From hadriel.kaplan@oracle.com Tue Sep 3 12:57:50 2013 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5BD7A21E804B for ; Tue, 3 Sep 2013 12:57:41 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.532 X-Spam-Level: X-Spam-Status: No, score=-6.532 tagged_above=-999 required=5 tests=[AWL=0.067, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zEp10mAV1iH3 for ; Tue, 3 Sep 2013 12:57:27 -0700 (PDT) Received: from aserp1040.oracle.com (aserp1040.oracle.com [141.146.126.69]) by ietfa.amsl.com (Postfix) with ESMTP id 44FD011E8108 for ; Tue, 3 Sep 2013 12:57:27 -0700 (PDT) Received: from acsinet22.oracle.com (acsinet22.oracle.com [141.146.126.238]) by aserp1040.oracle.com (Sentrion-MTA-4.3.1/Sentrion-MTA-4.3.1) with ESMTP id r83JvP6C011929 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK) for ; Tue, 3 Sep 2013 19:57:26 GMT Received: from userz7021.oracle.com (userz7021.oracle.com [156.151.31.85]) by acsinet22.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id r83JvOXN003227 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for ; Tue, 3 Sep 2013 19:57:25 GMT Received: from abhmt106.oracle.com (abhmt106.oracle.com [141.146.116.58]) by userz7021.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id r83JvOmt025174 for ; Tue, 3 Sep 2013 19:57:24 GMT Received: from [10.1.21.34] (/10.5.21.34) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Tue, 03 Sep 2013 12:57:24 -0700 From: Hadriel Kaplan Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Date: Tue, 3 Sep 2013 15:57:22 -0400 References: <20130903194851.29838.75024.idtracker@ietfa.amsl.com> To: "stir@ietf.org WG" Message-Id: Mime-Version: 1.0 (Mac OS X Mail 6.5 \(1508\)) X-Mailer: Apple Mail (2.1508) X-Source-IP: acsinet22.oracle.com [141.146.126.238] Subject: [stir] STIR FAQ: draft-kaplan-stir-fried-00.txt X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 03 Sep 2013 19:57:50 -0000 Howdy, I've written up a FAQ-type thing for new STIR participants, since there = have been over 1500 emails in the past 3 months on this mailing list and = it seems unreasonable to expect new folks to read through them all. = This is just one individual's view, and an individual draft not meant = for RFC publication. The HTML version is available here: http://tools.ietf.org/html/draft-kaplan-stir-fried-00 -hadriel > A New Internet-Draft is available from the on-line Internet-Drafts = directories. >=20 > Title : Secure Telephone Identity Revisited (STIR) = Frequently Repeated Information and Explanation Document (FRIED) > Author(s) : Hadriel Kaplan > Filename : draft-kaplan-stir-fried-00.txt > Pages : 37 > Date : 2013-09-03 >=20 > Abstract: > This document is a type of FAQ (Frequently Asked Questions) for new > STIR Working Group participants. Since its inception three months > ago there have been over 1,500 emails on the mailing list, before > the WG was even formed. Some of the emails repeat topics, because > newcomers cannot be expected to read all previous emails in the > archive. This document is an attempt to capture some of the > previously asked and answered questions. >=20 > This document is written by one individual, is not intended to be > published as an RFC, and is only meant as a temporary FAQ while the > Working Group begins. The document attempts to provide both high- > level information for non-experts, as well as low-level information > for protocol experts. >=20 >=20 > The IETF datatracker status page for this draft is: > https://datatracker.ietf.org/doc/draft-kaplan-stir-fried >=20 > There's also a htmlized version available at: > http://tools.ietf.org/html/draft-kaplan-stir-fried-00 >=20 >=20 > Please note that it may take a couple of minutes from the time of = submission > until the htmlized version and diff are available at tools.ietf.org. >=20 > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ >=20 > _______________________________________________ > I-D-Announce mailing list > I-D-Announce@ietf.org > https://www.ietf.org/mailman/listinfo/i-d-announce > Internet-Draft directories: http://www.ietf.org/shadow.html > or ftp://ftp.ietf.org/ietf/1shadow-sites.txt From pkyzivat@alum.mit.edu Tue Sep 3 13:41:21 2013 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A399E21F9A98 for ; Tue, 3 Sep 2013 13:41:21 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.339 X-Spam-Level: X-Spam-Status: No, score=-0.339 tagged_above=-999 required=5 tests=[AWL=0.098, BAYES_00=-2.599, FH_RELAY_NODNS=1.451, HELO_MISMATCH_NET=0.611, RDNS_NONE=0.1] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 88Vhx7odQxri for ; Tue, 3 Sep 2013 13:41:17 -0700 (PDT) Received: from qmta10.westchester.pa.mail.comcast.net (qmta10.westchester.pa.mail.comcast.net [IPv6:2001:558:fe14:43:76:96:62:17]) by ietfa.amsl.com (Postfix) with ESMTP id 4CC1611E8126 for ; Tue, 3 Sep 2013 13:41:15 -0700 (PDT) Received: from omta09.westchester.pa.mail.comcast.net ([76.96.62.20]) by qmta10.westchester.pa.mail.comcast.net with comcast id Lbgp1m0020SCNGk5AkhEnQ; Tue, 03 Sep 2013 20:41:14 +0000 Received: from Paul-Kyzivats-MacBook-Pro.local ([50.138.229.164]) by omta09.westchester.pa.mail.comcast.net with comcast id LkhE1m00u3ZTu2S3VkhEKe; Tue, 03 Sep 2013 20:41:14 +0000 Message-ID: <52264969.8080606@alum.mit.edu> Date: Tue, 03 Sep 2013 16:41:13 -0400 From: Paul Kyzivat User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:17.0) Gecko/20130801 Thunderbird/17.0.8 MIME-Version: 1.0 To: stir@ietf.org References: <20130903194851.29838.75024.idtracker@ietfa.amsl.com> In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=comcast.net; s=q20121106; t=1378240874; bh=7o9HAG//twPECeUNfzHTHi/cHIDiVIbJ16EVcPAZBlo=; h=Received:Received:Message-ID:Date:From:MIME-Version:To:Subject: Content-Type; b=n0Xa5gSE4eQIQ//YP4qjO4sedcj4Y2wYuWIqZDh2ecLOpi8v8uGIQ9aLjwep86blm UksPAKLxvRUIWS2r0e2VxqYGMLDAH1tUkXRzXIyolUy7DcPpAobmlaom5XoLpoFwrV 4NUfQwPXe6ZCDwPVyYZ/MsFxlXcXPb8zvB4iUDx4xM62k0tfrmRNtyX1f4yDoLlXqH eGjQWevQPRhh/26jLYkAMw6zHghVpb3Jn2cXwjEAsu9yAGPgDGFDmq0ivsI7VedwqA B8IoUpi0RlI+jSo8iWXoR54dJ9TqWo0YgC2/o4wAHo2deK45AmfwVmLSFGIYvyZTEk UiSqwYyaewd5g== Subject: Re: [stir] STIR FAQ: draft-kaplan-stir-fried-00.txt X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 03 Sep 2013 20:41:21 -0000 Hadriel, You are the current champion of name-coining! I skimmed the document, and have no complaints. (With a more careful reading maybe I would.) This should be a useful document to have. Thanks, Paul On 9/3/13 3:57 PM, Hadriel Kaplan wrote: > > Howdy, > I've written up a FAQ-type thing for new STIR participants, since there have been over 1500 emails in the past 3 months on this mailing list and it seems unreasonable to expect new folks to read through them all. This is just one individual's view, and an individual draft not meant for RFC publication. > > The HTML version is available here: > http://tools.ietf.org/html/draft-kaplan-stir-fried-00 > > -hadriel > > >> A New Internet-Draft is available from the on-line Internet-Drafts directories. >> >> Title : Secure Telephone Identity Revisited (STIR) Frequently Repeated Information and Explanation Document (FRIED) >> Author(s) : Hadriel Kaplan >> Filename : draft-kaplan-stir-fried-00.txt >> Pages : 37 >> Date : 2013-09-03 >> >> Abstract: >> This document is a type of FAQ (Frequently Asked Questions) for new >> STIR Working Group participants. Since its inception three months >> ago there have been over 1,500 emails on the mailing list, before >> the WG was even formed. Some of the emails repeat topics, because >> newcomers cannot be expected to read all previous emails in the >> archive. This document is an attempt to capture some of the >> previously asked and answered questions. >> >> This document is written by one individual, is not intended to be >> published as an RFC, and is only meant as a temporary FAQ while the >> Working Group begins. The document attempts to provide both high- >> level information for non-experts, as well as low-level information >> for protocol experts. >> >> >> The IETF datatracker status page for this draft is: >> https://datatracker.ietf.org/doc/draft-kaplan-stir-fried >> >> There's also a htmlized version available at: >> http://tools.ietf.org/html/draft-kaplan-stir-fried-00 >> >> >> Please note that it may take a couple of minutes from the time of submission >> until the htmlized version and diff are available at tools.ietf.org. >> >> Internet-Drafts are also available by anonymous FTP at: >> ftp://ftp.ietf.org/internet-drafts/ >> >> _______________________________________________ >> I-D-Announce mailing list >> I-D-Announce@ietf.org >> https://www.ietf.org/mailman/listinfo/i-d-announce >> Internet-Draft directories: http://www.ietf.org/shadow.html >> or ftp://ftp.ietf.org/ietf/1shadow-sites.txt > > _______________________________________________ > stir mailing list > stir@ietf.org > https://www.ietf.org/mailman/listinfo/stir > From richard@shockey.us Tue Sep 3 17:34:49 2013 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3722F21F9F9D for ; Tue, 3 Sep 2013 17:34:49 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.188 X-Spam-Level: X-Spam-Status: No, score=-102.188 tagged_above=-999 required=5 tests=[AWL=0.077, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HMZGyiTxL3ve for ; Tue, 3 Sep 2013 17:34:44 -0700 (PDT) Received: from oproxy7-pub.mail.unifiedlayer.com (oproxy7-pub.mail.unifiedlayer.com [67.222.55.9]) by ietfa.amsl.com (Postfix) with SMTP id 5738B21F9C56 for ; Tue, 3 Sep 2013 17:34:44 -0700 (PDT) Received: (qmail 5792 invoked by uid 0); 4 Sep 2013 00:34:17 -0000 Received: from unknown (HELO box462.bluehost.com) (74.220.219.62) by oproxy7.mail.unifiedlayer.com with SMTP; 4 Sep 2013 00:34:17 -0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=shockey.us; s=default; h=Content-Transfer-Encoding:Content-Type:MIME-Version:Message-ID:Date:Subject:In-Reply-To:References:To:From; bh=sR47an40N16e6xCeD99osWerx7IXX+8eqKj/ku3ULDU=; b=kk2wYR7Y4L4Exb+hec50So0qmq4peFSUI/OknPb7J4WKZKpyyxq3mNYvoKzg1xLqHqhCH/8rQUN8NCXtYNj2m7zWtOWhq8BxIWVewjgMHKSfDznS6jygCtEcZ7LPL5IR; Received: from [71.114.100.16] (port=56416 helo=RSHOCKEYPC) by box462.bluehost.com with esmtpa (Exim 4.80) (envelope-from ) id 1VH132-0005lh-R7; Tue, 03 Sep 2013 18:34:16 -0600 From: "Richard Shockey" To: "'Paul Kyzivat'" , References: <20130903194851.29838.75024.idtracker@ietfa.amsl.com> <52264969.8080606@alum.mit.edu> In-Reply-To: <52264969.8080606@alum.mit.edu> Date: Tue, 3 Sep 2013 20:34:14 -0400 Message-ID: <022401cea906$7bc10bb0$73432310$@shockey.us> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 15.0 Content-Language: en-us Thread-Index: AQHqJtToO5AT1/SPeA/Mksy9tjm6eAF2ueTWAqS3X3mZXOHxoA== X-Identified-User: {3286:box462.bluehost.com:shockeyu:shockey.us} {sentby:smtp auth 71.114.100.16 authed with richard@shockey.us} Subject: Re: [stir] STIR FAQ: draft-kaplan-stir-fried-00.txt X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 04 Sep 2013 00:34:49 -0000 +1 You the NAME MAN... Hadriel you are to be commended for putting this together and I'm certainly willing to lend my rusted typing fingers to flushing out parts of this for future editions. In fact I would encourage our friendly neighborhood US national regulator to share any relevant data on the scope of the problem including any public documents on complaints to the FTC etc. Certainly we need to add a full list of URI's of relevant documents etc. This IMHO will be invaluable to other national regulators trying to understand the history and scope of the problem. I'll see what I can STIR up from other jurisdictions. -----Original Message----- From: stir-bounces@ietf.org [mailto:stir-bounces@ietf.org] On Behalf Of Paul Kyzivat Sent: Tuesday, September 03, 2013 4:41 PM To: stir@ietf.org Subject: Re: [stir] STIR FAQ: draft-kaplan-stir-fried-00.txt Hadriel, You are the current champion of name-coining! I skimmed the document, and have no complaints. (With a more careful reading maybe I would.) This should be a useful document to have. Thanks, Paul On 9/3/13 3:57 PM, Hadriel Kaplan wrote: > > Howdy, > I've written up a FAQ-type thing for new STIR participants, since there have been over 1500 emails in the past 3 months on this mailing list and it seems unreasonable to expect new folks to read through them all. This is just one individual's view, and an individual draft not meant for RFC publication. > > The HTML version is available here: > http://tools.ietf.org/html/draft-kaplan-stir-fried-00 > > -hadriel > > >> A New Internet-Draft is available from the on-line Internet-Drafts directories. >> >> Title : Secure Telephone Identity Revisited (STIR) Frequently Repeated Information and Explanation Document (FRIED) >> Author(s) : Hadriel Kaplan >> Filename : draft-kaplan-stir-fried-00.txt >> Pages : 37 >> Date : 2013-09-03 >> >> Abstract: >> This document is a type of FAQ (Frequently Asked Questions) for new >> STIR Working Group participants. Since its inception three months >> ago there have been over 1,500 emails on the mailing list, before >> the WG was even formed. Some of the emails repeat topics, because >> newcomers cannot be expected to read all previous emails in the >> archive. This document is an attempt to capture some of the >> previously asked and answered questions. >> >> This document is written by one individual, is not intended to be >> published as an RFC, and is only meant as a temporary FAQ while the >> Working Group begins. The document attempts to provide both high- >> level information for non-experts, as well as low-level information >> for protocol experts. >> >> >> The IETF datatracker status page for this draft is: >> https://datatracker.ietf.org/doc/draft-kaplan-stir-fried >> >> There's also a htmlized version available at: >> http://tools.ietf.org/html/draft-kaplan-stir-fried-00 >> >> >> Please note that it may take a couple of minutes from the time of >> submission until the htmlized version and diff are available at tools.ietf.org. >> >> Internet-Drafts are also available by anonymous FTP at: >> ftp://ftp.ietf.org/internet-drafts/ >> >> _______________________________________________ >> I-D-Announce mailing list >> I-D-Announce@ietf.org >> https://www.ietf.org/mailman/listinfo/i-d-announce >> Internet-Draft directories: http://www.ietf.org/shadow.html or >> ftp://ftp.ietf.org/ietf/1shadow-sites.txt > > _______________________________________________ > stir mailing list > stir@ietf.org > https://www.ietf.org/mailman/listinfo/stir > _______________________________________________ stir mailing list stir@ietf.org https://www.ietf.org/mailman/listinfo/stir From Henning.Schulzrinne@fcc.gov Tue Sep 3 20:33:37 2013 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 071F221E8132 for ; Tue, 3 Sep 2013 20:33:37 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.241 X-Spam-Level: X-Spam-Status: No, score=-1.241 tagged_above=-999 required=5 tests=[AWL=-1.131, BAYES_20=-0.74, US_DOLLARS_3=0.63] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qZXNa-n5q3dO for ; Tue, 3 Sep 2013 20:33:32 -0700 (PDT) Received: from DC-IP-2.fcc.gov (dc-ip-2.fcc.gov [192.104.54.91]) by ietfa.amsl.com (Postfix) with ESMTP id A26D711E815F for ; Tue, 3 Sep 2013 20:33:31 -0700 (PDT) Message-ID: From: Henning Schulzrinne To: Richard Shockey , 'Paul Kyzivat' , "stir@ietf.org" Thread-Topic: [stir] STIR FAQ: draft-kaplan-stir-fried-00.txt Thread-Index: AQHOqN/k5KDq+ahVkEmH/LgiOcr4rpm0vSmAgABBGwD//+zT9A== Date: Wed, 4 Sep 2013 03:33:29 +0000 References: <20130903194851.29838.75024.idtracker@ietfa.amsl.com> <52264969.8080606@alum.mit.edu>, <022401cea906$7bc10bb0$73432310$@shockey.us> In-Reply-To: <022401cea906$7bc10bb0$73432310$@shockey.us> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Subject: Re: [stir] STIR FAQ: draft-kaplan-stir-fried-00.txt X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 04 Sep 2013 03:33:37 -0000 Unfortunately, at least for the FCC, it is somewhat hard to provide accurat= e answers. We get hundreds of complaints a month that mention spoofing, but= many more are robocall complaints where it is unclear whether the number w= as spoofed or not. Obviously, without calling back, the recipient generally= has no way of knowing. For the obvious reasons, nobody wants to recommend = that consumers call back such numbers. Thus, while the information is not s= ecret, I'd be reluctant to publish a number that's likely off by a factor o= f two, at least. Also, most of the complaints probably go to the FTC.=0A= =0A= For an interesting international perspective on the problem, see=0A= =0A= http://ftc.gov/opa/2013/07/revenuepath.shtm=0A= =0A= "The defendants in the case are Acquinity Interactive, LLC, located in Deer= field Beach, Fla.; 7657030 Canada Inc., located in Kirkland, Quebec, and al= so doing business as Acquinity Interactive; Garry Jonas, an officer of Acqu= inity Interactive; Revenue Path E-Consulting Pvt Ltd, located in Pune, Indi= a; Revenuepath Ltd, registered in Nicosia, Cyprus; Worldwide Commerce Assoc= iates, LLC, registered in Las Vegas, Nev., and also doing business as WCA; = Sarita Somani, an officer of the Revenue Path defendants and Worldwide Comm= erce Associates; Firebrand Group S.L., LLC, registered in Las Vegas, Nev.; = and Matthew Beucler, an officer of Firebrand."=0A= =0A= For Rachel's demise, see=0A= =0A= http://ftc.gov/opa/2013/07/aplus.shtm=0A= =0A= "In addition, the proposed order prohibits the A+ defendants from disclosin= g or benefiting from their customer lists, and prohibits them from collecti= ng or trying to collect money from any consumer who bought their service. F= inally, it imposes a judgment of $9,238,155, which will be suspended after = defendants transfer all of their assets (except $25,000), including a 2007 = Mercedes Benz CL, a 1999 boat valued at approximately $17,000, and a 2002 b= oat worth about $45,000." I guess you need boats for a fishy operation.=0A= =0A= =0A= ________________________________________=0A= From: stir-bounces@ietf.org [stir-bounces@ietf.org] on behalf of Richard Sh= ockey [richard@shockey.us]=0A= Sent: Tuesday, September 03, 2013 8:34 PM=0A= To: 'Paul Kyzivat'; stir@ietf.org=0A= Subject: Re: [stir] STIR FAQ: draft-kaplan-stir-fried-00.txt=0A= =0A= In fact I would encourage our friendly neighborhood US national regulator= =0A= to share any relevant data on the scope of the problem= =0A= including any public documents on complaints to the FTC etc. Certainly we= =0A= need to add a full list of URI's of relevant documents etc. This IMHO will= =0A= be invaluable to other national regulators trying to understand the history= =0A= and scope of the problem. I'll see what I can STIR up from other=0A= jurisdictions.=0A= From Henning.Schulzrinne@fcc.gov Tue Sep 3 20:38:37 2013 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EF9F521E8151 for ; Tue, 3 Sep 2013 20:38:37 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.452 X-Spam-Level: X-Spam-Status: No, score=-2.452 tagged_above=-999 required=5 tests=[AWL=0.147, BAYES_00=-2.599] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NkJfrBFrjflc for ; Tue, 3 Sep 2013 20:38:33 -0700 (PDT) Received: from DC-IP-2.fcc.gov (dc-ip-2.fcc.gov [192.104.54.91]) by ietfa.amsl.com (Postfix) with ESMTP id 343AD21E813B for ; Tue, 3 Sep 2013 20:38:31 -0700 (PDT) Message-ID: From: Henning Schulzrinne To: Richard Shockey , 'Paul Kyzivat' , "stir@ietf.org" Thread-Topic: [stir] STIR FAQ: draft-kaplan-stir-fried-00.txt Thread-Index: AQHOqN/k5KDq+ahVkEmH/LgiOcr4rpm0vSmAgABBGwD//+zT9IAAA0// Date: Wed, 4 Sep 2013 03:38:30 +0000 References: <20130903194851.29838.75024.idtracker@ietfa.amsl.com> <52264969.8080606@alum.mit.edu>, <022401cea906$7bc10bb0$73432310$@shockey.us>, In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Subject: Re: [stir] STIR FAQ: draft-kaplan-stir-fried-00.txt X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 04 Sep 2013 03:38:38 -0000 For what it's worth,=0A= =0A= http://ftc.gov/opa/2012/11/robocalls.shtm=0A= =0A= contains some statistics.=0A= =0A= From alex@bobotek.net Tue Sep 3 21:01:57 2013 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1110F21F9A44 for ; Tue, 3 Sep 2013 21:01:57 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.437 X-Spam-Level: X-Spam-Status: No, score=-0.437 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FH_RELAY_NODNS=1.451, HELO_MISMATCH_NET=0.611, RDNS_NONE=0.1] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LYK8v00stZE1 for ; Tue, 3 Sep 2013 21:01:52 -0700 (PDT) Received: from qmta01.emeryville.ca.mail.comcast.net (qmta01.emeryville.ca.mail.comcast.net [IPv6:2001:558:fe2d:43:76:96:30:16]) by ietfa.amsl.com (Postfix) with ESMTP id 1DD6821F8267 for ; Tue, 3 Sep 2013 21:01:48 -0700 (PDT) Received: from omta15.emeryville.ca.mail.comcast.net ([76.96.30.71]) by qmta01.emeryville.ca.mail.comcast.net with comcast id Lrzm1m0031Y3wxoA1s1oCg; Wed, 04 Sep 2013 04:01:48 +0000 Received: from BOBO1A.bobotek.net ([76.22.113.196]) by omta15.emeryville.ca.mail.comcast.net with comcast id Ls1m1m00M4EJ4tY8bs1nQd; Wed, 04 Sep 2013 04:01:47 +0000 Received: from BOBO1A.bobotek.net ([fe80::4851:b4bb:416a:e1ad]) by BOBO1A.bobotek.net ([fe80::4851:b4bb:416a:e1ad%10]) with mapi; Tue, 3 Sep 2013 20:53:22 -0700 From: Alex Bobotek To: Henning Schulzrinne , Richard Shockey , 'Paul Kyzivat' , "stir@ietf.org" Date: Tue, 3 Sep 2013 20:53:22 -0700 Thread-Topic: [stir] STIR FAQ: draft-kaplan-stir-fried-00.txt Thread-Index: AQHOqN/k5KDq+ahVkEmH/LgiOcr4rpm0vSmAgABBGwD//+zT9IAAA0//gAABp9A= Message-ID: <4B1956260CD29F4A9622F00322FE053193812973F2@BOBO1A.bobotek.net> References: <20130903194851.29838.75024.idtracker@ietfa.amsl.com> <52264969.8080606@alum.mit.edu>, <022401cea906$7bc10bb0$73432310$@shockey.us>, In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=comcast.net; s=q20121106; t=1378267308; bh=fNDYrYA/v0/as9tChcVKI/vhMDMj3Adl/fCk0jk8Y0c=; h=Received:Received:Received:From:To:Date:Subject:Message-ID: Content-Type:MIME-Version; b=Fv7ISw4UN6/Jtig3yl6zy+uUSQdDRG+t5qEsKz38guqkOKO7LVEJX7LgXVff1hWBu SMa8yAv37zp+VwWzAsP4JwQYnMHkls51HUkaogAFAAMbc5T6qo12eU9XTM9H8WmWpW upTC4MMl1njkeaft1GM4S48K90HxcJRU6eGPkDXWoTcbfNtBwZ4DisNgSUSjZAlnax qO18+py/yH5QgC74MbV35P6yRjwYxqYQB+6ygIEq4Tf/0cZYVNM4E1rGXaqWBTIkr4 afdbL/ngwK0vF3o0avNW2hjv3WvfehrCUwCDRfvGdH4Auf+7bqJUPW3PxwhT5l7scp QviX2HZUc0/SA== Subject: Re: [stir] STIR FAQ: draft-kaplan-stir-fried-00.txt X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 04 Sep 2013 04:01:57 -0000 One of the best public statistics sources I've been able to locate is at ht= tp://www.ftc.gov/os/2012/10/1210dnc-databook.pdf Page 4 has a table which= includes complaint statistics by year. =20 Informal requests to the FTC for their 2012 data (the 2012 databook ends wi= th 2011 stats) have not yet been fruitful. This complaint data is somewhat= biased by the increased accessibility and publicity of the complaint mecha= nism. =20 Most telco researchers are unable to publish stats based on telco databases= , but stats may be available in closed anti-abuse forums where data are und= er NDA. =20 Regards, Alex > -----Original Message----- > From: stir-bounces@ietf.org [mailto:stir-bounces@ietf.org] On Behalf Of > Henning Schulzrinne > Sent: Tuesday, September 03, 2013 8:39 PM > To: Richard Shockey; 'Paul Kyzivat'; stir@ietf.org > Subject: Re: [stir] STIR FAQ: draft-kaplan-stir-fried-00.txt >=20 > For what it's worth, >=20 > http://ftc.gov/opa/2012/11/robocalls.shtm >=20 > contains some statistics. >=20 > _______________________________________________ > stir mailing list > stir@ietf.org > https://www.ietf.org/mailman/listinfo/stir From Henning.Schulzrinne@fcc.gov Wed Sep 4 06:56:29 2013 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E40AA21E80DA for ; Wed, 4 Sep 2013 06:56:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.457 X-Spam-Level: X-Spam-Status: No, score=-2.457 tagged_above=-999 required=5 tests=[AWL=0.143, BAYES_00=-2.599] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xo-l0yrBC-xB for ; Wed, 4 Sep 2013 06:56:24 -0700 (PDT) Received: from DC-IP-1.fcc.gov (dc-ip-1.fcc.gov [192.104.54.97]) by ietfa.amsl.com (Postfix) with ESMTP id C6B4321E80D0 for ; Wed, 4 Sep 2013 06:56:21 -0700 (PDT) Message-ID: From: Henning Schulzrinne To: 'Alex Bobotek' , Richard Shockey , 'Paul Kyzivat' , "stir@ietf.org" Thread-Topic: [stir] STIR FAQ: draft-kaplan-stir-fried-00.txt Thread-Index: AQHOqN/k5KDq+ahVkEmH/LgiOcr4rpm0vSmAgABBGwD//+zT9IAAA0//gAABp9CAAKqhwA== Date: Wed, 4 Sep 2013 13:56:19 +0000 References: <20130903194851.29838.75024.idtracker@ietfa.amsl.com> <52264969.8080606@alum.mit.edu>, <022401cea906$7bc10bb0$73432310$@shockey.us>, <4B1956260CD29F4A9622F00322FE053193812973F2@BOBO1A.bobotek.net> In-Reply-To: <4B1956260CD29F4A9622F00322FE053193812973F2@BOBO1A.bobotek.net> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Subject: Re: [stir] STIR FAQ: draft-kaplan-stir-fried-00.txt X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 04 Sep 2013 13:56:29 -0000 The official word from the FTC (from their congressional testimony) is "In the fourth quarter of 2009, the FTC received about 63,000 complaints ab= out illegal robocalls each month. That number ballooned in three years, to= an average of approximately 200,000 complaints per month in the fourth qua= rter of 2012." That should probably suffice for FAQ purposes. (Courtesy of Kathleen Daffan= , FTC.) -----Original Message----- From: Alex Bobotek [mailto:alex@bobotek.net]=20 Sent: Tuesday, September 03, 2013 11:53 PM To: Henning Schulzrinne; Richard Shockey; 'Paul Kyzivat'; stir@ietf.org Subject: RE: [stir] STIR FAQ: draft-kaplan-stir-fried-00.txt One of the best public statistics sources I've been able to locate is at ht= tp://www.ftc.gov/os/2012/10/1210dnc-databook.pdf Page 4 has a table which= includes complaint statistics by year. =20 Informal requests to the FTC for their 2012 data (the 2012 databook ends wi= th 2011 stats) have not yet been fruitful. This complaint data is somewhat= biased by the increased accessibility and publicity of the complaint mecha= nism. =20 Most telco researchers are unable to publish stats based on telco databases= , but stats may be available in closed anti-abuse forums where data are und= er NDA. =20 Regards, Alex > -----Original Message----- > From: stir-bounces@ietf.org [mailto:stir-bounces@ietf.org] On Behalf=20 > Of Henning Schulzrinne > Sent: Tuesday, September 03, 2013 8:39 PM > To: Richard Shockey; 'Paul Kyzivat'; stir@ietf.org > Subject: Re: [stir] STIR FAQ: draft-kaplan-stir-fried-00.txt >=20 > For what it's worth, >=20 > http://ftc.gov/opa/2012/11/robocalls.shtm >=20 > contains some statistics. >=20 > _______________________________________________ > stir mailing list > stir@ietf.org > https://www.ietf.org/mailman/listinfo/stir From housley@vigilsec.com Wed Sep 4 09:21:12 2013 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 58C6021E80B7 for ; Wed, 4 Sep 2013 09:21:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.716 X-Spam-Level: X-Spam-Status: No, score=-102.716 tagged_above=-999 required=5 tests=[AWL=-0.117, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id U+VCHhnAeeLA for ; Wed, 4 Sep 2013 09:21:06 -0700 (PDT) Received: from odin.smetech.net (mail.smetech.net [208.254.26.82]) by ietfa.amsl.com (Postfix) with ESMTP id 1C4FA21E80C9 for ; Wed, 4 Sep 2013 09:21:06 -0700 (PDT) Received: from localhost (unknown [208.254.26.81]) by odin.smetech.net (Postfix) with ESMTP id 4142EF2415A for ; Wed, 4 Sep 2013 12:21:18 -0400 (EDT) X-Virus-Scanned: amavisd-new at smetech.net Received: from odin.smetech.net ([208.254.26.82]) by localhost (ronin.smetech.net [208.254.26.81]) (amavisd-new, port 10024) with ESMTP id MdTppmx1nhjs for ; Wed, 4 Sep 2013 12:21:02 -0400 (EDT) Received: from [192.168.2.109] (pool-96-241-154-95.washdc.fios.verizon.net [96.241.154.95]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by odin.smetech.net (Postfix) with ESMTP id B239CF24159 for ; Wed, 4 Sep 2013 12:21:16 -0400 (EDT) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Apple Message framework v1085) From: Russ Housley In-Reply-To: <619335E4-E06B-4694-A77B-0E986BCFD2B7@vigilsec.com> Date: Wed, 4 Sep 2013 12:21:03 -0400 Content-Transfer-Encoding: quoted-printable Message-Id: References: <20130903181918.31860.31954.idtracker@ietfa.amsl.com> <3C6E7372-CD83-4131-BFF8-726BC89116B1@vigilsec.com> <522644B3.1050606@nostrum.com> <619335E4-E06B-4694-A77B-0E986BCFD2B7@vigilsec.com> To: IETF STIR Mail List X-Mailer: Apple Mail (2.1085) Subject: [stir] STIR WG Scheduling for IETF 88 X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 04 Sep 2013 16:21:12 -0000 Robert and I are skeptical that the problem statement and threats = documents will be fully complete before IETF 88. We would like to a lot = of effort on them before IETF 88, but we also recognize that the WG was = chartered less than a week ago and people are just reengaging after = summer holiday. Anyway, we have ask the Secretariat to schedule two STIR WG sessions at = IETF 8: -- 1 hour on problem statement and threats -- 1.5 hour on proposals for mechanisms We have asked for the 1 hour slot early in the week, and the 1.5 hour = slot on a subsequent day. Russ= From hadriel.kaplan@oracle.com Wed Sep 4 11:03:48 2013 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A822A21E80F5 for ; Wed, 4 Sep 2013 11:03:48 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.53 X-Spam-Level: X-Spam-Status: No, score=-6.53 tagged_above=-999 required=5 tests=[AWL=0.069, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id udR2F+Jp4UcA for ; Wed, 4 Sep 2013 11:03:42 -0700 (PDT) Received: from userp1040.oracle.com (userp1040.oracle.com [156.151.31.81]) by ietfa.amsl.com (Postfix) with ESMTP id BF2C921E804D for ; Wed, 4 Sep 2013 11:03:37 -0700 (PDT) Received: from ucsinet21.oracle.com (ucsinet21.oracle.com [156.151.31.93]) by userp1040.oracle.com (Sentrion-MTA-4.3.1/Sentrion-MTA-4.3.1) with ESMTP id r84I3adU007593 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Wed, 4 Sep 2013 18:03:37 GMT Received: from userz7021.oracle.com (userz7021.oracle.com [156.151.31.85]) by ucsinet21.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id r84I3Zis027567 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Wed, 4 Sep 2013 18:03:36 GMT Received: from abhmt110.oracle.com (abhmt110.oracle.com [141.146.116.62]) by userz7021.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id r84I3YhF027559; Wed, 4 Sep 2013 18:03:35 GMT Received: from [10.1.21.34] (/10.5.21.34) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Wed, 04 Sep 2013 11:03:34 -0700 Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 6.5 \(1508\)) From: Hadriel Kaplan In-Reply-To: Date: Wed, 4 Sep 2013 14:03:34 -0400 Content-Transfer-Encoding: quoted-printable Message-Id: <32694B95-CD5E-498E-B096-DAC6CD3FBF2B@oracle.com> References: <20130903181918.31860.31954.idtracker@ietfa.amsl.com> <3C6E7372-CD83-4131-BFF8-726BC89116B1@vigilsec.com> <522644B3.1050606@nostrum.com> <619335E4-E06B-4694-A77B-0E986BCFD2B7@vigilsec.com> To: Russ Housley X-Mailer: Apple Mail (2.1508) X-Source-IP: ucsinet21.oracle.com [156.151.31.93] Cc: IETF STIR Mail List Subject: Re: [stir] STIR WG Scheduling for IETF 88 X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 04 Sep 2013 18:03:48 -0000 I'm willing to write up either draft, but my impression was other folks = were already signed up to do that and I didn't want to replicate work. -hadriel On Sep 4, 2013, at 12:21 PM, Russ Housley wrote: > Robert and I are skeptical that the problem statement and threats = documents will be fully complete before IETF 88. We would like to a lot = of effort on them before IETF 88, but we also recognize that the WG was = chartered less than a week ago and people are just reengaging after = summer holiday. >=20 > Anyway, we have ask the Secretariat to schedule two STIR WG sessions = at IETF 8: > -- 1 hour on problem statement and threats > -- 1.5 hour on proposals for mechanisms >=20 > We have asked for the 1 hour slot early in the week, and the 1.5 hour = slot on a subsequent day. >=20 > Russ > _______________________________________________ > stir mailing list > stir@ietf.org > https://www.ietf.org/mailman/listinfo/stir From jon.peterson@neustar.biz Wed Sep 4 12:26:35 2013 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D445A21F9DF3 for ; Wed, 4 Sep 2013 12:26:35 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -106.307 X-Spam-Level: X-Spam-Status: No, score=-106.307 tagged_above=-999 required=5 tests=[AWL=0.292, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ne3b1zl72lVa for ; Wed, 4 Sep 2013 12:26:32 -0700 (PDT) Received: from neustar.com (mx2.neustar.com [156.154.25.104]) by ietfa.amsl.com (Postfix) with ESMTP id AA41121F9D66 for ; Wed, 4 Sep 2013 12:26:31 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=neustar.biz; s=neustarbiz; t=1378322786; x=1693679464; q=dns/txt; h=From:Subject:Date:Message-ID:Content-Language: Content-Type:Content-ID:Content-Transfer-Encoding; bh=cblngyJZDh x/L9/gN8l+g8GI4DLlzGdTeMOolYUNIrs=; b=cdtRtX9a24u3P4OzQwzp/QxLNO YCtK7U3ZSpE195nCk4kY0/dE/duV1Jsq7i7Id7Bz9iG2j590gUZnBlTgUUPg== Received: from ([10.31.58.71]) by chihiron2.nc.neustar.com with ESMTP with TLS id J041123125.24933229; Wed, 04 Sep 2013 15:26:25 -0400 Received: from stntexmb12.cis.neustar.com ([169.254.2.104]) by stntexhc12.cis.neustar.com ([::1]) with mapi id 14.02.0342.003; Wed, 4 Sep 2013 15:26:25 -0400 From: "Peterson, Jon" To: Russ Housley , IETF STIR Mail List Thread-Topic: [stir] STIR WG Scheduling for IETF 88 Thread-Index: AQHOqYrJoZcC03mliEqKVkLpziottZm1w+WA Date: Wed, 4 Sep 2013 19:26:24 +0000 Message-ID: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.3.6.130613 x-originating-ip: [192.168.128.203] x-ems-proccessed: R64IxjzeHPwwd+efoj3ZcA== x-ems-stamp: R7MeqvJtqD95oQUOXxeWhA== Content-Type: text/plain; charset="us-ascii" Content-ID: Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Subject: Re: [stir] STIR WG Scheduling for IETF 88 X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 04 Sep 2013 19:26:36 -0000 I did split the threat text out of the problem statement document, into its own brand new home. http://www.ietf.org/id/draft-peterson-secure-origin-ps-02.txt http://www.ietf.org/id/draft-peterson-stir-threats-00.txt As currently scoped, the threats document is unlikely to be fully complete until we understand more about the solution-specific threats. That much said, we could just defer that part of the threat analysis until later, and that would make me more optimistic about finishing that doc sooner than later. That much said, like Russ I hope we can get a lot of work done on these over the next few weeks, so please do comment, discuss what we're missing, what needs to be tweaked, and so on. Jon Peterson Neustar, Inc. On 9/4/13 9:21 AM, "Russ Housley" wrote: >Robert and I are skeptical that the problem statement and threats >documents will be fully complete before IETF 88. We would like to a lot >of effort on them before IETF 88, but we also recognize that the WG was >chartered less than a week ago and people are just reengaging after >summer holiday. > >Anyway, we have ask the Secretariat to schedule two STIR WG sessions at >IETF 8: > -- 1 hour on problem statement and threats > -- 1.5 hour on proposals for mechanisms > >We have asked for the 1 hour slot early in the week, and the 1.5 hour >slot on a subsequent day. > >Russ >_______________________________________________ >stir mailing list >stir@ietf.org >https://www.ietf.org/mailman/listinfo/stir From brian.rosen@neustar.biz Mon Sep 9 13:00:35 2013 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5085721F9CA6 for ; Mon, 9 Sep 2013 13:00:35 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0 X-Spam-Level: X-Spam-Status: No, score=x tagged_above=-999 required=5 tests=[] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RmZV4edc+C9f for ; Mon, 9 Sep 2013 13:00:34 -0700 (PDT) Received: from neustar.com (smartmail.neustar.com [156.154.17.104]) by ietfa.amsl.com (Postfix) with ESMTP id DA89721F9A04 for ; Mon, 9 Sep 2013 13:00:12 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=neustar.biz; s=neustarbiz; t=1378757384; x=1694116713; q=dns/txt; h=From:Subject:Date:Message-ID:Content-Language: Content-Type; bh=VXQUsxB9tV1tv0T4iSOfltbodEDAfeQSCCKIbR7PqGA=; b=qASetmHMllQ+vDO5cPnIBgoByUBhrBEIDz7KsaZ3kXSuGJ4El00NJV+G9Yxfsz p1uzC4MlLpq3cPq40947FLjg== Received: from ([10.31.58.70]) by stihiron1.va.neustar.com with ESMTP with TLS id J041124052.31464004; Mon, 09 Sep 2013 16:09:43 -0400 Received: from stntexmb12.cis.neustar.com ([169.254.2.104]) by stntexhc11.cis.neustar.com ([::1]) with mapi id 14.02.0342.003; Mon, 9 Sep 2013 16:00:05 -0400 From: "Rosen, Brian" To: "stir@ietf.org" Thread-Topic: edits to draft-kaplan-stir-fried Thread-Index: AQHOrZctik6OTHBpZkKgefk2HyoNTA== Date: Mon, 9 Sep 2013 20:00:05 +0000 Message-ID: <1ECA2C8F-D3EA-481E-8CB2-0FF87D7F0820@neustar.biz> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: x-originating-ip: [10.33.193.10] x-ems-proccessed: R64IxjzeHPwwd+efoj3ZcA== x-ems-stamp: KBYR7jnjHWiq8Fjovn9qkw== Content-Type: multipart/mixed; boundary="_004_1ECA2C8FD3EA481E8CB20FF87D7F0820neustarbiz_" MIME-Version: 1.0 Subject: [stir] edits to draft-kaplan-stir-fried X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 09 Sep 2013 20:00:35 -0000 --_004_1ECA2C8FD3EA481E8CB20FF87D7F0820neustarbiz_ Content-Type: multipart/alternative; boundary="_000_1ECA2C8FD3EA481E8CB20FF87D7F0820neustarbiz_" --_000_1ECA2C8FD3EA481E8CB20FF87D7F0820neustarbiz_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 DQpBdHRhY2hlZCBpcyBhIHNldCBvZiBwcm9wb3NlZCBlZGl0cyB0byBzdGlyLWZyaWVkIChzdGly IEZBUSkgYXMgYSBkaWZmIGZyb20gdGhlIHB1Ymxpc2hlZCB2ZXJzaW9uLg0KDQpJIGFwb2xvZ2l6 ZSwgaW4gYWR2YW5jZSwgZm9yIHRoZSBmb3JtLiAgUHJpb3IgdG8gcHVibGlzaGluZywgSSB3YXMg Z2l2ZW4gYW4gb3Bwb3J0dW5pdHkgdG8gY29tbWVudCBvbiB0aGUgdGV4dCwgd2hpY2ggSSBmYWls ZWQgdG8gZG8gaW4gYSB0aW1lbHkgbWFubmVyLCBhbmQganVzdCBhYm91dCB0aGUgdGltZSBJIGdv dCB0aGUgY29tbWVudHMgZG9uZSwgSGFkcmllbCBoYWQgcHVibGlzaGVkIGhpcyBkcmFmdCBhbmQg aGFkIG1hZGUgc29tZSB1cGRhdGVzIHRvIGl0LiAgSSBkb24ndCBoYXZlIHRoZSBzb3VyY2UgYXZh aWxhYmxlIHRvIGVhc2lseSByZXByb2R1Y2UgdGhlIGVkaXRzLiAgQWNjb3JkaW5nbHksIHRoaXMg ZGlmZiBzaG93cyBhIGxvdCBvZiBjaGFuZ2VzIHRoYXQgYXJlIG5vdCBhY3R1YWwgcHJvcG9zZWQg ZWRpdHMuDQoNCklmIGFjY2VwdGVkLCBJJ2xsIGJlIGhhcHB5IHRvIHdvcmsgd2l0aCBIYWRyaWVs IHRvIG1ha2UgaXQgZWFzaWVyIHRvIGluY29ycG9yYXRlIHRoZSBjaGFuZ2VzIGluIGhpcyBjdXJy ZW50IHNvdXJjZSBkb2N1bWVudC4NCg0KSW4gcHJpdmF0ZSBjb3JyZXNwb25kZW5jZSwgaGUgcXVl c3Rpb25lZCBzb21lIG9mIHRoZXNlIGVkaXRzLiAgVGhvc2UgY29tbWVudHMgYW5kIG15IHJlc3Bv bnNlcyBhcmU6DQpXaXRoIHJlZ2FyZCB0byBzb21lIG9mIHlvdXIgY2hhbmdlczoNCg0KMSkgRm9y IHRoZSBvdmVydmlldyBvZiB0aGUgcHJvcG9zZWQgc29sdXRpb25zLCB5b3UndmUgYWRkZWQgdGV4 dCB0aGF0IHNheXMgdGhlIGluLWJhbmQgYW5kIG91dC1vZi1iYW5kICgxKSB1c2UgdGhlIHNhbWUg Y3JlZGVudGlhbHMgYW5kICgyKSBhcmUgcGVyZm9ybWVkIGJ5IHNpbWlsYXIgZW50aXRpZXMuICBJ IGRvbid0IGJlbGlldmUgdGhhdCdzIHRydWUgLSBvciBhdCBsZWFzdCwgSSBkb24ndCBiZWxpZXZl IHRoYXQgbW9zdCBwZW9wbGUgaW4gdGhlIFdHIGFncmVlIHdpdGggdGhhdC4gIFNldmVyYWwgb2Yg dGhlIG91dC1vZi1iYW5kIHByb3BvbmVudHMgY29uc2lzdGVudGx5IGVtcGhhc2l6ZSB0aGF0IFBC WCdzIGFuZCBzbWFydHBob25lcyB3b3VsZCBiZSB0aGUgb25lcyBkb2luZyB0aGUgb3V0LW9mLWJh bmQgc3R1ZmYsIHdoaWNoIGlzIGEgZGlmZmVyZW50IHNldCBvZiBhY3RvcnMgdGhhbiB0aGUgaW4t YmFuZCBwcm9wb25lbnRzIGhhdmUgYmVlbiBlbXBoYXNpemluZyB3b3VsZCBkbyBpbi1iYW5kIHN0 dWZmLiAgQWxzbywgSSBoYXZlIHNlZW4gbm8gY29uc2lzdGVudCB2aWV3L2Rlc2NyaXB0aW9uIG9m IHdoYXQgdGhlICJjcmVkZW50aWFscyIgYXJlIGZvciBvdXQtb2YtYmFuZCBhdCBhbGwuDQoNCjxi cj5JIGJlbGlldmUgdGhhdCB0aGUgb3V0IG9mIGJhbmQgcHJvcG9uZW50cyBoYXZlIHByb3Bvc2Vk IHRoZSBjcmVkZW50aWFscyBiZSB0aGUgc2FtZS4NCkkgYmVsaWV2ZSB0aGF0IHRoZSBzaWduaW5n IG9mIHRoZSBkYXRhIHNob3VsZCBiZSBhYmxlIHRvIGJlIHBlcmZvcm1lZCBieSB0aGUgZW5kIHBv aW50IG9yIGEgc2VydmljZSBwcm92aWRlci4gIFdlJ3ZlIGFsc28gdGFsa2VkIGFib3V0IGEgUEJY IHNpZ25pbmcuICBUaGUgYWN0dWFsIGNyZWRlbnRpYWwgY291bGQgYmUgZGlmZmVyZW50IGluIHRo b3NlIHR3byBjYXNlcywgcmVwcmVzZW50aW5nIHRoZSBkZWxlZ2F0aW9uIGZyb20gYSBuYXRpb25h bCBudW1iZXIgYXV0aG9yaXR5IHRvIHRoZSBTUCBvciBhIG51bWJlciByZXNlbGwgdG8gdGhlIFNQ IHZzIGEgZGVsZWdhdGlvbiBmcm9tIHRoZSBTUCB0byB0aGUgZW5kIHVzZXIuIEZvciBpbi1iYW5k IEkgYmVsaWV2ZSBhbnkgcGFydHkgb24gdGhlIHBhdGgsIGluY2x1ZGluZyBhbnkgU1Agb3IgdGhl IGVuZHBvaW50IHNob3VsZCBiZSBhYmxlIHRvIHZhbGlkYXRlLiAgIEluIHRoZSBvdXQgb2YgYmFu ZCBjYXNlLCBvbmx5IHRoZSB0ZXJtaW5hdGluZyBTUCBvciB0aGUgdGVybWluYXRpbmcgZW5kIHVz ZXIgd291bGQgYmUgYWJsZSB0byB2YWxpZGF0ZS4NCg0KVGhlcmUgaXMgbm8gYWdyZWVtZW50IG9u IHRoZSB2aWV3L2Rlc2NyaXB0aW9uIG9mIGNyZWRlbnRpYWxzIGZvciBlaXRoZXIgaW4gYmFuZCBv ciBvdXQgb2YgYmFuZCwgb3RoZXIgdGhhbiB0aGV5IGhhdmUgYSBwdWJsaWMvcHJpdmF0ZSBrZXkg cGFpci4gIEZvciBleGFtcGxlLCBzb21lIGluIGJhbmQgY3JlZGVudGlhbCBwcm9wb3NhbHMgYXJl IGZ1bGwgWC41MDkgY2VydHMgYW5kIG90aGVycyBhcmUgYSBwbGFpbiBwcml2YXRlIGtleSBpbiB0 aGUgRE5TLiAgVGhlIGNyZWRlbnRpYWwgbmVlZGVkIGZvciBvdXQgb2YgYmFuZCBpcyBleGFjdGx5 IHRoZSBzYW1lIEkgYmVsaWV2ZSwgYWx0aG91Z2ggSSB0aG91Z2ggaXQgbWF5IG5lZWQgYW4gYWRk aXRpb25hbCBwb2ludGVyIHRvIHRoZSBDUFMgKG9yIGVxdWl2YWxlbnQpLg0KDQoNCg0KMikgRm9y IHRoZSBxdWVzdGlvbiBvZiB3aHkgd2UncmUgZm9jdXNlZCBvbiBTSVAsIHlvdSBhZGRlZDoNCiAg IFdlIGFsc28gb2JzZXJ2ZSB0aGF0IG1vc3Qgb2YgdGhlIHByb2JsZW0gY2FsbHMgYXJlIFNJUC1v cmlnaW5hdGVkLg0KICAgUHJvYmFibHkgdGhhdCBpcyBiZWNhdXNlIHRoZXJlIFZvSVAgc2Vydmlj ZSBwcm92aWRlcnMgdGhhdCBhcmUgbW9yZQ0KICAgd2lsbGluZyB0byBhbGxvdyB0aGVpciBzdWJz Y3JpYmVycyB0byB1c2UgYW55IGNhbGxpbmcgcGFydHkgbnVtYmVyDQogICB0aGV5IHdhbnQgdG8u DQoNCkkgaGF2ZW4ndCBzZWVuIGFueSBhY3R1YWwgbnVtYmVycyB0aGF0IHNob3cgbW9zdCBvZiB0 aGUgcHJvYmxlbSBjYWxscyBhcmUgU0lQLW9yaWdpbmF0ZWQuICBBcmUgdGhlcmUgc29tZSBudW1i ZXJzPw0KPGJyPmRvbid0IGhhdmUgbnVtYmVycy4gIFBlcmhhcHMgSGVubmluZyBkb2VzLiBJIGhh dmUgYmVlbiB0b2xkIG1vc3Qgb2YgdGhlIHByb2JsZW0gaXMgU0lQLW9yaWdpbmF0ZWQgYnkgYSBj b3VwbGUgb2YgaW5kZXBlbmRlbnQgc291cmNlcywgYnV0IEkgaGF2ZSBubyB2ZXJpZmlhYmxlIGZh Y3RzLg0KDQoNCjMpIEZvciB0aGUgcXVlc3Rpb24gb24gcHJvcG9zZWQgb3V0LW9mLWJhbmQgc29s dXRpb24sIHlvdSBhZGRlZCB0aGlzOg0KICAgSXQgcHJvcG9zZXMgdGhhdCB0aGUgc2VuZGVyIGVu Y3J5cHQgaWRlbnRpdHkgaW5mb3JtYXRpb24gZm9yIHRoZQ0KICAgcmVjaXBpZW50IChzdWNoIHRo YXQgb25seSB0aGUgcmVjaXBpZW50IGNhbiBkZWNyeXB0IGl0KSBhbmQgc3RvcmUNCiAgIGl0IGlu IGEgZGF0YWJhc2Ugc2VsZWN0ZWQgYnkgdGhlIHJlY2lwaWVudC4gIFRoZSByZWNpcGllbnQgcXVl cmllcw0KICAgdGhlIGRhdGFiYXNlIHdoZW4gaXQgcmVjZWl2ZXMgdGhlIGNhbGwgYW5kIG9idGFp bnMgdGhlIGlkZW50aXR5DQogICBpbmZvcm1hdGlvbi4gIFRoZSBwcm9wb3NhbCBhc3N1bWVzIHRo ZSBzZW5kZXIgY2FuIHF1ZXJ5IHRoZSBjcmVkZW50aWFsDQogICBkYXRhYmFzZSB0byBvYnRhaW4g dGhlIHB1YmxpYyBrZXkgb2YgdGhlIHJlY2lwaWVudCBhbmQgdGhlIGlkZW50aXR5IG9mDQogICB0 aGUgZGF0YWJhc2UgdG8gc3RvcmUgdGhlIHNlbmRlcuKAmXMgaW5mb3JtYXRpb24gaW4uDQoNCkkg ZG9uJ3QgYmVsaWV2ZSBFa3IncyBkcmFmdCBzYXlzIHRoYXQuICBJdCBkb2Vzbid0IHN0aXB1bGF0 ZSB3aG9zZSBDUFMgZGF0YWJhc2UgaXMgdXNlZCBmb3Igc3RvcmluZyB0aGUgQ1BSIHN0dWZmLCBl eGNlcHQgYnkgaGludGluZyBhdCBpdCBpbiBvbmUgc2VudGVuY2U7IG1vc3Qgb2YgdGhlIGRvYyBh c3N1bWVzL2ltcGxpZXMgYSBzaW5nbGUgQ1BTLiAgSSB0aGluayB0aGUgcG93ZXJwb2ludCBzbGlk ZXMgc2hvd24gaW4gV2FzaCBEQyBtaWdodCBoYXZlIGRlc2NyaWJlZCBpdCBhcyB5b3Ugc2FpZCwg YnV0IGV2ZW4gYmFjayB0aGVuIEkgdGhvdWdodCB0aGV5IHdlcmUgYmFja3dhcmQuICBBbGljZSBz aG91bGQgcHV0IHRoZSBDUFIgaW4gaGVyIENQUywgYW5kIEJvYiBzaG91bGQgcmV0cmlldmUgaXQg ZnJvbSBoZXIgQ1BTLiAgSVNUTSBkb2luZyBpdCB0aGF0IHdheSBzb2x2ZXMgYSBsb3Qgb2YgcHJv YmxlbXMuDQoNCjxicj5FS1IncyBkcmFmdCBzYXlzOg0KDQogICBUaGUgZGlzY3Vzc2lvbiBhYm92 ZSBpcyB3cml0dGVuIGluIHRlcm1zIG9mIGEgc2luZ2xlIENQUywgYnV0IHRoaXMNCiAgIHBvdGVu dGlhbGx5IGhhcyBzY2FsaW5nIHByb2JsZW1zLCBhcyB3ZWxsIGFzIGFsbG93aW5nIHRoZSBDUFMg dG8NCiAgIGxlYXJuIGFib3V0IGV2ZXJ5IGNhbGwuICBUaGVzZSBpc3N1ZXMgY2FuIGJlIGFsbGV2 aWF0ZWQgYnkgaGF2aW5nIGENCiAgIGZlZGVyYXRlZCBDUFMuICBJZiBhIGNyZWRlbnRpYWwgbG9v a3VwIHNlcnZpY2UgaXMgYWxyZWFkeSBhdmFpbGFibGUsDQogICB0aGUgQ1BTIGxvY2F0aW9uIGNh biBhbHNvIGJlIHN0b3JlZCBpbiB0aGUgY2FsbGVlJ3MgY3JlZGVudGlhbHMuDQoNCg0KQnJpYW4N Cg== --_000_1ECA2C8FD3EA481E8CB20FF87D7F0820neustarbiz_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5Pg0KPGRpdiBzdHlsZT0i d29yZC13cmFwOmJyZWFrLXdvcmQiPjwvZGl2Pg0KPGRpdiBzdHlsZT0id29yZC13cmFwOmJyZWFr LXdvcmQiPjxicj4NCjxkaXY+QXR0YWNoZWQgaXMgYSBzZXQgb2YgcHJvcG9zZWQgZWRpdHMgdG8g c3Rpci1mcmllZCAoc3RpciBGQVEpIGFzIGEgZGlmZiBmcm9tIHRoZSBwdWJsaXNoZWQgdmVyc2lv bi48L2Rpdj4NCjxkaXY+PGJyPg0KPC9kaXY+DQo8ZGl2PkkgYXBvbG9naXplLCBpbiBhZHZhbmNl LCBmb3IgdGhlIGZvcm0uICZuYnNwO1ByaW9yIHRvIHB1Ymxpc2hpbmcsIEkgd2FzIGdpdmVuIGFu IG9wcG9ydHVuaXR5IHRvIGNvbW1lbnQgb24gdGhlIHRleHQsIHdoaWNoIEkgZmFpbGVkIHRvIGRv IGluIGEgdGltZWx5IG1hbm5lciwgYW5kIGp1c3QgYWJvdXQgdGhlIHRpbWUgSSBnb3QgdGhlIGNv bW1lbnRzIGRvbmUsIEhhZHJpZWwgaGFkIHB1Ymxpc2hlZCBoaXMgZHJhZnQgYW5kIGhhZCBtYWRl IHNvbWUNCiB1cGRhdGVzIHRvIGl0LiAmbmJzcDtJIGRvbid0IGhhdmUgdGhlIHNvdXJjZSBhdmFp bGFibGUgdG8gZWFzaWx5IHJlcHJvZHVjZSB0aGUgZWRpdHMuICZuYnNwO0FjY29yZGluZ2x5LCB0 aGlzIGRpZmYgc2hvd3MgYSBsb3Qgb2YgY2hhbmdlcyB0aGF0IGFyZSBub3QgYWN0dWFsIHByb3Bv c2VkIGVkaXRzLjwvZGl2Pg0KPGRpdj48YnI+DQo8L2Rpdj4NCjxkaXY+SWYgYWNjZXB0ZWQsIEkn bGwgYmUgaGFwcHkgdG8gd29yayB3aXRoIEhhZHJpZWwgdG8gbWFrZSBpdCBlYXNpZXIgdG8gaW5j b3Jwb3JhdGUgdGhlIGNoYW5nZXMgaW4gaGlzIGN1cnJlbnQgc291cmNlIGRvY3VtZW50LjwvZGl2 Pg0KPGRpdj48YnI+DQo8L2Rpdj4NCjxkaXY+SW4gcHJpdmF0ZSBjb3JyZXNwb25kZW5jZSwgaGUg cXVlc3Rpb25lZCBzb21lIG9mIHRoZXNlIGVkaXRzLiAmbmJzcDtUaG9zZSBjb21tZW50cyBhbmQg bXkgcmVzcG9uc2VzIGFyZTo8L2Rpdj4NCjxkaXY+V2l0aCByZWdhcmQgdG8gc29tZSBvZiB5b3Vy IGNoYW5nZXM6PGJyPg0KPGJyPg0KMSkgRm9yIHRoZSBvdmVydmlldyBvZiB0aGUgcHJvcG9zZWQg c29sdXRpb25zLCB5b3UndmUgYWRkZWQgdGV4dCB0aGF0IHNheXMgdGhlIGluLWJhbmQgYW5kIG91 dC1vZi1iYW5kICgxKSB1c2UgdGhlIHNhbWUgY3JlZGVudGlhbHMgYW5kICgyKSBhcmUgcGVyZm9y bWVkIGJ5IHNpbWlsYXIgZW50aXRpZXMuICZuYnNwO0kgZG9uJ3QgYmVsaWV2ZSB0aGF0J3MgdHJ1 ZSAtIG9yIGF0IGxlYXN0LCBJIGRvbid0IGJlbGlldmUgdGhhdCBtb3N0IHBlb3BsZSBpbiB0aGUN CiBXRyBhZ3JlZSB3aXRoIHRoYXQuICZuYnNwO1NldmVyYWwgb2YgdGhlIG91dC1vZi1iYW5kIHBy b3BvbmVudHMgY29uc2lzdGVudGx5IGVtcGhhc2l6ZSB0aGF0IFBCWCdzIGFuZCBzbWFydHBob25l cyB3b3VsZCBiZSB0aGUgb25lcyBkb2luZyB0aGUgb3V0LW9mLWJhbmQgc3R1ZmYsIHdoaWNoIGlz IGEgZGlmZmVyZW50IHNldCBvZiBhY3RvcnMgdGhhbiB0aGUgaW4tYmFuZCBwcm9wb25lbnRzIGhh dmUgYmVlbiBlbXBoYXNpemluZyB3b3VsZCBkbyBpbi1iYW5kDQogc3R1ZmYuICZuYnNwO0Fsc28s IEkgaGF2ZSBzZWVuIG5vIGNvbnNpc3RlbnQgdmlldy9kZXNjcmlwdGlvbiBvZiB3aGF0IHRoZSAm cXVvdDtjcmVkZW50aWFscyZxdW90OyBhcmUgZm9yIG91dC1vZi1iYW5kIGF0IGFsbC48L2Rpdj4N CjxkaXY+PGJyPg0KPC9kaXY+DQo8ZGl2PiZsdDticiZndDtJIGJlbGlldmUgdGhhdCB0aGUgb3V0 IG9mIGJhbmQgcHJvcG9uZW50cyBoYXZlIHByb3Bvc2VkIHRoZSBjcmVkZW50aWFscyBiZSB0aGUg c2FtZS4gJm5ic3A7PC9kaXY+DQo8ZGl2PkkgYmVsaWV2ZSB0aGF0IHRoZSBzaWduaW5nIG9mIHRo ZSBkYXRhIHNob3VsZCBiZSBhYmxlIHRvIGJlIHBlcmZvcm1lZCBieSB0aGUgZW5kIHBvaW50IG9y IGEgc2VydmljZSBwcm92aWRlci4gJm5ic3A7V2UndmUgYWxzbyB0YWxrZWQgYWJvdXQgYSBQQlgg c2lnbmluZy4gJm5ic3A7VGhlIGFjdHVhbCBjcmVkZW50aWFsIGNvdWxkIGJlIGRpZmZlcmVudCBp biB0aG9zZSB0d28gY2FzZXMsIHJlcHJlc2VudGluZyB0aGUgZGVsZWdhdGlvbiBmcm9tIGEgbmF0 aW9uYWwNCiBudW1iZXIgYXV0aG9yaXR5IHRvIHRoZSBTUCBvciBhIG51bWJlciByZXNlbGwgdG8g dGhlIFNQIHZzIGEgZGVsZWdhdGlvbiBmcm9tIHRoZSBTUCB0byB0aGUgZW5kIHVzZXIuIEZvciBp bi1iYW5kIEkgYmVsaWV2ZSBhbnkgcGFydHkgb24gdGhlIHBhdGgsIGluY2x1ZGluZyBhbnkgU1Ag b3IgdGhlIGVuZHBvaW50IHNob3VsZCBiZSBhYmxlIHRvIHZhbGlkYXRlLiAmbmJzcDsgSW4gdGhl IG91dCBvZiBiYW5kIGNhc2UsIG9ubHkgdGhlIHRlcm1pbmF0aW5nIFNQDQogb3IgdGhlIHRlcm1p bmF0aW5nIGVuZCB1c2VyIHdvdWxkIGJlIGFibGUgdG8gdmFsaWRhdGUuPC9kaXY+DQo8ZGl2Pjxi cj4NCjwvZGl2Pg0KPGRpdj5UaGVyZSBpcyBubyBhZ3JlZW1lbnQgb24gdGhlIHZpZXcvZGVzY3Jp cHRpb24gb2YgY3JlZGVudGlhbHMgZm9yIGVpdGhlciBpbiBiYW5kIG9yIG91dCBvZiBiYW5kLCBv dGhlciB0aGFuIHRoZXkgaGF2ZSBhIHB1YmxpYy9wcml2YXRlIGtleSBwYWlyLiAmbmJzcDtGb3Ig ZXhhbXBsZSwgc29tZSBpbiBiYW5kIGNyZWRlbnRpYWwgcHJvcG9zYWxzIGFyZSBmdWxsIFguNTA5 IGNlcnRzIGFuZCBvdGhlcnMgYXJlIGEgcGxhaW4gcHJpdmF0ZSBrZXkgaW4gdGhlDQogRE5TLiAm bmJzcDtUaGUgY3JlZGVudGlhbCBuZWVkZWQgZm9yIG91dCBvZiBiYW5kIGlzIGV4YWN0bHkgdGhl IHNhbWUgSSBiZWxpZXZlLCBhbHRob3VnaCBJIHRob3VnaCBpdCBtYXkgbmVlZCBhbiBhZGRpdGlv bmFsIHBvaW50ZXIgdG8gdGhlIENQUyAob3IgZXF1aXZhbGVudCkuPC9kaXY+DQo8ZGl2Pjxicj4N Cjxicj4NCjxicj4NCjIpIEZvciB0aGUgcXVlc3Rpb24gb2Ygd2h5IHdlJ3JlIGZvY3VzZWQgb24g U0lQLCB5b3UgYWRkZWQ6PGJyPg0KJm5ic3A7Jm5ic3A7Jm5ic3A7V2UgYWxzbyBvYnNlcnZlIHRo YXQgbW9zdCBvZiB0aGUgcHJvYmxlbSBjYWxscyBhcmUgU0lQLW9yaWdpbmF0ZWQuICZuYnNwOzxi cj4NCiZuYnNwOyZuYnNwOyZuYnNwO1Byb2JhYmx5IHRoYXQgaXMgYmVjYXVzZSB0aGVyZSBWb0lQ IHNlcnZpY2UgcHJvdmlkZXJzIHRoYXQgYXJlIG1vcmUmbmJzcDs8YnI+DQombmJzcDsmbmJzcDsm bmJzcDt3aWxsaW5nIHRvIGFsbG93IHRoZWlyIHN1YnNjcmliZXJzIHRvIHVzZSBhbnkgY2FsbGlu ZyBwYXJ0eSBudW1iZXImbmJzcDs8YnI+DQombmJzcDsmbmJzcDsmbmJzcDt0aGV5IHdhbnQgdG8u PGJyPg0KPGJyPg0KSSBoYXZlbid0IHNlZW4gYW55IGFjdHVhbCBudW1iZXJzIHRoYXQgc2hvdyBt b3N0IG9mIHRoZSBwcm9ibGVtIGNhbGxzIGFyZSBTSVAtb3JpZ2luYXRlZC4gJm5ic3A7QXJlIHRo ZXJlIHNvbWUgbnVtYmVycz88L2Rpdj4NCjxkaXY+Jmx0O2JyJmd0O2Rvbid0IGhhdmUgbnVtYmVy cy4gJm5ic3A7UGVyaGFwcyBIZW5uaW5nIGRvZXMuIEkgaGF2ZSBiZWVuIHRvbGQgbW9zdCBvZiB0 aGUgcHJvYmxlbSBpcyBTSVAtb3JpZ2luYXRlZCBieSBhIGNvdXBsZSBvZiBpbmRlcGVuZGVudCBz b3VyY2VzLCBidXQgSSBoYXZlIG5vIHZlcmlmaWFibGUgZmFjdHMuPGJyPg0KPGJyPg0KPGJyPg0K MykgRm9yIHRoZSBxdWVzdGlvbiBvbiBwcm9wb3NlZCBvdXQtb2YtYmFuZCBzb2x1dGlvbiwgeW91 IGFkZGVkIHRoaXM6PGJyPg0KJm5ic3A7Jm5ic3A7Jm5ic3A7SXQgcHJvcG9zZXMgdGhhdCB0aGUg c2VuZGVyIGVuY3J5cHQgaWRlbnRpdHkgaW5mb3JtYXRpb24gZm9yIHRoZSZuYnNwOzxicj4NCiZu YnNwOyZuYnNwOyZuYnNwO3JlY2lwaWVudCAoc3VjaCB0aGF0IG9ubHkgdGhlIHJlY2lwaWVudCBj YW4gZGVjcnlwdCBpdCkgYW5kIHN0b3JlJm5ic3A7PGJyPg0KJm5ic3A7Jm5ic3A7Jm5ic3A7aXQg aW4gYSBkYXRhYmFzZSBzZWxlY3RlZCBieSB0aGUgcmVjaXBpZW50LiAmbmJzcDtUaGUgcmVjaXBp ZW50IHF1ZXJpZXMmbmJzcDs8YnI+DQombmJzcDsmbmJzcDsmbmJzcDt0aGUgZGF0YWJhc2Ugd2hl biBpdCByZWNlaXZlcyB0aGUgY2FsbCBhbmQgb2J0YWlucyB0aGUgaWRlbnRpdHkmbmJzcDs8YnI+ DQombmJzcDsmbmJzcDsmbmJzcDtpbmZvcm1hdGlvbi4gJm5ic3A7VGhlIHByb3Bvc2FsIGFzc3Vt ZXMgdGhlIHNlbmRlciBjYW4gcXVlcnkgdGhlIGNyZWRlbnRpYWwmbmJzcDs8YnI+DQombmJzcDsm bmJzcDsmbmJzcDtkYXRhYmFzZSB0byBvYnRhaW4gdGhlIHB1YmxpYyBrZXkgb2YgdGhlIHJlY2lw aWVudCBhbmQgdGhlIGlkZW50aXR5IG9mJm5ic3A7PGJyPg0KJm5ic3A7Jm5ic3A7Jm5ic3A7dGhl IGRhdGFiYXNlIHRvIHN0b3JlIHRoZSBzZW5kZXLigJlzIGluZm9ybWF0aW9uIGluLjxicj4NCjxi cj4NCkkgZG9uJ3QgYmVsaWV2ZSBFa3IncyBkcmFmdCBzYXlzIHRoYXQuICZuYnNwO0l0IGRvZXNu J3Qgc3RpcHVsYXRlIHdob3NlIENQUyBkYXRhYmFzZSBpcyB1c2VkIGZvciBzdG9yaW5nIHRoZSBD UFIgc3R1ZmYsIGV4Y2VwdCBieSBoaW50aW5nIGF0IGl0IGluIG9uZSBzZW50ZW5jZTsgbW9zdCBv ZiB0aGUgZG9jIGFzc3VtZXMvaW1wbGllcyBhIHNpbmdsZSBDUFMuICZuYnNwO0kgdGhpbmsgdGhl IHBvd2VycG9pbnQgc2xpZGVzIHNob3duIGluIFdhc2ggREMgbWlnaHQgaGF2ZQ0KIGRlc2NyaWJl ZCBpdCBhcyB5b3Ugc2FpZCwgYnV0IGV2ZW4gYmFjayB0aGVuIEkgdGhvdWdodCB0aGV5IHdlcmUg YmFja3dhcmQuICZuYnNwO0FsaWNlIHNob3VsZCBwdXQgdGhlIENQUiBpbiBoZXIgQ1BTLCBhbmQg Qm9iIHNob3VsZCByZXRyaWV2ZSBpdCBmcm9tIGhlciBDUFMuICZuYnNwO0lTVE0gZG9pbmcgaXQg dGhhdCB3YXkgc29sdmVzIGEgbG90IG9mIHByb2JsZW1zLjxicj4NCjwvZGl2Pg0KPGRpdj48YnI+ DQo8L2Rpdj4NCjxkaXY+Jmx0O2JyJmd0O0VLUidzIGRyYWZ0IHNheXM6PC9kaXY+DQo8ZGl2Pg0K PHByZSBjbGFzcz0ieF9uZXdwYWdlIiBzdHlsZT0iZm9udC1zaXplOjFlbTsgbWFyZ2luLXRvcDow cHg7IG1hcmdpbi1ib3R0b206MHB4OyBwYWdlLWJyZWFrLWJlZm9yZTphbHdheXMiPiAgIFRoZSBk aXNjdXNzaW9uIGFib3ZlIGlzIHdyaXR0ZW4gaW4gdGVybXMgb2YgYSBzaW5nbGUgQ1BTLCBidXQg dGhpcw0KICAgcG90ZW50aWFsbHkgaGFzIHNjYWxpbmcgcHJvYmxlbXMsIGFzIHdlbGwgYXMgYWxs b3dpbmcgdGhlIENQUyB0bw0KICAgbGVhcm4gYWJvdXQgZXZlcnkgY2FsbC4gIFRoZXNlIGlzc3Vl cyBjYW4gYmUgYWxsZXZpYXRlZCBieSBoYXZpbmcgYQ0KICAgZmVkZXJhdGVkIENQUy4gIElmIGEg Y3JlZGVudGlhbCBsb29rdXAgc2VydmljZSBpcyBhbHJlYWR5IGF2YWlsYWJsZSwNCiAgIHRoZSBD UFMgbG9jYXRpb24gY2FuIGFsc28gYmUgc3RvcmVkIGluIHRoZSBjYWxsZWUncyBjcmVkZW50aWFs cy48L3ByZT4NCjxkaXY+PGJyPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+PGJyPg0KPC9kaXY+DQo8 ZGl2PkJyaWFuPC9kaXY+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_1ECA2C8FD3EA481E8CB20FF87D7F0820neustarbiz_-- --_004_1ECA2C8FD3EA481E8CB20FF87D7F0820neustarbiz_ Content-Type: text/html; name="Diff draft-kaplan-stir-fried-00.txt - draft-kaplan-stir-fried-00-2-brEdits.html" Content-Description: Diff draft-kaplan-stir-fried-00.txt - draft-kaplan-stir-fried-00-2-brEdits.html Content-Disposition: attachment; filename="Diff draft-kaplan-stir-fried-00.txt - draft-kaplan-stir-fried-00-2-brEdits.html"; size=335594; creation-date="Mon, 09 Sep 2013 20:00:05 GMT"; modification-date="Mon, 09 Sep 2013 20:00:05 GMT" Content-ID: Content-Transfer-Encoding: base64 PCFET0NUWVBFIGh0bWwgUFVCTElDICItLy9XM0MvL0RURCBYSFRNTCAxLjAgVHJhbnNpdGlvbmFs Ly9FTiIgImh0dHA6Ly93d3cudzMub3JnL1RSL3hodG1sMS9EVEQveGh0bWwxLXRyYW5zaXRpb25h bC5kdGQiPg0KPCEtLSBzYXZlZCBmcm9tIHVybD0oMDAyOSlodHRwOi8vdG9vbHMuaWV0Zi5vcmcv cmZjZGlmZiAtLT4NCjxodG1sPjxoZWFkPjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PUlTTy04ODU5LTEiPiANCiAgIA0KICA8bWV0YSBo dHRwLWVxdWl2PSJDb250ZW50LVN0eWxlLVR5cGUiIGNvbnRlbnQ9InRleHQvY3NzIj4gDQogIDx0 aXRsZT5EaWZmOiBkcmFmdC1rYXBsYW4tc3Rpci1mcmllZC0wMC50eHQgLSBkcmFmdC1rYXBsYW4t c3Rpci1mcmllZC0wMC0yLWJyRWRpdHMudHh0PC90aXRsZT4gDQogIDxzdHlsZSB0eXBlPSJ0ZXh0 L2NzcyI+IA0KICAgIGJvZHkgICAgeyBtYXJnaW46IDAuNGV4OyBtYXJnaW4tcmlnaHQ6IGF1dG87 IH0gDQogICAgdHIgICAgICB7IH0gDQogICAgdGQgICAgICB7IHdoaXRlLXNwYWNlOiBwcmU7IGZv bnQtZmFtaWx5OiBtb25vc3BhY2U7IHZlcnRpY2FsLWFsaWduOiB0b3A7IGZvbnQtc2l6ZTogMC44 NmVtO30gDQogICAgdGggICAgICB7IGZvbnQtc2l6ZTogMC44NmVtOyB9IA0KICAgIC5zbWFsbCAg eyBmb250LXNpemU6IDAuNmVtOyBmb250LXN0eWxlOiBpdGFsaWM7IGZvbnQtZmFtaWx5OiBWZXJk YW5hLCBIZWx2ZXRpY2EsIHNhbnMtc2VyaWY7IH0gDQogICAgLmxlZnQgICB7IGJhY2tncm91bmQt Y29sb3I6ICNFRUU7IH0gDQogICAgLnJpZ2h0ICB7IGJhY2tncm91bmQtY29sb3I6ICNGRkY7IH0g DQogICAgLmRpZmYgICB7IGJhY2tncm91bmQtY29sb3I6ICNDQ0Y7IH0gDQogICAgLmxibG9jayB7 IGJhY2tncm91bmQtY29sb3I6ICNCRkI7IH0gDQogICAgLnJibG9jayB7IGJhY2tncm91bmQtY29s b3I6ICNGRjg7IH0gDQogICAgLmluc2VydCB7IGJhY2tncm91bmQtY29sb3I6ICM4RkY7IH0gDQog ICAgLmRlbGV0ZSB7IGJhY2tncm91bmQtY29sb3I6ICNBQ0Y7IH0gDQogICAgLnZvaWQgICB7IGJh Y2tncm91bmQtY29sb3I6ICNGRkI7IH0gDQogICAgLmNvbnQgICB7IGJhY2tncm91bmQtY29sb3I6 ICNFRUU7IH0gDQogICAgLmxpbmViciB7IGJhY2tncm91bmQtY29sb3I6ICNBQUE7IH0gDQogICAg LmxpbmVubyB7IGNvbG9yOiByZWQ7IGJhY2tncm91bmQtY29sb3I6ICNGRkY7IGZvbnQtc2l6ZTog MC43ZW07IHRleHQtYWxpZ246IHJpZ2h0OyBwYWRkaW5nOiAwIDJweDsgfSANCiAgICAuZWxpcHNp c3sgYmFja2dyb3VuZC1jb2xvcjogI0FBQTsgfSANCiAgICAubGVmdCAuY29udCB7IGJhY2tncm91 bmQtY29sb3I6ICNEREQ7IH0gDQogICAgLnJpZ2h0IC5jb250IHsgYmFja2dyb3VuZC1jb2xvcjog I0VFRTsgfSANCiAgICAubGJsb2NrIC5jb250IHsgYmFja2dyb3VuZC1jb2xvcjogIzlEOTsgfSAN CiAgICAucmJsb2NrIC5jb250IHsgYmFja2dyb3VuZC1jb2xvcjogI0RENjsgfSANCiAgICAuaW5z ZXJ0IC5jb250IHsgYmFja2dyb3VuZC1jb2xvcjogIzBERDsgfSANCiAgICAuZGVsZXRlIC5jb250 IHsgYmFja2dyb3VuZC1jb2xvcjogIzhBRDsgfSANCiAgICAuc3RhdHMsIC5zdGF0cyB0ZCwgLnN0 YXRzIHRoIHsgYmFja2dyb3VuZC1jb2xvcjogI0VFRTsgcGFkZGluZzogMnB4IDA7IH0gDQogIDwv c3R5bGU+IA0KPC9oZWFkPiANCjxib2R5PiANCiAgPHRhYmxlIGJvcmRlcj0iMCIgY2VsbHBhZGRp bmc9IjAiIGNlbGxzcGFjaW5nPSIwIj4gDQogIDx0Ym9keT48dHIgYmdjb2xvcj0ib3JhbmdlIj48 dGg+PC90aD48dGg+PGEgaHJlZj0iaHR0cDovL3Rvb2xzLmlldGYub3JnL3JmY2RpZmY/dXJsMj1k cmFmdC1rYXBsYW4tc3Rpci1mcmllZC0wMC50eHQiIHN0eWxlPSJjb2xvcjojMDA4OyB0ZXh0LWRl Y29yYXRpb246bm9uZTsiPiZsdDs8L2E+Jm5ic3A7PGEgaHJlZj0iaHR0cDovL3Rvb2xzLmlldGYu b3JnL2h0bWwvZHJhZnQta2FwbGFuLXN0aXItZnJpZWQtMDAudHh0IiBzdHlsZT0iY29sb3I6IzAw OCI+ZHJhZnQta2FwbGFuLXN0aXItZnJpZWQtMDAudHh0PC9hPiZuYnNwOzwvdGg+PHRoPiA8L3Ro Pjx0aD4mbmJzcDs8YSBocmVmPSJodHRwOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1rYXBs YW4tc3Rpci1mcmllZC0wMC0yLWJyRWRpdHMudHh0IiBzdHlsZT0iY29sb3I6IzAwOCI+ZHJhZnQt a2FwbGFuLXN0aXItZnJpZWQtMDAtMi1ickVkaXRzLnR4dDwvYT4mbmJzcDs8YSBocmVmPSJodHRw Oi8vdG9vbHMuaWV0Zi5vcmcvcmZjZGlmZj91cmwxPWRyYWZ0LWthcGxhbi1zdGlyLWZyaWVkLTAw LTItYnJFZGl0cy50eHQiIHN0eWxlPSJjb2xvcjojMDA4OyB0ZXh0LWRlY29yYXRpb246bm9uZTsi PiZndDs8L2E+PC90aD48dGg+PC90aD48L3RyPiANCiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlm ZjAwMDEiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPlNUSVIgV29ya2luZyBHcm91cDwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj5TVElSIFdvcmtpbmcg R3JvdXAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIEguIEthcGxh bjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj5ILiBLYXBsYW48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+SW50ZXJuZXQgRHJh ZnQgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBPcmFj bGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+SW50ZXJuZXQgRHJhZnQ8L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+SW50ZW5k ZWQgc3RhdHVzOiBJbmZvcm1hdGlvbmFsICAgICAgICAgICAgICAgICAgICAgICAgU2VwdGVtYmVy IDMsIDIwMTM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+T3JhY2xlPC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj5JbnRlbmRlZCBzdGF0dXM6IEluZm9ybWF0aW9uYWw8 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPlNlcHRlbWJlciAzLCAyMDEzPC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij5FeHBpcmVz OiBNYXJjaCAzMCwgMjAxNDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPkV4cGlyZXM6 IE1hcmNoIDMwLCAyMDE0PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAg ICAgICBTZWN1cmUgVGVsZXBob25lIElkZW50aXR5IFJldmlzaXRlZCAoU1RJUik8L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICAgICAgICAgU2VjdXJlIFRlbGVwaG9uZSBJ ZGVudGl0eSBSZXZpc2l0ZWQgKFNUSVIpPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgIEZyZXF1ZW50bHkgUmVwZWF0ZWQgSW5mb3JtYXRp b24gYW5kIEV4cGxhbmF0aW9uIERvY3VtZW50IChGUklFRCk8L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij4gICAgIEZyZXF1ZW50bHkgUmVwZWF0ZWQgSW5mb3JtYXRpb24gYW5kIEV4cGxh bmF0aW9uIERvY3VtZW50IChGUklFRCk8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAgICAgICAgICAgICAgIGRyYWZ0LWthcGxh bi1zdGlyLWZyaWVkLTAwPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAg ICAgICAgICAgICAgICAgZHJhZnQta2FwbGFuLXN0aXItZnJpZWQtMDA8L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+QWJzdHJhY3Q8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij5B YnN0cmFjdDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBUaGlzIGRvY3VtZW50IGlz IGEgdHlwZSBvZiBGQVEgKEZyZXF1ZW50bHkgQXNrZWQgUXVlc3Rpb25zKSBmb3IgbmV3PC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgVGhpcyBkb2N1bWVudCBpcyBhIHR5cGUgb2Yg RkFRIChGcmVxdWVudGx5IEFza2VkIFF1ZXN0aW9ucykgZm9yIG5ldzwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgU1RJUiBXb3JraW5nIEdy b3VwIHBhcnRpY2lwYW50cy4gIFNpbmNlIGl0cyBpbmNlcHRpb24gdGhyZWUgbW9udGhzPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgU1RJUiBXb3JraW5nIEdyb3VwIHBhcnRpY2lw YW50cy4gIFNpbmNlIGl0cyBpbmNlcHRpb24gdGhyZWUgbW9udGhzPC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlm ZjAwMDIiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICBh Z28gdGhlcmUgaGF2ZSBiZWVuIG92ZXIgMSw1PC9zcGFuPjAwIGVtYWlscyBvbiB0aGUgbWFpbGlu ZyBsaXN0LCBiZWZvcmU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xh c3M9Imluc2VydCI+YWdvIHRoZXJlIGhhdmUgYmVlbiBvdmVyIDEsMzwvc3Bhbj4wMCBlbWFpbHMg b24gdGhlIG1haWxpbmcgbGlzdCwgYmVmb3JlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICB0aGUgV0cgd2FzIGV2ZW4gZm9ybWVkLiAgU29t ZSBvZiB0aGUgZW1haWxzIHJlcGVhdCB0b3BpY3MsIGJlY2F1c2U8L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij4gICB0aGUgV0cgd2FzIGV2ZW4gZm9ybWVkLiAgU29tZSBvZiB0aGUgZW1h aWxzIHJlcGVhdCB0b3BpY3MsIGJlY2F1c2U8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIG5ld2NvbWVycyBjYW5ub3QgYmUgZXhwZWN0ZWQg dG8gcmVhZCBhbGwgcHJldmlvdXMgZW1haWxzIGluIHRoZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmlnaHQiPiAgIG5ld2NvbWVycyBjYW5ub3QgYmUgZXhwZWN0ZWQgdG8gcmVhZCBhbGwgcHJl dmlvdXMgZW1haWxzIGluIHRoZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+ICAgYXJjaGl2ZS4gIFRoaXMgZG9jdW1lbnQgaXMgYW4gYXR0ZW1w dCB0byBjYXB0dXJlIHNvbWUgb2YgdGhlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ ICAgYXJjaGl2ZS4gIFRoaXMgZG9jdW1lbnQgaXMgYW4gYXR0ZW1wdCB0byBjYXB0dXJlIHNvbWUg b2YgdGhlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij4gICBwcmV2aW91c2x5IGFza2VkIGFuZCBhbnN3ZXJlZCBxdWVzdGlvbnMuPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgcHJldmlvdXNseSBhc2tlZCBhbmQgYW5zd2VyZWQg cXVlc3Rpb25zLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBUaGlzIGRvY3VtZW50 IGlzIHdyaXR0ZW4gYnkgb25lIGluZGl2aWR1YWwsIGlzIG5vdCBpbnRlbmRlZCB0byBiZTwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFRoaXMgZG9jdW1lbnQgaXMgd3JpdHRlbiBi eSBvbmUgaW5kaXZpZHVhbCwgaXMgbm90IGludGVuZGVkIHRvIGJlPC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBwdWJsaXNoZWQgYXMgYW4g UkZDLCBhbmQgaXMgb25seSBtZWFudCBhcyBhIHRlbXBvcmFyeSBGQVEgd2hpbGUgdGhlPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgcHVibGlzaGVkIGFzIGFuIFJGQywgYW5kIGlz IG9ubHkgbWVhbnQgYXMgYSB0ZW1wb3JhcnkgRkFRIHdoaWxlIHRoZTwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgV29ya2luZyBHcm91cCBi ZWdpbnMuICBUaGUgZG9jdW1lbnQgYXR0ZW1wdHMgdG8gcHJvdmlkZSBib3RoIGhpZ2gtPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgV29ya2luZyBHcm91cCBiZWdpbnMuICBUaGUg ZG9jdW1lbnQgYXR0ZW1wdHMgdG8gcHJvdmlkZSBib3RoIGhpZ2gtPC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBsZXZlbCBpbmZvcm1hdGlv biBmb3Igbm9uLWV4cGVydHMsIGFzIHdlbGwgYXMgbG93LWxldmVsIGluZm9ybWF0aW9uPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgbGV2ZWwgaW5mb3JtYXRpb24gZm9yIG5vbi1l eHBlcnRzLCBhcyB3ZWxsIGFzIGxvdy1sZXZlbCBpbmZvcm1hdGlvbjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgZm9yIHByb3RvY29sIGV4 cGVydHMuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgZm9yIHByb3RvY29sIGV4 cGVydHMuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90 cj4NCiAgICAgIDx0ciBiZ2NvbG9yPSJncmF5Ij48dGQ+PC90ZD48dGg+PGEgbmFtZT0icGFydC1s MiI+PHNtYWxsPnNraXBwaW5nIHRvIGNoYW5nZSBhdDwvc21hbGw+PGVtPiBwYWdlIDIsIGxpbmUg MjQ8L2VtPjwvYT48L3RoPjx0aD4gPC90aD48dGg+PGEgbmFtZT0icGFydC1yMiI+PHNtYWxsPnNr aXBwaW5nIHRvIGNoYW5nZSBhdDwvc21hbGw+PGVtPiBwYWdlIDEsIGxpbmUgNzA8L2VtPjwvYT48 L3RoPjx0ZD48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgKGh0dHA6Ly90cnVzdGVlLmlldGYub3JnL2xp Y2Vuc2UtaW5mbykgaW4gZWZmZWN0IG9uIHRoZSBkYXRlIG9mPC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+ICAgKGh0dHA6Ly90cnVzdGVlLmlldGYub3JnL2xpY2Vuc2UtaW5mbykgaW4g ZWZmZWN0IG9uIHRoZSBkYXRlIG9mPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBwdWJsaWNhdGlvbiBvZiB0aGlzIGRvY3VtZW50LiAgUGxl YXNlIHJldmlldyB0aGVzZSBkb2N1bWVudHM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij4gICBwdWJsaWNhdGlvbiBvZiB0aGlzIGRvY3VtZW50LiAgUGxlYXNlIHJldmlldyB0aGVzZSBk b2N1bWVudHM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPiAgIGNhcmVmdWxseSwgYXMgdGhleSBkZXNjcmliZSB5b3VyIHJpZ2h0cyBhbmQgcmVz dHJpY3Rpb25zIHdpdGg8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBjYXJlZnVs bHksIGFzIHRoZXkgZGVzY3JpYmUgeW91ciByaWdodHMgYW5kIHJlc3RyaWN0aW9ucyB3aXRoPC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBy ZXNwZWN0IHRvIHRoaXMgZG9jdW1lbnQuICBDb2RlIENvbXBvbmVudHMgZXh0cmFjdGVkIGZyb20g dGhpczwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHJlc3BlY3QgdG8gdGhpcyBk b2N1bWVudC4gIENvZGUgQ29tcG9uZW50cyBleHRyYWN0ZWQgZnJvbSB0aGlzPC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBkb2N1bWVudCBt dXN0IGluY2x1ZGUgU2ltcGxpZmllZCBCU0QgTGljZW5zZSB0ZXh0IGFzIGRlc2NyaWJlZCBpbjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGRvY3VtZW50IG11c3QgaW5jbHVkZSBT aW1wbGlmaWVkIEJTRCBMaWNlbnNlIHRleHQgYXMgZGVzY3JpYmVkIGluPC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBTZWN0aW9uIDQuZSBv ZiB0aGUgVHJ1c3QgTGVnYWwgUHJvdmlzaW9ucyBhbmQgYXJlIHByb3ZpZGVkIHdpdGhvdXQ8L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBTZWN0aW9uIDQuZSBvZiB0aGUgVHJ1c3Qg TGVnYWwgUHJvdmlzaW9ucyBhbmQgYXJlIHByb3ZpZGVkIHdpdGhvdXQ8L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHdhcnJhbnR5IGFzIGRl c2NyaWJlZCBpbiB0aGUgU2ltcGxpZmllZCBCU0QgTGljZW5zZS48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij4gICB3YXJyYW50eSBhcyBkZXNjcmliZWQgaW4gdGhlIFNpbXBsaWZpZWQg QlNEIExpY2Vuc2UuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPlRhYmxlIG9mIENvbnRl bnRzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+VGFibGUgb2YgQ29udGVudHM8L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDAzIj48L2E+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgMS4gPHNwYW4gY2xhc3M9ImRlbGV0ZSI+SW50cm9kdWN0 aW9uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi40PC9z cGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4xLgk8c3BhbiBjbGFzcz0iaW5z ZXJ0Ij5JbnRyb2R1Y3Rpb24JNDwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgMi4gPHNwYW4gY2xhc3M9ImRlbGV0ZSI+VGVy bWlub2xvZ3kuLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4u Li40PC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4yLgk8c3BhbiBjbGFz cz0iaW5zZXJ0Ij5UZXJtaW5vbG9neQk0PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAzLiA8c3BhbiBjbGFzcz0iZGVsZXRl Ij5CYWNrZ3JvdW5kLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4u Li4uLi4uLjU8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjMuCTxzcGFu IGNsYXNzPSJpbnNlcnQiPkJhY2tncm91bmQJNTwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgICAgMy4xLiBXaGF0J3MgdGhl IGdlbmVyYWwgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+cHJvYmxlbT8uLi4uLi4uLi4uLi4uLi4uLi4u Li4uLi4uLi4uLi41PC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4zLjEu CVdoYXQncyB0aGUgZ2VuZXJhbCA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5wcm9ibGVtPwk1PC9zcGFu PjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2Nr Ij4gICAgICAzLjIuIEFyZW4ndCB0aGVyZSBleGlzdGluZyBzb2x1dGlvbnMgdG8gdGhpcyA8c3Bh biBjbGFzcz0iZGVsZXRlIj5wcm9ibGVtPy4uLi4uLi4uLjU8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyYmxvY2siPjMuMi4JQXJlbid0IHRoZXJlIGV4aXN0aW5nIHNvbHV0aW9ucyB0 byB0aGlzIDxzcGFuIGNsYXNzPSJpbnNlcnQiPnByb2JsZW0/CTU8L3NwYW4+PC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgICAgIDMuMy4g Q2FuJ3Qgd2UgdXNlIG90aGVyIGluZm8gdG8gZGV0ZWN0IDxzcGFuIGNsYXNzPSJkZWxldGUiPnJv Ym9jYWxscz8uLi4uLi4uLi4uLi4uNjwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJi bG9jayI+My4zLglDYW4ndCB3ZSB1c2Ugb3RoZXIgaW5mbyB0byBkZXRlY3QgPHNwYW4gY2xhc3M9 Imluc2VydCI+c3Bvb2ZlZCBjYWxscz8JNjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgICAgMy40LiBXaGF0J3MgU1RJUiB0 cnlpbmcgdG8gc29sdmUgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+dGhlbj8uLi4uLi4uLi4uLi4uLi4u Li4uLi4uLi43PC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4zLjQuCVdo YXQncyBTVElSIHRyeWluZyB0byBzb2x2ZSA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij50aGVuPwk3PC9z cGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJs b2NrIj4gICAgICAzLjUuIDxzcGFuIGNsYXNzPSJkZWxldGUiPklzIFNUSVIgc3VmZmljaWVudCB0 byBzdG9wIHJvYm9jYWxscyBvciBmcmF1ZD8uLi4uLi4uLi4uLjc8L3NwYW4+PC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyYmxvY2siPjMuNS4JV2h5IGZvY3VzIG9uIGNhbGxpbmcgbnVtYmVyLCB2 cy4gb3RoZXIgPHNwYW4gY2xhc3M9Imluc2VydCI+aWRlbnRpdGllcz8JNzwvc3Bhbj48L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4g Y2xhc3M9ImRlbGV0ZSI+ICAgICAgMy42Ljwvc3Bhbj4gV2h5IGZvY3VzIG9uIGNhbGxpbmcgbnVt YmVyLCB2cy4gb3RoZXIgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+aWRlbnRpdGllcz8uLi4uLi4uNzwv c3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2Vy dCI+My42Ljwvc3Bhbj4JSGFzbid0IGl0IGFsd2F5cyBiZWVuIHBvc3NpYmxlIHRvIGZha2UgPHNw YW4gY2xhc3M9Imluc2VydCI+Y2FsbGVyLWlkPwk4PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRl Ij4gICAgICAzLjcuPC9zcGFuPiBIYXNuJ3QgaXQgYWx3YXlzIGJlZW4gcG9zc2libGUgdG8gZmFr ZSA8c3BhbiBjbGFzcz0iZGVsZXRlIj5jYWxsZXItaWQ/Li4uLi4uLi44PC9zcGFuPjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4zLjcuPC9zcGFu PglXaHkgYXJlIHRoZSBhdHRhY2tzIGdyb3dpbmcgPHNwYW4gY2xhc3M9Imluc2VydCI+bm93Pwk4 PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICAgICAzLjguPC9zcGFuPiBXaHkgYXJlIHRo ZSBhdHRhY2tzIGdyb3dpbmcgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+bm93Py4uLi4uLi4uLi4uLi4u Li4uLi4uLi4uLi44PC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3Bh biBjbGFzcz0iaW5zZXJ0Ij4zLjguPC9zcGFuPglJcyB0aGlzIGEgVVNBLXNwZWNpZmljIDxzcGFu IGNsYXNzPSJpbnNlcnQiPnByb2JsZW0/CTg8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAg ICAgIDMuOS48L3NwYW4+IElzIHRoaXMgYSBVU0Etc3BlY2lmaWMgPHNwYW4gY2xhc3M9ImRlbGV0 ZSI+cHJvYmxlbT8uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLjg8L3NwYW4+PC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPjMuOS48L3NwYW4+CVdo eSB3aWxsIGNhcnJpZXJzIDxzcGFuIGNsYXNzPSJpbnNlcnQiPmZpeCB0aGlzPwk4PC9zcGFuPjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48 c3BhbiBjbGFzcz0iZGVsZXRlIj4gICAgICAzLjEwLjwvc3Bhbj4gV2h5IHdpbGwgY2FycmllcnMg PHNwYW4gY2xhc3M9ImRlbGV0ZSI+YWRvcHQgdGhpcz8uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4u Li44PC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0i aW5zZXJ0Ij4zLjEwLjwvc3Bhbj4JV2lsbCBjb3VudHJpZXMgZG8gdGhpcyBmb3IgaW50ZXJuYXRp b25hbCBjYWxscyB0byA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5vdGhlcnM/CTk8L3NwYW4+PC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFu IGNsYXNzPSJkZWxldGUiPiAgICAgIDMuMTEuPC9zcGFuPiBXaWxsIGNvdW50cmllcyBkbyB0aGlz IGZvciBpbnRlcm5hdGlvbmFsIGNhbGxzIHRvIDxzcGFuIGNsYXNzPSJkZWxldGUiPm90aGVycz85 PC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5z ZXJ0Ij4zLjExLjwvc3Bhbj4JSXNuJ3QgdGhpcyB0aGUgc2FtZSBwcm9ibGVtIGVtYWlsIGhhcyBm b3IgPHNwYW4gY2xhc3M9Imluc2VydCI+c3BhbT8JMTA8L3NwYW4+PC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxl dGUiPiAgICAgIDMuMTIuPC9zcGFuPiBJc24ndCB0aGlzIHRoZSBzYW1lIHByb2JsZW0gZW1haWwg aGFzIGZvciA8c3BhbiBjbGFzcz0iZGVsZXRlIj5zcGFtPy4uLi4uLi4uMTA8L3NwYW4+PC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPjMuMTIuPC9z cGFuPglXaGF0IHNjYWxlIGRvZXMgYSBzb2x1dGlvbiBuZWVkIHRvIDxzcGFuIGNsYXNzPSJpbnNl cnQiPmFjaGlldmU/CTEwPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICAgICAzLjEzLjwv c3Bhbj4gV2hhdCBzY2FsZSBkb2VzIGEgc29sdXRpb24gbmVlZCB0byA8c3BhbiBjbGFzcz0iZGVs ZXRlIj5hY2hpZXZlPy4uLi4uLi4uLi4uLjEwPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmJsb2NrIj40LglCZWhhdmlvcmFsIDxzcGFuIGNsYXNzPSJpbnNlcnQiPmNoYW5nZXMJMTE8 L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs YmxvY2siPiAgIDQuIEJlaGF2aW9yYWwgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+Y2hhbmdlcy4uLi4u Li4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4xMTwvc3Bhbj48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJibG9jayI+NC4xLglXaWxsIGludmFsaWQgY2FsbGluZyBudW1iZXJz IGJlIDxzcGFuIGNsYXNzPSJpbnNlcnQiPmJsb2NrZWQ/CTExPC9zcGFuPjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICA0LjEuIFdp bGwgaW52YWxpZCBjYWxsaW5nIG51bWJlcnMgYmUgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+YmxvY2tl ZD8uLi4uLi4uLi4uLi4uLi4uMTE8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxv Y2siPjQuMi4JV2lsbCBjYWxscyBmcm9tIG5vbi1TVElSLWVuYWJsZWQgY2FycmllcnMgYmUgPHNw YW4gY2xhc3M9Imluc2VydCI+YmxvY2tlZD8JMTE8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgICAgIDQuMi4gV2lsbCBjYWxs cyBmcm9tIG5vbi1TVElSLWVuYWJsZWQgY2FycmllcnMgYmUgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+ YmxvY2tlZD8uLi4xMTwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+NC4z LglXaGF0IGRpZmZlcmVuY2Ugb3IgY2hhbmdlcyB3aWxsIGNvbnN1bWVycyA8c3BhbiBjbGFzcz0i aW5zZXJ0Ij5zZWU/CTEyPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICA0LjMuIFdoYXQgZGlmZmVyZW5jZSBvciBjaGFu Z2VzIHdpbGwgY29uc3VtZXJzIDxzcGFuIGNsYXNzPSJkZWxldGUiPnNlZT8uLi4uLi4uLi4uMTE8 L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjQuNC4JV2lsbCB0aGlzIHBy ZXZlbnQgbGVnaXRpbWF0ZSBjYWxsZXItYWdlbnQgPHNwYW4gY2xhc3M9Imluc2VydCI+Y2FsbHM/ CTEyPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGJsb2NrIj4gICAgICA0LjQuIFdpbGwgdGhpcyBwcmV2ZW50IGxlZ2l0aW1hdGUgY2FsbGVy LWFnZW50IDxzcGFuIGNsYXNzPSJkZWxldGUiPmNhbGxzPy4uLi4uLi4uMTI8L3NwYW4+PC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjQuNS4JV2lsbCBkb2N0b3JzIHN0aWxsIGJlIGFi bGUgdG8gdXNlIHRoZWlyIG9mZmljZSA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5udW1iZXI/CTEzPC9z cGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJs b2NrIj4gICAgICA0LjUuIFdpbGwgZG9jdG9ycyBzdGlsbCBiZSBhYmxlIHRvIHVzZSB0aGVpciBv ZmZpY2UgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+bnVtYmVyPy4uMTI8L3NwYW4+PC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyYmxvY2siPjQuNi4JV2lsbCB0aGlzIHByZXZlbnQgb3V0LXNvdXJjZWQg PHNwYW4gY2xhc3M9Imluc2VydCI+Y2FsbC1jZW50ZXJzPwkxMzwvc3Bhbj48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgICAgNC42LiBX aWxsIHRoaXMgcHJldmVudCA8c3BhbiBjbGFzcz0iZGVsZXRlIj5sZWdpdGltYXRlPC9zcGFuPiBv dXQtc291cmNlZCA8c3BhbiBjbGFzcz0iZGVsZXRlIj5jYWxsLWNlbnRlcnM/Li4xMzwvc3Bhbj48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+NC43LglXaG8gbmVlZHMgdG8gaW1wbGVt ZW50IHRoaXMgbmV3IDxzcGFuIGNsYXNzPSJpbnNlcnQiPnRlY2hub2xvZ3k/CTEzPC9zcGFuPjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4g ICAgICA0LjcuIFdobyBuZWVkcyB0byBpbXBsZW1lbnQgdGhpcyBuZXcgPHNwYW4gY2xhc3M9ImRl bGV0ZSI+dGVjaG5vbG9neT8uLi4uLi4uLi4uLi4uMTM8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyYmxvY2siPjQuOC4JV2hhdCBvdGhlciBpbmR1c3RyeSBvcmdhbml6YXRpb25zIGFy ZSA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5pbnZvbHZlZD8JMTM8L3NwYW4+PC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgICAgIDQuOC4gV2hh dCBvdGhlciBpbmR1c3RyeSBvcmdhbml6YXRpb25zIGFyZSA8c3BhbiBjbGFzcz0iZGVsZXRlIj5p bnZvbHZlZD8uLi4uLi4uLi4xMzwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9j ayI+NS4JQ2FsbGluZyBOdW1iZXIgdnMuIENhbGxpbmcgPHNwYW4gY2xhc3M9Imluc2VydCI+TmFt ZQkxMzwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxibG9jayI+ICAgNS4gQ2FsbGluZyBOdW1iZXIgdnMuIENhbGxpbmcgPHNwYW4gY2xhc3M9 ImRlbGV0ZSI+TmFtZS4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLjEzPC9zcGFuPjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj41LjEuCVdoYXQgaXMgImNhbGxpbmcgbnVtYmVy IiB2cy4gImNhbGxpbmcgPHNwYW4gY2xhc3M9Imluc2VydCI+bmFtZSI/CTEzPC9zcGFuPjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAg ICA1LjEuIFdoYXQgaXMgImNhbGxpbmcgbnVtYmVyIiB2cy4gImNhbGxpbmcgPHNwYW4gY2xhc3M9 ImRlbGV0ZSI+bmFtZSI/Li4uLi4uLi4uLi4uMTM8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyYmxvY2siPjUuMi4JV2h5IGlzbid0IFNUSVIgdmFsaWRhdGluZyBjYWxsaW5nIDxzcGFu IGNsYXNzPSJpbnNlcnQiPm5hbWVzPwkxNDwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgICAgNS4yLiBXaHkgaXNuJ3QgU1RJ UiB2YWxpZGF0aW5nIGNhbGxpbmcgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+bmFtZXM/Li4uLi4uLi4u Li4uLi4uLjEzPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj41LjMuCVdo eSBpcyBpdCBoYXJkIHRvIHZhbGlkYXRlIGNhbGxpbmcgPHNwYW4gY2xhc3M9Imluc2VydCI+bmFt ZXM/CTE0PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGJsb2NrIj4gICAgICA1LjMuIFdoeSBpcyBpdCBoYXJkIHRvIHZhbGlkYXRlIGNhbGxp bmcgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+bmFtZXM/Li4uLi4uLi4uLi4uLi4uMTQ8L3NwYW4+PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjYuCTxzcGFuIGNsYXNzPSJpbnNlcnQiPlBy aXZhY3kJMTU8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsYmxvY2siPiAgIDYuIDxzcGFuIGNsYXNzPSJkZWxldGUiPlByaXZhY3kuLi4uLi4u Li4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4xNDwvc3Bhbj48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+Ni4xLglEb2VzIFNUSVIgaW1wYWN0IDxz cGFuIGNsYXNzPSJpbnNlcnQiPnByaXZhY3k/CTE1PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICA2LjEuIERvZXMgU1RJ UiBpbXBhY3QgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+cHJpdmFjeT8uLi4uLi4uLi4uLi4uLi4uLi4u Li4uLi4uLi4uLi4uMTU8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjYu Mi4JSG93IGRvIGFub255bW91cyBjYWxscyB3b3JrIHdpdGggPHNwYW4gY2xhc3M9Imluc2VydCI+ U1RJUj8JMTU8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsYmxvY2siPiAgICAgIDYuMi4gSG93IGRvIGFub255bW91cyBjYWxscyB3b3JrIHdp dGggPHNwYW4gY2xhc3M9ImRlbGV0ZSI+U1RJUj8uLi4uLi4uLi4uLi4uLi4uLi4xNTwvc3Bhbj48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+Ni4zLglCdXQgY2FuJ3QgdGhlIGNhcnJp ZXIgc3RpbGwgZGV0ZXJtaW5lIHRoZSA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5jYWxsZXI/CTE1PC9z cGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJs b2NrIj4gICAgICA2LjMuIEJ1dCBjYW4ndCB0aGUgY2FycmllciBzdGlsbCBkZXRlcm1pbmUgdGhl IDxzcGFuIGNsYXNzPSJkZWxldGUiPmNhbGxlcj8uLi4uLi4uMTU8L3NwYW4+PC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyYmxvY2siPjYuNC4JPHNwYW4gY2xhc3M9Imluc2VydCI+RG9lcyB0aGlz IGF1dG9tYXRpY2FsbHkgcmV2ZWFsIHRoZSBpZGVudGl0eSBvZiBhbnkgY2Fycmllcjwvc3Bhbj48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ ICAgICAgNi40LiA8c3BhbiBjbGFzcz0iZGVsZXRlIj5XaHkgZG8gd2UgbmVlZDwvc3Bhbj4gdG8g PHNwYW4gY2xhc3M9ImRlbGV0ZSI+aGlkZTwvc3Bhbj4gdGhlIDxzcGFuIGNsYXNzPSJkZWxldGUi PmNhcnJpZXIncyBpZGVudGl0eT8uLi4uLi4uLi4uMTU8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPm90aGVyIHRoYW4gdGhlIG9uZSBw cm92aWRpbmcgdGhlIGNhbGw8L3NwYW4+IHRvIHRoZSA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5kZXN0 aW5hdGlvbj8JMTU8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsYmxvY2siPiAgICAgIDYuNS4gPHNwYW4gY2xhc3M9ImRlbGV0ZSI+V2h5IGRv IHdlIG5lZWQgdG8gaGlkZTwvc3Bhbj4gc3Vic2NyaWJlciA8c3BhbiBjbGFzcz0iZGVsZXRlIj5p ZGVudGl0eSBpbmZvPy4uLi4uLi4uMTY8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy YmxvY2siPjYuNS4JPHNwYW4gY2xhc3M9Imluc2VydCI+RG9lcyB0aGlzIGF1dG9tYXRpY2FsbHkg cmV2ZWFsPC9zcGFuPiBzdWJzY3JpYmVyIDxzcGFuIGNsYXNzPSJpbnNlcnQiPmluZm9ybWF0aW9u PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGJsb2NrIj4gICAgICA2LjYuIFdoeSBkbyB3ZSBuZWVkIHRvIGhpZGUgc3Vic2NyaWJlciByZWFj aGFiaWxpdHkgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+aW5mbz8uLi4uMTY8L3NwYW4+PC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPnB1YmxpY2FsbHk/ CTE2PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGJsb2NrIj4gICA3LiA8c3BhbiBjbGFzcz0iZGVsZXRlIj5Tb2x1dGlvbnMuLi4uLi4uLi4u Li4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uMTY8L3NwYW4+PC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjYuNi4JV2h5IGRvIHdlIG5lZWQgdG8gaGlkZSBz dWJzY3JpYmVyIHJlYWNoYWJpbGl0eSA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5pbmZvPwkxNjwvc3Bh bj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9j ayI+ICAgICAgNy4xLiBXaGF0IGFyZSB0aGUgcHJvcG9zZWQgc29sdXRpb25zIHNvIGZhciwgYXQg YSA8c3BhbiBjbGFzcz0iZGVsZXRlIj5oaWdoLWxldmVsPzE2PC9zcGFuPjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmJsb2NrIj43Lgk8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5Tb2x1dGlvbnMJMTY8 L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs YmxvY2siPiAgICAgIDcuMi4gV2hhdCBkb2VzICJpbi1iYW5kIiB2cy4gIm91dC1vZi1iYW5kIiA8 c3BhbiBjbGFzcz0iZGVsZXRlIj5tZWFuPy4uLi4uLi4uLi4uLi4xNzwvc3Bhbj48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJibG9jayI+Ny4xLglXaGF0IGFyZSB0aGUgcHJvcG9zZWQgc29sdXRp b25zIHNvIGZhciwgYXQgYSA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5oaWdoLWxldmVsPwkxNzwvc3Bh bj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9j ayI+ICAgICAgNy4zLiBXaHkgYXJlIHRoZXJlIGJvdGggYW4gaW4tYmFuZCBhbmQgb3V0LW9mLWJh bmQgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+c29sdXRpb24/LjE3PC9zcGFuPjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmJsb2NrIj43LjIuCVdoYXQgZG9lcyAiaW4tYmFuZCIgdnMuICJvdXQtb2Yt YmFuZCIgPHNwYW4gY2xhc3M9Imluc2VydCI+bWVhbj8JMTg8L3NwYW4+PC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgICAgIDcuNC4gV2h5 IGNhbid0IHdlIGp1c3QgZG8gUC1Bc3NlcnRlZC1JZGVudGl0eSB3aXRob3V0IDxzcGFuIGNsYXNz PSJkZWxldGUiPlNUSVI/Li4xODwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9j ayI+Ny4zLglXaHkgYXJlIHRoZXJlIGJvdGggYW4gaW4tYmFuZCBhbmQgb3V0LW9mLWJhbmQgPHNw YW4gY2xhc3M9Imluc2VydCI+c29sdXRpb24/CTE4PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICA3LjUuIFdoeSBjYW4n dCB3ZSBqdXN0IHNpZ24gdXNpbmcgYSBjYXJyaWVyLXdpZGUgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+ aWRlbnRpdHk/Li4uMTg8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjcu NC4JV2h5IGNhbid0IHdlIGp1c3QgZG8gUC1Bc3NlcnRlZC1JZGVudGl0eSB3aXRob3V0IDxzcGFu IGNsYXNzPSJpbnNlcnQiPlNUSVI/CTE4PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICA3LjYuIFdoeSBhcmUgd2Ugb25s eSBmb2N1c2VkIG9uIDxzcGFuIGNsYXNzPSJkZWxldGUiPlNJUD8uLi4uLi4uLi4uLi4uLi4uLi4u Li4uLi4uMTk8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjcuNS4JV2h5 IGNhbid0IHdlIGp1c3Qgc2lnbiB1c2luZyBhIGNhcnJpZXItd2lkZSA8c3BhbiBjbGFzcz0iaW5z ZXJ0Ij5pZGVudGl0eT8JMTg8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgICAgIDcuNy4gV2hhdCBhYm91dCBvdGhlciBJUC1i YXNlZCA8c3BhbiBjbGFzcz0iZGVsZXRlIj5wcm90b2NvbHM/Li4uLi4uLi4uLi4uLi4uLi4uLi4x OTwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+Ny42LglXaHkgYXJlIHdl IG9ubHkgZm9jdXNlZCBvbiA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5TSVA/CTE5PC9zcGFuPjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAg ICA3LjguIFdoYXQgU0lQIGhlYWRlciBpcyB1c2VkIGZvciB0aGUgY2FsbGluZyA8c3BhbiBjbGFz cz0iZGVsZXRlIj5udW1iZXI/Li4uLi4uLi4uMTk8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyYmxvY2siPjcuNy4JV2hhdCBhYm91dCBvdGhlciBJUC1iYXNlZCA8c3BhbiBjbGFzcz0i aW5zZXJ0Ij5wcm90b2NvbHM/CTE5PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJi bG9jayI+Ny44LglXaGF0IFNJUCBoZWFkZXIgaXMgdXNlZCBmb3IgdGhlIGNhbGxpbmcgPHNwYW4g Y2xhc3M9Imluc2VydCI+bnVtYmVyPwkyMDwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgIDcuOS4gRG9lc24ndCB0aGUgU0lQ IEZyb20gb3IgVG8gVVJJIHN0cmluZyBjaGFuZ2UgYWxvbmcgdGhlIHBhdGg/PC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgNy45LiBEb2Vzbid0IHRoZSBTSVAgRnJvbSBvciBU byBVUkkgc3RyaW5nIGNoYW5nZSBhbG9uZyB0aGUgcGF0aD88L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAgMjA8L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICAgIDIwPC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAw MDQiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICA3LjEwLiBEb2VzIFNUSVIgY3J5cHRv LXNpZ24gdGhlIFNJUCBGcm9tIGFuZCBUbyBVUkkgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+aGVhZGVy cz8uMjA8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjcuMTAuCURvZXMg U1RJUiBjcnlwdG8tc2lnbiB0aGUgU0lQIEZyb20gYW5kIFRvIFVSSSA8c3BhbiBjbGFzcz0iaW5z ZXJ0Ij5oZWFkZXJzPwkyMDwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgICAgNy4xMS4gRG9lcyBTVElSIGNoYW5nZSBTSVAg RnJvbSBvciBUbyBVUkkgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+aGVhZGVycz8uLi4uLi4uLi4uLjIx PC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj43LjExLglEb2VzIFNUSVIg PHNwYW4gY2xhc3M9Imluc2VydCI+cmVxPC9zcGFuPiBjaGFuZ2UgU0lQIEZyb20gb3IgVG8gVVJJ IDxzcGFuIGNsYXNzPSJpbnNlcnQiPmhlYWRlcnM/CTIxPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICA4LiBJbi1iYW5kIFNv bHV0aW9uIDxzcGFuIGNsYXNzPSJkZWxldGUiPlF1ZXN0aW9ucy4uLi4uLi4uLi4uLi4uLi4uLi4u Li4uLi4uLi4uLi4uLi4uMjE8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2si PjguCUluLWJhbmQgU29sdXRpb24gPHNwYW4gY2xhc3M9Imluc2VydCI+UXVlc3Rpb25zCTIxPC9z cGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+ICAgICAgOC4xLiBEb24ndCB3ZSBhbHJlYWR5IGhhdmUgaW4tYmFuZCB3aXRoIFJGQyA0NDc0 IFNJUCBJZGVudGl0eT8yMTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgIDgu MS4gRG9uJ3Qgd2UgYWxyZWFkeSBoYXZlIGluLWJhbmQgd2l0aCBSRkMgNDQ3NCBTSVAgSWRlbnRp dHk/MjE8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAwNSI+PC9hPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAg ICAgIDguMi4gV2hhdCB3aWxsIGhhcHBlbiB0byBSRkMgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+NDQ3 ND8uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4yMTwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJibG9jayI+OC4yLglXaGF0IHdpbGwgaGFwcGVuIHRvIFJGQyA8c3BhbiBjbGFzcz0i aW5zZXJ0Ij40NDc0PwkyMjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgICAgOC4zLiBXaGF0IGFyZSB0aGUgcHJvcG9zZWQg aW4tYmFuZCBzb2x1dGlvbnMgc28gPHNwYW4gY2xhc3M9ImRlbGV0ZSI+ZmFyPy4uLi4uLi4uLjIx PC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj44LjMuCVdoYXQgYXJlIHRo ZSBwcm9wb3NlZCBpbi1iYW5kIHNvbHV0aW9ucyBzbyA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5mYXI/ CTIyPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGJsb2NrIj4gICAgICA4LjQuIFdoeSBub3QganVzdCBjYXJyeSBhIGNlcnRpZmljYXRlIGlu IHRoZSBTSVAgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+bWVzc2FnZT8uLi4uMjI8L3NwYW4+PC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjguNC4JV2h5IG5vdCBqdXN0IGNhcnJ5IGEgY2Vy dGlmaWNhdGUgaW4gdGhlIFNJUCA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5tZXNzYWdlPwkyMzwvc3Bh bj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9j ayI+ICAgOS4gT3V0LW9mLWJhbmQgU29sdXRpb24gPHNwYW4gY2xhc3M9ImRlbGV0ZSI+UXVlc3Rp b25zLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLjIzPC9zcGFuPjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmJsb2NrIj45LglPdXQtb2YtYmFuZCBTb2x1dGlvbiA8c3BhbiBjbGFzcz0i aW5zZXJ0Ij5RdWVzdGlvbnMJMjM8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgICAgIDkuMS4gV2hhdCBhcmUgdGhlIHByb3Bv c2VkIG91dC1vZi1iYW5kIDxzcGFuIGNsYXNzPSJkZWxldGUiPnNvbHV0aW9ucz8uLi4uLi4uLi4u Li4yMzwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+OS4xLglXaGF0IGFy ZSB0aGUgcHJvcG9zZWQgb3V0LW9mLWJhbmQgPHNwYW4gY2xhc3M9Imluc2VydCI+c29sdXRpb25z PwkyMzwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPiAgICAgIDkuMi4gV2hhdCBhcmUgdGhlIG1ham9yIGFkdmFudGFnZXMgb2YgYW4g b3V0LW9mLWJhbmQgc29sdXRpb24/MjM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4g ICAgICA5LjIuIFdoYXQgYXJlIHRoZSBtYWpvciBhZHZhbnRhZ2VzIG9mIGFuIG91dC1vZi1iYW5k IHNvbHV0aW9uPzIzPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij4gICAgICA5LjMuIFdoYXQgYXJlIHRoZSBtYWpvciBkaXNhZHZhbnRhZ2VzIG9m IGFuIG91dC1vZi1iYW5kIHNvbHV0aW9uPzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PiAgICAgIDkuMy4gV2hhdCBhcmUgdGhlIG1ham9yIGRpc2FkdmFudGFnZXMgb2YgYW4gb3V0LW9m LWJhbmQgc29sdXRpb24/PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAwMDYiPjwvYT48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGJsb2NrIj4gICAgICAgICAgIDxzcGFuIGNsYXNzPSJkZWxldGUiPjIzPC9zcGFuPjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4JPHNwYW4gY2xhc3M9Imluc2VydCI+MjQ8L3NwYW4+ PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2si PiAgIDEwLiBTZWN1cml0eSA8c3BhbiBjbGFzcz0iZGVsZXRlIj5Db25zaWRlcmF0aW9ucy4uLi4u Li4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4yMzwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJibG9jayI+MTAuCVNlY3VyaXR5IDxzcGFuIGNsYXNzPSJpbnNlcnQiPkNvbnNp ZGVyYXRpb25zCTI0PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICAxMC4xLiBXaGF0IHR5cGVzIG9mIGF0dGFja2VycyBh cmUgd2Ugd29ycmllZCA8c3BhbiBjbGFzcz0iZGVsZXRlIj5hYm91dD8uLi4uLi4uLi4uMjM8L3Nw YW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjEwLjEuCVdoYXQgdHlwZXMgb2Yg YXR0YWNrZXJzIGFyZSB3ZSB3b3JyaWVkIDxzcGFuIGNsYXNzPSJpbnNlcnQiPmFib3V0PwkyNDwv c3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxi bG9jayI+ICAgICAgMTAuMi4gV2hhdCBhcmUgdGhlIG1haW4gdGhyZWF0cyB3ZSBhcmUgd29ycmll ZCA8c3BhbiBjbGFzcz0iZGVsZXRlIj5hYm91dD8uLi4uLi4uLjI0PC9zcGFuPjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4xMC4yLglXaGF0IGFyZSB0aGUgbWFpbiB0aHJlYXRzIHdl IGFyZSB3b3JyaWVkIDxzcGFuIGNsYXNzPSJpbnNlcnQiPmFib3V0PwkyNTwvc3Bhbj48L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgICAg MTAuMy4gV2hhdCB0eXBlcyBvZiBEb1MgYXR0YWNrcyBhcmUgd2Ugd29ycmllZCA8c3BhbiBjbGFz cz0iZGVsZXRlIj5hYm91dD8uLi4uLi4uLjI0PC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmJsb2NrIj4xMC4zLglXaGF0IHR5cGVzIG9mIERvUyBhdHRhY2tzIGFyZSB3ZSB3b3JyaWVk IDxzcGFuIGNsYXNzPSJpbnNlcnQiPmFib3V0PwkyNTwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgICAgMTAuNC4gV2hhdCB0 eXBlcyBvZiBjdXQtYW5kLXBhc3RlIGF0dGFja3MgYXJlIHdlIHdvcnJpZWQgPHNwYW4gY2xhc3M9 ImRlbGV0ZSI+YWJvdXQ/MjU8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2si PjEwLjQuCVdoYXQgdHlwZXMgb2YgY3V0LWFuZC1wYXN0ZSBhdHRhY2tzIGFyZSB3ZSB3b3JyaWVk IDxzcGFuIGNsYXNzPSJpbnNlcnQiPmFib3V0PwkyNjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgICAgMTAuNS4gV2h5IGFy ZSB3ZSBub3Qgd29ycmllZCBhYm91dCBNSVRNIDxzcGFuIGNsYXNzPSJkZWxldGUiPmF0dGFja3M/ Li4uLi4uLi4uLi4uLjI2PC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4x MC41LglXaHkgYXJlIHdlIG5vdCB3b3JyaWVkIGFib3V0IE1JVE0gPHNwYW4gY2xhc3M9Imluc2Vy dCI+YXR0YWNrcz8JMjc8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgICAgIDEwLjYuIFdoeSBhcmUgd2Ugbm90IHdvcnJpZWQg YWJvdXQgcmVwbGF5IDxzcGFuIGNsYXNzPSJkZWxldGUiPmF0dGFja3M/Li4uLi4uLi4uLi4yNjwv c3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+MTAuNi4JV2h5IGFyZSB3ZSBu b3Qgd29ycmllZCBhYm91dCByZXBsYXkgPHNwYW4gY2xhc3M9Imluc2VydCI+YXR0YWNrcz8JMjc8 L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs YmxvY2siPiAgICAgIDEwLjcuIElzIHRoZSBjYWxsIG1lZGlhIChhdWRpbyBvciB2aWRlbykgc2Vj dXJlZCBieSA8c3BhbiBjbGFzcz0iZGVsZXRlIj5TVElSPy4uLi4yNjwvc3Bhbj48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJibG9jayI+MTAuNy4JSXMgdGhlIGNhbGwgbWVkaWEgKGF1ZGlvIG9y IHZpZGVvKSBzZWN1cmVkIGJ5IDxzcGFuIGNsYXNzPSJpbnNlcnQiPlNUSVI/CTI3PC9zcGFuPjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4g ICAxMS4gR2VuZXJhbCBTZWN1cml0eSA8c3BhbiBjbGFzcz0iZGVsZXRlIj5UZXJtaW5vbG9neS4u Li4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uMjc8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyYmxvY2siPjExLglHZW5lcmFsIFNlY3VyaXR5IDxzcGFuIGNsYXNzPSJpbnNlcnQi PlRlcm1pbm9sb2d5CTI4PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICAxMS4xLiBXaGF0IGlzIGEgcHJpdmF0ZSB2cy4g cHVibGljIDxzcGFuIGNsYXNzPSJkZWxldGUiPmtleT8uLi4uLi4uLi4uLi4uLi4uLi4uLi4uMjc8 L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjExLjEuCVdoYXQgaXMgYSBw cml2YXRlIHZzLiBwdWJsaWMgPHNwYW4gY2xhc3M9Imluc2VydCI+a2V5PwkyODwvc3Bhbj48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAg ICAgMTEuMi4gV2hhdCBkb2VzICJjcnlwdG9ncmFwaGljYWxseSBzaWduIiA8c3BhbiBjbGFzcz0i ZGVsZXRlIj5tZWFuPy4uLi4uLi4uLi4uLi4uLjI4PC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmJsb2NrIj4xMS4yLglXaGF0IGRvZXMgImNyeXB0b2dyYXBoaWNhbGx5IHNpZ24iIDxz cGFuIGNsYXNzPSJpbnNlcnQiPm1lYW4/CTI5PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICAxMS4zLiBXaGF0IGlzIGEg PHNwYW4gY2xhc3M9ImRlbGV0ZSI+Y2VydGlmaWNhdGU/Li4uLi4uLi4uLi4uLi4uLi4uLi4uLi4u Li4uLi4uLi4uMjg8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjExLjMu CVdoYXQgaXMgYSA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5jZXJ0aWZpY2F0ZT8JMjk8L3NwYW4+PC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAg ICAgIDExLjQuIFdoYXQgaXMgYSA8c3BhbiBjbGFzcz0iZGVsZXRlIj5QS0k/Li4uLi4uLi4uLi4u Li4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4yOTwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJibG9jayI+MTEuNC4JV2hhdCBpcyBhIDxzcGFuIGNsYXNzPSJpbnNlcnQiPlBLST8J MzA8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsYmxvY2siPiAgICAgIDExLjUuIFdoYXQgaXMgYSA8c3BhbiBjbGFzcz0iZGVsZXRlIj5XZWIt UEtJPy4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4zMDwvc3Bhbj48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+MTEuNS4JV2hhdCBpcyBhIDxzcGFuIGNsYXNzPSJp bnNlcnQiPldlYi1QS0k/CTMwPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICAxMS42LiBXaGF0IGlzIHdyb25nIHdpdGgg dGhlIDxzcGFuIGNsYXNzPSJkZWxldGUiPldlYi1QS0k/Li4uLi4uLi4uLi4uLi4uLi4uLi4uLi4u MzA8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjExLjYuCVdoYXQgaXMg d3Jvbmcgd2l0aCB0aGUgPHNwYW4gY2xhc3M9Imluc2VydCI+V2ViLVBLST8JMzE8L3NwYW4+PC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAg ICAgIDExLjcuIFdoYXQgaXMgYW4gPHNwYW4gY2xhc3M9ImRlbGV0ZSI+UlBLST8uLi4uLi4uLi4u Li4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4zMTwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJibG9jayI+MTEuNy4JV2hhdCBpcyBhbiA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5SUEtJ PwkzMjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxibG9jayI+ICAgICAgMTEuOC4gV2hhdCBpcyA8c3BhbiBjbGFzcz0iZGVsZXRlIj5ES0lN Py4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLjMxPC9zcGFuPjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4xMS44LglXaGF0IGlzIDxzcGFuIGNsYXNzPSJp bnNlcnQiPkRLSU0/CTMyPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICAxMS45LiBXaGF0IGlzIDxzcGFuIGNsYXNzPSJk ZWxldGUiPkROU1NFQz8uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uMzI8 L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjExLjkuCVdoYXQgaXMgPHNw YW4gY2xhc3M9Imluc2VydCI+RE5TU0VDPwkzMzwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgICAgMTEuMTAuIFdoaWNoIHNl Y3VyaXR5IG1vZGVsIGlzIFNUSVIgZ29pbmcgdG8gPHNwYW4gY2xhc3M9ImRlbGV0ZSI+dXNlPy4u Li4uLi4uLi4uLjMzPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4xMS4x MC4JV2hpY2ggc2VjdXJpdHkgbW9kZWwgaXMgU1RJUiBnb2luZyB0byA8c3BhbiBjbGFzcz0iaW5z ZXJ0Ij51c2U/CTM0PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAxMi4gPHNwYW4gY2xhc3M9ImRlbGV0ZSI+R2xvc3Nhcnku Li4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uMzM8L3Nw YW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjEyLgk8c3BhbiBjbGFzcz0iaW5z ZXJ0Ij5UZXJtaW5vbG9neQkzNDwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgMTMuIElBTkEgPHNwYW4gY2xhc3M9ImRlbGV0 ZSI+Q29uc2lkZXJhdGlvbnMuLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4u LjM2PC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4xMy4JSUFOQSA8c3Bh biBjbGFzcz0iaW5zZXJ0Ij5Db25zaWRlcmF0aW9ucwkzNTwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgMTQuIDxzcGFuIGNs YXNzPSJkZWxldGUiPkFja25vd2xlZGdtZW50cy4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4u Li4uLi4uLi4uLi4uLi4uLjM2PC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2Nr Ij4xNC4JPHNwYW4gY2xhc3M9Imluc2VydCI+QWNrbm93bGVkZ21lbnRzCTM1PC9zcGFuPjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAx NS4gPHNwYW4gY2xhc3M9ImRlbGV0ZSI+UmVmZXJlbmNlcy4uLi4uLi4uLi4uLi4uLi4uLi4uLi4u Li4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uMzY8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyYmxvY2siPjE1Lgk8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5SZWZlcmVuY2VzCTM1PC9zcGFu PjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2Nr Ij4gICAgICAxNS4xLiBJbmZvcm1hdGl2ZSA8c3BhbiBjbGFzcz0iZGVsZXRlIj5SZWZlcmVuY2Vz Li4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uMzY8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyYmxvY2siPjE1LjEuCUluZm9ybWF0aXZlIDxzcGFuIGNsYXNzPSJpbnNlcnQi PlJlZmVyZW5jZXMJMzU8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIEF1dGhvcidzIDxzcGFuIGNsYXNzPSJkZWxldGUiPkFk ZHJlc3MuLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uMzc8 L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPkF1dGhvcidzIDxzcGFuIGNs YXNzPSJpbnNlcnQiPkFkZHJlc3MJMzU8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPjEuIEludHJvZHVjdGlvbjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjEuIElu dHJvZHVjdGlvbjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBUaGUgSUVURiBwcm9j ZXNzIGZvciBmb3JtaW5nIG5ldyBXb3JraW5nIEdyb3VwcyBpbnZvbHZlcyBnZXR0aW5nIGE8L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBUaGUgSUVURiBwcm9jZXNzIGZvciBmb3Jt aW5nIG5ldyBXb3JraW5nIEdyb3VwcyBpbnZvbHZlcyBnZXR0aW5nIGE8L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGdyb3VwIG9mIGludGVy ZXN0ZWQgaW5kaXZpZHVhbHMgZnJvbSB2YXJpb3VzIGJhY2tncm91bmRzIHRvZ2V0aGVyIHRvPC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgZ3JvdXAgb2YgaW50ZXJlc3RlZCBpbmRp dmlkdWFscyBmcm9tIHZhcmlvdXMgYmFja2dyb3VuZHMgdG9nZXRoZXIgdG88L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGRlZmluZSBhIHBy b2JsZW0gYW5kIGRpc2N1c3MgcG9zc2libGUgc29sdXRpb25zLiAgVGhlcmUgaXMgYSBkZWZpbmVk PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgZGVmaW5lIGEgcHJvYmxlbSBhbmQg ZGlzY3VzcyBwb3NzaWJsZSBzb2x1dGlvbnMuICBUaGVyZSBpcyBhIGRlZmluZWQ8L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHByb2Nlc3Mg Zm9yIGZvcm1pbmcgdGhlIGFjdHVhbCBXb3JraW5nIEdyb3VwLCBidXQgaW4gZ2VuZXJhbCBhPC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgcHJvY2VzcyBmb3IgZm9ybWluZyB0aGUg YWN0dWFsIFdvcmtpbmcgR3JvdXAsIGJ1dCBpbiBnZW5lcmFsIGE8L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIG1haWxpbmcgbGlzdCBpcyBj cmVhdGVkIGluIGFkdmFuY2Ugc28gdGhhdCBpbnRlcmVzdGVkIGluZGl2aWR1YWxzPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgbWFpbGluZyBsaXN0IGlzIGNyZWF0ZWQgaW4gYWR2 YW5jZSBzbyB0aGF0IGludGVyZXN0ZWQgaW5kaXZpZHVhbHM8L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGNhbiBkaXNjdXNzIHRoaW5ncyBw cmlvciB0byB0aGUgZm9ybWFsIGNyZWF0aW9uIG9mIHRoZSBXb3JraW5nPC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+ICAgY2FuIGRpc2N1c3MgdGhpbmdzIHByaW9yIHRvIHRoZSBmb3Jt YWwgY3JlYXRpb24gb2YgdGhlIFdvcmtpbmc8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIEdyb3VwLiAgVHlwaWNhbGx5LCBwcmlvciB0byBi ZWluZyBhIFdvcmtpbmcgR3JvdXAgdGhlIHZvbHVtZSBvZjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmlnaHQiPiAgIEdyb3VwLiAgVHlwaWNhbGx5LCBwcmlvciB0byBiZWluZyBhIFdvcmtpbmcg R3JvdXAgdGhlIHZvbHVtZSBvZjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+ICAgZW1haWxzIGluIHRoZSBsaXN0LCBhbmQgbnVtYmVyIG9mIHBh cnRpY2lwYW50cywgaXMgbm90IGhpZ2guICBGb3I8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij4gICBlbWFpbHMgaW4gdGhlIGxpc3QsIGFuZCBudW1iZXIgb2YgcGFydGljaXBhbnRzLCBp cyBub3QgaGlnaC4gIEZvcjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDA3Ij48L2E+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxibG9jayI+ICAgU1RJUiwgdGhhdCBoYXMgbm90IGJlZW4gdGhlIGNhc2U6IHRoZXJlIGhhdmUg YmVlbiBvdmVyIDxzcGFuIGNsYXNzPSJkZWxldGUiPjE1MDA8L3NwYW4+IGVtYWlsczwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj5TVElSLCB0aGF0IGhhcyBub3QgYmVlbiB0aGUgY2Fz ZTogdGhlcmUgaGF2ZSBiZWVuIG92ZXIgPHNwYW4gY2xhc3M9Imluc2VydCI+MTMwMDwvc3Bhbj4g ZW1haWxzPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs YmxvY2siPiAgIGluIHRoZSBzcGFuIG9mIDxzcGFuIGNsYXNzPSJkZWxldGUiPnRocmVlPC9zcGFu PiBtb250aHMuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPmluIHRoZSBzcGFuIG9m IDxzcGFuIGNsYXNzPSJpbnNlcnQiPnR3byBhbmQgYSBoYWxmPC9zcGFuPiBtb250aHMuPC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFNpbmNlIHRoZSBTVElSIFdvcmtpbmcgR3JvdXAg ZXhwZWN0cyBuZXcgcGFydGljaXBhbnRzIHRvIGpvaW4gaW4gdGhlPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+ICAgU2luY2UgdGhlIFNUSVIgV29ya2luZyBHcm91cCBleHBlY3RzIG5l dyBwYXJ0aWNpcGFudHMgdG8gam9pbiBpbiB0aGU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIG5lYXIgZnV0dXJlLCByZXBlYXRpbmcgc29t ZSBvZiB0aGUgbW9yZSBjb21tb24gcXVlc3Rpb25zIGFuZDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmlnaHQiPiAgIG5lYXIgZnV0dXJlLCByZXBlYXRpbmcgc29tZSBvZiB0aGUgbW9yZSBjb21t b24gcXVlc3Rpb25zIGFuZDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+ICAgYmFja2dyb3VuZCBpbmZvcm1hdGlvbiBpcyBub3QgZWZmaWNpZW50 LiAgSXQgaXMgaG9wZWQgdGhhdCB0aGlzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ ICAgYmFja2dyb3VuZCBpbmZvcm1hdGlvbiBpcyBub3QgZWZmaWNpZW50LiAgSXQgaXMgaG9wZWQg dGhhdCB0aGlzPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij4gICBkb2N1bWVudCBhdm9pZHMgc29tZSBkdXBsaWNhdGlvbiBvZiBxdWVzdGlvbnMg YW5kIGFuc3dlcnMgdGhhdCBtaWdodDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAg IGRvY3VtZW50IGF2b2lkcyBzb21lIGR1cGxpY2F0aW9uIG9mIHF1ZXN0aW9ucyBhbmQgYW5zd2Vy cyB0aGF0IG1pZ2h0PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij4gICBvY2N1ci48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBv Y2N1ci48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgVXN1YWxseSBXb3JraW5nIEdy b3VwcyBjcmVhdGUgZm9ybWFsIG92ZXJ2aWV3IGRvY3VtZW50cyBhbmQgcHJvYmxlbTwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFVzdWFsbHkgV29ya2luZyBHcm91cHMgY3JlYXRl IGZvcm1hbCBvdmVydmlldyBkb2N1bWVudHMgYW5kIHByb2JsZW08L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHN0YXRlbWVudHMgYW5kIHNv IG9uIGFzIG9mZmljaWFsIFdvcmtpbmcgR3JvdXAgZG9jdW1lbnRzLiAgVGhhdCB3aWxsPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgc3RhdGVtZW50cyBhbmQgc28gb24gYXMgb2Zm aWNpYWwgV29ya2luZyBHcm91cCBkb2N1bWVudHMuICBUaGF0IHdpbGw8L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGxpa2VseSBvY2N1ciBm b3IgU1RJUiBhcyB3ZWxsLCBidXQgdGhhdCB0YWtlcyB0aW1lIGFuZCByYXJlbHk8L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBsaWtlbHkgb2NjdXIgZm9yIFNUSVIgYXMgd2VsbCwg YnV0IHRoYXQgdGFrZXMgdGltZSBhbmQgcmFyZWx5PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48 dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4NCiAgICAgIDx0ciBiZ2NvbG9yPSJncmF5Ij48dGQ+ PC90ZD48dGg+PGEgbmFtZT0icGFydC1sMyI+PHNtYWxsPnNraXBwaW5nIHRvIGNoYW5nZSBhdDwv c21hbGw+PGVtPiBwYWdlIDUsIGxpbmUgMTA8L2VtPjwvYT48L3RoPjx0aD4gPC90aD48dGg+PGEg bmFtZT0icGFydC1yMyI+PHNtYWxsPnNraXBwaW5nIHRvIGNoYW5nZSBhdDwvc21hbGw+PGVtPiBw YWdlIDEsIGxpbmUgMjAwPC9lbT48L2E+PC90aD48dGQ+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHRl cm1pbm9sb2d5IGluIHRoaXMgZG9jdW1lbnQgY29uZm9ybXMgdG8gUkZDIDI4MjgsICJJbnRlcm5l dDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHRlcm1pbm9sb2d5IGluIHRoaXMg ZG9jdW1lbnQgY29uZm9ybXMgdG8gUkZDIDI4MjgsICJJbnRlcm5ldDwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgU2VjdXJpdHkgR2xvc3Nh cnkiLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFNlY3VyaXR5IEdsb3NzYXJ5 Ii48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgU2VlIHNlY3Rpb24gMTIgZm9yIGEg Z2xvc3Nhcnkgb2YgdGVybXMgcmVsYXRlZCB0byBTVElSLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmlnaHQiPiAgIFNlZSBzZWN0aW9uIDEyIGZvciBhIGdsb3NzYXJ5IG9mIHRlcm1zIHJlbGF0 ZWQgdG8gU1RJUi48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+My4gQmFja2dyb3VuZDwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjMuIEJhY2tncm91bmQ8L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+My4xLiBXaGF0J3MgdGhlIGdlbmVyYWwgcHJvYmxlbT88L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4zLjEuIFdoYXQncyB0aGUgZ2VuZXJhbCBwcm9ibGVt PzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBUaGUgcHJvYmxlbSB0aGF0IGRyb3Zl IHRoZSBJRVRGIHRvIGZvcm0gdGhlIFNUSVIgV29ya2luZyBHcm91cCBpczwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPiAgIFRoZSBwcm9ibGVtIHRoYXQgZHJvdmUgdGhlIElFVEYgdG8g Zm9ybSB0aGUgU1RJUiBXb3JraW5nIEdyb3VwIGlzPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAwMDgiPjwv YT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICB0aGUgZ3Jvd3RoIGluIDxzcGFuIGNsYXNzPSJkZWxl dGUiPnVuc29saWNpdGVkPC9zcGFuPiBjYWxscyA8c3BhbiBjbGFzcz0iZGVsZXRlIj5pbjwvc3Bh bj4gdGhlIFBTVE4gLSB3aGV0aGVyIGl0IGlzIGNhbGxzIHRvPC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyYmxvY2siPnRoZSBncm93dGggaW4gPHNwYW4gY2xhc3M9Imluc2VydCI+aWxsZWdpdGlt YXRlLCB0eXBpY2FsbHkgYXV0b21hdGVkIChyb2JvLSkgY2FsbHMsPC9zcGFuPjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBsZWdhY3kg UE9UUyBsYW5kbGluZXMsIG1vYmlsZSBwaG9uZXMsIFZvSVAtYmFzZWQgcGhvbmVzLCBidXNpbmVz czwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij5p bXBlcnNvbmF0ZWQ8L3NwYW4+IGNhbGxzIDxzcGFuIGNsYXNzPSJpbnNlcnQiPmludGVuZGVkIHRv IGRlZnJhdWQgKCJ2aXNoaW5nIiksIGltcGVyc29uYXRlZDwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgbGluZXMsIGV0Yy4g IFRoZSBVbml0ZWQgU3RhdGVzIEZlZGVyYWwgQ29tbXVuaWNhdGlvbnMgQ29tbWlzc2lvbjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij5jYWxscyB0 byBlbWVyZ2VuY3kgc2VydmljZXMgaW50ZW5kZWQgdG8gcHJvdm9rZSBhIG1hc3NpdmUgcmVzcG9u c2U8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsYmxvY2siPiAgIChGQ0MpIGFwcHJvYWNoZWQgc2V2ZXJhbCBhY3RpdmUgSUVURiBwYXJ0aWNp cGFudHMgd2l0aCBleHBlcnRpc2UgaW48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ PHNwYW4gY2xhc3M9Imluc2VydCI+KFNXQVQgdGVhbSkgb24gYW4gaW5ub2NlbnQgdmljdGltIGFu ZCBUZWxlcGhvbnkgRGVuaWFsIG9mIFNlcnZpY2U8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIHRoaXMgYXJlYSwgdG8gZGlz Y3VzcyB0aGUgcHJvYmxlbS4gIFRoZSBncm91cCBkZXRlcm1pbmVkIHRoYXQgYTwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij5BdHRhY2tzIHdpdGgg aWxsZWdpdGltYXRlIG51bWJlcnMuICBUaGVzZSBjYWxscyBhcmUgYmVpbmcgcGxhY2VkIG9uPC9z cGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJs b2NrIj4gICBuZWNlc3NhcnkgcGllY2Ugd2FzIG1pc3NpbmcgZnJvbSBhbnkgcG9zc2libGUgc29s dXRpb246IHRoZSB2YWxpZGl0eTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj50aGUg UFNUTiAtIHdoZXRoZXIgaXQgaXMgY2FsbHMgdG8gbGVnYWN5IFBPVFMgbGFuZGxpbmVzLCBtb2Jp bGU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9j ayI+ICAgb2YgdGhlIHNvdXJjZSB0ZWxlcGhvbmUgbnVtYmVyLiAgVGhlIElFVEYgZm9ybWVkIGEg V29ya2luZyBHcm91cDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj5waG9uZXMsIFZv SVAtYmFzZWQgcGhvbmVzLCBidXNpbmVzcyBsaW5lcywgZXRjLiA8c3BhbiBjbGFzcz0iaW5zZXJ0 Ij53aGVyZSB0aGUgdGVsZXBob25lPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICB3aXRoIHRoZSBnb2FsIG9mIGFkZHJlc3Np bmcgdGhhdCBwcm9ibGVtLiAgU1RJUiBpcyB0aGF0IFdvcmtpbmc8L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+bnVtYmVyIG9mIHRoZSBjYWxsaW5n IHBhcnR5IGlzIGVpdGhlciBtaXNzaW5nIG9yIGluY29ycmVjdC48L3NwYW4+ICBUaGU8L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgR3Jv dXAuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPlVuaXRlZCBTdGF0ZXMgRmVkZXJh bCBDb21tdW5pY2F0aW9ucyBDb21taXNzaW9uIChGQ0MpIGFwcHJvYWNoZWQ8L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyYmxvY2siPnNldmVyYWwgYWN0aXZlIElFVEYgcGFydGljaXBhbnRzIHdp dGggZXhwZXJ0aXNlIGluIHRoaXMgYXJlYSwgdG88L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy YmxvY2siPmRpc2N1c3MgdGhlIHByb2JsZW0uICBUaGUgZ3JvdXAgZGV0ZXJtaW5lZCB0aGF0IGEg bmVjZXNzYXJ5IHBpZWNlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj53YXMgbWlz c2luZyBmcm9tIGFueSBwb3NzaWJsZSBzb2x1dGlvbjogdGhlIHZhbGlkaXR5IG9mIHRoZSBzb3Vy Y2U8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9j ayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPnRlbGVwaG9uZSBudW1iZXIuICBU aGUgSUVURiBmb3JtZWQgYSBXb3JraW5nIEdyb3VwIHdpdGggdGhlIGdvYWwgb2Y8L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPmFkZHJlc3NpbmcgdGhhdCBwcm9ibGVtLiAgU1RJUiBp cyB0aGF0IFdvcmtpbmcgR3JvdXAuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZD48YSBuYW1lPSJkaWZmMDAwOSI+PC9hPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIFNvbWUgcGVv cGxlIGhhdmUgZGVzY3JpYmVkIHRoZSBwcm9ibGVtIGFzICJyb2JvY2FsbGVycyIsIGJ1dCB0aGF0 PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPlNvbWUgcGVvcGxlIGhhdmUgZGVzY3Jp YmVkIHRoZSBwcm9ibGVtIGFzIDxzcGFuIGNsYXNzPSJpbnNlcnQiPmluY2x1ZGluZyBhbGw8L3Nw YW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxv Y2siPiAgIHRlcm0gaW5jbHVkZXMgYXV0b21hdGVkIGRpYWxlcnMgdXNlZCBmb3IgdGVsZW1hcmtl dGluZywgcG9saXRpY2FsLDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4icm9ib2Nh bGxlcnMiLCBidXQgdGhhdCB0ZXJtIGluY2x1ZGVzIGF1dG9tYXRlZCBkaWFsZXJzIHVzZWQgZm9y PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2si PiAgIGVtZXJnZW5jeSwgYW5kIG90aGVyIHR5cGVzIG9mIGxlZ2l0aW1hdGUgYXV0b21hdGVkIGNh bGxzLiAgVGhlIHJlYWw8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+dGVsZW1hcmtl dGluZywgcG9saXRpY2FsLCBlbWVyZ2VuY3ksIGFuZCBvdGhlciB0eXBlcyBvZiBsZWdpdGltYXRl PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2si PiAgIHByb2JsZW0gaXMgYm90aCBiZW5pZ24gYW5kIG1hbGljaW91cyBwYXJ0aWVzIG1ha2luZyBw aG9uZSBjYWxscyB0bzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj5hdXRvbWF0ZWQg Y2FsbHMuICBUaGUgcmVhbCBwcm9ibGVtIGlzIGJvdGggYmVuaWduIGFuZCBtYWxpY2lvdXM8L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAg cGVvcGxlIHRoYXQgZG9uJ3Qgd2FudCB0byByZWNlaXZlIHRoZWlyIDxzcGFuIGNsYXNzPSJkZWxl dGUiPmNhbGxzLjwvc3Bhbj4gIFRodXMgaXQncyBib3RoPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyYmxvY2siPnBhcnRpZXMgbWFraW5nIHBob25lIGNhbGxzIHRvIHBlb3BsZSB0aGF0IGRvbid0 IHdhbnQgdG8gcmVjZWl2ZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGJsb2NrIj4gICBsZWdpdGltYXRlIHRlbGVtYXJrZXRpbmctdHlwZSBjYWxscywg YXMgd2VsbCBhcyBtYWxpY2lvdXMgY2FsbHMgbWFkZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmJsb2NrIj50aGVpciA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5jYWxscyB3aGVyZSB0aGUgYWN0dWFs IGlkZW50aXR5IG9mIHRoZSBjYWxsaW5nIHBhcnR5IGlzPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBmb3IgdGhlIHB1cnBv c2Ugb2YgZnJhdWQsIGJsYWNrbWFpbCwgZXRjLiAgVGhlIG51bWJlciBvZiBzdWNoPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPm1hc2tlZC48L3Nw YW4+ICBUaHVzIGl0J3MgYm90aCBsZWdpdGltYXRlIHRlbGVtYXJrZXRpbmctdHlwZSBjYWxscywg YXMgd2VsbDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGJsb2NrIj4gICBtYWxpY2lvdXMgY2FzZXMgaGFzIHJpc2VuIGRyYW1hdGljYWxseSBpbiByZWNl bnQgeWVhcnMsIGxlYWRpbmcgdG88L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+YXMg bWFsaWNpb3VzIGNhbGxzIG1hZGUgZm9yIHRoZSBwdXJwb3NlIG9mIGZyYXVkLCBibGFja21haWws IGV0Yy48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxi bG9jayI+ICAgZ3Jvd2luZyBkaXNzYXRpc2ZhY3Rpb24gYW5kIGluIHNvbWUgY2FzZXMgc2lnbmlm aWNhbnQgbG9zcyBvZiBtb25leTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3Bh biBjbGFzcz0iaW5zZXJ0Ij53aGVyZSBjYWxsaW5nIHBhcnR5IGlkZW50aXR5IGlzIGZyYXVkdWxl bnQgb3IgbWlzbGVhZGluZy4gIExldCdzPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBvciBldmVuIHBvdGVudGlhbCBsb3Nz IG9mIDxzcGFuIGNsYXNzPSJkZWxldGUiPmxpZmUgW2Vtcy1hdHRhY2tzXS48L3NwYW4+PC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPmNhbGwgYWxs IHN1Y2ggY2FsbHMgIC0tIHJvYm8tLCB2aXNoaW5nLCBzd2F0dGluZyBhbmQgb3RoZXIgY2FsbHM8 L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs YmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5z ZXJ0Ij53aGVyZSBpZGVudGl0eSBpcyBpbmFwcHJvcHJpYXRlbHkgbWlzc2luZyBvciBpbmFjY3Vy YXRlICJzcG9vZmVkPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNw YW4gY2xhc3M9Imluc2VydCI+Y2FsbHMiLjwvc3Bhbj4gIFRoZSBudW1iZXIgb2Ygc3VjaCBtYWxp Y2lvdXMgY2FzZXMgaGFzIHJpc2VuIGRyYW1hdGljYWxseTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJibG9jayI+aW4gcmVjZW50IHllYXJzLCBsZWFkaW5nIHRvIGdyb3dpbmcgZGlzc2F0aXNm YWN0aW9uIGFuZCBpbiBzb21lPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj5jYXNl cyBzaWduaWZpY2FudCBsb3NzIG9mIG1vbmV5IG9yIGV2ZW4gcG90ZW50aWFsIGxvc3Mgb2YgPHNw YW4gY2xhc3M9Imluc2VydCI+bGlmZS5bMV08L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAxMCI+PC9hPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2si PiAgIE5vdGUgdGhhdCB0aGUgU1RJUiB3b3JrIGlzIG5vdCBhaW1lZCBhdCA8c3BhbiBjbGFzcz0i ZGVsZXRlIj5ibG9ja2luZyAibGVnaXRpbWF0ZSI8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyYmxvY2siPk5vdGUgdGhhdCB0aGUgU1RJUiB3b3JrIGlzIG5vdCBhaW1lZCBhdCA8c3Bh biBjbGFzcz0iaW5zZXJ0Ij5zdG9wcGluZyBzcG9vZmVkIGNhbGxzLCBpdDwvc3Bhbj48L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4g Y2xhc3M9ImRlbGV0ZSI+ICAgYXV0b21hdGVkIGRpYWxlcnMsIGFzPC9zcGFuPiB0aGF0IDxzcGFu IGNsYXNzPSJkZWxldGUiPnJlcXVpcmVzIHJlZ3VsYXRvcnkgcG9saWN5IGRlY2lzaW9ucywgbm90 PC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5z ZXJ0Ij5pcyBvbmx5IGNvbmNlcm5lZCB3aXRoIGNvcnJlY3RseSBhdHRyaWJ1dGluZyB0aGUgY2Fs bGluZyBwYXJ0eSdzPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICBqdXN0IHRlY2huaWNh bCBtZWNoYW5pc21zLjwvc3Bhbj4gIFNUSVIncyBmb2N1cyBpcyBxdWl0ZSBuYXJyb3csIGFzPC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPnRlbGVw aG9uZSBudW1iZXIuICBUaGUgaG9wZSBpczwvc3Bhbj4gdGhhdCA8c3BhbiBjbGFzcz0iaW5zZXJ0 Ij5ieSB1bm1hc2tpbmcgdGhlIGNhbGxlciwgdGhlPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBkZXNjcmliZWQgaW4gU2Vj dGlvbiA8c3BhbiBjbGFzcz0iZGVsZXRlIj4zLjQuPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij5jYWxsZWQgcGFydHkgY2FuIGhhdmUg dGhlIGluZm9ybWF0aW9uIHRvIGRlY2lkZSB3aGV0aGVyIHRvIGFjY2VwdDwvc3Bhbj48L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPnRoZSBjYWxs LCBhcyB3ZWxsIGFzIHByb3ZpZGUgbGF3IGVuZm9yY2VtZW50IHdpdGggdGhlIGFiaWxpdHkgdG88 L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs YmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5z ZXJ0Ij5tb3JlIGVhc2lseSBhbmQgYWNjdXJhdGVseSBmaW5kIGEgY2FsbGVyIHdobyBpcyBpbiB2 aW9sYXRpb24gb2YgbGF3czwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2si PjxzcGFuIGNsYXNzPSJpbnNlcnQiPmFuZCByZWd1bGF0aW9ucy48L3NwYW4+ICBTVElSJ3MgZm9j dXMgaXMgcXVpdGUgbmFycm93LCBhcyBkZXNjcmliZWQgaW48L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyYmxvY2siPlNlY3Rpb24gPHNwYW4gY2xhc3M9Imluc2VydCI+Mi40Ljwvc3Bhbj48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+My4yLiBBcmVuJ3QgdGhlcmUgZXhpc3Rpbmcgc29s dXRpb25zIHRvIHRoaXMgcHJvYmxlbT88L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4z LjIuIEFyZW4ndCB0aGVyZSBleGlzdGluZyBzb2x1dGlvbnMgdG8gdGhpcyBwcm9ibGVtPzwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBOby4gIE51bWVyb3VzIHNvbHV0aW9ucyBoYXZl IGJlZW4gYXR0ZW1wdGVkIHRvIGNvbWJhdCBzdWNoIGF0dGFja3MsPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+ICAgTm8uICBOdW1lcm91cyBzb2x1dGlvbnMgaGF2ZSBiZWVuIGF0dGVt cHRlZCB0byBjb21iYXQgc3VjaCBhdHRhY2tzLDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDExIj48L2E+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgd2l0aCB2YXJ5aW5nIGxldmVscyBvZiBzdWNjZXNzLiAg PHNwYW4gY2xhc3M9ImRlbGV0ZSI+VGhlPC9zcGFuPiBVbml0ZWQgU3RhdGVzIEZlZGVyYWwgVHJh ZGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+d2l0aCB2YXJ5aW5nIGxldmVscyBv ZiBzdWNjZXNzLiAgPHNwYW4gY2xhc3M9Imluc2VydCI+Rm9yIGV4YW1wbGUsIHRoZTwvc3Bhbj4g VW5pdGVkIFN0YXRlczwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGJsb2NrIj4gICBDb21taXNzaW9uIChGVEMpIGV2ZW4gc3BvbnNvcmVkIGFuIG9wZW4g IlJvYm9jYWxsIENoYWxsZW5nZSIgZm9yPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2si PkZlZGVyYWwgVHJhZGUgQ29tbWlzc2lvbiAoRlRDKSBldmVuIHNwb25zb3JlZCBhbiBvcGVuICJS b2JvY2FsbDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGJsb2NrIj4gICBzb2x1dGlvbnMgdG8gcHJldmVudCBpbGxlZ2FsIHJvYm9jYWxscyA8c3BhbiBj bGFzcz0iZGVsZXRlIj5bcm9iby1jaGFsbGVuZ2VdLjwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJibG9jayI+Q2hhbGxlbmdlIiBmb3Igc29sdXRpb25zIHRvIHByZXZlbnQgaWxsZWdh bCByb2JvY2FsbHMgPHNwYW4gY2xhc3M9Imluc2VydCI+W3JvYm8tPC9zcGFuPjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+Y2hhbGxlbmdlXS48 L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIEV2ZXJ5IHNvbHV0aW9uIHBy b3Bvc2VkIHRvIHNvbHZlIHRoZSBwcm9ibGVtLCBob3dldmVyLCB1bHRpbWF0ZWx5PC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgRXZlcnkgc29sdXRpb24gcHJvcG9zZWQgdG8gc29s dmUgdGhlIHByb2JsZW0sIGhvd2V2ZXIsIHVsdGltYXRlbHk8L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGVuZHMgdXAgY3JlYXRpbmcgc29t ZSBmb3JtIG9mIHdoaXRlbGlzdCBhbmQvb3IgYmxhY2tsaXN0IHJlcHV0YXRpb248L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBlbmRzIHVwIGNyZWF0aW5nIHNvbWUgZm9ybSBvZiB3 aGl0ZWxpc3QgYW5kL29yIGJsYWNrbGlzdCByZXB1dGF0aW9uPC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBtb2RlbDsgaW4gc29tZSBjYXNl cyB0aGUgbGlzdHMgYXJlIGNyZWF0ZWQgZnJvbSBjcm93ZC1zb3VyY2VkPC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+ICAgbW9kZWw7IGluIHNvbWUgY2FzZXMgdGhlIGxpc3RzIGFyZSBj cmVhdGVkIGZyb20gY3Jvd2Qtc291cmNlZDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgcmVwdXRhdGlvbnMsIGluIHNvbWUgY2FzZXMgZnJv bSBjYXB0Y2hhLXR5cGUgdGVzdHMsIGFuZCBpbiBvdGhlcnM8L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij4gICByZXB1dGF0aW9ucywgaW4gc29tZSBjYXNlcyBmcm9tIGNhcHRjaGEtdHlw ZSB0ZXN0cywgYW5kIGluIG90aGVyczwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgZnJvbSBhIHBheS10by1wbGF5IG1vZGVsLjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGZyb20gYSBwYXktdG8tcGxheSBtb2RlbC48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgUmVnYXJkbGVzcyBvZiBhbnkgc29sdXRpb24n cyBtZXJpdHMsIG9yIGhvdyB0aGUgd2hpdGVsaXN0L2JsYWNrbGlzdDwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPiAgIFJlZ2FyZGxlc3Mgb2YgYW55IHNvbHV0aW9uJ3MgbWVyaXRzLCBv ciBob3cgdGhlIHdoaXRlbGlzdC9ibGFja2xpc3Q8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGlzIGNyZWF0ZWQsIGluIHRoZSBlbmQgdGhl eSBhbGwgcmVseSBvbiB0aGUgYWJpbGl0eSB0byBtYXRjaCBmdXR1cmU8L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij4gICBpcyBjcmVhdGVkLCBpbiB0aGUgZW5kIHRoZXkgYWxsIHJlbHkg b24gdGhlIGFiaWxpdHkgdG8gbWF0Y2ggZnV0dXJlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBjYWxsIGF0dGVtcHRzIHRvIHNvbWUgZm9y bSBvZiAibGlzdCIgdG8gZGVjaWRlIHdoZXRoZXIgdGhlIGNhbGw8L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij4gICBjYWxsIGF0dGVtcHRzIHRvIHNvbWUgZm9ybSBvZiAibGlzdCIgdG8g ZGVjaWRlIHdoZXRoZXIgdGhlIGNhbGw8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9 ImxpbmVubyI+PC90ZD48L3RyPg0KICAgICAgPHRyIGJnY29sb3I9ImdyYXkiPjx0ZD48L3RkPjx0 aD48YSBuYW1lPSJwYXJ0LWw0Ij48c21hbGw+c2tpcHBpbmcgdG8gY2hhbmdlIGF0PC9zbWFsbD48 ZW0+IHBhZ2UgNiwgbGluZSAxODwvZW0+PC9hPjwvdGg+PHRoPiA8L3RoPjx0aD48YSBuYW1lPSJw YXJ0LXI0Ij48c21hbGw+c2tpcHBpbmcgdG8gY2hhbmdlIGF0PC9zbWFsbD48ZW0+IHBhZ2UgMSwg bGluZSAyNzI8L2VtPjwvYT48L3RoPjx0ZD48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgdG8gbWF0Y2gg d2hpdGVsaXN0cy48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICB0byBtYXRjaCB3 aGl0ZWxpc3RzLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBJbiBnZW5lcmFsLCBt b3N0IHNvbHV0aW9ucyB1c2UgdGhlIHNvdXJjZSB0ZWxlcGhvbmUgbnVtYmVyIG9mIHRoZTwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIEluIGdlbmVyYWwsIG1vc3Qgc29sdXRpb25z IHVzZSB0aGUgc291cmNlIHRlbGVwaG9uZSBudW1iZXIgb2YgdGhlPC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBjYWxsICh0aGUgY2FsbGlu ZyBwYXJ0eSBudW1iZXIpIGNhcnJpZWQgYnkgdGhlIHByb3RvY29sIHNpZ25hbGluZyB0bzwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGNhbGwgKHRoZSBjYWxsaW5nIHBhcnR5IG51 bWJlcikgY2FycmllZCBieSB0aGUgcHJvdG9jb2wgc2lnbmFsaW5nIHRvPC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBkZXRlcm1pbmUgd2hp Y2ggbGlzdCBhIGNhbGwgYmVsb25ncyBpbi4gIE9idmlvdXNseSB0aGlzIGlzIG9ubHk8L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBkZXRlcm1pbmUgd2hpY2ggbGlzdCBhIGNhbGwg YmVsb25ncyBpbi4gIE9idmlvdXNseSB0aGlzIGlzIG9ubHk8L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHVzZWZ1bCBpZiB0aGUgY2FsbGlu ZyBudW1iZXIgaXMgaW4gZmFjdCBhdmFpbGFibGUgYW5kIGxlZ2l0aW1hdGU6PC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgdXNlZnVsIGlmIHRoZSBjYWxsaW5nIG51bWJlciBpcyBp biBmYWN0IGF2YWlsYWJsZSBhbmQgbGVnaXRpbWF0ZTo8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHRoYXQgaXQgdHJ1bHkgaWRlbnRpZmll cyB0aGUgY2FsbCBvcmlnaW5hdG9yLCB0aGF0IGl0IGlzIG5vdCBiZWluZzwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPiAgIHRoYXQgaXQgdHJ1bHkgaWRlbnRpZmllcyB0aGUgY2FsbCBv cmlnaW5hdG9yLCB0aGF0IGl0IGlzIG5vdCBiZWluZzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgcmFuZG9tbHkgY2hhbmdlZCBmb3IgZXZl cnkgY2FsbCwgYW5kIGlzIG5vdCBzcG9vZmluZyBhIGxlZ2l0aW1hdGU8L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij4gICByYW5kb21seSBjaGFuZ2VkIGZvciBldmVyeSBjYWxsLCBhbmQg aXMgbm90IHNwb29maW5nIGEgbGVnaXRpbWF0ZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgdXNlci48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij4gICB1c2VyLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+ PGEgbmFtZT0iZGlmZjAwMTIiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0i ZGVsZXRlIj4gICBBIGZ1bmRhbWVudGFsIHJlcXVpcmVtZW50IG9mIGFueSBzb2x1dGlvbiB0byBy b2JvY2FsbC10eXBlIGF0dGFja3MsPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJs b2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij5BIGZ1bmRhbWVudGFsIHJlcXVpcmVtZW50IG9mIGFu eSBzb2x1dGlvbiB0byBzcG9vZmVkIGNhbGxzPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgdGhlcmVmb3JlLCBpcyBmb3IgdGhl IGNhbGxlZCBwYXJ0aWVzIG9yIHRoZWlyIHNlcnZpY2UgcHJvdmlkZXJzIHRvPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgdGhlcmVmb3JlLCBpcyBmb3IgdGhlIGNhbGxlZCBwYXJ0 aWVzIG9yIHRoZWlyIHNlcnZpY2UgcHJvdmlkZXJzIHRvPC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBoYXZlIGEgbWVhbnMgb2YgdmVyaWZ5 aW5nIHRoZSBzb3VyY2UgaWRlbnRpdHkgb2YgcmVjZWl2ZWQgY2FsbDwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPiAgIGhhdmUgYSBtZWFucyBvZiB2ZXJpZnlpbmcgdGhlIHNvdXJjZSBp ZGVudGl0eSBvZiByZWNlaXZlZCBjYWxsPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBhdHRlbXB0cy48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij4gICBhdHRlbXB0cy48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAg Tm90ZSB0aGF0IHZlcmlmeWluZyBzb3VyY2UgaWRlbnRpdHkgaXMgbm90LCBieSBpdHNlbGYsIHN1 ZmZpY2llbnQgdG88L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBOb3RlIHRoYXQg dmVyaWZ5aW5nIHNvdXJjZSBpZGVudGl0eSBpcyBub3QsIGJ5IGl0c2VsZiwgc3VmZmljaWVudCB0 bzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ ICAgc29sdmUgdGhlIGF0dGFja3MuICBJdCBpcyBvbmx5IGEgbmVjZXNzYXJ5IHByZWN1cnNvcjog YSB0b29sIHRoYXQ8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBzb2x2ZSB0aGUg YXR0YWNrcy4gIEl0IGlzIG9ubHkgYSBuZWNlc3NhcnkgcHJlY3Vyc29yOiBhIHRvb2wgdGhhdDwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAg Y2FuIGJlIHVzZWQgdG8gdGhlbiBidWlsZCBhY3R1YWwgc29sdXRpb25zIHdpdGgsIHN1Y2ggYXMg cmVwdXRhdGlvbi08L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBjYW4gYmUgdXNl ZCB0byB0aGVuIGJ1aWxkIGFjdHVhbCBzb2x1dGlvbnMgd2l0aCwgc3VjaCBhcyByZXB1dGF0aW9u LTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ ICAgYmFzZWQgc3lzdGVtczsgb3IgaXQgbWlnaHQgZXZlbiBqdXN0IGJlIHVzZWZ1bCBpbiB0cmFj aW5nIGJhY2sgdGhlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgYmFzZWQgc3lz dGVtczsgb3IgaXQgbWlnaHQgZXZlbiBqdXN0IGJlIHVzZWZ1bCBpbiB0cmFjaW5nIGJhY2sgdGhl PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4g ICBzb3VyY2UgYW5kIHNlY3VyaW5nIHRoZWlyIGVudHJ5LXBhdGggaW4gb3JkZXIgdG8gcHJldmVu dCBmdXR1cmU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBzb3VyY2UgYW5kIHNl Y3VyaW5nIHRoZWlyIGVudHJ5LXBhdGggaW4gb3JkZXIgdG8gcHJldmVudCBmdXR1cmU8L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGF0dGFj a3MuICBDbGVhcmx5IGEgbGVnaXRpbWF0ZS92YWxpZCBzb3VyY2UgbnVtYmVyIGRvZXMgbm90IHBy b3ZlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgYXR0YWNrcy4gIENsZWFybHkg YSBsZWdpdGltYXRlL3ZhbGlkIHNvdXJjZSBudW1iZXIgZG9lcyBub3QgcHJvdmU8L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHRoZSBjYWxs ZXIgZG9lcyBub3QgaGF2ZSBtYWxpY2lvdXMgaW50ZW50aW9ucy48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij4gICB0aGUgY2FsbGVyIGRvZXMgbm90IGhhdmUgbWFsaWNpb3VzIGludGVu dGlvbnMuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZm MDAxMyI+PC9hPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjMuMy48c3BhbiBjbGFzcz0iZGVsZXRlIj4g Q2FuJ3Qgd2UgdXNlIG90aGVyIGluZm8gdG8gZGV0ZWN0IHJvYm88L3NwYW4+Y2FsbHM/PC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjMuMy48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4JQ2Fu J3Qgd2UgdXNlIG90aGVyIGluZm8gdG8gZGV0ZWN0IHNwb29mZWQgPC9zcGFuPmNhbGxzPzwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBTb21lIGV4aXN0aW5nIHNvbHV0aW9ucyB1c2Ug bW9yZSB0aGFuIGp1c3QgdGhlIGNhbGxpbmcgbnVtYmVyPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyaWdodCI+ICAgU29tZSBleGlzdGluZyBzb2x1dGlvbnMgdXNlIG1vcmUgdGhhbiBqdXN0IHRo ZSBjYWxsaW5nIG51bWJlcjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+ICAgaW5mb3JtYXRpb24gdG8gY2xhc3NpZnkgY2FsbHMsIHN1Y2ggYXMg dGhlIHBlZXJpbmcgdHJ1bmsgdGhlIGNhbGw8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij4gICBpbmZvcm1hdGlvbiB0byBjbGFzc2lmeSBjYWxscywgc3VjaCBhcyB0aGUgcGVlcmluZyB0 cnVuayB0aGUgY2FsbDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+ICAgd2FzIHJlY2VpdmVkIGZyb207IGJ1dCB1c2luZyBhbnkgb3RoZXIgaW5m b3JtYXRpb24gaXMgZ29pbmcgdG8gZmFpbDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PiAgIHdhcyByZWNlaXZlZCBmcm9tOyBidXQgdXNpbmcgYW55IG90aGVyIGluZm9ybWF0aW9uIGlz IGdvaW5nIHRvIGZhaWw8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPiAgIGFzIHdlbGwsIHVsdGltYXRlbHkuICBVc2luZyBhZGRpdGlvbmFsIGlu Zm9ybWF0aW9uIG1heSB3b3JrIGZvcjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAg IGFzIHdlbGwsIHVsdGltYXRlbHkuICBVc2luZyBhZGRpdGlvbmFsIGluZm9ybWF0aW9uIG1heSB3 b3JrIGZvcjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+ICAgc3BlY2lmaWMgc2VydmljZSBwcm92aWRlcnMgdG9kYXksIGJ1dCB0aGF0IGlzIG1v cmUgZHVlIHRvIHRoZSBuYXR1cmU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBz cGVjaWZpYyBzZXJ2aWNlIHByb3ZpZGVycyB0b2RheSwgYnV0IHRoYXQgaXMgbW9yZSBkdWUgdG8g dGhlIG5hdHVyZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDE0Ij48L2E+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9j ayI+ICAgb2YgdGhlaXIgcGFydGljdWxhciA8c3BhbiBjbGFzcz0iZGVsZXRlIj5yb2JvY2FsbGVy PC9zcGFuPiBhdHRhY2tzIHRvZGF5LCBhbmQgdGhlIG5hdHVyZSBvZjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmJsb2NrIj5vZiB0aGVpciBwYXJ0aWN1bGFyIGF0dGFja3MgdG9kYXksIGFuZCB0 aGUgbmF0dXJlIG9mIHRob3NlIHNwZWNpZmljPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIHRob3NlIHNwZWNpZmljIHNlcnZpY2UgcHJv dmlkZXIgZGVwbG95bWVudHMgdG9kYXkuICBJZiBtYW55IGxhcmdlPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyYmxvY2siPnNlcnZpY2UgcHJvdmlkZXIgZGVwbG95bWVudHMgdG9kYXkuICBJZiBt YW55IGxhcmdlIHNlcnZpY2UgcHJvdmlkZXJzPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIHNlcnZpY2UgcHJvdmlkZXJzIHdlcmUgdG8g dHJ5IHVzaW5nIGFkZGl0aW9uYWwgaW5mb3JtYXRpb24gdG88L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJibG9jayI+d2VyZSB0byB0cnkgdXNpbmcgYWRkaXRpb25hbCBpbmZvcm1hdGlvbiB0byBw cmV2ZW50IDxzcGFuIGNsYXNzPSJpbnNlcnQiPnNwb29mZWQgY2FsbHMsPC9zcGFuPjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBwcmV2 ZW50IDxzcGFuIGNsYXNzPSJkZWxldGUiPnJvYm9jYWxsZXJzLDwvc3Bhbj4gdGhlIG5hdHVyZSBv ZiB0aGUgYXR0YWNrcyB3b3VsZCBxdWlja2x5IGNoYW5nZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmJsb2NrIj50aGUgbmF0dXJlIG9mIHRoZSBhdHRhY2tzIHdvdWxkIHF1aWNrbHkgY2hhbmdl IHRvIGJ5cGFzcyB0aGUgPHNwYW4gY2xhc3M9Imluc2VydCI+ZmlsdGVyLTwvc3Bhbj48L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgdG8g YnlwYXNzIHRoZSA8c3BhbiBjbGFzcz0iZGVsZXRlIj5maWx0ZXItcnVsZXMuPC9zcGFuPjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij5ydWxlcy48 L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIEluIGdlbmVyYWwsIGNhbGxz IGFycml2aW5nIGF0IGNhcnJpZXJzIGZyb20gcGVlcmluZyBpbnRlcmNvbm5lY3Rpb25zPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgSW4gZ2VuZXJhbCwgY2FsbHMgYXJyaXZpbmcg YXQgY2FycmllcnMgZnJvbSBwZWVyaW5nIGludGVyY29ubmVjdGlvbnM8L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGNvbnRhaW4gdmlydHVh bGx5IG5vIGRpc3Rpbmd1aXNoaW5nIGRhdGEuICBQYXJ0IG9mIHRoZSByZWFzb24gZm9yPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgY29udGFpbiB2aXJ0dWFsbHkgbm8gZGlzdGlu Z3Vpc2hpbmcgZGF0YS4gIFBhcnQgb2YgdGhlIHJlYXNvbiBmb3I8L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHRoaXMgaXMgZHVlIHRvIHRo ZSB3YXkgbGVnYWN5IFNTNyB0ZWNobm9sb2d5IHdvcmtzOyBwYXJ0IG9mIGl0IGlzPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgdGhpcyBpcyBkdWUgdG8gdGhlIHdheSBsZWdhY3kg U1M3IHRlY2hub2xvZ3kgd29ya3M7IHBhcnQgb2YgaXQgaXM8L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGR1ZSB0byB0aGUgd2F5IGludGVy Y29ubmVjdGlvbiBoYXMgZ3Jvd24gaW4gdGhlIHBhc3QgZGVjYWRlLiAgVGhlPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgZHVlIHRvIHRoZSB3YXkgaW50ZXJjb25uZWN0aW9uIGhh cyBncm93biBpbiB0aGUgcGFzdCBkZWNhZGUuICBUaGU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIG9ubHkgdHJ1bHkgZGlzdGluZ3Vpc2hp bmcgZGF0YSBpcyB0aGUgY2FsbGluZyBudW1iZXIsIHdoZXRoZXIgaXQgaXM8L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBvbmx5IHRydWx5IGRpc3Rpbmd1aXNoaW5nIGRhdGEgaXMg dGhlIGNhbGxpbmcgbnVtYmVyLCB3aGV0aGVyIGl0IGlzPC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICB0aGUgbnVtYmVyIHRvIGJlIGRpc3Bs YXllZCBvciB0aGUgYmlsbGluZyBudW1iZXIuICBFdmVuIHRyYWNraW5nIHRoZTwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHRoZSBudW1iZXIgdG8gYmUgZGlzcGxheWVkIG9yIHRo ZSBiaWxsaW5nIG51bWJlci4gIEV2ZW4gdHJhY2tpbmcgdGhlPC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICB0cmFuc2l0IGNhcnJpZXIgdHJ1 bmsgdGhlIGNhbGwgY29tZXMgaW4gZnJvbSBpcyBub3Qgc3VmZmljaWVudCB0bzwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHRyYW5zaXQgY2FycmllciB0cnVuayB0aGUgY2FsbCBj b21lcyBpbiBmcm9tIGlzIG5vdCBzdWZmaWNpZW50IHRvPC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBkaXN0aW5ndWlzaCBsZWdpdGltYXRl IHZzLiBtYWxpY2lvdXMgY2FsbHM7IGxlZ2l0aW1hdGUgY2FsbHMgZnJvbTwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPiAgIGRpc3Rpbmd1aXNoIGxlZ2l0aW1hdGUgdnMuIG1hbGljaW91 cyBjYWxsczsgbGVnaXRpbWF0ZSBjYWxscyBmcm9tPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICB0aGUgc2FtZSBzb3VyY2UgbnVtYmVyIGNh biBhcnJpdmUgZnJvbSBkaWZmZXJlbnQgdHJhbnNpdCBwZWVycywgYW5kPC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+ICAgdGhlIHNhbWUgc291cmNlIG51bWJlciBjYW4gYXJyaXZlIGZy b20gZGlmZmVyZW50IHRyYW5zaXQgcGVlcnMsIGFuZDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgb2Z0ZW4gZG8gdG9kYXkuPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgb2Z0ZW4gZG8gdG9kYXkuPC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxlZnQiPjMuNC4gV2hhdCdzIFNUSVIgdHJ5aW5nIHRvIHNvbHZlIHRoZW4/PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+My40LiBXaGF0J3MgU1RJUiB0cnlpbmcgdG8g c29sdmUgdGhlbj88L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgVGhlIHByb2JsZW0g dGhhdCBTVElSIGZvY3VzZXMgb24gaXMgbm90IGhvdyB0byBwcmV2ZW50IGF0dGFja3Mgb3I8L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBUaGUgcHJvYmxlbSB0aGF0IFNUSVIgZm9j dXNlcyBvbiBpcyBub3QgaG93IHRvIHByZXZlbnQgYXR0YWNrcyBvcjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRp ZmYwMDE1Ij48L2E+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+ dW5zb2xpY2l0ZWQ8L3NwYW4+IGNhbGxzIGluIHRoZSBQU1ROLXR5cGUgbmV0d29yaywgYnV0IHJh dGhlciBob3cgdG88L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9 Imluc2VydCI+c3Bvb2ZlZDwvc3Bhbj4gY2FsbHMgaW4gdGhlIFBTVE4tdHlwZSBuZXR3b3JrLCBi dXQgcmF0aGVyIGhvdyB0byB2YWxpZGF0ZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICB2YWxpZGF0ZSB0aGUgc291cmNlIHRlbGVwaG9u ZSBudW1iZXIgb2YgY2FsbCByZXF1ZXN0czsgdGhlIHNvdXJjZTwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmJsb2NrIj50aGUgc291cmNlIHRlbGVwaG9uZSBudW1iZXIgb2YgY2FsbCByZXF1ZXN0 czsgdGhlIHNvdXJjZSB0ZWxlcGhvbmU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgdGVsZXBob25lIG51bWJlciB0aGF0IHdvdWxkIGJl IHVzZWQgZm9yIENhbGxlci1JRCBkaXNwbGF5LCBDYWxsaW5nPC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyYmxvY2siPm51bWJlciB0aGF0IHdvdWxkIGJlIHVzZWQgZm9yIENhbGxlci1JRCBkaXNw bGF5LCBDYWxsaW5nIG5hbWUgKExJREI8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgbmFtZSAoTElEQiBvciBDTkFNKSBsb29rdXBzLCBi aWxsaW5nLCBvciBzaW1pbGFyIGZ1bmN0aW9ucy4gIFRoZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmJsb2NrIj5vciBDTkFNKSBsb29rdXBzLCBiaWxsaW5nLCBvciBzaW1pbGFyIGZ1bmN0aW9u cy4gIFRoZSBzb3VyY2UgbnVtYmVyPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIHNvdXJjZSBudW1iZXIgbWF5IHJlcHJlc2VudCBhIHNw ZWNpZmljIGh1bWFuIG9yIGRldmljZSwgb3IgaXQgbWF5PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyYmxvY2siPm1heSByZXByZXNlbnQgYSBzcGVjaWZpYyBodW1hbiBvciBkZXZpY2UsIG9yIGl0 IG1heSByZXByZXNlbnQgYTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGJsb2NrIj4gICByZXByZXNlbnQgYSBjb3Jwb3JhdGlvbiBvciBzZXJ2aWNlLjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj5jb3Jwb3JhdGlvbiBvciBzZXJ2aWNlLjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBJbiB0aGlzIGNvbnRleHQsIHRoZSBTVElS IGdvYWwgaXMgdG8gZGV0ZXJtaW5lIHdoZXRoZXIgdGhlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyaWdodCI+ICAgSW4gdGhpcyBjb250ZXh0LCB0aGUgU1RJUiBnb2FsIGlzIHRvIGRldGVybWlu ZSB3aGV0aGVyIHRoZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+ICAgb3JpZ2luYXRpbmcgZGV2aWNlIG9yIHN5c3RlbSBpcyBhdXRob3JpemVk IHRvIHVzZSB0aGUgc291cmNlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgb3Jp Z2luYXRpbmcgZGV2aWNlIG9yIHN5c3RlbSBpcyBhdXRob3JpemVkIHRvIHVzZSB0aGUgc291cmNl PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4g ICB0ZWxlcGhvbmUgbnVtYmVyIGlkZW50aXR5IGNsYWltZWQgaW4gYSBnaXZlbiByZXF1ZXN0LiAg SW4gb3RoZXI8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICB0ZWxlcGhvbmUgbnVt YmVyIGlkZW50aXR5IGNsYWltZWQgaW4gYSBnaXZlbiByZXF1ZXN0LiAgSW4gb3RoZXI8L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHdvcmRz OiB3aGVuIHNvbWVvbmUgbWFrZXMgYSBjYWxsIHVzaW5nIGEgdGVsZXBob25lIG51bWJlciwgY2Fu IHRoZXk8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICB3b3Jkczogd2hlbiBzb21l b25lIG1ha2VzIGEgY2FsbCB1c2luZyBhIHRlbGVwaG9uZSBudW1iZXIsIGNhbiB0aGV5PC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICByZWFs bHkgY2xhaW0gdG8gcmVwcmVzZW50IHRoYXQgbnVtYmVyPzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmlnaHQiPiAgIHJlYWxseSBjbGFpbSB0byByZXByZXNlbnQgdGhhdCBudW1iZXI/PC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIElmIHdlIGNhbiBnZXQgdGhhdCBwcm9ibGVtIHNv bHZlZCwgdGhlbiB3ZSBjYW4gdXNlIHRoYXQga25vd2xlZGdlIGFzPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+ICAgSWYgd2UgY2FuIGdldCB0aGF0IHByb2JsZW0gc29sdmVkLCB0aGVu IHdlIGNhbiB1c2UgdGhhdCBrbm93bGVkZ2UgYXM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGEgdG9vbCB0byBidWlsZCByZXB1dGF0aW9u IHN5c3RlbXMgYW5kIG90aGVyIHRlY2huaXF1ZXMgdG8gdHJ1bHk8L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij4gICBhIHRvb2wgdG8gYnVpbGQgcmVwdXRhdGlvbiBzeXN0ZW1zIGFuZCBv dGhlciB0ZWNobmlxdWVzIHRvIHRydWx5PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBwcmV2ZW50IG1hbGljaW91cyBhdHRhY2tzOyBhcyB3 ZWxsIGFzIGFsbG93IHBlb3BsZSB0byB1c2Ugb3RoZXI8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJpZ2h0Ij4gICBwcmV2ZW50IG1hbGljaW91cyBhdHRhY2tzOyBhcyB3ZWxsIGFzIGFsbG93IHBl b3BsZSB0byB1c2Ugb3RoZXI8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxlZnQiPiAgIG1lYW5zIHRvIGJsb2NrIHVuc29saWNpdGVkIGxlZ2l0aW1hdGUg Y2FsbHMuICBJdCBhbHNvIGdpdmVzIHVzIGE8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij4gICBtZWFucyB0byBibG9jayB1bnNvbGljaXRlZCBsZWdpdGltYXRlIGNhbGxzLiAgSXQgYWxz byBnaXZlcyB1cyBhPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij4gICB0b29sIHRvIGhlbHAgdHJhY2sgZG93biB0aGUgb2ZmZW5kaW5nIHBhcnRp ZXMgbW9yZSBxdWlja2x5IG9yPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgdG9v bCB0byBoZWxwIHRyYWNrIGRvd24gdGhlIG9mZmVuZGluZyBwYXJ0aWVzIG1vcmUgcXVpY2tseSBv cjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ ICAgZWFzaWx5LjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGVhc2lseS48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDE2Ij48L2E+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxibG9jayI+My41LiA8c3BhbiBjbGFzcz0iZGVsZXRlIj5JcyBTVElSIHN1 ZmZpY2llbnQgdG8gc3RvcCByb2JvY2FsbHMgb3IgZnJhdWQ/PC9zcGFuPjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmJsb2NrIj4zLjUuCVdoeSBmb2N1cyBvbiBjYWxsaW5nIG51bWJlciwgdnMu IG90aGVyIGlkZW50aXRpZXM/PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPjwvc3Bhbj48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgIE5vLiBJdCdz IGEgbmVjZXNzYXJ5IHBpZWNlIG9mIHRoZSBwdXp6bGUsIGJ1dCBieSBpdHNlbGYgU1RJUiB3b24n dDwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJk ZWxldGUiPiAgIHN0b3AgdGhlbS4gIFNlZSB0aGUgYW5zd2VyIHRvIHF1ZXN0aW9uIDMuNC4gIE5v dGUgYWxzbyB0aGF0IFNUSVI8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2si PjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2Nr Ij48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICBqdXN0IHZlcmlmaWVzIHRoZSBjYWxsaW5nIG51bWJl ciBpcyB2YWxpZDsgbWFsaWNpb3VzIHBhcnRpZXMgY2FuPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgc3RpbGwgb2J0YWluIHZh bGlkIEUuMTY0IG51bWJlcnMgYW5kIHVzZSB0aGVtIHRvIGF0dGFjay4gIEZvcjwvc3Bhbj48L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgIGV4 YW1wbGUsIGluIHNvbWUgY291bnRyaWVzIG9uZSBjYW4gYnV5IFNJTSBjYXJkcyBpbiBidWxrIG9y IGluPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9 ImRlbGV0ZSI+ICAgdmVuZGluZyBtYWNoaW5lcyB3aXRob3V0IGFueSBpZGVudGlmaWNhdGlvbiwg YW5kIHRoZW4gdXNlIHRoZSBTSU08L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxv Y2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJs b2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICBjYXJkcyBpbiBTSU0tYm94ZXMgdG8gcGVyZm9y bSBidWxrIGNhbGxpbmcuICBFYWNoIGNhbGwgd291bGQgdXNlIGE8L3NwYW4+PC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICB2YWxpZCBFLjE2 NCBjYWxsaW5nIG51bWJlciBvZiB0aGUgU0lNIGNhcmQuPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+PC9zcGFuPjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+My42Ljwvc3Bhbj4g V2h5IGZvY3VzIG9uIGNhbGxpbmcgbnVtYmVyLCB2cy4gb3RoZXIgaWRlbnRpdGllcz88L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PiAgIEJlY2F1c2UgaXQncyBhIHJlYWwgcHJvYmxlbSB0b2RheSwgYW5kIHRlbGVwaG9uZSBudW1i ZXJzIGFyZSB1c2VkIGJ5PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgQmVjYXVz ZSBpdCdzIGEgcmVhbCBwcm9ibGVtIHRvZGF5LCBhbmQgdGVsZXBob25lIG51bWJlcnMgYXJlIHVz ZWQgYnk8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPiAgIGJpbGxpb25zIG9mIGRldmljZXMgYW5kIHBlb3BsZS4gIFRoZXJlIGFyZSBtYW55IGZv cm1zIG9mIGlkZW50aXR5OjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGJpbGxp b25zIG9mIGRldmljZXMgYW5kIHBlb3BsZS4gIFRoZXJlIGFyZSBtYW55IGZvcm1zIG9mIGlkZW50 aXR5OjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDE3Ij48L2E+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAg PHNwYW4gY2xhc3M9ImRlbGV0ZSI+Y2FsbGluZyBuYW1lcyw8L3NwYW4+IGVtYWlsLXN0eWxlICd1 c2VyQGRvbWFpbicgbmFtZXMsIHNvY2lhbCBuZXR3b3JraW5nPC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyYmxvY2siPmVtYWlsLXN0eWxlICd1c2VyQGRvbWFpbicgbmFtZXMsIHNvY2lhbCBuZXR3 b3JraW5nIHVzZXJuYW1lcyw8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxibG9jayI+ICAgdXNlcm5hbWVzLCB0cmFkZW1hcmtzLCBldGMuICBCdXQgdGhl IGN1cnJlbnQgcHJvYmxlbSBhdC1oYW5kIGlzIHRoZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmJsb2NrIj50cmFkZW1hcmtzLCBldGMuICBCdXQgdGhlIGN1cnJlbnQgcHJvYmxlbSBhdC1oYW5k IGlzIHRoZSAiUFNUTiIsPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsYmxvY2siPiAgICJQU1ROIiwgd2hldGhlciBpdCBiZSBsZWdhY3kgU1M3LWJhc2Vk IG9yIFNJUC1iYXNlZCwgYW5kIHRlbGVwaG9uZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJs b2NrIj53aGV0aGVyIGl0IGJlIGxlZ2FjeSBTUzctYmFzZWQgb3IgU0lQLWJhc2VkLCBhbmQgdGVs ZXBob25lIG51bWJlcnM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxibG9jayI+ICAgbnVtYmVycyBhcmUgdGhlIG1haW4gZm9ybSBvZiBpZGVudGlmaWVy LiAgQ2FsbGluZyBuYW1lcyBhcmUgYWxzbzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2Nr Ij5hcmUgdGhlIG1haW4gZm9ybSBvZiBpZGVudGlmaWVyLiAgQ2FsbGluZyBuYW1lcyBhcmUgYWxz byB1c2VkIGluIHRoZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGJsb2NrIj4gICB1c2VkIGluIHRoZSBQU1ROLCBvZiBjb3Vyc2UsIGJ1dCBTVElSIGlz IGZvY3VzZWQgb24gdGhlIG51bWJlciAoc2VlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxv Y2siPlBTVE4sIG9mIGNvdXJzZSwgYnV0IFNUSVIgaXMgZm9jdXNlZCBvbiB0aGUgbnVtYmVyIChz ZWUgc2VjdGlvbiA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij40KS48L3NwYW4+PC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIHNlY3Rpb24gPHNw YW4gY2xhc3M9ImRlbGV0ZSI+NSkuPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJs b2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYw MDE4Ij48L2E+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+My48c3BhbiBjbGFzcz0iZGVsZXRlIj43LiA8 L3NwYW4+SGFzbid0IGl0IGFsd2F5cyBiZWVuIHBvc3NpYmxlIHRvIGZha2UgY2FsbGVyLWlkPzwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4zLjxzcGFuIGNsYXNzPSJpbnNlcnQiPjYu CTwvc3Bhbj5IYXNuJ3QgaXQgYWx3YXlzIGJlZW4gcG9zc2libGUgdG8gZmFrZSBjYWxsZXItaWQ/ PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAxOSI+ PC9hPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIFllcy4gIFRoZSBsZWdhY3kgUFNUTiBoYXMgdHJh ZGl0aW9uYWxseSBhbGxvd2VkIGJ1c2luZXNzIFBCWHM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJibG9jayI+WWVzLiAgPHNwYW4gY2xhc3M9Imluc2VydCI+Rm9yIGluc3RhbmNlLCB0aGVyZSBh cmUgbGVnaXRpbWF0ZSB1c2VzIGZvciBzdWJzdGl0dXRpbmcgYTwvc3Bhbj48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPmRpZmZlcmVudCBwaG9u ZSBudW1iZXIgZnJvbSB0aGUgb25lIGFzc2lnbmVkIHRoZSBzZXJ2aWNlIG1ha2luZyB0aGU8L3Nw YW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxv Y2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0 Ij5jYWxsLjwvc3Bhbj4gIFRoZSBsZWdhY3kgUFNUTiBoYXMgdHJhZGl0aW9uYWxseSBhbGxvd2Vk IGJ1c2luZXNzIFBCWHM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPiAgIGNvbm5lY3RlZCB3aXRoIFBSSSB0cnVua3MgdG8gZ2VuZXJhdGUgd2hh dGV2ZXIgY2FsbGluZyBudW1iZXIgdGhleTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PiAgIGNvbm5lY3RlZCB3aXRoIFBSSSB0cnVua3MgdG8gZ2VuZXJhdGUgd2hhdGV2ZXIgY2FsbGlu ZyBudW1iZXIgdGhleTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDIwIj48L2E+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxi bG9jayI+ICAgd2FudGVkIHRvIGZvciBvdXRib3VuZCA8c3BhbiBjbGFzcz0iZGVsZXRlIj5jYWxs cy48L3NwYW4+ICBUaGlzIHdhcywgYW5kIGNvbnRpbnVlcyB0byBiZSw8L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJibG9jayI+d2FudGVkIHRvIGZvciBvdXRib3VuZCA8c3BhbiBjbGFzcz0iaW5z ZXJ0Ij5jYWxscyBpbiBzb21lIGNhc2VzLjwvc3Bhbj4gIFRoaXMgd2FzLCBhbmQgY29udGludWVz PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2si PiAgIG5lY2Vzc2FyeSB0byBhbGxvdyBvcmdhbml6YXRpb25zIHRvIGdlbmVyYXRlIGNhbGxzIHVz aW5nIGEgbWFpbjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj50byBiZSwgbmVjZXNz YXJ5IHRvIGFsbG93IG9yZ2FuaXphdGlvbnMgdG8gZ2VuZXJhdGUgY2FsbHMgdXNpbmcgYTwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAi Y29ycG9yYXRlIiB0eXBlIG51bWJlciwgZXZlbiBmcm9tIHRoaXJkIHBhcnRpZXM7IGZvciBleGFt cGxlIGZyb208L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+bWFpbiAiY29ycG9yYXRl IiB0eXBlIG51bWJlciwgZXZlbiBmcm9tIHRoaXJkIHBhcnRpZXM7IGZvciBleGFtcGxlPC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIG91 dHNvdXJjZWQgY2FsbC1jZW50ZXJzIGFuZCBicmFuY2ggb2ZmaWNlcy48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJibG9jayI+ZnJvbSBvdXRzb3VyY2VkIGNhbGwtY2VudGVycyBhbmQgYnJhbmNo IG9mZmljZXMuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFRoaXMgcmVxdWlyZW1l bnQgb3IgbmVlZCBpcyBiZWluZyBtYWludGFpbmVkIGZvciBhbnkgU1RJUiBzb2x1dGlvbi48L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBUaGlzIHJlcXVpcmVtZW50IG9yIG5lZWQg aXMgYmVpbmcgbWFpbnRhaW5lZCBmb3IgYW55IFNUSVIgc29sdXRpb24uPC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBUaGF0J3Mgd2h5IHdl IGRlc2NyaWJlIGl0IGFzICJhbiBpZGVudGl0eSB0aGV5J3JlIGF1dGhvcml6ZWQgdG8gdXNlIjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFRoYXQncyB3aHkgd2UgZGVzY3JpYmUg aXQgYXMgImFuIGlkZW50aXR5IHRoZXkncmUgYXV0aG9yaXplZCB0byB1c2UiPC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBpbnN0ZWFkIG9m IGFzICJ0aGVpciBpZGVudGl0eSIgLSBpdCBtYXkgbm90IGJlIHRoZSB0ZWxlcGhvbmUgbnVtYmVy PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgaW5zdGVhZCBvZiBhcyAidGhlaXIg aWRlbnRpdHkiIC0gaXQgbWF5IG5vdCBiZSB0aGUgdGVsZXBob25lIG51bWJlcjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgdXNlZCB0byBy ZWFjaCBiYWNrIHRvIHRoZW0sIGJ1dCBpdCBpcyBhIG51bWJlciB0aGV5IHdlcmUgZWl0aGVyPC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgdXNlZCB0byByZWFjaCBiYWNrIHRvIHRo ZW0sIGJ1dCBpdCBpcyBhIG51bWJlciB0aGV5IHdlcmUgZWl0aGVyPC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBkaXJlY3RseSBhc3NpZ25l ZCBieSB0aGUgbnVtYmVyaW5nIGF1dGhvcml0eSwgb3IgdGhhdCB0aGUgcmVhbDwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGRpcmVjdGx5IGFzc2lnbmVkIGJ5IHRoZSBudW1iZXJp bmcgYXV0aG9yaXR5LCBvciB0aGF0IHRoZSByZWFsPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBudW1iZXIgIm93bmVyIiBncmFudHMgdGhl bSB0aGUgcmlnaHQgdG8gdXNlIGZvciBtYWtpbmcgY2FsbHMuPC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+ICAgbnVtYmVyICJvd25lciIgZ3JhbnRzIHRoZW0gdGhlIHJpZ2h0IHRvIHVz ZSBmb3IgbWFraW5nIGNhbGxzLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+ PGEgbmFtZT0iZGlmZjAwMjEiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4zLjxzcGFuIGNsYXNz PSJkZWxldGUiPjguIDwvc3Bhbj5XaHkgYXJlIHRoZSBhdHRhY2tzIGdyb3dpbmcgbm93PzwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4zLjxzcGFuIGNsYXNzPSJpbnNlcnQiPjcuCTwv c3Bhbj5XaHkgYXJlIHRoZSBhdHRhY2tzIGdyb3dpbmcgbm93PzwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij4gICBNdWx0aXBsZSBmYWN0b3JzIGhhdmUgY29udHJpYnV0ZWQgdG8gdGhlIGdy b3d0aDo8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBNdWx0aXBsZSBmYWN0b3Jz IGhhdmUgY29udHJpYnV0ZWQgdG8gdGhlIGdyb3d0aDo8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgbyAgdGhlIGRlY3JlYXNpbmcgY29z dHMgb2YgbWFraW5nIHBob25lIGNhbGxzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ ICAgICBvICB0aGUgZGVjcmVhc2luZyBjb3N0cyBvZiBtYWtpbmcgcGhvbmUgY2FsbHM8L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgbyAg dGhlIGRlY3JlYXNpbmcgY29zdCwgY29tcGxleGl0eSwgdGltZSwgYW5kIHJlc291cmNlcyByZXF1 aXJlZDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgbyAgdGhlIGRlY3JlYXNp bmcgY29zdCwgY29tcGxleGl0eSwgdGltZSwgYW5kIHJlc291cmNlcyByZXF1aXJlZDwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICB0 byBjb25uZWN0IHRvIHRoZSBQU1ROIHRydXN0LW5ldHdvcmsgd2l0aCBQUkktdHlwZSBzZXJ2aWNl LDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICAgdG8gY29ubmVjdCB0byB0 aGUgUFNUTiB0cnVzdC1uZXR3b3JrIHdpdGggUFJJLXR5cGUgc2VydmljZSw8L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgc3VjaCBh cyBTSVAgdHJ1bmtzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICBzdWNo IGFzIFNJUCB0cnVua3M8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPiAgICAgbyAgdGhlIGdyb3d0aCBpbiB1bnJlZ3VsYXRlZCBhbmQgb3Zlci10 aGUtdG9wIFZvSVAgcHJvdmlkZXJzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAg ICBvICB0aGUgZ3Jvd3RoIGluIHVucmVndWxhdGVkIGFuZCBvdmVyLXRoZS10b3AgVm9JUCBwcm92 aWRlcnM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAyMiI+PC9hPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij53aWxs aW5nIHRvIGxvb2sgdGhlIG90aGVyIHdheSBhcyB0aGVpciBjdXN0b21lcnMgcGxhY2UgdGhlc2U8 L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs YmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5z ZXJ0Ij5jYWxsczwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxlZnQiPiAgICAgbyAgdGhlIGF2YWlsYWJpbGl0eSBvZiBvcGVuLXNvdXJjZSBz b2Z0d2FyZSBjYXBhYmxlIG9mIG1ha2luZzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PiAgICAgbyAgdGhlIGF2YWlsYWJpbGl0eSBvZiBvcGVuLXNvdXJjZSBzb2Z0d2FyZSBjYXBhYmxl IG9mIG1ha2luZzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDIzIj48L2E+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9j ayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgICAgICByb2JvY2FsbHM8L3NwYW4+IHdpdGggY29u ZmlndXJhYmxlIHNvdXJjZSBudW1iZXJzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2si PjxzcGFuIGNsYXNzPSJpbnNlcnQiPnNwb29mZWQ8L3NwYW4+IHdpdGggY29uZmlndXJhYmxlIHNv dXJjZSBudW1iZXJzPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZD48YSBuYW1l PSJkaWZmMDAyNCI+PC9hPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUi PiAgIEl0IHNob3VsZCBiZSBub3RlZCB0aGF0IG1hbGljaW91cyByb2JvPC9zcGFuPmNhbGxzIGFy ZSBnZW5lcmF0ZWQgZnJvbTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBj bGFzcz0iaW5zZXJ0Ij5JdCBzaG91bGQgYmUgbm90ZWQgdGhhdCBtYWxpY2lvdXMgc3Bvb2ZlZCA8 L3NwYW4+Y2FsbHMgYXJlIGdlbmVyYXRlZCBmcm9tPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICB2YXJpb3VzIGVudHJ5IHBvaW50cyBpbnRv IHRoZSBQU1ROIHRydXN0LW5ldHdvcms6IGZvciBleGFtcGxlIGxlZ2FjeTwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPiAgIHZhcmlvdXMgZW50cnkgcG9pbnRzIGludG8gdGhlIFBTVE4g dHJ1c3QtbmV0d29yazogZm9yIGV4YW1wbGUgbGVnYWN5PC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBQUkkgdHJ1bmtzLCBTSVAgYW5kIEgu MzIzIHRydW5rcywgU0lNLWNhcmQgYm94ZXMgb3IgZ2F0ZXdheXMsIGFuZDwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPiAgIFBSSSB0cnVua3MsIFNJUCBhbmQgSC4zMjMgdHJ1bmtzLCBT SU0tY2FyZCBib3hlcyBvciBnYXRld2F5cywgYW5kPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBzdWJzY3JpYmVyIFZvSVAgYWNjb3VudHMu PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgc3Vic2NyaWJlciBWb0lQIGFjY291 bnRzLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAw MjUiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4zLjxzcGFuIGNsYXNzPSJkZWxldGUiPjkuIDwv c3Bhbj5JcyB0aGlzIGEgVVNBLXNwZWNpZmljIHByb2JsZW0/PC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyYmxvY2siPjMuPHNwYW4gY2xhc3M9Imluc2VydCI+OC4JPC9zcGFuPklzIHRoaXMgYSBV U0Etc3BlY2lmaWMgcHJvYmxlbT88L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgTm8u IFRoZSBVU0EgaXMgb25lIG9mIHRoZSBzZXZlcmFsIGNvdW50cmllcyBmb3Igd2hpY2ggdGhlIGZh Y3RvcnM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBOby4gVGhlIFVTQSBpcyBv bmUgb2YgdGhlIHNldmVyYWwgY291bnRyaWVzIGZvciB3aGljaCB0aGUgZmFjdG9yczwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkPjxh IG5hbWU9ImRpZmYwMDI2Ij48L2E+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRl bGV0ZSI+ICAgbGlzdGVkIGluIHRoZSBhbnN3ZXIgdG8gcXVlc3Rpb24gMy44PC9zcGFuPiBoYXZl IHJlYWNoZWQgbGFyZ2Ugc2NhbGUsIHNvIGl0PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxv Y2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPmxpc3RlZCBpbiB0aGUgYW5zd2VyIHRvIHF1ZXN0aW9u IDIuNzwvc3Bhbj4gaGF2ZSByZWFjaGVkIGxhcmdlIHNjYWxlLCBzbyBpdDwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgaXMgb25lIG9mIHRo ZSBmaXJzdCB0byBoYXZlIHRoZSBwcm9ibGVtIHNvIGZhci4gIEl0IGhhcyBhbHJlYWR5PC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgaXMgb25lIG9mIHRoZSBmaXJzdCB0byBoYXZl IHRoZSBwcm9ibGVtIHNvIGZhci4gIEl0IGhhcyBhbHJlYWR5PC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAw MjciPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBiZWNvbWUgYSBncm93aW5nIHByb2JsZW0g aW4gb3RoZXIgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+Y291bnRyaWVzIFtvZmNvbS13b3JrXSw8L3Nw YW4+IGFuZCB3aWxsPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPmJlY29tZSBhIGdy b3dpbmcgcHJvYmxlbSBpbiBvdGhlciA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5jb3VudHJpZXMsPC9z cGFuPiBhbmQgd2lsbCB1bmRvdWJ0ZWRseTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICB1bmRvdWJ0ZWRseSBpbXBhY3QgbWFueSBtb3Jl IGNvdW50cmllcyBpbiB0aGUgbmVhciBmdXR1cmUuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy YmxvY2siPmltcGFjdCBtYW55IG1vcmUgY291bnRyaWVzIGluIHRoZSBuZWFyIGZ1dHVyZS48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDI4Ij48L2E+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxibG9jayI+My48c3BhbiBjbGFzcz0iZGVsZXRlIj4xMC4gICAgIFdoeSB3 aWxsIGNhcnJpZXJzIGFkb3B0PC9zcGFuPiB0aGlzPzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmJsb2NrIj4zLjxzcGFuIGNsYXNzPSJpbnNlcnQiPjkuCVdoeSB3aWxsIGNhcnJpZXJzIGZpeDwv c3Bhbj4gdGhpcz88L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgQmVzaWRlcyB0aGUg cG90ZW50aWFsIG9mIGZlZGVyYWwgcmVndWxhdGlvbiBvciBtYW5kYXRlcywgdGhlcmUgYXJlPC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgQmVzaWRlcyB0aGUgcG90ZW50aWFsIG9m IGZlZGVyYWwgcmVndWxhdGlvbiBvciBtYW5kYXRlcywgdGhlcmUgYXJlPC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBvdGhlciBtb3RpdmF0 aW9ucyBmb3IgY2FycmllcnMgdG8gaW1wbGVtZW50IHNvbHV0aW9ucyB0byByZWR1Y2U8L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBvdGhlciBtb3RpdmF0aW9ucyBmb3IgY2Fycmll cnMgdG8gaW1wbGVtZW50IHNvbHV0aW9ucyB0byByZWR1Y2U8L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHVuc29saWNpdGVkIGNhbGxzIC0g YXQgbGVhc3QgbWFsaWNpb3VzIG9uZXMuICBGcmF1ZHVsZW50IGFuZDwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPiAgIHVuc29saWNpdGVkIGNhbGxzIC0gYXQgbGVhc3QgbWFsaWNpb3Vz IG9uZXMuICBGcmF1ZHVsZW50IGFuZDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgdW5zb2xpY2l0ZWQgY2FsbHMgbGVhZCB0byB3aWRlc3By ZWFkIGN1c3RvbWVyIGRpc3NhdGlzZmFjdGlvbiwgYW5kPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyaWdodCI+ICAgdW5zb2xpY2l0ZWQgY2FsbHMgbGVhZCB0byB3aWRlc3ByZWFkIGN1c3RvbWVy IGRpc3NhdGlzZmFjdGlvbiwgYW5kPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBpbnZlc3RpZ2F0aW9uIGlzIGV4dHJlbWVseSBleHBlbnNp dmUgYW5kIHRpbWUtY29uc3VtaW5nLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAg IGludmVzdGlnYXRpb24gaXMgZXh0cmVtZWx5IGV4cGVuc2l2ZSBhbmQgdGltZS1jb25zdW1pbmcu PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIEluIGdlbmVyYWwsIG1vc3QgcGF5aW5n IHN1YnNjcmliZXJzIGV4cGVjdCB0aGUgQ2FsbGVyLUlEIG51bWJlciB0aGV5PC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgSW4gZ2VuZXJhbCwgbW9zdCBwYXlpbmcgc3Vic2NyaWJl cnMgZXhwZWN0IHRoZSBDYWxsZXItSUQgbnVtYmVyIHRoZXk8L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHNlZSB0byBiZSB2YWxpZDsgYW5k IGN1c3RvbWVyIHN1cHBvcnQgaXMgYW4gZXhwZW5zaXZlIHdheSBvZjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPiAgIHNlZSB0byBiZSB2YWxpZDsgYW5kIGN1c3RvbWVyIHN1cHBvcnQg aXMgYW4gZXhwZW5zaXZlIHdheSBvZjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgaGFuZGxpbmcgZmFsc2Ugb3IgaW52YWxpZCBDYWxsZXIt SURzLiAgQSBsb3NzIG9mIGZhaXRoIGluIHRoZSBQU1ROPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyaWdodCI+ICAgaGFuZGxpbmcgZmFsc2Ugb3IgaW52YWxpZCBDYWxsZXItSURzLiAgQSBsb3Nz IG9mIGZhaXRoIGluIHRoZSBQU1ROPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iPjwvdGQ+PC90cj4NCiAgICAgIDx0ciBiZ2NvbG9yPSJncmF5Ij48dGQ+PC90ZD48dGg+ PGEgbmFtZT0icGFydC1sNSI+PHNtYWxsPnNraXBwaW5nIHRvIGNoYW5nZSBhdDwvc21hbGw+PGVt PiBwYWdlIDksIGxpbmUgMzc8L2VtPjwvYT48L3RoPjx0aD4gPC90aD48dGg+PGEgbmFtZT0icGFy dC1yNSI+PHNtYWxsPnNraXBwaW5nIHRvIGNoYW5nZSBhdDwvc21hbGw+PGVtPiBwYWdlIDEsIGxp bmUgNDI2PC9lbT48L2E+PC90aD48dGQ+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIEZvciBjYWxscyBm cm9tIHVua25vd24gb3IgaW52YWxpZCBudW1iZXJzLCBzZXZlcmFsIHBvc3NpYmxlIGFjdGlvbnM8 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBGb3IgY2FsbHMgZnJvbSB1bmtub3du IG9yIGludmFsaWQgbnVtYmVycywgc2V2ZXJhbCBwb3NzaWJsZSBhY3Rpb25zPC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBtaWdodCBvY2N1 cjogdGhlIG51bWJlcnMgY2FuIGJlICJhbm9ueW1pemVkIiAoc2hvd24gdG8gdXNlcnMgYXM8L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBtaWdodCBvY2N1cjogdGhlIG51bWJlcnMg Y2FuIGJlICJhbm9ueW1pemVkIiAoc2hvd24gdG8gdXNlcnMgYXM8L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICd1bmtub3duJyksIG9yIHNl bnQgdG8gdm9pY2VtYWlsLCBvciByb3V0ZWQgdG8gYW4gSW50ZXJhY3RpdmUgVm9pY2U8L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAndW5rbm93bicpLCBvciBzZW50IHRvIHZvaWNl bWFpbCwgb3Igcm91dGVkIHRvIGFuIEludGVyYWN0aXZlIFZvaWNlPC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBSZXNwb25zZSAoSVZSKSBz eXN0ZW0gdG8gcGVyZm9ybSBhIGNhcHRjaGEgdGVzdCBvciB0byBleHBsYWluIHRoZTwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFJlc3BvbnNlIChJVlIpIHN5c3RlbSB0byBwZXJm b3JtIGEgY2FwdGNoYSB0ZXN0IG9yIHRvIGV4cGxhaW4gdGhlPC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBwcm9ibGVtIGFuZCBwcm92aWRl IGhlbHAgb3IgcmVzb2x1dGlvbiBzdXBwb3J0LiAgVGhlc2UgYXJlIGp1c3Q8L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBwcm9ibGVtIGFuZCBwcm92aWRlIGhlbHAgb3IgcmVzb2x1 dGlvbiBzdXBwb3J0LiAgVGhlc2UgYXJlIGp1c3Q8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGV4YW1wbGVzIG9mIHdoYXQgbWlnaHQgY2hh bmdlLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGV4YW1wbGVzIG9mIHdoYXQg bWlnaHQgY2hhbmdlLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBGdXJ0aGVybW9y ZSwgdGhpcmQtcGFydHkgcmVwdXRhdGlvbiBzeXN0ZW1zIG1pZ2h0IGFsbG93IGNvbnN1bWVyczwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIEZ1cnRoZXJtb3JlLCB0aGlyZC1wYXJ0 eSByZXB1dGF0aW9uIHN5c3RlbXMgbWlnaHQgYWxsb3cgY29uc3VtZXJzPC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICB0aGUgYWJpbGl0eSB0 byBibG9jayB1bnNvbGljaXRlZCB5ZXQgbGVnYWwgY2FsbHMsIGZvciBleGFtcGxlPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgdGhlIGFiaWxpdHkgdG8gYmxvY2sgdW5zb2xpY2l0 ZWQgeWV0IGxlZ2FsIGNhbGxzLCBmb3IgZXhhbXBsZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgdGhyb3VnaCBzbWFydHBob25lIGFwcHMg dGhhdCBjb25zdW1lcnMgY2FuIGNvbnRyb2wuIChzZWUgdGhlIGVuZCBvZjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPiAgIHRocm91Z2ggc21hcnRwaG9uZSBhcHBzIHRoYXQgY29uc3Vt ZXJzIGNhbiBjb250cm9sLiAoc2VlIHRoZSBlbmQgb2Y8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAyOSI+ PC9hPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgIHF1ZXN0aW9u IDM8L3NwYW4+LjQpPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNz PSJpbnNlcnQiPnF1ZXN0aW9uIDI8L3NwYW4+LjQpPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAzMCI+PC9hPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjMu MTxzcGFuIGNsYXNzPSJkZWxldGUiPjEuICAgICA8L3NwYW4+V2lsbCBjb3VudHJpZXMgZG8gdGhp cyBmb3IgaW50ZXJuYXRpb25hbCBjYWxscyB0byBvdGhlcnM/PC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyYmxvY2siPjMuMTxzcGFuIGNsYXNzPSJpbnNlcnQiPjAuCTwvc3Bhbj5XaWxsIGNvdW50 cmllcyBkbyB0aGlzIGZvciBpbnRlcm5hdGlvbmFsIGNhbGxzIHRvIG90aGVycz88L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgVGhhdCdzIHVua25vd24sIGJ1dCBsaWtlbHkgeWVzLiAg VGhlcmUgYXJlIHNvbWUgc3Ryb25nIG1vdGl2YXRpb25zPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyaWdodCI+ICAgVGhhdCdzIHVua25vd24sIGJ1dCBsaWtlbHkgeWVzLiAgVGhlcmUgYXJlIHNv bWUgc3Ryb25nIG1vdGl2YXRpb25zPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBmb3IgdGhlbSB0byBkbyBzby4gIFVsdGltYXRlbHkgbW9z dCBuYXRpb25zIHdhbnQgdG8gaGF2ZSB0aGVpcjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPiAgIGZvciB0aGVtIHRvIGRvIHNvLiAgVWx0aW1hdGVseSBtb3N0IG5hdGlvbnMgd2FudCB0 byBoYXZlIHRoZWlyPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij4gICBsZWdpdGltYXRlIGludGVybmF0aW9uYWwgY2FsbHMgZGVsaXZlcmVkLCBh cyB3ZWxsIGFzIGhhdmUgdGhlaXI8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBs ZWdpdGltYXRlIGludGVybmF0aW9uYWwgY2FsbHMgZGVsaXZlcmVkLCBhcyB3ZWxsIGFzIGhhdmUg dGhlaXI8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPiAgIGNhbGxpbmcgbnVtYmVyIGRpc3BsYXllZC4gIElmIFNUSVIgYmVjb21lcyB3aWRlbHkg ZGVwbG95ZWQgaW4gYTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGNhbGxpbmcg bnVtYmVyIGRpc3BsYXllZC4gIElmIFNUSVIgYmVjb21lcyB3aWRlbHkgZGVwbG95ZWQgaW4gYTwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAg Y291bnRyeSwgc3VjaCBhcyB0aGUgVW5pdGVkIFN0YXRlcywgYW5kIG1hbGljaW91cyBjYWxscyBj b250aW51ZSB0bzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGNvdW50cnksIHN1 Y2ggYXMgdGhlIFVuaXRlZCBTdGF0ZXMsIGFuZCBtYWxpY2lvdXMgY2FsbHMgY29udGludWUgdG88 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAg IGFycml2ZSBmcm9tIGEgZ2l2ZW4gY291bnRyeS1jb2RlLCB0aGVuIHRoZSBVUyBjYXJyaWVycyBj YW4gc3RhcnQ8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBhcnJpdmUgZnJvbSBh IGdpdmVuIGNvdW50cnktY29kZSwgdGhlbiB0aGUgVVMgY2FycmllcnMgY2FuIHN0YXJ0PC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBhbm9u eW1pemluZyBvciBvdXRyaWdodCBibG9ja2luZyB0aGUgY2FsbHMuPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+ICAgYW5vbnltaXppbmcgb3Igb3V0cmlnaHQgYmxvY2tpbmcgdGhlIGNh bGxzLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBJbnRlcm5hdGlvbmFsIFRlbGVw aG9ueSBEZW5pYWwgb2YgU2VydmljZSAoVERPUykgYXR0YWNrcyBoYXZlPC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+ICAgSW50ZXJuYXRpb25hbCBUZWxlcGhvbnkgRGVuaWFsIG9mIFNl cnZpY2UgKFRET1MpIGF0dGFja3MgaGF2ZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgYWxyZWFkeSBvY2N1cnJlZCBhZ2FpbnN0IGNhcnJp ZXJzIGluIHRoZSBVUywgd2l0aCByYW5kb21pemVkPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+ICAgYWxyZWFkeSBvY2N1cnJlZCBhZ2FpbnN0IGNhcnJpZXJzIGluIHRoZSBVUywgd2l0 aCByYW5kb21pemVkPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij4gICBvcmlnaW5hdGluZyBudW1iZXJzIGZyb20gdGhlIGZvcmVpZ24gY291bnRy eS1jb2RlOyB0byBzdG9wIGl0IHRoZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAg IG9yaWdpbmF0aW5nIG51bWJlcnMgZnJvbSB0aGUgZm9yZWlnbiBjb3VudHJ5LWNvZGU7IHRvIHN0 b3AgaXQgdGhlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij4gICBjYXJyaWVycyB0aHJvdHRsZWQgKmFsbCogY2FsbHMgZnJvbSB0aGUgYXR0YWNr aW5nIGNvdW50cnktY29kZSB1bnRpbDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAg IGNhcnJpZXJzIHRocm90dGxlZCAqYWxsKiBjYWxscyBmcm9tIHRoZSBhdHRhY2tpbmcgY291bnRy eS1jb2RlIHVudGlsPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij4gICB0aGUgYXR0YWNrIHN0b3BwZWQuICBHb3Zlcm5tZW50cyBzaG91bGQgbm90 IHdhbnQgc3VjaCBtZWFzdXJlcyB0byBiZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PiAgIHRoZSBhdHRhY2sgc3RvcHBlZC4gIEdvdmVybm1lbnRzIHNob3VsZCBub3Qgd2FudCBzdWNo IG1lYXN1cmVzIHRvIGJlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij4gICBhZG9wdGVkIGJ5IG90aGVyIG5hdGlvbidzIGNhcnJpZXJzIGZvciB0 aGVpciBjYWxscywgZm9yIG9idmlvdXM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4g ICBhZG9wdGVkIGJ5IG90aGVyIG5hdGlvbidzIGNhcnJpZXJzIGZvciB0aGVpciBjYWxscywgZm9y IG9idmlvdXM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPiAgIHJlYXNvbnMuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgcmVh c29ucy48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYw MDMxIj48L2E+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+My4xPHNwYW4gY2xhc3M9ImRlbGV0ZSI+Mi4g ICAgIDwvc3Bhbj5Jc24ndCB0aGlzIHRoZSBzYW1lIHByb2JsZW0gZW1haWwgaGFzIGZvciBzcGFt PzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4zLjE8c3BhbiBjbGFzcz0iaW5zZXJ0 Ij4xLgk8L3NwYW4+SXNuJ3QgdGhpcyB0aGUgc2FtZSBwcm9ibGVtIGVtYWlsIGhhcyBmb3Igc3Bh bT88L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgWWVzLCB0aGUgZ2VuZXJhbCBwcm9i bGVtIGlzIHNpbWlsYXIuICBUaGUgc3BlY2lmaWNzIGZvciBwaG9uZSBjYWxsczwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFllcywgdGhlIGdlbmVyYWwgcHJvYmxlbSBpcyBzaW1p bGFyLiAgVGhlIHNwZWNpZmljcyBmb3IgcGhvbmUgY2FsbHM8L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGFyZSBhY3R1YWxseSBlYXNpZXIg aW4gc29tZSByZXNwZWN0cywgYW5kIGhhcmRlciBpbiBvdGhlcnMuPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+ICAgYXJlIGFjdHVhbGx5IGVhc2llciBpbiBzb21lIHJlc3BlY3RzLCBh bmQgaGFyZGVyIGluIG90aGVycy48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgRW1h aWwgaGFzIGEgbW9yZSBkaWZmaWN1bHQgY2hhbGxlbmdlIGJlY2F1c2UgYW55IGVtYWlsIGNsaWVu dCBjYW48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBFbWFpbCBoYXMgYSBtb3Jl IGRpZmZpY3VsdCBjaGFsbGVuZ2UgYmVjYXVzZSBhbnkgZW1haWwgY2xpZW50IGNhbjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgc2VuZCBl bWFpbHMgdG8gYW55IGVtYWlsIHNlcnZlciwgYW55d2hlcmUgb24gdGhlIEludGVybmV0LCBkaXJl Y3RseTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHNlbmQgZW1haWxzIHRvIGFu eSBlbWFpbCBzZXJ2ZXIsIGFueXdoZXJlIG9uIHRoZSBJbnRlcm5ldCwgZGlyZWN0bHk8L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIG92ZXIg SVA7IGFuZCB0aGV5IGNhbiBjbGFpbSBhbnkgZG9tYWluIG5hbWUgdGhleSB3aXNoLCBldmVuPC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgb3ZlciBJUDsgYW5kIHRoZXkgY2FuIGNs YWltIGFueSBkb21haW4gbmFtZSB0aGV5IHdpc2gsIGV2ZW48L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGxlZ2l0aW1hdGVseSBieSBidXlp bmcgZG9tYWluIG5hbWVzIGZvciB2aXJ0dWFsbHkgZnJlZS4gIFBob25lIGNhbGxzPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgbGVnaXRpbWF0ZWx5IGJ5IGJ1eWluZyBkb21haW4g bmFtZXMgZm9yIHZpcnR1YWxseSBmcmVlLiAgUGhvbmUgY2FsbHM8L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGFyZSBzbGlnaHRseSBlYXNp ZXIgYmVjYXVzZSBFLjE2NCBudW1iZXJzIGFyZSBzbGlnaHRseSBtb3JlPC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+ICAgYXJlIHNsaWdodGx5IGVhc2llciBiZWNhdXNlIEUuMTY0IG51 bWJlcnMgYXJlIHNsaWdodGx5IG1vcmU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGRpZmZpY3VsdCB0byBhY3F1aXJlLCBhbmQgaW4gcHJh Y3RpY2UgdGhlcmUgYXJlIG9ubHkgYSBsaW1pdGVkPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+ICAgZGlmZmljdWx0IHRvIGFjcXVpcmUsIGFuZCBpbiBwcmFjdGljZSB0aGVyZSBhcmUg b25seSBhIGxpbWl0ZWQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+ PC90ZD48L3RyPg0KICAgICAgPHRyIGJnY29sb3I9ImdyYXkiPjx0ZD48L3RkPjx0aD48YSBuYW1l PSJwYXJ0LWw2Ij48c21hbGw+c2tpcHBpbmcgdG8gY2hhbmdlIGF0PC9zbWFsbD48ZW0+IHBhZ2Ug MTAsIGxpbmUgMzA8L2VtPjwvYT48L3RoPjx0aD4gPC90aD48dGg+PGEgbmFtZT0icGFydC1yNiI+ PHNtYWxsPnNraXBwaW5nIHRvIGNoYW5nZSBhdDwvc21hbGw+PGVtPiBwYWdlIDEsIGxpbmUgNDY5 PC9lbT48L2E+PC90aD48dGQ+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGp1c3QgYW55b25lIGFueXdo ZXJlIGRpcmVjdGx5LjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGp1c3QgYW55 b25lIGFueXdoZXJlIGRpcmVjdGx5LjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBP biB0aGUgb3RoZXIgaGFuZCBlbWFpbCBoYXMgYW4gZWFzaWVyIHRpbWUgZGV0ZXJtaW5pbmcgd2hl dGhlciBhPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgT24gdGhlIG90aGVyIGhh bmQgZW1haWwgaGFzIGFuIGVhc2llciB0aW1lIGRldGVybWluaW5nIHdoZXRoZXIgYTwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgbWVzc2Fn ZSBpcyBzcGFtLCBiZWNhdXNlIHRoZSBlbWFpbCBtZXNzYWdlIGNvbnRhaW5zIGEgbG90IG1vcmU8 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBtZXNzYWdlIGlzIHNwYW0sIGJlY2F1 c2UgdGhlIGVtYWlsIG1lc3NhZ2UgY29udGFpbnMgYSBsb3QgbW9yZTwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgdXNlZnVsIGRhdGEgZm9y IGRldGVybWluaW5nIGl0LCBzdWNoIGFzIHRoZSBtZXNzYWdlIGJvZHkgb2YgdGV4dC48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICB1c2VmdWwgZGF0YSBmb3IgZGV0ZXJtaW5pbmcg aXQsIHN1Y2ggYXMgdGhlIG1lc3NhZ2UgYm9keSBvZiB0ZXh0LjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgSWYgdGhlIGVtYWlsIHNwYW0g ZmlsdGVyIGdldHMgaXQgd3JvbmcsIGl0J3Mgbm90IGEgaHVnZSBkZWFsIC0gZmFsc2U8L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBJZiB0aGUgZW1haWwgc3BhbSBmaWx0ZXIgZ2V0 cyBpdCB3cm9uZywgaXQncyBub3QgYSBodWdlIGRlYWwgLSBmYWxzZTwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgcG9zaXRpdmVzIGFuZCBm YWxzZSBuZWdhdGl2ZXMgYXJlIGNvbW1vbnBsYWNlIGluIGVtYWlsOyBpZiB0aGUgcGhvbmU8L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBwb3NpdGl2ZXMgYW5kIGZhbHNlIG5lZ2F0 aXZlcyBhcmUgY29tbW9ucGxhY2UgaW4gZW1haWw7IGlmIHRoZSBwaG9uZTwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgc3lzdGVtIHJlamVj dHMgZ29vZCBjYWxscywgdGhvdWdoLCBpdCBjYW4gbGVhZCB0byBsYXdzdWl0cyBvciBldmVuPC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgc3lzdGVtIHJlamVjdHMgZ29vZCBjYWxs cywgdGhvdWdoLCBpdCBjYW4gbGVhZCB0byBsYXdzdWl0cyBvciBldmVuPC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBsb3NzIG9mIGxpZmUu PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgbG9zcyBvZiBsaWZlLjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAwMzIiPjwvYT48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGJsb2NrIj4zLjE8c3BhbiBjbGFzcz0iZGVsZXRlIj4zLiAgICAgPC9zcGFuPldo YXQgc2NhbGUgZG9lcyBhIHNvbHV0aW9uIG5lZWQgdG8gYWNoaWV2ZT88L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJibG9jayI+My4xPHNwYW4gY2xhc3M9Imluc2VydCI+Mi4JPC9zcGFuPldoYXQg c2NhbGUgZG9lcyBhIHNvbHV0aW9uIG5lZWQgdG8gYWNoaWV2ZT88L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+ICAgV29ybGQtd2lkZSwgdGhlcmUgYXJlIGFwcHJveGltYXRlbHkgMjIwIEUu MTY0IGNvdW50cnktY29kZXMsIH4yMCwwMDA8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij4gICBXb3JsZC13aWRlLCB0aGVyZSBhcmUgYXBwcm94aW1hdGVseSAyMjAgRS4xNjQgY291bnRy eS1jb2RlcywgfjIwLDAwMDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+ICAgY2FycmllcnMgb2YgdmFyaW91cyB0eXBlcyBvciBzaXplcywgYW5k IG9uIHRoZSBvcmRlciBvZiB+MTAwIE1pbGxpb248L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij4gICBjYXJyaWVycyBvZiB2YXJpb3VzIHR5cGVzIG9yIHNpemVzLCBhbmQgb24gdGhlIG9y ZGVyIG9mIH4xMDAgTWlsbGlvbjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+ICAgZW50ZXJwcmlzZXMgb3IgYnVzaW5lc3Nlcy48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBlbnRlcnByaXNlcyBvciBidXNpbmVzc2VzLjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBGb3IgRS4xNjQgcGhvbmUgbnVtYmVycyBXb3Js ZC13aWRlOiB0aGVyZSBhcmUgfjcgQmlsbGlvbiBtb2JpbGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij4gICBGb3IgRS4xNjQgcGhvbmUgbnVtYmVycyBXb3JsZC13aWRlOiB0aGVyZSBh cmUgfjcgQmlsbGlvbiBtb2JpbGU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPiAgIG51bWJlcnMgaW4gc2VydmljZSAob2Ygd2hpY2ggfjEuNUIg YXJlIHNtYXJ0LXBob25lcyksIGFuZCBhbjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PiAgIG51bWJlcnMgaW4gc2VydmljZSAob2Ygd2hpY2ggfjEuNUIgYXJlIHNtYXJ0LXBob25lcyks IGFuZCBhbjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+ICAgYWRkaXRpb25hbCB+MS41IEJpbGxpb24gbnVtYmVycyBmcm9tIGxhbmQgbGluZXMg YW5kIG90aGVyIHR5cGVzIG9mPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgYWRk aXRpb25hbCB+MS41IEJpbGxpb24gbnVtYmVycyBmcm9tIGxhbmQgbGluZXMgYW5kIG90aGVyIHR5 cGVzIG9mPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij4gICBwaG9uZSBzZXJ2aWNlLiAgVGhlIG51bWJlciBvZiBFLjE2NCBudW1iZXJzIGhhcyBi ZWVuIGdyb3dpbmcgYnkgfjUwMDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHBo b25lIHNlcnZpY2UuICBUaGUgbnVtYmVyIG9mIEUuMTY0IG51bWJlcnMgaGFzIGJlZW4gZ3Jvd2lu ZyBieSB+NTAwPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij4gICBNaWxsaW9uIG51bWJlcnMgcGVyIHllYXIgZm9yIHRoZSBwYXN0IGRlY2FkZS4g IFRoZSBudW1iZXIgb2YganVzdDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIE1p bGxpb24gbnVtYmVycyBwZXIgeWVhciBmb3IgdGhlIHBhc3QgZGVjYWRlLiAgVGhlIG51bWJlciBv ZiBqdXN0PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90 cj4NCiAgICAgIDx0ciBiZ2NvbG9yPSJncmF5Ij48dGQ+PC90ZD48dGg+PGEgbmFtZT0icGFydC1s NyI+PHNtYWxsPnNraXBwaW5nIHRvIGNoYW5nZSBhdDwvc21hbGw+PGVtPiBwYWdlIDExLCBsaW5l IDE4PC9lbT48L2E+PC90aD48dGg+IDwvdGg+PHRoPjxhIG5hbWU9InBhcnQtcjciPjxzbWFsbD5z a2lwcGluZyB0byBjaGFuZ2UgYXQ8L3NtYWxsPjxlbT4gcGFnZSAxLCBsaW5lIDUwMjwvZW0+PC9h PjwvdGg+PHRkPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPiAgIE5vLCBub3QgaW5pdGlhbGx5LiAgVGhlcmUgd2lsbCBiZSBzb21lIGZhbHNlIHBvc2l0 aXZlcyBhdCB0aGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBObywgbm90IGlu aXRpYWxseS4gIFRoZXJlIHdpbGwgYmUgc29tZSBmYWxzZSBwb3NpdGl2ZXMgYXQgdGhlPC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBiZWdp bm5pbmcsIGFuZCBibG9ja2luZyBjYWxscyBpcyBhICJiaWcgZGVhbCIuICBFdmVuIGlmIFNUSVIg d29ya3M8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBiZWdpbm5pbmcsIGFuZCBi bG9ja2luZyBjYWxscyBpcyBhICJiaWcgZGVhbCIuICBFdmVuIGlmIFNUSVIgd29ya3M8L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHBlcmZl Y3RseSBhbmQgaXMgZGVwbG95ZWQgZXZlcnl3aGVyZSwgaXQgbWlnaHQgcmVxdWlyZSByZWd1bGF0 b3J5PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgcGVyZmVjdGx5IGFuZCBpcyBk ZXBsb3llZCBldmVyeXdoZXJlLCBpdCBtaWdodCByZXF1aXJlIHJlZ3VsYXRvcnk8L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHBvbGljeSBj aGFuZ2VzIGZvciBjYXJyaWVycyB0byBiZSBhYmxlIHRvIGFjdHVhbGx5IGJsb2NrIGNhbGxzPC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgcG9saWN5IGNoYW5nZXMgZm9yIGNhcnJp ZXJzIHRvIGJlIGFibGUgdG8gYWN0dWFsbHkgYmxvY2sgY2FsbHM8L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHdpdGhvdXQgc3BlY2lmaWMg Y3VzdG9tZXIgY29uc2VudC48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICB3aXRo b3V0IHNwZWNpZmljIGN1c3RvbWVyIGNvbnNlbnQuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPiAgIEluc3RlYWQsIGNhbGxzIGNhbiBiZSAiYW5vbnltaXplZCIgKHNob3duIHRvIHVzZXJz IGFzICd1bmtub3duJyksIG9yPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgSW5z dGVhZCwgY2FsbHMgY2FuIGJlICJhbm9ueW1pemVkIiAoc2hvd24gdG8gdXNlcnMgYXMgJ3Vua25v d24nKSwgb3I8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPiAgIHNlbnQgdG8gdm9pY2VtYWlsLCBvciByb3V0ZWQgdG8gYW4gSW50ZXJhY3RpdmUg Vm9pY2UgUmVzcG9uc2UgKElWUik8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBz ZW50IHRvIHZvaWNlbWFpbCwgb3Igcm91dGVkIHRvIGFuIEludGVyYWN0aXZlIFZvaWNlIFJlc3Bv bnNlIChJVlIpPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij4gICBzeXN0ZW0gdG8gcGVyZm9ybSBhIGNhcHRjaGEgdGVzdCBvciB0byBleHBsYWlu IHRoZSBwcm9ibGVtIGFuZDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHN5c3Rl bSB0byBwZXJmb3JtIGEgY2FwdGNoYSB0ZXN0IG9yIHRvIGV4cGxhaW4gdGhlIHByb2JsZW0gYW5k PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQ+PGEgbmFtZT0iZGlmZjAwMzMiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBwcm92 aWRlIGhlbHAgb3IgcmVzb2x1dGlvbiBzdXBwb3J0LiAgVGhlc2UgYXJlIGp1c3Qgc29tZSBleGFt cGxlcyBvZjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj5wcm92aWRlIGhlbHAgb3Ig cmVzb2x1dGlvbiBzdXBwb3J0LjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGJsb2NrIj4gICB3aGF0IG1pZ2h0IGJlIGRvbmU7IHRoZSBTVElSIFdvcmtp bmcgR3JvdXAgc3RhbmRhcmRzIHdpbGwgbm90PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxv Y2siPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICA8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgZGljdGF0ZSB3aGF0IHNwZWNpZmljIGFjdGlvbiB0byBw ZXJmb3JtIGluIHN1Y2ggY2FzZXMsIGJ1dCBsZWF2ZSBpdDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij5JdCBtYXkgYmUgdGhhdCBzZXJ2aWNlIHBy b3ZpZGVycyBzdGFydCByZXF1aXJpbmcgU1RJUi1lbmFibGVkIGNhbGxzPC9zcGFuPjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICB1cCB0 byBpbXBsZW1lbnRlcnMgdG8gZGVjaWRlIGluc3RlYWQuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPmZyb20gdGhlaXIgcGVlcmluZyBwYXJ0bmVy cy4gIFRoZXkgY291bGQgbW9uaXRvciBob3cgb2Z0ZW4gYSBwZWVyPC9zcGFuPjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+c2VudCB0aGVtIGFu IHVuYXV0aGVudGljYXRlZCBjYWxscyBhbmQgcmVwb3J0IHN0YXRpc3RpY3MuICBKdXN0IGFzPC9z cGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJs b2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2Vy dCI+aW50ZXJjb25uZWN0IGFncmVlbWVudHMgaGF2ZSBvdGhlciBzaWduYWxpbmcgcmVxdWlyZW1l bnRzLCBhIHNlY3VyZTwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxz cGFuIGNsYXNzPSJpbnNlcnQiPmlkZW50aXR5IGNvdWxkIGJlIHJlcXVpcmVkIHRvIGludGVyY29u bmVjdC4gIEJlY2F1c2UgU1RJUiBpczwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy YmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPmRlc2lnbmVkIHNvIHRoYXQgdGVzdGluZyBjYW4g YmUgZG9uZSBvbiB0aGUgaWRlbnRpdHkgaW5mb3JtYXRpb24gYXQ8L3NwYW4+PC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij5hbnkgcG9pbnQgaW4g dGhlIFNJUCBjYWxsIHBhdGgsIGFueSBzZXJ2aWNlIHByb3ZpZGVyIGluIHRoZSBwYXRoIGNhbjwv c3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxi bG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNl cnQiPmNoZWNrIHRvIHNlZSBpZiB0aGUgY2FsbCBoYXMgZ29vZCBpZGVudGl0eS48L3NwYW4+PC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj5UaGVzZSBhcmUganVzdCBzb21lIGV4YW1wbGVzIG9m IHdoYXQgbWlnaHQgYmUgZG9uZTsgdGhlIFNUSVIgV29ya2luZzwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJibG9jayI+R3JvdXAgc3RhbmRhcmRzIHdpbGwgbm90IGRpY3RhdGUgd2hhdCBzcGVj aWZpYyBhY3Rpb24gdG8gcGVyZm9ybSBpbjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9j ayI+c3VjaCBjYXNlcywgYnV0IGxlYXZlIGl0IHVwIHRvIGltcGxlbWVudGVycyB0byBkZWNpZGUg aW5zdGVhZC48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+NC4yLiBXaWxsIGNhbGxzIGZy b20gbm9uLVNUSVItZW5hYmxlZCBjYXJyaWVycyBiZSBibG9ja2VkPzwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPjQuMi4gV2lsbCBjYWxscyBmcm9tIG5vbi1TVElSLWVuYWJsZWQgY2Fy cmllcnMgYmUgYmxvY2tlZD88L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgTm8sIG5v dCBpbml0aWFsbHkuICBGb3Igb25lIHRoaW5nIGl0IHdpbGwgdGFrZSB0aW1lIHRvIGRlcGxveSBT VElSPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgTm8sIG5vdCBpbml0aWFsbHku ICBGb3Igb25lIHRoaW5nIGl0IHdpbGwgdGFrZSB0aW1lIHRvIGRlcGxveSBTVElSPC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICB0ZWNobm9s b2d5LCBmaXggaXNzdWVzLCBldGMuOyB3aXRob3V0IGEgImZsYWcgZGF5IiB3aGVyZSBldmVyeW9u ZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHRlY2hub2xvZ3ksIGZpeCBpc3N1 ZXMsIGV0Yy47IHdpdGhvdXQgYSAiZmxhZyBkYXkiIHdoZXJlIGV2ZXJ5b25lPC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBzdGFydHMgdXNp bmcgaXQsIHdlIGNhbid0IHJlYXNvbmFibHkgYmxvY2sgb3IgZXZlbiBhbm9ueW1pemUgc3VjaDwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHN0YXJ0cyB1c2luZyBpdCwgd2UgY2Fu J3QgcmVhc29uYWJseSBibG9jayBvciBldmVuIGFub255bWl6ZSBzdWNoPC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBjYWxscy48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBjYWxscy48L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+ICAgT25jZSBpdCdzIHVwIGFuZCBydW5uaW5nIGluIGEgZmV3IHNlcnZpY2UgcHJv dmlkZXJzLCB0aG91Z2gsIHRob3NlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAg T25jZSBpdCdzIHVwIGFuZCBydW5uaW5nIGluIGEgZmV3IHNlcnZpY2UgcHJvdmlkZXJzLCB0aG91 Z2gsIHRob3NlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij4gICBzZXJ2aWNlIHByb3ZpZGVycyBtYXkgYmUgYWJsZSB0byBkZXRlcm1pbmUgd2hp Y2ggY2FsbGluZyBudW1iZXJzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgc2Vy dmljZSBwcm92aWRlcnMgbWF5IGJlIGFibGUgdG8gZGV0ZXJtaW5lIHdoaWNoIGNhbGxpbmcgbnVt YmVyczwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+ DQogICAgICA8dHIgYmdjb2xvcj0iZ3JheSI+PHRkPjwvdGQ+PHRoPjxhIG5hbWU9InBhcnQtbDgi PjxzbWFsbD5za2lwcGluZyB0byBjaGFuZ2UgYXQ8L3NtYWxsPjxlbT4gcGFnZSAxMSwgbGluZSA0 OTwvZW0+PC9hPjwvdGg+PHRoPiA8L3RoPjx0aD48YSBuYW1lPSJwYXJ0LXI4Ij48c21hbGw+c2tp cHBpbmcgdG8gY2hhbmdlIGF0PC9zbWFsbD48ZW0+IHBhZ2UgMSwgbGluZSA1NDM8L2VtPjwvYT48 L3RoPjx0ZD48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgInByb3RlY3RlZCIgY2FsbGluZyBudW1iZXJz LCBhbmQgdGhlIGNhbGwgaXMgbm90IHVzaW5nIFNUSVIsIHRoZW48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij4gICAicHJvdGVjdGVkIiBjYWxsaW5nIG51bWJlcnMsIGFuZCB0aGUgY2Fs bCBpcyBub3QgdXNpbmcgU1RJUiwgdGhlbjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgdGhhdCBjYWxsIGNhbiBiZSBhbm9ueW1pemVkLCBi bG9ja2VkLCBvciByb3V0ZWQgdG8gYW4gYXR0ZW5kYW50LjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmlnaHQiPiAgIHRoYXQgY2FsbCBjYW4gYmUgYW5vbnltaXplZCwgYmxvY2tlZCwgb3Igcm91 dGVkIHRvIGFuIGF0dGVuZGFudC48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgQXMg bW9yZSBzZXJ2aWNlIHByb3ZpZGVycyBpbXBsZW1lbnQgU1RJUiwgbW9yZSBhbmQgbW9yZSBjYWxs aW5nPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgQXMgbW9yZSBzZXJ2aWNlIHBy b3ZpZGVycyBpbXBsZW1lbnQgU1RJUiwgbW9yZSBhbmQgbW9yZSBjYWxsaW5nPC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBudW1iZXJzIGJl Y29tZSAicHJvdGVjdGVkIiwgYW5kIG1vcmUgYW5kIG1vcmUgY2FsbHMgYXJlIHVzaW5nIFNUSVIu PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgbnVtYmVycyBiZWNvbWUgInByb3Rl Y3RlZCIsIGFuZCBtb3JlIGFuZCBtb3JlIGNhbGxzIGFyZSB1c2luZyBTVElSLjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgQXQgc29tZSBw b2ludCwgY2FsbHMgc3RpbGwgbm90IHVzaW5nIFNUSVIgY2FuIGJlIGFub255bWl6ZWQgb3I8L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBBdCBzb21lIHBvaW50LCBjYWxscyBzdGls bCBub3QgdXNpbmcgU1RJUiBjYW4gYmUgYW5vbnltaXplZCBvcjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgcm91dGVkIHRvIGFuIElWUjsg b3IgZXZlbiBibG9ja2VkIGlmIHJlZ3VsYXRvcnMgYWxsb3cgaXQuPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+ICAgcm91dGVkIHRvIGFuIElWUjsgb3IgZXZlbiBibG9ja2VkIGlmIHJl Z3VsYXRvcnMgYWxsb3cgaXQuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjQuMy4gV2hh dCBkaWZmZXJlbmNlIG9yIGNoYW5nZXMgd2lsbCBjb25zdW1lcnMgc2VlPzwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPjQuMy4gV2hhdCBkaWZmZXJlbmNlIG9yIGNoYW5nZXMgd2lsbCBj b25zdW1lcnMgc2VlPzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFt ZT0iZGlmZjAwMzQiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBUaGUgZ2VuZXJhbCBsb25n LXRlcm0gZ29hbCBpcyB0byByZWR1Y2UgdGhlIG51bWJlciBvZiA8c3BhbiBjbGFzcz0iZGVsZXRl Ij51bnNvbGljaXRlZDwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+VGhl IGdlbmVyYWwgbG9uZy10ZXJtIGdvYWwgaXMgdG8gcmVkdWNlIHRoZSBudW1iZXIgb2YgPHNwYW4g Y2xhc3M9Imluc2VydCI+c3Bvb2ZlZDwvc3Bhbj4gY2FsbHM8L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgY2FsbHMgdG8gY29uc3VtZXJz LCBhbmQgdGhlIHNob3J0LXRlcm0gZ29hbCBpcyB0byByZWR1Y2UgYW5kIGVhc2lseTwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj50byBjb25zdW1lcnMsIGFuZCB0aGUgc2hvcnQtdGVy bSBnb2FsIGlzIHRvIHJlZHVjZSBhbmQgZWFzaWx5IDxzcGFuIGNsYXNzPSJpbnNlcnQiPnRyYWNl LTwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxibG9jayI+ICAgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+dHJhY2UtYmFjazwvc3Bhbj4gbWFsaWNp b3VzIG9uZXMuICBJbmRpdmlkdWFsIGNvbnN1bWVycyBtaWdodCBub3QgcGVyY2VpdmU8L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+YmFjazwvc3Bh bj4gbWFsaWNpb3VzIG9uZXMuICBJbmRpdmlkdWFsIGNvbnN1bWVycyBtaWdodCBub3QgcGVyY2Vp dmUgYW55PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs YmxvY2siPiAgIGFueSBkaWZmZXJlbmNlLCBhbHRob3VnaCB0aGUgbnVtYmVyIG9mIGNvbXBsYWlu dHMgc2hvdWxkIGRlY3JlYXNlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPmRpZmZl cmVuY2UsIGFsdGhvdWdoIHRoZSBudW1iZXIgb2YgY29tcGxhaW50cyBzaG91bGQgZGVjcmVhc2U8 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAg IG92ZXJhbGwuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgb3ZlcmFsbC48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgRnJvbSBhIHBob25lLWRpc3BsYXkgcGVyc3Bl Y3RpdmUsIGhvd2V2ZXIsIHRoZXJlIGhhdmUgYmVlbjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPiAgIEZyb20gYSBwaG9uZS1kaXNwbGF5IHBlcnNwZWN0aXZlLCBob3dldmVyLCB0aGVy ZSBoYXZlIGJlZW48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPiAgIGRpc2N1c3Npb25zIG9uIHdoZXRoZXIgdG8gYWRkIHNvbWV0aGluZyB0byBk aXNwbGF5cyB0byBzaG93IGE8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBkaXNj dXNzaW9ucyBvbiB3aGV0aGVyIHRvIGFkZCBzb21ldGhpbmcgdG8gZGlzcGxheXMgdG8gc2hvdyBh PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4g ICB2YWxpZGF0ZWQgY2FsbGluZyBudW1iZXIgdnMuIGEgbGVnYWN5IGNhbGxpbmcgbnVtYmVyLiAg RHVlIHRvPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgdmFsaWRhdGVkIGNhbGxp bmcgbnVtYmVyIHZzLiBhIGxlZ2FjeSBjYWxsaW5nIG51bWJlci4gIER1ZSB0bzwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgbGltaXRhdGlv bnMgb2YgbGVnYWN5IFBPVFMgdGVjaG5vbG9neSwgdGhlIGN1cnJlbnQgQ2FsbGVyLUlEIGRpc3Bs YXk8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBsaW1pdGF0aW9ucyBvZiBsZWdh Y3kgUE9UUyB0ZWNobm9sb2d5LCB0aGUgY3VycmVudCBDYWxsZXItSUQgZGlzcGxheTwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgaXMgcXVp dGUgbGltaXRlZC4gIEEgc2luZ2xlIGNoYXJhY3Rlciwgc3VjaCBhcyB0aGUgJyonIGFzdGVyaXNr IG9yPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgaXMgcXVpdGUgbGltaXRlZC4g IEEgc2luZ2xlIGNoYXJhY3Rlciwgc3VjaCBhcyB0aGUgJyonIGFzdGVyaXNrIG9yPC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAnPycgcXVl c3Rpb24gbWFyayBtaWdodCBtYWtlIHNlbnNlIHRvIGFkZCBmb3IgcmVjZWl2ZWQgY2FsbHMgdGhh dDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICc/JyBxdWVzdGlvbiBtYXJrIG1p Z2h0IG1ha2Ugc2Vuc2UgdG8gYWRkIGZvciByZWNlaXZlZCBjYWxscyB0aGF0PC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBkb24ndCB1c2Ug U1RJUi4gIEFsdGVybmF0aXZlbHksIGNoYW5naW5nIHRoZSBudW1iZXIgb3IgbmFtZSBkaXNwbGF5 PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgZG9uJ3QgdXNlIFNUSVIuICBBbHRl cm5hdGl2ZWx5LCBjaGFuZ2luZyB0aGUgbnVtYmVyIG9yIG5hbWUgZGlzcGxheTwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgdG8gJ3Vua25v d24nIGhhcyBhbHNvIGJlZW4gZGlzY3Vzc2VkLiAgVGhpcyB0b3BpYyBpcyBzdGlsbCB1bmRlcjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHRvICd1bmtub3duJyBoYXMgYWxzbyBi ZWVuIGRpc2N1c3NlZC4gIFRoaXMgdG9waWMgaXMgc3RpbGwgdW5kZXI8L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPg0KICAgICAgPHRyIGJnY29sb3I9 ImdyYXkiPjx0ZD48L3RkPjx0aD48YSBuYW1lPSJwYXJ0LWw5Ij48c21hbGw+c2tpcHBpbmcgdG8g Y2hhbmdlIGF0PC9zbWFsbD48ZW0+IHBhZ2UgMTIsIGxpbmUgMjQ8L2VtPjwvYT48L3RoPjx0aD4g PC90aD48dGg+PGEgbmFtZT0icGFydC1yOSI+PHNtYWxsPnNraXBwaW5nIHRvIGNoYW5nZSBhdDwv c21hbGw+PGVtPiBwYWdlIDEsIGxpbmUgNTY4PC9lbT48L2E+PC90aD48dGQ+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgRm9yIGNhbGxzIGZyb20g dW5rbm93biBvciBpbnZhbGlkIG51bWJlcnMsIHNldmVyYWwgcG9zc2libGUgYWN0aW9uczwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIEZvciBjYWxscyBmcm9tIHVua25vd24gb3Ig aW52YWxpZCBudW1iZXJzLCBzZXZlcmFsIHBvc3NpYmxlIGFjdGlvbnM8L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIG1pZ2h0IG9jY3VyOiB0 aGUgbnVtYmVycyBjYW4gYmUgImFub255bWl6ZWQiIChzaG93biB0byB1c2VycyBhczwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIG1pZ2h0IG9jY3VyOiB0aGUgbnVtYmVycyBjYW4g YmUgImFub255bWl6ZWQiIChzaG93biB0byB1c2VycyBhczwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgJ3Vua25vd24nKSwgb3Igc2VudCB0 byB2b2ljZW1haWwsIG9yIHJvdXRlZCB0byBhbiBJbnRlcmFjdGl2ZSBWb2ljZTwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICd1bmtub3duJyksIG9yIHNlbnQgdG8gdm9pY2VtYWls LCBvciByb3V0ZWQgdG8gYW4gSW50ZXJhY3RpdmUgVm9pY2U8L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFJlc3BvbnNlIChJVlIpIHN5c3Rl bSB0byBwZXJmb3JtIGEgY2FwdGNoYSB0ZXN0IG9yIHRvIGV4cGxhaW4gdGhlPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgUmVzcG9uc2UgKElWUikgc3lzdGVtIHRvIHBlcmZvcm0g YSBjYXB0Y2hhIHRlc3Qgb3IgdG8gZXhwbGFpbiB0aGU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHByb2JsZW0gYW5kIHByb3ZpZGUgaGVs cCBvciByZXNvbHV0aW9uIHN1cHBvcnQuICBUaGVzZSBhcmUganVzdDwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPiAgIHByb2JsZW0gYW5kIHByb3ZpZGUgaGVscCBvciByZXNvbHV0aW9u IHN1cHBvcnQuICBUaGVzZSBhcmUganVzdDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgZXhhbXBsZXMgb2Ygd2hhdCBtaWdodCBjaGFuZ2Uu PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgZXhhbXBsZXMgb2Ygd2hhdCBtaWdo dCBjaGFuZ2UuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIEl0IHNob3VsZCBiZSBu b3RlZCB0aGF0IHRoZSBTVElSIFdvcmtpbmcgR3JvdXAgbWVjaGFuaXNtIGlzIG5vdCBhPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgSXQgc2hvdWxkIGJlIG5vdGVkIHRoYXQgdGhl IFNUSVIgV29ya2luZyBHcm91cCBtZWNoYW5pc20gaXMgbm90IGE8L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHNlbGYtY29udGFpbmVkIHNv bHV0aW9uLCBidXQgcmF0aGVyIGEgdG9vbCB0byBlbmFibGUgc29sdXRpb25zIHRvPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgc2VsZi1jb250YWluZWQgc29sdXRpb24sIGJ1dCBy YXRoZXIgYSB0b29sIHRvIGVuYWJsZSBzb2x1dGlvbnMgdG88L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAz NSI+PC9hPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgIGFjaGll dmUgdGhlIGxvbmctdGVybSBnb2Fscy4gIFNlZSBxdWVzdGlvbiAzPC9zcGFuPi40LjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij5hY2hpZXZlIHRo ZSBsb25nLXRlcm0gZ29hbHMuICBTZWUgcXVlc3Rpb24gMjwvc3Bhbj4uNC48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+NC40LiBXaWxsIHRoaXMgcHJldmVudCBsZWdpdGltYXRlIGNhbGxl ci1hZ2VudCBjYWxscz88L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij40LjQuIFdpbGwg dGhpcyBwcmV2ZW50IGxlZ2l0aW1hdGUgY2FsbGVyLWFnZW50IGNhbGxzPzwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsZWZ0Ij4gICBOby4gIEEgY2FsbGVyLWFnZW50IGlzIGEgcGVyc29uIG9yIG9y Z2FuaXphdGlvbiB0aGF0IG1ha2VzIGNhbGxzIG9uPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+ICAgTm8uICBBIGNhbGxlci1hZ2VudCBpcyBhIHBlcnNvbiBvciBvcmdhbml6YXRpb24g dGhhdCBtYWtlcyBjYWxscyBvbjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+ICAgYmVoYWxmIG9mIHNvbWVvbmUgZWxzZSwgdXNpbmcgdGhlIGNh bGxpbmcgbnVtYmVyIG9mIHRoZSBlbnRpdHk8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij4gICBiZWhhbGYgb2Ygc29tZW9uZSBlbHNlLCB1c2luZyB0aGUgY2FsbGluZyBudW1iZXIgb2Yg dGhlIGVudGl0eTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+ICAgdGhleSdyZSByZXByZXNlbnRpbmcuICBUaGlzIGlzIGEgZ2VuZXJpYyBjb25j ZXB0LCBhbmQgYXBwbGllcyB0bzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHRo ZXkncmUgcmVwcmVzZW50aW5nLiAgVGhpcyBpcyBhIGdlbmVyaWMgY29uY2VwdCwgYW5kIGFwcGxp ZXMgdG88L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPiAgIG1hbnkgZGlmZmVyZW50IHJlYWwtd29ybGQgdXNlLWNhc2VzLiAgRm9yIGV4YW1wbGUg YW4gb3V0LXNvdXJjZWQ8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBtYW55IGRp ZmZlcmVudCByZWFsLXdvcmxkIHVzZS1jYXNlcy4gIEZvciBleGFtcGxlIGFuIG91dC1zb3VyY2Vk PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4g ICBjYWxsLWNlbnRlciBtYWtpbmcgY2FsbHMgb24gYmVoYWxmIG9mIGEgYnVzaW5lc3MsIG9yIGEg c3VydmV5IGNlbnRlcjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGNhbGwtY2Vu dGVyIG1ha2luZyBjYWxscyBvbiBiZWhhbGYgb2YgYSBidXNpbmVzcywgb3IgYSBzdXJ2ZXkgY2Vu dGVyPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij4gICBtYWtpbmcgY2FsbHMgb24gYmVoYWxmIG9mIGEgcG9saXRpY2FsIHBhcnR5IG9yIHBvbGl0 aWNpYW4sIG9yIGE8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBtYWtpbmcgY2Fs bHMgb24gYmVoYWxmIG9mIGEgcG9saXRpY2FsIHBhcnR5IG9yIHBvbGl0aWNpYW4sIG9yIGE8L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHJl bW90ZSBlbXBsb3llZSBtYWtpbmcgY2FsbHMgb24gYmVoYWxmIG9mIGEgY29tcGFueSBvciBvcmdh bml6YXRpb24uPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgcmVtb3RlIGVtcGxv eWVlIG1ha2luZyBjYWxscyBvbiBiZWhhbGYgb2YgYSBjb21wYW55IG9yIG9yZ2FuaXphdGlvbi48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPg0KICAg ICAgPHRyIGJnY29sb3I9ImdyYXkiPjx0ZD48L3RkPjx0aD48YSBuYW1lPSJwYXJ0LWwxMCI+PHNt YWxsPnNraXBwaW5nIHRvIGNoYW5nZSBhdDwvc21hbGw+PGVtPiBwYWdlIDEyLCBsaW5lIDQ5PC9l bT48L2E+PC90aD48dGg+IDwvdGg+PHRoPjxhIG5hbWU9InBhcnQtcjEwIj48c21hbGw+c2tpcHBp bmcgdG8gY2hhbmdlIGF0PC9zbWFsbD48ZW0+IHBhZ2UgMSwgbGluZSA1OTM8L2VtPjwvYT48L3Ro Pjx0ZD48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgZGlyZWN0bHkgYnkgaXRzIGNhcnJpZXIgdG8gdXNl LiAgVGhlIHByb3Bvc2VkIHNvbHV0aW9ucyBwcm92aWRlIHdheXM8L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij4gICBkaXJlY3RseSBieSBpdHMgY2FycmllciB0byB1c2UuICBUaGUgcHJv cG9zZWQgc29sdXRpb25zIHByb3ZpZGUgd2F5czwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgdG8gc3VwcG9ydCB0aGF0LCBidXQgaXQgbWln aHQgcmVxdWlyZSB0aGUgY2FsbGVyLWFnZW50IGFuZCB0aGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij4gICB0byBzdXBwb3J0IHRoYXQsIGJ1dCBpdCBtaWdodCByZXF1aXJlIHRoZSBj YWxsZXItYWdlbnQgYW5kIHRoZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+ICAgZW50aXR5IGl0IHJlcHJlc2VudHMgdG8gcGVyZm9ybSBhZGRp dGlvbmFsIHN0ZXBzIHRvIGF1dGhvcml6ZSBzdWNoPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+ICAgZW50aXR5IGl0IHJlcHJlc2VudHMgdG8gcGVyZm9ybSBhZGRpdGlvbmFsIHN0ZXBz IHRvIGF1dGhvcml6ZSBzdWNoPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsZWZ0Ij4gICB1c2UuICBUaGlzIHRvcGljIGlzIHN0aWxsIHVuZGVyIGRlYmF0 ZSBpbiB0aGUgV29ya2luZyBHcm91cC48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4g ICB1c2UuICBUaGlzIHRvcGljIGlzIHN0aWxsIHVuZGVyIGRlYmF0ZSBpbiB0aGUgV29ya2luZyBH cm91cC48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+NC41LiBXaWxsIGRvY3RvcnMgc3Rp bGwgYmUgYWJsZSB0byB1c2UgdGhlaXIgb2ZmaWNlIG51bWJlcj88L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij40LjUuIFdpbGwgZG9jdG9ycyBzdGlsbCBiZSBhYmxlIHRvIHVzZSB0aGVp ciBvZmZpY2UgbnVtYmVyPzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBZZXMuICBU aGUgY29uY2VybiBhcmlzZSB3aXRoIHJlZ2FyZCB0byB0aGUgYWJpbGl0eSB0byBsZXQgZG9jdG9y czwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFllcy4gIFRoZSBjb25jZXJuIGFy aXNlIHdpdGggcmVnYXJkIHRvIHRoZSBhYmlsaXR5IHRvIGxldCBkb2N0b3JzPC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBhbmQgb3RoZXJz IHRvIG1ha2UgY2FsbHMgdXNpbmcgdGhlaXIgcGVyc29uYWwgcGhvbmUgd2l0aCBjYWxsaW5nPC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgYW5kIG90aGVycyB0byBtYWtlIGNhbGxz IHVzaW5nIHRoZWlyIHBlcnNvbmFsIHBob25lIHdpdGggY2FsbGluZzwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgbnVtYmVyIG9mIHRoZWly IG9mZmljZSBudW1iZXIuICBUaGlzIGlzIGNvdmVyZWQgaW4gdGhlIGFuc3dlciB0bzwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIG51bWJlciBvZiB0aGVpciBvZmZpY2UgbnVtYmVy LiAgVGhpcyBpcyBjb3ZlcmVkIGluIHRoZSBhbnN3ZXIgdG88L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAz NiI+PC9hPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgIHF1ZXN0 aW9uIDQ8L3NwYW4+LjQuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNs YXNzPSJpbnNlcnQiPnF1ZXN0aW9uIDM8L3NwYW4+LjQuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAzNyI+PC9hPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2si PjQuNi48c3BhbiBjbGFzcz0iZGVsZXRlIj4gV2lsbCB0aGlzIHByZXZlbnQgbGVnaXRpbWF0ZTwv c3Bhbj4gb3V0LXNvdXJjZWQgY2FsbC1jZW50ZXJzPzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmJsb2NrIj40LjYuPHNwYW4gY2xhc3M9Imluc2VydCI+CVdpbGwgdGhpcyBwcmV2ZW50PC9zcGFu PiBvdXQtc291cmNlZCBjYWxsLWNlbnRlcnM/PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAzOCI+PC9hPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFu IGNsYXNzPSJkZWxldGUiPiAgIE5vLiAgU2VlIHRoZSBhbnN3ZXIgdG8gcXVlc3Rpb24gNDwvc3Bh bj4uNC48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2Vy dCI+Tm8uICBTZWUgdGhlIGFuc3dlciB0byBxdWVzdGlvbiAzPC9zcGFuPi40LjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij40LjcuIFdobyBuZWVkcyB0byBpbXBsZW1lbnQgdGhpcyBuZXcg dGVjaG5vbG9neT88L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij40LjcuIFdobyBuZWVk cyB0byBpbXBsZW1lbnQgdGhpcyBuZXcgdGVjaG5vbG9neT88L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+ICAgSW4gZ2VuZXJhbCwgdGhlIHRhcmdldCBvcGVyYXRvcnMgb2YgdGhlIFNUSVIg aW4tYmFuZCBzb2x1dGlvbnMgYXJlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAg SW4gZ2VuZXJhbCwgdGhlIHRhcmdldCBvcGVyYXRvcnMgb2YgdGhlIFNUSVIgaW4tYmFuZCBzb2x1 dGlvbnMgYXJlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAwMzkiPjwvYT48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2Nr Ij4gICB0aGUgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+Y2FycmllcnMuPC9zcGFuPiAgQ2VydGFpbiB0 eXBlcyBvZiBidXNpbmVzc2VzLCBnb3Zlcm5tZW50IGFnZW5jaWVzLCBhbmQ8L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJibG9jayI+dGhlIDxzcGFuIGNsYXNzPSJpbnNlcnQiPmNhcnJpZXJzIGFu ZCBvdGhlciBzZXJ2aWNlIHByb3ZpZGVycyB3aG8gcGxhY2UgYW5kIHJlY2VpdmU8L3NwYW4+PC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAg IG90aGVyIG9yZ2FuaXphdGlvbnMgbWlnaHQgbmVlZCB0byBpbXBsZW1lbnQgdGhlIHRlY2hub2xv Z3kgYXMgd2VsbC48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9 Imluc2VydCI+dGVsZXBob25lIGNhbGxzLjwvc3Bhbj4gIENlcnRhaW4gdHlwZXMgb2YgYnVzaW5l c3NlcywgZ292ZXJubWVudCBhZ2VuY2llcyw8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgRm9yIGV4YW1wbGUgb3V0Ym91bmQgY2FsbC1j ZW50ZXJzIG1pZ2h0IHByZWZlciB0byBpbXBsZW1lbnQgaXQsPC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyYmxvY2siPmFuZCBvdGhlciBvcmdhbml6YXRpb25zIG1pZ2h0IG5lZWQgdG8gaW1wbGVt ZW50IHRoZSB0ZWNobm9sb2d5IGFzPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIHJhdGhlciB0aGFuIGhhdmluZyB0aGVpciBjYXJyaWVy cyBkbyBpdC48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+d2VsbC4gIEZvciBleGFt cGxlIG91dGJvdW5kIGNhbGwtY2VudGVycyBtaWdodCBwcmVmZXIgdG8gaW1wbGVtZW50PC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj5pdCwgcmF0aGVyIHRoYW4gaGF2aW5nIHRoZWly IGNhcnJpZXJzIGRvIGl0LjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij40LjguIFdoYXQg b3RoZXIgaW5kdXN0cnkgb3JnYW5pemF0aW9ucyBhcmUgaW52b2x2ZWQ/PC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+NC44LiBXaGF0IG90aGVyIGluZHVzdHJ5IG9yZ2FuaXphdGlvbnMg YXJlIGludm9sdmVkPzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBDdXJyZW50bHkg dGhlIHBhcnRpY2lwYW50cyBhbmQgbW9uaXRvcnMgb2YgdGhlIFNUSVIgV29ya2luZyBHcm91cDwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIEN1cnJlbnRseSB0aGUgcGFydGljaXBh bnRzIGFuZCBtb25pdG9ycyBvZiB0aGUgU1RJUiBXb3JraW5nIEdyb3VwPC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFtZT0i ZGlmZjAwNDAiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBpbmNsdWRlIG1lbWJlcnMgZnJv bSAzR1BQLCBBVElTLCA8c3BhbiBjbGFzcz0iZGVsZXRlIj5FVFNJLCBDYWJsZUxhYnMsPC9zcGFu PiBGQ0MsIEZUQywgQ1JUQyw8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+aW5jbHVk ZSBtZW1iZXJzIGZyb20gM0dQUCwgQVRJUywgPHNwYW4gY2xhc3M9Imluc2VydCI+Q2FibGVsYWJz LDwvc3Bhbj4gRkNDLCBGVEMsIENSVEMsIE9GQ09NLDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBPRkNPTSwgSU1UQywgYW5kIHRoZSBT SVAtRm9ydW0uICBUaGUgSUVURiBoYXMgYW4gb2ZmaWNpYWwgbGlhaXNvbjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmJsb2NrIj5JTVRDLCBhbmQgdGhlIFNJUC1Gb3J1bS4gIFRoZSBJRVRGIGhh cyBhbiBvZmZpY2lhbCBsaWFpc29uIHByb2Nlc3M8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgcHJvY2VzcyBidXQgZ2VuZXJhbGx5IHBy ZWZlcnMgdG8gaGFuZGxlIHN1Y2ggdGhpbmdzIGFzIGluZm9ybWFsbHkgYXM8L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJibG9jayI+YnV0IGdlbmVyYWxseSBwcmVmZXJzIHRvIGhhbmRsZSBzdWNo IHRoaW5ncyBhcyBpbmZvcm1hbGx5IGFzPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBwb3NzaWJsZS48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij4gICBwb3NzaWJsZS48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAg VGhlIG91dGNvbWUgb2YgdGhlIFNUSVIgV29ya2luZyBHcm91cCBpcyBleHBlY3RlZCB0byB0cmln Z2VyIGNoYW5nZXM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBUaGUgb3V0Y29t ZSBvZiB0aGUgU1RJUiBXb3JraW5nIEdyb3VwIGlzIGV4cGVjdGVkIHRvIHRyaWdnZXIgY2hhbmdl czwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ ICAgYW5kIGFkZGl0aW9uYWwgd29yayBpbiBzb21lIG9mIHRoZSBhZm9yZW1lbnRpb25lZCBvcmdh bml6YXRpb25zLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGFuZCBhZGRpdGlv bmFsIHdvcmsgaW4gc29tZSBvZiB0aGUgYWZvcmVtZW50aW9uZWQgb3JnYW5pemF0aW9ucy48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+NS4gQ2FsbGluZyBOdW1iZXIgdnMuIENhbGxpbmcg TmFtZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjUuIENhbGxpbmcgTnVtYmVyIHZz LiBDYWxsaW5nIE5hbWU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+NS4xLiBXaGF0IGlz ICJjYWxsaW5nIG51bWJlciIgdnMuICJjYWxsaW5nIG5hbWUiPzwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPjUuMS4gV2hhdCBpcyAiY2FsbGluZyBudW1iZXIiIHZzLiAiY2FsbGluZyBu YW1lIj88L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgSW4gdGhlIFNUSVIgV29ya2lu ZyBHcm91cCB0aGUgc291cmNlIGlkZW50aXR5IGJlaW5nIHZhbGlkYXRlZCBpczwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIEluIHRoZSBTVElSIFdvcmtpbmcgR3JvdXAgdGhlIHNv dXJjZSBpZGVudGl0eSBiZWluZyB2YWxpZGF0ZWQgaXM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHJlYWxseSB0aGUgY2FsbGluZyB0ZWxl cGhvbmUgbnVtYmVyLCBhbmQgb25seSB0aGUgbnVtYmVyLiAgVGhlPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+ICAgcmVhbGx5IHRoZSBjYWxsaW5nIHRlbGVwaG9uZSBudW1iZXIsIGFu ZCBvbmx5IHRoZSBudW1iZXIuICBUaGU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICJjYWxsaW5nIG5hbWUiIGlzIGEgdGV4dHVhbCBkZXNj cmlwdGlvbiBwZW9wbGUgc2VlIHdoZW4gdGhleSByZWNlaXZlPC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+ICAgImNhbGxpbmcgbmFtZSIgaXMgYSB0ZXh0dWFsIGRlc2NyaXB0aW9uIHBl b3BsZSBzZWUgd2hlbiB0aGV5IHJlY2VpdmU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGEgcGhvbmUgY2FsbCwgZGlzdGluY3QgZnJvbSB0 aGUgY2FsbGluZyBudW1iZXIuICBUaGlzIGlzIGVpdGhlciBhPC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+ICAgYSBwaG9uZSBjYWxsLCBkaXN0aW5jdCBmcm9tIHRoZSBjYWxsaW5nIG51 bWJlci4gIFRoaXMgaXMgZWl0aGVyIGE8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGh1bWFuIG9yIGNvbXBhbnkgbmFtZSwgb3IgYSBnZW9n cmFwaGljIGxvY2F0aW9uIChlLmcuLCBjaXR5IGFuZDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPiAgIGh1bWFuIG9yIGNvbXBhbnkgbmFtZSwgb3IgYSBnZW9ncmFwaGljIGxvY2F0aW9u IChlLmcuLCBjaXR5IGFuZDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+ICAgc3RhdGUpLiAgRnJlcXVlbnRseSB0aGlzIHRleHQgc3RyaW5nIGlz IGRldGVybWluZWQgYnkgdGhlIGNhcnJpZXI8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij4gICBzdGF0ZSkuICBGcmVxdWVudGx5IHRoaXMgdGV4dCBzdHJpbmcgaXMgZGV0ZXJtaW5lZCBi eSB0aGUgY2FycmllcjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+ICAgcmVjZWl2aW5nIHRoZSBjYWxsLCB0aHJvdWdoIGVpdGhlciBhIExJREIg b3IgQ05BTSBsb29rdXAgcHJvY2Vzcy48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4g ICByZWNlaXZpbmcgdGhlIGNhbGwsIHRocm91Z2ggZWl0aGVyIGEgTElEQiBvciBDTkFNIGxvb2t1 cCBwcm9jZXNzLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij41LjIuIFdoeSBpc24ndCBT VElSIHZhbGlkYXRpbmcgY2FsbGluZyBuYW1lcz88L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij41LjIuIFdoeSBpc24ndCBTVElSIHZhbGlkYXRpbmcgY2FsbGluZyBuYW1lcz88L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgVmFsaWRhdGluZyBjYWxsaW5nIG5hbWVzIGlzIGEg bXVjaCBoYXJkZXIgcHJvYmxlbSB0byBzb2x2ZSwgYXM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJpZ2h0Ij4gICBWYWxpZGF0aW5nIGNhbGxpbmcgbmFtZXMgaXMgYSBtdWNoIGhhcmRlciBwcm9i bGVtIHRvIHNvbHZlLCBhczwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDQxIj48L2E+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgZGVzY3JpYmVkIGluIHRoZSBhbnN3ZXIg dG8gcXVlc3Rpb24gNTwvc3Bhbj4uMy4gIFRoZSBzY29wZSBvZiB0aGUgU1RJUjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij5kZXNjcmliZWQgaW4g dGhlIGFuc3dlciB0byBxdWVzdGlvbiA0PC9zcGFuPi4zLiAgVGhlIHNjb3BlIG9mIHRoZSBTVElS PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4g ICBXb3JraW5nIEdyb3VwIGlzIGNvbnN0cmFpbmVkIHRvIHZhbGlkYXRpbmcgY2FsbGluZyBudW1i ZXJzLCBiZWNhdXNlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgV29ya2luZyBH cm91cCBpcyBjb25zdHJhaW5lZCB0byB2YWxpZGF0aW5nIGNhbGxpbmcgbnVtYmVycywgYmVjYXVz ZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ ICAgaXQgaXMgc29tZXRoaW5nIHdlIGtub3cgd2UgY2FuIGFjaGlldmUgaW4gYSByZWFzb25hYmxl IHRpbWVmcmFtZS48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBpdCBpcyBzb21l dGhpbmcgd2Uga25vdyB3ZSBjYW4gYWNoaWV2ZSBpbiBhIHJlYXNvbmFibGUgdGltZWZyYW1lLjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAwNDIiPjwv YT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBBIHNlcGFyYXRlIG1haWxpbmcgbGlzdCBoYXMgYmVl biBjcmVhdGVkIDxzcGFuIGNsYXNzPSJkZWxldGUiPmZvciBhIHJlc2VhcmNoLXRlYW08L3NwYW4+ IHRvPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPkEgc2VwYXJhdGUgbWFpbGluZyBs aXN0IGhhcyBiZWVuIGNyZWF0ZWQgdG8gZGlzY3VzcyB2YWxpZGF0aW5nPC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIGRpc2N1c3MgdmFs aWRhdGluZyBjYWxsaW5nIG5hbWVzOiBjbml0QGlldGYub3JnLiAgVGhlIHJlc3VsdHMgb2Y8L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+Y2FsbGluZyBuYW1lczogY25pdEBpZXRmLm9y Zy4gIFRoZSByZXN1bHRzIG9mIHRoaXMgPHNwYW4gY2xhc3M9Imluc2VydCI+ZWZmb3J0PC9zcGFu PiBtaWdodCBsZWFkPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsYmxvY2siPiAgIHRoaXMgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+cmVzZWFyY2ggdGVhbTwv c3Bhbj4gbWlnaHQgbGVhZCB0byBhbiBleHRlbnNpb24gdG8gU1RJUiwgb3IgYSBzZXBhcmF0ZTwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj50byBhbiBleHRlbnNpb24gdG8gU1RJUiwg b3IgYSBzZXBhcmF0ZSBzb2x1dGlvbiBmb3IgY2FsbGluZyBuYW1lPC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIHNvbHV0aW9uIGZvciBj YWxsaW5nIG5hbWUgdmFsaWRhdGlvbi48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ dmFsaWRhdGlvbi48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgSW4gdGhlIG1lYW50 aW1lLCBhIFNUSVItdmFsaWRhdGVkIGNhbGxpbmcgbnVtYmVyIGRvZXMgaW1wcm92ZSB0aGluZ3M8 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBJbiB0aGUgbWVhbnRpbWUsIGEgU1RJ Ui12YWxpZGF0ZWQgY2FsbGluZyBudW1iZXIgZG9lcyBpbXByb3ZlIHRoaW5nczwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgZXZlbiBmb3Ig Y2FsbGluZyBuYW1lLCBiZWNhdXNlIHRoZSBjYWxsaW5nIG51bWJlciBpcyB0eXBpY2FsbHkgdXNl ZDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGV2ZW4gZm9yIGNhbGxpbmcgbmFt ZSwgYmVjYXVzZSB0aGUgY2FsbGluZyBudW1iZXIgaXMgdHlwaWNhbGx5IHVzZWQ8L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGJ5IHRoZSB0 ZXJtaW5hdGluZyBjYXJyaWVyIHRvIGRldGVybWluZSBjYWxsaW5nIG5hbWUgZnJvbSBhPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgYnkgdGhlIHRlcm1pbmF0aW5nIGNhcnJpZXIg dG8gZGV0ZXJtaW5lIGNhbGxpbmcgbmFtZSBmcm9tIGE8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGRhdGFiYXNlLiAgVGh1cyBhIHZhbGlk YXRlZCBjYWxsaW5nIG51bWJlciBhdCBsZWFzdCBtZWFucyB0aGU8L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij4gICBkYXRhYmFzZS4gIFRodXMgYSB2YWxpZGF0ZWQgY2FsbGluZyBudW1i ZXIgYXQgbGVhc3QgbWVhbnMgdGhlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBjYWxsaW5nIG5hbWUgZGF0YWJhc2UgbG9va3VwIGlzIHF1 ZXJ5aW5nIGZvciB0aGUgcmlnaHQgZW50cnkuICBPZjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPiAgIGNhbGxpbmcgbmFtZSBkYXRhYmFzZSBsb29rdXAgaXMgcXVlcnlpbmcgZm9yIHRo ZSByaWdodCBlbnRyeS4gIE9mPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsZWZ0Ij4gICBjb3Vyc2UgaWYgdGhlIG5hbWUgaW4gdGhlIGRhdGFiYXNlIGlz IGludmFsaWQsIFNUSVIgZG9lcyBub3QgaGVscC48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij4gICBjb3Vyc2UgaWYgdGhlIG5hbWUgaW4gdGhlIGRhdGFiYXNlIGlzIGludmFsaWQsIFNU SVIgZG9lcyBub3QgaGVscC48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+NS4zLiBXaHkg aXMgaXQgaGFyZCB0byB2YWxpZGF0ZSBjYWxsaW5nIG5hbWVzPzwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPjUuMy4gV2h5IGlzIGl0IGhhcmQgdG8gdmFsaWRhdGUgY2FsbGluZyBuYW1l cz88L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+DQogICAgICA8dHIgYmdjb2xvcj0iZ3JheSI+ PHRkPjwvdGQ+PHRoPjxhIG5hbWU9InBhcnQtbDExIj48c21hbGw+c2tpcHBpbmcgdG8gY2hhbmdl IGF0PC9zbWFsbD48ZW0+IHBhZ2UgMTUsIGxpbmUgMjA8L2VtPjwvYT48L3RoPjx0aD4gPC90aD48 dGg+PGEgbmFtZT0icGFydC1yMTEiPjxzbWFsbD5za2lwcGluZyB0byBjaGFuZ2UgYXQ8L3NtYWxs PjxlbT4gcGFnZSAxLCBsaW5lIDcwODwvZW0+PC9hPjwvdGg+PHRkPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjYuMi4gSG93IGRvIGFub255bW91cyBj YWxscyB3b3JrIHdpdGggU1RJUj88L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij42LjIu IEhvdyBkbyBhbm9ueW1vdXMgY2FsbHMgd29yayB3aXRoIFNUSVI/PC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPiAgIFRoZSBzYW1lIHdheSBpdCB3b3JrcyB3aXRob3V0IFNUSVIuICBUb2Rh eSwgdGhlcmUgYXJlIHR3byBiYXNpYzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAg IFRoZSBzYW1lIHdheSBpdCB3b3JrcyB3aXRob3V0IFNUSVIuICBUb2RheSwgdGhlcmUgYXJlIHR3 byBiYXNpYzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+ICAgbW9kZWxzIGZvciBhbm9ueW1vdXMgY2FsbHMgaW4gdGhlIFBTVE46IGEgY2FsbCBp cyBnZW5lcmF0ZWQgd2l0aG91dDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIG1v ZGVscyBmb3IgYW5vbnltb3VzIGNhbGxzIGluIHRoZSBQU1ROOiBhIGNhbGwgaXMgZ2VuZXJhdGVk IHdpdGhvdXQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPiAgIGEgY2FsbGluZyBudW1iZXIsIG9yIGEgY2FsbCBpcyBnZW5lcmF0ZWQgd2l0aCBh IGNhbGxpbmcgbnVtYmVyIHRoYXQ8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBh IGNhbGxpbmcgbnVtYmVyLCBvciBhIGNhbGwgaXMgZ2VuZXJhdGVkIHdpdGggYSBjYWxsaW5nIG51 bWJlciB0aGF0PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij4gICB0aGUgY2FycmllciBkb2VzIG5vdCBzZW5kIG9yIGRpc3BsYXkgdG8gdGhlIHJl Y2VpdmluZyBlbmQuICBCb3RoIG9mPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAg dGhlIGNhcnJpZXIgZG9lcyBub3Qgc2VuZCBvciBkaXNwbGF5IHRvIHRoZSByZWNlaXZpbmcgZW5k LiAgQm90aCBvZjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+ICAgdGhlc2UgbW9kZWxzIGFyZSBhbHJlYWR5IHN1cHBvcnRlZCBieSBTUzcgYW5k IFNJUCwgYW5kIFNUSVIgZG9lcyBub3Q8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4g ICB0aGVzZSBtb2RlbHMgYXJlIGFscmVhZHkgc3VwcG9ydGVkIGJ5IFNTNyBhbmQgU0lQLCBhbmQg U1RJUiBkb2VzIG5vdDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+ICAgY2hhbmdlIHRoZW0uICBJZiBhIGNhbGwgaXMgbWFkZSB3aXRob3V0IGEg Y2FsbGluZyBudW1iZXIsIFNUSVI8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBj aGFuZ2UgdGhlbS4gIElmIGEgY2FsbCBpcyBtYWRlIHdpdGhvdXQgYSBjYWxsaW5nIG51bWJlciwg U1RJUjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+ICAgZG9lc24ndCBpZGVudGlmeSBhbnl0aGluZzsgaWYgYSBjYWxsIGlzIGdlbmVyYXRlZCB3 aXRoIGEgY2FsbGluZzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGRvZXNuJ3Qg aWRlbnRpZnkgYW55dGhpbmc7IGlmIGEgY2FsbCBpcyBnZW5lcmF0ZWQgd2l0aCBhIGNhbGxpbmc8 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZD48YSBuYW1lPSJkaWZmMDA0MyI+PC9hPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNs YXNzPSJkZWxldGUiPiAgIG51bWJlciB0aGUgY2FycmllciBuZWVkcyB0byBoaWRlPC9zcGFuPiwg U1RJUiBzdXBwb3J0cyB0aGF0IGFzIHdlbGwuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxv Y2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPm51bWJlciB0aGUgY2FycmllciBuZWVkcyB0byBzdXBw cmVzczwvc3Bhbj4sIFNUSVIgc3VwcG9ydHMgdGhhdCBhcyB3ZWxsLjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij42LjMuIEJ1dCBjYW4ndCB0aGUgY2FycmllciBzdGlsbCBkZXRlcm1pbmUg dGhlIGNhbGxlcj88L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij42LjMuIEJ1dCBjYW4n dCB0aGUgY2FycmllciBzdGlsbCBkZXRlcm1pbmUgdGhlIGNhbGxlcj88L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+ICAgWWVzLCBpbnNvZmFyIGFzIHRoZXkgYWxyZWFkeSBjYW4gdG9kYXkg Zm9yIGFub255bW91cyBjYWxscy4gIFNUSVI8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij4gICBZZXMsIGluc29mYXIgYXMgdGhleSBhbHJlYWR5IGNhbiB0b2RheSBmb3IgYW5vbnltb3Vz IGNhbGxzLiAgU1RJUjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+ICAgbWFrZXMgaXQgbm8gd29yc2Ugb3IgYmV0dGVyLjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPiAgIG1ha2VzIGl0IG5vIHdvcnNlIG9yIGJldHRlci48L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDQ0Ij48L2E+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxibG9jayI+Ni40LiA8c3BhbiBjbGFzcz0iZGVsZXRlIj5XaHkgZG8gd2UgbmVl ZDwvc3Bhbj4gdG8gPHNwYW4gY2xhc3M9ImRlbGV0ZSI+aGlkZTwvc3Bhbj4gdGhlIDxzcGFuIGNs YXNzPSJkZWxldGUiPmNhcnJpZXIncyBpZGVudGl0eT88L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyYmxvY2siPjYuNC4JPHNwYW4gY2xhc3M9Imluc2VydCI+RG9lcyB0aGlzIGF1dG9t YXRpY2FsbHkgcmV2ZWFsIHRoZSBpZGVudGl0eSBvZiBhbnkgY2FycmllciBvdGhlcjwvc3Bhbj48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPnRo YW4gdGhlIG9uZSBwcm92aWRpbmcgdGhlIGNhbGw8L3NwYW4+IHRvIHRoZSA8c3BhbiBjbGFzcz0i aW5zZXJ0Ij5kZXN0aW5hdGlvbj88L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZD48YSBuYW1lPSJkaWZmMDA0NSI+PC9hPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIElm IHNvbWVvbmUga25ldyBhbGwgdGhlIHRlbGVwaG9uZSBudW1iZXJzIGEgY2FycmllciBoYXMsIHRo ZXkgY291bGQ8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imlu c2VydCI+Tm8uPC9zcGFuPiBJZiBzb21lb25lIGtuZXcgYWxsIHRoZSB0ZWxlcGhvbmUgbnVtYmVy cyBhIGNhcnJpZXIgaGFzLCB0aGV5PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIHVzZSB0aGUgaW5mb3JtYXRpb24gZm9yIG1hbGljaW91 cyBwdXJwb3Nlcy4gIEZvciBleGFtcGxlLCBhPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxv Y2siPmNvdWxkIHVzZSB0aGUgaW5mb3JtYXRpb24gZm9yIG1hbGljaW91cyBwdXJwb3Nlcy4gIEZv ciBleGFtcGxlLCBhPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij4gICBtYWxpY2lvdXMgYXR0YWNrZXIgY291bGQgdGFyZ2V0IHRoZSBjYXJyaWVy J3MgY3VzdG9tZXJzIGlmIHRoZXkga25ldzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PiAgIG1hbGljaW91cyBhdHRhY2tlciBjb3VsZCB0YXJnZXQgdGhlIGNhcnJpZXIncyBjdXN0b21l cnMgaWYgdGhleSBrbmV3PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij4gICBvZiBhIHNwZWNpZmljIHZ1bG5lcmFiaWxpdHkgb2YgdGhlIGNhcnJp ZXIuICBBbm90aGVyIGV4YW1wbGUgaXMgYTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PiAgIG9mIGEgc3BlY2lmaWMgdnVsbmVyYWJpbGl0eSBvZiB0aGUgY2Fycmllci4gIEFub3RoZXIg ZXhhbXBsZSBpcyBhPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij4gICBjb21wZXRpdG9yIGNvdWxkIGNhbGwgYWxsIG9mIHRoZSBjYXJyaWVyJ3Mg Y3VzdG9tZXJzIHdpdGggYSBzcGVjaWFsPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ ICAgY29tcGV0aXRvciBjb3VsZCBjYWxsIGFsbCBvZiB0aGUgY2FycmllcidzIGN1c3RvbWVycyB3 aXRoIGEgc3BlY2lhbDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+ICAgZGlzY291bnQgb2ZmZXIgZm9yIHRoZSBwdXJwb3NlIG9mIGdldHRpbmcg dGhlbSB0byBzd2l0Y2ggdGhlaXI8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBk aXNjb3VudCBvZmZlciBmb3IgdGhlIHB1cnBvc2Ugb2YgZ2V0dGluZyB0aGVtIHRvIHN3aXRjaCB0 aGVpcjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+ICAgY2Fycmllci4gIEZ1cnRoZXJtb3JlLCBrbm93aW5nIGhvdyBtYW55IHRlbGVwaG9uZSBu dW1iZXJzIGEgY2FycmllcjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGNhcnJp ZXIuICBGdXJ0aGVybW9yZSwga25vd2luZyBob3cgbWFueSB0ZWxlcGhvbmUgbnVtYmVycyBhIGNh cnJpZXI8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPiAgIGhhcyBnYWluZWQgb3IgbG9zdCBhbGxvd3Mgb25lIHRvIGVzdGltYXRlIHRoZSBjYXJy aWVyJ3MgcXVhcnRlcmx5PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgaGFzIGdh aW5lZCBvciBsb3N0IGFsbG93cyBvbmUgdG8gZXN0aW1hdGUgdGhlIGNhcnJpZXIncyBxdWFydGVy bHk8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PiAgIHJldmVudWUgZ3Jvd3RoIG9yIGxvc3MgaW4gYWR2YW5jZSBvZiBwdWJsaWMgZGlzY2xvc3Vy ZSwgZW5hYmxpbmc8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICByZXZlbnVlIGdy b3d0aCBvciBsb3NzIGluIGFkdmFuY2Ugb2YgcHVibGljIGRpc2Nsb3N1cmUsIGVuYWJsaW5nPC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBp bGxlZ2FsIHN0b2NrIG1hcmtldCB0cmFkaW5nLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPiAgIGlsbGVnYWwgc3RvY2sgbWFya2V0IHRyYWRpbmcuPC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPiAgIEluIGdlbmVyYWwgbW9zdCBjYXJyaWVycyBoYXZlIGFjY2VzcyB0byBkYXRh YmFzZXMgdGhhdCBpZGVudGlmeSB0aGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4g ICBJbiBnZW5lcmFsIG1vc3QgY2FycmllcnMgaGF2ZSBhY2Nlc3MgdG8gZGF0YWJhc2VzIHRoYXQg aWRlbnRpZnkgdGhlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwv dGQ+PC90cj4NCiAgICAgIDx0ciBiZ2NvbG9yPSJncmF5Ij48dGQ+PC90ZD48dGg+PGEgbmFtZT0i cGFydC1sMTIiPjxzbWFsbD5za2lwcGluZyB0byBjaGFuZ2UgYXQ8L3NtYWxsPjxlbT4gcGFnZSAx NiwgbGluZSA1PC9lbT48L2E+PC90aD48dGg+IDwvdGg+PHRoPjxhIG5hbWU9InBhcnQtcjEyIj48 c21hbGw+c2tpcHBpbmcgdG8gY2hhbmdlIGF0PC9zbWFsbD48ZW0+IHBhZ2UgMSwgbGluZSA3NDI8 L2VtPjwvYT48L3RoPjx0ZD48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgYW5kIGNhbGxpbmcgbmFtZSBw dXJwb3Nlcy4gIEJ1dCB0aGUgY2FycmllcnMgd2l0aCBzdWNoIGFjY2VzcyBhcmU8L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBhbmQgY2FsbGluZyBuYW1lIHB1cnBvc2VzLiAgQnV0 IHRoZSBjYXJyaWVycyB3aXRoIHN1Y2ggYWNjZXNzIGFyZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgdW5kZXIgbGVnYWxseSBiaW5kaW5n IHRlcm1zIHJlZ2FyZGluZyB3aGF0IHRoZXkgY2FuIGRvIHdpdGggc3VjaDwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPiAgIHVuZGVyIGxlZ2FsbHkgYmluZGluZyB0ZXJtcyByZWdhcmRp bmcgd2hhdCB0aGV5IGNhbiBkbyB3aXRoIHN1Y2g8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGRhdGEuPC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+ICAgZGF0YS48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgRm9y IFNUSVIsIHRoaXMgaXMgYSBjb25jZXJuIGlmIGEgcHVibGljLWtleSBvciBjZXJ0aWZpY2F0ZSBs b29rdXA8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBGb3IgU1RJUiwgdGhpcyBp cyBhIGNvbmNlcm4gaWYgYSBwdWJsaWMta2V5IG9yIGNlcnRpZmljYXRlIGxvb2t1cDwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgZGF0YWJh c2UgaXMgb3Blbmx5IGFjY2Vzc2libGUgb24gdGhlIHB1YmxpYyBJbnRlcm5ldC4gIEluIHN1Y2gg YTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGRhdGFiYXNlIGlzIG9wZW5seSBh Y2Nlc3NpYmxlIG9uIHRoZSBwdWJsaWMgSW50ZXJuZXQuICBJbiBzdWNoIGE8L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGNhc2UsIGl0IG11 c3Qgbm90IHJldmVhbCB0aGUgY2Fycmllci1vZi1yZWNvcmQgZm9yIHRlbGVwaG9uZTwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGNhc2UsIGl0IG11c3Qgbm90IHJldmVhbCB0aGUg Y2Fycmllci1vZi1yZWNvcmQgZm9yIHRlbGVwaG9uZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgbnVtYmVycy4gIEl0IGlzIHRyaXZpYWwg dG8gY3JlYXRlIHNjcmlwdHMgdG8gcXVlcnkgdGhlIGVudGlyZTwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPiAgIG51bWJlcnMuICBJdCBpcyB0cml2aWFsIHRvIGNyZWF0ZSBzY3JpcHRz IHRvIHF1ZXJ5IHRoZSBlbnRpcmU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGRhdGFiYXNlIGFuZCBsZWFybiBldmVyeSBudW1iZXIgZm9y IGEgZ2l2ZW4gY2Fycmllci48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBkYXRh YmFzZSBhbmQgbGVhcm4gZXZlcnkgbnVtYmVyIGZvciBhIGdpdmVuIGNhcnJpZXIuPC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDA0NiI+PC9hPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsYmxvY2siPjYuNS48c3BhbiBjbGFzcz0iZGVsZXRlIj4gV2h5IGRvIHdlIG5lZWQg dG8gaGlkZSBzdWJzY3JpYmVyIGlkZW50aXR5IGluZm88L3NwYW4+PzwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmJsb2NrIj42LjUuPHNwYW4gY2xhc3M9Imluc2VydCI+CURvZXMgdGhpcyBhdXRv bWF0aWNhbGx5IHJldmVhbCBzdWJzY3JpYmVyIGluZm9ybWF0aW9uIHB1YmxpY2FsbHk8L3NwYW4+ PzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAwNDci PjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICBUaGU8L3Nw YW4+IGNvbmNlcm4gcmVsYXRlcyB0byBwcmV2ZW50aW5nIHJldmVyc2UtbnVtYmVyIGxvb2t1cHM6 IHRoZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0 Ij5Oby4gVGhpczwvc3Bhbj4gY29uY2VybiByZWxhdGVzIHRvIHByZXZlbnRpbmcgcmV2ZXJzZS1u dW1iZXIgbG9va3VwczogdGhlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsZWZ0Ij4gICBhYmlsaXR5IHRvIGxlYXJuIHRoZSBuYW1lIG9mIHRoZSBpbmRp dmlkdWFsLCBidXNpbmVzcywgb3I8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBh YmlsaXR5IHRvIGxlYXJuIHRoZSBuYW1lIG9mIHRoZSBpbmRpdmlkdWFsLCBidXNpbmVzcywgb3I8 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAg IG9yZ2FuaXphdGlvbiBiYXNlZCBvbiB0aGVpciBwaG9uZSBudW1iZXIuICBUaGVyZSBpcyBhbHNv IGEgY29uY2VybjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIG9yZ2FuaXphdGlv biBiYXNlZCBvbiB0aGVpciBwaG9uZSBudW1iZXIuICBUaGVyZSBpcyBhbHNvIGEgY29uY2Vybjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAg d2l0aCBiZWluZyBhYmxlIHRvIGRldGVybWluZSB0aGUgbmFtZXMgb2YgaW5kaXZpZHVhbHMgd2l0 aCB1bmxpc3RlZDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHdpdGggYmVpbmcg YWJsZSB0byBkZXRlcm1pbmUgdGhlIG5hbWVzIG9mIGluZGl2aWR1YWxzIHdpdGggdW5saXN0ZWQ8 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAg IG51bWJlcnMuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgbnVtYmVycy48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgQWx0aG91Z2ggdGhpcyB0eXBlIG9mIGluZm9y bWF0aW9uIGlzIHNvbWV0aW1lcyBhbHJlYWR5IGF2YWlsYWJsZSBvbjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPiAgIEFsdGhvdWdoIHRoaXMgdHlwZSBvZiBpbmZvcm1hdGlvbiBpcyBz b21ldGltZXMgYWxyZWFkeSBhdmFpbGFibGUgb248L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHB1YmxpYyB3ZWJzaXRlcywgc29tZSBjb3Vu dHJpZXMgaGF2ZSB2ZXJ5IHN0cmljdCBwcml2YWN5IGxhd3MgdGhhdDwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPiAgIHB1YmxpYyB3ZWJzaXRlcywgc29tZSBjb3VudHJpZXMgaGF2ZSB2 ZXJ5IHN0cmljdCBwcml2YWN5IGxhd3MgdGhhdDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgZm9yYmlkIHN1Y2ggaW5mb3JtYXRpb24gZnJv bSBiZWluZyBwdWJsaWNseSBhdmFpbGFibGU7IGFuZCBpbjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmlnaHQiPiAgIGZvcmJpZCBzdWNoIGluZm9ybWF0aW9uIGZyb20gYmVpbmcgcHVibGljbHkg YXZhaWxhYmxlOyBhbmQgaW48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxlZnQiPiAgIGdlbmVyYWwgdGhlcmUgYXJlIG1hbnkgY2FzZXMgd2hlcmUgaXQg aXMgaW5hcHByb3ByaWF0ZSBhbmQgZGFuZ2Vyb3VzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+ICAgZ2VuZXJhbCB0aGVyZSBhcmUgbWFueSBjYXNlcyB3aGVyZSBpdCBpcyBpbmFwcHJv cHJpYXRlIGFuZCBkYW5nZXJvdXM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHRvIHJldmVhbCB0aGUgcGFydGljdWxhciB1c2VyLCBidXNp bmVzcywgb3Igb3JnYW5pemF0aW9uIG9mIGEgZ2l2ZW48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJpZ2h0Ij4gICB0byByZXZlYWwgdGhlIHBhcnRpY3VsYXIgdXNlciwgYnVzaW5lc3MsIG9yIG9y Z2FuaXphdGlvbiBvZiBhIGdpdmVuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iPjwvdGQ+PC90cj4NCiAgICAgIDx0ciBiZ2NvbG9yPSJncmF5Ij48dGQ+PC90ZD48dGg+ PGEgbmFtZT0icGFydC1sMTMiPjxzbWFsbD5za2lwcGluZyB0byBjaGFuZ2UgYXQ8L3NtYWxsPjxl bT4gcGFnZSAxNiwgbGluZSAzNjwvZW0+PC9hPjwvdGg+PHRoPiA8L3RoPjx0aD48YSBuYW1lPSJw YXJ0LXIxMyI+PHNtYWxsPnNraXBwaW5nIHRvIGNoYW5nZSBhdDwvc21hbGw+PGVtPiBwYWdlIDEs IGxpbmUgNzczPC9lbT48L2E+PC90aD48dGQ+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHByaXZhY3kg Y29uY2VybiB3aXRoIGV4cG9zaW5nIGdlbmVyYWwgY29uc3VtZXIgcGhvbmUtc2VydmljZSBkZXZp Y2VzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgcHJpdmFjeSBjb25jZXJuIHdp dGggZXhwb3NpbmcgZ2VuZXJhbCBjb25zdW1lciBwaG9uZS1zZXJ2aWNlIGRldmljZXM8L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHRvIHRo ZSBwdWJsaWMgSW50ZXJuZXQuICBNb3N0IHBlb3BsZSBwYXkgY2FycmllcnMgZm9yIHBob25lIHNl cnZpY2UsPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgdG8gdGhlIHB1YmxpYyBJ bnRlcm5ldC4gIE1vc3QgcGVvcGxlIHBheSBjYXJyaWVycyBmb3IgcGhvbmUgc2VydmljZSw8L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGFu ZCBkbyBub3QgZXhwZWN0IHRvIGJlIGV4cG9zaW5nIHRoZWlyIGhvbWUgY29tcHV0ZXIgdG8gYXR0 YWNrOyBub3I8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBhbmQgZG8gbm90IGV4 cGVjdCB0byBiZSBleHBvc2luZyB0aGVpciBob21lIGNvbXB1dGVyIHRvIGF0dGFjazsgbm9yPC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBk byB0aGV5IGV4cGVjdCB0byBiZSBwcm92aWRpbmcgdGhlaXIgcGh5c2ljYWwgbG9jYXRpb24sIHdo aWNoIGNhbiBiZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGRvIHRoZXkgZXhw ZWN0IHRvIGJlIHByb3ZpZGluZyB0aGVpciBwaHlzaWNhbCBsb2NhdGlvbiwgd2hpY2ggY2FuIGJl PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4g ICBkZXRlcm1pbmVkIGZyb20gSVAgYWRkcmVzc2VzLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPiAgIGRldGVybWluZWQgZnJvbSBJUCBhZGRyZXNzZXMuPC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPjcuIFNvbHV0aW9uczwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PjcuIFNvbHV0aW9uczwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBTdGFydGluZyBp biB0aGlzIHNlY3Rpb24gYW5kIGJleW9uZCwgdGhlIHRlcm0gInNvdXJjZSBpZGVudGl0eSI8L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBTdGFydGluZyBpbiB0aGlzIHNlY3Rpb24g YW5kIGJleW9uZCwgdGhlIHRlcm0gInNvdXJjZSBpZGVudGl0eSI8L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHJlZmVycyB0byB0aGUgY2Fs bGluZyBwaG9uZSBudW1iZXIgYXMgdGhlICJpZGVudGl0eSIuICBUaGUgY2FsbGluZzwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHJlZmVycyB0byB0aGUgY2FsbGluZyBwaG9uZSBu dW1iZXIgYXMgdGhlICJpZGVudGl0eSIuICBUaGUgY2FsbGluZzwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYw MDQ4Ij48L2E+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgbmFt ZSBpcyBub3QgaW5jbHVkZWQsIGFuZCBpcyBub3QgaW4tc2NvcGUgZm9yIFNUSVIgKHNlZSBzZWN0 aW9uIDU8L3NwYW4+KS48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xh c3M9Imluc2VydCI+bmFtZSBpcyBub3QgaW5jbHVkZWQsIGFuZCBpcyBub3QgaW4tc2NvcGUgZm9y IFNUSVIgKHNlZSBzZWN0aW9uIDQ8L3NwYW4+KS48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFRoZSAic291cmNlIGlkZW50aXR5IHZlcmlm aWNhdGlvbiBpbmZvcm1hdGlvbiIgaXMgdGhlIGluZm9ybWF0aW9uPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+ICAgVGhlICJzb3VyY2UgaWRlbnRpdHkgdmVyaWZpY2F0aW9uIGluZm9y bWF0aW9uIiBpcyB0aGUgaW5mb3JtYXRpb248L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHVzZWQgdG8gZGV0ZXJtaW5lIHRoZSB2YWxpZGl0 eSBvZiB0aGUgY2FsbGluZyBudW1iZXIgZm9yIHRoZSBjYWxsPC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+ICAgdXNlZCB0byBkZXRlcm1pbmUgdGhlIHZhbGlkaXR5IG9mIHRoZSBjYWxs aW5nIG51bWJlciBmb3IgdGhlIGNhbGw8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHJlcXVlc3Q7IGZvciBleGFtcGxlIHRoZSBjYWxsaW5n IG51bWJlciwgY2FsbGVkIG51bWJlciwgdGltZXN0YW1wLDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmlnaHQiPiAgIHJlcXVlc3Q7IGZvciBleGFtcGxlIHRoZSBjYWxsaW5nIG51bWJlciwgY2Fs bGVkIG51bWJlciwgdGltZXN0YW1wLDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgYW5kIGNyZWRlbnRpYWxzLjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPiAgIGFuZCBjcmVkZW50aWFscy48L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+Ny4xLiBXaGF0IGFyZSB0aGUgcHJvcG9zZWQgc29sdXRpb25zIHNvIGZhciwgYXQg YSBoaWdoLWxldmVsPzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjcuMS4gV2hhdCBh cmUgdGhlIHByb3Bvc2VkIHNvbHV0aW9ucyBzbyBmYXIsIGF0IGEgaGlnaC1sZXZlbD88L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgVGhlcmUgaXMgbW9yZSB0aGFuIG9uZSBwcm9wb3Nl ZCBzb2x1dGlvbi4gIFRoZXJlIGFyZSB0d28gdmVyeTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPiAgIFRoZXJlIGlzIG1vcmUgdGhhbiBvbmUgcHJvcG9zZWQgc29sdXRpb24uICBUaGVy ZSBhcmUgdHdvIHZlcnk8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPiAgIGRpZmZlcmVudCBwcm9wb3NlZCBzb2x1dGlvbiBhcmNoaXRlY3R1cmVz OiBhbiAiaW4tYmFuZCIgYXBwcm9hY2ggYW5kPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+ICAgZGlmZmVyZW50IHByb3Bvc2VkIHNvbHV0aW9uIGFyY2hpdGVjdHVyZXM6IGFuICJpbi1i YW5kIiBhcHByb2FjaCBhbmQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxlZnQiPiAgIGFuICJvdXQtb2YtYmFuZCIgYXBwcm9hY2guICBUaGUgaW4tYmFu ZCBvbmUgc2VuZHMgdmVyaWZpY2F0aW9uPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ ICAgYW4gIm91dC1vZi1iYW5kIiBhcHByb2FjaC4gIFRoZSBpbi1iYW5kIG9uZSBzZW5kcyB2ZXJp ZmljYXRpb248L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPiAgIGluZm9ybWF0aW9uIGluIHRoZSBjYWxsIHNpZ25hbGluZywgd2hpbGUgdGhlIG91 dC1vZi1iYW5kIG9uZSBzZW5kczwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGlu Zm9ybWF0aW9uIGluIHRoZSBjYWxsIHNpZ25hbGluZywgd2hpbGUgdGhlIG91dC1vZi1iYW5kIG9u ZSBzZW5kczwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+ICAgaXQgc29tZSBvdGhlciB3YXkgb3ZlciB0aGUgSW50ZXJuZXQuICBKdXN0IGZvciB0 aGUgaW4tYmFuZCB0aGVyZSBhcmU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBp dCBzb21lIG90aGVyIHdheSBvdmVyIHRoZSBJbnRlcm5ldC4gIEp1c3QgZm9yIHRoZSBpbi1iYW5k IHRoZXJlIGFyZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+ICAgYXQgbGVhc3QgdHdvIGRpZmZlcmVudCBwcm9wb3NlZCBtZWNoYW5pc21zIGFz IHdlbGwsIFtkcmFmdC1pa2VzXSBhbmQ8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4g ICBhdCBsZWFzdCB0d28gZGlmZmVyZW50IHByb3Bvc2VkIG1lY2hhbmlzbXMgYXMgd2VsbCwgW2Ry YWZ0LWlrZXNdIGFuZDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+ICAgW2RyYWZ0LTQ0NzRiaXNdLCBidXQgYXQgYSB2ZXJ5IGhpZ2ggbGV2ZWwg dGhleSBhcmUgc2ltaWxhci48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBbZHJh ZnQtNDQ3NGJpc10sIGJ1dCBhdCBhIHZlcnkgaGlnaCBsZXZlbCB0aGV5IGFyZSBzaW1pbGFyLjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAwNDkiPjwv YT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBBdCBhIGhpZ2ggbGV2ZWwgYm90aCB0aGUgaW4tYmFu ZCBhbmQgb3V0LW9mLWJhbmQgYXBwcm9hY2hlcyA8c3BhbiBjbGFzcz0iZGVsZXRlIj5oYXZlPC9z cGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj5BdCBhIGhpZ2ggbGV2ZWwgYm90 aCB0aGUgaW4tYmFuZCBhbmQgb3V0LW9mLWJhbmQgYXBwcm9hY2hlcyA8c3BhbiBjbGFzcz0iaW5z ZXJ0Ij5yZWx5IG9uPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICBzb21lIGNvbW1vbiBw cm9wZXJ0aWVzOjwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4g Y2xhc3M9Imluc2VydCI+Y3JlZGVudGlhbHMsIHVzaW5nIHB1YmxpYyBrZXkgY3J5cHRvLiBUaGVy ZTwvc3Bhbj4gaXMgYSA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5wdWJsaWM8L3NwYW4+IGFuZCA8c3Bh biBjbGFzcz0iaW5zZXJ0Ij5wcml2YXRlPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICAg IG8gIHRoZXJlPC9zcGFuPiBpcyA8c3BhbiBjbGFzcz0iZGVsZXRlIj5zb21lIGNvbW1vbiBhdXRo b3JpdHkgb3IgYXV0aG9yaXRpZXMgZm9yPC9zcGFuPiBhIDxzcGFuIGNsYXNzPSJkZWxldGUiPmdp dmVuPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0i aW5zZXJ0Ij5rZXkgcGFpciB1c2VkPC9zcGFuPiB0byA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5kaWdp dGFsbHkgc2lnbiBpbmZvcm1hdGlvbi4gIENyZWRlbnRpYWwgY3JlYXRpb24gaXM8L3NwYW4+PC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxz cGFuIGNsYXNzPSJkZWxldGUiPiAgICAgICAgRS4xNjQgY291bnRyeS1jb2RlLCB3aGljaCBldmVy eW9uZSB1c2VzPC9zcGFuPiBhbmQgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+dHJ1c3RzPC9zcGFuPjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij5rbm93 biB0byBiZSBhIGhhcmQgcHJvYmxlbSBvbiB0aGUgSW50ZXJuZXQuICBUaGUgYXBwcm9hY2ggdXNl ZCBieTwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgICBvICB0aGUgYXV0aG9yaXR5IGF1 dGhvcml6ZXMgb3JpZ2luYXRvcnMgb2YgY2FsbHM8L3NwYW4+IHRvIDxzcGFuIGNsYXNzPSJkZWxl dGUiPmNsYWltPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBj bGFzcz0iaW5zZXJ0Ij5TVElSIGlzIHRvIGJhc2U8L3NwYW4+IGNyZWRlbnRpYWxzIDxzcGFuIGNs YXNzPSJpbnNlcnQiPm9uPC9zcGFuPiBudW1iZXIgPHNwYW4gY2xhc3M9Imluc2VydCI+ZGVsZWdh dGlvbi4gIEluIGV2ZXJ5IGNvdW50cnksPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICAg ICAgIHRlbGVwaG9uZSBudW1iZXJzIGluIHRoZSBjb3VudHJ5LWNvZGUsIHVzaW5nPC9zcGFuPiBj cmVkZW50aWFscyA8c3BhbiBjbGFzcz0iZGVsZXRlIj5mb3I8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPnRoZXJlIGlzIGEgZm9ybWFs IG51bWJlciBkZWxlZ2F0aW9uIHByb2Nlc3MsIHdpdGggYSBzaW5nbGUgInJvb3QiPC9zcGFuPjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48 c3BhbiBjbGFzcz0iZGVsZXRlIj4gICAgICAgIGVhY2ggRS4xNjQ8L3NwYW4+IG51bWJlcjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij5udW1iZXIg YXV0aG9yaXR5LiAgU29tZSBjb3VudHJpZXMgcGVybWl0IGluZm9ybWFsIG51bWJlciByZXNlbGxp bmc8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsYmxvY2siPiAgICAgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+bzwvc3Bhbj4gIHRoZSA8c3BhbiBj bGFzcz0iZGVsZXRlIj5jYWxsIG9yaWdpbmF0b3JzPC9zcGFuPiBtYWtlIDxzcGFuIGNsYXNzPSJk ZWxldGUiPmNhbGxzIHVzaW5nIHRoZSBjcmVkZW50aWFscyB0aGV5J3ZlPC9zcGFuPjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij5vZiB0aGVzZSBk ZWxlZ2F0aW9ucywgYnV0IHRoZXNlIHJlc2VsbCBvcGVyYXRpb25zIGFjdCBsaWtlPC9zcGFuPjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48 c3BhbiBjbGFzcz0iZGVsZXRlIj4gICAgICAgIGJlZW4gZ2l2ZW4gZm9yIHRoZSBFLjE2NCBudW1i ZXIocyk8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNz PSJpbnNlcnQiPmRlbGVnYXRpb24gb2YgYSBzdWJyYW5nZSBvZjwvc3Bhbj4gdGhlIDxzcGFuIGNs YXNzPSJpbnNlcnQiPmZvcm1hbCBkZWxlZ2F0aW9uLiAgU2VydmljZTwvc3Bhbj48L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xh c3M9ImRlbGV0ZSI+ICAgICBvICB0aGUgcmVjZWl2ZXJzPC9zcGFuPiBvZiA8c3BhbiBjbGFzcz0i ZGVsZXRlIj5jYWxscyB2ZXJpZnk8L3NwYW4+IHRoZSBjcmVkZW50aWFscyA8c3BhbiBjbGFzcz0i ZGVsZXRlIj53aXRoPC9zcGFuPiB0aGUgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+Y29tbW9uPC9zcGFu PjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij5w cm92aWRlcnMgZGVsZWdhdGUgbnVtYmVycywgb3IgcmFuZ2VzIG9mIG51bWJlcnMsIHRvIHN1YnNj cmliZXJzLjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgICAgICBhdXRob3JpdHksPC9z cGFuPiBhbmQgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+dGh1cyBkZXRlcm1pbmVzIHRoYXQgdGhlIG9y aWdpbmF0b3IgY291bGQgY2xhaW08L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxv Y2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPlRoZSBTVElSIGlkZWEgaXMgdG88L3NwYW4+IG1ha2Ug PHNwYW4gY2xhc3M9Imluc2VydCI+Y3JlZGVudGlhbCBhc3NpZ25tZW50IG1pcnJvciBudW1iZXI8 L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs YmxvY2siPiAgICAgICAgdGhlIDxzcGFuIGNsYXNzPSJkZWxldGUiPkUuMTY0IG51bWJlcjwvc3Bh bj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ ZGVsZWdhdGlvbi4gIEJ5IGVuaGFuY2luZyBhbiBleGlzdGluZywgd29ya2luZyBwcm9jZXNzPC9z cGFuPiBvZiA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5hc3NpZ25pbmc8L3NwYW4+PC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij5udW1iZXJzLCBjcmVk ZW50aWFsIGNyZWF0aW9uIGJlY29tZXMgcHJhY3RpY2FsLiAgV2hlbmV2ZXIgYTwvc3Bhbj48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPmRlbGVn YXRpb24gKG9yIHJlc2FsZSkgaXMgZG9uZSwgY3JlZGVudGlhbHMgYXJlIGlzc3VlZCBtYXRjaGlu Zzwvc3Bhbj4gdGhlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFz cz0iaW5zZXJ0Ij5kZWxlZ2F0aW9uLCBhbmQgdGhvc2U8L3NwYW4+IGNyZWRlbnRpYWxzIDxzcGFu IGNsYXNzPSJpbnNlcnQiPmNhbiBiZSB1c2VkIHRvIHNpZ24gd2l0aCwgb3IgdG88L3NwYW4+PC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij5hdXRo b3JpemUgc3ViZGVsZWdhdGlvbi4gIFRoZSBjcmVkZW50aWFsIHVzZWQgdG8gc2lnbiBjYW4gYmU8 L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs YmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5z ZXJ0Ij5yZXRyaWV2ZWQgYW5kIHVzZWQgdG8gdmFsaWRhdGU8L3NwYW4+IHRoZSA8c3BhbiBjbGFz cz0iaW5zZXJ0Ij5pZGVudGl0eS4gIEJvdGggdGhlIGluLWJhbmQ8L3NwYW4+IGFuZDwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+b3V0LW9mLWJh bmQgYXBwcm9hY2hlcyB1c2U8L3NwYW4+IHRoZSA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5zYW1lIGNy ZWRlbnRpYWxzLjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkPjxh IG5hbWU9ImRpZmYwMDUwIj48L2E+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgVGhlIGRpZmZlcmVu dCA8c3BhbiBjbGFzcz0iZGVsZXRlIj5zb2x1dGlvbnM8L3NwYW4+IGhhdmUgZGlmZmVyZW50IHR5 cGVzIG9mICJjcmVkZW50aWFscyIgYW5kPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2si PlRoZSBkaWZmZXJlbnQgPHNwYW4gY2xhc3M9Imluc2VydCI+c3BlY2lmaWMgc29sdXRpb24gcHJv cG9zYWxzPC9zcGFuPiBoYXZlIGRpZmZlcmVudCB0eXBlcyBvZjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBob3cgdGhleSdyZSBzdG9y ZWQsIHJldHJpZXZlZCwgZXRjLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4iY3Jl ZGVudGlhbHMiIGFuZCA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5kaWZmZXIgaW48L3NwYW4+IGhvdyB0 aGV5J3JlIHN0b3JlZCwgcmV0cmlldmVkLCBldGMuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDA1MSI+PC9hPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAg IDxzcGFuIGNsYXNzPSJkZWxldGUiPlRoZSBkaWZmZXJlbnQgc29sdXRpb25zIGhhdmUgZGlmZmVy ZW50IGV4cGVjdGF0aW9ucyBmb3Igd2hvIHRoZTwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+Qm90aCBpbiBiYW5kPC9zcGFuPiBhbmQg PHNwYW4gY2xhc3M9Imluc2VydCI+b3V0LW9mLWJhbmQgYXBwcm9hY2hlcyBhc3N1bWUgdGhhdDwv c3Bhbj4gdGhlIDxzcGFuIGNsYXNzPSJpbnNlcnQiPm9yaWdpbmF0aW5nPC9zcGFuPjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBj bGFzcz0iZGVsZXRlIj4gICBjZW50cmFsICJhdXRob3JpdHkiIGlzLCB3aG8gdGhlICJvcmlnaW5h dG9ycyIgYXJlLDwvc3Bhbj4gYW5kIDxzcGFuIGNsYXNzPSJkZWxldGUiPndobzwvc3Bhbj4gdGhl PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPmRl dmljZSBvciBzZXJ2aWNlIHByb3ZpZGVyIHdpbGwgc2lnbiBpbmZvcm1hdGlvbiB1c2VkIGluIHRo ZTwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxibG9jayI+ICAgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+InJlY2VpdmVycyIgYXJlLiAgSW48L3Nw YW4+IHRoZSA8c3BhbiBjbGFzcz0iZGVsZXRlIj50d28gaW4tYmFuZCBzb2x1dGlvbnMsPC9zcGFu PiB0aGUgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+YXV0aG9yaXR5IGlzPC9zcGFuPjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij52YWxpZGF0aW9uIHBy b2Nlc3MuICBCb3RoIGFzc3VtZSB0aGF0PC9zcGFuPiB0aGUgPHNwYW4gY2xhc3M9Imluc2VydCI+ dGVybWluYXRpb24gZGV2aWNlIG9yPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICBnZW5l cmFsbHkgYXNzdW1lZDwvc3Bhbj4gdG8gPHNwYW4gY2xhc3M9ImRlbGV0ZSI+YmU8L3NwYW4+IHRo ZSA8c3BhbiBjbGFzcz0iZGVsZXRlIj5uYXRpb25hbCBudW1iZXJpbmcgYWRtaW5pc3RyYXRvciBm b3IgYTwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9 Imluc2VydCI+c2VydmljZSBwcm92aWRlciBjYW4gcmV0cmlldmU8L3NwYW4+IHRoZSA8c3BhbiBj bGFzcz0iaW5zZXJ0Ij5jcmVkZW50aWFsIHVzZWQ8L3NwYW4+IHRvIDxzcGFuIGNsYXNzPSJpbnNl cnQiPnNpZ24gYW5kIHZlcmlmeTwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgZ2l2ZW4g Y291bnRyeS1jb2RlLCBvciBhbiBhZ2VudCBvZiB0aGVpcnM7PC9zcGFuPiB0aGUgPHNwYW4gY2xh c3M9ImRlbGV0ZSI+b3JpZ2luYXRvcnMgYW5kPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmJsb2NrIj50aGUgPHNwYW4gY2xhc3M9Imluc2VydCI+aWRlbnRpdHkuICAgVGhlIGluLWJh bmQgYXBwcm9hY2ggYWxsb3dzIGFueSBlbnRpdHkgaW48L3NwYW4+IHRoZSA8c3BhbiBjbGFzcz0i aW5zZXJ0Ij5TSVA8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgIHJlY2VpdmVycyBhcmUg ZXhwZWN0ZWQ8L3NwYW4+IHRvIDxzcGFuIGNsYXNzPSJkZWxldGUiPmJlIHNlcnZpY2UgcHJvdmlk ZXJzLCBhbmQgcG9zc2libHkgYWxzbzwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJi bG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+cGF0aCBvZiBhIGNhbGw8L3NwYW4+IHRvIDxzcGFu IGNsYXNzPSJpbnNlcnQiPnZlcmlmeSBpZGVudGl0eSwgd2hpbGU8L3NwYW4+IHRoZSBvdXQtb2Yt YmFuZCA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5hcHByb2FjaDwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRl bGV0ZSI+ICAgbGFyZ2UgZW50ZXJwcmlzZSBQQlhzLiAgSW48L3NwYW4+IHRoZSBvdXQtb2YtYmFu ZCA8c3BhbiBjbGFzcz0iZGVsZXRlIj5zb2x1dGlvbiwgdGhlIGF1dGhvcml0eTwvc3Bhbj48L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+b25seSBh bGxvd3M8L3NwYW4+IHRoZSA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij50ZXJtaW5hdGluZyBkZXZpY2Ug b3Igc2VydmljZTwvc3Bhbj4gdG8gPHNwYW4gY2xhc3M9Imluc2VydCI+dmFsaWRhdGUuPC9zcGFu PjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2Nr Ij48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICBpcyBub3QgeWV0IGNsZWFybHkgYXJ0aWN1bGF0ZWQ7 PC9zcGFuPiB0aGUgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+b3JpZ2luYXRvcnMgYW5kIHJlY2VpdmVy cyBhcmU8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFz cz0iZGVsZXRlIj4gICBleHBlY3RlZDwvc3Bhbj4gdG8gPHNwYW4gY2xhc3M9ImRlbGV0ZSI+YmUg ZW5kLXVzZXIgZGV2aWNlcyBzdWNoIGFzIHNtYXJ0cGhvbmVzLCBhbmQgcG9zc2libHk8L3NwYW4+ PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4g ICBhbHNvIGxhcmdlIGVudGVycHJpc2UgUEJYcy48L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBUbyBiZSBjbGVh ciwgYm90aCBhcmNoaXRlY3R1cmFsIGFwcHJvYWNoZXMgYWxsb3cgZW5kLXVzZXIgZGV2aWNlcyB0 bzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFRvIGJlIGNsZWFyLCBib3RoIGFy Y2hpdGVjdHVyYWwgYXBwcm9hY2hlcyBhbGxvdyBlbmQtdXNlciBkZXZpY2VzIHRvPC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBwYXJ0aWNp cGF0ZSBpbiB0aGUgcHJvY2VzczsgdGhlIGRpZmZlcmVuY2UgaXMgbW9yZSBhcm91bmQgdGhlPC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgcGFydGljaXBhdGUgaW4gdGhlIHByb2Nl c3M7IHRoZSBkaWZmZXJlbmNlIGlzIG1vcmUgYXJvdW5kIHRoZTwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgYXNzdW1wdGlvbnMgYW5kIHBy YWdtYXRpYyBjb25zaWRlcmF0aW9ucyBiYXNlZCBvbiB3aG8gdGhlIGV4cGVjdGVkPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgYXNzdW1wdGlvbnMgYW5kIHByYWdtYXRpYyBjb25z aWRlcmF0aW9ucyBiYXNlZCBvbiB3aG8gdGhlIGV4cGVjdGVkPC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBpbXBsZW1lbnRlcnMgYW5kIG9w ZXJhdG9ycyBvZiB0aGUgdGVjaG5vbG9naWVzIHdpbGwgYmUgaW4gZ2VuZXJhbC48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBpbXBsZW1lbnRlcnMgYW5kIG9wZXJhdG9ycyBvZiB0 aGUgdGVjaG5vbG9naWVzIHdpbGwgYmUgaW4gZ2VuZXJhbC48L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+Ny4yLiBXaGF0IGRvZXMgImluLWJhbmQiIHZzLiAib3V0LW9mLWJhbmQiIG1lYW4/ PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+Ny4yLiBXaGF0IGRvZXMgImluLWJhbmQi IHZzLiAib3V0LW9mLWJhbmQiIG1lYW4/PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAg IENhbGxzIGFyZSBnZW5lcmF0ZWQgdXNpbmcgc2lnbmFsaW5nIHByb3RvY29scywgc3VjaCBhcyBT SVAsIFNTNyBhbmQ8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBDYWxscyBhcmUg Z2VuZXJhdGVkIHVzaW5nIHNpZ25hbGluZyBwcm90b2NvbHMsIHN1Y2ggYXMgU0lQLCBTUzcgYW5k PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4g ICBJU0ROLiAgQW4gImluLWJhbmQiIHNvbHV0aW9uIGNhcnJpZXMgdGhlIHNvdXJjZSBpZGVudGl0 eSB2YWxpZGF0aW9uPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgSVNETi4gIEFu ICJpbi1iYW5kIiBzb2x1dGlvbiBjYXJyaWVzIHRoZSBzb3VyY2UgaWRlbnRpdHkgdmFsaWRhdGlv bjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+DQog ICAgICA8dHIgYmdjb2xvcj0iZ3JheSI+PHRkPjwvdGQ+PHRoPjxhIG5hbWU9InBhcnQtbDE0Ij48 c21hbGw+c2tpcHBpbmcgdG8gY2hhbmdlIGF0PC9zbWFsbD48ZW0+IHBhZ2UgMTgsIGxpbmUgMTc8 L2VtPjwvYT48L3RoPjx0aD4gPC90aD48dGg+PGEgbmFtZT0icGFydC1yMTQiPjxzbWFsbD5za2lw cGluZyB0byBjaGFuZ2UgYXQ8L3NtYWxsPjxlbT4gcGFnZSAxLCBsaW5lIDg1MjwvZW0+PC9hPjwv dGg+PHRkPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBUaGUgU0lQICdQLUFzc2VydGVkLUlkZW50aXR5 JyAoUEFJKSBoZWFkZXIgZGVmaW5lZCBpbiBbUkZDMzMyNV0gaXM8L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij4gICBUaGUgU0lQICdQLUFzc2VydGVkLUlkZW50aXR5JyAoUEFJKSBoZWFk ZXIgZGVmaW5lZCBpbiBbUkZDMzMyNV0gaXM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHdpZGVseSBkZXBsb3llZCwgYW5kIGlkZW50aWZp ZXMgdGhlIHNvdXJjZSBjYWxsZXIgaWRlbnRpdHkgdGhhdCB0aGU8L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij4gICB3aWRlbHkgZGVwbG95ZWQsIGFuZCBpZGVudGlmaWVzIHRoZSBzb3Vy Y2UgY2FsbGVyIGlkZW50aXR5IHRoYXQgdGhlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBvcmlnaW5hdGluZyBjYXJyaWVyIGFzc2VydHMg aXQgdG8gYmUuICBJbiBvdGhlciB3b3JkcywgdXNlciBkZXZpY2VzPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+ICAgb3JpZ2luYXRpbmcgY2FycmllciBhc3NlcnRzIGl0IHRvIGJlLiAg SW4gb3RoZXIgd29yZHMsIHVzZXIgZGV2aWNlczwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgZG9uJ3QgZ2VuZXJhdGUgdGhpcyBoZWFkZXI7 IGNhcnJpZXJzIGdlbmVyYXRlIHRoaXMgaGVhZGVyLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPiAgIGRvbid0IGdlbmVyYXRlIHRoaXMgaGVhZGVyOyBjYXJyaWVycyBnZW5lcmF0ZSB0 aGlzIGhlYWRlci48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPiAgIFRoZXJlZm9yZSBpdCBpcyB0ZW1wdGluZyB0byBzaW1wbHkgdHJ1c3QgdGhp cyBoZWFkZXIgdG8gYmUgYWNjdXJhdGUuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ ICAgVGhlcmVmb3JlIGl0IGlzIHRlbXB0aW5nIHRvIHNpbXBseSB0cnVzdCB0aGlzIGhlYWRlciB0 byBiZSBhY2N1cmF0ZS48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPiAgIFVuZm9ydHVuYXRlbHkgd2Uga25vdyB0aGF0IHdvbid0IHdvcmssIGJl Y2F1c2Ugd2UgYWxyZWFkeSBrbm93IHRoYXQ8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij4gICBVbmZvcnR1bmF0ZWx5IHdlIGtub3cgdGhhdCB3b24ndCB3b3JrLCBiZWNhdXNlIHdlIGFs cmVhZHkga25vdyB0aGF0PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij4gICBzb21lIG9yaWdpbmF0aW5nIGNhcnJpZXJzIGFsbG93IG1hbGljaW91 cyBvcmlnaW5hdG9ycyAocm9ib2NhbGxlcnMpPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+ICAgc29tZSBvcmlnaW5hdGluZyBjYXJyaWVycyBhbGxvdyBtYWxpY2lvdXMgb3JpZ2luYXRv cnMgKHJvYm9jYWxsZXJzKTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+ICAgdG8gZ2VuZXJhdGUgd2hhdGV2ZXIgU0lQIGhlYWRlcnMgdGhleSB3 aXNoIHRvLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHRvIGdlbmVyYXRlIHdo YXRldmVyIFNJUCBoZWFkZXJzIHRoZXkgd2lzaCB0by48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+ICAgQSBzb2x1dGlvbiB0byB0aGF0IHByb2JsZW0gd2FzIHByb3Bvc2VkIGEgZmV3IHll YXJzIGFnbywgYnV0IGlzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgQSBzb2x1 dGlvbiB0byB0aGF0IHByb2JsZW0gd2FzIHByb3Bvc2VkIGEgZmV3IHllYXJzIGFnbywgYnV0IGlz PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQ+PGEgbmFtZT0iZGlmZjAwNTIiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBj bGFzcz0iZGVsZXRlIj4gICB1bnRlbmFibGUgLSBzZWUgcXVlc3Rpb24gNzwvc3Bhbj4uNS48L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+dW50ZW5h YmxlIC0gc2VlIHF1ZXN0aW9uIDY8L3NwYW4+LjUuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPjcuNS4gV2h5IGNhbid0IHdlIGp1c3Qgc2lnbiB1c2luZyBhIGNhcnJpZXItd2lkZSBpZGVu dGl0eT88L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij43LjUuIFdoeSBjYW4ndCB3ZSBq dXN0IHNpZ24gdXNpbmcgYSBjYXJyaWVyLXdpZGUgaWRlbnRpdHk/PC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPiAgIE1vc3QgY2FycmllcnMgYXJlIHRydXN0d29ydGh5IHdoZW4gaXQgY29t ZXMgdG8gZ2VuZXJhdGluZyBsZWdpdGltYXRlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+ICAgTW9zdCBjYXJyaWVycyBhcmUgdHJ1c3R3b3J0aHkgd2hlbiBpdCBjb21lcyB0byBnZW5l cmF0aW5nIGxlZ2l0aW1hdGU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxlZnQiPiAgIGNhbGxpbmcgbnVtYmVycyBhbmQgbmFtZXMuICBUaGUgUFNUTiBo YXMgYmVlbiBydW5uaW5nIGZvciBkZWNhZGVzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+ICAgY2FsbGluZyBudW1iZXJzIGFuZCBuYW1lcy4gIFRoZSBQU1ROIGhhcyBiZWVuIHJ1bm5p bmcgZm9yIGRlY2FkZXM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPiAgIHdpdGhvdXQgdGhlIGlzc3VlcyByZWFjaGluZyB0aGUgbWFnbml0dWRl IHRoZXkgaGF2ZSB0b2RheS4gIEl0IGlzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ ICAgd2l0aG91dCB0aGUgaXNzdWVzIHJlYWNoaW5nIHRoZSBtYWduaXR1ZGUgdGhleSBoYXZlIHRv ZGF5LiAgSXQgaXM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPiAgIHRlbXB0aW5nIHRvIHNpbXBseSBoYXZlIGEgY2FycmllciBzaWduIHRoZSBj YWxsIHJlcXVlc3Qgd2l0aCB0aGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICB0 ZW1wdGluZyB0byBzaW1wbHkgaGF2ZSBhIGNhcnJpZXIgc2lnbiB0aGUgY2FsbCByZXF1ZXN0IHdp dGggdGhlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij4gICBpZGVudGl0eSBvZiB0aGUgY2FycmllciBpdHNlbGYsIGluc3RlYWQgb2YgaGF2aW5n IHRvIHVzZSBzcGVjaWZpYzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGlkZW50 aXR5IG9mIHRoZSBjYXJyaWVyIGl0c2VsZiwgaW5zdGVhZCBvZiBoYXZpbmcgdG8gdXNlIHNwZWNp ZmljPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij4gICBjcmVkZW50aWFscyBmb3IgZXZlcnkgRS4xNjQgbnVtYmVyIGl0IG1hbmFnZXM7IHdlIGNv dWxkIGp1c3QgYmFzZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGNyZWRlbnRp YWxzIGZvciBldmVyeSBFLjE2NCBudW1iZXIgaXQgbWFuYWdlczsgd2UgY291bGQganVzdCBiYXNl PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4g ICB0aGUgbnVtYmVyJ3MgdmFsaWRpdHkgb24gdGhlIHRydXN0d29ydGhpbmVzcyBvciByZXB1dGF0 aW9uIG9mIHRoZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHRoZSBudW1iZXIn cyB2YWxpZGl0eSBvbiB0aGUgdHJ1c3R3b3J0aGluZXNzIG9yIHJlcHV0YXRpb24gb2YgdGhlPC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4NCiAgICAg IDx0ciBiZ2NvbG9yPSJncmF5Ij48dGQ+PC90ZD48dGg+PGEgbmFtZT0icGFydC1sMTUiPjxzbWFs bD5za2lwcGluZyB0byBjaGFuZ2UgYXQ8L3NtYWxsPjxlbT4gcGFnZSAxOSwgbGluZSAyMDwvZW0+ PC9hPjwvdGg+PHRoPiA8L3RoPjx0aD48YSBuYW1lPSJwYXJ0LXIxNSI+PHNtYWxsPnNraXBwaW5n IHRvIGNoYW5nZSBhdDwvc21hbGw+PGVtPiBwYWdlIDEsIGxpbmUgOTA0PC9lbT48L2E+PC90aD48 dGQ+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPjcuNi4gV2h5IGFyZSB3ZSBvbmx5IGZvY3VzZWQgb24gU0lQ PzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjcuNi4gV2h5IGFyZSB3ZSBvbmx5IGZv Y3VzZWQgb24gU0lQPzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBCZWNhdXNlIGZv ciBwaG9uZS10eXBlIHNlcnZpY2UgaXQgaXMgdGhlIGNvbW11bmljYXRpb24gcHJvdG9jb2wgbW9z dDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIEJlY2F1c2UgZm9yIHBob25lLXR5 cGUgc2VydmljZSBpdCBpcyB0aGUgY29tbXVuaWNhdGlvbiBwcm90b2NvbCBtb3N0PC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBjYXJyaWVy cyBhbmQgZW50ZXJwcmlzZXMgYXJlIG1pZ3JhdGluZyB0byB0b2RheSwgYW5kIGhhdmUgYmVlbiBm b3I8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBjYXJyaWVycyBhbmQgZW50ZXJw cmlzZXMgYXJlIG1pZ3JhdGluZyB0byB0b2RheSwgYW5kIGhhdmUgYmVlbiBmb3I8L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHRoZSBwYXN0 IGRlY2FkZS4gIEl0IGlzIG5vdCBmb2N1c2VkIG9uIGFueSBwYXJ0aWN1bGFyIHR5cGUgb2Y8L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICB0aGUgcGFzdCBkZWNhZGUuICBJdCBpcyBu b3QgZm9jdXNlZCBvbiBhbnkgcGFydGljdWxhciB0eXBlIG9mPC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBjYXJyaWVyLCB2ZXJ0aWNhbCBt YXJrZXQgc2VnbWVudCwgb3IgYW55IHBhcnRpY3VsYXIgcmVnaW9uIG9mIHRoZTwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGNhcnJpZXIsIHZlcnRpY2FsIG1hcmtldCBzZWdtZW50 LCBvciBhbnkgcGFydGljdWxhciByZWdpb24gb2YgdGhlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBXb3JsZC4gIFNTNyBhbmQgSVNETiBj b250aW51ZSB0byBleGlzdCwgY2xlYXJseSwgYnV0IHRoZXJlIGlzIG5vPC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+ICAgV29ybGQuICBTUzcgYW5kIElTRE4gY29udGludWUgdG8gZXhp c3QsIGNsZWFybHksIGJ1dCB0aGVyZSBpcyBubzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgc2lnbmlmaWNhbnQgdmVuZG9yIHByb2R1Y3Qg ZGV2ZWxvcG1lbnQgaW4gdGhhdCB0ZWNobm9sb2d5LCBub3IgZG9lczwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPiAgIHNpZ25pZmljYW50IHZlbmRvciBwcm9kdWN0IGRldmVsb3BtZW50 IGluIHRoYXQgdGVjaG5vbG9neSwgbm9yIGRvZXM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHRoZXJlIGFwcGVhciB0byBiZSBhbnkgZGVz aXJlIGJ5IGNhcnJpZXJzIHRvIGludmVzdCBtb3JlIGluIGl0LjwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPiAgIHRoZXJlIGFwcGVhciB0byBiZSBhbnkgZGVzaXJlIGJ5IGNhcnJpZXJz IHRvIGludmVzdCBtb3JlIGluIGl0LjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQ+PGEgbmFtZT0iZGlmZjAwNTMiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+V2UgYWxzbyBvYnNl cnZlIHRoYXQgbW9zdCBvZiB0aGUgcHJvYmxlbSBjYWxscyBhcmUgU0lQLW9yaWdpbmF0ZWQuPC9z cGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJs b2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2Vy dCI+UHJvYmFibHkgdGhhdCBpcyBiZWNhdXNlIHRoZXJlIFZvSVAgc2VydmljZSBwcm92aWRlcnMg dGhhdCBhcmUgbW9yZTwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxz cGFuIGNsYXNzPSJpbnNlcnQiPndpbGxpbmcgdG8gYWxsb3cgdGhlaXIgc3Vic2NyaWJlcnMgdG8g dXNlIGFueSBjYWxsaW5nIHBhcnR5IG51bWJlcjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPnRoZXkgd2FudCB0by48L3NwYW4+PC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBPbmUgb2Yg dGhlIHByb3Bvc2VkIGluLWJhbmQgc29sdXRpb25zLCBbZHJhZnQtaWtlc10sIGRvZXMgaW5jbHVk ZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIE9uZSBvZiB0aGUgcHJvcG9zZWQg aW4tYmFuZCBzb2x1dGlvbnMsIFtkcmFmdC1pa2VzXSwgZG9lcyBpbmNsdWRlPC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBTUzcgYW5kIElT RE4gc3VwcG9ydCBmb3IgU1RJUiBpbiBhIHRyYW5zcGFyZW50IG1hbm5lciBmb3Igc29tZTwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFNTNyBhbmQgSVNETiBzdXBwb3J0IGZvciBT VElSIGluIGEgdHJhbnNwYXJlbnQgbWFubmVyIGZvciBzb21lPC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBzY2VuYXJpb3M7IGFuZCB0aGUg b3V0LW9mLWJhbmQgc29sdXRpb24gd291bGQgYWxzbyB3b3JrIGFjcm9zcyBTUzc8L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBzY2VuYXJpb3M7IGFuZCB0aGUgb3V0LW9mLWJhbmQg c29sdXRpb24gd291bGQgYWxzbyB3b3JrIGFjcm9zcyBTUzc8L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGFuZCBJU0ROLiAgVGhlIGZvY3Vz IG9mIFNUSVIgcmVtYWlucywgaG93ZXZlciwgb24gU0lQIGFzIHRoZSBtYWluPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgYW5kIElTRE4uICBUaGUgZm9jdXMgb2YgU1RJUiByZW1h aW5zLCBob3dldmVyLCBvbiBTSVAgYXMgdGhlIG1haW48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGluLWJhbmQgcHJvdG9jb2wgdG8gc3Vw cG9ydC48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBpbi1iYW5kIHByb3RvY29s IHRvIHN1cHBvcnQuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjcuNy4gV2hhdCBhYm91 dCBvdGhlciBJUC1iYXNlZCBwcm90b2NvbHM/PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+Ny43LiBXaGF0IGFib3V0IG90aGVyIElQLWJhc2VkIHByb3RvY29scz88L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+ICAgVGhlcmUgYXJlIG90aGVyIHJlYWwtdGltZSBjb21tdW5pY2F0 aW9ucyBJUC1iYXNlZCBwcm90b2NvbHM6IGZvcjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPiAgIFRoZXJlIGFyZSBvdGhlciByZWFsLXRpbWUgY29tbXVuaWNhdGlvbnMgSVAtYmFzZWQg cHJvdG9jb2xzOiBmb3I8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPiAgIGV4YW1wbGUgWE1QUCwgSC4zMjMsIEJJQ0MsIGFuZCBzb29uIFdlYlJU Qy4gIFdlYlJUQyBpcyBub3QgYW4gaW50ZXItPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+ICAgZXhhbXBsZSBYTVBQLCBILjMyMywgQklDQywgYW5kIHNvb24gV2ViUlRDLiAgV2ViUlRD IGlzIG5vdCBhbiBpbnRlci08L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48L3RyPg0KICAgICAgPHRyIGJnY29sb3I9ImdyYXkiPjx0ZD48L3RkPjx0aD48YSBu YW1lPSJwYXJ0LWwxNiI+PHNtYWxsPnNraXBwaW5nIHRvIGNoYW5nZSBhdDwvc21hbGw+PGVtPiBw YWdlIDIwLCBsaW5lIDEwPC9lbT48L2E+PC90aD48dGg+IDwvdGg+PHRoPjxhIG5hbWU9InBhcnQt cjE2Ij48c21hbGw+c2tpcHBpbmcgdG8gY2hhbmdlIGF0PC9zbWFsbD48ZW0+IHBhZ2UgMSwgbGlu ZSA5NDg8L2VtPjwvYT48L3RoPjx0ZD48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+Ny44LiBXaGF0IFNJUCBo ZWFkZXIgaXMgdXNlZCBmb3IgdGhlIGNhbGxpbmcgbnVtYmVyPzwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPjcuOC4gV2hhdCBTSVAgaGVhZGVyIGlzIHVzZWQgZm9yIHRoZSBjYWxsaW5n IG51bWJlcj88L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgSW4gZ2VuZXJhbCBtb3N0 IGRldmljZXMgdXNlIHRoZSBTSVAgRnJvbSBoZWFkZXIncyBVUkkgdXNlcm5hbWUgYXM8L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBJbiBnZW5lcmFsIG1vc3QgZGV2aWNlcyB1c2Ug dGhlIFNJUCBGcm9tIGhlYWRlcidzIFVSSSB1c2VybmFtZSBhczwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgdGhlIHNvdXJjZSBjYWxsaW5n IG51bWJlci4gIEluIHNvbWUgY2FzZXMgdGhlIFAtQXNzZXJ0ZWQtSWRlbnRpdHk8L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICB0aGUgc291cmNlIGNhbGxpbmcgbnVtYmVyLiAgSW4g c29tZSBjYXNlcyB0aGUgUC1Bc3NlcnRlZC1JZGVudGl0eTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgaGVhZGVyIGZpZWxkIGlzIHVzZWQg aW5zdGVhZC4gIFRoZXJlIGFyZSBzb21lIHByb3ByaWV0YXJ5IGhlYWRlcnMgaW48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBoZWFkZXIgZmllbGQgaXMgdXNlZCBpbnN0ZWFkLiAg VGhlcmUgYXJlIHNvbWUgcHJvcHJpZXRhcnkgaGVhZGVycyBpbjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgdXNlIGFzIHdlbGwsIGJ1dCB0 aGV5J3JlIGZhciBsZXNzIGNvbW1vbi48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4g ICB1c2UgYXMgd2VsbCwgYnV0IHRoZXkncmUgZmFyIGxlc3MgY29tbW9uLjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsZWZ0Ij4gICBJbnRlcmVzdGluZ2x5LCB3aGlsZSB0aGUgaGVhZGVycyB0byB1 c2UgZm9yIGNhbGxpbmcgYW5kIGNhbGxlZDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PiAgIEludGVyZXN0aW5nbHksIHdoaWxlIHRoZSBoZWFkZXJzIHRvIHVzZSBmb3IgY2FsbGluZyBh bmQgY2FsbGVkPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij4gICBudW1iZXJzIHdpbGwgYmUgaW4gdGhlIFNUSVIgUkZDcywgaXQgaXMgbm90IG5l Y2Vzc2FyeSB0byB1c2UgdGhlbSBhczwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAg IG51bWJlcnMgd2lsbCBiZSBpbiB0aGUgU1RJUiBSRkNzLCBpdCBpcyBub3QgbmVjZXNzYXJ5IHRv IHVzZSB0aGVtIGFzPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij4gICB0aGV5IGFwcGVhciBvbi10aGUtd2lyZSB0byBtYWtlIFNUSVIgd29yayBj b3JyZWN0bHkuICBTZWUgcXVlc3Rpb248L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4g ICB0aGV5IGFwcGVhciBvbi10aGUtd2lyZSB0byBtYWtlIFNUSVIgd29yayBjb3JyZWN0bHkuICBT ZWUgcXVlc3Rpb248L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDA1NCI+PC9hPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxv Y2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgIDc8L3NwYW4+LjEwLjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij42PC9zcGFuPi4xMC48L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+Ny45LiBEb2Vzbid0IHRoZSBTSVAgRnJvbSBvciBUbyBV Ukkgc3RyaW5nIGNoYW5nZSBhbG9uZyB0aGUgcGF0aD88L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJpZ2h0Ij43LjkuIERvZXNuJ3QgdGhlIFNJUCBGcm9tIG9yIFRvIFVSSSBzdHJpbmcgY2hhbmdl IGFsb25nIHRoZSBwYXRoPzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBZZXMuICBJ biBtYW55IGludGVyLWNhcnJpZXIgY2FsbCBjYXNlcyB0b2RheSwgdGhlIFNJUCBUbyBhbmQgRnJv bTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFllcy4gIEluIG1hbnkgaW50ZXIt Y2FycmllciBjYWxsIGNhc2VzIHRvZGF5LCB0aGUgU0lQIFRvIGFuZCBGcm9tPC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBVUklzIGNoYW5n ZSwgc29tZXRpbWVzIGRyYXN0aWNhbGx5LiAgVGhlcmUgYXJlIG1hbnkgcmVhc29ucyB0aGlzPC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgVVJJcyBjaGFuZ2UsIHNvbWV0aW1lcyBk cmFzdGljYWxseS4gIFRoZXJlIGFyZSBtYW55IHJlYXNvbnMgdGhpczwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgb2NjdXJzLCBzb21lIG9m IHdoaWNoIGFyZSBkb2N1bWVudGVkIGluIFtkcmFmdC11cmlzLWNoYW5nZV0uICBFdmVuPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgb2NjdXJzLCBzb21lIG9mIHdoaWNoIGFyZSBk b2N1bWVudGVkIGluIFtkcmFmdC11cmlzLWNoYW5nZV0uICBFdmVuPC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBpbiBTUzcsIHRoZSBsb2dp Y2FsIGVxdWl2YWxlbnQgb2YgdGhpcyBpcyBwZXJmb3JtZWQgYXMgcGFydCBvZjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGluIFNTNywgdGhlIGxvZ2ljYWwgZXF1aXZhbGVudCBv ZiB0aGlzIGlzIHBlcmZvcm1lZCBhcyBwYXJ0IG9mPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBHbG9iYWwgVGl0bGUgVHJhbnNsYXRpb24u PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgR2xvYmFsIFRpdGxlIFRyYW5zbGF0 aW9uLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBSZWdhcmRsZXNzLCBTVElSIHdv cmtzIGV2ZW4gd2hlbiB0aGUgVG8gYW5kIEZyb20gVVJJIHN0cmluZ3MgYXJlPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgUmVnYXJkbGVzcywgU1RJUiB3b3JrcyBldmVuIHdoZW4g dGhlIFRvIGFuZCBGcm9tIFVSSSBzdHJpbmdzIGFyZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgY2hhbmdlZC4gIEl0IGRvZXMgdGhpcyBi ZWNhdXNlIGl0IGRvZXMgbm90IGNyeXB0b2dyYXBoaWNhbGx5IHNpZ248L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij4gICBjaGFuZ2VkLiAgSXQgZG9lcyB0aGlzIGJlY2F1c2UgaXQgZG9l cyBub3QgY3J5cHRvZ3JhcGhpY2FsbHkgc2lnbjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgdGhlIGxpdGVyYWwgZW5jb2RlZCBzdHJpbmdz LCBidXQgaW5zdGVhZCB0aGUgYWJzdHJhY3QgbG9naWNhbCBFLjE2NDwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPiAgIHRoZSBsaXRlcmFsIGVuY29kZWQgc3RyaW5ncywgYnV0IGluc3Rl YWQgdGhlIGFic3RyYWN0IGxvZ2ljYWwgRS4xNjQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDA1NSI+PC9h PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgIG51bWJlcnMgdGhl eSByZXByZXNlbnQuICBTZWUgcXVlc3Rpb24gNzwvc3Bhbj4uMTAuPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPm51bWJlcnMgdGhleSByZXByZXNl bnQuICBTZWUgcXVlc3Rpb24gNjwvc3Bhbj4uMTAuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPjcuMTAuICAgICBEb2VzIFNUSVIgY3J5cHRvLXNpZ24gdGhlIFNJUCBGcm9tIGFuZCBUbyBV UkkgaGVhZGVycz88L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij43LjEwLiAgICAgRG9l cyBTVElSIGNyeXB0by1zaWduIHRoZSBTSVAgRnJvbSBhbmQgVG8gVVJJIGhlYWRlcnM/PC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIE5vLCBub3QgcmVhbGx5LiAgU1RJUiBzaWducyB0 aGUgYWJzdHJhY3QgbG9naWNhbCBFLjE2NCBudW1iZXJzIHRoZXk8L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij4gICBObywgbm90IHJlYWxseS4gIFNUSVIgc2lnbnMgdGhlIGFic3RyYWN0 IGxvZ2ljYWwgRS4xNjQgbnVtYmVycyB0aGV5PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICByZXByZXNlbnQuICBUaGUgc2lnbmVyIGFuZCB2 ZXJpZmllciBlYWNoIHNpZ24gYSAiY2Fub25pY2FsIiBFLjE2NDwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPiAgIHJlcHJlc2VudC4gIFRoZSBzaWduZXIgYW5kIHZlcmlmaWVyIGVhY2gg c2lnbiBhICJjYW5vbmljYWwiIEUuMTY0PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBudW1iZXIsIHdoaWNoIGlzIG5vdCBuZWNlc3Nhcmls eSB0aGUgZXhhY3Qgc3RyaW5nIHRoZXkgc2VuZCBvcjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPiAgIG51bWJlciwgd2hpY2ggaXMgbm90IG5lY2Vzc2FyaWx5IHRoZSBleGFjdCBzdHJp bmcgdGhleSBzZW5kIG9yPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij4gICByZWNlaXZlIG9uLXRoZS13aXJlIGluIHRoZSBTSVAgbWVzc2FnZXMs IGJ1dCBpcyBpbnN0ZWFkIHRoZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHJl Y2VpdmUgb24tdGhlLXdpcmUgaW4gdGhlIFNJUCBtZXNzYWdlcywgYnV0IGlzIGluc3RlYWQgdGhl PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4g ICBlcXVpdmFsZW50IGlkZW50aXR5IGFzIGFuIEUuMTY0IG51bWJlci48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij4gICBlcXVpdmFsZW50IGlkZW50aXR5IGFzIGFuIEUuMTY0IG51bWJl ci48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgRm9yIGV4YW1wbGUsIGV2ZW4gaWYg dGhlIFRvIGFuZC9vciBGcm9tIFVSSSBzdHJpbmdzIG9ubHkgY29udGFpbiBhPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgRm9yIGV4YW1wbGUsIGV2ZW4gaWYgdGhlIFRvIGFuZC9v ciBGcm9tIFVSSSBzdHJpbmdzIG9ubHkgY29udGFpbiBhPC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4NCiAgICAgIDx0ciBiZ2NvbG9yPSJncmF5Ij48 dGQ+PC90ZD48dGg+PGEgbmFtZT0icGFydC1sMTciPjxzbWFsbD5za2lwcGluZyB0byBjaGFuZ2Ug YXQ8L3NtYWxsPjxlbT4gcGFnZSAyMSwgbGluZSA1PC9lbT48L2E+PC90aD48dGg+IDwvdGg+PHRo PjxhIG5hbWU9InBhcnQtcjE3Ij48c21hbGw+c2tpcHBpbmcgdG8gY2hhbmdlIGF0PC9zbWFsbD48 ZW0+IHBhZ2UgMSwgbGluZSA5ODk8L2VtPjwvYT48L3RoPjx0ZD48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ ICAgaW50ZW5kZWQgaXQgdG8gYmUgYSBkaWZmZXJlbnQgb25lLCB0aGVuIHRoZSBTVElSIHZlcmlm aWNhdGlvbiB3aWxsPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgaW50ZW5kZWQg aXQgdG8gYmUgYSBkaWZmZXJlbnQgb25lLCB0aGVuIHRoZSBTVElSIHZlcmlmaWNhdGlvbiB3aWxs PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4g ICBmYWlsLiAgSW4gc3VjaCBhIGNhc2UsIGhvd2V2ZXIsIHRoZSB2ZXJpZmljYXRpb24gKnNob3Vs ZCogZmFpbCw8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBmYWlsLiAgSW4gc3Vj aCBhIGNhc2UsIGhvd2V2ZXIsIHRoZSB2ZXJpZmljYXRpb24gKnNob3VsZCogZmFpbCw8L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGJlY2F1 c2UgYnkgZGVmaW5pdGlvbiB0aGUgdmVyaWZpZXIgc2hvdWxkIG5vdCBiZWxpZXZlIGl0IHRvIGJl IHRoZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGJlY2F1c2UgYnkgZGVmaW5p dGlvbiB0aGUgdmVyaWZpZXIgc2hvdWxkIG5vdCBiZWxpZXZlIGl0IHRvIGJlIHRoZTwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgdGVsZXBo b25lIG51bWJlciBpdCB0aGlua3MgaXQgaXMuICBTaW5jZSB0aGUgZXhpc3RpbmcgcHJvYmxlbSBp bjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHRlbGVwaG9uZSBudW1iZXIgaXQg dGhpbmtzIGl0IGlzLiAgU2luY2UgdGhlIGV4aXN0aW5nIHByb2JsZW0gaW48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGRlcGxveWVkIFNJ UCBuZXR3b3JrcyBpcyBub3Qgb25lIG9mIHN5bnRhY3RpYyBlbmNvZGluZyBjb25mdXNpb24sPC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgZGVwbG95ZWQgU0lQIG5ldHdvcmtzIGlz IG5vdCBvbmUgb2Ygc3ludGFjdGljIGVuY29kaW5nIGNvbmZ1c2lvbiw8L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGJ1dCBpbnN0ZWFkIG9u ZSBvZiBtYWxpY2lvdXMgaW50ZW50LCB0aGVyZSBkb2VzIG5vdCBhcHBlYXIgdG8gYmUgYW48L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBidXQgaW5zdGVhZCBvbmUgb2YgbWFsaWNp b3VzIGludGVudCwgdGhlcmUgZG9lcyBub3QgYXBwZWFyIHRvIGJlIGFuPC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBpbnRlcm9wZXJhYmls aXR5IHByb2JsZW0gd2l0aCBkZXRlcm1pbmluZyB0aGUgc291cmNlIG51bWJlciBldmVuPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgaW50ZXJvcGVyYWJpbGl0eSBwcm9ibGVtIHdp dGggZGV0ZXJtaW5pbmcgdGhlIHNvdXJjZSBudW1iZXIgZXZlbjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgdGhvdWdoIHRoZSBGcm9tIGFu ZCBUbyBVUklzIGFyZSBjaGFuZ2VkIGFsb25nIHRoZSBTSVAgc2lnbmFsaW5nPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgdGhvdWdoIHRoZSBGcm9tIGFuZCBUbyBVUklzIGFyZSBj aGFuZ2VkIGFsb25nIHRoZSBTSVAgc2lnbmFsaW5nPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBwYXRoLjwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPiAgIHBhdGguPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZD48YSBuYW1lPSJkaWZmMDA1NiI+PC9hPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjcuMTEuPHNwYW4g Y2xhc3M9ImRlbGV0ZSI+ICAgICBEb2VzIFNUSVI8L3NwYW4+IGNoYW5nZSBTSVAgRnJvbSBvciBU byBVUkkgaGVhZGVycz88L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+Ny4xMS48c3Bh biBjbGFzcz0iaW5zZXJ0Ij4JRG9lcyBTVElSIHJlcTwvc3Bhbj4gY2hhbmdlIFNJUCBGcm9tIG9y IFRvIFVSSSBoZWFkZXJzPzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBOby4gIFRo ZSBjYXJyaWVycyBjYW4gZG8gd2hhdGV2ZXIgdGhleSBkbyB0b2RheS4gIElmIHRoZXkgY2hhbmdl PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgTm8uICBUaGUgY2FycmllcnMgY2Fu IGRvIHdoYXRldmVyIHRoZXkgZG8gdG9kYXkuICBJZiB0aGV5IGNoYW5nZTwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgdGhlbSB0b2RheSwg Zm9yIHdoYXRldmVyIHJlYXNvbiwgdGhlbiB0aGV5IGNhbiBjb250aW51ZSB0byBjaGFuZ2U8L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICB0aGVtIHRvZGF5LCBmb3Igd2hhdGV2ZXIg cmVhc29uLCB0aGVuIHRoZXkgY2FuIGNvbnRpbnVlIHRvIGNoYW5nZTwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgdGhlbTsgaWYgdGhleSBk b24ndCBjaGFuZ2UgdGhlbSwgdGhlbiB0aGV5IGNhbiBjb250aW51ZSB0byBub3Q8L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICB0aGVtOyBpZiB0aGV5IGRvbid0IGNoYW5nZSB0aGVt LCB0aGVuIHRoZXkgY2FuIGNvbnRpbnVlIHRvIG5vdDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgY2hhbmdlIHRoZW0uPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgY2hhbmdlIHRoZW0uPC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPjguIEluLWJhbmQgU29sdXRpb24gUXVlc3Rpb25zPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+OC4gSW4tYmFuZCBTb2x1dGlvbiBRdWVzdGlvbnM8L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+OC4xLiBEb24ndCB3ZSBhbHJlYWR5IGhhdmUgaW4tYmFuZCB3aXRo IFJGQyA0NDc0IFNJUCBJZGVudGl0eT88L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij44 LjEuIERvbid0IHdlIGFscmVhZHkgaGF2ZSBpbi1iYW5kIHdpdGggUkZDIDQ0NzQgU0lQIElkZW50 aXR5PzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4NCiAgICAgIDx0ciBiZ2NvbG9yPSJncmF5 Ij48dGQ+PC90ZD48dGg+PGEgbmFtZT0icGFydC1sMTgiPjxzbWFsbD5za2lwcGluZyB0byBjaGFu Z2UgYXQ8L3NtYWxsPjxlbT4gcGFnZSAyMSwgbGluZSAyNzwvZW0+PC9hPjwvdGg+PHRoPiA8L3Ro Pjx0aD48YSBuYW1lPSJwYXJ0LXIxOCI+PHNtYWxsPnNraXBwaW5nIHRvIGNoYW5nZSBhdDwvc21h bGw+PGVtPiBwYWdlIDEsIGxpbmUgMTAxMTwvZW0+PC9hPjwvdGg+PHRkPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij4gICBoYXZlIHNvbHZlZCB0aGUgcHJvYmxlbSBmb3IgdGVsZXBob25lIG51bWJlcnMgaW4g cGFydGljdWxhciwgYW5kPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgaGF2ZSBz b2x2ZWQgdGhlIHByb2JsZW0gZm9yIHRlbGVwaG9uZSBudW1iZXJzIGluIHBhcnRpY3VsYXIsIGFu ZDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ ICAgY2Fubm90IHNvbHZlIHRoZSBwcm9ibGVtIGluIHRoZSBleGlzdGluZyBkZXBsb3ltZW50cy4g IEEgc29sdXRpb24gdG88L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBjYW5ub3Qg c29sdmUgdGhlIHByb2JsZW0gaW4gdGhlIGV4aXN0aW5nIGRlcGxveW1lbnRzLiAgQSBzb2x1dGlv biB0bzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+ICAgdGhlIHByb2JsZW0gbXVzdCBhdm9pZCB0aGUgaXNzdWVzIFNJUCBJZGVudGl0eSB3b3Vs ZCBoYXZlIGhhZCwgaGFkPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgdGhlIHBy b2JsZW0gbXVzdCBhdm9pZCB0aGUgaXNzdWVzIFNJUCBJZGVudGl0eSB3b3VsZCBoYXZlIGhhZCwg aGFkPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij4gICBpdCBiZWVuIGF0dGVtcHRlZC48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4g ICBpdCBiZWVuIGF0dGVtcHRlZC48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgSW4g cGFydGljdWxhciwgW1JGQzQ0NzRdIHNpZ25lZCBwb3J0aW9ucyBvZiB0aGUgU0lQIG1lc3NhZ2Ug dGhhdCBhcmU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBJbiBwYXJ0aWN1bGFy LCBbUkZDNDQ3NF0gc2lnbmVkIHBvcnRpb25zIG9mIHRoZSBTSVAgbWVzc2FnZSB0aGF0IGFyZTwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAg ZnJlcXVlbnRseSBjaGFuZ2VkIGJ5IG1pZGRsZWJveGVzLiAgVGhlc2UgcG9ydGlvbnMgZGlkIG5v dCBuZWVkIHRvPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgZnJlcXVlbnRseSBj aGFuZ2VkIGJ5IG1pZGRsZWJveGVzLiAgVGhlc2UgcG9ydGlvbnMgZGlkIG5vdCBuZWVkIHRvPC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBi ZSBzaWduZWQgdG8gYWNoaWV2ZSBqdXN0IHRoZSBnb2FsIG9mIHNvdXJjZSBpZGVudGl0eSB0ZWxl cGhvbmU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBiZSBzaWduZWQgdG8gYWNo aWV2ZSBqdXN0IHRoZSBnb2FsIG9mIHNvdXJjZSBpZGVudGl0eSB0ZWxlcGhvbmU8L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIG51bWJlciB2 YWxpZGF0aW9uLCBzbyB0aGUgbmV3IHByb3Bvc2FscyBzaWduIG11Y2ggbGVzcy4gIEFsc28sPC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgbnVtYmVyIHZhbGlkYXRpb24sIHNvIHRo ZSBuZXcgcHJvcG9zYWxzIHNpZ24gbXVjaCBsZXNzLiAgQWxzbyw8L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFtSRkM0NDc0XSB3YXMgcmVh bGx5IG9ubHkgYXBwbGljYWJsZSBmb3IgdXNlckBkb21haW4gZW1haWwtc3R5bGUgU0lQPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgW1JGQzQ0NzRdIHdhcyByZWFsbHkgb25seSBh cHBsaWNhYmxlIGZvciB1c2VyQGRvbWFpbiBlbWFpbC1zdHlsZSBTSVA8L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJk aWZmMDA1NyI+PC9hPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIG5hbWVzLCA8c3BhbiBjbGFzcz0i ZGVsZXRlIj5ub3Q8L3NwYW4+IHRlbGVwaG9uZSA8c3BhbiBjbGFzcz0iZGVsZXRlIj5udW1iZXJz Ljwvc3Bhbj4gIFRoZXJlIGFyZSBzb21lIG90aGVyIHByb2JsZW1zIHdpdGg8L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJibG9jayI+bmFtZXMsIDxzcGFuIGNsYXNzPSJpbnNlcnQiPml0cyBhc3N1 bXB0aW9ucyBmb3I8L3NwYW4+IHRlbGVwaG9uZSA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5udW1iZXJz IChwdWJsaWMgZW51bSB3b3VsZCBiZTwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy YmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPmRlcGxveWVkKSBkaWQgbm90IG1hdGVyaWFsaXpl Ljwvc3Bhbj4gIFRoZXJlIGFyZSBzb21lIG90aGVyIHByb2JsZW1zIHdpdGg8L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFtSRkM0NDc0XSwg YnV0IHRob3NlIHdlcmUgdGhlIGJpZyBvbmVzLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPiAgIFtSRkM0NDc0XSwgYnV0IHRob3NlIHdlcmUgdGhlIGJpZyBvbmVzLjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij44LjIuIFdoYXQgd2lsbCBoYXBwZW4gdG8gUkZDIDQ0NzQ/PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+OC4yLiBXaGF0IHdpbGwgaGFwcGVuIHRvIFJG QyA0NDc0PzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBJdCBtaWdodCBiZSBkZXBy ZWNhdGVkIGFuZCByZXBsYWNlZCB3aXRoIHRoZSBTVElSIFdHIG91dHB1dCwgb3I8L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBJdCBtaWdodCBiZSBkZXByZWNhdGVkIGFuZCByZXBs YWNlZCB3aXRoIHRoZSBTVElSIFdHIG91dHB1dCwgb3I8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHNpbXBseSBsZWZ0IGFsb25lIGFuZCBp Z25vcmVkLiAgVGhpcyBpcyBzdGlsbCBUQkQuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+ICAgc2ltcGx5IGxlZnQgYWxvbmUgYW5kIGlnbm9yZWQuICBUaGlzIGlzIHN0aWxsIFRCRC48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+OC4zLiBXaGF0IGFyZSB0aGUgcHJvcG9zZWQg aW4tYmFuZCBzb2x1dGlvbnMgc28gZmFyPzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PjguMy4gV2hhdCBhcmUgdGhlIHByb3Bvc2VkIGluLWJhbmQgc29sdXRpb25zIHNvIGZhcj88L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgVGhlcmUgaGF2ZSBiZWVuIHNldmVyYWwgcHJv cG9zZWQgc29sdXRpb25zIHRvIHRoZSBTVElSIHByb2JsZW0gb3ZlcjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPiAgIFRoZXJlIGhhdmUgYmVlbiBzZXZlcmFsIHByb3Bvc2VkIHNvbHV0 aW9ucyB0byB0aGUgU1RJUiBwcm9ibGVtIG92ZXI8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQg Y2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPg0KICAgICAgPHRyIGJnY29sb3I9ImdyYXkiPjx0ZD48 L3RkPjx0aD48YSBuYW1lPSJwYXJ0LWwxOSI+PHNtYWxsPnNraXBwaW5nIHRvIGNoYW5nZSBhdDwv c21hbGw+PGVtPiBwYWdlIDIyLCBsaW5lIDM3PC9lbT48L2E+PC90aD48dGg+IDwvdGg+PHRoPjxh IG5hbWU9InBhcnQtcjE5Ij48c21hbGw+c2tpcHBpbmcgdG8gY2hhbmdlIGF0PC9zbWFsbD48ZW0+ IHBhZ2UgMSwgbGluZSAxMDY5PC9lbT48L2E+PC90aD48dGQ+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgVGhlIFtkcmFmdC1jaWRlcl0gcHJvcG9z YWwgdXNlcyBhIEROUy1iYXNlZCBtZWNoYW5pc20gc2ltaWxhciB0bzwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPiAgIFRoZSBbZHJhZnQtY2lkZXJdIHByb3Bvc2FsIHVzZXMgYSBETlMt YmFzZWQgbWVjaGFuaXNtIHNpbWlsYXIgdG88L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIERLSU0uICBGb3IgdGVsZXBob25lIG51bWJlcnMs IGEgY29tbW9uIGRvbWFpbiBhbmNob3IgaXMgdXNlZCBmb3IgYWxsPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+ICAgREtJTS4gIEZvciB0ZWxlcGhvbmUgbnVtYmVycywgYSBjb21tb24g ZG9tYWluIGFuY2hvciBpcyB1c2VkIGZvciBhbGw8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIG51bWJlcnMgaW4gYSBnaXZlbiBjb3VudHJ5 LWNvZGUsIGFuZCBhbiBFTlVNLXN0eWxlIG5hbWluZyBzY2hlbWEgaXM8L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij4gICBudW1iZXJzIGluIGEgZ2l2ZW4gY291bnRyeS1jb2RlLCBhbmQg YW4gRU5VTS1zdHlsZSBuYW1pbmcgc2NoZW1hIGlzPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICB1c2VkIGZvciBhIEROUyB0cmVlIHVuZGVy IHRoZSBhbmNob3IuICBETlNTRUMgaXMgdGhlbiB1c2VkIHRvPC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+ICAgdXNlZCBmb3IgYSBETlMgdHJlZSB1bmRlciB0aGUgYW5jaG9yLiAgRE5T U0VDIGlzIHRoZW4gdXNlZCB0bzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+ICAgcHJvdmlkZSBkaWdpdGFsIHNpZ25hdHVyZSBjaGFpbmluZyBm cm9tIHRoZSBhbmNob3IgZG93biwgYW5kIGVhY2g8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij4gICBwcm92aWRlIGRpZ2l0YWwgc2lnbmF0dXJlIGNoYWluaW5nIGZyb20gdGhlIGFuY2hv ciBkb3duLCBhbmQgZWFjaDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+ICAgdGVsZXBob25lIG51bWJlciBpcyBhIEROUyBub2RlIHdpdGggYSBU WFQgUlIgb2YgdGhlIHB1YmxpYyBrZXkgdmFsdWU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij4gICB0ZWxlcGhvbmUgbnVtYmVyIGlzIGEgRE5TIG5vZGUgd2l0aCBhIFRYVCBSUiBvZiB0 aGUgcHVibGljIGtleSB2YWx1ZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+ICAgdXNlZCBieSBTVElSU0VDLjwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPiAgIHVzZWQgYnkgU1RJUlNFQy48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+ICAgQWx0ZXJuYXRpdmVseSwgW2RyYWZ0LTQ0NzRiaXNdIHByb3Bvc2VzIGEgQ2VydGlm aWNhdGUgQXV0aG9yaXR5PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgQWx0ZXJu YXRpdmVseSwgW2RyYWZ0LTQ0NzRiaXNdIHByb3Bvc2VzIGEgQ2VydGlmaWNhdGUgQXV0aG9yaXR5 PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQ+PGEgbmFtZT0iZGlmZjAwNTgiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBtb2Rl bCBzaW1pbGFyIHRvIHRoZSBXZWItUEtJLCB3aGVyZWJ5IGEgY2VydGlmaWNhdGUgaXMgcmV0cmll dmVkIDxzcGFuIGNsYXNzPSJkZWxldGUiPnZpYTwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJibG9jayI+bW9kZWwgc2ltaWxhciB0byB0aGUgV2ViLVBLSSwgd2hlcmVieSBhIGNlcnRp ZmljYXRlIGlzIHJldHJpZXZlZDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICBIVFRQPC9zcGFuPiBm cm9tIGEgVVJMIGVuY29kZWQgaW4gYW4gSWRlbnRpdHktSW5mbyBoZWFkZXIgaW4gdGhlIHJlY2Vp dmVkPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPmZyb20gYSBVUkwgZW5jb2RlZCBp biBhbiBJZGVudGl0eS1JbmZvIGhlYWRlciBpbiB0aGUgcmVjZWl2ZWQgU0lQPC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIFNJUCBtZXNz YWdlLiAgRm9yIHRlbGVwaG9uZSBudW1iZXJzIGluIHBhcnRpY3VsYXIsIFtkcmFmdC00NDc0Ymlz XTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj5tZXNzYWdlLiAgRm9yIHRlbGVwaG9u ZSBudW1iZXJzIGluIHBhcnRpY3VsYXIsIFtkcmFmdC00NDc0YmlzXTwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgcHJvcG9zZXMgdGhlIHNw ZWNpZmljIHRlbGVwaG9uZSBudW1iZXIgb3IgcmFuZ2UgYmUgZW5jb2RlZCBpbiBhIFt0by08L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBwcm9wb3NlcyB0aGUgc3BlY2lmaWMgdGVs ZXBob25lIG51bWJlciBvciByYW5nZSBiZSBlbmNvZGVkIGluIGEgW3RvLTwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgYmUtZGVjaWRlZF0g ZmllbGQgb2YgdGhlIGNlcnRpZmljYXRlLCBpbnN0ZWFkIG9mIGEgaG9zdCBvciBkb21haW48L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBiZS1kZWNpZGVkXSBmaWVsZCBvZiB0aGUg Y2VydGlmaWNhdGUsIGluc3RlYWQgb2YgYSBob3N0IG9yIGRvbWFpbjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgbmFtZS4gIEl0IGlzIG5v dCBjbGVhciBob3cgdGhlIHZlcmlmaWVyIGtub3dzIHRoZSBDQSBpczwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPiAgIG5hbWUuICBJdCBpcyBub3QgY2xlYXIgaG93IHRoZSB2ZXJpZmll ciBrbm93cyB0aGUgQ0EgaXM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxlZnQiPiAgIGF1dGhvcml0YXRpdmUgZm9yIHRoYXQgdGVsZXBob25lIG51bWJl ciwgYXMgdGhpcyBwb3J0aW9uIG9mIHRoZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PiAgIGF1dGhvcml0YXRpdmUgZm9yIHRoYXQgdGVsZXBob25lIG51bWJlciwgYXMgdGhpcyBwb3J0 aW9uIG9mIHRoZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+ICAgc29sdXRpb24gaXMgc3RpbGwgYSB3b3JrIGluIHByb2dyZXNzIGZvciBbZHJh ZnQtNDQ3NGJpc10uPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgc29sdXRpb24g aXMgc3RpbGwgYSB3b3JrIGluIHByb2dyZXNzIGZvciBbZHJhZnQtNDQ3NGJpc10uPC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPjguNC4gV2h5IG5vdCBqdXN0IGNhcnJ5IGEgY2VydGlmaWNh dGUgaW4gdGhlIFNJUCBtZXNzYWdlPzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjgu NC4gV2h5IG5vdCBqdXN0IGNhcnJ5IGEgY2VydGlmaWNhdGUgaW4gdGhlIFNJUCBtZXNzYWdlPzwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBDYXJyeWluZyBhbiBYLjUwOSBjZXJ0aWZp Y2F0ZSBpbiBhIFNJUCBJTlZJVEUgcmVxdWVzdCBjcmVhdGVzIHR3bzwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPiAgIENhcnJ5aW5nIGFuIFguNTA5IGNlcnRpZmljYXRlIGluIGEgU0lQ IElOVklURSByZXF1ZXN0IGNyZWF0ZXMgdHdvPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBwcm9ibGVtczogdGhlIG1lc3NhZ2Ugc2l6ZSBn cm93cyAoYSBMT1QpLCBhbmQgbXVsdGktcGFydCBNSU1FIGlzbid0PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+ICAgcHJvYmxlbXM6IHRoZSBtZXNzYWdlIHNpemUgZ3Jvd3MgKGEgTE9U KSwgYW5kIG11bHRpLXBhcnQgTUlNRSBpc24ndDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBj bGFzcz0ibGluZW5vIj48L3RkPjwvdHI+DQogICAgICA8dHIgYmdjb2xvcj0iZ3JheSI+PHRkPjwv dGQ+PHRoPjxhIG5hbWU9InBhcnQtbDIwIj48c21hbGw+c2tpcHBpbmcgdG8gY2hhbmdlIGF0PC9z bWFsbD48ZW0+IHBhZ2UgMjMsIGxpbmUgMTQ8L2VtPjwvYT48L3RoPjx0aD4gPC90aD48dGg+PGEg bmFtZT0icGFydC1yMjAiPjxzbWFsbD5za2lwcGluZyB0byBjaGFuZ2UgYXQ8L3NtYWxsPjxlbT4g cGFnZSAxLCBsaW5lIDEwOTY8L2VtPjwvYT48L3RoPjx0ZD48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAg dXNlZCB1bnRpbCB0aGUgY2VydGlmaWNhdGUgbGlmZXRpbWUgZXhwaXJlcyAodHlwaWNhbGx5IHll YXJzKTsgb3I8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICB1c2VkIHVudGlsIHRo ZSBjZXJ0aWZpY2F0ZSBsaWZldGltZSBleHBpcmVzICh0eXBpY2FsbHkgeWVhcnMpOyBvcjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgd291 bGQgcmVxdWlyZSBldmVyeW9uZSB0byBjaGVjayBjZXJ0aWZpY2F0ZSByZXZvY2F0aW9uIGxpc3Rz IChDUkxzKTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHdvdWxkIHJlcXVpcmUg ZXZlcnlvbmUgdG8gY2hlY2sgY2VydGlmaWNhdGUgcmV2b2NhdGlvbiBsaXN0cyAoQ1JMcyk8L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHRo YXQgY2FuIGdyb3cgdmVyeSBsYXJnZSBmb3IgdGhlIFNUSVIgdXNlLWNhc2UuPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgdGhhdCBjYW4gZ3JvdyB2ZXJ5IGxhcmdlIGZvciB0aGUg U1RJUiB1c2UtY2FzZS48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+OS4gT3V0LW9mLWJh bmQgU29sdXRpb24gUXVlc3Rpb25zPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+OS4g T3V0LW9mLWJhbmQgU29sdXRpb24gUXVlc3Rpb25zPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPjkuMS4gV2hhdCBhcmUgdGhlIHByb3Bvc2VkIG91dC1vZi1iYW5kIHNvbHV0aW9ucz88L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij45LjEuIFdoYXQgYXJlIHRoZSBwcm9wb3NlZCBv dXQtb2YtYmFuZCBzb2x1dGlvbnM/PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFRo ZSBvbmx5IGN1cnJlbnRseSBwcm9wb3NlZCBvdXQtb2YtYmFuZCBzb2x1dGlvbiBpcyBbZHJhZnQt b29iXS48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBUaGUgb25seSBjdXJyZW50 bHkgcHJvcG9zZWQgb3V0LW9mLWJhbmQgc29sdXRpb24gaXMgW2RyYWZ0LW9vYl0uPC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBOb3RlIGl0 IGlzIHN0aWxsIGEgd29yayBpbiBwcm9ncmVzcywgYW5kIG9ubHkgYW4gaW5kaXZpZHVhbCBkcmFm dC48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBOb3RlIGl0IGlzIHN0aWxsIGEg d29yayBpbiBwcm9ncmVzcywgYW5kIG9ubHkgYW4gaW5kaXZpZHVhbCBkcmFmdC48L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZD48YSBu YW1lPSJkaWZmMDA1OSI+PC9hPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIFRoZSBXb3JraW5nIEdy b3VwIGhhcyBub3QgZGlzY3Vzc2VkIGl0IHlldCBpbiBkZXRhaWwuPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyYmxvY2siPlRoZSBXb3JraW5nIEdyb3VwIGhhcyBub3QgZGlzY3Vzc2VkIGl0IHll dCBpbiBkZXRhaWwuICA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5JdCBwcm9wb3Nlczwvc3Bhbj48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPnRoYXQg dGhlIHNlbmRlciBlbmNyeXB0IGlkZW50aXR5IGluZm9ybWF0aW9uIGZvciB0aGUgcmVjaXBpZW50 IChzdWNoPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xh c3M9Imluc2VydCI+dGhhdCBvbmx5IHRoZSByZWNpcGllbnQgY2FuIGRlY3J5cHQgaXQpIGFuZCBz dG9yZSBpdCBpbiBhIGRhdGFiYXNlPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJi bG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+c2VsZWN0ZWQgYnkgdGhlIHJlY2lwaWVudC4gIFRo ZSByZWNpcGllbnQgcXVlcmllcyB0aGUgZGF0YWJhc2Ugd2hlbjwvc3Bhbj48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPml0IHJlY2VpdmVzIHRo ZSBjYWxsIGFuZCBvYnRhaW5zIHRoZSBpZGVudGl0eSBpbmZvcm1hdGlvbi4gIFRoZTwvc3Bhbj48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPnBy b3Bvc2FsIGFzc3VtZXMgdGhlIHNlbmRlciBjYW4gcXVlcnkgdGhlIGNyZWRlbnRpYWwgZGF0YWJh c2UgdG88L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFz cz0iaW5zZXJ0Ij5vYnRhaW4gdGhlIHB1YmxpYyBrZXkgb2YgdGhlIHJlY2lwaWVudCBhbmQgdGhl IGlkZW50aXR5IG9mIHRoZTwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2si PjxzcGFuIGNsYXNzPSJpbnNlcnQiPmRhdGFiYXNlIHRvIHN0b3JlIHRoZSBzZW5kZXIncyBpbmZv cm1hdGlvbiBpbi48L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjkuMi4gV2hh dCBhcmUgdGhlIG1ham9yIGFkdmFudGFnZXMgb2YgYW4gb3V0LW9mLWJhbmQgc29sdXRpb24/PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+OS4yLiBXaGF0IGFyZSB0aGUgbWFqb3IgYWR2 YW50YWdlcyBvZiBhbiBvdXQtb2YtYmFuZCBzb2x1dGlvbj88L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+ICAgVGhlIG1ham9yIGFkdmFudGFnZSBpcyBpdCBjYW4gYXZvaWQgY2FycmllcnMs IGF2b2lkIG1pZGRsZWJveGVzLCBhbmQ8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4g ICBUaGUgbWFqb3IgYWR2YW50YWdlIGlzIGl0IGNhbiBhdm9pZCBjYXJyaWVycywgYXZvaWQgbWlk ZGxlYm94ZXMsIGFuZDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+ICAgaXQgd29ya3MgYWNyb3NzIGxlZ2FjeSBTUzcsIElTRE4sIG9yIGFueSBj YWxsIHNpZ25hbGluZyB0ZWNobm9sb2d5LDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PiAgIGl0IHdvcmtzIGFjcm9zcyBsZWdhY3kgU1M3LCBJU0ROLCBvciBhbnkgY2FsbCBzaWduYWxp bmcgdGVjaG5vbG9neSw8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPiAgIGJlY2F1c2UgaXQgaXMgbm90IGNhcnJpZWQgaW4gdGhlIGNhbGwgc2ln bmFsaW5nLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGJlY2F1c2UgaXQgaXMg bm90IGNhcnJpZWQgaW4gdGhlIGNhbGwgc2lnbmFsaW5nLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij45LjMuIFdoYXQgYXJlIHRoZSBtYWpvciBkaXNhZHZhbnRhZ2VzIG9mIGFuIG91dC1v Zi1iYW5kIHNvbHV0aW9uPzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjkuMy4gV2hh dCBhcmUgdGhlIG1ham9yIGRpc2FkdmFudGFnZXMgb2YgYW4gb3V0LW9mLWJhbmQgc29sdXRpb24/ PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFRoZXJlIGFyZSBtYW55LCBwb3RlbnRp YWxseS4gIEJ1dCB1bnRpbCB0aGUgcHJvcG9zYWwgYmVjb21lcyBtb3JlPC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+ICAgVGhlcmUgYXJlIG1hbnksIHBvdGVudGlhbGx5LiAgQnV0IHVu dGlsIHRoZSBwcm9wb3NhbCBiZWNvbWVzIG1vcmU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQg Y2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPg0KICAgICAgPHRyIGJnY29sb3I9ImdyYXkiPjx0ZD48 L3RkPjx0aD48YSBuYW1lPSJwYXJ0LWwyMSI+PHNtYWxsPnNraXBwaW5nIHRvIGNoYW5nZSBhdDwv c21hbGw+PGVtPiBwYWdlIDIzLCBsaW5lIDM4PC9lbT48L2E+PC90aD48dGg+IDwvdGg+PHRoPjxh IG5hbWU9InBhcnQtcjIxIj48c21hbGw+c2tpcHBpbmcgdG8gY2hhbmdlIGF0PC9zbWFsbD48ZW0+ IHBhZ2UgMSwgbGluZSAxMTI3PC9lbT48L2E+PC90aD48dGQ+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAg IGJpYXMuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgYmlhcy48L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+MTAuICBTZWN1cml0eSBDb25zaWRlcmF0aW9uczwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjEwLiAgU2VjdXJpdHkgQ29uc2lkZXJhdGlvbnM8L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgVGhpcyBkb2N1bWVudCBpcyBvbmx5IGEgRkFR LXR5cGUgaW5mb3JtYXRpb25hbCBkb2N1bWVudCwgYW5kIHRodXMgbm88L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij4gICBUaGlzIGRvY3VtZW50IGlzIG9ubHkgYSBGQVEtdHlwZSBpbmZv cm1hdGlvbmFsIGRvY3VtZW50LCBhbmQgdGh1cyBubzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgc2VjdXJpdHkgY29uc2lkZXJhdGlvbnMg YXBwbHkgdG8gdGhlIGRvY3VtZW50IGl0c2VsZi4gIEEgc2VjdXJpdHk8L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij4gICBzZWN1cml0eSBjb25zaWRlcmF0aW9ucyBhcHBseSB0byB0aGUg ZG9jdW1lbnQgaXRzZWxmLiAgQSBzZWN1cml0eTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgZG9jdW1lbnQgd2lsbCBiZSBwcm9kdWNlZCBi eSB0aGUgU1RJUiBXb3JraW5nIEdyb3VwLCBidXQgdGhpczwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmlnaHQiPiAgIGRvY3VtZW50IHdpbGwgYmUgcHJvZHVjZWQgYnkgdGhlIFNUSVIgV29ya2lu ZyBHcm91cCwgYnV0IHRoaXM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxlZnQiPiAgIHNlY3Rpb24gY292ZXJzIHNvbWUgaGlnaC1sZXZlbCBxdWVzdGlv bnMgb3IgY29uY2VybnMgdGhhdCBoYXZlIGJlZW48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij4gICBzZWN0aW9uIGNvdmVycyBzb21lIGhpZ2gtbGV2ZWwgcXVlc3Rpb25zIG9yIGNvbmNl cm5zIHRoYXQgaGF2ZSBiZWVuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsZWZ0Ij4gICByYWlzZWQgZm9yIHRoZSBnZW5lcmFsIGNvbmNlcHQgb2YgU1RJ Ui48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICByYWlzZWQgZm9yIHRoZSBnZW5l cmFsIGNvbmNlcHQgb2YgU1RJUi48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk PjxhIG5hbWU9ImRpZmYwMDYwIj48L2E+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9 ImRlbGV0ZSI+ICAgUXVlc3Rpb25zIHJlbGF0ZWQgdG8gcHJpdmFjeSBhcmUgY292ZXJlZCBpbiBz ZWN0aW9uIDY8L3NwYW4+LjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBj bGFzcz0iaW5zZXJ0Ij5RdWVzdGlvbnMgcmVsYXRlZCB0byBwcml2YWN5IGFyZSBjb3ZlcmVkIGlu IHNlY3Rpb24gNTwvc3Bhbj4uPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjEwLjEuICAg ICBXaGF0IHR5cGVzIG9mIGF0dGFja2VycyBhcmUgd2Ugd29ycmllZCBhYm91dD88L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4xMC4xLiAgICAgV2hhdCB0eXBlcyBvZiBhdHRhY2tlcnMg YXJlIHdlIHdvcnJpZWQgYWJvdXQ/PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFRo ZSBtYWluIGFjdG9ycyB3ZSdyZSB3b3JyaWVkIGFib3V0IGFyZSBtYWxpY2lvdXMgb3JpZ2luYXRv cnMgb2Y8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBUaGUgbWFpbiBhY3RvcnMg d2UncmUgd29ycmllZCBhYm91dCBhcmUgbWFsaWNpb3VzIG9yaWdpbmF0b3JzIG9mPC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBjYWxsIHJl cXVlc3RzIGludG8gdGhlIGV4aXN0aW5nIFBTVE4tdHlwZSBuZXR3b3JrLW9mLXRydXN0LiAgVGhp czwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGNhbGwgcmVxdWVzdHMgaW50byB0 aGUgZXhpc3RpbmcgUFNUTi10eXBlIG5ldHdvcmstb2YtdHJ1c3QuICBUaGlzPC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBpbmNsdWRlcyBt YWxpY2lvdXMgdXNlcnMsIHN1Y2ggYXMgUFJJLXN0eWxlIFNJUCB0cnVuayBjdXN0b21lcnMsPC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgaW5jbHVkZXMgbWFsaWNpb3VzIHVzZXJz LCBzdWNoIGFzIFBSSS1zdHlsZSBTSVAgdHJ1bmsgY3VzdG9tZXJzLDwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgVm9JUCBzdWJzY3JpYmVy cywgYW5kIG92ZXItdGhlLXRvcCBWb0lQIHVzZXJzOyB0aGUgdHlwZSBvZiBhY2Nlc3M8L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBWb0lQIHN1YnNjcmliZXJzLCBhbmQgb3Zlci10 aGUtdG9wIFZvSVAgdXNlcnM7IHRoZSB0eXBlIG9mIGFjY2VzczwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgdGhleSBoYXZlIGRvZXNuJ3Qg bWF0dGVyIGFzIG11Y2ggYXMgdGhhdCB0aGV5IGdlbmVyYXRlIGNhbGxzIGFuZCBhcmU8L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICB0aGV5IGhhdmUgZG9lc24ndCBtYXR0ZXIgYXMg bXVjaCBhcyB0aGF0IHRoZXkgZ2VuZXJhdGUgY2FsbHMgYW5kIGFyZTwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgbm90IHRoZW1zZWx2ZXMg Y2FycmllcnMuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgbm90IHRoZW1zZWx2 ZXMgY2FycmllcnMuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFNvbWUgb3JpZ2lu YXRpbmcgInByb3ZpZGVycyIgYXJlIGtub3duIHRvIGJlIG1hbGljaW91cyBpbiBzb21lIHdheXM8 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBTb21lIG9yaWdpbmF0aW5nICJwcm92 aWRlcnMiIGFyZSBrbm93biB0byBiZSBtYWxpY2lvdXMgaW4gc29tZSB3YXlzPC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBhcyB3ZWxsIC0g bm90IHRvIHRoZWlyIG93biB1c2VycywgYnV0IHRoZXkgYXJlIGtub3dpbmdseSBjb21wbGljaXQ8 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBhcyB3ZWxsIC0gbm90IHRvIHRoZWly IG93biB1c2VycywgYnV0IHRoZXkgYXJlIGtub3dpbmdseSBjb21wbGljaXQ8L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGluIGFsbG93aW5n IHRoZWlyIHVzZXJzIHRvIGdlbmVyYXRlIGZhbHNlIGNhbGxpbmcgbnVtYmVycy4gIE5vdGU8L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBpbiBhbGxvd2luZyB0aGVpciB1c2VycyB0 byBnZW5lcmF0ZSBmYWxzZSBjYWxsaW5nIG51bWJlcnMuICBOb3RlPC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICB0aGVzZSBhcmVuJ3QgcmVn dWxhdGVkIG9yIHRyYWRpdGlvbmFsIGNhcnJpZXJzLCBidXQgcmF0aGVyIG5vbi08L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICB0aGVzZSBhcmVuJ3QgcmVndWxhdGVkIG9yIHRyYWRp dGlvbmFsIGNhcnJpZXJzLCBidXQgcmF0aGVyIG5vbi08L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHRyYWRpdGlvbmFsIHByb3ZpZGVycyBv ZiBvdXRib3VuZCBjYWxsaW5nIHNlcnZpY2UuICBGb3IgZXhhbXBsZSBzb21lPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgdHJhZGl0aW9uYWwgcHJvdmlkZXJzIG9mIG91dGJvdW5k IGNhbGxpbmcgc2VydmljZS4gIEZvciBleGFtcGxlIHNvbWU8L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHNwZWNpYWx0eSBwcm92aWRlcnMg d2l0aCBhIGJ1c2luZXNzIG1vZGVsIG9mIGxldHRpbmcgdGhlaXIgY3VzdG9tZXJzPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgc3BlY2lhbHR5IHByb3ZpZGVycyB3aXRoIGEgYnVz aW5lc3MgbW9kZWwgb2YgbGV0dGluZyB0aGVpciBjdXN0b21lcnM8L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGdlbmVyYXRlIGZha2UgY2Fs bGluZyBudW1iZXJzLCBvc3RlbnNpYmx5IGZvciBub24tbWFsaWNpb3VzPC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+ICAgZ2VuZXJhdGUgZmFrZSBjYWxsaW5nIG51bWJlcnMsIG9zdGVu c2libHkgZm9yIG5vbi1tYWxpY2lvdXM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHB1cnBvc2VzLiAgVGhlIGNvbmNlcm4gaXNuJ3QgdGhh dCB0aGVzZSB0eXBlcyBvZiBwcm92aWRlcnMgYXJlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+ICAgcHVycG9zZXMuICBUaGUgY29uY2VybiBpc24ndCB0aGF0IHRoZXNlIHR5cGVzIG9m IHByb3ZpZGVycyBhcmU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPiAgIGFjdGl2ZSBhdHRhY2tlcnMgdGhlbXNlbHZlcywgYnV0IHJhdGhlciB0 aGF0IHRoZXkgcHVycG9zZWZ1bGx5IHdhbnQ8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij4gICBhY3RpdmUgYXR0YWNrZXJzIHRoZW1zZWx2ZXMsIGJ1dCByYXRoZXIgdGhhdCB0aGV5IHB1 cnBvc2VmdWxseSB3YW50PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAwNjEiPjwvYT48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGJsb2NrIj4gICB0byBlbmFibGUgdW5hdXRob3JpemVkIGNhbGxpbmcgbnVtYmVyIHVzZSBieSB0 aGVpciA8c3BhbiBjbGFzcz0iZGVsZXRlIj5jdXN0b21lcnMuPC9zcGFuPjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmJsb2NrIj50byBlbmFibGUgdW5hdXRob3JpemVkIGNhbGxpbmcgbnVtYmVy IHVzZSBieSB0aGVpciA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5jdXN0b21lcnMgb3IgYXQ8L3NwYW4+ PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2si PjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij5s ZWFzdCBhcmUgd2lsbGluZyB0byB0dXJuIGEgYmxpbmQgZXllIHRvIGl0Ljwvc3Bhbj48L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgV2UgYXJlIGFsc28gd29ycmllZCBhYm91dCBtYWxp Y2lvdXMgcmVjZWl2ZXJzIG9mIGNhbGxzLCBpbmFzbXVjaCBhczwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPiAgIFdlIGFyZSBhbHNvIHdvcnJpZWQgYWJvdXQgbWFsaWNpb3VzIHJlY2Vp dmVycyBvZiBjYWxscywgaW5hc211Y2ggYXM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHRoZXkgbWlnaHQgYmUgYWJsZSB0byBnZW5lcmF0 ZSBuZXcgb3V0Ym91bmQgY2FsbHMgdXNpbmcgU1RJUjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPiAgIHRoZXkgbWlnaHQgYmUgYWJsZSB0byBnZW5lcmF0ZSBuZXcgb3V0Ym91bmQgY2Fs bHMgdXNpbmcgU1RJUjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+ICAgdmVyaWZpY2F0aW9uIGluZm9ybWF0aW9uIGZyb20gY2FsbHMgdGhleSBw cmV2aW91c2x5IHJlY2VpdmVkLiAgRm9yPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ ICAgdmVyaWZpY2F0aW9uIGluZm9ybWF0aW9uIGZyb20gY2FsbHMgdGhleSBwcmV2aW91c2x5IHJl Y2VpdmVkLiAgRm9yPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij4gICBleGFtcGxlLCBpdCBpcyB0cml2aWFsIHRvIGdldCBhIGJhbmsgb3Igb3Ro ZXIgYnVzaW5lc3MgdG8gY2FsbCB5b3U8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4g ICBleGFtcGxlLCBpdCBpcyB0cml2aWFsIHRvIGdldCBhIGJhbmsgb3Igb3RoZXIgYnVzaW5lc3Mg dG8gY2FsbCB5b3U8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPiAgIGJ5IHNpbXBseSBmaWxsaW5nIG91dCBhIHdlYiBmb3JtIGZvciBzYWxlcyBv ciBzZXJ2aWNlIGhlbHA7IGlmIHlvdTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAg IGJ5IHNpbXBseSBmaWxsaW5nIG91dCBhIHdlYiBmb3JtIGZvciBzYWxlcyBvciBzZXJ2aWNlIGhl bHA7IGlmIHlvdTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+ICAgY291bGQgcmUtdXNlIHRoYXQgY2FsbCdzIFNUSVIgaW5mb3JtYXRpb24gdG8g bWFrZSBvdXRib3VuZCBjYWxsczwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGNv dWxkIHJlLXVzZSB0aGF0IGNhbGwncyBTVElSIGluZm9ybWF0aW9uIHRvIG1ha2Ugb3V0Ym91bmQg Y2FsbHM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPiAgIHByZXRlbmRpbmcgdG8gYmUgdGhlIGJhbmssIHRoZW4gdGhhdCB3b3VsZCBiZSBhIHBy b2JsZW0uICBUaGlzIGZvcm08L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBwcmV0 ZW5kaW5nIHRvIGJlIHRoZSBiYW5rLCB0aGVuIHRoYXQgd291bGQgYmUgYSBwcm9ibGVtLiAgVGhp cyBmb3JtPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij4gICBvZiBhdHRhY2sgaXMgY2FsbGVkIGEgY3V0LWFuZC1wYXN0ZSBhdHRhY2suPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgb2YgYXR0YWNrIGlzIGNhbGxlZCBhIGN1dC1h bmQtcGFzdGUgYXR0YWNrLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBXZSBhcmUg bm90IHdvcnJpZWQgYWJvdXQgdHJhbnNpdCBjYXJyaWVycyBiZWluZyBtYWxpY2lvdXMuIFRyYW5z aXQ8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBXZSBhcmUgbm90IHdvcnJpZWQg YWJvdXQgdHJhbnNpdCBjYXJyaWVycyBiZWluZyBtYWxpY2lvdXMuIFRyYW5zaXQ8L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGNhcnJpZXJz IG1heSBiZSBpbmRpZmZlcmVudCBvciBzbG9wcHksIGJ1dCBub3QgYWN0aXZlbHkgbWFsaWNpb3Vz LjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGNhcnJpZXJzIG1heSBiZSBpbmRp ZmZlcmVudCBvciBzbG9wcHksIGJ1dCBub3QgYWN0aXZlbHkgbWFsaWNpb3VzLjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgTGlrZXdpc2Ug dGVybWluYXRpbmcgY2FycmllcnMgKHRoZSBjYXJyaWVycyByZWNlaXZpbmcgY2FsbHMgYW5kPC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgTGlrZXdpc2UgdGVybWluYXRpbmcgY2Fy cmllcnMgKHRoZSBjYXJyaWVycyByZWNlaXZpbmcgY2FsbHMgYW5kPC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBkZWxpdmVyaW5nIHRoZW0g dG8gZW5kIHVzZXJzKSBhcmUgbm90IG1hbGljaW91cywgc2luY2UgdGhleSBhY3Qgb248L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBkZWxpdmVyaW5nIHRoZW0gdG8gZW5kIHVzZXJz KSBhcmUgbm90IG1hbGljaW91cywgc2luY2UgdGhleSBhY3Qgb248L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGJlaGFsZiBvZiB0aGVpciBj dXN0b21lciBzdWJzY3JpYmVycyByZWNlaXZpbmcgdGhlIGNhbGxzLjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPiAgIGJlaGFsZiBvZiB0aGVpciBjdXN0b21lciBzdWJzY3JpYmVycyBy ZWNlaXZpbmcgdGhlIGNhbGxzLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+ PGEgbmFtZT0iZGlmZjAwNjIiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+V2UgaGF2ZSBzb21lIGNv bmNlcm5zIGFib3V0IGNhcnJpZXJzIHRoYXQgZGVsaWJlcmF0ZWx5IGRyb3AgY2FsbGluZzwvc3Bh bj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9j ayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQi PnBhcnR5IG51bWJlciB0byBvYnNjdXJlIHRoZSBzb3VyY2Ugb2YgY2FsbHMgKG9mdGVuIHRvIGF2 b2lkIG1vcmU8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBj bGFzcz0iaW5zZXJ0Ij5leHBlbnNpdmUgdGFyaWZmcykuICBUaGVzZSBhY3Rpb25zIGFyZSBleHBs b2l0YWJsZSBieSBtYWxpY2lvdXM8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJs b2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij5jYWxsZXJzLCBhbmQgb2YgY291cnNlIGFyZSBhIGZv cm0gb2YgZnJhdWQgdGhlbXNlbHZlcy4gIE9mdGVuIHRoZXJlPC9zcGFuPjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+aXMgbW9yZSB0aGFuIG9u ZSBjYXJyaWVyIGluIHRoZSBwYXRoIGJldHdlZW4gdGhlIHRydWUgb3JpZ2luYXRvciBhbmQ8L3Nw YW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxv Y2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0 Ij50aGUgdGVybWluYXRpb24gY2Fycmllci4gIFdlIGRvbid0IHByb3Bvc2UgdG8gcHJvdmlkZSBh bnkgbWV0aG9kcyB0bzwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxz cGFuIGNsYXNzPSJpbnNlcnQiPmRldGVybWluZSBpZiBzb3VyY2UgaWRlbnRpdHkgd2FzIGRyb3Bw ZWQgb24gdGhlIHBhdGggaG93ZXZlciw8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij5hbHRob3VnaCBhcyBtZW50aW9uZWQgcHJldmlv dXNseSwgY2FycmllcnMgY291bGQgc3RhcnQgcmVxdWlyaW5nPC9zcGFuPjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+c291cmNlIGlkZW50aXR5 IGFzIGEgY29uZGl0aW9uIG9mIHBlZXJpbmcuPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJibG9jayI+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgIDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+MTAuMi4gICAgIFdoYXQgYXJlIHRoZSBtYWluIHRo cmVhdHMgd2UgYXJlIHdvcnJpZWQgYWJvdXQ/PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+MTAuMi4gICAgIFdoYXQgYXJlIHRoZSBtYWluIHRocmVhdHMgd2UgYXJlIHdvcnJpZWQgYWJv dXQ/PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFRoZSBhc3N1bXB0aW9ucyBzbyBm YXIgaGF2ZSBiZWVuOjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFRoZSBhc3N1 bXB0aW9ucyBzbyBmYXIgaGF2ZSBiZWVuOjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICBvICBXZSBhcmUgd29ycmllZCBhYm91dCBkZW5p YWwtb2Ytc2VydmljZSAoRG9TKSBhdHRhY2tzLCBvZiBhPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyaWdodCI+ICAgICBvICBXZSBhcmUgd29ycmllZCBhYm91dCBkZW5pYWwtb2Ytc2VydmljZSAo RG9TKSBhdHRhY2tzLCBvZiBhPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAwNjMiPjwvYT48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICAgICAgIGNlcnRhaW4gZm9ybSAoc2Vl IHF1ZXN0aW9uIDEwPC9zcGFuPi4zKTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48 c3BhbiBjbGFzcz0iaW5zZXJ0Ij5jZXJ0YWluIGZvcm0gKHNlZSBxdWVzdGlvbiA5PC9zcGFuPi4z KTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ ICAgICBvICBXZSBhcmUgd29ycmllZCBhYm91dCBjdXQtYW5kLXBhc3RlIGF0dGFja3MsIG9mIGEg Y2VydGFpbiBmb3JtPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICBvICBXZSBh cmUgd29ycmllZCBhYm91dCBjdXQtYW5kLXBhc3RlIGF0dGFja3MsIG9mIGEgY2VydGFpbiBmb3Jt PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQ+PGEgbmFtZT0iZGlmZjAwNjQiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBj bGFzcz0iZGVsZXRlIj4gICAgICAgIChzZWUgcXVlc3Rpb24gMTA8L3NwYW4+LjQpPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPihzZWUgcXVlc3Rp b24gOTwvc3Bhbj4uNCk8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPiAgICAgbyAgV2UgYXJlIG5vdCB3b3JyaWVkIGFib3V0IG9iZnVzY2F0aW9u IGF0dGFja3M8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgIG8gIFdlIGFyZSBu b3Qgd29ycmllZCBhYm91dCBvYmZ1c2NhdGlvbiBhdHRhY2tzPC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgIG8gIFdlIGFyZSBub3Qgd29y cmllZCBhYm91dCBtYW4taW4tdGhlLW1pZGRsZSAoTUlUTSkgYXR0YWNrczwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgbyAgV2UgYXJlIG5vdCB3b3JyaWVkIGFib3V0IG1hbi1p bi10aGUtbWlkZGxlIChNSVRNKSBhdHRhY2tzPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgIG8gIFdlIGFyZSBub3Qgd29ycmllZCBhYm91 dCByZXBsYXkgYXR0YWNrczwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgbyAg V2UgYXJlIG5vdCB3b3JyaWVkIGFib3V0IHJlcGxheSBhdHRhY2tzPC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPiAgIERldGFpbHMgb2YgdGhlIGFib3ZlIGFyZSBkaXNjdXNzZWQgaW4gb3Ro ZXIgcXVlc3Rpb25zIGFuZCBhbnN3ZXJzIGluPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+ICAgRGV0YWlscyBvZiB0aGUgYWJvdmUgYXJlIGRpc2N1c3NlZCBpbiBvdGhlciBxdWVzdGlv bnMgYW5kIGFuc3dlcnMgaW48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxlZnQiPiAgIHRoaXMgZG9jdW1lbnQgc2VjdGlvbi48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij4gICB0aGlzIGRvY3VtZW50IHNlY3Rpb24uPC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxlZnQiPjEwLjMuICAgICBXaGF0IHR5cGVzIG9mIERvUyBhdHRhY2tzIGFyZSB3 ZSB3b3JyaWVkIGFib3V0PzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjEwLjMuICAg ICBXaGF0IHR5cGVzIG9mIERvUyBhdHRhY2tzIGFyZSB3ZSB3b3JyaWVkIGFib3V0PzwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBEZW5pYWwgb2YgU2VydmljZSAoRG9TKSBhdHRhY2tz IGNvbWUgaW4gbWFueSBmb3JtcywgYW5kIGFzIHRoZSBuYW1lPC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+ICAgRGVuaWFsIG9mIFNlcnZpY2UgKERvUykgYXR0YWNrcyBjb21lIGluIG1h bnkgZm9ybXMsIGFuZCBhcyB0aGUgbmFtZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIj48L3RkPjwvdHI+DQogICAgICA8dHIgYmdjb2xvcj0iZ3JheSI+PHRkPjwvdGQ+ PHRoPjxhIG5hbWU9InBhcnQtbDIyIj48c21hbGw+c2tpcHBpbmcgdG8gY2hhbmdlIGF0PC9zbWFs bD48ZW0+IHBhZ2UgMjUsIGxpbmUgNDQ8L2VtPjwvYT48L3RoPjx0aD4gPC90aD48dGg+PGEgbmFt ZT0icGFydC1yMjIiPjxzbWFsbD5za2lwcGluZyB0byBjaGFuZ2UgYXQ8L3NtYWxsPjxlbT4gcGFn ZSAxLCBsaW5lIDEyMzk8L2VtPjwvYT48L3RoPjx0ZD48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgSW4g dGhlIFNUSVIgY29udGV4dCBhIGN1dC1hbmQtcGFzdGUgYXR0YWNrIG1lYW5zIHRoZSBhYmlsaXR5 IHRvPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgSW4gdGhlIFNUSVIgY29udGV4 dCBhIGN1dC1hbmQtcGFzdGUgYXR0YWNrIG1lYW5zIHRoZSBhYmlsaXR5IHRvPC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBjaGFuZ2UgYW55 IG9mIHRoZSBTSVAgbWVzc2FnZSB0aGF0IGlzbid0IHNpZ25lZCwgc3VjaCB0aGF0IHlvdSBjb3Vs ZDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGNoYW5nZSBhbnkgb2YgdGhlIFNJ UCBtZXNzYWdlIHRoYXQgaXNuJ3Qgc2lnbmVkLCBzdWNoIHRoYXQgeW91IGNvdWxkPC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBhdHRhY2sg YW5vdGhlciB0YXJnZXQgd2l0aCB0aGF0IG1lc3NhZ2UgaW4gc29tZSB3YXkuICBTaW5jZSB2ZXJ5 PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgYXR0YWNrIGFub3RoZXIgdGFyZ2V0 IHdpdGggdGhhdCBtZXNzYWdlIGluIHNvbWUgd2F5LiAgU2luY2UgdmVyeTwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgbGl0dGxlIG9mIHRo ZSBTSVAgbWVzc2FnZSBpcyBhY3R1YWxseSBkaWdpdGFsbHkgc2lnbmVkLCBzbyBtdWNoPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgbGl0dGxlIG9mIHRoZSBTSVAgbWVzc2FnZSBp cyBhY3R1YWxseSBkaWdpdGFsbHkgc2lnbmVkLCBzbyBtdWNoPC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBjb3VsZCBiZSBjaGFuZ2VkIHRo YXQgdGhlIGEgY3V0LWFuZC1wYXN0ZSBhdHRhY2sgY2FuIGJlIHZpZXdlZCBhPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgY291bGQgYmUgY2hhbmdlZCB0aGF0IHRoZSBhIGN1dC1h bmQtcGFzdGUgYXR0YWNrIGNhbiBiZSB2aWV3ZWQgYTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgZGlmZmVyZW50IHdheTogY2FuIGFuIGF0 dGFja2VyIHRha2UgdGhlIGRpZ2l0YWxseSBzaWduZWQgU1RJUjwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPiAgIGRpZmZlcmVudCB3YXk6IGNhbiBhbiBhdHRhY2tlciB0YWtlIHRoZSBk aWdpdGFsbHkgc2lnbmVkIFNUSVI8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGluZm9ybWF0aW9uLCBhbmQgcmUtdXNlIGl0IGluIGEgYnJh bmQgbmV3IG1lc3NhZ2Ugb2YgdGhlIGF0dGFja2VyJ3M8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJpZ2h0Ij4gICBpbmZvcm1hdGlvbiwgYW5kIHJlLXVzZSBpdCBpbiBhIGJyYW5kIG5ldyBtZXNz YWdlIG9mIHRoZSBhdHRhY2tlcidzPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBjcmVhdGlvbi48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJpZ2h0Ij4gICBjcmVhdGlvbi48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgSW4g U1RJUiB3ZSBkb24ndCByZWFsbHkgd29ycnkgYWJvdXQgYSBNSVRNIHBlcmZvcm1pbmcgYSBjdXQt YW5kLTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIEluIFNUSVIgd2UgZG9uJ3Qg cmVhbGx5IHdvcnJ5IGFib3V0IGEgTUlUTSBwZXJmb3JtaW5nIGEgY3V0LWFuZC08L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZD48YSBu YW1lPSJkaWZmMDA2NSI+PC9hPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxl dGUiPiAgIHBhc3RlIGF0dGFjayAoc2VlIHF1ZXN0aW9uIDEwPC9zcGFuPi41KSwgYnV0IHJhdGhl ciBhIG1hbGljaW91cyB1c2VyPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFu IGNsYXNzPSJpbnNlcnQiPnBhc3RlIGF0dGFjayAoc2VlIHF1ZXN0aW9uIDk8L3NwYW4+LjUpLCBi dXQgcmF0aGVyIGEgbWFsaWNpb3VzIHVzZXI8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHJlY2VpdmluZyBhIHZhbGlkIFNUSVIgY2FsbCBh bmQgdXNpbmcgdGhhdCBTVElSIGluZm9ybWF0aW9uIHRvPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyaWdodCI+ICAgcmVjZWl2aW5nIGEgdmFsaWQgU1RJUiBjYWxsIGFuZCB1c2luZyB0aGF0IFNU SVIgaW5mb3JtYXRpb24gdG88L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxlZnQiPiAgIHBlcmZvcm0gYW4gYXR0YWNrLiAgV2Uga25vdyB0aGVyZSBhcmUg bWFsaWNpb3VzIHVzZXJzLCBhbmQgd2Uga25vdzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPiAgIHBlcmZvcm0gYW4gYXR0YWNrLiAgV2Uga25vdyB0aGVyZSBhcmUgbWFsaWNpb3VzIHVz ZXJzLCBhbmQgd2Uga25vdzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+ICAgdGhleSBjYW4gZWFzaWx5IGdldCBhIGhpZ2gtdmFsdWUgY2FsbGVy IHRvIGNhbGwgdGhlbTsgZm9yIGV4YW1wbGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij4gICB0aGV5IGNhbiBlYXNpbHkgZ2V0IGEgaGlnaC12YWx1ZSBjYWxsZXIgdG8gY2FsbCB0aGVt OyBmb3IgZXhhbXBsZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+ICAgdGhleSBjb3VsZCBnZXQgYSBiYW5rIG9yIGxhcmdlIGNvcnBvcmF0aW9u IHRvIGNhbGwgdGhlbSBieSBmaWxsaW5nPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ ICAgdGhleSBjb3VsZCBnZXQgYSBiYW5rIG9yIGxhcmdlIGNvcnBvcmF0aW9uIHRvIGNhbGwgdGhl bSBieSBmaWxsaW5nPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij4gICBvdXQgYSB3ZWItZm9ybSBmb3Igc2FsZXMgb3Igc2VydmljZS4gIElmIHRo ZXkgY2FuIHJlLXVzZSB0aGUgU1RJUjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAg IG91dCBhIHdlYi1mb3JtIGZvciBzYWxlcyBvciBzZXJ2aWNlLiAgSWYgdGhleSBjYW4gcmUtdXNl IHRoZSBTVElSPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij4gICBpbmZvcm1hdGlvbiBmcm9tIHRoZSByZWNlaXZlZCBiYW5rIGNhbGwsIHRvIGNh bGwgc29tZW9uZSBlbHNlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgaW5mb3Jt YXRpb24gZnJvbSB0aGUgcmVjZWl2ZWQgYmFuayBjYWxsLCB0byBjYWxsIHNvbWVvbmUgZWxzZTwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAg cHJldGVuZGluZyB0byBiZSB0aGUgYmFuaywgdGhlbiB0aGF0IHdvdWxkIGJlIGEgcHJvYmxlbS48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBwcmV0ZW5kaW5nIHRvIGJlIHRoZSBi YW5rLCB0aGVuIHRoYXQgd291bGQgYmUgYSBwcm9ibGVtLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij4gICBUaGUgYmlnZ2VzdCBjb25jZXJuIGlkZW50aWZpZWQgdGh1cyBmYXIgaXMgYSBj dXQtYW5kLXBhc3RlIGF0dGFjazwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFRo ZSBiaWdnZXN0IGNvbmNlcm4gaWRlbnRpZmllZCB0aHVzIGZhciBpcyBhIGN1dC1hbmQtcGFzdGUg YXR0YWNrPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij4gICB3aGVyZWJ5IHRoZSBtYWxpY2lvdXMgcmVjZWl2ZXIgb2YgYSBjYWxsIHJlLXVzZXMg dGhlIFNUSVI8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICB3aGVyZWJ5IHRoZSBt YWxpY2lvdXMgcmVjZWl2ZXIgb2YgYSBjYWxsIHJlLXVzZXMgdGhlIFNUSVI8L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPg0KICAgICAgPHRyIGJnY29s b3I9ImdyYXkiPjx0ZD48L3RkPjx0aD48YSBuYW1lPSJwYXJ0LWwyMyI+PHNtYWxsPnNraXBwaW5n IHRvIGNoYW5nZSBhdDwvc21hbGw+PGVtPiBwYWdlIDMwLCBsaW5lIDI4PC9lbT48L2E+PC90aD48 dGg+IDwvdGg+PHRoPjxhIG5hbWU9InBhcnQtcjIzIj48c21hbGw+c2tpcHBpbmcgdG8gY2hhbmdl IGF0PC9zbWFsbD48ZW0+IHBhZ2UgMSwgbGluZSAxNDY2PC9lbT48L2E+PC90aD48dGQ+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgVGhlIFdlYi1Q S0kncyBjZXJ0aWZpY2F0ZXMgYXJlIHNpZ25lZCBieSAidHJ1c3RlZCIgQ0FzLCB3aGljaCBhcmU8 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBUaGUgV2ViLVBLSSdzIGNlcnRpZmlj YXRlcyBhcmUgc2lnbmVkIGJ5ICJ0cnVzdGVkIiBDQXMsIHdoaWNoIGFyZTwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgbWVyZWx5IGNvbXBh bmllcyBvciBvcmdhbml6YXRpb25zIHRoYXQgbW9zdCBvdGhlciBlbnRpdGllcyB0cnVzdCB0bzwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIG1lcmVseSBjb21wYW5pZXMgb3Igb3Jn YW5pemF0aW9ucyB0aGF0IG1vc3Qgb3RoZXIgZW50aXRpZXMgdHJ1c3QgdG88L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHByYWN0aWNlIGdv b2QgcG9saWNpZXMgZm9yIHRoZSBkb21haW4gbmFtZXMgdGhleSBzaWduIGNlcnRpZmljYXRlczwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHByYWN0aWNlIGdvb2QgcG9saWNpZXMg Zm9yIHRoZSBkb21haW4gbmFtZXMgdGhleSBzaWduIGNlcnRpZmljYXRlczwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgZm9yLiAgW1JGQzM2 NDddIGRlZmluZXMgc29tZSBwcmFjdGljZXMgdGhleSBzaG91bGQgZm9sbG93LCBidXQgdGhlPC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgZm9yLiAgW1JGQzM2NDddIGRlZmluZXMg c29tZSBwcmFjdGljZXMgdGhleSBzaG91bGQgZm9sbG93LCBidXQgdGhlPC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBJRVRGIGRvZXMgbm90 IGF1ZGl0IG9yIHBvbGljZSB0aGUgQ0FzIHRvIGZvbGxvdyB0aGUgcHJhY3RpY2VzLjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIElFVEYgZG9lcyBub3QgYXVkaXQgb3IgcG9saWNl IHRoZSBDQXMgdG8gZm9sbG93IHRoZSBwcmFjdGljZXMuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPiAgIFRoZXJlIGFyZSBhcHByb3hpbWF0ZWx5IDE2MCB0cnVzdGVkIENBcyBhcm91bmQg dGhlIFdvcmxkIHRoYXQgbWFueTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFRo ZXJlIGFyZSBhcHByb3hpbWF0ZWx5IDE2MCB0cnVzdGVkIENBcyBhcm91bmQgdGhlIFdvcmxkIHRo YXQgbWFueTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+ICAgcG9wdWxhciB3ZWIgYnJvd3NlcnMgdHJ1c3QgYW5kIGluY2x1ZGUgdGhlIHJvb3Qg Y2VydGlmaWNhdGVzIGZvci48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBwb3B1 bGFyIHdlYiBicm93c2VycyB0cnVzdCBhbmQgaW5jbHVkZSB0aGUgcm9vdCBjZXJ0aWZpY2F0ZXMg Zm9yLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+ICAgVGhlcmUgaGF2ZSwgaG93ZXZlciwgYmVlbiBwcm9ibGVtcyB3aXRoIHRoZSBXZWItUEtJ IG1vZGVsLiAgU2VlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgVGhlcmUgaGF2 ZSwgaG93ZXZlciwgYmVlbiBwcm9ibGVtcyB3aXRoIHRoZSBXZWItUEtJIG1vZGVsLiAgU2VlPC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQ+PGEgbmFtZT0iZGlmZjAwNjYiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFz cz0iZGVsZXRlIj4gICBxdWVzdGlvbiAxMTwvc3Bhbj4uNi48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+cXVlc3Rpb24gMTA8L3NwYW4+LjYuPC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjExLjYuICAgICBXaGF0IGlzIHdyb25nIHdpdGgg dGhlIFdlYi1QS0k/PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+MTEuNi4gICAgIFdo YXQgaXMgd3Jvbmcgd2l0aCB0aGUgV2ViLVBLST88L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+ICAgVGhlIHRlY2hub2xvZ3kgb2YgWC41MDktYmFzZWQgZGlnaXRhbCBjZXJ0aWZpY2F0ZXMg aXMgc291bmQsIGJ1dCB0aGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBUaGUg dGVjaG5vbG9neSBvZiBYLjUwOS1iYXNlZCBkaWdpdGFsIGNlcnRpZmljYXRlcyBpcyBzb3VuZCwg YnV0IHRoZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+ICAgd2F5IHRoZXkncmUgdXNlZCBpbiBXZWItUEtJIGhhcyBiZWVuIHNob3duIHRvIGJl IGRhbmdlcm91cy4gIElzc3VlczwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHdh eSB0aGV5J3JlIHVzZWQgaW4gV2ViLVBLSSBoYXMgYmVlbiBzaG93biB0byBiZSBkYW5nZXJvdXMu ICBJc3N1ZXM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPiAgIGhhdmUgb2NjdXJyZWQgZHVlIHRvIGNvbXByb21pc2VkIENlcnRpZmljYXRlIEF1 dGhvcml0aWVzIGFuZCB0aGVpcjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGhh dmUgb2NjdXJyZWQgZHVlIHRvIGNvbXByb21pc2VkIENlcnRpZmljYXRlIEF1dGhvcml0aWVzIGFu ZCB0aGVpcjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+ICAgaW1wYWN0IG9uIGFsbCBkb21haW4gbmFtZXMuICBUaGUgbW9zdCBmYW1vdXMgZXhh bXBsZSBvZiB0aGlzIGlzIHRoZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGlt cGFjdCBvbiBhbGwgZG9tYWluIG5hbWVzLiAgVGhlIG1vc3QgZmFtb3VzIGV4YW1wbGUgb2YgdGhp cyBpcyB0aGU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPiAgIGZvcm1lciBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgRGlnaU5vdGFyLjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGZvcm1lciBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkg RGlnaU5vdGFyLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBDZXJ0aWZpY2F0ZSBB dXRob3JpdGllcyBhcmUgbm90IHRoZW1zZWx2ZXMgYXV0aG9yaXRhdGl2ZSBmb3IgZG9tYWluPC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgQ2VydGlmaWNhdGUgQXV0aG9yaXRpZXMg YXJlIG5vdCB0aGVtc2VsdmVzIGF1dGhvcml0YXRpdmUgZm9yIGRvbWFpbjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgbmFtZXMgb3IgYW55 IHBvcnRpb24gb2YgdGhlIGRvbWFpbiBuYW1lIHNwYWNlLCB0aGVyZWZvcmUgYW55IHRydXN0ZWQ8 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBuYW1lcyBvciBhbnkgcG9ydGlvbiBv ZiB0aGUgZG9tYWluIG5hbWUgc3BhY2UsIHRoZXJlZm9yZSBhbnkgdHJ1c3RlZDwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgQ0EgY2FuIHNp Z24gYSBjZXJ0aWZpY2F0ZSBmb3IgYW55IGRvbWFpbiBuYW1lIHdoYXRzb2V2ZXIsIGFuZDwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIENBIGNhbiBzaWduIGEgY2VydGlmaWNhdGUg Zm9yIGFueSBkb21haW4gbmFtZSB3aGF0c29ldmVyLCBhbmQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGV2ZXJ5b25lIG11c3QgYmxpbmRs eSB0cnVzdCB0aGVpciB2YWxpZGl0eS4gIEEgbWFsaWNpb3VzIENBIG9yIGFuPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgZXZlcnlvbmUgbXVzdCBibGluZGx5IHRydXN0IHRoZWly IHZhbGlkaXR5LiAgQSBtYWxpY2lvdXMgQ0Egb3IgYW48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGF0dGFja2VyIHRoYXQgaGFzIGEgQ0En cyBzaWduaW5nIHByaXZhdGUga2V5IGNhbiBnZW5lcmF0ZSBhIGRpZ2l0YWw8L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBhdHRhY2tlciB0aGF0IGhhcyBhIENBJ3Mgc2lnbmluZyBw cml2YXRlIGtleSBjYW4gZ2VuZXJhdGUgYSBkaWdpdGFsPC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBjZXJ0aWZpY2F0ZSBjbGFpbWluZyB0 byBiZSBhbnkgZG9tYWluIG5hbWUgYXQgYWxsLCBldmVuIGZvciBuYW1lczwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPiAgIGNlcnRpZmljYXRlIGNsYWltaW5nIHRvIGJlIGFueSBkb21h aW4gbmFtZSBhdCBhbGwsIGV2ZW4gZm9yIG5hbWVzPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICB0aGUgQ0EgbmV2ZXIgcHJldmlvdXNseSBz aWduZWQgZm9yLiAgVGhpcyBtZWFucyB0aGF0IHRoZSBjb21wcm9taXNlPC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+ICAgdGhlIENBIG5ldmVyIHByZXZpb3VzbHkgc2lnbmVkIGZvci4g IFRoaXMgbWVhbnMgdGhhdCB0aGUgY29tcHJvbWlzZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgb2Ygb25lIENBIGltcGFjdHMgZXZlcnlv bmU7IGV2ZW4gb3JnYW5pemF0aW9ucyB0aGF0IGRvIG5vdCBhbmQgaGF2ZTwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPiAgIG9mIG9uZSBDQSBpbXBhY3RzIGV2ZXJ5b25lOyBldmVuIG9y Z2FuaXphdGlvbnMgdGhhdCBkbyBub3QgYW5kIGhhdmU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIG5ldmVyIHRydXN0ZWQgdGhlIENBLjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIG5ldmVyIHRydXN0ZWQgdGhlIENBLjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAwNjciPjwv YT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBUbyBhZGRyZXNzIHRoaXMgcHJvYmxlbSwgdGhlIElF VEYgaGFzIGRlZmluZWQgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+REFORSBpbiBbUkZDNjY5OF0sPC9z cGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj5UbyBhZGRyZXNzIHRoaXMgcHJv YmxlbSwgdGhlIElFVEYgaGFzIGRlZmluZWQgPHNwYW4gY2xhc3M9Imluc2VydCI+REFORSw8L3Nw YW4+IHdoaWNoIHB1dHMgdGhlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsYmxvY2siPiAgIHdoaWNoIHB1dHMgdGhlIFdlYi1QS0kgY2VydGlmaWNhdGVz IGluIEROUywgaW4gdGhlIEROUyBkb21haW4gbmFtZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmJsb2NrIj5XZWItUEtJIGNlcnRpZmljYXRlcyBpbiBETlMsIGluIHRoZSBETlMgZG9tYWluIG5h bWUgZW50cnkgdGhhdCB0aGU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxibG9jayI+ICAgZW50cnkgdGhhdCB0aGUgY2VydGlmaWNhdGUgY2xhaW1zIHRv IGJpbmQgdG8gYSBwdWJsaWMga2V5LiAgU2luY2U8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJi bG9jayI+Y2VydGlmaWNhdGUgY2xhaW1zIHRvIGJpbmQgdG8gYSBwdWJsaWMga2V5LiAgU2luY2Ug RE5TIGlzIHRoZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGJsb2NrIj4gICBETlMgaXMgdGhlIGF1dGhvcml0eSBmb3IgZG9tYWluIG5hbWVzLCBhbmQg YnkgdmlydHVlIG9mIGl0czwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj5hdXRob3Jp dHkgZm9yIGRvbWFpbiBuYW1lcywgYW5kIGJ5IHZpcnR1ZSBvZiBpdHMgc3RydWN0dXJlIGl0PC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAg IHN0cnVjdHVyZSBpdCBwcm92aWRlcyBhIHdheSB0byBzY29wZSBvciByZXN0cmljdCB0aGUgbmFt ZXMgYmVpbmc8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+cHJvdmlkZXMgYSB3YXkg dG8gc2NvcGUgb3IgcmVzdHJpY3QgdGhlIG5hbWVzIGJlaW5nIGNsYWltZWQsIHRoZTwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBjbGFp bWVkLCB0aGUgcHJvYmxlbXMgYSBjb21wcm9taXNlZCBDQSBvciBETlMgcmVnaXN0cmFyIGNvdWxk IGNyZWF0ZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj5wcm9ibGVtcyBhIGNvbXBy b21pc2VkIENBIG9yIEROUyByZWdpc3RyYXIgY291bGQgY3JlYXRlIGFyZSBsaW1pdGVkLjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBh cmUgbGltaXRlZC4gVXNpbmcgRE5TU0VDIHRvIHNpZ24gdGhlIEROUyBkb21haW4gZW50cmllcyBj b3VsZDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj5Vc2luZyBETlNTRUMgdG8gc2ln biB0aGUgRE5TIGRvbWFpbiBlbnRyaWVzIGNvdWxkIGFyZ3VhYmx5IHJlbW92ZTwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBhcmd1YWJs eSByZW1vdmUgdGhlIG5lZWQgZm9yIENBcyBhbHRvZ2V0aGVyIHNvbWVkYXkuICBVc2luZyBib3Ro LDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj50aGUgbmVlZCBmb3IgQ0FzIGFsdG9n ZXRoZXIgc29tZWRheS4gIFVzaW5nIGJvdGgsIGhvd2V2ZXIsIHByb3ZpZGVzPC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIGhvd2V2ZXIs IHByb3ZpZGVzIGEgdHdvLWZhY3RvciBhdXRoZW50aWNhdGlvbiBtb2RlbCwgc2luY2UgYm90aCB0 aGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+YSB0d28tZmFjdG9yIGF1dGhlbnRp Y2F0aW9uIG1vZGVsLCBzaW5jZSBib3RoIHRoZSBETlMgYW5kIGEgdHJ1c3RlZDwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBETlMgYW5k IGEgdHJ1c3RlZCBDQSB3b3VsZCBuZWVkIHRvIGJlIGNvbXByb21pc2VkLjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmJsb2NrIj5DQSB3b3VsZCBuZWVkIHRvIGJlIGNvbXByb21pc2VkLjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBGb3IgU1RJUiwgdGhlIFdlYi1QS0kgbW9kZWwn cyBwcm9ibGVtcyBhcmUgb25seSBhIGNvbmNlcm4gaWYgYW55IENBPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+ICAgRm9yIFNUSVIsIHRoZSBXZWItUEtJIG1vZGVsJ3MgcHJvYmxlbXMg YXJlIG9ubHkgYSBjb25jZXJuIGlmIGFueSBDQTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgaXMgYWxsb3dlZCB0byBjbGFpbSBhbnkgcGhv bmUgbnVtYmVyLiAgSXQgaXMgYXNzdW1lZCB0aGF0IHRoaXMgd291bGQ8L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij4gICBpcyBhbGxvd2VkIHRvIGNsYWltIGFueSBwaG9uZSBudW1iZXIu ICBJdCBpcyBhc3N1bWVkIHRoYXQgdGhpcyB3b3VsZDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgbm90IGJlIHBvc3NpYmxlOyBpbnN0ZWFk LCBhIGNlcnRpZmljYXRlIGRlbGVnYXRpb24gY2hhaW4gd291bGQgYmU8L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij4gICBub3QgYmUgcG9zc2libGU7IGluc3RlYWQsIGEgY2VydGlmaWNh dGUgZGVsZWdhdGlvbiBjaGFpbiB3b3VsZCBiZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgdXNlZCB3aGVyZWJ5IGEgbmF0aW9uYWwgbnVt YmVyaW5nIGF1dGhvcml0eSB3b3VsZCBvbmx5IGRlbGVnYXRlPC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+ICAgdXNlZCB3aGVyZWJ5IGEgbmF0aW9uYWwgbnVtYmVyaW5nIGF1dGhvcml0 eSB3b3VsZCBvbmx5IGRlbGVnYXRlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBzcGVjaWZpYyBDQXMgdG8gYmUgYWJsZSB0byBzaWduIGZv ciBzcGVjaWZpYyBwaG9uZSBudW1iZXJzIG9yPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+ICAgc3BlY2lmaWMgQ0FzIHRvIGJlIGFibGUgdG8gc2lnbiBmb3Igc3BlY2lmaWMgcGhvbmUg bnVtYmVycyBvcjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+ICAgcmFuZ2VzLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHJh bmdlcy48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+MTEuNy4gICAgIFdoYXQgaXMgYW4g UlBLST88L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4xMS43LiAgICAgV2hhdCBpcyBh biBSUEtJPzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4NCiAgICAgIDx0ciBiZ2NvbG9yPSJn cmF5Ij48dGQ+PC90ZD48dGg+PGEgbmFtZT0icGFydC1sMjQiPjxzbWFsbD5za2lwcGluZyB0byBj aGFuZ2UgYXQ8L3NtYWxsPjxlbT4gcGFnZSAzMSwgbGluZSAzOTwvZW0+PC9hPjwvdGg+PHRoPiA8 L3RoPjx0aD48YSBuYW1lPSJwYXJ0LXIyNCI+PHNtYWxsPnNraXBwaW5nIHRvIGNoYW5nZSBhdDwv c21hbGw+PGVtPiBwYWdlIDEsIGxpbmUgMTUyNjwvZW0+PC9hPjwvdGg+PHRkPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij4gICBXZWItUEtJIHR5cGUgY2VydGlmaWNhdGVzLjwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPiAgIFdlYi1QS0kgdHlwZSBjZXJ0aWZpY2F0ZXMuPC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxlZnQiPiAgIEZvciBTVElSLCBzdWNoIGEgbW9kZWwgY291bGQgYmUgZW1wbG95 ZWQgd2hlcmUgdGhlICJyZXNvdXJjZXMiIGFyZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPiAgIEZvciBTVElSLCBzdWNoIGEgbW9kZWwgY291bGQgYmUgZW1wbG95ZWQgd2hlcmUgdGhl ICJyZXNvdXJjZXMiIGFyZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+ICAgRS4xNjQgbnVtYmVycyBvciByYW5nZXMuICBUaGUgc3BlY2lmaWNz IG9mIGhvdyB0aGUgUlBLSSBpcyBtYW5hZ2VkPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+ICAgRS4xNjQgbnVtYmVycyBvciByYW5nZXMuICBUaGUgc3BlY2lmaWNzIG9mIGhvdyB0aGUg UlBLSSBpcyBtYW5hZ2VkPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij4gICBhbmQgZGVwbG95ZWQgZm9yIEJHUCB1c2luZyBSU1lOQywgaG93ZXZl ciwgbWlnaHQgbm90IG1ha2Ugc2Vuc2UgZm9yPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+ICAgYW5kIGRlcGxveWVkIGZvciBCR1AgdXNpbmcgUlNZTkMsIGhvd2V2ZXIsIG1pZ2h0IG5v dCBtYWtlIHNlbnNlIGZvcjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+ICAgU1RJUi48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4g ICBTVElSLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4xMS44LiAgICAgV2hhdCBpcyBE S0lNPzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjExLjguICAgICBXaGF0IGlzIERL SU0/PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIERvbWFpbktleXMgSWRlbnRpZmll ZCBNYWlsIChES0lNKSBpcyBhIGZvcm0gb2YgUEtJIHVzZWQgZm9yPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+ICAgRG9tYWluS2V5cyBJZGVudGlmaWVkIE1haWwgKERLSU0pIGlzIGEg Zm9ybSBvZiBQS0kgdXNlZCBmb3I8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDA2OCI+PC9hPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsYmxvY2siPiAgIHZlcmlmeWluZyBzb3VyY2UgZG9tYWluIG5hbWVzIGluIHJlY2VpdmVk IGVtYWlsIDxzcGFuIGNsYXNzPSJkZWxldGUiPm1lc3NhZ2VzLCBiYXNlZCBvbjwvc3Bhbj48L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+dmVyaWZ5aW5nIHNvdXJjZSBkb21haW4gbmFt ZXMgaW4gcmVjZWl2ZWQgZW1haWwgPHNwYW4gY2xhc3M9Imluc2VydCI+bWVzc2FnZXMuPC9zcGFu PiAgSXQgaXMgbm90PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgIFtSRkM2Mzc2XS48L3NwYW4+ICBJ dCBpcyBub3QgdHlwaWNhbGx5IGRlc2NyaWJlZCBhcyBhIFBLSSwgYnV0IGZvciBhbGw8L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+dHlwaWNhbGx5IGRlc2NyaWJlZCBhcyBhIFBLSSwg YnV0IGZvciBhbGwgaW50ZW50cyBhbmQgcHVycG9zZXMgaXQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgaW50ZW50cyBhbmQgcHVycG9z ZXMgaXQgZGVmaW5lcyBvbmUuICBJbnN0ZWFkIG9mIHVzaW5nIFguNTA5IGRpZ2l0YWw8L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ZGVmaW5lcyBvbmUuICBJbnN0ZWFkIG9mIHVzaW5n IFguNTA5IGRpZ2l0YWwgY2VydGlmaWNhdGVzLCBES0lNPC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIGNlcnRpZmljYXRlcywgREtJTSBz aW1wbHkgcHV0cyB0aGUgcHVibGljIGtleXMgaW4gRE5TLCBpbiB0aGUgRE5TPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyYmxvY2siPnNpbXBseSBwdXRzIHRoZSBwdWJsaWMga2V5cyBpbiBETlMs IGluIHRoZSBETlMgZG9tYWluIG5hbWUgZW50cmllczwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBkb21haW4gbmFtZSBlbnRyaWVzIHRo ZSBwdWJsaWMga2V5IGlzIHVzZWQgZm9yLiAgSW4gdGhpcyB3YXksIGl0PC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyYmxvY2siPnRoZSBwdWJsaWMga2V5IGlzIHVzZWQgZm9yLiAgSW4gdGhpcyB3 YXksIGl0IHByb3ZpZGVzIGEgYmluZGluZyBvZjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBwcm92aWRlcyBhIGJpbmRpbmcgb2YgZW1h aWwgc291cmNlIGRvbWFpbiBuYW1lIHRvIGEgcHVibGljIGtleS48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJibG9jayI+ZW1haWwgc291cmNlIGRvbWFpbiBuYW1lIHRvIGEgcHVibGljIGtleS48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgVGhlICJDZXJ0aWZpY2F0ZSBBdXRob3Jp dHkiIGlzIHRoZSBETlMgaXRzZWxmLCB3aXRoIGEgY2hhaW4gb2YgdHJ1c3Q8L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBUaGUgIkNlcnRpZmljYXRlIEF1dGhvcml0eSIgaXMgdGhl IEROUyBpdHNlbGYsIHdpdGggYSBjaGFpbiBvZiB0cnVzdDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgZGVsZWdhdGlvbiBiYXNlZCBvbiB0 aGUgRE5TIGRlbGVnYXRpb24gaGllcmFyY2h5LiAgRm9yIGV4YW1wbGUsIGlmPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgZGVsZWdhdGlvbiBiYXNlZCBvbiB0aGUgRE5TIGRlbGVn YXRpb24gaGllcmFyY2h5LiAgRm9yIGV4YW1wbGUsIGlmPC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICB5b3UgcmVjZWl2ZSBhbiBlbWFpbCBm cm9tICJhbGljZUBleGFtcGxlLmNvbSIgc2lnbmVkIHVzaW5nIERLSU0sPC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+ICAgeW91IHJlY2VpdmUgYW4gZW1haWwgZnJvbSAiYWxpY2VAZXhh bXBsZS5jb20iIHNpZ25lZCB1c2luZyBES0lNLDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgdGhlcmUgd2lsbCBiZSBhIHB1YmxpYyBrZXkg aW4gdGhlIEROUyBlbnRyeSBmb3IgJ2V4YW1wbGUuY29tJzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmlnaHQiPiAgIHRoZXJlIHdpbGwgYmUgYSBwdWJsaWMga2V5IGluIHRoZSBETlMgZW50cnkg Zm9yICdleGFtcGxlLmNvbSc8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxlZnQiPiAgICh0ZWNobmljYWxseSBpdCdzIGluICcmbHQ7c2VsZWN0b3ImZ3Q7 Ll9kb21haW5rZXkuZXhhbXBsZS5jb20nIGJ1dCB0aGF0J3M8L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij4gICAodGVjaG5pY2FsbHkgaXQncyBpbiAnJmx0O3NlbGVjdG9yJmd0Oy5fZG9t YWlua2V5LmV4YW1wbGUuY29tJyBidXQgdGhhdCdzPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBub3QgaW1wb3J0YW50IGZvciB0aGlzIHNp bXBsZSBleHBsYW5hdGlvbikuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgbm90 IGltcG9ydGFudCBmb3IgdGhpcyBzaW1wbGUgZXhwbGFuYXRpb24pLjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij4gICBUeXBpY2FsbHkgREtJTSBpcyBkZXBsb3llZCB3aXRoIGp1c3Qgbm9y bWFsIEROUyByZWNvcmRzLCBhbmQgRE5TU0VDPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+ICAgVHlwaWNhbGx5IERLSU0gaXMgZGVwbG95ZWQgd2l0aCBqdXN0IG5vcm1hbCBETlMgcmVj b3JkcywgYW5kIEROU1NFQzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+ICAgaXMgbm90IHJlcXVpcmVkLiAgRE5TIGlzIHN1c2NlcHRpYmxlIHRv IGZvcmdlZCBhbnN3ZXJzLCBob3dldmVyLCBzbzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPiAgIGlzIG5vdCByZXF1aXJlZC4gIEROUyBpcyBzdXNjZXB0aWJsZSB0byBmb3JnZWQgYW5z d2VycywgaG93ZXZlciwgc288L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48L3RyPg0KICAgICAgPHRyIGJnY29sb3I9ImdyYXkiPjx0ZD48L3RkPjx0aD48YSBu YW1lPSJwYXJ0LWwyNSI+PHNtYWxsPnNraXBwaW5nIHRvIGNoYW5nZSBhdDwvc21hbGw+PGVtPiBw YWdlIDMzLCBsaW5lIDIwPC9lbT48L2E+PC90aD48dGg+IDwvdGg+PHRoPjxhIG5hbWU9InBhcnQt cjI1Ij48c21hbGw+c2tpcHBpbmcgdG8gY2hhbmdlIGF0PC9zbWFsbD48ZW0+IHBhZ2UgMSwgbGlu ZSAxNjA0PC9lbT48L2E+PC90aD48dGQ+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+MTEuMTAuICAgIFdoaWNoIHNlY3VyaXR5IG1vZGVsIGlzIFNUSVIg Z29pbmcgdG8gdXNlPzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjExLjEwLiAgICBX aGljaCBzZWN1cml0eSBtb2RlbCBpcyBTVElSIGdvaW5nIHRvIHVzZT88L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+ICAgVGhpcyBpcyBzdGlsbCBiZWluZyBkaXNjdXNzZWQuICBUaGVyZSBh cmUgYmVuZWZpdHMgYW5kIGRyYXdiYWNrcyBmb3I8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij4gICBUaGlzIGlzIHN0aWxsIGJlaW5nIGRpc2N1c3NlZC4gIFRoZXJlIGFyZSBiZW5lZml0 cyBhbmQgZHJhd2JhY2tzIGZvcjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+ICAgZWFjaCBwcm9wb3NlZCBzb2x1dGlvbiwgYW5kIG1hbnkgZmFj dG9ycyB0byBjb25zaWRlci4gIFNvbWUgb2YgdGhlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+ICAgZWFjaCBwcm9wb3NlZCBzb2x1dGlvbiwgYW5kIG1hbnkgZmFjdG9ycyB0byBjb25z aWRlci4gIFNvbWUgb2YgdGhlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsZWZ0Ij4gICB2YXJpYWJsZXMgaW52b2x2ZSBub24tdGVjaG5pY2FsIGlzc3Vl cywgc3VjaCBhcyBlYXNlIG9mIGFkb3B0aW9uIGZvcjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPiAgIHZhcmlhYmxlcyBpbnZvbHZlIG5vbi10ZWNobmljYWwgaXNzdWVzLCBzdWNoIGFz IGVhc2Ugb2YgYWRvcHRpb24gZm9yPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBjYXJyaWVycyB2cy4gZWFzZSBvZiBhZG9wdGlvbiBmb3Ig ZW5kIHVzZXIgZGV2aWNlcyBzdWNoIGFzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ ICAgY2FycmllcnMgdnMuIGVhc2Ugb2YgYWRvcHRpb24gZm9yIGVuZCB1c2VyIGRldmljZXMgc3Vj aCBhczwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+ICAgc21hcnRwaG9uZXM7IG9yIGlzc3VlcyByZWdhcmRpbmcgdGhlIGRpZmZlcmVudCB2ZW5k b3I8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBzbWFydHBob25lczsgb3IgaXNz dWVzIHJlZ2FyZGluZyB0aGUgZGlmZmVyZW50IHZlbmRvcjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgaW1wbGVtZW50YXRpb25zIHRoYXQg bWlnaHQgcGVyZm9ybSBTVElSLCBhcyB3ZWxsIGFzIG1hcmtldCBmb3JjZXMuPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgaW1wbGVtZW50YXRpb25zIHRoYXQgbWlnaHQgcGVyZm9y bSBTVElSLCBhcyB3ZWxsIGFzIG1hcmtldCBmb3JjZXMuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDA2OSI+PC9hPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2si PjEyLjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgR2xvc3Nhcjwvc3Bhbj55PC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyYmxvY2siPjEyLjxzcGFuIGNsYXNzPSJpbnNlcnQiPglUZXJtaW5vbG9nPC9z cGFuPnk8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYw MDcwIj48L2E+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgVGhlIGZvbGxvd2luZyB0ZXJtaW5vbG9n eSBkZWZpbml0aW9ucyBhcmUgZW1wbG95ZWQgaW4gdGhpcyA8c3BhbiBjbGFzcz0iZGVsZXRlIj5k b2N1bWVudDwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+VGhlIDxzcGFu IGNsYXNzPSJpbnNlcnQiPmtleSB3b3JkcyAiTVVTVCIsICJNVVNUIE5PVCIsICJSRVFVSVJFRCIs ICJTSEFMTCIsICJTSEFMTCBOT1QiLDwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgYW5k IGluIHRoZSBTVElSIFdvcmtpbmcgR3JvdXAuPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4iU0hPVUxEIiwgIlNIT1VMRCBOT1QiLCAi UkVDT01NRU5ERUQiLCAiTUFZIiwgYW5kICJPUFRJT05BTCIgaW4gdGhpczwvc3Bhbj48L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPmRvY3VtZW50 IGFyZSB0byBiZSBpbnRlcnByZXRlZCBhcyBkZXNjcmliZWQgaW4gUkZDIDIxMTkuICBUaGU8L3Nw YW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxv Y2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0 Ij50ZXJtaW5vbG9neSBpbiB0aGlzIGRvY3VtZW50IGNvbmZvcm1zIHRvIFJGQyAyODI4LCAiSW50 ZXJuZXQ8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFz cz0iaW5zZXJ0Ij5TZWN1cml0eSBHbG9zc2FyeSIuPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+PC9zcGFuPjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+VGhlPC9zcGFuPiBmb2xs b3dpbmcgPHNwYW4gY2xhc3M9Imluc2VydCI+c2VjdXJpdHkgYW5kIFNJUDwvc3Bhbj4gdGVybWlu b2xvZ3kgZGVmaW5pdGlvbnMgYXJlIGVtcGxveWVkPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmJsb2NrIj5pbiB0aGlzIDxzcGFuIGNsYXNzPSJpbnNlcnQiPmRvY3VtZW50Ljwvc3Bhbj48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgQXR0YWNrIC0gQW4gYXR0YWNrIGlzIGFuIGFj dGlvbiB0aGF0IGF0dGVtcHRzIHRvIHZpb2xhdGUgdGhlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyaWdodCI+ICAgQXR0YWNrIC0gQW4gYXR0YWNrIGlzIGFuIGFjdGlvbiB0aGF0IGF0dGVtcHRz IHRvIHZpb2xhdGUgdGhlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij4gICBzZWN1cml0eSBwb2xpY3kgb2YgYSBzeXN0ZW0sIGUuZy4sIGJ5IGV4 cGxvaXRpbmcgYSB2dWxuZXJhYmlsaXR5LjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PiAgIHNlY3VyaXR5IHBvbGljeSBvZiBhIHN5c3RlbSwgZS5nLiwgYnkgZXhwbG9pdGluZyBhIHZ1 bG5lcmFiaWxpdHkuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij4gICBUaGVyZSBpcyBvZnRlbiBhIG1hbnkgdG8gb25lIG1hcHBpbmcgb2YgYXR0 YWNrcyB0byB2dWxuZXJhYmlsaXRpZXMsPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ ICAgVGhlcmUgaXMgb2Z0ZW4gYSBtYW55IHRvIG9uZSBtYXBwaW5nIG9mIGF0dGFja3MgdG8gdnVs bmVyYWJpbGl0aWVzLDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+ICAgYmVjYXVzZSBtYW55IGRpZmZlcmVudCBhdHRhY2tzIG1heSBiZSB1c2Vk IHRvIGV4cGxvaXQgYTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGJlY2F1c2Ug bWFueSBkaWZmZXJlbnQgYXR0YWNrcyBtYXkgYmUgdXNlZCB0byBleHBsb2l0IGE8L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHZ1bG5lcmFi aWxpdHkuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgdnVsbmVyYWJpbGl0eS48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDcxIj48 L2E+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+QklDQyAtIEJl YXJlci1JbmRlcGVuZGVudCBDYWxsIENvbnRyb2wsIGEgY2FsbCBzaWduYWxpbmcgcHJvdG9jb2w8 L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVs ZXRlIj4gICBzaW1pbGFyIHRvIFNTNy9JU1VQLCBidXQgdGhhdCBjYW4gY3JlYXRlIG5vbi1URE0t Y2lyY3VpdCBtZWRpYTwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxz cGFuIGNsYXNzPSJkZWxldGUiPiAgIGNoYW5uZWxzOyBmb3IgZXhhbXBsZSBpdCdzIGZyZXF1ZW50 bHkgdXNlZCB3aXRoIHZvaWNlIG92ZXIgQVRNPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgKEFzeW5jaHJvbm91cyBUcmFuc2Zl ciBNb2RlKSwgYXMgd2VsbCBhcyB2b2ljZSBvdmVyIElQLjwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPjwvc3Bhbj48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgIENhbGxpbmcg TnVtYmVyIC0gdGhlIHRlbGVwaG9uZSBudW1iZXIgb2YgdGhlIGNhbGxlci48L3NwYW4+PC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj48L3NwYW4+ PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4g ICBDYWxsaW5nIE5hbWUgLSB0aGUgdGV4dHVhbCBuYW1lIG9mIHRoZSBjYWxsZXIsIG9yIGEgZ2Vv Z3JhcGhpYzwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNs YXNzPSJkZWxldGUiPiAgIHJlZ2lvbiB0aGUgY2FsbGVyJ3MgbnVtYmVyIGlzIGJhc2VkIGluLiAg Q2FsbGluZyBuYW1lIGlzIG5vdDwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9j ayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxv Y2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgIGF2YWlsYWJsZSBmb3IgYWxsIGNhbGxzLCBub3Ig aW4gYWxsIGNvdW50cmllcy4gIEl0IGlzIGEgcG9wdWxhcjwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgIGZlYXR1cmUgZm9yIGNh bGxzIGluIHRoZSBVUy48L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48 c3BhbiBjbGFzcz0iZGVsZXRlIj48L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxv Y2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJs b2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICBDYXB0Y2hhIC0gQ29tcGxldGVseSBBdXRvbWF0 ZWQgUHVibGljIFR1cmluZyB0ZXN0IHRvIHRlbGwgQ29tcHV0ZXJzPC9zcGFuPjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgYW5kIEh1bWFu cyBBcGFydCwgYSB0ZXJtIHVzZWQgdG8gZGVzY3JpYmUgYSB0ZXN0IHRvIGRldGVybWluZSBpZiB0 aGU8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0i ZGVsZXRlIj4gICB1c2VyIGlzIGEgaHVtYW4gb3Igbm90LiAgVHlwaWNhbGx5IG9uZSBzZWVzIHRo aXMgb24gYSB3ZWIgc2l0ZSBmb3JtLDwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJi bG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs YmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgIHdpdGggYSBkaXN0b3J0ZWQgd29yZCBkaXNw bGF5ZWQgdGhhdCB0aGUgdXNlciBtdXN0IHR5cGUgaW4gdGhlIGZvcm0uPC9zcGFuPjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgRm9yIGNh bGxzLCBhIGNhcHRjaGEgaXMgdXN1YWxseSBhIHNldCBvZiBzaW1wbGUgcXVlc3Rpb25zIGFza2Vk IGluPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9 ImRlbGV0ZSI+ICAgYXVkaW8sIHRoYXQgdGhlIGNhbGxlciBtdXN0IGJlIGFibGUgdG8gYW5zd2Vy IGNvcnJlY3RseSwgZm9yIGV4YW1wbGU8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy YmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICBhIG1hdGggcXVlc3Rpb24gdGhhdCB0aGUg dXNlciBtdXN0IHRoZW4gYW5zd2VyIGJ5IHByZXNzaW5nIHRoZTwvc3Bhbj48L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgIGNvcnJlY3QgZGln aXRzLjwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICA8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBDYXJyaWVyIC0gQW4gb3Jn YW5pemF0aW9uIG1hbmFnaW5nIChhbmQgdHlwaWNhbGx5IHNlbGxpbmcpIFNJUDwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIENhcnJpZXIgLSBBbiBvcmdhbml6YXRpb24gbWFuYWdp bmcgKGFuZCB0eXBpY2FsbHkgc2VsbGluZykgU0lQPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBzZXJ2aWNlcyB0byBhbm90aGVyIENhcnJp ZXIsIFNJUCBTZXJ2aWNlIFByb3ZpZGVyIChTU1ApLCBlbnRlcnByaXNlczwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPiAgIHNlcnZpY2VzIHRvIGFub3RoZXIgQ2FycmllciwgU0lQIFNl cnZpY2UgUHJvdmlkZXIgKFNTUCksIGVudGVycHJpc2VzPC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBvciBidXNpbmVzc2VzLCBhbmQgY29u c3VtZXJzLiAgQ2FycmllcnMgYXJlIG5vdCBuZWNlc3NhcmlseTwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPiAgIG9yIGJ1c2luZXNzZXMsIGFuZCBjb25zdW1lcnMuICBDYXJyaWVycyBh cmUgbm90IG5lY2Vzc2FyaWx5PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsZWZ0Ij4gICByZWd1bGF0ZWQgZW50aXRpZXMsIGFuZCB0aGVyZSBhcmUgbm9u LXRyYWRpdGlvbmFsIG9uZXMgc3VjaCBhcyBvdmVyLTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPiAgIHJlZ3VsYXRlZCBlbnRpdGllcywgYW5kIHRoZXJlIGFyZSBub24tdHJhZGl0aW9u YWwgb25lcyBzdWNoIGFzIG92ZXItPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICB0aGUtdG9wIHNlcnZpY2UgcHJvdmlkZXJzLiAgSW4gdGhp cyBkb2N1bWVudCBib3RoIHJlZ3VsYXRlZCBjYXJyaWVyczwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmlnaHQiPiAgIHRoZS10b3Agc2VydmljZSBwcm92aWRlcnMuICBJbiB0aGlzIGRvY3VtZW50 IGJvdGggcmVndWxhdGVkIGNhcnJpZXJzPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBhbmQgYW55IHR5cGUgb2YgcGhvbmUgc2VydmljZSBw cm92aWRlcnMgYXJlIGNhbGxlZCAiY2FycmllcnMiLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPiAgIGFuZCBhbnkgdHlwZSBvZiBwaG9uZSBzZXJ2aWNlIHByb3ZpZGVycyBhcmUgY2Fs bGVkICJjYXJyaWVycyIuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIENlcnRpZmlj YXRpb24gQXV0aG9yaXR5IChDQSkgLSBBbiBlbnRpdHkgdGhhdCBpc3N1ZXMgZGlnaXRhbDwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIENlcnRpZmljYXRpb24gQXV0aG9yaXR5IChD QSkgLSBBbiBlbnRpdHkgdGhhdCBpc3N1ZXMgZGlnaXRhbDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgY2VydGlmaWNhdGVzIChlLmcuLCBY LjUwOSBjZXJ0aWZpY2F0ZXMpIGFuZCB2b3VjaGVzIGZvciB0aGUgYmluZGluZzwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGNlcnRpZmljYXRlcyAoZS5nLiwgWC41MDkgY2VydGlm aWNhdGVzKSBhbmQgdm91Y2hlcyBmb3IgdGhlIGJpbmRpbmc8L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGJldHdlZW4gdGhlIGRhdGEgaXRl bXMgaW4gYSBjZXJ0aWZpY2F0ZS48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBi ZXR3ZWVuIHRoZSBkYXRhIGl0ZW1zIGluIGEgY2VydGlmaWNhdGUuPC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDA3MiI+PC9hPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs YmxvY2siPiAgIDxzcGFuIGNsYXNzPSJkZWxldGUiPkNOQU08L3NwYW4+IC0gPHNwYW4gY2xhc3M9 ImRlbGV0ZSI+Q2FsbGluZyBOYW1lIERlbGl2ZXJ5LCBhIGZlYXR1cmUgZW5hYmxpbmcgZGVsaXZl cnkgb2YgYTwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xh c3M9Imluc2VydCI+RGVzdGluYXRpb24gaWRlbnRpdHk8L3NwYW4+IC0gdGhlIDxzcGFuIGNsYXNz PSJpbnNlcnQiPkUuMTY0IG51bWJlciwgbnVtYmVyIGNvZGUsPC9zcGFuPiBvciA8c3BhbiBjbGFz cz0iaW5zZXJ0Ij5lbWFpbC1zdHlsZTwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgY2Fs bGluZyBuYW1lIGZvciB0aGUgY2FsbC4gIENOQU0gaXMgdHlwaWNhbGx5IHByb3ZpZGVkIGJ5PC9z cGFuPiB0aGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imlu c2VydCI+bmFtZTwvc3Bhbj4gb2YgdGhlIDxzcGFuIGNsYXNzPSJpbnNlcnQiPm9yaWdpbmFsIGRl c3RpbmF0aW9uIG9mPC9zcGFuPiBhIDxzcGFuIGNsYXNzPSJpbnNlcnQiPm1lc3NhZ2U7IGkuZS4s PC9zcGFuPiB0aGUgPHNwYW4gY2xhc3M9Imluc2VydCI+b3JpZ2luYWw8L3NwYW4+PC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIDxzcGFu IGNsYXNzPSJkZWxldGUiPnRlcm1pbmF0aW5nIGNhcnJpZXIgcXVlcnlpbmcgZWl0aGVyIHRoZSBM SURCIGluIFNTNyB1c2luZyBUQ0FQLDwvc3Bhbj4gb3IgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+YTwv c3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2Vy dCI+Y2FsbGVkIHBhcnR5Ljwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgdGhpcmQtcGFy dHkgQ05BTSBkYXRhYmFzZSBwcm92aWRlci48L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj48L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICBEQU5FIC0gRE5TLUJhc2Vk IEF1dGhlbnRpY2F0aW9uPC9zcGFuPiBvZiA8c3BhbiBjbGFzcz0iZGVsZXRlIj5OYW1lZCBFbnRp dGllcywgYSB0ZWNobm9sb2d5IHVzZWQ8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy YmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICB0byByZXRyaWV2ZSBYLjUwOSBDZXJ0aWZp Y2F0ZXMgZnJvbSBETlMsIGJhc2VkIG9uIFJGQyA2Njk4LiAgU2VlPC9zcGFuPiB0aGU8L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIDxzcGFuIGNsYXNzPSJkZWxldGUiPmFuc3dl ciB0byBxdWVzdGlvbiAxMS42Ljwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9j ayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxv Y2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPjwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgIERLSU0gLSBEb21haW5LZXlzIElkZW50 aWZpZWQgTWFpbCwgYSB0ZWNobm9sb2d5IHVzZWQgdG8gYXNzZXJ0PC9zcGFuPiBhPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICA8c3BhbiBjbGFzcz0iZGVsZXRlIj5zb3VyY2Ug ZG9tYWluIG5hbWUgaWRlbnRpdHkgZm9yIGVtYWlsLCB1c2luZyBjcnlwdG9ncmFwaGljPC9zcGFu PjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ ICAgc2lnbmF0dXJlcywgYnkgcHV0dGluZzwvc3Bhbj4gdGhlIDxzcGFuIGNsYXNzPSJkZWxldGUi PnB1YmxpYyBrZXlzIGluIEROUy4gIFNlZSBxdWVzdGlvbiAxMS44Ljwvc3Bhbj48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZD48YSBuYW1lPSJkaWZmMDA3MyI+PC9hPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIDxzcGFu IGNsYXNzPSJkZWxldGUiPkROUzwvc3Bhbj4gLSA8c3BhbiBjbGFzcz0iZGVsZXRlIj5Eb21haW4g TmFtZSBTeXN0ZW0sPC9zcGFuPiBhIDxzcGFuIGNsYXNzPSJkZWxldGUiPmRpc3RyaWJ1dGVkIGRh dGFiYXNlIHVzZWQgaW4gdGhlPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2Nr Ij48c3BhbiBjbGFzcz0iaW5zZXJ0Ij5FbWFpbC1zdHlsZSBuYW1lPC9zcGFuPiAtIGEgPHNwYW4g Y2xhc3M9Imluc2VydCI+J3VzZXJAZG9tYWluJyBmb3JtYXQgaWRlbnRpdHksPC9zcGFuPiBmb3Ig PHNwYW4gY2xhc3M9Imluc2VydCI+d2hpY2ggdGhlPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRl Ij4gICBJbnRlcm5ldDwvc3Bhbj4gZm9yIDxzcGFuIGNsYXNzPSJkZWxldGUiPnJlc29sdmluZyBk b21haW4gbmFtZXM8L3NwYW4+IHRvIDxzcGFuIGNsYXNzPSJkZWxldGUiPmFkZHJlc3NlcywgYXMg d2VsbCBhcyBvdGhlcjwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNw YW4gY2xhc3M9Imluc2VydCI+dXNlciBwb3J0aW9uIGlzIHNjb3BlZDwvc3Bhbj4gdG8gPHNwYW4g Y2xhc3M9Imluc2VydCI+dGhlIGRvbWFpbiBwb3J0aW9uOyByZW1vdmluZyBvciBjaGFuZ2luZzwv c3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxi bG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgcmVzb3VyY2UgdHlwZXMuPC9zcGFuPjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij50aGUgZG9t YWluIHBvcnRpb24gd291bGQgZnVuZGFtZW50YWxseSBjaGFuZ2UgdGhlIGlkZW50aXR5IG9mIHRo ZTwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJp bnNlcnQiPnVzZXIuPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBFLjE2 NCBudW1iZXIgLSBhIHBob25lIG51bWJlciBpbiBpbnRlcm5hdGlvbmFsIElUVS1UIEUuMTY0IGZv cm1hdCw8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBFLjE2NCBudW1iZXIgLSBh IHBob25lIG51bWJlciBpbiBpbnRlcm5hdGlvbmFsIElUVS1UIEUuMTY0IGZvcm1hdCw8L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHdoaWNo IGlzIHVuZGVyc3Rvb2QgYnkgdGhlIG9yaWdpbmF0aW5nIGFuZCByZWNlaXZpbmcgZW50aXRpZXMg dG88L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICB3aGljaCBpcyB1bmRlcnN0b29k IGJ5IHRoZSBvcmlnaW5hdGluZyBhbmQgcmVjZWl2aW5nIGVudGl0aWVzIHRvPC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICByZXByZXNlbnQg YSBnbG9iYWxseSB1bmlxdWUgbnVtYmVyLCByZWdhcmRsZXNzIG9mIGFueSBzeW50YWN0aWM8L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICByZXByZXNlbnQgYSBnbG9iYWxseSB1bmlx dWUgbnVtYmVyLCByZWdhcmRsZXNzIG9mIGFueSBzeW50YWN0aWM8L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGVuY29kaW5nIGZvciBhIGRv bWFpbiBwb3J0aW9uLiAgQ2hhbmdpbmcgdGhlIGRvbWFpbiBwb3J0aW9uIHdvdWxkPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgZW5jb2RpbmcgZm9yIGEgZG9tYWluIHBvcnRpb24u ICBDaGFuZ2luZyB0aGUgZG9tYWluIHBvcnRpb24gd291bGQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIG5vdCBmdW5kYW1lbnRhbGx5IGNo YW5nZSB0aGUgaWRlbnRpdHkgb2YgdGhlIHJlc291cmNlLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmlnaHQiPiAgIG5vdCBmdW5kYW1lbnRhbGx5IGNoYW5nZSB0aGUgaWRlbnRpdHkgb2YgdGhl IHJlc291cmNlLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFtZT0i ZGlmZjAwNzQiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICA8c3BhbiBjbGFzcz0iZGVsZXRl Ij5FQ0MgLSBFbGxpcHRpYyBDdXJ2ZSBDcnlwdG9ncmFwaHksIGEgdHlwZSBvZiBwdWJsaWMta2V5 IGNyeXB0b2dyYXBoeTwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxz cGFuIGNsYXNzPSJkZWxldGUiPiAgIGJhc2VkIG9uIG1hdGhlbWF0aWNhbCBwcm9wZXJ0aWVzIG9m IGVsbGlwdGljIGN1cnZlcywgYXMgb3Bwb3NlZCB0bzwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgIHRob3NlIG9mIHByaW1lIG51 bWJlcnMgYXMgaXMgdXNlZCBpbiB0aGUgbW9yZSBjb21tb24gUlNBIGFsZ29yaXRobS48L3NwYW4+ PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj48 L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVs ZXRlIj4gICBFbWFpbC1zdHlsZSBuYW1lIC0gYSAndXNlckBkb21haW4nIGZvcm1hdCBpZGVudGl0 eSwgZm9yIHdoaWNoIHRoZTwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2si PjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgIHVzZXIgcG9ydGlvbiBpcyBzY29wZWQgdG8gdGhlIGRv bWFpbiBwb3J0aW9uOyByZW1vdmluZyBvciBjaGFuZ2luZzwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgIHRoZSBkb21haW4gcG9y dGlvbiB3b3VsZCBmdW5kYW1lbnRhbGx5IGNoYW5nZSB0aGUgaWRlbnRpdHkgb2YgdGhlPC9zcGFu PjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ ICAgdXNlci48L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBj bGFzcz0iZGVsZXRlIj48L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48 c3BhbiBjbGFzcz0iZGVsZXRlIj4gICBILjMyMyAtIGEgVm9JUCBwcm90b2NvbCBmcm9tIHRoZSBJ VFUsIG1vc3QgY29tbW9ubHkgdXNlZCB0b2RheSBpbjwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgIHZpZGVvIGNvbmZlcmVuY2lu ZyBhcHBsaWNhdGlvbnMsIGFzIHdlbGwgYXMgdm9pY2UgYXBwbGljYXRpb25zLjwvc3Bhbj48L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPjwvc3Bh bj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUi PiAgIElWUiAtIEludGVyYWN0aXZlIFZvaWNlIFJlc3BvbnNlLCBhIHRlY2hub2xvZ3kgZm9yIG1h Y2hpbmUtdG8taHVtYW48L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48 c3BhbiBjbGFzcz0iZGVsZXRlIj4gICBjb21tdW5pY2F0aW9ucywgdHlwaWNhbGx5IGltcGxlbWVu dGVkIHVzaW5nIGEgbWVkaWEgc2VydmVyIHBsYXlpbmc8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICBvdXQgcHJlLXJlY29yZGVk IGF1ZGlvIGluc3RydWN0aW9ucyBhbmQgYXNraW5nIGZvciBmZWVkYmFjayBmcm9tPC9zcGFuPjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAg aHVtYW5zIHVzaW5nIHRoZSBrZXlwYWQgb3Igdm9pY2UgY29tbWFuZHMuICBGb3IgZXhhbXBsZSwg YXV0b21hdGVkPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4g Y2xhc3M9ImRlbGV0ZSI+ICAgYWlybGluZSByZXNlcnZhdGlvbiBzeXN0ZW1zIGFyZSB1c3VhbGx5 IGJhc2VkIG9uIElWUi48L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48 c3BhbiBjbGFzcz0iZGVsZXRlIj48L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxv Y2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJs b2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICBMSURCIC0gTGluZSBJbmZvcm1hdGlvbiBEYXRh QmFzZSwgYSBzZXQgb2YgZGF0YWJhc2VzIGluIHRoZSBTUzc8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICBuZXR3b3JrIHdpdGgg aW5mb3JtYXRpb24gZm9yIHRlbGVwaG9uZSBudW1iZXJzLCBzdWNoIGFzIHRoZSBjYWxsaW5nPC9z cGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0 ZSI+ICAgbmFtZSwgcGF5bWVudCBwb2xpY3ksIHBob25lIHR5cGUsIGV0Yy4gIExJREIgc2VydmVy cyBhcmUgcnVuIGJ5PC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNw YW4gY2xhc3M9ImRlbGV0ZSI+ICAgY2FycmllcnMgYW5kIHRoaXJkLXBhcnR5IGFkbWluaXN0cmF0 b3JzLCBhbmQgYXJlIHF1ZXJpZWQgdXNpbmcgVENBUC48L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICBUaGV5IGFyZSBtb3N0bHkg Y29tbW9uIGluIHRoZSBVUyBhbmQgQ2FuYWRhLjwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsYmxvY2siPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJi bG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij4gICBNYW4gaW4gdGhlIE1pZGRsZSAoTUlUTSkgLSBBIE1JVE0gaXMgYW4gZW50aXR5IHRo YXQgaXMgYWJsZSB0bzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIE1hbiBpbiB0 aGUgTWlkZGxlIChNSVRNKSAtIEEgTUlUTSBpcyBhbiBlbnRpdHkgdGhhdCBpcyBhYmxlIHRvPC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBl eGFtaW5lIGFuZCBtb2RpZnkgdHJhZmZpYyBiZXR3ZWVuIHR3byAob3IgbW9yZSkgcGFydGllcyBv biBhPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgZXhhbWluZSBhbmQgbW9kaWZ5 IHRyYWZmaWMgYmV0d2VlbiB0d28gKG9yIG1vcmUpIHBhcnRpZXMgb24gYTwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgY29tbXVuaWNhdGlv biBwYXRoLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGNvbW11bmljYXRpb24g cGF0aC48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYw MDc1Ij48L2E+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+TkFO UCAtIE5vcnRoIEFtZXJpY2FuIE51bWJlcmluZyBQbGFuLCB0aGUgdGVsZXBob25lIG51bWJlcmlu ZyBwbGFuPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xh c3M9ImRlbGV0ZSI+ICAgZm9yIHRoZSArMSBpbnRlcm5hdGlvbmFsIGNhbGxpbmcgY29kZSwgZm9y IGFwcHJveGltYXRlbHkgMjA8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2si PjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2Nr Ij48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICBjb3VudHJpZXMgYW5kIHRlcnJpdG9yaWVzIGluIE5v cnRoIEFtZXJpY2EgKHRoZSBVU0EsIENhbmFkYSw8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICBKYW1haWNhLCBldGMuKS48L3Nw YW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRl Ij48L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0i ZGVsZXRlIj4gICBQQlggLSBQcml2YXRlIEJyYW5jaCBFeGNoYW5nZSwgYSBzeXN0ZW0gcHJvdmlk aW5nIHZvaWNlIHNlcnZpY2UgdG8gYTwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJi bG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs YmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgIGJ1c2luZXNzIG9yIG9yZ2FuaXphdGlvbiB0 aGF0IG93bnMgdGhlIFBCWC48L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2si PjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2Nr Ij48c3BhbiBjbGFzcz0iZGVsZXRlIj48L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy YmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICBQS0kgLSBQdWJsaWMgS2V5IEluZnJhc3Ry dWN0dXJlLCBzZWUgcXVlc3Rpb24gMTEuNC48L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj48L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICBQT1RTIC0gUGxhaW4gT2xk IFRlbGVwaG9uZSBTZXJ2aWNlLCB0aGUgbGVnYWN5IGFuYWxvZyBwaG9uZSBzZXJ2aWNlPC9zcGFu PjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ ICAgdHlwaWNhbGx5IHByb3ZpZGVkIHRvIHJlc2lkZW50aWFsIHN1YnNjcmliZXJzLjwvc3Bhbj48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPjwv c3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxl dGUiPiAgIFBSSSAtIFByaW1hcnkgUmF0ZSBJbnRlcmZhY2UsIGEgc3BlY2lmaWMgdGVsZWNvbSBz ZXJ2aWNlIGxpbmUgdHlwZSw8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2si PjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2Nr Ij48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICBiYXNlZCBvbiBJU0ROLCB1c3VhbGx5IHVzZWQgZm9y IGNvbm5lY3RpbmcgYSBQQlggdG8gYSBjYXJyaWVyJ3M8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICBzd2l0Y2guPC9zcGFuPjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+PC9z cGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0 ZSI+ICAgUFNUTiAtIFB1YmxpYyBTd2l0Y2hlZCBUZWxlcGhvbmUgTmV0d29yaywgdGhlIGNvbm5l Y3Rpb24gb2Ygdm9pY2U8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48 c3BhbiBjbGFzcz0iZGVsZXRlIj4gICBzZXJ2aWNlIG5ldHdvcmtzIGFuZCBkZXZpY2VzLCBoaXN0 b3JpY2FsbHkgYmFzZWQgb24gY2lyY3VpdC1zd2l0Y2g8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICB0ZWNobm9sb2d5IHVzaW5n IFNTNyBpbiB0aGUgY29yZSBhbmQgUE9UUywgR1NNLCBQUkkgYW5kIG90aGVyPC9zcGFuPjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgdGVj aG5vbG9naWVzIGZvciBhY2Nlc3MuICBXaXRoIHJlZ2FyZHMgdG8gU1RJUiwgdGhlIFNJUC1iYXNl ZDwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJk ZWxldGUiPiAgIHNlcnZpY2UgcHJvdmlkZXJzIGFuZCBlcXVpcG1lbnQgaXMgYWxzbyBjb25zaWRl cmVkIHBhcnQgb2YgdGhlIFBTVE4uPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJs b2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxi bG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+PC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgUm9ib2NhbGxlciAtIGFuIGF1dG9t YXRlZCBjYWxsLWdlbmVyYXRpbmcgc3lzdGVtLCB0eXBpY2FsbHk8L3NwYW4+PC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICBpbXBsZW1lbnRl ZCBpbiBzb2Z0d2FyZS4gIFJvYm9jYWxsZXJzIGNhbiBiZSBsZWdpdGltYXRlLCBmb3IgZXhhbXBs ZTwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJk ZWxldGUiPiAgIHBvbGl0aWNhbCBjYW1wYWlnbiBjYWxsaW5nIHN5c3RlbXMsIG9yIGxvY2FsIHNj aG9vbCBhbm5vdW5jZW1lbnQ8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2si PjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2Nr Ij48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICBzeXN0ZW1zOyBidXQgdGhleSBjYW4gYWxzbyBiZSB1 c2VkIGZvciBtYWxpY2lvdXMgcHVycG9zZXMuPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+PC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgU0lQIC0gU2Vzc2lvbiBJ bml0aWF0aW9uIFByb3RvY29sLCBhcyBkZWZpbmVkIGJ5IFtSRkMzMjYxXSBhbmQgaXRzPC9zcGFu PjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ ICAgZXh0ZW5zaW9ucywgaXMgdGhlIGRvbWluYW50IFZvaWNlIG92ZXIgSVAgcHJvdG9jb2wgaW4g dXNlIGluIHRoZTwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFu IGNsYXNzPSJkZWxldGUiPiAgIFBTVE4sIGJvdGggaW4gY2FycmllcnMgYXMgd2VsbCBhcyBpbiBl bnRlcnByaXNlIG1hcmtldHMuPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2Nr Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9j ayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+PC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgU01TIC0gU2hvcnQgTWVzc2FnZSBTZXJ2 aWNlLCB0aGUgdGV4dCBtZXNzYWdpbmcgYXBwbGljYXRpb24gdXNlZCBvbjwvc3Bhbj48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgIG1vYmls ZSBwaG9uZXMuPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgIDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFNvdXJjZSBpZGVu dGl0eSAtIHRoZSBFLjE2NCBudW1iZXIsIG51bWJlciBjb2RlLCBvciBlbWFpbC1zdHlsZSBuYW1l PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgU291cmNlIGlkZW50aXR5IC0gdGhl IEUuMTY0IG51bWJlciwgbnVtYmVyIGNvZGUsIG9yIGVtYWlsLXN0eWxlIG5hbWU8L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHVzZWQgZm9y IGlkZW50aWZ5aW5nIHRoZSBvcmlnaW5hdG9yIG9mIGEgbWVzc2FnZSB0byB0aGUgcmVjZWl2aW5n PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgdXNlZCBmb3IgaWRlbnRpZnlpbmcg dGhlIG9yaWdpbmF0b3Igb2YgYSBtZXNzYWdlIHRvIHRoZSByZWNlaXZpbmc8L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHVzZXI7IGkuZS4s IHRoZSBpZGVudGl0eSB1c2VkIGZvciAiQ2FsbGVyLUlEIi48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij4gICB1c2VyOyBpLmUuLCB0aGUgaWRlbnRpdHkgdXNlZCBmb3IgIkNhbGxlci1J RCIuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDA3 NiI+PC9hPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIDxzcGFuIGNsYXNzPSJkZWxldGUiPlNwaXJh bCAtIGEgY2FsbCBzcGlyYWwgaXMgYSBzY2VuYXJpbyB3aGVyZSBhIGNhbGwgcmVxdWVzdCBnZXRz PC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRl bGV0ZSI+ICAgcm91dGVkL2ZvcndhcmRlZCB0aHJvdWdoIHRoZSBzYW1lIHN5c3RlbSBvciBhZG1p bmlzdHJhdGl2ZSBkb21haW48L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2si PjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2Nr Ij48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICBtdWx0aXBsZSB0aW1lcywgd2l0aG91dCBhY3R1YWxs eSBiZWluZyBhbiBlcnJvciBjb25kaXRpb24uICBUaGlzIGNhbjwvc3Bhbj48L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgIG9jY3VyIGR1ZSB0 byBjYWxsLWZvcndhcmRpbmcgb3IgbnVtYmVyIHBvcnRhYmlsaXR5Ljwvc3Bhbj48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPjwvc3Bhbj48L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgIFNU SVIgLSBTZWN1cmUgVGVsZXBob25lIElkZW50aXR5IFJldmlzaXRlZCwgdGhlIG5hbWUgb2YgdGhl IElFVEY8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFz cz0iZGVsZXRlIj4gICBXb3JraW5nIEdyb3VwIGFkZHJlc3NpbmcgY2FsbGluZyBudW1iZXIgdmFs aWRhdGlvbi4gIFRoaXMgZG9jdW1lbnQ8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy YmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICBhbHNvIHVzZXMgaXQgZm9yIHRoZSBuYW1l IG9mIHRoZSBzb2x1dGlvbiBtZWNoYW5pc20uPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+PC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgWE1QUCAtIEV4dGVuc2li bGUgTWVzc2FnaW5nIGFuZCBQcmVzZW5jZSBQcm90b2NvbCwgYW4gWE1MLWJhc2VkPC9zcGFuPjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAg cHJvdG9jb2wgcHJpbWFyaWx5IHVzZWQgZm9yIHNlc3Npb24tYmFzZWQgaW5zdGFudCBtZXNzYWdp bmcsIGFuZDwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNs YXNzPSJkZWxldGUiPiAgIGFsc28gZm9yIGJhc2ljIHZvaWNlIG92ZXIgSVAgc2Vzc2lvbnMuPC9z cGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjEzLiAgSUFOQSBDb25zaWRlcmF0aW9uczwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjEzLiAgSUFOQSBDb25zaWRlcmF0aW9uczwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBUaGlzIGRvY3VtZW50IG1ha2VzIG5vIHJl cXVlc3Qgb2YgSUFOQS48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBUaGlzIGRv Y3VtZW50IG1ha2VzIG5vIHJlcXVlc3Qgb2YgSUFOQS48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+MTQuICBBY2tub3dsZWRnbWVudHM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij4xNC4gIEFja25vd2xlZGdtZW50czwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBU aGUgdHlwZXMgb2YgcXVlc3Rpb25zIGFuZCBhbnN3ZXJzIGluIHRoaXMgZG9jdW1lbnQgYXJpc2Ug ZnJvbSBlbWFpbDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFRoZSB0eXBlcyBv ZiBxdWVzdGlvbnMgYW5kIGFuc3dlcnMgaW4gdGhpcyBkb2N1bWVudCBhcmlzZSBmcm9tIGVtYWls PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4g ICBkaXNjdXNzaW9ucyBpbiB0aGUgU1RJUiBtYWlsaW5nIGxpc3Qgb3ZlciB0aGUgcGFzdCBmZXcg bW9udGhzLCBmcm9tPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgZGlzY3Vzc2lv bnMgaW4gdGhlIFNUSVIgbWFpbGluZyBsaXN0IG92ZXIgdGhlIHBhc3QgZmV3IG1vbnRocywgZnJv bTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ ICAgbWFueSBpbmRpdmlkdWFscy4gIE5vIGVtYWlscyB3ZXJlIHVzZWQgZm9yIGRpcmVjdCBjb3B5 IGFuZCBwYXN0aW5nPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgbWFueSBpbmRp dmlkdWFscy4gIE5vIGVtYWlscyB3ZXJlIHVzZWQgZm9yIGRpcmVjdCBjb3B5IGFuZCBwYXN0aW5n PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4g ICBjb250ZW50LCBob3dldmVyLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGNv bnRlbnQsIGhvd2V2ZXIuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjE1LiAgUmVmZXJl bmNlczwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjE1LiAgUmVmZXJlbmNlczwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4xNS4xLiAgICAgSW5mb3JtYXRpdmUgUmVmZXJlbmNl czwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjE1LjEuICAgICBJbmZvcm1hdGl2ZSBS ZWZlcmVuY2VzPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJk aWZmMDA3NyI+PC9hPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgICA8c3BhbiBjbGFzcz0iZGVsZXRl Ij5bUkZDMzMyNV0gSmVubmluZ3MsIEMuLCBQZXRlcnNvbiwgSi4sIFdhdHNvbiwgTS4sICJQcml2 YXRlPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9 ImRlbGV0ZSI+ICAgICAgICAgRXh0ZW5zaW9ucyB0byB0aGUgU2Vzc2lvbiBJbml0aWF0aW9uIFBy b3RvY29sIChTSVApIGZvcjwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2si PjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgICAgICAgIEFzc2VydGVkIElkZW50aXR5IHdpdGhpbiBU cnVzdGVkIE5ldHdvcmtzIiwgUkZDIDMzMjUsIE5vdmVtYmVyPC9zcGFuPjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgICAgICAgMjAwMi48 L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgIFtSRkMzMjYxXSBSb3NlbmJlcmcs IEouLCBTY2h1bHpyaW5uZSwgSC4sIENhbWFyaWxsbywgRy4sIEpvaG5zdG9uLDwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICBbUkZDMzI2MV0gUm9zZW5iZXJnLCBKLiwgU2NodWx6 cmlubmUsIEguLCBDYW1hcmlsbG8sIEcuLCBKb2huc3Rvbiw8L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgIEEuLCBQZXRlcnNvbiwg Si4sIFNwYXJrcywgUi4sIEhhbmRsZXksIE0uLCBhbmQgRS4gU2Nob29sZXIsPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAgQS4sIFBldGVyc29uLCBKLiwgU3BhcmtzLCBS LiwgSGFuZGxleSwgTS4sIGFuZCBFLiBTY2hvb2xlciw8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICJTSVA6ICBTZXNzaW9uIElu aXRpYXRpb24gUHJvdG9jb2wiLCBSRkMgMzI2MSwgSnVuZSAyMDAyLjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPiAgICAgICAgICJTSVA6ICBTZXNzaW9uIEluaXRpYXRpb24gUHJvdG9j b2wiLCBSRkMgMzI2MSwgSnVuZSAyMDAyLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQ+PGEgbmFtZT0iZGlmZjAwNzgiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgPHNw YW4gY2xhc3M9ImRlbGV0ZSI+W1JGQzM2NDddIENob2toYW5pLCBTLiwgZXQgYWwsICIgSW50ZXJu ZXQgWC41MDkgUHVibGljIEtleTwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9j ayI+W1JGQzQ0NzRdIFBldGVyc29uLCBKLiwgSmVubmluZ3MsIEMuLCAiRW5oYW5jZW1lbnRzIGZv cjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2Nr Ij48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICAgICAgICBJbmZyYXN0cnVjdHVyZSBDZXJ0aWZpY2F0 ZSBQb2xpY3kgYW5kIENlcnRpZmljYXRpb24gUHJhY3RpY2VzPC9zcGFuPjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgICAgICAgRnJhbWV3 b3JrIiwgUkZDIDM2NDcsIE5vdmVtYmVyIDIwMDMuPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxibG9jayI+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxibG9jayI+ICAgIFtSRkM0NDc0XSBQZXRlcnNvbiwgSi4sIDxzcGFuIGNsYXNzPSJkZWxldGUi PmFuZDwvc3Bhbj4gSmVubmluZ3MsIEMuLCAiRW5oYW5jZW1lbnRzIGZvcjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgIEF1dGhlbnRpY2F0ZWQgSWRlbnRpdHkgTWFuYWdl bWVudCBpbiB0aGUgU2Vzc2lvbiBJbml0aWF0aW9uPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+ICAgICAgICAgQXV0aGVudGljYXRlZCBJZGVudGl0eSBNYW5hZ2VtZW50IGluIHRoZSBT ZXNzaW9uIEluaXRpYXRpb248L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgIFByb3RvY29sIChTSVApIiwgUkZDIDQ0NzQsIEF1Z3Vz dCAyMDA2LjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICAgIFByb3RvY29s IChTSVApIiwgUkZDIDQ0NzQsIEF1Z3VzdCAyMDA2LjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAwNzkiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4g ICAgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+W1JGQzYzNzZdIENyb2NrZXIsIEQuLCBIYW5zZW4sIFQu LCBhbmQgS3VjaGVyYXd5LCBNLiwgIkRvbWFpbktleXM8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPltOT1RFPC9zcGFuPiB0byA8c3Bh biBjbGFzcz0iaW5zZXJ0Ij5zZWxmOiBuZWVkIHRvIGFkZDwvc3Bhbj4gYSA8c3BhbiBjbGFzcz0i aW5zZXJ0Ij5MT1QgbW9yZSByZWZlcmVuY2VzIGhlcmVdPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVs ZXRlIj4gICAgICAgICBJZGVudGlmaWVkIE1haWwgKERLSU0pIFNpZ25hdHVyZXMiLCBSRkMgNjM3 NiwgU2VwdGVtYmVyIDIwMTEuPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2Nr Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9j ayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+PC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgIFtSRkM2Njk4XSBIb2ZmbWFuLCBQLiwg U2NobHl0ZXIsIEouLCAiVGhlIEROUy1CYXNlZCBBdXRoZW50aWNhdGlvbjwvc3Bhbj48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgICAgICAg IG9mIE5hbWVkIEVudGl0aWVzIChEQU5FKSBUcmFuc3BvcnQgTGF5ZXIgU2VjdXJpdHkgKFRMUyk8 L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVs ZXRlIj4gICAgICAgICBQcm90b2NvbDogVExTQSIsIFJGQyA2Njk4LCBBdWd1c3QgMjAxMi48L3Nw YW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRl Ij48L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0i ZGVsZXRlIj4gICAgW2Vtcy1hdHRhY2tzXSBodHRwczovL2tyZWJzb25zZWN1cml0eS5jb20vMjAx My8wNC9kaHMtd2FybnMtb2YtPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2Nr Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9j ayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgICAgICAgdGRvcy1leHRvcnRpb24tYXR0YWNrcy1v bi1wdWJsaWMtZW1lcmdlbmN5LW5ldHdvcmtzPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+PC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgIFtvZmNvbS13b3JrXSBo dHRwOi8vc3Rha2Vob2xkZXJzLm9mY29tLm9yZy51ay9jb25zdWx0YXRpb25zL3NpbGVudC08L3Nw YW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRl Ij4gICAgICAgICBjYWxscy9qb2ludC1hY3Rpb24tcGxhbjwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPjwvc3Bhbj48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgICBbcm9iby1j aGFsbGVuZ2VdIGh0dHA6Ly9yb2JvY2FsbC5jaGFsbGVuZ2UuZ292PC9zcGFuPjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+PC9zcGFuPjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgIFtk cmFmdC1hc3NlcnRlcl0gS2FwbGFuLCBILiwgIlByaXZhdGUgRXh0ZW5zaW9uczwvc3Bhbj4gdG8g PHNwYW4gY2xhc3M9ImRlbGV0ZSI+dGhlIFNlc3Npb248L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICAgICAgICBJbml0aWF0aW9u IFByb3RvY29sIChTSVApIGZvciBBc3NlcnRlciBJZGVudGlmaWNhdGlvbiB3aXRoaW48L3NwYW4+ PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4g ICAgICAgICBUcnVzdGVkIE5ldHdvcmtzIiwgZHJhZnQta2FwbGFuLXNpcC1hc3NlcnRlci1pZGVu dGl0eSwgTWFyY2g8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3Bh biBjbGFzcz0iZGVsZXRlIj4gICAgICAgICAyMDA5Ljwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPjwvc3Bhbj48L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgICBbZHJhZnQtaWtl c10gS2FwbGFuLCBILiwgIkFuIElkZW50aXR5IEtleS1iYXNlZCBhbmQgRWZmZWN0aXZlPC9zcGFu PjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ ICAgICAgICAgU2lnbmF0dXJlIGZvciBPcmlnaW4tVW5rbm93biBUeXBlcyIsIGRyYWZ0LWthcGxh bi1zdGlyLWlrZXMtPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNw YW4gY2xhc3M9ImRlbGV0ZSI+ICAgICAgICAgb3V0LCBKdWx5IDIwMTMuPC9zcGFuPjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+PC9zcGFuPjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAg IFtkcmFmdC00NDc0YmlzXSBQZXRlcnNvbiwgSi4sIEplbm5pbmdzLCBDLiwgUmVzY29ybGEsIEUu LDwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJk ZWxldGUiPiAgICAgICAgICJBdXRoZW50aWNhdGVkIElkZW50aXR5IE1hbmFnZW1lbnQgaW4gdGhl IFNlc3Npb24gSW5pdGlhdGlvbjwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9j ayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxv Y2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgICAgICAgIFByb3RvY29sIChTSVApIiwgZHJhZnQt amVubmluZ3MtZGlzcGF0Y2gtcmZjNDQ3NGJpcywgSnVseTwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgICAgICAgIDIwMTMuPC9z cGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0 ZSI+PC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9 ImRlbGV0ZSI+ICAgIFtkcmFmdC1jaWRlcl0gS2FwbGFuLCBILiwgIkEgcHJvcG9zYWwgZm9yIElk ZW50aXR5IGluPC9zcGFuPiBhIDxzcGFuIGNsYXNzPSJkZWxldGUiPkROUy1iYXNlZDwvc3Bhbj48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAg ICAgICAgIEVudHJ1c3RlZCBSZWdpc3RyeSAoQ0lERVIpIiwgZHJhZnQta2FwbGFuLXN0aXItY2lk ZXIsIEp1bHk8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBj bGFzcz0iZGVsZXRlIj4gICAgICAgICAyMDEzLjwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPjwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgICBbZHJhZnQtb29iXSBS ZXNjb3JsYSwgRS4sICJTZWN1cmUgQ2FsbGVyLUlEIEZhbGxiYWNrIE1vZGUiLCBkcmFmdC08L3Nw YW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRl Ij4gICAgICAgICByZXNjb3JsYS1zdGlyLWZhbGxiYWNrLCBKdWx5IDIwMTMuPC9zcGFuPjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+PC9zcGFu PjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ ICAgIFtkcmFmdC11cmlzLWNoYW5nZV0gS2FwbGFuLCBILiwgIldoeSBVUklzIEFyZSBDaGFuZ2Vk IENyb3NzaW5nPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4g Y2xhc3M9ImRlbGV0ZSI+ICAgICAgICAgRG9tYWlucyIsIGRyYWZ0LWthcGxhbi1zaXAtdXJpcy1j aGFuZ2UsIEZlYnJ1YXJ5IDIwMDguPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJs b2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+QXV0aG9yJ3MgQWRkcmVzczwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPkF1dGhvcidzIEFkZHJlc3M8L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+ICAgSGFkcmllbCBLYXBsYW48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij4gICBIYWRyaWVsIEthcGxhbjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgT3JhY2xlPC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+ICAgT3JhY2xlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBFbWFpbDogaGFkcmllbC5rYXBsYW5Ab3JhY2xlLmNvbTwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIEVtYWlsOiBoYWRyaWVsLmthcGxhbkBv cmFjbGUuY29tPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N Cg0KICAgICA8dHI+PHRkPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij48L3RkPjx0ZD48L3RkPjwvdHI+DQogICAgIDx0ciBiZ2NvbG9yPSJncmF5 Ij48dGggY29sc3Bhbj0iNSIgYWxpZ249ImNlbnRlciI+PGEgbmFtZT0iZW5kIj4mbmJzcDtFbmQg b2YgY2hhbmdlcy4gNzkgY2hhbmdlIGJsb2Nrcy4mbmJzcDs8L2E+PC90aD48L3RyPg0KICAgICA8 dHIgY2xhc3M9InN0YXRzIj48dGQ+PC90ZD48dGg+PGk+NDA2IGxpbmVzIGNoYW5nZWQgb3IgZGVs ZXRlZDwvaT48L3RoPjx0aD48aT4gPC9pPjwvdGg+PHRoPjxpPjMxMyBsaW5lcyBjaGFuZ2VkIG9y IGFkZGVkPC9pPjwvdGg+PHRkPjwvdGQ+PC90cj4NCiAgICAgPHRyPjx0ZCBjb2xzcGFuPSI1IiBh bGlnbj0iY2VudGVyIiBjbGFzcz0ic21hbGwiPjxicj5UaGlzIGh0bWwgZGlmZiB3YXMgcHJvZHVj ZWQgYnkgcmZjZGlmZiAxLjQxLiBUaGUgbGF0ZXN0IHZlcnNpb24gaXMgYXZhaWxhYmxlIGZyb20g PGEgaHJlZj0iaHR0cDovL3d3dy50b29scy5pZXRmLm9yZy90b29scy9yZmNkaWZmLyI+aHR0cDov L3Rvb2xzLmlldGYub3JnL3Rvb2xzL3JmY2RpZmYvPC9hPiA8L3RkPjwvdHI+DQogICA8L3Rib2R5 PjwvdGFibGU+DQogICANCiAgIA0KPC9ib2R5PjwvaHRtbD4= --_004_1ECA2C8FD3EA481E8CB20FF87D7F0820neustarbiz_-- From rjsparks@nostrum.com Tue Sep 10 07:23:24 2013 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 116D711E81B7 for ; Tue, 10 Sep 2013 07:23:22 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.599 X-Spam-Level: X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[AWL=-0.000, BAYES_00=-2.599, HTML_MESSAGE=0.001, SPF_PASS=-0.001, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 57E5kUC+YzNx for ; Tue, 10 Sep 2013 07:23:14 -0700 (PDT) Received: from shaman.nostrum.com (nostrum-pt.tunnel.tserv2.fmt.ipv6.he.net [IPv6:2001:470:1f03:267::2]) by ietfa.amsl.com (Postfix) with ESMTP id 1FED421F937E for ; Tue, 10 Sep 2013 07:23:13 -0700 (PDT) Received: from unnumerable.local (pool-173-71-52-22.dllstx.fios.verizon.net [173.71.52.22]) (authenticated bits=0) by shaman.nostrum.com (8.14.3/8.14.3) with ESMTP id r8AENALV019601 (version=TLSv1/SSLv3 cipher=DHE-RSA-CAMELLIA256-SHA bits=256 verify=OK) for ; Tue, 10 Sep 2013 09:23:10 -0500 (CDT) (envelope-from rjsparks@nostrum.com) Message-ID: <522F2B50.7070402@nostrum.com> Date: Tue, 10 Sep 2013 09:23:12 -0500 From: Robert Sparks User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:17.0) Gecko/20130801 Thunderbird/17.0.8 MIME-Version: 1.0 To: stir@ietf.org References: <1ECA2C8F-D3EA-481E-8CB2-0FF87D7F0820@neustar.biz> In-Reply-To: <1ECA2C8F-D3EA-481E-8CB2-0FF87D7F0820@neustar.biz> Content-Type: multipart/alternative; boundary="------------020809090000070309040704" Received-SPF: pass (shaman.nostrum.com: 173.71.52.22 is authenticated by a trusted mechanism) Subject: Re: [stir] edits to draft-kaplan-stir-fried X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 10 Sep 2013 14:23:24 -0000 This is a multi-part message in MIME format. --------------020809090000070309040704 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Brian - Thanks for breaking the silence... We've had several folks suggest this would work well as a wiki page. The wiki we have at is open for anyone with a tools account to write on. I've moved the link to the fried draft to (you can get to that from the FAQ link on the main page). Hadriel - would you try dropping the next version on that page, replacing that link, and lets see how using that as a place to keep an FaQ going works? Please keep the arguments about what the proposals actually say on list. RjS On 9/9/13 3:00 PM, Rosen, Brian wrote: > > Attached is a set of proposed edits to stir-fried (stir FAQ) as a diff > from the published version. > > I apologize, in advance, for the form. Prior to publishing, I was > given an opportunity to comment on the text, which I failed to do in a > timely manner, and just about the time I got the comments done, > Hadriel had published his draft and had made some updates to it. I > don't have the source available to easily reproduce the edits. > Accordingly, this diff shows a lot of changes that are not actual > proposed edits. > > If accepted, I'll be happy to work with Hadriel to make it easier to > incorporate the changes in his current source document. > > In private correspondence, he questioned some of these edits. Those > comments and my responses are: > With regard to some of your changes: > > 1) For the overview of the proposed solutions, you've added text that > says the in-band and out-of-band (1) use the same credentials and (2) > are performed by similar entities. I don't believe that's true - or > at least, I don't believe that most people in the WG agree with that. > Several of the out-of-band proponents consistently emphasize that > PBX's and smartphones would be the ones doing the out-of-band stuff, > which is a different set of actors than the in-band proponents have > been emphasizing would do in-band stuff. Also, I have seen no > consistent view/description of what the "credentials" are for > out-of-band at all. > >
I believe that the out of band proponents have proposed the > credentials be the same. > I believe that the signing of the data should be able to be performed > by the end point or a service provider. We've also talked about a PBX > signing. The actual credential could be different in those two cases, > representing the delegation from a national number authority to the SP > or a number resell to the SP vs a delegation from the SP to the end > user. For in-band I believe any party on the path, including any SP or > the endpoint should be able to validate. In the out of band case, > only the terminating SP or the terminating end user would be able to > validate. > > There is no agreement on the view/description of credentials for > either in band or out of band, other than they have a public/private > key pair. For example, some in band credential proposals are full > X.509 certs and others are a plain private key in the DNS. The > credential needed for out of band is exactly the same I believe, > although I though it may need an additional pointer to the CPS (or > equivalent). > > > > 2) For the question of why we're focused on SIP, you added: > We also observe that most of the problem calls are SIP-originated. > Probably that is because there VoIP service providers that are more > willing to allow their subscribers to use any calling party number > they want to. > > I haven't seen any actual numbers that show most of the problem calls > are SIP-originated. Are there some numbers? >
don't have numbers. Perhaps Henning does. I have been told most > of the problem is SIP-originated by a couple of independent sources, > but I have no verifiable facts. > > > 3) For the question on proposed out-of-band solution, you added this: > It proposes that the sender encrypt identity information for the > recipient (such that only the recipient can decrypt it) and store > it in a database selected by the recipient. The recipient queries > the database when it receives the call and obtains the identity > information. The proposal assumes the sender can query the credential > database to obtain the public key of the recipient and the identity of > the database to store the sender's information in. > > I don't believe Ekr's draft says that. It doesn't stipulate whose CPS > database is used for storing the CPR stuff, except by hinting at it in > one sentence; most of the doc assumes/implies a single CPS. I think > the powerpoint slides shown in Wash DC might have described it as you > said, but even back then I thought they were backward. Alice should > put the CPR in her CPS, and Bob should retrieve it from her CPS. ISTM > doing it that way solves a lot of problems. > >
EKR's draft says: > The discussion above is written in terms of a single CPS, but this > potentially has scaling problems, as well as allowing the CPS to > learn about every call. These issues can be alleviated by having a > federated CPS. If a credential lookup service is already available, > the CPS location can also be stored in the callee's credentials. > > > Brian > > > _______________________________________________ > stir mailing list > stir@ietf.org > https://www.ietf.org/mailman/listinfo/stir --------------020809090000070309040704 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit
Brian - Thanks for breaking the silence...

We've had several folks suggest this would work well as a wiki page. The wiki we have at
<http://trac.tools.ietf.org/wg/stir/trac/wiki> is open for anyone with a tools account to write on.
I've moved the link to the fried draft to <http://trac.tools.ietf.org/wg/stir/trac/wiki/FAQ> (you can get
to that from the FAQ link on the main page).

Hadriel - would you try dropping the next version on that page, replacing that link, and lets see how using that as
a place to keep an FaQ going works?

Please keep the arguments about what the proposals actually say on list.

RjS

On 9/9/13 3:00 PM, Rosen, Brian wrote:

Attached is a set of proposed edits to stir-fried (stir FAQ) as a diff from the published version.

I apologize, in advance, for the form.  Prior to publishing, I was given an opportunity to comment on the text, which I failed to do in a timely manner, and just about the time I got the comments done, Hadriel had published his draft and had made some updates to it.  I don't have the source available to easily reproduce the edits.  Accordingly, this diff shows a lot of changes that are not actual proposed edits.

If accepted, I'll be happy to work with Hadriel to make it easier to incorporate the changes in his current source document.

In private correspondence, he questioned some of these edits.  Those comments and my responses are:
With regard to some of your changes:

1) For the overview of the proposed solutions, you've added text that says the in-band and out-of-band (1) use the same credentials and (2) are performed by similar entities.  I don't believe that's true - or at least, I don't believe that most people in the WG agree with that.  Several of the out-of-band proponents consistently emphasize that PBX's and smartphones would be the ones doing the out-of-band stuff, which is a different set of actors than the in-band proponents have been emphasizing would do in-band stuff.  Also, I have seen no consistent view/description of what the "credentials" are for out-of-band at all.

<br>I believe that the out of band proponents have proposed the credentials be the same.  
I believe that the signing of the data should be able to be performed by the end point or a service provider.  We've also talked about a PBX signing.  The actual credential could be different in those two cases, representing the delegation from a national number authority to the SP or a number resell to the SP vs a delegation from the SP to the end user. For in-band I believe any party on the path, including any SP or the endpoint should be able to validate.   In the out of band case, only the terminating SP or the terminating end user would be able to validate.

There is no agreement on the view/description of credentials for either in band or out of band, other than they have a public/private key pair.  For example, some in band credential proposals are full X.509 certs and others are a plain private key in the DNS.  The credential needed for out of band is exactly the same I believe, although I though it may need an additional pointer to the CPS (or equivalent).



2) For the question of why we're focused on SIP, you added:
   We also observe that most of the problem calls are SIP-originated.  
   Probably that is because there VoIP service providers that are more 
   willing to allow their subscribers to use any calling party number 
   they want to.

I haven't seen any actual numbers that show most of the problem calls are SIP-originated.  Are there some numbers?
<br>don't have numbers.  Perhaps Henning does. I have been told most of the problem is SIP-originated by a couple of independent sources, but I have no verifiable facts.


3) For the question on proposed out-of-band solution, you added this:
   It proposes that the sender encrypt identity information for the 
   recipient (such that only the recipient can decrypt it) and store 
   it in a database selected by the recipient.  The recipient queries 
   the database when it receives the call and obtains the identity 
   information.  The proposal assumes the sender can query the credential 
   database to obtain the public key of the recipient and the identity of 
   the database to store the sender’s information in.

I don't believe Ekr's draft says that.  It doesn't stipulate whose CPS database is used for storing the CPR stuff, except by hinting at it in one sentence; most of the doc assumes/implies a single CPS.  I think the powerpoint slides shown in Wash DC might have described it as you said, but even back then I thought they were backward.  Alice should put the CPR in her CPS, and Bob should retrieve it from her CPS.  ISTM doing it that way solves a lot of problems.

<br>EKR's draft says:
   The discussion above is written in terms of a single CPS, but this
   potentially has scaling problems, as well as allowing the CPS to
   learn about every call.  These issues can be alleviated by having a
   federated CPS.  If a credential lookup service is already available,
   the CPS location can also be stored in the callee's credentials.


Brian


_______________________________________________
stir mailing list
stir@ietf.org
https://www.ietf.org/mailman/listinfo/stir

--------------020809090000070309040704-- From hadriel.kaplan@oracle.com Tue Sep 10 08:14:36 2013 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1597A21E814C for ; Tue, 10 Sep 2013 08:14:36 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.598 X-Spam-Level: X-Spam-Status: No, score=-6.598 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id R0i1IPmr5F58 for ; Tue, 10 Sep 2013 08:14:30 -0700 (PDT) Received: from userp1040.oracle.com (userp1040.oracle.com [156.151.31.81]) by ietfa.amsl.com (Postfix) with ESMTP id 9821521E813D for ; Tue, 10 Sep 2013 08:14:29 -0700 (PDT) Received: from acsinet22.oracle.com (acsinet22.oracle.com [141.146.126.238]) by userp1040.oracle.com (Sentrion-MTA-4.3.1/Sentrion-MTA-4.3.1) with ESMTP id r8AFEOPK007233 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Tue, 10 Sep 2013 15:14:25 GMT Received: from aserz7021.oracle.com (aserz7021.oracle.com [141.146.126.230]) by acsinet22.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id r8AFENfg020047 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Tue, 10 Sep 2013 15:14:24 GMT Received: from abhmt112.oracle.com (abhmt112.oracle.com [141.146.116.64]) by aserz7021.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id r8AFEN5L022969; Tue, 10 Sep 2013 15:14:23 GMT Received: from [192.168.1.108] (/66.31.4.117) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Tue, 10 Sep 2013 08:14:23 -0700 Content-Type: multipart/alternative; boundary="Apple-Mail=_4D908E30-C9CC-451A-B5F0-D672BCEEC17E" Mime-Version: 1.0 (Mac OS X Mail 6.5 \(1508\)) From: Hadriel Kaplan In-Reply-To: <522F2B50.7070402@nostrum.com> Date: Tue, 10 Sep 2013 11:14:22 -0400 Message-Id: References: <1ECA2C8F-D3EA-481E-8CB2-0FF87D7F0820@neustar.biz> <522F2B50.7070402@nostrum.com> To: Robert Sparks X-Mailer: Apple Mail (2.1508) X-Source-IP: acsinet22.oracle.com [141.146.126.238] Cc: stir@ietf.org Subject: Re: [stir] edits to draft-kaplan-stir-fried X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 10 Sep 2013 15:14:36 -0000 --Apple-Mail=_4D908E30-C9CC-451A-B5F0-D672BCEEC17E Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=windows-1252 Sure! -hadriel On Sep 10, 2013, at 10:23 AM, Robert Sparks = wrote: > Brian - Thanks for breaking the silence... >=20 > We've had several folks suggest this would work well as a wiki page. = The wiki we have at=20 > is open for anyone with = a tools account to write on. > I've moved the link to the fried draft to = (you can get > to that from the FAQ link on the main page). >=20 > Hadriel - would you try dropping the next version on that page, = replacing that link, and lets see how using that as > a place to keep an FaQ going works? >=20 > Please keep the arguments about what the proposals actually say on = list. >=20 > RjS >=20 > On 9/9/13 3:00 PM, Rosen, Brian wrote: >>=20 >> Attached is a set of proposed edits to stir-fried (stir FAQ) as a = diff from the published version. >>=20 >> I apologize, in advance, for the form. Prior to publishing, I was = given an opportunity to comment on the text, which I failed to do in a = timely manner, and just about the time I got the comments done, Hadriel = had published his draft and had made some updates to it. I don't have = the source available to easily reproduce the edits. Accordingly, this = diff shows a lot of changes that are not actual proposed edits. >>=20 >> If accepted, I'll be happy to work with Hadriel to make it easier to = incorporate the changes in his current source document. >>=20 >> In private correspondence, he questioned some of these edits. Those = comments and my responses are: >> With regard to some of your changes: >>=20 >> 1) For the overview of the proposed solutions, you've added text that = says the in-band and out-of-band (1) use the same credentials and (2) = are performed by similar entities. I don't believe that's true - or at = least, I don't believe that most people in the WG agree with that. = Several of the out-of-band proponents consistently emphasize that PBX's = and smartphones would be the ones doing the out-of-band stuff, which is = a different set of actors than the in-band proponents have been = emphasizing would do in-band stuff. Also, I have seen no consistent = view/description of what the "credentials" are for out-of-band at all. >>=20 >>
I believe that the out of band proponents have proposed the = credentials be the same. =20 >> I believe that the signing of the data should be able to be performed = by the end point or a service provider. We've also talked about a PBX = signing. The actual credential could be different in those two cases, = representing the delegation from a national number authority to the SP = or a number resell to the SP vs a delegation from the SP to the end = user. For in-band I believe any party on the path, including any SP or = the endpoint should be able to validate. In the out of band case, only = the terminating SP or the terminating end user would be able to = validate. >>=20 >> There is no agreement on the view/description of credentials for = either in band or out of band, other than they have a public/private key = pair. For example, some in band credential proposals are full X.509 = certs and others are a plain private key in the DNS. The credential = needed for out of band is exactly the same I believe, although I though = it may need an additional pointer to the CPS (or equivalent). >>=20 >>=20 >>=20 >> 2) For the question of why we're focused on SIP, you added: >> We also observe that most of the problem calls are SIP-originated. = =20 >> Probably that is because there VoIP service providers that are = more=20 >> willing to allow their subscribers to use any calling party number=20= >> they want to. >>=20 >> I haven't seen any actual numbers that show most of the problem calls = are SIP-originated. Are there some numbers? >>
don't have numbers. Perhaps Henning does. I have been told most = of the problem is SIP-originated by a couple of independent sources, but = I have no verifiable facts. >>=20 >>=20 >> 3) For the question on proposed out-of-band solution, you added this: >> It proposes that the sender encrypt identity information for the=20= >> recipient (such that only the recipient can decrypt it) and store=20= >> it in a database selected by the recipient. The recipient queries=20= >> the database when it receives the call and obtains the identity=20 >> information. The proposal assumes the sender can query the = credential=20 >> database to obtain the public key of the recipient and the = identity of=20 >> the database to store the sender=92s information in. >>=20 >> I don't believe Ekr's draft says that. It doesn't stipulate whose = CPS database is used for storing the CPR stuff, except by hinting at it = in one sentence; most of the doc assumes/implies a single CPS. I think = the powerpoint slides shown in Wash DC might have described it as you = said, but even back then I thought they were backward. Alice should put = the CPR in her CPS, and Bob should retrieve it from her CPS. ISTM doing = it that way solves a lot of problems. >>=20 >>
EKR's draft says: >> The discussion above is written in terms of a single CPS, but this >> potentially has scaling problems, as well as allowing the CPS to >> learn about every call. These issues can be alleviated by having = a >> federated CPS. If a credential lookup service is already = available, >> the CPS location can also be stored in the callee's credentials. >>=20 >>=20 >> Brian >>=20 >>=20 >> _______________________________________________ >> stir mailing list >> stir@ietf.org >> https://www.ietf.org/mailman/listinfo/stir >=20 > _______________________________________________ > stir mailing list > stir@ietf.org > https://www.ietf.org/mailman/listinfo/stir --Apple-Mail=_4D908E30-C9CC-451A-B5F0-D672BCEEC17E Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=windows-1252 rjsparks@nostrum.com> = wrote:
=20 =20
Brian - Thanks for breaking the silence...

We've had several folks suggest this would work well as a wiki page. The wiki we have at
<http://trac.tool= s.ietf.org/wg/stir/trac/wiki> is open for anyone with a tools account to write on.
I've moved the link to the fried draft to <http://trac.= tools.ietf.org/wg/stir/trac/wiki/FAQ> (you can get
to that from the FAQ link on the main page).

Hadriel - would you try dropping the next version on that page, replacing that link, and lets see how using that as
a place to keep an FaQ going works?

Please keep the arguments about what the proposals actually say on list.

RjS

On 9/9/13 3:00 PM, Rosen, Brian wrote:

Attached is a set of proposed edits to stir-fried (stir FAQ) as a diff from the published version.

I apologize, in advance, for the form.  Prior to publishing, I was given an opportunity to comment on the text, which I failed to do in a timely manner, and just about the time I got the comments done, Hadriel had published his draft and had made some updates to it.  I don't have the source available to easily reproduce the edits.  Accordingly, = this diff shows a lot of changes that are not actual proposed edits.

If accepted, I'll be happy to work with Hadriel to make it easier to incorporate the changes in his current source document.

In private correspondence, he questioned some of these edits.  Those comments and my responses are:
With regard to some of your changes:

1) For the overview of the proposed solutions, you've added text that says the in-band and out-of-band (1) use the same credentials and (2) are performed by similar entities.  I don't believe that's true - or at least, I don't believe that most people in the WG agree with that.  Several of the out-of-band proponents consistently emphasize that PBX's and smartphones would be the ones doing the out-of-band stuff, which is a different set of actors than the in-band proponents have been emphasizing would do in-band stuff.  Also, I = have seen no consistent view/description of what the "credentials" are for out-of-band at all.

<br>I believe that the out of band proponents have proposed the credentials be the same.  
I believe that the signing of the data should be able to be performed by the end point or a service provider.  We've = also talked about a PBX signing.  The actual credential could = be different in those two cases, representing the delegation from a national number authority to the SP or a number resell to the SP vs a delegation from the SP to the end user. For in-band I believe any party on the path, including any SP or the endpoint should be able to validate.   In the out of = band case, only the terminating SP or the terminating end user would be able to validate.

There is no agreement on the view/description of credentials for either in band or out of band, other than they have a public/private key pair.  For example, some in = band credential proposals are full X.509 certs and others are a plain private key in the DNS.  The credential needed for = out of band is exactly the same I believe, although I though it may need an additional pointer to the CPS (or = equivalent).



2) For the question of why we're focused on SIP, you = added:
   We also observe that most of the problem = calls are SIP-originated.  
   Probably that is because there VoIP service = providers that are more 
   willing to allow their subscribers to use = any calling party number 
   they want to.

I haven't seen any actual numbers that show most of the problem calls are SIP-originated.  Are there some = numbers?
<br>don't have numbers.  Perhaps Henning does. I = have been told most of the problem is SIP-originated by a couple of independent sources, but I have no verifiable facts.


3) For the question on proposed out-of-band solution, you added this:
   It proposes that the sender encrypt identity = information for the 
   recipient (such that only the recipient can = decrypt it) and store 
   it in a database selected by the recipient. =  The recipient queries 
   the database when it receives the call and = obtains the identity 
   information.  The proposal assumes the = sender can query the credential 
   database to obtain the public key of the = recipient and the identity of 
   the database to store the sender=92s = information in.

I don't believe Ekr's draft says that.  It doesn't = stipulate whose CPS database is used for storing the CPR stuff, except by hinting at it in one sentence; most of the doc assumes/implies a single CPS.  I think the powerpoint = slides shown in Wash DC might have described it as you said, but even back then I thought they were backward.  Alice should put = the CPR in her CPS, and Bob should retrieve it from her CPS. =  ISTM doing it that way solves a lot of problems.

<br>EKR's draft says:
   The =
discussion above is written in terms of a single CPS, but this
   potentially has scaling problems, as well as allowing the CPS to
   learn about every call.  These issues can be alleviated by having a
   federated CPS.  If a credential lookup service is already available,
   the CPS location can also be stored in the callee's =
credentials.


Brian


_______________________________________________
stir mailing list
stir@ietf.org
https://www.ietf.org/m=
ailman/listinfo/stir

_______________________________________________
stir mailing = list
stir@ietf.org
https://www.ietf.org/ma= ilman/listinfo/stir

= --Apple-Mail=_4D908E30-C9CC-451A-B5F0-D672BCEEC17E-- From housley@vigilsec.com Tue Sep 10 15:32:13 2013 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7B89F21F9A40 for ; Tue, 10 Sep 2013 15:32:10 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.002 X-Spam-Level: X-Spam-Status: No, score=-102.002 tagged_above=-999 required=5 tests=[AWL=0.598, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id L3dnz03ZJrVi for ; Tue, 10 Sep 2013 15:32:05 -0700 (PDT) Received: from odin.smetech.net (mail.smetech.net [208.254.26.82]) by ietfa.amsl.com (Postfix) with ESMTP id 47F6921F9A37 for ; Tue, 10 Sep 2013 15:32:05 -0700 (PDT) Received: from localhost (unknown [208.254.26.81]) by odin.smetech.net (Postfix) with ESMTP id 41C32F241AE for ; Tue, 10 Sep 2013 18:32:18 -0400 (EDT) X-Virus-Scanned: amavisd-new at smetech.net Received: from odin.smetech.net ([208.254.26.82]) by localhost (ronin.smetech.net [208.254.26.81]) (amavisd-new, port 10024) with ESMTP id gh2WtrZfUxXU for ; Tue, 10 Sep 2013 18:31:54 -0400 (EDT) Received: from [192.168.2.100] (pool-96-255-37-18.washdc.fios.verizon.net [96.255.37.18]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by odin.smetech.net (Postfix) with ESMTP id DECC4F240FD for ; Tue, 10 Sep 2013 18:32:16 -0400 (EDT) From: Russ Housley Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Date: Tue, 10 Sep 2013 18:32:03 -0400 Message-Id: <2F1641D8-7B70-40FD-A8F0-8F8C1BCA0547@vigilsec.com> To: IETF STIR Mail List Mime-Version: 1.0 (Apple Message framework v1085) X-Mailer: Apple Mail (2.1085) Subject: [stir] draft-peterson-secure-origin-ps-02.txt X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 10 Sep 2013 22:32:13 -0000 http://www.ietf.org/id/draft-peterson-secure-origin-ps-02.txt Should the working group adopt this I-D as the basis for the STIR = problem statement docuent? Russ= From br@brianrosen.net Tue Sep 10 16:52:12 2013 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6E6A421F9C28 for ; Tue, 10 Sep 2013 16:52:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -103.182 X-Spam-Level: X-Spam-Status: No, score=-103.182 tagged_above=-999 required=5 tests=[AWL=0.417, BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LawUWZo-+aoM for ; Tue, 10 Sep 2013 16:52:07 -0700 (PDT) Received: from mail-qe0-f48.google.com (mail-qe0-f48.google.com [209.85.128.48]) by ietfa.amsl.com (Postfix) with ESMTP id E5BE121F9C20 for ; Tue, 10 Sep 2013 16:52:03 -0700 (PDT) Received: by mail-qe0-f48.google.com with SMTP id nd7so3979425qeb.35 for ; Tue, 10 Sep 2013 16:52:03 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:content-type:mime-version:subject:from :in-reply-to:date:cc:content-transfer-encoding:message-id:references :to; bh=lV52N78p/PEUIXLyCINTxWKZ+uzgwPN4iw13T8vAPYw=; b=NInGCUqzhZGhMgg6Kd0OOENEueE9z5ZsTUY+/UH+kaaPJ5NuA/WOlkVTgHn6ko3/lQ egujhFBS9sRCTxRRoVuMwD0kCyEEXB6XTjJcGPIhbwfwBD8QisKSpCsuWOiJaFpV/62t StN8ZI1E9qXvRjCp61qltr8VHg8kGfAbhZ7gRTgvSEablCUM0GSmI6Ga5ZoVlVa5kBAN VmTy1V8FHQjvnX9lhQM2daCIjMVHqPKz0XNdbPs5mDKlR1XrKuLfkHpI0sLKx0+xZmwH L/+9vR1VOHWtywzdhZ5PQzjll3THgRzkAWJnNGj3ZLzqBwe4uBlyC9GEAPlVjZuVVzmw htkg== X-Gm-Message-State: ALoCoQkVKYFDN/6KxE27wbc6Q65YuzYUhlHCu8+c4tpiXGjc+VUQQVzOU969N0qdCioEAk6qQEbp X-Received: by 10.229.51.69 with SMTP id c5mr8709373qcg.24.1378857123344; Tue, 10 Sep 2013 16:52:03 -0700 (PDT) Received: from [10.33.193.10] (neustargw.va.neustar.com. [209.173.53.233]) by mx.google.com with ESMTPSA id h6sm39324946qej.4.1969.12.31.16.00.00 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Tue, 10 Sep 2013 16:52:02 -0700 (PDT) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 6.5 \(1508\)) From: Brian Rosen In-Reply-To: <2F1641D8-7B70-40FD-A8F0-8F8C1BCA0547@vigilsec.com> Date: Tue, 10 Sep 2013 19:52:00 -0400 Content-Transfer-Encoding: quoted-printable Message-Id: References: <2F1641D8-7B70-40FD-A8F0-8F8C1BCA0547@vigilsec.com> To: Russ Housley X-Mailer: Apple Mail (2.1508) Cc: IETF STIR Mail List Subject: Re: [stir] draft-peterson-secure-origin-ps-02.txt X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 10 Sep 2013 23:52:12 -0000 Yes, I think so. I'm working on some comments, but they are relatively minor. Brian On Sep 10, 2013, at 6:32 PM, Russ Housley wrote: > http://www.ietf.org/id/draft-peterson-secure-origin-ps-02.txt >=20 > Should the working group adopt this I-D as the basis for the STIR = problem statement docuent? >=20 > Russ > _______________________________________________ > stir mailing list > stir@ietf.org > https://www.ietf.org/mailman/listinfo/stir From hadriel.kaplan@oracle.com Wed Sep 11 11:17:51 2013 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AF18011E81BE for ; Wed, 11 Sep 2013 11:17:51 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PNrN11o9HOaP for ; Wed, 11 Sep 2013 11:17:46 -0700 (PDT) Received: from aserp1040.oracle.com (aserp1040.oracle.com [141.146.126.69]) by ietfa.amsl.com (Postfix) with ESMTP id 43E0F11E81DF for ; Wed, 11 Sep 2013 11:17:46 -0700 (PDT) Received: from ucsinet21.oracle.com (ucsinet21.oracle.com [156.151.31.93]) by aserp1040.oracle.com (Sentrion-MTA-4.3.1/Sentrion-MTA-4.3.1) with ESMTP id r8BIHix7017485 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Wed, 11 Sep 2013 18:17:45 GMT Received: from userz7021.oracle.com (userz7021.oracle.com [156.151.31.85]) by ucsinet21.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id r8BIHhnn000142 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Wed, 11 Sep 2013 18:17:44 GMT Received: from abhmt106.oracle.com (abhmt106.oracle.com [141.146.116.58]) by userz7021.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id r8BIHggI000130; Wed, 11 Sep 2013 18:17:42 GMT Received: from [10.1.21.34] (/10.5.21.34) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Wed, 11 Sep 2013 11:17:42 -0700 Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 6.5 \(1508\)) From: Hadriel Kaplan In-Reply-To: <2F1641D8-7B70-40FD-A8F0-8F8C1BCA0547@vigilsec.com> Date: Wed, 11 Sep 2013 14:17:40 -0400 Content-Transfer-Encoding: quoted-printable Message-Id: <90E010DD-0464-4DCC-BE4E-3ABA650569E1@oracle.com> References: <2F1641D8-7B70-40FD-A8F0-8F8C1BCA0547@vigilsec.com> To: Russ Housley X-Mailer: Apple Mail (2.1508) X-Source-IP: ucsinet21.oracle.com [156.151.31.93] Cc: IETF STIR Mail List Subject: Re: [stir] draft-peterson-secure-origin-ps-02.txt X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Sep 2013 18:17:51 -0000 I guess it depends on how we want to handle big changes. In some IETF = WGs I've been involved with, we iterated the I-D to get it close to = "right" before we make it a WG item; in others we took an initial I-D as = a WG draft and then changed it once it was a WG doc. I'm not sure it = really matters which way it's done, so long as we don't raise the bar = for changes because the doc "is a WG doc with content that was already = agreed upon". I say that because there's a lot of good stuff in this draft, but also = there are sections of this doc I think should be removed entirely, and = sections I think should be added. (and that's not counting the minor = nits, like the abstract being ~80% wrong :) So if it's ok to make big changes after we adopt it as a WG doc, then I = don't see an alternative I-D being proposed and don't see a reason not = to take this one as the WG doc. -hadriel On Sep 10, 2013, at 6:32 PM, Russ Housley wrote: > http://www.ietf.org/id/draft-peterson-secure-origin-ps-02.txt >=20 > Should the working group adopt this I-D as the basis for the STIR = problem statement docuent? >=20 > Russ > _______________________________________________ > stir mailing list > stir@ietf.org > https://www.ietf.org/mailman/listinfo/stir From jon.peterson@neustar.biz Wed Sep 11 11:25:51 2013 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4CB7911E8203 for ; Wed, 11 Sep 2013 11:25:51 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -106.599 X-Spam-Level: X-Spam-Status: No, score=-106.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qo7o6bn2+ZTL for ; Wed, 11 Sep 2013 11:25:47 -0700 (PDT) Received: from neustar.com (smartmail.neustar.com [156.154.17.104]) by ietfa.amsl.com (Postfix) with ESMTP id 1DA7711E80A2 for ; Wed, 11 Sep 2013 11:25:47 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=neustar.biz; s=neustarbiz; t=1378924115; x=1694280911; q=dns/txt; h=From:Subject:Date:Message-ID:Content-Language: Content-Type:Content-ID:Content-Transfer-Encoding; bh=u5YxtMb1hW henbrVgahMiKNrvV9f/xumgkMSOYM8mkE=; b=NZvkkFaRW+tNBBlaDF5qqLANMg 9Zyr1HVdur2fZyPK94cMTDFFOVB8+zwn9/YeeSac+e8v6wn9SE5eqKq/M8Zw== Received: from ([10.31.58.70]) by stihiron2.va.neustar.com with ESMTP with TLS id J041124103.30140976; Wed, 11 Sep 2013 14:28:33 -0400 Received: from stntexmb12.cis.neustar.com ([169.254.2.63]) by stntexhc11.cis.neustar.com ([::1]) with mapi id 14.02.0342.003; Wed, 11 Sep 2013 14:25:39 -0400 From: "Peterson, Jon" To: Hadriel Kaplan , Russ Housley Thread-Topic: [stir] draft-peterson-secure-origin-ps-02.txt Thread-Index: AQHOrnWmcc3KDjvDok6yTdg1I3nRQJnBHIkA//+M3wA= Date: Wed, 11 Sep 2013 18:25:38 +0000 Message-ID: In-Reply-To: <90E010DD-0464-4DCC-BE4E-3ABA650569E1@oracle.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.3.6.130613 x-originating-ip: [192.168.129.90] x-ems-proccessed: R64IxjzeHPwwd+efoj3ZcA== x-ems-stamp: PWTraiepCHxVWeJFcgNrAw== Content-Type: text/plain; charset="us-ascii" Content-ID: <889C331F5881124EAA01A21174B86BB8@neustar.biz> Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Cc: IETF STIR Mail List Subject: Re: [stir] draft-peterson-secure-origin-ps-02.txt X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Sep 2013 18:25:51 -0000 Could you elaborate a bit? It is the right time to have this discussion, I think. What sections need to go, and what material needs to be added? Jon Peterson NeuStar, Inc. On 9/11/13 11:17 AM, "Hadriel Kaplan" wrote: > >I guess it depends on how we want to handle big changes. In some IETF >WGs I've been involved with, we iterated the I-D to get it close to >"right" before we make it a WG item; in others we took an initial I-D as >a WG draft and then changed it once it was a WG doc. I'm not sure it >really matters which way it's done, so long as we don't raise the bar for >changes because the doc "is a WG doc with content that was already agreed >upon". > >I say that because there's a lot of good stuff in this draft, but also >there are sections of this doc I think should be removed entirely, and >sections I think should be added. (and that's not counting the minor >nits, like the abstract being ~80% wrong :) > >So if it's ok to make big changes after we adopt it as a WG doc, then I >don't see an alternative I-D being proposed and don't see a reason not to >take this one as the WG doc. > >-hadriel > > >On Sep 10, 2013, at 6:32 PM, Russ Housley wrote: > >> http://www.ietf.org/id/draft-peterson-secure-origin-ps-02.txt >>=20 >> Should the working group adopt this I-D as the basis for the STIR >>problem statement docuent? >>=20 >> Russ >> _______________________________________________ >> stir mailing list >> stir@ietf.org >> https://www.ietf.org/mailman/listinfo/stir > >_______________________________________________ >stir mailing list >stir@ietf.org >https://www.ietf.org/mailman/listinfo/stir From hadriel.kaplan@oracle.com Wed Sep 11 14:45:52 2013 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DCE3821E80A5 for ; Wed, 11 Sep 2013 14:45:52 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HO1PYa+qcLbx for ; Wed, 11 Sep 2013 14:45:47 -0700 (PDT) Received: from aserp1040.oracle.com (aserp1040.oracle.com [141.146.126.69]) by ietfa.amsl.com (Postfix) with ESMTP id A68D621E80E2 for ; Wed, 11 Sep 2013 14:45:46 -0700 (PDT) Received: from ucsinet22.oracle.com (ucsinet22.oracle.com [156.151.31.94]) by aserp1040.oracle.com (Sentrion-MTA-4.3.1/Sentrion-MTA-4.3.1) with ESMTP id r8BLjhYx030931 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Wed, 11 Sep 2013 21:45:44 GMT Received: from userz7021.oracle.com (userz7021.oracle.com [156.151.31.85]) by ucsinet22.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id r8BLjh51024908 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Wed, 11 Sep 2013 21:45:43 GMT Received: from abhmt104.oracle.com (abhmt104.oracle.com [141.146.116.56]) by userz7021.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id r8BLjgoL025767; Wed, 11 Sep 2013 21:45:42 GMT Received: from [10.1.21.34] (/10.5.21.34) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Wed, 11 Sep 2013 14:45:42 -0700 Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 6.5 \(1508\)) From: Hadriel Kaplan In-Reply-To: Date: Wed, 11 Sep 2013 17:45:40 -0400 Content-Transfer-Encoding: quoted-printable Message-Id: References: To: "Peterson, Jon" X-Mailer: Apple Mail (2.1508) X-Source-IP: ucsinet22.oracle.com [156.151.31.94] Cc: IETF STIR Mail List , Russ Housley Subject: Re: [stir] draft-peterson-secure-origin-ps-02.txt X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Sep 2013 21:45:53 -0000 OK, some high-level stuff: -------------------- Pieces to add: Section 4 needs to have a separate section expanding on why PAI isn't = good enough. Basically Section 4 has two whole long sections on 4474 = and VIPR, but really it needs one on PAI as well. At the end of the day = that's the one that's actually *deployed* currently, compared to these = other two. (more on VIPR later) There needs to be a section on the difficulties handling legitimate = call-forwarding scenarios vs. the need to prevent malicious cut-paste = appearing like call-forwarding. It's a fairly technical problem, so = might be better in a different doc, but at least at a high-level it's a = "problem" for a problem statement doc to raise. There should be a section about the relative similarity (and = differences) of STIR's problem with Email's problems of spam and = identity. -------------------- Pieces to delete: Abstract: everything after the first sentence is just plain wrong, imo. = It's not the interworking of SIP that has reduced the security of Caller = ID, nor the lack of standards for identifying the calling party. This = would have happened whether it was SIP, H.323, or even SS7 over = Sigtrans. Section 2 does a reasonable job of explaining why it's become = a problem, but even that section doesn't really nail why it's grown so = much: imo, ultimately it boils down to reduction in cost, reduced = complexity, and availability of tools. (see = http://tools.ietf.org/html/draft-kaplan-stir-fried-00#section-3.8) Section 4.2: VIPR. I don't understand what value having this section = adds. Afaik, VIPR didn't claim to solve the STIR problem, and doesn't = appear to solve it. It just adds confusion to have this drawn out = explanation of VIPR in a problem statement doc about STIR. There are = plenty of other technologies we've developed in the IETF that don't = solve STIR either, that we could advertise in this doc as well. ;) Section 6 Requirements: I'm not sure a requirements list is appropriate = for this doc, or if we intend to have a more exhaustive list in a = separate doc. Either way, the "Display name" one is not in scope for = STIR. Section 7 Roadmap: this isn't germane to a problem statement doc, afaik. -------------------- Miscellaneous comments: I've read the doc multiple times and it still feels like it's heavily = weighted in favor of an out-of-band solution. I recognize it's an = individual draft and the authors get to say whatever they believe, but = for a WG doc I think it sends the wrong message. Maybe it's just my = sensitivity to the heavy attention it pays to VIPR, the "Shift to Mobile = Communications", and the evil-ness of B2BUAs and the PSTN that it subtly = portrays. Also, this is minor, but several times the doc ventures into concerns = about malicious man-in-the-middle attacks. For example section 4.1 page = 12 top paragraph talks about the problem of a 4474 Identity header being = dropped by an intermediate and creating a new header in its place; or = section 5.4 discussing how we could have two signatures to protect the = payload from being changed by MITM. But the truth is that's not the = problem we need to solve. We're not worried about malicious MITM. = We're worried about malicious ends. Nothing more. Protecting SIP = NOTIFY bodies or even SDP is not a problem we need to solve. -hadriel On Sep 11, 2013, at 2:25 PM, "Peterson, Jon" = wrote: >=20 > Could you elaborate a bit? It is the right time to have this = discussion, I > think. What sections need to go, and what material needs to be added? >=20 > Jon Peterson > NeuStar, Inc. >=20 > On 9/11/13 11:17 AM, "Hadriel Kaplan" = wrote: >=20 >>=20 >> I guess it depends on how we want to handle big changes. In some = IETF >> WGs I've been involved with, we iterated the I-D to get it close to >> "right" before we make it a WG item; in others we took an initial I-D = as >> a WG draft and then changed it once it was a WG doc. I'm not sure it >> really matters which way it's done, so long as we don't raise the bar = for >> changes because the doc "is a WG doc with content that was already = agreed >> upon". >>=20 >> I say that because there's a lot of good stuff in this draft, but = also >> there are sections of this doc I think should be removed entirely, = and >> sections I think should be added. (and that's not counting the minor >> nits, like the abstract being ~80% wrong :) >>=20 >> So if it's ok to make big changes after we adopt it as a WG doc, then = I >> don't see an alternative I-D being proposed and don't see a reason = not to >> take this one as the WG doc. >>=20 >> -hadriel >>=20 >>=20 >> On Sep 10, 2013, at 6:32 PM, Russ Housley = wrote: >>=20 >>> http://www.ietf.org/id/draft-peterson-secure-origin-ps-02.txt >>>=20 >>> Should the working group adopt this I-D as the basis for the STIR >>> problem statement docuent? >>>=20 >>> Russ >>> _______________________________________________ >>> stir mailing list >>> stir@ietf.org >>> https://www.ietf.org/mailman/listinfo/stir >>=20 >> _______________________________________________ >> stir mailing list >> stir@ietf.org >> https://www.ietf.org/mailman/listinfo/stir >=20 > _______________________________________________ > stir mailing list > stir@ietf.org > https://www.ietf.org/mailman/listinfo/stir From br@brianrosen.net Wed Sep 11 15:08:15 2013 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9008A11E8126 for ; Wed, 11 Sep 2013 15:08:14 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -103.321 X-Spam-Level: X-Spam-Status: No, score=-103.321 tagged_above=-999 required=5 tests=[AWL=0.278, BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Eh5rD2XmMr2J for ; Wed, 11 Sep 2013 15:08:08 -0700 (PDT) Received: from mail-qc0-f176.google.com (mail-qc0-f176.google.com [209.85.216.176]) by ietfa.amsl.com (Postfix) with ESMTP id CD07621F9A98 for ; Wed, 11 Sep 2013 15:08:07 -0700 (PDT) Received: by mail-qc0-f176.google.com with SMTP id t7so3024106qcv.21 for ; Wed, 11 Sep 2013 15:08:07 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:content-type:mime-version:subject:from :in-reply-to:date:cc:content-transfer-encoding:message-id:references :to; bh=GwP9vnt1srxFxDT52gtrm5Anu+XrQW9B4vpSMhYFnJY=; b=jX1IHxtX8D+jcWKoe6VtndxiDV9nSJ3FSOWNsbTjU8xkaElCUrc53jBTpg9BWQoE8v w2pONtwr3VEIqEbpxF6HO6ECRdaLu2iZX0HYYAZcRK90OtRapBLZSPeuMOboaYOpVtHu q7l5RB8O7U5dOeemyHuB+RpP15eaENxBxNEFd1PsQyL8oMUbQOFqrOCb1lbSNV463y7h BqIaUhuqhWhPkP+ys6uhlWbhQtxY8gouK3sfnTMxMY0JVGVavB4aP7wlRLxe0G57ONOK Ao5YVLadtG2/fQXN8hjeFNlPX/36cYStr7IrNtjfWm28lQe3wAr0Ycb6nb6T7FUp/xxp Tb3Q== X-Gm-Message-State: ALoCoQlT8opnmwUp6beD83OLK2GrvTbzsHXOkGCobL8TCjD6V8/3qSQ0t+s2a4Rcp+LGAgHGrirT X-Received: by 10.229.30.7 with SMTP id s7mr6453045qcc.7.1378937287207; Wed, 11 Sep 2013 15:08:07 -0700 (PDT) Received: from [10.33.193.10] (neustargw.va.neustar.com. [209.173.53.233]) by mx.google.com with ESMTPSA id a2sm487693qek.7.1969.12.31.16.00.00 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Wed, 11 Sep 2013 15:08:06 -0700 (PDT) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 6.5 \(1508\)) From: Brian Rosen In-Reply-To: Date: Wed, 11 Sep 2013 18:08:04 -0400 Content-Transfer-Encoding: quoted-printable Message-Id: <63312637-68B4-4264-8F8E-608EE68CEFDF@brianrosen.net> References: To: Hadriel Kaplan X-Mailer: Apple Mail (2.1508) Cc: IETF STIR Mail List , Russ Housley , "Peterson, Jon" Subject: Re: [stir] draft-peterson-secure-origin-ps-02.txt X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Sep 2013 22:08:15 -0000 > Section 6 Requirements: I'm not sure a requirements list is = appropriate for this doc, or if we intend to have a more exhaustive list = in a separate doc. Either way, the "Display name" one is not in scope = for STIR. I'd prefer requirements to be in this doc. I'm not even thrilled we = separated the threat model, but it's done so I'm over it. Brian= From jon.peterson@neustar.biz Wed Sep 11 16:24:31 2013 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7EED811E819F for ; Wed, 11 Sep 2013 16:24:31 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -106.323 X-Spam-Level: X-Spam-Status: No, score=-106.323 tagged_above=-999 required=5 tests=[AWL=-0.276, BAYES_00=-2.599, HELO_MISMATCH_COM=0.553, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kD-nUFs7RfB6 for ; Wed, 11 Sep 2013 16:24:27 -0700 (PDT) Received: from neustar.com (keys.neustar.biz [156.154.17.104]) by ietfa.amsl.com (Postfix) with ESMTP id 491F011E812E for ; Wed, 11 Sep 2013 16:24:27 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=neustar.biz; s=neustarbiz; t=1378942434; x=1694292718; q=dns/txt; h=From:Subject:Date:Message-ID:Content-Language: Content-Type:Content-ID:Content-Transfer-Encoding; bh=oaFQSmonMo ktli6o1uj/IMt/0Q3OuIJB4cqTSC+T0r4=; b=h1sgIVg5CssmYZaOsAaWEN/AEp JYbMcwx335vcnPJJrIbNKXbN1cNy1rCcr/Z3T09szizC2OaA4gZ5emoKsoiA== Received: from ([10.31.58.70]) by stihiron1.va.neustar.com with ESMTP with TLS id J041124052.31629884; Wed, 11 Sep 2013 19:33:53 -0400 Received: from stntexmb12.cis.neustar.com ([169.254.2.63]) by stntexhc11.cis.neustar.com ([::1]) with mapi id 14.02.0342.003; Wed, 11 Sep 2013 19:24:14 -0400 From: "Peterson, Jon" To: Hadriel Kaplan Thread-Topic: [stir] draft-peterson-secure-origin-ps-02.txt Thread-Index: AQHOrnWmcc3KDjvDok6yTdg1I3nRQJnBHIkA//+M3wCAAK0+AP//pi6A Date: Wed, 11 Sep 2013 23:24:13 +0000 Message-ID: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.3.6.130613 x-originating-ip: [192.168.129.90] x-ems-proccessed: R64IxjzeHPwwd+efoj3ZcA== x-ems-stamp: ZHxs44Te9spcjaATnxFBtA== Content-Type: text/plain; charset="us-ascii" Content-ID: <3D277CDD5020634A915ADAF1CF8E01B7@neustar.biz> Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Cc: IETF STIR Mail List , Russ Housley Subject: Re: [stir] draft-peterson-secure-origin-ps-02.txt X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Sep 2013 23:24:31 -0000 >Pieces to add: > >Section 4 needs to have a separate section expanding on why PAI isn't >good enough. Basically Section 4 has two whole long sections on 4474 and >VIPR, but really it needs one on PAI as well. At the end of the day >that's the one that's actually *deployed* currently, compared to these >other two. (more on VIPR later) I agree a section along those lines would be useful. I could take a stab at it, or be happy if you have text in mind to fit it in. >There needs to be a section on the difficulties handling legitimate >call-forwarding scenarios vs. the need to prevent malicious cut-paste >appearing like call-forwarding. It's a fairly technical problem, so >might be better in a different doc, but at least at a high-level it's a >"problem" for a problem statement doc to raise. I agree it's worth a mention, given that we mention things like legitimate spoofing already. Probably the extent of the difficulty depends significant on the specific solution, so that might be a good place to draw the line of what belongs in this doc and what belongs elsewhere. >There should be a section about the relative similarity (and differences) >of STIR's problem with Email's problems of spam and identity. Hmm. Would a reference to RFC5039 suffice for this? Might be a little dated, but kind of silly we don't reference that already, and I wouldn't want to spend a lot of real estate here reiterating it. >-------------------- >Pieces to delete: > >Abstract: everything after the first sentence is just plain wrong, imo. >It's not the interworking of SIP that has reduced the security of Caller >ID, nor the lack of standards for identifying the calling party. This >would have happened whether it was SIP, H.323, or even SS7 over Sigtrans. > Section 2 does a reasonable job of explaining why it's become a problem, >but even that section doesn't really nail why it's grown so much: imo, >ultimately it boils down to reduction in cost, reduced complexity, and >availability of tools. (see >http://tools.ietf.org/html/draft-kaplan-stir-fried-00#section-3.8) I did re-read the abstract after your earlier mail to see if I would find it similarly flawed, and I guess I had, and have, a hard time seeing it. I still believe that interworking SIP with the traditional telephone network has ultimately reduced the security of Caller ID, which is true regardless of whether or not the same would have applied had H.323 enjoyed SIP's market dominance, for example. But your argument here really seems not to be that the story is wrong, but just incomplete, as it points at results rather than causes, and that the causes here are low costs and the other factors identified in stir-fried 3.8. I don't have any objection to having those points in the ps document, but the abstract isn't trying to ferret out root causes, it's discussing why we need to do work and what the work is. I don't think that makes its claims "just plain wrong," but if you think it does, let's talk more about it. You say below that the secure-origins document is slanted towards an out-of-band solution, but by calling out SIP here I see it as slanted the other way. Agreed that, had SS7 over sigtran been the dominant VoIP protocol, and had the deployment environment used it for all sorts of IP->PSTN gateways, then yes, it would be critical for us to provide secure identity for it instead of for SIP. Does that mean we shouldn't focus on an in-band solution for SIP? >Section 4.2: VIPR. I don't understand what value having this section >adds. Afaik, VIPR didn't claim to solve the STIR problem, and doesn't >appear to solve it. It just adds confusion to have this drawn out >explanation of VIPR in a problem statement doc about STIR. There are >plenty of other technologies we've developed in the IETF that don't solve >STIR either, that we could advertise in this doc as well. ;) VIPR attempted to solve the secure origin problem specifically for telephone numbers, to provide a strong attestation of who is placing a call, as one of its suite of features. It was certainly positioned as a solution to the SIP identity problem, given that SIP calls were all using telephone numbers. It was charted as its own working group, and (unlike RFC4474) was actually implemented, deployed and to some degree used in the wild. Some techniques it introduced are potential salient to the STIR solution space, as are the many reasons it was not ultimately a success. I have a hard time thinking of another chartered IETF work item focused on addressing identity for telephone numbers, regardless of whether or not it "solved" STIR. I think this text (or at least something like it) has to stay. >Section 6 Requirements: I'm not sure a requirements list is appropriate >for this doc, or if we intend to have a more exhaustive list in a >separate doc. Either way, the "Display name" one is not in scope for >STIR. We should exile "display name" and probably also the "extended validation" bullet in the roadmap to CNIT where they belong. >Section 7 Roadmap: this isn't germane to a problem statement doc, afaik. Now that we have a charter, the need for a roadmap is significantly reduced. I do think this text (or a derivative) could remain useful for defining what in-band and out-of-band mean, but that doesn't need to be presented as a roadmap. >-------------------- >Miscellaneous comments: > >I've read the doc multiple times and it still feels like it's heavily >weighted in favor of an out-of-band solution. I recognize it's an >individual draft and the authors get to say whatever they believe, but >for a WG doc I think it sends the wrong message. Maybe it's just my >sensitivity to the heavy attention it pays to VIPR, the "Shift to Mobile >Communications", and the evil-ness of B2BUAs and the PSTN that it subtly >portrays. "Out-of-band" certainly appears in the text more than "in-band," and yes that is largely due to the VIPR section and the "mobile" section. But the document clearly says we need both "in" and "out", and discusses both. That was my understanding of the chartered work here in STIR as well. I don't think the ps can be read as arguing we shouldn't do in-band, or giving it insufficient consideration. Was there some missing consideration of in-band that you think should be added? I can go through and try to expunge any text that seems to vilify B2BUAs, though again if there's some particular lines here that seem unfair, do point 'em out. >Also, this is minor, but several times the doc ventures into concerns >about malicious man-in-the-middle attacks. For example section 4.1 page >12 top paragraph talks about the problem of a 4474 Identity header being >dropped by an intermediate and creating a new header in its place; or >section 5.4 discussing how we could have two signatures to protect the >payload from being changed by MITM. But the truth is that's not the >problem we need to solve. We're not worried about malicious MITM. We're >worried about malicious ends. Nothing more. Protecting SIP NOTIFY >bodies or even SDP is not a problem we need to solve. The reference in 4.1 to an RFC4474 header being dropped by an intermediary is merely summarizing the argument of draft-rosenberg-rfc4474-concerns, and reiterating its concerns here does not mean that the STIR working group is going to address them - the brokenness of RFC4474 is however part of the fundamental motivation for revisiting identity. Even though the problem space of STIR does not involve protecting NOTIFY bodies, understanding the limitations and scope of RFC4474 is essential to getting this right.=20 I'm more sympathetic to your concern about the text in Section 5.4 (though that idea appears as a "for example", not a "here's what we're going to do"), which probably I'd be willing to drop in favor of the more nuanced discussion of MitM in the threat model document. I do however maintain that, just as a mechanism for signing SIP requests from telephone numbers and might also work for other forms of identifiers, similarly a signature mechanism might work for assuring the origin and also for protecting other parts of a request. Saying it's "not a problem we need to solve" doesn't mean "solving that would be a problem." Jon Peterson Neustar, Inc. >-hadriel > >On Sep 11, 2013, at 2:25 PM, "Peterson, Jon" >wrote: > >>=20 >> Could you elaborate a bit? It is the right time to have this >>discussion, I >> think. What sections need to go, and what material needs to be added? >>=20 >> Jon Peterson >> NeuStar, Inc. >>=20 >> On 9/11/13 11:17 AM, "Hadriel Kaplan" wrote: >>=20 >>>=20 >>> I guess it depends on how we want to handle big changes. In some IETF >>> WGs I've been involved with, we iterated the I-D to get it close to >>> "right" before we make it a WG item; in others we took an initial I-D >>>as >>> a WG draft and then changed it once it was a WG doc. I'm not sure it >>> really matters which way it's done, so long as we don't raise the bar >>>for >>> changes because the doc "is a WG doc with content that was already >>>agreed >>> upon". >>>=20 >>> I say that because there's a lot of good stuff in this draft, but also >>> there are sections of this doc I think should be removed entirely, and >>> sections I think should be added. (and that's not counting the minor >>> nits, like the abstract being ~80% wrong :) >>>=20 >>> So if it's ok to make big changes after we adopt it as a WG doc, then I >>> don't see an alternative I-D being proposed and don't see a reason not >>>to >>> take this one as the WG doc. >>>=20 >>> -hadriel >>>=20 >>>=20 >>> On Sep 10, 2013, at 6:32 PM, Russ Housley wrote: >>>=20 >>>> http://www.ietf.org/id/draft-peterson-secure-origin-ps-02.txt >>>>=20 >>>> Should the working group adopt this I-D as the basis for the STIR >>>> problem statement docuent? >>>>=20 >>>> Russ >>>> _______________________________________________ >>>> stir mailing list >>>> stir@ietf.org >>>> https://www.ietf.org/mailman/listinfo/stir >>>=20 >>> _______________________________________________ >>> stir mailing list >>> stir@ietf.org >>> https://www.ietf.org/mailman/listinfo/stir >>=20 >> _______________________________________________ >> stir mailing list >> stir@ietf.org >> https://www.ietf.org/mailman/listinfo/stir > From fmousinh@cisco.com Mon Sep 16 06:49:33 2013 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A01EF11E8270 for ; Mon, 16 Sep 2013 06:49:31 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.598 X-Spam-Level: X-Spam-Status: No, score=-10.598 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wQHB6VX4DEx6 for ; Mon, 16 Sep 2013 06:49:23 -0700 (PDT) Received: from rcdn-iport-9.cisco.com (rcdn-iport-9.cisco.com [173.37.86.80]) by ietfa.amsl.com (Postfix) with ESMTP id 92FDB11E8124 for ; Mon, 16 Sep 2013 06:49:23 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2624; q=dns/txt; s=iport; t=1379339363; x=1380548963; h=from:to:subject:date:message-id:mime-version; bh=YFf9UnnyJdux6YEp/2EaUp81KwSVX6cs8DHVgGKruuM=; b=lKFqyMJDefmBSEBilHKWt5Tiv8OZjTQJ1rPjSu9wcUUQsXu0LdISq9CB V4yDhFMk/8C5mrjJKVvRTpGCrKqw9fT+9KiLXlFlRZnLCfyv6o5Jrmluw SE8wSWMtegkGFKxy2rPAkIML/enl4eX0uj3uMDzog0dePpoEOOAuCZVrt o=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AhoFAGoLN1KtJV2Y/2dsb2JhbABagkNEgQrAd4EcFnSCJwEEgQsBDAENEFYXEAQbh3uZGaAxj0KDVoEAA6lvgySCKg X-IronPort-AV: E=Sophos;i="4.90,915,1371081600"; d="scan'208,217";a="257309798" Received: from rcdn-core-1.cisco.com ([173.37.93.152]) by rcdn-iport-9.cisco.com with ESMTP; 16 Sep 2013 13:49:18 +0000 Received: from xhc-rcd-x11.cisco.com (xhc-rcd-x11.cisco.com [173.37.183.85]) by rcdn-core-1.cisco.com (8.14.5/8.14.5) with ESMTP id r8GDnI1M018924 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL) for ; Mon, 16 Sep 2013 13:49:18 GMT Received: from xmb-aln-x06.cisco.com ([169.254.1.176]) by xhc-rcd-x11.cisco.com ([173.37.183.85]) with mapi id 14.02.0318.004; Mon, 16 Sep 2013 08:49:17 -0500 From: "Fernando Mousinho (fmousinh)" To: "stir@ietf.org" Thread-Topic: Call Center Implications Thread-Index: AQHOsuOJ4w3gYleEHUa5h7lxd4Kh+A== Date: Mon, 16 Sep 2013 13:49:17 +0000 Message-ID: <71E3420F5D11314D8D989D8B72D247E129FCEE66@xmb-aln-x06.cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.3.7.130812 x-originating-ip: [10.117.23.13] Content-Type: multipart/alternative; boundary="_000_71E3420F5D11314D8D989D8B72D247E129FCEE66xmbalnx06ciscoc_" MIME-Version: 1.0 Subject: [stir] Call Center Implications X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 16 Sep 2013 13:49:33 -0000 --_000_71E3420F5D11314D8D989D8B72D247E129FCEE66xmbalnx06ciscoc_ Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable I'm catching up with the discussions in this working group, and am trying t= o understand some architecture implications in call centers (which is where= my background is). It seems that many of the problems we are trying to fix= are related to contact centers anyway, so it is probably a good idea to ha= ve everyone in the same page. Forgive me if it is an obvious question, but which components in a "typical= call center architecture" do you see signature and verification taking pla= ce? Such "typical" deployments have premises based equipment (PME), a sessi= on border controller (SBC) and of course a SIP service provider =96 all thr= ee could potentially be used throughout the authorization process. There ar= e different ramifications depending on where your mind is at. Fernando Mousinho Cisco Systems --_000_71E3420F5D11314D8D989D8B72D247E129FCEE66xmbalnx06ciscoc_ Content-Type: text/html; charset="Windows-1252" Content-ID: <32F949A94033684EBF26A938FC1062DF@emea.cisco.com> Content-Transfer-Encoding: quoted-printable

I'm catching up with the discussions in this working group, and am try= ing to understand some architecture implications in call centers (which is = where my background is). It seems that many of the problems we are trying t= o fix are related to contact centers anyway, so it is probably a good idea to have everyone in the same page.

Forgive me if it is an obvious question, but which components in a &qu= ot;typical call center architecture" do you see signature and verifica= tion taking place? Such "typical" deployments have premises based= equipment (PME), a session border controller (SBC) and of course a SIP service provider =96 all three could potentially be us= ed throughout the authorization process. There are different ramifications = depending on where your mind is at.

Fernando Mousinho
Cisco Systems



--_000_71E3420F5D11314D8D989D8B72D247E129FCEE66xmbalnx06ciscoc_-- From br@brianrosen.net Mon Sep 16 07:03:15 2013 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8649A11E80EF for ; Mon, 16 Sep 2013 07:03:15 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -103.479 X-Spam-Level: X-Spam-Status: No, score=-103.479 tagged_above=-999 required=5 tests=[AWL=0.119, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id I2PXKoqtsBAQ for ; Mon, 16 Sep 2013 07:03:10 -0700 (PDT) Received: from mail-ye0-f181.google.com (mail-ye0-f181.google.com [209.85.213.181]) by ietfa.amsl.com (Postfix) with ESMTP id 0404F11E827E for ; Mon, 16 Sep 2013 07:02:11 -0700 (PDT) Received: by mail-ye0-f181.google.com with SMTP id r14so1716948yen.12 for ; Mon, 16 Sep 2013 07:02:11 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:content-type:mime-version:subject:from :in-reply-to:date:cc:message-id:references:to; bh=F5bQhTap2mLxHIbAPF7hvmmRkjUg0hI28krTvAx+Ncs=; b=OVlA9a1LmYoF761TtXDT7xYU+ilNnV1/N+a9PAVi+X/EdXQ4dkTws8KjMic1WRXuRy MXGxZLMhXRy+osGrk5kK0if5iNqZzGNJXshHrIzsByeb02j3JX7yX8zjiWCDFjrc2sJY adlESOuBacypWqlyg+CUVCsYR5thHYNVvV4zUyXggavB5hhBDLdFlgwTP7bKE/TYgghY MHOeA+DB/ITh3gNz2XAGyPT+qcqYeTJxgyXjXJWFmYgs5JPASBR3wYhAr1lke3N14ErL dQyaWLWeMP9iq2AhSXMgA6XwQH20iJfuxsYiXZK1Bh/HgN3m1H0MOJVkrQuzSLJIyWNW 00Jw== X-Gm-Message-State: ALoCoQn6f3DLRwkfIwU6w6Yze7U6w9BCXHBnEYc+xodPkt/ivb4L9Sq0oboP35M9DkLxrLMeRA3b X-Received: by 10.236.181.4 with SMTP id k4mr4639yhm.177.1379340131447; Mon, 16 Sep 2013 07:02:11 -0700 (PDT) Received: from [10.33.193.10] (neustargw.va.neustar.com. [209.173.53.233]) by mx.google.com with ESMTPSA id 48sm38255413yhq.11.1969.12.31.16.00.00 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Mon, 16 Sep 2013 07:02:10 -0700 (PDT) Content-Type: multipart/alternative; boundary="Apple-Mail=_5066E960-F4BE-475E-81E0-94C99BFAF966" Mime-Version: 1.0 (Mac OS X Mail 6.5 \(1508\)) From: Brian Rosen In-Reply-To: <71E3420F5D11314D8D989D8B72D247E129FCEE66@xmb-aln-x06.cisco.com> Date: Mon, 16 Sep 2013 10:02:08 -0400 Message-Id: References: <71E3420F5D11314D8D989D8B72D247E129FCEE66@xmb-aln-x06.cisco.com> To: "Fernando Mousinho (fmousinh)" X-Mailer: Apple Mail (2.1508) Cc: "stir@ietf.org" Subject: Re: [stir] Call Center Implications X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 16 Sep 2013 14:03:15 -0000 --Apple-Mail=_5066E960-F4BE-475E-81E0-94C99BFAF966 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=windows-1252 I don't think it matters. =20 I expect with call centers that serve multiple clients and need to use = the outgoing number of their client, that the SIP proxy server or = endpoint would do it, but the SBC could do it by having the credentials = for each number that the call center used. In that instance, I'd = suspect the SIP SP wouldn't.=20 Where a call center was dedicated to a single client, the CPE, SBC or = SIP SP could reasonably sign. Brian On Sep 16, 2013, at 9:49 AM, "Fernando Mousinho (fmousinh)" = wrote: >=20 > I'm catching up with the discussions in this working group, and am = trying to understand some architecture implications in call centers = (which is where my background is). It seems that many of the problems we = are trying to fix are related to contact centers anyway, so it is = probably a good idea to have everyone in the same page. >=20 > Forgive me if it is an obvious question, but which components in a = "typical call center architecture" do you see signature and verification = taking place? Such "typical" deployments have premises based equipment = (PME), a session border controller (SBC) and of course a SIP service = provider =96 all three could potentially be used throughout the = authorization process. There are different ramifications depending on = where your mind is at. >=20 > Fernando Mousinho > Cisco Systems >=20 >=20 >=20 > _______________________________________________ > stir mailing list > stir@ietf.org > https://www.ietf.org/mailman/listinfo/stir --Apple-Mail=_5066E960-F4BE-475E-81E0-94C99BFAF966 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=windows-1252 I = don't think it matters.  

I expect with call = centers that serve multiple clients and need to use the outgoing number = of their client, that the SIP proxy server or endpoint would do it, but = the SBC could do it by having the credentials for each number that the = call center used.  In that instance, I'd suspect the SIP SP = wouldn't. 

Where a call center was = dedicated to a single client, the CPE, SBC or SIP SP could reasonably = sign.

Brian

On= Sep 16, 2013, at 9:49 AM, "Fernando Mousinho (fmousinh)" <fmousinh@cisco.com> = wrote:


I'm catching up with the discussions in this working group, and am = trying to understand some architecture implications in call centers = (which is where my background is). It seems that many of the problems we = are trying to fix are related to contact centers anyway, so it is probably a good idea to have everyone in the same = page.

Forgive me if it is an obvious question, but which components in a = "typical call center architecture" do you see signature and verification = taking place? Such "typical" deployments have premises based equipment = (PME), a session border controller (SBC) and of course a SIP service provider =96 all three could potentially be = used throughout the authorization process. There are different = ramifications depending on where your mind is at.

Fernando Mousinho
Cisco Systems



_______________________________________________
stir mailing = list
stir@ietf.org
https://www.ietf.org/ma= ilman/listinfo/stir

= --Apple-Mail=_5066E960-F4BE-475E-81E0-94C99BFAF966-- From hadriel.kaplan@oracle.com Mon Sep 16 09:13:47 2013 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7C9BC11E82C9 for ; Mon, 16 Sep 2013 09:13:47 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QkfzGOLPu97Z for ; Mon, 16 Sep 2013 09:13:40 -0700 (PDT) Received: from aserp1040.oracle.com (aserp1040.oracle.com [141.146.126.69]) by ietfa.amsl.com (Postfix) with ESMTP id 8A7B611E82E4 for ; Mon, 16 Sep 2013 09:12:30 -0700 (PDT) Received: from ucsinet22.oracle.com (ucsinet22.oracle.com [156.151.31.94]) by aserp1040.oracle.com (Sentrion-MTA-4.3.1/Sentrion-MTA-4.3.1) with ESMTP id r8GGCTU1026958 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Mon, 16 Sep 2013 16:12:29 GMT Received: from userz7021.oracle.com (userz7021.oracle.com [156.151.31.85]) by ucsinet22.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id r8GGCSQ7017453 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Mon, 16 Sep 2013 16:12:28 GMT Received: from abhmt119.oracle.com (abhmt119.oracle.com [141.146.116.71]) by userz7021.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id r8GGCSPd026197; Mon, 16 Sep 2013 16:12:28 GMT Received: from [10.1.21.34] (/10.5.21.34) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Mon, 16 Sep 2013 09:12:27 -0700 Content-Type: text/plain; charset=windows-1252 Mime-Version: 1.0 (Mac OS X Mail 6.6 \(1510\)) From: Hadriel Kaplan In-Reply-To: <71E3420F5D11314D8D989D8B72D247E129FCEE66@xmb-aln-x06.cisco.com> Date: Mon, 16 Sep 2013 12:12:26 -0400 Content-Transfer-Encoding: quoted-printable Message-Id: <66F0A54E-D7E7-455B-96E8-1302E88130B4@oracle.com> References: <71E3420F5D11314D8D989D8B72D247E129FCEE66@xmb-aln-x06.cisco.com> To: Fernando Mousinho (fmousinh) X-Mailer: Apple Mail (2.1510) X-Source-IP: ucsinet22.oracle.com [156.151.31.94] Cc: "stir@ietf.org" Subject: Re: [stir] Call Center Implications X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 16 Sep 2013 16:13:47 -0000 Any of them could do it. My guess is service providers will do it for = most call centers, although larger call centers might do it = themselves... especially ones which have trunks from multiple providers = and can source calls using the same number(s) out through multiple = providers on a call-by-call basis. -hadriel On Sep 16, 2013, at 9:49 AM, Fernando Mousinho (fmousinh) = wrote: > I'm catching up with the discussions in this working group, and am = trying to understand some architecture implications in call centers = (which is where my background is). It seems that many of the problems we = are trying to fix are related to contact centers anyway, so it is = probably a good idea to have everyone in the same page. >=20 > Forgive me if it is an obvious question, but which components in a = "typical call center architecture" do you see signature and verification = taking place? Such "typical" deployments have premises based equipment = (PME), a session border controller (SBC) and of course a SIP service = provider =96 all three could potentially be used throughout the = authorization process. There are different ramifications depending on = where your mind is at. >=20 > Fernando Mousinho > Cisco Systems From fmousinh@cisco.com Tue Sep 17 05:46:41 2013 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A8D8111E8437 for ; Tue, 17 Sep 2013 05:46:40 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.599 X-Spam-Level: X-Spam-Status: No, score=-10.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Yopf-H4r34zh for ; Tue, 17 Sep 2013 05:46:27 -0700 (PDT) Received: from rcdn-iport-2.cisco.com (rcdn-iport-2.cisco.com [173.37.86.73]) by ietfa.amsl.com (Postfix) with ESMTP id 29C1C11E8429 for ; Tue, 17 Sep 2013 05:46:21 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2682; q=dns/txt; s=iport; t=1379421981; x=1380631581; h=from:to:cc:subject:date:message-id:in-reply-to: content-id:content-transfer-encoding:mime-version; bh=fgYVEuoxN4RayXF2QUDe9f1OwfHYh/HIRXRBhI1gsAU=; b=gfKOlqbPSaJtCRXaWEWZb3t0qTvEqclDUmG02YXqbplH9hikxC5ZhmII qWbxp8lCFubc8eX2ESsucEdRtDxUJ//t+XBUhdLCkziwu530HnH3Pn7qc +jAoCbSwKrOddBtuVnJxWUe3X78+ugor6rSMMC3jgRzzND3K7Ph0nbv7Z s=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AjsFAGNOOFKtJXG9/2dsb2JhbABSCYMHgQrBFoEcFnSCJQEBAQR5EgEIEgYKVhcOAgQOBQiHe7pEjiWBETEHgx6BAAOJAKBvgySCKg X-IronPort-AV: E=Sophos;i="4.90,923,1371081600"; d="scan'208";a="260767142" Received: from rcdn-core2-2.cisco.com ([173.37.113.189]) by rcdn-iport-2.cisco.com with ESMTP; 17 Sep 2013 12:46:20 +0000 Received: from xhc-rcd-x11.cisco.com (xhc-rcd-x11.cisco.com [173.37.183.85]) by rcdn-core2-2.cisco.com (8.14.5/8.14.5) with ESMTP id r8HCkKwN017939 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Tue, 17 Sep 2013 12:46:20 GMT Received: from xmb-aln-x06.cisco.com ([169.254.1.176]) by xhc-rcd-x11.cisco.com ([173.37.183.85]) with mapi id 14.02.0318.004; Tue, 17 Sep 2013 07:46:20 -0500 From: "Fernando Mousinho (fmousinh)" To: Hadriel Kaplan Thread-Topic: [stir] Call Center Implications Thread-Index: AQHOsuOJ4w3gYleEHUa5h7lxd4Kh+JnI3RsAgAEVrwA= Date: Tue, 17 Sep 2013 12:46:19 +0000 Message-ID: <71E3420F5D11314D8D989D8B72D247E129FD1076@xmb-aln-x06.cisco.com> In-Reply-To: <66F0A54E-D7E7-455B-96E8-1302E88130B4@oracle.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.3.7.130812 x-originating-ip: [10.117.23.13] Content-Type: text/plain; charset="iso-8859-1" Content-ID: <242A5B041FE32F4A93260551BA1156FE@emea.cisco.com> Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Cc: "stir@ietf.org" Subject: Re: [stir] Call Center Implications X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 17 Sep 2013 12:46:42 -0000 I agree, Hadriel. While large call centers (including BPOs, which provide services for other companies) may have special arrangements with SPs, the majority (small to mid-size) will probably rely on the SPs to do provide to vouch for their identity. This would probably be the case for the home analog caller anyway. This would imply that the "originating" SP's willingness to provide this signature is a critical success factor for the proposal's adoption. But back to the business process outsourcers (BPO) case - where a call center is providing service on behalf of multiple companies. I can see the value of them sending different numbers based on the clients they represent. Wouldn't that create a billing issue though? This is not an area I understand well, but I would suspect that SP 1 allowing one of its subscribers to send an outbound call using a number registered to SP 2 could be a no-no. If this hypothesis is correct, then we are back to the case where the SP is signing all calls, even for BPOs. Or maybe this is another problem we are trying to fix in the working group, in which case we perhaps should state as a goal or benefit: "providing a reliable mechanism to let calls originated from one SP1 to outpulse numbers that belong to another". Fernando On 9/16/13 12:12 PM, "Hadriel Kaplan" wrote: > >Any of them could do it. My guess is service providers will do it for >most call centers, although larger call centers might do it themselves... >especially ones which have trunks from multiple providers and can source >calls using the same number(s) out through multiple providers on a >call-by-call basis. > >-hadriel > > >On Sep 16, 2013, at 9:49 AM, Fernando Mousinho (fmousinh) > wrote: > >> I'm catching up with the discussions in this working group, and am >>trying to understand some architecture implications in call centers >>(which is where my background is). It seems that many of the problems we >>are trying to fix are related to contact centers anyway, so it is >>probably a good idea to have everyone in the same page. >>=20 >> Forgive me if it is an obvious question, but which components in a >>"typical call center architecture" do you see signature and verification >>taking place? Such "typical" deployments have premises based equipment >>(PME), a session border controller (SBC) and of course a SIP service >>provider =AD all three could potentially be used throughout the >>authorization process. There are different ramifications depending on >>where your mind is at. >>=20 >> Fernando Mousinho >> Cisco Systems > From br@brianrosen.net Tue Sep 17 06:44:24 2013 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1912E11E845C for ; Tue, 17 Sep 2013 06:44:24 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -103.495 X-Spam-Level: X-Spam-Status: No, score=-103.495 tagged_above=-999 required=5 tests=[AWL=0.104, BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wOWRzU4PyYQr for ; Tue, 17 Sep 2013 06:44:18 -0700 (PDT) Received: from mail-ve0-f173.google.com (mail-ve0-f173.google.com [209.85.128.173]) by ietfa.amsl.com (Postfix) with ESMTP id 72AFE11E81EB for ; Tue, 17 Sep 2013 06:44:18 -0700 (PDT) Received: by mail-ve0-f173.google.com with SMTP id cz12so4134808veb.18 for ; Tue, 17 Sep 2013 06:44:16 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:content-type:mime-version:subject:from :in-reply-to:date:cc:content-transfer-encoding:message-id:references :to; bh=NXQiqyzf7RKtJFgHe1JQ9c6wQPxhXXtiUC8PGjp8bqE=; b=ihDpatkOYv3DXMZNpxRh513LoU8wbzRk9/OtXr8EhPDrUhmMnqZRzcTNOPyHtYBpQq vhFdGouzDgtJ4x3+KyIbc6GoKCYIFasyLr+UKCOwCsoW+PhCePSdBkCaETs266wNz71e hiQuiYKLl/lNbgKhW0gJePgVgWfqSkG0RxzX5vWBGKauHdBNPLA1R5U1NrtQ/Xqym2x7 ABNP75xKp7SZoQv4yWuqRreO7zO0uWN7cktZB0GcgE1aFSPnqIHsM8Gj8fLSl2nz3rDm k/bO933c0fBZ6Q0QP8Gk9SB/PQdLiLwOBn8R+5wTmRRjKwFVLEvY9aCCJ+0Qzhndd+60 XaLw== X-Gm-Message-State: ALoCoQl5woy03XysFYxnIkSyUkXgmfrdm4HuOI3BiLMs5QdBCFUZRqcqih6U5RO97tRzPQdN+zgZ X-Received: by 10.220.47.10 with SMTP id l10mr486778vcf.32.1379425456692; Tue, 17 Sep 2013 06:44:16 -0700 (PDT) Received: from [10.33.193.10] (neustargw.va.neustar.com. [209.173.53.233]) by mx.google.com with ESMTPSA id c16sm24358337vdj.12.1969.12.31.16.00.00 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Tue, 17 Sep 2013 06:44:15 -0700 (PDT) Content-Type: text/plain; charset=iso-8859-1 Mime-Version: 1.0 (Mac OS X Mail 6.5 \(1508\)) From: Brian Rosen In-Reply-To: <71E3420F5D11314D8D989D8B72D247E129FD1076@xmb-aln-x06.cisco.com> Date: Tue, 17 Sep 2013 09:44:12 -0400 Content-Transfer-Encoding: quoted-printable Message-Id: <3C71FB3F-A1A1-4637-8A6D-0BE44D40E784@brianrosen.net> References: <71E3420F5D11314D8D989D8B72D247E129FD1076@xmb-aln-x06.cisco.com> To: Fernando Mousinho (fmousinh) X-Mailer: Apple Mail (2.1508) Cc: "stir@ietf.org" , Hadriel Kaplan Subject: Re: [stir] Call Center Implications X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 17 Sep 2013 13:44:24 -0000 We have a requirement to support the BPO use case. The notion we had is that the company contracting the call center = approves the use, and the call center, or the SP acting on its behalf, = signs. Think of this as another level of delegation. An SP delegates numbers = to the company. The company "delegates" use of those numbers to the = call center. The call center calls, using that delegation. The = credentials of the call center would be different from those of the = company, but would cover the same number. Having multiple credentials = covering the same number will be very common due to the way delegation = happens. In order to allow SPs to sign, without creating credential per = TN, we allow credentials with ranges. The ranges could overlap when = delegation happens. =20 Consider the following complex US case: The North American Number Plan Administrator delegates 202-555-xxxx to = the Pooling Administrator. The PA now has a credential covering the = entire 10K block. The Pooling Administrator delegates 202-555-1xxx to SP A. SP A has a = credential for the entire 1K block SP A resells 202-555-12xx to SP B . SP B has a credential for a 100 TN = block SP B delegates 202-555-123x to Company C. Company C has a credential = for a 10 number block Company C authorizes 202-555-1234 to BPO D. BPO D has credential for a = 1 number block NANPA and the PA never are in a call path, so they would never sign a = call. However, SP A or SP B could sign a call from either Company C or BPO D = using the credential they have. The SP for the call center could acquire credentials from the BPO and = sign on its behalf. I suspect than many service providers would be = reluctant to do so unless the numbers were from their own inventory = (that is, the company got its numbers from the same SP as the call = center). Since that won't be the common case, the call center probably = has to do the signing itself. Brian On Sep 17, 2013, at 8:46 AM, Fernando Mousinho (fmousinh) = wrote: > I agree, Hadriel. While large call centers (including BPOs, which = provide > services for other companies) may have special arrangements with SPs, = the > majority (small to mid-size) will probably rely on the SPs to do = provide > to vouch for their identity. This would probably be the case for the = home > analog caller anyway. This would imply that the "originating" SP's > willingness to provide this signature is a critical success factor for = the > proposal's adoption. >=20 >=20 > But back to the business process outsourcers (BPO) case - where a call > center is providing service on behalf of multiple companies. I can see = the > value of them sending different numbers based on the clients they > represent. Wouldn't that create a billing issue though? This is not an > area I understand well, but I would suspect that SP 1 allowing one of = its > subscribers to send an outbound call using a number registered to SP 2 > could be a no-no. If this hypothesis is correct, then we are back to = the > case where the SP is signing all calls, even for BPOs. >=20 > Or maybe this is another problem we are trying to fix in the working > group, in which case we perhaps should state as a goal or benefit: > "providing a reliable mechanism to let calls originated from one SP1 = to > outpulse numbers that belong to another". >=20 > Fernando >=20 >=20 >=20 >=20 >=20 >=20 > On 9/16/13 12:12 PM, "Hadriel Kaplan" = wrote: >=20 >>=20 >> Any of them could do it. My guess is service providers will do it = for >> most call centers, although larger call centers might do it = themselves... >> especially ones which have trunks from multiple providers and can = source >> calls using the same number(s) out through multiple providers on a >> call-by-call basis. >>=20 >> -hadriel >>=20 >>=20 >> On Sep 16, 2013, at 9:49 AM, Fernando Mousinho (fmousinh) >> wrote: >>=20 >>> I'm catching up with the discussions in this working group, and am >>> trying to understand some architecture implications in call centers >>> (which is where my background is). It seems that many of the = problems we >>> are trying to fix are related to contact centers anyway, so it is >>> probably a good idea to have everyone in the same page. >>>=20 >>> Forgive me if it is an obvious question, but which components in a >>> "typical call center architecture" do you see signature and = verification >>> taking place? Such "typical" deployments have premises based = equipment >>> (PME), a session border controller (SBC) and of course a SIP service >>> provider =AD all three could potentially be used throughout the >>> authorization process. There are different ramifications depending = on >>> where your mind is at. >>>=20 >>> Fernando Mousinho >>> Cisco Systems >>=20 >=20 > _______________________________________________ > stir mailing list > stir@ietf.org > https://www.ietf.org/mailman/listinfo/stir From housley@vigilsec.com Tue Sep 17 06:45:35 2013 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 600EA11E845A for ; Tue, 17 Sep 2013 06:45:35 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.559 X-Spam-Level: X-Spam-Status: No, score=-102.559 tagged_above=-999 required=5 tests=[AWL=0.040, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id euYncHG086dn for ; Tue, 17 Sep 2013 06:45:28 -0700 (PDT) Received: from odin.smetech.net (mail.smetech.net [208.254.26.82]) by ietfa.amsl.com (Postfix) with ESMTP id 8818711E845B for ; Tue, 17 Sep 2013 06:45:27 -0700 (PDT) Received: from localhost (unknown [208.254.26.81]) by odin.smetech.net (Postfix) with ESMTP id 742F3F240F5 for ; Tue, 17 Sep 2013 09:45:57 -0400 (EDT) X-Virus-Scanned: amavisd-new at smetech.net Received: from odin.smetech.net ([208.254.26.82]) by localhost (ronin.smetech.net [208.254.26.81]) (amavisd-new, port 10024) with ESMTP id GnCeyb-hRHlB for ; Tue, 17 Sep 2013 09:44:57 -0400 (EDT) Received: from [192.168.2.100] (pool-96-231-164-210.washdc.fios.verizon.net [96.231.164.210]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by odin.smetech.net (Postfix) with ESMTP id EC049F2410F for ; Tue, 17 Sep 2013 09:45:51 -0400 (EDT) From: Russ Housley Mime-Version: 1.0 (Apple Message framework v1085) Content-Type: multipart/signed; boundary=Apple-Mail-181--461121938; protocol="application/pkcs7-signature"; micalg=sha1 Date: Tue, 17 Sep 2013 09:45:20 -0400 In-Reply-To: To: IETF STIR Mail List References: Message-Id: <11551EBB-C19A-45C7-8B6D-F14DF8024B15@vigilsec.com> X-Mailer: Apple Mail (2.1085) Subject: Re: [stir] draft-peterson-secure-origin-ps-02.txt X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 17 Sep 2013 13:45:37 -0000 --Apple-Mail-181--461121938 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii Only two people have responded to my question about adopting this = document as the starting point for the WG document. There is one = supportive posting, and one "it depends" posting. Several significant = changes were requested, and there has been some discussion of them. I suggest that we ask the authors to address those comments, and post = the updated document as draft-ietf-stir-secure-origin-ps-00.txt. If = anyone has concerns with this path forward, please speak now. Russ --Apple-Mail-181--461121938 Content-Disposition: attachment; filename=smime.p7s Content-Type: application/pkcs7-signature; name=smime.p7s Content-Transfer-Encoding: base64 MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIILZDCCBSow ggQSoAMCAQICEQCWQVO8Se/ELTDvfzPfbE7PMA0GCSqGSIb3DQEBBQUAMIGTMQswCQYDVQQGEwJH QjEbMBkGA1UECBMSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHEwdTYWxmb3JkMRowGAYDVQQK ExFDT01PRE8gQ0EgTGltaXRlZDE5MDcGA1UEAxMwQ09NT0RPIENsaWVudCBBdXRoZW50aWNhdGlv biBhbmQgU2VjdXJlIEVtYWlsIENBMB4XDTEyMDMwMTAwMDAwMFoXDTEzMDMwMTIzNTk1OVowJTEj MCEGCSqGSIb3DQEJARYUaG91c2xleUB2aWdpbHNlYy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDf+ZqfVh9j1/uT+utUViLKlpZAA9aLSKUcj8NOg8eiofsmSrgv9WhqLZqd3zgW UXlCMv8X25RJ1JvAP8ZuRMs5nYhalLhSIBt4fnyYQ3XSdD21V/cfXb6OYngaVbFz2QR/3/kNXwBh PttzTQm2Caen/xtcyqiguNmVHCx1jh0mjq0XwYCBc6xg8c/GM26t9RGaZG0zB0kdfAj61sussqYQ 080u9WjL9/oguapIjDQ4aO6LY+m0qL+2Vavk44wFPeDtFHA9hujoPcc63E0l/U5PRYpGAmHp1UEC 1jBU7uYd/iewV2EDEkDX55WLIpGZfoBF+uKx1VoPmEZltPqljg8hAgMBAAGjggHkMIIB4DAfBgNV HSMEGDAWgBR6E04AdFvGeGNkJ8Ev4qBbvHnFezAdBgNVHQ4EFgQU9jGbv3XM7fKm9udp1jtSoF5Y 4HQwDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwIAYDVR0lBBkwFwYIKwYBBQUHAwQGCysG AQQBsjEBAwUCMBEGCWCGSAGG+EIBAQQEAwIFIDBGBgNVHSAEPzA9MDsGDCsGAQQBsjEBAgEBATAr MCkGCCsGAQUFBwIBFh1odHRwczovL3NlY3VyZS5jb21vZG8ubmV0L0NQUzBXBgNVHR8EUDBOMEyg SqBIhkZodHRwOi8vY3JsLmNvbW9kb2NhLmNvbS9DT01PRE9DbGllbnRBdXRoZW50aWNhdGlvbmFu ZFNlY3VyZUVtYWlsQ0EuY3JsMIGIBggrBgEFBQcBAQR8MHowUgYIKwYBBQUHMAKGRmh0dHA6Ly9j cnQuY29tb2RvY2EuY29tL0NPTU9ET0NsaWVudEF1dGhlbnRpY2F0aW9uYW5kU2VjdXJlRW1haWxD QS5jcnQwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmNvbW9kb2NhLmNvbTAfBgNVHREEGDAWgRRo b3VzbGV5QHZpZ2lsc2VjLmNvbTANBgkqhkiG9w0BAQUFAAOCAQEAgSXPb1o6jO+b+6FUddXr55XJ wQ2QdnXMq9vZjvrMT9QsWT9w9M24/qKcQAIy7DKoPbWYdks6XwSAG3lYfxUyCEDcq8nIbegFO9Ov B7KlNg/3W0JkpUeBNqFywnXtQh4WR/dCXfoxxiKgvR2BGyMXrkfSfb5NU3wUZC0bHeMczwzFReMF QjaY08y2V1rReTVxL4wSag9cMUtOzSLVbBWhiNAOxLiA7yu3EqfpsW935htmCXVLk2JQj4mbGEPm wx2JJRIKjfZKfdAnaI/TVbO2tUgc60Fgx+C+der2gFaqvC1pKRSM/mOqP7KFfSMoCnoV8EpxcUK6 JcjZfvD5SQJJlDCCBjIwggUaoAMCAQICEQD5UkwFhjHIs6TFptkJSxyVMA0GCSqGSIb3DQEBBQUA MIGuMQswCQYDVQQGEwJVUzELMAkGA1UECBMCVVQxFzAVBgNVBAcTDlNhbHQgTGFrZSBDaXR5MR4w HAYDVQQKExVUaGUgVVNFUlRSVVNUIE5ldHdvcmsxITAfBgNVBAsTGGh0dHA6Ly93d3cudXNlcnRy dXN0LmNvbTE2MDQGA1UEAxMtVVROLVVTRVJGaXJzdC1DbGllbnQgQXV0aGVudGljYXRpb24gYW5k IEVtYWlsMB4XDTEwMDIwMzAwMDAwMFoXDTExMDIwMzIzNTk1OVowgd8xNTAzBgNVBAsTLENvbW9k byBUcnVzdCBOZXR3b3JrIC0gUEVSU09OQSBOT1QgVkFMSURBVEVEMUYwRAYDVQQLEz1UZXJtcyBh bmQgQ29uZGl0aW9ucyBvZiB1c2U6IGh0dHA6Ly93d3cuY29tb2RvLm5ldC9yZXBvc2l0b3J5MR8w HQYDVQQLExYoYykyMDAzIENvbW9kbyBMaW1pdGVkMRgwFgYDVQQDEw9SdXNzZWxsIEhvdXNsZXkx IzAhBgkqhkiG9w0BCQEWFGhvdXNsZXlAdmlnaWxzZWMuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEA5AyYrgM8fhrahXe9DyA5yttHWpDXGaypRvUGLf7yzWbFqS37jOJFzQePTZ3B 1o0BozDxzLfxGOmy3kwZ4NvU7nanwjVNqrK88zcEzQDzMLQZN6duz7x/5yhUjrWhs+nHKQmiFV0b NSDOSp251dXNZ9Lzohwehxem86njyxgfygaukTr0ZIKifNrViT1JE6TWv8P4vEmOpZrdDRPzgUr/ XRaGFGF6bFoVAsQ9aJf7e60fldUd2c+JfLqaJ1z9Pt0kQ/1iMsjN32kXr2nKYmmA7a9Pml39ciDo ZvAxon3cq/bXZr9sHr3FH0IS676XqlQMbFg61QK33kn9Jn8VdDe6EQIDAQABo4ICFjCCAhIwHwYD VR0jBBgwFoAUiYJnfcSdJnAAS7RQSHzePa4Ebn0wHQYDVR0OBBYEFFh0Ejt3RCOa4T6tnrS9WAYv DHpjMA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMCAGA1UdJQQZMBcGCCsGAQUFBwMEBgsr BgEEAbIxAQMFAjARBglghkgBhvhCAQEEBAMCBSAwRgYDVR0gBD8wPTA7BgwrBgEEAbIxAQIBAQEw KzApBggrBgEFBQcCARYdaHR0cHM6Ly9zZWN1cmUuY29tb2RvLm5ldC9DUFMwgaUGA1UdHwSBnTCB mjBMoEqgSIZGaHR0cDovL2NybC5jb21vZG9jYS5jb20vVVROLVVTRVJGaXJzdC1DbGllbnRBdXRo ZW50aWNhdGlvbmFuZEVtYWlsLmNybDBKoEigRoZEaHR0cDovL2NybC5jb21vZG8ubmV0L1VUTi1V U0VSRmlyc3QtQ2xpZW50QXV0aGVudGljYXRpb25hbmRFbWFpbC5jcmwwbAYIKwYBBQUHAQEEYDBe MDYGCCsGAQUFBzAChipodHRwOi8vY3J0LmNvbW9kb2NhLmNvbS9VVE5BQUFDbGllbnRDQS5jcnQw JAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmNvbW9kb2NhLmNvbTAfBgNVHREEGDAWgRRob3VzbGV5 QHZpZ2lsc2VjLmNvbTANBgkqhkiG9w0BAQUFAAOCAQEAFvP/2no5iO0xShez6g95ygTDJwfOI11o Y4cnK57hANXhLNW4zr20Tc/pjKCTwzyMZ0fGRtCL+SCa50I46ukeDVdUKFVYO4EvpTRpxlPsJPj3 whbLjZSI9tqmiRi3dER8wNjs/vizeeF1c1e+x0Tiu4y95HIkeBeNLNnwEEc+oKjMncEW2Fy/gdFZ W2AJH/w+3n5JDyQtp4o0VmQqpsU4xfyHiYEiVWYmfCJyfXoL614mdSQmwKqt+u8Esqb9QcsV1RYx 1whxHD7AronBSp5TpHwxzcCpbla8NRCX9DWIdorpN0ygtbfLrF3ILC6SctVxTPoC+MAAAH7c/Hnk oUE36DGCA+QwggPgAgEBMIGpMIGTMQswCQYDVQQGEwJHQjEbMBkGA1UECBMSR3JlYXRlciBNYW5j aGVzdGVyMRAwDgYDVQQHEwdTYWxmb3JkMRowGAYDVQQKExFDT01PRE8gQ0EgTGltaXRlZDE5MDcG A1UEAxMwQ09NT0RPIENsaWVudCBBdXRoZW50aWNhdGlvbiBhbmQgU2VjdXJlIEVtYWlsIENBAhEA lkFTvEnvxC0w738z32xOzzAJBgUrDgMCGgUAoIICDzAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcB MBwGCSqGSIb3DQEJBTEPFw0xMzA5MTcxMzQ1MjBaMCMGCSqGSIb3DQEJBDEWBBRHbif+sbjA9FYe fQ2T2mHkS5dvUjCB1QYJKwYBBAGCNxAEMYHHMIHEMIGuMQswCQYDVQQGEwJVUzELMAkGA1UECBMC VVQxFzAVBgNVBAcTDlNhbHQgTGFrZSBDaXR5MR4wHAYDVQQKExVUaGUgVVNFUlRSVVNUIE5ldHdv cmsxITAfBgNVBAsTGGh0dHA6Ly93d3cudXNlcnRydXN0LmNvbTE2MDQGA1UEAxMtVVROLVVTRVJG aXJzdC1DbGllbnQgQXV0aGVudGljYXRpb24gYW5kIEVtYWlsAhEA+VJMBYYxyLOkxabZCUsclTCB 1wYLKoZIhvcNAQkQAgsxgceggcQwga4xCzAJBgNVBAYTAlVTMQswCQYDVQQIEwJVVDEXMBUGA1UE BxMOU2FsdCBMYWtlIENpdHkxHjAcBgNVBAoTFVRoZSBVU0VSVFJVU1QgTmV0d29yazEhMB8GA1UE CxMYaHR0cDovL3d3dy51c2VydHJ1c3QuY29tMTYwNAYDVQQDEy1VVE4tVVNFUkZpcnN0LUNsaWVu dCBBdXRoZW50aWNhdGlvbiBhbmQgRW1haWwCEQD5UkwFhjHIs6TFptkJSxyVMA0GCSqGSIb3DQEB AQUABIIBAHrOoiyM5uowRIsUSCIMDnv9lxfOMgY15iiSSUJIIaTEVG2qyAe8uyc3eO/ar94Na+ko lKUFIPfq5ETVXyZF/RCmrbnJ4iCMAAnSQcr1/PDUX3HCOM8sVAtymb4B+LVsNLNwGt9AhLJzZ4Ks MCLWS5i7Yj/rZeHpNi1fZYInD0QjTItH2ZYqF/52hr4QIbElqdPYuoSEg6kZqT1ykHb/WuVM/xsY jg00OtthbVxK59p5lE4oULYmZdPcTw++dY1luW36ESULZmwAoU7PjR8QFrHLwS88E19vpNjMIio5 UNxdk0DzXgcnubtA8idxDJ02HeDAMmEdDNjY55UBfWmDJv8AAAAAAAA= --Apple-Mail-181--461121938-- From ekr@rtfm.com Wed Sep 18 06:48:50 2013 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E974411E811E for ; Wed, 18 Sep 2013 06:48:49 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.421 X-Spam-Level: X-Spam-Status: No, score=-102.421 tagged_above=-999 required=5 tests=[AWL=0.555, BAYES_00=-2.599, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xgGwV+0nPq+e for ; Wed, 18 Sep 2013 06:48:45 -0700 (PDT) Received: from mail-qe0-f44.google.com (mail-qe0-f44.google.com [209.85.128.44]) by ietfa.amsl.com (Postfix) with ESMTP id 2778E11E82E6 for ; Wed, 18 Sep 2013 06:48:45 -0700 (PDT) Received: by mail-qe0-f44.google.com with SMTP id 3so4738155qeb.3 for ; Wed, 18 Sep 2013 06:48:44 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc:content-type; bh=MgXgpiwLMJzMadFmvff30+dw5+ECcZX6Nrevfq4OGuY=; b=jJBwwHZsrGPeZYv+IPGx4Jgh2JF3HkIFiJNx0kj13fWsIZrlfUgHGTOGwKeFuAWh9O vz9pWc1JrakKM2saurybiJX3duWWbZRp9c2DHuWJx809Fj+Rsd+25ZcbYiCtbsmy/ZUk kb4KXFtj44AcB9VQlY4W+6lZKEpY5je6x3JChG34oNSbGGjhUJzomIzdPBzdZWOVJWys 5R+VOemzBbrRiKCQjMh2OVP0jnbKVEcHsPKWcdvd8qUYXsxmZnXoManHQkpHAi/pJzFs AdAS0xFeWJKprN0sAfkKAD87gJn+lFcy3IbdXJvAnxyVnSA7tVJ1ahypXq4OaHsbuwUg B7Tg== X-Gm-Message-State: ALoCoQlDeVs3m+8gt7wmityxutvMcOJcvK98dUpYKXFvthg4pLjC2HqOfUkckwKCywACP0G/J4WG X-Received: by 10.224.132.65 with SMTP id a1mr14464875qat.73.1379512124477; Wed, 18 Sep 2013 06:48:44 -0700 (PDT) MIME-Version: 1.0 Received: by 10.49.42.68 with HTTP; Wed, 18 Sep 2013 06:48:04 -0700 (PDT) X-Originating-IP: [74.95.2.168] In-Reply-To: <11551EBB-C19A-45C7-8B6D-F14DF8024B15@vigilsec.com> References: <11551EBB-C19A-45C7-8B6D-F14DF8024B15@vigilsec.com> From: Eric Rescorla Date: Wed, 18 Sep 2013 06:48:04 -0700 Message-ID: To: Russ Housley Content-Type: multipart/alternative; boundary=001a11c2c67c24a3e304e6a8b242 Cc: IETF STIR Mail List Subject: Re: [stir] draft-peterson-secure-origin-ps-02.txt X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 18 Sep 2013 13:48:50 -0000 --001a11c2c67c24a3e304e6a8b242 Content-Type: text/plain; charset=ISO-8859-1 I am in favor of adoption On Tue, Sep 17, 2013 at 6:45 AM, Russ Housley wrote: > Only two people have responded to my question about adopting this document > as the starting point for the WG document. There is one supportive > posting, and one "it depends" posting. Several significant changes were > requested, and there has been some discussion of them. > > I suggest that we ask the authors to address those comments, and post the > updated document as draft-ietf-stir-secure-origin-ps-00.txt. If anyone has > concerns with this path forward, please speak now. > > Russ > > > _______________________________________________ > stir mailing list > stir@ietf.org > https://www.ietf.org/mailman/listinfo/stir > > --001a11c2c67c24a3e304e6a8b242 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable
I am in favor of adoption
=

On Tue, Sep 17, 2013 at 6:45 AM, Russ Ho= usley <housley@vigilsec.com> wrote:
Only two people have responded to my questio= n about adopting this document as the starting point for the WG document. = =A0There is one supportive posting, and one "it depends" posting.= =A0Several significant changes were requested, and there has been some dis= cussion of them.

I suggest that we ask the authors to address those comments, and post the u= pdated document as draft-ietf-stir-secure-origin-ps-00.txt. =A0If anyone ha= s concerns with this path forward, please speak now.

Russ


_______________________________________________
stir mailing list
stir@ietf.org
ht= tps://www.ietf.org/mailman/listinfo/stir


--001a11c2c67c24a3e304e6a8b242-- From york@isoc.org Wed Sep 18 08:10:50 2013 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0B73911E823E for ; Wed, 18 Sep 2013 08:10:50 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -103.598 X-Spam-Level: X-Spam-Status: No, score=-103.598 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iu1KQ-B6ipTw for ; Wed, 18 Sep 2013 08:10:45 -0700 (PDT) Received: from na01-bl2-obe.outbound.protection.outlook.com (mail-by2lp0237.outbound.protection.outlook.com [207.46.163.237]) by ietfa.amsl.com (Postfix) with ESMTP id 7030311E8218 for ; Wed, 18 Sep 2013 08:10:43 -0700 (PDT) Received: from BLUPR06MB067.namprd06.prod.outlook.com (10.242.187.146) by BLUPR06MB066.namprd06.prod.outlook.com (10.242.187.145) with Microsoft SMTP Server (TLS) id 15.0.775.9; Wed, 18 Sep 2013 15:10:40 +0000 Received: from BLUPR06MB067.namprd06.prod.outlook.com ([169.254.16.71]) by BLUPR06MB067.namprd06.prod.outlook.com ([169.254.16.165]) with mapi id 15.00.0775.005; Wed, 18 Sep 2013 15:10:40 +0000 From: Dan York To: Eric Rescorla , Russ Housley Thread-Topic: [stir] draft-peterson-secure-origin-ps-02.txt Thread-Index: AQHOrnWonreURq9Mz0eDd0BXxmmvLZnA2XsAgAACOgCAADfjAIAAG4mAgAjMQACAAZMYAP//1AQA Date: Wed, 18 Sep 2013 15:10:39 +0000 Message-ID: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.255.101.4] x-forefront-prvs: 09730BD177 x-forefront-antispam-report: SFV:NSPM; SFS:(24454002)(189002)(199002)(377454003)(81342001)(74502001)(53806001)(4396001)(49866001)(50986001)(47446002)(51856001)(46102001)(74662001)(83072001)(81542001)(31966008)(16236675002)(36756003)(47976001)(79102001)(15975445006)(54356001)(77096001)(74706001)(59766001)(56776001)(54316002)(81686001)(77982001)(74876001)(76796001)(19580405001)(56816003)(47736001)(69226001)(63696002)(74366001)(76176001)(80976001)(19580395003)(76786001)(65816001)(83322001)(80022001)(81816001)(76482001); DIR:OUT; SFP:; SCL:1; SRVR:BLUPR06MB066; H:BLUPR06MB067.namprd06.prod.outlook.com; CLIP:10.255.101.4; FPR:; RD:InfoNoRecords; MX:1; A:1; LANG:en; Content-Type: multipart/alternative; boundary="_000_CE5F2D582D437yorkisocorg_" MIME-Version: 1.0 X-OriginatorOrg: isoc.org Cc: IETF STIR Mail List Subject: Re: [stir] draft-peterson-secure-origin-ps-02.txt X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 18 Sep 2013 15:10:50 -0000 --_000_CE5F2D582D437yorkisocorg_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable I support adopting this document. I agree with some of the changes suggeste= d by Hadriel and given Jon's willingness to address those comments it seems= to me that your suggested path is appropriate. Dan From: Eric Rescorla > Date: Wed, 18 Sep 2013 06:48:04 -0700 To: Russ Housley > Cc: IETF STIR Mail List > Subject: Re: [stir] draft-peterson-secure-origin-ps-02.txt I am in favor of adoption On Tue, Sep 17, 2013 at 6:45 AM, Russ Housley > wrote: Only two people have responded to my question about adopting this document = as the starting point for the WG document. There is one supportive posting= , and one "it depends" posting. Several significant changes were requested= , and there has been some discussion of them. I suggest that we ask the authors to address those comments, and post the u= pdated document as draft-ietf-stir-secure-origin-ps-00.txt. If anyone has = concerns with this path forward, please speak now. Russ _______________________________________________ stir mailing list stir@ietf.org https://www.ietf.org/mailman/listinfo/stir _______________________________________________ stir mailing list stir@ietf= .org https://www.ietf.org/mailman/listinfo/stir --_000_CE5F2D582D437yorkisocorg_ Content-Type: text/html; charset="us-ascii" Content-ID: <320F0E2C56D1BB47A6198FAEAB25E22D@namprd06.prod.outlook.com> Content-Transfer-Encoding: quoted-printable
I support adopting this document. I agree with some of the changes sug= gested by Hadriel and given Jon's willingness to address those comments it = seems to me that your suggested path is appropriate.

Dan

From: Eric Rescorla <ekr@rtfm.com>
Date: Wed, 18 Sep 2013 06:48:04 -07= 00
To: Russ Housley <housley@vigilsec.com>
Cc: IETF STIR Mail List <stir@ietf.org>
Subject: Re: [stir] draft-peterson-= secure-origin-ps-02.txt

I am in favor of adoption


On Tue, Sep 17, 2013 at 6:45 AM, Russ Housley <housley@vigil= sec.com> wrote:
Only two people have responded to my question about adopting this document = as the starting point for the WG document.  There is one supportive po= sting, and one "it depends" posting.  Several significant ch= anges were requested, and there has been some discussion of them.

I suggest that we ask the authors to address those comments, and post the u= pdated document as draft-ietf-stir-secure-origin-ps-00.txt.  If anyone= has concerns with this path forward, please speak now.

Russ


_______________________________________________
stir mailing list
stir@ietf.org
ht= tps://www.ietf.org/mailman/listinfo/stir


_______________________________________________ stir mailing list stir@ietf.org ht= tps://www.ietf.org/mailman/listinfo/stir
--_000_CE5F2D582D437yorkisocorg_-- From Gregory.Schumacher@sprint.com Thu Sep 19 12:22:48 2013 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5A24D21F93BF for ; Thu, 19 Sep 2013 12:22:48 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.185 X-Spam-Level: X-Spam-Status: No, score=-0.185 tagged_above=-999 required=5 tests=[BAYES_40=-0.185] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cHQFCbpPjW6J for ; Thu, 19 Sep 2013 12:22:43 -0700 (PDT) Received: from db8outboundpool.messaging.microsoft.com (mail-db8lp0184.outbound.messaging.microsoft.com [213.199.154.184]) by ietfa.amsl.com (Postfix) with ESMTP id 6470E21F944C for ; Thu, 19 Sep 2013 12:22:39 -0700 (PDT) Received: from mail114-db8-R.bigfish.com (10.174.8.247) by DB8EHSOBE009.bigfish.com (10.174.4.72) with Microsoft SMTP Server id 14.1.225.22; Thu, 19 Sep 2013 19:22:38 +0000 Received: from mail114-db8 (localhost [127.0.0.1]) by mail114-db8-R.bigfish.com (Postfix) with ESMTP id 669891001D5; Thu, 19 Sep 2013 19:22:38 +0000 (UTC) X-Forefront-Antispam-Report: CIP:144.230.168.26; KIP:(null); UIP:(null); IPV:NLI; H:plsasdm2.corp.sprint.com; RD:none; EFVD:NLI X-SpamScore: -26 X-BigFish: VS-26(zzbb2dIdb82h98dI9371I146fI542I1432Izz1f42h208ch1ee6h1de0h1fdah2073h1202h1e76h1d1ah1d2ah1fc6hzz1de098h1033IL1de097h186068h8275bh8275dhz2fh2a8h839h944hd25hf0ah1220h1288h12a5h12a9h12bdh137ah13b6h1441h1504h1537h153bh15d0h162dh1631h1758h18e1h1946h19b5h1ad9h1b0ah1d0ch1d2eh1d3fh1dfeh1dffh1e1dh1fe8h1ff5h1155h) Received-SPF: pass (mail114-db8: domain of sprint.com designates 144.230.168.26 as permitted sender) client-ip=144.230.168.26; envelope-from=Gregory.Schumacher@sprint.com; helo=plsasdm2.corp.sprint.com ; p.sprint.com ; Received: from mail114-db8 (localhost.localdomain [127.0.0.1]) by mail114-db8 (MessageSwitch) id 1379618556525689_10829; Thu, 19 Sep 2013 19:22:36 +0000 (UTC) Received: from DB8EHSMHS025.bigfish.com (unknown [10.174.8.228]) by mail114-db8.bigfish.com (Postfix) with ESMTP id 762D84200FD; Thu, 19 Sep 2013 19:22:36 +0000 (UTC) Received: from plsasdm2.corp.sprint.com (144.230.168.26) by DB8EHSMHS025.bigfish.com (10.174.4.35) with Microsoft SMTP Server (TLS) id 14.16.227.3; Thu, 19 Sep 2013 19:22:35 +0000 Received: from PDAWEH02.ad.sprint.com (pdaweh02.corp.sprint.com [144.226.111.42]) by plsasdm2.corp.sprint.com (Sentrion-MTA-4.2.2/Sentrion-MTA-4.2.2) with ESMTP id r8JJMWuu018728 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Thu, 19 Sep 2013 14:22:34 -0500 Received: from PLSWM14A.ad.sprint.com ([169.254.2.98]) by PDAWEH02.ad.sprint.com ([144.226.111.42]) with mapi id 14.03.0123.003; Thu, 19 Sep 2013 14:22:33 -0500 From: "Schumacher, Gregory [CTO]" To: Brian Rosen Thread-Topic: [stir] Call Center Implications Thread-Index: AQHOs6wMPfyZDTbboEq6spQtQNeBu5nNbOEg Date: Thu, 19 Sep 2013 19:22:32 +0000 Message-ID: <546DB8432567684FA41E336EF1D312B84A16487C@PLSWM14A.ad.sprint.com> References: <71E3420F5D11314D8D989D8B72D247E129FD1076@xmb-aln-x06.cisco.com> <3C71FB3F-A1A1-4637-8A6D-0BE44D40E784@brianrosen.net> In-Reply-To: <3C71FB3F-A1A1-4637-8A6D-0BE44D40E784@brianrosen.net> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.232.76.27] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: sprint.com X-FOPE-CONNECTOR: Id%0$Dn%*$RO%0$TLS%0$FQDN%$TlsDn% Cc: "stir@ietf.org" Subject: Re: [stir] Call Center Implications X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 19 Sep 2013 19:22:48 -0000 There are some benefits from this approach, but also some scenarios that ne= ed clarification how they could function. The benefit is that the credential represents both the company "responsible= " for the sales campaign (the "company" in your scenario) and the company o= perating the sales campaign (the call center in your scenario). For the us= e in forensics (after the fact analysis) such as pursuit of fraud investiga= tion, we then can follow both paths. However can you clarify the following - - If a SP "signs" the call, is it attesting to the "responsible" party for = the telemarketing call or the party executing the telemarketing campaign o= r both? - How is the SP supposed to know all the parties that it is attesting to - = the responsible party and/or executing party? -It seems likely that some of the numbers assigned to a company in your sce= nario will not be assigned to real telephones (or call center trunk) until = a telemarketing campaign is initiated or a call center selected to execute = the sales campaign, is it possible to have these unassigned or floating num= bers when not in use for a telemarketing campaign? Is it allowed under mos= t national numbering regimes? - How important is it to have a known or recognized phone number as the cal= ler id as part of a telemarketing campaign? I am assuming that not all cam= paigns care about having a number that is known or recognized. -In other words for this last bit, if a call center (telemarketing campaign= operator) is using their own set of numbers but serve multiple simultaneou= s telemarketing campaigns using the same originating numbers, what will the= y sign? Will they just have a credential representing the call center alon= e, or a different credential per telemarketing campaign, or a different cre= dential per responsible party (per client)? This will affect what is possi= ble for any forensic activity. -----Original Message----- From: stir-bounces@ietf.org [mailto:stir-bounces@ietf.org] On Behalf Of Bri= an Rosen Sent: Tuesday, September 17, 2013 9:44 AM To: Fernando Mousinho Cc: stir@ietf.org; Hadriel Kaplan Subject: Re: [stir] Call Center Implications We have a requirement to support the BPO use case. The notion we had is that the company contracting the call center approves = the use, and the call center, or the SP acting on its behalf, signs. Think of this as another level of delegation. An SP delegates numbers to t= he company. The company "delegates" use of those numbers to the call cente= r. The call center calls, using that delegation. The credentials of the c= all center would be different from those of the company, but would cover th= e same number. Having multiple credentials covering the same number will b= e very common due to the way delegation happens. In order to allow SPs to = sign, without creating credential per TN, we allow credentials with ranges.= The ranges could overlap when delegation happens. Consider the following complex US case: The North American Number Plan Administrator delegates 202-555-xxxx to the = Pooling Administrator. The PA now has a credential covering the entire 10K= block. The Pooling Administrator delegates 202-555-1xxx to SP A. SP A has a crede= ntial for the entire 1K block SP A resells 202-555-12xx to SP B . SP B has= a credential for a 100 TN block SP B delegates 202-555-123x to Company C. = Company C has a credential for a 10 number block Company C authorizes 202-= 555-1234 to BPO D. BPO D has credential for a 1 number block NANPA and the PA never are in a call path, so they would never sign a call. However, SP A or SP B could sign a call from either Company C or BPO D usin= g the credential they have. The SP for the call center could acquire credentials from the BPO and sign = on its behalf. I suspect than many service providers would be reluctant to= do so unless the numbers were from their own inventory (that is, the compa= ny got its numbers from the same SP as the call center). Since that won't = be the common case, the call center probably has to do the signing itself. Brian On Sep 17, 2013, at 8:46 AM, Fernando Mousinho (fmousinh) wrote: > I agree, Hadriel. While large call centers (including BPOs, which > provide services for other companies) may have special arrangements > with SPs, the majority (small to mid-size) will probably rely on the > SPs to do provide to vouch for their identity. This would probably be > the case for the home analog caller anyway. This would imply that the > "originating" SP's willingness to provide this signature is a critical > success factor for the proposal's adoption. > > > But back to the business process outsourcers (BPO) case - where a call > center is providing service on behalf of multiple companies. I can see > the value of them sending different numbers based on the clients they > represent. Wouldn't that create a billing issue though? This is not an > area I understand well, but I would suspect that SP 1 allowing one of > its subscribers to send an outbound call using a number registered to > SP 2 could be a no-no. If this hypothesis is correct, then we are back > to the case where the SP is signing all calls, even for BPOs. > > Or maybe this is another problem we are trying to fix in the working > group, in which case we perhaps should state as a goal or benefit: > "providing a reliable mechanism to let calls originated from one SP1 > to outpulse numbers that belong to another". > > Fernando > > > > > > > On 9/16/13 12:12 PM, "Hadriel Kaplan" wrote: > >> >> Any of them could do it. My guess is service providers will do it >> for most call centers, although larger call centers might do it themselv= es... >> especially ones which have trunks from multiple providers and can >> source calls using the same number(s) out through multiple providers >> on a call-by-call basis. >> >> -hadriel >> >> >> On Sep 16, 2013, at 9:49 AM, Fernando Mousinho (fmousinh) >> wrote: >> >>> I'm catching up with the discussions in this working group, and am >>> trying to understand some architecture implications in call centers >>> (which is where my background is). It seems that many of the >>> problems we are trying to fix are related to contact centers anyway, >>> so it is probably a good idea to have everyone in the same page. >>> >>> Forgive me if it is an obvious question, but which components in a >>> "typical call center architecture" do you see signature and >>> verification taking place? Such "typical" deployments have premises >>> based equipment (PME), a session border controller (SBC) and of >>> course a SIP service provider all three could potentially be used >>> throughout the authorization process. There are different >>> ramifications depending on where your mind is at. >>> >>> Fernando Mousinho >>> Cisco Systems >> > > _______________________________________________ > stir mailing list > stir@ietf.org > https://www.ietf.org/mailman/listinfo/stir _______________________________________________ stir mailing list stir@ietf.org https://www.ietf.org/mailman/listinfo/stir ________________________________ This e-mail may contain Sprint proprietary information intended for the sol= e use of the recipient(s). Any use by others is prohibited. If you are not = the intended recipient, please contact the sender and delete all copies of = the message. From fmousinh@cisco.com Thu Sep 19 13:00:07 2013 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4612721F8618 for ; Thu, 19 Sep 2013 13:00:06 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.599 X-Spam-Level: X-Spam-Status: No, score=-10.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eE7qBiVNxXLV for ; Thu, 19 Sep 2013 12:59:55 -0700 (PDT) Received: from rcdn-iport-3.cisco.com (rcdn-iport-3.cisco.com [173.37.86.74]) by ietfa.amsl.com (Postfix) with ESMTP id 743D721F85D4 for ; Thu, 19 Sep 2013 12:59:37 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=9170; q=dns/txt; s=iport; t=1379620777; x=1380830377; h=from:to:cc:subject:date:message-id:in-reply-to: content-id:content-transfer-encoding:mime-version; bh=+tnKVl2QiiuRj03gQmdzXE9keN+eCZSdMt7QS7+Ac8M=; b=gui9R9zNTuIcKjS2wrIVLSK4IKsImaDCdkKMTNviQO1JmXxTNPMrP3eI 9EFVmwOLpnfqzGeZLHbDBEcAC25nNwyjghqhUp+okF5wkvD+Tom0UTSxM ng2EaIkS++h3Qxstcs+o5T18W+d0cwNUdLdyL8J95yfZpzXgXJOJnyrjP Y=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: Ag4FAFRXO1KtJXG+/2dsb2JhbABSBgODBzhSwSyBIhZ0giUBAQEEAQEBVhULDAYBCBEBAwEBAQodLgsUAwYIAgQBDQUIh3sMuiMEjiUJBYEBAgYbEAcCBAuDDYEAA5QflVKDJIFqBxci X-IronPort-AV: E=Sophos;i="4.90,939,1371081600"; d="scan'208";a="262093672" Received: from rcdn-core2-3.cisco.com ([173.37.113.190]) by rcdn-iport-3.cisco.com with ESMTP; 19 Sep 2013 19:59:36 +0000 Received: from xhc-aln-x06.cisco.com (xhc-aln-x06.cisco.com [173.36.12.80]) by rcdn-core2-3.cisco.com (8.14.5/8.14.5) with ESMTP id r8JJxZsN028861 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Thu, 19 Sep 2013 19:59:36 GMT Received: from xmb-aln-x06.cisco.com ([169.254.1.176]) by xhc-aln-x06.cisco.com ([173.36.12.80]) with mapi id 14.02.0318.004; Thu, 19 Sep 2013 14:59:35 -0500 From: "Fernando Mousinho (fmousinh)" To: "Schumacher, Gregory [CTO]" , Brian Rosen Thread-Topic: [stir] Call Center Implications Thread-Index: AQHOs6wM4w3gYleEHUa5h7lxd4Kh+JnNbOEggAAiDIA= Date: Thu, 19 Sep 2013 19:59:34 +0000 Message-ID: <71E3420F5D11314D8D989D8B72D247E129FD51DA@xmb-aln-x06.cisco.com> In-Reply-To: <546DB8432567684FA41E336EF1D312B84A16487C@PLSWM14A.ad.sprint.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.3.7.130812 x-originating-ip: [10.117.23.3] Content-Type: text/plain; charset="Windows-1252" Content-ID: Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Cc: "stir@ietf.org" Subject: Re: [stir] Call Center Implications X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 19 Sep 2013 20:00:07 -0000 I believe the scenario telemarketing here is when a client hires a BPO to place outbound calls, but expect customers to return these calls to a different place (say, their own and operated call center). This way, this client is authorizing the BPO to use an identity that it (BPO) doesn't own. These numbers in this scenario are always operational, just at a different place. The same telemarketing operator would then outpulse multiple numbers for their multiple clients, none of these numbers belonging to the telemarketer. BTW, we are using the term "telemarketing" in a very generic sense - this could just as easily be a public service announcement, fundraiser, etc. If the telemarketer happens to own the inbound call center as well, it very likely owns the number as well and this would necessarily be a special case - it would fall under the same characteristics of any call center. On a different note, it would help a lot of we standardized terminology. Telemarketing, BPO, call center, end customer, clients=8A it may be hard fo= r others to follow the discussion later. (generic term for any type of outbound calling, including public service announcement, so don't think it's all about sales!) On 9/19/13 3:22 PM, "Schumacher, Gregory [CTO]" wrote: >There are some benefits from this approach, but also some scenarios that >need clarification how they could function. > >The benefit is that the credential represents both the company >"responsible" for the sales campaign (the "company" in your scenario) and >the company operating the sales campaign (the call center in your >scenario). For the use in forensics (after the fact analysis) such as >pursuit of fraud investigation, we then can follow both paths. > >However can you clarify the following - >- If a SP "signs" the call, is it attesting to the "responsible" party >for the telemarketing call or the party executing the telemarketing >campaign or both? > >- How is the SP supposed to know all the parties that it is attesting to >- the responsible party and/or executing party? > >-It seems likely that some of the numbers assigned to a company in your >scenario will not be assigned to real telephones (or call center trunk) >until a telemarketing campaign is initiated or a call center selected to >execute the sales campaign, is it possible to have these unassigned or >floating numbers when not in use for a telemarketing campaign? Is it >allowed under most national numbering regimes? > >- How important is it to have a known or recognized phone number as the >caller id as part of a telemarketing campaign? I am assuming that not >all campaigns care about having a number that is known or recognized. > >-In other words for this last bit, if a call center (telemarketing >campaign operator) is using their own set of numbers but serve multiple >simultaneous telemarketing campaigns using the same originating numbers, >what will they sign? Will they just have a credential representing the >call center alone, or a different credential per telemarketing campaign, >or a different credential per responsible party (per client)? This will >affect what is possible for any forensic activity. > >-----Original Message----- >From: stir-bounces@ietf.org [mailto:stir-bounces@ietf.org] On Behalf Of >Brian Rosen >Sent: Tuesday, September 17, 2013 9:44 AM >To: Fernando Mousinho >Cc: stir@ietf.org; Hadriel Kaplan >Subject: Re: [stir] Call Center Implications > >We have a requirement to support the BPO use case. > >The notion we had is that the company contracting the call center >approves the use, and the call center, or the SP acting on its behalf, >signs. >Think of this as another level of delegation. An SP delegates numbers to >the company. The company "delegates" use of those numbers to the call >center. The call center calls, using that delegation. The credentials >of the call center would be different from those of the company, but >would cover the same number. Having multiple credentials covering the >same number will be very common due to the way delegation happens. In >order to allow SPs to sign, without creating credential per TN, we allow >credentials with ranges. The ranges could overlap when delegation >happens. > >Consider the following complex US case: >The North American Number Plan Administrator delegates 202-555-xxxx to >the Pooling Administrator. The PA now has a credential covering the >entire 10K block. >The Pooling Administrator delegates 202-555-1xxx to SP A. SP A has a >credential for the entire 1K block SP A resells 202-555-12xx to SP B . >SP B has a credential for a 100 TN block SP B delegates 202-555-123x to >Company C. Company C has a credential for a 10 number block Company C >authorizes 202-555-1234 to BPO D. BPO D has credential for a 1 number >block > >NANPA and the PA never are in a call path, so they would never sign a >call. > >However, SP A or SP B could sign a call from either Company C or BPO D >using the credential they have. > >The SP for the call center could acquire credentials from the BPO and >sign on its behalf. I suspect than many service providers would be >reluctant to do so unless the numbers were from their own inventory (that >is, the company got its numbers from the same SP as the call center). >Since that won't be the common case, the call center probably has to do >the signing itself. > >Brian > >On Sep 17, 2013, at 8:46 AM, Fernando Mousinho (fmousinh) > wrote: > >> I agree, Hadriel. While large call centers (including BPOs, which >> provide services for other companies) may have special arrangements >> with SPs, the majority (small to mid-size) will probably rely on the >> SPs to do provide to vouch for their identity. This would probably be >> the case for the home analog caller anyway. This would imply that the >> "originating" SP's willingness to provide this signature is a critical >> success factor for the proposal's adoption. >> >> >> But back to the business process outsourcers (BPO) case - where a call >> center is providing service on behalf of multiple companies. I can see >> the value of them sending different numbers based on the clients they >> represent. Wouldn't that create a billing issue though? This is not an >> area I understand well, but I would suspect that SP 1 allowing one of >> its subscribers to send an outbound call using a number registered to >> SP 2 could be a no-no. If this hypothesis is correct, then we are back >> to the case where the SP is signing all calls, even for BPOs. >> >> Or maybe this is another problem we are trying to fix in the working >> group, in which case we perhaps should state as a goal or benefit: >> "providing a reliable mechanism to let calls originated from one SP1 >> to outpulse numbers that belong to another". >> >> Fernando >> >> >> >> >> >> >> On 9/16/13 12:12 PM, "Hadriel Kaplan" wrote: >> >>> >>> Any of them could do it. My guess is service providers will do it >>> for most call centers, although larger call centers might do it >>>themselves... >>> especially ones which have trunks from multiple providers and can >>> source calls using the same number(s) out through multiple providers >>> on a call-by-call basis. >>> >>> -hadriel >>> >>> >>> On Sep 16, 2013, at 9:49 AM, Fernando Mousinho (fmousinh) >>> wrote: >>> >>>> I'm catching up with the discussions in this working group, and am >>>> trying to understand some architecture implications in call centers >>>> (which is where my background is). It seems that many of the >>>> problems we are trying to fix are related to contact centers anyway, >>>> so it is probably a good idea to have everyone in the same page. >>>> >>>> Forgive me if it is an obvious question, but which components in a >>>> "typical call center architecture" do you see signature and >>>> verification taking place? Such "typical" deployments have premises >>>> based equipment (PME), a session border controller (SBC) and of >>>> course a SIP service provider all three could potentially be used >>>> throughout the authorization process. There are different >>>> ramifications depending on where your mind is at. >>>> >>>> Fernando Mousinho >>>> Cisco Systems >>> >> >> _______________________________________________ >> stir mailing list >> stir@ietf.org >> https://www.ietf.org/mailman/listinfo/stir > >_______________________________________________ >stir mailing list >stir@ietf.org >https://www.ietf.org/mailman/listinfo/stir > > >________________________________ > >This e-mail may contain Sprint proprietary information intended for the >sole use of the recipient(s). Any use by others is prohibited. If you are >not the intended recipient, please contact the sender and delete all >copies of the message. > >_______________________________________________ >stir mailing list >stir@ietf.org >https://www.ietf.org/mailman/listinfo/stir From michael.hammer@yaanatech.com Thu Sep 19 13:34:30 2013 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BCCAA21F8616 for ; Thu, 19 Sep 2013 13:34:30 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.722 X-Spam-Level: X-Spam-Status: No, score=-1.722 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, RCVD_IN_SORBS_DUL=0.877] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8WmD9DGZBMPS for ; Thu, 19 Sep 2013 13:34:26 -0700 (PDT) Received: from email1.corp.yaanatech.com (webmail10.yaanatech.com [63.128.177.10]) by ietfa.amsl.com (Postfix) with ESMTP id AE15221F85F5 for ; Thu, 19 Sep 2013 13:34:26 -0700 (PDT) Received: from SC9-EX2K10MB1.corp.yaanatech.com ([fe80::149d:c2e1:8065:2a47]) by ex2k10hub1.corp.yaanatech.com ([::1]) with mapi id 14.01.0218.012; Thu, 19 Sep 2013 13:34:25 -0700 From: Michael Hammer To: "fmousinh@cisco.com" , "Gregory.Schumacher@sprint.com" , "br@brianrosen.net" Thread-Topic: [stir] Call Center Implications Thread-Index: AQHOsuOJ4w3gYleEHUa5h7lxd4Kh+JnI/qMAgAFYvoCAABAsAIADgzEAgAAKWQD//5Ow4A== Date: Thu, 19 Sep 2013 20:34:24 +0000 Message-ID: <00C069FD01E0324C9FFCADF539701DB3BBEDBA62@sc9-ex2k10mb1.corp.yaanatech.com> References: <546DB8432567684FA41E336EF1D312B84A16487C@PLSWM14A.ad.sprint.com> <71E3420F5D11314D8D989D8B72D247E129FD51DA@xmb-aln-x06.cisco.com> In-Reply-To: <71E3420F5D11314D8D989D8B72D247E129FD51DA@xmb-aln-x06.cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: x-originating-ip: [10.17.100.151] Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=SHA1; boundary="----=_NextPart_000_0125_01CEB556.19441430" MIME-Version: 1.0 Cc: "stir@ietf.org" Subject: Re: [stir] Call Center Implications X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 19 Sep 2013 20:34:30 -0000 ------=_NextPart_000_0125_01CEB556.19441430 Content-Type: text/plain; charset="iso-8859-2" Content-Transfer-Encoding: quoted-printable Don't we still want to know the true originator of the call,=20 even when we have some token that says "Doctor so and so approved this message." Originating number, display number, and call-back number could be 3 different things. Should all of them be verifiable? Mike -----Original Message----- From: stir-bounces@ietf.org [mailto:stir-bounces@ietf.org] On Behalf Of Fernando Mousinho (fmousinh) Sent: Thursday, September 19, 2013 4:00 PM To: Schumacher, Gregory [CTO]; Brian Rosen Cc: stir@ietf.org Subject: Re: [stir] Call Center Implications I believe the scenario telemarketing here is when a client hires a BPO = to place outbound calls, but expect customers to return these calls to a different place (say, their own and operated call center). This way, = this client is authorizing the BPO to use an identity that it (BPO) doesn't = own. These numbers in this scenario are always operational, just at a = different place. The same telemarketing operator would then outpulse multiple numbers for their multiple clients, none of these numbers belonging to the = telemarketer. BTW, we are using the term "telemarketing" in a very generic sense - = this could just as easily be a public service announcement, fundraiser, etc. If the telemarketer happens to own the inbound call center as well, it = very likely owns the number as well and this would necessarily be a special = case - it would fall under the same characteristics of any call center. On a different note, it would help a lot of we standardized terminology. Telemarketing, BPO, call center, end customer, clients=A9 it may be hard = for others to follow the discussion later. (generic term for any type of outbound calling, including public service announcement, so don't think it's all about sales!) On 9/19/13 3:22 PM, "Schumacher, Gregory [CTO]" wrote: >There are some benefits from this approach, but also some scenarios=20 >that need clarification how they could function. > >The benefit is that the credential represents both the company=20 >"responsible" for the sales campaign (the "company" in your scenario)=20 >and the company operating the sales campaign (the call center in your=20 >scenario). For the use in forensics (after the fact analysis) such as=20 >pursuit of fraud investigation, we then can follow both paths. > >However can you clarify the following - >- If a SP "signs" the call, is it attesting to the "responsible" party=20 >for the telemarketing call or the party executing the telemarketing=20 >campaign or both? > >- How is the SP supposed to know all the parties that it is attesting=20 >to >- the responsible party and/or executing party? > >-It seems likely that some of the numbers assigned to a company in your = >scenario will not be assigned to real telephones (or call center trunk) = >until a telemarketing campaign is initiated or a call center selected=20 >to execute the sales campaign, is it possible to have these unassigned=20 >or floating numbers when not in use for a telemarketing campaign? Is=20 >it allowed under most national numbering regimes? > >- How important is it to have a known or recognized phone number as the = >caller id as part of a telemarketing campaign? I am assuming that not=20 >all campaigns care about having a number that is known or recognized. > >-In other words for this last bit, if a call center (telemarketing=20 >campaign operator) is using their own set of numbers but serve multiple = >simultaneous telemarketing campaigns using the same originating=20 >numbers, what will they sign? Will they just have a credential=20 >representing the call center alone, or a different credential per=20 >telemarketing campaign, or a different credential per responsible party = >(per client)? This will affect what is possible for any forensic = activity. > >-----Original Message----- >From: stir-bounces@ietf.org [mailto:stir-bounces@ietf.org] On Behalf Of = >Brian Rosen >Sent: Tuesday, September 17, 2013 9:44 AM >To: Fernando Mousinho >Cc: stir@ietf.org; Hadriel Kaplan >Subject: Re: [stir] Call Center Implications > >We have a requirement to support the BPO use case. > >The notion we had is that the company contracting the call center=20 >approves the use, and the call center, or the SP acting on its behalf,=20 >signs. >Think of this as another level of delegation. An SP delegates numbers=20 >to the company. The company "delegates" use of those numbers to the=20 >call center. The call center calls, using that delegation. The=20 >credentials of the call center would be different from those of the=20 >company, but would cover the same number. Having multiple credentials=20 >covering the same number will be very common due to the way delegation=20 >happens. In order to allow SPs to sign, without creating credential=20 >per TN, we allow credentials with ranges. The ranges could overlap=20 >when delegation happens. > >Consider the following complex US case: >The North American Number Plan Administrator delegates 202-555-xxxx to=20 >the Pooling Administrator. The PA now has a credential covering the=20 >entire 10K block. >The Pooling Administrator delegates 202-555-1xxx to SP A. SP A has a=20 >credential for the entire 1K block SP A resells 202-555-12xx to SP B . >SP B has a credential for a 100 TN block SP B delegates 202-555-123x to = >Company C. Company C has a credential for a 10 number block Company C=20 >authorizes 202-555-1234 to BPO D. BPO D has credential for a 1 number=20 >block > >NANPA and the PA never are in a call path, so they would never sign a=20 >call. > >However, SP A or SP B could sign a call from either Company C or BPO D=20 >using the credential they have. > >The SP for the call center could acquire credentials from the BPO and=20 >sign on its behalf. I suspect than many service providers would be=20 >reluctant to do so unless the numbers were from their own inventory=20 >(that is, the company got its numbers from the same SP as the call = center). >Since that won't be the common case, the call center probably has to do = >the signing itself. > >Brian > >On Sep 17, 2013, at 8:46 AM, Fernando Mousinho (fmousinh)=20 > wrote: > >> I agree, Hadriel. While large call centers (including BPOs, which=20 >> provide services for other companies) may have special arrangements=20 >> with SPs, the majority (small to mid-size) will probably rely on the=20 >> SPs to do provide to vouch for their identity. This would probably be = >> the case for the home analog caller anyway. This would imply that the = >> "originating" SP's willingness to provide this signature is a=20 >> critical success factor for the proposal's adoption. >> >> >> But back to the business process outsourcers (BPO) case - where a=20 >> call center is providing service on behalf of multiple companies. I=20 >> can see the value of them sending different numbers based on the=20 >> clients they represent. Wouldn't that create a billing issue though?=20 >> This is not an area I understand well, but I would suspect that SP 1=20 >> allowing one of its subscribers to send an outbound call using a=20 >> number registered to SP 2 could be a no-no. If this hypothesis is=20 >> correct, then we are back to the case where the SP is signing all = calls, even for BPOs. >> >> Or maybe this is another problem we are trying to fix in the working=20 >> group, in which case we perhaps should state as a goal or benefit: >> "providing a reliable mechanism to let calls originated from one SP1=20 >> to outpulse numbers that belong to another". >> >> Fernando >> >> >> >> >> >> >> On 9/16/13 12:12 PM, "Hadriel Kaplan" = wrote: >> >>> >>> Any of them could do it. My guess is service providers will do it =20 >>>for most call centers, although larger call centers might do it=20 >>>themselves... >>> especially ones which have trunks from multiple providers and can =20 >>>source calls using the same number(s) out through multiple providers = >>>on a call-by-call basis. >>> >>> -hadriel >>> >>> >>> On Sep 16, 2013, at 9:49 AM, Fernando Mousinho (fmousinh)=20 >>> wrote: >>> >>>> I'm catching up with the discussions in this working group, and am=20 >>>> trying to understand some architecture implications in call centers = >>>> (which is where my background is). It seems that many of the=20 >>>> problems we are trying to fix are related to contact centers=20 >>>> anyway, so it is probably a good idea to have everyone in the same page. >>>> >>>> Forgive me if it is an obvious question, but which components in a=20 >>>> "typical call center architecture" do you see signature and=20 >>>> verification taking place? Such "typical" deployments have premises = >>>> based equipment (PME), a session border controller (SBC) and of=20 >>>> course a SIP service provider all three could potentially be used=20 >>>> throughout the authorization process. There are different=20 >>>> ramifications depending on where your mind is at. >>>> >>>> Fernando Mousinho >>>> Cisco Systems >>> >> >> _______________________________________________ >> stir mailing list >> stir@ietf.org >> https://www.ietf.org/mailman/listinfo/stir > >_______________________________________________ >stir mailing list >stir@ietf.org >https://www.ietf.org/mailman/listinfo/stir > > >________________________________ > >This e-mail may contain Sprint proprietary information intended for the = >sole use of the recipient(s). Any use by others is prohibited. If you=20 >are not the intended recipient, please contact the sender and delete=20 >all copies of the message. > >_______________________________________________ >stir mailing list >stir@ietf.org >https://www.ietf.org/mailman/listinfo/stir _______________________________________________ stir mailing list stir@ietf.org https://www.ietf.org/mailman/listinfo/stir ------=_NextPart_000_0125_01CEB556.19441430 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIRPzCCBBow ggMCAhEAi1t1VoRUhQsAz684SM6xpDANBgkqhkiG9w0BAQUFADCByjELMAkGA1UEBhMCVVMxFzAV BgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQLExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTow OAYDVQQLEzEoYykgMTk5OSBWZXJpU2lnbiwgSW5jLiAtIEZvciBhdXRob3JpemVkIHVzZSBvbmx5 MUUwQwYDVQQDEzxWZXJpU2lnbiBDbGFzcyAxIFB1YmxpYyBQcmltYXJ5IENlcnRpZmljYXRpb24g QXV0aG9yaXR5IC0gRzMwHhcNOTkxMDAxMDAwMDAwWhcNMzYwNzE2MjM1OTU5WjCByjELMAkGA1UE BhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQLExZWZXJpU2lnbiBUcnVzdCBO ZXR3b3JrMTowOAYDVQQLEzEoYykgMTk5OSBWZXJpU2lnbiwgSW5jLiAtIEZvciBhdXRob3JpemVk IHVzZSBvbmx5MUUwQwYDVQQDEzxWZXJpU2lnbiBDbGFzcyAxIFB1YmxpYyBQcmltYXJ5IENlcnRp ZmljYXRpb24gQXV0aG9yaXR5IC0gRzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd hNS5tPmn2PMEeJzePdxsExbZet0kUWbAxyZZDawGCMKU0TMf8IM1H24byN6qbhVOVCfvxG0a7Avj DvBEpVfHQFgeo0cfcexg9m2UyBg57f5CGFbf5ExJEHhOAXY1YxI23Wa8AQQ2o1Vo1aI2CayrISZU Bq0/yhTgrMqtBh2V4vid8eBg/8J/dStMzNr+h5kh6rr+PlTX0ll42zxuz6ATABq4J6HkvmeWyqDF s5zdyXWe6zCaX6PN2a54GT8j6VzbKb2tVcgbVIxj9uim6sc3ElyjKR4C2dsfO7TXD1ZHgRUESq+D J9HFWIjB3faqp6MY2miqbRFR4b9la5+WdtE9AgMBAAEwDQYJKoZIhvcNAQEFBQADggEBAKtmjdez useatuZV0AXxnzGNWqrZqkYmD3Htpa1TVmIBRypE6f4/dAsTm7n0TRuy0V+yttKIXLOfzcvUp9lg lYQ6+ME3HWHK57DF5ZHaVKasMYGul97NCKy4wJeAf25ypOdpE5VlH8STPP15jwTUPk/q957OzWd8 T2UC/5GFVHPH/zb3hi3s0F5P/xGfcgbWuBrxTA0mZeJEgB7Hn+Pd6Ara7KUggGlooU9+4WvPB0H6 g468ON2wLhGxa7JCzJq8+UgieUoZD7IcPiB02WrDvvIoeBNWeU9tUOobsLVXsTdmWCPz3A/fCofE 74YF1TgUYJmjS94GlnEs8tu2H6TvP+4wggZCMIIFKqADAgECAhA4qwAv/66Wt1b/OVr7XecbMA0G CSqGSIb3DQEBBQUAMIHKMQswCQYDVQQGEwJVUzEXMBUGA1UEChMOVmVyaVNpZ24sIEluYy4xHzAd BgNVBAsTFlZlcmlTaWduIFRydXN0IE5ldHdvcmsxOjA4BgNVBAsTMShjKSAxOTk5IFZlcmlTaWdu LCBJbmMuIC0gRm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxRTBDBgNVBAMTPFZlcmlTaWduIENsYXNz IDEgUHVibGljIFByaW1hcnkgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBHMzAeFw0xMTA5MDEw MDAwMDBaFw0yMTA4MzEyMzU5NTlaMIGmMQswCQYDVQQGEwJVUzEdMBsGA1UEChMUU3ltYW50ZWMg Q29ycG9yYXRpb24xHzAdBgNVBAsTFlN5bWFudGVjIFRydXN0IE5ldHdvcmsxHjAcBgNVBAsTFVBl cnNvbmEgTm90IFZhbGlkYXRlZDE3MDUGA1UEAxMuU3ltYW50ZWMgQ2xhc3MgMSBJbmRpdmlkdWFs IFN1YnNjcmliZXIgQ0EgLSBHNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMbsJ/0d Y/Q7HYrB0xzIyIKGtrhKhpKqgVxyyjANL55BIlcwISWQmqP0rCrGiBeGYXITdi7sA8snm48ggDfg 5IraVaZQD/y5XCNpiUKhuh+v7w75pMkK8fg3ssbZkkqufd+4RB+buj+MBv7YI09IUSNqYISo7icv YN+W8hoqjDyPAMxPy/ogjrw19uHwmrYF8/wdP8YUew7a8gXk04MCpsVpcLSp5Fbp2x1c9KY24mu1 Hiot3L677joEsDAIrV9obMa9BpaIhOfmqWQtvDgwu4gmw2dmZrS0d/nAoccOcu9m4uW5yuDzhXc1 mN7UHLD+ZnHiOMtufE9AVeuX2agYHu0CAwEAAaOCAkQwggJAMDgGCCsGAQUFBwEBBCwwKjAoBggr BgEFBQcwAYYcaHR0cDovL3BraS1vY3NwLnZlcmlzaWduLmNvbTASBgNVHRMBAf8ECDAGAQH/AgEA MGwGA1UdIARlMGMwYQYLYIZIAYb4RQEHFwEwUjAmBggrBgEFBQcCARYaaHR0cDovL3d3dy5zeW1h dXRoLmNvbS9jcHMwKAYIKwYBBQUHAgIwHBoaaHR0cDovL3d3dy5zeW1hdXRoLmNvbS9ycGEwNAYD VR0fBC0wKzApoCegJYYjaHR0cDovL2NybC52ZXJpc2lnbi5jb20vcGNhMS1nMy5jcmwwDgYDVR0P AQH/BAQDAgEGMCkGA1UdEQQiMCCkHjAcMRowGAYDVQQDExFWZXJpU2lnbk1QS0ktMi05NzAdBgNV HQ4EFgQUrfnDk3IttbkoYeSk12DVxApeGgEwgfEGA1UdIwSB6TCB5qGB0KSBzTCByjELMAkGA1UE BhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQLExZWZXJpU2lnbiBUcnVzdCBO ZXR3b3JrMTowOAYDVQQLEzEoYykgMTk5OSBWZXJpU2lnbiwgSW5jLiAtIEZvciBhdXRob3JpemVk IHVzZSBvbmx5MUUwQwYDVQQDEzxWZXJpU2lnbiBDbGFzcyAxIFB1YmxpYyBQcmltYXJ5IENlcnRp ZmljYXRpb24gQXV0aG9yaXR5IC0gRzOCEQCLW3VWhFSFCwDPrzhIzrGkMA0GCSqGSIb3DQEBBQUA A4IBAQDWj8Ham4jys2xNH1gvugFRXXTBRujDuHuf1kDx7/8yuolrwA40Q5+kmeak8F1IM2KFhWH+ I4gijGCbK5xlSZTEojgkSKVcpVBLaOliIqeT6Jkibj1buxBCDh9MdUc0VgmP+L2MPPNcu9KWcFRw Yk3v0RC+nUgsXuyGaweC8D3hJScoLOAWdh6z/eViltKKPV8rrvtcwhO3ZWPLNHZDn9aHmaturZXB AD9GJ4H/Nd4jDkPcFF8y+cop78JSMPWZ3bmB+DolII2CaPK5IYV0ZgThhjkWMvIt1iqoyd7ZAAJP 4xggxaWBVraV3tOCrfh7Jb5kfC6gunAs+Pl14nRNB22EMIIG1zCCBb+gAwIBAgIQEB3dROkPDT0Q 6QYEc74tcjANBgkqhkiG9w0BAQUFADCBpjELMAkGA1UEBhMCVVMxHTAbBgNVBAoTFFN5bWFudGVj IENvcnBvcmF0aW9uMR8wHQYDVQQLExZTeW1hbnRlYyBUcnVzdCBOZXR3b3JrMR4wHAYDVQQLExVQ ZXJzb25hIE5vdCBWYWxpZGF0ZWQxNzA1BgNVBAMTLlN5bWFudGVjIENsYXNzIDEgSW5kaXZpZHVh bCBTdWJzY3JpYmVyIENBIC0gRzQwHhcNMTMwNDAxMDAwMDAwWhcNMTQwNDAyMjM1OTU5WjCBzjEu MCwGA1UEAwwlUGVyc29uYSBOb3QgVmFsaWRhdGVkIC0gMTM2NDg0MjY5NDQ0MzErMCkGCSqGSIb3 DQEJARYcbWljaGFlbC5oYW1tZXJAeWFhbmF0ZWNoLmNvbTEPMA0GA1UECwwGUy9NSU1FMR4wHAYD VQQLDBVQZXJzb25hIE5vdCBWYWxpZGF0ZWQxHzAdBgNVBAsMFlN5bWFudGVjIFRydXN0IE5ldHdv cmsxHTAbBgNVBAoMFFN5bWFudGVjIENvcnBvcmF0aW9uMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAh2AtKQNowI8ILmNvdcY16moA8CH7hjSvGDNofwWsh4quEfZ6VQGtDhhOjUmW6JVq 719MH8FNJcVr8oAiVaK3nNeJTL2wO68LpgX6tcZ/z22pJoz98wHzgfWf3pfEUYrCqYg2V3m6oe0t kd+OaeY8DmPVSpG7as0rkoEzeNwCtmpYjkm96mBO6/AQwsowSLbSuqkEGykp1k47KiPBtxhbp2um IReh94vPrr1O9zXau9oGMvABJjigYQ2e5AhhhDdK8qOkhgkMAJN2nvLqY+VFrnFIsb5noQ/tP2M/ ct9qwRZ5kUaumRqE/XzV3rH8PoacZW/YvcwAp8Gr1ZaHCMRl+wIDAQABo4IC1TCCAtEwDAYDVR0T AQH/BAIwADAOBgNVHQ8BAf8EBAMCBaAwIAYDVR0lAQH/BBYwFAYIKwYBBQUHAwQGCCsGAQUFBwMC MB0GA1UdDgQWBBTlvYUx4PMlUy6uvceJkDMK4jBDZjAnBgNVHREEIDAegRxtaWNoYWVsLmhhbW1l ckB5YWFuYXRlY2guY29tMB8GA1UdIwQYMBaAFK35w5NyLbW5KGHkpNdg1cQKXhoBMIIBKwYIKwYB BQUHAQEEggEdMIIBGTCCARUGCCsGAQUFBzAChoIBB2xkYXA6Ly9kaXJlY3RvcnkudmVyaXNpZ24u Y29tL0NOJTIwJTNEJTIwU3ltYW50ZWMlMjBDbGFzcyUyMDElMjBJbmRpdmlkdWFsJTIwU3Vic2Ny aWJlciUyMENBJTIwLSUyMEc0JTJDJTIwT1UlMjAlM0QlMjBQZXJzb25hJTIwTm90JTIwVmFsaWRh dGVkJTJDJTIwT1UlMjAlM0QlMjBTeW1hbnRlYyUyMFRydXN0JTIwTmV0d29yayUyQyUyME8lMjAl M0QlMjBTeW1hbnRlYyUyMENvcnBvcmF0aW9uJTJDJTIwQyUyMCUzRCUyMFVTP2NBQ2VydGlmaWNh dGU7YmluYXJ5MF0GA1UdHwRWMFQwUqBQoE6GTGh0dHA6Ly9wa2ktY3JsLnN5bWF1dGguY29tL2Nh XzU2MWMxMDM2OTBjOTdhNjkyNDdhMGVmMDcxYWM4MWFmL0xhdGVzdENSTC5jcmwwbAYDVR0gBGUw YzBhBgtghkgBhvhFAQcXATBSMCYGCCsGAQUFBwIBFhpodHRwOi8vd3d3LnN5bWF1dGguY29tL2Nw czAoBggrBgEFBQcCAjAcGhpodHRwOi8vd3d3LnN5bWF1dGguY29tL3JwYTAqBgpghkgBhvhFARAD BBwwGgYRYIZIAYb4RQEQAQICBAGGsxcWBTEwOTIyMA0GCSqGSIb3DQEBBQUAA4IBAQAae/er4pfB TpqK6c/uJ9D8dVJzzNX26akkB8z/29totzbkpFAIlXRh02iNVK+GnsgS1gwu3FOvjgT5M4i+cNxD vTJVcnZNXns75JUGX3UsWQbtSySrVzQx8lMtwW6nXHM5GlEaY8/jKVpambG2q9OHjmwMTz7I4A+y KiiGCGdhE23dFOvku6t/oiwqFnXJmb4o75kbVevKEOd34MIj0P7Q8+1mZcNYEUTYKadoPXFyTWnO 2HTMvFcGgdLFKcqb13clWeW3/B5WjdBimpMjbvwi8ZbrhFdp7Y3NLKFSRH8W29rt0LW7zULxii0z 34NGsBkW9w95PLzTsqmKD4Yv5AkIMYIEkjCCBI4CAQEwgbswgaYxCzAJBgNVBAYTAlVTMR0wGwYD VQQKExRTeW1hbnRlYyBDb3Jwb3JhdGlvbjEfMB0GA1UECxMWU3ltYW50ZWMgVHJ1c3QgTmV0d29y azEeMBwGA1UECxMVUGVyc29uYSBOb3QgVmFsaWRhdGVkMTcwNQYDVQQDEy5TeW1hbnRlYyBDbGFz cyAxIEluZGl2aWR1YWwgU3Vic2NyaWJlciBDQSAtIEc0AhAQHd1E6Q8NPRDpBgRzvi1yMAkGBSsO AwIaBQCgggKrMBgGCSqGSIb3DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTEzMDkx OTIwMzQyM1owIwYJKoZIhvcNAQkEMRYEFJiHnjUpuaBGOHHSa4Z7/Qf7VN9FMIGrBgkqhkiG9w0B CQ8xgZ0wgZowCwYJYIZIAWUDBAEqMAsGCWCGSAFlAwQBFjAKBggqhkiG9w0DBzALBglghkgBZQME AQIwDgYIKoZIhvcNAwICAgCAMAcGBSsOAwIHMA0GCCqGSIb3DQMCAgFAMA0GCCqGSIb3DQMCAgEo MAcGBSsOAwIaMAsGCWCGSAFlAwQCAzALBglghkgBZQMEAgIwCwYJYIZIAWUDBAIBMIHMBgkrBgEE AYI3EAQxgb4wgbswgaYxCzAJBgNVBAYTAlVTMR0wGwYDVQQKExRTeW1hbnRlYyBDb3Jwb3JhdGlv bjEfMB0GA1UECxMWU3ltYW50ZWMgVHJ1c3QgTmV0d29yazEeMBwGA1UECxMVUGVyc29uYSBOb3Qg VmFsaWRhdGVkMTcwNQYDVQQDEy5TeW1hbnRlYyBDbGFzcyAxIEluZGl2aWR1YWwgU3Vic2NyaWJl ciBDQSAtIEc0AhAQHd1E6Q8NPRDpBgRzvi1yMIHOBgsqhkiG9w0BCRACCzGBvqCBuzCBpjELMAkG A1UEBhMCVVMxHTAbBgNVBAoTFFN5bWFudGVjIENvcnBvcmF0aW9uMR8wHQYDVQQLExZTeW1hbnRl YyBUcnVzdCBOZXR3b3JrMR4wHAYDVQQLExVQZXJzb25hIE5vdCBWYWxpZGF0ZWQxNzA1BgNVBAMT LlN5bWFudGVjIENsYXNzIDEgSW5kaXZpZHVhbCBTdWJzY3JpYmVyIENBIC0gRzQCEBAd3UTpDw09 EOkGBHO+LXIwDQYJKoZIhvcNAQEBBQAEggEAZQ+QcpCUFZsRoelxWNPTNV90UGYfHnGG2143DIvl qq33z5ie3I0+UroJ6dZvfAx3jvJULF9j7Ho5syauEnM+wS6wDctDuCRNtqSaHrx7hpe2gMczkYeo CO5XMWz/y0HF7YWLD6G1zn/pbwyb78das/QuJdJ/Q9tG5OvzMu2XveRrUXZgTKOz3mTzLkK0MgXM /9DXhK3sRIVYw8ST/5Nva+v/AB5/XbeoRqUaRn4HuZIE14nxXp2faJtHY0x2RCt95X52armk3hOL vSgqKAvlB5bpRtOz1CEGTbXB71cnZxBmBLYHTdrv03eXCwqpGI6Cc3BdiM525ZEYcG7nZWwpcwAA AAAAAA== ------=_NextPart_000_0125_01CEB556.19441430-- From travis.russell@oracle.com Thu Sep 19 13:42:25 2013 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3CDB621F89A5 for ; Thu, 19 Sep 2013 13:42:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id f4dWFWEz+vbP for ; Thu, 19 Sep 2013 13:42:19 -0700 (PDT) Received: from userp1040.oracle.com (userp1040.oracle.com [156.151.31.81]) by ietfa.amsl.com (Postfix) with ESMTP id AAC2621F8976 for ; Thu, 19 Sep 2013 13:42:19 -0700 (PDT) Received: from acsinet22.oracle.com (acsinet22.oracle.com [141.146.126.238]) by userp1040.oracle.com (Sentrion-MTA-4.3.1/Sentrion-MTA-4.3.1) with ESMTP id r8JKgGci018303 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Thu, 19 Sep 2013 20:42:17 GMT Received: from aserz7021.oracle.com (aserz7021.oracle.com [141.146.126.230]) by acsinet22.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id r8JKgFpL026697 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Thu, 19 Sep 2013 20:42:16 GMT Received: from abhmt105.oracle.com (abhmt105.oracle.com [141.146.116.57]) by aserz7021.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id r8JKgF9K014831; Thu, 19 Sep 2013 20:42:15 GMT MIME-Version: 1.0 Message-ID: Date: Thu, 19 Sep 2013 13:42:28 -0700 (PDT) From: Travis Russell Sender: Travis Russell To: Michael Hammer , fmousinh@cisco.com, Gregory.Schumacher@sprint.com, br@brianrosen.net References: <546DB8432567684FA41E336EF1D312B84A16487C@PLSWM14A.ad.sprint.com> <71E3420F5D11314D8D989D8B72D247E129FD51DA@xmb-aln-x06.cisco.com> <00C069FD01E0324C9FFCADF539701DB3BBEDBA62@sc9-ex2k10mb1.corp.yaanatech.com> In-Reply-To: <00C069FD01E0324C9FFCADF539701DB3BBEDBA62@sc9-ex2k10mb1.corp.yaanatech.com> X-Priority: 3 X-Mailer: Oracle Beehive Extensions for Outlook 2.0.1.8 (707110) [OL 14.0.4760.0 (x86)] Content-Type: text/plain; charset=iso-8859-2 Content-Transfer-Encoding: quoted-printable X-Source-IP: acsinet22.oracle.com [141.146.126.238] Cc: stir@ietf.org Subject: Re: [stir] Call Center Implications X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 19 Sep 2013 20:42:25 -0000 The callback number absolutely should be verified, as well as originating n= umber. IRSF is already a big issue today, and we don't want to introduce th= e opportunity of forwarding a spoofed unverified callback number to a PRS n= umber. -----Original Message----- From: Michael Hammer [mailto:michael.hammer@yaanatech.com]=20 Sent: Thursday, September 19, 2013 4:34 PM To: fmousinh@cisco.com; Gregory.Schumacher@sprint.com; br@brianrosen.net Cc: stir@ietf.org Subject: Re: [stir] Call Center Implications Don't we still want to know the true originator of the call, even when we h= ave some token that says "Doctor so and so approved this message." Originating number, display number, and call-back number could be 3 differe= nt things. Should all of them be verifiable? Mike -----Original Message----- From: stir-bounces@ietf.org [mailto:stir-bounces@ietf.org] On Behalf Of Fer= nando Mousinho (fmousinh) Sent: Thursday, September 19, 2013 4:00 PM To: Schumacher, Gregory [CTO]; Brian Rosen Cc: stir@ietf.org Subject: Re: [stir] Call Center Implications I believe the scenario telemarketing here is when a client hires a BPO to p= lace outbound calls, but expect customers to return these calls to a differ= ent place (say, their own and operated call center). This way, this client = is authorizing the BPO to use an identity that it (BPO) doesn't own. These numbers in this scenario are always operational, just at a different = place. The same telemarketing operator would then outpulse multiple numbers for th= eir multiple clients, none of these numbers belonging to the telemarketer. BTW, we are using the term "telemarketing" in a very generic sense - this c= ould just as easily be a public service announcement, fundraiser, etc. If the telemarketer happens to own the inbound call center as well, it very= likely owns the number as well and this would necessarily be a special cas= e - it would fall under the same characteristics of any call center. On a different note, it would help a lot of we standardized terminology. Telemarketing, BPO, call center, end customer, clients=A9 it may be hard fo= r others to follow the discussion later. (generic term for any type of outbound calling, including public service an= nouncement, so don't think it's all about sales!) On 9/19/13 3:22 PM, "Schumacher, Gregory [CTO]" wrote: >There are some benefits from this approach, but also some scenarios=20 >that need clarification how they could function. > >The benefit is that the credential represents both the company=20 >"responsible" for the sales campaign (the "company" in your scenario)=20 >and the company operating the sales campaign (the call center in your=20 >scenario). For the use in forensics (after the fact analysis) such as=20 >pursuit of fraud investigation, we then can follow both paths. > >However can you clarify the following - >- If a SP "signs" the call, is it attesting to the "responsible" party=20 >for the telemarketing call or the party executing the telemarketing=20 >campaign or both? > >- How is the SP supposed to know all the parties that it is attesting=20 >to >- the responsible party and/or executing party? > >-It seems likely that some of the numbers assigned to a company in your=20 >scenario will not be assigned to real telephones (or call center trunk)=20 >until a telemarketing campaign is initiated or a call center selected=20 >to execute the sales campaign, is it possible to have these unassigned=20 >or floating numbers when not in use for a telemarketing campaign? Is=20 >it allowed under most national numbering regimes? > >- How important is it to have a known or recognized phone number as the=20 >caller id as part of a telemarketing campaign? I am assuming that not=20 >all campaigns care about having a number that is known or recognized. > >-In other words for this last bit, if a call center (telemarketing=20 >campaign operator) is using their own set of numbers but serve multiple=20 >simultaneous telemarketing campaigns using the same originating=20 >numbers, what will they sign? Will they just have a credential=20 >representing the call center alone, or a different credential per=20 >telemarketing campaign, or a different credential per responsible party=20 >(per client)? This will affect what is possible for any forensic activity= . > >-----Original Message----- >From: stir-bounces@ietf.org [mailto:stir-bounces@ietf.org] On Behalf Of=20 >Brian Rosen >Sent: Tuesday, September 17, 2013 9:44 AM >To: Fernando Mousinho >Cc: stir@ietf.org; Hadriel Kaplan >Subject: Re: [stir] Call Center Implications > >We have a requirement to support the BPO use case. > >The notion we had is that the company contracting the call center=20 >approves the use, and the call center, or the SP acting on its behalf,=20 >signs. >Think of this as another level of delegation. An SP delegates numbers=20 >to the company. The company "delegates" use of those numbers to the=20 >call center. The call center calls, using that delegation. The=20 >credentials of the call center would be different from those of the=20 >company, but would cover the same number. Having multiple credentials=20 >covering the same number will be very common due to the way delegation=20 >happens. In order to allow SPs to sign, without creating credential=20 >per TN, we allow credentials with ranges. The ranges could overlap=20 >when delegation happens. > >Consider the following complex US case: >The North American Number Plan Administrator delegates 202-555-xxxx to=20 >the Pooling Administrator. The PA now has a credential covering the=20 >entire 10K block. >The Pooling Administrator delegates 202-555-1xxx to SP A. SP A has a=20 >credential for the entire 1K block SP A resells 202-555-12xx to SP B . >SP B has a credential for a 100 TN block SP B delegates 202-555-123x to=20 >Company C. Company C has a credential for a 10 number block Company C=20 >authorizes 202-555-1234 to BPO D. BPO D has credential for a 1 number=20 >block > >NANPA and the PA never are in a call path, so they would never sign a=20 >call. > >However, SP A or SP B could sign a call from either Company C or BPO D=20 >using the credential they have. > >The SP for the call center could acquire credentials from the BPO and=20 >sign on its behalf. I suspect than many service providers would be=20 >reluctant to do so unless the numbers were from their own inventory=20 >(that is, the company got its numbers from the same SP as the call center)= . >Since that won't be the common case, the call center probably has to do=20 >the signing itself. > >Brian > >On Sep 17, 2013, at 8:46 AM, Fernando Mousinho (fmousinh)=20 > wrote: > >> I agree, Hadriel. While large call centers (including BPOs, which=20 >> provide services for other companies) may have special arrangements=20 >> with SPs, the majority (small to mid-size) will probably rely on the=20 >> SPs to do provide to vouch for their identity. This would probably be=20 >> the case for the home analog caller anyway. This would imply that the=20 >> "originating" SP's willingness to provide this signature is a=20 >> critical success factor for the proposal's adoption. >> >> >> But back to the business process outsourcers (BPO) case - where a=20 >> call center is providing service on behalf of multiple companies. I=20 >> can see the value of them sending different numbers based on the=20 >> clients they represent. Wouldn't that create a billing issue though? >> This is not an area I understand well, but I would suspect that SP 1=20 >> allowing one of its subscribers to send an outbound call using a=20 >> number registered to SP 2 could be a no-no. If this hypothesis is=20 >> correct, then we are back to the case where the SP is signing all=20 >> calls, even for BPOs. >> >> Or maybe this is another problem we are trying to fix in the working=20 >> group, in which case we perhaps should state as a goal or benefit: >> "providing a reliable mechanism to let calls originated from one SP1=20 >> to outpulse numbers that belong to another". >> >> Fernando >> >> >> >> >> >> >> On 9/16/13 12:12 PM, "Hadriel Kaplan" wrote: >> >>> >>> Any of them could do it. My guess is service providers will do it=20 >>>for most call centers, although larger call centers might do it=20 >>>themselves... >>> especially ones which have trunks from multiple providers and can=20 >>>source calls using the same number(s) out through multiple providers=20 >>>on a call-by-call basis. >>> >>> -hadriel >>> >>> >>> On Sep 16, 2013, at 9:49 AM, Fernando Mousinho (fmousinh)=20 >>> wrote: >>> >>>> I'm catching up with the discussions in this working group, and am=20 >>>> trying to understand some architecture implications in call centers=20 >>>> (which is where my background is). It seems that many of the=20 >>>> problems we are trying to fix are related to contact centers=20 >>>> anyway, so it is probably a good idea to have everyone in the same page. >>>> >>>> Forgive me if it is an obvious question, but which components in a=20 >>>> "typical call center architecture" do you see signature and=20 >>>> verification taking place? Such "typical" deployments have premises=20 >>>> based equipment (PME), a session border controller (SBC) and of=20 >>>> course a SIP service provider all three could potentially be used=20 >>>> throughout the authorization process. There are different=20 >>>> ramifications depending on where your mind is at. >>>> >>>> Fernando Mousinho >>>> Cisco Systems >>> >> >> _______________________________________________ >> stir mailing list >> stir@ietf.org >> https://www.ietf.org/mailman/listinfo/stir > >_______________________________________________ >stir mailing list >stir@ietf.org >https://www.ietf.org/mailman/listinfo/stir > > >________________________________ > >This e-mail may contain Sprint proprietary information intended for the=20 >sole use of the recipient(s). Any use by others is prohibited. If you=20 >are not the intended recipient, please contact the sender and delete=20 >all copies of the message. > >_______________________________________________ >stir mailing list >stir@ietf.org >https://www.ietf.org/mailman/listinfo/stir _______________________________________________ stir mailing list stir@ietf.org https://www.ietf.org/mailman/listinfo/stir From richard@shockey.us Thu Sep 19 14:19:34 2013 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B51E321F8934 for ; Thu, 19 Sep 2013 14:19:34 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.265 X-Spam-Level: X-Spam-Status: No, score=-102.265 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iguQ3NE-9BQd for ; Thu, 19 Sep 2013 14:19:30 -0700 (PDT) Received: from oproxy6-pub.mail.unifiedlayer.com (oproxy6-pub.mail.unifiedlayer.com [67.222.54.6]) by ietfa.amsl.com (Postfix) with SMTP id BA66021F84D0 for ; Thu, 19 Sep 2013 14:19:29 -0700 (PDT) Received: (qmail 25122 invoked by uid 0); 19 Sep 2013 21:18:57 -0000 Received: from unknown (HELO box462.bluehost.com) (74.220.219.62) by oproxy6.mail.unifiedlayer.com with SMTP; 19 Sep 2013 21:18:57 -0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=shockey.us; s=default; h=Content-Transfer-Encoding:Content-Type:MIME-Version:Message-ID:Date:Subject:In-Reply-To:References:Cc:To:From; bh=9kg88FJw2A0PKjFOVc7hjh5eVZGd3ddJ5G/5nQ45pW0=; b=Id+APC1n8DkIguPQEOfh8UuoAZpGxyzcMLqLcwJM+/COk+WMkuuhyoFuZ3h+oVt0Qs66GhLjqYO5x9a5UnFPo+wuIXeryN4yqKe/6wfeC3+pFFTn9fifuAZRkxCpM7D7; Received: from [71.114.100.16] (port=56443 helo=RSHOCKEYPC) by box462.bluehost.com with esmtpa (Exim 4.80) (envelope-from ) id 1VMlcn-0004ln-AN; Thu, 19 Sep 2013 15:18:57 -0600 From: "Richard Shockey" To: "'Travis Russell'" , "'Michael Hammer'" , , , References: <546DB8432567684FA41E336EF1D312B84A16487C@PLSWM14A.ad.sprint.com> <71E3420F5D11314D8D989D8B72D247E129FD51DA@xmb-aln-x06.cisco.com> <00C069FD01E0324C9FFCADF539701DB3BBEDBA62@sc9-ex2k10mb1.corp.yaanatech.com> In-Reply-To: Date: Thu, 19 Sep 2013 17:18:53 -0400 Message-ID: <01ba01ceb57d$d861a360$8924ea20$@shockey.us> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-2" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 15.0 Thread-Index: AQIJjRy4tSdblFbMe62TCm5TxV9KhQGZm54bAm5VXLoCvpx8GZkhrH5A Content-Language: en-us X-Identified-User: {3286:box462.bluehost.com:shockeyu:shockey.us} {sentby:smtp auth 71.114.100.16 authed with richard@shockey.us} Cc: stir@ietf.org Subject: Re: [stir] Call Center Implications X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 19 Sep 2013 21:19:34 -0000 You won't be able to do that if it is a 800 number that is because the authority running the 800 number space SMS 800 is = this is a critical flaw in the NANP number management scheme that only the regulator can address.=20 -----Original Message----- From: stir-bounces@ietf.org [mailto:stir-bounces@ietf.org] On Behalf Of Travis Russell Sent: Thursday, September 19, 2013 4:42 PM To: Michael Hammer; fmousinh@cisco.com; Gregory.Schumacher@sprint.com; br@brianrosen.net Cc: stir@ietf.org Subject: Re: [stir] Call Center Implications The callback number absolutely should be verified, as well as = originating number. IRSF is already a big issue today, and we don't want to = introduce the opportunity of forwarding a spoofed unverified callback number to a = PRS number. -----Original Message----- From: Michael Hammer [mailto:michael.hammer@yaanatech.com] Sent: Thursday, September 19, 2013 4:34 PM To: fmousinh@cisco.com; Gregory.Schumacher@sprint.com; br@brianrosen.net Cc: stir@ietf.org Subject: Re: [stir] Call Center Implications Don't we still want to know the true originator of the call, even when = we have some token that says "Doctor so and so approved this message." Originating number, display number, and call-back number could be 3 different things. Should all of them be verifiable? Mike -----Original Message----- From: stir-bounces@ietf.org [mailto:stir-bounces@ietf.org] On Behalf Of Fernando Mousinho (fmousinh) Sent: Thursday, September 19, 2013 4:00 PM To: Schumacher, Gregory [CTO]; Brian Rosen Cc: stir@ietf.org Subject: Re: [stir] Call Center Implications I believe the scenario telemarketing here is when a client hires a BPO = to place outbound calls, but expect customers to return these calls to a different place (say, their own and operated call center). This way, = this client is authorizing the BPO to use an identity that it (BPO) doesn't = own. These numbers in this scenario are always operational, just at a = different place. The same telemarketing operator would then outpulse multiple numbers for their multiple clients, none of these numbers belonging to the = telemarketer. BTW, we are using the term "telemarketing" in a very generic sense - = this could just as easily be a public service announcement, fundraiser, etc. If the telemarketer happens to own the inbound call center as well, it = very likely owns the number as well and this would necessarily be a special = case - it would fall under the same characteristics of any call center. On a different note, it would help a lot of we standardized terminology. Telemarketing, BPO, call center, end customer, clients=A9 it may be hard = for others to follow the discussion later. (generic term for any type of outbound calling, including public service announcement, so don't think it's all about sales!) On 9/19/13 3:22 PM, "Schumacher, Gregory [CTO]" wrote: >There are some benefits from this approach, but also some scenarios=20 >that need clarification how they could function. > >The benefit is that the credential represents both the company=20 >"responsible" for the sales campaign (the "company" in your scenario)=20 >and the company operating the sales campaign (the call center in your=20 >scenario). For the use in forensics (after the fact analysis) such as=20 >pursuit of fraud investigation, we then can follow both paths. > >However can you clarify the following - >- If a SP "signs" the call, is it attesting to the "responsible" party=20 >for the telemarketing call or the party executing the telemarketing=20 >campaign or both? > >- How is the SP supposed to know all the parties that it is attesting=20 >to >- the responsible party and/or executing party? > >-It seems likely that some of the numbers assigned to a company in your = >scenario will not be assigned to real telephones (or call center trunk) = >until a telemarketing campaign is initiated or a call center selected=20 >to execute the sales campaign, is it possible to have these unassigned=20 >or floating numbers when not in use for a telemarketing campaign? Is=20 >it allowed under most national numbering regimes? > >- How important is it to have a known or recognized phone number as the = >caller id as part of a telemarketing campaign? I am assuming that not=20 >all campaigns care about having a number that is known or recognized. > >-In other words for this last bit, if a call center (telemarketing=20 >campaign operator) is using their own set of numbers but serve multiple = >simultaneous telemarketing campaigns using the same originating=20 >numbers, what will they sign? Will they just have a credential=20 >representing the call center alone, or a different credential per=20 >telemarketing campaign, or a different credential per responsible party = >(per client)? This will affect what is possible for any forensic = activity. > >-----Original Message----- >From: stir-bounces@ietf.org [mailto:stir-bounces@ietf.org] On Behalf Of = >Brian Rosen >Sent: Tuesday, September 17, 2013 9:44 AM >To: Fernando Mousinho >Cc: stir@ietf.org; Hadriel Kaplan >Subject: Re: [stir] Call Center Implications > >We have a requirement to support the BPO use case. > >The notion we had is that the company contracting the call center=20 >approves the use, and the call center, or the SP acting on its behalf,=20 >signs. >Think of this as another level of delegation. An SP delegates numbers=20 >to the company. The company "delegates" use of those numbers to the=20 >call center. The call center calls, using that delegation. The=20 >credentials of the call center would be different from those of the=20 >company, but would cover the same number. Having multiple credentials=20 >covering the same number will be very common due to the way delegation=20 >happens. In order to allow SPs to sign, without creating credential=20 >per TN, we allow credentials with ranges. The ranges could overlap=20 >when delegation happens. > >Consider the following complex US case: >The North American Number Plan Administrator delegates 202-555-xxxx to=20 >the Pooling Administrator. The PA now has a credential covering the=20 >entire 10K block. >The Pooling Administrator delegates 202-555-1xxx to SP A. SP A has a=20 >credential for the entire 1K block SP A resells 202-555-12xx to SP B . >SP B has a credential for a 100 TN block SP B delegates 202-555-123x to = >Company C. Company C has a credential for a 10 number block Company C=20 >authorizes 202-555-1234 to BPO D. BPO D has credential for a 1 number=20 >block > >NANPA and the PA never are in a call path, so they would never sign a=20 >call. > >However, SP A or SP B could sign a call from either Company C or BPO D=20 >using the credential they have. > >The SP for the call center could acquire credentials from the BPO and=20 >sign on its behalf. I suspect than many service providers would be=20 >reluctant to do so unless the numbers were from their own inventory=20 >(that is, the company got its numbers from the same SP as the call = center). >Since that won't be the common case, the call center probably has to do = >the signing itself. > >Brian > >On Sep 17, 2013, at 8:46 AM, Fernando Mousinho (fmousinh)=20 > wrote: > >> I agree, Hadriel. While large call centers (including BPOs, which=20 >> provide services for other companies) may have special arrangements=20 >> with SPs, the majority (small to mid-size) will probably rely on the=20 >> SPs to do provide to vouch for their identity. This would probably be = >> the case for the home analog caller anyway. This would imply that the = >> "originating" SP's willingness to provide this signature is a=20 >> critical success factor for the proposal's adoption. >> >> >> But back to the business process outsourcers (BPO) case - where a=20 >> call center is providing service on behalf of multiple companies. I=20 >> can see the value of them sending different numbers based on the=20 >> clients they represent. Wouldn't that create a billing issue though? >> This is not an area I understand well, but I would suspect that SP 1=20 >> allowing one of its subscribers to send an outbound call using a=20 >> number registered to SP 2 could be a no-no. If this hypothesis is=20 >> correct, then we are back to the case where the SP is signing all=20 >> calls, even for BPOs. >> >> Or maybe this is another problem we are trying to fix in the working=20 >> group, in which case we perhaps should state as a goal or benefit: >> "providing a reliable mechanism to let calls originated from one SP1=20 >> to outpulse numbers that belong to another". >> >> Fernando >> >> >> >> >> >> >> On 9/16/13 12:12 PM, "Hadriel Kaplan" = wrote: >> >>> >>> Any of them could do it. My guess is service providers will do it=20 >>>for most call centers, although larger call centers might do it=20 >>>themselves... >>> especially ones which have trunks from multiple providers and can=20 >>>source calls using the same number(s) out through multiple providers=20 >>>on a call-by-call basis. >>> >>> -hadriel >>> >>> >>> On Sep 16, 2013, at 9:49 AM, Fernando Mousinho (fmousinh)=20 >>> wrote: >>> >>>> I'm catching up with the discussions in this working group, and am=20 >>>> trying to understand some architecture implications in call centers = >>>> (which is where my background is). It seems that many of the=20 >>>> problems we are trying to fix are related to contact centers=20 >>>> anyway, so it is probably a good idea to have everyone in the same page. >>>> >>>> Forgive me if it is an obvious question, but which components in a=20 >>>> "typical call center architecture" do you see signature and=20 >>>> verification taking place? Such "typical" deployments have premises = >>>> based equipment (PME), a session border controller (SBC) and of=20 >>>> course a SIP service provider all three could potentially be used=20 >>>> throughout the authorization process. There are different=20 >>>> ramifications depending on where your mind is at. >>>> >>>> Fernando Mousinho >>>> Cisco Systems >>> >> >> _______________________________________________ >> stir mailing list >> stir@ietf.org >> https://www.ietf.org/mailman/listinfo/stir > >_______________________________________________ >stir mailing list >stir@ietf.org >https://www.ietf.org/mailman/listinfo/stir > > >________________________________ > >This e-mail may contain Sprint proprietary information intended for the = >sole use of the recipient(s). Any use by others is prohibited. If you=20 >are not the intended recipient, please contact the sender and delete=20 >all copies of the message. > >_______________________________________________ >stir mailing list >stir@ietf.org >https://www.ietf.org/mailman/listinfo/stir _______________________________________________ stir mailing list stir@ietf.org https://www.ietf.org/mailman/listinfo/stir _______________________________________________ stir mailing list stir@ietf.org https://www.ietf.org/mailman/listinfo/stir From Henning.Schulzrinne@fcc.gov Thu Sep 19 14:24:46 2013 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 274B921F8948 for ; Thu, 19 Sep 2013 14:24:46 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EpWDuxOS-DxQ for ; Thu, 19 Sep 2013 14:24:41 -0700 (PDT) Received: from DC-IP-1.fcc.gov (dc-ip-1.fcc.gov [192.104.54.97]) by ietfa.amsl.com (Postfix) with ESMTP id A13EE21F8613 for ; Thu, 19 Sep 2013 14:24:40 -0700 (PDT) Message-ID: From: Henning Schulzrinne To: Michael Hammer , "fmousinh@cisco.com" , "Gregory.Schumacher@sprint.com" , "br@brianrosen.net" Thread-Topic: [stir] Call Center Implications Thread-Index: AQHOsuOJ4w3gYleEHUa5h7lxd4Kh+JnIzFgAgAFYvoCAABAsAIADgzEAgAAKWQCAAAm8AP//yiiI Date: Thu, 19 Sep 2013 21:24:08 +0000 References: <546DB8432567684FA41E336EF1D312B84A16487C@PLSWM14A.ad.sprint.com> <71E3420F5D11314D8D989D8B72D247E129FD51DA@xmb-aln-x06.cisco.com>, <00C069FD01E0324C9FFCADF539701DB3BBEDBA62@sc9-ex2k10mb1.corp.yaanatech.com> In-Reply-To: <00C069FD01E0324C9FFCADF539701DB3BBEDBA62@sc9-ex2k10mb1.corp.yaanatech.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Cc: "stir@ietf.org" Subject: Re: [stir] Call Center Implications X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 19 Sep 2013 21:24:46 -0000 I see no reason not to allow signing any number-related field in the SIP re= quest. (Signing may well be done by different parties.)=0A= =0A= As far as I know, callback numbers (SIP Reply-To) aren't conveyable in lega= cy systems, however, so this may be of somewhat limited use for a while.=0A= =0A= ________________________________________=0A= From: stir-bounces@ietf.org [stir-bounces@ietf.org] on behalf of Michael Ha= mmer [michael.hammer@yaanatech.com]=0A= Sent: Thursday, September 19, 2013 4:34 PM=0A= To: fmousinh@cisco.com; Gregory.Schumacher@sprint.com; br@brianrosen.net=0A= Cc: stir@ietf.org=0A= Subject: Re: [stir] Call Center Implications=0A= =0A= Don't we still want to know the true originator of the call,=0A= even when we have some token that says "Doctor so and so approved this=0A= message."=0A= =0A= Originating number, display number, and call-back number could be 3=0A= different things.=0A= Should all of them be verifiable?=0A= =0A= Mike=0A= =0A= =0A= -----Original Message-----=0A= From: stir-bounces@ietf.org [mailto:stir-bounces@ietf.org] On Behalf Of=0A= Fernando Mousinho (fmousinh)=0A= Sent: Thursday, September 19, 2013 4:00 PM=0A= To: Schumacher, Gregory [CTO]; Brian Rosen=0A= Cc: stir@ietf.org=0A= Subject: Re: [stir] Call Center Implications=0A= =0A= I believe the scenario telemarketing here is when a client hires a BPO to= =0A= place outbound calls, but expect customers to return these calls to a=0A= different place (say, their own and operated call center). This way, this= =0A= client is authorizing the BPO to use an identity that it (BPO) doesn't own.= =0A= These numbers in this scenario are always operational, just at a different= =0A= place.=0A= =0A= The same telemarketing operator would then outpulse multiple numbers for=0A= their multiple clients, none of these numbers belonging to the telemarketer= .=0A= BTW, we are using the term "telemarketing" in a very generic sense - this= =0A= could just as easily be a public service announcement, fundraiser, etc.=0A= =0A= If the telemarketer happens to own the inbound call center as well, it very= =0A= likely owns the number as well and this would necessarily be a special case= =0A= - it would fall under the same characteristics of any call center.=0A= =0A= On a different note, it would help a lot of we standardized terminology.=0A= Telemarketing, BPO, call center, end customer, clients=8A it may be hard fo= r=0A= others to follow the discussion later.=0A= =0A= =0A= =0A= (generic term for any type of outbound calling, including public service=0A= announcement, so don't think it's all about sales!)=0A= =0A= =0A= On 9/19/13 3:22 PM, "Schumacher, Gregory [CTO]"=0A= wrote:=0A= =0A= >There are some benefits from this approach, but also some scenarios=0A= >that need clarification how they could function.=0A= >=0A= >The benefit is that the credential represents both the company=0A= >"responsible" for the sales campaign (the "company" in your scenario)=0A= >and the company operating the sales campaign (the call center in your=0A= >scenario). For the use in forensics (after the fact analysis) such as=0A= >pursuit of fraud investigation, we then can follow both paths.=0A= >=0A= >However can you clarify the following -=0A= >- If a SP "signs" the call, is it attesting to the "responsible" party=0A= >for the telemarketing call or the party executing the telemarketing=0A= >campaign or both?=0A= >=0A= >- How is the SP supposed to know all the parties that it is attesting=0A= >to=0A= >- the responsible party and/or executing party?=0A= >=0A= >-It seems likely that some of the numbers assigned to a company in your=0A= >scenario will not be assigned to real telephones (or call center trunk)=0A= >until a telemarketing campaign is initiated or a call center selected=0A= >to execute the sales campaign, is it possible to have these unassigned=0A= >or floating numbers when not in use for a telemarketing campaign? Is=0A= >it allowed under most national numbering regimes?=0A= >=0A= >- How important is it to have a known or recognized phone number as the=0A= >caller id as part of a telemarketing campaign? I am assuming that not=0A= >all campaigns care about having a number that is known or recognized.=0A= >=0A= >-In other words for this last bit, if a call center (telemarketing=0A= >campaign operator) is using their own set of numbers but serve multiple=0A= >simultaneous telemarketing campaigns using the same originating=0A= >numbers, what will they sign? Will they just have a credential=0A= >representing the call center alone, or a different credential per=0A= >telemarketing campaign, or a different credential per responsible party=0A= >(per client)? This will affect what is possible for any forensic activity= .=0A= >=0A= >-----Original Message-----=0A= >From: stir-bounces@ietf.org [mailto:stir-bounces@ietf.org] On Behalf Of=0A= >Brian Rosen=0A= >Sent: Tuesday, September 17, 2013 9:44 AM=0A= >To: Fernando Mousinho=0A= >Cc: stir@ietf.org; Hadriel Kaplan=0A= >Subject: Re: [stir] Call Center Implications=0A= >=0A= >We have a requirement to support the BPO use case.=0A= >=0A= >The notion we had is that the company contracting the call center=0A= >approves the use, and the call center, or the SP acting on its behalf,=0A= >signs.=0A= >Think of this as another level of delegation. An SP delegates numbers=0A= >to the company. The company "delegates" use of those numbers to the=0A= >call center. The call center calls, using that delegation. The=0A= >credentials of the call center would be different from those of the=0A= >company, but would cover the same number. Having multiple credentials=0A= >covering the same number will be very common due to the way delegation=0A= >happens. In order to allow SPs to sign, without creating credential=0A= >per TN, we allow credentials with ranges. The ranges could overlap=0A= >when delegation happens.=0A= >=0A= >Consider the following complex US case:=0A= >The North American Number Plan Administrator delegates 202-555-xxxx to=0A= >the Pooling Administrator. The PA now has a credential covering the=0A= >entire 10K block.=0A= >The Pooling Administrator delegates 202-555-1xxx to SP A. SP A has a=0A= >credential for the entire 1K block SP A resells 202-555-12xx to SP B .=0A= >SP B has a credential for a 100 TN block SP B delegates 202-555-123x to=0A= >Company C. Company C has a credential for a 10 number block Company C=0A= >authorizes 202-555-1234 to BPO D. BPO D has credential for a 1 number=0A= >block=0A= >=0A= >NANPA and the PA never are in a call path, so they would never sign a=0A= >call.=0A= >=0A= >However, SP A or SP B could sign a call from either Company C or BPO D=0A= >using the credential they have.=0A= >=0A= >The SP for the call center could acquire credentials from the BPO and=0A= >sign on its behalf. I suspect than many service providers would be=0A= >reluctant to do so unless the numbers were from their own inventory=0A= >(that is, the company got its numbers from the same SP as the call center)= .=0A= >Since that won't be the common case, the call center probably has to do=0A= >the signing itself.=0A= >=0A= >Brian=0A= >=0A= >On Sep 17, 2013, at 8:46 AM, Fernando Mousinho (fmousinh)=0A= > wrote:=0A= >=0A= >> I agree, Hadriel. While large call centers (including BPOs, which=0A= >> provide services for other companies) may have special arrangements=0A= >> with SPs, the majority (small to mid-size) will probably rely on the=0A= >> SPs to do provide to vouch for their identity. This would probably be=0A= >> the case for the home analog caller anyway. This would imply that the=0A= >> "originating" SP's willingness to provide this signature is a=0A= >> critical success factor for the proposal's adoption.=0A= >>=0A= >>=0A= >> But back to the business process outsourcers (BPO) case - where a=0A= >> call center is providing service on behalf of multiple companies. I=0A= >> can see the value of them sending different numbers based on the=0A= >> clients they represent. Wouldn't that create a billing issue though?=0A= >> This is not an area I understand well, but I would suspect that SP 1=0A= >> allowing one of its subscribers to send an outbound call using a=0A= >> number registered to SP 2 could be a no-no. If this hypothesis is=0A= >> correct, then we are back to the case where the SP is signing all calls,= =0A= even for BPOs.=0A= >>=0A= >> Or maybe this is another problem we are trying to fix in the working=0A= >> group, in which case we perhaps should state as a goal or benefit:=0A= >> "providing a reliable mechanism to let calls originated from one SP1=0A= >> to outpulse numbers that belong to another".=0A= >>=0A= >> Fernando=0A= >>=0A= >>=0A= >>=0A= >>=0A= >>=0A= >>=0A= >> On 9/16/13 12:12 PM, "Hadriel Kaplan" wrote:= =0A= >>=0A= >>>=0A= >>> Any of them could do it. My guess is service providers will do it=0A= >>>for most call centers, although larger call centers might do it=0A= >>>themselves...=0A= >>> especially ones which have trunks from multiple providers and can=0A= >>>source calls using the same number(s) out through multiple providers=0A= >>>on a call-by-call basis.=0A= >>>=0A= >>> -hadriel=0A= >>>=0A= >>>=0A= >>> On Sep 16, 2013, at 9:49 AM, Fernando Mousinho (fmousinh)=0A= >>> wrote:=0A= >>>=0A= >>>> I'm catching up with the discussions in this working group, and am=0A= >>>> trying to understand some architecture implications in call centers=0A= >>>> (which is where my background is). It seems that many of the=0A= >>>> problems we are trying to fix are related to contact centers=0A= >>>> anyway, so it is probably a good idea to have everyone in the same=0A= page.=0A= >>>>=0A= >>>> Forgive me if it is an obvious question, but which components in a=0A= >>>> "typical call center architecture" do you see signature and=0A= >>>> verification taking place? Such "typical" deployments have premises=0A= >>>> based equipment (PME), a session border controller (SBC) and of=0A= >>>> course a SIP service provider all three could potentially be used=0A= >>>> throughout the authorization process. There are different=0A= >>>> ramifications depending on where your mind is at.=0A= >>>>=0A= >>>> Fernando Mousinho=0A= >>>> Cisco Systems=0A= >>>=0A= >>=0A= >> _______________________________________________=0A= >> stir mailing list=0A= >> stir@ietf.org=0A= >> https://www.ietf.org/mailman/listinfo/stir=0A= >=0A= >_______________________________________________=0A= >stir mailing list=0A= >stir@ietf.org=0A= >https://www.ietf.org/mailman/listinfo/stir=0A= >=0A= >=0A= >________________________________=0A= >=0A= >This e-mail may contain Sprint proprietary information intended for the=0A= >sole use of the recipient(s). Any use by others is prohibited. If you=0A= >are not the intended recipient, please contact the sender and delete=0A= >all copies of the message.=0A= >=0A= >_______________________________________________=0A= >stir mailing list=0A= >stir@ietf.org=0A= >https://www.ietf.org/mailman/listinfo/stir=0A= =0A= _______________________________________________=0A= stir mailing list=0A= stir@ietf.org=0A= https://www.ietf.org/mailman/listinfo/stir=0A= From Henning.Schulzrinne@fcc.gov Thu Sep 19 14:29:26 2013 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5C33221F8417 for ; Thu, 19 Sep 2013 14:29:26 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.599 X-Spam-Level: X-Spam-Status: No, score=-3.599 tagged_above=-999 required=5 tests=[AWL=1.000, BAYES_00=-2.599, GB_I_LETTER=-2] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id juQdUAq-a7M6 for ; Thu, 19 Sep 2013 14:29:22 -0700 (PDT) Received: from DC-IP-1.fcc.gov (dc-ip-1.fcc.gov [192.104.54.97]) by ietfa.amsl.com (Postfix) with ESMTP id D651721F8414 for ; Thu, 19 Sep 2013 14:29:21 -0700 (PDT) Message-ID: From: Henning Schulzrinne To: "Schumacher, Gregory [CTO]" , Brian Rosen Thread-Topic: [stir] Call Center Implications Thread-Index: AQHOsuOJ4w3gYleEHUa5h7lxd4Kh+JnIzFgAgAFYvoCAABAsAIADgzEA///fD+I= Date: Thu, 19 Sep 2013 21:29:15 +0000 References: <71E3420F5D11314D8D989D8B72D247E129FD1076@xmb-aln-x06.cisco.com> <3C71FB3F-A1A1-4637-8A6D-0BE44D40E784@brianrosen.net>, <546DB8432567684FA41E336EF1D312B84A16487C@PLSWM14A.ad.sprint.com> In-Reply-To: <546DB8432567684FA41E336EF1D312B84A16487C@PLSWM14A.ad.sprint.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Cc: "stir@ietf.org" Subject: Re: [stir] Call Center Implications X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 19 Sep 2013 21:29:26 -0000 That's more of a legal than engineering question, I think. There are very p= articular rules (apparently, not uncontested) as to when somebody is consid= ered an "agent" of another company, e.g., for TCPA purposes. For my non-law= yer mind, this isn't dissimilar to allowing some other party to use your le= tterhead or logo. The implications may well differ by jurisdiction and subj= ect matter. (For example, the contracting entity may not be responsible if = the BPO outfit pollutes the nearby waterway or molests cute kittens, but ma= y well be for other purposes.)=0A= =0A= ________________________________________=0A= From: stir-bounces@ietf.org [stir-bounces@ietf.org] on behalf of Schumacher= , Gregory [CTO] [Gregory.Schumacher@sprint.com]=0A= Sent: Thursday, September 19, 2013 3:22 PM=0A= To: Brian Rosen=0A= Cc: stir@ietf.org=0A= Subject: Re: [stir] Call Center Implications=0A= =0A= There are some benefits from this approach, but also some scenarios that ne= ed clarification how they could function.=0A= =0A= The benefit is that the credential represents both the company "responsible= " for the sales campaign (the "company" in your scenario) and the company o= perating the sales campaign (the call center in your scenario). For the us= e in forensics (after the fact analysis) such as pursuit of fraud investiga= tion, we then can follow both paths.=0A= =0A= However can you clarify the following -=0A= - If a SP "signs" the call, is it attesting to the "responsible" party for = the telemarketing call or the party executing the telemarketing campaign o= r both?=0A= =0A= - How is the SP supposed to know all the parties that it is attesting to - = the responsible party and/or executing party?=0A= =0A= -It seems likely that some of the numbers assigned to a company in your sce= nario will not be assigned to real telephones (or call center trunk) until = a telemarketing campaign is initiated or a call center selected to execute = the sales campaign, is it possible to have these unassigned or floating num= bers when not in use for a telemarketing campaign? Is it allowed under mos= t national numbering regimes?=0A= =0A= - How important is it to have a known or recognized phone number as the cal= ler id as part of a telemarketing campaign? I am assuming that not all cam= paigns care about having a number that is known or recognized.=0A= =0A= -In other words for this last bit, if a call center (telemarketing campaign= operator) is using their own set of numbers but serve multiple simultaneou= s telemarketing campaigns using the same originating numbers, what will the= y sign? Will they just have a credential representing the call center alon= e, or a different credential per telemarketing campaign, or a different cre= dential per responsible party (per client)? This will affect what is possi= ble for any forensic activity.=0A= =0A= -----Original Message-----=0A= From: stir-bounces@ietf.org [mailto:stir-bounces@ietf.org] On Behalf Of Bri= an Rosen=0A= Sent: Tuesday, September 17, 2013 9:44 AM=0A= To: Fernando Mousinho=0A= Cc: stir@ietf.org; Hadriel Kaplan=0A= Subject: Re: [stir] Call Center Implications=0A= =0A= We have a requirement to support the BPO use case.=0A= =0A= The notion we had is that the company contracting the call center approves = the use, and the call center, or the SP acting on its behalf, signs.=0A= Think of this as another level of delegation. An SP delegates numbers to t= he company. The company "delegates" use of those numbers to the call cente= r. The call center calls, using that delegation. The credentials of the c= all center would be different from those of the company, but would cover th= e same number. Having multiple credentials covering the same number will b= e very common due to the way delegation happens. In order to allow SPs to = sign, without creating credential per TN, we allow credentials with ranges.= The ranges could overlap when delegation happens.=0A= =0A= Consider the following complex US case:=0A= The North American Number Plan Administrator delegates 202-555-xxxx to the = Pooling Administrator. The PA now has a credential covering the entire 10K= block.=0A= The Pooling Administrator delegates 202-555-1xxx to SP A. SP A has a crede= ntial for the entire 1K block SP A resells 202-555-12xx to SP B . SP B has= a credential for a 100 TN block SP B delegates 202-555-123x to Company C. = Company C has a credential for a 10 number block Company C authorizes 202-= 555-1234 to BPO D. BPO D has credential for a 1 number block=0A= =0A= NANPA and the PA never are in a call path, so they would never sign a call.= =0A= =0A= However, SP A or SP B could sign a call from either Company C or BPO D usin= g the credential they have.=0A= =0A= The SP for the call center could acquire credentials from the BPO and sign = on its behalf. I suspect than many service providers would be reluctant to= do so unless the numbers were from their own inventory (that is, the compa= ny got its numbers from the same SP as the call center). Since that won't = be the common case, the call center probably has to do the signing itself.= =0A= =0A= Brian=0A= =0A= On Sep 17, 2013, at 8:46 AM, Fernando Mousinho (fmousinh) wrote:=0A= =0A= > I agree, Hadriel. While large call centers (including BPOs, which=0A= > provide services for other companies) may have special arrangements=0A= > with SPs, the majority (small to mid-size) will probably rely on the=0A= > SPs to do provide to vouch for their identity. This would probably be=0A= > the case for the home analog caller anyway. This would imply that the=0A= > "originating" SP's willingness to provide this signature is a critical=0A= > success factor for the proposal's adoption.=0A= >=0A= >=0A= > But back to the business process outsourcers (BPO) case - where a call=0A= > center is providing service on behalf of multiple companies. I can see=0A= > the value of them sending different numbers based on the clients they=0A= > represent. Wouldn't that create a billing issue though? This is not an=0A= > area I understand well, but I would suspect that SP 1 allowing one of=0A= > its subscribers to send an outbound call using a number registered to=0A= > SP 2 could be a no-no. If this hypothesis is correct, then we are back=0A= > to the case where the SP is signing all calls, even for BPOs.=0A= >=0A= > Or maybe this is another problem we are trying to fix in the working=0A= > group, in which case we perhaps should state as a goal or benefit:=0A= > "providing a reliable mechanism to let calls originated from one SP1=0A= > to outpulse numbers that belong to another".=0A= >=0A= > Fernando=0A= >=0A= >=0A= >=0A= >=0A= >=0A= >=0A= > On 9/16/13 12:12 PM, "Hadriel Kaplan" wrote:= =0A= >=0A= >>=0A= >> Any of them could do it. My guess is service providers will do it=0A= >> for most call centers, although larger call centers might do it themselv= es...=0A= >> especially ones which have trunks from multiple providers and can=0A= >> source calls using the same number(s) out through multiple providers=0A= >> on a call-by-call basis.=0A= >>=0A= >> -hadriel=0A= >>=0A= >>=0A= >> On Sep 16, 2013, at 9:49 AM, Fernando Mousinho (fmousinh)=0A= >> wrote:=0A= >>=0A= >>> I'm catching up with the discussions in this working group, and am=0A= >>> trying to understand some architecture implications in call centers=0A= >>> (which is where my background is). It seems that many of the=0A= >>> problems we are trying to fix are related to contact centers anyway,=0A= >>> so it is probably a good idea to have everyone in the same page.=0A= >>>=0A= >>> Forgive me if it is an obvious question, but which components in a=0A= >>> "typical call center architecture" do you see signature and=0A= >>> verification taking place? Such "typical" deployments have premises=0A= >>> based equipment (PME), a session border controller (SBC) and of=0A= >>> course a SIP service provider all three could potentially be used=0A= >>> throughout the authorization process. There are different=0A= >>> ramifications depending on where your mind is at.=0A= >>>=0A= >>> Fernando Mousinho=0A= >>> Cisco Systems=0A= >>=0A= >=0A= > _______________________________________________=0A= > stir mailing list=0A= > stir@ietf.org=0A= > https://www.ietf.org/mailman/listinfo/stir=0A= =0A= _______________________________________________=0A= stir mailing list=0A= stir@ietf.org=0A= https://www.ietf.org/mailman/listinfo/stir=0A= =0A= =0A= ________________________________=0A= =0A= This e-mail may contain Sprint proprietary information intended for the sol= e use of the recipient(s). Any use by others is prohibited. If you are not = the intended recipient, please contact the sender and delete all copies of = the message.=0A= =0A= _______________________________________________=0A= stir mailing list=0A= stir@ietf.org=0A= https://www.ietf.org/mailman/listinfo/stir=0A= From richard@shockey.us Thu Sep 19 14:34:12 2013 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3A18521F842F for ; Thu, 19 Sep 2013 14:34:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.265 X-Spam-Level: X-Spam-Status: No, score=-102.265 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id a1S0bZhObkmA for ; Thu, 19 Sep 2013 14:34:07 -0700 (PDT) Received: from oproxy9-pub.mail.unifiedlayer.com (oproxy9-pub.mail.unifiedlayer.com [69.89.24.6]) by ietfa.amsl.com (Postfix) with SMTP id 49DA721F842B for ; Thu, 19 Sep 2013 14:34:07 -0700 (PDT) Received: (qmail 3853 invoked by uid 0); 19 Sep 2013 21:33:45 -0000 Received: from unknown (HELO box462.bluehost.com) (74.220.219.62) by oproxy9.mail.unifiedlayer.com with SMTP; 19 Sep 2013 21:33:45 -0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=shockey.us; s=default; h=Content-Transfer-Encoding:Content-Type:MIME-Version:Message-ID:Date:Subject:In-Reply-To:References:Cc:To:From; bh=cj+YsKSm0CuYziXkYX7UAdlLWiYZiD92c6UpxK5+idg=; b=YxRdt3yjBn+tCsEpJOJE2pcogWQIxqliZ9LVVSa1062W6iz/Vn8yXzRLpY70iwkN3u3Cq8LgADmSA908fU1pJJIGfBT/EiVZ1xW6c6RLj6lWgoh2L2HroXAUTg0W8mkw; Received: from [71.114.100.16] (port=56473 helo=RSHOCKEYPC) by box462.bluehost.com with esmtpa (Exim 4.80) (envelope-from ) id 1VMlr7-0008BU-FP; Thu, 19 Sep 2013 15:33:45 -0600 From: "Richard Shockey" To: "'Henning Schulzrinne'" , "'Michael Hammer'" , , , References: <546DB8432567684FA41E336EF1D312B84A16487C@PLSWM14A.ad.sprint.com> <71E3420F5D11314D8D989D8B72D247E129FD51DA@xmb-aln-x06.cisco.com>, <00C069FD01E0324C9FFCADF539701DB3BBEDBA62@sc9-ex2k10mb1.corp.yaanatech.com> In-Reply-To: Date: Thu, 19 Sep 2013 17:33:41 -0400 Message-ID: <01c201ceb57f$e9c2e0e0$bd48a2a0$@shockey.us> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-2" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 15.0 Thread-Index: AQIJjRy4tSdblFbMe62TCm5TxV9KhQGZm54bAm5VXLoBeZDeapkr2Mkw Content-Language: en-us X-Identified-User: {3286:box462.bluehost.com:shockeyu:shockey.us} {sentby:smtp auth 71.114.100.16 authed with richard@shockey.us} Cc: stir@ietf.org Subject: Re: [stir] Call Center Implications X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 19 Sep 2013 21:34:12 -0000 Agreed.. oh BTW someone might be able to produce some very useful work = by taking a long look at the CALL-INFO header for some type of advanced = CNAM capability for display in advanced UA's. Something other than 15 ASCII characters. Doctors office logo address etc. =20 -----Original Message----- From: stir-bounces@ietf.org [mailto:stir-bounces@ietf.org] On Behalf Of Henning Schulzrinne Sent: Thursday, September 19, 2013 5:24 PM To: Michael Hammer; fmousinh@cisco.com; Gregory.Schumacher@sprint.com; br@brianrosen.net Cc: stir@ietf.org Subject: Re: [stir] Call Center Implications I see no reason not to allow signing any number-related field in the SIP request. (Signing may well be done by different parties.) As far as I know, callback numbers (SIP Reply-To) aren't conveyable in legacy systems, however, so this may be of somewhat limited use for a = while. ________________________________________ From: stir-bounces@ietf.org [stir-bounces@ietf.org] on behalf of Michael Hammer [michael.hammer@yaanatech.com] Sent: Thursday, September 19, 2013 4:34 PM To: fmousinh@cisco.com; Gregory.Schumacher@sprint.com; br@brianrosen.net Cc: stir@ietf.org Subject: Re: [stir] Call Center Implications Don't we still want to know the true originator of the call, even when = we have some token that says "Doctor so and so approved this message." Originating number, display number, and call-back number could be 3 different things. Should all of them be verifiable? Mike -----Original Message----- From: stir-bounces@ietf.org [mailto:stir-bounces@ietf.org] On Behalf Of Fernando Mousinho (fmousinh) Sent: Thursday, September 19, 2013 4:00 PM To: Schumacher, Gregory [CTO]; Brian Rosen Cc: stir@ietf.org Subject: Re: [stir] Call Center Implications I believe the scenario telemarketing here is when a client hires a BPO = to place outbound calls, but expect customers to return these calls to a different place (say, their own and operated call center). This way, = this client is authorizing the BPO to use an identity that it (BPO) doesn't = own. These numbers in this scenario are always operational, just at a = different place. The same telemarketing operator would then outpulse multiple numbers for their multiple clients, none of these numbers belonging to the = telemarketer. BTW, we are using the term "telemarketing" in a very generic sense - = this could just as easily be a public service announcement, fundraiser, etc. If the telemarketer happens to own the inbound call center as well, it = very likely owns the number as well and this would necessarily be a special = case - it would fall under the same characteristics of any call center. On a different note, it would help a lot of we standardized terminology. Telemarketing, BPO, call center, end customer, clients=A9 it may be hard = for others to follow the discussion later. (generic term for any type of outbound calling, including public service announcement, so don't think it's all about sales!) On 9/19/13 3:22 PM, "Schumacher, Gregory [CTO]" wrote: >There are some benefits from this approach, but also some scenarios=20 >that need clarification how they could function. > >The benefit is that the credential represents both the company=20 >"responsible" for the sales campaign (the "company" in your scenario)=20 >and the company operating the sales campaign (the call center in your=20 >scenario). For the use in forensics (after the fact analysis) such as=20 >pursuit of fraud investigation, we then can follow both paths. > >However can you clarify the following - >- If a SP "signs" the call, is it attesting to the "responsible" party=20 >for the telemarketing call or the party executing the telemarketing=20 >campaign or both? > >- How is the SP supposed to know all the parties that it is attesting=20 >to >- the responsible party and/or executing party? > >-It seems likely that some of the numbers assigned to a company in your = >scenario will not be assigned to real telephones (or call center trunk) = >until a telemarketing campaign is initiated or a call center selected=20 >to execute the sales campaign, is it possible to have these unassigned=20 >or floating numbers when not in use for a telemarketing campaign? Is=20 >it allowed under most national numbering regimes? > >- How important is it to have a known or recognized phone number as the = >caller id as part of a telemarketing campaign? I am assuming that not=20 >all campaigns care about having a number that is known or recognized. > >-In other words for this last bit, if a call center (telemarketing=20 >campaign operator) is using their own set of numbers but serve multiple = >simultaneous telemarketing campaigns using the same originating=20 >numbers, what will they sign? Will they just have a credential=20 >representing the call center alone, or a different credential per=20 >telemarketing campaign, or a different credential per responsible party = >(per client)? This will affect what is possible for any forensic = activity. > >-----Original Message----- >From: stir-bounces@ietf.org [mailto:stir-bounces@ietf.org] On Behalf Of = >Brian Rosen >Sent: Tuesday, September 17, 2013 9:44 AM >To: Fernando Mousinho >Cc: stir@ietf.org; Hadriel Kaplan >Subject: Re: [stir] Call Center Implications > >We have a requirement to support the BPO use case. > >The notion we had is that the company contracting the call center=20 >approves the use, and the call center, or the SP acting on its behalf,=20 >signs. >Think of this as another level of delegation. An SP delegates numbers=20 >to the company. The company "delegates" use of those numbers to the=20 >call center. The call center calls, using that delegation. The=20 >credentials of the call center would be different from those of the=20 >company, but would cover the same number. Having multiple credentials=20 >covering the same number will be very common due to the way delegation=20 >happens. In order to allow SPs to sign, without creating credential=20 >per TN, we allow credentials with ranges. The ranges could overlap=20 >when delegation happens. > >Consider the following complex US case: >The North American Number Plan Administrator delegates 202-555-xxxx to=20 >the Pooling Administrator. The PA now has a credential covering the=20 >entire 10K block. >The Pooling Administrator delegates 202-555-1xxx to SP A. SP A has a=20 >credential for the entire 1K block SP A resells 202-555-12xx to SP B . >SP B has a credential for a 100 TN block SP B delegates 202-555-123x to = >Company C. Company C has a credential for a 10 number block Company C=20 >authorizes 202-555-1234 to BPO D. BPO D has credential for a 1 number=20 >block > >NANPA and the PA never are in a call path, so they would never sign a=20 >call. > >However, SP A or SP B could sign a call from either Company C or BPO D=20 >using the credential they have. > >The SP for the call center could acquire credentials from the BPO and=20 >sign on its behalf. I suspect than many service providers would be=20 >reluctant to do so unless the numbers were from their own inventory=20 >(that is, the company got its numbers from the same SP as the call = center). >Since that won't be the common case, the call center probably has to do = >the signing itself. > >Brian > >On Sep 17, 2013, at 8:46 AM, Fernando Mousinho (fmousinh)=20 > wrote: > >> I agree, Hadriel. While large call centers (including BPOs, which=20 >> provide services for other companies) may have special arrangements=20 >> with SPs, the majority (small to mid-size) will probably rely on the=20 >> SPs to do provide to vouch for their identity. This would probably be = >> the case for the home analog caller anyway. This would imply that the = >> "originating" SP's willingness to provide this signature is a=20 >> critical success factor for the proposal's adoption. >> >> >> But back to the business process outsourcers (BPO) case - where a=20 >> call center is providing service on behalf of multiple companies. I=20 >> can see the value of them sending different numbers based on the=20 >> clients they represent. Wouldn't that create a billing issue though? >> This is not an area I understand well, but I would suspect that SP 1=20 >> allowing one of its subscribers to send an outbound call using a=20 >> number registered to SP 2 could be a no-no. If this hypothesis is=20 >> correct, then we are back to the case where the SP is signing all=20 >> calls, even for BPOs. >> >> Or maybe this is another problem we are trying to fix in the working=20 >> group, in which case we perhaps should state as a goal or benefit: >> "providing a reliable mechanism to let calls originated from one SP1=20 >> to outpulse numbers that belong to another". >> >> Fernando >> >> >> >> >> >> >> On 9/16/13 12:12 PM, "Hadriel Kaplan" = wrote: >> >>> >>> Any of them could do it. My guess is service providers will do it=20 >>>for most call centers, although larger call centers might do it=20 >>>themselves... >>> especially ones which have trunks from multiple providers and can=20 >>>source calls using the same number(s) out through multiple providers=20 >>>on a call-by-call basis. >>> >>> -hadriel >>> >>> >>> On Sep 16, 2013, at 9:49 AM, Fernando Mousinho (fmousinh)=20 >>> wrote: >>> >>>> I'm catching up with the discussions in this working group, and am=20 >>>> trying to understand some architecture implications in call centers = >>>> (which is where my background is). It seems that many of the=20 >>>> problems we are trying to fix are related to contact centers=20 >>>> anyway, so it is probably a good idea to have everyone in the same page. >>>> >>>> Forgive me if it is an obvious question, but which components in a=20 >>>> "typical call center architecture" do you see signature and=20 >>>> verification taking place? Such "typical" deployments have premises = >>>> based equipment (PME), a session border controller (SBC) and of=20 >>>> course a SIP service provider all three could potentially be used=20 >>>> throughout the authorization process. There are different=20 >>>> ramifications depending on where your mind is at. >>>> >>>> Fernando Mousinho >>>> Cisco Systems >>> >> >> _______________________________________________ >> stir mailing list >> stir@ietf.org >> https://www.ietf.org/mailman/listinfo/stir > >_______________________________________________ >stir mailing list >stir@ietf.org >https://www.ietf.org/mailman/listinfo/stir > > >________________________________ > >This e-mail may contain Sprint proprietary information intended for the = >sole use of the recipient(s). Any use by others is prohibited. If you=20 >are not the intended recipient, please contact the sender and delete=20 >all copies of the message. > >_______________________________________________ >stir mailing list >stir@ietf.org >https://www.ietf.org/mailman/listinfo/stir _______________________________________________ stir mailing list stir@ietf.org https://www.ietf.org/mailman/listinfo/stir _______________________________________________ stir mailing list stir@ietf.org https://www.ietf.org/mailman/listinfo/stir From alex@bobotek.net Thu Sep 19 14:37:13 2013 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B1E7421F85EE for ; Thu, 19 Sep 2013 14:37:13 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.437 X-Spam-Level: X-Spam-Status: No, score=-0.437 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FH_RELAY_NODNS=1.451, HELO_MISMATCH_NET=0.611, RDNS_NONE=0.1] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id giVY3KhDuplF for ; Thu, 19 Sep 2013 14:37:09 -0700 (PDT) Received: from qmta05.emeryville.ca.mail.comcast.net (qmta05.emeryville.ca.mail.comcast.net [IPv6:2001:558:fe2d:43:76:96:30:48]) by ietfa.amsl.com (Postfix) with ESMTP id 13F5221F888F for ; Thu, 19 Sep 2013 14:37:06 -0700 (PDT) Received: from omta16.emeryville.ca.mail.comcast.net ([76.96.30.72]) by qmta05.emeryville.ca.mail.comcast.net with comcast id T5jA1m0041ZMdJ4A59d6Le; Thu, 19 Sep 2013 21:37:06 +0000 Received: from BOBO1A.bobotek.net ([76.22.113.196]) by omta16.emeryville.ca.mail.comcast.net with comcast id T9d41m01V4EJ4tY8c9d5eK; Thu, 19 Sep 2013 21:37:06 +0000 Received: from BOBO1A.bobotek.net ([fe80::4851:b4bb:416a:e1ad]) by BOBO1A.bobotek.net ([fe80::4851:b4bb:416a:e1ad%10]) with mapi; Thu, 19 Sep 2013 14:27:21 -0700 From: Alex Bobotek To: Henning Schulzrinne , Michael Hammer , "fmousinh@cisco.com" , "Gregory.Schumacher@sprint.com" , "br@brianrosen.net" Date: Thu, 19 Sep 2013 14:27:20 -0700 Thread-Topic: [stir] Call Center Implications Thread-Index: AQHOsuOJ4w3gYleEHUa5h7lxd4Kh+JnIzFgAgAFYvoCAABAsAIADgzEAgAAKWQCAAAm8AP//yiiIgAABS/A= Message-ID: <4B1956260CD29F4A9622F00322FE05319381A90798@BOBO1A.bobotek.net> References: <546DB8432567684FA41E336EF1D312B84A16487C@PLSWM14A.ad.sprint.com> <71E3420F5D11314D8D989D8B72D247E129FD51DA@xmb-aln-x06.cisco.com>, <00C069FD01E0324C9FFCADF539701DB3BBEDBA62@sc9-ex2k10mb1.corp.yaanatech.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: text/plain; charset="iso-8859-2" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=comcast.net; s=q20121106; t=1379626626; bh=Tn3XUPD4CvOsR0zCy5wPAs3N4owlZv7SE5c34V1YEbc=; h=Received:Received:Received:From:To:Date:Subject:Message-ID: Content-Type:MIME-Version; b=tcJ/NcNNIZavIGsZw2u9IPuVsjdatnOB6sYNtQ6d2bU4dEHnGlRf4U5UmejLErELO bElPPPmOivxm4pTF/1wvJM/USqzL6V9NBp3ThqcnS1+W408E7KIZeZtGYsLiKwkkAq K1G4j4MzbW5N/5Ee7G1vTmfA/Bp1o6H49dRL8Bp+4tnEzFLNADdBD6APBXVRmDAwnw gpifh2NvveJa89QcGBhTvAKHsUiBvKWgUTRAw70H6rvZbZK0wFnlM3CVInf4LMN8pE FyfiY52KV3wfOt/WzoFiUKGk6RLmzfYTgZxVZuJ7WsgAn9xzzxvQdDJXses4fsXAKe MYoh5+c5yNUNw== Cc: "stir@ietf.org" Subject: Re: [stir] Call Center Implications X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 19 Sep 2013 21:37:13 -0000 +1 I've assumed that we are headed towards a "sign whatever extras you wish, a= nd indicate what your signature covers" mechanism. =20 Based on this, standards would need to identify only a minimal subset of wh= at shall/should be signed, and ensure that any required group of signed ite= ms survives transit intact. =20 Best signing practices may be needed to complement the standard, and an app= ropriate place for all but the most basic 'what to sign' recommendations. = =20 Regards, Alex > -----Original Message----- > From: stir-bounces@ietf.org [mailto:stir-bounces@ietf.org] On Behalf Of > Henning Schulzrinne > Sent: Thursday, September 19, 2013 2:24 PM > To: Michael Hammer; fmousinh@cisco.com; > Gregory.Schumacher@sprint.com; br@brianrosen.net > Cc: stir@ietf.org > Subject: Re: [stir] Call Center Implications >=20 > I see no reason not to allow signing any number-related field in the SIP > request. (Signing may well be done by different parties.) >=20 > As far as I know, callback numbers (SIP Reply-To) aren't conveyable in le= gacy > systems, however, so this may be of somewhat limited use for a while. >=20 > ________________________________________ > From: stir-bounces@ietf.org [stir-bounces@ietf.org] on behalf of Michael > Hammer [michael.hammer@yaanatech.com] > Sent: Thursday, September 19, 2013 4:34 PM > To: fmousinh@cisco.com; Gregory.Schumacher@sprint.com; > br@brianrosen.net > Cc: stir@ietf.org > Subject: Re: [stir] Call Center Implications >=20 > Don't we still want to know the true originator of the call, even when we > have some token that says "Doctor so and so approved this message." >=20 > Originating number, display number, and call-back number could be 3 > different things. > Should all of them be verifiable? >=20 > Mike >=20 >=20 > -----Original Message----- > From: stir-bounces@ietf.org [mailto:stir-bounces@ietf.org] On Behalf Of > Fernando Mousinho (fmousinh) > Sent: Thursday, September 19, 2013 4:00 PM > To: Schumacher, Gregory [CTO]; Brian Rosen > Cc: stir@ietf.org > Subject: Re: [stir] Call Center Implications >=20 > I believe the scenario telemarketing here is when a client hires a BPO to= place > outbound calls, but expect customers to return these calls to a different > place (say, their own and operated call center). This way, this client is > authorizing the BPO to use an identity that it (BPO) doesn't own. > These numbers in this scenario are always operational, just at a differen= t > place. >=20 > The same telemarketing operator would then outpulse multiple numbers for > their multiple clients, none of these numbers belonging to the telemarket= er. > BTW, we are using the term "telemarketing" in a very generic sense - this > could just as easily be a public service announcement, fundraiser, etc. >=20 > If the telemarketer happens to own the inbound call center as well, it ve= ry > likely owns the number as well and this would necessarily be a special ca= se > - it would fall under the same characteristics of any call center. >=20 > On a different note, it would help a lot of we standardized terminology. > Telemarketing, BPO, call center, end customer, clients=A9 it may be hard = for > others to follow the discussion later. >=20 >=20 >=20 > (generic term for any type of outbound calling, including public service > announcement, so don't think it's all about sales!) >=20 >=20 > On 9/19/13 3:22 PM, "Schumacher, Gregory [CTO]" > wrote: >=20 > >There are some benefits from this approach, but also some scenarios > >that need clarification how they could function. > > > >The benefit is that the credential represents both the company > >"responsible" for the sales campaign (the "company" in your scenario) > >and the company operating the sales campaign (the call center in your > >scenario). For the use in forensics (after the fact analysis) such as > >pursuit of fraud investigation, we then can follow both paths. > > > >However can you clarify the following - > >- If a SP "signs" the call, is it attesting to the "responsible" party > >for the telemarketing call or the party executing the telemarketing > >campaign or both? > > > >- How is the SP supposed to know all the parties that it is attesting > >to > >- the responsible party and/or executing party? > > > >-It seems likely that some of the numbers assigned to a company in your > >scenario will not be assigned to real telephones (or call center trunk) > >until a telemarketing campaign is initiated or a call center selected > >to execute the sales campaign, is it possible to have these unassigned > >or floating numbers when not in use for a telemarketing campaign? Is > >it allowed under most national numbering regimes? > > > >- How important is it to have a known or recognized phone number as the > >caller id as part of a telemarketing campaign? I am assuming that not > >all campaigns care about having a number that is known or recognized. > > > >-In other words for this last bit, if a call center (telemarketing > >campaign operator) is using their own set of numbers but serve multiple > >simultaneous telemarketing campaigns using the same originating > >numbers, what will they sign? Will they just have a credential > >representing the call center alone, or a different credential per > >telemarketing campaign, or a different credential per responsible party > >(per client)? This will affect what is possible for any forensic activi= ty. > > > >-----Original Message----- > >From: stir-bounces@ietf.org [mailto:stir-bounces@ietf.org] On Behalf Of > >Brian Rosen > >Sent: Tuesday, September 17, 2013 9:44 AM > >To: Fernando Mousinho > >Cc: stir@ietf.org; Hadriel Kaplan > >Subject: Re: [stir] Call Center Implications > > > >We have a requirement to support the BPO use case. > > > >The notion we had is that the company contracting the call center > >approves the use, and the call center, or the SP acting on its behalf, > >signs. > >Think of this as another level of delegation. An SP delegates numbers > >to the company. The company "delegates" use of those numbers to the > >call center. The call center calls, using that delegation. The > >credentials of the call center would be different from those of the > >company, but would cover the same number. Having multiple credentials > >covering the same number will be very common due to the way delegation > >happens. In order to allow SPs to sign, without creating credential > >per TN, we allow credentials with ranges. The ranges could overlap > >when delegation happens. > > > >Consider the following complex US case: > >The North American Number Plan Administrator delegates 202-555-xxxx to > >the Pooling Administrator. The PA now has a credential covering the > >entire 10K block. > >The Pooling Administrator delegates 202-555-1xxx to SP A. SP A has a > >credential for the entire 1K block SP A resells 202-555-12xx to SP B . > >SP B has a credential for a 100 TN block SP B delegates 202-555-123x to > >Company C. Company C has a credential for a 10 number block Company C > >authorizes 202-555-1234 to BPO D. BPO D has credential for a 1 number > >block > > > >NANPA and the PA never are in a call path, so they would never sign a > >call. > > > >However, SP A or SP B could sign a call from either Company C or BPO D > >using the credential they have. > > > >The SP for the call center could acquire credentials from the BPO and > >sign on its behalf. I suspect than many service providers would be > >reluctant to do so unless the numbers were from their own inventory > >(that is, the company got its numbers from the same SP as the call cente= r). > >Since that won't be the common case, the call center probably has to do > >the signing itself. > > > >Brian > > > >On Sep 17, 2013, at 8:46 AM, Fernando Mousinho (fmousinh) > > wrote: > > > >> I agree, Hadriel. While large call centers (including BPOs, which > >> provide services for other companies) may have special arrangements > >> with SPs, the majority (small to mid-size) will probably rely on the > >> SPs to do provide to vouch for their identity. This would probably be > >> the case for the home analog caller anyway. This would imply that the > >> "originating" SP's willingness to provide this signature is a > >> critical success factor for the proposal's adoption. > >> > >> > >> But back to the business process outsourcers (BPO) case - where a > >> call center is providing service on behalf of multiple companies. I > >> can see the value of them sending different numbers based on the > >> clients they represent. Wouldn't that create a billing issue though? > >> This is not an area I understand well, but I would suspect that SP 1 > >> allowing one of its subscribers to send an outbound call using a > >> number registered to SP 2 could be a no-no. If this hypothesis is > >> correct, then we are back to the case where the SP is signing all > >> calls, > even for BPOs. > >> > >> Or maybe this is another problem we are trying to fix in the working > >> group, in which case we perhaps should state as a goal or benefit: > >> "providing a reliable mechanism to let calls originated from one SP1 > >> to outpulse numbers that belong to another". > >> > >> Fernando > >> > >> > >> > >> > >> > >> > >> On 9/16/13 12:12 PM, "Hadriel Kaplan" > wrote: > >> > >>> > >>> Any of them could do it. My guess is service providers will do it > >>>for most call centers, although larger call centers might do it > >>>themselves... > >>> especially ones which have trunks from multiple providers and can > >>>source calls using the same number(s) out through multiple providers > >>>on a call-by-call basis. > >>> > >>> -hadriel > >>> > >>> > >>> On Sep 16, 2013, at 9:49 AM, Fernando Mousinho (fmousinh) > >>> wrote: > >>> > >>>> I'm catching up with the discussions in this working group, and am > >>>> trying to understand some architecture implications in call centers > >>>> (which is where my background is). It seems that many of the > >>>> problems we are trying to fix are related to contact centers > >>>> anyway, so it is probably a good idea to have everyone in the same > page. > >>>> > >>>> Forgive me if it is an obvious question, but which components in a > >>>> "typical call center architecture" do you see signature and > >>>> verification taking place? Such "typical" deployments have premises > >>>> based equipment (PME), a session border controller (SBC) and of > >>>> course a SIP service provider all three could potentially be used > >>>> throughout the authorization process. There are different > >>>> ramifications depending on where your mind is at. > >>>> > >>>> Fernando Mousinho > >>>> Cisco Systems > >>> > >> > >> _______________________________________________ > >> stir mailing list > >> stir@ietf.org > >> https://www.ietf.org/mailman/listinfo/stir > > > >_______________________________________________ > >stir mailing list > >stir@ietf.org > >https://www.ietf.org/mailman/listinfo/stir > > > > > >________________________________ > > > >This e-mail may contain Sprint proprietary information intended for the > >sole use of the recipient(s). Any use by others is prohibited. If you > >are not the intended recipient, please contact the sender and delete > >all copies of the message. > > > >_______________________________________________ > >stir mailing list > >stir@ietf.org > >https://www.ietf.org/mailman/listinfo/stir >=20 > _______________________________________________ > stir mailing list > stir@ietf.org > https://www.ietf.org/mailman/listinfo/stir > _______________________________________________ > stir mailing list > stir@ietf.org > https://www.ietf.org/mailman/listinfo/stir From richard@shockey.us Thu Sep 19 14:40:12 2013 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2F7D621F8904 for ; Thu, 19 Sep 2013 14:40:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.265 X-Spam-Level: X-Spam-Status: No, score=-102.265 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zy4wAGVNuLGT for ; Thu, 19 Sep 2013 14:40:07 -0700 (PDT) Received: from oproxy13-pub.mail.unifiedlayer.com (oproxy13-pub.mail.unifiedlayer.com [69.89.16.30]) by ietfa.amsl.com (Postfix) with SMTP id D470321F8749 for ; Thu, 19 Sep 2013 14:40:06 -0700 (PDT) Received: (qmail 1827 invoked by uid 0); 19 Sep 2013 21:39:44 -0000 Received: from unknown (HELO box462.bluehost.com) (74.220.219.62) by oproxy13.mail.unifiedlayer.com with SMTP; 19 Sep 2013 21:39:44 -0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=shockey.us; s=default; h=Content-Transfer-Encoding:Content-Type:MIME-Version:Message-ID:Date:Subject:In-Reply-To:References:Cc:To:From; bh=e23WngQvBr+7FMzczuVqwXUaNjxzz9KWlZvuPxWU6+c=; b=NLiwvif5N6T0kmqjTW1yzffpXWmDRuWx8vHNtiNxAro4ET3Quo7nRPtGxSalF1PBA7v5De1lBHu0nSWgaDrq6lzYkkVzWRf66rPUlHGu8W5EhVgaEmeBFqt7k+LXPprn; Received: from [71.114.100.16] (port=56501 helo=RSHOCKEYPC) by box462.bluehost.com with esmtpa (Exim 4.80) (envelope-from ) id 1VMlwu-0003e4-4g; Thu, 19 Sep 2013 15:39:44 -0600 From: "Richard Shockey" To: "'Alex Bobotek'" , "'Henning Schulzrinne'" , "'Michael Hammer'" , , , References: <546DB8432567684FA41E336EF1D312B84A16487C@PLSWM14A.ad.sprint.com> <71E3420F5D11314D8D989D8B72D247E129FD51DA@xmb-aln-x06.cisco.com>, <00C069FD01E0324C9FFCADF539701DB3BBEDBA62@sc9-ex2k10mb1.corp.yaanatech.com> <4B1956260CD29F4A9622F00322FE05319381A90798@BOBO1A.bobotek.net> In-Reply-To: <4B1956260CD29F4A9622F00322FE05319381A90798@BOBO1A.bobotek.net> Date: Thu, 19 Sep 2013 17:39:40 -0400 Message-ID: <01cc01ceb580$bf8b6cb0$3ea24610$@shockey.us> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-2" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 15.0 Thread-Index: AQIJjRy4tSdblFbMe62TCm5TxV9KhQGZm54bAm5VXLoBeZDeagJ3Jsi7mRgh4gA= Content-Language: en-us X-Identified-User: {3286:box462.bluehost.com:shockeyu:shockey.us} {sentby:smtp auth 71.114.100.16 authed with richard@shockey.us} Cc: stir@ietf.org Subject: Re: [stir] Call Center Implications X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 19 Sep 2013 21:40:12 -0000 Excellent point a profile or BCP to complement the work. -----Original Message----- From: stir-bounces@ietf.org [mailto:stir-bounces@ietf.org] On Behalf Of = Alex Bobotek Sent: Thursday, September 19, 2013 5:27 PM To: Henning Schulzrinne; Michael Hammer; fmousinh@cisco.com; Gregory.Schumacher@sprint.com; br@brianrosen.net Cc: stir@ietf.org Subject: Re: [stir] Call Center Implications +1 I've assumed that we are headed towards a "sign whatever extras you = wish, and indicate what your signature covers" mechanism. =20 Based on this, standards would need to identify only a minimal subset of what shall/should be signed, and ensure that any required group of = signed items survives transit intact. =20 Best signing practices may be needed to complement the standard, and an appropriate place for all but the most basic 'what to sign' = recommendations. Regards, Alex > -----Original Message----- > From: stir-bounces@ietf.org [mailto:stir-bounces@ietf.org] On Behalf=20 > Of Henning Schulzrinne > Sent: Thursday, September 19, 2013 2:24 PM > To: Michael Hammer; fmousinh@cisco.com; Gregory.Schumacher@sprint.com; = > br@brianrosen.net > Cc: stir@ietf.org > Subject: Re: [stir] Call Center Implications >=20 > I see no reason not to allow signing any number-related field in the=20 > SIP request. (Signing may well be done by different parties.) >=20 > As far as I know, callback numbers (SIP Reply-To) aren't conveyable in = > legacy systems, however, so this may be of somewhat limited use for a while. >=20 > ________________________________________ > From: stir-bounces@ietf.org [stir-bounces@ietf.org] on behalf of=20 > Michael Hammer [michael.hammer@yaanatech.com] > Sent: Thursday, September 19, 2013 4:34 PM > To: fmousinh@cisco.com; Gregory.Schumacher@sprint.com;=20 > br@brianrosen.net > Cc: stir@ietf.org > Subject: Re: [stir] Call Center Implications >=20 > Don't we still want to know the true originator of the call, even when = > we have some token that says "Doctor so and so approved this message." >=20 > Originating number, display number, and call-back number could be 3=20 > different things. > Should all of them be verifiable? >=20 > Mike >=20 >=20 > -----Original Message----- > From: stir-bounces@ietf.org [mailto:stir-bounces@ietf.org] On Behalf=20 > Of Fernando Mousinho (fmousinh) > Sent: Thursday, September 19, 2013 4:00 PM > To: Schumacher, Gregory [CTO]; Brian Rosen > Cc: stir@ietf.org > Subject: Re: [stir] Call Center Implications >=20 > I believe the scenario telemarketing here is when a client hires a BPO = > to place outbound calls, but expect customers to return these calls to = > a different place (say, their own and operated call center). This way, = > this client is authorizing the BPO to use an identity that it (BPO) doesn't own. > These numbers in this scenario are always operational, just at a=20 > different place. >=20 > The same telemarketing operator would then outpulse multiple numbers=20 > for their multiple clients, none of these numbers belonging to the telemarketer. > BTW, we are using the term "telemarketing" in a very generic sense -=20 > this could just as easily be a public service announcement, = fundraiser, etc. >=20 > If the telemarketer happens to own the inbound call center as well, it = > very likely owns the number as well and this would necessarily be a=20 > special case > - it would fall under the same characteristics of any call center. >=20 > On a different note, it would help a lot of we standardized = terminology. > Telemarketing, BPO, call center, end customer, clients=A9 it may be = hard=20 > for others to follow the discussion later. >=20 >=20 >=20 > (generic term for any type of outbound calling, including public=20 > service announcement, so don't think it's all about sales!) >=20 >=20 > On 9/19/13 3:22 PM, "Schumacher, Gregory [CTO]" > wrote: >=20 > >There are some benefits from this approach, but also some scenarios=20 > >that need clarification how they could function. > > > >The benefit is that the credential represents both the company=20 > >"responsible" for the sales campaign (the "company" in your scenario) = > >and the company operating the sales campaign (the call center in your = > >scenario). For the use in forensics (after the fact analysis) such=20 > >as pursuit of fraud investigation, we then can follow both paths. > > > >However can you clarify the following - > >- If a SP "signs" the call, is it attesting to the "responsible"=20 > >party for the telemarketing call or the party executing the=20 > >telemarketing campaign or both? > > > >- How is the SP supposed to know all the parties that it is attesting = > >to > >- the responsible party and/or executing party? > > > >-It seems likely that some of the numbers assigned to a company in=20 > >your scenario will not be assigned to real telephones (or call center = > >trunk) until a telemarketing campaign is initiated or a call center=20 > >selected to execute the sales campaign, is it possible to have these=20 > >unassigned or floating numbers when not in use for a telemarketing=20 > >campaign? Is it allowed under most national numbering regimes? > > > >- How important is it to have a known or recognized phone number as=20 > >the caller id as part of a telemarketing campaign? I am assuming=20 > >that not all campaigns care about having a number that is known or recognized. > > > >-In other words for this last bit, if a call center (telemarketing=20 > >campaign operator) is using their own set of numbers but serve=20 > >multiple simultaneous telemarketing campaigns using the same=20 > >originating numbers, what will they sign? Will they just have a=20 > >credential representing the call center alone, or a different=20 > >credential per telemarketing campaign, or a different credential per=20 > >responsible party (per client)? This will affect what is possible = for any forensic activity. > > > >-----Original Message----- > >From: stir-bounces@ietf.org [mailto:stir-bounces@ietf.org] On Behalf=20 > >Of Brian Rosen > >Sent: Tuesday, September 17, 2013 9:44 AM > >To: Fernando Mousinho > >Cc: stir@ietf.org; Hadriel Kaplan > >Subject: Re: [stir] Call Center Implications > > > >We have a requirement to support the BPO use case. > > > >The notion we had is that the company contracting the call center=20 > >approves the use, and the call center, or the SP acting on its=20 > >behalf, signs. > >Think of this as another level of delegation. An SP delegates=20 > >numbers to the company. The company "delegates" use of those numbers = > >to the call center. The call center calls, using that delegation. =20 > >The credentials of the call center would be different from those of=20 > >the company, but would cover the same number. Having multiple=20 > >credentials covering the same number will be very common due to the=20 > >way delegation happens. In order to allow SPs to sign, without=20 > >creating credential per TN, we allow credentials with ranges. The=20 > >ranges could overlap when delegation happens. > > > >Consider the following complex US case: > >The North American Number Plan Administrator delegates 202-555-xxxx=20 > >to the Pooling Administrator. The PA now has a credential covering=20 > >the entire 10K block. > >The Pooling Administrator delegates 202-555-1xxx to SP A. SP A has a = > >credential for the entire 1K block SP A resells 202-555-12xx to SP B = . > >SP B has a credential for a 100 TN block SP B delegates 202-555-123x=20 > >to Company C. Company C has a credential for a 10 number block=20 > >Company C authorizes 202-555-1234 to BPO D. BPO D has credential for = > >a 1 number block > > > >NANPA and the PA never are in a call path, so they would never sign a = > >call. > > > >However, SP A or SP B could sign a call from either Company C or BPO=20 > >D using the credential they have. > > > >The SP for the call center could acquire credentials from the BPO and = > >sign on its behalf. I suspect than many service providers would be=20 > >reluctant to do so unless the numbers were from their own inventory=20 > >(that is, the company got its numbers from the same SP as the call center). > >Since that won't be the common case, the call center probably has to=20 > >do the signing itself. > > > >Brian > > > >On Sep 17, 2013, at 8:46 AM, Fernando Mousinho (fmousinh)=20 > > wrote: > > > >> I agree, Hadriel. While large call centers (including BPOs, which=20 > >> provide services for other companies) may have special arrangements = > >> with SPs, the majority (small to mid-size) will probably rely on=20 > >> the SPs to do provide to vouch for their identity. This would=20 > >> probably be the case for the home analog caller anyway. This would=20 > >> imply that the "originating" SP's willingness to provide this=20 > >> signature is a critical success factor for the proposal's adoption. > >> > >> > >> But back to the business process outsourcers (BPO) case - where a=20 > >> call center is providing service on behalf of multiple companies. I = > >> can see the value of them sending different numbers based on the=20 > >> clients they represent. Wouldn't that create a billing issue = though? > >> This is not an area I understand well, but I would suspect that SP=20 > >> 1 allowing one of its subscribers to send an outbound call using a=20 > >> number registered to SP 2 could be a no-no. If this hypothesis is=20 > >> correct, then we are back to the case where the SP is signing all=20 > >> calls, > even for BPOs. > >> > >> Or maybe this is another problem we are trying to fix in the=20 > >> working group, in which case we perhaps should state as a goal or benefit: > >> "providing a reliable mechanism to let calls originated from one=20 > >> SP1 to outpulse numbers that belong to another". > >> > >> Fernando > >> > >> > >> > >> > >> > >> > >> On 9/16/13 12:12 PM, "Hadriel Kaplan" > wrote: > >> > >>> > >>> Any of them could do it. My guess is service providers will do it = > >>>for most call centers, although larger call centers might do it=20 > >>>themselves... > >>> especially ones which have trunks from multiple providers and can=20 > >>>source calls using the same number(s) out through multiple=20 > >>>providers on a call-by-call basis. > >>> > >>> -hadriel > >>> > >>> > >>> On Sep 16, 2013, at 9:49 AM, Fernando Mousinho (fmousinh)=20 > >>> wrote: > >>> > >>>> I'm catching up with the discussions in this working group, and=20 > >>>> am trying to understand some architecture implications in call=20 > >>>> centers (which is where my background is). It seems that many of=20 > >>>> the problems we are trying to fix are related to contact centers=20 > >>>> anyway, so it is probably a good idea to have everyone in the=20 > >>>> same > page. > >>>> > >>>> Forgive me if it is an obvious question, but which components in=20 > >>>> a "typical call center architecture" do you see signature and=20 > >>>> verification taking place? Such "typical" deployments have=20 > >>>> premises based equipment (PME), a session border controller (SBC) = > >>>> and of course a SIP service provider all three could potentially = > >>>> be used throughout the authorization process. There are different = > >>>> ramifications depending on where your mind is at. > >>>> > >>>> Fernando Mousinho > >>>> Cisco Systems > >>> > >> > >> _______________________________________________ > >> stir mailing list > >> stir@ietf.org > >> https://www.ietf.org/mailman/listinfo/stir > > > >_______________________________________________ > >stir mailing list > >stir@ietf.org > >https://www.ietf.org/mailman/listinfo/stir > > > > > >________________________________ > > > >This e-mail may contain Sprint proprietary information intended for=20 > >the sole use of the recipient(s). Any use by others is prohibited. If = > >you are not the intended recipient, please contact the sender and=20 > >delete all copies of the message. > > > >_______________________________________________ > >stir mailing list > >stir@ietf.org > >https://www.ietf.org/mailman/listinfo/stir >=20 > _______________________________________________ > stir mailing list > stir@ietf.org > https://www.ietf.org/mailman/listinfo/stir > _______________________________________________ > stir mailing list > stir@ietf.org > https://www.ietf.org/mailman/listinfo/stir _______________________________________________ stir mailing list stir@ietf.org https://www.ietf.org/mailman/listinfo/stir From br@brianrosen.net Thu Sep 19 17:32:37 2013 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AA79821F88DD for ; Thu, 19 Sep 2013 17:32:37 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -103.506 X-Spam-Level: X-Spam-Status: No, score=-103.506 tagged_above=-999 required=5 tests=[AWL=0.093, BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SQ1yAdHpLt4a for ; Thu, 19 Sep 2013 17:32:32 -0700 (PDT) Received: from mail-vc0-f171.google.com (mail-vc0-f171.google.com [209.85.220.171]) by ietfa.amsl.com (Postfix) with ESMTP id B0E4121F87BB for ; Thu, 19 Sep 2013 17:32:32 -0700 (PDT) Received: by mail-vc0-f171.google.com with SMTP id ij15so6955624vcb.2 for ; Thu, 19 Sep 2013 17:32:32 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:content-type:mime-version:subject:from :in-reply-to:date:cc:content-transfer-encoding:message-id:references :to; bh=chDYN6LfQhQJM6sgPGaqLnzISjECTK4z9p4j+YDh46M=; b=aIXfuRdlq4+arrIYTnDtoWLgz3LHhgdjJXRFt3RQPwI0ASu9NvEk92phj/EbiRc01J Ou2AHvp2d0ZZI6aI53sxo/a/oKQp66Vo2dRX5zW899MDGftIGFDBm6LUT1GvywWyqCIN DzBNVQUFCo8tBETioFf3SdjX0FsTb02B7WtvowgS8swAwPXuWKKlAhEETN60ZcVPWbbc /oIcxaoiQ0TwJeWTI1itCwTLwHuEaxG4+A9NfemERkzzg8OABS0XSXeoky6BUq+T/A+X AdYcj+Tj8b4ENVcZNahKNZJvJ/wcjz8arRr1hYOmE6nrfuK49AnRWHmjPmcdyseBCCzQ 4/dw== X-Gm-Message-State: ALoCoQn/asegZ2HUcAg/tGlrEl4r4MoS+dhgJeDvcJ+lSWSAGhgk1jAltZMPkkggfWTyNCTpi+Qv X-Received: by 10.58.208.130 with SMTP id me2mr3530172vec.13.1379637152212; Thu, 19 Sep 2013 17:32:32 -0700 (PDT) Received: from [10.33.193.37] (neustargw.va.neustar.com. [209.173.53.233]) by mx.google.com with ESMTPSA id gr8sm10006436vdc.10.1969.12.31.16.00.00 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Thu, 19 Sep 2013 17:32:31 -0700 (PDT) Content-Type: text/plain; charset=windows-1252 Mime-Version: 1.0 (Mac OS X Mail 6.5 \(1508\)) From: Brian Rosen In-Reply-To: <71E3420F5D11314D8D989D8B72D247E129FD51DA@xmb-aln-x06.cisco.com> Date: Thu, 19 Sep 2013 20:32:29 -0400 Content-Transfer-Encoding: quoted-printable Message-Id: References: <71E3420F5D11314D8D989D8B72D247E129FD51DA@xmb-aln-x06.cisco.com> To: Fernando Mousinho (fmousinh) X-Mailer: Apple Mail (2.1508) Cc: "stir@ietf.org" , "Schumacher, Gregory \[CTO\]" Subject: Re: [stir] Call Center Implications X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 20 Sep 2013 00:32:37 -0000 Another point to make is that when the client authorizes the BPO to call = on it's behalf, the credential assigned to the BPO will have the = "provenance" of the authorization. Think of this as a chain of = delegations rooted in the national number authority. When the BPO sends = a call with that number as CallerId, and signs it, we know how it got = permission to use the number =3D some SP delegated it to the client, and = the client delegated use of it to the BPO. The credential authority (CA = or whatever) knows the chain and can tell authorities how it came to be = that the BPO was able to place a verifiable call using that number. If an SP signs the call, it presumably needs to receive something that = informs it of the authorization. There are many ways this could happen. = One of them is that the client could request that the credential = authority inform the SP of the authorization.=20 Brian On Sep 19, 2013, at 3:59 PM, Fernando Mousinho (fmousinh) = wrote: > I believe the scenario telemarketing here is when a client hires a BPO = to > place outbound calls, but expect customers to return these calls to a > different place (say, their own and operated call center). This way, = this > client is authorizing the BPO to use an identity that it (BPO) doesn't > own. These numbers in this scenario are always operational, just at a > different place. >=20 > The same telemarketing operator would then outpulse multiple numbers = for > their multiple clients, none of these numbers belonging to the > telemarketer. BTW, we are using the term "telemarketing" in a very = generic > sense - this could just as easily be a public service announcement, > fundraiser, etc. >=20 > If the telemarketer happens to own the inbound call center as well, it > very likely owns the number as well and this would necessarily be a > special case - it would fall under the same characteristics of any = call > center. >=20 > On a different note, it would help a lot of we standardized = terminology. > Telemarketing, BPO, call center, end customer, clients=8A it may be = hard for > others to follow the discussion later. >=20 >=20 >=20 > (generic term for any type of outbound calling, including public = service > announcement, so don't think it's all about sales!) >=20 >=20 > On 9/19/13 3:22 PM, "Schumacher, Gregory [CTO]" > wrote: >=20 >> There are some benefits from this approach, but also some scenarios = that >> need clarification how they could function. >>=20 >> The benefit is that the credential represents both the company >> "responsible" for the sales campaign (the "company" in your scenario) = and >> the company operating the sales campaign (the call center in your >> scenario). For the use in forensics (after the fact analysis) such = as >> pursuit of fraud investigation, we then can follow both paths. >>=20 >> However can you clarify the following - >> - If a SP "signs" the call, is it attesting to the "responsible" = party >> for the telemarketing call or the party executing the telemarketing >> campaign or both? >>=20 >> - How is the SP supposed to know all the parties that it is attesting = to >> - the responsible party and/or executing party? >>=20 >> -It seems likely that some of the numbers assigned to a company in = your >> scenario will not be assigned to real telephones (or call center = trunk) >> until a telemarketing campaign is initiated or a call center selected = to >> execute the sales campaign, is it possible to have these unassigned = or >> floating numbers when not in use for a telemarketing campaign? Is it >> allowed under most national numbering regimes? >>=20 >> - How important is it to have a known or recognized phone number as = the >> caller id as part of a telemarketing campaign? I am assuming that = not >> all campaigns care about having a number that is known or recognized. >>=20 >> -In other words for this last bit, if a call center (telemarketing >> campaign operator) is using their own set of numbers but serve = multiple >> simultaneous telemarketing campaigns using the same originating = numbers, >> what will they sign? Will they just have a credential representing = the >> call center alone, or a different credential per telemarketing = campaign, >> or a different credential per responsible party (per client)? This = will >> affect what is possible for any forensic activity. >>=20 >> -----Original Message----- >> From: stir-bounces@ietf.org [mailto:stir-bounces@ietf.org] On Behalf = Of >> Brian Rosen >> Sent: Tuesday, September 17, 2013 9:44 AM >> To: Fernando Mousinho >> Cc: stir@ietf.org; Hadriel Kaplan >> Subject: Re: [stir] Call Center Implications >>=20 >> We have a requirement to support the BPO use case. >>=20 >> The notion we had is that the company contracting the call center >> approves the use, and the call center, or the SP acting on its = behalf, >> signs. >> Think of this as another level of delegation. An SP delegates = numbers to >> the company. The company "delegates" use of those numbers to the = call >> center. The call center calls, using that delegation. The = credentials >> of the call center would be different from those of the company, but >> would cover the same number. Having multiple credentials covering = the >> same number will be very common due to the way delegation happens. = In >> order to allow SPs to sign, without creating credential per TN, we = allow >> credentials with ranges. The ranges could overlap when delegation >> happens. >>=20 >> Consider the following complex US case: >> The North American Number Plan Administrator delegates 202-555-xxxx = to >> the Pooling Administrator. The PA now has a credential covering the >> entire 10K block. >> The Pooling Administrator delegates 202-555-1xxx to SP A. SP A has a >> credential for the entire 1K block SP A resells 202-555-12xx to SP B = . >> SP B has a credential for a 100 TN block SP B delegates 202-555-123x = to >> Company C. Company C has a credential for a 10 number block Company = C >> authorizes 202-555-1234 to BPO D. BPO D has credential for a 1 = number >> block >>=20 >> NANPA and the PA never are in a call path, so they would never sign a >> call. >>=20 >> However, SP A or SP B could sign a call from either Company C or BPO = D >> using the credential they have. >>=20 >> The SP for the call center could acquire credentials from the BPO and >> sign on its behalf. I suspect than many service providers would be >> reluctant to do so unless the numbers were from their own inventory = (that >> is, the company got its numbers from the same SP as the call center). >> Since that won't be the common case, the call center probably has to = do >> the signing itself. >>=20 >> Brian >>=20 >> On Sep 17, 2013, at 8:46 AM, Fernando Mousinho (fmousinh) >> wrote: >>=20 >>> I agree, Hadriel. While large call centers (including BPOs, which >>> provide services for other companies) may have special arrangements >>> with SPs, the majority (small to mid-size) will probably rely on the >>> SPs to do provide to vouch for their identity. This would probably = be >>> the case for the home analog caller anyway. This would imply that = the >>> "originating" SP's willingness to provide this signature is a = critical >>> success factor for the proposal's adoption. >>>=20 >>>=20 >>> But back to the business process outsourcers (BPO) case - where a = call >>> center is providing service on behalf of multiple companies. I can = see >>> the value of them sending different numbers based on the clients = they >>> represent. Wouldn't that create a billing issue though? This is not = an >>> area I understand well, but I would suspect that SP 1 allowing one = of >>> its subscribers to send an outbound call using a number registered = to >>> SP 2 could be a no-no. If this hypothesis is correct, then we are = back >>> to the case where the SP is signing all calls, even for BPOs. >>>=20 >>> Or maybe this is another problem we are trying to fix in the working >>> group, in which case we perhaps should state as a goal or benefit: >>> "providing a reliable mechanism to let calls originated from one SP1 >>> to outpulse numbers that belong to another". >>>=20 >>> Fernando >>>=20 >>>=20 >>>=20 >>>=20 >>>=20 >>>=20 >>> On 9/16/13 12:12 PM, "Hadriel Kaplan" = wrote: >>>=20 >>>>=20 >>>> Any of them could do it. My guess is service providers will do it >>>> for most call centers, although larger call centers might do it >>>> themselves... >>>> especially ones which have trunks from multiple providers and can >>>> source calls using the same number(s) out through multiple = providers >>>> on a call-by-call basis. >>>>=20 >>>> -hadriel >>>>=20 >>>>=20 >>>> On Sep 16, 2013, at 9:49 AM, Fernando Mousinho (fmousinh) >>>> wrote: >>>>=20 >>>>> I'm catching up with the discussions in this working group, and am >>>>> trying to understand some architecture implications in call = centers >>>>> (which is where my background is). It seems that many of the >>>>> problems we are trying to fix are related to contact centers = anyway, >>>>> so it is probably a good idea to have everyone in the same page. >>>>>=20 >>>>> Forgive me if it is an obvious question, but which components in a >>>>> "typical call center architecture" do you see signature and >>>>> verification taking place? Such "typical" deployments have = premises >>>>> based equipment (PME), a session border controller (SBC) and of >>>>> course a SIP service provider all three could potentially be used >>>>> throughout the authorization process. There are different >>>>> ramifications depending on where your mind is at. >>>>>=20 >>>>> Fernando Mousinho >>>>> Cisco Systems >>>>=20 >>>=20 >>> _______________________________________________ >>> stir mailing list >>> stir@ietf.org >>> https://www.ietf.org/mailman/listinfo/stir >>=20 >> _______________________________________________ >> stir mailing list >> stir@ietf.org >> https://www.ietf.org/mailman/listinfo/stir >>=20 >>=20 >> ________________________________ >>=20 >> This e-mail may contain Sprint proprietary information intended for = the >> sole use of the recipient(s). Any use by others is prohibited. If you = are >> not the intended recipient, please contact the sender and delete all >> copies of the message. >>=20 >> _______________________________________________ >> stir mailing list >> stir@ietf.org >> https://www.ietf.org/mailman/listinfo/stir >=20 From fmousinh@cisco.com Thu Sep 19 18:14:45 2013 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 361FB21F85C3 for ; Thu, 19 Sep 2013 18:14:45 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.599 X-Spam-Level: X-Spam-Status: No, score=-10.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hvbaWMPRLMlF for ; Thu, 19 Sep 2013 18:14:40 -0700 (PDT) Received: from rcdn-iport-1.cisco.com (rcdn-iport-1.cisco.com [173.37.86.72]) by ietfa.amsl.com (Postfix) with ESMTP id 162E921F85B8 for ; Thu, 19 Sep 2013 18:14:40 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=13651; q=dns/txt; s=iport; t=1379639680; x=1380849280; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-transfer-encoding:mime-version; bh=J2GMPN0IJI0mxmbuCeanuPO340eSDXivfy5x8WI20mQ=; b=RoqEvcAC1q/dYO/ycCPm/J3Oa32+88OGCFvz7klBJOjyTEoSgJ9gBMQP vpjyZCFQqOo9iwPqgdUwxEjFyBpeDbCkxF4n9RGjHnJOsr7xSlW5ZxECc WxJ4jNiGferBj9MYIwusvxVukObvidd7g2AWZrzqN6W9v5Q06eEW1OZgm A=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AiMFAPKgO1KtJXHB/2dsb2JhbABRAQYDgwc4wgGBIBZ0giUBAQEDAQEBAVYVCwUHBAIBCBEBAwEBAScHJwsUAwYIAgQOBRuHYgYMuj0EjiQBAwYFgQEIGxAHAgQLgw2BAAOUH4NdkXWDJIFoAgcX X-IronPort-AV: E=Sophos;i="4.90,940,1371081600"; d="scan'208";a="261969468" Received: from rcdn-core2-6.cisco.com ([173.37.113.193]) by rcdn-iport-1.cisco.com with ESMTP; 20 Sep 2013 01:14:37 +0000 Received: from xhc-aln-x11.cisco.com (xhc-aln-x11.cisco.com [173.36.12.85]) by rcdn-core2-6.cisco.com (8.14.5/8.14.5) with ESMTP id r8K1EbvS015075 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Fri, 20 Sep 2013 01:14:37 GMT Received: from xmb-aln-x06.cisco.com ([169.254.1.176]) by xhc-aln-x11.cisco.com ([173.36.12.85]) with mapi id 14.02.0318.004; Thu, 19 Sep 2013 20:14:36 -0500 From: "Fernando Mousinho (fmousinh)" To: Richard Shockey Thread-Topic: [stir] Call Center Implications Thread-Index: AQHOs6wM4w3gYleEHUa5h7lxd4Kh+JnNbOEggAAiDICAAEzNAIAADeUAgAAA5QCAAANyAP//6DzS Date: Fri, 20 Sep 2013 01:14:36 +0000 Message-ID: <7F8A33DA-0E47-4F25-BEFE-B8EB66A04096@cisco.com> References: <546DB8432567684FA41E336EF1D312B84A16487C@PLSWM14A.ad.sprint.com> <71E3420F5D11314D8D989D8B72D247E129FD51DA@xmb-aln-x06.cisco.com>, <00C069FD01E0324C9FFCADF539701DB3BBEDBA62@sc9-ex2k10mb1.corp.yaanatech.com> <4B1956260CD29F4A9622F00322FE05319381A90798@BOBO1A.bobotek.net>, <01cc01ceb580$bf8b6cb0$3ea24610$@shockey.us> In-Reply-To: <01cc01ceb580$bf8b6cb0$3ea24610$@shockey.us> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Cc: "Gregory.Schumacher@sprint.com" , "stir@ietf.org" , "br@brianrosen.net" , Alex Bobotek , Michael Hammer , Henning Schulzrinne Subject: Re: [stir] Call Center Implications X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 20 Sep 2013 01:14:45 -0000 Could a signed PAI be a potential solution to the BPO use case? "From" iden= tifies the BPO, "PAI" the company hiring the BPO - based on the delegation = process Rosen mentions. PAI's use is widespread, and it's main limitation i= s being spoofable - but this is exactly the problem we are trying to solve = anyway.=20 > On Sep 19, 2013, at 5:39 PM, "Richard Shockey" wrote= : >=20 > Excellent point a profile or BCP to complement the work. >=20 > -----Original Message----- > From: stir-bounces@ietf.org [mailto:stir-bounces@ietf.org] On Behalf Of A= lex > Bobotek > Sent: Thursday, September 19, 2013 5:27 PM > To: Henning Schulzrinne; Michael Hammer; fmousinh@cisco.com; > Gregory.Schumacher@sprint.com; br@brianrosen.net > Cc: stir@ietf.org > Subject: Re: [stir] Call Center Implications >=20 > +1 > I've assumed that we are headed towards a "sign whatever extras you wish, > and indicate what your signature covers" mechanism. =20 >=20 > Based on this, standards would need to identify only a minimal subset of > what shall/should be signed, and ensure that any required group of signed > items survives transit intact. =20 >=20 > Best signing practices may be needed to complement the standard, and an > appropriate place for all but the most basic 'what to sign' recommendatio= ns. >=20 >=20 >=20 > Regards, >=20 > Alex >=20 >> -----Original Message----- >> From: stir-bounces@ietf.org [mailto:stir-bounces@ietf.org] On Behalf=20 >> Of Henning Schulzrinne >> Sent: Thursday, September 19, 2013 2:24 PM >> To: Michael Hammer; fmousinh@cisco.com; Gregory.Schumacher@sprint.com; >> br@brianrosen.net >> Cc: stir@ietf.org >> Subject: Re: [stir] Call Center Implications >>=20 >> I see no reason not to allow signing any number-related field in the=20 >> SIP request. (Signing may well be done by different parties.) >>=20 >> As far as I know, callback numbers (SIP Reply-To) aren't conveyable in=20 >> legacy systems, however, so this may be of somewhat limited use for a > while. >>=20 >> ________________________________________ >> From: stir-bounces@ietf.org [stir-bounces@ietf.org] on behalf of=20 >> Michael Hammer [michael.hammer@yaanatech.com] >> Sent: Thursday, September 19, 2013 4:34 PM >> To: fmousinh@cisco.com; Gregory.Schumacher@sprint.com; >> br@brianrosen.net >> Cc: stir@ietf.org >> Subject: Re: [stir] Call Center Implications >>=20 >> Don't we still want to know the true originator of the call, even when=20 >> we have some token that says "Doctor so and so approved this message." >>=20 >> Originating number, display number, and call-back number could be 3=20 >> different things. >> Should all of them be verifiable? >>=20 >> Mike >>=20 >>=20 >> -----Original Message----- >> From: stir-bounces@ietf.org [mailto:stir-bounces@ietf.org] On Behalf=20 >> Of Fernando Mousinho (fmousinh) >> Sent: Thursday, September 19, 2013 4:00 PM >> To: Schumacher, Gregory [CTO]; Brian Rosen >> Cc: stir@ietf.org >> Subject: Re: [stir] Call Center Implications >>=20 >> I believe the scenario telemarketing here is when a client hires a BPO=20 >> to place outbound calls, but expect customers to return these calls to=20 >> a different place (say, their own and operated call center). This way,=20 >> this client is authorizing the BPO to use an identity that it (BPO) > doesn't own. >> These numbers in this scenario are always operational, just at a=20 >> different place. >>=20 >> The same telemarketing operator would then outpulse multiple numbers=20 >> for their multiple clients, none of these numbers belonging to the > telemarketer. >> BTW, we are using the term "telemarketing" in a very generic sense -=20 >> this could just as easily be a public service announcement, fundraiser, > etc. >>=20 >> If the telemarketer happens to own the inbound call center as well, it=20 >> very likely owns the number as well and this would necessarily be a=20 >> special case >> - it would fall under the same characteristics of any call center. >>=20 >> On a different note, it would help a lot of we standardized terminology. >> Telemarketing, BPO, call center, end customer, clients=8A it may be hard= =20 >> for others to follow the discussion later. >>=20 >>=20 >>=20 >> (generic term for any type of outbound calling, including public=20 >> service announcement, so don't think it's all about sales!) >>=20 >>=20 >> On 9/19/13 3:22 PM, "Schumacher, Gregory [CTO]" >> wrote: >>=20 >>> There are some benefits from this approach, but also some scenarios=20 >>> that need clarification how they could function. >>>=20 >>> The benefit is that the credential represents both the company=20 >>> "responsible" for the sales campaign (the "company" in your scenario)=20 >>> and the company operating the sales campaign (the call center in your=20 >>> scenario). For the use in forensics (after the fact analysis) such=20 >>> as pursuit of fraud investigation, we then can follow both paths. >>>=20 >>> However can you clarify the following - >>> - If a SP "signs" the call, is it attesting to the "responsible"=20 >>> party for the telemarketing call or the party executing the=20 >>> telemarketing campaign or both? >>>=20 >>> - How is the SP supposed to know all the parties that it is attesting=20 >>> to >>> - the responsible party and/or executing party? >>>=20 >>> -It seems likely that some of the numbers assigned to a company in=20 >>> your scenario will not be assigned to real telephones (or call center=20 >>> trunk) until a telemarketing campaign is initiated or a call center=20 >>> selected to execute the sales campaign, is it possible to have these=20 >>> unassigned or floating numbers when not in use for a telemarketing=20 >>> campaign? Is it allowed under most national numbering regimes? >>>=20 >>> - How important is it to have a known or recognized phone number as=20 >>> the caller id as part of a telemarketing campaign? I am assuming=20 >>> that not all campaigns care about having a number that is known or > recognized. >>>=20 >>> -In other words for this last bit, if a call center (telemarketing=20 >>> campaign operator) is using their own set of numbers but serve=20 >>> multiple simultaneous telemarketing campaigns using the same=20 >>> originating numbers, what will they sign? Will they just have a=20 >>> credential representing the call center alone, or a different=20 >>> credential per telemarketing campaign, or a different credential per=20 >>> responsible party (per client)? This will affect what is possible for > any forensic activity. >>>=20 >>> -----Original Message----- >>> From: stir-bounces@ietf.org [mailto:stir-bounces@ietf.org] On Behalf=20 >>> Of Brian Rosen >>> Sent: Tuesday, September 17, 2013 9:44 AM >>> To: Fernando Mousinho >>> Cc: stir@ietf.org; Hadriel Kaplan >>> Subject: Re: [stir] Call Center Implications >>>=20 >>> We have a requirement to support the BPO use case. >>>=20 >>> The notion we had is that the company contracting the call center=20 >>> approves the use, and the call center, or the SP acting on its=20 >>> behalf, signs. >>> Think of this as another level of delegation. An SP delegates=20 >>> numbers to the company. The company "delegates" use of those numbers=20 >>> to the call center. The call center calls, using that delegation. =20 >>> The credentials of the call center would be different from those of=20 >>> the company, but would cover the same number. Having multiple=20 >>> credentials covering the same number will be very common due to the=20 >>> way delegation happens. In order to allow SPs to sign, without=20 >>> creating credential per TN, we allow credentials with ranges. The=20 >>> ranges could overlap when delegation happens. >>>=20 >>> Consider the following complex US case: >>> The North American Number Plan Administrator delegates 202-555-xxxx=20 >>> to the Pooling Administrator. The PA now has a credential covering=20 >>> the entire 10K block. >>> The Pooling Administrator delegates 202-555-1xxx to SP A. SP A has a=20 >>> credential for the entire 1K block SP A resells 202-555-12xx to SP B . >>> SP B has a credential for a 100 TN block SP B delegates 202-555-123x=20 >>> to Company C. Company C has a credential for a 10 number block=20 >>> Company C authorizes 202-555-1234 to BPO D. BPO D has credential for=20 >>> a 1 number block >>>=20 >>> NANPA and the PA never are in a call path, so they would never sign a=20 >>> call. >>>=20 >>> However, SP A or SP B could sign a call from either Company C or BPO=20 >>> D using the credential they have. >>>=20 >>> The SP for the call center could acquire credentials from the BPO and=20 >>> sign on its behalf. I suspect than many service providers would be=20 >>> reluctant to do so unless the numbers were from their own inventory=20 >>> (that is, the company got its numbers from the same SP as the call > center). >>> Since that won't be the common case, the call center probably has to=20 >>> do the signing itself. >>>=20 >>> Brian >>>=20 >>> On Sep 17, 2013, at 8:46 AM, Fernando Mousinho (fmousinh)=20 >>> wrote: >>>=20 >>>> I agree, Hadriel. While large call centers (including BPOs, which=20 >>>> provide services for other companies) may have special arrangements=20 >>>> with SPs, the majority (small to mid-size) will probably rely on=20 >>>> the SPs to do provide to vouch for their identity. This would=20 >>>> probably be the case for the home analog caller anyway. This would=20 >>>> imply that the "originating" SP's willingness to provide this=20 >>>> signature is a critical success factor for the proposal's adoption. >>>>=20 >>>>=20 >>>> But back to the business process outsourcers (BPO) case - where a=20 >>>> call center is providing service on behalf of multiple companies. I=20 >>>> can see the value of them sending different numbers based on the=20 >>>> clients they represent. Wouldn't that create a billing issue though? >>>> This is not an area I understand well, but I would suspect that SP=20 >>>> 1 allowing one of its subscribers to send an outbound call using a=20 >>>> number registered to SP 2 could be a no-no. If this hypothesis is=20 >>>> correct, then we are back to the case where the SP is signing all=20 >>>> calls, >> even for BPOs. >>>>=20 >>>> Or maybe this is another problem we are trying to fix in the=20 >>>> working group, in which case we perhaps should state as a goal or > benefit: >>>> "providing a reliable mechanism to let calls originated from one=20 >>>> SP1 to outpulse numbers that belong to another". >>>>=20 >>>> Fernando >>>>=20 >>>>=20 >>>>=20 >>>>=20 >>>>=20 >>>>=20 >>>> On 9/16/13 12:12 PM, "Hadriel Kaplan" >> wrote: >>>>=20 >>>>>=20 >>>>> Any of them could do it. My guess is service providers will do it=20 >>>>> for most call centers, although larger call centers might do it=20 >>>>> themselves... >>>>> especially ones which have trunks from multiple providers and can=20 >>>>> source calls using the same number(s) out through multiple=20 >>>>> providers on a call-by-call basis. >>>>>=20 >>>>> -hadriel >>>>>=20 >>>>>=20 >>>>> On Sep 16, 2013, at 9:49 AM, Fernando Mousinho (fmousinh)=20 >>>>> wrote: >>>>>=20 >>>>>> I'm catching up with the discussions in this working group, and=20 >>>>>> am trying to understand some architecture implications in call=20 >>>>>> centers (which is where my background is). It seems that many of=20 >>>>>> the problems we are trying to fix are related to contact centers=20 >>>>>> anyway, so it is probably a good idea to have everyone in the=20 >>>>>> same >> page. >>>>>>=20 >>>>>> Forgive me if it is an obvious question, but which components in=20 >>>>>> a "typical call center architecture" do you see signature and=20 >>>>>> verification taking place? Such "typical" deployments have=20 >>>>>> premises based equipment (PME), a session border controller (SBC)=20 >>>>>> and of course a SIP service provider all three could potentially=20 >>>>>> be used throughout the authorization process. There are different=20 >>>>>> ramifications depending on where your mind is at. >>>>>>=20 >>>>>> Fernando Mousinho >>>>>> Cisco Systems >>>>=20 >>>> _______________________________________________ >>>> stir mailing list >>>> stir@ietf.org >>>> https://www.ietf.org/mailman/listinfo/stir >>>=20 >>> _______________________________________________ >>> stir mailing list >>> stir@ietf.org >>> https://www.ietf.org/mailman/listinfo/stir >>>=20 >>>=20 >>> ________________________________ >>>=20 >>> This e-mail may contain Sprint proprietary information intended for=20 >>> the sole use of the recipient(s). Any use by others is prohibited. If=20 >>> you are not the intended recipient, please contact the sender and=20 >>> delete all copies of the message. >>>=20 >>> _______________________________________________ >>> stir mailing list >>> stir@ietf.org >>> https://www.ietf.org/mailman/listinfo/stir >>=20 >> _______________________________________________ >> stir mailing list >> stir@ietf.org >> https://www.ietf.org/mailman/listinfo/stir >> _______________________________________________ >> stir mailing list >> stir@ietf.org >> https://www.ietf.org/mailman/listinfo/stir > _______________________________________________ > stir mailing list > stir@ietf.org > https://www.ietf.org/mailman/listinfo/stir >=20 From br@brianrosen.net Thu Sep 19 18:43:44 2013 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4497421F84EF for ; Thu, 19 Sep 2013 18:43:44 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -103.516 X-Spam-Level: X-Spam-Status: No, score=-103.516 tagged_above=-999 required=5 tests=[AWL=0.083, BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YF0sHm7Gupa7 for ; Thu, 19 Sep 2013 18:43:39 -0700 (PDT) Received: from mail-yh0-f41.google.com (mail-yh0-f41.google.com [209.85.213.41]) by ietfa.amsl.com (Postfix) with ESMTP id 4051A21F83EF for ; Thu, 19 Sep 2013 18:43:39 -0700 (PDT) Received: by mail-yh0-f41.google.com with SMTP id f73so4624150yha.14 for ; Thu, 19 Sep 2013 18:43:38 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:content-type:mime-version:subject:from :in-reply-to:date:cc:content-transfer-encoding:message-id:references :to; bh=TjJOqgogtNW+ZBGBSqXnmu1dX3AzcaagoZvHdoqRUpE=; b=Nl/VmLMBh9liENGDK836njiYHxHOjzJW6qKbEFIRh3+XwO619b8tvOMige5zoYkFJJ vBhfR0Tfq10G1DbuzFJRhrJy4uoxaOmwqkQFmdvox7saWH61aGBc8qpalzXfb1uRmx0+ 7zXoEsxRd6UEYHR2OpOgFayCsoIYgfjExd/xkDeTS+BRfCs1x+IO/RwQNjBw7YMpUsXz M4AF62gY8Ke3VJi9i0T8mvYs/V5UNI4M3OEpg4CyDqbBee0qSCOaXlCvOC0P36JVsA5/ vBYvcOZJeWsYeXDkRF/WNOjROmbeAIOBEh8r8kRJhjom55pPcDb/0SPK4pp36Vd5NXXX Wr4w== X-Gm-Message-State: ALoCoQnXK61XxqHI0xgdjQqDV5NaknG2i8ssxMt+9ZaRcnLyPNnLLwYRMvAPEAIBmHZwms8/cDdg X-Received: by 10.236.114.105 with SMTP id b69mr283322yhh.75.1379641418706; Thu, 19 Sep 2013 18:43:38 -0700 (PDT) Received: from [10.33.193.37] (neustargw.va.neustar.com. [209.173.53.233]) by mx.google.com with ESMTPSA id a21sm15221473yhc.23.1969.12.31.16.00.00 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Thu, 19 Sep 2013 18:43:38 -0700 (PDT) Content-Type: text/plain; charset=windows-1252 Mime-Version: 1.0 (Mac OS X Mail 6.5 \(1508\)) From: Brian Rosen In-Reply-To: <7F8A33DA-0E47-4F25-BEFE-B8EB66A04096@cisco.com> Date: Thu, 19 Sep 2013 21:43:35 -0400 Content-Transfer-Encoding: quoted-printable Message-Id: References: <546DB8432567684FA41E336EF1D312B84A16487C@PLSWM14A.ad.sprint.com> <71E3420F5D11314D8D989D8B72D247E129FD51DA@xmb-aln-x06.cisco.com>, <00C069FD01E0324C9FFCADF539701DB3BBEDBA62@sc9-ex2k10mb1.corp.yaanatech.com> <4B1956260CD29F4A9622F00322FE05319381A90798@BOBO1A.bobotek.net>, <01cc01ceb580$bf8b6cb0$3ea24610$@shockey.us> <7F8A33DA-0E47-4F25-BEFE-B8EB66A04096@cisco.com> To: Fernando Mousinho (fmousinh) X-Mailer: Apple Mail (2.1508) Cc: "Gregory.Schumacher@sprint.com" , Richard Shockey , "stir@ietf.org" , Alex Bobotek , Michael Hammer , Henning Schulzrinne Subject: Re: [stir] Call Center Implications X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 20 Sep 2013 01:43:44 -0000 Don't think that would work without related changes in the networks. In = some networks, PAI is used for called id. They would have to change to = use =46rom (if signed maybe). It also doesn't fit the definition of = PAI. Brian On Sep 19, 2013, at 9:14 PM, Fernando Mousinho (fmousinh) = wrote: > Could a signed PAI be a potential solution to the BPO use case? "From" = identifies the BPO, "PAI" the company hiring the BPO - based on the = delegation process Rosen mentions. PAI's use is widespread, and it's = main limitation is being spoofable - but this is exactly the problem we = are trying to solve anyway.=20 >=20 >=20 >> On Sep 19, 2013, at 5:39 PM, "Richard Shockey" = wrote: >>=20 >> Excellent point a profile or BCP to complement the work. >>=20 >> -----Original Message----- >> From: stir-bounces@ietf.org [mailto:stir-bounces@ietf.org] On Behalf = Of Alex >> Bobotek >> Sent: Thursday, September 19, 2013 5:27 PM >> To: Henning Schulzrinne; Michael Hammer; fmousinh@cisco.com; >> Gregory.Schumacher@sprint.com; br@brianrosen.net >> Cc: stir@ietf.org >> Subject: Re: [stir] Call Center Implications >>=20 >> +1 >> I've assumed that we are headed towards a "sign whatever extras you = wish, >> and indicate what your signature covers" mechanism. =20 >>=20 >> Based on this, standards would need to identify only a minimal subset = of >> what shall/should be signed, and ensure that any required group of = signed >> items survives transit intact. =20 >>=20 >> Best signing practices may be needed to complement the standard, and = an >> appropriate place for all but the most basic 'what to sign' = recommendations. >>=20 >>=20 >>=20 >> Regards, >>=20 >> Alex >>=20 >>> -----Original Message----- >>> From: stir-bounces@ietf.org [mailto:stir-bounces@ietf.org] On Behalf=20= >>> Of Henning Schulzrinne >>> Sent: Thursday, September 19, 2013 2:24 PM >>> To: Michael Hammer; fmousinh@cisco.com; = Gregory.Schumacher@sprint.com; >>> br@brianrosen.net >>> Cc: stir@ietf.org >>> Subject: Re: [stir] Call Center Implications >>>=20 >>> I see no reason not to allow signing any number-related field in the=20= >>> SIP request. (Signing may well be done by different parties.) >>>=20 >>> As far as I know, callback numbers (SIP Reply-To) aren't conveyable = in=20 >>> legacy systems, however, so this may be of somewhat limited use for = a >> while. >>>=20 >>> ________________________________________ >>> From: stir-bounces@ietf.org [stir-bounces@ietf.org] on behalf of=20 >>> Michael Hammer [michael.hammer@yaanatech.com] >>> Sent: Thursday, September 19, 2013 4:34 PM >>> To: fmousinh@cisco.com; Gregory.Schumacher@sprint.com; >>> br@brianrosen.net >>> Cc: stir@ietf.org >>> Subject: Re: [stir] Call Center Implications >>>=20 >>> Don't we still want to know the true originator of the call, even = when=20 >>> we have some token that says "Doctor so and so approved this = message." >>>=20 >>> Originating number, display number, and call-back number could be 3=20= >>> different things. >>> Should all of them be verifiable? >>>=20 >>> Mike >>>=20 >>>=20 >>> -----Original Message----- >>> From: stir-bounces@ietf.org [mailto:stir-bounces@ietf.org] On Behalf=20= >>> Of Fernando Mousinho (fmousinh) >>> Sent: Thursday, September 19, 2013 4:00 PM >>> To: Schumacher, Gregory [CTO]; Brian Rosen >>> Cc: stir@ietf.org >>> Subject: Re: [stir] Call Center Implications >>>=20 >>> I believe the scenario telemarketing here is when a client hires a = BPO=20 >>> to place outbound calls, but expect customers to return these calls = to=20 >>> a different place (say, their own and operated call center). This = way,=20 >>> this client is authorizing the BPO to use an identity that it (BPO) >> doesn't own. >>> These numbers in this scenario are always operational, just at a=20 >>> different place. >>>=20 >>> The same telemarketing operator would then outpulse multiple numbers=20= >>> for their multiple clients, none of these numbers belonging to the >> telemarketer. >>> BTW, we are using the term "telemarketing" in a very generic sense -=20= >>> this could just as easily be a public service announcement, = fundraiser, >> etc. >>>=20 >>> If the telemarketer happens to own the inbound call center as well, = it=20 >>> very likely owns the number as well and this would necessarily be a=20= >>> special case >>> - it would fall under the same characteristics of any call center. >>>=20 >>> On a different note, it would help a lot of we standardized = terminology. >>> Telemarketing, BPO, call center, end customer, clients=8A it may be = hard=20 >>> for others to follow the discussion later. >>>=20 >>>=20 >>>=20 >>> (generic term for any type of outbound calling, including public=20 >>> service announcement, so don't think it's all about sales!) >>>=20 >>>=20 >>> On 9/19/13 3:22 PM, "Schumacher, Gregory [CTO]" >>> wrote: >>>=20 >>>> There are some benefits from this approach, but also some scenarios=20= >>>> that need clarification how they could function. >>>>=20 >>>> The benefit is that the credential represents both the company=20 >>>> "responsible" for the sales campaign (the "company" in your = scenario)=20 >>>> and the company operating the sales campaign (the call center in = your=20 >>>> scenario). For the use in forensics (after the fact analysis) such=20= >>>> as pursuit of fraud investigation, we then can follow both paths. >>>>=20 >>>> However can you clarify the following - >>>> - If a SP "signs" the call, is it attesting to the "responsible"=20 >>>> party for the telemarketing call or the party executing the=20 >>>> telemarketing campaign or both? >>>>=20 >>>> - How is the SP supposed to know all the parties that it is = attesting=20 >>>> to >>>> - the responsible party and/or executing party? >>>>=20 >>>> -It seems likely that some of the numbers assigned to a company in=20= >>>> your scenario will not be assigned to real telephones (or call = center=20 >>>> trunk) until a telemarketing campaign is initiated or a call center=20= >>>> selected to execute the sales campaign, is it possible to have = these=20 >>>> unassigned or floating numbers when not in use for a telemarketing=20= >>>> campaign? Is it allowed under most national numbering regimes? >>>>=20 >>>> - How important is it to have a known or recognized phone number as=20= >>>> the caller id as part of a telemarketing campaign? I am assuming=20= >>>> that not all campaigns care about having a number that is known or >> recognized. >>>>=20 >>>> -In other words for this last bit, if a call center (telemarketing=20= >>>> campaign operator) is using their own set of numbers but serve=20 >>>> multiple simultaneous telemarketing campaigns using the same=20 >>>> originating numbers, what will they sign? Will they just have a=20 >>>> credential representing the call center alone, or a different=20 >>>> credential per telemarketing campaign, or a different credential = per=20 >>>> responsible party (per client)? This will affect what is possible = for >> any forensic activity. >>>>=20 >>>> -----Original Message----- >>>> From: stir-bounces@ietf.org [mailto:stir-bounces@ietf.org] On = Behalf=20 >>>> Of Brian Rosen >>>> Sent: Tuesday, September 17, 2013 9:44 AM >>>> To: Fernando Mousinho >>>> Cc: stir@ietf.org; Hadriel Kaplan >>>> Subject: Re: [stir] Call Center Implications >>>>=20 >>>> We have a requirement to support the BPO use case. >>>>=20 >>>> The notion we had is that the company contracting the call center=20= >>>> approves the use, and the call center, or the SP acting on its=20 >>>> behalf, signs. >>>> Think of this as another level of delegation. An SP delegates=20 >>>> numbers to the company. The company "delegates" use of those = numbers=20 >>>> to the call center. The call center calls, using that delegation. =20= >>>> The credentials of the call center would be different from those of=20= >>>> the company, but would cover the same number. Having multiple=20 >>>> credentials covering the same number will be very common due to the=20= >>>> way delegation happens. In order to allow SPs to sign, without=20 >>>> creating credential per TN, we allow credentials with ranges. The=20= >>>> ranges could overlap when delegation happens. >>>>=20 >>>> Consider the following complex US case: >>>> The North American Number Plan Administrator delegates 202-555-xxxx=20= >>>> to the Pooling Administrator. The PA now has a credential covering=20= >>>> the entire 10K block. >>>> The Pooling Administrator delegates 202-555-1xxx to SP A. SP A has = a=20 >>>> credential for the entire 1K block SP A resells 202-555-12xx to SP = B . >>>> SP B has a credential for a 100 TN block SP B delegates = 202-555-123x=20 >>>> to Company C. Company C has a credential for a 10 number block=20 >>>> Company C authorizes 202-555-1234 to BPO D. BPO D has credential = for=20 >>>> a 1 number block >>>>=20 >>>> NANPA and the PA never are in a call path, so they would never sign = a=20 >>>> call. >>>>=20 >>>> However, SP A or SP B could sign a call from either Company C or = BPO=20 >>>> D using the credential they have. >>>>=20 >>>> The SP for the call center could acquire credentials from the BPO = and=20 >>>> sign on its behalf. I suspect than many service providers would be=20= >>>> reluctant to do so unless the numbers were from their own inventory=20= >>>> (that is, the company got its numbers from the same SP as the call >> center). >>>> Since that won't be the common case, the call center probably has = to=20 >>>> do the signing itself. >>>>=20 >>>> Brian >>>>=20 >>>> On Sep 17, 2013, at 8:46 AM, Fernando Mousinho (fmousinh)=20 >>>> wrote: >>>>=20 >>>>> I agree, Hadriel. While large call centers (including BPOs, which=20= >>>>> provide services for other companies) may have special = arrangements=20 >>>>> with SPs, the majority (small to mid-size) will probably rely on=20= >>>>> the SPs to do provide to vouch for their identity. This would=20 >>>>> probably be the case for the home analog caller anyway. This would=20= >>>>> imply that the "originating" SP's willingness to provide this=20 >>>>> signature is a critical success factor for the proposal's = adoption. >>>>>=20 >>>>>=20 >>>>> But back to the business process outsourcers (BPO) case - where a=20= >>>>> call center is providing service on behalf of multiple companies. = I=20 >>>>> can see the value of them sending different numbers based on the=20= >>>>> clients they represent. Wouldn't that create a billing issue = though? >>>>> This is not an area I understand well, but I would suspect that SP=20= >>>>> 1 allowing one of its subscribers to send an outbound call using a=20= >>>>> number registered to SP 2 could be a no-no. If this hypothesis is=20= >>>>> correct, then we are back to the case where the SP is signing all=20= >>>>> calls, >>> even for BPOs. >>>>>=20 >>>>> Or maybe this is another problem we are trying to fix in the=20 >>>>> working group, in which case we perhaps should state as a goal or >> benefit: >>>>> "providing a reliable mechanism to let calls originated from one=20= >>>>> SP1 to outpulse numbers that belong to another". >>>>>=20 >>>>> Fernando >>>>>=20 >>>>>=20 >>>>>=20 >>>>>=20 >>>>>=20 >>>>>=20 >>>>> On 9/16/13 12:12 PM, "Hadriel Kaplan" >>> wrote: >>>>>=20 >>>>>>=20 >>>>>> Any of them could do it. My guess is service providers will do = it=20 >>>>>> for most call centers, although larger call centers might do it=20= >>>>>> themselves... >>>>>> especially ones which have trunks from multiple providers and can=20= >>>>>> source calls using the same number(s) out through multiple=20 >>>>>> providers on a call-by-call basis. >>>>>>=20 >>>>>> -hadriel >>>>>>=20 >>>>>>=20 >>>>>> On Sep 16, 2013, at 9:49 AM, Fernando Mousinho (fmousinh)=20 >>>>>> wrote: >>>>>>=20 >>>>>>> I'm catching up with the discussions in this working group, and=20= >>>>>>> am trying to understand some architecture implications in call=20= >>>>>>> centers (which is where my background is). It seems that many of=20= >>>>>>> the problems we are trying to fix are related to contact centers=20= >>>>>>> anyway, so it is probably a good idea to have everyone in the=20 >>>>>>> same >>> page. >>>>>>>=20 >>>>>>> Forgive me if it is an obvious question, but which components in=20= >>>>>>> a "typical call center architecture" do you see signature and=20 >>>>>>> verification taking place? Such "typical" deployments have=20 >>>>>>> premises based equipment (PME), a session border controller = (SBC)=20 >>>>>>> and of course a SIP service provider all three could = potentially=20 >>>>>>> be used throughout the authorization process. There are = different=20 >>>>>>> ramifications depending on where your mind is at. >>>>>>>=20 >>>>>>> Fernando Mousinho >>>>>>> Cisco Systems >>>>>=20 >>>>> _______________________________________________ >>>>> stir mailing list >>>>> stir@ietf.org >>>>> https://www.ietf.org/mailman/listinfo/stir >>>>=20 >>>> _______________________________________________ >>>> stir mailing list >>>> stir@ietf.org >>>> https://www.ietf.org/mailman/listinfo/stir >>>>=20 >>>>=20 >>>> ________________________________ >>>>=20 >>>> This e-mail may contain Sprint proprietary information intended for=20= >>>> the sole use of the recipient(s). Any use by others is prohibited. = If=20 >>>> you are not the intended recipient, please contact the sender and=20= >>>> delete all copies of the message. >>>>=20 >>>> _______________________________________________ >>>> stir mailing list >>>> stir@ietf.org >>>> https://www.ietf.org/mailman/listinfo/stir >>>=20 >>> _______________________________________________ >>> stir mailing list >>> stir@ietf.org >>> https://www.ietf.org/mailman/listinfo/stir >>> _______________________________________________ >>> stir mailing list >>> stir@ietf.org >>> https://www.ietf.org/mailman/listinfo/stir >> _______________________________________________ >> stir mailing list >> stir@ietf.org >> https://www.ietf.org/mailman/listinfo/stir >>=20 From housley@vigilsec.com Fri Sep 20 14:23:40 2013 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6A3E821F9EA8 for ; Fri, 20 Sep 2013 14:23:40 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.932 X-Spam-Level: X-Spam-Status: No, score=-102.932 tagged_above=-999 required=5 tests=[AWL=-0.333, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Kj-8drJcw8Jf for ; Fri, 20 Sep 2013 14:23:34 -0700 (PDT) Received: from odin.smetech.net (mail.smetech.net [208.254.26.82]) by ietfa.amsl.com (Postfix) with ESMTP id 239FA21F9E8B for ; Fri, 20 Sep 2013 14:23:34 -0700 (PDT) Received: from localhost (unknown [208.254.26.81]) by odin.smetech.net (Postfix) with ESMTP id E1C2CF24183 for ; Fri, 20 Sep 2013 17:23:29 -0400 (EDT) X-Virus-Scanned: amavisd-new at smetech.net Received: from odin.smetech.net ([208.254.26.82]) by localhost (ronin.smetech.net [208.254.26.81]) (amavisd-new, port 10024) with ESMTP id Q2oHHpuXf35r for ; Fri, 20 Sep 2013 17:23:19 -0400 (EDT) Received: from [192.168.2.100] (pool-96-231-164-210.washdc.fios.verizon.net [96.231.164.210]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by odin.smetech.net (Postfix) with ESMTP id A018FF2417F for ; Fri, 20 Sep 2013 17:23:26 -0400 (EDT) From: Russ Housley Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Date: Fri, 20 Sep 2013 17:23:17 -0400 Message-Id: To: IETF STIR Mail List Mime-Version: 1.0 (Apple Message framework v1085) X-Mailer: Apple Mail (2.1085) Subject: [stir] draft-peterson-stir-threats-00.txt X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 20 Sep 2013 21:23:43 -0000 http://www.ietf.org/id/draft-peterson-stir-threats-00.txt Should the working group adopt this I-D as the starting point for the = STIR threat docuent? Russ From md3135@att.com Fri Sep 20 14:53:11 2013 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D75CB21F9E8D for ; Fri, 20 Sep 2013 14:53:11 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Kaxs36cKI3Je for ; Fri, 20 Sep 2013 14:53:06 -0700 (PDT) Received: from nbfkord-smmo06.seg.att.com (nbfkord-smmo06.seg.att.com [209.65.160.94]) by ietfa.amsl.com (Postfix) with ESMTP id 83FF121F9E89 for ; Fri, 20 Sep 2013 14:53:05 -0700 (PDT) Received: from unknown [144.160.229.24] (EHLO alpi155.enaf.aldc.att.com) by nbfkord-smmo06.seg.att.com(mxl_mta-6.15.0-1) over TLS secured channel with ESMTP id fb3cc325.0.4245577.00-300.11725619.nbfkord-smmo06.seg.att.com (envelope-from ); Fri, 20 Sep 2013 21:53:05 +0000 (UTC) X-MXL-Hash: 523cc3c17ed9e468-a9ecd2dbeed8e003137045cee5b80fa908efc791 Received: from enaf.aldc.att.com (localhost [127.0.0.1]) by alpi155.enaf.aldc.att.com (8.14.5/8.14.5) with ESMTP id r8KLr2G2023391; Fri, 20 Sep 2013 17:53:03 -0400 Received: from mlpi408.sfdc.sbc.com (mlpi408.sfdc.sbc.com [130.9.128.240]) by alpi155.enaf.aldc.att.com (8.14.5/8.14.5) with ESMTP id r8KLqp8I023147 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Fri, 20 Sep 2013 17:52:58 -0400 Received: from MISOUT7MSGHUB9A.ITServices.sbc.com (MISOUT7MSGHUB9A.itservices.sbc.com [144.151.223.62]) by mlpi408.sfdc.sbc.com (RSA Interceptor); Fri, 20 Sep 2013 21:52:30 GMT Received: from MISOUT7MSGUSR9I.ITServices.sbc.com ([144.151.223.56]) by MISOUT7MSGHUB9A.ITServices.sbc.com ([144.151.223.62]) with mapi id 14.03.0158.001; Fri, 20 Sep 2013 17:52:30 -0400 From: "DOLLY, MARTIN C" To: Russ Housley , IETF STIR Mail List Thread-Topic: [stir] draft-peterson-stir-threats-00.txt Thread-Index: AQHOtke31dsTQ8MnREuXCfAVx/IXrZnPKrNg Date: Fri, 20 Sep 2013 21:52:29 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [135.175.95.98] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-RSA-Inspected: yes X-RSA-Classifications: public X-Spam: [F=0.2000000000; CM=0.500; S=0.200(2010122901)] X-MAIL-FROM: X-SOURCE-IP: [144.160.229.24] X-AnalysisOut: [v=2.0 cv=WrCcx6jv c=1 sm=0 a=dhB6nF3YHL5t/Ixux6cINA==:17 a] X-AnalysisOut: [=ws2jd5xuPUQA:10 a=-VEDDkUluEEA:10 a=ofMgfj31e3cA:10 a=BLc] X-AnalysisOut: [eEmwcHowA:10 a=kj9zAlcOel0A:10 a=zQP7CpKOAAAA:8 a=XIqpo32R] X-AnalysisOut: [AAAA:8 a=OJxZ0vrzjz8A:10 a=48vgC7mUAAAA:8 a=tRBOJA0AEb4yAY] X-AnalysisOut: [cKB10A:9 a=CjuIK1q_8ugA:10 a=lZB815dzVvQA:10] Subject: Re: [stir] draft-peterson-stir-threats-00.txt X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 20 Sep 2013 21:53:12 -0000 Russ, Could we have one more week to review? Thank you, Martin -----Original Message----- From: stir-bounces@ietf.org [mailto:stir-bounces@ietf.org] On Behalf Of Rus= s Housley Sent: Friday, September 20, 2013 5:23 PM To: IETF STIR Mail List Subject: [stir] draft-peterson-stir-threats-00.txt http://www.ietf.org/id/draft-peterson-stir-threats-00.txt Should the working group adopt this I-D as the starting point for the STIR = threat docuent? Russ _______________________________________________ stir mailing list stir@ietf.org https://www.ietf.org/mailman/listinfo/stir From housley@vigilsec.com Fri Sep 20 15:01:37 2013 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DDB2E21F9E43 for ; Fri, 20 Sep 2013 15:01:37 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.799 X-Spam-Level: X-Spam-Status: No, score=-102.799 tagged_above=-999 required=5 tests=[AWL=-0.200, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 37m7l0DQQ62W for ; Fri, 20 Sep 2013 15:01:28 -0700 (PDT) Received: from odin.smetech.net (mail.smetech.net [208.254.26.82]) by ietfa.amsl.com (Postfix) with ESMTP id 4253321F9E52 for ; Fri, 20 Sep 2013 15:01:28 -0700 (PDT) Received: from localhost (unknown [208.254.26.81]) by odin.smetech.net (Postfix) with ESMTP id D6061F2417E; Fri, 20 Sep 2013 18:01:58 -0400 (EDT) X-Virus-Scanned: amavisd-new at smetech.net Received: from odin.smetech.net ([208.254.26.82]) by localhost (ronin.smetech.net [208.254.26.81]) (amavisd-new, port 10024) with ESMTP id CiZA1i8-CTBS; Fri, 20 Sep 2013 18:01:24 -0400 (EDT) Received: from [192.168.2.100] (pool-96-231-164-210.washdc.fios.verizon.net [96.231.164.210]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by odin.smetech.net (Postfix) with ESMTP id ADF51F2417C; Fri, 20 Sep 2013 18:01:56 -0400 (EDT) Mime-Version: 1.0 (Apple Message framework v1085) Content-Type: text/plain; charset=us-ascii From: Russ Housley In-Reply-To: Date: Fri, 20 Sep 2013 18:01:24 -0400 Content-Transfer-Encoding: quoted-printable Message-Id: <0B988E61-8EAE-4F58-9B56-270C405C442A@vigilsec.com> References: To: "DOLLY, MARTIN C" X-Mailer: Apple Mail (2.1085) Cc: IETF STIR Mail List Subject: Re: [stir] draft-peterson-stir-threats-00.txt X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 20 Sep 2013 22:01:38 -0000 Please post your thoughts as soon as you have read it. I would really = like to have a draft-ietf-stir-threats document for discussion of open = issues in Vancouver. We have a few more weeks until the cut-off (see = http://www.ietf.org/meeting/cutoff-dates-2013.html#IETF88), but I really = want to get there. Russ On Sep 20, 2013, at 5:52 PM, DOLLY, MARTIN C wrote: > Russ, >=20 > Could we have one more week to review? >=20 > Thank you, >=20 > Martin >=20 > -----Original Message----- > From: stir-bounces@ietf.org [mailto:stir-bounces@ietf.org] On Behalf = Of Russ Housley > Sent: Friday, September 20, 2013 5:23 PM > To: IETF STIR Mail List > Subject: [stir] draft-peterson-stir-threats-00.txt >=20 > http://www.ietf.org/id/draft-peterson-stir-threats-00.txt >=20 > Should the working group adopt this I-D as the starting point for the = STIR threat docuent? >=20 > Russ >=20 > _______________________________________________ > stir mailing list > stir@ietf.org > https://www.ietf.org/mailman/listinfo/stir From housley@vigilsec.com Thu Sep 26 13:37:19 2013 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DE58E21E80AB for ; Thu, 26 Sep 2013 13:37:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.599 X-Spam-Level: X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AebrWJneJNzS for ; Thu, 26 Sep 2013 13:37:13 -0700 (PDT) Received: from odin.smetech.net (mail.smetech.net [208.254.26.82]) by ietfa.amsl.com (Postfix) with ESMTP id 5A78F21E80B0 for ; Thu, 26 Sep 2013 13:37:13 -0700 (PDT) Received: from localhost (unknown [208.254.26.81]) by odin.smetech.net (Postfix) with ESMTP id 76036F241A9 for ; Thu, 26 Sep 2013 16:37:33 -0400 (EDT) X-Virus-Scanned: amavisd-new at smetech.net Received: from odin.smetech.net ([208.254.26.82]) by localhost (ronin.smetech.net [208.254.26.81]) (amavisd-new, port 10024) with ESMTP id waXxpmSEyCQ9 for ; Thu, 26 Sep 2013 16:36:52 -0400 (EDT) Received: from [192.168.2.100] (pool-96-255-145-152.washdc.fios.verizon.net [96.255.145.152]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by odin.smetech.net (Postfix) with ESMTP id E84B6F24175 for ; Thu, 26 Sep 2013 16:37:28 -0400 (EDT) From: Russ Housley Mime-Version: 1.0 (Apple Message framework v1085) Content-Type: multipart/signed; boundary=Apple-Mail-206-341185583; protocol="application/pkcs7-signature"; micalg=sha1 Date: Thu, 26 Sep 2013 16:37:07 -0400 In-Reply-To: To: IETF STIR Mail List References: Message-Id: X-Mailer: Apple Mail (2.1085) Subject: Re: [stir] draft-peterson-stir-threats-00.txt X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 26 Sep 2013 20:37:19 -0000 --Apple-Mail-206-341185583 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii It has been six days, I'd like to hear from more people about this = document. Martin asked for an additional week, so I'm sure we will hear = from him soon. Russ On Sep 20, 2013, at 5:23 PM, Russ Housley wrote: > http://www.ietf.org/id/draft-peterson-stir-threats-00.txt >=20 > Should the working group adopt this I-D as the starting point for the = STIR threat docuent? >=20 > Russ >=20 --Apple-Mail-206-341185583 Content-Disposition: attachment; filename=smime.p7s Content-Type: application/pkcs7-signature; name=smime.p7s Content-Transfer-Encoding: base64 MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIILZDCCBSow ggQSoAMCAQICEQCWQVO8Se/ELTDvfzPfbE7PMA0GCSqGSIb3DQEBBQUAMIGTMQswCQYDVQQGEwJH QjEbMBkGA1UECBMSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHEwdTYWxmb3JkMRowGAYDVQQK ExFDT01PRE8gQ0EgTGltaXRlZDE5MDcGA1UEAxMwQ09NT0RPIENsaWVudCBBdXRoZW50aWNhdGlv biBhbmQgU2VjdXJlIEVtYWlsIENBMB4XDTEyMDMwMTAwMDAwMFoXDTEzMDMwMTIzNTk1OVowJTEj MCEGCSqGSIb3DQEJARYUaG91c2xleUB2aWdpbHNlYy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDf+ZqfVh9j1/uT+utUViLKlpZAA9aLSKUcj8NOg8eiofsmSrgv9WhqLZqd3zgW UXlCMv8X25RJ1JvAP8ZuRMs5nYhalLhSIBt4fnyYQ3XSdD21V/cfXb6OYngaVbFz2QR/3/kNXwBh PttzTQm2Caen/xtcyqiguNmVHCx1jh0mjq0XwYCBc6xg8c/GM26t9RGaZG0zB0kdfAj61sussqYQ 080u9WjL9/oguapIjDQ4aO6LY+m0qL+2Vavk44wFPeDtFHA9hujoPcc63E0l/U5PRYpGAmHp1UEC 1jBU7uYd/iewV2EDEkDX55WLIpGZfoBF+uKx1VoPmEZltPqljg8hAgMBAAGjggHkMIIB4DAfBgNV HSMEGDAWgBR6E04AdFvGeGNkJ8Ev4qBbvHnFezAdBgNVHQ4EFgQU9jGbv3XM7fKm9udp1jtSoF5Y 4HQwDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwIAYDVR0lBBkwFwYIKwYBBQUHAwQGCysG AQQBsjEBAwUCMBEGCWCGSAGG+EIBAQQEAwIFIDBGBgNVHSAEPzA9MDsGDCsGAQQBsjEBAgEBATAr MCkGCCsGAQUFBwIBFh1odHRwczovL3NlY3VyZS5jb21vZG8ubmV0L0NQUzBXBgNVHR8EUDBOMEyg SqBIhkZodHRwOi8vY3JsLmNvbW9kb2NhLmNvbS9DT01PRE9DbGllbnRBdXRoZW50aWNhdGlvbmFu ZFNlY3VyZUVtYWlsQ0EuY3JsMIGIBggrBgEFBQcBAQR8MHowUgYIKwYBBQUHMAKGRmh0dHA6Ly9j cnQuY29tb2RvY2EuY29tL0NPTU9ET0NsaWVudEF1dGhlbnRpY2F0aW9uYW5kU2VjdXJlRW1haWxD QS5jcnQwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmNvbW9kb2NhLmNvbTAfBgNVHREEGDAWgRRo b3VzbGV5QHZpZ2lsc2VjLmNvbTANBgkqhkiG9w0BAQUFAAOCAQEAgSXPb1o6jO+b+6FUddXr55XJ wQ2QdnXMq9vZjvrMT9QsWT9w9M24/qKcQAIy7DKoPbWYdks6XwSAG3lYfxUyCEDcq8nIbegFO9Ov B7KlNg/3W0JkpUeBNqFywnXtQh4WR/dCXfoxxiKgvR2BGyMXrkfSfb5NU3wUZC0bHeMczwzFReMF QjaY08y2V1rReTVxL4wSag9cMUtOzSLVbBWhiNAOxLiA7yu3EqfpsW935htmCXVLk2JQj4mbGEPm wx2JJRIKjfZKfdAnaI/TVbO2tUgc60Fgx+C+der2gFaqvC1pKRSM/mOqP7KFfSMoCnoV8EpxcUK6 JcjZfvD5SQJJlDCCBjIwggUaoAMCAQICEQD5UkwFhjHIs6TFptkJSxyVMA0GCSqGSIb3DQEBBQUA MIGuMQswCQYDVQQGEwJVUzELMAkGA1UECBMCVVQxFzAVBgNVBAcTDlNhbHQgTGFrZSBDaXR5MR4w HAYDVQQKExVUaGUgVVNFUlRSVVNUIE5ldHdvcmsxITAfBgNVBAsTGGh0dHA6Ly93d3cudXNlcnRy dXN0LmNvbTE2MDQGA1UEAxMtVVROLVVTRVJGaXJzdC1DbGllbnQgQXV0aGVudGljYXRpb24gYW5k IEVtYWlsMB4XDTEwMDIwMzAwMDAwMFoXDTExMDIwMzIzNTk1OVowgd8xNTAzBgNVBAsTLENvbW9k byBUcnVzdCBOZXR3b3JrIC0gUEVSU09OQSBOT1QgVkFMSURBVEVEMUYwRAYDVQQLEz1UZXJtcyBh bmQgQ29uZGl0aW9ucyBvZiB1c2U6IGh0dHA6Ly93d3cuY29tb2RvLm5ldC9yZXBvc2l0b3J5MR8w HQYDVQQLExYoYykyMDAzIENvbW9kbyBMaW1pdGVkMRgwFgYDVQQDEw9SdXNzZWxsIEhvdXNsZXkx IzAhBgkqhkiG9w0BCQEWFGhvdXNsZXlAdmlnaWxzZWMuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEA5AyYrgM8fhrahXe9DyA5yttHWpDXGaypRvUGLf7yzWbFqS37jOJFzQePTZ3B 1o0BozDxzLfxGOmy3kwZ4NvU7nanwjVNqrK88zcEzQDzMLQZN6duz7x/5yhUjrWhs+nHKQmiFV0b NSDOSp251dXNZ9Lzohwehxem86njyxgfygaukTr0ZIKifNrViT1JE6TWv8P4vEmOpZrdDRPzgUr/ XRaGFGF6bFoVAsQ9aJf7e60fldUd2c+JfLqaJ1z9Pt0kQ/1iMsjN32kXr2nKYmmA7a9Pml39ciDo ZvAxon3cq/bXZr9sHr3FH0IS676XqlQMbFg61QK33kn9Jn8VdDe6EQIDAQABo4ICFjCCAhIwHwYD VR0jBBgwFoAUiYJnfcSdJnAAS7RQSHzePa4Ebn0wHQYDVR0OBBYEFFh0Ejt3RCOa4T6tnrS9WAYv DHpjMA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMCAGA1UdJQQZMBcGCCsGAQUFBwMEBgsr BgEEAbIxAQMFAjARBglghkgBhvhCAQEEBAMCBSAwRgYDVR0gBD8wPTA7BgwrBgEEAbIxAQIBAQEw KzApBggrBgEFBQcCARYdaHR0cHM6Ly9zZWN1cmUuY29tb2RvLm5ldC9DUFMwgaUGA1UdHwSBnTCB mjBMoEqgSIZGaHR0cDovL2NybC5jb21vZG9jYS5jb20vVVROLVVTRVJGaXJzdC1DbGllbnRBdXRo ZW50aWNhdGlvbmFuZEVtYWlsLmNybDBKoEigRoZEaHR0cDovL2NybC5jb21vZG8ubmV0L1VUTi1V U0VSRmlyc3QtQ2xpZW50QXV0aGVudGljYXRpb25hbmRFbWFpbC5jcmwwbAYIKwYBBQUHAQEEYDBe MDYGCCsGAQUFBzAChipodHRwOi8vY3J0LmNvbW9kb2NhLmNvbS9VVE5BQUFDbGllbnRDQS5jcnQw JAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmNvbW9kb2NhLmNvbTAfBgNVHREEGDAWgRRob3VzbGV5 QHZpZ2lsc2VjLmNvbTANBgkqhkiG9w0BAQUFAAOCAQEAFvP/2no5iO0xShez6g95ygTDJwfOI11o Y4cnK57hANXhLNW4zr20Tc/pjKCTwzyMZ0fGRtCL+SCa50I46ukeDVdUKFVYO4EvpTRpxlPsJPj3 whbLjZSI9tqmiRi3dER8wNjs/vizeeF1c1e+x0Tiu4y95HIkeBeNLNnwEEc+oKjMncEW2Fy/gdFZ W2AJH/w+3n5JDyQtp4o0VmQqpsU4xfyHiYEiVWYmfCJyfXoL614mdSQmwKqt+u8Esqb9QcsV1RYx 1whxHD7AronBSp5TpHwxzcCpbla8NRCX9DWIdorpN0ygtbfLrF3ILC6SctVxTPoC+MAAAH7c/Hnk oUE36DGCA+QwggPgAgEBMIGpMIGTMQswCQYDVQQGEwJHQjEbMBkGA1UECBMSR3JlYXRlciBNYW5j aGVzdGVyMRAwDgYDVQQHEwdTYWxmb3JkMRowGAYDVQQKExFDT01PRE8gQ0EgTGltaXRlZDE5MDcG A1UEAxMwQ09NT0RPIENsaWVudCBBdXRoZW50aWNhdGlvbiBhbmQgU2VjdXJlIEVtYWlsIENBAhEA lkFTvEnvxC0w738z32xOzzAJBgUrDgMCGgUAoIICDzAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcB MBwGCSqGSIb3DQEJBTEPFw0xMzA5MjYyMDM3MDhaMCMGCSqGSIb3DQEJBDEWBBSAB50nVVD9esH6 ZWpWymb2VfW1uDCB1QYJKwYBBAGCNxAEMYHHMIHEMIGuMQswCQYDVQQGEwJVUzELMAkGA1UECBMC VVQxFzAVBgNVBAcTDlNhbHQgTGFrZSBDaXR5MR4wHAYDVQQKExVUaGUgVVNFUlRSVVNUIE5ldHdv cmsxITAfBgNVBAsTGGh0dHA6Ly93d3cudXNlcnRydXN0LmNvbTE2MDQGA1UEAxMtVVROLVVTRVJG aXJzdC1DbGllbnQgQXV0aGVudGljYXRpb24gYW5kIEVtYWlsAhEA+VJMBYYxyLOkxabZCUsclTCB 1wYLKoZIhvcNAQkQAgsxgceggcQwga4xCzAJBgNVBAYTAlVTMQswCQYDVQQIEwJVVDEXMBUGA1UE BxMOU2FsdCBMYWtlIENpdHkxHjAcBgNVBAoTFVRoZSBVU0VSVFJVU1QgTmV0d29yazEhMB8GA1UE CxMYaHR0cDovL3d3dy51c2VydHJ1c3QuY29tMTYwNAYDVQQDEy1VVE4tVVNFUkZpcnN0LUNsaWVu dCBBdXRoZW50aWNhdGlvbiBhbmQgRW1haWwCEQD5UkwFhjHIs6TFptkJSxyVMA0GCSqGSIb3DQEB AQUABIIBADNByKeWX6fi+qosWyh8TMDEtj+tK8CqlHuIdwqX1iaMjwX+gJ/f7AAuZpw2ScB1V98w 7ZKThrTncGZT3Qz1Ge5pURiKyTV+BILj2XJGTMBvp0FonbdSF7KCpoOtnmqJOW5isPOusrpRZrcZ +EyHIdJGbPNySNLNTy36/t2zWM44lcvHBgHebU2mVkJm1aYLZNoUxxRNr8Mj5Y4LSnbkBgAlL5/R bxreFEFC1zW26PyV/LTZ34/NnIGWncICVqkkY/MH1cNG/p1QgVcUhTvRhe+IxUsqtoNIvCXfpi1S QUfDOej+ljsTpdoglofjKF8ERJF9BB4BUrKHklLO81IaScUAAAAAAAA= --Apple-Mail-206-341185583-- From md3135@att.com Thu Sep 26 13:43:25 2013 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 353B011E8115 for ; Thu, 26 Sep 2013 13:43:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FUWJMllw6hZc for ; Thu, 26 Sep 2013 13:43:19 -0700 (PDT) Received: from nbfkord-smmo06.seg.att.com (nbfkord-smmo06.seg.att.com [209.65.160.94]) by ietfa.amsl.com (Postfix) with ESMTP id 2230D11E80F3 for ; Thu, 26 Sep 2013 13:43:19 -0700 (PDT) Received: from unknown [144.160.229.24] (EHLO alpi155.enaf.aldc.att.com) by nbfkord-smmo06.seg.att.com(mxl_mta-6.15.0-1) over TLS secured channel with ESMTP id 56c94425.0.7661579.00-343.20925537.nbfkord-smmo06.seg.att.com (envelope-from ); Thu, 26 Sep 2013 20:43:19 +0000 (UTC) X-MXL-Hash: 52449c670e29118f-4f56b03a364ead7230d73aa109e176dea936ca30 Received: from enaf.aldc.att.com (localhost [127.0.0.1]) by alpi155.enaf.aldc.att.com (8.14.5/8.14.5) with ESMTP id r8QKhGxG009863; Thu, 26 Sep 2013 16:43:17 -0400 Received: from mlpi408.sfdc.sbc.com (mlpi408.sfdc.sbc.com [130.9.128.240]) by alpi155.enaf.aldc.att.com (8.14.5/8.14.5) with ESMTP id r8QKh4k9009593 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Thu, 26 Sep 2013 16:43:11 -0400 Received: from MISOUT7MSGHUB9C.ITServices.sbc.com (MISOUT7MSGHUB9C.itservices.sbc.com [144.151.223.82]) by mlpi408.sfdc.sbc.com (RSA Interceptor); Thu, 26 Sep 2013 20:42:58 GMT Received: from MISOUT7MSGUSR9I.ITServices.sbc.com ([144.151.223.56]) by MISOUT7MSGHUB9C.ITServices.sbc.com ([144.151.223.82]) with mapi id 14.03.0158.001; Thu, 26 Sep 2013 16:42:58 -0400 From: "DOLLY, MARTIN C" To: Russ Housley , IETF STIR Mail List Thread-Topic: [stir] draft-peterson-stir-threats-00.txt Thread-Index: AQHOuvg5PKSVeQzMzkaY10a/PrrWPpnYeutg Date: Thu, 26 Sep 2013 20:42:57 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [135.175.94.221] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-RSA-Inspected: yes X-RSA-Classifications: public X-Spam: [F=0.2000000000; CM=0.500; S=0.200(2010122901)] X-MAIL-FROM: X-SOURCE-IP: [144.160.229.24] X-AnalysisOut: [v=2.0 cv=WrCcx6jv c=1 sm=0 a=dhB6nF3YHL5t/Ixux6cINA==:17 a] X-AnalysisOut: [=SKl1qMU72m4A:10 a=-VEDDkUluEEA:10 a=ofMgfj31e3cA:10 a=BLc] X-AnalysisOut: [eEmwcHowA:10 a=kj9zAlcOel0A:10 a=zQP7CpKOAAAA:8 a=XIqpo32R] X-AnalysisOut: [AAAA:8 a=OJxZ0vrzjz8A:10 a=48vgC7mUAAAA:8 a=rHeiVxDh7ENLTX] X-AnalysisOut: [M0UK0A:9 a=CjuIK1q_8ugA:10 a=lZB815dzVvQA:10] Subject: Re: [stir] draft-peterson-stir-threats-00.txt X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 26 Sep 2013 20:43:25 -0000 With Hadriel comments incorporated, it is a start -----Original Message----- From: stir-bounces@ietf.org [mailto:stir-bounces@ietf.org] On Behalf Of Rus= s Housley Sent: Thursday, September 26, 2013 4:37 PM To: IETF STIR Mail List Subject: Re: [stir] draft-peterson-stir-threats-00.txt It has been six days, I'd like to hear from more people about this document= . Martin asked for an additional week, so I'm sure we will hear from him s= oon. Russ On Sep 20, 2013, at 5:23 PM, Russ Housley wrote: > http://www.ietf.org/id/draft-peterson-stir-threats-00.txt >=20 > Should the working group adopt this I-D as the starting point for the STI= R threat docuent? >=20 > Russ >=20 From brian.rosen@neustar.biz Thu Sep 26 14:43:13 2013 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 198C121F9FA2 for ; Thu, 26 Sep 2013 14:43:13 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mh4omlUN1UsO for ; Thu, 26 Sep 2013 14:43:08 -0700 (PDT) Received: from neustar.com (mx2.neustar.com [156.154.25.104]) by ietfa.amsl.com (Postfix) with ESMTP id B6AF321E8088 for ; Thu, 26 Sep 2013 14:43:04 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=neustar.biz; s=neustarbiz; t=1380231727; x=1695590666; q=dns/txt; h=From:Subject:Date:Message-ID:Content-Language: Content-Type:Content-ID:Content-Transfer-Encoding; bh=ZFD9amZ4vW hX2NOGgcO7SdaY4GfIum20P8p7DWzY51g=; b=BljYvuIJ73wfs86iZ1Zko9wngB Po+2dfP+vR+Ihta3nvJ3ZuEOvtS8RtiJOjYWUfp2D1gbavxNEwHWi6yHq2rA== Received: from ([10.31.58.71]) by chihiron1.nc.neustar.com with ESMTP with TLS id J041123128.25062342; Thu, 26 Sep 2013 17:42:05 -0400 Received: from STNTEXMB13.cis.neustar.com ([169.254.3.127]) by stntexhc12.cis.neustar.com ([::1]) with mapi id 14.02.0342.003; Thu, 26 Sep 2013 17:42:56 -0400 From: "Rosen, Brian" To: "stir@ietf.org Mail List" Thread-Topic: Comments on draft-peterson-secure-origin-ps-02 Thread-Index: AQHOuwFc5sUWnsuxSk6v27C4ehkcMA== Date: Thu, 26 Sep 2013 21:42:55 +0000 Message-ID: <247485F3-14FA-499F-A38B-A03E9B948E9B@neustar.biz> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.33.193.37] x-ems-proccessed: R64IxjzeHPwwd+efoj3ZcA== x-ems-stamp: NMT312cEfOkXkaAg0dDv3g== Content-Type: text/plain; charset="Windows-1252" Content-ID: <692300A5797BDC40B5C82CFA005DAB34@neustar.biz> Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Subject: [stir] Comments on draft-peterson-secure-origin-ps-02 X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 26 Sep 2013 21:43:13 -0000 I think this is a good document and should be adopted by the work group. My comments: Abstract The sentence "However, interworking SIP with the traditional telephone network has ultimately reduced the security of Caller ID systems." implies that the interwork causes the problem. That= 's not the case. Perhaps something like "Unfortunately, the way SIP has be= en implemented, and the proliferation of SIP service providers who are not = traditional telephony carriers has allowed unscrupulous callers to falsify = calling party telephone numbers" Get rid of "therefore" in "This document therefore examines the reasons=85" Introduction The first two sentences both use "arises"; get rid of one of them The goal of these mechanisms is to validate that originator of a call is authorized to use the From identifier. is not true in the case of P-A-I. P-A-I assumes From can be wishful thinki= ng and provides an alternative to From to identify the caller s/improve/improved/ in "little indication that it will be improve in the fu= ture" The sentence "In particular, the interworking with different communication architectures (e.g., SIP, PSTN, XMPP, RTCWeb) breaks the end-to-end semantic of the communication interaction and destroys the identification capabilities. " doesn't work for me. That isn't the reason we have the problem. We have t= he problem with all SIP, and have had fewer issues with all PSTN. The prob= lem is the inability to trust that From is accurate and the inability to al= ways have PAI, and have it be the desired TN. You could get into middle bo= xes and how they break SIP identity (or for that matter PAI) here. " Furthermore, the use of different identifiers (e.g., E.164 numbers vs. SIP URIs) creates challenges for determining who is able to claim "ownership" for a specific identifier. " is also problematic because we have DNS based ways of determining who can c= laim domain based identifiers, but don't for TN based identifiers. So, maybe "although domain based identifiers (sip:user@example.com) may use= DNS based approaches to determine who is able to claim "ownership" of the = URI, telephone numbers do not have any similar mechanism defined". Problem Statement While I like the explanation of the problem, I find the section lacking an = actual statement of the problem. I would think we would want to carefully = craft at least a paragraph of text that precisely defines what we are tryin= g to do. Use cases In VoIP to VoIP, we have this fragment "a group of service providers that offer interconnected VoIP service exchange calls using SIP end- to-end, but may also deliver some calls via circuit-switched facilities, as described below." The "but.." clause isn't true, those cases are handled by different section= s. In PSTN to VoIP, the note confuses me. Is it saying an IP-IP call with an = SBC looks like a PSTN-IP call? Something else? Dunno, but make it more cl= ear. =20 I worry a bit about this case because unless the PSTN exit point is a carri= er delegated the TN, it can't be signed by the GW. In VoIP to PSTN, I would appreciate flipping the diagram around so Alice is= on the left. The first intro paragraph matches the diagram and the headin= g in saying its a call from Alice on a VoIP phone to Carl on a PSTN phone. = But it then says Alice wants to know who she is talking to. That's called= party (destination) identity, not part of this work, so far. I suspect yo= u mean Carl wants to know who he is talking to. In all of these diagrams and explanations, you assume one VoIP provider. T= hat limits the discussion of the solution space. If there are more than on= e SPs in the SIP path, any of them can verify the signature, and that would= be very helpful. =20 Limitations You describe PAI as being "where end-user devices cannot alter or inspect S= IP messages" and then say "cannot offer any protection against identity spo= ofing by intermediaries or entities that allow end users to set the P -Asse= rted-Identity information". Can't have it both ways, either end users can = set it or they can't. I think the problem is more that the network blindly= trusts the From when setting PAI in too many cases; it does not verify tha= t the From is correct, especially with enterprise customers who claim they = need to assert any of their numbers. I have no doubt there are networks th= at allow their customers to send a PAI, but I don't think it's very common. I find the paragraph in SIP Identity that begins with "One of the main reas= ons that SIP deployments mimic the PSTN" not helpful. The first part seems= to set something up, but doesn't provide a rational I understand, and the = latter part is true, but not germane to the problem. It would seem to me that by the time you get to the discussion of SDP mangl= ing, you should have said the work doesn't propose to do anything so stop M= ITM. That may be problematic given recent developments, but it is where we= are. In "Public Key Infrastructure Developments" you have the first introduction= of the delegation tree property of telephone numbers. This is such a fund= amental concept to the solution that I would prefer to find a way to introd= uce it earlier on it's own - the basic notion that in every country, number= s are delegated in a formal (or formal + informal) way, with a per-country = root of authority. You get to it later, but I found the first reference he= re to be underwhelming. At the very least, supply a forward reference, but= I'd prefer to actually introduce the idea earlier in the document. In "Pervasive Nature of B2BUA Deployments", I think you should introduce th= e concept of a canonical TN. Explain that there are many ways numbers are = represented, but they are convertible to a canonical e.164. If you didn't = add a section, or change the title of this one, you could explain that one = of the things B2BUAs do is rewrite numbers to mess with prefixes or add/sub= tract country codes.=20 In "Relationship with number assignment and management" you don't cover num= ber resell. I would add text that explains that while the initial assignme= nts usually are constrained by formal processes, often with regulatory impe= ratives, in some countries, reselling of numbers using less formal processe= s is permitted. I might even observe that assignment is often in ranges, a= nd also that an assignment to an enterprise looks like a resell. I would a= lso note in this section that the permitted spoofing cases really are anoth= er form of delegation. Requirements I think there are more requirements. I think origination devices or servic= e providers must be able to generate secure identities, and termination dev= ices or service providers must be able to validate. I think we want to have some requirement on efficiency -- I want to be abl= e to say things about length of signature chains in the solution. I think there is a requirement to base credentials on national number deleg= ation, and there is not a requirement for a golden root. I think we have agreed to remove caller name from the current effort. Brian From br@brianrosen.net Thu Sep 26 14:59:10 2013 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0C82521F9C55 for ; Thu, 26 Sep 2013 14:59:10 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -103.535 X-Spam-Level: X-Spam-Status: No, score=-103.535 tagged_above=-999 required=5 tests=[AWL=0.064, BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id t0SuowZGhcjL for ; Thu, 26 Sep 2013 14:59:04 -0700 (PDT) Received: from mail-qc0-f178.google.com (mail-qc0-f178.google.com [209.85.216.178]) by ietfa.amsl.com (Postfix) with ESMTP id 0506A21F9C0E for ; Thu, 26 Sep 2013 14:58:58 -0700 (PDT) Received: by mail-qc0-f178.google.com with SMTP id r5so1197612qcx.37 for ; Thu, 26 Sep 2013 14:58:56 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:content-type:mime-version:subject:from :in-reply-to:date:cc:content-transfer-encoding:message-id:references :to; bh=SOZTU1Qm0COZ3/qSLqXeAZ32x30lS83l3g+/mQCrdE8=; b=ANtYilopOftLi6aZaRwqfiB6VDXQSAyM3nTgKoxq6C57R119nU0zOuRrYv6yZUhGxA qi9x30DCR/AdUmSkA0OPQsoxKbn7ldti5/BexAxaDdgdaphdDNzELDihJFKMNN+IMVwT eocTw83UmQ7J9XIJOV7VEbWyYq+mXdCxW6+Q9p6dMqRPu54M7V2lIvhca0KXE+7KDWTK 8NGRm56iwM4KpIlH6y8gD5ooao5v45YomxneNTnedZWpRV0kBrK0o9ysodDoaoyTnsEH /Y/lulLta/f0L34YMFH7dZkbqXrX2ha5KsdgvsyJ7Y2YRfJ9uXi62qlQ0gt0w6tMZozR XWow== X-Gm-Message-State: ALoCoQnuDf7aLenG/ocY1j+hCsp3CboWpgZtaBdGg+CmDcHR6t9NMJookbnASyD1/8knuorFup0/ X-Received: by 10.224.89.1 with SMTP id c1mr9824529qam.100.1380232736831; Thu, 26 Sep 2013 14:58:56 -0700 (PDT) Received: from [10.33.193.37] (neustargw.va.neustar.com. [209.173.53.233]) by mx.google.com with ESMTPSA id x1sm11958834qai.6.1969.12.31.16.00.00 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Thu, 26 Sep 2013 14:58:56 -0700 (PDT) Content-Type: text/plain; charset=windows-1252 Mime-Version: 1.0 (Mac OS X Mail 6.5 \(1508\)) From: Brian Rosen In-Reply-To: <247485F3-14FA-499F-A38B-A03E9B948E9B@neustar.biz> Date: Thu, 26 Sep 2013 17:58:51 -0400 Content-Transfer-Encoding: quoted-printable Message-Id: <394AB49A-FB93-4247-8184-AEDB59400292@brianrosen.net> References: <247485F3-14FA-499F-A38B-A03E9B948E9B@neustar.biz> To: "Rosen, Brian" X-Mailer: Apple Mail (2.1508) Cc: "stir@ietf.org Mail List" Subject: Re: [stir] Comments on draft-peterson-secure-origin-ps-02 X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 26 Sep 2013 21:59:10 -0000 I really tried to get this done last week, but didn't make it, sorry. Brian On Sep 26, 2013, at 5:42 PM, "Rosen, Brian" = wrote: > I think this is a good document and should be adopted by the work = group. >=20 > My comments: > Abstract > The sentence "However, interworking SIP with the > traditional telephone network has ultimately reduced the security of > Caller ID systems." implies that the interwork causes the problem. = That's not the case. Perhaps something like "Unfortunately, the way SIP = has been implemented, and the proliferation of SIP service providers who = are not traditional telephony carriers has allowed unscrupulous callers = to falsify calling party telephone numbers" >=20 > Get rid of "therefore" in "This document therefore examines the = reasons=85" >=20 > Introduction > The first two sentences both use "arises"; get rid of one of them >=20 > The goal of these mechanisms > is to validate that originator of a call is authorized to use the > =46rom identifier. >=20 > is not true in the case of P-A-I. P-A-I assumes =46rom can be wishful = thinking and provides an alternative to =46rom to identify the caller >=20 > s/improve/improved/ in "little indication that it will be improve in = the future" >=20 > The sentence "In particular, the interworking > with different communication architectures (e.g., SIP, PSTN, XMPP, > RTCWeb) breaks the end-to-end semantic of the communication > interaction and destroys the identification capabilities. > " > doesn't work for me. That isn't the reason we have the problem. We = have the problem with all SIP, and have had fewer issues with all PSTN. = The problem is the inability to trust that =46rom is accurate and the = inability to always have PAI, and have it be the desired TN. You could = get into middle boxes and how they break SIP identity (or for that = matter PAI) here. >=20 > " Furthermore, the use of different identifiers (e.g., E.164 numbers > vs. SIP URIs) creates challenges for determining who is able to = claim > "ownership" for a specific identifier. > " > is also problematic because we have DNS based ways of determining who = can claim domain based identifiers, but don't for TN based identifiers. > So, maybe "although domain based identifiers (sip:user@example.com) = may use DNS based approaches to determine who is able to claim = "ownership" of the URI, telephone numbers do not have any similar = mechanism defined". >=20 > Problem Statement > While I like the explanation of the problem, I find the section = lacking an actual statement of the problem. I would think we would want = to carefully craft at least a paragraph of text that precisely defines = what we are trying to do. >=20 > Use cases > In VoIP to VoIP, we have this fragment "a group of service providers > that offer interconnected VoIP service exchange calls using SIP end- > to-end, but may also deliver some calls via circuit-switched > facilities, as described below." >=20 > The "but.." clause isn't true, those cases are handled by different = sections. >=20 > In PSTN to VoIP, the note confuses me. Is it saying an IP-IP call = with an SBC looks like a PSTN-IP call? Something else? Dunno, but make = it more clear. =20 >=20 > I worry a bit about this case because unless the PSTN exit point is a = carrier delegated the TN, it can't be signed by the GW. >=20 > In VoIP to PSTN, I would appreciate flipping the diagram around so = Alice is on the left. The first intro paragraph matches the diagram and = the heading in saying its a call from Alice on a VoIP phone to Carl on a = PSTN phone. But it then says Alice wants to know who she is talking to. = That's called party (destination) identity, not part of this work, so = far. I suspect you mean Carl wants to know who he is talking to. >=20 > In all of these diagrams and explanations, you assume one VoIP = provider. That limits the discussion of the solution space. If there = are more than one SPs in the SIP path, any of them can verify the = signature, and that would be very helpful. =20 >=20 > Limitations > You describe PAI as being "where end-user devices cannot alter or = inspect SIP messages" and then say "cannot offer any protection against = identity spoofing by intermediaries or entities that allow end users to = set the P -Asserted-Identity information". Can't have it both ways, = either end users can set it or they can't. I think the problem is more = that the network blindly trusts the =46rom when setting PAI in too many = cases; it does not verify that the =46rom is correct, especially with = enterprise customers who claim they need to assert any of their numbers. = I have no doubt there are networks that allow their customers to send a = PAI, but I don't think it's very common. >=20 > I find the paragraph in SIP Identity that begins with "One of the main = reasons that SIP deployments mimic the PSTN" not helpful. The first = part seems to set something up, but doesn't provide a rational I = understand, and the latter part is true, but not germane to the problem. >=20 > It would seem to me that by the time you get to the discussion of SDP = mangling, you should have said the work doesn't propose to do anything = so stop MITM. That may be problematic given recent developments, but it = is where we are. >=20 > In "Public Key Infrastructure Developments" you have the first = introduction of the delegation tree property of telephone numbers. This = is such a fundamental concept to the solution that I would prefer to = find a way to introduce it earlier on it's own - the basic notion that = in every country, numbers are delegated in a formal (or formal + = informal) way, with a per-country root of authority. You get to it = later, but I found the first reference here to be underwhelming. At the = very least, supply a forward reference, but I'd prefer to actually = introduce the idea earlier in the document. >=20 > In "Pervasive Nature of B2BUA Deployments", I think you should = introduce the concept of a canonical TN. Explain that there are many = ways numbers are represented, but they are convertible to a canonical = e.164. If you didn't add a section, or change the title of this one, = you could explain that one of the things B2BUAs do is rewrite numbers to = mess with prefixes or add/subtract country codes.=20 >=20 > In "Relationship with number assignment and management" you don't = cover number resell. I would add text that explains that while the = initial assignments usually are constrained by formal processes, often = with regulatory imperatives, in some countries, reselling of numbers = using less formal processes is permitted. I might even observe that = assignment is often in ranges, and also that an assignment to an = enterprise looks like a resell. I would also note in this section that = the permitted spoofing cases really are another form of delegation. >=20 >=20 > Requirements >=20 > I think there are more requirements. I think origination devices or = service providers must be able to generate secure identities, and = termination devices or service providers must be able to validate. >=20 > I think we want to have some requirement on efficiency -- I want to = be able to say things about length of signature chains in the solution. >=20 > I think there is a requirement to base credentials on national number = delegation, and there is not a requirement for a golden root. >=20 > I think we have agreed to remove caller name from the current effort. >=20 >=20 > Brian >=20 >=20 > _______________________________________________ > stir mailing list > stir@ietf.org > https://www.ietf.org/mailman/listinfo/stir From jon.peterson@neustar.biz Thu Sep 26 16:32:42 2013 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5262C21E80D1 for ; Thu, 26 Sep 2013 16:32:42 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -106.23 X-Spam-Level: X-Spam-Status: No, score=-106.23 tagged_above=-999 required=5 tests=[AWL=-0.184, BAYES_00=-2.599, HELO_MISMATCH_COM=0.553, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UxdTwiYgG1tH for ; Thu, 26 Sep 2013 16:32:38 -0700 (PDT) Received: from neustar.com (keys.neustar.biz [156.154.17.104]) by ietfa.amsl.com (Postfix) with ESMTP id E6D9A21E8094 for ; Thu, 26 Sep 2013 16:32:37 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=neustar.biz; s=neustarbiz; t=1380238928; x=1695589524; q=dns/txt; h=From:Subject:Date:Message-ID:Content-Language: Content-Type:Content-ID:Content-Transfer-Encoding; bh=IMkC3Griim vy2U9QCOvv7XwwvxO2dQOhnJPICLax+SY=; b=oOy8ahNHDVv7YFC1BYW80Knf3K 1R9izzznwz0hYdEhchO2Lkn5+O+cvDsIouhbHFQba9XtvWZmO1t8QIIeAWWQ== Received: from ([10.31.58.71]) by stihiron1.va.neustar.com with ESMTP with TLS id J041124052.32598087; Thu, 26 Sep 2013 19:42:07 -0400 Received: from STNTEXMB10.cis.neustar.com ([169.254.5.60]) by stntexhc12.cis.neustar.com ([::1]) with mapi id 14.02.0342.003; Thu, 26 Sep 2013 19:32:21 -0400 From: "Peterson, Jon" To: "Rosen, Brian" , "stir@ietf.org Mail List" Thread-Topic: [stir] Comments on draft-peterson-secure-origin-ps-02 Thread-Index: AQHOuwFc5sUWnsuxSk6v27C4ehkcMJnYePuA Date: Thu, 26 Sep 2013 23:32:21 +0000 Message-ID: In-Reply-To: <247485F3-14FA-499F-A38B-A03E9B948E9B@neustar.biz> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.3.6.130613 x-originating-ip: [192.168.128.131] x-ems-proccessed: R64IxjzeHPwwd+efoj3ZcA== x-ems-stamp: xbvsD+Wk0zys3wWcCoyceA== Content-Type: text/plain; charset="Windows-1252" Content-ID: Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Subject: Re: [stir] Comments on draft-peterson-secure-origin-ps-02 X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 26 Sep 2013 23:32:42 -0000 Thanks for these; a few notes below. I'm planning to release the new version of this very soon that reflects these changes and some other additions, so no one will be submitting review comments that have been overcome by events. Jon Peterson Neustar, Inc. >I think this is a good document and should be adopted by the work group. > >My comments: >Abstract >The sentence "However, interworking SIP with the > traditional telephone network has ultimately reduced the security of > Caller ID systems." implies that the interwork causes the problem. >That's not the case. Perhaps something like "Unfortunately, the way SIP >has been implemented, and the proliferation of SIP service providers who >are not traditional telephony carriers has allowed unscrupulous callers >to falsify calling party telephone numbers" I agree we need to be careful where we aim the blame-cannon, but aiming at "SIP service providers who are not traditional telephony carriers" seems a bit more damaging than just saying "interworking." Surely if those service providers were not interworking, VoIP would not be contributing to the problem of calling party number falsification on the PSTN - and many of these interworking service providers are not responsible for generating the calling party number passed to them. I had already reworked the text of the abstract a bit already to be less SIP-specific at Hadriel's request, but I'm having a hard time seeing how to improve this specific statement. Suggestions welcome. >Get rid of "therefore" in "This document therefore examines the reasons=8A= " OK. > >Introduction >The first two sentences both use "arises"; get rid of one of them OK. >The goal of these mechanisms > is to validate that originator of a call is authorized to use the > From identifier. > >is not true in the case of P-A-I. P-A-I assumes From can be wishful >thinking and provides an alternative to From to identify the caller Right. So we'll say "to claim an originating identifier." >s/improve/improved/ in "little indication that it will be improve in the >future" Check. >The sentence "In particular, the interworking > with different communication architectures (e.g., SIP, PSTN, XMPP, > RTCWeb) breaks the end-to-end semantic of the communication > interaction and destroys the identification capabilities. >" >doesn't work for me. That isn't the reason we have the problem. We have >the problem with all SIP, and have had fewer issues with all PSTN. The >problem is the inability to trust that From is accurate and the inability >to always have PAI, and have it be the desired TN. You could get into >middle boxes and how they break SIP identity (or for that matter PAI) >here. For the second point, we can say "interworking with different communication architectures (...) and other forms of mediation." I would say it is "a" reason we have the problem, even if it's not "the" reason. I do think that "destroys the identification capabilities" was intended to speak to the inability to trust that the From is accurate, in combination with the point you raise on the next sentence. >" Furthermore, the use of different identifiers (e.g., E.164 numbers > vs. SIP URIs) creates challenges for determining who is able to claim > "ownership" for a specific identifier. >" >is also problematic because we have DNS based ways of determining who can >claim domain based identifiers, but don't for TN based identifiers. >So, maybe "although domain based identifiers (sip:user@example.com) may >use DNS based approaches to determine who is able to claim "ownership" of >the URI, telephone numbers do not have any similar mechanism defined". I can append that to the end. Will change "DNS based" to "certificate or DNS-related," and add a "yet" to "telephone numbers do not." >Problem Statement >While I like the explanation of the problem, I find the section lacking >an actual statement of the problem. I would think we would want to >carefully craft at least a paragraph of text that precisely defines what >we are trying to do. I am not sure it is essential to progress that we do this, as these sorts of statements need to be heavily tooled and end up concealing as much as they elucidate in my experience. Still, I'd be happy to look at any proposed text. >Use cases >In VoIP to VoIP, we have this fragment "a group of service providers > that offer interconnected VoIP service exchange calls using SIP end- > to-end, but may also deliver some calls via circuit-switched > facilities, as described below." > >The "but.." clause isn't true, those cases are handled by different >sections. The "but" clause is just saying that that is covered be a separate use case in another section. I'll try to make that clearer >In PSTN to VoIP, the note confuses me. Is it saying an IP-IP call with >an SBC looks like a PSTN-IP call? Something else? Dunno, but make it >more clear. =20 I think that note actually belongs in the IP-PSTN-IP use case. Someone (probably me) likely cut-and-pasted it into the wrong section. >I worry a bit about this case because unless the PSTN exit point is a >carrier delegated the TN, it can't be signed by the GW. Out-of-band would also be an option here, if Carl's device supported it, say. >In VoIP to PSTN, I would appreciate flipping the diagram around so Alice >is on the left. The first intro paragraph matches the diagram and the >heading in saying its a call from Alice on a VoIP phone to Carl on a PSTN >phone. But it then says Alice wants to know who she is talking to. >That's called party (destination) identity, not part of this work, so >far. I suspect you mean Carl wants to know who he is talking to. I'll ask Hannes if he feels like rejiggering the ASCII art here. But yes, more importantly, this text is discussing the connected identity use case, which we do want to rule out here, so this text requires some major surgery. I took a swing at that. >In all of these diagrams and explanations, you assume one VoIP provider. >That limits the discussion of the solution space. If there are more than >one SPs in the SIP path, any of them can verify the signature, and that >would be very helpful. Certainly these diagrams aren't meant to rule out the possibility that there will be more than one VoIP SP, or more than one gateway, or anything of the kind. I think these are atomic functional scenarios. We do want to be explicit somewhere (not sure exactly where) that multiple parties in the architecture could participate in the verification process. This also touches on a larger question we need to explore about how much transitive trust we imagine will be in the architecture - do we want to allow one SP to delegate responsibility for verification to another SP, and if so, how do we best reflect that in the solution? >Limitations >You describe PAI as being "where end-user devices cannot alter or inspect >SIP messages" and then say "cannot offer any protection against identity >spoofing by intermediaries or entities that allow end users to set the P >-Asserted-Identity information". Can't have it both ways, either end >users can set it or they can't. I think the problem is more that the >network blindly trusts the From when setting PAI in too many cases; it >does not verify that the From is correct, especially with enterprise >customers who claim they need to assert any of their numbers. I have no >doubt there are networks that allow their customers to send a PAI, but I >don't think it's very common. There is now a whole section on PAI that will hopefully make its properties a bit more clear in the document. To your specific initial point, I will substitute for "end users" in the second phrase there "untrusted entities." >I find the paragraph in SIP Identity that begins with "One of the main >reasons that SIP deployments mimic the PSTN" not helpful. The first part >seems to set something up, but doesn't provide a rational I understand, >and the latter part is true, but not germane to the problem. Personally, I think that paragraph captures a critical dimension of the problem space. Reading it again, I don't sense a non-sequitur here, but please do explain further if this really seems like a problem. >It would seem to me that by the time you get to the discussion of SDP >mangling, you should have said the work doesn't propose to do anything so >stop MITM. That may be problematic given recent developments, but it is >where we are. Not sure I agree: up front in this "Limitations" section, we're discussing the intrinsic limitations with the existing methods, not the scope of the proposed new work in the WG. We do say that later. >In "Public Key Infrastructure Developments" you have the first >introduction of the delegation tree property of telephone numbers. This >is such a fundamental concept to the solution that I would prefer to find >a way to introduce it earlier on it's own - the basic notion that in >every country, numbers are delegated in a formal (or formal + informal) >way, with a per-country root of authority. You get to it later, but I >found the first reference here to be underwhelming. At the very least, >supply a forward reference, but I'd prefer to actually introduce the idea >earlier in the document. What may help here is that the former "Roadmap" section has been turned (hastily) into a "Terminology" section and moved forward in the document, and so there is now a terminology definition for the "Authority Delegation Infrastructure" that readers will hit earlier. Even if what's in there now isn't ideal, it could be a place for that to live. Workable? >In "Pervasive Nature of B2BUA Deployments", I think you should introduce >the concept of a canonical TN. Explain that there are many ways numbers >are represented, but they are convertible to a canonical e.164. If you >didn't add a section, or change the title of this one, you could explain >that one of the things B2BUAs do is rewrite numbers to mess with prefixes >or add/subtract country codes. I think if we were going to introduce that somewhere, it shouldn't be in this little subsection. I'll add a definition to the terminology section. >In "Relationship with number assignment and management" you don't cover >number resell. I would add text that explains that while the initial >assignments usually are constrained by formal processes, often with >regulatory imperatives, in some countries, reselling of numbers using >less formal processes is permitted. I might even observe that assignment >is often in ranges, and also that an assignment to an enterprise looks >like a resell. I would also note in this section that the permitted >spoofing cases really are another form of delegation. The text there is really "for example" text, but I can add a bit about resellers and enterprises, just high-level text that isn't too prescriptive. > >Requirements > >I think there are more requirements. I think origination devices or >service providers must be able to generate secure identities, and >termination devices or service providers must be able to validate. I don't think the current list of requirements is exhaustive by any means, it's just what was captured very early on in this process. I added a parallel "Generation" and "Validation" bullet here to start this off. >I think we want to have some requirement on efficiency -- I want to be >able to say things about length of signature chains in the solution. Added. >I think there is a requirement to base credentials on national number >delegation, and there is not a requirement for a golden root. Tried to get a starting bullet for this in there too. >I think we have agreed to remove caller name from the current effort. It is cut. Thanks again! > >Brian > > >_______________________________________________ >stir mailing list >stir@ietf.org >https://www.ietf.org/mailman/listinfo/stir From michael.hammer@yaanatech.com Mon Sep 30 06:28:25 2013 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B8B7E21F9C52 for ; Mon, 30 Sep 2013 06:28:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.16 X-Spam-Level: X-Spam-Status: No, score=-2.16 tagged_above=-999 required=5 tests=[AWL=0.439, BAYES_00=-2.599] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8C57WEKLpbYF for ; Mon, 30 Sep 2013 06:28:21 -0700 (PDT) Received: from email1.corp.yaanatech.com (webmail10.yaanatech.com [63.128.177.10]) by ietfa.amsl.com (Postfix) with ESMTP id 5955C21F8F09 for ; Mon, 30 Sep 2013 06:28:02 -0700 (PDT) Received: from SC9-EX2K10MB1.corp.yaanatech.com ([fe80::149d:c2e1:8065:2a47]) by ex2k10hub1.corp.yaanatech.com ([::1]) with mapi id 14.01.0218.012; Mon, 30 Sep 2013 06:28:01 -0700 From: Michael Hammer To: "Brian.Rosen@neustar.biz" , "stir@ietf.org" Thread-Topic: Comments on draft-peterson-secure-origin-ps-02 Thread-Index: AQHOuwFc5sUWnsuxSk6v27C4ehkcMJneSYcw Date: Mon, 30 Sep 2013 13:28:00 +0000 Message-ID: <00C069FD01E0324C9FFCADF539701DB3BBEDF4BB@sc9-ex2k10mb1.corp.yaanatech.com> References: <247485F3-14FA-499F-A38B-A03E9B948E9B@neustar.biz> In-Reply-To: <247485F3-14FA-499F-A38B-A03E9B948E9B@neustar.biz> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: x-originating-ip: [10.17.100.24] Content-Type: multipart/signed; boundary="----=_NextPart_000_0026_01CEBDBF.59919780"; protocol="application/x-pkcs7-signature"; micalg=SHA1 MIME-Version: 1.0 Subject: Re: [stir] Comments on draft-peterson-secure-origin-ps-02 X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 30 Sep 2013 13:28:25 -0000 ------=_NextPart_000_0026_01CEBDBF.59919780 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Brian, These statements are a bit contradictory: "I think we want to have some requirement on efficiency -- I want to be able to say things about length of signature chains in the solution. I think there is a requirement to base credentials on national number delegation, and there is not a requirement for a golden root." What do you mean by "golden root"? The root of trust here is the formal delegation from the national authority. If that isn't golden, then you are sliding down a slippery slope. If you want something more distributed, then you are going to create long signature chains, which should be a concern. Bottom line is that anyone in the world needs to know how to validate and where to go to get trusted information to do that. Trust gets diluted when the number of strangers involved goes up. Mike -----Original Message----- From: stir-bounces@ietf.org [mailto:stir-bounces@ietf.org] On Behalf Of Rosen, Brian Sent: Thursday, September 26, 2013 5:43 PM To: stir@ietf.org Mail List Subject: [stir] Comments on draft-peterson-secure-origin-ps-02 I think this is a good document and should be adopted by the work group. My comments: Abstract The sentence "However, interworking SIP with the traditional telephone network has ultimately reduced the security of Caller ID systems." implies that the interwork causes the problem. That's not the case. Perhaps something like "Unfortunately, the way SIP has been implemented, and the proliferation of SIP service providers who are not traditional telephony carriers has allowed unscrupulous callers to falsify calling party telephone numbers" Get rid of "therefore" in "This document therefore examines the reasons." Introduction The first two sentences both use "arises"; get rid of one of them The goal of these mechanisms is to validate that originator of a call is authorized to use the From identifier. is not true in the case of P-A-I. P-A-I assumes From can be wishful thinking and provides an alternative to From to identify the caller s/improve/improved/ in "little indication that it will be improve in the future" The sentence "In particular, the interworking with different communication architectures (e.g., SIP, PSTN, XMPP, RTCWeb) breaks the end-to-end semantic of the communication interaction and destroys the identification capabilities. " doesn't work for me. That isn't the reason we have the problem. We have the problem with all SIP, and have had fewer issues with all PSTN. The problem is the inability to trust that From is accurate and the inability to always have PAI, and have it be the desired TN. You could get into middle boxes and how they break SIP identity (or for that matter PAI) here. " Furthermore, the use of different identifiers (e.g., E.164 numbers vs. SIP URIs) creates challenges for determining who is able to claim "ownership" for a specific identifier. " is also problematic because we have DNS based ways of determining who can claim domain based identifiers, but don't for TN based identifiers. So, maybe "although domain based identifiers (sip:user@example.com) may use DNS based approaches to determine who is able to claim "ownership" of the URI, telephone numbers do not have any similar mechanism defined". Problem Statement While I like the explanation of the problem, I find the section lacking an actual statement of the problem. I would think we would want to carefully craft at least a paragraph of text that precisely defines what we are trying to do. Use cases In VoIP to VoIP, we have this fragment "a group of service providers that offer interconnected VoIP service exchange calls using SIP end- to-end, but may also deliver some calls via circuit-switched facilities, as described below." The "but.." clause isn't true, those cases are handled by different sections. In PSTN to VoIP, the note confuses me. Is it saying an IP-IP call with an SBC looks like a PSTN-IP call? Something else? Dunno, but make it more clear. I worry a bit about this case because unless the PSTN exit point is a carrier delegated the TN, it can't be signed by the GW. In VoIP to PSTN, I would appreciate flipping the diagram around so Alice is on the left. The first intro paragraph matches the diagram and the heading in saying its a call from Alice on a VoIP phone to Carl on a PSTN phone. But it then says Alice wants to know who she is talking to. That's called party (destination) identity, not part of this work, so far. I suspect you mean Carl wants to know who he is talking to. In all of these diagrams and explanations, you assume one VoIP provider. That limits the discussion of the solution space. If there are more than one SPs in the SIP path, any of them can verify the signature, and that would be very helpful. Limitations You describe PAI as being "where end-user devices cannot alter or inspect SIP messages" and then say "cannot offer any protection against identity spoofing by intermediaries or entities that allow end users to set the P -Asserted-Identity information". Can't have it both ways, either end users can set it or they can't. I think the problem is more that the network blindly trusts the From when setting PAI in too many cases; it does not verify that the From is correct, especially with enterprise customers who claim they need to assert any of their numbers. I have no doubt there are networks that allow their customers to send a PAI, but I don't think it's very common. I find the paragraph in SIP Identity that begins with "One of the main reasons that SIP deployments mimic the PSTN" not helpful. The first part seems to set something up, but doesn't provide a rational I understand, and the latter part is true, but not germane to the problem. It would seem to me that by the time you get to the discussion of SDP mangling, you should have said the work doesn't propose to do anything so stop MITM. That may be problematic given recent developments, but it is where we are. In "Public Key Infrastructure Developments" you have the first introduction of the delegation tree property of telephone numbers. This is such a fundamental concept to the solution that I would prefer to find a way to introduce it earlier on it's own - the basic notion that in every country, numbers are delegated in a formal (or formal + informal) way, with a per-country root of authority. You get to it later, but I found the first reference here to be underwhelming. At the very least, supply a forward reference, but I'd prefer to actually introduce the idea earlier in the document. In "Pervasive Nature of B2BUA Deployments", I think you should introduce the concept of a canonical TN. Explain that there are many ways numbers are represented, but they are convertible to a canonical e.164. If you didn't add a section, or change the title of this one, you could explain that one of the things B2BUAs do is rewrite numbers to mess with prefixes or add/subtract country codes. In "Relationship with number assignment and management" you don't cover number resell. I would add text that explains that while the initial assignments usually are constrained by formal processes, often with regulatory imperatives, in some countries, reselling of numbers using less formal processes is permitted. I might even observe that assignment is often in ranges, and also that an assignment to an enterprise looks like a resell. I would also note in this section that the permitted spoofing cases really are another form of delegation. Requirements I think there are more requirements. I think origination devices or service providers must be able to generate secure identities, and termination devices or service providers must be able to validate. I think we want to have some requirement on efficiency -- I want to be able to say things about length of signature chains in the solution. I think there is a requirement to base credentials on national number delegation, and there is not a requirement for a golden root. I think we have agreed to remove caller name from the current effort. Brian _______________________________________________ stir mailing list stir@ietf.org https://www.ietf.org/mailman/listinfo/stir ------=_NextPart_000_0026_01CEBDBF.59919780 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIRPzCCBBow ggMCAhEAi1t1VoRUhQsAz684SM6xpDANBgkqhkiG9w0BAQUFADCByjELMAkGA1UEBhMCVVMxFzAV BgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQLExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTow OAYDVQQLEzEoYykgMTk5OSBWZXJpU2lnbiwgSW5jLiAtIEZvciBhdXRob3JpemVkIHVzZSBvbmx5 MUUwQwYDVQQDEzxWZXJpU2lnbiBDbGFzcyAxIFB1YmxpYyBQcmltYXJ5IENlcnRpZmljYXRpb24g QXV0aG9yaXR5IC0gRzMwHhcNOTkxMDAxMDAwMDAwWhcNMzYwNzE2MjM1OTU5WjCByjELMAkGA1UE BhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQLExZWZXJpU2lnbiBUcnVzdCBO ZXR3b3JrMTowOAYDVQQLEzEoYykgMTk5OSBWZXJpU2lnbiwgSW5jLiAtIEZvciBhdXRob3JpemVk IHVzZSBvbmx5MUUwQwYDVQQDEzxWZXJpU2lnbiBDbGFzcyAxIFB1YmxpYyBQcmltYXJ5IENlcnRp ZmljYXRpb24gQXV0aG9yaXR5IC0gRzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd hNS5tPmn2PMEeJzePdxsExbZet0kUWbAxyZZDawGCMKU0TMf8IM1H24byN6qbhVOVCfvxG0a7Avj DvBEpVfHQFgeo0cfcexg9m2UyBg57f5CGFbf5ExJEHhOAXY1YxI23Wa8AQQ2o1Vo1aI2CayrISZU Bq0/yhTgrMqtBh2V4vid8eBg/8J/dStMzNr+h5kh6rr+PlTX0ll42zxuz6ATABq4J6HkvmeWyqDF s5zdyXWe6zCaX6PN2a54GT8j6VzbKb2tVcgbVIxj9uim6sc3ElyjKR4C2dsfO7TXD1ZHgRUESq+D J9HFWIjB3faqp6MY2miqbRFR4b9la5+WdtE9AgMBAAEwDQYJKoZIhvcNAQEFBQADggEBAKtmjdez useatuZV0AXxnzGNWqrZqkYmD3Htpa1TVmIBRypE6f4/dAsTm7n0TRuy0V+yttKIXLOfzcvUp9lg lYQ6+ME3HWHK57DF5ZHaVKasMYGul97NCKy4wJeAf25ypOdpE5VlH8STPP15jwTUPk/q957OzWd8 T2UC/5GFVHPH/zb3hi3s0F5P/xGfcgbWuBrxTA0mZeJEgB7Hn+Pd6Ara7KUggGlooU9+4WvPB0H6 g468ON2wLhGxa7JCzJq8+UgieUoZD7IcPiB02WrDvvIoeBNWeU9tUOobsLVXsTdmWCPz3A/fCofE 74YF1TgUYJmjS94GlnEs8tu2H6TvP+4wggZCMIIFKqADAgECAhA4qwAv/66Wt1b/OVr7XecbMA0G CSqGSIb3DQEBBQUAMIHKMQswCQYDVQQGEwJVUzEXMBUGA1UEChMOVmVyaVNpZ24sIEluYy4xHzAd BgNVBAsTFlZlcmlTaWduIFRydXN0IE5ldHdvcmsxOjA4BgNVBAsTMShjKSAxOTk5IFZlcmlTaWdu LCBJbmMuIC0gRm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxRTBDBgNVBAMTPFZlcmlTaWduIENsYXNz IDEgUHVibGljIFByaW1hcnkgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBHMzAeFw0xMTA5MDEw MDAwMDBaFw0yMTA4MzEyMzU5NTlaMIGmMQswCQYDVQQGEwJVUzEdMBsGA1UEChMUU3ltYW50ZWMg Q29ycG9yYXRpb24xHzAdBgNVBAsTFlN5bWFudGVjIFRydXN0IE5ldHdvcmsxHjAcBgNVBAsTFVBl cnNvbmEgTm90IFZhbGlkYXRlZDE3MDUGA1UEAxMuU3ltYW50ZWMgQ2xhc3MgMSBJbmRpdmlkdWFs IFN1YnNjcmliZXIgQ0EgLSBHNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMbsJ/0d Y/Q7HYrB0xzIyIKGtrhKhpKqgVxyyjANL55BIlcwISWQmqP0rCrGiBeGYXITdi7sA8snm48ggDfg 5IraVaZQD/y5XCNpiUKhuh+v7w75pMkK8fg3ssbZkkqufd+4RB+buj+MBv7YI09IUSNqYISo7icv YN+W8hoqjDyPAMxPy/ogjrw19uHwmrYF8/wdP8YUew7a8gXk04MCpsVpcLSp5Fbp2x1c9KY24mu1 Hiot3L677joEsDAIrV9obMa9BpaIhOfmqWQtvDgwu4gmw2dmZrS0d/nAoccOcu9m4uW5yuDzhXc1 mN7UHLD+ZnHiOMtufE9AVeuX2agYHu0CAwEAAaOCAkQwggJAMDgGCCsGAQUFBwEBBCwwKjAoBggr BgEFBQcwAYYcaHR0cDovL3BraS1vY3NwLnZlcmlzaWduLmNvbTASBgNVHRMBAf8ECDAGAQH/AgEA MGwGA1UdIARlMGMwYQYLYIZIAYb4RQEHFwEwUjAmBggrBgEFBQcCARYaaHR0cDovL3d3dy5zeW1h dXRoLmNvbS9jcHMwKAYIKwYBBQUHAgIwHBoaaHR0cDovL3d3dy5zeW1hdXRoLmNvbS9ycGEwNAYD VR0fBC0wKzApoCegJYYjaHR0cDovL2NybC52ZXJpc2lnbi5jb20vcGNhMS1nMy5jcmwwDgYDVR0P AQH/BAQDAgEGMCkGA1UdEQQiMCCkHjAcMRowGAYDVQQDExFWZXJpU2lnbk1QS0ktMi05NzAdBgNV HQ4EFgQUrfnDk3IttbkoYeSk12DVxApeGgEwgfEGA1UdIwSB6TCB5qGB0KSBzTCByjELMAkGA1UE BhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQLExZWZXJpU2lnbiBUcnVzdCBO ZXR3b3JrMTowOAYDVQQLEzEoYykgMTk5OSBWZXJpU2lnbiwgSW5jLiAtIEZvciBhdXRob3JpemVk IHVzZSBvbmx5MUUwQwYDVQQDEzxWZXJpU2lnbiBDbGFzcyAxIFB1YmxpYyBQcmltYXJ5IENlcnRp ZmljYXRpb24gQXV0aG9yaXR5IC0gRzOCEQCLW3VWhFSFCwDPrzhIzrGkMA0GCSqGSIb3DQEBBQUA A4IBAQDWj8Ham4jys2xNH1gvugFRXXTBRujDuHuf1kDx7/8yuolrwA40Q5+kmeak8F1IM2KFhWH+ I4gijGCbK5xlSZTEojgkSKVcpVBLaOliIqeT6Jkibj1buxBCDh9MdUc0VgmP+L2MPPNcu9KWcFRw Yk3v0RC+nUgsXuyGaweC8D3hJScoLOAWdh6z/eViltKKPV8rrvtcwhO3ZWPLNHZDn9aHmaturZXB AD9GJ4H/Nd4jDkPcFF8y+cop78JSMPWZ3bmB+DolII2CaPK5IYV0ZgThhjkWMvIt1iqoyd7ZAAJP 4xggxaWBVraV3tOCrfh7Jb5kfC6gunAs+Pl14nRNB22EMIIG1zCCBb+gAwIBAgIQEB3dROkPDT0Q 6QYEc74tcjANBgkqhkiG9w0BAQUFADCBpjELMAkGA1UEBhMCVVMxHTAbBgNVBAoTFFN5bWFudGVj IENvcnBvcmF0aW9uMR8wHQYDVQQLExZTeW1hbnRlYyBUcnVzdCBOZXR3b3JrMR4wHAYDVQQLExVQ ZXJzb25hIE5vdCBWYWxpZGF0ZWQxNzA1BgNVBAMTLlN5bWFudGVjIENsYXNzIDEgSW5kaXZpZHVh bCBTdWJzY3JpYmVyIENBIC0gRzQwHhcNMTMwNDAxMDAwMDAwWhcNMTQwNDAyMjM1OTU5WjCBzjEu MCwGA1UEAwwlUGVyc29uYSBOb3QgVmFsaWRhdGVkIC0gMTM2NDg0MjY5NDQ0MzErMCkGCSqGSIb3 DQEJARYcbWljaGFlbC5oYW1tZXJAeWFhbmF0ZWNoLmNvbTEPMA0GA1UECwwGUy9NSU1FMR4wHAYD VQQLDBVQZXJzb25hIE5vdCBWYWxpZGF0ZWQxHzAdBgNVBAsMFlN5bWFudGVjIFRydXN0IE5ldHdv cmsxHTAbBgNVBAoMFFN5bWFudGVjIENvcnBvcmF0aW9uMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAh2AtKQNowI8ILmNvdcY16moA8CH7hjSvGDNofwWsh4quEfZ6VQGtDhhOjUmW6JVq 719MH8FNJcVr8oAiVaK3nNeJTL2wO68LpgX6tcZ/z22pJoz98wHzgfWf3pfEUYrCqYg2V3m6oe0t kd+OaeY8DmPVSpG7as0rkoEzeNwCtmpYjkm96mBO6/AQwsowSLbSuqkEGykp1k47KiPBtxhbp2um IReh94vPrr1O9zXau9oGMvABJjigYQ2e5AhhhDdK8qOkhgkMAJN2nvLqY+VFrnFIsb5noQ/tP2M/ ct9qwRZ5kUaumRqE/XzV3rH8PoacZW/YvcwAp8Gr1ZaHCMRl+wIDAQABo4IC1TCCAtEwDAYDVR0T AQH/BAIwADAOBgNVHQ8BAf8EBAMCBaAwIAYDVR0lAQH/BBYwFAYIKwYBBQUHAwQGCCsGAQUFBwMC MB0GA1UdDgQWBBTlvYUx4PMlUy6uvceJkDMK4jBDZjAnBgNVHREEIDAegRxtaWNoYWVsLmhhbW1l ckB5YWFuYXRlY2guY29tMB8GA1UdIwQYMBaAFK35w5NyLbW5KGHkpNdg1cQKXhoBMIIBKwYIKwYB BQUHAQEEggEdMIIBGTCCARUGCCsGAQUFBzAChoIBB2xkYXA6Ly9kaXJlY3RvcnkudmVyaXNpZ24u Y29tL0NOJTIwJTNEJTIwU3ltYW50ZWMlMjBDbGFzcyUyMDElMjBJbmRpdmlkdWFsJTIwU3Vic2Ny aWJlciUyMENBJTIwLSUyMEc0JTJDJTIwT1UlMjAlM0QlMjBQZXJzb25hJTIwTm90JTIwVmFsaWRh dGVkJTJDJTIwT1UlMjAlM0QlMjBTeW1hbnRlYyUyMFRydXN0JTIwTmV0d29yayUyQyUyME8lMjAl M0QlMjBTeW1hbnRlYyUyMENvcnBvcmF0aW9uJTJDJTIwQyUyMCUzRCUyMFVTP2NBQ2VydGlmaWNh dGU7YmluYXJ5MF0GA1UdHwRWMFQwUqBQoE6GTGh0dHA6Ly9wa2ktY3JsLnN5bWF1dGguY29tL2Nh XzU2MWMxMDM2OTBjOTdhNjkyNDdhMGVmMDcxYWM4MWFmL0xhdGVzdENSTC5jcmwwbAYDVR0gBGUw YzBhBgtghkgBhvhFAQcXATBSMCYGCCsGAQUFBwIBFhpodHRwOi8vd3d3LnN5bWF1dGguY29tL2Nw czAoBggrBgEFBQcCAjAcGhpodHRwOi8vd3d3LnN5bWF1dGguY29tL3JwYTAqBgpghkgBhvhFARAD BBwwGgYRYIZIAYb4RQEQAQICBAGGsxcWBTEwOTIyMA0GCSqGSIb3DQEBBQUAA4IBAQAae/er4pfB TpqK6c/uJ9D8dVJzzNX26akkB8z/29totzbkpFAIlXRh02iNVK+GnsgS1gwu3FOvjgT5M4i+cNxD vTJVcnZNXns75JUGX3UsWQbtSySrVzQx8lMtwW6nXHM5GlEaY8/jKVpambG2q9OHjmwMTz7I4A+y KiiGCGdhE23dFOvku6t/oiwqFnXJmb4o75kbVevKEOd34MIj0P7Q8+1mZcNYEUTYKadoPXFyTWnO 2HTMvFcGgdLFKcqb13clWeW3/B5WjdBimpMjbvwi8ZbrhFdp7Y3NLKFSRH8W29rt0LW7zULxii0z 34NGsBkW9w95PLzTsqmKD4Yv5AkIMYIEkjCCBI4CAQEwgbswgaYxCzAJBgNVBAYTAlVTMR0wGwYD VQQKExRTeW1hbnRlYyBDb3Jwb3JhdGlvbjEfMB0GA1UECxMWU3ltYW50ZWMgVHJ1c3QgTmV0d29y azEeMBwGA1UECxMVUGVyc29uYSBOb3QgVmFsaWRhdGVkMTcwNQYDVQQDEy5TeW1hbnRlYyBDbGFz cyAxIEluZGl2aWR1YWwgU3Vic2NyaWJlciBDQSAtIEc0AhAQHd1E6Q8NPRDpBgRzvi1yMAkGBSsO AwIaBQCgggKrMBgGCSqGSIb3DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTEzMDkz MDEzMjc1N1owIwYJKoZIhvcNAQkEMRYEFIDUpClj7d7ONBrbju4nWYmZ5JMcMIGrBgkqhkiG9w0B CQ8xgZ0wgZowCwYJYIZIAWUDBAEqMAsGCWCGSAFlAwQBFjAKBggqhkiG9w0DBzALBglghkgBZQME AQIwDgYIKoZIhvcNAwICAgCAMAcGBSsOAwIHMA0GCCqGSIb3DQMCAgFAMA0GCCqGSIb3DQMCAgEo MAcGBSsOAwIaMAsGCWCGSAFlAwQCAzALBglghkgBZQMEAgIwCwYJYIZIAWUDBAIBMIHMBgkrBgEE AYI3EAQxgb4wgbswgaYxCzAJBgNVBAYTAlVTMR0wGwYDVQQKExRTeW1hbnRlYyBDb3Jwb3JhdGlv bjEfMB0GA1UECxMWU3ltYW50ZWMgVHJ1c3QgTmV0d29yazEeMBwGA1UECxMVUGVyc29uYSBOb3Qg VmFsaWRhdGVkMTcwNQYDVQQDEy5TeW1hbnRlYyBDbGFzcyAxIEluZGl2aWR1YWwgU3Vic2NyaWJl ciBDQSAtIEc0AhAQHd1E6Q8NPRDpBgRzvi1yMIHOBgsqhkiG9w0BCRACCzGBvqCBuzCBpjELMAkG A1UEBhMCVVMxHTAbBgNVBAoTFFN5bWFudGVjIENvcnBvcmF0aW9uMR8wHQYDVQQLExZTeW1hbnRl YyBUcnVzdCBOZXR3b3JrMR4wHAYDVQQLExVQZXJzb25hIE5vdCBWYWxpZGF0ZWQxNzA1BgNVBAMT LlN5bWFudGVjIENsYXNzIDEgSW5kaXZpZHVhbCBTdWJzY3JpYmVyIENBIC0gRzQCEBAd3UTpDw09 EOkGBHO+LXIwDQYJKoZIhvcNAQEBBQAEggEAUXYLEef7e5Q03gtli1ZHrihFsT7sC+7RgmOyBsAa /CrCx6gULGzpkg4KCJYm7uJJC2PE7BlxNvY0a0m6H4oqjxKy7tK5w7oRAHij2yxhGn3WhWfiETuI SpnHEar8+8g9ujw5majHRe2YAZiqnHg/Vkb/nDVN0wxM4BwoUWdnJWshQw7e1eAAIslxOOcyAHdS nC4hmif0yL9aTnUdA9BGq/zMdVIRN4ULpHQuvNVj2GDB+3ztgKxIWCSG52gwIWLLZYokT8xW976U CJevGlbhL9zDNV+sBInpvFCbgM0dYsqXc2UZspT8DNgZKV7Qhjd6wofwqxgUHceppzYBfHLXsAAA AAAAAA== ------=_NextPart_000_0026_01CEBDBF.59919780-- From brian.rosen@neustar.biz Mon Sep 30 06:50:02 2013 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9F14E21F90FD for ; Mon, 30 Sep 2013 06:50:02 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8Em3Ycakq6HF for ; Mon, 30 Sep 2013 06:49:58 -0700 (PDT) Received: from neustar.com (mx1.neustar.com [156.154.17.104]) by ietfa.amsl.com (Postfix) with ESMTP id 43A9521F8F29 for ; Mon, 30 Sep 2013 06:49:58 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=neustar.biz; s=neustarbiz; t=1380549563; x=1695888366; q=dns/txt; h=From:Subject:Date:Message-ID:Content-Language: Content-Type:Content-ID:Content-Transfer-Encoding; bh=L945NLpsB+ NWjuMeqourxwR1j0gf9AaIe4oustNx5Ag=; b=WwPR51NFORPJ/Ao4w1CU3IVZkt xieX+7B1RZD7SMuMTjSiU2YsOEmxVjUTC1KQzubRR7VaAKhB+q0RmOtLovAQ== Received: from ([10.31.58.71]) by stihiron1.va.neustar.com with ESMTP with TLS id J041124052.32798564; Mon, 30 Sep 2013 09:59:22 -0400 Received: from STNTEXMB13.cis.neustar.com ([169.254.3.127]) by stntexhc12.cis.neustar.com ([::1]) with mapi id 14.02.0342.003; Mon, 30 Sep 2013 09:49:36 -0400 From: "Rosen, Brian" To: Michael Hammer Thread-Topic: Comments on draft-peterson-secure-origin-ps-02 Thread-Index: AQHOuwFc5sUWnsuxSk6v27C4ehkcMJneSYcwgABLUQA= Date: Mon, 30 Sep 2013 13:49:36 +0000 Message-ID: <66F11C17-E03C-47E2-AFAB-D9821D55760B@neustar.biz> References: <247485F3-14FA-499F-A38B-A03E9B948E9B@neustar.biz> <00C069FD01E0324C9FFCADF539701DB3BBEDF4BB@sc9-ex2k10mb1.corp.yaanatech.com> In-Reply-To: <00C069FD01E0324C9FFCADF539701DB3BBEDF4BB@sc9-ex2k10mb1.corp.yaanatech.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [192.168.128.61] x-ems-proccessed: R64IxjzeHPwwd+efoj3ZcA== x-ems-stamp: rLx3ZjP9+slyHbv6MS4K4g== Content-Type: text/plain; charset="us-ascii" Content-ID: Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Cc: "stir@ietf.org" Subject: Re: [stir] Comments on draft-peterson-secure-origin-ps-02 X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 30 Sep 2013 13:50:02 -0000 By "Golden Root", I meant a global root, not a national root.=20 We've had bad experiences trying to establish global roots. I expect we can use something like the LoST Forest Guide to figure out wher= e the database for a given country can be found. Then I hope it's mostly o= ne database per country. What I don't want to see is a signature chain on = each level of delegation that has to be checked serially to determine if th= e signature is valid. Brian On Sep 30, 2013, at 9:28 AM, Michael Hammer wrote: > Brian, >=20 > These statements are a bit contradictory: > "I think we want to have some requirement on efficiency -- I want to be > able to say things about length of signature chains in the solution. > I think there is a requirement to base credentials on national number > delegation, and there is not a requirement for a golden root." >=20 > What do you mean by "golden root"? >=20 > The root of trust here is the formal delegation from the national authori= ty. > If that isn't golden, then you are sliding down a slippery slope. > If you want something more distributed, then you are going to create long > signature chains, which should be a concern. > Bottom line is that anyone in the world needs to know how to validate and > where to go to get trusted information to do that. > Trust gets diluted when the number of strangers involved goes up. >=20 > Mike >=20 >=20 > -----Original Message----- > From: stir-bounces@ietf.org [mailto:stir-bounces@ietf.org] On Behalf Of > Rosen, Brian > Sent: Thursday, September 26, 2013 5:43 PM > To: stir@ietf.org Mail List > Subject: [stir] Comments on draft-peterson-secure-origin-ps-02 >=20 > I think this is a good document and should be adopted by the work group. >=20 > My comments: > Abstract > The sentence "However, interworking SIP with the > traditional telephone network has ultimately reduced the security of > Caller ID systems." implies that the interwork causes the problem. > That's not the case. Perhaps something like "Unfortunately, the way SIP = has > been implemented, and the proliferation of SIP service providers who are = not > traditional telephony carriers has allowed unscrupulous callers to falsif= y > calling party telephone numbers" >=20 > Get rid of "therefore" in "This document therefore examines the reasons." >=20 > Introduction > The first two sentences both use "arises"; get rid of one of them >=20 > The goal of these mechanisms > is to validate that originator of a call is authorized to use the > From identifier. >=20 > is not true in the case of P-A-I. P-A-I assumes From can be wishful > thinking and provides an alternative to From to identify the caller >=20 > s/improve/improved/ in "little indication that it will be improve in the > future" >=20 > The sentence "In particular, the interworking > with different communication architectures (e.g., SIP, PSTN, XMPP, > RTCWeb) breaks the end-to-end semantic of the communication > interaction and destroys the identification capabilities. > " > doesn't work for me. That isn't the reason we have the problem. We have > the problem with all SIP, and have had fewer issues with all PSTN. The > problem is the inability to trust that From is accurate and the inability= to > always have PAI, and have it be the desired TN. You could get into middl= e > boxes and how they break SIP identity (or for that matter PAI) here. >=20 > " Furthermore, the use of different identifiers (e.g., E.164 numbers > vs. SIP URIs) creates challenges for determining who is able to claim > "ownership" for a specific identifier. > " > is also problematic because we have DNS based ways of determining who can > claim domain based identifiers, but don't for TN based identifiers. > So, maybe "although domain based identifiers (sip:user@example.com) may u= se > DNS based approaches to determine who is able to claim "ownership" of the > URI, telephone numbers do not have any similar mechanism defined". >=20 > Problem Statement > While I like the explanation of the problem, I find the section lacking a= n > actual statement of the problem. I would think we would want to carefull= y > craft at least a paragraph of text that precisely defines what we are try= ing > to do. >=20 > Use cases > In VoIP to VoIP, we have this fragment "a group of service providers > that offer interconnected VoIP service exchange calls using SIP end- > to-end, but may also deliver some calls via circuit-switched > facilities, as described below." >=20 > The "but.." clause isn't true, those cases are handled by different > sections. >=20 > In PSTN to VoIP, the note confuses me. Is it saying an IP-IP call with a= n > SBC looks like a PSTN-IP call? Something else? Dunno, but make it more > clear. =20 >=20 > I worry a bit about this case because unless the PSTN exit point is a > carrier delegated the TN, it can't be signed by the GW. >=20 > In VoIP to PSTN, I would appreciate flipping the diagram around so Alice = is > on the left. The first intro paragraph matches the diagram and the headi= ng > in saying its a call from Alice on a VoIP phone to Carl on a PSTN phone. > But it then says Alice wants to know who she is talking to. That's calle= d > party (destination) identity, not part of this work, so far. I suspect y= ou > mean Carl wants to know who he is talking to. >=20 > In all of these diagrams and explanations, you assume one VoIP provider. > That limits the discussion of the solution space. If there are more than > one SPs in the SIP path, any of them can verify the signature, and that > would be very helpful. =20 >=20 > Limitations > You describe PAI as being "where end-user devices cannot alter or inspect > SIP messages" and then say "cannot offer any protection against identity > spoofing by intermediaries or entities that allow end users to set the P > -Asserted-Identity information". Can't have it both ways, either end use= rs > can set it or they can't. I think the problem is more that the network > blindly trusts the From when setting PAI in too many cases; it does not > verify that the From is correct, especially with enterprise customers who > claim they need to assert any of their numbers. I have no doubt there ar= e > networks that allow their customers to send a PAI, but I don't think it's > very common. >=20 > I find the paragraph in SIP Identity that begins with "One of the main > reasons that SIP deployments mimic the PSTN" not helpful. The first part > seems to set something up, but doesn't provide a rational I understand, a= nd > the latter part is true, but not germane to the problem. >=20 > It would seem to me that by the time you get to the discussion of SDP > mangling, you should have said the work doesn't propose to do anything so > stop MITM. That may be problematic given recent developments, but it is > where we are. >=20 > In "Public Key Infrastructure Developments" you have the first introducti= on > of the delegation tree property of telephone numbers. This is such a > fundamental concept to the solution that I would prefer to find a way to > introduce it earlier on it's own - the basic notion that in every country= , > numbers are delegated in a formal (or formal + informal) way, with a > per-country root of authority. You get to it later, but I found the firs= t > reference here to be underwhelming. At the very least, supply a forward > reference, but I'd prefer to actually introduce the idea earlier in the > document. >=20 > In "Pervasive Nature of B2BUA Deployments", I think you should introduce = the > concept of a canonical TN. Explain that there are many ways numbers are > represented, but they are convertible to a canonical e.164. If you didn'= t > add a section, or change the title of this one, you could explain that on= e > of the things B2BUAs do is rewrite numbers to mess with prefixes or > add/subtract country codes.=20 >=20 > In "Relationship with number assignment and management" you don't cover > number resell. I would add text that explains that while the initial > assignments usually are constrained by formal processes, often with > regulatory imperatives, in some countries, reselling of numbers using les= s > formal processes is permitted. I might even observe that assignment is > often in ranges, and also that an assignment to an enterprise looks like = a > resell. I would also note in this section that the permitted spoofing ca= ses > really are another form of delegation. >=20 >=20 > Requirements >=20 > I think there are more requirements. I think origination devices or serv= ice > providers must be able to generate secure identities, and termination > devices or service providers must be able to validate. >=20 > I think we want to have some requirement on efficiency -- I want to be a= ble > to say things about length of signature chains in the solution. >=20 > I think there is a requirement to base credentials on national number > delegation, and there is not a requirement for a golden root. >=20 > I think we have agreed to remove caller name from the current effort. >=20 >=20 > Brian >=20 >=20 > _______________________________________________ > stir mailing list > stir@ietf.org > https://www.ietf.org/mailman/listinfo/stir From michael.hammer@yaanatech.com Mon Sep 30 07:26:05 2013 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EEB1B21F9D30 for ; Mon, 30 Sep 2013 07:26:04 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.306 X-Spam-Level: X-Spam-Status: No, score=-2.306 tagged_above=-999 required=5 tests=[AWL=0.293, BAYES_00=-2.599] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GWe+6GDti3op for ; Mon, 30 Sep 2013 07:26:00 -0700 (PDT) Received: from email1.corp.yaanatech.com (webmail10.yaanatech.com [63.128.177.10]) by ietfa.amsl.com (Postfix) with ESMTP id CE25E21F9BF7 for ; Mon, 30 Sep 2013 07:25:51 -0700 (PDT) Received: from SC9-EX2K10MB1.corp.yaanatech.com ([fe80::149d:c2e1:8065:2a47]) by ex2k10hub1.corp.yaanatech.com ([::1]) with mapi id 14.01.0218.012; Mon, 30 Sep 2013 07:25:46 -0700 From: Michael Hammer To: "Brian.Rosen@neustar.biz" Thread-Topic: Comments on draft-peterson-secure-origin-ps-02 Thread-Index: AQHOuwFc5sUWnsuxSk6v27C4ehkcMJneSYcwgABLUQD//8b7IA== Date: Mon, 30 Sep 2013 14:25:46 +0000 Message-ID: <00C069FD01E0324C9FFCADF539701DB3BBEDF5D1@sc9-ex2k10mb1.corp.yaanatech.com> References: <247485F3-14FA-499F-A38B-A03E9B948E9B@neustar.biz> <00C069FD01E0324C9FFCADF539701DB3BBEDF4BB@sc9-ex2k10mb1.corp.yaanatech.com> <66F11C17-E03C-47E2-AFAB-D9821D55760B@neustar.biz> In-Reply-To: <66F11C17-E03C-47E2-AFAB-D9821D55760B@neustar.biz> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: x-originating-ip: [10.17.100.24] Content-Type: multipart/signed; boundary="----=_NextPart_000_0037_01CEBDC7.6C69FCF0"; protocol="application/x-pkcs7-signature"; micalg=SHA1 MIME-Version: 1.0 Cc: "stir@ietf.org" Subject: Re: [stir] Comments on draft-peterson-secure-origin-ps-02 X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 30 Sep 2013 14:26:05 -0000 ------=_NextPart_000_0037_01CEBDC7.6C69FCF0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Thanks, that helps. Mike -----Original Message----- From: Rosen, Brian [mailto:Brian.Rosen@neustar.biz] Sent: Monday, September 30, 2013 9:50 AM To: Michael Hammer Cc: stir@ietf.org Subject: Re: Comments on draft-peterson-secure-origin-ps-02 By "Golden Root", I meant a global root, not a national root. We've had bad experiences trying to establish global roots. I expect we can use something like the LoST Forest Guide to figure out where the database for a given country can be found. Then I hope it's mostly one database per country. What I don't want to see is a signature chain on each level of delegation that has to be checked serially to determine if the signature is valid. Brian On Sep 30, 2013, at 9:28 AM, Michael Hammer wrote: > Brian, > > These statements are a bit contradictory: > "I think we want to have some requirement on efficiency -- I want to > be able to say things about length of signature chains in the solution. > I think there is a requirement to base credentials on national number > delegation, and there is not a requirement for a golden root." > > What do you mean by "golden root"? > > The root of trust here is the formal delegation from the national authority. > If that isn't golden, then you are sliding down a slippery slope. > If you want something more distributed, then you are going to create > long signature chains, which should be a concern. > Bottom line is that anyone in the world needs to know how to validate > and where to go to get trusted information to do that. > Trust gets diluted when the number of strangers involved goes up. > > Mike > > > -----Original Message----- > From: stir-bounces@ietf.org [mailto:stir-bounces@ietf.org] On Behalf > Of Rosen, Brian > Sent: Thursday, September 26, 2013 5:43 PM > To: stir@ietf.org Mail List > Subject: [stir] Comments on draft-peterson-secure-origin-ps-02 > > I think this is a good document and should be adopted by the work group. > > My comments: > Abstract > The sentence "However, interworking SIP with the > traditional telephone network has ultimately reduced the security of > Caller ID systems." implies that the interwork causes the problem. > That's not the case. Perhaps something like "Unfortunately, the way > SIP has been implemented, and the proliferation of SIP service > providers who are not traditional telephony carriers has allowed > unscrupulous callers to falsify calling party telephone numbers" > > Get rid of "therefore" in "This document therefore examines the reasons." > > Introduction > The first two sentences both use "arises"; get rid of one of them > > The goal of these mechanisms > is to validate that originator of a call is authorized to use the > From identifier. > > is not true in the case of P-A-I. P-A-I assumes From can be wishful > thinking and provides an alternative to From to identify the caller > > s/improve/improved/ in "little indication that it will be improve in > the future" > > The sentence "In particular, the interworking > with different communication architectures (e.g., SIP, PSTN, XMPP, > RTCWeb) breaks the end-to-end semantic of the communication > interaction and destroys the identification capabilities. > " > doesn't work for me. That isn't the reason we have the problem. We > have the problem with all SIP, and have had fewer issues with all > PSTN. The problem is the inability to trust that From is accurate and > the inability to always have PAI, and have it be the desired TN. You > could get into middle boxes and how they break SIP identity (or for that matter PAI) here. > > " Furthermore, the use of different identifiers (e.g., E.164 numbers > vs. SIP URIs) creates challenges for determining who is able to claim > "ownership" for a specific identifier. > " > is also problematic because we have DNS based ways of determining who > can claim domain based identifiers, but don't for TN based identifiers. > So, maybe "although domain based identifiers (sip:user@example.com) > may use DNS based approaches to determine who is able to claim > "ownership" of the URI, telephone numbers do not have any similar mechanism defined". > > Problem Statement > While I like the explanation of the problem, I find the section > lacking an actual statement of the problem. I would think we would > want to carefully craft at least a paragraph of text that precisely > defines what we are trying to do. > > Use cases > In VoIP to VoIP, we have this fragment "a group of service providers > that offer interconnected VoIP service exchange calls using SIP end- > to-end, but may also deliver some calls via circuit-switched > facilities, as described below." > > The "but.." clause isn't true, those cases are handled by different > sections. > > In PSTN to VoIP, the note confuses me. Is it saying an IP-IP call > with an SBC looks like a PSTN-IP call? Something else? Dunno, but > make it more clear. > > I worry a bit about this case because unless the PSTN exit point is a > carrier delegated the TN, it can't be signed by the GW. > > In VoIP to PSTN, I would appreciate flipping the diagram around so > Alice is on the left. The first intro paragraph matches the diagram > and the heading in saying its a call from Alice on a VoIP phone to Carl on a PSTN phone. > But it then says Alice wants to know who she is talking to. That's > called party (destination) identity, not part of this work, so far. I > suspect you mean Carl wants to know who he is talking to. > > In all of these diagrams and explanations, you assume one VoIP provider. > That limits the discussion of the solution space. If there are more > than one SPs in the SIP path, any of them can verify the signature, > and that would be very helpful. > > Limitations > You describe PAI as being "where end-user devices cannot alter or > inspect SIP messages" and then say "cannot offer any protection > against identity spoofing by intermediaries or entities that allow end > users to set the P -Asserted-Identity information". Can't have it > both ways, either end users can set it or they can't. I think the > problem is more that the network blindly trusts the From when setting > PAI in too many cases; it does not verify that the From is correct, > especially with enterprise customers who claim they need to assert any > of their numbers. I have no doubt there are networks that allow their > customers to send a PAI, but I don't think it's very common. > > I find the paragraph in SIP Identity that begins with "One of the main > reasons that SIP deployments mimic the PSTN" not helpful. The first > part seems to set something up, but doesn't provide a rational I > understand, and the latter part is true, but not germane to the problem. > > It would seem to me that by the time you get to the discussion of SDP > mangling, you should have said the work doesn't propose to do anything > so stop MITM. That may be problematic given recent developments, but > it is where we are. > > In "Public Key Infrastructure Developments" you have the first > introduction of the delegation tree property of telephone numbers. > This is such a fundamental concept to the solution that I would prefer > to find a way to introduce it earlier on it's own - the basic notion > that in every country, numbers are delegated in a formal (or formal + > informal) way, with a per-country root of authority. You get to it > later, but I found the first reference here to be underwhelming. At > the very least, supply a forward reference, but I'd prefer to actually > introduce the idea earlier in the document. > > In "Pervasive Nature of B2BUA Deployments", I think you should > introduce the concept of a canonical TN. Explain that there are many > ways numbers are represented, but they are convertible to a canonical > e.164. If you didn't add a section, or change the title of this one, > you could explain that one of the things B2BUAs do is rewrite numbers > to mess with prefixes or add/subtract country codes. > > In "Relationship with number assignment and management" you don't > cover number resell. I would add text that explains that while the > initial assignments usually are constrained by formal processes, often > with regulatory imperatives, in some countries, reselling of numbers > using less formal processes is permitted. I might even observe that > assignment is often in ranges, and also that an assignment to an > enterprise looks like a resell. I would also note in this section > that the permitted spoofing cases really are another form of delegation. > > > Requirements > > I think there are more requirements. I think origination devices or > service providers must be able to generate secure identities, and > termination devices or service providers must be able to validate. > > I think we want to have some requirement on efficiency -- I want to > be able to say things about length of signature chains in the solution. > > I think there is a requirement to base credentials on national number > delegation, and there is not a requirement for a golden root. > > I think we have agreed to remove caller name from the current effort. > > > Brian > > > _______________________________________________ > stir mailing list > stir@ietf.org > https://www.ietf.org/mailman/listinfo/stir ------=_NextPart_000_0037_01CEBDC7.6C69FCF0 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIRPzCCBBow ggMCAhEAi1t1VoRUhQsAz684SM6xpDANBgkqhkiG9w0BAQUFADCByjELMAkGA1UEBhMCVVMxFzAV BgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQLExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTow OAYDVQQLEzEoYykgMTk5OSBWZXJpU2lnbiwgSW5jLiAtIEZvciBhdXRob3JpemVkIHVzZSBvbmx5 MUUwQwYDVQQDEzxWZXJpU2lnbiBDbGFzcyAxIFB1YmxpYyBQcmltYXJ5IENlcnRpZmljYXRpb24g QXV0aG9yaXR5IC0gRzMwHhcNOTkxMDAxMDAwMDAwWhcNMzYwNzE2MjM1OTU5WjCByjELMAkGA1UE BhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQLExZWZXJpU2lnbiBUcnVzdCBO ZXR3b3JrMTowOAYDVQQLEzEoYykgMTk5OSBWZXJpU2lnbiwgSW5jLiAtIEZvciBhdXRob3JpemVk IHVzZSBvbmx5MUUwQwYDVQQDEzxWZXJpU2lnbiBDbGFzcyAxIFB1YmxpYyBQcmltYXJ5IENlcnRp ZmljYXRpb24gQXV0aG9yaXR5IC0gRzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd hNS5tPmn2PMEeJzePdxsExbZet0kUWbAxyZZDawGCMKU0TMf8IM1H24byN6qbhVOVCfvxG0a7Avj DvBEpVfHQFgeo0cfcexg9m2UyBg57f5CGFbf5ExJEHhOAXY1YxI23Wa8AQQ2o1Vo1aI2CayrISZU Bq0/yhTgrMqtBh2V4vid8eBg/8J/dStMzNr+h5kh6rr+PlTX0ll42zxuz6ATABq4J6HkvmeWyqDF s5zdyXWe6zCaX6PN2a54GT8j6VzbKb2tVcgbVIxj9uim6sc3ElyjKR4C2dsfO7TXD1ZHgRUESq+D J9HFWIjB3faqp6MY2miqbRFR4b9la5+WdtE9AgMBAAEwDQYJKoZIhvcNAQEFBQADggEBAKtmjdez useatuZV0AXxnzGNWqrZqkYmD3Htpa1TVmIBRypE6f4/dAsTm7n0TRuy0V+yttKIXLOfzcvUp9lg lYQ6+ME3HWHK57DF5ZHaVKasMYGul97NCKy4wJeAf25ypOdpE5VlH8STPP15jwTUPk/q957OzWd8 T2UC/5GFVHPH/zb3hi3s0F5P/xGfcgbWuBrxTA0mZeJEgB7Hn+Pd6Ara7KUggGlooU9+4WvPB0H6 g468ON2wLhGxa7JCzJq8+UgieUoZD7IcPiB02WrDvvIoeBNWeU9tUOobsLVXsTdmWCPz3A/fCofE 74YF1TgUYJmjS94GlnEs8tu2H6TvP+4wggZCMIIFKqADAgECAhA4qwAv/66Wt1b/OVr7XecbMA0G CSqGSIb3DQEBBQUAMIHKMQswCQYDVQQGEwJVUzEXMBUGA1UEChMOVmVyaVNpZ24sIEluYy4xHzAd BgNVBAsTFlZlcmlTaWduIFRydXN0IE5ldHdvcmsxOjA4BgNVBAsTMShjKSAxOTk5IFZlcmlTaWdu LCBJbmMuIC0gRm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxRTBDBgNVBAMTPFZlcmlTaWduIENsYXNz IDEgUHVibGljIFByaW1hcnkgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBHMzAeFw0xMTA5MDEw MDAwMDBaFw0yMTA4MzEyMzU5NTlaMIGmMQswCQYDVQQGEwJVUzEdMBsGA1UEChMUU3ltYW50ZWMg Q29ycG9yYXRpb24xHzAdBgNVBAsTFlN5bWFudGVjIFRydXN0IE5ldHdvcmsxHjAcBgNVBAsTFVBl cnNvbmEgTm90IFZhbGlkYXRlZDE3MDUGA1UEAxMuU3ltYW50ZWMgQ2xhc3MgMSBJbmRpdmlkdWFs IFN1YnNjcmliZXIgQ0EgLSBHNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMbsJ/0d Y/Q7HYrB0xzIyIKGtrhKhpKqgVxyyjANL55BIlcwISWQmqP0rCrGiBeGYXITdi7sA8snm48ggDfg 5IraVaZQD/y5XCNpiUKhuh+v7w75pMkK8fg3ssbZkkqufd+4RB+buj+MBv7YI09IUSNqYISo7icv YN+W8hoqjDyPAMxPy/ogjrw19uHwmrYF8/wdP8YUew7a8gXk04MCpsVpcLSp5Fbp2x1c9KY24mu1 Hiot3L677joEsDAIrV9obMa9BpaIhOfmqWQtvDgwu4gmw2dmZrS0d/nAoccOcu9m4uW5yuDzhXc1 mN7UHLD+ZnHiOMtufE9AVeuX2agYHu0CAwEAAaOCAkQwggJAMDgGCCsGAQUFBwEBBCwwKjAoBggr BgEFBQcwAYYcaHR0cDovL3BraS1vY3NwLnZlcmlzaWduLmNvbTASBgNVHRMBAf8ECDAGAQH/AgEA MGwGA1UdIARlMGMwYQYLYIZIAYb4RQEHFwEwUjAmBggrBgEFBQcCARYaaHR0cDovL3d3dy5zeW1h dXRoLmNvbS9jcHMwKAYIKwYBBQUHAgIwHBoaaHR0cDovL3d3dy5zeW1hdXRoLmNvbS9ycGEwNAYD VR0fBC0wKzApoCegJYYjaHR0cDovL2NybC52ZXJpc2lnbi5jb20vcGNhMS1nMy5jcmwwDgYDVR0P AQH/BAQDAgEGMCkGA1UdEQQiMCCkHjAcMRowGAYDVQQDExFWZXJpU2lnbk1QS0ktMi05NzAdBgNV HQ4EFgQUrfnDk3IttbkoYeSk12DVxApeGgEwgfEGA1UdIwSB6TCB5qGB0KSBzTCByjELMAkGA1UE BhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQLExZWZXJpU2lnbiBUcnVzdCBO ZXR3b3JrMTowOAYDVQQLEzEoYykgMTk5OSBWZXJpU2lnbiwgSW5jLiAtIEZvciBhdXRob3JpemVk IHVzZSBvbmx5MUUwQwYDVQQDEzxWZXJpU2lnbiBDbGFzcyAxIFB1YmxpYyBQcmltYXJ5IENlcnRp ZmljYXRpb24gQXV0aG9yaXR5IC0gRzOCEQCLW3VWhFSFCwDPrzhIzrGkMA0GCSqGSIb3DQEBBQUA A4IBAQDWj8Ham4jys2xNH1gvugFRXXTBRujDuHuf1kDx7/8yuolrwA40Q5+kmeak8F1IM2KFhWH+ I4gijGCbK5xlSZTEojgkSKVcpVBLaOliIqeT6Jkibj1buxBCDh9MdUc0VgmP+L2MPPNcu9KWcFRw Yk3v0RC+nUgsXuyGaweC8D3hJScoLOAWdh6z/eViltKKPV8rrvtcwhO3ZWPLNHZDn9aHmaturZXB AD9GJ4H/Nd4jDkPcFF8y+cop78JSMPWZ3bmB+DolII2CaPK5IYV0ZgThhjkWMvIt1iqoyd7ZAAJP 4xggxaWBVraV3tOCrfh7Jb5kfC6gunAs+Pl14nRNB22EMIIG1zCCBb+gAwIBAgIQEB3dROkPDT0Q 6QYEc74tcjANBgkqhkiG9w0BAQUFADCBpjELMAkGA1UEBhMCVVMxHTAbBgNVBAoTFFN5bWFudGVj IENvcnBvcmF0aW9uMR8wHQYDVQQLExZTeW1hbnRlYyBUcnVzdCBOZXR3b3JrMR4wHAYDVQQLExVQ ZXJzb25hIE5vdCBWYWxpZGF0ZWQxNzA1BgNVBAMTLlN5bWFudGVjIENsYXNzIDEgSW5kaXZpZHVh bCBTdWJzY3JpYmVyIENBIC0gRzQwHhcNMTMwNDAxMDAwMDAwWhcNMTQwNDAyMjM1OTU5WjCBzjEu MCwGA1UEAwwlUGVyc29uYSBOb3QgVmFsaWRhdGVkIC0gMTM2NDg0MjY5NDQ0MzErMCkGCSqGSIb3 DQEJARYcbWljaGFlbC5oYW1tZXJAeWFhbmF0ZWNoLmNvbTEPMA0GA1UECwwGUy9NSU1FMR4wHAYD VQQLDBVQZXJzb25hIE5vdCBWYWxpZGF0ZWQxHzAdBgNVBAsMFlN5bWFudGVjIFRydXN0IE5ldHdv cmsxHTAbBgNVBAoMFFN5bWFudGVjIENvcnBvcmF0aW9uMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAh2AtKQNowI8ILmNvdcY16moA8CH7hjSvGDNofwWsh4quEfZ6VQGtDhhOjUmW6JVq 719MH8FNJcVr8oAiVaK3nNeJTL2wO68LpgX6tcZ/z22pJoz98wHzgfWf3pfEUYrCqYg2V3m6oe0t kd+OaeY8DmPVSpG7as0rkoEzeNwCtmpYjkm96mBO6/AQwsowSLbSuqkEGykp1k47KiPBtxhbp2um IReh94vPrr1O9zXau9oGMvABJjigYQ2e5AhhhDdK8qOkhgkMAJN2nvLqY+VFrnFIsb5noQ/tP2M/ ct9qwRZ5kUaumRqE/XzV3rH8PoacZW/YvcwAp8Gr1ZaHCMRl+wIDAQABo4IC1TCCAtEwDAYDVR0T AQH/BAIwADAOBgNVHQ8BAf8EBAMCBaAwIAYDVR0lAQH/BBYwFAYIKwYBBQUHAwQGCCsGAQUFBwMC MB0GA1UdDgQWBBTlvYUx4PMlUy6uvceJkDMK4jBDZjAnBgNVHREEIDAegRxtaWNoYWVsLmhhbW1l ckB5YWFuYXRlY2guY29tMB8GA1UdIwQYMBaAFK35w5NyLbW5KGHkpNdg1cQKXhoBMIIBKwYIKwYB BQUHAQEEggEdMIIBGTCCARUGCCsGAQUFBzAChoIBB2xkYXA6Ly9kaXJlY3RvcnkudmVyaXNpZ24u Y29tL0NOJTIwJTNEJTIwU3ltYW50ZWMlMjBDbGFzcyUyMDElMjBJbmRpdmlkdWFsJTIwU3Vic2Ny aWJlciUyMENBJTIwLSUyMEc0JTJDJTIwT1UlMjAlM0QlMjBQZXJzb25hJTIwTm90JTIwVmFsaWRh dGVkJTJDJTIwT1UlMjAlM0QlMjBTeW1hbnRlYyUyMFRydXN0JTIwTmV0d29yayUyQyUyME8lMjAl M0QlMjBTeW1hbnRlYyUyMENvcnBvcmF0aW9uJTJDJTIwQyUyMCUzRCUyMFVTP2NBQ2VydGlmaWNh dGU7YmluYXJ5MF0GA1UdHwRWMFQwUqBQoE6GTGh0dHA6Ly9wa2ktY3JsLnN5bWF1dGguY29tL2Nh XzU2MWMxMDM2OTBjOTdhNjkyNDdhMGVmMDcxYWM4MWFmL0xhdGVzdENSTC5jcmwwbAYDVR0gBGUw YzBhBgtghkgBhvhFAQcXATBSMCYGCCsGAQUFBwIBFhpodHRwOi8vd3d3LnN5bWF1dGguY29tL2Nw czAoBggrBgEFBQcCAjAcGhpodHRwOi8vd3d3LnN5bWF1dGguY29tL3JwYTAqBgpghkgBhvhFARAD BBwwGgYRYIZIAYb4RQEQAQICBAGGsxcWBTEwOTIyMA0GCSqGSIb3DQEBBQUAA4IBAQAae/er4pfB TpqK6c/uJ9D8dVJzzNX26akkB8z/29totzbkpFAIlXRh02iNVK+GnsgS1gwu3FOvjgT5M4i+cNxD vTJVcnZNXns75JUGX3UsWQbtSySrVzQx8lMtwW6nXHM5GlEaY8/jKVpambG2q9OHjmwMTz7I4A+y KiiGCGdhE23dFOvku6t/oiwqFnXJmb4o75kbVevKEOd34MIj0P7Q8+1mZcNYEUTYKadoPXFyTWnO 2HTMvFcGgdLFKcqb13clWeW3/B5WjdBimpMjbvwi8ZbrhFdp7Y3NLKFSRH8W29rt0LW7zULxii0z 34NGsBkW9w95PLzTsqmKD4Yv5AkIMYIEkjCCBI4CAQEwgbswgaYxCzAJBgNVBAYTAlVTMR0wGwYD VQQKExRTeW1hbnRlYyBDb3Jwb3JhdGlvbjEfMB0GA1UECxMWU3ltYW50ZWMgVHJ1c3QgTmV0d29y azEeMBwGA1UECxMVUGVyc29uYSBOb3QgVmFsaWRhdGVkMTcwNQYDVQQDEy5TeW1hbnRlYyBDbGFz cyAxIEluZGl2aWR1YWwgU3Vic2NyaWJlciBDQSAtIEc0AhAQHd1E6Q8NPRDpBgRzvi1yMAkGBSsO AwIaBQCgggKrMBgGCSqGSIb3DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTEzMDkz MDE0MjU0NVowIwYJKoZIhvcNAQkEMRYEFC1M0xr3+J9hFUlX8/Ag51L1Zk9FMIGrBgkqhkiG9w0B CQ8xgZ0wgZowCwYJYIZIAWUDBAEqMAsGCWCGSAFlAwQBFjAKBggqhkiG9w0DBzALBglghkgBZQME AQIwDgYIKoZIhvcNAwICAgCAMAcGBSsOAwIHMA0GCCqGSIb3DQMCAgFAMA0GCCqGSIb3DQMCAgEo MAcGBSsOAwIaMAsGCWCGSAFlAwQCAzALBglghkgBZQMEAgIwCwYJYIZIAWUDBAIBMIHMBgkrBgEE AYI3EAQxgb4wgbswgaYxCzAJBgNVBAYTAlVTMR0wGwYDVQQKExRTeW1hbnRlYyBDb3Jwb3JhdGlv bjEfMB0GA1UECxMWU3ltYW50ZWMgVHJ1c3QgTmV0d29yazEeMBwGA1UECxMVUGVyc29uYSBOb3Qg VmFsaWRhdGVkMTcwNQYDVQQDEy5TeW1hbnRlYyBDbGFzcyAxIEluZGl2aWR1YWwgU3Vic2NyaWJl ciBDQSAtIEc0AhAQHd1E6Q8NPRDpBgRzvi1yMIHOBgsqhkiG9w0BCRACCzGBvqCBuzCBpjELMAkG A1UEBhMCVVMxHTAbBgNVBAoTFFN5bWFudGVjIENvcnBvcmF0aW9uMR8wHQYDVQQLExZTeW1hbnRl YyBUcnVzdCBOZXR3b3JrMR4wHAYDVQQLExVQZXJzb25hIE5vdCBWYWxpZGF0ZWQxNzA1BgNVBAMT LlN5bWFudGVjIENsYXNzIDEgSW5kaXZpZHVhbCBTdWJzY3JpYmVyIENBIC0gRzQCEBAd3UTpDw09 EOkGBHO+LXIwDQYJKoZIhvcNAQEBBQAEggEACxNuXXRAqjG5lgM18/zLtAvxUU2/mDMVx33TcdK/ 5igff746VRCCariMwlnldiBMHCPModqNmbDaae6cp9keUzPEWkuruMdDcH6jJ9yxmegJs+sDHvy7 iIJoAtwvR11OdwYT7ap8B8BiDgycz8H+AR8W0kkwNiJOymhkjVvRnmoQuTNGQqQEqJxu4yMA6dw5 AmB2obZga8s4IlO4cjJEjoKyfh6LJqAGhghidOTh9dwp4OCmF5ZoYzuXvybijc6QqVWzgMc08BvO Y10SISKum6cp8gS1ThYJ3YKtMyuOP0WGM6AhN7PccnVuUjMZBesKLCXbqg1VCw/1JB95bwv8hwAA AAAAAA== ------=_NextPart_000_0037_01CEBDC7.6C69FCF0-- From rjsparks@nostrum.com Mon Sep 30 09:46:48 2013 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 37A0F21F9C68 for ; Mon, 30 Sep 2013 09:46:48 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.476 X-Spam-Level: X-Spam-Status: No, score=-102.476 tagged_above=-999 required=5 tests=[AWL=0.124, BAYES_00=-2.599, SPF_PASS=-0.001, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CPPwyLFZXLlo for ; Mon, 30 Sep 2013 09:46:47 -0700 (PDT) Received: from shaman.nostrum.com (nostrum-pt.tunnel.tserv2.fmt.ipv6.he.net [IPv6:2001:470:1f03:267::2]) by ietfa.amsl.com (Postfix) with ESMTP id C816521F9CC7 for ; Mon, 30 Sep 2013 09:46:43 -0700 (PDT) Received: from unnumerable.local (pool-71-170-125-188.dllstx.fios.verizon.net [71.170.125.188]) (authenticated bits=0) by shaman.nostrum.com (8.14.3/8.14.3) with ESMTP id r8UGkgw3078258 (version=TLSv1/SSLv3 cipher=DHE-RSA-CAMELLIA256-SHA bits=256 verify=OK) for ; Mon, 30 Sep 2013 11:46:42 -0500 (CDT) (envelope-from rjsparks@nostrum.com) Message-ID: <5249AAF7.2060401@nostrum.com> Date: Mon, 30 Sep 2013 11:46:47 -0500 From: Robert Sparks User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:17.0) Gecko/20130801 Thunderbird/17.0.8 MIME-Version: 1.0 To: stir@ietf.org References: In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Received-SPF: pass (shaman.nostrum.com: 71.170.125.188 is authenticated by a trusted mechanism) Subject: Re: [stir] draft-peterson-stir-threats-00.txt X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 30 Sep 2013 16:46:48 -0000 On 9/26/13 3:42 PM, DOLLY, MARTIN C wrote: > With Hadriel comments incorporated, it is a start Hi Martin - Just to make sure - I think you're referring to Hadriel's comments on the problem statement document? I don't think Hadriel's commented directly on stir-threats yet. In any case, we _are_ talking about a starting place, not a finished product. If there's no other objection, I'd like to get Jon to submit the threats document as a WG -00 as soon as it's convenient. RjS > > -----Original Message----- > From: stir-bounces@ietf.org [mailto:stir-bounces@ietf.org] On Behalf Of Russ Housley > Sent: Thursday, September 26, 2013 4:37 PM > To: IETF STIR Mail List > Subject: Re: [stir] draft-peterson-stir-threats-00.txt > > It has been six days, I'd like to hear from more people about this document. Martin asked for an additional week, so I'm sure we will hear from him soon. > > Russ > > > On Sep 20, 2013, at 5:23 PM, Russ Housley wrote: > >> http://www.ietf.org/id/draft-peterson-stir-threats-00.txt >> >> Should the working group adopt this I-D as the starting point for the STIR threat docuent? >> >> Russ >> > _______________________________________________ > stir mailing list > stir@ietf.org > https://www.ietf.org/mailman/listinfo/stir From md3135@att.com Mon Sep 30 09:58:27 2013 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 28D6521F9D15 for ; Mon, 30 Sep 2013 09:58:27 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.421 X-Spam-Level: X-Spam-Status: No, score=-6.421 tagged_above=-999 required=5 tests=[AWL=0.178, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TyaHv1sd4mRj for ; Mon, 30 Sep 2013 09:58:21 -0700 (PDT) Received: from nbfkord-smmo05.seg.att.com (nbfkord-smmo05.seg.att.com [209.65.160.92]) by ietfa.amsl.com (Postfix) with ESMTP id 2DEBC21F9D34 for ; Mon, 30 Sep 2013 09:58:06 -0700 (PDT) Received: from unknown [144.160.229.24] (EHLO alpi155.enaf.aldc.att.com) by nbfkord-smmo05.seg.att.com(mxl_mta-6.15.0-1) over TLS secured channel with ESMTP id 49da9425.0.280905.00-378.795183.nbfkord-smmo05.seg.att.com (envelope-from ); Mon, 30 Sep 2013 16:58:06 +0000 (UTC) X-MXL-Hash: 5249ad9e62c9e2b2-054a4f220f7440779d83b0437cd025eaa7e5f3e7 Received: from enaf.aldc.att.com (localhost [127.0.0.1]) by alpi155.enaf.aldc.att.com (8.14.5/8.14.5) with ESMTP id r8UGvtrK001203; Mon, 30 Sep 2013 12:57:56 -0400 Received: from mlpi407.sfdc.sbc.com (mlpi407.sfdc.sbc.com [130.9.128.239]) by alpi155.enaf.aldc.att.com (8.14.5/8.14.5) with ESMTP id r8UGvhvq000974 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Mon, 30 Sep 2013 12:57:50 -0400 Received: from MISOUT7MSGHUB9A.ITServices.sbc.com (MISOUT7MSGHUB9A.itservices.sbc.com [144.151.223.62]) by mlpi407.sfdc.sbc.com (RSA Interceptor); Mon, 30 Sep 2013 16:57:31 GMT Received: from MISOUT7MSGUSR9I.ITServices.sbc.com ([144.151.223.56]) by MISOUT7MSGHUB9A.ITServices.sbc.com ([144.151.223.62]) with mapi id 14.03.0158.001; Mon, 30 Sep 2013 12:57:30 -0400 From: "DOLLY, MARTIN C" To: Robert Sparks Thread-Topic: [stir] draft-peterson-stir-threats-00.txt Thread-Index: AQHOuvg5PKSVeQzMzkaY10a/PrrWPpnYeutggAZLgID//7/xyQ== Date: Mon, 30 Sep 2013 16:57:30 +0000 Message-ID: <3B46BD69-FD1A-4ED8-9F3D-2D42A0718689@att.com> References: , <5249AAF7.2060401@nostrum.com> In-Reply-To: <5249AAF7.2060401@nostrum.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-RSA-Inspected: yes X-RSA-Classifications: public X-Spam: [F=0.2000000000; CM=0.500; S=0.200(2010122901)] X-MAIL-FROM: X-SOURCE-IP: [144.160.229.24] X-AnalysisOut: [v=2.0 cv=O52OSmBW c=1 sm=0 a=dhB6nF3YHL5t/Ixux6cINA==:17 a] X-AnalysisOut: [=-VEDDkUluEEA:10 a=ofMgfj31e3cA:10 a=BLceEmwcHowA:10 a=kj9] X-AnalysisOut: [zAlcOel0A:10 a=zQP7CpKOAAAA:8 a=OJxZ0vrzjz8A:10 a=Z80JlwQ0] X-AnalysisOut: [AAAA:8 a=48vgC7mUAAAA:8 a=GhR6sJs49pIKXNPM2ekA:9 a=CjuIK1q] X-AnalysisOut: [_8ugA:10 a=qM39cor4HRgA:10 a=Hz7IrDYlS0cA:10 a=0MAqpqVwYqE] X-AnalysisOut: [A:10 a=lZB815dzVvQA:10] Cc: "stir@ietf.org" Subject: Re: [stir] draft-peterson-stir-threats-00.txt X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 30 Sep 2013 16:58:27 -0000 Yes, ok Martin Dolly Lead Member of Technical Staff Core Network & Gov't/Regulatory Standards =20 AT&T Labs - Network Technology +1-609-903-3360 md3135@att.com > On Sep 30, 2013, at 12:47 PM, "Robert Sparks" wrot= e: >=20 >> On 9/26/13 3:42 PM, DOLLY, MARTIN C wrote: >> With Hadriel comments incorporated, it is a start > Hi Martin - >=20 > Just to make sure - I think you're referring to Hadriel's comments on the= problem statement document? > I don't think Hadriel's commented directly on stir-threats yet. >=20 > In any case, we _are_ talking about a starting place, not a finished prod= uct. >=20 > If there's no other objection, I'd like to get Jon to submit the threats = document as a WG -00 as soon as it's convenient. >=20 > RjS >>=20 >> -----Original Message----- >> From: stir-bounces@ietf.org [mailto:stir-bounces@ietf.org] On Behalf Of = Russ Housley >> Sent: Thursday, September 26, 2013 4:37 PM >> To: IETF STIR Mail List >> Subject: Re: [stir] draft-peterson-stir-threats-00.txt >>=20 >> It has been six days, I'd like to hear from more people about this docum= ent. Martin asked for an additional week, so I'm sure we will hear from hi= m soon. >>=20 >> Russ >>=20 >>=20 >>> On Sep 20, 2013, at 5:23 PM, Russ Housley wrote: >>>=20 >>> http://www.ietf.org/id/draft-peterson-stir-threats-00.txt >>>=20 >>> Should the working group adopt this I-D as the starting point for the S= TIR threat docuent? >>>=20 >>> Russ >> _______________________________________________ >> stir mailing list >> stir@ietf.org >> https://www.ietf.org/mailman/listinfo/stir >=20 > _______________________________________________ > stir mailing list > stir@ietf.org > https://www.ietf.org/mailman/listinfo/stir From kent@bbn.com Mon Sep 30 12:35:59 2013 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5B82021F9DC9 for ; Mon, 30 Sep 2013 12:35:59 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -106.599 X-Spam-Level: X-Spam-Status: No, score=-106.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Pz+AwjLulvEg for ; Mon, 30 Sep 2013 12:35:53 -0700 (PDT) Received: from smtp.bbn.com (smtp.bbn.com [128.33.1.81]) by ietfa.amsl.com (Postfix) with ESMTP id 5B9AE21F9DB0 for ; Mon, 30 Sep 2013 12:35:53 -0700 (PDT) Received: from dommiel.bbn.com ([192.1.122.15]:37699 helo=comsec.home) by smtp.bbn.com with esmtp (Exim 4.77 (FreeBSD)) (envelope-from ) id 1VQjG3-000H7O-Pw for stir@ietf.org; Mon, 30 Sep 2013 15:35:52 -0400 Message-ID: <5249D297.5090209@bbn.com> Date: Mon, 30 Sep 2013 15:35:51 -0400 From: Stephen Kent User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:17.0) Gecko/20130801 Thunderbird/17.0.8 MIME-Version: 1.0 To: stir@ietf.org References: <546DB8432567684FA41E336EF1D312B84A16487C@PLSWM14A.ad.sprint.com> <71E3420F5D11314D8D989D8B72D247E129FD51DA@xmb-aln-x06.cisco.com>, <00C069FD01E0324C9FFCADF539701DB3BBEDBA62@sc9-ex2k10mb1.corp.yaanatech.com> <4B1956260CD29F4A9622F00322FE05319381A90798@BOBO1A.bobotek.net> In-Reply-To: <4B1956260CD29F4A9622F00322FE05319381A90798@BOBO1A.bobotek.net> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Subject: Re: [stir] Call Center Implications X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 30 Sep 2013 19:35:59 -0000 Alex, > +1 > I've assumed that we are headed towards a "sign whatever extras you wish, and indicate what your signature covers" mechanism. Signing "extras" may create problems. Experience suggests that a recipient of signed "extra" data will be tempted to believe that data, even though the signer is not authorized to assert it (based on the authorization model used to manage the signing keys). While one could the public key to identify the signer and thus pursue them for signing misleading data, that may not be enough to deter such behavior. Steve From md3135@att.com Mon Sep 30 12:54:43 2013 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0973921F8443 for ; Mon, 30 Sep 2013 12:54:43 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.457 X-Spam-Level: X-Spam-Status: No, score=-6.457 tagged_above=-999 required=5 tests=[AWL=0.142, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ap6UcsFktVrA for ; Mon, 30 Sep 2013 12:54:36 -0700 (PDT) Received: from nbfkord-smmo05.seg.att.com (nbfkord-smmo05.seg.att.com [209.65.160.92]) by ietfa.amsl.com (Postfix) with ESMTP id 825B721F9D9C for ; Mon, 30 Sep 2013 12:54:36 -0700 (PDT) Received: from unknown [144.160.229.24] (EHLO nbfkord-smmo05.seg.att.com) by nbfkord-smmo05.seg.att.com(mxl_mta-6.15.0-1) with ESMTP id cf6d9425.7a30f940.405920.00-510.1153307.nbfkord-smmo05.seg.att.com (envelope-from ); Mon, 30 Sep 2013 19:54:36 +0000 (UTC) X-MXL-Hash: 5249d6fc6d96cb66-70d8d1ae766a9dba75a2be921f5cb03245da1082 Received: from unknown [144.160.229.24] (EHLO alpi155.enaf.aldc.att.com) by nbfkord-smmo05.seg.att.com(mxl_mta-6.15.0-1) over TLS secured channel with ESMTP id 8f6d9425.0.405867.00-151.1153128.nbfkord-smmo05.seg.att.com (envelope-from ); Mon, 30 Sep 2013 19:54:34 +0000 (UTC) X-MXL-Hash: 5249d6fa01bf721d-1eb6f65867c2e394f6e5e3e792925fe31bfb3a68 Received: from enaf.aldc.att.com (localhost [127.0.0.1]) by alpi155.enaf.aldc.att.com (8.14.5/8.14.5) with ESMTP id r8UJsV0j025512; Mon, 30 Sep 2013 15:54:31 -0400 Received: from mlpi409.sfdc.sbc.com (mlpi409.sfdc.sbc.com [130.9.128.241]) by alpi155.enaf.aldc.att.com (8.14.5/8.14.5) with ESMTP id r8UJsGgt025308 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Mon, 30 Sep 2013 15:54:28 -0400 Received: from MISOUT7MSGHUB9B.ITServices.sbc.com (MISOUT7MSGHUB9B.itservices.sbc.com [144.151.223.72]) by mlpi409.sfdc.sbc.com (RSA Interceptor); Mon, 30 Sep 2013 19:54:09 GMT Received: from MISOUT7MSGUSR9I.ITServices.sbc.com ([144.151.223.56]) by MISOUT7MSGHUB9B.ITServices.sbc.com ([144.151.223.72]) with mapi id 14.03.0158.001; Mon, 30 Sep 2013 15:54:08 -0400 From: "DOLLY, MARTIN C" To: Stephen Kent Thread-Topic: [stir] Call Center Implications Thread-Index: AQHOvhRFwQIlBZqOikuUwreJtx4/OZnesX7l Date: Mon, 30 Sep 2013 19:54:08 +0000 Message-ID: References: <546DB8432567684FA41E336EF1D312B84A16487C@PLSWM14A.ad.sprint.com> <71E3420F5D11314D8D989D8B72D247E129FD51DA@xmb-aln-x06.cisco.com>, <00C069FD01E0324C9FFCADF539701DB3BBEDBA62@sc9-ex2k10mb1.corp.yaanatech.com> <4B1956260CD29F4A9622F00322FE05319381A90798@BOBO1A.bobotek.net>, <5249D297.5090209@bbn.com> In-Reply-To: <5249D297.5090209@bbn.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-RSA-Inspected: yes X-RSA-Classifications: public X-Spam: [F=0.2000000000; CM=0.500; S=0.200(2010122901)] X-MAIL-FROM: X-SOURCE-IP: [144.160.229.24] X-AnalysisOut: [v=2.0 cv=O52OSmBW c=1 sm=0 a=dhB6nF3YHL5t/Ixux6cINA==:17 a] X-AnalysisOut: [=ofMgfj31e3cA:10 a=BLceEmwcHowA:10 a=kj9zAlcOel0A:10 a=zQP] X-AnalysisOut: [7CpKOAAAA:8 a=IqRCFLJipa8A:10 a=HyQ2mm5JAAAA:8 a=48vgC7mUA] X-AnalysisOut: [AAA:8 a=GhR6sJs49pIKXNPM2ekA:9 a=CjuIK1q_8ugA:10 a=qM39cor] X-AnalysisOut: [4HRgA:10 a=Hz7IrDYlS0cA:10 a=VDw9KV-tx8oA:10 a=lZB815dzVvQ] X-AnalysisOut: [A:10] Cc: "stir@ietf.org" Subject: Re: [stir] Call Center Implications X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 30 Sep 2013 19:54:43 -0000 Not clear to me, but are we signaling information on who does the authentic= ation and signing? Also, indication of authentication assurance? Thanks Martin Dolly Lead Member of Technical Staff Core Network & Gov't/Regulatory Standards =20 AT&T Labs - Network Technology +1-609-903-3360 md3135@att.com > On Sep 30, 2013, at 3:36 PM, "Stephen Kent" wrote: >=20 > Alex, >=20 >> +1 >> I've assumed that we are headed towards a "sign whatever extras you wish= , and indicate what your signature covers" mechanism. > Signing "extras" may create problems. Experience suggests that a recipien= t of signed > "extra" data will be tempted to believe that data, even though the signer= is not authorized > to assert it (based on the authorization model used to manage the signing= keys). While > one could the public key to identify the signer and thus pursue them for = signing misleading > data, that may not be enough to deter such behavior. >=20 > Steve > _______________________________________________ > stir mailing list > stir@ietf.org > https://www.ietf.org/mailman/listinfo/stir From br@brianrosen.net Mon Sep 30 13:00:22 2013 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4232D21F9A61 for ; Mon, 30 Sep 2013 13:00:21 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -103.539 X-Spam-Level: X-Spam-Status: No, score=-103.539 tagged_above=-999 required=5 tests=[AWL=0.060, BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id j3IVoPdO+SMi for ; Mon, 30 Sep 2013 13:00:16 -0700 (PDT) Received: from mail-yh0-f51.google.com (mail-yh0-f51.google.com [209.85.213.51]) by ietfa.amsl.com (Postfix) with ESMTP id 604ED21F8E3D for ; Mon, 30 Sep 2013 13:00:16 -0700 (PDT) Received: by mail-yh0-f51.google.com with SMTP id t59so2164842yho.10 for ; Mon, 30 Sep 2013 13:00:16 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:content-type:mime-version:subject:from :in-reply-to:date:cc:content-transfer-encoding:message-id:references :to; bh=+Ae3gcQ6FbaS1+INoNw8CZzxqC6BVUYgWmz7LxO2PV8=; b=fiOgu3nfbqKeQ+r6ONwrBNiqyW9od1FDVsS/d2AI+b+TqUTCM0jcBeD8aGRNH0PEx0 57SgPuqnTZpMkwh+IeIc7LvbZ//aJXikC+OMuU8hSK9cWzfhjKVkztYb7w+OuWeHaFKs V0tRu4diGZ3SMGOWZem4Dcc0V/GuJS5FNPUMWZsODbUY6WBzmi/sYdR+uV7AF8Hg/y++ gHtzlIKbVrzgSmyfVKpn3M9M2LfEhPVNBCgREL/qhqP0CpA7UyfGCYioAhGXRSbqZYWH FhWd+o9bqen6hRJvrqVbbKxbsHotqcfZiXbi8ZYSfe+tC0D5RoDkK5L3iCaIiteuFQJS 3ZHQ== X-Gm-Message-State: ALoCoQnrvAfvIpDoInChgXbkRGF89FhKCXTB70rz15oKEEqz+19l3vpZ1ccOuXPC6MqhqCPppszX X-Received: by 10.236.85.237 with SMTP id u73mr2154284yhe.67.1380571215871; Mon, 30 Sep 2013 13:00:15 -0700 (PDT) Received: from [10.33.193.37] (neustargw.va.neustar.com. [209.173.53.233]) by mx.google.com with ESMTPSA id 9sm3497263yhe.21.1969.12.31.16.00.00 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Mon, 30 Sep 2013 13:00:15 -0700 (PDT) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 6.5 \(1508\)) From: Brian Rosen In-Reply-To: Date: Mon, 30 Sep 2013 16:00:12 -0400 Content-Transfer-Encoding: quoted-printable Message-Id: References: <546DB8432567684FA41E336EF1D312B84A16487C@PLSWM14A.ad.sprint.com> <71E3420F5D11314D8D989D8B72D247E129FD51DA@xmb-aln-x06.cisco.com>, <00C069FD01E0324C9FFCADF539701DB3BBEDBA62@sc9-ex2k10mb1.corp.yaanatech.com> <4B1956260CD29F4A9622F00322FE05319381A90798@BOBO1A.bobotek.net>, <5249D297.5090209@bbn.com> To: "DOLLY, MARTIN C" X-Mailer: Apple Mail (2.1508) Cc: "stir@ietf.org" , Stephen Kent Subject: Re: [stir] Call Center Implications X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 30 Sep 2013 20:00:22 -0000 Don't think so. =20 I think we're just signaling the signed material and the signature. One = of the proposals has a URI to the credential optionally signaled. The = other uses a TN based discovery of the credential. Jon proposed something like what Alex was suggesting. He wanted to be = able to include an SDP digest. The idea was that the digest was sent as = a separate item covered by the signature. It would need to be passed = through, but if the digest didn't check, the signature would pass, but = the endpoint would know the SDP had been munged. Brian On Sep 30, 2013, at 3:54 PM, "DOLLY, MARTIN C" wrote: > Not clear to me, but are we signaling information on who does the = authentication and signing? > Also, indication of authentication assurance? >=20 > Thanks >=20 > Martin Dolly > Lead Member of Technical Staff > Core Network & Gov't/Regulatory Standards =20 > AT&T Labs - Network Technology > +1-609-903-3360 > md3135@att.com >=20 >> On Sep 30, 2013, at 3:36 PM, "Stephen Kent" wrote: >>=20 >> Alex, >>=20 >>> +1 >>> I've assumed that we are headed towards a "sign whatever extras you = wish, and indicate what your signature covers" mechanism. >> Signing "extras" may create problems. Experience suggests that a = recipient of signed >> "extra" data will be tempted to believe that data, even though the = signer is not authorized >> to assert it (based on the authorization model used to manage the = signing keys). While >> one could the public key to identify the signer and thus pursue them = for signing misleading >> data, that may not be enough to deter such behavior. >>=20 >> Steve >> _______________________________________________ >> stir mailing list >> stir@ietf.org >> https://www.ietf.org/mailman/listinfo/stir > _______________________________________________ > stir mailing list > stir@ietf.org > https://www.ietf.org/mailman/listinfo/stir From richard@shockey.us Mon Sep 30 13:11:51 2013 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 748BC21F9E7E for ; Mon, 30 Sep 2013 13:11:51 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.265 X-Spam-Level: X-Spam-Status: No, score=-102.265 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KA12nb-s4HI2 for ; Mon, 30 Sep 2013 13:11:46 -0700 (PDT) Received: from oproxy6-pub.mail.unifiedlayer.com (oproxy6-pub.mail.unifiedlayer.com [67.222.54.6]) by ietfa.amsl.com (Postfix) with SMTP id 7D3A321F9D62 for ; Mon, 30 Sep 2013 13:11:11 -0700 (PDT) Received: (qmail 16154 invoked by uid 0); 30 Sep 2013 20:10:45 -0000 Received: from unknown (HELO box462.bluehost.com) (74.220.219.62) by oproxy6.mail.unifiedlayer.com with SMTP; 30 Sep 2013 20:10:45 -0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=shockey.us; s=default; h=Content-Transfer-Encoding:Content-Type:MIME-Version:Message-ID:Date:Subject:In-Reply-To:References:Cc:To:From; bh=F6ZOli7ibd3kUlYpiapIJga1N0hIUkKbVKqnXtgd54c=; b=W391+MQZcw7lwOD9DRjLzt8Z2VqYLOri9dZJnjbQH5PjtVE0voTGxsZ4M6b+SkQMrbHI12qGo949LLwlxJoT1eKCYISY1+3kooBom4jjDSk9pEg5OHQdzLChVc8d/Z4P; Received: from [71.114.100.16] (port=56165 helo=RSHOCKEYPC) by box462.bluehost.com with esmtpa (Exim 4.80) (envelope-from ) id 1VQjno-0001PP-So; Mon, 30 Sep 2013 14:10:45 -0600 From: "Richard Shockey" To: "'DOLLY, MARTIN C'" , "'Robert Sparks'" References: , <5249AAF7.2060401@nostrum.com> <3B46BD69-FD1A-4ED8-9F3D-2D42A0718689@att.com> In-Reply-To: <3B46BD69-FD1A-4ED8-9F3D-2D42A0718689@att.com> Date: Mon, 30 Sep 2013 16:10:42 -0400 Message-ID: <012e01cebe19$24d2aed0$6e780c70$@shockey.us> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 15.0 Thread-Index: AQIJuyR3ep8U8zk+vtw2uQBSEB0/fgINOqbRAr/2giEC0l///wF434JzmR/4cmA= Content-Language: en-us X-Identified-User: {3286:box462.bluehost.com:shockeyu:shockey.us} {sentby:smtp auth 71.114.100.16 authed with richard@shockey.us} Cc: stir@ietf.org Subject: Re: [stir] draft-peterson-stir-threats-00.txt X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 30 Sep 2013 20:11:51 -0000 +1 -----Original Message----- From: stir-bounces@ietf.org [mailto:stir-bounces@ietf.org] On Behalf Of DOLLY, MARTIN C Sent: Monday, September 30, 2013 12:58 PM To: Robert Sparks Cc: stir@ietf.org Subject: Re: [stir] draft-peterson-stir-threats-00.txt Yes, ok Martin Dolly Lead Member of Technical Staff Core Network & Gov't/Regulatory Standards AT&T Labs - Network Technology +1-609-903-3360 md3135@att.com > On Sep 30, 2013, at 12:47 PM, "Robert Sparks" wrote: > >> On 9/26/13 3:42 PM, DOLLY, MARTIN C wrote: >> With Hadriel comments incorporated, it is a start > Hi Martin - > > Just to make sure - I think you're referring to Hadriel's comments on the problem statement document? > I don't think Hadriel's commented directly on stir-threats yet. > > In any case, we _are_ talking about a starting place, not a finished product. > > If there's no other objection, I'd like to get Jon to submit the threats document as a WG -00 as soon as it's convenient. > > RjS >> >> -----Original Message----- >> From: stir-bounces@ietf.org [mailto:stir-bounces@ietf.org] On Behalf >> Of Russ Housley >> Sent: Thursday, September 26, 2013 4:37 PM >> To: IETF STIR Mail List >> Subject: Re: [stir] draft-peterson-stir-threats-00.txt >> >> It has been six days, I'd like to hear from more people about this document. Martin asked for an additional week, so I'm sure we will hear from him soon. >> >> Russ >> >> >>> On Sep 20, 2013, at 5:23 PM, Russ Housley wrote: >>> >>> http://www.ietf.org/id/draft-peterson-stir-threats-00.txt >>> >>> Should the working group adopt this I-D as the starting point for the STIR threat docuent? >>> >>> Russ >> _______________________________________________ >> stir mailing list >> stir@ietf.org >> https://www.ietf.org/mailman/listinfo/stir > > _______________________________________________ > stir mailing list > stir@ietf.org > https://www.ietf.org/mailman/listinfo/stir _______________________________________________ stir mailing list stir@ietf.org https://www.ietf.org/mailman/listinfo/stir From kent@bbn.com Mon Sep 30 13:21:06 2013 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 59B0121F99D0 for ; Mon, 30 Sep 2013 13:21:06 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -106.599 X-Spam-Level: X-Spam-Status: No, score=-106.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oMIoCXCj6WH5 for ; Mon, 30 Sep 2013 13:21:01 -0700 (PDT) Received: from smtp.bbn.com (smtp.bbn.com [128.33.0.80]) by ietfa.amsl.com (Postfix) with ESMTP id 9021E21F9983 for ; Mon, 30 Sep 2013 13:21:01 -0700 (PDT) Received: from dommiel.bbn.com ([192.1.122.15]:49507 helo=comsec.home) by smtp.bbn.com with esmtp (Exim 4.77 (FreeBSD)) (envelope-from ) id 1VQjxk-000IpG-Ce; Mon, 30 Sep 2013 16:21:00 -0400 Message-ID: <5249DD2B.4030201@bbn.com> Date: Mon, 30 Sep 2013 16:20:59 -0400 From: Stephen Kent User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:17.0) Gecko/20130801 Thunderbird/17.0.8 MIME-Version: 1.0 To: "DOLLY, MARTIN C" References: <546DB8432567684FA41E336EF1D312B84A16487C@PLSWM14A.ad.sprint.com> <71E3420F5D11314D8D989D8B72D247E129FD51DA@xmb-aln-x06.cisco.com>, <00C069FD01E0324C9FFCADF539701DB3BBEDBA62@sc9-ex2k10mb1.corp.yaanatech.com> <4B1956260CD29F4A9622F00322FE05319381A90798@BOBO1A.bobotek.net>, <5249D297.5090209@bbn.com> In-Reply-To: Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Cc: "stir@ietf.org" Subject: Re: [stir] Call Center Implications X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 30 Sep 2013 20:21:06 -0000 Martin, In principle the issuer of the cert (or maintainer of a DNSSEC-protected DANE entry) knows to whom it was issued. Thus if the signer does something bad, by signing "extra" stuff, one has recourse. I worry that, in practice, this recourse will not be easy to pursue. Thus I strongly recommend that one not use the signed data to do anything other than verify the caller's right to assert a phone #. (If other credentials are issued to callers, one might imagine them being used to verify other info about a caller. But, that seems out of scope for now, so let's not get ahead of ourselves.) Steve > Not clear to me, but are we signaling information on who does the authentication and signing? > Also, indication of authentication assurance? > > Thanks > > Martin Dolly > Lead Member of Technical Staff > Core Network & Gov't/Regulatory Standards > AT&T Labs - Network Technology > +1-609-903-3360 > md3135@att.com > >> On Sep 30, 2013, at 3:36 PM, "Stephen Kent" wrote: >> >> Alex, >> >>> +1 >>> I've assumed that we are headed towards a "sign whatever extras you wish, and indicate what your signature covers" mechanism. >> Signing "extras" may create problems. Experience suggests that a recipient of signed >> "extra" data will be tempted to believe that data, even though the signer is not authorized >> to assert it (based on the authorization model used to manage the signing keys). While >> one could the public key to identify the signer and thus pursue them for signing misleading >> data, that may not be enough to deter such behavior. >> >> Steve >> _______________________________________________ >> stir mailing list >> stir@ietf.org >> https://www.ietf.org/mailman/listinfo/stir From md3135@att.com Mon Sep 30 13:23:15 2013 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 42E2021F9BCE for ; Mon, 30 Sep 2013 13:23:10 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.481 X-Spam-Level: X-Spam-Status: No, score=-6.481 tagged_above=-999 required=5 tests=[AWL=0.118, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zCYkXcEMFpzE for ; Mon, 30 Sep 2013 13:23:00 -0700 (PDT) Received: from nbfkord-smmo06.seg.att.com (nbfkord-smmo06.seg.att.com [209.65.160.94]) by ietfa.amsl.com (Postfix) with ESMTP id ABFFB21F9C52 for ; Mon, 30 Sep 2013 13:22:52 -0700 (PDT) Received: from unknown [144.160.229.24] (EHLO nbfkord-smmo06.seg.att.com) by nbfkord-smmo06.seg.att.com(mxl_mta-6.15.0-1) with ESMTP id c9dd9425.4a4d7940.506387.00-536.1431595.nbfkord-smmo06.seg.att.com (envelope-from ); Mon, 30 Sep 2013 20:22:52 +0000 (UTC) X-MXL-Hash: 5249dd9c5de6e052-64f47c3503afc69ee64c221ab8c80ec0712f6deb Received: from unknown [144.160.229.24] (EHLO alpi155.enaf.aldc.att.com) by nbfkord-smmo06.seg.att.com(mxl_mta-6.15.0-1) over TLS secured channel with ESMTP id 39dd9425.0.506320.00-172.1431174.nbfkord-smmo06.seg.att.com (envelope-from ); Mon, 30 Sep 2013 20:22:45 +0000 (UTC) X-MXL-Hash: 5249dd954b1eb580-fd7b758689c1ea149a3ee4974fae4710b296e0d3 Received: from enaf.aldc.att.com (localhost [127.0.0.1]) by alpi155.enaf.aldc.att.com (8.14.5/8.14.5) with ESMTP id r8UKMhxT029319; Mon, 30 Sep 2013 16:22:43 -0400 Received: from mlpi407.sfdc.sbc.com (mlpi407.sfdc.sbc.com [130.9.128.239]) by alpi155.enaf.aldc.att.com (8.14.5/8.14.5) with ESMTP id r8UKMYx9029159 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Mon, 30 Sep 2013 16:22:40 -0400 Received: from MISOUT7MSGHUB9B.ITServices.sbc.com (MISOUT7MSGHUB9B.itservices.sbc.com [144.151.223.72]) by mlpi407.sfdc.sbc.com (RSA Interceptor); Mon, 30 Sep 2013 20:22:19 GMT Received: from MISOUT7MSGUSR9I.ITServices.sbc.com ([144.151.223.56]) by MISOUT7MSGHUB9B.ITServices.sbc.com ([144.151.223.72]) with mapi id 14.03.0158.001; Mon, 30 Sep 2013 16:22:19 -0400 From: "DOLLY, MARTIN C" To: Brian Rosen Thread-Topic: [stir] Call Center Implications Thread-Index: AQHOvhRFwQIlBZqOikuUwreJtx4/OZnesX7lgABEvwD//8Mf1Q== Date: Mon, 30 Sep 2013 20:22:18 +0000 Message-ID: <92B4B612-7EB0-456A-AB42-1772317F2EFA@att.com> References: <546DB8432567684FA41E336EF1D312B84A16487C@PLSWM14A.ad.sprint.com> <71E3420F5D11314D8D989D8B72D247E129FD51DA@xmb-aln-x06.cisco.com>, <00C069FD01E0324C9FFCADF539701DB3BBEDBA62@sc9-ex2k10mb1.corp.yaanatech.com> <4B1956260CD29F4A9622F00322FE05319381A90798@BOBO1A.bobotek.net>, <5249D297.5090209@bbn.com> , In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-RSA-Inspected: yes X-RSA-Classifications: public X-Spam: [F=0.2000000000; CM=0.500; S=0.200(2010122901)] X-MAIL-FROM: X-SOURCE-IP: [144.160.229.24] X-AnalysisOut: [v=2.0 cv=IPW1/HTG c=1 sm=0 a=dhB6nF3YHL5t/Ixux6cINA==:17 a] X-AnalysisOut: [=ofMgfj31e3cA:10 a=BLceEmwcHowA:10 a=kj9zAlcOel0A:10 a=zQP] X-AnalysisOut: [7CpKOAAAA:8 a=IqRCFLJipa8A:10 a=HLLxP2VMAAAA:8 a=HyQ2mm5JA] X-AnalysisOut: [AAA:8 a=48vgC7mUAAAA:8 a=x97OohosR8yz0-X8LPgA:9 a=CjuIK1q_] X-AnalysisOut: [8ugA:10 a=qM39cor4HRgA:10 a=Hz7IrDYlS0cA:10 a=-zy3ex45pM4A] X-AnalysisOut: [:10 a=VDw9KV-tx8oA:10 a=lZB815dzVvQA:10] Cc: "stir@ietf.org" , Stephen Kent Subject: Re: [stir] Call Center Implications X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 30 Sep 2013 20:23:15 -0000 If you do not know who authenticated and signed, what is it worth? Martin Dolly Lead Member of Technical Staff Core Network & Gov't/Regulatory Standards =20 AT&T Labs - Network Technology +1-609-903-3360 md3135@att.com > On Sep 30, 2013, at 4:00 PM, "Brian Rosen" wrote: >=20 > Don't think so. =20 >=20 > I think we're just signaling the signed material and the signature. One = of the proposals has a URI to the credential optionally signaled. The othe= r uses a TN based discovery of the credential. >=20 > Jon proposed something like what Alex was suggesting. He wanted to be ab= le to include an SDP digest. The idea was that the digest was sent as a se= parate item covered by the signature. It would need to be passed through, = but if the digest didn't check, the signature would pass, but the endpoint = would know the SDP had been munged. >=20 > Brian >=20 >> On Sep 30, 2013, at 3:54 PM, "DOLLY, MARTIN C" wrote: >>=20 >> Not clear to me, but are we signaling information on who does the authen= tication and signing? >> Also, indication of authentication assurance? >>=20 >> Thanks >>=20 >> Martin Dolly >> Lead Member of Technical Staff >> Core Network & Gov't/Regulatory Standards =20 >> AT&T Labs - Network Technology >> +1-609-903-3360 >> md3135@att.com >>=20 >>> On Sep 30, 2013, at 3:36 PM, "Stephen Kent" wrote: >>>=20 >>> Alex, >>>=20 >>>> +1 >>>> I've assumed that we are headed towards a "sign whatever extras you wi= sh, and indicate what your signature covers" mechanism. >>> Signing "extras" may create problems. Experience suggests that a recipi= ent of signed >>> "extra" data will be tempted to believe that data, even though the sign= er is not authorized >>> to assert it (based on the authorization model used to manage the signi= ng keys). While >>> one could the public key to identify the signer and thus pursue them fo= r signing misleading >>> data, that may not be enough to deter such behavior. >>>=20 >>> Steve >>> _______________________________________________ >>> stir mailing list >>> stir@ietf.org >>> https://www.ietf.org/mailman/listinfo/stir >> _______________________________________________ >> stir mailing list >> stir@ietf.org >> https://www.ietf.org/mailman/listinfo/stir >=20 From br@brianrosen.net Mon Sep 30 13:35:10 2013 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 517D621F99D5 for ; Mon, 30 Sep 2013 13:35:08 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -103.543 X-Spam-Level: X-Spam-Status: No, score=-103.543 tagged_above=-999 required=5 tests=[AWL=0.056, BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oFgmoX9hvlNF for ; Mon, 30 Sep 2013 13:35:03 -0700 (PDT) Received: from mail-ye0-f176.google.com (mail-ye0-f176.google.com [209.85.213.176]) by ietfa.amsl.com (Postfix) with ESMTP id 039EC21F936F for ; Mon, 30 Sep 2013 13:35:02 -0700 (PDT) Received: by mail-ye0-f176.google.com with SMTP id m4so1928033yen.21 for ; Mon, 30 Sep 2013 13:35:02 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:content-type:mime-version:subject:from :in-reply-to:date:cc:content-transfer-encoding:message-id:references :to; bh=cxd9OM2USDxkrwfw/nkN45Ebly3YiFgbCytx/GPISQI=; b=TspgSoLJ1J0BVdpLcG6IP/Hf5uj9Aqnb+29mUE6+kRmZJNLjMAN+PqbhfX4P+Bxf4p NgZb8ZhYF98fKPT7WfiPaCpYTRHiuSwK7lTKd2oV2ol4hScRw5bmjguvKw4uC35xZ71Z NcP48JEb+dYThqsgxKoMBC1Z0h6CCEka+rjvzb40AmLdFyihdvo3mmXX8hx/vLsDTpq2 EePmo9F47UMeCEwA8sNBDpwo9+0fltJzn7nepxuhYGiaJNjZiXEkw9CinoUm5zVKh475 wMb9BnE30sHhEtwWjKH/6PpXeoQ3/ndc1w0kiWpJNH5oV+sdzDtDGcTUSUgkcFEedqFN EUQg== X-Gm-Message-State: ALoCoQnIdbcmNHFROc7qJ9XHrjhwVonQLZJglU/MZ2OnAgYXj+Pcy99kJPweUgUlOMbiVyq/I2In X-Received: by 10.236.20.134 with SMTP id p6mr3585530yhp.61.1380573301482; Mon, 30 Sep 2013 13:35:01 -0700 (PDT) Received: from [10.33.193.37] (neustargw.va.neustar.com. [209.173.53.233]) by mx.google.com with ESMTPSA id w8sm3802326yhg.8.1969.12.31.16.00.00 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Mon, 30 Sep 2013 13:35:00 -0700 (PDT) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 6.5 \(1508\)) From: Brian Rosen In-Reply-To: <92B4B612-7EB0-456A-AB42-1772317F2EFA@att.com> Date: Mon, 30 Sep 2013 16:34:58 -0400 Content-Transfer-Encoding: quoted-printable Message-Id: References: <546DB8432567684FA41E336EF1D312B84A16487C@PLSWM14A.ad.sprint.com> <71E3420F5D11314D8D989D8B72D247E129FD51DA@xmb-aln-x06.cisco.com>, <00C069FD01E0324C9FFCADF539701DB3BBEDBA62@sc9-ex2k10mb1.corp.yaanatech.com> <4B1956260CD29F4A9622F00322FE05319381A90798@BOBO1A.bobotek.net>, <5249D297.5090209@bbn.com> , <92B4B612-7EB0-456A-AB42-1772317F2EFA@att.com> To: "DOLLY, MARTIN C" X-Mailer: Apple Mail (2.1508) Cc: "stir@ietf.org" , Stephen Kent Subject: Re: [stir] Call Center Implications X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 30 Sep 2013 20:35:10 -0000 There are two ways proposed. One is to use X.509 certs, or something like them. The cert has the = public key of the signing authority, and that cert is signed by the = national database operator's well known key. The other is the national database operator has a database that is = queried by TN and yields one or more public keys. So the key represents the entity who has been delegated the number, and = the database maintains, in one way or another, the keys associated with = that number. Brian On Sep 30, 2013, at 4:22 PM, "DOLLY, MARTIN C" wrote: > If you do not know who authenticated and signed, what is it worth? >=20 > Martin Dolly > Lead Member of Technical Staff > Core Network & Gov't/Regulatory Standards =20 > AT&T Labs - Network Technology > +1-609-903-3360 > md3135@att.com >=20 >> On Sep 30, 2013, at 4:00 PM, "Brian Rosen" wrote: >>=20 >> Don't think so. =20 >>=20 >> I think we're just signaling the signed material and the signature. = One of the proposals has a URI to the credential optionally signaled. = The other uses a TN based discovery of the credential. >>=20 >> Jon proposed something like what Alex was suggesting. He wanted to = be able to include an SDP digest. The idea was that the digest was sent = as a separate item covered by the signature. It would need to be passed = through, but if the digest didn't check, the signature would pass, but = the endpoint would know the SDP had been munged. >>=20 >> Brian >>=20 >>> On Sep 30, 2013, at 3:54 PM, "DOLLY, MARTIN C" = wrote: >>>=20 >>> Not clear to me, but are we signaling information on who does the = authentication and signing? >>> Also, indication of authentication assurance? >>>=20 >>> Thanks >>>=20 >>> Martin Dolly >>> Lead Member of Technical Staff >>> Core Network & Gov't/Regulatory Standards =20 >>> AT&T Labs - Network Technology >>> +1-609-903-3360 >>> md3135@att.com >>>=20 >>>> On Sep 30, 2013, at 3:36 PM, "Stephen Kent" wrote: >>>>=20 >>>> Alex, >>>>=20 >>>>> +1 >>>>> I've assumed that we are headed towards a "sign whatever extras = you wish, and indicate what your signature covers" mechanism. >>>> Signing "extras" may create problems. Experience suggests that a = recipient of signed >>>> "extra" data will be tempted to believe that data, even though the = signer is not authorized >>>> to assert it (based on the authorization model used to manage the = signing keys). While >>>> one could the public key to identify the signer and thus pursue = them for signing misleading >>>> data, that may not be enough to deter such behavior. >>>>=20 >>>> Steve >>>> _______________________________________________ >>>> stir mailing list >>>> stir@ietf.org >>>> https://www.ietf.org/mailman/listinfo/stir >>> _______________________________________________ >>> stir mailing list >>> stir@ietf.org >>> https://www.ietf.org/mailman/listinfo/stir >>=20 From alex@bobotek.net Mon Sep 30 17:17:22 2013 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6716121F9C05 for ; Mon, 30 Sep 2013 17:17:22 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.437 X-Spam-Level: X-Spam-Status: No, score=-0.437 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FH_RELAY_NODNS=1.451, HELO_MISMATCH_NET=0.611, RDNS_NONE=0.1] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9AqiQUgWzbyt for ; Mon, 30 Sep 2013 17:17:17 -0700 (PDT) Received: from qmta11.emeryville.ca.mail.comcast.net (qmta11.emeryville.ca.mail.comcast.net [IPv6:2001:558:fe2d:44:76:96:27:211]) by ietfa.amsl.com (Postfix) with ESMTP id 2713E21F9BBD for ; Mon, 30 Sep 2013 17:17:13 -0700 (PDT) Received: from omta12.emeryville.ca.mail.comcast.net ([76.96.30.44]) by qmta11.emeryville.ca.mail.comcast.net with comcast id XYq71m0030x6nqcABcHBda; Tue, 01 Oct 2013 00:17:11 +0000 Received: from BOBO1A.bobotek.net ([76.22.113.196]) by omta12.emeryville.ca.mail.comcast.net with comcast id XcH91m00L4EJ4tY8YcHAsj; Tue, 01 Oct 2013 00:17:11 +0000 Received: from BOBO1A.bobotek.net ([fe80::4851:b4bb:416a:e1ad]) by BOBO1A.bobotek.net ([fe80::4851:b4bb:416a:e1ad%10]) with mapi; Mon, 30 Sep 2013 17:06:15 -0700 From: Alex Bobotek To: Richard Shockey , "'DOLLY, MARTIN C'" , 'Robert Sparks' Date: Mon, 30 Sep 2013 17:06:14 -0700 Thread-Topic: [stir] draft-peterson-stir-threats-00.txt Thread-Index: AQIJuyR3ep8U8zk+vtw2uQBSEB0/fgINOqbRAr/2giEC0l///wF434JzmR/4cmCAAD+vQA== Message-ID: <4B1956260CD29F4A9622F00322FE05319381A907BE@BOBO1A.bobotek.net> References: , <5249AAF7.2060401@nostrum.com> <3B46BD69-FD1A-4ED8-9F3D-2D42A0718689@att.com> <012e01cebe19$24d2aed0$6e780c70$@shockey.us> In-Reply-To: <012e01cebe19$24d2aed0$6e780c70$@shockey.us> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=comcast.net; s=q20121106; t=1380586631; bh=JwGtHFfv43nln2X0+RJ60YCYO1A9txYtJcl2IfftLY0=; h=Received:Received:Received:From:To:Date:Subject:Message-ID: Content-Type:MIME-Version; b=Cx1Xx2Ncf/fXcsy43I25n8e2fSb3WJgkZGMcpdC/i/Y9vcJA7Goea0mADYnG9m0+K nwTEYgDVImjmhqtu/lq1u/a36AHzl0gkqBjHs87w1r7Mgn6mWQAGT80Qt96mSrVGnb 22q1/UmkhZ7vcqznmCbly0p9KDb1XSKzbK/eM9cvZyQW1h5bcl7Qo4EE82thcZ3iBd qT8FhKRYfSz5CTvQqe3YSfWwtZEJ9/t33UAVNIH4EQTCFYpYZl3uFOPN7s/cvX8u4Y hJlj/ohrohqNPyrfPhv4msywFHpETBRg7cqDKxCAP2xqmmyKS/6J4u7WbzOt4z+i67 fE1DmymAK9UkA== Cc: "stir@ietf.org" Subject: Re: [stir] draft-peterson-stir-threats-00.txt X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 01 Oct 2013 00:17:22 -0000 Here are several comments that should feed into the IETF Peterson draft: =20 * Remove any assumptions that the solution cannot be in-network [IMO, both = endpoint and in-network solutions should be facilitated] * Add a sessionless attack scenario. A spam payload may be carried in a SI= P INVITE or MESSAGE, which might contain stock market advice even in a disp= lay name field. These attacks do NOT require session establishment. More = generally, we should be mindful of the fact that SIP is used in telephony f= orm more than voice session setup. =20 Here's some suggested markup: 1. Replace 2nd sentence of 2nd paragraph of 1.0 Introduction with: The primary attack vector is therefore one where the attacker contrives for the calling telephone number in signaling to be a particular chosen number that the attacker does not have the authority to call from. =20 2. Replace 3rd paragraph of 2.1 Endpoints with: Smart devices are generally based on computers with some degree of pr= ogrammability, the capacity to access the Internet, and capabilities of ren= dering text, audio and/or images. This includes smart phones, telephone ap= plications on desktop and laptop computers, IP private branch exchanges, an= d so on. 3. Add to 3.3 Attack Scenarios: Impersonation, IP-Mobile Text Message An attacker with an computer sends a high volume of SIP MESSAGE spam me= ssage to IP-enabled smart phones using randomized calling party numbers. =20 Countermeasure: in-band authenticated identity Regards, Alex > -----Original Message----- > From: stir-bounces@ietf.org [mailto:stir-bounces@ietf.org] On Behalf Of > Richard Shockey > Sent: Monday, September 30, 2013 1:11 PM > To: 'DOLLY, MARTIN C'; 'Robert Sparks' > Cc: stir@ietf.org > Subject: Re: [stir] draft-peterson-stir-threats-00.txt >=20 > +1 >=20 > -----Original Message----- > From: stir-bounces@ietf.org [mailto:stir-bounces@ietf.org] On Behalf Of > DOLLY, MARTIN C > Sent: Monday, September 30, 2013 12:58 PM > To: Robert Sparks > Cc: stir@ietf.org > Subject: Re: [stir] draft-peterson-stir-threats-00.txt >=20 > Yes, ok >=20 > Martin Dolly > Lead Member of Technical Staff > Core Network & Gov't/Regulatory Standards AT&T Labs - Network > Technology > +1-609-903-3360 > md3135@att.com >=20 > > On Sep 30, 2013, at 12:47 PM, "Robert Sparks" > wrote: > > > >> On 9/26/13 3:42 PM, DOLLY, MARTIN C wrote: > >> With Hadriel comments incorporated, it is a start > > Hi Martin - > > > > Just to make sure - I think you're referring to Hadriel's comments on > > the > problem statement document? > > I don't think Hadriel's commented directly on stir-threats yet. > > > > In any case, we _are_ talking about a starting place, not a finished > product. > > > > If there's no other objection, I'd like to get Jon to submit the > > threats > document as a WG -00 as soon as it's convenient. > > > > RjS > >> > >> -----Original Message----- > >> From: stir-bounces@ietf.org [mailto:stir-bounces@ietf.org] On Behalf > >> Of Russ Housley > >> Sent: Thursday, September 26, 2013 4:37 PM > >> To: IETF STIR Mail List > >> Subject: Re: [stir] draft-peterson-stir-threats-00.txt > >> > >> It has been six days, I'd like to hear from more people about this > document. Martin asked for an additional week, so I'm sure we will hear > from him soon. > >> > >> Russ > >> > >> > >>> On Sep 20, 2013, at 5:23 PM, Russ Housley wrote: > >>> > >>> http://www.ietf.org/id/draft-peterson-stir-threats-00.txt > >>> > >>> Should the working group adopt this I-D as the starting point for > >>> the > STIR threat docuent? > >>> > >>> Russ > >> _______________________________________________ > >> stir mailing list > >> stir@ietf.org > >> https://www.ietf.org/mailman/listinfo/stir > > > > _______________________________________________ > > stir mailing list > > stir@ietf.org > > https://www.ietf.org/mailman/listinfo/stir > _______________________________________________ > stir mailing list > stir@ietf.org > https://www.ietf.org/mailman/listinfo/stir >=20 > _______________________________________________ > stir mailing list > stir@ietf.org > https://www.ietf.org/mailman/listinfo/stir