gIk+QOQcLucHGCAFCg AYx30c6i9KkbehzTwDXwM+OKK+hfE/7PUcOhrL4c1Se41SGLMkNyqhLl+OEIx5f8WAxbqASOWrgP Ffwc8W+HbeCYWqaqkrFCNMEkzRnGRuXYDg88gEcc4yM+hSx+Hq/DL9DmnhqkN0ec0Vrf8I3rm++T +xdT32CCS7X7LJm3UqWDScfINoJyccAmsmutST2Zi01uFFFFMQUUUUAFFFFABRRRQAUUUUAFfSnw FluNG8BRywyLIt5cS3BjZfunIjxnPP8Aq89utfNde+/A62lg8FvJKu1J7t5YzuHzLtVM+3KsOfSu DMUpUbPudeD/AIh7hp+tpcOkc4WIkHLE4Ga1IpoJW/dTI5/2WBrg1IKYGC3rmrljeS2jmRAue4I6 ivnJ4ZPWJ6ykdtuBwKULkYJNYttrcTR7pgqHPQNnitO2uorkyCFw2w4JrllCUd0VfsTjuO/rSNjH HWlycZ71C7lz8n54qGNIlVhuwaGwexqNExzmnqeucGgBqMcY54pS/ODnjtSlRnIyKY+M4/WkMcjD B7UgOD1pFHzUoHX1FAAzEscdPag46d6F6+/rQ46YoAUxg/WnooHcfnUGCepNSIuD700DHnr0JpmP myKkwPxpNoJosK43GORzS5x9M96ADk/ypHG33z6UAGMnJ4+lMDgt8wxUnJPsaTygepNAAWGcAZFQ uABtAzmpzxjAOPT1pkg+fjpSY0xkYwDninkfKM8UirgckZp56YJ60IBn3hgk4qjPYZYshJz2q/gg 5zkVIOe9dGHxNTDtum7XMqtKFRWkjFa2kjAOwnjPSmhSSflxj2rbbnjt0qNoUIICDJ9BivXo500r VY/ccU8AnrBmKSS3fA70iD5iSeCK1vsyAquOlQy2QOfm57Zrrp5xQl8V0YywNRbalANjGDzSnIx6 evWrZsOm0/WonidM/I3B6iuyljqFX4ZGE8PUhuiF+QMn8aaPl/iOBUj8jcFJIpgBA+aulNPYys0O VsDapwcZp1reywTZRnX1wcVAzkHp0NSdVzt980xGpBrNxFHtG0rnPTmlu9anntxGVWPP3mX/ADxW UvzD0NNMgyVxyO5oHcmVlA7n6VpeHhM14zxAeUo2tlscH0/KsjcMjb96uj8KwlY5ZWbIJ2hf60Aj dXGOlZt9pMV1cmYsylsBgP51p4/Ck7UijIj0G3UkySSP6dBirI0mzGMRYIxg5q+eQaaCM4yM0XCx D9lg3l/LXeRjOOtTLGgIZY1DDvjn86Cy5AYgE9BSmRNm4Ou0d88VPMu47MSOJFBCooDdQBjNKRzU QuoSThxjOKhuL+GJ8bi3OCR0FYyxVGKu5L7y1Sm3ZIuHIH8qOcVSGpwnjDYxnNL9viAJOfwNT9do fzor2FTsXOvAoyO9URqMLA/eH1qFdTBGTHznse1RLMcNH7ZSw1V9DVB4pP4j6VljUyT9zK5555xS SahJvPlgBfRqzea4ZK9/wKWEq9jWwB0ph4GTwPWsV72diMPj0xUMtzNKu2R8r6Vzzzqkk+WLbNI4 Gb3Zvq67sBgfxprzwqM71/OsAySA53EZGKaFJPJrnlnb+zA0WAXVm7NexoikNkk9Pb1pJL2BR9/d 7LzWIyjIz0qItgjbzisXnVbWyRawMO5unUIQ+0Gj+0YlLYDE9vesYjcAe9Kozj8ql5xiHtYf1Kmb A1JAM7HJqMamMEmMjnjntWYxOCBSN06ms3muJ/m/ApYSl2NM6mdhxHg9BzxVQXs6Bvm3Z7ntVbJI 68jmg5I61jPH4ibTc3oaRw9OPQVmJG49TQD9c0i4yckUrcZINcnmbC8k9vejjHvSZ470HPbFAhQQ D8350bgeO9NK4PPNLtH96gYg69Dn60o57UvU9iKUkrnpQIYQScnmnLwOcfSjeSvA5pu7BOQPwpDH Bs9KN/ODxTGYg9TSHLY6YouFicHsBRjrmo0bnBpxIPQ8U7isHBxj8qQZB55pycGhs+4oAjjiSMzG NFjMz+ZJtGN7bQu5vU7VUZPZQO1cbq3wz8Gat5X2jw7YoIs7fsqm2znHXyyu7p3zjnHU12bkEdf0 poBxVRqTg7wbXoJwjJWkjxHVvgFpZ8OyWukXzrqwneZLu6BYNHhtkJVSAo+5l9pOQSBghRx+tfAT Xor/AE6LSLi0ngmgU3M00u1beYIN46bmRmztIXPOGAxuP08Vx160AqpG7AJ6ZPWu2nmmJh9q/qYS wlKXQ+MfE/ww8V+G9PvdQ1PTkGnWrBXuo7iNlILhFYLu3YJI6qDzyBXFV936+NH1GzudJ1lIprS4 jxLC4OGHUcjoRgEEcggEc18O61JZS6zfyaTDJBpz3EjW0UhyyRFjsU8nkLgdT9TXvZdjJ4lNVFqv uPOxWHjSacXoylRRRXpHIFFFFABRRRQAVf0rWNR0h5W0y9uLUyqVfynKhhgjkeo3HB6g8jBqhRSa TVmNNrVHrnhf4tpp+n6daavbXd48cbLcXYdd5OW24U/e+XYCSwOc9e/qXhfxHaeJ9IivrEkdEmTB /dybQWTJAzjcORwa+Ua0ND1e80TUob3T5njljYEgMyrIoIOxsEEqcDIrhrYGEk3DRnVSxcotKWqP rSRiDztI9hTvtEkeDGzIc54OK8L0r4x6jDCU1XTre9cKoWSJzCxI6luGBJ46AAc/h6X4Z8aaN4kN tb2MztqDwiWW3EMjCE4G4F9oXAJxngE49RXm1cLUpq8lod0K9OeiZ3Vtrd1EWWXMyk92wRWvYavb vETO/luOcEcEVykYwRuyKkDdQRzXFKhCRvzNHcreWzrGVlQlx8ozyfwqYMpGR264rz0koxK8N2I7 VZgupYUUJK6gD7oYisXhezHzHck8cUxjn6Vz1v4hZVAmg3+6nFaEesWsqjc4jJ4w1YSozj0LUkaI HBPekYkEEHrUcU0T7NkgO8ZUZ61MeTg96ysMUZ5IHemrlufTmlUleKUEZ4FACY4wMU8DH+NJt9Aa cuDxTENYn/8AXSL973qQrx8w/GmlQM4oC484Iz3ph+b6YpSTjNNBye+KGJIATzntQDkelO4IAPWk xwM0DEycdPypDyMkYpRkimeZ82D9KQxwAxnt2oY545pSMqen0pmcL2oAMkHbTw21sYpn3qCpHfpQ BICfcUMcjjrTVzxmnck0xCKcj09aTPPI/GkAIc579jThgdeKBgSewpA3HSg5AyWoAGMnikAxucdS aXykIyUBJ9qdj6/WlHTPerjOUfhdiWk90VntI2YllBNCWsakjJIbj1qw47jpQpK9RxWscVWirKTs Q6MHq0VTZxrwCarpp2efMOfpV5s5J7U8dMDgCtY5jiVtMl4Wk/slBtPJl3CQEY78Vp6bNLaW5iUo cnOQKjPXmnDA6Vcs0xMo8rkSsJSTvYutqUpwAqZx1xUKXswyGcn39KqkbWGPypzLk+lYyxleWrmz RUKa2RMLmYE/vW9OtMZ3fhnJ96bzR071k6s5fFJ/eUoRWyD7pzzTgwAzTVOeo4pSoz0yKzKEBYA9 MUhUZ6ZpT8o65HSkB470DFwQowAaawwRzS5J7mkHPrSAQ5HTNCkA9qU8/Wl2gn096AGqTu9qeTng UuBjigkYJxTEMHDcZpcDORSHHXP6UHgcHFIY4AAZOMe9IR3BxTCrEfMaNoYYBOaAsDHdxngUgXBx jNPRNvalB9hRYLjdrds0qgjk8596cc/Sk3e2RQA5eetIxIyMUopp68UxCde1NxxS7+gpeCOtIY0A d85pwXj1pGXHU5pwPoenrQAuOO2KTnHpilyDx6UZwRimICeeaYxyemPen9DzyKbxkfzpDQgYg04n J71HLPBE22SVEc9AWAJqvNqVrGfmmXGQOOc+9Uot7IVy5tHfIpCv1rOuNbt43AX5xjqpzVT+30Ln 92WTHQcGrVGb2QuZG0qknvinOD0Ga5ubxDKSPLhVUA5y2T7YqhLq15LHtM7Lg5+X5T+Yq1hpvcHN HXsyrwxAbGeT2qGa/toVHmTpzz1yf0rkXu57lj58jOT1zVZsY4yV9K0jhO7FznaNrNjHHG/nEhgT gDJHsfSoTr9q5AAb5v0rjwm4rtIz9KeWI4GPritPq0CeZnQJr371/Nj+QZwU5zTJfEUmf3EaquOj jkH86wzkj+76Uip3zxVKhBO9g5mal1q95OS0cnkr6LWf50ryO7SuSRglmzmmFm6EgCuZ8SeM9G8O Tm31O6dbgxecsKRMzOMkDBA25JUjkj8K2hSu7QRMpKKvJmxqtrHqGm3VlOzLFcxPC5XhgGBBxnvz XyvrumT6Nq1zYXSOksLYw+3dggFSdpYAkEHAJx617jqnxQ0NtEvriykuHljlNvGihEkYlWKyqGz8 mV67SQSNy8gHwKaWSeaSaeR5JZGLu7klmYnJJJ6mvWwEJw5ubRHnYycJW5dxlFFFekcQUUUUAFFF FABRRRQAUUUUAFFFFAHVQ+P/ABNEJgdVnkMiRIC5zs8srtK9skLhs535JbJOa7yx+M0b326+0tob LaF2QkSyZ+YltxKjH3Rtx3J3cbT4zRXPLC0pK3KbRr1I7M+iPD3xS0DVLaIajL/Zl48nl+VLudRz wfMC4A56nGOe3J75HimMixujNE2yQKclTgHB9Dgg/Qj1r45q/omsX+h3wvNKuXtrgKV3KAQQeoIO QR06jqAe1ctTLovWDsbwxrWkkfXQi9Caa4GMHj6GvAdF+L2u2c8f9px2+oW6rtZSoicnLHIZRgHk D7pGFHAJJPTeG/jBa3TtD4gtxZA7ds0Cl0Hy/NuH3hlgcYB4YA9Nx5J4KtHW1zpjiqcup6qGAcFX bcOhz0rTXWL8wn96M9d2wZrh9I8b+G7+2aeLVrWELI0e25kWFjg/eAYg4IwQffnBBA6Cw1Cy1K3a bTrq3uow2wvBIHAbGcEg9eR+dcs6LXxxN1NPZnQW/iGZfluIg7ZHzDjjvWpaa1Z3E5iUurdiw4Nc lwFycE+1RltrjbjPT6Vzyw8JbaFqTPQIrqFgxEi8HBycYqTIY8civPmVzj5yfpV+DU7uJFWOYlVX bhuaylhX9ljUjsg2T16UpGa5mPXZgiL5Skj7z56/QVdt9eiaP96jI46+n4Vk6E10K5kbGSRg4NGB xz1qpbajbXJOxxvHUEVbA6c4rJprRjHAgHijt60xhj160ob0xSCwufSoJVw+RU+Dnim4DBhg0nqN OwxH3Z5NPUZGCRTFTax4B9alGAcmhAwCnHcmlKEdCKQnngHNAbvTFqNbOMY7UKc8nrS/UigHnA6U DFzjrSYx9aXAxzTWAPQUCD72AaTPOOaUrz7etJjHOM0hjicjHvSpwOOtN3AjOPwpRk4ApiAkEZ60 w5z1wPenYAoIJxnpSGABNO7HNJ0zxRxjmmICAeKcBxwAaaMHvS5yPSgBpGTljinqRg0mCPekPJ9D QAp60hGc0IRj3oY45FAAMZPNO9hnNRkgkYGOeacMg4JoAceaTvQeenakGcenHrQAHhuhxTW5Pyml YHHBpNoJFIaFAye2Kf0GOKapHSkYEjqKYhQwHWkZhgEimkkrgimAnOKVx2Jhjt0NIWGQBSAFl68U AAk47e9ADiMj2qNlKHK1KAMYY1HJLGke4soTGc57U7XEmCsD1z9KUD5s5wKz31WyjkKmcZwDkAkf pSNrNsgzu3KByFHP61SpzfQG0aRJPUfpS9unArBfxJGFJ+zuOeMnqP6VHJ4jLY8iEdOQx6VfsJ9h cyOiA5pvOfWucm1+4LReWgjCHL8g7/b2qtca1eSscMIwDkbf881Sw02LnR1m0Hmo1liaRo0kXcDg jPOa4ue7ubgDzp3cbs4PSqsjtvDZOR371awndhzncXd/b2bKtxIFLA4GM1T/ALctGcAFgD69q5Au WGcH60zJJAxzWiwsbasOdnVr4itd7Dy5to6MAOfwqNvERLsFgAU8D5uR9a5xB8ue3vSnruIPPTBq lh6a6C5marazeqCofI9SOah/tq73q4lK4GMdj9RWdPNHEqvM6xqWVAWOASSAB9SSAPUmpHQN0zj6 Vp7OK6E3Y953mwWOWHc0hUhsvXOeJfGGi+G4ZTe3SvcIyr9lgZWmJIyMrkYGOcnA/EgHnNR+LGhR apZ29sZbmzk/192EZRD6fKRlvfHQdMniuiFCpJXjEzlVhF2bPRhIN3BoLckLwPavDNd+LOoxeIrl 9DNvLpKr5cUdxCRvPGZDghsk5xyBjGRmjxJ8Xb+7tbNNAiOnS4LXLOFlO7JAVcjBXbgkkA5OOgy2 ywVV203/AK1Mni6aue4SsEOOal3Axgn+VfN83xP8TS3lpcG6iXyIxG0axDZNyCWcepwBkYxztxk5 x9f8W6xr1s1tqN0HtDcNcrCEGEYluAxy2AGIAJOBj0FaLL6jerRDxsLaI+l77VtP0/cL+/tbbG3P nSqn3t23qe+1seu0+lcvB8SvDl3q0Gn290dsqljdSqIoYyAThi5BB49McivnGiuiOXRS1Zi8bK+i PZj8ZIo7iSNtI3xruCyxXJIcgHaQGRTgnHXBAOcZ4qax+NFnsf7Xo9xEwZNoimEgK5+YnIXBA5A5 yeMjrXidFbfUaPYy+tVe56vF8ZL99eWa4sYk0ltqtAh3SoBnLK3AJJOcEYwoHHLGlqfxe1m7sbi2 gs7S283zEEil96Iwwu0gjDjk7uhOOBjnzWirWEop35SfrFS1rmwfFHiA9dc1U/8Ab3J/jWXPLJPN JNPI8ksjF3d2JZmJySSepNR0VuopbIycm9wooopiCiiigAooooAKKKKACiiigAooooAKKKKACiii gAooooAKKKKACrWn6headM02n3dxaSsuwvBI0bFcg4yD0yB+VVaKGr7hexs2fijXrJES11jUI40j MSILhiqqV24AJwMDpjpwRggV33hP4rSWmlLaa1E11eIypFcs5CshOCZSAWyo5yFYt3GeT5RRWNSh TqK0kawrTg7pn1BceOvDUAuRJrVo32baHCEvnd02bQd/vtzjvitPw5rNn4h0qK/0yXzIZOCp4aNh 1Vh2I/wIyCDXyZU8V3cQ209vFcTJbz7fNiVyFk2nK7h0ODyM9K45ZdG2j1OhY2V9UfYGGBHHtkUm 45IIPNfNtr8TPFEIKy3/ANpQyCTbKgGCJBJjcuGwcFducbWIAHGOktvjPfxwyrPpcMzmcvGxl27Y i+dhAXkhcqG47Eg4OeaWAqrbU3ji6b30PbhuVgckY7jtVqO6uIw/lSspb/a/WvLPBnxUsdUtJYvE Hk6fdwxvK0oOIZFBGAoJLb+fujOcEjrgd5o+s6bqkEU1hqFvcrIpZBG4JwApOR1BG9cgjI3DPWua pQlB2mjeFWM1eLOqttcnEb+eFZz90gcfjVlNetiR5iSK3faMgVzbPjBBP480hLDJPOB2FcroQfQ1 Umd1b3UE7lYpVdhycHPFT9Dz0rgoZJI8PGzK3qpwcVoW+r3KYWR9/OeTyKxlhmvhY+budW+Q2cUH GM54rDh16NgoniZT3dTn8cVY/tmzVv8AW/8AjprCVKaexaaZpgngH9aa3Xnj6U2KZJlDo2VI4NOX kkd+1ZMYozz296EBzim87iBmlLEUAPK475oK7Tx0pIz8pxzTiex6UxCNjimgjuDTsEZxS49elAEY P4mpUXbgU1cZ6U5iKEDBgCfQ0Yxx1qPPc0hyDxRcLEpwegoK+9IvYnNIDkkBs47UABz/APXoHNMe WNFYs6jb156U17qFVDF12H+LdxTswJc46mlPvWbLrVkkiL5u4N/EoyBVS414K+LaPeo7txmrjSm9 kK6NvGD2NBPBHJrm73X2d0+zqygHLZxz7VG2uXEjEqAig5CjnNWsPNhzI6fjv1z1pflJA3DP1ri5 9RvJ3IlkO3OQAMYqE3U+1Asrrs5AB5qlhX1Yuc7gOBkbgT9elMe8tlJV5kG3rzXEwzvFIHiYh2yD 3P40jOQrZbrVrC92LnO0/tC0JVfOXLD5f/11nXmu29tMqIBMuMsVPQ1zMjhO4YmoJkLjIOD7VSw0 b6hzM6FfEpMjvJCAgHAU8/iahfxFO77Y41Vc59T9K5sx44JO41ajHyg9/WtPYQ7Bdmu2uXjzF1ZU XoE25H+NTSa7cpgiKPGOc5yTWG0gDfKDmlmuliQPM6IpZUyzADLEAD6kkAe5FP2MH0FzM0316/VT nZgn05FQR63eKjqrFi3Ric7aqy5ZByD9KrbTuLZo9lDsF2W5r65lwHlYLxlQxxRJdSlFXfI2BjGe 1Urm7t7S3ee+niggTG6SVwijJwMk8dSKx9Z8aeHtHuUg1C/SGYqWAWN5BgMynlQRkMrAjqCK1jTc tIomUkt2dGh3HI49aSQkfxA/jXEyfE3wqigrqLOSyghLeToSBnlRwM5PfA4yeKwrn4yaWk8AtdMv ZYWb980jLGyDjlQC249eCV6DnnjaOGqy2izN16a3keplTtyT/WnKNuD+NfP2rfFvxDeBksltLCPz NyNHHvcLzhSXyD1HIUcjt0rHu/iJ4rurZ4JdZmVGxkxIkTcHPDKoI6djW8cvqvdpGLxkFsfTLPuP IIqO5njt4pJZ5EiiRS7u5wFA5JJ7CvmmX4g+J5LeCEarMgiga3LLjc4J+8x6l8AAN1GPUsTn614r 1zW0KanqdxNEVCtECEjYA5GUXCk57kZ4HoKtZdO+rRLxsbaI+ppZ44IJJZ3SKKNSzu5wqgDJJJ6A Vyt34+8PxaMNWjnmnsvPNtviiYHzBGX24bB5AAz0yR0GSPnc6zqjPdO2pXpe7UJcMZ2zMoGAH5+Y YOOe1UK0hly+0zOWNf2Ue+J8XdAkhuikN7HKkLPEsyALKw6JlS2CfUjArOv/AIwWMcFpJZ6bNPNJ GWnjebyxC2cbQdp3dM5wOCO+QPFKK3WBoroZPF1D1e9+Md5Jbv8AYtNgglDIEWVjKCvz7ySCvP8A q8DH97J6Vlf8Lb8R/Y/J2WHmeXs8/wApt+cY3Y3bc9+mPbHFee0VosLRX2SHiKj6mlea9rF7bvb3 mq6hcQPjdHLcu6tg5GQTjqAazaKK3SS2Mm29wooopiCiiigAooooAKKKKACiiigAooooAKKKKACi iigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKnh upojDtfckMnmpHIA6BuMna2VOdq5yOQADUFFAHa6X8S/EllNaBrxJLKFkzbJbwxq0a4+QEJ8owMc dK6Hwz8XryKeRfEiefbFBta2hAk3gKOcsBg4Zj7txgYA8porCWGpSXwmsa9SPU+j7P4peFZY90t/ Lbnj5ZLdyTlQT90EcElfqpxkYJ7OGeORWaORXUFl3KQwypII+oIIPoQa+Pau2OqahYY+w311bY3Y 8mZkxu27uh77Vz67R6CuSeXRfwM6YY1/aR9ccyd8fhTQNpBrwbTvi9rFnp9tbSWdpcPChQyyM5aT CAIW55O4Esf4s4G3rXoOgfE/w/qFrbNfXKWF7MxV7dw7Kh3YGZNoXBGDk4Azz0riqYSrDVq51QxF Oelzvreee3mWWGRl7EZ6/WrUer3VuxKuHyc4bkD6VjWepQXmn2V1HJGIrsfuf3itvI3ZUFSVYjY4 O0n7rehqzvOR/e7HFcjhF7o3Uuxrp4iuNnzIjP69Ksp4iQw5eEl842r0x9a50jA3cD8KQn5cg1m6 FN9CuZnW2+vWnO8OnT+HNWf7XsWJ2zZwueVI/D61xkbAgA04nacdQf0qfq0A52dGfEeWIFqSoOAd /wD9aoJPEM+5dsSAd1OeaxdxIPByPSmuSeM4xVqhBdBXZsHxBcZJKxrj+HbkU3/hIbjzclFKf3cY zWVGF28g49x1p+A2R3o9jDsHMy6uuXZX5mQj2GDTH1m6kLMWAJG0YHT6VV8tQfmGKqW89rcvL9kn imEchik8pw2xx1U46EccVSpR7C5jROo3joU+0S4PX5qha6uNpHmPtxtxmqt7e2WlwrNqF5b2kTNs D3EqxqTycZJHOAfyqpqOvaVppl+3alaRGKSOKRWlGUZ/uBh1GRk89gT0BNWqfZCcl1ZfLMMkH3OK ehO3knBOawLvxj4es5IFn1azBnKmNlfcjBmZQdwyMZRgTnC45xkVQj+I/hSdiqaugIVn+eGRBgAk 8lRzgcDqTgDJIFaKjN7Rf3E+0jtc61VKn5SCKa8hXp1PHWvIdc+MsewpoemOWKjEt42ApzyNik5G O+4cnpxzkxfF/VE1iad7OKXTnxttHf5osLg7ZAo6tycg+gx1rdYKs1exk8VSTtc91wdgORn3p5Jy AoGB0r5m174ha/rUFtHNcJbfZ5nmR7UGN9xyB8wOcBWZRjGQecnmsTUde1bU7OO01HUbu6t45DKq zSl8MQBnJ56Dj0ycdTnaOXTe7MpY2K2R9ZE7+DyfaqDaxp0U9hDLe2ytfKWtSzjEw+UfK3Qk71wM 5OeM818ny3VxLbw28s8rwQbvKjZyVj3HJ2joMnrioatZb3l+BDx3aJ9Zw67ps+oPZwXkUl1HcfZW jj+YrJsZ9px/sq3PTKkdQRWBrnxH8P6Zd29vJc/aopv+Xi0eOZI+cHcA24Y69Oe2SCK+a6KuOXQT 1ehLxsmtEe/618XNBskZdNin1OXaCpVTFHnPILMNwIHPCkdPfGH4g+MgzGPDunHoC8l9+OQERv8A dOd3qMd68coraOBox6XM5Yuo+p6LJ8XfELyRsINNTacsFifDjBGDl+nIPGDkDtkHC1Dx54lvUeNt VuIYTK0ypA2wqSSdoYfNtG4gAkgAD0FcvRWscPSjtFGTrTe7Ow0n4jeJtNMS/b/tcMef3d0ok3Zz 1b755P8Ae7AdOKj8QePdY1w6W9ytnFNpzLJFNFD87SAD5yWJ6lckDCk9uABydFP2FPm5uXUPazta 5qjxFrK3M88Wq3sMszFpDDM0YYlmbopAxudjjplj61Tv7+81GYTahd3F1KF2h55C7AdcZJ6cn86r UVailqkQ5N7sKKKKoQUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFA BRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAF FFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFAD4ZZIJo5oJHjljYOjoSGVgcggjoa6BfGviFdbk1f +0WOoSReQZGjQgR5B2hSu1RkZ4A5z6mucoqZQjLdDUmtmelH4x+ICMGy0n/v1J/8XV2z+Mt2hcXm j28qlV2iKYxkHHzEkhsgnkDjA4yeteUUVi8JRf2TVYioup6l/wALk1MLd7dMsgzsDbksxEa55D8/ OcYGRt55x2qbT/jTfqJBqekWtx08v7PK0O3rnOd+e3p369vJ6KX1Sj/KP6zV7nosfxb19dFa0YxG +Odt8FUMPmUj5MbTwHXp/Ep4KndX/wCFq+I/td7cBrUNcoqKvlsVgwD8yAtjJLZJbdnA7ACuCoqv q1L+VE+3qdzqZ/H3iaW/e7GrXEUjrGCiN+7yu3kIcqCSoJwADlh0JFQv438TPYR2h1u9EUbbgyyb ZCeesg+Yjk8EkdPQVzlFX7KC+yifaT7nRv428SSQ38M2rXEsV8rLOkuHUhgQQoIOwfMfu47egrDs 7u4sblLiynlt7hM7ZYnKMuRg4I5HBIqCiqUIrZCcm92T3l1cXty9xezy3Fw+N0srl2bAwMk8ngAV HNLJPNJNPI8ksjF3dySzMTkkk9TTKKdiQooopgFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFAB RRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFF FFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUU UAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQ AUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFAB RRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFF FFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUU UAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQ AUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFAB RRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFF FFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUU UAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQ AUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFAH/9kKZW5kc3RyZWFtCmVuZG9iagoxMTUK MApvYmoKNjAzOTMKZW5kb2JqCjExNgowCm9iago2MjQwNwplbmRvYmoKMTE3CjAKb2JqCjw8Ci9T dWJ0eXBlCi9JbWFnZQovV2lkdGgKNjYyCi9IZWlnaHQKNzgyCi9Db2xvclNwYWNlCi9EZXZpY2VH cmF5Ci9CaXRzUGVyQ29tcG9uZW50CjgKL0xlbmd0aAoxMjEKMApSCi9GaWx0ZXIKL0ZsYXRlRGVj b2RlCj4+CnN0cmVhbQp4nO3dD2ycd33H8YM0KW2TxqKuD7KlekrXjN6MLqtcU9Ix/8hGqzSwJ9my uAlqkynyrtLISjikWDxCjy1QmPBU0DZhrRK6bmSzJzHdrklbddntiB4RwkZ1BWM1wihRtoVT1Lku WktJVen2nJ2GUtIm5ftzPs/3688Lkb+OnXyfd+/P8+f35HJERERERERERERERERERERERERERERE RPQmli37FT5i2Vv9JlnhXF/PhZ90d74J+lxfsaenu2dtELzJHyr29a3p6Sk0Gpvnf9b5pre384e7 5z/Dmt7e3vXrnevt7l6z5rVf7Hygc52P6elOf6W7z83/rKdnze0p1zH/cd0rL/xtet0dd6wPVqaf oKcn/UsGr31QqTT/o75C5w90rVm7du2arvSrrgmCG3PXpp+8e82Fz9H56r2ub03nR4VCb/qVCoUg 6HzMa//czt+8O0cZUpiY2OncwEA8NhaXg6A3393Z9lE01NfX5/ZVtgQLH1Yq9c9/P1iuVsOwXO58 SBQl7XZ7bOx4s90sler1nS79Pdcb9JRnZipRND0dOXdH7x2dfKKolMuF1RG3pVwuH0/chg0b9qa/ 60YrQeerzSf25S+PuL0HDmzpdLeyJ3Dlctj55ZHKlnD+B6Wdbme0s/OjeKzVqs//yLkgSP8bWvgM C6kWArct5dasjONyLrcy/Td1frleL5UWvs55e9P/ZtyOdrua/o12utrhifRft2tX+s2KVStQG4M6 irsnqu12s1KptBeMppsqGB0dbc+eTjdhfbadJMmRI61Wq/ObZ8+2L2g2p6eT9i9qnk6/SVNtdn4y Pf/pol3Obe18vvOOLXyhk5GLOr/d+dnoaJJU0g9Jf1yvzLTbtU7PtTTY9PeG07/DwqdO/4oz7Uol SSK3J5nt/FI9ikY7Ok1Op3+i82+o79lTS/9eSdKenj50qPNR3/teZfSrX61UmgtfPv26o6NR9NV6 +iemk6h24V+TftMYH280qmNdXUGwZXAwQG+bJWv9X1Yff0NZzzzz2o9mT8+2PXj+yJGL/OrJk5f4 Y8eOzX93+vQbf+OX/lI/Ov+hl2X6rT+2899d6/e3lE89+/XBMAwXpnQtn96vpDTK71/+Bl06Xnrp 1Rf++9mXO4+e+fSlZ/ry4+DB4eFhF6A3mHnLlr/j3oNzcz9DF5BxR4+mr16m5+Za1Wr1Lz75u8E1 6O1m2lVXd235/rlz59BbXYmfvdxq/kezOTr68MN3373j0KFqeFe+89YdvRmt6foaekur9MLJk/8z /4MvfOHzIyMj2+ZnuaK7UABvThuWM0qhqe9851vfardL+fwDDzg3ODg/1muvu+468JbVLERvVDM6 b9ubzel2e3j4ePupYhB8onh+xnwAfbtY5eL4t68fbDxeKrVa1e3bG407c7lVK7hL/rINojefVf95 KtX5wXON1BfvDHp6PrF/cPAP0BtchRi77ZaCc8/95Ny5c1/8xP5mtVo9Pj5ere7a3hn96tXojZ9V g030Nls6Xpn74dSPOz94bqrx+dzq9X+6/yv770IHkEmH0JtqSXnxx+d/cObMmRMn/n1u7uWXS6XN m8Nw44UNUrgBWENWsEqkV85/P/eDRx/O5/NhLvz04cMfz+WW+vuifAu6WWjeT3/y0853rdbc2amp qdKN119//eDg3Uv3VBBWmTFz6f8rlccfr1a/Nuh67+q+K7cEX3qOo7cCXdzJHz5b/cre++//p8Zz 7dbGdeuerA4HwZteEGAMq8y2M2fmv3vp1DP/evhht7NcLt9//3333bf+PehwFlUVPHW6TGmXP/jB dPuFZvObIyPj4793cz6/ebPVs5CPo6dNl+ulhe9ONptTzz775Kc/3WrN7HXzp9C9p69vHTokr1il akl9PJ+P45GJb35z/CMf+Qi6Jl94coZ2J06c/8FUo3Hgs3+ODsoPvrA0Y27uxRdftJElqzTk1Vde ebEfXZQHIV9YWmMgS1ZpThXdlAcxeojk2zC6KbkYPUPy7QC6KbmLrbJCqlVDdFRSRfQIybtqGKCz EtqMHiF5V9kUoLMSYpXmzFb0r87FvejmVPYE6KqkeD24PXvcO9BZCQ2evfS/knTRX+VR9AjJt6bT fjIw3+3Y01R/CnAJPULyrpVHVyUVo0dI/rFKypzWyktv94yL0TMk31glZU/LoaMS4150e5z6Fa9Z pT3zt2pVbRI9QvJuq3snOisZrjNkz7T6KvlQaU99q7sK3ZUMj+3YU3eskrKmrv7dDt+C26O/Su5F tydxbhk6KyE+WJqTuD7tVXJFF3Mi/VeTnbj0v5J0uadX+7noOfQIybt71F8hwbV+7dm1sFq6YqzS nofcBnRWUny3Y05d/WMlq7Sn7tagq5LifRzNqaivshs9QvJOf5VcpcCeWoCuSopV2lO7Bl2VFPcM 2VNDRyXGKu2ZQkclFnJVVXs2oquS4mOlQeqr5BUSBj2ArkoqRk+Q/HPoqqR4Pbg9dfVnsrFKe/Qf B+e7HXv0VzmAHiF5N6m+Su6vtGef+teVvDeZPfvcTeiqpPjC0pyKuwVdlRh6huTb5FaHjkoMPUPy LdFfJZ/B7Ym0X01W4M1F7amtQmclNIyeIPmn/rTfA+gJkn8T6KqkWKVB6qvk+ZUGqa+Sx3bsSSLt 73ZyY+gZkm+J60FXJcUqzUnUnzPEZ3B7Ev0rBbJKc5Jt6qvkEUdzEnctuiopVmlOov0weC63ET1D 8o5VUvY00VHJoUdI3iXopuTQIyTvHuxDRyXF+ziakzhWSVnTdAV0VVJl9AzJuxAdlRjvLmpPGR2V GHqC5F8dHZUUD+0YVA/QWQmxSntmowCdldA69AjJu9my+vMr+R7cnFn973a4v9KeQXRUYqzSnn50 VGKT6BGSdwE6Kimu1m9PEqCrEirwodKeqFf7CtQT6BGSd/qrLDTQMyTfRtVXyYM79tRcgK5Kistf mVNXf35l4Sh6huRdRfsRR+5EN+iI9ir5stKgI2vRWUk10CMk35pOfZU8Z8icpv71K/nC0hxWSdlT ceoXGuL6lebU1VfJ+4MbNKL93Q73DBlUUV8lHyvNmY7U37WeVZoz7W5GVyXFk9HNmVZ/J+ZcjJ4h eVdmlZQ50Wp0VVJck80e/asUoCdI/g2go5IqoCdI/qmvkqcMGeRuQGclxCrtmd6mfbX+AfQIyb9Q e5Xci27PdKj+evCNZ9FDJM8qTn2VvB7cnIr663b4UGmP/iq5+pU9ScgqKXNC7Wdn8Fx0g9SfyZbn OkP2HOB7cMocVkmZM7NXfZUxeobkW2XvenRVQuFx9AzJt4pjlZQ105H2KmP0CMm7afWPlTF6hORd Tf06QzF6hORdTf05QzF6hORfiK5KikccDaqiq5LqR0+Q/GOVlDkz6l9X8hncnpr6ddG5UKA9Cauk 7BlEVyXFW0gYpH71K1Zp0AF0VVI8vdIg9XuGWKVB6qvkniGD1D+DD6AnSP4No6uS4mOlQerPzsi3 0CMk7/LoqqSKTfQIyTt0VGJFPlbag45KbDN6guSf+mdw7q806Ci6KilWaRCrpOxRf2wn10CPkLzr R0cldgQ9QvKufyW6KilWac8W7eei8+6iBlUDdFVS6AmSf+rf7fDsDIPUXyER8nIye1glZc5MWfsq BQPoEZJ3MxWuFEhZk0Ta78Qco0dI3rFKyh79q/XnTqBnSL5F+qtsoGdIvrFKyp5E/f3By+gRkn+H WSVlzmHte9F5HNygbeqr5BFHcxKHrkqKVdqTqD/p9wB6hOTd86ySsidGVyXFFagNUl9ljvcHt4dV UvYMoKMSY5XmVNRXGXKlQHMqewJ0VkJhAz1D8q2yx70T3ZUM34Pbk1a5DN2VDKu0Z4/TXiWXGbJn q9ug/Bmcb8HtcW4DOishVmnPVqf9evAJ9AjJu5rTfn7lGHqE5F3LoauS4rro9rQCdFVSrNKeWgFd lRSrtOegC9BZScXoGZJvB536B8sYPUPyLroFXZUQzxkySH2VvMTRIPUrBbJKexLXdxW6K5kYPULy rumK6KyEYvQIybvmh1ajsxKK0SMk70Y/hK5KinvR7RkN0FVJsUp7EvXnDLFKg9RXGaMnSP457dc4 xugJknc19VUWG+gZkm819dft5MbRMyTfZjevQFclxYXR7dmMjkqMVdqjv0qenmFPXfszOPdXGsQq KXuGtFc5gJ4gefeMQ1cllUePkLzTfxeoHK/bMSdyK9FVCeVZpTmRW4POSihGj5C8S9Q/VsboEZJ3 ifYT2bgT3aBD6KjEWKU9+qvknZjtOaR+mSFWaU/irkVnJRSjR0jeJZH2B8sYPULyTv81jhvRIyTv KuqrzE2hZ0i+VTZpv7MJT8+wZ6aivkpeIWFPZRO6KqEieoLk3UwlQGclxN2V9syEATorIfQEyb8Z dw06KyHeMc+gAXRVUrxrvUHqqwyb6BGSd+qr5DpDBoXoqMRYpT36qzyBHiF5F6o/Ds4q7dmr/ohj Az1C8m026l2GzkqogZ4h+ZZEt2mv8jh6huSb/rN+WaU9Ua/6KifQMyTfInczuiqpGD1D8o1VUvYk +qvkCZbmJNFadFVCXIHaoId60FkJ8c2OPfofK1mlQQ8F6KyEYvQEybtkKEBnJVQ6i54h+dZ06Kqk 8qzSnGYRXZUYq7SHVVL26D8XnVdI2BOhoxJjleYk6u+3w+vB7dF/FygecbRnq7sFnZUQq7THQJW8 j6M5kXPorITKrNKc6XscOiuhMnqE5N8BdFVSrNKgKroqKd6bzCBWSdmjvspBVmnO2X3oqqR4bMee ikNXJcVncHsM3DGPVZqTDKGjEuM5Q+YkQ+ofK3lzMnP0X03G+0AZdMiho5LiY6U99S3oqqR4czJz jm1T/7qSVVpzbIf+PUO8P7g1xyL9VfJkdHNq6q/b2YgeIXmXbNNeJY+D25NsW4XOSogvK+3RXyV3 ottj4Dg4ryazx6GjEuPdRc1J1N9clPdxtEf/Wb9cgtoeA2f9xugZkm/6qwx5d1F74hXorIRYpUEx uiqxGD1C8k7//srCUfQMyTeHjkqMVZqTuAK6KimenmGOgSrRIyTvkkh7lTF6hORdov7OJjF6hORd 4laisxKK0SMk304Oqa9yAD1D8q7MKilzauoXKeAljgaVHTorIVZpT2WTQ2clFPJOzOYcdmvRWUkN o2dI3o2or5IPlvY00VGJcfEMe1glZU8eHZUYq7RHf5Vc0sUe/deD884m5rTUV8m7QNlTd+iqxGL0 DMm3uvrrwVmlPXV3M7oqIb7ZsSdhlZQ5if5ncL7bMad5OzoqsTJ6huTdOnRUYqzSnKb6Kot8BjdH //12eHNRe/RXyWM7BlXUn56BniD5V9G+Z4iPlQbp3zPUQI+QfEtu175KAfei26N/nSGuX2lP4rrQ VUnxQLg5Bo6Ds0pz9rk73onOSqiBniH5llaJrkqI6wzZU3MBOishVmnQLu33JuMzuEH6qxxHj5B8 O6b/PTirNEf/PW9zU+gZkm+1AB2VVJFVmlMroquS4lm/9lTcjeispNAjJO/qTvtCQ3ku9WtPRfvl ZDzr16C69vfgrNKgbaySskb/mWys0p66+rMzWKU9CaukzEnUr1KQO4qeIfmWOO17hniNoz01565C ZyUUo2dIvqVVar/IMUbPkHyrO3cdOisZXiFhT+IcOishVmmQ+ifwXAs9QvJuCB2VGKu0ZwIdlRTP ZDOoiq5KilUadET9lbfci27O7BHt5wyxSnv0n8nGKu150KlfgppVWjPzoPq96DyTzZ5R596B7kpm kFWaU9mjvkr0CMm75CGHzkqqgZ4h+ZZE6s9FP46eIXkXoaOSClmlPSG6KilWaZD6Kous0h71V97y daVBYYCuSopV2hOqPw6OniB5l4Tr0VUJ8YijPXXnlqO7kjmAHiF5p//KWz5U2pO4D6CzEkJPkBaB W43OSmgSPUHyT/1edD6FGzSGjkqMp7LZwyope3rQUYk10CMk35IAHZXUQBM9Q/JN/5W3fAI3SPtx 8OIEeoLkX7gK3ZVQjJ4geRc57VXywdKeSP9ZvzF6huRd1IeuSipGj5C8U18lryYziFVS5iRRgM5K iPsrDapov4cEqzSogq5Kahg9QfIvRlclxSoNKqOrkiqgJ0j+qa8yF6JHSL7V/kj9nU1YpTkVp77K MnqG5FulV/vZGazSnppDRyXGKu2poaOS4stKi9BVCRV4eqVF6KykWKVF6Kqkig30BMk79Xet51m/ BvWjo5IqxugRkm9J/7XorIRYpT2TTvuSLlyB2p5j6q9xZJUGTSpfFp3LV1p0GF2VFKs06BC6KqmY a7LZU+lFZyXE9+D21DZpr5J70e2pqV+/klXaY6DKBnqG5Nszbi26Kin0CMm7xBXQVQnl0SMk7/RX ycdKgyLtd2LmY6VB6qvk6lcGRQ6dlRCrtKd+j7sK3ZUMr3G0p+5YJWWN/vfgfAa3Z9ZxrV/Kmtn3 oasS4wmW5hioki8szZl0N6CrkuJudHMm9Z+dkW+hh0ieTbo16KqketEzJN9q+qscR8+QfKu7m9FV CZXQIyTvDFR5Aj1D8i3Rf4UEn8Ht2YuOSoxV2qO/SvQEyT90U2I8tGMQOioxHgY3aABdldT30BMk /9RXOYWeIPnHKilzWivRVUk10CMk7xL1h8Fj9AjJu0T9FRK8uag9ifprHAvoEZJ/W7RXyWM7BtUd uiop9ATJP/W3ref5lfacVn8ueok7LM2pqX8PznuT2ZM4dFVSrNKgKroqqbCBHiF5p75KrjNk0Bi6 KqliAz1C8o5VUvZU0FVJsUp7ZioBOiuh4gR6huSbgSq5Z8icRP09JHg5mT1pldrPGeJCgeYkm7RX yeUr7dF/Dwku9WuP/uPgrNKeZAhdlRh6hORdEq1AVyXEx0qDol50VlLoCZJ3if4qD6JnSL4lkfq1 flmlOTX9VfI4uDmTDh2V2HH0DMm3SfUvK1mlPfr3orNKgybQUYmxSnvUVxmySnOSIe3LqvItuD3J UIDOSogPlfZU9gTL0F3JsEp7ZvYE6KyEBtAjJO+SUP2xnQZ6huRbEqKjEmugZ0i+JdvUP1byGkd7 9qqvkm937JnRXiX3ohs0g65KjFXao379SlZp0NA16KqkWKU5+t+D83WlPU2n/bGSO4bsad6OrkqK Vdqjv8oieoTk3aTT/rqSD5bmfHfUqX+w5K1NzKk4h65KqMgqzfluyaGzEuLrSoNK6KqkBtATJP/U V8l3OwbpPw4eokdI3umvsoAeIfk2U1G/vzJGz5B80392Bqu0J9m2Cl2VVIyeIXlXRkclxTc7Bqmv chI9QfLvfnRVUqzSoB3oqsR4Lro96h8rWaVBU+ioxLiApT36q+RjpT3qjzjy9EqDxtBVSR1AT5D8 U18lT2QziFVS9qhfVTVGT5C8G3HoqqRK6BGSdyNO/Y0cY/QMybdk64ar0FkJxegZkm/JVqe8yu0t 9AzJN/1V8oCjPYn6tTNYpT36r5DgqqoGqT8Xne92DIrRUYnF6BGSd+Xl6KqEuBfdnmNOe5UxeoTk XdLLKilrEvUHHHnPW3sS/euiN9AzJN8i/Wdn8IijOaySMihSX+VG9AjJu/p6dFVSrNKeivoqY/QI ybf6Fu3P4DF6hORdTfueoWKMHiH5N4jOSipGT5D8U19lHj1B8k99lTn0BMm/CB2VGJe/MieJutBV SbFKc5JQe5W8h4RBDl2VFKs0qB9dlVTIRdnsYZWUPepXCuQzuD0zrJIyZ9QV0FlJbUfPkHxjlZQ9 ibsFXZUU3+3Yo75Kvq40SP11O6zSnsT1obOS4jO4NbOPsErKnEecW4bOSoanDNmTPlYqXxe9iR4h eTfqAnRWQlyA2p7RXuXXOOZCPliaU1NfJR8s7Wlqvx6cb3cscuioxLhnyJ4BdFRSPOvXnkM3oauS Cs+iZ0i+fUx/legRkncf61V/xzz0CMm7fdpPGeJ9HA2aVV8l7yFh0A50VGIN9AjJuxI6Kim+rjRI /T1vWaVB6qvMc3+lPfEKdFZSR9EjJO+2qb+zCY842uPU3yCcLyzNqbv170JnJcQqzanov7voDvQM ybeK/nPR+W7HnKb6c4Z4hYRBrJKyZwwdlVQ/q7RHf5XoCZJ/W9BVSXHHkD1ldy06KyFWac8W9XuG WKU9f9LLx0rKmqPaHyp5J2aL0E2JcZUCg9RfIRGjJ0j+6a+Sj5X2qL9jXmECPULyroiuSmwYPULy Tv97cB5yNKeFbkqOVZpzCN2U3CR6huTbOLopsXH0CMk7/Y+VfKi0J9F+GJzHwS1y6KrE0BMk/4bU 7xo6gR4heRf1oKuSQk+QvEuiNeiqpNAjJO8ixyopa6LgGnRVUg30DMm32QAdlRh3o9ujf7X+AnqE 5N0O9a8rWaU5x/S/2zmCniH5Num60FUJbUSPkLxL3oeuSoqX7dgzq75KZmnQA+ioxGL0CMm7B9Tf bydGj5B8S9xadFVSvPLWnMgF6KqkuNavOZH6O5uU0CMk7/RXWUaPkLxLWCVlThLdjM5KiFUaFGu/ bocnshl0UPv+SlZpUAVdlVSMniD5V9H+DM4VqO2puwI6KyFWaY+BKvnC0pzjQ+iqxFilPXV0VGKH 0CMk7+ra3+3wOLg9SaT9iGMTPULyTv9xcFZpTxKtR2clxB1DBn02QGclFPKsX3OSz6KrkmKV9lTV L53B9+DmPL0bHZUYqzTnU7tvQlclxSqtefLPPqr+GZx3NjGm/qkd6h8qc/3cNWTLF3esQzclxypt qe74KDopD/gMbsrU34W3opOS6+ZDpSH/NTWxxUCUue4WepLkzalGY9dvoIvygve8NSONct8fonvy I0bPkjz5v8kHH3TL0D35MYgeJsm9+mq7feJz6JQ8KsbokZLUK+fm/gbdkWd8sFRt5uknnnhi4l50 Rb7xTDbNZvbv3r37TnRD3vHsDM0e23Gvu1f/fUx+CavU66nHdjj3gWvRCS2CIi8n0+j0E09UxwaD oOdd6IAWB6tU6PSe9OXkb6LTWTz9rFKd555Oo9y4Cp3OIuI5Q9o8d6qx5+PdK5ejy1lMrFKZpx57 aJf2ZYQuiVVqcri0M+jRvuj5ZeC56Hq04g93dV2PLuaK4PqVWrTiXG65kZOCLoVVatBsTk2hS7mS jqIHTpf08olG5bfRoVxJm9ETp0t5+eUTlb1LKkoeB8+8e1Mf/DV0J1cW34Jn3AC6EARWmV2na7Xa koySe9Ez62Rzr7vJ/FGci2OVGVWvhKssn4DxlmL09Oliqs45dBpAMXr+9EuaYzE6CzA+g2fOOLoJ vAH0NqA3GEMnkQED6I1Ar1OtTiz1J+8FXKUgO6ohuoasYJXZMDd3ilFewIM7eLPtV+e+9KX96BQy hFWizTb333PffegOsoVVgp2olO4JlsC1OG8LV7/CGo9Lv9ODjiBr8uitsrRxR9BFsUokHsa5OFYJ xCjfBKtEiQc+jN74mRWjN87SNNWP3vCZFnNNNoAqo3xLrPKKax7cjN7qWTfBKq+kVlxamteHvT0T 6O20pGzOo7e3DjF6Qy0h3BF0uWL0ploanh2P4zJ6W6vBG+ZdCWef3rP7PehNrQnfgy+6U6eebnwc vZ114f12Ftc//u1jTzcaN6E3szYN9Haz7Gd/tT4IgrXobawP1/pdNNXP7f6trlWrrkFvYoVY5WIZ 373+ti6eZP6r4NoZi2U89+53r34nevvqxAskFsdT+9BbVjNWuQie+uTQkMUbJF8xZfQWNGdqZxAG PVejN6xqRfRGNOWFk88+nA71XaZv/XkltNBb0pBvf/thh96eNrBKX+6/9dbretGb0whW6cn2W997 HXpjWpFnlV5Uw7XvXY3emGZwL7rcSy/On897NXeZ+8IqpV588dRD6K1oTozeqrr96JFNmz6I3ob2 xOjtqtsjd6xBb0GDimfR21WvqZHDjHJRxOhNq9e39g90XYXefjbF6G2r0plTjYeqIwM8A2OR8K71 v4KkEe8qorecaegtrM9ff+aBB+5mlIsKvY3VGfnMrwfuFvRmM45HHN+Gubm5v4+uW7ZiGXqrWcc7 m1y21qkzZ5oR3+JcAbxj3uWqHzlyqnknT+i9EljlZRpyvbcG16M31xJxDL21M++Vc6+k3w4Fq3gt zhWzD73Rs+6lU6e+MfcN3o72Sup2fLB8Sy89/Q+VP77tNvR2Wlq6XYTe7pn29O7du++6mnuCrrCA Vb6Fahju7uMpGFdecAC96TPr0c7dw/g4CbK8q+tJdAFZMz4cht3oDbO0Lb+665/RGWTAC7P/O/99 o9Hg/R4yYPnyridfuIztduIiv3bo0KX+1Fuucj01dRlf9+JarTf9/Bc5vH/JL/TCyebIyKOPjkcf LRa57mQ2bPiXk88/Xx0bO7+JqmGu/2A1juNqdeFQ+fh4Ow4L8es3YzN9MzAwkMsVGuf/SFj6hd8/ /1ETxe7uwcHBUikMq9XWhVXgFj7xYLHYWdh1PJz/9c6XGx4ul8ulUrEYhsM//yzVNzZVnSgNDITj 4+PV6mDcbFdff0B/Kt6+fWL+S6SfOf2c7fR/6aPfuu3zNyeY/2n6l1342zVfa/qF5sG7777vvven s7gRvTHoNRsedjd0vu8fH9+4cWPnR+v61+WKnfAG5k8nDAvpN2lc1VarE+/4xgt/tDBx4R5Hr9XV qbvU2zs2MRG//ouEqeOt1saNY2NhLleav3/cuompo+nnGmg2S50v//oP76+2W820zuHBXK7aaqdf t9r5LyXufd1Nvjo7uAfjfLFUKo2lX24iDOPOlyzGE+nv9Hc+XX/H/MemH9SfW/hfLh9W22MD/QMT E/P/Kbacc7nc+z0OlDIkv1BMft26y/4jpTf/rdd/lt7OMj6X/1kvaeDn91TM8152RERERERERERE REREREREREREREREREREREREF/w/pZplCwplbmRzdHJlYW0KZW5kb2JqCjExOAowCm9iago2MDk0 NAplbmRvYmoKMTE5CjAKb2JqCjw8Ci9TdWJ0eXBlCi9JbWFnZQovV2lkdGgKNzc4Ci9IZWlnaHQK NzI2Ci9Db2xvclNwYWNlCi9EZXZpY2VHcmF5Ci9CaXRzUGVyQ29tcG9uZW50CjgKL0xlbmd0aAox MjIKMApSCi9GaWx0ZXIKL0ZsYXRlRGVjb2RlCj4+CnN0cmVhbQp4nO3dD3QU5b038AECkSDZasBY FZfSSoSkXZXeULulA3iRFohTj5Z9pdq1Urq1vLmLRgvXlA6YW6DGuqb2vVta7aLN6UKVd46ApZgD U0BfUindwpabVCgrKq5xqwslGIn2PO9sAgJJIJvdmfnNPPP9cEhi4MjM7/lO5t/zRxAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA VKVdHyeJNz4gaZ89tBsDYLKS0doHyeerUdsYU+WMSGSFEmPNK5SmV6ZRbx6ACSqEisbvi+4RgsI+ 1hJ9+fDWw91fJ2Nqg9IkzvV7qbcUwBhjtF+C/ESoLv178WZXnPUt9eqrxxh7RVXrqLcXQD+Dhp35 eqx/iaqyg+xwx4fs3fMcB6cdiamb9mQunOg2HUBHYzI3wY2rZ4SZIs1V+on/OU6kuz4FZjXe5BpK vRsAeZrmH+traEt0pfroQA6Ej7Wnn3PPo94NgNx9O/hIsHVPwx7tx7v2K2cfpl9gva6R3II4v0wQ Jk8eR7FnAAPgTSTSJ3M/AM46FP6V+fhQ0aAz/2+3KMmyT1KeDM7p+u8y3/8eVXoR0Y4CnIfnyxOF eWrda+16HAenPecqOvMvfFWsij6bYGxf8P4ld3iEUbIsezwzK+l2GaCn2YGgv4GxdOKVI3oeCGyT q0AQAoy1ynfd0coOnP72Me13PNmyo+Vnnh9EqoXSidT7D9DVWcKnJVPZo+sxcFpYuvCzpz9sfYcl GauhrgKAHJANOQYGptVHXQdwqmHadYtcE1apj4HT5Ll3TPeMoa4KOM6ntKsi6vCfI8ZYg3+stmWD qUsDjuLxe6ZQh7+nPf6wPMzlvZ66NuAY3mneuf7HqIPfm3Ze2OSLVFOXBxxibsN+Nc4OU8f+PJKx pkdnSjOpiwScGyyU/peqsvQx6sBf0NZIhLpQwLdi8eYkS6epk96fw5FfjKcuFXCswPUZsZY65Vl5 /X2mSNTlAm6Ndi+M7KcOedaaqcsF3LpswRbqeA9Eq7rqlhHUNQMOlb5Dne0BC3/ORV014MusRbM8 d1DneuDCHsymBPoZcvXN6bSuAw/MstuD8W2gn/Ibd3XoMhKNQKoucAN1/YAXohijDnTu3os958eJ AXTgXVj9OHWc85F82I+pJiFvbt+AJiyyoPf3NGDYAuRt71tvUEc5f8143wx5UqlDrA9l6qJbqEsJ dlZDHWGdvJ+MeUqpiwm2FaAOsI7W/3TTCup6gl3J1PHVUQdjkdDd1BUF+xk07TtTV1DHV1eH98Ri vx7U/54DnK3IFYv9mDq8+jqejB2iLivYTuHsJ17upM6u7o6iQx4MjKtoPXVqjRCjrivYTEHRU9Sh NYSKcwIMwKw/dL5KnVmjtKrU1QX7sP7kFfkQqcsLduE50MHfvfIZOClAdnh6s9ynaGUZdY3B+r78 WG6rZdpILCKMoi4zWN19sdjb1Ek1WtLnn1ZIXWiwuEDsEPfnBLZn3eYZ1IUGi3swxv+BkFka8V7q QoOlFc5+nTqk5kh/RbiEuthgWRdXhqkTapoHpGuoyw3WJUWpA2qa5hWXU1cbLMu/IE4dUBN9CTOm Qt8eiyWp02mi/TPd1AUHawocfY86nWb6++KIBy8VoJciYSF1Ns3VutTvxlkBehkjVlNn02SH73SP HkZddrCaf3+0kTqZ5luAcwL0tERpps6l+f5453DquoPVVCovUefSfCfTjdR1B4vxVC1MUeeSQMcB 6sKDtfhV1YGnBMbevIy68mAtVfGUXRePygsujuAc/heoI0kkqWBdBfjYlX41QR1JOndQlx+sYlDR xgTXk7pcUPt46vqDZbh2UseRTirupS4/WMTFo+6kjiMlFTfN0GWQx7ObOo2U0q8tom4CsIZbnDNg sy8dj1M3AFiE7wB1GEntp64/WMVd1FmkhfUUoFupkwZs9iVM3QJgBdfJjr5d7tJK3QhgAc/If6YO Ir3EYupmAHI/Tzv7fjmjI72QuhmA3Kz0h9RBJNeRvpW6GYCapHxEnUN6nf/EkeB41CG0ho40+h45 XPkvqUNoCZ0dzwiY7cXJymWZOoRW4S6mbgwg9D0VLxO6vLNlAWZ7cbIl1Am0joOfpW4MICRR589K 4tStAXSc3R27B4W6NYCMTB0+S4lSNwcQKfMuO06dPksRqVsEiMjy36jDZykB6gYBGmW+Za9Rh89S MLLfodYyXBydI1lK3SRAwUMdPOvZNu1S6lYB8+FdQi/NfupGAQIKde6sZ4/3s1ir3GkuHruKOnfW 0+rxjKVuGDDZdE8VOt/1smfD7dQNAyYTQ+F3qHNnQVh1zXFu3EUdOiv68GQzdcOAuaZGHDxP/AVN p24aMFVlJPYudeasaSN104C5otSJs6pOrMXpJBXXraROnEV1pJ+jbhwwz5WhUAhPjvrUno5cQ908 YJqKqvv2UkfOojojUhl184BpxnrQ/e48/vV/I/XUzQOmKfasoU6cVXWm02k8SHWKIXM3UQfOujpP dnyLuoHAJC4XddwsDa+ZHeNT83BOuADMceEYg9DT4kKw7JpjYLTaha2lbiAwCUar9cND3UJgipv/ 9hZ11Kxt34PUTQSm8OGc0I/gnZhC3gmefQPnhAs52qJ8k7qNwAQVm6mjZnlYk9YRfEEF54QLUyqp GwlMUB15/EXqqFmdTN1IYIKm2P+jDprlYdZsB5hNnTI7wGtmBwhgguwsNFE3ExhurnqEOmY2II+n bicwml9NUMfM8mK4Y3aAKjVNHTTrw32CA9RQp8wW8PCIfzJ1yGwBl0e8u8i7LkWdMjvAOYF7daqK x6j9wn0C/5a0HaOOmQ3g4oh/GJuQDZG6mcBwMeqQ2YGKI4F7E6lDZguqXE7dUGC0NuqU2cFueRJ1 O4HRwtQpswXcMfNPpQ6ZLeA+gXsh6ozZQSpI3UxgNLcYoY6ZHah+6oYCg5WU34clN/uVijcWUrcU GG07dczsoHHyMOp2AmN556H/Xf82uXBK4J4ap46ZDTyHI4F76JOdjadcQ6kbCgwmU4fMFi6jbiYw nJ86ZLZA3UpgtMFukTpktoAFmblXUk0dMntAZwvuYYW1bKD/Hfe8dZj/Lgs4EnhXqmLWr2zgPoF7 L6nUIbOBNfJS6nYCg7lfib1KnTPLSz4of426ocBoUx87Sh0066v3f4W6ncBwMnXMbOBRTyl1M4HR fNQpswOJupXAeHidkAWsIeIAY+6gjpkN4BmqA4gilt3sF96r8a+k/HHqmNlADXUzgfG+QJ0y61sj P0jdSmAC6pxZX1SWR1C3Ehit4p4/UQfN8lp8ZdTNBIb7dCj0d+qkWd0+6kYCMyw72E6dNIs7sZq6 jcAMWFCnP20J6jYCEwSoc2Z9J34/YxR1M4Hh6qlzZge/wZHgADJ1zGwAnS0cQaXOmfWhs4UT4PKo fzgnOIBMnTI7SAaomwkMh7WYs6BQtxIYbqJMnTI7wJA1J5BxVuhXBXUjgQmmJ6lzZn2N7uHUzQSG w4HQv5C7mLqZwHDod9S/EM4JDrCCOmZ2cPsg6mYCw+GckIUkJv7iXw11ymyBupXAeJXUIbODGHUr gfEwG2Q2qFsJjIehOlkIU7cSGK80TB0z64uhW7YTqNQ5swPZQ91MYDQ8O8pGTKVuJzDYbOqM2UN0 AXVDgcE2UmfMFqJSJXVDgdEwejMLzSsup24nMFpDijpmtnADdTuBwfwqdcZsITmFuqHAYFXxY9Qp swOMZOZe1dvUIbOFFdTtBIaTqUNmCwoG9XNPpg6ZTVC3ExhNpY6YPbRhrA7n1ieoM2YPSXQ84lyd mqYOmS1grA7vvOoR6pDZwhrqhgKDeesOUofMFhqpGwqMprZRh8wWMGqNe/Pwjjkbfup2AsPtoQ6Z HURE6mYCY105+aZvUKfMDp4vH0ndVGCoa4KrXqROmS18E3ME882v/uYt6pDZwbu3DaVuKjAWBupk ZW15CXVLgaEkTBCcleW4Y+acTB0xm9gquqibCgwlU0fMJtaKn6RuKjAWdcRs4t0wzgmc20udMZtY Q91QYLBW6ojZRIC6ocBQUjN1wmwCc1vwrSRCnTC7wNwWfCsXY9QRswmcE7g27EYcCVnCLC9cG1T8 TeqE2QZ1W4GxsIxIdpI4J3BOpo6YTaRUjGPmm/SrFPqiZiGtYnUpzsWS71OnzBYSS6lbCgz11V9T R8wm6qlbCgw1zO9voc6YLWA9Zt6NWUKdMXtY6iujbiowViV1xuwhKnupWwoM9mLbiY+oc2Z9LVGc E3i3IrG5kzpnNoB+R9wr9T9HnTI7wCtm/nkwG2T/toweTt1OYLTy2p3UObO+De4i6nYCgw0RxVrq nFnfLozn596wz4n3UefMBiZRtxMYb1SIOmaWl4rPpW4lMJ57OXXQLC+uTqNuJTDcaBFHQj+OvKLi FTP/cMfcv5NrqFsJjPdJ9wrqoFlfkrqVwAw4EvqFzhaOgCUU+oXOFk6wNI6hzP0ppW4kMIFfjVMH zepwceQMfpwT+oGLI2cIUAfN8nBx5AzUObO8o9QtBOaop06axaUeq6BuIjAHddQsLhmjbiAwx3Tq qFndr6ZSNxGYwkOdNKvDoyOHKJi3iTprlvYQHh05RJEr2E6dNguLR66nbiEwx6eCsfeo42ZhsUg1 dQuBSebG2qjjZmGHtz5A3UBglkkHqeNmacuo2wdMcol3HboenZcilVA3EJhGpY6bhVVSNw6Y59rV 1HGzMB9164CJXqaOm2X9TsGR4CTomH0+fr9nGHXrgInQH7Vve5dVUTcNmEqmjpxFbQjdQ900YCpc HvXt4D1XUzcNmMujUofOgt7ZsgAriDgOJrjobddodzF1u4DJvFiivA9fF/DgyGnkKHXqrAjvEhyn rP4N6tRZkEzdLGC+bdSpsyKspONATyYwbq2HTVMKqFsFzBdMnKBOntWsxIKbTnS59Bx18qymGqcE J7pGmoE3CmfpTB/AlBaOVOq5Eb3wztKebqRuEqAx4tJPUafPQo6++dQs6hYBKo3U8bOSWIC6OYAM dfis5OihB6mbA6hI1OmzktSKa6jbA6g0U6fPQkLeQdTNAWSo02chIXTGdrIXEtQBtIwvFVI3BhBS 1cRx6ghaA94kOFrB8tAu6ghaRJi6LYDSxV/zr6SOoEVspG4LoDTky56HqCNoBftY8mLqtgBSl5bi nKC5s+BS6pYAajgSMCgBNDNDu96lDiK5KHUrAL2KJ5y+tM7r8RQ63gEmR2W/Um/+LHUjgAWEqZNI 7T9xkwBdqJNIbVIROt5BBnUSiR2soG4AsIga6ixSeiW0jLr+YBUVIQc/PfrRTOryg2XcE9pAnUcq ydQ46uqDdUyd+b+oE0mj4w2M4IdzOHMwc2c6/WvqyoO1+KhDSaIjna6nrjxYi6RQp5LC73//90nU lQermUIdS/NVi+UYkgA9eahzabrYSKymBr3NctiKIjtrb6YuOVhSY7qDOpwm6my/VSwfSl1zsCLv 4lrqeJqoPb1AwOLj0DcnvVPobLyButxgWU56kIqpjeD8mqjjaZa9ikRda7A0h5wUZCykBhfmkBuF OHWdwfLGLdxHHVMzjKeuM1he8EnqlJoA/bChP1fN4f6coAge6iqD9Q37BPd9UjHXHWSH67vmjUyp pC4w2ATP5wSFurhgHyOrVz5FHVgD/DPNVj6F92kwAIUu1/9Q51Z3ixMJ2YUZH2FACm+kzq3uAsK3 E48XDaauLNjL4GFJ6uTq6DCLPI8XaZCbUur46ubQ7q0R0U1dT7CtqVsPU2dYH7HYquWY6xFyJkW2 Umc4Lx9lPmjXeEd/XiGMwqB9yNkXIvY+J3Qc38f2VgilEepCgu1JSht1nHN3Mt1IXT/gh42nP+rc W0tdPeBInDrQOXsnFLqNunrAjVEvpqkTnatdG5/wT6OuH/DC/Y3ExpPUmc5Zyzbq+gE/PN/ZSB3o PEykLh/wonDs/ZEYdZ5zt526fsCNiZFIxL5dkBZXCJ+hriBw4sH7733iOHWic/X9e0L3XEFdQeBE sStm35PCpvV7t1IXEHjxlQW19h3N2Z7G6H3QzzfVKHWkc9TJnqEuHnDEJ/tXU2c6N/9iP6YuHnDk sx5xHUtRpzo3gWHDC6nrBxxpUO3aMXXzNBfmNwLdfE9tS7d/RJ3qnLyhLMXkj6CXIQ2p9EvUmc5R 6tBD1OUDjlwkCJUKs+XswW8pt1JXDzhz3UrqVOeiWZEvoa4c8MXluklhB6mTPVC/kSXcNIOuBhcK y0IbqJM9UB0/vH3eF6lLB7ypuO7GZXI9dbgHKOJfOpS6cMClgL1unTer226iLhlwqaDoups+oM73 QKRWU5cM+OQqvFxp/5A639k7OYW6YsCnIYKwOJ3upA549sLUFQN+PRBeeYw64Fk7Poq6XMCtOcEg db6z1yJSlwt4Vf7t4M+o8529uIxFFMAYpQ/81T4XR2w3zglgEHst25xY8o2vF1CXDLhkr4H+ne1p 99XUJQMutVKHe2A62fqFg6hrBjxSqbM9MP/SfqNLKuhPtuHIZh910YA7MnWoc7IBT1JBZzJ1qHMS Gj0ctwqgqzB1qHOzn9VQVw54Yq9XCeeQqWsHPLHXq4RzoE8q6Mdj34nkGdZpBv3YdersjKQiUZcP OOGRqdOcn47HqSsInLDxIoSak+k0dQGBE9RZzk9ne2c9dQWBD03UYc5Xooq6hMAFGz856tKmNlCX EHgwmzrJ+UqhJx7ooYY6yfnD6zXQgZ3fJpzWRF1E4ICNu1qcQV1EsL2Cop9Sp1gPGL0GeSpyuew1 T3bfFOo6gt0VzNtNnWJdtFIXEmyugjrCesHzI8hLpJ06wnoZT11KsLPr1qv27oB3Bo6ErrWFM0a4 Pv7OYAz0zlKdGqeOsD4ce6MwURDKfIHuaWIn31xeIgiTZHnG6T91TzjzN4eYvm124lVtNC3wBfHZ I3Vwz28UC6tUT9dX3rolyt5AE2v7gyqrcq2y9we/DPrEcknZIcvyNRMzf2WEW4xkRjKV3qYdKRNO zYlTgrlx+jIiTZ1gvWxx87Je+ZhvzBx56ss7xJKuz7PHe+d5PYLs8wQys3YGhBplxWo1cXrfE0xt yXze09i4k7EW9uzPjrPWmmjz3uUxprBmtleWxemi6P6CV/AK1eKCLwi4aOrBvaKZKrl62+B226p5 r+j5jZIx3am/ft0Lv/QKS72CJKyIiOWZb4XZwbj6WmYvTz3zVjMfEh//FEsydvzsWiRf61Gc30bf YGtr97MGtU7Zyfaz1VfbqlYmkGw8wUtPG75EXc2z9bgo/+IN2ofMNPeBVdp1vbdMuywN+Zc+Ou3M 36iJiNXSdLlUqI6o6jpVVf+rWft5HtsfY13d5lParx6O965Bf1LqK921chebWQwbuPxObs4JBJ2P RvT53ekB7cMEcYL2E37054aW+ep+EmNHXla9mRf6dc1arPeqsk+o07KeeE1tUJq2JxWpNJP2rqd4 bSz5yp+OpFjamPu3f3R/2uK+2NxS2QAvD1E1FWbVLHPHWibLAVEQJ0069b2q7tvYzCxqce1jRBTL RbcofiEqdz2ci6t1kvLUylNbqu5mR9Tdib5+0JtkZ+0nzaqWXahETWGA2WbVTG4qFXyyxi9Hn/GU SkpA+LSq+q8SZmtfaxsyV1BY5Pn9WyPit55v6d62Y4kjZ21p5gxwPJerG/2IeIJ0rlsOUDaHvsJG Na52c1s0XCjTvgoE2lhA1v6pH62KPtsUbWIt3bewqnKk7djh7oif7V3Ti5AtTBN1rhmJNz+ibhPd vJ65FtfdUEHwewV3pewbJSldi0ycuaAk/rmeD/TePdecRIK6SfSTUOt0L9DgkSXuyWrd8NEz5WVL qHdQTzgn9DBnB3WT6Od1da7e5Rnsct21iyU2r749wbjpq9gFq/j2ZLOFBi9M7x90Bd+Tv75J+/+e pN4x/WG6/XO4XCv7r5mNNOtcn7GedAf1PhkE54RzuN27qFtEXzrX55YNrJN6l4yBU8K5poeoW0Rn k3UtT2mqe7VbDiVLda2U7c3cT90i+krF9VxZZPLPqPfHQBN1LBQHbD8TZE+qql9xrglupt4d48T0 qxMf7D47cA+p+H/oV5txT/bs28yRjfrViQ9cTIB3xpE1qE12+BzhlwceJkU9276rCwt0Ko1MvS+G wrOjHuqpW0Rv17qu0ak0Nl2sPUs4J/SwkbpFdHZ4oX+hTqUJUO+LoaboVCVuqNQtorPj29RtV+tR GEnh7GHCOZKj9KgRV7i7BEixlB5TgElc3y7jyVFvvN0xM32elE+k3gmDxXWoEV84mtniDB3qMjfO y3xofds2FlNbnIvHa4CkDv0I/Gcm1eJSlcfVfxEchaOJLc6S/6pr19Yd6f+fsa9YsTBch/Rw5JMR 6jYxRjLvynB4/3SW5JWYLfhco8XIIepWMUK+L1AnytR7YDB0RO1pwc73qBvFCPk+PprCyUz656VL eLjC1WwNZ8n3lQL19hsMK3H1UttC3SiGyLelOX+vhlNCL25ZbqNuFSPkXRjqHTDWy74yHcLDF3k5 l4NR8rwhrHiQ63NCUpYxsUUPS1X1b9TtYoS2oqJeqzINwOQg9Q4YqvNP39ctQbzg9UhgrvxeoT64 j3oHjHQoHdUpPxzxr+dmmbVzbJqb18g1ri+O2H5lhV754YZ3XYrDeQ4zWuTch64VL+L6lMBYs17D +rhxxVKVulGMskO+Luc7hbEe6q03GCaM743bLpcty1yeXIsyftE26s03FiaM78XLb5fLVfKduVZl auQd6q03FA6EPtzE5w2zpuUX8pgci1IW2Uq99Ub6B2ZE7UMpv8PW1dxfH0lrqTfeQDvrjFiCy/a4 HL3ZLaH6c63KGOptN9Dbz+o4cyxHOFqWvA+5VkXmcyhfl81PyFh+tjeZul0MtWdabotvy9QbbqTj k3Ag9EWlbhgjNfin5VQUvie/0zlBvJCp28VIP/bn9vSI45snrJtwPtxNEHy2o4d/cX0uReG619G+ OXiI2oelKrdv1rpEqnMoCt8XR3uC+i5FxwlVVf9B3TQGeudQfOrAi8LvK5Yum6/UPUYc4HZ8wmm5 9DXj+8ky26J7irjQkKJuGGPl0sXGR73Rhkos1T1EXOD65lCj5HAocP3oKJ37m3e+qdQtY7gB980u 862i3mYjRa41Ikf2J1M3jNEGPFnwCFnmeE7UwwpOCX0TqZvGaFMGPCf03GqOex0xtiTXvuqck6kb xmi3j3YXDrAmKpeToZ32O0NyZH8qdcMYbrl72MBK4l1NvclGwhDm4gmf+aT7yTrvRCU9S5BVWZbV 5mh4NnXDmOD2QQOrVOAE9RYbyeEjN6+vvn6sRxQ3qmqctafXcXxH2BfxkgEVi+9XzDlPc2B710ea FKk6Evn55q1rWSqeYp0d1I1htgUDa33qzTWWU88JE4XqSIyxNZHWj0vxL8JmoOH3jx1IzfjugNds UNIsLs5YMqad7ZNHqRuA0jZl/oCqxvVDVEcO1OF9OYzsDeyBSWv//0P7WmtQ2KwsyO1URgM3kKtj rqeCdOSyUsEEDoXT7r88+0epXHfAy3dRUlt6pI3rB+MDsUP67lVZVq2U72tKJ54TuP7RNkDPRn6z MMuy3UG9rcZy4hhmrn+0DdCB9P/8Ocuyham31ViGRs6iaqiLbiHvpdMPZ1m2R7fyPE/2XieeExzQ uS5rnen04uyKdmkkcoh6aw00xdjIWVMp5+f5AfkgfXeWZbu+muNzQjLP1XltKbiDuuzWcmRoYXar TfE8O7ATH6LiZUJPLldxFnXzyNTbaSzHHQout+q4Lqf92Lnyp/OyqBzXXS0Yay0xPHuWMqgKz1D7 ML3/ypX5dlNvpZEc92LtE1KE7/Emucmm95EsJ6g30zgbDU+e9ThsWFp21s3qt258nxMcd0oQxsvU NbeijnT41guWTRKkSXzPjllpUgCtg+9xVzn6S1g8ezXOzEPVggLh46GdktLMFM5fwvjMjyI1nh+K 52x/7a0jtNpclClQSXmJIBS6XM+yJEvWyDV7u/4G73dXjrs88ta9Tl1zSzr6/E8qSq4XM08SQ2K5 pFTP20S9SabaNG8odTRNNo3vadxy9nYsuLlWFKslj8wiy6i3hoDLRR1Ns007Rl1zSzr6x21sp7hc u0poZYf/Qr01pnt700/GUSfTdNRFt6o3td8HqDeCjtPumEvcV+HqCHpzXK+j0aKIZ0fQW7PjZsBz L6euOViS066OuB5tAnlw2jvmaq5HIEKOkonYJOpomuz6COe97CEX7ydjAepomqx48vvUVQcrStZR R9NsXE/tCTnbtZo6meYqForxEBV6c9waa5d5xlLXHKzIcW8Tij1cLzIPOepw3AR4U+Q3qIsO1tOR 7n/wKmdkOU5ddbCedLqROpkmK5JljOeHXj5sV5w2OqGsvoW66mBB1Q6b9Uvjo645WNBWsf/k8AZH AvRyYv18p50TeJ/kFnLSlphMnUyzyZupiw4W9M8gdTBN55YWUVcdLMh5q4iUSNJh6qqD5awam836 EXy5Yj511cFyto/19J8c7iykLjtYzjedd0bQ8D67J+Qgy8VHuSJRFx2syIEv1rCyFPRWTx1LAtQ1 Byty3DAdrCICfXJg/zuZuuZgRWI5dTDNVlK9813qqoPl7Kx13DmhXIw4eFp0OI9/3EYdTNN9NUJd dLCemFpFHUzTlUVbjlPXHaymTfVTB9N05bKKd8zQk+K8TtlChLroYD2q7MBXzEuoqw4WpM6nzqX5 0O0Ieksuos6l6SQFtwnQk+MmB9Y0UxcdLMiBvY6EmdRFt4mX0inqTTBPap2XOpfmc+2kLrstKIvT ibepN8I8KnUszVdwJ3XR7UESfh1zzg1VqoE6lwS+R111q1vT8Kg0fbog3BCood4U0/zWVzaUOpjm o6661a30fzzLw/gw9caYIynL8qWUmSSB1QYvrNnv/+zHxVqyj+2j3iAztNx/BWEkiYgJ6rJb2OHo 9DHTrjxTrE88GXyReptMIdMFkoooJ6irTuyn8zad74++IX2xR7k+E7z3JcY6PjRzAyk4sNfRJJW6 6NRWugrPc/k/okyq7Fmv4YIgrUu/w45y/XYhTBFFan+grjopRVJuGqLdCldICmuJs5YdTTuaorv3 ZF68J0sFoazP9ZVmpd+MNW2k3nQjOfEVs7Cduupk9oealLOb3Cer98t+2Sf7pvmXvBEOnL9mld8J /oTrnyBO7HbknGfkvYS+dG4pyuSHyrQbp+lC2RhhTD+dkh/cd4x68w20p2GMcYmzKmcuu9nZ0bw/ 5C46txRDioShgjBiqFAgCIP7KRvX8wbG/P5phgXOshzZFfVgPL1YnO4uyL1sKvUuGOnYnoYZ+iXM Jpz5Xm1DyC8IhYPyqJtKvQvGksfrljC7mN1IXXQC7c+ErsqvbDL1LhjLge/VBFGkrjqF+aPyLFsr 9R4Yy4nL6Xyu1onDE2bnW7ZS6j0wlh7Jsp1PUVfdfKl4Y75Vq32DeicMVVG5ZJkO2bIZ6qqb7m1V VfPraTlClKl3wlhHm5XmqcLUomFDdAqZHThv9YSTqYb8BukOEiZF+T4nsLfYW4/FfjWvz74mnBJV 6qITyO/RyHAtH03Uu2C4jtRxtruoQCjV9njcTLc+abMyUY5T19x85x+uXjC0j5cMJUKJ/9Tz9aZm nzTavbKaeg9M8ipri7Up0pxgVyft4rG3fJfftWlv5f0836ceve8nnP6RN0EUbxQnnP1Hohy+rVyM +hsUSZS7+2ht2UC89aZbeve/lQiSssgTfp7fTqrzVeoyEzi+1Df9/jU3C1XdM6NfJYoh7YJJ8tXU ihmjBWGi9u3ZgtA9bmF/jCl7iDeZ1EttbHuSsW1hdiiyQlkuzKLNrDHKnThk7W+yRmlmcVVRm6Ph 0PMxxmKZP9jJls+vXb6/tY01zW5jbZy/PxuwVnZY+7Uu3Xhbjc9XM0mcxNPItjJHXh29HG1at+Yt lkr0+pPDD5u/NXbT8cEHmU+qdovZa0iffU2kLiuZVAc72U69EbaWyAz5yzxbEibJ9l+VbdyT26gL Cna2fXt9tDkqa/dZ9u6sNMjjzG7ZoKs31PVuvzqt62Aoo850joqr1v6Zuo7AgWQq/mgra/r+E1LZ xdShzo1fdeCrNTBOfOV/qk1ssTCVOtkDVaXyPDQdiLwX+5YcLhWG5jFA1nQnqIsGHDqa7HouN8+V 1xhZc1HXDDi2e2X1Vt/ppA2njHkW8CIVjOXLPFMa8d2HqqijfmEOnvkLzBHTftg2/UyWg5M/MU4Y Rx3485GpywTO8NoTDz1w1+o5wQdiC0dfRJ36PrilzdQlAqd49Z9s35PPx552L6CO/TmuuEX7UCxJ zpwNEqgcffso2xL2SXOE4aPpl3IrnS0Ij752IDD7iUdwIACF9kRwtJt2mHTFPXtZktX71XTHR9oW HaIuCTjSicSOLQuuEQKycPXMq00/CC4WioXrN4S6BiQ0/p37BZLA6t5pZUy+J/SEz+QxocPGegI7 9x6k3n2As7Q+t0GL5ERh4lK/37RD4be7tX8Zg1PAerbHWZua+JNZRwL17gJcQIKxcKmUWe9rqMvg ufecN90d2I8iDHa55kw19EiQqHcSoH+t6s+ejR1Sljcat+zhEup9BMhOsp19mE6/qfxgjpbbAt0H OeCcADbxvvb7ZCdj6cQcocA1OZPey3Q8ELheLxK41LFj9nXBWE1AEHz6za10lB2l3i+AAXvjxSRj 4XrlmcxMMgWFOhwJh2LU+wSQi8y10lvar2gzm+eqefyW4jwfsq46dLSTep8A8rJpcSLic+V7YniM ejcA8vXBgb8+68q3O7dMvRcAeth8V54zT4ap9wBAH80r8lrvSqXefgCdSHmtnnoF9eYD6KN5RV7j 3Wa+Rb0DAPr4YV4HQugV6u0H0Edet8wT7sF4NeBDcko+R0Km51GSehcAdJB/h+1SQRiPuwWwuxV5 HwkZP1acuNwm8ESfQTyVSyoxjhPs7dN6HAmZThueCgGjFcC2Ug1ePQ6FbpLS0Y6+qWBPqn4HgqYx vWs/9R4B5EA7J4zU8Ui4YX4Eg3fAho4nl92VV8ejXirvW/qT7W0d7KMO6n0DyN7+4Dg9TwldCly3 JtKs4wPqfQPI3sGH9J9fe7BQsDrdkcY5AeyjhYV0PxC63dBYK4cPM8wjDzawW90hP6fvXcK5tka6 1xYBsLIKUZZ9pQYeCML1P3xiVvnvlD3UewrQl7ZUjMnjMz3nxFuMPA5O8fubqfcYoIc02/J/fq3W fZzSQcYfCEMnej7tXtB6cMOPqHce4LSEmljgnuXXsX9FVgrdnspQaGYohqEMYLoT2u+TH/9XW+pk haTUe+ddO2z0cJOPA6Hr1HPjTEHqev2MlTnBTCfaDu1SG9XMl6Et2rlAXWN+/s/lEgRpLau/fO6K d4hrA46S0NI/Tahh+0PuecordV7aFZu7XfqUqB0Oka0srlKXB3h0ou1FxraNLa5XpDDbq10FRes/ 0s4JT3etwFnqLRKE26mPgTMuE6SpgjAxs92ZqYq75iwG0EUiMadSWXRqjoru9wNTxgunuxMZvORg jpoU6fPNmSGfyRR1+YAXq2ZkFo764liCO+H81CivsvdiwaUKbqIhR7t2dX+OsVjj7O5YDRlMG+tc XPoZYZLX5Vf8j+DxKgyUGrr/1tmh0MqHxSmzS4U8Z7q2gsIqvysYS+5XMFMMDEBc9ouuortnUudX RwVXFE6O/UVRGjZRFxcsS5YzHaefCTO2cbqksGSFcIWv6gqhYPDF1PHV2eVCucc1TzvQu3b7GG3V wSraMh/eev6x1YsyEwnVyvWeQNdqmeMDmY9jrPkwKH+FQ7WLvfGMbb37+xgKDRnqmoOKtESRfd0J EW/2FNNm1EyiJAbnyIyl4n+lbgcg0dVH6KXgveFoXJbd2slgzWMfj6ExoceohbimjxPkmKqqLPNw DJwl9dor921lLBicLAhlvhszgRil3/rhNjRqrv8/4kqlj2VeRYODqKooRmrGXUOdQKsRA683Kwsx yySfjvzjzNeKEFCilfVPN1RNLS+hjp0lTazxCZKyQsGlEkfa9/4t8ymmKvHM40JFCigSddDswyMI 9YztI25DyNsJ9uazj8otWv7r1IgsRf9InSw7Eu9eSd2OkLuuqR1OtCUOqbJcq1QK16rSv0+9jzpU 9lTgei4azpwXTvyTuFVhgBRpZIO/mcUnzFi99l4hr1XAQVNYIAhPBnck2n4ZxTI+lveC+jpj9VKz diPAtBuB8f65p9txBGWIeDH8/uDKxF6f7BWma8XGWFALOnCohbWw+By/WieM7241T2bkjO1GDljc 0EJBGFWW+WotY7teoG520Bw5rn14s/vrbYueiu2Qo1/WGsj0eVQcK7wrNPPhPQyz7JE6ljjYmNA+ H8j8R0AY6/naY4r8YKZ9SouoE+IYN35aEOb757/BFKbsYG0YC2q66ZISV+v8auL45uBSqVS7GCp2 CcJFl32COhoONEYY80NREr4nBdQ26lzwLdPzJfVa94+bprAcY4qUufyvUr3CtGuFKycbOssuZGeU 4C4T/F03DXgZrbOuwbWJRIptzjzAVuOnDoAzjJxwHQauQBAuuaMi8zJ6LnF0+NIi1890+1U1vjm4 0Lfi6fh/UDc0ZC8gay3YSh0hGwuvz4wcjHWVMCrLbrf7YfW/H5szTqutLit4g2miLCwz1tnR+S/a SNnTmoce0C6EYhHpR4o0/VZx0sWuQlwC2dT4jZk+3Y3pxpOYQuYCTt1TtSc/YidfUU+PE2yT5eCD yvshdBDlxixh1mUVMwJOf99w5O3TX3WtA/lCmsVb4j/9wW1ieUmpoLBoY2I1ywySUV/WroUqK+5Y NOmWqszMnZdStx/opXtiZE9w85tkKbSC11XtZ//WndtPphObG8Sr/Koiaz/1g6IoatWRZGGGMGOt Uumtm3vhaoK9DRn5hS+Pc9fLCusa+xYhTqWp4t3P/hNqnVQtlgsTHpncVZJpXysXH3rgruli+UhB GMXB/HEwEFLml/K4uFOLxjuvO2C56Jh2BMSZUlm5ZEmdVygZc+6gyAkjhUEjCojaAihd0vWxXKxl W9gLvE0+eVaX3Ew3UMbCNX4xsl3Fs384j5LykooZ7v9W+FoQ9IXQU0+zPZsY024AovKO7pfAo0uG UlcbrG2o8CXl53OjmQj9o7+MWVVKuwVoUddv7PqP1lBovuxvmNf1gKDMWzaeusJgK3KMva7asvfq Nu2X2iDfL2fm/UiycGZBx6/ee9fEIlz3Qw48wqw6tYE61VmKn/os1/sq3Ys8/qcbvEKZLzNeqWsJ DZdQjEshyN21wrVh34qGVbV7tZvOvaRRP49TQy4UYWIg3MT2Tuna7EsxDBiMUCaFdjG2y3JHgiKr CVVtz3x5am5QDAAAI316fu38aGtoFYs2HTpKnP4D7N0D3T2l4pnpILx164PThekidYnAIVyCUCFU BKRQ7HfNjCXMDX+SHT71lfqLpaJ4byz2KymT/YldZ4DPYygwmK7sgdjD/mnFY1eZeSC0yI98fUbX m29Vlv2iWD71sQrqQoDDFVx6+ZhpYwSPx+A13z7o6PiAnZ7kNSoHtfwvUJLsId9tnysXMVM0WMPQ i8deM88l3f/mHrZn0YSq3+p3AMzOvAeLRBhLp9Ni5eLgk29mJkVxi5M/n7k8+7fuf96GywkDtwYV DBEur2vwN4wsHjv5z4msl0DsbD+kvhxPscQR9rra86WdUikIAUUqFyOH7l58t/avTK4QTq0jPIx0 bwEuqHC+f7wWVY+qtrEIi7f0dxi0RFui6SdUVY2vVqdNrVPVhq5e4NH6TC+gJIuf+t+WlH/t1LPQ QrJdAxiIoZlpPF3FVer2iBjKrAic8ay85twDIHGkcSO7r3anUivLs4Qadb26NDMFojfz4z4Qzjz+ zKyZWjobrwLA7kY//NXRJb4bJWVvhVQny3KbsqI5Mwu6R1Ka2hNqnSBcVC6WC0L5JEEYOfGT2gfq LQYwlPbD/YrbfGWZrg5iY/e3Sr11mTPASAFPfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCy/j9zPE7yCmVu ZHN0cmVhbQplbmRvYmoKMTIwCjAKb2JqCjQyNzgyCmVuZG9iagoxMjEKMApvYmoKODE2MgplbmRv YmoKMTIyCjAKb2JqCjEyMTAwCmVuZG9iago4CjAKb2JqCjw8Ci9Gb250Cjw8Ci9Gb250MgoxMwow ClIKL0ZvbnQzCjE5CjAKUgovRm9udDgKMTA0CjAKUgo+PgovUGF0dGVybgo8PAo+PgovWE9iamVj dAo8PAovSW1hZ2U0CjMwCjAKUgovSW1hZ2U1CjM2CjAKUgovSW1hZ2U2Cjg3CjAKUgovSW1hZ2U3 Cjg4CjAKUgo+PgovRXh0R1N0YXRlCjw8Ci9BbHBoYTAKMTEKMApSCi9BbHBoYTEKMTIKMApSCj4+ Ci9Qcm9jU2V0ClsKL1BERgovVGV4dAovSW1hZ2VCCi9JbWFnZUMKL0ltYWdlSQpdCj4+CmVuZG9i agoxNgowCm9iago8PAovRm9udAo8PAovRm9udDIKMTMKMApSCi9Gb250MwoxOQowClIKL0ZvbnQ4 CjEwNAowClIKPj4KL1BhdHRlcm4KPDwKPj4KL1hPYmplY3QKPDwKL0ltYWdlNAozMAowClIKL0lt YWdlNQozNgowClIKL0ltYWdlNgo4NwowClIKL0ltYWdlNwo4OAowClIKPj4KL0V4dEdTdGF0ZQo8 PAovQWxwaGEwCjExCjAKUgovQWxwaGExCjEyCjAKUgo+PgovUHJvY1NldApbCi9QREYKL1RleHQK L0ltYWdlQgovSW1hZ2VDCi9JbWFnZUkKXQo+PgplbmRvYmoKMjIKMApvYmoKPDwKL0ZvbnQKPDwK L0ZvbnQyCjEzCjAKUgovRm9udDMKMTkKMApSCi9Gb250OAoxMDQKMApSCj4+Ci9QYXR0ZXJuCjw8 Cj4+Ci9YT2JqZWN0Cjw8Ci9JbWFnZTQKMzAKMApSCi9JbWFnZTUKMzYKMApSCi9JbWFnZTYKODcK MApSCi9JbWFnZTcKODgKMApSCj4+Ci9FeHRHU3RhdGUKPDwKL0FscGhhMAoxMQowClIKL0FscGhh MQoxMgowClIKPj4KL1Byb2NTZXQKWwovUERGCi9UZXh0Ci9JbWFnZUIKL0ltYWdlQwovSW1hZ2VJ Cl0KPj4KZW5kb2JqCjI3CjAKb2JqCjw8Ci9Gb250Cjw8Ci9Gb250MgoxMwowClIKL0ZvbnQzCjE5 CjAKUgovRm9udDgKMTA0CjAKUgo+PgovUGF0dGVybgo8PAo+PgovWE9iamVjdAo8PAovSW1hZ2U0 CjMwCjAKUgovSW1hZ2U1CjM2CjAKUgovSW1hZ2U2Cjg3CjAKUgovSW1hZ2U3Cjg4CjAKUgo+Pgov RXh0R1N0YXRlCjw8Ci9BbHBoYTAKMTEKMApSCi9BbHBoYTEKMTIKMApSCj4+Ci9Qcm9jU2V0ClsK L1BERgovVGV4dAovSW1hZ2VCCi9JbWFnZUMKL0ltYWdlSQpdCj4+CmVuZG9iagozMwowCm9iago8 PAovRm9udAo8PAovRm9udDIKMTMKMApSCi9Gb250MwoxOQowClIKL0ZvbnQ4CjEwNAowClIKPj4K L1BhdHRlcm4KPDwKPj4KL1hPYmplY3QKPDwKL0ltYWdlNAozMAowClIKL0ltYWdlNQozNgowClIK L0ltYWdlNgo4NwowClIKL0ltYWdlNwo4OAowClIKPj4KL0V4dEdTdGF0ZQo8PAovQWxwaGEwCjEx CjAKUgovQWxwaGExCjEyCjAKUgo+PgovUHJvY1NldApbCi9QREYKL1RleHQKL0ltYWdlQgovSW1h Z2VDCi9JbWFnZUkKXQo+PgplbmRvYmoKMzkKMApvYmoKPDwKL0ZvbnQKPDwKL0ZvbnQyCjEzCjAK UgovRm9udDMKMTkKMApSCi9Gb250OAoxMDQKMApSCj4+Ci9QYXR0ZXJuCjw8Cj4+Ci9YT2JqZWN0 Cjw8Ci9JbWFnZTQKMzAKMApSCi9JbWFnZTUKMzYKMApSCi9JbWFnZTYKODcKMApSCi9JbWFnZTcK ODgKMApSCj4+Ci9FeHRHU3RhdGUKPDwKL0FscGhhMAoxMQowClIKL0FscGhhMQoxMgowClIKPj4K L1Byb2NTZXQKWwovUERGCi9UZXh0Ci9JbWFnZUIKL0ltYWdlQwovSW1hZ2VJCl0KPj4KZW5kb2Jq CjQ0CjAKb2JqCjw8Ci9Gb250Cjw8Ci9Gb250MgoxMwowClIKL0ZvbnQzCjE5CjAKUgovRm9udDgK MTA0CjAKUgo+PgovUGF0dGVybgo8PAo+PgovWE9iamVjdAo8PAovSW1hZ2U0CjMwCjAKUgovSW1h Z2U1CjM2CjAKUgovSW1hZ2U2Cjg3CjAKUgovSW1hZ2U3Cjg4CjAKUgo+PgovRXh0R1N0YXRlCjw8 Ci9BbHBoYTAKMTEKMApSCi9BbHBoYTEKMTIKMApSCj4+Ci9Qcm9jU2V0ClsKL1BERgovVGV4dAov SW1hZ2VCCi9JbWFnZUMKL0ltYWdlSQpdCj4+CmVuZG9iago0OQowCm9iago8PAovRm9udAo8PAov Rm9udDIKMTMKMApSCi9Gb250MwoxOQowClIKL0ZvbnQ4CjEwNAowClIKPj4KL1BhdHRlcm4KPDwK Pj4KL1hPYmplY3QKPDwKL0ltYWdlNAozMAowClIKL0ltYWdlNQozNgowClIKL0ltYWdlNgo4Nwow ClIKL0ltYWdlNwo4OAowClIKPj4KL0V4dEdTdGF0ZQo8PAovQWxwaGEwCjExCjAKUgovQWxwaGEx CjEyCjAKUgo+PgovUHJvY1NldApbCi9QREYKL1RleHQKL0ltYWdlQgovSW1hZ2VDCi9JbWFnZUkK XQo+PgplbmRvYmoKNTQKMApvYmoKPDwKL0ZvbnQKPDwKL0ZvbnQyCjEzCjAKUgovRm9udDMKMTkK MApSCi9Gb250OAoxMDQKMApSCj4+Ci9QYXR0ZXJuCjw8Cj4+Ci9YT2JqZWN0Cjw8Ci9JbWFnZTQK MzAKMApSCi9JbWFnZTUKMzYKMApSCi9JbWFnZTYKODcKMApSCi9JbWFnZTcKODgKMApSCj4+Ci9F eHRHU3RhdGUKPDwKL0FscGhhMAoxMQowClIKL0FscGhhMQoxMgowClIKPj4KL1Byb2NTZXQKWwov UERGCi9UZXh0Ci9JbWFnZUIKL0ltYWdlQwovSW1hZ2VJCl0KPj4KZW5kb2JqCjU5CjAKb2JqCjw8 Ci9Gb250Cjw8Ci9Gb250MgoxMwowClIKL0ZvbnQzCjE5CjAKUgovRm9udDgKMTA0CjAKUgo+Pgov UGF0dGVybgo8PAo+PgovWE9iamVjdAo8PAovSW1hZ2U0CjMwCjAKUgovSW1hZ2U1CjM2CjAKUgov SW1hZ2U2Cjg3CjAKUgovSW1hZ2U3Cjg4CjAKUgo+PgovRXh0R1N0YXRlCjw8Ci9BbHBoYTAKMTEK MApSCi9BbHBoYTEKMTIKMApSCj4+Ci9Qcm9jU2V0ClsKL1BERgovVGV4dAovSW1hZ2VCCi9JbWFn ZUMKL0ltYWdlSQpdCj4+CmVuZG9iago2NAowCm9iago8PAovRm9udAo8PAovRm9udDIKMTMKMApS Ci9Gb250MwoxOQowClIKL0ZvbnQ4CjEwNAowClIKPj4KL1BhdHRlcm4KPDwKPj4KL1hPYmplY3QK PDwKL0ltYWdlNAozMAowClIKL0ltYWdlNQozNgowClIKL0ltYWdlNgo4NwowClIKL0ltYWdlNwo4 OAowClIKPj4KL0V4dEdTdGF0ZQo8PAovQWxwaGEwCjExCjAKUgovQWxwaGExCjEyCjAKUgo+Pgov UHJvY1NldApbCi9QREYKL1RleHQKL0ltYWdlQgovSW1hZ2VDCi9JbWFnZUkKXQo+PgplbmRvYmoK NjkKMApvYmoKPDwKL0ZvbnQKPDwKL0ZvbnQyCjEzCjAKUgovRm9udDMKMTkKMApSCi9Gb250OAox MDQKMApSCj4+Ci9QYXR0ZXJuCjw8Cj4+Ci9YT2JqZWN0Cjw8Ci9JbWFnZTQKMzAKMApSCi9JbWFn ZTUKMzYKMApSCi9JbWFnZTYKODcKMApSCi9JbWFnZTcKODgKMApSCj4+Ci9FeHRHU3RhdGUKPDwK L0FscGhhMAoxMQowClIKL0FscGhhMQoxMgowClIKPj4KL1Byb2NTZXQKWwovUERGCi9UZXh0Ci9J bWFnZUIKL0ltYWdlQwovSW1hZ2VJCl0KPj4KZW5kb2JqCjc0CjAKb2JqCjw8Ci9Gb250Cjw8Ci9G b250MgoxMwowClIKL0ZvbnQzCjE5CjAKUgovRm9udDgKMTA0CjAKUgo+PgovUGF0dGVybgo8PAo+ PgovWE9iamVjdAo8PAovSW1hZ2U0CjMwCjAKUgovSW1hZ2U1CjM2CjAKUgovSW1hZ2U2Cjg3CjAK UgovSW1hZ2U3Cjg4CjAKUgo+PgovRXh0R1N0YXRlCjw8Ci9BbHBoYTAKMTEKMApSCi9BbHBoYTEK MTIKMApSCj4+Ci9Qcm9jU2V0ClsKL1BERgovVGV4dAovSW1hZ2VCCi9JbWFnZUMKL0ltYWdlSQpd Cj4+CmVuZG9iago3OQowCm9iago8PAovRm9udAo8PAovRm9udDIKMTMKMApSCi9Gb250MwoxOQow ClIKL0ZvbnQ4CjEwNAowClIKPj4KL1BhdHRlcm4KPDwKPj4KL1hPYmplY3QKPDwKL0ltYWdlNAoz MAowClIKL0ltYWdlNQozNgowClIKL0ltYWdlNgo4NwowClIKL0ltYWdlNwo4OAowClIKPj4KL0V4 dEdTdGF0ZQo8PAovQWxwaGEwCjExCjAKUgovQWxwaGExCjEyCjAKUgo+PgovUHJvY1NldApbCi9Q REYKL1RleHQKL0ltYWdlQgovSW1hZ2VDCi9JbWFnZUkKXQo+PgplbmRvYmoKODQKMApvYmoKPDwK L0ZvbnQKPDwKL0ZvbnQyCjEzCjAKUgovRm9udDMKMTkKMApSCi9Gb250OAoxMDQKMApSCj4+Ci9Q YXR0ZXJuCjw8Cj4+Ci9YT2JqZWN0Cjw8Ci9JbWFnZTQKMzAKMApSCi9JbWFnZTUKMzYKMApSCi9J bWFnZTYKODcKMApSCi9JbWFnZTcKODgKMApSCj4+Ci9FeHRHU3RhdGUKPDwKL0FscGhhMAoxMQow ClIKL0FscGhhMQoxMgowClIKPj4KL1Byb2NTZXQKWwovUERGCi9UZXh0Ci9JbWFnZUIKL0ltYWdl QwovSW1hZ2VJCl0KPj4KZW5kb2JqCjkxCjAKb2JqCjw8Ci9Gb250Cjw8Ci9Gb250MgoxMwowClIK L0ZvbnQzCjE5CjAKUgovRm9udDgKMTA0CjAKUgo+PgovUGF0dGVybgo8PAo+PgovWE9iamVjdAo8 PAovSW1hZ2U0CjMwCjAKUgovSW1hZ2U1CjM2CjAKUgovSW1hZ2U2Cjg3CjAKUgovSW1hZ2U3Cjg4 CjAKUgo+PgovRXh0R1N0YXRlCjw8Ci9BbHBoYTAKMTEKMApSCi9BbHBoYTEKMTIKMApSCj4+Ci9Q cm9jU2V0ClsKL1BERgovVGV4dAovSW1hZ2VCCi9JbWFnZUMKL0ltYWdlSQpdCj4+CmVuZG9iago5 NgowCm9iago8PAovRm9udAo8PAovRm9udDIKMTMKMApSCi9Gb250MwoxOQowClIKL0ZvbnQ4CjEw NAowClIKPj4KL1BhdHRlcm4KPDwKPj4KL1hPYmplY3QKPDwKL0ltYWdlNAozMAowClIKL0ltYWdl NQozNgowClIKL0ltYWdlNgo4NwowClIKL0ltYWdlNwo4OAowClIKPj4KL0V4dEdTdGF0ZQo8PAov QWxwaGEwCjExCjAKUgovQWxwaGExCjEyCjAKUgo+PgovUHJvY1NldApbCi9QREYKL1RleHQKL0lt YWdlQgovSW1hZ2VDCi9JbWFnZUkKXQo+PgplbmRvYmoKMTAxCjAKb2JqCjw8Ci9Gb250Cjw8Ci9G b250MgoxMwowClIKL0ZvbnQzCjE5CjAKUgovRm9udDgKMTA0CjAKUgo+PgovUGF0dGVybgo8PAo+ PgovWE9iamVjdAo8PAovSW1hZ2U0CjMwCjAKUgovSW1hZ2U1CjM2CjAKUgovSW1hZ2U2Cjg3CjAK UgovSW1hZ2U3Cjg4CjAKUgo+PgovRXh0R1N0YXRlCjw8Ci9BbHBoYTAKMTEKMApSCi9BbHBoYTEK MTIKMApSCj4+Ci9Qcm9jU2V0ClsKL1BERgovVGV4dAovSW1hZ2VCCi9JbWFnZUMKL0ltYWdlSQpd Cj4+CmVuZG9iagoxMDcKMApvYmoKPDwKL0ZvbnQKPDwKL0ZvbnQyCjEzCjAKUgovRm9udDMKMTkK MApSCi9Gb250OAoxMDQKMApSCj4+Ci9QYXR0ZXJuCjw8Cj4+Ci9YT2JqZWN0Cjw8Ci9JbWFnZTQK MzAKMApSCi9JbWFnZTUKMzYKMApSCi9JbWFnZTYKODcKMApSCi9JbWFnZTcKODgKMApSCj4+Ci9F eHRHU3RhdGUKPDwKL0FscGhhMAoxMQowClIKL0FscGhhMQoxMgowClIKPj4KL1Byb2NTZXQKWwov UERGCi9UZXh0Ci9JbWFnZUIKL0ltYWdlQwovSW1hZ2VJCl0KPj4KZW5kb2JqCjExMgowCm9iago8 PAovRm9udAo8PAovRm9udDIKMTMKMApSCi9Gb250MwoxOQowClIKL0ZvbnQ4CjEwNAowClIKPj4K L1BhdHRlcm4KPDwKPj4KL1hPYmplY3QKPDwKL0ltYWdlNAozMAowClIKL0ltYWdlNQozNgowClIK L0ltYWdlNgo4NwowClIKL0ltYWdlNwo4OAowClIKPj4KL0V4dEdTdGF0ZQo8PAovQWxwaGEwCjEx CjAKUgovQWxwaGExCjEyCjAKUgo+PgovUHJvY1NldApbCi9QREYKL1RleHQKL0ltYWdlQgovSW1h Z2VDCi9JbWFnZUkKXQo+PgplbmRvYmoKMTMKMApvYmoKPDwKL1R5cGUKL0ZvbnQKL1N1YnR5cGUK L1R5cGUwCi9CYXNlRm9udAovTVVGVVpZK0NvbWljU2Fuc01TCi9FbmNvZGluZwovSWRlbnRpdHkt SAovRGVzY2VuZGFudEZvbnRzClsKMTIzCjAKUgpdCi9Ub1VuaWNvZGUKMTI0CjAKUgo+PgplbmRv YmoKMTkKMApvYmoKPDwKL1R5cGUKL0ZvbnQKL1N1YnR5cGUKL1R5cGUwCi9CYXNlRm9udAovTVVG VVpZK0FyaWFsTVQKL0VuY29kaW5nCi9JZGVudGl0eS1ICi9EZXNjZW5kYW50Rm9udHMKWwoxMjcK MApSCl0KL1RvVW5pY29kZQoxMjgKMApSCj4+CmVuZG9iagoxMDQKMApvYmoKPDwKL1R5cGUKL0Zv bnQKL1N1YnR5cGUKL1R5cGUwCi9CYXNlRm9udAovTVVGVVpZK0NvdXJpZXJOZXctQm9sZAovRW5j b2RpbmcKL0lkZW50aXR5LUgKL0Rlc2NlbmRhbnRGb250cwpbCjEzMQowClIKXQovVG9Vbmljb2Rl CjEzMgowClIKPj4KZW5kb2JqCjEyNAowCm9iago8PAovRmlsdGVyCi9GbGF0ZURlY29kZQovTGVu Z3RoCjEzNQowClIKPj4Kc3RyZWFtCnicfVLLboMwELzzFT6mhwjbQJIDQqpSVeLQh0r7AcZeKFIx liEH/r5mN0mTVIolMLOe2RmLjfflU2m7icXvftAVTKzprPEwDgevgdXQdjYSkplOT0eEb90rF8VB XM3jBH1pmyHKcxZ/hMNx8jNbPZqhhocofvMGfGdbtvraVwFXB+d+oAc7MR4VBTPQhEYvyr2qHliM snVpwnk3zeug+WN8zg6YRCwojB4MjE5p8Mq2EOU8rILlz2EVEVhzc85JVTcEA+H0KU8n+lt57JOE PpxLXiDKCMmCRMhKr7sttBppXBN7R9oGkdhRUWNREFMY3BJiiubkgkVdXCYUtwllirRU3M8kN9SU DNMEneTRl1NRYTE5+tLN04aKdPNki1sm72dKFNG2l5nkv0wpRc/IaSPQKSOnjKJtr52Wf7mM3HlQ 9MH7MCM4lzgcy1h0Fs6j6wa3qPD5BWWG2EcKZW5kc3RyZWFtCmVuZG9iagoxMjYKMApvYmoKPDwK L0ZpbHRlcgovRmxhdGVEZWNvZGUKL0xlbmd0aAoxMzYKMApSCj4+CnN0cmVhbQp4nO28CXiTVbo4 fs63ZW3yZU+z70mTtEnbpPmSpknatIVSugCltECgQFsoW4ssAgoUxQ1UUFFxBcd9JSgqzrgwWtHR YXS81XEEhFFm807V6+hcZ8amv3OSFtE79z73+T/P//k/z//55evJOd853/K+73n3c1IAAQACMAxI wC7btMGy8FvuE9RzNwBEqH9o+Zo/C5ZcjtrvAsB3Ll+9pf/5/+DxARB+C0DN5Sv6lvSeI575HIDp G9A9VStQh2w/fxSdP4HOHSvWbNisXPGXs+gc3S/wrx5ctuRP/G97AJj1HQDUgTVLNg/RlxCbAejc j663DF3SN5Qof+oqdH4UAPo/mX4AGEmhUCpgAoWPZ7IGePxftf/bj22y/OvPm+hoBytAPSrt4Ch4 GR1bAJfv58Bp9P0YGnsA7Adm8Dz69qNRP7pOhvr+BK4COfAeuBXy0fdXqDyGrn8fKPJ3vwcV6J6X gQRdhXtOo+NWdM8h8Dw0wAZ0dhS1r0P3/QkugXFohEZ0fw6N4GswJEaoQE/+Cj3/GrgNjSvy73gP GMEzcBecCePgfeiFPBhCV10Hh2AIveVl9MTrwIOgGy6HDXgMPTGExiafgK7MoaeLwNp/QYskXPS/ oOf/l59iABAmDxBJ4ltiN1GUmw0eQ/Tan5o3r3Nux5zZs9rbWltmNjdNn9bYUJ+uq00lEzXx6liU i1SFQ5UV5cFAWanf5y3xuF1Oh91mtZhNRoNeV6zVqFVKhVzGSiVFYpFQwOcxNEUSEPgb7I09lqyr J0u57NOnl+Jz+xLUseSijp6sBXU1/vCarKUnf5nlh1em0JX9P7oyVbgydeFKyFriIF7qtzTYLdmT 9XbLMTh/Vhdq31Bv77Zkx/LtlnybcuVPitCJ1YrusDRoV9RbsrDH0pBt3LRid0NPPXreEZEwbU/3 CUv94IhQhJoi1Mp67ENHoCcB8w3C0xA7QgB+EYIq67fXN2R99noMQpZ0NizpzbbP6mqo11ut3aX+ LEwvsy/NAntdVurLXwLS+ddkmXSWl3+NZQCjA/ZYjviP777+GAuW9vjEvfbeJQu7suSSbvwOmS9b Yq/Plmw9ry31H4MPdXRlBeljEHR0vQD8E8NHfMP19d3oyt1kw+7d1/zw8lJ/8+wuK4LH3nC9BQM4 uysPG7ocagPo6X0XoXCElRUwPiKRTjbERRc3+i6M5Vv5y3ELvWMKZYjfYm9CU5W1LLNkwewue5Zw cvirjwO7l3HoMvTphujdAwiPnt1sDBOEdrJ2y+5vAJoQ+9hfftizZLKHcbLfANzE03Zh6tH4VDvr 82W9XjxjvDQiMYIskT8Pl/o3ZUvtQ6wlW9qAgGrvQjd1xwKIQFYrpvaeYymwFJ1kh2d1Fc4tYKn+ aZAK+LqzRA8eOT41opqLR4anRi7c3mNHbHUUYIOhyvJdF/6krFrRsCKWher/YbivMI7YuMFyhKKd u9u7XEt279G7enZf342mphGJxO7djXZL4+6e3UuOTQwvtVtY++4jpaW7hxp6plA6NnF8jz6bur57 BUREzVYWqNFgb+iZ/Nu0QpsdXmpBY5Qr/+dEf2gcTZqrZ+myFbhe0rfbXl9gaMRi2VQ9aqSWTE5v w5FgAF2/pAfNwAC6qHlWVzZgH8oq7XWFC1BHns8G5hQYbfK2rDKdBT3LJu/KBhrqC8ju7qkvAIif ZZ+FOLpy4tyRkEX/TCUIgW4MR1adRqLgatjd1dufNffoe5HC6Ld06a3ZVDeeRntXXzfmeDubLTk3 yV2TdyHcfnT11MUYc56Tb+ki9GQ3ZjXUYWlEX/a6OBpgEa/lTzE71sUtXVAPpi5Db5m8Ard+8Bx0 QjrT0/EQiW9NT9dbu62Fz/8Akn4SJtqZ5V/0LBZ1XICp8J7/FrTC1RigEktDX/1FAP7gofQkgJNP +9dwEpgWky9Gd/DxdE6fGiKdSJWiPgI9Jt+FZ1GLGdDSZe+zd9sRD6XauzBumNb5+W2eY2+eNb8r P9uTXNLxg7PCOHdhbLKVVaS7SD0x2cII4NGsPL3wwsX4pEtc4GMmrzd7s+SsrkIHREiwPdML391C q/W/vecYj3/RTccmvsR35avvb5uEMhvz/fC8+gfnP4BOvJtE8FIuorlj/u7dwh+M/TcS/QLxMPHw D2X6p0imG6/vRkjkxRpYdjdlAQI3hdQjJw/9j4870tz8Pz4M/quHYf+BQD4vIIeR30gCHqhP2Rje IWTmaeoQCYSCkhI/wdD3kSQBeNR9EPj4nQNaXyv7dbxlPM6eibPj8VYW8eEfQBL3JOPj8fJgpcwq c1pl1mESjA8TyLti+v9+5zDdj961gTxEHGZCyPtzgNQRHXMMKlMum4RSaheZ2oyLjYPGd4xnjbSR lC3ifyGaEBEiqcvs2uHa66IygczI+MgH6GsUJEfwe6AS+SiM3RYOycOhqsoKfAaVjIpEfa6IoiqC +6BLWOXqYSrc7goGXscIiHmuEBQQIlWNu4JaKKtlneWP10F+nbuiwp2agNVsrCi3dX6FC97QZolX IucKXJJrJ44xjcjHDKXEM2TT9N2yfvGAjJYdg+qUUg/U/EZ+J7+fT0kAnwMqqDKxH2TGzoxkQDKZ wVDyGHyoWI1aUwDY7ZCxCnkePOJYoqx0MBn5Q1kgFrKZvLnuNVtPeDSOKvrP9nRZ2fbPfvl6jhpz OMpKreWaMeI/oBSqYXiPIfpDyEqf76YGqH4BSWGg5FpQXNRdNFBE8lRFnBRdaWY/zoyPXgCJpTGJ wqEIopEs5HbhI09CjVohJ47lukpMtlCsLPCHSGptWWki7NCUnNi6hmgYl45pyq2lZQ7HGPzu9V9+ tr2sLG13RA17cm/nPsMQncg9Av8KbgRS4E+ZAiAJdiC2EohYsxiKAcmSFjJIDpHDJEOyiEhnMoD9 7iQGaAqY/CSSDDTaQ4kqo87nqLxRk3ukym7ce3k4GLFrc69WobcMwpPE34hLgRjYU1IBcyUhQXwq onxFsXieOVvOtOZ5MtAyPoIezlht2Nd1VFaolMTD1+Ye6Ohog/G2bnhK0toqaW1AT9w7cT+8BtyF ogBXSptkIANE4qKUoF3QIzgueFdwTsAISDH7wZnMCcB+jSGmba7veU4Umj49VNnUlMl/V4amoyd2 TDxEvs1kgApEUhZayZdO00BQq5TyaQrkvykNArqI8qlrohcDLddEQUBT6SsPagpEARG5xgRVSh7J 8ESQOeLkeK0w23Zl2smJhtKXf/Ssfn6Fk5X/hiz5EPaTsNKhseS+fOGr3NLcYDWSuJqJ31J3MQoU cxnAulS3E3j5Ud50MI1PC6W0WidVqb1Sp3qltE/Nl3J8NRdCsIuMMT7kE8upYfGwjnQpSnSdim7d gLhfMaDjKTgpZaYCVIxqo2hKx0XFe8WE2MSeRgyWGcsgFsuwX2fGWNREZLKQLhkbqbJaNGoZC0gb lgN5ZQViO5YgluXevX7l7vuhFvJu2ZE7n/vpmgVPPz26MPWoG6o/gPOg7cPxc6/m/pxL5ZL0lpfu fTv3fO65rx6BBBICCea2eycmSCujAUHQnCr1poVpWG5WBBRJRZtisWJQwShkBqos7TVZHWmZ161O y5i00J2WVsCiQGZs5Py2Ee15doQdHxlhx0ASCSw7OjaGYLa7bVgcKs0whCpFlft7YcEsxKiw3iHQ tyaSn3/i+BsnGg2V9wRLZBo1vNrpqe6sWtbVnhbzgiwc8EYiEArksT5IBF8M7IDkxK4VcXcg7ero btEs0Fivtl6Si6+LPRQmIiVezN0PTIxTrQyKPUF/qoXydci7DfOtPdpB84C7x99TuiF4aej20ttD RdPUTdYFwQWhHjmnXhHiadROeXWQC80MTg8x0aq0AAme1ZAuoWq06dJae1WaTSH8RtgPxkZAcnwk MBJAmGcyBV6225j8H2q4J1HFAaIbnUthXsUWsM8rsII+01w4J78sXqCt/GXIfYdb5BU1qMQ7YhN7 g51zmhoXztnr0y13bezcMvyTHTfGqpufebF6kPjV6IKZ9fOrCLNYyU/b5/75xtrDSyM9O1MVpeEh 2+yAbW15Q9eyu/qfmDZ/cFPN+gcUYp094a5BlLl54j2qmv4biIPbUkOMwaWv1Leo6g2rVL0G3koS dgq6PT2CAQ+lV5kjPlXI0KGfa+iX9ul7DSvtQ4INGnFEo7cLpB57OiBNA1FNgOpWdJsHDVvAJoJu Ni6IrPatjlC+VUj+i83pykpFOhWDMZbpYQimhh1F+mqsMjA+wmZGMJuzX48hCrIj8mi0OJAnZIa2 XdCkZmiCmM/DoUJXEiZgpOoCQfNELtAPERPLNyAyt2++JsDUeDzGMsfWuWtmzxtc+pPBeV80NEKi sWlXfWqdVemJ3nFV52+2X/OyTH3VrtxnZcmmXXKZJ+xsKC+vn77i9vmtMlFbtbm6eG5NVxVnnYaM XFtT7eL+l/69mccrf+3m13Nj2OIHJ/5APchogQnYQCYV65EPmgmzWSkWW9O2tCYNBAJA8uxKs9wn j8qD1iZ5yrpY3m5dpeixIi9JIkib8XV64GBHT8bHxsZHK2oCGaANsOcDlQF2bAxRSVaJaIJ0r0yJ macq7HbaClSAWIZkeUHiMRDwaHJkwUoK5qZdF14Q6YR/SS9fJ9Mem2lDFuWb2+B98NncjZmb5HXi T0UCKVfa0E/8KrP0u5/DZdMVAnJ2rnNUiPhi+8TPqZ0MHzSB1akZqiJnUTAVnt5ZNCfVWddf1F8n MKjSwTpYVwfYOIyX8YrQ3M8oo2KyhkRHoiPVm+hN3SHgRRrtiZSLMs+QpUEj20g0NmMzzo6OVKIP O5KfcDTdJ9fJo4EMkhys3C5YTY16aq7tSMVdmGHkl2BFUoFGqy58q5RYzqRQSRYYgOUxREXu/NXy hLvEGdbXDj15yZpgYueq+qrIGn+Zh2Nt9gHlLGXsTzH9Wr1iutwdHzMvEj76qPO686c3LL33geR7 Rr076k/J/bu2H7l5wXqjhru0NOpR3gurl9nnKGt4fEoacw1RJF2aO7fmiZs/yX11+DlkljdNvEX1 0/8AxcANIuDO1FC3eKFutnmOLePNVPUHeU26BnODbaanMbjEvMS22ruyalNQ6PXEPHODZ4T/ENKM 3JL2eIK69AAy7kFEU05M8SlGopEgqTMNOJb7Ly3iM3y5xJTm+9NmKkm1UyQVcqQlofSXaqiOYvpu G9UiGk/WI5NkHmMz47JoYCwandRPSISISEEvOWRYYNQFwcH2BBF/UleRTP7swlQQ/f92xX6S+uPT 1135M/hA0D10a7zx9utHd9bXQPj7zaE5NaGrDobn0NTgrOXZRq6/vmrhil/A9MbVb7y0bTNB5TKb a6uizfP6n/nlhpX0lqb6DddX2+3comsjpePXzKiac/u2hH9O3dVXtkeQRA1N3EftQjrbgmzRI6kr iq0+EBbMFsyXzPWsKB6w8qutYU91oNNPiQJqoc/q9Fj8vkCztcGT8jcHhBKPTFLmsKaLPWlZMRFA lGqjFlODyLw2B+dTi3ndqkFev7HXzCtLAyNrtBiDxhRyklVSHuQ50lKVWRVQJVVtqsWqYRVP5Suf dIMyLeMnM5i4GRDIJFsCyCZDmTwKUMnT1YnoledTrJuSUALzyp+NTHI0j4AoGFAW6IkoWgZJtum+ ZxpLwvUP33V0ho/LRl7a/cgTt3xx7OY7IVzcn3vtkUfh8gW72+d5VhTBX2+pmtkZ91SboskHbu+0 VA0M/wVqrr/0toO/y32Ry1Hznzp8y6xpQXXLvMptn2Od9Dy4DN5LDeT9lHSqDIjbxT3iIfGwmGbF FlTtE58TfylmxKTIKNczUq1xGAk+KkNCKDQiTlp3ch378RmQPMmOn8msQ8jlHW1XXgARQqSygGrh DN4bKy01GIuSviFZtLQ0Joj7135SGjMaSxVNci9HCEtjsVJxeZGPQy9RgFeJ9ZQTedmxlE1IiMF8 5MnViYUEoDT8fEWzOpr1maRmuKRZ68tgZ+7kGVnek2s5qYm2ImcOIoJOOv+T3jamaUEdID3o5WYv mV7lMBg8V/ZmZjZkBu+qNjkiph6iv6SzL+F0cirjdQMOQ6TCWrrxJ+URp82Eo6llSIcMkX9E3rYN uFNqmKbZtEbFkpA0k1KxWRwUk2I7os1JbLJAYPwD5N1AGmleu9M2ZYMUFRTWxXabI+8A4C5YD/+t uzvn1yxQu8s71FkcHnV31+W+rTNtNi7sHCT/CLu7IR1yTWfp8T8y3d0Mv3s2Xg6BIAZ+Spyj+oAW rEg11BPN4g4iIx4U96gYSkSIV2sAqBWLKIJS7GCGkVEN6qBIIKYIErACHXKHsfi0I9WUFCwWEAJf cd2sSUY+k8k7xy3sqEwTlUUxQ+cJOxlfTYUz0HWRRibOOT/P/dNQ7Ai74a7uKw9xDqfp/AvVxO0O +5mH5VGHxwQ91VtvjzmqbBM9JsyDoYlj5M/pE0iKS8GiVNgnrBEStJnRX60BsNasZ2jKI10vjqg9 d1ppkjF79cV87xoHyecCCPZiua+s7gfxR8vYmdExJGzIQZAhVhg7MzYmw0CDCxHPlMn43iEAqslw kZzqyfPH+pLE8Bc71wxsSr6qKam+47r5v4DTF3EH7ojbF/unWZ2xHp0FhpKehr6jgws3LF28s66k rbUxd+LNm9fVrx5sKMntqvYmKrhNEX8I43nlxCf0dISnFTjBSGqLU+m0byW2GnYTuw1MlIhKooZm QZtkBjtfMp9dKVnJCimnjeBhZYEYR2AgdLYuDYR1PDvl7MVTKlDa1H2op9bPW80jDAIeQYmcdptO rWS0RIoSCYHQrlYKeLTEadBRBG1rdw+6CYv7GCxOiUv85sUSKPG5OpunJjtPPV1xS+YMmmwkRdpk clSX1ESRRGVafT7fNfxt7Ah/5BpJHId3mfKC38Xw6CmFpiiwNgo0NApF3kdFfkeE+mRhvc7d/2Du bxVbLBFP8nbZ0kueGou1GZO3Ro2J3KW5T7b8zfSX+b+TOCJXfsfFfEFYo7PN0nyAIu7L1uay4033 ztL7YtSluUqzH/H6/Ik/Uc/QfwUBsDzV7JJVSVKydjBL3qNkQDEzg5nPkEzEYyeUkoheFHQJG4SE hgD+oL/dP+Sn/EIOmOGQedi8z3zInDW/az5n5pl9wZqZBSKsQ8yTeR2ZQ+R0jCZfH898kGcarDqQ h0HILqjlggahrHnVDRHGyBxO+ZVUe8pi0Krm3HTkyzlzNy9fEdscNfpirty3ua/e2bsbGsb+o7zV ZOca5KxaTy1tTklEH+c+yH2zM9MTNnV5az2lts8O3vkenAN7YYlAWLlg1qYSsxvr6ol76B5GifMO oDblDRdvtBAWTuHmCFGZQijwd/sH/KSf09stNq6IZYXDwn3CrJASliFdNDIy/vrI6NiknR/LmyEM vDs/cchhIqYEmEIho5KALqcekgWrnoBhlgrdlfu4adG6qNAXUwg6vNpr79RCw5v/fl/u/v7cXppk eZKuq8+vWLKet1Kj98V9A/D+gY3w1xtL5qeb+Ut+MZY7/3juBPla+v7cudzvxj8mhdWNdWe3QB3W XtdP3EO9xDSARrAnNSdUGY9RPEClk0SMUKSHJfskhySkRJU2i9pEe0UHRZTIZjakPaJpPemhNCFW OARpTsRLV3KBcofMkk6liXS5Spv2g3K2nCif1lmNZ3Y0E29BXuSZzOgIOzoaH3+dRZ5OtDDNIygq fT+jHUsmx7e9/74WaQ7InijMOlIRPDylzsn5RqyOwlBNwaOcVBJW5I7KQlWRix1PTdX3zLBAInv0 ntmvDglk8Lmf+/3xhZ/nKijaor0q8fekslWxcu6i3Bu5t7p6GFqkUCp7vabN7y/6601pnZGuo4Mm c617z1+9Si6wQKTyTtsROeM28IpWdMgUs7thbepAl0Zn00Prbude56VGiyWmb/CYbZimT07cRh1l nKACNKbcMrWSE/ODyGTrRJWAR3EuHwECUBLg8dUazg6M0GgJwUo2g9N8IydG8hmrERygnw8gaUCN 78lBToWf+aiVN2Xg5VM2XpOAF1CfLVde/su6I2uJny+588FFMV/o3VD9JwLO54tKyYjfqrv8RPP6 /b9AmNr4ZQplrr1SLlxYWi2Pjbf7qqt9r5Oq1/1HEMXkapW1bIbHbEd4tU38jG5m7CAEDqSG1CKv OioKF8XUYUsb7CLnq/tFK4pWKvstO8r2lknl6rSI8DjSZU6LJTgcJIOWNCkKS/1t/sX+QT+FIlmD z1ZliDq6HQMOntTBgUpcGL+BG0J2ch9ziHkX2ThfWFoVqCKwisgU3LsT7JnR8ziqR/Eo+834B5lt I9px5Eon8/EJJIDVRshYeeR7UhUClIsUCMVjpmJ+K2YtWpnIrc999be/fXN8eO+CW5+Le9WeOwaa Z5e0/DGWfPSZXXsiuX8/oVH7jfrwh4TMFyMyuZO5m6ACHSThfHRdfPq8klRxptW9PPer3J0vNs9e t/msJINEpSRi3RXz12KeODDxJP0CIwd14NbUEn+xPxwvjodnFs8MLyxeGF5dvDosrJxTXhxWc8uw dSmWhDl1GZEgOE5tFklEaU6mdnrCxb50ecZj46eVallaFEsTtKU2WEvUGtJmW8CWtLXZKJsv3Trl CiN1Ojo6Njo++j6KN8bHkPiNYF+Y/frrABK4vJVu9UH2D+VBkIEXUjxy1SRbIa0UQQYG913MZxcS z4RK43TgZOqkRqazUsqujpR4ODX9+He5hY5ISUnEzlfiSsXAJyHMioqtcVec3umdZdpk6s1t6J2Z e7elhONKWmBwZlMzGZw9P/fsgpJotGQlfHBl5GOuDda0eTnO2577efv4rCCxF1pmtq6KeKWYposm rqVZ+t+RA1WX8jrVYXWDmmTVnFBUbuBozkc8xj/G/wX/t/yP1GN8Rs5J7LpSHcdnAtte144hWuQ1 8tgYDnEL3gliEw1LTvIGVjCYXxQ4W8zDgxeFtXkJe1I+T1teRy+re/Cpx1/q69u0rm+2RUrXuO/x +ON7bFdbk/9MntcbaYmUvHRcm3vy3Pbrn71sy5zZrfA/P4crDO2Q5oLLGekGrDQg+GDiZuoU/U9Q huL56a2wlZhJ9rspxm0g/ESVu9NNO0gtKeMBEU8UMBIyot1xUE84fHqLT6klaQnNHRJlRQQQsaIe 0ZBoWLRPxIgCSPWiMHOEPTEyoh0dPVmMY03kWLDnz2NPvRBnCqCKVBZQvjCzKKasisBCGyItTGsm g09q54HcH3Pvw3lRm8EQ9fqiYjG8+lFotnk9iVzu6Zc3QzAQrWtT6UqgCJZKxr9eVlES/Ix84M++ eNy35OSJgR3HYYs77qvLffLaz7b/pcuv1jXZzC6Ef9/E/VQtwwAz8kKxwAyhQGcfOASy4Dh4F5wD XwIBoIAODumGdft0h3RZ3XHdu7pzui91Ap2ao0QWCaHm+DJOxDdZ+Rb2A/Ykm4+vx/I5jG0jmXUI +XXaqQgQoauQywrosiTCl3JOKgwKrvvq7A19/rhShxHUF/EJSMO9MqnPWFwS9rrN3iHYDN8iyjBK 42/nyg/MSZHbaZvZk8I8OTTxJPManQMJ8E5qn0tdpW4zNZsXGhabFph71cs0S7SrPQMhsZ7Hiszl HeXUhvKNoV3lu8KUX+pRNmIPU2tR2uZixzJGhXn5Hr+onLcQx1+xcLnfY7MoRTxK5JICXZG2knAR UqFWeIUH2ixa0oQeIir3x8IUGecpU35/MsWzpJCjHjf5krEf5NyRq3kSaYCATnsS80LeX887myCJ PshOj+Bu7Hn6MhCLR97hDECXCPImKRiABIkz9FPKVA8n86UKOTqmkqcaecEbZbqr7Cato6T7zWqH 2zut2qaWG/taHDv5XlNDubG4YW3MX+6prrW4S8ND+1eb5EZ3fWcpq6nuKnfVzuGCQ08cImzjD768 bvrMlLd2EC6Btzwz/mXmuVa7yf/wX+EtsPpMfWxGd+7z3PO5nXAnvO/mrqoZD0WfycVzx5/YbfHF 8ErcxGuMGOkLKeKynlSTjvXKnWqnzmuiGa1KG+aHiyk2wie0ESCyqJVag1PglDcoZxjmKrsNfcoB g9DAWcRQjBwCKkkNUvsoivJZaqPfa9sx7NSMJSeXAZBrwirkhWUAksB5mykLhNefSFvuDyPvnvw9 7IRNhx5+8cPvvnnsnr3XvfXXe29Y1V/z6FFogPOhHsb235k7mnso91nuVXrB1+dyX/18yyXfnIKy L5ZkcFTTO/EncgxZZBPwg+5U1OUs8VW4a3wUT1Tq5Cx4EYzTEM0lsITr0UOgZ/UWfVCf0rfrGX2Z zUFQnFzajjyTUhabUWxHsaZAJ5m8akS+GXu+4IMj0PM2QBZSyCPYcF7kapA2RgpJzWQGCt5jWMQP uT0huZIQa5otmzqfP5R98ZGf+hu0hGrtI+u3bx4kmotuz13tiUQ80HULUhTWbbuXlXaJhcJtu1/9 9pZdpI6ijuUuKZqbuXdo1gyE5caJM9QvGRp4QBwcT103M58oIpu9C2wdjpXGPkufoy+8qprvoxxV vniTrdZBU5VwfnRllGiOzrURtmipiJSapFE9WWJIkiFXKNxGrrQJveliolIAIRBGLSZoSiA5Cbqg xRV0pVztrh4X7ZJSQZrxlopVaXm6NB2QJqVt0sXSQSkt9dXUNkwlnMaQc/v+KJIY5OJOxuyjmZMg GWdHAogXYD73VMhAFfLlwGmG39vYglWNVJkh8v/zmT6qEL65cSWFFVPJKERcqt9lzT2bW8Wno9iR 8ygsrvR/XLcI3rp78CEYuVNXMz5/v5BXpJJUSyd2cMHwvTeJLHDaupHX/dXV/jYYbVsIVy+ofLMy 6gvTClnFb3JvHdi4qPzhFywOb4L2irfMCLRf+gZRb67g3Hs2r8X67KqJN+gS+mcgDNamWrxpjP8q aZ+HAjK1wCUokZYoaoKMTGbrISEpSFeYbYioFbwqgUqr2kaTNHClpaqAalBFqgaRpxstgkVpUMaW EWURnArNjOAFhtGTSG7OIwcOr87gVHNmrDwYcf0oyzyVQiqwHaJefoVZiS8p8CFWQ1fDal+5s9Iz 9yd3XfXY3i1P3zt441s//9WSrT+Z73kzcveaof2Re3+/c9PpV757/sBP/+4NczP1XLrzju1NSZpJ zrr96Vv2WH3pLh8kmlvWzrEViWQ7Njz8+Y2XNXYiSmyY+JZ+nv4cUSKR8rBVxjSdLiVSlQdt+yoP 2w5V0pVim1GcVtBpYOwxDhmHjfuMtDEwmeY9yZ4sOBuT3jzPjrRk3uOaDN+r8lxAEsjVKKBZQB1h SxVWXOnZM+68rXUaqVVL1IZqT0pYpNGSC05tm6UzBezbehPxr+MtMNDii8WoL8QiuDv3Vu7sIfuN jvryOs4vjUvLRyr2QhJqt0KLqrXEbCcJVkyrq/2+aoTbnolD/CD9N5AGf0rdr7LarDOoGUULwgtq FiRWUvy+5MYqoo1qrkNSV075BSlslRwqczFOidRWJsM1jXih11HkEeBGXXldpNCTrImEK5HNcpiL VUUCiZcCijojESW8RIoS1gk9YU+CC/eHqTb9Yv2CyKC+p5ouNqv06Dl+ylGXv5uppizlgpTKobc0 IAGt1vvqO2f+yJCxZ07qtGfO6IpPIpM1mXyS40Q6dnZ0eXP2vTW72Jzh/C7hJngEb3Iiwm7SRRai SMxWiirFlElDJ3JF1dR6qJRAbhFD7y2ze8q06UpZd/8mu9jjKLvGvKb2Ht5ArV0eqa5esmplrW3+ 3Eajw6kMdl79C5Hb6HXE+iyeSO43Jb2OHp3Jv+UAXAaL7s899/vcf96mUZca9Vt2wM++he+o5Zlp jsefncg1fgt7f9txZlpn7sUH/pC7FNYRTtPBjbWRXtmc1U+Pl136aRrbgcqJl8lvKCWwoJizO5UQ 8ErcUfcW93VumuK5OUkp148meYAHeaJKCdOv7/cSXm6xaDlywnFMb+VMZk1SQ5zVTGgITQh5jetG 8gvb2HdCIoq8KHZkalGikDKXhcCk+pfAwgoEVmkkCsXL0DiOJfJKiyAPKCpK1T03l3+2qg+2/HHe 6muVQhGEcmGYxzLcNyKRM8ze9bsNG3rSjlpLnb/EEgrvuhyCr2BXKdemV7meuvby6f5dcrvMEyKe 9/VFFfLxBx94wK6IQgHG+46JD6jFjBs4QBXyG9NepzMYc4aDTaDR1A14QQ44OVOQo4AoogSdSMcz eq6EMwuTwoNCUljJtdt6bASwschGsJyFC3Ikx2YQ9hh55DhmEPojGPmxAvIXJLWgtaeWxqVwyhbm F/ulEGtyLLv5BZlFd2yzlLnCtIgotsaahSQx756G31y9PffRs7M7vf0EhMF5iZabfto8yxsPhj26 ft1K+PDKJnj7jHiwZp6kSnJqorr6wbs+OZ97lbymTDPzybsfUNsUvzxwa+9qPKUTPyd/QbmBG6+b C5SNhk1W0mpgpS5+Fb9b2WnoNzBSJcc3cEDk4TNq7dXsbVpSyy2m+qmDFEmJLY6Uo8cx7NjnOOTI OnjAwTosjqCDcpTg5YWRM5mxC4u+mQss8L0SxgQpRNeFWCkJp+IHou3kdfuuue3FpVvuqHAafcrq q/t7F8zv2BWv32AqclbdeU3y8ivef/vDL8uq57qq7bLAcw9v3TVzmiXBVrua6uNoZpdPvEfNZGLI UysHy1MVJRaXK2qpcjW65rpWivq0fAuncnECiYoxAIlomn2enbBzZjk0yw/KCblIW2o6BiUpRSm3 j4BEe2VPJcFWBivfqSQr2cw6ZHjOs6+/jiZ6LO/usiOFKYb5DUuFnMHUyhDAy9rywlTD7xm7KuJO wjJIOcRmgnMmjNPv6njn2uuh/pMNyUUSRVHrgpzhkUeev6wjZmuRSkhIuLaT62+5JffMYxKBJzQ/ XLX7hjPI8alzNMAHb+5esicneuPNnT81y2uL5E9u2DRrFubteXjln1IhCrjBu6knG/n18lrnEvkS 5wZ2SLbJNGR/gD0kO1R8yJ6VjchGZew0YSM7zV7vmMvvZOfZ5zp62WUOIR+ohE6hm/Wa3I4qNuzo o/vsQpddJqGKLRy/WMkBPgNExTJokTfY5wu3ynbLHqIesvNkiJoUdnNJM9VG7aAOU+9QExRDubgS Q9Zw3PCugTL0iCErDoqHxHvFe0tol7hKTIiDJUMlx0vIDLLh61DQpR3H0vR6Zh0iM944gBcDLqxv Ti275dP/dH7rABakKZ+S56yKIPH55Po7tl/3+4cGdq6r+EnuCu7hwYbMpnq3PfLMHU9s/YkHVj7b 0lm2btvvIJU9zjXs7Z3tmPnsnA6ddVXYPtheT+596eWbu2rbsSfTPNFDPskkQSnyZNqNnEPMkQzp KAFR0OfpK6EA5wVtysXKQeUO5V7lQeVh5StKvrIM8FjeEI/kiS1WaCXxXayxsGvvFeM7xi+MPCMI sAEig3fXjJ3EQgLYbR9ktMjxY0eTqA/be5I3mTNwSeFFNh/5NaQsvwCVhBdMC+n7ykg+VnGw1bbg BT5fLZtZEiNU5DZr3+EeUqzrXHFmL709l02Ie5skDCk9n/i25uWV7WEPX3zFHVAGbcIly2iS6/l4 YMeSHsxFsfFfkl9RALiQhtyXGpAr65SEk24qJ4LKTtNSZX9ZX/mw8pCSp5a5ZC6TM2gpr5JVmcLB YHkTr9E0W9lZVsRyPGVZGadxuzmTxsS4IBT5OLMuoEvq2nTUYt0O3V7dYR2lU3Ihzo533g1xEOnR DxADaMcwA4zhlGaA/bM2X04GxjN5CwwykGR4F+JHNPN5wcKSl+cNa8WkYwfzCmZK8JDNflXD2EuX bf70qvnb5zke6T/eFCSrbu159tO7DkFlZrt1lUqT+9nLKzJr1/Yt7hSrtJ5OeDiXfXPHT1oy8uK2 bjtBPr91vLf3P1+HkgcfCwbJDdMu3Q13XLnpuZtuvmRg+eo/mk2YX26aeJWqYupQzHFVqldcRFTI K2wVFRWNwdkVO6R7pQelQqkIKBQiLsg4gExaykkNsM2w2LC0aIdhr+Gg4bDhFcNZwxcoaiS4mIA7 GDoceid0NkSF2EQwkUq0J3oSQ4nhxL7EocTxxLsJUQKngLG3WJAZRDwkNGMBFjW+t74F+5PPZ7IX uCgJFVUXUsB5ipknTZKZKOy/JN+dhh0YetGO3spui6G6JCHgkyTJU8S8syXoQRDO/tnAQwk/w1dK lFQ8MXP27TdldCt1L66vfih3ZWOC80hMxVv2E2cv91UuKPdGupa0DlyyZm3X2jWrZx595d2N3TJx Cd4T8MzEP+Er9EdABOxgbqqK4YBJbmIszqCz3XncSQ079zkPOUkBR2pVei0ntZqdAWfSucNJmcWv iIl28Q6kQpzY9EyGozgaxf4zViABNr+We9EmRHJyM6zrR3lJOCPY2BgMNjQgufP7IjxlxOeLKKmv 6oPBely+G41/EfdznB9Vi2DxolKOK12U+yMgJj4ff5zYR3+I4PeBOSmuHRlHAiFhsQVtKRtp83B6 IGd6HJDkBFJOpTGLOaBhNRZNUJPStGt6NEOaYY1Ag8NppOww4Pkc468C2Hwi4DM/gL5KBPNtjR7m NQL5w5018N8QBkGECYcEIuq31RNW/Zz5O39zkzjpqU6xHnel36yl/qM+gJEK1P/DvRF+QrgrWit0 48fHD+xZdxls1qs8sStsqYq6CsTP90/8hgox9SAERlLX2Wl7cCbvrVKKDMC3iNd9hBBIxcQX4Avx BJgQU82eV8Ar4l+Bd8RnwVkxL1BayuPZS13X4Nx0kAjQ87DjHwyUuuw8mkfoxITQbjXic5pgLHur DlYdrnql6p2qs1VMFXLaUxWwQiLjbBarhlNyRhtPwLXh5c9wx6QnnxlH4fMYTlCPsZPL3pmCKw+S LaMn8yvIvmsk25AcZNZBvNUBTKaj8iHg1H7oC+sgahxZkYym6nuHhKfI0/yXEVNo4Ehsqyji69MI BJgxhDyauHb7aavLnTRedvSjO5Ilsb7d/1E2565bSrlr58DmOQfgNbeVbi3FXFK2rSz38lNPrbj8 U1uixGbd92DuN79OemKIuk9NvA9vYZqAAtSk/FLaTAfoJN1GL6YHad4EDWkpIDleEcfjgrJ22ZDs FRklS6p2qAhVXurzecoARgyShUBkEp/8/l14nZQv7FqqFi5dJiTlOWnbHb39W+Dvt9wLb7+3t/fe 3AB6/5aJXfSfqE4wE3yUehTJVH04Ga5vK2qs76wfMA7a+us31YuCRcHaJmO3kWKL2FpLkaWWEnD1 Ri6p8omAqCXMJJl65CAXabkiIIMsgrNHtk92SHZc9q7snIwvayQ4MAPum3FoRnbG8Rnvzjg348sZ vBkMJ22EoNHcmGpc3Hiw8XDjK43vNJ5t/KJR2GiLczYOBNmgJRgMDgXpIGi1tAZbU609rUOt2dYv W/nYbOK9UOuQ3sus045tY7WnM3m7wY7nPbPzX2P1l99ZO6UCyUmXE4UdCvVFaxVuhoc6J7eqol7Z ZExdkDZVYVmwalLAFGqG3jlbIpfbhFqbx9nXY4KMSYHZodzUOH0Ti8LzmpJ1akW/u1ZIhN6adk91 5MDSh2vERoOfjM+Zt/ZNWNVQNz8Zsy9alPvm3uX+aNS/Bf52y8pqy/RdWnf8M860WlvCQRj/PB4e rfq03qNoVw2sevLupqajjm+eyA168C6byydeID+n6kEEee+NRWKiTF5mK6sou0fMLJYMSnZI9koO S16RMKw3IElK2iSLJT3evRIeEGlFnJDzuv2MnPNypoPIMSFoLgyCMIj3l2ELgsoobuAoZgR5t+fP T9IvAC+yIHnh+ZEKndrJWaCTipdfDiJ3d4oMEl77UP/CEMFjxBGfv6rIyIt6FwrIR44cSvoo6ItO W3RqY7/hasOHV215wV1dETBtNmGRQdVyuGa5ZbvFF7li47kbFh3ry8zJ/X22H9uLlonXyV9SRUAK jGAw1TEA+vlEo2QB0yHJyDvVHbqNgq3yW42CEtaljbJV2kYtzXJ8LWJDPsR+q2kA9PJ7WbJRfjOf UKKw5iByVEnKwLWJIRBD8V4zNF8I6DL5JFMm8ANmchVc0PzuE9dUGIOcDDlBPLLlGh6z+fp/vLl8 NkmuG779ltm1bXXdK5rn0pLqy3f/+ZMn3n5+/7sf3/M0uQ3esO6mm2alZ3bshVdin+vS8Z+RX1LN yAZWgI5UVZOj0d/t6PRTDs4gN/g5wAADI5CIilWk14PC8L0iQhTkUpZ2S4+FBBbWYrGQlnwUjsAe HxnB63YjSD0EkBwgNVkAfXLtVyFDSnBqAQ5hcXFWFu8ZVE2mz1xEqHczgfmbJMVSnSnqDpM00Xmo 6eTi5g2XXbtwRnhW0Zo12+qi3XZLzoZtI9wH9546+va08uqIR6A166qrn9s39uH1+8llJcaWT//h zcza+dyzIJ87eom8jTIBE1iY4rRqZA7UjERkVrI8irMg7T+1ea/HSBtZrUi8S2ZmA2ySbWMXs4Ms w/rMhW0CX+NtAvkkaiGHOn6CHQHsH5KjJ0/Kojg4w1rR7cZsq8A7bPPyjUW68AOKW3mZTpK8d3F3 NbGsi+5aCo9/Nqud+HTbMkVlh6Kx9srx0319xMvWXda+h17YelkIQ14yMULuozahCOB4an/As8pB xJhqTwvTJG/2zPD3ilc6V7lWezaL1zuvdN7ilOhZvScAfIzPHyxeDAbBUPFtlJDvNFMcXlDYAV4B FAiWt5cT5YylOFU8XLyvmCo2c3JRzIni+G7vSu/V6lvVDOPnByg7JwnxOW8oFemJDEfIiLrHC4GX 9Vq8Qe+Qd8LLeGND1RDvZMTa8ExmFM/9+AhObeU3ToxkkutOZvL7KDL55dvCbqD8LtHvs6E/2qkb gJMpVEdkykgi2S6LqKWi5rvvgybjH4buv2HjM1deemfSYy7XdqTLOlKZl1dcxc16PQ750ZKgL1Ic IQmnbraiMrVIRJdMH3jj/jn1fq7XEw9qpGKlMXltUGN0c+t+3a1v1sm5UuOQsRRrutqJ4+RueiOK vTalupwyjuaKGSkSTqGobK9q2HdQtc9HBVVJX0rV5mtXLfb1qAZ9O1RDPqHvHlp1j5MrlvE4luaA jJVZkPXMymjZlwHIBiyBVGAocCiQDZwL8DKZqWzrCIrvz2N5/zqQSY6NjUyt7irMUD2ZwyEnt81p vvebpfDC7n6PKqrSrFNASK3xVDPKplu7q7zvCWLe+VKSgJfLV1hqImQHJR0/4q88FXK7DriI6aRE PM8fk1U+7vJGbnGGYglWqJzhz/9mac1ElnyH8oIy0J4qFUn1Up+0WopYoEggKhIFfIyG0VmMnEx1 UAEVJc4yxskl8W9pITKdH2DTOIIUANbnUy4xyC/hFlIWSvmUCncXNloS4Sl1gJW7Jh9WT6kIHvkz ghfztqi23X9l52K52ySZ5YsZ1Wprynz1rZBQiDp9MYKYPj13brp6vtoXWVwbS10GBe9cd3hexFf2 Vvjhz6fLFb63X/3w4EIULSMAExMfkm9RFlAMXkjtaZNkJQSQU8VKykf56AXUKmpF8VZqq2SUFeEc wiZ2SzEVBCEqKAkVXyb5Ss7MkCxmFvMXF1GsJCXpkXwioYCkWI4XPWslVBGT33FXLJcUMRTgESIl g16J2qSELy/WAA0EKeRFtvGzGoKvGeIP8wm+L6CHurq8V5nBu+rYzBl0yHA+GC9tapMjhTRwBhZC 0HIUhDox3URwkg2mUr5YpRBdZFeT9Y6nhYmSuC7XfIk+Zo6WJB4MLeyEt8G3dcqSWM14wyEYbL85 FfO4clsxRWZOPEXXUTJQCY2p3+4vukt+l+Iu637Xfjcj8nX7hq0HrLc6b3Mf8PEAQNJQQT4of1b+ uvy86Jz9nJsZcm/w7FHsse6x32VnzHalO2B3uKmz6rPas0ayXp3SpoztoL20vYLp5neo27XtRspa ZBfhn1nV+YhSkG9YFUZ1nnI+vlu0HTdKfW7knqsVRSI+AYqcMj0TYJwMK5KJQqiX1BbZrejSUgKQ FT5RyqoF4fYwYQkj3W2ugMeR896mXawd1A5p39XSWl+opuH7HaqZqW2L7Bmcgs/vVM3n3zVRZG3P J/E2k8nEOyI5iuuQVOYpDwkc+7tdJLJfvEIagHSRF1SWGeJ0+2QaXj/pxdNc63ZDrT2+pkapss4+ UFRsqps5zeHQFlV7Z8qL+NLqwUuts9sMOrfH3LRTOs2bIHfkfprrW9AThgQs6tx/9pXcMpcyRpCw 9C4ouG1+jTcyp3reLbkkDMGbBy/f+NfvboAsYa2Jemg0kzUTo4hpZ4EA+FnqppXiPu0y17XkbvHd 5BMunsMZctY7O5y9jl7nZXrekPAS/bDwCv2dxD7hneKD0ruUd1nusv+MeE5/ijgllq7U95VtIbaK t0o3lOyR7iq5TXinVHg9eaX4StMp8Rf8807mcnK9eL2JFOtdBCWz82U+xs7oxehEWVImpKVKeqgM lp2zQMuwcp/ykJJUBvMrthlkGbB/fBIfeO91EnkJha0deQbHKRYphFPboEgecyFngLMGF/1w58K2 Ssp289OwsTjucpkX/um16nUWp6u62FDdoH7/yrZqV9RZfemTI1t9Fr87Ts6/7kiu02J2x52rYPkv wkOOuNtscYZqNGdfWheyeTyJO784ur42EHNFAJz4bvwlClAsNpSp5nY1LAYCYCKi4h7BkOBLwd9E dMrUYyLw/+BQK0VCkRRQFCcsVgqFxWqkxZScVKSUSkV6Rs4wSF9JBQKpybTDCqWBDP7hTQBvZQCB ZPIaSZkP75RFtdaHA0Y+3jUrGRmBZYj7QBkiigASUz9WUcALDDe5eQGL/V9zDw3X1+lS3poPc3eW 6pPusuLHXtvfPsMSKkmSl48rc18ce3V6pKQXniWONJWZSxL2v+Rmwu5ndnIxjxrrgK0Tz1As0opl 4LZUz15q2HCQ2mc4TB0yvEJlDXwdZQDbsKDqBHJgYgQRqdpgMUV8HidDIfQialEAx0xe4NTFQFjH GHSIcGJbQJvUFuSQ1oqDSDZLtb7A5CL01ObrEeTs4gwr3oWw7XUtO5rcdkL7+vjICTa/KVuW3++V T3QjTij8Ouf73YSFnfAO+L3noJ78ASk50r3nvuaBVvedbn8k4kfV795SsUsqIA0rr4rvv7u7qqT8 RGU9ZOvnkiWr3v7LUtoU9ZdyphJqbkXZX+Bf+ZqiTn+1RtE4C+T/RwQNwD03HWlbLI1/A7T8/L90 eeJEQzWu355pXzZRN75TsJ3/a4D/OxEx+T9f0H38X48/jro+n6jLfSHYnn/SRR+imQL4d90AkO+g s150yx/BZrIPbGBeBhb6etDL7AO30HHQTOqhgfgcXIILVQMC5IcgSETACXIuGIQ5sJfSgg7qE1BD 3gnuRfUDqNyMShCV7agMotKIyiZUhtB7nkdlFlkEFJQKLEN1jCoHId56sJb+CFxJi8Ar1HtgPn0C PE9NgOupU+BJegi0MU5wgFoMmunZYBH1KfiAWgH6eCwYYnrAZcwysAF5C708ErTQPLARwX4VumcD /XtwF10JbuLPAnvot0A9rQJGNFZPkiBL9YMj+fohcIKmJs5Q68GtCI9K6hVwB+K3AeoZsJxaCuYh y9RMJRGMB8FNRAI8Q8YmPqdmg/uJcvAUEwFbkH2+nAqDFmoauJQqAXFEmz3k70EJ+TqoRedryPMg QW8BM6kXQA3lnfiOagVbER0ZcjFcgmvqTdCbxxsVjDfGeQonDD+Cqe5fFgwjhu+iguDrQaWYSExc gsrVk7DN+S8FwfWDcgJUko2gnvoObGO6gZNWgo1kMXievgFMI68HZUwGLEBlPqJ3C6LT+6icwXPH fxqNLQNzmKfBLZgn8JyiYqfV4Cr0XDUlBy/Q/wClvHowQDPouXeAdioC+sgDwMN7CtTymkEawRPG 85/nPfQM6jSy8Ssn7qC+QTRYAJYiuitwoZeDpzGPTtEK00dwA7iCVwpayGuBH8GWJl0IXhdYAdeB FlSi+Hn0G2hO1k98h+ee2QZ01CcT/4ZgXIkL3YD4KYl48wSIYT7O82UzmCX4HPE9ng80F1N1viD+ u7hgGKYKmqufTBXMJ4hGr6LyGLUeqgs0g3FUeKisRefvodqLioFaMbED/nriUcSXK8gY8GH+xDxC xuE0+gSyqJiGCHbM34jHhvI4heHNqGxD5V46jN45WTB/ofE0lkveZwW5yfMulhskE5gv8zyGeQfX 7+Xr5ZgH8HxgeuN7sTxgeuRxRzJxoUYyyfwELM/DNQHezPMdpguukTximcA1+fxkXYJkBPEy5sML NZbVcEFOsaxcqCfhw3KLZScvv0ZUYxlA8F2oJ+kzVVOfg+fy9NeDBVQayS96NvkFuDtfYxn8C7gE 40PeATYj3ntNcCXoFZBo/vAcfQuimE+Ih0AU6bpW8s9Aiebk11P4/oBWuJ7C9Uf1FJ1/XOd1FtIb jBPpl4MTX+N5QHJZN1k/NVnvLNRoXpFuQ/rlzbx+QzoGlW1TdP3v6PgjelZfREdvno4Fus3/L3Sc rPO6EemnAo8h/tFDDSrzcKFkMDZJi7opWcfyinlj6r4f11PPQXLWj3RJB9UHai7m0Tyfrgdb8jLc Dm7knQGvMUVIfkmwmDmJdMWroBbR5JYLtgDLIJrrKf2PaUPvAuyU7qdfA52YBljHYBlB+uayPO9g XY91fi+Sb8z/GC7EH3newHqxBMygjoBBrJ/zc4v7kA3Ly+5scBnuvzCG9XsYmPNtfN8LwEIdBilG Bbi8nsV9+BpU4768Dj8JvJg387YMzcmUzsBzjCx4Me/XIMicAF5aBu7Lw/oBghvT+gNkszDemK+d k/bgHDBR74A6+p9gZ77ge/6MnoFpgOhyMf75903hj2QC04AJIp75EgzwUmAZ7xGwjFECF/9ONP/4 XXHQJRCBWYh/dHmeDyNbxQdXkq+Bq6mXgTXP35tAHbkL6UstWIYL+SWCoRSY6HPAT21FeP0MNKDz 0bwNRDTKyx3iAeYyMDdv9/4KjlBI1zKlYBXTBVYhuZMxc8AwmothSg9W8zjEJyJgy8vUZRMv5d+t B22Yj/F8YBpju8szIfevHHQjWXoJw5Dns7+C6zCt8D3YBgjqEB3PwdW0A16ByjpUNqPST/0ecNje oOcdFrQj+Xh84s/048T2QplqT/wZ+UTOH+siDANyk6ouHPsuOs5AV/7ohlfAx+EXRIZ4k5xL/p1a Qn2HD/onTJrZh44zPBfvKt7feX/n382/W1AsuEoYEN4lioo+FX0qbhL/oqi06J9F/5T0Sn4j+Y30 VlbHXosP2Yp/cZyX98p/rZit+Idyo0quekItVm/VlGgGtGntSHGg+KHih3Sk7pg+on/AUGqUG18w BUwv/9/j/x7/9/j/44GjOqIZ3A14YDWKEwnAghToQn2HYSkgAXwJSKEW7IAasBdqUkXkjkN7Dx08 dPjQK4do8FPIAhayKcGOK/ZecfCKw1ccOgbZp1+5IosHBBPHUxP1rLJRLuOnnr7lllBi69bKxP79 ocRll1Umbr+9MnHJJZWJAwcqEz09lYlVqyoTLS2ViY6OykRra2Wis7MyUVtbmYjFKhM1NZWJpqbK RF1dZaKtrTLR31+ZWLKkMnHrZaHEQwdCidt6QonFq0KJdS2hxIyOUKK5NZQY6Awl2mtDiXgslIjW hBLVTaFEQ10oMastlJjZH0qsXBJKnFDDxx8/lXjiiVOJu+8+lRgePpW4555TiSefPJV46qlTicOH TyWy2VOJG288ldi581RizZpTiX37PkosXfpRYteujxIbN36UWLToVOLIkY8Sa9eeStx330eJ3Y+f Tex54mzisbvPJtYPn01NJB6+51zijnvOJh6953Ti8ifPJa5/8mxi25OnE1c/dS5xw1NnE31PnU5c c/hc4s7DZxPzD59OPJI9l9iRPZuYlz2duPbGc4nNN55NLLzxdGJw57nElp1nE3N3nk6sXnMusWHN 2UTjmtOJ3n3nEgv2nU3s3fdxomvf6URm36nEsqXnEpGlZxP3Lv04MW3p6QS39FRi+a5zieSus4mD uz5OpHadTqR3nUokNp5NXLnx48TsjacT9RtPJaYvOpvYvuh0YujI2cSmI6cTVxw5leheezZx3drT ibvuO5s4dN/HiUvvO504d6bm7Jmaj8/UnP5tzanf1nz025ozH9b89sOa34zWfDBa8/5ozb+9W/Pe uzW/frcmdenoOzXvvlPzq7drTr5d88u3a956o+YXb9S8+UbN2ydq3jhR8/qrNSOv1rz2as3PX645 /nLNKy/XvPpSzcsv1Xz4Ys07L9aceLHmpRdr7JIGm7jBKmyw8BvMTIOJajASDQbQoONr+Wq+ki/n s3wJX8wX8vl8hk/xCT7gA9icPb4MNC+1ZP82x34MCmfNz9L2OpiVN4PmjrrmY7yJ2c1ZfvuCriMQ 3titfQFAOHHVDWrfDz7a/9L4nz5Hli5tGLAU/s1lT3f904/Htx2D1xztiz4R33oMbnuajd59jBw+ 2hK7O77pGBx6ujWKu4+y0eH4imOwAY3fc4xIHa2O3RNfdgyGno5HcTcafzK+4Bg0ogc9Fe86BhVH rdHD8Y5jkJ+q7Itm47NybPTGeMtXfdGd8Rl/0kbXxBtP90X3xdPvVUaXxlNvEtEj8cpDC6Nr48Fb 2eh9x+BwSjMndl/cf11HFPdsPG6NbYzHjtqii9DrU7Le2CLUsyhe9VhfFPfuOkYMpyS9sV3xmpf7 ovh5wTeH/jf0+H/1o62DxuYsO6cru8TY3ZztQw1gPKIGdd3PSpMV4Jb4C7AK7nrGGN2KWjq45Blh dD9qCeHMo8noZfHxYzB+VBW9Pf75Meg9Oj16SfzTY9DwNBU9cAweOhqIHYi/dwzyng5GcXdqiIr2 xB97vzW6Kn7oTVu0JX7z82y0I37lA8loa3zTfn60M77yqo5obXzJFmU0Fp+zwhutiafaiWhb3O6X RfvjxeaS6JKeObElcamiI4rPcH9dT0msLl7KeaNN5+bEmuJV9R1RfFewvfj/AYG1/8t7YMPAnDrY 3N51hI+olV5YqJ8hREJ5uqtHb+2u861fvx78H6hTMB4KZW5kc3RyZWFtCmVuZG9iagoxMjMKMApv YmoKPDwKL1R5cGUKL0ZvbnQKL1N1YnR5cGUKL0NJREZvbnRUeXBlMgovQmFzZUZvbnQKL01VRlVa WStDb21pY1NhbnNNUwovQ0lEU3lzdGVtSW5mbwo8PAovUmVnaXN0cnkKKEFkb2JlKQovT3JkZXJp bmcKKFVDUykKL1N1cHBsZW1lbnQKMAo+PgovRm9udERlc2NyaXB0b3IKMTI1CjAKUgovQ0lEVG9H SURNYXAKL0lkZW50aXR5Ci9EVwoyODAKL1cKWwowClsKNTAwCjAKMAoyOTgKMAo0MjQKXQo2CjEw CjAKMTEKMTIKMzY2CjEzCjE0CjAKMTUKWwoyNzYKNDE2CjI0OQo1MTEKNjEwCjQ1MApdCjIxCjI0 CjYxMAoyNQoyNgowCjI3CjI4CjYxMAoyOQpbCjI5OAowCjM4MQo1MTAKMzgxCjUyMwowCjczMQow CjYwMgo3MjEKNjI0CjYwNgo2NzkKNzY4CjAKNjY1CjYxMAo1NTAKODgyCjAKNzk4CjUyMAowCjYy OAo2OTMKNjc5CjAKMAoxMDM5Cl0KNTkKNjcKMAo2OApbCjUxMQo1OTMKNTEzCjU4Nwo1NDcKNTA4 CjUzMAo1NzcKMjgwCjQwMwo1NDAKMjczCjc3Ngo1MjMKNTI1CjUzNAowCjQ4MAo0ODYKNDcxCjUy MAo0ODYKNjg0CjU5MAo1MjAKNTM4Cl0KXQo+PgplbmRvYmoKMTI1CjAKb2JqCjw8Ci9UeXBlCi9G b250RGVzY3JpcHRvcgovRm9udE5hbWUKL01VRlVaWStDb21pY1NhbnNNUwovRmxhZ3MKNAovRm9u dEJCb3gKWwotOTIKLTMxMgoxMTg2CjExMDIKXQovQXNjZW50Cjc5OQovRGVzY2VudAotMjkxCi9J dGFsaWNBbmdsZQowCi9DYXBIZWlnaHQKMAovU3RlbVYKODAKL0ZvbnRGaWxlMgoxMjYKMApSCj4+ CmVuZG9iagoxMjgKMApvYmoKPDwKL0ZpbHRlcgovRmxhdGVEZWNvZGUKL0xlbmd0aAoxMzcKMApS Cj4+CnN0cmVhbQp4nH1Sy26DMBC88xU+pocIP0jaSAipSlWJQx9q2g8w9pIiFWMZcuDva3ZDmodU S2Bmd3Z2jDfdlk+lawaWvofO7GBgdeNsgL47BAOsgn3jEiGZbcxwRPg2rfZJGot3Yz9AW7q6S/Kc pR8x2Q9hZItH21Vwl6RvwUJo3J4tvra7iHcH73+gBTcwnhQFs1BHoRftX3ULLMWyZWljvhnGZaz5 Y3yOHphELMiM6Sz0XhsI2u0hyXlcBcuf4yoScPYqz6mqqglGwvwp5oz51gF1VNThXPKCaBhXl/UT rUIaN8R+KDBYIxKcggaDggTFBjc165KSum4vSEJRrRSEgFCGKBPn1sSNNbmePSFbXTSU1w0lHSSj E0hLSJ+3yG5bHF2SvYzMKuqrqO9KYTDLZsq0rQUFgSjHYPXvLxH3k65caV4gMohMhWiTEarP/U73 P43pabjMIYQ4VzjLOFDTKDUOTuPuOz9V4fMLCHPnmwplbmRzdHJlYW0KZW5kb2JqCjEzMAowCm9i ago8PAovRmlsdGVyCi9GbGF0ZURlY29kZQovTGVuZ3RoCjEzOAowClIKPj4Kc3RyZWFtCnicnL0J YBRF2jBcVX33dM/03GeSmUwmCZlAgCRAIJqWU0XuQ4JEghxyKacIihI8APFCd0VxPfBYxWsJECAg rlFZXQ8WdlX2lV0VV1R0jfK6LOsCmfmeqp4OQff9vvf/M1TV09VXHc/9VDUII4QU1IQ4ZExftjT+ ROzPf4eaRxASx89aePU1762ofxjgE5CuvXr+ilnr+//xWYT0RoSmLpw9c9qMo743v0Vo/iG4p89s qPBUBgoRukaG46LZ1yxdPrX67EQ4Lkeoesb8BdOn8Z/9CeAnN8Dx7GumLV/oadGbEPrzj3B9fOHi mQtTh0e8itB/hRBy/FbYi8KQIsKzKMwXI6jLfgXpOC0zc7LH6Xlakm/g7tZcQmgLegnPQS+hV9Hr +ATctRXtQS3o9yiIBkO/VqJforVIRJOh5g40Fn4C1P8Sh7MtqAI9AePwBDoA116ObkZ7UQCHsl+j Veh27n2463ako0J0ERqNFqC78WXZ69AU9Cl/K+qLLkPXooW4KTspe0/2/uzT6NdoD/f7bAdyoAia Dr8D2e+E/8r+FXWHOx5Am9Cn+H5lJzLhLU1w5aNoMXqYa+Bx9ursaWhBAl0PbeDRCHQAt5E0PH0m +gqH8EpuEDzlqWxzdj9cFUMNaDZ6GO3F1XgYSQhTsiOyB1AA3rEcnroJbUe74NeKXkFHsCacyD6d PYHCqBxdAv1pQX/AbVymY3WmDkZMgFHqhmrgzAL0W/QWOoST+DWyQNCE3oIp3JD9APlQLzQBWvss 3Pkl/he5GX6ruDf5odmByAnjch8dbfQ79BmO4Ao8Ck8k3cgC8hi3GMnwxl7wm4HmwHg/BE//BKfx LqKRg9xT/Av8GTEvczTrhBkpRr9Cj6LXsA49jeMl+BZ8GH9OBpGp5Ffkb9wv+ef4P0nToNdXomvQ 3egF9C/swf3wGHwFno1X4rX4PrwJH8CH8HFyERlP5pHvudncIu4VfiD8xvFL+FuFNcKd4vHMpMz+ zB8z/8r2zq5BYwAfVkPrH0CPQc/2oIPoI/h9iv6GBezATvjFcQJPwDfC72Z8N34Sb8HP4RZ4yyH8 N/w1/gH/E58hCH4iiZIEKYRfkiwm15NfkkfIQfgdIt+Sf3NBrpBLc9VcLVfPLYBWreU2wG8n9xkf 4Q/yWRjn3sJG4XFhi/CC8LpwQtSkW2Qkv3f2qY6yjk8yKLMuszGzPdOS/Qz5YQ4jMAoFqBZaPw1+ c2G+NwLGbUXvYw3GLoLL8IX4MhiZqXguXoSXw0jehh/Gv2Zt/w3eB6P0Z/w9tFknMdbmHqSaDCSj 4HclmUkWkQ3kftJCDpPTnMQ5OBfn58q4YVwDN5Nbyq3gNnLN3Hvcx9zfuFPcWfhleZUv4Av5Yj7N D+On8tfxj/Ff8V8JU4R3hS9EVbxGXCO2iv8t9ZEulEZLY6QG6V5pl/SB3AjY+QbaiXajLn/4KLea G8LtRPeQSj5M/kD+APg8Fc3gRhDAVLIFryM34RZSJCwXB5ABeCQ6wRfDWL9JHienyABuBB6Ox6G5 pJf1NNHHPw9FLf8Gauf3Qd/+AE9eLmr4ZvK9qKHtGJEaeOfvuJ58mnsXHeE+xRL/BPoLr+IgbifP cqMBC17hLxQmoQT3CPoNtwjfhHaSIQipZ+S7AI9H4ueBL4zHvfGPXBZxZCRgUV/uc3Qrmkf+C7UD Ha9DD+IZ/NXoHlSJV6Kv0DNAFd2Ea8Uy0Y/fJnP49cSLWxDhn4Pe1eAizAk+dBtu4B4WvycfoevQ QV5Fn3AvQusPkt9wI/gTwlg8GyjgJrQGLcquRiuESfyf8NWIwxNRij8K3G0l15tPQLkKuMoU4Gm7 gLr3Ah+4iBsBNSHAnMsALyYAh3gYfg8Bn+ABg+YAjV8OXOwPqEUcT1rR1YITA9dBiH83MxZNzj6D NmWvRtdm70fdgR+sza6EJ25BX6B70RZ8e+ZGtBDlA+V8gi8ThpKDwtBsd7KefETGkY3nzy+MdgqH 0Dfw+w0cXCi8jNbzf0bjUF32ruyHgN2lwGE3oavQpegY9PI7eMPFXBuqzIwk27JDuYXQ30/RmOyz 2QKsotnZ+WgU2od+LQlompSGOW7Gf4L+3ohmkrHZpdzMzBwYh3thFEwYreuA/9xhDpow/iKz7sIL agf0r+nXt7qqsnevnhU9upeny7qVlhSnipKFiXhBfl4sGgmHggG/z+txGy6nrjlURZZEgecIRuVD kkMb483Fjc18cfLii7vT4+Q0qJjWpaKxOQ5VQ8+/pjneyC6Ln3+lCVfO+smVpnWl2XklNuK1qLZ7 eXxIMt58YHAy3oonj5kE8N2Dk/Xx5nYGj2DwBgbrACcScEN8SGj24HgzbowPaR66bPb6IY2D4XHb HOqg5KCZavdytE11AOgAqDmYXLgNBy/EDCDBIf23ESTr0KjmSHLwkOZwcjBtQTOXGjJtRvPoMZOG DI4mEvXdy5vxoOnJq5pRcmCzK80uQYPYa5rFQc0Se018Du0NujO+rbxt/V2tBrqqMa3NSM6YNmVS Mzetnr7DnYb3Dm4O3nAsdO4QHu4ZNGlt17NRbv2Q0Jw4PVy/fm28efOYSV3PJmheXw/PgHtJamjj +qHw6rtgEIePi8PbyO31k5rx7fDKOO0J7ZXVv5nJIbSmcW68WUkOTM5eP7cRpiayvhmNXZHYHomY e7JHUWRIfP34SclEc100WT9tcGybD60fu2JH2IyHzz/TvXyb4bYGdpvTlQM0vSsws/Mcg9jlFBo+ tnNkMW1R8hJAiOb49Di0ZFIS+tSPZjP7ofXT+8Fl8FeP4a7mGTAjc5qVQY3rjf60nt7fLKSMZHz9 PxFgQLL92/NrpuVqxJTxT0RBiiedqAbnbbg5nW4uK6MoIg2COYU2XsiOq7uXL2slyeRCIw4FDB8a DWM7rb5/BQx/IkEn+M5WE10FB81NYyZZx3F0VXQ7MivS9c2kkZ5ps8/4J9AzTfaZztsbk4DJLYiq q/5mubjzn8sIeIfM7t+MA/+X0zOt88PHJYePmTwpPmR9Y25sh48/78g636/zXA5q9g6axEVJDiJR jp0FpJzSeTE9mKQ18yn4JzKkntEqyYCVrAbHhzYbjRdbeb2aSPwvb2rNnqB3seLcbblmNvdPn388 4Lzj85qnreegwSAqh4+fvH69et45QDXrhZfkCsB4NH5SIj6oGU0AykzBv9ZsWz+a6qPNJgzZIHoB 4J9VlTs878JoDq6HP4qd3cuHAqNbv35oMj50feP6aa3ZpquScSO5fg95nby+fuGQRhtxWrN774w2 D72rHsZqNu4PREHQwG1JvG7MNhOvGzd50h4DbIV14ydtJ5gMahxYv60Izk3aE0fIZLWE1tJKehCn B2g4hk5uJzK7PrrHRKiJneVZBTue3ooRq5PtOoymtxKrzrDrCNTxVp3J6ugf5TGDxk/qij2MJOu7 AzYSzBRsAYHGLiGUcCfcKcgwCN2zca7trCmgMyjOt4FgRCszY0ij8D4y0AWmWuLCyPBIsmG04sod 6HGnDKXplh53Xok4g4tzHPei+9G7QmnjVEPHqXbjVDuqq62r7dUTN+Bi4q7q26dvpSjBz29g/OkD fxgxed/qFSUXJNM4nRmzD/+Ind8d6ThzqH79xpdfyRRk4ue9f6aplZJSgyiqgZFHoS1QH+cwlC3o ce5KJ2Bki2GQCQD82OJyMeBYi64z4FvTpapkgstZ4CTOFz25Nqbh7yft9CaRu6qkGH6VAZC1BulY jdPpwgtKbli9b/KIg5kx+Cj+bN+ejesn/+lMx5HvMj9kZGjl85lP8K1gH6lo5E4VBvUFsRWPNosx V0sIVnEtUgkHB0jsJ/UfBbrjAtCENsMEbHY88RC05GTDyWNGe61Ri+pobrQbHe3Y7anp1bOyutLv E6WSPn367jow+vLeNX24AwcW3Vk8IjztCnjvRbiVzCXXwDyWm+GFZCFHRuAR8MokIhFhIVwQ5hfe HUqPNI41GF+iihHtvXqiRdDJ6oT/ItINt+7cCdiAJmS/4t1CG4xxHnGZukvTtIETXJrDMXCC2Jo9 brrpsRCix5JB8yitdVDIugqOT5oBXR84ISbS3KXRXDJovo1QRDTVSD4v+PJ1PajAzWx+KGCG6QQp bqTRGhTQNMg1WocqYHIOQHYABqUOGh7dJv78SSfhSSJ90pcw0wz4zgw7HCJ9pEFrkKFpNKd1nY88 98wWMR42YoA6QJaO34IgDUDyQHJlj5ojeXEtWedY53rbKSiSI0SGeC/zXxoeFB3vneKfEh4bnSfN c0z3zvfPCzdGV5DrxWWOG1xrxYekjcbboSPksHjY8RdXpLO5tLV0JAH4oYUOGwA/mj46SMEliplI VvVUMFIMhbCO0SvYEMXoFcqGAjebF7eTnnDLtNK9BAFDM+NwaxxRTsCuQDK9ArEr0Ib8t+6kuA6d bki3Q07BhkUMzA0CblgEZns/+och1den7T+UTnsNT5/K3oGAB0hBTBaWFHuNQGXvPm6jOFkoiRPm vb952falA+e+/8QHK+7b89zKlc89d/PKSxvI+5jHF7w4dUcmeySTybzx0kO78aOZB78/AXbx3O/m rKGc5VNAvTOAdSo6Yg5WrZazXGU9RCxXrV6wnDN1d9U8fhW5l2yS+Rd5rCBRIJwiYI3gd1Q2FCod RYQp52jNHmX8AIBvTDdDrxhDLydDL5hzM0yRx8YQhi0RTQACqBLos5z0WQKOC6ZAhLBjL67FtyOL mBZZ48j+4KB2RAeQbl2wBrtr6HiiBuBo7C+RdIuiVA3kW0nOtFz0/vgH/1axlL/xwpUFvxn2zlRo ZS1YMxKMQj4J7UESUAYdAZmyMEZulFYowGoYUQFq7GB0ZVGD4jb0kNcrTtApzrjdDPjOVAwDoHyf kE8xKEgvyM+nZ/NjTjiTr9He5reSl02NqMFgvMBwExIvAJ5T8cEBmh9AFRRF0nU039+bkh/pfKHm 8RD2QlNxuYn9nqOmw+MlE/J9tI4+ezs82uoAobj+rclG/j+9jVIkfR99G3uZ2WeAMEB8WXhVfFl6 S347Jl2i1WvjnfO0Gc4bPDd47/Ds83wR+SJ6IqK96tjtJVEjZuQZ+Yb42+wJGMWjSIZSgRmO5KuG LIrvxCK+WCwixyIcJnIkxun5Rit5escoN3a34tBO2gNEm7wDE021CVW1CVWlhMq4mbok+D4gLyVW /DJZjeLIwP1Mzb2zjkwlC8gqEN97SREqwPduY2TXcBKkS7rWOGnRW21HbV17R8Mxt4fiCmRrnT3S zpuM/Ra3RzYN9kMNuGFxjhJT/kRxX8CgPn2qq4DqmDQAkgS5AJJUlHjpbF8STD318PdbNt14yyN4 j/fHP75/6uJnX39ySv5LL11UO73t5v1fzJr3i0fWew9+9M1Lk57f9/S6ab0oBU7MfskHAPfSuGUX F2JMvjWHgRTY0YV9O8Ihk05eKIYwpY20Bge4W1IFaeHKV9Vu/vwYn98tJnTTk7oWCoOEjhuU2uJS MXsmXF5cQZnvgQr6Q56aujqQc+0w+e1vGm96aoz96d400ckvFfSAPkRfo/ND3Je7l0W5sYH5xlzf jMB1+grfGn29747or3VViHMM6Rya7uQlDO/FdE6plvQypt5DHVdDZ/x8aC95GoXJbFOBVgrQTN1j T7HHnmJPJy/2LJkaXxAn8RAlkXiTZF8q2ZdKnZdKS4oZ2y7GqNgoJtDTk7vpXcUbuodacb/t4ffx XtwPIRgwRyeP3lDeiu/PYUe6neFHjh+fTDd0suWOY5QuQBGgyGLhCnAWwA5gLnhRPWUv3r4ByooZ Ukh9O0EbPyiCSDRHycLiiS0FD8xbtfXJmyov83kcS1rXzJ1zl68l8c1vlr8zb9aMWzZkjh9+LYtv DW1a23zLyid8j5HlN02/5bbb4jvfunr7jKmP9Mh/5Z62zD+/pNpCBDiWIewFvq3j3XuQlj1tvkjH RxcZ4jAWLrJcsdg5ywXGzkWWKxZrZ7kkM4bHcokJLlm26ukAyywXWC6yXGG5JRY8k7TZ2sPac9rb mnAZd5n+S57zAHkjTeQkQXVwEsgTXX+H430cx3M6IprOS9zL5GUkgw682VQRz8Ml6B2VbyWzdguC auYVVKm24FAtrYIB3zH1Qm3FfU1dMguTVVJTolra4CKUGBy6rwqBQh4nHKE303sAOLaL3kN2Olvx XWy+v6UymMqNk5Ssa40vDSY2jJO1p2rdNXSSa2rW9kjzwA9cLhdMN5hie5Ce/WS7pwa47Qemo7KG K+xew/F5ebX0EfWADHCN6dNMR43WNLpGM4trtMIYlN1rGO+ox+mf/6E0aPvVuNJd6U+6OTcmGztu I4/+4s03WzLVeOqvuV1nL/115glgZQ90zKN8guqHCeEZlI/Pml4vm04Pyx2MaTAlxUGhc0zEDFLI y7RDD8u5kK3QMCKyLqKQlymLHpY7Qmy+6UVsss/nQnsQhtHW6fDimFPN9/tjHirCHC6ez4/pToyk EAh7plwygHEsKlwox6FUBSTVsR+4DGUy3TxMCLpYPjyyIm993kbvs943tMPaX6Ky4g05yyKc0lPo 6dgLAoUDTmN4Vb/H633H6fI5vT6nSwd2Y3ppQ0znZrArnC7Tj3ON2u3i8fuUFYF4Md20ee6pxgJj lXGvwRv/D6YSYkwlhFHICJGQzVRCG+KefbgaufADQHn9tjt3/ifmUnA+czmPvTRQ+wIYChuHBjck 4MDH1so90gKgHGIiiEkfvAhMo/qfok1XfgNMxpvwJzhgNMjvk0AzLJ7win/T/FtaXrrr8rtKn7uH fNSxe9Rt97VheendJ3/fgZuM9Xfuf/Lh7aPqAuS/X8wsm5I59ce37tt+lHKUEYBffpBDeaiMcHtA /T7BxsbdmgPi9mjJNlBio1GyE40Sln3CcidDJnY14xxUU1Etk0Q7J9MKXLgAT8UcjpbmmzrWddBi okJhvk9X8zFKGfQuZp4Y+UGD4lSQSbQgM0+COVviwAcHjN/ZuNXQbuxvoLjVfV4YD5ZM/+Dw4Phk z/j4PG6GNEOe65kRXypfF7tdXhM7LH8QcEtxOrElFs8QaWdAnFEowU5I9ERJPBlP0BNu2srROoF2 RvH7VHdspSLNbjOmAgftTNlDlLIxK9WJWaklBsMssJ8NYHDQwRO7qe5rbCgHztbP9OYzqs5njDmf sdj8VlxjFtYFpwYXBFcF+SAz/4JsFIMBem8wQFsabCVFO9KdloYlx7qiXrsl1Jgwg2HK4Rm9lAq0 rlwKbA4sgf1NzQtRopLMQzWdZCFyG32pXMO+LmjIndkRKr9k3sSLJlxFLtp3dUvH9Ydu+yxz7NE7 jr/0cUffUfeMXPz0kzfe8Dw/zjm354ieF3731+mNmX/9aX37zXg4Xomfe23L62c/bni+vvWxh7Zu hRFdiP7GD+DfoLFYU7uXawLzQhA5mQgvk8lQyZHJ24kp7sWjQX6MNv3oBfxCnCcRma9lJsd10uWT GenVto80TqFwRWREO/yFIlTTyclwBNY39mPsX8i9ezbDEbJ6C354R2Z/5rUd6KctaCL38sCGMYgz QluAEQ8tEExMWyBYLRBfiHNcrYgiclzAQq4FXzbA+2tHtNMm/IcWYFxN//EDzlZz+GyWe5eszkzb getw7Y7MLKDIbAdCQj3IeAk5SR5luz/aCvHZlhzL/9HWEy2Ap1gWPCfLRd6S6LmLTlvuAlmkOU8p ix0TJhowPb6I6QcqI+IAMwDZOQfTKlSVPYflipM9n8ESg7HTZTCJ+0NLDviR0ROhz62nWEo1EZHp JuKECqOncbU8W2k01nEbjLeFN8U244ThkIV6PJGMNmY7mo1/aP/Q/+FUeI3XeSfnUBWB50HJlEVJ 0gCWRU3CCNEeu5hFGZc0H5wiHEfr/LSOi/OaD+5S8gVBzhc5sZUsNBUka1+bBBOyFzsQxg7To8XR TIkbO5o/yH/Kcxt4zLdibDpGa23Spxq3QcMaPTZc0kGJrJKaJCL9wnX4z8xntCgMCf6FYGojYaO9 HYXqaiPtdcdqqS+pfa3QI50Gvr62R4iVTL0ANWOtsX+/c//+tYJVAikOb3aMG96cP2bypBbexcnS XjCeUPZHSqH1ePGihv+gQnT+JXElTnIJzpvgiktEiSOVfySTPn6h41dPfIT/e9PQwlilsPf0ULwv M5hMxhv3XH/3nRTLZ2W/EpYJ7wPH/37ndDI3j2CLoYvULj9uTqVQHPXWpwM9LM1rQrflbUAPCy9w v9b3cC36W/ohdCzvH3lupyfPnZfHlYml7rJYvGCYPtF3uX9ieLYwL+9Gz52eh7lNzodjW/DTZIv7 Q6cX+VDE8BkRHvDik+2lNcyQGVJaY7gQ5qPA/LhoPq8Yxa5LUXEcYxwpCBLmr2H8MKgyplcclzEg NRUvGm2lHM6fPoU6BUCnaxhBeR1QHgA5judmajucoj4W4GyLcVDkk4VFpLrKU1TZmw9KxZSNEb/P Q5ka3/L6BZk3vmjP/PlXW/Gg1/+Kywe8Wvn6L577fMo1X6556m+E9Pr+zGv42j99gSdsO/pu9833 P5n5/r6XM1+v30fl6GNAtZOBal0oD4dNT7wAD5JjefmAb24j34VksMEzP/NAnTILcx1TcAGz8ZQ4 1X4VlfnoQqyGElIJI6RIQZ7BxsNgAtVgEsOIM/YXz7lbTjENjAE5V8vpFkYnrdl/tTBnCyUTlTlc GvIHTAl1OlMaajuYZmwdNpwzmiH16jlohdmHi0qyKAsyL/NiOBQJEdGhaqqucqI/4At4A5wY5YIJ 7HFCFpJjCRxQ3QkqU9LpMvhbjRsq3YnewUAwAGKFOEkyleidM61B5iQew/9+YfLN9UuXjLzhvgO3 Z7bhmvt+3WvIiAfnj3wp856w15932VWZg/ufzWSem9b7pT69hnz9zJf/KsuHvj8JVhFd/eNALaZf FPJlWZIQx9PBV5V8B5Ilim0VhqdKGs9dGlfjOlEjOq8Qi6Ux3ZhhmPK/HsvTLYrSWSNaHq3coGoD rsjhZG5YR7BxZah58ti5MQVhXGvQoYVB8Sdy6Um+6OxjXPrsh9xtwt6XMnUvZvSXoEVPA3YV0h5i jRolbWbA66/iuXxF3aweUokqEOKQYWZsJJNtJJMpkimMZOKSJFJjivYJgB+otgMQ06tEquSUUZoS Me2P2NAEShlxsBFysBFysBFyxHP+vTZThSb834aKmiWEOUTFn2BfIDdQcR3HQatq1Bfq/ID6ECgs nY69TmxssGpgpGjOQgU1DRUMJXEarCh3AlIS8qdfJ6dff71DFPZ2PEMmnx5KdnSMgJb2zX7FTYOR c6MvTGMmuVpcSq4T1+nr3KJCGV9biwNaBfpbpIXPdymKPYCKPYBK5wAqxar6nwd4FxvfYgc1e+h4 OGz7x2FdzgCLxdIakylvjoa4F8e9pne0t9HLe3Exsvw/ltPUHqy/5rBquGdXfY5U242GRdagtLOB ybkt2tN1TMGxDIU+1TAsTHUrHrBVWjj9krmlr9e/dstrB/Dm0JaVg5bczP1wNtz6ztxPqETYCPRT BmMkoFtMDRPAKwHJcSoOybNmQgLLmhmYDA04hgbc/5pQTv2M6Yj/iel82WDRBaUGSg8bXyd/AuH1 j5do+x5CSHRB+wwuaGpymQMaQFhum6YyzBHDNtmpu5kS8l0LBQTqji2lkOahpwWXxikIE1lxOJGs ENUhsvkycpN1ehebLANR70Oubz/afTvbcl5ohMYx6trajEOH2qhql04zWZNGdqikQIozemI5x3Ke 5QLLKQKZSQoRJss4kY4TcZ7TmFSWS7ZCRb3QZgHzcAlYi6ueKhfLBI1D2AlMTgZuRztOn8YA9pCX yUTkQQaZaOqIvQiJ9oSwxyJM+3Ky4iTj9nW1tVZnGqze2FYB/EXNVYi4ZB+JyvwybY32exhK7RLt EhfXjU/p5c5J3BX8Mn25c60uO4gg1+h9nKPIcA4sMXmEPtCpPkQ2cRuljfIW7llJ9BCX09lTID5B IDLYdD0FGUBZG+sai01Q0WRZAW1U151Og85To6fJQzx7yRYwvnttF+JyK+4FVKSoTGW1FFQ1bmqr HNixFzrsxA64irRC4cIMCZlS22qhCUBx10IDG61k4u640Cg0CZzQSrbscFMmFKYRwYbaUAejLarb wVGky+GxBtD1YKCMLj9Q8ZnOt/YmpvJBAbR4TrV7BWnZM4Clh0G9P8w0u+HNGpwrhXOUn/+4zanS 2pzP6YNdiRpneYL5nXb1rXH27svAnd2hNudbSteDbogWNeCG+nqYHyAZHAj26YsTwAtxErsfwkX4 ip6BcDUY2cLLmYlbM5OEvWd+uO/i0b/izp4eyr97ppo/eiZOqesRkC0FQF0K3pfzRAOqHd/JPE0O m9HLIS0AijVVEPMoJIO+HZdk0LxlInGcrPCEKJLMwxVnGIPkbAZJa4CB0qq4KAJFfssISuiUQIJF miAhzGJGHw1xB447RjsaHQsdTQ7BIXeKaI2JaCZ9dGjU/4MF5QQQ/3MBlONE6oD6UJdYUrqWTTLo 9T+VOB7qIATtnWczbBH4HuqW2q25q+Q4ZDAH9b16UlUH5rBFNofWQL/bdg2tkc3eFti7RioM11D1 d1cYwN4WSGuTDDQdyRrJ6YPkpccnd3kBzLPAPAD9FPxxmz83/3aQixGnhQKVmIpC7H7kLY7sfets BiZ8Nb8KJrvpTBOM1JTsV/zfQe/vSX63B5XkQlrFdmyLeSqCFAoZdJzDLI+wXLc9PpoNOGwgZgMs LH3BOWcjYTlm+XRuOr+EW8rzqZJqriY2iLtEuixvSMHgoqEl47h6aUre5aV3eJ1JijF0NotsIGUD xTZQYgNJNtHWxRaQsoFiGyih9D6UQqV6cREp4kpSfVxVycGpIRWT4xOTE1LzHXP1ec5ZvpmhFY4b 9BtcNxnXFS1JreHWO+7Q17vuNm4vujV1v77RtdGfn2Pq3RPFnmhxRCnuBvIadYt4+N69itFM0P/1 7iuid0RJNBXQu+eXpHBKCAhUc7eM3/zuSn5+gGNmSRpswQZIuaKBeQYq2q1f1OyeKnLqDiEBxkNU lkSeIyJOFRVCHWi20e4RkyL1vREcaQ+g7syMYvRj4DgejRvxQrwBi6DPNJvO7vSV9NXQ4ksV2zfV VbP50fLMKcWoG+5GtQ6nk0zoRptdQJ/ZLdI7wWyMBCPABPNKwQjgYg8lY3qxxyY4T6dF7hlP6TLc a7qlBjeMOMaUlpx5ZltqORvN6GhIH6PZSToKYLFRQxkDWE+VmUXnbF3c9YBhvbdvPmGaDrUeikqK i6urrNhLzq7z+4IBPshCMaAGFRVP2a1P/f1NC54fN3rKgMz8MXOuvvmHXz717zXCXtdLzzU/UdMP fzSp6YY1Zx59K/OPTfjPxrV3Xz5wyeAhVyeD09J9n5q54LUZc95b7bzzntVXjKqsnFc6YOey6w4u Wfo15aA9QX/ayzw2n5hhkSlLEstFiblUpJyj5d+2GPq36WYeF4HqUhLLMWOcOjt9xnRTSCD5MPuI LTNVWsmSHXHLQ7FbjGNSwWEO4J04p48fNx2ME8o5NviDrYD9zeaHZ23+l7EEP32ivGtTV10MZgvY 3rGGLw22HqYup2Z3/tHQBbVTiDeTx6/PRAX9pZdO/wPe/0T2K2af+LBmqsWuSfwk+W2ZD7TmLJUq foA8lL9UXuZ6RjjukjRE3DRELSo+W5/22Vjps/VpXzGxZQXplBWEWSs00GP2YLpTQzyA44HRAdIY WBhoCnABnQ28zhBWZ7qqXhxXsWoLMjWeCy9ZAkO18VftFBgqn9OgLIGhdgoMtcFPBcY5084ykkcY DTmFfIQdQWSrmdKoAYMOTiyXA1XHmWbu5htfn5E588EfMqcXvj7spZsO7xL2nt32cebsU/dg/Wtu 1Nntr+686nXsA55yafY4H+MvRKWoL9liliu6UhbWI2Xd9LIyUK/8faP9yy4pa9Abyubqc8oae67X 13R7OPCryHO6v9S2N0rYOh8KPRN+vnRX+OXS/eGDpX/yf1wqDw7gfErqbtpLj+eck66aDu8oChUE C0Lp8rKqGr6m/BL+4vKJcn16ljwnvUxbq72t/Vv/d9rdt8qJeaOiqCrYO+ELTe22oBvpFqtw1jnv dT7uzDqFx51bnd87OWenG9Kp5daHfWOvGDtpJuiKCScLBjlFui7EWUxZjZNpI05njAu2kudNPVRO HxB6wBeLSaiz6WhIido7xjm6TTOmddX1LN8oRXy69gEgkRFCKlFE8SonaL618KqIpzNfRBet0QUT RdYaIJECf6WEBRBrV5FNRkWt5ArTWWLS2HO8uGfx1mKhhlqTlCeCADpsAyd3MSnbq4bpLPnJqp41 bTVkcw2uoUuSzHn00UHmqA2mQoUVjMNWMJ5bwVC4ouhV8aBICsQ6kYg+xjR8VkCW8RcnM+ZZUEQM MUNeo+0XmaYvOumAimyJjdir3znbmq6bsXhwOg3qTpotUGrvxGpmkqW/+IJi8rF0XXtH+pi1TqTz 3kWW+KrpdGozDk2dlWhRihmdlBf3Zb/qqhIrZnUhYcw54Pf7AsFkMSdKTgJgJXUBVXO1M/bM3bpv 2JKLq+cduRpXDlm3akVec+jaQ3ese360oQQL98WCV+1fMKX3NXNmP1mcd+uEoS/cPnL1SJ9TjxSl 1Gu7X1C/KLTozuHmtEt7LD9x5vYL+uGPS2NG6YiKixuvGHXB9dRDtwaoieq5BsrDb5s3YkFzFQnV whBBqCtoLiAFBYWxytjA2MKCDQVif29toDZyWeCySIPcoE9yNQSujMyV5+uzXdcGro20FXykHQke Cf/N+23w2/DneUcLsgXhuFDhqvD1FOpcpnCZa7QwSziS90/+tKEZficvEhSNiRJW/TGnI2TrXCFb Jocog0sx5C465MCGwwTlt8nBWz5BB6MYRyhnpJ6yPQonbI+CtRDPQSNWzLNAMWscnXvHUuwmbLEa Qxd3JfIw4uAZPfCWesyEQSXHkI6zFnulCGnDoEhsxs34BOYLcB0ehTlMmTWlG0xpKo9iOGaohxlX xh6KepihHqZdpLjNLg3Q5uEQbRv20dfhcP6wvudxUopWi2tHUJ2b1YHOwPTvLthK0RH+uWus5Tpg +ixajBYlksBZQeznE7+BkoUlHEj9zggV7v5sy+JtV21dZGZ+eGXfPFI14b5lL/76umUvCns7/nnv qHvfWZL5PnP4Ubzx1Ql3Hnj30JsHqDQfnT3OtQPXjeB/7EHB7AmzkJmXbAQVlrtYblhjyvJcVLPK ucqFXQ5sotFoIeIQ74k5pFCMd2CnX5LpgElswCSNDhhdzwk5I6wDH7xp6UP7G3rTRAOZwxQNF8QG eQcFx3nHBRu9jcFfkV9xD+tPG09HNFkPq3PJHG6ucJ22UG/Sn9F2KrtUsNoCYJt/Tjhn4VTXAtcq F+fClHcW90S0UY3QrA1oMzqKTiAFuVwOdK6NMWi6jZAuipAMV1xFTpnx5cIo0zNO2lz1O3M1w6Ui R7oAY4QxNp1p0GNMikHYZLGhPkzxMRlGmAwdLmZIEGFIcEnMz9DNz1DPz/idv+ighAukOolITnqb pNLbJCadJGtlK7ta6hWt2t+pulgI0sV5uDi3+JqtWuhXD2cXn6TussV2tNhdU2E0HIN/TM0EVLLD oDhoxTur2NLLTlWS4hRXuy3v+98cyfxr8dd3vPTXgq3hVZPXPf/0bXPvwbcHdx/EeVh9EZPVW5+I zpv/xvuHX78FeM5QwKVPmfcxD79qrlQJr6f0Kn2wLlT7qmOXk/HqWN+42NVkhjBTme5rjLUVfCB8 6P04/IX3C9/3wb+Hv2C8JVBQkI5QhjQ8QrmT1IMU6T0C/Um1PpwM0Yf6Loldrk7Ur9a/EL8KnMYn nQb2c06H4QKe45DcCJgOdx7T+XE3YzqVdD5/2M1mMeV22RecjwQlDAlShnHIjQ236W50N7mBL1HM tbiT20NZgpuJY8qn3CLFczfjVm6muNF5dDvpPLptt5Tbdj9RwGxkhLTUYy0ssta4MGzwFEnMALVW M78qHZQ+lbIST/FjlMRJ+Yx+mNyT8i26YjjDFAkpwnAmnF81ugunoVYEU9M6mQurtLyowHFqj+U0 OJrOsRrqa0lUU8EGks3CDGA72NclGN5v5v5VH14394NbGzdW7OiIv3jdsl9vuXH5E2seu+vMU49j bv2Yi4jz9FDiee+d19488t5+KpGGg0TKB07jB+x4zAwWoJifTOAahAZlgmMmN09YoMx0yH5rJT0b qmPmWArlxdjSBc9HwmnfqQjfy9M/3Ct2kWdE5KLYGM+U8NjYNM81kWmx5eJy/ylyKmSgAHbpweDo AFWSuUDMtcHYbBDD4KMxVUJ7yfOUSmzO3mayqTKAoB/wAlsI2itBzls6zdSaoKmDfsTUZ91epqXb zmudPkopKatq1rEeKYCjHaniKlrupmpQAS4IUNkwhT4oUGkx01x0i+GBUSSZRWVV9lxbVG9xgHiX eY+xebd4RYzNOIsu0Hk/X8I0pFkc5hjUAQ6cWtRVYQf7M51bmVPbsaiWRWs99mpiqtksttmCgSp7 I7dPSjBdHifYYgmRu3Jv+Xd7vs58j31//RA78dnj6vbbp9/VcYSM0fpNvGPlc3hi8KkWXAAyVMOl mU8y/zbiW/fOxg+sGTT7GSpzvIAOTcL7KIi7mfk+BbvCFeGeYTO8MPwr7RH9OV2O6KV6c7gtzIfp sJqRgqo8Wec0V0zFfpL2eXlOROrjPuzLetkYek0+FzplgxnULBWTRxy5HzMP2o5e/aqYJy0dK6ja gHDYpNQbNnWgXuRjtmQpsyULKT2j8pwV+UPOq+bLedW+YWKeOczZgm7Q89m6FvRUKLwP70UJdAqr KJROn+pKcNS9dhJsTEZ17en2Bmps1rIVujV0GfegFabPcIuKJMqg9xqKJ4rcoiuK0zhdtno1TgM9 Lq50J6srq6v6UqMf+DRl0366qG774497I7cuu2xKtF/vsYMPHuQevmvRvKqhl3seVYc2XnXX2VlA eQMzY7hvgPLyURn+ndnocAi+ckfKd5ljiE9U8sJ55Y5iX3myxtHHd6ljqG+iNMkx23Fa/aff2SNZ XnJh8sKSy0o2lG8ul/ok+nSrKx/qGJoY0m18Yny3OdL0xPRujeVN5UdKjie+S35f4g4GRH8r2dZS GvNKTBQbcdSTCeIm1IYOIbBkyE2mIcRiLnVIYUxTA/7KVGXX5c8/2Os/fjRL2ALMVCh0KIiNoBls DDYF+XKYEjKhnHHjIOPGwU5uHGTcmC4UYrXfWNyYXkUXDuW4cdAKbjDgtE3rp83ZDHOWunAKFRYw ZCpgyFTAkKmg6FXXQdenrqyLL3DVuUaBpmHtXWG82sVo1BWhuOIqpG93xeibrRV/LsabXeF0+dIE Zc/pkefIdFHOPWR05dCMRTPyPUXX0R3LLaU7Zlnai0CEB2lYmdkSJUCoxOLSwWo7CObtwqpnbXX0 HrT0pnUhJ17W/JcT1/7x7n03PDPzL5t/+82mZ25aueWlG5ZvmRQZk+o9Y3Lf5jtx7ccPYXzXQ01n 5/54cPkLXNkf2159740336BUuxYh7jjzejywBwWApPzBKrYsmhleKb6aG8Lt1XlW5Q+Gq4KyW3P7 OAEjV0yQfA5Vs2WuZk+3RmeujI6jllLMyj5VWQW3KTjABG7AZIsDSlnuoxOrUAvWzZYJMG1eidDr WMySTbTioxPNPH1sbRtdWMCOT+1igaaRzEXTrapPVXPgRIAsDGwONAeyAT5AfGyqfWxKfWzyfSnL 825Aq07QnZVxwN6jiGfRvpwX/rQZZNyCt0O/Xfzvpy07ABHGHggzO0b6h40OdVXcFqXtuO+i9Mnz ESC3babWsgFqsMfiE07RKaWcohbFugwcAlHH+GqUprtAKi3TIBDwu5NuNvWi37225ea2Zb8Z3nLd vNF314Id8MP9DU8/0jGVPLH2xnH33NTxMnCHdTC5cIru0MPPmmGiWoHPLouk1JxH76ztbDhrL6y1 AJ5ZSMwPbi3OZbnIconlcHOHrUp32Mu5OuzlXB1mHoUIM9Q4lossl1iOLYIdaIclc2+mAHtzf+bV 7UOHf5SyQdmsNCttyqfKCUVCSoGyUGlSHs9VHVWyilqggP4u8YRTRBqqMLuzt96MkSiIvCpKKQHx j/Ob+Wa+jT/Ki238CZ4gPs4fgiOet0w9Qt+cm36eTT+v0vfzTFDwtqDgbfcja6dKUYEfKf8UCRbX ssXZMNVpa+UUJEroi7v6gM//81ZX+jmY73UtLS383w8ePOPni88coVQKs8n9SNdOkDd3WTFspUvw /gd7vn4we7Gp7bKG3l5PzxQKcaI4WeFc+j+EUyKnaLTHoqUpM+ehBSg2wCJlbFvTBO56lXjEuDdR Ba87scNTUqVQlQpKj8AqEqzCvA1qRJ4XeLGvMowXUmJ3dZJ6PXedeoT7XJSeEXFSLJZSco3YT6nT R+n1fL04SapXbuJXCJuUN8U/8YfFY+LX0r/Ef8t+j6oKHMcTUZQURYYDRZZTkuiTJJHj+ZSg+gRB VWG6eRnDVAqiRFf+I5VvxS5TEXjmDCyU6dGQOLPGmBdJimwAZS63HoQxCIe1Fj2FCKskrJKwSpLC GPSKOjQKSIoue+jFWAOLtSPmMUAMQ6hPAlgBM/EQszVRWNM/Swyb1VUwgAAYYeTUBRpIWHSKBhLA qAOOQL3VNEznDtbQICxdww9liG3ukQy5Vq7lWJ4L4ujDFVyg3MYRJaTTyB0Yf9Z6f1NVyvNqFDkv r1aky9TyaqD4YHucFdsSuVX9LOy6CKXTLForZtu2J1iEb3uAFp9sN2pEq2BHGiu2OeywLTUz6as8 H/NY9gXgbT5fLcvgrlPbQ/Tmb7dFrctxQ73lWzsX/rAifW5ciXESS4Du+PmvM3Pxq59knlgl7D27 DzdnlnXMIAU3ZOge1VuBAPpSToZHmHpXPnYe77KiEV051XncydqD2pUXncd/qGQBWmHchu7d29G3 H9vDt6Oq2ip79rLKwpS1ty8FYtIlFAiPC58K/CjITghcgbBQaBKyAg9yRSWcJWrok5jI8YOe9zjC begEoFIXufPjObmT10XuWGhlaahyTj21gx7ZrB0GybEfNJI/n/1Q/kOdoJQDMe1i8c+5DZ2CW1vo 6sqcHiAWgzaZJH/bg7w5lmJ02d1kAW4byLOHL2YDURuI2ECevdw3ZgNRG4jYgGZHT3QbcNqAywa8 tv5o2IDHBtw24LXVEMMGPDbgtgHdWtAv2iv7mRbxX+YIh16V4o/xx5TPgl/EhQ+FU3ESlONJJRSN KxyXzI+Jfqr4SVhMRsKGeiiFN6Q2p0gqGIw4Uxvc2M0z90GIuQ6YP565D3x0It25DQYAEeZE0JgT gXni3fbSuy6uBNxg5oeYIRli3CjEkDWU2hDFUfaCaOcLouwFUerGctMXRJmWEmXepihlVkxdimr0 VVHb6R+lbyhFpDLJHp9kzC7JmF0yhQ8hTF1rpABRlscxlpf3M5bH/PMokNOJztrW00nTx5QjCyWd FhcsSrXi5TsSw87XkC1PKVOGu/hPG6xNbOeOO0YOmTn4y0WLETWsQJaOoKvQ3WzrY42tOmk+b7FP c0exR/fbqpNt8/5PgpbuXGJx1iDbCMk0K2Z8ddWxnuj9zNxlDxbc/M5jz+9ITrlw4S9bJs24bHV/ vviBkVOvmrR3666OEvLo/Kn9H3i640Gyffny0Q/f1/FRTqP+EigpgLeZXoETvWSL0Wp8zn3lPcGd 8oo8lZOFgHIrDPyQcSh0NJQN8XHZ5/QFPKBRYzGgq7pTc9pI67QpzpmLaQNUFGJadIhp1A6mSzuY Lu3o1KUdjI04CtkVufXyIlxF58pBo7cMORxqzut+ymSyy8HUdQeGf46RIcq2yqleHToRIgtDm0PN obYQH+JIpT/A8CbAcCjAsCeQslYpud25xXP/UZ1Wf6JOu7uo03yOu7WZnp+q5yODxqmuwXNLwT7J VOzzTqTtFYVs0Utd+zkdOyC6FVVWJZUTjWK36Ixil+rJIQxd1ruIClGGGLkQTxesWPvkdR83PjHa UFvK5l285Fm++MGtQxaO6H1TxxKy5tprLrr/vQ62fnpw9jhfAjOvozB+dZefbQD1WnvRRMrNjpsz KRRmJzySGtaGiRfLE8V6+WpxjixXGf09/QPVoSHGcM/wwJDQFGGKMtZo8DQExoauEa5RZhjXeK4J zAhdj/2KKOhXcOOF8eoV2nxupjBTna+pwRgvuYFRdY1Dn7Qj0z+aXmYMFUWZjR1lqCN1bm2XmK8z 5823wzIMyG0kOsFcI5LlSGNAm+ksSlX1lDCSDCkucdK5XVK9PgVuRa+4hrrJAHYydHFqViyUYXMR 0pzUNeNhjIUFE1CMYQdzhOX4B+OWiC02RSa8jjImgpgLLfexArbLA/WKUFdZ7jMFXTHBWJRuADWr 4Xz8sL9cQH2iVJNRxgnjlKuEqxSeqiv0Ki/bLIRyW4e6mt6Dn77jd3/BgRv/fuenmfY929eu2b7j 9rXbiReX3LMs81nHgb/fgvOx/t677/3xd+++A41dm5nDJwArPCgfbzSXakZ34wJjuMHXxZvjpCDe TUvm9fb3zhuYtzC+IS73D/aPXhq8NFovX6FNCU6JzpXnaXOMa4Lzom3x930fhz6OvJ9/zHcs/2g8 Gw8k+bSR9lfz/Y2h/KXGZOMLx9/zMobD7eQCMRqqEwMxpwM5wzZChG2ECOcWYgJUdEjFhmqqjWqT yscZWsTN3GqCL00HW2AQslcX2JZC5wpNK2ynUtyuZisNlmJvJanMucEtB7jlDE8h9J/jcXYYzugS hjPOC8Od+mkYjoX4geGzMFzBsL4hfF4crjMMlz557OcROBaCc9d0DcB5bXkQ8PvoVyqKS9xclxlf +3T/+2evOzT3uk9vnHxvD/czy5a/8OzSJdsyc4RX1o8Zc1f2oacyZ+68rH/HGe7pA/vf/fDdd/5M ucHFmTncUZh3A8XwcnO+g6RJWWgAGU5WaGKdvy48PLwhf3O+UOWtitblD/YOjo7zjotO906PNuY3 5X8gfuj5Uvxa+yZkdCOFWtpfQ6q1S8hQbTKZQz7S/hL6PPB1+MvoWeLCvO6LxBySU/TFeJjsoLMS 2fPdNdaVc7whGgZxYcNluhpdTS4+nzne8tmMu5jjzdXpeHMxx5uLOd5cTKFgrrAAnQ2XtdJbtC5v YBxuae6rIl2/M1L0s4hH1whYEeM3zMMmMQ+bFLBsNMv/nZf/U99azrXWxa9me9VO1v58atEi7M6F wvrkXGnnxTvKyx6c8Erm+wXv3/y7RU92JF5cvuSZrcuueyozh8gDRuIeWNqcufWZe04P4l46cOCN tz44/BbVlG+HyX0T5tWNPjFHVHixweMkX8UP4sfxs/ilvKi4ZUVWdK9b0REnYwcjRKQqpRtkLBfG vdhLCs/7CIs1XP+zZ6rTQvjRdHcRpSJjlufpX5ZzSuxihY70DNv/n5xTx4yGk4uPwYjR8aqxN48j 4+21Trbut2Ex3ehiUYXlmJZADt7+5IVz6q648sKBAwdc6cvni59YdHH/Z0uG1TUu7vgA2lyXPc5t g5HpyYHmY7nuLSU2zPLSLrtvLaC4y2ZTCyiygaQNFNpAwgbodl5zFfMyFfoK+yuXKoOLJhbOLFyp 3KPcVvSM94Xy1zldCUZCwZ7Dyw8HhSiZQIjRG6uhKfIUZYo6xTFFm6LPlecqc9W5jrnaXL2luKXE RRfgFXXrUzRZrXfMKJ5RujS5tKip6BfqI9r9pQ+WP9DzafU57amSp0t3FP+uOFBqWxCFNpC0gSIb yPVXtLsg2p0S7W6K1ET6xPTk10yWS1KaykfixX7e0SMvQp3sheFyFqIM14VHhaeGt4YPhkVXuCC8 IPxpmC8I3xsm4VcAA/yAjyz6Zfro5QZdfG7gQ5ggbGC2P2SHL1DFomKG012FcY8pefPzSF7ML/HW GiHm9/rS9m19aXopGvGxHo6CCI4UhU1vqKo3vb2aRVdCVk6pNcy+txSO0zvDcXpXmPlYwix+Rc/C 3O8lVyAp+8Mu5pkqKoMH7YzVHCrDZfSd9P4y+4NOZTZPKbM2nzDg5C76lLIIa0GipKyqsXdbb1LX u6k36U0DfEUoZJkmDN/j1uATa883bRfDlgLatjjDwniRi0kXF2u7K55jbqfNYsby2OaFnIefbR11 FX5qO4DCvXLxOOBCNkNiH7kxoFw80l6GlE4volG5LoZMO43Zp+nnaRaxRUjUHqcrRmlhLUPKrUIC PdUs6Z6fFHzlxW7DY3gNTizU41GklEpRLHSHLN8HhwlnMooKk7omd1OjuLREUcU0H0UFRh7VaNPU mWRlzAQqS69evRp14ZjUC9lwruK8j4GUFJf0INVVffr+bCEq/PKJpRAV12133XHjyuXVqV+8uWnU Rf3K7ht30yuT3c3akjkr5wYCFdHbXn1w4pw3bzr4Eb4gNm/xzMEXJEOp3pesHjlsRWlB+uIbrw6N nTK2bzKW51WLKi9aOWXy45e/SHlrUfYHUiZsQkFcQL8MYpn/ji4bljL2Vw8sQLQBujZyR7KYeiHb zHEANIUxwpquYg4FDCXtUkEX4hwuoxAVYv089US11BMNZyV5iDKkUVooNUkbJB6BUrtZapbapEOS KFGdh7JhydJ5iPXlBbYcxrLUcgATZZb5Y6nLVIWirtec1mwZA9JeMheFcJ9ts37itWHfcbOiB8eo RGun61epRHNXVhpvsyWZ1l8qaEXyaQDR3Zd9iYOtzSRG5LLaq+aX33bbjp07venS/CceNy6c+SSZ fheW5mfuvqvjFyPKI9SrBrz6KP0COb51D4rQMLc/WEXi3kCVi33ZyuOrSntxkewNaNgbcIAAc8P4 ocqAbZcGbCUj0GmXBlKhIDUgI8w6DTK7NOhhwbvOVYpBJryCnRZp0JcL4+WiO0HmrmD7SnU6ZNkg bgvi4MgIndgSaoxGTkTIwsjmSHMkG+HpIiIae2JTqWm5oFOnIKXfQ4srh5SjCq/YglTpFKS5eJPK okz0jUx+KswaVVhwRxkZPs+xlovg/NzstIQqW95VawlTRswR3nDqLp2I1qZTMD15LYp02R1F1PAs K1sNegrcmVuXUVLM1tgGz21/4+pWfnjlU6MMR4vDfe2YMfcMaHmk5eJrRlUvIfd37Li717Ax4+5d R2rOHIEZjdBIHsyoSvrQ3WQ/5HbIO3OK4DctuW9afGM5O0kg5/zs/DTGCZORAjG6rAYLCjJSZRGL KhIUWcBEKGI7XyrSHx8wPj4AWEl1CNrb6O5qAaNCd41KRZrurlECnliVTDMCL90BJc6VKvW6KfmJ KlQKGTMelMJUFQpABkdHzJtLe1ShOGQurRsqVYrVGlStXoyGqRPxRFIvT1Jm4VlkjjxHWY6ux9eT FfJy5Xp1LV5L1nB3SOvk9cqj6CHlPvVF9KT6CtotbVPfRr9Tj6AP1W/R5+oZdFIth+6oIRRQS1Gx 2lcdhUxVEUxPoEqAwamyP40G/aFdR9TOMV1s+TRikoGOBa1jFggdFVZLBEFz0FWmH6dhbCAdSB9I o4q6OoYNUbOvKslySlF9iqIijhDQ+HwYQ0NU0A5lmRAsSqrCISxUaFgrlE3TVJrox/xwdKcpNAlE AMhU4sTEhY5v/kTRsj0S7mjoaIiE2o81WAs+ajpjCe6a83dz0d0IuRWu5/66fjsjgSu9dAOWtxLj 32Tm//ZYqiCU/nZP5lq+uOO2qxeMX0bWWdEoESFhN2CaR5i6ByEb0yy7ngV/8zQrgkLdscx/KVjh P7aOk+vieP+GOqvgIiZpRTG3t+O07Qc+bW11swSxxz4hd56QxJwL+QfrGy4WshvsIxEinwuTnT3n PevyyUmP/YlEufOEpOUWK5y0o5AnLVJxF+ZOHLcDbcetcIM7bp3OSaBP7NDnJzvOkRD9Hs1Jyycn Wau3xZw1/QH7qhlvff2IrjSLa9aJthanFYtsMyso5DbZsermMNJAEceiC1BG10TKvjQ3JrzKu9Wc t9mSRW761aIDxuEDxgdsk2cdxUK2zvmcyI8Cv/PhMr6bSi51X+G+x82549ZXqnLfk+FtgH5Jx1QK ElVGLM8K/Zm7C4qqeFFTvGJUCXsEHvGiQ3E4ZY+BvJxPislRR56zCKWkMjntrELVUn95gHMwN0w0 pRHycMcg1zD3pZ4rXGM986QZ8tWeFeIN0lJ5j7jXtcvzT/GMUupwl6JSvcRZ6irxVPj6ob6e6+U1 8kPcg9qzeAvZ4nhG24l2iXudv+cPix8px/njrq88J8XTSswh0hZrLDdEazm+pc0xr1uOtqOq08V7 kFuW5JTkSjmpe8IpcTrWUnpr9rDZl8oEHUiUbSjHOvZ5RdXhLlbT7vH8WHWKe757pXu9W3WrPBAs nQ5rYs4NdQOzqCrSJyusfUHGMfqztD34FzV9nCCAYJAERVVlQGfVcNMFjMN3CMgDSusl5izV5Yy/ 4ZbkuOT2eNKC5BMEyQnznNKdPl13ymCkp1XZB7cjoZOdIIIlDy+73JpTZ83zgBylXxOg/MXjcjmd SPWdMnRMt6w36Zzeip811fgoFS9QV6lEbSUTTGWUGy9wr3LTLS4TTIch4EYW2+KAAz27E5/ynprF 9ODwiJMNDSHQY+Ef5UQNoS872Y+9rdT6UiFjTW6Wrx3RlSudXwBWrnUa+yWnUUsThWka3lwwblKL HtfiZF/2KNg6R5Eze6gF9XTFgY6Psm8Bsa+NDG+uGsf2Uh/aJtFPBEFFYtzw5kq2jFbOHt0mxa1a T25X6x76oF1gBcCzgRMc2i71pE/cjvqRvdabOh/eeV+Q3efOHt2hxvk4Yp88tT+25sx+sMtTg8oh 0Xirl8ZA622nVNra9MV2vJ6vff9Pf5QlM47sDVK2nORKODw88/Le5+r4yuf2PF59wa6tmZaXn+v2 Z2DRvzrmfodc2/HQuwfIrDNHyMqdZw8Cr3aBVvDfwKsNgum23ByvNjrXEJhWQJUd52S+34UdIk8U kYg6ILaLGXyuijTDbfZBkuhulwe7CsMsSmyODtdMdm3kN8qbnA+72oQ2sU1616W4zEBNhPMqfj1i VOP+jtX4Hodc4bmcr5fqHZOcD+KH1Iccu0mr9nvHO873jCPch8of9b8YX6gem0YdGvK4XSEd9EP2 GWEnhVwiIjpSVSKyXa0Us9LWAouoOUsUOUlWFCyKisBzoO67QP3SsculGw7QBInu4DRDFV3EpRpv ojcVYqSQ4kNI4Yj+po71lMb5NI1TFYXjiAgWpaYhdZQHey7Rb9YKVdc0UbnZVEEK7zbF0WIT+yrP INMZ524mhaNgsC9xr9yf+2onE8wgl40vjJPt7MsA58iCyuWGHNI35L6cVuNyrZUZsls5FJQCauXa HG61OEN5NQ62yTavRisM1nCQ6PH2RI3Bdob5a3BhokYxY/b22nQ9i2qwGDw9BLleGaQSvi+NvHMl 2IVvy2z67KkesfLUjj9n7sN3fnykf+ZrUooz/x7Wc2DlmYzW8Qd8aX2mgUr9RGYM9x1gUoTMA3s6 ZC2tsta+M3uA5S4+F3o9aVZYLn8WeGW5Zl1hBQFYrlsKu2aHdC1k1LoiY57qc3EOLhZ2eUSH6DU9 rrjD1OI5pAxXpCMfR0IHImGDFsyfxcRcdIcrRrcCfGJeE6sp9U10bVU5Uzdh5uOlPasMmkma4gno IU+Jo0Qr0ftoffRq5ya3o9RT6r04UO+p99b753jmeOf4V4jL9BXuG3w3+G/X17vv8tzlvcP3kLrF sc942b3X9436le+feofxb182lm+jbsDriEV512DXbS7OFe5svuVv8+RkA2iELpdmAG8HdTDs83pT HtUHBy4NmHfKofocDtVLN7U5RPoAFDNipCL2aozEWkndTheMhelrJeNNR53H9JCpnlc9xNOKB+5y 4UI0JKrSU2y0zLjWUxulcaO1rEY0uGJHBd0mQepaovGVwMhh8Drod6AAW+m3AULGyWNh+o3i9kjI aGcQClFD1EZduevaFIq7axmiApd2AncMAXd8GWz348iRPY678kZf9pNdfWvUwr41Tro531/jLrR2 gtdTUwqBYprD0y7qadpbYq2IhN859ZR+tzZZuMo3oLz24qC7WHBkrnn943RhQfrzlsz8i4p6rpxY lbn6OaO0KDrPlceXdmy6bvXKZWTemd9vHVg/juLy/QjxA7lmxCHkTbgT93PNZ0fTRP3229EdfJI7 jXQERhrunfsCKqK7wYI0Mmw7kIvJ3AUfLMtkdu3OZJZ9sKDhN1cdfvDBD6/6DXd68QeLoQ6T3Uve X3zZlc1XPnj48INQwHvPPfsnTybzrj33rPOfgNj/ACGEH/7+8r4dU121/5SjMvtfZ578vKSMlu+O HrDr9NaOqw0ka+x/PsPsDnafdGFmJBpkoNNbT99goFx9559eL+aq6P8ZlEvN5M/oSn4J8kO6RMpD 1wsT0SS8Fk0mz6OVNHF5yORfRIvh2ufh+CIo99J74foJkD6FVAtpIqRIrm4EpGmQxtFjuHYPvRee sZA+h5VL0GS5AC0QJmY74H0bhbfQLEiPAfwk/znaItaga+D4abjvVR6hvvQauGej+Dx6COofgfPT oe4xKCfB8RMAT4H7euZgRbobhWkJSYT6bvCcO3P9LeFeQ334JdnPoC/18MxLIa2Bd4yGciik4XCN F8qBkNbit9A6/Fb2STgPJboV3r+W1kManCsvhufcDufr4L4iOL4V4Ai0Q4TSBSkBqZS8iGqID+2D sgL6f7nVb0hvodm0z519gvbn2vTzZLVxeNcE73wFUpLUZL+AUunStp+mW3+SLuEqUROU8yBFIY0h B9A1/GUIw3htEr5AHE2AeXScPoF0AT8DjYRjDO0cJ7Sgh+kxpBEsLcl28I+gzdxJ1A/O3SBuhH7M gPHuBekUqiDfou5iCq0C/BoMz18N6TF45nGGDzPQeHh/Dygr+S8YDq2BdBe863t7nOjYwPFqmNex 8K6zlCLg/nGQhsG8NEGaT9sD76+gY07nHU/M1MC1x+CaKTRBfZAl6DvFSXoPvR+elcrh4ZPnSvQk XHM3jOtRKHlIftoGOzE8yyU49yY8JwxJhJQHqQekLyA9CWkepP6QhkMqhXcjeC/H8BVwhuImww/A DeEtGENoG8NZqw+Psfm0aOaJ3LPoexLii2heLiXoMym9UJyFtmyzn01piuKMXTL8nsfw/jvaT4pT nSXQHv93NIy2gdEg4JZdUrqDNlN62Ajm7DooHwY8vpXiLG2fXdJxobjGxgRoIlfWdulrT0YjUAIj TuZw/Va7tMeis5yNnoZnNopXAU/ZjC7ml6KLufvQVfwJNJjrhnoIPaEO+gPXNpO/o7FyG6qEuRwF x5t+Uj5Ek/Qhniu0QT9fgPH8ED0KY7qI/5AU8h9iQXgh+7WA8NvCC+RmBv+s/GnCbdY5WtLU9dz/ 1/r/P4kcFl4AnvlC9hvhw2wW+nM/pQnp77gnpLhdQv12SE2QwDDHD8nzcKs0ARkiQichLeBN1F8w UV++DebHD3weaAHqJwifoVe5u0F6fZj9CDehJvIhWiP50TSyEXgavIscRrfSRJ8P5cIueHQezv0U l+zSxteflpTn53CqAEoR6O8PuXQsl05B+ifg0XDAyTCVDZQ/M/kAPBrSGgtfs6c78fNt9Gso/097 ZwJeVXXt8XWGe+5NMGQggQBJ7oWEyxAgEERAkNyEJAxRCYQhQWpQAhVRsQaHWh9cKygoqBW1FpWp Dhj0cUkUQ/BrsNQBHLA+0apUqbb2WWtRqraI5Lz/2nuf5HIIRKz93vfed4m/s87eZ+2z99nj2kPM bU79dNXTha76eYa7XrqlGFvQvzvtFOlY6Xw/94/cx3Efyf0c9zOOvltGhb9Vr0M95n74FZql2nVv xSSk8QPV9tEPo7xn2rZVaj9qPWlvNlLszVY+7n8HPPaj+O7rWsfUSrtFjaf9nbFU+lMnZxz1DKPL VX/2kOhvDtPdYhydIdIXZ22lpZ6jKHf0gSK9G1QbRH4i3QvNOcjztbQK39HduAXtEf5gNueJKAui dB4XeEw07kE+81i0mm4y3oW9wGGHUbIYLwpoJtK+R/hhTGXJfp6ZtMn6hPLN6ehrd1ENlxV/B6eH y953NSX40tBP7Keh5mPQSaN46G0QeRCiR0W94LALYVIhL7xzyYs6ez50+H0bRZgQpaj8eEjkhQgP W4TrMOcF3mml0VRhT3xC6z3TaSba0EZvmDZa09Hm0mgz3vEwwk3ntCBcDzFe30MXoH2tQN+0An0O ifo/yz5qbMH3XId+HRhh5NEWSveEkYcLxbcXm7KPvYXbj1FHQa4j1j3oh9meuIduNXOpxFpIq+G3 2oN+EvHeBr9laL9D0HZXIrxf9duEuFfCn8MWsC3DNgK3F2+IulhhYQeQSAPbKYjf+Jg2GpNoBepx oe8e5MNyGoQqzUZjFhgqEe4lilUS4ZckpdbLSKL/YH99GL2OGDoR2TyG7jBvpAXmDMo3hqLtJtMg 87doq0fofiORqs29dL/ZSKvYbXahfrDXy40nYVuy/z4qZ3/9dbjvo1nmGIRfQVeY1VRrbEPde4Pi zfkoa4Tz3I56koPwh/FehfYhzTJmoG3djPsj9uOsJ+J40p7JmBNokAgXhUirgyvNehm+ahLKFOnl ++PSi7S2ptNJYzvpE9/J70U41jHv57/uYh8AfaRsmaKvpi1gg/4OjTPOox9rm+0m5GupiwnRbnO4 dgMYbA6np8GNuB8I+SuwVbphuw2nd8FyvPtZyAZLLPNrpBfRWSzhtw7cB15ynkXD8bTnH42np910 nPspjDVA+8JuYtz6yOezEN9Z5jl2E4O6OImxllKq9xpKNfrCPwvhXG5PT7SnpyjHIPsfHaXpVODf kKh8DEV/o1MekF2/BQeiZIClGhu+c9q+KyjfpeAHIn//RmmyDlFn7U37AOQM7U1KMq5GHQRwD4K7 i5OfTjnBf43wd5Uf6gpxnrv93W53uXbk1huoOhqnHrTWh7toLGMWQB+43b49NJaxnsOz5050m492 wCwaYKzlNKEO9j3RbU2mvoyeg7T24DBoc6DVvQ99BGBdET6BxjPcdhn9SczXQOvz4VTCROXrWZyv xlr53Ckfp1zc5YP0hcxXaSJkEHIUZAXkJEdGt1l3u3X7OX1JezqutjHkZO/8/wTazl7wAnj+3x2X RqirIAlYB2CHFMCO3A/75AL+nahj6Eu+yQOPoB+aBvkW/DB6t/QHCbhPht8PIR8kOvol7q+C/36J rZs9aYOyK7vDb7sK61Pvq5Dhj75I9PUXYKsMf7QOXIr7zwHG86O/h3wW8j7o/wXhlkH+Wj4/Vg33 NeAZuD+B+zJQifs7IdMgB4IuIAXh72XYHjlhHvq9y/bnH99WwmaZi3T6ec0L8gb3HOJbS6c8O5Du uYZT/h3JqDUDl5T5gDnTB7D7ItFzn1PNcRyJ8myJxpxuH4NNeQbb0WzLsv0s7EclxfxN2LGIlyjV kWw7s/3KtjPbr5AbxZqBR6RnOs/zRbrUuBHdt2pf0DqQBHoquRA6R/S+9qvoexJRv7/E3OghBu7O YIbE3oexKxFjXTP63S8hX4E7E/JLZ0xz+tYT+tgOxrTv2326Y+R3GFPzFdUuTubvMFIxkXGPxadL R2P3dx7LTzJGR4/T/6rbGecd4sZSPuMN2U2M2y49wQ7owN2RnXu6brfdcdpul13iuN2c8Nxd9xx7 pgf1aMXV7k4XnluYT7XZ/k4a3O24tb0pN/KoJBr0A/3UGLoJ/QXsfzsTYIyy74LfEt83lO97gvLh fgpg3Gz5FLKGn0Gu11bz+jb//ZuWn8KdZL4idCsVNR3VZ3e9Zftc2IfIM9EP3snppzwwGqSAbeBy p6x5Dom439Yx6vI815xlf2m+Clw2YIdyOP0IPAF3ItyJ6ItTrWT02yF6lNfjIeMh49G/T2lb47OP WdcLnUlibXkxTUA/f4W5n9e+7N+INb0W4v93Ku+j3IQx1O+s08GdxmtD3gCvl9iNan1ujnUY4+BM jIdxPHYg3hliT2ihyeu4h+luoxMVqzXkVGctmdeneLyyBlOSWMeIXkf+kIaas6kYFJhyn2o6r78Y fxJ7NbfwurtxPj2j9rci8XW0Lu4FWueroVLfUrHfdK/xAN0Evwe8t9MDVq7YX5nujKs8Jraz9sdr mT1a1zTVN7ttApG+2XQur8dEx+uE85ViLD0s1qHkOmYHtg3G+FtBjdyvsL9qf73Tflmte16ixvhr Wsd89zr9bJpiLMG8z1mTfQTyTbrQvBmoPHanxYkL+XLsZLaQY5vgfqZY65P7PbwG1SVqH65U5PPH orwmcpl5EtCGE7n87R2m3J8rMq+Dvk7dzUNArj2K/TleGwYz9behvw5t9Aq0FdRBc43Yw1umgK79 iAh3mdw3sypAAdI1H+HqeO/IgZa3Yf/RnE63CsS6mr1JT7V3QF6lvyT2GBPVXmB3cxVNE2uabXuC 6WY/sW7dz5wGUP7gx3DniG9XUuRVCOESMa/jb+S1ucFEeOYzRqs1UqXrfZpKvSHU105U6mmgHGMR 7Jdd6OsyUHaTUK6JdJPxAWWZI2mukUw1jFZqv6p9AglLndH/Av+3IX8GN+/9vkUXOvtqcn2ajgr2 wlYAai+XmcfodVovtU9Ype4z5T38RtF2gfOOOnokCujZH4Cj+t2Iu4hq9EbEsQFpQTxGEtqfC4S5 WNFPxTPenIk2djzj3CAsyzw38GfZx43y7+EG/iyL3MC/qJ10nEzvZOk4mX/QDfyD30M6TvbebDfw zz5F+srcwL/sNNJxsnzOcQP/nFOk43w38D/fnQ70T5jHtjyPuenjkL9T4/3HkOdCova1/Ab3mF/Y 85X7d0rv5wDzX/sXAHNlu0iBPs/mOfAtkH8FmFfbU9po2QOZIc9hOPHYa8AAMEPGxWFbdsq4BSrO lgYZ/tgTkC+63F3BRzI+ETf3vU2Q2WCt+r4VKt6ITHvLmjb9lgz5jSJcpA3bAFMR3g9Z0UbLUxJ7 N+R/Al4XfUGli++zVH7wNz/N72rrF+hrcy36jDlEGKtTvXVSmj+hc0Wfu++4sepK0R9+SJtFf2ej 7xtD+VYC7JAHqYjtBu7DPfOE/m2eGoxNBPtkhtjPW2geJI/5HHX3/ImqzSuo2NgOu3g8+lvEIfZl 8G7ut9nmMFbSeUDsVYo9Id47uY5uiX9S2C9J0Ek1/4z0/oKaMWdb4akkDeEt72C478S4vpGu8/yE rvddTs3WZ0jrfpqP8cpvVdMoz09pgjO3tS6nOM8ZsAuU9N1Hc70D4V9HAfMjyoi7BXbda1SOPBvh xN26d++lVPg/ItdXRP0D3+SCc0WakV7YYSbm1qnOuQHPD5AnNSI954s9p8fIxBydPIcwdk+kft44 2F55tCIunTZYX+E7LNipuWJffr7K+yG8/+T9IQ313EJBZ+5u/RH5PI3iHcn7cc56AGy3jeYlwl5M Eftaaj2gVTrv4P22MK3isxJuu8axo1ptCrVG0Lrm4HwPJI+frd+vZJS9IdcUdsE+TaNc3scTayJu qdIk9vF2oS4pe9bbTJO8BuQjNN+6mSo85yFfulCFdzeleMdTOttnXq+w6y7nMdpzBLZoBQVRNuNU e78WcFsar9r4Yvi/BR6X7ZHbF/uLtgm/Y2uV/6XgBrBAPudn9lJ5f+yQfL94doPUP4Z2aPMenB61 VvO+RMxDAtF2qjpLdfMJsm3vnutPaYfyW66hcRvmM1Xt7PG75RrISxw37Lz30UbvQtgAsBw72i1N eT5liZTCNmT5sJK/5LrGtp5bus+vnOw8yynsWNnOHHn8uRdHXqhksPVcTgcy+pxMm7Rt5e78bdfu 1JpbD0e2c/5Arsm1SeuE+VO0FGVChrJj2X6fJPb5+WzOKWg9w/VT1IHjmcHweYL2sDCSMN7LjkfZ +SfFugPhgM/vxv47gzTfKLHvV3yi2MQYGubSwPyZG/vvgvbP1xVbDyJe4Bsk8e6RCPv/FCAPyIsW 7EsR0uKx8JTAymC8hxS3Odg24+S7k49OvuDbPsJ3X9KaZid+9d5/tRz/1XL5vr77VGmPRp3RcySf 3bPaTTfKR/B3iThLU0ddFBbydSfYAvYq1jBoKz34rJIxD/Vpnjiv2BrmhHqwGnNTRrnV+RvLgmXn TZftgM/+SKiqvfzxzpP1z9tX5pM4tyNtrz/hOxLUGdv5qu/LiSunjeqcrJ/7Foy73M6HmM/S/ONt PrtCzqftTRgnPdBP9iymUv0l+5ee69EnfGa/6FkKWwAgrmWKPYoN0vazt6pzkJY4D1xHj0WDuW0W wzqIrxY8rOxttmOvkrT8Wfq3pcvpe41/4juOUndxvjQk5tfl5gLM6RdQd+MTPIe9wPtNxkVUyGOG cRZsKz5zc506L8trD+9BShKQL+XG5qj2zedr+FwNEGdyuJyexxjA+s+L8M78vp9YX1qIfvxd8ouz P3gmzvTgHXzWie0iAzMKz2TUiynQnWL/1rgPcoLin+AKpHcGLdCX0SBjPubDr8HeSYP/j8Ai3KdD JoIq8AC4hoYK/6OoJ19DHxgm3C9DejC398DviGKVhJ+L+fZ2qoFNXIP3Sb39IozEohrt1yKuGqMI 74OejpmSAYvCSFP3Fp4vR7hmOX/ndQXWF88cnbg2Hc+nVBo/n0qtLmCl3eQptJu0j2mMOYuSUaYJ YDjK+lU1f2A7ah9Abtnr4N6ru88FOPvkSnqeoAWec2iQ5xjsgwOoBwdpjOcrut9TQP2scoxjjxPX pdGA53bz+TyxOEu8337VWft2sCopLe45Go8yJD6/4Uh9C//qAL53uhiPxFl6ja23LdIiE+enZVsT dq63mG5COy4FE9S57/lyfww2KNqeKc+p9jMfpkxpx/EcqgW5ZXN7qEDf0Lr2ypLPtHHdUrYggtqP 66/zvNYewXsVejmf1xJhL5DzUpvXq+8GvGb5QNT+073M//b+lu7ahzrZflFHZzM6Oqtxgvs091Tc Zzc6OsvRodu159LRfhnqKtvIpRhXmq06ez/cT4OfoX99iDHJtsX6qLTXVhqd0LYXYw46kXLUmiiv k2ah/8oyV4k1/Zvl+6gL+qYiuTZvf6N+z0Gsp/LaHNulRrr4PYge6vca+P2T1Pqt+L2J1nXaM2k6 97Xcp4oxg892Y56G/qaG+xZ9Dw3Tv5F9kLZfQNwXiXXJIqSxSEhxrw9QfUoRxenD8C1rJEaivUf0 SZ1ln2UQ3tfI/RnGX9lfZRo9ZP+lvyH7IP096Dh8Af7CezU8nxZzaj4P8ZgYm76W/aToC3kdEvfi 91Hk/CmR2yD/HkxH9pKyLbe45E5HdmQXqjBbVJgT9dXeDcaSLmJMfoH689ne1nkX0TBxNvojMV+Z gOdsg7TZ+c56uygnlJHc29fc8wLez+Gydeb0ct2s5Y0oWS0R4zTn459hl8Vj3D1XxIE+Tuz31Npf qHTy/KQ76ultrXM/Zy7nzDWIRpvr6CHjh7CFhvCZJDHePxM1v32IEWdI9tDD4iwzJPxegd4EOW6I MeQ58Br4LfgbeFOuUx17m393iPOldT60ns8PtOzwHEB+PU9xvnOpu9Uk7RUjTFfxujjDv1fAiN+d cqhDu+J+vJbXb8S/AadBHWp5eRQvoqQ6t2Euw4hyK0Yeiyh+DNEZg4k6306UnH4S1kpSAm2khiVp +P5uU4nSz2yj+xWSHndJeqJdZN1JFLjuRLJfJ8pBmQcHnB79ETYXrWnQX2FixqO5pqJ64ruG7yUa sYlo1JWSMZjhnYM4CjOIxnUlKhlIND6HaMI3RJPgPr8SQ+WviaZgLKtAPahC3l3wBdGFu2LEiBHj 38yB9qke+W/myhgxYsSIESNGjBgxYsSIESNGjBgxYsSIESNGjBgxYsSIESNGjBgxYsSIESNGjBgx YsSIEeP/JBr/RSs6TGPoQfKSTkmUx//XV/PxTr8iD+k7aJrRryGY7n/tGaM/HQS60b8+N9O/w+hr ZNaP9ocajeyGlLT8xMJBRgBvyxPXAK6LwFbQDEyqNrLgn4TrUhAGW0EzeA1YRLjy0wBYBNaDg/zE yDQy6gP+pMK+RneE7Y40Jhrd6BCwgUF+XPPAZFAN7gDrgSX02GcRWAqawWfiScjoVn/XMKS9W/1t QjRcelm+cF4knbN/IJwNM6ukPG+KlMUTpdrZUm3omdJ7cJGUfQdKmdInP8wyPiF/V2FXoys+sisS fiWumv4bStQ08tMGI40iQDcs5RMyUhpygvnrmw2TNEM3NKohv73L0OoTkvML43VbP0Qp5Nf/pn8q n+ifNnROzl9fOEn/gLaCZmDoH+DnD/ofaKl+kPMc1wKwHjSDfeAQsPSD+HkfP+/p71Gi/nvKAwWg GqwHzeAQ8Oq/xzVJP8C1RVz5vgDo+gFck/R38Vnv4pqov4O7d/R3kLT/qh8xKn+HuMnNUzf+Puqm W091k9I1v1F/vf5If9SoIEoaNWqn0ZvG0jCjd32fof5GI71+zAJ/o/5hQyDXv6FwiP4GRYCOlLyB mN+gACgHc8CVwMLdm7h7k8LgTrABRABqGa5JIKDvBS+DN2kICIFy4NNfq0c0jfq++mCRv7Cr/qr+ AnVDjr+ivyjky/rzQr6kPyfkHsgsyL368/VZfirshOeEMEmQSZB5eO7Rn23ISfHbhcl6M/LOj2se KACTQTW4A1h6s967vsafgpfspL0+gmY9fSzkI7TJR6FL/aHgOFTAAF+CZ5+DO1zWB9YH9VDw3l/A yZfg7Xfhji/BZatwx5fg9Tfiji/By67BHV+CNZfiji/BWdW440tw8jTc4dKor3s6p69/xOSFWqAw Ub8WuXQtcula5NK1ZOrX8g8dMTlt99cPGIAcWxvK7T/AH27Sws9o4alaeJMWnqeFl2jhG7XwGC18 oRbO1cIZWjhLC4e08E5tJLIirIWePM45KpSuhfdq4Se0cK0WDmrhPlo4RwsHtBGhRr1X/cRhQpQI 0VDIjQ7ynLHofRL1XsjRXqjzvdAnNOO6D9jCFYJSoLdU7p7FsnfDgALpHnx2/qLCCfpuBNyNYthN 7wMTBbQb1Wg3XrIbL0jEtQBUg13gELCBBe3eSPgd4pqIax4oANVgKTgELJGcQ0CnRSqJW0XC8lSi J7NL342f3vjppfcKZSZlJOUmTTDuyNASs7TJWXaWPoK6diWilGRfcqOWsP0fCf/8RwLFFcbpt+t3 UCYK4k4l76g/kulv1O6rD+70F6ZpP6csE7VOG0VBrQ/kSKoV7uGU4WN5JmXoWyDz6zNmIFhifXCg v0nrzKG2+49k/NH/cUajjtv/ztjpfyvQaGr1/v3w2bLd/0bGSv+evEYffJ4JNmoQTQGhuiNjpP+J vUL1RjxYW+9fwmK7/z8yxvsXZogH8+SDC2vhCiX6pwZn+SfgfcUZF/tDtXjndn9BxoX+MVJrOIfZ 7h+CJOTK2wFIbP8MEWl2lnjh9BGN2iWhgd57vZXeyd6zvPnegd5eXr8309vTm+pL8SX5OvvO8MX7 fD7LZ/p0H/lSG+2DoVz+C4+pVpL4I+0mX01xn6TzVfz/KfjvQ/t0mkSRLkaZXlZRpJVFds2lsosD ka8qshu1+CmzIp7sIi2SUkZl04oiI3PLGr321MiI3LKIt/yCym2adnsVfCP6ikaNplU2ajZ7Le8Z SRlXuYM0LXn56p4s+y1fXVVF6V2vKUgvSBmbPKq0uJ3LHHWN+pOf6cfdZ0buLauojNRlVkXy+cbO rCqLrKkIzK7coR3WPisp3qF9zqKqcocxVjtcMpX9jbHFVVVljdoMoUcB7XPoocZ8LvR8GJhZjwK+ LKm3Vur1QXjo5bCAXlwc9RF6feLihJ6psd622pyS4m05OUKnW4BqhU5tt0C0zt4+0OnTR+h0DdNe obO3a5h1ImOFSkYGVLIyhIrWgzKESobWQ6jMaFPJUyorW1VWipgMrU0nQ+okHHR0Eg5C5xR/V/r4 f/OKcnO1htFVc2eXzMsumZNdMg/Midx2zSXpkfDFgcC2uVX8IBAxgnMunnsJy4vmRaqy5xVH5mYX B7aNnt3O49n8eHR28TaaXTKtctvs0Lzi+tGh0SXZFxVXNYwvP3PEcXGtbI3rzPJ2XlbOLzuT4xo/ op3HI/jxeI5rBMc1guMaHxov4iJRx8srt/moqGrcbCkb9E7xqK9zevaqKuqadOVYUXlH90pf0rMJ 1spm6pRbFTkjuyiSAPjRoMJBhfwIbYofdYZ3onqUvmR0r55N2mb1KAneydlFlLv46tqrKb1kQbH8 rxb/4LX4as5wec2tPdk/PCuJhC4qrl1MVBYZUFEWKZgyq3Kb1wvfOfxJkbMdv06dShrtXdJzMDzP Zk/DaFVkvzHsFxenFE8s/6uVFH+lN6zvbNBCWdpiqq0yIlll03R0BdNm4Vtnz6psgi3Fw0NtFT6w VsvVap13qGTLv3DOgr/ZYfHV6k7lxWIlZUgEqXWypPUfZ1Zua44txgvpfwBtPezZCmVuZHN0cmVh bQplbmRvYmoKMTI3CjAKb2JqCjw8Ci9UeXBlCi9Gb250Ci9TdWJ0eXBlCi9DSURGb250VHlwZTIK L0Jhc2VGb250Ci9NVUZVWlkrQXJpYWxNVAovQ0lEU3lzdGVtSW5mbwo8PAovUmVnaXN0cnkKKEFk b2JlKQovT3JkZXJpbmcKKFVDUykKL1N1cHBsZW1lbnQKMAo+PgovRm9udERlc2NyaXB0b3IKMTI5 CjAKUgovQ0lEVG9HSURNYXAKL0lkZW50aXR5Ci9EVwo1NTYKL1cKWwowClsKNzUwCjAKMAoyNzcK XQo0CjEwCjAKMTEKMTIKMzMzCjEzCjE0CjAKMTUKWwoyNzcKMzMzCjAKMApdCjE5CjI1CjU1Ngoy NgozMAowCjMxClsKNTgzCjAKNTgzCjAKMAo2NjYKMAo3MjIKNzIyCjY2NgowCjAKNzIyCjAKNTAw CjAKNTU2CjgzMwo3MjIKXQo1MAo1MwowCjU0ClsKNjY2CjYxMAo3MjIKXQo1Nwo2NwowCjY4CjY5 CjU1Ngo3MApbCjUwMAo1NTYKNTU2CjI3Nwo1NTYKNTU2CjIyMgowCjUwMAoyMjIKODMzCl0KODEK ODQKNTU2Cjg1ClsKMzMzCjUwMAoyNzcKNTU2CjUwMAo3MjIKNTAwCjUwMApdCjkzCjM3MwowCjM3 NApbCjYwNApdCjM3NQozNzkKMAozODAKWwo2MDQKXQozODEKNDAzCjAKNDA0ClsKNjA0Cl0KXQo+ PgplbmRvYmoKMTI5CjAKb2JqCjw8Ci9UeXBlCi9Gb250RGVzY3JpcHRvcgovRm9udE5hbWUKL01V RlVaWStBcmlhbE1UCi9GbGFncwo0Ci9Gb250QkJveApbCi02NjQKLTMyNAoyMDAwCjEwMDUKXQov QXNjZW50CjcyOAovRGVzY2VudAotMjEwCi9JdGFsaWNBbmdsZQowCi9DYXBIZWlnaHQKNzE2Ci9T dGVtVgo4MAovRm9udEZpbGUyCjEzMAowClIKPj4KZW5kb2JqCjEzMgowCm9iago8PAovRmlsdGVy Ci9GbGF0ZURlY29kZQovTGVuZ3RoCjEzOQowClIKPj4Kc3RyZWFtCnichVPLboMwELzzFT6mhwib ZyMhpCpVJQ59qLQfAPaSIhVjGXLg72t2Q9qkErHEY+zZmbG19vfFY6HbkflvtpcljKxptbIw9Ecr gdVwaLUnAqZaOZ4QvmVXGc93xeU0jNAVuum9LGP+u1scRjuxzYPqa7jz/FerwLb6wDaf+9Lh8mjM N3SgR8a9PGcKGif0XJmXqgPmY9m2UG69Haetq/llfEwGWIBYUBjZKxhMJcFW+gBext3IWfbkRu6B VlfrnKrqhqAjLL9iWZFflUWd0OlwHvCcaDgfXtbPtBppHIh9n8+TgiMSgiYVTZKgkPgJF11Siq7t gxRpUYS1wY5QQogkoh2ikHTji6DiX9AwJt+E2MGFfXBtH5JhTIYuxYwSsW4RnTLfEzvKVw84ol0k uxuizbI9ZMv13G5fSGswd0x7ToN1i5hyx5Q7jW5YUO6UTj+meKn8azE33nw/zl0tj9a6hsZLhJ08 93Cr4XzPTG/mKnx+AHVMDVoKZW5kc3RyZWFtCmVuZG9iagoxMzQKMApvYmoKPDwKL0ZpbHRlcgov RmxhdGVEZWNvZGUKL0xlbmd0aAoxNDAKMApSCj4+CnN0cmVhbQp4nO28eXhbxdUHPHOvNmu9kmVZ kq3NsuRFsuVFTuJV13YcE4fEzm4HTJydQMBZgEBCiClLIFASyg6lCZQlFAqyA8EJAUKhFGjzkrIl QItDmwItmAQawhZL329GcpZS3rd/fN/zfH9UV2f2mTNz5pwzZ2auRCghJIP0EZFICy65yPvA+dc1 I+XnhGiMi5cvueC5ly9vQPgxQtS/XbLsssUFn034CyHSRYRUbTt30byF7+TedZyQCbmoM+ZcJOj+ Qe9GfAbi+edecNGlNxWsXYX4pYQo3ct6F8wj637VRsikOwnRRi+Yd+ly3YPq+YTM/APKe5evXLT8 z1t/cQbinxGSZVF8TIjiZyQHvlucT9yEJIfS8JfEFcj7mGQlRggR9qP23jSkPovJXlqAOHtuJ7+C 2wXYQDbQa6mDp95CHoG7hlxNbiWUmMh6UCBCO8ljpAjp75IQmUXuwPMtYhbyMvL3Jr8gTeRNMoOX L0TaHYi/RNcJLsFDBLJXESBv0qTiU2oRHySX0PX0n+JctH8HWkgIzycnkmnkGvJzTTj5OAkSmVxA Lic3k3upieYlL0y+S1TEBtwtyQeTr5B5yO0ng/TXYodiXXILak4nF5KfkSdpqaJH8erIXxNXJXuT bxA9uZ48RHXUJ6ADyuLkbJJLxpEYOZv8PjV66lUUjSQTf072o/0QaURL64H1ZvIbso98QcfTNxVB JUnQpCf5++R7RE0aUPc2KuKRaB6dQB8VssXXxe+IkthJK2qfTRaRJaSXrCQP43kMvTxMo7SKjhfG C93CdcJtwoviLYp1iiswM+vJM5RQBS2mMp1Ep9NH6Rv0DVDrMnFdgqA/Xoy3mbSQM0k3xrsJM/UK 7/W7ZIRS9GAx7aXr6D10K91LPxReEmcozlB8mlycvJqw4VpALx8pIPVoYQbm93GynexE7Q+B0YG+ V9IYxvcT4UzhEjEqdohniZeLm8UHxbcUsxWPJ6KJz5PXJO9L7k6+k3w/OYz2zCSPlJBJoPQM0knW YuZuJvej1RfIfvIl9dMmeiH9Cb2V3k9/TR+nu+k7NCEYhEfFMeIt4g4FVciK2xQvJ8yJXyYGE4eT Lcmu5HGMbz65ilwHbvsleQgc9yRaG6Kt9Ew6lc6hPWjxWno9fZi+SD8TFMLZwlNiUFwhrhHXireJ XykCijWKt5WXJLoTtyR2JsuSq9Dj65L/QF9NxEHGkjb09ByyFJyxnFxCLkWfLwfNf4KeX8Ofn2IE vwbOp8kzoMtB8hn5imZQAzVSFy3DM442YFSd9CJ6I72LPkD/Qj+mXwsUPQkJY4QpwhLM533CS8Kb wofiDPExcbf4pvimwqaYrJgJLnxY8biSKM2qes0fvn/3+BMjd47cnRASRYnupDqZk8xNtiafSL6Y fDf5OSTXS8LgyymQqcvJZnDNIGbq9+DAfZjrv5GPwUNK8JuZ5tMgnUzPpleC0teC1j+nv8TzCDjn CTqIZzeePfS3dB+ov58epH+j31MwrxAUIujx2cJiYa2wTXhWeFFIiDoxR/SDnnXiItB0nbhBfAhj eEP8QvxaYVRkKoKKWsUixc8UjypeULyr+F7ZqpysXK0yq25UbUprjpP6BB/aIkTRvkC7IP96UPwp 4WWhBBKx9/+D53r6NXmFNpG/0RFw+fV4riSfQI5mC830I3DS/XQs/Rm9TxCFRSi7h2wl94mP0XeE q8iNkP5S8ilcKpxLS+l1Qi604c3CdvJXcMZeyMsXQivCezHTdrJX3EuXk2/ol/Sn5DDG0iNkkSX0 DTKOXkfHk2VCEfGTi+hecBg+SllBlWdB3y5huldxm/AP4TZ6mLQKW3ifb6TzyFZaBH7bS88iTwhD ijGKZ8GlEyClTpSeJqjoZeDNnwsK8rDwMni3H3I2BVJxB6R3K+SkEb0uJBeRZjqVUPo1zSBmej24 /RxI5vXoz6PkUToiJoBrQnIXh0+EMvD5bQTrCTgqn/wqeRN5js6HHD9JtVjFPiRnikcVWVgxjihc ypakkJhPDiSnktegsSTxA3IGeZ/eAL1xBnmP2sg9yWXJKLhxb7IL/byanEtmKhuVbmjjecIy8oJ6 q+oDVZ2qXEWVa5QLldOUk5TNyrHKcmWR0qd0KE1KreKw4s+KfYrnFA8ofgLZLVVkKfTiB9Cf/eJd 4g1irzhZjIml4EmXqBC+FT4X/i78STgg7BEeEdbTOHr5fvKV5F3JjmR9cmwyM5FIfJV4MfF44p7E bYmbEn2J5YmekZeO//n4m8f7jz9Ij40cgP56gb6W+B5rwMXJOckzk8cgb9bkLcn6xH66CWMMkBHI 1x+gV2/BvDwA2nZCw8nCGVQiCfIVGQaF3kH+TrINPLaa9JBZqhmkHfMdhGRelebGRdC1DyMmYq4s WAFioPiZmJOziQAtXYCV9iXyWPI+cSba6OfC8rDwOvUmfkkKoGUuxPo0ifyVNpB/4HmSPDlyN7Bt Uz0MrDtVj5CvVPeK36PFneQGoUVpVkTA8yNCL/1p8qzEWdBpa8lOxd/ITELkMztnz5o5Y/q0qR3t U9omxhrq62prqseNrYpWVpSXRUpLwqHiosKCYCDfn+fzetyu3Bynw55ty7JmWsySyWjQ67QZGrVK qRAFSsIt/gk93niwJ64I+s84o4TF/fOQMO+UhJ64F0kTTi8T9/bwYt7TS8ooufhfSsqpkvKJklTy 1pG6krC3xe+N7x3v9w7SOVM7Ef7peH+XNz7Mw5N5WBHkEQMiPh9qeFvs5473xmmPtyU+4ZJzN7b0 jEd7/Tpts795kbYkTPq1OgR1CMWz/cv7aXYD5QEhu6WmXyAaA3oVd/rHt8Qd/vGsC3Ex0DJvYbxj amfL+Byfr6skHKfNC/zz48TfFDeFeBHSzNHEVc1xNUfjXcqGQ27w9of3bLxxUCLze0L6hf6F887u jIvzuhgOcwh4x8ez1xyyn4yicUtz54ZTc3PEjS32pV4W3bhxgze+dWrnqbk+5nZ1oQ3UFQITejZO AOobGRXtEXSEdZ8NJTWoRf4WltJznjee4W/yn7vxvB5MiHNjnEy7zDfgdMo7kweJs8W7cUan3xeP 5fi75o3P7beSjdMu2+6QvY7Tc0rC/ZI5Rc1+oykd0BtODSw6kcdDvDgLTZp2gpyU9cg/EWwQ9y7w oiedfgxkHHMWjSMbF4xDMXy6KGrFF2IalsYzmns2SjUsndWPKwOS37vxK4Jp9w9/dnrKvHSKKiBB kj9jFIFJMcpgyB8Nx0OheHEx4wt1MyYSfWzg8aqS8CWDwl7/cskLD+QjHZ2o1lUTAc19PjarNwzK ZD4i8b6pnam4l8zPGSByJNQVF3pYzp7RnKyZLKdvNOdE9R4/2PdJwnYaWXFN8MTXJNkyW86tiVPb /5K9KJU/abp/0tQ5nd6WjT1p2k6acVoslT/uRF46FM9s7hRzhHRIyBF5Ljjx7BOFWaRTH1cE8FVx Tl44qNaAFXkK9U6ISz1npNwurc/3H1YaTB5htbh3slq6m/Ga0Onx2tPip3VPv1FEhxVBYdKMORs3 ak/v+pRQXB+IZwTAFXFDIG7k4czAgM04M+SNG3sCUCCmEy5zqDSz860cX5e30xufUQzNUmc/EjlS F++AuMd1AfArc5W8LRN3DbzRrEA8O2CnUt3xuur6iP3gEVZMG2DoTdzVBOJSIG7mYVtgwGFmPTBz 3JYTLnPID3rAOiDV/d99MPFvdiDuCNiJVKc5TtJ94fohTlPE7+jsyZnXxSSPfZWBmZ1xFSevj6nR NL2MHIXEv6lmZ0Bu4+0hfCGlXVemJNOXqnbKBy2IQSpNrC0J+xEiPOQN+vFFCmNKbw/EMLBxXI7f 1zWYTPYwrcoJIPQEvCx7Yw+C/vj0YpYb9OZAHfQEu1BNRNkJWEo2bpzg907Y2LNx3mCyb77fK/k3 7hRtom3j8paeUSEdTO66ISc+4cYu8OW5tAYKSCBN/X563dR+mV43fU7nTglb6utmdA7AoG/uaerq z0de504v1lGeKpxIZTEvi5FJFEQYEDQ8K2enTEgfz1XwBB5fMEgJT9OMplGyYFBIpUk8DR82Ic0z Ok+VSk7QrhJmHQiEWZBLlAQWhZrUym6V+ghWZKXiiEi0KuURURScGWrFEUocmklr7aEp0tG6ySN1 U6RjdZOlkToSqxupY1BeVmn2mQM+s2+Jghz3inuOy0ryPfEq9sBcF1yJPeLflX7sPhpl3RoFVZuz LVrrcdNgcs92hylmGhQelc2gESnDZrwHBr2KODwzdtIPCMfYPXkkdBS4YuVltJtGx44ZO2ZMZQWM CbVKyLJamFmh8ucVBNkjuGpCcxobguE6+7IFC5bZ68KB3MKmuf6x9Msntl99/0VVdcWuwv7Ea1u2 Jl7rL3AX19n9a/pXweCj5MvEHuE53ssq2ZBtVlus2uMmebR/+giMrbnkeaIgTpgKLf0/ZX07dmrf 0B+1Cj0JVqGPlqqoUIAQepptY4/w3I/37Mmr77toTF2xu6Cfjtm6hY7pL3ShZ3lr+1f2s549RAcU fqUR5FkmO12ZXlJakKkrcGXqiFITGus/oNHYbjUR7zN0ATajpXTB00rHC5nKF3SWZ4S52CBlCnN3 6Mt0HTpBh33b9vLz7rKHQNW6YSn1HJIOkdjROmnkkCW7mpot1ZZqOBgQI2hqBNncs2VljU1RXqVW p8keLCg4MWj6fH/MbK8N2CP91aWl4/rLbMHaoob+Cwrrij1F3gsu9BS7i+sLRU21NduVX1wvVe9q i8XadlVLdcWByqzqO8Z6Q3XO8O23h3Pqw56xbOTTwJ1rFTcSD1myk1gFhWwyOex2STKVZHgI0WgU z2ELk0Fy4WIriHyLGquXfWx2idksSRrNVjVVDwrW7d47nsKYj3VDueEZOcpcNuzIoXRKyjuEQZv5 qKrMPjakMdk+c2rkoo+P2y/sHVdaWp14n/WcBjDMakoDPHIw8Qj3Z6cSZ02UY22JX7HSbCS76ScK q/BLyJlT1mO3SpxK6lD03cW46JD0EYlMHgZyX5VPYT2+TeyknzyDWvT15JAoYj+oIz5Zn/G8qJPQ 1Fsqh34XtumlKfGYPNxNYqgcSHWcd1cUp51xxjQGS2qmTKkBMFnflvyLIqiMEBP2gXfK2onWVr3S 1aow+J4RzkG7knDOU0Dq9NtZPIM4ENdoMhx5t+ykc0la+BnHpMQfAeBlmCfFTR2XyWMEry1gDFiC OUFVwBPI0tlDJNMghWiu0hEibtEXotlaa4iaTXCcaleIeAU4IXxo6MTnSpplFTAOoaoqasFILOpo QdCfp1ZlZVmzbZUVY8dUKYIf77/80bs+2r/20Xv+p7uqp7u265zovLNru4RvP3wl8bMLaOCBD39H e5cl3n/w4XUtZ6761YfbLmcehvgI+KkAFHCSJ3YSZ3KPLDl8sWznYudqp5jlDDgFJ8yEAZsjCtUk 621Uk6HV6Q1Gk2TeJdwt3CP8XDa4J5KTW5fR1Cz3RPN6K7XKrVVWOS8QtcqRiqh1kF7wFFFmaPTZ zwmTCFYBYT4xQx/OlzPMHdJmaaskSruFNpJDbqHvkhSDcoGEXo0Ngxjd1aFQeRkJregG2VKC50/x ZWWlWZ2e7rHC668zxhu5jbmvPx22FVQXNysj3/+iurSkmoE4u0zfUFIUsYACF4ICVlAgQCt2Ei1G WdtadZl3vX99/uUBRUBX5A/lt+Zfm/+y9iWdepJ2JllGFuXPD2wixwJqS57kl/KlwL68ff59+fsC GgNT4A2xKPNlU03VFt8ewz6D2KelKioO0kPbqSjSQfrZkyp/PskeFHRPSq1uZQar1dQa5f6Z07k/ MKMqY1CYvIOSVrVGb9glLCE+atyxXEVVzgLroLBEznB+oSFyQWOUpKtzf+J0+MjVZmR4NJs0gsYR 3EVvpeekFw7GpSCjdHSYq+qjw3zB+huSYsPD5upqKo3UV0dgwXwlvURWrAyF+lVssWSEeefJDCmq lYhUGeqCYK7oJpiEgC+lBX1VBHwY5Xw5qv3GjGpGFX2YvhDwRcYenyMUr6q56oILJwazjeVQeL1v r/vNN60bztvrbpg0/1366lXNdZNWyXnNxfl1hXVPLvv04Zk39y3CHG2AnMqYo3qyW9ZlYO0VvqFf OwQ2YnlCpDz6FnnfIahr7BnZNUsdi0suU16WdWn1ivqMDE2GMUryWj25ZblCbu44tVHWGaJGo7VV bTCVe8qF8vJQ6zilx8OId3C7P8CJ+KQ9J0oKB4VzBmprs3dB8kWgyZCyoqIYi0Z1KLFDskaJjuoi 3aHKiLkyEhqujAxXhkLmaiyKIxWRbuaEsGZEVgyzdSPUvSJEuldQG6MHX5pPrIOVFYxubGFJpY1t EE7QMb1ypsgo3nDWnNV/efrzS5tri12ecEHd0u1bu6eUnF85tq50sbqwo3zVqlunZBuznMV1Z1/7 6nMfjRd+3fDLRRfsnNtWXBOut7q1xu6ZsYu9FrVYXRyuo4rw5KLGubMcal1duKVx7oE7269nGvEu SIMFK6uTuIRu2bnetcl1r0usy53l6Mhd7NjpUI5xUJdcU+WC+bc9NDPmYkxnLUz5hVbm98kz5pTE NE6ly+kscvpd1c42p+ya67rYeavrQdcO1zsuY76r3PWaS7RYcvOcOdFcOViVm6erym3D5FyeS72u Mtdap6hzUQtRpxXLSc3C9A3TP5ZMa5Yt+9TU0WMUjTqdusM90WHPdbkGhdWy3uG0OhxOp8tmd+Uw vjFLObEcN3Wr7dnZajknGFU/J0wjNqKhDxEjFtDrZANxKkxGvaPdHrcLWAKmIlchXCtrNVSt1uRk Z9vIM1BguUQDBebMJTavrcwm2zpsy219tq22fbYMFhVsu4UO2FC3cCGUjq1IqbS69HOISSVTb0gd qUuEWNrwSKiOmR3VG0pDinWQREu1PTQqi0/mFkMQCRdCbPR2EhcoX+fmMyBnjM2NuWSrnsU+2A7a Mn9HsMoJEvMCxhwp5pSR4czTGaN81rTmVGkpi/v9purQKZ8uCHo3CwCX7M/tw5znypjwXBmznXsI M53bB+y5fcCcK6Ot0XqEVdC65Bx/NIc5SILS4HnQHHQlNafUd9bpWrzKV0UzzVS8pbEhJgPaEsNM i3eMvEk/bUrsVxqPf1BdUlIzraYkpcqnPSqOP/4B/SahgZ64musJIykm38kmh45qHCTXDiZU5Gko H32WPUq/yGndLNJekYq76HfEI7gG/MVckxid/hiRTVY4IBAZpA9tz/crpEF6i6zPas0wzC3oLVhf IBbsopuJXThHtvSolqv6VJtVih54gsoZps9AT+exY2g5A2uD11/mF/2sfqbHEDH0GTYbFGUG2dBj EA2O0C4ao9el9PIKqGLOFlMYf0wePgQDZuQQVDOIBVtsZEX38CGse82XyXabU6FxKuwhatPAcShz YESos5jVAJvhyitBYpoFjWEBTX2jeuaEmmFqJWXLpYhOd63sfva7kcT3H107pb7YP61EXrjruquW 9N7ktYdrhVWM8IrGo/mJxB/eODy7orGovtmQuXrtZRvPMMuVQgcjP9MZB0D1mdDO7Cbl13KDwm11 t3pm6mabZntWm65X3BF4OKCNeukE3Ww6qB00vaJ9zfSObih8SHc4fFQ3EtZnmBymNnebR+Erzsfi NUU2F7eKYobZ/kVuq1mZD8oXMC2cRY3bVcMG3y5hMqdw9nJO0a2GuOGIQUUMjLKga8kuOp5uPEHX kb/BjOd22cghppCxzDFTnrEgvmPSpOL2VdSSz3RyevPkz4MGzrSdoJyKPtR27Zn3ffnhC/ftO+8N mvuLdS0ldcX2khzH/DcmV6m8FyxadMG6KQ0/FXY3VCfJC9v/fDsdt+cjWr6t3FdZUm839q7qSEy6 tPO8s87duIbZv3cmE1zTZpLbZB3R/Kuee8rdRrQ63aDwJ7ncTKxmM9FlGrWEWDw0QgW6NUOjMOrN ZrV2ecaeDCHDmaUh6uXqPWpR7bDCPD2x4DMTii9LMexTV0Amn6Sys4pJw9Ngd8rYnUkr1A6W/w3G 0tAG5bqX7CFmeqfW8SpfFh3dz4g1iZBiTLi0WlyTeDKrMj9ULyka66oa2nbsPZ7fUFRXYCtjJ/Hg B2ZTOkiAlJOEXK9WaLQZhariwoKCUKvh/ELNpYWri+8u/FmxYoPy6ownCp4IHVIeyjimPJah6Srs Kj4/JLZqjLLNGTWGzVwyvQiT7CAxFrW2+6nJ7/FvgmD5I65WWG5Yy527wR/Z1EiCwjnbRWell8XN iIcR1zkqTtrrk4e56cM8zhMgTTfWaL7LYwt2SsqiJeU5HotNoc0IKIPuTG+I5GY5Q7RUEw6RMlUw RD0WV4jm2OCUaCMhUq6Ac6rhfiU+jMVOWfP5+j42vcqztALOVVlWxmGZp4TF69vbFx24+uq3FrW3 t0w4snv3kZafrl60ePXqxYtW229YsuSGS9esXS1sqr+ne8mvFy58fHH3PfXy5o57//rXe6du/vOZ 559/5uTzzx/5cupVV02X585l8rkf8zEL8+GBXvyr3G3Iyw1G/6H/2PRp8TfK7/XHTN8XqzdortPf bnrIdEB5QP+26ROlxuB2uc/wdHqWmJYUblCqB/VPeV/R/0n/R+97vmH9d3pNtb5N30XP1p9XcJd5 m1ltJAaD4PUXcfHNK2qNiOvF58XXxcNiUlR5xF5REEWLv1WrdHzharUYvGkZHjAOB5lo26hRziEq j6pMJUOfKlNqdasqrjqiUqmYqjwh0t0rJh8aHhn5G1eQw8zC6j4p0iB4N3YGjNxC2nKyZEnqUy2u yor8zOAJYosbJve1Pvj1zIvevOMv5/1z98HLx5fWhuzugtA9VCX4rpw+e83a9hsEZ9NYqnnprnWP PZV4dGfi5ed+VuEbE641Wd+k79+0+poLV93EqOyC5XS+4lmYA8XkQ9m50/eq/tWgOMs3u+A6g9hC bNl2hzMnF5J/qsnyA7GX9e6J7nB2cVgtZGvynxG6sDf1C12yZJJkuzdGpD2SIP0hXAybZpZspoQn kgjwO0Ly1SkKhdiJFOQ+VMd3pLFhZvOzTamRbUo9hRlZBqPeqDNqjQpVMFAQEFQWc6bZahaxYnjz BFVhRn4x9WT5i2nAWFRM88zuYpJaX4rxwRoDi2CsOcXJSiwubiGLsbh6dBFXsk3pGGxXYdP6/T9n izj99cLna8Jzyzo3xRZuSSzEwkIN761pmDotUHPzBQf2inm0uqS0mrZVh26/9fz5P3l1vTuC1aWG +ktvWjFv3sSVM5nGXAgKD4DClfQp0CPfky+QH25Hze6JslbWCYzYLrfH68s7Se82EgqXlEbKKior yfOpVBhmbck9xMR2t5Lww30sm6STF3UnK01EpQxWSSukrvYC+fn+0Uohd5svbLfkhyst/nBljLST uaSXKEyEvYtDNHZBCmNrognJOVWhQaHrqfwwQuFBNs35nspIZU/lnkpFpQxTrXIXvZD4kKFzOh3O qjy/H4R4RpiFXbME001vi0rMhMPGhfmyLgc7GakMLOKI7qKP0r+mZYaZEZNTRzpTpAQ7qTwagr0R AmPA9JSGY1yO6oa5PelHgyZ3zM8aho2c8rO4348Os9VCSpXMT5XMT5fMT5fMP61kSiFCPLt/uGNP H88o00dMVT5zZXq/k16Eq+h7bzArJNHYFpMner0sLP6WGR4jXz1p8lQzG3Ccx0S/Tbx1Ym+fx4+b Er+bGGtoW5bY35FdHmv7rC1Wnj0VPLQNPBQAD3nIp3K2bJKdskMOyEE5Q3WSlRotp02zA+AEBADB 1LQTG5t6k9qe5jJC//M6P+QxB1jWhH440z05yW+jJbTYyETtYE+NmU0+IZIwaweZS/fAEuBmv80Q o07f7Z/zI1hM7WQu+XWxQyna/zjlR8/wTj0w4WHhfE7rwzC3Tyds6vxOIDBiFL8AJfMIFkY5+/bg gwFB4VEEhSLNKWLZaDyNLpAzogPoT4iP8v+SudFUn3uiNxcrcX44zx/OI7LOBMVHQ2FGGBoGaQoG hU7Z5cVWX87tyO3JXZ7bl7s5d2tuxubcPdj9O0tClClNP0THCxmRpQ6pR1ou9fFzJ+1maNZ9kuiV qOQID9IJ/U+nLcju9Pl+N+xykHQ4dogZDUy3jmDZoZZqTmEYDW5nkdvlcXldoqrIWZBPAz44hTnF +TToys8f1aDcLMj636ZDbRT8BWmr00+P8NlIjD/J//TAvn8WeW6+4/LfPHftvesv+YxuffNfpuiv v5zTUXdx7d7LZp6xLL0yfYOZKiHjBJU8P+ge457gnuX+uPzrctXY8gnlM8pnVSyoUGbnjQ23hmeH rwpfU3L7mIfG7PS+4tUaQ8awuiIQCoWrSyb420pm+WeHFvlX+R8M7wj/LmxaH74pLJRqGPMKqTcc 8v1+z2kr3AlWeP5fOUHWG/9PjXvKsuiJlFzloTM81MP0TF4gCn9we2UN83++I1IRfSmVJcvN06Oe tSW/Lnm2RCyRm6tKvK1VmPwSGbqqJBwhzCfhSCmzfUtLNfaxYcc4zkbFoRDTy/50+/B/vr20Isrj wMN82YrG+/w7/C/BAN3bEeoJ9YXEEDs0ml4V+meUsaB1lPX25Cpzv66BvIBPGedpzWWMu6qnjRs9 jEufsh/rxo5/xfAKvjeO8bTYIUgw26+EUmqa26ehFdUhVmjlCsKjacbzlo1xuisqyysF1RhnNJ+W ueFU5YzNp5WuSD6BepLq0sx3JV3JD+7+D4WgZhc06a2QXygoSC3onB9vaeP8+Oop/Ljv3cPLVzS2 lU6Z4ihpaLv42wd+v7VrwjmNl6/+lL6eSPwLb+6/u+fe+uqu6sskz7iSanrllL05+R0FNQugm9fD Tp2meJ9MoH98qsCeH4gGBpOfyEYsbtQOp5xdPfGTVQcL5NIGVZMr19xga7o65xr/xvpbm7QNg8kj sqQ3RnMlvSma4dTlKuqxAU9+wG7V6uHLQb015syD05u/IHaZZ33+HY4763ZUvmp6ufKA6Z3Kj+q/ zTlWb6xnWCpRx8lw1tfacxRZ4+xe8EQOc+xecFtOyqmpsgN4kSpz/iCtl71VBT4xVtJeMrekt2RT yVCJKlJCS34TFGRth7ZHK2oHqTggaggrqzUXjM/w5EfyBVQdlu0VcrYxVlGY7YhuqaAVshdMXhGp ECoGhStlbZGpmCaLaXFDFmMzQ4+8XO6TN8sK2XmGkbEoqsI/sB21WXwHam82UiPqPiVhcy4QZk6q oAQ6Zbvk9rqFw+4jbsHdoCawu19XiaqvWx/dScvS5+6wtMGCK4ZXgs34YfEwUurApEgYXoHNE8zv 7tjwCgA21tnpQyPKguyEPsSMDjArTR35BNKbSb75AXelLi74wWepkD6kOHXhZ+ehKSM926aw8atN 1Ke1OT57pLo6kl/uNLpu7by+c9yY+sIbtj228Nhv2zeMLSwEq5UEc202s+uiM3uvrKrMo7WPLD// pj/NvC/qtcQmbmyLBbskjywXVAebbSanp3Nr9y1/9ucXxCbe3RbLNi+2BaNLxgVbrcaGtl9ccOdZ lxZBdJN/hP48zlY6estOQsBETeZsrD0SwWbX7EZ4TOaYvHOlJZnXSddmPm15hf4u7+9Uq6MZZkWe 3VxNq6Ux5hqLRs5I356YJKyL0mnaUH/SRiBZAJlpx2zVCRt2VDtuh6mgZ9pGK9vkrNSRlpytOqlF nz21WVmfQVPvmVkzMy0nD0VlKpnNg8L5spZQK0aYl2mxsOhEkodoXp4lk5olQjIsOdGMqNOpESxm DTMr2WIZlw5KRyQ1WydfzOyrqDJlxjLXZ27KfD7zcGYyUx3JpJkvelPHaRVVCmIlUdJH4kSJneHE 7f7NUH0OZpA6wThgo25iZ0ef0iF2NsOPPFOnnhvWvbSh1M48Jzv5PHENQZLvDOhGTz+x1SPY7dHT Fk+Vn/pperuXtm78wmJaFOGqKrMtVpbdmjjrt4mzz8guQ0IWsxLLaEh4KW3cjPVKx83iYWinU2yd ruQHijvFh0kRGQuhrSpW0rJSqhxjG+MfEyuOhWLh+pILjJcbM5TeLO8dmhdVr3rfUh1SHRujIeTE W3+jK5nVPdGcWVY8No/Qa4toUfHYqN6iZfSKuL1RCSoCeqJPK2h9c8O0PUzD4SKrXFIRtS6ySD63 ukjbF6VRn0JnAEFnP+mbm0fzuAVo0cXynNXZG8oGhZmyRc30iEftVZexA6FxsR3pfcDkkeG0gcje VRhegc0hO6bF5rJkTkxiC6M0eiI0HGKbgpXDK1aGuLGvhYZBIdZVZvRr00a/Nm30M38gVRWV2TSa q6XPRqeU2/8r6IpuX1X6LIkdtZ1yIhkdM/oSw+jKJKYuOfkd55ixomfyrjMf/B+q/qR7TXvvWTeP cRdVW/Orz/yF/Pybfja1R9aeu27OuJyK2W3PTCwrKnrivCv/bC0vrck31JY6g9lSluPBTYk5bB2i vfb6gkKXxVdTgZltSA4p/q40Q16K6XI5otVpjMos8aiRSjpPlscrFXt1kayI11v8fvD94k+DnxYf N494j+ebvLJWFy3mlEfAK2eYYjxmRyBHzszLkQsNfg35UcG0UXLiJdBRzrC7J2qv1dgy3STPl6nW aAt9Bh00pScDMy2bSC9dToU99CBsfmc4wKbZ6ZHapblSLwRzSDosJSXN88zACE3cNHr6ya/5+GzD pmAHXviyeRmVqKewVZaiNjZ3XKyYXLFTZn+B0eK3BDykwAgn35znoUFToYeMHjOTiTMuk6WiYp2+ WFfoVxTpPX6q01LYGeRErtdnzfJm5fmVPitys2wnchmHdFOYISesED/nClIVJWwdqEoL9KmHYop6 P3t94MiEu6Z9nPiIFr7dcfckPu/+gSv7Brb+7Ob7lebvd7P5rSgqprrf7aPB8vIkO1Q4fvf6ePzy FTffjNluwmyfBzl2kXx6j6wdtAxan875XY4CVsVBeWKuO7pQWGb9nWq/6oD1gONj1SfWTxz/FL5S /dNy3PqN51u/aYyqVSVYllqX2s9znudZ7L9V2OLZ7H/M84D/O4fOpVaKusx8N9UwkSiuiWr4nbkj L9qn2acRjmiQQW1PWdyyq8rNL4hdEHg3ld19bmGTm7oHqV2uIrKF3UL4EMitwsbSRNrJ60RMwj7C 7jGKpcjHxNTHxNTns6kVPknnHhR6BshqHbuT80+IcX9SkPnA78+PHtRRnTOYvxpWaI9szZT9VZ7M 5ZlCpmwwRTMdgYnLOLuEmHo4xBgG8zM5fT7K7zRD3ewqODTMPSiDp9yywxdzp6/+uI9Oc99v4f5A 4agm+Lx7BbvDqEsbBrSbKxMh+ZacgZXTE4YDA+2tAfj81gi2KZjDlzIQ0i81KU7yBp6slGmgViw9 /rT3lzesfHaKu2icuzDx2qZjiXdpbN+6P1aeEfH+NXLn0nPvLKPndMwvt9aEC3MDzdT2+wPU1FnZ dsGZCy/pnD27ExzRB4JOgvyLJJe8uBOL/Z7tOkODwCiXhUBHBpUNslFI7WDYlePpuxgDl2Xh5Ovb p+5iFCde8j5lHx8RYkK7IAq7hNn8XtlgrI6JFOhVBmyGn0GqlQjC7AF6qYKLfVaW11pm7bGKVodr zgMnbvFHjqZ3+LEVmJfUJr+bSWeWv+pHjXshfpRKx/hOv5W5xx5kMqU0v/tuYu1I46ihTr/kFzuU XAnanAna2MkV7IbiP3zzg6WSH+zfMtwT7SisZTuh2bLTLMlYsCR2U8n24j3YgSskh2N0gKnjKja8 //34Qtj7b0aTUgN8y7E6NZLkB4QoqbiNNInzZNuQiT6ketT1aPgZ1073M+G9rt+HNRY1Y16nP8qP U3xZ/qil19Nbut6zvnSTZ1PpFs+W0iHPUKm2XDM0bigmxFjpDGN0HCudiYBFZi8aRKvGjB1XXVNb W/essOV0bT/6pr/J2Gg8NY9bfGaABSDxEyLl6K8EPO5/U9aUKsfqyHqLcvQHBqUlu1JFU/RvapTZ bxDqatOpA+6Jpp0I3i3nukuKq6i6yenTFvsUq7XqJlVVNBoIZGkxt5ibp7JtckUVWxHknGCVTXbX RF+3DdkO25I2RQ+/2d5sU1hsg/SIbHZ7PWUewcNm0cPm04P6OwosQTQQZA3kB6uCvIHgUPBwMBlU 9ASXB/uCm4OKIKsTZHWCaGmAlJSi6kCdVMvX0GDVllpqqt1aO1R7sPZIrfJ1HhB5ZnhOSaxWro9F a+XGpmhtX3MrQmdMQujM6Qh1zIBzVne01tEcS6u19Acb39CkaZ3be2tp7U4hQZrBZ118ZTyG5ag7 dcP9VFC2GWKs89ttLu7LBiAMsm1gkNlUKaXGLma7646xCjZWgZMrGzVsrKCNFbSxEdrYCNP34RxF HdCN7vBjTITN1ezVwuqW8egam6AtLfHCeeO7QqN3Sd2jlq+aaaYczp8D8E8s1V67S2PIDegDORlu F3G5NWqHLttFXRqnS7QbnC7Kl2yGkF9LpfVvjJHZYIvl9cEpZ06ebLI0lDMnxi05S8PoPX4oZf+x DqAc6wDz1WxXbc3h8QH4qbIrKLt+Tu3m+HVLVvqW329Ov9RyWvxkNCXP5pRHiyumVpV0FlddUL2y 9Ry5oaHtxTx/nitQxYN+f/6EchkCv7Mt1tDIbhfEG2vKA+FwOFTf8ZNEFXszQNgQybc4WhILUpHS QElzKpxScCzE7PpZsAfWwh4wQfv/Rj7naWFQ9Y72XeN7lrez3rG/7Xgv50Dux8avhW9VhpcdL+cI luHMQ1kfOT7NUbxnfyf378LHqo+0nxr/blEvtJ+X+6Dy4YyHdL8ybDOplwqLVYu05xvPsyy0qaw+ vdoJg11iFpuWbRu95CBRYDP+FcQ6W5j5tEdTplmuETU7keJih0EM0m8SsgstNmWyLifPlBGzMCeL kR6+A/4A/BTpYVFRK1sq89PvXilsqTcFRy2otVclRn56Y5Jce13yhhupePXe1nm/uGHX7us37qZP XfLnq6784LK1w9fd8Om6BdOXD1zc8/DDWAGWYQW4je176KVPeym9U0UtXEEGnFVaqU0SnpCeMEP+ FUY5g126yHrZoDx58dKoP22tHD33Ta2ZipO/fzpt5fjBfsnhnqg3aCxmb0kkapYbW+H4AlGz0ck5 sayCi8R2d5D7O6yOKC0y6gapS/YZfQp1kcrp0BKNFyTu0PSAzKrNsMOcIUqI2cKWInMe8Xl9Zb4O X49vuU/lcxQPUtp/+ckTOn5n8tHKbr7YTuZ3jaB3yuXbm1O2p5QJZ2Zqe8qNYItJEkRJMPqVJtHs J5JZoJTLIjeEYRqxqbVKTGuYmcNXRDNz0pO6IiVOo+8Wc5Hx/chiWHflbY0Lz5HrQ8EZvtCjfTT/ 5Jn+Gn5qJ97Y193QVhEN15+5bFni9/+y4GO+b4U87FL8DwmTxwYcGt8gHZA9ARvxBQMBlyrjK6XP rFvuoA6HtaSoiC7XH9QLer4FqqnSO0sD+anFPehyZxErs1o6YLcst8ate6wHrUesWgmJLKHPqrSy 1zQorRp9TaOujpMalP481A2Lk518guKT2UswEpQmexEZyk6yZAoKMaiwUBcRMpUukn7pxZx+E/ak vRisGiVL5eib2qPvK0dzipfde02lq7DWW54YWvD885w2bZwSa/nVx/OJRU1ZvmZnXajQFWl/8FL6 IsvcyfJ2pm0jNyh1l3gjJEMj52nzjJmxDBmO1ug0LtUu9R7zKouM44xXBIfoAdMnJtXo27M/uO41 uSfKLnpSFk7fJuYZ2DGPbJUzZYtslrNlu5wru2ST/lQx2T9qWvrcRQ6VWotpe0TWZnzl9ul1mrw8 HzP6TWQ5fQJbR7EPVHeGfM8IGcRJcjBbRrO5z0I9FmpxFLcvSV+x898yfMRfRkodUkMbHcXmsc5y ktufzJB1ptGTGPaK2OgLXanNHHtT/sQUmLkGGjsaVziZ1n6xc+sZi24NeVLb91hjw6alaS4daWQK OlJYOHPSmKmUk3zkF4315TK9f5RTQ4kZim2gf4koyFc3mZaRVaZrTQoTOykhzJnlusR9reka920u pamPJd4Ox9SXF0AIznLTLab7TTvJk6aXTSr2wtIG4+3G37mVEVpqLJJud93qfsC9w/V78rLrI7fW soVQr6nc1GiaZlpmeoL82nSYHDZl+E1VpvVkvelnpj8RFfvphrxaVxWWgq464wTTbNMcabb7fLLU uMS9hqwxPkIeMX1K/mH6lphzpEy3n+YZx5kmmMa7D5C33RkWb4ZX69V59V5DxBLJjFgjWRkRc8wc s8QyY9ZYVntmu1XTbm63tGfNNc+1zM2ca52bpYExCVKUlPCrX72eqtMmutH0L4cNepp++8Dlcp96 Ty7JJiEQLCgsKg6FS8j/+l7CUygOHZ/CJI5a95KpUXuajjeeuEsXT/7W9RReL3G7JJORqtVBqaSE vdsEo8XqdruMJhOLudh5pEnCoFLliCaYbbNp0JtgwAiN8QhxC3fKkktKnEXOx/q9YauJmhJGxvC6 5S4quda7DrpE16Bwx4716Dt4fTe9h5SSGN2fOtVegT3siONot324+5DE335OGWPYm27QlIaU6yR+ 7sjeuWT7VXvKBlJLmjpNXWoxTr9y+cn2bA/b6b6V9rktxF6ffBq+lGeqNp76KiV7iTK0onslr8zo Y0Qt0gaFYepjDj8uZbdSh9iva7jDj9kczP9gB5o0ybqTr2V28bevuYmIDTlZGaCplzHSu6TMzLxT omqaXj1G1wt6NHFvRTTW9gyEbfyXR5ogci9MjI2pShRPtpelrtpjbX9QwxYaV1jKF4hEEd2fWiyK qhXH56fu3UtKoQcFmtgj/I/SSLJI6dMqcAQZaxUHhTmyyThWB34uwwrhsLHfmqT3rYdG6g6lfhxk tqpP6Ilo6uwv24a2NGPz/GM1Svj+PPiKid/XLbW6i4u9lqWKl3jIw86s2Y/+CamIFz8211T3lSZD w3/c/cuZvY3Mf3nJwbXJ+0a8yns1PpTNANDUXyUQonpkhL3lvDd5X7JMeW86/eRHVOxlvwFjJXiF 3VRD1pCHyC/Ih/RDwUW+RHgavY/spq+TR8g2wIVkA7mLXE0OkDsR20/30luTH5EiMoO8QZ5MvkFy iExcEJCFpJGUoMaFSBmffC95BGXWkELkrSfTsLn7Y/IfxEZC5A6aIL8iI+Th5BP0AdKV/JSsJA2k idwGcPLT9BZyJfa0lbBfD5MzYKXdQW7l/0FzHLVDpJ92QnKnknXJN4BdxlrFMNlI1ynPSrSVevrS D1o78bjTz7O0AD1pIAuwUq8jjuR3eB6lD9B8UpR8Gy2eRaZhpDOA00XOIc3ETtTUTE0kD7mlZBvd nXyX/3Z/HXrcSs4li3mPipLvJN9BzRfJ/WQfTdBCjP4e3vOfg94SXQPaHCDPgY6FZB8pRA03Azzb 0k8Rf2z86aMeqqd51E//Ru+nd1EffZx6yHiMaD3/l5x+gSb/hJ6y9tck2T9J/IFOp+VUTt7H3sbh s9KENllpGXRh0JB8QngJOLsYYGwNaMGNUgzGkytHAXStZIC+zEKpZRxYO9MwHwxsqMEAveDQgNlu J1PBJ38kl5DnyZzkE+QeamH/GUPXjQJzwSNF5Kzku4Kb0uQXgktwMTcFow/7dx9WOhX7sfCPP8IS 4IfP/7HGlIbHyeUkyOYZPWkkg6CigDFtwZzOgfG+P7lf0Ak6yMIryA/TMHmcVnEajVJulEoMGk+B EnBuCdGBzn2nwYXg5hxwR/koPcFDUzg9R2maouflJ2iZhuQ/0tx+G5+ntzk/ltK9LH0UWD5k6SPg nwPp+jz5WfIb+ijdQt5EbOTkQ/ZwKdXzmWISmoP2mHwuRS8KIaPs/5FCkNBvsU/chtBUzN9KOkgm k49JMR2Dcd9IXwGXl6HHzdSLnj8KTTAZFGklPVREaBagB71OYpwyxrSN6wEBUqxF2zpSwHsAvQB8 bpKRPMbnYBpRJt9Dj4oAa1CPlQxjnHpI2D+SbyYPQk5AveSfMPou0IrVb8FoDcBrxjOPaIiIurPQ /mH0chophpyGUF9m9TGj36FOU/KvJMp1y3iUuYNrg3jya/C8Ey0UkwKkjycBjK2L3HxCTy78z4Fi 2wtNRoRfQL2emwYW/iwFis+hzI8Qor6VEE2CEN1uQgwVhBhRztSELfMbhFjG/eeQeXcKsj44CdmF Pw72N1KQs4YQt+UkeK3/Ofg+Pwn+PxES+Px0KNCeAm8REvosBSX6k1B6PAVlQULKHzodqkpPgW3/ hf/Cf+G/8F/4L/wX/gv/vwfssoUbsXeuI+dh3y4QiURgTRLNMuWbbP/RP9vTWK+gJAIoA4g8FAO0 A+YCegCvA4YAhwEa4k2X3QTYks5REo+YJBFAGUAkMbhzAUMnYpsAWwBbAUcASiKLie06Y4WnsVVM oGqCLAdsAShQ9WTsME/ZlI5tBYjEpFAS1mkluqpER5TomhKlvOJx9vcR4vekF7AVsYMABVr/Dp1g 8D1ph9/D4XvAcfI8/H2AIwBtco/4zfap0ytIY534LRr6Fr38lnQAlgP6AHHAQQDoADcijmDE36Lh EV6qB7AZ8Dzie+DvS5fWoR1WYgQlRsgTgPgppViJI4AMoP92oPb2ip08YDDzwFfba+oq9jVaxa8w ts3cNcGNAGKAdsAmwBMAFdAcHcjQ83pHB6prKhrZkI5i+iuTffCnw0d8+9RpoLsbCTFAO4Bl7gMo 0e5RdPIoMB0lrKoC2I4Cw1HQ/yhmAylo4suBMTUcy5cDU2ZUNE5hIfIWb/1L8mba35H270/716b9 a9L+hWn/3LQ/K+1PT/sNab8+7del/Yq0X572A2k/L+17076H+18MTK/c3FgkfgHC9Yh/x0z+HcP9 O9ioA+6pKZsBWwFxwB7APkAG2axQsAsmuOiX+LUwm8wkHrR7hLebIx7h7X6CVj5BK5/wdj85LWUz YCsgDtgD2Cd+MpBh8TbK4tXgnqsJ8zsACtS6G7XuRq27UetupBC4EsALKAPIgA6ACjn7kbMfYnxQ fBP8wwSawJUAXkAZQAYoT4uJ4ovCXGwOPeIDQvfAQk8EbDAANhgAGwyg7wfFt9DWW7ytt9DWW6j9 Fmq/hdpv8bZOxkRxzoC40DMo/magmXkvbPct9Jgay8VmNN8MTmrGgJq5XDaBSHvgHgQI4Kgm5Dah kSaUaMKQm4hSbBVDJIiadcIsUgW/FnHm14hh7len/XFiaKAKePLEMrRSBt5kv341iQWIFSBWwGP5 iOUjlo9ulsHNR80C+JXw80U/i2MSvQOZDs7H3gFfIB0orah4VvQJM0ktL+Lb3tJa0dOoE3PRz1z0 vkDMIfsBAjJzBsoreLWcgQmt6QD0R6NZzBaWcVxZwldgRI9ohV8EPzPtewbcTZ6dtFHoxCwQ8JEe 1NaDVHrQVw/S6DHPepBHD7R6cIQeHKEHH+nBR3oQUw8+0m83WizyoPDqQH7lll3CK+Sw8Io8U/D6 6BblYaWwRXFYIWwRD4vCFuGwIDyvel4teFQx1VxVr2qTSulRx9Rz1b3qTWplTIiJ7UK7qPC6vXne Am/Y26qU3JJPypMKpLDUqprbuFQ4H5M4V/gTocKfhF4NwbD6hPeR5hXehVsGVwYIpAfuch7qg7uZ h7bCjfPQHl6a1enjcelEPVZyH+AgQOTpvK7wrrCMY/MKB4DlAEofIKJwQNjGUyVhP3KYHDC3DCAD OgAKYb9wNy+zTXiHDAIOAEThHeF8CJZHeHsgavI0jghvC7N4/A94fo/nNTyv4nkFBDVxeI2P6lX0 /VWSBGBNQ3oPYDlgM2APQAnqvIaxbRX+wJYnuDKgB8DKv0Y2AZ4HYJVF6QhCMd7WXLiUrBcuJ2uE fmBaL1wKuAywBrAWArReuAhwMeASwGqeshywArASsIqnLANcALgQ0MtTzgUsBZwHOB8pvcCxiOPo BY5e4OgFjl6Ooxc4eoGjFzh6OY5e4OgFjl7g6OU4eoGjFzh6gaOX4+gFjl7g6AWOXo6jDTgo3EsB lwHWANby9IsAFwMuAazmKcsBKwArAat4yjLABYALAb085VzAUsB5ANZ+DW+/Bu3XoP0atF/D269B +zVovwbt1/D2a9B+DdqvQfs1vP0atF+D9mvQfo3Q26+oaUwCQQ0Q1ABBDUcQ4QgiQBABgggQRDiC CBBEgCACBBGOIAIEESCIAEGEI4gAQQQIIkAQ4QOIoP0I2o+g/Qhvf4i3P4T2h9D+ENof4u0Pof0h tD+E9od4+0NofwjtD6H9Id7+ENofQvtDaH+Itz+E9ofQ/hDaH+LtrxeWgJEeBTwO5lovLAAsBCwC LOb5cwE9gHmA+TzlLMDZgG7AOTxlNqAT0AWYw1OmA2YAZgJm8alfQs4DnkUcTy/w9AJPL/D0cjy9 wNMLPL3A08vx9AJPL/D0Ak8vx9MLPL3A0ws8vRxPL/D0Ak8v8PRyPHOBZ67wCJkDXExYFgAWAhYB FvP8uYAewDzAfJ5yFuBsQDfgHJ4yG9AJ6ALM4SnTATMaYagC01yOqR2Y2oGpjWNqB6Z2YGoHpnaO qR2Y2oGpHZjaOaZ2YGoHpnZgaueY2oGpHZjagamdY2oHpnaMqB142jmeGPDUAIeA0ALAQsAiwGKe NxfQA5gHmM9TzgKcDegGnMNTZgM6AV2AOTxlOmAGYCZgFue7JaSY44gARwQ4IsAR4TgiwBEBjghw RDiOCHBEgCMCHBGOIwIcEeCIAEeE44gARwQ4IsAR4TiGgOM9jmMIOIaAYwg4hjiOIeAYAo4h4Bji OIaAYwg4hoBjiOMYAo4h4BgCjiGOYwg4hoBjCDiGGA7hcvqQsJY6ISXfQ1q+g9TcB9nYChnZAllZ CJmZDclohYQ0Q1LqIDFlkIsSyEcYclIAeQlAKvIgHT5IiRfS4haWoM3FaHMR+b7Rj15/h97fhz5u RV+3oM8L0ffZ6GEretqMHteh52XoXwn6GUZ/C9DvAHqXh1760FuvMF12uG//ZqHnesBKwApAOaAU MEidchUso+8BWwGtgDpAGaAAEADkAbwAN4DYbIQQi1kjN2YL9QLsAGKgz3J3E3dv4u5q7p7J3Vbu 1sjZHYZnOwwbOwy9HYa5HYauDsOEDkNNh+EZmiBXoMTHsusKw21XGK69wnD2FYa2KwxNVxgarzBU X2EYc4UhgrCXfkbrUPB+7t7O3ZuZS77n7jfcPcjdc7hbx10vd920bsBAMgbpVwO+eoz76ICvHd7w gG8+vEcGfFHPbvoQ8WHH6KEPDPjOQeovB3zT4C0Z8FXBWzzgK4fXNOBrhtf4pK/M851vUEFlk+dD 30rPG742T9xX7bmPpQ14tvAsnWelL+RZ5Cv2LEwlz055zczb4an3PeopSaWEUykzMzMyMzYP0p1y pXrz79Sbe9Sby9SbQ+rNxerNQfXmfPVmj3qzS23VWDSSxqjRa7QajUalUWgEDdFY2W8WwuxG26qS mKdSMFfBw5LAXCF14S1QjUDaSM8uoR5mQn2/MDaeKU4SJk1vopPiexaQSfO98WPT/YNUO3VOXOlv onHLJDJpRlNolX1S3DF9Unz61Dmdg0J9vG/8JC8+ccc0Ht0zvise5MFBShCuSIdlhGvS4T6EW9Nh lO+Kjw1NGlQnp8XHhSbFMzrO6uyn9KYuxOLCdWhlRucgTbKka3LYX3LvJJR6rvlpDvOT1/y0q4vY LonZY5YGc/WE8f/G6Um7p/x/lf1kkOHuuEzWex5Xe1rUnkq1x69m6ZOmI3Hz4+rNLerNmIhUot0V v33S9M540oWBpQOTMGvTvWd37hRiQn3L+J1CA/O6Onc6tgqxFvYCb8yxFYM8UQ7CGUM5yGYsXY4E WDkS+JdyeUIDK1fAvFS5PF4u77Ry/a2+lvH9Pt9omVZepvX0MltPL7OVl9maLiOmyvhOKZM5jvh4 GV/muB+UyfsPyhT82zKhH/ssavrRrFM/dCeZRof6ay9h/57e429ZBOiJ33DJufZ433yvdyeppUPp P1YP9sxfcC7z5y0apEP+RePjtf7x3v5pl/wwP34Jy57mH99PLmmZ0dl/ibxo/MA0eVqLf974ru3t S2LLTkN3/Si6/tiSf9PYEtZYjOFqX/Zvspex7HaGaxnDtYzhapfbOa6WpUz6Ojr7NaSpq/nslL9d 0GnB9T05vq4mm7S8gYtArc9+Rc4ubP23EV2oK673N8UNAJZV0ljSyLIg+CzLyP4aP51lv6LWl7OL bktnSUg2+5sIROAHn5bx/+8/F/HPqv/g85+UJKP5F9lblo4/9cuFOnRRaBW+oYtPNIQYGiar0gkX rQrxf6PT9xT0hHtaxR53j09YtYr/Rd2z2FWxXQ/bX1Gk0YvIyb9fRcX0B62kAoQ1x37ChsZX0ZTH uoimdhEiXoFGuuiqiy5GiYtJyv83n9GMlM9cABoeDVwcIuT/AfMUcbEKZW5kc3RyZWFtCmVuZG9i agoxMzEKMApvYmoKPDwKL1R5cGUKL0ZvbnQKL1N1YnR5cGUKL0NJREZvbnRUeXBlMgovQmFzZUZv bnQKL01VRlVaWStDb3VyaWVyTmV3LUJvbGQKL0NJRFN5c3RlbUluZm8KPDwKL1JlZ2lzdHJ5CihB ZG9iZSkKL09yZGVyaW5nCihVQ1MpCi9TdXBwbGVtZW50CjAKPj4KL0ZvbnREZXNjcmlwdG9yCjEz MwowClIKL0NJRFRvR0lETWFwCi9JZGVudGl0eQovRFcKNjAwCi9XClsKMApbCjYwMAowCjYwMApd Cl0KPj4KZW5kb2JqCjEzMwowCm9iago8PAovVHlwZQovRm9udERlc2NyaXB0b3IKL0ZvbnROYW1l Ci9NVUZVWlkrQ291cmllck5ldy1Cb2xkCi9GbGFncwo1Ci9Gb250QkJveApbCi00NgotMzU5Cjcw MQoxMDE2Cl0KL0FzY2VudAo2MzMKL0Rlc2NlbnQKLTIwOAovSXRhbGljQW5nbGUKMAovQ2FwSGVp Z2h0CjU5MQovU3RlbVYKODAKL0ZvbnRGaWxlMgoxMzQKMApSCj4+CmVuZG9iagoxMzUKMApvYmoK MzQ2CmVuZG9iagoxMzYKMApvYmoKMTcyNTYKZW5kb2JqCjEzNwowCm9iagozNjIKZW5kb2JqCjEz OAowCm9iagoyNTgxNwplbmRvYmoKMTM5CjAKb2JqCjM3NgplbmRvYmoKMTQwCjAKb2JqCjE2NzYx CmVuZG9iagoxCjAKb2JqCjw8Ci9UeXBlCi9QYWdlcwovS2lkcwpbCjYKMApSCjE0CjAKUgoyMAow ClIKMjUKMApSCjMxCjAKUgozNwowClIKNDIKMApSCjQ3CjAKUgo1MgowClIKNTcKMApSCjYyCjAK Ugo2NwowClIKNzIKMApSCjc3CjAKUgo4MgowClIKODkKMApSCjk0CjAKUgo5OQowClIKMTA1CjAK UgoxMTAKMApSCl0KL0NvdW50CjIwCj4+CmVuZG9iagp4cmVmCjAgMTQxCjAwMDAwMDAwMDIgNjU1 MzUgZiAKMDAwMDM0MDI5OCAwMDAwMCBuIAowMDAwMDAwMDAzIDAwMDAwIGYgCjAwMDAwMDAwMDAg MDAwMDAgZiAKMDAwMDAwMDAxNiAwMDAwMCBuIAowMDAwMDAwMTYwIDAwMDAwIG4gCjAwMDAwMDAy MDcgMDAwMDAgbiAKMDAwMDAwMDM3MyAwMDAwMCBuIAowMDAwMjcxMTE4IDAwMDAwIG4gCjAwMDAw MDA4NjQgMDAwMDAgbiAKMDAwMDAwMDg4MyAwMDAwMCBuIAowMDAwMDIzMDY5IDAwMDAwIG4gCjAw MDAwMjMxMDcgMDAwMDAgbiAKMDAwMDI3NjM2MCAwMDAwMCBuIAowMDAwMDAwOTAzIDAwMDAwIG4g CjAwMDAwMDEwNzIgMDAwMDAgbiAKMDAwMDI3MTM3OSAwMDAwMCBuIAowMDAwMDAxNzkzIDAwMDAw IG4gCjAwMDAwMDE4MTMgMDAwMDAgbiAKMDAwMDI3NjUxMCAwMDAwMCBuIAowMDAwMDAyMDMyIDAw MDAwIG4gCjAwMDAwMDIyMDEgMDAwMDAgbiAKMDAwMDI3MTY0MSAwMDAwMCBuIAowMDAwMDAzMTQ5 IDAwMDAwIG4gCjAwMDAwMDMxNjkgMDAwMDAgbiAKMDAwMDAwMzYwOSAwMDAwMCBuIAowMDAwMDAz Nzc4IDAwMDAwIG4gCjAwMDAyNzE5MDMgMDAwMDAgbiAKMDAwMDAwNDUwMSAwMDAwMCBuIAowMDAw MDA0NTIxIDAwMDAwIG4gCjAwMDAwMjMxNDEgMDAwMDAgbiAKMDAwMDAwNDc3NCAwMDAwMCBuIAow MDAwMDA0OTQzIDAwMDAwIG4gCjAwMDAyNzIxNjUgMDAwMDAgbiAKMDAwMDAwNTY2NyAwMDAwMCBu IAowMDAwMDA1Njg3IDAwMDAwIG4gCjAwMDAwODM3MDkgMDAwMDAgbiAKMDAwMDAwNTk0MCAwMDAw MCBuIAowMDAwMDA2MTA5IDAwMDAwIG4gCjAwMDAyNzI0MjcgMDAwMDAgbiAKMDAwMDAwNjU4MCAw MDAwMCBuIAowMDAwMDA2NjAwIDAwMDAwIG4gCjAwMDAwMDY2MjAgMDAwMDAgbiAKMDAwMDAwNjc4 OSAwMDAwMCBuIAowMDAwMjcyNjg5IDAwMDAwIG4gCjAwMDAwMDc0ODcgMDAwMDAgbiAKMDAwMDAw NzUwNyAwMDAwMCBuIAowMDAwMDA3NTI3IDAwMDAwIG4gCjAwMDAwMDc2OTYgMDAwMDAgbiAKMDAw MDI3Mjk1MSAwMDAwMCBuIAowMDAwMDA4NzM2IDAwMDAwIG4gCjAwMDAwMDg3NTYgMDAwMDAgbiAK MDAwMDAwODc3NiAwMDAwMCBuIAowMDAwMDA4OTQ1IDAwMDAwIG4gCjAwMDAyNzMyMTMgMDAwMDAg biAKMDAwMDAwOTg2OSAwMDAwMCBuIAowMDAwMDA5ODg5IDAwMDAwIG4gCjAwMDAwMDk5MDkgMDAw MDAgbiAKMDAwMDAxMDA3OCAwMDAwMCBuIAowMDAwMjczNDc1IDAwMDAwIG4gCjAwMDAwMTA3MzMg MDAwMDAgbiAKMDAwMDAxMDc1MyAwMDAwMCBuIAowMDAwMDEwNzczIDAwMDAwIG4gCjAwMDAwMTA5 NDIgMDAwMDAgbiAKMDAwMDI3MzczNyAwMDAwMCBuIAowMDAwMDEyMTE3IDAwMDAwIG4gCjAwMDAw MTIxMzggMDAwMDAgbiAKMDAwMDAxMjE1OCAwMDAwMCBuIAowMDAwMDEyMzI3IDAwMDAwIG4gCjAw MDAyNzM5OTkgMDAwMDAgbiAKMDAwMDAxMzExNSAwMDAwMCBuIAowMDAwMDEzMTM1IDAwMDAwIG4g CjAwMDAwMTMxNTUgMDAwMDAgbiAKMDAwMDAxMzMyNCAwMDAwMCBuIAowMDAwMjc0MjYxIDAwMDAw IG4gCjAwMDAwMTQ3NDkgMDAwMDAgbiAKMDAwMDAxNDc3MCAwMDAwMCBuIAowMDAwMDE0NzkwIDAw MDAwIG4gCjAwMDAwMTQ5NTkgMDAwMDAgbiAKMDAwMDI3NDUyMyAwMDAwMCBuIAowMDAwMDE1NTk3 IDAwMDAwIG4gCjAwMDAwMTU2MTcgMDAwMDAgbiAKMDAwMDAxNTYzNyAwMDAwMCBuIAowMDAwMDE1 ODA2IDAwMDAwIG4gCjAwMDAyNzQ3ODUgMDAwMDAgbiAKMDAwMDAxNzE0NiAwMDAwMCBuIAowMDAw MDE3MTY3IDAwMDAwIG4gCjAwMDAxNDYyOTEgMDAwMDAgbiAKMDAwMDIwNzQyNSAwMDAwMCBuIAow MDAwMDE3MTg3IDAwMDAwIG4gCjAwMDAwMTczNTYgMDAwMDAgbiAKMDAwMDI3NTA0NyAwMDAwMCBu IAowMDAwMDE3OTQxIDAwMDAwIG4gCjAwMDAwMTc5NjEgMDAwMDAgbiAKMDAwMDAxNzk4MSAwMDAw MCBuIAowMDAwMDE4MTUwIDAwMDAwIG4gCjAwMDAyNzUzMDkgMDAwMDAgbiAKMDAwMDAxOTExMiAw MDAwMCBuIAowMDAwMDE5MTMyIDAwMDAwIG4gCjAwMDAwMTkxNTIgMDAwMDAgbiAKMDAwMDAxOTMy NCAwMDAwMCBuIAowMDAwMjc1NTcxIDAwMDAwIG4gCjAwMDAwMjAxODYgMDAwMDAgbiAKMDAwMDAy MDIwNyAwMDAwMCBuIAowMDAwMjc2NjU2IDAwMDAwIG4gCjAwMDAwMjAyMjggMDAwMDAgbiAKMDAw MDAyMDQwMSAwMDAwMCBuIAowMDAwMjc1ODM0IDAwMDAwIG4gCjAwMDAwMjEzNTEgMDAwMDAgbiAK MDAwMDAyMTM3MiAwMDAwMCBuIAowMDAwMDIyMTkwIDAwMDAwIG4gCjAwMDAwMjIzNjMgMDAwMDAg biAKMDAwMDI3NjA5NyAwMDAwMCBuIAowMDAwMDIzMDI3IDAwMDAwIG4gCjAwMDAwMjMwNDggMDAw MDAgbiAKMDAwMDI1MDM5NyAwMDAwMCBuIAowMDAwMjUwNDIwIDAwMDAwIG4gCjAwMDAyNTA0NDMg MDAwMDAgbiAKMDAwMDI1ODc2NiAwMDAwMCBuIAowMDAwMjU4Nzg5IDAwMDAwIG4gCjAwMDAyNzEw NTAgMDAwMDAgbiAKMDAwMDI3MTA3MyAwMDAwMCBuIAowMDAwMjcxMDk1IDAwMDAwIG4gCjAwMDAy OTQ1NjkgMDAwMDAgbiAKMDAwMDI3NjgxMSAwMDAwMCBuIAowMDAwMjk1MTI1IDAwMDAwIG4gCjAw MDAyNzcyMzUgMDAwMDAgbiAKMDAwMDMyMTY2MCAwMDAwMCBuIAowMDAwMjk1MzI1IDAwMDAwIG4g CjAwMDAzMjIyMzAgMDAwMDAgbiAKMDAwMDI5NTc2NSAwMDAwMCBuIAowMDAwMzM5NzIyIDAwMDAw IG4gCjAwMDAzMjI0MjkgMDAwMDAgbiAKMDAwMDMzOTk2MSAwMDAwMCBuIAowMDAwMzIyODgzIDAw MDAwIG4gCjAwMDAzNDAxNjYgMDAwMDAgbiAKMDAwMDM0MDE4NyAwMDAwMCBuIAowMDAwMzQwMjEw IDAwMDAwIG4gCjAwMDAzNDAyMzEgMDAwMDAgbiAKMDAwMDM0MDI1NCAwMDAwMCBuIAowMDAwMzQw Mjc1IDAwMDAwIG4gCnRyYWlsZXIKPDwKL1NpemUKMTQxCi9Sb290CjQKMApSCi9JbmZvCjUKMApS Cj4+CnN0YXJ0eHJlZgozNDA0OTMKJSVFT0YK --00000000000064bbb7058e7073b2-- From nobody Wed Jul 24 14:48:35 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4AC32120451; Wed, 24 Jul 2019 14:48:34 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tltChB6bs9yl; Wed, 24 Jul 2019 14:48:31 -0700 (PDT) Received: from EUR04-DB3-obe.outbound.protection.outlook.com (mail-eopbgr60081.outbound.protection.outlook.com [40.107.6.81]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 66F72120431; Wed, 24 Jul 2019 14:48:31 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=YjW3+MBnsX7g58Np2lc0dxgVLv4srTCUnlBhuyM0nCeYdHlt9piD5ozLBNKCBLsmFefmTYcEs99jUqZuumtxoLVXpY0BjocT67aqmiUe2I/oBFexrS23rm8oBAH1iLAvrOxSbZVM3hmEuy3Cxov2iB/P4CRfr+IMWMz2x2Acsu7ejaP+ZEVWeGXMa9fY1W+Um5A394/QlHs7Vua2ZpP/EPEONeR/7OLo3uLE50QpVzuAXCZavxgDdJJg6QmbpzfR2NpxwO+cUDTuAIapcjVndKhPRDGiGDek+f6B02gedH5S/R3uzP8CTL8zLIkMFKBB1waFaMKP2Qjd7m3KTwTmPg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=QgLWsVYNxVfZ02963ua7LhPLeWPs4rtBpxYnlHUEddY=; b=jeqQPxPjvUc0lhy/8Goli/qLHyPGblWsrUZkpm1npfOvA6awdM/1lbLtd86ovutDOphn5YZIQhBvqIdkImRKXdsCfUr2RRsGpaed9eosRq9g7E0toDcJeNQEtkaoeoY9gDgc/d7BIfYUWNZ3XcIx+iK0Ep+8cKSRrc5oIhITPD4cjA1rD4ng+4Hfa/QoQbF2h4futAgRnRg5r9P0nJYBPFMa5NSVaC4zPOiZaNDnZP0AF2tmLznRCd4fYgT4SvwDW/4n9XV4VAgLyBrhdNCegm3csWkfdVkzNKIILBjjSYjWnv/L1eC0tb7zxYqkoJgxz7Xepvdv71Lgp4ETNSqEQA== ARC-Authentication-Results: i=1; mx.microsoft.com 1;spf=pass smtp.mailfrom=ericsson.com;dmarc=pass action=none header.from=ericsson.com;dkim=pass header.d=ericsson.com;arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=QgLWsVYNxVfZ02963ua7LhPLeWPs4rtBpxYnlHUEddY=; b=IXtyvtpP3M9sSNZyV+2X0xXlMJdB5YqqNb/C5Gvbq30N/LnU5Z3lX6RSYrLR7pZ80jwZrStlojtdBryqJKNzC/PX48cpnikGmq9wwG4wlApJELSAup81JA3stjsCyPx1kqKVJzRutsw+HO4ZKdsyOcfdkPHIv1K5TiXOUNQ8qeQ= Received: from AM0PR07MB4691.eurprd07.prod.outlook.com (52.135.149.158) by AM0PR07MB5233.eurprd07.prod.outlook.com (20.178.16.91) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2115.10; Wed, 24 Jul 2019 21:48:29 +0000 Received: from AM0PR07MB4691.eurprd07.prod.outlook.com ([fe80::118c:953f:8fb9:9e5]) by AM0PR07MB4691.eurprd07.prod.outlook.com ([fe80::118c:953f:8fb9:9e5%5]) with mapi id 15.20.2115.005; Wed, 24 Jul 2019 21:48:29 +0000 From: Mirja Kuehlewind To: "masque@ietf.org" CC: "quic@ietf.org" Subject: Re: [Masque] MASQUE side meeting Thread-Topic: [Masque] MASQUE side meeting Thread-Index: AQHVQmmHtzB7X1PDqkyR0n2Akz4GjQ== Date: Wed, 24 Jul 2019 21:48:29 +0000 Message-ID: Accept-Language: en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=mirja.kuehlewind@ericsson.com; x-originating-ip: [2001:67c:370:128:fc20:fd6c:46e9:de74] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 6f2350ae-8e05-44e5-247a-08d71080aa1e x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600148)(711020)(4605104)(1401327)(2017052603328)(7193020); SRVR:AM0PR07MB5233; x-ms-traffictypediagnostic: AM0PR07MB5233: x-ms-exchange-purlcount: 1 x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8273; x-forefront-prvs: 0108A997B2 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(366004)(136003)(396003)(39860400002)(346002)(376002)(39224004)(199004)(189003)(86362001)(36756003)(6306002)(5660300002)(46003)(25786009)(6512007)(68736007)(486006)(478600001)(102836004)(561944003)(99286004)(8936002)(6116002)(6506007)(33656002)(44832011)(305945005)(966005)(2906002)(81156014)(2501003)(476003)(81166006)(186003)(1730700003)(71200400001)(71190400001)(4744005)(14454004)(6916009)(2616005)(6486002)(229853002)(7736002)(2351001)(66946007)(66476007)(66556008)(66446008)(64756008)(91956017)(5640700003)(4326008)(14444005)(6436002)(76116006)(450100002)(8676002)(316002)(256004)(53936002)(6246003); DIR:OUT; SFP:1101; SCL:1; SRVR:AM0PR07MB5233; H:AM0PR07MB4691.eurprd07.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: ericsson.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam-message-info: XqbgEFys91BZSbCvySBOPtZyrVOfXybOITFvDiyuheGaTmz6AbUENTPzvm8y7df12TisuY86DRplHptUNwKMi7Wt3miUwaLvSx3P0zFik5OcTNMDntq9T3TkgTjpPMSjkGriB3UYs5sXEjbll0VMTqEMuDQzvgUAmTf8x5/I638BIuMKncMMoCi7HARewvpRCxB4BunVUMrz4h0D3wPqoAKliigq1fwaeVkXEp7xP8bP0JskzOFlXvFiq4ngKyePcC2bvSZsTmTycA3cvk8vxJBECpfhDA0ltHIR7dChWEuoT1rHKh8+GEWs2JJrYmQHML4TD4jUXdDdTGiClM5hjqYALmmakcZR+XnhwgnU+5sdZS7YpUhBFbuJSw4SWazpLziQgU2tQAgoIbvKw9kDhaM42wMD1064ICtEnrdqoTI= Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: ericsson.com X-MS-Exchange-CrossTenant-Network-Message-Id: 6f2350ae-8e05-44e5-247a-08d71080aa1e X-MS-Exchange-CrossTenant-originalarrivaltime: 24 Jul 2019 21:48:29.0815 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: mirja.kuehlewind@ericsson.com X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM0PR07MB5233 Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 24 Jul 2019 21:48:34 -0000 UXVpY2sgcmVtaW5kZXIgdGhhdCB3ZSBoYXZlIHRoZSBNQVNRVUUgc2lkZSBtZWV0aW5nIHRvbW9y cm93IGF0IDg6MzBhbSBpbiByb29tIFZhbiBIb3JuZS4NCg0KU2VlIHlvdSB0aGVyZSENCk1pcmph DQoNCg0K77u/T24gMDguMDcuMTksIDA4OjA2LCAiTWFzcXVlIG9uIGJlaGFsZiBvZiBNaXJqYSBL dWVobGV3aW5kIiA8bWFzcXVlLWJvdW5jZXNAaWV0Zi5vcmcgb24gYmVoYWxmIG9mIG1pcmphLmt1 ZWhsZXdpbmRAZXJpY3Nzb24uY29tPiB3cm90ZToNCg0KICAgIEhpIGFnYWluLA0KICAgIA0KICAg IEkgYWxzbyBtYWRlIGEgcm9vbSByZXNlcnZhdGlvbiBmb3IgDQogICAgDQogICAgCVRodXJzZGF5 IEp1bHkgMTUsIA0KICAgIAk4OjMwLTk6NDVhbSBpbiB0aGUgbW9ybmluZyBpbg0KICAgIAlyb29t IFZhbiBIb3JuZS4NCiAgICANCiAgICBXZSB3b3VsZCBsaWtlIHRvIGRpc2N1c3Mgd2l0aCBldmVy eWJvZHkgd2hvIGlzIGludGVyZXN0ZWQgbWFpbmx5Og0KICAgIA0KICAgICAtIG5ldyBhbmQgcGVu ZGluZyB1cGRhdGVzIG9uIHRoZSBNYXNxdWUgcHJvdG9jb2wgcHJvcG9zYWwNCiAgICAgLSB1c2Fn ZSBzY2VuYXJpb3MgZm9yIFFVSUMtYmFzZWQgdHVubmVsaW5nIGFuZCBwcm94eSBzZXJ2aWNlcyBh bmQgcmVxdWlyZW1lbnRzLg0KICAgIA0KICAgIE1vcmUgaW5mb3JtYXRpb24gd2lsbCBmb2xsb3ch DQogICAgDQogICAgTWlyamENCiAgICANCiAgICANCiAgICANCiAgICAtLSANCiAgICBNYXNxdWUg bWFpbGluZyBsaXN0DQogICAgTWFzcXVlQGlldGYub3JnDQogICAgaHR0cHM6Ly93d3cuaWV0Zi5v cmcvbWFpbG1hbi9saXN0aW5mby9tYXNxdWUNCiAgICANCg0K From nobody Wed Jul 24 15:10:02 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1B7D2120112 for ; Wed, 24 Jul 2019 15:09:59 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=apple.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8E4rOSfC7cEn for ; Wed, 24 Jul 2019 15:09:56 -0700 (PDT) Received: from ma1-aaemail-dr-lapp03.apple.com (ma1-aaemail-dr-lapp03.apple.com [17.171.2.72]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 33C4F1202EC for ; Wed, 24 Jul 2019 15:09:56 -0700 (PDT) Received: from pps.filterd (ma1-aaemail-dr-lapp03.apple.com [127.0.0.1]) by ma1-aaemail-dr-lapp03.apple.com (8.16.0.27/8.16.0.27) with SMTP id x6OM74xR030389; Wed, 24 Jul 2019 15:09:54 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=apple.com; h=sender : from : message-id : content-type : mime-version : subject : date : in-reply-to : cc : to : references; s=20180706; bh=3stuQCKYvberp/vpeqXi/4OTCH/771sQlu5VCAGFvV0=; b=SZrXdRo7sGdQBddrjkWCaZ24eVHdA6v5DvrEFh9XyMqZfxnarZcM5EF4OlhmiKk1+9uU 9RAolTOYcfXdEwcoAj4wf/8X4AS2pN6rIA5ydaUT/Ldc9iK0SFug956BkmQVa5j9ubu7 5oVNaSfXhYuP272n2gQ7vZnCDmSTtVqXjEsWMYOC/71f5ZDPm7A6T6APIj7em1zUaYvi KGJHLOIf8VIQ/1YwgE9khbep/ansYtAIlWbKGIiH+TlLzt9lybjE1Ayzm0HvPBtY2ofQ tsgiNI/hzypBelTnePaiCEU1a0brpYjpyYdTeWOIDQrA4U2QEP03xDQGYz7dt2lstQJ4 qQ== Received: from ma1-mtap-s02.corp.apple.com (ma1-mtap-s02.corp.apple.com [17.40.76.6]) by ma1-aaemail-dr-lapp03.apple.com with ESMTP id 2tx69scrjg-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO); Wed, 24 Jul 2019 15:09:54 -0700 Received: from nwk-mmpp-sz10.apple.com (nwk-mmpp-sz10.apple.com [17.128.115.122]) by ma1-mtap-s02.corp.apple.com (Oracle Communications Messaging Server 8.0.2.4.20190507 64bit (built May 7 2019)) with ESMTPS id <0PV6006XK2WGVN00@ma1-mtap-s02.corp.apple.com>; Wed, 24 Jul 2019 15:09:54 -0700 (PDT) Received: from process_milters-daemon.nwk-mmpp-sz10.apple.com by nwk-mmpp-sz10.apple.com (Oracle Communications Messaging Server 8.0.2.4.20190507 64bit (built May 7 2019)) id <0PV6006002VBTQ00@nwk-mmpp-sz10.apple.com>; Wed, 24 Jul 2019 15:09:54 -0700 (PDT) X-Va-A: X-Va-T-CD: aa24d9bb18a53cf90233e818c4daa35e X-Va-E-CD: b42e1731a8648bdf8d931aa1eda3b9af X-Va-R-CD: 4798a8ccd957a0d6b4548f4d1f0608d0 X-Va-CD: 0 X-Va-ID: 0c880381-e21d-4e23-a822-27ccf5102968 X-V-A: X-V-T-CD: aa24d9bb18a53cf90233e818c4daa35e X-V-E-CD: b42e1731a8648bdf8d931aa1eda3b9af X-V-R-CD: 4798a8ccd957a0d6b4548f4d1f0608d0 X-V-CD: 0 X-V-ID: 87809414-6be8-49fc-9772-70a397dd63f5 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:,, definitions=2019-07-24_08:,, signatures=0 Received: from [17.235.0.161] by nwk-mmpp-sz10.apple.com (Oracle Communications Messaging Server 8.0.2.4.20190507 64bit (built May 7 2019)) with ESMTPSA id <0PV6003732WE1E70@nwk-mmpp-sz10.apple.com>; Wed, 24 Jul 2019 15:09:53 -0700 (PDT) Sender: tpauly@apple.com From: Tommy Pauly Message-id: <9B7FEB9E-B8CC-488B-BFCC-3F550333B58F@apple.com> Content-type: multipart/alternative; boundary="Apple-Mail=_F2DFFA76-D146-42D6-8922-BC2DE497F9F2" MIME-version: 1.0 (Mac OS X Mail 12.4 \(3445.104.2\)) Subject: Re: Updated DATAGRAM -03 draft Date: Wed, 24 Jul 2019 18:09:46 -0400 In-reply-to: Cc: QUIC WG To: Tommy Pauly References: <156246300105.3401.11374988947164402300.idtracker@ietfa.amsl.com> X-Mailer: Apple Mail (2.3445.104.2) X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2019-07-24_08:, , signatures=0 Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 24 Jul 2019 22:09:59 -0000 --Apple-Mail=_F2DFFA76-D146-42D6-8922-BC2DE497F9F2 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 We had a productive lunch meeting for Datagram today after the QUIC = session (with Lars, ekr, Martin Thomson, Lucas Pardue, David Schinazi, = Eric Kinnear, Nick Banks, and Tommy Pauly in attendance). The group agreed that the relevant open issue was the use of flow IDs in = the transport. The decision we came to collectively was to: - Remove Flow Identifiers from the QUIC DATAGRAM (transport) draft. = Specify that each application is responsible for defining its datagram = flow management scheme. - David will be creating a new document to define how HTTP/3 marks and = uses DATAGRAM frames. I have opened a Pull Request to remove flow IDs from the draft here: = https://github.com/tfpauly/draft-pauly-quic-datagram/pull/11 While this may get merged, we don't plan to submit a new version of the = draft until the new HTTP/3 draft has been written. Best, Tommy > On Jul 8, 2019, at 11:20 AM, Tommy Pauly = wrote: >=20 > Hello all, >=20 > We=E2=80=99ve updated the QUIC DATAGRAM draft to incorporate some of = the feedback we received at the side meeting in Prague. Notably, it = clarifies: >=20 > - Guidance around datagram acknowledgements > - Datagrams do not participate in any flow control > - Datagrams do participate in congestion control >=20 > The remaining area of open discussion is around the newly re-named = optional =E2=80=9Cflow identifiers=E2=80=9D. The primary argument for = removing these is that applications can add identifiers onto datagrams = themselves, and the transport should not transmit a field that it does = not do anything with. We did add some text clarifying that these = identifiers are essentially like UDP ports for demultiplexing, and = pointed out some *minimal* things the transport can do to help batch = transmission of datagrams in the same flow and promote fate-sharing = within a flow. There=E2=80=99s been some discussion on Slack of other = approaches that would make these flow IDs more first-class = citizens=E2=80=94adding reliable signaling for opening and closing = flows, as many applications would also generally need some similar sort = of control channel=E2=80=94but these seem a bit heavy-weight. Either = way, this is an area where discussion is welcome and I expect the = document to change. >=20 > Best, > Tommy >=20 >> Begin forwarded message: >>=20 >> From: internet-drafts@ietf.org >> Subject: New Version Notification for = draft-pauly-quic-datagram-03.txt >> Date: July 6, 2019 at 6:30:01 PM PDT >> To: Eric Kinnear >, = David Schinazi >, Tommy Pauly > >>=20 >>=20 >> A new version of I-D, draft-pauly-quic-datagram-03.txt >> has been successfully submitted by Tommy Pauly and posted to the >> IETF repository. >>=20 >> Name: draft-pauly-quic-datagram >> Revision: 03 >> Title: An Unreliable Datagram Extension to QUIC >> Document date: 2019-07-06 >> Group: Individual Submission >> Pages: 8 >> URL: = https://www.ietf.org/internet-drafts/draft-pauly-quic-datagram-03.txt = >> Status: = https://datatracker.ietf.org/doc/draft-pauly-quic-datagram/ = >> Htmlized: = https://tools.ietf.org/html/draft-pauly-quic-datagram-03 = >> Htmlized: = https://datatracker.ietf.org/doc/html/draft-pauly-quic-datagram = >> Diff: = https://www.ietf.org/rfcdiff?url2=3Ddraft-pauly-quic-datagram-03 = >>=20 >> Abstract: >> This document defines an extension to the QUIC transport protocol = to >> add support for sending and receiving unreliable datagrams over a >> QUIC connection. >>=20 >>=20 >>=20 >>=20 >> Please note that it may take a couple of minutes from the time of = submission >> until the htmlized version and diff are available at tools.ietf.org = . >>=20 >> The IETF Secretariat >>=20 >=20 --Apple-Mail=_F2DFFA76-D146-42D6-8922-BC2DE497F9F2 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 We = had a productive lunch meeting for Datagram today after the QUIC session = (with Lars, ekr, Martin Thomson, Lucas Pardue, David Schinazi, Eric = Kinnear, Nick Banks, and Tommy Pauly in attendance).

The group agreed that = the relevant open issue was the use of flow IDs in the transport. The = decision we came to collectively was to:

- Remove Flow Identifiers from the QUIC = DATAGRAM (transport) draft. Specify that each application is responsible = for defining its datagram flow management scheme.
- = David will be creating a new document to define how HTTP/3 marks and = uses DATAGRAM frames.

I have opened a Pull Request to remove = flow IDs from the draft here: https://github.com/tfpauly/draft-pauly-quic-datagram/pull/11

While this = may get merged, we don't plan to submit a new version of the draft until = the new HTTP/3 draft has been written.

Best,
Tommy

On Jul 8, 2019, at 11:20 AM, = Tommy Pauly <tpauly=3D40apple.com@dmarc.ietf.org> wrote:

Hello all,

We=E2=80=99ve updated = the QUIC DATAGRAM draft to incorporate some of the feedback we received = at the side meeting in Prague. Notably, it clarifies:

- Guidance around = datagram acknowledgements
- Datagrams do not = participate in any flow control
- Datagrams do = participate in congestion control

The remaining area of open discussion = is around the newly re-named optional =E2=80=9Cflow identifiers=E2=80=9D. = The primary argument for removing these is that applications can add = identifiers onto datagrams themselves, and the transport should not = transmit a field that it does not do anything with. We did add some text = clarifying that these identifiers are essentially like UDP ports for = demultiplexing, and pointed out some *minimal* things the transport can = do to help batch transmission of datagrams in the same flow and promote = fate-sharing within a flow. There=E2=80=99s been some discussion on = Slack of other approaches that would make these flow IDs more = first-class citizens=E2=80=94adding reliable signaling for opening and = closing flows, as many applications would also generally need some = similar sort of control channel=E2=80=94but these seem a bit = heavy-weight. Either way, this is an area where discussion is welcome = and I expect the document to change.

Best,
Tommy

Begin = forwarded message:

From: internet-drafts@ietf.org
Subject: New Version Notification for = draft-pauly-quic-datagram-03.txt
Date: July 6, 2019 at 6:30:01 PM PDT
To: Eric Kinnear <ekinnear@apple.com>, David Schinazi <dschinazi.ietf@gmail.com>, Tommy Pauly <tpauly@apple.com>

A new version of I-D, draft-pauly-quic-datagram-03.txt
has been successfully submitted by Tommy Pauly and posted to = the
IETF repository.

Name: = draft-pauly-quic-datagram
Revision: 03
Title:= = An Unreliable Datagram Extension to QUIC
Document = date: = 2019-07-06
Group: Individual Submission
Pages:= = 8
URL: =            https://www.ietf.org/internet-drafts/draft-pauly-quic-datagram-= 03.txt
Status: =         https://datatracker.ietf.org/doc/draft-pauly-quic-datagram/=
Htmlized:       https://tools.ietf.org/html/draft-pauly-quic-datagram-03Htmlized:       https://datatracker.ietf.org/doc/html/draft-pauly-quic-datagram=
Diff: =           https://www.ietf.org/rfcdiff?url2=3Ddraft-pauly-quic-datagram-0= 3

Abstract:
=   This document defines an extension to the QUIC transport = protocol to
  add support for sending and = receiving unreliable datagrams over a
  QUIC = connection.



Please note that it may take a couple of minutes from the = time of submission
until the htmlized version and diff are = available at tools.ietf.org.

The IETF = Secretariat



= --Apple-Mail=_F2DFFA76-D146-42D6-8922-BC2DE497F9F2-- From nobody Fri Jul 26 06:48:36 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 91FA812001B for ; Fri, 26 Jul 2019 06:48:34 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hWou_uxgCDBp for ; Fri, 26 Jul 2019 06:48:32 -0700 (PDT) Received: from mail-lj1-x22a.google.com (mail-lj1-x22a.google.com [IPv6:2a00:1450:4864:20::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1B63912000E for ; Fri, 26 Jul 2019 06:48:32 -0700 (PDT) Received: by mail-lj1-x22a.google.com with SMTP id z28so51636017ljn.4 for ; Fri, 26 Jul 2019 06:48:32 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=tfxdA0aqoeACbyJK5nmkbbGy/6Q/SKyJyl/q1VvcGrg=; b=psJcPX3kMvqySyVnc5+r3Wz7X4Cxzoq9dEDLtMnCQJ08Uva46akrl9eLp6hw9WXMSe nyZCIB8KnisUeyMTZDHVdy2EMlIQodk2DXchYx/RTsmOMdcqoCYb4PzRTxTdUPwsVwvM Ez5EXLutwaCaSjte9n3cGErsuRp0wwQYZmhnEVKcRED0AZVv0JqZaTtC5VVSq4tJz2Gl Zj0hCdW3bT5+VwtbmwBKdadYqGF9jpWVYAUmh2BP5Bcmf7XABmGyNqU2OT/f95xNS8/b 1K51G42Cqr72C3RujYfzHVivpecxJatDZI0B3FKOe/01pKvzhgAMV9jUE7FFj/LqlNSm KZqA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=tfxdA0aqoeACbyJK5nmkbbGy/6Q/SKyJyl/q1VvcGrg=; b=c8Z4IFIBj/XnYp6bCUMYtAGpIs87OLzImdfHsvjBIdii4n20JoFD48eqEexsDExQ/r oAKtwBHddDrbJrfy8GruqIOUJBVVF5ZdB6a0F+XM1lXC8DVNuBcFQSAV855v1v+d+Kcz fq9Ib02lvNU5PlFmVZfuvEn233YcbyjQ7vnYcjQ1qKyI3dIdnLCODfQlEVRn/oaWVWI/ nmlo+/o3qLoq4ZB69NVov62MXV3sOMAQUp5Ppl8N7nJIFZYNTLSMaUEIkXlKn107EmYY nU9W2L3q+w9RxAW6MjPjluaoRYSCM97r4kp0bpFfJCJ0bdAC2dbqh6Qsc0zfBa6MJOod agXQ== X-Gm-Message-State: APjAAAXp0pPRyQe4ssVcgVkl/w31kUW1zQd08UzwGVIxCjpaQDx8QbIF qUh1YoF2G4ZRhwbjF3oc2fddpb6o2sqcYrd5DWI= X-Google-Smtp-Source: APXvYqwIO4PkbTRbEZHSl0BPG6/9uAlJ/T3XVgPZVnF6BhZ5rsLf9R0m1nin+rFyAfZALW8YeBVD3oV6naSBHLZd6cs= X-Received: by 2002:a2e:9b03:: with SMTP id u3mr29813024lji.15.1564148910365; Fri, 26 Jul 2019 06:48:30 -0700 (PDT) MIME-Version: 1.0 References: <564520DD-2BAE-48EE-9041-3FCF5531328A@vcontractor.co.za> In-Reply-To: <564520DD-2BAE-48EE-9041-3FCF5531328A@vcontractor.co.za> From: Kazuho Oku Date: Fri, 26 Jul 2019 09:48:21 -0400 Message-ID: Subject: Re: [WARNING: ATTACHMENT(S) MAY CONTAIN MALWARE]Re: HTTP(3) priorities To: "Oliver, Wesley, Vodacom South Africa (External)" Cc: Ian Swett , IETF QUIC WG , HTTP Working Group Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 26 Jul 2019 13:48:34 -0000 Hi Oliver, Thank you for your comments. Being a server developer, I like the idea of splitting the urgency groups, but I am not sure if we should bake something that we *might* want to use into the core design. IIUC, your suggestion is to have a more fine-grained signaling between the web application and the H2/H3 terminator. Assuming that is the case, these two parties can do an experiment, by defining a proprietary parameter of the Proxy header field, do the experiments, then ask for it to become an official extension. Now that we are dropping support for priorities in H3, it is beneficial to have some alternative shipped at an early moment. Therefore, it is my view that we should first standardize something minimally viable, based on what the clients and servers already do, at the same time leaving room for experiments and improvements. While I agree that having 20*8 urgency levels is possible, it is complex than just having 8 urgency levels. Broad adoption of the H2 prioritization scheme happened, even though it was implementable. At least two large-scale server operators do support it the way spec is written. But for others, it seemed too complicated. I think we would like to minimize the chance of repeating that failure. Regarding your other comments, I am not sure if I am following, but I do not think that routers or switches would deal with the HTTP-level priority information. Plaintext H2 is not a thing, and H3 will always be encrypted. It is also my understanding that sending some packets of a connection with a different QoS label is a bad idea, because doing so would have bad impact on loss recovery and congestion control. I could be wrong (or there might be some solution that I am not aware of - I'm not a transport persone), though. 2019=E5=B9=B47=E6=9C=8825=E6=97=A5(=E6=9C=A8) 2:48 Oliver, Wesley, Vodacom = South Africa (External) : > > Hi, > > The only thing I could suggest is that you make those priority flags incr= ements of 20, > So that if there are changes or minor priority preference per website, th= en > That in between numbers can be used. If there is any new future priority = conventions > Then just add them in the middle of the 20 group splitting the existing g= roup. > Maybe make the field 2 bytes, which allows for future expansion, were the= re are many files, streams > Which require a new priority order. > > Otherwise one needs to build a priority map, over the deps, converting a = high resolution to low resolution. > > Kind Regards, > > Wesley Oliver > > > On 24 Jul 2019, at 19:14, Kazuho Oku wrote: > > > > Hi! > > > > Attached are the slides that Lucas and I presented during the side meet= ing. > > > > Thank you all for the feedback. > > > > 2019=E5=B9=B47=E6=9C=889=E6=97=A5(=E7=81=AB) 21:00 Ian Swett : > >> > >> There has been quite a bit of discussion of HTTP priorities lately on = both the QUIC and HTTP mailing lists, with more to follow. The plan for IE= TF in Montreal is as follows: > >> > >> Monday: Overview of priorities for 15 minutes in HTTP, with 15 minutes= discussion. > >> Wednesday: A side meeting will be held from 8:30-9:45am in Van Horne. > >> Thursday: I'll summarise the side meeting in Wednesday's HTTP session. > >> > >> Thanks, Ian > > > > > > > > -- > > Kazuho Oku > > > > This e-mail is classified C2 - Vodacom Restricted - Information to be use= d inside Vodacom but it may be shared with authorised partners. > > "This e-mail is sent on the Terms and Conditions that can be accessed by = Clicking on this linkhttps://www.vodacom.co.za/vodacom/terms/email-acceptab= le-user-policy" --=20 Kazuho Oku From nobody Sat Jul 27 17:45:30 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7AEAF1200C1 for ; Sat, 27 Jul 2019 17:45:27 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.699 X-Spam-Level: X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=mnot.net header.b=sj7vb0ol; dkim=pass (2048-bit key) header.d=messagingengine.com header.b=nddWwXgu Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SBj0iwjgtkrw for ; Sat, 27 Jul 2019 17:45:24 -0700 (PDT) Received: from out3-smtp.messagingengine.com (out3-smtp.messagingengine.com [66.111.4.27]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EA250120047 for ; Sat, 27 Jul 2019 17:45:23 -0700 (PDT) Received: from compute4.internal (compute4.nyi.internal [10.202.2.44]) by mailout.nyi.internal (Postfix) with ESMTP id 0A3EC21B03 for ; Sat, 27 Jul 2019 20:45:23 -0400 (EDT) Received: from mailfrontend1 ([10.202.2.162]) by compute4.internal (MEProxy); Sat, 27 Jul 2019 20:45:23 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mnot.net; h= content-type:mime-version:from:to:subject:message-id:date; s= fm3; bh=hCXm42QbYxNaBCNdoRPYUBmY24a64ZClhpdnjkbODsY=; b=sj7vb0ol RB2ZOvg/AEXZxE6TRFHBsssP0orBYtGGKY9BdGar1pk6BaXgJt1T2Bkix6iBF02D DoJLum7vrrlnSeySPvMoiW74le0GT/zIuIWR3bDsnSNQsT9fLv5XIL/FmM7s4rh7 jko/mQeelxoNLWzIfKaxuT6mOGSvAsdGvMooW1QbSElgD1nnjrZj2McENK54zlMa TwoxqYrc6qYBfx92KBIi6FDXT5QUtI+tmVzHP2LoMYwgzk4/8mvNTf5meqalwyjL tJ/v6Cyt51mQ8Ci6VlN1wPnJhvPs6+sWtO6u0zy1RlNXZzaIcWAQ03PAH/kPmWZo OfIAt3y3JLF2nw== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=content-type:date:from:message-id :mime-version:subject:to:x-me-proxy:x-me-proxy:x-me-sender :x-me-sender:x-sasl-enc; s=fm3; bh=hCXm42QbYxNaBCNdoRPYUBmY24a64 ZClhpdnjkbODsY=; b=nddWwXguMp3W5tp3kkh8tx3ZnES914hLqpgJxqVVC4GQI 92CctgJrSpDNfTD9oAhubQ3uJrGwpXs77uNKJUc2HNK7+eceR7WhPYRW6lQZt6Gi fxnu4qv96UktTiNYETgEyMflBBhd1eZdhFFlFoFGBmMXNiY7+nuy6y5DFijNyqM+ Kp1G3vV1YmEVNH3A+3ONsBAY2nwoe7kbHvkKl3O+z0I0aIdwVWXJEwz5DU1ixKcS Q3hNLiQoCEGKhFn/eGGKXwSQuBC2XzkxMZf/nEjNfpmCom78mw2a1Mz2mliQcedZ kcWXS/g6WVfKUApvpyN8Xc1KG0LO/JJt3IvMSEgHA== X-ME-Sender: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeduvddrkeejgddvhecutefuodetggdotefrodftvf curfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfghnecu uegrihhlohhuthemuceftddtnecunecujfgurheptggghffvufesrgdttdertddtjeenuc fhrhhomhepifhithhhuhgspgfpohhtihhfihgtrghtihhonhhsuceoughopghnohhtpghr vghplhihsehmnhhothdrnhgvtheqnecuffhomhgrihhnpehgihhthhhusgdrtghomhenuc fkphepudduledrledrgeefrddvgedunecurfgrrhgrmhepmhgrihhlfhhrohhmpeguohgp nhhothgprhgvphhlhiesmhhnohhtrdhnvghtnecuvehluhhsthgvrhfuihiivgeptd X-ME-Proxy: Received: from cloud.mnot.net (cloud.mnot.net [119.9.43.241]) by mail.messagingengine.com (Postfix) with ESMTPA id 0C08180059 for ; Sat, 27 Jul 2019 20:45:21 -0400 (EDT) Received: from cloud.mnot.net (localhost [127.0.0.1]) by cloud.mnot.net (Postfix) with ESMTP id 1A76FC0F8D for ; Sun, 28 Jul 2019 00:45:18 +0000 (UTC) Content-Type: multipart/alternative; boundary="===============7206424627899281272==" MIME-Version: 1.0 From: =?utf-8?q?Github_Notifications?= To: quic@ietf.org Subject: Weekly github digest (QUIC Working Group Specifications) Message-Id: <20190728004518.1A76FC0F8D@cloud.mnot.net> Date: Sun, 28 Jul 2019 00:45:18 +0000 (UTC) Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 28 Jul 2019 00:45:28 -0000 --===============7206424627899281272== MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8"; format="flowed" Issues ------ * quicwg/base-drafts (+6/-6/=F0=9F=92=AC90) 6 issues created: - Non-ACK-eliciting packets never need to be ACKed (by dtikhonov) https://github.com/quicwg/base-drafts/issues/2931 = - Lift single-packet ClientHello requirement? (by davidben) https://github.com/quicwg/base-drafts/issues/2928 = - ICID or OCID? (by mikkelfj) https://github.com/quicwg/base-drafts/issues/2926 = - Remove PRIORITY (by martinthomson) https://github.com/quicwg/base-drafts/issues/2924 [-http] [design] = - MIn_RTT management (by gorryfair) https://github.com/quicwg/base-drafts/issues/2923 = - Should server TP encryption be a requirement for the cryptographic hand= shake? (by chris-wood) https://github.com/quicwg/base-drafts/issues/2920 = 28 issues received 90 new comments: - #2844 Client connection IDs are broken (27 by kazuho, marten-seemann, m= ikkelfj, Ralith, larseggert, DavidSchinazi, martinthomson, igorlord, martin= duke) https://github.com/quicwg/base-drafts/issues/2844 [-transport] [design] = - #2924 Remove PRIORITY (11 by RyanAtGoogle, martinthomson, rmarx, LPardu= e, mikkelfj) https://github.com/quicwg/base-drafts/issues/2924 [-http] [design] = - #2928 Lift single-packet ClientHello requirement? (9 by janaiyengar, mi= kkelfj, nibanks, martinthomson, davidben, ianswett) https://github.com/quicwg/base-drafts/issues/2928 [-tls] = - #2670 Remove ack_delay_exponent TP (7 by janaiyengar, martinthomson, la= rseggert, huitema, mikkelfj) https://github.com/quicwg/base-drafts/issues/2670 [-transport] [design]= [proposal-ready] = - #2632 H3 GOAWAY should be symmetric and cover bidi and uni streams (4 b= y martinthomson, LPardue, afrind) https://github.com/quicwg/base-drafts/issues/2632 [-http] [design] = - #2143 Be more conservative about migration? (4 by erickinnear, gorryfai= r, mikkelfj) https://github.com/quicwg/base-drafts/issues/2143 [-transport] [design] = - #2834 Long Header Packets and Routing Connection IDs (3 by igorlord, la= rseggert, martinduke) https://github.com/quicwg/base-drafts/issues/2834 [-transport] [design] = - #2496 QUIC Version Ossification (2 by mnot, martinduke) https://github.com/quicwg/base-drafts/issues/2496 [-transport] [design] = - #2785 Disallow reuse of stateless reset tokens (2 by martinthomson, lar= seggert) https://github.com/quicwg/base-drafts/issues/2785 [-transport] [design] = - #2792 Timing side-channel on key updates (2 by larseggert, ekr) https://github.com/quicwg/base-drafts/issues/2792 [-tls] [design] = - #2920 Should server TP encryption be a requirement for the cryptographi= c handshake? (2 by DavidSchinazi, martinthomson) https://github.com/quicwg/base-drafts/issues/2920 [-transport] [design] = - #2593 Persistent congestion interaction with app limited state (1 by si= yengar) https://github.com/quicwg/base-drafts/issues/2593 [-recovery] [editoria= l] = - #2084 Discuss requirement that connection IDs not be correlatable (1 by= martinduke) https://github.com/quicwg/base-drafts/issues/2084 [-transport] [design] = - #2863 unrecoverable loss pattern leads to deadlock (1 by ianswett) https://github.com/quicwg/base-drafts/issues/2863 [-transport] [design] = - #2931 Non-ACK-eliciting packets never need to be ACKed (1 by mikkelfj) https://github.com/quicwg/base-drafts/issues/2931 = - #2498 Error Code when SETTINGS exceeds maximum (1 by MikeBishop) https://github.com/quicwg/base-drafts/issues/2498 [-http] [design] = - #1860 ACK-only feedback loop in recovery instead of transport (1 by ian= swett) https://github.com/quicwg/base-drafts/issues/1860 [-recovery] [editoria= l] = - #2895 Advise bundling a PING or other small ACK eliciting frame with In= itials (1 by janaiyengar) https://github.com/quicwg/base-drafts/issues/2895 [-recovery] [design] = - #2387 Write up our security target against on-path attack (1 by larsegg= ert) https://github.com/quicwg/base-drafts/issues/2387 [-transport] [design] = - #2656 Discarding connection state at server on unvalidated client (1 by= larseggert) https://github.com/quicwg/base-drafts/issues/2656 [-transport] [design] = - #2789 Use a higher seed RTT for new paths (1 by mnot) https://github.com/quicwg/base-drafts/issues/2789 [-recovery] [design] = - #2534 ECN text disables ECN too aggressively (1 by janaiyengar) https://github.com/quicwg/base-drafts/issues/2534 [-recovery] [-transpo= rt] [design] = - #2923 MIn_RTT management (1 by gorryfair) https://github.com/quicwg/base-drafts/issues/2923 = - #2163 ECN attacks (1 by gloinul) https://github.com/quicwg/base-drafts/issues/2163 [-transport] [editori= al] = - #2170 Embed QUIC version in expansion (1 by larseggert) https://github.com/quicwg/base-drafts/issues/2170 [-tls] [design] = - #2555 Define idle period for congestion control (1 by mnot) https://github.com/quicwg/base-drafts/issues/2555 [-recovery] [design] = - #2556 Should kPersistentCongestionThreshold be 2 or 3? (1 by mnot) https://github.com/quicwg/base-drafts/issues/2556 [-recovery] [design] = - #2685 CC state after a change of path? (1 by janaiyengar) https://github.com/quicwg/base-drafts/issues/2685 [-transport] [design] = 6 issues closed: - Should kPersistentCongestionThreshold be 2 or 3? https://github.com/qui= cwg/base-drafts/issues/2556 [-recovery] [design] = - Persistent congestion interaction with app limited state https://github= .com/quicwg/base-drafts/issues/2593 [-recovery] [editorial] = - Clients cannot abandon Initial packets while server can still send init= ial close https://github.com/quicwg/base-drafts/issues/2541 [-transport] [d= esign] = - Error Code when SETTINGS exceeds maximum https://github.com/quicwg/base= -drafts/issues/2498 [-http] [design] = - Advise bundling a PING or other small ACK eliciting frame with Initials= https://github.com/quicwg/base-drafts/issues/2895 [-recovery] [design] = - CC state after a change of path? https://github.com/quicwg/base-drafts/= issues/2685 [-transport] [design] = Pull requests ------------- * quicwg/base-drafts (+8/-4/=F0=9F=92=AC14) 8 pull requests submitted: - Fix typo in transport draft: eliciting (by dtikhonov) https://github.com/quicwg/base-drafts/pull/2930 = - Minor clarification. Fixes #2084 (by ekr) https://github.com/quicwg/base-drafts/pull/2929 = - Update draft-ietf-quic-transport.md (by ianswett) https://github.com/quicwg/base-drafts/pull/2927 [-transport] = - Add initial threat model appendix (by erickinnear) https://github.com/quicwg/base-drafts/pull/2925 = - Remove PRIORITY (by martinthomson) https://github.com/quicwg/base-drafts/pull/2922 [-http] [design] = - Confidentiality for server transport parameters (by martinthomson) https://github.com/quicwg/base-drafts/pull/2921 [-transport] [design] = - MinRTT for the congestion control context (by ianswett) https://github.com/quicwg/base-drafts/pull/2919 = - Fix language around CC on migration (by janaiyengar) https://github.com/quicwg/base-drafts/pull/2918 = 4 pull requests received 14 new comments: - #2922 Remove PRIORITY (11 by kazuho, rmarx, janaiyengar, LPardue, mikke= lfj) https://github.com/quicwg/base-drafts/pull/2922 [-http] [design] = - #2893 Remove DoS vector for spoofed connection migration (1 by igorlord) https://github.com/quicwg/base-drafts/pull/2893 [-transport] = - #2907 Fix Recovery Pseudocode (1 by janaiyengar) https://github.com/quicwg/base-drafts/pull/2907 [-recovery] [editorial] = - #2925 Add initial threat model appendix (1 by erickinnear) https://github.com/quicwg/base-drafts/pull/2925 = 4 pull requests merged: - Fix typo in transport draft: eliciting https://github.com/quicwg/base-drafts/pull/2930 = - PTO should always send an ack-eliciting packet https://github.com/quicwg/base-drafts/pull/2912 [-recovery] = - Up to two full-sized datagrams, not packets https://github.com/quicwg/base-drafts/pull/2915 [-recovery] = - Clarify resetting congestion control https://github.com/quicwg/base-drafts/pull/2917 [-transport] [editorial= ] = Repositories tracked by this digest: ----------------------------------- * https://github.com/quicwg/base-drafts --===============7206424627899281272== Content-Type: text/html; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Weekly github digest (QUIC Working Group Specifications)

Sunday July 28, 2019

Issues

quicwg/base-drafts (+6/-6/=F0=9F=92=AC90)

6 issues created:

28 issues received 90 new comments:

6 issues closed:

Pull requests

quicwg/base-drafts (+8/-4/=F0=9F=92=AC14)

8 pull requests submitted:

4 pull requests received 14 new comments:

4 pull requests merged:

Repositories tracked by this digest:

--===============7206424627899281272==-- From nobody Mon Jul 29 07:18:55 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 43FC5120100 for ; Mon, 29 Jul 2019 07:18:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.899 X-Spam-Level: X-Spam-Status: No, score=-6.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QwMKO8Do17Np for ; Mon, 29 Jul 2019 07:18:52 -0700 (PDT) Received: from mga11.intel.com (mga11.intel.com [192.55.52.93]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0E7751200B5 for ; Mon, 29 Jul 2019 07:18:51 -0700 (PDT) X-Amp-Result: SKIPPED(no attachment in message) X-Amp-File-Uploaded: False Received: from orsmga006.jf.intel.com ([10.7.209.51]) by fmsmga102.fm.intel.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 29 Jul 2019 07:18:51 -0700 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.64,323,1559545200"; d="scan'208,217";a="176421629" Received: from orsmsx108.amr.corp.intel.com ([10.22.240.6]) by orsmga006.jf.intel.com with ESMTP; 29 Jul 2019 07:18:51 -0700 Received: from orsmsx151.amr.corp.intel.com (10.22.226.38) by ORSMSX108.amr.corp.intel.com (10.22.240.6) with Microsoft SMTP Server (TLS) id 14.3.439.0; Mon, 29 Jul 2019 07:18:50 -0700 Received: from orsmsx111.amr.corp.intel.com ([169.254.12.46]) by ORSMSX151.amr.corp.intel.com ([169.254.7.148]) with mapi id 14.03.0439.000; Mon, 29 Jul 2019 07:18:50 -0700 From: "Deval, Manasi" To: "quic@ietf.org" Subject: Interop testing of QUIC with other protocols over long haul paths Thread-Topic: Interop testing of QUIC with other protocols over long haul paths Thread-Index: AdVFw7AXf1Ps91pCQ+W8j1ivs77+SQ== Date: Mon, 29 Jul 2019 14:18:50 +0000 Message-ID: <1F436ED13A22A246A59CA374CBC54399923EFF5D@ORSMSX111.amr.corp.intel.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-titus-metadata-40: eyJDYXRlZ29yeUxhYmVscyI6IiIsIk1ldGFkYXRhIjp7Im5zIjoiaHR0cDpcL1wvd3d3LnRpdHVzLmNvbVwvbnNcL0ludGVsMyIsImlkIjoiNzVkYmZiYmEtY2EzNi00NDgwLWI0NzYtYTU1OWQ1NTJmZWJhIiwicHJvcHMiOlt7Im4iOiJDVFBDbGFzc2lmaWNhdGlvbiIsInZhbHMiOlt7InZhbHVlIjoiQ1RQX05UIn1dfV19LCJTdWJqZWN0TGFiZWxzIjpbXSwiVE1DVmVyc2lvbiI6IjE3LjEwLjE4MDQuNDkiLCJUcnVzdGVkTGFiZWxIYXNoIjoiUlFzbE15Q3lXZldyZVpkc0pQaW9OUGU3VVBrWTJRZ2I3YXJhXC80Z01KNHlFXC9WendnSXZNaStUUStYaCtISHZFIn0= x-ctpclassification: CTP_NT dlp-product: dlpe-windows dlp-version: 11.0.600.7 dlp-reaction: no-action x-originating-ip: [10.22.254.140] Content-Type: multipart/alternative; boundary="_000_1F436ED13A22A246A59CA374CBC54399923EFF5DORSMSX111amrcor_" MIME-Version: 1.0 Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 29 Jul 2019 14:18:53 -0000 --_000_1F436ED13A22A246A59CA374CBC54399923EFF5DORSMSX111amrcor_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi All, Is there any congestion testing done with QUIC and TCP running Cubic / BBR = sharing the same link? If so, please can you point me to the exeriments? Thanks, Manasi --_000_1F436ED13A22A246A59CA374CBC54399923EFF5DORSMSX111amrcor_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi All,

 

Is there any congestion testing done with QUIC and T= CP running Cubic / BBR sharing the same link? If so, please can you point m= e to the exeriments?

 

Thanks,

Manasi

 

 

--_000_1F436ED13A22A246A59CA374CBC54399923EFF5DORSMSX111amrcor_-- From nobody Mon Jul 29 12:32:20 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BB62912010E for ; Mon, 29 Jul 2019 12:32:10 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=evequefou.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id awETd3B9mO64 for ; Mon, 29 Jul 2019 12:32:07 -0700 (PDT) Received: from NAM01-BN3-obe.outbound.protection.outlook.com (mail-eopbgr740102.outbound.protection.outlook.com [40.107.74.102]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4EF0712004A for ; Mon, 29 Jul 2019 12:32:07 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=B2Q54U0ZciJV4UVb1IiEO8HmAhn3s/Z7COySH+TAwoKHvUHdbW2/32pOKjQjka5CBnDC4CevZzsQEvgkMC99HYED9RD1JhJVv6y/HiN2uoB1NNZmJ1M9As2uqdDn650+Kwcj9hWh39Stmugj3cdEdEqXAq6Tax4/UuFgLyRElItRdvUGxh0mnOS7Gr1NHpyhFN0Xy7yXo+tUhffNFkJu+6vleycCEONjQE7AoYFu1vCsKcyQQnQmeBYhe9q3UdqTwO+IopljpT3B5LYv4BZrGiL67UurzyqXN/YDyOt3toEIqig+9XThxjWbGhOCYHAtoNU88CJW2z5BwFSiXosbQg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Ru/zTi6hR5/Qh3kwxBGSSO7l/GR4WdjD21djAu65CV4=; b=YyezEMkhd5TUZUGP9NYJF+wMLC1jK8A7y4nK5UPGHpzgjQe0FLKv8241Gwgyrr/Z++k9Zj6zSl1IaHF9R/9hxkkuPPzdxtkoFCayd2zbLXGU2e/rtejCILszj8cVfvu8oEMR9HpL31wNW/Zp/XGwOpyHbTtQN+SRdWDkOLg/F2AOYC9loY/MkXbIvX1QM9tIObznhXGUEKcdVWUOIcsvvzUV4sJt4qiGdAggxjRWrvSD2t8nS8zkmiVXJgppG9421t6nim6/My1p+vSYDowgRJuTZkWqOasuJIIdwTUOKqqNx7AXO+4FhB5PWdmQAbaERE+s6MUDQTJKCBr/tGGqzQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1;spf=pass smtp.mailfrom=evequefou.be;dmarc=pass action=none header.from=evequefou.be;dkim=pass header.d=evequefou.be;arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=evequefou.onmicrosoft.com; s=selector1-evequefou-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Ru/zTi6hR5/Qh3kwxBGSSO7l/GR4WdjD21djAu65CV4=; b=WWwQrSqjqHwEWZhbrVeY9MvxwgJI45OGAPS8AOEdxz8TtUWk0G+3XOzmBo9Zi3TcV2GS51tnDiqfu1MYtJx3Y4mkJ1hWvciGbXxo/iZubwDOKLfI/fvJskNcGYbtM11rTZDaukjjNIo43StfyD+fX2XmNTCZIbKVqsyJejUr2I0= Received: from CY4PR22MB0983.namprd22.prod.outlook.com (10.171.164.151) by CY4PR22MB0903.namprd22.prod.outlook.com (10.171.170.143) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2115.15; Mon, 29 Jul 2019 19:32:04 +0000 Received: from CY4PR22MB0983.namprd22.prod.outlook.com ([fe80::4190:c9d6:bf3f:2432]) by CY4PR22MB0983.namprd22.prod.outlook.com ([fe80::4190:c9d6:bf3f:2432%4]) with mapi id 15.20.2115.005; Mon, 29 Jul 2019 19:32:04 +0000 From: Mike Bishop To: "Oliver, Wesley, Vodacom South Africa (External)" , Kazuho Oku CC: Ian Swett , IETF QUIC WG , HTTP Working Group Subject: RE: [WARNING: ATTACHMENT(S) MAY CONTAIN MALWARE]Re: HTTP(3) priorities Thread-Topic: [WARNING: ATTACHMENT(S) MAY CONTAIN MALWARE]Re: HTTP(3) priorities Thread-Index: AQHVRdnnImES0ElSSUey3JhTQVZiA6bh+yqQ Date: Mon, 29 Jul 2019 19:32:04 +0000 Message-ID: References: <564520DD-2BAE-48EE-9041-3FCF5531328A@vcontractor.co.za> <659AE69D-BAC4-4E81-ACBD-503E3645C838@vcontractor.co.za> In-Reply-To: <659AE69D-BAC4-4E81-ACBD-503E3645C838@vcontractor.co.za> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=mbishop@evequefou.be; x-originating-ip: [74.215.152.7] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 43c0bb5f-c4c0-4507-a412-08d7145b6ff2 x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(7021145)(8989299)(4534185)(7022145)(4603075)(4627221)(201702281549075)(8990200)(7048125)(7024125)(7027125)(7023125)(5600148)(711020)(4605104)(1401327)(2017052603328)(7193020); SRVR:CY4PR22MB0903; x-ms-traffictypediagnostic: CY4PR22MB0903: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-forefront-prvs: 01136D2D90 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(366004)(346002)(136003)(396003)(376002)(39830400003)(13464003)(199004)(189003)(39224004)(25786009)(66446008)(74316002)(66946007)(66066001)(76116006)(6116002)(7696005)(3846002)(99286004)(68736007)(229853002)(305945005)(256004)(14444005)(5024004)(54906003)(66476007)(5660300002)(64756008)(110136005)(52536014)(14454004)(66556008)(316002)(86362001)(6436002)(9686003)(486006)(11346002)(2906002)(508600001)(33656002)(446003)(81166006)(8676002)(81156014)(7736002)(55016002)(6506007)(66574012)(26005)(53936002)(6246003)(186003)(8936002)(53546011)(76176011)(71190400001)(102836004)(4326008)(476003)(71200400001)(204813004); DIR:OUT; SFP:1102; SCL:1; SRVR:CY4PR22MB0903; H:CY4PR22MB0983.namprd22.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: evequefou.be does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam-message-info: ZM5NOd8DnD2ILMw6ScTmMFy8qGvdrmdvudvytQ320tatP/udLFnE9lKtL7e4TfXnqjvj5xo9llQxHAnVfGbg6U2rxWMLPAJPRV0tjgsHYXV73RFc3JczDuVOpFbCFGGdr/hSVSdMVgXhISy3k+un6+ZqICmGq9b/STOUwg0cUa/K7Q2so6Npkpc1iqv+NcDSdxj8vkSrlnB/4K57bUXxxlrZfDn7/jqk5VZkhAbfqEh0/6AO/qAnFhGJiVkPGGdqoCVd217HWj/3jzIgOgMOXIHza3Fcn7lQFAZUeXHm22JASIyiUjWO+EsBTilPK55pjVKd0/FOqd+rTekPKGod2V2Fc7m+OngrmLYzyCyjln9rRK+s9ihK6LmhF19tztHoeICRT+zLeW2Atpt4NuwBZi9uws19ztF/nIn/pV9CR+E= Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: evequefou.be X-MS-Exchange-CrossTenant-Network-Message-Id: 43c0bb5f-c4c0-4507-a412-08d7145b6ff2 X-MS-Exchange-CrossTenant-originalarrivaltime: 29 Jul 2019 19:32:04.7527 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 41eaf50b-882d-47eb-8c4c-0b5b76a9da8f X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: mbishop@evequefou.be X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY4PR22MB0903 Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 29 Jul 2019 19:32:18 -0000 V2hhdGV2ZXIgd2UgZGVzaWduIHdpbGwgbGlrZWx5IGJlIHVzZWQgd2l0aCBib3RoIEhUVFAvMiBh bmQgSFRUUC8zLg0KDQpIVFRQLzIgaXMgVENQLCBzbyBkZWxpdmVyaW5nIHNlZ21lbnRzIGluIHBy aW9yaXR5IGlzLi4uIGluYWR2aXNhYmxlLg0KDQpIVFRQLzMgaXMgUVVJQywgd2hlcmUgdGhlIGFw cGxpY2F0aW9uIGRhdGEgaXMgZW5jcnlwdGVkLg0KDQpJbiBuZWl0aGVyIGNhc2UgaXMgaXQgcG9z c2libGUgKG9yIGFkdmlzYWJsZSkgdG8gcHV0IHVuZW5jcnlwdGVkIGFwcGxpY2F0aW9uLWxldmVs IHByaW9yaXR5IGZpZWxkcyBvdXRzaWRlIHRoZSBlbmNyeXB0ZWQgZW52ZWxvcGUuDQoNCi0tLS0t T3JpZ2luYWwgTWVzc2FnZS0tLS0tDQpGcm9tOiBPbGl2ZXIsIFdlc2xleSwgVm9kYWNvbSBTb3V0 aCBBZnJpY2EgKEV4dGVybmFsKSA8V2VzbGV5Lk9saXZlckB2Y29udHJhY3Rvci5jby56YT4gDQpT ZW50OiBNb25kYXksIEp1bHkgMjksIDIwMTkgMjo0NyBBTQ0KVG86IEthenVobyBPa3UgPGthenVo b29rdUBnbWFpbC5jb20+DQpDYzogSWFuIFN3ZXR0IDxpYW5zd2V0dD00MGdvb2dsZS5jb21AZG1h cmMuaWV0Zi5vcmc+OyBJRVRGIFFVSUMgV0cgPHF1aWNAaWV0Zi5vcmc+OyBIVFRQIFdvcmtpbmcg R3JvdXAgPGlldGYtaHR0cC13Z0B3My5vcmc+DQpTdWJqZWN0OiBSZTogW1dBUk5JTkc6IEFUVEFD SE1FTlQoUykgTUFZIENPTlRBSU4gTUFMV0FSRV1SZTogSFRUUCgzKSBwcmlvcml0aWVzDQoNCkhp LA0KDQpJZGVhbGx5IHRoZSBwYXlsb2FkIHNob3VsZCBiZSBlbmNyeXB0ZWQhDQpBbnkgZm9ybSBv ZiBwcmlvcml0eSBmbGFncyBhbmQgT29zIGFuZCBzdGVhbUlEIHNob3VsZCBiZSBwdWJsaWNseSBy ZWFkYWJsZSwgc28gdGhhdCByb3V0ZXMgYW5kIHN3aXRjaGVzIENhbiBkZWFsIHdpdGggYnVmZmVy IGJsb2F0IGF0IHRoZSBkYXRhIGZyYW1lIGxldmVsLg0KDQpXZWxsIHdpdGggb3V0IHF1YWxpdHkg b2Ygc2VydmljZSwgeW91IHN1YmplY3QgdG8gcm91dGVyIHBhY2tldCBpbnNwZWN0aW9uLCBhbmQg Y29uZ2VzdGlvbiBhbmQgcmUtdHJhbnNtaXNzaW9uIFJ1bGVzIHRoYXQgYXJlIGN1c3RvbSB0byB0 aGF0IHJvdXRlci4gQW55IGlzcCBjYW4gc2hhcGUgdHJhZmZpYyBob3cgdGhleSBsaWtlLCBzbyBR b3MsIGp1c3Qgd2F5IHRvIGltcHJvdmUgdGhlIGEgcmVhbHRpbWUgcmV2ZXJzZSBwaXBlIEFjcm9z cyBuZXR3b3JrIHNlZ21lbnRzLCB0byBlbnN1cmUgdGhlIHVzZSBoYXMgdGhlIGNvcnJlY3QgcmVh bHRpbWUgZXhwZXJpZW5jZS4NClNvIHRvIGp1c3QgY2xhaW0gdGhlIFFvcyBlZmZlY3RzIGl0LCBp cyBub3QgY29ycmVjdCwgdGhlcmUgc28gbWFueSBvdGhlciBleHRlcm5hbCBmYWN0b3JzIHRoYXQg d291bGQgYWZmZWN0IGl0Lg0KDQpLaW5kIFJlZ2FyZHMsDQoNCldlc2xleSBPbGl2ZXINCg0KPiBP biAyNiBKdWwgMjAxOSwgYXQgMTU6NDgsIEthenVobyBPa3UgPGthenVob29rdUBnbWFpbC5jb20+ IHdyb3RlOg0KPiANCj4gSGkgT2xpdmVyLA0KPiANCj4gVGhhbmsgeW91IGZvciB5b3VyIGNvbW1l bnRzLg0KPiANCj4gQmVpbmcgYSBzZXJ2ZXIgZGV2ZWxvcGVyLCBJIGxpa2UgdGhlIGlkZWEgb2Yg c3BsaXR0aW5nIHRoZSB1cmdlbmN5IA0KPiBncm91cHMsIGJ1dCBJIGFtIG5vdCBzdXJlIGlmIHdl IHNob3VsZCBiYWtlIHNvbWV0aGluZyB0aGF0IHdlICptaWdodCogDQo+IHdhbnQgdG8gdXNlIGlu dG8gdGhlIGNvcmUgZGVzaWduLiBJSVVDLCB5b3VyIHN1Z2dlc3Rpb24gaXMgdG8gaGF2ZSBhIA0K PiBtb3JlIGZpbmUtZ3JhaW5lZCBzaWduYWxpbmcgYmV0d2VlbiB0aGUgd2ViIGFwcGxpY2F0aW9u IGFuZCB0aGUgSDIvSDMgDQo+IHRlcm1pbmF0b3IuIEFzc3VtaW5nIHRoYXQgaXMgdGhlIGNhc2Us IHRoZXNlIHR3byBwYXJ0aWVzIGNhbiBkbyBhbiANCj4gZXhwZXJpbWVudCwgYnkgZGVmaW5pbmcg YSBwcm9wcmlldGFyeSBwYXJhbWV0ZXIgb2YgdGhlIFByb3h5IGhlYWRlciANCj4gZmllbGQsIGRv IHRoZSBleHBlcmltZW50cywgdGhlbiBhc2sgZm9yIGl0IHRvIGJlY29tZSBhbiBvZmZpY2lhbCAN Cj4gZXh0ZW5zaW9uLg0KPiANCj4gTm93IHRoYXQgd2UgYXJlIGRyb3BwaW5nIHN1cHBvcnQgZm9y IHByaW9yaXRpZXMgaW4gSDMsIGl0IGlzIA0KPiBiZW5lZmljaWFsIHRvIGhhdmUgc29tZSBhbHRl cm5hdGl2ZSBzaGlwcGVkIGF0IGFuIGVhcmx5IG1vbWVudC4NCj4gDQo+IFRoZXJlZm9yZSwgaXQg aXMgbXkgdmlldyB0aGF0IHdlIHNob3VsZCBmaXJzdCBzdGFuZGFyZGl6ZSBzb21ldGhpbmcgDQo+ IG1pbmltYWxseSB2aWFibGUsIGJhc2VkIG9uIHdoYXQgdGhlIGNsaWVudHMgYW5kIHNlcnZlcnMg YWxyZWFkeSBkbywgYXQgDQo+IHRoZSBzYW1lIHRpbWUgbGVhdmluZyByb29tIGZvciBleHBlcmlt ZW50cyBhbmQgaW1wcm92ZW1lbnRzLiBXaGlsZSBJIA0KPiBhZ3JlZSB0aGF0IGhhdmluZyAyMCo4 IHVyZ2VuY3kgbGV2ZWxzIGlzIHBvc3NpYmxlLCBpdCBpcyBjb21wbGV4IHRoYW4gDQo+IGp1c3Qg aGF2aW5nIDggdXJnZW5jeSBsZXZlbHMuIEJyb2FkIGFkb3B0aW9uIG9mIHRoZSBIMiBwcmlvcml0 aXphdGlvbiANCj4gc2NoZW1lIGhhcHBlbmVkLCBldmVuIHRob3VnaCBpdCB3YXMgaW1wbGVtZW50 YWJsZS4gQXQgbGVhc3QgdHdvIA0KPiBsYXJnZS1zY2FsZSBzZXJ2ZXIgb3BlcmF0b3JzIGRvIHN1 cHBvcnQgaXQgdGhlIHdheSBzcGVjIGlzIHdyaXR0ZW4uDQo+IEJ1dCBmb3Igb3RoZXJzLCBpdCBz ZWVtZWQgdG9vIGNvbXBsaWNhdGVkLiBJIHRoaW5rIHdlIHdvdWxkIGxpa2UgdG8gDQo+IG1pbmlt aXplIHRoZSBjaGFuY2Ugb2YgcmVwZWF0aW5nIHRoYXQgZmFpbHVyZS4NCj4gDQo+IFJlZ2FyZGlu ZyB5b3VyIG90aGVyIGNvbW1lbnRzLCBJIGFtIG5vdCBzdXJlIGlmIEkgYW0gZm9sbG93aW5nLCBi dXQgSSANCj4gZG8gbm90IHRoaW5rIHRoYXQgcm91dGVycyBvciBzd2l0Y2hlcyB3b3VsZCBkZWFs IHdpdGggdGhlIEhUVFAtbGV2ZWwgDQo+IHByaW9yaXR5IGluZm9ybWF0aW9uLiBQbGFpbnRleHQg SDIgaXMgbm90IGEgdGhpbmcsIGFuZCBIMyB3aWxsIGFsd2F5cyANCj4gYmUgZW5jcnlwdGVkLiBJ dCBpcyBhbHNvIG15IHVuZGVyc3RhbmRpbmcgdGhhdCBzZW5kaW5nIHNvbWUgcGFja2V0cyBvZiAN Cj4gYSBjb25uZWN0aW9uIHdpdGggYSBkaWZmZXJlbnQgUW9TIGxhYmVsIGlzIGEgYmFkIGlkZWEs IGJlY2F1c2UgZG9pbmcgDQo+IHNvIHdvdWxkIGhhdmUgYmFkIGltcGFjdCBvbiBsb3NzIHJlY292 ZXJ5IGFuZCBjb25nZXN0aW9uIGNvbnRyb2wuIEkgDQo+IGNvdWxkIGJlIHdyb25nIChvciB0aGVy ZSBtaWdodCBiZSBzb21lIHNvbHV0aW9uIHRoYXQgSSBhbSBub3QgYXdhcmUgb2YNCj4gLSBJJ20g bm90IGEgdHJhbnNwb3J0IHBlcnNvbmUpLCB0aG91Z2guDQo+IA0KPiAyMDE55bm0N+aciDI15pel KOacqCkgMjo0OCBPbGl2ZXIsIFdlc2xleSwgVm9kYWNvbSBTb3V0aCBBZnJpY2EgKEV4dGVybmFs KQ0KPiA8V2VzbGV5Lk9saXZlckB2Y29udHJhY3Rvci5jby56YT46DQo+PiANCj4+IEhpLA0KPj4g DQo+PiBUaGUgb25seSB0aGluZyBJIGNvdWxkIHN1Z2dlc3QgaXMgdGhhdCB5b3UgbWFrZSB0aG9z ZSBwcmlvcml0eSBmbGFncyANCj4+IGluY3JlbWVudHMgb2YgMjAsIFNvIHRoYXQgaWYgdGhlcmUg YXJlIGNoYW5nZXMgb3IgbWlub3IgcHJpb3JpdHkgDQo+PiBwcmVmZXJlbmNlIHBlciB3ZWJzaXRl LCB0aGVuIFRoYXQgaW4gYmV0d2VlbiBudW1iZXJzIGNhbiBiZSB1c2VkLiBJZiANCj4+IHRoZXJl IGlzIGFueSBuZXcgZnV0dXJlIHByaW9yaXR5IGNvbnZlbnRpb25zIFRoZW4ganVzdCBhZGQgdGhl bSBpbiB0aGUgbWlkZGxlIG9mIHRoZSAyMCBncm91cCBzcGxpdHRpbmcgdGhlIGV4aXN0aW5nIGdy b3VwLg0KPj4gTWF5YmUgbWFrZSB0aGUgZmllbGQgMiBieXRlcywgd2hpY2ggYWxsb3dzIGZvciBm dXR1cmUgZXhwYW5zaW9uLCB3ZXJlIA0KPj4gdGhlcmUgYXJlIG1hbnkgZmlsZXMsIHN0cmVhbXMg V2hpY2ggcmVxdWlyZSBhIG5ldyBwcmlvcml0eSBvcmRlci4NCj4+IA0KPj4gT3RoZXJ3aXNlIG9u ZSBuZWVkcyB0byBidWlsZCBhIHByaW9yaXR5IG1hcCwgb3ZlciB0aGUgZGVwcywgY29udmVydGlu ZyBhIGhpZ2ggcmVzb2x1dGlvbiB0byBsb3cgcmVzb2x1dGlvbi4NCj4+IA0KPj4gS2luZCBSZWdh cmRzLA0KPj4gDQo+PiBXZXNsZXkgT2xpdmVyDQo+PiANCj4+PiBPbiAyNCBKdWwgMjAxOSwgYXQg MTk6MTQsIEthenVobyBPa3UgPGthenVob29rdUBnbWFpbC5jb20+IHdyb3RlOg0KPj4+IA0KPj4+ IEhpIQ0KPj4+IA0KPj4+IEF0dGFjaGVkIGFyZSB0aGUgc2xpZGVzIHRoYXQgTHVjYXMgYW5kIEkg cHJlc2VudGVkIGR1cmluZyB0aGUgc2lkZSBtZWV0aW5nLg0KPj4+IA0KPj4+IFRoYW5rIHlvdSBh bGwgZm9yIHRoZSBmZWVkYmFjay4NCj4+PiANCj4+PiAyMDE55bm0N+aciDnml6Uo54GrKSAyMTow MCBJYW4gU3dldHQgPGlhbnN3ZXR0PTQwZ29vZ2xlLmNvbUBkbWFyYy5pZXRmLm9yZz46DQo+Pj4+ IA0KPj4+PiBUaGVyZSBoYXMgYmVlbiBxdWl0ZSBhIGJpdCBvZiBkaXNjdXNzaW9uIG9mIEhUVFAg cHJpb3JpdGllcyBsYXRlbHkgb24gYm90aCB0aGUgUVVJQyBhbmQgSFRUUCBtYWlsaW5nIGxpc3Rz LCB3aXRoIG1vcmUgdG8gZm9sbG93LiAgVGhlIHBsYW4gZm9yIElFVEYgaW4gTW9udHJlYWwgaXMg YXMgZm9sbG93czoNCj4+Pj4gDQo+Pj4+IE1vbmRheTogT3ZlcnZpZXcgb2YgcHJpb3JpdGllcyBm b3IgMTUgbWludXRlcyBpbiBIVFRQLCB3aXRoIDE1IG1pbnV0ZXMgZGlzY3Vzc2lvbi4NCj4+Pj4g V2VkbmVzZGF5OiBBIHNpZGUgbWVldGluZyB3aWxsIGJlIGhlbGQgZnJvbSA4OjMwLTk6NDVhbSBp biBWYW4gSG9ybmUuDQo+Pj4+IFRodXJzZGF5OiBJJ2xsIHN1bW1hcmlzZSB0aGUgc2lkZSBtZWV0 aW5nIGluIFdlZG5lc2RheSdzIEhUVFAgc2Vzc2lvbi4NCj4+Pj4gDQo+Pj4+IFRoYW5rcywgSWFu DQo+Pj4gDQo+Pj4gDQo+Pj4gDQo+Pj4gLS0NCj4+PiBLYXp1aG8gT2t1DQo+Pj4gPFRoZSBQcmlv cml0eSBIZWFkZXIgRmllbGQucGRmPg0KPj4gDQo+PiBUaGlzIGUtbWFpbCBpcyBjbGFzc2lmaWVk IEMyIC0gVm9kYWNvbSBSZXN0cmljdGVkIC0gSW5mb3JtYXRpb24gdG8gYmUgdXNlZCBpbnNpZGUg Vm9kYWNvbSBidXQgaXQgbWF5IGJlIHNoYXJlZCB3aXRoIGF1dGhvcmlzZWQgcGFydG5lcnMuDQo+ PiANCj4+ICJUaGlzIGUtbWFpbCBpcyBzZW50IG9uIHRoZSBUZXJtcyBhbmQgQ29uZGl0aW9ucyB0 aGF0IGNhbiBiZSBhY2Nlc3NlZCBieSBDbGlja2luZyBvbiB0aGlzIGxpbmtodHRwczovL3d3dy52 b2RhY29tLmNvLnphL3ZvZGFjb20vdGVybXMvZW1haWwtYWNjZXB0YWJsZS11c2VyLXBvbGljeSIN Cj4gDQo+IA0KPiANCj4gLS0NCj4gS2F6dWhvIE9rdQ0KDQoNCiJUaGlzIGUtbWFpbCBpcyBzZW50 IG9uIHRoZSBUZXJtcyBhbmQgQ29uZGl0aW9ucyB0aGF0IGNhbiBiZSBhY2Nlc3NlZCBieSBDbGlj a2luZyBvbiB0aGlzIGxpbmtodHRwczovL3d3dy52b2RhY29tLmNvLnphL3ZvZGFjb20vdGVybXMv ZW1haWwtYWNjZXB0YWJsZS11c2VyLXBvbGljeSIgDQo= From nobody Mon Jul 29 13:47:04 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C0724120155 for ; Mon, 29 Jul 2019 13:47:02 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.701 X-Spam-Level: X-Spam-Status: No, score=-2.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=mnot.net header.b=DSWn+KUF; dkim=pass (2048-bit key) header.d=messagingengine.com header.b=qP2F1HZt Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id V7mU7Y5bC1qn for ; Mon, 29 Jul 2019 13:47:00 -0700 (PDT) Received: from wout2-smtp.messagingengine.com (wout2-smtp.messagingengine.com [64.147.123.25]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7DBB312008B for ; Mon, 29 Jul 2019 13:47:00 -0700 (PDT) Received: from compute3.internal (compute3.nyi.internal [10.202.2.43]) by mailout.west.internal (Postfix) with ESMTP id 4565F4C9; Mon, 29 Jul 2019 16:46:57 -0400 (EDT) Received: from mailfrontend2 ([10.202.2.163]) by compute3.internal (MEProxy); Mon, 29 Jul 2019 16:46:57 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mnot.net; h=from :content-type:content-transfer-encoding:mime-version:subject :message-id:date:cc:to; s=fm3; bh=fGC2ROCkHFmGK0ih2F3fNMGBuAXSpJ eiD5rvEQguGus=; b=DSWn+KUFDTo3oJFQ+6Nw2ZsNVKvrMhi4oTEwrV+7Lm+IxF i1kGpAzQKVFb8NzK2nHWq+wzYrK+6QBws8G5dBQEKf2CKJ3BvF56M2b3cgIYSRwG D/8qHENneMr4l+V8ULUHwiYD+RrglZZilGUyifiYV6OfuSVwd9ru9KA+HeLkGAcg Vxab7Vtrf96VbanBDwLS4jwOLVBVYn8XD1/iyBn7w4bu1EMML882IGgQOl3onRrQ yYHLhrqEnkkWdNzzh35fEhXMQg49mNIvuu4KqYimEdEmwC218gYWxsECNuLarG2l Q7s2gbGxnHdBlMtQYgkvWGqpqTKtiQEBLlyUnq/g== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :date:from:message-id:mime-version:subject:to:x-me-proxy :x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm3; bh=fGC2RO CkHFmGK0ih2F3fNMGBuAXSpJeiD5rvEQguGus=; b=qP2F1HZtE2im2Gq+S0iuZZ SnrBWSZ3niA6tYO9YUL7YNpiekqZbN5LRF4DfQe5s+l4ljbRA3lYrFhHYOQY7rgp b1t0jzvK01O2JdYXeYJhmb98WZgAgLexu66QpHRvAzRvgYK14F7451x4NgIUJHuy JUb931zGHwH6DlKa+O1VYnZFkBzojAZHIS38SSKs1PyoFhy9OkaYYsoS5w6rE0DZ fYSaWpkwk/zXpbCQUCYbIMCEnXJmGFEdAUnfwIR8VG4l2tRQwn2R3MnSSOscCJkc rdMJhvxXIRdbTYb+7sOXlXcbzFa5TINHzQ1E9KOG2HyyJC0SgR1iBrHSo6CEeM+Q == X-ME-Sender: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeduvddrledugdduheegucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucesvcftvggtihhpihgvnhhtshculddquddttddmne cujfgurhephfgtgfgguffkfffvofesthhqmhdthhdtvdenucfhrhhomhepofgrrhhkucfp ohhtthhinhhghhgrmhcuoehmnhhothesmhhnohhtrdhnvghtqeenucffohhmrghinhepgh hithhhuhgsrdgtohhmpdhmnhhothdrnhgvthenucfkphepvdduiedrvddurdduleefrdej tdenucfrrghrrghmpehmrghilhhfrhhomhepmhhnohhtsehmnhhothdrnhgvthenucevlh hushhtvghrufhiiigvpedu X-ME-Proxy: Received: from [192.168.1.3] (unknown [216.21.193.70]) by mail.messagingengine.com (Postfix) with ESMTPA id 56ABC380079; Mon, 29 Jul 2019 16:46:56 -0400 (EDT) From: Mark Nottingham Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Subject: DRAFT minutes from IETF105 Montreal Message-Id: <878DFC1C-8CEE-456D-AC7A-405891FCCB51@mnot.net> Date: Mon, 29 Jul 2019 16:46:55 -0400 Cc: Lars Eggert To: IETF QUIC WG X-Mailer: Apple Mail (2.3445.104.11) Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 29 Jul 2019 20:47:03 -0000 ... are at: https://github.com/quicwg/wg-materials/blob/master/ietf105/minutes.md As always, please send suggestions and corrections, preferably as Pull = Requests but also as responses to this e-mail, and thanks to our = scribes. Cheers, -- Mark Nottingham https://www.mnot.net/ From nobody Mon Jul 29 13:58:57 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D73DC1200B9 for ; Mon, 29 Jul 2019 13:58:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -17.5 X-Spam-Level: X-Spam-Status: No, score=-17.5 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, ENV_AND_HDR_SPF_MATCH=-0.5, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5, USER_IN_DEF_SPF_WL=-7.5] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Z0Tz9pfzaC8r for ; Mon, 29 Jul 2019 13:58:36 -0700 (PDT) Received: from mail-lj1-x232.google.com (mail-lj1-x232.google.com [IPv6:2a00:1450:4864:20::232]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5EE971203C7 for ; Mon, 29 Jul 2019 13:58:36 -0700 (PDT) Received: by mail-lj1-x232.google.com with SMTP id h10so59946794ljg.0 for ; Mon, 29 Jul 2019 13:58:36 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=1EoFQvazXzslyc73L+Ce7bt3a4TGCcPL3inrluKfP9A=; b=a1V3uMum61G/drTUgzaCbRCR1Hv+b3UJdyk8TC19z3w3zCdgh2YcIVjBRJ6tZ3XSB4 BhUKgh4iaDPpXsPLCVpmfWbAWxpjQobHbKOqAWkMEgecAvWaHiQSBgoUg7V5W4tqPuIV 2f/l3M0Asn9LIHQN6ikA8yEJ49UlcWArtjLH479i8EXRX0hAIJ2JTq6yGEcldJsFxtuu SjWYeEtICaGYpT5ivLzhBi8ub+aFlSQJA3vhHWnSg1nSfIqUgNEy9SKKCBf0FKXTXgTH NS2MMoOeT63doeilysnJv5kAGkUwCpqdgBxdjNGlRZ4cgVr1GUmIQ1bYsBPzWnq+DzJx Il5A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=1EoFQvazXzslyc73L+Ce7bt3a4TGCcPL3inrluKfP9A=; b=HCw4iaCqrpnscgxSnhTAi4RprYvFhxDvpw2LdEGXI1eQfaPi7a0fYfQBi0rk2psVEw 8oGyLoJtU8X7fzt9T1Ljnwn4Q2Gstw+iJlPVsnKIU0UhQp0Tjgbp2MKHNHqKbZC0QrOG CebGAZZyug9ghqZNsgGHGPdUJvafe+hyYPGFGtFzPezEzRiiPthkU4eVWN0DrOLXeFTX Ui9SOps3smq+BeNih5RkySPgCegmyQ8mbDxuLyrndSw/K8EATxGJhEjfyYY3YJKoGVGQ pSLE+5VG96ODkc18pWARE2BUMOMTBUUyFXz7WVrESIit1TOskS62oy0+aTa3OfVTiz/1 Kjyg== X-Gm-Message-State: APjAAAXNOLymGmgNOo5L/9O0ZxzJNpjISfH/w34VqV3MmjDnbxHlMlFl VsSs2vgNbzqMDCZaHpkwj/sH85brHhEZ5cqertJOsA== X-Google-Smtp-Source: APXvYqxvULbZgMc/AvD1IrpTYnHx/Yxri7HPRoyiWsbfxEkUb/KKsIOFeX83Xi2phsn/VjoMdRB510Gkb9g7EUtP2AY= X-Received: by 2002:a2e:9788:: with SMTP id y8mr58288270lji.41.1564433914281; Mon, 29 Jul 2019 13:58:34 -0700 (PDT) MIME-Version: 1.0 From: Victor Vasiliev Date: Mon, 29 Jul 2019 16:58:23 -0400 Message-ID: Subject: WebTransport Mailing List To: dispatch@ietf.org, IETF QUIC WG , HTTP Working Group , hybi@ietf.org, webtransport@ietf.org Content-Type: multipart/alternative; boundary="000000000000bc9794058ed827c0" Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 29 Jul 2019 20:58:40 -0000 --000000000000bc9794058ed827c0 Content-Type: text/plain; charset="UTF-8" Hello everyone, Judging from the in-person discussions in Montreal, there appears to be a decent amount of interest in the WebTransport work. Everyone interested is invited to join our mailing list: https://www.ietf.org/mailman/listinfo/webtransport Cheers, Victor. --000000000000bc9794058ed827c0 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hello everyone,

Judging from= the in-person discussions in Montreal, there appears to be a decent amount= of interest in the WebTransport work.=C2=A0 Everyone interested is invited= to join our mailing list:


Cheers,
<= div>=C2=A0 Victor.
--000000000000bc9794058ed827c0-- From nobody Mon Jul 29 13:59:52 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 55BAA12006F for ; Mon, 29 Jul 2019 13:59:46 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cryptonector.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yyt-A5WKdRhs for ; Mon, 29 Jul 2019 13:59:45 -0700 (PDT) Received: from bisque.elm.relay.mailchannels.net (bisque.elm.relay.mailchannels.net [23.83.212.18]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1CF88120141 for ; Mon, 29 Jul 2019 13:59:40 -0700 (PDT) X-Sender-Id: dreamhost|x-authsender|nico@cryptonector.com Received: from relay.mailchannels.net (localhost [127.0.0.1]) by relay.mailchannels.net (Postfix) with ESMTP id 59F6C22680; Mon, 29 Jul 2019 20:59:39 +0000 (UTC) Received: from pdx1-sub0-mail-a86.g.dreamhost.com (100-96-4-69.trex.outbound.svc.cluster.local [100.96.4.69]) (Authenticated sender: dreamhost) by relay.mailchannels.net (Postfix) with ESMTPA id D34E1225E4; Mon, 29 Jul 2019 20:59:38 +0000 (UTC) X-Sender-Id: dreamhost|x-authsender|nico@cryptonector.com Received: from pdx1-sub0-mail-a86.g.dreamhost.com ([TEMPUNAVAIL]. [64.90.62.162]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384) by 0.0.0.0:2500 (trex/5.17.5); Mon, 29 Jul 2019 20:59:39 +0000 X-MC-Relay: Neutral X-MailChannels-SenderId: dreamhost|x-authsender|nico@cryptonector.com X-MailChannels-Auth-Id: dreamhost X-Supply-Whimsical: 031674306b5fb464_1564433979055_2384891632 X-MC-Loop-Signature: 1564433979055:3889522903 X-MC-Ingress-Time: 1564433979054 Received: from pdx1-sub0-mail-a86.g.dreamhost.com (localhost [127.0.0.1]) by pdx1-sub0-mail-a86.g.dreamhost.com (Postfix) with ESMTP id 2779A80130; Mon, 29 Jul 2019 13:59:34 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=cryptonector.com; h=date :from:to:cc:subject:message-id:references:mime-version :content-type:in-reply-to; s=cryptonector.com; bh=P+GE9MM8aMySBV j/nyWbMWHNRik=; b=lr47Xn10lx9xTRRl/SqWw0t4OlVObS1pd1z3ZAR+wAOTSD vYtlgw/PHSI02lKFheOCFa8QNkpfhR+Tz3oyApDmirnVEeTUX5NDlCw3c7pmuj68 R0LnLLvouS9e+DWDC9bEAEQenv7G5k15v6sE+6IKTtXQWP7GTCCa36vsAANKU= Received: from localhost (unknown [24.28.108.183]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) (Authenticated sender: nico@cryptonector.com) by pdx1-sub0-mail-a86.g.dreamhost.com (Postfix) with ESMTPSA id 43CBA8012E; Mon, 29 Jul 2019 13:59:30 -0700 (PDT) Date: Mon, 29 Jul 2019 15:59:29 -0500 X-DH-BACKEND: pdx1-sub0-mail-a86 From: Nico Williams To: "Oliver, Wesley, Vodacom South Africa (External)" Cc: Kazuho Oku , Ian Swett , IETF QUIC WG , HTTP Working Group Subject: Re: [WARNING: ATTACHMENT(S) MAY CONTAIN MALWARE]Re: HTTP(3) priorities Message-ID: <20190729205929.GR24576@localhost> References: <564520DD-2BAE-48EE-9041-3FCF5531328A@vcontractor.co.za> <659AE69D-BAC4-4E81-ACBD-503E3645C838@vcontractor.co.za> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <659AE69D-BAC4-4E81-ACBD-503E3645C838@vcontractor.co.za> User-Agent: Mutt/1.9.4 (2018-02-28) X-VR-OUT-STATUS: OK X-VR-OUT-SCORE: -100 X-VR-OUT-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeduvddrledugdduheeiucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuggftfghnshhusghstghrihgsvgdpffftgfetoffjqffuvfenuceurghilhhouhhtmecufedttdenucesvcftvggtihhpihgvnhhtshculddquddttddmnecujfgurhepfffhvffukfhfgggtuggjfgesthdtredttdervdenucfhrhhomheppfhitghoucghihhllhhirghmshcuoehnihgtohestghrhihpthhonhgvtghtohhrrdgtohhmqeenucfkphepvdegrddvkedruddtkedrudekfeenucfrrghrrghmpehmohguvgepshhmthhppdhhvghloheplhhotggrlhhhohhsthdpihhnvghtpedvgedrvdekrddutdekrddukeefpdhrvghtuhhrnhdqphgrthhhpefpihgtohcuhghilhhlihgrmhhsuceonhhitghosegtrhihphhtohhnvggtthhorhdrtghomheqpdhmrghilhhfrhhomhepnhhitghosegtrhihphhtohhnvggtthhorhdrtghomhdpnhhrtghpthhtohepnhhitghosegtrhihphhtohhnvggtthhorhdrtghomhenucevlhhushhtvghrufhiiigvpedt Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 29 Jul 2019 20:59:51 -0000 On Mon, Jul 29, 2019 at 06:47:13AM +0000, Oliver, Wesley, Vodacom South Africa (External) wrote: > Ideally the payload should be encrypted! The metadata should be as well. From nobody Mon Jul 29 14:29:19 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4A6E0120043; Mon, 29 Jul 2019 14:29:04 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.501 X-Spam-Level: X-Spam-Status: No, score=-14.501 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UI0beln4imX4; Mon, 29 Jul 2019 14:29:03 -0700 (PDT) Received: from aer-iport-2.cisco.com (aer-iport-2.cisco.com [173.38.203.52]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1BB2612006B; Mon, 29 Jul 2019 14:29:01 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=3594; q=dns/txt; s=iport; t=1564435742; x=1565645342; h=from:message-id:mime-version:subject:date:in-reply-to:cc: to:references; bh=NO01rd8nvI8MgfjjqMPBao3ez9OekUlo4P9Gg6KJcoA=; b=AWLBL0JOFzIdn0MOe3HcRnfhJIFOMAvBWzfdnAKo9kwA527Z4kjMuvrM rq+1SkxzHxL6I8N2Zazw+3KbVD0VCC3DvICZab6z2wrVrx9teaxNuyRr3 WVrgNI4UAXNmUReBRUgD3JcUYxkJEsYzoDB05uuCH5KNqQKRncUv0+nyr U=; X-Files: signature.asc : 195 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AFAAD0Yz9d/xbLJq0WBUsZAQEBAQE?= =?us-ascii?q?BAQEBAQEBBwEBAQEBAYFTBAEBAQEBCwEBgwJRASASKow6YIosknyGBYF7Agc?= =?us-ascii?q?BAQEJAwEBGAEKDAEBg3pGAoMPNAkOAQMBAQQBAQIBBm2FHgyFSgEBAQECAQE?= =?us-ascii?q?BbAsFCwsEFC4nMAYTgyIBgXsPD4hPpUaFSIRqCgaBNAGBUIMhhwWBf4E4H4J?= =?us-ascii?q?MPoJhAQEChRyCJgSUeIdvjhAJghyCH4ENkGgbmA6iBoMLAgQGBQIVgVA4gVg?= =?us-ascii?q?zGggbFTsqAYJBPosJhUE9AzABjmMBAQ?= X-IronPort-AV: E=Sophos;i="5.64,324,1559520000"; d="asc'?scan'208,217";a="14839562" Received: from aer-iport-nat.cisco.com (HELO aer-core-3.cisco.com) ([173.38.203.22]) by aer-iport-2.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 29 Jul 2019 21:28:59 +0000 Received: from ams3-vpn-dhcp114.cisco.com (ams3-vpn-dhcp114.cisco.com [10.61.64.114]) by aer-core-3.cisco.com (8.15.2/8.15.2) with ESMTPS id x6TLSwVK015940 (version=TLSv1.2 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO); Mon, 29 Jul 2019 21:28:59 GMT From: Eliot Lear Message-Id: <85E74088-6D84-47CB-97CC-C637167959B0@cisco.com> Content-Type: multipart/signed; boundary="Apple-Mail=_CBCF54D4-C02E-456E-9792-6851BF941040"; protocol="application/pgp-signature"; micalg=pgp-sha1 Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Subject: Re: WebTransport Mailing List Date: Mon, 29 Jul 2019 23:28:57 +0200 In-Reply-To: Cc: dispatch@ietf.org, IETF QUIC WG , HTTP Working Group , hybi@ietf.org, webtransport@ietf.org To: Victor Vasiliev References: X-Mailer: Apple Mail (2.3445.104.11) X-Outbound-SMTP-Client: 10.61.64.114, ams3-vpn-dhcp114.cisco.com X-Outbound-Node: aer-core-3.cisco.com Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 29 Jul 2019 21:29:04 -0000 --Apple-Mail=_CBCF54D4-C02E-456E-9792-6851BF941040 Content-Type: multipart/alternative; boundary="Apple-Mail=_9C2CC47E-110E-4838-ABF0-460CE1ACEE5A" --Apple-Mail=_9C2CC47E-110E-4838-ABF0-460CE1ACEE5A Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii Hi Victor, Sorry if this has been covered, but for those of us out of the room, = could you provide two or three sentences as to what the mailing list is = supposed to cover? Is this more BCP 190 stuff or something more generic = or just something else? Thanks, Eliot > On 29 Jul 2019, at 22:58, Victor Vasiliev = wrote: >=20 > Hello everyone, >=20 > Judging from the in-person discussions in Montreal, there appears to = be a decent amount of interest in the WebTransport work. Everyone = interested is invited to join our mailing list: >=20 > https://www.ietf.org/mailman/listinfo/webtransport = >=20 > Cheers, > Victor. --Apple-Mail=_9C2CC47E-110E-4838-ABF0-460CE1ACEE5A Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=us-ascii Hi = Victor,

Sorry if = this has been covered, but for those of us out of the room, could you = provide two or three sentences as to what the mailing list is supposed = to cover?  Is this more BCP 190 stuff or something more generic or = just something else?

Thanks,

Eliot

On 29 Jul 2019, at 22:58, = Victor Vasiliev <vasilvv=3D40google.com@dmarc.ietf.org> = wrote:

Hello = everyone,

Judging from the in-person discussions in Montreal, there = appears to be a decent amount of interest in the WebTransport = work.  Everyone interested is invited to join our mailing list:

  https://www.ietf.org/mailman/listinfo/webtransport

Cheers,
  Victor.

= --Apple-Mail=_9C2CC47E-110E-4838-ABF0-460CE1ACEE5A-- --Apple-Mail=_CBCF54D4-C02E-456E-9792-6851BF941040 Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP -----BEGIN PGP SIGNATURE----- iF0EARECAB0WIQTgo4LlIIJ5lIBumWpugA9nE248uAUCXT9lGQAKCRBugA9nE248 uLz5AKCAAXDoHe3vGH8LHoq0lzqldPgt2QCgkcM7PPyzh4iVXZ0z7LAB8ePk8hw= =iIQn -----END PGP SIGNATURE----- --Apple-Mail=_CBCF54D4-C02E-456E-9792-6851BF941040-- From nobody Mon Jul 29 14:33:00 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0B3A912004E for ; Mon, 29 Jul 2019 14:32:47 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -17.5 X-Spam-Level: X-Spam-Status: No, score=-17.5 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, ENV_AND_HDR_SPF_MATCH=-0.5, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5, USER_IN_DEF_SPF_WL=-7.5] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BsFZ4oucWepQ for ; Mon, 29 Jul 2019 14:32:45 -0700 (PDT) Received: from mail-lj1-x235.google.com (mail-lj1-x235.google.com [IPv6:2a00:1450:4864:20::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id ADDF612006B for ; Mon, 29 Jul 2019 14:32:43 -0700 (PDT) Received: by mail-lj1-x235.google.com with SMTP id y17so35445994ljk.10 for ; Mon, 29 Jul 2019 14:32:43 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=aIos4LByFU6Z0GxlSl4YOzuVFvSE8StZjEoHJusGg8Y=; b=Mh9rEVPhOhNAaATDVKtwK6Lo82WhgyZ5GCoJKxhz1tDdfhdxKX15i+7a4DYowfBgyU +cxyQ5PoPRDrXdOhzxixDHDdm/Ab58QrEnMMLyb6iIcmlTfEtlJBEcWjByIxVF0pi/Sh Ap13xhFtQZcwJefKsD0eNccbyyt2eqHX5CZKRSl96bO+EkmbpYvOaULMmU4PB2mLCkOp Vp2PQ7N5841QDF+U0xx85kPzS8keaW/Dr8b/wlBif8cYBtjxays0igYMBfX73QISWIG/ HzGT0fwj1Wo2gFtwHDK7fzdakmcmbXw8Up05TeeV2MFB7CuCHiI02+c49mdDJogaU7wc BTbg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=aIos4LByFU6Z0GxlSl4YOzuVFvSE8StZjEoHJusGg8Y=; b=LkRx5g6h72TN/MgWHdfH4K0x10jwFnbw9A9dF5y8MlLF+FKB5PqwQDh4jVk8P3PfNg S4rq/brelhEB77IjxEhpqGVR6pGVcebZgxjUmHzXR4r4CQr13+5kMnEt5FDm1ph8hgkm D7uuCi3JWXauPHtlgnP1BYyOcwC8AuiX+Cu0qSDDuFUO6Qnk7Cp0SGUNwfHqCr2u+SNf Tjc76msIg/vXPIp9YoX436Kwn5ILn1yClZZQoUabkTta6nDE0qYMrkSl7IRrjySZ+Gud nObxRJToREnhzkeA3OrfwAnMam6XppXFRHno0d0fmOMbf09Y3rW38d11fL9FeW3cXwzp dTtA== X-Gm-Message-State: APjAAAUxsjVMdwxcDv0t1iAhyffwCdZBw85jzKNCMPAG8YKvIL+paWaQ kdpTQ3fiijGFyUldxeDonBpMq1iYKiDINZA/R1dH9w== X-Google-Smtp-Source: APXvYqwIXjxuEVWuGyy3DfmjRX8yadSwJbNtTUFDxMCOnrCYLnxAgesgkF7SGCtx7mgFC9nQhpi9tknCiM1RPOE4ekw= X-Received: by 2002:a2e:9a96:: with SMTP id p22mr58467783lji.57.1564435961630; Mon, 29 Jul 2019 14:32:41 -0700 (PDT) MIME-Version: 1.0 References: <85E74088-6D84-47CB-97CC-C637167959B0@cisco.com> In-Reply-To: <85E74088-6D84-47CB-97CC-C637167959B0@cisco.com> From: Victor Vasiliev Date: Mon, 29 Jul 2019 17:32:30 -0400 Message-ID: Subject: Re: WebTransport Mailing List To: Eliot Lear Cc: dispatch@ietf.org, IETF QUIC WG , HTTP Working Group , hybi@ietf.org, webtransport@ietf.org Content-Type: multipart/alternative; boundary="000000000000c49c62058ed8a126" Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 29 Jul 2019 21:32:47 -0000 --000000000000c49c62058ed8a126 Content-Type: text/plain; charset="UTF-8" Hi Eliot, WebTransport is roughly "WebSockets, but for unreliable transport", currently described in https://tools.ietf.org/html/draft-vvv-webtransport-overview-00 and https://wicg.github.io/web-transport/. It's not related to BCP 190 discussion that happened at the other portion of ARTAREA meeting. Cheers, Victor. On Mon, Jul 29, 2019 at 5:29 PM Eliot Lear wrote: > Hi Victor, > > Sorry if this has been covered, but for those of us out of the room, could > you provide two or three sentences as to what the mailing list is supposed > to cover? Is this more BCP 190 stuff or something more generic or just > something else? > > Thanks, > > Eliot > > On 29 Jul 2019, at 22:58, Victor Vasiliev < > vasilvv=40google.com@dmarc.ietf.org> wrote: > > Hello everyone, > > Judging from the in-person discussions in Montreal, there appears to be a > decent amount of interest in the WebTransport work. Everyone interested is > invited to join our mailing list: > > https://www.ietf.org/mailman/listinfo/webtransport > > Cheers, > Victor. > > > --000000000000c49c62058ed8a126 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi Eliot,

WebTransport is roughly "= ;WebSockets, but for unreliable transport", currently described in=C2= =A0https://tools.ietf.org/html/draft-vvv-webtransport-overview-00=C2=A0= and=C2=A0https://wicg.git= hub.io/web-transport/.=C2=A0 It's not related to BCP 190 discussion= that happened at the other portion of ARTAREA meeting.

Cheers,
=C2=A0 Victor.

On Mon, Jul 29, 2019 at 5:29 PM= Eliot Lear <lear@cisco.com> wr= ote:
Hi Victor,

Sorry if this= has been covered, but for those of us out of the room, could you provide t= wo or three sentences as to what the mailing list is supposed to cover?=C2= =A0 Is this more BCP 190 stuff or something more generic or just something = else?

Thanks,

Eliot
=

On 29 Jul 2019, at 22:58, Vict= or Vasiliev <vasilvv=3D40google.com@dmarc.ietf.org> wrote:
<= br class=3D"gmail-m_-8947632560352852245Apple-interchange-newline">
Hello everyone,

Judging from th= e in-person discussions in Montreal, there appears to be a decent amount of= interest in the WebTransport work.=C2=A0 Everyone interested is invited to= join our mailing list:


Cheers,
=C2=A0 Victor.

--000000000000c49c62058ed8a126-- From nobody Mon Jul 29 20:54:01 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AE8F5120165; Mon, 29 Jul 2019 20:53:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FROM_EXCESS_BASE64=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=itaoyama.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id I3-bY4DqqucR; Mon, 29 Jul 2019 20:53:35 -0700 (PDT) Received: from APC01-PU1-obe.outbound.protection.outlook.com (mail-eopbgr1320119.outbound.protection.outlook.com [40.107.132.119]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 296B41201DD; Mon, 29 Jul 2019 20:53:35 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=dFzJZLYSwTTAVwv9qzm9vk+XtgsulIZ1PZsauPTE02lUZHg5VGqiRyzkd6q3/6PtXuUVWpce8poPjZm0KtrXQxiih6JACrf7rV5O4FUMujPTv7VcwrlgJPNXBFV+bH2i/s2YkH21cTr3EIcKDHeXspe7Jh7tTy+qkNpea/9qkBCxrJGbkBVJKG9nEqY4hpaPxBBlvMKx4L3wnS6pT25IuvT2jwQpdWiDS0kHCoAakGbn8gIlOtp/Ztvi0O7Zlnz4tBGPOX5JlyxE6mZIMGu6d/rEbHlpZAFmE0hPjArDXAorP6Y5AhuKYPrIYcDqEcvFKYurY8y/vDrRe2OTZ9tZsQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=IkE3HJaxWnjcoMN0I5Wd5Nktkcc6yNDKZDlQrANXbC8=; b=U48U5+cI7ypDTXPWeqJ9SSAGNXi0NnV19yn6TpstLggzYqQZqbPI64Ot4uQTlP6J+ovoEZIcGDYbyCJ+fQUSvGn5tbZGjPEGoEMJILmBIQHORjs0AEfiyk4GJ5LuhFd5eZOVLGeMxzCMBDv1Aif8aIgSTMj5JXrBUkyUF0FHHORKhXIHKh+N4ac3//rmGQaeOK/O6wWx386E+3PoM/pXC9DaA8PhQod0p8neRXSn5GsMFy7LqRJDOK2bIFTfnFBp4hNBUiYYCsU2sP8AmqcXxPuhhgfm8BJLtK5KNmhsese159TJQcgl+X6Cc5ul7kG4JoYBxMyoXOKjZ6IW7aDZOQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1;spf=pass smtp.mailfrom=it.aoyama.ac.jp;dmarc=pass action=none header.from=it.aoyama.ac.jp;dkim=pass header.d=it.aoyama.ac.jp;arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=itaoyama.onmicrosoft.com; s=selector2-itaoyama-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=IkE3HJaxWnjcoMN0I5Wd5Nktkcc6yNDKZDlQrANXbC8=; b=lUpkPbNaFfBFn7C5+oo2fEVUTTzonDsJHWu9tZscS+yCn5h1XaoIrIcBeweaEdn/6aHQAPR+mkpeQDdHs+u35DvPxxTWU9oUteYqUFhp4MD2toTQZsnM4gZF0jP4vTHKyKJvIYK39Lnes5Uxc+z2MdWgYJ7/7p93ysDj7B8aDkY= Received: from TY2PR01MB3401.jpnprd01.prod.outlook.com (20.178.141.204) by TY2PR01MB2713.jpnprd01.prod.outlook.com (20.177.96.84) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2115.14; Tue, 30 Jul 2019 03:53:32 +0000 Received: from TY2PR01MB3401.jpnprd01.prod.outlook.com ([fe80::9538:388:6e72:4340]) by TY2PR01MB3401.jpnprd01.prod.outlook.com ([fe80::9538:388:6e72:4340%5]) with mapi id 15.20.2115.005; Tue, 30 Jul 2019 03:53:32 +0000 From: =?utf-8?B?TWFydGluIEouIETDvHJzdA==?= To: Victor Vasiliev , Eliot Lear CC: "hybi@ietf.org" , "webtransport@ietf.org" , "dispatch@ietf.org" , HTTP Working Group , IETF QUIC WG Subject: Re: [hybi] WebTransport Mailing List Thread-Topic: [hybi] WebTransport Mailing List Thread-Index: AQHVRlUxpEm+QG8xMEyOzfHeOUgXIKbiiAeA Date: Tue, 30 Jul 2019 03:53:32 +0000 Message-ID: <4f6894c1-b6ea-46c6-d662-9b2e2f4daf02@it.aoyama.ac.jp> References: <85E74088-6D84-47CB-97CC-C637167959B0@cisco.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-clientproxiedby: TY2PR0101CA0013.apcprd01.prod.exchangelabs.com (2603:1096:404:92::25) To TY2PR01MB3401.jpnprd01.prod.outlook.com (2603:1096:404:d1::12) authentication-results: spf=none (sender IP is ) smtp.mailfrom=duerst@it.aoyama.ac.jp; x-ms-exchange-messagesentrepresentingtype: 1 x-originating-ip: [133.2.210.64] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 414777c7-0e39-414f-671e-08d714a17d6f x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(7021145)(8989299)(5600148)(711020)(4605104)(1401327)(4534185)(7022145)(4603075)(4627221)(201702281549075)(8990200)(7048125)(7024125)(7025125)(7027125)(7023125)(2017052603328)(7193020); SRVR:TY2PR01MB2713; x-ms-traffictypediagnostic: TY2PR01MB2713: x-ms-exchange-purlcount: 4 x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-forefront-prvs: 0114FF88F6 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(39840400004)(396003)(346002)(366004)(136003)(376002)(199004)(189003)(53754006)(3846002)(85182001)(966005)(14454004)(7736002)(8676002)(5660300002)(54906003)(6306002)(508600001)(4326008)(8936002)(256004)(81156014)(6512007)(6246003)(6436002)(53936002)(81166006)(66066001)(110136005)(186003)(305945005)(68736007)(446003)(76176011)(26005)(66476007)(66446008)(64756008)(66556008)(66946007)(786003)(316002)(31696002)(6486002)(71200400001)(486006)(71190400001)(2616005)(386003)(6506007)(53546011)(99286004)(31686004)(102836004)(11346002)(85202003)(476003)(86362001)(229853002)(6116002)(52116002)(25786009)(2906002)(130980200001)(223123001); DIR:OUT; SFP:1102; SCL:1; SRVR:TY2PR01MB2713; H:TY2PR01MB3401.jpnprd01.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:0; MX:1; received-spf: None (protection.outlook.com: it.aoyama.ac.jp does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam-message-info: LcG3bc/ws0RHYBQavYW47Pn2Bnb49abRv4+vUY9FRhyUSxXxpi9fe1UwqfkVHGshZYB6J93Uhq/LejQ0AJbh7H6TGF5dTy6ueU1Sx9InO7l8qD4SnF2v9R9/Bl0gL+WHNTFSljtoM/TjWPx2tCdo28or2CPxyeO6lJg+DGnWgnAyFOd3TLIknBiErVHEjt6HqomoOlXavdsHLstwTS82hRDNzqjzZoFgyxX0HgE+WUq1prwMl168URoTtOiuiN5l2E49sSsIro3Dhs11pHhMKUVL8eQMEFWdkvgwkG3aQY029QHp7pblpUowfpiCvd/HtLrgxTMMntCJO7VgWYO5pPAovuv/DGBzpPbafLqg726W7LspMMScPzv86YeEfzIV35U75Gj+E4MGIOIujGALNuQ5kB8PLF+MXvFqpHerWqw= Content-Type: text/plain; charset="utf-8" Content-ID: <22F1CC631DF8F64CAD7C5A40822F3FD4@jpnprd01.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: it.aoyama.ac.jp X-MS-Exchange-CrossTenant-Network-Message-Id: 414777c7-0e39-414f-671e-08d714a17d6f X-MS-Exchange-CrossTenant-originalarrivaltime: 30 Jul 2019 03:53:32.4326 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: e02030e7-4d45-463e-a968-0290e738c18e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: duerst@it.aoyama.ac.jp X-MS-Exchange-Transport-CrossTenantHeadersStamped: TY2PR01MB2713 Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 30 Jul 2019 03:53:46 -0000 SSB0aGluayBFbGlvdCdzIHF1ZXN0aW9uIHNob3dzIHRoYXQgIldlYlRyYW5zcG9ydCIgbWF5IGdy ZWF0bHkgYmVuZWZpdCANCmZyb20gYSBiZXR0ZXIgbmFtZSAob3IgYWNyb255bSkuDQoNClJlZ2Fy ZHMsICAgTWFydGluLg0KDQpQLlMuOiBJIGFscmVhZHkgc3Vic2NyaWJlZCB0byB0aGUgbGlzdC4N Cg0KT24gMjAxOS8wNy8zMCAwNjozMiwgVmljdG9yIFZhc2lsaWV2IHdyb3RlOg0KPiBIaSBFbGlv dCwNCj4gDQo+IFdlYlRyYW5zcG9ydCBpcyByb3VnaGx5ICJXZWJTb2NrZXRzLCBidXQgZm9yIHVu cmVsaWFibGUgdHJhbnNwb3J0IiwNCj4gY3VycmVudGx5IGRlc2NyaWJlZCBpbg0KPiBodHRwczov L3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtdnZ2LXdlYnRyYW5zcG9ydC1vdmVydmlldy0wMCBh bmQNCj4gaHR0cHM6Ly93aWNnLmdpdGh1Yi5pby93ZWItdHJhbnNwb3J0Ly4gIEl0J3Mgbm90IHJl bGF0ZWQgdG8gQkNQIDE5MA0KPiBkaXNjdXNzaW9uIHRoYXQgaGFwcGVuZWQgYXQgdGhlIG90aGVy IHBvcnRpb24gb2YgQVJUQVJFQSBtZWV0aW5nLg0KPiANCj4gQ2hlZXJzLA0KPiAgICBWaWN0b3Iu DQo+IA0KPiBPbiBNb24sIEp1bCAyOSwgMjAxOSBhdCA1OjI5IFBNIEVsaW90IExlYXIgPGxlYXJA Y2lzY28uY29tPiB3cm90ZToNCj4gDQo+PiBIaSBWaWN0b3IsDQo+Pg0KPj4gU29ycnkgaWYgdGhp cyBoYXMgYmVlbiBjb3ZlcmVkLCBidXQgZm9yIHRob3NlIG9mIHVzIG91dCBvZiB0aGUgcm9vbSwg Y291bGQNCj4+IHlvdSBwcm92aWRlIHR3byBvciB0aHJlZSBzZW50ZW5jZXMgYXMgdG8gd2hhdCB0 aGUgbWFpbGluZyBsaXN0IGlzIHN1cHBvc2VkDQo+PiB0byBjb3Zlcj8gIElzIHRoaXMgbW9yZSBC Q1AgMTkwIHN0dWZmIG9yIHNvbWV0aGluZyBtb3JlIGdlbmVyaWMgb3IganVzdA0KPj4gc29tZXRo aW5nIGVsc2U/DQo+Pg0KPj4gVGhhbmtzLA0KPj4NCj4+IEVsaW90DQo+Pg0KPj4gT24gMjkgSnVs IDIwMTksIGF0IDIyOjU4LCBWaWN0b3IgVmFzaWxpZXYgPA0KPj4gdmFzaWx2dj00MGdvb2dsZS5j b21AZG1hcmMuaWV0Zi5vcmc+IHdyb3RlOg0KPj4NCj4+IEhlbGxvIGV2ZXJ5b25lLA0KPj4NCj4+ IEp1ZGdpbmcgZnJvbSB0aGUgaW4tcGVyc29uIGRpc2N1c3Npb25zIGluIE1vbnRyZWFsLCB0aGVy ZSBhcHBlYXJzIHRvIGJlIGENCj4+IGRlY2VudCBhbW91bnQgb2YgaW50ZXJlc3QgaW4gdGhlIFdl YlRyYW5zcG9ydCB3b3JrLiAgRXZlcnlvbmUgaW50ZXJlc3RlZCBpcw0KPj4gaW52aXRlZCB0byBq b2luIG91ciBtYWlsaW5nIGxpc3Q6DQo+Pg0KPj4gICAgaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFp bG1hbi9saXN0aW5mby93ZWJ0cmFuc3BvcnQNCj4+DQo+PiBDaGVlcnMsDQo+PiAgICBWaWN0b3Iu DQo+Pg0KPj4NCj4+DQo+IA0KPiANCj4gX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX18NCj4gaHliaSBtYWlsaW5nIGxpc3QNCj4gaHliaUBpZXRmLm9yZw0KPiBo dHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2h5YmkNCj4gDQoNCi0tIA0KUHJv Zi4gRHIuc2MuIE1hcnRpbiBKLiBEw7xyc3QNCkRlcGFydG1lbnQgb2YgSW50ZWxsaWdlbnQgSW5m b3JtYXRpb24gVGVjaG5vbG9neQ0KQ29sbGVnZSBvZiBTY2llbmNlIGFuZCBFbmdpbmVlcmluZw0K QW95YW1hIEdha3VpbiBVbml2ZXJzaXR5DQpGdWNoaW5vYmUgNS0xLTEwLCBDaHVvLWt1LCBTYWdh bWloYXJhDQoyNTItNTI1OCBKYXBhbg0K From nobody Mon Jul 29 23:45:18 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 009861200EC for ; Mon, 29 Jul 2019 23:45:16 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.897 X-Spam-Level: X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id I0R78IKfvMrK for ; Mon, 29 Jul 2019 23:45:14 -0700 (PDT) Received: from emh02.mail.saunalahti.fi (emh02.mail.saunalahti.fi [62.142.5.108]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E508B1200EB for ; Mon, 29 Jul 2019 23:45:13 -0700 (PDT) Received: from eggert.org (unknown [62.248.255.8]) by emh02.mail.saunalahti.fi (Postfix) with ESMTP id C8B1B20162; Tue, 30 Jul 2019 09:45:11 +0300 (EEST) Received: from slate.eggert.org (Slate.eggert.org [172.19.235.111]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by eggert.org (Postfix) with ESMTPSA id F2DB664EBF4; Tue, 30 Jul 2019 09:45:05 +0300 (EEST) From: Lars Eggert Message-Id: <4E21D8CE-078A-461E-B0CA-DAE0CD1F371B@eggert.org> Content-Type: multipart/signed; boundary="Apple-Mail=_D2191CB5-BED4-42C8-B1E4-E70A7542E90C"; protocol="application/pgp-signature"; micalg=pgp-sha512 Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Subject: Re: Interop testing of QUIC with other protocols over long haul paths Date: Tue, 30 Jul 2019 09:45:04 +0300 In-Reply-To: <1F436ED13A22A246A59CA374CBC54399923EFF5D@ORSMSX111.amr.corp.intel.com> Cc: "quic@ietf.org" To: "Deval, Manasi" References: <1F436ED13A22A246A59CA374CBC54399923EFF5D@ORSMSX111.amr.corp.intel.com> X-MailScanner-ID: F2DB664EBF4.A6CA3 X-MailScanner: Found to be clean X-MailScanner-From: lars@eggert.org Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 30 Jul 2019 06:45:16 -0000 --Apple-Mail=_D2191CB5-BED4-42C8-B1E4-E70A7542E90C Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii Hi, On 2019-7-29, at 17:18, Deval, Manasi wrote: > Is there any congestion testing done with QUIC and TCP running Cubic / = BBR sharing the same link? If so, please can you point me to the = exeriments? Jana and Marten have been working on integrating QUIC stacks into ns3 = virtual topologies, which can include cross traffic. It's early days = still, but see https://github.com/marten-seemann/quic-network-simulator Lars --Apple-Mail=_D2191CB5-BED4-42C8-B1E4-E70A7542E90C Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEDrrUO3PMwKM8fddaHbmKvSnuNPgFAl0/53AACgkQHbmKvSnu NPicwA/+Mv1HFVVK3yfbnIqxmT02sNMmFNl+KTeyj/UnXjfHz4yh/4b8SMxKMpO5 abmhL+giXq7xOfer8kdeBMdqToULgV498lCu73cU9XWECOARd5ByWxr45dd/sTh/ 67Kqu2n3SsbyeWKhTT1TRQN3J2IFIhSoGfMVr0BE7AhtkMDjwjq4z6hJQhd8MCLH XHUd4IJxn9F/I+BqeDon1ZFbKphv3EmKCJhs8CZIxorSh8C0Qm5+EnOrgFcdcADr ECGSf1j3w4QHkHlllbEE8iTl1zE8LjgFRrMMweesO0ttGn2prrbrAZNLxt12XD/s OS0i/p8B7OG1EaKl3wZ93oAyhZIbmVcEt8rBhYlkMYEHuhdS347yI5nRRxTKAxu/ aTEP4Ia6KfbuF102Rm0eMzsAuTfEr4IPjed0tOfpJ9StRDZ17SDtnd9k/Hk5r/1W sbdQKHI07DBPXFwb0hOEWxRXUr2YDXt1AIXaPt0I1ba4Aww3j4PYrAiLyXmwOqU+ O5/DysJSFdv5xw96UVIZcHQRjCp/Mww2bt2rJwg+LYWMOUhz5cXpF6dJuFr4bYGR F4EAKCZCyfwQe22lQw+KcKrIkC582CQrPnSv0hGFPPEPtL6uT+OA/aaHELoz9xBH u34daNlEEo5CFvPCd6ciCLfbQz2vi4wCryn4rTjPogJQxlU0AdM= =Ib7h -----END PGP SIGNATURE----- --Apple-Mail=_D2191CB5-BED4-42C8-B1E4-E70A7542E90C-- From nobody Tue Jul 30 07:38:22 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 18AEE120187 for ; Tue, 30 Jul 2019 07:38:21 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.199 X-Spam-Level: X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vkW1hv4OKhth for ; Tue, 30 Jul 2019 07:38:19 -0700 (PDT) Received: from mga04.intel.com (mga04.intel.com [192.55.52.120]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6144F12022D for ; Tue, 30 Jul 2019 07:38:15 -0700 (PDT) X-Amp-Result: SKIPPED(no attachment in message) X-Amp-File-Uploaded: False Received: from fmsmga003.fm.intel.com ([10.253.24.29]) by fmsmga104.fm.intel.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 30 Jul 2019 07:38:15 -0700 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.64,327,1559545200"; d="scan'208";a="179747390" Received: from orsmsx105.amr.corp.intel.com ([10.22.225.132]) by FMSMGA003.fm.intel.com with ESMTP; 30 Jul 2019 07:38:14 -0700 Received: from orsmsx152.amr.corp.intel.com (10.22.226.39) by ORSMSX105.amr.corp.intel.com (10.22.225.132) with Microsoft SMTP Server (TLS) id 14.3.439.0; Tue, 30 Jul 2019 07:38:14 -0700 Received: from orsmsx111.amr.corp.intel.com ([169.254.12.46]) by ORSMSX152.amr.corp.intel.com ([169.254.8.114]) with mapi id 14.03.0439.000; Tue, 30 Jul 2019 07:38:13 -0700 From: "Deval, Manasi" To: Lars Eggert CC: "quic@ietf.org" Subject: RE: Interop testing of QUIC with other protocols over long haul paths Thread-Topic: Interop testing of QUIC with other protocols over long haul paths Thread-Index: AdVFw7AXf1Ps91pCQ+W8j1ivs77+SQBGU2UAAAHT0jA= Date: Tue, 30 Jul 2019 14:38:13 +0000 Message-ID: <1F436ED13A22A246A59CA374CBC54399923F23B1@ORSMSX111.amr.corp.intel.com> References: <1F436ED13A22A246A59CA374CBC54399923EFF5D@ORSMSX111.amr.corp.intel.com> <4E21D8CE-078A-461E-B0CA-DAE0CD1F371B@eggert.org> In-Reply-To: <4E21D8CE-078A-461E-B0CA-DAE0CD1F371B@eggert.org> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-titus-metadata-40: eyJDYXRlZ29yeUxhYmVscyI6IiIsIk1ldGFkYXRhIjp7Im5zIjoiaHR0cDpcL1wvd3d3LnRpdHVzLmNvbVwvbnNcL0ludGVsMyIsImlkIjoiYzFmZTIzYTctNDJiZS00NzkzLWE5ZWYtMzIzMDU5MzY3OGYwIiwicHJvcHMiOlt7Im4iOiJDVFBDbGFzc2lmaWNhdGlvbiIsInZhbHMiOlt7InZhbHVlIjoiQ1RQX05UIn1dfV19LCJTdWJqZWN0TGFiZWxzIjpbXSwiVE1DVmVyc2lvbiI6IjE3LjEwLjE4MDQuNDkiLCJUcnVzdGVkTGFiZWxIYXNoIjoiRlo2UlN3QjBLc2x0WnFjYXdjQ1dcL3ljXC9NcUgwSUZJQVd0dUY2NUFrTDhaZlRNYjNKWXlUU1ZPNlVqczdzY3dFIn0= x-ctpclassification: CTP_NT dlp-product: dlpe-windows dlp-version: 11.0.600.7 dlp-reaction: no-action x-originating-ip: [10.22.254.139] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 30 Jul 2019 14:38:21 -0000 Thanks Lars!=20 -----Original Message----- From: Lars Eggert [mailto:lars@eggert.org]=20 Sent: Monday, July 29, 2019 11:45 PM To: Deval, Manasi Cc: quic@ietf.org Subject: Re: Interop testing of QUIC with other protocols over long haul pa= ths Hi, On 2019-7-29, at 17:18, Deval, Manasi wrote: > Is there any congestion testing done with QUIC and TCP running Cubic / BB= R sharing the same link? If so, please can you point me to the exeriments? Jana and Marten have been working on integrating QUIC stacks into ns3 virtu= al topologies, which can include cross traffic. It's early days still, but = see https://github.com/marten-seemann/quic-network-simulator Lars From nobody Wed Jul 31 06:49:40 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C98B8120018; Wed, 31 Jul 2019 06:49:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.701 X-Spam-Level: X-Spam-Status: No, score=-2.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=mnot.net header.b=i3zd1sWl; dkim=pass (2048-bit key) header.d=messagingengine.com header.b=cNAB4Rjp Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GJH_n8JaZc07; Wed, 31 Jul 2019 06:49:35 -0700 (PDT) Received: from new3-smtp.messagingengine.com (new3-smtp.messagingengine.com [66.111.4.229]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A9B6212004F; Wed, 31 Jul 2019 06:49:35 -0700 (PDT) Received: from compute3.internal (compute3.nyi.internal [10.202.2.43]) by mailnew.nyi.internal (Postfix) with ESMTP id E0AEC1FBD; Wed, 31 Jul 2019 09:49:33 -0400 (EDT) Received: from mailfrontend1 ([10.202.2.162]) by compute3.internal (MEProxy); Wed, 31 Jul 2019 09:49:33 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mnot.net; h= content-type:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; s=fm3; bh=e 8oLACul+KAOHEyqSm9hMXQsbf2RFaP03ZEIw6sH2XM=; b=i3zd1sWlv3rGPLP28 ufnhQ5jCN5Rbydrjkr0EWGvkfxTE8oPDyTF3OdiXNOtKYzsqPQ9frH1ay2waEjG6 QalK0vKHLYJBPLJHRpXKN+l80JPCG21HGOI27MkC+pPEqLsXDQyKlnGCsm+5BJqC XZzac4gaaOcWcQumRo+b+XlagKyhm0TB3WF3QyZPkNY4JZ+HpRpOp2w0BCVtD3sJ iq5yiKI4EThXqWb9EDisnM2AFX4iKsvFkKdVqkx/iMM+QAwa8cGkutNFQ2jiIIEv ugiFF5pecGoDPm5OIIHEm5F4ZqV6X118KMfB/yP5RSzXx03DJt0IWR6nhiPWem2J n9LTg== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :date:from:in-reply-to:message-id:mime-version:references :subject:to:x-me-proxy:x-me-proxy:x-me-sender:x-me-sender :x-sasl-enc; s=fm3; bh=e8oLACul+KAOHEyqSm9hMXQsbf2RFaP03ZEIw6sH2 XM=; b=cNAB4RjpYbB7CM7hyBNHme9Lh8nzvfxcnelkiH8ulE8c558pfA7KdZdcI bkKOdyRsEUD8AYL2k6NmpEOEcr/uFOsmsuXATpWY98Hw26M0SJgImki396vrrQoW KQRAmGLRDsp6btDNyCtXXPD3IPSgEt0PUpqTfBqD0he389M/WgGJyZj9zzRQiZGt bS57596KDz+c9VBZOLBVnZbMfDwJiY/jVmVin8FTgv4Xj1t1fshBFCy11HqkeCOV Zj+0kQEnxPRBnSnr57/rFoWW20feDbeGnuhgGsYRcaF1ACVSYcbOmvdeamYidGmR xCXF+0oc6/gV1A8m6vuj99DQTA5cw== X-ME-Sender: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeduvddrleehgdeijecutefuodetggdotefrodftvf curfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfghnecu uegrihhlohhuthemuceftddtnecusecvtfgvtghiphhivghnthhsucdlqddutddtmdenog fuuhhsphgvtghtffhomhgrihhnucdlgeelmdenucfjughrpegtggfuhfgjfffgkfhfvffo sehtqhhmtdhhtdejnecuhfhrohhmpeforghrkhcupfhothhtihhnghhhrghmuceomhhnoh htsehmnhhothdrnhgvtheqnecuffhomhgrihhnpehgihhthhhusgdrihhopdhivghtfhdr ohhrghdpmhhnohhtrdhnvghtnecukfhppedvudeirddvuddrudelfedrjeeknecurfgrrh grmhepmhgrihhlfhhrohhmpehmnhhothesmhhnohhtrdhnvghtnecuvehluhhsthgvrhfu ihiivgeptd X-ME-Proxy: Received: from [10.20.2.23] (unknown [216.21.193.78]) by mail.messagingengine.com (Postfix) with ESMTPA id A909B80060; Wed, 31 Jul 2019 09:49:31 -0400 (EDT) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Subject: Re: [dispatch] [hybi] WebTransport Mailing List From: Mark Nottingham In-Reply-To: <4f6894c1-b6ea-46c6-d662-9b2e2f4daf02@it.aoyama.ac.jp> Date: Wed, 31 Jul 2019 09:49:30 -0400 Cc: Victor Vasiliev , Eliot Lear , "dispatch@ietf.org" , "webtransport@ietf.org" , "hybi@ietf.org" , HTTP Working Group , IETF QUIC WG Content-Transfer-Encoding: quoted-printable Message-Id: <433A2B37-704A-419B-B56F-F7B697E35741@mnot.net> References: <85E74088-6D84-47CB-97CC-C637167959B0@cisco.com> <4f6894c1-b6ea-46c6-d662-9b2e2f4daf02@it.aoyama.ac.jp> To: =?utf-8?B?Ik1hcnRpbiBKLiBEw7xyc3Qi?= X-Mailer: Apple Mail (2.3445.104.11) Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 31 Jul 2019 13:49:39 -0000 +1.=20 Naming things is hard, but when they're generic and confusable with = other things, it's worth the pain. > On 29 Jul 2019, at 11:53 pm, Martin J. D=C3=BCrst = wrote: >=20 > I think Eliot's question shows that "WebTransport" may greatly benefit=20= > from a better name (or acronym). >=20 > Regards, Martin. >=20 > P.S.: I already subscribed to the list. >=20 > On 2019/07/30 06:32, Victor Vasiliev wrote: >> Hi Eliot, >>=20 >> WebTransport is roughly "WebSockets, but for unreliable transport", >> currently described in >> https://tools.ietf.org/html/draft-vvv-webtransport-overview-00 and >> https://wicg.github.io/web-transport/. It's not related to BCP 190 >> discussion that happened at the other portion of ARTAREA meeting. >>=20 >> Cheers, >> Victor. >>=20 >> On Mon, Jul 29, 2019 at 5:29 PM Eliot Lear wrote: >>=20 >>> Hi Victor, >>>=20 >>> Sorry if this has been covered, but for those of us out of the room, = could >>> you provide two or three sentences as to what the mailing list is = supposed >>> to cover? Is this more BCP 190 stuff or something more generic or = just >>> something else? >>>=20 >>> Thanks, >>>=20 >>> Eliot >>>=20 >>> On 29 Jul 2019, at 22:58, Victor Vasiliev < >>> vasilvv=3D40google.com@dmarc.ietf.org> wrote: >>>=20 >>> Hello everyone, >>>=20 >>> Judging from the in-person discussions in Montreal, there appears to = be a >>> decent amount of interest in the WebTransport work. Everyone = interested is >>> invited to join our mailing list: >>>=20 >>> https://www.ietf.org/mailman/listinfo/webtransport >>>=20 >>> Cheers, >>> Victor. >>>=20 >>>=20 >>>=20 >>=20 >>=20 >> _______________________________________________ >> hybi mailing list >> hybi@ietf.org >> https://www.ietf.org/mailman/listinfo/hybi >>=20 >=20 > --=20 > Prof. Dr.sc. Martin J. D=C3=BCrst > Department of Intelligent Information Technology > College of Science and Engineering > Aoyama Gakuin University > Fuchinobe 5-1-10, Chuo-ku, Sagamihara > 252-5258 Japan > _______________________________________________ > dispatch mailing list > dispatch@ietf.org > https://www.ietf.org/mailman/listinfo/dispatch -- Mark Nottingham https://www.mnot.net/ From nobody Wed Jul 31 13:37:33 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E8220120018 for ; Wed, 31 Jul 2019 13:37:24 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -17.5 X-Spam-Level: X-Spam-Status: No, score=-17.5 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, ENV_AND_HDR_SPF_MATCH=-0.5, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5, USER_IN_DEF_SPF_WL=-7.5] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TO_jHJF6H2TR for ; Wed, 31 Jul 2019 13:37:23 -0700 (PDT) Received: from mail-ua1-x92a.google.com (mail-ua1-x92a.google.com [IPv6:2607:f8b0:4864:20::92a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E87CD12006D for ; Wed, 31 Jul 2019 13:37:18 -0700 (PDT) Received: by mail-ua1-x92a.google.com with SMTP id v18so27514004uad.12 for ; Wed, 31 Jul 2019 13:37:18 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=OBfJJvtpDjldJZKsRY7KC6mQrlqiw6TYVcoW+ucL8sQ=; b=tj+IfxYCpuv7HiKg13DhktVrOFrp0SBG26SKxHw6GX4LscP6jsaJV1NLXWYfmdcIDW eE21LrqGAdp9LEITVO5JQ8SsTQTvuLfAmKJ/OVwOEF434ByRBXuAg1RnJ9tFZYswpoRu lC6yTH3tgBY5lwtezWwq9qj2b/9DTxCoLA5dsCLbuA5mAOHxrvrGP09/85zflBS55sPn YxGHnqIyfPK/Ofk1LsGL5inI/JVyr80EEHse5Ir9LmR8zXn6+dpUaT6pzHHXnqbJmZAh 4pbvAaPlDdvNHR55NJO1o7P5nIh6+Qmgnx3xZM5Rynbp/Dehzr9QSQlmdod1VhSRB6b3 lPJA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=OBfJJvtpDjldJZKsRY7KC6mQrlqiw6TYVcoW+ucL8sQ=; b=LywTSkLmYt899+LS/Kpoe+xZEPaK/r0c+tT1fsaA1+M745jvuKRvv5HXiYlBeUkw8+ keLh1TUMXN8z1oXByFXEjMZdg/YnjRlVuksJA4G74pBj8NnIeaC2BCgOYOnPIwihD9EZ 2DCPPLcmNfdmuwSw8vEcDQcmuacTqXh11h7xeI/O5sjFFZlvs5bTa/fT3ph/43boL25W hRrosbFppvBnpf/amZou0+35PhAiUMSxI0k4GGU4IMh0grm4noIZI01QrnTvQS0SVaLq nnJlbcJjAL/Y1upkEmaHNZ7BmeDMyd18HADZv9zgYDHR1tQTWGXo0aY/W9Zyt3UJgxGN LBEw== X-Gm-Message-State: APjAAAUzOOTVFcXzEnlhEzFcgeX0o/AgWlqPu+8vmEkwJgXYAA6wRuM6 OiiLSkH4kVsP3SEIbf00NOhGPTrLq5cQo5TuUWgs4A== X-Google-Smtp-Source: APXvYqw4qktjqrBXHoFActWkHUWbtFpeF2n/jVNh/oPcnhJWiRSEtct9f+k1y9jEC4cBEh9iV3eapu7y+MYGnAq6VUU= X-Received: by 2002:ab0:30c7:: with SMTP id c7mr17309878uam.143.1564605437577; Wed, 31 Jul 2019 13:37:17 -0700 (PDT) MIME-Version: 1.0 References: <85E74088-6D84-47CB-97CC-C637167959B0@cisco.com> <4f6894c1-b6ea-46c6-d662-9b2e2f4daf02@it.aoyama.ac.jp> <433A2B37-704A-419B-B56F-F7B697E35741@mnot.net> In-Reply-To: <433A2B37-704A-419B-B56F-F7B697E35741@mnot.net> From: Peter Thatcher Date: Wed, 31 Jul 2019 13:36:41 -0700 Message-ID: Subject: Re: [dispatch] [hybi] WebTransport Mailing List To: Mark Nottingham Cc: =?UTF-8?Q?Martin_J=2E_D=C3=BCrst?= , Victor Vasiliev , "hybi@ietf.org" , Eliot Lear , "webtransport@ietf.org" , "dispatch@ietf.org" , HTTP Working Group , IETF QUIC WG Content-Type: multipart/alternative; boundary="0000000000005284d9058f001741" Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 31 Jul 2019 20:37:25 -0000 --0000000000005284d9058f001741 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable What's wrong with "WebTransport"? It seems like a good name to me. With what is it confusable? On Wed, Jul 31, 2019 at 6:50 AM Mark Nottingham wrote: > +1. > > Naming things is hard, but when they're generic and confusable with other > things, it's worth the pain. > > > > On 29 Jul 2019, at 11:53 pm, Martin J. D=C3=BCrst > wrote: > > > > I think Eliot's question shows that "WebTransport" may greatly benefit > > from a better name (or acronym). > > > > Regards, Martin. > > > > P.S.: I already subscribed to the list. > > > > On 2019/07/30 06:32, Victor Vasiliev wrote: > >> Hi Eliot, > >> > >> WebTransport is roughly "WebSockets, but for unreliable transport", > >> currently described in > >> https://tools.ietf.org/html/draft-vvv-webtransport-overview-00 and > >> https://wicg.github.io/web-transport/. It's not related to BCP 190 > >> discussion that happened at the other portion of ARTAREA meeting. > >> > >> Cheers, > >> Victor. > >> > >> On Mon, Jul 29, 2019 at 5:29 PM Eliot Lear wrote: > >> > >>> Hi Victor, > >>> > >>> Sorry if this has been covered, but for those of us out of the room, > could > >>> you provide two or three sentences as to what the mailing list is > supposed > >>> to cover? Is this more BCP 190 stuff or something more generic or ju= st > >>> something else? > >>> > >>> Thanks, > >>> > >>> Eliot > >>> > >>> On 29 Jul 2019, at 22:58, Victor Vasiliev < > >>> vasilvv=3D40google.com@dmarc.ietf.org> wrote: > >>> > >>> Hello everyone, > >>> > >>> Judging from the in-person discussions in Montreal, there appears to > be a > >>> decent amount of interest in the WebTransport work. Everyone > interested is > >>> invited to join our mailing list: > >>> > >>> https://www.ietf.org/mailman/listinfo/webtransport > >>> > >>> Cheers, > >>> Victor. > >>> > >>> > >>> > >> > >> > >> _______________________________________________ > >> hybi mailing list > >> hybi@ietf.org > >> https://www.ietf.org/mailman/listinfo/hybi > >> > > > > -- > > Prof. Dr.sc. Martin J. D=C3=BCrst > > Department of Intelligent Information Technology > > College of Science and Engineering > > Aoyama Gakuin University > > Fuchinobe 5-1-10, Chuo-ku, Sagamihara > > 252-5258 Japan > > _______________________________________________ > > dispatch mailing list > > dispatch@ietf.org > > https://www.ietf.org/mailman/listinfo/dispatch > > -- > Mark Nottingham https://www.mnot.net/ > > _______________________________________________ > dispatch mailing list > dispatch@ietf.org > https://www.ietf.org/mailman/listinfo/dispatch > --0000000000005284d9058f001741 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
What's wrong with "WebTransport"?=C2=A0= It seems like a good name to me.=C2=A0 With what is it confusable?

On= Wed, Jul 31, 2019 at 6:50 AM Mark Nottingham <mnot@mnot.net> wrote:
+1.

Naming things is hard, but when they're generic and confusable with oth= er things, it's worth the pain.


> On 29 Jul 2019, at 11:53 pm, Martin J. D=C3=BCrst <duerst@it.aoyama.ac.jp> = wrote:
>
> I think Eliot's question shows that "WebTransport" may g= reatly benefit
> from a better name (or acronym).
>
> Regards,=C2=A0 =C2=A0Martin.
>
> P.S.: I already subscribed to the list.
>
> On 2019/07/30 06:32, Victor Vasiliev wrote:
>> Hi Eliot,
>>
>> WebTransport is roughly "WebSockets, but for unreliable trans= port",
>> currently described in
>> https://tools.ietf.org/html/d= raft-vvv-webtransport-overview-00 and
>> https://wicg.github.io/web-transport/.=C2=A0 It= 9;s not related to BCP 190
>> discussion that happened at the other portion of ARTAREA meeting.<= br> >>
>> Cheers,
>>=C2=A0 =C2=A0Victor.
>>
>> On Mon, Jul 29, 2019 at 5:29 PM Eliot Lear <lear@cisco.com> wrote:
>>
>>> Hi Victor,
>>>
>>> Sorry if this has been covered, but for those of us out of the= room, could
>>> you provide two or three sentences as to what the mailing list= is supposed
>>> to cover?=C2=A0 Is this more BCP 190 stuff or something more g= eneric or just
>>> something else?
>>>
>>> Thanks,
>>>
>>> Eliot
>>>
>>> On 29 Jul 2019, at 22:58, Victor Vasiliev <
>>> vasilvv=3D40google.com@dmarc.ietf.org> wrote:
>>>
>>> Hello everyone,
>>>
>>> Judging from the in-person discussions in Montreal, there appe= ars to be a
>>> decent amount of interest in the WebTransport work.=C2=A0 Ever= yone interested is
>>> invited to join our mailing list:
>>>
>>>=C2=A0 =C2=A0https://www.ietf.org/mail= man/listinfo/webtransport
>>>
>>> Cheers,
>>>=C2=A0 =C2=A0Victor.
>>>
>>>
>>>
>>
>>
>> _______________________________________________
>> hybi mailing list
>> hybi@ietf.org
>> https://www.ietf.org/mailman/listinfo/hybi >>
>
> --
> Prof. Dr.sc. Martin J. D=C3=BCrst
> Department of Intelligent Information Technology
> College of Science and Engineering
> Aoyama Gakuin University
> Fuchinobe 5-1-10, Chuo-ku, Sagamihara
> 252-5258 Japan
> _______________________________________________
> dispatch mailing list
> dispatch@ietf.o= rg
> https://www.ietf.org/mailman/listinfo/dispatch

--
Mark Nottingham=C2=A0 =C2=A0https://www.mnot.net/

_______________________________________________
dispatch mailing list
dispatch@ietf.org
https://www.ietf.org/mailman/listinfo/dispatch
--0000000000005284d9058f001741-- From nobody Wed Jul 31 13:43:53 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 786B2120077; Wed, 31 Jul 2019 13:43:49 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.997 X-Spam-Level: X-Spam-Status: No, score=-1.997 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AJXB6XEZEDYg; Wed, 31 Jul 2019 13:43:46 -0700 (PDT) Received: from mail-ed1-x52f.google.com (mail-ed1-x52f.google.com [IPv6:2a00:1450:4864:20::52f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2D8FD12006D; Wed, 31 Jul 2019 13:43:46 -0700 (PDT) Received: by mail-ed1-x52f.google.com with SMTP id w13so67041581eds.4; Wed, 31 Jul 2019 13:43:46 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:in-reply-to:references:mime-version:date:message-id:subject:to :cc; bh=FxSAM7wLdAS/gJet0b4tWn6fxwojHIvcQE2QPXrOJEM=; b=J+aXrmT62/IZFASlRRHSl4b21+aDPeBuznIdb/Baf3lM9cIb8ZIV7sCv0p+06+1FjZ Cj8ZrPk/9P/SGInYCszglVxqr0pYUHK5jTvvZYYfI0uOQihuK/GI6KX++BBnsdEOJI5H HI+Be/Mj8ag28X1fr378md6sLR0bG1nIFanxXdWyEfqCKqjEv+i399xZDLmLhw7dgb2X eRU359Mdit48nEiUdMu/shvaVlOedWeIC6PKBdOHNg9cLH04BHgJ1oUPFy9qoU2XAhCa fB1qy4JcQby6/sGioaVmg6AVZdjN3z9oWA5+HrExNwPLEkjEAmLCBgLXE3OABpKG+DTv ZebA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:in-reply-to:references:mime-version:date :message-id:subject:to:cc; bh=FxSAM7wLdAS/gJet0b4tWn6fxwojHIvcQE2QPXrOJEM=; b=l4gzvwW1i2r53+VwbinkXO1DJvLOtYRxt06SqWzeGWhJxP8fjWaobMTjfT6sEUqAGN +1iYstqd9h1ZMEGge+msUxZYdOu1xC1W+IFHiFV+mATSh13GA+YH+tYrjquhDvYhbumO Yijav/obBYBLmHbhAICT9PvJp/QMYotC+5Xe7uKTJIfknEYX024uqzwQv/d5DOdrTpM0 V2vpSNLmuBrqcMoL7Rn2VaOaa+HifV+XpUBSz+bVfSX3pnu74YHumBAt2EI8RbhMY8Hw RWAZGO8+pYoW0BmgZbjP1/o6V8qr+mypdPAmcAAfXFxScPzhIHUN7GtZaGPSChY798SN kt2A== X-Gm-Message-State: APjAAAXRGayXm7+o3yiIdf054sSgzsw01DKeUF9WeV/xWvTr/MI9J1Rm zF5lfA6eQ4flH7OQNV0n+/q4cUtj0lzeK7eDG+w= X-Google-Smtp-Source: APXvYqzcvpEklhlFOPeJpAh4NY16tny7FK5h0HLBwafjPmZFcYlPXUeBoQSLMfIaFVF8HDx2HnkjZg5fCcw+bz9m+kM= X-Received: by 2002:a17:906:4882:: with SMTP id v2mr35756468ejq.100.1564605824661; Wed, 31 Jul 2019 13:43:44 -0700 (PDT) Received: from 1058052472880 named unknown by gmailapi.google.com with HTTPREST; Wed, 31 Jul 2019 13:43:43 -0700 From: =?UTF-8?Q?Mikkel_Fahn=C3=B8e_J=C3=B8rgensen?= In-Reply-To: References: <85E74088-6D84-47CB-97CC-C637167959B0@cisco.com> <4f6894c1-b6ea-46c6-d662-9b2e2f4daf02@it.aoyama.ac.jp> <433A2B37-704A-419B-B56F-F7B697E35741@mnot.net> X-Mailer: Airmail (420) MIME-Version: 1.0 Date: Wed, 31 Jul 2019 13:43:43 -0700 Message-ID: Subject: Re: [dispatch] [hybi] WebTransport Mailing List To: Peter Thatcher , Mark Nottingham Cc: "webtransport@ietf.org" , IETF QUIC WG , Victor Vasiliev , HTTP Working Group , =?UTF-8?Q?Martin_J=2E_D=C3=BCrst?= , "dispatch@ietf.org" , "hybi@ietf.org" , Eliot Lear Content-Type: multipart/alternative; boundary="000000000000647f5f058f002e28" Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 31 Jul 2019 20:43:50 -0000 --000000000000647f5f058f002e28 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Same as for WebAssembly and WebSocket when not used with a browser with HTTP. For example MQTT over WebSocket to penetrate firewalls has very little to do with Web. On 31 July 2019 at 22.37.39, Peter Thatcher ( pthatcher=3D40google.com@dmarc.ietf.org) wrote: What's wrong with "WebTransport"? It seems like a good name to me. With what is it confusable? On Wed, Jul 31, 2019 at 6:50 AM Mark Nottingham wrote: > +1. > > Naming things is hard, but when they're generic and confusable with other > things, it's worth the pain. > > > > On 29 Jul 2019, at 11:53 pm, Martin J. D=C3=BCrst > wrote: > > > > I think Eliot's question shows that "WebTransport" may greatly benefit > > from a better name (or acronym). > > > > Regards, Martin. > > > > P.S.: I already subscribed to the list. > > > > On 2019/07/30 06:32, Victor Vasiliev wrote: > >> Hi Eliot, > >> > >> WebTransport is roughly "WebSockets, but for unreliable transport", > >> currently described in > >> https://tools.ietf.org/html/draft-vvv-webtransport-overview-00 and > >> https://wicg.github.io/web-transport/. It's not related to BCP 190 > >> discussion that happened at the other portion of ARTAREA meeting. > >> > >> Cheers, > >> Victor. > >> > >> On Mon, Jul 29, 2019 at 5:29 PM Eliot Lear wrote: > >> > >>> Hi Victor, > >>> > >>> Sorry if this has been covered, but for those of us out of the room, > could > >>> you provide two or three sentences as to what the mailing list is > supposed > >>> to cover? Is this more BCP 190 stuff or something more generic or ju= st > >>> something else? > >>> > >>> Thanks, > >>> > >>> Eliot > >>> > >>> On 29 Jul 2019, at 22:58, Victor Vasiliev < > >>> vasilvv=3D40google.com@dmarc.ietf.org> wrote: > >>> > >>> Hello everyone, > >>> > >>> Judging from the in-person discussions in Montreal, there appears to > be a > >>> decent amount of interest in the WebTransport work. Everyone > interested is > >>> invited to join our mailing list: > >>> > >>> https://www.ietf.org/mailman/listinfo/webtransport > >>> > >>> Cheers, > >>> Victor. > >>> > >>> > >>> > >> > >> > >> _______________________________________________ > >> hybi mailing list > >> hybi@ietf.org > >> https://www.ietf.org/mailman/listinfo/hybi > >> > > > > -- > > Prof. Dr.sc. Martin J. D=C3=BCrst > > Department of Intelligent Information Technology > > College of Science and Engineering > > Aoyama Gakuin University > > Fuchinobe 5-1-10, Chuo-ku, Sagamihara > > 252-5258 Japan > > _______________________________________________ > > dispatch mailing list > > dispatch@ietf.org > > https://www.ietf.org/mailman/listinfo/dispatch > > -- > Mark Nottingham https://www.mnot.net/ > > _______________________________________________ > dispatch mailing list > dispatch@ietf.org > https://www.ietf.org/mailman/listinfo/dispatch > --000000000000647f5f058f002e28 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable = Same as for WebAssem= bly and WebSocket when not used with a browser with HTTP.

For example MQTT over WebSocket to pen= etrate firewalls has very little to do with Web.

On 31 July 2019 at 22.37.39, Peter Thatcher (pthatcher=3D40google.com@dmarc.ietf.or= g) wrote:

<= div>
What's wrong with "WebTransport"?=C2=A0 It seems like a = good name to me.=C2=A0 With what is it confusable?

On Wed, Jul 31, 2019 at 6:50 AM Mark Nottingham <mnot@mnot.net> = wrote:
+1.

Naming things is hard, but when they're generic and confusable with other things, it's worth the pain.


> On 29 Jul 2019, at 11:53 pm, Martin J. D=C3=BCrst <duerst@it.aoyama.ac.jp> = wrote:
>
> I think Eliot's question shows that "WebTransport" may g= reatly benefit
> from a better name (or acronym).
>
> Regards,=C2=A0 =C2=A0Martin.
>
> P.S.: I already subscribed to the list.
>
> On 2019/07/30 06:32, Victor Vasiliev wrote:
>> Hi Eliot,
>>
>> WebTransport is roughly "WebSockets, but for unreliable transport",
>> currently described in
>> https://tools.ietf.org/html/d= raft-vvv-webtransport-overview-00 and
>> https://wicg.github.io/web-transport/.=C2=A0 It= 9;s not related to BCP 190
>> discussion that happened at the other portion of ARTAREA meeting.
>>
>> Cheers,
>>=C2=A0 =C2=A0Victor.
>>
>> On Mon, Jul 29, 2019 at 5:29 PM Eliot Lear <lear@cisco.com> wrote:
>>
>>> Hi Victor,
>>>
>>> Sorry if this has been covered, but for those of us out of the room, could
>>> you provide two or three sentences as to what the mailing list is supposed
>>> to cover?=C2=A0 Is this more BCP 190 stuff or something more generic or just
>>> something else?
>>>
>>> Thanks,
>>>
>>> Eliot
>>>
>>> On 29 Jul 2019, at 22:58, Victor Vasiliev <
>>> vasilvv=3D40google.com@dmarc.ietf.org> wrote:
>>>
>>> Hello everyone,
>>>
>>> Judging from the in-person discussions in Montreal, there appears to be a
>>> decent amount of interest in the WebTransport work.=C2=A0 Everyone interested is
>>> invited to join our mailing list:
>>>
>>>=C2=A0 =C2=A0https://www.ietf.org/mail= man/listinfo/webtransport
>>>
>>> Cheers,
>>>=C2=A0 =C2=A0Victor.
>>>
>>>
>>>
>>
>>
>> _______________________________________________
>> hybi mailing list
>> hybi@ietf.org
>> https://www.ietf.org/mailman/listinfo/hybi >>
>
> --
> Prof. Dr.sc. Martin J. D=C3=BCrst
> Department of Intelligent Information Technology
> College of Science and Engineering
> Aoyama Gakuin University
> Fuchinobe 5-1-10, Chuo-ku, Sagamihara
> 252-5258 Japan
> _______________________________________________
> dispatch mailing list
> dispatch@ietf.o= rg
> https://www.ietf.org/mailman/listinfo/dispatch

--
Mark Nottingham=C2=A0 =C2=A0https://www.mnot.net/

_______________________________________________
dispatch mailing list
dispatch@ietf.org
https://www.ietf.org/mailman/listinfo/dispatch
=
--000000000000647f5f058f002e28-- From nobody Wed Jul 31 13:50:52 2019 Return-Path: X-Original-To: quic@ietfa.amsl.com Delivered-To: quic@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 328041200A4; Wed, 31 Jul 2019 13:50:37 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VofQe1auPP6h; Wed, 31 Jul 2019 13:50:34 -0700 (PDT) Received: from warmcat.com (warmcat.com [46.105.127.147]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2F7D012006D; Wed, 31 Jul 2019 13:50:34 -0700 (PDT) Date: Wed, 31 Jul 2019 21:50:23 +0100 User-Agent: K-9 Mail for Android In-Reply-To: References: Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Subject: Re: [hybi] WebTransport Mailing List To: hybi@ietf.org, Victor Vasiliev , dispatch@ietf.org, IETF QUIC WG , HTTP Working Group , webtransport@ietf.org From: Andy Green Message-ID: Archived-At: X-BeenThere: quic@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Main mailing list of the IETF QUIC working group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 31 Jul 2019 20:50:37 -0000 On July 29, 2019 9:58:23 PM GMT+01:00, Victor Vasiliev wrote: >Hello everyone, > >Judging from the in-person discussions in Montreal, there appears to be >a Could you find a moment in your busy schedule to respond to what I wrote o= n this list before making your own new and exciting list, esp wrt this shou= ld find a way to target h2? -Andy >decent amount of interest in the WebTransport work=2E Everyone >interested is >invited to join our mailing list: > > https://www=2Eietf=2Eorg/mailman/listinfo/webtransport > >Cheers, > Victor=2E
Robin=C2=A0Marx
PhD researcher - web performance
Expertise centre for Digita= l Media
=C2=A0
T +32(0)11 26 84 79 - GSM +32(0)497 72 86 9= 4
=C2=A0
www.uhasselt.be
Universiteit Hasselt - Campus Diepenbeek
Kantoor=C2=A0EDM-2.05
=C2=A0
3D""