From nobody Mon Feb 4 10:26:58 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3A8F9130F3F for ; Mon, 4 Feb 2019 10:26:52 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -19.053 X-Spam-Level: X-Spam-Status: No, score=-19.053 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-4.553, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9ybj4r3tBx3b for ; Mon, 4 Feb 2019 10:26:49 -0800 (PST) Received: from alln-iport-8.cisco.com (alln-iport-8.cisco.com [173.37.142.95]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 648A6130F35 for ; Mon, 4 Feb 2019 10:26:49 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=15554; q=dns/txt; s=iport; t=1549304809; x=1550514409; h=from:to:subject:date:message-id:mime-version; bh=4VkMNkpubZqEPsTVQ2tNDRa4mvizooyq0DIyqmYPNp8=; b=EAdV+rUCKXK842A8yupre2cfTvZy9aVJp8hIG/L3C/pjO5ZIOe9G3k4f l2OBuIMlczEc/+0KB/Uq6yb3LHzOY9Zs44e2mktlOK3qAZLPPNfhekamU Q8XFKBfMbvyx7k3PP1LKg7WSAKm4eQ9ppn5rc6CIEKCCDlXnNgVbEatx1 A=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0BCAAAeg1hc/5BdJa1kHAEBAQQBAQc?= =?us-ascii?q?EAQGBUgYBAQsBgQ12Z4EDJwqDeZQPgWglkiCFbxSBZwsBASOESRmDCSI1CA0?= =?us-ascii?q?BAwEBAgEBAm0cAQuFSgEGHQZoAQgRAwECKwIEMB0KBBODIgGBHWQPA6sBgS+?= =?us-ascii?q?ELwGBFIRqBYwyDxeBf4ERJwwTgkyDHgKBLgEMBgE/gmkxgiYCiVKBJ4UWkmM?= =?us-ascii?q?JAocwiwgZgWyFQYsXiiOFL4wGAhEUgSchATVlcXAVOyoBgkEJixWFP0Exi3o?= =?us-ascii?q?OF4EIgR8BAQ?= X-IronPort-AV: E=Sophos;i="5.56,560,1539648000"; d="scan'208,217";a="235136057" Received: from rcdn-core-8.cisco.com ([173.37.93.144]) by alln-iport-8.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 04 Feb 2019 18:26:48 +0000 Received: from XCH-RTP-013.cisco.com (xch-rtp-013.cisco.com [64.101.220.153]) by rcdn-core-8.cisco.com (8.15.2/8.15.2) with ESMTPS id x14IQlgZ030125 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL) for ; Mon, 4 Feb 2019 18:26:48 GMT Received: from xch-rtp-015.cisco.com (64.101.220.155) by XCH-RTP-013.cisco.com (64.101.220.153) with Microsoft SMTP Server (TLS) id 15.0.1395.4; Mon, 4 Feb 2019 13:26:47 -0500 Received: from xch-rtp-015.cisco.com ([64.101.220.155]) by XCH-RTP-015.cisco.com ([64.101.220.155]) with mapi id 15.00.1395.000; Mon, 4 Feb 2019 13:26:47 -0500 From: "Nancy Cam-Winget (ncamwing)" To: "rats@ietf.org" Thread-Topic: [Rats] Call for charter consensus Thread-Index: AQHUvLcvPyUkBWz7R0aPphvOTc+DPQ== Date: Mon, 4 Feb 2019 18:26:47 +0000 Message-ID: <24D5C5AD-98CA-4242-B01C-17B5ABB82B23@cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.c.0.180410 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.155.84.242] Content-Type: multipart/alternative; boundary="_000_24D5C5AD98CA4242B01C17B5ABB82B23ciscocom_" MIME-Version: 1.0 X-Outbound-SMTP-Client: 64.101.220.153, xch-rtp-013.cisco.com X-Outbound-Node: rcdn-core-8.cisco.com Archived-At: Subject: Re: [Rats] Call for charter consensus X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 04 Feb 2019 18:26:57 -0000 --_000_24D5C5AD98CA4242B01C17B5ABB82B23ciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 VGhhbmsgeW91IGFsbCBmb3IgcmVzcG9uZGluZyB0byB0aGUgY2hhcnRlciBjb25zZW5zdXMgY2Fs bC4gIFdlIGhhdmUgdmVyeSBnb29kIHN1cHBvcnQgKH4xNyByZXNwb25zZXMpIGZvciB3b3JraW5n IG9uIHRoZSBSZW1vdGUgQXR0ZXN0YXRpb24gcHJvY2VkdXJlcyB3aXRoIG5vIG9uZSBvYmplY3Rp bmcgdG8gdGhlIG92ZXJhbGwgY2hhcnRlci4gVGhlcmUgd2VyZSBhIGNvdXBsZSBvZiBub24tYmxv Y2tpbmcgY29tbWVudHMgd2l0aCByZXNwZWN0IHRvIHRoZSBzY29wZSwgb25lIHRvIGxpbWl0IGFu ZCBhbm90aGVyIHRvIGV4cGFuZCBzbyB0aGUgY2hhcnRlciB3YXMgb25seSB1cGRhdGVkIHRvIGVu c3VyZSBmbGV4aWJpbGl0eSBvbiB0aGUgZXZpZGVuY2UgZmFjdG9ycyB1c2VkIHdpdGggbm8gY2hh bmdlIHRvIGN1cnJlbnQgc2NvcGUuDQoNCkJhcnJpbmcgaXNzdWVzIGZyb20gdGhlIElFU0csIHdl IGFyZSB0YXJnZXRpbmcgdG8gY2hhcnRlciBiZWZvcmUgSUVURiAxMDTigKYuDQoNCldhcm0gcmVn YXJkcywgTmFuY3kgYW5kIFJvbWFuDQoNCg0KRnJvbTogUkFUUyA8cmF0cy1ib3VuY2VzQGlldGYu b3JnPiBvbiBiZWhhbGYgb2YgIk5hbmN5IChuY2Ftd2luZykiIDxuY2Ftd2luZ0BjaXNjby5jb20+ DQpEYXRlOiBUaHVyc2RheSwgSmFudWFyeSAxNywgMjAxOSBhdCAxOTozOA0KVG86ICJyYXRzQGll dGYub3JnIiA8cmF0c0BpZXRmLm9yZz4NClN1YmplY3Q6IFtSYXRzXSBDYWxsIGZvciBjaGFydGVy IGNvbnNlbnN1cw0KDQpIZWxsbyBSQVRTIHBhcnRpY2lwYW50czoNCg0KQXQgdGhlIHZpcnR1YWwg bWVldGluZyBvbiAxLzE2LzIwMTksIHRoZXJlIHdhcyBjb25zZW5zdXMgWzFdIHRoYXQgd2Ugc2hv dWxkIHB1cnN1ZSBjaGFydGVyaW5nIGEgV29ya2luZyBHcm91cCB3aXRoIHRoZSB0ZXh0IHJlZmxl Y3RlZCBpbiBbMl0uDQoNCldlIG5lZWQgdG8gY29udGludWUgdGhpcyBkaXNjdXNzaW9uIG9uIHRo ZSBlbWFpbCBsaXN0IGFzIHdlbGwgYXMgZ2F1Z2UgY29udGludWVkIGludGVyZXN0IGluIHBhcnRp Y2lwYXRpbmcgaW4gdGhpcyB3b3JrLiAgUGxlYXNlIGRvIHNvIGJ5IHJlc3BvbmRpbmcgdG8gdGhl IGZvbGxvd2luZyBxdWVzdGlvbnM6DQoNCiAgMS4gIERvIHlvdSBzdXBwb3J0IHRoaXMgY2hhcnRl ciB0ZXh0IChmdWxsIHRleHQgYWxzbyBwcm92aWRlZCBhdCB0aGUgZW5kIG9mIGVtYWlsIG9yIGF0 IFsxXSk/ICBPciBkbyB5b3UgaGF2ZSBvYmplY3Rpb25zIG9yIGJsb2NraW5nIGNvbmNlcm5zPw0K ICAyLiAgQXJlIHlvdSB3aWxsaW5nIHRvIGF1dGhvciBvciBwYXJ0aWNpcGF0ZSBpbiB0aGUgZGV2 ZWxvcG1lbnQgb2YgdGhlIGRyYWZ0cyBvZiB0aGlzIFdHPw0KICAzLiAgQXJlIHlvdSB3aWxsaW5n IHRvIGhlbHAgcmV2aWV3IHRoZSBkcmFmdHMgb2YgdGhpcyBXRz8NCiAgNC4gIEFyZSB5b3UgaW50 ZXJlc3RlZCBpbiBpbXBsZW1lbnRpbmcgZHJhZnRzIG9mIHRoaXMgV0c/DQoNClBsZWFzZSBwcm92 aWRlIGNvbW1lbnRzIGluY2x1ZGluZyBwcm9wb3NlZCB0ZXh0IGNoYW5nZXMgQVNBUCB0byBwcm92 aWRlIGFtcGxlIHRpbWUgZm9yIGRpc2N1c3Npb24uICBUaGlzIGNhbGwgZm9yIGNvbnNlbnN1cyBl bmRzIG9uIEZlYnJ1YXJ5IDEsIDIwMTkuDQoNClRoYW5rcywgUm9tYW4gYW5kIE5hbmN5DQoNClsx XSBNaW51dGVzIHNlbnQ6IGh0dHBzOi8vbWFpbGFyY2hpdmUuaWV0Zi5vcmcvYXJjaC9tc2cvcmF0 cy94RXdjenFub05neUJZbFJUS2czNVlvNGNjV1kNClsyXSBVcGRhdGVkIGNoYXJ0ZXIgc2VudDog aHR0cHM6Ly9tYWlsYXJjaGl2ZS5pZXRmLm9yZy9hcmNoL21zZy9yYXRzL01RTFpJa0lLMjNabFNC TUI1d0pqbzcxYk9yMA0KDQo= --_000_24D5C5AD98CA4242B01C17B5ABB82B23ciscocom_ Content-Type: text/html; charset="utf-8" Content-ID: <86E267BBDF2D83418283B6976BA1B9F9@emea.cisco.com> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2 IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToy IDE1IDUgMiAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3Jt YWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGluOw0KCW1hcmdpbi1i b3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJp IixzYW5zLXNlcmlmO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXBy aW9yaXR5Ojk5Ow0KCWNvbG9yOiMwNTYzQzE7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9 DQphOnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9y aXR5Ojk5Ow0KCWNvbG9yOiM5NTRGNzI7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpw Lm1zb25vcm1hbDAsIGxpLm1zb25vcm1hbDAsIGRpdi5tc29ub3JtYWwwDQoJe21zby1zdHlsZS1u YW1lOm1zb25vcm1hbDsNCgltc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzsNCgltYXJnaW4tcmlnaHQ6 MGluOw0KCW1zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvOw0KCW1hcmdpbi1sZWZ0OjBpbjsNCglm b250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmO30NCnNw YW4uRW1haWxTdHlsZTE4DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsOw0KCWZvbnQtZmFtaWx5 OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0Kc3Bhbi5FbWFpbFN0 eWxlMTkNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWwtcmVwbHk7DQoJZm9udC1mYW1pbHk6IkNh bGlicmkiLHNhbnMtc2VyaWY7DQoJY29sb3I6d2luZG93dGV4dDt9DQouTXNvQ2hwRGVmYXVsdA0K CXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25seTsNCglmb250LXNpemU6MTAuMHB0O30NCkBwYWdl IFdvcmRTZWN0aW9uMQ0KCXtzaXplOjguNWluIDExLjBpbjsNCgltYXJnaW46MS4waW4gMS4waW4g MS4waW4gMS4waW47fQ0KZGl2LldvcmRTZWN0aW9uMQ0KCXtwYWdlOldvcmRTZWN0aW9uMTt9DQov KiBMaXN0IERlZmluaXRpb25zICovDQpAbGlzdCBsMA0KCXttc28tbGlzdC1pZDoxMjI3NzU5NTMz Ow0KCW1zby1saXN0LXRlbXBsYXRlLWlkczotMTA0MDI3ODA4Mjt9DQpAbGlzdCBsMQ0KCXttc28t bGlzdC1pZDoxNDMyODk4MjQwOw0KCW1zby1saXN0LXRlbXBsYXRlLWlkczotMjA5MDE4NTg4O30N CkBsaXN0IGwxOmxldmVsMQ0KCXttc28tbGV2ZWwtdGFiLXN0b3A6LjVpbjsNCgltc28tbGV2ZWwt bnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGwxOmxl dmVsMg0KCXttc28tbGV2ZWwtdGFiLXN0b3A6MS4waW47DQoJbXNvLWxldmVsLW51bWJlci1wb3Np dGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsMTpsZXZlbDMNCgl7bXNv LWxldmVsLXRhYi1zdG9wOjEuNWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsN Cgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDE6bGV2ZWw0DQoJe21zby1sZXZlbC10YWIt c3RvcDoyLjBpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRl bnQ6LS4yNWluO30NCkBsaXN0IGwxOmxldmVsNQ0KCXttc28tbGV2ZWwtdGFiLXN0b3A6Mi41aW47 DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9 DQpAbGlzdCBsMTpsZXZlbDYNCgl7bXNvLWxldmVsLXRhYi1zdG9wOjMuMGluOw0KCW1zby1sZXZl bC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDE6 bGV2ZWw3DQoJe21zby1sZXZlbC10YWItc3RvcDozLjVpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBv c2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGwxOmxldmVsOA0KCXtt c28tbGV2ZWwtdGFiLXN0b3A6NC4waW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0 Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsMTpsZXZlbDkNCgl7bXNvLWxldmVsLXRh Yi1zdG9wOjQuNWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWlu ZGVudDotLjI1aW47fQ0Kb2wNCgl7bWFyZ2luLWJvdHRvbTowaW47fQ0KdWwNCgl7bWFyZ2luLWJv dHRvbTowaW47fQ0KLS0+PC9zdHlsZT4NCjwvaGVhZD4NCjxib2R5IGxhbmc9IkVOLVVTIiBsaW5r PSIjMDU2M0MxIiB2bGluaz0iIzk1NEY3MiI+DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEiPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Y29sb3I6 YmxhY2siPlRoYW5rIHlvdSBhbGwgZm9yIHJlc3BvbmRpbmcgdG8gdGhlIGNoYXJ0ZXIgY29uc2Vu c3VzIGNhbGwuJm5ic3A7IFdlIGhhdmUgdmVyeSBnb29kIHN1cHBvcnQgKH4xNyByZXNwb25zZXMp IGZvciB3b3JraW5nIG9uIHRoZSBSZW1vdGUgQXR0ZXN0YXRpb24gcHJvY2VkdXJlcyB3aXRoIG5v IG9uZSBvYmplY3RpbmcgdG8gdGhlIG92ZXJhbGwgY2hhcnRlci4NCiBUaGVyZSB3ZXJlIGEgY291 cGxlIG9mIG5vbi1ibG9ja2luZyBjb21tZW50cyB3aXRoIHJlc3BlY3QgdG8gdGhlIHNjb3BlLCBv bmUgdG8gbGltaXQgYW5kIGFub3RoZXIgdG8gZXhwYW5kIHNvIHRoZSBjaGFydGVyIHdhcyBvbmx5 IHVwZGF0ZWQgdG8gZW5zdXJlIGZsZXhpYmlsaXR5IG9uIHRoZSBldmlkZW5jZSBmYWN0b3JzIHVz ZWQgd2l0aCBubyBjaGFuZ2UgdG8gY3VycmVudCBzY29wZS48L3NwYW4+PHNwYW4gc3R5bGU9ImNv bG9yOmJsYWNrIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtjb2xvcjpibGFjayI+Jm5ic3A7PC9zcGFuPjxz cGFuIHN0eWxlPSJjb2xvcjpibGFjayI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Y29sb3I6YmxhY2siPkJh cnJpbmcgaXNzdWVzIGZyb20gdGhlIElFU0csIHdlIGFyZSB0YXJnZXRpbmcgdG8gY2hhcnRlciBi ZWZvcmUgSUVURiAxMDTigKYuPC9zcGFuPjxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+PG86cD48 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMS4wcHQ7Y29sb3I6YmxhY2siPiZuYnNwOzwvc3Bhbj48c3BhbiBzdHlsZT0iY29sb3I6 YmxhY2siPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2NvbG9yOmJsYWNrIj5XYXJtIHJlZ2FyZHMsIE5hbmN5 IGFuZCBSb21hbjwvc3Bhbj48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPjxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEu MHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9w Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjQjVDNERGIDEuMHB0 O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNw YW4gc3R5bGU9ImNvbG9yOmJsYWNrIj5Gcm9tOiA8L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSJjb2xv cjpibGFjayI+UkFUUyAmbHQ7cmF0cy1ib3VuY2VzQGlldGYub3JnJmd0OyBvbiBiZWhhbGYgb2Yg JnF1b3Q7TmFuY3kgKG5jYW13aW5nKSZxdW90OyAmbHQ7bmNhbXdpbmdAY2lzY28uY29tJmd0Ozxi cj4NCjxiPkRhdGU6IDwvYj5UaHVyc2RheSwgSmFudWFyeSAxNywgMjAxOSBhdCAxOTozODxicj4N CjxiPlRvOiA8L2I+JnF1b3Q7cmF0c0BpZXRmLm9yZyZxdW90OyAmbHQ7cmF0c0BpZXRmLm9yZyZn dDs8YnI+DQo8Yj5TdWJqZWN0OiA8L2I+W1JhdHNdIENhbGwgZm9yIGNoYXJ0ZXIgY29uc2Vuc3Vz PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFu PjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGEgbmFtZT0iX01haWxPcmlnaW5h bEJvZHkiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2NvbG9yOmJsYWNrIj5IZWxsbyBS QVRTIHBhcnRpY2lwYW50czo8L3NwYW4+PG86cD48L286cD48L2E+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9Im1zby1ib29rbWFyazpfTWFpbE9yaWdpbmFsQm9keSI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Y29sb3I6YmxhY2siPiZuYnNwOzwvc3Bhbj48bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0ibXNv LWJvb2ttYXJrOl9NYWlsT3JpZ2luYWxCb2R5Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dDtjb2xvcjpibGFjayI+QXQgdGhlIHZpcnR1YWwgbWVldGluZyBvbiAxLzE2LzIwMTksIHRoZXJl IHdhcyBjb25zZW5zdXMgWzFdIHRoYXQgd2Ugc2hvdWxkIHB1cnN1ZSBjaGFydGVyaW5nIGEgV29y a2luZyBHcm91cCB3aXRoIHRoZSB0ZXh0IHJlZmxlY3RlZCBpbiBbMl0uPC9zcGFuPjxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJtc28tYm9v a21hcms6X01haWxPcmlnaW5hbEJvZHkiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2Nv bG9yOmJsYWNrIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9Im1zby1ib29rbWFyazpfTWFpbE9yaWdpbmFsQm9keSI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Y29sb3I6YmxhY2siPldlIG5lZWQgdG8gY29u dGludWUgdGhpcyBkaXNjdXNzaW9uIG9uIHRoZSBlbWFpbCBsaXN0IGFzIHdlbGwgYXMgZ2F1Z2Ug Y29udGludWVkIGludGVyZXN0IGluIHBhcnRpY2lwYXRpbmcgaW4gdGhpcyB3b3JrLiZuYnNwOyBQ bGVhc2UgZG8gc28gYnkgcmVzcG9uZGluZw0KIHRvIHRoZSBmb2xsb3dpbmcgcXVlc3Rpb25zOjwv c3Bhbj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8b2wgc3R5bGU9Im1hcmdpbi10b3A6MGluIiBz dGFydD0iMSIgdHlwZT0iMSI+DQo8bGkgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9ImNvbG9yOmJs YWNrO21zby1saXN0OmwxIGxldmVsMSBsZm8zIj48c3BhbiBzdHlsZT0ibXNvLWJvb2ttYXJrOl9N YWlsT3JpZ2luYWxCb2R5Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+RG8geW91IHN1 cHBvcnQgdGhpcyBjaGFydGVyIHRleHQgKGZ1bGwgdGV4dCBhbHNvIHByb3ZpZGVkIGF0IHRoZSBl bmQgb2YgZW1haWwgb3IgYXQgWzFdKT8mbmJzcDsgT3IgZG8geW91IGhhdmUgb2JqZWN0aW9ucw0K IG9yIGJsb2NraW5nIGNvbmNlcm5zPzwvc3Bhbj48L3NwYW4+PHNwYW4gc3R5bGU9Im1zby1ib29r bWFyazpfTWFpbE9yaWdpbmFsQm9keSI+PG86cD48L286cD48L3NwYW4+PC9saT48bGkgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9ImNvbG9yOmJsYWNrO21zby1saXN0OmwxIGxldmVsMSBsZm8zIj48 c3BhbiBzdHlsZT0ibXNvLWJvb2ttYXJrOl9NYWlsT3JpZ2luYWxCb2R5Ij48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdCI+QXJlIHlvdSB3aWxsaW5nIHRvIGF1dGhvciBvciBwYXJ0aWNpcGF0 ZSBpbiB0aGUgZGV2ZWxvcG1lbnQgb2YgdGhlIGRyYWZ0cyBvZiB0aGlzIFdHPzwvc3Bhbj48L3Nw YW4+PHNwYW4gc3R5bGU9Im1zby1ib29rbWFyazpfTWFpbE9yaWdpbmFsQm9keSI+PG86cD48L286 cD48L3NwYW4+PC9saT48bGkgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9ImNvbG9yOmJsYWNrO21z by1saXN0OmwxIGxldmVsMSBsZm8zIj48c3BhbiBzdHlsZT0ibXNvLWJvb2ttYXJrOl9NYWlsT3Jp Z2luYWxCb2R5Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+QXJlIHlvdSB3aWxsaW5n IHRvIGhlbHAgcmV2aWV3IHRoZSBkcmFmdHMgb2YgdGhpcyBXRz88L3NwYW4+PC9zcGFuPjxzcGFu IHN0eWxlPSJtc28tYm9va21hcms6X01haWxPcmlnaW5hbEJvZHkiPjxvOnA+PC9vOnA+PC9zcGFu PjwvbGk+PGxpIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJjb2xvcjpibGFjazttc28tbGlzdDps MSBsZXZlbDEgbGZvMyI+PHNwYW4gc3R5bGU9Im1zby1ib29rbWFyazpfTWFpbE9yaWdpbmFsQm9k eSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPkFyZSB5b3UgaW50ZXJlc3RlZCBpbiBp bXBsZW1lbnRpbmcgZHJhZnRzIG9mIHRoaXMgV0c/PC9zcGFuPjwvc3Bhbj48c3BhbiBzdHlsZT0i bXNvLWJvb2ttYXJrOl9NYWlsT3JpZ2luYWxCb2R5Ij48bzpwPjwvbzpwPjwvc3Bhbj48L2xpPjwv b2w+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0ibXNvLWJvb2ttYXJrOl9NYWls T3JpZ2luYWxCb2R5Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtjb2xvcjpibGFjayI+ Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJtc28tYm9va21hcms6X01haWxPcmlnaW5hbEJvZHkiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTEuMHB0O2NvbG9yOmJsYWNrIj5QbGVhc2UgcHJvdmlkZSBjb21tZW50cyBp bmNsdWRpbmcgcHJvcG9zZWQgdGV4dCBjaGFuZ2VzIEFTQVAgdG8gcHJvdmlkZSBhbXBsZSB0aW1l IGZvciBkaXNjdXNzaW9uLiZuYnNwOyBUaGlzIGNhbGwgZm9yIGNvbnNlbnN1cyBlbmRzIG9uIEZl YnJ1YXJ5IDEsIDIwMTkuJm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJtc28tYm9va21hcms6X01haWxPcmlnaW5hbEJv ZHkiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2NvbG9yOmJsYWNrIj4mbmJzcDs8L3Nw YW4+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9Im1zby1ib29rbWFyazpfTWFpbE9yaWdpbmFsQm9keSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQ7Y29sb3I6YmxhY2siPlRoYW5rcywgUm9tYW4gYW5kIE5hbmN5PC9zcGFuPjxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJtc28t Ym9va21hcms6X01haWxPcmlnaW5hbEJvZHkiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 Ij4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9Im1zby1ib29rbWFyazpfTWFpbE9yaWdpbmFsQm9keSI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQiPlsxXSBNaW51dGVzIHNlbnQ6DQo8L3NwYW4+PC9zcGFuPjxh IGhyZWY9Imh0dHBzOi8vbWFpbGFyY2hpdmUuaWV0Zi5vcmcvYXJjaC9tc2cvcmF0cy94RXdjenFu b05neUJZbFJUS2czNVlvNGNjV1kiPjxzcGFuIHN0eWxlPSJtc28tYm9va21hcms6X01haWxPcmln aW5hbEJvZHkiPjxzcGFuIHN0eWxlPSJjb2xvcjojOTU0RjcyIj5odHRwczovL21haWxhcmNoaXZl LmlldGYub3JnL2FyY2gvbXNnL3JhdHMveEV3Y3pxbm9OZ3lCWWxSVEtnMzVZbzRjY1dZPC9zcGFu Pjwvc3Bhbj48c3BhbiBzdHlsZT0ibXNvLWJvb2ttYXJrOl9NYWlsT3JpZ2luYWxCb2R5Ij48L3Nw YW4+PC9hPjxzcGFuIHN0eWxlPSJtc28tYm9va21hcms6X01haWxPcmlnaW5hbEJvZHkiPjxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJtc28t Ym9va21hcms6X01haWxPcmlnaW5hbEJvZHkiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 Ij5bMl0gVXBkYXRlZCBjaGFydGVyIHNlbnQ6DQo8L3NwYW4+PC9zcGFuPjxhIGhyZWY9Imh0dHBz Oi8vbWFpbGFyY2hpdmUuaWV0Zi5vcmcvYXJjaC9tc2cvcmF0cy9NUUxaSWtJSzIzWmxTQk1CNXdK am83MWJPcjAiPjxzcGFuIHN0eWxlPSJtc28tYm9va21hcms6X01haWxPcmlnaW5hbEJvZHkiPjxz cGFuIHN0eWxlPSJjb2xvcjojOTU0RjcyIj5odHRwczovL21haWxhcmNoaXZlLmlldGYub3JnL2Fy Y2gvbXNnL3JhdHMvTVFMWklrSUsyM1psU0JNQjV3SmpvNzFiT3IwPC9zcGFuPjwvc3Bhbj48c3Bh biBzdHlsZT0ibXNvLWJvb2ttYXJrOl9NYWlsT3JpZ2luYWxCb2R5Ij48L3NwYW4+PC9hPjxzcGFu IHN0eWxlPSJtc28tYm9va21hcms6X01haWxPcmlnaW5hbEJvZHkiPjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJjYXJldC1jb2xvcjogcmdiKDAsIDAs IDApO2ZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7b3JwaGFuczogYXV0bzt0ZXh0LWFsaWduOnN0 YXJ0O3dpZG93czogYXV0bzstd2Via2l0LXRleHQtc2l6ZS1hZGp1c3Q6IGF1dG87LXdlYmtpdC10 ZXh0LXN0cm9rZS13aWR0aDogMHB4O3dvcmQtc3BhY2luZzowcHgiPg0KPHNwYW4gc3R5bGU9Im1z by1ib29rbWFyazpfTWFpbE9yaWdpbmFsQm9keSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvYm9keT4N CjwvaHRtbD4NCg== --_000_24D5C5AD98CA4242B01C17B5ABB82B23ciscocom_-- From nobody Tue Feb 5 20:13:38 2019 Return-Path: X-Original-To: rats@ietf.org Delivered-To: rats@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id CD91F123FFD; Tue, 5 Feb 2019 20:13:30 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Ben Campbell To: "The IESG" Cc: rats-chairs@ietf.org, rats@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.91.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <154942641080.32147.10104325260776747141.idtracker@ietfa.amsl.com> Date: Tue, 05 Feb 2019 20:13:30 -0800 Archived-At: Subject: [Rats] Ben Campbell's Yes on charter-ietf-rats-00-00: (with COMMENT) X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Feb 2019 04:13:32 -0000 Ben Campbell has entered the following ballot position for charter-ietf-rats-00-00: Yes When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/charter-ietf-rats/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- I am balloting "yes", but have a few minor comments. These need not block external review, but might should be considered prior to approval: - "The WG will also evaluate prior work such as NEA and proprietary attestation technologies." Since I assume the group plans to create standards track specifications, there is a good chance any given "proprietary" technology will have restrictions that prevent its use. It might be worth adding a few words about any such proprietary standard being sufficiently open for IETF purposes. (I'm specifically not thinking about patents so much as license restrictions on the specifications themselves.) (nit): I find the repeated use of "assertions/claims" a bit jarring. Are they assertions? Claims? Both? Please consider whether item 1 under "Program of work" needs to be published as RFCs or can be published via some alternative channel (e.g. Working Group wiki). From nobody Tue Feb 5 23:03:07 2019 Return-Path: X-Original-To: rats@ietf.org Delivered-To: rats@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id ACC1B128D09; Tue, 5 Feb 2019 23:02:53 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Adam Roach To: "The IESG" Cc: rats-chairs@ietf.org, rats@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.91.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <154943657361.32220.17241358888896617483.idtracker@ietfa.amsl.com> Date: Tue, 05 Feb 2019 23:02:53 -0800 Archived-At: Subject: [Rats] Adam Roach's No Objection on charter-ietf-rats-00-00: (with COMMENT) X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Feb 2019 07:02:54 -0000 Adam Roach has entered the following ballot position for charter-ietf-rats-00-00: No Objection When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/charter-ietf-rats/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- The charter contents look generally good to me, although I have some copy-editing suggestions to make. I also agree with Ben that the charter needs to be clear about whether the referenced support documents are intended for publication as RFCs. One substantive comment first: > The architecture may include a system security model > for the signing key material and involve at least the system component, system > component provider, and the relying authority. It's not clear to me whether this is intended to include/leverage an existing PKI, establish a new PKI, or use some other scheme to establish trusted roots. It seems that some of these options could end up being rather far ranging. I don't feel strongly about what the correct answer is, but I think we want the charter to make it clear whether such potentially broad tasks are in scope for the working group, or if the models to be considered should be more constrained. --------------------------------------------------------------------------- The introduction of the charter is a bit jarring in the way that it jumps in without first giving an indication of the technology field being dealt with. Starting with an introductory sentence -- or even a clause -- indicating that the working group is dealing with component attribute attestation would help. --------------------------------------------------------------------------- > To improve the confidence in a system component's trustworthiness a relying > party may require evidence about: Nit: "...trustworthiness, a relying..." --------------------------------------------------------------------------- > While domain-specific attestation mechanisms such as Trusted Computing Group > (TCG) Trusted Platform Module (TPM)/Trusted Software Stack (TSS), Fast > Identity Online (FIDO) Alliance attestation and Android Keystore attestation Consider an Oxford comma before "and Android". --------------------------------------------------------------------------- > While a relying party may use > reference values to assess the assertions/claims the procedures for this > activity are out of scope for this WG. Nit: "...claims, the procedures..." --------------------------------------------------------------------------- > The working group will cooperate and coordinate with other IETF WG such as > TEEP, SUIT and SACM as appropriate. Consider an Oxford comma before "and SACM". --------------------------------------------------------------------------- > 3. Standardize data models that implements and secures the defined information Nit: "...models that implement and secure..." or "...a data model that implements and secures..." From nobody Wed Feb 6 03:25:38 2019 Return-Path: X-Original-To: rats@ietf.org Delivered-To: rats@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id F13BF124D68; Wed, 6 Feb 2019 03:25:29 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Alexey Melnikov To: "The IESG" Cc: rats-chairs@ietf.org, rats@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.91.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <154945232995.31197.5295482409361060517.idtracker@ietfa.amsl.com> Date: Wed, 06 Feb 2019 03:25:29 -0800 Archived-At: Subject: [Rats] Alexey Melnikov's Yes on charter-ietf-rats-00-00: (with COMMENT) X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Feb 2019 11:25:30 -0000 Alexey Melnikov has entered the following ballot position for charter-ietf-rats-00-00: Yes When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/charter-ietf-rats/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- I don't have a strong feeling on whether or not the use cases document needs to be published, but I agree that the question should be considered. >4. Standardize interoperable protocols to securely convey assertions/claims. Is plural intended here? From nobody Wed Feb 6 03:52:58 2019 Return-Path: X-Original-To: rats@ietf.org Delivered-To: rats@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 2C1D2124D68; Wed, 6 Feb 2019 03:52:50 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit From: =?utf-8?q?Mirja_K=C3=BChlewind?= To: "The IESG" Cc: rats-chairs@ietf.org, rats@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.91.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <154945397013.31111.914235030032950485.idtracker@ietfa.amsl.com> Date: Wed, 06 Feb 2019 03:52:50 -0800 Archived-At: Subject: [Rats] =?utf-8?q?Mirja_K=C3=BChlewind=27s_No_Objection_on_charte?= =?utf-8?q?r-ietf-rats-00-00=3A_=28with_COMMENT=29?= X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Feb 2019 11:52:51 -0000 Mirja Kühlewind has entered the following ballot position for charter-ietf-rats-00-00: No Objection When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/charter-ietf-rats/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- Regarding use cases, I would actually rather prefer that the core use cases are already defined at charter time (in the charter). I'm not sure it that is possible for this group but it can be good start with one or two use cases that are mentioned in the charter and then update the charter if there is a real need to include more use cases in future. From nobody Thu Feb 7 00:35:54 2019 Return-Path: X-Original-To: rats@ietf.org Delivered-To: rats@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 6B960130EEB; Thu, 7 Feb 2019 00:35:45 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Martin Vigoureux To: "The IESG" Cc: rats-chairs@ietf.org, rats@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.91.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <154952854536.23379.9616689187634176854.idtracker@ietfa.amsl.com> Date: Thu, 07 Feb 2019 00:35:45 -0800 Archived-At: Subject: [Rats] Martin Vigoureux's No Objection on charter-ietf-rats-00-00: (with COMMENT) X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Feb 2019 08:35:46 -0000 Martin Vigoureux has entered the following ballot position for charter-ietf-rats-00-00: No Objection When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/charter-ietf-rats/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- Hello, I mostly have questions for clarifications. Thank you. Relying parties require evidence about the trustworthiness of remote system components [RFC4949] they interact with. Remote attestation procedures (RATS) enable relying parties to establish a level of confidence in the trustworthiness of remote system components by creating and processing attestation evidence. I'm not a native English reader, but this sentence gives me the impression that the relying parties will create the attestation evidence. Is that the case? My limited understanding of the topic makes me think that the remote system will create the attestation and the relying parties will process it. While a relying party may use reference values to assess the assertions/claims the procedures for this activity are out of scope for this WG. I can understand why, but I would also see some value in having a document which would cover this. About the "proprietary attestation technologies", are these publicly available/accessible? (similar to Ben's question) The architecture may include a system security model for the signing key material and involve at least the system component, system component provider, and the relying authority. Does that imply new work or is it just about reusing what may already exist? But I see Adam had a similar question. From nobody Thu Feb 7 06:36:56 2019 Return-Path: X-Original-To: rats@ietf.org Delivered-To: rats@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id C4BC312D4F2; Thu, 7 Feb 2019 06:36:54 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Alissa Cooper To: "The IESG" Cc: rats-chairs@ietf.org, rats@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.91.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <154955021480.31051.5673437272063081848.idtracker@ietfa.amsl.com> Date: Thu, 07 Feb 2019 06:36:54 -0800 Archived-At: Subject: [Rats] Alissa Cooper's Block on charter-ietf-rats-00-00: (with BLOCK and COMMENT) X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Feb 2019 14:36:55 -0000 Alissa Cooper has entered the following ballot position for charter-ietf-rats-00-00: Block When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/charter-ietf-rats/ ---------------------------------------------------------------------- BLOCK: ---------------------------------------------------------------------- Given that the data to be exchanged for remote attestation purposes could be security-sensitive or could be used to fingerprint a device or identify a user, I think the charter needs to explicitly state what the WG's goals are for taking the protection of this data into account. ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- Given that TCG and FIDO Alliance work are both mentioned, I wonder if it is worth explicitly saying that the WG will coordinate with them as necessary. I would suggest being explicit about whether the use cases are expected to be documented in a stand-alone document, and if so whether the WG intends for that document to be published as an RFC. "While a relying party may use reference values to assess the assertions/claims the procedures for this activity are out of scope for this WG." --> It's not immediately obvious to me what "reference values" means in this context. Might be my ignorance but figured I would note it. From nobody Thu Feb 7 06:43:08 2019 Return-Path: X-Original-To: rats@ietf.org Delivered-To: rats@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 042C91200ED; Thu, 7 Feb 2019 06:43:07 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Alissa Cooper To: "The IESG" Cc: rats-chairs@ietf.org, rats@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.91.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <154955058697.31121.7223894559382374179.idtracker@ietfa.amsl.com> Date: Thu, 07 Feb 2019 06:43:06 -0800 Archived-At: Subject: [Rats] Alissa Cooper's Block on charter-ietf-rats-00-00: (with BLOCK and COMMENT) X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Feb 2019 14:43:07 -0000 Alissa Cooper has entered the following ballot position for charter-ietf-rats-00-00: Block When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/charter-ietf-rats/ ---------------------------------------------------------------------- BLOCK: ---------------------------------------------------------------------- Given that the data to be exchanged for remote attestation purposes could be security-sensitive or could be used to fingerprint a device or identify a user, I think the charter needs to explicitly state what the WG's goals are for taking the protection of this data into account. ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- Given that TCG and FIDO Alliance work are both mentioned, I wonder if it is worth explicitly saying that the WG will coordinate with them as necessary. I would suggest being explicit about whether the use cases are expected to be documented in a stand-alone document, and if so whether the WG intends for that document to be published as an RFC. "While a relying party may use reference values to assess the assertions/claims the procedures for this activity are out of scope for this WG." --> It's not immediately obvious to me what "reference values" means in this context. Might be my ignorance but figured I would note it. From nobody Thu Feb 7 08:14:04 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D80671228B7; Thu, 7 Feb 2019 08:13:56 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.101 X-Spam-Level: X-Spam-Status: No, score=-0.101 tagged_above=-999 required=5 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cert.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fCBlxw05QVM0; Thu, 7 Feb 2019 08:13:55 -0800 (PST) Received: from veto.sei.cmu.edu (veto.sei.cmu.edu [147.72.252.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5028F128CF3; Thu, 7 Feb 2019 08:13:54 -0800 (PST) Received: from korb.sei.cmu.edu (korb.sei.cmu.edu [10.64.21.30]) by veto.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id x17GDn4M025063; Thu, 7 Feb 2019 11:13:49 -0500 DKIM-Filter: OpenDKIM Filter v2.11.0 veto.sei.cmu.edu x17GDn4M025063 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cert.org; s=yc2bmwvrj62m; t=1549556029; bh=u66pXWnXwF3TJewK64eZ3RsxpnvQBXbi19acZoCak+U=; h=From:To:CC:Subject:Date:References:In-Reply-To:From; b=Cj2ALOgqU1NPDoiLLv39qt1PLQq4Za2ql0WyOILAvnrfsCpEXpv9vOtK+cckRB1Ng +emoty2dB50mU2vrTqoH0+VEeFzGArriwtMqn01i7zWlrY6QPHzyKJq8MABII3nLd0 aXjRWIAnMRr30R+edWnNMg4HqbF3fqGKZkmvkLmA= Received: from CASCADE.ad.sei.cmu.edu (cascade.ad.sei.cmu.edu [10.64.28.248]) by korb.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id x17GDkQJ010010; Thu, 7 Feb 2019 11:13:46 -0500 Received: from MARATHON.ad.sei.cmu.edu ([10.64.28.250]) by CASCADE.ad.sei.cmu.edu ([10.64.28.248]) with mapi id 14.03.0435.000; Thu, 7 Feb 2019 11:13:46 -0500 From: Roman Danyliw To: Alissa Cooper , The IESG CC: "rats-chairs@ietf.org" , "rats@ietf.org" Thread-Topic: Alissa Cooper's Block on charter-ietf-rats-00-00: (with BLOCK and COMMENT) Thread-Index: AQHUvvN08AD4I5PaxUisgnlf1Tr+o6XUfEzg Date: Thu, 7 Feb 2019 16:13:45 +0000 Message-ID: <359EC4B99E040048A7131E0F4E113AFC01857B7DC9@marathon> References: <154955058697.31121.7223894559382374179.idtracker@ietfa.amsl.com> In-Reply-To: <154955058697.31121.7223894559382374179.idtracker@ietfa.amsl.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.64.22.6] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Rats] Alissa Cooper's Block on charter-ietf-rats-00-00: (with BLOCK and COMMENT) X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Feb 2019 16:13:57 -0000 VGhhbmtzIGZvciB0aGUgZmVlZGJhY2suICBOZXcgcHJvcG9zZWQgdGV4dCBzdWdnZXN0ZWQgaW5s aW5lLg0KDQo+IC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQo+IEZyb206IEFsaXNzYSBDb29w ZXIgW21haWx0bzphbGlzc2FAY29vcGVydy5pbl0NCj4gU2VudDogVGh1cnNkYXksIEZlYnJ1YXJ5 IDA3LCAyMDE5IDk6NDMgQU0NCj4gVG86IFRoZSBJRVNHIDxpZXNnQGlldGYub3JnPg0KPiBDYzog cmF0cy1jaGFpcnNAaWV0Zi5vcmc7IHJhdHNAaWV0Zi5vcmcNCj4gU3ViamVjdDogQWxpc3NhIENv b3BlcidzIEJsb2NrIG9uIGNoYXJ0ZXItaWV0Zi1yYXRzLTAwLTAwOiAod2l0aCBCTE9DSyBhbmQN Cj4gQ09NTUVOVCkNCj4gDQo+IEFsaXNzYSBDb29wZXIgaGFzIGVudGVyZWQgdGhlIGZvbGxvd2lu ZyBiYWxsb3QgcG9zaXRpb24gZm9yDQo+IGNoYXJ0ZXItaWV0Zi1yYXRzLTAwLTAwOiBCbG9jaw0K PiANCj4gV2hlbiByZXNwb25kaW5nLCBwbGVhc2Uga2VlcCB0aGUgc3ViamVjdCBsaW5lIGludGFj dCBhbmQgcmVwbHkgdG8gYWxsIGVtYWlsDQo+IGFkZHJlc3NlcyBpbmNsdWRlZCBpbiB0aGUgVG8g YW5kIENDIGxpbmVzLiAoRmVlbCBmcmVlIHRvIGN1dCB0aGlzIGludHJvZHVjdG9yeQ0KPiBwYXJh Z3JhcGgsIGhvd2V2ZXIuKQ0KPiANCj4gDQo+IA0KPiBUaGUgZG9jdW1lbnQsIGFsb25nIHdpdGgg b3RoZXIgYmFsbG90IHBvc2l0aW9ucywgY2FuIGJlIGZvdW5kIGhlcmU6DQo+IGh0dHBzOi8vZGF0 YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2NoYXJ0ZXItaWV0Zi1yYXRzLw0KPiANCj4gDQo+IA0KPiAt LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tDQo+IEJMT0NLOg0KPiAtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQo+IA0KPiBHaXZlbiB0aGF0 IHRoZSBkYXRhIHRvIGJlIGV4Y2hhbmdlZCBmb3IgcmVtb3RlIGF0dGVzdGF0aW9uIHB1cnBvc2Vz IGNvdWxkDQo+IGJlIHNlY3VyaXR5LXNlbnNpdGl2ZSBvciBjb3VsZCBiZSB1c2VkIHRvIGZpbmdl cnByaW50IGEgZGV2aWNlIG9yIGlkZW50aWZ5IGENCj4gdXNlciwgSSB0aGluayB0aGUgY2hhcnRl ciBuZWVkcyB0byBleHBsaWNpdGx5IHN0YXRlIHdoYXQgdGhlIFdHJ3MgZ29hbHMgYXJlIGZvcg0K PiB0YWtpbmcgdGhlIHByb3RlY3Rpb24gb2YgdGhpcyBkYXRhIGludG8gYWNjb3VudC4NCg0KTWFr ZXMgc2Vuc2UuDQoNCk9MRDoNCg0KVGhpcyBXRyB3aWxsIHN0YW5kYXJkaXplIGZvcm1hdHMgZm9y IGRlc2NyaWJpbmcgYXNzZXJ0aW9ucy9jbGFpbXMgYWJvdXQgc3lzdGVtIGNvbXBvbmVudHMgYW5k IGFzc29jaWF0ZWQgZXZpZGVuY2U7IGFuZCBwcm9jZWR1cmVzIGFuZCBwcm90b2NvbHMgdG8gY29u dmV5IHRoZXNlIGFzc2VydGlvbnMvY2xhaW1zIHRvIHRoZSByZWx5aW5nIHBhcnRpZXMuICANCg0K TkVXOg0KDQpUaGlzIFdHIHdpbGwgc3RhbmRhcmRpemUgZm9ybWF0cyBmb3IgZGVzY3JpYmluZyBh c3NlcnRpb25zL2NsYWltcyBhYm91dCBzeXN0ZW0gY29tcG9uZW50cyBhbmQgYXNzb2NpYXRlZCBl dmlkZW5jZTsgYW5kIHByb2NlZHVyZXMgYW5kIHByb3RvY29scyB0byBjb252ZXkgdGhlc2UgYXNz ZXJ0aW9ucy9jbGFpbXMgdG8gdGhlIHJlbHlpbmcgcGFydGllcy4gIEdpdmVuIHRoZSBzZWN1cml0 eSBhbmQgcHJpdmFjeSBzZW5zaXRpdmUgbmF0dXJlIG9mIHRoZXNlIGFzc2VydGlvbnMvY2xhaW1z LCB0aGUgV0cgd2lsbCBzcGVjaWZ5IGFwcHJvYWNoZXMgdG8gcHJvdGVjdCB0aGlzIGV4Y2hhbmdl ZCBkYXRhLiAgDQoNCg0KPiAtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQo+IENPTU1FTlQ6DQo+IC0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0NCj4gDQo+IEdpdmVuIHRoYXQgVENHIGFuZCBGSURPIEFsbGlhbmNlIHdvcmsgYXJlIGJvdGgg bWVudGlvbmVkLCBJIHdvbmRlciBpZiBpdCBpcw0KPiB3b3J0aCBleHBsaWNpdGx5IHNheWluZyB0 aGF0IHRoZSBXRyB3aWxsIGNvb3JkaW5hdGUgd2l0aCB0aGVtIGFzIG5lY2Vzc2FyeS4NCg0KTWFr ZXMgc2Vuc2UuDQoNCk9MRDoNClRoZSB3b3JraW5nIGdyb3VwIHdpbGwgY29vcGVyYXRlIGFuZCBj b29yZGluYXRlIHdpdGggb3RoZXIgSUVURiBXRyBzdWNoIGFzIFRFRVAsIFNVSVQgYW5kIFNBQ00g YXMgYXBwcm9wcmlhdGUuICBUaGUgV0cgd2lsbCBhbHNvIGV2YWx1YXRlIHByaW9yIHdvcmsgc3Vj aCBhcyBORUEgYW5kIHByb3ByaWV0YXJ5IGF0dGVzdGF0aW9uIHRlY2hub2xvZ2llcy4NCg0KTkVX Og0KVGhlIHdvcmtpbmcgZ3JvdXAgd2lsbCBjb29wZXJhdGUgYW5kIGNvb3JkaW5hdGUgd2l0aCBv dGhlciBJRVRGIFdHIHN1Y2ggYXMgVEVFUCwgU1VJVCBhbmQgU0FDTTsgYW5kIHdvcmsgaW4gdGhl IGNvbW11bml0eSBzdWNoIGFzIFRDRyBhbmQgRklETyBBbGxpYW5jZSwgYXMgYXBwcm9wcmlhdGUu ICBUaGUgV0cgd2lsbCBhbHNvIGV2YWx1YXRlIHByaW9yIHdvcmsgc3VjaCBhcyBORUEgYW5kIHBy b3ByaWV0YXJ5IGF0dGVzdGF0aW9uIHRlY2hub2xvZ2llcy4NCg0KPiBJIHdvdWxkIHN1Z2dlc3Qg YmVpbmcgZXhwbGljaXQgYWJvdXQgd2hldGhlciB0aGUgdXNlIGNhc2VzIGFyZSBleHBlY3RlZCB0 bw0KPiBiZSBkb2N1bWVudGVkIGluIGEgc3RhbmQtYWxvbmUgZG9jdW1lbnQsIGFuZCBpZiBzbyB3 aGV0aGVyIHRoZSBXRw0KPiBpbnRlbmRzIGZvciB0aGF0IGRvY3VtZW50IHRvIGJlIHB1Ymxpc2hl ZCBhcyBhbiBSRkMuDQoNClllcywgdGhlcmUgaXMgYSBkZXNpcmUgdG8gcHVibGlzaCB1c2UgY2Fz ZXMuDQoNCk9MRDoNCjEuIFNwZWNpZnkgYSB0ZXJtaW5vbG9neSwgYXJjaGl0ZWN0dXJlIGFuZCB1 c2UgY2FzZXMgdGhhdCBlbmFibGUgZXhwbGljaXQgKGENCnNldCBvZiB2ZXJpZmlhYmxlIGFzc2Vy dGlvbi9jbGFpbXMgaXMgdHJhbnNwb3J0ZWQgaW4gdGhlIGF0dGVzdGF0aW9uKSBhbmQNCmltcGxp Y2l0IChhIHNldCBvZiBhc3NlcnRpb25zL2NsYWltcyBpcyBpbXBsaWVkIGJ5IHBvc3Nlc3Npb24g b2YgYSBzZWNyZXQpDQphdHRlc3RhdGlvbiB0ZWNobmlxdWVzLiBUaGUgYXJjaGl0ZWN0dXJlIG1h eSBpbmNsdWRlIGEgc3lzdGVtIHNlY3VyaXR5IG1vZGVsDQpmb3IgdGhlIHNpZ25pbmcga2V5IG1h dGVyaWFsIGFuZCBpbnZvbHZlIGF0IGxlYXN0IHRoZSBzeXN0ZW0gY29tcG9uZW50LCBzeXN0ZW0N CmNvbXBvbmVudCBwcm92aWRlciwgYW5kIHRoZSByZWx5aW5nIGF1dGhvcml0eS4NCg0KTkVXOg0K MS4gU3BlY2lmeSB1c2UgY2FzZXMgZm9yIHJlbW90ZSBhdHRlc3RhdGlvbi4NCg0KMi4gU3BlY2lm eSB0ZXJtaW5vbG9neSBhbmQgYXJjaGl0ZWN0dXJlIHRoYXQgZW5hYmxlIGF0dGVzdGF0aW9uIHRl Y2huaXF1ZXMuICBUaGUgYXJjaGl0ZWN0dXJlIG1heSBpbmNsdWRlIGEgc3lzdGVtIHNlY3VyaXR5 IG1vZGVsIGZvciB0aGUgc2lnbmluZyBrZXkgbWF0ZXJpYWwgYW5kIGludm9sdmUgYXQgbGVhc3Qg dGhlIHN5c3RlbSBjb21wb25lbnQsIHN5c3RlbSBjb21wb25lbnQgcHJvdmlkZXIsIGFuZCB0aGUg cmVseWluZyBhdXRob3JpdHkuDQoNCjMuIFsuLi4gcmVudW1iZXIgdGhlIHJlc3QgYXMgYSArMV0N Cg0KPiAiV2hpbGUgYSByZWx5aW5nIHBhcnR5IG1heSB1c2UgcmVmZXJlbmNlIHZhbHVlcyB0byBh c3Nlc3MgdGhlDQo+IGFzc2VydGlvbnMvY2xhaW1zIHRoZSBwcm9jZWR1cmVzIGZvciB0aGlzIGFj dGl2aXR5IGFyZSBvdXQgb2Ygc2NvcGUgZm9yIHRoaXMNCj4gV0cuIiAtLT4gSXQncyBub3QgaW1t ZWRpYXRlbHkgb2J2aW91cyB0byBtZSB3aGF0ICJyZWZlcmVuY2UgdmFsdWVzIiBtZWFucw0KPiBp biB0aGlzIGNvbnRleHQuIE1pZ2h0IGJlIG15IGlnbm9yYW5jZSBidXQgZmlndXJlZCBJIHdvdWxk IG5vdGUgaXQuDQoNCkRvZXMgdGhpcyBuZXcgdGV4dCBjbGFyaWZ5IGl0Pw0KDQpPTEQ6DQpXaGls ZSBhIHJlbHlpbmcgcGFydHkgbWF5IHVzZSByZWZlcmVuY2UgdmFsdWVzIHRvIGFzc2VzcyB0aGUg YXNzZXJ0aW9ucy9jbGFpbXMgdGhlIHByb2NlZHVyZXMgZm9yIHRoaXMgYWN0aXZpdHkgYXJlIG91 dCBvZiBzY29wZSBmb3IgdGhpcyBXRy4NCg0KTkVXOg0KV2hpbGUgYSByZWx5aW5nIHBhcnR5IG1h eSB1c2UgcmVmZXJlbmNlLCBrbm93biBvciBleHBlY3RlZCB2YWx1ZXMgb3IgdGhyZXNob2xkcyB0 byBhc3Nlc3MgdGhlIGFzc2VydGlvbnMvY2xhaW1zLCB0aGUgcHJvY2VkdXJlcyBmb3IgdGhpcyBh Y3Rpdml0eSBhcmUgb3V0IG9mIHNjb3BlIGZvciB0aGlzIFdHLg0KDQpSb21hbg0KDQo= From nobody Thu Feb 7 08:32:01 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B4E20128CF3; Thu, 7 Feb 2019 08:31:53 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.1 X-Spam-Level: X-Spam-Status: No, score=-0.1 tagged_above=-999 required=5 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cert.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZwazCs_GB_7T; Thu, 7 Feb 2019 08:31:52 -0800 (PST) Received: from taper.sei.cmu.edu (taper.sei.cmu.edu [147.72.252.16]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EEC7F1289FA; Thu, 7 Feb 2019 08:31:51 -0800 (PST) Received: from delp.sei.cmu.edu (delp.sei.cmu.edu [10.64.21.31]) by taper.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id x17GVmvJ030795; Thu, 7 Feb 2019 11:31:48 -0500 DKIM-Filter: OpenDKIM Filter v2.11.0 taper.sei.cmu.edu x17GVmvJ030795 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cert.org; s=yc2bmwvrj62m; t=1549557108; bh=4tl6BORqZgxqMCqP1OaFCGS5sHJgh+cpuoMDD1MqT60=; h=From:To:CC:Subject:Date:References:In-Reply-To:From; b=GdlQ5MpufugowWwxtxTPdNzmGHgCorfIVpWiQy1bAWW3giEfW9zGUZmpRO/pnyqk2 e4Rb5lERvsf7EcqOF58laVHijDdXi7guV92+g1V0vITHjvdZXLMRTiXghN7QmLZ69p oqQz9B3rvqydQl1dBUm3Co2NP7YS8Mm13vO2lh+o= Received: from CASSINA.ad.sei.cmu.edu (cassina.ad.sei.cmu.edu [10.64.28.249]) by delp.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id x17GVlFQ008689; Thu, 7 Feb 2019 11:31:47 -0500 Received: from MARATHON.ad.sei.cmu.edu ([10.64.28.250]) by CASSINA.ad.sei.cmu.edu ([10.64.28.249]) with mapi id 14.03.0435.000; Thu, 7 Feb 2019 11:31:47 -0500 From: Roman Danyliw To: Alissa Cooper , The IESG CC: "rats-chairs@ietf.org" , "rats@ietf.org" Thread-Topic: Alissa Cooper's Block on charter-ietf-rats-00-00: (with BLOCK and COMMENT) Thread-Index: AQHUvvN08AD4I5PaxUisgnlf1Tr+o6XUfEzggAAKekA= Date: Thu, 7 Feb 2019 16:31:46 +0000 Message-ID: <359EC4B99E040048A7131E0F4E113AFC01857B7E48@marathon> References: <154955058697.31121.7223894559382374179.idtracker@ietfa.amsl.com> <359EC4B99E040048A7131E0F4E113AFC01857B7DC9@marathon> In-Reply-To: <359EC4B99E040048A7131E0F4E113AFC01857B7DC9@marathon> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.64.22.6] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Rats] Alissa Cooper's Block on charter-ietf-rats-00-00: (with BLOCK and COMMENT) X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Feb 2019 16:31:54 -0000 DQoNCj4gLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCj4gRnJvbTogUm9tYW4gRGFueWxpdyBb bWFpbHRvOnJkZEBjZXJ0Lm9yZ10NCj4gU2VudDogVGh1cnNkYXksIEZlYnJ1YXJ5IDA3LCAyMDE5 IDExOjE0IEFNDQo+IFRvOiBBbGlzc2EgQ29vcGVyIDxhbGlzc2FAY29vcGVydy5pbj47IFRoZSBJ RVNHIDxpZXNnQGlldGYub3JnPg0KPiBDYzogcmF0cy1jaGFpcnNAaWV0Zi5vcmc7IHJhdHNAaWV0 Zi5vcmcNCj4gU3ViamVjdDogUkU6IEFsaXNzYSBDb29wZXIncyBCbG9jayBvbiBjaGFydGVyLWll dGYtcmF0cy0wMC0wMDogKHdpdGggQkxPQ0sgYW5kDQo+IENPTU1FTlQpDQo+IA0KPiBUaGFua3Mg Zm9yIHRoZSBmZWVkYmFjay4gIE5ldyBwcm9wb3NlZCB0ZXh0IHN1Z2dlc3RlZCBpbmxpbmUuDQo+ IA0KPiA+IC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQo+ID4gRnJvbTogQWxpc3NhIENvb3Bl ciBbbWFpbHRvOmFsaXNzYUBjb29wZXJ3LmluXQ0KPiA+IFNlbnQ6IFRodXJzZGF5LCBGZWJydWFy eSAwNywgMjAxOSA5OjQzIEFNDQo+ID4gVG86IFRoZSBJRVNHIDxpZXNnQGlldGYub3JnPg0KPiA+ IENjOiByYXRzLWNoYWlyc0BpZXRmLm9yZzsgcmF0c0BpZXRmLm9yZw0KPiA+IFN1YmplY3Q6IEFs aXNzYSBDb29wZXIncyBCbG9jayBvbiBjaGFydGVyLWlldGYtcmF0cy0wMC0wMDogKHdpdGggQkxP Q0sNCj4gPiBhbmQNCj4gPiBDT01NRU5UKQ0KPiA+DQo+ID4gQWxpc3NhIENvb3BlciBoYXMgZW50 ZXJlZCB0aGUgZm9sbG93aW5nIGJhbGxvdCBwb3NpdGlvbiBmb3INCj4gPiBjaGFydGVyLWlldGYt cmF0cy0wMC0wMDogQmxvY2sNCj4gPg0KPiA+IFdoZW4gcmVzcG9uZGluZywgcGxlYXNlIGtlZXAg dGhlIHN1YmplY3QgbGluZSBpbnRhY3QgYW5kIHJlcGx5IHRvIGFsbA0KPiA+IGVtYWlsIGFkZHJl c3NlcyBpbmNsdWRlZCBpbiB0aGUgVG8gYW5kIENDIGxpbmVzLiAoRmVlbCBmcmVlIHRvIGN1dA0K PiA+IHRoaXMgaW50cm9kdWN0b3J5IHBhcmFncmFwaCwgaG93ZXZlci4pDQo+ID4NCj4gPg0KPiA+ DQo+ID4gVGhlIGRvY3VtZW50LCBhbG9uZyB3aXRoIG90aGVyIGJhbGxvdCBwb3NpdGlvbnMsIGNh biBiZSBmb3VuZCBoZXJlOg0KPiA+IGh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2No YXJ0ZXItaWV0Zi1yYXRzLw0KPiA+DQo+ID4NCj4gPg0KPiA+IC0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCj4gPiBC TE9DSzoNCj4gPiAtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQo+ID4NCj4gPiBHaXZlbiB0aGF0IHRoZSBkYXRhIHRv IGJlIGV4Y2hhbmdlZCBmb3IgcmVtb3RlIGF0dGVzdGF0aW9uIHB1cnBvc2VzDQo+ID4gY291bGQg YmUgc2VjdXJpdHktc2Vuc2l0aXZlIG9yIGNvdWxkIGJlIHVzZWQgdG8gZmluZ2VycHJpbnQgYSBk ZXZpY2UNCj4gPiBvciBpZGVudGlmeSBhIHVzZXIsIEkgdGhpbmsgdGhlIGNoYXJ0ZXIgbmVlZHMg dG8gZXhwbGljaXRseSBzdGF0ZSB3aGF0DQo+ID4gdGhlIFdHJ3MgZ29hbHMgYXJlIGZvciB0YWtp bmcgdGhlIHByb3RlY3Rpb24gb2YgdGhpcyBkYXRhIGludG8gYWNjb3VudC4NCj4gDQo+IE1ha2Vz IHNlbnNlLg0KPiANCj4gT0xEOg0KPiANCj4gVGhpcyBXRyB3aWxsIHN0YW5kYXJkaXplIGZvcm1h dHMgZm9yIGRlc2NyaWJpbmcgYXNzZXJ0aW9ucy9jbGFpbXMgYWJvdXQNCj4gc3lzdGVtIGNvbXBv bmVudHMgYW5kIGFzc29jaWF0ZWQgZXZpZGVuY2U7IGFuZCBwcm9jZWR1cmVzIGFuZCBwcm90b2Nv bHMNCj4gdG8gY29udmV5IHRoZXNlIGFzc2VydGlvbnMvY2xhaW1zIHRvIHRoZSByZWx5aW5nIHBh cnRpZXMuDQo+IA0KPiBORVc6DQo+IA0KPiBUaGlzIFdHIHdpbGwgc3RhbmRhcmRpemUgZm9ybWF0 cyBmb3IgZGVzY3JpYmluZyBhc3NlcnRpb25zL2NsYWltcyBhYm91dA0KPiBzeXN0ZW0gY29tcG9u ZW50cyBhbmQgYXNzb2NpYXRlZCBldmlkZW5jZTsgYW5kIHByb2NlZHVyZXMgYW5kIHByb3RvY29s cw0KPiB0byBjb252ZXkgdGhlc2UgYXNzZXJ0aW9ucy9jbGFpbXMgdG8gdGhlIHJlbHlpbmcgcGFy dGllcy4gIEdpdmVuIHRoZSBzZWN1cml0eQ0KPiBhbmQgcHJpdmFjeSBzZW5zaXRpdmUgbmF0dXJl IG9mIHRoZXNlIGFzc2VydGlvbnMvY2xhaW1zLCB0aGUgV0cgd2lsbCBzcGVjaWZ5DQo+IGFwcHJv YWNoZXMgdG8gcHJvdGVjdCB0aGlzIGV4Y2hhbmdlZCBkYXRhLg0KPiANCj4gDQo+ID4gLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLQ0KPiA+IENPTU1FTlQ6DQo+ID4gLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KPiA+DQo+ID4gR2l2ZW4g dGhhdCBUQ0cgYW5kIEZJRE8gQWxsaWFuY2Ugd29yayBhcmUgYm90aCBtZW50aW9uZWQsIEkgd29u ZGVyIGlmDQo+ID4gaXQgaXMgd29ydGggZXhwbGljaXRseSBzYXlpbmcgdGhhdCB0aGUgV0cgd2ls bCBjb29yZGluYXRlIHdpdGggdGhlbSBhcw0KPiBuZWNlc3NhcnkuDQo+IA0KPiBNYWtlcyBzZW5z ZS4NCj4gDQo+IE9MRDoNCj4gVGhlIHdvcmtpbmcgZ3JvdXAgd2lsbCBjb29wZXJhdGUgYW5kIGNv b3JkaW5hdGUgd2l0aCBvdGhlciBJRVRGIFdHIHN1Y2ggYXMNCj4gVEVFUCwgU1VJVCBhbmQgU0FD TSBhcyBhcHByb3ByaWF0ZS4gIFRoZSBXRyB3aWxsIGFsc28gZXZhbHVhdGUgcHJpb3Igd29yaw0K PiBzdWNoIGFzIE5FQSBhbmQgcHJvcHJpZXRhcnkgYXR0ZXN0YXRpb24gdGVjaG5vbG9naWVzLg0K PiANCj4gTkVXOg0KPiBUaGUgd29ya2luZyBncm91cCB3aWxsIGNvb3BlcmF0ZSBhbmQgY29vcmRp bmF0ZSB3aXRoIG90aGVyIElFVEYgV0cgc3VjaCBhcw0KPiBURUVQLCBTVUlUIGFuZCBTQUNNOyBh bmQgd29yayBpbiB0aGUgY29tbXVuaXR5IHN1Y2ggYXMgVENHIGFuZCBGSURPDQo+IEFsbGlhbmNl LCBhcyBhcHByb3ByaWF0ZS4gIFRoZSBXRyB3aWxsIGFsc28gZXZhbHVhdGUgcHJpb3Igd29yayBz dWNoIGFzIE5FQQ0KPiBhbmQgcHJvcHJpZXRhcnkgYXR0ZXN0YXRpb24gdGVjaG5vbG9naWVzLg0K DQpNb3JlIHJlZmluZWQgbGFuZ3VhZ2UgLi4uDQoNCk5FVzoNClRoZSB3b3JraW5nIGdyb3VwIHdp bGwgY29vcGVyYXRlIGFuZCBjb29yZGluYXRlIHdpdGggb3RoZXIgSUVURiBXR3Mgc3VjaCBhcyBU RUVQLCBTVUlUIGFuZCBTQUNNOyB3b3JrIHdpdGggb3JnYW5pemF0aW9ucyBpbiB0aGUgY29tbXVu aXR5LCBzdWNoIGFzIFRDRywgQW5kcm9pZCBLZXlzdG9yZSBhbmQgRklETyBBbGxpYW5jZSwgYXMg YXBwcm9wcmlhdGUuICBUaGUgV0cgd2lsbCBhbHNvIGV2YWx1YXRlIHByaW9yIHdvcmsgc3VjaCBh cyBORUEgYW5kIHByb3ByaWV0YXJ5IGF0dGVzdGF0aW9uIHRlY2hub2xvZ2llcy4NCg0KPiA+IEkg d291bGQgc3VnZ2VzdCBiZWluZyBleHBsaWNpdCBhYm91dCB3aGV0aGVyIHRoZSB1c2UgY2FzZXMg YXJlDQo+ID4gZXhwZWN0ZWQgdG8gYmUgZG9jdW1lbnRlZCBpbiBhIHN0YW5kLWFsb25lIGRvY3Vt ZW50LCBhbmQgaWYgc28gd2hldGhlcg0KPiA+IHRoZSBXRyBpbnRlbmRzIGZvciB0aGF0IGRvY3Vt ZW50IHRvIGJlIHB1Ymxpc2hlZCBhcyBhbiBSRkMuDQo+IA0KPiBZZXMsIHRoZXJlIGlzIGEgZGVz aXJlIHRvIHB1Ymxpc2ggdXNlIGNhc2VzLg0KPiANCj4gT0xEOg0KPiAxLiBTcGVjaWZ5IGEgdGVy bWlub2xvZ3ksIGFyY2hpdGVjdHVyZSBhbmQgdXNlIGNhc2VzIHRoYXQgZW5hYmxlIGV4cGxpY2l0 IChhIHNldA0KPiBvZiB2ZXJpZmlhYmxlIGFzc2VydGlvbi9jbGFpbXMgaXMgdHJhbnNwb3J0ZWQg aW4gdGhlIGF0dGVzdGF0aW9uKSBhbmQgaW1wbGljaXQgKGENCj4gc2V0IG9mIGFzc2VydGlvbnMv Y2xhaW1zIGlzIGltcGxpZWQgYnkgcG9zc2Vzc2lvbiBvZiBhIHNlY3JldCkgYXR0ZXN0YXRpb24N Cj4gdGVjaG5pcXVlcy4gVGhlIGFyY2hpdGVjdHVyZSBtYXkgaW5jbHVkZSBhIHN5c3RlbSBzZWN1 cml0eSBtb2RlbCBmb3IgdGhlDQo+IHNpZ25pbmcga2V5IG1hdGVyaWFsIGFuZCBpbnZvbHZlIGF0 IGxlYXN0IHRoZSBzeXN0ZW0gY29tcG9uZW50LCBzeXN0ZW0NCj4gY29tcG9uZW50IHByb3ZpZGVy LCBhbmQgdGhlIHJlbHlpbmcgYXV0aG9yaXR5Lg0KPiANCj4gTkVXOg0KPiAxLiBTcGVjaWZ5IHVz ZSBjYXNlcyBmb3IgcmVtb3RlIGF0dGVzdGF0aW9uLg0KPiANCj4gMi4gU3BlY2lmeSB0ZXJtaW5v bG9neSBhbmQgYXJjaGl0ZWN0dXJlIHRoYXQgZW5hYmxlIGF0dGVzdGF0aW9uIHRlY2huaXF1ZXMu DQo+IFRoZSBhcmNoaXRlY3R1cmUgbWF5IGluY2x1ZGUgYSBzeXN0ZW0gc2VjdXJpdHkgbW9kZWwg Zm9yIHRoZSBzaWduaW5nIGtleQ0KPiBtYXRlcmlhbCBhbmQgaW52b2x2ZSBhdCBsZWFzdCB0aGUg c3lzdGVtIGNvbXBvbmVudCwgc3lzdGVtIGNvbXBvbmVudA0KPiBwcm92aWRlciwgYW5kIHRoZSBy ZWx5aW5nIGF1dGhvcml0eS4NCj4gDQo+IDMuIFsuLi4gcmVudW1iZXIgdGhlIHJlc3QgYXMgYSAr MV0NCj4gDQo+ID4gIldoaWxlIGEgcmVseWluZyBwYXJ0eSBtYXkgdXNlIHJlZmVyZW5jZSB2YWx1 ZXMgdG8gYXNzZXNzIHRoZQ0KPiA+IGFzc2VydGlvbnMvY2xhaW1zIHRoZSBwcm9jZWR1cmVzIGZv ciB0aGlzIGFjdGl2aXR5IGFyZSBvdXQgb2Ygc2NvcGUNCj4gPiBmb3IgdGhpcyBXRy4iIC0tPiBJ dCdzIG5vdCBpbW1lZGlhdGVseSBvYnZpb3VzIHRvIG1lIHdoYXQgInJlZmVyZW5jZQ0KPiA+IHZh bHVlcyIgbWVhbnMgaW4gdGhpcyBjb250ZXh0LiBNaWdodCBiZSBteSBpZ25vcmFuY2UgYnV0IGZp Z3VyZWQgSSB3b3VsZA0KPiBub3RlIGl0Lg0KPiANCj4gRG9lcyB0aGlzIG5ldyB0ZXh0IGNsYXJp ZnkgaXQ/DQo+IA0KPiBPTEQ6DQo+IFdoaWxlIGEgcmVseWluZyBwYXJ0eSBtYXkgdXNlIHJlZmVy ZW5jZSB2YWx1ZXMgdG8gYXNzZXNzIHRoZQ0KPiBhc3NlcnRpb25zL2NsYWltcyB0aGUgcHJvY2Vk dXJlcyBmb3IgdGhpcyBhY3Rpdml0eSBhcmUgb3V0IG9mIHNjb3BlIGZvciB0aGlzDQo+IFdHLg0K PiANCj4gTkVXOg0KPiBXaGlsZSBhIHJlbHlpbmcgcGFydHkgbWF5IHVzZSByZWZlcmVuY2UsIGtu b3duIG9yIGV4cGVjdGVkIHZhbHVlcyBvcg0KPiB0aHJlc2hvbGRzIHRvIGFzc2VzcyB0aGUgYXNz ZXJ0aW9ucy9jbGFpbXMsIHRoZSBwcm9jZWR1cmVzIGZvciB0aGlzIGFjdGl2aXR5DQo+IGFyZSBv dXQgb2Ygc2NvcGUgZm9yIHRoaXMgV0cuDQo+IA0KPiBSb21hbg0KDQo= From nobody Thu Feb 7 08:33:49 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 61385128CF3 for ; Thu, 7 Feb 2019 08:33:48 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.1 X-Spam-Level: X-Spam-Status: No, score=-0.1 tagged_above=-999 required=5 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cert.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id d_Rou0aVA2xG for ; Thu, 7 Feb 2019 08:33:46 -0800 (PST) Received: from veto.sei.cmu.edu (veto.sei.cmu.edu [147.72.252.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 168651289FA for ; Thu, 7 Feb 2019 08:33:46 -0800 (PST) Received: from delp.sei.cmu.edu (delp.sei.cmu.edu [10.64.21.31]) by veto.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id x17GXjEH028543 for ; Thu, 7 Feb 2019 11:33:45 -0500 DKIM-Filter: OpenDKIM Filter v2.11.0 veto.sei.cmu.edu x17GXjEH028543 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cert.org; s=yc2bmwvrj62m; t=1549557225; bh=bexL5+QtI3oNh4ULTWt7uxuFU/a1tkwtVTWNCTQjZJ0=; h=From:To:Subject:Date:From; b=npBQNb4MzuiecP/YN+nLp9u80sk4mM6nEkoTBLyFNL2QqhHinFNywnk7yViH2Lcar 9Z6hvuL/Tpb+An8XhvAzimkDbkelr8aAaaXFiLqdX+KFSRUd8uf4iRErzRUPWYuc3o /lcCat0p6DzEU9eo+rhh3zl+2CKJniTYZ63iqLYU= Received: from CASSINA.ad.sei.cmu.edu (cassina.ad.sei.cmu.edu [10.64.28.249]) by delp.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id x17GXbCQ009184 for ; Thu, 7 Feb 2019 11:33:37 -0500 Received: from MARATHON.ad.sei.cmu.edu ([10.64.28.250]) by CASSINA.ad.sei.cmu.edu ([10.64.28.249]) with mapi id 14.03.0435.000; Thu, 7 Feb 2019 11:33:37 -0500 From: Roman Danyliw To: "rats@ietf.org" Thread-Topic: Complete charter language in response to IESG feedback Thread-Index: AdS/Ash9OmHOSRkVTKqPtF+U0m2lHQ== Date: Thu, 7 Feb 2019 16:33:36 +0000 Message-ID: <359EC4B99E040048A7131E0F4E113AFC01857B7E5E@marathon> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.64.22.6] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: [Rats] Complete charter language in response to IESG feedback X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Feb 2019 16:33:49 -0000 Hello! For reference, this is the complete charter language in response to the fol= lowing IESG feedback: https://mailarchive.ietf.org/arch/msg/rats/XubbghLAJD73HXA6SdYWwvj0kBY Roman =3D=3D[ snip]=3D=3D Introduction Relying parties require evidence about the trustworthiness of remote system= components [RFC4949] they interact with. Remote attestation procedures (RA= TS) enable relying parties to establish a level of confidence in the trustw= orthiness of remote system components by creating and processing attestatio= n evidence. A relying party can then decide whether to consider a remote sy= stem component trustworthy or not. To improve the confidence in a system component's trustworthiness a relying= party may require evidence about: * system component identity, * composition of system components, including nested components, * roots of trust, * assertion/claim origination or provenance, * manufacturing origin, * system component integrity, * system component configuration, or * operational state and measurements of steps which led to the operational = state. While domain-specific attestation mechanisms such as Trusted Computing Grou= p (TCG) Trusted Platform Module (TPM)/Trusted Software Stack (TSS), Fast Id= entity Online (FIDO) Alliance attestation and Android Keystore attestation = exist, there is no interoperable way to create and process attestation evid= ence to make determinations about system components among relying parties o= f different manufactures and origins.=20 Goals This WG will standardize formats for describing assertions/claims about sys= tem components and associated evidence; and procedures and protocols to con= vey these assertions/claims to relying parties. Given the security and pri= vacy sensitive nature of these assertions/claims, the WG will specify appro= aches to protect this exchanged data. While a relying party may use refere= nce, known or expected values or thresholds to assess the assertions/claims= , the procedures for this activity are out of scope for this WG. The working group will cooperate and coordinate with other IETF WGs such as= TEEP, SUIT and SACM; and work with organizations in the community, such as= TCG, Android Keystore and FIDO Alliance, as appropriate. The WG will also= evaluate prior work such as NEA and proprietary attestation technologies. = The WG will also evaluate prior work such as NEA and proprietary attestati= on technologies. Program of Work The working group will develop standards supporting interoperable remote at= testation procedures for system components. The main deliverables are as fo= llows: 1. Specify use cases for remote attestation. 2. Specify terminology and architecture that enable attestation techniques.= The architecture may include a system security model for the signing key = material and involve at least the system component, system component provid= er, and the relying authority. 3. Standardize an information model for assertions/claims which provide inf= ormation about system components characteristics scoped by the specified us= e-cases. 4. Standardize data models that implements and secures the defined informat= ion model (e.g., CBOR Web Token structures [RFC8392], JSON Web Token struct= ures [RFC7519]). 5. Standardize interoperable protocols to securely convey assertions/claims= . From nobody Thu Feb 7 08:43:59 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 350C2124BF6; Thu, 7 Feb 2019 08:43:49 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.799 X-Spam-Level: X-Spam-Status: No, score=-0.799 tagged_above=-999 required=5 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=cooperw.in header.b=Fj4UBILE; dkim=pass (2048-bit key) header.d=messagingengine.com header.b=z2GZ/5lc Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2Tgx-R6THByv; Thu, 7 Feb 2019 08:43:47 -0800 (PST) Received: from out2-smtp.messagingengine.com (out2-smtp.messagingengine.com [66.111.4.26]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D9CE31271FF; Thu, 7 Feb 2019 08:43:46 -0800 (PST) Received: from compute7.internal (compute7.nyi.internal [10.202.2.47]) by mailout.nyi.internal (Postfix) with ESMTP id 8A9FE224B3; Thu, 7 Feb 2019 11:43:45 -0500 (EST) Received: from mailfrontend1 ([10.202.2.162]) by compute7.internal (MEProxy); Thu, 07 Feb 2019 11:43:45 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cooperw.in; h= from:message-id:content-type:mime-version:subject:date :in-reply-to:cc:to:references; s=fm2; bh=WagnMvzd1Oi7Dh3teB14HZA SfCkicAxPySKiHFr8syg=; b=Fj4UBILERRiQJ5uDyX17HzdWlPaMkuNkX5LMkgH PhF5LjV9zYxuWtFMCrR340QYBKdKO7OU38TyOXbgQxvYIqGVJA+l9Owg9r08YBG9 POuZ4urURXGpX/4BE8nvgr3ooaTctubaozGRXEPmoM0Qz5N+XuyiS5rzQMInvm9C ezAvImdXYqIuMM6QKsd1qnG0Rs1hIeivTjavSeT/6PJhyluO5vbiOI3lqfIIcQla obTQLO97rNxA67zxsF293X8jU85brdMa0wUv+FSFhmtTBKifWQt4OpAJNNUxOH4l 5kFibZNTQ6kC2oeDM/YF0bw0nfLgxBuqoKvQduFIqibp/QQ== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-me-proxy :x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm2; bh=WagnMv zd1Oi7Dh3teB14HZASfCkicAxPySKiHFr8syg=; b=z2GZ/5lctxKV7kcfANd3/L 5fi0BaurpXtp1gvDgp+9EXt8mtlRwmwcTFS6YJdU1VbUtES0t76tpeC09JrhZEUe EY5ET8VXjhKPhxdxD/bseTs52y+WtzZswqsYri/Y3gFkFPxzmZvQ8GesfiN0/LH7 iAYh01h4IK6CH11LdB+0xRvYzhTNI++IYMi7nSFCD0wcLjLXqgu6rInWaBlYb12n W3QuD/iIpGy087XqZh3BNyc44saAMq6YDf5tfnVpCoGQibUp97YaKfkoncSUrXE3 vL4p7nONP5RUE1ol3y7qrA5WU+ACk2XLxMCCP5QiAcI+UTvXVQImlx8OPhIjtx7A == X-ME-Sender: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedtledrledtgdelhecutefuodetggdotefrodftvf curfhrohhfihhlvgemucfhrghsthforghilhdpqfhuthenuceurghilhhouhhtmecufedt tdenucenucfjughrpefhkfgtggfuffgjvfhfofesrgdtmherhhdtvdenucfhrhhomhepte hlihhsshgrucevohhophgvrhcuoegrlhhishhsrgestghoohhpvghrfidrihhnqeenucff ohhmrghinhepihgvthhfrdhorhhgnecukfhppedujeefrdefkedruddujedrjedvnecurf grrhgrmhepmhgrihhlfhhrohhmpegrlhhishhsrgestghoohhpvghrfidrihhnnecuvehl uhhsthgvrhfuihiivgeptd X-ME-Proxy: Received: from rtp-alcoop-nitro5.cisco.com (unknown [173.38.117.72]) by mail.messagingengine.com (Postfix) with ESMTPA id 9C9F8E471F; Thu, 7 Feb 2019 11:43:44 -0500 (EST) From: Alissa Cooper Message-Id: <0130EA1D-7809-4BC8-A64C-D07DC50576AB@cooperw.in> Content-Type: multipart/alternative; boundary="Apple-Mail=_FBEFB768-52D3-4853-9B25-A69DC45A3EE0" Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\)) Date: Thu, 7 Feb 2019 11:43:47 -0500 In-Reply-To: <359EC4B99E040048A7131E0F4E113AFC01857B7DC9@marathon> Cc: IESG , "rats-chairs@ietf.org" , "rats@ietf.org" To: Roman Danyliw References: <154955058697.31121.7223894559382374179.idtracker@ietfa.amsl.com> <359EC4B99E040048A7131E0F4E113AFC01857B7DC9@marathon> X-Mailer: Apple Mail (2.3445.9.1) Archived-At: Subject: Re: [Rats] Alissa Cooper's Block on charter-ietf-rats-00-00: (with BLOCK and COMMENT) X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Feb 2019 16:43:49 -0000 --Apple-Mail=_FBEFB768-52D3-4853-9B25-A69DC45A3EE0 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii Thanks, all looks good except I have one question below. > On Feb 7, 2019, at 11:13 AM, Roman Danyliw wrote: >=20 >> I would suggest being explicit about whether the use cases are = expected to >> be documented in a stand-alone document, and if so whether the WG >> intends for that document to be published as an RFC. >=20 > Yes, there is a desire to publish use cases. Is there a particular reasoning for publishing these in the archival = series? (See = .) Thanks, Alissa >=20 > OLD: > 1. Specify a terminology, architecture and use cases that enable = explicit (a > set of verifiable assertion/claims is transported in the attestation) = and > implicit (a set of assertions/claims is implied by possession of a = secret) > attestation techniques. The architecture may include a system security = model > for the signing key material and involve at least the system = component, system > component provider, and the relying authority. >=20 > NEW: > 1. Specify use cases for remote attestation. >=20 > 2. Specify terminology and architecture that enable attestation = techniques. The architecture may include a system security model for = the signing key material and involve at least the system component, = system component provider, and the relying authority. >=20 > 3. [... renumber the rest as a +1] --Apple-Mail=_FBEFB768-52D3-4853-9B25-A69DC45A3EE0 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=us-ascii Thanks, all looks good except I have one question below.

On Feb 7, 2019, at 11:13 AM, Roman Danyliw <rdd@cert.org> = wrote:

I would suggest being explicit about = whether the use cases are expected to
be documented in a = stand-alone document, and if so whether the WG
intends for = that document to be published as an RFC.

Yes, there is a desire to = publish use cases.

Is there a particular reasoning for publishing = these in the archival series? (See <https://www.ietf.org/blog/support-documents-ietf-working-groups= /?primary_topic=3D7&>.)

Thanks,
Alissa


OLD:
1. Specify a terminology, = architecture and use cases that enable explicit (a
set of verifiable = assertion/claims is transported in the attestation) and
implicit (a set of = assertions/claims is implied by possession of a secret)
attestation techniques. The = architecture may include a system security model
for the signing key material and = involve at least the system component, system
component provider, and the = relying authority.

NEW:
1. Specify use cases for remote attestation.

2. Specify terminology and = architecture that enable attestation techniques.  The architecture = may include a system security model for the signing key material and = involve at least the system component, system component provider, and = the relying authority.

3. [... renumber the rest as a = +1]

= --Apple-Mail=_FBEFB768-52D3-4853-9B25-A69DC45A3EE0-- From nobody Thu Feb 7 09:02:09 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B5A6A129508 for ; Thu, 7 Feb 2019 09:02:08 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -12.601 X-Spam-Level: X-Spam-Status: No, score=-12.601 tagged_above=-999 required=5 tests=[DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id w2RxCe5dQVBj for ; Thu, 7 Feb 2019 09:02:06 -0800 (PST) Received: from rcdn-iport-4.cisco.com (rcdn-iport-4.cisco.com [173.37.86.75]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8EEE1129284 for ; Thu, 7 Feb 2019 09:02:06 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=5400; q=dns/txt; s=iport; t=1549558926; x=1550768526; h=from:to:subject:date:message-id:content-id: content-transfer-encoding:mime-version; bh=dsXw3K77kPJGS0f/ILJdjXhEvqZksh9Zr+WHtpwoPrk=; b=CMMoIuFN41sF/7411ItDcXHQLDymKpzjc5nyHNS9XOSsaD38q+CUFBd+ BdbZGnVAvJJx3+ng4fko4+gqmQHPxp6D3NRGaRJjwzkI3HWVJU8ARaim4 devmtvFkE8R3EfIT/xIQ/Qa+3HM3a2/Q8w2uEWsF5u659JeZR1ppGbJE4 Q=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AFAACmY1xc/5pdJa1bCRoBAQEBAQI?= =?us-ascii?q?BAQEBBwIBAQEBgVEFAQEBAQsBggNngQMnCoN5iBqLb5oegXsLAQEYC4FUgw6?= =?us-ascii?q?DESI0CQ0BAwEBAgEBAm0cDIVLBgEBIRE6HQEIDgQIAiYCBCULFQIQBAESFIM?= =?us-ascii?q?QAYIBDwOtNoEvhUSEYQWBC4spDxeBf4ERJx+CHi6DHgEBgTeDMzGCJgKXJ4t?= =?us-ascii?q?pCQKGcUSLDhmSVYothTiMFwIRFIEnHziBVnAVOyoBgkGLHoU/QTGNW4EfAQE?= X-IronPort-AV: E=Sophos;i="5.58,344,1544486400"; d="scan'208";a="513863638" Received: from rcdn-core-3.cisco.com ([173.37.93.154]) by rcdn-iport-4.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 07 Feb 2019 17:02:05 +0000 Received: from XCH-RTP-014.cisco.com (xch-rtp-014.cisco.com [64.101.220.154]) by rcdn-core-3.cisco.com (8.15.2/8.15.2) with ESMTPS id x17H24Hd020298 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Thu, 7 Feb 2019 17:02:05 GMT Received: from xch-rtp-015.cisco.com (64.101.220.155) by XCH-RTP-014.cisco.com (64.101.220.154) with Microsoft SMTP Server (TLS) id 15.0.1395.4; Thu, 7 Feb 2019 12:02:04 -0500 Received: from xch-rtp-015.cisco.com ([64.101.220.155]) by XCH-RTP-015.cisco.com ([64.101.220.155]) with mapi id 15.00.1395.000; Thu, 7 Feb 2019 12:02:04 -0500 From: "Nancy Cam-Winget (ncamwing)" To: Roman Danyliw , "rats@ietf.org" Thread-Topic: [Rats] Complete charter language in response to IESG feedback Thread-Index: AQHUvwbZAhib+DLw+UGlR1KXLr+Q4w== Date: Thu, 7 Feb 2019 17:02:04 +0000 Message-ID: <2F2ECBBB-4CBB-422A-A090-CE3C257C8166@cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.c.0.180410 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.24.108.14] Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Outbound-SMTP-Client: 64.101.220.154, xch-rtp-014.cisco.com X-Outbound-Node: rcdn-core-3.cisco.com Archived-At: Subject: Re: [Rats] Complete charter language in response to IESG feedback X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Feb 2019 17:02:09 -0000 QXBvbG9naWVzIGlmIHBhdGhzIGNyb3NzZWQsIHRoZXJlIGlzIG9uZSBpdGVtIG1pc3NpbmcgaW4g dGhlIHVwZGF0ZWQgY2hhcnRlciBsYW5ndWFnZSBiZWxvdyAoYW5ub3RhdGVkKSB3aXRoICoqKjoN Cg0K77u/T24gMi83LzE5LCAwODozMywgIlJBVFMgb24gYmVoYWxmIG9mIFJvbWFuIERhbnlsaXci IDxyYXRzLWJvdW5jZXNAaWV0Zi5vcmcgb24gYmVoYWxmIG9mIHJkZEBjZXJ0Lm9yZz4gd3JvdGU6 DQoNCiAgICBIZWxsbyENCiAgICANCiAgICBGb3IgcmVmZXJlbmNlLCB0aGlzIGlzIHRoZSBjb21w bGV0ZSBjaGFydGVyIGxhbmd1YWdlIGluIHJlc3BvbnNlIHRvIHRoZSBmb2xsb3dpbmcgSUVTRyBm ZWVkYmFjazoNCiAgICANCiAgICBodHRwczovL21haWxhcmNoaXZlLmlldGYub3JnL2FyY2gvbXNn L3JhdHMvWHViYmdoTEFKRDczSFhBNlNkWVd3dmowa0JZDQogICAgDQogICAgUm9tYW4NCiAgICAN CiAgICA9PVsgc25pcF09PQ0KICAgIEludHJvZHVjdGlvbg0KICAgIA0KICAgIFJlbHlpbmcgcGFy dGllcyByZXF1aXJlIGV2aWRlbmNlIGFib3V0IHRoZSB0cnVzdHdvcnRoaW5lc3Mgb2YgcmVtb3Rl IHN5c3RlbSBjb21wb25lbnRzIFtSRkM0OTQ5XSB0aGV5IGludGVyYWN0IHdpdGguIFJlbW90ZSBh dHRlc3RhdGlvbiBwcm9jZWR1cmVzIChSQVRTKSBlbmFibGUgcmVseWluZyBwYXJ0aWVzIHRvIGVz dGFibGlzaCBhIGxldmVsIG9mIGNvbmZpZGVuY2UgaW4gdGhlIHRydXN0d29ydGhpbmVzcyBvZiBy ZW1vdGUgc3lzdGVtIGNvbXBvbmVudHMgYnkgY3JlYXRpbmcgYW5kIHByb2Nlc3NpbmcgYXR0ZXN0 YXRpb24gZXZpZGVuY2UuIEEgcmVseWluZyBwYXJ0eSBjYW4gdGhlbiBkZWNpZGUgd2hldGhlciB0 byBjb25zaWRlciBhIHJlbW90ZSBzeXN0ZW0gY29tcG9uZW50IHRydXN0d29ydGh5IG9yIG5vdC4N CiAgICANCiAgICBUbyBpbXByb3ZlIHRoZSBjb25maWRlbmNlIGluIGEgc3lzdGVtIGNvbXBvbmVu dCdzIHRydXN0d29ydGhpbmVzcyBhIHJlbHlpbmcgcGFydHkgbWF5IHJlcXVpcmUgZXZpZGVuY2Ug YWJvdXQ6DQogICAgKiBzeXN0ZW0gY29tcG9uZW50IGlkZW50aXR5LA0KICAgICogY29tcG9zaXRp b24gb2Ygc3lzdGVtIGNvbXBvbmVudHMsIGluY2x1ZGluZyBuZXN0ZWQgY29tcG9uZW50cywNCiAg ICAqIHJvb3RzIG9mIHRydXN0LA0KICAgICogYXNzZXJ0aW9uL2NsYWltIG9yaWdpbmF0aW9uIG9y IHByb3ZlbmFuY2UsDQogICAgKiBtYW51ZmFjdHVyaW5nIG9yaWdpbiwNCiAgICAqIHN5c3RlbSBj b21wb25lbnQgaW50ZWdyaXR5LA0KICAgICogc3lzdGVtIGNvbXBvbmVudCBjb25maWd1cmF0aW9u LCBvcg0KICAgICogb3BlcmF0aW9uYWwgc3RhdGUgYW5kIG1lYXN1cmVtZW50cyBvZiBzdGVwcyB3 aGljaCBsZWQgdG8gdGhlIG9wZXJhdGlvbmFsIHN0YXRlLg0KKioqICAqIG90aGVyIGZhY3RvcnMg dGhhdCBjb3VsZCBpbmZsdWVuY2UgdHJ1c3QgZGVjaXNpb25zDQogICAgDQogICAgV2hpbGUgZG9t YWluLXNwZWNpZmljIGF0dGVzdGF0aW9uIG1lY2hhbmlzbXMgc3VjaCBhcyBUcnVzdGVkIENvbXB1 dGluZyBHcm91cCAoVENHKSBUcnVzdGVkIFBsYXRmb3JtIE1vZHVsZSAoVFBNKS9UcnVzdGVkIFNv ZnR3YXJlIFN0YWNrIChUU1MpLCBGYXN0IElkZW50aXR5IE9ubGluZSAoRklETykgQWxsaWFuY2Ug YXR0ZXN0YXRpb24gYW5kIEFuZHJvaWQgS2V5c3RvcmUgYXR0ZXN0YXRpb24gZXhpc3QsIHRoZXJl IGlzIG5vIGludGVyb3BlcmFibGUgd2F5IHRvIGNyZWF0ZSBhbmQgcHJvY2VzcyBhdHRlc3RhdGlv biBldmlkZW5jZSB0byBtYWtlIGRldGVybWluYXRpb25zIGFib3V0IHN5c3RlbSBjb21wb25lbnRz IGFtb25nIHJlbHlpbmcgcGFydGllcyBvZiBkaWZmZXJlbnQgbWFudWZhY3R1cmVzIGFuZCBvcmln aW5zLiANCiAgICANCiAgICBHb2Fscw0KICAgIA0KICAgIFRoaXMgV0cgd2lsbCBzdGFuZGFyZGl6 ZSBmb3JtYXRzIGZvciBkZXNjcmliaW5nIGFzc2VydGlvbnMvY2xhaW1zIGFib3V0IHN5c3RlbSBj b21wb25lbnRzIGFuZCBhc3NvY2lhdGVkIGV2aWRlbmNlOyBhbmQgcHJvY2VkdXJlcyBhbmQgcHJv dG9jb2xzIHRvIGNvbnZleSB0aGVzZSBhc3NlcnRpb25zL2NsYWltcyB0byByZWx5aW5nIHBhcnRp ZXMuICBHaXZlbiB0aGUgc2VjdXJpdHkgYW5kIHByaXZhY3kgc2Vuc2l0aXZlIG5hdHVyZSBvZiB0 aGVzZSBhc3NlcnRpb25zL2NsYWltcywgdGhlIFdHIHdpbGwgc3BlY2lmeSBhcHByb2FjaGVzIHRv IHByb3RlY3QgdGhpcyBleGNoYW5nZWQgZGF0YS4gIFdoaWxlIGEgcmVseWluZyBwYXJ0eSBtYXkg dXNlIHJlZmVyZW5jZSwga25vd24gb3IgZXhwZWN0ZWQgdmFsdWVzIG9yIHRocmVzaG9sZHMgdG8g YXNzZXNzIHRoZSBhc3NlcnRpb25zL2NsYWltcywgdGhlIHByb2NlZHVyZXMgZm9yIHRoaXMgYWN0 aXZpdHkgYXJlIG91dCBvZiBzY29wZSBmb3IgdGhpcyBXRy4NCiAgICANCiAgICBUaGUgd29ya2lu ZyBncm91cCB3aWxsIGNvb3BlcmF0ZSBhbmQgY29vcmRpbmF0ZSB3aXRoIG90aGVyIElFVEYgV0dz IHN1Y2ggYXMgVEVFUCwgU1VJVCBhbmQgU0FDTTsgYW5kIHdvcmsgd2l0aCBvcmdhbml6YXRpb25z IGluIHRoZSBjb21tdW5pdHksIHN1Y2ggYXMgVENHLCBBbmRyb2lkIEtleXN0b3JlIGFuZCBGSURP IEFsbGlhbmNlLCBhcyBhcHByb3ByaWF0ZS4gIFRoZSBXRyB3aWxsIGFsc28gZXZhbHVhdGUgcHJp b3Igd29yayBzdWNoIGFzIE5FQSBhbmQgcHJvcHJpZXRhcnkgYXR0ZXN0YXRpb24gdGVjaG5vbG9n aWVzLiAgVGhlIFdHIHdpbGwgYWxzbyBldmFsdWF0ZSBwcmlvciB3b3JrIHN1Y2ggYXMgTkVBIGFu ZCBwcm9wcmlldGFyeSBhdHRlc3RhdGlvbiB0ZWNobm9sb2dpZXMuDQogICAgDQogICAgUHJvZ3Jh bSBvZiBXb3JrDQogICAgDQogICAgVGhlIHdvcmtpbmcgZ3JvdXAgd2lsbCBkZXZlbG9wIHN0YW5k YXJkcyBzdXBwb3J0aW5nIGludGVyb3BlcmFibGUgcmVtb3RlIGF0dGVzdGF0aW9uIHByb2NlZHVy ZXMgZm9yIHN5c3RlbSBjb21wb25lbnRzLiBUaGUgbWFpbiBkZWxpdmVyYWJsZXMgYXJlIGFzIGZv bGxvd3M6DQogICAgDQogICAgMS4gU3BlY2lmeSB1c2UgY2FzZXMgZm9yIHJlbW90ZSBhdHRlc3Rh dGlvbi4NCiAgICANCiAgICAyLiBTcGVjaWZ5IHRlcm1pbm9sb2d5IGFuZCBhcmNoaXRlY3R1cmUg dGhhdCBlbmFibGUgYXR0ZXN0YXRpb24gdGVjaG5pcXVlcy4gIFRoZSBhcmNoaXRlY3R1cmUgbWF5 IGluY2x1ZGUgYSBzeXN0ZW0gc2VjdXJpdHkgbW9kZWwgZm9yIHRoZSBzaWduaW5nIGtleSBtYXRl cmlhbCBhbmQgaW52b2x2ZSBhdCBsZWFzdCB0aGUgc3lzdGVtIGNvbXBvbmVudCwgc3lzdGVtIGNv bXBvbmVudCBwcm92aWRlciwgYW5kIHRoZSByZWx5aW5nIGF1dGhvcml0eS4NCiAgICANCiAgICAz LiBTdGFuZGFyZGl6ZSBhbiBpbmZvcm1hdGlvbiBtb2RlbCBmb3IgYXNzZXJ0aW9ucy9jbGFpbXMg d2hpY2ggcHJvdmlkZSBpbmZvcm1hdGlvbiBhYm91dCBzeXN0ZW0gY29tcG9uZW50cyBjaGFyYWN0 ZXJpc3RpY3Mgc2NvcGVkIGJ5IHRoZSBzcGVjaWZpZWQgdXNlLWNhc2VzLg0KICAgIA0KICAgIDQu IFN0YW5kYXJkaXplIGRhdGEgbW9kZWxzIHRoYXQgaW1wbGVtZW50cyBhbmQgc2VjdXJlcyB0aGUg ZGVmaW5lZCBpbmZvcm1hdGlvbiBtb2RlbCAoZS5nLiwgQ0JPUiBXZWIgVG9rZW4gc3RydWN0dXJl cyBbUkZDODM5Ml0sIEpTT04gV2ViIFRva2VuIHN0cnVjdHVyZXMgW1JGQzc1MTldKS4NCiAgICAN CiAgICA1LiBTdGFuZGFyZGl6ZSBpbnRlcm9wZXJhYmxlIHByb3RvY29scyB0byBzZWN1cmVseSBj b252ZXkgYXNzZXJ0aW9ucy9jbGFpbXMuDQogICAgDQogICAgX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX18NCiAgICBSQVRTIG1haWxpbmcgbGlzdA0KICAgIFJB VFNAaWV0Zi5vcmcNCiAgICBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3Jh dHMNCiAgICANCg0K From nobody Thu Feb 7 09:30:44 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 46C6512D861; Thu, 7 Feb 2019 09:30:42 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.1 X-Spam-Level: X-Spam-Status: No, score=-0.1 tagged_above=-999 required=5 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cert.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id R7RbdDyEScl1; Thu, 7 Feb 2019 09:30:40 -0800 (PST) Received: from veto.sei.cmu.edu (veto.sei.cmu.edu [147.72.252.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3482F1295EC; Thu, 7 Feb 2019 09:30:40 -0800 (PST) Received: from delp.sei.cmu.edu (delp.sei.cmu.edu [10.64.21.31]) by veto.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id x17HUZZS037198; Thu, 7 Feb 2019 12:30:35 -0500 DKIM-Filter: OpenDKIM Filter v2.11.0 veto.sei.cmu.edu x17HUZZS037198 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cert.org; s=yc2bmwvrj62m; t=1549560635; bh=FY18uEWC/ygER4jgyMW/WY/gAIbQw/gMHcu8aHxfX1M=; h=From:To:CC:Subject:Date:References:In-Reply-To:From; b=bEgtMLKD/2Sgc4WJJChXCffs+hX06ewOGstybdORGlIgNLTJUqRK6imVPBZGLGk5B i1PHxBeKE25h4GJ1Lijt8QxsTKKK/CGZFjjYK1ylzCYLVHnYYIVXcuNoA4YzL00Wpw YwNO2TjI4SnTEPgtupeQ+EhIFyrzheXmASQZyTBY= Received: from CASSINA.ad.sei.cmu.edu (cassina.ad.sei.cmu.edu [10.64.28.249]) by delp.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id x17HUXdB024818; Thu, 7 Feb 2019 12:30:33 -0500 Received: from MARATHON.ad.sei.cmu.edu ([10.64.28.250]) by CASSINA.ad.sei.cmu.edu ([10.64.28.249]) with mapi id 14.03.0435.000; Thu, 7 Feb 2019 12:30:33 -0500 From: Roman Danyliw To: Alissa Cooper CC: IESG , "rats-chairs@ietf.org" , "rats@ietf.org" Thread-Topic: Alissa Cooper's Block on charter-ietf-rats-00-00: (with BLOCK and COMMENT) Thread-Index: AQHUvvN08AD4I5PaxUisgnlf1Tr+o6XUfEzggABiNYD//7ZXMIAAABlA Date: Thu, 7 Feb 2019 17:30:32 +0000 Message-ID: <359EC4B99E040048A7131E0F4E113AFC01857B81EE@marathon> References: <154955058697.31121.7223894559382374179.idtracker@ietfa.amsl.com> <359EC4B99E040048A7131E0F4E113AFC01857B7DC9@marathon> <0130EA1D-7809-4BC8-A64C-D07DC50576AB@cooperw.in> <359EC4B99E040048A7131E0F4E113AFC01857B8193@marathon> In-Reply-To: <359EC4B99E040048A7131E0F4E113AFC01857B8193@marathon> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.64.22.6] Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [Rats] Alissa Cooper's Block on charter-ietf-rats-00-00: (with BLOCK and COMMENT) X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Feb 2019 17:30:42 -0000 > From: Alissa Cooper [mailto:alissa@cooperw.in] > Sent: Thursday, February 07, 2019 11:44 AM > To: Roman Danyliw > Cc: IESG ; rats-chairs@ietf.org; rats@ietf.org > Subject: Re: Alissa Cooper's Block on charter-ietf-rats-00-00: (with BLOC= K and > COMMENT) >=20 > Thanks, all looks good except I have one question below. >=20 >=20 > On Feb 7, 2019, at 11:13 AM, Roman Danyliw wrote: >=20 >=20 > I would suggest being explicit about whether the use cases are expected t= o > be documented in a stand-alone document, and if so whether the WG > intends for that document to be published as an RFC. >=20 > Yes, there is a desire to publish use cases. >=20 > Is there a particular reasoning for publishing these in the archival seri= es? (See > groups/?primary_topic=3D7&>.) As I recollect, the consensus was around having a use case document, but th= ere was limited discussion on how it should be published. Perhaps this can= be left to the WG and codified as: OLD (preamble to Program of Work): The working group will develop standards supporting interoperable remote at= testation procedures for system components. The main deliverables are as fo= llows. NEW: The working group will develop standards supporting interoperable remote at= testation procedures for system components. The main deliverables are descr= ibed below. The WG may chose not to formally publish all of the support do= cuments as RFCs. =20 Roman > Thanks, > Alissa >=20 >=20 >=20 > OLD: > 1. Specify a terminology, architecture and use cases that enable explicit= (a set > of verifiable assertion/claims is transported in the attestation) and imp= licit (a > set of assertions/claims is implied by possession of a secret) attestatio= n > techniques. The architecture may include a system security model for the > signing key material and involve at least the system component, system > component provider, and the relying authority. >=20 > NEW: > 1. Specify use cases for remote attestation. >=20 > 2. Specify terminology and architecture that enable attestation > techniques. =A0The architecture may include a system security model for t= he > signing key material and involve at least the system component, system > component provider, and the relying authority. >=20 > 3. [... renumber the rest as a +1] From nobody Thu Feb 7 10:41:39 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 90FAC12F1A5 for ; Thu, 7 Feb 2019 10:41:38 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2Ud6Ci7k-KBw for ; Thu, 7 Feb 2019 10:41:37 -0800 (PST) Received: from p3plsmtpa11-09.prod.phx3.secureserver.net (p3plsmtpa11-09.prod.phx3.secureserver.net [68.178.252.110]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 658AE130DD3 for ; Thu, 7 Feb 2019 10:41:37 -0800 (PST) Received: from [172.20.10.4] ([174.217.27.101]) by :SMTPAUTH: with ESMTPSA id roa0glIkT3ygHroa0gk2ph; Thu, 07 Feb 2019 11:39:21 -0700 Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\)) From: Laurence Lundblade In-Reply-To: <359EC4B99E040048A7131E0F4E113AFC01857B7E48@marathon> Date: Thu, 7 Feb 2019 12:39:19 -0600 Cc: Alissa Cooper , The IESG , "rats@ietf.org" , "rats-chairs@ietf.org" Content-Transfer-Encoding: quoted-printable Message-Id: <48238468-8CE5-4ABC-8BE3-13B02AD9F316@island-resort.com> References: <154955058697.31121.7223894559382374179.idtracker@ietfa.amsl.com> <359EC4B99E040048A7131E0F4E113AFC01857B7DC9@marathon> <359EC4B99E040048A7131E0F4E113AFC01857B7E48@marathon> To: Roman Danyliw X-Mailer: Apple Mail (2.3445.9.1) X-CMAE-Envelope: MS4wfJ4WRXyk8Ic0tVEgJ2QwV7g5yBBsb/fp7ac81FJf/nQiS/F3pohzVFks7aNIZcFrEWl3uhNSvR+fRykq3/BSVwWZOs7MZ8ICY09IHkEz880bvyK053Xb QN008MF7YwgfPEZICP3d5JRY2vSj7AJzTWZliZMGjB3NJi2BpXpt8AYVJe0tXNrFcCFDK9f6dTgwiUJmqdqamZRXG1uHoPNvZN4QEeD6Ta26PyY2XxRdeGX8 YT5VmymzZUSYEfoSeVBRkeIaBwi/GvTiVXufDh3QvMw= Archived-At: Subject: Re: [Rats] Alissa Cooper's Block on charter-ietf-rats-00-00: (with BLOCK and COMMENT) X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Feb 2019 18:41:38 -0000 Below... > On Feb 7, 2019, at 10:31 AM, Roman Danyliw wrote: >=20 >>=20 >>> = ---------------------------------------------------------------------- >>> COMMENT: >>> = ---------------------------------------------------------------------- >>>=20 >>> Given that TCG and FIDO Alliance work are both mentioned, I wonder = if >>> it is worth explicitly saying that the WG will coordinate with them = as >> necessary. >>=20 >> Makes sense. >>=20 >> OLD: >> The working group will cooperate and coordinate with other IETF WG = such as >> TEEP, SUIT and SACM as appropriate. The WG will also evaluate prior = work >> such as NEA and proprietary attestation technologies. >>=20 >> NEW: >> The working group will cooperate and coordinate with other IETF WG = such as >> TEEP, SUIT and SACM; and work in the community such as TCG and FIDO >> Alliance, as appropriate. The WG will also evaluate prior work such = as NEA >> and proprietary attestation technologies. >=20 > More refined language ... >=20 > NEW: > The working group will cooperate and coordinate with other IETF WGs = such as TEEP, SUIT and SACM; work with organizations in the community, = such as TCG, Android Keystore and FIDO Alliance, as appropriate. The WG = will also evaluate prior work such as NEA and proprietary attestation = technologies. =E2=80=9CAndroid Keystore=E2=80=9D is an implementation not an = organization. Maybe this? LL-NEW: The working group will cooperate and coordinate with other IETF WGs such = as TEEP, SUIT and SACM; work with organizations in the community, such = as the TCG and the FIDO Alliance, as appropriate. The WG will also = evaluate prior work such as NEA and proprietary attestation technologies = like the Android Keystore. LL From nobody Thu Feb 7 11:24:59 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 227B9129C6A; Thu, 7 Feb 2019 11:24:52 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cert.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kJCWW4r_jpc4; Thu, 7 Feb 2019 11:24:50 -0800 (PST) Received: from taper.sei.cmu.edu (taper.sei.cmu.edu [147.72.252.16]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 02213128CF3; Thu, 7 Feb 2019 11:24:49 -0800 (PST) Received: from delp.sei.cmu.edu (delp.sei.cmu.edu [10.64.21.31]) by taper.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id x17JOedw024937; Thu, 7 Feb 2019 14:24:40 -0500 DKIM-Filter: OpenDKIM Filter v2.11.0 taper.sei.cmu.edu x17JOedw024937 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cert.org; s=yc2bmwvrj62m; t=1549567481; bh=zl7ZmN4InjGQJ3wVZktvfIRZzBeFbUyCn2fMdzY1g18=; h=From:To:CC:Subject:Date:References:In-Reply-To:From; b=YprekDAsHPP8yp1p0XHZwq8ahlZd6GndXzkGJ4OFPZ1dPwpTXzmps+Qy49uNw5NAk pkbjq76txVtTh3xTlI0WrvlpKmRd90REJIIiZ++aQLoqjuAyPndridH1U9L6QSdY47 Ds55sgKd0ZfcvxKJesZULcXJnCMGSazQ88/PYeu8= Received: from CASCADE.ad.sei.cmu.edu (cascade.ad.sei.cmu.edu [10.64.28.248]) by delp.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id x17JOcPj008308; Thu, 7 Feb 2019 14:24:38 -0500 Received: from MARATHON.ad.sei.cmu.edu ([10.64.28.250]) by CASCADE.ad.sei.cmu.edu ([10.64.28.248]) with mapi id 14.03.0435.000; Thu, 7 Feb 2019 14:24:38 -0500 From: Roman Danyliw To: Laurence Lundblade CC: Alissa Cooper , The IESG , "rats@ietf.org" , "rats-chairs@ietf.org" Thread-Topic: [Rats] Alissa Cooper's Block on charter-ietf-rats-00-00: (with BLOCK and COMMENT) Thread-Index: AQHUvvN08AD4I5PaxUisgnlf1Tr+o6XUfEzggAAKekCAAHgDgP//uK5Q Date: Thu, 7 Feb 2019 19:24:37 +0000 Message-ID: <359EC4B99E040048A7131E0F4E113AFC01857B87C9@marathon> References: <154955058697.31121.7223894559382374179.idtracker@ietfa.amsl.com> <359EC4B99E040048A7131E0F4E113AFC01857B7DC9@marathon> <359EC4B99E040048A7131E0F4E113AFC01857B7E48@marathon> <48238468-8CE5-4ABC-8BE3-13B02AD9F316@island-resort.com> In-Reply-To: <48238468-8CE5-4ABC-8BE3-13B02AD9F316@island-resort.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.64.22.6] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Rats] Alissa Cooper's Block on charter-ietf-rats-00-00: (with BLOCK and COMMENT) X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Feb 2019 19:24:52 -0000 DQoNCj4gLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCj4gRnJvbTogTGF1cmVuY2UgTHVuZGJs YWRlIFttYWlsdG86bGdsQGlzbGFuZC1yZXNvcnQuY29tXQ0KPiBTZW50OiBUaHVyc2RheSwgRmVi cnVhcnkgMDcsIDIwMTkgMTozOSBQTQ0KPiBUbzogUm9tYW4gRGFueWxpdyA8cmRkQGNlcnQub3Jn Pg0KPiBDYzogQWxpc3NhIENvb3BlciA8YWxpc3NhQGNvb3BlcncuaW4+OyBUaGUgSUVTRyA8aWVz Z0BpZXRmLm9yZz47DQo+IHJhdHNAaWV0Zi5vcmc7IHJhdHMtY2hhaXJzQGlldGYub3JnDQo+IFN1 YmplY3Q6IFJlOiBbUmF0c10gQWxpc3NhIENvb3BlcidzIEJsb2NrIG9uIGNoYXJ0ZXItaWV0Zi1y YXRzLTAwLTAwOiAod2l0aA0KPiBCTE9DSyBhbmQgQ09NTUVOVCkNCj4gDQo+IEJlbG93Li4uDQo+ IA0KPiA+IE9uIEZlYiA3LCAyMDE5LCBhdCAxMDozMSBBTSwgUm9tYW4gRGFueWxpdyA8cmRkQGNl cnQub3JnPiB3cm90ZToNCj4gPg0KPiA+Pg0KPiA+Pj4gLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCj4gPj4+IC0tDQo+ ID4+PiBDT01NRU5UOg0KPiA+Pj4gLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCj4gPj4+IC0tDQo+ID4+Pg0KPiA+Pj4g R2l2ZW4gdGhhdCBUQ0cgYW5kIEZJRE8gQWxsaWFuY2Ugd29yayBhcmUgYm90aCBtZW50aW9uZWQs IEkgd29uZGVyDQo+ID4+PiBpZiBpdCBpcyB3b3J0aCBleHBsaWNpdGx5IHNheWluZyB0aGF0IHRo ZSBXRyB3aWxsIGNvb3JkaW5hdGUgd2l0aA0KPiA+Pj4gdGhlbSBhcw0KPiA+PiBuZWNlc3Nhcnku DQo+ID4+DQo+ID4+IE1ha2VzIHNlbnNlLg0KPiA+Pg0KPiA+PiBPTEQ6DQo+ID4+IFRoZSB3b3Jr aW5nIGdyb3VwIHdpbGwgY29vcGVyYXRlIGFuZCBjb29yZGluYXRlIHdpdGggb3RoZXIgSUVURiBX Rw0KPiA+PiBzdWNoIGFzIFRFRVAsIFNVSVQgYW5kIFNBQ00gYXMgYXBwcm9wcmlhdGUuICBUaGUg V0cgd2lsbCBhbHNvDQo+ID4+IGV2YWx1YXRlIHByaW9yIHdvcmsgc3VjaCBhcyBORUEgYW5kIHBy b3ByaWV0YXJ5IGF0dGVzdGF0aW9uIHRlY2hub2xvZ2llcy4NCj4gPj4NCj4gPj4gTkVXOg0KPiA+ PiBUaGUgd29ya2luZyBncm91cCB3aWxsIGNvb3BlcmF0ZSBhbmQgY29vcmRpbmF0ZSB3aXRoIG90 aGVyIElFVEYgV0cNCj4gPj4gc3VjaCBhcyBURUVQLCBTVUlUIGFuZCBTQUNNOyBhbmQgd29yayBp biB0aGUgY29tbXVuaXR5IHN1Y2ggYXMgVENHDQo+ID4+IGFuZCBGSURPIEFsbGlhbmNlLCBhcyBh cHByb3ByaWF0ZS4gIFRoZSBXRyB3aWxsIGFsc28gZXZhbHVhdGUgcHJpb3INCj4gPj4gd29yayBz dWNoIGFzIE5FQSBhbmQgcHJvcHJpZXRhcnkgYXR0ZXN0YXRpb24gdGVjaG5vbG9naWVzLg0KPiA+ DQo+ID4gTW9yZSByZWZpbmVkIGxhbmd1YWdlIC4uLg0KPiA+DQo+ID4gTkVXOg0KPiA+IFRoZSB3 b3JraW5nIGdyb3VwIHdpbGwgY29vcGVyYXRlIGFuZCBjb29yZGluYXRlIHdpdGggb3RoZXIgSUVU RiBXR3Mgc3VjaA0KPiBhcyBURUVQLCBTVUlUIGFuZCBTQUNNOyB3b3JrIHdpdGggb3JnYW5pemF0 aW9ucyBpbiB0aGUgY29tbXVuaXR5LCBzdWNoIGFzDQo+IFRDRywgQW5kcm9pZCBLZXlzdG9yZSBh bmQgRklETyBBbGxpYW5jZSwgYXMgYXBwcm9wcmlhdGUuICBUaGUgV0cgd2lsbCBhbHNvDQo+IGV2 YWx1YXRlIHByaW9yIHdvcmsgc3VjaCBhcyBORUEgYW5kIHByb3ByaWV0YXJ5IGF0dGVzdGF0aW9u IHRlY2hub2xvZ2llcy4NCj4gDQo+IOKAnEFuZHJvaWQgS2V5c3RvcmXigJ0gaXMgYW4gaW1wbGVt ZW50YXRpb24gbm90IGFuIG9yZ2FuaXphdGlvbi4gTWF5YmUgdGhpcz8NCj4gDQo+IExMLU5FVzoN Cj4gVGhlIHdvcmtpbmcgZ3JvdXAgd2lsbCBjb29wZXJhdGUgYW5kIGNvb3JkaW5hdGUgd2l0aCBv dGhlciBJRVRGIFdHcyBzdWNoDQo+IGFzIFRFRVAsIFNVSVQgYW5kIFNBQ007IHdvcmsgd2l0aCBv cmdhbml6YXRpb25zIGluIHRoZSBjb21tdW5pdHksIHN1Y2ggYXMNCj4gdGhlIFRDRyBhbmQgdGhl IEZJRE8gQWxsaWFuY2UsIGFzIGFwcHJvcHJpYXRlLiAgVGhlIFdHIHdpbGwgYWxzbyBldmFsdWF0 ZQ0KPiBwcmlvciB3b3JrIHN1Y2ggYXMgTkVBIGFuZCBwcm9wcmlldGFyeSBhdHRlc3RhdGlvbiB0 ZWNobm9sb2dpZXMgbGlrZSB0aGUNCj4gQW5kcm9pZCBLZXlzdG9yZS4NCg0KQ29uY3VyLiAgVGhp cyBpcyBiZXR0ZXIuDQoNClJvbWFuDQo= From nobody Thu Feb 7 12:25:59 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DC42B12F1AC; Thu, 7 Feb 2019 12:25:51 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KIgsD33VLt6c; Thu, 7 Feb 2019 12:25:50 -0800 (PST) Received: from tuna.sandelman.ca (tuna.sandelman.ca [IPv6:2607:f0b0:f:3:216:3eff:fe7c:d1f3]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3BC4812426A; Thu, 7 Feb 2019 12:25:50 -0800 (PST) Received: from sandelman.ca (unknown [IPv6:2607:f0b0:f:2:56b2:3ff:fe0b:d84]) by tuna.sandelman.ca (Postfix) with ESMTP id C8EB338273; Thu, 7 Feb 2019 15:22:48 -0500 (EST) Received: by sandelman.ca (Postfix, from userid 179) id 603352305; Thu, 7 Feb 2019 15:25:48 -0500 (EST) Received: from sandelman.ca (localhost [127.0.0.1]) by sandelman.ca (Postfix) with ESMTP id 5EADDAA4; Thu, 7 Feb 2019 15:25:48 -0500 (EST) From: Michael Richardson To: Alissa Cooper cc: "The IESG" , rats@ietf.org, rats-chairs@ietf.org In-Reply-To: <154955021480.31051.5673437272063081848.idtracker@ietfa.amsl.com> References: <154955021480.31051.5673437272063081848.idtracker@ietfa.amsl.com> X-Mailer: MH-E 8.6; nmh 1.7+dev; GNU Emacs 24.5.1 X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m Archived-At: Subject: Re: [Rats] Alissa Cooper's Block on charter-ietf-rats-00-00: (with BLOCK and COMMENT) X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Feb 2019 20:25:52 -0000 --=-=-= Content-Type: text/plain Alissa Cooper wrote: > Given that the data to be exchanged for remote attestation purposes > could be security-sensitive or could be used to fingerprint a device or > identify a user, I think the charter needs to explicitly state what the > WG's goals are for taking the protection of this data into account. There are two choices to protect this data: 1) transport encryption. I thought that we had ruled transport out of scope, but I guess it's still there as 4. "4. Standardize interoperable protocols to securely convey assertions/claims." I guess I'm thinking about SUIT. 2) object encryption. This would be cryptographically better, but I think that this would fail for all the same reasons that email encryption is not ubiquitous. (There are many other tradeoffs between each, but that's not for the charter) Given that point (4) is there, what else could we say in the charter about protecting the data? -- Michael Richardson , Sandelman Software Works -= IPv6 IoT consulting =- --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEEbsyLEzg/qUTA43uogItw+93Q3WUFAlxclEsACgkQgItw+93Q 3WWIdAf9FKg2AFJtK0Spbo61U2+jn05Pi76JPZC13XTtyUxTGygkDKEbgiRALD5X um/1q79IQTBu74kethkTVXYCXrB1Ogexg2k94iZhLCyYkwYtFID7k8vbE0Ou+KCg 7QFpTHqFCyANOwlquzpYEECRiogZxtGiWJnIVxmdpRu+0DI8T4DvK0kiAU28SLUP i6NpXiXbBStrKfDkmtWK/iHlToxOIrDdRcNNhD7kombpRmLDHJxclwZHT6qAcvoC jutiERltbr16rtcPFfvhqxzotO62BOzoLTcMXRIv7u5VmuQmvLVQfD5gVrgRJZ/T LQQa5dm9YaSICDsIIiewB0PPrY7JHg== =gGwB -----END PGP SIGNATURE----- --=-=-=-- From nobody Thu Feb 7 13:23:43 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D1FA7129C6A; Thu, 7 Feb 2019 13:23:35 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EYHlsrbJaxbB; Thu, 7 Feb 2019 13:23:34 -0800 (PST) Received: from tuna.sandelman.ca (tuna.sandelman.ca [IPv6:2607:f0b0:f:3:216:3eff:fe7c:d1f3]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E710C129A85; Thu, 7 Feb 2019 13:23:33 -0800 (PST) Received: from sandelman.ca (unknown [IPv6:2607:f0b0:f:2:56b2:3ff:fe0b:d84]) by tuna.sandelman.ca (Postfix) with ESMTP id 599F838273; Thu, 7 Feb 2019 16:20:32 -0500 (EST) Received: by sandelman.ca (Postfix, from userid 179) id 05E032305; Thu, 7 Feb 2019 16:23:32 -0500 (EST) Received: from sandelman.ca (localhost [127.0.0.1]) by sandelman.ca (Postfix) with ESMTP id 047ADD50; Thu, 7 Feb 2019 16:23:32 -0500 (EST) From: Michael Richardson To: Alissa Cooper cc: Roman Danyliw , "rats\@ietf.org" , IESG , "rats-chairs\@ietf.org" In-Reply-To: <0130EA1D-7809-4BC8-A64C-D07DC50576AB@cooperw.in> References: <154955058697.31121.7223894559382374179.idtracker@ietfa.amsl.com> <359EC4B99E040048A7131E0F4E113AFC01857B7DC9@marathon> <0130EA1D-7809-4BC8-A64C-D07DC50576AB@cooperw.in> X-Mailer: MH-E 8.6; nmh 1.7+dev; GNU Emacs 24.5.1 X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m Archived-At: Subject: Re: [Rats] Alissa Cooper's Block on charter-ietf-rats-00-00: (with BLOCK and COMMENT) X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Feb 2019 21:23:36 -0000 --=-=-= Content-Type: text/plain Alissa Cooper wrote: > Is there a particular reasoning for publishing these in the archival > series? Good question. I would like us to work on, and do a WG Consensus call on a use-case document. I think that it could then be brought in as an appendix to another document, or just left as an internet-draft. But, I think we need to have a live, working use-case document in order to be able to avoid the blind-people-and-elephant problem. (And I'm already working on a candidate document) -- Michael Richardson , Sandelman Software Works -= IPv6 IoT consulting =- --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEEbsyLEzg/qUTA43uogItw+93Q3WUFAlxcodMACgkQgItw+93Q 3WUtVAgAk/0dYvPKHEJdEvVxQXoumDIHXUee+Wtx7JevWkrUjtrNhxwFcaFkpiqZ 0x4DZsodLX+BQL3N7aa7OlSfKoUj+KzezavZWnH1arN0/u3Fb/qv3593Li3YceCa LWWhCB+zJxiceCRo55S/ekyqbCZQt+PtgIXVVwsbw+XX0JVRzUYwV7bYP27U+kUW Z04ethJZlr8l0ExhYUMJ9BbmpEe7eJMl52MsuXwyLQ3XSno7T5454K9C6XpdEltX gZWemVQe9h6yckI0126+J152iUgMN5FEit1mO7hRSBKbXEagyN8RpnnRt/K4g47Q mY6C3NmvLvo7A3T0mwG+hpfJmVXu3g== =LAWp -----END PGP SIGNATURE----- --=-=-=-- From nobody Thu Feb 7 14:06:44 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4BB6C130EF5 for ; Thu, 7 Feb 2019 14:06:40 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id X9brEijSkxuk for ; Thu, 7 Feb 2019 14:06:37 -0800 (PST) Received: from p3plsmtpa08-02.prod.phx3.secureserver.net (p3plsmtpa08-02.prod.phx3.secureserver.net [173.201.193.103]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AA121130ECD for ; Thu, 7 Feb 2019 14:06:37 -0800 (PST) Received: from [172.20.10.4] ([174.217.27.101]) by :SMTPAUTH: with ESMTPSA id rroZgYSOlbtsnrroagNYak; Thu, 07 Feb 2019 15:06:36 -0700 Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\)) From: Laurence Lundblade In-Reply-To: <13525.1549571148@localhost> Date: Thu, 7 Feb 2019 16:06:34 -0600 Cc: Alissa Cooper , rats@ietf.org, The IESG , rats-chairs@ietf.org Content-Transfer-Encoding: quoted-printable Message-Id: <2E756BF7-41C4-414D-8F3C-8E04EE9CEB92@island-resort.com> References: <154955021480.31051.5673437272063081848.idtracker@ietfa.amsl.com> <13525.1549571148@localhost> To: Michael Richardson X-Mailer: Apple Mail (2.3445.9.1) X-CMAE-Envelope: MS4wfEUdwstbn+qsTjMXo/2WVIvIyIz/uHzuJxy1eUgIom4kPjVmWe7pLF3Y53UotbbrVS3jfL6rF1e2hM2DYONSell1oPgFSxF5JrV9FXnUFRyVZ1hg3pGO 4GZaRaSK3eePtYWyCqWtv/orWEZjZ/nb+vbxTUaYFwTRGtWZB5OGAaHxuD64NSKEAc7Eh3MvzzslcsJ1yLOKLtyGLdRGhWDhs3hBDE8TwZ7k5LuaB8uG1glX KOAYoYq4N/mKwOT6fPGeDP8GFLi5qIWIS8Y1xzaUe+yXtodx9XOS7KluhG4qWpjt Archived-At: Subject: Re: [Rats] Alissa Cooper's Block on charter-ietf-rats-00-00: (with BLOCK and COMMENT) X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Feb 2019 22:06:43 -0000 Encryption solves some privacy issues, but not for use cases where the = recipient of the token is at issue for privacy. Also some recipients = (relying parties) just don=E2=80=99t want privacy-violating data in the = first place, often to meet regulatory requirements.=20 In that case the device can: A) not send privacy-violating claims B) some how make the data not privacy-violating, but this only works for = some claims The other issue is that per-device signing keys are inherently = privacy-violating because the recipient / relying party has to have the = public key to verify the signature. A solution is cryptography like = ECDAA. The main work here would be to define how to use EDAA with COSE. = I think it ends up largely orthogonal to the claim definition data. = ECDAA uses with COSE might have use outside of device attestation so it = should probably a separate document. LL > On Feb 7, 2019, at 2:25 PM, Michael Richardson = wrote: >=20 > Alissa Cooper wrote: >> Given that the data to be exchanged for remote attestation purposes >> could be security-sensitive or could be used to fingerprint a device = or >> identify a user, I think the charter needs to explicitly state what = the >> WG's goals are for taking the protection of this data into account. >=20 > There are two choices to protect this data: >=20 > 1) transport encryption. I thought that we had ruled transport out > of scope, but I guess it's still there as 4. > "4. Standardize interoperable protocols to securely convey > assertions/claims." > I guess I'm thinking about SUIT. >=20 > 2) object encryption. This would be cryptographically better, but > I think that this would fail for all the same reasons that email > encryption is not ubiquitous. >=20 > (There are many other tradeoffs between each, but that's not for the = charter) >=20 > Given that point (4) is there, what else could we say in the charter > about protecting the data? >=20 > -- > Michael Richardson , Sandelman Software Works > -=3D IPv6 IoT consulting =3D- >=20 >=20 >=20 > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats From nobody Thu Feb 7 18:35:49 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DFE5D130F1A for ; Thu, 7 Feb 2019 18:35:48 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cert.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id o-KlrkwVOV27 for ; Thu, 7 Feb 2019 18:35:46 -0800 (PST) Received: from veto.sei.cmu.edu (veto.sei.cmu.edu [147.72.252.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 36D7C130E25 for ; Thu, 7 Feb 2019 18:35:45 -0800 (PST) Received: from korb.sei.cmu.edu (korb.sei.cmu.edu [10.64.21.30]) by veto.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id x182ZgKo023069 for ; Thu, 7 Feb 2019 21:35:42 -0500 DKIM-Filter: OpenDKIM Filter v2.11.0 veto.sei.cmu.edu x182ZgKo023069 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cert.org; s=yc2bmwvrj62m; t=1549593342; bh=f+uYU14HNZNYtol3nzJa4mpE/1KaB5ta4HieoFT7MYA=; h=From:To:Subject:Date:From; b=rgFARKuLgIbuLCfqa1aj2bJePBgnqvVhIskKRM94XdSoEefRzdBOk2csLTigVoIQF 1KHbDrzfynxoKDjGf0EFFheqzLjBZu46//sQ8wNp3R4Mx1vUYMv0IJQxin7Fk6EiXO tbHPL9LPFLb4cbRGSAEANWy5YTm4CD3uTV+FQ7Rw= Received: from CASSINA.ad.sei.cmu.edu (cassina.ad.sei.cmu.edu [10.64.28.249]) by korb.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id x182Ze0j013190 for ; Thu, 7 Feb 2019 21:35:40 -0500 Received: from MARATHON.ad.sei.cmu.edu ([10.64.28.250]) by CASSINA.ad.sei.cmu.edu ([10.64.28.249]) with mapi id 14.03.0435.000; Thu, 7 Feb 2019 21:35:39 -0500 From: Roman Danyliw To: "rats@ietf.org" Thread-Topic: Complete charter language Revision #2 in response to IESG feedback Thread-Index: AdS/VnbZDdf8c9wsRXGVE7DdjWAe7g== Date: Fri, 8 Feb 2019 02:35:39 +0000 Message-ID: <359EC4B99E040048A7131E0F4E113AFC01857B9384@marathon> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.64.22.6] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: [Rats] Complete charter language Revision #2 in response to IESG feedback X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 08 Feb 2019 02:35:49 -0000 Hi! This note pulls together the proposed modifications suggested by Nancy and = Laurence all in one place. Roman [1] https://mailarchive.ietf.org/arch/msg/rats/o4X-xJ2DMdmehHml5F7nL4W9EYE [2] https://mailarchive.ietf.org/arch/msg/rats/c3n_mMVVAQpoelWJuaPuQtlv8vY =3D=3D[ snip]=3D=3D Introduction =20 Relying parties require evidence about the trustworthiness of remote system= components [RFC4949] they interact with. Remote attestation procedures (RA= TS) enable relying parties to establish a level of confidence in the trustw= orthiness of remote system components by creating and processing attestatio= n evidence. A relying party can then decide whether to consider a remote sy= stem component trustworthy or not. =20 To improve the confidence in a system component's trustworthiness a relying= party may require evidence about: * system component identity, * composition of system components, including nested components, * roots of trust, * assertion/claim origination or provenance, * manufacturing origin, * system component integrity, * system component configuration, * operational state and measurements of steps which led to the operational = state, or * other factors that could influence trust decisions =20 While domain-specific attestation mechanisms such as Trusted Computing Grou= p (TCG) Trusted Platform Module (TPM)/Trusted Software Stack (TSS), Fast Id= entity Online (FIDO) Alliance attestation and Android Keystore attestation = exist, there is no interoperable way to create and process attestation evid= ence to make determinations about system components among relying parties o= f different manufactures and origins.=20 =20 Goals =20 This WG will standardize formats for describing assertions/claims about sys= tem components and associated evidence; and procedures and protocols to con= vey these assertions/claims to relying parties. Given the security and pri= vacy sensitive nature of these assertions/claims, the WG will specify appro= aches to protect this exchanged data. While a relying party may use refere= nce, known or expected values or thresholds to assess the assertions/claims= , the procedures for this activity are out of scope for this WG. =20 The working group will cooperate and coordinate with other IETF WGs such as= TEEP, SUIT and SACM; work with organizations in the community, such as the= TCG and the FIDO Alliance, as appropriate. The WG will also evaluate prio= r work such as NEA and proprietary attestation technologies like the Androi= d Keystore. =20 Program of Work =20 The working group will develop standards supporting interoperable remote at= testation procedures for system components. The main deliverables are as fo= llows: =20 1. Specify use cases for remote attestation. =20 2. Specify terminology and architecture that enable attestation techniques.= The architecture may include a system security model for the signing key = material and involve at least the system component, system component provid= er, and the relying authority. =20 3. Standardize an information model for assertions/claims which provide inf= ormation about system components characteristics scoped by the specified us= e-cases. =20 4. Standardize data models that implements and secures the defined informat= ion model (e.g., CBOR Web Token structures [RFC8392], JSON Web Token struct= ures [RFC7519]). =20 5. Standardize interoperable protocols to securely convey assertions/claims= . From nobody Fri Feb 15 15:03:38 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6252B12785F; Fri, 15 Feb 2019 15:03:36 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mit.edu Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ghujRzsdBGgJ; Fri, 15 Feb 2019 15:03:34 -0800 (PST) Received: from NAM03-CO1-obe.outbound.protection.outlook.com (mail-eopbgr790118.outbound.protection.outlook.com [40.107.79.118]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4F72712F18C; Fri, 15 Feb 2019 15:03:32 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mit.edu; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=yuBMJTv6cWHda+ar00oDS4UV4A2RHeuZhYsKZ1FPgQM=; b=eJTw2Wnu1jomVExOKWsuT0Qg5lYHvOriGFl9XGFDdSjO4g7b7HP/TykVjw3YUORmuwf0ipb0mAdTj89tdxF6Kaz+4Bi+618hc7H0fKbvAyGZY4AohDq5gmLMOafdTSmEJmdEDTfRsuQPxpkvJmmF+1E85E7LfCv4oTRMYrnv7Qg= Received: from CY4PR0101CA0014.prod.exchangelabs.com (2603:10b6:910:3c::27) by DM6PR01MB4859.prod.exchangelabs.com (2603:10b6:5:6d::24) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1622.16; Fri, 15 Feb 2019 23:03:30 +0000 Received: from CO1NAM03FT016.eop-NAM03.prod.protection.outlook.com (2a01:111:f400:7e48::202) by CY4PR0101CA0014.outlook.office365.com (2603:10b6:910:3c::27) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1622.16 via Frontend Transport; Fri, 15 Feb 2019 23:03:30 +0000 Authentication-Results: spf=pass (sender IP is 18.9.28.11) smtp.mailfrom=mit.edu; ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=bestguesspass action=none header.from=mit.edu; Received-SPF: Pass (protection.outlook.com: domain of mit.edu designates 18.9.28.11 as permitted sender) receiver=protection.outlook.com; client-ip=18.9.28.11; helo=outgoing.mit.edu; Received: from outgoing.mit.edu (18.9.28.11) by CO1NAM03FT016.mail.protection.outlook.com (10.152.80.170) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1580.10 via Frontend Transport; Fri, 15 Feb 2019 23:03:29 +0000 Received: from kduck.mit.edu (24-107-191-124.dhcp.stls.mo.charter.com [24.107.191.124]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.14.7/8.12.4) with ESMTP id x1FN3L3m022386 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Fri, 15 Feb 2019 18:03:24 -0500 Date: Fri, 15 Feb 2019 17:03:21 -0600 From: Benjamin Kaduk To: Michael Richardson CC: Alissa Cooper , Roman Danyliw , "rats@ietf.org" , IESG , "rats-chairs@ietf.org" Message-ID: <20190215230320.GA89393@kduck.mit.edu> References: <154955058697.31121.7223894559382374179.idtracker@ietfa.amsl.com> <359EC4B99E040048A7131E0F4E113AFC01857B7DC9@marathon> <0130EA1D-7809-4BC8-A64C-D07DC50576AB@cooperw.in> <25857.1549574612@localhost> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Disposition: inline In-Reply-To: <25857.1549574612@localhost> User-Agent: Mutt/1.10.1 (2018-07-13) X-EOPAttributedMessage: 0 X-Forefront-Antispam-Report: CIP:18.9.28.11; IPV:CAL; SCL:-1; CTRY:US; EFV:NLI; SFV:NSPM; SFS:(10019020)(136003)(346002)(39860400002)(396003)(376002)(2980300002)(199004)(189003)(51444003)(66574012)(336012)(50466002)(16586007)(356004)(6246003)(55016002)(26826003)(478600001)(4326008)(316002)(58126008)(86362001)(23726003)(54906003)(229853002)(106002)(46406003)(786003)(1076003)(93886005)(956004)(426003)(33656002)(446003)(106466001)(97756001)(6666004)(36906005)(486006)(104016004)(8936002)(76176011)(476003)(14444005)(246002)(88552002)(2906002)(305945005)(126002)(8676002)(186003)(7696005)(26005)(11346002)(53416004)(75432002)(47776003)(5660300002)(18370500001); DIR:OUT; SFP:1102; SCL:1; SRVR:DM6PR01MB4859; H:outgoing.mit.edu; FPR:; SPF:Pass; LANG:en; PTR:outgoing-auth-1.mit.edu; A:1; MX:1; X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-Correlation-Id: a380a937-0fc6-446f-791a-08d69399cd1d X-Microsoft-Antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600110)(711020)(4605077)(4608076)(4709027)(2017052603328)(7153060); SRVR:DM6PR01MB4859; X-MS-TrafficTypeDiagnostic: DM6PR01MB4859: X-Microsoft-Exchange-Diagnostics: 1; DM6PR01MB4859; 20:BQWKcVQvXbVOdQD3mDW9W7smpO/cIP9FGxASoA68qqiXOW4mh/l0YYlewjVXPKEAZ+2pfyEyt2rbs+XB3Kd/DNloHvY0vsDw7vnJ3Yhh+Vw3KNXf/H1FEIUqDn6+Md00zY7o+fjE5WjkJmzF8FaQp2dIbbK356E5Uty+XZGuBjNCLECqoaFsCS47kNJ8+X+0GjIJ2DEl0fOHWHkRO89IjWBpxRjJc40DPATxJGxiY7J/YezGCEYfAL3Qii8NV8CURxM75RkP4iXxNcsIhXJT0Ywb84AQqei60+AHPvy5eQ3j8kcdt/MjPu3KQGMUO28F6RhXre2ZMPIZ87j2ag8SmQYiwhglrbvfUJvncfr7/A6FfMm7CGKZpE3jh+Ah4mDV+OUgT53927ucpoyYzGUPmsypge3TT+oMFSA43Xd/6PDk0yjtSQ/B+BAJiJUc1aI3tHDLFIXuBZEjgHIc8X54ojuHPd1H9Xry8u5AAIKuzt0oUoQ/8oOL358REAmhkGpxrBL6FpsMem0908tFs2KjLOeOkrFRYsi/aLaySWt7+mepxd9MpKAOBkwQ4NIWwMW+iArUHXVqakGeZ3wYBTRUFVnRXYTixH5iPMQLqh2Ky+c= X-Microsoft-Antispam-PRVS: X-Forefront-PRVS: 09497C15EB X-Microsoft-Exchange-Diagnostics: =?us-ascii?Q?1; DM6PR01MB4859; 23:P7MFzF/qcioY3g+MaAOO2kehd8HpJnm7bDf09Bk8v?= =?us-ascii?Q?9Iu51qk/kXs3JcZ5decDou/r7y007wdw+C1GluagAnkgqnqhlhDfl2804QM9?= =?us-ascii?Q?TfaDBRzY13iHhL1ILf2u52sDP7q7y+fuhlFnXjTjkyeyd4ibKXR6pa/JFJq6?= =?us-ascii?Q?e/GaCs1jptzGxNaowFNNvxXrmbmzomtYta4+MsQRx/9l6OWf8NG4T2BsiKts?= =?us-ascii?Q?XrwJQMgM9miKUN1m6ErTnwWchCuy6p6rnSxX7iMhJnVSWzJcYzPjwZvoOi+7?= =?us-ascii?Q?zk4LtyHZp3e8+dkGSQyNhc6jgiptwk+RNpWOfHQMGEXXBSgGctWWxvovANG2?= =?us-ascii?Q?+MEamB3pHXCo4inpDyBwR4si+x706Us4436aa5Zzu/HgtFjPds6zlZ1GMqLh?= =?us-ascii?Q?n9MnUllHSw9UeBMvflxsYwz6R7aAktUIbBUXllqzSMUfXMR6MNW1YVi6Bq37?= =?us-ascii?Q?Flr9duX004sALIaIYooAOCTtkaZLjZULtjNhp7nk7Frje1QUDkFHKZ5jzss1?= =?us-ascii?Q?gV6lBquta0B+QdWQdeH/lvdx2z36xRB0DrLue1bXjwLR1FaaU68OjAW5sMNf?= =?us-ascii?Q?191cCi5c4slLyQinx6jqARnEcigXokxQOy+zt9C9GEVdSpdFb22vv1D1nPoV?= =?us-ascii?Q?BKkdpAnDo0oUAW/tSJ30GLxbmTCOzznhB8PSzhs0CFxQJPCT5+N0rVxFvQh5?= =?us-ascii?Q?YJcfWFEkvY7Sa0FV63pmIxVTNRvYjn7D7C8APFIM7r6jwBwV39moAr7RS1wo?= =?us-ascii?Q?TBq5C/MtcEXW7ozhgDi57BZkive8vV3McmYtO63w3dqdRUL9Sus+pzBWTMpH?= =?us-ascii?Q?U4ubBdVxFzZ9nMqbagzxXxy/Kur7u35zjsIfCqSEfR2iWCDDGQwuVHxfJIBg?= =?us-ascii?Q?sJlw8znG6nXc76yX/Oz/3nmTaGub5NurO6tT77PNbiPzjaKLdAqqZHJ1E6Os?= =?us-ascii?Q?qgENOPQUUkoMJV8pJxVOm+2K0a3OfZptmhww21h76PxNvdE6PqlfcK93Z9UD?= =?us-ascii?Q?YzxtLa/QWETv5qWXEZKOWf/937YZA9kXPmFfSPr1WODv45IStbT9d/SvCnA/?= =?us-ascii?Q?IBGsuaiZyJfOepXNHmCtzlGhaEHxz2xLGEsfNw28hZd1fP5CcIEdFCxmFfqG?= =?us-ascii?Q?mVSFvSsu2axJsnOgA9zDtIg6/wwrwPpyvhGui/W/FYNwhif/VYs6ahQhg8WC?= =?us-ascii?Q?kpt6lxKdIFxFyY9oD/KE1b1T7qY2GH0/T4yH7XqWBSpS8me6dQJmLSi0hwPq?= =?us-ascii?Q?rHRHl11yLBcTc5OYm+QYFDUwxq4Fd4FxX7OnCphORqp4O0SwoNEH+aG+gv2B?= =?us-ascii?B?UT09?= X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam-Message-Info: zG7atNyabEI2zvnT44wO4ehC7qzqRoPDjaYgmHX4ci/A10xV6Iv1q/iIvF+Z954g0hUFVi+Bb/1GBDI+IjIv6vd/bdnJwKJjXO7lx+JUW0QUKd23mMFU62pU6OfJSxZt3O/5/mUyzOnJAdwu5YDItw9zCPVYuOwd379tqxgXcwToAbnOA2xJCx5vKQKUBzSF6AFdoRCG/aIKymPp5AR8RnMv4cniR0/YcFpNc2aE+baZyqq+PQCM8jO/oPF118KjKz+UpAmJZtGGE0/5Ku5mUpAC7j+wV5qAN7BcoyCubzhz6yKF4i1/hYNv40X8Jn2MvGWXcArtHb1dDJkVSN1F6Bl9p04L60dlvcIdGUQO7IPafMxEMmRdLNNy2HcSuInsBsa7wAanhhUdWt9v/V0afoD0/3qkM2bBBMgC4HFv6mM= X-OriginatorOrg: mit.edu X-MS-Exchange-CrossTenant-OriginalArrivalTime: 15 Feb 2019 23:03:29.5640 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: a380a937-0fc6-446f-791a-08d69399cd1d X-MS-Exchange-CrossTenant-Id: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=64afd9ba-0ecf-4acf-bc36-935f6235ba8b; Ip=[18.9.28.11]; Helo=[outgoing.mit.edu] X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM6PR01MB4859 Archived-At: Subject: Re: [Rats] Alissa Cooper's Block on charter-ietf-rats-00-00: (with BLOCK and COMMENT) X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 15 Feb 2019 23:03:36 -0000 On Thu, Feb 07, 2019 at 04:23:32PM -0500, Michael Richardson wrote: > > Alissa Cooper wrote: > > Is there a particular reasoning for publishing these in the archival > > series? > > Good question. > I would like us to work on, and do a WG Consensus call on a use-case document. > I think that it could then be brought in as an appendix to another document, > or just left as an internet-draft. > > But, I think we need to have a live, working use-case document in order > to be able to avoid the blind-people-and-elephant problem. Of course! The question comes up largely because there have been several recent cases where a use-cases document is sent to the IESG and the IESG is uncomfortable publishing the document in the RFC series, owing to an unclear quantity of archival value. (To date, they have all been published.) In some cases, the publication of the use-cases document has been an explicit item in the charter, and I think the IESG is looking to make a determination at charter time whether future use-cases documents are expected to have archival value. So this could be something like: OLD: 1. Specify use cases for remote attestation. NEW: 1. Specify use cases for remote attestation (to document and achieve WG consensus but not expected to be published as an RFC). I will put this in my local working copy, but of course it can change back or change in other ways throughout the external review process. > (And I'm already working on a candidate document) Excellent! Thanks, Benjamin From nobody Fri Feb 15 15:21:11 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AED2112D4EA; Fri, 15 Feb 2019 15:21:09 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mit.edu Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tna4oo3Y2rbx; Fri, 15 Feb 2019 15:21:07 -0800 (PST) Received: from NAM04-SN1-obe.outbound.protection.outlook.com (mail-eopbgr700097.outbound.protection.outlook.com [40.107.70.97]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C8AF112785F; Fri, 15 Feb 2019 15:21:06 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mit.edu; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Poi0ZTLoo5R+cZhWdyvJ2nY6Ib00FS1mWPaXsne1PA0=; b=uarOPhu1LQiPFX5qpgX4XVGhfQElii5xv3vNZUQQQuF5lI4vF+bNlPUlkJ9cDkAbJDzspfEHGDJqvtEUhANMbymNWOEiD7mFaCHhQ8OjX792RFA3mVdF/Rgz0lAL1EwmqrSbb780UUDtGx7Bj8ME/X0oWmu+5i7i4NcC4NljCsQ= Received: from SN6PR0102CA0026.prod.exchangelabs.com (2603:10b6:805:1::39) by BN8SPR01MB0007.prod.exchangelabs.com (2603:10b6:408:6b::29) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1622.16; Fri, 15 Feb 2019 23:21:04 +0000 Received: from DM3NAM03FT050.eop-NAM03.prod.protection.outlook.com (2a01:111:f400:7e49::205) by SN6PR0102CA0026.outlook.office365.com (2603:10b6:805:1::39) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.1622.16 via Frontend Transport; Fri, 15 Feb 2019 23:21:04 +0000 Authentication-Results: spf=pass (sender IP is 18.9.28.11) smtp.mailfrom=mit.edu; ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=bestguesspass action=none header.from=mit.edu; Received-SPF: Pass (protection.outlook.com: domain of mit.edu designates 18.9.28.11 as permitted sender) receiver=protection.outlook.com; client-ip=18.9.28.11; helo=outgoing.mit.edu; Received: from outgoing.mit.edu (18.9.28.11) by DM3NAM03FT050.mail.protection.outlook.com (10.152.82.252) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.1580.10 via Frontend Transport; Fri, 15 Feb 2019 23:21:04 +0000 Received: from kduck.mit.edu (24-107-191-124.dhcp.stls.mo.charter.com [24.107.191.124]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.14.7/8.12.4) with ESMTP id x1FNL0Ya027431 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Fri, 15 Feb 2019 18:21:02 -0500 Date: Fri, 15 Feb 2019 17:21:00 -0600 From: Benjamin Kaduk To: Martin Vigoureux CC: The IESG , , Message-ID: <20190215232059.GC89393@kduck.mit.edu> References: <154952854536.23379.9616689187634176854.idtracker@ietfa.amsl.com> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Disposition: inline In-Reply-To: <154952854536.23379.9616689187634176854.idtracker@ietfa.amsl.com> User-Agent: Mutt/1.10.1 (2018-07-13) X-EOPAttributedMessage: 0 X-Forefront-Antispam-Report: CIP:18.9.28.11; IPV:CAL; SCL:-1; CTRY:US; EFV:NLI; SFV:NSPM; SFS:(10019020)(346002)(376002)(39860400002)(136003)(396003)(2980300002)(51914003)(189003)(199004)(88552002)(26005)(14444005)(966005)(11346002)(446003)(23726003)(336012)(486006)(186003)(75432002)(426003)(305945005)(86362001)(478600001)(26826003)(5660300002)(97756001)(6306002)(8676002)(8936002)(4326008)(55016002)(246002)(104016004)(50466002)(786003)(356004)(6246003)(956004)(47776003)(229853002)(53416004)(46406003)(6916009)(126002)(106002)(36906005)(106466001)(54906003)(33656002)(476003)(16586007)(76176011)(58126008)(316002)(2906002)(1076003)(7696005)(18370500001); DIR:OUT; SFP:1102; SCL:1; SRVR:BN8SPR01MB0007; H:outgoing.mit.edu; FPR:; SPF:Pass; LANG:en; PTR:outgoing-auth-1.mit.edu; MX:1; A:1; X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-Correlation-Id: 21f56c42-28f5-42f0-471e-08d6939c4193 X-Microsoft-Antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(5600110)(711020)(4605077)(4608076)(4709027)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(2017052603328)(7153060); SRVR:BN8SPR01MB0007; X-MS-TrafficTypeDiagnostic: BN8SPR01MB0007: X-MS-Exchange-PUrlCount: 1 X-Microsoft-Exchange-Diagnostics: 1; BN8SPR01MB0007; 20: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 X-Microsoft-Antispam-PRVS: X-Forefront-PRVS: 09497C15EB X-Microsoft-Exchange-Diagnostics: =?us-ascii?Q?1; BN8SPR01MB0007; 23:do2GUiomIXdxmvj4DLRhDgDgZIe8hHAfvKQgMrHw?= =?us-ascii?Q?vSs0KMW7uWdcyc+s6n+3l9MIPmP2ZIbOJyuIRddvquUlLnI4Qro2fGYGS0Vk?= =?us-ascii?Q?YJS8S2W+gtMXU3Gzku/F9BYbSeM1xHD/sSSCv2ctQIfnqbzoxsUkPyNF8d4V?= =?us-ascii?Q?iBC4b14v5wjXH4LIxEs6IBNs4Awk6r8sOKgLjeAaKTcl4iZLM2eEkDL+5fiT?= =?us-ascii?Q?2jXxfjic59TSEZq/0eSjII1nyvQUi9iD6PaKPDUbJHwzlsV0iWpkNnokAajq?= =?us-ascii?Q?RAZOpNOX8TC5OXCn1geqsgkrubTlpEFYAJDxGuAKlB3eL98+X7uj9ko8WKpe?= =?us-ascii?Q?bsyUPs92W+yP+8fH8NnN9t+nFg+r0CiSB7hiQIzSwqd6YqpY2jLGvS5oSLCp?= =?us-ascii?Q?mgixbvWsI5KtcgqP5TAym30re8Dfc71C4+AZB/2iZvE2e6rb53ZdNSBj+1Mf?= =?us-ascii?Q?q0xCMRziaLEmnL2+mSjRsRZOV7kUnRqR/v8VE4OpTD0oef0K8Twup2rlrwZA?= =?us-ascii?Q?XISIw+itQbzQOLDj5VpySvU6Ogn3+Vp0JHmA0UwddQr5DThmMLxEBIoNyA/8?= =?us-ascii?Q?/ouTlcTu9sLCSvh+nQjQOcU7bhUSHCedahXHuFtdelnyGSQtAt2gB/egdWKT?= =?us-ascii?Q?IZOW6CeEot3v1IbUVTdPobKiFoseNmJ7rqFt8j0S0qCuSh6Gl2BbxZnU2u34?= =?us-ascii?Q?h//fywsr39WbijjdZ5dxeJmhNNnOzbcPR91sX0h9RQGl++/F6kvLorBJFNHD?= =?us-ascii?Q?1KTduQV7OAnARV9bE3WgcmVPhsxfHRGIijDFPBWhS77QoZ8RwPgCCJeFXlOg?= =?us-ascii?Q?lO9lzAJgw7ixlwaBE+/bM8NiNmJeGvthG6NRXomRbiqTNWoxoSXhfWDG4bNL?= =?us-ascii?Q?ojMDnNH2QF58egYJc/vKJ6wJ+einMPnQwDjWoH/jlCnpHlR0/ZwjUcAg/XDr?= =?us-ascii?Q?vxFgIsH9D+S8TiKm/8ZZtscyS7pkCfEqiptmddgB3FsXhZHbp1KsG19KzP42?= =?us-ascii?Q?tQ6RN5BF7/a9epWOEDo/7vTsMcUNSVwsWYA1LptjuV5vPTkNWtYTAQO7rf2a?= =?us-ascii?Q?7t98bfKw/Bkrs4csfjQ5/toP/2iNzrLsuwVEGDFErSsUHSOG//UAOT7xnRVi?= =?us-ascii?Q?jI8qDOiBmZ8XyAUvKvcilkdoPXXoyd41dKgfsgJ970+z6tOWChVyX9VHrxDL?= =?us-ascii?Q?P0c/1imSspppR8kjpWT62bqUeCS3QYhGQQNcWuGxDJoAjdlfytW57MA9a2/k?= =?us-ascii?Q?UqByIEHMSQLDiMzbri9f4ZAgLLZ+PjSd8qxdRrl54IcglcTv+OEd0WPPEVBP?= =?us-ascii?Q?cw=3D=3D?= X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam-Message-Info: FaT28RxWnoLhLAOBMO3jSK8zI/GZcJ6RGnom/7iAHJ3+DW0LwuCsX+TAyIZ3Cc7gPEgcDx9p0z847+IB1BbEglifgZtHl924RgrWqwzaV85O9h40P/tkyx5s32d+vIEX6w33o/CR1NoOYFrA9dgWFdib4k+UMaR9csMeNMUlAtoghCMd1uMkYHhNTNMsL8Su0FgNb9iBKXOs32mtqXjXxzBwjC4xaAvk0sLg+sAX2vMt3WlwXOkxYJKyMxTUcDVgx9v/kikG4eZPMzfUi8LJqE1rqA9WmqA1GsNrdTU65CrwEOCw5obcem5F2EtFDpjaQmkkZf15hob+L8dpho/67Te7bkM1lejze5pFlNMMb7v6MVM7xNpaQt/2kFNGVoq6oe0FCSCgch7B4ntJq8TxbDDFnXyK+cySNmsJryTUCnU= X-OriginatorOrg: mit.edu X-MS-Exchange-CrossTenant-OriginalArrivalTime: 15 Feb 2019 23:21:04.0183 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 21f56c42-28f5-42f0-471e-08d6939c4193 X-MS-Exchange-CrossTenant-Id: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=64afd9ba-0ecf-4acf-bc36-935f6235ba8b; Ip=[18.9.28.11]; Helo=[outgoing.mit.edu] X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN8SPR01MB0007 Archived-At: Subject: Re: [Rats] Martin Vigoureux's No Objection on charter-ietf-rats-00-00: (with COMMENT) X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 15 Feb 2019 23:21:10 -0000 On Thu, Feb 07, 2019 at 12:35:45AM -0800, Martin Vigoureux wrote: > Martin Vigoureux has entered the following ballot position for > charter-ietf-rats-00-00: No Objection > > When responding, please keep the subject line intact and reply to all > email addresses included in the To and CC lines. (Feel free to cut this > introductory paragraph, however.) > > > > The document, along with other ballot positions, can be found here: > https://datatracker.ietf.org/doc/charter-ietf-rats/ > > > > ---------------------------------------------------------------------- > COMMENT: > ---------------------------------------------------------------------- > > Hello, > > I mostly have questions for clarifications. Thank you. > > Relying parties require evidence about the trustworthiness of remote system > components [RFC4949] they interact with. Remote attestation procedures (RATS) > enable relying parties to establish a level of confidence in the > trustworthiness of remote system components by creating and processing > attestation evidence. > I'm not a native English reader, but this sentence gives me the impression that > the relying parties will create the attestation evidence. > Is that the case? My limited understanding of the topic makes me think that the > remote system will create the attestation and the relying parties will process > it. That is a keen observation and correct inference, thank you! My current local copy has "Remote attestation procedures (RATS) enable relying parties to establish a level of confidence in the trustworthiness of remote system components through the creation of attestation evidence by remote system components and a processing chain towards the relying party." (further wordsmithing welcome). > While a relying party may use reference values to assess the > assertions/claims the procedures for this activity are out of scope for this > WG. > I can understand why, but I would also see some value in having a document > which would cover this. The intent is that this is out of scope for the initial effort but it is hoped that we can address this eventually. So I think I should add "(without rechartering)". > About the "proprietary attestation technologies", are these publicly > available/accessible? (similar to Ben's question) I assume that they would need to have some level of public visibility in order for the WG to be able to examine them. I don't know if we need to explicitly restate that "any technologies adopted by the WG need to be consistent with the open standards process of BCP 9". > The architecture may include a system security model for the signing key > material and involve at least the system component, system component > provider, and the relying authority. > Does that imply new work or is it just about reusing what may already exist? > But I see Adam had a similar question. My understanding is that the intent is to assume as a prerequisite that there is key material available and a way for the relying party to verify its provenance. This need not be a PKI and could be a manufacturer-brokered lookup, and I expect that the varied use cases will end up requiring different stories for key material certification. We can talk a bit more in Adam's ballot thread, but I would characterize this as "not intending to establish a new PKI". Thanks for the good comments, Benjamin From nobody Fri Feb 15 15:27:44 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8B99713113C; Fri, 15 Feb 2019 15:27:40 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mit.edu Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zoZADXzmJKjn; Fri, 15 Feb 2019 15:27:38 -0800 (PST) Received: from NAM05-BY2-obe.outbound.protection.outlook.com (mail-eopbgr710103.outbound.protection.outlook.com [40.107.71.103]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EB01D12F18C; Fri, 15 Feb 2019 15:27:37 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mit.edu; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=OE5MXP2TOt8Qz9oG9WO5Jk4CBDlzG/z9tD9Jj1bjSIo=; b=s+cbNxP9GtWwWtZ/vZfSGWXaq/vX4USRDjnF/1vAB8K0WYTqnMHenMrExvYigEITG7V1FuuXUdr5nLOYQWIsM9LjG33gG3yhR9EtvCbJ4ZH/wedd9FgNAqEQlGRk4Xmtg8CFhZ/nDymkfWFxk6Nvvh/6TMyHDveYN1fu+Bh8pkY= Received: from BN6PR0101CA0010.prod.exchangelabs.com (2603:10b6:405:2a::23) by DM5PR01MB3289.prod.exchangelabs.com (2603:10b6:3:fd::21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1622.19; Fri, 15 Feb 2019 23:27:34 +0000 Received: from BY2NAM03FT021.eop-NAM03.prod.protection.outlook.com (2a01:111:f400:7e4a::202) by BN6PR0101CA0010.outlook.office365.com (2603:10b6:405:2a::23) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.1622.16 via Frontend Transport; Fri, 15 Feb 2019 23:27:34 +0000 Authentication-Results: spf=pass (sender IP is 18.9.28.11) smtp.mailfrom=mit.edu; ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=bestguesspass action=none header.from=mit.edu; Received-SPF: Pass (protection.outlook.com: domain of mit.edu designates 18.9.28.11 as permitted sender) receiver=protection.outlook.com; client-ip=18.9.28.11; helo=outgoing.mit.edu; Received: from outgoing.mit.edu (18.9.28.11) by BY2NAM03FT021.mail.protection.outlook.com (10.152.84.222) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.1580.10 via Frontend Transport; Fri, 15 Feb 2019 23:27:33 +0000 Received: from kduck.mit.edu (24-107-191-124.dhcp.stls.mo.charter.com [24.107.191.124]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.14.7/8.12.4) with ESMTP id x1FNRTIX029375 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Fri, 15 Feb 2019 18:27:32 -0500 Date: Fri, 15 Feb 2019 17:27:29 -0600 From: Benjamin Kaduk To: Alexey Melnikov CC: The IESG , , Message-ID: <20190215232729.GD89393@kduck.mit.edu> References: <154945232995.31197.5295482409361060517.idtracker@ietfa.amsl.com> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Disposition: inline In-Reply-To: <154945232995.31197.5295482409361060517.idtracker@ietfa.amsl.com> User-Agent: Mutt/1.10.1 (2018-07-13) X-EOPAttributedMessage: 0 X-Forefront-Antispam-Report: CIP:18.9.28.11; IPV:CAL; SCL:-1; CTRY:US; EFV:NLI; SFV:NSPM; SFS:(10019020)(346002)(39860400002)(376002)(396003)(136003)(2980300002)(189003)(199004)(86362001)(106466001)(186003)(104016004)(26005)(446003)(11346002)(426003)(4326008)(8676002)(47776003)(336012)(97756001)(966005)(246002)(54906003)(6916009)(50466002)(2906002)(88552002)(5660300002)(1076003)(58126008)(36906005)(16586007)(786003)(316002)(956004)(476003)(126002)(486006)(356004)(6666004)(55016002)(6306002)(229853002)(7696005)(33656002)(6246003)(76176011)(478600001)(53416004)(23726003)(46406003)(106002)(305945005)(26826003)(75432002)(8936002)(18370500001); DIR:OUT; SFP:1102; SCL:1; SRVR:DM5PR01MB3289; H:outgoing.mit.edu; FPR:; SPF:Pass; LANG:en; PTR:outgoing-auth-1.mit.edu; MX:1; A:1; X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-Correlation-Id: 8daa3449-84fc-4054-ce74-08d6939d29e7 X-Microsoft-Antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(5600110)(711020)(4605077)(4608076)(4709027)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(2017052603328)(7153060); SRVR:DM5PR01MB3289; X-MS-TrafficTypeDiagnostic: DM5PR01MB3289: X-MS-Exchange-PUrlCount: 1 X-Microsoft-Exchange-Diagnostics: 1; DM5PR01MB3289; 20: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 X-Microsoft-Antispam-PRVS: X-Forefront-PRVS: 09497C15EB X-Microsoft-Exchange-Diagnostics: =?us-ascii?Q?1; DM5PR01MB3289; 23:m/MqXBTAlr0bqaSYdRD/XfIYbtpwOVKqq3gxyZUzX?= =?us-ascii?Q?haaVf/7GUudS7iZhIxyrMrWw7MFpZSqRWX72vhLD+DYZSmfB3Yenz5PaAMoz?= =?us-ascii?Q?m9UlopNvK+8BfkZ6p1sLxT4ux3i6RCdLECJxLIulUBVLk1YgFT7CtlF+bC0J?= =?us-ascii?Q?6CgMaYoKOB7qygg1Ti8I5SFUNwMjquhVDSg/RqvGhzVUX+IkVJkzW84I6Bnc?= =?us-ascii?Q?sLpiDanQFx0wD3IvpHO1TEYqdCAcVKDq4wiFgmLONH4nt5fmI6wB541Io9Q9?= =?us-ascii?Q?OPvQOpdULa6NOzLOgaDnSjVqbJkDulHMPtYc4RdAB/0E40HCrXPQsdCZzMYr?= =?us-ascii?Q?WLS8jV8xOgy3eq6egvUPiMfAOtMVecm9ZjPQ9AUglKlSWCdf6tpIaL5UJj+9?= =?us-ascii?Q?MRqT00D4nwoDmi6su6wO2rkoaPnDShyZjAiI9nNV2xxb+YVvmuzczt+oQU8/?= =?us-ascii?Q?cWTVqn1UpXbLltRav3WNefPZ8qim0xjEp1UeCp6898uFqcFFneOf7JgopNPL?= =?us-ascii?Q?Js3ybsNBNWA67qT8XRvPymGF7c/wAsTEPK7PEXGjHWR5klVklUhkZ163/2ue?= =?us-ascii?Q?W2N1nqBAGjXbrjzWmiWF1MAvB4cz5TCNHWJa0mRLHplqoqPEtaE3gwLw33sX?= =?us-ascii?Q?fDcbpseqleftVKsINuYYalBry96LMTxxH/KHqC+yoBGkxVlQ0co6hinggS+1?= =?us-ascii?Q?9GxdyoV+e4wQXctrrdkXTTs0PVZlVqtCx7wS1ADjS4B7BzP9t9BR/b7pSacB?= =?us-ascii?Q?gDSceplauIFd2jBclvgUGYPf41MuOXc58iE+AvuS1q8BuFriuTUoX9ROxNAi?= =?us-ascii?Q?8uQHnu1gBPjkpWtbICE5d5DHGD4PuJt7SjpPWBUVtW63/IPO4HKGfMRRKdub?= =?us-ascii?Q?6NdDWB/HvTkEBzYSrBR9LoYNsoJ6a2s8rAjuFA/YJCauzJVX7Mb6eTFHHn1E?= =?us-ascii?Q?3eWhw8W1n5n5LSYmV9tyJvO2zpbWqZHqJq5M7h7Xf69LKvzKtvuvO0TIefBN?= =?us-ascii?Q?8+BIrEHHuNTJWVj5dw2w8pdlOyWAGONA7LRcjI/EIT1W+T1IQuttE1nJ7uQB?= =?us-ascii?Q?TZYr6lkF/qcnptFjJmJz4DRtc4X78JAHKJS4DE217ymfoJEc2+/gnDOIoEaZ?= =?us-ascii?Q?u4fEYKxO9LxJJglNo3NCL1jYNOXfGBFN1U1MGowP9yq+BBiQPgksudSG0cZx?= =?us-ascii?Q?nXOwNe7iHyfkR0zVGMkJDa88n70711EwKT9navs0nHmdgD7RJxJevtqGqhnM?= =?us-ascii?Q?6yjhwqHMqb/qabhgtjSBYZFmdPvyJZqSwXYXfue?= X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam-Message-Info: 1QLQrz9GCpOLy95wT3y0ZedWzWQ+VzYY/+JJgUvyaXpgpnbR6mhFhfgDFD1R4JxRUyg3a7684iVZGeiyoE1e4H5khHi3gFStJBHiJEBPwGuJwOcWLrg2vyzvsk4suNdszgwRtwJ+pWvisCOetaipnxul643hdhQhGvCB5q8l7GN3h+quXUsj72AHVP1Z8/mch22e5m0m7GmVfIqSPjVGD/uwI2V89I3nF586HMyPm8OeaFn0NGniuvX0tHQopx+DkQCNZNv1as9tqGUzyuIIj3ejLVvUcrjIuxS1vBryz9rMMHYNZU7nlBkTJVNbSlFuI+ciO2VyxO+Z+Kyhr8PWpgSLtiwFArVKetdvHW+HA02W40vMorEyq5V304mj9Edl50w8w2v55EX82EbIWwsSa5RHyUOQN7OmAPdBGk+9crc= X-OriginatorOrg: mit.edu X-MS-Exchange-CrossTenant-OriginalArrivalTime: 15 Feb 2019 23:27:33.8447 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 8daa3449-84fc-4054-ce74-08d6939d29e7 X-MS-Exchange-CrossTenant-Id: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=64afd9ba-0ecf-4acf-bc36-935f6235ba8b; Ip=[18.9.28.11]; Helo=[outgoing.mit.edu] X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM5PR01MB3289 Archived-At: Subject: Re: [Rats] Alexey Melnikov's Yes on charter-ietf-rats-00-00: (with COMMENT) X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 15 Feb 2019 23:27:40 -0000 On Wed, Feb 06, 2019 at 03:25:29AM -0800, Alexey Melnikov wrote: > Alexey Melnikov has entered the following ballot position for > charter-ietf-rats-00-00: Yes > > When responding, please keep the subject line intact and reply to all > email addresses included in the To and CC lines. (Feel free to cut this > introductory paragraph, however.) > > > > The document, along with other ballot positions, can be found here: > https://datatracker.ietf.org/doc/charter-ietf-rats/ > > > > ---------------------------------------------------------------------- > COMMENT: > ---------------------------------------------------------------------- > > I don't have a strong feeling on whether or not the use cases document needs to > be published, but I agree that the question should be considered. > > >4. Standardize interoperable protocols to securely convey assertions/claims. > > Is plural intended here? I think so. We're more likely than not to end up with at least two of CBOR, JOSE, ASN.1, and XML containers (and have already had some lively discussions thereof). -Benjamin From nobody Fri Feb 15 15:46:37 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 06C80131158; Fri, 15 Feb 2019 15:46:30 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mit.edu Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id H-2tWCA7CNan; Fri, 15 Feb 2019 15:46:25 -0800 (PST) Received: from NAM02-BL2-obe.outbound.protection.outlook.com (mail-eopbgr750135.outbound.protection.outlook.com [40.107.75.135]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6713013118B; Fri, 15 Feb 2019 15:41:55 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mit.edu; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=OyopJvRvXF6UknrAlbVPHKgqP3G3vcfEordxlv53xqg=; b=ybD6jjzm+0vJL7HFqt9CObPyNPJs729HbhiyGMl4+tcuJv/t4jheSsWLfQhjYR1epGEKWLiQYyezDv3flBhvCjCHkZ6sITyiErogTWyTTyCFWUd73fLoExgKi39ZKrPFEJZOpg2Z4WGoTjBrVy05JwmLPGMEsrcl1RnGb0ZEJ2Y= Received: from BYAPR01CA0008.prod.exchangelabs.com (2603:10b6:a02:80::21) by DM6PR01MB5610.prod.exchangelabs.com (2603:10b6:5:157::26) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1622.18; Fri, 15 Feb 2019 23:41:51 +0000 Received: from BY2NAM03FT040.eop-NAM03.prod.protection.outlook.com (2a01:111:f400:7e4a::204) by BYAPR01CA0008.outlook.office365.com (2603:10b6:a02:80::21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.1622.16 via Frontend Transport; Fri, 15 Feb 2019 23:41:51 +0000 Authentication-Results: spf=pass (sender IP is 18.9.28.11) smtp.mailfrom=mit.edu; ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=bestguesspass action=none header.from=mit.edu; Received-SPF: Pass (protection.outlook.com: domain of mit.edu designates 18.9.28.11 as permitted sender) receiver=protection.outlook.com; client-ip=18.9.28.11; helo=outgoing.mit.edu; Received: from outgoing.mit.edu (18.9.28.11) by BY2NAM03FT040.mail.protection.outlook.com (10.152.85.27) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.1580.10 via Frontend Transport; Fri, 15 Feb 2019 23:41:50 +0000 Received: from kduck.mit.edu (24-107-191-124.dhcp.stls.mo.charter.com [24.107.191.124]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.14.7/8.12.4) with ESMTP id x1FNfiBO000733 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Fri, 15 Feb 2019 18:41:48 -0500 Date: Fri, 15 Feb 2019 17:41:44 -0600 From: Benjamin Kaduk To: Adam Roach CC: The IESG , , Message-ID: <20190215234144.GE89393@kduck.mit.edu> References: <154943657361.32220.17241358888896617483.idtracker@ietfa.amsl.com> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Disposition: inline In-Reply-To: <154943657361.32220.17241358888896617483.idtracker@ietfa.amsl.com> User-Agent: Mutt/1.10.1 (2018-07-13) X-EOPAttributedMessage: 0 X-Forefront-Antispam-Report: CIP:18.9.28.11; IPV:CAL; SCL:-1; CTRY:US; EFV:NLI; SFV:NSPM; SFS:(10019020)(396003)(136003)(39860400002)(346002)(376002)(2980300002)(199004)(51914003)(189003)(229853002)(53416004)(14444005)(6666004)(1076003)(6246003)(8676002)(246002)(966005)(478600001)(106466001)(50466002)(26826003)(356004)(5660300002)(6916009)(47776003)(476003)(486006)(88552002)(86362001)(11346002)(2906002)(126002)(446003)(956004)(426003)(186003)(26005)(97756001)(104016004)(336012)(36906005)(316002)(33656002)(786003)(16586007)(58126008)(6306002)(75432002)(23726003)(46406003)(8936002)(305945005)(4326008)(55016002)(7696005)(106002)(76176011)(54906003)(18370500001); DIR:OUT; SFP:1102; SCL:1; SRVR:DM6PR01MB5610; H:outgoing.mit.edu; FPR:; SPF:Pass; LANG:en; PTR:outgoing-auth-1.mit.edu; A:1; MX:1; X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-Correlation-Id: ed76dae8-0076-4088-5e3e-08d6939f2880 X-Microsoft-Antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600110)(711020)(4605077)(4608076)(4709027)(2017052603328)(7153060); SRVR:DM6PR01MB5610; X-MS-TrafficTypeDiagnostic: DM6PR01MB5610: X-MS-Exchange-PUrlCount: 1 X-Microsoft-Exchange-Diagnostics: 1; DM6PR01MB5610; 20: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 X-Microsoft-Antispam-PRVS: X-Forefront-PRVS: 09497C15EB X-Microsoft-Exchange-Diagnostics: =?us-ascii?Q?1; DM6PR01MB5610; 23:/Y/9SMOLUcOfE3MRlx4zsUnkQYc/xkptdfBGEHOxq?= =?us-ascii?Q?Sl57UD3Pykv71pI73OFDIq11oU+mS0DfbWRQmRMdd+uVPgMfzelZelmbq7VW?= =?us-ascii?Q?W6F3ksMDqDhVzgxbp3+lRytzgi7jfmOIk2Z8rvnLRgXktiqOHrqS/F11Yxka?= =?us-ascii?Q?hjJUUE9eBDkh6HFdQD1RropzdF9ygVyW7Ow2nir6KMfNtb3tAB/HUALFDQ+M?= =?us-ascii?Q?vlDEyzKdfpmsZ9Uz4zU89hEAqn3c10ClYkrMMQvioPwLS6f4YIOk/QeJHDg0?= =?us-ascii?Q?qpsceJnnKnBnIdlcF0OvkKSrBUI1O3UH/4Gvt84D0secauGkmS5cIn0dFq2b?= =?us-ascii?Q?hxn1T8nMERZlv2hW7Hrd/a3ouULzqOaRJFrlY4qw2R/bMMZ7QHmNuPaaRtOT?= =?us-ascii?Q?unwpiVAFqMAcH+ulL57sUGbBM3ckshAUgoCMhtT5WbWQD8nDEpLlabz/6zeY?= =?us-ascii?Q?IvXDlfaoc2CmUjH9U+HkrjNDICQDJHyisdwpR8uPPSgtecvs/vFagonH1Grc?= =?us-ascii?Q?D24ie01THbQwTZ3Bwl+Dfx8dUCP4zz1Bh7KzYwsXIOTe98hR3Dt6uw72jR1+?= =?us-ascii?Q?pNkKJJf70CFFm0am3HebrZh9kOQw5DyRRgBhTnrnyN0I5mPxy5aQeQLP52FH?= =?us-ascii?Q?SbBNYgubSoSfbrZUOw+Ao9MIVSsnPw9CoencYf77NteBF6cdGcspLvwcsABu?= =?us-ascii?Q?2eZkQBpMBmNyA6ay4yb4DV5AWYrKHoq/IHDTwtZ7LKC3mWvbpUhlb6s+bh2F?= =?us-ascii?Q?oFf0x62LauDWqTgkIA5ov2gQT/wxtWScz05lr7w4SiLnCMLB25Q2eeWKILgm?= =?us-ascii?Q?yh9Rkmow47Xc0JoCviXfsBhI9M7Dqpt/faj4WxfnP87ZpO5jC08u/73jX8+9?= =?us-ascii?Q?HkBAWihmo/lp0EiM0VPDNR88ri6CG/ZuSvFK1LCG0TJBBM8bultO5MucKx9K?= =?us-ascii?Q?UTTgnOE0iFMGHRsPdYMRCkb1Sb5CtugBFWWLiGe/XAqKZ3O3HLnIKsmQSBHh?= =?us-ascii?Q?IVFlNhIY0EmbawsB+R+zTQSLNuMv53vrFc+NhczPIWjO7KvqpOrSH7zdj5RQ?= =?us-ascii?Q?dGUe1/Bn86du7neM6O4bHinHW7G+06uo3KOQhsUwR+qWSq4AGNOdCP0vYFNt?= =?us-ascii?Q?OdW6gnV9ryaLeBw6iujLyYPpk9YeMNFsPoh2ZDkTuYn4o5C7Nsczai/VVjHM?= =?us-ascii?Q?ltuHrRzgqawnZu7+oxxCWOlStTxKXDX5zLwI0T4tycSx5+aX5OawCFlU+ETJ?= =?us-ascii?Q?uUX8WUFMdxqQviyxDUujWvhlFGTtScEuNtp507UCNA/Rc7Mloim2Qx4BbjOS?= =?us-ascii?B?UT09?= X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam-Message-Info: oyKaApW3+XSloJ/jvnNcCZ08GYFcgSs/5vL7YA/+KQgCSioW4IYk8vvp9CDcV/w0s7xBHb8efrtCX3N8XDB+4orrUghtucqMqua0HobaNlIjc/IXBzIgbUl+rvGewLgSM7PejGqVeU5kGt+C83r6tYmIWDQgDDK6RirTCECCvYxa8btpUySwK6mrfocxyygWfRHtVKwc2YkDY1fo5CvRRfwKsiqzupj71zXSZIRo51c50vNqGxktslxRPySY9gZ+qnol3CjbgJwE43G1E8Z6t4yhwlI0MoakpvMBp/6qxZsDoVkGIN6j2JJaHJ47fgOUUKtCqenv8FCzonZLy7UI8uMFRcretVp4C5DAXB72qSpb7yOO2TZ/0AWKClxAq325Nt516ACFCafs9elT3CkkefPwafT8RdzgO2WCKlTfrG8= X-OriginatorOrg: mit.edu X-MS-Exchange-CrossTenant-OriginalArrivalTime: 15 Feb 2019 23:41:50.3204 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: ed76dae8-0076-4088-5e3e-08d6939f2880 X-MS-Exchange-CrossTenant-Id: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=64afd9ba-0ecf-4acf-bc36-935f6235ba8b; Ip=[18.9.28.11]; Helo=[outgoing.mit.edu] X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM6PR01MB5610 Archived-At: Subject: Re: [Rats] Adam Roach's No Objection on charter-ietf-rats-00-00: (with COMMENT) X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 15 Feb 2019 23:46:30 -0000 On Tue, Feb 05, 2019 at 11:02:53PM -0800, Adam Roach wrote: > Adam Roach has entered the following ballot position for > charter-ietf-rats-00-00: No Objection > > When responding, please keep the subject line intact and reply to all > email addresses included in the To and CC lines. (Feel free to cut this > introductory paragraph, however.) > > > > The document, along with other ballot positions, can be found here: > https://datatracker.ietf.org/doc/charter-ietf-rats/ > > > > ---------------------------------------------------------------------- > COMMENT: > ---------------------------------------------------------------------- > > The charter contents look generally good to me, although I have some > copy-editing suggestions to make. I also agree with Ben that the charter needs > to be clear about whether the referenced support documents are intended for > publication as RFCs. > > One substantive comment first: > > > The architecture may include a system security model > > for the signing key material and involve at least the system component, system > > component provider, and the relying authority. > > It's not clear to me whether this is intended to include/leverage an existing > PKI, establish a new PKI, or use some other scheme to establish trusted roots. > It seems that some of these options could end up being rather far ranging. I > don't feel strongly about what the correct answer is, but I think we want the > charter to make it clear whether such potentially broad tasks are in scope for > the working group, or if the models to be considered should be more > constrained. As a mental model, think "device" for "system component" and "manufacturer" for "system component provider" (the terms are as such to allow for more complicated scenarios). The whole scheme is going to be premised on the manufacturer getting some cryptographic bits in the device and keeping a handle on which bits go with which device. The relying party needs to get that information somehow, and be able to trust it. But to a large extent we don't actually care how that happens, and that flow is not what we're focusing on in this initial charter. So my take on this is that the architecture could describe a couple ways of doing this, but as more of an informative matter to help someone understand how to build a system using RATS, and not as a prescriptive matter. I don't really think that falls under "establish a new PKI", and it could but does not have to involve an existing PKI. So I'm not really sure what text we could add to the charter that would help bring the clarity you desire. > --------------------------------------------------------------------------- > > The introduction of the charter is a bit jarring in the way that it jumps in > without first giving an indication of the technology field being dealt with. > Starting with an introductory sentence -- or even a clause -- indicating that > the working group is dealing with component attribute attestation would help. I tried to reduce the jar factor. > --------------------------------------------------------------------------- > > > To improve the confidence in a system component's trustworthiness a relying > > party may require evidence about: > > Nit: "...trustworthiness, a relying..." > > --------------------------------------------------------------------------- > > > While domain-specific attestation mechanisms such as Trusted Computing Group > > (TCG) Trusted Platform Module (TPM)/Trusted Software Stack (TSS), Fast > > Identity Online (FIDO) Alliance attestation and Android Keystore attestation > > Consider an Oxford comma before "and Android". > > --------------------------------------------------------------------------- > > > While a relying party may use > > reference values to assess the assertions/claims the procedures for this > > activity are out of scope for this WG. > > Nit: "...claims, the procedures..." > > --------------------------------------------------------------------------- > > > The working group will cooperate and coordinate with other IETF WG such as > > TEEP, SUIT and SACM as appropriate. > > Consider an Oxford comma before "and SACM". > > --------------------------------------------------------------------------- > > > 3. Standardize data models that implements and secures the defined information > > Nit: "...models that implement and secure..." or "...a data model that > implements and secures..." Thanks for these. -Benjamin From nobody Fri Feb 15 15:54:28 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0FBA1131041; Fri, 15 Feb 2019 15:54:22 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mit.edu Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qhGwtbtX5S70; Fri, 15 Feb 2019 15:54:20 -0800 (PST) Received: from NAM02-BL2-obe.outbound.protection.outlook.com (mail-eopbgr750095.outbound.protection.outlook.com [40.107.75.95]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BA306130E94; Fri, 15 Feb 2019 15:54:19 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mit.edu; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=lFptBVlH8emEozrgv2A/oAvzZPcJrAmVystHDWa+JhA=; b=luT9N5QZfl9jxJDjBSKL9lML1NKBzzkoL3TTSqpWEBszI2tpOAjXg+05dmKvckt+lu7cK2kLQ9WCtUiE3CtAlM51AWgX/C9ZP7lYMbBa7AKXl300OEQlOa5EeWegcHWimRnc3Tkxz/124wnyoVekLhrbZbbxz9ScpH3gOv1ajUs= Received: from SN2PR01CA0074.prod.exchangelabs.com (2603:10b6:800::42) by SN6PR01MB4862.prod.exchangelabs.com (2603:10b6:805:d8::21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1622.18; Fri, 15 Feb 2019 23:54:08 +0000 Received: from BY2NAM03FT024.eop-NAM03.prod.protection.outlook.com (2a01:111:f400:7e4a::205) by SN2PR01CA0074.outlook.office365.com (2603:10b6:800::42) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.1622.18 via Frontend Transport; Fri, 15 Feb 2019 23:54:07 +0000 Authentication-Results: spf=pass (sender IP is 18.9.28.11) smtp.mailfrom=mit.edu; ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=bestguesspass action=none header.from=mit.edu; Received-SPF: Pass (protection.outlook.com: domain of mit.edu designates 18.9.28.11 as permitted sender) receiver=protection.outlook.com; client-ip=18.9.28.11; helo=outgoing.mit.edu; Received: from outgoing.mit.edu (18.9.28.11) by BY2NAM03FT024.mail.protection.outlook.com (10.152.84.229) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.1580.10 via Frontend Transport; Fri, 15 Feb 2019 23:54:05 +0000 Received: from kduck.mit.edu (24-107-191-124.dhcp.stls.mo.charter.com [24.107.191.124]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.14.7/8.12.4) with ESMTP id x1FNs1bh004423 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Fri, 15 Feb 2019 18:54:03 -0500 Date: Fri, 15 Feb 2019 17:54:01 -0600 From: Benjamin Kaduk To: Ben Campbell CC: The IESG , , Message-ID: <20190215235401.GF89393@kduck.mit.edu> References: <154942641080.32147.10104325260776747141.idtracker@ietfa.amsl.com> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Disposition: inline In-Reply-To: <154942641080.32147.10104325260776747141.idtracker@ietfa.amsl.com> User-Agent: Mutt/1.10.1 (2018-07-13) X-EOPAttributedMessage: 0 X-Forefront-Antispam-Report: CIP:18.9.28.11; IPV:CAL; SCL:-1; CTRY:US; EFV:NLI; SFV:NSPM; SFS:(10019020)(979002)(396003)(346002)(376002)(39860400002)(136003)(2980300002)(189003)(199004)(246002)(956004)(106002)(33656002)(486006)(7696005)(76176011)(14444005)(2906002)(104016004)(6246003)(426003)(47776003)(229853002)(5660300002)(476003)(186003)(88552002)(23726003)(6916009)(336012)(786003)(6306002)(75432002)(316002)(55016002)(97756001)(26005)(4326008)(305945005)(58126008)(54906003)(16586007)(50466002)(11346002)(446003)(126002)(86362001)(356004)(106466001)(966005)(8676002)(478600001)(8936002)(26826003)(1076003)(46406003)(53416004)(18370500001)(969003)(989001)(999001)(1009001)(1019001); DIR:OUT; SFP:1102; SCL:1; SRVR:SN6PR01MB4862; H:outgoing.mit.edu; FPR:; SPF:Pass; LANG:en; PTR:outgoing-auth-1.mit.edu; MX:1; A:1; X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-Correlation-Id: 4343825c-0346-464a-6603-08d693a0df88 X-Microsoft-Antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600110)(711020)(4605077)(4608076)(4709027)(2017052603328)(7153060); SRVR:SN6PR01MB4862; X-MS-TrafficTypeDiagnostic: SN6PR01MB4862: X-MS-Exchange-PUrlCount: 1 X-Microsoft-Exchange-Diagnostics: 1; SN6PR01MB4862; 20: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 X-Microsoft-Antispam-PRVS: X-Forefront-PRVS: 09497C15EB X-Microsoft-Exchange-Diagnostics: =?us-ascii?Q?1; SN6PR01MB4862; 23:ZjV0Oxg0gzEhf2tAzWeO2bY7byhk3uOEmDaSFz+XF?= =?us-ascii?Q?vFCH3pT+9SCQ1w74IOeJI1ZitMH4N3JFY8aesPG+1yxsCi2yruzKZ/sGmDAH?= =?us-ascii?Q?yKTi2DQnnEqX8KEauZ0vjmH9L0R9ZZkVfz3tjlFP0TSvNRcCu1kJwJoyHsgP?= =?us-ascii?Q?jbwYfuTq4XE03HFPF0Qt9xeAYW9yVH01BmuTogkrINsP68QD/DMLqQgHNTI6?= =?us-ascii?Q?LaXQUmCbCrrUmgw6iXBHNZ8EYcgsesF4i2d79FTJvuxQ5BXBXKQw2StwQsyG?= =?us-ascii?Q?A6SkHKSIskUGXf6+aD/yg0Nrqeo75hf5ptCLW6hH7gN0Fb9onQxW/gR/WYkr?= =?us-ascii?Q?fSE3wK+SNdAuyHytPPerWH2KplFtzzABTcqHMt9JnNzcW3/AS1QMc/jOgnlC?= =?us-ascii?Q?lmGhM9DB+EzUxaVPNWhse6w9GgS1d4Pn2VRz3qBJvfsoQd0tI8M1GQgs7uzD?= =?us-ascii?Q?GZTR0v4oo9Yj4YJpcnsx8HiFnoPLP9SZ+H7iq4PwzeikY05cvPxuddUeHhRx?= =?us-ascii?Q?Y1WeJL0aTaJy80WfU1xMiOq0ubdUT61pvjNLHqoVJbMzVbsU0niii0XOkDly?= =?us-ascii?Q?+U6Gxgh6rnvkbH1xjJB+lmU/Ma3xy6J4kDhBtH7hYXhf93I9SjYWBlOv48UF?= =?us-ascii?Q?cFFksLUgXq2W78JTsGH5K9Q0Xf3ziymY9gPH0sNBkEUb6k3hKFNlPlCzHn2k?= =?us-ascii?Q?lWBE+0BwJIirsP3Fc1facZjlFFqs5vr/m/DlzuzuKtmJowBstqElEyFlaZIi?= =?us-ascii?Q?xGZnDsL9FOrJ1HmC7JuRs+qdVOQJhExssG5QucAfquAXuf2MZGywqNQ8+Ny9?= =?us-ascii?Q?/FPpicDDc3nGLnrsQp6xz8fhjNpw/Jiw58D5dp1jG//hbTMrEQz8448wOTTs?= =?us-ascii?Q?ukiYH1DJm367Lxh1IB2sD1Y4RR1u3r5VDzKUEg5WpVSw4wKbTBJo19YefOsE?= =?us-ascii?Q?cB34hZIm6hESn5sMY/xtpvbwtMxMUBVSjJy4Mc1QBBkufq0kO81SvH/gCH+y?= =?us-ascii?Q?MxyYJ4t+BAOyPRjs+rb++v5fHt0me/AZ1Crm2OMYArGf0mmxUdjjh+qT0Cbx?= =?us-ascii?Q?v7d7dC6PGxTvSI9aDzsy49yleByscd04vTSNwtKVMKaCx/awQgnb5v2oSCXB?= =?us-ascii?Q?1ppxLJqe3aURbeTYCNeCKAVOI1Ox35DGsScil918c3aG24JGidMxbjcE1h4s?= =?us-ascii?Q?ZF6adpX0UBP/itz9Nmk9KrfBx3BZt8g/LI7WD9PDQ/iY7ptxPSqFxqHGtLTZ?= =?us-ascii?Q?quUyGJzwbncft9gLAlunhuVJWC/V2enC/+IH0vcERel/8cTw+zaDnDvhS8my?= =?us-ascii?Q?zd+w2orbFAtUtEO+Np7ih+jAHyP5zujmnEn0jxOcDPF?= X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam-Message-Info: yYZYi5hXxhkBkVKwO26QIlBLcmwiFpeeoQhilDUvKTuWhDQc/RbGXE9jnmUMDfWjNZ33/zE2onHjy1b27KPCFyoUzzXet2kptAr90U7vgeRnydnJ8jO/XJ7RY7c9ntnh200KsPsm5aakNpElCJaOP5Jr3FjgHuf9CiKsP5A7jmCvFEx36w3ivTDYLGdDShpsY2vqVWNyweH9Iq87D6GuLIbUwZLnlxEZ6urjJ0/Q2fhlsHB3CE1gj7by6XQHycXA4YC8KDpqKfYzB5NWQ2B3+wmoMTQh5AqLaR4Z9NVW4FR65Y66Kflgt/0xa7E8J7Vffjn9DnI326M1v+bcET2tDRXumI8sc6GDSf1u/XhoZf3UajLRnypN9d4xA4VMOxCd3/0oJSvFclaxuOXb1KDjvHOZMcZ9hMv2DfiEMfHQUCQ= X-OriginatorOrg: mit.edu X-MS-Exchange-CrossTenant-OriginalArrivalTime: 15 Feb 2019 23:54:05.6692 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 4343825c-0346-464a-6603-08d693a0df88 X-MS-Exchange-CrossTenant-Id: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=64afd9ba-0ecf-4acf-bc36-935f6235ba8b; Ip=[18.9.28.11]; Helo=[outgoing.mit.edu] X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN6PR01MB4862 Archived-At: Subject: Re: [Rats] Ben Campbell's Yes on charter-ietf-rats-00-00: (with COMMENT) X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 15 Feb 2019 23:54:22 -0000 On Tue, Feb 05, 2019 at 08:13:30PM -0800, Ben Campbell wrote: > Ben Campbell has entered the following ballot position for > charter-ietf-rats-00-00: Yes > > When responding, please keep the subject line intact and reply to all > email addresses included in the To and CC lines. (Feel free to cut this > introductory paragraph, however.) > > > > The document, along with other ballot positions, can be found here: > https://datatracker.ietf.org/doc/charter-ietf-rats/ > > > > ---------------------------------------------------------------------- > COMMENT: > ---------------------------------------------------------------------- > > I am balloting "yes", but have a few minor comments. These need not block > external review, but might should be considered prior to approval: > > - "The WG will also evaluate prior work such > as NEA and proprietary attestation technologies." > > Since I assume the group plans to create standards track specifications, there > is a good chance any given "proprietary" technology will have restrictions that > prevent its use. It might be worth adding a few words about any such > proprietary standard being sufficiently open for IETF purposes. (I'm > specifically not thinking about patents so much as license restrictions on the > specifications themselves.) I think I covered this (and proposed text I don't want to use) in Martin's ballot thread. > (nit): I find the repeated use of "assertions/claims" a bit jarring. Are they > assertions? Claims? Both? They can be either, depending on what worldview's terminology you're using (and, to some extent, what verification workflow as well). I think this is just going to have to wait for the terminology document. > Please consider whether item 1 under "Program of work" needs to be published as > RFCs or can be published via some alternative channel (e.g. Working Group wiki). The thread that Roman forked from Alissa's ballot thread has made some progress on this, splitting off the use cases into a separate item (which currently I have marked as "not expected to be published as an RFC"; I believe the implication is that the terminology and architecture are intended to be so published. -Benjamin From nobody Fri Feb 15 16:14:45 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BA55A131041; Fri, 15 Feb 2019 16:14:37 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mit.edu Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7Bfnth74-wmV; Fri, 15 Feb 2019 16:14:34 -0800 (PST) Received: from NAM04-CO1-obe.outbound.protection.outlook.com (mail-eopbgr690104.outbound.protection.outlook.com [40.107.69.104]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5F31012F1A5; Fri, 15 Feb 2019 16:14:34 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mit.edu; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=gb2kPpai/lIbeEpm4XFSrdJdc+Oz2pAyEDX3+xfEIRc=; b=lMZ7oTl/5TpAxO76tAdz0ijkxmwi+wx5ie05MT0JcG+Nfn9MGnfY6mko9Fviyq6bUsYv/PzUmjW9P0cRXP/hpEbYr6w3uDrjnowT1Ku6+0oPsxGujdk2sXQ5HR+D/VUk3MBE+OqWmlfXeyYP+hNA6+eCM4uMxVd+N/6/iM7Bdr8= Received: from DM5PR0101CA0009.prod.exchangelabs.com (2603:10b6:4:28::22) by DM6PR01MB4860.prod.exchangelabs.com (2603:10b6:5:6d::25) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1622.16; Sat, 16 Feb 2019 00:14:33 +0000 Received: from DM3NAM03FT041.eop-NAM03.prod.protection.outlook.com (2a01:111:f400:7e49::200) by DM5PR0101CA0009.outlook.office365.com (2603:10b6:4:28::22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.1622.18 via Frontend Transport; Sat, 16 Feb 2019 00:14:33 +0000 Authentication-Results: spf=pass (sender IP is 18.9.28.11) smtp.mailfrom=mit.edu; ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=bestguesspass action=none header.from=mit.edu; Received-SPF: Pass (protection.outlook.com: domain of mit.edu designates 18.9.28.11 as permitted sender) receiver=protection.outlook.com; client-ip=18.9.28.11; helo=outgoing.mit.edu; Received: from outgoing.mit.edu (18.9.28.11) by DM3NAM03FT041.mail.protection.outlook.com (10.152.83.207) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.1580.10 via Frontend Transport; Sat, 16 Feb 2019 00:14:32 +0000 Received: from kduck.mit.edu (24-107-191-124.dhcp.stls.mo.charter.com [24.107.191.124]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.14.7/8.12.4) with ESMTP id x1G0ET04009695 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Fri, 15 Feb 2019 19:14:31 -0500 Date: Fri, 15 Feb 2019 18:14:29 -0600 From: Benjamin Kaduk To: CC: , Message-ID: <20190216001429.GH89393@kduck.mit.edu> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Disposition: inline User-Agent: Mutt/1.10.1 (2018-07-13) X-EOPAttributedMessage: 0 X-Forefront-Antispam-Report: CIP:18.9.28.11; IPV:CAL; SCL:-1; CTRY:US; EFV:NLI; SFV:NSPM; SFS:(10019020)(39860400002)(396003)(376002)(346002)(136003)(2980300002)(199004)(189003)(336012)(26005)(106002)(246002)(75432002)(4326008)(2906002)(186003)(305945005)(8936002)(426003)(316002)(5660300002)(8676002)(36906005)(23726003)(1076003)(58126008)(786003)(54906003)(16586007)(476003)(2351001)(126002)(106466001)(14444005)(53416004)(486006)(26826003)(6306002)(450100002)(33656002)(97756001)(50466002)(6916009)(356004)(47776003)(86362001)(7696005)(478600001)(956004)(104016004)(966005)(46406003)(88552002)(55016002)(18370500001); DIR:OUT; SFP:1102; SCL:1; SRVR:DM6PR01MB4860; H:outgoing.mit.edu; FPR:; SPF:Pass; LANG:en; PTR:outgoing-auth-1.mit.edu; A:1; MX:1; X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-Correlation-Id: 622e85ac-a62f-4b31-0097-08d693a3ba1e X-Microsoft-Antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600110)(711020)(4605077)(4608076)(4709027)(2017052603328)(7153060); SRVR:DM6PR01MB4860; X-MS-TrafficTypeDiagnostic: DM6PR01MB4860: X-MS-Exchange-PUrlCount: 1 X-Microsoft-Exchange-Diagnostics: 1; DM6PR01MB4860; 20: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 X-Microsoft-Antispam-PRVS: X-Forefront-PRVS: 0950706AC1 X-Microsoft-Exchange-Diagnostics: =?us-ascii?Q?1; DM6PR01MB4860; 23:eyEhPAHG0y3lZKSY5IsCUKN0CZZugQnnqPhv+BSI0?= =?us-ascii?Q?i0Tk4G3riRWf9EsV3eapKOHuG3gDlcpLvAHnnmP2zOTBZOlfwHsXaiUtyXsN?= =?us-ascii?Q?BRpqAHwEFTrPfg40iG67nEJ/Wgxi7MmYnbx+D7629uE8riHy+9pDlalFsgxK?= =?us-ascii?Q?q3B/P3JbfTm95u7ZJxNSnV9/WfgIkwlWhS9NXTswe3HBpI0oYkGR2ch/LlSc?= =?us-ascii?Q?8j1RHw67R0KfLMvCu41VosxXK9GpWOD6bGkmwrMIHvFV+XqsTsNItV9z93/O?= =?us-ascii?Q?hq6iNlserMTCGTomuQ75bchXz6yWgWLU7gK1sw8NGD4yEjEk1nqmB40tlWkJ?= =?us-ascii?Q?b4/yG63/CaBcukt3y719L0MtF+STE79oDvl+g9xJkeLtlCI1ZXHI0nl3tUhB?= =?us-ascii?Q?1KSAgRPMHXYmeEUnvMeUJj781MQwHUmPGDulMqF8YRPR/K2dzzHhUkQ1BnnA?= =?us-ascii?Q?0MbZi3AuZaqb9mcIUTlvnVwYI7RszbEyRw9xMifLRaL7tA0szE0qCJazUz8b?= =?us-ascii?Q?7e1pGuRjQk6j5+NR6tGcEQpt/SEASy0EBTQH/YHgcCACB5Rix6x7IjZ1s9CS?= =?us-ascii?Q?nvnIEdhknDM/E9GUhe0/OQiULI5zD6mtaKuzCsDS8UJQIcN5SMSgy0AgzJIg?= =?us-ascii?Q?HT1b245h2fAIFvp0vb3fnwCEva4jzZ6jYR4mLTrcmnawJBLFl9WSmefdZDso?= =?us-ascii?Q?Z9P2j1KAaJxo1LXT8yvERIkQ4cxcGnfcvCud9I9eM2eHNiz8ZaYS1EUvTEOK?= =?us-ascii?Q?E/shvqKjQUchv0vreDPoCdedAKVgMezhyp78B+qIDo9RrryzP8IK6gRMdD3B?= =?us-ascii?Q?4Ayv22Y9rEYoLhGdUl+J0/qQeBBVuj/DmXLTXcGd18WcXuo6r+FpZMJtun9d?= =?us-ascii?Q?SwSCp4Nz6OjMvLXCO1eOpHEU2JM0MKMDlS/pvaGiSr55q1/YSsrmnd1koOV6?= =?us-ascii?Q?Nkv+UJ39x9bxMxBY5tItSmujqdHFeqTBcqC5qKlnyAg9m4nl7ryxQjH+DvCu?= =?us-ascii?Q?ucd6jgjmrqUhyBQHf+kJyb0VbpLFHzbDv+NrGm6D+01i29Toye1NTLkVE+DJ?= =?us-ascii?Q?HS01R4WtReRP8qSLm7s39qU2GES3xqHEqEgCr/F0QfXTHnjx7UbIb07KQOeY?= =?us-ascii?Q?2bJXbkdZFPtYONIoQurXRp5bkRwn0Yse+Yp3BZRwJ9Kffwh4HDWosahOpWiu?= =?us-ascii?Q?vUhIU+AbDceD3FO/ojBohGWdmO5qBJwkXLI?= X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam-Message-Info: bn3rO8liHQ8iM4ZQYtxGXjzC/mRBg+FDr0hhdcTTjdPcraHMAt+eiZt0Xn0zydzkHjfiRzz+LFHR3RdaSHvIBK7pTkTGW1wmC8p73v9NDgC2es4ixdSu0J6KB3zCMVrJczDtaH7p2esXDHLEEkGr1T70ptHVclnpqT464SECfz7c2/3Hkm/JYhuiwWm+0056aldMPIVJZ3fEOcsyKR8jdmhmXbDCQUlok11KGd5epovuv0IxslNYMslGfH9zLTntNdKEFx7Y3QSIvn9wa1P0JoeO2Gt+Kxpj/0PW2eSdb5kGIrUcXE//RMvhrLT3xQA2/NUYSYpaJXmvcNUKrSTua665QgLrSjbttLsa/DFn3ahYEaI15viLWSyp6ktzAJcnujxb7D1tiQK9fPF5U8nj4r0m45xwEsfKNEjD2PvT630= X-OriginatorOrg: mit.edu X-MS-Exchange-CrossTenant-OriginalArrivalTime: 16 Feb 2019 00:14:32.7852 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 622e85ac-a62f-4b31-0097-08d693a3ba1e X-MS-Exchange-CrossTenant-Id: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=64afd9ba-0ecf-4acf-bc36-935f6235ba8b; Ip=[18.9.28.11]; Helo=[outgoing.mit.edu] X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM6PR01MB4860 Archived-At: Subject: [Rats] new RATS charter in datatracker (charter-ietf-rats) X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 16 Feb 2019 00:14:38 -0000 Thanks to the IESG feedback and subsequent discussion, I've uploaded a new version of the charter text to the datatracker at https://datatracker.ietf.org/doc/charter-ietf-rats/ . Further feedback is still welcome, and hopefully we can get to external review soon. (The "History" tab will produce a diff between the 00-00 and 00-02.) ========================================================================== Introduction ========== In network protocol exchanges, it is often the case that one entity (a relying party) requires evidence about the remote peer (and system components [RFC4949] thereof), in order to assess the trustworthiness of the peer. Remote attestation procedures (RATS) enable relying parties to establish a level of confidence in the trustworthiness of remote system components through the creation of attestation evidence by remote system components and a processing chain towards the relying party. A relying party can then decide whether to consider a remote system component trustworthy or not. To improve the confidence in a system component's trustworthiness, a relying party may require evidence about: * system component identity, * composition of system components, including nested components, * roots of trust, * assertion/claim origination or provenance, * manufacturing origin, * system component integrity, * system component configuration, * operational state and measurements of steps which led to the operational state, or * other factors that could influence trust decisions. While domain-specific attestation mechanisms such as Trusted Computing Group (TCG) Trusted Platform Module (TPM)/Trusted Software Stack (TSS), Fast Identity Online (FIDO) Alliance attestation, and Android Keystore attestation exist, there is no interoperable way to create and process attestation evidence to make determinations about system components among relying parties of different manufactures and origins. Goals ===== This WG will standardize formats for describing assertions/claims about system components and associated evidence; and procedures and protocols to convey these assertions/claims to relying parties. Given the security and privacy sensitive nature of these assertions/claims, the WG will specify approaches to protect this exchanged data. While a relying party may use reference, known, or expected values or thresholds to assess the assertions/claims, the procedures for this activity are out of scope for this WG (without rechartering). The working group will cooperate and coordinate with other IETF WGs such as TEEP, SUIT, and SACM, and work with organizations in the community, such as the TCG and the FIDO Alliance, as appropriate. The WG will also evaluate prior work such as NEA and proprietary attestation technologies like the Android Keystore. Program of Work ============== The working group will develop standards supporting interoperable remote attestation procedures for system components. The main deliverables are as follows: 1. Specify use cases for remote attestation (to document and achieve WG consensus but not expected to be published as an RFC). 2. Specify terminology and architecture that enable attestation techniques. The architecture may include a system security model for the signing key material and involve at least the system component, system component provider, and the relying authority. 3. Standardize an information model for assertions/claims which provide information about system components characteristics scoped by the specified use-cases. 4. Standardize data models that implement and secure the defined information model (e.g., CBOR Web Token structures [RFC8392], JSON Web Token structures [RFC7519]). 5. Standardize interoperable protocols to securely convey assertions/claims. ========================================================================== -Benjamin From nobody Mon Feb 18 08:52:59 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 43ACA1277D2 for ; Mon, 18 Feb 2019 08:52:57 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HMef9g7fQwOM for ; Mon, 18 Feb 2019 08:52:55 -0800 (PST) Received: from mail-yw1-xc31.google.com (mail-yw1-xc31.google.com [IPv6:2607:f8b0:4864:20::c31]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 540711277CC for ; Mon, 18 Feb 2019 08:52:55 -0800 (PST) Received: by mail-yw1-xc31.google.com with SMTP id p17so6700704ywg.0 for ; Mon, 18 Feb 2019 08:52:55 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=Cwcymr4dcOw0D8rbKR9lGbL88racbk6Eu+nC95wtfc8=; b=Wz3QgvxMFnEQRFjb7zu2VWyFm4hIlALgcWhJNxXXTIGPLYf7VLzJMdDimHEycnJo+L mw3tUvjijhFbemcuj1lldM3qweMeJc+aqaDUKjMSQKv1G0XGQyANOby/NMzjmnTYcoAD wNghxpnJE4pgGC5NyefIABmzQYWp2E+mJ5anF1U3pyeMHkfm3u4JMrxtjRnfBw04CN5h whOjsfDaG+1tQ+PG3vDCQTzRlAGtEdXisYeJ/8FegTrG/waW2rFAneVwL9/fbU/NldQI X8ZGKH937dp0wT0hTyanGFWlFUPbMLC/gwWsvkD36b+bcVb7pxT1bB3lS3siTo6EmDSQ cq5g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=Cwcymr4dcOw0D8rbKR9lGbL88racbk6Eu+nC95wtfc8=; b=LDk2UF+AoreOPYGPwcNCGTt8/UiC5azNph9tAqIv4T+n0T6Ex3rcXMc6bbxNxwRTz9 g+MfIEMLjOvQMrhMyhDWr+tm6Kc/+hhLHz+XI/TMI9nshTEFXXeTD2pBnH0MAW6Bck+Y 4sDbOmKYitZlwG6AFr/nEMkUDYCC1zgMcQmkyy+f+H3V1qY8XyVmJuVjEnSqh/IH8iF3 9KOV8A01WVBghgazI4FNkghV3BdTwz4K/a2gZ36rsQFCE4NMjiRAnT2xdZx75Tmd2bf1 +CkkT1zfsiNJpXa3OybTcpgAM7qLsg1/KgCK/HazkMgOex0lvoIPlB5GltO7cVdHfsbo +WzQ== X-Gm-Message-State: AHQUAuabooSHGl0l3hHW9CX3ygfUJDJYSCuBrPEB8ZTyYBFKs/RRDDKp XMKXitPYQpzJE/4fBEp/gwwcAsmvpO7yV856tInx1+I3 X-Google-Smtp-Source: AHgI3IaAC35/KdS/oHN3q+MXg/jb2BxJF3T5qsANNTkogm4e6GfPkoIFw9Y5DBW69MV5TpMWY8rbHj5mVgqwG/HSbPg= X-Received: by 2002:a81:2348:: with SMTP id j69mr1722950ywj.507.1550508774342; Mon, 18 Feb 2019 08:52:54 -0800 (PST) MIME-Version: 1.0 From: Ira McDonald Date: Mon, 18 Feb 2019 11:52:41 -0500 Message-ID: To: rats@ietf.org, Ira McDonald Content-Type: multipart/alternative; boundary="000000000000b7479805822df4d9" Archived-At: Subject: [Rats] FYI: W3C Verifiable Credentials Data Model 1.0 draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 18 Feb 2019 16:52:57 -0000 --000000000000b7479805822df4d9 Content-Type: text/plain; charset="UTF-8" Hi, W3C Verifiable Claims WG considers this draft close to ready for publication as a W3C Candidate Standard: https://www.w3.org/TR/2019/WD-verifiable-claims-data-model-20190208/ Cheers, - Ira Ira McDonald (Musician / Software Architect) Co-Chair - TCG Trusted Mobility Solutions WG Co-Chair - TCG Metadata Access Protocol SG Chair - Linux Foundation Open Printing WG Secretary - IEEE-ISTO Printer Working Group Co-Chair - IEEE-ISTO PWG Internet Printing Protocol WG IETF Designated Expert - IPP & Printer MIB Blue Roof Music / High North Inc http://sites.google.com/site/blueroofmusic http://sites.google.com/site/highnorthinc mailto: blueroofmusic@gmail.com PO Box 221 Grand Marais, MI 49839 906-494-2434 --000000000000b7479805822df4d9 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi,

W3C Ver= ifiable Claims WG considers this draft close to ready for
publica= tion as a W3C Candidate Standard:

Cheers,
- Ira

<= div>
Ira McDonald (Musician / Softwar= e Architect)
Co-Chair - TCG Trusted Mobility Solutions WG
Co-C= hair - TCG Metadata Access Protocol SG
Chair - Li= nux Foundation Open Printing WG
Secretary - IEEE-ISTO Printer Working Gr= oup
Co-Chair - IEEE-ISTO PWG Internet Printing Protocol WG
IETF Desig= nated Expert - IPP & Printer MIB
Blue Roof Music / High North Inchttp://sites.google.com/site/blueroofmusic
http://sites.google.com/site/highnorthinc<= /a>
mailto: blueroofmusic@gmail.com
PO Box 221=C2=A0 Grand Marais, MI 49839=C2= =A0 906-494-2434

<= /div>
--000000000000b7479805822df4d9-- From nobody Mon Feb 18 14:32:57 2019 Return-Path: X-Original-To: rats@ietf.org Delivered-To: rats@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 50989131059; Mon, 18 Feb 2019 14:32:50 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Alissa Cooper To: "The IESG" Cc: rats-chairs@ietf.org, rats@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.91.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <155052917025.25974.9205578863833816002.idtracker@ietfa.amsl.com> Date: Mon, 18 Feb 2019 14:32:50 -0800 Archived-At: Subject: [Rats] Alissa Cooper's No Objection on charter-ietf-rats-00-02: (with COMMENT) X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 18 Feb 2019 22:32:51 -0000 Alissa Cooper has entered the following ballot position for charter-ietf-rats-00-02: No Objection When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/charter-ietf-rats/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- Thanks for addressing my concerns. From nobody Mon Feb 18 20:49:15 2019 Return-Path: X-Original-To: rats@ietf.org Delivered-To: rats@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 2736E124C04; Mon, 18 Feb 2019 20:49:08 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: The IESG To: "IETF-Announce" X-Test-IDTracker: no X-IETF-IDTracker: 6.91.0 Auto-Submitted: auto-generated Precedence: bulk Cc: rats@ietf.org MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit Message-ID: <155055174812.25950.13855899135183248613.idtracker@ietfa.amsl.com> Date: Mon, 18 Feb 2019 20:49:08 -0800 Archived-At: Subject: [Rats] WG Review: Remote ATtestation ProcedureS (rats) X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Feb 2019 04:49:08 -0000 A new IETF WG has been proposed in the Security Area. The IESG has not made any determination yet. The following draft charter was submitted, and is provided for informational purposes only. Please send your comments to the IESG mailing list (iesg@ietf.org) by 2019-02-28. Remote ATtestation ProcedureS (rats) ----------------------------------------------------------------------- Current status: BOF WG Chairs: Nancy Cam-Winget Roman Danyliw Assigned Area Director: Benjamin Kaduk Security Area Directors: Eric Rescorla Benjamin Kaduk Mailing list: Address: rats@ietf.org To subscribe: https://www.ietf.org/mailman/listinfo/rats Archive: https://mailarchive.ietf.org/arch/browse/rats/ Group page: https://datatracker.ietf.org/group/rats/ Charter: https://datatracker.ietf.org/doc/charter-ietf-rats/ Introduction ========== In network protocol exchanges, it is often the case that one entity (a relying party) requires evidence about the remote peer (and system components [RFC4949] thereof), in order to assess the trustworthiness of the peer. Remote attestation procedures (RATS) enable relying parties to establish a level of confidence in the trustworthiness of remote system components through the creation of attestation evidence by remote system components and a processing chain towards the relying party. A relying party can then decide whether to consider a remote system component trustworthy or not. To improve the confidence in a system component's trustworthiness, a relying party may require evidence about: * system component identity, * composition of system components, including nested components, * roots of trust, * assertion/claim origination or provenance, * manufacturing origin, * system component integrity, * system component configuration, * operational state and measurements of steps which led to the operational state, or * other factors that could influence trust decisions. While domain-specific attestation mechanisms such as Trusted Computing Group (TCG) Trusted Platform Module (TPM)/Trusted Software Stack (TSS), Fast Identity Online (FIDO) Alliance attestation, and Android Keystore attestation exist, there is no interoperable way to create and process attestation evidence to make determinations about system components among relying parties of different manufactures and origins. Goals ===== This WG will standardize formats for describing assertions/claims about system components and associated evidence; and procedures and protocols to convey these assertions/claims to relying parties. Given the security and privacy sensitive nature of these assertions/claims, the WG will specify approaches to protect this exchanged data. While a relying party may use reference, known, or expected values or thresholds to assess the assertions/claims, the procedures for this activity are out of scope for this WG (without rechartering). The working group will cooperate and coordinate with other IETF WGs such as TEEP, SUIT, and SACM, and work with organizations in the community, such as the TCG and the FIDO Alliance, as appropriate. The WG will also evaluate prior work such as NEA and proprietary attestation technologies like the Android Keystore. Program of Work ============== The working group will develop standards supporting interoperable remote attestation procedures for system components. The main deliverables are as follows: 1. Specify use cases for remote attestation (to document and achieve WG consensus but not expected to be published as an RFC). 2. Specify terminology and architecture that enable attestation techniques. The architecture may include a system security model for the signing key material and involve at least the system component, system component provider, and the relying authority. 3. Standardize an information model for assertions/claims which provide information about system components characteristics scoped by the specified use-cases. 4. Standardize data models that implement and secure the defined information model (e.g., CBOR Web Token structures [RFC8392], JSON Web Token structures [RFC7519]). 5. Standardize interoperable protocols to securely convey assertions/claims. Milestones: TBD From nobody Tue Feb 19 10:40:44 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E74A7130F37; Tue, 19 Feb 2019 10:40:34 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cert.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 87mVA-8QcAso; Tue, 19 Feb 2019 10:40:31 -0800 (PST) Received: from taper.sei.cmu.edu (taper.sei.cmu.edu [147.72.252.16]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4DC22130F36; Tue, 19 Feb 2019 10:40:31 -0800 (PST) Received: from korb.sei.cmu.edu (korb.sei.cmu.edu [10.64.21.30]) by taper.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id x1JIeQ5t008313; Tue, 19 Feb 2019 13:40:26 -0500 DKIM-Filter: OpenDKIM Filter v2.11.0 taper.sei.cmu.edu x1JIeQ5t008313 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cert.org; s=yc2bmwvrj62m; t=1550601626; bh=mRLiyHkEe/JpekHC1+B1JmYxudtUTHkz2fmCO9M6xRY=; h=From:To:CC:Subject:Date:References:In-Reply-To:From; b=mItib3x/y405XDP2W9bYmcRECX0wDOVUzdi9mqB53X0HWl6PqY+kAy3Pxo4xeSvbS z3Iag0y7vrm1/fSivXRUy0Yfi5XhEpqe37ABUM8iDSofwLdhop2C/o1hfH/LuO0IYz +BgZXv8BLwsAJZYl0jL3dyas3m8m5t3gVAp5grRA= Received: from CASSINA.ad.sei.cmu.edu (cassina.ad.sei.cmu.edu [10.64.28.249]) by korb.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id x1JIePu0008882; Tue, 19 Feb 2019 13:40:25 -0500 Received: from MARATHON.ad.sei.cmu.edu ([10.64.28.250]) by CASSINA.ad.sei.cmu.edu ([10.64.28.249]) with mapi id 14.03.0435.000; Tue, 19 Feb 2019 13:40:24 -0500 From: Roman Danyliw To: Alexey Melnikov , The IESG CC: "rats-chairs@ietf.org" , "rats@ietf.org" Thread-Topic: Alexey Melnikov's Yes on charter-ietf-rats-00-00: (with COMMENT) Thread-Index: AQHUvg6txxQz3k1aBEi7KU6Iyk6Hr6XngtFw Date: Tue, 19 Feb 2019 18:40:24 +0000 Message-ID: <359EC4B99E040048A7131E0F4E113AFC01857CC7A9@marathon> References: <154945232995.31197.5295482409361060517.idtracker@ietfa.amsl.com> In-Reply-To: <154945232995.31197.5295482409361060517.idtracker@ietfa.amsl.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.64.22.6] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Rats] Alexey Melnikov's Yes on charter-ietf-rats-00-00: (with COMMENT) X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Feb 2019 18:40:35 -0000 DQoNCj4gLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCj4gRnJvbTogQWxleGV5IE1lbG5pa292 IFttYWlsdG86YWFtZWxuaWtvdkBmYXN0bWFpbC5mbV0NCj4gU2VudDogV2VkbmVzZGF5LCBGZWJy dWFyeSA2LCAyMDE5IDY6MjUgQU0NCj4gVG86IFRoZSBJRVNHIDxpZXNnQGlldGYub3JnPg0KPiBD YzogcmF0cy1jaGFpcnNAaWV0Zi5vcmc7IHJhdHNAaWV0Zi5vcmcNCj4gU3ViamVjdDogQWxleGV5 IE1lbG5pa292J3MgWWVzIG9uIGNoYXJ0ZXItaWV0Zi1yYXRzLTAwLTAwOiAod2l0aCBDT01NRU5U KQ0KPiANCj4gQWxleGV5IE1lbG5pa292IGhhcyBlbnRlcmVkIHRoZSBmb2xsb3dpbmcgYmFsbG90 IHBvc2l0aW9uIGZvcg0KPiBjaGFydGVyLWlldGYtcmF0cy0wMC0wMDogWWVzDQo+IA0KPiBXaGVu IHJlc3BvbmRpbmcsIHBsZWFzZSBrZWVwIHRoZSBzdWJqZWN0IGxpbmUgaW50YWN0IGFuZCByZXBs eSB0byBhbGwgZW1haWwNCj4gYWRkcmVzc2VzIGluY2x1ZGVkIGluIHRoZSBUbyBhbmQgQ0MgbGlu ZXMuIChGZWVsIGZyZWUgdG8gY3V0IHRoaXMgaW50cm9kdWN0b3J5DQo+IHBhcmFncmFwaCwgaG93 ZXZlci4pDQo+IA0KPiANCj4gDQo+IFRoZSBkb2N1bWVudCwgYWxvbmcgd2l0aCBvdGhlciBiYWxs b3QgcG9zaXRpb25zLCBjYW4gYmUgZm91bmQgaGVyZToNCj4gaHR0cHM6Ly9kYXRhdHJhY2tlci5p ZXRmLm9yZy9kb2MvY2hhcnRlci1pZXRmLXJhdHMvDQo+IA0KPiANCj4gDQo+IC0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0NCj4gQ09NTUVOVDoNCj4gLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KPiANCj4gSSBkb24ndCBoYXZlIGEgc3Ry b25nIGZlZWxpbmcgb24gd2hldGhlciBvciBub3QgdGhlIHVzZSBjYXNlcyBkb2N1bWVudA0KPiBu ZWVkcyB0byBiZSBwdWJsaXNoZWQsIGJ1dCBJIGFncmVlIHRoYXQgdGhlIHF1ZXN0aW9uIHNob3Vs ZCBiZSBjb25zaWRlcmVkLg0KDQpVbmRlcnN0b29kLiAgQWxpc3NhIG1hZGUgdGhlIHNhbWUgcG9p bnQuICBUbyBhZGRyZXNzIHRoaXMsIHRoZSAtMDIgbm93IHJlYWRzOg0KDQoiMS4gU3BlY2lmeSB1 c2UgY2FzZXMgZm9yIHJlbW90ZSBhdHRlc3RhdGlvbiAodG8gZG9jdW1lbnQgYW5kIGFjaGlldmUg V0cNCmNvbnNlbnN1cyBidXQgbm90IGV4cGVjdGVkIHRvIGJlIHB1Ymxpc2hlZCBhcyBhbiBSRkMp LiINCg0KPiA+NC4gU3RhbmRhcmRpemUgaW50ZXJvcGVyYWJsZSBwcm90b2NvbHMgdG8gc2VjdXJl bHkgY29udmV5DQo+IGFzc2VydGlvbnMvY2xhaW1zLg0KPiANCj4gSXMgcGx1cmFsIGludGVuZGVk IGhlcmU/DQoNCk5vdCBuZWNlc3NhcmlseS4gIHMvcHJvdG9jb2wvcHJvdG9jb2wocykvLg0KDQpS b21hbg0KIA0KDQo= From nobody Tue Feb 19 10:55:30 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 33FD6128D0B; Tue, 19 Feb 2019 10:55:28 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cert.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WJDCg1hRJZfY; Tue, 19 Feb 2019 10:55:26 -0800 (PST) Received: from taper.sei.cmu.edu (taper.sei.cmu.edu [147.72.252.16]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0FD081277CC; Tue, 19 Feb 2019 10:55:25 -0800 (PST) Received: from korb.sei.cmu.edu (korb.sei.cmu.edu [10.64.21.30]) by taper.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id x1JItPS3010970; Tue, 19 Feb 2019 13:55:25 -0500 DKIM-Filter: OpenDKIM Filter v2.11.0 taper.sei.cmu.edu x1JItPS3010970 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cert.org; s=yc2bmwvrj62m; t=1550602525; bh=eIED176NjVgTT3+QwoGZB5BzMUd7Q/QiNOYsU3viJHI=; h=From:To:CC:Subject:Date:References:In-Reply-To:From; b=pFyySRRYSW2KiEiMQMGk6+1iF71ChoI0uN4n1rnUB1yElpHNg8/w6gR+ZuF2TX2Dx nNJIswqOhqNyw4myDEcqJyArYV5bLsFJbZChVCOaW/VxpsEwqV1cOmoXG20yq8DrCX eugvDqL1HlDtIPFRIXlRpH13He2OvMlCChe20DAo= Received: from CASSINA.ad.sei.cmu.edu (cassina.ad.sei.cmu.edu [10.64.28.249]) by korb.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id x1JItLsm012705; Tue, 19 Feb 2019 13:55:21 -0500 Received: from MARATHON.ad.sei.cmu.edu ([10.64.28.250]) by CASSINA.ad.sei.cmu.edu ([10.64.28.249]) with mapi id 14.03.0435.000; Tue, 19 Feb 2019 13:55:21 -0500 From: Roman Danyliw To: Martin Vigoureux , The IESG CC: "rats-chairs@ietf.org" , "rats@ietf.org" Thread-Topic: Martin Vigoureux's No Objection on charter-ietf-rats-00-00: (with COMMENT) Thread-Index: AQHUvsAi8663HER6Fkull2yh94lrKqXngx3A Date: Tue, 19 Feb 2019 18:55:20 +0000 Message-ID: <359EC4B99E040048A7131E0F4E113AFC01857CC82D@marathon> References: <154952854536.23379.9616689187634176854.idtracker@ietfa.amsl.com> In-Reply-To: <154952854536.23379.9616689187634176854.idtracker@ietfa.amsl.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.64.22.6] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Rats] Martin Vigoureux's No Objection on charter-ietf-rats-00-00: (with COMMENT) X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Feb 2019 18:55:28 -0000 DQoNCj4gLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCj4gRnJvbTogTWFydGluIFZpZ291cmV1 eCBbbWFpbHRvOm1hcnRpbi52aWdvdXJldXhAbm9raWEuY29tXQ0KPiBTZW50OiBUaHVyc2RheSwg RmVicnVhcnkgNywgMjAxOSAzOjM2IEFNDQo+IFRvOiBUaGUgSUVTRyA8aWVzZ0BpZXRmLm9yZz4N Cj4gQ2M6IHJhdHMtY2hhaXJzQGlldGYub3JnOyByYXRzQGlldGYub3JnDQo+IFN1YmplY3Q6IE1h cnRpbiBWaWdvdXJldXgncyBObyBPYmplY3Rpb24gb24gY2hhcnRlci1pZXRmLXJhdHMtMDAtMDA6 ICh3aXRoDQo+IENPTU1FTlQpDQo+IA0KPiBNYXJ0aW4gVmlnb3VyZXV4IGhhcyBlbnRlcmVkIHRo ZSBmb2xsb3dpbmcgYmFsbG90IHBvc2l0aW9uIGZvcg0KPiBjaGFydGVyLWlldGYtcmF0cy0wMC0w MDogTm8gT2JqZWN0aW9uDQo+IA0KPiBXaGVuIHJlc3BvbmRpbmcsIHBsZWFzZSBrZWVwIHRoZSBz dWJqZWN0IGxpbmUgaW50YWN0IGFuZCByZXBseSB0byBhbGwgZW1haWwNCj4gYWRkcmVzc2VzIGlu Y2x1ZGVkIGluIHRoZSBUbyBhbmQgQ0MgbGluZXMuIChGZWVsIGZyZWUgdG8gY3V0IHRoaXMgaW50 cm9kdWN0b3J5DQo+IHBhcmFncmFwaCwgaG93ZXZlci4pDQo+IA0KPiANCj4gDQo+IFRoZSBkb2N1 bWVudCwgYWxvbmcgd2l0aCBvdGhlciBiYWxsb3QgcG9zaXRpb25zLCBjYW4gYmUgZm91bmQgaGVy ZToNCj4gaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvY2hhcnRlci1pZXRmLXJhdHMv DQo+IA0KPiANCj4gDQo+IC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCj4gQ09NTUVOVDoNCj4gLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LQ0KPiANCj4gSGVsbG8sDQo+IA0KPiBJIG1vc3RseSBoYXZlIHF1ZXN0aW9ucyBmb3IgY2xhcmlm aWNhdGlvbnMuIFRoYW5rIHlvdS4NCj4gDQo+ICAgIFJlbHlpbmcgcGFydGllcyByZXF1aXJlIGV2 aWRlbmNlIGFib3V0IHRoZSB0cnVzdHdvcnRoaW5lc3Mgb2YgcmVtb3RlDQo+IHN5c3RlbQ0KPiAg ICBjb21wb25lbnRzIFtSRkM0OTQ5XSB0aGV5IGludGVyYWN0IHdpdGguIFJlbW90ZSBhdHRlc3Rh dGlvbiBwcm9jZWR1cmVzDQo+IChSQVRTKQ0KPiAgICBlbmFibGUgcmVseWluZyBwYXJ0aWVzIHRv IGVzdGFibGlzaCBhIGxldmVsIG9mIGNvbmZpZGVuY2UgaW4gdGhlDQo+ICAgIHRydXN0d29ydGhp bmVzcyBvZiByZW1vdGUgc3lzdGVtIGNvbXBvbmVudHMgYnkgY3JlYXRpbmcgYW5kIHByb2Nlc3Np bmcNCj4gICAgYXR0ZXN0YXRpb24gZXZpZGVuY2UuDQo+IEknbSBub3QgYSBuYXRpdmUgRW5nbGlz aCByZWFkZXIsIGJ1dCB0aGlzIHNlbnRlbmNlIGdpdmVzIG1lIHRoZSBpbXByZXNzaW9uDQo+IHRo YXQgdGhlIHJlbHlpbmcgcGFydGllcyB3aWxsIGNyZWF0ZSB0aGUgYXR0ZXN0YXRpb24gZXZpZGVu Y2UuDQo+IElzIHRoYXQgdGhlIGNhc2U/IE15IGxpbWl0ZWQgdW5kZXJzdGFuZGluZyBvZiB0aGUg dG9waWMgbWFrZXMgbWUgdGhpbmsgdGhhdA0KPiB0aGUgcmVtb3RlIHN5c3RlbSB3aWxsIGNyZWF0 ZSB0aGUgYXR0ZXN0YXRpb24gYW5kIHRoZSByZWx5aW5nIHBhcnRpZXMgd2lsbA0KPiBwcm9jZXNz IGl0Lg0KDQpZb3UgaGF2ZSBpdCByaWdodC4gIFRoZSByZW1vdGUgc3lzdGVtcyBwcm92aWRlIHRo ZSBjbGFpbXMgdGhhdCBhcmUgdXNlZCBieSB0aGUgcmVseWluZyBwYXJ0eSB0byBtYWtlIHRydXN0 IGRlY2lzaW9uLg0KDQo+ICAgIFdoaWxlIGEgcmVseWluZyBwYXJ0eSBtYXkgdXNlIHJlZmVyZW5j ZSB2YWx1ZXMgdG8gYXNzZXNzIHRoZQ0KPiAgICBhc3NlcnRpb25zL2NsYWltcyB0aGUgcHJvY2Vk dXJlcyBmb3IgdGhpcyBhY3Rpdml0eSBhcmUgb3V0IG9mIHNjb3BlIGZvciB0aGlzDQo+ICAgIFdH Lg0KPiBJIGNhbiB1bmRlcnN0YW5kIHdoeSwgYnV0IEkgd291bGQgYWxzbyBzZWUgc29tZSB2YWx1 ZSBpbiBoYXZpbmcgYSBkb2N1bWVudA0KPiB3aGljaCB3b3VsZCBjb3ZlciB0aGlzLg0KDQpZb3Ug YXJlIG5vdCBhbG9uZS4gIFRoaXMgdG9waWMgd2FzIHRoZSBzb3VyY2Ugb2Ygc2lnbmlmaWNhbnQg ZGlzY3Vzc2lvbiBvbiB0aGUgUkFUUyBsaXN0IHdpdGggZ3JvdXBzIGFyZ3VpbmcgZm9yIGl0cyBu ZWVkIGFuZCBvdGhlcnMgc2Vla2luZyBzaW1wbGljaXR5LiAgVGhlIHByb2dyYW0gb2Ygd29yayB1 c2VkIGF0IElFVEYgMTAzIGxpc3RlZCBhbiBhZGRpdGlvbmFsIGl0ZW0sICJTcGVjaWZ5IGludGVy b3BlcmFibGUgcHJvdG9jb2xzIHRvIGFwcHJhaXNlIGF0dGVzdGF0aW9uIGV2aWRlbmNlIHZpYSBy ZWZlcmVuY2UgdmFsdWVzLiIsIHRvIGNhcHR1cmUgc3VjaCBhIHByb3RvY29sLiAgSG93ZXZlciwg YWZ0ZXIgc2lnbmlmaWNhbnQgZGlzY3Vzc2lvbiBvbiBsaXN0LCB0aGUgY29uc2Vuc3VzIG9mIHRo ZSBwYXJ0aWNpcGFudHMgZHVyaW5nIHRoZSBKYW4tMTYtMjAxOSB0ZWxjb24gb24gV0cgc2NvcGlu ZyAoaHR0cHM6Ly9tYWlsYXJjaGl2ZS5pZXRmLm9yZy9hcmNoL21zZy9yYXRzLy1ycV9nUXEyTE5U ZW9mRzU1eEhfd1BTQjFfSSkgd2FzIHRvIHJlZHVjZSB0aGUgc2NvcGUgdGhlIGNoYXJ0ZXIgdG8g YXJlYXMgb2YgYWdyZWVtZW50LiAgVGhpcyBjb25zZW5zdXMgbGVkIHRvIHRoZSBhZGRpdGlvbiBv ZiB0aGUgcmVmZXJlbmNlZCBsYW5ndWFnZSBhYm92ZSBtYWtpbmcgd29yayBvbiByZWZlcmVuY2Vz IHZhbHVlIG91dCBvZiBzY29wZS4gIElmIHRoZSBXRyBpcyBhcHByb3ZlZCwgYW5kIHdpdGggdGhl IGJlbmVmaXQgb2YgdGhlIGN1cnJlbnRseSBkZWZpbmVkIHdvcmssIHRoaXMgdG9waWMgd291bGQg YmUgcmV2aXNpdGVkLg0KDQo+IEFib3V0IHRoZSAicHJvcHJpZXRhcnkgYXR0ZXN0YXRpb24gdGVj aG5vbG9naWVzIiwgYXJlIHRoZXNlIHB1YmxpY2x5DQo+IGF2YWlsYWJsZS9hY2Nlc3NpYmxlPyAo c2ltaWxhciB0byBCZW4ncyBxdWVzdGlvbikNCg0KWWVzLiAgVGhlIHJlZmVyZW5jZWQgbGFuZ3Vh Z2Ugd2FzIGNsZWFuZWQgdXAgaW4gLTAyIHRvIG1vcmUgY2xlYW5seSBkZWxpbmVhdGUgaW5mbGln aHQgSUVURiB3b3JrLCBpbmZsaWdodCBjb21tdW5pdHkgd29yaywgY29uY2x1ZGVkIElFVEYgd29y aywgYW5kIGV4aXN0aW5nIHByb3ByaWV0YXJ5IHRlY2guICBUaGlzIG5ldyB0ZXh0IHJlZmVyZW5j ZXMgdGhlIHN0YXJ0aW5nIHBvaW50cyBvZiBSQVRTOg0KDQotLVsgc25pcCBdLS0NClRoZSB3b3Jr aW5nIGdyb3VwIHdpbGwgY29vcGVyYXRlIGFuZCBjb29yZGluYXRlIHdpdGggb3RoZXIgSUVURiBX R3Mgc3VjaCBhcw0KVEVFUCwgU1VJVCwgYW5kIFNBQ00sIGFuZCB3b3JrIHdpdGggb3JnYW5pemF0 aW9ucyBpbiB0aGUgY29tbXVuaXR5LCBzdWNoIGFzIHRoZSBUQ0cNCmFuZCB0aGUgRklETyBBbGxp YW5jZSwgYXMgYXBwcm9wcmlhdGUuIFRoZSBXRyB3aWxsIGFsc28gZXZhbHVhdGUgcHJpb3Igd29y aw0Kc3VjaCBhcyBORUEgYW5kIHByb3ByaWV0YXJ5IGF0dGVzdGF0aW9uIHRlY2hub2xvZ2llcyBs aWtlIHRoZSBBbmRyb2lkIEtleXN0b3JlLg0KLS1bIHNuaXAgXS0tDQoNCklzIHRoYXQgY2xlYXIg ZW5vdWdoPw0KDQo+ICAgIFRoZSBhcmNoaXRlY3R1cmUgbWF5IGluY2x1ZGUgYSBzeXN0ZW0gc2Vj dXJpdHkgbW9kZWwgZm9yIHRoZSBzaWduaW5nIGtleQ0KPiAgICBtYXRlcmlhbCBhbmQgaW52b2x2 ZSBhdCBsZWFzdCB0aGUgc3lzdGVtIGNvbXBvbmVudCwgc3lzdGVtIGNvbXBvbmVudA0KPiAgICBw cm92aWRlciwgYW5kIHRoZSByZWx5aW5nIGF1dGhvcml0eS4NCj4gRG9lcyB0aGF0IGltcGx5IG5l dyB3b3JrIG9yIGlzIGl0IGp1c3QgYWJvdXQgcmV1c2luZyB3aGF0IG1heSBhbHJlYWR5IGV4aXN0 Pw0KPiBCdXQgSSBzZWUgQWRhbSBoYWQgYSBzaW1pbGFyIHF1ZXN0aW9uLg0KDQpOZXcgd29yayBt YXkgYmUgcmVxdWlyZWQsIGJ1dCB0aGF0J3Mgbm90IHRoZSBzdGFydGluZyBwb3NpdGlvbi4gIFRo ZSBpbnRlbnQgaXMgdG8gcmV1c2UgYXMgbXVjaCBhcyBwb3NzaWJsZSBhbmQgZGVmaW5lIHNvbWV0 aGluZyBuZXcgb25seSB3aGVuIGV4aXN0aW5nIHdvcmsgZG9lc24ndCBtZWV0IHRoZSByZXF1aXJl bWVudHMuICANCg0KVGhhbmtzIGZvciB0aGUgZmVlZGJhY2shDQoNClJvbWFuDQo= From nobody Tue Feb 19 10:58:49 2019 Return-Path: X-Original-To: rats@ietf.org Delivered-To: rats@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 1A26F1277CC; Tue, 19 Feb 2019 10:58:47 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: IETF Meeting Session Request Tool To: Cc: rats@ietf.org, lflynn@amsl.com, rats-chairs@ietf.org, kaduk@mit.edu X-Test-IDTracker: no X-IETF-IDTracker: 6.91.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <155060272709.20704.12570453324575934105.idtracker@ietfa.amsl.com> Date: Tue, 19 Feb 2019 10:58:47 -0800 Archived-At: Subject: [Rats] rats - New Meeting Session Request for IETF 104 X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Feb 2019 18:58:47 -0000 A new meeting session request has just been submitted by Liz Flynn, on behalf of the rats working group. --------------------------------------------------------- Working Group Name: Remote ATtestation ProcedureS Area Name: Security Area Session Requester: Liz Flynn Number of Sessions: 1 Length of Session(s): 2 Hours Number of Attendees: 100 Conflicts to Avoid: People who must be present: Nancy Cam-Winget Roman Danyliw Benjamin Kaduk Resources Requested: Special Requests: Avoid SEC area conflicts. --------------------------------------------------------- From nobody Tue Feb 19 11:09:56 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7E38A12950A for ; Tue, 19 Feb 2019 11:09:55 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 97UIJOy9lhtV for ; Tue, 19 Feb 2019 11:09:53 -0800 (PST) Received: from tuna.sandelman.ca (tuna.sandelman.ca [209.87.249.19]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 866E01277CC for ; Tue, 19 Feb 2019 11:09:53 -0800 (PST) Received: from sandelman.ca (unknown [IPv6:2607:f0b0:f:2:56b2:3ff:fe0b:d84]) by tuna.sandelman.ca (Postfix) with ESMTP id D526638263 for ; Tue, 19 Feb 2019 14:09:45 -0500 (EST) Received: by sandelman.ca (Postfix, from userid 179) id B880583B; Tue, 19 Feb 2019 14:09:51 -0500 (EST) Received: from sandelman.ca (localhost [127.0.0.1]) by sandelman.ca (Postfix) with ESMTP id B72834B1 for ; Tue, 19 Feb 2019 14:09:51 -0500 (EST) From: Michael Richardson To: rats@ietf.org In-Reply-To: <20190216001429.GH89393@kduck.mit.edu> References: <20190216001429.GH89393@kduck.mit.edu> X-Mailer: MH-E 8.6; nmh 1.7+dev; GNU Emacs 24.5.1 X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m Archived-At: Subject: Re: [Rats] new RATS charter in datatracker (charter-ietf-rats) X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Feb 2019 19:09:55 -0000 --=-=-= Content-Type: text/plain Benjamin Kaduk wrote: > Thanks to the IESG feedback and subsequent discussion, I've uploaded a new > version of the charter text to the datatracker at > https://datatracker.ietf.org/doc/charter-ietf-rats/ . Further feedback is > still welcome, and hopefully we can get to external review soon. (The > "History" tab will produce a diff between the 00-00 and 00-02.) It reads pretty nicely. Thank you. > 1. Specify use cases for remote attestation (to document and achieve WG > consensus but not expected to be published as an RFC). -- Michael Richardson , Sandelman Software Works -= IPv6 IoT consulting =- --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEEbsyLEzg/qUTA43uogItw+93Q3WUFAlxsVH8ACgkQgItw+93Q 3WXAaQgAiYriHuFK0OZu3AGy4j6LY5OmjiBTMaA2O6Lzd7X30gJbKQnYmEBcOSWf vH8ngiHeyyc33vKx2xy8Se50F8iCqZFIGTpE9oa1klYOchshcLqykjb1mgVG5eoi sI/Bo35QO567N3M7snQvVkB+iQZgU+SaNZDMqBMAEYdQ2x4rnBSwSD/K8uRa9P1I QjKVOLQeaaCS6r4OtcL0Kv9FG4qwOUGXvTc1QEbeJCgf74Vubuewba+SmzZJnqIg hBVMRg94SJ/jNo+9Psi5N8ujvqw//UL/Sd9ZSmmwCS0HLGCioejtZm2uTHVzATyZ +Ngem35iVSuQqCMgAwSD0eScIhbqHg== =L4t+ -----END PGP SIGNATURE----- --=-=-=-- From nobody Wed Feb 20 22:36:55 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 155F9130E89; Wed, 20 Feb 2019 22:33:55 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=telefonica.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oUvTmgGypXHy; Wed, 20 Feb 2019 22:33:51 -0800 (PST) Received: from EUR03-VE1-obe.outbound.protection.outlook.com (mail-eopbgr50135.outbound.protection.outlook.com [40.107.5.135]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B612C12F1AB; Wed, 20 Feb 2019 22:33:50 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=telefonica.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=PkPEnllE0E/jWU/UjYfXd+b8k5SICHFF4OT+wRvwhv4=; b=M3xkvyQN72oA5EnmatS4OBfFe5ho3ZPeDlnvfYPXaMNdrh1w0m0dVv0IWO2Yp3GUKQWhReP9VY0yW7Vy9GYcrjJIOeZDQnevaiu/Jknu/QgVINX+m9qCgjFpBncZs3mayuf6MSGq/mgSkyj+NdOZzfQgIPr4pbrWjlc65gZA7qA= Received: from DB3PR0602MB3788.eurprd06.prod.outlook.com (52.134.70.148) by DB3PR0602MB3833.eurprd06.prod.outlook.com (52.134.72.32) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1622.18; Thu, 21 Feb 2019 06:33:47 +0000 Received: from DB3PR0602MB3788.eurprd06.prod.outlook.com ([fe80::686f:4013:7aea:f279]) by DB3PR0602MB3788.eurprd06.prod.outlook.com ([fe80::686f:4013:7aea:f279%5]) with mapi id 15.20.1622.018; Thu, 21 Feb 2019 06:33:47 +0000 From: "Diego R. Lopez" To: Diego en su iPad Thread-Topic: Special Issue on Automated Management of Security in Software Networks Thread-Index: AQHUya9m0gS306d2ZEOzgm4VrA1gfg== Date: Thu, 21 Feb 2019 06:33:47 +0000 Message-ID: <6CE55C2C-15B8-4C98-874B-D27904B6974B@telefonica.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.10.6.190114 authentication-results: spf=none (sender IP is ) smtp.mailfrom=diego.r.lopez@telefonica.com; x-originating-ip: [47.89.12.64] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: eb1fd76a-1c97-4195-57a0-08d697c68919 x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(5600110)(711020)(4605104)(4618075)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(2017052603328)(7153060)(49563074)(7193020); SRVR:DB3PR0602MB3833; x-ms-traffictypediagnostic: DB3PR0602MB3833: x-ms-exchange-purlcount: 1 x-microsoft-exchange-diagnostics: =?utf-8?B?MTtEQjNQUjA2MDJNQjM4MzM7MjM6UkQrK2w1VmpzdTNqN3BxYWdQVVhFYkVU?= =?utf-8?B?c29yb0xJVEZ2dVMzRkJvOXExUHBSM00xZVhuTU9LUXJhRVpMZmRxV1hqNnBY?= =?utf-8?B?Y0hCbmM1NEhxeTVBRW1WQlFUYVJkUi9aTnMwWVkyQ29MVWlQei9yZ3dkMUVY?= =?utf-8?B?VGQvZXFhNTFlM0tSZlUwdHd6L3hIOVY5cVI2eEhuYWRNanRIS1FjSFhpV3li?= =?utf-8?B?RUZSZTkxWkcyeUN1UmVUdVVySHZmVTFLZkh2Y2x1TkZiN2YvWDlwMWg1ZXpk?= =?utf-8?B?NmZLTWQ5bStxS1k5SnpBbGxwbDVHMGtwUHl0VStyYllGUmJsSjZwS1ZIY2g4?= =?utf-8?B?UWhSQWlLNVBtTTF3M3RDdjNHeGo4WDY1UWhwVUFjdlpjeXZLekFNb0VYNFpX?= =?utf-8?B?dzRUb2pyNTZVSjluaU5kVnYwN3ZUOFpDdjdkNmorN1VWNlh3WEVIbVJNdFdO?= =?utf-8?B?b0JNQjEzamZrU2hIem5JcEdxME5Rd2VsOW93bkU5ZTcvRE5hLzJQbTVRcDJZ?= =?utf-8?B?Ly9xMXNTOE5TVzVNa3RYUkVEMlRIQkcwVUxYZ1BwRHhRZG1JQkpzR1NSaTla?= =?utf-8?B?RnBqazV1MnpCVUZFRTZRa292OVNpN2V6M0lqdUJ1S1d6ZXFhSW10bCtGRnI3?= =?utf-8?B?ZTZSM0tWMy9ZQjI4VXJiWS9WWUZoK2c4bXMycktFQ3hZUVM4UWdaMVI5SSt0?= =?utf-8?B?UDFQN2wzMWxMUmt2RXgvNDd1cVEwZnFHenB3Qm5za2pmQVp3cm5MS05ITHhM?= =?utf-8?B?SThWaE4rMFdCdmtFQkNxNXlLbWVVeWQ3NWtrV3lIYjZpeGZPREtkMGJrb0Ri?= =?utf-8?B?dTVxbWJlTzExMGt5QUErLzd1dkttZ0ZQOEQveSt5OGVXUUVXekFSTmFqWWg2?= =?utf-8?B?MDRMVE5zZ3dSWXBiNDR1NWJ6aE5oaGM3Q1FtcTRsU1BUNGl2a1gxNVQ1OWM2?= =?utf-8?B?cW1tNWNnRzZRTUNkT0hYakl0QitmOUZWeUM2S2o3RGZGdEkwZ0MxOC9uNSsy?= =?utf-8?B?QXdlYUhLSWZBMWluL2VGUWNqZDZBaDZUbnBUR1VvakJJN2hCUG5LVnNBUkhj?= =?utf-8?B?WjNodm9hWkdNOFVEbko0VDVOTlZhM2hXcTR3RU9JMEdFUFdhc2h3ck4wOE1O?= =?utf-8?B?UUlob1pVRjRoL0ZaT3RTZWNZR0lrS29kRHlUcnNXMUtiSytvc1BKK2N6L1pu?= =?utf-8?B?a0NUL3B3NEZ1eFBnT1lUL01uOWJSSUx3cWFuVks0QjZGdkRtZENPQm9nTTc3?= =?utf-8?B?VUNKR1NhU2I3ZDBOWi9mWXljM0lkcU5JbmtuSWJ0c2E5bkZKOVh4VXFrOS9l?= =?utf-8?B?em9RZ0F1cXBGSnFQWS9UdlYwcE9ia3YzalF3NUt2WlNjLzNSRzdjVXFhSVRz?= =?utf-8?B?U1dPMW1NUzl4eVNKdUpCUDhuMmNxeFYya2YrZjU5N3BYaXJrYlNEWDlmOHdK?= =?utf-8?B?MFpsNEFCTi8yd2NpbHBUc3FyV1pqYWV0TGRjaDJLNjlkMlkvSTRHNGN2RExr?= =?utf-8?B?SGVLVE9Gam53RUNsc3NHVWtHUWdhR1Bwc0dHSlJlMXAzS2xFcW1HUUlVTmVk?= =?utf-8?B?VTNOa3ZaNUxXLzBZaWN3RUIvc3NULzJHdTYzTmtZSHFhKzArMUUvajZlOEFq?= =?utf-8?B?eDhsa0JKQnNHMit2Y2pTZTIzRE9FbzdCNlRqOHVxOE9yc1NZdEhzY0FrKzc3?= =?utf-8?B?S3VvTnZNR1QvT2g5V1FSZ3pRR2tJcUI0Z2xlQjdtSGs4TU92Y0xGbEpHU2l4?= =?utf-8?B?ZWVMLzRYaWpycGh1WGdiejE5TThPdWhpQThDL1ptMHdLV0Y3Nm5RUSszSlFv?= =?utf-8?B?TUhPRDlBRURlZ1dSbmVwdHhnMXZMNHNYa1F6VGhaYmdXUVB0a3IvU2ZFN2h4?= =?utf-8?Q?N+yNKxRGjbo6NK7DF6hU1y1EVW3IJu28Ne?= x-microsoft-antispam-prvs: x-forefront-prvs: 09555FB1AD x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(39860400002)(396003)(376002)(346002)(136003)(366004)(40134004)(189003)(199004)(106356001)(81156014)(186003)(7110500001)(8676002)(81166006)(99936001)(478600001)(105586002)(45080400002)(25786009)(102836004)(68736007)(6506007)(7416002)(99286004)(6512007)(26005)(236005)(6916009)(606006)(33656002)(8936002)(14454004)(6436002)(97736004)(7736002)(6306002)(54896002)(316002)(786003)(58126008)(6486002)(71190400001)(2420400007)(71200400001)(2906002)(83716004)(15650500001)(5660300002)(966005)(82746002)(6116002)(86362001)(3846002)(36756003)(2616005)(476003)(14444005)(486006)(256004)(53936002)(66574012)(66066001); DIR:OUT; SFP:1102; SCL:1; SRVR:DB3PR0602MB3833; H:DB3PR0602MB3788.eurprd06.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: telefonica.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam-message-info: 7oXKaqsz50nOl2ibo52LEwcSFYdatbJN3EzD1sdhfgbjLBPi1FkobivDbrRNUEWajM08WmPb1jnC9sTvawd24cNpwOvFR+xYmw6J+YriGurQZuPb9w3QPejM3bbgBuXneZD8ecQiLpw3jvN8arsVFQ2PsYA9W2ucD2JBj5bh8ODbminXTHD8kx265+/RXQrH2Q4vdnWGJXERRtVBI774+fC7GtZcgaYEa6uxs3uQWagFh5GuMXiH+1iSo703k2jrTAdt6zqNCRubVO1oEMGnvMqdB8tcZ+kBv6dLKOTU9LKxaoBZv8wgEoUY9fjaUf5NGZUD1tZsZvLjCd+/zhZ6Qxh+c1xKTjwHoKQcwOqN70xWhhEy+4X6HN6RhtT5AC2RQOpy55T3h9VOA6phICqHSEBC4CqGPLs6D63N/wxeqz4= Content-Type: multipart/mixed; boundary="_004_6CE55C2C15B84C98874BD27904B6974Btelefonicacom_" MIME-Version: 1.0 X-OriginatorOrg: telefonica.com X-MS-Exchange-CrossTenant-Network-Message-Id: eb1fd76a-1c97-4195-57a0-08d697c68919 X-MS-Exchange-CrossTenant-originalarrivaltime: 21 Feb 2019 06:33:47.7441 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 9744600e-3e04-492e-baa1-25ec245c6f10 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB3PR0602MB3833 Archived-At: X-Mailman-Approved-At: Wed, 20 Feb 2019 22:36:53 -0800 Subject: [Rats] Special Issue on Automated Management of Security in Software Networks X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 21 Feb 2019 06:33:56 -0000 --_004_6CE55C2C15B84C98874BD27904B6974Btelefonicacom_ Content-Type: multipart/alternative; boundary="_000_6CE55C2C15B84C98874BD27904B6974Btelefonicacom_" --_000_6CE55C2C15B84C98874BD27904B6974Btelefonicacom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGksDQoNCldpdGggYWxsIGR1ZSBhcG9sb2dpZXMgZm9yIHBvc3NpYmxlIGR1cGxpY2F0ZXMsIGhl cmUgeW91IGdvIGEgY2FsbCBmb3IgcGFwZXJzIHRoYXQgSSB0aGluayBjYW4gYmUgb2YgeW91ciBp bnRlcmVzdC4NCg0KLS0NCiJFc3RhIHZleiBubyBmYWxsYXJlbW9zLCBEb2N0b3IgSW5maWVybm8i DQoNCkRyIERpZWdvIFIuIExvcGV6DQpUZWxlZm9uaWNhIEkrRA0KaHR0cHM6Ly93d3cubGlua2Vk aW4uY29tL2luL2RyMmxvcGV6Lw0KDQplLW1haWw6IGRpZWdvLnIubG9wZXpAdGVsZWZvbmljYS5j b208bWFpbHRvOmRpZWdvLnIubG9wZXpAdGVsZWZvbmljYS5jb20+DQpUZWw6ICAgICAgICAgKzM0 IDkxMyAxMjkgMDQxDQpNb2JpbGU6ICArMzQgNjgyIDA1MSAwOTENCi0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0NCg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCg0K RXN0ZSBtZW5zYWplIHkgc3VzIGFkanVudG9zIHNlIGRpcmlnZW4gZXhjbHVzaXZhbWVudGUgYSBz dSBkZXN0aW5hdGFyaW8sIHB1ZWRlIGNvbnRlbmVyIGluZm9ybWFjacOzbiBwcml2aWxlZ2lhZGEg byBjb25maWRlbmNpYWwgeSBlcyBwYXJhIHVzbyBleGNsdXNpdm8gZGUgbGEgcGVyc29uYSBvIGVu dGlkYWQgZGUgZGVzdGluby4gU2kgbm8gZXMgdXN0ZWQuIGVsIGRlc3RpbmF0YXJpbyBpbmRpY2Fk bywgcXVlZGEgbm90aWZpY2FkbyBkZSBxdWUgbGEgbGVjdHVyYSwgdXRpbGl6YWNpw7NuLCBkaXZ1 bGdhY2nDs24geS9vIGNvcGlhIHNpbiBhdXRvcml6YWNpw7NuIHB1ZWRlIGVzdGFyIHByb2hpYmlk YSBlbiB2aXJ0dWQgZGUgbGEgbGVnaXNsYWNpw7NuIHZpZ2VudGUuIFNpIGhhIHJlY2liaWRvIGVz dGUgbWVuc2FqZSBwb3IgZXJyb3IsIGxlIHJvZ2Ftb3MgcXVlIG5vcyBsbyBjb211bmlxdWUgaW5t ZWRpYXRhbWVudGUgcG9yIGVzdGEgbWlzbWEgdsOtYSB5IHByb2NlZGEgYSBzdSBkZXN0cnVjY2nD s24uDQoNClRoZSBpbmZvcm1hdGlvbiBjb250YWluZWQgaW4gdGhpcyB0cmFuc21pc3Npb24gaXMg cHJpdmlsZWdlZCBhbmQgY29uZmlkZW50aWFsIGluZm9ybWF0aW9uIGludGVuZGVkIG9ubHkgZm9y IHRoZSB1c2Ugb2YgdGhlIGluZGl2aWR1YWwgb3IgZW50aXR5IG5hbWVkIGFib3ZlLiBJZiB0aGUg cmVhZGVyIG9mIHRoaXMgbWVzc2FnZSBpcyBub3QgdGhlIGludGVuZGVkIHJlY2lwaWVudCwgeW91 IGFyZSBoZXJlYnkgbm90aWZpZWQgdGhhdCBhbnkgZGlzc2VtaW5hdGlvbiwgZGlzdHJpYnV0aW9u IG9yIGNvcHlpbmcgb2YgdGhpcyBjb21tdW5pY2F0aW9uIGlzIHN0cmljdGx5IHByb2hpYml0ZWQu IElmIHlvdSBoYXZlIHJlY2VpdmVkIHRoaXMgdHJhbnNtaXNzaW9uIGluIGVycm9yLCBkbyBub3Qg cmVhZCBpdC4gUGxlYXNlIGltbWVkaWF0ZWx5IHJlcGx5IHRvIHRoZSBzZW5kZXIgdGhhdCB5b3Ug aGF2ZSByZWNlaXZlZCB0aGlzIGNvbW11bmljYXRpb24gaW4gZXJyb3IgYW5kIHRoZW4gZGVsZXRl IGl0Lg0KDQpFc3RhIG1lbnNhZ2VtIGUgc2V1cyBhbmV4b3Mgc2UgZGlyaWdlbSBleGNsdXNpdmFt ZW50ZSBhbyBzZXUgZGVzdGluYXTDoXJpbywgcG9kZSBjb250ZXIgaW5mb3JtYcOnw6NvIHByaXZp bGVnaWFkYSBvdSBjb25maWRlbmNpYWwgZSDDqSBwYXJhIHVzbyBleGNsdXNpdm8gZGEgcGVzc29h IG91IGVudGlkYWRlIGRlIGRlc3Rpbm8uIFNlIG7Do28gw6kgdm9zc2Egc2VuaG9yaWEgbyBkZXN0 aW5hdMOhcmlvIGluZGljYWRvLCBmaWNhIG5vdGlmaWNhZG8gZGUgcXVlIGEgbGVpdHVyYSwgdXRp bGl6YcOnw6NvLCBkaXZ1bGdhw6fDo28gZS9vdSBjw7NwaWEgc2VtIGF1dG9yaXphw6fDo28gcG9k ZSBlc3RhciBwcm9pYmlkYSBlbSB2aXJ0dWRlIGRhIGxlZ2lzbGHDp8OjbyB2aWdlbnRlLiBTZSBy ZWNlYmV1IGVzdGEgbWVuc2FnZW0gcG9yIGVycm8sIHJvZ2Ftb3MtbGhlIHF1ZSBub3MgbyBjb211 bmlxdWUgaW1lZGlhdGFtZW50ZSBwb3IgZXN0YSBtZXNtYSB2aWEgZSBwcm9jZWRhIGEgc3VhIGRl c3RydWnDp8Ojbw0K --_000_6CE55C2C15B84C98874BD27904B6974Btelefonicacom_ Content-Type: text/html; charset="utf-8" Content-ID: <067FC283EE685B4EAFBD5F460D68D271@eurprd06.prod.outlook.com> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2 IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToy IDE1IDUgMiAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3Jt YWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGNtOw0KCW1hcmdpbi1i b3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJp IixzYW5zLXNlcmlmO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXBy aW9yaXR5Ojk5Ow0KCWNvbG9yOiMwNTYzQzE7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9 DQphOnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9y aXR5Ojk5Ow0KCWNvbG9yOiM5NTRGNzI7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpz cGFuLkVtYWlsU3R5bGUxNw0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1jb21wb3NlOw0KCWZv bnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0KLk1z b0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1mYW1pbHk6 IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6NjEyLjBw dCA3OTIuMHB0Ow0KCW1hcmdpbjo3MC44NXB0IDMuMGNtIDcwLjg1cHQgMy4wY207fQ0KZGl2Lldv cmRTZWN0aW9uMQ0KCXtwYWdlOldvcmRTZWN0aW9uMTt9DQotLT48L3N0eWxlPg0KPC9oZWFkPg0K PGJvZHkgbGFuZz0iRVMiIGxpbms9IiMwNTYzQzEiIHZsaW5rPSIjOTU0RjcyIj4NCjxkaXYgY2xh c3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEwLjBwdCI+SGksPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0i Zm9udC1zaXplOjEwLjBwdCI+V2l0aCBhbGwgZHVlIGFwb2xvZ2llcyBmb3IgcG9zc2libGUgZHVw bGljYXRlcywgaGVyZSB5b3UgZ28gYSBjYWxsIGZvciBwYXBlcnMgdGhhdCBJIHRoaW5rIGNhbiBi ZSBvZiB5b3VyIGludGVyZXN0LjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+PG86cD4m bmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMC4wcHQiPi0tPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPiZxdW90O0VzdGEgdmV6IG5v IGZhbGxhcmVtb3MsIERvY3RvciBJbmZpZXJubyZxdW90OzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij4mbmJz cDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjEwLjBwdCI+RHIgRGllZ28gUi4gTG9wZXo8bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+ VGVsZWZvbmljYSBJJiM0MztEPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPjxhIGhyZWY9Imh0dHBzOi8vd3d3 LmxpbmtlZGluLmNvbS9pbi9kcjJsb3Blei8iPjxzcGFuIHN0eWxlPSJjb2xvcjojMDU2M0MxIj5o dHRwczovL3d3dy5saW5rZWRpbi5jb20vaW4vZHIybG9wZXovPC9zcGFuPjwvYT4mbmJzcDs8bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEwLjBwdCI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPmUtbWFpbDombmJzcDs8L3Nw YW4+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij48YSBocmVmPSJt YWlsdG86ZGllZ28uci5sb3BlekB0ZWxlZm9uaWNhLmNvbSI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0 eWxlPSJjb2xvcjojMDU2M0MxIj48c3BhbiBsYW5nPSJFTi1VUyI+ZGllZ28uci5sb3BlekB0ZWxl Zm9uaWNhLmNvbTwvc3Bhbj48L3NwYW4+PC9hPjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEwLjBwdCI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij5UZWw6Jm5ic3A7Jm5ic3A7 Jm5ic3A7ICZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAmIzQzOzM0IDkxMyAxMjkgMDQxPG86cD48 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0Ii IHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij5Nb2JpbGU6ICZuYnNwOyYjNDM7MzQgNjgyIDA1MSAw OTE8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5n PSJFTi1HQiIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS08L3NwYW4+PHNwYW4gbGFuZz0iRU4tR0IiPjxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjwvZGl2Pg0KPGJyPg0KPGhyPg0KPGZvbnQgZmFjZT0iQXJpYWwiIGNvbG9yPSJHcmF5IiBz aXplPSIxIj48YnI+DQpFc3RlIG1lbnNhamUgeSBzdXMgYWRqdW50b3Mgc2UgZGlyaWdlbiBleGNs dXNpdmFtZW50ZSBhIHN1IGRlc3RpbmF0YXJpbywgcHVlZGUgY29udGVuZXIgaW5mb3JtYWNpw7Nu IHByaXZpbGVnaWFkYSBvIGNvbmZpZGVuY2lhbCB5IGVzIHBhcmEgdXNvIGV4Y2x1c2l2byBkZSBs YSBwZXJzb25hIG8gZW50aWRhZCBkZSBkZXN0aW5vLiBTaSBubyBlcyB1c3RlZC4gZWwgZGVzdGlu YXRhcmlvIGluZGljYWRvLCBxdWVkYSBub3RpZmljYWRvIGRlIHF1ZSBsYQ0KIGxlY3R1cmEsIHV0 aWxpemFjacOzbiwgZGl2dWxnYWNpw7NuIHkvbyBjb3BpYSBzaW4gYXV0b3JpemFjacOzbiBwdWVk ZSBlc3RhciBwcm9oaWJpZGEgZW4gdmlydHVkIGRlIGxhIGxlZ2lzbGFjacOzbiB2aWdlbnRlLiBT aSBoYSByZWNpYmlkbyBlc3RlIG1lbnNhamUgcG9yIGVycm9yLCBsZSByb2dhbW9zIHF1ZSBub3Mg bG8gY29tdW5pcXVlIGlubWVkaWF0YW1lbnRlIHBvciBlc3RhIG1pc21hIHbDrWEgeSBwcm9jZWRh IGEgc3UgZGVzdHJ1Y2Npw7NuLjxicj4NCjxicj4NClRoZSBpbmZvcm1hdGlvbiBjb250YWluZWQg aW4gdGhpcyB0cmFuc21pc3Npb24gaXMgcHJpdmlsZWdlZCBhbmQgY29uZmlkZW50aWFsIGluZm9y bWF0aW9uIGludGVuZGVkIG9ubHkgZm9yIHRoZSB1c2Ugb2YgdGhlIGluZGl2aWR1YWwgb3IgZW50 aXR5IG5hbWVkIGFib3ZlLiBJZiB0aGUgcmVhZGVyIG9mIHRoaXMgbWVzc2FnZSBpcyBub3QgdGhl IGludGVuZGVkIHJlY2lwaWVudCwgeW91IGFyZSBoZXJlYnkgbm90aWZpZWQgdGhhdCBhbnkgZGlz c2VtaW5hdGlvbiwNCiBkaXN0cmlidXRpb24gb3IgY29weWluZyBvZiB0aGlzIGNvbW11bmljYXRp b24gaXMgc3RyaWN0bHkgcHJvaGliaXRlZC4gSWYgeW91IGhhdmUgcmVjZWl2ZWQgdGhpcyB0cmFu c21pc3Npb24gaW4gZXJyb3IsIGRvIG5vdCByZWFkIGl0LiBQbGVhc2UgaW1tZWRpYXRlbHkgcmVw bHkgdG8gdGhlIHNlbmRlciB0aGF0IHlvdSBoYXZlIHJlY2VpdmVkIHRoaXMgY29tbXVuaWNhdGlv biBpbiBlcnJvciBhbmQgdGhlbiBkZWxldGUgaXQuPGJyPg0KPGJyPg0KRXN0YSBtZW5zYWdlbSBl IHNldXMgYW5leG9zIHNlIGRpcmlnZW0gZXhjbHVzaXZhbWVudGUgYW8gc2V1IGRlc3RpbmF0w6Fy aW8sIHBvZGUgY29udGVyIGluZm9ybWHDp8OjbyBwcml2aWxlZ2lhZGEgb3UgY29uZmlkZW5jaWFs IGUgw6kgcGFyYSB1c28gZXhjbHVzaXZvIGRhIHBlc3NvYSBvdSBlbnRpZGFkZSBkZSBkZXN0aW5v LiBTZSBuw6NvIMOpIHZvc3NhIHNlbmhvcmlhIG8gZGVzdGluYXTDoXJpbyBpbmRpY2FkbywgZmlj YSBub3RpZmljYWRvIGRlIHF1ZSBhDQogbGVpdHVyYSwgdXRpbGl6YcOnw6NvLCBkaXZ1bGdhw6fD o28gZS9vdSBjw7NwaWEgc2VtIGF1dG9yaXphw6fDo28gcG9kZSBlc3RhciBwcm9pYmlkYSBlbSB2 aXJ0dWRlIGRhIGxlZ2lzbGHDp8OjbyB2aWdlbnRlLiBTZSByZWNlYmV1IGVzdGEgbWVuc2FnZW0g cG9yIGVycm8sIHJvZ2Ftb3MtbGhlIHF1ZSBub3MgbyBjb211bmlxdWUgaW1lZGlhdGFtZW50ZSBw b3IgZXN0YSBtZXNtYSB2aWEgZSBwcm9jZWRhIGEgc3VhIGRlc3RydWnDp8Ojbzxicj4NCjwvZm9u dD4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_6CE55C2C15B84C98874BD27904B6974Btelefonicacom_-- --_004_6CE55C2C15B84C98874BD27904B6974Btelefonicacom_ Content-Type: application/pdf; name="756716[2].pdf" Content-Description: 756716[2].pdf Content-Disposition: attachment; filename="756716[2].pdf"; size=113330; creation-date="Thu, 21 Feb 2019 06:33:47 GMT"; modification-date="Thu, 21 Feb 2019 06:33:47 GMT" Content-ID: <98CA570AB034884B931421A89C257241@eurprd06.prod.outlook.com> Content-Transfer-Encoding: base64 JVBERi0xLjUKJdDUxdgKMTMgMCBvYmogPDwKL0xlbmd0aCA1ODQ2ICAgICAgCi9GaWx0ZXIgL0Zs YXRlRGVjb2RlCj4+CnN0cmVhbQp42u1dWXMcN5J+56/ox65ddalwVzkcEz6147Et74S0MxFa7gPd TUk95mGTog/9+slE4khUobqLFj2zD4wZmdWFRAJIfMhMJI7qVh3+rx1WP9CTf/765LOXJ0+fabMS /erl65XuV0JJ0SpjVi93q/9df9pszPpUSvNz838v/wKUNlBK00pg4ok+Oe2kDumRk9DtMOhIcaqE HjFQrbOJQ9tshFg/H/NwrZWJ5tWp0t2p7GyzkWJYn3ZCNRY4G3mqlP83KqHvoAibKjliPrTG9Ll+ wBrq+POrcTOH1opcy5KFaU1uAmanyuiOatii3Eb8tGuFHjX7m3Gz+9aqzNaM2wU1d6lZFdGbVhsm ealG+UGqIqd3So3yb6QDFsNqo/oAglPlrAcBNhL6AYoMfQBtLZmbvjXKcu74byx8Kduhz1QoJ2IY BUjkLtaoF60BJGzEEPl2kaaPUhOtGHJvtyMWwoJUJJcqIubViInSnGrMw7ZS8DoHMHZuvWk2mgD6 6lSSrDwo/V89qSqOMKfnihFd22ldVFUaQQXBeLTFeIw8NbRP1wYkE4A1lfGYGLS26xkwXRqOicPQ ClfCnZoGiOlta0D6qYOonrHqZUmgOowri/pmWlQvEsm4l6AeTD7TpkI/6TG4QHZ8PPIOd8eqYgdZ GY597i7BkFWrju76ynhkzWFqJIzHky9fnvx0IrymFivVu1bCsBKy160AbtvLk6dfXYrVF9cnfz3p Vm+A6r9Ool4XTMcL0PFz7zN/+CcMNlQjZ3xnuw6V1dAPq5vz1WtfyiHu+S0vURpGDD+yvXEC7AfC zrQKcJmKD0IQCof4aWcE/oP+MxZFo+Wf6PnjZhi8FvgYBC7+9KkX2aGaTGtNMhP0BuTfagU05e+v y25AMYFQmJikXjmZJbSMZ2aIinwRy2SyuUCHJFAjAIbRgAulAFFhIH559boZ1teNkOubRqj1dn/V 9Os3qG779VWj1+fvmo1a/wIvA5Fe/0Cpt82mX5+jA7DFgXF3g2N6j0Q+y29E5bl6qp8a0a3v9vTi EllfNaDT390S4b5R6/B4hn/cegscMct2j/zOkMcFEbzDos58hlQd/+5tg4TIlV5ufaUv8c2PmP8M Gnu1P799QsmhSdBgSnh/tvEKqwNNJUlA7zDb3hOiZHxOGxhB4Tv8qYG5Z+QF4NY/hypYbDhSb6NY gNX7c8+H8oX69uufmz4SY75rSt6dU0NDyyHxFxRF5Ibt9XTQaT419+Pu/IaSEjcTK4nip75DkoEX PW4GdKyw0JNOrZ8Quzd31BfD+oZEkBtq4D8j4W0LTEDjt2VPQhrgDzv5hnrTEF3seMTVOw+bCCMp TGzC3rPZn2M3bM+hDk+IZW4miEPk2gVunsWeVVxjXYATJ8Iix1Ud8QU8DV6EQBsAH8QkSnhA1gKG Dhg6Gh621p+Q/XvkHWrv347kyqrvJXzFYJ/RyqovXZAa9p9/VctAsARaXn34+T3W5A47aO9VAvZT oNyGrJHVzRlJ8LaNdZYKFJGler8AaWnsjQD4m1hBY1zofZT8bo8ABf97Mj6QjhryYxCRXMcuCN28 o5wTdYBZ3+Lz3WWjQgv9SxJh7FjkZ9eh+H0gCa08lcq8CXouqElWlI4VPKoYx6NkLEOqCuKEVKIj QIUxQEB3iBI/OEO6/3ORRqevHg1seB+bfBNqDfX3TGxReaLU6+swEPH37d7TX+2x8dvIPlYWKbYJ THdU31Sqb9frwOe4taAmyWQyQPNtm1A5JgYC5kiG44xY0A9AvLtu4ijz+G5xgHXrr/DtFT0XEuiS oUjqCGl+I1HaIERLdgASzmhMe32Q1QMyKKoOlBNVD0X5cU6qM1SmpmSus+x2RZW5ret81faXxDhq /VjDOxK0XQdFlHLaqdI+3lPKdVDhkePATfoTogl6I+R0UxngO+zOqOooE5cJviEduSNN7WIFznZB QlzH7yhtH3LyrsXfrEGElYhjTCTRn0UzgdYKB1s7ls8zzJM0z+BIFwSw2ATRaJKQIigrGNH7YFI3 32eUsc5F4qye8K+hYcyEG1keA4oY+qjmMMMxpHqiX7DxXmBxLOFbLkb8/Rp/3/lGZmGNjc5kgPpu LVwe7NYkSKO42RFGl8UatQCYSBWVDnI4o1fzfmwsNbXWoNOFqu4q6HOqjErKFp8vKS32tTebmDMX rYouJ4cT35J891Hivoq89NhIcIpH8su61HKXBvjQAIKCrtFt16RKvYXCtpCbQs9Za9voYpHn49Ui vPzvRslFOEXi4zhFqqCVyLXwv3Oar+KWa21yMWgCUhqnupICjfB6M62IN3DERgxY/Z4MRHAZsz+K yhkpUs8N9hBagLKcUQRFcFXMZpAsKGB8nJizUCdf2GWjmRI9j2kTlX0V6S59zwzm2ICyaqq5njfS sAoz6WoEAXp1iFN7H4VlFyksG902LImkbvtYlZkSebY0Iidso6Ctiw5oGpO68HP9kEGyt+jRwJ/J VO8iO6Yhby+OjzXVd4fGGvJ443HkxedVo5chJmQ//poYbVPvhGERikfi0gmdeu+eKKiPhpyEOAxu ifvEbfBss09XV9kbBVg6m5kYmWSSrar4BNEmW5U6G58Lu2xVHUEs7+1vZF4tAsC/ieq4xs3DvD6C MTlNQg44OED2rJHdnJFDdI2ERSPQazs2w0K94zywlJXkllgxqrA8oHEwNcIDHg9PbVsi+nMY5dZz Y5Mt1AlPQk1e09/bfZ6UnlPlokHG5JAPowS/hQyNCTNfX26aFdgEpKggbikDs28jiZ3/CtxxVF1g iXe70OHkNBl5ZDhzFW/k2NzSy2J44YujQwiJZodQqFQ5hIQphpAnigMHn48OHCSaGzjTSQ6B3o0w 5MQir10cnWp65zk+ihyQ2bNa+5TQWnxk0ZDwZh8mT/jvjnxo/z7MuqI6pqcZw4L08+NCp85Huosi ohDUx20lkpcl1g9LJNYPyTPA5zP6c2C49kPWc/D86Vf4tyeHMZV/jbLaYYNRLkN3P7kcrACTSz/M xV5vKXXeuQoeMPOTYqOkEtkTVR1Q3u5zKTsiWDQ98Nl5nEktwTBRpZkWi7KqLruWQBSNPP0aW3YK oajR3F9xgxzduSfVmt4xNTcSnrdl3lnYhzmEHJSvQYweYMAuebmDGrsYe+osHzcYkvpHwsNT+Ul8 NakYKuSoc4RkUwGM319Tteb0GhLfNwB2MJZAE9lyukLvWCb4PYymqf1Rk4w0C+aUQ39EbbZE9BmG Xoqo7ahWsSwknu9zTB3HSfAdi5OMxOeDU+94lLeMncWhKflMfn9DbxiAKM4+ar9j8wgfyg07P75t pOWTYJkmtyGY7seYNgfdMUw+lUY2UBFyy3wqaB/nydN42b+vRKuR0EnicnEdHYAfbvHNyFfCeROf XOoy2oA/0TnTcQIexpYXHjKLirNwfijQHXJ7hTDxCVEUrEt20Vfu1xTO8ssswcnKQWUFsxSQgT3/ dQ9E2YPsF0y1MG+yWXa0ApbDcbRygMRzxsQbJzusXyIEKMnTH5gQ0YR6IoRsiJTu52NwNk0ltFvv 8iqUn9VGyegYbo9eii5CYW/S6KTp7EeU5dCMAJKPufq+lL818J99XGwo1V4Nnp7zaWe658/+hpS0 UI2cZoPY80MAG7T5Ahs+CU4ZJQ8OsbxUAXYL6/MCU78Ats+xSm3ggJVECjYq8GcmJjqvc9Nk7CZw nWAVSUecWC9NZt5vknG6JIRnJY3LkgfWoa0+6G747DgxR4RG73ldBqmsLldzDQtGxcUMm4N7SODf M1ub4CnXYX2YT6xwsiXIEFtdLB4eWLOrOa9pxRu9Eg2OL3e9cA6F84b8PqkrDmXfHk0TCIOROTJM 2hVdTwSWWbNo37XDaVTwwbTL7mB4TostPoZsfX3feoPyYwPTyCfVolLQndK84PExrjT2ubv8XGRO SguCc2jzUlfKJcErWhA95nlRUVVTeWxCrrtyDRF/8yE1CVx6vwSpdt7q+f7rXLGSgqnnvwY/juTc 9dF/w8fjjg+yPOr46G5Y/x1pkt333BfMUMY+oI9BjraFuKEYmm6oRUC8DLZ8vbTvCquD+XCiQguZ 3CNy2aX1Rf1O9xrz7pI3HVakfDUYd3LHVFozoEnqk9nstrJAP94GENoLWoX3PWm0sIEkNXu8T8Ur zDAwo6rVhU+dNN3hKRnkOgyTsHUkrS1dc7V6LCSTtsrMTGYDl7zujS/JJFRVxEJJQ6+oEntqunsA X5ZbMeJ2mqs5hnHxQxV6IATY8HUVJnEZ8ukzI8NOLilU23eC7St0gSLu9RJd61J6hIpT4+gMe+cf CyS5HLdlcCcrdJG1PRvSoC51a4Rg0QRuFSC5VHb4u1zKLYQme6atD+5Ik/1iLY3UQ7k6TdlzdN67 u/hyYmLTzL3SkB/Zvh07Z7MON3lu2Q9MxfY6bMXIcZk4fUACORtmouzl0FaLhrY6ah9bIjtm46QP BXvS6h4VS68uI/jusnummBDkesdjwDbynJl+HZ7/y7gqjsUMo96EtG8b4Y75BmmNnbQE5PqOQhh5 94dJsZcpDIEeXfJvP30Odfou7GUFnpOlKJmX4ZkaGchCi6DrdpQ5hp8x+W4UPxyJqAyh9MtMIG4B WBY3ORjYGWs0obu2V/fVaBTEKRcl+GDzGzRGGi/ujIjr0jEgc82EkOP/eUsI8ppszQu52RYwvqA7 9Ru8khQw8TJalLPkuPWhr+5FKRrVi/FsnfJNlyf6brSLlPKOdx2yzBQ/67uFYAB2CxaA+y6vscPz AvjQ8qinPjwvrq5yVyMaOEGrrYKKga1OhxiE7HIkH55pEi8KfxTfs/kxPLRE81WjyIFFChoB6KL6 loawhczrLGIoSiqWKWReEu7ntscWMQfBViwg82WyA3Gj6EhYhw1qjoXV4hFFrBiIuTXCzHzRNmwt 7bPuksPEfLLapl25o6k1UPElywJkFT/uSSyU7WdNwWRmni/re0zSQoNh7rp0tV27fpLo/xzSRphe BUSall7xOG6xoVIyayVd2vFFIj4S45ju6Z2Tga2He//egO7zhroLFh46aMvDpNIMpGDjnPUyqd2R L0+YtpXAJ/IoQAG0O1xjls0Qt6SlNpkh7dKsBGUxa/IbzLDI2+mWRAOA1/5ew8jdyy91UZ6mnAp4 YV7ObtGmKOlcdJIvAZz7WH2kj+HxKz7zriIg7A076tu6HDjyVmy/DTWmGWex3s82l0c33JVTd1mG NfD3xf5yn4LYxdoGzbWlGymWOORcUCnjectH7HRQ7QhN7dzQly/TIR2rvdtixNCaweExnZ9WKc/X K5b9pGvV0JvVLyskQarW2FhO13YOixi/gvJb/K1E7/TqcuV/mlYY69zqYnWiIWUY5Eq2vXOix1ch Qy9t/MXoX6+qDfrrCv9/5f97TBS1lCiNTRDHhsmjPIPkZDtAuzBd23iEtNHi8Cbl3M/HVR2P7y0Y 99ItjEIQiP3fIy6JpzngiDwE4PQwtFY+Ai4CjsmjCjhM1wBID7j7bLmISuh4QPPD+9RBG8xjn6Y+ zfKo9ymkG1nv0zezs+57qogNmxxsZpTS4VWdifrw0wl8CDP/hwEPnpHtH8GTwJPlUQePwUse3P0t UPYQY1T0dj9y4+9lfQ6fLAzb1B/Q+vj0tBTsl4EfBoBqaJ14BGACYJZHHYCQbvoAwP/AzYJhGgmo epP7jEEGvFo2BygiuovmGVvuH/ODF2x1dDSzKKJhYVtRxNB+x+cB7IRgZeHqw9EFDqPTj+hK6Mry qKMLr6YQjm/Xqq8N/MFImtOTWZmhEnoQiChw8ZyzjxAJEGHyqEIE063mEOHht6pF27Ll082xo1Uf BK1lOzN43Q5sg8pW8x77Uo/uC4t29LnH8LMHM6TKurbvHnGccJzlUccxpGOVyksGbFhSDHuGw50F dvkWAGkZvOwiZ85WD7Lh+yObnJFkvMnZVxYyeR8vbDCQZraE+g6ThwGkhg5Qj4BMgMzyqAMS0l13 VLGOdWPcHxx03kCnPb3WXIzZ3zcBqSHKHcesG2P2QcAmQbj2EWwJbFkedbBBulNxGrFk18LUyz+w gys6a8WNM6/PtucV7yAYwmmw40Fw0YEchkdcJFxkedRxAel4w+VcfKM8U/77XK7l606z5wweBBuy d+0gH7ERscHkUcUGprthfC3Tfa3Exm+xmoSe+KGBJasrDwIAcAHxnqlHAAQAZHnUAYAutfyDAPCQ UW3pr5l87NjUsVke9Y5F1zReuPYddinbZHo5uhSusNdsY3vcnzK7SWHsuf6RfuaDoEj2bSceUZRQ lOVRRxH6nL1dsjbCQjZz90f+uzu/g8Zq89j5sfOzPOqdD47jIGyx72fBnVCL1cAyNzNdDDrELVH9 H+I6ih6k4R7REdHB5FFFh0DXUn+o58C3OdZvd/p/tt1G2L4V3SNMEkyyPOowQQfURQvywWubcwj6 ly5BCg1tVo8YSBjI8qhjANK7boSBA6eUKv1e3GLh1575mfY8u2QXCvDLnsOBT3Zj8b8qOvogeAMv TdhHvCW8ZXnU8YZerTLca91l9TKzVpn6ebKlOm1PR7WST4/Nc/gwbD30Nh86jqm9ZDZKtIM0U38+ DcN88zVb5h3ifG+8sz9v1567UiZcEp2OMLC74GlCejvZQUBH2dLFTZWN3Cy4fZA3Ub9seuVPUVW0 xgu/fZhfK8g2u4zWgd+yLTB4R/PtR0+fXoat8nTLU1yd6ePRELtuw+mIpzXRPf1HOCcmAjDYNglo 01Nq1dVT2vF/9XRmR76UaSl+iNctbJQq99Dj73D1S7igYx/ukeC3AyHVHQlwww4kIa/t9pyvOZXX GyNFuFo+FborllyRIp1JUuWN45gGPaFnD8wgwVfYTn5+r9KieaNfXGw22r8ZDrskFeS4CnKogvx3 WoZ2sBgqw+/BaNA4vYG5c/oWiRFYFfx4zKv8xZ9TUEPpOy45vxxaI4bxN6d4Caa1dig+TjPlAppX C/5FmLbCCLeeKXaYUoCssH7Ft30yuVD48ZHJJ4dY0yHdVb9zU1Q+ty5+6uaAgvcaPGffgBo3sof+ EvmbAZ8jMooDv3jSNRz0+IwS8WYnfu0UJrF5a3FaZHu134bcYBuCnhgKh5QWRvxtJRFAIg+7l3gU Kn4FIBRGJ/7YMUtHu0mqZhFaPbBWj9hvGxy+UpKuOUNsXXgNg3WCUtrv4ensFhP3jfFp55/8SCq8 w7M1/mSapuyUI/xe4pEsGANBC4kEvxpELcDYPATOl8Bc/7thnr7KtBzqemgt+F5F13+xPw9XBSOm vkFsnyop8p5gxNb7Jwy0dGtKckOv0jFhD8r//KLRXRwPZDrDvVp0zSoHd5rPkzKmTy3sr34niHcE Q9Txw/oNofCmcd26vfBIRZNFpw3ff+KBeo7m2GP5NeFW4JcBhPNM/JBo8b/+/eX9RF3i9S+NFF4t vA2ezedtcgh0OqkfDi7GW4xUFOKfsSV3zNhDF+yL/pi/GK2qTF7wr2nY2HOfs/sK8Es7ofT/efHp 7+yPf3jBvUWBXrVok9fb9pYcGm+zh6BRbknu+FGUTzw1WtgzutwPPbzlnXBvdSKib1rVA/nc/5wy SZ9Q+4G+91gf/rbtpRt/frDCsW9VN8x8u9Gbd+GSxccPHsbv3UVNdg9NoEw7gGCK/nqGwyEO1Yi2 9IEh3HWIH1mEbjhVXUdvvFPPA/B5ledUWek/1KmcQfXI897L/SmH0sfVrtLmPj1Fkvv5Vc1X6lot 9BFdPbjDnVRljNtl7HIjcP8utbaVnRxrVh8pzd8rucQ++D6e9VjWT/S1ty9fnvwTYEHhOAplbmRz dHJlYW0KZW5kb2JqCjcgMCBvYmogPDwKL1R5cGUgL1hPYmplY3QKL1N1YnR5cGUgL0Zvcm0KL0Zv cm1UeXBlIDEKL1BURVguRmlsZU5hbWUgKC4vaGluZGF3aS13aWxleS1sb2dvLnBkZikKL1BURVgu UGFnZU51bWJlciAxCi9QVEVYLkluZm9EaWN0IDIyIDAgUgovQkJveCBbMCAwIDE2NC43NjQgNTBd Ci9SZXNvdXJjZXMgPDwKL0V4dEdTdGF0ZSA8PAovR1MwIDIzIDAgUgovR1MxIDI0IDAgUgo+Pi9Q cm9wZXJ0aWVzIDw8Ci9NQzAgMjUgMCBSCj4+L1NoYWRpbmcgPDwKL1NoMCAyNiAwIFIKL1NoMSAy NyAwIFIKL1NoMiAyOCAwIFIKL1NoMyAyOSAwIFIKPj4+PgovTGVuZ3RoIDMwMjUKL0ZpbHRlciAv RmxhdGVEZWNvZGUKPj4Kc3RyZWFtCkiJbFfNzhy3EbzPU/AFlh+bzd+rZceHQIANHeJrsLEiwKsA igAHfvtUdXNmZ1a6LFi9Q7LZXf33ZUshBWkl9lZCTeG/v2//CP8xKeTh71uKNfwvlPA+bG8/f0jh 31+3L/jD/5aU42yzhDJja9LD/bNt5e8NMs05PLYP26/b2y+Pf95//9cvP/4tvL1/l8IPP74LEH/Z RFqcc4Q8og7FzkNQ4xgjiIxYUwlZY+otSJZYpoacYsK/9+1F8ICgxNJnkB4lQcXcY+Y5NVZ8JnnG jnsMFtt/ETyWoJwEmmNt5ThBa0xVeX7WDNhxfw0yoa4deBVwv8ap0GTEpNxPTTNhSfgM6s4y+L5a TZ8zxm6eUxvt02oPhPgXKpUxzRoqGrTZ0W6Nk4DbYT5oCx1qozXduCpRcOiL8e/m+y90tNDRsCle 0tNwf99O2HfimXST6KjwDZz/w2/h7cOnFL5+Cj/9Fn6Fh51JKY7wx3HuiUAZtu1TwoxJcrvwB1Yj e24tVh2vMHHZcXU7L28Dlj6+6t/iymuA4QJw4xXuX0vMINAL5DWfto94kuDNteXQY+9wICwJr4IM g9Gz/8kHGZ0XptNlfdxiT50ff7QA8OBLDL9nBJ5sBGfp6Nw2upSnjW4JTOFXN4kMPmCpBW6C7zNR lwmfPnEapAQsKVm/xdAKjgAWxvS3GJ46IejUqt88eNYEHUGPdoA7rNpm3+Fjy1HnjnBWFu7mhgVy lMKIXnC/XmODlV8htMjjDHMCq6N2sYcx8KOWA9xJKF/uXjwbuEM1chn7YYkTCaHTaCQIz6YTa+5Y VuH5Hb++ptJT9n8eW4FFF4BzlZ8pcpivcWYD0zdHUMp3EEDFAkeX2LI5bGCp0wyVIOEe0WLPbXxu B8Vuxg4ASQdAIogNxlyQBM+l79BMMXXa802PPEGuVjLe7KjgvmpqFYQNlGAKwZ6GdZmTt5Wy1rys I6E5epCWOvYPb2R8xfejlR2Aj52PWdD8Mp1ahvE/Ei9OSQa0M7zws9Zm7N53SA6MPHdIjaeTqdLg SBo419y6LZhjNiqxwOgrdDt8hyQFcWyFwlh94gjcZHUiMQlQ78Tsj/BAarKsAJaXavFQMlGtdDuL GQpKM6Lua76NUeuI9s8yFgIrWC9iqbrW8GKq9i4i2rFl27SgKj1Z4AwSy1wkw1hWO0kCwyVLBG1W c2n1rJHhojL3Nf1L9i5o2bLJDo1MpZZFJqgHX1RQXD1DZa0LknSyB8ECDF+GzwHzkEXXV1DneAJ+ zPcxvsQsad7m0kzY9j8sFttYyC0Dcht5ucYluRwmJGvUzQ6X5EX1rpaw4PsMpuW1NrOMsZDRXhYw Ihfu730HYvG5SG8sybJz3mxbm8e5p+q5LNzttKzdjcTGBriW7mFjMdVgGfhwyA5oAiq6oEVIO/4t zGSWuOcyAvOCPq1g/1WLiF7HK4TFUjlQtTKHI8W9ThsOWNfXZz7U7wVVw9kddR/ZfeBpz9KGkIUn WKCTKT67oYos/ycrmjCdoFNCOkP9Ip1T+Gvj92U1Bw21RY5vENY083FC89ivrPINqc52s9Pqez+h 2baxUj94MPP7ExdUAnNNZ5Lj+z0tw7R/8l9x19i/DOl96198WoYXjqN806m7aAgKOTcM+dkw7H/S XoPdxcLPViQ/W5GP3mCjD++MDnwD535egrILoEFBL9eWALFU2EADoodky1i8fygai1hpuQq4v3qC qlaWeH5B+OCYwfRWC1u8oLjVGHHB2F0nORAU5IPLpSXzIbrkwSpbB1IgWIVuu9ntVwH2Y8OEumzb 2WU39g/WIYsdtyB4IEwOL4LHU4C2XZySCa4tyTIDr0tIYXhsFl33nwTUn6SbNJdMzhmoJ6ggy7pu 7L7D+/YioNe96cZotaG5B82Gwmw34Vwza5v6sn5+Q090uILXwagjJRb9ow2XUxsOHuDFBSwq3jKx M8UEgoKBh7Pkowc0i+t6uLL1UI4xTW3QugoefiBrFQTW9ZAHCW9C65vdEFU4IOG+boYsSBj82jLu i8AdYbUHejClcygFv+DopmtEVQ4uxUrSBT/OuI22C+BgTGuVkw4Ob2zEJjKA06owBqCcj5FXAd0K NaBeAd3YgBQmB865mHoCIybDAdVK3hPQBuy8OgHbyt7N04kF/mp/GhRxgpdj4GvIHnAIlB+MBKa3 bhsmMgdmOeWVKBHITkWs+eG1FwGvVs/p5KOpyNNxO7PjKehtVNteBI9znlgCY/JxAMKW3QZpjvCQ iokLbRPuFLXzrgKPS1gSWrKtp/21epRxjN0hDm15heVJ8FiCaQ4tjMPptXfEwZaqNis/GK76yioX gfuvKko2WIjolMqOC/uTj2t8FUu8Q5rjInAyC+h+bAB/UMAz+Ibof/Hd/RTDt0xDJWS4zOYiaQML z8v9b1JuDEmVyQtJTzHMQYMjfPM1fHFzwuBl9Glki+DF6DGhieIEHyPV+M4udU2VKpZt7tuL4LHt GxBfQ7kfJbGY0gP/23WjeHCbga6Ch6UPWhy5aaqzdcAUAtJQHahFNap18U72J2byGDZLCYtMs1gR cF26PVLUuwsZ6I3t9quA+6kn84LFGEMHrT2OZ6cvrAXUldByzVXwWAI9C1BPxnie4DOYdG8v8fgG t5MMrSxrnAS05rC4h/msBnMjHgI6mpY7hPqeTK+CxxIMozvTFczMWsycAdZKZk87GT01mzmvAveG VstfwiqGHMKoZWoSyx3sPmFzJkfPHSeBtwAIG2VlHzbrsHjCJtMKOiIZMUAS97m2nwQPawka7E+r 0MyoRuzNs085OG1UQz6+vQgYq+LRBG0D62nusATil3yiLuqJ2TPFVbAiNXlkuDJIjPCdZW4ysdlB lpExOe5Z+1gv44l9kX1+3HP2NeiuYY5knQuI1Kl3SmOygz0vnx8wNU/0RgNqgii95Er7HKGuR6j/ 9P5dsHi3Brl5zEIxtHO8O63G+Y/t7ecPUOPruZlGaQMNffAb7TSiwl5iHSYsgSmQMWcZHpQXi7kG yndrKRlg8OCw8ZWqWvwccNhExpmyfAd6KFXrb2UYNyr+87DuHD+nhVyz8YltW2C69n6atRGbptbV X+sZC7qSlPn5dFy812Q1mkvAOQ03qY06HGUOLW7CbDGeDzoJ/A03t953Bf6sG5XxI0vikeyelBf2 ypkJsSJmW++S2bPZXPGwpXiLvwYQ3E5asPlD+R542LSp6vMOoX7JNonCR6yXB2aRHjtGUWPYASGY EUR1WALuyKT3rTLTM3eQhvQLg6xZhks0GduTMa+4mX+q+YQZ2gp/ZLUCGsI6iARcD+TvuG8LM6TU t9rfsGUP+zlRrPzzDk6rjOWlQlpJDA0HI/sEWd9Qb4YjFgxGovhr4OeMaB00Q2VkRcYXwj4VXeB+ GNTgY4fdBkrAaosDujMdFs/o3VIa7I6cjLlrZnIXUFNe8LFDkjQPx/yauNL06yj0DAiAdYl7fCng 4A4+cPwZy0CfiQRlYLdIQ/ms+VvIjwEZiM0NjbV18ZbAF2APwiS2IDL+tG1wFtMkkrEdynGM/SbY JKEjmQwjgaJ3AZpzZ8j9/2xXSRKDMAy78wpe0CFkAT7U6aH8/1rJskM6cNRAHEdxZHnqUAXU4CCe sQqq0clbgcEszkBbtspGc5/x71FtWIB8MkeoP4R39+dN91csSY0awJz++AzqXOmArPlTzkgg6O1J XlhZwcdyTLxB5UiXK5FaUZhoRUVFv1OrIDZm5M0hITJeeCaPVfQLiuUO/QbAVImrGW4YTwC6tUXN n1OWQGRzIV9CkANkek03QI/7oryjPy7QQhU2bMOy1V70K/v30Ys+IFbkPGAe3TxKaeaNFvZ0TBsj fRcWX+hqKW//OA0ErjRiJVQDNgXOPVQjUKiG41CN+GyqEXHImO8RlHkK8Qo+ME8QCpBghJwBEYD+ IamzyMVjTbu479A9FM7U0h3qdeEMBx2hjwOUJt+hSKa4Oe2JfYENa1WrCMV0hBA3Hr8zfWEx69k9 YDEdJ/NofmjfyZHSoK68J84RPwEGANQmw+AKZW5kc3RyZWFtCmVuZG9iagozMCAwIG9iago8PAov TGVuZ3RoIDE0MzAxCi9TdWJ0eXBlIC9YTUwKL1R5cGUgL01ldGFkYXRhCj4+CnN0cmVhbQo8P3hw YWNrZXQgYmVnaW49Iu+7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOVGN6a2M5ZCI/Pgo8eDp4bXBt ZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJBZG9iZSBYTVAgQ29yZSA1LjYt YzExMSA3OS4xNTgzNjYsIDIwMTUvMDkvMjUtMDE6MTI6MDAgICAgICAgICI+CiAgIDxyZGY6UkRG IHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8yMi1yZGYtc3ludGF4LW5zIyI+ CiAgICAgIDxyZGY6RGVzY3JpcHRpb24gcmRmOmFib3V0PSIiCiAgICAgICAgICAgIHhtbG5zOmRj PSJodHRwOi8vcHVybC5vcmcvZGMvZWxlbWVudHMvMS4xLyIKICAgICAgICAgICAgeG1sbnM6eG1w PSJodHRwOi8vbnMuYWRvYmUuY29tL3hhcC8xLjAvIgogICAgICAgICAgICB4bWxuczp4bXBNTT0i aHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wL21tLyIKICAgICAgICAgICAgeG1sbnM6c3RSZWY9 Imh0dHA6Ly9ucy5hZG9iZS5jb20veGFwLzEuMC9zVHlwZS9SZXNvdXJjZVJlZiMiCiAgICAgICAg ICAgIHhtbG5zOnN0RXZ0PSJodHRwOi8vbnMuYWRvYmUuY29tL3hhcC8xLjAvc1R5cGUvUmVzb3Vy Y2VFdmVudCMiCiAgICAgICAgICAgIHhtbG5zOnhtcFRQZz0iaHR0cDovL25zLmFkb2JlLmNvbS94 YXAvMS4wL3QvcGcvIgogICAgICAgICAgICB4bWxuczpzdERpbT0iaHR0cDovL25zLmFkb2JlLmNv bS94YXAvMS4wL3NUeXBlL0RpbWVuc2lvbnMjIgogICAgICAgICAgICB4bWxuczp4bXBHPSJodHRw Oi8vbnMuYWRvYmUuY29tL3hhcC8xLjAvZy8iCiAgICAgICAgICAgIHhtbG5zOnBkZj0iaHR0cDov L25zLmFkb2JlLmNvbS9wZGYvMS4zLyI+CiAgICAgICAgIDxkYzpmb3JtYXQ+YXBwbGljYXRpb24v cGRmPC9kYzpmb3JtYXQ+CiAgICAgICAgIDxkYzp0aXRsZT4KICAgICAgICAgICAgPHJkZjpBbHQ+ CiAgICAgICAgICAgICAgIDxyZGY6bGkgeG1sOmxhbmc9IngtZGVmYXVsdCI+SGluZGF3aV9Mb2dv XzEwMDwvcmRmOmxpPgogICAgICAgICAgICA8L3JkZjpBbHQ+CiAgICAgICAgIDwvZGM6dGl0bGU+ CiAgICAgICAgIDx4bXA6Q3JlYXRvclRvb2w+QWRvYmUgSWxsdXN0cmF0b3IgQ1M0PC94bXA6Q3Jl YXRvclRvb2w+CiAgICAgICAgIDx4bXA6Q3JlYXRlRGF0ZT4yMDEyLTEwLTEwVDA4OjAyOjI3KzAz OjAwPC94bXA6Q3JlYXRlRGF0ZT4KICAgICAgICAgPHhtcDpNb2RpZnlEYXRlPjIwMTItMTAtMTBU MDg6MDI6MjcrMDI6MDA8L3htcDpNb2RpZnlEYXRlPgogICAgICAgICA8eG1wOk1ldGFkYXRhRGF0 ZT4yMDEyLTEwLTEwVDA4OjAyOjI3KzAyOjAwPC94bXA6TWV0YWRhdGFEYXRlPgogICAgICAgICA8 eG1wTU06RG9jdW1lbnRJRD54bXAuZGlkOjM0OTFDMjBEQTAxMkUyMTFCOTI5OTNGMzAyQ0QwOUM4 PC94bXBNTTpEb2N1bWVudElEPgogICAgICAgICA8eG1wTU06SW5zdGFuY2VJRD51dWlkOjZlMGIx ZmZhLTQ1OGYtNDA2OC1iMTdhLTFiYmYxNzQxMDcyMzwveG1wTU06SW5zdGFuY2VJRD4KICAgICAg ICAgPHhtcE1NOlJlbmRpdGlvbkNsYXNzPnByb29mOnBkZjwveG1wTU06UmVuZGl0aW9uQ2xhc3M+ CiAgICAgICAgIDx4bXBNTTpPcmlnaW5hbERvY3VtZW50SUQ+dXVpZDo4M0I3QTdBMzA2OTFEQzEx OTZDOUZERjIyNDVCMzRFOTwveG1wTU06T3JpZ2luYWxEb2N1bWVudElEPgogICAgICAgICA8eG1w TU06RGVyaXZlZEZyb20gcmRmOnBhcnNlVHlwZT0iUmVzb3VyY2UiPgogICAgICAgICAgICA8c3RS ZWY6aW5zdGFuY2VJRD51dWlkOmVkYzkyM2QyLWEzOTUtNDBkMi1iZDA2LTBhYjExNjU2ODEwZDwv c3RSZWY6aW5zdGFuY2VJRD4KICAgICAgICAgICAgPHN0UmVmOmRvY3VtZW50SUQ+eG1wLmRpZDpF MzVFNTA1QzFCMERFMjExQUQ3NDlBQzA1N0VGRUZCQTwvc3RSZWY6ZG9jdW1lbnRJRD4KICAgICAg ICAgICAgPHN0UmVmOm9yaWdpbmFsRG9jdW1lbnRJRD51dWlkOjgzQjdBN0EzMDY5MURDMTE5NkM5 RkRGMjI0NUIzNEU5PC9zdFJlZjpvcmlnaW5hbERvY3VtZW50SUQ+CiAgICAgICAgICAgIDxzdFJl ZjpyZW5kaXRpb25DbGFzcz5wcm9vZjpwZGY8L3N0UmVmOnJlbmRpdGlvbkNsYXNzPgogICAgICAg ICA8L3htcE1NOkRlcml2ZWRGcm9tPgogICAgICAgICA8eG1wTU06SGlzdG9yeT4KICAgICAgICAg ICAgPHJkZjpTZXE+CiAgICAgICAgICAgICAgIDxyZGY6bGkgcmRmOnBhcnNlVHlwZT0iUmVzb3Vy Y2UiPgogICAgICAgICAgICAgICAgICA8c3RFdnQ6YWN0aW9uPnNhdmVkPC9zdEV2dDphY3Rpb24+ CiAgICAgICAgICAgICAgICAgIDxzdEV2dDppbnN0YW5jZUlEPnhtcC5paWQ6NEQ3QUJENDdFREZG RTExMTgzQTJFOUYzQTQyMTMyMEI8L3N0RXZ0Omluc3RhbmNlSUQ+CiAgICAgICAgICAgICAgICAg IDxzdEV2dDp3aGVuPjIwMTItMDktMTZUMTM6NTc6MDIrMDI6MDA8L3N0RXZ0OndoZW4+CiAgICAg ICAgICAgICAgICAgIDxzdEV2dDpzb2Z0d2FyZUFnZW50PkFkb2JlIElsbHVzdHJhdG9yIENTNDwv c3RFdnQ6c29mdHdhcmVBZ2VudD4KICAgICAgICAgICAgICAgICAgPHN0RXZ0OmNoYW5nZWQ+Lzwv c3RFdnQ6Y2hhbmdlZD4KICAgICAgICAgICAgICAgPC9yZGY6bGk+CiAgICAgICAgICAgICAgIDxy ZGY6bGkgcmRmOnBhcnNlVHlwZT0iUmVzb3VyY2UiPgogICAgICAgICAgICAgICAgICA8c3RFdnQ6 YWN0aW9uPnNhdmVkPC9zdEV2dDphY3Rpb24+CiAgICAgICAgICAgICAgICAgIDxzdEV2dDppbnN0 YW5jZUlEPnhtcC5paWQ6NzU0Q0QyQUI0ODAyRTIxMUJFRjE4QkQzNEY2QkQ1MkU8L3N0RXZ0Omlu c3RhbmNlSUQ+CiAgICAgICAgICAgICAgICAgIDxzdEV2dDp3aGVuPjIwMTItMDktMTlUMTI6NTY6 MzErMDI6MDA8L3N0RXZ0OndoZW4+CiAgICAgICAgICAgICAgICAgIDxzdEV2dDpzb2Z0d2FyZUFn ZW50PkFkb2JlIElsbHVzdHJhdG9yIENTNDwvc3RFdnQ6c29mdHdhcmVBZ2VudD4KICAgICAgICAg ICAgICAgICAgPHN0RXZ0OmNoYW5nZWQ+Lzwvc3RFdnQ6Y2hhbmdlZD4KICAgICAgICAgICAgICAg PC9yZGY6bGk+CiAgICAgICAgICAgICAgIDxyZGY6bGkgcmRmOnBhcnNlVHlwZT0iUmVzb3VyY2Ui PgogICAgICAgICAgICAgICAgICA8c3RFdnQ6YWN0aW9uPnNhdmVkPC9zdEV2dDphY3Rpb24+CiAg ICAgICAgICAgICAgICAgIDxzdEV2dDppbnN0YW5jZUlEPnhtcC5paWQ6NzY0Q0QyQUI0ODAyRTIx MUJFRjE4QkQzNEY2QkQ1MkU8L3N0RXZ0Omluc3RhbmNlSUQ+CiAgICAgICAgICAgICAgICAgIDxz dEV2dDp3aGVuPjIwMTItMDktMTlUMTM6Mzc6MTUrMDI6MDA8L3N0RXZ0OndoZW4+CiAgICAgICAg ICAgICAgICAgIDxzdEV2dDpzb2Z0d2FyZUFnZW50PkFkb2JlIElsbHVzdHJhdG9yIENTNDwvc3RF dnQ6c29mdHdhcmVBZ2VudD4KICAgICAgICAgICAgICAgICAgPHN0RXZ0OmNoYW5nZWQ+Lzwvc3RF dnQ6Y2hhbmdlZD4KICAgICAgICAgICAgICAgPC9yZGY6bGk+CiAgICAgICAgICAgICAgIDxyZGY6 bGkgcmRmOnBhcnNlVHlwZT0iUmVzb3VyY2UiPgogICAgICAgICAgICAgICAgICA8c3RFdnQ6YWN0 aW9uPnNhdmVkPC9zdEV2dDphY3Rpb24+CiAgICAgICAgICAgICAgICAgIDxzdEV2dDppbnN0YW5j ZUlEPnhtcC5paWQ6NjlFRDk1MjVFMjAyRTIxMTgzNjFGODY5N0I0Qzc1REE8L3N0RXZ0Omluc3Rh bmNlSUQ+CiAgICAgICAgICAgICAgICAgIDxzdEV2dDp3aGVuPjIwMTItMDktMjBUMDc6MTU6MDkr MDI6MDA8L3N0RXZ0OndoZW4+CiAgICAgICAgICAgICAgICAgIDxzdEV2dDpzb2Z0d2FyZUFnZW50 PkFkb2JlIElsbHVzdHJhdG9yIENTNDwvc3RFdnQ6c29mdHdhcmVBZ2VudD4KICAgICAgICAgICAg ICAgICAgPHN0RXZ0OmNoYW5nZWQ+Lzwvc3RFdnQ6Y2hhbmdlZD4KICAgICAgICAgICAgICAgPC9y ZGY6bGk+CiAgICAgICAgICAgICAgIDxyZGY6bGkgcmRmOnBhcnNlVHlwZT0iUmVzb3VyY2UiPgog ICAgICAgICAgICAgICAgICA8c3RFdnQ6YWN0aW9uPnNhdmVkPC9zdEV2dDphY3Rpb24+CiAgICAg ICAgICAgICAgICAgIDxzdEV2dDppbnN0YW5jZUlEPnhtcC5paWQ6ODJCOUFCQ0Y1MzA1RTIxMUI0 REJDMEI5NEMzRUU3NDc8L3N0RXZ0Omluc3RhbmNlSUQ+CiAgICAgICAgICAgICAgICAgIDxzdEV2 dDp3aGVuPjIwMTItMDktMjNUMTM6MTU6MTcrMDI6MDA8L3N0RXZ0OndoZW4+CiAgICAgICAgICAg ICAgICAgIDxzdEV2dDpzb2Z0d2FyZUFnZW50PkFkb2JlIElsbHVzdHJhdG9yIENTNDwvc3RFdnQ6 c29mdHdhcmVBZ2VudD4KICAgICAgICAgICAgICAgICAgPHN0RXZ0OmNoYW5nZWQ+Lzwvc3RFdnQ6 Y2hhbmdlZD4KICAgICAgICAgICAgICAgPC9yZGY6bGk+CiAgICAgICAgICAgICAgIDxyZGY6bGkg cmRmOnBhcnNlVHlwZT0iUmVzb3VyY2UiPgogICAgICAgICAgICAgICAgICA8c3RFdnQ6YWN0aW9u PnNhdmVkPC9zdEV2dDphY3Rpb24+CiAgICAgICAgICAgICAgICAgIDxzdEV2dDppbnN0YW5jZUlE PnhtcC5paWQ6ODZCOUFCQ0Y1MzA1RTIxMUI0REJDMEI5NEMzRUU3NDc8L3N0RXZ0Omluc3RhbmNl SUQ+CiAgICAgICAgICAgICAgICAgIDxzdEV2dDp3aGVuPjIwMTItMDktMjNUMTM6NTY6NTArMDI6 MDA8L3N0RXZ0OndoZW4+CiAgICAgICAgICAgICAgICAgIDxzdEV2dDpzb2Z0d2FyZUFnZW50PkFk b2JlIElsbHVzdHJhdG9yIENTNDwvc3RFdnQ6c29mdHdhcmVBZ2VudD4KICAgICAgICAgICAgICAg ICAgPHN0RXZ0OmNoYW5nZWQ+Lzwvc3RFdnQ6Y2hhbmdlZD4KICAgICAgICAgICAgICAgPC9yZGY6 bGk+CiAgICAgICAgICAgICAgIDxyZGY6bGkgcmRmOnBhcnNlVHlwZT0iUmVzb3VyY2UiPgogICAg ICAgICAgICAgICAgICA8c3RFdnQ6YWN0aW9uPnNhdmVkPC9zdEV2dDphY3Rpb24+CiAgICAgICAg ICAgICAgICAgIDxzdEV2dDppbnN0YW5jZUlEPnhtcC5paWQ6RDY4REIzQTE2MjA4RTIxMUI0MUJB RkI2OTQwQUY1MEU8L3N0RXZ0Omluc3RhbmNlSUQ+CiAgICAgICAgICAgICAgICAgIDxzdEV2dDp3 aGVuPjIwMTItMDktMjdUMDc6MTc6MjgrMDI6MDA8L3N0RXZ0OndoZW4+CiAgICAgICAgICAgICAg ICAgIDxzdEV2dDpzb2Z0d2FyZUFnZW50PkFkb2JlIElsbHVzdHJhdG9yIENTNDwvc3RFdnQ6c29m dHdhcmVBZ2VudD4KICAgICAgICAgICAgICAgICAgPHN0RXZ0OmNoYW5nZWQ+Lzwvc3RFdnQ6Y2hh bmdlZD4KICAgICAgICAgICAgICAgPC9yZGY6bGk+CiAgICAgICAgICAgICAgIDxyZGY6bGkgcmRm OnBhcnNlVHlwZT0iUmVzb3VyY2UiPgogICAgICAgICAgICAgICAgICA8c3RFdnQ6YWN0aW9uPnNh dmVkPC9zdEV2dDphY3Rpb24+CiAgICAgICAgICAgICAgICAgIDxzdEV2dDppbnN0YW5jZUlEPnht cC5paWQ6RDc4REIzQTE2MjA4RTIxMUI0MUJBRkI2OTQwQUY1MEU8L3N0RXZ0Omluc3RhbmNlSUQ+ CiAgICAgICAgICAgICAgICAgIDxzdEV2dDp3aGVuPjIwMTItMDktMjdUMDc6MzU6NTYrMDI6MDA8 L3N0RXZ0OndoZW4+CiAgICAgICAgICAgICAgICAgIDxzdEV2dDpzb2Z0d2FyZUFnZW50PkFkb2Jl IElsbHVzdHJhdG9yIENTNDwvc3RFdnQ6c29mdHdhcmVBZ2VudD4KICAgICAgICAgICAgICAgICAg PHN0RXZ0OmNoYW5nZWQ+Lzwvc3RFdnQ6Y2hhbmdlZD4KICAgICAgICAgICAgICAgPC9yZGY6bGk+ CiAgICAgICAgICAgICAgIDxyZGY6bGkgcmRmOnBhcnNlVHlwZT0iUmVzb3VyY2UiPgogICAgICAg ICAgICAgICAgICA8c3RFdnQ6YWN0aW9uPnNhdmVkPC9zdEV2dDphY3Rpb24+CiAgICAgICAgICAg ICAgICAgIDxzdEV2dDppbnN0YW5jZUlEPnhtcC5paWQ6REM4REIzQTE2MjA4RTIxMUI0MUJBRkI2 OTQwQUY1MEU8L3N0RXZ0Omluc3RhbmNlSUQ+CiAgICAgICAgICAgICAgICAgIDxzdEV2dDp3aGVu PjIwMTItMDktMjdUMTI6MDI6MjcrMDI6MDA8L3N0RXZ0OndoZW4+CiAgICAgICAgICAgICAgICAg IDxzdEV2dDpzb2Z0d2FyZUFnZW50PkFkb2JlIElsbHVzdHJhdG9yIENTNDwvc3RFdnQ6c29mdHdh cmVBZ2VudD4KICAgICAgICAgICAgICAgICAgPHN0RXZ0OmNoYW5nZWQ+Lzwvc3RFdnQ6Y2hhbmdl ZD4KICAgICAgICAgICAgICAgPC9yZGY6bGk+CiAgICAgICAgICAgICAgIDxyZGY6bGkgcmRmOnBh cnNlVHlwZT0iUmVzb3VyY2UiPgogICAgICAgICAgICAgICAgICA8c3RFdnQ6YWN0aW9uPnNhdmVk PC9zdEV2dDphY3Rpb24+CiAgICAgICAgICAgICAgICAgIDxzdEV2dDppbnN0YW5jZUlEPnhtcC5p aWQ6RDNFOTcxOTdDOTBBRTIxMUIxMDZERUI4QTAyOUU3MzU8L3N0RXZ0Omluc3RhbmNlSUQ+CiAg ICAgICAgICAgICAgICAgIDxzdEV2dDp3aGVuPjIwMTItMDktMzBUMDg6Mzk6MzIrMDI6MDA8L3N0 RXZ0OndoZW4+CiAgICAgICAgICAgICAgICAgIDxzdEV2dDpzb2Z0d2FyZUFnZW50PkFkb2JlIEls bHVzdHJhdG9yIENTNDwvc3RFdnQ6c29mdHdhcmVBZ2VudD4KICAgICAgICAgICAgICAgICAgPHN0 RXZ0OmNoYW5nZWQ+Lzwvc3RFdnQ6Y2hhbmdlZD4KICAgICAgICAgICAgICAgPC9yZGY6bGk+CiAg ICAgICAgICAgICAgIDxyZGY6bGkgcmRmOnBhcnNlVHlwZT0iUmVzb3VyY2UiPgogICAgICAgICAg ICAgICAgICA8c3RFdnQ6YWN0aW9uPnNhdmVkPC9zdEV2dDphY3Rpb24+CiAgICAgICAgICAgICAg ICAgIDxzdEV2dDppbnN0YW5jZUlEPnhtcC5paWQ6RTI1RTUwNUMxQjBERTIxMUFENzQ5QUMwNTdF RkVGQkE8L3N0RXZ0Omluc3RhbmNlSUQ+CiAgICAgICAgICAgICAgICAgIDxzdEV2dDp3aGVuPjIw MTItMTAtMDNUMDc6Mjk6NTMrMDI6MDA8L3N0RXZ0OndoZW4+CiAgICAgICAgICAgICAgICAgIDxz dEV2dDpzb2Z0d2FyZUFnZW50PkFkb2JlIElsbHVzdHJhdG9yIENTNDwvc3RFdnQ6c29mdHdhcmVB Z2VudD4KICAgICAgICAgICAgICAgICAgPHN0RXZ0OmNoYW5nZWQ+Lzwvc3RFdnQ6Y2hhbmdlZD4K ICAgICAgICAgICAgICAgPC9yZGY6bGk+CiAgICAgICAgICAgICAgIDxyZGY6bGkgcmRmOnBhcnNl VHlwZT0iUmVzb3VyY2UiPgogICAgICAgICAgICAgICAgICA8c3RFdnQ6YWN0aW9uPnNhdmVkPC9z dEV2dDphY3Rpb24+CiAgICAgICAgICAgICAgICAgIDxzdEV2dDppbnN0YW5jZUlEPnhtcC5paWQ6 RTM1RTUwNUMxQjBERTIxMUFENzQ5QUMwNTdFRkVGQkE8L3N0RXZ0Omluc3RhbmNlSUQ+CiAgICAg ICAgICAgICAgICAgIDxzdEV2dDp3aGVuPjIwMTItMTAtMDNUMDc6Mzc6NTMrMDI6MDA8L3N0RXZ0 OndoZW4+CiAgICAgICAgICAgICAgICAgIDxzdEV2dDpzb2Z0d2FyZUFnZW50PkFkb2JlIElsbHVz dHJhdG9yIENTNDwvc3RFdnQ6c29mdHdhcmVBZ2VudD4KICAgICAgICAgICAgICAgICAgPHN0RXZ0 OmNoYW5nZWQ+Lzwvc3RFdnQ6Y2hhbmdlZD4KICAgICAgICAgICAgICAgPC9yZGY6bGk+CiAgICAg ICAgICAgICAgIDxyZGY6bGkgcmRmOnBhcnNlVHlwZT0iUmVzb3VyY2UiPgogICAgICAgICAgICAg ICAgICA8c3RFdnQ6YWN0aW9uPnNhdmVkPC9zdEV2dDphY3Rpb24+CiAgICAgICAgICAgICAgICAg IDxzdEV2dDppbnN0YW5jZUlEPnhtcC5paWQ6MzQ5MUMyMERBMDEyRTIxMUI5Mjk5M0YzMDJDRDA5 Qzg8L3N0RXZ0Omluc3RhbmNlSUQ+CiAgICAgICAgICAgICAgICAgIDxzdEV2dDp3aGVuPjIwMTIt MTAtMTBUMDg6MDI6MjArMDI6MDA8L3N0RXZ0OndoZW4+CiAgICAgICAgICAgICAgICAgIDxzdEV2 dDpzb2Z0d2FyZUFnZW50PkFkb2JlIElsbHVzdHJhdG9yIENTNDwvc3RFdnQ6c29mdHdhcmVBZ2Vu dD4KICAgICAgICAgICAgICAgICAgPHN0RXZ0OmNoYW5nZWQ+Lzwvc3RFdnQ6Y2hhbmdlZD4KICAg ICAgICAgICAgICAgPC9yZGY6bGk+CiAgICAgICAgICAgIDwvcmRmOlNlcT4KICAgICAgICAgPC94 bXBNTTpIaXN0b3J5PgogICAgICAgICA8eG1wVFBnOk5QYWdlcz4xPC94bXBUUGc6TlBhZ2VzPgog ICAgICAgICA8eG1wVFBnOkhhc1Zpc2libGVUcmFuc3BhcmVuY3k+RmFsc2U8L3htcFRQZzpIYXNW aXNpYmxlVHJhbnNwYXJlbmN5PgogICAgICAgICA8eG1wVFBnOkhhc1Zpc2libGVPdmVycHJpbnQ+ RmFsc2U8L3htcFRQZzpIYXNWaXNpYmxlT3ZlcnByaW50PgogICAgICAgICA8eG1wVFBnOk1heFBh Z2VTaXplIHJkZjpwYXJzZVR5cGU9IlJlc291cmNlIj4KICAgICAgICAgICAgPHN0RGltOnc+OTku OTk5NTEyPC9zdERpbTp3PgogICAgICAgICAgICA8c3REaW06aD4xMDAuMDAwMDAwPC9zdERpbTpo PgogICAgICAgICAgICA8c3REaW06dW5pdD5QaXhlbHM8L3N0RGltOnVuaXQ+CiAgICAgICAgIDwv eG1wVFBnOk1heFBhZ2VTaXplPgogICAgICAgICA8eG1wVFBnOlBsYXRlTmFtZXM+CiAgICAgICAg ICAgIDxyZGY6U2VxPgogICAgICAgICAgICAgICA8cmRmOmxpPkN5YW48L3JkZjpsaT4KICAgICAg ICAgICAgICAgPHJkZjpsaT5NYWdlbnRhPC9yZGY6bGk+CiAgICAgICAgICAgICAgIDxyZGY6bGk+ WWVsbG93PC9yZGY6bGk+CiAgICAgICAgICAgICAgIDxyZGY6bGk+QmxhY2s8L3JkZjpsaT4KICAg ICAgICAgICAgPC9yZGY6U2VxPgogICAgICAgICA8L3htcFRQZzpQbGF0ZU5hbWVzPgogICAgICAg ICA8eG1wVFBnOlN3YXRjaEdyb3Vwcz4KICAgICAgICAgICAgPHJkZjpTZXE+CiAgICAgICAgICAg ICAgIDxyZGY6bGkgcmRmOnBhcnNlVHlwZT0iUmVzb3VyY2UiPgogICAgICAgICAgICAgICAgICA8 eG1wRzpncm91cE5hbWU+RGVmYXVsdCBTd2F0Y2ggR3JvdXA8L3htcEc6Z3JvdXBOYW1lPgogICAg ICAgICAgICAgICAgICA8eG1wRzpncm91cFR5cGU+MDwveG1wRzpncm91cFR5cGU+CiAgICAgICAg ICAgICAgICAgIDx4bXBHOkNvbG9yYW50cz4KICAgICAgICAgICAgICAgICAgICAgPHJkZjpTZXE+ CiAgICAgICAgICAgICAgICAgICAgICAgIDxyZGY6bGkgcmRmOnBhcnNlVHlwZT0iUmVzb3VyY2Ui PgogICAgICAgICAgICAgICAgICAgICAgICAgICA8eG1wRzpzd2F0Y2hOYW1lPldoaXRlPC94bXBH OnN3YXRjaE5hbWU+CiAgICAgICAgICAgICAgICAgICAgICAgICAgIDx4bXBHOm1vZGU+Q01ZSzwv eG1wRzptb2RlPgogICAgICAgICAgICAgICAgICAgICAgICAgICA8eG1wRzp0eXBlPlBST0NFU1M8 L3htcEc6dHlwZT4KICAgICAgICAgICAgICAgICAgICAgICAgICAgPHhtcEc6Y3lhbj4wLjAwMDAw MDwveG1wRzpjeWFuPgogICAgICAgICAgICAgICAgICAgICAgICAgICA8eG1wRzptYWdlbnRhPjAu MDAwMDAwPC94bXBHOm1hZ2VudGE+CiAgICAgICAgICAgICAgICAgICAgICAgICAgIDx4bXBHOnll bGxvdz4wLjAwMDAwMDwveG1wRzp5ZWxsb3c+CiAgICAgICAgICAgICAgICAgICAgICAgICAgIDx4 bXBHOmJsYWNrPjAuMDAwMDAwPC94bXBHOmJsYWNrPgogICAgICAgICAgICAgICAgICAgICAgICA8 L3JkZjpsaT4KICAgICAgICAgICAgICAgICAgICAgICAgPHJkZjpsaSByZGY6cGFyc2VUeXBlPSJS ZXNvdXJjZSI+CiAgICAgICAgICAgICAgICAgICAgICAgICAgIDx4bXBHOnN3YXRjaE5hbWU+Qmxh Y2s8L3htcEc6c3dhdGNoTmFtZT4KICAgICAgICAgICAgICAgICAgICAgICAgICAgPHhtcEc6bW9k ZT5DTVlLPC94bXBHOm1vZGU+CiAgICAgICAgICAgICAgICAgICAgICAgICAgIDx4bXBHOnR5cGU+ UFJPQ0VTUzwveG1wRzp0eXBlPgogICAgICAgICAgICAgICAgICAgICAgICAgICA8eG1wRzpjeWFu PjAuMDAwMDAwPC94bXBHOmN5YW4+CiAgICAgICAgICAgICAgICAgICAgICAgICAgIDx4bXBHOm1h Z2VudGE+MC4wMDAwMDA8L3htcEc6bWFnZW50YT4KICAgICAgICAgICAgICAgICAgICAgICAgICAg PHhtcEc6eWVsbG93PjAuMDAwMDAwPC94bXBHOnllbGxvdz4KICAgICAgICAgICAgICAgICAgICAg ICAgICAgPHhtcEc6YmxhY2s+MTAwLjAwMDAwMDwveG1wRzpibGFjaz4KICAgICAgICAgICAgICAg ICAgICAgICAgPC9yZGY6bGk+CiAgICAgICAgICAgICAgICAgICAgICAgIDxyZGY6bGkgcmRmOnBh cnNlVHlwZT0iUmVzb3VyY2UiPgogICAgICAgICAgICAgICAgICAgICAgICAgICA8eG1wRzpzd2F0 Y2hOYW1lPkM9ODAgTT01MCBZPTEwMCBLPTYwPC94bXBHOnN3YXRjaE5hbWU+CiAgICAgICAgICAg ICAgICAgICAgICAgICAgIDx4bXBHOm1vZGU+Q01ZSzwveG1wRzptb2RlPgogICAgICAgICAgICAg ICAgICAgICAgICAgICA8eG1wRzp0eXBlPlBST0NFU1M8L3htcEc6dHlwZT4KICAgICAgICAgICAg ICAgICAgICAgICAgICAgPHhtcEc6Y3lhbj43OS42ODc1MDA8L3htcEc6Y3lhbj4KICAgICAgICAg ICAgICAgICAgICAgICAgICAgPHhtcEc6bWFnZW50YT41MC4wMDAwMDA8L3htcEc6bWFnZW50YT4K ICAgICAgICAgICAgICAgICAgICAgICAgICAgPHhtcEc6eWVsbG93PjEwMC4wMDAwMDA8L3htcEc6 eWVsbG93PgogICAgICAgICAgICAgICAgICAgICAgICAgICA8eG1wRzpibGFjaz42MC4xNTYyOTg8 L3htcEc6YmxhY2s+CiAgICAgICAgICAgICAgICAgICAgICAgIDwvcmRmOmxpPgogICAgICAgICAg ICAgICAgICAgICAgICA8cmRmOmxpIHJkZjpwYXJzZVR5cGU9IlJlc291cmNlIj4KICAgICAgICAg ICAgICAgICAgICAgICAgICAgPHhtcEc6c3dhdGNoTmFtZT5DPTc1IE09MzggWT0xMDAgSz0yOTwv eG1wRzpzd2F0Y2hOYW1lPgogICAgICAgICAgICAgICAgICAgICAgICAgICA8eG1wRzptb2RlPkNN WUs8L3htcEc6bW9kZT4KICAgICAgICAgICAgICAgICAgICAgICAgICAgPHhtcEc6dHlwZT5QUk9D RVNTPC94bXBHOnR5cGU+CiAgICAgICAgICAgICAgICAgICAgICAgICAgIDx4bXBHOmN5YW4+NzUu MzkwNjAxPC94bXBHOmN5YW4+CiAgICAgICAgICAgICAgICAgICAgICAgICAgIDx4bXBHOm1hZ2Vu dGE+MzguMjgxMjk4PC94bXBHOm1hZ2VudGE+CiAgICAgICAgICAgICAgICAgICAgICAgICAgIDx4 bXBHOnllbGxvdz4xMDAuMDAwMDAwPC94bXBHOnllbGxvdz4KICAgICAgICAgICAgICAgICAgICAg ICAgICAgPHhtcEc6YmxhY2s+MjguNTE1NjAxPC94bXBHOmJsYWNrPgogICAgICAgICAgICAgICAg ICAgICAgICA8L3JkZjpsaT4KICAgICAgICAgICAgICAgICAgICAgICAgPHJkZjpsaSByZGY6cGFy c2VUeXBlPSJSZXNvdXJjZSI+CiAgICAgICAgICAgICAgICAgICAgICAgICAgIDx4bXBHOnN3YXRj aE5hbWU+Qz02NSBNPTE2IFk9MTAwIEs9MTwveG1wRzpzd2F0Y2hOYW1lPgogICAgICAgICAgICAg ICAgICAgICAgICAgICA8eG1wRzptb2RlPkNNWUs8L3htcEc6bW9kZT4KICAgICAgICAgICAgICAg ICAgICAgICAgICAgPHhtcEc6dHlwZT5QUk9DRVNTPC94bXBHOnR5cGU+CiAgICAgICAgICAgICAg ICAgICAgICAgICAgIDx4bXBHOmN5YW4+NjQuODQzNzk4PC94bXBHOmN5YW4+CiAgICAgICAgICAg ICAgICAgICAgICAgICAgIDx4bXBHOm1hZ2VudGE+MTYuNDA2Mjk4PC94bXBHOm1hZ2VudGE+CiAg ICAgICAgICAgICAgICAgICAgICAgICAgIDx4bXBHOnllbGxvdz4xMDAuMDAwMDAwPC94bXBHOnll bGxvdz4KICAgICAgICAgICAgICAgICAgICAgICAgICAgPHhtcEc6YmxhY2s+MS4xNzE4OTk8L3ht cEc6YmxhY2s+CiAgICAgICAgICAgICAgICAgICAgICAgIDwvcmRmOmxpPgogICAgICAgICAgICAg ICAgICAgICAgICA8cmRmOmxpIHJkZjpwYXJzZVR5cGU9IlJlc291cmNlIj4KICAgICAgICAgICAg ICAgICAgICAgICAgICAgPHhtcEc6c3dhdGNoTmFtZT5DPTQ3IE09NSBZPTc2IEs9MDwveG1wRzpz d2F0Y2hOYW1lPgogICAgICAgICAgICAgICAgICAgICAgICAgICA8eG1wRzptb2RlPkNNWUs8L3ht cEc6bW9kZT4KICAgICAgICAgICAgICAgICAgICAgICAgICAgPHhtcEc6dHlwZT5QUk9DRVNTPC94 bXBHOnR5cGU+CiAgICAgICAgICAgICAgICAgICAgICAgICAgIDx4bXBHOmN5YW4+NDYuODc1MDAw PC94bXBHOmN5YW4+CiAgICAgICAgICAgICAgICAgICAgICAgICAgIDx4bXBHOm1hZ2VudGE+NS4w NzgxMDE8L3htcEc6bWFnZW50YT4KICAgICAgICAgICAgICAgICAgICAgICAgICAgPHhtcEc6eWVs bG93Pjc1Ljc4MTI5ODwveG1wRzp5ZWxsb3c+CiAgICAgICAgICAgICAgICAgICAgICAgICAgIDx4 bXBHOmJsYWNrPjAuMDAwMDAwPC94bXBHOmJsYWNrPgogICAgICAgICAgICAgICAgICAgICAgICA8 L3JkZjpsaT4KICAgICAgICAgICAgICAgICAgICAgICAgPHJkZjpsaSByZGY6cGFyc2VUeXBlPSJS ZXNvdXJjZSI+CiAgICAgICAgICAgICAgICAgICAgICAgICAgIDx4bXBHOnN3YXRjaE5hbWU+Qz05 MSBNPTYxIFk9NDcgSz0zNjwveG1wRzpzd2F0Y2hOYW1lPgogICAgICAgICAgICAgICAgICAgICAg ICAgICA8eG1wRzptb2RlPkNNWUs8L3htcEc6bW9kZT4KICAgICAgICAgICAgICAgICAgICAgICAg ICAgPHhtcEc6dHlwZT5QUk9DRVNTPC94bXBHOnR5cGU+CiAgICAgICAgICAgICAgICAgICAgICAg ICAgIDx4bXBHOmN5YW4+OTEuMDE1NjAxPC94bXBHOmN5YW4+CiAgICAgICAgICAgICAgICAgICAg ICAgICAgIDx4bXBHOm1hZ2VudGE+NjAuNTQ2ODk5PC94bXBHOm1hZ2VudGE+CiAgICAgICAgICAg ICAgICAgICAgICAgICAgIDx4bXBHOnllbGxvdz40Ni44NzUwMDA8L3htcEc6eWVsbG93PgogICAg ICAgICAgICAgICAgICAgICAgICAgICA8eG1wRzpibGFjaz4zNi4zMjgxMDE8L3htcEc6YmxhY2s+ CiAgICAgICAgICAgICAgICAgICAgICAgIDwvcmRmOmxpPgogICAgICAgICAgICAgICAgICAgICAg ICA8cmRmOmxpIHJkZjpwYXJzZVR5cGU9IlJlc291cmNlIj4KICAgICAgICAgICAgICAgICAgICAg ICAgICAgPHhtcEc6c3dhdGNoTmFtZT5DPTg5IE09NTYgWT0zNyBLPTE3PC94bXBHOnN3YXRjaE5h bWU+CiAgICAgICAgICAgICAgICAgICAgICAgICAgIDx4bXBHOm1vZGU+Q01ZSzwveG1wRzptb2Rl PgogICAgICAgICAgICAgICAgICAgICAgICAgICA8eG1wRzp0eXBlPlBST0NFU1M8L3htcEc6dHlw ZT4KICAgICAgICAgICAgICAgICAgICAgICAgICAgPHhtcEc6Y3lhbj44OS40NTMxMDE8L3htcEc6 Y3lhbj4KICAgICAgICAgICAgICAgICAgICAgICAgICAgPHhtcEc6bWFnZW50YT41NS44NTkzOTk8 L3htcEc6bWFnZW50YT4KICAgICAgICAgICAgICAgICAgICAgICAgICAgPHhtcEc6eWVsbG93PjM2 LjcxODc5ODwveG1wRzp5ZWxsb3c+CiAgICAgICAgICAgICAgICAgICAgICAgICAgIDx4bXBHOmJs YWNrPjE3LjE4NzUwMDwveG1wRzpibGFjaz4KICAgICAgICAgICAgICAgICAgICAgICAgPC9yZGY6 bGk+CiAgICAgICAgICAgICAgICAgICAgICAgIDxyZGY6bGkgcmRmOnBhcnNlVHlwZT0iUmVzb3Vy Y2UiPgogICAgICAgICAgICAgICAgICAgICAgICAgICA8eG1wRzpzd2F0Y2hOYW1lPkM9ODQgTT00 MCBZPTI5IEs9MzwveG1wRzpzd2F0Y2hOYW1lPgogICAgICAgICAgICAgICAgICAgICAgICAgICA8 eG1wRzptb2RlPkNNWUs8L3htcEc6bW9kZT4KICAgICAgICAgICAgICAgICAgICAgICAgICAgPHht cEc6dHlwZT5QUk9DRVNTPC94bXBHOnR5cGU+CiAgICAgICAgICAgICAgICAgICAgICAgICAgIDx4 bXBHOmN5YW4+ODQuMzc1MDAwPC94bXBHOmN5YW4+CiAgICAgICAgICAgICAgICAgICAgICAgICAg IDx4bXBHOm1hZ2VudGE+NDAuMjM0Mzk5PC94bXBHOm1hZ2VudGE+CiAgICAgICAgICAgICAgICAg ICAgICAgICAgIDx4bXBHOnllbGxvdz4yOS4yOTY4OTk8L3htcEc6eWVsbG93PgogICAgICAgICAg ICAgICAgICAgICAgICAgICA8eG1wRzpibGFjaz4zLjEyNTAwMDwveG1wRzpibGFjaz4KICAgICAg ICAgICAgICAgICAgICAgICAgPC9yZGY6bGk+CiAgICAgICAgICAgICAgICAgICAgICAgIDxyZGY6 bGkgcmRmOnBhcnNlVHlwZT0iUmVzb3VyY2UiPgogICAgICAgICAgICAgICAgICAgICAgICAgICA8 eG1wRzpzd2F0Y2hOYW1lPkM9NjMgTT0yMCBZPTE4IEs9MDwveG1wRzpzd2F0Y2hOYW1lPgogICAg ICAgICAgICAgICAgICAgICAgICAgICA8eG1wRzptb2RlPkNNWUs8L3htcEc6bW9kZT4KICAgICAg ICAgICAgICAgICAgICAgICAgICAgPHhtcEc6dHlwZT5QUk9DRVNTPC94bXBHOnR5cGU+CiAgICAg ICAgICAgICAgICAgICAgICAgICAgIDx4bXBHOmN5YW4+NjMuMjgxMjk4PC94bXBHOmN5YW4+CiAg ICAgICAgICAgICAgICAgICAgICAgICAgIDx4bXBHOm1hZ2VudGE+MTkuNTMxMjk4PC94bXBHOm1h Z2VudGE+CiAgICAgICAgICAgICAgICAgICAgICAgICAgIDx4bXBHOnllbGxvdz4xOC4zNTkzOTk8 L3htcEc6eWVsbG93PgogICAgICAgICAgICAgICAgICAgICAgICAgICA8eG1wRzpibGFjaz4wLjAw MDAwMDwveG1wRzpibGFjaz4KICAgICAgICAgICAgICAgICAgICAgICAgPC9yZGY6bGk+CiAgICAg ICAgICAgICAgICAgICAgIDwvcmRmOlNlcT4KICAgICAgICAgICAgICAgICAgPC94bXBHOkNvbG9y YW50cz4KICAgICAgICAgICAgICAgPC9yZGY6bGk+CiAgICAgICAgICAgIDwvcmRmOlNlcT4KICAg ICAgICAgPC94bXBUUGc6U3dhdGNoR3JvdXBzPgogICAgICAgICA8cGRmOlByb2R1Y2VyPkFkb2Jl IFBERiBsaWJyYXJ5IDkuMDA8L3BkZjpQcm9kdWNlcj4KICAgICAgPC9yZGY6RGVzY3JpcHRpb24+ CiAgIDwvcmRmOlJERj4KPC94OnhtcG1ldGE+Cjw/eHBhY2tldCBlbmQ9InIiPz4KZW5kc3RyZWFt CmVuZG9iago1OCAwIG9iaiA8PAovTGVuZ3RoMSAxMjAzCi9MZW5ndGgyIDEwNDA1Ci9MZW5ndGgz IDAKL0xlbmd0aCAxMTIwNyAgICAgCi9GaWx0ZXIgL0ZsYXRlRGVjb2RlCj4+CnN0cmVhbQp42m2X dVhcy9Lu0eDuPrjD4BocgmtwCTbA4O7u7u4QILg7BNdgwd2T4O5+2fvc7zv7nHv/qelfdfWqd3VV 97OGmlxZjVnU1M4YJGVn68zMxgLkByiAbcF2tsqOdswyzgB2FiAQiEhNLe4IMnJ+d0sYOYP4AZog U4CinSuAjRMA5OHnBPKzsQPYgWzs74EaCi5ORubvMWzs7yuBADauv34Q2dgApmATZ4AxyBxsi8j6 VzYZWzO79+l/+U1d7P9nzhXk6PSeCUD3d256wHtmUztbaw+AKcgMkVXRzhlsAgLQlQHY+PiATH9Z tr8t+9+W82/L87flZQL8peFvy/635QT8/a4ANQ8nZ5CNE0DG1sTO0d7O8f2lTFkAotbWAEewuYWz 03tOJ5Cj61/O931wBpm8zwOMPQDqLGrvnvdo2/cYCQ4OHiZuIKfAXyNeJj4gz/uIC/g+4uRg+W/Z Ui7W1opGNu/C/7W9fz0XIONsZA02+X9CjWzA1h7/HfzfUf9aK2prbg0CML9v/99OsJMU2B1kqgx2 NrEAmBlZO4H+5Ve3NQU5WoNtQcp2TuC/yvi+5L02/zn32QJsYmULcnICcP3fKU3QX7sBoFO0c7Qx sv4vBSBb0/8W/l7Uv2WzSqtpqksoMv5HJ/0dIvm+4aZgW3MAOxc3wMjR0cgD8b1F3okL4MUGAL9L cQeA3N/Fs7LY2jm/LwHYuzj7AMzsHBH/6hA+HgCr0V+uv4mb852c/xf5eAGsxv8mPgCryf/SX2/L avoPZAOwgv6B7ABWs38gB4DV/B/4nsfiH8gFYAX/A7kBrJb/wHcV1v/Adxk2/0a2dxm2/8B3GXb/ wHcZ9v+LnO8Ptgc5gu3+ofv9wLE6/gPfpTj9A99XOP8D33fL5R/4LsXt38j+nszzb/zPKiobgW2d P3vYgwDAf5f1b2b7NysYOTuC3QG6AOD7GWV7jwT+Y6T//+kLMTE7d4AX8/slAWDm4H6vOTcv519V Yff5z2ATF0fH99P1953w3mH/w2bg9zYHgdxBJojLC3YmAsGW6VkZzrV4eUPjErpT3oIcHHjs7Lsv 3dd8MiStZv3x4X3QaxQvw1pa0obHXs1+K3TjxvBU8YbbcRXsgE8eTT2CMEkdHaN65zSJ4wqHpTOH 8U19f8SdDxjHQiDFsuKqZV17hlps7O6mMn0MNjvzD7Q/E2t/h23ZEJ/RV3v+uGJ73ufM517yU4hg /EQW4/JQbpwNvSsqJpfWkZsA3JuodVazRmtdV3UAiEwm5J6Oy6vr/3jmWs6mv3RNFkkt01u1gUb1 sVvCkbNtrwMt8YJW3j9mLkJLSubBl6GBOMxsYehhWh/xG0+wCnT5jc/Y8xPjfqcginKlcftCCefY VT2MM+DrwG0umN6JzYAsDjEkpm56MUOyjODifF9ub+ZijhF2fmBXvT7uLGGT5Ail1PtCbXI7rMkn k1xIXEfnJoU3t4GZtthf5ocEAWC8E4mL+48ZJ0yuAehrZpvYL0t1KqRJ1w2vr5UZEG2BrfJiClYH sVfJ3Ef6niojrev4QRgoLbzDrPozITzEkM2hVdiPYWNXaBZIutrF2NWVLTth8ZsTm/2knS1l3abD XAC2PAmciZv6Ciq8tk2zZJ4yaqTyCDMcClCg6iw1ukfNYfoOxVodDTGnr0GFq+LI8od7FC58iy9t GXjDDkbiTilG2nnSUVF7Dcxhtk3VVvbR36Sehe4yJpmkaXkOGXjb6EY4DkPmbmfDXDUgJ0nOUWgu u7AwdGJO8hwkhc+1dzxDdV1W2bm0Mh7vljVXf0JXo8he9OE93cdN7iMNhvkiQcf50EyR6RSDa2nr lAq43QRwjHmDArGIv08VBNo2uUTlQMGjqmFGV8Z+pU+krmK/UCdxbGm7juctnAQ+RX5S5phK7Z8K AKJVPnP3QiTek0yrYGjN5AfBcJ4OPYJezucecEEBq11Yr3jnmhh+ylJB30UbWy61EFEZ7UIS6Dh+ t4ShldlTsYI/89WhGs9mBCnip7LUXwyzdT1SH6OR5BNtE/hg79qi8H+5r+KPZM+OP0+cR03UnKrk 2gm6UfZzHqLatEmtmbdSah9ZOECk7jgF4Y1VdWEzBIjNj+SSoH84xkG0GbTVmndYoSuvf+zxMG6F EGZNZMmfC/tZLmeqZa2Ac16GBG/SYZz0UPYTaT83AomEL3YY/XvhzU9FN+iVbScBe5xS5wZKtKF6 IsZR5TpB1JNC7WdeNuWejPk9YqAcgYza2+dA3Jg0aAY/O/fwWfweX5ys8giDGOFGHyg9MyNTl4yE bwaCwHvtZbshgXMSpLJPjokqhGDgwvUIYZTmkfVtKLzPNuNHl/RNyNRDT+JvMEmIUPhHtL/8d1yH jn18PSQxWkdYEvaJkFK3z59zrYdEY5xZN4yTHCgGUuD6QgDZ5XA/p2gcM3b4PWck9vPIuWdwokES HAI4OpaZKJMYAP9kwTL2KVgdkutRT3U8+R3DsM4Cm+I+ZVeWdHo/MEwLhHGv/WMNvAk/Vj/04TbR sAIzdwWHwqvyHaNycJoU67cBYXykuuhT/SXxpleR1BsABQPgFbIBLueli2ZuWymlLgUj9zAZxQiB SLEe6lr1gGmNf2WJlJmhYitnOU5nCw28MkWAfICcnvBI0bZixCfYwC68PdKzTMDap5ASe+qB23pL 6t+nVHGrL+MwUixIfgUfgaImpoYBhaEXeuUtcFWOMxk25Gw8KfVEZogpmeAZfsZDmbm9lZg9FK34 57PiKdGXVKtwYnq3e+jU/t4hnxqbxUAd6+8aMFG7yXwydeOxxQxvaMzZl02nY9fwTfJCqGj0TH3o J7vpjpQslntCq+yHWqfSSHl+N18wUfZBPQuWGfztV3L14p0EG3wIKxjsIA7GHR0U5wwerArWR/ST M0wnaAimy80UrtbDbmZ7gd3A7vJ7Fcc/GgTp98uu0b6CfPCNi9L1F6/hrBT0Xgzh9dbazJ+jlFAR m44CyBUMBisnLnsYKWiaIq3WfHy1dLKDs3/LciwIgMlV3D7WmRgW7Leyvla3224Mvi5huLanb5St b8/1lJ2r8LF32tub9v6h4EFuXcppWb+pxRQ7Rm7C+E3Aur0QSLiokq5dzVn3/DjV/IEUj9HCNsHv 84qyrdbKWGQ/kGXItHyVCYD4LdGGEPalXhx0OaNKaSh7TvRFaphvfYToU1oc0urCWaPTuSz8Qam1 xbFpJLmCXXDTiltIPQkz9dV6auPnz54lu7n20mJ1vqSRUeJ5/jk4K258j01LWwJLl0FPFuz9u3fj 7qNq+a00v+zx78mZ1JOH0urjtKn8jgrjbAyrfm4NCHc6UoW0K8NRp1RJL+GS+BNcY1xbPsRdC5BQ ntBOCZrIiBCXLv7SDkqzXM2/KaIM2RHyRVVZTcocByY71EdQOmRpBejV4SNtzhzdI4enKTh4S/I5 MVdh0rwqSwGeeSJ+e1zWOeS1OyTCG0tabVMyOitTr8wwyotJhRNWdpujaUZy0IEwG4dQmk69qF9i tWwNcWF/u/nMJAETLRnnnhkyphIKv5yzsEdN9pquo9JaCn1PBJB4XVbvmylYztDPEtm6YRkmUhzH isYtiq5uKyKjR1iddFPTMBKnXAZsYQE1VPcXj7mEfAJ0wT8HF5AI3b/Z9md8CY9Qm5Azlan10X1K PtLViK0Wohqg4C4lKZHAGH1comiS+tlwi1Tw05tsQeyWUI073f/jEwOAwlaL5Y1/3q9R5alR6b7P 8Rk76aIsZ5WF7NUTFCysXQGiY4vUHzaNlKo5OCzw9ShsWSXl6hx8PhUKSYood2FMwN4ScytKlp9C i2hA8/wloSjy+atwpbczgVVVKHnKwiHyeS0q53dF8rGECeg9vNqZBDaYWgVqtQ1muqOI8PEvtk7h 6fc1O6KBCN929WqWehGLV/FLZAbEvgnkllYrRZG5yJH77k1X4U88Jg4CgExvZ29des83ekrOx/Hr warFz34ycLHpX45phKzjO3WAione0asztIaHBvN2MRlOOKw5vPAX5MvFPUFvKNJmKoE320deZd9Y 4mFu+vOJBGbEk/FoQsL14oCco5hVQjz4SXBZ32ZOyLXP9Q9jC5pRRhElrDH15J1pbFckISLp11QV 0gJKoBkgj/XqupwnUyh6LFLb/oia84c1el7MrZYXCHYkhUlw1Cq2/qzkwigxvM8jPHRY4H5Si+xs 5g5vXMjmTzD0nU4E+yZ1pkYKu48YKtXyI14lb2eiqnYoV0IvCis8XUCo8nxnY08TEg5eqCNXeCTj elYEASxeSFrrMEh+nxxeUrSHIHIj75rIAQyxyH9AV2AfOB3f3uORF8cyR/EcYSG8LFI3v5ZPgZZG 2CNi5xGrzVDw6H58EmEP6p5n3uhb3ExavqVKqh3zO3zOqolvgdJn4TruY9EYg19B/YN6XIAWfYC8 9scRpdiF3nzLLPLr4oqod7x1u79HUhkuLURnJnaWicWoup1weCtCX+A3y4UrTi9aFx2Dp0JzQWDT uSZYK1KlZXijrX7FaWJlFCkls78gr+wn8GOl7hZslOeA7f3KlQONPHXi+CpK/BW/xHGOwewSb4hL noSFW4nH9waBfACu55vj5qlPXrAxYwoqgZ+Wdkt8fYrOZodNGbM3wRzF4ZWCCpTBffO4NMNK/+uS fEjF6HwL8/qf4sZ4HpG0x8LeTe0gg3CN/Y2rO/cV3t9KacyWeG3sZ8cTGx93GjThrmUa3bpUo7nN z20HP2XBU7V6f9o/n49I7zuxSpoyvj9IaPkckf3LKh4JhAPPGVEgH1stse04q7UFO6hrilWSE0b8 2WiHI3fAQgPPGEdyX5WnlWgw0ZYEO03WTqktO0zROW4aifyT05xZMwV9LXavGvNei4eqWMVnR032 nUYJJmbAwvcdL9ADHkhrqVnN+JZsySfJ/nqbSiZUkFcDTR7KIEBrIc7hQbyghszOOxnvYiJifZVZ r7TLWc7sMkHx5eaij0UQUrd0wOY1HyrpufTHwnfKkVkHhnBtVO4GGGjEFRSGCUbNiuWDePkFdaOd 34aBEK02a/iDI4SKLvenVx1+sZJjrMvlLGWxvISQ7fKKbM6+3WrQQEqg2XN70Km1JBdiIVaVBtcc cDRfmF+xCfLO8MyVEQcWnQJQvE+UWprKPL5aLM70qAqLei6IllRzjfD5EUqRF4L72FANK4XS7Kpf 5WyAg9oie/ZxT0u1v9P7e4fBpfBo3EvXuNdNzpgxlu4F7nokZRUTI98k5PcHKSEM8WNd8Poeo6vH 2hpu/4exSsEPJgUMP6MjnQV1dK+Epre/sqEKznEs7K90uNmGKLwOrl7kKKZ5whVRhBWuzjE4XR/D UsVmIVPhjDVuJxzEtbgeHZ6C0ZWBf9C8ZjRrfdQC1NmtDfZ3KSO0R37wz2M24KEH+i9tApd+0Hky wiA73AlcxCZAmpNJ8VQbUdncbFGJWEOyz6Ry0YMhFMStacelTu/RCvJ12lDcQ8W/18T+3Izq6Irr LBQ2ZMWqv8ZGRPTZCvTGOdZ2O60LmdtBrf4jWKhJvNszEzqRTIgu21wZmSQAS9F9XBsxQrGVfTWf y7qOAVNfRDXKXN0XEt4byNEGoOHPkGY8KP/mvCiH8uOB1MQEJBStO/Kb0kc95FFHbQN17f2KDLU6 WTLJMMc/V8S3G1X2fUY80w2sdWY+l+Z7wHMTC91NqfoNubW7ZeXgszIynrU9diVRQ+KirpWfWzH0 k/FOqJoxjlc8ylYJm7kzLpS+MTa4QviFBYDQa+FhO946u+Huf3WcGjYln7pGK+ImfuTYDcEEZ8Ko ktLwmfATxUEprAIy3upS6zDZotcO43Ydug6+ajr8jXnSV1xdlxyBbsChAkvfJq4xA02YeuIhVUmb TjBNplZnwh4osnvFdBc5HBJ1zLySm34nU+tCZ/mXcLe5M83Qz4MgVI5ocmS8HoYmIDAAxnVqE3ZN ssWpD7eLEb+kQ7/zI00z3EgipolskEBeaAVP2Ogy9kYxM4oWkcIuM+aW/RdYJj2iHNleLul1iMvu 3Q87YqQXpVAMPEeYcDzmHx8ftmaOay8rRkXAK5/wM0MkzjhcqMOm4zkcRosVjJX1D6QF5MK6r5a8 seWu5nJxHeC7bu92FdLMuMIF1Jgk1rivZPH0WlxrEW80pIs69D06uzYOPGzuTPDZ8SVo6Wm4kAP3 aOZ+tV1ir0O3Q8RAFaHq3y+so5xJblF/YH5Ln9rjcGwmlce+Mn821BEYSDn6JRqi3x+wfQ2uoEhb 9qO/uPFVADUNYS+uEQ2C0bOtFgLie4bGlnDCycfMe1oWCOMMlJPklLQGRURVx81C3GI33ZohbvUk 9TIW9q9aw81EcqZ8mr9f5VbvN5JurS6I4TiIz1YR43Dfh/f35/7yR4fcQxUtyzXgXSUMkE0n5tkN 6qivQe+e+tDjQJoMKDglpUUbEGKHANFl2xelvvIE0gN5bpb62JqjcLNFvhkkkVPfZtsJ9yIskYr5 ClwqhvRmATwKwzeouJZhhD+xXFB6qFurVfebMNWJBYooIXV/8hQBQJNBGdZxBXi1rY72fuS0WfN0 yS85Ou6K54jAhnCcAEAJU3SKkI8mIPaW6BpOl5/4VCrE44cpb/pKk+zLUmSNY251jKj7WzUXugTj RNHPuvCUVFyEKnvWco1wjXyzMe9guruk2qNieGF+OeVYAQcP3XwHbrgHQJTophlqH+HMIjkmvgQ1 74V7N9KYyzb+aOrw1OSurFAPSnBBErqWPuc8qKxUevxUY+zjic9DJmfEe5QjMkFNXPdjwBA4abIa Kjpfi1MaC19YX+AnJ7C0YtxnjXn1oi4OJHb7hqZqtUBFdd5hlC51llpCvrSEi5gzcKSLC5oqQtTU HkXzkPk4SsWc5OGKvfNDvYORM9o0zNB/8MuifQBGRCrq41aJD1EhT53EsXF9EUG9empp+KIaqtOG V+clelPph25LqWl23/3JysfsVH9PhQWRXLCqW0XPRd4cPaO8E/LnEfcbg0s1k/H96xAliKE6AOTN ANak1+55pDLbOvdmLCg1f3qxqA8rHCszIgpE4rPHlZ5V6tpb3urnTXrqbdO4RVuk2q5wNV0y/9E2 0yXvEiDsazjwRO7LQxd+QQoHr5DGm94utwvXyZns54rRdLlYNZZnwNtO+/BqP+EbXFP6RhI7f0Ul H+8kUOArdQy2NPlYFi3B4QDBoFDe8E1wDZcfhlT8x2d8lxC70k8JvVK6RCu2UsZRnIiMhBYCm27R WTV0nTQvWD2d2XV0xIWWUAPNsA7Tacxhb2udUSkXrR59wJanKkKE0tsY3n1ONBIs4RJY7jJOOP+F 2z+Pv1UH2vG1y+A5r4uHeIVhOOGPMjVfwdn75FMXFcpoUfYDoAWlgsb9iZ+eZ2659pBMl/4ZweGk avTkQcjXyhobs2qPzK9Q3XiGD/go9igzDQK0E0QSJOABwcLQzccB2NI/v2f7KGMFmbwWr2hlJemy IybDYLAy1MKHWtuqz/ntrysto88ffs81fh8eCyRxf4LOPQnFkBRSk2Qtloe6TaS9pnCAmvLR8Ndk vU3508DK75+juvWbGYbgxfkQc5NxWIrotSyljInSeheODbEYKfzWkz7i0+Xb/UX0p5WOHp6yAF3X vqMPaSDnUFfzoF6aYwz9ZCcII5q7rgSJscE8bRVjPfVZ7U9V7HAaOJZTFnC5I0PFu6pD8MTOGUOM RInSqNomUFN0MTMapGd8dtw1OJEoAUUJFUci+KQahycphHeCx7oyRddqNoOLVKOWV7/H73E8eWCN 2H1BDwoswsLid8Zqwrmc01qCb9HsrVjZHzE5eog8JkCMghW7Ug83L5QMHwGPMdX744MN49E2IkRv sNfBfStb3bLT5MIyjoR3Ald0z+6POkgMO8vjxsFNLEF0pSXa6dYVjwU51lNkXqq0SI9YBSHsa5/B k1En/TSe9IMaz4sT1Rapw1U7dLn45v4SyZJqian+N8L7H0xaugNQ4Cvhg99a8/eTUooymzCJTrsb RWn7vscA2RNOFMNIGGRLG5e6z/ecdV2f9FrI4LzYMWUpalZUzeJOA9LrsQnsjMALWaCi4+bfKHsf lA8pn6siHEjTrEaHkGMJ6ERS9kSHEk3HJ04iWbwvCbBcFkEVT2w/sO2RZ+CMUJkx3MqdwRen++Gm dH/9yQwRD6bQQBSJ/nlsfdS0hODm2zgwOXJyTbN5W//prv6etRlBI01IJQKjHEdS0gUO3Z++tshp 8Ixy1rDgfP1Z/CNZ5vFSRUWn0Qs97nmFfQtaf3Fo7B7c4ogo/zO9kcCRkmpZmIOFoQsfS2E9B6Rc P+si8JKediw/K3oG10n1TztL5gClBndqecQ6is7zakYwW9ITpSMZEQ7KDpcxF7NJLfIfRU0RdDwq ym6dz9AdrnBKzQ+wIcN686SrFI3l3BJbLa0jYTPKVim5dYlycwRx+bCk3ArQ9aikCLft2nK4Vxr0 spNTZcf1j0fm/k09EpXWrpJjliX4S7c2oPZ8EbM1H24Fvfkdu49DaG6MsoWbZ2uWFTAPRJ/zbTR/ qBkrqN5MfsWaepZqhWnB2IbvEbVaX2msaryPgw8dvg+OTWiEALzmjlM0LYbwYKvBRzOcAkhUUUxl C98wQ6fyxaHu2pg2KuVkhN/6/HQlEFgEKIKvjSCBCqpHO1AlKR/ucMIZruLRdSQXg39E45nABKD9 SOpWMUJ2BDKUoN1VSuvrUm3DClHrIvObBfa/qewhKkggvzmm90Ccx1bky3ljK3/srSF7A8Kvh9hK vj0cj1DDyA7RORk0ieHQJOKPd36Rhaa6x6+7KInf7BOXL+h27eCTMVDQsWFlPczk5jgn+iXUbx9e BUzBvhHfn93Dts78ACe++Oj113fc7OaIi5wwr54sLti9TpKDLyQ9jlPeb3ZutiTKnZwuH2wbm8R7 6RPqWBKlrZHhOqjPGZB7WvuV88fwMCKqcuP0LzPhBhelk0rFGjKIhyB696uXnuP0WPKPzjE2lt1x 7LIDDomf18LKRkhzasQnaDhHeBn4Sn+q9xeJtyF3c/9yGM+m5fucAxdTNn7PtyR11IOebgSnB6+r LTUBZXtwGv8AsZSEeiZdVfSBHP576tymXz/ORPYitdpBWsW+Dkeg4gj3QEf16uIEpa0NS5wsItVA Z2pB0HnlwZ65R5V4BQmyFWbYAtXdYjRN7yxEGGRAoGq55BbOCUWy7g5hzgri3DJAWXdOxlJnr+hO Y7dRwWjKJvXMQsSPfQZrKAvGhYejzC89Yzo/bHlEr7w+BuaTjHt7EVIfesAfX/0pRdFziV/D3FVE 1Jw1ru1bgzqaxWGITbKifLrjUs8+K9+YuHPK+dwD9tS2fawoeJdg7M2W2tuc8Djp80OQF6We0lEz IGOqdULVUeFax6MeTq5yJumPYp0TluVqptIKJ1EZ9G5w9+jOqRf5cf/w22BBaOhlWTd9IWlNn/yy sVqSfQhhmZkE9zDW0hlO17Vg7iJClshtNUlrK4gh6cBzCneT5grJW1vshjn+xUrI1MevYl9UMaWa 8pbmZZm8Yo0wseQiLYbBMYAEpKHuuQrpBfzy2dVepSUewWTakKbiKD+ElvynukSPX5qbNNspqLO2 HIaXp5KJQJ4jHilZeHV/143hU3hrmRwDJnhBnBxPKznjLsCmLK1ojOa0etL6IjBsBlB3HI3BCUnM l288NomwoGabZ5IjypY7ykssHKEch+OI9WYx9ksawagSiV9p0tNRhejWnCCj9g1IgrkoKadjV99O N78jQyvT2x79gtDti5DWmC2xJ/3T+crxA7mCMcksHnI3CgsJxK3IGnLX3ptCQnIkHY0DBlebf6rO A5SLpUrfKJzZWRjWRpv1C3zQdG4dl7W7U3FtiavwsK0dYZGb6M7hb9Yiivq4zL6oR3zeEVs2lmld RA5DAUeCOXJuEd9Bc+8FYDDK/TpK75wJLyvq568vKouUTsiBllnyKROH1Ij3uEMJR0RfXyI5GXMc Y4ulhPC4LPQvXsnUY8LyZEaXtV6G7uJG3ij53r/+BCaCJigFcLzrzj8Y2kXAOWD7E4dM4tGVIT6Y l4uKYwt4RjwfCpTxyal93OFsLS2/sCFPPOj0uObmZmFyeDLJvG51W1kmbv/zAYhbTmQyetRYJMIl rByPmVQlALeDRUgK6MfiMl4cLbL3Sm8jnTkYFMhwVh76/IMEBQYh81GiBVWEhB782UarbycCK+Zi Tys4qvFQczIvPv2LhAe2e8f4oEPCy0vLst2XsJ5WCdxRP4mSZWObWpcHLtx6PfZFIluRUBRPnUsV PRTPj519KTPiQoIupNAwcRYrs486EqZCpfjS4vLshm7B+v5UYuZcDUrGDBVdddLqxJUU0k8BGNZN 90fkQFeI00gYB0qFSkpmjf1Bt8QPV0If4K8Cf/MPlmQHZhPMH9TFzNrjlN0K2pqBlgf2mdUudwum HAsUZkm5OQfyIfhRReUL7VnT3xsu04NfCKJO9gLfhp/F2PtemvZGYT0NihKP3ehT+NU5PAFHHOnR cLPrmPwTpNzlUWOZYWLjKaF3QT9THzN+by3bm2peS+GwhncmgMOTuucJ4hnhyifwzyUS6otYbp8i LY3slrmSUn90tg1CGRfJnFE3ZFO+NRSGSaRwoNRoKTkdXg6dW9Nb8vPtzA9iyo6J8623a8xSJh5p 3J0EyYzfDbmjqqcwWttMeL82ieAPFQrZXGdAXqCtIj+mQkzX21MXQzVOwme0l2nJ+hMKuqbvCGfQ d43SQ4AR0/aZiErnel4RE31tnQ9IGktJdV77mtbD3ZosqwVOLyLZgpAvuk/VVVZF2F3Y4wZ3pCCg CVnRytqjbbQVU1W1oWixLOTUMHqbN3svBgQhYbUKslZ/UxFJDOt25yXMFNIv6whW8i361pEUZS2t xwl3CTyuBiK+IuyekTGexd6D7VRN1U9XRR1XimopT3kLcYp7GNvUasrNX3RV6ecYVsWmxS/thV79 oZkiBPvmI97McY4MLTIJ3xhuVogN2ANy99gXFtCtqHj7Na9KoQRugpcmKPqSRLWEnq03l8k2wzEO A6YaOFQisvNzJsU2XKQ3nDUJBK9r1NAROULm5ta4uctOCZ93wlcC7gj2xrc5Z1nx5LtHWZ5+dhQR /B7aJQA/tUxeWNMtih1e2NoF/kRGCobbr/4w04lhzpvn1Mw9E0r8TF3QnIFKRfx69nv+Bo1miwNj EiABTK5TUGvzR0jMyvNwXAldk7Xp2YYNkpeMMoA+jUIdiFAzk88FCfRuZpEvWwcxHK9BYr/RuW/Q zDb7V9ETjg8CqfIrPgab8bFbqOyHb/0uExv/riKZ0p1Q3d1zUjdnKmPtWWIrZJ+1Mxsl6kDDb5qU qF6/VpzVXFBfHo6pjZu0QGIeoiIbpa0nUBAIzFuiGK4QzL793TQ2WGXY8wdAyz5NS0b0yxefSiPw 4vQ3AtJM1pv7GjHdb8k7phi1e6XmZvTc3YSIPlenRfmVC8Gl8tJR80C8wNhH3pdXJTXVUY8FIsdk xvIKmnbdjyoMUEvTXDGbxd5dwlnjfi4rNy09Xv38Fx06j+e8ly5GnygM5KVTqiLi8VqyxAYkv8Ba HL3qfd3Lz4vrKP6OEZcTPqPS6pmghK4Dz3LEq+S3nbs58uv5xVzPEm/8ZhSSq12utT0uqt1OmhkN DLDHXRW/t4p1E6sDK+b6CZ0/2uLJsUi+rfHwqD/YSdbSDHwaQ6+t02VETfjuXbkmLnd2p4/BxXZf t+KiOtrl4+jNpWzghIsjotII7nOsmgDw1EZVBePQLAuGLCo30oOeMtViVCrQJ+XLv8RNEBlG1jJq +AfhLvqyA6lw/UlMlXQaZaOcUCK7s81bjfFlzmro4ce+txHFYetThd6u5Rgr38yZXlNSLiyXS2jF 4f4RDeNb041d+SKN25iw+tz2hRVCL96kODvp7cXLz5LcZGvbvq6TUj47yi5zzi73aniaUNx3j8Fp UWgsw+qW8CpRqxsGjrGjYepxNcqOsNnXPTrLCs81P7j6bPHXF9gcJmLhl4jx21si3Z+MASht21gf HjsPqnxoijis2C73RlVN72YF+C+1DciAl7zCO465yj/xfXPFv+tn2yJg2WiWUiIFS3bQZjJoqY8n ldA/YUchBLCJi+mNvVJqjY9etRNO0O4I1r3dqtAiNiG+ru4U9Q1uwCr4OpeHV9e0a9OLBm/Yl/fr ZBamhzMSpxX1IwhmcRSit/5kMECALV1bN+7EHn5CFvtzDR1WD8m4NTdcpQSL7x/QLqQyqewq+fWL YOjH+2ee/ozSgceTbK6vCJ2voQxfvAAPxs7AzpSA0+enb0ng0AQgLCXd1QIf5e3PD6dc+hCtqoKU UglI9dqZp1OYJAdqnMtUepmlepxAQrlSvYKNXbEtw5Cv87nmfLLrwTiUWBCkMcEFC0JQwBIcVeyU HRgLxBAsTekFxJKk0hPqWZZesvzXkf4vupSPmxSJ7n/2kUdNKWRflnIl5X8THdHJkjd80CtdfU6B WCgXX+BNF+/h8rF/+kqgrzuOXtJIXYl3rBaPvg4jUDmRj8LRKsEs9bNCqIzRiPvMLuaqDce1lVg6 0JqzPsjNDPTWHOqJJ1jyjWxtieX5IsUIdUF/W0BwGp/NKkAaeuAjtaV8hoJmryFDLV6KrLPVi0Tu YPMeSkLj6xkTfXyke/nEh4TdzPIvuVjKcR+heO2X42rU1qjLiQsNUm9sWvy//qK71pAD/TTMiDJw Ap/E860Jqn8UjcWkNsqbt/BVFyuUMWv3K9p1x7qNtTE7mHLs6mBItRKTwSUq2UuoD3ziStWLNrN1 WCOXwW3JIPeyhU81j7mHBFmPd3G2D0MnU1stmjHDE8tuA6nCxF+CHvQV1zb8K/1oh/MdFaNCH5e8 N2oC1vUSQhWImzMDDM3hfsv45In0IaDwdx/ZALiExM4ocZGv2/GUNUjpE8LrOwv7CNHM4FtG/AFr iwtr8INojd9eJTrofQU2ib8yz1E0LYybkGe8tjOVk45V6ribO3ezu9PQWiSPekx+zl5Vv1Mi3Y0R +6W5FLAHORk9EoGF7EWFYC8+3spizt/XVzCzFHeAR4P6Kw8ZEkHeN+CPJ/ttUJvueI9OgyKZ7+5h asAL+UNJQc03JSHzL2fxodDePrO0sqRhkt6EhTK7Z8QHX/Tlyej3/L06Lj8e0QsIajRMKhWC9zMj lYiLd4P402Riyidvw4RjFY1uHqd+uhhlYH799mdN/VtxdeRulnvXPWjk0agFsql0aYuRul5xpFhW KJs2S99r14301wHinyEhkyVEQZemmrZ0kaLU5IDhXPpTJq1uXmyRX/dUNxwG1uotTLdF1zstncxX 0b42fozDP1onJFTbRx3heEdDRBu25uUcOeYn+r4Hgy+ITyaRkkpvmBqS2Iecv8Zun9rb0PETJ4/X Kdth8cEVdDl8qAy3ho7xdFgKsnoR27CqQ2mojh1+Jj1/PLTnu8i0cKuG9FMvDMl2ukqYjVv0ev5K TTTfNCC8KMtHZM3GHk11sBdD/evrJ2HNRbk20UYRjitaX1JxEvUIAYxjWAFXfAsbazl8xh09svYG Ix3qldSJU3vX3xhyXazXZn4JQpQVxA7ZLQo/6L8q9+B3dHMuZyEtbv8W+vHVPCt92VXci4TeZfCF cR5IhDbH4kaMgSiq/6jFnmzO84uGyh2p0s76TJo6s+vlWW8wn2g6tVPvuXCmFow3nYhCymCLLVuC INPNQdHnPa0yQt45TuBLszwzkd9iC3WXmVqJXAsXTvZF61q5Td7eEAaATfJHNNHftugbbmQ/WPig KgkpaMqhxgGSZ432uAXet/4Hm1DQyt66jBpaSexXZvbHdfjOC1OkrrLo/JqiPeJwIaYctwGWJgM5 XKO3zT1AyISLLHXxQyzCBYDg1/2fT+xdvAooCEET2wN7fbL7YvyYAvBWNSm8JRJubThbD/sBSDNG o7VlosIpG9kTB/lqC1OjWNeCClpRFvECoXnqCj/ZQr6uPFIlCGXxV3PFeMbVu4Tx7tA/JUf8royS SI0X1gxp1pXZAN+0Z+L5VglifLg3o2uUAQ/z3SVAOPPekuZ+vnANjvk+r3Buyvkb5cMjmK55XwwT vsmBXA9jzZXCLcOKo3U6P3y981bvK3xA9F1PZVMg/a/dvOJP4Q6cqiR4UfUwc/nKJ/qaxvwtoj2J JplpaTx4uCf7Wl+tiDWdvuDHTaoohNZA7eQXQFtTSu8GkeeVQ/0MODaUmsupAvRShvR6eWpVfp+v ztbJdQuNIlp/PYhQLIjQQPzEOSefb4X+oHhYx50/nK7Tg/nwK1P5Onq4xnAY5EXcukp5Mu1+/RWh KBHskWCowSaeU0j17OzcxCQOnyT2cDYSI1Vhebk9bmIYiT+pe2gxvZLX4AJzyxgHawUmxymC23O+ LeX8raichyInmg2BzMuMqJdVUKPNa6KxIZkJEes/Xeu6cRqiTpZtu3o7WdRPYjCq0yNQzyxRzF1V tryaP8xIrvyI0Uub+JUGbkDQhvEm8CU0cU5WtuLkoZFNHCAMDGK0UcBXiPI/9NnobJWtnSn8sD8+ Qh0D6u+5trDsUA4XkNOyRVuFnXojud4+qXPTP8Db9BiE1o8ei+Jz5+SyTvt4fqauE6OxH8QgNSds L6CniK/tQth7olmAAIhvQb1iDK4q2hruX0zQTnXPnqZ0hllL2vgBJazQJ9ZMhXnVpPsdEc471o9X QuCV8AP5nTIs/J4p9rSj9Wmm2OtzXxK5CPzbMxe+cpVlmhWqVBdjfmVxjoa0ZQj3Bvm5Wdxa12Fv 64xYeayFlg1iMV4ra22KWO/dHiV8uu21DGW/JWKDwquuW9ng6kZGbwpGMEem16W9BxTPs0TsOqax tyz+w4dXVjuqoiQIuHQNJcuijizaj2F563CERbk1Rw7oNGU5VFB6PfkpA72v84IWKdEwTfe8dAyF zAWUPPQ1D4HZOzxT2LQ2Eexaz8zn3Mkzk/8HAAeb1gplbmRzdHJlYW0KZW5kb2JqCjYwIDAgb2Jq IDw8Ci9MZW5ndGgxIDE3NTgKL0xlbmd0aDIgMjQzMTgKL0xlbmd0aDMgMAovTGVuZ3RoIDI1MzYy ICAgICAKL0ZpbHRlciAvRmxhdGVEZWNvZGUKPj4Kc3RyZWFtCnjahLpzdGXds+8dJx274+zYtq2O 2XHHtm3bNrtjdWzbtm07N89z7vl1n3PfMd5/5l6fmrXmt6rWXLXX2mOTEMgp0ggYWOsZilpbOdAw 0NJzAqRNrUytreTsrGkUDI0dLXTtAIy09PT00CQkQnaGug6fc8K6DoacgO+GBgAZaycAAzOAno2T mZ6TkQnASM/A+OmoIu1or2v86cPA+HkmPYCB5Z8PaAYGgIGpvgNAz9DY1Aqa7h9JCSsj68/p/7Ib ONr895yToZ39pxKA/F9tCsCnsoG1lYUrwMDQCJpOxtrBVN8QQP4LwMDBQU/9z8jw78j478j878j2 78hODfgnhn9Hxn9HZsC/CQMUXe0dDC3tARJW+tZ2NtZ2n0kZ0AIELCwAdqbGJg72n5r2hnZO/xg/ i+FgqP85D9BzBSjTKn5aPr2tPn2EmdgYqNk4OLgAwsyfigxsLP/3iJWJnvZ/hy3qaGEho2v5Gfh/ 1fifdf8fH11LUwvX/z8vCQddC1N9AStjC0MA/X+ZTO1FTV0MDeRMHfRNAEa6FvaG/2VXtjIwtLMw tTKUs7Y3/efqAWgY6On/15ySiam+uZWhvT2A5f9OfTf8pwgAchlrO0tdi/+lb2hl8L/D/ryW/wZN J/ZdWlBGgOr/3UX/+ol8FtvA1MoYwMjCCtC1s9N1hf7cHp/EAnBnAJh+xuMCMHT5zICO1sra4fMU gI2jgyfAyNoO+p/dwcoCoBP4x/RfxAqgE/xDbAA6oT/EDqAT/kMcADqR/xAbPYBO9A8xAujE/xAT gE7iDzED6L79oU89qT/0qSf9hz71ZP7Qp57sf4j9U0/uD30qKP6hTwWlP/SZn/If+tRT+UOfet// QxyfpPsfYv7MQfdzO9uZ2pv/cfkMSe8PfYak/x9i+ZzTt7b43A3/WYL5H4ul5Z9F/9kmdAZ/IQOA zvAv/NQ0+gs/0zL+Cz+XM/mz+GdeJq42JoZWf3l82kz/ws9kzf7Cz/zM/8LPeC3+ws9kLP8gw2eg f6382WforP+DjMyfkVnr6js6/BU8w2fwNn/C+zzfRtfO0MrC0Mjhj5Xh/1r/7Qd/zJ+B2nxW2vpP af5RsLFwtP9r/U+L7R9k/szG1vGziRjoWfwPDQZm9j8z/1OH4bOx0tn9hZ/1+qPwz4r2Frr2Jn85 fAb29+mfHo5/4aeQ01/4WUHnP8j4WQGXv/Azdde/8LNabv/i/7zr5XRNrRyUXG3+04T+aQP/MsMf ltZ1sDN1AWgA6D9bOcOnJ/1fR1r/H31EUNDaBeBOw8hBD6BhYv1sD6yfNwkHO4fn//TVd7T7vDYO /35zfDak/2Yj08+eaGjoYqgPvTRvrc8VYJaSnupQ9TW7f1RYY8KDm4npKyPjzlvHLYcEbqNRT0xI N+gq4duAqqq4zql7vfcy+ageFHGMzlZ0KSNAzPV3JzdYfEvLkOYladyo9PHP6eOY3937Qg5HVCOB wILp0RXfnDr7GyytHybSPLU3WnOO1JRw1NrAG9aFprUUX3mWrS67HThciiZ5MUfPviFdH0uOMiC2 h0dmkdmxYpp2xaleVK6SWVSXHwHCErBYp6Kzq3t4LpxKGLQWb/HDSCS6SgXUChIompUft2gQu4KQ MobA7vK5qYC20DXTdS3X69O8IUKAv07oB8GuF1Im4VGQuMn9+jnjpxMtSpF04GTgOhY2IN5zte/r sJMOfdzMgzShPb4ta86ypowonZsgWSF1j69vZU7K5Gco+z2OHW31GIqR4lzi0gXW0TSxqtVvYxi8 XMhuD3lvZ12qi59axnjFczRIieOHvJ+hxG8ah+cx4heuMqgoArWu6tSboJy2iKj+4uMynmB2GtDr yTgJtiYcLbPjLrGaU5VHOTIEJktTtEjQ+kqebvOisnUb28HqO3PGmQSftpFMY8YHPonOsCujyw0j YZtb3NpB5iQ70T2ZnrB3C08VIkKGRvOwgN2XjhHFoxXzhdYNRntVmXE/X8tZ94zCPheO7CT2Lcpq Jdg7PjICHNIEbCfKxDLsciiGM4jOKoJrEtaI0gRJlRZj9Godywr9vm0Dt6SZ5L03RIX5smtFg2yl yrM6EBlRDw08ljMXpUkvUQwMoelsPMrFIWiJK0T4p/wmW2iW8Xu00dSE+3blue32MCSS6en6Ij/o oT18aYzcUjuXzVA6lRc2s4FZz3RZFFpO65QYXe/cfTbadoTeQBt1HVHFlbbGm5wm+N9EdBYvxb3s rYPLtUlUsh2VB6zeflXaSxezptzL4iherfA11lAblz3fSadEmFzMFYLGYlnGS2iRyOdm3/gQH0D0 hWVkwfZXbhQciRtcDDa0NpJOs8JXf+pTwj1+S1Kahyf5KXvinCyFY4w7xlLqSKXohxig5tE6SvZ8 dptFnhdzI4kQ3wUsr4KMfRpJErfo2HB5ht4KjT1PJOGw3HJofWdeWlvNZz6GICLzuvgT6jlsszqR vvrRVGdLnJa4tu11d3sYd6WCN1tETphk042Dkzo4CxKEcmzARv3aX6DCWONpUZAmaYM0SghTk9/p l5rwmUN4tevTLwEtRmwUsJMN2pJJHnTM1j2ghzDi+RUcGkG5bWzXLen9xkK9iAwmRiMizMlBsmjQ OrhID3ZCIr0Pu626dkMrSZrGoTQitC3IHSMW6mIKE5zW2xtEdkF5ATuXIJ7msrddnRg937lm9dGp kLOaBG7htIrN3O/dcCnubifcD7rcaiixYU8LFrD90vDa4R8bJuUvIbaPJl9PNj5cTpa8+a9qBwb8 CKqgcMc3Ddn7aq4P+YPf6PDn6sx/lDmPs0x8Z+wud4akaxLIRoZ0VmpmVyqCZnUaVxX2xUdyekro 4dGh+SZpkg6yPQsSCBan6NROz4/MLvXaDA9r/0GXpKqIxY7furkrKXNWmk5RK603c8DiMgB3PDuF At38Ah7I3JHO4swRYpHcI5IZ1eMNGtKgr3R4iQaex0HUMk26KlzvUajrqMoWnitdoi4moowQzuxz Qp3jFx7Dij0bx35jUkHg91LPsON4BHqW9QZeiogfKRbfC5D2FEQxJpR29Di9+66hX+lJ20n3GqNO ndt6E6H9vNgQCOHZKC3YvDZB1k4uMNiUwmBQRoxAx9WAch1j8uHx7nRbnMOfpp572C9rtlEl6kDn PLd7xRg8VrbjzEZLZ8VtDsfkp0Tp9DbOfNl84O8vbsY8vofn3GISTVDBwetiy90mP/hrfUvN3BoK Wh3L7hjpmIxaM9z/Ixr9zEVnuxzVWjvQ3FEWM9Dl6CsVg9eFPQof8HLgZV7L3G9LxiZ4EE+RTFEP o82arR9tUnjjmdqO5+Dcnn1HAho7mpmv5lJUJANLbuSJ7D87GlAEz9lT16WkxRAuE8A0rF07dTe+ drS10zV2SBZxsnLK315847ZMNR3lDwY/Q6oZ15s54tfJHdtX69ofmxjhWyq9W2hvL2rPzzqC/2IU NGI+oCMdwE4kpkCYPHURAx+ep9KGvBOWfQT3SgvvFRdWHshossBp8hHHvlkddoskmTB2t7wifHy3 QopgMRMxuaLP8vrNnGzfv6CRAX06ecBQ7wxVAN3S2Xd2EVZwA+0ZlpDvBDwkddMeyYUxJucYil38 y4QhHZ4OrTeJsSOdoVZE7ATUiQYyYQ4YFxD+3mDKUU2wuzT4TWn2FrdBN7n3zdHcFC13EO45GRet J821uMtwvky5b9uAbvKi9D1Nf5nYt+4rDKgEOKu050K8+24uBNJwMwL2jInVHz2VeJlbEDujbveV DgNSoJkWNAalZwqXOeDV6hyoWJWOy0Ugg5+vOZ3eorYA44T54ymbsHNZjbzkD0HOa8ksXGKhCw6v zVIUEdsJNGiFbYZuYzALmTw7/l00sJlD+RydgnLkyAlZi3s7iGoJf0LcFxNWK6lkvoRHBvBVycgU hOwJFob3FvGt1QO+mmMbXh3ZSDJQKhmjisbpboOwd8x0duU5i82VIg8qH4BIJ0JRo65v/xFU8ngq 1ihk5MxUiawjfrvKDCI9Ghq/jwWtV3JfDiuGxitBRwDMzzJfRPKOK8QyZ5W3n/u19b+MeUlJXdC5 Haef7CpU0N7kjBm0BTAWqCiPL98d6+xouDN1XK5LwJmSkYhe+r0thPPb40s2HsXQSKDFqCIH+sIU cNzp56uQkx3EWdzaTfZoQQOWgiKf6Bkbs77s6ZdZT24nhBNPF+//nEJif7+vQWqzCx1JlkdNITxX yCasulnbMX0iHDZQakXeTTj3SUR0SLCNF2O2RZM/jcu7awuaidstALKjMx7dNZd1gquuGYrdMXsW z0rJMsQ8ozKQ9J/wFASCmCbM6CP5DdNghqNhQU6984gebQaxyGYwWB6oe8rIWqbIbCZ+wrviDG79 sjklpJvpxlWSaDrO0GF041/b/+Cm8TPNHKrKzXyzMMfnw0TKFVJv1JOOCmr5ZnLKGWMuUXZgHh64 wxjX0l2cr/b1AKiUMFRYkd/ViizzNuiLPJm3Vp8Ez2K6RC9MjTFpuTG+EQmDqLqBC3FLYMHXNho7 sBGrpSQ9V0GQdexdj+4QJV5rzZE+ly+sfmlo61yiSjWGlXitB1Q/boKpC1Br8qnche9KOX5fnh2o JVE3nCb2WpTWz6a0ItPYkSdAucZecfH7Ulud9DGV2PGkaTsht9zII20HqI4IpQ/ZPDnUhFFS5sY0 N4GW+w/6wvGleADx/5L93p8/v6sgNN8/nE/e8f32ydlQwLMbtH+awDEVbSm1jtp+J8S+u366honC Rs3EREwh22S96JVofk1IQWwUiohXAN1pYIXulmM9DYwv+3UGC+1LRMCBGljejB0k/zzRPivyPuTE funieJzN8NxyGQu62Vzom2Qt1nwZcdtg+N3+OvAQSd80RrzJvC+7ZHt8gmigU+rv+RKQfvjJC3ld jMx4XVI0oKKbUrdIjoIW7dikFSxfj7rnujk3v7PKO4NvfOC/bYsddMsJrHP4nF7gECimhQprHh4V VkICjbu6bD0hnrd5usGVuyha3NkdgpDjUvPxAP676+oCwAyNRr/VNhzqrvJ4bwMv13qCd89yOvez y5xMCcHBnpZrpAM5+upDFeRfdsY6vsoe2fiuHXetzA6mellubFIDyxXemLJSGeRiAn3PfqElqHPe 3ErAyBTRSfR1okNZ9dKV6qQuBXPBnJobOkuyq10vi/8WJS5laahEnnwxC6KeESE7EO69J8XagUTq EpSdiafs5mlQx1v5baRMnAaiclb1cpVPbHOt2S7MqzZqKLbWFrCiRr+i2VJ04BZ9UL6+XUxuJOHd cpsevfzjLtHc+Qz5rQCfucF52daBnzCGpaDj5M2SUz2NmQmEe5MCrj5i5ugl7CNGbebYVriND+8C uwF3v5vgtjWLD7qOvdPquMVRIg3KN+mn88Qt8VNiQEeNQ+80+Ux04Kt4VWQCcvMITUle5E+LIywL 6Gc07VWbRB/xrt3BzidsRlN3XNyl29ML10wrl0RomlQBjDBwtRE0eaQPwqA81Ry1NFginvcq/S92 +OKnxYJkSV+KrHA3HlXOjr7pTndwfZ2g8l0lHFtMUmfoLcMCdi80Qvpu5wi0TOibiYcpR2DR7p5B lkFNlrvUDw3xlQiyaWoEQHF9kvxicM7Sc1Pc9rAcDwmAVAgoUwlWWn0HAlwQURkjLzXlhlGgBS11 T3lnEPX7AwXlbmCInvgRUiwkOWi/mDZXAbXQZEiOwuk3k60+J7ewDtD83NJ6uFzytq04m69FI4p1 H/WTxN3kHJeIE1ccn/J/V72Rouey9Awytzy9mH9kq8e3NOFlPA8Y1rquj3wWSCLMOHb+paGA1Y/d /hBDjp66g8MILYrcsPETRngeFSEn6ZlFoVX/mZRhS+yOujHsRPg+dLsjkY1bwjkplxezoHihK8nM 3f/WnPpiTOpixp0Pf58l8FCpO63xW1CGXbImu2/i4Rc7/vzfoWWT7+agg4ykK3zx7HllAqlGi8S/ 6d9IWjoMCI5RvA4haqoUo5NqAg6dUjUiBoyhRRXBQzsyRWaxVh0xoUWMTuCG2pDkZfSD4s9tnMth TmAwHYc8Wsf2sCRBvKGG7xt7nzK8tnGLCmZMvlMuxOTxKKw86V1vcQ68vNS/7iX3XJN0mRLDx1Fe qMHbnW18E6hgPpGuWTdHvyhih951jM6ih3nKoxLHpMsnGDJnXOAdsr3NqUopNvaB5w+BG42wqH6H vir2H1JhfdhiCnIVmfhdsJiO5sZH2v4L44utq7WUxPxNTlZ7Gi1Iod4GcagCnX8uaJWAAU/XuXr3 QXHtfz9paX6rsWchpi1oBLjYuNDwwoTmp/gEic9u4BulBeLED6exvw5DGdA5L/YC2JMHVfcytTbN e4unQcwaZRbBfhEF3wlkD4zZJWcvZsMWwicM+juiT5uehD+8EDr3cZFsbCuILuTtKhd8f/D7Mm/u zMz41H6xFlHvCn3arOaoxFdoseuKpW9rr5D6YkTrZd+QVOLB8PSlE5zJE+H5YIR0T5qIkW6ZaZLh ADdijkdwUdxhvOZhas2wLOhHNvgjH37IAnuxnehJI3cBQgPe9ExOr/pKjijbvj8tgA9bnFAUHVUE Do6NonoY8szmF2+IiFmFrS2QgFhBZbQf9kvB6FfYjUUH/xS4dny9dMbi3hiFqYqeQn7p4CmpZImD 1zsK/zWwKGfpRGkZlun2PFrkRZ/OqScSeUfcYvipumGaY+ALyBJE/H5hIZ33ghiDtyPkbD9dYCwY jwEXKdpcJL84uWirJ47OpdnhIeueBX/s7Pmsbtsqvw3/t53pidq3qnCnQlbn+RoxT0/N3WwOR1Jp MXXRrS+FSTyFRxY0pWsxgdk8m/ulzN3zCAHayVq2USbqWmGFWzxRm9NdGNdJ3XSz4ObdIWiM7tLx TKRLw6bVrC+4aupXXwe7xH+QEnprRA8L1cjD8nB6W9bMUxcIQ72Uu/JmMoZlw0ogMEQlE8DRn+R7 tJB1VgFwJM6VInazEix8htBv6aAv7zLdguYx3yEptmWkXmIjuaBfBsV/6VDMu0dvIt41q5doc0NE 89Ep3McsBoW+IvlUzfXycqxGeNTlRPOfQQyoUK0djfHcMRhpWJvBEzF0HCvxSITbDXx5xoG4VUzE 58RUUxVWHnMA93f9cfJV64y+i5zToOJmqIbANMBY0AkK4dlDrj9TWBjBOHJtTq6YDIm9a8yuabZu IE7+jETtkWMsbYnmqCA2lXSvgES8aeqn/OZF7mxkhZgKi158NI7WoSuvHFPJjeE3xHvBk7nJaWZD kd8zaOO2TT4NqbdyV9cNeEPUU4FT831IWe1ebGW+TwvOhwGw1PmoFpgjLt9aeA11CpkJxqKKITeE Hb4Hkl7H3G2Bw1/oZe00s7H9KjVdAucOJAYa3D+8LHSBtJxmTnqwT3frlWAugk4bq7YL12dg4VML eA+04OiBnEEh8wa4LTcmad+ZtW8MPu/giHfIuWp0PWk4ulaRwkv+nhQoEEWUz72XV7OYV94LTvUX Sk3ahEytio42Eeb0T3i9jS4UIthtnJ30YWsfc+hrGWJ3PjQ90De8IbEVGgfREkvZHIAr7jVtz5K+ 0iRZHFYbnVHFgR33RLHq34yj5BZsIQH2feMgySqlrZhpIfDkmyaGggs/uf45y9MGJ9WveUIraWwt +b7SXF2ser+ieA1OWyj7E/KkTXHnIAbgF+M7aKHbNSmaBjP9S6gRZvW9i4UuGt7GU0Sq0Z3sWPkl dDRp+EkePMdEgjih8Vo7V1slYvwEGon08jUBb/5Z3SwiuSkriYQOStq8QeonDInQM7nGXAmWEU8v q324FfDSeQrd5FNlKTV+1kpdxTW4MMGRygldEwaWqXMhLk7B10b9ZcMWxAlGepag44FBGtnP51Ai Uz8lrl/3sBfI6fRfw4UmTjyVvlZc8R0VfQ8+wNNMcYpXzpA5K06wVIZxYcg7J3XMP6jQSPoqvVel UQ3+CsEsvIvMUGcuX4ZQsYvBzqFXz8miVygg3APitQgynxzO8ENo6T2WC8HtCxHqoEwfSK4KFZ1a P0oB+T79t3KKIuki+awljjQNtcGqp9j40jv9mk1VV30/uW2yFzjTrSeciKhqHAEScq5UiNgcpXcZ zCvrxwFBedfkD6/5hBezdq35Em4CmnGcMHedN08L8yVfV2VQ4a9UPRCyZn55xBp1452GvJO4YwSx 6Ojwg2eTaX3UxcwpiCs/K0B1CxDKShZkHBE6RxfFaQdgi3IKcvXYcf1+iHThriw67AiisuGICNQb aGNGCtnGmg+KuoGwnbrdiFSfcHkF+1zKRS9i4Q0u4ZUWDSamQnfQohJAxawXnFKhGKxyVh6V0eZq 5d37i47xV1hx6kVGIsmjuEmekX9TesApDCeotlh7b6ua2euB2nsJ4Yas8S6RR3hEqnyyN+pHpRoX to8ngspd2CNwZJ6Fw6PDdMrPkA68aDdJJq5nFL1xYuXaCHrFrmGpKS/tO7eeDufMMA1y7nAzSr43 +tZf33VnCKLsrA8eSmnFK1isyi7mukJBgBsK5MtxLWrU7VTydCaHX268MulqYk+V0C/TYgPrBhzE I93sBkB6JbpZvwY7TGy8t7h00CzlNxnZvaFoZ6nQsDihouSmlAtsgQ/emGyC7u4FH7UpV5Ut19DA 0hoPQGZZrfDrExCOlw3MRf9G7hYREZSx09zYG4prUqy7VLH5+oKHL3RIeE5GcBSw+/GoeygeY6/b SUxpeOrSCphxng8/S/bYkJEbZNY5RJ8FjL0IjSHyLuQ2dR8GDkaH0FI8fD/NE6GJGoyjjZWtD7Nm GByNXiSkQTuIANm1dczchejEeDoHgf5hAfLV8q5ZTYcSctHL0uq8drMK6FK21uCKSfhHikIh6Swf zRcik4neLXG9yQaQwwQKmBxesa/YYVfGxXZqIE+cYysf2+wKNiGc31A4CYAprXLhMiIdsMtdbJ3N zWSO+L7CTE/Xhm3bXcPwGT1W72t0nutKaiHN8odxRDiLnRvpSUPLwGblSkcXaSlNA0OvpR+tK6TX qaoa5iBUE17IeQBMj5DCLUnbQQkofYKRoDiqMsk9BPBLmUPU2x2UAkPgzQ4LbvsTWsxLErWyPloO o5OJrTuWa89sIwYr37abS1Xm4j1L+qnu/dEL4rWXaCngfNud2OR2ZVR/SIUqUSION1vp7ucLZMKP p3XYXJezNlyj07lxzS2yCVjyBo7BYRXeyAG1UCc2g3UFr9tr0tP89kFX6X/2V9cDAfJ7XnqovHco tzDRbix2JF86jomM5hjtvH6kTrdJvxBazq25e9cRMZdD7i2b5y7lQxKxU84M0lakIFBCLUN51mgp RxfuDiHYqz65wnhKAv7o0q/HxO+snWWN1xw8DlvhGWtglUknuSJSBVqNcoXTu7kg0FbOjpxRH1Kh xa+ZRewxwMLtS/O1iOe7Y4g/hcls4Ugo15/nFiKLIH/DkoVsrDKBSch+yGH8JpDXfRSiBFjB3Drf Tk2nXrQSQdpYBx3ts8m29LH4eKt/e2JFA0zChyspelomYCkwWQcKQNYzcSaVA0ZmVgl/C/c9oGri m5D6b+oR4BQnxlRLs7XK9xM13NKezsxJNpjQbEhbNjGaaYD4zcojZ4gP8mHUB+ZLcQeOL5cute53 EV2Zdzgw7gZb1/YH6sSOXwJBdxHr9Da6oA8ySGhcbdzgZ4KNOnVyIGQRHqnUAZLXrN8jw6M6fZmT /F+1cRgZWR++2pY+Mp0EnYmzOrkXPEI0SjgAvjFK48ykbjBpwRV8rASeAFCGuk0o9EX1mW/p51/U gHyaHg2nMjmqeL57BPYU1Wi2qe/RjLdF0jPmeLSwNr545ECPhYLZlCjapdB0Ix0KLHo/Ru0EdYqn x7gicrMupPxAv2RwkIBMMZiTJC10XFpOj4MhVU6WSzhr8rxKVcpUCqT8SeAlXlPVXMXBpdt1QOhG 9b0VA5FG2H9/m7s0m++ssThLo6NmSi9kckoU985/UmI+2lt8CGNEofJ5SRuDOaJ5k++RNGs0g7vV pb76UCtluMndJgNW9izOI5OjDo+1K5OdXYNPTx+VimbUuCE+2nDCHLe+gq9F08e/BIzdnLjtwu/7 E+VWUAJ9//r3S4LwaFJPQ545BOyW5Th/zhS3xFd8Mo2YVufQ5nIbVikmox8x29IsqrjFns6W+DHn kKnBLnWbDsnL7EjEnEFI2iK4vMuBasDLPPcQu8TGLpDvs6g6SYFHjsZfDAKTUkK+HvLLrrvbg6t2 qmxtZ5JIMkkp48o1nN/4QwcnswfPtccKjGzBwxdizxR1MIwu9v2SePm9ogq/bCBMk6+nm9SQ+Fup 4Bv/hg2ViDdc4ojvKsFdZuL71CKZO5KOq+MoxUvjAmFmXhJxA7yfB6z9b/thESb+of0OPx3UUidS daAAik3qthwHtSs0B+zb50P4oK5l9HK1xGjtZPKraQ4M7a18V0OtgUKekEHH/NOz9aUM87PpAuO+ II5VeEjy4Y+dvvr8msH06Fhi1a4kjcf22ZJAL72GNqDIUWhJ/0Flqgq6RbLAlEiQnY8+vrb0FEmI hWjzE9gZchXGeU3qXz/joVLIFqoGkp4lr/qTvs3fPp9nw1h/w8mIHisOIvyp4QOCCpnGb0vuED+h 46/xfT5k0QETDLFzbxX6hfFXa/voMwXlXjPCb5QkfrX0954plA0R8Qi9yWtVVeWWgwShgtDb318g dwlSFo1+hIAVwJde99pNxT2FgzIaLxMCu3uWKZyt9+qq3kEtlHqnlk8J3p/QZQtGCKH7F+BQ6xZQ 7KzCBS/o2hel4JEKV0BitKyaCTH6BUCEU1ZpHuqhg+Fe0SaEgm8vys0nt4MdDhB3cRawgunPvsSw mknNY/U7ehsvTAwHoiQVjqFBLTw/1AMbYdNSxU1GoSGHXu5TRT35GBzIywqfGz+hegcguYr39v+0 XaRwd4LEsSqLOaI7g3/umwrOFTCb/EDOMk1FbAClGOkuI1Nk+BAHDwWmcfEd3BHmwpxapOfmKMMK yXSnYM5IKnhPFeXxm4GAnkBCfmaYAjesqYk/KOrMoo1ut2sQQdsbymkIQpxeSNxMzAAOGV522UQH fTM154METg9GhinefnFHUCM1xswLEuQmeZzZWUg3G8DiQEnGIeFSB9dIlHuq/M6ZoQKreHuKeIlN 3Eava+O9bzXuzt7bXLMGVl38xdMo4uS347MoEwyM3vxtkKE1+ypi4hNfi+6j4UWefMvDOOYdMl3V gGoIMG6AMOSmAHzG8N7NbD2w3Rov3I563zharQEwK9zUTPHpbWYaYtpbzUPnRe4em+cF5lBsYpGB OQrrvb6uFt4/T4g05OxnX1wxg3BoRvn6OegkhS2cL8EXk5eESdCBDopqwdacNqOCYprSQ9Dnznx6 WjSWWTGPwL6DBFV+u0zkZ+4QsIq2WCyWOOBzVHHVjyLS6X0ynSRULjZJ85NUkTTNFJcPpm4FHl9c 5jCrmaplioXaXiJ+IX31xtIlKoislfL58TtR9zvnz+82VJTR4nf6Z/kPHCQFUyVOwVDke/n8WMl3 Gxa7Hg8iu3S3cbLj0z34k8EMm/k5qY+QX5wWlAJXJc3w60x79fXtMIqNriR9mBi3MjuQThyviZkF y8VNcSjFNsDvi0WtgmdAEGrWl8xmGG1bvhOQ2mvbtQtDRuLbMlMm626dWbsoUp/ThDo9BNrSD39h rClr5DX90QBvY7TuRu9+w01PkN8zDXlXEY8dSIMl33z+fsAgcdAWAWhwNZZ4MyJgmJ6D9VVFAN9d 5qOnsalNf9PLhg/4fZtNH5QZlRD88SKl/HZuECr+RN364xfILlpDy+lMZGX+vW1igACUOrGXdJwj 4/wvIsCbYpGysgpU2nLd8lMjaavikjt/u04W2xFoxEUvdq4duGpcrxPqL1BtNwPBPeUAQCw/cKAj bch//w5sFAD5bcEQV/jdaeXG1EYfY7PHD22cUYK5c+o7rvAZsFTTqETf2+2PY9WrGDCuZlmi9tQh TwqQuGWWap/fBVfex/VQ0WsQClYY3QkEK7IXcx7TVQ12eJVUBGWIM/fTz5BzUB18+qhNzEkUAQPv /LBDZd3OzwP4c+pKMYOxgtcBUg37LFTAucQkG+AHFGEbzqFCDGckHabKWzw5dYvYHrOvxtRTQMQ3 DO92c0DmmrURbvoyP3TlbXvdSLxa8Yvq4BEbPHxDYnT3TVrPbavb2NLjUO1O74tlZGPLloY5s5gX EGYp+iteO46E3VAmEfLn943qKr5MTv5cQ5tlKEboGgZ6aDrsoOYphbk0rXCQZ25yEaeLEQCmXPCF sGATiZNb1AmheYMr2hPmENGflo4IfkcgI3wpc3GK9LKxeCqaDCZf5kksv+obRK7iJTHdfHaNslSB X1v8BUwInbzTtpgqnGKB1v44cznlQlAEe2aUcEnyPp3aO/BY5dy9PG6qnXuFHb1NWpFQsWyhhrSU s89kxQZTc0qDudZeIcF3NvNybmR8VlQJTjz8YCpFeyacGidoTL9VwBSBehXMUJ8U6JYY2MN7ZH8w clp2oS03xVjycNBDmSBSBGUmlnNqO4ueNaqedqXJii+VMxIaJHgYIFTZyJe0PqYNw9h3zJhRKwhE uolIvuSNt19E/17iRQgVVFvoXijx0uBlWGX03aCWVNgMEtuajpWGkFLzRPY4hkYmTz1XDT2qhZrN qV4KjPXq3nv8OSksp+29A/2MSTjboYvfu24bvqcU2svWeT5FsBrMBMySAXVOcoY9i33ZKUPFC8p2 4pcx1YaiioMR+9jSm8kO1Fo52lKufMDYsoTq01AodeyYBYwIOeHInvi9XHemXj6JrTTfYc8qcEYn XjD7aJ6akcsATtcMIr3R/bpzm2fqZmnuya20K5V1fRfeJt7dcRpL4nLkEuKCM7h/hUXV+L5h3oRH e/GRXwLMUuJKmz7SaOmogU3gVoCpuYoTVXw0eTLDPprGQRbmacruXv2NA9xSFOVU6kyGSntgSJJN qfpIakTS5qAWTD8hMM5z+Yz0ePFzHNl3QSzqDLAK+hMhIQT2lMvs4aEbZkFzjnV6q4rAkeLJ1/fD kFHvt4uROXu778je+vZVnMYHfc6xeH2LIq+gCqsMXZkhZ4NiBxB9UP6av8vuYYrxbwTiWUuMopAD ZotIjcwPg2oZ5FX9I/vSJnMSQlgPoRy8a0tXlsDqrU51xqeDHATv3oW/G1xvMm+jI6DdFMeRvKTs 2RMH9L/iWN31gxEWsFKG7lp7DmEru0kF+f+mUM7MHQV7GLgMzrIuYaWfQdlvaLfppKOcrmoat3l6 OkRSU4DrVXGd0YYYzB1AvlxV09suxr7fCap6aQ3+ESHkROv7Ui5AdftNXi2RAVy08kzJIbzSfi8r drpud4VpKhz/h+qtLvQ14otQmHqHTyFM4zSTLXvxeMdRCnFc7JLHJHO8JifczSgftEpmLH/5NHPE T/ba3GGTPGp1eeYRMKPq/ncQr0zFH2ST6MrlRrTE9JbLZ6W4Lw6vyf7Nc8tJ0NgdiZHtuOvk0J+v NNF9YUx97o/+zm5TVR9zg11SzD364YsFWZRfcNJDdfHRXfaf6SDFnlUUFJgu2OO/8ocUgg+AdoMk xh+TW2kad1bn8O4nxsb1X9/3s+R1ebSP94IGXYoHZyBfhm0C3ezuGYiKenx5DNSH9Uoy4NpkrfBY aLkmlkHE+GHp2ruES5ph9Y1O12VtJIwu1E7QTWzcsO97bJnxRtpGhV31APmFGkoa4qbyRIa7M06M hgPH+a7ZBc7AAzQ6TeWe+oKvWxGZ/Tg6gj7CJEhSow1LvrC0ARfWGNKPjcZRg/LVPrIV4YWPNR3l nrOs8I7o0feIThmEVSUO/dJrsjlbzJwZ/FiVSmmnffjueKRro8drYLJshli7HR9mnJKBFMlb4TLt 0hfTbNB5D7w6ZZ9GWElMNtEYxh7DkNnR2+J5Auns2qHHdAkVGDYawefGXrLucaT4vIDlQEoFKNne wRfw5A62u5TG73IhtIipDmIJD0fg1i5zi4wnshKFe2SeCryD20xjN+2+nFkkyshUojlMCYeJCE7S QjAfeTpGA2NkJMH2C2Lr0/WRhA4swFRrBwLD886srvFXdQeOlq1Jiz91BjLEUfSNEZfOEophERra gbyQVzbhYy61MRDyumBqhpOKW0oo3fdhO9GI+BfDMsMozsQ6cqpZNlMyxK+ju5twXEpJbuQmb/nS kGOOcETZE9uQD38yLM/r7iJyTADlfJwOFk/O+antcUoCkJOdB/igSxhS20Ty+d3EPLE8k0klrvZK cr4TYpqEMaDC+Q9vN8uRSuJ98ZpJy219W3U3BDeGGWj6xmQIUzTdPTdggtXeL1FWeMbyNW8JZ7Sl 0ZEvrnZzrHDakKhRRgYGXdd0uc8kxvKjrTai4ugkIGOP7r5r9T7PTPNMcfNEsK4ZS5CvgYiDli8d sEUlJHC0b7u4rAgfF+gcteFcD3SvTSa+TMWBFRV83b8HF5SvosMZJLjYUpy2S3vlm3O5EyhJHo+Q uKkccVNkBnjZ5l2towXyA0N2Kz8LHdJy5DHRPwimVu8o2XOs9yCdNGPJmUm4wGKiUV40wNIM7T/N Wu5Ywam8e/EDHecisUMyWcXju8n6DSK6NdNJWNXle40YLwKHSerFVKVTRb9klLRfxbIz+Ww1X1lJ 67GIdaaOincznFvuzKzMbeXDu0bSNiu5dWLOMXPRNPFDiJZt3Gq4cnQ7eT3sPlfKkZs9vxJ1DcEy WKB700oH6ZX+rV+RbpD0YrJRru9OTkN3IbBfJXpW7dmsig4VRGZ8Rjj8VvF1qeAq4dkgOrsz+Stz U0ggOZovM0s6VL2F8fAH9M3uTPyIMZJq3GndmmSEZ3t6GNckBGq+hvvSLoZnqGLghUv15AP1zruV mLYWBBJ4PKvoWyql8Cq5Z4UmTcuw/fANIkn+m1hjLTLDgrzgerAh/0iYdt5QNkVdHk1W2hQDs4zg Fhay1LLWdyHIuLAfPGd1DMM2ge0R6WBfnvENZPcahgWl0fnlaCUnVKnNk+ibQtb8PmZ1AUhj64rn hOt4L2mB8QWB5SJeNXi5UrEZR1fcVO9ThsTxK37ha/j+fWw24bMF8LPTjvliSgc7h2pYFWCl1L4B WvtS7N6cO8f+Qb9Gvn+ZCHlNhxoC5cRLvHvMtfVsKS7JPbYLVLepjLxNHAPW6+Ld00DPWgPVDrbX ayScVVmK5SYUG8DHeu3hpVKSP30tPolIiO29NOqd35IvK2wkGJDczc0KIkx/bQoq5oEkXk3kxTgc ZNEyqqV54DIvGFudkEAIyPvhWcQvPY5mEWyFHOvnuOUZt8kR7PqtiZC0d5nPBhWMvLGRwUtG7vXs 8L5wPcL0zJvQquMFof/LjlE1VRgbN0T05iUeuUSS8waKzH1/nVKXpJB4lrwKN6sUuGSHN8tlPdla 3zvlL/EK+2j2Cf3dVHmsBryRT0klhMexkSFxMfuUNN4Ya0Qsu8WfdB4LcFSsifoU+tB8sU5GTRJW 8o8EL1FjO1jIWMtWdwW0xLQ19Twu6HyE3iiBSFyZlHSwKivKDQyuMUls3AP7HTXbmlHaXQcWmRDa FUuvqqr04hfnjD0bkgeal3CvvSi/wZx5sgrDa6x8bfP8gDFHjbkCytQ0ZDipmxwVQj5U2+A5h4e4 ZV9O+oE8dfmIDhH3xZCbS4t44DWU7yxyhRZl3FFfVGk2lm6SIjVqerDz7cIckdqu8S6LKB2R55YU Wq5+lmfN+QIW3LviEoT2Ip+qnPYzs5d/4U5Clnk6ZhxIm2U71tq/2jDUaWDI5g3zE3T7VaUDmtP5 v9Sumf04whj70TLlvKwGflibdCBBm9h0YJGAmsaH7xqdvbgDrLCm/gRACBtsfOYQYFc9/Okt07vR 3MB8EIo8A8HsATd20oGmD1W3Ewtw8ZxXk6jAhqLl0wB0GGhMF+9X+Do+oNLWcm4+jkS20iAHbaCI hGZ2hOpvlrf9HI8ufh1fx55tVDEjDQEuJqYpoDGbspvInGpczSKacvxK8EzBta03I6pUaTtUrqqq 1BURfIwyuXKV9vHLMJmfszgz92u7ingVr+sIcQ/M11JQUkqgNYdIr6LH6N6cVUtKMSyXp6i27l9B 6Avjw2xvFTgS5lrwHriKmw2m4FxnbimLFTdY5JhxIqFMiKNLda8soi0g/Lfid91SKVXkDVCdqAkT tdYKHNOsezr9BuoHONfJPqbAMdOHFIx8XL8ezjw5MnaL07Nk9112cpVFKZCwAWJ+aTCTXR+q3r7o 719zctwW0DPuBpUqSvgGs2VBSbZ7RUr3Yoio5we3vF/tJIFjBKXcOVZgQXPS+HhM+qgIdZMud41W wvc6K06/EDXR5NxMD+9cd5L3XRBn5jtdXlMk6+hVJxAVNQuACjP+3omLdgm23Ta1y/lV4NjmqawE 2khP8kqS+a15PkZunh/1dh04wX3dOfLhzCO2RACoIH49ka+oCKtT07QYUDQt8VRYFlt9xp503R8s bUGFgzb+9ZK1CzqFhkeddPi3Fr5Q092gAeUOhO0ZVe/VFhX6cnSRyJ3FdRe2/MjuoWLCCXMyPpS2 nuMCknWtO8OJEzMdqstMamOOENkquDvUSrRPuW305tBKAuupkYbSxLBGe1JtlulMyBJhBh4rrtne yK961kRE2I5unrz7cIn4IHRsyan3GrLja6yBbdRX0XhrPlqAnQJvst2O+TPGg5pcVR+F2aFYN6Id aIYfhCnv6Mjo6YFfzwpHtx0mYBpW34yz5JjRQeybDIqVi2KqzUXNFHegFtI08jhK6VwhC3JVoGP4 tzyDGy/vOL3XCGP8Wha5mfECdgsVhCeWhxSH4NMHqWecnjw8EcsmlanXU8YpMgojYgKojLYtMYIg WYrxeSYL3hYc+G85x8jM6afUIF/Js3xrrY65zap8gdXBon4WtjFsv33jNtyUFZnIRw5kCEbP7D9d 0W5k2XAHgmmuapTuD1yu7s2HglNLDrZt17rpJSY1VGJCZlgWlVaWf3BVm4tNQfsVFnrWrPCxcI1C sdbO352rTWefaT8bj8eof5gGO8hXn5ffo+ahg736KKL3YKva0V7OWZ8UumYbiDsizpV/MpZWsxfR pG83itNqCiO0kuzlnB8wzYFWfyfDlXAW96UAK0nYU7xk7VBSetyHhEPYYtSJAQj5XhuW16tUTsMg OpPT9thiyvyaBXurSE8uEa36rVOmeGusrVUdXOBDG1PqFIEzJiMrqq/8ccAQowHGLeijuGCzlE8X bPBSnRK1gWRvOayZ3MQwkLRBjOy12uAaFfwpdGSxx8ODw2Qwqyid52N/81WEK+a9oEBb6FqZAH9t GiuuE3uO43gA3K+VT1eZ9muvwPd2zftDADC2fu9UF6XdeF3YwdH780+s6SMM0bmM5sY4k/oRSH8T xDReugW9ammRQVNOk/xGb21THIT4uf76ZYh545NR5318uUdaoFVjllGpg0SXllwcwrizkckshF8K yYx+wijFBJjT4lJpQlI7vMeJORnuBreqKiUFjzCwNGzg2nH9B5ZS7IvKo4ql2SomZFQykqNPO1U9 5kuabWb6NyM8yoI4N0NJqXxXjs+rO7XiQZVEml8gSbOnh7WCxwo9SYAnUbUNd1K3dvlATy2jY9Ur E5XCPETeccr4dA41SGCnFX0oL4kgVlUpT14nhxBVXiNRw5m4CD1T3jzdyg7Irg8vQcl9p3EYvtmP qCn1z3OM1z/m5N4uCcjiFC+v65kBd/u9N/7mpbBD9cxq+5rFk42qJeZyD3m/9wG8XrvW+xDiU4rh wFC/SJLhQPCxMerjXA4+LUftLWvbe0CLda1F79X2RSqCRkDTUthmLRSYNBZQdenEH5TxM98vmRbK 2s/7iU3wxAZICOAJsurcBDN2VoQZS2OlWCun74Zj7hgA8/X0bYviIckZ9sgOiLP7x/F+1EF2Kdby eViuIYdamzVGYfzD9QNZ87anmxGAWupxQ7HLGoM3yzBMyKSiNxntvW1wQo3kBNVFigeS70OylQqZ WZ0DQCx8wnNCbVQgSbTSZ+wgqJzYquQ8iS0v9bW0FvsAI5oxi3pZd0E1i1qkqIafBqFTMMdj0nrY 1pR2DUgwlmv5LLJ4YRDYEqEFQmXn91X+VNskpOFi6f2LkYivNVKXQ0WmoePPycAr6X322PPG6Nas 7xxEZAuiZXc+FFZbzr+8NeU+4l58pLwOGd/3/DK7r/DPIbju4XujFvLx87Xa5kcXFj54bMR/QRGN pw8/fb0N1DiM/HAI1vKT4M+uf6hCl60ELRvLLPbnJODLhtrotY8ZZJiYhT5j4Xvl/XzrgtyiOH6q xtbknnHQGQekkvGhE3aGlnLXoBd2e+qLMcn2eEXtXngTy927Jc1+ox7A5mJ0bZvfUH8IWP7CNsDv 72Dx66ey5+t3ThK8rJgQLq0HYIwGsBpjFnJrxB+nkR0EHuXe9QnCsdiS0hbUcKHBwQXc2ILh0YjV xfXs5eZpSkSyOyJbl+OukX2ihSD5vFQgWT+LGfnIsIyEmPGdAdW6RCZqVTpQA1GXN60SemKP3OBy IHXoMNRhbIECkSYpvFUQoVZG6OuVKZDdjFBnUqDJeZzt1m7Iz/d5T8hSjlybfRprKcEuffym2cVl FYsn1GYY8LdqUwpmOaPKE4Yecz19cz694/BJ6SSNKCuX6H0JqkyHrbaXeJSEkxjNAcIUbVzaNpCo WmwtkMZZ/iZauGVnrlltN25Z1hDZ4PqnQMOMhGKWCYYx7rUHNZ1Btbx2quCPZySg/N4XDE6BJaUE CuHENsNUa8qVj0bjyOq8J7EOiCl9u7aNscIjfdlq8nqayjNqYuWMkCpoZsOW4PMxbVxfIsYVN4xq GUERjApgFW1X+qDxp8PmvsSEjaVKD1ffl0T10a7rVn3zqH5ImDS+sp7clx+gph4cVqGnuoLeLTqM 9GjchZ3vfTad4CScVqhoNjKSEdNqQb6iVcvwSnkmrs3NzG5mXqM1MI16kvAeaegihP2xY5yqg3NA 83jtRNVaFp84/xrF1/uYLGIOvKus0F7yzjqTosSAxJUCrjcMoV4+VQw5zNTBI807DT1ptB3dRwjJ V71wTwBk2w0hlbAujST+u+FCcwmC5zFK53QHs8wHkzNqxU0VpMXa3RSCXQwDxnLY/yS58McLkYuf baFokmgX3J3YjEIGYsY4hoFSlipmIMtRachOJy+PKQGtxAZ4Ae1kSPtqt2J2iCiz/osnQrpdVRWG u5hCRZnRC6vxu0gVM+4AKbjrwFpOGjR9e+F3+3cJuwLLdq1ncTpCXILoLWjNSVk00tEDAFOt1+uI kmjCkbbZvYe7cnRMLe6tUlsqMBGrzZ4BQX41u0WIy8nGFSMk3GPBtphvdEQsBKH6WP8ixSVIHgRx jWGaDdIvXd6v6Sx1FfUNdPSiPoZTeaVX5cyMUle39rtAvO7eO3AMdtjQG8qECTcVlRYph9cmq4Rt /En6PJPeJ5mGhR7kniX3X9CmxhWLs4p6f0mQLm9H+EuvzvqoSSPCLAV0DWbA2DwYSjedPdIrkDdH DALide3M5ZW1A50niZJSnpN4oqRQugeNhWlsgGE3UxEoU/TZnYbO+412Nc+EvsT7JU6rpHPXvdUU Q5CM2Y9TG+HqxgQvrT0Eg13+gMkqktGP+42dvlUXhHlFmYMYzEjRvrNRb/O7d6IYFk0DphJoshou Mn86g9vu7CxE6hcj9qrVkXDfuZNwYVVcyRGLvQJWSy62tZ6ZYNrFGBuzX0PcCuPFY/w8g6apIR0S rSXl0APT9ebUe8jN1COfL90AHEXotS8qZ0FrCOFd5RCteIy4O2ILXOJrUeG6T6Jq3xlAO3dn8Ml5 ilLTfZu7/mzLgmRz6QSSKK174GiRe1HYPc5AofIe6lz5XZvRme2XyzwLosFlrPmaoKzf702E1T3w 586EKSbk2pefmKz7L8JjbfZZQSdG73SyEFXRB9tfV0J2YAVnW2ofQ6tNh4yUkeRctbz0yaYGCfA4 6YEOsC4Hk/VNcZF9dPuk1rsuszEf1/qy993hG0W2t3nRfaogpeLc+eXWhFB2j7QfQOqHa4hqoCCi pFTwt9ot5WcNUxe7194T8hB/dC+mbGiY0YUQOM+SQ8ytqgy/uf80iWtorm3+rfUEam8f0okd0Nz1 2DddwslrPqbftubQzz2l4163mVucJ1xd+yUvMKoY+XdNlIv0XDZQE2CmnxqspC7afHGwTX+R3/3c ZEB4PgQSVbj/pGiBr1LyJFiAQ7dQZCT/3ifHSWIEZuCnei9fJlp4Rt5HPaSLHsF1L1qtOMLhegeH NEYcjg7amV47xzXhXDAJ50/brHBUQz4vcV2jmEb/TkVuUJWB+VLz3dGr7l8uQz+X81qVHe7EsYry OQDPS8UPRaNfQc8hmIHFRnBKfFsEYu8KbRBibPZh8wPAtLo5Zq/d47V57WVhtUMfTYxHhTLFUmpx PIxXDQg5lQK8ePLSYLTfIA/LuI++aB7W0bAFvmWlIt//jHu5EiNMhx3K2YbgRGir/Orf/LQYu5ev MN+DAaGa4vxmLAWdZi4MFTvPX8KW5m13FRwTUAaJA/8Gf0xJWCLdEfrxJfiiH6UCerALqYZuG3kL XS+53HVdIhfNwxN/h8+lmDQNTbmmlByvmj8BbQwsrtoiEc6pcqMeEw7dFTmk8/uZSiyyycqVXfa5 vzPU8C+YHUaSEKkVhSO5sF4uobkwmuJyAtIFEdXb/t/2vuqcv7wTKIrK4IwKm2AracvOB8eSfuAz Q0dyzdIux/HFt3dAfleiqE+J8IVQNzFd88wjMKUVld4d43UaYkp+SA17UzeYj+E67n8P71/EtPEF bUnis4ZZ1sVOiGifKBH8Xnot5CLoFFB/PQcyXb8rViyvRy6R1FJA0zP+M3zwx3iyFYWEkNDLrbfM lrtG3kPHJrhLiwVG/orur0NJgVF1y9mqHOkiNe4Ac/wGJaaab1f348g2ghnrgvPKiXTODCMzH2vl VHivs8Xc4xmDU4LbD3tu5/VlfKOoftkexqlxzDMgrxYPuudsXJR8uwHmrvxHyUqr8lZhY+3CjimC BmgnM9cH6xTAoDmzMW92/tBgONT//CcICW0hs08eSm+q0ueYxL1wxhE1o+tr7huMbYmiI3pRRXyt lywh8OVZyk2zlUTdAA2vfyJMCHKjmer06J7htjSMLepD7rNgiLl21bdKTOVmEt7nEX5aLAE6snhk c8mmuyLRjgIU4fI0MgVjEAaTseCHBVN3zKBrutghJySynku/a3AmR1dKmKtdHpGz+qoRmazLL4bm LJeQNMMdCjX63p7NfGeHQibOrVtD4EbZdqa5x5adCNZLhtY3bN2qdTKvlTf4VrrFjAfyp0QCeCEm CfY4WCdMBda7B/MsxKLuA5az1R897B87vW1Z/OofO5wFIBmywG1I6IqUBzw8PGY/RgoFIdEhZNhQ 0f13wcco+aB0qS5ytwLZCd54TwmswTmLBQr8VLuY04p6uOQFHAXyoRibukDEEp5WB+9gMA8Kcszh FZRv5s1ebYELFOtKvODNd2ABQjY3ig4Cc2uIv8Vp72/bwiXUq5BLme0M7of4eFCLgVdARA+tY3qS RKngNd3vFhG7EL1En08fSqmgBKEmWJmsfoJoBgboGGiMN557R35UurTxJzZFkUK6tDfdlwJK+3XC Ssn5N3ffdZo0drWu7TROO+5JkS5c+VuFa6efcTJEyVulNQBaEXdnHWmpYmEvnlBTRuBJZ3CEdVX4 +F80nR5JfCH97VWCugy/cC3GxK9q40XPPlM0y1Z7urdtTGsXJV/QK+xdKfnKMaIgsZWicK144Waf Q75IbCx7d7X6CcWWJCi5KNlNG8XX3ydoGxLhvkuUxgnHDp+pSZx2Xaghgx0JjrjRIhV0q/PZ386N 8wfPeazwdZMMKUSZBEmBLi+3dcM9Ii++85PJqwZ6rr1cgAsTcsSgoAlGnNklTiyOlu5Ep2PyKowr JeyPcD5oUYaYqbiNcmvuG3X5P4VUd3jh3U8jZuCp58z6Z30JJNSY+a4oz2n/3TQt0RCZlHkuz8l2 sWqHaevyGwoTdc3GteQx5ws4A2Jh+LN6P8HsAjwdD1XE0ISWks6VjFRS7YFscJpsVfA6sIze+T2T xClOFTwLgutXpanOvbTgj84UG9s1z8O73wa+Kopf/JbGfUfj0otJTzKtnXdMqICMaiJN3Trvmqli 55KK/CUrupaDbMRoevt0ONKjoOe541baA8Ci5n2+aZM1AeFpwNi2ElqVTdRUorjjw1SAN6l4P4xP SxBnXosKoGVXxfDQBasRQU2ao+mQGN4pBWvZl1VhSh6Z2m4tKm4blhs48/ClGsk3Lv+fAL4hQd6f IsONNi0g136g7JOojrOm6eh4A/96r0KEUseiQr2cYDB1p2xS3TbN+QhkrKv796V77WgFufS1Qu6d +XEyYhyWQZtJNLycIlSM2sWaGKzsMjtVCTpAwT3rZwfPkhYE52231qK8AEFTabsROJNUi/RVRTWz 2ILS1Pgl9uYf2kFtrdXe4rVL7+s1ChIrjL2Erh/OWoE0T0kva6ULWRUL1rUS+FKofzxgufNtkrUs uXfid7N75aBah4CQG8DOV701yhWBFP+9/n8CYLTVCcZl1HAfV5zsiy4D3wqqhjIoEsonWRqBS87X VFeOHgsMmsp/StmBxxxDg9kXzPnC0AUZs1t9L606iBkIOJ89rh7nDap6NazMoR9lfbXyz4E+r/Rg dTX/noViNdwd8qraYTasrWJoXTkoa0EYO6oBqHcaP7S8rey34TU99bwA3eVauHLsRfrCIINPX3jz GCSrwkVLyJbRPbmHIdjYUHDGNiE5j0k7OaW7HZR29WO0F0eXH0ptXkQaw6upzppwPgKuwJElTGz+ N1sygYRwzwohkgfiueBtI/q85X9fG6Ly4bVF+jc+q8zaSORvORMZ0eFlaLEdJN7hl0udQlAH/a26 Qe4wVW7f5j4U2gu3sUMKqKnIgQUV5CK0NbTmOeU+T6lgC6fU6gjCWiY6PstFRlrcR8P7CaEvvlGT rSDB+FEm2K8eUXcPXbLmTRc3XI8J4GLXDVevZ175dKhIztu8U8yHzaBPp1GaA0KSCli16GaHtKJE sk8Z6SRGwtvOgWj014JRu0x3lqegaNIPi0vNE7q2rAnHEZg6NFN57gZH+VTGsigbsDegJwpCfto0 gz/yfzWaNQKasNQAhQW1uBZEIm11N0mMqAtTzpeQP8/FFcIDeYmugbYQhFhSDP3Mg48yn4k0b40U R8o9t4KSN595dnKMXsaKu4s6U1tHXYYFVEoPjy4Jv2EHIuj6V2pNQd3kiZMfe+nt5M60s6s4CtHk I+1n6Sj+of5clErYWElpTidGIWeRZZFtQS0i3+VjM7K7OPZXAGLd+FNjZZJaU7M2mVELbbjNi9AF rBkSJIKT6UseetZ03DsQ13eKpgqEMB9m68o2x7WgbtrmKPkm08sjiRGZux8HyA7oE4Rsb5bksBdN J1Q+3u0fANn42uCdrzIkyCtz7L2+ShXoe4lTj4MxzIKXHzk1XxkqseuyvnBBIgnWp0CSlr+hkKpt 42wv0h9dgi9FOM6JqQnV2llxeoEkKySXdwe8y5P6iUlSkg/MF65vd6trzKSuhXj3KqGLWTZCw6yj Fq4KG1R5fhtPLIXJ94KZV7NAoP4sThXbovC4qyuReAOiwORk3Yjay+qrM/Fj/Ge4kjaBRekt8N4s yyXBsmeFUZRS4tiFCi5RfqrpGFn0pGRJJ617SFsrWYu34P875PTHwWc+7EUsZ/uky3KMwZUz7Q6v qfTPg4V+/9M24HdjJ0ZnOeDMEBi0qdEUp5lb29TrMs2UG9SQD5rPn6UdUHoVIfvA7ahBPDXzWtYf uIlnJfOEbmpdv46Uemw6275zgSjvmCjzHO6GZ0G++HCBpiYux5fHDFvlJaWrM8fl7+BRtxSF6NAY RuuCIinXlrpPTQF1PaSwsuLh2y2iaw9D59szH/BGUKJfk1T5Ttp1gIBgyBJnDx5nHAcSfL1HfsTl 68Y7CvdaUYSwWGIwjJJ3ON56D9CQVIqVEd1lF5b48eVT7/u98tAgQZCSG3ceygyrucAwtt5vhH/G pXEvSIEWXZHAL3VV8zcyQKgVhboiluloJlT16o7S6FkqOeEK+aYjkSCGyZXpU5eUQLIhUHWfjuBo sgKS1PvafHixAvL5P2uU3SN3o+mwNUQC+nzNASxz98cCH4eB8JqBmHSCh7k3GUMrMQawDnqpaRZy /1jCeONxKlb8pQ6sifgzeKSyS80qCuq9ut1hYoXLoHw+MSSi8+c0UQ56F3RolXUtyhgzjHmNwKWS a4VykY05rPA94SdF2TLraoO+M8w6/7NM47gSjM879UU83mqw8dz0Y8RNWXxcPeWpUF7c3wMHCwUz XlyOou8N8WwEwMDW15hCNPLURkvANcEH7P047seZ9FkzGT6dydL6UzGvSowGjpXx7uuOdkUcufL6 6oBxP0k2XJoCWNkrcAaFzliUxbQAbTSS9PR77ApQOm+KH+Fr1/JAOSJXhqRab5tTTmOA7BlkerXW BsXICmbJghAu/q9Ykyc8eCV5Kwk4x77lTM7jKVUo+bB1TyfHFC23UW4BCcuSlaYCGDYjOu9CpaZD abYdwg//7tMK3/1YIV9rm5KZ+ZZA9X0+bi3Hzreb1iNH798nEXJIsUnPV4fQZpiPWmn+wgEOnKHs GWiVwLxNHCKeMVyR0cWVIcGYAUPvNwRqQp3gLm9Uwe9ylT1d+Gfaruz8oKozZTIzzyvuYZ/O8Mfb qbz7irkCjttrg2EhrcxgbGqjDx2M0jH4Oj7rSgQshh7nKLQ4zkyuLB24yLpAE8CSwpTKu8GIyn1z O918v5RSWBMKBJUkr9wNevz7MSJeO8gEwfl7jj+XmAm+Wy/Pz1/j+pWH4UpzjRGK1OZ6lI1GpQ7L MbhZR4jSteMU0CirePfloUx4azAM45KJqf1XsUEibDlop5mfChlfA4kvJ2MCz+KhL24bm4EOP9mY BP9yyA5d4rZ/TUYOIZpOIclCkCEfKftuDGoJ0wEng2faj7D9wvuHXR6fVU5+s3ClBMCQKxZEehdD FYsnUz8FNY8+w760SOi02OGxvbExOktgeomWEIjdl1p2g1Su5UPeBJPFcAte86ryi8LajRlbKg25 5cC2utSwtwZ7FyUm5A8uSgQTAmCWDE4sJMj7usSjWjFiXdc+WriisSIHPat6clyg77NzLarzHoB7 rHieMfoZ0+CwWBh5/oljX5YDj/wz36daZK9rnT6U1stKBt3cW0GW/vWLqpgqvm5zZeDHr7LdO1tR q1u1n0g+JLDtBJ77r9bU2S1X8F3utviRi28WNCOibuKfAGzRwwKTQchV9J2Ho52jdiFA5SoJpSlj n2Xhv9dkbD3FtaAeCoj1XfwKWrN3tLR+YCjwpA2frOy0jgOBOhoULcN+5EK8aIFaAvwU9g+ForpD gxLsgGBQxcmD5CC8hiiUAoaCZ3jF/Bqw+6mHHlhcGaWQgkhQWhyNgfzbj0R3a8PV0Rw8f0bHLEnB oWti4ZFx6W+rb6xy29LBPOmfQVVxfyJFNQX/P5mYbkB/KfXKGP9yGlN3ltuVc7HAMKijgGnLYu4v nQcC2MEkTZFy0KCEg4LwC5/a78/QBdfz5QMb4XEb57/j32mCOQNzkd0uTJwmoZRJnBjIRqbwWF/J r8tKjUbHZhpMENJ1At0AXsjeAuOhS5VRR85XsZHucx1pNnw2PtWlOy2kyaH38m3u6cV8Y4gHAqDF yomO+QMDw2ymRUZ0oCEkpAZ/p94K8clWyNuZA04Pnrvy6c7s3hg5jvoc7kGJuEoC4zmXFkmgyrpr BbYSciS0e9WFvpWOvcgbdBo34NoWSKhbXL0ArW7xWItS6GRFVjqk8rwPF67GlV+ESqLb9997m5mK IzJLDO15E7cD2YLZUUegiYnGbMYnTFxpo84bPCnMzFFFMD9zkLIjpOzePCpQI/zVlO11hI+fcoqC LNnMj4yyaeIbrz9z83Y8TC+cAYYuKcu+9CTcd/Cjrpsy4St2qQq5kknAmtdrC0N2cIH2wtORzLVu rF1OKau7OVOHsa5Z9gSk6MemDeoKTbt71UXo32NDUG/nwQxAulGfIsFoBnYlBnTG5OHfXmF6Irjk taaw3YY6qVoCWOSeGGPNDjc86JdTt9iKrR0OC4DJ7J0rcCq8kbbwjhC1RBEj/K+hzXgHvwBePAXX S84oKruHQ4L2uYVxzPmhZzf3lOqXodTJj6YWUOQzHpbkThgcOMgpXBvUnTu6FNoYft5KVwejpmHG wubzxUwavkvGwPWdMoXS3TtL/ujbRkb5MC4DmSUQra75WJmoFIxgl2xbfddcRsGRZSkSU00iBXs0 vP4bkHEZ6Gf/W/Ly55skhBVTHT49x9E7GeSykhyvaBvCYhu/NDO+uxE3Y83yLnotBJwm+NKcADYx MKNCZY7mue5Mtu0Puu6O1NEyDo2BlFvF9MTEtlIeVHDKhi8CxlMhPCi/vEHE51PPufbejk/DKKrE JobOrnBSD5IunZLYjQigf3V2lcu13yJzIldv6UMfBOLKbcO0OH9j/otrgaIvtedOHRdp6M/yxKVc 804elO4FZ/c5A1ULbCioDBEOAZ4CZf31PbE/E5Sn3VwJNTVbQYMrOJiVxxljfSkmxBDVscfjOCNG qiHKR3Qo558gJDiscCZdjD9y/YSgDCVCy2ox7oi9qfmrIaklCx5yeYLXb6wTQbzMjYHH/P+phsKk +C0vGAOeruDsr9HTYvbuSWewB9GJ+0saiDCKtgm0e+74Kj/Z9+cv65JHYQOXcZ53/2Wd2TL/Exq+ d/bE3+K7mXGnYaghKE4XCUJRqgPbSW3SfHPBkxOAXoi0BWZPWyrtvNm/AEacaz8bA7Hbg/UgOEkW Ai07F4XEMGjcZXXgc59WZFlAXAYzNX2R4UZObOGDxY5dBh1R2s2dDPcRjHw90mhuvzfhrnCS1STJ +qxawVLSyKyDWdCH3Q93q2YlCNjy+hez2Q866UC8C1gHXDouc3qs1RwvLTfKRIFW98h+m6qZ9+7K 78L6RToh3qOEfuS1WYjTZVwEM3Jq/vv9rX7iWvE08PUkRMMfKJQxOCqFJDfpRNicmIydBdRNjJyh UM982FUV3qt4vua1wfGDl6cZB6IWfTi5LzFpkufhlPxD5W5UjIXCwrXXYsZlCscrOQwyhfErbx+9 r4cfT36UPYwEQYsDGvh+1NYD6UFFx7sKh9P0HE3gDzsU+ZhQhfF8MPNwG7CjsiBfXOi0o640ihYk STi91ltbiWoVUBt9PRbusVmFEpqEQEXf4QDXHPPtTCvpcOVfMrgh6xFWfeRx8/NLXx9p4LqN8HmZ 1G+V9wnuQ5XVGtFt/Aw/XLISgpNA+7/pjaDWx00BpavpUofJMdoi/jl/XLp7Ov2rJV/ViiZcDodx QKSBGlJ6kbDguZtL9I2li0BayRyLeO6Z0t11nzh6AQ3RyMx5F9n/4oxK14OeYj/oUcvj7VQA2Gdn FQqSLX+YDzzkR4Zis8c25dVm0LG2q2BfqsTCPIudJS0zAQe/pN4ABeQQTyGXRi4uDzG8t4bgkxa9 wKldKyFbEAGL3AjzXVtYO3ueyehV3v+FBWbz0BHf2nbzNkhzn6I8Ep/7eH3fy8WineVB+5mlo4n6 chG4FHJl4CiGNdGnM/MP8Z+yhpOYlm7oWebLHnNEhAYJ2h5HTPT8FHT+LlMCaIrhuY8OULvQxNLz CX2cVCSRqNmSrFgUIlHqj4AJC3YofFZn83LKC2JcRlyROW1r5kyLDq/HJMswgtJt3mL7A6BMueNW Fq0lBSnathv/17QjimbZtMBsxX3Fy9a20XLXQUJ0AYWcdCbKBqH8ey+CtoOUBWPV9x2p7gLGXo82 9HBlMmvJujy1JMYo3pU/BQNn1/XG4twpMssitYZ/CUMNSLh05mkqHgW4PQYdCIOiACd/9JP+fbRL Y+OMiahO1u8BHKFQryPkQR+KBpa03A82HAagKBm7KNBI9Wx6/+Oqhdc4tap4Y66m0f8oYI7MaLGP hxzBGj37Y67lzqTeHbr5g6Xd+3cZdgYhV7PPiYVX+IlEM1PAiuSJbBye7Qxgku+1pHlePcsFoSRb 4p0t6NoLZr4hGHwMMe+RdqRB8kpvdCb1EkHd8DVf7RkJ/dslO3PqlV+82PtFIXkCTLtaIEg58I1a ZbYOnL8kyrRJlgx8MfsWzoNscgHXp6vk8i6zzfKHUqOwANaCHDqi9OqoKKs3SN/1YgJPcsleRvoA K/qFw9t67TxyytDHQz17UwySyNZmZaPVFP6oAAeZRxA3GOBPHSoTwbIntCY4gZ0WTeG+hNol3AQE Z8BX7fzVap1ZM20G1juxWeX4bnQDwtjTtW05c7XbPQNvbIm2S+L6dbtUjnhbdnADGdPwA58EbBY4 wjm7gESlfSoUBMGR+Z/DTUoEq0QOZHz+m2rCdpO1nhCULBiN0/iGAL8j8nuX48WcbZuDoPGCAGS0 orNLE+ADweaVlQqA2iVRMYa/sHTXTfCLUh2UB4Nncc5npa4Kv7pzb7DP3piPSv1YmkaOsR8VzHCJ fUTUYRUeyyuvbKs7K4EAH9WjBD4ibMmWuJU1db5WkcJvuG3JrcaGXe7CwmXwBUVGfZXaxhvkad17 sQU3xhwsG3pxSPzJbyctS1TTNxFTWBPOboBDjrch95KSw+PTkggqpu60H04C5J7GAtGMEEzwFAuz 3Q7vZz+5KFM8A3dedsMET/Iu28sJx01BogdW8/XVjK01d3ES4r6ReNIFKpv23MdGWw7fhmXurUmD ecTaa2JhQmIx+3iVMwsWSMaoZ30dDTK5WGsWdA84FTqtyDOZ3FEVYqrPaRqX+WNE30WlmasbypVN 2pfWivVU4p5bU9S4XXlpH9P8eVK+8qy1gxJINHRpsas7oy8/gpjJ9HjzHWXi4aWLa99e9jFMACvI diUArfJfys1FKwnDKY4cBhHXnlr2tRucAiAPd37GDNE9ET/ddqZuO9oGXUvMMaXSY1hrDEihDyKk yMUCoqylQ28EyPdArMiRzOa3nkeQIdFKxVuum+sh6FYhp6JQX6WCIdN/vrCGesdIRdfaNabY1ghg vV2JxKeSq1z4/2D4EdWTFg8nlGfQU1ADgvh+WVD8E6knxn/pyULQrSaMFO1ReuYM4d52MDbgGUU3 3Idnt3FbJQUTeEIn34QLd+5be4hb8uKj+vdqvGTqOGVfK7qjZY0aIYPQ3kjyt8YrJy0mLmQw3GE0 qwUD2tJeKlagDFv81iTMIp56upcbZbhpOObtpgcI8Bc98C5URDS3PrBPkG2Muvd1dgfvlSM2mvVt Yps9ENTz/uivKGL+AGwXKOMaXP/Ff63/Ttj8ilYRvwSUobz0IsmVRWajhHwGFX0vsZea0+jtHyzb oHfFs+NI+Y7coNeFA4bOADB5QiasrKqcneEyMUDBTuHt2VYlvtwVFTmrgQYTgBCLaqmGM3N5fJ2V MmLsGyKrHXQ7AqXGSgP1TVU5e2MKQVNcXgl76C5KUzFJxYsiAWLovBmELGBiRKRXAbsWx5evFJbT Fd4+/Rlz31uttntbqMRZBxTNxdLLg9Oz8xsDoy7DTHWHlWxn8AxRtUx+sEw6bOgPnreHpOO+Kx5H RcTUlV+5tAlsfh/vKp5HkzMqkBMtVz5BySfvgFDFtuKx2yhPIqsH+2KCVRfuEToHyqHuYxOwH3dy owHqPIk8VbwUmzEaAQdHzZOn0zCloiN3CluWZ7PpVAMgNqchDfP1rp4YVUc60PCvAKs5TYyZJwKC 8kaN1YgDuS6LOGR5E/x/Uyl9K9MxxjtscaZ+fkHSRud+iK7/ksfMnrwGiXIqkjFgnnWztQ4KMlTl q1ERetM7mdEeiY1+dVsrlez9s/2qBp/Ed2rbhzZvSv6pS7neJM6CBrtyuLuH6+ONBcGG5abYen60 zn5fxAsFhlpUs9hDSEG+swL71s0SA2JncV1vVvssR66NXvYUYH2CPeD1sjHQyd7rRxTIgxtScYqk bB8NLbdNh0/0mJBAqD+LQoMdbXbMBolqMYX+yOn7JrOOnLlXZKKsxwSeq521oyPxxeDO2Wnb+33m 9NtC3vbexIqUW1W2aGFz54cSyljR3oPdFTnXM78lQHcNrpvZxwSVV46grMr/3ScMaueOD5lPpvj2 fD87IAJZIFXoW98YIa8SheS2hkQGB5OMm+Vi6aTa4NdqqFlMHvSIAXvzUfcwE2B4H9lWu+H9H4kX W/zTN1SdA2OVMNw4MZdSXY4guivR4Q2yXi8iHD5lXnOiOpw7Vr2pUlhWJyEW/TIsJmVMLRKbX7YM 0E50miLY76AUdv+keXHvaxW2HkipAibodBIrLdLrQsUvtWFsKhuRAM+wiu8eboqDJgt/ttqirGMz 4G0pGGbUgVtTE7s48gq836eLPOf2IUVCzb5eHWy8bgy3hojbE78T1kMrQs6X7unj7jssajKmtb3N Qsv62HBqxYLoD2/KNh+k6DHG3hV3wgAFTyFCzvj/XmuLPDXB0s68a88IV9YhlwFClcijeuXTmuiu TArwLjoNDPGN0Gmz5tJXaPiwdoMtRVfscyZYZBrRCyyaHhPxOcVLJM6Nqi4LbE+U11HSkCd0975T Ee8YYIKZEc7wih3M4AvtzQMSI/920AcX5nP+cMt9KNpGEkVPPY9w1EcLKnngUhrfbY49Pya4PcuW 0EPI5tudwGdiaFi++I4RcQ3S4Ao5TsYyMnCcA1kj5rAoCNv0qZbZxTc3OdSjm40qfeCOStrPDrsv LiEUHPivO3MZZZaH4RYKrMvXQD+N5/3FbhFIm11D6QN7zaW2vXXsEyVoI/JL2NMnteaCL501gJBd tC42uluCBzNTJhquk+vloVAr0ng1PCggsyQB9AMglFCx6RQYK/HF++O7qUL7Qjl4um8ZQRS4tEKS w2BOqFS3QzZfqNkoqP/cvU8m4n7pHuvTFMWfrIs8xe271tQNuLBFzXrcYcs7nyI6ilfcV2cxuIO8 7l+Do7u3yfL2XNO1khhptV0QfhjOJLaFpYtjDKhFypNC1yMF/yPJAEJMtCn14TMA/Hys36N7luLM 87q8ArFAKPJ/jia99EYRC8sSSSxH+1MjYQegdhC7SWM8vd5FlXiNUtAx6hJdH5zmtIRaVZ9oPA/w /kBH9jPAs9vLltimTwxUwEatMr23sbWcMSOSVS1KO8+uNaeEbmxfD6kCuLbh/kKRM9cSPVQtPelj tlLKU0mC9fLW9pO6v6LIPSX31rCo+7YoOJ5ePKb/Vr/sK3ULTrMhsr68PIFfcRgK3XH1xupDDZ2k ifael1v6OhCa84tEi69FGiQX1ywupILKKUa8IfjTJj+wDO7G5VNqCXAsOx02fU0v7omUtA6tTWmz kYhNlrE4l0g8PfBYH8E0I/0hgVUfwEXQHQfgHpcn5+isidXz2SzyXOKlTTdgfjZiiJu+hJP6tUv/ 5uwmYfHkj5GJ+MQwRkZLFJxU5mtOErT48WF+gt//tKFcncqxraiKPEI4AtoYD4d1tc/OTRiApo+8 LmgiL1xbYK3k1Xs6yvPZw7vlBJnlH3xv3lroNEZnkN2jWnURrrIsTq8CMUuqqhJqErXPAK08utfY rn8mAMq6vpNzYir9MqEG+yF2PGAC6mb1DannnLiy/YdautLio6fe5QBFkQnoweblMN9DImi6NeII qZsxGGnJlDSsMe2OyLUixxg9UoZCbC0OCfb2IgSQ45k0JoFBn05DAA3qXhhoFujECeo2RJ3AtTzj bbY4PEkHljCIJeD1WEi43mlMC8T2hQnU/anIMNwghaf6VmaOCYv/TRchw1vx7Y11Yd+h6bqWT2Sa VjOAw5A8j6sbeVMlHyHxhyjFStqTR7QfM0dO3U/tUR10b9ujPnayR4C6EOx1fFwhkqzZ3VfSdJjv OzqexHVImTOwtGpKkQonxi7C1wioqDHPZe4a26gwjJEOLWXVZA+etZNKQlx3wGozJHTBjXkXDlFv L/a7RduwXtQDnRMNDasJrXMVdVIaX+ZwcxUwe7bsZcLPva6odV0BqOU0Smi7qXLutAOpraUCaWMj ZbqD5wjJ/PN4ZLSi1KO2pMHY1cLfzQ56Wbfx4ojCAALjvgTtcGZl5s+AaI7pX57BakaVAJb8Qc1X lE6tIycj2Fmtt4nmT3J8AcHOiwdLSFpTmCg5a3Njecl67a/H2D0ifKeSp2QARCaDwgPig16izRmu aBW+g+Yd+w21Hp5Ns3zy5uiK+YCJCa6J5x1p4aMbthPa8jqo2fCXV+vCRkH2rfsO7pVe734Yz2KX Zg8COq3pz8SMmN4JUV6ARN/C+6BHgZhzIhC1L3bpLAYsZB17/43hRWmt+UIAv54LPNImtAQu8p7u OixuSKfNoNL5M3E70S2UsK3dsqbzXdO/pFGObatrMMLxRY4hQ6aodKvX8YydsmaaBd69OvucOsBp KzC/jVduD+fBOcxzbIn8lmoSZdWLUiP/fCR+JA2edNU86R4up1C5oayCgQxD22MO9Zsh1NWxzShb kQV9TcBwxQlj5gGhEEUyDcqEtctKUj65nI2qHq4vJfm4jN5ucJL0PoVaN2yhCW74ff9XaMHurSeN rnJx/0o4ub/vTUFKJY8M63TnrOFjo33PLvfqUn1kzF+4f779B5iA/QoxeijF6Vne2fZt5ZnLOlUr NrWNs5nFB59RGoVZ1cxQkphZ2SBy6iZ76Eh0LvanYbGSA/mz/HdQG37b8L1o/bvsxA3r6srBtK0d lPOIuIj2RoomsxM+OiSoAPfAyytiezm3iA2qkln9LqlncDysMvdB/UJ1IWxtwtg7iMhDpOGmqY8E oOiaTbZL313Ty0w8pnsWkWhfJz4aqKmYyvpLk6XzdBQ6BiAUX4abfkHPsY1617+Pf5fR5/1T4OAz SayepPw74B+1S83XV9Y6S+OySWETOgPEwo77YrPvbnP5GjVMQjfHdBqMUo93LYNfO6MQONzl9k+p Mc86JFTHJSl9Ebqz4uv9t2gXQsPkqfvungJKJnI//zK6KNCbuBSI/EallZjsvvLmX2gvzJsNShGv hWxW4gu5sxP8g8PGMTT9sJFjBO3vUMkznFmAmMmt66qZ07p4rxNFIiACamaQGHgxKw+DsDdsoejh zH5etV0OPlbjuD5MFkUbtosdBtkc9YvP9V4WEmVg8RThk8aOxHyRYzBYSyENElmzfcZhehUiaTfw /jS4OE4jImKGGOQOHGS4AzKCIU2sDm6iZWOd2lrfyk0kd0C/vVtNQeH0iPzyigvta/MV0vH1i6fv m6WbSh7voALDF7wa9OcQPzAtCEcurWqyohM9QJLjIeRhtXC+3V4pcNh4K1mHTAJ/ywYEqQxXBaI5 XniCYRMSkLgbW2itje8m+KC/uJP1z9thCMZH2Kh7Ln918ZNN6ylHIhgS9OY3njquQkHabzajD8U+ p5LjbxcWXci4UF28wzb/le3gK2KquVp+pzu8eZW9O+E2UfhLKDcGurtRkBpzFjSPhVcjFDyv+IQ+ GPA5Ifk1HcCpjFyewYLniyYy78ztEwu5HzHnXZeCXxMU4qv1st2eMf+tddHuF+aIL/RqymJLF2aq RKzJfPvBX/vVHgwVpfGHbwyzJ+3rf/+L3oNscFVkUDh6YEzPNyJ4SHzU76pvE7vfocSk/8qBA+6y G6lv0QT5BtLkY+jxBggQfgsow+hAGhadar6gApzLMCO/T7goPAYSb5aI7oFCoKIYoiCYUn3o+YXj CVrTruX3X6zUJ0b4++vfru+ZuWvQRdbR7fCiu2M+X9GYxib7VpsSWM6l87eHXtFKdNd8SFSoy+UI I8KMvIKrz0TY6G1eaGrt2IlRSfZgQjX5EKv2MdBqwr7BowplbmRzdHJlYW0KZW5kb2JqCjYyIDAg b2JqIDw8Ci9MZW5ndGgxIDg1OQovTGVuZ3RoMiAyMjM0MwovTGVuZ3RoMyAwCi9MZW5ndGggMjI5 MjQgICAgIAovRmlsdGVyIC9GbGF0ZURlY29kZQo+PgpzdHJlYW0KeNp8uAOQKN2yJdy2fdrGadu2 bdu2bdu2bdu2bVunu/9zv/vezLz7T0xUxI7KzJUrc6/KqNpRJARyitT8RrYGxiK2Nk7U9DR0HPjS 7g7m+kZyDrbUUuamZk74DDR0dHRQ7PhG5oZO+AbGpuY2ULT/QsvoWxvj04ryy0rJCFH+Z5KRscm/ UeI2Jrb4/5Vs5Gz33wQuxg6O5rY2+OT/sFPgOxjrG9naWLn/O1HG1snc0BifXNDW7i/vv/jo2dkZ qP61Mv2zslLhM/zN+2dlwv9nA/iK7o5OxtaO+OI2hrYOdrYO+k7GRjT4/FZW+P9QOP6t4Wjs4PIv 598+nYwN/8bxDdzxlWkU/3r+om3+YoSYmJmomNkYaP5LBnxzR3xjcyczYwd8/b8EpuZ/azj8zXNy 0DcyttZ3sMS3/Vfk/zBN/h/t4Jvb4P/lwle2Mf+Xpej01+mIr29jRPuXxfafKoa2zjZODubGjjT/ KYqIs5XVP5qT/1drf3eB/4/a/z+kvrW5lft/Yv8TpWr8j7Lk/1cKc0cRczdjIzlzJ0MzfBN9K0fj f/vFnfStzA35bUytjPHp/u1StjEydrAytzGWs3U0d/rXQ6Wmp/vPmJKZuaGljbGjIz7zv0PGNkb/ UVL4r1BG5jam/5LFxkjfweh/Of4Jy+mb2zgpudv9r7r/mq5/bPr/bUvr/9XODV+T7u9U0f8F/r3+ +077P8opOjnYWhqrmhs5mf2fjAICtm74ntT0zEz41Ax/e6WnY2LBZ2dk9v6f6YbODg5/B+afsf67 lf+2Tcz/6mJs7GZsCLW+YmvIGWSRlpnuVIeeOzIlpNZ+68jsZp6PZpzhph3mVR9AZb2MyjX7hr08 6y8GZgHSpPO1oDqjSf5jsTHtzOudUhPbIbR/zTwV8+0L16GaVf5hhf32UR++ixB3Tj3kGTKe7vET 2Dw2irGgOiQJ7LDbvgH+VqXrR8sh5Nfy013G3dAhdeF0pLCOatQjY2AQ0yETiuvfqAxMrU3/yNEe 9QySVwjhdBq92+4SBinkTN1QM7KsQ8aidzPVwjS0rGlKg/WgcPKaCFB2lIskGaGByUhbmDjTfcmu I/u6AIT1U26iqGgdykYSIdTTtb02jpV+3ddpr9LJa64LsAayyHyvYsG3ibqP2MXXhKmqwCVt8Dhw hvVgZmO+8lM+OIN3yZvAQ1/YPikYeVTfsdElbxH0+JQ2bd7zGyzCT/BUj9ilSw2SIBQIxkfWT6BQ jZEN8co9lM1e7rAu+L4wc4/L79h3BXxDFw7TcxwIl7CmYQQ+R8rlmvhRn48P2q2b2YEVrKiKvMNd lIpuDrQ6BshdY2BfwY8YNl95bEIPb9Ctbmf2ZuUCdI2ZKbMk2OW2BOYUsju3pQjeldLTYT0rlvzd r64yb+139ZkxjluSIdBFpZ26XfVqL1ActnZjYi7p8HZMks/OB3Xcy8sFUtAve6k6ISvPNnoutcPC 0daW7M/3gzd9LYunHUeClpcInrlk9Eiqm/JceQcOgIQ1SS5f542sxD7KXYtSh+BSuHQrVDt1FoEj Rp89MpqbKi3BtwasAEy08iuTMWqRCCyAp4x+QxctaviSCZX4uRXoLwfjgwKjxWz3ufb+A7CCFffB KmNbBrnvxWUg3/oBzzvFDi/bgq+ynzBCY5A58qrI3HI4/BPH/TLM+y93T0yYoIC730Os+K9RBlZm q9QhkCPPULlRXSR6+DHOAau/mxNvvA0Kfz6nVOOeZcgQoCmr36P5125KXxDFPdbJKGOoYeG36i1t KdhJ6a4dqarfT11Je+S9HkaZwtdjhlui0kILU/J7CM91cXPPKBLisYZo+sG/pwQamTijs2OD5idA ZEfuPA/vvSrJLNWr69OlwS/1PPOFuHnQZGM7zseR+b+0BynglKSqtPsrJQXrP2lEs+eT3LDC4fbx uX3A3yeH58VFo+ZQclGxNLngMDCGtLWdzh0LgfPlnd89syW8KxIhfPKRqtazCcpO7SpPg6QrwJiV p52pAHjCzQcBNU39lfnMppiNabTa96DiJd8B5Ev52rzeo7UybMxfr1TfP99VW7f8Tl7IrqFTPJOK gk21WWbjDPxPXrJq4Qz0QUdunYJRhsmPY2ZFnsLmQqspPeimY202YuIP9zZE+GosCW74N1N/tRxm 7q0GhJ4KD/EdenGCw/k3NY4OITc9hyXmjWiJTb0rVKDqPFR/bvlHT/AhEV+KwKiosOmrxs9KauAZ +vDcG4SBgxaoHeGsD8zCrXLVSHJ27AJVWdYV+bS1rR9Rw52yBd5e3mRyRGgKTbhTi9Tpt/M+UKwp 1IOa3/6+/UXmBr3rZVKUdWmdBzZRCc1NRlLzfV4gK/dWTfhDLIuJEuT41TaA4399q31f7/QDtxUr N2/WB30L2DOw9BAq+5sgrDjPhievziNyonhtGepivt04YR4SnViM0LNPnqJ6aL46sJx7FHXweofs 1ARjheLGaEouIgym9SDJJjWN8lRi7RgDM1SQObWNkl58Wkxzo0mQITPu7OdS2ueCPLZdndBN6E9a hgfjZFhWCJbXtzXV2uj26LydlY5XZTUEg5lLh06YOHkLz8kI4qwIEzHu3QdIOkq/yzjP/AsE7Fj0 bKtOsttsiD4lcB1XmfToiAe+0D1S72F/9e7r76l85FcB0VTUracZ6EahYP6eLID1B41l0iXNSrfm hS9Zce4L4gWv/SQ86XOB5CI4NC5WmA8DEpDWMZQFWqhA8hbDyQ4xsVTcQ7wQCTEiQ3+vGrzHmRJ9 ++O++qI3Bnc+8MBw/l0ng5q60dOnmZqcol3ZzsLxIpdQkrK0HKwv+m3njnIQURJXUGsdwdOQAUNX 7gW7ALrU6ATp2XaLGP6p7Ch87uFydOPm3mqU8ClKWhMCoXSWkdCQYmygs373FsEjwDmsk6DMP+Fn KfWDzNbrZ39aUuIrXno6QBwRiG8zZnNF0bL7cufwxK+Xb6HOIyWNOP3G7C78MGi+BjluUmjGu2Cl UBnef01gsSUNcutGlSrC5xRJj2W3TAeuaMC45L0bsAtLAXe1ETKUzaIMp6QSFPS7EOtOnkFhVCjw S+6mzQQNpoHD53tiBtJw2G4Tw2tbp1aAPYIVjuZoluhWeOG9r+IsQBOHbkpMAViK/TQulgq9WvEP 5V357rGAKBEEBSqgnILUPFs2aEm1KVQp71Nf5RcCkQ5CAVla0wgAQeJsCm6hNZQUz+UluWeEOSxG JnecNGcauuyWsUc3hQPKU9+jKEwcc/XLtpgdBJ88m/0sjzu9gEeuXhzwM55/vKBu29oMZgbybuET VzYlZ5JKklKvwoWb+7iSWvucb7u2IZnR00L5rgIVBM9TZ9Mm9jTMK3O4GxZAMV3Zv/o3adwQIPpG w6FKfJU1mj1oGBuyCNs87jvbFp8PJdZS1qBJOiusRZiTj2//bGUUOQaJC7D3TcJ/31CwpKziDiA/ eUxrxwV8RF4tty/gWxENZwOz3iFMJfwC401+97/DzU+DaescMDcVsWeNvCTxSMPcFF6gZyP+xGGB xLYCgx2qgiNfZZ9GfFbmwGSyN9JeRk9svFZqNL7Na5Qofpta5h1hf5Dldq7hTJrCZfN1EUAkFakV P/S9aMwOhFQO0drXxsgc37DeorZR5U9PZ48rhQDdCuEUNCN7Fv/znKU/LmN1IsrlNIVau48DNyJv amUmIle+X+s9UdyrH85rHh63GK4nRsJsHo2jTK7twnxI/s5TkV8KheYCScBqEab9yEQbvllfKfqe qQRlRZB+e2AyWZ3o1C2wTHoBpHL07u3X8dh6BgA8px9SqJZWviaYouakoSiX1cEO+WfB87DWR5IO 2mPy1/klCISJIhkp+/FKhqBBCBvy6mqlVkkHPEd+Nhugx0HxOsgPjrVBpzID2soTJdeUR+PoF2+K YNwEW0BJ/FySJ1rJhS7U17PRvDGZCkGCwkQc0oL0LUWovMpAJU7LyyKyP4ebh9t+yq6OUdiGeWmW ypNCnI6P668eisl6At70p93gO0VL+J0vFZzjhH2bCf69MQZXAowyhVZzKmkl3DfvsuBT/RTSbLJ3 f5Mi0VUQ3XU6NAcKRh9dxLe+NpTAq8zDaIUtVWDyAPib07QxopER4Ye4Kw85498oKDF5MJHO50To N6tbpPcwP+q6owU7U4cjausjgzOfCqeMQDPoeQ79mLkh9XPKsF144mfWSEWfgRI0E9j249isuIXV +lk5t+9yxtJ1zynLwPxVOpPRFOaVI7rCvD2kNXuKVTlPa/MbmfkMfcVz8LaoSieH/lj+9j218sy7 2olj7sjTc/44T8lRAEA9qChiBPTCUC991QrZGR3vE7yVpfqfFwv9HR3tC508PGUfenbhU8eLiA4j jCRoArVn2vZktR1EAR5Fr/CS7BgnPsNNuUypRvsSU78jCC2za+3aGk9ZZDFooH5ooN6hhdJM3IZR mE6rbL/LkzWPVMey2Ou1BCWHGvA7YLHabo1UgkWbiI+eYeIGMsyJ7qHAxOHrgpihGlz66hapCUkD tH9N8cuT7ufilVny0FhAzpxC4/sQn8pRqGu3XPyAvKilTd+mfvPVpw/ZvuTzXTnzLdaLnEasdWUK UvnZvmQo1G3Zh+ItpFRZRe3vNFHzr4AK2JZfWnvh3U1DM6F9UTiK7b3SKRASzu6Z0qeH67AmIdry eC7bXpPvfdqYdMzzGCwgERUXyRsTgxlM1wDzX0HFaiyHY/qCXHjKpvSvTSKEXVPbcJtEs9Wtpkej 8c0Hb9+IqIzIgtI1TFou5ZBSh9I/3aLzUIHvh0FiuTV8PEAFFZESTHO8pPK1HIaQ6vXg81c8I51A i/AlU58DojzUBTDsZgWN4FljiZhbYgzEEwYrT4iWuTWfvRBtMjE88gOtFCmFMRTZnmRvblw1YOfu pqphLiuls+zcg0/AKA/VGPq8zJTMNRw1gVxtThO/e7bIUhj2dugLzYU0dZncqEmrBEicAYVgH83P NgxN3zkyDqXP/66ZJzXBrWVObHS31Eid/1hWG7pwQpJBmIhBVNGlKog4p1C759yCEcl7IqazzNUS zdJTOtTAZkxzz1V9aF/N5qXC+zAS88IQfBlfeqHS8OrksTc91izYmy4ZkhTNLe39RZtNLuPvp4N7 jzV4DWVksAWOtYFXvos+AZ66mI7IjtHY0YUugX6XYbmJBgC/w2WEkcJ+RpYLxG62D3aAzCnd6ue5 UqFWSTTQ3aFBRHS9eIQoxDHkbgqNBtl7OnX+64FOFKc0asEVJVRAMD85sTtJyYmGTEuWnD6laXO4 pfT3wCt3OLJGQGeLjeumXf/9aMCQ3zMaSc5v42+HdUV4TwzgB9hHvYHbhv0F/8HGsQYaU4fmsTVL NadEKA5VazkOvDo4/x+zX23O0KvaIka8+7mn/bMoL4hmpv0sxzU6zwhzm+YTrBvyTswRK3XAX5du 7ohK6NytuNYBf4jOvhilSej8QTjyuiMAvsbQtx3QNanKEiaugow12/gZdtvq48tizU/Nj/+oZiyG VNpR5azaJbikQEzGaEPTvJXF9qb3UyfnO/K8gAn/tuyAHfZzwjq2/jDuiDEYIKLP+Fo+KE8jk/+Z dZ5h86R28LlSHXilLh/fIAOaxlmnvA+O5RB8JuRe/6bEP7DdRx1C4pDelRWeM7Gr/IOZIb2OV87I UF+bUReQa/ziNwm9lbEzsaczA7Mp73FV126KZly42Jm16OMYPWIEcRHkG3To3j9qL8coevjY9I2O gxf0qlKAOxPV4afYKZrz8TWS+rQjn7YHTDIPlyBTdYRe4c6p6OIXHOZRbpYQT02Eh8s3XHgvrJjW vsWOs1yRziNESgrp5lBQLtBKYNAGxvytO/HpdPUTnsY482kC1DEgf3MMU42roYaXsi9Q3QsCJ5gP KpXVOznMPfd7pLruTTRd0EBreD7fyI2suOkInVhFpS6z3QG0hkXHoDvfPaqO29Eu7FfTPExs6Cec Q0s46dOfn3ml2uVlCXpdQRwEjLI/efELtzhS0DR4D41aXaSnnHovzhLPwbvQ0hYCQNhYgKn6jipj opaSX/nDxdnl/jVaP7hpWvGhwIWFUWFed3JMAe7wK/lHKypCRoxsSMand4voQvwU5QYmBrAwTrHX /Sf0EN2HIFAx3oRlwx4IlPu2N89TaUocivyboH+GNRRiuZtuihd1fN+PngVOTr7hKmeYUFf2U//c iXxsROWmnDXA3pBljsLivDi1mCTc+NJ7PXLV9xoap7qJM7ovTp8xtX6nEFNa6rrtz4+ymxEsxgcw lA8F5ORObfOKA8lT7Nn/olbIeW5xvYEM8MM141Qj7hka/fE0jUcRLx9eH1FdV4mV6SZDrVdiKcwa 3ZL5xi21JdxzONxVoxlOL1pOuhFGoLD1hSg0dq/Pl2piXDeInKCNvYDRSBreBc2/AUXwMlTdeWmR z7lDbAvN4hhAMyVmOoeFNFFt8K/fr5yxcJMsyoP2v/zkGDTpylq41kYm9Uxz5Qg6N7rXEDiBny+A iHq/kmorpeHUJRaIIq0UiJr2wGIQ/gAWg1TYY/SCAy/QwQQzZJaN14b8wuVF1/tz6UENxTjyDYqX NKeod9s+4Fs+wDYct1sYZr8whuiR7cdat/jALx8sw7eXpdvshgB1pI0fnmyMTydCQJxOU2qUQccN H7TxWsaEvUz5/AVQ1U/ct1PE0ul1bb8huay3cvMM8sQ7yQUNVxr89y2h3gZhE/JTOFmGa5w7rCVM ZzTZuhYWq1ix7JmUvwC4Mhl11lL6uGdowy9XK1aYZVYeqQtanfWIZZbrP+xz2YQVbFJU6BpmrX5g RvROY2H1PgvMJLtBX7dq+9IQlZL94B03hr+6LY2RQ8foiF0mzUAr/HCmzqBY4/i6QOlBeWAGjTPd dQjR0CR26UA4Up+uwdKpfHNNdLY2mGZrAMj31ug2F6dF5GwWJ7GrqFxHIJ+AdaWXf79StRZPiPSQ 2khBrV6cKsPjk42LBmdp+iRduiHHZHfDsFkK3Dqugg+h2z4CnxYLaTAVVVUEK8JZBC8i8yMS+ZZG NZ1ujFUcd8mN+nUyjrr7k9Yf/iCxhpguxb8+TYd+siLtVIF22gGfLGsascrqK3iXepikp3Erlk/I ycEj91rgvfQLjwoe6ACK8vl7uqJRj6DRLIwQP2+XSpaC6AsMYEKL0TZqYuZC6c8RQNQfiIQErQCx xAbKlQxs32UtI30Xp/XknVya6TkzD11xj5gC/GwXjVsn671BraX8CHhUGfWo21nFKUDl4CfLuzbu k2u2icDiMhbzQIFrBWWXgIQ19nbQcotRomEFEDU9/5aqNuaus1DV4tpNwyf4vl6y/hN2YDJAwkBn TWpM2KmpR6z4zq18GKzAWa4n5bsQoTQopz+NaC0BZxXs7CXLFqPYndzzyaibc7rdOnaFuwQspuaF fiZbj6Mm+dmu9uqHYpLEhDVV1WKW69tqa2hqJMF9wauIDpo/D/xoR7efwnKyW/Em8aC6DZ3fJA0W CKfW5fGXw5/0RuNpjKctWQQ8WQU4od16EkhAuQeh7VuX+87CrMw584zgT6KOf4pLN/lAHWJ0Wm9g 2e9YO/AEMtNBVF6Ht2U0/9SLGbGSXePZw0E1xcXvQHA0EOShr2Zn1iJ5QANbCWzJ81Vxxc9lFJu+ D5rTpJG03VI/ZcoQJuwuw6wpysB97nRpgCaU1UcKsHAT81xZrnpB45KuNSN43Ks9FZSNZK+jKJSq 5Ac/MU6pE4ngtIcIdjBlKG0CHDRsEuiWv5gHFzGEeyTKVaNSimGv7fvsdo0+tvsPmPkO1VRzANpz gJ5nFbFgSXIxdcq3DGD1AUzpam44UjSgoselysMjs6yvxw4peQGVF7cRg68gWmdHuQgWPtKdLXM6 SgZKBfcwsBS9C2+XJpPZ3ciIbLckTtE+gl/p1i1UXyUTQyG+RWlGekVwga+pONVxzqoY3NIKJOEN bNxkIu9dD5NBIVeLQrAO9bN30pYQmWAG2KE3L72kgYhPfaFXI87HsoIoCFgwuCac5pvtV0Lw9QQX vpObi48ttIPG4XfP4CypMZHGwOXnIvOGxxDwzEbnP4bQsST8tnSO8lJ3PTgO1nGiiZM0s5NO49aK 3d6B0EdL42NhxBS/2ECuKa91ljFXQjqiZ16RmIFErqo7rCIKaKlu9ndgKczr3SL9VvWEf4bDR+nD ovShkKFTQ1n21J5gEIg0Q59h/kAoG/PptNOeVnRbD6Zw5VVg0++UGsL7o7Vc7gu6AKOui041acE3 oTFpIJEV39ZfLdT/SsGvp7mSvJDoDoWoGMKDVSP32hjoK/q0MH1i1OkoywbJc2KYQbjqnfyHgYFz wcRaQGuUwN3Y7A+8ygRJOpqAr4XDS/APkdsSQtGMwtz6dkdRYtzH0vQiLo2+ooJbfsWHY7ZKemBQ AKoZQ8iGInFicgzVqQ6Unu9kBE/jDIpQ2g87IirmEXXbS1eE6rDIWw8AX2TNIXfYFivZo2H1yg26 ZuHOH5H3McmmzPjo6cgypJZXeaM5EqyznXxSACNerffjuhCFxMsbUD8HEFD8UfE7l1Dn+8pI38OD naRf2m9hfQPuLsRY3XaGMUlYlgoF2V0KP408ZMy/OerezIa5T+zSLODSUEYW+7Ly+fy6No4h+rUA 7T3QDDFoI28rDxuQ8VKmmceZn/NNfmKeNwtja1ukqKSedRn5cHl/DzkBTI20R4Laso0CAOYalfku nPom/Gi+sEqZnj5wetCI8jiXKhJI0q3Dei6r5c2E0rBoCsZBAZc2gxAatVytyBTXJZckxibI1Dln bO867X2Y3OWmqhTdaOXsjeNDxkGHDMU55r/Ut0/YL3p1Pr5/N6GWAFUFy6O4hHRQ4FidmXDdhXnZ lQ/tpK3m9boUbLMj0iX31XZY7hTnsIPfg4c9TeSoA5YEbH+tszQH28uP9trQZdxSlae7QEsReb99 IViPX/K1fLa3YzeRdumFsu7ICRQn1ZqFX6a5sIEsGg1hKEqPyc1CsnqSTmUlvUhZwjFMO85u8AZo RCVbo+XzP2HdieIypKUqt67x3vP3YSfzyS+PqnMbi5SvG/R7pylr6i9M4ojRrdHNbfQAxlVgTafH v63wanRHDQ2bsCFxebDbK6RMq7M3WIBFdPQaKpUIPC3NXDXtlbzD+nXOhF9GvJQBgWKgXbhACe3U z9EpuLllw7MmIoDy4fxm6aNaghDhzR7Py1ktX+rWIaM+kbycIbj7trtKTcOH/XvsnUWvt5ErI7LK GmmZyj33lj/LMhK/2lfXL5BI5qnZetQrn/AwJDUJwLGqtMq+Q1iNbuHMy461A9k0So1hYfBRu/nV VJP5Z53zKlwA281gZB+HXQAihyDm5eBPHY/1lJ2UGbohZsOr3MbntW91prce0xVN81lD4kBDkPBC DU2vS5uoI31DgbXdUZMnD6pNYw6dGPL4dRi38qlFzAUIR2v13djoEJXmsfO38dh6soG2MAWdGvuf 5JswYGp+tUlD5z8gaPCpVJfuwL4B9b0QmQuRB3Tq+krWgJ3RKo98afQ7HUCuJyV6xJdxHGt+/God +Il3HxlYTNKhP8jyk+3KuJaDRPV6BVnGk2ZTce0OxDv8tpHM6doB3ROeMI4RbYhpc2HewfC/CzGM NXI/XJyyGsft5hOndZTbpHCkP6GPoboafh4EDSLKblSjHxsZRB67JBPEthIo6XZ1u+pn5wgk2XfX Y4/028rpmPuKpihiwZeyxZwZkahsc6+tYT8q2onEJL6ZvES+e6Kp2iZeGm5nWL2oFAzftAmsH819 73jeOar657rIKlf0mFq3Bpn0V/2uc81wBZQ4CY70A4Ua+LnG07s0ReWa0hK2edBhust/8GYlm3tX 4kBDhfKhOt2T2x6+mWhylsApm+3nvlkIoKmV1GmLJGCRNgw1OAAT/0wU2ybeozTKIU22kfgFUu++ c5aEzPJFRd85HJKlQkgZ1QS6MMHEHRaF0J4buC4xZukA4X/GrlfbLhKfeSFrzytzhf/AFUzOFfOZ qdDLGJcR7AwY1lDXnYiVKlpdUVVFKspbyWjJIqm0ero8avRD/U79OHhu598ryzgkwAOp3EyQkKTV L4Kvqlh0HVtW9IKBpYuTE9cYIem1RztHjSXaieIG8LPCbjaeWscAstrpf/KtgWTdY5xCiPqy9SE1 wklUkvZQizxcOzwvni2Ru3BxLrT5IN2pSRp2yw6RDq64ztJBvPUdAFruRX/YN+Oh6vymJ83NScN7 3ceJC7OD/CnBCxOLMIa7YE+NxXGljDEPEJ4hryJrZYeNuvH+lRV/Vt1ELSFiLeItjKlTDXqo+yJ4 2ntGR/vQLfogJqDpgBLGD4GqjZV2/FnxaP/K8b6U7cZ2pVfAz2DXW2V07AJ7c9MP1/xcX51rsEbN 5DkJ60i6dZvpnlQBwslRWKH+nhJz66MacNAg5ApFTbLLez9ifEe1R4WrH+c+8W2EQ5Gput2uyEOU /Rj+avEbINpJmwKmyR6+Kl5UsqBYpTA2ygUVB7Lp9736IkUmO9BczgsoEXja0RbMdzM9FDn3pio3 I7c5k7onHNT0k1I8Xqzk4F7JzxJrKLDxb4siFX1vIEI37IH6bQCEmV/1BjOEJANVUD4fooNNmZ1J tii0/fGDZnOFTrxsD9dauU3ZhN8o8W7QEJhggq0AzXoKZ5vtn27gStR1MmlwKrKGPDhcE9b1kpxg vku4dMYVSlFutQAL68V8DYPhsSfH6NE2QENrVhmfVBTRXSN/pkJsUVA64CV6qDSEYaEy7piY9yn4 OW93HzfGLRf9OAQDOvmDyQ+mQK+1Azo/gm6cPHfTNFc1jLZDowJJLUt9nyKbwGRq/ljBZH/7JNn/ 3kH8JdjmNNtTlHyxlmY5oDa11e2yGoUwLT88bs5mBzhvPm4mz5ZnGDJRgGrFwd25FvPIxtSGnp2J VQVBvkwYRZhsXKW6GBHOp2r5YhWODEI8ljmXx8RMZWqp5CBkgo2G9LKHE5cEPs4COJ6yM8lqL1Z1 1EXNbeyieMnEor+6De99n5zLlInUyZdrhM7iqbYwelaFAK3zFlWgTbpHn4TSeIzMuV7E22zO1ZOq cFSvrpJvXw2ANVG1eMS/0351AS1OUbKzgeXkXzFmml+3ZgVQlIbWn+jcwS8EJuYZ3E7i56wdXFY0 +IOkAZ3CRV3E43GuhDBKTeFRzgX8+SOJI7M1xIZWzZrxs8kw2dSYW5nogD3brALyTLxcgjeIIBvE jiWnQSKXAMKhUj0Uc5jrxJZTljAEfa97L8aaEws+36LOp6tAkuSa1n0ME1kVk6wMcJTfXNpOg2zG nUYkj5EYO6NVx0ihh7TlZ+XjhuIpi1WAmEsIi8xsIFbb0cc0nDIHxayBQwaI2kbpUB7z8O3Yg21q TU0s3SMAoImw+7ABnKzC2EN4nME6MK9QsMHLSZHVgdiJ5Dt2Wt+HqKT4nrDaQzBhzlRJP5DaXB7B j763lViuJS3ShKBDRzCwLuXLzRaU+vuuq7rnoYFVr4cu6jkNgZAFjvexI1TH0ZiJ0gWSLqRSXQqh v2UwoppQ7qJnv0DQjWdNKE+5sWQcisNB5wQtwilMHZeHLJt7kTHEvy+FOVi5/pYftW3GgOYktaAk y6AGR82eHuU1W7oVW5R2IxxzwNdMXZNgCXxf/N0JLZzP+mDacMAliDN7iA8B7ebKR92NKy/nO75H yZd+KBFwQ2qRIhqRIJPZhTdoyXkGkOZLFvot5eiuBd3GZzj23q79lxlSm153QiYOyRD5c2HTFS2r qQg2q1D+W6FppGAmhz02db8c7KFvj+x6FgSYX2fBc+xLe2eY0BBIcR+ewPlnfHfsvHuodQO5osr3 V3/Ybi4B5+pO1HyUe3rCYkw330qIjLwHXn4fFfdxJkOvKXYzh7oBqg1MBGqVwvRemCy8E2ChnPvn FDMPLUzw6my7z1ShXmKUSWKTN2aH4LYoLNYXtnWG5zTltBNVzq+2ifQmKK4yvPQYT5mQwFXY5KXc j+oUrnA4xreycPHG5GLXDxA9GxT/6JapadAb5O5WSea4C0UNEbnm38NwJ/fE3Hk0O10T4kVd14VU SE1mmARI/jrLkJ8jonhV8Egf5xaSh88BZzn0O7qFPq4Wlxaht5LtJlqWJx38+B3+Hk3pI0z+2ZTs tcXu73iKkqhlTCwdqimltpO2EX42YCjAQ1Wt66SgmRkexF2JjrpDwhsG3I+q0d1dLoVOXz7u4N+G daNI3+0EsDqwY1jpvCZe8vHnGq81Vz9OKjHXAyzNxk4+dE4sCXPbnd+1qt2BASLe30JnMQcyS78V Ydzv0ZQVZBH6cMLhDsxyiVQESnhQoe1btemMkQepVGYOnyjf3VQEVQfxsjAjjMZjK9VSjLgsM4mk 4iuRcNvKQT86r3CCQVJkhAO2NZbFPsfaKV135ywEfmzD4viAPMqfW0op7lCJ6G4d3aiAbId//ZDq 0/Q6OC1euc+g036NieM4sX4h+hmYabNKwtAMo5tc9Jx2EDs+h2S2PFWaFZgei7oD4S/Es1JhAfqi NpzXhJdoxXZ33UjG6ToEaaftq/KZXVQGWLEFtJ2ck80OzdMI9clJWwouHOg6xqnW6H4/TpfSKgPy KQ9QybooouuGwbIxFBQHQ5mTdrPujw5xtW8QFk1p6himUeHLVU/aMuuqRzrQToRRoF/AUhe/JSVh GU2ngcJxx34gsUTubpkQ3WsNyyurUnRhnshiQai4svFM+zgoBlTgIpjXTgSAbEywIduw4dGMZ4pE Hjx5SIrwzMNzGUoUufj/apb9hopdtkxTw9t78om4iCmySCy1M2CUuF8UcRv3bDerhPTOVFDaworw 2FN863Q5L06+ji3N33Kao8fhIOOtGNruyrrWVmyucvll2P71yrcfzC37eI82WXdqhZ4Jnl303IxN nXURJ2bV0VbaCy2kFJZ+O+bgTTMETkpogdoaJq/HLBn/e6qmVnnfJVtPVNe5bm1NlWGDfBe655Qv Co/I6XurzCV0CpEzEWoMWrO62E0y6Xj8wtZmVGGJGO+Jf580ltc1MEfPmeNzvw/8YaD96dv+f3/S jW3kSMJ8YHSxU3gOul19bFvAhL+6AqwlfGNh2hxIkscUHDj8JmdPNY95s2ahEX0fYenpqHH1gWbX REfOqQbxGlzHSrkr4sxBZ1R+++LRN/Le+6XrUelrmV1FunIhlb0Na0vTxIk07loxaWgRm8IqKU+j 6Nr4rt4boQuZw/uY/5pCxnUNTuGyvibxRnxJfT/MLEnQnJE9KreI+tGZiXpbLJ8MBFyJo56NI6c+ mMWrbT0H9V02qGg/vjrOi9nG6Swef28/tNLES0fAxU7ViCybxHFwbbZafEnRW4s/mY/HtiI669Ee Q3RzM7Jjv//K52q+r9B2NNZZTKPoRAmijh8L66sS6FDRmIK4o2eczdi2aJWUhdHgczXj5iCarz+F iWHPsmKjnXwv3PgGwvquznhyzlDh+SlNSswRe3MkM2g1C/SvXi6P2jVsxrnjNkHN5bdEBzBtxgGF EmfXGvj9w5X/p2OTsuM2VYv7FZoIUah7PgiEqhOfMwlgNvtbkNlRgNf0iiIMa2l0J/Vtiw3BB5al Nl8A8cdZIqA4aFcBoDVNFmMMq4e3F1NxkjF2r5LiV3GAKaN0/MKCl4q6/kDJxMIBBLPlTzky91yl Pax1XzghkC0J14CtazZj0QzPBklUOzRvL/87viJFWW70SGpJ5eA25Y6SCDowlTd1ywNIUwCKLseC JlqoJBw1B7db6Nj7q8y4wUdgrNdtaMe+nStzgvihhrC13R7RzB6+pjo6IiKNhzD6NxTtU95Ck02W cJhj9Gsv8kEbaFaUbA/F51pYYPH6K9KTQjM5d/jLGSSec3RkUPXwSPnD/MpqtnxUx59KAW07kRse BIcOSPLypV6+4N7BrxYQqF+fbMr6moyXp2fvs0AW1KXWm1+CN9C4uLdDyYHkl6HLS9UeDjz9YAqR AX5qms+h1jznAE5C70deImU3JqLmNolMLTfasLbiSzrAjnG1bMlHbEi8uWoD4aDphUNLdOORc14L DFtPFo3U43hW/AYA73Pj6GbWGyb4yJGX1PCmRMNz8N9cp9OPce5Gpv5DcrszQnULhoRy2TdeF0G5 PH/SHdqL5mt8yd342E7nqzBh6vfmYm9/PXSEmX7A14aUT6pCzgwMA5jA4Q0V88EQVPjBfJjhnvyJ Cm1rABvGy2TZKeg6P3XT2OOYapxNKu1NReeVhg+HNWb7cdHb/AJbPnuyD++fD7S1BN6o18cUGh22 fKxPhBhlkplk2o4v5vRPjLmcY1Iq4HjX+uHof7UuK5qSEAAv26G9f6/YN3jT6o77DV+T44QXDqtJ GpjeWgFDAexnqqXcqU2SDqH2nqSWdyCeBp1+tG583A0Q2lvwghDQ6x0G1yWNTbU7mY3DcA/Cardt q/g0sSvcSNN+QVrjHYHmDNhR9EgYtEHHA2RE3xX+m4YbHpJ134AROTD7U3WShUiWiHBeVd7AXWJy eQK+5NQQ3cywhdd6Tvx+cDBeBKaqdAsNyUukKhvfaLT/1y4UWI0dYSGrk1OdyQan3+4WjoT4F+pq c1yJnTlgKG2gaep2mzAMcdDCWzYENTXEL1PiXEK9w5cPG/s+deGMDE9I0akelwOv6yftaHv9ZOH2 yWg35pzPPdzzhewPw54WTWYvWjGbBuvRZZ1mGwFFQJAADJywmwQCBDx0DJ3k0v68r6qHLeGvDESY iw3hlIaK65ZrUl8rQN2xD0rtO1etveAduwOpAe+baaPprR5mPGmnnPWcLF0BMJ0gyAdyRbClPpn1 vr6PlVMog5Q3cOWYIXU610zPy4KjrKrE2xeOxNfrQ8e5Y5GfHjNMm3lHqdoH0zM/IbX9Xj94o3Qo hNJTxwr0HQwj49bk37uLEGBpIKmImq/zkFIq6CEBKTKagTQNpwjO5Nq5ZpF4MtpbRCYqp62fhaDd 0VS2jxrLR6uaaAFyUGNdgYNJoJMUR/CwG/aNvSM7s77sGEa7mXzWBZzHiTobDHb5wEbhqWemar+R 3Sa7byLXkCcDZEuMoq6xUnM9g7Kqstozz5j8YkXs4kBj5yLHOT/V5HAEVhXXywESQPk57cSVFdwy BlcMc4zVT9/raiMW4CmItGJhbq75QCRi5aJBHlVdjAW7kK2uq+RCnc613Hg+Xjv4iXAzhmigiPqM lBjii+INgwq488XuB0poHPKm77QMPoSOiN/El+utxL56PyUAgw9D4MnNablafoffwRRaQ7O+dhBp 2Pahr5h2ZphhGlz8KUysDAjOYUr2Xt2M7elo8jaMvm62d7xYJo1M8wLta0eU5GUCBd6jhV77hQp8 wLDTjpfMKLi86YE2xsqLoTR3Km2EC37R7TND/Pu7EFDIum5HZQnaZSv6Nb/bl7r9Uoku0MavJhkf KIQb4A8fGqb5DE5nIox53QOTR8kZ8mZEzWBjDaO6JQmG+Q2LV/8nGQmtb1Q3W/DMdMJzD5cRZi4O 0osJswkLhYsO3QrDn5NM2aFBX/e8pExNtgrvZYaHzOnJtfH8qGXHgJ4DV2BiVlAEbE8OJosu3lRA NkkHg0N8t6AydabjU7aYkHyKF2pfelmU3zKGQcKXppNdin3wfQ58MxCIhBqkOC7CcKMbGA0r2mVo dcsIAP5iSy2ibn+MIA26Qy8y8x4QcEqILRBrcTUo+myL7FWtxeKgKuE5iyizIlJ5RzpdPTCMYpNX 73msX54iKeb18/RfKjnJRgX/5zFwH8UJECondPhq0APVfwqhA1yfOa+yAtzaSodrFQNGlkzmbUH3 tk0viVw4TuO7piBS7NDOYMMianNGtpVyHg+9BcM7Cx6I3cNjScSxZV6VLUZVKFLZB/6byt5ObSOt Rb9NMUi9KnUNX698Wzi9t6hHCxfEXw8NSuCkd3ZfWmkpKP4CgOzGCVoCIaCERvCzITOAUQIwU2TR Vzv/e9N01jt7SIf/ulEsLAKUznSS3YF/ArJVTNscX8D2PtFFa9j8QCmqTX9s9VH9AP+3dq9BHCWq qd2Vg4klZs+KoZZHN5EBYrPRE0csA1P6lP0i1QkGh4yhHPb4Hm/ECpFtj1oSUbvA+saViy3q4D52 odn9SrHJsFirVNfXcbfKuEImozLjK6BxGgtQU4Av9LhSNk1ZpeDun+EmoDOIu4gS0KOhTsDFN/0z sTj74NfOMktQJfA15Ge/eBiB34216sIU8D3VygOC2CFMTKYwjvMWjYm7PlR0hidy0Mcf4MAHSuXV X9AEIHB+bx6Ka+9weU8C7DMUyTJ3GrHdDsvG4emIQVWcGC96WuAzUS14x8DEDKdNakObtvv6lkfj otq//7D8kv04UZOUD++4ns5R5aAEYlQAy5XqCHZcMSh99IsHiu6w2inzYlEMd29Hu4ABvOjNVtCN BkRqqwxnyaUwlvnuGjb+2YHkq1a5faw8tOYXE4C0IxsctW9WVTVF6u9i3isE3eymCd3e06W1b4ig sPSeQRhFp8c/BMlB613Nn0NiJCeYGWrGabBDJnjbid//VIB6L4ekocDT98WNmGqu/ppC4x1u56sJ 3hKevyefEJ3FQQ8S4mzVJw3c/cTufIyzOJDgi8NYEi1/TpivLFR5jqqVTGlO0CEQODiirzvxUGE/ lEDxeZhYbN/YrzVfBY/j60RkRNCNFINV9EbxMLkJxul2BBF0T1c4skFtcqZG29AIpwfKB+kaaON4 XKG5H6YLlWdbOaosZ2uV2xb3k4QyL4UuZjay6761ZxmT9IciVVnQf9UDF3nFY/xAPv2egkTe6UMJ Bd1BMwQz5FLZuWCoilGXh/scPHXMvTNlytEMIW0JhDCtgMoEqoeeFmsOvfd3q3IAd0K2USB3QYuF shoq0/RGSO3Eatfm0MYAc9z1jLXf97Y/CvZ/MLuD3Uab6f0jXI8051xl27sWvvbk6rTD690X6gzj HqldDXX8lCMBhteXPrcIM7CZiX5QkktBVmj73M4CD753Snwvaxp8NhNJD8iWItjOj/+rvbdieNkW xsFJ3l+lMwvmuYHEaxLoG2k2ri2Ik1ajXJTBctlisDXzUxSUPgd4pr1J5VZT8+P0cq0LkORQRFvA ReOA8OfF6RqJFIdrTPAX/UZiegH+7IzGBq5R0s/70WrwcHQqRiYx5YjnimEXxYUFqlVdg6wzIkIQ YPb+x4LRQXOaWw/BqQ/G06Hkj7osBltkvf1cnMHCtRFi5apWGvZUZf7lk7Sbs+ZnsXbbKiis6UXg Rt5eH6hUj2Cl8bAqTTIO9E2VOc6xv33vswVvkC6tQmMIjrdqt5f9MPnQC2w7xvA+Ls5P9Wl9KNgo Hy/dejnmvuI2GcnuawjmiDp3JIv8o/vUtyqqTEZQKFD3fh2FWC/Sg1VAw8Z4nPm9QW/bjlPDrej6 ikUU+/TFjmVqJWo4+1lzTnqziDGoLkBR0UsPhEhOuEp/9XgahZzJMpN4SH6V8HYUT/ZEF3+qh5Zj /FopSCNU9RSNqncR+p97kGYTvRzPds4gXyiVz4aAjS86RaVuuoS3kbr5X7VWE+ibWMCVuAn+Qw2E AFaydFSEqIQ7Uoa3qw4LBbcDTeUktG0mT7cXrkpoIi3DWioHTKR5vhfuv5levEPoWJEQCjo/cEbB GyUIiYyicGH3yLGNfDBwcyN7Jvg/BxeCi7KBWtjVwC5HKYjCM+Bbc/2R1/cvTCLwwyqQ3wCxWjDf GNAMIPqxsUDg0cYU4J48gx/w2O+15z+jxBT4yAaG7MbtjJjq8aHzHxtVjVFYNqqB6UfIgbCN8W9d rOPWECwX+sL7VIJcwLlna7QdG4AeKfkIDjp5Vo5DWPZIymFNV/SmpZRuW3MzrHDGcyRJ7hUe3XvX fJP7k564Sl8wNntq5XaRMTmd5yxuTl1S+IX8LZ5bH5LnMcDCb7m5cmcIsF+0h7ABOEGvgSNNRmbY yn2BktZMrV5dHEEnJhTj2Ewr+eXjJSXVGWR9AiZDf6bPmhYbp+dJPeucCqIgGQkS9h1zRJFvlnNW csaKr5Lv6QHzsezoggDxD2pBvBmsY7JORHelpKxOagKH8b38ycSg19rUIhuc9H5pJRUEnpKzl/tZ 2J1dO934KNb6QOYMFqrtoNy5fEcXbsSm8COVysF1nZJ+0AUBBdjUkvqSjaZH7uyo3RvTh7m9GGJv did0+9jw5xIfkRj3VK2tjJBIimpcjhskgd5xZUsYrrskZUjn0d4F0Mh+g9+/XFIHlPbr0dC0EfhL EKT/ro5JT+DhzJ0UKRj9nz+WCaaJs2LQlOYHNnSsdV/hoZ+DBIC9sb8cwxdMz5trIGFokMoUwoiJ roWRRVXocwtoHPqGSZTUIclmzqFsKfNbQafEt0hQjnnjAI83FROAAOwiNPuD4S/M76SDF5W4s9ih ULDEQr7hUoOgpZu/3gcabUyHH121ajZ2Yeq9sD7wFbMWoR2d/NVZJwENZ8qB245D9TKJRBB5wAzY Wqa/VeUetUK1yzBf1CkwibKwfvoF1RaWauLYr3uzyvFQhcnn4/n8PDIGPohv0oVMIzJF2G9cZ4en I3+igrEnWRb2tXrYGlpQEzw1q5z01hdoGs8paLmpHLMO4DWRjxQ3dbc4MdTb6zauZjhajQ0q8Mwo RZnyD1ih5dSwJw6zedrYDCXl0lrQlmunmK85+k/plgxzvxO0lLqWKvAowwjfqlGee/NUWSmQfdGc xSWfZ/sZ3ObazxXCeVgig5Icru/GsuFaCuCm8QehDcefPL3/yOwL5uj4KTYDpyT6XnQlZ4kGg/gn 7qvZ56rji34WSd5u0tA0jmKlSwXfwgrGYKOKwHRl8r97maWfmQz7GJF7Uh5tPgenZ3jqirQP278/ 6gnT5uM99XXPtxw1lUm//DKBDmpAPpwW5A0Mics59U0GY8mJCRGuyLGbjjpcAwF5NUcTndGgqxHQ 0WYIOPUifa/uhkoi2tPqHkKnvS3zCMy2A9T58P3IpySxORJ4pucvpCsyj57/5D8ZpOihqf+fxw16 vI2m/t9Sxn2I3+09nNOVf8RECBOISImYdb5XOe4K4Miefcp7kSldmALtQNKmbyPXHzdLtMa5k7Md BoSHDQLbCyEvUXOEYN8WK9oofg7ovHt878GP+nfuJVTEPziMZGV2plfTY7uecbKZ76+jWo9nAqs3 Ojmb1x9pH4a1Sb+KlexqKmUDfvISslTR29ujWl6Ui6nXugbMx0QVJxJuGCeyN1sQDMHnEraGLcjC RToiTeENF/dE3667CyzZMBHdYal/0AJJviwFEyruEQW3wplFb3kPGest3u1s4E7yfEvjh4JqpbD6 dOBzOFi0e3uSfeahEgv4r1d/bRgE8zwzj+InVpaa6sBkFmIG7x3ISmFYWsynuJHMyMvNGM3o6P1y MWQ5obWMA3oD5MU0QkCgSV/68e36RFPt9jdfqd+mzOC1gNJ520AazH3snCWK2Sk3hQREqlzxhy8n GfqUBMqHK0i7/jCZGJRE1Ee5dWlcybhcosp9RLq/KfwkAJ2X4AwnIsq5RW1sd1MQBco7Sw81aBkN a48NbwSt7yp4TJlTO7KQ/4bT1h9LoAKABqWfMWpo0x6a8KhVg2gnI/SRvzYLYSPwJ8W+GOpH+Srh m6RzkPXXLmskqsNqhluyuoP8g4C7EGXC7voiNt773tAJb1onXBQEpYgsDYJfgmeR1/+6aI0H+ja3 lAQqcfgL1mEhcT43C8qmSXe3KLb5nZE7vBiUhQRbCrndyf0N1qx2UGOmmBQjf2WZkQI3sFxjtyEd 902XcoXeAekWSYCZucKUY19XBXb3Lqa0CvXP2S0egwV1nndbZU1NwlEYpMl6WaxX0+sPDgXVF0Rh 3nnH9OXOOPGBuRBhp0WT8UksuNLsOOjVFryHghZUveo2OfRteFoLwMVpmkcw4HKV/Q17e0oAiNzw 2FlxakITmCIWlJ59anE1Upl0SgOw2dIoPW6BIGAmFYW64aBmLbjZRG4ERyMDdu6hyFttiI9Awmvl UERu7vfKJ91XPNjBLmfwQ45cSpAQRTenjh2YCApjZmX4GqVe1uUgvc4uFaRRWnjW8Bk4x6/tgDEw 0VmUcStVJKNWIrEj7l25TSW4/Z+H2U+WWTt6a6yUiEZPLebtN0utsHJOoNB5HtJBlFCooe0UJsIR C2yPG2698wnVTSXNEjc9j/zxowfuDI43dOXz7tJyD6AEce/WCO2qcHtj1/nZViwdUpjdwvH9r1G5 +XC5W7dOuiTgqfE1QV8fAsnQoRiJHoTV1othgbXmw+1JCD3hDtobgNXbov85uHP7vyTj2TJoC6uC qd/unKKcp+oOD6ftYDqwjnDCjwM1YZe6zkiB/XkFx5md3h1SxHSsmdtOOiTv6NYeO1MP06LTQ2Pg r86utvguUGB2+pPDRFzFIqqHSLx6SJAwOFKGXUGk+vkcgzwTt5VIixV4SoH1hNQ8WGS0j0TSJF8I KywLhk5/YbognC9nUe73lG1R2qlRce0a3oQKpSPoQaeAxIKApfFIfMaeeTV/OWvacS6tywn/6dzb AxE34qJQr0v6gH7xc1P0xZUaxw0hlyiQtvhJLaEjidnE3d2Mmt4RblEIXGO42spzqVt96jRVmnE7 28uwrJv4MMg5N2NR2KiX/tVPDoEZAE2R2XSWgA9WurWssqxRiikzdwKhzlYlzNC6FlXLz3C3NJhg V6rdJEJlmNeymjyXQKDs8mC4JCEsYGqTL7y8Sz+5Llao3TmNMJLSDSSoqjFBcLfEQ/R0jvxBr+BH uwatmg2MdaudE2YuXX1cRAanah00Un0YbIRab6dOgT3ZxGTBVVLqGyctB3/I4tvqD4EfLR1S8+uI t8WxJGpj/bRrOk+RJ4ndNV8X8a1t2A/bLd8q5MUzgZxKV2uWyj2jaZGbamVNmU6Lo5qRkVezBdtP l3qXhxADbLUpwMZjw4qzYslHvdtNZ5n7FmeaMrYPi9A98YcQHDS7r1u5igXyGtlfNUIWJ1xhn+dN ay/P2xy9vpxdSVHvpKCjDNJaG3U9nravEfRc1uhoYsxk026m+cR1ZcqWZYeM1jwhN08qXycG+xaC 3u5nqV4i8c1sW8owgdcENgkpng6W/Jdu/k6sxz199OfXo6VRINVjxvHIyMOWOPFTIC+cYYsredQz OXri15rdLItDxFII6KMv5lWs37YWD5lwdzojAbFaaRPgy2oOCJNpywUtPrivJESK1Axjp0scFQ99 Sn4d1m8bUJ/8Lx/B3aa7BYOhCe7CxQ1fT5IsMNzE5lRVVGaeXuwH0oGiiCtemiirW0ViliBzatW1 yRgztMZZK+KIxMp0p0Unp6AzytJ0U6iCDAtfIVKa62ZxuRI5LSHNHpHgAi+ybLEzF1VGicOJxu5d JBYqHf9etw23zPwYGUnxyWmqVnwYJaDQNc0cWScGPPDxyDBZ1XPeDg52c+5ylB6rZozmHAKv41fa l7JKjJcT58GE8vsaudB+6mXRxmQ/b50yE6/vqzki2njizV7WGS/FaEZUeRUQdjN8Vg5Qr2Uku9of 5T44YIBhcIJyGuo0LP+slM0hFjOAgiNX8Ku8C8f9K6vutUEBPXX+2+bhMX+uOoXL0sXsLxw8nNbi g6IXuFZ0n2zy9VH2kRjX2B21BjEQDVDNhJki29U98kvMXLrPmddo+SV8WOnSo2DPDdIUOrF82Qrv P+21jhwvWIsi3CVXT8JjQfwcwtCQhnDwG63Y83bWP8akvxnMOT+J9ArJlRSBR7GeYi7Tcyd+q6Yy Nq2kx3rOS+Xj5uoSWusC9N1VPNwFFoqwEvSZRF9Edj6nbVwqEKKMxb+MCMcVnlTII4LmeVABIjv7 wvbnxSGksn6cnlRxRpgNU8Sq8Ixs4GmRjkv67pORArN+hQB/lYGWyebzu8uXDpOxpkFgywi4SsCl RrU4qdzJwP8As7Aa5pDeV6GBc5JnGgJOzmrLRUJJWxqxItn1m2PNLQXzTIBzDxHnOVS8WtMdDKDM wKpbU+gGRVulvjVU20R7bfvg3DpebBJNidU0Glc7z4Oz8c4I/WjMEZzDqxhKhcbvS8sp7WqVP0YN kLRZwGgJHet+fWYFS9D37/fuZV6DaF+olBWb3np8whQvhdXhb8L3rjELaZqHVa8h+j3Pkld9nz4H vuuUShNH3iE158fmpnOwvyLe+owVBv5/AccYOOdKBgY66XTLfPrXhxiFvaJqLEWg8FN5sFnc4Nn6 0rKPHsca2I6HiJ9HxmgyXdAwJAHFqcUkORqlcM9GwxyKzot5A6KicHyd/nluwIwZFtUuMBhrmF8K UrMr09Tcb9NmeRBn7yEV6TxSWVH4/FUhi2Pio0TgpLjZMe7l/3jsaEERWg9YUzTnuY8j2E7/id/W 0m+J5hcHMrpBIBm5v6rF1W8McnRRgVCBdKObPDK9+KNUyc7BKB+WdwQBIP8MCxzwBLEclT2UOlP4 jgj06YxOonj6qQbQk7AK8BNZOKy1tP+cyG2qu3n9BDd1JCyZNHmVWbwU7pMLGgmPhA/p514z4dC/ mbKl5QUkM8zcwW+tW5UYt9JQn3EHU8msE/YSyfqRUJNs3H8URAE/daZ//JNsXfz84Q9VT/NEkIhF HgJg/vcAZb/qgWTrg38hNwFwWSmxK8zDtKwrlZH1YSVsBJIZ/AKJMW4Y0VdBiMVnPyNwlaMokVcF MYGdKzmvpXn5H1NLFag0MbYeBpjSSHdh7HtAXuiNAkhRUlvU/iCdgkQ0oM3TsTmRoTWMKwlgyXDn ZfwXhYKnp41+vW/EpfiuZcMKXOLR9mwo4aJheeHF945tmez384oxqhUYebQq2fCV0/wwgvjOG6a5 FriEpjuT3FLACbiVhkp8ymbbYx5fABzaMuqXxCzBMv5V++yge+HxaH7L2aXT44OszwP9I3bbXfU3 sL/SgUK/1Qyl4tsUqcLje0d5vdx2TbaKR8kQDSqbqRGZSo/S06Z/NZ4JY+WYgDA9XfQoo8t/22xF vqE6xNHe8Hs5Kgj5fBLZBFLfHfmqLKAU6uqv7FQqYX7Ao89Mi4yJJ/JMBlFdNkEmrbWrspurUuuO V8UIq3DntO9E48uxird4SjilO1AdxgjhaGUqEZ7CbAejhEd6u5lP8m9+gKXgQMl1mfJhlV5B6Vin SOdql2coveLUfRb03SAGVw7c6k9rPPY6eaN+yPWskbYiVj97vk6e5jaOVwlkyQVF4h5j0vhDMO6U bmHF32TykumdULMyjOj2+LA9Rt/j2cLW+8puLFZkJxII4AgCCyPDV1umlKxscdy89uk+MQPPK1Yq IAN0/OAxKY+Pa4ZuBQgeFYGOlOZ8khAB+IgigWWUop4OFvuucgYhDeBRgPEBdmWIgjOLgwHhCS7W 82trNrbcI3LDCBR1IfUa9/ExcvgZR3R8vH5u0nRfCAJyIkKb3IoEDJJndRtoewkblLY8eSLyGsw8 /IylOvw8UaOrJtPLORUCQ6/m5mkT06iSFIDNCo/606u6WGZZ5gSBKc4ygKC2zJCBhs0+xCeGTNHQ tjQ8eW6RIn/NGYshcJd4XRIL+5rIVHn8F89MVDou3eonqZ572GXL0T2sFXABkst1RrA7OHd6RSKb iw5vm37MAqmS4lFV89JGPyBGSRp4YC3YZ1YyR9tYwAnZspa5IB9VlSiy9422tL8kK9U/UOIIF0oD gihgPJkYI4BgVib+oL9Ez4Vk+lOb60kpWa2N9C1U5MQSCJLrwPhfWPL0+FBoyg/QcZ1krPlz4xu7 pNPSFIw+mywgl7Fq14w7VNMi/LDahRBxZ+oQq0+aYXGE9GxtnB21xdoRk7y9ZlR/fTquq+kFXFRY Q9aOxabxRcNEy0PwT5/TUR/Y0fXHCj5sxB5iEgVYKJhIfDnCTim46Jcs1DOHhUwSSTnym+vUE/XW xysHaf5H6GHOWXZcgW/CA44YRwkzh3YYm8ASspi/WcYpv7TIBy3AwXnn292VTRxj2kvCM/+K9b9v 4B9Vji3U5nm+Pz2+f3IK2NKxMmMN67Odnm+OXbUQvDsIv4e6MYkLsZeZb0zYFNentptc0vW9rqpX +NANit6e7xQ5glSnVum/Ni0A2YskTD62anAD9L2ub5YS70LYJ7M8Zp5y//+VqqoAIXLTfDn1+iwJ ul4OK23hggF6Mtwi/41SecEC0NJ/MrpGjgenQ/2LfcknpLaHcG59qd/+r22O1Ds4xAO/LMY6wwDy vT1J9/IgDfHBTmFUN3pgJ/Ff40NfZu4B5G3z5Bea7JZJ4nhdoRFkh8VptDPDeqtnWzyK0KgQd172 lxGriSlzOjmis2M72wAEtrFfXnAcJ87Ao/OZllq/jIKc9gXROxmdrYA5a6YEa2azJY/xgfS5vK0E WZAkCc1LsPmJV3dgBSOWMsTEG8Hf8TSB5kx03ZMG/u/By+QYdQptVU8HCHNgOXYnrTCCvR1XByR0 oSz6Hx8HTO73rNOMmXWXLD8qOCYTLgppXOV1BA41FpFvAFe1DTHjJ4rxCqj/Jh6Ue8VMwkI0y4Bu B37dfLjSTnIRRT320V16y4JwuaAn/YBKpjr7IVd92Gh9+fIOXj9wU07evvT58slc3BFIhv6rc6k9 Bat+XYuExbMcTfqHDlEwwccbwV01l81uv0SGLdwCIkxR36wr8GwKsDEoSkLAFxy3XCG2fm9JXzeI LFCYDohyvIVjibau+Rg+sz34i3Wh5DN0WcQex3x2d1s+B9t3K5lWze5FUp9XNYTEI/wI8cirCyy+ ozuNMDEgTPACqd5UWK75NVwmMYsEzk0+8kqWw9eOGX1butVa+lSb7imBDjBfNxjhXR9InmXYOpK4 4n9WIrPS1moUL+qfmTJU/PZpUKE3uSclaCIdjNiYWvsfljOqfb7v4mO1+4PouvlDXrh2j9MXbmCw iQOIaO6QpCVCF8iSkqJ+wo0r4nEqh+qEdFsKTE7ZBhkxGjzjmWmN/u0smOSHGWFQAOdnqV4lymbp kmCz+AaMlcUp01QTZ0qm+n6GE9dVFiu2XJzXqZoKSZ+wBQdBsI3gfKCXkaYeQx3pRMhiJYfWxOfV V4+l9aIf0K78MxqXEff9S6Ult90k9t8MWOa+rnM1yM7MwAJHtH8Q9W+wvlynfGS1KKAsysN4kmT1 V/aqyo9641lukCgavIufHxnlzi66HIpqx4C/XDoObHj5xaEsp3o8IjuBQATshaj9tsqigpQugjhA 7NCOwKNlTqw9fbQ6NQK7RW1ruRzI4xCEAk0JC6anH4uT6z5RmxqLeGjBeLbmKkHZcRzIHTG0I6JC ls7JH3wriFS/Hn4XG+Z8OKrGlS5Ek6zoJnlunrfyuzZjp9GO7G20usa/SodNpKkG/ieWx8uoKEKf KzxCf2UlKzXpYUzdbTrhvrTVvi8l1AmR0XhnD6jrDLTQV4AAHVZ/Ac9Z+efZ4pzmu2RcBUkqJ1L4 hILPfTc0UiubhKZHnGgZyQ1pGBGHJBB/xOknlMB1l3ou/wk1IQWVJnlepKpTD5q1dVMpPlVyXks/ mLxhxpAzybBX1yp5YgGXa7uHGfwTGDm6vq/MbCV83g26FoNu4YyYfPg9zOdzqDwbgtHE89t8xwXG fjubLfHqGEoEBnMA4OEJqDhnswA98YEgFS0GeVmGkA7vffVheEKtFnh7IVuKjzJCfz9vn+nfhNte kfJfLTUDg3zGAV5zDn4v05IoBcIavZNiWree7yj2r4HrbF1ZfPiyyuxJYvoOrK7sUuJ2eBsGcue5 g49+Mda+bukezAoBXpkTRC7paPNLev9Z1gaiSYQnb0+UhebcCaCp4S+eUuUnsm2kckvB4SV1iWOL pNy+wXls+CdEmbwTAAGmihHVUrz/Dn6dggkGGyVQ8PUxP6mjzEeiCVPJH3vKYnxYquDcjyP6igOH hQw4WQO0T0y+Xy8KR2Wt7lVD8Vcf9Iu1U7ftAyEXSVYOrwCQ40mGPowJAUiatKno4CTmxwPwfwnx dBUYt8xN7nAtoN8nJ9nhqi2cjnRfYsNFBZz5Ce6AxgZcyOyU59lCMHmdD+qhDm2psiRtIIUstzBI 2k6FM65W5lI3G4xKkeV/8dMWpZ6+W6PAlVfPfu0bJHZF7bDvzpSmrGyYQgiS9j1tzUyLGOPQOZM4 ywOQ5sRqDesVLN69YxaSYzCmyXNY9o9SzYdpCJ1Xoa/EwAFvjKGE4QNoWxiZc+taIKplpt5oxytN rTrRLqnPw7+ocCFIUyZCqvaZegHXM1oIuL5H8WwMjW0VwDnKrRpZw3JCO0Ju/K6/qCtYXR4xDQeo s7KE84FA/oPZj1O49BVFAahh0OFR3NxoKg9oWUxbVlVVzWbENzj4Qgfh7Mebzz90+2/CyZrTAbk6 qL19badf5wTia0yqfwJ+lfDCJe+dLP8X/KuUxI+82It0IIhPnuB2ydNalL/rGK8NRQ9XfZjGJBFJ kdthzWuYUTYdx0TwTAmP5y8cNcYU6O+IOvl9NnpjMdRsSrisu+amxOZGERoptQV0FH9bwJN0VWsf xxFs0MmopfogSHeE1H7tgMflQN1Q2WIHBuqLPcFyopcgtZkVOb5bD6BeDb4jP0tpRdfWFEXzsG9M hrAzI8W9ugKYQPgFgfWzT1DPjSNnXj/SVbgTiZ213rSQymAf3IemClqucHcjy7ODN0FFaeGPG0+Z Winz/eBKUET7mgj+71LOxDpVGq5gs5RtcjTFc88r/78oljyevGDGbMT9X8AjMqSTMvqaX9dRIO/P L3eNNrCqOioUS7A/AJNsDYJxiTzoYxJ5kkPNBcKgEl6OYdsYksBOGvokCiEEW796Agn3plHjKz/H 5nlZhULbmoSTm5teNzGyOWpmI0cBPbwdr+NpvBWPGkFiT4aKX0Z8BPpVWwDX1LBn7hJRW0oVRSfz Me/TlpB3eYrsLcUN25KOZhgYHQhDSz/WKzZveQ5QGhb+qIaxSf2yZQZbIbHPO6wgP88ikk5w6rnn ZT9RQjYMii2xZByC8TiD+dNCbKNSlVZ3a73Zv6D1z1GmcGVLpxJAxMdDVmoThxuZ2WgOoLRfykWj y9ocmEf1UcVkbXx08kvBSnzK3yRaMR2+BOLMCigKSzwuwSznTW60Gy706/irxKh92B4Lyk941jGT fKwKsdGgBhy4jqtLWqPlyutz7N0sCySpCLc5xjkW1+33by7ttecO+wZdcaw1z1BUwA98hpx63rGC w3Uh7dJYyHZtyu8Zo7f9ExPW67k3SO76yb0DEq7NNVmoRpkN9v2YIQT5gPkzYOOU7N0jJrNR9qao uAkUDfOQo+QdwGSjxLBCL3i1TjbmpeUp2AU3AL3bTi9RMbaxpB6HMKhN1lJKMNtpfCKp/ndCxYhg V86UOKtsNmIpyF8qLcW1oT9lkIlHaJx1G58zpP74ZsSv7i3UlQ26hUa1jJDToTJnGYxjWBcfgOXP 3U0ZjPqaaSV7MXkra8aYi4WczxXWOERL2Rx6ccBhSMCmXlWKIzK+1fIQ5LJNFA49mZp0/sdKapqY stu1D4VzonH3eaMziqwYcjvAJl2GNWygEpDKx65JoH2PUOCFTQZLHKJGxVe3qhCSTVVoVn9dTi8C ap72Su9ObAtAX1ERPQyLdUG3AtyNd74B0CqYTW8M5RAzL9EO99LGQQGqeFuuq02nDSV2aUnTZwZz Qvf3YVxq+Yy+cqO1JMyaZ8kTdkexz0TSFcGQl2V/Ue7UhvxHqG5JA36Hc/6Ct+CmJPQDfPLLcy7T EEkYiQxnsskQf085W/4Y/K40wuWcDoU3DuCk+4S+6tyirk8aG865GfSKUbVtaPoqgjdlO5Oltp+F CyFjETPnKnS5tcSq4W/9mctIRhIcezQFgveyQ66ES3d+KO7y87R6mnYb9QRLrfDpS9uj5ZaRrAbj jrcdLVcsSp3shmiD54kKKcbLoI8RziHMj2loAjO1+DMmnbj/JWuIDwFXx6guYPi2cIfrXd9rV6Co y38ydrwTcWzTp44ffa3wX3AZKFpDSffMihGJZxWw2ZVpolFp+SQE9rFJJvo21V2Hg/EDK57U5ysD d51u8fJJM1G+RrH0j1D2eHq8KOEw5sz/tMH1AWl0/Xu4OqqC3L5R7h7tCxLUFF9cbsogyLUm9Rai vqdFglQ7qfYKCU7J8Be+sOOFZZnCvVQrPURi5NuZ48erSqVBX6LTCM/Gvi+B5FFLTQxCbZTFcgNQ VgyrKZzbeWih8NS/Q0VJOeSU6g9gfetymCZEAU4TiZpYnW8hvwQavTnh9LeX9FhAU4W3SkmY77Tp TeQgMFxqI31iAxw30VT+gmZrcMf4NnjVSgAhY7TvjrjAkCfbcTGrhI7N98Fs9D9lhubC/LP533US 9Vsn0J/GNQo4GEqTPPA1UPQffxhadwHzjel8K8VrN4IMjJz5MIHvBdTh6xTf6X1JSX0/GCmRtB3W 4QK7zYx6teqgoj18e+3khAGxR5ayIQwVShG5ABP9gNtDrXuMdAy7G5kPK6sL5ysLyNCzr/q7YhSV RpT0Bi4F83WFroUSon0eLMEhiQtXTnTK2rw1zvWZIA85dYiJ+6OIMQXBASiGAjD+K7lzBKjgL6NQ s9l7q2Hv+OwRIAI2gTbLXfrfOYitr6hnsVoTfdgSjTDNuU5PPrpxELfCiWi/qf3ORr4udiOG+RBj 51a9P1eYrWOp1zuuj7CwPirB4VVHU7BwWgXbMdyrOCWQdmPAS+1Rj20mXh/PCyZZRhX9UrNter/I QJYH6hjFWevITfAMRwLTN73F3teEng0gZZwredxuzUu8+XjptArceZpqtwegRRiKq57+ccaR9hqS JBwQwEgbvHSjs/7TBayuz6iYdEcMmLWNPCXJV2OJdo9cLUBqZkYdn5mXy2gidvmEy6xJEQJ+NOF9 VX8w6KbFTA8IllnHHCUO2idFiIoIVNd8lJM9+Wh3B+YbojuOoodAKNvAxyiHp5jzw2WVnaUmq9Nt xkUL2A4iVGEeGWw+kn+nGlgCbS8P6WG3D3f4B9LWHCDzouB93HJ0VjetoYYh7HKpkCW9r1bdrxxu g32B0yuhu1BARbXbQ2v6ZI/CDvgkoe8Pj+JndfIBa1CpfVzb6XKD6b0thvdyAhktuCAQCR14bKtj MsgFe4jTwx3d8hKPk878+pKk7vEsenoFWPgWysHRQ11IQpbQ47vmr9Qslz0/Ac1mJWSpaWZpF3+T jGVlO5XK86rwPf3neY2taS0FgO1GIdksIdx0sVXtytd8xr0i4lwvP8PznG4FcOHR5YO3IkCt5l1d 3Kp+DHpB/phQTd4XRCfBKzk7hiO/Ja/iaF9R7SQxD0w2h6TYK6vpjNRWtdC8EYWujljly3Al/dOq WytTMyHBs8FuiwIVc0+I6+s1xFQijQ1yYwv6LslIk3yzTo7uR30j6tp+ROtjTY1XE6XlXXgkVbXg yszuzWbR2F8bkpJJpwfqocqF3IWe08EgnfF5jqG2N75rNUsdW37LqSHXAKF9cBGftDiu+ajeyU1P lCdD5ClugHrEpdj/lfz86OHex4bU3Wks+RdPfFo0MiHqlnPoHsghriphQjXXy1V2rCDbxykBPGwA HUBPPax/hmOblFIU3uM6l3Jj7pIrLtAmylOvZ1WrTwSaS3aZ2z/kWjrWiCRtWU6OWg7AwIV9mI9n wsEy59Q1ih6JOHe9JztpmUZ6/J480LMy6PTWW5KhAxMgRrNx2pV9I3OntDfpRftqfdO6AbTynf4E v9d+FyQjO5HaGGwBaaUnnmh71ezEjpWhMRaN/d5SJe9+RjVGiiaiSkfQ1HR9mwglXu1Oj/92a7dR lcam5bF7IEkZ0iH07w6V3sAK0IClhztnfK7YP3k/vmzrsKyoaFq0O4ajDhqyBGqBsx+F9D01AQF5 Sidn7eGbeTXvNf76zCUvi9KQu4QeDe9BbHqWA0IiGn1ayZMJGOyDq+k3OWpRjCWlAgFUjlEKpK6c gNL+L1EVU0zxu7pRpL/3igv4aqraNQXx40ioemRmKYaYcQ1C8AXdNfVg3xAFiK0fOp4ffNMLuJZV 0wovtlEx5kOMn+8sbrzjUDGs+YrcY7X3QnpdDAncdwZ3UhpKBg4yF1Jk4wj2adMr/PY6Cuvq15DX yKxJjdUAfyzbOvc+OrQsjs2atfqUxr1xEaUnMW4wgL7FG5kp65Ebr+2aRNWMgfrqEniccGuRIibV SIBvkShiUSmEcKlhBiMFPozwXQ66HJ3H38Cgv0HGrWKVZYOqIK0YlPErdRaq2iR3kz1OgW3+o9Ou wgW1a+wqyQUF1hb8GE35ayBjiaYtCpBBGQHOnaJzMWBuwX/iAnjSOUzUgRsz8EDpW0rCqCFGsxu+ AGrO/oy2UKXngqHb/YArDn5x332d8dL1xWA22lNNwW02j4wr/PGVt8R1QO3ur6V+uTPeLksO3hCp 1qBYlvaP1BSXzzFvZuEvy+HSlDlgjc1KbIPMlDIr8Sxy3GEdmByDjzolYd8tCddqDD5/mAC1PNK4 FEPxyM+p2wH1QY62P6RznTbIXXvr/zrzvCRm+/yaQj8BQNEcpBrbiyrrIo7I8Mvz0S++XP766EI+ SHgppY8EBqQ4wqY4rdy7LZo4tAvOcVztCDHzMQ4LJH4EbDmIOV5MZkMzhBGXACuvp8Gf8kz1+QIA 1oeOlKyhg9w+ljzTV4fUM3LnKmO4ApfMRenz3JvoJPx8TNiveSIu4clrN3dGrKeVqAplbmRzdHJl YW0KZW5kb2JqCjY0IDAgb2JqIDw8Ci9MZW5ndGgxIDg3MQovTGVuZ3RoMiAyNDUyMQovTGVuZ3Ro MyAwCi9MZW5ndGggMjUxNDEgICAgIAovRmlsdGVyIC9GbGF0ZURlY29kZQo+PgpzdHJlYW0KeNp8 twNwZ922LZ6kY6Nj27Zt27b1i23btm3btm13Ok6Hr8937r3vvfNH7apVe2KMOddYs/auRUqooEwr aGJvZCpmbwegZaRj4CKQ9XCyNDRRcLKnVTa1tTSytzEhYKJjYGCA5iQwsTQGEBiZmlvaQdP/CyBn aGtKQC+kIa0pLk/9/4IzMTX7d6KknZk9wX/hTVwc/pvD1dTJ2dLejoDinwKUBE6mhib2djYe/wbK 2QMsjU0JKITtHf5Sm1sACBg5OZlo/rWy/LOy0xAw/cX9s7IQ/LMNAmUPZ4CprTOBpJ2xvZODvZMh wNSEjkDQxobgHwrnvzWcTZ1c/+X82yrA1PhvnMDIg0CVTvmv52+23d8cERZWFhpWDia6/xKDwNKZ wNQSYGHqRGD4l8Dc8m8Np784gJOhiamtoZM1gf2/Iv+Hafb/0w6BpR3BXy4CVTvLf1nKgL9OZwJD OxP6vyz2/1QxtnexAzhZmjrT/acoYi42Nv/ITvFfrf3dBcF/C/7/SDa0tbTx+M/0/8xSN/1HXIr/ LxZLZzFLd1MTBUuAsQWBmaGNs+m//ZIAQxtLY0E7cxtTAoZ/u1TtTEydbCztTBXsnS0B/zpaWkaG /4ypWFgaW9uZOjsTsP47ZGpn8h8lRf/KZWJpZ/4vcexMDJ1M/sfxT1jB0NIOoOLh8D91/zVj/9iM /9uWNfyroDuBNsPf2WL8m/j3+e833f8opwxwsrc2Vbc0AVj8n4xCQvbuBF60jGyMBLRMf3tlZOTk IOBkZ/L5v+HGLk5Of8fmn+H+u5X/ts0s/+piaupuagy9sWpvzB1slZ6VAahHzxudFtHouHVmdbcs QDPNdNcN924IpLFdQeWZe8VZmQuQALcCbdb7XFSf1ab4ttqcceH3Sa2N6xQ5uGGdjv3yg+9Uz654 s8F5fWuI2EOMv6Ad9gqdyPD8DmoZH8NYVB+W/uG017EJ8Vqt70/PJeLf+t1TztvYKXMJOFbaQDXp lTMyiu2UC8MLaFL9QavL+MDVEf0Eml8ECTiL2etwDYcScaFtrB1d0SNnM/g13coyvKJtTod9r3Rw C7o7YnxsiPHGOQzt6zCEVZmO0y/18gMpNqAvbEfoS7MkrgqciCLs9jSHTapwbmnb1805CwdPd5yW 08ud/E4/VFA8Z5lAEXh7ttGkpHFdbYPKWSveOUPwOMqiBIy27g1fAkcwruP+6zebFq47D2aPKOQe +F7TC+oDU5Qlrwh59tAyCWqUiu5USMwV4dCEWpVR0czPZULUcmAm729/ZW+Bh6WCHc8Bc3iHwK9Q cmzGW/hcLJRboBaFImd6tJryt4JcVJVBV+xeq6QGeT8ZDSqGEcJnE7Or/YtBb7hbAKjpzyj7/WqB m2pLvMmTLRsqtSoESXhJwV/pkTbj8JuT5C11fSFtVxkhV/wN0hLQvdxepoKF91rBMM3RDWJmbdyZ xCMMenxWXcMYP7UrqjggVIYgnVZ/nbJ1gppt3QLLo7NJd0aGgGl/f/HNfBzrJwA8B8BLeRRVL4fb 4odU3X8Mm/xOy19j39ynPpkcS/p59wujpGOgiTJg9NWEoPMa5CdadjMzU2ZDY+2K8/sshVjdBMce T0HT/Ib0c23i2+wI4FQp3yL8o4dm9lmxoNsJc2ArQW28cHlhHxGO3OlZNdMNxN+dtubrNTUwLqq/ O05KPy6QByea/aSRn4FLv8X0d2U1Sxq+jonyIfpvqGLpwwtf9pJu0cVok7m3wJxOX3+3g5GI8szn 6u48k4k7VRlT7Npb13uHSBxM+Uyv1wNvIfEI/CfjdCG9VIrtd6M8w53gkbPRGr3J2vY0+MKpghz2 wnFc46EgBako4nCTthCA6nL+WAxeJEIqkFkknIW7Uwq2OpRRW3YCR7AmIlEKWMk7UkzpRg0EoI/A yv/+QH8sv3wKhYn7+hanhy1q2H4Zltb9eJnIaZG6tW25BLOumzN7JNxk3fvCKGSMDw/84fUmDWxi aKkVNp7qRy2Sb9gfNU7edMQVy5TwdsuMEYHL2MJom3lU75y9SzJ+bSr4Pw6OcrDHto6mW2awHUys kY/o5x7mx7Tv6xFcAUcokp+m1kDt8qdBznG+D7hYji5DupWybowKhicXd3PPHpUhJtk8Z0n1OBRr 3ovmxAeOMYWoxF3UB2EStnkpUqhYPpd+AR+t9rimg3fgdnty4LtEiNHj8NerJWdMj22sZFnTBBwR bUzAN+hMrGgmS48ZcEUFyMa/Ym0iPpzpXdhLeiv8xRuzOpXHuXWBeiWT6stFSpjf47DKkKvv43SA NBZ+1AWY6bKpNTkeZ4mDiAC5e7v9oruQb8xlMSB5DWiSjxZQFJaquBsdBdXcksY7O7kfqOJy801F /JNADWAgi49DbxFD3Y9NlIkTppWq/2aqkDQHjE/PYD3d6Dorem6TbGeI8egJYxIXhacTfqWhsZxQ sj6xt3Sx8HAXhUW4SbAiSVPK3vHNKdJKlgheu4nBNWybjuOghejrhE08H9P0amZ4uKp2qW+50RK8 fvkKKBz8YM9eBcXvS+PAF75TiYBoUSMjR3aiVoJ+wAkWb75kDuZ/prnilXzsNAp0DnTD7ZQnVADH k3tWHvXHPi/1Th6wp4tbI+uuNLLN1y5yYfYcpju6PKDT+J1Wn0SpLUKAIbjA+meDQiUx20SLyAdA xqpszQBLPjrRFdTH/dsIaTuVC5/XZc5iH0SI8ikrNGWu04YZAvRIBzWeV+1w4kMYwQIydpfFvLKd A7HToMeXJRfLmOnLcywzeNM6cHZYDXew74y4YkVB0i4y+JmlbvHzPAqKGBYpT1iB3B6htL39a3ji YoTt4eHTjoX86qotVPtSggXiXe1RLqG+Hu+OancxAezzDPWDuw0p1hl4Xt2CoR3md2qaVJp7FIzW J9ZNonlkeFiluV5hW8Az2Ot0SoeKsxi1FmVoog1WkRZHB8dB6p5+E9umL9Wa9nWlwV2d6Z1k4LUQ mWVc8cyGL/OyXRIf4e+yDKqllXK+DZ4KbovFdLXyi5ND/mWwRVrOsjJJjuf3aH+VsYZFMt1ephED pX5to2288ttQvIhDYw5Vi1/afRq+r2JBNdlzH5TeTlCb/nfpjb8DrlIpinEYszvcthfReDRyx16z krBqiovXVD+dziQQoL7+FI/ch22ohPdo+sQsD/jrVPldRJBobvIe8kVTb6otrltvZBudSgnm0tyP Tm6CoN4IfysFKS+gNy+dUqzQj5KJCeDE5qkYYRs3D9NSF6QhM2Y0HW8jHniLBjtILmEk58CYalIc cj1rqJhzITixgfc1KZ1J2xyqtEN5nD1ttphB3A+UqBtNUh77sKDuOoKGE7FpWi6vPdjcDsnRZzsg lk4CXDddX4cKTX/9WD33oDmT+yCDbTJWcs+TaCgl8lE/J2EeQ5D4o4+isDTwo5c9Tn2JLmsyTP51 /dDXdjhKUJiRqnP2LEKBTdHU82m7cHHxKfl34iTn8+uY7JoFhAAZc26AUFg9j+x91D1n1h12OS6E 54CiswK1WTcjoO+lspFRSfx+niIt1bz8jSg/Qqz57EGx2b2bBHAJjbnG9kYSgfW6Rzs9eAMpqbTZ Ykn7zL10GQ0z4bAiu7fZf3HumLiRDx1tk21eE//D5mH7CIOGvP4CholBuDT41j86O10aRs03Aiid DLqsPTIPTt2iCJTlfKENXsVonLA/oNg+UNniUYsbKteMfDyYQThw1Q8+q6HIFLURKMnh7QMmXGqd uiYy5cHZTZT3irICAPbrw80UkTDvBrQUw085y8dx+OdCsVOrLBa/PTgojqiHGE4gg2amYVYcTi7t Yy/zfD9H0M9GyYAZberhPysl6RILbOHqJk9Wm3hm0YbUhIrDkMndgcoussWLDR/W7VcOlnjZzkjs +QofcZHijD3mc3QmUbkBEYi2yiSfgvOLkRdpBWin4GKj42ypTF4s222QO4cLoXsOOmGQXVZIlte3 8S00UECCazlJFxiwNxxTY54ha4pDiOdhiM9w5cVPLXP2PzdAqiMDGg/d6+Y1oIwNHOyIdtgRC9JC q97gxeo9ezql8nPGGlNOFLH4Qfkj4em20L4heQ9/GboaDJqoZPuKW81IKOekLnRTS4o6Z7W9fy1i qSdV2ikXy4Io+Mj7Jsdi6vsj6LdlPd7lmLgRYIF0NBFEVRnQSG68Y9100vcawEfR5rEhjlWNThRg BzWSBYr8Ie5FGBqVsXOf2vvt4zuDyyVgfpDBADTWGt9PW23Q+rGICvx+qY8yYcpXqQk2lceDaKOH eyGctL7rGbF5ccs9GdFJirHhL1447rqvkc2GOKT49jhXtp3BE0cdfJSReVk4X2cm7l5WrCV1EwZ+ ax5LhPpclJ/4agZ7UBdM+vtyWTQBBLyl340NEEWipJTbYfBSkyDJh8K/AO+cyqODccglMfhFjAsp li80jFvI1RcgH10sDZ48r4hANeOU3nbPEwjx4ddVqGQIw2DVTIi5wvACVvtzaQZZB4xx2v+jJYjX UKUnCbY1+2P4VtzQxujdWjFiSCH7Qp1mXcplwWzCtuC+304TduN+ZHeN7cdNT8mZ4Ffgcg8athFQ bS/WC38xAqqvkz4v80dM1SCESNFtW22bAxLjFyuU1Dw5Q46k8NZDW6cf89zPhkJ0VfEGi6r2Wt3B TmVWoG3c4q+tqVM+CfqRXG3LUl1vGye/NBWu1K3SVLD5iIzOn75As2SGtKIMsufYh66g4S8DQKYM FitrQbEkMRu7llAnwsaxBr+pO5kA1rdUddokVUKTQoKrHn0+8dJ1Ib3c43Nb6LP7h2geu4uMZohv DAd2jCIePAu/PCPnasIMketJ2fEg99JCa+uBWKOK6fQ/NBhpUcLYpAZC4zB7kRJEzofUbQO13MEH Lq+1iH7dIBEvVLL6XuzoHqHxEjMFzCTVbWcWxLu+BqW3Nbo0rPciFXnUuqloUfU7XipymhJvDSok p8dBYkKt431VHIpyi80ippGs8/mbsmVjwa0er//8DR79C6kTF3CT/iOQadFn9mw7BdoTBJrbL5Oa i1ONrO3PcxYCCy2Y+abLfYL6yTKrgUp631uv6FnHGh0ky3d2jY1kKP5V2+w8ZkGYLUjmWr7ZwOXV 9LmhNb3NGX5EAx8kHEFU6IhLR3ieDf/3n4p2+q0xqhmgafdwsOMVguTdaOqwdcstatWPH6wEl6en u+DcI2PeDvj1Y4Tsr+sOSD0W1aSwC6k+se0INjNt4cJcXpOq3XwRuoII4ppqhR+clY8Luh29SeQN D7qklAB33ic6OJEGR6II3gGB8K5btSjEoJQMbTz+SQCAXaS89Q/D4g5KlpWBanDCpGEwFfvyRM6s yVt0QrE1inqtTZhqm5XtFyumq/drq84oS9Tn9598kklu4e2fouI+ktkys2ILhuiJIA8uD6LDhi/V APIKxk3rrk//9PK1V8d0u3K1r7PNdNM1U/L7Qj6uJy7BQ8eb2PZ76YemPXT7jwvXBqr4tYtg/4OG yF9wH4fNXG7e5Tm8gIlBh5o4IXYBc1M9YgocJxLzH3D93OY4682dpTg6BFobkl+KZFe/qVgUvbhs 80HPT2hqJZNyO+zgUUJG/LWBgZSxznlxgRAKs7flbllldpP/kPX1QaLQRtQtqq3k31zVkbRxGsmK XD1xJyzvK9WM5V4TGHmnN6RSQQvMapPC97u5sXchTSgCMp1RX/sp4BPVkq7ejH8Dj+ZnswR0ROOE eoGQnAvAFJ++WK7lNyFmcgiPeoyCZx+4x0H1TBacJfeZaUH20/Ug0/TkcnbLb/3eJJ4mxYYzQ3WE kIvfYxYb0vXb+z2GkKwENFyPmcZxP1gPSQnPyMYNrEnw1IZPfaBn5JqkIFy/9ELo9GLtcMPSf1H2 0I2WgaAIoxgFaZm8hyT8mb2xbADWbGYddKMi74Jih27jPGUQpWX8ZlCHQ2rLqijxWROy4Z5Sf365 9tBDDyP6irgsuVxrEIWClubADVbX8Sszh0MscV8VxcbsS9uPwPsPH4/E1cBOo+PHABKEY/pXmawg dqsadGFMI9YCMjMDzgNSk0HpY1AwZk/r1AiUGKHkL9g2reWztUOAMPD8jQeo4ejmJtdoh7kRjsvb 2NBEsInQ9CP9r8bv2UqsPjR/R1k4IMg0HD+iEnZemo9ELqb22V7zPZbiNWz2cgwryhOe0PszniWg haFkr5KIY5IsO+2BqGqGyTJ6g1iHmM6qVLqMzGDgJPhFmujTDBSM+RVIKoyTawILTzLKzDKBYTTP 21nI51ZTTInzpT9jsKVUX4IkwEknsb+bb1iMNtCu7saXJww5a05DkTezBcBLf2tRbOIGG5tYILhu vhgl4rda9D+bZ8bVJe/pxOBeerOX6gj0sG1bvKEXn36ZP1JdCXH/3IRsHqKRgfWUasOWUzj7NVD5 tQndRLiHAAt0qoCq7NA4N+HoxbVXykTwngorV4NZurDkb11GuNC4Yb7VoA8GdNtvbID7aWxH6DhM F7T42WpRAH7jrTqYzN6jtW71wXInGNMgUUpQZJ9CXLF42DuZgC6ewBLg0As80Xu1rCegaCGG2U1A 6vWIBvsL+xiM+xThKky2944HnczegomJ4nQjiWxNoQdIG02+m/npCqAfRLC0wwfwE0KjTYb4RuFm KzxAsOA59iXT/K6r1Er5Q02S8oayTFgmCf8xaJ5XiD8W5MZuSGv3GZiu0/S+yM6aBH5F0XX+Thoj DD7XK7WQwrscWyRXQr4XnqoSpybB+DBG8bVteE2ywWFuZCUmumAyt+qYtvNUu7zDWTePKTKZzlfw R2U5sb9vrhW9RZvjV1Pv2wgbLZUuzmJDdau/IxzJnFxYt9eJJsAUfA1TNarki2Olw8FJw+oGZlEe i5HckvXiMeqNapRx1OegtwK10iNUtvQ8Z2eBdb9edovv3UvupJ+zzRraStaBN5zOK9oVdVHTPDc6 gJ1PoOtRCF/EpENk7yZOg6Z1opMD2qpPmoK2k7cvF4lanHAMb0hi6EfgoCSQJfN4biUxR6SKyWDG Vovwn5bDj+o4paLiVTSOBTTUbP0fL7VkcRg5vAzuZM/S/Xrpk5M/raV4ey+tC7vlfwpivt7ZSmII xzUS7gojfDg3jsw08m6TTekE4mTPqi8R6h5y1FSwbhweO25KgQSxx4IGfGnRcuEkV1t9t9JwCT1K 6Z0H14tXuyvRYvoi3+lZ0+ZJOoWYZDRMzto5wM/jXCm9JzAtNk4D0J6Q2CjAJ5E0+k3+cMdVF7Tc Ju5GRrUqjzxlRImCWKZJ3Q7/WIa0LlBHLQf9KfWV4KQU7DIvAUbeAI3y4J13PtZLuJpUTmOWraaq Ej9dqcw5Er81ENIiZF+FKjjlSc1UVh12Koq0MBJdIOzR+4GEWcqqXTuOo7zVQ5PjTPbd2q5rWjsB 5tu/o74qCpl5K7qXujSfOcHimKPl+KzEvsJYV/zMfAhjYltJND94ISFBoTfBBEYcG79cJZ9KhS0N arhxn8nwDUo+XWkZyQcLqGbyTiw76mU7VRP5Bt6GimeibTtEPt0qRHUeqyAyM/rl0e1mb1xWtJU9 kS8UzLYMYRDY1JVdGAiIzaUm+/Kx4Tg3Pc6qgVG2h8bsHvMRzQzfstUjoK0ZTH4evrPIp3m+9CoP BEfKpgT9gQXX23i2G3LEy18U759qTWHngesIdp8QhqOfm5N8nLFegOQflWXlWV2w06IlwRRFrpUj c7r7/rHIqL9qzMmi3UndWYGrOTqaL/SoN46Nu80bCPNVualPqm6/8QcuH81bwvMsfN0MWTB2frlD TqyGtqCshnFg9cbJBOTZylahEsuKDh8YqKdfxh4n5faUWR0yZPe8WAebnLB7PxyyqRS03bWjT4w9 5nQooDZiVM5voGDl6IP9CupBjQAzrMDKdFWi8MwPRCxQDFZB0NGi3EhXeUEbLE8i1M7aazCORg2i N+ks4RjHz+b2JSv6Us7hOxe22Qm7TnRpOU0jggvv9TJRXaDVgvzJePVngrPFr0sGUpbc65WZuKX+ 84bccmC+Lh1RdGgDAjBCNRzk3GMDi5FE9hIrnsboBPrf3nmqN6PJvT/lARRLAaaAMfBLMthilEWe fG3ExO7QqSv4UAVe+B6haCvIRSw1IdgX4Tih0npMTvSfzMRkZvL9Wd0xDMOHZcqb81KY9mw+t6GY dBY8eu4vx3l55FOS8dV1BCSgTTta4pmpKmxJHKgHRNpkZdkVEj8f8YzOBOaSzcUHZgnj37mxG37E 8iB0w0vkR4U0eQSLFmfwOMVd3NOIK8qHp8C2kTy835YeETvhofgXitu7T137iTwS7XolCICnauB/ BVf3psA+jRKfL51DKBg5DhwklEz3DcrrYGMasqjJCrG2wFZZyTsGW7crg6Ws3E17pyOHVnwA0Iqq qhqnJ1ywoy7sg59XVDzE/6gOTpl7Ry7AdiCeS5l78Uk29/fi20XL8NNCTTuiOlGQwl+pZEs0WZIs t/IHgwy1PmmdiVbsQmFelEd22J9QmE/SEJmQJDXfQnCCg95BjSKA3mAJSabK7JQxDVWeTSD44d+T sLe/pKeod1ad6HrihsqhCWaqnnMp9YrV6CblxNno4WkixNNeq0k2wHN2l2PqaYQU5/5g5VnatELM b6YdlMCriHemJWQkIbef7G0TrCC0Vnl7V/3e3dFZdfVpj/mBfhDIrhAMMukoDNixgXJ7aMtwuZw/ UoKj5Mun2VJs7+1tiAfRyHk7bcMuBREIuxk2rH0B9jr0iBkRKwEjvzbBJulajUfo59v1uYnxcDrD UJ2V4b4zBWT1EBlq/YyaoZEgDRQ1axzPKZDWRQd8DbwAyiiHLz/oXeHqgmvLB8kZ6w556qipKAYU PdlaKuV9LXHTHd2au7/WdYYMZjcIZ6y9wq6YKek3Io6SNqnG8cKYS3tu8FsFiK/tvh/MphJ7NLY3 poDx1pZCsHlLZMbKaY51xpFVQhOADcXjqixGstFhLKtnDTMIThKmW34tsvWVTPkkfQhlEIu2e/BL TEaT90BEV263GXf+DAHey3mlXj75Rf+QN8JFp9wATxwcqKO/GrzuE9+lDtg43TmzhDkD1t6kR6zY JCWDPU7sp0KJQnwIqt3TVnz7BgYAk0Le2/IVVWr+SY299VUPPGwUcYM33lSXdgx/NShk/P5JiG2n bTBXQxB9n1nXxQNC/S52m4ScYBpdoBg9MKdPSCJqE4FPnrZ5dUCXtywIrEPwWjg2fXIXTng7FCji 78H9mjRCzjbpCEuWNCAre0u94SeXFJUmoNAH/TrbpEnGvcMOr5b4fYBODqP+fKqBpcEcFimKvCHj GAYa2RMt1ER5OWAMhcAYHNbSyX/Dro0EESUEw2wMZU7iOLiLHgyKuLo/624sFLLo0n+LRY4F/0DW lbI/gq8MdBEoGfU208136l9Him2Ln9UeoFERufZaDNiR6Q/L2P+xBvphi6L1VCCJ7qktdwSvO1zI hId+pyk2pLM/WfIEc7sa/XLAoch5aEszjbDMnutGVU3+U4tfKngGTsCefjf93RUfzDOEXdMc8Wrc LlcxWE/em6kWdaUn4CWN+kZlljz3J3cbSqko9EqLi+QM8c2rMHWUJHxbxN2fTHz+wb6DrRC4F+go CzKy53Q2IA2YJiZsHZ9dDRIKG8aPl7LOzU3/qUtE8PJQNZT+olSfmE12L+7nhNHvLevcCXR5bxQ+ 0uwq91d4mY/5BXReeAmeKt/DoU2naV9Opy09Oy/YaTf04DLnpKbU9mEs/dOs8st+lrS85SrNkkq4 q0sc9fDSuj5LTFxT9QY1am/32+EHsIu5SD3T4rnYL4akdk7x3os4hU/D23U5OumCpWedkjrb97P2 KtqoX7DQLkBqow5xWoMNgIqRAKAQnHH95mq9vL71JnTY1lA4GrH6ef8AZDXQj0Fv9Z/dA775GvVA zdE0jxdfNYvccsWRIPjFZFGSiMS+a8+SU0COqpkOTjrkE+QNRVZGpqbWm7gb1XzLEgH0Bi9OuhuK ge+4I2J1hkGEziJMg2QsqI3PJ6jUHJXXIuWHz0un2qT7lrDK5zuWhRfcGWRshms7CKsETXq5zJUx yq1wDU8txKorsZMHnY1333K1RmhjFqSWyvfuPndaJLpXVcX2jnRSBDpGTpP4w6nqtySAmTmX1OEZ WP/wMQ66J0zeRxyGz4U8lbKBgGx4+H7Ay1Ue2/Az5/Wn4Bshls7bq4onEvR9PWXlgDKcj5JXPvT8 F9QgIvlPFecGvOR0wlYxoiEdQ8XRb2EKeOUAe9ABqexEbFKxEL9QnkND6PORrZTrM2SOKUJs8Ymr u4MRdTAf4Kzm4WdXc6HaPxF8sCd1JCUgGSWZW+tKue0xnz9ZfzRNp9GpKdk8VyYajKmIgkZgrejS V/6BbC4DaFZSgq6vzY2eIRv/yvIMx6UnGCzENuhVb/1ztJwjbRdBmZQmVpeguD29O/qHGAiLVqpA IOHdC+z77uk60zBtGOnodJG+d1SrbomaFuXLLtHRDZsoTgiG7yXKCZMaPshgXicgKu0ExbvjehM9 NAzI8CcJXiKUpniSAp2sLSilzXi05XPAIN7BeMkMRC7u8Q0fo/bUxiapRsxcKzT/5glFeWoH1AQ7 E199Eqjn3Zq9JChDqyFYNDoHU5efizOBmMeERsAfUPEizIB3YBthq2BpzToE+G2k0dnKtXQ3NZKn OfoR7km/jrlKvsXDtcuubfyYcG2vjWMMd38eWdRd2ZNfPyeUzrfPV3/r6LZMxQLoeGA+SKGiZGof wvvmHgVNFInPSrk838uohVwkUfZv6Zj2eZkVttlw6Bywi0w7M7RJ3phkrLE6ojQ6lM3zuGl6cRwd Ejcylf10kglptX/iLNlWt33xAdlNUVDf8h/YCjijiz0WmEUndRd7N4EF8GJpur1VXn5BU6AUqfeu RqDKSyiS7GWoWqaJ79KEWRSdGQEN6KwGpTZr4OEkYAEfl5l1ZciIlRGsI2if18JKLdEMDnPpT0nn rE7hAoxNxN1WDaj6d8iJ6UrgqVRT9u1TboaBoftbG9YeeLWlurTW6F2C0nXFc3HaqxYpZeGdjRCD xuoUyuuhpSKygzKUC5jBAqFJvUTJeaU6oyaugt2XrJ7le32BPBDNPPnFb623BMHSSWR5YZoEMGv4 AoL27eR13OWwqI9CSzDOWd0hj5dXBB3qVQLNk3/mIKNDwvg5kpQOD717D3q9BkEI9fXuSgF7Wa20 kJQe23rBOmfUw4+4eL7A1552SV5QSrjsiCIo35vAj2/IYpcthP4QvbPN6Ybr+Ca55Nk5dhWaSmXR 5/2TwW7XdYjg7OUlBjXoZTiLv0w43a3cdC42dvN5mdvCDG6YlfCiZoEU19kc7p9yRsvPm1PI6958 uI5kP+1Syo+hlWkUoCEPojDZ6h0XbzRYuddzgth9cmtfXMkl6tyrBN1CZZfUBgFTuX34Z0LLdQa9 NC18+oM7haWPzYCf3y1Jn+TmxRtsSC20WiiINwfteiEH2sK+iQWgsU7MTq0aECoNts36wDKogho0 sq8ozgyNnPmWcxd3HxkFvzfO+eCQ+GSpCUIaIFpcGlf5HqVi701WRyxpGx6otWRvZ1MALFvsMIGh VmmgjCRSkuRgrft22EX3YNPVhEHyh+2g3AVDBW/7YYS+qERU4z79KJAXLkAvU0MIZvtjpI8seEHB i6nxPmrwYl391Jqt57zUeqXzDT+qVDs990NoR3wxSyRbkmMlC0B8xqQh91/fZGqiNAHGMZ7dwJ7s 8LvKeSVLyW5QNgYbeUHefK8fZDZYGTHnL2YOa/spFT8031qekIxS2wN8zJdFPYAYWINf/ci6mrW0 0E+D6jgVboUi/vCGpmnY2BusqR7mQoqSJvSkL6TfpMdp8iqrHZUHw373mQaJ2HDIQs3EzYx8buVc q1/oxtkn6zmcVeCTPkSu5AH4whVqbiI8X56oFPvPlhaFnwWttel4u5u1nJ/pNaTlakGYZUPJXXbL wP9cXE1N4SJep2kZy+e8RaBQY+jqK6BLJcCKtONX2BEzhXst54skM+b6pBOhNG5VAFygjKwbp4zV 2wiCYG9Oh+yVbI+FqSobcuUeJRBMnLHHZ4jkzlIcGzGbAmrzviMH6PuzFdg14rywQbnH9g1DGvqf ATfIZLg848KYjOvcTVNDpEirFq+aiRERZPxnQBXFGvq5aWSrwnDN+SREtIKMK5zEcQ+zOnDIUBy7 zh4mV3iL84TIcn1DDY/f2sjRKoAUbsv7sgHB8QlDioCh02JyfGrLXzY8Znr2ropjQR+KqkTDknsD hNVXF/1WGDwfXNJJh1c4EdUG4mM9uN5Euv1GZsYcQBFDtSsBY16I8fX04WZ2hXwMTVVGR42q7Pc2 3l4wQtP5OYbq77tE3oq2g/oa2s4KsZkUyToOHaw9nQJhLCuvSYYn9F94MbkxKSnrLa522TAKsG2/ pciskhalQTdaHKnd0c9zPdjrNkwwPTPflqvPygXZySzdicV6S1Rg25XXoYM/ldP8VKEqyc6ReWPR B2RWCZInUql43/SFsw0dTYfeyYIQKQg7FN2SC9LLENA5T6xe78hjCXyXMH60GFciP3U9px0RHl9d hiwLNVXP6Qe5hd41oYbFHiii/irHzr1m4Sjyr4EueHUL9P8jz/OV1L7ylUx3nb9trN3FXWYHLCD7 m/gkq5Fw9jHQTTBHO0fod10jwRe+tm5NzCOtyvEwMmTiVf+rvr5mqgxoq709r3CjmGiY9x+BCbEm d6ryw3jVd4YQulFCGHmUCIL4zozWrGOL0SEQmajCxNSxdme3Xj5HvIJG8mJpBfR8PWBCtzMbWorG BDfvjiIt1kTkeA9eMvomqAK6q4w0VSCQRodFcTvyACrrCOqVUkmh1g6E9xb/FX9c4C6i7Ju8gFZi QxM3gFncL7IlBVor4iJ4O7bU6Ngbsun8rtJ7IXbS0NxHJmcbopBFPPOUj5uoYegAmlg3SIogj5FY 79/nglX8L4OZQK+vv+bAht9y2MCrcbY3OhooWa80W6FGZXKspN9k2BA9R4BiW+0n6EKHU6z/vNgn zREMGhErctzyXcyhtLBrFPVidhAtWJmrS2jXnf6i+3XGNoV4W7XFZBqcWmgSNDkgHNJSg2zLIjNp Wd3DQ55c8dg82VifDH6yGeC2bHWAGMxcfkkuJ826v+4nqVkuccdLgs1Ritod1VYNdKyKXkSoUVsd DKVMo6j3Hb8Z6PW6DAIWprSAemU9u8f57hW6agM2v2BolTyJiEKWebxjSpAKftMO8oFM7YYx79ME nbSzjVdRm9K3pGaI4hpd//3AomRhUy94Iksy3pLRj0S2rCP1koRw7Wzg3EpnMEjjjgGsGrfvcqQC 5nyeKN9Se/90RKFxJkiLgIIz5Z0PBzEATBEa6PS66mAzDSaAZqFJiRWWmxVbzp1jucwu1iBNVPBw r9qNbD0JBIoSY/1L3jbxLMUsx4zpMf0IOmSCoxxYAxtsAJ95RUXosehd8QWPoC9sheLH/ufAWVUF appNRpP/KQxK0rlq5S0b5/RBAJwOSTa+vy8Hgi26d6xCFqZNu+YlSaasUi2m2Jle5LVGoeV8c9vG oxv1N0ypj55+2FfwPTACpg5Zx+lJ811MgP/r7Pi6QDMbodsv8GvWHx5X9l+jifAgLEpQPkLEVmvH mua5t5lvHEwcz9AdG6PtEccy0+Qo69ZPWpNA4OImehX+8rgJhJNu5o3Zl0aazBfWDoVLWrI9XWQ3 9WIBoPO0KdyiWRySsSoW/LNUdZrydUULrcpdet681Hp0FyWMNPQjc3uR//dBLZnyBT7RYJkIVaTw d9atX5kxvrC/vxAKgmWKRRmpnwD8gZ+ZNDBZFC6YRzqk2xrDqn/kU9KSD6BgDjEe2QThPLztagJg DdkItJ+T1sql7JYQHCAFpzD6I2cNYNrlsnecfdYjf5/MRQnYZSaJJER1JuOH1WuDFouxIWkbMA7F OipDASS5nne7NdeOSV9lLEfVqQlAZRrg5PVibeC3KYCxDytgZ1WfviXSNxwspSo6gn6Py/u336Tk fFOyROYl8RVzHmsftdwGrydG7MpLmD73p2QPXvtmUttbsgg1HT2jOBZJMTBNVvbGFumrY1m6hahA 43lVstVqLzV5UldHqolLLQnjz352mRqQBiN+u2Bw4r5cSl0fiG7HEKHzMuCjFA/01IPcEmwDeVmh 2Tn6CJrYBi2DaZ0ONrUYIcptVnW4QeZKBJjP7/qffGIQ7FRsVfmTU2QmNaH+muDTrn0SSorkn4pV dPVjXRi559DydWFmn5saRhMMosXfOBIqw0x3vmbOi/qSohNqgzAb8+60+EzUhPYN8hT0NpAZKR5L FbBvFoBZ+WW63GZYruT6yNv6ZMUfrE+v1BSK66Pe4+2A2Inq+7HpXuVjMiAJraCk8J6ApDMzrohj 3uz+WXpvSRv8myKi6HhFusdgQ15wkFpFuTaOU28WTgyhkg4Ol8HTztTSWYLtAYZwc9W94m0cKr7H qwbs51gBivjue/COXoIX1khKivxQN4C89SCHn1AnJkAQIYARs19hG1NuYVIHJi/ZUmWRB/HVa8F/ nPjUbV3fPlsWQdfPdRDUkq/kaCHg90CHLE3/oC5L12+t7w0hh1brtzpHffGr8xmRuy9kLQkpQwpv 2HuBMWGkH87bklsrwk90heO7E8XWuz9iyWnKdh2BAQMGjWZgfnJdfVS4wZll/GGCGmDibY1BjrGw z9XW64YiKWCiGQhTGG6X51qvkSQ5ZqMxrdz5OWAZ5vOHrzIM+uaV7PA3x4+Om9a/W+hMXFQ3Za5z 9EJ98zXPow3otyzkR0pn9NgEyWpaqhqzqpSuYtVHYE8dHLrYu2/wIoNrwsvZIDyubcNKJc46OHNl WNntmogbpmyJ78RfygZzXyQEKXpDW2jYSIT6iNcimDiNCUWOGHkWNEPXG5sHxlifW3bD0gbnwWAd srUYv+l0pQZVi0snuZIV/dzFcQ4xJ4Yp13OkHIXPlcSzHJ3MxcKrY0A+iCzmNTN2LMIoH+6KpF86 uPAUfg2+bK6EYj163Qeo24VDm1Ge7hE9qrOkLSXgJZG1dqGcFpnQ1lpzXfyEudawjW20El/3WI3T iijYwCYKEFGz05iTXxtH7Df5k0DtRaFwwiyt7kVn0dSlS3ee+zP+Gngm+x4NDeOwsgUrFco/Vn0q 1dpdK/3PPUw8JhuwvHoPOURyZG2ntbz+bRYkb8qQfMdZd97U68GLJReshxtj11jhpxh7p+mvFiF8 UynK6+rcOlC90lBCmRnvTqNJrVejeLrAoEvp6l/PGzfyLrIPgOsu0ZLqwkEEG4QnA5FUqFdKm4Hr u44MwryOR5znbYovWNaqDDFBJF6/abbmRfyxu4yQP3LlDb8UxFeKvIeA3aWNXgc2uOVz5wak9flF RipL6V9ZAuLWOo6piWJusKUGBWD5B5vqqncV09bC9qWilgM7M2pkkxYz/H4zBzdx92vxAERiOTHS 7JuJiLS+uPgT27VpkW80HRkYiqg58gbMTZAaWtJDvwzoswXKXi33nyBSFbbj4l0+qiyJ37SlOw/r mh/OUBpegWlBxeQhO6fEcbHHIXsoFVNL8RIY4Cgw9Qt24zzvGGPe32yFtWDTDFJyX5deNCkIxzzc l+ytjH4wjrRRiDocKdNQf5gc/l63rd5MOtsym+iC+HXewSAZlNs4tX07ysMav0IvCu0f7Wsu1i5Z CvIYfo/lf+XL0UvgtUlspnbW9l4E1hNDY/+gtXLVrB3iQEWzToWTGnmjQYTqiGh9rWkcHeLuj/U1 QUJV7GHkICfCbXb4kZ28EhiVSYWpGlvktCuWPXesdfFd3Ls9qJwXRwTMFrQh7GvkG9VGdyV/5Jya 3xTQLLUpJl9zw5fGZLmU7ZgqcMvDLuIVMdsDfqsCvidmNPMSPnUyQusN4k0W6wLCsAJxcyPsTxXp JZKcX1fJxRYBxPU7AQqdgdtrSOrQATQHeu+o6hNVNKCyHOvg4IV8CAaNg6WFicHQy7bTyAmtHS92 i+U0YGlpf3VfosxbDSej/bpDheISZF2sZQlocVbyabt1JGEf9RTF84P6rVvSKuHGU3fC0/0LdRpU NlgawzRMfFItogzfcaZo/xhV01ZU6EAoyQLC/xM+tBqNBIi79fqyw6cqE7W4xyZ2EFKN+U7MS86a e9IXRixcr7+DAwLnuyxxDIhOrr9rf9nlYX/NfNCZlLPhQO3z4tjdk9mNYoVDHU6IKbsq2i9OTD+x IJ+DdAxRmaoOnIX7T6f0ZiYQsqIhnbc+81P5D0MLetug6CuJOFSPF1vC2ChLQroQ8AwwKlkuCuDC Fzif3+Hx060GSKMBvDI6znuK6Oqv6NP4kpN8QsgQefWMRTtIWZQGXaLKJZCx3EDhx8MRyCRD/oue uD9tqHny2nyUgklk/NOOZYVnCMHhWO+lzZaESO/hhWvEGRMJznmb/KvajYxDQBBnqJRprdE/gg3Q dx7TnJxkcTCUiXsh0sfnrGWGExMogjSEoy2VYjSj5aZ96Kkht7UebJK7JjYrSjsmvIPbM+7uZbr8 MAEoHN/Blydhcr6a6vsiGinnKmLTSWiZ+cLbOUMF8Z34hgEv69Xaa9oGeAuN7FfOgsWILcBbu12f CF92YT/lHfrWKR2dkYDRzAVycZ4G2mufjmiNDvaSJxa5goj5Z64aE6KSk7PQUHZ51uw4o+zPRuDm 65jIhwrszkOyS4rHNlADJsJ1KkGOtiwLQCTimBpVPm1QQRXzihvIuvYWuNacuIBQq4AIOLYtow7P +dJbU9S9DVSAYAbbWi20hAtt2rNY3N/aInTjqz1mKORTB5QQ+dHdmCbK+6UGoZrMgV3pTzN/45/O VdmWDnSrPNza4Xg5oIKtx2kMUiEL0zR8uD51h2YbGfL4X001PwZB+lSkm48ds9n67Vyib/DV/U7A //vTOjuix7RXRtXnSMQcX52yfhmk6EGlab1RFUKAiRGjaYTZN/pI5hH6nkbfDORqTY3YcY0Eyiky PPjIhcSAHkDMOAQCVTqm+BkgJ3/hYRxTDnqZpPcEqMxFsvPONc9J/9p/2eOZfJtET5iNPvHcRWqx VTG6V44pbgifLPNpElqVHNPw2EpMz3nX+9IKuoYQ2TJAV6dbZQPaiWlEpvfMrlbGYJEZ/j6/30op BXZuIHE+JrKZhUFUbn/ZBrZ8V+alsU8lP36cUxyrQxF/ysdLGa7s9gXeaDV2pRxyJsMfWq2jqquW X/nqyOaARapfWh9ptsCvYatbMV+K78t0cKsypj9tHnYWxn1wny+LVzTx/nYey7shfJXGjYaHTEub qwJMXBpY5mBd3t5HXMJc7xv29m2SRKaPFPCV9q912uDHgqb4oGst+jwKbQLqrFJXJSPNxgp9rbra ZvTXyxNxuVZcfTaTYcRUJxfEhujO0SJwY77nogL0hl1u8FqXW0Qy0Tih4OafmaSuB1XlajDV/8iM 8hjKedURrPkAKU3LdzWiPzUPH2suu4RGiupnNY3ITwEevLFL74gte/Eb/UBPPuhPE9COXjH4TL3n 219k8HpB7dJdam6GL2J3OQusVFloYDD9J/o9FIpdwPuAtWWMjyJdaWX4tCsffrUJe2Mk5230GYM6 0JUa025F0UZXOImqssyEb2B/Eg4twUDtvTDtdfFFOaUEe++KFL82j0niaRyRNJh1KaZ0Rj4reB2v Qq6RCr9Y0tE20kZlASvaREwnXK0OKa8mrHl+5AI5AwnJK+/NmVqi+TKftWzbDZTAithay/O2w1IB R+gdGcvOf1zPwuc6QrJVpU1VALA+Win4a3OlXyl+D15cIjZdaaMW+9SRuBZGDswL/UD4xL/sMprw G5sDlUj6ynCGqQnOKNFvfwjkLYGjFOkhRO2fvIxoJFWzz+I/hnyCG7qkpnMQdF5EjZzziT1RxZ8c t84qNs19kOwOmcUatP3z/PPjM2Lg25plrr/uQYtBVg9nLJPGLLb/3hHF9fFis4/+bP4d2xme7asd wYUukSM8vLfndOoAa+OWwBOqYDWaYDcsqg8iSBSYg1aUhhCOkpllbYaRzawfqQEAmQ6wYuZEOy/F yj7FPNh3xUMp6cRcdDkbpPt0shbugiKN1W7rXwF5dFkq50/JTIdue1Z1He1OEXUgn6aToZpaLTKs 9idTjRn6XMkbTMkbz137JG4GdAjvwZfU3Bsl4tPqinUegCm4sxJnrxP31sDSfpeETwHU6r7kKshN soCJtaEQTMwMaHwU41EjRhjD9ueGYzs/XZfRPcFUScJsZsVzAGFcOrsMbnpgHHS7c4UWzsb96YZ9 z2cyxJcQFjic+N4n+c6yN20jMQisS+vFNNCQw7sUP7rrEy7GqAFaD3Stv6tRiQrecm9bAg1+iGkf EnvFbmw8+czNO1UjgdCAE2PDd7K7PNIZuDvd48e3t+4F344EwXnYB9eOQAdTwCl+GSbK+fWCCKtc XRdCvT8GuxpB0ifa1h08LE5NddxSo36jFA/mraeUtqzk440DRSbc3y5sQ0d8eqgw1oy6qBqr0ZoS BFaqmvhmxZZo/YihwZ7beJRxMzbo1SXzD+/HFHXAenynr+J3SJgeayV3jAuJGc4pki6kxQskfOIA qw/jlUuiNYTi+TOwTqCqhIdaxBeYl86J2I0KsEnq716hZ3kB5Wacf0m7/WzLp2Bz9p9ZRUKHMg+6 +nWTponHnFA3S6l3J13OVE82/v6Gw6ouOyPQW4Zg4DyrzyiBq3shHJMuFdtR4evZDosHUVLNrN8c W2h0QLHTAxWioNPVeKJzK+OkUMLAeXjB/KxDsSsuyMVythKbxFyFdBjNzL+1a1krDafAMpDLaTrt kop+Bg8BhQDQp8Mm8T/UmFzEpy4KXUUpl9w8wNwfLjS2FImrTtjlfozd87qDdl83UR6yao82NRYl 5T4CeYm4qcKgNFfh9YkW5TSSlC/GGOJfsDJiVJvwi0YPiCIez9/hslnjHnZtZFPxs8V2RMLd1b2p 8D3Vod2d4Y139yLFLAk0Z5ZNWFz0VtM0HMxHNFH+e5ekYGq1OSj+4kesFIHSES5xqlRo0gLHp4RX okEdZhWzo/xjdvd+5qCLM1UWaHZPiu7CmVTr2XwEKyAh4RiyZsDXhMkVPy2ZjB0QUIkuWruK3ft5 jiYTr8HgdzvnQYoyWDs6eWvPWP0BvjyU+wQqSlLxyAhG3ASN5ZRFDn803NjULqP7k6WqEg+y6F5w fYHmOBWDGnUEdR6YwmSjNmldCjNZz4kUhKVI8tXQJamO7sc5jzEc8BDZ7tu7RandmemOciZDEvFN dZ3ITmvfjvYX9V2qvejQLnPayTmDXAPyvEu1fd96xPqjG2CXIy1q/grduEUb9Ma+vHo47rvNrtBR J0CRM2XPSyEyoT1ojy5sMbhUeYIvlIRmKZ72zaVbxFmjTJYk6jdyS0FcXgYX5wsij+WJ5X5dOvdm ZdFi+Vxd2+KZx9WeAGuRt4pwGaHgpSo2OpDrEI+CTqnMOeGPxjo6w+VYFAPyQgiLKticBEivptFD oYvJo1RS7GPAwQwoYd1e7GvXJUrIZ6Fa5a+tJ0R2Q9ca1/tVJ515gqwQKd+YQTSSvDm58HvgVoxB O8SHlDGae8YMXTdibld3i99ealfJXLu2juQ3dYP1LIlsDb7yV1H9cqqlolqT6ywgN8qzeM4mLPaz ydxhJNj2p+5FjanYpiFD3WGKHb3iIuBMRIVkKyB1ni2QT0VvPhNuPy05P7pKT3Hxf0+duT7IEBLq Oc0Kyw54eDqG19JGWYwsQV/ruwsKI3DMPtddK35t1qRwugf7xE3IglGKtPCjnfokqCZWYOieyEmt EidKaBwuRfpI72IPts6M3BwFKJh3GXGsTmu+22wr6QqJM4DrJsjPMS2zSWXPqhoDrq1A8Yq1RHDY ytIsHEXH91vUPZ5JUgCTPDV3PzaHjnwQY4uOw4NXNjbLyWGCV9AjHKG6q822W+kE5ULZb5uZA5bZ UXrLGiA9uCvUNAfNs8Cuqnz021JuEsaAoba4nUBSaOQDG9808eoNvN4YOwkOLgSFTPrte5yr4UxC XI1ZrlKuH929H2Yr2s4GuOhYpMjL0Oot0gM7rzw5a0MiiKjAglH08zh+YkfJlb6LP1wxRga6NS1q rk3Z61c9qaBxaJcWz/GvN0UoWQMnNrDASIqWaacrCADffgooN65wmufO9A7vopV/BbPIvFifTisF XJvGI9XDu1hImIZQox12avf6Q5KmU++upaC0+EaamSVkayeFjABr3nvQjz/qb2mdxStuNZIk6aJs ca64GboSSH0LvmSy7kfHLcgqNRKwg8O5zbN4YwIUZGD5+EF6WqLFsStshoUdFqSbfbaIL/aSsDZQ 5N8j0sOLkljGiDknjtW8NJFjbCaD9AV7uB2n7Ax7uT1nd3nogB1cH9acs2HP/Xfs8odoZBmDkr20 vEIdUqiv1JDDiarliRr7GB7WENo8m2noHMPwMivDkchjJidNpabM7p/teFjHfoSoIIXZVZjnc5iy 1VfFtLJiP0aM9/a/07RWtbrQTlBNFk5B9iJ9dBsbQTwhxa7hysn22/hD235Gyecrj7yER60E2Mv+ ifXtyymv9pcNhWs9QXJ2kD3STefuAb3wh6r2/2XotrGfKxhlMSgxkLVNICrn7aGmClGFQ/ciWbBN zCE9ZuHAODO+QYIB0kYzDjY9lIbRCNochLi+UdpjpipbyoyPMLbBA3iUcs/I6Xsu8fEWTF76bOhS bjc2Y3jAizfFym0xxBh3149mT7RII2llEuqWHYPanmiuz7RMmXJALcgI4jDgQtVZzSdunVdvgEQ+ bN/7+ntfttXRQhSeejge7zqUoFgIh5Uzl36yuc8B3/+8Uuri+OIn7CI6bSRHQ9nzCLxwCkvuLrQc iY1haQ1Qk7wtVOx6mUCZKgXjgwiKaot9i4aJzn4YAkpuhw+BeRHxFcQJpuI1HIshVMUlZUhNDGjX h+rnZYez6SDlQW79AQ5R0rVTvdD0Eq1F3ij3TBn9ialAvyidMaPtBzWKR9x6aTg+s+ESAFSzMdWV dhK8TBVOu37jN/RuOT5ArQFSeR6Ie5k/mvagX8gDvcn1BSAtEe2MOIT4nU34sQ1GFFiL7lHdpVXi xZZZuALhO4/FGGwxsXeLl4PhuTFJBrtZuwO3AfIb0+jHO/hwnFi+6lfkTgPjG5Gmc+lMsxmcMiWy GFk4cBkJzXO8Gwein+xEt8tnWVZFSBNwd84oPs9W3OGH3/7BYsfkS5opjChHtdIe7nKFTlNZ6k2V 07ZGpH30T3RadoMbHxoIybTylp43oNDxaqBejnH+R7WWYdbhdMHnII30XPosgqZj31vl4kwr90gv peynKXXbmki1zISCRV6cjvIG1Ah92cKeSrke9olbRQ1b0XgVDziK61SWiwKVcKvZDpS7/Y/cHec5 ASXU5+K1qVpf9erYKw6kXuoJiQqy974DaAXEVODYlFNJr6LynedeqaMXKdWkrYov/DxPbfmZLgoh rAI3+5/fg81RE9YVIYcHBmonveEFiUh57lFw7/3AyMmQAqpX3bwVhUCdvkD6QaTjmQ2VNnJV81ld xnJxS9DWgSch2i1BdfRi7Kgu3hUZQeR0Vay9hNNfG492d2ZgryeFDnUrtNom23lrkM9B/WuxpiIw EnxGRObCryPU+NWerSz1R6njPjEy9uGm+LveYWxaYw7oONUa9TK7CJrrm+ib6lK0hqQWZaqF4to4 genzPPfdRINj87m4cLIggw/vqLo82d9uktnAQ4JaYyEmvupsRCEXhAXs2a2WMxbpesLnvTK3PD9Y uIwWRNiu2KbLMz5QM7AJoJp3KIoNxo12WA7KZDfcxJDQOo1u3k2VJuY0mtNHQHn5Rxuv9SEI8xIQ a7UnyaQho9sKChvbu2vPzf9Mmf5m1tVlrNis2+WH9mluoIcCMUjHiGQophoSO8S02My/bUxCOE4f nx+ZLquEzUYEt1FIu1YYLaRD+mONzsx0+pF3k2HwcJUVi7ovaq2tsmC1vSucS6uw3dXgVj+VnUaQ 2Xe2nOdvj7ztvMWjq1C4UhmlpDR7G3niH3RtlJ3tvDfnV+V9iA/5c/gto/Z5LGpOb38sPfK2KzNf l1MpLJHmOTVkCwy/rwe1UMR4ab9urLCrR5xCT5zW+H8FdyGI3uxQR5g5lUFScgBBkqv/1qDWBqJJ hCdvTHaG5tjQtwnxXnBHCqWygeyiqdlibXiRMZP2acuTcW2f/Zbm8N2zrIcnlx76JqZWTMbIVL31 PBnKOJWSqpDG7ldhtRs1WgVHDH7VXpxwiKYmGPIhYML85mt1ma3NBjVm/4MAqmgGygNTSRbbDH0v j6J0U9+RRH0a408g2I7Zko2TQWmSD39mJLKxSxAvNAmvDhbFS+Mo8fhOVtwKR3GWHXSzlTP6rXj2 ldwr8zdTgryHys0jgqTzrtmgR1rO2ijvjru9cdc4ZKEVI5+4aFk76iigikj7k1Qra4Y9hl2C8wYB AbCysE/yUVo6UiwrCT83jAfKS6A8jC9B4Qz/XBSwVC0O66YFJkqgRZn7R8vnyjnv7W+JplBpDsGA LUGsg73zlCMAWTD/qJVqV2HB6mCmx3jRj88RYTHCqhzSgj2cCw0jMlb1ELFyH8o83D3H/evfnNBH YkHQgmsfHMG7aPKfg9ZafkThAp2wwcWwz0vKpaghz/1NytI5KlrclPP2IavAmDuj4glfFemnj2mY ecMsz4YIcUOtLX+sGIxBFOt0BfTiA48McmVey0Oco9T3gKWAQRZOZMxEkNRPnBWNr+E325Xt0D/X z92Y6rJNMKK8GY18xUhnVnt8btv+mqGGeysywca3tbIf1QVK+rPOwwEOBD09j+hHW4fBgiIQKuaG gVDGzLpWoVyXjqvmNtRhnYiEy4vLn4hpApklutazLF6mokVyIZoKv/z6G14AXOBBkKBTY98DcXt7 L0lK+ZABZhyNa6H3jqEtDgGgVNof5swstye4tvf59VXtZX7GUivI8FqCnbZiwKMw+/agzSsOKejp TDnBiiYz7k1Z4S8Y7seKDt5Qr5z7wZWCyU7uuUfrefknGXce/3JtS8fHpftnUCwFuIShUcBRE+Tc SSjPvsKRrtRWZ990rRLHRdXI/GTvS6pIBJrpBBp7hkIURCCi87BRe+tu0Xw46dUYn4GUGkLcY62e +ToujY149wr/7poxxiEaxnqijTa8qAtv2HjUbBRe4O+0a9bT1gW3lmoZk0/F9Nx+Ad+kVqEGXvg0 x7FG/T2V1F1tNdfx5XOr++d5cj/dPncKHYW1YEhGb5TGnkco6P5+nfirlq0GNnOQSfeL5cCu7Aud FDBW1bdZWOnA2oYIfeErOtiT2JZ6deOwBgdkDUvvextfAaSq/NlZVXtXyDhimiKCPLHxSQAddXXe nXttkze6deYVmwlL3ukvzqE29RfbYeHTA55fZf49ccpGob0zmQbmMzhIyWJ+yUfiS/GuijTJ26ie uNOGV+TrDjluZXmcfva9tFmfsTxAY+JagDR7D3aVhK7hEzbDYqtFTWPJTs/+bU05e+vOFXLL/WOg 0BIzKCHOxLUdsnATIfjbBGOgJNmihkatAJefKypA6993AmeqnZ+381s0pMlgBTrWyyMBclV8XsTR 6XiQQ3dKQRAy65A62JV9/uwDe0P5xytZq/rxdJVAQgqRdJr6/7GF1Rd8EhvbM8l8ibZ6Fti63THI MrSC2Pq3vBYxuh6EG+Z+6pMoLIFLUvAuT50BTJrDB2BtjexalPNkPUQceS5mLCzI0g57L+xSLw83 TRlPmEVYMUolbFVMY7qy9yj7PndmbrkbNx2E3uV0PRXdc1fADDvnLZOfjvOh3SOtOLZ0gsU9WPdq 1TpD4wBG6HOmC3OwuPDNaypvaChc0ll3pztMc92RaNbU8tkHfrw1b4UUfn+VEnfPBDhIO/HDVofP QeJi7a0IJ/HNuRFWyFC8TITJAQ+x2W0ervf1TEt8taLKhzIMh6rSO+nSQMCkeh3x/wjI98YFWDfr u9/4TDQO/faQr/WyrBCuYqW8iMrQwy67QTnEQLGMXUb0B0tmvD6210VZ4s38y6jXMHpNg3D80lSz isSJGa/u9+ARiF5uSslHc0fj5tmvtrkjBux0SRi7O2GoXhskLqj8v6GKJRc9lxGcmO12GUwo35VB sRsVqalTu3mlPogN7+aFP4aroY+XQsV7bwm4dBR+GzRagSRM4AfOBz7oYxrQ3wJGy5vafl72FT5O FIHwqxeQnlc5IyfV4huoGBZktJBt6y54YC6ggLQANqzgxs+GDCGIteXi7TkdbW0lDW5xcw7I7MY0 u4CmQl65aydurgfdrpVctBiSUIfNCRqheaizf1Gm6k1hc98VzMNP15BKR51u+HQ//ygDbIDOxKkv Mdn+IcLPgSztO2f2sXVGusq2ytdjsHlrUrnONFWFWGW8/Q0kWKT72nmHhCvKBfnsbt3Bpiky3ON+ nfww0HpomAQYk8UHM6/iPK8rKijBUXo2tapPcMhid8Pz3z8/uopioURhG8Ha/4BmOPZipBP5g1Pn P1uJNe++g+anil6zjva6nmovfCrY6/tvixMMsoZUOrEjo+tl0foP+0kkx1y2BetLGhXfgstfgMXv 3aeQvGIb7o1AKufbK19d9MjwE7syl1zqaTYRYDvqQXO1AwmKMSDse0vwUVkeBia67Xij84lZ/J+z O3FuFvaPz5OlRuL6n8m3w8K6yyaTKcRo+HCT8o1iel66U68t1BG+jkLUsQBkjwuFG4swrR5XXGre X6Rr0CaBU6jHEonO2gqEyd/GqYiRBRwDO/on4+fimv8P1vmhOQeAznr/gbJbjDAMMBygi8JQyCTm e7QhLUDApHod8f8IyPfGCZduF+LbAoJaFGcOol03G+7qmltZ6V2z3fpDcihYhZchFIcjE34Lzp+1 RGOIiOUS7UK+zDiw28gP0qhU5O1HP+vE8YRn0bPpYOH9+piNxuwa1w2c6AcrvEuqVdqc7yimlg32 jAwMVWAqA57QJdfZdUbr3UY6GaktnfFmRvahSPPXiwBW3tnEzK3IQaJu4NWNBP1+ymUwOrQiV/Gz QhGmDQ3LGj5hATbW4VHnxzstpEyKn0cJdUfjUFq6qFhSNL83bP111TND0zz3U5AAneIo5Oy9hjhi 0ijiUksXG7gU7t/1EX+eZnAOQVZ4zR8KBqM8U1GEX92I/Hg84SDL0ea4mEOF1pZAUYdL9E4g5KOq 5noMMaQ2LI4MOjENFBqn0t3Q6f/8MhviiuOGfyCeOHNFyfxOU7p2poujGXJteVCKJlkcJYMJC2hU XEpptEhkzWCsh59XIp648AUXPBauw8yt4x4ia9IYXhC+nXolPi3SUQy3IzkuP59/7uarRQcbScwO dz6PD04cozKZ0/1qMWEs4YNELD5qJrT3THcRSylSsJkc9uGK2+R/arBk/6g4YdUWGPYA1oXmWNQS gCdJNNgn68vhFDS0qNSTffi0c3hiEQRbv/OI8/3fikBtVOEcZh7lLdYifYkH76zPy89x+S+VKntg ZFsVNc+UO/KGLn2liXsK/Svn0w68n+h0CpapJ49Upj598OuK/YVsPVGgEneerOY07W38eNFcmh5K SBpgLPoqdbu/p2UaqkYZAylodl5lvjVEtPRzKIl5DyL6FW64WGgdym8S6TeJDsPlMMcP3fTEMEWA F3005AkYMONjjgtr/Ilp2p/aAy3/qhGxSe1g/9DAi4x2VUE1aY6a6Joqrg8NsN7oUDf0LcYiqD3N +DKlzLZ+iYIZhCi20HnL3AVu2uFohM0T+mh+pV6ZCIat/s2/5bHWBujkPd4R5Cq3ZYUdhzEHobzU qpj0o/+p8gheVZXBUQmCDli4obmqut0/l70/JfjkSapo6ogo+33FLLDTKMOG4T8O7DdAfURGi1uf 39MKizaHJztmpeWFFP6NUsx8s3vmNAEcGVPPCl0u4JXsoaD4a3GDSKnoJw543vazolCvTS+PEXtX +8Cglw+0P1C//ar7IgkkEYQ8LQq8YkIDvJkww71UYhjOPFCas3rlJt/2b7wA8YHDv5qmqHh2TkVR gfGxth6eQJxLW1expebpTaIzNZzleS4ORu6JO74IFauJgLUq/u1No58LPZByw+Rav9rm7emWk3oZ sMcgT1mZZ55rS4EFkchBO4WmFiBe754EpVG6priU2q3xFSV96GIHGXhhEXVBEQRObmcIt2vFY8hj o9a2K4vCk6fCy2wncEC81weACQuBYQp9mrn5wsVPf+B4CVwxm/uH4uAEw2vtJn7rjX3Jjrv1UBGt VxBgNUYZhETkF6/olYDW6e8Mhof4EzUKMt+Coj8KGkeefWTutKMx421d+67bsyfbU/w72Z+l6Hke +AYarj4TIaRgSfH0k5v9l6Dpx4AjkLy3W/Qa3gSpmgcIZ3pb2umGrHnkrRLIiFtJjx+bnP6NJfPY TXko604vwBEpGTx0BWnb6NljaM9WN7uuf17xDaI3vRRzCDBXsuLOvdSiTRs63k1dEsY1tgrYNEaQ OgXH/aVZwjRGcXjBZNliX7+HFo0gEwk45s+1ziTr9WPbxuU/lqbcIbowSrmBY9Myq3RGhpPOE2Z/ jtIYWwrQvABD/AA5CLPrvELHFVitUvPksvQJDzYc4/JXPN9dz/s1NaC427kPVmqtO2HzERXR3ULj dDpnsoBZHktzFgfAuxtEUYmbdflviAc/CuT6E4vStjZtNjK3DBuil7tAktnL4LTPRNMjEwqyyutv T+5EFcKDSRFuCXRBpWD/lOIutgJM+AD1f4uyW1v9hT65HNZ/szbJ3NpDmsTzD7B1WPLFjTU1hHIa 0ylHYP89jS1n7GPVJNgG3lJo3XtB34ugeqZo7cQnNybXIINCYIxuAeADoXOTs5a4xBpf5puo6sA0 lHfbSNE6vnoLvnmBIHdUluBhLLS3YMkWtGpnTm2oY47HuFJc4Sl28yIr2zohzZoSSK6sMjicjmRR Nr/Gz47ztqPRPEXglwrTwm93BGSeb5mzToHxs0/MWMK/BnLooGmHwAo+HkceXNUK91rjIo9eX1R5 GuaRJ6ZSMVH7vKHC3yzjyZPRrN+Y6q8PrQ3U2VmUIT9YeSbQChhVHPuqq+3Neas9Jmct2LkNbPxh E0h/kxo+63Tfm+qaN/99VmtnJRAHKe+dlPvidx3FQHLwZbGs5oihG8Q8/2XElYnI4xiplLUMGtRa vWvp6D7Q0rNS/et034cKMHPg0Xbp0RfIQ3L9jCqGzq/wspwn7N2ol8V1UEoeB1BJrjvbQFKqgTE7 EdiBJERRhUlOWNFTRcm72OzZAIAXqP53Wnw5ZuUFO/fCd7B9nP28h7Lz3TUl2JQ4GY3TVloPELD6 pHcTL4HUx2S+hwkvcP64zB79dImUpwSZGr5XotWqi9KKMk+KRV0SxfahniJxGZd+hH/nsbFu3jMY NLyo4IObtWK0MWvx0XpjgbWL0tzoGOaXAMEZZ/tKKVheBflF39RKFUqhT9wnS1PcBGPMVhijvLEE PMhOqmygEMcoNZI4/fjBBVZlW+3FE3aUdO67kKO40qHeq18D5HxfMoGAPyKrZwotVT18sTCrKzNm 8aAj2bMpou6CEs13J9xFkSgjBOG0p3ayRFu7wt/I/YBW2el/dunWJ7RJo6LL0hzTpii4gjISrKwu uN8g7wNO4tqPdBN7i/ZR2OAmXnY8YP3yzGgzof7z+garYaPB0OxqT7LXws0FFR0eOtdLBSPglGqi WsiFwjMNCkH7cN2Blt4f4yGINcT1D2hAlxPlQmUiVFmBZ9iS2kVK1ZDwukz7w1Q8U1HrX39hzFX5 6XHPwqqMhadoiz2D82hzcnjixiORXS/l63ggstQ6lR+aWPaBRfhdPsVCjEeuhw2J0dMKbjNYzH87 /93WahJf6qLySp0dwNqGCH3hKzuBICD4mSXPxdhaKLYWue2hr6JuonZcTzKIzz9eK9cV3ywaFbw6 0lUe4wqL7ezVvHotZ8m+teudTdG6pyesPcIoux8TJUJuXz3xWDjMSRv4jBXRlLehTWhAqTC/4I7F fOED60aYqPcZR1GcWcwJzHhWCReypyZcPI7NeKjB0jmtEev4DZiLAY/St3QoktoD74JRsb564EwM o1/GVccdts+Zh/OR6Td4dKAM73/eJexlf0feAsupOezYQY9AWgRq3xtOHYg1PgctSkF7PLeud5bv FerptDc1lbgxfk5Q9+Lf4tvLtZpRLhmMkdv8MtaHTsVqNpglKEhR4iaf9SaegmM5J3GyOeiQHxVT qHaVKoY1QPPhfA51QgonoHKq92C7J/vixs/RIODksN6PI2mcSWIMPukzsw9QipXyz84v/0gm7gDg /JoMnyOyFJfnWTxFuP4MDItcNXgQnCym4t7vqQmeXQhvDJ817G77O8Ml+iDOpz/rovr19LpTstD6 mD9r7jCgtlaxEbJKikF/fpwfMd1OUZzIGUACBxX6PDnHYY1xFWeY4xvI3/QdBxzKRYtx7x6baYcp pj4APEr+W+B21W5IZHkF3EfSDvnPInj66WJFGfaSosweQFZe3TzI6KSFC0VsEiv8m4OHP7Ft956x yH479z5OP0IKV+IOmVtdU+XuO+f9xh1DNu6rjgT52HluZasDaJqRm1zD1rqw2gsRgHBmYIs1QJcl Fuie84mqpw20aakmzkxu4q8KS23gzvL/UAamkT7aDLJYBFalXhfLUf7qLSHTzpgXFq5jxJjXXtQU 1t3xFhnRXM7GN64WvI1u4Td4oSPwN3cHwRx1n6rngrIoKMQYei+d+EzHGKjxfNRfqEDTbRcUn4yQ NduU0txr9kFK+4UFFMVreNOGhMjX29DmAyYKJ3D7B+QGrx+m3wn4/GOxu4UWAjt5d6WGKzRIH7K+ elOUku5KJt3WuhbAlfe3oNt0odvA4kVFwic6B6zSB8xXKNZbj6bXryzs1ZJ9CDaA9eDJ+A7NW6PC isC0aKknq1kWwaa0k16bSJH2S1MSgxu0gNCrLXvwYlKCMvzuSqCkvSR0dWFXBT+JHAqUys6QgB1f vwEbU8uG12utP4L3Yz+xdNF49NlP+nDl3GiorgziLbI2iB7sV5rZrxrTeFNbyhDbgqCEh/wGTWJr pUT3mb9ht0ll/nW6x/x6aBLb5cceZSjYCbFBZbN0uRGKGSSjmY/hjI7Ny+kim3BqyqUe6VUTvieQ VsmPlgNyIzYl0ycXQMaTYIvhQmShyBiUaNmzhYOKeRFoQrIU634JESO8Ufvl5bTKh9dLvEcdtq4/ u1UgLlAs6BDFbQ2LypV4V7v4LwCgP1fyKI3Iym/Y3l5ggpF6zB+ersFxvax7P4ffulbGNr3WXmRi CKWlVpgAwe5Z7KLrhjtMW9FpW9WT3bnIv8GPlDs2HY7+s6MrwqpihqwjlWHznk5Z4j68xW8xOIFg XcAuTLGTzAjRVgZeHyENJRQGUdN6YE1/rfXCsTEUpI+ZKVDRj3ExR6uWzD+qY9xlbpZ4CfJ2orUS eVF5pW5qvRBPFhFzWHPcaNuvOa0COuMT0QMzUSpLlcwidQxTX+xLVnHI5uMLXz4NCDuj2f7h/Par HJG+9emZpIW5Zin4b7PTIFfaIPCsmPtSYN2V/XAi+xEsZvlQz+F3oGErgXYeFWfcCsxph+Iz9H1I bKDOyeEjNDnTONstYsyL2w/9ZDRj/E6XJ5ertolH5w+vDvWwrUsF6SMNhLjXaDDDEkMTldqjmZtf OQJxP7di7kmhlAEmCnQ9jf1hDItFEDVNLajGXhLyVhTiSo06C1fG97nhyxiyAQ/BfZ+jGVfpT18/ 9s/AHWzVbqbGX6A33aiN+5zDAlkyllQzvpXBuW9JDnpLyGf7xO+AzivvxwJRpgFZotCDwR9fwWUy afgDro+L2jnNmui0J9T9ERHztNUu3gr8TU2XhufOv1U27NkEolidO3TEckXkBHbXik5OuTyoXolE CuIV6K80ZSgRL3EgDw4ptscg0oPBPSUqSdSBJNJVkuw+PgGFBqmywMc2dCLhACgZ11Bknk1VXVPW 3JBWI99QeFMZ5X/58Vu8gv4r1idxGrgZsHMGzYy5j9yCk5Z3OPbfCvULYuTtlWTuDY8Jz8sYCs1o 4YyGlKoPm0lzGdzWD93xcL2E8gBHxwpmujXr50vTLv93zAeKmBws7qWhDSwoRf38xO08sGxzavWc jlNRW6X8dGKeDVndsXlr00PoHj122yzWcQW6lIioRY2mH8qVBtzEzOsZ/pBTR+RAKdxDZdwXe+41 5Zomi5t6hCMF/DIyzhHuEpdcKh+/79PHlkE9E1y47jN7UvSlFVfdcERXZ8Sdg1ggSyI5vPP2eIX4 SXWaMhn+GMDkKITj/WjsZnob00Z9dLNzhsdCTj943EOIofEWTPFjKKYXX9/A/dQzDwBRYQjNhoG4 5736o3ymaBjpLvxevqnCcAYHMTTgE0RvTtrqqyPlksf1rwMpfdsXHO92ZUKaZnORwK1NgqkzpsEZ X6+Z2TFSeN/kiqZ8o1mr0rf6A3+YSptAzNVpl3aBqIJpAxbH+c8sZdQXjNaGBBF3pc+KIh/dus+f tn4jg01mnh0yYKvaJhBKwDVZUWOOkSFI3OOWnH2YZ73DvqaebUgyz2KuGQ+H0M1BUZBK5x9/Hd87 pvXQfIgJZnblluzek1mHBQO3djGQkZAcGng9VuuU34MmxO4/2a+BkyCx6DdrprB7jVP70GN1WBWd jne3wyLVutC+xv4EYyYGNQbBPElj9Dcmw7NeeHcN+nhw9IxXv0LNzbsRFDRkFS24mlZuAoiM+BFM IQutUKic0aDW+RCOi3NFHWbmzT/l4QvXI7+atGHctuPa5gFtqKRxK0n1hcV9WfMT/lN7gk03feKB +tPtnbM8iPPff+Poh916g2VV17OG3wcXG+st17vidQKVRrLLfZ1FXCiLTlWkcdT5PwrU+kWYuwJF iXA0YXRK4S3FoTFIudiV+Hxs0Wt2evXN73QoPALsXCWPLAf66ulEmvR/WUD1AGUNN927lfrArbvg 90rQBpaNdemSEr8VoHaG4DoMism8gEsbPnaQGdgSP1RnXB+6Mutj1gFFm5StvO27MY88Biu7zj9E tInBDnuM4NaNTcHMwEnGQJYWvssvyyXOtBFsfK+ZymFjdpFMBRuHTSEjbNOxp3qrlQ2mbgfAdRPF +4c5ztFX4aiFE6bNw+6VvEuU6olWwP/4f+enG6hkib+guHM0drYWh+UBtw5PEipRrzns2uZQOrqF 3UzTN3p9oBzt0kh5Y4UGS8VKc06tB06EtPFUk/PljIBRWxBSfRbo9LIUNRHkDTIH68hK7YdgiNNC IOT4+tC05dhkVadu1E78giyQX104TfF/I17Nrg1FnBKgIAW4o2UY/XLk1M3v9IEjUJ6p+a+Gqnb3 F7XK+J62d1dIDy8eN3vAUXblo/aNrKG6PQObW6vJbB6jY7PvI+xJeob2WOAkambP6u9K78fTy0qd VHF21Oc9xifAZJX+7tgwgs+tpH1/pZPGc/9yuRhS0JGho/5cPk9JeEhG1TXC7PoTDbvNh/qPey5l J0pZyK4Kb1capM/sa7hQa/VGJ/C9sj/p97R5dD/L3Q9wwjeDg8CC/nq9GehRGXyNgcsQFmJAzhLd dteUXuRAF0wtbu0/0ERarIcWCT57KZ8G1jx/DskWQ6n2DBiigOCq5Cg5tqR7QMX45+MtdSrx40bx iANR59BviluPffBuFjycMbn/5oBQbH9RONObNtMyHN2wZwRzwyP2fZBiHh1JDucyIcSGMy+OCUP+ FSaghgGcP71MaedrpmUh+6YlRFVVy9yWoQORbXfSMkF5UY+r1lpL+VYF8Nl67s6NVyStXFOa29qU a4Lw8rNlbbUFJxGnzAgWvM3wjamDxissosmDxbxf83LbFmQFjD87UEMCufMHGxpecAdyn1fRhHaH KHujUhMPGqRnRmXS58SSgs4wlk/omGFQXFrlX9HSo50igbEEdw5dv5LsSsA6jGbG9h1XnZeAJidc /TKzflxNwB9jDNION3s6OZs7sxjCZUNWl9FkcIyX3PdcJ7h6yGBz9rM3HFontH5Hs6DOWagt9B7K OkwW/luxfVgnoxSc2ilzTCDmesCo+9NdXOPP5QhtIb4s74KYL/FGd6LJmNP32w636Milngth4t1/ hPYyMSOjB950we3UHmUUFt6hHNsxdffCTX0vM1aol7fuVjOO5fw1jVwNfGAidwNjLXT+KutcpRjQ G50qC4iEwqrC9eb5LQ4McbBA3j3mlYlDLVAUO6ABmv4MfAQ43ZPyFa8Xtg2XGoZqhKQnyJkACiZY wVvV9u8GlC0O47G85tlq8y06WLoR2HlanKkaajaBsQA1OmYV47bwJ+zL6NDkgWVwB0Fg7d4HUX5m yKyZEa0MrXUsVaWkBp+8BXqBlJO7tRo4+zlRClD1nfyNnRfPP0MWkJBzJjlkwQgPnSSqYtqvu3of vHxr4XTnyMUedZQvTjpY2XEtBQ4Z7k/iGLooafP+oikYkgHJFqeeOb3fbA9oY+4QL9YhYVdTeMjb OzmFsBYg3TX7WlTQznKxa1aYq22p/IRpRra37BlE0TKZvFgalvMQrEtcKCTevG3mwDTQwyfey43x jfaRSQV4hvz9E3QzucbpGuRKavwQCvB/MdeK8tTo5gOI4bx3DTXF5PagcvHo5If6ECOfM2B51Fas Mi2/T97R5N7RlcO7jLMd3yN66yBq0gqLmNymS76KmW4DzWJ+r2RbnYMjRcyQlJzALz1yQG3I69gp XRlUCr6STYWrvwYA25HGcHJz8bXe1dpkgPfGxht/rEVi71Cogo7lGXrPWAqm7vk1Cb/YxX5cepa9 7fC0/xMVvtzyYvXVMOog3gVhdG5N0LdMKcWjeZkVZZr/C4ELC/1jKvLlaN72GDnYGXast1VnzGWB C8ySndoM84b+EYbKr3cfvX9y9GZja/rnQs2//4SPOW2bC/pM5wEX1WiMBPMym+kDo7OsvtbZL0o7 FxMiuaqHC2y7hKlr85pUKYupjdQubdeTQLr1VurphxPBZ7pLxauY8rFtG6P/Vu5CGsF+2IIGd89L OkDLRBz/o1nOBNgDillMsui1ycLDX/bFIVre/J1gVnT0Jn8G6nWRmecfxpl8F+dWGP2FhXAASHBk TFn0B3lu8ZjwsWLwf+h2GJ4B7b9KQZRMzNymNoa+9E5U4ROiVjJpUK190VJmQFCGhiYpj9SZUKNU DMQZlVK188Zz4ujqDJWFhzI1q40tLwZgJeNSOWX3uJFLxpAg8CZ0GThbIrHDdEG37MJGsZUD/Zor cTcXgHMkjdjkZsck+pnv4P7VO74Joj/Z/FH29q2nQIk7p0Lp7KIKezUyGvLgRe2Oh713+FAiSnK8 q5GE2+cbL4g16Mma/Trk5DbqpL9S4+IafPMj57a9xF131IS0oQedSmkXWNLLdHNB0ez9gIIX/Hv2 Me/ERlmu30MWPMTwMbm2K/hLT1wOQzHTZ4U6IcbI0nY1W8YEf2kmjIY1WVaBfmbjuJM5A2RXloSl g1OcESJhSyLPQge/hFR0WDWzaLSMPFV23sGANPVaFXP6JfRNfNlr8XFsBbKLEX35Plj/p1Y0bP01 aAplbmRzdHJlYW0KZW5kb2JqCjY3IDAgb2JqIDw8Ci9Qcm9kdWNlciAocGRmVGVYLTEuNDAuMTIp Ci9DcmVhdG9yIChUZVgpCi9DcmVhdGlvbkRhdGUgKEQ6MjAxODEyMTIxMzQxMTMrMDInMDAnKQov TW9kRGF0ZSAoRDoyMDE4MTIxMjEzNDExMyswMicwMCcpCi9UcmFwcGVkIC9GYWxzZQovUFRFWC5G dWxsYmFubmVyIChUaGlzIGlzIHBkZlRlWCwgVmVyc2lvbiAzLjE0MTU5MjYtMi4zLTEuNDAuMTIg KFdlYjJDIDIwMTEpIGtwYXRoc2VhIHZlcnNpb24gNi4wLjEpCj4+IGVuZG9iago1IDAgb2JqIDw8 Ci9UeXBlIC9PYmpTdG0KL04gNTgKL0ZpcnN0IDQ0NQovTGVuZ3RoIDM3MTMgICAgICAKL0ZpbHRl ciAvRmxhdGVEZWNvZGUKPj4Kc3RyZWFtCnjazVptc9y21f2+vwLf6kzGC+IdyGQ6kaXYUWPZHstp 2lE1ndUuJTFZLZVdqo7z659zAO6rJVlW3T615wokCF4c3DdcXK4VlVDCKKGF8cIIq4QXIQmthVZW aCNMQmOFTeh0wldeaC+8TgMdRPBG6ChiCkInoSqTWSnlnTBaKINnxghlA7hbobzCFE6o4CvOpmLE PV6tlBmYiAlNwnSY20VhK0yO9wBI2+CFBSAXnbCY0QOLBaqo8NxhagCzYFWhEzMq5wdgZDg1JrJA pwDMAxVeMNFUwnICQHK4NHjLKbT444xwukrCOeGsDcJhqSapgQvCY83CJawZg7yCkBTEYUQ00Qqw jh5Q8EpMmNQmkTRW6axIgAWmItkI6JVIzlUDFUXyKQqFcRHzQtSqqioABsZKYQaICvJkD9BXFkA0 hlUe4DwfeacG334r5LGQL9p3rZAH4sRDmW+FfN50p+LPf8bj9R8h5PXF+fX84kycyDejrqvnM7xT /6sZ129fPOvHD+S7D9e1wICLeiD321lXz7oFFEnGA/m2XrQ383G9oBxzz1E9aUbP2t/FSYUOX8GY TNRDVcXTAbjM8Tpx57F7s1kLZidQEWGm/FdVpcljxOmgh7E/r0dd084ORl0tnhx8AxOB5SlTRRd1 +rrSf6qqP33Vj2vn4snepD2rxeHsoF40FzOxv0+rcuIfT45G42bWtYvLf3yF8Uft5FMs38zbyc24 XvF8c/BcvGzO5qP5B2hnWGHIu/no+rqeQNKj6aJeYt47PBbnuUM+OxLyVTu/Gk0BcU+ogXz9RnTz m5oXR7w/3uvvj49Gi185elYvpf/9792L4w4wB3I84uD2ugx+4ET9s0fOdL65pqO6G01G3Qi+lZW4 RDDrmr1pM1os59pvp+38+Ho0rpdGtX/09x/Z384n1HmV40wFqzhor0bNLHcp3AJCPZvgliDzH3Q+ v5mNqX5Gk2w7x5ejSTO7yKj1fx+F/p9AYf4nUNh7UDxrb2aF+VAjVCGKVkPj8R8CHDoEZLw8TDro EG6ZdzZuJ3W53aUNBHlGs77ndNhUGD5MCYDYUnJT4ozJgeb0NojG24qInFMWwbgaRgSE6jOgfQKW LcHNluBmdWnMXXhUwj9gH1rsDZ7AQsLu6x6ARxV1fgqP3QJShGb9XXgqZ12Wj4ohZmAuqljpLyaf e9S23gmqjCVxV8S4IazK+kQh+Rh6+0IigJn21UNH7qDfgqgH8hUi4WNnj9AXgxZsKrpk84gA+VGK bN1jpn8I0+X81mRcttLMa2DkSaeMGMmZftzsn2TZz51FobMhA26+iCbjfcy093L7j8wYUq9UR+uF rqFzvZ7srsdffB5nUkVjQybF1XGMRpLo/KMmu4/bUoyWOqb0EBB9GVMpmFZ6lOLu49bPuHSfylUh qgwzZE0+aomezMm1uCn5GRrtf0qm96H/MiIdRu2d/vxpv4xcS3KY83VuCPNJPc/5fXUqf5CHcv8k bzmnPBCMO3Fiw7DCPhFh0DyVuTg0kHXCMcBx0PHNWQeG8mUz+1XuffttZi/38uTyWP709pD05LLr rhffSHnVLYaXzWwyet8Mx+2VXNycXTWd/AUnjxlSG7kYz+TiajGTXwHt4wDjRJcRqyqZIeVkeWah llTlhkabh6OGSKdd+80YOfJ00g7PRotmWn933U6brh023ZfAaCwucB6tzBAn5HwYhKDDZ2OcNPVF O5wPp+11/cd3XT2tz9tZMx5Ryv8+zhT9UPEgXRXtpzAM2n82yF/ay9lwMR4uuvlosZjV8+8ub0bv 62YbpNhMb0059S4PtSW5WR9tRMm+YPA4zgoemZ8j81G2Pysj/VFueR147O6vI0/e5ZoH9Li81jy0 99eJB3peA5b82+uzXygSTnF4pURYPcGRcnxcQ1hAidOkfFf/3pWz7ok2LJVoYUN4EHE8ySEfc8nn 1jgrAtImj5zRhSQ8nocqCgd8TgfhYeEBSZ/JcynBAoZDSh6Dx7jlWPBg4YOlFQ9elcE93kU4SRY8 8b7HKd1FlnRA6GfrIA+HY7+GsGxiYcUjg2MfKyzoD/AuCMnhXR1Yu/FYB/rBMyCDIQ7e8z2ETFZp wBdrqvjMCBZhPJ8HXrMcFE8HJ0jSYYEnhkUfELN4F8GU9SZWSnLdiW5dPYg4npQXg3u2BoIMrPSk smhWjwIFD+E4jWewmkCwyO4N7n2gUFkLo7AhvFw9YuuEh9BtsBBgAA8K3YgUqAj04UxEYRtLgZbW gW8WKutuOL9kYWqWptiy4OWzkhze1Wg11owzA1ojIqzTcW6FdWibBW8Cy18UKnhTLsDlWUtjfQ1G QgUZvKO9yS1lkHH25B0Lf6Fg7fESVyZiw0EnklffRz5UPilUrP2ZzJPYVxRYs/NZ8S6X0yC7ihU4 lxXvIrFhfaz9cb5IRwV/GHw2FjoEeCrPmiExcGzKxOdZLllXVW+YLCz6goNOk1hg5Nq5BsiEcqfu VbEBk/nE1TruJGK57RqU4NhZDz1lx7FVthmODdhySHwWOIbz0lY89V7WGT3X7LLuWINdzUFbdXiP pUbYHs/WyDS2eFO3ng4I27W2PKNMssyNKoQtJQRWKl2xhWToWc5nT3Ih5NbSypcro6tvkGNp1pCj z5ZArWULzH2hEO5NLvWGzCc/Yx9Cq3GlZXU386DGex4BK85VZLxD8st5aG2wssIXLaR0K9GLKlan FcKY6/tilppNrP8iMzoh14hAxPY+csHnWLCihHeiyYRc8lbyfIct7G+5apeLuL4QVqI9K8ght7tk ki6+kMwGJREZ2IPfosB9mDGmsh+TXvdzY8jtpqTUDsFHV+TiGu9tBP+hnfLk5eDXK2Ic2yRuNBu0 1GrWSCotq+irMXmD89kXguv7o8sbWY5Vldqhwi8/U9wwUqZl/+79ygqX7+Ge5ENvvbH4R6a8D2AO s/F+8mud8vPJkg89R91BZkkuv8eyf/lDW3VBl1HgHOlbntxUJgOteESziGgZ4f1s8xYPyyltsTDL yO4K92Xfyh9hBU6Xe8XdgbtWJr+1KkbTHFF7KySu5XMDa+YKd4l8NSNJxS9FoZD3Ky1q7EDRxm3p hWWr15Slk1ZxI/f1mJ238FeduAe6HLPYmhwfS3QyjIUbRH9R2HsZyw3ja0o5xufYTp1WOt8zAmlV dMtnuQ8rMbkv5Zwgv8P4rMo+wRyA+80qOvXvIkmBzao8Rm/G2l3KiVPK0SkyhnBvxjyBCSH3Jcvo RItnepfj433E3Z3yXBG9KWTKO+0t5ME3t/wA1q/aYufwsI1MhghpZz63u8Rsxebdd4PAK3Bus0OB UaK0H1FcX1MjpXUryjviFrkVOXi+z98kbyfaY2QKanlt1pRtbE3cczZpFTWYGjtX9iRfrZ4v7dow 4+NeyD5mjpafMhnV3RatogOfUSfMXK3fiE479ysrLPe0YpLPmU/kB8o+bfY5fc+H72S3/Xip07j2 O37fzDHiVoq9ZxQL34lOfXRZRSf4Qt5dScxjrM6fhEteY3JCz6+epS0+aJnwMwplVHYLYTnk2DJz zmPLqhgRN1fFPZGkIS3SVuyFNXKFu8T8mV+0S6t7SuvohGdR7cZ2u47xy8wjS8eu4kbuoxXm622K vtrYa0of39fJ5PPJMobkOML8UJfDz4qH06cbZ3IeYA/qxXjeXHftvBxoX42u8OSH459/Onj19VEz w6Eap82nhzi7P5+OLhbClnHP8kfapxq+8tR4ps0xf3Jm3XFvMeZ3WmQEA7k/uv6hbi4uO4SENJCc js+e4mgxkIfdaNqM92YX01o8VRpn+66++iucHYff/i1rIphcjuY87z6RIznq5Jkcy4ms5bm8kJey kb/IqbySM9nKa3ldz5t2IudyITt5I9/LP74qgJ83mMTFza+On5LCi5+Pnr3a25DC2/riZjqa3yEK mPhaFCmmtSSSMVuSsHFDEsrrbUlUKzmkO+WwJ5/JfXkgv5fPcxXlL/KlPJKv5Gv5Rh7Ld/LdPy/l T/Kv8mdKbNFBKItfs9zG7bSd4e/V1aiX4fk/SQ1oCuqyTC8/XF/WsyzaX3vhzppZPTxvuq6eQNDt aHzT1bJd90H0/Dw/rc+7cjUn7qU+rqc3C/mb/O2mxdizaR61vCkDqbHFdLS4hN669+2S7Y38F5T4 u/wg/5B/1PNl/6ZSffVZSt17/fLVwddHH+bNaEKlvuT0t6tUIQrCUhmxEBWScWuVVpsKNZVZK7S6 Q5tU+kqb0W5rcz9r8hBaLDp8Cy2OejNvVjqgga8t+8OWEPTnCOHZ3378+4vXG0I4rq+as3Y6uUMO yAyLHBSiYQr6TjmkT8tBaXOPIGjSL3pjfpOFsOntm6K4SxD2Y0Hkz4nN7ALgmvPzGsbJ35yc2Op2 m105TLba4iu9R/TmnA0V0aS4E+ZkWNrwSWRcxS2xba09E2fC7JzZMSHGncVdbvkbdf3bapErJxCw Sbos2rDpttjJqy33Eir6bRcTKulNN+Y21jsyd68NZ8YmqDeckHWgTec7fZB0tWEUetjYSu7BtuQ+ ViUPsBT5PfJcOMQLbGHyEPmvfIl0iHLEPilfw+UhTa/lW+wq8likSo7go0GegQuUIpSxciKUTbJm QUdCXBhzgRVb2TDRpJjRRnnFopic4ZhmZYuFWnn9wOVVco5kXcJXvGRMlzdU9nsRovxw+rEjrgrX IneqgXw2WtS5hnzHdrvlvfylWP6dxPNmvujoMZh3IF+O+hulsYv83Ey6ywV/jJaHLpHzV2S3Bof7 MN2z+W0D8+ojYNUGsLzR98Cc+v8FxsizBraBq9rFlR6B666NZQeV2UW1LS27RhV2UDn7X0SlN2GF uEbld1Hpz0d13/6zA8zdKy6zIS73BcT17wC7U2LmARLjLyQX/DXVDWAA0o8NfzSz/VOaMnKfnwbb i0F5ZfVrSN4dtZNa/rSoy0/yXl/Xs/JZTKwk8X8Lz4mnCmVuZHN0cmVhbQplbmRvYmoKNjggMCBv YmogPDwKL1R5cGUgL1hSZWYKL0luZGV4IFswIDY5XQovU2l6ZSA2OQovVyBbMSAzIDFdCi9Sb290 IDY2IDAgUgovSW5mbyA2NyAwIFIKL0lEIFs8QUQ2NUUyQkI4RkY3Q0RERUEwRTZFMENFMjVCRjM1 QTY+IDxBRDY1RTJCQjhGRjdDRERFQTBFNkUwQ0UyNUJGMzVBNj5dCi9MZW5ndGggMTY4ICAgICAg IAovRmlsdGVyIC9GbGF0ZURlY29kZQo+PgpzdHJlYW0KeNod0NcNwlAMQFGb3kMPnQCh9xLKAkzB EkhIrMAowAZMxA87APf9HF3JkmVZROTrEwkq+MAPovp0hAqo2J6pOjSgCQ60VMQy0w14sIUdrGAN S9hDEEIQhghEIQZxSKi4V7M0CSmwIA0ZyEIO8lCAIthQgjJUoAo1mEIbZtABFxbQhTn0oA8DldPd 3DJUub1NjVQ+Z1Nj1ePF1AQOqg/n/7qXJT/3yxD0CmVuZHN0cmVhbQplbmRvYmoKc3RhcnR4cmVm CjExMjkxMQolJUVPRgo= --_004_6CE55C2C15B84C98874BD27904B6974Btelefonicacom_-- From nobody Fri Feb 22 21:01:59 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 62E09130EE8; Fri, 22 Feb 2019 21:01:32 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.199 X-Spam-Level: X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FuvpyfQC6akO; Fri, 22 Feb 2019 21:01:30 -0800 (PST) Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BE7DC128B33; Fri, 22 Feb 2019 21:01:29 -0800 (PST) X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de Received: from submithost.informatik.uni-bremen.de (submithost2.informatik.uni-bremen.de [134.102.200.7]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id x1N51L8r022935; Sat, 23 Feb 2019 06:01:26 +0100 (CET) Received: from [192.168.217.106] (p54A6C2FE.dip0.t-ipconnect.de [84.166.194.254]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 445wz451dKz1Bp8; Sat, 23 Feb 2019 06:01:20 +0100 (CET) From: Carsten Bormann Content-Type: text/plain; charset=utf-8 X-Mao-Original-Outgoing-Id: 572590866.6634229-17fe8dc0b603461a6e0e2aefd59cfb91 Content-Transfer-Encoding: quoted-printable Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\)) Date: Sat, 23 Feb 2019 06:01:19 +0100 Message-Id: To: suit , teep@ietf.org, din@irtf.org, rats@ietf.org, eat@ietf.org X-Mailer: Apple Mail (2.3445.9.1) Archived-At: Subject: [Rats] Constrained Node/Network Cluster @ IETF104: DRAFT AGENDA X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 23 Feb 2019 05:01:33 -0000 Here is my usual eclectic condensed agenda based on the DRAFT AGENDA for IETF104. Remember that there is still quite some potential for changes. cose/teep and lpwan/t2trg are some annoying conflicts that meet the eye. I also don't like that I'll have to miss the cacao BOF (vs. core), dinrg/suit, coinrg/git. All times are CET (Central European Time) =3D=3D UTC +1 hours. Note = that there is no daylight saving time in effect at the time in Europe (this starts on the Sunday *after* IETF). (You can get pure UTC times on https://datatracker.ietf.org/meeting/agenda-utc, for those who want to listen from remote.) Gr=C3=BC=C3=9Fe, Carsten SATURDAY/SUNDAY, March 23/24. 2019 -- Hackathon (including various interops) (Grand Hilton Ballroom) -- Sun 1700-1900 Welcome Reception - Congress Hall 1/2 -- Sun 1800-2000 Hot RFC Lightning Talks - Congress Hall 3 MONDAY, March 25, 2019 0900-1100 Morning Session I Congress H 3 ART dispatch Dispatch WG - Joint with ARTAREA Congress H 2 INT 6man IPv6 Maintenance WG Congress H 1 IRTF pearg Privacy Enhancements and Assessments = Proposed Research Group Karlin 3 RTG bier Bit Indexed Explicit Replication WG 1120-1220 Morning Session II Congress H 1 INT *** 6tisch IPv6 over the TSCH mode of IEEE = 802.15.4e WG Congress H 2 SEC tls Transport Layer Security WG Karlin 1/2 TSV rmcat RTP Media Congestion Avoidance = Techniques WG 1350-1550 Afternoon Session I Karlin 1/2 INT *** 6lo IPv6 over Networks of = Resource-constrained Nodes WG Congress H 2 IRTF irtfopen IRTF Open Meeting Congress H 3 SEC secdispatch Security Dispatch WG 1610-1810 Afternoon Session II Congress H 2 ART httpbis Hypertext Transfer Protocol WG Congress H 3 IAB smart Stopping Malware and Researching Threats Karlin 1/2 INT dnssd Extensions for Scalable DNS Service = Discovery WG Berlin/Brussels IRTF qirg Quantum Internet Proposed Research Group Karlin 3 RTG *** roll Routing Over Low power and Lossy = networks WG Athens/Barcel. SEC oauth Web Authorization Protocol WG Congress H 1 TSV tsvwg Transport Area Working Group WG TUESDAY, March 26, 2019 0900-1100 Morning Session I Karlin 3 ART uta Using TLS in Applications WG - 1000 - = 1100 Karlin 1/2 INT homenet Home Networking WG Congress H 3 RTG rtgarea Routing Area Open Meeting Berlin/Brussels SEC *** cose CBOR Object Signing and Encryption WG Grand Hilton BR SEC *** teep Trusted Execution Environment = Provisioning WG Congress H 2 TSV quic QUIC WG 1120-1220 Morning Session II Berlin/Brussels INT *** lwig Light-Weight Implementation Guidance WG Congress H 1 IRTF qirg Quantum Internet Proposed Research Group Athens/Barcel. RTG bier Bit Indexed Explicit Replication WG Congress H 3 TSV tsvwg Transport Area Working Group WG 1350-1550 Afternoon Session I Berlin/Brussels ART *** core Constrained RESTful Environments WG Congress H 3 OPS anima Autonomic Networking Integrated Model = and Approach WG Congress H 2 SEC mls Messaging Layer Security WG Grand Hilton BR TSV tsvarea Transport Area Open Meeting 1610-1810 Afternoon Session II Congress H 1 INT *** lpwan IPv6 over Low Power Wide-Area Networks = WG Congress H 3 IRTF*** t2trg Thing-to-Thing Congress H 2 SEC tls Transport Layer Security WG WEDNESDAY, March 27, 2019 0900-1100 Morning Session I Karlin 1/2 IRTF*** dinrg Decentralized Internet Infrastructure Congress H 3 RTG detnet Deterministic Networking WG Berlin/Brussels RTG rift Routing In Fat Trees WG Grand Hilton BR SEC *** suit Software Updates for Internet of Things = WG Congress H 2 TSV quic QUIC WG 1120-1320 Morning Session II Grand Hilton BR IRTF cfrg Crypto Forum - 12:20 - 13:20 Grand Hilton BR SEC acme Automated Certificate Management = Environment WG - 11:20 - 12:20 1500-1700 Afternoon Session I Grand Hilton BR OPS wgtlgo Technology Deep Dive - Modern Router = Architecture BOF THURSDAY, March 28, 2019 0900-1030 Morning Session I Karlin 3 ART *** cbor Concise Binary Object Representation = Maintenance and Extensions WG Congress H 3 IRTF panrg Path Aware Networking RG Athens/Barcel. RTG babel Babel routing protocol WG Congress H 1 SEC mls Messaging Layer Security WG Berlin/Brussels SEC oauth Web Authorization Protocol WG 1050-1220 Morning Session II Congress H 3 GEN git GitHub Integration and Tooling WG Congress H 1 IRTF coinrg Computing in the Network Congress H 2 IRTF maprg Measurement and Analysis for Protocols 1350-1550 Afternoon Session I Congress H 1 INT intarea Internet Area Working Group WG Grand Hilton BR SEC *** rats Remote ATtestation ProcedureS BOF 1610-1810 Afternoon Session II Grand Hilton BR ART httpbis Hypertext Transfer Protocol WG Karlin 1/2 INT *** paw Predictable and Available Wireless BOF Berlin/Brussels OPS v6ops IPv6 Operations WG Congress H 2 SEC saag Security Area Open Meeting FRIDAY, March 29, 2019 0900-1030 Morning Session I Congress H 3 ART *** core Constrained RESTful Environments WG Grand Hilton BR INT 6man IPv6 Maintenance WG Berlin/Brussels SEC cacao Collaborative Automated Course of Action = Operations for Cyber Security BOF 1050-1250 Morning Session II Athens/Barcel. INT ipwave IP Wireless Access in Vehicular = Environments WG Congress H 1 IRTF icnrg Information-Centric Networking Grand Hilton BR SEC *** ace Authentication and Authorization for = Constrained Environments WG Karlin 1/2 TSV taps Transport Services WG From nobody Thu Feb 28 16:02:11 2019 Return-Path: X-Original-To: rats@ietf.org Delivered-To: rats@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 72FAC12DDA3; Thu, 28 Feb 2019 16:01:42 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Spencer Dawkins To: "The IESG" Cc: rats-chairs@ietf.org, rats@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.92.1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <155139850240.28693.4294203273694006667.idtracker@ietfa.amsl.com> Date: Thu, 28 Feb 2019 16:01:42 -0800 Archived-At: Subject: [Rats] Spencer Dawkins' No Objection on charter-ietf-rats-00-02: (with COMMENT) X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 Mar 2019 00:01:43 -0000 Spencer Dawkins has entered the following ballot position for charter-ietf-rats-00-02: No Objection When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/charter-ietf-rats/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- I'd be a Yes if there was a SEC AD yes. Thanks for starting this. From nobody Thu Feb 28 18:34:38 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D406B130EAB; Thu, 28 Feb 2019 18:34:28 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mit.edu Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id m--4yzRNGPm4; Thu, 28 Feb 2019 18:34:26 -0800 (PST) Received: from NAM01-SN1-obe.outbound.protection.outlook.com (mail-eopbgr820114.outbound.protection.outlook.com [40.107.82.114]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AE66A126C15; Thu, 28 Feb 2019 18:34:26 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mit.edu; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Bfz0/je7b1Chqal5F8Qz2aFMJUYVKvOmBJNl9kh5koM=; b=grH6AB7eg1bbBicgE/MHrSU8ESEDqF9qTfRDZveYWd3AwY56OOb5RnaH3IMBrEYXG/EyT2vVE3kYLwz3WJetDQujGT9zkbjuyDNHXyiQbiv3Xny1y3iuxhQIem4ooFAGa7hpaQzNA8E+FuAqnUAj0KnIo/kYziWQ6dORjjNOR00= Received: from DM5PR0102CA0008.prod.exchangelabs.com (2603:10b6:4:9c::21) by BN8PR01MB5604.prod.exchangelabs.com (2603:10b6:408:be::20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1665.15; Fri, 1 Mar 2019 02:34:24 +0000 Received: from BY2NAM03FT014.eop-NAM03.prod.protection.outlook.com (2a01:111:f400:7e4a::209) by DM5PR0102CA0008.outlook.office365.com (2603:10b6:4:9c::21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.1665.15 via Frontend Transport; Fri, 1 Mar 2019 02:34:24 +0000 Authentication-Results: spf=pass (sender IP is 18.9.28.11) smtp.mailfrom=mit.edu; ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=bestguesspass action=none header.from=mit.edu; Received-SPF: Pass (protection.outlook.com: domain of mit.edu designates 18.9.28.11 as permitted sender) receiver=protection.outlook.com; client-ip=18.9.28.11; helo=outgoing.mit.edu; Received: from outgoing.mit.edu (18.9.28.11) by BY2NAM03FT014.mail.protection.outlook.com (10.152.84.239) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.1643.13 via Frontend Transport; Fri, 1 Mar 2019 02:34:23 +0000 Received: from kduck.mit.edu (24-107-191-124.dhcp.stls.mo.charter.com [24.107.191.124]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.14.7/8.12.4) with ESMTP id x212YKCi015514 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Thu, 28 Feb 2019 21:34:22 -0500 Date: Thu, 28 Feb 2019 20:34:19 -0600 From: Benjamin Kaduk To: Spencer Dawkins CC: The IESG , , Message-ID: <20190301023419.GN53396@kduck.mit.edu> References: <155139850240.28693.4294203273694006667.idtracker@ietfa.amsl.com> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Disposition: inline In-Reply-To: <155139850240.28693.4294203273694006667.idtracker@ietfa.amsl.com> User-Agent: Mutt/1.10.1 (2018-07-13) X-EOPAttributedMessage: 0 X-Forefront-Antispam-Report: CIP:18.9.28.11; IPV:CAL; SCL:-1; CTRY:US; EFV:NLI; SFV:NSPM; SFS:(10019020)(346002)(376002)(136003)(396003)(39860400002)(2980300002)(199004)(189003)(33656002)(55016002)(86362001)(6306002)(106466001)(4326008)(126002)(8676002)(106002)(53416004)(229853002)(7696005)(52396003)(4744005)(97756001)(88552002)(246002)(6246003)(478600001)(8936002)(2906002)(426003)(11346002)(446003)(23726003)(104016004)(50466002)(47776003)(956004)(6666004)(356004)(476003)(26826003)(1076003)(75432002)(336012)(54906003)(316002)(36906005)(786003)(46406003)(486006)(186003)(76176011)(5660300002)(26005)(16586007)(305945005)(6916009)(966005)(58126008)(18370500001); DIR:OUT; SFP:1102; SCL:1; SRVR:BN8PR01MB5604; H:outgoing.mit.edu; FPR:; SPF:Pass; LANG:en; PTR:outgoing-auth-1.mit.edu; A:1; MX:1; X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-Correlation-Id: 9667f8d3-f5d1-4d70-1207-08d69dee6ac9 X-Microsoft-Antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600127)(711020)(4605104)(4608103)(4709054)(2017052603328)(7153060); SRVR:BN8PR01MB5604; X-MS-TrafficTypeDiagnostic: BN8PR01MB5604: X-MS-Exchange-PUrlCount: 1 X-Microsoft-Exchange-Diagnostics: 1; BN8PR01MB5604; 20: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 X-Microsoft-Antispam-PRVS: X-Forefront-PRVS: 09634B1196 X-Microsoft-Exchange-Diagnostics: =?us-ascii?Q?1; BN8PR01MB5604; 23:tYu1MlsYOs5ZiDsEOPAmME0A0n1rcr0bpCCJdXRUp?= =?us-ascii?Q?TkdgprPG215axp9Wiel1rZdADwbQMgOP/gwPn3/8f2rYHBALCtWSX75pe6Hl?= =?us-ascii?Q?vlNmp9x81RF9ahBVQ9lcbUPXiEJRT/n8sNjtrP0Ckaizu5SnuCBKGisA5j26?= =?us-ascii?Q?WQ1j+ziiOrOjwQ2Hg4QwWjsXyAzwwPQ3a41GwUpPq7ji7rmr7l2esmVV0/We?= =?us-ascii?Q?NGqql1PUt0b+S42DNuRqHZsUS7omeoElp01faFAfHL34kEYbcbVpOnqq+XoX?= =?us-ascii?Q?CqEqIXuDfYXOpATBe8w+hu4ihmSH4jG9Ei2qTIpzZKoEu16aAL4dpwZYLoQk?= =?us-ascii?Q?fxYPCchB/VYzFJntfd+EXz1eMWdrNz77TlRJQ6uks+zhzIgHlZThceRHUHaD?= =?us-ascii?Q?aA7lg9Rb9XPWdLcWTab4bq3+k+zsqyjProow2jdL5EPryJTeTL/yoqWFCRgR?= =?us-ascii?Q?Wj7ToOqQe5Hd7rjgOLqMv+/wcCIBjAgIl4p6NzuQo98rLbe9BmU/DzD3DQMJ?= =?us-ascii?Q?yTwbRYst+Jlzst6P3H3Urexy3YgezrOwKlZJzqfOOkmYvomz7A+seskxrz+g?= =?us-ascii?Q?h9TEDFAUB66lMOc6+qj7UXqVn+Fg3PP3QJspvg4l4t4xpzGWgniRstDSas4U?= =?us-ascii?Q?WRltsmVeJHhpqzZ2TxM06kVavIdpH/YjZ84f5qWxNI7w3m0SDRF5efEPx/1y?= =?us-ascii?Q?kgNeRJBfIwz5c0408qvOxCjmvYGODo6ubnEjwUmc5dDf70B0Zr4mzCt7nvLF?= =?us-ascii?Q?IdWuaA0IDk2D1hxDw2FR7EFS9oeni1DkaD8+zF5g02Vc2cfSX1RLRhd3vQts?= =?us-ascii?Q?3zHyxRP1LFZUY3zJJGLrxblq0QDUkUdkVhiJTDu2oUaf5oA5UX1on8DELSWg?= =?us-ascii?Q?hspUl1gF+mbFx8CBt2BBAyFaJPmPIxc3CsMpPoQ8hSiecWv49iftSU3Z13wt?= =?us-ascii?Q?jv+dbu3y3+sw9qmzX/ouS0FYKmkI1c+JZOyqJCqeldzkqEi7hER3Hsx1FNAz?= =?us-ascii?Q?vWe9wKTklJhoapVgTiXSKfvXqmi0/n+gNOjIJr9JuU4kEcqH4qQR+oD2lJ7k?= =?us-ascii?Q?H0KxqkNyPxFnO9gpc7iecN8sfih5TqcF7EjMDChS8o1LR6txmO43+DM1W4cT?= =?us-ascii?Q?8qlcQ4r/sm7KvvbUd1POCXKw5UL9Nin98J25zSRcmHRUWSYdzeihMNPaPgGr?= =?us-ascii?Q?+zQBMO+2Fks0f9QtL1o8uTrsIYMAkNpKlTsPPY/smsuhMJ7a1vKobYS7bITC?= =?us-ascii?Q?2nzE5teOKMNJ++S2xoebEbLRclYHM/wfW18mggkdYLgoQ9IAl0M/webbNeoq?= =?us-ascii?B?dz09?= X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam-Message-Info: dUaQ52JDC4bcWey7EZ7FXg9Is4mh2v1SrTZwEKHS45krLy8vYkyewh1TDgsLuvICUDIaLLTioVMQ0uWT9kfaG3tu/duBXmcgVq4g5sRA0CQru+bt+kHkSmTMpS6MB/nqp4fgj3PA21Rge6pNIDWJoTsCTAIkLTCCcy77vwvqkGu6NQ8Q3GnyHHc0fB/9lQkVFOn4LpFCC4xy06Qz9gCLbv1ggAu8OzVc71eK/b8WABed+7Gmx6TIgA2hSsxYg7Vn1UctyudOVd7h81Blm0kFreYUcqBrw37n55IZNhbjhF6e6NcRB4MuWm5g+iCSyw9SASasKkBuHhjyN6DezqUD0k8yqrVnd7CTVQ5wNJvld47xJP4dsB+ayxkR7kHucy+ljhbmyK+LKQtLR1+KsXXKOHltVoXIVBXeZ0XARsULzXo= X-OriginatorOrg: mit.edu X-MS-Exchange-CrossTenant-OriginalArrivalTime: 01 Mar 2019 02:34:23.5800 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 9667f8d3-f5d1-4d70-1207-08d69dee6ac9 X-MS-Exchange-CrossTenant-Id: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=64afd9ba-0ecf-4acf-bc36-935f6235ba8b; Ip=[18.9.28.11]; Helo=[outgoing.mit.edu] X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN8PR01MB5604 Archived-At: Subject: Re: [Rats] Spencer Dawkins' No Objection on charter-ietf-rats-00-02: (with COMMENT) X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 Mar 2019 02:34:29 -0000 On Thu, Feb 28, 2019 at 04:01:42PM -0800, Spencer Dawkins wrote: > Spencer Dawkins has entered the following ballot position for > charter-ietf-rats-00-02: No Objection > > When responding, please keep the subject line intact and reply to all > email addresses included in the To and CC lines. (Feel free to cut this > introductory paragraph, however.) > > > > The document, along with other ballot positions, can be found here: > https://datatracker.ietf.org/doc/charter-ietf-rats/ > > > > ---------------------------------------------------------------------- > COMMENT: > ---------------------------------------------------------------------- > > I'd be a Yes if there was a SEC AD yes. Thanks for starting this. Sigh, there is one now. "But this one is not my fault -- the secretariat created the ballot, not me" I think. Maybe. -Benjamin