From nobody Thu Mar 1 18:15:09 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E9513126BF0 for ; Thu, 1 Mar 2018 18:15:07 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.789 X-Spam-Level: X-Spam-Status: No, score=-1.789 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, HTML_MESSAGE=0.001, T_DKIM_INVALID=0.01] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=neutral reason="invalid (public key: not available)" header.d=jdrosen.net Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RvpE9o2AOGJe for ; Thu, 1 Mar 2018 18:15:06 -0800 (PST) Received: from ecbiz193.inmotionhosting.com (ecbiz193.inmotionhosting.com [69.174.52.145]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2D9D11270AE for ; Thu, 1 Mar 2018 18:15:01 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=jdrosen.net ; s=default; h=Content-Type:To:Subject:Message-ID:Date:From:MIME-Version: Sender:Reply-To:Cc:Content-Transfer-Encoding:Content-ID:Content-Description: Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID: In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:List-Subscribe: List-Post:List-Owner:List-Archive; bh=DXh2L3xPaH9CFzRskh0cUIh6kfYcHWKDtTCgivaWS6k=; b=Qh80EH2WybLQaJ6yPjAecxW5AW SJVjajxzeunaoLmLElimshKjO7nHMSOaGfrDl3ilOV55B/v2WN3myowOkJ/1QBm2pt3xrXmMJvAh9 aGZLErzsgk2aL2TiHuYAKcgClTC/cp2V5fbGhxiwBD1uPPSXQukJnOYOKKpqoXXflShJSpIgSaZya ZFDW32leCgCwCb8eqp1Xktr6nhC0uM0O+n3csxbRcE6f2FK/xuidhz7eoPcC5T3RCoMzNXgQ1yG2V kv52AuiiH+iBClr99NvJ3sClX/yyLw+MLKPnlYxwnbAzjZUu0uwkWOfi+Pdkk/kz4ln07a8iPznAD 2+D9umtQ==; Received: from mail-oi0-f48.google.com ([209.85.218.48]:43938) by ecbiz193.inmotionhosting.com with esmtpsa (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128) (Exim 4.89_1) (envelope-from ) id 1eraDd-0031WJ-9j for stir@ietf.org; Thu, 01 Mar 2018 21:14:58 -0500 Received: by mail-oi0-f48.google.com with SMTP id a207so6047706oii.10 for ; Thu, 01 Mar 2018 18:14:45 -0800 (PST) X-Gm-Message-State: APf1xPDYFZWJ9oR2gaDdE3cJ/J/PFYPJjtaCt2PLpvVuMj5zv/idLv3F Fe+4WK70+9yb7Cqo0Mms5T8lbmEfTZRwyAoJNI8= X-Google-Smtp-Source: AG47ELv0DlgN6DbG3WHFHwAZmx95YxMbtq3vL4gTIMkz+C28ixmitu6MhH+HILqPVwV17PYzglhf+5akB6MavtOrhNE= X-Received: by 10.202.90.138 with SMTP id o132mr2492028oib.11.1519956884888; Thu, 01 Mar 2018 18:14:44 -0800 (PST) MIME-Version: 1.0 Received: by 10.74.190.6 with HTTP; Thu, 1 Mar 2018 18:14:44 -0800 (PST) From: Jonathan Rosenberg Date: Fri, 2 Mar 2018 02:14:44 +0000 X-Gmail-Original-Message-ID: Message-ID: To: stir@ietf.org Content-Type: multipart/alternative; boundary="001a113d2bd832a4020566648a05" X-OutGoing-Spam-Status: No, score=-0.5 X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - ecbiz193.inmotionhosting.com X-AntiAbuse: Original Domain - ietf.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - jdrosen.net X-Get-Message-Sender-Via: ecbiz193.inmotionhosting.com: authenticated_id: jdrosen+jdrosen.net/only user confirmed/virtual account not confirmed X-Authenticated-Sender: ecbiz193.inmotionhosting.com: jdrosen@jdrosen.net X-Source: X-Source-Args: X-Source-Dir: Archived-At: Subject: [stir] New draft draft-rosenberg-stir-callback-00 X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 02 Mar 2018 02:15:08 -0000 --001a113d2bd832a4020566648a05 Content-Type: text/plain; charset="UTF-8" Hey all - been a while :) Cullen and I wrote up a concept for using STIR with self-signed or domain based certs, and then handling number validation with an in-band callback. We think its a promising approach to accelerate STIR deployments, since it allows them to happen without the cert infrastructure being in place. https://www.ietf.org/id/draft-rosenberg-stir-callback-00.txt Comments welcome. -Jonathan R. -- Jonathan Rosenberg, Ph.D. jdrosen@jdrosen.net http://www.jdrosen.net --001a113d2bd832a4020566648a05 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hey all - been a while :)

Cull= en and I wrote up a concept for using STIR with self-signed or domain based= certs, and then handling number validation with an in-band callback. We th= ink its a promising approach to accelerate STIR deployments, since it allow= s them to happen without the cert infrastructure being in place.

http= s://www.ietf.org/id/draft-rosenberg-stir-callback-00.txt

C= omments welcome.

-Jonathan R.

--
--001a113d2bd832a4020566648a05-- From nobody Fri Mar 2 09:56:24 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1112A12DA1D for ; Fri, 2 Mar 2018 09:56:22 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=team.neustar Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TxykLYq7tL4o for ; Fri, 2 Mar 2018 09:56:20 -0800 (PST) Received: from mx0b-0018ba01.pphosted.com (mx0b-0018ba01.pphosted.com [67.231.157.90]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C6F6412D96C for ; Fri, 2 Mar 2018 09:56:20 -0800 (PST) Received: from pps.filterd (m0049401.ppops.net [127.0.0.1]) by mx0b-0018ba01.pphosted.com (8.16.0.22/8.16.0.22) with SMTP id w22Hqnut032020; Fri, 2 Mar 2018 12:56:20 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=team.neustar; h=from : to : subject : date : message-id : content-type : mime-version; s=selector1; bh=tCdak7WcIKN61mdE/IxyBbXFJi5TLjY4jI1uQf7gEjo=; b=QQxMLO2F/xzluP+2v6cVR33Cvohe8vhi+sOEom4g1DIbk1wRFtynF8HPi+NAm81hX7rC ChbUuB+Cnu2KNADd/N2dHG5ZjthsaKndXuKIY1KX/MuXKEOoRC6M2OtaKjZE0tvo0dy2 LY21Z0TdRHNDTCikM3wPdKKvmDtEJHR305kTyIRViy23GRRHgBkbQn0u0K6QDLL3A1JR 9BkNuUpsVBHite3YmC+ZdCFf5TXiGl9FaewDZjyiA/jupfJayBxxx+aUmjEgSuSXcyGQ pYpAuD1CbnudCgZPpMgNCLI3K51Bm0oI2xxzy7RsAU+JshuoAnytN4jX6kDmkdsz0QW0 rg== Received: from stntexhc10.cis.neustar.com ([156.154.17.216]) by mx0b-0018ba01.pphosted.com with ESMTP id 2gf7vagbru-1 (version=TLSv1 cipher=ECDHE-RSA-AES256-SHA bits=256 verify=NOT); Fri, 02 Mar 2018 12:56:19 -0500 Received: from STNTEXMB11.cis.neustar.com ([169.254.1.236]) by stntexhc10.cis.neustar.com ([10.31.58.69]) with mapi id 14.03.0279.002; Fri, 2 Mar 2018 12:56:18 -0500 From: "Peterson, Jon" To: Jonathan Rosenberg , "stir@ietf.org" Thread-Topic: [stir] New draft draft-rosenberg-stir-callback-00 Thread-Index: AQHTsk/DYZ2w7GlmlkqN0S1MTkIqWg== Date: Fri, 2 Mar 2018 17:56:18 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.6.3.160329 x-originating-ip: [10.96.12.153] Content-Type: multipart/alternative; boundary="_000_D6BEC6D81F70D3jonpetersonneustarbiz_" MIME-Version: 1.0 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:, , definitions=2018-03-02_09:, , signatures=0 X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1011 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1711220000 definitions=main-1803020212 Archived-At: Subject: Re: [stir] New draft draft-rosenberg-stir-callback-00 X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 02 Mar 2018 17:56:23 -0000 --_000_D6BEC6D81F70D3jonpetersonneustarbiz_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Well nice of you to join us here, finally! So broadly, we have long needed some kind of proof-of-possession test for c= alling party numbers to help expedite STIR deployment. We've sketched out v= arious approaches like doing that with SMS return-routability tests (see se= ction 4.2 of draft-ietf-acme-telephone, say), and having a SIP-level way to= do such a test definitely seems like a valid approach. I don't recall that= we've considered a kind of "callback on first use" (COFU?) approach to thi= s before. It has some good properties. I guess the one comment I'd make about the overall direction though is that= up until now, I've been envisioning staging these proof-of-possession test= s within ACME. In other words, propping up a boulder implementation that wo= uld challenge with some kind of routability test to establish effective pro= of of control of a number in order to get you an 8226 individual-TN cert. P= ractically speaking, that ACME challenge could use stir-callback pretty muc= h as your draft describes it. I don't think deploying an ACME CA to do this= faces anything like the practical hurdles that faced public ENUM, say. It'= s something anyone could do tomorrow (if the necessary elements supported s= tir-callback tomorrow). I suppose, speaking to the example in the stir-callback Overview section, t= hat requiring Bob's call agent to maintain a "validation cache" that maps c= alling party numbers to public keys serves a similar purpose to having a CA= that effectively attests that calling party numbers are associated with ce= rtificates. The question is whether that mapping database is better staged = in one or more ACME-style CAs or in every call agent that participates in t= his architecture. Off the top of my head it doesn't seem easier to be from = an implementation or deployment standpoint to stage this in the call agents= . And doing this in a way that gives you an 8226 cert - even a self-signed = one - would I think have a more realistic incremental deployment path towar= d the long-term STIR architecture. So definitely support having this capability, I think there are choices to = make about exactly how to approach it, and we should discuss in London. We = need this, so I'm happy to see some energy around it. Jon Peterson Neustar, Inc. From: stir > on behalf = of Jonathan Rosenberg > Date: Thursday, March 1, 2018 at 6:14 PM To: "stir@ietf.org" > Subject: [stir] New draft draft-rosenberg-stir-callback-00 Hey all - been a while :) Cullen and I wrote up a concept for using STIR with self-signed or domain b= ased certs, and then handling number validation with an in-band callback. W= e think its a promising approach to accelerate STIR deployments, since it a= llows them to happen without the cert infrastructure being in place. https://www.ietf.org/id/draft-rosenberg-stir-callback-00.txt Comments welcome. -Jonathan R. -- Jonathan Rosenberg, Ph.D. jdrosen@jdrosen.net http://www.jdrosen.net --_000_D6BEC6D81F70D3jonpetersonneustarbiz_ Content-Type: text/html; charset="us-ascii" Content-ID: Content-Transfer-Encoding: quoted-printable

Well nice of you to join us here, finally!

So broadly, we have long needed some kind of proof-of-possession test = for calling party numbers to help expedite STIR deployment. We've sketched = out various approaches like doing that with SMS return-routability tests (s= ee section 4.2 of draft-ietf-acme-telephone, say), and having a SIP-level way to do such a test definitely seems like a= valid approach. I don't recall that we've considered a kind of "callb= ack on first use" (COFU?) approach to this before. It has some good pr= operties.

I guess the one comment I'd make about the overall direction though is= that up until now, I've been envisioning staging these proof-of-possession= tests within ACME. In other words, propping up a boulder implementation th= at would challenge with some kind of routability test to establish effective proof of control of a number in= order to get you an 8226 individual-TN cert. Practically speaking, that AC= ME challenge could use stir-callback pretty much as your draft describes it= . I don't think deploying an ACME CA to do this faces anything like the practical hurdles that faced public = ENUM, say. It's something anyone could do tomorrow (if the necessary elemen= ts supported stir-callback tomorrow).

I suppose, speaking to the example in the stir-callback Overview secti= on, that requiring Bob's call agent to maintain a "validation cache&qu= ot; that maps calling party numbers to public keys serves a similar purpose= to having a CA that effectively attests that calling party numbers are associated with certificates. The question is wh= ether that mapping database is better staged in one or more ACME-style CAs = or in every call agent that participates in this architecture. Off the top = of my head it doesn't seem easier to be from an implementation or deployment standpoint to stage this in the= call agents. And doing this in a way that gives you an 8226 cert - even a = self-signed one - would I think have a more realistic incremental deploymen= t path toward the long-term STIR architecture.

So definitely support having this capability, I think there are choice= s to make about exactly how to approach it, and we should discuss in London= . We need this, so I'm happy to see some energy around it.

Jon Peterson
Neustar, Inc.

From: stir <stir-bounces@ietf.org> on behalf of Jonathan Ro= senberg <jdrosen@jdrosen.net&= gt;
Date: Thursday, March 1, 2018 at 6:= 14 PM
To: "stir@ietf.org" <stir@i= etf.org>
Subject: [stir] New draft draft-ros= enberg-stir-callback-00

Hey all - been a while :)

Cullen and I wrote up a concept for using STIR with self-signed or domain b= ased certs, and then handling number validation with an in-band callback. W= e think its a promising approach to accelerate STIR deployments, since it a= llows them to happen without the cert infrastructure being in place.

ht= tps://www.ietf.org/id/draft-rosenberg-stir-callback-00.txt

Comments welcome.

-Jonathan R.

--
--_000_D6BEC6D81F70D3jonpetersonneustarbiz_-- From nobody Fri Mar 2 13:52:50 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C8E83124239 for ; Fri, 2 Mar 2018 13:52:48 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.789 X-Spam-Level: X-Spam-Status: No, score=-1.789 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, HTML_MESSAGE=0.001, T_DKIM_INVALID=0.01] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=neutral reason="invalid (public key: not available)" header.d=jdrosen.net Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lbY8eWX7tlEo for ; Fri, 2 Mar 2018 13:52:46 -0800 (PST) Received: from ecbiz193.inmotionhosting.com (ecbiz193.inmotionhosting.com [69.174.52.145]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A5D5912025C for ; Fri, 2 Mar 2018 13:52:46 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=jdrosen.net ; s=default; h=Content-Type:Cc:To:Subject:Message-ID:Date:From:References: In-Reply-To:MIME-Version:Sender:Reply-To:Content-Transfer-Encoding:Content-ID :Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To: Resent-Cc:Resent-Message-ID:List-Id:List-Help:List-Unsubscribe:List-Subscribe :List-Post:List-Owner:List-Archive; bh=McBffC8BkWk1bbTkJJ4ZJYQpCMQxBeS97s0ynTJlFVw=; b=Pr8pLpFYvRK7aMuEYOF6xSy5f7 RtjA69d8tE2jVfdNfWy3g45inZkuU3Q8HmLI+oGTRoGOfPiFELRuY12BkVfm3g0ik6LZOYlq5dHa0 PXFoR0Uj12dLY0U6UlhL/a83qcO31xVvh33lNqZf35Enu3RFEJgaPNXkRDmyAHEkK5BM6pNKJ1M33 xNaWlQaaVduyCwDj5E8i02nlEeXRmfvPn3y1hAbUR1wvY6uOmI2g+iqgtSePDDj522zLuvQDhXa5P 0dNeBZMIwON/YymHp5AE68pof1GViyI+dr64obgU9ldZCLKhL+1UNqQ2YkSC9R29TrsdTGUxo57AC Q8J0trIA==; Received: from mail-oi0-f53.google.com ([209.85.218.53]:35712) by ecbiz193.inmotionhosting.com with esmtpsa (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128) (Exim 4.89_1) (envelope-from ) id 1ersbS-003WO7-7n for stir@ietf.org; Fri, 02 Mar 2018 16:52:45 -0500 Received: by mail-oi0-f53.google.com with SMTP id x10so8103413oig.2 for ; Fri, 02 Mar 2018 13:52:34 -0800 (PST) X-Gm-Message-State: APf1xPBjTjtuq3rty35LE39PhntxstOHc7kSscjQ1FJIDk+8jA3gWbKs IncTCROJ0JCt2ElR0JzLgduSP6AASgu0hRtKU8E= X-Google-Smtp-Source: AG47ELvWjUlsXEZcnP8YrPX2KE8DNesQ9bcf5pQsLFu6/wK86O6YjbiZQC/Vv+dtKf9aczQn41lBu8lOkd8gkK4gisg= X-Received: by 10.202.12.69 with SMTP id i5mr4779998oiy.62.1520027553759; Fri, 02 Mar 2018 13:52:33 -0800 (PST) MIME-Version: 1.0 Received: by 10.74.190.6 with HTTP; Fri, 2 Mar 2018 13:52:33 -0800 (PST) In-Reply-To: References: From: Jonathan Rosenberg Date: Fri, 2 Mar 2018 16:52:33 -0500 X-Gmail-Original-Message-ID: Message-ID: To: "Peterson, Jon" Cc: Jonathan Rosenberg , "stir@ietf.org" Content-Type: multipart/alternative; boundary="089e082488506409be056674fe86" X-OutGoing-Spam-Status: No, score=-0.5 X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - ecbiz193.inmotionhosting.com X-AntiAbuse: Original Domain - ietf.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - jdrosen.net X-Get-Message-Sender-Via: ecbiz193.inmotionhosting.com: authenticated_id: jdrosen+jdrosen.net/only user confirmed/virtual account not confirmed X-Authenticated-Sender: ecbiz193.inmotionhosting.com: jdrosen@jdrosen.net X-Source: X-Source-Args: X-Source-Dir: Archived-At: Subject: Re: [stir] New draft draft-rosenberg-stir-callback-00 X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 02 Mar 2018 21:52:49 -0000 --089e082488506409be056674fe86 Content-Type: text/plain; charset="UTF-8" Good to be here Jon. Frankly, I got so tired of multiple robocalls each day, I woke up one morning and decided to do something about it. That, in addition to feeling some personal accountability for the problem for not having baked in a solution into SIP at the outset. You are of course correct that one could in fact take just the SIP aspect of this draft, and emit it from the CA to rather than have it be distributed amongst agents. Though that is a lower bar still for deployment than an ENUM-style process, I think its still quite a high bar for a CA in terms of the accountability that it entails. The CA still becomes accountable for holding an accurate and authoritative database of numbers for (presumably) a very large number of users, for keeping it up to date, for handling corrections should an error get made (which invariably it will for some reason), for deciding how to price such a service, for dealing with whatever local regulations their lawyers think they may be signing up for by being in the telco business. Since, regardless of how this database gets populate, they are in the telco business because they sell a telco database. Distributing the work distributes the accountability, and places it in the first party (the entity that consumes it) rather than the third party (with someone else). That is a dramatic difference. -Jonathan R. On Fri, Mar 2, 2018 at 12:56 PM, Peterson, Jon wrote: > > Well nice of you to join us here, finally! > > So broadly, we have long needed some kind of proof-of-possession test for > calling party numbers to help expedite STIR deployment. We've sketched out > various approaches like doing that with SMS return-routability tests (see > section 4.2 of draft-ietf-acme-telephone, say), and having a SIP-level way > to do such a test definitely seems like a valid approach. I don't recall > that we've considered a kind of "callback on first use" (COFU?) approach to > this before. It has some good properties. > > I guess the one comment I'd make about the overall direction though is > that up until now, I've been envisioning staging these proof-of-possession > tests within ACME. In other words, propping up a boulder implementation > that would challenge with some kind of routability test to establish > effective proof of control of a number in order to get you an 8226 > individual-TN cert. Practically speaking, that ACME challenge could use > stir-callback pretty much as your draft describes it. I don't think > deploying an ACME CA to do this faces anything like the practical hurdles > that faced public ENUM, say. It's something anyone could do tomorrow (if > the necessary elements supported stir-callback tomorrow). > > I suppose, speaking to the example in the stir-callback Overview section, > that requiring Bob's call agent to maintain a "validation cache" that maps > calling party numbers to public keys serves a similar purpose to having a > CA that effectively attests that calling party numbers are associated with > certificates. The question is whether that mapping database is better > staged in one or more ACME-style CAs or in every call agent that > participates in this architecture. Off the top of my head it doesn't seem > easier to be from an implementation or deployment standpoint to stage this > in the call agents. And doing this in a way that gives you an 8226 cert - > even a self-signed one - would I think have a more realistic incremental > deployment path toward the long-term STIR architecture. > > So definitely support having this capability, I think there are choices to > make about exactly how to approach it, and we should discuss in London. We > need this, so I'm happy to see some energy around it. > > Jon Peterson > Neustar, Inc. > > From: stir on behalf of Jonathan Rosenberg < > jdrosen@jdrosen.net> > Date: Thursday, March 1, 2018 at 6:14 PM > To: "stir@ietf.org" > Subject: [stir] New draft draft-rosenberg-stir-callback-00 > > Hey all - been a while :) > > Cullen and I wrote up a concept for using STIR with self-signed or domain > based certs, and then handling number validation with an in-band callback. > We think its a promising approach to accelerate STIR deployments, since it > allows them to happen without the cert infrastructure being in place. > > https://www.ietf.org/id/draft-rosenberg-stir-callback-00.txt > > Comments welcome. > > -Jonathan R. > > -- > Jonathan Rosenberg, Ph.D. > jdrosen@jdrosen.net > http://www.jdrosen.net > > -- Jonathan Rosenberg, Ph.D. jdrosen@jdrosen.net http://www.jdrosen.net --089e082488506409be056674fe86 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Good to be here Jon. Frankly, I got so tire= d of multiple robocalls each day, I woke up one morning and decided to do s= omething about it. That, in addition to feeling some personal accountabilit= y for the problem for not having baked in a solution into SIP at the outset= .

You are of course correct that one could in fact take just = the SIP aspect of this draft, and emit it from the CA to rather than have i= t be distributed amongst agents. Though that is a lower bar still for deplo= yment than an ENUM-style process, I think its still quite a high bar for a = CA in terms of the accountability that it entails. The CA still becomes acc= ountable for holding an accurate and authoritative database of numbers for = (presumably) a very large number of users, for keeping it up to date, for h= andling corrections should an error get made (which invariably it will for = some reason), for deciding how to price such a service, for dealing with wh= atever local regulations their lawyers think they may be signing up for by = being in the telco business. Since, regardless of how this database gets po= pulate, they are in the telco business because they sell a telco database.<= br>
Distributing the work distributes the accountability, and plac= es it in the first party (the entity that consumes it) rather than the thir= d party (with someone else). That is a dramatic difference.

-= Jonathan R.


On Fri, Mar 2, 2018 at 12:56 PM, Peterson, Jon <jon.peterson@team.neustar> wrote:

Well nice of you to join us here, finally!

So broadly, we have long needed some kind of proof-of-possession test = for calling party numbers to help expedite STIR deployment. We've sketc= hed out various approaches like doing that with SMS return-routability test= s (see section 4.2 of draft-ietf-acme-telephone, say), and having a SIP-level way to do such a test definitely seems like a= valid approach. I don't recall that we've considered a kind of &qu= ot;callback on first use" (COFU?) approach to this before. It has some= good properties.

I guess the one comment I'd make about the overall direction thoug= h is that up until now, I've been envisioning staging these proof-of-po= ssession tests within ACME. In other words, propping up a boulder implement= ation that would challenge with some kind of routability test to establish effective proof of control of a number in= order to get you an 8226 individual-TN cert. Practically speaking, that AC= ME challenge could use stir-callback pretty much as your draft describes it= . I don't think deploying an ACME CA to do this faces anything like the practical hurdles that faced public = ENUM, say. It's something anyone could do tomorrow (if the necessary el= ements supported stir-callback tomorrow).

I suppose, speaking to the example in the stir-callback Overview secti= on, that requiring Bob's call agent to maintain a "validation cach= e" that maps calling party numbers to public keys serves a similar pur= pose to having a CA that effectively attests that calling party numbers are associated with certificates. The question is wh= ether that mapping database is better staged in one or more ACME-style CAs = or in every call agent that participates in this architecture. Off the top = of my head it doesn't seem easier to be from an implementation or deployment standpoint to stage this in the= call agents. And doing this in a way that gives you an 8226 cert - even a = self-signed one - would I think have a more realistic incremental deploymen= t path toward the long-term STIR architecture.

So definitely support having this capability, I think there are choice= s to make about exactly how to approach it, and we should discuss in London= . We need this, so I'm happy to see some energy around it.

Jon Peterson
Neustar, Inc.

From: stir <stir-bounces@ietf.org> on beh= alf of Jonathan Rosenberg <jdrosen@jdrosen.net>
Date: Thursday, March 1, 2018 at 6:= 14 PM
To: "stir@ietf.org" <stir@ietf.org>
Subject: [stir] New draft draft-ros= enberg-stir-callback-00

Hey all - been a while :)

Cullen and I wrote up a concept for using STIR with self-signed or domain b= ased certs, and then handling number validation with an in-band callback. W= e think its a promising approach to accelerate STIR deployments, since it a= llows them to happen without the cert infrastructure being in place.

https://www.ietf.org/id/draft-rosenberg-stir-callback-= 00.txt

Comments welcome.

-Jonathan R.

--



--
--089e082488506409be056674fe86-- From nobody Fri Mar 2 14:45:28 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 90827126B6E for ; Fri, 2 Mar 2018 14:45:26 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.789 X-Spam-Level: X-Spam-Status: No, score=-1.789 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, HTML_MESSAGE=0.001, T_DKIM_INVALID=0.01] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=neutral reason="invalid (public key: not available)" header.d=jdrosen.net Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NaNIU8UKUKFw for ; Fri, 2 Mar 2018 14:45:25 -0800 (PST) Received: from ecbiz193.inmotionhosting.com (ecbiz193.inmotionhosting.com [69.174.52.145]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 65BE81250B8 for ; Fri, 2 Mar 2018 14:45:25 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=jdrosen.net ; s=default; h=Content-Type:To:Subject:Message-ID:Date:From:MIME-Version: Sender:Reply-To:Cc:Content-Transfer-Encoding:Content-ID:Content-Description: Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID: In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:List-Subscribe: List-Post:List-Owner:List-Archive; bh=z3wKhBgd1dCClB4uyLvJr6oUA24gf4dcrGNVae23uew=; b=sbtQooKZCyCILyUWQtjO8pi5/W dz+1wcBC8WlGZFOTzd7cCnamReMwwQUjvDcuMfJzQ5X+PZVQ0a96fgXO7dhXIx+CEWP9Sl3r+ApB1 9v41tG6Vi6cJ7WZN0mfv2NBbZFHS1BOByKuvAhp/m/5+HfayzT1h6diT9HmRREAUvZJJGPqJ/rFmj AnKUIQquMC9G2NFm5YCW2Vkd4j6LiIXGdZ+3Ea7G3LucrkaSXYhqR6t3Box4zVCcuLXTv12HDKOGi UQR9vAAttjZkpgzI4N67JEbH0N2ICGgoybpvAAqM40bGeUp/inO4hFGu/xEABYjmSzMK0OnizPDoW DrndO3Ww==; Received: from mail-oi0-f54.google.com ([209.85.218.54]:43421) by ecbiz193.inmotionhosting.com with esmtpsa (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128) (Exim 4.89_1) (envelope-from ) id 1ertQR-004GNS-Va for stir@ietf.org; Fri, 02 Mar 2018 17:45:24 -0500 Received: by mail-oi0-f54.google.com with SMTP id a207so8161025oii.10 for ; Fri, 02 Mar 2018 14:45:15 -0800 (PST) X-Gm-Message-State: APf1xPD08HI7hIJwKRgDSZW4LjfaEEDtChWBcbKwh0vDSNz+aky6SU1O www5eDs25v0OlJ+RCpVWXeb/+ucudM+X7qydUVY= X-Google-Smtp-Source: AG47ELs+oNaGWtTaQ+wSPgRoMCNgbLBCNK3gkLtgSQ1RVM+4d+1l2BHTmmh/bMK2Ys30GlhRV3xs8id1krgzGY8wuyo= X-Received: by 10.202.90.138 with SMTP id o132mr4409680oib.11.1520030715587; Fri, 02 Mar 2018 14:45:15 -0800 (PST) MIME-Version: 1.0 Received: by 10.74.190.6 with HTTP; Fri, 2 Mar 2018 14:45:15 -0800 (PST) From: Jonathan Rosenberg Date: Fri, 2 Mar 2018 17:45:15 -0500 X-Gmail-Original-Message-ID: Message-ID: To: stir@ietf.org Content-Type: multipart/alternative; boundary="001a113d2bd8d9b6ad056675baa1" X-OutGoing-Spam-Status: No, score=-1.0 X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - ecbiz193.inmotionhosting.com X-AntiAbuse: Original Domain - ietf.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - jdrosen.net X-Get-Message-Sender-Via: ecbiz193.inmotionhosting.com: authenticated_id: jdrosen+jdrosen.net/only user confirmed/virtual account not confirmed X-Authenticated-Sender: ecbiz193.inmotionhosting.com: jdrosen@jdrosen.net X-Source: X-Source-Args: X-Source-Dir: Archived-At: Subject: [stir] SIPCoin - a new cryptocurrency for stopping robocalls X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 02 Mar 2018 22:45:26 -0000 --001a113d2bd8d9b6ad056675baa1 Content-Type: text/plain; charset="UTF-8" Cullen and I have just submitted this: https://www.ietf.org/id/draft-rosenberg-stir-sipcoin-00.txt which is a proposal for a new type of cyryptocurrency dedicated solely to preventing spam on the SIP-based phone network. It is designed to be fast, causing less than one second increases in call setup time. NOn-transferrable to avoid being a tool for fraud and avoid being tied to market whim; backed by public CAs with a new type of centralized ledger validation; trivially verifiable by receivers of calls. Also we suggest a technique for incremental deployment on the PSTN which has incremental benefits and economic benefits for each deployment phase. We've done some analysis on the economics to help motivate the solution. WHen combined with our previous draft, and some nice whitelisting thrown in as described in here, I think this is a very interested technique to put this robocalling plague to rest. I'm coming to London and looking forward to discussing. Comments are, of course, welcome. -- Jonathan Rosenberg, Ph.D. jdrosen@jdrosen.net http://www.jdrosen.net --001a113d2bd8d9b6ad056675baa1 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Cullen and I have just submitted this:=
https://www.ietf.org/id/draft-rosenberg-stir-sipcoin-00.txt

which is a proposal for a new type of cyryptocurrency dedicated solely t= o preventing spam on the SIP-based phone network. It is designed to be fast= , causing less than one second increases in call setup time. NOn-transferra= ble to avoid being a tool for fraud and avoid being tied to market whim; ba= cked by public CAs with a new type of centralized ledger validation; trivia= lly verifiable by receivers of calls. Also we suggest a technique for incre= mental deployment on the PSTN which has incremental benefits and economic b= enefits for each deployment phase. We've done some analysis on the econ= omics to help motivate the solution.

WHen combined with our pr= evious draft, and some nice whitelisting thrown in as described in here, I = think this is a very interested technique to put this robocalling plague to= rest.

I'm coming to London and looking forward to discuss= ing.

Comments are, of course, welcome.
=

--
--001a113d2bd8d9b6ad056675baa1-- From nobody Sat Mar 3 16:06:31 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 240AA1201FA for ; Sat, 3 Mar 2018 16:06:29 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.888 X-Spam-Level: X-Spam-Status: No, score=-1.888 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, T_RP_MATCHES_RCVD=-0.01, T_SPF_HELO_PERMERROR=0.01, T_SPF_PERMERROR=0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4tbjZSrIBwka for ; Sat, 3 Mar 2018 16:06:26 -0800 (PST) Received: from nostrum.com (raven-v6.nostrum.com [IPv6:2001:470:d:1130::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 38D10127876 for ; Sat, 3 Mar 2018 16:06:26 -0800 (PST) Received: from Svantevit.local (99-152-146-228.lightspeed.dllstx.sbcglobal.net [99.152.146.228]) (authenticated bits=0) by nostrum.com (8.15.2/8.15.2) with ESMTPSA id w2406O6U091684 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO); Sat, 3 Mar 2018 18:06:25 -0600 (CST) (envelope-from adam@nostrum.com) X-Authentication-Warning: raven.nostrum.com: Host 99-152-146-228.lightspeed.dllstx.sbcglobal.net [99.152.146.228] claimed to be Svantevit.local To: Jonathan Rosenberg , stir@ietf.org References: From: Adam Roach Message-ID: <64ca7065-a73d-ce53-d715-a5569823a3c2@nostrum.com> Date: Sat, 3 Mar 2018 18:06:19 -0600 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:52.0) Gecko/20100101 Thunderbird/52.6.0 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/alternative; boundary="------------972D2595D7864E339B0CF62F" Content-Language: en-US Archived-At: Subject: Re: [stir] SIPCoin - a new cryptocurrency for stopping robocalls X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 04 Mar 2018 00:06:29 -0000 This is a multi-part message in MIME format. --------------972D2595D7864E339B0CF62F Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit One of the issues that has arisen in parallel with cryptocurrencies is a recognition of the exorbitant energy (and therefore environmental) costs they entail. I think this document probably requires a section addressing this aspect of the system, including any ways that it varies significantly from traditional cryptocurrencies in this regard. /a On 3/2/18 4:45 PM, Jonathan Rosenberg wrote: > Cullen and I have just submitted this: > https://www.ietf.org/id/draft-rosenberg-stir-sipcoin-00.txt > > which is a proposal for a new type of cyryptocurrency dedicated solely > to preventing spam on the SIP-based phone network. It is designed to > be fast, causing less than one second increases in call setup time. > NOn-transferrable to avoid being a tool for fraud and avoid being tied > to market whim; backed by public CAs with a new type of centralized > ledger validation; trivially verifiable by receivers of calls. Also we > suggest a technique for incremental deployment on the PSTN which has > incremental benefits and economic benefits for each deployment phase. > We've done some analysis on the economics to help motivate the solution. > > WHen combined with our previous draft, and some nice whitelisting > thrown in as described in here, I think this is a very interested > technique to put this robocalling plague to rest. > > I'm coming to London and looking forward to discussing. > > Comments are, of course, welcome. > > -- > Jonathan Rosenberg, Ph.D. > jdrosen@jdrosen.net > http://www.jdrosen.net > > > _______________________________________________ > stir mailing list > stir@ietf.org > https://www.ietf.org/mailman/listinfo/stir --------------972D2595D7864E339B0CF62F Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: 7bit
One of the issues that has arisen in parallel with cryptocurrencies is a recognition of the exorbitant energy (and therefore environmental) costs they entail. I think this document probably requires a section addressing this aspect of the system, including any ways that it varies significantly from traditional cryptocurrencies in this regard.

/a

On 3/2/18 4:45 PM, Jonathan Rosenberg wrote:
Cullen and I have just submitted this:
https://www.ietf.org/id/draft-rosenberg-stir-sipcoin-00.txt

which is a proposal for a new type of cyryptocurrency dedicated solely to preventing spam on the SIP-based phone network. It is designed to be fast, causing less than one second increases in call setup time. NOn-transferrable to avoid being a tool for fraud and avoid being tied to market whim; backed by public CAs with a new type of centralized ledger validation; trivially verifiable by receivers of calls. Also we suggest a technique for incremental deployment on the PSTN which has incremental benefits and economic benefits for each deployment phase. We've done some analysis on the economics to help motivate the solution.

WHen combined with our previous draft, and some nice whitelisting thrown in as described in here, I think this is a very interested technique to put this robocalling plague to rest.

I'm coming to London and looking forward to discussing.

Comments are, of course, welcome.

-- 


_______________________________________________
stir mailing list
stir@ietf.org
https://www.ietf.org/mailman/listinfo/stir


--------------972D2595D7864E339B0CF62F-- From nobody Sat Mar 3 23:50:29 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9A0031241F5 for ; Sat, 3 Mar 2018 23:50:27 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.01 X-Spam-Level: X-Spam-Status: No, score=-2.01 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=zipdx.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZWx3KBSaiy5N for ; Sat, 3 Mar 2018 23:50:25 -0800 (PST) Received: from xdev1sjc.zipdx.com (sjc-e-66.zipdx.com [166.88.23.66]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3C666126C19 for ; Sat, 3 Mar 2018 23:50:25 -0800 (PST) Received: from DPFENVY (c-98-210-64-228.hsd1.ca.comcast.net [98.210.64.228]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) (Authenticated sender: dfrankel) by xdev1sjc.zipdx.com (Postfix) with ESMTPSA id E64D01B8018E; Sat, 3 Mar 2018 23:50:24 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=zipdx.com; s=default; t=1520149825; bh=2ar0FgPCsH8nhnbIegaQa7qFXLXpQjTIL+RqtC4418g=; h=From:To:References:In-Reply-To:Subject:Date:From; b=TezVD9EqScFG9B2X6pqeZD97da1dBS1gcRHKjB/vVmXKgjpj7Wh0GDYIL8K1yVMlG sXg0KIJVoaXrlEeuvZnv9K+1aq0vbg8kYNLiB9c9aGoodphhVHgnoJYHMq3rCz3zGR 44SSLofe9AFZVACnNV724y6ZuLlnwwudUrikWv3o= From: "David Frankel" To: "'Jonathan Rosenberg'" , References: In-Reply-To: Date: Sat, 3 Mar 2018 23:50:26 -0800 Organization: ZipDX LLC Message-ID: <02f401d3b38d$754f0570$5fed1050$@zipdx.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_02F5_01D3B34A.672D7320" X-Mailer: Microsoft Outlook 16.0 Thread-Index: AQMNzGGZoHHMUr8ow6+gR+Dmf47KwqFLb+Hg Content-Language: en-us Archived-At: Subject: Re: [stir] New draft draft-rosenberg-stir-callback-00 X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 04 Mar 2018 07:50:28 -0000 This is a multipart message in MIME format. ------=_NextPart_000_02F5_01D3B34A.672D7320 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Hi Jonathan and Cullen =E2=80=93 =20 I read the draft with interest and wonder if you can clarify a few = things for me. My understanding of SIP nuances is limited, so I may be = overlooking some obvious things here. At the same time, I=E2=80=99m = trying to be pragmatic about how things work in the =E2=80=9Creal = world=E2=80=9D vs. the world as defined by the specs. =20 So my questions / comments are: =20 A) I see in section 3 references to SUPPORTED and REQUIRE header fields = that include =E2=80=9Cstir-callback=E2=80=9D. Then in sub-part 1 of = section 3, in the call diagram I see references to SUPPORTED and REQUIRE = headers that say =E2=80=9Cstir-verify=E2=80=9D. (Note, btw, that there = are two sub-parts 1 in section 3; I think they are supposed to be = numbered 1, 2, 3 instead of 1, 1, 2.) There are further references in = the document to =E2=80=9Cstir-verify=E2=80=9D. Then in section 8.1, = there are references to a =E2=80=9Csip-verify=E2=80=9D Option Tag.=20 =20 So my question is: are =E2=80=9Cstir-callback=E2=80=9D, = =E2=80=9Cstir-verify=E2=80=9D and =E2=80=9Csip-verify=E2=80=9D all meant = to be the same string, and perhaps the exact value evolved during = development of the document? Or are there really two or three different = option-tags involved here? Or am I missing how these three different = values are actually applied? =20 B) In the =E2=80=9Creal world=E2=80=9D, a PSTN call from Bob (tel:1, = served by Provider B), to Alice (tel:2 , served by Provider A) = is often completed by B sending the call to transit provider X, which, = even in an end-to-end SIP connection, will re-initiate the call and send = it to provider Y, which then re-initiates it and sends it to terminating = Provider A. (Note that the call path from B to A typically does not = necessarily follow the reverse path of a call from A to B.) =20 So in order to propagate properly from origination to termination, the = =E2=80=9Cverifying INVITE=E2=80=9D proposed in section 3, containing the = REQUIRE: stir-callback header, will need to first be processed by = Provider X. As I understand it, X will need to be capable of recognizing = the new REQUIRE header and knowing that it needs to propagate the call = onward (NOT reject it due to lack of support for stir-callback), and = will need to send the call to Y with the new REQUIRE header included. = AND it will also need to know that it needs to propagate the VERIFY-CALL = header as well. =20 Y will receive this INVITE, and it too will need to know that it needs = to accept this invite and propagate it onward with the REQUIRE and = VERIFY-CALL headers. =20 Since stir-callback is not today a defined option, if X and Y were = conforming to the SIP RFC, they would today reject this INVITE. So does = this mean that your STIR-Callback approach will necessitate updates of = currently-conforming UA=E2=80=99s acting in the transit role to now = provide support for this new type of INVITE? =20 Finally, if and when the verification INVITE gets to A, and as your = document explains, A will have to be smart enough to process the verify = request and send the appropriate response. That support is noted in your = document; I=E2=80=99m wondering if you also need to document the kind of = support that will be required from intermediate providers, and note the = importance of A being RFC-compliant with respect to REQUIRE headers it = does not understand. =20 C) At the end of section 3 you note: =E2=80=9CThe presence of the = Require header field in the verifying INVITE is critical to the = operation of the solution. It prevents the verifying INVITE from = actually ringing a real phone, which would be quite annoying.=E2=80=9D = This is my biggest concern. =20 If the new REQUIRE header gets dropped somewhere along the way, the = INVITE will look =E2=80=9Cnormal=E2=80=9D, so won=E2=80=99t Provider A = ring Alice=E2=80=99s phone? Or, if A is not RFC-compliant and ignores = the REQUIRE header, Alice=E2=80=99s phone will ring. (And of course if = the call originator was spoofing the number, and in fact Bob=E2=80=99s = verification INVITE went to the real owner of the number, served by = provider C, C would have to be RFC-compliant in this regard or the real = number owner=E2=80=99s phone would ring.) =20 I am nervous that in today=E2=80=99s real world deployments, your = approach is fragile because it is dependent on the various UA=E2=80=99s = in the call path diligently following the SIP RFC. =20 I made a few test calls acting like I was Bob=E2=80=99s UA, having = received an INVITE from A that I want to verify. So I sent an INVITE = back towards A, inserting the REQUIRE: stir-callback header in my mock = =E2=80=9Cverification=E2=80=9D INVITE; I sent these calls through = various real-world termination providers.=20 =20 In a couple of cases, I got back 420 Bad Extension responses. = That=E2=80=99s good and bad; the good news is that it tells me that = those particular UA=E2=80=99s ARE RFC compliant in this respect. They = don=E2=80=99t understand a REQUIREd option so they are necessarily = rejecting the call. On the other hand, it points out that if these = UA=E2=80=99s are acting as intermediate providers (which, in these = cases, they are), they will need to be updated to accept and pass the = stir-callback related headers even though they are just providing a = transit function and even though they are not assuming any = responsibility for verification. =20 In my other test cases, the destination phone rang even though this was = supposed to be a =E2=80=9Cverification=E2=80=9D INVITE. This tells me, I = think, that at least the first UA (X, in my explanation above) in the = verification call path is non-RFC-complaint, and that downstream = UA=E2=80=99s are either also non-compliant, or that the REQUIRE header = got dropped along the way. =20 I am nervous about the extent to which deployed UA=E2=80=99s are = non-RFC-compliant with respect to the REQUIRE header, and how that could = undermine deployability of this solution. Maybe you intended that the = solution only apply when A and B are directly connected and there are no = intermediate providers. But I=E2=80=99m concerned that=E2=80=99s only a = small fraction of =E2=80=9Creal world=E2=80=9D calls today. =20 I am interested in your thoughts on these items, and on getting me back = on track if I=E2=80=99ve misunderstood aspects of the proposal. =20 David =20 David Frankel ZipDX=C2=AE LLC Monte Sereno, CA USA Tel: 1-800-FRANKEL (1-800-372-6535) =20 From: stir On Behalf Of Jonathan Rosenberg Sent: Thursday, March 1, 2018 6:15 PM To: stir@ietf.org Subject: [stir] New draft draft-rosenberg-stir-callback-00 =20 Hey all - been a while :) Cullen and I wrote up a concept for using STIR with self-signed or = domain based certs, and then handling number validation with an in-band = callback. We think its a promising approach to accelerate STIR = deployments, since it allows them to happen without the cert = infrastructure being in place.=20 https://www.ietf.org/id/draft-rosenberg-stir-callback-00.txt Comments welcome.=20 -Jonathan R. --=20 Jonathan Rosenberg, Ph.D. jdrosen@jdrosen.net =20 http://www.jdrosen.net ------=_NextPart_000_02F5_01D3B34A.672D7320 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable

Hi = Jonathan and Cullen =E2=80=93

 

I read the = draft with interest and wonder if you can clarify a few things for me. = My understanding of SIP nuances is limited, so I may be overlooking some = obvious things here. At the same time, I=E2=80=99m trying to be = pragmatic about how things work in the =E2=80=9Creal world=E2=80=9D vs. = the world as defined by the specs.

 

So my = questions / comments are:

 

A) I see in = section 3 references to SUPPORTED and REQUIRE header fields that include = =E2=80=9Cstir-callback=E2=80=9D. Then in sub-part 1 of section 3, in the = call diagram I see references to SUPPORTED and REQUIRE headers that say = =E2=80=9Cstir-verify=E2=80=9D. =C2=A0(Note, btw, that there are two = sub-parts 1 in section 3; I think they are supposed to be numbered 1, 2, = 3 instead of 1, 1, 2.) There are further references in the document to = =E2=80=9Cstir-verify=E2=80=9D. Then in section 8.1, there are references = to a =E2=80=9Csip-verify=E2=80=9D Option Tag.

 

So my = question is: are =E2=80=9Cstir-callback=E2=80=9D, = =E2=80=9Cstir-verify=E2=80=9D and =E2=80=9Csip-verify=E2=80=9D all meant = to be the same string, and perhaps the exact value evolved during = development of the document? Or are there really two or three different = option-tags involved here? Or am I missing how these three different = values are actually applied?

 

B) In the = =E2=80=9Creal world=E2=80=9D, a PSTN call from Bob (tel:1, served by = Provider B), to Alice (tel:2, served by Provider = A) is often completed by B sending the call to transit provider X, = which, even in an end-to-end SIP connection, will re-initiate the call = and send it to provider Y, which then re-initiates it and sends it to = terminating Provider A. (Note that the call path from B to A typically = does not necessarily follow the reverse path of a call from A to = B.)

 

So in order to propagate properly from origination to = termination, the =E2=80=9Cverifying INVITE=E2=80=9D proposed in section = 3, containing the REQUIRE: stir-callback header, will need to first be = processed by Provider X. As I understand it, X will need to be capable = of recognizing the new REQUIRE header and knowing that it needs to = propagate the call onward (NOT reject it due to lack of support for = stir-callback), and will need to send the call to Y with the new REQUIRE = header included. AND it will also need to know that it needs to = propagate the VERIFY-CALL header as well.

 

Y will = receive this INVITE, and it too will need to know that it needs to = accept this invite and propagate it onward with the REQUIRE and = VERIFY-CALL headers.

 

Since = stir-callback is not today a defined option, if X and Y were conforming = to the SIP RFC, they would today reject this INVITE. So does this mean = that your STIR-Callback approach will necessitate updates of = currently-conforming UA=E2=80=99s acting in the transit role to now = provide support for this new type of INVITE?

 

Finally, if = and when the verification INVITE gets to A, and as your document = explains, A will have to be smart enough to process the verify request = and send the appropriate response. That support is noted in your = document; I=E2=80=99m wondering if you also need to document the kind of = support that will be required from intermediate providers, and note the = importance of A being RFC-compliant with respect to REQUIRE headers it = does not understand.

 

C) At the = end of section 3 you note: =E2=80=9CThe presence of the Require header = field in the verifying INVITE is critical to the operation of the = solution.=C2=A0 It prevents the verifying INVITE from actually ringing a = real phone, which would be quite annoying.=E2=80=9D This is my biggest = concern.

 

If the new REQUIRE header gets dropped somewhere along = the way, the INVITE will look =E2=80=9Cnormal=E2=80=9D, so won=E2=80=99t = Provider A ring Alice=E2=80=99s phone? Or, if A is not RFC-compliant and = ignores the REQUIRE header, Alice=E2=80=99s phone will ring. (And of = course if the call originator was spoofing the number, and in fact = Bob=E2=80=99s verification INVITE went to the real owner of the number, = served by provider C, C would have to be RFC-compliant in this regard or = the real number owner=E2=80=99s phone would ring.)

 

I am nervous = that in today=E2=80=99s real world deployments, your approach is fragile = because it is dependent on the various UA=E2=80=99s in the call path = diligently following the SIP RFC.

 

I made a few = test calls acting like I was Bob=E2=80=99s UA, having received an INVITE = from A that I want to verify. So I sent an INVITE back towards A, = inserting the REQUIRE: stir-callback header in my mock = =E2=80=9Cverification=E2=80=9D INVITE; I sent these calls through = various real-world termination providers.

 

In a couple = of cases, I got back 420 Bad Extension responses. That=E2=80=99s good = and bad; the good news is that it tells me that those particular = UA=E2=80=99s ARE RFC compliant in this respect. They don=E2=80=99t = understand a REQUIREd option so they are necessarily rejecting the call. = On the other hand, it points out that if these UA=E2=80=99s are acting = as intermediate providers (which, in these cases, they are), they will = need to be updated to accept and pass the stir-callback related headers = even though they are just providing a transit function and even though = they are not assuming any responsibility for = verification.

 

In my other test cases, the destination phone rang = even though this was supposed to be a =E2=80=9Cverification=E2=80=9D = INVITE. This tells me, I think, that at least the first UA (X, in my = explanation above) in the verification call path is non-RFC-complaint, = and that downstream UA=E2=80=99s are either also non-compliant, or that = the REQUIRE header got dropped along the way.

 

I am nervous = about the extent to which deployed UA=E2=80=99s are non-RFC-compliant = with respect to the REQUIRE header, and how that could undermine = deployability of this solution. Maybe you intended that the solution = only apply when A and B are directly connected and there are no = intermediate providers. But I=E2=80=99m concerned that=E2=80=99s only a = small fraction of =E2=80=9Creal world=E2=80=9D calls = today.

 

I am interested in your thoughts on these items, and = on getting me back on track if I=E2=80=99ve misunderstood aspects of the = proposal.

 

David

 

David = Frankel

ZipDX=C2=AE<= span style=3D'color:#1F497D;mso-fareast-language:ZH-TW'> LLC

Monte Sereno, CA = USA

Tel: 1-800-FRANKEL = (1-800-372-6535)

 

From: = stir <stir-bounces@ietf.org> On Behalf Of Jonathan = Rosenberg
Sent: Thursday, March 1, 2018 6:15 PM
To: = stir@ietf.org
Subject: [stir] New draft = draft-rosenberg-stir-callback-00

 

Hey all - been a while = :)

Cullen and I wrote up a concept for using = STIR with self-signed or domain based certs, and then handling number = validation with an in-band callback. We think its a promising approach = to accelerate STIR deployments, since it allows them to happen without = the cert infrastructure being in place.

htt= ps://www.ietf.org/id/draft-rosenberg-stir-callback-00.txt<= /p>

Comments = welcome.

-Jonathan R.


--

------=_NextPart_000_02F5_01D3B34A.672D7320-- From nobody Sun Mar 4 17:02:53 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CF123126CC7 for ; Sun, 4 Mar 2018 17:02:51 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.509 X-Spam-Level: X-Spam-Status: No, score=-14.509 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zlvsI4RKEew8 for ; Sun, 4 Mar 2018 17:02:48 -0800 (PST) Received: from alln-iport-3.cisco.com (alln-iport-3.cisco.com [173.37.142.90]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A816B126C89 for ; Sun, 4 Mar 2018 17:02:48 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=36448; q=dns/txt; s=iport; t=1520211768; x=1521421368; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=0r/d6uJazEOW0s8kWbEO4LDIIuOuSnDV2ZDXrZGLRuU=; b=LRs5whYOA8WVENZO7GFVT3o90DmHkxc1KxsaPIKiHBfcucCHP46WZ9zg mL7xJon4H7UqexQbjLlerzPZVs9RY36lkH+E5MlbQ6C/LAZmqj7dXI/Ci q5Z1qnPOT97Dx9LEQif8Hd4RXreGz25jlr+ihyYK2UHIqg1cQssjIM82G U=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AEAQAzlpxa/5FdJa1SBgMZAQEBAQEBA?= =?us-ascii?q?QEBAQEBBwEBAQEBglpFBC1mcCgKg0qKJI13gVsngRaUNIIVChgBCoUNAhqCRyE?= =?us-ascii?q?0GAECAQEBAQEBAmsnhSMBAQEEAQEhCigSBwsQAgEIDgMEAQEhBwMCAgIlCxQJC?= =?us-ascii?q?AIEDgUaAQSEGGQQqB2CJ4Ryg22CK4Utgi6DPSkMgniDLgEBgUcDES0KFQgJgkS?= =?us-ascii?q?CYgSaYgkCiWSHGYFnh1OFPpEoAhEZAYEtAR44gVJwFToqAYIYCYIoHIEEAQxqd?= =?us-ascii?q?wGKAQIlB4EDgRgBAQE?= X-IronPort-AV: E=Sophos; i="5.47,425,1515456000"; d="scan'208,217"; a="79383985" Received: from rcdn-core-9.cisco.com ([173.37.93.145]) by alln-iport-3.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 05 Mar 2018 01:02:47 +0000 Received: from XCH-RCD-002.cisco.com (xch-rcd-002.cisco.com [173.37.102.12]) by rcdn-core-9.cisco.com (8.14.5/8.14.5) with ESMTP id w2512lEg027140 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Mon, 5 Mar 2018 01:02:47 GMT Received: from xch-rcd-004.cisco.com (173.37.102.14) by XCH-RCD-002.cisco.com (173.37.102.12) with Microsoft SMTP Server (TLS) id 15.0.1320.4; Sun, 4 Mar 2018 19:02:46 -0600 Received: from xch-rcd-004.cisco.com ([173.37.102.14]) by XCH-RCD-004.cisco.com ([173.37.102.14]) with mapi id 15.00.1320.000; Sun, 4 Mar 2018 19:02:46 -0600 From: "Cullen Jennings (fluffy)" To: David Frankel CC: Jonathan Rosenberg , "stir@ietf.org" Thread-Topic: [stir] New draft draft-rosenberg-stir-callback-00 Thread-Index: AQHTscxMEkSy84qBRUqyekQmu3nZtqPACyMAgAExLwA= Date: Mon, 5 Mar 2018 01:02:46 +0000 Message-ID: References: <02f401d3b38d$754f0570$5fed1050$@zipdx.com> In-Reply-To: <02f401d3b38d$754f0570$5fed1050$@zipdx.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.19.228.210] Content-Type: multipart/alternative; boundary="_000_C886C1C80F584674BE37315878769155ciscocom_" MIME-Version: 1.0 Archived-At: Subject: Re: [stir] New draft draft-rosenberg-stir-callback-00 X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 05 Mar 2018 01:02:52 -0000 --_000_C886C1C80F584674BE37315878769155ciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 DQoNCk9uIE1hciA0LCAyMDE4LCBhdCAxMjo1MCBBTSwgRGF2aWQgRnJhbmtlbCA8ZGZyYW5rZWxA emlwZHguY29tPG1haWx0bzpkZnJhbmtlbEB6aXBkeC5jb20+PiB3cm90ZToNCg0KSGkgSm9uYXRo YW4gYW5kIEN1bGxlbiDigJMNCg0KSSByZWFkIHRoZSBkcmFmdCB3aXRoIGludGVyZXN0IGFuZCB3 b25kZXIgaWYgeW91IGNhbiBjbGFyaWZ5IGEgZmV3IHRoaW5ncyBmb3IgbWUuIE15IHVuZGVyc3Rh bmRpbmcgb2YgU0lQIG51YW5jZXMgaXMgbGltaXRlZCwgc28gSSBtYXkgYmUgb3Zlcmxvb2tpbmcg c29tZSBvYnZpb3VzIHRoaW5ncyBoZXJlLiBBdCB0aGUgc2FtZSB0aW1lLCBJ4oCZbSB0cnlpbmcg dG8gYmUgcHJhZ21hdGljIGFib3V0IGhvdyB0aGluZ3Mgd29yayBpbiB0aGUg4oCccmVhbCB3b3Js ZOKAnSB2cy4gdGhlIHdvcmxkIGFzIGRlZmluZWQgYnkgdGhlIHNwZWNzLg0KDQpTbyBteSBxdWVz dGlvbnMgLyBjb21tZW50cyBhcmU6DQoNCkEpIEkgc2VlIGluIHNlY3Rpb24gMyByZWZlcmVuY2Vz IHRvIFNVUFBPUlRFRCBhbmQgUkVRVUlSRSBoZWFkZXIgZmllbGRzIHRoYXQgaW5jbHVkZSDigJxz dGlyLWNhbGxiYWNr4oCdLiBUaGVuIGluIHN1Yi1wYXJ0IDEgb2Ygc2VjdGlvbiAzLCBpbiB0aGUg Y2FsbCBkaWFncmFtIEkgc2VlIHJlZmVyZW5jZXMgdG8gU1VQUE9SVEVEIGFuZCBSRVFVSVJFIGhl YWRlcnMgdGhhdCBzYXkg4oCcc3Rpci12ZXJpZnnigJ0uICAoTm90ZSwgYnR3LCB0aGF0IHRoZXJl IGFyZSB0d28gc3ViLXBhcnRzIDEgaW4gc2VjdGlvbiAzOyBJIHRoaW5rIHRoZXkgYXJlIHN1cHBv c2VkIHRvIGJlIG51bWJlcmVkIDEsIDIsIDMgaW5zdGVhZCBvZiAxLCAxLCAyLikgVGhlcmUgYXJl IGZ1cnRoZXIgcmVmZXJlbmNlcyBpbiB0aGUgZG9jdW1lbnQgdG8g4oCcc3Rpci12ZXJpZnnigJ0u IFRoZW4gaW4gc2VjdGlvbiA4LjEsIHRoZXJlIGFyZSByZWZlcmVuY2VzIHRvIGEg4oCcc2lwLXZl cmlmeeKAnSBPcHRpb24gVGFnLg0KDQpTbyBteSBxdWVzdGlvbiBpczogYXJlIOKAnHN0aXItY2Fs bGJhY2vigJ0sIOKAnHN0aXItdmVyaWZ54oCdIGFuZCDigJxzaXAtdmVyaWZ54oCdIGFsbCBtZWFu dCB0byBiZSB0aGUgc2FtZSBzdHJpbmcsIGFuZCBwZXJoYXBzIHRoZSBleGFjdCB2YWx1ZSBldm9s dmVkIGR1cmluZyBkZXZlbG9wbWVudCBvZiB0aGUgZG9jdW1lbnQ/IE9yIGFyZSB0aGVyZSByZWFs bHkgdHdvIG9yIHRocmVlIGRpZmZlcmVudCBvcHRpb24tdGFncyBpbnZvbHZlZCBoZXJlPyBPciBh bSBJIG1pc3NpbmcgaG93IHRoZXNlIHRocmVlIGRpZmZlcmVudCB2YWx1ZXMgYXJlIGFjdHVhbGx5 IGFwcGxpZWQ/DQoNCg0KV2UgcHJvYmFibHkganVzdCBtZXNzZWQgdXAgc29tZSBjdXQgYW5kIHBh c3RlIGFzIHdlIGNoYW5nZWQgbmFtZXMuDQoNCkIpIEluIHRoZSDigJxyZWFsIHdvcmxk4oCdLCBh IFBTVE4gY2FsbCBmcm9tIEJvYiAodGVsOjEsIHNlcnZlZCBieSBQcm92aWRlciBCKSwgdG8gQWxp Y2UgKHRlbDoyPHRlbDoxPiwgc2VydmVkIGJ5IFByb3ZpZGVyIEEpIGlzIG9mdGVuIGNvbXBsZXRl ZCBieSBCIHNlbmRpbmcgdGhlIGNhbGwgdG8gdHJhbnNpdCBwcm92aWRlciBYLCB3aGljaCwgZXZl biBpbiBhbiBlbmQtdG8tZW5kIFNJUCBjb25uZWN0aW9uLCB3aWxsIHJlLWluaXRpYXRlIHRoZSBj YWxsIGFuZCBzZW5kIGl0IHRvIHByb3ZpZGVyIFksIHdoaWNoIHRoZW4gcmUtaW5pdGlhdGVzIGl0 IGFuZCBzZW5kcyBpdCB0byB0ZXJtaW5hdGluZyBQcm92aWRlciBBLiAoTm90ZSB0aGF0IHRoZSBj YWxsIHBhdGggZnJvbSBCIHRvIEEgdHlwaWNhbGx5IGRvZXMgbm90IG5lY2Vzc2FyaWx5IGZvbGxv dyB0aGUgcmV2ZXJzZSBwYXRoIG9mIGEgY2FsbCBmcm9tIEEgdG8gQi4pDQoNClNvIGluIG9yZGVy IHRvIHByb3BhZ2F0ZSBwcm9wZXJseSBmcm9tIG9yaWdpbmF0aW9uIHRvIHRlcm1pbmF0aW9uLCB0 aGUg4oCcdmVyaWZ5aW5nIElOVklUReKAnSBwcm9wb3NlZCBpbiBzZWN0aW9uIDMsIGNvbnRhaW5p bmcgdGhlIFJFUVVJUkU6IHN0aXItY2FsbGJhY2sgaGVhZGVyLCB3aWxsIG5lZWQgdG8gZmlyc3Qg YmUgcHJvY2Vzc2VkIGJ5IFByb3ZpZGVyIFguIEFzIEkgdW5kZXJzdGFuZCBpdCwgWCB3aWxsIG5l ZWQgdG8gYmUgY2FwYWJsZSBvZiByZWNvZ25pemluZyB0aGUgbmV3IFJFUVVJUkUgaGVhZGVyIGFu ZCBrbm93aW5nIHRoYXQgaXQgbmVlZHMgdG8gcHJvcGFnYXRlIHRoZSBjYWxsIG9ud2FyZCAoTk9U IHJlamVjdCBpdCBkdWUgdG8gbGFjayBvZiBzdXBwb3J0IGZvciBzdGlyLWNhbGxiYWNrKSwgYW5k IHdpbGwgbmVlZCB0byBzZW5kIHRoZSBjYWxsIHRvIFkgd2l0aCB0aGUgbmV3IFJFUVVJUkUgaGVh ZGVyIGluY2x1ZGVkLiBBTkQgaXQgd2lsbCBhbHNvIG5lZWQgdG8ga25vdyB0aGF0IGl0IG5lZWRz IHRvIHByb3BhZ2F0ZSB0aGUgVkVSSUZZLUNBTEwgaGVhZGVyIGFzIHdlbGwuDQoNClkgd2lsbCBy ZWNlaXZlIHRoaXMgSU5WSVRFLCBhbmQgaXQgdG9vIHdpbGwgbmVlZCB0byBrbm93IHRoYXQgaXQg bmVlZHMgdG8gYWNjZXB0IHRoaXMgaW52aXRlIGFuZCBwcm9wYWdhdGUgaXQgb253YXJkIHdpdGgg dGhlIFJFUVVJUkUgYW5kIFZFUklGWS1DQUxMIGhlYWRlcnMuDQoNClNpbmNlIHN0aXItY2FsbGJh Y2sgaXMgbm90IHRvZGF5IGEgZGVmaW5lZCBvcHRpb24sIGlmIFggYW5kIFkgd2VyZSBjb25mb3Jt aW5nIHRvIHRoZSBTSVAgUkZDLCB0aGV5IHdvdWxkIHRvZGF5IHJlamVjdCB0aGlzIElOVklURS4g U28gZG9lcyB0aGlzIG1lYW4gdGhhdCB5b3VyIFNUSVItQ2FsbGJhY2sgYXBwcm9hY2ggd2lsbCBu ZWNlc3NpdGF0ZSB1cGRhdGVzIG9mIGN1cnJlbnRseS1jb25mb3JtaW5nIFVB4oCZcyBhY3Rpbmcg aW4gdGhlIHRyYW5zaXQgcm9sZSB0byBub3cgcHJvdmlkZSBzdXBwb3J0IGZvciB0aGlzIG5ldyB0 eXBlIG9mIElOVklURT8NCg0KRmluYWxseSwgaWYgYW5kIHdoZW4gdGhlIHZlcmlmaWNhdGlvbiBJ TlZJVEUgZ2V0cyB0byBBLCBhbmQgYXMgeW91ciBkb2N1bWVudCBleHBsYWlucywgQSB3aWxsIGhh dmUgdG8gYmUgc21hcnQgZW5vdWdoIHRvIHByb2Nlc3MgdGhlIHZlcmlmeSByZXF1ZXN0IGFuZCBz ZW5kIHRoZSBhcHByb3ByaWF0ZSByZXNwb25zZS4gVGhhdCBzdXBwb3J0IGlzIG5vdGVkIGluIHlv dXIgZG9jdW1lbnQ7IEnigJltIHdvbmRlcmluZyBpZiB5b3UgYWxzbyBuZWVkIHRvIGRvY3VtZW50 IHRoZSBraW5kIG9mIHN1cHBvcnQgdGhhdCB3aWxsIGJlIHJlcXVpcmVkIGZyb20gaW50ZXJtZWRp YXRlIHByb3ZpZGVycywgYW5kIG5vdGUgdGhlIGltcG9ydGFuY2Ugb2YgQSBiZWluZyBSRkMtY29t cGxpYW50IHdpdGggcmVzcGVjdCB0byBSRVFVSVJFIGhlYWRlcnMgaXQgZG9lcyBub3QgdW5kZXJz dGFuZC4NCg0KWWVzLCB5b3UgYXJlIHJpZ2h0IHRoZSBpbnRlcm1lZGlhdGUgcHJvdmlkZXJzIFNC Q3Mgd291bGQgbmVlZCB0byBiZSBjb25maWd1cmVkIHRvIHN1cHBvcnQgdGhhdCByZXF1aXJlIGhl YWRlci4gVGhpcyBpcyBjZXJ0YWlubHkgYSBkZXBsb3ltZW50IGlzc3VlIGJ1dCBJ4oCZbSBub3Qg c3VyZSBJIHNlZSBpdCBhcyBtdWNoIGRpZmZlcmVudCBmcm9tIHRoZSBzYW1lIFNCQ3MgbmVlZGlu ZyB0byBiZSBjb25maWd1cmVkIHRvIDgyMjQgSWRlbnRpdHkgaGVhZGVyLiBUaG91Z2h0cyA/DQoN Cg0KQykgQXQgdGhlIGVuZCBvZiBzZWN0aW9uIDMgeW91IG5vdGU6IOKAnFRoZSBwcmVzZW5jZSBv ZiB0aGUgUmVxdWlyZSBoZWFkZXIgZmllbGQgaW4gdGhlIHZlcmlmeWluZyBJTlZJVEUgaXMgY3Jp dGljYWwgdG8gdGhlIG9wZXJhdGlvbiBvZiB0aGUgc29sdXRpb24uICBJdCBwcmV2ZW50cyB0aGUg dmVyaWZ5aW5nIElOVklURSBmcm9tIGFjdHVhbGx5IHJpbmdpbmcgYSByZWFsIHBob25lLCB3aGlj aCB3b3VsZCBiZSBxdWl0ZSBhbm5veWluZy7igJ0gVGhpcyBpcyBteSBiaWdnZXN0IGNvbmNlcm4u DQoNCklmIHRoZSBuZXcgUkVRVUlSRSBoZWFkZXIgZ2V0cyBkcm9wcGVkIHNvbWV3aGVyZSBhbG9u ZyB0aGUgd2F5LCB0aGUgSU5WSVRFIHdpbGwgbG9vayDigJxub3JtYWzigJ0sIHNvIHdvbuKAmXQg UHJvdmlkZXIgQSByaW5nIEFsaWNl4oCZcyBwaG9uZT8gT3IsIGlmIEEgaXMgbm90IFJGQy1jb21w bGlhbnQgYW5kIGlnbm9yZXMgdGhlIFJFUVVJUkUgaGVhZGVyLCBBbGljZeKAmXMgcGhvbmUgd2ls bCByaW5nLiAoQW5kIG9mIGNvdXJzZSBpZiB0aGUgY2FsbCBvcmlnaW5hdG9yIHdhcyBzcG9vZmlu ZyB0aGUgbnVtYmVyLCBhbmQgaW4gZmFjdCBCb2LigJlzIHZlcmlmaWNhdGlvbiBJTlZJVEUgd2Vu dCB0byB0aGUgcmVhbCBvd25lciBvZiB0aGUgbnVtYmVyLCBzZXJ2ZWQgYnkgcHJvdmlkZXIgQywg QyB3b3VsZCBoYXZlIHRvIGJlIFJGQy1jb21wbGlhbnQgaW4gdGhpcyByZWdhcmQgb3IgdGhlIHJl YWwgbnVtYmVyIG93bmVy4oCZcyBwaG9uZSB3b3VsZCByaW5nLikNCg0KSSBhbSBuZXJ2b3VzIHRo YXQgaW4gdG9kYXnigJlzIHJlYWwgd29ybGQgZGVwbG95bWVudHMsIHlvdXIgYXBwcm9hY2ggaXMg ZnJhZ2lsZSBiZWNhdXNlIGl0IGlzIGRlcGVuZGVudCBvbiB0aGUgdmFyaW91cyBVQeKAmXMgaW4g dGhlIGNhbGwgcGF0aCBkaWxpZ2VudGx5IGZvbGxvd2luZyB0aGUgU0lQIFJGQy4NCg0KSSBtYWRl IGEgZmV3IHRlc3QgY2FsbHMgYWN0aW5nIGxpa2UgSSB3YXMgQm9i4oCZcyBVQSwgaGF2aW5nIHJl Y2VpdmVkIGFuIElOVklURSBmcm9tIEEgdGhhdCBJIHdhbnQgdG8gdmVyaWZ5LiBTbyBJIHNlbnQg YW4gSU5WSVRFIGJhY2sgdG93YXJkcyBBLCBpbnNlcnRpbmcgdGhlIFJFUVVJUkU6IHN0aXItY2Fs bGJhY2sgaGVhZGVyIGluIG15IG1vY2sg4oCcdmVyaWZpY2F0aW9u4oCdIElOVklURTsgSSBzZW50 IHRoZXNlIGNhbGxzIHRocm91Z2ggdmFyaW91cyByZWFsLXdvcmxkIHRlcm1pbmF0aW9uIHByb3Zp ZGVycy4NCg0KSW4gYSBjb3VwbGUgb2YgY2FzZXMsIEkgZ290IGJhY2sgNDIwIEJhZCBFeHRlbnNp b24gcmVzcG9uc2VzLiBUaGF04oCZcyBnb29kIGFuZCBiYWQ7IHRoZSBnb29kIG5ld3MgaXMgdGhh dCBpdCB0ZWxscyBtZSB0aGF0IHRob3NlIHBhcnRpY3VsYXIgVUHigJlzIEFSRSBSRkMgY29tcGxp YW50IGluIHRoaXMgcmVzcGVjdC4gVGhleSBkb27igJl0IHVuZGVyc3RhbmQgYSBSRVFVSVJFZCBv cHRpb24gc28gdGhleSBhcmUgbmVjZXNzYXJpbHkgcmVqZWN0aW5nIHRoZSBjYWxsLiBPbiB0aGUg b3RoZXIgaGFuZCwgaXQgcG9pbnRzIG91dCB0aGF0IGlmIHRoZXNlIFVB4oCZcyBhcmUgYWN0aW5n IGFzIGludGVybWVkaWF0ZSBwcm92aWRlcnMgKHdoaWNoLCBpbiB0aGVzZSBjYXNlcywgdGhleSBh cmUpLCB0aGV5IHdpbGwgbmVlZCB0byBiZSB1cGRhdGVkIHRvIGFjY2VwdCBhbmQgcGFzcyB0aGUg c3Rpci1jYWxsYmFjayByZWxhdGVkIGhlYWRlcnMgZXZlbiB0aG91Z2ggdGhleSBhcmUganVzdCBw cm92aWRpbmcgYSB0cmFuc2l0IGZ1bmN0aW9uIGFuZCBldmVuIHRob3VnaCB0aGV5IGFyZSBub3Qg YXNzdW1pbmcgYW55IHJlc3BvbnNpYmlsaXR5IGZvciB2ZXJpZmljYXRpb24uDQoNCkluIG15IG90 aGVyIHRlc3QgY2FzZXMsIHRoZSBkZXN0aW5hdGlvbiBwaG9uZSByYW5nIGV2ZW4gdGhvdWdoIHRo aXMgd2FzIHN1cHBvc2VkIHRvIGJlIGEg4oCcdmVyaWZpY2F0aW9u4oCdIElOVklURS4gVGhpcyB0 ZWxscyBtZSwgSSB0aGluaywgdGhhdCBhdCBsZWFzdCB0aGUgZmlyc3QgVUEgKFgsIGluIG15IGV4 cGxhbmF0aW9uIGFib3ZlKSBpbiB0aGUgdmVyaWZpY2F0aW9uIGNhbGwgcGF0aCBpcyBub24tUkZD LWNvbXBsYWludCwgYW5kIHRoYXQgZG93bnN0cmVhbSBVQeKAmXMgYXJlIGVpdGhlciBhbHNvIG5v bi1jb21wbGlhbnQsIG9yIHRoYXQgdGhlIFJFUVVJUkUgaGVhZGVyIGdvdCBkcm9wcGVkIGFsb25n IHRoZSB3YXkuDQoNCkkgYW0gbmVydm91cyBhYm91dCB0aGUgZXh0ZW50IHRvIHdoaWNoIGRlcGxv eWVkIFVB4oCZcyBhcmUgbm9uLVJGQy1jb21wbGlhbnQgd2l0aCByZXNwZWN0IHRvIHRoZSBSRVFV SVJFIGhlYWRlciwgYW5kIGhvdyB0aGF0IGNvdWxkIHVuZGVybWluZSBkZXBsb3lhYmlsaXR5IG9m IHRoaXMgc29sdXRpb24uIE1heWJlIHlvdSBpbnRlbmRlZCB0aGF0IHRoZSBzb2x1dGlvbiBvbmx5 IGFwcGx5IHdoZW4gQSBhbmQgQiBhcmUgZGlyZWN0bHkgY29ubmVjdGVkIGFuZCB0aGVyZSBhcmUg bm8gaW50ZXJtZWRpYXRlIHByb3ZpZGVycy4gQnV0IEnigJltIGNvbmNlcm5lZCB0aGF04oCZcyBv bmx5IGEgc21hbGwgZnJhY3Rpb24gb2Yg4oCccmVhbCB3b3JsZOKAnSBjYWxscyB0b2RheS4NCg0K DQpGaXJzdCBsZXQgbWUgc2F5IHRoYXQgaXMgYXdlc29tZSB5b3UganVzdCB3ZW50IGFuZCB0cmll ZCB0aGlzLiBJIGxvdmUgcmVhbCB3b3JsZCBkYXRhLiBTb21lIG9mIHRoZSB2ZXJzaW9uIG9mIEFz dGVyaXNrIEkgaGF2ZSBzZWVuIGNvbmZpZ3VyZWQgdGhhdCB3YXkgYnV0IHNvcnQgb2Ygc3VycHJp c2VkIGlmIHBlb3BsZSBhcmUgdXNpbmcgQUNNRSBvciBDaXNjbyBTQkNzIHRoYXQgd2F5LiBJIGNl cnRhaW5seSBkb27igJl0IGhhdmUgYW55IGRlc2lyZSB0byBlbWJhcnJhc3MgYW55IHBhcnRpY3Vs YXIgU1AgYWJvdXQgdGhlaXIgU0lQIGRlcGxveW1lbnQgYnV0IHdvdWxkIHlvdSBiZSB3aWxsaW5n IHRvIHNoYXJlIHdoYXQgcHJvdmlkZXJzIGRpZCB0aGlzIHN1Y2ggdGhhdCB3ZSBtaWdodCB0cnkg YW5kIHRyYWNrIGRvd24gd2h5IHRoZXkgZGlkIGl0IC0gdGhhdCBtaWdodCBoZWxwIGRlY2lkZSBo b3cgbXVjaCBvZiBhbiBpc3N1ZSBpdCBpcz8NCg0KDQpJIGFtIGludGVyZXN0ZWQgaW4geW91ciB0 aG91Z2h0cyBvbiB0aGVzZSBpdGVtcywgYW5kIG9uIGdldHRpbmcgbWUgYmFjayBvbiB0cmFjayBp ZiBJ4oCZdmUgbWlzdW5kZXJzdG9vZCBhc3BlY3RzIG9mIHRoZSBwcm9wb3NhbC4NCg0KDQpJIHRo aW5rIHlvdSBoYXZlIHVuZGVyc3Rvb2QgdGhlIGdpc3Qgb2YgdGhlIHByb3Bvc2FsIGFuZCBwZXJo YXBzIHdlIGhhdmUgc29tZSB0d2Vha3MgdG8gbWFrZS4gSSBhZ3JlZSB3aXRoIHlvdXIgaGlnaCBs ZXZlbCBwb2ludHMgb2YgdGhlcmUgYXJlIGludGVybWVkaWFyaWVzIGluIHRoZSBjYWxsIHdlIGNh cmUgYWJvdXQgYW5kIHRoYXQgaWYgYW55IHNlcnZlciBhbG9uZyB0aGUgY2hhaW4gaXMgbm9uIGNv bXBsaWFudCB3aXRoIHJlcXVpcmUsIGl0IGRvZXMgbm90IHdvcmsgd2VsbC4gUGVyaGFwcyB3ZSBj YW4gdGhpbmsgb2Ygd2F5cyB0byBtaXRpZ2F0ZSB0aGF0IGJ1dCBub3Qgb2J2aW91cyBob3cuDQoN Ck5vdyB0aGF0IHdlIGhhdmUgODgyNCBvdXQgdGhlIGRvb3IsIEnigJltIG1vcmUgdHJ5aW5nIG91 dCBpZGVhcyB0byBzZWUgd2hhdCBtaWdodCB3b3JrIHRvIGhlbHAgcmVkdWNlIFNQQU0gYW5kIEkg c2hhcmUgc29tZSBvZiB5b3VyIGNvbmNlcm5zIGFib3V0IHRoaXMgYnV0IG5vdCBzdXJlIHdoYXTi gJlzIGJldHRlciBmb3IgZGVwbG95bWVudC4NCg0KSG93ZXZlciwgYW55IGluIGJhbmQgU1RJUiBz b2x1dGlvbiBpcyBnb2luZyB0byByZXF1aXJlIHRoZSBzZXJ2aWNlIHByb3ZpZGVycyB0byB0ZXN0 IGFuZCBzdXBwb3J0IGl0LiBJIHdvdWxkIG5vdCBiZSBzdXJwcmlzZWQgdG8gZmluZCB0aGF0IGFu eSBTQkMgY29uZmlndXJlZCB0byBpZ25vcmUgdGhlIFJlcXVpcmUgaGVhZGVyIGlzIGFsc28gcHJl dHR5IHVubGlrZSB0byBwYXNzIHRoZSBJZGVudGl0eSBoZWFkZXIuICBGb3IgYSBsb25nIHRpbWUs IEkgaGF2ZSBzZWVuIG1hbnkgdGhpbmdzIGJsb2NrZWQgYXQgSUVURiBmcm9tIGJ5IHRoZSDigJxT QkMgd29u4oCZdCBzdXBwb3J0IHRoYXTigJ0gYXJndW1lbnQgYnV0IGluIHRoaXMgcGFydGljdWxh ciBjYXNlIGl0IGlzIGEgYml0IGRpZmZlcmVudC4gSWYgc29tZSBjYXJyaWVyIGhhcyBhbGwgb2Yg aXQgY3VzdG9tZXJzIGdldHRpbmcgYW4gaXJyaXRhdGluZyBjYWxsIGJhY2sgY2FsbCBldmVyIHRp bWUgdGhleSBkaWFsIGEgbmV3IG51bWJlciwgSeKAmW0gc3VyZSB0aGUgZWNvbm9taWNzIG9mIGN1 c3RvbWVyIHNhdGlzZmFjdGlvbiBhbmQgcmV0ZW50aW9uIHdpbGwgY2F1c2UgdGhhdCBjYXJyaWVy IHRvIGNoYW5nZSB0aGUgY29uZmlndXJhdGlvbiBvZiB0aGVpciBTQkMgdG8gbm90IGlnbm9yZSB0 aGUgUmVxdWlyZSBoZWFkZXIuDQoNCkkgYW0gd29ycmllZCBhYm91dCB0aGlzIGFuZCB0aGUgcmVz dCBvZiBTVElSIHdoZW4gdGhlIGludGVyY29ubmVjdCBiZXR3ZWVuIHRoZSBjYXJyaWVycyBpcyBT UzcuDQoNCg0KDQpEYXZpZA0KDQpEYXZpZCBGcmFua2VsDQpaaXBEWMKuIExMQw0KTW9udGUgU2Vy ZW5vLCBDQSBVU0ENClRlbDogMS04MDAtRlJBTktFTCAoMS04MDAtMzcyLTY1MzUpDQoNCkZyb206 IHN0aXIgPHN0aXItYm91bmNlc0BpZXRmLm9yZzxtYWlsdG86c3Rpci1ib3VuY2VzQGlldGYub3Jn Pj4gT24gQmVoYWxmIE9mIEpvbmF0aGFuIFJvc2VuYmVyZw0KU2VudDogVGh1cnNkYXksIE1hcmNo IDEsIDIwMTggNjoxNSBQTQ0KVG86IHN0aXJAaWV0Zi5vcmc8bWFpbHRvOnN0aXJAaWV0Zi5vcmc+ DQpTdWJqZWN0OiBbc3Rpcl0gTmV3IGRyYWZ0IGRyYWZ0LXJvc2VuYmVyZy1zdGlyLWNhbGxiYWNr LTAwDQoNCkhleSBhbGwgLSBiZWVuIGEgd2hpbGUgOikNCkN1bGxlbiBhbmQgSSB3cm90ZSB1cCBh IGNvbmNlcHQgZm9yIHVzaW5nIFNUSVIgd2l0aCBzZWxmLXNpZ25lZCBvciBkb21haW4gYmFzZWQg Y2VydHMsIGFuZCB0aGVuIGhhbmRsaW5nIG51bWJlciB2YWxpZGF0aW9uIHdpdGggYW4gaW4tYmFu ZCBjYWxsYmFjay4gV2UgdGhpbmsgaXRzIGEgcHJvbWlzaW5nIGFwcHJvYWNoIHRvIGFjY2VsZXJh dGUgU1RJUiBkZXBsb3ltZW50cywgc2luY2UgaXQgYWxsb3dzIHRoZW0gdG8gaGFwcGVuIHdpdGhv dXQgdGhlIGNlcnQgaW5mcmFzdHJ1Y3R1cmUgYmVpbmcgaW4gcGxhY2UuDQoNCmh0dHBzOi8vd3d3 LmlldGYub3JnL2lkL2RyYWZ0LXJvc2VuYmVyZy1zdGlyLWNhbGxiYWNrLTAwLnR4dA0KQ29tbWVu dHMgd2VsY29tZS4NCi1Kb25hdGhhbiBSLg0KDQotLQ0KSm9uYXRoYW4gUm9zZW5iZXJnLCBQaC5E Lg0KamRyb3NlbkBqZHJvc2VuLm5ldDxtYWlsdG86amRyb3NlbkBqZHJvc2VuLm5ldD4NCmh0dHA6 Ly93d3cuamRyb3Nlbi5uZXQ8aHR0cDovL3d3dy5qZHJvc2VuLm5ldC8+DQpfX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0Kc3RpciBtYWlsaW5nIGxpc3QNCnN0 aXJAaWV0Zi5vcmc8bWFpbHRvOnN0aXJAaWV0Zi5vcmc+DQpodHRwczovL3d3dy5pZXRmLm9yZy9t YWlsbWFuL2xpc3RpbmZvL3N0aXINCg0K --_000_C886C1C80F584674BE37315878769155ciscocom_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgbGluZS1icmVhazogYWZ0 ZXItd2hpdGUtc3BhY2U7IiBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCjxkaXY+PGJyIGNsYXNz PSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPk9u IE1hciA0LCAyMDE4LCBhdCAxMjo1MCBBTSwgRGF2aWQgRnJhbmtlbCAmbHQ7PGEgaHJlZj0ibWFp bHRvOmRmcmFua2VsQHppcGR4LmNvbSIgY2xhc3M9IiI+ZGZyYW5rZWxAemlwZHguY29tPC9hPiZn dDsgd3JvdGU6PC9kaXY+DQo8YnIgY2xhc3M9IkFwcGxlLWludGVyY2hhbmdlLW5ld2xpbmUiPg0K PGRpdiBjbGFzcz0iIj4NCjxtZXRhIG5hbWU9IkdlbmVyYXRvciIgY29udGVudD0iTWljcm9zb2Z0 IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiIGNsYXNzPSIiPg0KPHN0eWxlIGNsYXNzPSIiPjwh LS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IkNh bWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1mYWNl DQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAyIDQ7 fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpHZW9yZ2lhOw0KCXBhbm9zZS0xOjIgNCA1IDIg NSA0IDUgMiAzIDM7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5N c29Ob3JtYWwsIGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4w MDAxcHQ7DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1z ZXJpZjt9DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5 OTsNCgljb2xvcjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2aXNpdGVk LCBzcGFuLk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCglj b2xvcjpwdXJwbGU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpwLk1zb0xpc3RQYXJh Z3JhcGgsIGxpLk1zb0xpc3RQYXJhZ3JhcGgsIGRpdi5Nc29MaXN0UGFyYWdyYXBoDQoJe21zby1z dHlsZS1wcmlvcml0eTozNDsNCgltYXJnaW4tdG9wOjBpbjsNCgltYXJnaW4tcmlnaHQ6MGluOw0K CW1hcmdpbi1ib3R0b206MGluOw0KCW1hcmdpbi1sZWZ0Oi41aW47DQoJbWFyZ2luLWJvdHRvbTou MDAwMXB0Ow0KCWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMt c2VyaWY7fQ0KcC5tc29ub3JtYWwwLCBsaS5tc29ub3JtYWwwLCBkaXYubXNvbm9ybWFsMA0KCXtt c28tc3R5bGUtbmFtZTptc29ub3JtYWw7DQoJbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87DQoJbWFy Z2luLXJpZ2h0OjBpbjsNCgltc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzsNCgltYXJnaW4tbGVm dDowaW47DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1z ZXJpZjt9DQpzcGFuLkVtYWlsU3R5bGUxOA0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1yZXBs eTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjp3aW5kb3d0ZXh0 O30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5O30NCkBwYWdl IFdvcmRTZWN0aW9uMQ0KCXtzaXplOjguNWluIDExLjBpbjsNCgltYXJnaW46MS4waW4gMS4waW4g MS4waW4gMS4waW47fQ0KZGl2LldvcmRTZWN0aW9uMQ0KCXtwYWdlOldvcmRTZWN0aW9uMTt9DQot LT48L3N0eWxlPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVkZWZhdWx0cyB2OmV4 dD0iZWRpdCIgc3BpZG1heD0iMTAyNiIgLz4NCjwveG1sPjwhW2VuZGlmXS0tPjwhLS1baWYgZ3Rl IG1zbyA5XT48eG1sPg0KPG86c2hhcGVsYXlvdXQgdjpleHQ9ImVkaXQiPg0KPG86aWRtYXAgdjpl eHQ9ImVkaXQiIGRhdGE9IjEiIC8+DQo8L286c2hhcGVsYXlvdXQ+PC94bWw+PCFbZW5kaWZdLS0+ DQo8ZGl2IGxhbmc9IkVOLVVTIiBsaW5rPSJibHVlIiB2bGluaz0icHVycGxlIiBjbGFzcz0iIj4N CjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8ZGl2IGNsYXNzPSJNc29Ob3JtYWwiPkhpIEpv bmF0aGFuIGFuZCBDdWxsZW4g4oCTPG86cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjxkaXYgY2xh c3M9Ik1zb05vcm1hbCI+PG86cCBjbGFzcz0iIj4mbmJzcDs8L286cD48L2Rpdj4NCjxkaXYgY2xh c3M9Ik1zb05vcm1hbCI+SSByZWFkIHRoZSBkcmFmdCB3aXRoIGludGVyZXN0IGFuZCB3b25kZXIg aWYgeW91IGNhbiBjbGFyaWZ5IGEgZmV3IHRoaW5ncyBmb3IgbWUuIE15IHVuZGVyc3RhbmRpbmcg b2YgU0lQIG51YW5jZXMgaXMgbGltaXRlZCwgc28gSSBtYXkgYmUgb3Zlcmxvb2tpbmcgc29tZSBv YnZpb3VzIHRoaW5ncyBoZXJlLiBBdCB0aGUgc2FtZSB0aW1lLCBJ4oCZbSB0cnlpbmcgdG8gYmUg cHJhZ21hdGljIGFib3V0IGhvdyB0aGluZ3MNCiB3b3JrIGluIHRoZSDigJxyZWFsIHdvcmxk4oCd IHZzLiB0aGUgd29ybGQgYXMgZGVmaW5lZCBieSB0aGUgc3BlY3MuPG86cCBjbGFzcz0iIj48L286 cD48L2Rpdj4NCjxkaXYgY2xhc3M9Ik1zb05vcm1hbCI+PG86cCBjbGFzcz0iIj4mbmJzcDs8L286 cD48L2Rpdj4NCjxkaXYgY2xhc3M9Ik1zb05vcm1hbCI+U28gbXkgcXVlc3Rpb25zIC8gY29tbWVu dHMgYXJlOjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8ZGl2IGNsYXNzPSJNc29Ob3JtYWwi PjxvOnAgY2xhc3M9IiI+Jm5ic3A7PC9vOnA+PC9kaXY+DQo8ZGl2IGNsYXNzPSJNc29Ob3JtYWwi PkEpIEkgc2VlIGluIHNlY3Rpb24gMyByZWZlcmVuY2VzIHRvIFNVUFBPUlRFRCBhbmQgUkVRVUlS RSBoZWFkZXIgZmllbGRzIHRoYXQgaW5jbHVkZSDigJxzdGlyLWNhbGxiYWNr4oCdLiBUaGVuIGlu IHN1Yi1wYXJ0IDEgb2Ygc2VjdGlvbiAzLCBpbiB0aGUgY2FsbCBkaWFncmFtIEkgc2VlIHJlZmVy ZW5jZXMgdG8gU1VQUE9SVEVEIGFuZCBSRVFVSVJFIGhlYWRlcnMgdGhhdCBzYXkg4oCcc3Rpci12 ZXJpZnnigJ0uICZuYnNwOyhOb3RlLA0KIGJ0dywgdGhhdCB0aGVyZSBhcmUgdHdvIHN1Yi1wYXJ0 cyAxIGluIHNlY3Rpb24gMzsgSSB0aGluayB0aGV5IGFyZSBzdXBwb3NlZCB0byBiZSBudW1iZXJl ZCAxLCAyLCAzIGluc3RlYWQgb2YgMSwgMSwgMi4pIFRoZXJlIGFyZSBmdXJ0aGVyIHJlZmVyZW5j ZXMgaW4gdGhlIGRvY3VtZW50IHRvIOKAnHN0aXItdmVyaWZ54oCdLiBUaGVuIGluIHNlY3Rpb24g OC4xLCB0aGVyZSBhcmUgcmVmZXJlbmNlcyB0byBhIOKAnHNpcC12ZXJpZnnigJ0gT3B0aW9uIFRh Zy4NCjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8ZGl2IGNsYXNzPSJNc29Ob3JtYWwiPjxv OnAgY2xhc3M9IiI+Jm5ic3A7PC9vOnA+PC9kaXY+DQo8ZGl2IGNsYXNzPSJNc29Ob3JtYWwiPlNv IG15IHF1ZXN0aW9uIGlzOiBhcmUg4oCcc3Rpci1jYWxsYmFja+KAnSwg4oCcc3Rpci12ZXJpZnni gJ0gYW5kIOKAnHNpcC12ZXJpZnnigJ0gYWxsIG1lYW50IHRvIGJlIHRoZSBzYW1lIHN0cmluZywg YW5kIHBlcmhhcHMgdGhlIGV4YWN0IHZhbHVlIGV2b2x2ZWQgZHVyaW5nIGRldmVsb3BtZW50IG9m IHRoZSBkb2N1bWVudD8gT3IgYXJlIHRoZXJlIHJlYWxseSB0d28gb3IgdGhyZWUgZGlmZmVyZW50 IG9wdGlvbi10YWdzIGludm9sdmVkDQogaGVyZT8gT3IgYW0gSSBtaXNzaW5nIGhvdyB0aGVzZSB0 aHJlZSBkaWZmZXJlbnQgdmFsdWVzIGFyZSBhY3R1YWxseSBhcHBsaWVkPzxvOnAgY2xhc3M9IiI+ PC9vOnA+PC9kaXY+DQo8ZGl2IGNsYXNzPSJNc29Ob3JtYWwiPjxvOnAgY2xhc3M9IiI+Jm5ic3A7 PC9vOnA+PC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2 PjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KV2UgcHJvYmFibHkganVzdCBtZXNzZWQgdXAgc29tZSBj dXQgYW5kIHBhc3RlIGFzIHdlIGNoYW5nZWQgbmFtZXMuJm5ic3A7PC9kaXY+DQo8ZGl2PjxiciBj bGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0i Ij4NCjxkaXYgbGFuZz0iRU4tVVMiIGxpbms9ImJsdWUiIHZsaW5rPSJwdXJwbGUiIGNsYXNzPSIi Pg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxkaXYgY2xhc3M9Ik1zb05vcm1hbCI+Qikg SW4gdGhlIOKAnHJlYWwgd29ybGTigJ0sIGEgUFNUTiBjYWxsIGZyb20gQm9iICg8YSBocmVmPSJ0 ZWw6MSIgY2xhc3M9IiI+dGVsOjE8L2E+LCBzZXJ2ZWQgYnkgUHJvdmlkZXIgQiksIHRvIEFsaWNl ICg8YSBocmVmPSJ0ZWw6MSIgY2xhc3M9IiI+dGVsOjI8L2E+LCBzZXJ2ZWQgYnkgUHJvdmlkZXIg QSkgaXMgb2Z0ZW4gY29tcGxldGVkIGJ5IEIgc2VuZGluZyB0aGUgY2FsbCB0byB0cmFuc2l0IHBy b3ZpZGVyDQogWCwgd2hpY2gsIGV2ZW4gaW4gYW4gZW5kLXRvLWVuZCBTSVAgY29ubmVjdGlvbiwg d2lsbCByZS1pbml0aWF0ZSB0aGUgY2FsbCBhbmQgc2VuZCBpdCB0byBwcm92aWRlciBZLCB3aGlj aCB0aGVuIHJlLWluaXRpYXRlcyBpdCBhbmQgc2VuZHMgaXQgdG8gdGVybWluYXRpbmcgUHJvdmlk ZXIgQS4gKE5vdGUgdGhhdCB0aGUgY2FsbCBwYXRoIGZyb20gQiB0byBBIHR5cGljYWxseSBkb2Vz IG5vdCBuZWNlc3NhcmlseSBmb2xsb3cgdGhlIHJldmVyc2UgcGF0aA0KIG9mIGEgY2FsbCBmcm9t IEEgdG8gQi4pPG86cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjxkaXYgY2xhc3M9Ik1zb05vcm1h bCI+PG86cCBjbGFzcz0iIj4mbmJzcDs8L286cD48L2Rpdj4NCjxkaXYgY2xhc3M9Ik1zb05vcm1h bCI+U28gaW4gb3JkZXIgdG8gcHJvcGFnYXRlIHByb3Blcmx5IGZyb20gb3JpZ2luYXRpb24gdG8g dGVybWluYXRpb24sIHRoZSDigJx2ZXJpZnlpbmcgSU5WSVRF4oCdIHByb3Bvc2VkIGluIHNlY3Rp b24gMywgY29udGFpbmluZyB0aGUgUkVRVUlSRTogc3Rpci1jYWxsYmFjayBoZWFkZXIsIHdpbGwg bmVlZCB0byBmaXJzdCBiZSBwcm9jZXNzZWQgYnkgUHJvdmlkZXIgWC4gQXMgSSB1bmRlcnN0YW5k IGl0LCBYIHdpbGwgbmVlZA0KIHRvIGJlIGNhcGFibGUgb2YgcmVjb2duaXppbmcgdGhlIG5ldyBS RVFVSVJFIGhlYWRlciBhbmQga25vd2luZyB0aGF0IGl0IG5lZWRzIHRvIHByb3BhZ2F0ZSB0aGUg Y2FsbCBvbndhcmQgKE5PVCByZWplY3QgaXQgZHVlIHRvIGxhY2sgb2Ygc3VwcG9ydCBmb3Igc3Rp ci1jYWxsYmFjayksIGFuZCB3aWxsIG5lZWQgdG8gc2VuZCB0aGUgY2FsbCB0byBZIHdpdGggdGhl IG5ldyBSRVFVSVJFIGhlYWRlciBpbmNsdWRlZC4gQU5EIGl0IHdpbGwgYWxzbw0KIG5lZWQgdG8g a25vdyB0aGF0IGl0IG5lZWRzIHRvIHByb3BhZ2F0ZSB0aGUgVkVSSUZZLUNBTEwgaGVhZGVyIGFz IHdlbGwuPG86cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjxkaXYgY2xhc3M9Ik1zb05vcm1hbCI+ PG86cCBjbGFzcz0iIj4mbmJzcDs8L286cD48L2Rpdj4NCjxkaXYgY2xhc3M9Ik1zb05vcm1hbCI+ WSB3aWxsIHJlY2VpdmUgdGhpcyBJTlZJVEUsIGFuZCBpdCB0b28gd2lsbCBuZWVkIHRvIGtub3cg dGhhdCBpdCBuZWVkcyB0byBhY2NlcHQgdGhpcyBpbnZpdGUgYW5kIHByb3BhZ2F0ZSBpdCBvbndh cmQgd2l0aCB0aGUgUkVRVUlSRSBhbmQgVkVSSUZZLUNBTEwgaGVhZGVycy48bzpwIGNsYXNzPSIi PjwvbzpwPjwvZGl2Pg0KPGRpdiBjbGFzcz0iTXNvTm9ybWFsIj48bzpwIGNsYXNzPSIiPiZuYnNw OzwvbzpwPjwvZGl2Pg0KPGRpdiBjbGFzcz0iTXNvTm9ybWFsIj5TaW5jZSBzdGlyLWNhbGxiYWNr IGlzIG5vdCB0b2RheSBhIGRlZmluZWQgb3B0aW9uLCBpZiBYIGFuZCBZIHdlcmUgY29uZm9ybWlu ZyB0byB0aGUgU0lQIFJGQywgdGhleSB3b3VsZCB0b2RheSByZWplY3QgdGhpcyBJTlZJVEUuIFNv IGRvZXMgdGhpcyBtZWFuIHRoYXQgeW91ciBTVElSLUNhbGxiYWNrIGFwcHJvYWNoIHdpbGwgbmVj ZXNzaXRhdGUgdXBkYXRlcyBvZiBjdXJyZW50bHktY29uZm9ybWluZyBVQeKAmXMNCiBhY3Rpbmcg aW4gdGhlIHRyYW5zaXQgcm9sZSB0byBub3cgcHJvdmlkZSBzdXBwb3J0IGZvciB0aGlzIG5ldyB0 eXBlIG9mIElOVklURT88bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPGRpdiBjbGFzcz0iTXNv Tm9ybWFsIj48bzpwIGNsYXNzPSIiPiZuYnNwOzwvbzpwPjwvZGl2Pg0KPGRpdiBjbGFzcz0iTXNv Tm9ybWFsIj5GaW5hbGx5LCBpZiBhbmQgd2hlbiB0aGUgdmVyaWZpY2F0aW9uIElOVklURSBnZXRz IHRvIEEsIGFuZCBhcyB5b3VyIGRvY3VtZW50IGV4cGxhaW5zLCBBIHdpbGwgaGF2ZSB0byBiZSBz bWFydCBlbm91Z2ggdG8gcHJvY2VzcyB0aGUgdmVyaWZ5IHJlcXVlc3QgYW5kIHNlbmQgdGhlIGFw cHJvcHJpYXRlIHJlc3BvbnNlLiBUaGF0IHN1cHBvcnQgaXMgbm90ZWQgaW4geW91ciBkb2N1bWVu dDsgSeKAmW0gd29uZGVyaW5nDQogaWYgeW91IGFsc28gbmVlZCB0byBkb2N1bWVudCB0aGUga2lu ZCBvZiBzdXBwb3J0IHRoYXQgd2lsbCBiZSByZXF1aXJlZCBmcm9tIGludGVybWVkaWF0ZSBwcm92 aWRlcnMsIGFuZCBub3RlIHRoZSBpbXBvcnRhbmNlIG9mIEEgYmVpbmcgUkZDLWNvbXBsaWFudCB3 aXRoIHJlc3BlY3QgdG8gUkVRVUlSRSBoZWFkZXJzIGl0IGRvZXMgbm90IHVuZGVyc3RhbmQuPC9k aXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2PjxiciBjbGFz cz0iIj4NCjwvZGl2Pg0KWWVzLCB5b3UgYXJlIHJpZ2h0IHRoZSBpbnRlcm1lZGlhdGUgcHJvdmlk ZXJzIFNCQ3Mgd291bGQgbmVlZCB0byBiZSBjb25maWd1cmVkIHRvIHN1cHBvcnQgdGhhdCByZXF1 aXJlIGhlYWRlci4gVGhpcyBpcyBjZXJ0YWlubHkgYSBkZXBsb3ltZW50IGlzc3VlIGJ1dCBJ4oCZ bSBub3Qgc3VyZSBJIHNlZSBpdCBhcyBtdWNoIGRpZmZlcmVudCBmcm9tIHRoZSBzYW1lIFNCQ3Mg bmVlZGluZyB0byBiZSBjb25maWd1cmVkIHRvIDgyMjQgSWRlbnRpdHkgaGVhZGVyLg0KIFRob3Vn aHRzID8mbmJzcDs8L2Rpdj4NCjxkaXY+PGJyIGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0i Y2l0ZSIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBsYW5nPSJFTi1VUyIgbGluaz0i Ymx1ZSIgdmxpbms9InB1cnBsZSIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEi Pg0KPGRpdiBjbGFzcz0iTXNvTm9ybWFsIj48bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPGRp diBjbGFzcz0iTXNvTm9ybWFsIj48bzpwIGNsYXNzPSIiPiZuYnNwOzwvbzpwPjwvZGl2Pg0KPGRp diBjbGFzcz0iTXNvTm9ybWFsIj5DKSBBdCB0aGUgZW5kIG9mIHNlY3Rpb24gMyB5b3Ugbm90ZTog 4oCcVGhlIHByZXNlbmNlIG9mIHRoZSBSZXF1aXJlIGhlYWRlciBmaWVsZCBpbiB0aGUgdmVyaWZ5 aW5nIElOVklURSBpcyBjcml0aWNhbCB0byB0aGUgb3BlcmF0aW9uIG9mIHRoZSBzb2x1dGlvbi4m bmJzcDsgSXQgcHJldmVudHMgdGhlIHZlcmlmeWluZyBJTlZJVEUgZnJvbSBhY3R1YWxseSByaW5n aW5nIGEgcmVhbCBwaG9uZSwgd2hpY2ggd291bGQgYmUNCiBxdWl0ZSBhbm5veWluZy7igJ0gVGhp cyBpcyBteSBiaWdnZXN0IGNvbmNlcm4uPG86cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjxkaXYg Y2xhc3M9Ik1zb05vcm1hbCI+PG86cCBjbGFzcz0iIj4mbmJzcDs8L286cD48L2Rpdj4NCjxkaXYg Y2xhc3M9Ik1zb05vcm1hbCI+SWYgdGhlIG5ldyBSRVFVSVJFIGhlYWRlciBnZXRzIGRyb3BwZWQg c29tZXdoZXJlIGFsb25nIHRoZSB3YXksIHRoZSBJTlZJVEUgd2lsbCBsb29rIOKAnG5vcm1hbOKA nSwgc28gd29u4oCZdCBQcm92aWRlciBBIHJpbmcgQWxpY2XigJlzIHBob25lPyBPciwgaWYgQSBp cyBub3QgUkZDLWNvbXBsaWFudCBhbmQgaWdub3JlcyB0aGUgUkVRVUlSRSBoZWFkZXIsIEFsaWNl 4oCZcyBwaG9uZSB3aWxsIHJpbmcuIChBbmQgb2YgY291cnNlDQogaWYgdGhlIGNhbGwgb3JpZ2lu YXRvciB3YXMgc3Bvb2ZpbmcgdGhlIG51bWJlciwgYW5kIGluIGZhY3QgQm9i4oCZcyB2ZXJpZmlj YXRpb24gSU5WSVRFIHdlbnQgdG8gdGhlIHJlYWwgb3duZXIgb2YgdGhlIG51bWJlciwgc2VydmVk IGJ5IHByb3ZpZGVyIEMsIEMgd291bGQgaGF2ZSB0byBiZSBSRkMtY29tcGxpYW50IGluIHRoaXMg cmVnYXJkIG9yIHRoZSByZWFsIG51bWJlciBvd25lcuKAmXMgcGhvbmUgd291bGQgcmluZy4pPG86 cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjxkaXYgY2xhc3M9Ik1zb05vcm1hbCI+PG86cCBjbGFz cz0iIj4mbmJzcDs8L286cD48L2Rpdj4NCjxkaXYgY2xhc3M9Ik1zb05vcm1hbCI+SSBhbSBuZXJ2 b3VzIHRoYXQgaW4gdG9kYXnigJlzIHJlYWwgd29ybGQgZGVwbG95bWVudHMsIHlvdXIgYXBwcm9h Y2ggaXMgZnJhZ2lsZSBiZWNhdXNlIGl0IGlzIGRlcGVuZGVudCBvbiB0aGUgdmFyaW91cyBVQeKA mXMgaW4gdGhlIGNhbGwgcGF0aCBkaWxpZ2VudGx5IGZvbGxvd2luZyB0aGUgU0lQIFJGQy48bzpw IGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPGRpdiBjbGFzcz0iTXNvTm9ybWFsIj48bzpwIGNsYXNz PSIiPiZuYnNwOzwvbzpwPjwvZGl2Pg0KPGRpdiBjbGFzcz0iTXNvTm9ybWFsIj5JIG1hZGUgYSBm ZXcgdGVzdCBjYWxscyBhY3RpbmcgbGlrZSBJIHdhcyBCb2LigJlzIFVBLCBoYXZpbmcgcmVjZWl2 ZWQgYW4gSU5WSVRFIGZyb20gQSB0aGF0IEkgd2FudCB0byB2ZXJpZnkuIFNvIEkgc2VudCBhbiBJ TlZJVEUgYmFjayB0b3dhcmRzIEEsIGluc2VydGluZyB0aGUgUkVRVUlSRTogc3Rpci1jYWxsYmFj ayBoZWFkZXIgaW4gbXkgbW9jayDigJx2ZXJpZmljYXRpb27igJ0gSU5WSVRFOyBJIHNlbnQgdGhl c2UNCiBjYWxscyB0aHJvdWdoIHZhcmlvdXMgcmVhbC13b3JsZCB0ZXJtaW5hdGlvbiBwcm92aWRl cnMuIDxvOnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8ZGl2IGNsYXNzPSJNc29Ob3JtYWwiPjxv OnAgY2xhc3M9IiI+Jm5ic3A7PC9vOnA+PC9kaXY+DQo8ZGl2IGNsYXNzPSJNc29Ob3JtYWwiPklu IGEgY291cGxlIG9mIGNhc2VzLCBJIGdvdCBiYWNrIDQyMCBCYWQgRXh0ZW5zaW9uIHJlc3BvbnNl cy4gVGhhdOKAmXMgZ29vZCBhbmQgYmFkOyB0aGUgZ29vZCBuZXdzIGlzIHRoYXQgaXQgdGVsbHMg bWUgdGhhdCB0aG9zZSBwYXJ0aWN1bGFyIFVB4oCZcyBBUkUgUkZDIGNvbXBsaWFudCBpbiB0aGlz IHJlc3BlY3QuIFRoZXkgZG9u4oCZdCB1bmRlcnN0YW5kIGEgUkVRVUlSRWQgb3B0aW9uIHNvIHRo ZXkgYXJlIG5lY2Vzc2FyaWx5DQogcmVqZWN0aW5nIHRoZSBjYWxsLiBPbiB0aGUgb3RoZXIgaGFu ZCwgaXQgcG9pbnRzIG91dCB0aGF0IGlmIHRoZXNlIFVB4oCZcyBhcmUgYWN0aW5nIGFzIGludGVy bWVkaWF0ZSBwcm92aWRlcnMgKHdoaWNoLCBpbiB0aGVzZSBjYXNlcywgdGhleSBhcmUpLCB0aGV5 IHdpbGwgbmVlZCB0byBiZSB1cGRhdGVkIHRvIGFjY2VwdCBhbmQgcGFzcyB0aGUgc3Rpci1jYWxs YmFjayByZWxhdGVkIGhlYWRlcnMgZXZlbiB0aG91Z2ggdGhleSBhcmUganVzdCBwcm92aWRpbmcN CiBhIHRyYW5zaXQgZnVuY3Rpb24gYW5kIGV2ZW4gdGhvdWdoIHRoZXkgYXJlIG5vdCBhc3N1bWlu ZyBhbnkgcmVzcG9uc2liaWxpdHkgZm9yIHZlcmlmaWNhdGlvbi48bzpwIGNsYXNzPSIiPjwvbzpw PjwvZGl2Pg0KPGRpdiBjbGFzcz0iTXNvTm9ybWFsIj48bzpwIGNsYXNzPSIiPiZuYnNwOzwvbzpw PjwvZGl2Pg0KPGRpdiBjbGFzcz0iTXNvTm9ybWFsIj5JbiBteSBvdGhlciB0ZXN0IGNhc2VzLCB0 aGUgZGVzdGluYXRpb24gcGhvbmUgcmFuZyBldmVuIHRob3VnaCB0aGlzIHdhcyBzdXBwb3NlZCB0 byBiZSBhIOKAnHZlcmlmaWNhdGlvbuKAnSBJTlZJVEUuIFRoaXMgdGVsbHMgbWUsIEkgdGhpbmss IHRoYXQgYXQgbGVhc3QgdGhlIGZpcnN0IFVBIChYLCBpbiBteSBleHBsYW5hdGlvbiBhYm92ZSkg aW4gdGhlIHZlcmlmaWNhdGlvbiBjYWxsIHBhdGggaXMgbm9uLVJGQy1jb21wbGFpbnQsDQogYW5k IHRoYXQgZG93bnN0cmVhbSBVQeKAmXMgYXJlIGVpdGhlciBhbHNvIG5vbi1jb21wbGlhbnQsIG9y IHRoYXQgdGhlIFJFUVVJUkUgaGVhZGVyIGdvdCBkcm9wcGVkIGFsb25nIHRoZSB3YXkuPG86cCBj bGFzcz0iIj48L286cD48L2Rpdj4NCjxkaXYgY2xhc3M9Ik1zb05vcm1hbCI+PG86cCBjbGFzcz0i Ij4mbmJzcDs8L286cD48L2Rpdj4NCjxkaXYgY2xhc3M9Ik1zb05vcm1hbCI+SSBhbSBuZXJ2b3Vz IGFib3V0IHRoZSBleHRlbnQgdG8gd2hpY2ggZGVwbG95ZWQgVUHigJlzIGFyZSBub24tUkZDLWNv bXBsaWFudCB3aXRoIHJlc3BlY3QgdG8gdGhlIFJFUVVJUkUgaGVhZGVyLCBhbmQgaG93IHRoYXQg Y291bGQgdW5kZXJtaW5lIGRlcGxveWFiaWxpdHkgb2YgdGhpcyBzb2x1dGlvbi4gTWF5YmUgeW91 IGludGVuZGVkIHRoYXQgdGhlIHNvbHV0aW9uIG9ubHkgYXBwbHkgd2hlbiBBIGFuZCBCIGFyZQ0K IGRpcmVjdGx5IGNvbm5lY3RlZCBhbmQgdGhlcmUgYXJlIG5vIGludGVybWVkaWF0ZSBwcm92aWRl cnMuIEJ1dCBJ4oCZbSBjb25jZXJuZWQgdGhhdOKAmXMgb25seSBhIHNtYWxsIGZyYWN0aW9uIG9m IOKAnHJlYWwgd29ybGTigJ0gY2FsbHMgdG9kYXkuPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9k aXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2PjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdj48YnIg Y2xhc3M9IiI+DQo8L2Rpdj4NCkZpcnN0IGxldCBtZSBzYXkgdGhhdCBpcyBhd2Vzb21lIHlvdSBq dXN0IHdlbnQgYW5kIHRyaWVkIHRoaXMuIEkgbG92ZSByZWFsIHdvcmxkIGRhdGEuIFNvbWUgb2Yg dGhlIHZlcnNpb24gb2YgQXN0ZXJpc2sgSSBoYXZlIHNlZW4gY29uZmlndXJlZCB0aGF0IHdheSBi dXQgc29ydCBvZiBzdXJwcmlzZWQgaWYgcGVvcGxlIGFyZSB1c2luZyBBQ01FIG9yIENpc2NvIFNC Q3MgdGhhdCB3YXkuIEkgY2VydGFpbmx5IGRvbuKAmXQgaGF2ZSBhbnkgZGVzaXJlIHRvDQogZW1i YXJyYXNzIGFueSBwYXJ0aWN1bGFyIFNQIGFib3V0IHRoZWlyIFNJUCBkZXBsb3ltZW50IGJ1dCB3 b3VsZCB5b3UgYmUgd2lsbGluZyB0byBzaGFyZSB3aGF0IHByb3ZpZGVycyBkaWQgdGhpcyBzdWNo IHRoYXQgd2UgbWlnaHQgdHJ5IGFuZCB0cmFjayBkb3duIHdoeSB0aGV5IGRpZCBpdCAtIHRoYXQg bWlnaHQgaGVscCBkZWNpZGUgaG93IG11Y2ggb2YgYW4gaXNzdWUgaXQgaXM/Jm5ic3A7PC9kaXY+ DQo8ZGl2PjxiciBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0K PGRpdiBjbGFzcz0iIj4NCjxkaXYgbGFuZz0iRU4tVVMiIGxpbms9ImJsdWUiIHZsaW5rPSJwdXJw bGUiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxkaXYgY2xhc3M9Ik1z b05vcm1hbCI+PG86cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjxkaXYgY2xhc3M9Ik1zb05vcm1h bCI+PG86cCBjbGFzcz0iIj4mbmJzcDs8L286cD48L2Rpdj4NCjxkaXYgY2xhc3M9Ik1zb05vcm1h bCI+SSBhbSBpbnRlcmVzdGVkIGluIHlvdXIgdGhvdWdodHMgb24gdGhlc2UgaXRlbXMsIGFuZCBv biBnZXR0aW5nIG1lIGJhY2sgb24gdHJhY2sgaWYgSeKAmXZlIG1pc3VuZGVyc3Rvb2QgYXNwZWN0 cyBvZiB0aGUgcHJvcG9zYWwuPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2Nr cXVvdGU+DQo8ZGl2PjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdj48YnIgY2xhc3M9IiI+DQo8 L2Rpdj4NCjwvZGl2Pg0KPGRpdj5JIHRoaW5rIHlvdSBoYXZlIHVuZGVyc3Rvb2QgdGhlIGdpc3Qg b2YgdGhlIHByb3Bvc2FsIGFuZCBwZXJoYXBzIHdlIGhhdmUgc29tZSB0d2Vha3MgdG8gbWFrZS4g SSBhZ3JlZSB3aXRoIHlvdXIgaGlnaCBsZXZlbCBwb2ludHMgb2YgdGhlcmUgYXJlIGludGVybWVk aWFyaWVzIGluIHRoZSBjYWxsIHdlIGNhcmUgYWJvdXQgYW5kIHRoYXQgaWYgYW55IHNlcnZlciBh bG9uZyB0aGUgY2hhaW4gaXMgbm9uIGNvbXBsaWFudCB3aXRoIHJlcXVpcmUsDQogaXQgZG9lcyBu b3Qgd29yayB3ZWxsLiBQZXJoYXBzIHdlIGNhbiB0aGluayBvZiB3YXlzIHRvIG1pdGlnYXRlIHRo YXQgYnV0IG5vdCBvYnZpb3VzIGhvdy4mbmJzcDs8L2Rpdj4NCjxkaXY+PGJyIGNsYXNzPSIiPg0K PC9kaXY+DQo8ZGl2Pk5vdyB0aGF0IHdlIGhhdmUgODgyNCBvdXQgdGhlIGRvb3IsIEnigJltIG1v cmUgdHJ5aW5nIG91dCBpZGVhcyB0byBzZWUgd2hhdCBtaWdodCB3b3JrIHRvIGhlbHAgcmVkdWNl IFNQQU0gYW5kIEkgc2hhcmUgc29tZSBvZiB5b3VyIGNvbmNlcm5zIGFib3V0IHRoaXMgYnV0IG5v dCBzdXJlIHdoYXTigJlzIGJldHRlciBmb3IgZGVwbG95bWVudC4mbmJzcDs8L2Rpdj4NCjxkaXY+ PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2Pkhvd2V2ZXIsIGFueSBpbiBiYW5kIFNUSVIgc29s dXRpb24gaXMgZ29pbmcgdG8gcmVxdWlyZSB0aGUgc2VydmljZSBwcm92aWRlcnMgdG8gdGVzdCBh bmQgc3VwcG9ydCBpdC4gSSB3b3VsZCBub3QgYmUgc3VycHJpc2VkIHRvIGZpbmQgdGhhdCBhbnkg U0JDIGNvbmZpZ3VyZWQgdG8gaWdub3JlIHRoZSBSZXF1aXJlIGhlYWRlciBpcyBhbHNvIHByZXR0 eSB1bmxpa2UgdG8gcGFzcyB0aGUgSWRlbnRpdHkgaGVhZGVyLiAmbmJzcDtGb3IgYSBsb25nIHRp bWUsDQogSSBoYXZlIHNlZW4gbWFueSB0aGluZ3MgYmxvY2tlZCBhdCBJRVRGIGZyb20gYnkgdGhl IOKAnFNCQyB3b27igJl0IHN1cHBvcnQgdGhhdOKAnSBhcmd1bWVudCBidXQgaW4gdGhpcyBwYXJ0 aWN1bGFyIGNhc2UgaXQgaXMgYSBiaXQgZGlmZmVyZW50LiBJZiBzb21lIGNhcnJpZXIgaGFzIGFs bCBvZiBpdCBjdXN0b21lcnMgZ2V0dGluZyBhbiBpcnJpdGF0aW5nIGNhbGwgYmFjayBjYWxsIGV2 ZXIgdGltZSB0aGV5IGRpYWwgYSBuZXcgbnVtYmVyLCBJ4oCZbSBzdXJlDQogdGhlIGVjb25vbWlj cyBvZiBjdXN0b21lciBzYXRpc2ZhY3Rpb24gYW5kIHJldGVudGlvbiB3aWxsIGNhdXNlIHRoYXQg Y2FycmllciB0byBjaGFuZ2UgdGhlIGNvbmZpZ3VyYXRpb24gb2YgdGhlaXIgU0JDIHRvIG5vdCBp Z25vcmUgdGhlIFJlcXVpcmUgaGVhZGVyLiZuYnNwOzwvZGl2Pg0KPGRpdj48YnIgY2xhc3M9IiI+ DQo8L2Rpdj4NCjxkaXY+SSBhbSB3b3JyaWVkIGFib3V0IHRoaXMgYW5kIHRoZSByZXN0IG9mIFNU SVIgd2hlbiB0aGUgaW50ZXJjb25uZWN0IGJldHdlZW4gdGhlIGNhcnJpZXJzIGlzIFNTNy4mbmJz cDs8L2Rpdj4NCjxkaXY+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2PjxiciBjbGFzcz0iIj4N CjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYg bGFuZz0iRU4tVVMiIGxpbms9ImJsdWUiIHZsaW5rPSJwdXJwbGUiIGNsYXNzPSIiPg0KPGRpdiBj bGFzcz0iV29yZFNlY3Rpb24xIj4NCjxkaXYgY2xhc3M9Ik1zb05vcm1hbCI+PG86cCBjbGFzcz0i Ij48L286cD48L2Rpdj4NCjxkaXYgY2xhc3M9Ik1zb05vcm1hbCI+PG86cCBjbGFzcz0iIj4mbmJz cDs8L286cD48L2Rpdj4NCjxkaXYgY2xhc3M9Ik1zb05vcm1hbCI+RGF2aWQ8bzpwIGNsYXNzPSIi PjwvbzpwPjwvZGl2Pg0KPGRpdiBjbGFzcz0iTXNvTm9ybWFsIj48bzpwIGNsYXNzPSIiPiZuYnNw OzwvbzpwPjwvZGl2Pg0KPGRpdiBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6 IzFGNDk3RDttc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1UVyIgY2xhc3M9IiI+RGF2aWQgRnJhbmtl bDwvc3Bhbj48c3BhbiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6WkgtVFciIGNsYXNzPSIi PjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9zcGFuPjwvZGl2Pg0KPGRpdiBjbGFzcz0iTXNvTm9ybWFs Ij48YiBjbGFzcz0iIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7R2VvcmdpYSZxdW90 OyxzZXJpZjtjb2xvcjojNjY5OUNDO21zby1mYXJlYXN0LWxhbmd1YWdlOlpILVRXIiBjbGFzcz0i Ij5aaXA8L3NwYW4+PC9iPjxiIGNsYXNzPSIiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVv dDtHZW9yZ2lhJnF1b3Q7LHNlcmlmO2NvbG9yOmdyYXk7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6Wkgt VFciIGNsYXNzPSIiPkRYPC9zcGFuPjwvYj48YiBjbGFzcz0iIj48c3VwIGNsYXNzPSIiPjxzcGFu IHN0eWxlPSIiIGNsYXNzPSIiPsKuPC9zcGFuPjwvc3VwPjwvYj48c3BhbiBzdHlsZT0iY29sb3I6 IzFGNDk3RDttc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1UVyIgY2xhc3M9IiI+DQogTExDPC9zcGFu PjxzcGFuIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1UVyIgY2xhc3M9IiI+PG86cCBj bGFzcz0iIj48L286cD48L3NwYW4+PC9kaXY+DQo8ZGl2IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJjb2xvcjojMUY0OTdEO21zby1mYXJlYXN0LWxhbmd1YWdlOlpILVRXIiBjbGFzcz0i Ij5Nb250ZSBTZXJlbm8sIENBIFVTQTwvc3Bhbj48c3BhbiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFu Z3VhZ2U6WkgtVFciIGNsYXNzPSIiPjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9zcGFuPjwvZGl2Pg0K PGRpdiBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RDttc28tZmFy ZWFzdC1sYW5ndWFnZTpaSC1UVyIgY2xhc3M9IiI+VGVsOiAxLTgwMC1GUkFOS0VMICgxLTgwMC0z NzItNjUzNSk8L3NwYW4+PHNwYW4gc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOlpILVRXIiBj bGFzcz0iIj48bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bhbj48L2Rpdj4NCjxkaXYgY2xhc3M9Ik1z b05vcm1hbCI+PG86cCBjbGFzcz0iIj4mbmJzcDs8L286cD48L2Rpdj4NCjxkaXYgY2xhc3M9Ik1z b05vcm1hbCI+PGIgY2xhc3M9IiI+RnJvbTo8L2I+IHN0aXIgJmx0OzxhIGhyZWY9Im1haWx0bzpz dGlyLWJvdW5jZXNAaWV0Zi5vcmciIGNsYXNzPSIiPnN0aXItYm91bmNlc0BpZXRmLm9yZzwvYT4m Z3Q7DQo8YiBjbGFzcz0iIj5PbiBCZWhhbGYgT2YgPC9iPkpvbmF0aGFuIFJvc2VuYmVyZzxiciBj bGFzcz0iIj4NCjxiIGNsYXNzPSIiPlNlbnQ6PC9iPiBUaHVyc2RheSwgTWFyY2ggMSwgMjAxOCA2 OjE1IFBNPGJyIGNsYXNzPSIiPg0KPGIgY2xhc3M9IiI+VG86PC9iPiA8YSBocmVmPSJtYWlsdG86 c3RpckBpZXRmLm9yZyIgY2xhc3M9IiI+c3RpckBpZXRmLm9yZzwvYT48YnIgY2xhc3M9IiI+DQo8 YiBjbGFzcz0iIj5TdWJqZWN0OjwvYj4gW3N0aXJdIE5ldyBkcmFmdCBkcmFmdC1yb3NlbmJlcmct c3Rpci1jYWxsYmFjay0wMDxvOnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8ZGl2IGNsYXNzPSJN c29Ob3JtYWwiPjxvOnAgY2xhc3M9IiI+Jm5ic3A7PC9vOnA+PC9kaXY+DQo8ZGl2IGNsYXNzPSIi Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1ib3R0b206MTIuMHB0Ij5IZXkgYWxsIC0gYmVl biBhIHdoaWxlIDopPG86cCBjbGFzcz0iIj48L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tYm90dG9tOjEyLjBwdCI+Q3VsbGVuIGFuZCBJIHdyb3Rl IHVwIGEgY29uY2VwdCBmb3IgdXNpbmcgU1RJUiB3aXRoIHNlbGYtc2lnbmVkIG9yIGRvbWFpbiBi YXNlZCBjZXJ0cywgYW5kIHRoZW4gaGFuZGxpbmcgbnVtYmVyIHZhbGlkYXRpb24gd2l0aCBhbiBp bi1iYW5kIGNhbGxiYWNrLiBXZSB0aGluayBpdHMgYSBwcm9taXNpbmcgYXBwcm9hY2ggdG8gYWNj ZWxlcmF0ZSBTVElSIGRlcGxveW1lbnRzLA0KIHNpbmNlIGl0IGFsbG93cyB0aGVtIHRvIGhhcHBl biB3aXRob3V0IHRoZSBjZXJ0IGluZnJhc3RydWN0dXJlIGJlaW5nIGluIHBsYWNlLiA8YnIgY2xh c3M9IiI+DQo8YnIgY2xhc3M9IiI+DQo8YSBocmVmPSJodHRwczovL3d3dy5pZXRmLm9yZy9pZC9k cmFmdC1yb3NlbmJlcmctc3Rpci1jYWxsYmFjay0wMC50eHQiIGNsYXNzPSIiPmh0dHBzOi8vd3d3 LmlldGYub3JnL2lkL2RyYWZ0LXJvc2VuYmVyZy1zdGlyLWNhbGxiYWNrLTAwLnR4dDwvYT48bzpw IGNsYXNzPSIiPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1hcmdpbi1ib3R0b206MTIuMHB0Ij5Db21tZW50cyB3ZWxjb21lLiA8bzpwIGNsYXNzPSIiPg0K PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSJNc29Ob3JtYWwiPi1Kb25hdGhhbiBSLjxi ciBjbGVhcj0iYWxsIiBjbGFzcz0iIj4NCjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8ZGl2 IGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIi Pg0KPGRpdiBjbGFzcz0iTXNvTm9ybWFsIj48YnIgY2xhc3M9IiI+DQotLSA8bzpwIGNsYXNzPSIi PjwvbzpwPjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGNsYXNz PSJNc29Ob3JtYWwiPkpvbmF0aGFuIFJvc2VuYmVyZywgUGguRC48YnIgY2xhc3M9IiI+DQo8YSBo cmVmPSJtYWlsdG86amRyb3NlbkBqZHJvc2VuLm5ldCIgdGFyZ2V0PSJfYmxhbmsiIGNsYXNzPSIi Pmpkcm9zZW5AamRyb3Nlbi5uZXQ8L2E+PGJyIGNsYXNzPSIiPg0KPGEgaHJlZj0iaHR0cDovL3d3 dy5qZHJvc2VuLm5ldC8iIHRhcmdldD0iX2JsYW5rIiBjbGFzcz0iIj5odHRwOi8vd3d3Lmpkcm9z ZW4ubmV0PC9hPjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9k aXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQpfX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXzxiciBjbGFzcz0iIj4N CnN0aXIgbWFpbGluZyBsaXN0PGJyIGNsYXNzPSIiPg0KPGEgaHJlZj0ibWFpbHRvOnN0aXJAaWV0 Zi5vcmciIGNsYXNzPSIiPnN0aXJAaWV0Zi5vcmc8L2E+PGJyIGNsYXNzPSIiPg0KaHR0cHM6Ly93 d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9zdGlyPGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8 L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjxiciBjbGFzcz0iIj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_C886C1C80F584674BE37315878769155ciscocom_-- From nobody Mon Mar 5 08:19:36 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 721AF12D879 for ; Mon, 5 Mar 2018 08:19:33 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.009 X-Spam-Level: X-Spam-Status: No, score=-2.009 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=zipdx.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cLRG7D4ELeX6 for ; Mon, 5 Mar 2018 08:19:29 -0800 (PST) Received: from xdev1sjc.zipdx.com (sjc-e-66.zipdx.com [166.88.23.66]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EDC4E12D94C for ; Mon, 5 Mar 2018 08:19:28 -0800 (PST) Received: from DPFENVY (c-98-210-64-228.hsd1.ca.comcast.net [98.210.64.228]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) (Authenticated sender: dfrankel) by xdev1sjc.zipdx.com (Postfix) with ESMTPSA id 7E6241B800E9; Mon, 5 Mar 2018 08:19:28 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=zipdx.com; s=default; t=1520266768; bh=VuTaaPWo4gM80I5UWdhMM91kKxUqwkIk0/PPf04VJv8=; h=From:To:Cc:References:In-Reply-To:Subject:Date:From; b=SoOu3XoXUPe3Z9CCdcIRA8xC6Y6s2F7hbACWgWmzE85QhQD/mg5KbPItVuKnvU1QC Rp6c84ryXYZPjoG6VaOLn9+pShYJzWiV16uSDoMsKc+0gfCmHipQsVeTMXwN+T5ig2 DfXV9jeOEKuBC11tL+tgMuW5PjRAje4PNYZThRUI= From: "David Frankel" To: "'Cullen Jennings \(fluffy\)'" Cc: "'Jonathan Rosenberg'" , References: <02f401d3b38d$754f0570$5fed1050$@zipdx.com> In-Reply-To: Date: Mon, 5 Mar 2018 08:19:30 -0800 Organization: ZipDX LLC Message-ID: <046801d3b49d$bd6c68a0$384539e0$@zipdx.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0469_01D3B45A.AF49EBF0" X-Mailer: Microsoft Outlook 16.0 Thread-Index: AQMNzGGZoHHMUr8ow6+gR+Dmf47KwgFzK0d8AgErJNKhMRbkIA== Content-Language: en-us Archived-At: Subject: Re: [stir] New draft draft-rosenberg-stir-callback-00 X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 05 Mar 2018 16:19:34 -0000 This is a multipart message in MIME format. ------=_NextPart_000_0469_01D3B45A.AF49EBF0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Thanks for your response, Cullen. =20 I=E2=80=99ll try to address your questions and comments at the top here, = rather than burying them below. =20 Regarding specifics of the misbehaving SBCs: I=E2=80=99m not comfortable = identifying them here, but I can try to reach out to them to see if they = want to engage directly in this discussion (or if they can give me any = information to relay as to why they are non-conforming). I can tell you = that they are all licensed CLECs (ranging from tiny to very large). From = my parsing of the 200-OK they send back to me, at least some are using = commercial SBCs; in one case, it looks like that SBC provider is now out = of business. That=E2=80=99s not uncommon in this domain.=20 =20 I can think of a few possibilities as to why these SBCs are behaving as = they are: (1) The manufacturer didn=E2=80=99t adhere to the SIP RFCs, = either on purpose or due to carelessness; (2) The provider = mis-configured the SBC in error; (3) The default configuration for the = SBC doesn=E2=80=99t adhere to the RFCs; (4) The provider encountered = some issue in the past and purposefully altered the configuration, and = this is the desired result or side-effect; (5) There=E2=80=99s a bug. = I=E2=80=99ve encountered all of these over the years. =20 Certainly some providers will be motivated and cooperative in fixing = problems and implementing new extensions. Others will be recalcitrant. I = have said to providers about other non-compliant situations: = =E2=80=9CRead the RFC. What don=E2=80=99t you understand about SHALL or = MUST?=E2=80=9D And they respond =E2=80=9CWhat don=E2=80=99t YOU = understand when we tell you: We don=E2=80=99t support that aspect of the = RFC.=E2=80=9D With respect to STIR-Callback specifically, I can imagine = that for our example, where B is sending a verify invite to A via X and = Y, Alice=E2=80=99s phone will ring improperly, but A will point the = finger at X (or Y) for dropping the REQUIRE header. Since Alice is a = customer of A and not X, your notion of =E2=80=9Cthe economics of = customer satisfaction and retention=E2=80=9D won=E2=80=99t apply. =20 I agree with you: these same factors will definitely play into 8224 = deployment and the propagation of the IDENTITY header. I believe that = the team will be successful with some relatively rapid initial = in-the-field demonstrations. But if your objective is to make a serious = dent in the robocalling epidemic, that requires much higher penetration = because you=E2=80=99re battling a reactive, clever enemy force. Given = everything that has to change for 8224, that is going to take many = years. =20 Herding the many hundreds of US telecom providers that it takes to get = to critical mass is a huge hurdle when we have to write new software and = then get it deployed and configured. The multi-hop nature of our call = network means we fail on a weak link. Worse, given the robustness of SS7 = and the huge sunk investment, it=E2=80=99s going to take quite some time = for it to be displaced to a level of insignificance. We=E2=80=99ll live = in a two-protocol world for the foreseeable future. =20 What to do in the meantime? I continue to be optimistic about leveraging = BILLING TELEPHONE NUMBER =E2=80=93 a field that predates even Caller-ID. = BTN is in SS7 as Charge Number, and interworks to SIP P-Charge-Info. In = earlier days, BTN was important for billing and jurisdiction; things = that providers HAD to pay attention to. Thus, it IS supported in = virtually all installed network elements. In my experience, it usually = gets propagated by intermediaries.=20 =20 By using BTN to identify call originators, or at least originating = providers, we can throw a much brighter light on the source of our = robocall problems, instead of continuing to flounder in the dark. That = can be accomplished by regulation, mandating that providers insert the = BTN and not permit customers to spoof it. This approach won=E2=80=99t = work 100% of the time, but it can make a huge bite today while we wait = for more sophisticated solutions to get to critical mass. I=E2=80=99m = interested in your thoughts here. =20 Many are quick to point out that robocalls can originate from overseas, = where our mandates are ineffective. However, every call to a USA PSTN = number comes through some USA-regulated originating provider, and those = providers have commercial agreements with whoever is sending them the = calls. So there is a mechanism to push back on the ultimate source. = There=E2=80=99s a fair amount of evidence that at least today, the = majority of robocalls come from a relatively small number (dozens) of = sources, so our first priority should be to find and stop those. =20 David =20 David Frankel ZipDX=C2=AE LLC Monte Sereno, CA USA Tel: 1-800-FRANKEL (1-800-372-6535) =20 From: stir On Behalf Of Cullen Jennings (fluffy) Sent: Sunday, March 4, 2018 5:03 PM To: David Frankel Cc: Jonathan Rosenberg ; stir@ietf.org Subject: Re: [stir] New draft draft-rosenberg-stir-callback-00 =20 =20 On Mar 4, 2018, at 12:50 AM, David Frankel > wrote: =20 Hi Jonathan and Cullen =E2=80=93 =20 I read the draft with interest and wonder if you can clarify a few = things for me. My understanding of SIP nuances is limited, so I may be = overlooking some obvious things here. At the same time, I=E2=80=99m = trying to be pragmatic about how things work in the =E2=80=9Creal = world=E2=80=9D vs. the world as defined by the specs. =20 So my questions / comments are: =20 A) I see in section 3 references to SUPPORTED and REQUIRE header fields = that include =E2=80=9Cstir-callback=E2=80=9D. Then in sub-part 1 of = section 3, in the call diagram I see references to SUPPORTED and REQUIRE = headers that say =E2=80=9Cstir-verify=E2=80=9D. (Note, btw, that there = are two sub-parts 1 in section 3; I think they are supposed to be = numbered 1, 2, 3 instead of 1, 1, 2.) There are further references in = the document to =E2=80=9Cstir-verify=E2=80=9D. Then in section 8.1, = there are references to a =E2=80=9Csip-verify=E2=80=9D Option Tag.=20 =20 So my question is: are =E2=80=9Cstir-callback=E2=80=9D, = =E2=80=9Cstir-verify=E2=80=9D and =E2=80=9Csip-verify=E2=80=9D all meant = to be the same string, and perhaps the exact value evolved during = development of the document? Or are there really two or three different = option-tags involved here? Or am I missing how these three different = values are actually applied? =20 =20 We probably just messed up some cut and paste as we changed names.=20 B) In the =E2=80=9Creal world=E2=80=9D, a PSTN call from Bob (tel:1, = served by Provider B), to Alice (tel:2 , served by Provider A) = is often completed by B sending the call to transit provider X, which, = even in an end-to-end SIP connection, will re-initiate the call and send = it to provider Y, which then re-initiates it and sends it to terminating = Provider A. (Note that the call path from B to A typically does not = necessarily follow the reverse path of a call from A to B.) =20 So in order to propagate properly from origination to termination, the = =E2=80=9Cverifying INVITE=E2=80=9D proposed in section 3, containing the = REQUIRE: stir-callback header, will need to first be processed by = Provider X. As I understand it, X will need to be capable of recognizing = the new REQUIRE header and knowing that it needs to propagate the call = onward (NOT reject it due to lack of support for stir-callback), and = will need to send the call to Y with the new REQUIRE header included. = AND it will also need to know that it needs to propagate the VERIFY-CALL = header as well. =20 Y will receive this INVITE, and it too will need to know that it needs = to accept this invite and propagate it onward with the REQUIRE and = VERIFY-CALL headers. =20 Since stir-callback is not today a defined option, if X and Y were = conforming to the SIP RFC, they would today reject this INVITE. So does = this mean that your STIR-Callback approach will necessitate updates of = currently-conforming UA=E2=80=99s acting in the transit role to now = provide support for this new type of INVITE? =20 Finally, if and when the verification INVITE gets to A, and as your = document explains, A will have to be smart enough to process the verify = request and send the appropriate response. That support is noted in your = document; I=E2=80=99m wondering if you also need to document the kind of = support that will be required from intermediate providers, and note the = importance of A being RFC-compliant with respect to REQUIRE headers it = does not understand. =20 Yes, you are right the intermediate providers SBCs would need to be = configured to support that require header. This is certainly a = deployment issue but I=E2=80=99m not sure I see it as much different = from the same SBCs needing to be configured to 8224 Identity header. = Thoughts ?=20 =20 C) At the end of section 3 you note: =E2=80=9CThe presence of the = Require header field in the verifying INVITE is critical to the = operation of the solution. It prevents the verifying INVITE from = actually ringing a real phone, which would be quite annoying.=E2=80=9D = This is my biggest concern. =20 If the new REQUIRE header gets dropped somewhere along the way, the = INVITE will look =E2=80=9Cnormal=E2=80=9D, so won=E2=80=99t Provider A = ring Alice=E2=80=99s phone? Or, if A is not RFC-compliant and ignores = the REQUIRE header, Alice=E2=80=99s phone will ring. (And of course if = the call originator was spoofing the number, and in fact Bob=E2=80=99s = verification INVITE went to the real owner of the number, served by = provider C, C would have to be RFC-compliant in this regard or the real = number owner=E2=80=99s phone would ring.) =20 I am nervous that in today=E2=80=99s real world deployments, your = approach is fragile because it is dependent on the various UA=E2=80=99s = in the call path diligently following the SIP RFC. =20 I made a few test calls acting like I was Bob=E2=80=99s UA, having = received an INVITE from A that I want to verify. So I sent an INVITE = back towards A, inserting the REQUIRE: stir-callback header in my mock = =E2=80=9Cverification=E2=80=9D INVITE; I sent these calls through = various real-world termination providers.=20 =20 In a couple of cases, I got back 420 Bad Extension responses. = That=E2=80=99s good and bad; the good news is that it tells me that = those particular UA=E2=80=99s ARE RFC compliant in this respect. They = don=E2=80=99t understand a REQUIREd option so they are necessarily = rejecting the call. On the other hand, it points out that if these = UA=E2=80=99s are acting as intermediate providers (which, in these = cases, they are), they will need to be updated to accept and pass the = stir-callback related headers even though they are just providing a = transit function and even though they are not assuming any = responsibility for verification. =20 In my other test cases, the destination phone rang even though this was = supposed to be a =E2=80=9Cverification=E2=80=9D INVITE. This tells me, I = think, that at least the first UA (X, in my explanation above) in the = verification call path is non-RFC-complaint, and that downstream = UA=E2=80=99s are either also non-compliant, or that the REQUIRE header = got dropped along the way. =20 I am nervous about the extent to which deployed UA=E2=80=99s are = non-RFC-compliant with respect to the REQUIRE header, and how that could = undermine deployability of this solution. Maybe you intended that the = solution only apply when A and B are directly connected and there are no = intermediate providers. But I=E2=80=99m concerned that=E2=80=99s only a = small fraction of =E2=80=9Creal world=E2=80=9D calls today. =20 =20 First let me say that is awesome you just went and tried this. I love = real world data. Some of the version of Asterisk I have seen configured = that way but sort of surprised if people are using ACME or Cisco SBCs = that way. I certainly don=E2=80=99t have any desire to embarrass any = particular SP about their SIP deployment but would you be willing to = share what providers did this such that we might try and track down why = they did it - that might help decide how much of an issue it is?=20 =20 I am interested in your thoughts on these items, and on getting me back = on track if I=E2=80=99ve misunderstood aspects of the proposal. =20 =20 I think you have understood the gist of the proposal and perhaps we have = some tweaks to make. I agree with your high level points of there are = intermediaries in the call we care about and that if any server along = the chain is non compliant with require, it does not work well. Perhaps = we can think of ways to mitigate that but not obvious how.=20 =20 Now that we have 8824 out the door, I=E2=80=99m more trying out ideas to = see what might work to help reduce SPAM and I share some of your = concerns about this but not sure what=E2=80=99s better for deployment.=20 =20 However, any in band STIR solution is going to require the service = providers to test and support it. I would not be surprised to find that = any SBC configured to ignore the Require header is also pretty unlike to = pass the Identity header. For a long time, I have seen many things = blocked at IETF from by the =E2=80=9CSBC won=E2=80=99t support = that=E2=80=9D argument but in this particular case it is a bit = different. If some carrier has all of it customers getting an irritating = call back call ever time they dial a new number, I=E2=80=99m sure the = economics of customer satisfaction and retention will cause that carrier = to change the configuration of their SBC to not ignore the Require = header.=20 =20 I am worried about this and the rest of STIR when the interconnect = between the carriers is SS7.=20 =20 =20 David =20 David Frankel ZipDX=C2=AE LLC Monte Sereno, CA USA Tel: 1-800-FRANKEL (1-800-372-6535) =20 From: stir > On = Behalf Of Jonathan Rosenberg Sent: Thursday, March 1, 2018 6:15 PM To: stir@ietf.org =20 Subject: [stir] New draft draft-rosenberg-stir-callback-00 =20 Hey all - been a while :) Cullen and I wrote up a concept for using STIR with self-signed or = domain based certs, and then handling number validation with an in-band = callback. We think its a promising approach to accelerate STIR = deployments, since it allows them to happen without the cert = infrastructure being in place.=20 https://www.ietf.org/id/draft-rosenberg-stir-callback-00.txt Comments welcome.=20 -Jonathan R. --=20 Jonathan Rosenberg, Ph.D. jdrosen@jdrosen.net =20 http://www.jdrosen.net =20 _______________________________________________ stir mailing list stir@ietf.org =20 https://www.ietf.org/mailman/listinfo/stir =20 ------=_NextPart_000_0469_01D3B45A.AF49EBF0 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable

Thanks for = your response, Cullen.

 

I=E2=80=99ll = try to address your questions and comments at the top here, rather than = burying them below.

 

Regarding = specifics of the misbehaving SBCs: I=E2=80=99m not comfortable = identifying them here, but I can try to reach out to them to see if they = want to engage directly in this discussion (or if they can give me any = information to relay as to why they are non-conforming). I can tell you = that they are all licensed CLECs (ranging from tiny to very large). From = my parsing of the 200-OK they send back to me, at least some are using = commercial SBCs; in one case, it looks like that SBC provider is now out = of business. That=E2=80=99s not uncommon in this domain. =

 

I can think of a few possibilities as to why these = SBCs are behaving as they are: (1) The manufacturer didn=E2=80=99t = adhere to the SIP RFCs, either on purpose or due to carelessness; (2) = The provider mis-configured the SBC in error; (3) The default = configuration for the SBC doesn=E2=80=99t adhere to the RFCs; (4) The = provider encountered some issue in the past and purposefully altered the = configuration, and this is the desired result or side-effect; (5) = There=E2=80=99s a bug. I=E2=80=99ve encountered all of these over the = years.

 

Certainly some providers will be motivated and = cooperative in fixing problems and implementing new extensions. Others = will be recalcitrant. I have said to providers about other non-compliant = situations: =E2=80=9CRead the RFC. What don=E2=80=99t you understand = about SHALL or MUST?=E2=80=9D And they respond =E2=80=9CWhat = don=E2=80=99t YOU understand when we tell you: We don=E2=80=99t support = that aspect of the RFC.=E2=80=9D With respect to STIR-Callback = specifically, I can imagine that for our example, where B is sending a = verify invite to A via X and Y, Alice=E2=80=99s phone will ring = improperly, but A will point the finger at X (or Y) for dropping the = REQUIRE header. Since Alice is a customer of A and not X, your notion of = =E2=80=9Cthe economics of customer satisfaction and retention=E2=80=9D = won=E2=80=99t apply.

 

I agree with = you: these same factors will definitely play into 8224 deployment and = the propagation of the IDENTITY header. I believe that the team will be = successful with some relatively rapid initial in-the-field = demonstrations. But if your objective is to make a serious dent in the = robocalling epidemic, that requires much higher penetration because = you=E2=80=99re battling a reactive, clever enemy force. Given everything = that has to change for 8224, that is going to take many = years.

 

Herding the many hundreds of US telecom providers that = it takes to get to critical mass is a huge hurdle when we have to write = new software and then get it deployed and configured. The multi-hop = nature of our call network means we fail on a weak link. Worse, given = the robustness of SS7 and the huge sunk investment, it=E2=80=99s going = to take quite some time for it to be displaced to a level of = insignificance. We=E2=80=99ll live in a two-protocol world for the = foreseeable future.

 

What to do = in the meantime? I continue to be optimistic about leveraging BILLING = TELEPHONE NUMBER =E2=80=93 a field that predates even Caller-ID. BTN is = in SS7 as Charge Number, and interworks to SIP P-Charge-Info. In earlier = days, BTN was important for billing and jurisdiction; things that = providers HAD to pay attention to. Thus, it IS supported in virtually = all installed network elements. In my experience, it usually gets = propagated by intermediaries.

 

By using BTN = to identify call originators, or at least originating providers, we can = throw a much brighter light on the source of our robocall problems, = instead of continuing to flounder in the dark. That can be accomplished = by regulation, mandating that providers insert the BTN and not permit = customers to spoof it. This approach won=E2=80=99t work 100% of the = time, but it can make a huge bite today while we wait for more = sophisticated solutions to get to critical mass. I=E2=80=99m interested = in your thoughts here.

 

Many are = quick to point out that robocalls can originate from overseas, where our = mandates are ineffective. However, every call to a USA PSTN number comes = through some USA-regulated originating provider, and those providers = have commercial agreements with whoever is sending them the calls. So = there is a mechanism to push back on the ultimate source. = There=E2=80=99s a fair amount of evidence that at least today, the = majority of robocalls come from a relatively small number (dozens) of = sources, so our first priority should be to find and stop = those.

 

David

 

David = Frankel

ZipDX=C2=AE<= span style=3D'color:#1F497D;mso-fareast-language:ZH-TW'> LLC

Monte Sereno, CA = USA

Tel: 1-800-FRANKEL = (1-800-372-6535)

 

From: stir = <stir-bounces@ietf.org> On Behalf Of Cullen Jennings = (fluffy)
Sent: Sunday, March 4, 2018 5:03 PM
To: = David Frankel <dfrankel@zipdx.com>
Cc: Jonathan = Rosenberg <jdrosen@jdrosen.net>; stir@ietf.org
Subject: = Re: [stir] New draft = draft-rosenberg-stir-callback-00

 

 



On Mar 4, 2018, at 12:50 AM, David Frankel <dfrankel@zipdx.com> = wrote:

 

Hi Jonathan and Cullen = =E2=80=93

 

I = read the draft with interest and wonder if you can clarify a few things = for me. My understanding of SIP nuances is limited, so I may be = overlooking some obvious things here. At the same time, I=E2=80=99m = trying to be pragmatic about how things work in the =E2=80=9Creal = world=E2=80=9D vs. the world as defined by the = specs.

 

So my questions / comments = are:

 

A) I see in section 3 references to SUPPORTED and = REQUIRE header fields that include =E2=80=9Cstir-callback=E2=80=9D. Then = in sub-part 1 of section 3, in the call diagram I see references to = SUPPORTED and REQUIRE headers that say =E2=80=9Cstir-verify=E2=80=9D. =  (Note, btw, that there are two sub-parts 1 in section 3; I think = they are supposed to be numbered 1, 2, 3 instead of 1, 1, 2.) There are = further references in the document to =E2=80=9Cstir-verify=E2=80=9D. = Then in section 8.1, there are references to a = =E2=80=9Csip-verify=E2=80=9D Option Tag.

 

So my question is: are = =E2=80=9Cstir-callback=E2=80=9D, =E2=80=9Cstir-verify=E2=80=9D and = =E2=80=9Csip-verify=E2=80=9D all meant to be the same string, and = perhaps the exact value evolved during development of the document? Or = are there really two or three different option-tags involved here? Or am = I missing how these three different values are actually = applied?

 

 

We probably just messed up some cut and paste as we = changed names. 



B) In the =E2=80=9Creal world=E2=80=9D, a PSTN call = from Bob (tel:1, served by Provider B), to Alice = (tel:2, served by Provider A) is often completed = by B sending the call to transit provider X, which, even in an = end-to-end SIP connection, will re-initiate the call and send it to = provider Y, which then re-initiates it and sends it to terminating = Provider A. (Note that the call path from B to A typically does not = necessarily follow the reverse path of a call from A to = B.)

 

So in order to propagate properly from origination to = termination, the =E2=80=9Cverifying INVITE=E2=80=9D proposed in section = 3, containing the REQUIRE: stir-callback header, will need to first be = processed by Provider X. As I understand it, X will need to be capable = of recognizing the new REQUIRE header and knowing that it needs to = propagate the call onward (NOT reject it due to lack of support for = stir-callback), and will need to send the call to Y with the new REQUIRE = header included. AND it will also need to know that it needs to = propagate the VERIFY-CALL header as well.

 

Y = will receive this INVITE, and it too will need to know that it needs to = accept this invite and propagate it onward with the REQUIRE and = VERIFY-CALL headers.

 

Since stir-callback is not today a defined option, if = X and Y were conforming to the SIP RFC, they would today reject this = INVITE. So does this mean that your STIR-Callback approach will = necessitate updates of currently-conforming UA=E2=80=99s acting in the = transit role to now provide support for this new type of = INVITE?

 

Finally, if and when the verification INVITE gets to = A, and as your document explains, A will have to be smart enough to = process the verify request and send the appropriate response. That = support is noted in your document; I=E2=80=99m wondering if you also = need to document the kind of support that will be required from = intermediate providers, and note the importance of A being RFC-compliant = with respect to REQUIRE headers it does not = understand.

 

Yes, = you are right the intermediate providers SBCs would need to be = configured to support that require header. This is certainly a = deployment issue but I=E2=80=99m not sure I see it as much different = from the same SBCs needing to be configured to 8224 Identity header. = Thoughts ? 



 

C) At the end of section 3 you note: =E2=80=9CThe = presence of the Require header field in the verifying INVITE is critical = to the operation of the solution.  It prevents the verifying INVITE = from actually ringing a real phone, which would be quite = annoying.=E2=80=9D This is my biggest = concern.

 

If the new REQUIRE header gets dropped somewhere along = the way, the INVITE will look =E2=80=9Cnormal=E2=80=9D, so won=E2=80=99t = Provider A ring Alice=E2=80=99s phone? Or, if A is not RFC-compliant and = ignores the REQUIRE header, Alice=E2=80=99s phone will ring. (And of = course if the call originator was spoofing the number, and in fact = Bob=E2=80=99s verification INVITE went to the real owner of the number, = served by provider C, C would have to be RFC-compliant in this regard or = the real number owner=E2=80=99s phone would = ring.)

 

I = am nervous that in today=E2=80=99s real world deployments, your approach = is fragile because it is dependent on the various UA=E2=80=99s in the = call path diligently following the SIP RFC.

 

I = made a few test calls acting like I was Bob=E2=80=99s UA, having = received an INVITE from A that I want to verify. So I sent an INVITE = back towards A, inserting the REQUIRE: stir-callback header in my mock = =E2=80=9Cverification=E2=80=9D INVITE; I sent these calls through = various real-world termination providers.

 

In a couple of cases, I got back 420 Bad Extension = responses. That=E2=80=99s good and bad; the good news is that it tells = me that those particular UA=E2=80=99s ARE RFC compliant in this respect. = They don=E2=80=99t understand a REQUIREd option so they are necessarily = rejecting the call. On the other hand, it points out that if these = UA=E2=80=99s are acting as intermediate providers (which, in these = cases, they are), they will need to be updated to accept and pass the = stir-callback related headers even though they are just providing a = transit function and even though they are not assuming any = responsibility for verification.

 

In my other test cases, the destination phone rang = even though this was supposed to be a =E2=80=9Cverification=E2=80=9D = INVITE. This tells me, I think, that at least the first UA (X, in my = explanation above) in the verification call path is non-RFC-complaint, = and that downstream UA=E2=80=99s are either also non-compliant, or that = the REQUIRE header got dropped along the = way.

 

I = am nervous about the extent to which deployed UA=E2=80=99s are = non-RFC-compliant with respect to the REQUIRE header, and how that could = undermine deployability of this solution. Maybe you intended that the = solution only apply when A and B are directly connected and there are no = intermediate providers. But I=E2=80=99m concerned that=E2=80=99s only a = small fraction of =E2=80=9Creal world=E2=80=9D calls = today.

 

 

First = let me say that is awesome you just went and tried this. I love real = world data. Some of the version of Asterisk I have seen configured that = way but sort of surprised if people are using ACME or Cisco SBCs that = way. I certainly don=E2=80=99t have any desire to embarrass any = particular SP about their SIP deployment but would you be willing to = share what providers did this such that we might try and track down why = they did it - that might help decide how much of an issue it = is? 



 

I = am interested in your thoughts on these items, and on getting me back on = track if I=E2=80=99ve misunderstood aspects of the = proposal.

 

 

I think you have understood the gist of the proposal = and perhaps we have some tweaks to make. I agree with your high level = points of there are intermediaries in the call we care about and that if = any server along the chain is non compliant with require, it does not = work well. Perhaps we can think of ways to mitigate that but not obvious = how. 

 

Now that we have 8824 out the door, I=E2=80=99m more = trying out ideas to see what might work to help reduce SPAM and I share = some of your concerns about this but not sure what=E2=80=99s better for = deployment. 

 

However, any in band STIR solution is going to require = the service providers to test and support it. I would not be surprised = to find that any SBC configured to ignore the Require header is also = pretty unlike to pass the Identity header.  For a long time, I have = seen many things blocked at IETF from by the =E2=80=9CSBC won=E2=80=99t = support that=E2=80=9D argument but in this particular case it is a bit = different. If some carrier has all of it customers getting an irritating = call back call ever time they dial a new number, I=E2=80=99m sure the = economics of customer satisfaction and retention will cause that carrier = to change the configuration of their SBC to not ignore the Require = header. 

 

I = am worried about this and the rest of STIR when the interconnect between = the carriers is SS7. 

 



 

David

 

David = Frankel

ZipDX=C2=AE = LLC

Monte Sereno, CA = USA

Tel: 1-800-FRANKEL = (1-800-372-6535)

 

From: stir <stir-bounces@ietf.org> = On Behalf Of Jonathan Rosenberg
Sent: Thursday, March = 1, 2018 6:15 PM
To: stir@ietf.org
Subject: = [stir] New draft = draft-rosenberg-stir-callback-00

 

Hey all - been a while = :)

Cullen and I wrote up a concept for using = STIR with self-signed or domain based certs, and then handling number = validation with an in-band callback. We think its a promising approach = to accelerate STIR deployments, since it allows them to happen without = the cert infrastructure being in place.

htt= ps://www.ietf.org/id/draft-rosenberg-stir-callback-00.txt<= /p>

Comments = welcome.

-Jonathan R.


--

_______________________________________________
stir= mailing list
stir@ietf.org
https://www.ietf.org/= mailman/listinfo/stir

 

------=_NextPart_000_0469_01D3B45A.AF49EBF0-- From nobody Mon Mar 5 08:31:48 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D4CB81270AC for ; Mon, 5 Mar 2018 08:31:46 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id y4kuqfDqOSJK for ; Mon, 5 Mar 2018 08:31:41 -0800 (PST) Received: from NAM03-DM3-obe.outbound.protection.outlook.com (mail-dm3nam03on0726.outbound.protection.outlook.com [IPv6:2a01:111:f400:fe49::726]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5409A12D963 for ; Mon, 5 Mar 2018 08:31:34 -0800 (PST) Received: from SN1PR05CA0040.namprd05.prod.outlook.com (2a01:111:e400:5197::50) by DM5PR05MB3290.namprd05.prod.outlook.com (2603:10b6:4:3e::29) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.567.6; Mon, 5 Mar 2018 16:31:32 +0000 Received: from BY2NAM01FT032.eop-nam01.prod.protection.outlook.com (2a01:111:f400:7e42::209) by SN1PR05CA0040.outlook.office365.com (2a01:111:e400:5197::50) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.567.6 via Frontend Transport; Mon, 5 Mar 2018 16:31:32 +0000 Received-SPF: Pass (protection.outlook.com: domain of sprint.com designates 144.230.32.82 as permitted sender) receiver=protection.outlook.com; client-ip=144.230.32.82; helo=preapdm3.corp.sprint.com; Received: from preapdm3.corp.sprint.com (144.230.32.82) by BY2NAM01FT032.mail.protection.outlook.com (10.152.69.209) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.20.506.19 via Frontend Transport; Mon, 5 Mar 2018 16:31:31 +0000 Received: from pps.filterd (preapdm3.corp.sprint.com [127.0.0.1]) by preapdm3.corp.sprint.com (8.16.0.21/8.16.0.21) with SMTP id w25G4lS9037234; Mon, 5 Mar 2018 11:31:30 -0500 Received: from plswe13m04.ad.sprint.com (plswe13m04.corp.sprint.com [144.229.214.23]) by preapdm3.corp.sprint.com with ESMTP id 2gfq3s26jd-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT); Mon, 05 Mar 2018 11:31:30 -0500 Received: from PLSWE13M04.ad.sprint.com (2002:90e5:d617::90e5:d617) by plswe13m04.ad.sprint.com (2002:90e5:d617::90e5:d617) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Mon, 5 Mar 2018 10:31:29 -0600 Received: from PLSWE13M04.ad.sprint.com ([fe80::2c01:fcb8:e729:4a7a]) by plswe13m04.ad.sprint.com ([fe80::2c01:fcb8:e729:4a7a%24]) with mapi id 15.00.1347.000; Mon, 5 Mar 2018 10:31:28 -0600 From: "Gorman, Pierce A [CTO]" To: David Frankel , "'Cullen Jennings (fluffy)'" CC: 'Jonathan Rosenberg' , "stir@ietf.org" Thread-Topic: [stir] New draft draft-rosenberg-stir-callback-00 Thread-Index: AQHTtJ3HPXW7S2T4SkqZXCS9zSPj0KPB1SJg Date: Mon, 5 Mar 2018 16:31:28 +0000 Message-ID: <3783653d02a24044a1ddc977c60d3bb0@plswe13m04.ad.sprint.com> References: <02f401d3b38d$754f0570$5fed1050$@zipdx.com> <046801d3b49d$bd6c68a0$384539e0$@zipdx.com> In-Reply-To: <046801d3b49d$bd6c68a0$384539e0$@zipdx.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.214.116.23] Content-Type: multipart/alternative; boundary="_000_3783653d02a24044a1ddc977c60d3bb0plswe13m04adsprintcom_" MIME-Version: 1.0 X-EOPAttributedMessage: 0 X-MS-Office365-Filtering-HT: Tenant X-Forefront-Antispam-Report: CIP:144.230.32.82; IPV:NLI; CTRY:US; EFV:NLI; SFV:NSPM; SFS:(10019020)(396003)(346002)(376002)(39860400002)(39380400002)(2980300002)(438002)(25584004)(189003)(199004)(53754006)(55674003)(186003)(108616005)(86362001)(24736004)(76176011)(7696005)(30436002)(8676002)(2950100002)(106466001)(72206003)(54906003)(106002)(316002)(110136005)(229853002)(16586007)(81166006)(81156014)(4326008)(8936002)(478600001)(53946003)(53936002)(54896002)(6306002)(236005)(2900100001)(966005)(606006)(68736007)(14454004)(7736002)(356003)(102836004)(59450400001)(6116002)(6346003)(33964004)(561944003)(26005)(53546011)(53386004)(6246003)(3846002)(4546004)(2906002)(97736004)(5250100002)(5660300001)(93886005)(790700001)(84326002)(336012)(19625305001)(486264002)(579004); DIR:OUT; SFP:1102; SCL:1; SRVR:DM5PR05MB3290; H:preapdm3.corp.sprint.com; FPR:; SPF:Pass; PTR:InfoDomainNonexistent; MX:1; A:1; LANG:en; X-Microsoft-Exchange-Diagnostics: 1; BY2NAM01FT032; 1:LxyRLaN7REpSzcRzb+LSxpwUDL9/tVBlF1FJyYlCo00fN9/qeJtG9IoWAZCvR5QqIpzITVt3hLYQjQcHN1Yhu6pIp1EO02z7cD4GYzU0U9pq6kgpTB1+ZKOMbWa44sXw X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-Correlation-Id: 5e4eaa6b-465f-4be3-2a88-08d582b68deb X-Microsoft-Antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(8989060)(5600026)(4604075)(4608076)(4534165)(4627221)(201703031133081)(201702281549075)(8990040)(2017052603307)(7153060)(7193020); SRVR:DM5PR05MB3290; X-Microsoft-Exchange-Diagnostics: 1; DM5PR05MB3290; 3:lN0zwqAOPaEqvjl2I6ZYCd4sKSizdoBj7uKL1g2qALqLzGgl3tqWK00VS3MACYG5KIbEcDOKrdLllmNhU7SFiJ0yJ5FJLOLOcJoAFZunFB7MlzidW9kdPR0yTHKEiobiusXY64A/suUwzt+ELCL5PxMOJb1N21wkKY0qGvdlwxRNUL7IQuwWfTeQm73887MWTJXJphlLH9jEJIz72UwUcXIfB6PiDPnq9Zm3Ely7Q4C+b1AWZZckZmOVsxBbmVZWqrr1VZH3E4dMBKn05g7igN3XWLoDBPtkDZvEFK6gW45O24pTg7Es/pM4nMVudIvLJYr0j8Jrs/oI7L9H85Bbrpq6K86Nhx5psEh4r7kKF50=; 25:iHTY2d3VNEk/xqf7gLfLMzYT51baL3ZMWR7IYnKF4kiSNJ9TbfEKm8IWXiu0Y++JJcVDo9B8YPeOaxZ0E+aB81Fi74LeZk98zCmyM+UXDQmi5fwyj8dA5Gwn0VNW9nSiz/ZRcsLH3LcIT7Bqp7kliBl2bGZauCQ/Sgcn1v2eDDNXUukiJOTB/lqz/hbRSYdlrqmnmI2dSCjNPVgeQnlb/qY1r7SxYI1ivjDpo0n9FuO8omqhUY3vMgC7ruW2YFWr+DkhRsGU2r3B1Mph8gcJ4nV6vodMYEh8ZzQPa/NjvjvhHyPO9PCD0CzR28BRd4JP5ZfEuMvN0Jj8gd9kltWWlw== X-MS-TrafficTypeDiagnostic: DM5PR05MB3290: X-Microsoft-Exchange-Diagnostics: 1; DM5PR05MB3290; 31:wPJqeGnH5DaZsHT0wsoIP86YQoT2lHt2iNVwQz4VqgmMEXHICkwphJjrIwuj6163P/5fowI/z4Y824Kk1OE2a0FSaeVQ4T67Eew3fYUHhHEd0Y923PxB4Ym1JagdN+5nlh4gXz1UQ57z0snhakOahYbIJdJQgmX42xQUjk6aMA3V72KLMsWGFL6B+F6D23tuFIEiZ8x82O9V3uvxhKGWUqY6Sn2M/NMQfnjShYmgkIw=; 20:s2bG6yTWB3bdGDAPl3IOyH/hJ0G689IzuzW3SGfO6dIFmh/iPLFqhqT9BxePZnH0FDQpxcLFiT4l8NhU90sN5Q4SVyaDCYIMMAIiTGv3xOCgsG66uuhNaQHfJQKuWpgv/E9vZ1x/K++FakoGfT7LFbvXMEbpxEBSb2uf4gJvGUs//G8uUlnvchOGcP8pgt6HOA3KAqYx+8Kc7CT/q0fitVsJkXuFW5FbOMEIarUVzmspQ+FleERFRlFCwaAlYmBSKYIcVvWjCxcNVb0RMgRn55VepIMXELKl+YYQYR74R3hXAy7lxK8TMMFcWlv94kpuLEnjo/7rO1L5RzSySTfWBmuIUVnN775rGWQFsZZLRrX9/PMZqKsNce1xcKpqocjZpsY+iXnKiQ5NeE0fzQhHpA2jFsyYyIJSFmyRyrT4B4VYXtrwozVt5le+4D0PNG30Nkk2sXfPsOAmr3s6ew3zBI5ibVvEVLoQ68T07SM0kQ6lNt8X2r2Fvwr23z0UFKwg X-Microsoft-Antispam-PRVS: X-Exchange-Antispam-Report-Test: UriScan:(28532068793085)(158342451672863)(95692535739014)(21748063052155); X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0; RULEID:(8211001083)(6040501)(2401047)(8121501046)(5005006)(93006095)(93004095)(10201501046)(3231220)(944501244)(52105095)(3002001)(6055026)(6041288)(20161123562045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123558120)(20161123564045)(20161123560045)(6072148)(201708071742011); SRVR:DM5PR05MB3290; BCL:0; PCL:0; RULEID:; SRVR:DM5PR05MB3290; X-Microsoft-Exchange-Diagnostics: 1; DM5PR05MB3290; 4:k4l7VPBb9cESI0sPv2dchRbnGWBKRQDbv1U46Oxo1Pry8R/hCq6on8K9LgWyYGTWH9BsVBWzcvn3JL+ZXmCdOX73D+imVu5f/e7k8p12Ku1cRuVwnTCmzWc25dB0YIGOSJ+6AVIofo/BBpZFvqqJnd0TN52L+J+zGIhm5qd6py3CHCGWxfsnZx27V/p4j0z7b+8D/05E9JyDrz9w+EfdbEJGx3fTE1zt61dI4TXpKwnsXK+3KbnjHXpQ7FTdz/g3SRfRX636NrxjQST/ephuORv8eyISjhyz5UyZp+ljOzKw9iZytSneg3EUJ9n+QU/rCUUOx0pLS9Apx3uy49ZgH0ckLJSyrgFjb8YkDem/dmyn/SjXeYMLZ+O0GL0ZyK6Am9rLxxMSkcJXtDvSMAnNnd1HGlUpa6LF9hhPG30wtuk= X-Forefront-PRVS: 06022AA85F X-Microsoft-Exchange-Diagnostics: =?us-ascii?Q?1; DM5PR05MB3290; 23:+fjXtCDM2lEoNSqO5GmPk3+KmmQqE4EQ2KdzJYBvn?= =?us-ascii?Q?ItafwBXb1w8aoOsadYXo4ktA5kreKFTlAR4GQG+60/mYxvxC6qvjV5mSgp6h?= =?us-ascii?Q?KmVdidlRsVnQX7aa3cvZbpYRnfjVt5skz//9uclpyYq7mx0MrbkovwLsj+GL?= =?us-ascii?Q?pOxt8M+pK4vmHHEIOpjhj/zMiErlGrYtuck8PtWVJ4tesPUane/xlpzGRwFg?= =?us-ascii?Q?FqL0A+TOFO+DSjPisuhqizzuUZXhFTSyuETq1DJuP0JQJkWxzR9UsD4ZrCEE?= =?us-ascii?Q?EUqyhgrH0Krhqd5Z4HStxnpom0x76E6MvxaNYCeA/LL51tc85IgoY2FOwdtb?= =?us-ascii?Q?/9rbVdpOvLvJHkLLh93AJ+vA3nOv0+mjUIkPqv2J0T/DJlrEJE7xJ+IiuCXy?= =?us-ascii?Q?YCyazWN+nxSXpE2RCZmGMBDgHhx8km7iX1AnWzxaI/IdmsiczxPCxZcdmNA8?= =?us-ascii?Q?u5xksCubrrcDofQULEHOCGywfKz+aML3GiOl5mJKcBFXQgJbdbGqvmns+MK5?= =?us-ascii?Q?O9+ARhIc0PpmQHkU3Ga1PfpEueAEKDNZb3B+jyYyP/z9j7Q1IE0wFoYUmdbU?= =?us-ascii?Q?1qzSLPTMnpZ+N5OoVIj4aqoAezqUgdF0YBWhatdY1j7rwWtKRYjeOuE5sZN8?= =?us-ascii?Q?bK4oDVizUqm2inIFdfwMBv1SO2Ik6x9rRQhEnOhH/h+L+TNFVodoB/tYSAkG?= =?us-ascii?Q?KpLGyWgWkrbCDswU7Qf2B5zlVopuEiuxWpEygezw+rPtFqMC6OgtbUYqoovQ?= =?us-ascii?Q?YIFfOLLZ5rn1cTkgxZGEM054/9a2nqyUml6MB30MRdEoVsrLgW5IhzHzK4gI?= =?us-ascii?Q?e3hKIg7kZ8WG52C2qNigTlIoX0N4QFqDiWxIY9fUCE5l8QZ7Bd1ylQ73qU2I?= =?us-ascii?Q?3xDJkfMO7Fs8uzSMStEGvV54vM7t+cB3KcCoQAlzyC48++XNDriw0LdvZP35?= =?us-ascii?Q?3HFe+0BE0i/xCfLnmOOYVm5HFVk6iNWurVA74H8pYsE3UQzSBm10QMEld3IT?= =?us-ascii?Q?X+ZCltMIRSHUMkZyIP1vTHDrj57AVsGKHSjBBRXary45ymGlMDlriQ4f+MVI?= =?us-ascii?Q?WadBfOjUbNblmJ5Ykb54N79asRcoz9S2LaUjp/gKLqsv2Wz/hXgScPVDuxNY?= =?us-ascii?Q?P13V2lQq7yEJfOAt6Ner3fdtotmfj18YNiPhNLLDC1fAVJIvbFA/LwjffSHp?= =?us-ascii?Q?WkgaN10ZtqQyeScJgHUYtydx3vRS6K2R8suSewdisoljRRZseqX7ZqUu1tD1?= =?us-ascii?Q?r4fl3OtgxoqXFUwSXuZgDZyj13OFjPn5tYFv6xswovQp3xKhy88Onv5NGMIy?= =?us-ascii?Q?Fq9quZoo2nORdnJ40hSSWbet7j5hSB8B4/RBxabu5PIkeg/2rIo0UiyKg8jj?= =?us-ascii?Q?0+1dNw86xYWhwiEFDT7chmroq6NjOmidrGuW5GwzvNbdFe/VjFfnLKqTCJ7c?= =?us-ascii?Q?hhKPkl3txav3wX+1uxZuypM1J7GifXACmxl9gFGCFiAwFXYCiCJCaSnM60jC?= =?us-ascii?Q?N8jPbH51R1pUfcbVOj/sIFHWLBxvVBfDbZxSYf1hCsXHavcQzWky09aNIcJm?= =?us-ascii?Q?ZonJvdAcHpf1GnpdA=3D=3D?= X-Microsoft-Antispam-Message-Info: cgWLu/n0ak5bbg8JVGJPUf5m0cDerExwiSmDhFasVIwFZCVA/8gcqhaQM3KDbBCx2QSlWR/r454o+fwcDqlEMPBs87y9XeLstqpUdSUEjWI8EeMJnbBuJ8tA1fNRre9mFVrhsMgxqNYc2zCUUFAnwx3BKZN/wxzyx2VhlyNZGqXx9diXEXO8WvoEpb94dW4a X-Microsoft-Exchange-Diagnostics: 1; DM5PR05MB3290; 6:D5+8J1OBBzP0Cbk37o5/kgc+DejaPEqMtLCSIOEQ9b8SlXaTYMvi0azpfo0eCkv5Gaw8Wf9RJDWRqmzAewB2T3AvXg6WW8+oQeoZIaF9TQdLfNnBeTFCJzCuFZfrtFotqRp8xPAJv8Sg7wmsq/yuB6hC23dBs0VluDS2OLf+ldD7cdNQXGEC4bsASrC+hvi52C8us2U/SZD1U51rELCNpppdWxe54rkVRpdr320CGvgHT9gGfGYfpbfI/vBYIFqtcrdYYcV8/ErCeEG9atwFOoCgw4KrN7BvL+y2qDIlQXu4oITqCN4E6uO90xN5f398cyONceGJOFU6E7rlYA1WdLyTsOdGA6RpKq5cXEokgSg=; 5:+imFjdW8H8prrmOS1ilAXZHkNqXR2SH4S5gtr43nVmWYK9ah8wTgdywNUKMJnmfqBgDRDIRUsmQP6Wgx6pe3MFNaDzAwHdtS9x/dpFbFkaqSQoretkzYRSCBF61YYuMIwCIbTujTvjF5FTJfgBjEnkTvTEMJT7CCTLD8b7EgGDQ=; 24:NHPCe95zD77gRoNppB2G/p45Sz3ya+99xpyKIwalFlfL9o8EC7UxBDSEYlNDe4/nNOeN4RV5Q4+//OXzHM2G1iVjUFB4cYp/w6/idEMGFzk=; 7:h03lGvVI0T9zYJRF35m1HTPHxyuLYv98d/Lal/ohLWdt78T2BeBsg3TOBP87zWQKuiaIGnFYY1gOxJbxf2HMBUzlqrAtSHiDcOLyfn5j2uEjAv+uH7+0wJaV9h1DWp1FJ61VvyoY5sisPYfBaFBFTfv1gE1AofxFLMU3jFEMqcJqQE+bRGJ0EuswmTIk3DfQBnXxDx25+gVb3ycg8z8M4R4KBYgqX2syzefaGGkBPOrS6+vcNLsj6Sj5JHkmjxsp SpamDiagnosticOutput: 1:99 SpamDiagnosticMetadata: NSPM X-OriginatorOrg: sprint.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 05 Mar 2018 16:31:31.6951 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 5e4eaa6b-465f-4be3-2a88-08d582b68deb X-MS-Exchange-CrossTenant-Id: 4f8bc0ac-bd78-4bf5-b55f-1b31301d9adf X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=4f8bc0ac-bd78-4bf5-b55f-1b31301d9adf; Ip=[144.230.32.82]; Helo=[preapdm3.corp.sprint.com] X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM5PR05MB3290 Archived-At: Subject: Re: [stir] New draft draft-rosenberg-stir-callback-00 X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 05 Mar 2018 16:31:47 -0000 --_000_3783653d02a24044a1ddc977c60d3bb0plswe13m04adsprintcom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 U0JDcyBkbyBub3QgdGVybWluYXRlIGNhbGxzLiAgQW5kLCBleHBlcmllbmNlIGhhcyBzaG93biBz b21lIFNJUCBzdGFja3MgZG8gbm90IHN1cHBvcnQgUkZDIDMyNjIsIGV2ZW4gaWYgdGhlIFNCQyBk aWQuDQoNCg0KRnJvbTogRGF2aWQgRnJhbmtlbCBbbWFpbHRvOmRmcmFua2VsQHppcGR4LmNvbV0N ClNlbnQ6IE1vbmRheSwgTWFyY2ggMDUsIDIwMTggMTA6MjAgQU0NClRvOiAnQ3VsbGVuIEplbm5p bmdzIChmbHVmZnkpJyA8Zmx1ZmZ5QGNpc2NvLmNvbT4NCkNjOiAnSm9uYXRoYW4gUm9zZW5iZXJn JyA8amRyb3NlbkBqZHJvc2VuLm5ldD47IHN0aXJAaWV0Zi5vcmcNClN1YmplY3Q6IFJlOiBbc3Rp cl0gTmV3IGRyYWZ0IGRyYWZ0LXJvc2VuYmVyZy1zdGlyLWNhbGxiYWNrLTAwDQoNClRoYW5rcyBm b3IgeW91ciByZXNwb25zZSwgQ3VsbGVuLg0KDQpJ4oCZbGwgdHJ5IHRvIGFkZHJlc3MgeW91ciBx dWVzdGlvbnMgYW5kIGNvbW1lbnRzIGF0IHRoZSB0b3AgaGVyZSwgcmF0aGVyIHRoYW4gYnVyeWlu ZyB0aGVtIGJlbG93Lg0KDQpSZWdhcmRpbmcgc3BlY2lmaWNzIG9mIHRoZSBtaXNiZWhhdmluZyBT QkNzOiBJ4oCZbSBub3QgY29tZm9ydGFibGUgaWRlbnRpZnlpbmcgdGhlbSBoZXJlLCBidXQgSSBj YW4gdHJ5IHRvIHJlYWNoIG91dCB0byB0aGVtIHRvIHNlZSBpZiB0aGV5IHdhbnQgdG8gZW5nYWdl IGRpcmVjdGx5IGluIHRoaXMgZGlzY3Vzc2lvbiAob3IgaWYgdGhleSBjYW4gZ2l2ZSBtZSBhbnkg aW5mb3JtYXRpb24gdG8gcmVsYXkgYXMgdG8gd2h5IHRoZXkgYXJlIG5vbi1jb25mb3JtaW5nKS4g SSBjYW4gdGVsbCB5b3UgdGhhdCB0aGV5IGFyZSBhbGwgbGljZW5zZWQgQ0xFQ3MgKHJhbmdpbmcg ZnJvbSB0aW55IHRvIHZlcnkgbGFyZ2UpLiBGcm9tIG15IHBhcnNpbmcgb2YgdGhlIDIwMC1PSyB0 aGV5IHNlbmQgYmFjayB0byBtZSwgYXQgbGVhc3Qgc29tZSBhcmUgdXNpbmcgY29tbWVyY2lhbCBT QkNzOyBpbiBvbmUgY2FzZSwgaXQgbG9va3MgbGlrZSB0aGF0IFNCQyBwcm92aWRlciBpcyBub3cg b3V0IG9mIGJ1c2luZXNzLiBUaGF04oCZcyBub3QgdW5jb21tb24gaW4gdGhpcyBkb21haW4uDQoN CkkgY2FuIHRoaW5rIG9mIGEgZmV3IHBvc3NpYmlsaXRpZXMgYXMgdG8gd2h5IHRoZXNlIFNCQ3Mg YXJlIGJlaGF2aW5nIGFzIHRoZXkgYXJlOiAoMSkgVGhlIG1hbnVmYWN0dXJlciBkaWRu4oCZdCBh ZGhlcmUgdG8gdGhlIFNJUCBSRkNzLCBlaXRoZXIgb24gcHVycG9zZSBvciBkdWUgdG8gY2FyZWxl c3NuZXNzOyAoMikgVGhlIHByb3ZpZGVyIG1pcy1jb25maWd1cmVkIHRoZSBTQkMgaW4gZXJyb3I7 ICgzKSBUaGUgZGVmYXVsdCBjb25maWd1cmF0aW9uIGZvciB0aGUgU0JDIGRvZXNu4oCZdCBhZGhl cmUgdG8gdGhlIFJGQ3M7ICg0KSBUaGUgcHJvdmlkZXIgZW5jb3VudGVyZWQgc29tZSBpc3N1ZSBp biB0aGUgcGFzdCBhbmQgcHVycG9zZWZ1bGx5IGFsdGVyZWQgdGhlIGNvbmZpZ3VyYXRpb24sIGFu ZCB0aGlzIGlzIHRoZSBkZXNpcmVkIHJlc3VsdCBvciBzaWRlLWVmZmVjdDsgKDUpIFRoZXJl4oCZ cyBhIGJ1Zy4gSeKAmXZlIGVuY291bnRlcmVkIGFsbCBvZiB0aGVzZSBvdmVyIHRoZSB5ZWFycy4N Cg0KQ2VydGFpbmx5IHNvbWUgcHJvdmlkZXJzIHdpbGwgYmUgbW90aXZhdGVkIGFuZCBjb29wZXJh dGl2ZSBpbiBmaXhpbmcgcHJvYmxlbXMgYW5kIGltcGxlbWVudGluZyBuZXcgZXh0ZW5zaW9ucy4g T3RoZXJzIHdpbGwgYmUgcmVjYWxjaXRyYW50LiBJIGhhdmUgc2FpZCB0byBwcm92aWRlcnMgYWJv dXQgb3RoZXIgbm9uLWNvbXBsaWFudCBzaXR1YXRpb25zOiDigJxSZWFkIHRoZSBSRkMuIFdoYXQg ZG9u4oCZdCB5b3UgdW5kZXJzdGFuZCBhYm91dCBTSEFMTCBvciBNVVNUP+KAnSBBbmQgdGhleSBy ZXNwb25kIOKAnFdoYXQgZG9u4oCZdCBZT1UgdW5kZXJzdGFuZCB3aGVuIHdlIHRlbGwgeW91OiBX ZSBkb27igJl0IHN1cHBvcnQgdGhhdCBhc3BlY3Qgb2YgdGhlIFJGQy7igJ0gV2l0aCByZXNwZWN0 IHRvIFNUSVItQ2FsbGJhY2sgc3BlY2lmaWNhbGx5LCBJIGNhbiBpbWFnaW5lIHRoYXQgZm9yIG91 ciBleGFtcGxlLCB3aGVyZSBCIGlzIHNlbmRpbmcgYSB2ZXJpZnkgaW52aXRlIHRvIEEgdmlhIFgg YW5kIFksIEFsaWNl4oCZcyBwaG9uZSB3aWxsIHJpbmcgaW1wcm9wZXJseSwgYnV0IEEgd2lsbCBw b2ludCB0aGUgZmluZ2VyIGF0IFggKG9yIFkpIGZvciBkcm9wcGluZyB0aGUgUkVRVUlSRSBoZWFk ZXIuIFNpbmNlIEFsaWNlIGlzIGEgY3VzdG9tZXIgb2YgQSBhbmQgbm90IFgsIHlvdXIgbm90aW9u IG9mIOKAnHRoZSBlY29ub21pY3Mgb2YgY3VzdG9tZXIgc2F0aXNmYWN0aW9uIGFuZCByZXRlbnRp b27igJ0gd29u4oCZdCBhcHBseS4NCg0KSSBhZ3JlZSB3aXRoIHlvdTogdGhlc2Ugc2FtZSBmYWN0 b3JzIHdpbGwgZGVmaW5pdGVseSBwbGF5IGludG8gODIyNCBkZXBsb3ltZW50IGFuZCB0aGUgcHJv cGFnYXRpb24gb2YgdGhlIElERU5USVRZIGhlYWRlci4gSSBiZWxpZXZlIHRoYXQgdGhlIHRlYW0g d2lsbCBiZSBzdWNjZXNzZnVsIHdpdGggc29tZSByZWxhdGl2ZWx5IHJhcGlkIGluaXRpYWwgaW4t dGhlLWZpZWxkIGRlbW9uc3RyYXRpb25zLiBCdXQgaWYgeW91ciBvYmplY3RpdmUgaXMgdG8gbWFr ZSBhIHNlcmlvdXMgZGVudCBpbiB0aGUgcm9ib2NhbGxpbmcgZXBpZGVtaWMsIHRoYXQgcmVxdWly ZXMgbXVjaCBoaWdoZXIgcGVuZXRyYXRpb24gYmVjYXVzZSB5b3XigJlyZSBiYXR0bGluZyBhIHJl YWN0aXZlLCBjbGV2ZXIgZW5lbXkgZm9yY2UuIEdpdmVuIGV2ZXJ5dGhpbmcgdGhhdCBoYXMgdG8g Y2hhbmdlIGZvciA4MjI0LCB0aGF0IGlzIGdvaW5nIHRvIHRha2UgbWFueSB5ZWFycy4NCg0KSGVy ZGluZyB0aGUgbWFueSBodW5kcmVkcyBvZiBVUyB0ZWxlY29tIHByb3ZpZGVycyB0aGF0IGl0IHRh a2VzIHRvIGdldCB0byBjcml0aWNhbCBtYXNzIGlzIGEgaHVnZSBodXJkbGUgd2hlbiB3ZSBoYXZl IHRvIHdyaXRlIG5ldyBzb2Z0d2FyZSBhbmQgdGhlbiBnZXQgaXQgZGVwbG95ZWQgYW5kIGNvbmZp Z3VyZWQuIFRoZSBtdWx0aS1ob3AgbmF0dXJlIG9mIG91ciBjYWxsIG5ldHdvcmsgbWVhbnMgd2Ug ZmFpbCBvbiBhIHdlYWsgbGluay4gV29yc2UsIGdpdmVuIHRoZSByb2J1c3RuZXNzIG9mIFNTNyBh bmQgdGhlIGh1Z2Ugc3VuayBpbnZlc3RtZW50LCBpdOKAmXMgZ29pbmcgdG8gdGFrZSBxdWl0ZSBz b21lIHRpbWUgZm9yIGl0IHRvIGJlIGRpc3BsYWNlZCB0byBhIGxldmVsIG9mIGluc2lnbmlmaWNh bmNlLiBXZeKAmWxsIGxpdmUgaW4gYSB0d28tcHJvdG9jb2wgd29ybGQgZm9yIHRoZSBmb3Jlc2Vl YWJsZSBmdXR1cmUuDQoNCldoYXQgdG8gZG8gaW4gdGhlIG1lYW50aW1lPyBJIGNvbnRpbnVlIHRv IGJlIG9wdGltaXN0aWMgYWJvdXQgbGV2ZXJhZ2luZyBCSUxMSU5HIFRFTEVQSE9ORSBOVU1CRVIg 4oCTIGEgZmllbGQgdGhhdCBwcmVkYXRlcyBldmVuIENhbGxlci1JRC4gQlROIGlzIGluIFNTNyBh cyBDaGFyZ2UgTnVtYmVyLCBhbmQgaW50ZXJ3b3JrcyB0byBTSVAgUC1DaGFyZ2UtSW5mby4gSW4g ZWFybGllciBkYXlzLCBCVE4gd2FzIGltcG9ydGFudCBmb3IgYmlsbGluZyBhbmQganVyaXNkaWN0 aW9uOyB0aGluZ3MgdGhhdCBwcm92aWRlcnMgSEFEIHRvIHBheSBhdHRlbnRpb24gdG8uIFRodXMs IGl0IElTIHN1cHBvcnRlZCBpbiB2aXJ0dWFsbHkgYWxsIGluc3RhbGxlZCBuZXR3b3JrIGVsZW1l bnRzLiBJbiBteSBleHBlcmllbmNlLCBpdCB1c3VhbGx5IGdldHMgcHJvcGFnYXRlZCBieSBpbnRl cm1lZGlhcmllcy4NCg0KQnkgdXNpbmcgQlROIHRvIGlkZW50aWZ5IGNhbGwgb3JpZ2luYXRvcnMs IG9yIGF0IGxlYXN0IG9yaWdpbmF0aW5nIHByb3ZpZGVycywgd2UgY2FuIHRocm93IGEgbXVjaCBi cmlnaHRlciBsaWdodCBvbiB0aGUgc291cmNlIG9mIG91ciByb2JvY2FsbCBwcm9ibGVtcywgaW5z dGVhZCBvZiBjb250aW51aW5nIHRvIGZsb3VuZGVyIGluIHRoZSBkYXJrLiBUaGF0IGNhbiBiZSBh Y2NvbXBsaXNoZWQgYnkgcmVndWxhdGlvbiwgbWFuZGF0aW5nIHRoYXQgcHJvdmlkZXJzIGluc2Vy dCB0aGUgQlROIGFuZCBub3QgcGVybWl0IGN1c3RvbWVycyB0byBzcG9vZiBpdC4gVGhpcyBhcHBy b2FjaCB3b27igJl0IHdvcmsgMTAwJSBvZiB0aGUgdGltZSwgYnV0IGl0IGNhbiBtYWtlIGEgaHVn ZSBiaXRlIHRvZGF5IHdoaWxlIHdlIHdhaXQgZm9yIG1vcmUgc29waGlzdGljYXRlZCBzb2x1dGlv bnMgdG8gZ2V0IHRvIGNyaXRpY2FsIG1hc3MuIEnigJltIGludGVyZXN0ZWQgaW4geW91ciB0aG91 Z2h0cyBoZXJlLg0KDQpNYW55IGFyZSBxdWljayB0byBwb2ludCBvdXQgdGhhdCByb2JvY2FsbHMg Y2FuIG9yaWdpbmF0ZSBmcm9tIG92ZXJzZWFzLCB3aGVyZSBvdXIgbWFuZGF0ZXMgYXJlIGluZWZm ZWN0aXZlLiBIb3dldmVyLCBldmVyeSBjYWxsIHRvIGEgVVNBIFBTVE4gbnVtYmVyIGNvbWVzIHRo cm91Z2ggc29tZSBVU0EtcmVndWxhdGVkIG9yaWdpbmF0aW5nIHByb3ZpZGVyLCBhbmQgdGhvc2Ug cHJvdmlkZXJzIGhhdmUgY29tbWVyY2lhbCBhZ3JlZW1lbnRzIHdpdGggd2hvZXZlciBpcyBzZW5k aW5nIHRoZW0gdGhlIGNhbGxzLiBTbyB0aGVyZSBpcyBhIG1lY2hhbmlzbSB0byBwdXNoIGJhY2sg b24gdGhlIHVsdGltYXRlIHNvdXJjZS4gVGhlcmXigJlzIGEgZmFpciBhbW91bnQgb2YgZXZpZGVu Y2UgdGhhdCBhdCBsZWFzdCB0b2RheSwgdGhlIG1ham9yaXR5IG9mIHJvYm9jYWxscyBjb21lIGZy b20gYSByZWxhdGl2ZWx5IHNtYWxsIG51bWJlciAoZG96ZW5zKSBvZiBzb3VyY2VzLCBzbyBvdXIg Zmlyc3QgcHJpb3JpdHkgc2hvdWxkIGJlIHRvIGZpbmQgYW5kIHN0b3AgdGhvc2UuDQoNCkRhdmlk DQoNCkRhdmlkIEZyYW5rZWwNClppcERYwq4gTExDDQpNb250ZSBTZXJlbm8sIENBIFVTQQ0KVGVs OiAxLTgwMC1GUkFOS0VMICgxLTgwMC0zNzItNjUzNSkNCg0KRnJvbTogc3RpciA8c3Rpci1ib3Vu Y2VzQGlldGYub3JnPG1haWx0bzpzdGlyLWJvdW5jZXNAaWV0Zi5vcmc+PiBPbiBCZWhhbGYgT2Yg Q3VsbGVuIEplbm5pbmdzIChmbHVmZnkpDQpTZW50OiBTdW5kYXksIE1hcmNoIDQsIDIwMTggNTow MyBQTQ0KVG86IERhdmlkIEZyYW5rZWwgPGRmcmFua2VsQHppcGR4LmNvbTxtYWlsdG86ZGZyYW5r ZWxAemlwZHguY29tPj4NCkNjOiBKb25hdGhhbiBSb3NlbmJlcmcgPGpkcm9zZW5AamRyb3Nlbi5u ZXQ8bWFpbHRvOmpkcm9zZW5AamRyb3Nlbi5uZXQ+Pjsgc3RpckBpZXRmLm9yZzxtYWlsdG86c3Rp ckBpZXRmLm9yZz4NClN1YmplY3Q6IFJlOiBbc3Rpcl0gTmV3IGRyYWZ0IGRyYWZ0LXJvc2VuYmVy Zy1zdGlyLWNhbGxiYWNrLTAwDQoNCg0KDQpPbiBNYXIgNCwgMjAxOCwgYXQgMTI6NTAgQU0sIERh dmlkIEZyYW5rZWwgPGRmcmFua2VsQHppcGR4LmNvbTxtYWlsdG86ZGZyYW5rZWxAemlwZHguY29t Pj4gd3JvdGU6DQoNCkhpIEpvbmF0aGFuIGFuZCBDdWxsZW4g4oCTDQoNCkkgcmVhZCB0aGUgZHJh ZnQgd2l0aCBpbnRlcmVzdCBhbmQgd29uZGVyIGlmIHlvdSBjYW4gY2xhcmlmeSBhIGZldyB0aGlu Z3MgZm9yIG1lLiBNeSB1bmRlcnN0YW5kaW5nIG9mIFNJUCBudWFuY2VzIGlzIGxpbWl0ZWQsIHNv IEkgbWF5IGJlIG92ZXJsb29raW5nIHNvbWUgb2J2aW91cyB0aGluZ3MgaGVyZS4gQXQgdGhlIHNh bWUgdGltZSwgSeKAmW0gdHJ5aW5nIHRvIGJlIHByYWdtYXRpYyBhYm91dCBob3cgdGhpbmdzIHdv cmsgaW4gdGhlIOKAnHJlYWwgd29ybGTigJ0gdnMuIHRoZSB3b3JsZCBhcyBkZWZpbmVkIGJ5IHRo ZSBzcGVjcy4NCg0KU28gbXkgcXVlc3Rpb25zIC8gY29tbWVudHMgYXJlOg0KDQpBKSBJIHNlZSBp biBzZWN0aW9uIDMgcmVmZXJlbmNlcyB0byBTVVBQT1JURUQgYW5kIFJFUVVJUkUgaGVhZGVyIGZp ZWxkcyB0aGF0IGluY2x1ZGUg4oCcc3Rpci1jYWxsYmFja+KAnS4gVGhlbiBpbiBzdWItcGFydCAx IG9mIHNlY3Rpb24gMywgaW4gdGhlIGNhbGwgZGlhZ3JhbSBJIHNlZSByZWZlcmVuY2VzIHRvIFNV UFBPUlRFRCBhbmQgUkVRVUlSRSBoZWFkZXJzIHRoYXQgc2F5IOKAnHN0aXItdmVyaWZ54oCdLiAg KE5vdGUsIGJ0dywgdGhhdCB0aGVyZSBhcmUgdHdvIHN1Yi1wYXJ0cyAxIGluIHNlY3Rpb24gMzsg SSB0aGluayB0aGV5IGFyZSBzdXBwb3NlZCB0byBiZSBudW1iZXJlZCAxLCAyLCAzIGluc3RlYWQg b2YgMSwgMSwgMi4pIFRoZXJlIGFyZSBmdXJ0aGVyIHJlZmVyZW5jZXMgaW4gdGhlIGRvY3VtZW50 IHRvIOKAnHN0aXItdmVyaWZ54oCdLiBUaGVuIGluIHNlY3Rpb24gOC4xLCB0aGVyZSBhcmUgcmVm ZXJlbmNlcyB0byBhIOKAnHNpcC12ZXJpZnnigJ0gT3B0aW9uIFRhZy4NCg0KU28gbXkgcXVlc3Rp b24gaXM6IGFyZSDigJxzdGlyLWNhbGxiYWNr4oCdLCDigJxzdGlyLXZlcmlmeeKAnSBhbmQg4oCc c2lwLXZlcmlmeeKAnSBhbGwgbWVhbnQgdG8gYmUgdGhlIHNhbWUgc3RyaW5nLCBhbmQgcGVyaGFw cyB0aGUgZXhhY3QgdmFsdWUgZXZvbHZlZCBkdXJpbmcgZGV2ZWxvcG1lbnQgb2YgdGhlIGRvY3Vt ZW50PyBPciBhcmUgdGhlcmUgcmVhbGx5IHR3byBvciB0aHJlZSBkaWZmZXJlbnQgb3B0aW9uLXRh Z3MgaW52b2x2ZWQgaGVyZT8gT3IgYW0gSSBtaXNzaW5nIGhvdyB0aGVzZSB0aHJlZSBkaWZmZXJl bnQgdmFsdWVzIGFyZSBhY3R1YWxseSBhcHBsaWVkPw0KDQoNCldlIHByb2JhYmx5IGp1c3QgbWVz c2VkIHVwIHNvbWUgY3V0IGFuZCBwYXN0ZSBhcyB3ZSBjaGFuZ2VkIG5hbWVzLg0KDQpCKSBJbiB0 aGUg4oCccmVhbCB3b3JsZOKAnSwgYSBQU1ROIGNhbGwgZnJvbSBCb2IgKHRlbDoxLCBzZXJ2ZWQg YnkgUHJvdmlkZXIgQiksIHRvIEFsaWNlICh0ZWw6Mjx0ZWw6MT4sIHNlcnZlZCBieSBQcm92aWRl ciBBKSBpcyBvZnRlbiBjb21wbGV0ZWQgYnkgQiBzZW5kaW5nIHRoZSBjYWxsIHRvIHRyYW5zaXQg cHJvdmlkZXIgWCwgd2hpY2gsIGV2ZW4gaW4gYW4gZW5kLXRvLWVuZCBTSVAgY29ubmVjdGlvbiwg d2lsbCByZS1pbml0aWF0ZSB0aGUgY2FsbCBhbmQgc2VuZCBpdCB0byBwcm92aWRlciBZLCB3aGlj aCB0aGVuIHJlLWluaXRpYXRlcyBpdCBhbmQgc2VuZHMgaXQgdG8gdGVybWluYXRpbmcgUHJvdmlk ZXIgQS4gKE5vdGUgdGhhdCB0aGUgY2FsbCBwYXRoIGZyb20gQiB0byBBIHR5cGljYWxseSBkb2Vz IG5vdCBuZWNlc3NhcmlseSBmb2xsb3cgdGhlIHJldmVyc2UgcGF0aCBvZiBhIGNhbGwgZnJvbSBB IHRvIEIuKQ0KDQpTbyBpbiBvcmRlciB0byBwcm9wYWdhdGUgcHJvcGVybHkgZnJvbSBvcmlnaW5h dGlvbiB0byB0ZXJtaW5hdGlvbiwgdGhlIOKAnHZlcmlmeWluZyBJTlZJVEXigJ0gcHJvcG9zZWQg aW4gc2VjdGlvbiAzLCBjb250YWluaW5nIHRoZSBSRVFVSVJFOiBzdGlyLWNhbGxiYWNrIGhlYWRl ciwgd2lsbCBuZWVkIHRvIGZpcnN0IGJlIHByb2Nlc3NlZCBieSBQcm92aWRlciBYLiBBcyBJIHVu ZGVyc3RhbmQgaXQsIFggd2lsbCBuZWVkIHRvIGJlIGNhcGFibGUgb2YgcmVjb2duaXppbmcgdGhl IG5ldyBSRVFVSVJFIGhlYWRlciBhbmQga25vd2luZyB0aGF0IGl0IG5lZWRzIHRvIHByb3BhZ2F0 ZSB0aGUgY2FsbCBvbndhcmQgKE5PVCByZWplY3QgaXQgZHVlIHRvIGxhY2sgb2Ygc3VwcG9ydCBm b3Igc3Rpci1jYWxsYmFjayksIGFuZCB3aWxsIG5lZWQgdG8gc2VuZCB0aGUgY2FsbCB0byBZIHdp dGggdGhlIG5ldyBSRVFVSVJFIGhlYWRlciBpbmNsdWRlZC4gQU5EIGl0IHdpbGwgYWxzbyBuZWVk IHRvIGtub3cgdGhhdCBpdCBuZWVkcyB0byBwcm9wYWdhdGUgdGhlIFZFUklGWS1DQUxMIGhlYWRl ciBhcyB3ZWxsLg0KDQpZIHdpbGwgcmVjZWl2ZSB0aGlzIElOVklURSwgYW5kIGl0IHRvbyB3aWxs IG5lZWQgdG8ga25vdyB0aGF0IGl0IG5lZWRzIHRvIGFjY2VwdCB0aGlzIGludml0ZSBhbmQgcHJv cGFnYXRlIGl0IG9ud2FyZCB3aXRoIHRoZSBSRVFVSVJFIGFuZCBWRVJJRlktQ0FMTCBoZWFkZXJz Lg0KDQpTaW5jZSBzdGlyLWNhbGxiYWNrIGlzIG5vdCB0b2RheSBhIGRlZmluZWQgb3B0aW9uLCBp ZiBYIGFuZCBZIHdlcmUgY29uZm9ybWluZyB0byB0aGUgU0lQIFJGQywgdGhleSB3b3VsZCB0b2Rh eSByZWplY3QgdGhpcyBJTlZJVEUuIFNvIGRvZXMgdGhpcyBtZWFuIHRoYXQgeW91ciBTVElSLUNh bGxiYWNrIGFwcHJvYWNoIHdpbGwgbmVjZXNzaXRhdGUgdXBkYXRlcyBvZiBjdXJyZW50bHktY29u Zm9ybWluZyBVQeKAmXMgYWN0aW5nIGluIHRoZSB0cmFuc2l0IHJvbGUgdG8gbm93IHByb3ZpZGUg c3VwcG9ydCBmb3IgdGhpcyBuZXcgdHlwZSBvZiBJTlZJVEU/DQoNCkZpbmFsbHksIGlmIGFuZCB3 aGVuIHRoZSB2ZXJpZmljYXRpb24gSU5WSVRFIGdldHMgdG8gQSwgYW5kIGFzIHlvdXIgZG9jdW1l bnQgZXhwbGFpbnMsIEEgd2lsbCBoYXZlIHRvIGJlIHNtYXJ0IGVub3VnaCB0byBwcm9jZXNzIHRo ZSB2ZXJpZnkgcmVxdWVzdCBhbmQgc2VuZCB0aGUgYXBwcm9wcmlhdGUgcmVzcG9uc2UuIFRoYXQg c3VwcG9ydCBpcyBub3RlZCBpbiB5b3VyIGRvY3VtZW50OyBJ4oCZbSB3b25kZXJpbmcgaWYgeW91 IGFsc28gbmVlZCB0byBkb2N1bWVudCB0aGUga2luZCBvZiBzdXBwb3J0IHRoYXQgd2lsbCBiZSBy ZXF1aXJlZCBmcm9tIGludGVybWVkaWF0ZSBwcm92aWRlcnMsIGFuZCBub3RlIHRoZSBpbXBvcnRh bmNlIG9mIEEgYmVpbmcgUkZDLWNvbXBsaWFudCB3aXRoIHJlc3BlY3QgdG8gUkVRVUlSRSBoZWFk ZXJzIGl0IGRvZXMgbm90IHVuZGVyc3RhbmQuDQoNClllcywgeW91IGFyZSByaWdodCB0aGUgaW50 ZXJtZWRpYXRlIHByb3ZpZGVycyBTQkNzIHdvdWxkIG5lZWQgdG8gYmUgY29uZmlndXJlZCB0byBz dXBwb3J0IHRoYXQgcmVxdWlyZSBoZWFkZXIuIFRoaXMgaXMgY2VydGFpbmx5IGEgZGVwbG95bWVu dCBpc3N1ZSBidXQgSeKAmW0gbm90IHN1cmUgSSBzZWUgaXQgYXMgbXVjaCBkaWZmZXJlbnQgZnJv bSB0aGUgc2FtZSBTQkNzIG5lZWRpbmcgdG8gYmUgY29uZmlndXJlZCB0byA4MjI0IElkZW50aXR5 IGhlYWRlci4gVGhvdWdodHMgPw0KDQoNCkMpIEF0IHRoZSBlbmQgb2Ygc2VjdGlvbiAzIHlvdSBu b3RlOiDigJxUaGUgcHJlc2VuY2Ugb2YgdGhlIFJlcXVpcmUgaGVhZGVyIGZpZWxkIGluIHRoZSB2 ZXJpZnlpbmcgSU5WSVRFIGlzIGNyaXRpY2FsIHRvIHRoZSBvcGVyYXRpb24gb2YgdGhlIHNvbHV0 aW9uLiAgSXQgcHJldmVudHMgdGhlIHZlcmlmeWluZyBJTlZJVEUgZnJvbSBhY3R1YWxseSByaW5n aW5nIGEgcmVhbCBwaG9uZSwgd2hpY2ggd291bGQgYmUgcXVpdGUgYW5ub3lpbmcu4oCdIFRoaXMg aXMgbXkgYmlnZ2VzdCBjb25jZXJuLg0KDQpJZiB0aGUgbmV3IFJFUVVJUkUgaGVhZGVyIGdldHMg ZHJvcHBlZCBzb21ld2hlcmUgYWxvbmcgdGhlIHdheSwgdGhlIElOVklURSB3aWxsIGxvb2sg4oCc bm9ybWFs4oCdLCBzbyB3b27igJl0IFByb3ZpZGVyIEEgcmluZyBBbGljZeKAmXMgcGhvbmU/IE9y LCBpZiBBIGlzIG5vdCBSRkMtY29tcGxpYW50IGFuZCBpZ25vcmVzIHRoZSBSRVFVSVJFIGhlYWRl ciwgQWxpY2XigJlzIHBob25lIHdpbGwgcmluZy4gKEFuZCBvZiBjb3Vyc2UgaWYgdGhlIGNhbGwg b3JpZ2luYXRvciB3YXMgc3Bvb2ZpbmcgdGhlIG51bWJlciwgYW5kIGluIGZhY3QgQm9i4oCZcyB2 ZXJpZmljYXRpb24gSU5WSVRFIHdlbnQgdG8gdGhlIHJlYWwgb3duZXIgb2YgdGhlIG51bWJlciwg c2VydmVkIGJ5IHByb3ZpZGVyIEMsIEMgd291bGQgaGF2ZSB0byBiZSBSRkMtY29tcGxpYW50IGlu IHRoaXMgcmVnYXJkIG9yIHRoZSByZWFsIG51bWJlciBvd25lcuKAmXMgcGhvbmUgd291bGQgcmlu Zy4pDQoNCkkgYW0gbmVydm91cyB0aGF0IGluIHRvZGF54oCZcyByZWFsIHdvcmxkIGRlcGxveW1l bnRzLCB5b3VyIGFwcHJvYWNoIGlzIGZyYWdpbGUgYmVjYXVzZSBpdCBpcyBkZXBlbmRlbnQgb24g dGhlIHZhcmlvdXMgVUHigJlzIGluIHRoZSBjYWxsIHBhdGggZGlsaWdlbnRseSBmb2xsb3dpbmcg dGhlIFNJUCBSRkMuDQoNCkkgbWFkZSBhIGZldyB0ZXN0IGNhbGxzIGFjdGluZyBsaWtlIEkgd2Fz IEJvYuKAmXMgVUEsIGhhdmluZyByZWNlaXZlZCBhbiBJTlZJVEUgZnJvbSBBIHRoYXQgSSB3YW50 IHRvIHZlcmlmeS4gU28gSSBzZW50IGFuIElOVklURSBiYWNrIHRvd2FyZHMgQSwgaW5zZXJ0aW5n IHRoZSBSRVFVSVJFOiBzdGlyLWNhbGxiYWNrIGhlYWRlciBpbiBteSBtb2NrIOKAnHZlcmlmaWNh dGlvbuKAnSBJTlZJVEU7IEkgc2VudCB0aGVzZSBjYWxscyB0aHJvdWdoIHZhcmlvdXMgcmVhbC13 b3JsZCB0ZXJtaW5hdGlvbiBwcm92aWRlcnMuDQoNCkluIGEgY291cGxlIG9mIGNhc2VzLCBJIGdv dCBiYWNrIDQyMCBCYWQgRXh0ZW5zaW9uIHJlc3BvbnNlcy4gVGhhdOKAmXMgZ29vZCBhbmQgYmFk OyB0aGUgZ29vZCBuZXdzIGlzIHRoYXQgaXQgdGVsbHMgbWUgdGhhdCB0aG9zZSBwYXJ0aWN1bGFy IFVB4oCZcyBBUkUgUkZDIGNvbXBsaWFudCBpbiB0aGlzIHJlc3BlY3QuIFRoZXkgZG9u4oCZdCB1 bmRlcnN0YW5kIGEgUkVRVUlSRWQgb3B0aW9uIHNvIHRoZXkgYXJlIG5lY2Vzc2FyaWx5IHJlamVj dGluZyB0aGUgY2FsbC4gT24gdGhlIG90aGVyIGhhbmQsIGl0IHBvaW50cyBvdXQgdGhhdCBpZiB0 aGVzZSBVQeKAmXMgYXJlIGFjdGluZyBhcyBpbnRlcm1lZGlhdGUgcHJvdmlkZXJzICh3aGljaCwg aW4gdGhlc2UgY2FzZXMsIHRoZXkgYXJlKSwgdGhleSB3aWxsIG5lZWQgdG8gYmUgdXBkYXRlZCB0 byBhY2NlcHQgYW5kIHBhc3MgdGhlIHN0aXItY2FsbGJhY2sgcmVsYXRlZCBoZWFkZXJzIGV2ZW4g dGhvdWdoIHRoZXkgYXJlIGp1c3QgcHJvdmlkaW5nIGEgdHJhbnNpdCBmdW5jdGlvbiBhbmQgZXZl biB0aG91Z2ggdGhleSBhcmUgbm90IGFzc3VtaW5nIGFueSByZXNwb25zaWJpbGl0eSBmb3IgdmVy aWZpY2F0aW9uLg0KDQpJbiBteSBvdGhlciB0ZXN0IGNhc2VzLCB0aGUgZGVzdGluYXRpb24gcGhv bmUgcmFuZyBldmVuIHRob3VnaCB0aGlzIHdhcyBzdXBwb3NlZCB0byBiZSBhIOKAnHZlcmlmaWNh dGlvbuKAnSBJTlZJVEUuIFRoaXMgdGVsbHMgbWUsIEkgdGhpbmssIHRoYXQgYXQgbGVhc3QgdGhl IGZpcnN0IFVBIChYLCBpbiBteSBleHBsYW5hdGlvbiBhYm92ZSkgaW4gdGhlIHZlcmlmaWNhdGlv biBjYWxsIHBhdGggaXMgbm9uLVJGQy1jb21wbGFpbnQsIGFuZCB0aGF0IGRvd25zdHJlYW0gVUHi gJlzIGFyZSBlaXRoZXIgYWxzbyBub24tY29tcGxpYW50LCBvciB0aGF0IHRoZSBSRVFVSVJFIGhl YWRlciBnb3QgZHJvcHBlZCBhbG9uZyB0aGUgd2F5Lg0KDQpJIGFtIG5lcnZvdXMgYWJvdXQgdGhl IGV4dGVudCB0byB3aGljaCBkZXBsb3llZCBVQeKAmXMgYXJlIG5vbi1SRkMtY29tcGxpYW50IHdp dGggcmVzcGVjdCB0byB0aGUgUkVRVUlSRSBoZWFkZXIsIGFuZCBob3cgdGhhdCBjb3VsZCB1bmRl cm1pbmUgZGVwbG95YWJpbGl0eSBvZiB0aGlzIHNvbHV0aW9uLiBNYXliZSB5b3UgaW50ZW5kZWQg dGhhdCB0aGUgc29sdXRpb24gb25seSBhcHBseSB3aGVuIEEgYW5kIEIgYXJlIGRpcmVjdGx5IGNv bm5lY3RlZCBhbmQgdGhlcmUgYXJlIG5vIGludGVybWVkaWF0ZSBwcm92aWRlcnMuIEJ1dCBJ4oCZ bSBjb25jZXJuZWQgdGhhdOKAmXMgb25seSBhIHNtYWxsIGZyYWN0aW9uIG9mIOKAnHJlYWwgd29y bGTigJ0gY2FsbHMgdG9kYXkuDQoNCg0KRmlyc3QgbGV0IG1lIHNheSB0aGF0IGlzIGF3ZXNvbWUg eW91IGp1c3Qgd2VudCBhbmQgdHJpZWQgdGhpcy4gSSBsb3ZlIHJlYWwgd29ybGQgZGF0YS4gU29t ZSBvZiB0aGUgdmVyc2lvbiBvZiBBc3RlcmlzayBJIGhhdmUgc2VlbiBjb25maWd1cmVkIHRoYXQg d2F5IGJ1dCBzb3J0IG9mIHN1cnByaXNlZCBpZiBwZW9wbGUgYXJlIHVzaW5nIEFDTUUgb3IgQ2lz Y28gU0JDcyB0aGF0IHdheS4gSSBjZXJ0YWlubHkgZG9u4oCZdCBoYXZlIGFueSBkZXNpcmUgdG8g ZW1iYXJyYXNzIGFueSBwYXJ0aWN1bGFyIFNQIGFib3V0IHRoZWlyIFNJUCBkZXBsb3ltZW50IGJ1 dCB3b3VsZCB5b3UgYmUgd2lsbGluZyB0byBzaGFyZSB3aGF0IHByb3ZpZGVycyBkaWQgdGhpcyBz dWNoIHRoYXQgd2UgbWlnaHQgdHJ5IGFuZCB0cmFjayBkb3duIHdoeSB0aGV5IGRpZCBpdCAtIHRo YXQgbWlnaHQgaGVscCBkZWNpZGUgaG93IG11Y2ggb2YgYW4gaXNzdWUgaXQgaXM/DQoNCg0KSSBh bSBpbnRlcmVzdGVkIGluIHlvdXIgdGhvdWdodHMgb24gdGhlc2UgaXRlbXMsIGFuZCBvbiBnZXR0 aW5nIG1lIGJhY2sgb24gdHJhY2sgaWYgSeKAmXZlIG1pc3VuZGVyc3Rvb2QgYXNwZWN0cyBvZiB0 aGUgcHJvcG9zYWwuDQoNCg0KSSB0aGluayB5b3UgaGF2ZSB1bmRlcnN0b29kIHRoZSBnaXN0IG9m IHRoZSBwcm9wb3NhbCBhbmQgcGVyaGFwcyB3ZSBoYXZlIHNvbWUgdHdlYWtzIHRvIG1ha2UuIEkg YWdyZWUgd2l0aCB5b3VyIGhpZ2ggbGV2ZWwgcG9pbnRzIG9mIHRoZXJlIGFyZSBpbnRlcm1lZGlh cmllcyBpbiB0aGUgY2FsbCB3ZSBjYXJlIGFib3V0IGFuZCB0aGF0IGlmIGFueSBzZXJ2ZXIgYWxv bmcgdGhlIGNoYWluIGlzIG5vbiBjb21wbGlhbnQgd2l0aCByZXF1aXJlLCBpdCBkb2VzIG5vdCB3 b3JrIHdlbGwuIFBlcmhhcHMgd2UgY2FuIHRoaW5rIG9mIHdheXMgdG8gbWl0aWdhdGUgdGhhdCBi dXQgbm90IG9idmlvdXMgaG93Lg0KDQpOb3cgdGhhdCB3ZSBoYXZlIDg4MjQgb3V0IHRoZSBkb29y LCBJ4oCZbSBtb3JlIHRyeWluZyBvdXQgaWRlYXMgdG8gc2VlIHdoYXQgbWlnaHQgd29yayB0byBo ZWxwIHJlZHVjZSBTUEFNIGFuZCBJIHNoYXJlIHNvbWUgb2YgeW91ciBjb25jZXJucyBhYm91dCB0 aGlzIGJ1dCBub3Qgc3VyZSB3aGF04oCZcyBiZXR0ZXIgZm9yIGRlcGxveW1lbnQuDQoNCkhvd2V2 ZXIsIGFueSBpbiBiYW5kIFNUSVIgc29sdXRpb24gaXMgZ29pbmcgdG8gcmVxdWlyZSB0aGUgc2Vy dmljZSBwcm92aWRlcnMgdG8gdGVzdCBhbmQgc3VwcG9ydCBpdC4gSSB3b3VsZCBub3QgYmUgc3Vy cHJpc2VkIHRvIGZpbmQgdGhhdCBhbnkgU0JDIGNvbmZpZ3VyZWQgdG8gaWdub3JlIHRoZSBSZXF1 aXJlIGhlYWRlciBpcyBhbHNvIHByZXR0eSB1bmxpa2UgdG8gcGFzcyB0aGUgSWRlbnRpdHkgaGVh ZGVyLiAgRm9yIGEgbG9uZyB0aW1lLCBJIGhhdmUgc2VlbiBtYW55IHRoaW5ncyBibG9ja2VkIGF0 IElFVEYgZnJvbSBieSB0aGUg4oCcU0JDIHdvbuKAmXQgc3VwcG9ydCB0aGF04oCdIGFyZ3VtZW50 IGJ1dCBpbiB0aGlzIHBhcnRpY3VsYXIgY2FzZSBpdCBpcyBhIGJpdCBkaWZmZXJlbnQuIElmIHNv bWUgY2FycmllciBoYXMgYWxsIG9mIGl0IGN1c3RvbWVycyBnZXR0aW5nIGFuIGlycml0YXRpbmcg Y2FsbCBiYWNrIGNhbGwgZXZlciB0aW1lIHRoZXkgZGlhbCBhIG5ldyBudW1iZXIsIEnigJltIHN1 cmUgdGhlIGVjb25vbWljcyBvZiBjdXN0b21lciBzYXRpc2ZhY3Rpb24gYW5kIHJldGVudGlvbiB3 aWxsIGNhdXNlIHRoYXQgY2FycmllciB0byBjaGFuZ2UgdGhlIGNvbmZpZ3VyYXRpb24gb2YgdGhl aXIgU0JDIHRvIG5vdCBpZ25vcmUgdGhlIFJlcXVpcmUgaGVhZGVyLg0KDQpJIGFtIHdvcnJpZWQg YWJvdXQgdGhpcyBhbmQgdGhlIHJlc3Qgb2YgU1RJUiB3aGVuIHRoZSBpbnRlcmNvbm5lY3QgYmV0 d2VlbiB0aGUgY2FycmllcnMgaXMgU1M3Lg0KDQoNCg0KRGF2aWQNCg0KRGF2aWQgRnJhbmtlbA0K WmlwRFjCriBMTEMNCk1vbnRlIFNlcmVubywgQ0EgVVNBDQpUZWw6IDEtODAwLUZSQU5LRUwgKDEt ODAwLTM3Mi02NTM1KQ0KDQpGcm9tOiBzdGlyIDxzdGlyLWJvdW5jZXNAaWV0Zi5vcmc8bWFpbHRv OnN0aXItYm91bmNlc0BpZXRmLm9yZz4+IE9uIEJlaGFsZiBPZiBKb25hdGhhbiBSb3NlbmJlcmcN ClNlbnQ6IFRodXJzZGF5LCBNYXJjaCAxLCAyMDE4IDY6MTUgUE0NClRvOiBzdGlyQGlldGYub3Jn PG1haWx0bzpzdGlyQGlldGYub3JnPg0KU3ViamVjdDogW3N0aXJdIE5ldyBkcmFmdCBkcmFmdC1y b3NlbmJlcmctc3Rpci1jYWxsYmFjay0wMA0KDQpIZXkgYWxsIC0gYmVlbiBhIHdoaWxlIDopDQpD dWxsZW4gYW5kIEkgd3JvdGUgdXAgYSBjb25jZXB0IGZvciB1c2luZyBTVElSIHdpdGggc2VsZi1z aWduZWQgb3IgZG9tYWluIGJhc2VkIGNlcnRzLCBhbmQgdGhlbiBoYW5kbGluZyBudW1iZXIgdmFs aWRhdGlvbiB3aXRoIGFuIGluLWJhbmQgY2FsbGJhY2suIFdlIHRoaW5rIGl0cyBhIHByb21pc2lu ZyBhcHByb2FjaCB0byBhY2NlbGVyYXRlIFNUSVIgZGVwbG95bWVudHMsIHNpbmNlIGl0IGFsbG93 cyB0aGVtIHRvIGhhcHBlbiB3aXRob3V0IHRoZSBjZXJ0IGluZnJhc3RydWN0dXJlIGJlaW5nIGlu IHBsYWNlLg0KDQpodHRwczovL3d3dy5pZXRmLm9yZy9pZC9kcmFmdC1yb3NlbmJlcmctc3Rpci1j YWxsYmFjay0wMC50eHQNCkNvbW1lbnRzIHdlbGNvbWUuDQotSm9uYXRoYW4gUi4NCg0KLS0NCkpv bmF0aGFuIFJvc2VuYmVyZywgUGguRC4NCmpkcm9zZW5AamRyb3Nlbi5uZXQ8bWFpbHRvOmpkcm9z ZW5AamRyb3Nlbi5uZXQ+DQpodHRwOi8vd3d3Lmpkcm9zZW4ubmV0PGh0dHA6Ly93d3cuamRyb3Nl bi5uZXQvPg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18N CnN0aXIgbWFpbGluZyBsaXN0DQpzdGlyQGlldGYub3JnPG1haWx0bzpzdGlyQGlldGYub3JnPg0K aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9zdGlyDQoNCg0KX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX18NCg0KVGhpcyBlLW1haWwgbWF5IGNvbnRhaW4gU3ByaW50 IHByb3ByaWV0YXJ5IGluZm9ybWF0aW9uIGludGVuZGVkIGZvciB0aGUgc29sZSB1c2Ugb2YgdGhl IHJlY2lwaWVudChzKS4gQW55IHVzZSBieSBvdGhlcnMgaXMgcHJvaGliaXRlZC4gSWYgeW91IGFy ZSBub3QgdGhlIGludGVuZGVkIHJlY2lwaWVudCwgcGxlYXNlIGNvbnRhY3QgdGhlIHNlbmRlciBh bmQgZGVsZXRlIGFsbCBjb3BpZXMgb2YgdGhlIG1lc3NhZ2UuDQo= --_000_3783653d02a24044a1ddc977c60d3bb0plswe13m04adsprintcom_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAy IDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpHZW9yZ2lhOw0KCXBhbm9zZS0xOjIgNCA1 IDIgNSA0IDUgMiAzIDM7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBs aS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9t Oi4wMDAxcHQ7DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fu cy1zZXJpZjt9DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0 eTo5OTsNCgljb2xvcjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2aXNp dGVkLCBzcGFuLk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsN Cgljb2xvcjpwdXJwbGU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpwLk1zb0xpc3RQ YXJhZ3JhcGgsIGxpLk1zb0xpc3RQYXJhZ3JhcGgsIGRpdi5Nc29MaXN0UGFyYWdyYXBoDQoJe21z by1zdHlsZS1wcmlvcml0eTozNDsNCgltYXJnaW4tdG9wOjBpbjsNCgltYXJnaW4tcmlnaHQ6MGlu Ow0KCW1hcmdpbi1ib3R0b206MGluOw0KCW1hcmdpbi1sZWZ0Oi41aW47DQoJbWFyZ2luLWJvdHRv bTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNh bnMtc2VyaWY7fQ0KcC5tc29ub3JtYWwwLCBsaS5tc29ub3JtYWwwLCBkaXYubXNvbm9ybWFsMA0K CXttc28tc3R5bGUtbmFtZTptc29ub3JtYWw7DQoJbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87DQoJ bWFyZ2luLXJpZ2h0OjBpbjsNCgltc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzsNCgltYXJnaW4t bGVmdDowaW47DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fu cy1zZXJpZjt9DQpzcGFuLkVtYWlsU3R5bGUxOQ0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbDsN Cglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjp3aW5kb3d0ZXh0O30N CnNwYW4uRW1haWxTdHlsZTIwDQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsOw0KCWZvbnQtZmFt aWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0Kc3Bhbi5FbWFp bFN0eWxlMjENCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWw7DQoJZm9udC1mYW1pbHk6IkNhbGli cmkiLHNhbnMtc2VyaWY7DQoJY29sb3I6d2luZG93dGV4dDt9DQpzcGFuLkVtYWlsU3R5bGUyMg0K CXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1yZXBseTsNCglmb250LWZhbWlseToiQXJpYWwiLHNh bnMtc2VyaWY7DQoJY29sb3I6IzAwMDA2NjsNCglmb250LXdlaWdodDpub3JtYWw7DQoJZm9udC1z dHlsZTpub3JtYWw7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9u bHk7DQoJZm9udC1zaXplOjEwLjBwdDt9DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo4LjVp biAxMS4waW47DQoJbWFyZ2luOjEuMGluIDEuMGluIDEuMGluIDEuMGluO30NCmRpdi5Xb3JkU2Vj dGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLS0+PC9zdHlsZT48IS0tW2lmIGd0ZSBtc28g OV0+PHhtbD4NCjxvOnNoYXBlZGVmYXVsdHMgdjpleHQ9ImVkaXQiIHNwaWRtYXg9IjEwMjYiIC8+ DQo8L3htbD48IVtlbmRpZl0tLT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlbGF5 b3V0IHY6ZXh0PSJlZGl0Ij4NCjxvOmlkbWFwIHY6ZXh0PSJlZGl0IiBkYXRhPSIxIiAvPg0KPC9v OnNoYXBlbGF5b3V0PjwveG1sPjwhW2VuZGlmXS0tPg0KPC9oZWFkPg0KPGJvZHkgbGFuZz0iRU4t VVMiIGxpbms9ImJsdWUiIHZsaW5rPSJwdXJwbGUiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24x Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtB cmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMwMDAwNjYiPlNCQ3MgZG8gbm90IHRlcm1pbmF0 ZSBjYWxscy4mbmJzcDsgQW5kLCBleHBlcmllbmNlIGhhcyBzaG93biBzb21lIFNJUCBzdGFja3Mg ZG8gbm90IHN1cHBvcnQgUkZDIDMyNjIsIGV2ZW4gaWYgdGhlIFNCQyBkaWQuPG86cD48L286cD48 L3NwYW4+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tcmln aHQ6NS44cHQiPjxzcGFuIHN0eWxlPSJjb2xvcjojMDAwMDY2Ij48bzpwPiZuYnNwOzwvbzpwPjwv c3Bhbj48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMwMDAwNjYiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTti b3JkZXItdG9wOnNvbGlkICNFMUUxRTEgMS4wcHQ7cGFkZGluZzozLjBwdCAwaW4gMGluIDBpbiI+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj5Gcm9tOjwvYj4gRGF2aWQgRnJhbmtlbCBbbWFpbHRv OmRmcmFua2VsQHppcGR4LmNvbV0gPGJyPg0KPGI+U2VudDo8L2I+IE1vbmRheSwgTWFyY2ggMDUs IDIwMTggMTA6MjAgQU08YnI+DQo8Yj5Ubzo8L2I+ICdDdWxsZW4gSmVubmluZ3MgKGZsdWZmeSkn ICZsdDtmbHVmZnlAY2lzY28uY29tJmd0Ozxicj4NCjxiPkNjOjwvYj4gJ0pvbmF0aGFuIFJvc2Vu YmVyZycgJmx0O2pkcm9zZW5AamRyb3Nlbi5uZXQmZ3Q7OyBzdGlyQGlldGYub3JnPGJyPg0KPGI+ U3ViamVjdDo8L2I+IFJlOiBbc3Rpcl0gTmV3IGRyYWZ0IGRyYWZ0LXJvc2VuYmVyZy1zdGlyLWNh bGxiYWNrLTAwPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5UaGFua3Mg Zm9yIHlvdXIgcmVzcG9uc2UsIEN1bGxlbi48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SeKAmWxs IHRyeSB0byBhZGRyZXNzIHlvdXIgcXVlc3Rpb25zIGFuZCBjb21tZW50cyBhdCB0aGUgdG9wIGhl cmUsIHJhdGhlciB0aGFuIGJ1cnlpbmcgdGhlbSBiZWxvdy48bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+UmVnYXJkaW5nIHNwZWNpZmljcyBvZiB0aGUgbWlzYmVoYXZpbmcgU0JDczogSeKAmW0gbm90 IGNvbWZvcnRhYmxlIGlkZW50aWZ5aW5nIHRoZW0gaGVyZSwgYnV0IEkgY2FuIHRyeSB0byByZWFj aCBvdXQgdG8gdGhlbSB0byBzZWUgaWYgdGhleSB3YW50IHRvIGVuZ2FnZSBkaXJlY3RseSBpbiB0 aGlzIGRpc2N1c3Npb24gKG9yIGlmIHRoZXkgY2FuIGdpdmUgbWUgYW55IGluZm9ybWF0aW9uIHRv IHJlbGF5IGFzIHRvDQogd2h5IHRoZXkgYXJlIG5vbi1jb25mb3JtaW5nKS4gSSBjYW4gdGVsbCB5 b3UgdGhhdCB0aGV5IGFyZSBhbGwgbGljZW5zZWQgQ0xFQ3MgKHJhbmdpbmcgZnJvbSB0aW55IHRv IHZlcnkgbGFyZ2UpLiBGcm9tIG15IHBhcnNpbmcgb2YgdGhlIDIwMC1PSyB0aGV5IHNlbmQgYmFj ayB0byBtZSwgYXQgbGVhc3Qgc29tZSBhcmUgdXNpbmcgY29tbWVyY2lhbCBTQkNzOyBpbiBvbmUg Y2FzZSwgaXQgbG9va3MgbGlrZSB0aGF0IFNCQyBwcm92aWRlciBpcyBub3cNCiBvdXQgb2YgYnVz aW5lc3MuIFRoYXTigJlzIG5vdCB1bmNvbW1vbiBpbiB0aGlzIGRvbWFpbi4gPG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPkkgY2FuIHRoaW5rIG9mIGEgZmV3IHBvc3NpYmlsaXRpZXMgYXMgdG8gd2h5 IHRoZXNlIFNCQ3MgYXJlIGJlaGF2aW5nIGFzIHRoZXkgYXJlOiAoMSkgVGhlIG1hbnVmYWN0dXJl ciBkaWRu4oCZdCBhZGhlcmUgdG8gdGhlIFNJUCBSRkNzLCBlaXRoZXIgb24gcHVycG9zZSBvciBk dWUgdG8gY2FyZWxlc3NuZXNzOyAoMikgVGhlIHByb3ZpZGVyIG1pcy1jb25maWd1cmVkIHRoZSBT QkMgaW4gZXJyb3I7ICgzKSBUaGUgZGVmYXVsdA0KIGNvbmZpZ3VyYXRpb24gZm9yIHRoZSBTQkMg ZG9lc27igJl0IGFkaGVyZSB0byB0aGUgUkZDczsgKDQpIFRoZSBwcm92aWRlciBlbmNvdW50ZXJl ZCBzb21lIGlzc3VlIGluIHRoZSBwYXN0IGFuZCBwdXJwb3NlZnVsbHkgYWx0ZXJlZCB0aGUgY29u ZmlndXJhdGlvbiwgYW5kIHRoaXMgaXMgdGhlIGRlc2lyZWQgcmVzdWx0IG9yIHNpZGUtZWZmZWN0 OyAoNSkgVGhlcmXigJlzIGEgYnVnLiBJ4oCZdmUgZW5jb3VudGVyZWQgYWxsIG9mIHRoZXNlIG92 ZXIgdGhlIHllYXJzLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4m bmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5DZXJ0YWlubHkgc29tZSBwcm92 aWRlcnMgd2lsbCBiZSBtb3RpdmF0ZWQgYW5kIGNvb3BlcmF0aXZlIGluIGZpeGluZyBwcm9ibGVt cyBhbmQgaW1wbGVtZW50aW5nIG5ldyBleHRlbnNpb25zLiBPdGhlcnMgd2lsbCBiZSByZWNhbGNp dHJhbnQuIEkgaGF2ZSBzYWlkIHRvIHByb3ZpZGVycyBhYm91dCBvdGhlciBub24tY29tcGxpYW50 IHNpdHVhdGlvbnM6IOKAnFJlYWQgdGhlIFJGQy4gV2hhdCBkb27igJl0IHlvdSB1bmRlcnN0YW5k DQogYWJvdXQgU0hBTEwgb3IgTVVTVD/igJ0gQW5kIHRoZXkgcmVzcG9uZCDigJxXaGF0IGRvbuKA mXQgWU9VIHVuZGVyc3RhbmQgd2hlbiB3ZSB0ZWxsIHlvdTogV2UgZG9u4oCZdCBzdXBwb3J0IHRo YXQgYXNwZWN0IG9mIHRoZSBSRkMu4oCdIFdpdGggcmVzcGVjdCB0byBTVElSLUNhbGxiYWNrIHNw ZWNpZmljYWxseSwgSSBjYW4gaW1hZ2luZSB0aGF0IGZvciBvdXIgZXhhbXBsZSwgd2hlcmUgQiBp cyBzZW5kaW5nIGEgdmVyaWZ5IGludml0ZSB0byBBIHZpYSBYIGFuZA0KIFksIEFsaWNl4oCZcyBw aG9uZSB3aWxsIHJpbmcgaW1wcm9wZXJseSwgYnV0IEEgd2lsbCBwb2ludCB0aGUgZmluZ2VyIGF0 IFggKG9yIFkpIGZvciBkcm9wcGluZyB0aGUgUkVRVUlSRSBoZWFkZXIuIFNpbmNlIEFsaWNlIGlz IGEgY3VzdG9tZXIgb2YgQSBhbmQgbm90IFgsIHlvdXIgbm90aW9uIG9mIOKAnHRoZSBlY29ub21p Y3Mgb2YgY3VzdG9tZXIgc2F0aXNmYWN0aW9uIGFuZCByZXRlbnRpb27igJ0gd29u4oCZdCBhcHBs eS48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SSBhZ3JlZSB3aXRoIHlvdTogdGhlc2Ugc2FtZSBm YWN0b3JzIHdpbGwgZGVmaW5pdGVseSBwbGF5IGludG8gODIyNCBkZXBsb3ltZW50IGFuZCB0aGUg cHJvcGFnYXRpb24gb2YgdGhlIElERU5USVRZIGhlYWRlci4gSSBiZWxpZXZlIHRoYXQgdGhlIHRl YW0gd2lsbCBiZSBzdWNjZXNzZnVsIHdpdGggc29tZSByZWxhdGl2ZWx5IHJhcGlkIGluaXRpYWwg aW4tdGhlLWZpZWxkIGRlbW9uc3RyYXRpb25zLiBCdXQgaWYNCiB5b3VyIG9iamVjdGl2ZSBpcyB0 byBtYWtlIGEgc2VyaW91cyBkZW50IGluIHRoZSByb2JvY2FsbGluZyBlcGlkZW1pYywgdGhhdCBy ZXF1aXJlcyBtdWNoIGhpZ2hlciBwZW5ldHJhdGlvbiBiZWNhdXNlIHlvdeKAmXJlIGJhdHRsaW5n IGEgcmVhY3RpdmUsIGNsZXZlciBlbmVteSBmb3JjZS4gR2l2ZW4gZXZlcnl0aGluZyB0aGF0IGhh cyB0byBjaGFuZ2UgZm9yIDgyMjQsIHRoYXQgaXMgZ29pbmcgdG8gdGFrZSBtYW55IHllYXJzLjxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5IZXJkaW5nIHRoZSBtYW55IGh1bmRyZWRzIG9mIFVTIHRl bGVjb20gcHJvdmlkZXJzIHRoYXQgaXQgdGFrZXMgdG8gZ2V0IHRvIGNyaXRpY2FsIG1hc3MgaXMg YSBodWdlIGh1cmRsZSB3aGVuIHdlIGhhdmUgdG8gd3JpdGUgbmV3IHNvZnR3YXJlIGFuZCB0aGVu IGdldCBpdCBkZXBsb3llZCBhbmQgY29uZmlndXJlZC4gVGhlIG11bHRpLWhvcCBuYXR1cmUgb2Yg b3VyIGNhbGwgbmV0d29yayBtZWFucyB3ZSBmYWlsDQogb24gYSB3ZWFrIGxpbmsuIFdvcnNlLCBn aXZlbiB0aGUgcm9idXN0bmVzcyBvZiBTUzcgYW5kIHRoZSBodWdlIHN1bmsgaW52ZXN0bWVudCwg aXTigJlzIGdvaW5nIHRvIHRha2UgcXVpdGUgc29tZSB0aW1lIGZvciBpdCB0byBiZSBkaXNwbGFj ZWQgdG8gYSBsZXZlbCBvZiBpbnNpZ25pZmljYW5jZS4gV2XigJlsbCBsaXZlIGluIGEgdHdvLXBy b3RvY29sIHdvcmxkIGZvciB0aGUgZm9yZXNlZWFibGUgZnV0dXJlLjxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj5XaGF0IHRvIGRvIGluIHRoZSBtZWFudGltZT8gSSBjb250aW51ZSB0byBiZSBvcHRp bWlzdGljIGFib3V0IGxldmVyYWdpbmcgQklMTElORyBURUxFUEhPTkUgTlVNQkVSIOKAkyBhIGZp ZWxkIHRoYXQgcHJlZGF0ZXMgZXZlbiBDYWxsZXItSUQuIEJUTiBpcyBpbiBTUzcgYXMgQ2hhcmdl IE51bWJlciwgYW5kIGludGVyd29ya3MgdG8gU0lQIFAtQ2hhcmdlLUluZm8uIEluIGVhcmxpZXIg ZGF5cywgQlROIHdhcyBpbXBvcnRhbnQNCiBmb3IgYmlsbGluZyBhbmQganVyaXNkaWN0aW9uOyB0 aGluZ3MgdGhhdCBwcm92aWRlcnMgSEFEIHRvIHBheSBhdHRlbnRpb24gdG8uIFRodXMsIGl0IElT IHN1cHBvcnRlZCBpbiB2aXJ0dWFsbHkgYWxsIGluc3RhbGxlZCBuZXR3b3JrIGVsZW1lbnRzLiBJ biBteSBleHBlcmllbmNlLCBpdCB1c3VhbGx5IGdldHMgcHJvcGFnYXRlZCBieSBpbnRlcm1lZGlh cmllcy4NCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5CeSB1c2luZyBCVE4gdG8gaWRlbnRpZnkg Y2FsbCBvcmlnaW5hdG9ycywgb3IgYXQgbGVhc3Qgb3JpZ2luYXRpbmcgcHJvdmlkZXJzLCB3ZSBj YW4gdGhyb3cgYSBtdWNoIGJyaWdodGVyIGxpZ2h0IG9uIHRoZSBzb3VyY2Ugb2Ygb3VyIHJvYm9j YWxsIHByb2JsZW1zLCBpbnN0ZWFkIG9mIGNvbnRpbnVpbmcgdG8gZmxvdW5kZXIgaW4gdGhlIGRh cmsuIFRoYXQgY2FuIGJlIGFjY29tcGxpc2hlZCBieSByZWd1bGF0aW9uLA0KIG1hbmRhdGluZyB0 aGF0IHByb3ZpZGVycyBpbnNlcnQgdGhlIEJUTiBhbmQgbm90IHBlcm1pdCBjdXN0b21lcnMgdG8g c3Bvb2YgaXQuIFRoaXMgYXBwcm9hY2ggd29u4oCZdCB3b3JrIDEwMCUgb2YgdGhlIHRpbWUsIGJ1 dCBpdCBjYW4gbWFrZSBhIGh1Z2UgYml0ZSB0b2RheSB3aGlsZSB3ZSB3YWl0IGZvciBtb3JlIHNv cGhpc3RpY2F0ZWQgc29sdXRpb25zIHRvIGdldCB0byBjcml0aWNhbCBtYXNzLiBJ4oCZbSBpbnRl cmVzdGVkIGluIHlvdXIgdGhvdWdodHMNCiBoZXJlLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5N YW55IGFyZSBxdWljayB0byBwb2ludCBvdXQgdGhhdCByb2JvY2FsbHMgY2FuIG9yaWdpbmF0ZSBm cm9tIG92ZXJzZWFzLCB3aGVyZSBvdXIgbWFuZGF0ZXMgYXJlIGluZWZmZWN0aXZlLiBIb3dldmVy LCBldmVyeSBjYWxsIHRvIGEgVVNBIFBTVE4gbnVtYmVyIGNvbWVzIHRocm91Z2ggc29tZSBVU0Et cmVndWxhdGVkIG9yaWdpbmF0aW5nIHByb3ZpZGVyLCBhbmQgdGhvc2UgcHJvdmlkZXJzIGhhdmUg Y29tbWVyY2lhbA0KIGFncmVlbWVudHMgd2l0aCB3aG9ldmVyIGlzIHNlbmRpbmcgdGhlbSB0aGUg Y2FsbHMuIFNvIHRoZXJlIGlzIGEgbWVjaGFuaXNtIHRvIHB1c2ggYmFjayBvbiB0aGUgdWx0aW1h dGUgc291cmNlLiBUaGVyZeKAmXMgYSBmYWlyIGFtb3VudCBvZiBldmlkZW5jZSB0aGF0IGF0IGxl YXN0IHRvZGF5LCB0aGUgbWFqb3JpdHkgb2Ygcm9ib2NhbGxzIGNvbWUgZnJvbSBhIHJlbGF0aXZl bHkgc21hbGwgbnVtYmVyIChkb3plbnMpIG9mIHNvdXJjZXMsIHNvIG91cg0KIGZpcnN0IHByaW9y aXR5IHNob3VsZCBiZSB0byBmaW5kIGFuZCBzdG9wIHRob3NlLjxvOnA+PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj5EYXZpZDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJz cDs8L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNv bG9yOiMxRjQ5N0Q7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6WkgtVFciPkRhdmlkIEZyYW5rZWw8L3Nw YW4+PHNwYW4gc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOlpILVRXIj48bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBzdHlsZT0iZm9udC1mYW1p bHk6JnF1b3Q7R2VvcmdpYSZxdW90OyxzZXJpZjtjb2xvcjojNjY5OUNDO21zby1mYXJlYXN0LWxh bmd1YWdlOlpILVRXIj5aaXA8L3NwYW4+PC9iPjxiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTom cXVvdDtHZW9yZ2lhJnF1b3Q7LHNlcmlmO2NvbG9yOmdyYXk7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6 WkgtVFciPkRYPC9zcGFuPjwvYj48Yj48c3VwPjxzcGFuIHN0eWxlPSJjb2xvcjpibGFjazttc28t ZmFyZWFzdC1sYW5ndWFnZTpaSC1UVyI+wq48L3NwYW4+PC9zdXA+PC9iPjxzcGFuIHN0eWxlPSJj b2xvcjojMUY0OTdEO21zby1mYXJlYXN0LWxhbmd1YWdlOlpILVRXIj4NCiBMTEM8L3NwYW4+PHNw YW4gc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOlpILVRXIj48bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RDttc28t ZmFyZWFzdC1sYW5ndWFnZTpaSC1UVyI+TW9udGUgU2VyZW5vLCBDQSBVU0E8L3NwYW4+PHNwYW4g c3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOlpILVRXIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RDttc28tZmFy ZWFzdC1sYW5ndWFnZTpaSC1UVyI+VGVsOiAxLTgwMC1GUkFOS0VMICgxLTgwMC0zNzItNjUzNSk8 L3NwYW4+PHNwYW4gc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOlpILVRXIj48bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9v OnA+PC9wPg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQg I0UxRTFFMSAxLjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGluIj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxiPkZyb206PC9iPiBzdGlyICZsdDs8YSBocmVmPSJtYWlsdG86c3Rpci1ib3VuY2Vz QGlldGYub3JnIj5zdGlyLWJvdW5jZXNAaWV0Zi5vcmc8L2E+Jmd0Ow0KPGI+T24gQmVoYWxmIE9m IDwvYj5DdWxsZW4gSmVubmluZ3MgKGZsdWZmeSk8YnI+DQo8Yj5TZW50OjwvYj4gU3VuZGF5LCBN YXJjaCA0LCAyMDE4IDU6MDMgUE08YnI+DQo8Yj5Ubzo8L2I+IERhdmlkIEZyYW5rZWwgJmx0Ozxh IGhyZWY9Im1haWx0bzpkZnJhbmtlbEB6aXBkeC5jb20iPmRmcmFua2VsQHppcGR4LmNvbTwvYT4m Z3Q7PGJyPg0KPGI+Q2M6PC9iPiBKb25hdGhhbiBSb3NlbmJlcmcgJmx0OzxhIGhyZWY9Im1haWx0 bzpqZHJvc2VuQGpkcm9zZW4ubmV0Ij5qZHJvc2VuQGpkcm9zZW4ubmV0PC9hPiZndDs7DQo8YSBo cmVmPSJtYWlsdG86c3RpckBpZXRmLm9yZyI+c3RpckBpZXRmLm9yZzwvYT48YnI+DQo8Yj5TdWJq ZWN0OjwvYj4gUmU6IFtzdGlyXSBOZXcgZHJhZnQgZHJhZnQtcm9zZW5iZXJnLXN0aXItY2FsbGJh Y2stMDA8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tYm90 dG9tOjEyLjBwdCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFy Z2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj5PbiBNYXIgNCwgMjAxOCwgYXQgMTI6NTAgQU0sIERhdmlkIEZyYW5rZWwgJmx0Ozxh IGhyZWY9Im1haWx0bzpkZnJhbmtlbEB6aXBkeC5jb20iPmRmcmFua2VsQHppcGR4LmNvbTwvYT4m Z3Q7IHdyb3RlOjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPkhpIEpvbmF0aGFuIGFuZCBDdWxsZW4g4oCTPG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkkgcmVhZCB0aGUgZHJhZnQgd2l0aCBpbnRl cmVzdCBhbmQgd29uZGVyIGlmIHlvdSBjYW4gY2xhcmlmeSBhIGZldyB0aGluZ3MgZm9yIG1lLiBN eSB1bmRlcnN0YW5kaW5nIG9mIFNJUCBudWFuY2VzIGlzIGxpbWl0ZWQsIHNvIEkgbWF5IGJlIG92 ZXJsb29raW5nIHNvbWUgb2J2aW91cyB0aGluZ3MgaGVyZS4gQXQgdGhlIHNhbWUgdGltZSwgSeKA mW0gdHJ5aW5nIHRvIGJlIHByYWdtYXRpYyBhYm91dCBob3cgdGhpbmdzDQogd29yayBpbiB0aGUg 4oCccmVhbCB3b3JsZOKAnSB2cy4gdGhlIHdvcmxkIGFzIGRlZmluZWQgYnkgdGhlIHNwZWNzLjxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7 PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5TbyBt eSBxdWVzdGlvbnMgLyBjb21tZW50cyBhcmU6PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkEpIEkgc2VlIGluIHNlY3Rpb24gMyByZWZlcmVuY2Vz IHRvIFNVUFBPUlRFRCBhbmQgUkVRVUlSRSBoZWFkZXIgZmllbGRzIHRoYXQgaW5jbHVkZSDigJxz dGlyLWNhbGxiYWNr4oCdLiBUaGVuIGluIHN1Yi1wYXJ0IDEgb2Ygc2VjdGlvbiAzLCBpbiB0aGUg Y2FsbCBkaWFncmFtIEkgc2VlIHJlZmVyZW5jZXMgdG8gU1VQUE9SVEVEIGFuZCBSRVFVSVJFIGhl YWRlcnMgdGhhdCBzYXkg4oCcc3Rpci12ZXJpZnnigJ0uICZuYnNwOyhOb3RlLA0KIGJ0dywgdGhh dCB0aGVyZSBhcmUgdHdvIHN1Yi1wYXJ0cyAxIGluIHNlY3Rpb24gMzsgSSB0aGluayB0aGV5IGFy ZSBzdXBwb3NlZCB0byBiZSBudW1iZXJlZCAxLCAyLCAzIGluc3RlYWQgb2YgMSwgMSwgMi4pIFRo ZXJlIGFyZSBmdXJ0aGVyIHJlZmVyZW5jZXMgaW4gdGhlIGRvY3VtZW50IHRvIOKAnHN0aXItdmVy aWZ54oCdLiBUaGVuIGluIHNlY3Rpb24gOC4xLCB0aGVyZSBhcmUgcmVmZXJlbmNlcyB0byBhIOKA nHNpcC12ZXJpZnnigJ0gT3B0aW9uIFRhZy4NCjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5TbyBteSBxdWVzdGlvbiBpczogYXJlIOKAnHN0aXIt Y2FsbGJhY2vigJ0sIOKAnHN0aXItdmVyaWZ54oCdIGFuZCDigJxzaXAtdmVyaWZ54oCdIGFsbCBt ZWFudCB0byBiZSB0aGUgc2FtZSBzdHJpbmcsIGFuZCBwZXJoYXBzIHRoZSBleGFjdCB2YWx1ZSBl dm9sdmVkIGR1cmluZyBkZXZlbG9wbWVudCBvZiB0aGUgZG9jdW1lbnQ/IE9yIGFyZSB0aGVyZSBy ZWFsbHkgdHdvIG9yIHRocmVlIGRpZmZlcmVudCBvcHRpb24tdGFncyBpbnZvbHZlZA0KIGhlcmU/ IE9yIGFtIEkgbWlzc2luZyBob3cgdGhlc2UgdGhyZWUgZGlmZmVyZW50IHZhbHVlcyBhcmUgYWN0 dWFsbHkgYXBwbGllZD88bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0K PC9ibG9ja3F1b3RlPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9v OnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5XZSBwcm9iYWJseSBqdXN0IG1l c3NlZCB1cCBzb21lIGN1dCBhbmQgcGFzdGUgYXMgd2UgY2hhbmdlZCBuYW1lcy4mbmJzcDs8bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt YXJnaW4tYm90dG9tOjEyLjBwdCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8YmxvY2txdW90ZSBz dHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8ZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkIpIEluIHRoZSDigJxyZWFsIHdvcmxk4oCd LCBhIFBTVE4gY2FsbCBmcm9tIEJvYiAoPGEgaHJlZj0idGVsOjEiPnRlbDoxPC9hPiwgc2VydmVk IGJ5IFByb3ZpZGVyIEIpLCB0byBBbGljZSAoPGEgaHJlZj0idGVsOjEiPnRlbDoyPC9hPiwgc2Vy dmVkIGJ5IFByb3ZpZGVyIEEpIGlzIG9mdGVuIGNvbXBsZXRlZCBieSBCIHNlbmRpbmcgdGhlIGNh bGwgdG8gdHJhbnNpdCBwcm92aWRlciBYLCB3aGljaCwgZXZlbiBpbiBhbg0KIGVuZC10by1lbmQg U0lQIGNvbm5lY3Rpb24sIHdpbGwgcmUtaW5pdGlhdGUgdGhlIGNhbGwgYW5kIHNlbmQgaXQgdG8g cHJvdmlkZXIgWSwgd2hpY2ggdGhlbiByZS1pbml0aWF0ZXMgaXQgYW5kIHNlbmRzIGl0IHRvIHRl cm1pbmF0aW5nIFByb3ZpZGVyIEEuIChOb3RlIHRoYXQgdGhlIGNhbGwgcGF0aCBmcm9tIEIgdG8g QSB0eXBpY2FsbHkgZG9lcyBub3QgbmVjZXNzYXJpbHkgZm9sbG93IHRoZSByZXZlcnNlIHBhdGgg b2YgYSBjYWxsIGZyb20gQQ0KIHRvIEIuKTxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5TbyBpbiBvcmRlciB0byBwcm9wYWdhdGUgcHJvcGVybHkg ZnJvbSBvcmlnaW5hdGlvbiB0byB0ZXJtaW5hdGlvbiwgdGhlIOKAnHZlcmlmeWluZyBJTlZJVEXi gJ0gcHJvcG9zZWQgaW4gc2VjdGlvbiAzLCBjb250YWluaW5nIHRoZSBSRVFVSVJFOiBzdGlyLWNh bGxiYWNrIGhlYWRlciwgd2lsbCBuZWVkIHRvIGZpcnN0IGJlIHByb2Nlc3NlZCBieSBQcm92aWRl ciBYLiBBcyBJIHVuZGVyc3RhbmQgaXQsIFggd2lsbCBuZWVkDQogdG8gYmUgY2FwYWJsZSBvZiBy ZWNvZ25pemluZyB0aGUgbmV3IFJFUVVJUkUgaGVhZGVyIGFuZCBrbm93aW5nIHRoYXQgaXQgbmVl ZHMgdG8gcHJvcGFnYXRlIHRoZSBjYWxsIG9ud2FyZCAoTk9UIHJlamVjdCBpdCBkdWUgdG8gbGFj ayBvZiBzdXBwb3J0IGZvciBzdGlyLWNhbGxiYWNrKSwgYW5kIHdpbGwgbmVlZCB0byBzZW5kIHRo ZSBjYWxsIHRvIFkgd2l0aCB0aGUgbmV3IFJFUVVJUkUgaGVhZGVyIGluY2x1ZGVkLiBBTkQgaXQg d2lsbCBhbHNvDQogbmVlZCB0byBrbm93IHRoYXQgaXQgbmVlZHMgdG8gcHJvcGFnYXRlIHRoZSBW RVJJRlktQ0FMTCBoZWFkZXIgYXMgd2VsbC48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+WSB3aWxsIHJlY2VpdmUgdGhpcyBJTlZJVEUsIGFuZCBp dCB0b28gd2lsbCBuZWVkIHRvIGtub3cgdGhhdCBpdCBuZWVkcyB0byBhY2NlcHQgdGhpcyBpbnZp dGUgYW5kIHByb3BhZ2F0ZSBpdCBvbndhcmQgd2l0aCB0aGUgUkVRVUlSRSBhbmQgVkVSSUZZLUNB TEwgaGVhZGVycy48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+U2luY2Ugc3Rpci1jYWxsYmFjayBpcyBub3QgdG9kYXkgYSBkZWZpbmVkIG9wdGlv biwgaWYgWCBhbmQgWSB3ZXJlIGNvbmZvcm1pbmcgdG8gdGhlIFNJUCBSRkMsIHRoZXkgd291bGQg dG9kYXkgcmVqZWN0IHRoaXMgSU5WSVRFLiBTbyBkb2VzIHRoaXMgbWVhbiB0aGF0IHlvdXIgU1RJ Ui1DYWxsYmFjayBhcHByb2FjaCB3aWxsIG5lY2Vzc2l0YXRlIHVwZGF0ZXMgb2YgY3VycmVudGx5 LWNvbmZvcm1pbmcgVUHigJlzDQogYWN0aW5nIGluIHRoZSB0cmFuc2l0IHJvbGUgdG8gbm93IHBy b3ZpZGUgc3VwcG9ydCBmb3IgdGhpcyBuZXcgdHlwZSBvZiBJTlZJVEU/PG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkZpbmFsbHksIGlmIGFuZCB3 aGVuIHRoZSB2ZXJpZmljYXRpb24gSU5WSVRFIGdldHMgdG8gQSwgYW5kIGFzIHlvdXIgZG9jdW1l bnQgZXhwbGFpbnMsIEEgd2lsbCBoYXZlIHRvIGJlIHNtYXJ0IGVub3VnaCB0byBwcm9jZXNzIHRo ZSB2ZXJpZnkgcmVxdWVzdCBhbmQgc2VuZCB0aGUgYXBwcm9wcmlhdGUgcmVzcG9uc2UuIFRoYXQg c3VwcG9ydCBpcyBub3RlZCBpbiB5b3VyIGRvY3VtZW50OyBJ4oCZbSB3b25kZXJpbmcNCiBpZiB5 b3UgYWxzbyBuZWVkIHRvIGRvY3VtZW50IHRoZSBraW5kIG9mIHN1cHBvcnQgdGhhdCB3aWxsIGJl IHJlcXVpcmVkIGZyb20gaW50ZXJtZWRpYXRlIHByb3ZpZGVycywgYW5kIG5vdGUgdGhlIGltcG9y dGFuY2Ugb2YgQSBiZWluZyBSRkMtY29tcGxpYW50IHdpdGggcmVzcGVjdCB0byBSRVFVSVJFIGhl YWRlcnMgaXQgZG9lcyBub3QgdW5kZXJzdGFuZC48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9k aXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+WWVzLCB5 b3UgYXJlIHJpZ2h0IHRoZSBpbnRlcm1lZGlhdGUgcHJvdmlkZXJzIFNCQ3Mgd291bGQgbmVlZCB0 byBiZSBjb25maWd1cmVkIHRvIHN1cHBvcnQgdGhhdCByZXF1aXJlIGhlYWRlci4gVGhpcyBpcyBj ZXJ0YWlubHkgYSBkZXBsb3ltZW50IGlzc3VlIGJ1dCBJ4oCZbSBub3Qgc3VyZSBJIHNlZSBpdCBh cyBtdWNoIGRpZmZlcmVudCBmcm9tIHRoZSBzYW1lIFNCQ3MgbmVlZGluZyB0byBiZSBjb25maWd1 cmVkDQogdG8gODIyNCBJZGVudGl0eSBoZWFkZXIuIFRob3VnaHRzID8mbmJzcDs8bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4t Ym90dG9tOjEyLjBwdCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8YmxvY2txdW90ZSBzdHlsZT0i bWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8ZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+QykgQXQgdGhlIGVuZCBvZiBzZWN0aW9uIDMgeW91 IG5vdGU6IOKAnFRoZSBwcmVzZW5jZSBvZiB0aGUgUmVxdWlyZSBoZWFkZXIgZmllbGQgaW4gdGhl IHZlcmlmeWluZyBJTlZJVEUgaXMgY3JpdGljYWwgdG8gdGhlIG9wZXJhdGlvbiBvZiB0aGUgc29s dXRpb24uJm5ic3A7IEl0IHByZXZlbnRzIHRoZSB2ZXJpZnlpbmcgSU5WSVRFIGZyb20gYWN0dWFs bHkgcmluZ2luZyBhIHJlYWwgcGhvbmUsIHdoaWNoIHdvdWxkIGJlIHF1aXRlDQogYW5ub3lpbmcu 4oCdIFRoaXMgaXMgbXkgYmlnZ2VzdCBjb25jZXJuLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5JZiB0aGUgbmV3IFJFUVVJUkUgaGVhZGVyIGdl dHMgZHJvcHBlZCBzb21ld2hlcmUgYWxvbmcgdGhlIHdheSwgdGhlIElOVklURSB3aWxsIGxvb2sg 4oCcbm9ybWFs4oCdLCBzbyB3b27igJl0IFByb3ZpZGVyIEEgcmluZyBBbGljZeKAmXMgcGhvbmU/ IE9yLCBpZiBBIGlzIG5vdCBSRkMtY29tcGxpYW50IGFuZCBpZ25vcmVzIHRoZSBSRVFVSVJFIGhl YWRlciwgQWxpY2XigJlzIHBob25lIHdpbGwgcmluZy4gKEFuZCBvZiBjb3Vyc2UNCiBpZiB0aGUg Y2FsbCBvcmlnaW5hdG9yIHdhcyBzcG9vZmluZyB0aGUgbnVtYmVyLCBhbmQgaW4gZmFjdCBCb2Li gJlzIHZlcmlmaWNhdGlvbiBJTlZJVEUgd2VudCB0byB0aGUgcmVhbCBvd25lciBvZiB0aGUgbnVt YmVyLCBzZXJ2ZWQgYnkgcHJvdmlkZXIgQywgQyB3b3VsZCBoYXZlIHRvIGJlIFJGQy1jb21wbGlh bnQgaW4gdGhpcyByZWdhcmQgb3IgdGhlIHJlYWwgbnVtYmVyIG93bmVy4oCZcyBwaG9uZSB3b3Vs ZCByaW5nLik8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+SSBhbSBuZXJ2b3VzIHRoYXQgaW4gdG9kYXnigJlzIHJlYWwgd29ybGQgZGVwbG95bWVu dHMsIHlvdXIgYXBwcm9hY2ggaXMgZnJhZ2lsZSBiZWNhdXNlIGl0IGlzIGRlcGVuZGVudCBvbiB0 aGUgdmFyaW91cyBVQeKAmXMgaW4gdGhlIGNhbGwgcGF0aCBkaWxpZ2VudGx5IGZvbGxvd2luZyB0 aGUgU0lQIFJGQy48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+SSBtYWRlIGEgZmV3IHRlc3QgY2FsbHMgYWN0aW5nIGxpa2UgSSB3YXMgQm9i4oCZ cyBVQSwgaGF2aW5nIHJlY2VpdmVkIGFuIElOVklURSBmcm9tIEEgdGhhdCBJIHdhbnQgdG8gdmVy aWZ5LiBTbyBJIHNlbnQgYW4gSU5WSVRFIGJhY2sgdG93YXJkcyBBLCBpbnNlcnRpbmcgdGhlIFJF UVVJUkU6IHN0aXItY2FsbGJhY2sgaGVhZGVyIGluIG15IG1vY2sg4oCcdmVyaWZpY2F0aW9u4oCd IElOVklURTsgSSBzZW50IHRoZXNlIGNhbGxzDQogdGhyb3VnaCB2YXJpb3VzIHJlYWwtd29ybGQg dGVybWluYXRpb24gcHJvdmlkZXJzLiA8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+SW4gYSBjb3VwbGUgb2YgY2FzZXMsIEkgZ290IGJhY2sgNDIw IEJhZCBFeHRlbnNpb24gcmVzcG9uc2VzLiBUaGF04oCZcyBnb29kIGFuZCBiYWQ7IHRoZSBnb29k IG5ld3MgaXMgdGhhdCBpdCB0ZWxscyBtZSB0aGF0IHRob3NlIHBhcnRpY3VsYXIgVUHigJlzIEFS RSBSRkMgY29tcGxpYW50IGluIHRoaXMgcmVzcGVjdC4gVGhleSBkb27igJl0IHVuZGVyc3RhbmQg YSBSRVFVSVJFZCBvcHRpb24gc28gdGhleSBhcmUgbmVjZXNzYXJpbHkNCiByZWplY3RpbmcgdGhl IGNhbGwuIE9uIHRoZSBvdGhlciBoYW5kLCBpdCBwb2ludHMgb3V0IHRoYXQgaWYgdGhlc2UgVUHi gJlzIGFyZSBhY3RpbmcgYXMgaW50ZXJtZWRpYXRlIHByb3ZpZGVycyAod2hpY2gsIGluIHRoZXNl IGNhc2VzLCB0aGV5IGFyZSksIHRoZXkgd2lsbCBuZWVkIHRvIGJlIHVwZGF0ZWQgdG8gYWNjZXB0 IGFuZCBwYXNzIHRoZSBzdGlyLWNhbGxiYWNrIHJlbGF0ZWQgaGVhZGVycyBldmVuIHRob3VnaCB0 aGV5IGFyZSBqdXN0IHByb3ZpZGluZw0KIGEgdHJhbnNpdCBmdW5jdGlvbiBhbmQgZXZlbiB0aG91 Z2ggdGhleSBhcmUgbm90IGFzc3VtaW5nIGFueSByZXNwb25zaWJpbGl0eSBmb3IgdmVyaWZpY2F0 aW9uLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij5JbiBteSBvdGhlciB0ZXN0IGNhc2VzLCB0aGUgZGVzdGluYXRpb24gcGhvbmUgcmFuZyBldmVu IHRob3VnaCB0aGlzIHdhcyBzdXBwb3NlZCB0byBiZSBhIOKAnHZlcmlmaWNhdGlvbuKAnSBJTlZJ VEUuIFRoaXMgdGVsbHMgbWUsIEkgdGhpbmssIHRoYXQgYXQgbGVhc3QgdGhlIGZpcnN0IFVBIChY LCBpbiBteSBleHBsYW5hdGlvbiBhYm92ZSkgaW4gdGhlIHZlcmlmaWNhdGlvbiBjYWxsIHBhdGgg aXMgbm9uLVJGQy1jb21wbGFpbnQsDQogYW5kIHRoYXQgZG93bnN0cmVhbSBVQeKAmXMgYXJlIGVp dGhlciBhbHNvIG5vbi1jb21wbGlhbnQsIG9yIHRoYXQgdGhlIFJFUVVJUkUgaGVhZGVyIGdvdCBk cm9wcGVkIGFsb25nIHRoZSB3YXkuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPkkgYW0gbmVydm91cyBhYm91dCB0aGUgZXh0ZW50IHRvIHdoaWNo IGRlcGxveWVkIFVB4oCZcyBhcmUgbm9uLVJGQy1jb21wbGlhbnQgd2l0aCByZXNwZWN0IHRvIHRo ZSBSRVFVSVJFIGhlYWRlciwgYW5kIGhvdyB0aGF0IGNvdWxkIHVuZGVybWluZSBkZXBsb3lhYmls aXR5IG9mIHRoaXMgc29sdXRpb24uIE1heWJlIHlvdSBpbnRlbmRlZCB0aGF0IHRoZSBzb2x1dGlv biBvbmx5IGFwcGx5IHdoZW4gQSBhbmQgQiBhcmUNCiBkaXJlY3RseSBjb25uZWN0ZWQgYW5kIHRo ZXJlIGFyZSBubyBpbnRlcm1lZGlhdGUgcHJvdmlkZXJzLiBCdXQgSeKAmW0gY29uY2VybmVkIHRo YXTigJlzIG9ubHkgYSBzbWFsbCBmcmFjdGlvbiBvZiDigJxyZWFsIHdvcmxk4oCdIGNhbGxzIHRv ZGF5LjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3Rl Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8 L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkZpcnN0IGxldCBtZSBzYXkgdGhhdCBpcyBhd2Vz b21lIHlvdSBqdXN0IHdlbnQgYW5kIHRyaWVkIHRoaXMuIEkgbG92ZSByZWFsIHdvcmxkIGRhdGEu IFNvbWUgb2YgdGhlIHZlcnNpb24gb2YgQXN0ZXJpc2sgSSBoYXZlIHNlZW4gY29uZmlndXJlZCB0 aGF0IHdheSBidXQgc29ydCBvZiBzdXJwcmlzZWQgaWYgcGVvcGxlIGFyZSB1c2luZyBBQ01FIG9y IENpc2NvIFNCQ3MgdGhhdCB3YXkuIEkgY2VydGFpbmx5IGRvbuKAmXQNCiBoYXZlIGFueSBkZXNp cmUgdG8gZW1iYXJyYXNzIGFueSBwYXJ0aWN1bGFyIFNQIGFib3V0IHRoZWlyIFNJUCBkZXBsb3lt ZW50IGJ1dCB3b3VsZCB5b3UgYmUgd2lsbGluZyB0byBzaGFyZSB3aGF0IHByb3ZpZGVycyBkaWQg dGhpcyBzdWNoIHRoYXQgd2UgbWlnaHQgdHJ5IGFuZCB0cmFjayBkb3duIHdoeSB0aGV5IGRpZCBp dCAtIHRoYXQgbWlnaHQgaGVscCBkZWNpZGUgaG93IG11Y2ggb2YgYW4gaXNzdWUgaXQgaXM/Jm5i c3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibWFyZ2luLWJvdHRvbToxMi4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGJsb2Nr cXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2 Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkkgYW0gaW50ZXJlc3RlZCBp biB5b3VyIHRob3VnaHRzIG9uIHRoZXNlIGl0ZW1zLCBhbmQgb24gZ2V0dGluZyBtZSBiYWNrIG9u IHRyYWNrIGlmIEnigJl2ZSBtaXN1bmRlcnN0b29kIGFzcGVjdHMgb2YgdGhlIHByb3Bvc2FsLjxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkkgdGhpbmsgeW91IGhhdmUgdW5k ZXJzdG9vZCB0aGUgZ2lzdCBvZiB0aGUgcHJvcG9zYWwgYW5kIHBlcmhhcHMgd2UgaGF2ZSBzb21l IHR3ZWFrcyB0byBtYWtlLiBJIGFncmVlIHdpdGggeW91ciBoaWdoIGxldmVsIHBvaW50cyBvZiB0 aGVyZSBhcmUgaW50ZXJtZWRpYXJpZXMgaW4gdGhlIGNhbGwgd2UgY2FyZSBhYm91dCBhbmQgdGhh dCBpZiBhbnkgc2VydmVyIGFsb25nIHRoZSBjaGFpbiBpcyBub24gY29tcGxpYW50DQogd2l0aCBy ZXF1aXJlLCBpdCBkb2VzIG5vdCB3b3JrIHdlbGwuIFBlcmhhcHMgd2UgY2FuIHRoaW5rIG9mIHdh eXMgdG8gbWl0aWdhdGUgdGhhdCBidXQgbm90IG9idmlvdXMgaG93LiZuYnNwOzxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5Ob3cgdGhhdCB3ZSBo YXZlIDg4MjQgb3V0IHRoZSBkb29yLCBJ4oCZbSBtb3JlIHRyeWluZyBvdXQgaWRlYXMgdG8gc2Vl IHdoYXQgbWlnaHQgd29yayB0byBoZWxwIHJlZHVjZSBTUEFNIGFuZCBJIHNoYXJlIHNvbWUgb2Yg eW91ciBjb25jZXJucyBhYm91dCB0aGlzIGJ1dCBub3Qgc3VyZSB3aGF04oCZcyBiZXR0ZXIgZm9y IGRlcGxveW1lbnQuJm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPkhvd2V2ZXIsIGFueSBpbiBiYW5kIFNUSVIgc29sdXRpb24gaXMgZ29p bmcgdG8gcmVxdWlyZSB0aGUgc2VydmljZSBwcm92aWRlcnMgdG8gdGVzdCBhbmQgc3VwcG9ydCBp dC4gSSB3b3VsZCBub3QgYmUgc3VycHJpc2VkIHRvIGZpbmQgdGhhdCBhbnkgU0JDIGNvbmZpZ3Vy ZWQgdG8gaWdub3JlIHRoZSBSZXF1aXJlIGhlYWRlciBpcyBhbHNvIHByZXR0eSB1bmxpa2UgdG8g cGFzcyB0aGUgSWRlbnRpdHkgaGVhZGVyLg0KICZuYnNwO0ZvciBhIGxvbmcgdGltZSwgSSBoYXZl IHNlZW4gbWFueSB0aGluZ3MgYmxvY2tlZCBhdCBJRVRGIGZyb20gYnkgdGhlIOKAnFNCQyB3b27i gJl0IHN1cHBvcnQgdGhhdOKAnSBhcmd1bWVudCBidXQgaW4gdGhpcyBwYXJ0aWN1bGFyIGNhc2Ug aXQgaXMgYSBiaXQgZGlmZmVyZW50LiBJZiBzb21lIGNhcnJpZXIgaGFzIGFsbCBvZiBpdCBjdXN0 b21lcnMgZ2V0dGluZyBhbiBpcnJpdGF0aW5nIGNhbGwgYmFjayBjYWxsIGV2ZXIgdGltZSB0aGV5 IGRpYWwgYSBuZXcNCiBudW1iZXIsIEnigJltIHN1cmUgdGhlIGVjb25vbWljcyBvZiBjdXN0b21l ciBzYXRpc2ZhY3Rpb24gYW5kIHJldGVudGlvbiB3aWxsIGNhdXNlIHRoYXQgY2FycmllciB0byBj aGFuZ2UgdGhlIGNvbmZpZ3VyYXRpb24gb2YgdGhlaXIgU0JDIHRvIG5vdCBpZ25vcmUgdGhlIFJl cXVpcmUgaGVhZGVyLiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj5JIGFtIHdvcnJpZWQgYWJvdXQgdGhpcyBhbmQgdGhlIHJlc3Qgb2Yg U1RJUiB3aGVuIHRoZSBpbnRlcmNvbm5lY3QgYmV0d2VlbiB0aGUgY2FycmllcnMgaXMgU1M3LiZu YnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibWFyZ2luLWJvdHRvbToxMi4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGJs b2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8 ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkRhdmlkPG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJjb2xvcjojMUY0OTdEO21zby1mYXJlYXN0LWxhbmd1YWdlOlpILVRXIj5EYXZpZCBGcmFua2Vs PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PGI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0dlb3JnaWEmcXVvdDssc2VyaWY7 Y29sb3I6IzY2OTlDQzttc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1UVyI+WmlwPC9zcGFuPjwvYj48 Yj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7R2VvcmdpYSZxdW90OyxzZXJpZjtjb2xv cjpncmF5O21zby1mYXJlYXN0LWxhbmd1YWdlOlpILVRXIj5EWDwvc3Bhbj48c3VwPsKuPC9zdXA+ PC9iPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEO21zby1mYXJlYXN0LWxhbmd1YWdlOlpILVRX Ij4NCiBMTEM8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RDttc28tZmFyZWFzdC1sYW5ndWFn ZTpaSC1UVyI+TW9udGUgU2VyZW5vLCBDQSBVU0E8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3 RDttc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1UVyI+VGVsOiAxLTgwMC1GUkFOS0VMICgxLTgwMC0z NzItNjUzNSk8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxiPkZyb206PC9iPiBzdGlyICZsdDs8YSBocmVmPSJtYWlsdG86c3Rpci1i b3VuY2VzQGlldGYub3JnIj5zdGlyLWJvdW5jZXNAaWV0Zi5vcmc8L2E+Jmd0Ow0KPGI+T24gQmVo YWxmIE9mIDwvYj5Kb25hdGhhbiBSb3NlbmJlcmc8YnI+DQo8Yj5TZW50OjwvYj4gVGh1cnNkYXks IE1hcmNoIDEsIDIwMTggNjoxNSBQTTxicj4NCjxiPlRvOjwvYj4gPGEgaHJlZj0ibWFpbHRvOnN0 aXJAaWV0Zi5vcmciPnN0aXJAaWV0Zi5vcmc8L2E+PGJyPg0KPGI+U3ViamVjdDo8L2I+IFtzdGly XSBOZXcgZHJhZnQgZHJhZnQtcm9zZW5iZXJnLXN0aXItY2FsbGJhY2stMDA8bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1hcmdpbi1ib3R0b206MTIuMHB0Ij5IZXkgYWxsIC0gYmVlbiBhIHdoaWxl IDopPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt YXJnaW4tYm90dG9tOjEyLjBwdCI+Q3VsbGVuIGFuZCBJIHdyb3RlIHVwIGEgY29uY2VwdCBmb3Ig dXNpbmcgU1RJUiB3aXRoIHNlbGYtc2lnbmVkIG9yIGRvbWFpbiBiYXNlZCBjZXJ0cywgYW5kIHRo ZW4gaGFuZGxpbmcgbnVtYmVyIHZhbGlkYXRpb24gd2l0aCBhbiBpbi1iYW5kIGNhbGxiYWNrLiBX ZSB0aGluayBpdHMgYSBwcm9taXNpbmcgYXBwcm9hY2ggdG8gYWNjZWxlcmF0ZSBTVElSIGRlcGxv eW1lbnRzLA0KIHNpbmNlIGl0IGFsbG93cyB0aGVtIHRvIGhhcHBlbiB3aXRob3V0IHRoZSBjZXJ0 IGluZnJhc3RydWN0dXJlIGJlaW5nIGluIHBsYWNlLiA8YnI+DQo8YnI+DQo8YSBocmVmPSJodHRw czovL3d3dy5pZXRmLm9yZy9pZC9kcmFmdC1yb3NlbmJlcmctc3Rpci1jYWxsYmFjay0wMC50eHQi Pmh0dHBzOi8vd3d3LmlldGYub3JnL2lkL2RyYWZ0LXJvc2VuYmVyZy1zdGlyLWNhbGxiYWNrLTAw LnR4dDwvYT48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1hcmdpbi1ib3R0b206MTIuMHB0Ij5Db21tZW50cyB3ZWxjb21lLiA8bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPi1Kb25hdGhhbiBSLjxiciBj bGVhcj0iYWxsIj4NCjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+ DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxicj4NCi0tIDxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5K b25hdGhhbiBSb3NlbmJlcmcsIFBoLkQuPGJyPg0KPGEgaHJlZj0ibWFpbHRvOmpkcm9zZW5AamRy b3Nlbi5uZXQiIHRhcmdldD0iX2JsYW5rIj5qZHJvc2VuQGpkcm9zZW4ubmV0PC9hPjxicj4NCjxh IGhyZWY9Imh0dHA6Ly93d3cuamRyb3Nlbi5uZXQvIiB0YXJnZXQ9Il9ibGFuayI+aHR0cDovL3d3 dy5qZHJvc2VuLm5ldDwvYT48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4N CjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fPGJyPg0Kc3RpciBtYWlsaW5nIGxpc3Q8YnI+DQo8YSBocmVmPSJtYWlsdG86c3RpckBpZXRm Lm9yZyI+c3RpckBpZXRmLm9yZzwvYT48YnI+DQo8YSBocmVmPSJodHRwczovL3d3dy5pZXRmLm9y Zy9tYWlsbWFuL2xpc3RpbmZvL3N0aXIiPmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlz dGluZm8vc3RpcjwvYT48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9k aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0K PGJyPg0KPGhyPg0KPGZvbnQgZmFjZT0iQXJpYWwiIGNvbG9yPSJHcmF5IiBzaXplPSIxIj48YnI+ DQpUaGlzIGUtbWFpbCBtYXkgY29udGFpbiBTcHJpbnQgcHJvcHJpZXRhcnkgaW5mb3JtYXRpb24g aW50ZW5kZWQgZm9yIHRoZSBzb2xlIHVzZSBvZiB0aGUgcmVjaXBpZW50KHMpLiBBbnkgdXNlIGJ5 IG90aGVycyBpcyBwcm9oaWJpdGVkLiBJZiB5b3UgYXJlIG5vdCB0aGUgaW50ZW5kZWQgcmVjaXBp ZW50LCBwbGVhc2UgY29udGFjdCB0aGUgc2VuZGVyIGFuZCBkZWxldGUgYWxsIGNvcGllcyBvZiB0 aGUgbWVzc2FnZS48YnI+DQo8L2ZvbnQ+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_3783653d02a24044a1ddc977c60d3bb0plswe13m04adsprintcom_-- From nobody Mon Mar 5 13:22:34 2018 Return-Path: X-Original-To: stir@ietf.org Delivered-To: stir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 8F05D1204DA; Mon, 5 Mar 2018 13:22:32 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: stir@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.74.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <152028495255.31654.15269828706755346705@ietfa.amsl.com> Date: Mon, 05 Mar 2018 13:22:32 -0800 Archived-At: Subject: [stir] I-D Action: draft-ietf-stir-passport-shaken-01.txt X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 05 Mar 2018 21:22:32 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Secure Telephone Identity Revisited WG of the IETF. Title : PASSporT SHAKEN Extension (SHAKEN) Authors : Chris Wendt Mary Barnes Filename : draft-ietf-stir-passport-shaken-01.txt Pages : 7 Date : 2018-03-05 Abstract: This document extends PASSporT, which is a token object that conveys cryptographically-signed information about the participants involved in communications, to include information defined as part of the SHAKEN specification from ATIS (Alliance for Telecommunications Industry Solutions) and the SIP Forum IP-NNI Joint Task Force. These extensions provide a level of confidence in the correctness of the originating identity for a telephone network that has communications coming from both STIR participating originating communications as well as communications that does not include STIR information. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-stir-passport-shaken/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-stir-passport-shaken-01 https://datatracker.ietf.org/doc/html/draft-ietf-stir-passport-shaken-01 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-stir-passport-shaken-01 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Mon Mar 5 13:30:21 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7F521126CB6 for ; Mon, 5 Mar 2018 13:30:19 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=chriswendt-net.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id thH54hF8X7rR for ; Mon, 5 Mar 2018 13:30:17 -0800 (PST) Received: from mail-qt0-x229.google.com (mail-qt0-x229.google.com [IPv6:2607:f8b0:400d:c0d::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AAABB1242F5 for ; Mon, 5 Mar 2018 13:30:17 -0800 (PST) Received: by mail-qt0-x229.google.com with SMTP id g60so22142218qtd.11 for ; Mon, 05 Mar 2018 13:30:17 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=chriswendt-net.20150623.gappssmtp.com; s=20150623; h=from:content-transfer-encoding:mime-version:subject:date:references :to:in-reply-to:message-id; bh=E4tMYtApaZEh68okqQ+yy3EQfCyXbsN0Zmojn/NbW6U=; b=IFdb8yyvzhblEu9SivPvjest75YaerAYX2TJB0GD61lyZq1TZ/mxp5ybGia8+HEBrx hjrlfjDDVDIWyfPwwGIjqm/wj4v6DAQ9Zge2QSCtx0D7L5kaPueAjs5/IzIhRXFxsl2A W9yzfyo2z42riQsW0AYKCvDL6DlC++n+r2iiu9yeZ7K/tvVqIes+QbvEtfZEV33UAyNr ejX/u5TCe2Hlk/3+lTFN1nAPI+bo+YMv/+pds1/HC1Pp+mKeKhi2BpPwhKCPWqak913C ub37G62rIVd53yZRccGAl4lEwHpwj7ET5q7c3x10z8SBXvQIqng5T47PxOxd3ISYiP21 EBGA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:content-transfer-encoding:mime-version :subject:date:references:to:in-reply-to:message-id; bh=E4tMYtApaZEh68okqQ+yy3EQfCyXbsN0Zmojn/NbW6U=; b=b+WXbtUT3UyzkgJfGxWiCEN9mmGo+9hMX65mS4jQkH2u0+RwEbx7Ogzbfja13/Xlnp hK7fyXWb9pZIeI7qBXDqC3tYAB4h8ooazAhYIypmIW7LTcWqrBe+E0Gbyb4dWRba30uy Sgod36L0jyzY7ir2xwvh9n4tOs9mAORWOunOV2XMhaWfF6R9HYks4y5ZB+uhwIbR5Raw ZKYggjWD28M9nLls2PiJCPK2QKKrEIfl9NC2GQLGRzleWhJNp+AdyWZ+/tyAyyQm5uM9 xN8X0r5lQUwcjwd38Y3w0l3tOG4OWLiJkIvcB0Qr5HdckOB7m3yE6UoYdXUat2zkhzz3 nTMA== X-Gm-Message-State: AElRT7HSXSkK+FiXpmxxkqU2Fxf/WJxYhMlgvk06c7ANhQdyaeMFforn 8LkD7N3hIEE0YMUYnxBYveJDIPPDyXI= X-Google-Smtp-Source: AG47ELv25LD8A3ex+jK7WNAVNDd6OF2wmvLaDqrP5U97JAj2/uRsH/geREKgFLmAqVgftrJBVSwLOw== X-Received: by 10.200.57.132 with SMTP id v4mr23628617qte.302.1520285415957; Mon, 05 Mar 2018 13:30:15 -0800 (PST) Received: from chriss-mbp-15.hsd1.pa.comcast.net (c-73-13-98-206.hsd1.pa.comcast.net. [73.13.98.206]) by smtp.gmail.com with ESMTPSA id q10sm10035807qtk.25.2018.03.05.13.30.14 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 05 Mar 2018 13:30:14 -0800 (PST) From: Chris Wendt Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Mime-Version: 1.0 (Mac OS X Mail 11.2 \(3445.5.20\)) Date: Mon, 5 Mar 2018 16:30:13 -0500 References: <152028495255.31654.15269828706755346705@ietfa.amsl.com> To: IETF STIR Mail List In-Reply-To: <152028495255.31654.15269828706755346705@ietfa.amsl.com> Message-Id: <86A7F130-50F0-42D6-A79C-DEEB418E1A95@chriswendt.net> X-Mailer: Apple Mail (2.3445.5.20) Archived-At: Subject: Re: [stir] I-D Action: draft-ietf-stir-passport-shaken-01.txt X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 05 Mar 2018 21:30:19 -0000 I have uploaded a new version with minor changes including updating = references to new STIR documents. I have received a few comments privately that were incorporated in the = last revision. =20 Please review, i think we should be getting close for this draft. Thanks! -Chris > On Mar 5, 2018, at 4:22 PM, internet-drafts@ietf.org wrote: >=20 >=20 > A New Internet-Draft is available from the on-line Internet-Drafts = directories. > This draft is a work item of the Secure Telephone Identity Revisited = WG of the IETF. >=20 > Title : PASSporT SHAKEN Extension (SHAKEN) > Authors : Chris Wendt > Mary Barnes > Filename : draft-ietf-stir-passport-shaken-01.txt > Pages : 7 > Date : 2018-03-05 >=20 > Abstract: > This document extends PASSporT, which is a token object that conveys > cryptographically-signed information about the participants involved > in communications, to include information defined as part of the > SHAKEN specification from ATIS (Alliance for Telecommunications > Industry Solutions) and the SIP Forum IP-NNI Joint Task Force. = These > extensions provide a level of confidence in the correctness of the > originating identity for a telephone network that has communications > coming from both STIR participating originating communications as > well as communications that does not include STIR information. >=20 >=20 > The IETF datatracker status page for this draft is: > https://datatracker.ietf.org/doc/draft-ietf-stir-passport-shaken/ >=20 > There are also htmlized versions available at: > https://tools.ietf.org/html/draft-ietf-stir-passport-shaken-01 > = https://datatracker.ietf.org/doc/html/draft-ietf-stir-passport-shaken-01 >=20 > A diff from the previous version is available at: > https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-stir-passport-shaken-01 >=20 >=20 > Please note that it may take a couple of minutes from the time of = submission > until the htmlized version and diff are available at tools.ietf.org. >=20 > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ >=20 > _______________________________________________ > stir mailing list > stir@ietf.org > https://www.ietf.org/mailman/listinfo/stir From nobody Mon Mar 5 15:12:44 2018 Return-Path: X-Original-To: stir@ietf.org Delivered-To: stir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 0E4A4126BFD; Mon, 5 Mar 2018 15:12:37 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: stir@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.74.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <152029155702.12846.10127182918237820119@ietfa.amsl.com> Date: Mon, 05 Mar 2018 15:12:37 -0800 Archived-At: Subject: [stir] I-D Action: draft-ietf-stir-passport-divert-02.txt X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 05 Mar 2018 23:12:37 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Secure Telephone Identity Revisited WG of the IETF. Title : PASSporT Extension for Diverted Calls Author : Jon Peterson Filename : draft-ietf-stir-passport-divert-02.txt Pages : 11 Date : 2018-03-05 Abstract: This document extends PASSporT, which conveys cryptographically- signed information about the people involved in personal communications, to include an indication that a call has been diverted from its original destination to a new one. This information can greatly improve the decisions made by verification services in call forwarding scenarios. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-stir-passport-divert/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-stir-passport-divert-02 https://datatracker.ietf.org/doc/html/draft-ietf-stir-passport-divert-02 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-stir-passport-divert-02 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Mon Mar 5 15:55:39 2018 Return-Path: X-Original-To: stir@ietf.org Delivered-To: stir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 57442126DEE; Mon, 5 Mar 2018 15:55:32 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: stir@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.74.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <152029413232.12904.12422197629384005352@ietfa.amsl.com> Date: Mon, 05 Mar 2018 15:55:32 -0800 Archived-At: Subject: [stir] I-D Action: draft-ietf-stir-oob-02.txt X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 05 Mar 2018 23:55:32 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Secure Telephone Identity Revisited WG of the IETF. Title : STIR Out-of-Band Architecture and Use Cases Authors : Eric Rescorla Jon Peterson Filename : draft-ietf-stir-oob-02.txt Pages : 23 Date : 2018-03-05 Abstract: The PASSporT format defines a token that can be carried by signaling protocols, including SIP, to cryptographically attest the identify of callers. Not all telephone calls use Internet signaling protocols, however, and some calls use them for only part of their signaling path. This document describes use cases that require the delivery of PASSporT objects outside of the signaling path, and defines architectures and semantics to provide this functionality. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-stir-oob/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-stir-oob-02 https://datatracker.ietf.org/doc/html/draft-ietf-stir-oob-02 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-stir-oob-02 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Mon Mar 5 16:56:24 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A7F0512D7F4 for ; Mon, 5 Mar 2018 16:56:23 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.779 X-Spam-Level: X-Spam-Status: No, score=-1.779 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, HTML_MESSAGE=0.001, T_DKIM_INVALID=0.01, T_SPF_PERMERROR=0.01] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=neutral reason="invalid (public key: not available)" header.d=standardstrack.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id n3db_4RhGIx0 for ; Mon, 5 Mar 2018 16:56:22 -0800 (PST) Received: from biz221.inmotionhosting.com (biz221.inmotionhosting.com [23.235.223.233]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 44B311241F5 for ; Mon, 5 Mar 2018 16:56:22 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=standardstrack.com; s=default; h=Date:To:References:Message-Id:Subject: Mime-Version:Content-Type:From:Sender:Reply-To:Cc:Content-Transfer-Encoding: Content-ID:Content-Description:Resent-Date:Resent-From:Resent-Sender: Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:List-Id:List-Help: List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=1W3ztTmaldG/jcxFZ0VzLMSrNxYBtW5rIGKXaRH7I84=; b=WVfmuTiy5nGVWil8xdPi5D5slP tkKqtgqNlPlNOl4JHooOEp48cvkHcnDbbHrT7VwY1CnhmA77uRyZLWK34mqmSiXDUXW/so9uDMsU9 S4CuEpC4I9hG1Oa8+at58zPBKdPx9/naTMPbUHVwxGMD+u8PPz63tg7HI9i7f4/iN2Gc=; Received: from [68.100.196.217] (port=63254 helo=[192.168.10.26]) by biz221.inmotionhosting.com with esmtpsa (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256) (Exim 4.89_1) (envelope-from ) id 1et0tk-000PN2-On for stir@ietf.org; Mon, 05 Mar 2018 16:56:21 -0800 From: Eric Burger Content-Type: multipart/signed; boundary="Apple-Mail=_EA696F60-617B-413B-95EA-F7311F8C298B"; protocol="application/pgp-signature"; micalg=pgp-sha256 Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\)) Message-Id: References: <152028300904.31710.8973954292655207142.idtracker@ietfa.amsl.com> To: stir@ietf.org Date: Mon, 5 Mar 2018 19:56:07 -0500 X-Mailer: Apple Mail (2.3273) X-OutGoing-Spam-Status: No, score=-1.0 X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - biz221.inmotionhosting.com X-AntiAbuse: Original Domain - ietf.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - standardstrack.com X-Get-Message-Sender-Via: biz221.inmotionhosting.com: authenticated_id: eburger+standardstrack.com/only user confirmed/virtual account not confirmed X-Authenticated-Sender: biz221.inmotionhosting.com: eburger@standardstrack.com X-Source: X-Source-Args: X-Source-Dir: Archived-At: Subject: [stir] Fwd: New Version Notification for draft-burger-stir-iana-cert-00.txt X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 06 Mar 2018 00:56:24 -0000 --Apple-Mail=_EA696F60-617B-413B-95EA-F7311F8C298B Content-Type: multipart/alternative; boundary="Apple-Mail=_D782F661-3ED0-47E7-9693-232D368AC473" --Apple-Mail=_D782F661-3ED0-47E7-9693-232D368AC473 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii I could not stay away either. > Begin forwarded message: >=20 > From: internet-drafts@ietf.org > Subject: New Version Notification for = draft-burger-stir-iana-cert-00.txt > Date: March 5, 2018 at 3:50:09 PM EST > To: "Eric W. Burger" , "Eric Burger" = >=20 >=20 > A new version of I-D, draft-burger-stir-iana-cert-00.txt > has been successfully submitted by Eric W. Burger and posted to the > IETF repository. >=20 > Name: draft-burger-stir-iana-cert > Revision: 00 > Title: Registry for Country-Specific Secure Telephone = Identity (STIR) Root Certificates > Document date: 2018-03-05 > Group: Individual Submission > Pages: 13 > URL: = https://www.ietf.org/internet-drafts/draft-burger-stir-iana-cert-00.txt > Status: = https://datatracker.ietf.org/doc/draft-burger-stir-iana-cert/ > Htmlized: = https://tools.ietf.org/html/draft-burger-stir-iana-cert-00 > Htmlized: = https://datatracker.ietf.org/doc/html/draft-burger-stir-iana-cert-00 >=20 >=20 > Abstract: > This document defines an IANA registry that maps country codes to > secure telephone identity (STIR) root certificates authorized to > create signing certificates for telephone numbers under the = authority > of a given country. Some countries allow carriers to block > unsolicited, automatically generated nuisance calls commonly known = as > 'robocalls.' The use of signed STIR tokens in the Session = Initiation > Protocol (SIP) may be useful in such scenarios to provide positive > attestations as to call origin. Legacy telephone numbering = resources > are administrated by national policy. Unlike the market-driven use > case of Web commerce, some nations may restrict the list of STIR = root > certificate authorities acceptable for issuing signing certificates > for STIR tokens that provide attestations for their local legacy > telephone numbering resources. The registry described in this > document enables call recipients in a first country to validate that > signaling it receives from a caller with a telephone number claiming > to be in a second country conforms to the second country's policy of > (1) having a limited list of STIR root certificate authorities (or > not) and (2) the certificate that produced the signature over the > signaling is signed by one of those authorized STIR root certificate > authorities. >=20 >=20 >=20 >=20 > Please note that it may take a couple of minutes from the time of = submission > until the htmlized version and diff are available at tools.ietf.org. >=20 > The IETF Secretariat >=20 --Apple-Mail=_D782F661-3ED0-47E7-9693-232D368AC473 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=us-ascii I could not stay away either.

Begin = forwarded message:

From: = internet-drafts@ietf.org
Subject: = New Version = Notification for draft-burger-stir-iana-cert-00.txt
Date: = March 5, 2018 at 3:50:09 PM = EST
To: = "Eric W. Burger" <eburger@standardstrack.com>, "Eric Burger" <eburger@standardstrack.com>

A new version of I-D, draft-burger-stir-iana-cert-00.txt
has been successfully submitted by Eric W. Burger and posted = to the
IETF repository.

Name: = = draft-burger-stir-iana-cert
Revision: 00
Title:= = Registry for Country-Specific Secure Telephone Identity (STIR) = Root Certificates
Document date: = 2018-03-05
Group: Individual Submission
Pages:= = 13
URL: =            https://www.ietf.org/internet-drafts/draft-burger-stir-iana-cer= t-00.txt
Status: =         https://datatracker.ietf.org/doc/draft-burger-stir-iana-cert/
Htmlized:       https://tools.ietf.org/html/draft-burger-stir-iana-cert-00<= br class=3D"">Htmlized:       https://datatracker.ietf.org/doc/html/draft-burger-stir-iana-ce= rt-00


Abstract:
  This document defines an IANA registry that maps = country codes to
  secure telephone identity = (STIR) root certificates authorized to
  create = signing certificates for telephone numbers under the authority
  of a given country.  Some countries allow = carriers to block
  unsolicited, automatically = generated nuisance calls commonly known as
=   'robocalls.'  The use of signed STIR tokens in the = Session Initiation
  Protocol (SIP) may be = useful in such scenarios to provide positive
=   attestations as to call origin.  Legacy telephone = numbering resources
  are administrated by = national policy.  Unlike the market-driven use
=   case of Web commerce, some nations may restrict the list of = STIR root
  certificate authorities acceptable = for issuing signing certificates
  for STIR = tokens that provide attestations for their local legacy
=   telephone numbering resources.  The registry described = in this
  document enables call recipients in a = first country to validate that
  signaling it = receives from a caller with a telephone number claiming
=   to be in a second country conforms to the second country's = policy of
  (1) having a limited list of STIR = root certificate authorities (or
  not) and (2) = the certificate that produced the signature over the
=   signaling is signed by one of those authorized STIR root = certificate
  authorities.




Please note that = it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.

The IETF Secretariat


= --Apple-Mail=_D782F661-3ED0-47E7-9693-232D368AC473-- --Apple-Mail=_EA696F60-617B-413B-95EA-F7311F8C298B Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP -----BEGIN PGP SIGNATURE----- Comment: GPGTools - http://gpgtools.org iQIzBAEBCAAdFiEEfEc/N7T7IfiAuDEHDDCGh758rskFAlqd5ycACgkQDDCGh758 rslrmQ//azlNLu5tRI5MjRMuGi9wHF+yQlj8PaHCYSqrsee6Yln2ca/2J9RlEnxM khE4OwKxv0fZQM5tgnwT3B9flWfTVn2wgDdlf9rtWJhPOrmBa0vaZAiPBNVavUH2 cvezFgMnpEEBEXvvEOFiCukWjGaDWeitme9t9XQ13uud1QjdJ0447u6SdCjfCZSC u2oJMWb6d3Hb7TX1dWj7zqaP/Hzt35qISW75SjgJwiB89TsRqsLChqjfHmSGq9Qw xFBGsqsg7jgK2M8fCnyV7TisEiEhTxvScV3rcykdtKyLvWxQE+uCYpVM+PXT0AiI vqNVdDvIH1e4KasuB42N0YK+rReQu9kkOT4U6E7l4oiQ7sL/14+Guqn95X5H0QrM G+6IRwJM36MKU7jfo9lpAVSvr0PES3wA1BzBxYCldelpbw2y7B4LlJztdjQf7tDi ohiQCNNwgP0gDd2MjrAhBccGXRx7BjpQ1nDzNHCMpINBWeUAbpeLrbIxZ6+7igB+ Cb9Iq9xpkRmL5n2gBAxvB1LvH1nHVZCexRCFZMLTylEIIMsvYH2dbY2XTFY08cLW uBFgv708VQcukfA+2QfLQYeGfjFolTJCh0O+p+tlcxhodP/g93MOTVbwC7UBITH0 g7KvI5Wq5O9wvAGCsUsYge5Bk+14FxMrSyVuXfksjrXfwFjc9UQ= =1cni -----END PGP SIGNATURE----- --Apple-Mail=_EA696F60-617B-413B-95EA-F7311F8C298B-- From nobody Mon Mar 5 22:15:44 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 08F44126C3D for ; Mon, 5 Mar 2018 22:15:42 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.32 X-Spam-Level: X-Spam-Status: No, score=-4.32 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QW3j7_PGFzRG for ; Mon, 5 Mar 2018 22:15:39 -0800 (PST) Received: from sesbmg22.ericsson.net (sesbmg22.ericsson.net [193.180.251.48]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3268D126C2F for ; Mon, 5 Mar 2018 22:15:39 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; d=ericsson.com; s=mailgw201801; c=relaxed/simple; q=dns/txt; i=@ericsson.com; t=1520316937; h=From:Sender:Reply-To:Subject:Date:Message-ID:To:CC:MIME-Version:Content-Type: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=4CvyNM6+esSQjvyDkg7vf6ivNvMaSnpxT41pMGNa7As=; b=QFoY6SWsGLbwfHPec8gkVfif/593dUcrtxTCqRYEfKa2bq5qNbsWBrhQzXRN2KPG JOF9HLw75wvdLR0Oqgqi/vSI0sdVQ1uuTGIyKs6kovZyfsEFiBKABXHzUqkUlIs+ bs80gp/Bzujwf4ATZNNSisLNeChG4NaG6dNeKcYRYwY=; X-AuditID: c1b4fb30-399ff70000004778-17-5a9e3209e831 Received: from ESESSHC002.ericsson.se (Unknown_Domain [153.88.183.24]) by sesbmg22.ericsson.net (Symantec Mail Security) with SMTP id B1.6C.18296.9023E9A5; Tue, 6 Mar 2018 07:15:37 +0100 (CET) Received: from ESESSMB109.ericsson.se ([169.254.9.82]) by ESESSHC002.ericsson.se ([153.88.183.24]) with mapi id 14.03.0352.000; Tue, 6 Mar 2018 07:15:37 +0100 From: Christer Holmberg To: Eric Burger CC: "stir@ietf.org" Thread-Topic: [stir] Fwd: New Version Notification for draft-burger-stir-iana-cert-00.txt Thread-Index: AQHTtOX2fZ3mhbSCvki0gbg8uZ3e8qPCu0nL Date: Tue, 6 Mar 2018 06:15:36 +0000 Message-ID: References: <152028300904.31710.8973954292655207142.idtracker@ietfa.amsl.com>, In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: Content-Type: multipart/alternative; boundary="_000_BFBE04EA17B94903B2DB25E577035033ericssoncom_" MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFmpnkeLIzCtJLcpLzFFi42KZGbFdQpfTaF6UwcwmWYtpu3pZLZav3cbk wOSxZMlPJo+mzsXsAUxRXDYpqTmZZalF+nYJXBkzTk1lLDgRUXGu5z9zA+MO3y5GTg4JAROJ q0+3sIPYQgKHGSXOz9PqYuQCshcxSnzeNpepi5GDg03AQqL7nzZIjYiAjsTFr/8ZQcLMAsoS /3bbg4SFBaIkzt16zwJREi2x6+ASRgjbSGJ27wWwOIuAisTOzodgNq+AvcSFjYvYIVa1M0pc mLWbDSTBKeAmMaFxBhOIzSggJvH91Bowm1lAXOLWk/lMEDcLSCzZc54ZwhaVePn4HytETbLE 9+eTmSAWCEqcnPmEZQKj8Cwk7bOQlM1CUgYR15FYsPsTG4StLbFs4WtmGPvMgcdMyOILGNlX MYoWpxYn5aYbGemlFmUmFxfn5+nlpZZsYgRGz8Etvw12ML587niIUYCDUYmHl+HS3Cgh1sSy 4srcQ4wSHMxKIrwR+vOihHhTEiurUovy44tKc1KLDzFKc7AoifOe9OSNEhJITyxJzU5NLUgt gskycXBKNTAa60zt96/T+ZgZpvVKuKjdfGvVqRnS1fssCvy9D26z+DHhw4kJ/w9G3og716d9 6Kx430lXdu2bKn/PZRVMWvJN0yJOSjFW0Gz+J92X8kyzPv7dNivMZw2r+YTl+k5NAtdvb3bg Kiw7Fvwjy+KLSvfVv/dnmBvefLKWLcJ4asQ/NeMnrNMim/8rsRRnJBpqMRcVJwIAnR12JZoC AAA= Archived-At: Subject: Re: [stir] Fwd: New Version Notification for draft-burger-stir-iana-cert-00.txt X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 06 Mar 2018 06:15:42 -0000 --_000_BFBE04EA17B94903B2DB25E577035033ericssoncom_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi Eric, The IANA policy is Expert Review. What exactly is the ER supposed to do in = this case? Regards, Christer Sent from my iPhone On 6 Mar 2018, at 2.56, Eric Burger > wrote: I could not stay away either. Begin forwarded message: From: internet-drafts@ietf.org Subject: New Version Notification for draft-burger-stir-iana-cert-00.txt Date: March 5, 2018 at 3:50:09 PM EST To: "Eric W. Burger" >, "Eric Burger" > A new version of I-D, draft-burger-stir-iana-cert-00.txt has been successfully submitted by Eric W. Burger and posted to the IETF repository. Name: draft-burger-stir-iana-cert Revision: 00 Title: Registry for Country-Specific Secure Telephone Identity (STIR) Root = Certificates Document date: 2018-03-05 Group: Individual Submission Pages: 13 URL: https://www.ietf.org/internet-drafts/draft-burger-stir-iana= -cert-00.txt Status: https://datatracker.ietf.org/doc/draft-burger-stir-iana-cer= t/ Htmlized: https://tools.ietf.org/html/draft-burger-stir-iana-cert-00 Htmlized: https://datatracker.ietf.org/doc/html/draft-burger-stir-ian= a-cert-00 Abstract: This document defines an IANA registry that maps country codes to secure telephone identity (STIR) root certificates authorized to create signing certificates for telephone numbers under the authority of a given country. Some countries allow carriers to block unsolicited, automatically generated nuisance calls commonly known as 'robocalls.' The use of signed STIR tokens in the Session Initiation Protocol (SIP) may be useful in such scenarios to provide positive attestations as to call origin. Legacy telephone numbering resources are administrated by national policy. Unlike the market-driven use case of Web commerce, some nations may restrict the list of STIR root certificate authorities acceptable for issuing signing certificates for STIR tokens that provide attestations for their local legacy telephone numbering resources. The registry described in this document enables call recipients in a first country to validate that signaling it receives from a caller with a telephone number claiming to be in a second country conforms to the second country's policy of (1) having a limited list of STIR root certificate authorities (or not) and (2) the certificate that produced the signature over the signaling is signed by one of those authorized STIR root certificate authorities. Please note that it may take a couple of minutes from the time of submissio= n until the htmlized version and diff are available at tools.ietf.org. The IETF Secretariat _______________________________________________ stir mailing list stir@ietf.org https://www.ietf.org/mailman/listinfo/stir --_000_BFBE04EA17B94903B2DB25E577035033ericssoncom_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi Eric,

The IANA policy is Expert Review. What exactly is the ER supposed to d= o in this case? 

Regards,

Christer

Sent from my iPhone

On 6 Mar 2018, at 2.56, Eric Burger <eburger@standardstrack.com> wrote:

I could not stay away either.

Begin forwarded message:

From: internet-drafts@ietf.org
Subject: New Version Notification = for draft-burger-stir-iana-cert-00.txt
Date: March 5, 2018 at 3:50:09 PM EST
To: "Eric W. Burger" <eburger@standardstrack.co= m>, "Eric Burger" <eburger@standardstrack.com>


A new version of I-D, draft-burger-stir-iana-cert-00.txt
has been successfully submitted by Eric W. Burger and posted to the
IETF repository.

Name: draft-burger-sti= r-iana-cert
Revision: 0= 0
Title: Registry for Co= untry-Specific Secure Telephone Identity (STIR) Root Certificates
Document date: 2018-03-05
Group: Individual Subm= ission
Pages: 13
URL:            https://www.ietf.org/internet-drafts/draft-burger-stir-iana= -cert-00.txt
Status:         https://d= atatracker.ietf.org/doc/draft-burger-stir-iana-cert/
Htmlized:       https://tools.ietf.org= /html/draft-burger-stir-iana-cert-00
Htmlized:       https://data= tracker.ietf.org/doc/html/draft-burger-stir-iana-cert-00


Abstract:
  This document defines an IANA registry that maps country codes = to
  secure telephone identity (STIR) root certificates authorized t= o
  create signing certificates for telephone numbers under the aut= hority
  of a given country.  Some countries allow carriers to bloc= k
  unsolicited, automatically generated nuisance calls commonly kn= own as
  'robocalls.'  The use of signed STIR tokens in the Session= Initiation
  Protocol (SIP) may be useful in such scenarios to provide posit= ive
  attestations as to call origin.  Legacy telephone numberin= g resources
  are administrated by national policy.  Unlike the market-d= riven use
  case of Web commerce, some nations may restrict the list of STI= R root
  certificate authorities acceptable for issuing signing certific= ates
  for STIR tokens that provide attestations for their local legac= y
  telephone numbering resources.  The registry described in = this
  document enables call recipients in a first country to validate= that
  signaling it receives from a caller with a telephone number cla= iming
  to be in a second country conforms to the second country's poli= cy of
  (1) having a limited list of STIR root certificate authorities = (or
  not) and (2) the certificate that produced the signature over t= he
  signaling is signed by one of those authorized STIR root certif= icate
  authorities.




Please note that it may take a couple of minutes from the time of submissio= n
until the htmlized version and diff are available at tools.ietf.org.

The IETF Secretariat


_______________________________________________
stir mailing list
stir@ietf.org
https://www.ie= tf.org/mailman/listinfo/stir
--_000_BFBE04EA17B94903B2DB25E577035033ericssoncom_-- From nobody Tue Mar 6 08:59:06 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AB4F312762F for ; Tue, 6 Mar 2018 08:59:04 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=team.neustar Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6uiaJKGqTtFF for ; Tue, 6 Mar 2018 08:59:03 -0800 (PST) Received: from mx0b-0018ba01.pphosted.com (mx0a-0018ba01.pphosted.com [67.231.149.94]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4C748127076 for ; Tue, 6 Mar 2018 08:59:03 -0800 (PST) Received: from pps.filterd (m0078666.ppops.net [127.0.0.1]) by mx0a-0018ba01.pphosted.com (8.16.0.22/8.16.0.22) with SMTP id w26Gr506014600 for ; Tue, 6 Mar 2018 11:59:03 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=team.neustar; h=from : to : subject : date : message-id : content-type : mime-version; s=selector1; bh=vrNjAZ468wIaWqowCL4X0E8rWUbGf9aDNcAG0ROmp48=; b=X9+cEGqqYoAdlqs5h6xU+nk5yXvEFOCrRXql6RIlc2yE7MlGktmG905V+AtjHa0g1nl5 2YcMsV+YIo6PnK7Sa9ihR+/PGHSnB5c5+cq5V3risr4IR4ONBCyY4VE18HAr9hBUx1QP K97K739XOpEN8LlAlhl9rdCENXZl5avQqftew4uz0sVZXeAodPgsyeF1VIqNK5X+AS5R CBJikNyEr32bhc+KZus0z4RbvlAtVo5yRbm34+e9rRY1lV0VIMrWZSP6AaWV9Ql5POjZ ir6LxJHpNAwkN12rXfCDRPD26v/15nbjXI5dx9pkCaN8Gls6HtyNJ8Aknu8ct0wABMWh ZA== Received: from stntexhc10.cis.neustar.com ([156.154.17.216]) by mx0a-0018ba01.pphosted.com with ESMTP id 2gfrpu535h-1 (version=TLSv1 cipher=ECDHE-RSA-AES256-SHA bits=256 verify=NOT) for ; Tue, 06 Mar 2018 11:59:02 -0500 Received: from STNTEXMB11.cis.neustar.com ([169.254.1.236]) by stntexhc10.cis.neustar.com ([10.31.58.69]) with mapi id 14.03.0279.002; Tue, 6 Mar 2018 11:59:01 -0500 From: "Peterson, Jon" To: "stir@ietf.org" Thread-Topic: drafts for london Thread-Index: AQHTtWxskc9d5LJBGEmN4e33qmfWJg== Date: Tue, 6 Mar 2018 16:59:01 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.6.3.160329 x-originating-ip: [10.96.13.154] Content-Type: multipart/alternative; boundary="_000_D6C408E71F8D99jonpetersonneustarbiz_" MIME-Version: 1.0 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:, , definitions=2018-03-06_08:, , signatures=0 X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1011 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1711220000 definitions=main-1803060186 Archived-At: Subject: [stir] drafts for london X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 06 Mar 2018 16:59:05 -0000 --_000_D6C408E71F8D99jonpetersonneustarbiz_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Well, I can tell STIR is going to be interesting this time. A few bits of old business, there are new versions of the divert and oob dr= afts: https://www.ietf.org/id/draft-ietf-stir-passport-divert-02.txt https://www.ietf.org/id/draft-ietf-stir-oob-02.txt These reflect the changes we last discussed, including stronger guidance on= nesting for divert, and some further integration with History-Info. That o= ne continues to have a lot of external attention, and it would be nice to w= rap it up. Let's talk about whether or not large nested Identity headers wi= ll trip up implementations too badly. For stir-oob, there is now some more generic authentication/verification se= rvice behavior for non-SIP STIR applications, and even an initial mock-up o= f a REST interface for storing PASSporTS at a CPS. I also wanted to point to the continuing STIR work in ACME, which we are in= the middle of reorganizing, but which will eventually lead us to a short-l= ived certs document here. I bumped that draft slightly to keep it on the ra= dar. https://www.ietf.org/id/draft-peterson-stir-certificates-shortlived-02.txt Finally, Chris and I have become increasingly preoccupied with the reuse of= STIR for identifying the called party as well as the calling party. We hav= e some initial thoughts about what the problem statement for that would be = in this new draft: https://www.ietf.org/id/draft-peterson-stir-rfc4916-update-00.txt See you all in London! Jon Peterson NeuStar, Inc. --_000_D6C408E71F8D99jonpetersonneustarbiz_ Content-Type: text/html; charset="us-ascii" Content-ID: <45D6FAA4510A3B49BE128D9C03BAB561@neustar.biz> Content-Transfer-Encoding: quoted-printable

Well, I can tell STIR is going to be interesting this time.

A few bits of old business, there are new versions of the divert and o= ob drafts:

https://www.ietf.org/id/draft-ietf-stir-passport-divert-02.txt

These reflect the changes we last discussed, including stronger guidan= ce on nesting for divert, and some further integration with History-Info. T= hat one continues to have a lot of external attention, and it would be nice= to wrap it up. Let's talk about whether or not large nested Identity headers will trip up implementations = too badly.

For stir-oob, there is now some more generic authentication/verificati= on service behavior for non-SIP STIR applications, and even an initial mock= -up of a REST interface for storing PASSporTS at a CPS.

I also wanted to point to the continuing STIR work in ACME, which we a= re in the middle of reorganizing, but which will eventually lead us to a sh= ort-lived certs document here. I bumped that draft slightly to keep it on t= he radar.


Finally, Chris and I have become increasingly preoccupied with the reu= se of STIR for identifying the called party as well as the calling party. W= e have some initial thoughts about what the problem statement for that woul= d be in this new draft:


See you all in London!

Jon Peterson
NeuStar, Inc.



--_000_D6C408E71F8D99jonpetersonneustarbiz_-- From nobody Tue Mar 6 13:56:00 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7F60F126BF6 for ; Tue, 6 Mar 2018 13:55:58 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.32 X-Spam-Level: X-Spam-Status: No, score=-4.32 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Dx8JaxXh69Ic for ; Tue, 6 Mar 2018 13:55:56 -0800 (PST) Received: from sessmg22.ericsson.net (sessmg22.ericsson.net [193.180.251.58]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DE2C1124B17 for ; Tue, 6 Mar 2018 13:55:55 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; d=ericsson.com; s=mailgw201801; c=relaxed/simple; q=dns/txt; i=@ericsson.com; t=1520373353; h=From:Sender:Reply-To:Subject:Date:Message-ID:To:Cc:MIME-Version:Content-Type: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=83jKzOLoKA35kOyV0jLr9KDDfiUwsQeWpd9/a+KvS0g=; b=bvJv4wrwi8iADfd0ciwTjit/duW1Y2+aIER7+axT3ZlKk7gzDQ6yRyYiJSdcpHMt 7dCs0amm0HxE/gy/h+pEJ7tsDJi0uqJ2o1/kuP0jFpwHPfZ2e1v4r7cva+/xSW2X +hmv0tNgXf0aXOk6mX2SdwMNLOLrXC+jRw5+h4Vv9i0=; X-AuditID: c1b4fb3a-35fff700000067b4-64-5a9f0e693f64 Received: from ESESSHC017.ericsson.se (Unknown_Domain [153.88.183.69]) by sessmg22.ericsson.net (Symantec Mail Security) with SMTP id 5C.94.26548.96E0F9A5; Tue, 6 Mar 2018 22:55:53 +0100 (CET) Received: from ESESSMB109.ericsson.se ([169.254.9.82]) by ESESSHC017.ericsson.se ([153.88.183.69]) with mapi id 14.03.0352.000; Tue, 6 Mar 2018 22:55:53 +0100 From: Christer Holmberg To: "Peterson, Jon" , "stir@ietf.org" Thread-Topic: Editorial comments on sections 3 and 4 of draft-ietf-stir-passport-divert-02 [was: drafts for london] Thread-Index: AdO1leYBWf6vwV0+R0KzweYvSCipPg== Date: Tue, 6 Mar 2018 21:55:52 +0000 Message-ID: <7594FB04B1934943A5C02806D1A2204B6C1C59A6@ESESSMB109.ericsson.se> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [153.88.183.169] Content-Type: multipart/alternative; boundary="_000_7594FB04B1934943A5C02806D1A2204B6C1C59A6ESESSMB109erics_" MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFvrALMWRmVeSWpSXmKPExsUyM2K7q24m3/wog19vLCw2P1vDZLF87TYm ByaPJUt+Mnm83jCHPYApissmJTUnsyy1SN8ugSvj/5Sygj/fGCtO9PayNDA+fsjYxcjJISFg IjG/9TVrFyMXh5DAYUaJuZ1rmSGcRYwSl2deB8pwcLAJWEh0/9MGaRARCJKY+7ufHcQWFiiQ uDv/FCtEvFRi7+2DLBC2nkRP9wQmEJtFQEXi44wjjCBjeAV8JQ4s4wcJMwqISXw/tQashFlA XOLWk/lMEPcISCzZc54ZwhaVePn4HyuErSRxsnszC0R9vsTCDzPB4rwCghInZz5hmcAoOAvJ qFlIymYhKYOI60gs2P2JDcLWlli28DUzjH3mwGMmZPEFjOyrGEWLU4uLc9ONjPRSizKTi4vz 8/TyUks2MQLj4eCW31Y7GA8+dzzEKMDBqMTDO/HvvCgh1sSy4srcQ4wSHMxKIrz/GedHCfGm JFZWpRblxxeV5qQWH2KU5mBREud1SrOIEhJITyxJzU5NLUgtgskycXBKNTDa7tovb9pnZqJ0 rm769fTrnzcErThclvPmhqn4j1qxBIdjL9pe8X5uV6pnbnWxfe5wru08+9Kmtc8vLrMI5lLy fB/UrdShJaSudWP5b58LFQcfnHmy/Cf/o5p57K2WKpHlJb94g6ZeWf81W3jH+r8PL1yYfHNb 6Y8dZpwvm04ElfF/DVIK5ONRYinOSDTUYi4qTgQAFHRSK4MCAAA= Archived-At: Subject: [stir] Editorial comments on sections 3 and 4 of draft-ietf-stir-passport-divert-02 [was: drafts for london] X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 06 Mar 2018 21:55:58 -0000 --_000_7594FB04B1934943A5C02806D1A2204B6C1C59A6ESESSMB109erics_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi Jon, I see that the new version covers some of the issues that I raised previous= ly. Thank you for that! I did take a look at the new version (mostly focusing on Sections 3 and 4),= and I have some editorial comments, mostly related to inconsistent termino= logy. But, there is also a couple of comments where I think we need more cl= arification. (You may call some of my comments nit picking, but I personally think that = fixing them would make the document easier to read) --- Q1: Throughout the document, you use different terminology for the claims. You = at least use "claim", "array", "field". I suggest to always use "claim", i.e., "div" claim, "dest" claim etc. The fact that a claim might be an array is an encoding issue. A few examples of where I identified this problem: "occupy the "div" field in the new PASSporT." (s/field/claim) "...the original identifier for the called party in the "dest" array will b= ecome the "div" claim in the new PASSporT. If the "dest" array of the orig= inal PASSporT contains multiple identifiers,..." (s/array/claim) "becomes the value of the "dest" array of the new PASSporT." (s/array/claim) --- Q2: Throughout the document, you talk about "div" PASSporT, "div" PASSporT type= , etc. Please don't use the same name for the claim and the PASSPorT. Instead say = something like "to the PASSporT carrying the "div" claim", "the diversion P= ASSporT", or something like that. --- Q3: Throughout the document, the text talks about "original PASSPorT". Since there might be (at least in theory) multiple incoming PASSPorTs you n= eed to define what "original" means. --- Q4: The text in Section 3 says: "A PASSporT claims object containing "div"" I don't think we need to say "claims object". It is enough to just talk abo= ut PASSPorT (you do that elsewhere). --- Q5: The text in Section 3 says: "These new PASSporT generated by retargeting entities MUST include the "div= " PASSporT type,.." Please explicitly indicate which header field includes the "div" type (i.e.= , the "ppt") --- Q6: The text in Section 3 says: "...for all PASSporTs using the "div" type the signature MUST be created with a credential with authority over the identity present in the "div" claim. So for the example above, where the original "dest" is "12155551213", the signer of the new PASSporT object MUST have authority over that telephone number,..." I think the text can be clarified in the following way: "...for all PASSporTs using the "div" type the signature MUST be created with a credential with authority over the identity present in the "div" claim, which means that the signer MUST have authority over the "dest" claim in the original PASSporT." Because, I think this is a generic normative statement, not just a descript= ion of an example. --- Q7: The text in Section 4.1. says: "An authentication service only adds an Identity header field containing the "div" PASSporT type to an SIP request that already contains at least one Identity header field; it MUST NOT add a "div" request to an INVITE that contains no other Identity headers fields." Is there a reason why you first say "SIP request" and then "INVITE"? Can't = the "it MUST NOT add..." part be removed? --- Q8: In Section 4, when the new PASSPorT has been created and added to a SIP mes= sage, we need to clarify where the associated Identity header field is loca= ted in relation to other Identity header fields. Alt A: Identity: incoming_PASSPorT Identity: div_PASSPorT Alt B: Identity: div_PASSPorT Identity: incoming_PASSPorT Regards, Christer --_000_7594FB04B1934943A5C02806D1A2204B6C1C59A6ESESSMB109erics_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi Jon,

 = ;

I see that= the new version covers some of the issues that I raised previously. Thank = you for that!

 = ;

I did take= a look at the new version (mostly focusing on Sections 3 and 4), and I hav= e some editorial comments, mostly related to inconsistent terminology. But, there is also a couple of comments where I think we need= more clarification.

 = ;

(You may c= all some of my comments nit picking, but I personally think that fixing the= m would make the document easier to read)

 = ;

---

 = ;

Q1:

 = ;

Throughout= the document, you use different terminology for the claims. You at least u= se “claim”, “array”, “field”.

 = ;

I suggest = to always use “claim”, i.e., “div” claim, “de= st” claim etc.

 = ;

The fact t= hat a claim might be an array is an encoding issue.

 = ;

 = ;

A few exam= ples of where I identified this problem:

 = ;

“occ= upy the "div" field in the new PASSporT.”

 = ;

(s/field/c= laim)

 = ;

 = ;

“= 230;the original identifier for the called party in the "dest" ar= ray will become the "div" claim in the new PASSporT.  If the= "dest" array of the original PASSporT contains multiple identifiers,…”= ;

 = ;

(s/array/c= laim)

 = ;

 = ;

“bec= omes the value of the "dest" array of the new PASSporT.”

 = ;

(s/array/c= laim)

 = ;

---

 = ;

Q2:

 = ;

Throughout= the document, you talk about “div” PASSporT, “div”= PASSporT type, etc.

 = ;

Please don= ’t use the same name for the claim and the PASSPorT. Instead say some= thing like “to the PASSporT carrying the “div” claim̶= 1;, “the diversion PASSporT”, or something like that.

 = ;

---

 = ;

Q3:

 = ;

Throughout= the document, the text talks about “original PASSPorT”.

 = ;

Since ther= e might be (at least in theory) multiple incoming PASSPorTs you need to def= ine what “original” means.

 = ;

---

 = ;

Q4:

 = ;

The text i= n Section 3 says:

 = ;

“A P= ASSporT claims object containing "div"”

 = ;

I don̵= 7;t think we need to say “claims object”. It is enough to just = talk about PASSPorT (you do that elsewhere).

 = ;

---

 = ;

Q5:

 = ;

The text i= n Section 3 says:

 = ;

“The= se new PASSporT generated by retargeting entities MUST include the "di= v" PASSporT type,..”

 = ;

Please exp= licitly indicate which header field includes the “div” type (i.= e., the “ppt”)

 = ;

---

 = ;

Q6:

 = ;

The text i= n Section 3 says:

 = ;

 &nbs= p; “…for all PASSporTs using the "div" type the<= /o:p>

 &nbs= p; signature MUST be created with a credential with authority over the=

 &nbs= p; identity present in the "div" claim.  So for the example = above, where

 &nbs= p; the original "dest" is "12155551213", the signer of = the new PASSporT

 &nbs= p; object MUST have authority over that telephone number,…”

 = ;

I think th= e text can be clarified in the following way:

 = ;

 &nbs= p; “…for all PASSporTs using the "div" type the<= /o:p>

 &nbs= p; signature MUST be created with a credential with authority over the=

 &nbs= p; identity present in the "div" claim, which means that the sign= er MUST

 &nbs= p; have authority over the “dest” claim in the original PASSpor= T.”

 = ;

Because, I= think this is a generic normative statement, not just a description of an = example.

---

 = ;

Q7:

 = ;

The text i= n Section 4.1. says:

 = ;

   “An authentication service only adds an Id= entity header field

   containing the "div" PASSporT type to = an SIP request that already

   contains at least one Identity header field; it = MUST NOT add a "div"

   request to an INVITE that contains no other Iden= tity headers fields.”

 

Is there a= reason why you first say “SIP request” and then “INVITE&= #8221;? Can’t the “it MUST NOT add…” part be remove= d?

 = ;

---

 = ;

Q8:

 = ;

In Section= 4, when the new PASSPorT has been created and added to a SIP message, we n= eed to clarify where the associated Identity header field is located in relation to other Identity header fields.

 = ;

Alt A:

 = ;

Identity: = incoming_PASSPorT

Identity: = div_PASSPorT

 = ;

Alt B:

 = ;

Identity: = div_PASSPorT

Identity: = incoming_PASSPorT

 = ;

Regards,

 = ;

Christer

 = ;

--_000_7594FB04B1934943A5C02806D1A2204B6C1C59A6ESESSMB109erics_-- From nobody Wed Mar 7 00:09:22 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F1CDF126CC4 for ; Wed, 7 Mar 2018 00:09:20 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.32 X-Spam-Level: X-Spam-Status: No, score=-4.32 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5jEgMXBaXzce for ; Wed, 7 Mar 2018 00:09:19 -0800 (PST) Received: from sessmg23.ericsson.net (sessmg23.ericsson.net [193.180.251.45]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 63A01124C27 for ; Wed, 7 Mar 2018 00:09:19 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; d=ericsson.com; s=mailgw201801; c=relaxed/simple; q=dns/txt; i=@ericsson.com; t=1520410157; h=From:Sender:Reply-To:Subject:Date:Message-ID:To:Cc:MIME-Version:Content-Type: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=RGAkdk8L/5uB7e5U0rP7j3aiTHwZf+U7jSamZs/g43E=; b=XxNHRPn9g6O8hhLxJ/PSWjNdjZJml5L6yTn22Mi0M+Ig1Ky8uL+i/jkT+RyV30Wg 1RPrf60bHbZtzYgrV8pwMR6HdP4nChqz8pgaJ7f7uUety202AbyaSrLXJ/RtIKEw OQoJae/yeCRsop67/E1ftZbh9dIjBAZo5zTIP/FlqRI=; X-AuditID: c1b4fb2d-499ff70000005540-e2-5a9f9e2d3aec Received: from ESESSHC012.ericsson.se (Unknown_Domain [153.88.183.54]) by sessmg23.ericsson.net (Symantec Mail Security) with SMTP id 7D.74.21824.D2E9F9A5; Wed, 7 Mar 2018 09:09:17 +0100 (CET) Received: from ESESSMB109.ericsson.se ([169.254.9.82]) by ESESSHC012.ericsson.se ([153.88.183.54]) with mapi id 14.03.0352.000; Wed, 7 Mar 2018 09:09:17 +0100 From: Christer Holmberg To: "Peterson, Jon" , "stir@ietf.org" Thread-Topic: Why mandate "orig" claim if not modified? Thread-Index: AQHTteuWUtkptXk5YEGW3iLQYSKIkg== Date: Wed, 7 Mar 2018 08:09:16 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.7.7.170905 x-originating-ip: [153.88.183.20] Content-Type: multipart/alternative; boundary="_000_D6C56D522C3B5christerholmbergericssoncom_" MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFmpmkeLIzCtJLcpLzFFi42KZGbHdTFd33vwog0U3dCw2P1vDZLF87TYm ByaPJUt+Mnm83jCHPYApissmJTUnsyy1SN8ugSuja25twSH+ikf3TzI1ME7m7WLk4JAQMJFY /Mevi5GLQ0jgMKPE0w0n2bsYOYGcRYwSk/oUQGrYBCwkuv9pg4RFBIIk5v7uBysRFjCS2Ltg LStE3Fzi9tUWdpByEQE9iamruUBMFgEVic97E0EqeAWsJc582gpWzSggJvH91BomEJtZQFzi 1pP5YLaEgIDEkj3nmSFsUYmXj/+B1YsCTdxw4jY7RFxR4ur05VC9CRLLd0EczCsgKHFy5hOW CYxCs5CMnYWkbBaSMoi4gcT7c/OZIWxtiWULX0PZ+hIbv5xlhLCtJaZv+cuIrGYBI8cqRtHi 1OLi3HQjY73Uoszk4uL8PL281JJNjMCoObjlt+4OxtWvHQ8xCnAwKvHwnu6bHyXEmlhWXJl7 iFGCg1lJhHdyCVCINyWxsiq1KD++qDQntfgQozQHi5I470lP3ighgfTEktTs1NSC1CKYLBMH p1QDY2Tmw0UmJ/xe1Bpf7DpmorpUdPO/JVXnJjPk2vXWXI/j37Z7zvI6JkW/yPrrRcqT16nt 5AvfV35xX0Skfe+ByP7vjFPnbbv17ugCb/P9mtPd/X53rBQ5G3eY82be+mm+tauZItkW7Y1t 19nHeVBX+9XpzrybosmN85bpclrpqaytnDv5Mfv+fUosxRmJhlrMRcWJAHWHyCiWAgAA Archived-At: Subject: [stir] Why mandate "orig" claim if not modified? X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 07 Mar 2018 08:09:21 -0000 --_000_D6C56D522C3B5christerholmbergericssoncom_ Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable Hi, A generic question, but that came to my mind when reading the divert draft. Why does one have to include the =93orig=94 claim in the divert PASSporT? I= t is already present in the =93original=94 PASSporT, and it isn=92t modifie= d. There is probably a good reason, but I think it would be good to document i= t (or, if documented elsewhere, reference it). Regards, Christer --_000_D6C56D522C3B5christerholmbergericssoncom_ Content-Type: text/html; charset="Windows-1252" Content-ID: <63AEB31AF313354699B06035D430577D@ericsson.com> Content-Transfer-Encoding: quoted-printable
Hi,

A generic question, but that came to my mind when reading the divert d= raft.

Why does one have to include the =93orig=94 claim in the divert PASSpo= rT? It is already present in the =93original=94 PASSporT, and it isn=92t mo= dified.

There is probably a good reason, but I think it would be good to docum= ent it (or, if documented elsewhere, reference it).

Regards,

Christer



 --_000_D6C56D522C3B5christerholmbergericssoncom_-- From nobody Wed Mar 7 01:07:44 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8E0C6126D3F for ; Wed, 7 Mar 2018 01:07:42 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.319 X-Spam-Level: X-Spam-Status: No, score=-4.319 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PTVl-U1I7rlR for ; Wed, 7 Mar 2018 01:07:36 -0800 (PST) Received: from sesbmg23.ericsson.net (sesbmg23.ericsson.net [193.180.251.37]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 329FB124217 for ; Wed, 7 Mar 2018 01:07:35 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; d=ericsson.com; s=mailgw201801; c=relaxed/simple; q=dns/txt; i=@ericsson.com; t=1520413654; h=From:Sender:Reply-To:Subject:Date:Message-ID:To:Cc:MIME-Version:Content-Type: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=B0F2gEudV36LSWCj1vyoODmCsHnWbEkqL5VwR9Uj3kY=; b=TtOsxfsONLPw3FG4uNVU9KBiwd8hF6EEUIDvoO8Ug0H5ynCbfhKfY/e0ZhG9SYNU ISlOPBLQw9jHSgGev7Z1BZT7zIxJNhoEEUn5/YEJK0eUDaRqhgnmIPxQ1Zlh1BQP la6mi4a7pGXaoXepWXc4mCTgT8nKYUEdqaTknv/b75Y=; X-AuditID: c1b4fb25-44ba69c000002d5f-c8-5a9fabd56b09 Received: from ESESSHC016.ericsson.se (Unknown_Domain [153.88.183.66]) by sesbmg23.ericsson.net (Symantec Mail Security) with SMTP id 7C.0A.11615.5DBAF9A5; Wed, 7 Mar 2018 10:07:34 +0100 (CET) Received: from ESESSMB109.ericsson.se ([169.254.9.82]) by ESESSHC016.ericsson.se ([153.88.183.66]) with mapi id 14.03.0352.000; Wed, 7 Mar 2018 10:07:33 +0100 From: Christer Holmberg To: "Peterson, Jon" , "stir@ietf.org" Thread-Topic: [stir] drafts for london Thread-Index: AQHTtfO5XCj48TS9+UGNZMby0/hHYQ== Date: Wed, 7 Mar 2018 09:07:32 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.7.7.170905 x-originating-ip: [153.88.183.20] Content-Type: multipart/alternative; boundary="_000_D6C577462C3E7christerholmbergericssoncom_" MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFmpnkeLIzCtJLcpLzFFi42KZGbHdSffa6vlRBhf/s1tsfraGyWL52m1M DkweS5b8ZPJ4vWEOewBTFJdNSmpOZllqkb5dAlfGzWuHWQv+iFS8nnuHuYGxXaiLkYNDQsBE YvEysy5GLg4hgcOMEps3/WSCcBYxSnQdW84KUsQmYCHR/U+7i5GTQ0QgSGLu7352EFtYQFWi 90EjE0RcTWLann42CFtP4srNe6wgNouAisSC7m2MIDavgLXE+YmLwOoZBcQkvp9aA2YzC4hL 3HoyH8yWEBCQWLLnPDOELSrx8vE/sDmiQDM3nLjNDhFXlLg6fTlUb4LEyw/PmCHmC0qcnPmE ZQKj0CwkY2chKZuFpAwiriOxYPcnNghbW2LZwtfMMPaZA4+heq0lJj0+zIKsZgEjxypG0eLU 4qTcdCNjvdSizOTi4vw8vbzUkk2MwOg5uOW36g7Gy28cDzEKcDAq8fCeXDE/Sog1say4MvcQ owQHs5II7+QSoBBvSmJlVWpRfnxRaU5q8SFGaQ4WJXHeOcLtUUIC6YklqdmpqQWpRTBZJg5O qQZGu7s++qZXkyP2Kurd0tTMsRdf8evT/EILub0Xw/eIbVoy30HlVO/GsDU3SxY8D+P4ZLnX hMlTPtj75MOpHtXNJm1Byq9uh9+RyeSL2/Ly/eUirhkeqlpLNetuZqt93CNoX3X55guLDyun lmWd9j6Vdig4eqVnw77Pd9eziKYdYJzq0iAilWepxFKckWioxVxUnAgAPpPwU5oCAAA= Archived-At: Subject: Re: [stir] drafts for london X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 07 Mar 2018 09:07:42 -0000 --_000_D6C577462C3E7christerholmbergericssoncom_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi Jon, > Finally, Chris and I have become increasingly preoccupied with the reuse = of STIR for identifying the called party as well as the calling party. > We have some initial thoughts about what the problem statement for that w= ould be in this new draft: > > https://www.ietf.org/id/draft-peterson-stir-rfc4916-update-00.txt So, the idea would be to use a PASSporT in the Identity header field of the= UPDATE request? Regards, Christer --_000_D6C577462C3E7christerholmbergericssoncom_ Content-Type: text/html; charset="us-ascii" Content-ID: <0999BD71C7FBB34B92FD136635EF1826@ericsson.com> Content-Transfer-Encoding: quoted-printable
Hi Jon,

> Finally, Chris and I have become increasingly preoccupied with th= e reuse of STIR for identifying the called party as well as the calling par= ty.
> We have some initial thoughts about what the problem statement fo= r that would be in this new draft:

So, the idea would be to use a PASSporT in the Identity header field o= f the UPDATE request?

Regards,

Christer



 --_000_D6C577462C3E7christerholmbergericssoncom_-- From nobody Wed Mar 7 08:12:26 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 648D812D7E6 for ; Wed, 7 Mar 2018 08:12:25 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.01 X-Spam-Level: X-Spam-Status: No, score=-0.01 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=1.989, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=team.neustar Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gG-2v3FnHzbT for ; Wed, 7 Mar 2018 08:12:24 -0800 (PST) Received: from mx0b-0018ba01.pphosted.com (mx0b-0018ba01.pphosted.com [67.231.157.90]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E7176129C56 for ; Wed, 7 Mar 2018 08:12:23 -0800 (PST) Received: from pps.filterd (m0078668.ppops.net [127.0.0.1]) by mx0b-0018ba01.pphosted.com (8.16.0.22/8.16.0.22) with SMTP id w27G3DhN006138; Wed, 7 Mar 2018 11:12:21 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=team.neustar; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : mime-version; s=selector1; bh=01fkRQwP3ZqB0rp28xqvu+NsHnV7+2m0Cjc9hgvcfpg=; b=TX1EmyLbrVuvv8QwM7k30Kn1vPlQnlA6/b3GahnehtOnD9kz5B1aueFZQkXQ/BvQEZyJ 9n3w/eRA/hjO+0DqyaAt94srQeWdU5MP4xzFhiXja/y7F0WHpNRR79E0pMh6WNcUCzH9 eTVwAL3dfsjW8VcVmeUCJd9GAkv4M3Z7Jmw5i9XKNaNcSYVDmqRlo25Z1jTQ/Kfn/NhX 4gcZ6E5r11V1NYegKF30HXg13I3+mZ0nY02ySfZpJwos4TheMnv7iZuHZnFyqtSnu21e nVzsIwEaZx1zGjYJqjbgU+EEG/8l8ps+8fgSO560Rj5EynEL4xJVzNPpeoFLfV8neKAy OQ== Received: from stntexhc12.cis.neustar.com ([156.154.17.216]) by mx0b-0018ba01.pphosted.com with ESMTP id 2gfrjpe6pv-1 (version=TLSv1 cipher=ECDHE-RSA-AES256-SHA bits=256 verify=NOT); Wed, 07 Mar 2018 11:12:20 -0500 Received: from STNTEXMB11.cis.neustar.com ([169.254.1.236]) by stntexhc12.cis.neustar.com ([::1]) with mapi id 14.03.0279.002; Wed, 7 Mar 2018 11:12:20 -0500 From: "Peterson, Jon" To: Christer Holmberg CC: "stir@ietf.org" Thread-Topic: [stir] drafts for london Thread-Index: AQHTtfO5XCj48TS9+UGNZMby0/hHYaPE8jv5 Date: Wed, 7 Mar 2018 16:12:19 +0000 Message-ID: <53E62562-BA32-44DE-8EF8-3830353F39CC@team.neustar> References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: Content-Type: multipart/alternative; boundary="_000_53E62562BA3244DE8EF83830353F39CCteamneustar_" MIME-Version: 1.0 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:, , definitions=2018-03-07_07:, , signatures=0 X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1011 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=777 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1711220000 definitions=main-1803070186 Archived-At: Subject: Re: [stir] drafts for london X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 07 Mar 2018 16:12:25 -0000 --_000_53E62562BA3244DE8EF83830353F39CCteamneustar_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Basically yes. Jon Peterson Neustar, Inc. Sent from my iPad On Mar 7, 2018, at 1:07 AM, Christer Holmberg > wrote: Hi Jon, > Finally, Chris and I have become increasingly preoccupied with the reuse = of STIR for identifying the called party as well as the calling party. > We have some initial thoughts about what the problem statement for that w= ould be in this new draft: > > https://www.ietf.org/id/draft-peterson-stir-rfc4916-update-00.txt So, the idea would be to use a PASSporT in the Identity header field of the= UPDATE request? Regards, Christer --_000_53E62562BA3244DE8EF83830353F39CCteamneustar_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Basically yes.

Jon Peterson
Neustar, Inc.

Sent from my iPad

On Mar 7, 2018, at 1:07 AM, Christer Holmberg <christer.holmberg@ericsson.com> wrote:

Hi Jon,

> Finally, Chris and I have become increasingly preoccupied with th= e reuse of STIR for identifying the called party as well as the calling par= ty.
> We have some initial thoughts about what the problem statement fo= r that would be in this new draft:

So, the idea would be to use a PASSporT in the Identity header field o= f the UPDATE request?

Regards,

Christer



--_000_53E62562BA3244DE8EF83830353F39CCteamneustar_-- From nobody Thu Mar 8 00:05:47 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 734411205F0 for ; Thu, 8 Mar 2018 00:05:46 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.32 X-Spam-Level: X-Spam-Status: No, score=-4.32 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oDL0wh3FdR2p for ; Thu, 8 Mar 2018 00:05:45 -0800 (PST) Received: from sessmg22.ericsson.net (sessmg22.ericsson.net [193.180.251.58]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A789D126C19 for ; Thu, 8 Mar 2018 00:05:44 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; d=ericsson.com; s=mailgw201801; c=relaxed/simple; q=dns/txt; i=@ericsson.com; t=1520496342; h=From:Sender:Reply-To:Subject:Date:Message-ID:To:Cc:MIME-Version:Content-Type: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=g0IUkUZ3LsryOB7CXQeKmAj8D+6h/3mVDCForHvfvw0=; b=S4kZN70oBN7M7rRRoD1VXk8fl/XqD3XN/Fw+f3ofAep/pSLCYBiaGZcG6htVQJJ5 5nssBQYji8+fxMYlJw0ZxtluJ1Xc2hctdAewNnrKJR/fNnoMANhEUT9FBRaIG1GJ J+bjDC8rXfuCEr0CBuBzcpFoOwtYZbY3Nrs6bUrOQTE=; X-AuditID: c1b4fb3a-35fff700000067b4-04-5aa0eed68f86 Received: from ESESSHC010.ericsson.se (Unknown_Domain [153.88.183.48]) by sessmg22.ericsson.net (Symantec Mail Security) with SMTP id 01.0E.26548.6DEE0AA5; Thu, 8 Mar 2018 09:05:42 +0100 (CET) Received: from ESESSMB109.ericsson.se ([169.254.9.82]) by ESESSHC010.ericsson.se ([153.88.183.48]) with mapi id 14.03.0352.000; Thu, 8 Mar 2018 09:05:42 +0100 From: Christer Holmberg To: "stir@ietf.org" Thread-Topic: draft-passport-divert: "opt" extension Thread-Index: AQHTtrRAl/K9APkxNkWPGYhh9s9hQA== Date: Thu, 8 Mar 2018 08:05:41 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.7.7.170905 x-originating-ip: [153.88.183.16] Content-Type: multipart/alternative; boundary="_000_D6C6BE8E2C4D6christerholmbergericssoncom_" MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFvrLLMWRmVeSWpSXmKPExsUyM2K7ge61dwuiDOb0G1ssX7uNyYHRY8mS n0wBjFFcNimpOZllqUX6dglcGb82f2IpWMBVceP0ZLYGxt8cXYycHBICJhIdk/YwdzFycQgJ HGaU2L/7IAuEs4hR4vHnc0xdjBwcbAIWEt3/tEEaRASUJbasu8MOYgsL6Es865rODlIiAjRo VoMkRImexKcprSwgNouAisS9nw9ZQWxeAWuJA2+fg7UyCohJfD+1hgnEZhYQl7j1ZD4TxD0C Ekv2nGeGsEUlXj7+B9YrCjRzw4nb7BBxRYmdZ9uZIXoTJFYs3MUMMV9Q4uTMJywTGIVmIRk7 C0nZLCRlEHEDiffn5jND2NoSyxa+hrL1JTZ+OcsIYVtLrFvbyYasZgEjxypG0eLU4uLcdCMj vdSizOTi4vw8vbzUkk2MwEg5uOW31Q7Gg88dDzEKcDAq8fD6vFoQJcSaWFZcmXuIUYKDWUmE l2sZUIg3JbGyKrUoP76oNCe1+BCjNAeLkjivU5pFlJBAemJJanZqakFqEUyWiYNTqoFRPMIr dGeBW2lndd+ttZNu72E+8Fho75Og9Ts0fjsy2s2aYL4k77WY19GO6CMBDkql6ktyuB88srk4 R9fyoWSvneHcza8XSb1uZplv8iXadOKE20I7G30LdXcGPj9bvFK54+zdh8wnOvYVBczWrQn8 oHxlHluKhUztAcv2edzPtkwTENIS+ZqnxFKckWioxVxUnAgAvV2TEpACAAA= Archived-At: Subject: [stir] draft-passport-divert: "opt" extension X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 08 Mar 2018 08:05:46 -0000 --_000_D6C6BE8E2C4D6christerholmbergericssoncom_ Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable Hi, draft-ietf-stir-passport-divert talks about usage of the =93opt=94 extensio= n for nesting. Where is the =93opt" extension defined? Regards, Christer --_000_D6C6BE8E2C4D6christerholmbergericssoncom_ Content-Type: text/html; charset="Windows-1252" Content-ID: <4990185A1BA6BD45904AC50B97FBFDE2@ericsson.com> Content-Transfer-Encoding: quoted-printable
Hi,

draft-ie= tf-stir-passport-divert talks about usage of the =93opt=94 extension= for nesting. 

Where is the =93opt" extension defined? 

Regards,

Christer


--_000_D6C6BE8E2C4D6christerholmbergericssoncom_-- From nobody Thu Mar 8 04:41:12 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A28D6126579 for ; Thu, 8 Mar 2018 04:41:10 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZyT2KbFw1BLi for ; Thu, 8 Mar 2018 04:41:08 -0800 (PST) Received: from smtp74.ord1c.emailsrvr.com (smtp74.ord1c.emailsrvr.com [108.166.43.74]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C835C126CD6 for ; Thu, 8 Mar 2018 04:41:08 -0800 (PST) Received: from smtp2.relay.ord1c.emailsrvr.com (localhost [127.0.0.1]) by smtp2.relay.ord1c.emailsrvr.com (SMTP Server) with ESMTP id 1B7F1C03DE; Thu, 8 Mar 2018 07:41:03 -0500 (EST) X-Auth-ID: fluffy@iii.ca Received: by smtp2.relay.ord1c.emailsrvr.com (Authenticated sender: fluffy-AT-iii.ca) with ESMTPSA id A4807C028D; Thu, 8 Mar 2018 07:41:02 -0500 (EST) X-Sender-Id: fluffy@iii.ca Received: from [10.1.3.91] (S0106004268479ae3.cg.shawcable.net [70.77.44.153]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384) by 0.0.0.0:587 (trex/5.7.12); Thu, 08 Mar 2018 07:41:03 -0500 Content-Type: multipart/alternative; boundary="Apple-Mail=_542F48DF-D27A-4034-859B-289C7CEB5891" Mime-Version: 1.0 (Mac OS X Mail 11.2 \(3445.5.20\)) From: Cullen Jennings In-Reply-To: <64ca7065-a73d-ce53-d715-a5569823a3c2@nostrum.com> Date: Thu, 8 Mar 2018 05:41:01 -0700 Cc: Jonathan Rosenberg , stir@ietf.org Message-Id: <9E1327D0-EEE7-4AFD-9E42-91A355683820@iii.ca> References: <64ca7065-a73d-ce53-d715-a5569823a3c2@nostrum.com> To: Adam Roach X-Mailer: Apple Mail (2.3445.5.20) Archived-At: Subject: Re: [stir] SIPCoin - a new cryptocurrency for stopping robocalls X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 08 Mar 2018 12:41:11 -0000 --Apple-Mail=_542F48DF-D27A-4034-859B-289C7CEB5891 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 So as a super casual analysis of the current draft,=20 Lets say we need order of magnitude 10 cents to stop spam, that equates = to something like 1KW, which equates to something like 1Kg of CO2. Each = of of those steps is only an order go magnitude estimate so this cab be = way out but you get the idea. So we would have a one time, assuming = major carriers shared validation data, ( or small number of times ) = validation of the self signed cert and each validation would take about = 1 Kg CO2. That sounds really bad. But for comparisons sake, your flight = to IETF is probably over 1000 Kg and it is not a one time event But all that said, I don=E2=80=99t think we would actually go for with = something as simple as pure proof of work based approach so I don=E2=80=99= t think that is a realistic look at the power usage. There are a bunch = of techniques that add to the complexity but greatly reduce the reliance = on proof work and more move to things like proof of stake or more risk = based approaches. Solutions like that could greatly reduce the power = usage. Keep in mind reducing the amount of spam calls would reduce the = power usage of the whole phone system.=20 > On Mar 3, 2018, at 5:06 PM, Adam Roach wrote: >=20 > One of the issues that has arisen in parallel with cryptocurrencies is = a recognition of the exorbitant energy (and therefore environmental) = costs they entail. I think this document probably requires a section = addressing this aspect of the system, including any ways that it varies = significantly from traditional cryptocurrencies in this regard. >=20 > /a >=20 > On 3/2/18 4:45 PM, Jonathan Rosenberg wrote: >> Cullen and I have just submitted this: >> https://www.ietf.org/id/draft-rosenberg-stir-sipcoin-00.txt = >>=20 >> which is a proposal for a new type of cyryptocurrency dedicated = solely to preventing spam on the SIP-based phone network. It is designed = to be fast, causing less than one second increases in call setup time. = NOn-transferrable to avoid being a tool for fraud and avoid being tied = to market whim; backed by public CAs with a new type of centralized = ledger validation; trivially verifiable by receivers of calls. Also we = suggest a technique for incremental deployment on the PSTN which has = incremental benefits and economic benefits for each deployment phase. = We've done some analysis on the economics to help motivate the solution. >>=20 >> WHen combined with our previous draft, and some nice whitelisting = thrown in as described in here, I think this is a very interested = technique to put this robocalling plague to rest. >>=20 >> I'm coming to London and looking forward to discussing.=20 >>=20 >> Comments are, of course, welcome. >>=20 >> --=20 >> Jonathan Rosenberg, Ph.D. >> jdrosen@jdrosen.net >> http://www.jdrosen.net >>=20 >> _______________________________________________ >> stir mailing list >> stir@ietf.org >> https://www.ietf.org/mailman/listinfo/stir = >=20 > _______________________________________________ > stir mailing list > stir@ietf.org > https://www.ietf.org/mailman/listinfo/stir --Apple-Mail=_542F48DF-D27A-4034-859B-289C7CEB5891 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8

So as a super casual analysis of the = current draft, 

Lets say we need order of magnitude 10 cents to stop spam, = that equates to something like 1KW, which equates to something like 1Kg = of CO2. Each of of those steps is only an order go magnitude estimate so = this cab be way out but you get the idea. So we would have a one time, = assuming major carriers shared validation data,  ( or small number = of times ) validation of the self signed cert and each validation would = take about 1 Kg CO2. That sounds really bad. But for comparisons sake, = your flight to IETF is probably over 1000 Kg and it is not a one time = event

But all = that said, I don=E2=80=99t think we would actually go for with something = as simple as pure proof of work based approach so I don=E2=80=99t think = that is a realistic look at the power usage. There are a bunch of = techniques that add to the complexity but greatly reduce the reliance on = proof work and more move to things like proof of stake or more risk = based approaches. Solutions like that could greatly reduce the power = usage. Keep in mind reducing the amount of spam calls would reduce the = power usage of the whole phone system. 


On Mar 3, 2018, at 5:06 PM, Adam Roach <adam@nostrum.com> = wrote:

=20
One of the issues that has arisen in parallel with cryptocurrencies is a recognition of the exorbitant energy (and therefore environmental) costs they entail. I think this document probably requires a section addressing this aspect of the system, including any ways that it varies significantly from traditional cryptocurrencies in this regard.

/a

On 3/2/18 4:45 PM, Jonathan Rosenberg wrote:
Cullen and I have just submitted this:
https://www.ietf.org/id/draft-rosenberg-stir-sipcoin-00.txt=

which is a proposal for a new type of cyryptocurrency dedicated solely to preventing spam on the SIP-based phone network. It is designed to be fast, causing less than one second increases in call setup time. NOn-transferrable to avoid being a tool for fraud and avoid being tied to market whim; backed by public CAs with a new type of centralized ledger validation; trivially verifiable by receivers of calls. Also we suggest a technique for incremental deployment on the PSTN which has incremental benefits and economic benefits for each deployment phase. We've done some analysis on the economics to help motivate the solution.

WHen combined with our previous draft, and some nice whitelisting thrown in as described in here, I think this is a very interested technique to put this robocalling plague to rest.

I'm coming to London and looking forward to discussing.

Comments are, of course, welcome.

--
Jonathan Rosenberg, = Ph.D.
jdrosen@jdrosen.net
http://www.jdrosen.net


_______________________________________________
stir mailing list
stir@ietf.org
https://www.ietf.org/m=
ailman/listinfo/stir


_______________________________________________
stir = mailing list
stir@ietf.org
https://www.ietf.org/mailman/listinfo/stir

= --Apple-Mail=_542F48DF-D27A-4034-859B-289C7CEB5891-- From nobody Thu Mar 8 07:23:10 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 24FA5126DFB for ; Thu, 8 Mar 2018 07:23:09 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=team.neustar Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id c-otrz9lphvp for ; Thu, 8 Mar 2018 07:23:08 -0800 (PST) Received: from mx0b-0018ba01.pphosted.com (mx0a-0018ba01.pphosted.com [67.231.149.94]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EE92B126CD6 for ; Thu, 8 Mar 2018 07:23:07 -0800 (PST) Received: from pps.filterd (m0078664.ppops.net [127.0.0.1]) by mx0a-0018ba01.pphosted.com (8.16.0.22/8.16.0.22) with SMTP id w28FEUb8030824; Thu, 8 Mar 2018 10:23:05 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=team.neustar; h=from : to : subject : date : message-id : content-type : mime-version; s=selector1; bh=XZJwFQJqNzahkMN5NZIOpSoCgHqjNKdR81iqCLRSeDw=; b=ZxW2ZAqEFCkOiEjKh/NYLFAXfWmJjXs5C62L5xjamtqry7kLqxIHL3N0sMJqiaXKhLX5 sTCXXzK4LuoEU2dgnsd1mufr6oSB/74DVKw1dm+hsRVU+vot8XufZWjh/3bxBQxWXWf6 1fO6nnn8U/yBH1i4kE0h8cSFVALF92YS1ZvnerW08PpkeLEhrm++8JoKkPCzWQ2oZepV Jb74SpAJDUgl3SSmCgygfSUf6ULApePWkM6Sidu/piTBeJiT8r3kQRZ6adQUS2d08PbX dXN26oPoecrBFPBmDliRm7+3QVd5RgVe6LqRf++aVz9ZY3hAwGn+6j4+owhGKksAVrqz Lw== Received: from stntexhc12.cis.neustar.com ([156.154.17.216]) by mx0a-0018ba01.pphosted.com with ESMTP id 2gfskdgnra-1 (version=TLSv1 cipher=ECDHE-RSA-AES256-SHA bits=256 verify=NOT); Thu, 08 Mar 2018 10:23:04 -0500 Received: from STNTEXMB11.cis.neustar.com ([169.254.1.236]) by stntexhc12.cis.neustar.com ([::1]) with mapi id 14.03.0279.002; Thu, 8 Mar 2018 10:23:03 -0500 From: "Peterson, Jon" To: Christer Holmberg , "stir@ietf.org" Thread-Topic: [stir] draft-passport-divert: "opt" extension Thread-Index: AQHTtvFZRwZBv1Sl2EeP37i0ErHyzA== Date: Thu, 8 Mar 2018 15:23:02 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.6.3.160329 x-originating-ip: [10.96.12.91] Content-Type: multipart/alternative; boundary="_000_D6C693B01FAAB7jonpetersonneustarbiz_" MIME-Version: 1.0 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:, , definitions=2018-03-08_09:, , signatures=0 X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1015 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=481 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1711220000 definitions=main-1803080176 Archived-At: Subject: Re: [stir] draft-passport-divert: "opt" extension X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 08 Mar 2018 15:23:09 -0000 --_000_D6C693B01FAAB7jonpetersonneustarbiz_ Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable There will be a slide about this in London - I'm a bit on the fence about i= t at the moment, as there has been some talk about splitting this out into = a separate document so other extensions to STIR might leverage it. If there= are concrete examples of that we can anticipate, of other extensions that = might want nesting, then perhaps we should split it out. Otherwise, it shou= ld be fine to let this be the document that specifies it. I don't think it = requires a ton of specification: it's just a full-form PASSporT in a claim = value. Jon Peterson Neustar, Inc. From: stir > on behalf = of Christer Holmberg > Date: Thursday, March 8, 2018 at 12:05 AM To: "stir@ietf.org" > Subject: [stir] draft-passport-divert: "opt" extension Hi, draft-ietf-stir-passport-divert talks about usage of the =93opt=94 extensio= n for nesting. Where is the =93opt" extension defined? Regards, Christer --_000_D6C693B01FAAB7jonpetersonneustarbiz_ Content-Type: text/html; charset="Windows-1252" Content-ID: Content-Transfer-Encoding: quoted-printable

There will be a slide about this in London - I'm a bit on the fence ab= out it at the moment, as there has been some talk about splitting this out = into a separate document so other extensions to STIR might leverage it. If = there are concrete examples of that we can anticipate, of other extensions that might want nesting, then perha= ps we should split it out. Otherwise, it should be fine to let this be the = document that specifies it. I don't think it requires a ton of specificatio= n: it's just a full-form PASSporT in a claim value.

Jon Peterson
Neustar, Inc.

From: stir <stir-bounces@ietf.org> on behalf of Christer Ho= lmberg <christer.holmb= erg@ericsson.com>
Date: Thursday, March 8, 2018 at 12= :05 AM
To: "stir@ietf.org" <stir@i= etf.org>
Subject: [stir] draft-passport-dive= rt: "opt" extension

Hi,

draft-ie= tf-stir-passport-divert talks about usage of the =93opt=94 extension= for nesting. 

Where is the =93opt" extension defined? 

Regards,

Christer


 --_000_D6C693B01FAAB7jonpetersonneustarbiz_-- From nobody Thu Mar 8 07:40:50 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2CDF3124207 for ; Thu, 8 Mar 2018 07:40:49 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.32 X-Spam-Level: X-Spam-Status: No, score=-4.32 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OHbbPdM8UYVQ for ; Thu, 8 Mar 2018 07:40:47 -0800 (PST) Received: from sesbmg23.ericsson.net (sesbmg23.ericsson.net [193.180.251.37]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3AA281200B9 for ; Thu, 8 Mar 2018 07:40:47 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; d=ericsson.com; s=mailgw201801; c=relaxed/simple; q=dns/txt; i=@ericsson.com; t=1520523645; h=From:Sender:Reply-To:Subject:Date:Message-ID:To:Cc:MIME-Version:Content-Type: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=IDa+6gMfue0JfasLhdaLCyJQ6Vcb4cHAsnWlGz2gGcs=; b=M6kp8Fa6x2uiPnDth9d+Otz1d6H33Ounxw5vE9viA8wBo/XwMM5aQt/F5ShyBvr0 VKY/Sx1cHRceb6k8ZZdPdOUl4JMT1d5miFtQA2L2T2b/EWK1ONN0hqdsPQCPgFM/ Vm6EjUhZNPgddJzXMNyLY+N5FI2zCRLCMXodpPQlXq8=; X-AuditID: c1b4fb25-06bff70000002d5f-aa-5aa1597d4582 Received: from ESESSHC020.ericsson.se (Unknown_Domain [153.88.183.78]) by sesbmg23.ericsson.net (Symantec Mail Security) with SMTP id A3.CE.11615.D7951AA5; Thu, 8 Mar 2018 16:40:45 +0100 (CET) Received: from ESESSMB109.ericsson.se ([169.254.9.82]) by ESESSHC020.ericsson.se ([153.88.183.78]) with mapi id 14.03.0352.000; Thu, 8 Mar 2018 16:40:44 +0100 From: Christer Holmberg To: "Peterson, Jon" , "stir@ietf.org" Thread-Topic: [stir] draft-passport-divert: "opt" extension Thread-Index: AQHTtvFZRwZBv1Sl2EeP37i0ErHyzKPGeHFQ Date: Thu, 8 Mar 2018 15:40:44 +0000 Message-ID: <7594FB04B1934943A5C02806D1A2204B6C1CA257@ESESSMB109.ericsson.se> References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [153.88.183.163] Content-Type: multipart/alternative; boundary="_000_7594FB04B1934943A5C02806D1A2204B6C1CA257ESESSMB109erics_" MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFmplkeLIzCtJLcpLzFFi42KZGbHdT7c2cmGUwaxvMhabn61hsli+dhuT A5PHkiU/mTxeb5jDHsAUxWWTkpqTWZZapG+XwJXxdf4hpoKzxRXTNq1kaWCckNnFyMEhIWAi cXCTTBcjJ4eQwGFGicuPFLsYuYDsRYwSG57fZQOpYROwkOj+pw1SIyIQJDH3dz87iC0sYCWx 799Udoi4tcSmeSvAykUEjCRm9OuAhFkEVCSm9O1lArF5BXwlrh86wAKxykxi2sXfYHFOAXOJ I6tbGUFsRgExie+n1oDFmQXEJW49mQ9mSwgISCzZc54ZwhaVePn4HyuErSSxfNoWdoj6fIlb PatZIXYJSpyc+YRlAqPwLCSjZiEpm4WkDCKuI7Fg9yc2CFtbYtnC18ww9pkDj5mQxRcwsq9i FC1OLU7KTTcy1kstykwuLs7P08tLLdnECIycg1t+q+5gvPzG8RCjAAejEg9vvvPCKCHWxLLi ytxDjBIczEoivAH6QCHelMTKqtSi/Pii0pzU4kOM0hwsSuK8c4Tbo4QE0hNLUrNTUwtSi2Cy TBycUg2M8rb5z00PKdge2/NJyS/0hVDovg3zal+y71df2754+nH2x3fUppu+6Y44tP/rSimN 8rNXdXbyz9SYy+ylO5+hK6HU4/+dsnLmLhbuPVPD/Y9eVVvbWLd1YlRAaG+fTvi1yvAP/Kfu zmKJmryoInLqj72X+sp/Py+6yti0ykkh8Y9q63L/xgRJJZbijERDLeai4kQAwx1IXpgCAAA= Archived-At: Subject: Re: [stir] draft-passport-divert: "opt" extension X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 08 Mar 2018 15:40:49 -0000 --_000_7594FB04B1934943A5C02806D1A2204B6C1CA257ESESSMB109erics_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi, >There will be a slide about this in London - I'm a bit on the fence about = it at the moment, as >there has been some talk about splitting this out int= o a separate document so other extensions >to STIR might leverage it. If th= ere are concrete examples of that we can anticipate, of other >extensions t= hat might want nesting, then perhaps we should split it out. Otherwise, it = should be >fine to let this be the document that specifies it. I don't thin= k it requires a ton of specification: >it's just a full-form PASSporT in a = claim value. My first reaction would be to define it in a separate document. Another question: is there a reason why we need to indicate the previous de= stination in the "div" claim? Isn't the previous destination seen in the "o= riginal" PASSporT? Something like this: So, for an original PASSporT of the form: { "orig":{"tn":"12155551212"}, "dest":{"tn":"12155551213"}, "iat":1443208345 } If the retargeting entity is changing the target from 12155551213 to 12155551214, the new PASSporT would look as follows: { "orig":{"tn":"12155551212"}, "dest":{"tn":"12155551214"}, "iat":1443208345 } "ppt:div" indicates that this is diversion. Regards, Christer Jon Peterson Neustar, Inc. From: stir > on behalf = of Christer Holmberg > Date: Thursday, March 8, 2018 at 12:05 AM To: "stir@ietf.org" > Subject: [stir] draft-passport-divert: "opt" extension Hi, draft-ietf-stir-passport-divert talks about usage of the "opt" extension fo= r nesting. Where is the "opt" extension defined? Regards, Christer --_000_7594FB04B1934943A5C02806D1A2204B6C1CA257ESESSMB109erics_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi,

 

>There will be= a slide about this in London - I'm a bit on the fence about it at the moment, as >there h= as been some talk about splitting this out into a separate document so other extensions >to STIR might leverage it. If there are concrete examples of that we can anticipate, of other >extensions that might want nesting, then perhaps we should split it out. Otherwise, it should be >fine to let this be the document that specifies it. I don't think it requires a ton of specification: >it's just a full-form PASSporT in a claim value.

 

My first reaction would be to define = it in a separate document.

 

Another question: is there a reason w= hy we need to indicate the previous destination in the “div” cl= aim? Isn’t the previous destination seen in the “original”= ; PASSporT?

 

Something like this:

 

So, for an original PASSporT of the f= orm:

 

      { &quo= t;orig":{"tn":"12155551212"},

      &= nbsp; "dest":{"tn":"12155551213"},=

      &= nbsp; "iat":1443208345 }

 

   If the retargeting entit= y is changing the target from 12155551213 to

   12155551214, the new PAS= SporT would look as follows:

 

      { &quo= t;orig":{"tn":"12155551212"},

      &= nbsp; "dest":{"tn":"12155551214"},=

      &= nbsp; "iat":1443208345 }

 

“ppt:div” indicates that = this is diversion.

 

Regards,

 

Christer

 

 

 

Jon Peterson

Neustar, Inc.

 

From: stir <s= tir-bounces@ietf.org> on behalf of Christer Holmberg <christer.holmberg@ericsson.com&g= t;
Date: Thursday, March 8, 2018 at 12:05 AM
To: "stir@ietf.org" &= lt;stir@ietf.org>
Subject: [stir] draft-passport-divert: "opt" extension

 

Hi,

 

draft-ietf-stir-passport-divert talks a= bout usage of the “opt” extension for nesting. =

 

Where is the “opt" extension= defined? 

 

Regards,

 

Christer

 

 

--_000_7594FB04B1934943A5C02806D1A2204B6C1CA257ESESSMB109erics_-- From nobody Thu Mar 8 07:44:08 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7636412702E for ; Thu, 8 Mar 2018 07:44:06 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.7 X-Spam-Level: X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=akamai.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gPS-NlB-cQhr for ; Thu, 8 Mar 2018 07:44:05 -0800 (PST) Received: from mx0a-00190b01.pphosted.com (mx0a-00190b01.pphosted.com [IPv6:2620:100:9001:583::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3A16A124207 for ; Thu, 8 Mar 2018 07:44:05 -0800 (PST) Received: from pps.filterd (m0050093.ppops.net [127.0.0.1]) by m0050093.ppops.net-00190b01. (8.16.0.22/8.16.0.22) with SMTP id w28FhtLo001565; Thu, 8 Mar 2018 15:44:04 GMT DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=akamai.com; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : mime-version; s=jan2016.eng; bh=FIb3b4h1SkjADh+rJ/52Jwf+6Hg9zfzRQybc6jUl4UE=; b=Nx0FL2Glonr7YKebTt27BmwZg7/RX35I4csx7EofbE/12yzrzAk9TyH40SLOaICGeSyC BTLAYjkWanPjpH/viaaLUsWMYoVtcLe79NsByAhHQ5kUOXuCWZPq6Oh0VHgP06ufXPq+ UJeSnfexgJnrJkBg2fZFD+LS8SbykR/JWH9gxWFwWFbYdVrnUS/ZDWq49QDJtSbmL+CU TrOgn5WPdt/00TfLbtfBMLnYHBIotyUjU1RXOwH3Q2OpFGijPDbQFLtg0lvBUOOXXDUp OjiFqMFyoKqz2bnt1nkWMs+8M/1zyaCwBCFu3eEesKPTAF4BvzkLkeiKJHE1UnibIvEQ sA== Received: from prod-mail-ppoint1 (prod-mail-ppoint1.akamai.com [184.51.33.18]) by m0050093.ppops.net-00190b01. with ESMTP id 2gk7gyg4st-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Thu, 08 Mar 2018 15:44:04 +0000 Received: from pps.filterd (prod-mail-ppoint1.akamai.com [127.0.0.1]) by prod-mail-ppoint1.akamai.com (8.16.0.21/8.16.0.21) with SMTP id w28FfOgZ004565; Thu, 8 Mar 2018 10:44:03 -0500 Received: from email.msg.corp.akamai.com ([172.27.123.31]) by prod-mail-ppoint1.akamai.com with ESMTP id 2gfqwytdtj-2 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT); Thu, 08 Mar 2018 10:44:03 -0500 Received: from USMA1EX-DAG1MB1.msg.corp.akamai.com (172.27.123.101) by usma1ex-dag1mb2.msg.corp.akamai.com (172.27.123.102) with Microsoft SMTP Server (TLS) id 15.0.1263.5; Thu, 8 Mar 2018 10:44:02 -0500 Received: from USMA1EX-DAG1MB1.msg.corp.akamai.com ([172.27.123.101]) by usma1ex-dag1mb1.msg.corp.akamai.com ([172.27.123.101]) with mapi id 15.00.1263.000; Thu, 8 Mar 2018 10:44:02 -0500 From: "Salz, Rich" To: Cullen Jennings , Adam Roach CC: Jonathan Rosenberg , "stir@ietf.org" Thread-Topic: [stir] SIPCoin - a new cryptocurrency for stopping robocalls Thread-Index: AQHTsngsiUThBAYi1UetPuh1gxBlM6O/iB+AgAccL4D//99QgA== Date: Thu, 8 Mar 2018 15:44:02 +0000 Message-ID: References: <64ca7065-a73d-ce53-d715-a5569823a3c2@nostrum.com> <9E1327D0-EEE7-4AFD-9E42-91A355683820@iii.ca> In-Reply-To: <9E1327D0-EEE7-4AFD-9E42-91A355683820@iii.ca> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.a.0.180210 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [172.19.35.57] Content-Type: multipart/alternative; boundary="_000_BC06113334F14FF882A03AA97B902A05akamaicom_" MIME-Version: 1.0 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:, , definitions=2018-03-08_09:, , signatures=0 X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 suspectscore=0 malwarescore=0 phishscore=0 bulkscore=0 spamscore=0 mlxscore=0 mlxlogscore=583 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1711220000 definitions=main-1803080181 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:, , definitions=2018-03-08_09:, , signatures=0 X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1011 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=518 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1711220000 definitions=main-1803080181 Archived-At: Subject: Re: [stir] SIPCoin - a new cryptocurrency for stopping robocalls X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 08 Mar 2018 15:44:06 -0000 --_000_BC06113334F14FF882A03AA97B902A05akamaicom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 TXkgZ3V0IHJlYWN0aW9uOiBwbGVhc2UgbGV04oCZcyBub3QgaGF2ZSB0aGUgSUVURiBkb2luZyBj cnlwdG8tY3VycmVuY3kuICBZZXMsIHRoaXMgaXMgYmFzZWQgb24gYWJzb2x1dGVseSBubyB0ZWNo bmljYWwgZGF0YSB3aGF0c29ldmVyLg0KDQo= --_000_BC06113334F14FF882A03AA97B902A05akamaicom_ Content-Type: text/html; charset="utf-8" Content-ID: <969FD740E95C6748AD190DF482F3E819@akamai.com> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2 IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToy IDE1IDUgMiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNvbnNvbGFz Ow0KCXBhbm9zZS0xOjIgMTEgNiA5IDIgMiA0IDMgMiA0O30NCi8qIFN0eWxlIERlZmluaXRpb25z ICovDQpwLk1zb05vcm1hbCwgbGkuTXNvTm9ybWFsLCBkaXYuTXNvTm9ybWFsDQoJe21hcmdpbjow aW47DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1m YW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0KYTpsaW5rLCBzcGFuLk1zb0h5cGVybGluaw0K CXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6Ymx1ZTsNCgl0ZXh0LWRlY29yYXRpb246 dW5kZXJsaW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29IeXBlcmxpbmtGb2xsb3dlZA0KCXttc28t c3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6cHVycGxlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRl cmxpbmU7fQ0KcHJlDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgltc28tc3R5bGUtbGluazoi SFRNTCBQcmVmb3JtYXR0ZWQgQ2hhciI7DQoJbWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4w MDAxcHQ7DQoJZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseToiQ291cmllciBOZXciO30N CnAubXNvbm9ybWFsMCwgbGkubXNvbm9ybWFsMCwgZGl2Lm1zb25vcm1hbDANCgl7bXNvLXN0eWxl LW5hbWU6bXNvbm9ybWFsOw0KCW1zby1tYXJnaW4tdG9wLWFsdDphdXRvOw0KCW1hcmdpbi1yaWdo dDowaW47DQoJbXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87DQoJbWFyZ2luLWxlZnQ6MGluOw0K CWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0K c3Bhbi5IVE1MUHJlZm9ybWF0dGVkQ2hhcg0KCXttc28tc3R5bGUtbmFtZToiSFRNTCBQcmVmb3Jt YXR0ZWQgQ2hhciI7DQoJbXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1zdHlsZS1saW5rOiJI VE1MIFByZWZvcm1hdHRlZCI7DQoJZm9udC1mYW1pbHk6Q29uc29sYXM7fQ0Kc3Bhbi5FbWFpbFN0 eWxlMjANCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWwtcmVwbHk7DQoJZm9udC1mYW1pbHk6IkNh bGlicmkiLHNhbnMtc2VyaWY7DQoJY29sb3I6d2luZG93dGV4dDt9DQouTXNvQ2hwRGVmYXVsdA0K CXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25seTsNCglmb250LXNpemU6MTAuMHB0O30NCkBwYWdl IFdvcmRTZWN0aW9uMQ0KCXtzaXplOjguNWluIDExLjBpbjsNCgltYXJnaW46MS4waW4gMS4waW4g MS4waW4gMS4waW47fQ0KZGl2LldvcmRTZWN0aW9uMQ0KCXtwYWdlOldvcmRTZWN0aW9uMTt9DQot LT48L3N0eWxlPg0KPC9oZWFkPg0KPGJvZHkgbGFuZz0iRU4tVVMiIGxpbms9ImJsdWUiIHZsaW5r PSJwdXJwbGUiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPk15IGd1dCByZWFjdGlvbjogcGxlYXNlIGxldOKAmXMgbm90IGhhdmUgdGhlIElFVEYgZG9p bmcgY3J5cHRvLWN1cnJlbmN5LjxhIG5hbWU9Il9NYWlsT3JpZ2luYWxCb2R5Ij4mbmJzcDsgWWVz LCB0aGlzIGlzIGJhc2VkIG9uIGFic29sdXRlbHkgbm8gdGVjaG5pY2FsIGRhdGEgd2hhdHNvZXZl ci48bzpwPjwvbzpwPjwvYT48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i bXNvLWJvb2ttYXJrOl9NYWlsT3JpZ2luYWxCb2R5Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48 L3A+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_BC06113334F14FF882A03AA97B902A05akamaicom_-- From nobody Thu Mar 8 07:52:48 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 33891124207 for ; Thu, 8 Mar 2018 07:52:46 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=team.neustar Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vqMfdP_XiEa9 for ; Thu, 8 Mar 2018 07:52:44 -0800 (PST) Received: from mx0b-0018ba01.pphosted.com (mx0a-0018ba01.pphosted.com [67.231.149.94]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 501CA12702E for ; Thu, 8 Mar 2018 07:52:44 -0800 (PST) Received: from pps.filterd (m0078666.ppops.net [127.0.0.1]) by mx0a-0018ba01.pphosted.com (8.16.0.22/8.16.0.22) with SMTP id w28FiXEn025573; Thu, 8 Mar 2018 10:52:41 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=team.neustar; h=from : to : subject : date : message-id : references : in-reply-to : content-type : mime-version; s=selector1; bh=RoSx7iijq0sUV8XhLTZ01rrf1VgLouKgAnue4AoKP90=; b=JMEl+wYF1y9r6eaVlim63eWHB5JKCWj4dv7AIcKWABbNnhLmfV0RuF6sF6ouhyIY+bWh 9lcVhIqYQsW25OhSzlJHyqK3wUihLFY4gJ7H+uZRlHaiVGGFZdy0WzZ5Tw7jfro1rOQ4 fa93my9eUcO26f8v47y0u/dOxDI+6yRZiP6gS6XN6qFi+0s5QZDhvnoZM+NtWBRAG3xr gin734wtgXgZhK64tpG6bGj7/GI/NF6Redzim7Fta6xmymDECau8CCsZBdZ30LHWjFdq vI7BcXyHZK5gL6RZrU5XY7htPCanKSwR7Vb+zI1VEp8PF/0ysLpaxIsx63NjfRAo4noh hw== Received: from stntexhc11.cis.neustar.com ([156.154.17.216]) by mx0a-0018ba01.pphosted.com with ESMTP id 2gfrpu8pfn-1 (version=TLSv1 cipher=ECDHE-RSA-AES256-SHA bits=256 verify=NOT); Thu, 08 Mar 2018 10:52:41 -0500 Received: from STNTEXMB11.cis.neustar.com ([169.254.1.236]) by stntexhc11.cis.neustar.com ([::1]) with mapi id 14.03.0279.002; Thu, 8 Mar 2018 10:52:39 -0500 From: "Peterson, Jon" To: Christer Holmberg , "stir@ietf.org" Thread-Topic: Editorial comments on sections 3 and 4 of draft-ietf-stir-passport-divert-02 [was: drafts for london] Thread-Index: AdO1leYBWf6vwV0+R0KzweYvSCipPgBRn8mA Date: Thu, 8 Mar 2018 15:52:39 +0000 Message-ID: References: <7594FB04B1934943A5C02806D1A2204B6C1C59A6@ESESSMB109.ericsson.se> In-Reply-To: <7594FB04B1934943A5C02806D1A2204B6C1C59A6@ESESSMB109.ericsson.se> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.6.3.160329 x-originating-ip: [10.96.12.91] Content-Type: multipart/alternative; boundary="_000_D6C6958B1FAAE7jonpetersonneustarbiz_" MIME-Version: 1.0 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:, , definitions=2018-03-08_09:, , signatures=0 X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1011 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1711220000 definitions=main-1803080181 Archived-At: Subject: Re: [stir] Editorial comments on sections 3 and 4 of draft-ietf-stir-passport-divert-02 [was: drafts for london] X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 08 Mar 2018 15:52:46 -0000 --_000_D6C6958B1FAAE7jonpetersonneustarbiz_ Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable Thanks for the notes Christer, this is getting down to the level of detaile= d review that we need. Q1: Throughout the document, you use different terminology for the claims. You = at least use =93claim=94, =93array=94, =93field=94. I suggest to always use =93claim=94, i.e., =93div=94 claim, =93dest=94 clai= m etc. The fact that a claim might be an array is an encoding issue. I do kind of like reminding people that the contents of "dest" are an array= . "field" I agree isn't very helpful though. There may still be a couple ti= mes in the document where I might want to continue referring to "dest" as a= n array. I'll try to keep that to a minimum. Q2: Throughout the document, you talk about =93div=94 PASSporT, =93div=94 PASSp= orT type, etc. Please don=92t use the same name for the claim and the PASSPorT. Instead sa= y something like =93to the PASSporT carrying the =93div=94 claim=94, =93the= diversion PASSporT=94, or something like that. I can do that: saying "'div' claim" and "diversion PASSporT." Q3: Throughout the document, the text talks about =93original PASSPorT=94. Since there might be (at least in theory) multiple incoming PASSPorTs you n= eed to define what =93original=94 means. Definitely the language needs to take into account that there can be multip= le "original" PASSporTs. But I hesitate to just replace "original" with a s= ynonym like "incoming." I'd like the language here to be generic enough to = apply to in-band and out-of-band cases, so I don't want to define in terms = like "found in the INVITE" or whatever. Terminology is tough here, I'll try= to fix the language here up a bit. Q4: The text in Section 3 says: =93A PASSporT claims object containing "div"=94 I don=92t think we need to say =93claims object=94. It is enough to just ta= lk about PASSPorT (you do that elsewhere). I do think it is useful sometimes to distinguish between the header and the= claims, but I can avoid the specific construction "claims object" if peopl= e think it is confusing. "JOSE header" and "JWT claims set" seem to be the = terms used in RFC7519. Q5: The text in Section 3 says: =93These new PASSporT generated by retargeting entities MUST include the "d= iv" PASSporT type,..=94 Please explicitly indicate which header field includes the =93div=94 type (= i.e., the =93ppt=94) While I don't think this is confusing in the text, no harm in saying that e= xplicitly. Q6: The text in Section 3 says: =93=85for all PASSporTs using the "div" type the signature MUST be created with a credential with authority over the identity present in the "div" claim. So for the example above, where the original "dest" is "12155551213", the signer of the new PASSporT object MUST have authority over that telephone number,=85=94 I think the text can be clarified in the following way: =93=85for all PASSporTs using the "div" type the signature MUST be created with a credential with authority over the identity present in the "div" claim, which means that the signer MUST have authority over the =93dest=94 claim in the original PASSporT.=94 Because, I think this is a generic normative statement, not just a descript= ion of an example. Agreed it is a blunder to have a normative statement in an example. I think= we still do want an example and a normative statement, I'll separate them = out. Q7: The text in Section 4.1. says: =93An authentication service only adds an Identity header field containing the "div" PASSporT type to an SIP request that already contains at least one Identity header field; it MUST NOT add a "div" request to an INVITE that contains no other Identity headers fields.=94 Is there a reason why you first say =93SIP request=94 and then =93INVITE=94= ? Can=92t the =93it MUST NOT add=85=94 part be removed? Agreed that "INVITE" there should be the more generic "request." The previo= us statement is not normative, though, so I'd hesitate to remove the normat= ive statement entirely. Q8: In Section 4, when the new PASSPorT has been created and added to a SIP mes= sage, we need to clarify where the associated Identity header field is loca= ted in relation to other Identity header fields. Alt A: Identity: incoming_PASSPorT Identity: div_PASSPorT Alt B: Identity: div_PASSPorT Identity: incoming_PASSPorT Hmm. Do we think that intermediaries will always preserve the order of thes= e headers? I guess we could order them in the hopes that they will. But aga= in, I think we should provide a means that lets verification services look = at the PASSporTs associated with a request and figure out how they are rela= ted. That discussion is how we ended up with nesting in the first place. Ri= ght now we only RECOMMEND that implementations use nesting for in-band, unt= il we get some more input on the header size question, but we need to do so= mething here to make it clear how PASSporTs are ordered. Maybe "iat" helps?= A few possibilities. Thanks! Jon Peterson Neustar, Inc. --_000_D6C6958B1FAAE7jonpetersonneustarbiz_ Content-Type: text/html; charset="Windows-1252" Content-ID: <0B977A8C927AC842836C8AA11D008AE9@neustar.biz> Content-Transfer-Encoding: quoted-printable

Thanks for the notes Christer, this is getting down to the level of de= tailed review that we need.

Q1:

 = ;

Throughout= the document, you use different terminology for the claims. You at least u= se =93claim=94, =93array=94, =93field=94.

 = ;

I suggest = to always use =93claim=94, i.e., =93div=94 claim, =93dest=94 claim etc.

 = ;

The fact t= hat a claim might be an array is an encoding issue.

I do kind of like reminding people that the contents of "dest&quo= t; are an array. "field" I agree isn't very helpful though. There= may still be a couple times in the document where I might want to continue= referring to "dest" as an array. I'll try to keep that to a minimum.

 = ;Q2:

 = ;

Throughout= the document, you talk about =93div=94 PASSporT, =93div=94 PASSporT type, = etc.

 = ;

Please don= =92t use the same name for the claim and the PASSPorT. Instead say somethin= g like =93to the PASSporT carrying the =93div=94 claim=94, =93the diversion PASSporT=94, or something like that.

I can do that: saying "'div' claim" and "diversion PASS= porT."

Q3:

 = ;

Throughout= the document, the text talks about =93original PASSPorT=94.

 = ;

Since ther= e might be (at least in theory) multiple incoming PASSPorTs you need to def= ine what =93original=94 means.

Definitely the language needs to take into account that there can be m= ultiple "original" PASSporTs. But I hesitate to just replace &quo= t;original" with a synonym like "incoming." I'd like the lan= guage here to be generic enough to apply to in-band and out-of-band cases, so I don't want to define in terms like "found in the INVITE&q= uot; or whatever. Terminology is tough here, I'll try to fix the language h= ere up a bit.

 = ;Q4:

 = ;

The text i= n Section 3 says:

 = ;

=93A PASSp= orT claims object containing "div"=94

 = ;

I don=92t = think we need to say =93claims object=94. It is enough to just talk about P= ASSPorT (you do that elsewhere).

I do think it is useful sometimes to distinguish between the header an= d the claims, but I can avoid the specific construction "claims object= " if people think it is confusing. "JOSE header" and "J= WT claims set" seem to be the terms used in RFC7519.

 = ;Q5:

 = ;

The text i= n Section 3 says:

 = ;

=93These n= ew PASSporT generated by retargeting entities MUST include the "div&qu= ot; PASSporT type,..=94

 = ;

Please exp= licitly indicate which header field includes the =93div=94 type (i.e., the = =93ppt=94)

While I don't think this is confusing in the text, no harm in saying t= hat explicitly.

 = ;Q6:

 = ;

The text i= n Section 3 says:

 = ;

 &nbs= p; =93=85for all PASSporTs using the "div" type the

 &nbs= p; signature MUST be created with a credential with authority over the=

 &nbs= p; identity present in the "div" claim.  So for the example = above, where

 &nbs= p; the original "dest" is "12155551213", the signer of = the new PASSporT

 &nbs= p; object MUST have authority over that telephone number,=85=94<= /span>

 = ;

I think th= e text can be clarified in the following way:

 = ;

 &nbs= p; =93=85for all PASSporTs using the "div" type the

 &nbs= p; signature MUST be created with a credential with authority over the=

 &nbs= p; identity present in the "div" claim, which means that the sign= er MUST

 &nbs= p; have authority over the =93dest=94 claim in the original PASSporT.=94

 = ;

Because, I= think this is a generic normative statement, not just a description of an = example.

Agreed it is a blunder to have a normative statement in an example. I = think we still do want an example and a normative statement, I'll separate = them out.

Q7:

 = ;

The text i= n Section 4.1. says:

 = ;

   =93An authentication service only adds an Identi= ty header field

   containing the "div" PASSporT type to = an SIP request that already

   contains at least one Identity header field; it = MUST NOT add a "div"

   request to an INVITE that contains no other Iden= tity headers fields.=94

 

Is there a= reason why you first say =93SIP request=94 and then =93INVITE=94? Can=92t = the =93it MUST NOT add=85=94 part be removed?

Agreed that "INVITE" there should be the more generic "= request." The previous statement is not normative, though, so I'd hesi= tate to remove the normative statement entirely.

Q8:

 = ;

In Section= 4, when the new PASSPorT has been created and added to a SIP message, we n= eed to clarify where the associated Identity header field is located in relation to other Identity header fields.

 = ;

Alt A:

 = ;

Identity: = incoming_PASSPorT

Identity: = div_PASSPorT

 = ;

Alt B:

 = ;

Identity: = div_PASSPorT

Identity: = incoming_PASSPorT 

Hmm. Do we think that intermediaries will always preserve the order of= these headers? I guess we could order them in the hopes that they will. Bu= t again, I think we should provide a means that lets verification services = look at the PASSporTs associated with a request and figure out how they are related. That discussion is how= we ended up with nesting in the first place. Right now we only RECOMMEND t= hat implementations use nesting for in-band, until we get some more input o= n the header size question, but we need to do something here to make it clear how PASSporTs are ordered. M= aybe "iat" helps? A few possibilities.

Thanks!

Jon Peterson
Neustar, Inc.
--_000_D6C6958B1FAAE7jonpetersonneustarbiz_-- From nobody Thu Mar 8 11:05:39 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B551812711D for ; Thu, 8 Mar 2018 11:05:37 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.321 X-Spam-Level: X-Spam-Status: No, score=-4.321 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LsGWE0fgQlgC for ; Thu, 8 Mar 2018 11:05:35 -0800 (PST) Received: from sessmg22.ericsson.net (sessmg22.ericsson.net [193.180.251.58]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8CEBA127076 for ; Thu, 8 Mar 2018 11:05:35 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; d=ericsson.com; s=mailgw201801; c=relaxed/simple; q=dns/txt; i=@ericsson.com; t=1520535933; h=From:Sender:Reply-To:Subject:Date:Message-ID:To:Cc:MIME-Version:Content-Type: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=e4vPFiWi1wm4/sZewGrrathY3lhqCEascFNY5HPkjok=; b=d96/ktPCz/Bs4vaSyRrYTmFiSBZ+KAa6V8IUqsApJbZP+QrtPTMTczG7B/ZoJaG6 NnkEJFvsrHIaj17L8ScWQ3bG7fkBJiG4ZV2yqnb5gcL8+q7Ib7UiL7yzCswBTOKu 9bsIFGZ0KRsxObeu0EFDPFNSBB8YtKOAYBFZKf3ld6Y=; X-AuditID: c1b4fb3a-728f89c0000067b4-90-5aa1897dffa0 Received: from ESESSHC021.ericsson.se (Unknown_Domain [153.88.183.81]) by sessmg22.ericsson.net (Symantec Mail Security) with SMTP id 61.48.26548.D7981AA5; Thu, 8 Mar 2018 20:05:33 +0100 (CET) Received: from ESESSMB109.ericsson.se ([169.254.9.82]) by ESESSHC021.ericsson.se ([153.88.183.81]) with mapi id 14.03.0352.000; Thu, 8 Mar 2018 20:04:45 +0100 From: Christer Holmberg To: "Peterson, Jon" , "stir@ietf.org" Thread-Topic: Editorial comments on sections 3 and 4 of draft-ietf-stir-passport-divert-02 [was: drafts for london] Thread-Index: AdO1leYBWf6vwV0+R0KzweYvSCipPgBRn8mAAAsJWAA= Date: Thu, 8 Mar 2018 19:04:45 +0000 Message-ID: <7594FB04B1934943A5C02806D1A2204B6C1CBA0C@ESESSMB109.ericsson.se> References: <7594FB04B1934943A5C02806D1A2204B6C1C59A6@ESESSMB109.ericsson.se> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [153.88.183.165] Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFnrPLMWRmVeSWpSXmKPExsUyM2J7oG5t58Iog6tXTS02P1vDZLF87TYm ByaPJUt+Mnm83jCHPYApissmJTUnsyy1SN8ugSvj1cpX7AXTzCoe/JnK2sD4WauLkZNDQsBE 4svENWxdjFwcQgKHGSUWdG+BchYxSrx8foG5i5GDg03AQqL7nzZIg4hAkMTc3/3sILawQInE pnkH2CHipRJ7bx9kgbCtJP7/bGEEsVkEVCRefN7IBmLzCvhKLP2zhwVkpJBAlUTjYmeQMKeA uUTTlnOsIDajgJjE91NrmEBsZgFxiVtP5jNB3CkgsWTPeWYIW1Ti5eN/rBC2ksSsWxuh6vUk bkydwgZha0ssW/iaGWKtoMTJmU9YJjCKzEIydhaSlllIWmYhaVnAyLKKUbQ4tbg4N93ISC+1 KDO5uDg/Ty8vtWQTIzAaDm75bbWD8eBzx0OMAhyMSjy869oWRgmxJpYVV+YeYpTgYFYS4e3N BgrxpiRWVqUW5ccXleakFh9ilOZgURLndUqziBISSE8sSc1OTS1ILYLJMnFwSjUwrrJ4rrFd ZEt/bIDUg5fGB+vW/fZ+3FRb0N6m/8fTbm19t++hUwEMS3wiDosc3H5KXMw1YX3A97c7S7ut S71FypQ2GlRZiFTnfk1fKBG92Gzf5QW9roXf9LZvPSvl79Qa67c6+fz0azZaoQeyHl2o550c sWPDO6cI2arprExfdR/3icUyrfqlxFKckWioxVxUnAgAhSbshYICAAA= Archived-At: Subject: Re: [stir] Editorial comments on sections 3 and 4 of draft-ietf-stir-passport-divert-02 [was: drafts for london] X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 08 Mar 2018 19:05:38 -0000 Hi Jon, Please see inline. Q1: =A0 >>Throughout the document, you use different terminology for the claims. Yo= u at least use "claim", "array", "field". >>=A0 >>I suggest to always use "claim", i.e., "div" claim, "dest" claim etc.=20 =A0>> >>The fact that a claim might be an array is an encoding issue. > > I do kind of like reminding people that the contents of "dest" are an arr= ay. "field" I agree isn't very helpful though. There=20 > may still be a couple times in the document where I might want to continu= e referring to "dest" as an array. I'll try to keep > that to a minimum. My suggestion would be to use "dest" claim, but somewhere point out that it= is an array. --- Q2: =A0 >> Throughout the document, you talk about "div" PASSporT, "div" PASSporT t= ype, etc. >>=A0 >> Please don't use the same name for the claim and the PASSPorT. Instead s= ay something like "to the PASSporT=20 >> carrying the "div" claim", "the diversion PASSporT", or something like t= hat. > > I can do that: saying "'div' claim" and "diversion PASSporT." Sounds good :) --- Q3: =A0 >> Throughout the document, the text talks about "original PASSPorT". >>=A0 >> Since there might be (at least in theory) multiple incoming PASSPorTs yo= u need to define what "original" means. > > Definitely the language needs to take into account that there can be mult= iple "original" PASSporTs. But I hesitate to just=20 > replace "original" with a synonym like "incoming." I'd like the language = here to be generic enough to apply to in-band=20 > and out-of-band cases, so I don't want to define in terms like "found in = the INVITE" or whatever. Terminology is tough > here, I'll try to fix the language here up a bit. My suggestion is not to replace "original" with "incoming". The issue is th= at, if there are multiple incoming PASSporTs, which of them is the "origina= l". I do agree that we sould not talk about INVITEs etc in Section 3 (we can de= fine the SIP specific details in Section 4). --- =A0Q4: =A0 >> The text in Section 3 says: >>=A0 >> "A PASSporT claims object containing "div"" >> >> I don't think we need to say "claims object". It is enough to just talk = about PASSPorT (you do that elsewhere). > > I do think it is useful sometimes to distinguish between the header and t= he claims, but I can avoid the specific=20 > construction "claims object" if people think it is confusing. "JOSE heade= r" and "JWT claims set" seem to be the terms used in RFC7519. Yes. If you need to be explicit of whether you refer to the header or the c= laims, we can use those words. But, in general, if are e.g., talking about a claim, you don't need to say = that it is the "JWT claims set". That is defined in the base PASSporT speci= fication. --- Q5: =A0 >> The text in Section 3 says: >>=A0 >> "These new PASSporT generated by retargeting entities MUST include the "= div" PASSporT type,.." >>=A0 >> Please explicitly indicate which header field includes the "div" type (i= .e., the "ppt") > > While I don't think this is confusing in the text, no harm in saying that= explicitly. Alternatively, based on Q2, you can say "new diversion PASSporT generated b= y the retargeting entities...". Then it is implicit that the type is "div",= because that is specified elsewhere. --- Q6: =A0 >> The text in Section 3 says: >>=A0 >>=A0=A0 ".for all PASSporTs using the "div" type the >>=A0=A0 signature MUST be created with a credential with authority over th= e >>=A0=A0 identity present in the "div" claim.=A0 So for the example above, = where >>=A0=A0 the original "dest" is "12155551213", the signer of the new PASSpo= rT >>=A0=A0 object MUST have authority over that telephone number,." >>=A0 >> I think the text can be clarified in the following way: >>=A0 >>=A0 ".for all PASSporTs using the "div" type the >>=A0=A0 signature MUST be created with a credential with authority over th= e >>=A0=A0 identity present in the "div" claim, which means that the signer M= UST >>=A0=A0 have authority over the "dest" claim in the original PASSporT." >>=A0 >> Because, I think this is a generic normative statement, not just a descr= iption of an example. > > Agreed it is a blunder to have a normative statement in an example. I thi= nk we still do want an example=20 > and a normative statement, I'll separate them out. Thanks! --- Q7: =A0 >> The text in Section 4.1. says: >>=A0 >>=A0=A0 "An authentication service only adds an Identity header field >>=A0=A0 containing the "div" PASSporT type to an SIP request that already >>=A0=A0 contains at least one Identity header field; it MUST NOT add a "di= v" >>=A0=A0 request to an INVITE that contains no other Identity headers field= s." >>=A0 >> Is there a reason why you first say "SIP request" and then "INVITE"? Can= 't the "it MUST NOT add." part be removed? > > Agreed that "INVITE" there should be the more generic "request." The prev= ious statement is not normative, though, so I'd hesitate=20 > to remove the normative statement entirely. Ok. --- Q8: =A0 >> In Section 4, when the new PASSPorT has been created and added to a SIP = message, we need to clarify where the=20 >> associated Identity header field is located in relation to other Identit= y header fields. >>=A0 >> Alt A: >> >> Identity: incoming_PASSPorT >> Identity: div_PASSPorT >>=A0 >> Alt B: >>=A0 >> Identity: div_PASSPorT >> Identity: incoming_PASSPorT=A0 > > Hmm. Do we think that intermediaries will always preserve the order of th= ese headers? > I guess we could order them in the hopes that they will. But again, I thi= nk we should provide a means that lets verification=20 > services look at the PASSporTs associated with a request and figure out h= ow they are related. That discussion is how we ended=20 > up with nesting in the first place. Right now we only RECOMMEND that impl= ementations use nesting for in-band, until we get=20 > some more input on the header size question, but we need to do something = here to make it clear how PASSporTs are ordered.=20 > Maybe "iat" helps? A few possibilities. My assumption has been that the order MUST be preserved (similar to Record-= Route, Route etc), but that we need to specify where new Identity header fi= elds are placed in relation to the existing headers. Because, if we at some= point come up with a use-case where the order matters, we could end up wit= h problem.=20 Regarding nesting, if there are multiple incoming Identity header fields, t= he text needs to be clear which of them (or all of them) are nested, and ho= w it is done. The text currently says that the "original" PASSporT is neste= d, so I assume this is related to my question on which PASSporT (if multipl= e) "original" refers to. Regards, Christer From nobody Fri Mar 9 00:04:47 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 88AD6129C51 for ; Fri, 9 Mar 2018 00:04:45 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.319 X-Spam-Level: X-Spam-Status: No, score=-4.319 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2NAGt9kE175M for ; Fri, 9 Mar 2018 00:04:43 -0800 (PST) Received: from sesbmg23.ericsson.net (sesbmg23.ericsson.net [193.180.251.37]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 66FF5124D6C for ; Fri, 9 Mar 2018 00:04:43 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; d=ericsson.com; s=mailgw201801; c=relaxed/simple; q=dns/txt; i=@ericsson.com; t=1520582681; h=From:Sender:Reply-To:Subject:Date:Message-ID:To:Cc:MIME-Version:Content-Type: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=iw9nO3AQ2Zqk6JOy6caXnymmdBxEdzKUnu8/36PaK2o=; b=QRqaf53B8a6QQsDHbNoDXT50wyWi71S0BKyIjy7evrL29HDmUv+Cxl901bnX8aNx 2vwfq0eEq0SLBpUZOhxWA18+K7PE1Ar/4DRGkaq31Q2HtMWg6zSAcw9ajw4mYLsD 51EkUiRt0rjcsZ4SbGBGHQuhTeIVHBZv6UVnQ9MKyeE=; X-AuditID: c1b4fb25-44ba69c000002d5f-c4-5aa240195927 Received: from ESESSHC015.ericsson.se (Unknown_Domain [153.88.183.63]) by sesbmg23.ericsson.net (Symantec Mail Security) with SMTP id 69.29.11615.91042AA5; Fri, 9 Mar 2018 09:04:41 +0100 (CET) Received: from ESESSMB109.ericsson.se ([169.254.9.82]) by ESESSHC015.ericsson.se ([153.88.183.63]) with mapi id 14.03.0352.000; Fri, 9 Mar 2018 09:04:23 +0100 From: Christer Holmberg To: Jonathan Rosenberg , "stir@ietf.org" Thread-Topic: [stir] SIPCoin - a new cryptocurrency for stopping robocalls Thread-Index: AQHTsngsEK327nuRBku2BpszDXKfIKPHpk2A Date: Fri, 9 Mar 2018 08:04:22 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.7.7.170905 x-originating-ip: [153.88.183.18] Content-Type: multipart/alternative; boundary="_000_D6C80BB42C5E1christerholmbergericssoncom_" MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprHIsWRmVeSWpSXmKPExsUyM2K7va6kw6Iog4udehbNz5exWyxfu43J gcljyZKfTB6t62cyBjBFcdmkpOZklqUW6dslcGVMf2xXcE6rYsekRrYGxv0qXYycHBICJhI/ v8xn6mLk4hASOMwo0btvGQuEs4hR4vKZQ0AOBwebgIVE9z9tkAYRAV+JS6fuMYOEhQU8JXZe TYIIe0l8Xr+VDcI2klhy+A8TiM0ioCLR++Y9M4jNK2At0brgASOILSQQILHt2nYwm1MgUGLO goksIDajgJjE91NrwHqZBcQlbj2ZzwRxp4DEkj3nmSFsUYmXj/+xgtiiAnoSG07cZoeIK0p8 fLWPEaI3QWLvkRaovYISJ2c+YZnAKDILydhZSMpmISmDiOtILNj9iQ3C1pZYtvA1M4x95sBj qF5rieO/dzMhq1nAyLGKUbQ4tTgpN93IWC+1KDO5uDg/Ty8vtWQTIzDWDm75rbqD8fIbx0OM AhyMSjy8xdqLooRYE8uKK3MPMUpwMCuJ8J5auTBKiDclsbIqtSg/vqg0J7X4EKM0B4uSOO8c 4fYoIYH0xJLU7NTUgtQimCwTB6dUA2PK6RhnH38/6ZX6cq1hAprrKt/8TPiu7OUs0FByyCTn 69JT2Wy3ypXtrrZY3/tXMSdckdsy6OWep1+/qLGv0WzqLJ1rNkNC71hHpjab0CLNoNq/ekXZ OocdJR4dV07/sHJT85bb+3m8VgpFpydftpshtfUZ87EHVrVr/6zkYOl6zhyTfuH+XCWW4oxE Qy3mouJEAFK38T6xAgAA Archived-At: Subject: Re: [stir] SIPCoin - a new cryptocurrency for stopping robocalls X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 09 Mar 2018 08:04:46 -0000 --_000_D6C80BB42C5E1christerholmbergericssoncom_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi, Is the idea that SIPCoin would be built using some existing blockchain plat= form, or would we define a whole new blockchain platform from scratch for S= IPCoin? Regards, Christer From: stir > on behalf = of "jdrosen@jdrosen.net" > Date: Saturday 3 March 2018 at 00:45 To: "stir@ietf.org" > Subject: [stir] SIPCoin - a new cryptocurrency for stopping robocalls Cullen and I have just submitted this: https://www.ietf.org/id/draft-rosenberg-stir-sipcoin-00.txt which is a proposal for a new type of cyryptocurrency dedicated solely to p= reventing spam on the SIP-based phone network. It is designed to be fast, c= ausing less than one second increases in call setup time. NOn-transferrable= to avoid being a tool for fraud and avoid being tied to market whim; backe= d by public CAs with a new type of centralized ledger validation; trivially= verifiable by receivers of calls. Also we suggest a technique for incremen= tal deployment on the PSTN which has incremental benefits and economic bene= fits for each deployment phase. We've done some analysis on the economics t= o help motivate the solution. WHen combined with our previous draft, and some nice whitelisting thrown in= as described in here, I think this is a very interested technique to put t= his robocalling plague to rest. I'm coming to London and looking forward to discussing. Comments are, of course, welcome. -- Jonathan Rosenberg, Ph.D. jdrosen@jdrosen.net http://www.jdrosen.net --_000_D6C80BB42C5E1christerholmbergericssoncom_ Content-Type: text/html; charset="us-ascii" Content-ID: <64D7FC9E24B84A4EA7DA2D767015F800@ericsson.com> Content-Transfer-Encoding: quoted-printable
Hi,

Is the idea that SIPCoin would be built using some existing blockchain= platform, or would we define a whole new blockchain platform from scratch = for SIPCoin?

Regards,

Christer


From: stir <stir-bounces@ietf.org> on behalf of "jdrosen@jdrosen.net" <jdrosen@jdrosen.net>
Date: Saturday 3 March 2018 at 00:4= 5
To: "stir@ietf.org" <stir@i= etf.org>
Subject: [stir] SIPCoin - a new cry= ptocurrency for stopping robocalls

which is a proposal for a new type of cyryptocurrency dedicated solely to p= reventing spam on the SIP-based phone network. It is designed to be fast, c= ausing less than one second increases in call setup time. NOn-transferrable= to avoid being a tool for fraud and avoid being tied to market whim; backed by public CAs with a new type = of centralized ledger validation; trivially verifiable by receivers of call= s. Also we suggest a technique for incremental deployment on the PSTN which= has incremental benefits and economic benefits for each deployment phase. We've done some analysis on the econom= ics to help motivate the solution.

WHen combined with our previous draft, and some nice whitelisting thrown in= as described in here, I think this is a very interested technique to put t= his robocalling plague to rest.

I'm coming to London and looking forward to discussing.

Comments are, of course, welcome.

--
--_000_D6C80BB42C5E1christerholmbergericssoncom_-- From nobody Fri Mar 9 13:02:40 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DED69120047 for ; Fri, 9 Mar 2018 13:02:39 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Zvf7mNxZMwDQ for ; Fri, 9 Mar 2018 13:02:39 -0800 (PST) Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D0CAE124F57 for ; Fri, 9 Mar 2018 13:02:38 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id B4C6C3005D9 for ; Fri, 9 Mar 2018 16:02:36 -0500 (EST) X-Virus-Scanned: amavisd-new at mail.smeinc.net Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id Bb5-X3FwLKnr for ; Fri, 9 Mar 2018 16:02:35 -0500 (EST) Received: from a860b60074bd.home (pool-108-45-101-150.washdc.fios.verizon.net [108.45.101.150]) by mail.smeinc.net (Postfix) with ESMTPSA id 9DD75300590; Fri, 9 Mar 2018 16:02:35 -0500 (EST) From: Russ Housley Message-Id: <60DBC9ED-9ECD-45D6-AE8C-A8259630BE3B@vigilsec.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_43ADD67C-23CB-47BF-B513-059F528D1A0E" Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\)) Date: Fri, 9 Mar 2018 16:02:36 -0500 In-Reply-To: Cc: IETF STIR Mail List To: Adam Roach References: <7594FB04B1934943A5C02806D1A2204B6C135F8E@ESESSMB109.ericsson.se> <7594FB04B1934943A5C02806D1A2204B6C153849@ESESSMB109.ericsson.se> <0981B4BB-98C6-4DBB-8E13-A702944ACC3E@gmail.com> X-Mailer: Apple Mail (2.3273) Archived-At: Subject: Re: [stir] AD Review: draft-ietf-stir-rph-02 - authority to assert the callers identity assumed? X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 09 Mar 2018 21:02:40 -0000 --Apple-Mail=_43ADD67C-23CB-47BF-B513-059F528D1A0E Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii Adam: Revision -03 was posted on Feb. 1st. Can you tell us whether yout = comments have been addresses with this revision? Russ= --Apple-Mail=_43ADD67C-23CB-47BF-B513-059F528D1A0E Content-Transfer-Encoding: 7bit Content-Type: text/html; charset=us-ascii Adam:

Revision -03 was posted on Feb. 1st.  Can you tell us whether yout comments have been addresses with this revision?

Russ
--Apple-Mail=_43ADD67C-23CB-47BF-B513-059F528D1A0E-- From nobody Fri Mar 9 13:25:13 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9836F12783A for ; Fri, 9 Mar 2018 13:25:12 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JwzJzwClsI30 for ; Fri, 9 Mar 2018 13:25:11 -0800 (PST) Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 85CFB124F57 for ; Fri, 9 Mar 2018 13:25:11 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id 7CF863005E0 for ; Fri, 9 Mar 2018 16:25:09 -0500 (EST) X-Virus-Scanned: amavisd-new at mail.smeinc.net Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id WE9sEQ3jqoJH for ; Fri, 9 Mar 2018 16:25:08 -0500 (EST) Received: from a860b60074bd.home (pool-108-45-101-150.washdc.fios.verizon.net [108.45.101.150]) by mail.smeinc.net (Postfix) with ESMTPSA id 3DB8730044B for ; Fri, 9 Mar 2018 16:25:08 -0500 (EST) From: Russ Housley Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\)) Message-Id: Date: Fri, 9 Mar 2018 16:25:08 -0500 To: IETF STIR Mail List X-Mailer: Apple Mail (2.3273) Archived-At: Subject: [stir] DRAFT STIR Agenda for London X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 09 Mar 2018 21:25:12 -0000 We only have 1 hour. We received more speaking slots than we expected. = I have ordered the speaking slots to put priority on the active WG = documents. Time will be VERY tight. For the active WG documents, please focus on the changes since Singapore = and open issues. For the other documents, please introduce the high-level concept, and = then as the WG for advice on the way forward. Russ =3D =3D =3D =3D =3D =3D =3D =3D =3D STIR WG Agenda for IETF 101 Thursday, 22 March 2018 at 11:00 AM Co-chairs: Robert Sparks and Russ Housley 0) Minute Taker, Jabber Scribe, Bluesheets 1) Agenda Bash 2) Documents that have been sent to the IESG a) 5 min : draft-ietf-stir-rph-03 (Ray, Martin, Subir, and An) 3) Active Working Group Documents a) 10 min : draft-ietf-stir-passport-shaken-01 (Chris and Mary) b) 10 min : draft-ietf-stir-passport-divert-02 (Jon) c) 10 min : draft-ietf-stir-oob-02 (EKR and Jon) 4) Other Business (if time allows) a) 5 min : draft-burger-stir-iana-cert-00 (Eric) b) 5 min : draft-peterson-stir-rfc4916-update-00 (Jon and Chris) c) 5 min : draft-rosenberg-stir-callback-00 (Jonathan and Cullen) d) 5 min : draft-rosenberg-stir-sipcoin-00 (Jonathan and Cullen) 5) Wrap Up From nobody Sat Mar 10 05:25:51 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EA60D12426E for ; Sat, 10 Mar 2018 05:25:49 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.32 X-Spam-Level: X-Spam-Status: No, score=-4.32 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ao333pl_h1cm for ; Sat, 10 Mar 2018 05:25:48 -0800 (PST) Received: from sesbmg22.ericsson.net (sesbmg22.ericsson.net [193.180.251.48]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2CD6C1205F0 for ; Sat, 10 Mar 2018 05:25:47 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; d=ericsson.com; s=mailgw201801; c=relaxed/simple; q=dns/txt; i=@ericsson.com; t=1520688345; h=From:Sender:Reply-To:Subject:Date:Message-ID:To:CC:MIME-Version:Content-Type: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=cv2ZWh8MOtydaH0jP3o2F7FWrhh5B8g/R7+dBqgiZmY=; b=fKq0PyDTqBokyJEzTP1g9KZiDrq1GHk7G9p70Eqf5SP7uozRgcfjkwG9fFxiLa+L OSn5ZSqSeVQjK1egl5ABhLPT91AfksLM+HFZGi89Loeb+aEoJOoBsoHaW/QQXm7d 8E0BfFq7I44FG072bK18TqhzaR+JaFbsg2N8bvBtzmk=; X-AuditID: c1b4fb30-3b1ff70000004778-cc-5aa3dcd9572b Received: from ESESSHC001.ericsson.se (Unknown_Domain [153.88.183.21]) by sesbmg22.ericsson.net (Symantec Mail Security) with SMTP id 28.74.18296.9DCD3AA5; Sat, 10 Mar 2018 14:25:45 +0100 (CET) Received: from ESESSMB109.ericsson.se ([169.254.9.82]) by ESESSHC001.ericsson.se ([153.88.183.21]) with mapi id 14.03.0382.000; Sat, 10 Mar 2018 14:25:45 +0100 From: Christer Holmberg To: "stir@ietf.org" CC: "adam@nostrum.com" Thread-Topic: PASSporT extensions: order of claims Thread-Index: AdO4Vc+a+PS/xYPIRfO1T1CAVYYAVA== Date: Sat, 10 Mar 2018 13:25:44 +0000 Message-ID: <7594FB04B1934943A5C02806D1A2204B6C1D17C1@ESESSMB109.ericsson.se> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [153.88.183.164] Content-Type: multipart/alternative; boundary="_000_7594FB04B1934943A5C02806D1A2204B6C1D17C1ESESSMB109erics_" MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFvrNLMWRmVeSWpSXmKPExsUyM2K7qO7NO4ujDI7/N7PY83cRu8XytduY HJg8liz5yeQxa+cTlgCmKC6blNSczLLUIn27BK6MNdvvMBVMUKtovXSLqYFxl2IXIyeHhICJ xOGzV9m7GLk4hAQOM0q8/f6DHSQhJLCYUWL+W5MuRg4ONgELie5/2iBhEQFliS3r7oCVMAto Svx78hbMFhbQlbjS/YMRosZIomf3EmYIW0/i0t0pLCA2i4CqxPe9x5lAbF4BX4kJe36A1TAK iEl8P7WGCWKmuMStJ/OZIG4TkFiy5zwzhC0q8fLxP1YIW0ni7JcpbBD1+RL/93eyQcwUlDg5 8wnLBEahWUhGzUJSNgtJGURcR2LB7k9sELa2xLKFr5lh7DMHHjMhiy9gZF/FKFqcWpyUm25k pJdalJlcXJyfp5eXWrKJERglB7f8NtjB+PK54yFGAQ5GJR7eTzcXRwmxJpYVV+YeYpTgYFYS 4e1tAArxpiRWVqUW5ccXleakFh9ilOZgURLnPenJGyUkkJ5YkpqdmlqQWgSTZeLglGpg3N7N x37JqqTvXXdg09czPirnp847mVTvWHmm7wAn6/2eb7PmnHyxwa31z/0z56POzrpcuvvRudB7 uVIqqyxfHKlMjDdwTf8/JTNz9Wy7dya+//oLQt5OvrxNYbHXubhu2TVpNy5EPVogf+5I6l1Z d+2ZDSdCfN4/jzkrybSe940/W+3mg23z1yuxFGckGmoxFxUnAgC8C78LjgIAAA== Archived-At: Subject: [stir] PASSporT extensions: order of claims X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 10 Mar 2018 13:25:50 -0000 --_000_7594FB04B1934943A5C02806D1A2204B6C1D17C1ESESSMB109erics_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi, Section says: "Specifications that define extensions to the PASSporT mechanism MUST explicitly specify what claims they include beyond the base set of claims from this document, the order in which they will appear,..." When looking at the extensions we are currently working on: draft-ietf-stir-rph-03 draft-ietf-stir-passport-shaken-01 draft-ietf-stir-passport-divert-02 ...I don't see anything about the order in any of the documents. I think it would be good to have a dedicated "Order of claims" section, or = something similar, in each extension specification. When looking at the examples in the drafts above, it seems like even the ba= se claims are in different orders. Not sure whether there is an explicit re= quirement that they need to be in order, thought. Regards, Christer --_000_7594FB04B1934943A5C02806D1A2204B6C1D17C1ESESSMB109erics_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi,

 

Section  says:

 

   “Specifications that define exten= sions to the PASSporT mechanism MUST

   explicitly specify what claims they inc= lude beyond the base set of

   claims from this document, the order= in which they will appear,…”

 

When looking at the extensions we are currently work= ing on:

 

draft-ietf-stir-rph-03

draft-ietf-stir-passport-shaken-01

draft-ietf-stir-passport-divert-02

 

…I don’t see anything about the order in= any of the documents.

 

I think it would be good to have a dedicated “= Order of claims” section, or something similar, in each extension spe= cification.

 

When looking at the examples in the drafts above, it= seems like even the base claims are in different orders. Not sure whether = there is an explicit requirement that they need to be in order, thought.

 

Regards,

 

Christer

 

 

--_000_7594FB04B1934943A5C02806D1A2204B6C1D17C1ESESSMB109erics_-- From nobody Sat Mar 10 05:27:54 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 44D7412426E for ; Sat, 10 Mar 2018 05:27:53 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.32 X-Spam-Level: X-Spam-Status: No, score=-4.32 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id c8vV0oTinp-C for ; Sat, 10 Mar 2018 05:27:51 -0800 (PST) Received: from sesbmg22.ericsson.net (sesbmg22.ericsson.net [193.180.251.48]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 701731205F0 for ; Sat, 10 Mar 2018 05:27:51 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; d=ericsson.com; s=mailgw201801; c=relaxed/simple; q=dns/txt; i=@ericsson.com; t=1520688469; h=From:Sender:Reply-To:Subject:Date:Message-ID:To:CC:MIME-Version:Content-Type: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=o9Et/FGp6x9OwBbOgXt7UYO/9yfRgjAYqYSUeoyCNUE=; b=OcYFuzbclonPSZ8HGMdARvbcdH3g6WxSQPfGuhYplj+doZNjQzfniloDMyJuj0Xi PBzMkpYnFuwa/qjq2HHYUsABN4zIqIw+J6GmC1pS2s4Uf/6aMfxr91WnFzKZyek0 yI6b+svbNLrSiyyU9AHp0yWPSwfpydATonuO5p9L9rU=; X-AuditID: c1b4fb30-3b1ff70000004778-a3-5aa3dd55eb6b Received: from ESESSHC003.ericsson.se (Unknown_Domain [153.88.183.27]) by sesbmg22.ericsson.net (Symantec Mail Security) with SMTP id 2A.D4.18296.55DD3AA5; Sat, 10 Mar 2018 14:27:49 +0100 (CET) Received: from ESESSMB109.ericsson.se ([169.254.9.82]) by ESESSHC003.ericsson.se ([153.88.183.27]) with mapi id 14.03.0382.000; Sat, 10 Mar 2018 14:27:49 +0100 From: Christer Holmberg To: "stir@ietf.org" CC: "adam@nostrum.com" Thread-Topic: PASSporT extensions: order of claims Thread-Index: AdO4Vc+a+PS/xYPIRfO1T1CAVYYAVAAHa1xA Date: Sat, 10 Mar 2018 13:27:48 +0000 Message-ID: <7594FB04B1934943A5C02806D1A2204B6C1D1804@ESESSMB109.ericsson.se> References: <7594FB04B1934943A5C02806D1A2204B6C1D17C1@ESESSMB109.ericsson.se> In-Reply-To: <7594FB04B1934943A5C02806D1A2204B6C1D17C1@ESESSMB109.ericsson.se> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [153.88.183.164] Content-Type: multipart/alternative; boundary="_000_7594FB04B1934943A5C02806D1A2204B6C1D1804ESESSMB109erics_" MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprMIsWRmVeSWpSXmKPExsUyM2K7tG7o3cVRBm87NC32/F3EbrF87TYm ByaPJUt+MnnM2vmEJYApissmJTUnsyy1SN8ugSvj2Ps5zAWd+hUte+axNTBu0Oxi5OSQEDCR eHrwPWsXIxeHkMBhRonPe/axQDiLGSW+PrnA1MXIwcEmYCHR/U8bpEFEQFliy7o77CA2s4Cm xL8nb8FsYQFDiSezPrFA1BhJ9OxewgxjH5p9nQVkDIuAqkTLY1OQMK+Ar8SR2y/BWoWA7Hvb FoPZnAJ+EguP32QFsRkFxCS+n1rDBLFKXOLWk/lMEDcLSCzZc54ZwhaVePn4HyuErSRx9ssU Noj6fIn1x1azQewSlDg58wnLBEaRWUhGzUJSNgtJGURcR2LB7k9sELa2xLKFr5lh7DMHHjMh iy9gZF/FKFqcWpyUm25kpJdalJlcXJyfp5eXWrKJERhVB7f8NtjB+PK54yFGAQ5GJR7eTzcX RwmxJpYVV+YeYpTgYFYS4e1tAArxpiRWVqUW5ccXleakFh9ilOZgURLnPenJGyUkkJ5Ykpqd mlqQWgSTZeLglGpgtFHiN1j15Hneg61JvYv3qEWvZ18dvkNy8d0D3HtvrO5PtWBZd02l9efc x5tbHr7/cir8rN4F0y+Bd3fH3j131uP3vXOX9wufa/1Y9ttCfqfobMu6mFwTublFp+x2TLy7 hIfDab3C4cZbqRWewqUsC9SCk/c3nQqznX9zhnPqlmWFJco3fBxshJVYijMSDbWYi4oTAR99 kDSmAgAA Archived-At: Subject: Re: [stir] PASSporT extensions: order of claims X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 10 Mar 2018 13:27:53 -0000 --_000_7594FB04B1934943A5C02806D1A2204B6C1D1804ESESSMB109erics_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Section 8.3 of RFC 8225, that is. From: stir [mailto:stir-bounces@ietf.org] On Behalf Of Christer Holmberg Sent: 10 March 2018 15:26 To: stir@ietf.org Cc: adam@nostrum.com Subject: [stir] PASSporT extensions: order of claims Hi, Section says: "Specifications that define extensions to the PASSporT mechanism MUST explicitly specify what claims they include beyond the base set of claims from this document, the order in which they will appear,..." When looking at the extensions we are currently working on: draft-ietf-stir-rph-03 draft-ietf-stir-passport-shaken-01 draft-ietf-stir-passport-divert-02 ...I don't see anything about the order in any of the documents. I think it would be good to have a dedicated "Order of claims" section, or = something similar, in each extension specification. When looking at the examples in the drafts above, it seems like even the ba= se claims are in different orders. Not sure whether there is an explicit re= quirement that they need to be in order, thought. Regards, Christer --_000_7594FB04B1934943A5C02806D1A2204B6C1D1804ESESSMB109erics_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Section 8.3 of RFC 822= 5, that is.

 

From: stir [mailto:stir-bounces@ietf.org] On Behalf Of Christer Holmberg
Sent: 10 March 2018 15:26
To: stir@ietf.org
Cc: adam@nostrum.com
Subject: [stir] PASSporT extensions: order of claims

 

Hi,

 

Section  says:

 

   “Specifications that define exten= sions to the PASSporT mechanism MUST

   explicitly specify what claims they inc= lude beyond the base set of

   claims from this document, the order= in which they will appear,…”

 

When looking at the extensions we are currently work= ing on:

 

draft-ietf-stir-rph-03

draft-ietf-stir-passport-shaken-01

draft-ietf-stir-passport-divert-02

 

…I don’t see anything about the order in= any of the documents.

 

I think it would be good to have a dedicated “= Order of claims” section, or something similar, in each extension spe= cification.

 

When looking at the examples in the drafts above, it= seems like even the base claims are in different orders. Not sure whether = there is an explicit requirement that they need to be in order, thought.

 

Regards,

 

Christer

 

 

--_000_7594FB04B1934943A5C02806D1A2204B6C1D1804ESESSMB109erics_-- From nobody Sat Mar 10 09:33:13 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0B54412741D for ; Sat, 10 Mar 2018 09:33:12 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.321 X-Spam-Level: X-Spam-Status: No, score=-4.321 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ihyA1nObgfWp for ; Sat, 10 Mar 2018 09:33:10 -0800 (PST) Received: from sessmg23.ericsson.net (sessmg23.ericsson.net [193.180.251.45]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 35AE81273B1 for ; Sat, 10 Mar 2018 09:33:10 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; d=ericsson.com; s=mailgw201801; c=relaxed/simple; q=dns/txt; i=@ericsson.com; t=1520703188; h=From:Sender:Reply-To:Subject:Date:Message-ID:To:Cc:MIME-Version:Content-Type: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=izqmRxOfw0UojBmUd6c7GEC7C+9HGzBUl16jO2fzkRs=; b=RB+XgPFGxZYXAZp24HOX2YYdYq7tWoNPGwz4CZI++0G7CJeFGKIzCJnegkwJETzG R5XlBlyCgl4kWH3sJekOyFUJ2dbryJ75Wqf5KrUuT6c4edrdC4x3o66sEiQ3bF+/ Mv2AfksikEilrxv3ZHfFxOKQhQBjq6J74/8qT54Devw=; X-AuditID: c1b4fb2d-499ff70000005540-4d-5aa416d4adfa Received: from ESESSHC007.ericsson.se (Unknown_Domain [153.88.183.39]) by sessmg23.ericsson.net (Symantec Mail Security) with SMTP id 67.CE.21824.4D614AA5; Sat, 10 Mar 2018 18:33:08 +0100 (CET) Received: from ESESSMB109.ericsson.se ([169.254.9.82]) by ESESSHC007.ericsson.se ([153.88.183.39]) with mapi id 14.03.0382.000; Sat, 10 Mar 2018 18:33:07 +0100 From: Christer Holmberg To: Russ Housley , IETF STIR Mail List Thread-Topic: [stir] DRAFT STIR Agenda for London Thread-Index: AQHTt+0fEDwMiDqclkW7s196x6oZNKPJe1ig Date: Sat, 10 Mar 2018 17:33:06 +0000 Message-ID: <7594FB04B1934943A5C02806D1A2204B6C1D1AA8@ESESSMB109.ericsson.se> References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [153.88.183.168] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFnrLLMWRmVeSWpSXmKPExsUyM2K7uu4VsSVRBnNXCFm8enGT3WL52m1M DkweS5b8ZPJYdecLawBTFJdNSmpOZllqkb5dAlfGxYVzWQsaBCtutO9nbmDcztvFyMkhIWAi cen2RaYuRi4OIYHDjBJXVn5nBkkICSxmlFjTodHFyMHBJmAh0f1PG8QUEfCR2HXGGcQUFjCQ mDqpAKRYRMBQ4uDczWwQtpHEqSO3GEFsFgFVidvLG5lAbF4BX4kzl7dADbeX+Nn5kR3E5hRw kDix5juYzSggJvH91BqwemYBcYlbT+YzQVwpILFkz3lmCFtU4uXjf6wQtpJEz/17UPU6Egt2 f2KDsLUlli18zQyxV1Di5MwnLBMYRWYhGTsLScssJC2zkLQsYGRZxShanFpcnJtuZKyXWpSZ XFycn6eXl1qyiREYCQe3/Nbdwbj6teMhRgEORiUe3gDWJVFCrIllxZW5hxglOJiVRHh7GxZH CfGmJFZWpRblxxeV5qQWH2KU5mBREuc96ckbJSSQnliSmp2aWpBaBJNl4uCUamDMrZLWnSt1 cKbTOU6TE+YXVU0rLz9Qac9Svx6z98lZLo5V2hcfsmhUztv1JnHz17lHBCUKX9dqpNUIN2pp /61ae8Z2RmtQSJ7mhNkbZVN0/13ZUiJXfO6wZd7xWzs6c2olXof0iB74u/XR/aAEtilPdOVe aO7LDdd7a3/ZyNB2YaBT8Z8dft5KLMUZiYZazEXFiQCmu4LqgAIAAA== Archived-At: Subject: Re: [stir] DRAFT STIR Agenda for London X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 10 Mar 2018 17:33:12 -0000 Hi, I think there are some generic things that we need to sort out. For example, do we specify in which order Identity header fields are added = to a SIP message. Or, do we assume they can be put in any order, possible r= e-ordered by intermediaries, and the entities consuming them will figure ou= t how they are related? I think that is an essential issue to solve, considering that there are a n= umber of PASSporT extensions in the pipeline. And, we should make a decisio= n that apply to all of them. Regards, Christer -----Original Message----- From: stir [mailto:stir-bounces@ietf.org] On Behalf Of Russ Housley Sent: 09 March 2018 23:25 To: IETF STIR Mail List Subject: [stir] DRAFT STIR Agenda for London We only have 1 hour. We received more speaking slots than we expected. I = have ordered the speaking slots to put priority on the active WG documents.= Time will be VERY tight. For the active WG documents, please focus on the changes since Singapore an= d open issues. For the other documents, please introduce the high-level concept, and then = as the WG for advice on the way forward. Russ =3D =3D =3D =3D =3D =3D =3D =3D =3D STIR WG Agenda for IETF 101 Thursday, 22 March 2018 at 11:00 AM Co-chairs: Robert Sparks and Russ Housley 0) Minute Taker, Jabber Scribe, Bluesheets 1) Agenda Bash 2) Documents that have been sent to the IESG a) 5 min : draft-ietf-stir-rph-03 (Ray, Martin, Subir, and An) 3) Active Working Group Documents a) 10 min : draft-ietf-stir-passport-shaken-01 (Chris and Mary) b) 10 min : draft-ietf-stir-passport-divert-02 (Jon) c) 10 min : draft-ietf-stir-oob-02 (EKR and Jon) 4) Other Business (if time allows) a) 5 min : draft-burger-stir-iana-cert-00 (Eric) b) 5 min : draft-peterson-stir-rfc4916-update-00 (Jon and Chris) c) 5 min : draft-rosenberg-stir-callback-00 (Jonathan and Cullen) d) 5 min : draft-rosenberg-stir-sipcoin-00 (Jonathan and Cullen) 5) Wrap Up _______________________________________________ stir mailing list stir@ietf.org https://www.ietf.org/mailman/listinfo/stir From nobody Mon Mar 12 06:43:19 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 93CA7124B0A for ; Mon, 12 Mar 2018 06:43:17 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.921 X-Spam-Level: X-Spam-Status: No, score=-1.921 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id I7BAnHEXmT_T for ; Mon, 12 Mar 2018 06:43:15 -0700 (PDT) Received: from NAM01-BY2-obe.outbound.protection.outlook.com (mail-by2nam01on0099.outbound.protection.outlook.com [104.47.34.99]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 27A2C127369 for ; Mon, 12 Mar 2018 06:43:15 -0700 (PDT) Received: from SN1PR0501CA0012.namprd05.prod.outlook.com (10.163.126.150) by CY1PR0501MB1194.namprd05.prod.outlook.com (10.160.145.143) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.588.7; Mon, 12 Mar 2018 13:43:13 +0000 Received: from SN1NAM01FT021.eop-nam01.prod.protection.outlook.com (2a01:111:f400:7e40::201) by SN1PR0501CA0012.outlook.office365.com (2a01:111:e400:52fe::22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.588.7 via Frontend Transport; Mon, 12 Mar 2018 13:43:13 +0000 Authentication-Results: spf=pass (sender IP is 144.230.32.82) smtp.mailfrom=sprint.com; ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=bestguesspass action=none header.from=sprint.com; Received-SPF: Pass (protection.outlook.com: domain of sprint.com designates 144.230.32.82 as permitted sender) receiver=protection.outlook.com; client-ip=144.230.32.82; helo=preapdm3.corp.sprint.com; Received: from preapdm3.corp.sprint.com (144.230.32.82) by SN1NAM01FT021.mail.protection.outlook.com (10.152.65.191) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.20.527.18 via Frontend Transport; Mon, 12 Mar 2018 13:43:13 +0000 Received: from pps.filterd (preapdm3.corp.sprint.com [127.0.0.1]) by preapdm3.corp.sprint.com (8.16.0.21/8.16.0.21) with SMTP id w2CDYgQ7026691; Mon, 12 Mar 2018 09:43:12 -0400 Received: from pps.reinject (localhost [127.0.0.1]) by preapdm3.corp.sprint.com with ESMTP id 2gmagsj4cu-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Mon, 12 Mar 2018 09:43:12 -0400 Received: from preapdm3.corp.sprint.com (preapdm3.corp.sprint.com [127.0.0.1]) by pps.reinject (8.16.0.20/8.16.0.20) with SMTP id w2CDhCkO033356; Mon, 12 Mar 2018 09:43:12 -0400 Received: from plswe13m04.ad.sprint.com (plswe13m04.corp.sprint.com [144.229.214.23]) by preapdm3.corp.sprint.com with ESMTP id 2gmagsj4ct-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT); Mon, 12 Mar 2018 09:43:12 -0400 Received: from PLSWE13M04.ad.sprint.com (2002:90e5:d617::90e5:d617) by plswe13m04.ad.sprint.com (2002:90e5:d617::90e5:d617) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Mon, 12 Mar 2018 08:43:11 -0500 Received: from PLSWE13M04.ad.sprint.com ([fe80::2c01:fcb8:e729:4a7a]) by plswe13m04.ad.sprint.com ([fe80::2c01:fcb8:e729:4a7a%24]) with mapi id 15.00.1347.000; Mon, 12 Mar 2018 08:43:11 -0500 From: "Gorman, Pierce A [CTO]" To: Christer Holmberg , Russ Housley , IETF STIR Mail List Thread-Topic: [stir] DRAFT STIR Agenda for London Thread-Index: AQHTuKpnym3zKwe0aEOTQEUdIuG45qPMmnhQ Date: Mon, 12 Mar 2018 13:43:10 +0000 Message-ID: References: <7594FB04B1934943A5C02806D1A2204B6C1D1AA8@ESESSMB109.ericsson.se> In-Reply-To: <7594FB04B1934943A5C02806D1A2204B6C1D1AA8@ESESSMB109.ericsson.se> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.214.116.23] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-EOPAttributedMessage: 0 X-MS-Office365-Filtering-HT: Tenant X-Forefront-Antispam-Report: CIP:144.230.32.82; IPV:NLI; CTRY:US; EFV:NLI; SFV:NSPM; SFS:(10019020)(396003)(39380400002)(39860400002)(346002)(376002)(2980300002)(438002)(189003)(199004)(51444003)(13464003)(72854002)(8746002)(110136005)(7696005)(81166006)(97756001)(305945005)(6306002)(7736002)(50466002)(356003)(2950100002)(46406003)(966005)(47776003)(229853002)(53936002)(478600001)(6246003)(72206003)(86362001)(14454004)(2900100001)(3846002)(6116002)(81156014)(8936002)(24736004)(108616005)(2906002)(5660300001)(5250100002)(106466001)(106002)(8676002)(23726003)(97736004)(316002)(26005)(186003)(53546011)(68736007)(76176011)(102836004)(336012)(59450400001)(217873001); DIR:OUT; SFP:1102; SCL:1; SRVR:CY1PR0501MB1194; H:preapdm3.corp.sprint.com; FPR:; SPF:Pass; PTR:InfoDomainNonexistent; MX:1; A:1; LANG:en; X-Microsoft-Exchange-Diagnostics: 1; SN1NAM01FT021; 1:PndhZWMpo0rIjhjVkxrvXGI6O3vmEyTHSzVqW+SAI5zOjYUdy6lQjWW2oE01QVhPQvd+dZFFcMu91nHNS7/hSy0uJWFeo4PKl0GBQ3aapKjoviVtMlWNeqY6HxsCNmUX X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-Correlation-Id: 6ed2e384-101d-4336-3525-08d5881f33b9 X-Microsoft-Antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(8989060)(5600026)(4604075)(4608076)(4534165)(4627221)(201703031133081)(201702281549075)(8990040)(2017052603328)(7153060)(7193020); SRVR:CY1PR0501MB1194; X-Microsoft-Exchange-Diagnostics: 1; CY1PR0501MB1194; 3:HMqxpLFFYZVyryau+dybsR3lnJ5OU1t8bFriYggi7KKJHnPKK+WiZ4MQ6udRgSjFDUPwMcyHtCwDLs8UeLIvsv4fxmZ03UokZPTlMBsP/OyGH0UYCZf/5BpxZFyJg090uxSBKmhvsE75tP05/B89VeFNJRjLilwJiu4BEm1WyRfIWTV8CV16bi1+NUw3bmnweQI0/dIIfk6/bKD2QkgVdBR7qxpmyn7Sw8FDsHjYbJjlGWaGwjhOHBZu633a0clx1KnnzYcGqn3Q6YxJWzqKMfZ19nD3ksyJLg/At1mMRVBCeIoiUjd242aNp1qrxnqvYtxQZIQFRlJgvWdnXe77yspNUQgVLpvXS4tfuBue7kY=; 25:wxv1gHgWuI0Tg9gE3+b2WaGbVjxbEyuBcno0/0k61Asb6cgZa+9FDYv0t1hMthyF/3paynKWUO5qsbHN1j/wBuNLszjegy2TmCNqS2BxFadu7Ro17MTB2+8AFZyZK+r8AZSWfBiY5SVlQIBc0bQUj9CIHQwAJeZ/RkiYpAuiw7/XSAFaXuo60DyRctfSoR+SKHrxuXkli8i2kdhUJmCc+mPx24K0uaOXVmAqjUI6BKJO/1g3Zmd3qbIjHE0G3KdcLQtXZm6E3D7C0anwVRVbcG+0kr7Bi2yk1Yiz4MkhaIQJAjoEHrWJgUjpL3W0WkQc9HQH2SctB73o79pun0i+6g== X-MS-TrafficTypeDiagnostic: CY1PR0501MB1194: X-Microsoft-Exchange-Diagnostics: 1; CY1PR0501MB1194; 31:s5R7i+dRPDlEw6kZfRMZ5wrqrPRx0VP27LxABFFnOwQSk6orNajEu3QMIbJHw2zmF9V7XGABHGfVcl7u6CujqdJ90PUst47Fvl2zpPruBlCTYOh4sARQQDXNVM95kx5H0Ffj/QVlZ+FodN7BLVCYWPI+XCWg6y1/ra1kmurAiPdiAILfVdv8y2x67aq6aD12kG2OXMmAnUYPu8kHYYlTvBnkmNBGIU3c7UtSKqvRtwI=; 20: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 X-Microsoft-Antispam-PRVS: X-Exchange-Antispam-Report-Test: UriScan:(37575265505322); X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(8121501046)(5005006)(3002001)(93006095)(93004095)(10201501046)(3231220)(944501244)(52105095)(6055026)(6041310)(20161123564045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123560045)(20161123562045)(20161123558120)(6072148)(201708071742011); SRVR:CY1PR0501MB1194; BCL:0; PCL:0; RULEID:; SRVR:CY1PR0501MB1194; X-Microsoft-Exchange-Diagnostics: 1; CY1PR0501MB1194; 4:c4fCos/q/Ll346pwMLJBTR+vdEP7e/N1+diH7qKStcQUlXsFT897q9OvFOYq9KUncw3/xUjE2PJz8AudY0imqUee5uZS7AAu70yHAL4jW77NOX08UHTTGmCZMPHFHW4AsbjPmoqJ3MBB1L3onvc96gQD+LO5YLPkcq4uwg8DU/yZlGVsL1yqFwDaH6Bq35WGUWIQvVf37yRRIpOLxI9SVE+FK0SDQ5n5xl00g9bjX2IoYz8SPSverl5vmc4XWhFzADuj1/5TME6CLzIeb1EvDWITZIOj6l+rrEdPxMRjkCiI46+tw93j9MY9QZfRsNiO X-Forefront-PRVS: 06098A2863 X-Microsoft-Exchange-Diagnostics: =?us-ascii?Q?1; CY1PR0501MB1194; 23:309pmIFHSOoOzvEUyFUMm4wVODabPsxjaP88h0J?= =?us-ascii?Q?Dl4FNknd3lBmvHtVpouYIRW7do665aMJe3PMzRbS41XOekKPFLnMMJ6u6kVw?= =?us-ascii?Q?2cq3eIbnTHaNtult5rJ3HXf6FfamiZoKuKDJR9HdlN1NnJlFHEiEpSdc2Aqc?= =?us-ascii?Q?TRIQ3XuNHiAhmN35BFProo/6H9U3KSmOyJD0TXn474hPvHkgXr1eJCARVY6E?= =?us-ascii?Q?OwNIVntIlUKz92OaO5fPKCBMe8xkngxDskWJxN/Ner6SqzCNsJDFxWDHW0GJ?= =?us-ascii?Q?gN3gA3EkPIh3ZW2rFpG//4LSc9ZResfhrE1WZBf3FIWm0ZOSvWmvkbQGM2uD?= =?us-ascii?Q?a7cLosNg8E5FgFvQtScOieidC/o5mmO8NSXgDMxRPpyjJcnhw57yez34TvIY?= =?us-ascii?Q?Ww8VEFJZlW/NZIMhjEjtEM/Ggcjh5PPZtTf+4fScteGrNfWIRAInO45/3bUY?= =?us-ascii?Q?25FmwUYd5+XjLTA3SBDRWdVFhQ8l09b/33YiGGobPggXRlhe87mUkV96TE0r?= =?us-ascii?Q?XTSVvplcbiKs7zyH04f2Q+m4Ley9gV9l75gIp9eXrc3WLsqzeLBZLluhPGHr?= =?us-ascii?Q?bNRo2OL6to4Y11mZkpzqmbcDP3CPhmgdYFtW9mvM8D9Eem66meTlrCXgeyNa?= =?us-ascii?Q?DIx9tfKs3iYSpdErE+9i5aJLHhQUPT+4HScAKoO/awXfBQZJIHpcGpoYQcPg?= =?us-ascii?Q?yHrwxoSWivW9SuIEgHjIuB0Qf/PwrhpESfxMlEhtNfdDzx5SgQgquXhqn+na?= =?us-ascii?Q?Q9wl9DFM1MYh63sJ9128gCvOpuRbINSHoyt2nk60P85O1HM9MAYFGPJs7Vyp?= =?us-ascii?Q?5sde4WV9GHDIK9OIKnLtWVpLgmbDYjQ/lrVeyamCJZopzDUpZWq+pVQL3bXS?= =?us-ascii?Q?atnxHrWOXYJ59vqrVqlCZkfRMf3g7lpzRifEM8WAAi/WByoxSNmFpO7JJZMv?= =?us-ascii?Q?LoOFJYdQ442vQWDKoJ5hcDE+4H2GGEXmkTFbc0x99ZY2g8d6+xl7JyIg9GuT?= =?us-ascii?Q?NnVBepdo7+G8yCb+fEKSC/rWCaI3PaAPEJ+8ZFtrZXUc+LFDBN/h+Fw+WviL?= =?us-ascii?Q?aBCBdiHC352haFHrKYeEp/hInBLHuus5zFAdZpyWf5n5rw+kRJU474IpitXG?= =?us-ascii?Q?wb5zBjqV3KqF92XOb31YLOxVdx7m7UEodBR+9nlQ4UFLwjdLgobq48tEpxEd?= =?us-ascii?Q?20BRqQ5wpHYT9PDg3l9Q7+ygWle3SivxKCTFRx4AetP6PyLCPXFI5i6+hbPS?= =?us-ascii?Q?uWsaWjd8/GtQEUv2V+ayZsS3Ca/j3aCud2ydSqokwB1JYhU6x8rxDTivoCNb?= =?us-ascii?Q?dal90Mljxgf7y8BWcORBh4E4=3D?= X-Microsoft-Antispam-Message-Info: e+gJoP+qfadZfGBpAD2Prjmtpu2IGf42XMT9IWzCIkA/O7Rn9f4gOuO/tR9XaF49CwpGE8Xz+XcL6EDK/c+n3wxJ+g3vsvg0/JdZ2F8ofvbsPaG4aKC6O/h1r+bY+klxh33fCRbGesCKFH8Nf1/EeWRaHz9EaJMMQqCd2Pak3zdNwDwYk/lfoJlVEUSyxYQN X-Microsoft-Exchange-Diagnostics: 1; CY1PR0501MB1194; 6:PFqUZn2BBaecgxlzOBViz3rfSrsJEW6/EdIH2xeF033MTzppmxWm67tpCrjYr85BKUxEnOX5whgZMG4QOX4Un4QSIMqljFsP6Tx5hAExMAsMHuKLeaW84FcuF3UjANtsTWkLEgmixkNXpdh+g/IoiUsAhKZYi7axRY6YqqoL9T8zhp0ffTG7gITwlVgxajZzDDxUZhWDEg0SgM7T1LsCS9ln/WsPApoejOrtIpsw1BeQB46rRZoy+a7Zf2JYDRyNnzRTOvioc/V9nWWNtSokUv8Avxa6yOtIa4qHsBtpEJiBl4H/ZkWWDno17YHlb8/eW/NkNYUZ9RqwNWy2WN0ULN+ghsxtUedzYp1FhjobxG8=; 5:ybOr6mSSb5zxp6J4d74we/XXkWINZlnnLZizNZKZGc2IhUI1WAe8YDi4yGPJbvf0UGxQXuMTGuJ+aG31FhMRbHE1WDUWJiB4prw1E/9Mo5ciGrgNWK23lqLDVHTyX+WOJApWTdxmc94Dohjnr9og6dygymr4rn9H2C2Usmtkghs=; 24:zgsBFuB31thRwbGznjRt0lXycdNmtY5zA73FLHvRuUVtp1DPzsvICZyMQ5hRvcqLLJSaycUMaAvHyqADpGdPyumSZziNKnfDouPx9yDL21o=; 7:lHkMYIl8eyuHZRfp2jpEbkEBwyZmqcnHfrVDokjW5rcYmBD4wBfBEcCD+/pnAnt/eX8DywEP+aOEWt6+DqpU7BD41VronqWzjYs4ko5k+D+HuLgRT60Xy8UH0TmYEdcP1q7veoZn2rZ4OAQ/sZ3BGMKBFKcP35L4dezcD4s3lpW89pGJwFwXqX/wU35y2FFZXHCyAefYym16DL6MjZ+08LucVGL6wUWzmBh8Y8IAFvqNDHir+dKUYKcqoI1ujIDg SpamDiagnosticOutput: 1:99 SpamDiagnosticMetadata: NSPM X-OriginatorOrg: sprint.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 12 Mar 2018 13:43:13.3901 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 6ed2e384-101d-4336-3525-08d5881f33b9 X-MS-Exchange-CrossTenant-Id: 4f8bc0ac-bd78-4bf5-b55f-1b31301d9adf X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=4f8bc0ac-bd78-4bf5-b55f-1b31301d9adf; Ip=[144.230.32.82]; Helo=[preapdm3.corp.sprint.com] X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY1PR0501MB1194 Archived-At: Subject: Re: [stir] DRAFT STIR Agenda for London X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 12 Mar 2018 13:43:18 -0000 I agree that the question of order (or not) of Identity headers needs to be= resolved. I started to write assumptions and questions on this topic but decided it w= ouldn't add much to a discussion amongst development professionals who have= encountered the issue before (which is my assumption about the authors and= Christer). I can re-create it if anyone wants it. Pierce -----Original Message----- From: Christer Holmberg [mailto:christer.holmberg@ericsson.com] Sent: Saturday, March 10, 2018 11:33 AM To: Russ Housley ; IETF STIR Mail List Subject: Re: [stir] DRAFT STIR Agenda for London Hi, I think there are some generic things that we need to sort out. For example, do we specify in which order Identity header fields are added = to a SIP message. Or, do we assume they can be put in any order, possible r= e-ordered by intermediaries, and the entities consuming them will figure ou= t how they are related? I think that is an essential issue to solve, considering that there are a n= umber of PASSporT extensions in the pipeline. And, we should make a decisio= n that apply to all of them. Regards, Christer -----Original Message----- From: stir [mailto:stir-bounces@ietf.org] On Behalf Of Russ Housley Sent: 09 March 2018 23:25 To: IETF STIR Mail List Subject: [stir] DRAFT STIR Agenda for London We only have 1 hour. We received more speaking slots than we expected. I = have ordered the speaking slots to put priority on the active WG documents.= Time will be VERY tight. For the active WG documents, please focus on the changes since Singapore an= d open issues. For the other documents, please introduce the high-level concept, and then = as the WG for advice on the way forward. Russ =3D =3D =3D =3D =3D =3D =3D =3D =3D STIR WG Agenda for IETF 101 Thursday, 22 March 2018 at 11:00 AM Co-chairs: Robert Sparks and Russ Housley 0) Minute Taker, Jabber Scribe, Bluesheets 1) Agenda Bash 2) Documents that have been sent to the IESG a) 5 min : draft-ietf-stir-rph-03 (Ray, Martin, Subir, and An) 3) Active Working Group Documents a) 10 min : draft-ietf-stir-passport-shaken-01 (Chris and Mary) b) 10 min : draft-ietf-stir-passport-divert-02 (Jon) c) 10 min : draft-ietf-stir-oob-02 (EKR and Jon) 4) Other Business (if time allows) a) 5 min : draft-burger-stir-iana-cert-00 (Eric) b) 5 min : draft-peterson-stir-rfc4916-update-00 (Jon and Chris) c) 5 min : draft-rosenberg-stir-callback-00 (Jonathan and Cullen) d) 5 min : draft-rosenberg-stir-sipcoin-00 (Jonathan and Cullen) 5) Wrap Up _______________________________________________ stir mailing list stir@ietf.org https://www.ietf.org/mailman/listinfo/stir ________________________________ This e-mail may contain Sprint proprietary information intended for the sol= e use of the recipient(s). Any use by others is prohibited. If you are not = the intended recipient, please contact the sender and delete all copies of = the message. From nobody Mon Mar 12 14:04:44 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9B190126CF9 for ; Mon, 12 Mar 2018 14:04:42 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.89 X-Spam-Level: X-Spam-Status: No, score=-1.89 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, T_RP_MATCHES_RCVD=-0.01, T_SPF_HELO_PERMERROR=0.01, T_SPF_PERMERROR=0.01] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id leh7zZduwWR0 for ; Mon, 12 Mar 2018 14:04:41 -0700 (PDT) Received: from nostrum.com (raven-v6.nostrum.com [IPv6:2001:470:d:1130::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CDF7E1200C1 for ; Mon, 12 Mar 2018 14:04:41 -0700 (PDT) Received: from Svantevit.local (99-152-146-228.lightspeed.dllstx.sbcglobal.net [99.152.146.228]) (authenticated bits=0) by nostrum.com (8.15.2/8.15.2) with ESMTPSA id w2CL4ehS014875 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO); Mon, 12 Mar 2018 16:04:41 -0500 (CDT) (envelope-from adam@nostrum.com) X-Authentication-Warning: raven.nostrum.com: Host 99-152-146-228.lightspeed.dllstx.sbcglobal.net [99.152.146.228] claimed to be Svantevit.local To: Russ Housley Cc: IETF STIR Mail List References: <7594FB04B1934943A5C02806D1A2204B6C135F8E@ESESSMB109.ericsson.se> <7594FB04B1934943A5C02806D1A2204B6C153849@ESESSMB109.ericsson.se> <0981B4BB-98C6-4DBB-8E13-A702944ACC3E@gmail.com> <60DBC9ED-9ECD-45D6-AE8C-A8259630BE3B@vigilsec.com> From: Adam Roach Message-ID: <3337859f-24db-d02c-dd4c-6c00fd9effc1@nostrum.com> Date: Mon, 12 Mar 2018 16:04:35 -0500 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:52.0) Gecko/20100101 Thunderbird/52.6.0 MIME-Version: 1.0 In-Reply-To: <60DBC9ED-9ECD-45D6-AE8C-A8259630BE3B@vigilsec.com> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit Content-Language: en-US Archived-At: Subject: Re: [stir] AD Review: draft-ietf-stir-rph-02 - authority to assert the callers identity assumed? X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 12 Mar 2018 21:04:42 -0000 On 3/9/18 3:02 PM, Russ Housley wrote: > Revision -03 was posted on Feb. 1st.  Can you tell us whether yout > comments have been addresses with this revision? The document is ready. I indicated in the tracker: "Given the excessive number of documents currently in last call, I'm going to wait last call on this document until after London, to give the last-call queue some time to drain." I thought these comments were automatically sent by the tools to the working group mailing list, but apparently they aren't. Sorry for the confusion. /a From nobody Tue Mar 13 05:09:15 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A748812D890 for ; Tue, 13 Mar 2018 05:09:13 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eqvL_YCeRSdF for ; Tue, 13 Mar 2018 05:09:12 -0700 (PDT) Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 32B9012711B for ; Tue, 13 Mar 2018 05:09:12 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id 02F343005AB for ; Tue, 13 Mar 2018 08:09:10 -0400 (EDT) X-Virus-Scanned: amavisd-new at mail.smeinc.net Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id 18gNDH27eu4v for ; Tue, 13 Mar 2018 08:09:09 -0400 (EDT) Received: from [172.20.6.66] (unknown [5.148.123.140]) by mail.smeinc.net (Postfix) with ESMTPSA id D930A300558; Tue, 13 Mar 2018 08:09:08 -0400 (EDT) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\)) From: Russ Housley In-Reply-To: <3337859f-24db-d02c-dd4c-6c00fd9effc1@nostrum.com> Date: Tue, 13 Mar 2018 08:09:08 -0400 Cc: IETF STIR Mail List Content-Transfer-Encoding: quoted-printable Message-Id: <974CE676-3C1D-4390-A614-F4CE219770CE@vigilsec.com> References: <7594FB04B1934943A5C02806D1A2204B6C135F8E@ESESSMB109.ericsson.se> <7594FB04B1934943A5C02806D1A2204B6C153849@ESESSMB109.ericsson.se> <0981B4BB-98C6-4DBB-8E13-A702944ACC3E@gmail.com> <60DBC9ED-9ECD-45D6-AE8C-A8259630BE3B@vigilsec.com> <3337859f-24db-d02c-dd4c-6c00fd9effc1@nostrum.com> To: Adam Roach X-Mailer: Apple Mail (2.3273) Archived-At: Subject: Re: [stir] AD Review: draft-ietf-stir-rph-02 - authority to assert the callers identity assumed? X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 13 Mar 2018 12:09:14 -0000 Thanks. I guess I missed the comment in the tracker. Not that you say = it again, I recall reading that before ... Russ > On Mar 12, 2018, at 5:04 PM, Adam Roach wrote: >=20 > On 3/9/18 3:02 PM, Russ Housley wrote: >> Revision -03 was posted on Feb. 1st. Can you tell us whether yout = comments have been addresses with this revision? >=20 > The document is ready. I indicated in the tracker: "Given the = excessive number of documents currently in last call, I'm going to wait = last call on this document until after London, to give the last-call = queue some time to drain." I thought these comments were automatically = sent by the tools to the working group mailing list, but apparently they = aren't. Sorry for the confusion. >=20 > /a From nobody Tue Mar 13 10:57:55 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A2FFA1271FD for ; Tue, 13 Mar 2018 10:57:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.091 X-Spam-Level: X-Spam-Status: No, score=0.091 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=1.989, RCVD_IN_DNSWL_NONE=-0.0001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=chriswendt-net.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qCbCJlA50vUj for ; Tue, 13 Mar 2018 10:57:48 -0700 (PDT) Received: from mail-ua0-x229.google.com (mail-ua0-x229.google.com [IPv6:2607:f8b0:400c:c08::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1722A127775 for ; Tue, 13 Mar 2018 10:57:48 -0700 (PDT) Received: by mail-ua0-x229.google.com with SMTP id c14so331664uak.7 for ; Tue, 13 Mar 2018 10:57:48 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=chriswendt-net.20150623.gappssmtp.com; s=20150623; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=5HFqrOVkwTollHR6PQ3cltpI66qhDJHgEN3lOgfWL2U=; b=jVmlnwkxSBeP6eDuLp7zBWkcoys1deBTyWvzODXzT57uwAoPSebULM0g9MrQNa+am2 vIHbLIy512kxhJnGi1mBMNvxuXFuhvORkMjgiFA7jcdzHQ8p7mUDclJAE1SBWDkOtZbs Q7PixIdYgJc/yVfSZEQIN0doIVXyoygvkGcnJkg+tdd87Om/vUVPbdzXm8WdMeKBQxTy W3/tXdFDVniLBHhFJn6dDda9qJw9jHH7F+Zva8YIL8myH5So3II04avFTe3Lz+dNP6K5 U3SK5jTKyhu+pI2ImHUAQ2S8zcc0TtEBKAF6LiubBUVz4c6VDovb7e+poU+5arWtYgDA Ydqg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=5HFqrOVkwTollHR6PQ3cltpI66qhDJHgEN3lOgfWL2U=; b=ieG9DJFcIeip/KSQ7C2SL42stM1wr0xzLIZ1AgZYT+GdoYthQIFzdPlcqVhozQMEC1 qHlRZqLAhRtS37p6IuTOz4btK+C4Z73S8t2bdUYveMat37rtfsrHLjrYvOF5XfutKgv0 mbRzQwDdpXWxXQNV3jvLkEcnsYi6yajqJH8M5tbA35fqtYdQysPLqNbb/VQQlk1kSoRF 8dWpBJa0BRppDaBUn2t/XRZgWycPn9AOLdNdyttdCT2AEof7ZRLIWT/BOj5ytmj0G2AL vXii2349S5icwuT00G6cQSJEWGxeB6lQQaZseOS+694RhKIhQq0VXZoZf3LUu3pRi6W0 J5uQ== X-Gm-Message-State: AElRT7HA+zOCM/ZO3E7UQqEVr8DfqQGxIMSEmHbSJHBIMGbooFLh4smA ysAj8zL2JXyR/MLoFmkMuJgvPQ== X-Google-Smtp-Source: AG47ELuNVxUAS3fMF0fj+YoBN1cfJ0d9nlitkjTw2+TAWQTr28YiTwNSjTbnYrX6Xd36UIymvAEVZg== X-Received: by 10.176.26.130 with SMTP id j2mr1124320uai.99.1520963866850; Tue, 13 Mar 2018 10:57:46 -0700 (PDT) Received: from [10.54.100.112] ([96.47.153.2]) by smtp.gmail.com with ESMTPSA id b18sm278633vkf.16.2018.03.13.10.57.44 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 13 Mar 2018 10:57:45 -0700 (PDT) From: Chris Wendt Message-Id: <6BFF32BC-83FC-4085-8F1D-0E9F470FFE1E@chriswendt.net> Content-Type: multipart/alternative; boundary="Apple-Mail=_FDB3C203-A874-46AA-B9E5-280DCB7E14F2" Mime-Version: 1.0 (Mac OS X Mail 11.2 \(3445.5.20\)) Date: Tue, 13 Mar 2018 13:57:42 -0400 In-Reply-To: Cc: Christer Holmberg , Julio Martinez-Minguito , "Singh, Ray P" , "stir@ietf.org" , "draft-ietf-stir-rph.all@tools.ietf.org" , Adam Roach , Subir , STIR Chairs To: "DOLLY, MARTIN C" References: <7594FB04B1934943A5C02806D1A2204B6C135F8E@ESESSMB109.ericsson.se> <7594FB04B1934943A5C02806D1A2204B6C153849@ESESSMB109.ericsson.se> <0981B4BB-98C6-4DBB-8E13-A702944ACC3E@gmail.com> <7594FB04B1934943A5C02806D1A2204B6C156576@ESESSMB109.ericsson.se> X-Mailer: Apple Mail (2.3445.5.20) Archived-At: Subject: Re: [stir] AD Review: draft-ietf-stir-rph-02 - authority to assert the callers identity assumed? X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 13 Mar 2018 17:57:54 -0000 --Apple-Mail=_FDB3C203-A874-46AA-B9E5-280DCB7E14F2 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 A PASSporT can only be signed by one authority and that authority needs = to only be an authority of the context of the assertion being made by = the PASSporT. For RPH, the assertion is the association of the rph = claim to the telephone call with to/from/date. This is not to be = confused with SHAKEN which the authority of the assertion is around the = caller-id at origination. These are completely different concepts and = shouldn=E2=80=99t be correlated. Just because =E2=80=9Corig=E2=80=9D is = in the claim for RPH doesn=E2=80=99t necessarily mean that RPH signer = has authority for it, it=E2=80=99s purely to associate the RPH code with = the specific call details. -Chris > On Feb 5, 2018, at 10:58 AM, DOLLY, MARTIN C wrote: >=20 > Christer, > =20 > It does not need to. > =20 > Regards, > =20 > Martin > =20 > From: Christer Holmberg [mailto:christer.holmberg@ericsson.com]=20 > Sent: Monday, February 05, 2018 10:20 AM > To: Julio Martinez-Minguito ; = Singh, Ray P ; stir@ietf.org > Cc: DOLLY, MARTIN C ; Subir ; = Adam Roach ; STIR Chairs ; = draft-ietf-stir-rph.all@tools.ietf.org > Subject: RE: [stir] AD Review: draft-ietf-stir-rph-02 - authority to = assert the callers identity assumed? > =20 > Hi, > =20 > Related to this: how does the verifier know what claim(s) in a = PASSPorT the signer had authority to sign? > =20 > Regards, > =20 > Christer > <>=20 > From: Julio Martinez-Minguito=20 > Sent: 05 February 2018 17:12 > To: Christer Holmberg >; Singh, Ray P = >; stir@ietf.org = > Cc: DOLLY, MARTIN C >; Subir = >; Adam Roach = >; STIR Chairs = >; = draft-ietf-stir-rph.all@tools.ietf.org = > Subject: RE: [stir] AD Review: draft-ietf-stir-rph-02 - authority to = assert the callers identity assumed? > =20 > Hi, > =20 > If the PASSporT with extension ppt:rph only has authority over the rph = claim, does it mean that we need another PASSporT in the signaling to = claim authority over the =E2=80=98orig=E2=80=99 number? > Should there be nested PASSporTs? > =20 > Regards, Julio > =20 > From: Christer Holmberg [mailto:christer.holmberg@ericsson.com = ]=20 > Sent: den 5 februari 2018 07:38 > To: Singh, Ray P > > Cc: DOLLY, MARTIN C >; Subir = >; stir@ietf.org = ; Adam Roach >; STIR Chairs >; draft-ietf-stir-rph.all@tools.ietf.org = > Subject: Re: [stir] AD Review: draft-ietf-stir-rph-02 - authority to = assert the callers identity assumed? > =20 > Hi,=20 > =20 > I think the reason why =E2=80=98orig=E2=80=99 and =E2=80=98dest=E2=80=99= are required in every PASSPorT should be explained the the PASSPorT = document, in my opinion. It is not specific to the RPH extension. > =20 > Not sure how =E2=80=98orig=E2=80=99 can be used to identify a call. = You can have multiple calls with the same =E2=80=98orig=E2=80=99 value, = can=E2=80=99t you?=20 > =20 > Regards, > =20 > Christer > =20 > =20 >=20 > Sent from my iPhone >=20 > On 4 Feb 2018, at 21.45, Singh, Ray P > wrote: >=20 > All, >=20 > Yes, the claim is only for the RPH. The"orig" and "dest" is included = so that the RPH claim can be correlated to the call. We can add some = clarification text to indicate that "orig" is only included so that the = RPH claim can be correlated to a specific call, and that the signer of = the RPH claim may no have authority of the "orig" TN. >=20 > Thanks >=20 > Ray >=20 > =20 >=20 > =20 >=20 > From: stir [stir-bounces@ietf.org ] on = behalf of DOLLY, MARTIN C [md3135@att.com ] > Sent: Sunday, February 04, 2018 7:05 PM > To: Subir; Christer Holmberg > Cc: stir@ietf.org ; Adam Roach; STIR Chairs; = draft-ietf-stir-rph.all@tools.ietf.org = > Subject: Re: [stir] AD Review: draft-ietf-stir-rph-02 - authority to = assert the callers identity assumed? >=20 > We only have one claim and that is the RPH > =20 > From: Subir [mailto:subirdas21@gmail.com = ]=20 > Sent: Sunday, February 04, 2018 5:56 PM > To: Christer Holmberg > > Cc: Adam Roach >; STIR = Chairs >; = stir@ietf.org ; = draft-ietf-stir-rph.all@tools.ietf.org = > Subject: Re: [stir] AD Review: draft-ietf-stir-rph-02 - authority to = assert the callers identity assumed? > =20 >=20 > We can add some texts to clarify that in the next version. The point = is that in some use cases service provider may have the authority to = other claims such as 'orig' and in other cases it may not have. We can = add a may statement clarifying this or explicitly say that it is not = required to have authority to other claims. > =20 > Thanks, > =20 > Subir=20 > Sent from my iPhone >=20 > On Feb 4, 2018, at 10:03 PM, Christer Holmberg = > = wrote: >=20 > Hi, > =20 > The text says: > =20 > =E2=80=9CThe credentials (e.g., authority responsible for = authorizing Resource- > Priority) used to create the signature must have authority over the > namespace of the "rph" claim and there is only one authority per > claim.=E2=80=9D > =20 > If the credentials don=E2=80=99t need to have authority of the other = claims (e.g., =E2=80=9Corig=E2=80=9D) in the RPH PASSPorT I think you = should explicitly say so. > =20 > Regards, > =20 > Christer > =20 > =20 > From: Subir Das [mailto:subirdas21@gmail.com = ]=20 > Sent: 02 February 2018 01:04 > To: Christer Holmberg > > Cc: Adam Roach >; STIR = Chairs >; = stir@ietf.org ; = draft-ietf-stir-rph.all@tools.ietf.org = > Subject: Re: [stir] AD Review: draft-ietf-stir-rph-02 - authority to = assert the callers identity assumed? > =20 > Hello Christer, > The signing entity does not have always the authority to assert the = caller identity in rph. We are submitting ver-03 draft and it is = clarified as follows: > "The credentials (e.g., authority responsible for authorizing = Resource-Priority) used to create the signature must have authority over = the namespace of the=E2=80=9Crph" claim.."=20 > =20 > -Subir > =20 > On Mon, Jan 22, 2018 at 3:27 PM, Christer Holmberg = > = wrote: > Hi, > =20 > Another question for clarification. > =20 > Section 3 contains the following example: > =20 > { "orig":{"tn":"12155551212 "} > "dest":{["tn":"12125551213 "]}, > "iat":1443208345, > "rph":{"auth":["ets.0","wps.0"]} > =20 > =E2=80=A6and the following text: > =20 > =E2=80=9CThe credentials (e.g., authority responsible for = authorizing Resource- > Priority) used to create the signature must have authority over the > "rph" claim=E2=80=A6=E2=80=9D > <>=20 > Since the claim also contains =E2=80=9Corig=E2=80=9D, is the = assumption that the signing entity always also has authority to assert = the callers identity? I think it would be good to explicitly mention it. > =20 > Regards, > =20 > Christer > =20 > =20 > =20 > =20 > =20 > =20 > From: stir [mailto:stir-bounces@ietf.org = ] On Behalf Of Adam Roach > Sent: 20 January 2018 00:15 > To: STIR Chairs >; = stir@ietf.org ; = draft-ietf-stir-rph.all@tools.ietf.org = > Subject: [stir] AD Review: draft-ietf-stir-rph-02 > =20 > I'm doing my AD review of draft-ietf-stir-rph-02. Thanks to everyone = who has worked on this document, and the authors and chairs in = particular. >=20 > The technical content here looks generally good to me. I'd like to see = a few issues addressed before IETF LC. In short sumary: >=20 > The validation section needs to add a discussion of how to treat calls = when the priority values in "rph" passports and SIP "Resource-Priority" = header fields aren't 100% identical. > The examples need some adjustment.=20 > There is a minor point of ambiguity in the Security Section, but this = should be easy to fix, as long as the WG knows what was intended. > The IANA actions need a little bit of adjustment.=20 > There are a number of minor editorial issues to be cleaned up. > Detailed comments on these points are inline in the document below. = I've removed some portions of the document on which I have no comments. >=20 > =20 >=20 >=20 > Abstract >=20 > This document extends the STIR PASSporT specification to allow the > =20 >=20 > "...the Secure Telephone Identity Revisited (STIR) Personal Assertion = Token (PASSporT) specification defined in RFC 8122..." >=20 > (See = for guidance on = abbreviations) >=20 > =20 >=20 > inclusion of cryptographically-signed assertions of authorization = for > the values populated in the SIP 'Resource-Priority' header field, > which is used for communications resource prioritization. >=20 > ... >=20 > 1. Introduction >=20 > PASSporT [I-D.ietf-stir-passport] is a token format based on JWT > [RFC7519] for conveying cryptographically-signed information about > the identities involved in personal communications; it is used with > STIR [I-D.ietf-stir-rfc4474bis] to convey a signed assertion of the > identity of the participants in real-time communications = established > via a protocol like SIP. This specification extends PASSporT to > =20 >=20 > "...like SIP [RFC3261]..." >=20 > (We want to cite SIP the first time it is mentioned) >=20 > =20 >=20 > allow cryptographic-signing of the SIP 'Resource-Priority' header > field defined in [RFC4412]. >=20 > [RFC4412] defines the SIP 'Resource-Priority' header field for > communications Resource Priority. As specified in [RFC4412], the > 'Resource-Priority' header field may be used by SIP user agents > [RFC3261], including, Public Switched Telephone Network (PSTN) > =20 >=20 > "...including Public Switched..." >=20 > (remove the comma) >=20 > =20 >=20 > gateways and terminals, and SIP proxy servers to influence > =20 >=20 > "...and by SIP proxy servers, to influence..." >=20 > (add "by" and comma) >=20 > =20 >=20 > prioritization afforded to communication sessions,including PSTN > =20 > "...sessions, including..." >=20 > (space after comma) >=20 > =20 >=20 > calls. However, the SIP 'Resource-Priority' header field could be > spoofed and abused by unauthorized entities. >=20 > The STIR architecture [RFC7340]assumes that an authority on the > =20 >=20 > "...STIR architecture [RFC7340] assumes..." >=20 > (space before "assumes") >=20 > =20 >=20 > originating side of a call provides a cryptographic assurance of = the > validity of the calling party number in order to prevent > impersonation attacks. The STIR architecture allows extension that > =20 >=20 > "...allows extensions..." >=20 > =20 >=20 > can be utilized by authorities supporting real-time communication > services using the 'Resource-Priority' header field to > cryptographically sign the SIP 'Resource-Priority' header field and > convey assertion of the authorization for 'Resource-Priority'. For > example, the authority on the originating side verifying the > authorization of a particular communication for Resource-Priority = can > =20 >=20 > Single quotes around 'Resource-Priority'. >=20 > =20 >=20 > use a PASSPorT claim to cryptographically-sign the SIP 'Resource- > =20 >=20 > "...cryptographically sign..." >=20 > =20 >=20 > Priority' header field and convey an assertion of the authorization > for 'Resource-Priority'. This will allow a receiving entity > (including entities located in different network = domains/boundaries) > to verify the validity of assertions authorizing Resource-Priority. > =20 >=20 > Single quotes around 'Resource-Priority'. >=20 > =20 >=20 > Cryptographically-signed SIP 'Resource-Priority' headers will allow = a > =20 >=20 > "...cryptographically signed SIP 'Resource-Priority' header fields..." >=20 > (remove hyphen, and replace "headers" with "header fields") >=20 > =20 >=20 > receiving entity to verify and act on the information with = confidence > that the information have not been spoofed or compromised. > =20 >=20 > "...has not been spoofed or compromised." >=20 > =20 >=20 >=20 > This specification documents an optional extension to PASSporT and > the associated STIR mechanisms to provide a function to sign the = SIP > 'Resource-Priority' header field. This PASSporT object is used to > provide attestation of a calling user authorization for priority > communications. This is necessary in addition to the PASSporT = object > that is used for calling user telephone number attestation. How = the > optional extension to PASSporT is used for real-time communications > supported using SIP 'Resource-Priority' header field is defined in > other documents and is outside the scope of this document. > =20 >=20 > I assume these other documents are under development? If so, they = should be cited here. >=20 > =20 >=20 >=20 > 2. Terminology >=20 > The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", > "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in = this > document are to be interpreted as described in RFC 2119 [RFC2119]. > =20 >=20 > This document has several non-normative uses of "must", "should," and = "may," and so it needs to use the RFC8174 boilerplate instead of the = RFC2119 boilerplate. >=20 > =20 >=20 >=20 > 3. PASSporT 'rph' Claim >=20 > This specification defines a new JSON Web Token claim for "rph", > which provides an assertion for information in SIP 'Resource- > Priority'header. > =20 >=20 > "...Priority' header field." >=20 > (space after closing quotation mark, "header field" instead of = "header") >=20 > =20 >=20 >=20 > The creator of a PASSporT object adds a "ppt" value of "rph" to the > header of a PASSporT object, in which case the PASSporT claims MUST > contain a "rph" claim, and any entities verifying the PASSporT = object > will be required to understand the "ppt" extension in order to > process the PASSporT in question. A PASSPorT header with the "ppt" > included will look as follows: >=20 > { "typ":"passport", > "ppt":"rph", > "alg":"ES256", > "x5u":"https://www.example.org/cert.cer" = } > =20 >=20 > Ideally, this would be either pretty-printed or canonicalized. Since = it's too long to fit on a line in canonical form, I propose: >=20 > { > "typ":"passport", > "ppt":"rph", > "alg":"ES256", > "x5u":"https://www.example.org/cert.cer" = > } >=20 > =20 >=20 >=20 > The "rph" claim will provide an assertion of authorization,"auth", > =20 >=20 > "...authorization, "auth", ..." >=20 > (space between comma and opening quotation mark) >=20 > =20 >=20 > for information in the SIP "Resource-Priority" header field (i.e., > Resource-Priority: namespace "." r-priority) based on [RFC4412]. > =20 >=20 > The use of the string 'namespace "." r-priority' here and elsewhere in = the document has a detrimental impact on readability. I strongly suggest = replacing it with "r-value" (the name of this production in RFC4412) = everywhere. >=20 > =20 >=20 > Specifically, the "rph" claim includes assertion of the priority- > level of the user to be used for a given communication session. = The > value of the "rph" claim is an array containing one or more of JSON > objects for the content of the SIP 'Resource-Priority' header that = is > being asserted of which one of the "rph" object, is mandatory. > =20 >=20 > This last sentence is very hard to parse; and (based on the example) = the value is intended to be a JSON Object (curly braces) rather than a = JSON Array (square braces). I suggest: 'The value of the "rph" claim is = an Object with one or more keys. Each key is associated with a JSON = Array. These arrays contain Strings that correspond to the r-values = indicated in the SIP "Resource-Priority" header field.' (note: "header = field", not "header") >=20 > =20 >=20 >=20 > The following is an example "rph" claim for a SIP = "Resource-Priority" > header field with a "namespace "." r-priority" value of "ets.0" and > with a "namespace "." r-priority" value of "wps.0". >=20 > { "orig":{"tn":"12155551212 "} > "dest":{["tn":"12125551213 "]}, > "iat":1443208345, > "rph":{"auth":["ets.0","wps.0"]} > =20 >=20 > As above, I recommend pretty-printing this. It's also missing a comma = after the "orig" value, and the top-level structure is missing a closing = brace. The value for "iat" needs to be enclosed in quotes. >=20 > The NANPA has allocated NPA55501xx for example use, not NPA555xxxx, = much of which remains assignable = (cf = ). >=20 > Putting all this together, I believe what you want is: >=20 > { > "orig":{"tn":"12155550112 "}, > "dest":{["tn":"12125550113 "]}, > "iat":"1443208345", > "rph":{"auth":["ets.0","wps.0"]} > } >=20 > =20 >=20 >=20 > After the header and claims PASSporT objects have been constructed, > their signature is generated normally per the guidance in > [I-D.ietf-stir-passport] using the full form of PASSPorT. The > credentials (e.g., authority responsible for authorizing Resource- > Priority) used to create the signature must have authority over the > "rph" claim and there is only one authority per claim. The = authority > MUST use its credentials (i.e., CERT) associated with the specific > service supported by the SIP namespace in the claim. >=20 > 4. 'rph' in SIP >=20 > This section specifies SIP-specific usage for the "rph" claim in > PASSporT. >=20 > 4.1. Authentication Service Behavior >=20 > The Authentication Service will create the "rph" claim using the > values discussed in section 3 based on [RFC4412]. The construction > of "rph" claim follows the steps described in Section 4 of > [I-D.ietf-stir-rfc4474bis]. >=20 > The resulting Identity header for "rph" might look as follows: > =20 >=20 > "...header field..." >=20 > =20 >=20 >=20 > "eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJleUowZVhBaU9pSnd > ZWE56Y0c5eWRDSXNEUW9pY0hCMElqb2ljbkJvSWl3TkNpSmhiR2NpT2lKRlV6STFO > aUlzRFFvaWVEVjFJanBvZEhSd2N6b3ZMM2QzZHk1bGVHRnRjR3hsTG1OdmJTOWpaW > EowTG1ObGNuME5DZzBLIHx84oCZLuKAmXx8IGV5QWliM0pwWnlJNmV5SjBiaUk2SW > pFeU1UVTFOVFV4TWpFeUluME5DaUprWlhOMElqcDdXeUowYmlJNklqRXlNVEkxTlR > VeE1qRXpJbDE5TEEwS0ltbGhkQ0k2TVRRME16SXdPRE0wTlN3TkNpSnljR2dpT25z > aVlYVjBhQ0k2V3lKbGRITXVNQ0lzSW5kd2N5NHdJbDE5RFFvPSJ9.s37S6VC8HM6D > l6YzJeQDsrZcwJ0lizxhUrA7f_98oWBHvo-cl-n8MIhoCr18vYYFy3blXvs3fslM_ > oos2P2Dyw"; info=3D "https://www.example.org/cert.cer" = ;alg=3DES256; > ppt=3D"rph" > =20 >=20 > This example has a number of issues: >=20 > In the Identity header field, the signed-identity-digest shouldn't be = quoted.=20 > In the Identity header field, info is enclosed in <> rather than "".=20= > In the Identity header field, ppt is a token rather than a quoted = string.=20 > The signed-identity-digest header needs to indicate a "typ" of = "passport" rather than JWT, and it needs to include both a "ppt" and = "x5u" field. > The signed-identity-digest body should contain only the passport claim = rather than a JSON object that itself contains a base64-encoded JWS = header concatenated with a claim. > I believe that, even when the body is included, values in the header = and body need to be be canonicalized (i.e., all on one line, no spaces, = in alphabetical order, etc.) > I would also recommend following the convention of indicating that = line-wraps are only for readability, and including the header field name = in the example. Putting all this together, I believe what you want is: >=20 > For example, a Identity header field for "rph" might look > as follows (backslashes shown for line folding only): >=20 > Identity: eyJhbGciOiJFUzI1NiIsInBwdCI6InJwaCIsInR5cCI6InBhc3Nwb3J0I = \ > iwieDV1IjoiaHR0cHM6Ly93d3cuZXhhbXBsZS5jb20vY2VydC5jZXIifQo.eyJkZXN0 = \ > Ijp7WyJ0biI6IjEyMTI1NTUwMTEzIl19LCJpYXQiOiIxNDQzMjA4MzQ1Iiwib3JpZyI = \ > 6eyJ0biI6IjEyMTU1NTUwMTEyIn0sInJwaCI6eyJhdXRoIjpbImV0cy4wIiwid3BzLj = \ > AiXX19Cg.s37S6VC8HM6Dl6YzJeQDsrZcwJ0lizxhUrA7f_98oWBHvo-cl-n8MIhoCr = \ > 18vYYFy3blXvs3fslM_oos2P2Dyw;info=3D \ > >;alg=3DES256;ppt=3Drph >=20 > (Note: this example assumes the calling and called party numbers in = the previous example are changed to 12155550112 = and 12155550113 , = respectively) >=20 > =20 >=20 >=20 > A SIP authentication service typically will derive the value of = "rph" > from the 'Resource-Priority' header field based on policy = associated > with service specific use of the "namespace "." r-priority" values > based on [RFC4412]. The authentication service derives the value = of > the PASSPorT claim by verifying the authorization for Resource- > Priority (i.e., verifying a calling user privilege for Resource- > Priority based on its identity) which might be derived from = customer > profile data or from access to external services. >=20 > [RFC4412] allows multiple "namespace "." r-priority" pairs, either = in > a single SIP Resource-Priority header or across multiple SIP > =20 >=20 > Single quotes around 'Resource-Priority'. >=20 > "...header field..." >=20 > =20 >=20 > Resource-Priority headers. However, it is not necessary to sign = all > =20 >=20 > Single quotes around 'Resource-Priority'. >=20 > "...header fields..." >=20 > =20 >=20 > content of a SIP Resource-Priority header or all SIP Resource- > =20 >=20 > Single quotes around 'Resource-Priority'. >=20 > "...header field..." >=20 > =20 >=20 > Priority headers in a given SIP message. An authority is only > =20 >=20 > Single quotes around 'Resource-Priority'. >=20 > "...header fields..." >=20 > =20 >=20 > responsible for signing the content of a SIP Resource-Priority = header > =20 >=20 > Single quotes around 'Resource-Priority'. >=20 > "...header field..." >=20 > =20 >=20 > for which it has authority (e.g., a specific "namespace "." > r-priority"). >=20 > 4.2. Verification Service Behavior >=20 > [I-D.ietf-stir-rfc4474bis] Section 6.2 Step 5 requires that > specifications defining "ppt" values describe any additional = verifier > behavior. The behavior specified for the "ppt" values of "rph" is = as > follows: >=20 > The verification service MUST extract the value associated with the > "auth" key in a full form PASSPorT with a "ppt" value of "rph". If > the signature validates, then the verification service can use the > value of the "rph" claim as validation that the calling party is > authorized for Resource-Priority, which would in turn be used for > =20 > Single quotes around 'Resource-Priority'. >=20 > This text is ambiguous about whether the validation indicates that the = calling party is authorized to use the priorities indicated in the = passport object, or the values in the SIP 'Resource-Priority' header = field; and (taken on its face) implies the latter, when the intention = here should clearly be the former. >=20 > "...authorized for 'Resource-Priority' indicated in the claim. This = value would in turn be used for..." >=20 > The text also needs to say something about comparing values in the = claim to values in the 'Resource-Priority' header field, and what a = mismatch might mean. The document says elsewhere that the signature = might only cover some of the r-values, which makes it entirely possible = that the 'Resource-Priority' field might contain more values than are = signed. On the other hand, intermediaries might reasonably remove = r-values as the call is processed. This probably means that those = removed priorities should not be used, even if they are present in the = passport. It seems reasonable to say that *typical* processing by a = receiving party would be to take the *union* of all RPH passports that = they trust, and *intersect* that with the priorities in = 'Resource-Priority' header fields to get the actual priority or = priorities to be applied to the call (subject to local policy). >=20 > =20 >=20 > priority treatment in accordance with local policy for the = associated > communication service. >=20 > In addition, [I-D.ietf-stir-rfc4474bis] Section 6.2 Step 4 requires > "iat" value in "rph" claim to be verified. >=20 > The behavior of a SIP UAs upon receiving an INVITE containing a > =20 >=20 > "...of a SIP UA upon..." >=20 > or >=20 > "...of SIP UAs upon..." >=20 > =20 >=20 > PASSporT object with a "rph" claim will largely remain a matter of > implementation policy for the specific communication service. In > most cases,implementations would act based on confidence in the > =20 >=20 > "...cases, implementations..." >=20 > (space after comma) >=20 > =20 >=20 > veracity of this information. The use of the compact form of > =20 >=20 > Paragraph break before "The". >=20 > =20 >=20 > PASSporT is not specified in this document. >=20 > 5. Further Information Associated with Resource-Priority > =20 >=20 > Single quotes around 'Resource-Priority'. >=20 > =20 >=20 >=20 > There may be additional information about the calling party or the > call that could be relevant to authorization for Resource-Priority. > =20 >=20 > Single quotes around 'Resource-Priority'. >=20 > =20 >=20 > This may include information related to the device subscription of > the caller, or to any institutions that the caller or device is > associated with, or even categories of institutions. All of these > data elements would benefit from the secure attestations provided = by > the STIR and PASSporT frameworks. The specification of the "rph" > claim could entail the optional presence of one or more such > additional information fields. >=20 > A new IANA registry has been defined to hold potential values of = the > "rph" array; see Section 6.2. The definition of the "rph" claim = may > have one or more such additional information field(s). Details of > such "rph" claim to encompass other data elements are left for = future > version of this specification. >=20 > 6. IANA Considerations >=20 > 6.1. JSON Web Token Claims Registration > =20 >=20 > I think there's some confusion here. You're registering a PASSporT ppt = value, not a new JWT claim. That is to say, you're adding an entry to = this table: >=20 > https://www.iana.org/assignments/passport/passport.xhtml = > Not to this table: >=20 > https://www.iana.org/assignments/jwt/jwt.xhtml = > You would only use the second table if you had a new key to add to the = PASSporT header -- this specification does not do that. >=20 > This section also needs some introductory text to let the IANA know = exactly what to do; e.g. "This document registers a new value for the = "Personal Assertion Token (PASSporT) Extensions" table. >=20 >=20 > o ppt value: "rph" >=20 > o Specification Document(s): Section 3 of [RFCThis] >=20 > 6.2. PASSporT 'rph' Types >=20 > This document requests that the IANA add a new entry to the = PASSporT > Types registry for the type "rph" which is specified in [RFCThis]. > =20 >=20 > There isn't an IANA table called "PASSporT Types." I presume this is = the registration we just discussed in section 6.1, and so the above two = lines can be removed. >=20 > =20 >=20 > This specification also requests that the IANA create a new = registry > for PASSporT "rph" types. Registration of new PASSporT "rph" types > shall be under the specification required policy. This registry is > to be initially populated with a single value for "auth" which is > specified in [RFCThis]. > =20 >=20 > This needs to be very clear about the fields to be included in this = new registry (e.g., "Registry entries must contain two fields: the name = of the 'rph' type and the specification in which the type is = described"). >=20 > =20 >=20 >=20 > 7. Security Considerations >=20 > The security considerations discussed in [I-D.ietf-stir-rfc4474bis] > in Section 10 are applicable here. >=20 > 7.1. Avoidance of replay and cut and paste attacks >=20 > The PASSporT extension with a "ppt" value of "rph" MUST only be = sent > with SIP INVITE when 'Resource-Priority' header is used to convey = the > =20 >=20 > "...header field..." >=20 > =20 >=20 > priority of the communication as defined in [RFC4412]. To avoid = the > replay, and cut and paste attacks, the procedures described in > Section 10.1 of [I-D.ietf-stir-rfc4474bis] MUST be followed. >=20 > 7.2. Solution Considerations >=20 > The use of extension to PASSporT tokens with "ppt" value "rph" = based > on the validation of the digital signature and the associated > certificate requires consideration of the authentication and > authority or reputation of the signer to attest to the identity = being > asserted. The following considerations should be recognized when > using PASSporT extension with "ppt" value of "rph": >=20 > o An authority (signer) is only allowed to sign the content of a = SIP > 'Resource-Priority' header for which it has the right authority. > =20 >=20 > "...header field..." >=20 > =20 >=20 > The authority that signs the token MUST have a secure method for > authentication of the end user or the device. >=20 > o The verification of the signature MUST include means of = verifying > that the signer is authoritative for the signed content of the = SIP > =20 >=20 > It's not clear what authority is being claimed here. Is this supposed = to mean something like "...verifying that the signer is authoritative = for the originating tn in the PASSporT..."? Or "...authoritative for the = resource priority namespace in the PASSporT?" Whatever the server is = purportedly authoritative for needs to be clearly spelled out. >=20 > =20 >=20 > 'Resource-Priority' header. > =20 >=20 > "...header field." >=20 > =20 >=20 > /a=20 >=20 > _______________________________________________ > stir mailing list > stir@ietf.org > https://www.ietf.org/mailman/listinfo/stir = > =20 > _______________________________________________ > stir mailing list > stir@ietf.org > https://www.ietf.org/mailman/listinfo/stir --Apple-Mail=_FDB3C203-A874-46AA-B9E5-280DCB7E14F2 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 A = PASSporT can only be signed by one authority and that authority needs to = only be an authority of the context of the assertion being made by the = PASSporT.  For RPH, the assertion is the association of the rph = claim to the telephone call with to/from/date.  This is not to be = confused with SHAKEN which the authority of the assertion is around the = caller-id at origination.  These are completely different concepts = and shouldn=E2=80=99t be correlated.  Just because =E2=80=9Corig=E2=80= =9D is in the claim for RPH doesn=E2=80=99t necessarily mean that RPH = signer has authority for it, it=E2=80=99s purely to associate the RPH = code with the specific call details.

-Chris

On Feb = 5, 2018, at 10:58 AM, DOLLY, MARTIN C <md3135@att.com> = wrote:

Christer,
 
It does not need = to.
 
Regards,
 
Martin
 
From: Christer Holmberg [mailto:christer.holmberg@ericsson.com] 
Sent: Monday, February 05, 2018 = 10:20 AM
To: Julio Martinez-Minguito = <julio.martinez-minguito@ericsson.com>; Singh, Ray P = <rsingh@vencorelabs.com>; stir@ietf.org
Cc: DOLLY, MARTIN C <md3135@att.com>; Subir = <subirdas21@gmail.com>; Adam Roach <adam@nostrum.com>; = STIR Chairs <stir-chairs@ietf.org>; draft-ietf-stir-rph.all@tools.ietf.org
Subject: RE: [stir] AD Review: = draft-ietf-stir-rph-02 - authority to assert the callers identity = assumed?
 
Hi,
 
Related to this: how does the verifier know what claim(s) in = a PASSPorT the signer had authority to sign?
 
Regards,
 
Christer
 
From: Julio = Martinez-Minguito 
Sent: 05 February 2018 17:12
To: Christer Holmberg <christer.holmberg@ericsson.com>; Singh, Ray P <rsingh@vencorelabs.com>; stir@ietf.org
Cc: DOLLY, MARTIN C <md3135@att.com>; Subir <subirdas21@gmail.com>; = Adam Roach <adam@nostrum.com>; = STIR Chairs <stir-chairs@ietf.org>; draft-ietf-stir-rph.all@tools.ietf.org
Subject: RE: [stir] AD Review: = draft-ietf-stir-rph-02 - authority to assert the callers identity = assumed?
 
Hi,
 
If the PASSporT with = extension ppt:rph only has authority over the rph claim, does it mean = that we need another PASSporT in the signaling to claim authority over = the =E2=80=98orig=E2=80=99 number?
Should there be = nested PASSporTs?
 
Regards, Julio
 
From: Christer Holmberg [mailto:christer.holmberg@ericsson.com] 
Sent: den= 5 februari 2018 07:38
To: Singh, Ray P <rsingh@vencorelabs.com>
Cc: DOLLY, MARTIN C <md3135@att.com>; Subir <subirdas21@gmail.com>; stir@ietf.org; Adam Roach <adam@nostrum.com>; STIR = Chairs <stir-chairs@ietf.org>; draft-ietf-stir-rph.all@tools.ietf.org
Subject: Re: [stir] AD Review: = draft-ietf-stir-rph-02 - authority to assert the callers identity = assumed?
 
Hi, 
 
I think the = reason why =E2=80=98orig=E2=80=99 and =E2=80=98dest=E2=80=99 are = required in every PASSPorT should be explained the the PASSPorT = document, in my opinion. It is not specific to the RPH extension.
 
Not sure = how =E2=80=98orig=E2=80=99 can be used to identify a call. You can have = multiple calls with the same =E2=80=98orig=E2=80=99 value, can=E2=80=99t = you? 
 
Regards,
 
Christer
 

 

Sent from my iPhone


On 4 Feb 2018, at 21.45, Singh, = Ray P <rsingh@vencorelabs.com> wrote:

All,

Yes, the claim is only for the RPH. The"orig" = and "dest" is included so that the RPH claim can be correlated to the = call.  We can add some clarification text to indicate that "orig" = is only included so that the RPH claim can be correlated to a specific = call, and that the signer of the RPH claim may no have authority of the = "orig" TN.

Thanks

Ray

 

 

From: stir [stir-bounces@ietf.org] on = behalf of DOLLY, MARTIN C [md3135@att.com]
Sent: Sunday, February 04, 2018 = 7:05 PM
To: Subir; Christer Holmberg
Cc: stir@ietf.org; Adam Roach; STIR Chairs; draft-ietf-stir-rph.all@tools.ietf.org
Subject: Re: [stir] AD Review: = draft-ietf-stir-rph-02 - authority to assert the callers identity = assumed?

We only have one = claim and that is the RPH
 
From: Subir [mailto:subirdas21@gmail.com] 
Sent: Sunday, February 04, 2018 = 5:56 PM
To: Christer Holmberg <christer.holmberg@ericsson.com>
Cc: Adam = Roach <adam@nostrum.com>; STIR = Chairs <stir-chairs@ietf.org>; stir@ietf.org; draft-ietf-stir-rph.all@tools.ietf.org
Subject: Re: [stir] AD Review: = draft-ietf-stir-rph-02 - authority to assert the callers identity = assumed?
 

We can add = some texts to clarify that in the next version. The point is that in = some use cases service provider may have the authority to  other = claims such as 'orig' and in other cases it may not have.  We can = add a may statement clarifying this or explicitly say that it is not = required to have authority to other claims.
 
Thanks,
 
Subir Sent from my iPhone


On Feb 4, 2018, at 10:03 PM, Christer Holmberg <christer.holmberg@ericsson.com> wrote:

Hi,
 
The text = says:
 
   =E2=80=9CThe= credentials (e.g., authority responsible for authorizing = Resource-
   Priority) = used to create the signature must have authority over the
   namespace of the "rph" claim and there is only = one authority per
   = claim.=E2=80=9D
 
If the credentials = don=E2=80=99t need to have authority of the other claims (e.g., = =E2=80=9Corig=E2=80=9D) in the RPH PASSPorT I think you should = explicitly say so.
 
Regards,
 
Christer
 
 
From: Subir Das [mailto:subirdas21@gmail.com] 
Sent: 02 = February 2018 01:04
To: Christer Holmberg <christer.holmberg@ericsson.com>
Cc: Adam = Roach <adam@nostrum.com>; STIR Chairs <stir-chairs@ietf.org>; stir@ietf.org; draft-ietf-stir-rph.all@tools.ietf.org
Subject: Re: [stir] AD Review: = draft-ietf-stir-rph-02 - authority to assert the callers identity = assumed?
 
Hello Christer,
The signing entity does not have always the = authority to assert the caller identity in rph. We are submitting ver-03 = draft  and it is clarified  as follows:
"The credentials (e.g., authority responsible for authorizing = Resource-Priority) used to create the signature must have authority over = the namespace of the=E2=80=9Crph" claim.." 
 
-Subir
 
On Mon, Jan 22, 2018 at 3:27 PM, Christer Holmberg = <christer.holmberg@ericsson.com> wrote:
Hi,
 
Another question for clarification.
 
Section 3 contains the = following example:
 
    { = "orig":{"tn":"12155551212"}
     = "dest":{["tn":"12125551213"]},
     = "iat":1443208345,
     = "rph":{"auth":["ets.0","wps.0"]}
 
=E2=80=A6and the = following text:
 
   =E2=80=9CThe= credentials (e.g., authority responsible for authorizing = Resource-
   Priority) = used to create the signature must have authority over the
   "rph" claim=E2=80=A6=E2=80=9D
 
Since the claim also contains =E2=80=9Corig=E2=80=9D, is the = assumption that the signing entity always also has authority to assert = the callers identity? I think it would be good to explicitly mention = it.
 
Regards,
 
Christer
 
 
 
 
 
 
From: stir = [mailto:stir-bounces@ietf.org] On Behalf Of Adam Roach
Sent: 20 January 2018 00:15
To: STIR Chairs = <stir-chairs@ietf.org>; stir@ietf.org; draft-ietf-stir-rph.all@tools.ietf.org
Subject: [stir] AD Review: = draft-ietf-stir-rph-02
 

I'm doing my AD review of draft-ietf-stir-rph-02. Thanks to = everyone who has worked on this document, and the authors and chairs in = particular.

The technical content here looks generally good to me. I'd = like to see a few issues addressed before IETF LC. In short sumary:

  • The validation section needs to add a discussion of = how to treat calls when the priority values in "rph" passports and SIP = "Resource-Priority" header fields aren't 100% identical.
  • The examples need some adjustment. 
  • There is a minor point of ambiguity in the Security Section, but = this should be easy to fix, as long as the WG knows what was = intended.
  • The IANA actions need a little bit = of adjustment. 
  • There are a number of minor editorial issues to be cleaned = up.

Detailed comments on these points are inline in the document = below. I've removed some portions of the document on which I have no = comments.

 


Abstract

   = This document extends the STIR PASSporT specification to allow = the

 

"...the Secure Telephone Identity Revisited (STIR) = Personal Assertion Token (PASSporT) specification defined in RFC = 8122..."

(See <https://www.rfc-editor.org/materials/abbrev.expansion.txt&g= t; for guidance on = abbreviations)

 

   inclusion of cryptographically-signed assertions = of authorization for
   = the values populated in the SIP 'Resource-Priority' header = field,
   which is used for communications = resource prioritization.

...

1.  Introduction

   PASSporT [I-D.ietf-stir-passport] is a token = format based on JWT
   [RFC7519] for = conveying cryptographically-signed information about
   the identities involved in personal = communications; it is used with
   = STIR [I-D.ietf-stir-rfc4474bis] to convey a signed assertion of = the
   identity of the participants in = real-time communications established
   = via a protocol like SIP.  This specification extends PASSporT = to

 

"...like SIP [RFC3261]..."

(We = want to cite SIP the first time it is mentioned)

 

   allow cryptographic-signing of the SIP = 'Resource-Priority' header
   = field defined in [RFC4412].

   = [RFC4412] defines the SIP 'Resource-Priority' header field for
   communications Resource Priority.  As = specified in [RFC4412], the
   'Resource-Priority' = header field may be used by SIP user agents
   = [RFC3261], including, Public Switched Telephone Network = (PSTN)

 

"...including Public Switched..."

(remove the comma)

 

   = gateways and terminals, and SIP proxy servers to = influence

 

"...and by SIP proxy servers, to influence..."

(add= "by" and comma)

 

   prioritization afforded to communication = sessions,including PSTN
 

"...sessions, including..."

(space after comma)

 

   calls.  However, the SIP = 'Resource-Priority' header field could be
   spoofed and abused by unauthorized = entities.

   The STIR architecture = [RFC7340]assumes that an authority on the

 

"...STIR architecture [RFC7340] assumes..."

(space before "assumes")

 

   = originating side of a call provides a cryptographic assurance of = the
   = validity of the calling party number in order to prevent
   impersonation attacks.  The STIR = architecture allows extension that

 

"...allows extensions..."

 

   can = be utilized by authorities supporting real-time = communication
   = services using the 'Resource-Priority' header field to
   cryptographically sign the SIP = 'Resource-Priority' header field and
   = convey assertion of the authorization for 'Resource-Priority'.  = For
   example, the authority on the = originating side verifying the
   = authorization of a particular communication for Resource-Priority = can

 

Single quotes around 'Resource-Priority'.

 

   use a PASSPorT claim to cryptographically-sign = the SIP 'Resource-

 

"...cryptographically sign..."

 

   Priority' header field and convey an assertion = of the authorization
   = for 'Resource-Priority'.  This will allow a receiving = entity
   (including entities located in = different network domains/boundaries)
   = to verify the validity of assertions authorizing = Resource-Priority.

 

Single quotes around 'Resource-Priority'.

 

   Cryptographically-signed SIP 'Resource-Priority' = headers will allow a

 

"...cryptographically signed SIP = 'Resource-Priority' header fields..."

(remove hyphen, and replace = "headers" with "header fields")

 

   = receiving entity to verify and act on the information with = confidence
   = that the information have not been spoofed or = compromised.

 

"...has not been spoofed or compromised."

 


   = This specification documents an optional extension to PASSporT = and
   the associated STIR mechanisms to = provide a function to sign the SIP
   = 'Resource-Priority' header field.  This PASSporT object is used = to
   provide attestation of a calling = user authorization for priority
   = communications.  This is necessary in addition to the PASSporT = object
   that is used for calling user = telephone number attestation.  How the
   = optional extension to PASSporT is used for real-time = communications
   supported using SIP = 'Resource-Priority' header field is defined in
   = other documents and is outside the scope of this = document.

 

I assume these other documents are under = development? If so, they should be cited here.

 


2.  = Terminology

   The key words "MUST", = "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT",
   = "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in = this
   document are to be interpreted as = described in RFC 2119 [RFC2119].

 

This= document has several non-normative uses of "must", "should," and "may," = and so it needs to use the RFC8174 boilerplate instead of the RFC2119 = boilerplate.

 


3.  = PASSporT 'rph' Claim

   = This specification defines a new JSON Web Token claim for "rph",
   which provides an assertion for information in = SIP 'Resource-
   = Priority'header.

 

"...Priority' header field."

(space after closing quotation mark, "header field" instead = of "header")

 


   = The creator of a PASSporT object adds a "ppt" value of "rph" to = the
   header of a PASSporT object, in = which case the PASSporT claims MUST
   = contain a "rph" claim, and any entities verifying the PASSporT = object
   will be required to understand the = "ppt" extension in order to
   process the PASSporT = in question.  A PASSPorT header with the "ppt"
   = included will look as follows:

   = {  "typ":"passport",
     = "ppt":"rph",
     "alg":"ES256",
     "x5u":"https://www.example.org/cert.cer"}

 

Ideally, this would be either pretty-printed or = canonicalized. Since it's too long to fit on a line in canonical form, I = propose:

{
  "typ":"passport",
  = "ppt":"rph",
  "alg":"ES256",
  = "x5u":"https://www.example.org/cert.cer"
}

 


   = The "rph" claim will provide an assertion of = authorization,"auth",

 

"...authorization, "auth", ..."

(space between comma and opening quotation mark)

 

   for information in the SIP "Resource-Priority" = header field (i.e.,
   = Resource-Priority: namespace "." r-priority) based on = [RFC4412].

 

The use of the string 'namespace "." r-priority' = here and elsewhere in the document has a detrimental impact on = readability. I strongly suggest replacing it with "r-value" (the name of = this production in RFC4412) everywhere.

 

   = Specifically, the "rph" claim includes assertion of the = priority-
   = level of the user to be used for a given communication session.  = The
   value of the "rph" claim is an array = containing one or more of JSON
   = objects for the content of the SIP 'Resource-Priority' header that = is
   being asserted of which one of the = "rph" object, is mandatory.

 

This last sentence is very hard to parse; and = (based on the example) the value is intended to be a JSON Object (curly = braces) rather than a JSON Array (square braces). I suggest: 'The value = of the "rph" claim is an Object with one or more keys. Each key is = associated with a JSON Array. These arrays contain Strings that = correspond to the r-values indicated in the SIP "Resource-Priority" = header field.' (note: "header field", not "header")

 


   = The following is an example "rph" claim for a SIP = "Resource-Priority"
   header field with a = "namespace "." r-priority" value of "ets.0" and
   = with a "namespace "." r-priority" value of "wps.0".
    { "orig":{"tn":"12155551212"}
     "dest":{["tn":"12125551213"]},
     "iat":1443208345,
     = "rph":{"auth":["ets.0","wps.0"]}

 

As = above, I recommend pretty-printing this. It's also missing a comma after = the "orig" value, and the top-level structure is missing a closing = brace. The value for "iat" needs to be enclosed in quotes.

The = NANPA has allocated NPA55501xx for example use, not NPA555xxxx, much of = which remains assignable (cf<https://www.nationalnanpa.com/pdf/NRUF/ATIS-0300115.pdf>= ).

Putting all this together, I believe what you want is:

{
  = "orig":{"tn":"12155550112"},
  = "dest":{["tn":"12125550113"]},
  = "iat":"1443208345",
  = "rph":{"auth":["ets.0","wps.0"]}
}

 


   = After the header and claims PASSporT objects have been = constructed,
   their signature is generated = normally per the guidance in
   = [I-D.ietf-stir-passport] using the full form of PASSPorT.  = The
   credentials (e.g., authority = responsible for authorizing Resource-
   = Priority) used to create the signature must have authority over = the
   "rph" claim and there is only one = authority per claim.  The authority
   = MUST use its credentials (i.e., CERT) associated with the = specific
   service supported by the SIP = namespace in the claim.

4.  = 'rph' in SIP

   This section specifies = SIP-specific usage for the "rph" claim in
   = PASSporT.

4.1.  Authentication Service = Behavior

   The Authentication = Service will create the "rph" claim using the
   = values discussed in section 3 based on [RFC4412].  The = construction
   of "rph" claim follows the steps = described in Section 4 of
   = [I-D.ietf-stir-rfc4474bis].

   = The resulting Identity header for "rph" might look as = follows:

 

"...header field..."

 


   = "eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJleUowZVhBaU9pSnd
   = ZWE56Y0c5eWRDSXNEUW9pY0hCMElqb2ljbkJvSWl3TkNpSmhiR2NpT2lKRlV6STFO
   = aUlzRFFvaWVEVjFJanBvZEhSd2N6b3ZMM2QzZHk1bGVHRnRjR3hsTG1OdmJTOWpaW
   = EowTG1ObGNuME5DZzBLIHx84oCZLuKAmXx8IGV5QWliM0pwWnlJNmV5SjBiaUk2SW
   = pFeU1UVTFOVFV4TWpFeUluME5DaUprWlhOMElqcDdXeUowYmlJNklqRXlNVEkxTlR
   = VeE1qRXpJbDE5TEEwS0ltbGhkQ0k2TVRRME16SXdPRE0wTlN3TkNpSnljR2dpT25z
   = aVlYVjBhQ0k2V3lKbGRITXVNQ0lzSW5kd2N5NHdJbDE5RFFvPSJ9.s37S6VC8HM6D
   = l6YzJeQDsrZcwJ0lizxhUrA7f_98oWBHvo-cl-n8MIhoCr18vYYFy3blXvs3fslM_
   oos2P2Dyw"; info=3D "https://www.example.org/cert.cer";alg=3DES256;
   ppt=3D"rph"

 

This= example has a number of issues:

  • In = the Identity header field, the signed-identity-digest shouldn't be = quoted. 
  • In the Identity header field, info is enclosed in <> = rather than "". 
  • In the Identity header field, ppt is a token rather than a = quoted string. 
  • The signed-identity-digest header needs to indicate a "typ" of = "passport" rather than JWT, and it needs to include both a "ppt" and = "x5u" field.
  • The signed-identity-digest body = should contain only the passport claim rather than a JSON object that = itself contains a base64-encoded JWS header concatenated with a = claim.
  • I believe that, even when the body is included, = values in the header and body need to be be canonicalized (i.e., all on = one line, no spaces, in alphabetical order, etc.)

I = would also recommend following the convention of indicating that = line-wraps are only for readability, and including the header field name = in the example. Putting all this together, I believe what you want = is:

   For example, a = Identity header field for "rph" might look
   as follows (backslashes shown for = line folding only):

   Identity: = eyJhbGciOiJFUzI1NiIsInBwdCI6InJwaCIsInR5cCI6InBhc3Nwb3J0I = \
   = iwieDV1IjoiaHR0cHM6Ly93d3cuZXhhbXBsZS5jb20vY2VydC5jZXIifQo.eyJkZXN0 = \
   = Ijp7WyJ0biI6IjEyMTI1NTUwMTEzIl19LCJpYXQiOiIxNDQzMjA4MzQ1Iiwib3JpZyI = \
   = 6eyJ0biI6IjEyMTU1NTUwMTEyIn0sInJwaCI6eyJhdXRoIjpbImV0cy4wIiwid3BzLj = \
   = AiXX19Cg.s37S6VC8HM6Dl6YzJeQDsrZcwJ0lizxhUrA7f_98oWBHvo-cl-n8MIhoCr = \
   = 18vYYFy3blXvs3fslM_oos2P2Dyw;info=3D<https://www.example.org/cert.cer \
   >;alg=3DES256;ppt=3Drph

(Note: this = example assumes the calling and called party numbers in the previous = example are changed to 12155550112and 12155550113, = respectively)

 


   = A SIP authentication service typically will derive the value of = "rph"
   from the 'Resource-Priority' header = field based on policy associated
   = with service specific use of the "namespace "." r-priority" = values
   based on [RFC4412].  The = authentication service derives the value of
   = the PASSPorT claim by verifying the authorization for Resource-
   Priority (i.e., verifying a calling user = privilege for Resource-
   Priority based on its = identity) which might be derived from customer
   = profile data or from access to external services.

   [RFC4412] allows multiple "namespace "." = r-priority" pairs, either in
   a single SIP = Resource-Priority header or across multiple SIP

 

Single quotes around 'Resource-Priority'.

"...header field..."

 

   = Resource-Priority headers.  However, it is not necessary to sign = all

 

Single quotes around 'Resource-Priority'.

"...header fields..."

 

   = content of a SIP Resource-Priority header or all SIP = Resource-

 

Single quotes around 'Resource-Priority'.

"...header field..."

 

   = Priority headers in a given SIP message.  An authority is = only

 

Single quotes around 'Resource-Priority'.

"...header fields..."

 

   = responsible for signing the content of a SIP Resource-Priority = header

 

Single quotes around 'Resource-Priority'.

"...header field..."

 

   for = which it has authority (e.g., a specific "namespace "."
   r-priority").

4.2.  Verification Service Behavior
   [I-D.ietf-stir-rfc4474bis] Section 6.2 Step 5 = requires that
   specifications defining "ppt" values = describe any additional verifier
   = behavior.  The behavior specified for the "ppt" values of "rph" is = as
   follows:

   The verification service MUST extract the value = associated with the
   "auth" key in a full = form PASSPorT with a "ppt" value of "rph".  If
   = the signature validates, then the verification service can use = the
   value of the "rph" claim as = validation that the calling party is
   = authorized for Resource-Priority, which would in turn be used = for
 

Single quotes around 'Resource-Priority'.

This= text is ambiguous about whether the validation indicates that the = calling party is authorized to use the priorities indicated in the = passport object, or the values in the SIP 'Resource-Priority' header = field; and (taken on its face) implies the latter, when the intention = here should clearly be the former.

"...authorized for = 'Resource-Priority' indicated in the claim. This value would in turn be = used for..."

The text also needs to say something about = comparing values in the claim to values in the 'Resource-Priority' = header field, and what a mismatch might mean. The document says = elsewhere that the signature might only cover some of the r-values, = which makes it entirely possible that the 'Resource-Priority' field = might contain more values than are signed. On the other hand, = intermediaries might reasonably remove r-values as the call is = processed. This probably means that those removed priorities should not = be used, even if they are present in the passport. It seems reasonable = to say that *typical* processing by a receiving party would be to take = the *union* of all RPH passports that they trust, and *intersect* that = with the priorities in 'Resource-Priority' header fields to get the = actual priority or priorities to be applied to the call (subject to = local policy).

 

   priority treatment in accordance with local = policy for the associated
   = communication service.

   = In addition, [I-D.ietf-stir-rfc4474bis] Section 6.2 Step 4 = requires
   "iat" value in "rph" claim to be = verified.

   The behavior of a SIP = UAs upon receiving an INVITE containing a

 

"...of a SIP UA upon..."

or

"...of SIP UAs upon..."

 

   = PASSporT object with a "rph" claim will largely remain a matter = of
   implementation policy = for the specific communication service.  In
   = most cases,implementations would act based on confidence in = the

 

"...cases, implementations..."

(space after comma)

 

   = veracity of this information.  The use of the compact form = of

 

Paragraph break before "The".

 

   PASSporT is not specified in this = document.

5.  = Further Information Associated with Resource-Priority

 

Single quotes around 'Resource-Priority'.

 


   = There may be additional information about the calling party or = the
   call that could be relevant to = authorization for Resource-Priority.

 

Single quotes around 'Resource-Priority'.

 

   This may include information related to the = device subscription of
   = the caller, or to any institutions that the caller or device is
   associated with, or even categories of = institutions.  All of these
   = data elements would benefit from the secure attestations provided = by
   the STIR and PASSporT = frameworks.  The specification of the "rph"
   = claim could entail the optional presence of one or more such
   additional information fields.

   A new IANA registry has been defined = to hold potential values of the
   = "rph" array; see Section 6.2.  The definition of the "rph" claim = may
   have one or more such additional = information field(s).  Details of
   = such "rph" claim to encompass other data elements are left for = future
   version of this = specification.

6.  IANA = Considerations

6.1.  JSON Web Token Claims = Registration

 

I think there's some confusion here. You're = registering a PASSporT ppt value, not a new JWT claim. That is to say, = you're adding an entry to this table:

https://www.iana.org/assignments/passport/passport.xhtml

Not to this table:

https://www.iana.org/assignments/jwt/jwt.xhtml

You = would only use the second table if you had a new key to add to the = PASSporT header -- this specification does not do that.

This= section also needs some introductory text to let the IANA know exactly = what to do; e.g. "This document registers a new value for the "Personal = Assertion Token (PASSporT) Extensions" table.


   o  ppt value: = "rph"

   o  Specification = Document(s): Section 3 of [RFCThis]

6.2.  = PASSporT 'rph' Types

   = This document requests that the IANA add a new entry to the = PASSporT
   Types registry for the type "rph" = which is specified in [RFCThis].

 

There isn't an IANA table called "PASSporT Types." I presume = this is the registration we just discussed in section 6.1, and so the = above two lines can be removed.

 

   This = specification also requests that the IANA create a new = registry
   = for PASSporT "rph" types.  Registration of new PASSporT "rph" = types
   shall be under the specification = required policy.  This registry is
   = to be initially populated with a single value for "auth" which = is
   specified in = [RFCThis].

 

This needs to be very clear about the fields to be = included in this new registry (e.g., "Registry entries must contain two = fields: the name of the 'rph' type and the specification in which the = type is described").

 


7.  = Security Considerations

   = The security considerations discussed in = [I-D.ietf-stir-rfc4474bis]
   in Section 10 are = applicable here.

7.1.  = Avoidance of replay and cut and paste attacks

   The PASSporT extension with a "ppt" value of = "rph" MUST only be sent
   with SIP INVITE when = 'Resource-Priority' header is used to convey the

 

"...header field..."

 

   = priority of the communication as defined in [RFC4412].  To avoid = the
   = replay, and cut and paste attacks, the procedures described in
   Section 10.1 of [I-D.ietf-stir-rfc4474bis] MUST = be followed.

7.2.  Solution = Considerations

   The use of extension = to PASSporT tokens with "ppt" value "rph" based
   = on the validation of the digital signature and the associated
   certificate requires consideration of the = authentication and
   authority or = reputation of the signer to attest to the identity being
   asserted.  The following considerations = should be recognized when
   using PASSporT = extension with "ppt" value of "rph":

   = o  An authority (signer) is only allowed to sign the content of a = SIP
      = 'Resource-Priority' header for which it has the right = authority.

 

"...header field..."

 

      The authority that signs the = token MUST have a secure method for
      authentication of the end user = or the device.

   o  The = verification of the signature MUST include means of verifying
      that the signer is = authoritative for the signed content of the SIP

 

It's= not clear what authority is being claimed here. Is this supposed to = mean something like "...verifying that the signer is authoritative for = the originating tn in the PASSporT..."? Or "...authoritative for the = resource priority namespace in the PASSporT?" Whatever the server is = purportedly authoritative for needs to be clearly spelled out.

 

      'Resource-Priority' = header.

 

"...header field."

 

/a 


_______________________________________________
stir mailing list
stir@ietf.org
https://www.ietf.org/mailman/listinfo/stir

 
<= /div>
_______________________________________________
stir mailing list
stir@ietf.org
https://www.ietf.org/mailman/listinfo/stir

= --Apple-Mail=_FDB3C203-A874-46AA-B9E5-280DCB7E14F2-- From nobody Tue Mar 13 11:00:40 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C4DC812D77E for ; Tue, 13 Mar 2018 11:00:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=chriswendt-net.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3QZjAWu2imnf for ; Tue, 13 Mar 2018 11:00:37 -0700 (PDT) Received: from mail-ua0-x231.google.com (mail-ua0-x231.google.com [IPv6:2607:f8b0:400c:c08::231]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B852C124C27 for ; Tue, 13 Mar 2018 11:00:36 -0700 (PDT) Received: by mail-ua0-x231.google.com with SMTP id j15so345273uan.3 for ; Tue, 13 Mar 2018 11:00:36 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=chriswendt-net.20150623.gappssmtp.com; s=20150623; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=Yg+ziZ/1hMAnB2QhQiz2mHH+hjcZTvUVopb6bd0ZIqU=; b=EgZB1O30RGDGKEkkswCZj7gUwo3eDGBAPmhAT2EmOV/Lkofe1FOrUIsAw7nx0e54j/ R2p0uURNN2o1NDeqST3PMJkwqVkT67tUfxdXz3RKVYVTd/1afbUOo1zoyUXuJlKIaIBd L4xTwB3AHr4pgQnKEeyfRq37EHmHktPnbwRI8cIhwPGV+KNi/JTaIvcAAn1akZQyBdvR 8P97hz4J+ut4tOXsawC3Kk0qUF+zJ2GPrNAWcm0TOUz75iXkPY/5gEfp1nxO5VMxPfJn bQvDcFlyhz+rAybfgAu3U0vq3skQVX9Eea7OHBi6v4ov0WIXapsOkSVZSDa1xLYFUXZe dJjg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=Yg+ziZ/1hMAnB2QhQiz2mHH+hjcZTvUVopb6bd0ZIqU=; b=fg8imDm1kAwtUmveZwR3/BFcjzaFPcg149rtA3LikRITVMHCjujHDIha5pe+jFSr4Z Chu2pwVGo1GRaE/ehUB4yv6jDmilQ7RcFThmyrpgG9ords4POHy2v1teBHgjSlpBgSoA z4Z9YHQydgcyYJADzLjxXrDaX5eKOQFrPZSUYDz4tqlq87BKtIYXThYegI0xSV3jIupW aCADtm1ZB/nL0iuhazsESfIuKv+V4eyt66MNOIMbg56olEDUdC+OI8Hba/kVYsou8Z8L J8FsGBl5cVgyKX/YVsPdTknaP3flc6w28yJWZH0u/qzzbSwYfT/838yag5xtevr0auaD lD9A== X-Gm-Message-State: AElRT7F9gjIGWSVZ3o/U4mlVW9c8+USMj1F+X/GOlYvDiNY436/JsBkh zkSu1/G9Pptl694Wy9652tFHZzTixC0= X-Google-Smtp-Source: AG47ELvlzGU+OVEiUun163SrOSWKJiLu3ZEo4Dc2I2KeYv8vYLc3D0OXpK2TQgEXImxufjj65wmlbQ== X-Received: by 10.159.54.227 with SMTP id p90mr1236413uap.74.1520964035777; Tue, 13 Mar 2018 11:00:35 -0700 (PDT) Received: from [10.54.100.112] ([96.47.153.2]) by smtp.gmail.com with ESMTPSA id j47sm532885uaf.51.2018.03.13.11.00.34 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 13 Mar 2018 11:00:34 -0700 (PDT) From: Chris Wendt Message-Id: <8B0E0275-68BD-41E9-B128-589F13C06D66@chriswendt.net> Content-Type: multipart/alternative; boundary="Apple-Mail=_728C0E68-49AA-4C64-A5FD-8294036A6473" Mime-Version: 1.0 (Mac OS X Mail 11.2 \(3445.5.20\)) Date: Tue, 13 Mar 2018 14:00:33 -0400 In-Reply-To: <7594FB04B1934943A5C02806D1A2204B6C1D1804@ESESSMB109.ericsson.se> Cc: "stir@ietf.org" , "adam@nostrum.com" To: Christer Holmberg References: <7594FB04B1934943A5C02806D1A2204B6C1D17C1@ESESSMB109.ericsson.se> <7594FB04B1934943A5C02806D1A2204B6C1D1804@ESESSMB109.ericsson.se> X-Mailer: Apple Mail (2.3445.5.20) Archived-At: Subject: Re: [stir] PASSporT extensions: order of claims X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 13 Mar 2018 18:00:39 -0000 --Apple-Mail=_728C0E68-49AA-4C64-A5FD-8294036A6473 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 I would agree with the text, the only caveat i would point out is that = the extension definition has no choice to the order other than = alphabetic order, so the order is essentially implied. So, it=E2=80=99s = sort of a technicality that maybe we didn=E2=80=99t anticipate, but i = think technically you are correct. -Chris > On Mar 10, 2018, at 8:27 AM, Christer Holmberg = wrote: >=20 > Section 8.3 of RFC 8225, that is. > =C2=A0 <> > From: stir [mailto:stir-bounces@ietf.org] On Behalf Of Christer = Holmberg > Sent: 10 March 2018 15:26 > To: stir@ietf.org > Cc: adam@nostrum.com > Subject: [stir] PASSporT extensions: order of claims > =20 > Hi, > =20 > Section says: > =20 > =E2=80=9CSpecifications that define extensions to the PASSporT = mechanism MUST > explicitly specify what claims they include beyond the base set of > claims from this document, the order in which they will = appear,=E2=80=A6=E2=80=9D > =20 > When looking at the extensions we are currently working on: > =20 > draft-ietf-stir-rph-03 > draft-ietf-stir-passport-shaken-01 > draft-ietf-stir-passport-divert-02 > =20 > =E2=80=A6I don=E2=80=99t see anything about the order in any of the = documents. > =20 > I think it would be good to have a dedicated =E2=80=9COrder of = claims=E2=80=9D section, or something similar, in each extension = specification. > =20 > When looking at the examples in the drafts above, it seems like even = the base claims are in different orders. Not sure whether there is an = explicit requirement that they need to be in order, thought. > =20 > Regards, > =20 > Christer > =20 > =20 > _______________________________________________ > stir mailing list > stir@ietf.org > https://www.ietf.org/mailman/listinfo/stir --Apple-Mail=_728C0E68-49AA-4C64-A5FD-8294036A6473 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 I = would agree with the text, the only caveat i would point out is that the = extension definition has no choice to the order other than alphabetic = order, so the order is essentially implied.  So, it=E2=80=99s sort = of a technicality that maybe we didn=E2=80=99t anticipate, but i think = technically you are correct.

-Chris

On Mar 10, 2018, at 8:27 AM, = Christer Holmberg <christer.holmberg@ericsson.com> wrote:

Section = 8.3 of RFC 8225, that is.
 
From: stir [mailto:stir-bounces@ietf.org] On Behalf = Of Christer = Holmberg
Sent: 10 March 2018 15:26
To: stir@ietf.org
Cc: adam@nostrum.com
Subject: [stir] PASSporT extensions: = order of claims
 
Hi,
 
Section  says:
 
   =E2=80=9CSpecifications that define extensions = to the PASSporT mechanism MUST
   explicitly specify what = claims they include beyond the base set of
   claims from this = document, the order in which they will appear,=E2=80=A6=E2=80=9D
 
When = looking at the extensions we are currently working on:
 
draft-ietf-stir-rph-03
draft-ietf-stir-passport-shaken-01
draft-ietf-stir-passport-divert-02
 
=E2=80=A6I = don=E2=80=99t see anything about the order in any of the documents.
 
I think = it would be good to have a dedicated =E2=80=9COrder of claims=E2=80=9D = section, or something similar, in each extension specification.
 
When = looking at the examples in the drafts above, it seems like even the base = claims are in different orders. Not sure whether there is an explicit = requirement that they need to be in order, thought.
 
Regards,
 
Christer
 
 
_______________________________________________
stir mailing list
stir@ietf.org
https://www.ietf.org/mailman/listinfo/stir

= --Apple-Mail=_728C0E68-49AA-4C64-A5FD-8294036A6473-- From nobody Tue Mar 13 11:47:34 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0A3AF127775 for ; Tue, 13 Mar 2018 11:47:33 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.319 X-Spam-Level: X-Spam-Status: No, score=-4.319 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nt1z-91amcIF for ; Tue, 13 Mar 2018 11:47:30 -0700 (PDT) Received: from sessmg23.ericsson.net (sessmg23.ericsson.net [193.180.251.45]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 553991200F1 for ; Tue, 13 Mar 2018 11:47:30 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; d=ericsson.com; s=mailgw201801; c=relaxed/simple; q=dns/txt; i=@ericsson.com; t=1520966848; h=From:Sender:Reply-To:Subject:Date:Message-ID:To:CC:MIME-Version:Content-Type: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=roqdytyReFbEYZzvF0M/4DdBbxdzR/BqZJjcfi2lFmw=; b=H0KOTDv3yL3Cd5nQvHecyARwMuDBO4MDelT37CkrjrFqHKurCR4wRjgTeqFkKSO7 pZKjcCzJ0MDnzGd5qyST6t0dOgMQ5nDxgy+97asgtwKr+tv0M/T3+dLnb3tE5v2N pWcys24tKwYqvEfIiImeh8XioL7BFOi7VVwp5PFAWVY=; X-AuditID: c1b4fb2d-87c029c000005540-f7-5aa81cc07e35 Received: from ESESSHC009.ericsson.se (Unknown_Domain [153.88.183.45]) by sessmg23.ericsson.net (Symantec Mail Security) with SMTP id AF.E4.21824.0CC18AA5; Tue, 13 Mar 2018 19:47:28 +0100 (CET) Received: from ESESSMB109.ericsson.se ([169.254.9.172]) by ESESSHC009.ericsson.se ([153.88.183.45]) with mapi id 14.03.0382.000; Tue, 13 Mar 2018 19:47:27 +0100 From: Christer Holmberg To: Chris Wendt CC: "stir@ietf.org" , "adam@nostrum.com" Thread-Topic: [stir] PASSporT extensions: order of claims Thread-Index: AdO4Vc+a+PS/xYPIRfO1T1CAVYYAVAAHa1xAAJ5T3oAAA66kkA== Date: Tue, 13 Mar 2018 18:47:27 +0000 Message-ID: <7594FB04B1934943A5C02806D1A2204B6C2007A0@ESESSMB109.ericsson.se> References: <7594FB04B1934943A5C02806D1A2204B6C1D17C1@ESESSMB109.ericsson.se> <7594FB04B1934943A5C02806D1A2204B6C1D1804@ESESSMB109.ericsson.se> <8B0E0275-68BD-41E9-B128-589F13C06D66@chriswendt.net> In-Reply-To: <8B0E0275-68BD-41E9-B128-589F13C06D66@chriswendt.net> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [153.88.183.170] Content-Type: multipart/alternative; boundary="_000_7594FB04B1934943A5C02806D1A2204B6C2007A0ESESSMB109erics_" MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprDIsWRmVeSWpSXmKPExsUyM2K7ru4BmRVRBnsuKVns+buI3WL6p93M FsvXbmNyYPaY0LeG1WPJkp9MHrN2PmEJYI7isklJzcksSy3St0vgyvj81LfgRhdjxYHlf1kb GP+0MXYxcnJICJhItMyZzNbFyMUhJHCYUWJ9azMrhLOEUWLt+VYgh4ODTcBCovufNkiDiIC2 xOEzDWDNzAJeEp8WrGYCKREGKvnaZQBRYikx+d16ZgjbSeLLzVPsIDaLgKpE29UTTCA2r4Cv xP+Ob2C2kMBJRonT3+1BxnAC1f9oFwAJMwqISXw/tYYJYpO4xK0n85kgThaQWLLnPDOELSrx 8vE/VghbSeLMpucsEPX5EpcfL2SBWCUocXLmE5YJjCKzkIyahaRsFpKyWUBXMAtoSqzfpQ9R oigxpfshO4StIdE6Zy47svgCRvZVjKLFqcXFuelGxnqpRZnJxcX5eXp5qSWbGIFxdnDLb90d jKtfOx5iFOBgVOLhfci9IkqINbGsuDL3EKMEB7OSCK8cH1CINyWxsiq1KD++qDQntfgQozQH i5I470lP3ighgfTEktTs1NSC1CKYLBMHp1QDI5v/gR3RdW5Zf7pjxe1/xsVwd/SGfRf6oXV6 8gN2hlmKfjvVXpz4WBZturjor9WXJ+KPbEv1n1rdWd7Nmdi2yUuXqb+B9RHzkdX8bAcndS36 5M5+Volp+n/LmFgZvadL/mp9vrQz79dpUU2vI5a+HXZ25R2nXyrPDZtdk3n97PWrf6YskX7O qcRSnJFoqMVcVJwIAGkEvICvAgAA Archived-At: Subject: Re: [stir] PASSporT extensions: order of claims X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 13 Mar 2018 18:47:33 -0000 --_000_7594FB04B1934943A5C02806D1A2204B6C2007A0ESESSMB109erics_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGksDQoNCj5JIHdvdWxkIGFncmVlIHdpdGggdGhlIHRleHQsIHRoZSBvbmx5IGNhdmVhdCBpIHdv dWxkIHBvaW50IG91dCBpcyB0aGF0IHRoZSBleHRlbnNpb24gZGVmaW5pdGlvbiBoYXMNCj5ubyBj aG9pY2UgdG8gdGhlIG9yZGVyIG90aGVyIHRoYW4gYWxwaGFiZXRpYyBvcmRlciwgc28gdGhlIG9y ZGVyIGlzIGVzc2VudGlhbGx5IGltcGxpZWQuICBTbywgaXTigJlzIHNvcnQNCj5vZiBhIHRlY2hu aWNhbGl0eSB0aGF0IG1heWJlIHdlIGRpZG7igJl0IGFudGljaXBhdGUsIGJ1dCBpIHRoaW5rIHRl Y2huaWNhbGx5IHlvdSBhcmUgY29ycmVjdC4NCg0KTm90IHN1cmUgSSB1bmRlcnN0YW5kIHRoZSBo YXMtbm8tY2hvaWNlIHBhcnQuIFdoZXJlIGlzIGl0IHNhaWQgdGhhdCB0aGUgY2xhaW1zIG11c3Qg YmUgb3JkZXJlZCBpbiBhbHBoYWJldGljIG9yZGVyPyBXZSBjb3VsZCBmb3Igc3VyZSBzcGVjaWZ5 IGl0IHRoYXQgd2F5LCBidXQgYmFzZWQgb24geW91ciBlLW1haWwgaXQgc2VlbXMgbGlrZSBpdCBp cyBhbHJlYWR5IHNwZWNpZmllZCBzb21ld2hlcmU/DQoNClJlZ2FyZHMsDQoNCkNocmlzdGVyDQoN Cg0KDQpPbiBNYXIgMTAsIDIwMTgsIGF0IDg6MjcgQU0sIENocmlzdGVyIEhvbG1iZXJnIDxjaHJp c3Rlci5ob2xtYmVyZ0Blcmljc3Nvbi5jb208bWFpbHRvOmNocmlzdGVyLmhvbG1iZXJnQGVyaWNz c29uLmNvbT4+IHdyb3RlOg0KDQpTZWN0aW9uIDguMyBvZiBSRkMgODIyNSwgdGhhdCBpcy4NCg0K RnJvbTogc3RpciBbbWFpbHRvOnN0aXItYm91bmNlc0BpZXRmLm9yZ10gT24gQmVoYWxmIE9mIENo cmlzdGVyIEhvbG1iZXJnDQpTZW50OiAxMCBNYXJjaCAyMDE4IDE1OjI2DQpUbzogc3RpckBpZXRm Lm9yZzxtYWlsdG86c3RpckBpZXRmLm9yZz4NCkNjOiBhZGFtQG5vc3RydW0uY29tPG1haWx0bzph ZGFtQG5vc3RydW0uY29tPg0KU3ViamVjdDogW3N0aXJdIFBBU1Nwb3JUIGV4dGVuc2lvbnM6IG9y ZGVyIG9mIGNsYWltcw0KDQpIaSwNCg0KU2VjdGlvbiAgc2F5czoNCg0KICAg4oCcU3BlY2lmaWNh dGlvbnMgdGhhdCBkZWZpbmUgZXh0ZW5zaW9ucyB0byB0aGUgUEFTU3BvclQgbWVjaGFuaXNtIE1V U1QNCiAgIGV4cGxpY2l0bHkgc3BlY2lmeSB3aGF0IGNsYWltcyB0aGV5IGluY2x1ZGUgYmV5b25k IHRoZSBiYXNlIHNldCBvZg0KICAgY2xhaW1zIGZyb20gdGhpcyBkb2N1bWVudCwgdGhlIG9yZGVy IGluIHdoaWNoIHRoZXkgd2lsbCBhcHBlYXIs4oCm4oCdDQoNCldoZW4gbG9va2luZyBhdCB0aGUg ZXh0ZW5zaW9ucyB3ZSBhcmUgY3VycmVudGx5IHdvcmtpbmcgb246DQoNCmRyYWZ0LWlldGYtc3Rp ci1ycGgtMDMNCmRyYWZ0LWlldGYtc3Rpci1wYXNzcG9ydC1zaGFrZW4tMDENCmRyYWZ0LWlldGYt c3Rpci1wYXNzcG9ydC1kaXZlcnQtMDINCg0K4oCmSSBkb27igJl0IHNlZSBhbnl0aGluZyBhYm91 dCB0aGUgb3JkZXIgaW4gYW55IG9mIHRoZSBkb2N1bWVudHMuDQoNCkkgdGhpbmsgaXQgd291bGQg YmUgZ29vZCB0byBoYXZlIGEgZGVkaWNhdGVkIOKAnE9yZGVyIG9mIGNsYWltc+KAnSBzZWN0aW9u LCBvciBzb21ldGhpbmcgc2ltaWxhciwgaW4gZWFjaCBleHRlbnNpb24gc3BlY2lmaWNhdGlvbi4N Cg0KV2hlbiBsb29raW5nIGF0IHRoZSBleGFtcGxlcyBpbiB0aGUgZHJhZnRzIGFib3ZlLCBpdCBz ZWVtcyBsaWtlIGV2ZW4gdGhlIGJhc2UgY2xhaW1zIGFyZSBpbiBkaWZmZXJlbnQgb3JkZXJzLiBO b3Qgc3VyZSB3aGV0aGVyIHRoZXJlIGlzIGFuIGV4cGxpY2l0IHJlcXVpcmVtZW50IHRoYXQgdGhl eSBuZWVkIHRvIGJlIGluIG9yZGVyLCB0aG91Z2h0Lg0KDQpSZWdhcmRzLA0KDQpDaHJpc3Rlcg0K DQoNCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQpzdGly IG1haWxpbmcgbGlzdA0Kc3RpckBpZXRmLm9yZzxtYWlsdG86c3RpckBpZXRmLm9yZz4NCmh0dHBz Oi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vc3Rpcg0KDQo= --_000_7594FB04B1934943A5C02806D1A2204B6C2007A0ESESSMB109erics_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 SGVsdmV0aWNhOw0KCXBhbm9zZS0xOjIgMTEgNiA0IDIgMiAyIDIgMiA0O30NCkBmb250LWZhY2UN Cgl7Zm9udC1mYW1pbHk6IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAz IDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAx NSA1IDIgMiAyIDQgMyAyIDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFs LCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBjbTsNCgltYXJnaW4tYm90 dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseToiVGltZXMgTmV3 IFJvbWFuIixzZXJpZjt9DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1w cmlvcml0eTo5OTsNCgljb2xvcjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0K YTp2aXNpdGVkLCBzcGFuLk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0 eTo5OTsNCgljb2xvcjpwdXJwbGU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpzcGFu LmFwcGxlLWNvbnZlcnRlZC1zcGFjZQ0KCXttc28tc3R5bGUtbmFtZTphcHBsZS1jb252ZXJ0ZWQt c3BhY2U7fQ0Kc3Bhbi5FbWFpbFN0eWxlMTgNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWw7DQoJ Zm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJY29sb3I6IzFGNDk3RDt9DQpzcGFu LkVtYWlsU3R5bGUxOQ0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1jb21wb3NlOw0KCWZvbnQt ZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0KLk1zb0No cERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1zaXplOjEwLjBw dDt9DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo2MTIuMHB0IDc5Mi4wcHQ7DQoJbWFyZ2lu OjcyLjBwdCA3Mi4wcHQgNzIuMHB0IDcyLjBwdDt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6 V29yZFNlY3Rpb24xO30NCi0tPjwvc3R5bGU+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpz aGFwZWRlZmF1bHRzIHY6ZXh0PSJlZGl0IiBzcGlkbWF4PSIxMDI2IiAvPg0KPC94bWw+PCFbZW5k aWZdLS0+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWxheW91dCB2OmV4dD0iZWRp dCI+DQo8bzppZG1hcCB2OmV4dD0iZWRpdCIgZGF0YT0iMSIgLz4NCjwvbzpzaGFwZWxheW91dD48 L3htbD48IVtlbmRpZl0tLT4NCjwvaGVhZD4NCjxib2R5IGxhbmc9IkVOLUdCIiBsaW5rPSJibHVl IiB2bGluaz0icHVycGxlIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVv dDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RDttc28tZmFyZWFzdC1sYW5n dWFnZTpFTi1VUyI+SGksPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mZ3Q7SSB3b3Vs ZCBhZ3JlZSB3aXRoIHRoZSB0ZXh0LCB0aGUgb25seSBjYXZlYXQgaSB3b3VsZCBwb2ludCBvdXQg aXMgdGhhdCB0aGUgZXh0ZW5zaW9uIGRlZmluaXRpb24gaGFzDQo8bzpwPjwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+Jmd0Ozwvc3Bhbj5ubyBjaG9pY2Ug dG8gdGhlIG9yZGVyIG90aGVyIHRoYW4gYWxwaGFiZXRpYyBvcmRlciwgc28gdGhlIG9yZGVyIGlz IGVzc2VudGlhbGx5IGltcGxpZWQuICZuYnNwO1NvLCBpdOKAmXMgc29ydA0KPG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtm b250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPiZndDs8L3NwYW4+b2Yg YSB0ZWNobmljYWxpdHkgdGhhdCBtYXliZSB3ZSBkaWRu4oCZdCBhbnRpY2lwYXRlLCBidXQgaSB0 aGluayB0ZWNobmljYWxseSB5b3UgYXJlIGNvcnJlY3QuPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj48bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEx LjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPk5vdCBzdXJl IEkgdW5kZXJzdGFuZCB0aGUgaGFzLW5vLWNob2ljZSBwYXJ0LiBXaGVyZSBpcyBpdCBzYWlkIHRo YXQgdGhlIGNsYWltcyBtdXN0IGJlIG9yZGVyZWQgaW4gYWxwaGFiZXRpYyBvcmRlcj8gV2UgY291 bGQgZm9yIHN1cmUgc3BlY2lmeSBpdCB0aGF0IHdheSwgYnV0IGJhc2VkIG9uIHlvdXINCiBlLW1h aWwgaXQgc2VlbXMgbGlrZSBpdCBpcyBhbHJlYWR5IHNwZWNpZmllZCBzb21ld2hlcmU/PG86cD48 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj48 bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNh bnMtc2VyaWYiPlJlZ2FyZHMsPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2Fs aWJyaSZxdW90OyxzYW5zLXNlcmlmIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWls eTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPkNocmlzdGVyPG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj48bzpwPiZuYnNw OzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PGJyPg0KPGJyPg0KPG86cD48L286cD48L3A+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFy Z2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj5PbiBNYXIgMTAsIDIwMTgsIGF0IDg6MjcgQU0sIENocmlzdGVyIEhvbG1iZXJnICZs dDs8YSBocmVmPSJtYWlsdG86Y2hyaXN0ZXIuaG9sbWJlcmdAZXJpY3Nzb24uY29tIj5jaHJpc3Rl ci5ob2xtYmVyZ0Blcmljc3Nvbi5jb208L2E+Jmd0OyB3cm90ZTo8bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdE Ij5TZWN0aW9uIDguMyBvZiBSRkMgODIyNSwgdGhhdCBpcy48L3NwYW4+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlm Ij48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxp YnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7PC9zcGFuPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fu cy1zZXJpZiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdiBzdHls ZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjRTFFMUUxIDEuMHB0O3BhZGRpbmc6My4w cHQgMGNtIDBjbSAwY20iPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFuIGxh bmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxp YnJpJnF1b3Q7LHNhbnMtc2VyaWYiPkZyb206PC9zcGFuPjwvYj48c3BhbiBjbGFzcz0iYXBwbGUt Y29udmVydGVkLXNwYWNlIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj4mbmJzcDs8L3Nw YW4+PC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPnN0aXINCiBbPGEgaHJlZj0i bWFpbHRvOnN0aXItYm91bmNlc0BpZXRmLm9yZyI+bWFpbHRvOnN0aXItYm91bmNlc0BpZXRmLm9y ZzwvYT5dPHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxi Pk9uIEJlaGFsZiBPZjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwv c3Bhbj48L2I+Q2hyaXN0ZXIgSG9sbWJlcmc8YnI+DQo8Yj5TZW50OjwvYj48c3BhbiBjbGFzcz0i YXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+MTAgTWFyY2ggMjAxOCAxNToyNjxi cj4NCjxiPlRvOjwvYj48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8 L3NwYW4+PGEgaHJlZj0ibWFpbHRvOnN0aXJAaWV0Zi5vcmciPnN0aXJAaWV0Zi5vcmc8L2E+PGJy Pg0KPGI+Q2M6PC9iPjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwv c3Bhbj48YSBocmVmPSJtYWlsdG86YWRhbUBub3N0cnVtLmNvbSI+YWRhbUBub3N0cnVtLmNvbTwv YT48YnI+DQo8Yj5TdWJqZWN0OjwvYj48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNl Ij4mbmJzcDs8L3NwYW4+W3N0aXJdIFBBU1Nwb3JUIGV4dGVuc2lvbnM6IG9yZGVyIG9mIGNsYWlt czwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtD YWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0K PC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2Vy aWYiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+SGksPG86cD48L286cD48L3NwYW4+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj4mbmJz cDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxp YnJpJnF1b3Q7LHNhbnMtc2VyaWYiPlNlY3Rpb24mbmJzcDsgc2F5czo8bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2Vy aWYiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+Jm5ic3A7Jm5ic3A7IOKAnFNwZWNpZmljYXRp b25zIHRoYXQgZGVmaW5lIGV4dGVuc2lvbnMgdG8gdGhlIFBBU1Nwb3JUIG1lY2hhbmlzbSBNVVNU PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJy aSZxdW90OyxzYW5zLXNlcmlmIj4mbmJzcDsmbmJzcDsgZXhwbGljaXRseSBzcGVjaWZ5IHdoYXQg Y2xhaW1zIHRoZXkgaW5jbHVkZSBiZXlvbmQgdGhlIGJhc2Ugc2V0IG9mPG86cD48L286cD48L3Nw YW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNl cmlmIj4mbmJzcDsmbmJzcDsgY2xhaW1zIGZyb20gdGhpcyBkb2N1bWVudCw8c3BhbiBjbGFzcz0i YXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PGI+dGhlIG9yZGVyIGluIHdoaWNo IHRoZXkgd2lsbCBhcHBlYXI8L2I+LOKApuKAnTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+Jm5ic3A7PG86 cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZx dW90OyxzYW5zLXNlcmlmIj5XaGVuIGxvb2tpbmcgYXQgdGhlIGV4dGVuc2lvbnMgd2UgYXJlIGN1 cnJlbnRseSB3b3JraW5nIG9uOjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+Jm5ic3A7PG86cD48L286cD48 L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5z LXNlcmlmIj5kcmFmdC1pZXRmLXN0aXItcnBoLTAzPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5kcmFmdC1p ZXRmLXN0aXItcGFzc3BvcnQtc2hha2VuLTAxPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5kcmFmdC1pZXRm LXN0aXItcGFzc3BvcnQtZGl2ZXJ0LTAyPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj4mbmJzcDs8bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7 LHNhbnMtc2VyaWYiPuKApkkgZG9u4oCZdCBzZWUgYW55dGhpbmcgYWJvdXQgdGhlIG9yZGVyIGlu IGFueSBvZiB0aGUgZG9jdW1lbnRzLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+Jm5ic3A7PG86cD48L286 cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90Oyxz YW5zLXNlcmlmIj5JIHRoaW5rIGl0IHdvdWxkIGJlIGdvb2QgdG8gaGF2ZSBhIGRlZGljYXRlZCDi gJxPcmRlciBvZiBjbGFpbXPigJ0gc2VjdGlvbiwgb3Igc29tZXRoaW5nIHNpbWlsYXIsIGluIGVh Y2ggZXh0ZW5zaW9uIHNwZWNpZmljYXRpb24uPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj4mbmJzcDs8bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1 b3Q7LHNhbnMtc2VyaWYiPldoZW4gbG9va2luZyBhdCB0aGUgZXhhbXBsZXMgaW4gdGhlIGRyYWZ0 cyBhYm92ZSwgaXQgc2VlbXMgbGlrZSBldmVuIHRoZSBiYXNlIGNsYWltcyBhcmUgaW4gZGlmZmVy ZW50IG9yZGVycy4gTm90IHN1cmUgd2hldGhlciB0aGVyZSBpcyBhbiBleHBsaWNpdCByZXF1aXJl bWVudCB0aGF0IHRoZXkgbmVlZA0KIHRvIGJlIGluIG9yZGVyLCB0aG91Z2h0LjxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fu cy1zZXJpZiI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5SZWdhcmRzLDxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1z ZXJpZiI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5DaHJpc3RlcjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJp ZiI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPl9fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fPGJyPg0Kc3RpciBtYWlsaW5n IGxpc3Q8YnI+DQo8YSBocmVmPSJtYWlsdG86c3RpckBpZXRmLm9yZyI+c3RpckBpZXRmLm9yZzwv YT48YnI+DQo8YSBocmVmPSJodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3N0 aXIiPmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vc3RpcjwvYT48L3NwYW4+ PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ib2R5 Pg0KPC9odG1sPg0K --_000_7594FB04B1934943A5C02806D1A2204B6C2007A0ESESSMB109erics_-- From nobody Tue Mar 13 11:52:16 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 15DC212D77E for ; Tue, 13 Mar 2018 11:52:14 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.33 X-Spam-Level: X-Spam-Status: No, score=-2.33 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=1.989, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2DhQWiMVQ5qk for ; Tue, 13 Mar 2018 11:52:07 -0700 (PDT) Received: from sessmg22.ericsson.net (sessmg22.ericsson.net [193.180.251.58]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7CC19129C56 for ; Tue, 13 Mar 2018 11:52:06 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; d=ericsson.com; s=mailgw201801; c=relaxed/simple; q=dns/txt; i=@ericsson.com; t=1520967124; h=From:Sender:Reply-To:Subject:Date:Message-ID:To:CC:MIME-Version:Content-Type: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=PT6El+t/hVFULUdEy+pBwThuK51sLLLMy3IUn4i+eRw=; b=cj3OFue4I7Mv3QrxC/WsmikPFTxAuV8wg/UqED4KmDNdAu1Zg1tSMFCJk+WhfQCn hI3zNLOMmnMh4yIis5h/Jzu8mK5BD7Gdeza/FOJzYENqTzDdRsWOet2ZNODq8QEE +BOt1i/iV4VIQnP2zvLWIVC1TVXdDtJIhiV6KDOMpcc=; X-AuditID: c1b4fb3a-35fff700000067b4-77-5aa81dd4aeea Received: from ESESSHC005.ericsson.se (Unknown_Domain [153.88.183.33]) by sessmg22.ericsson.net (Symantec Mail Security) with SMTP id FF.17.26548.4DD18AA5; Tue, 13 Mar 2018 19:52:04 +0100 (CET) Received: from ESESSMB109.ericsson.se ([169.254.9.172]) by ESESSHC005.ericsson.se ([153.88.183.33]) with mapi id 14.03.0382.000; Tue, 13 Mar 2018 19:52:03 +0100 From: Christer Holmberg To: Chris Wendt , "DOLLY, MARTIN C" CC: Julio Martinez-Minguito , "Singh, Ray P" , "stir@ietf.org" , "draft-ietf-stir-rph.all@tools.ietf.org" , Adam Roach , Subir , STIR Chairs Thread-Topic: [stir] AD Review: draft-ietf-stir-rph-02 - authority to assert the callers identity assumed? Thread-Index: AdOTv2oSY/dEf4YfRra4GseuGeXVLAH6TDcAAIWJiHAAEQ/yAAACac0AAAWX2oAACjLjqgAP2WKAAAJOgID///qTgIA4tVUA///hFVA= Date: Tue, 13 Mar 2018 18:52:03 +0000 Message-ID: <7594FB04B1934943A5C02806D1A2204B6C2007D4@ESESSMB109.ericsson.se> References: <7594FB04B1934943A5C02806D1A2204B6C135F8E@ESESSMB109.ericsson.se> <7594FB04B1934943A5C02806D1A2204B6C153849@ESESSMB109.ericsson.se> <0981B4BB-98C6-4DBB-8E13-A702944ACC3E@gmail.com> <7594FB04B1934943A5C02806D1A2204B6C156576@ESESSMB109.ericsson.se> <6BFF32BC-83FC-4085-8F1D-0E9F470FFE1E@chriswendt.net> In-Reply-To: <6BFF32BC-83FC-4085-8F1D-0E9F470FFE1E@chriswendt.net> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [153.88.183.170] Content-Type: multipart/alternative; boundary="_000_7594FB04B1934943A5C02806D1A2204B6C2007D4ESESSMB109erics_" MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFjrHIsWRmVeSWpSXmKPExsUyM2K7ou4V2RVRBitWyljs+buI3WL6p93M FquPn2OyOPTgKbvF+YcvmS2e7VjParF87TYmiykHlrE7cHi87J/D6DGhbw2rx85Zd9k9liz5 yeQxa+cTFo8vlz+zeTSf2socwB7FZZOSmpNZllqkb5fAlbHn6WT2giWreSu6GntZGhjX/Ofp YuTkkBAwkdj/dg9zFyMXh5DAYUaJc69eQzlLGCXWLnnA0sXIwcEmYCHR/U8bpEFEIFBi3s12 JpAaZoETTBIbN65nA0kIC2RLPNvymwWiKEfi5K+/jBB2mcT+R5uZQGwWAVWJ9adnMYPYvAK+ EpNuLmCDWNbMJjH5xQSwBk4BJ4ml3cfAhjIKiEl8P7UGrJlZQFzi1pP5TBBnC0gs2XOeGcIW lXj5+B8rhK0kcWbTcxaI+nyJ/2cXsUMsE5Q4OfMJywRGkVlIRs1CUjYLSdksoJ+ZBTQl1u/S hyhRlJjS/ZAdwtaQaJ0zlx1ZfAEj+ypG0eLU4uLcdCMjvdSizOTi4vw8vbzUkk2MwFg+uOW3 1Q7Gg88dDzEKcDAq8fAm86yIEmJNLCuuzD3EKMHBrCTCu1UGKMSbklhZlVqUH19UmpNafIhR moNFSZzXKc0iSkggPbEkNTs1tSC1CCbLxMEp1cDoIKi5VdT6y1pnhd7YvyemHplzRpF/bcGD 0zOXrjmyKaSL54DnRoHjjGY3Z9csDfS+2BHmHO8/ofnmjfWthv9nPVzwUkDr+y+jQM6lj8p/ cfebrV0xX+/YqYVH23Sym4pKoqpadz7dvCagbamcg5GLZ/uFVRrc9jL/La5vkGJZduZr4N9/ W7n+KrEUZyQaajEXFScCAOc2Mu7hAgAA Archived-At: Subject: Re: [stir] AD Review: draft-ietf-stir-rph-02 - authority to assert the callers identity assumed? X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 13 Mar 2018 18:52:14 -0000 --_000_7594FB04B1934943A5C02806D1A2204B6C2007D4ESESSMB109erics_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgQ2hyaXMsDQoNCj5BIFBBU1Nwb3JUIGNhbiBvbmx5IGJlIHNpZ25lZCBieSBvbmUgYXV0aG9y aXR5IGFuZCB0aGF0IGF1dGhvcml0eSBuZWVkcyB0byBvbmx5IGJlIGFuIGF1dGhvcml0eSBvZiB0 aGUgY29udGV4dCBvZiB0aGUgYXNzZXJ0aW9uIGJlaW5nIG1hZGUgYnkgdGhlID5QQVNTcG9yVC4g IEZvciBSUEgsIHRoZSBhc3NlcnRpb24gaXMgdGhlIGFzc29jaWF0aW9uIG9mIHRoZSBycGggY2xh aW0gdG8gdGhlIHRlbGVwaG9uZSBjYWxsIHdpdGggdG8vZnJvbS9kYXRlLiAgVGhpcyBpcyBub3Qg dG8gYmUgY29uZnVzZWQgd2l0aCBTSEFLRU4gPndoaWNoIHRoZSBhdXRob3JpdHkgb2YgdGhlIGFz c2VydGlvbiBpcyBhcm91bmQgdGhlIGNhbGxlci1pZCBhdCBvcmlnaW5hdGlvbi4gIFRoZXNlIGFy ZSBjb21wbGV0ZWx5IGRpZmZlcmVudCBjb25jZXB0cyBhbmQgc2hvdWxkbuKAmXQgYmUgY29ycmVs YXRlZC4gIEp1c3QgYmVjYXVzZSA+4oCcb3JpZ+KAnSBpcyBpbiB0aGUgY2xhaW0gZm9yIFJQSCBk b2VzbuKAmXQgbmVjZXNzYXJpbHkgbWVhbiB0aGF0IFJQSCBzaWduZXIgaGFzIGF1dGhvcml0eSBm b3IgaXQsIGl04oCZcyBwdXJlbHkgdG8gYXNzb2NpYXRlIHRoZSBSUEggY29kZSB3aXRoIHRoZSBz cGVjaWZpYyBjYWxsID5kZXRhaWxzLg0KDQpUaGFua3MgZm9yIHRoZSBjbGFyaWZpY2F0aW9uIQ0K DQpJIHRoaW5rIGVhY2ggUEFTU3BvclQgZXh0ZW5zaW9uIGNsZWFybHkgbmVlZHMgdG8gc2F5IHdo aWNoIG9mIHRoZSBjbGFpbXMgdGhlIG9uZSBpbnNlcnRpbmcgdGhlIFBBU1Nwb3JUIG11c3QgaGF2 ZSBhdXRob3JpdHkgb2YuIEkgYXNzdW1lIGl04oCZcyBvbmx5IHRoZSBjbGFpbXMgZGVmaW5lZCBi eSB0aGF0IFBBU1Nwb3JUIGV4dGVuc2lvbj8NCg0KTm90IHNwZWNpZmljIHRvIFJQSCwgYnV0IEkg YWxzbyBhc2tlZCB3aHkgZS5nLiwgdGhlIG9yaWcgY2xhaW0gbmVlZHMgdG8gYmUgaW5jbHVkZWQg aW4gdGhlIFBBU1Nwb3JUIGV4dGVuc2lvbiB0byBiZWdpbiB3aXRoLCBpZiB0aGUgb25lIGluc2Vy dGluZyB0aGUgUEFTU3BvclQgZG9lcyBub3QgaGF2ZSBhdXRob3JpdHkgb2YgaXQuDQoNClJlZ2Fy ZHMsDQoNCkNocmlzdGVyDQoNCg0KDQpPbiBGZWIgNSwgMjAxOCwgYXQgMTA6NTggQU0sIERPTExZ LCBNQVJUSU4gQyA8bWQzMTM1QGF0dC5jb208bWFpbHRvOm1kMzEzNUBhdHQuY29tPj4gd3JvdGU6 DQoNCkNocmlzdGVyLA0KDQpJdCBkb2VzIG5vdCBuZWVkIHRvLg0KDQpSZWdhcmRzLA0KDQpNYXJ0 aW4NCg0KRnJvbTogQ2hyaXN0ZXIgSG9sbWJlcmcgW21haWx0bzpjaHJpc3Rlci5ob2xtYmVyZ0Bl cmljc3Nvbi5jb21dDQpTZW50OiBNb25kYXksIEZlYnJ1YXJ5IDA1LCAyMDE4IDEwOjIwIEFNDQpU bzogSnVsaW8gTWFydGluZXotTWluZ3VpdG8gPGp1bGlvLm1hcnRpbmV6LW1pbmd1aXRvQGVyaWNz c29uLmNvbTxtYWlsdG86anVsaW8ubWFydGluZXotbWluZ3VpdG9AZXJpY3Nzb24uY29tPj47IFNp bmdoLCBSYXkgUCA8cnNpbmdoQHZlbmNvcmVsYWJzLmNvbTxtYWlsdG86cnNpbmdoQHZlbmNvcmVs YWJzLmNvbT4+OyBzdGlyQGlldGYub3JnPG1haWx0bzpzdGlyQGlldGYub3JnPg0KQ2M6IERPTExZ LCBNQVJUSU4gQyA8bWQzMTM1QGF0dC5jb208bWFpbHRvOm1kMzEzNUBhdHQuY29tPj47IFN1Ymly IDxzdWJpcmRhczIxQGdtYWlsLmNvbTxtYWlsdG86c3ViaXJkYXMyMUBnbWFpbC5jb20+PjsgQWRh bSBSb2FjaCA8YWRhbUBub3N0cnVtLmNvbTxtYWlsdG86YWRhbUBub3N0cnVtLmNvbT4+OyBTVElS IENoYWlycyA8c3Rpci1jaGFpcnNAaWV0Zi5vcmc8bWFpbHRvOnN0aXItY2hhaXJzQGlldGYub3Jn Pj47IGRyYWZ0LWlldGYtc3Rpci1ycGguYWxsQHRvb2xzLmlldGYub3JnPG1haWx0bzpkcmFmdC1p ZXRmLXN0aXItcnBoLmFsbEB0b29scy5pZXRmLm9yZz4NClN1YmplY3Q6IFJFOiBbc3Rpcl0gQUQg UmV2aWV3OiBkcmFmdC1pZXRmLXN0aXItcnBoLTAyIC0gYXV0aG9yaXR5IHRvIGFzc2VydCB0aGUg Y2FsbGVycyBpZGVudGl0eSBhc3N1bWVkPw0KDQpIaSwNCg0KUmVsYXRlZCB0byB0aGlzOiBob3cg ZG9lcyB0aGUgdmVyaWZpZXIga25vdyB3aGF0IGNsYWltKHMpIGluIGEgUEFTU1BvclQgdGhlIHNp Z25lciBoYWQgYXV0aG9yaXR5IHRvIHNpZ24/DQoNClJlZ2FyZHMsDQoNCkNocmlzdGVyDQoNCkZy b206IEp1bGlvIE1hcnRpbmV6LU1pbmd1aXRvDQpTZW50OiAwNSBGZWJydWFyeSAyMDE4IDE3OjEy DQpUbzogQ2hyaXN0ZXIgSG9sbWJlcmcgPGNocmlzdGVyLmhvbG1iZXJnQGVyaWNzc29uLmNvbTxt YWlsdG86Y2hyaXN0ZXIuaG9sbWJlcmdAZXJpY3Nzb24uY29tPj47IFNpbmdoLCBSYXkgUCA8cnNp bmdoQHZlbmNvcmVsYWJzLmNvbTxtYWlsdG86cnNpbmdoQHZlbmNvcmVsYWJzLmNvbT4+OyBzdGly QGlldGYub3JnPG1haWx0bzpzdGlyQGlldGYub3JnPg0KQ2M6IERPTExZLCBNQVJUSU4gQyA8bWQz MTM1QGF0dC5jb208bWFpbHRvOm1kMzEzNUBhdHQuY29tPj47IFN1YmlyIDxzdWJpcmRhczIxQGdt YWlsLmNvbTxtYWlsdG86c3ViaXJkYXMyMUBnbWFpbC5jb20+PjsgQWRhbSBSb2FjaCA8YWRhbUBu b3N0cnVtLmNvbTxtYWlsdG86YWRhbUBub3N0cnVtLmNvbT4+OyBTVElSIENoYWlycyA8c3Rpci1j aGFpcnNAaWV0Zi5vcmc8bWFpbHRvOnN0aXItY2hhaXJzQGlldGYub3JnPj47IGRyYWZ0LWlldGYt c3Rpci1ycGguYWxsQHRvb2xzLmlldGYub3JnPG1haWx0bzpkcmFmdC1pZXRmLXN0aXItcnBoLmFs bEB0b29scy5pZXRmLm9yZz4NClN1YmplY3Q6IFJFOiBbc3Rpcl0gQUQgUmV2aWV3OiBkcmFmdC1p ZXRmLXN0aXItcnBoLTAyIC0gYXV0aG9yaXR5IHRvIGFzc2VydCB0aGUgY2FsbGVycyBpZGVudGl0 eSBhc3N1bWVkPw0KDQpIaSwNCg0KSWYgdGhlIFBBU1Nwb3JUIHdpdGggZXh0ZW5zaW9uIHBwdDpy cGggb25seSBoYXMgYXV0aG9yaXR5IG92ZXIgdGhlIHJwaCBjbGFpbSwgZG9lcyBpdCBtZWFuIHRo YXQgd2UgbmVlZCBhbm90aGVyIFBBU1Nwb3JUIGluIHRoZSBzaWduYWxpbmcgdG8gY2xhaW0gYXV0 aG9yaXR5IG92ZXIgdGhlIOKAmG9yaWfigJkgbnVtYmVyPw0KU2hvdWxkIHRoZXJlIGJlIG5lc3Rl ZCBQQVNTcG9yVHM/DQoNClJlZ2FyZHMsIEp1bGlvDQoNCkZyb206IENocmlzdGVyIEhvbG1iZXJn IFttYWlsdG86Y2hyaXN0ZXIuaG9sbWJlcmdAZXJpY3Nzb24uY29tXQ0KU2VudDogZGVuIDUgZmVi cnVhcmkgMjAxOCAwNzozOA0KVG86IFNpbmdoLCBSYXkgUCA8cnNpbmdoQHZlbmNvcmVsYWJzLmNv bTxtYWlsdG86cnNpbmdoQHZlbmNvcmVsYWJzLmNvbT4+DQpDYzogRE9MTFksIE1BUlRJTiBDIDxt ZDMxMzVAYXR0LmNvbTxtYWlsdG86bWQzMTM1QGF0dC5jb20+PjsgU3ViaXIgPHN1YmlyZGFzMjFA Z21haWwuY29tPG1haWx0bzpzdWJpcmRhczIxQGdtYWlsLmNvbT4+OyBzdGlyQGlldGYub3JnPG1h aWx0bzpzdGlyQGlldGYub3JnPjsgQWRhbSBSb2FjaCA8YWRhbUBub3N0cnVtLmNvbTxtYWlsdG86 YWRhbUBub3N0cnVtLmNvbT4+OyBTVElSIENoYWlycyA8c3Rpci1jaGFpcnNAaWV0Zi5vcmc8bWFp bHRvOnN0aXItY2hhaXJzQGlldGYub3JnPj47IGRyYWZ0LWlldGYtc3Rpci1ycGguYWxsQHRvb2xz LmlldGYub3JnPG1haWx0bzpkcmFmdC1pZXRmLXN0aXItcnBoLmFsbEB0b29scy5pZXRmLm9yZz4N ClN1YmplY3Q6IFJlOiBbc3Rpcl0gQUQgUmV2aWV3OiBkcmFmdC1pZXRmLXN0aXItcnBoLTAyIC0g YXV0aG9yaXR5IHRvIGFzc2VydCB0aGUgY2FsbGVycyBpZGVudGl0eSBhc3N1bWVkPw0KDQpIaSwN Cg0KSSB0aGluayB0aGUgcmVhc29uIHdoeSDigJhvcmln4oCZIGFuZCDigJhkZXN04oCZIGFyZSBy ZXF1aXJlZCBpbiBldmVyeSBQQVNTUG9yVCBzaG91bGQgYmUgZXhwbGFpbmVkIHRoZSB0aGUgUEFT U1BvclQgZG9jdW1lbnQsIGluIG15IG9waW5pb24uIEl0IGlzIG5vdCBzcGVjaWZpYyB0byB0aGUg UlBIIGV4dGVuc2lvbi4NCg0KTm90IHN1cmUgaG93IOKAmG9yaWfigJkgY2FuIGJlIHVzZWQgdG8g aWRlbnRpZnkgYSBjYWxsLiBZb3UgY2FuIGhhdmUgbXVsdGlwbGUgY2FsbHMgd2l0aCB0aGUgc2Ft ZSDigJhvcmln4oCZIHZhbHVlLCBjYW7igJl0IHlvdT8NCg0KUmVnYXJkcywNCg0KQ2hyaXN0ZXIN Cg0KDQpTZW50IGZyb20gbXkgaVBob25lDQoNCk9uIDQgRmViIDIwMTgsIGF0IDIxLjQ1LCBTaW5n aCwgUmF5IFAgPHJzaW5naEB2ZW5jb3JlbGFicy5jb208bWFpbHRvOnJzaW5naEB2ZW5jb3JlbGFi cy5jb20+PiB3cm90ZToNCkFsbCwNClllcywgdGhlIGNsYWltIGlzIG9ubHkgZm9yIHRoZSBSUEgu IFRoZSJvcmlnIiBhbmQgImRlc3QiIGlzIGluY2x1ZGVkIHNvIHRoYXQgdGhlIFJQSCBjbGFpbSBj YW4gYmUgY29ycmVsYXRlZCB0byB0aGUgY2FsbC4gIFdlIGNhbiBhZGQgc29tZSBjbGFyaWZpY2F0 aW9uIHRleHQgdG8gaW5kaWNhdGUgdGhhdCAib3JpZyIgaXMgb25seSBpbmNsdWRlZCBzbyB0aGF0 IHRoZSBSUEggY2xhaW0gY2FuIGJlIGNvcnJlbGF0ZWQgdG8gYSBzcGVjaWZpYyBjYWxsLCBhbmQg dGhhdCB0aGUgc2lnbmVyIG9mIHRoZSBSUEggY2xhaW0gbWF5IG5vIGhhdmUgYXV0aG9yaXR5IG9m IHRoZSAib3JpZyIgVE4uDQpUaGFua3MNClJheQ0KDQoNCl9fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fDQpGcm9tOiBzdGlyIFtzdGlyLWJvdW5jZXNAaWV0Zi5vcmc8bWFpbHRvOnN0aXIt Ym91bmNlc0BpZXRmLm9yZz5dIG9uIGJlaGFsZiBvZiBET0xMWSwgTUFSVElOIEMgW21kMzEzNUBh dHQuY29tPG1haWx0bzptZDMxMzVAYXR0LmNvbT5dDQpTZW50OiBTdW5kYXksIEZlYnJ1YXJ5IDA0 LCAyMDE4IDc6MDUgUE0NClRvOiBTdWJpcjsgQ2hyaXN0ZXIgSG9sbWJlcmcNCkNjOiBzdGlyQGll dGYub3JnPG1haWx0bzpzdGlyQGlldGYub3JnPjsgQWRhbSBSb2FjaDsgU1RJUiBDaGFpcnM7IGRy YWZ0LWlldGYtc3Rpci1ycGguYWxsQHRvb2xzLmlldGYub3JnPG1haWx0bzpkcmFmdC1pZXRmLXN0 aXItcnBoLmFsbEB0b29scy5pZXRmLm9yZz4NClN1YmplY3Q6IFJlOiBbc3Rpcl0gQUQgUmV2aWV3 OiBkcmFmdC1pZXRmLXN0aXItcnBoLTAyIC0gYXV0aG9yaXR5IHRvIGFzc2VydCB0aGUgY2FsbGVy cyBpZGVudGl0eSBhc3N1bWVkPw0KV2Ugb25seSBoYXZlIG9uZSBjbGFpbSBhbmQgdGhhdCBpcyB0 aGUgUlBIDQoNCkZyb206IFN1YmlyIFttYWlsdG86c3ViaXJkYXMyMUBnbWFpbC5jb21dDQpTZW50 OiBTdW5kYXksIEZlYnJ1YXJ5IDA0LCAyMDE4IDU6NTYgUE0NClRvOiBDaHJpc3RlciBIb2xtYmVy ZyA8Y2hyaXN0ZXIuaG9sbWJlcmdAZXJpY3Nzb24uY29tPG1haWx0bzpjaHJpc3Rlci5ob2xtYmVy Z0Blcmljc3Nvbi5jb20+Pg0KQ2M6IEFkYW0gUm9hY2ggPGFkYW1Abm9zdHJ1bS5jb208bWFpbHRv OmFkYW1Abm9zdHJ1bS5jb20+PjsgU1RJUiBDaGFpcnMgPHN0aXItY2hhaXJzQGlldGYub3JnPG1h aWx0bzpzdGlyLWNoYWlyc0BpZXRmLm9yZz4+OyBzdGlyQGlldGYub3JnPG1haWx0bzpzdGlyQGll dGYub3JnPjsgZHJhZnQtaWV0Zi1zdGlyLXJwaC5hbGxAdG9vbHMuaWV0Zi5vcmc8bWFpbHRvOmRy YWZ0LWlldGYtc3Rpci1ycGguYWxsQHRvb2xzLmlldGYub3JnPg0KU3ViamVjdDogUmU6IFtzdGly XSBBRCBSZXZpZXc6IGRyYWZ0LWlldGYtc3Rpci1ycGgtMDIgLSBhdXRob3JpdHkgdG8gYXNzZXJ0 IHRoZSBjYWxsZXJzIGlkZW50aXR5IGFzc3VtZWQ/DQoNCg0KV2UgY2FuIGFkZCBzb21lIHRleHRz IHRvIGNsYXJpZnkgdGhhdCBpbiB0aGUgbmV4dCB2ZXJzaW9uLiBUaGUgcG9pbnQgaXMgdGhhdCBp biBzb21lIHVzZSBjYXNlcyBzZXJ2aWNlIHByb3ZpZGVyIG1heSBoYXZlIHRoZSBhdXRob3JpdHkg dG8gIG90aGVyIGNsYWltcyBzdWNoIGFzICdvcmlnJyBhbmQgaW4gb3RoZXIgY2FzZXMgaXQgbWF5 IG5vdCBoYXZlLiAgV2UgY2FuIGFkZCBhIG1heSBzdGF0ZW1lbnQgY2xhcmlmeWluZyB0aGlzIG9y IGV4cGxpY2l0bHkgc2F5IHRoYXQgaXQgaXMgbm90IHJlcXVpcmVkIHRvIGhhdmUgYXV0aG9yaXR5 IHRvIG90aGVyIGNsYWltcy4NCg0KVGhhbmtzLA0KDQpTdWJpcg0KU2VudCBmcm9tIG15IGlQaG9u ZQ0KDQpPbiBGZWIgNCwgMjAxOCwgYXQgMTA6MDMgUE0sIENocmlzdGVyIEhvbG1iZXJnIDxjaHJp c3Rlci5ob2xtYmVyZ0Blcmljc3Nvbi5jb208bWFpbHRvOmNocmlzdGVyLmhvbG1iZXJnQGVyaWNz c29uLmNvbT4+IHdyb3RlOg0KSGksDQoNClRoZSB0ZXh0IHNheXM6DQoNCiAgIOKAnFRoZSBjcmVk ZW50aWFscyAoZS5nLiwgYXV0aG9yaXR5IHJlc3BvbnNpYmxlIGZvciBhdXRob3JpemluZyBSZXNv dXJjZS0NCiAgIFByaW9yaXR5KSB1c2VkIHRvIGNyZWF0ZSB0aGUgc2lnbmF0dXJlIG11c3QgaGF2 ZSBhdXRob3JpdHkgb3ZlciB0aGUNCiAgIG5hbWVzcGFjZSBvZiB0aGUgInJwaCIgY2xhaW0gYW5k IHRoZXJlIGlzIG9ubHkgb25lIGF1dGhvcml0eSBwZXINCiAgIGNsYWltLuKAnQ0KDQpJZiB0aGUg Y3JlZGVudGlhbHMgZG9u4oCZdCBuZWVkIHRvIGhhdmUgYXV0aG9yaXR5IG9mIHRoZSBvdGhlciBj bGFpbXMgKGUuZy4sIOKAnG9yaWfigJ0pIGluIHRoZSBSUEggUEFTU1BvclQgSSB0aGluayB5b3Ug c2hvdWxkIGV4cGxpY2l0bHkgc2F5IHNvLg0KDQpSZWdhcmRzLA0KDQpDaHJpc3Rlcg0KDQoNCkZy b206IFN1YmlyIERhcyBbbWFpbHRvOnN1YmlyZGFzMjFAZ21haWwuY29tXQ0KU2VudDogMDIgRmVi cnVhcnkgMjAxOCAwMTowNA0KVG86IENocmlzdGVyIEhvbG1iZXJnIDxjaHJpc3Rlci5ob2xtYmVy Z0Blcmljc3Nvbi5jb208bWFpbHRvOmNocmlzdGVyLmhvbG1iZXJnQGVyaWNzc29uLmNvbT4+DQpD YzogQWRhbSBSb2FjaCA8YWRhbUBub3N0cnVtLmNvbTxtYWlsdG86YWRhbUBub3N0cnVtLmNvbT4+ OyBTVElSIENoYWlycyA8c3Rpci1jaGFpcnNAaWV0Zi5vcmc8bWFpbHRvOnN0aXItY2hhaXJzQGll dGYub3JnPj47IHN0aXJAaWV0Zi5vcmc8bWFpbHRvOnN0aXJAaWV0Zi5vcmc+OyBkcmFmdC1pZXRm LXN0aXItcnBoLmFsbEB0b29scy5pZXRmLm9yZzxtYWlsdG86ZHJhZnQtaWV0Zi1zdGlyLXJwaC5h bGxAdG9vbHMuaWV0Zi5vcmc+DQpTdWJqZWN0OiBSZTogW3N0aXJdIEFEIFJldmlldzogZHJhZnQt aWV0Zi1zdGlyLXJwaC0wMiAtIGF1dGhvcml0eSB0byBhc3NlcnQgdGhlIGNhbGxlcnMgaWRlbnRp dHkgYXNzdW1lZD8NCg0KSGVsbG8gQ2hyaXN0ZXIsDQpUaGUgc2lnbmluZyBlbnRpdHkgZG9lcyBu b3QgaGF2ZSBhbHdheXMgdGhlIGF1dGhvcml0eSB0byBhc3NlcnQgdGhlIGNhbGxlciBpZGVudGl0 eSBpbiBycGguIFdlIGFyZSBzdWJtaXR0aW5nIHZlci0wMyBkcmFmdCAgYW5kIGl0IGlzIGNsYXJp ZmllZCAgYXMgZm9sbG93czoNCiJUaGUgY3JlZGVudGlhbHMgKGUuZy4sIGF1dGhvcml0eSByZXNw b25zaWJsZSBmb3IgYXV0aG9yaXppbmcgUmVzb3VyY2UtUHJpb3JpdHkpIHVzZWQgdG8gY3JlYXRl IHRoZSBzaWduYXR1cmUgbXVzdCBoYXZlIGF1dGhvcml0eSBvdmVyIHRoZSBuYW1lc3BhY2Ugb2Yg dGhl4oCccnBoIiBjbGFpbS4uIg0KDQotU3ViaXINCg0KT24gTW9uLCBKYW4gMjIsIDIwMTggYXQg MzoyNyBQTSwgQ2hyaXN0ZXIgSG9sbWJlcmcgPGNocmlzdGVyLmhvbG1iZXJnQGVyaWNzc29uLmNv bTxtYWlsdG86Y2hyaXN0ZXIuaG9sbWJlcmdAZXJpY3Nzb24uY29tPj4gd3JvdGU6DQpIaSwNCg0K QW5vdGhlciBxdWVzdGlvbiBmb3IgY2xhcmlmaWNhdGlvbi4NCg0KU2VjdGlvbiAzIGNvbnRhaW5z IHRoZSBmb2xsb3dpbmcgZXhhbXBsZToNCg0KICAgIHsgIm9yaWciOnsidG4iOiIxMjE1NTU1MTIx Mjx0ZWw6KDIxNSklMjA1NTUtMTIxMj4ifQ0KICAgICAiZGVzdCI6e1sidG4iOiIxMjEyNTU1MTIx Mzx0ZWw6KDIxMiklMjA1NTUtMTIxMz4iXX0sDQogICAgICJpYXQiOjE0NDMyMDgzNDUsDQogICAg ICJycGgiOnsiYXV0aCI6WyJldHMuMCIsIndwcy4wIl19DQoNCuKApmFuZCB0aGUgZm9sbG93aW5n IHRleHQ6DQoNCiAgIOKAnFRoZSBjcmVkZW50aWFscyAoZS5nLiwgYXV0aG9yaXR5IHJlc3BvbnNp YmxlIGZvciBhdXRob3JpemluZyBSZXNvdXJjZS0NCiAgIFByaW9yaXR5KSB1c2VkIHRvIGNyZWF0 ZSB0aGUgc2lnbmF0dXJlIG11c3QgaGF2ZSBhdXRob3JpdHkgb3ZlciB0aGUNCiAgICJycGgiIGNs YWlt4oCm4oCdDQoNClNpbmNlIHRoZSBjbGFpbSBhbHNvIGNvbnRhaW5zIOKAnG9yaWfigJ0sIGlz IHRoZSBhc3N1bXB0aW9uIHRoYXQgdGhlIHNpZ25pbmcgZW50aXR5IGFsd2F5cyBhbHNvIGhhcyBh dXRob3JpdHkgdG8gYXNzZXJ0IHRoZSBjYWxsZXJzIGlkZW50aXR5PyBJIHRoaW5rIGl0IHdvdWxk IGJlIGdvb2QgdG8gZXhwbGljaXRseSBtZW50aW9uIGl0Lg0KDQpSZWdhcmRzLA0KDQpDaHJpc3Rl cg0KDQoNCg0KDQoNCg0KRnJvbTogc3RpciBbbWFpbHRvOnN0aXItYm91bmNlc0BpZXRmLm9yZzxt YWlsdG86c3Rpci1ib3VuY2VzQGlldGYub3JnPl0gT24gQmVoYWxmIE9mIEFkYW0gUm9hY2gNClNl bnQ6IDIwIEphbnVhcnkgMjAxOCAwMDoxNQ0KVG86IFNUSVIgQ2hhaXJzIDxzdGlyLWNoYWlyc0Bp ZXRmLm9yZzxtYWlsdG86c3Rpci1jaGFpcnNAaWV0Zi5vcmc+Pjsgc3RpckBpZXRmLm9yZzxtYWls dG86c3RpckBpZXRmLm9yZz47IGRyYWZ0LWlldGYtc3Rpci1ycGguYWxsQHRvb2xzLmlldGYub3Jn PG1haWx0bzpkcmFmdC1pZXRmLXN0aXItcnBoLmFsbEB0b29scy5pZXRmLm9yZz4NClN1YmplY3Q6 IFtzdGlyXSBBRCBSZXZpZXc6IGRyYWZ0LWlldGYtc3Rpci1ycGgtMDINCg0KSSdtIGRvaW5nIG15 IEFEIHJldmlldyBvZiBkcmFmdC1pZXRmLXN0aXItcnBoLTAyLiBUaGFua3MgdG8gZXZlcnlvbmUg d2hvIGhhcyB3b3JrZWQgb24gdGhpcyBkb2N1bWVudCwgYW5kIHRoZSBhdXRob3JzIGFuZCBjaGFp cnMgaW4gcGFydGljdWxhci4NClRoZSB0ZWNobmljYWwgY29udGVudCBoZXJlIGxvb2tzIGdlbmVy YWxseSBnb29kIHRvIG1lLiBJJ2QgbGlrZSB0byBzZWUgYSBmZXcgaXNzdWVzIGFkZHJlc3NlZCBi ZWZvcmUgSUVURiBMQy4gSW4gc2hvcnQgc3VtYXJ5Og0KDQogICogICBUaGUgdmFsaWRhdGlvbiBz ZWN0aW9uIG5lZWRzIHRvIGFkZCBhIGRpc2N1c3Npb24gb2YgaG93IHRvIHRyZWF0IGNhbGxzIHdo ZW4gdGhlIHByaW9yaXR5IHZhbHVlcyBpbiAicnBoIiBwYXNzcG9ydHMgYW5kIFNJUCAiUmVzb3Vy Y2UtUHJpb3JpdHkiIGhlYWRlciBmaWVsZHMgYXJlbid0IDEwMCUgaWRlbnRpY2FsLg0KICAqICAg VGhlIGV4YW1wbGVzIG5lZWQgc29tZSBhZGp1c3RtZW50Lg0KICAqICAgVGhlcmUgaXMgYSBtaW5v ciBwb2ludCBvZiBhbWJpZ3VpdHkgaW4gdGhlIFNlY3VyaXR5IFNlY3Rpb24sIGJ1dCB0aGlzIHNo b3VsZCBiZSBlYXN5IHRvIGZpeCwgYXMgbG9uZyBhcyB0aGUgV0cga25vd3Mgd2hhdCB3YXMgaW50 ZW5kZWQuDQogICogICBUaGUgSUFOQSBhY3Rpb25zIG5lZWQgYSBsaXR0bGUgYml0IG9mIGFkanVz dG1lbnQuDQogICogICBUaGVyZSBhcmUgYSBudW1iZXIgb2YgbWlub3IgZWRpdG9yaWFsIGlzc3Vl cyB0byBiZSBjbGVhbmVkIHVwLg0KRGV0YWlsZWQgY29tbWVudHMgb24gdGhlc2UgcG9pbnRzIGFy ZSBpbmxpbmUgaW4gdGhlIGRvY3VtZW50IGJlbG93LiBJJ3ZlIHJlbW92ZWQgc29tZSBwb3J0aW9u cyBvZiB0aGUgZG9jdW1lbnQgb24gd2hpY2ggSSBoYXZlIG5vIGNvbW1lbnRzLg0KDQoNCkFic3Ry YWN0DQoNCiAgIFRoaXMgZG9jdW1lbnQgZXh0ZW5kcyB0aGUgU1RJUiBQQVNTcG9yVCBzcGVjaWZp Y2F0aW9uIHRvIGFsbG93IHRoZQ0KDQoiLi4udGhlIFNlY3VyZSBUZWxlcGhvbmUgSWRlbnRpdHkg UmV2aXNpdGVkIChTVElSKSBQZXJzb25hbCBBc3NlcnRpb24gVG9rZW4gKFBBU1Nwb3JUKSBzcGVj aWZpY2F0aW9uIGRlZmluZWQgaW4gUkZDIDgxMjIuLi4iDQooU2VlIDxodHRwczovL3d3dy5yZmMt ZWRpdG9yLm9yZy9tYXRlcmlhbHMvYWJicmV2LmV4cGFuc2lvbi50eHQ+PGh0dHBzOi8vdXJsZGVm ZW5zZS5wcm9vZnBvaW50LmNvbS92Mi91cmw/dT1odHRwcy0zQV9fd3d3LnJmYy0yRGVkaXRvci5v cmdfbWF0ZXJpYWxzX2FiYnJldi5leHBhbnNpb24udHh0JmQ9RHdNRmFRJmM9TEZZWi1vOV9IVU1l TVRTUWljdmpJZyZyPUc5djh1Q1NTUWhDbXB3N0l0RzByMmcmbT1zbEtJQlkzN3k4cDRpQzNKZ2p1 d0QxVEk5T2dXN1FUSFd6bUpWeXF5Sk5nJnM9aUJUQWh3TjUxN0JOQXJtajhiYjhVYXQzTEFJZlNx RWIzT3p1cUhPbDZrbyZlPT4gZm9yIGd1aWRhbmNlIG9uIGFiYnJldmlhdGlvbnMpDQoNCiAgIGlu Y2x1c2lvbiBvZiBjcnlwdG9ncmFwaGljYWxseS1zaWduZWQgYXNzZXJ0aW9ucyBvZiBhdXRob3Jp emF0aW9uIGZvcg0KICAgdGhlIHZhbHVlcyBwb3B1bGF0ZWQgaW4gdGhlIFNJUCAnUmVzb3VyY2Ut UHJpb3JpdHknIGhlYWRlciBmaWVsZCwNCiAgIHdoaWNoIGlzIHVzZWQgZm9yIGNvbW11bmljYXRp b25zIHJlc291cmNlIHByaW9yaXRpemF0aW9uLg0KDQouLi4NCg0KMS4gIEludHJvZHVjdGlvbg0K DQogICBQQVNTcG9yVCBbSS1ELmlldGYtc3Rpci1wYXNzcG9ydF0gaXMgYSB0b2tlbiBmb3JtYXQg YmFzZWQgb24gSldUDQogICBbUkZDNzUxOV0gZm9yIGNvbnZleWluZyBjcnlwdG9ncmFwaGljYWxs eS1zaWduZWQgaW5mb3JtYXRpb24gYWJvdXQNCiAgIHRoZSBpZGVudGl0aWVzIGludm9sdmVkIGlu IHBlcnNvbmFsIGNvbW11bmljYXRpb25zOyBpdCBpcyB1c2VkIHdpdGgNCiAgIFNUSVIgW0ktRC5p ZXRmLXN0aXItcmZjNDQ3NGJpc10gdG8gY29udmV5IGEgc2lnbmVkIGFzc2VydGlvbiBvZiB0aGUN CiAgIGlkZW50aXR5IG9mIHRoZSBwYXJ0aWNpcGFudHMgaW4gcmVhbC10aW1lIGNvbW11bmljYXRp b25zIGVzdGFibGlzaGVkDQogICB2aWEgYSBwcm90b2NvbCBsaWtlIFNJUC4gIFRoaXMgc3BlY2lm aWNhdGlvbiBleHRlbmRzIFBBU1Nwb3JUIHRvDQoNCiIuLi5saWtlIFNJUCBbUkZDMzI2MV0uLi4i DQooV2Ugd2FudCB0byBjaXRlIFNJUCB0aGUgZmlyc3QgdGltZSBpdCBpcyBtZW50aW9uZWQpDQoN CiAgIGFsbG93IGNyeXB0b2dyYXBoaWMtc2lnbmluZyBvZiB0aGUgU0lQICdSZXNvdXJjZS1Qcmlv cml0eScgaGVhZGVyDQogICBmaWVsZCBkZWZpbmVkIGluIFtSRkM0NDEyXS4NCg0KICAgW1JGQzQ0 MTJdIGRlZmluZXMgdGhlIFNJUCAnUmVzb3VyY2UtUHJpb3JpdHknIGhlYWRlciBmaWVsZCBmb3IN CiAgIGNvbW11bmljYXRpb25zIFJlc291cmNlIFByaW9yaXR5LiAgQXMgc3BlY2lmaWVkIGluIFtS RkM0NDEyXSwgdGhlDQogICAnUmVzb3VyY2UtUHJpb3JpdHknIGhlYWRlciBmaWVsZCBtYXkgYmUg dXNlZCBieSBTSVAgdXNlciBhZ2VudHMNCiAgIFtSRkMzMjYxXSwgaW5jbHVkaW5nLCBQdWJsaWMg U3dpdGNoZWQgVGVsZXBob25lIE5ldHdvcmsgKFBTVE4pDQoNCiIuLi5pbmNsdWRpbmcgUHVibGlj IFN3aXRjaGVkLi4uIg0KKHJlbW92ZSB0aGUgY29tbWEpDQoNCiAgIGdhdGV3YXlzIGFuZCB0ZXJt aW5hbHMsIGFuZCBTSVAgcHJveHkgc2VydmVycyB0byBpbmZsdWVuY2UNCg0KIi4uLmFuZCBieSBT SVAgcHJveHkgc2VydmVycywgdG8gaW5mbHVlbmNlLi4uIg0KKGFkZCAiYnkiIGFuZCBjb21tYSkN Cg0KICAgcHJpb3JpdGl6YXRpb24gYWZmb3JkZWQgdG8gY29tbXVuaWNhdGlvbiBzZXNzaW9ucyxp bmNsdWRpbmcgUFNUTg0KDQoiLi4uc2Vzc2lvbnMsIGluY2x1ZGluZy4uLiINCihzcGFjZSBhZnRl ciBjb21tYSkNCg0KICAgY2FsbHMuICBIb3dldmVyLCB0aGUgU0lQICdSZXNvdXJjZS1Qcmlvcml0 eScgaGVhZGVyIGZpZWxkIGNvdWxkIGJlDQogICBzcG9vZmVkIGFuZCBhYnVzZWQgYnkgdW5hdXRo b3JpemVkIGVudGl0aWVzLg0KDQogICBUaGUgU1RJUiBhcmNoaXRlY3R1cmUgW1JGQzczNDBdYXNz dW1lcyB0aGF0IGFuIGF1dGhvcml0eSBvbiB0aGUNCg0KIi4uLlNUSVIgYXJjaGl0ZWN0dXJlIFtS RkM3MzQwXSBhc3N1bWVzLi4uIg0KKHNwYWNlIGJlZm9yZSAiYXNzdW1lcyIpDQoNCiAgIG9yaWdp bmF0aW5nIHNpZGUgb2YgYSBjYWxsIHByb3ZpZGVzIGEgY3J5cHRvZ3JhcGhpYyBhc3N1cmFuY2Ug b2YgdGhlDQogICB2YWxpZGl0eSBvZiB0aGUgY2FsbGluZyBwYXJ0eSBudW1iZXIgaW4gb3JkZXIg dG8gcHJldmVudA0KICAgaW1wZXJzb25hdGlvbiBhdHRhY2tzLiAgVGhlIFNUSVIgYXJjaGl0ZWN0 dXJlIGFsbG93cyBleHRlbnNpb24gdGhhdA0KDQoiLi4uYWxsb3dzIGV4dGVuc2lvbnMuLi4iDQoN CiAgIGNhbiBiZSB1dGlsaXplZCBieSBhdXRob3JpdGllcyBzdXBwb3J0aW5nIHJlYWwtdGltZSBj b21tdW5pY2F0aW9uDQogICBzZXJ2aWNlcyB1c2luZyB0aGUgJ1Jlc291cmNlLVByaW9yaXR5JyBo ZWFkZXIgZmllbGQgdG8NCiAgIGNyeXB0b2dyYXBoaWNhbGx5IHNpZ24gdGhlIFNJUCAnUmVzb3Vy Y2UtUHJpb3JpdHknIGhlYWRlciBmaWVsZCBhbmQNCiAgIGNvbnZleSBhc3NlcnRpb24gb2YgdGhl IGF1dGhvcml6YXRpb24gZm9yICdSZXNvdXJjZS1Qcmlvcml0eScuICBGb3INCiAgIGV4YW1wbGUs IHRoZSBhdXRob3JpdHkgb24gdGhlIG9yaWdpbmF0aW5nIHNpZGUgdmVyaWZ5aW5nIHRoZQ0KICAg YXV0aG9yaXphdGlvbiBvZiBhIHBhcnRpY3VsYXIgY29tbXVuaWNhdGlvbiBmb3IgUmVzb3VyY2Ut UHJpb3JpdHkgY2FuDQoNClNpbmdsZSBxdW90ZXMgYXJvdW5kICdSZXNvdXJjZS1Qcmlvcml0eScu DQoNCiAgIHVzZSBhIFBBU1NQb3JUIGNsYWltIHRvIGNyeXB0b2dyYXBoaWNhbGx5LXNpZ24gdGhl IFNJUCAnUmVzb3VyY2UtDQoNCiIuLi5jcnlwdG9ncmFwaGljYWxseSBzaWduLi4uIg0KDQogICBQ cmlvcml0eScgaGVhZGVyIGZpZWxkIGFuZCBjb252ZXkgYW4gYXNzZXJ0aW9uIG9mIHRoZSBhdXRo b3JpemF0aW9uDQogICBmb3IgJ1Jlc291cmNlLVByaW9yaXR5Jy4gIFRoaXMgd2lsbCBhbGxvdyBh IHJlY2VpdmluZyBlbnRpdHkNCiAgIChpbmNsdWRpbmcgZW50aXRpZXMgbG9jYXRlZCBpbiBkaWZm ZXJlbnQgbmV0d29yayBkb21haW5zL2JvdW5kYXJpZXMpDQogICB0byB2ZXJpZnkgdGhlIHZhbGlk aXR5IG9mIGFzc2VydGlvbnMgYXV0aG9yaXppbmcgUmVzb3VyY2UtUHJpb3JpdHkuDQoNClNpbmds ZSBxdW90ZXMgYXJvdW5kICdSZXNvdXJjZS1Qcmlvcml0eScuDQoNCiAgIENyeXB0b2dyYXBoaWNh bGx5LXNpZ25lZCBTSVAgJ1Jlc291cmNlLVByaW9yaXR5JyBoZWFkZXJzIHdpbGwgYWxsb3cgYQ0K DQoiLi4uY3J5cHRvZ3JhcGhpY2FsbHkgc2lnbmVkIFNJUCAnUmVzb3VyY2UtUHJpb3JpdHknIGhl YWRlciBmaWVsZHMuLi4iDQoocmVtb3ZlIGh5cGhlbiwgYW5kIHJlcGxhY2UgImhlYWRlcnMiIHdp dGggImhlYWRlciBmaWVsZHMiKQ0KDQogICByZWNlaXZpbmcgZW50aXR5IHRvIHZlcmlmeSBhbmQg YWN0IG9uIHRoZSBpbmZvcm1hdGlvbiB3aXRoIGNvbmZpZGVuY2UNCiAgIHRoYXQgdGhlIGluZm9y bWF0aW9uIGhhdmUgbm90IGJlZW4gc3Bvb2ZlZCBvciBjb21wcm9taXNlZC4NCg0KIi4uLmhhcyBu b3QgYmVlbiBzcG9vZmVkIG9yIGNvbXByb21pc2VkLiINCg0KDQogICBUaGlzIHNwZWNpZmljYXRp b24gZG9jdW1lbnRzIGFuIG9wdGlvbmFsIGV4dGVuc2lvbiB0byBQQVNTcG9yVCBhbmQNCiAgIHRo ZSBhc3NvY2lhdGVkIFNUSVIgbWVjaGFuaXNtcyB0byBwcm92aWRlIGEgZnVuY3Rpb24gdG8gc2ln biB0aGUgU0lQDQogICAnUmVzb3VyY2UtUHJpb3JpdHknIGhlYWRlciBmaWVsZC4gIFRoaXMgUEFT U3BvclQgb2JqZWN0IGlzIHVzZWQgdG8NCiAgIHByb3ZpZGUgYXR0ZXN0YXRpb24gb2YgYSBjYWxs aW5nIHVzZXIgYXV0aG9yaXphdGlvbiBmb3IgcHJpb3JpdHkNCiAgIGNvbW11bmljYXRpb25zLiAg VGhpcyBpcyBuZWNlc3NhcnkgaW4gYWRkaXRpb24gdG8gdGhlIFBBU1Nwb3JUIG9iamVjdA0KICAg dGhhdCBpcyB1c2VkIGZvciBjYWxsaW5nIHVzZXIgdGVsZXBob25lIG51bWJlciBhdHRlc3RhdGlv bi4gIEhvdyB0aGUNCiAgIG9wdGlvbmFsIGV4dGVuc2lvbiB0byBQQVNTcG9yVCBpcyB1c2VkIGZv ciByZWFsLXRpbWUgY29tbXVuaWNhdGlvbnMNCiAgIHN1cHBvcnRlZCB1c2luZyBTSVAgJ1Jlc291 cmNlLVByaW9yaXR5JyBoZWFkZXIgZmllbGQgaXMgZGVmaW5lZCBpbg0KICAgb3RoZXIgZG9jdW1l bnRzIGFuZCBpcyBvdXRzaWRlIHRoZSBzY29wZSBvZiB0aGlzIGRvY3VtZW50Lg0KDQpJIGFzc3Vt ZSB0aGVzZSBvdGhlciBkb2N1bWVudHMgYXJlIHVuZGVyIGRldmVsb3BtZW50PyBJZiBzbywgdGhl eSBzaG91bGQgYmUgY2l0ZWQgaGVyZS4NCg0KDQoyLiAgVGVybWlub2xvZ3kNCg0KICAgVGhlIGtl eSB3b3JkcyAiTVVTVCIsICJNVVNUIE5PVCIsICJSRVFVSVJFRCIsICJTSEFMTCIsICJTSEFMTCBO T1QiLA0KICAgIlNIT1VMRCIsICJTSE9VTEQgTk9UIiwgIlJFQ09NTUVOREVEIiwgIk1BWSIsIGFu ZCAiT1BUSU9OQUwiIGluIHRoaXMNCiAgIGRvY3VtZW50IGFyZSB0byBiZSBpbnRlcnByZXRlZCBh cyBkZXNjcmliZWQgaW4gUkZDIDIxMTkgW1JGQzIxMTldLg0KDQpUaGlzIGRvY3VtZW50IGhhcyBz ZXZlcmFsIG5vbi1ub3JtYXRpdmUgdXNlcyBvZiAibXVzdCIsICJzaG91bGQsIiBhbmQgIm1heSwi IGFuZCBzbyBpdCBuZWVkcyB0byB1c2UgdGhlIFJGQzgxNzQgYm9pbGVycGxhdGUgaW5zdGVhZCBv ZiB0aGUgUkZDMjExOSBib2lsZXJwbGF0ZS4NCg0KDQozLiAgUEFTU3BvclQgJ3JwaCcgQ2xhaW0N Cg0KICAgVGhpcyBzcGVjaWZpY2F0aW9uIGRlZmluZXMgYSBuZXcgSlNPTiBXZWIgVG9rZW4gY2xh aW0gZm9yICJycGgiLA0KICAgd2hpY2ggcHJvdmlkZXMgYW4gYXNzZXJ0aW9uIGZvciBpbmZvcm1h dGlvbiBpbiBTSVAgJ1Jlc291cmNlLQ0KICAgUHJpb3JpdHknaGVhZGVyLg0KDQoiLi4uUHJpb3Jp dHknIGhlYWRlciBmaWVsZC4iDQooc3BhY2UgYWZ0ZXIgY2xvc2luZyBxdW90YXRpb24gbWFyaywg ImhlYWRlciBmaWVsZCIgaW5zdGVhZCBvZiAiaGVhZGVyIikNCg0KDQogICBUaGUgY3JlYXRvciBv ZiBhIFBBU1Nwb3JUIG9iamVjdCBhZGRzIGEgInBwdCIgdmFsdWUgb2YgInJwaCIgdG8gdGhlDQog ICBoZWFkZXIgb2YgYSBQQVNTcG9yVCBvYmplY3QsIGluIHdoaWNoIGNhc2UgdGhlIFBBU1Nwb3JU IGNsYWltcyBNVVNUDQogICBjb250YWluIGEgInJwaCIgY2xhaW0sIGFuZCBhbnkgZW50aXRpZXMg dmVyaWZ5aW5nIHRoZSBQQVNTcG9yVCBvYmplY3QNCiAgIHdpbGwgYmUgcmVxdWlyZWQgdG8gdW5k ZXJzdGFuZCB0aGUgInBwdCIgZXh0ZW5zaW9uIGluIG9yZGVyIHRvDQogICBwcm9jZXNzIHRoZSBQ QVNTcG9yVCBpbiBxdWVzdGlvbi4gIEEgUEFTU1BvclQgaGVhZGVyIHdpdGggdGhlICJwcHQiDQog ICBpbmNsdWRlZCB3aWxsIGxvb2sgYXMgZm9sbG93czoNCg0KICAgeyAgInR5cCI6InBhc3Nwb3J0 IiwNCiAgICAgInBwdCI6InJwaCIsDQogICAgICJhbGciOiJFUzI1NiIsDQogICAgICJ4NXUiOiJo dHRwczovL3d3dy5leGFtcGxlLm9yZy9jZXJ0LmNlciI8aHR0cHM6Ly91cmxkZWZlbnNlLnByb29m cG9pbnQuY29tL3YyL3VybD91PWh0dHBzLTNBX193d3cuZXhhbXBsZS5vcmdfY2VydC5jZXImZD1E d01GYVEmYz1MRllaLW85X0hVTWVNVFNRaWN2aklnJnI9Rzl2OHVDU1NRaENtcHc3SXRHMHIyZyZt PXNsS0lCWTM3eThwNGlDM0pnanV3RDFUSTlPZ1c3UVRIV3ptSlZ5cXlKTmcmcz1XVFR1RG15Mzlp MnpJM2ljTUhvODJjcVJHYVhqekh5d0lnQkFJSzFvcUNVJmU9Pn0NCg0KSWRlYWxseSwgdGhpcyB3 b3VsZCBiZSBlaXRoZXIgcHJldHR5LXByaW50ZWQgb3IgY2Fub25pY2FsaXplZC4gU2luY2UgaXQn cyB0b28gbG9uZyB0byBmaXQgb24gYSBsaW5lIGluIGNhbm9uaWNhbCBmb3JtLCBJIHByb3Bvc2U6 DQp7DQogICJ0eXAiOiJwYXNzcG9ydCIsDQogICJwcHQiOiJycGgiLA0KICAiYWxnIjoiRVMyNTYi LA0KICAieDV1IjoiaHR0cHM6Ly93d3cuZXhhbXBsZS5vcmcvY2VydC5jZXIiPGh0dHBzOi8vdXJs ZGVmZW5zZS5wcm9vZnBvaW50LmNvbS92Mi91cmw/dT1odHRwcy0zQV9fd3d3LmV4YW1wbGUub3Jn X2NlcnQuY2VyJmQ9RHdNRmFRJmM9TEZZWi1vOV9IVU1lTVRTUWljdmpJZyZyPUc5djh1Q1NTUWhD bXB3N0l0RzByMmcmbT1zbEtJQlkzN3k4cDRpQzNKZ2p1d0QxVEk5T2dXN1FUSFd6bUpWeXF5Sk5n JnM9V1RUdURteTM5aTJ6STNpY01IbzgyY3FSR2FYanpIeXdJZ0JBSUsxb3FDVSZlPT4NCn0NCg0K DQogICBUaGUgInJwaCIgY2xhaW0gd2lsbCBwcm92aWRlIGFuIGFzc2VydGlvbiBvZiBhdXRob3Jp emF0aW9uLCJhdXRoIiwNCg0KIi4uLmF1dGhvcml6YXRpb24sICJhdXRoIiwgLi4uIg0KKHNwYWNl IGJldHdlZW4gY29tbWEgYW5kIG9wZW5pbmcgcXVvdGF0aW9uIG1hcmspDQoNCiAgIGZvciBpbmZv cm1hdGlvbiBpbiB0aGUgU0lQICJSZXNvdXJjZS1Qcmlvcml0eSIgaGVhZGVyIGZpZWxkIChpLmUu LA0KICAgUmVzb3VyY2UtUHJpb3JpdHk6IG5hbWVzcGFjZSAiLiIgci1wcmlvcml0eSkgYmFzZWQg b24gW1JGQzQ0MTJdLg0KDQpUaGUgdXNlIG9mIHRoZSBzdHJpbmcgJ25hbWVzcGFjZSAiLiIgci1w cmlvcml0eScgaGVyZSBhbmQgZWxzZXdoZXJlIGluIHRoZSBkb2N1bWVudCBoYXMgYSBkZXRyaW1l bnRhbCBpbXBhY3Qgb24gcmVhZGFiaWxpdHkuIEkgc3Ryb25nbHkgc3VnZ2VzdCByZXBsYWNpbmcg aXQgd2l0aCAici12YWx1ZSIgKHRoZSBuYW1lIG9mIHRoaXMgcHJvZHVjdGlvbiBpbiBSRkM0NDEy KSBldmVyeXdoZXJlLg0KDQogICBTcGVjaWZpY2FsbHksIHRoZSAicnBoIiBjbGFpbSBpbmNsdWRl cyBhc3NlcnRpb24gb2YgdGhlIHByaW9yaXR5LQ0KICAgbGV2ZWwgb2YgdGhlIHVzZXIgdG8gYmUg dXNlZCBmb3IgYSBnaXZlbiBjb21tdW5pY2F0aW9uIHNlc3Npb24uICBUaGUNCiAgIHZhbHVlIG9m IHRoZSAicnBoIiBjbGFpbSBpcyBhbiBhcnJheSBjb250YWluaW5nIG9uZSBvciBtb3JlIG9mIEpT T04NCiAgIG9iamVjdHMgZm9yIHRoZSBjb250ZW50IG9mIHRoZSBTSVAgJ1Jlc291cmNlLVByaW9y aXR5JyBoZWFkZXIgdGhhdCBpcw0KICAgYmVpbmcgYXNzZXJ0ZWQgb2Ygd2hpY2ggb25lIG9mIHRo ZSAicnBoIiBvYmplY3QsIGlzIG1hbmRhdG9yeS4NCg0KVGhpcyBsYXN0IHNlbnRlbmNlIGlzIHZl cnkgaGFyZCB0byBwYXJzZTsgYW5kIChiYXNlZCBvbiB0aGUgZXhhbXBsZSkgdGhlIHZhbHVlIGlz IGludGVuZGVkIHRvIGJlIGEgSlNPTiBPYmplY3QgKGN1cmx5IGJyYWNlcykgcmF0aGVyIHRoYW4g YSBKU09OIEFycmF5IChzcXVhcmUgYnJhY2VzKS4gSSBzdWdnZXN0OiAnVGhlIHZhbHVlIG9mIHRo ZSAicnBoIiBjbGFpbSBpcyBhbiBPYmplY3Qgd2l0aCBvbmUgb3IgbW9yZSBrZXlzLiBFYWNoIGtl eSBpcyBhc3NvY2lhdGVkIHdpdGggYSBKU09OIEFycmF5LiBUaGVzZSBhcnJheXMgY29udGFpbiBT dHJpbmdzIHRoYXQgY29ycmVzcG9uZCB0byB0aGUgci12YWx1ZXMgaW5kaWNhdGVkIGluIHRoZSBT SVAgIlJlc291cmNlLVByaW9yaXR5IiBoZWFkZXIgZmllbGQuJyAobm90ZTogImhlYWRlciBmaWVs ZCIsIG5vdCAiaGVhZGVyIikNCg0KDQogICBUaGUgZm9sbG93aW5nIGlzIGFuIGV4YW1wbGUgInJw aCIgY2xhaW0gZm9yIGEgU0lQICJSZXNvdXJjZS1Qcmlvcml0eSINCiAgIGhlYWRlciBmaWVsZCB3 aXRoIGEgIm5hbWVzcGFjZSAiLiIgci1wcmlvcml0eSIgdmFsdWUgb2YgImV0cy4wIiBhbmQNCiAg IHdpdGggYSAibmFtZXNwYWNlICIuIiByLXByaW9yaXR5IiB2YWx1ZSBvZiAid3BzLjAiLg0KDQog ICAgeyAib3JpZyI6eyJ0biI6IjEyMTU1NTUxMjEyPHRlbDooMjE1KSUyMDU1NS0xMjEyPiJ9DQog ICAgICJkZXN0Ijp7WyJ0biI6IjEyMTI1NTUxMjEzPHRlbDooMjEyKSUyMDU1NS0xMjEzPiJdfSwN CiAgICAgImlhdCI6MTQ0MzIwODM0NSwNCiAgICAgInJwaCI6eyJhdXRoIjpbImV0cy4wIiwid3Bz LjAiXX0NCg0KQXMgYWJvdmUsIEkgcmVjb21tZW5kIHByZXR0eS1wcmludGluZyB0aGlzLiBJdCdz IGFsc28gbWlzc2luZyBhIGNvbW1hIGFmdGVyIHRoZSAib3JpZyIgdmFsdWUsIGFuZCB0aGUgdG9w LWxldmVsIHN0cnVjdHVyZSBpcyBtaXNzaW5nIGEgY2xvc2luZyBicmFjZS4gVGhlIHZhbHVlIGZv ciAiaWF0IiBuZWVkcyB0byBiZSBlbmNsb3NlZCBpbiBxdW90ZXMuDQpUaGUgTkFOUEEgaGFzIGFs bG9jYXRlZCBOUEE1NTUwMXh4IGZvciBleGFtcGxlIHVzZSwgbm90IE5QQTU1NXh4eHgsIG11Y2gg b2Ygd2hpY2ggcmVtYWlucyBhc3NpZ25hYmxlIChjZjxodHRwczovL3d3dy5uYXRpb25hbG5hbnBh LmNvbS9wZGYvTlJVRi9BVElTLTAzMDAxMTUucGRmPjxodHRwczovL3VybGRlZmVuc2UucHJvb2Zw b2ludC5jb20vdjIvdXJsP3U9aHR0cHMtM0FfX3d3dy5uYXRpb25hbG5hbnBhLmNvbV9wZGZfTlJV Rl9BVElTLTJEMDMwMDExNS5wZGYmZD1Ed01GYVEmYz1MRllaLW85X0hVTWVNVFNRaWN2aklnJnI9 Rzl2OHVDU1NRaENtcHc3SXRHMHIyZyZtPXNsS0lCWTM3eThwNGlDM0pnanV3RDFUSTlPZ1c3UVRI V3ptSlZ5cXlKTmcmcz1qNXFCanN3U1FBMHlzb09fcExLVFVkQ2tLUExid1I2US1nZzhBYmFCY0ZN JmU9PikuDQpQdXR0aW5nIGFsbCB0aGlzIHRvZ2V0aGVyLCBJIGJlbGlldmUgd2hhdCB5b3Ugd2Fu dCBpczoNCnsNCiAgIm9yaWciOnsidG4iOiIxMjE1NTU1MDExMjx0ZWw6KDIxNSklMjA1NTUtMDEx Mj4ifSwNCiAgImRlc3QiOntbInRuIjoiMTIxMjU1NTAxMTM8dGVsOigyMTIpJTIwNTU1LTAxMTM+ Il19LA0KICAiaWF0IjoiMTQ0MzIwODM0NSIsDQogICJycGgiOnsiYXV0aCI6WyJldHMuMCIsIndw cy4wIl19DQp9DQoNCg0KICAgQWZ0ZXIgdGhlIGhlYWRlciBhbmQgY2xhaW1zIFBBU1Nwb3JUIG9i amVjdHMgaGF2ZSBiZWVuIGNvbnN0cnVjdGVkLA0KICAgdGhlaXIgc2lnbmF0dXJlIGlzIGdlbmVy YXRlZCBub3JtYWxseSBwZXIgdGhlIGd1aWRhbmNlIGluDQogICBbSS1ELmlldGYtc3Rpci1wYXNz cG9ydF0gdXNpbmcgdGhlIGZ1bGwgZm9ybSBvZiBQQVNTUG9yVC4gIFRoZQ0KICAgY3JlZGVudGlh bHMgKGUuZy4sIGF1dGhvcml0eSByZXNwb25zaWJsZSBmb3IgYXV0aG9yaXppbmcgUmVzb3VyY2Ut DQogICBQcmlvcml0eSkgdXNlZCB0byBjcmVhdGUgdGhlIHNpZ25hdHVyZSBtdXN0IGhhdmUgYXV0 aG9yaXR5IG92ZXIgdGhlDQogICAicnBoIiBjbGFpbSBhbmQgdGhlcmUgaXMgb25seSBvbmUgYXV0 aG9yaXR5IHBlciBjbGFpbS4gIFRoZSBhdXRob3JpdHkNCiAgIE1VU1QgdXNlIGl0cyBjcmVkZW50 aWFscyAoaS5lLiwgQ0VSVCkgYXNzb2NpYXRlZCB3aXRoIHRoZSBzcGVjaWZpYw0KICAgc2Vydmlj ZSBzdXBwb3J0ZWQgYnkgdGhlIFNJUCBuYW1lc3BhY2UgaW4gdGhlIGNsYWltLg0KDQo0LiAgJ3Jw aCcgaW4gU0lQDQoNCiAgIFRoaXMgc2VjdGlvbiBzcGVjaWZpZXMgU0lQLXNwZWNpZmljIHVzYWdl IGZvciB0aGUgInJwaCIgY2xhaW0gaW4NCiAgIFBBU1Nwb3JULg0KDQo0LjEuICBBdXRoZW50aWNh dGlvbiBTZXJ2aWNlIEJlaGF2aW9yDQoNCiAgIFRoZSBBdXRoZW50aWNhdGlvbiBTZXJ2aWNlIHdp bGwgY3JlYXRlIHRoZSAicnBoIiBjbGFpbSB1c2luZyB0aGUNCiAgIHZhbHVlcyBkaXNjdXNzZWQg aW4gc2VjdGlvbiAzIGJhc2VkIG9uIFtSRkM0NDEyXS4gIFRoZSBjb25zdHJ1Y3Rpb24NCiAgIG9m ICJycGgiIGNsYWltIGZvbGxvd3MgdGhlIHN0ZXBzIGRlc2NyaWJlZCBpbiBTZWN0aW9uIDQgb2YN CiAgIFtJLUQuaWV0Zi1zdGlyLXJmYzQ0NzRiaXNdLg0KDQogICBUaGUgcmVzdWx0aW5nIElkZW50 aXR5IGhlYWRlciBmb3IgInJwaCIgbWlnaHQgbG9vayBhcyBmb2xsb3dzOg0KDQoiLi4uaGVhZGVy IGZpZWxkLi4uIg0KDQoNCiAgICJleUpoYkdjaU9pSkZVekkxTmlJc0luUjVjQ0k2SWtwWFZDSjku ZXlKcGMzTWlPaUpsZVVvd1pWaEJhVTlwU25kDQogICBaV0U1NlkwYzVlV1JEU1hORVVXOXBZMGhD TUVscWIybGpia0p2U1dsM1RrTnBTbWhpUjJOcFQybEtSbFY2U1RGTw0KICAgYVVselJGRnZhV1ZF VmpGSmFuQnZaRWhTZDJONmIzWk1NMlF6WkhrMWJHVkhSblJqUjNoc1RHMU9kbUpUT1dwYVcNCiAg IEVvd1RHMU9iR051TUU1RFp6QkxJSHg4NG9DWkx1S0FtWHg4SUdWNVFXbGlNMHB3V25sSk5tVjVT akJpYVVrMlNXDQogICBwRmVVMVVWVEZPVkZWNFRXcEZlVWx1TUU1RGFVcHJXbGhPTUVscWNEZFhl VW93WW1sSk5rbHFSWGxOVkVreFRsUg0KICAgVmVFMXFSWHBKYkRFNVRFRXdTMGx0Ykdoa1EwazJU VlJSTUUxNlNYZFBSRTB3VGxOM1RrTnBTbmxqUjJkcFQyNXoNCiAgIGFWbFlWakJoUTBrMlYzbEti R1JJVFhWTlEwbHpTVzVrZDJONU5IZEpiREU1UkZGdlBTSjkuczM3UzZWQzhITTZEDQogICBsNll6 SmVRRHNyWmN3SjBsaXp4aFVyQTdmXzk4b1dCSHZvLWNsLW44TUlob0NyMTh2WVlGeTNibFh2czNm c2xNXw0KICAgb29zMlAyRHl3IjsgaW5mbz0gImh0dHBzOi8vd3d3LmV4YW1wbGUub3JnL2NlcnQu Y2VyIjxodHRwczovL3VybGRlZmVuc2UucHJvb2Zwb2ludC5jb20vdjIvdXJsP3U9aHR0cHMtM0Ff X3d3dy5leGFtcGxlLm9yZ19jZXJ0LmNlciZkPUR3TUZhUSZjPUxGWVotbzlfSFVNZU1UU1FpY3Zq SWcmcj1HOXY4dUNTU1FoQ21wdzdJdEcwcjJnJm09c2xLSUJZMzd5OHA0aUMzSmdqdXdEMVRJOU9n VzdRVEhXem1KVnlxeUpOZyZzPVdUVHVEbXkzOWkyekkzaWNNSG84MmNxUkdhWGp6SHl3SWdCQUlL MW9xQ1UmZT0+O2FsZz1FUzI1NjsNCiAgIHBwdD0icnBoIg0KDQpUaGlzIGV4YW1wbGUgaGFzIGEg bnVtYmVyIG9mIGlzc3VlczoNCg0KICAqICAgSW4gdGhlIElkZW50aXR5IGhlYWRlciBmaWVsZCwg dGhlIHNpZ25lZC1pZGVudGl0eS1kaWdlc3Qgc2hvdWxkbid0IGJlIHF1b3RlZC4NCiAgKiAgIElu IHRoZSBJZGVudGl0eSBoZWFkZXIgZmllbGQsIGluZm8gaXMgZW5jbG9zZWQgaW4gPD4gcmF0aGVy IHRoYW4gIiIuDQogICogICBJbiB0aGUgSWRlbnRpdHkgaGVhZGVyIGZpZWxkLCBwcHQgaXMgYSB0 b2tlbiByYXRoZXIgdGhhbiBhIHF1b3RlZCBzdHJpbmcuDQogICogICBUaGUgc2lnbmVkLWlkZW50 aXR5LWRpZ2VzdCBoZWFkZXIgbmVlZHMgdG8gaW5kaWNhdGUgYSAidHlwIiBvZiAicGFzc3BvcnQi IHJhdGhlciB0aGFuIEpXVCwgYW5kIGl0IG5lZWRzIHRvIGluY2x1ZGUgYm90aCBhICJwcHQiIGFu ZCAieDV1IiBmaWVsZC4NCiAgKiAgIFRoZSBzaWduZWQtaWRlbnRpdHktZGlnZXN0IGJvZHkgc2hv dWxkIGNvbnRhaW4gb25seSB0aGUgcGFzc3BvcnQgY2xhaW0gcmF0aGVyIHRoYW4gYSBKU09OIG9i amVjdCB0aGF0IGl0c2VsZiBjb250YWlucyBhIGJhc2U2NC1lbmNvZGVkIEpXUyBoZWFkZXIgY29u Y2F0ZW5hdGVkIHdpdGggYSBjbGFpbS4NCiAgKiAgIEkgYmVsaWV2ZSB0aGF0LCBldmVuIHdoZW4g dGhlIGJvZHkgaXMgaW5jbHVkZWQsIHZhbHVlcyBpbiB0aGUgaGVhZGVyIGFuZCBib2R5IG5lZWQg dG8gYmUgYmUgY2Fub25pY2FsaXplZCAoaS5lLiwgYWxsIG9uIG9uZSBsaW5lLCBubyBzcGFjZXMs IGluIGFscGhhYmV0aWNhbCBvcmRlciwgZXRjLikNCkkgd291bGQgYWxzbyByZWNvbW1lbmQgZm9s bG93aW5nIHRoZSBjb252ZW50aW9uIG9mIGluZGljYXRpbmcgdGhhdCBsaW5lLXdyYXBzIGFyZSBv bmx5IGZvciByZWFkYWJpbGl0eSwgYW5kIGluY2x1ZGluZyB0aGUgaGVhZGVyIGZpZWxkIG5hbWUg aW4gdGhlIGV4YW1wbGUuIFB1dHRpbmcgYWxsIHRoaXMgdG9nZXRoZXIsIEkgYmVsaWV2ZSB3aGF0 IHlvdSB3YW50IGlzOg0KICAgRm9yIGV4YW1wbGUsIGEgSWRlbnRpdHkgaGVhZGVyIGZpZWxkIGZv ciAicnBoIiBtaWdodCBsb29rDQogICBhcyBmb2xsb3dzIChiYWNrc2xhc2hlcyBzaG93biBmb3Ig bGluZSBmb2xkaW5nIG9ubHkpOg0KICAgSWRlbnRpdHk6IGV5SmhiR2NpT2lKRlV6STFOaUlzSW5C d2RDSTZJbkp3YUNJc0luUjVjQ0k2SW5CaGMzTndiM0owSSBcDQogICBpd2llRFYxSWpvaWFIUjBj SE02THk5M2QzY3VaWGhoYlhCc1pTNWpiMjB2WTJWeWRDNWpaWElpZlFvLmV5SmtaWE4wIFwNCiAg IElqcDdXeUowYmlJNklqRXlNVEkxTlRVd01URXpJbDE5TENKcFlYUWlPaUl4TkRRek1qQTRNelEx SWl3aWIzSnBaeUkgXA0KICAgNmV5SjBiaUk2SWpFeU1UVTFOVFV3TVRFeUluMHNJbkp3YUNJNmV5 SmhkWFJvSWpwYkltVjBjeTR3SWl3aWQzQnpMaiBcDQogICBBaVhYMTlDZy5zMzdTNlZDOEhNNkRs Nll6SmVRRHNyWmN3SjBsaXp4aFVyQTdmXzk4b1dCSHZvLWNsLW44TUlob0NyIFwNCiAgIDE4dllZ RnkzYmxYdnMzZnNsTV9vb3MyUDJEeXc7aW5mbz08aHR0cHM6Ly93d3cuZXhhbXBsZS5vcmcvY2Vy dC5jZXI8aHR0cHM6Ly91cmxkZWZlbnNlLnByb29mcG9pbnQuY29tL3YyL3VybD91PWh0dHBzLTNB X193d3cuZXhhbXBsZS5vcmdfY2VydC5jZXImZD1Ed01GYVEmYz1MRllaLW85X0hVTWVNVFNRaWN2 aklnJnI9Rzl2OHVDU1NRaENtcHc3SXRHMHIyZyZtPXNsS0lCWTM3eThwNGlDM0pnanV3RDFUSTlP Z1c3UVRIV3ptSlZ5cXlKTmcmcz1XVFR1RG15MzlpMnpJM2ljTUhvODJjcVJHYVhqekh5d0lnQkFJ SzFvcUNVJmU9PiBcDQogICA+O2FsZz1FUzI1NjtwcHQ9cnBoDQoNCihOb3RlOiB0aGlzIGV4YW1w bGUgYXNzdW1lcyB0aGUgY2FsbGluZyBhbmQgY2FsbGVkIHBhcnR5IG51bWJlcnMgaW4gdGhlIHBy ZXZpb3VzIGV4YW1wbGUgYXJlIGNoYW5nZWQgdG8gMTIxNTU1NTAxMTI8dGVsOigyMTUpJTIwNTU1 LTAxMTI+YW5kIDEyMTU1NTUwMTEzPHRlbDooMjE1KSUyMDU1NS0wMTEzPiwgcmVzcGVjdGl2ZWx5 KQ0KDQoNCiAgIEEgU0lQIGF1dGhlbnRpY2F0aW9uIHNlcnZpY2UgdHlwaWNhbGx5IHdpbGwgZGVy aXZlIHRoZSB2YWx1ZSBvZiAicnBoIg0KICAgZnJvbSB0aGUgJ1Jlc291cmNlLVByaW9yaXR5JyBo ZWFkZXIgZmllbGQgYmFzZWQgb24gcG9saWN5IGFzc29jaWF0ZWQNCiAgIHdpdGggc2VydmljZSBz cGVjaWZpYyB1c2Ugb2YgdGhlICJuYW1lc3BhY2UgIi4iIHItcHJpb3JpdHkiIHZhbHVlcw0KICAg YmFzZWQgb24gW1JGQzQ0MTJdLiAgVGhlIGF1dGhlbnRpY2F0aW9uIHNlcnZpY2UgZGVyaXZlcyB0 aGUgdmFsdWUgb2YNCiAgIHRoZSBQQVNTUG9yVCBjbGFpbSBieSB2ZXJpZnlpbmcgdGhlIGF1dGhv cml6YXRpb24gZm9yIFJlc291cmNlLQ0KICAgUHJpb3JpdHkgKGkuZS4sIHZlcmlmeWluZyBhIGNh bGxpbmcgdXNlciBwcml2aWxlZ2UgZm9yIFJlc291cmNlLQ0KICAgUHJpb3JpdHkgYmFzZWQgb24g aXRzIGlkZW50aXR5KSB3aGljaCBtaWdodCBiZSBkZXJpdmVkIGZyb20gY3VzdG9tZXINCiAgIHBy b2ZpbGUgZGF0YSBvciBmcm9tIGFjY2VzcyB0byBleHRlcm5hbCBzZXJ2aWNlcy4NCg0KICAgW1JG QzQ0MTJdIGFsbG93cyBtdWx0aXBsZSAibmFtZXNwYWNlICIuIiByLXByaW9yaXR5IiBwYWlycywg ZWl0aGVyIGluDQogICBhIHNpbmdsZSBTSVAgUmVzb3VyY2UtUHJpb3JpdHkgaGVhZGVyIG9yIGFj cm9zcyBtdWx0aXBsZSBTSVANCg0KU2luZ2xlIHF1b3RlcyBhcm91bmQgJ1Jlc291cmNlLVByaW9y aXR5Jy4NCiIuLi5oZWFkZXIgZmllbGQuLi4iDQoNCiAgIFJlc291cmNlLVByaW9yaXR5IGhlYWRl cnMuICBIb3dldmVyLCBpdCBpcyBub3QgbmVjZXNzYXJ5IHRvIHNpZ24gYWxsDQoNClNpbmdsZSBx dW90ZXMgYXJvdW5kICdSZXNvdXJjZS1Qcmlvcml0eScuDQoiLi4uaGVhZGVyIGZpZWxkcy4uLiIN Cg0KICAgY29udGVudCBvZiBhIFNJUCBSZXNvdXJjZS1Qcmlvcml0eSBoZWFkZXIgb3IgYWxsIFNJ UCBSZXNvdXJjZS0NCg0KU2luZ2xlIHF1b3RlcyBhcm91bmQgJ1Jlc291cmNlLVByaW9yaXR5Jy4N CiIuLi5oZWFkZXIgZmllbGQuLi4iDQoNCiAgIFByaW9yaXR5IGhlYWRlcnMgaW4gYSBnaXZlbiBT SVAgbWVzc2FnZS4gIEFuIGF1dGhvcml0eSBpcyBvbmx5DQoNClNpbmdsZSBxdW90ZXMgYXJvdW5k ICdSZXNvdXJjZS1Qcmlvcml0eScuDQoiLi4uaGVhZGVyIGZpZWxkcy4uLiINCg0KICAgcmVzcG9u c2libGUgZm9yIHNpZ25pbmcgdGhlIGNvbnRlbnQgb2YgYSBTSVAgUmVzb3VyY2UtUHJpb3JpdHkg aGVhZGVyDQoNClNpbmdsZSBxdW90ZXMgYXJvdW5kICdSZXNvdXJjZS1Qcmlvcml0eScuDQoiLi4u aGVhZGVyIGZpZWxkLi4uIg0KDQogICBmb3Igd2hpY2ggaXQgaGFzIGF1dGhvcml0eSAoZS5nLiwg YSBzcGVjaWZpYyAibmFtZXNwYWNlICIuIg0KICAgci1wcmlvcml0eSIpLg0KDQo0LjIuICBWZXJp ZmljYXRpb24gU2VydmljZSBCZWhhdmlvcg0KDQogICBbSS1ELmlldGYtc3Rpci1yZmM0NDc0Ymlz XSBTZWN0aW9uIDYuMiBTdGVwIDUgcmVxdWlyZXMgdGhhdA0KICAgc3BlY2lmaWNhdGlvbnMgZGVm aW5pbmcgInBwdCIgdmFsdWVzIGRlc2NyaWJlIGFueSBhZGRpdGlvbmFsIHZlcmlmaWVyDQogICBi ZWhhdmlvci4gIFRoZSBiZWhhdmlvciBzcGVjaWZpZWQgZm9yIHRoZSAicHB0IiB2YWx1ZXMgb2Yg InJwaCIgaXMgYXMNCiAgIGZvbGxvd3M6DQoNCiAgIFRoZSB2ZXJpZmljYXRpb24gc2VydmljZSBN VVNUIGV4dHJhY3QgdGhlIHZhbHVlIGFzc29jaWF0ZWQgd2l0aCB0aGUNCiAgICJhdXRoIiBrZXkg aW4gYSBmdWxsIGZvcm0gUEFTU1BvclQgd2l0aCBhICJwcHQiIHZhbHVlIG9mICJycGgiLiAgSWYN CiAgIHRoZSBzaWduYXR1cmUgdmFsaWRhdGVzLCB0aGVuIHRoZSB2ZXJpZmljYXRpb24gc2Vydmlj ZSBjYW4gdXNlIHRoZQ0KICAgdmFsdWUgb2YgdGhlICJycGgiIGNsYWltIGFzIHZhbGlkYXRpb24g dGhhdCB0aGUgY2FsbGluZyBwYXJ0eSBpcw0KICAgYXV0aG9yaXplZCBmb3IgUmVzb3VyY2UtUHJp b3JpdHksIHdoaWNoIHdvdWxkIGluIHR1cm4gYmUgdXNlZCBmb3INCg0KU2luZ2xlIHF1b3RlcyBh cm91bmQgJ1Jlc291cmNlLVByaW9yaXR5Jy4NClRoaXMgdGV4dCBpcyBhbWJpZ3VvdXMgYWJvdXQg d2hldGhlciB0aGUgdmFsaWRhdGlvbiBpbmRpY2F0ZXMgdGhhdCB0aGUgY2FsbGluZyBwYXJ0eSBp cyBhdXRob3JpemVkIHRvIHVzZSB0aGUgcHJpb3JpdGllcyBpbmRpY2F0ZWQgaW4gdGhlIHBhc3Nw b3J0IG9iamVjdCwgb3IgdGhlIHZhbHVlcyBpbiB0aGUgU0lQICdSZXNvdXJjZS1Qcmlvcml0eScg aGVhZGVyIGZpZWxkOyBhbmQgKHRha2VuIG9uIGl0cyBmYWNlKSBpbXBsaWVzIHRoZSBsYXR0ZXIs IHdoZW4gdGhlIGludGVudGlvbiBoZXJlIHNob3VsZCBjbGVhcmx5IGJlIHRoZSBmb3JtZXIuDQoi Li4uYXV0aG9yaXplZCBmb3IgJ1Jlc291cmNlLVByaW9yaXR5JyBpbmRpY2F0ZWQgaW4gdGhlIGNs YWltLiBUaGlzIHZhbHVlIHdvdWxkIGluIHR1cm4gYmUgdXNlZCBmb3IuLi4iDQpUaGUgdGV4dCBh bHNvIG5lZWRzIHRvIHNheSBzb21ldGhpbmcgYWJvdXQgY29tcGFyaW5nIHZhbHVlcyBpbiB0aGUg Y2xhaW0gdG8gdmFsdWVzIGluIHRoZSAnUmVzb3VyY2UtUHJpb3JpdHknIGhlYWRlciBmaWVsZCwg YW5kIHdoYXQgYSBtaXNtYXRjaCBtaWdodCBtZWFuLiBUaGUgZG9jdW1lbnQgc2F5cyBlbHNld2hl cmUgdGhhdCB0aGUgc2lnbmF0dXJlIG1pZ2h0IG9ubHkgY292ZXIgc29tZSBvZiB0aGUgci12YWx1 ZXMsIHdoaWNoIG1ha2VzIGl0IGVudGlyZWx5IHBvc3NpYmxlIHRoYXQgdGhlICdSZXNvdXJjZS1Q cmlvcml0eScgZmllbGQgbWlnaHQgY29udGFpbiBtb3JlIHZhbHVlcyB0aGFuIGFyZSBzaWduZWQu IE9uIHRoZSBvdGhlciBoYW5kLCBpbnRlcm1lZGlhcmllcyBtaWdodCByZWFzb25hYmx5IHJlbW92 ZSByLXZhbHVlcyBhcyB0aGUgY2FsbCBpcyBwcm9jZXNzZWQuIFRoaXMgcHJvYmFibHkgbWVhbnMg dGhhdCB0aG9zZSByZW1vdmVkIHByaW9yaXRpZXMgc2hvdWxkIG5vdCBiZSB1c2VkLCBldmVuIGlm IHRoZXkgYXJlIHByZXNlbnQgaW4gdGhlIHBhc3Nwb3J0LiBJdCBzZWVtcyByZWFzb25hYmxlIHRv IHNheSB0aGF0ICp0eXBpY2FsKiBwcm9jZXNzaW5nIGJ5IGEgcmVjZWl2aW5nIHBhcnR5IHdvdWxk IGJlIHRvIHRha2UgdGhlICp1bmlvbiogb2YgYWxsIFJQSCBwYXNzcG9ydHMgdGhhdCB0aGV5IHRy dXN0LCBhbmQgKmludGVyc2VjdCogdGhhdCB3aXRoIHRoZSBwcmlvcml0aWVzIGluICdSZXNvdXJj ZS1Qcmlvcml0eScgaGVhZGVyIGZpZWxkcyB0byBnZXQgdGhlIGFjdHVhbCBwcmlvcml0eSBvciBw cmlvcml0aWVzIHRvIGJlIGFwcGxpZWQgdG8gdGhlIGNhbGwgKHN1YmplY3QgdG8gbG9jYWwgcG9s aWN5KS4NCg0KICAgcHJpb3JpdHkgdHJlYXRtZW50IGluIGFjY29yZGFuY2Ugd2l0aCBsb2NhbCBw b2xpY3kgZm9yIHRoZSBhc3NvY2lhdGVkDQogICBjb21tdW5pY2F0aW9uIHNlcnZpY2UuDQoNCiAg IEluIGFkZGl0aW9uLCBbSS1ELmlldGYtc3Rpci1yZmM0NDc0YmlzXSBTZWN0aW9uIDYuMiBTdGVw IDQgcmVxdWlyZXMNCiAgICJpYXQiIHZhbHVlIGluICJycGgiIGNsYWltIHRvIGJlIHZlcmlmaWVk Lg0KDQogICBUaGUgYmVoYXZpb3Igb2YgYSBTSVAgVUFzIHVwb24gcmVjZWl2aW5nIGFuIElOVklU RSBjb250YWluaW5nIGENCg0KIi4uLm9mIGEgU0lQIFVBIHVwb24uLi4iDQpvcg0KIi4uLm9mIFNJ UCBVQXMgdXBvbi4uLiINCg0KICAgUEFTU3BvclQgb2JqZWN0IHdpdGggYSAicnBoIiBjbGFpbSB3 aWxsIGxhcmdlbHkgcmVtYWluIGEgbWF0dGVyIG9mDQogICBpbXBsZW1lbnRhdGlvbiBwb2xpY3kg Zm9yIHRoZSBzcGVjaWZpYyBjb21tdW5pY2F0aW9uIHNlcnZpY2UuICBJbg0KICAgbW9zdCBjYXNl cyxpbXBsZW1lbnRhdGlvbnMgd291bGQgYWN0IGJhc2VkIG9uIGNvbmZpZGVuY2UgaW4gdGhlDQoN CiIuLi5jYXNlcywgaW1wbGVtZW50YXRpb25zLi4uIg0KKHNwYWNlIGFmdGVyIGNvbW1hKQ0KDQog ICB2ZXJhY2l0eSBvZiB0aGlzIGluZm9ybWF0aW9uLiAgVGhlIHVzZSBvZiB0aGUgY29tcGFjdCBm b3JtIG9mDQoNClBhcmFncmFwaCBicmVhayBiZWZvcmUgIlRoZSIuDQoNCiAgIFBBU1Nwb3JUIGlz IG5vdCBzcGVjaWZpZWQgaW4gdGhpcyBkb2N1bWVudC4NCg0KNS4gIEZ1cnRoZXIgSW5mb3JtYXRp b24gQXNzb2NpYXRlZCB3aXRoIFJlc291cmNlLVByaW9yaXR5DQoNClNpbmdsZSBxdW90ZXMgYXJv dW5kICdSZXNvdXJjZS1Qcmlvcml0eScuDQoNCg0KICAgVGhlcmUgbWF5IGJlIGFkZGl0aW9uYWwg aW5mb3JtYXRpb24gYWJvdXQgdGhlIGNhbGxpbmcgcGFydHkgb3IgdGhlDQogICBjYWxsIHRoYXQg Y291bGQgYmUgcmVsZXZhbnQgdG8gYXV0aG9yaXphdGlvbiBmb3IgUmVzb3VyY2UtUHJpb3JpdHku DQoNClNpbmdsZSBxdW90ZXMgYXJvdW5kICdSZXNvdXJjZS1Qcmlvcml0eScuDQoNCiAgIFRoaXMg bWF5IGluY2x1ZGUgaW5mb3JtYXRpb24gcmVsYXRlZCB0byB0aGUgZGV2aWNlIHN1YnNjcmlwdGlv biBvZg0KICAgdGhlIGNhbGxlciwgb3IgdG8gYW55IGluc3RpdHV0aW9ucyB0aGF0IHRoZSBjYWxs ZXIgb3IgZGV2aWNlIGlzDQogICBhc3NvY2lhdGVkIHdpdGgsIG9yIGV2ZW4gY2F0ZWdvcmllcyBv ZiBpbnN0aXR1dGlvbnMuICBBbGwgb2YgdGhlc2UNCiAgIGRhdGEgZWxlbWVudHMgd291bGQgYmVu ZWZpdCBmcm9tIHRoZSBzZWN1cmUgYXR0ZXN0YXRpb25zIHByb3ZpZGVkIGJ5DQogICB0aGUgU1RJ UiBhbmQgUEFTU3BvclQgZnJhbWV3b3Jrcy4gIFRoZSBzcGVjaWZpY2F0aW9uIG9mIHRoZSAicnBo Ig0KICAgY2xhaW0gY291bGQgZW50YWlsIHRoZSBvcHRpb25hbCBwcmVzZW5jZSBvZiBvbmUgb3Ig bW9yZSBzdWNoDQogICBhZGRpdGlvbmFsIGluZm9ybWF0aW9uIGZpZWxkcy4NCg0KICAgQSBuZXcg SUFOQSByZWdpc3RyeSBoYXMgYmVlbiBkZWZpbmVkIHRvIGhvbGQgcG90ZW50aWFsIHZhbHVlcyBv ZiB0aGUNCiAgICJycGgiIGFycmF5OyBzZWUgU2VjdGlvbiA2LjIuICBUaGUgZGVmaW5pdGlvbiBv ZiB0aGUgInJwaCIgY2xhaW0gbWF5DQogICBoYXZlIG9uZSBvciBtb3JlIHN1Y2ggYWRkaXRpb25h bCBpbmZvcm1hdGlvbiBmaWVsZChzKS4gIERldGFpbHMgb2YNCiAgIHN1Y2ggInJwaCIgY2xhaW0g dG8gZW5jb21wYXNzIG90aGVyIGRhdGEgZWxlbWVudHMgYXJlIGxlZnQgZm9yIGZ1dHVyZQ0KICAg dmVyc2lvbiBvZiB0aGlzIHNwZWNpZmljYXRpb24uDQoNCjYuICBJQU5BIENvbnNpZGVyYXRpb25z DQoNCjYuMS4gIEpTT04gV2ViIFRva2VuIENsYWltcyBSZWdpc3RyYXRpb24NCg0KSSB0aGluayB0 aGVyZSdzIHNvbWUgY29uZnVzaW9uIGhlcmUuIFlvdSdyZSByZWdpc3RlcmluZyBhIFBBU1Nwb3JU IHBwdCB2YWx1ZSwgbm90IGEgbmV3IEpXVCBjbGFpbS4gVGhhdCBpcyB0byBzYXksIHlvdSdyZSBh ZGRpbmcgYW4gZW50cnkgdG8gdGhpcyB0YWJsZToNCmh0dHBzOi8vd3d3LmlhbmEub3JnL2Fzc2ln bm1lbnRzL3Bhc3Nwb3J0L3Bhc3Nwb3J0LnhodG1sPGh0dHBzOi8vdXJsZGVmZW5zZS5wcm9vZnBv aW50LmNvbS92Mi91cmw/dT1odHRwcy0zQV9fd3d3LmlhbmEub3JnX2Fzc2lnbm1lbnRzX3Bhc3Nw b3J0X3Bhc3Nwb3J0LnhodG1sJmQ9RHdNRmFRJmM9TEZZWi1vOV9IVU1lTVRTUWljdmpJZyZyPUc5 djh1Q1NTUWhDbXB3N0l0RzByMmcmbT1zbEtJQlkzN3k4cDRpQzNKZ2p1d0QxVEk5T2dXN1FUSFd6 bUpWeXF5Sk5nJnM9WEhJc1dNdXl0QTZNanU2bWlFelZwbnQwRDRaeGtBQlRTdkotamZjWXVUVSZl PT4NCk5vdCB0byB0aGlzIHRhYmxlOg0KaHR0cHM6Ly93d3cuaWFuYS5vcmcvYXNzaWdubWVudHMv and0L2p3dC54aHRtbDxodHRwczovL3VybGRlZmVuc2UucHJvb2Zwb2ludC5jb20vdjIvdXJsP3U9 aHR0cHMtM0FfX3d3dy5pYW5hLm9yZ19hc3NpZ25tZW50c19qd3Rfand0LnhodG1sJmQ9RHdNRmFR JmM9TEZZWi1vOV9IVU1lTVRTUWljdmpJZyZyPUc5djh1Q1NTUWhDbXB3N0l0RzByMmcmbT1zbEtJ QlkzN3k4cDRpQzNKZ2p1d0QxVEk5T2dXN1FUSFd6bUpWeXF5Sk5nJnM9QXptamZvNTQ2WUhXazly NEhRV2RFQjVQalk5TnhBUDhsbHVXZmE2Zl9CNCZlPT4NCllvdSB3b3VsZCBvbmx5IHVzZSB0aGUg c2Vjb25kIHRhYmxlIGlmIHlvdSBoYWQgYSBuZXcga2V5IHRvIGFkZCB0byB0aGUgUEFTU3BvclQg aGVhZGVyIC0tIHRoaXMgc3BlY2lmaWNhdGlvbiBkb2VzIG5vdCBkbyB0aGF0Lg0KVGhpcyBzZWN0 aW9uIGFsc28gbmVlZHMgc29tZSBpbnRyb2R1Y3RvcnkgdGV4dCB0byBsZXQgdGhlIElBTkEga25v dyBleGFjdGx5IHdoYXQgdG8gZG87IGUuZy4gIlRoaXMgZG9jdW1lbnQgcmVnaXN0ZXJzIGEgbmV3 IHZhbHVlIGZvciB0aGUgIlBlcnNvbmFsIEFzc2VydGlvbiBUb2tlbiAoUEFTU3BvclQpIEV4dGVu c2lvbnMiIHRhYmxlLg0KDQogICBvICBwcHQgdmFsdWU6ICJycGgiDQoNCiAgIG8gIFNwZWNpZmlj YXRpb24gRG9jdW1lbnQocyk6IFNlY3Rpb24gMyBvZiBbUkZDVGhpc10NCg0KNi4yLiAgUEFTU3Bv clQgJ3JwaCcgVHlwZXMNCg0KICAgVGhpcyBkb2N1bWVudCByZXF1ZXN0cyB0aGF0IHRoZSBJQU5B IGFkZCBhIG5ldyBlbnRyeSB0byB0aGUgUEFTU3BvclQNCiAgIFR5cGVzIHJlZ2lzdHJ5IGZvciB0 aGUgdHlwZSAicnBoIiB3aGljaCBpcyBzcGVjaWZpZWQgaW4gW1JGQ1RoaXNdLg0KDQpUaGVyZSBp c24ndCBhbiBJQU5BIHRhYmxlIGNhbGxlZCAiUEFTU3BvclQgVHlwZXMuIiBJIHByZXN1bWUgdGhp cyBpcyB0aGUgcmVnaXN0cmF0aW9uIHdlIGp1c3QgZGlzY3Vzc2VkIGluIHNlY3Rpb24gNi4xLCBh bmQgc28gdGhlIGFib3ZlIHR3byBsaW5lcyBjYW4gYmUgcmVtb3ZlZC4NCg0KICAgVGhpcyBzcGVj aWZpY2F0aW9uIGFsc28gcmVxdWVzdHMgdGhhdCB0aGUgSUFOQSBjcmVhdGUgYSBuZXcgcmVnaXN0 cnkNCiAgIGZvciBQQVNTcG9yVCAicnBoIiB0eXBlcy4gIFJlZ2lzdHJhdGlvbiBvZiBuZXcgUEFT U3BvclQgInJwaCIgdHlwZXMNCiAgIHNoYWxsIGJlIHVuZGVyIHRoZSBzcGVjaWZpY2F0aW9uIHJl cXVpcmVkIHBvbGljeS4gIFRoaXMgcmVnaXN0cnkgaXMNCiAgIHRvIGJlIGluaXRpYWxseSBwb3B1 bGF0ZWQgd2l0aCBhIHNpbmdsZSB2YWx1ZSBmb3IgImF1dGgiIHdoaWNoIGlzDQogICBzcGVjaWZp ZWQgaW4gW1JGQ1RoaXNdLg0KDQpUaGlzIG5lZWRzIHRvIGJlIHZlcnkgY2xlYXIgYWJvdXQgdGhl IGZpZWxkcyB0byBiZSBpbmNsdWRlZCBpbiB0aGlzIG5ldyByZWdpc3RyeSAoZS5nLiwgIlJlZ2lz dHJ5IGVudHJpZXMgbXVzdCBjb250YWluIHR3byBmaWVsZHM6IHRoZSBuYW1lIG9mIHRoZSAncnBo JyB0eXBlIGFuZCB0aGUgc3BlY2lmaWNhdGlvbiBpbiB3aGljaCB0aGUgdHlwZSBpcyBkZXNjcmli ZWQiKS4NCg0KDQo3LiAgU2VjdXJpdHkgQ29uc2lkZXJhdGlvbnMNCg0KICAgVGhlIHNlY3VyaXR5 IGNvbnNpZGVyYXRpb25zIGRpc2N1c3NlZCBpbiBbSS1ELmlldGYtc3Rpci1yZmM0NDc0YmlzXQ0K ICAgaW4gU2VjdGlvbiAxMCBhcmUgYXBwbGljYWJsZSBoZXJlLg0KDQo3LjEuICBBdm9pZGFuY2Ug b2YgcmVwbGF5IGFuZCBjdXQgYW5kIHBhc3RlIGF0dGFja3MNCg0KICAgVGhlIFBBU1Nwb3JUIGV4 dGVuc2lvbiB3aXRoIGEgInBwdCIgdmFsdWUgb2YgInJwaCIgTVVTVCBvbmx5IGJlIHNlbnQNCiAg IHdpdGggU0lQIElOVklURSB3aGVuICdSZXNvdXJjZS1Qcmlvcml0eScgaGVhZGVyIGlzIHVzZWQg dG8gY29udmV5IHRoZQ0KDQoiLi4uaGVhZGVyIGZpZWxkLi4uIg0KDQogICBwcmlvcml0eSBvZiB0 aGUgY29tbXVuaWNhdGlvbiBhcyBkZWZpbmVkIGluIFtSRkM0NDEyXS4gIFRvIGF2b2lkIHRoZQ0K ICAgcmVwbGF5LCBhbmQgY3V0IGFuZCBwYXN0ZSBhdHRhY2tzLCB0aGUgcHJvY2VkdXJlcyBkZXNj cmliZWQgaW4NCiAgIFNlY3Rpb24gMTAuMSBvZiBbSS1ELmlldGYtc3Rpci1yZmM0NDc0YmlzXSBN VVNUIGJlIGZvbGxvd2VkLg0KDQo3LjIuICBTb2x1dGlvbiBDb25zaWRlcmF0aW9ucw0KDQogICBU aGUgdXNlIG9mIGV4dGVuc2lvbiB0byBQQVNTcG9yVCB0b2tlbnMgd2l0aCAicHB0IiB2YWx1ZSAi cnBoIiBiYXNlZA0KICAgb24gdGhlIHZhbGlkYXRpb24gb2YgdGhlIGRpZ2l0YWwgc2lnbmF0dXJl IGFuZCB0aGUgYXNzb2NpYXRlZA0KICAgY2VydGlmaWNhdGUgcmVxdWlyZXMgY29uc2lkZXJhdGlv biBvZiB0aGUgYXV0aGVudGljYXRpb24gYW5kDQogICBhdXRob3JpdHkgb3IgcmVwdXRhdGlvbiBv ZiB0aGUgc2lnbmVyIHRvIGF0dGVzdCB0byB0aGUgaWRlbnRpdHkgYmVpbmcNCiAgIGFzc2VydGVk LiAgVGhlIGZvbGxvd2luZyBjb25zaWRlcmF0aW9ucyBzaG91bGQgYmUgcmVjb2duaXplZCB3aGVu DQogICB1c2luZyBQQVNTcG9yVCBleHRlbnNpb24gd2l0aCAicHB0IiB2YWx1ZSBvZiAicnBoIjoN Cg0KICAgbyAgQW4gYXV0aG9yaXR5IChzaWduZXIpIGlzIG9ubHkgYWxsb3dlZCB0byBzaWduIHRo ZSBjb250ZW50IG9mIGEgU0lQDQogICAgICAnUmVzb3VyY2UtUHJpb3JpdHknIGhlYWRlciBmb3Ig d2hpY2ggaXQgaGFzIHRoZSByaWdodCBhdXRob3JpdHkuDQoNCiIuLi5oZWFkZXIgZmllbGQuLi4i DQoNCiAgICAgIFRoZSBhdXRob3JpdHkgdGhhdCBzaWducyB0aGUgdG9rZW4gTVVTVCBoYXZlIGEg c2VjdXJlIG1ldGhvZCBmb3INCiAgICAgIGF1dGhlbnRpY2F0aW9uIG9mIHRoZSBlbmQgdXNlciBv ciB0aGUgZGV2aWNlLg0KDQogICBvICBUaGUgdmVyaWZpY2F0aW9uIG9mIHRoZSBzaWduYXR1cmUg TVVTVCBpbmNsdWRlIG1lYW5zIG9mIHZlcmlmeWluZw0KICAgICAgdGhhdCB0aGUgc2lnbmVyIGlz IGF1dGhvcml0YXRpdmUgZm9yIHRoZSBzaWduZWQgY29udGVudCBvZiB0aGUgU0lQDQoNCkl0J3Mg bm90IGNsZWFyIHdoYXQgYXV0aG9yaXR5IGlzIGJlaW5nIGNsYWltZWQgaGVyZS4gSXMgdGhpcyBz dXBwb3NlZCB0byBtZWFuIHNvbWV0aGluZyBsaWtlICIuLi52ZXJpZnlpbmcgdGhhdCB0aGUgc2ln bmVyIGlzIGF1dGhvcml0YXRpdmUgZm9yIHRoZSBvcmlnaW5hdGluZyB0biBpbiB0aGUgUEFTU3Bv clQuLi4iPyBPciAiLi4uYXV0aG9yaXRhdGl2ZSBmb3IgdGhlIHJlc291cmNlIHByaW9yaXR5IG5h bWVzcGFjZSBpbiB0aGUgUEFTU3BvclQ/IiBXaGF0ZXZlciB0aGUgc2VydmVyIGlzIHB1cnBvcnRl ZGx5IGF1dGhvcml0YXRpdmUgZm9yIG5lZWRzIHRvIGJlIGNsZWFybHkgc3BlbGxlZCBvdXQuDQoN CiAgICAgICdSZXNvdXJjZS1Qcmlvcml0eScgaGVhZGVyLg0KDQoiLi4uaGVhZGVyIGZpZWxkLiIN Cg0KL2ENCg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18N CnN0aXIgbWFpbGluZyBsaXN0DQpzdGlyQGlldGYub3JnPG1haWx0bzpzdGlyQGlldGYub3JnPg0K aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9zdGlyPGh0dHBzOi8vdXJsZGVm ZW5zZS5wcm9vZnBvaW50LmNvbS92Mi91cmw/dT1odHRwcy0zQV9fd3d3LmlldGYub3JnX21haWxt YW5fbGlzdGluZm9fc3RpciZkPUR3TUZhUSZjPUxGWVotbzlfSFVNZU1UU1FpY3ZqSWcmcj1HOXY4 dUNTU1FoQ21wdzdJdEcwcjJnJm09c2xLSUJZMzd5OHA0aUMzSmdqdXdEMVRJOU9nVzdRVEhXem1K VnlxeUpOZyZzPXU2UUNybm1ranpxeHU2UTNaVE02TUNVUFBqd1hGYmlZblJSdE1wWlRYNkkmZT0+ DQoNCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQpzdGly IG1haWxpbmcgbGlzdA0Kc3RpckBpZXRmLm9yZzxtYWlsdG86c3RpckBpZXRmLm9yZz4NCmh0dHBz Oi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vc3Rpcg0KDQo= --_000_7594FB04B1934943A5C02806D1A2204B6C2007D4ESESSMB109erics_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPCEtLVtp ZiAhbXNvXT48c3R5bGU+dlw6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kb1w6KiB7 YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kd1w6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0 I1ZNTCk7fQ0KLnNoYXBlIHtiZWhhdmlvcjp1cmwoI2RlZmF1bHQjVk1MKTt9DQo8L3N0eWxlPjwh W2VuZGlmXS0tPjxzdHlsZT48IS0tDQovKiBGb250IERlZmluaXRpb25zICovDQpAZm9udC1mYWNl DQoJe2ZvbnQtZmFtaWx5OkhlbHZldGljYTsNCglwYW5vc2UtMToyIDExIDYgNCAyIDIgMiAyIDIg NDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJDYW1icmlhIE1hdGgiOw0KCXBhbm9zZS0x OjIgNCA1IDMgNSA0IDYgMyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDYWxpYnJp Ow0KCXBhbm9zZS0xOjIgMTUgNSAyIDIgMiA0IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1m YW1pbHk6VGFob21hOw0KCXBhbm9zZS0xOjIgMTEgNiA0IDMgNSA0IDQgMiA0O30NCi8qIFN0eWxl IERlZmluaXRpb25zICovDQpwLk1zb05vcm1hbCwgbGkuTXNvTm9ybWFsLCBkaXYuTXNvTm9ybWFs DQoJe21hcmdpbjowY207DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMi4w cHQ7DQoJZm9udC1mYW1pbHk6IlRpbWVzIE5ldyBSb21hbiIsc2VyaWY7fQ0KYTpsaW5rLCBzcGFu Lk1zb0h5cGVybGluaw0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6Ymx1ZTsNCgl0 ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29IeXBlcmxpbmtG b2xsb3dlZA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6cHVycGxlOw0KCXRleHQt ZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KdHQNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWZv bnQtZmFtaWx5OiJDb3VyaWVyIE5ldyI7fQ0Kc3Bhbi5hcHBsZS1jb252ZXJ0ZWQtc3BhY2UNCgl7 bXNvLXN0eWxlLW5hbWU6YXBwbGUtY29udmVydGVkLXNwYWNlO30NCnNwYW4uRW1haWxTdHlsZTE5 DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsOw0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5z LXNlcmlmOw0KCWNvbG9yOiMxRjQ5N0Q7fQ0Kc3Bhbi5FbWFpbFN0eWxlMjANCgl7bXNvLXN0eWxl LXR5cGU6cGVyc29uYWwtY29tcG9zZTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJp ZjsNCgljb2xvcjp3aW5kb3d0ZXh0O30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBl OmV4cG9ydC1vbmx5Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJ e3NpemU6NjEyLjBwdCA3OTIuMHB0Ow0KCW1hcmdpbjo3Mi4wcHQgNzIuMHB0IDcyLjBwdCA3Mi4w cHQ7fQ0KZGl2LldvcmRTZWN0aW9uMQ0KCXtwYWdlOldvcmRTZWN0aW9uMTt9DQovKiBMaXN0IERl ZmluaXRpb25zICovDQpAbGlzdCBsMA0KCXttc28tbGlzdC1pZDo3ODAzMDM0MzU7DQoJbXNvLWxp c3QtdGVtcGxhdGUtaWRzOjYxOTczNDQ4MDt9DQpAbGlzdCBsMDpsZXZlbDENCgl7bXNvLWxldmVs LW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwt dGFiLXN0b3A6MzYuMHB0Ow0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0 LWluZGVudDotMTguMHB0Ow0KCW1zby1hbnNpLWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1p bHk6U3ltYm9sO30NCkBsaXN0IGwwOmxldmVsMg0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpi dWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDo3Mi4wcHQ7 DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7 DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxp c3QgbDA6bGV2ZWwzDQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2 ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjEwOC4wcHQ7DQoJbXNvLWxldmVsLW51 bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7DQoJbXNvLWFuc2ktZm9u dC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDA6bGV2ZWw0DQoJ e21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJ bXNvLWxldmVsLXRhYi1zdG9wOjE0NC4wcHQ7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjps ZWZ0Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsN Cglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDA6bGV2ZWw1DQoJe21zby1sZXZlbC1udW1i ZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1z dG9wOjE4MC4wcHQ7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5k ZW50Oi0xOC4wcHQ7DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpT eW1ib2w7fQ0KQGxpc3QgbDA6bGV2ZWw2DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxl dDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjIxNi4wcHQ7DQoJ bXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7DQoJ bXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3Qg bDA6bGV2ZWw3DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwt dGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjI1Mi4wcHQ7DQoJbXNvLWxldmVsLW51bWJl ci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7DQoJbXNvLWFuc2ktZm9udC1z aXplOjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDA6bGV2ZWw4DQoJe21z by1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNv LWxldmVsLXRhYi1zdG9wOjI4OC4wcHQ7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0 Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglm b250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDA6bGV2ZWw5DQoJe21zby1sZXZlbC1udW1iZXIt Zm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9w OjMyNC4wcHQ7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50 Oi0xOC4wcHQ7DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1i b2w7fQ0KQGxpc3QgbDENCgl7bXNvLWxpc3QtaWQ6NzkxNzAzOTY3Ow0KCW1zby1saXN0LXRlbXBs YXRlLWlkczoxMjU3NTYzNTQwO30NCkBsaXN0IGwxOmxldmVsMQ0KCXttc28tbGV2ZWwtbnVtYmVy LWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3Rv cDozNi4wcHQ7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50 Oi0xOC4wcHQ7DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1i b2w7fQ0KQGxpc3QgbDE6bGV2ZWwyDQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsN Cgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjcyLjBwdDsNCgltc28t bGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LTE4LjBwdDsNCgltc28t YW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMTps ZXZlbDMNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0 Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6MTA4LjBwdDsNCgltc28tbGV2ZWwtbnVtYmVyLXBv c2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LTE4LjBwdDsNCgltc28tYW5zaS1mb250LXNpemU6 MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMTpsZXZlbDQNCgl7bXNvLWxl dmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2 ZWwtdGFiLXN0b3A6MTQ0LjBwdDsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJ dGV4dC1pbmRlbnQ6LTE4LjBwdDsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQt ZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMTpsZXZlbDUNCgl7bXNvLWxldmVsLW51bWJlci1mb3Jt YXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6MTgw LjBwdDsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LTE4 LjBwdDsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9 DQpAbGlzdCBsMTpsZXZlbDYNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1z by1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6MjE2LjBwdDsNCgltc28tbGV2 ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LTE4LjBwdDsNCgltc28tYW5z aS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMTpsZXZl bDcNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+C tzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6MjUyLjBwdDsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0 aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LTE4LjBwdDsNCgltc28tYW5zaS1mb250LXNpemU6MTAu MHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMTpsZXZlbDgNCgl7bXNvLWxldmVs LW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwt dGFiLXN0b3A6Mjg4LjBwdDsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4 dC1pbmRlbnQ6LTE4LjBwdDsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFt aWx5OlN5bWJvbDt9DQpAbGlzdCBsMTpsZXZlbDkNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6 YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6MzI0LjBw dDsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LTE4LjBw dDsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpv bA0KCXttYXJnaW4tYm90dG9tOjBjbTt9DQp1bA0KCXttYXJnaW4tYm90dG9tOjBjbTt9DQotLT48 L3N0eWxlPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVkZWZhdWx0cyB2OmV4dD0i ZWRpdCIgc3BpZG1heD0iMTAyNiIgLz4NCjwveG1sPjwhW2VuZGlmXS0tPjwhLS1baWYgZ3RlIG1z byA5XT48eG1sPg0KPG86c2hhcGVsYXlvdXQgdjpleHQ9ImVkaXQiPg0KPG86aWRtYXAgdjpleHQ9 ImVkaXQiIGRhdGE9IjEiIC8+DQo8L286c2hhcGVsYXlvdXQ+PC94bWw+PCFbZW5kaWZdLS0+DQo8 L2hlYWQ+DQo8Ym9keSBsYW5nPSJFTi1HQiIgbGluaz0iYmx1ZSIgdmxpbms9InB1cnBsZSI+DQo8 ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5z LXNlcmlmO2NvbG9yOiMxRjQ5N0Q7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVMiPkhpIENocmlz LDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jmd0O0EgUEFTU3BvclQgY2FuIG9ubHkg YmUgc2lnbmVkIGJ5IG9uZSBhdXRob3JpdHkgYW5kIHRoYXQgYXV0aG9yaXR5IG5lZWRzIHRvIG9u bHkgYmUgYW4gYXV0aG9yaXR5IG9mIHRoZSBjb250ZXh0IG9mIHRoZSBhc3NlcnRpb24gYmVpbmcg bWFkZSBieSB0aGUgJmd0O1BBU1Nwb3JULiAmbmJzcDtGb3IgUlBILCB0aGUgYXNzZXJ0aW9uIGlz IHRoZSBhc3NvY2lhdGlvbiBvZiB0aGUgcnBoIGNsYWltIHRvIHRoZSB0ZWxlcGhvbmUgY2FsbA0K IHdpdGggdG8vZnJvbS9kYXRlLiAmbmJzcDtUaGlzIGlzIG5vdCB0byBiZSBjb25mdXNlZCB3aXRo IFNIQUtFTiAmZ3Q7d2hpY2ggdGhlIGF1dGhvcml0eSBvZiB0aGUgYXNzZXJ0aW9uIGlzIGFyb3Vu ZCB0aGUgY2FsbGVyLWlkIGF0IG9yaWdpbmF0aW9uLiAmbmJzcDtUaGVzZSBhcmUgY29tcGxldGVs eSBkaWZmZXJlbnQgY29uY2VwdHMgYW5kIHNob3VsZG7igJl0IGJlIGNvcnJlbGF0ZWQuICZuYnNw O0p1c3QgYmVjYXVzZSAmZ3Q74oCcb3JpZ+KAnSBpcyBpbiB0aGUgY2xhaW0gZm9yIFJQSCBkb2Vz buKAmXQNCiBuZWNlc3NhcmlseSBtZWFuIHRoYXQgUlBIIHNpZ25lciBoYXMgYXV0aG9yaXR5IGZv ciBpdCwgaXTigJlzIHB1cmVseSB0byBhc3NvY2lhdGUgdGhlIFJQSCBjb2RlIHdpdGggdGhlIHNw ZWNpZmljIGNhbGwgJmd0O2RldGFpbHMuPG86cD48L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1 b3Q7LHNhbnMtc2VyaWYiPlRoYW5rcyBmb3IgdGhlIGNsYXJpZmljYXRpb24hPG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj48bzpwPiZu YnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2Vy aWYiPkkgdGhpbmsgZWFjaCBQQVNTcG9yVCBleHRlbnNpb24gY2xlYXJseSBuZWVkcyB0byBzYXkg d2hpY2ggb2YgdGhlIGNsYWltcyB0aGUgb25lIGluc2VydGluZyB0aGUgUEFTU3BvclQgbXVzdCBo YXZlIGF1dGhvcml0eSBvZi4gSSBhc3N1bWUgaXTigJlzIG9ubHkgdGhlIGNsYWltcyBkZWZpbmVk IGJ5IHRoYXQNCiBQQVNTcG9yVCBleHRlbnNpb24/PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPk5vdCBzcGVjaWZp YyB0byBSUEgsIGJ1dCBJIGFsc28gYXNrZWQgd2h5IGUuZy4sIHRoZSBvcmlnIGNsYWltIG5lZWRz IHRvIGJlIGluY2x1ZGVkIGluIHRoZSBQQVNTcG9yVCBleHRlbnNpb24gdG8gYmVnaW4gd2l0aCwg aWYgdGhlIG9uZSBpbnNlcnRpbmcgdGhlIFBBU1Nwb3JUIGRvZXMgbm90IGhhdmUNCiBhdXRob3Jp dHkgb2YgaXQuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90 OyxzYW5zLXNlcmlmIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtD YWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPlJlZ2FyZHMsPG86cD48L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj48bzpwPiZuYnNwOzwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEx LjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPkNocmlzdGVy PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNl cmlmIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1 b3Q7LHNhbnMtc2VyaWYiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0 O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPk9uIEZl YiA1LCAyMDE4LCBhdCAxMDo1OCBBTSwgRE9MTFksIE1BUlRJTiBDICZsdDs8YSBocmVmPSJtYWls dG86bWQzMTM1QGF0dC5jb20iPm1kMzEzNUBhdHQuY29tPC9hPiZndDsgd3JvdGU6PG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9w Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPkNo cmlzdGVyLDwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5JdCBk b2VzIG5vdCBuZWVkIHRvLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNl cmlmIj5SZWdhcmRzLDwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlm Ij5NYXJ0aW48L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVv dDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQg I0UxRTFFMSAxLjBwdDtwYWRkaW5nOjMuMHB0IDBjbSAwY20gMGNtIj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWls eTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPkZyb206PC9zcGFuPjwvYj48c3BhbiBj bGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPiZuYnNwOzwvc3Bh bj48L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5DaHJpc3Rlcg0KIEhvbG1iZXJnIFs8YSBocmVmPSJt YWlsdG86Y2hyaXN0ZXIuaG9sbWJlcmdAZXJpY3Nzb24uY29tIj5tYWlsdG86Y2hyaXN0ZXIuaG9s bWJlcmdAZXJpY3Nzb24uY29tPC9hPl08c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNl Ij4mbmJzcDs8L3NwYW4+PGJyPg0KPGI+U2VudDo8L2I+PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZl cnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPk1vbmRheSwgRmVicnVhcnkgMDUsIDIwMTggMTA6MjAg QU08YnI+DQo8Yj5Ubzo8L2I+PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5i c3A7PC9zcGFuPkp1bGlvIE1hcnRpbmV6LU1pbmd1aXRvICZsdDs8YSBocmVmPSJtYWlsdG86anVs aW8ubWFydGluZXotbWluZ3VpdG9AZXJpY3Nzb24uY29tIj5qdWxpby5tYXJ0aW5lei1taW5ndWl0 b0Blcmljc3Nvbi5jb208L2E+Jmd0OzsgU2luZ2gsIFJheSBQICZsdDs8YSBocmVmPSJtYWlsdG86 cnNpbmdoQHZlbmNvcmVsYWJzLmNvbSI+cnNpbmdoQHZlbmNvcmVsYWJzLmNvbTwvYT4mZ3Q7Ow0K PGEgaHJlZj0ibWFpbHRvOnN0aXJAaWV0Zi5vcmciPnN0aXJAaWV0Zi5vcmc8L2E+PGJyPg0KPGI+ Q2M6PC9iPjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj5E T0xMWSwgTUFSVElOIEMgJmx0OzxhIGhyZWY9Im1haWx0bzptZDMxMzVAYXR0LmNvbSI+bWQzMTM1 QGF0dC5jb208L2E+Jmd0OzsgU3ViaXIgJmx0OzxhIGhyZWY9Im1haWx0bzpzdWJpcmRhczIxQGdt YWlsLmNvbSI+c3ViaXJkYXMyMUBnbWFpbC5jb208L2E+Jmd0OzsgQWRhbSBSb2FjaCAmbHQ7PGEg aHJlZj0ibWFpbHRvOmFkYW1Abm9zdHJ1bS5jb20iPmFkYW1Abm9zdHJ1bS5jb208L2E+Jmd0OzsN CiBTVElSIENoYWlycyAmbHQ7PGEgaHJlZj0ibWFpbHRvOnN0aXItY2hhaXJzQGlldGYub3JnIj5z dGlyLWNoYWlyc0BpZXRmLm9yZzwvYT4mZ3Q7OyA8YSBocmVmPSJtYWlsdG86ZHJhZnQtaWV0Zi1z dGlyLXJwaC5hbGxAdG9vbHMuaWV0Zi5vcmciPg0KZHJhZnQtaWV0Zi1zdGlyLXJwaC5hbGxAdG9v bHMuaWV0Zi5vcmc8L2E+PGJyPg0KPGI+U3ViamVjdDo8L2I+PHNwYW4gY2xhc3M9ImFwcGxlLWNv bnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPlJFOiBbc3Rpcl0gQUQgUmV2aWV3OiBkcmFmdC1p ZXRmLXN0aXItcnBoLTAyIC0gYXV0aG9yaXR5IHRvIGFzc2VydCB0aGUgY2FsbGVycyBpZGVudGl0 eSBhc3N1bWVkPzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0 OTdEIj5IaSw8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVv dDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7PC9zcGFuPjxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90Oyxz YW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPlJlbGF0ZWQgdG8gdGhpczogaG93IGRvZXMgdGhlIHZl cmlmaWVyIGtub3cgd2hhdCBjbGFpbShzKSBpbiBhIFBBU1NQb3JUIHRoZSBzaWduZXIgaGFkIGF1 dGhvcml0eSB0byBzaWduPzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj4mbmJzcDs8 L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJp JnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+UmVnYXJkcyw8L3NwYW4+PG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2Vy aWY7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0Qi PkNocmlzdGVyPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2Jv cmRlci10b3A6c29saWQgI0UxRTFFMSAxLjBwdDtwYWRkaW5nOjMuMHB0IDBjbSAwY20gMGNtIj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEx LjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPkZyb206PC9z cGFuPjwvYj48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2Vy aWYiPiZuYnNwOzwvc3Bhbj48L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5KdWxpbw0KIE1hcnRpbmV6 LU1pbmd1aXRvPHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFu Pjxicj4NCjxiPlNlbnQ6PC9iPjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZu YnNwOzwvc3Bhbj4wNSBGZWJydWFyeSAyMDE4IDE3OjEyPGJyPg0KPGI+VG86PC9iPjxzcGFuIGNs YXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj5DaHJpc3RlciBIb2xtYmVy ZyAmbHQ7PGEgaHJlZj0ibWFpbHRvOmNocmlzdGVyLmhvbG1iZXJnQGVyaWNzc29uLmNvbSI+PHNw YW4gc3R5bGU9ImNvbG9yOnB1cnBsZSI+Y2hyaXN0ZXIuaG9sbWJlcmdAZXJpY3Nzb24uY29tPC9z cGFuPjwvYT4mZ3Q7OyBTaW5naCwgUmF5IFAgJmx0OzxhIGhyZWY9Im1haWx0bzpyc2luZ2hAdmVu Y29yZWxhYnMuY29tIj48c3BhbiBzdHlsZT0iY29sb3I6cHVycGxlIj5yc2luZ2hAdmVuY29yZWxh YnMuY29tPC9zcGFuPjwvYT4mZ3Q7OzxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2Ui PiZuYnNwOzwvc3Bhbj48YSBocmVmPSJtYWlsdG86c3RpckBpZXRmLm9yZyI+PHNwYW4gc3R5bGU9 ImNvbG9yOnB1cnBsZSI+c3RpckBpZXRmLm9yZzwvc3Bhbj48L2E+PGJyPg0KPGI+Q2M6PC9iPjxz cGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj5ET0xMWSwgTUFS VElOIEMgJmx0OzxhIGhyZWY9Im1haWx0bzptZDMxMzVAYXR0LmNvbSI+PHNwYW4gc3R5bGU9ImNv bG9yOnB1cnBsZSI+bWQzMTM1QGF0dC5jb208L3NwYW4+PC9hPiZndDs7IFN1YmlyICZsdDs8YSBo cmVmPSJtYWlsdG86c3ViaXJkYXMyMUBnbWFpbC5jb20iPjxzcGFuIHN0eWxlPSJjb2xvcjpwdXJw bGUiPnN1YmlyZGFzMjFAZ21haWwuY29tPC9zcGFuPjwvYT4mZ3Q7Ow0KIEFkYW0gUm9hY2ggJmx0 OzxhIGhyZWY9Im1haWx0bzphZGFtQG5vc3RydW0uY29tIj48c3BhbiBzdHlsZT0iY29sb3I6cHVy cGxlIj5hZGFtQG5vc3RydW0uY29tPC9zcGFuPjwvYT4mZ3Q7OyBTVElSIENoYWlycyAmbHQ7PGEg aHJlZj0ibWFpbHRvOnN0aXItY2hhaXJzQGlldGYub3JnIj48c3BhbiBzdHlsZT0iY29sb3I6cHVy cGxlIj5zdGlyLWNoYWlyc0BpZXRmLm9yZzwvc3Bhbj48L2E+Jmd0Ozs8c3BhbiBjbGFzcz0iYXBw bGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PGEgaHJlZj0ibWFpbHRvOmRyYWZ0LWll dGYtc3Rpci1ycGguYWxsQHRvb2xzLmlldGYub3JnIj48c3BhbiBzdHlsZT0iY29sb3I6cHVycGxl Ij5kcmFmdC1pZXRmLXN0aXItcnBoLmFsbEB0b29scy5pZXRmLm9yZzwvc3Bhbj48L2E+PGJyPg0K PGI+U3ViamVjdDo8L2I+PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7 PC9zcGFuPlJFOiBbc3Rpcl0gQUQgUmV2aWV3OiBkcmFmdC1pZXRmLXN0aXItcnBoLTAyIC0gYXV0 aG9yaXR5IHRvIGFzc2VydCB0aGUgY2FsbGVycyBpZGVudGl0eSBhc3N1bWVkPzwvc3Bhbj48bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+SGksPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj4mbmJzcDs8 L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJp JnF1b3Q7LHNhbnMtc2VyaWYiPklmIHRoZSBQQVNTcG9yVCB3aXRoIGV4dGVuc2lvbiBwcHQ6cnBo IG9ubHkgaGFzIGF1dGhvcml0eSBvdmVyIHRoZSBycGggY2xhaW0sIGRvZXMgaXQgbWVhbiB0aGF0 IHdlIG5lZWQgYW5vdGhlciBQQVNTcG9yVCBpbiB0aGUgc2lnbmFsaW5nIHRvIGNsYWltIGF1dGhv cml0eSBvdmVyIHRoZSDigJhvcmln4oCZDQogbnVtYmVyPzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+U2hv dWxkIHRoZXJlIGJlIG5lc3RlZCBQQVNTcG9yVHM/PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj4mbmJzcDs8 L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJp JnF1b3Q7LHNhbnMtc2VyaWYiPlJlZ2FyZHMsIEp1bGlvPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj4mbmJz cDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25l O2JvcmRlci1sZWZ0OnNvbGlkIGJsdWUgMS41cHQ7cGFkZGluZzowY20gMGNtIDBjbSA0LjBwdCI+ DQo8ZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjRTFFMUUx IDEuMHB0O3BhZGRpbmc6My4wcHQgMGNtIDBjbSAwY20iPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+RnJvbTo8L3NwYW4+PC9iPjxzcGFuIGNsYXNzPSJh cHBsZS1jb252ZXJ0ZWQtc3BhY2UiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+Jm5ic3A7PC9zcGFuPjwvc3Bh bj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJp JnF1b3Q7LHNhbnMtc2VyaWYiPkNocmlzdGVyDQogSG9sbWJlcmcgWzxhIGhyZWY9Im1haWx0bzpj aHJpc3Rlci5ob2xtYmVyZ0Blcmljc3Nvbi5jb20iPjxzcGFuIHN0eWxlPSJjb2xvcjpwdXJwbGUi Pm1haWx0bzpjaHJpc3Rlci5ob2xtYmVyZ0Blcmljc3Nvbi5jb208L3NwYW4+PC9hPl08c3BhbiBj bGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PGJyPg0KPGI+U2VudDo8 L2I+PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPmRlbiA1 IGZlYnJ1YXJpIDIwMTggMDc6Mzg8YnI+DQo8Yj5Ubzo8L2I+PHNwYW4gY2xhc3M9ImFwcGxlLWNv bnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPlNpbmdoLCBSYXkgUCAmbHQ7PGEgaHJlZj0ibWFp bHRvOnJzaW5naEB2ZW5jb3JlbGFicy5jb20iPjxzcGFuIHN0eWxlPSJjb2xvcjpwdXJwbGUiPnJz aW5naEB2ZW5jb3JlbGFicy5jb208L3NwYW4+PC9hPiZndDs8YnI+DQo8Yj5DYzo8L2I+PHNwYW4g Y2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPkRPTExZLCBNQVJUSU4g QyAmbHQ7PGEgaHJlZj0ibWFpbHRvOm1kMzEzNUBhdHQuY29tIj48c3BhbiBzdHlsZT0iY29sb3I6 cHVycGxlIj5tZDMxMzVAYXR0LmNvbTwvc3Bhbj48L2E+Jmd0OzsgU3ViaXIgJmx0OzxhIGhyZWY9 Im1haWx0bzpzdWJpcmRhczIxQGdtYWlsLmNvbSI+PHNwYW4gc3R5bGU9ImNvbG9yOnB1cnBsZSI+ c3ViaXJkYXMyMUBnbWFpbC5jb208L3NwYW4+PC9hPiZndDs7PHNwYW4gY2xhc3M9ImFwcGxlLWNv bnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxhIGhyZWY9Im1haWx0bzpzdGlyQGlldGYub3Jn Ij48c3BhbiBzdHlsZT0iY29sb3I6cHVycGxlIj5zdGlyQGlldGYub3JnPC9zcGFuPjwvYT47DQog QWRhbSBSb2FjaCAmbHQ7PGEgaHJlZj0ibWFpbHRvOmFkYW1Abm9zdHJ1bS5jb20iPjxzcGFuIHN0 eWxlPSJjb2xvcjpwdXJwbGUiPmFkYW1Abm9zdHJ1bS5jb208L3NwYW4+PC9hPiZndDs7IFNUSVIg Q2hhaXJzICZsdDs8YSBocmVmPSJtYWlsdG86c3Rpci1jaGFpcnNAaWV0Zi5vcmciPjxzcGFuIHN0 eWxlPSJjb2xvcjpwdXJwbGUiPnN0aXItY2hhaXJzQGlldGYub3JnPC9zcGFuPjwvYT4mZ3Q7Ozxz cGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48YSBocmVmPSJt YWlsdG86ZHJhZnQtaWV0Zi1zdGlyLXJwaC5hbGxAdG9vbHMuaWV0Zi5vcmciPjxzcGFuIHN0eWxl PSJjb2xvcjpwdXJwbGUiPmRyYWZ0LWlldGYtc3Rpci1ycGguYWxsQHRvb2xzLmlldGYub3JnPC9z cGFuPjwvYT48YnI+DQo8Yj5TdWJqZWN0OjwvYj48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVk LXNwYWNlIj4mbmJzcDs8L3NwYW4+UmU6IFtzdGlyXSBBRCBSZXZpZXc6IGRyYWZ0LWlldGYtc3Rp ci1ycGgtMDIgLSBhdXRob3JpdHkgdG8gYXNzZXJ0IHRoZSBjYWxsZXJzIGlkZW50aXR5IGFzc3Vt ZWQ/PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SGksPHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1z cGFjZSI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rp dj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SSB0aGluayB0aGUgcmVhc29u IHdoeSDigJhvcmln4oCZIGFuZCDigJhkZXN04oCZIGFyZSByZXF1aXJlZCBpbiBldmVyeSBQQVNT UG9yVCBzaG91bGQgYmUgZXhwbGFpbmVkIHRoZSB0aGUgUEFTU1BvclQgZG9jdW1lbnQsIGluIG15 IG9waW5pb24uIEl0IGlzIG5vdCBzcGVjaWZpYyB0byB0aGUgUlBIIGV4dGVuc2lvbi48bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+Tm90IHN1cmUgaG93IOKAmG9yaWfigJkgY2FuIGJlIHVzZWQg dG8gaWRlbnRpZnkgYSBjYWxsLiBZb3UgY2FuIGhhdmUgbXVsdGlwbGUgY2FsbHMgd2l0aCB0aGUg c2FtZSDigJhvcmln4oCZIHZhbHVlLCBjYW7igJl0IHlvdT8mbmJzcDs8bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNw OzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+UmVnYXJkcyw8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Q2hyaXN0ZXI8 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWJvdHRvbToxMi4wcHQiPiZuYnNwOzxv OnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5TZW50IGZy b20gbXkgaVBob25lPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tYm90dG9tOjEyLjBwdCI+PGJyPg0KT24gNCBG ZWIgMjAxOCwgYXQgMjEuNDUsIFNpbmdoLCBSYXkgUCAmbHQ7PGEgaHJlZj0ibWFpbHRvOnJzaW5n aEB2ZW5jb3JlbGFicy5jb20iPjxzcGFuIHN0eWxlPSJjb2xvcjpwdXJwbGUiPnJzaW5naEB2ZW5j b3JlbGFicy5jb208L3NwYW4+PC9hPiZndDsgd3JvdGU6PG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQi Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10 b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OyxzYW5zLXNlcmlmIj5B bGwsPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2lu LWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7VGFob21hJnF1b3Q7LHNhbnMtc2VyaWYiPlllcywgdGhlIGNsYWltIGlzIG9ubHkg Zm9yIHRoZSBSUEguIFRoZSZxdW90O29yaWcmcXVvdDsgYW5kICZxdW90O2Rlc3QmcXVvdDsgaXMg aW5jbHVkZWQgc28gdGhhdCB0aGUgUlBIIGNsYWltIGNhbiBiZSBjb3JyZWxhdGVkIHRvIHRoZQ0K IGNhbGwuJm5ic3A7IFdlIGNhbiBhZGQgc29tZSBjbGFyaWZpY2F0aW9uIHRleHQgdG8gaW5kaWNh dGUgdGhhdCAmcXVvdDtvcmlnJnF1b3Q7IGlzIG9ubHkgaW5jbHVkZWQgc28gdGhhdCB0aGUgUlBI IGNsYWltIGNhbiBiZSBjb3JyZWxhdGVkIHRvIGEgc3BlY2lmaWMgY2FsbCwgYW5kIHRoYXQgdGhl IHNpZ25lciBvZiB0aGUgUlBIIGNsYWltIG1heSBubyBoYXZlIGF1dGhvcml0eSBvZiB0aGUgJnF1 b3Q7b3JpZyZxdW90OyBUTi48L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250 LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+PG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDph dXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEw LjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssc2Fucy1zZXJpZiI+VGhhbmtzPC9z cGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0 aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRv bS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7VGFob21hJnF1b3Q7LHNhbnMtc2VyaWYiPlJheTwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlmIj48 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1h cmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OyxzYW5zLXNl cmlmIj4mbmJzcDs8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWls eTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+PG86cD48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21z by1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtm b250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssc2Fucy1zZXJpZiI+Jm5ic3A7PC9zcGFuPjxz cGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1 b3Q7LHNhbnMtc2VyaWYiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXY+DQo8ZGl2IGNsYXNz PSJNc29Ob3JtYWwiIGFsaWduPSJjZW50ZXIiIHN0eWxlPSJ0ZXh0LWFsaWduOmNlbnRlciI+DQo8 aHIgc2l6ZT0iMyIgd2lkdGg9IjEwMCUiIGFsaWduPSJjZW50ZXIiPg0KPC9kaXY+DQo8ZGl2IGlk PSJkaXZScEY2OTQ2NTgiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1ib3R0 b206MTIuMHB0Ij48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTom cXVvdDtUYWhvbWEmcXVvdDssc2Fucy1zZXJpZiI+RnJvbTo8L3NwYW4+PC9iPjxzcGFuIGNsYXNz PSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OyxzYW5zLXNlcmlmIj4mbmJzcDs8L3NwYW4+PC9z cGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9t YSZxdW90OyxzYW5zLXNlcmlmIj5zdGlyDQogWzxhIGhyZWY9Im1haWx0bzpzdGlyLWJvdW5jZXNA aWV0Zi5vcmciPjxzcGFuIHN0eWxlPSJjb2xvcjpwdXJwbGUiPnN0aXItYm91bmNlc0BpZXRmLm9y Zzwvc3Bhbj48L2E+XSBvbiBiZWhhbGYgb2YgRE9MTFksIE1BUlRJTiBDIFs8YSBocmVmPSJtYWls dG86bWQzMTM1QGF0dC5jb20iPjxzcGFuIHN0eWxlPSJjb2xvcjpwdXJwbGUiPm1kMzEzNUBhdHQu Y29tPC9zcGFuPjwvYT5dPGJyPg0KPGI+U2VudDo8L2I+PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZl cnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPlN1bmRheSwgRmVicnVhcnkgMDQsIDIwMTggNzowNSBQ TTxicj4NCjxiPlRvOjwvYj48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJz cDs8L3NwYW4+U3ViaXI7IENocmlzdGVyIEhvbG1iZXJnPGJyPg0KPGI+Q2M6PC9iPjxzcGFuIGNs YXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48YSBocmVmPSJtYWlsdG86 c3RpckBpZXRmLm9yZyI+PHNwYW4gc3R5bGU9ImNvbG9yOnB1cnBsZSI+c3RpckBpZXRmLm9yZzwv c3Bhbj48L2E+OyBBZGFtIFJvYWNoOyBTVElSIENoYWlyczs8c3BhbiBjbGFzcz0iYXBwbGUtY29u dmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PGEgaHJlZj0ibWFpbHRvOmRyYWZ0LWlldGYtc3Rp ci1ycGguYWxsQHRvb2xzLmlldGYub3JnIj48c3BhbiBzdHlsZT0iY29sb3I6cHVycGxlIj5kcmFm dC1pZXRmLXN0aXItcnBoLmFsbEB0b29scy5pZXRmLm9yZzwvc3Bhbj48L2E+PGJyPg0KPGI+U3Vi amVjdDo8L2I+PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFu PlJlOiBbc3Rpcl0gQUQgUmV2aWV3OiBkcmFmdC1pZXRmLXN0aXItcnBoLTAyIC0gYXV0aG9yaXR5 IHRvIGFzc2VydCB0aGUgY2FsbGVycyBpZGVudGl0eSBhc3N1bWVkPzwvc3Bhbj48bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZx dW90OyxzYW5zLXNlcmlmIj5XZSBvbmx5IGhhdmUgb25lIGNsYWltIGFuZCB0aGF0IGlzIHRoZSBS UEg8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJv cmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0UxRTFFMSAxLjBwdDtwYWRkaW5nOjMuMHB0IDBj bSAwY20gMGNtIj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2Vy aWYiPkZyb206PC9zcGFuPjwvYj48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1 b3Q7LHNhbnMtc2VyaWYiPiZuYnNwOzwvc3Bhbj48L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5TdWJp cg0KIFs8YSBocmVmPSJtYWlsdG86c3ViaXJkYXMyMUBnbWFpbC5jb20iPjxzcGFuIHN0eWxlPSJj b2xvcjpwdXJwbGUiPm1haWx0bzpzdWJpcmRhczIxQGdtYWlsLmNvbTwvc3Bhbj48L2E+XTxzcGFu IGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48YnI+DQo8Yj5TZW50 OjwvYj48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+U3Vu ZGF5LCBGZWJydWFyeSAwNCwgMjAxOCA1OjU2IFBNPGJyPg0KPGI+VG86PC9iPjxzcGFuIGNsYXNz PSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj5DaHJpc3RlciBIb2xtYmVyZyAm bHQ7PGEgaHJlZj0ibWFpbHRvOmNocmlzdGVyLmhvbG1iZXJnQGVyaWNzc29uLmNvbSI+PHNwYW4g c3R5bGU9ImNvbG9yOnB1cnBsZSI+Y2hyaXN0ZXIuaG9sbWJlcmdAZXJpY3Nzb24uY29tPC9zcGFu PjwvYT4mZ3Q7PGJyPg0KPGI+Q2M6PC9iPjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3Bh Y2UiPiZuYnNwOzwvc3Bhbj5BZGFtIFJvYWNoICZsdDs8YSBocmVmPSJtYWlsdG86YWRhbUBub3N0 cnVtLmNvbSI+PHNwYW4gc3R5bGU9ImNvbG9yOnB1cnBsZSI+YWRhbUBub3N0cnVtLmNvbTwvc3Bh bj48L2E+Jmd0OzsgU1RJUiBDaGFpcnMgJmx0OzxhIGhyZWY9Im1haWx0bzpzdGlyLWNoYWlyc0Bp ZXRmLm9yZyI+PHNwYW4gc3R5bGU9ImNvbG9yOnB1cnBsZSI+c3Rpci1jaGFpcnNAaWV0Zi5vcmc8 L3NwYW4+PC9hPiZndDs7PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7 PC9zcGFuPjxhIGhyZWY9Im1haWx0bzpzdGlyQGlldGYub3JnIj48c3BhbiBzdHlsZT0iY29sb3I6 cHVycGxlIj5zdGlyQGlldGYub3JnPC9zcGFuPjwvYT47PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZl cnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxhIGhyZWY9Im1haWx0bzpkcmFmdC1pZXRmLXN0aXIt cnBoLmFsbEB0b29scy5pZXRmLm9yZyI+PHNwYW4gc3R5bGU9ImNvbG9yOnB1cnBsZSI+ZHJhZnQt aWV0Zi1zdGlyLXJwaC5hbGxAdG9vbHMuaWV0Zi5vcmc8L3NwYW4+PC9hPjxicj4NCjxiPlN1Ympl Y3Q6PC9iPjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj5S ZTogW3N0aXJdIEFEIFJldmlldzogZHJhZnQtaWV0Zi1zdGlyLXJwaC0wMiAtIGF1dGhvcml0eSB0 byBhc3NlcnQgdGhlIGNhbGxlcnMgaWRlbnRpdHkgYXNzdW1lZD88L3NwYW4+PG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PGJyPg0KV2UgY2FuIGFkZCBzb21lIHRleHRzIHRvIGNsYXJpZnkgdGhhdCBpbiB0 aGUgbmV4dCB2ZXJzaW9uLiBUaGUgcG9pbnQgaXMgdGhhdCBpbiBzb21lIHVzZSBjYXNlcyBzZXJ2 aWNlIHByb3ZpZGVyIG1heSBoYXZlIHRoZSBhdXRob3JpdHkgdG8gJm5ic3A7b3RoZXIgY2xhaW1z IHN1Y2ggYXMgJ29yaWcnIGFuZCBpbiBvdGhlciBjYXNlcyBpdCBtYXkgbm90IGhhdmUuICZuYnNw O1dlIGNhbiBhZGQgYSBtYXkgc3RhdGVtZW50IGNsYXJpZnlpbmcgdGhpcyBvciBleHBsaWNpdGx5 DQogc2F5IHRoYXQgaXQgaXMgbm90IHJlcXVpcmVkIHRvIGhhdmUgYXV0aG9yaXR5IHRvIG90aGVy IGNsYWltcy48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4N CjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+VGhhbmtzLDxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5i c3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj5TdWJpciZuYnNwOzxicj4NClNlbnQgZnJvbSBteSBpUGhvbmU8bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1hcmdpbi1ib3R0b206MTIuMHB0Ij48YnI+DQpPbiBGZWIgNCwgMjAxOCwgYXQgMTA6MDMg UE0sIENocmlzdGVyIEhvbG1iZXJnICZsdDs8YSBocmVmPSJtYWlsdG86Y2hyaXN0ZXIuaG9sbWJl cmdAZXJpY3Nzb24uY29tIiB0YXJnZXQ9Il9ibGFuayI+PHNwYW4gc3R5bGU9ImNvbG9yOnB1cnBs ZSI+Y2hyaXN0ZXIuaG9sbWJlcmdAZXJpY3Nzb24uY29tPC9zcGFuPjwvYT4mZ3Q7IHdyb3RlOjxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBw dDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJy aSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPkhpLDwvc3Bhbj48bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlm O2NvbG9yOiMxRjQ5N0QiPlRoZSB0ZXh0IHNheXM6PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6 IzFGNDk3RCI+Jm5ic3A7Jm5ic3A7IOKAnFRoZSBjcmVkZW50aWFscyAoZS5nLiwgYXV0aG9yaXR5 IHJlc3BvbnNpYmxlIGZvciBhdXRob3JpemluZyBSZXNvdXJjZS08L3NwYW4+PG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7 Y29sb3I6IzFGNDk3RCI+Jm5ic3A7Jm5ic3A7IFByaW9yaXR5KSB1c2VkIHRvIGNyZWF0ZSB0aGUg c2lnbmF0dXJlIG11c3QgaGF2ZSBhdXRob3JpdHkgb3ZlciB0aGU8L3NwYW4+PG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7 Y29sb3I6IzFGNDk3RCI+Jm5ic3A7Jm5ic3A7IG5hbWVzcGFjZSBvZiB0aGUgJnF1b3Q7cnBoJnF1 b3Q7IGNsYWltIGFuZCB0aGVyZSBpcyBvbmx5IG9uZSBhdXRob3JpdHkgcGVyPC9zcGFuPjxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5z LXNlcmlmO2NvbG9yOiMxRjQ5N0QiPiZuYnNwOyZuYnNwOyBjbGFpbS7igJ08L3NwYW4+PG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fu cy1zZXJpZjtjb2xvcjojMUY0OTdEIj5JZiB0aGUgY3JlZGVudGlhbHMgZG9u4oCZdCBuZWVkIHRv IGhhdmUgYXV0aG9yaXR5IG9mIHRoZSBvdGhlciBjbGFpbXMgKGUuZy4sIOKAnG9yaWfigJ0pIGlu IHRoZSBSUEggUEFTU1BvclQgSSB0aGluayB5b3Ugc2hvdWxkIGV4cGxpY2l0bHkgc2F5IHNvLjwv c3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJy aSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPlJlZ2FyZHMsPC9zcGFuPjxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMt c2VyaWY7Y29sb3I6IzFGNDk3RCI+Q2hyaXN0ZXI8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5G cm9tOjwvc3Bhbj48L2I+PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90Oyxz YW5zLXNlcmlmIj4mbmJzcDs8L3NwYW4+PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+U3ViaXINCiBE YXMgWzxhIGhyZWY9Im1haWx0bzpzdWJpcmRhczIxQGdtYWlsLmNvbSIgdGFyZ2V0PSJfYmxhbmsi PjxzcGFuIHN0eWxlPSJjb2xvcjpwdXJwbGUiPm1haWx0bzpzdWJpcmRhczIxQGdtYWlsLmNvbTwv c3Bhbj48L2E+XTxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bh bj48YnI+DQo8Yj5TZW50OjwvYj48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4m bmJzcDs8L3NwYW4+MDIgRmVicnVhcnkgMjAxOCAwMTowNDxicj4NCjxiPlRvOjwvYj48c3BhbiBj bGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+Q2hyaXN0ZXIgSG9sbWJl cmcgJmx0OzxhIGhyZWY9Im1haWx0bzpjaHJpc3Rlci5ob2xtYmVyZ0Blcmljc3Nvbi5jb20iIHRh cmdldD0iX2JsYW5rIj48c3BhbiBzdHlsZT0iY29sb3I6cHVycGxlIj5jaHJpc3Rlci5ob2xtYmVy Z0Blcmljc3Nvbi5jb208L3NwYW4+PC9hPiZndDs8YnI+DQo8Yj5DYzo8L2I+PHNwYW4gY2xhc3M9 ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPkFkYW0gUm9hY2ggJmx0OzxhIGhy ZWY9Im1haWx0bzphZGFtQG5vc3RydW0uY29tIiB0YXJnZXQ9Il9ibGFuayI+PHNwYW4gc3R5bGU9 ImNvbG9yOnB1cnBsZSI+YWRhbUBub3N0cnVtLmNvbTwvc3Bhbj48L2E+Jmd0OzsgU1RJUiBDaGFp cnMgJmx0OzxhIGhyZWY9Im1haWx0bzpzdGlyLWNoYWlyc0BpZXRmLm9yZyIgdGFyZ2V0PSJfYmxh bmsiPjxzcGFuIHN0eWxlPSJjb2xvcjpwdXJwbGUiPnN0aXItY2hhaXJzQGlldGYub3JnPC9zcGFu PjwvYT4mZ3Q7OzxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bh bj48YSBocmVmPSJtYWlsdG86c3RpckBpZXRmLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPjxzcGFuIHN0 eWxlPSJjb2xvcjpwdXJwbGUiPnN0aXJAaWV0Zi5vcmc8L3NwYW4+PC9hPjs8c3BhbiBjbGFzcz0i YXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PGEgaHJlZj0ibWFpbHRvOmRyYWZ0 LWlldGYtc3Rpci1ycGguYWxsQHRvb2xzLmlldGYub3JnIiB0YXJnZXQ9Il9ibGFuayI+PHNwYW4g c3R5bGU9ImNvbG9yOnB1cnBsZSI+ZHJhZnQtaWV0Zi1zdGlyLXJwaC5hbGxAdG9vbHMuaWV0Zi5v cmc8L3NwYW4+PC9hPjxicj4NCjxiPlN1YmplY3Q6PC9iPjxzcGFuIGNsYXNzPSJhcHBsZS1jb252 ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj5SZTogW3N0aXJdIEFEIFJldmlldzogZHJhZnQtaWV0 Zi1zdGlyLXJwaC0wMiAtIGF1dGhvcml0eSB0byBhc3NlcnQgdGhlIGNhbGxlcnMgaWRlbnRpdHkg YXNzdW1lZD88L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SGVsbG8gQ2hyaXN0ZXIsPG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5UaGUg c2lnbmluZyBlbnRpdHkgZG9lcyBub3QgaGF2ZSBhbHdheXMgdGhlIGF1dGhvcml0eSB0byBhc3Nl cnQgdGhlIGNhbGxlciBpZGVudGl0eSBpbiBycGguIFdlIGFyZSBzdWJtaXR0aW5nIHZlci0wMyBk cmFmdCZuYnNwOyBhbmQgaXQgaXMgY2xhcmlmaWVkJm5ic3A7IGFzIGZvbGxvd3M6PG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJp JnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+JnF1b3Q7VGhlIGNyZWRlbnRpYWxzIChl LmcuLCBhdXRob3JpdHkgcmVzcG9uc2libGUgZm9yIGF1dGhvcml6aW5nIFJlc291cmNlLVByaW9y aXR5KSB1c2VkIHRvIGNyZWF0ZSB0aGUgc2lnbmF0dXJlIG11c3QgaGF2ZSBhdXRob3JpdHkgb3Zl ciB0aGUgbmFtZXNwYWNlIG9mIHRoZeKAnHJwaCZxdW90Ow0KIGNsYWltLi4mcXVvdDs8c3BhbiBj bGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PC9zcGFuPjxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZh bWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+LVN1Ymly PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5PbiBNb24sIEphbiAyMiwgMjAxOCBh dCAzOjI3IFBNLCBDaHJpc3RlciBIb2xtYmVyZyAmbHQ7PGEgaHJlZj0ibWFpbHRvOmNocmlzdGVy LmhvbG1iZXJnQGVyaWNzc29uLmNvbSIgdGFyZ2V0PSJfYmxhbmsiPjxzcGFuIHN0eWxlPSJjb2xv cjpwdXJwbGUiPmNocmlzdGVyLmhvbG1iZXJnQGVyaWNzc29uLmNvbTwvc3Bhbj48L2E+Jmd0OyB3 cm90ZTo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9ImJvcmRlcjpu b25lO2JvcmRlci1sZWZ0OnNvbGlkICNDQ0NDQ0MgMS4wcHQ7cGFkZGluZzowY20gMGNtIDBjbSA2 LjBwdDttYXJnaW4tbGVmdDo0LjhwdDttYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1yaWdodDowY207 bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtD YWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+SGksPC9zcGFuPjxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMt c2VyaWY7Y29sb3I6IzFGNDk3RCI+QW5vdGhlciBxdWVzdGlvbiBmb3IgY2xhcmlmaWNhdGlvbi48 L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGli cmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj5TZWN0aW9uIDMgY29udGFpbnMgdGhl IGZvbGxvd2luZyBleGFtcGxlOjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPiZu YnNwOyZuYnNwOyZuYnNwOyB7ICZxdW90O29yaWcmcXVvdDs6eyZxdW90O3RuJnF1b3Q7OiZxdW90 Ozwvc3Bhbj48YSBocmVmPSJ0ZWw6KDIxNSklMjA1NTUtMTIxMiIgdGFyZ2V0PSJfYmxhbmsiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVv dDssc2Fucy1zZXJpZjtjb2xvcjpwdXJwbGUiPjEyMTU1NTUxMjEyPC9zcGFuPjwvYT48c3BhbiBz dHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNh bnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+JnF1b3Q7fTwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjoj MUY0OTdEIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgJnF1b3Q7ZGVzdCZxdW90Ozp7WyZxdW90 O3RuJnF1b3Q7OiZxdW90Ozwvc3Bhbj48YSBocmVmPSJ0ZWw6KDIxMiklMjA1NTUtMTIxMyIgdGFy Z2V0PSJfYmxhbmsiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjpwdXJwbGUiPjEyMTI1NTUxMjEzPC9z cGFuPjwvYT48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtD YWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+JnF1b3Q7XX0sPC9zcGFuPjxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90Oyxz YW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAmcXVvdDtp YXQmcXVvdDs6MTQ0MzIwODM0NSw8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ICZxdW90O3JwaCZxdW90Ozp7JnF1b3Q7YXV0aCZxdW90Ozpb JnF1b3Q7ZXRzLjAmcXVvdDssJnF1b3Q7d3BzLjAmcXVvdDtdfTwvc3Bhbj48bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlm O2NvbG9yOiMxRjQ5N0QiPuKApmFuZCB0aGUgZm9sbG93aW5nIHRleHQ6PC9zcGFuPjxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMt c2VyaWY7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7Jm5ic3A7IOKAnFRoZSBjcmVkZW50aWFscyAoZS5n LiwgYXV0aG9yaXR5IHJlc3BvbnNpYmxlIGZvciBhdXRob3JpemluZyBSZXNvdXJjZS08L3NwYW4+ PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7 LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7Jm5ic3A7IFByaW9yaXR5KSB1c2VkIHRv IGNyZWF0ZSB0aGUgc2lnbmF0dXJlIG11c3QgaGF2ZSBhdXRob3JpdHkgb3ZlciB0aGU8L3NwYW4+ PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7 LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7Jm5ic3A7ICZxdW90O3JwaCZxdW90OyBj bGFpbeKApuKAnTwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxhIG5hbWU9Im1fLTI5Mzg3NDc5MDYxMjMyMDM0OTRfX01haWxFbmRDb21w b3NlIj48L2E+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVv dDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+U2luY2UgdGhlIGNsYWlt IGFsc28gY29udGFpbnMg4oCcb3JpZ+KAnSwgaXMgdGhlIGFzc3VtcHRpb24gdGhhdCB0aGUgc2ln bmluZyBlbnRpdHkgYWx3YXlzIGFsc28gaGFzIGF1dGhvcml0eSB0byBhc3NlcnQgdGhlIGNhbGxl cnMgaWRlbnRpdHk/IEkgdGhpbmsgaXQgd291bGQgYmUNCiBnb29kIHRvIGV4cGxpY2l0bHkgbWVu dGlvbiBpdC48L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj5SZWdhcmRzLDwvc3Bh bj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZu YnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZx dW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPkNocmlzdGVyPC9zcGFuPjxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNw OzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7 Ym9yZGVyLXRvcDpzb2xpZCAjRTFFMUUxIDEuMHB0O3BhZGRpbmc6My4wcHQgMGNtIDBjbSAwY20i Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+RnJvbTo8 L3NwYW4+PC9iPjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1z ZXJpZiI+Jm5ic3A7PC9zcGFuPjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtm b250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPnN0aXINCiBbbWFpbHRv Ojwvc3Bhbj48YSBocmVmPSJtYWlsdG86c3Rpci1ib3VuY2VzQGlldGYub3JnIiB0YXJnZXQ9Il9i bGFuayI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2Fs aWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOnB1cnBsZSI+c3Rpci1ib3VuY2VzQGlldGYub3Jn PC9zcGFuPjwvYT48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVv dDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPl08c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVk LXNwYWNlIj4mbmJzcDs8L3NwYW4+PGI+T24NCiBCZWhhbGYgT2Y8c3BhbiBjbGFzcz0iYXBwbGUt Y29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PC9iPkFkYW0gUm9hY2g8YnI+DQo8Yj5TZW50 OjwvYj48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+MjAg SmFudWFyeSAyMDE4IDAwOjE1PGJyPg0KPGI+VG86PC9iPjxzcGFuIGNsYXNzPSJhcHBsZS1jb252 ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj5TVElSIENoYWlycyAmbHQ7PC9zcGFuPjxhIGhyZWY9 Im1haWx0bzpzdGlyLWNoYWlyc0BpZXRmLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1z ZXJpZjtjb2xvcjpwdXJwbGUiPnN0aXItY2hhaXJzQGlldGYub3JnPC9zcGFuPjwvYT48c3BhbiBz dHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNh bnMtc2VyaWYiPiZndDs7PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7 PC9zcGFuPjwvc3Bhbj48YSBocmVmPSJtYWlsdG86c3RpckBpZXRmLm9yZyIgdGFyZ2V0PSJfYmxh bmsiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGli cmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjpwdXJwbGUiPnN0aXJAaWV0Zi5vcmc8L3NwYW4+PC9h PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkm cXVvdDssc2Fucy1zZXJpZiI+OzxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZu YnNwOzwvc3Bhbj48L3NwYW4+PGEgaHJlZj0ibWFpbHRvOmRyYWZ0LWlldGYtc3Rpci1ycGguYWxs QHRvb2xzLmlldGYub3JnIiB0YXJnZXQ9Il9ibGFuayI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOnB1 cnBsZSI+ZHJhZnQtaWV0Zi1zdGlyLXJwaC5hbGxAdG9vbHMuaWV0Zi5vcmc8L3NwYW4+PC9hPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVv dDssc2Fucy1zZXJpZiI+PGJyPg0KPGI+U3ViamVjdDo8L2I+PHNwYW4gY2xhc3M9ImFwcGxlLWNv bnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPltzdGlyXSBBRCBSZXZpZXc6IGRyYWZ0LWlldGYt c3Rpci1ycGgtMDI8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bztt c28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtm b250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+SSdtIGRvaW5nIG15 IEFEIHJldmlldyBvZiBkcmFmdC1pZXRmLXN0aXItcnBoLTAyLiBUaGFua3MgdG8gZXZlcnlvbmUg d2hvIGhhcyB3b3JrZWQgb24gdGhpcyBkb2N1bWVudCwgYW5kIHRoZSBhdXRob3JzDQogYW5kIGNo YWlycyBpbiBwYXJ0aWN1bGFyLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1h bHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtI ZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+VGhlIHRlY2huaWNhbCBjb250ZW50IGhlcmUgbG9v a3MgZ2VuZXJhbGx5IGdvb2QgdG8gbWUuIEknZCBsaWtlIHRvIHNlZSBhIGZldyBpc3N1ZXMgYWRk cmVzc2VkIGJlZm9yZSBJRVRGIExDLiBJbg0KIHNob3J0IHN1bWFyeTo8bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8dWwgc3R5bGU9Im1hcmdpbi10b3A6MGNtIiB0eXBlPSJkaXNjIj4NCjxsaSBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLWxpc3Q6bDAgbGV2ZWwxIGxmbzEiPlRoZSB2YWxpZGF0 aW9uIHNlY3Rpb24gbmVlZHMgdG8gYWRkIGEgZGlzY3Vzc2lvbiBvZiBob3cgdG8gdHJlYXQgY2Fs bHMgd2hlbiB0aGUgcHJpb3JpdHkgdmFsdWVzIGluICZxdW90O3JwaCZxdW90OyBwYXNzcG9ydHMg YW5kIFNJUCAmcXVvdDtSZXNvdXJjZS1Qcmlvcml0eSZxdW90OyBoZWFkZXIgZmllbGRzIGFyZW4n dCAxMDAlIGlkZW50aWNhbC48bzpwPjwvbzpwPjwvbGk+PGxpIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtc28tbGlzdDpsMCBsZXZlbDEgbGZvMSI+VGhlIGV4YW1wbGVzIG5lZWQgc29tZSBhZGp1 c3RtZW50LjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48 bzpwPjwvbzpwPjwvbGk+PGxpIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbGlzdDpsMCBs ZXZlbDEgbGZvMSI+VGhlcmUgaXMgYSBtaW5vciBwb2ludCBvZiBhbWJpZ3VpdHkgaW4gdGhlIFNl Y3VyaXR5IFNlY3Rpb24sIGJ1dCB0aGlzIHNob3VsZCBiZSBlYXN5IHRvIGZpeCwgYXMgbG9uZyBh cyB0aGUgV0cga25vd3Mgd2hhdCB3YXMgaW50ZW5kZWQuPG86cD48L286cD48L2xpPjxsaSBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLWxpc3Q6bDAgbGV2ZWwxIGxmbzEiPlRoZSBJQU5BIGFj dGlvbnMgbmVlZCBhIGxpdHRsZSBiaXQgb2YgYWRqdXN0bWVudC48c3BhbiBjbGFzcz0iYXBwbGUt Y29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L2xpPjxsaSBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibXNvLWxpc3Q6bDAgbGV2ZWwxIGxmbzEiPlRoZXJlIGFyZSBhIG51 bWJlciBvZiBtaW5vciBlZGl0b3JpYWwgaXNzdWVzIHRvIGJlIGNsZWFuZWQgdXAuPG86cD48L286 cD48L2xpPjwvdWw+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3At YWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNp emU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPkRl dGFpbGVkIGNvbW1lbnRzIG9uIHRoZXNlIHBvaW50cyBhcmUgaW5saW5lIGluIHRoZSBkb2N1bWVu dCBiZWxvdy4gSSd2ZSByZW1vdmVkIHNvbWUgcG9ydGlvbnMgb2YgdGhlIGRvY3VtZW50IG9uDQog d2hpY2ggSSBoYXZlIG5vIGNvbW1lbnRzLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJv dHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTom cXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+ PC9wPg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1 LjBwdCI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPjxicj4NCjwvc3Bh bj48dHQ+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPkFic3RyYWN0PC9zcGFuPjwvdHQ+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBO ZXcmcXVvdDsiPjxicj4NCjxicj4NCjwvc3Bhbj48dHQ+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MC4wcHQiPiZuYnNwOyZuYnNwOyBUaGlzIGRvY3VtZW50IGV4dGVuZHMgdGhlIFNUSVIgUEFTU3Bv clQgc3BlY2lmaWNhdGlvbiB0byBhbGxvdyB0aGU8L3NwYW4+PC90dD48bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1t YXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5z LXNlcmlmIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1 dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0 aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPiZxdW90Oy4uLnRoZSBTZWN1cmUgVGVsZXBob25lIElkZW50 aXR5IFJldmlzaXRlZCAoU1RJUikgUGVyc29uYWwgQXNzZXJ0aW9uIFRva2VuIChQQVNTcG9yVCkg c3BlY2lmaWNhdGlvbiBkZWZpbmVkIGluDQogUkZDIDgxMjIuLi4mcXVvdDs8bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0 OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPihTZWU8 c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PGEgaHJlZj0i aHR0cHM6Ly91cmxkZWZlbnNlLnByb29mcG9pbnQuY29tL3YyL3VybD91PWh0dHBzLTNBX193d3cu cmZjLTJEZWRpdG9yLm9yZ19tYXRlcmlhbHNfYWJicmV2LmV4cGFuc2lvbi50eHQmYW1wO2Q9RHdN RmFRJmFtcDtjPUxGWVotbzlfSFVNZU1UU1FpY3ZqSWcmYW1wO3I9Rzl2OHVDU1NRaENtcHc3SXRH MHIyZyZhbXA7bT1zbEtJQlkzN3k4cDRpQzNKZ2p1d0QxVEk5T2dXN1FUSFd6bUpWeXF5Sk5nJmFt cDtzPWlCVEFod041MTdCTkFybWo4YmI4VWF0M0xBSWZTcUViM096dXFIT2w2a28mYW1wO2U9IiB0 YXJnZXQ9Il9ibGFuayI+PHNwYW4gc3R5bGU9ImNvbG9yOnB1cnBsZSI+Jmx0O2h0dHBzOi8vd3d3 LnJmYy1lZGl0b3Iub3JnL21hdGVyaWFscy9hYmJyZXYuZXhwYW5zaW9uLnR4dCZndDs8L3NwYW4+ PC9hPjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj5mb3IN CiBndWlkYW5jZSBvbiBhYmJyZXZpYXRpb25zKTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2lu LWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWls eTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+Jm5ic3A7PG86cD48L286cD48L3Nw YW4+PC9wPg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRv bTo1LjBwdCI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHR0PjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTAuMHB0Ij4mbmJzcDsmbmJzcDsgaW5jbHVzaW9uIG9mIGNyeXB0b2dyYXBoaWNh bGx5LXNpZ25lZCBhc3NlcnRpb25zIG9mIGF1dGhvcml6YXRpb24gZm9yPC9zcGFuPjwvdHQ+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcm cXVvdDsiPjxicj4NCjwvc3Bhbj48dHQ+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPiZu YnNwOyZuYnNwOyB0aGUgdmFsdWVzIHBvcHVsYXRlZCBpbiB0aGUgU0lQICdSZXNvdXJjZS1Qcmlv cml0eScgaGVhZGVyIGZpZWxkLDwvc3Bhbj48L3R0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48YnI+DQo8L3NwYW4+PHR0 PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij4mbmJzcDsmbmJzcDsgd2hpY2ggaXMgdXNl ZCBmb3IgY29tbXVuaWNhdGlvbnMgcmVzb3VyY2UgcHJpb3JpdGl6YXRpb24uPC9zcGFuPjwvdHQ+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBO ZXcmcXVvdDsiPjxicj4NCjxicj4NCjwvc3Bhbj48dHQ+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MC4wcHQiPi4uLjwvc3Bhbj48L3R0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48YnI+DQo8YnI+DQo8L3NwYW4+PHR0Pjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij4xLiZuYnNwOyBJbnRyb2R1Y3Rpb248L3NwYW4+ PC90dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3Vy aWVyIE5ldyZxdW90OyI+PGJyPg0KPGJyPg0KPC9zcGFuPjx0dD48c3BhbiBzdHlsZT0iZm9udC1z aXplOjEwLjBwdCI+Jm5ic3A7Jm5ic3A7IFBBU1Nwb3JUIFtJLUQuaWV0Zi1zdGlyLXBhc3Nwb3J0 XSBpcyBhIHRva2VuIGZvcm1hdCBiYXNlZCBvbiBKV1Q8L3NwYW4+PC90dD48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+PGJy Pg0KPC9zcGFuPjx0dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+Jm5ic3A7Jm5ic3A7 IFtSRkM3NTE5XSBmb3IgY29udmV5aW5nIGNyeXB0b2dyYXBoaWNhbGx5LXNpZ25lZCBpbmZvcm1h dGlvbiBhYm91dDwvc3Bhbj48L3R0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48YnI+DQo8L3NwYW4+PHR0PjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTAuMHB0Ij4mbmJzcDsmbmJzcDsgdGhlIGlkZW50aXRpZXMgaW52b2x2 ZWQgaW4gcGVyc29uYWwgY29tbXVuaWNhdGlvbnM7IGl0IGlzIHVzZWQgd2l0aDwvc3Bhbj48L3R0 PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIg TmV3JnF1b3Q7Ij48YnI+DQo8L3NwYW4+PHR0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0 Ij4mbmJzcDsmbmJzcDsgU1RJUiBbSS1ELmlldGYtc3Rpci1yZmM0NDc0YmlzXSB0byBjb252ZXkg YSBzaWduZWQgYXNzZXJ0aW9uIG9mIHRoZTwvc3Bhbj48L3R0PjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48YnI+DQo8L3Nw YW4+PHR0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij4mbmJzcDsmbmJzcDsgaWRlbnRp dHkgb2YgdGhlIHBhcnRpY2lwYW50cyBpbiByZWFsLXRpbWUgY29tbXVuaWNhdGlvbnMgZXN0YWJs aXNoZWQ8L3NwYW4+PC90dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWls eTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+PGJyPg0KPC9zcGFuPjx0dD48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEwLjBwdCI+Jm5ic3A7Jm5ic3A7IHZpYSBhIHByb3RvY29sIGxpa2UgU0lQLiZu YnNwOyBUaGlzIHNwZWNpZmljYXRpb24gZXh0ZW5kcyBQQVNTcG9yVCB0bzwvc3Bhbj48L3R0Pjxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1 dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0 aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2lu LWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWls eTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+JnF1b3Q7Li4ubGlrZSBTSVAgW1JG QzMyNjFdLi4uJnF1b3Q7PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDph dXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZl dGljYSZxdW90OyxzYW5zLXNlcmlmIj4oV2Ugd2FudCB0byBjaXRlIFNJUCB0aGUgZmlyc3QgdGlt ZSBpdCBpcyBtZW50aW9uZWQpPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFs dDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hl bHZldGljYSZxdW90OyxzYW5zLXNlcmlmIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48dHQ+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MC4wcHQiPiZuYnNwOyZuYnNwOyBhbGxvdyBjcnlwdG9ncmFwaGljLXNpZ25pbmcgb2YgdGhlIFNJ UCAnUmVzb3VyY2UtUHJpb3JpdHknIGhlYWRlcjwvc3Bhbj48L3R0PjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48YnI+DQo8 L3NwYW4+PHR0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij4mbmJzcDsmbmJzcDsgZmll bGQgZGVmaW5lZCBpbiBbUkZDNDQxMl0uPC9zcGFuPjwvdHQ+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPjxicj4NCjxicj4N Cjwvc3Bhbj48dHQ+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPiZuYnNwOyZuYnNwOyBb UkZDNDQxMl0gZGVmaW5lcyB0aGUgU0lQICdSZXNvdXJjZS1Qcmlvcml0eScgaGVhZGVyIGZpZWxk IGZvcjwvc3Bhbj48L3R0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48YnI+DQo8L3NwYW4+PHR0PjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTAuMHB0Ij4mbmJzcDsmbmJzcDsgY29tbXVuaWNhdGlvbnMgUmVzb3VyY2UgUHJp b3JpdHkuJm5ic3A7IEFzIHNwZWNpZmllZCBpbiBbUkZDNDQxMl0sIHRoZTwvc3Bhbj48L3R0Pjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3 JnF1b3Q7Ij48YnI+DQo8L3NwYW4+PHR0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij4m bmJzcDsmbmJzcDsgJ1Jlc291cmNlLVByaW9yaXR5JyBoZWFkZXIgZmllbGQgbWF5IGJlIHVzZWQg YnkgU0lQIHVzZXIgYWdlbnRzPC9zcGFuPjwvdHQ+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPjxicj4NCjwvc3Bhbj48dHQ+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPiZuYnNwOyZuYnNwOyBbUkZDMzI2MV0sIGlu Y2x1ZGluZywgUHVibGljIFN3aXRjaGVkIFRlbGVwaG9uZSBOZXR3b3JrIChQU1ROKTwvc3Bhbj48 L3R0PjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20t YWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28t bWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250 LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+JnF1b3Q7Li4uaW5jbHVk aW5nIFB1YmxpYyBTd2l0Y2hlZC4uLiZxdW90OzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2lu LWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWls eTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+KHJlbW92ZSB0aGUgY29tbWEpPG86 cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJn aW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNl cmlmIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFy Z2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48dHQ+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPiZuYnNwOyZuYnNwOyBn YXRld2F5cyBhbmQgdGVybWluYWxzLCBhbmQgU0lQIHByb3h5IHNlcnZlcnMgdG8gaW5mbHVlbmNl PC9zcGFuPjwvdHQ+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2lu LWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWls eTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+Jm5ic3A7PG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDph dXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjku MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlmIj4mcXVvdDsu Li5hbmQgYnkgU0lQIHByb3h5IHNlcnZlcnMsIHRvIGluZmx1ZW5jZS4uLiZxdW90OzxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRv cC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+ KGFkZCAmcXVvdDtieSZxdW90OyBhbmQgY29tbWEpPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJn aW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlmIj4mbmJzcDs8bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90 dG9tOjUuMHB0Ij4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48dHQ+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMC4wcHQiPiZuYnNwOyZuYnNwOyBwcmlvcml0aXphdGlvbiBhZmZvcmRlZCB0 byBjb21tdW5pY2F0aW9uIHNlc3Npb25zLGluY2x1ZGluZyBQU1ROPC9zcGFuPjwvdHQ+PG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRv Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGlj YSZxdW90OyxzYW5zLXNlcmlmIj4mcXVvdDsuLi5zZXNzaW9ucywgaW5jbHVkaW5nLi4uJnF1b3Q7 PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1t YXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5z LXNlcmlmIj4oc3BhY2UgYWZ0ZXIgY29tbWEpPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4t Ym90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlmIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9t OjUuMHB0Ij4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48dHQ+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMC4wcHQiPiZuYnNwOyZuYnNwOyBjYWxscy4mbmJzcDsgSG93ZXZlciwgdGhlIFNJ UCAnUmVzb3VyY2UtUHJpb3JpdHknIGhlYWRlciBmaWVsZCBjb3VsZCBiZTwvc3Bhbj48L3R0Pjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3 JnF1b3Q7Ij48YnI+DQo8L3NwYW4+PHR0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij4m bmJzcDsmbmJzcDsgc3Bvb2ZlZCBhbmQgYWJ1c2VkIGJ5IHVuYXV0aG9yaXplZCBlbnRpdGllcy48 L3NwYW4+PC90dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVv dDtDb3VyaWVyIE5ldyZxdW90OyI+PGJyPg0KPGJyPg0KPC9zcGFuPjx0dD48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEwLjBwdCI+Jm5ic3A7Jm5ic3A7IFRoZSBTVElSIGFyY2hpdGVjdHVyZSBbUkZD NzM0MF1hc3N1bWVzIHRoYXQgYW4gYXV0aG9yaXR5IG9uIHRoZTwvc3Bhbj48L3R0PjxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxz cGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1 b3Q7LHNhbnMtc2VyaWYiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRv bS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVv dDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+JnF1b3Q7Li4uU1RJUiBhcmNoaXRlY3R1cmUg W1JGQzczNDBdIGFzc3VtZXMuLi4mcXVvdDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1i b3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPihzcGFjZSBiZWZvcmUgJnF1b3Q7YXNz dW1lcyZxdW90Oyk8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8i PjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNh JnF1b3Q7LHNhbnMtc2VyaWYiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxibG9ja3F1 b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjx0dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+ Jm5ic3A7Jm5ic3A7IG9yaWdpbmF0aW5nIHNpZGUgb2YgYSBjYWxsIHByb3ZpZGVzIGEgY3J5cHRv Z3JhcGhpYyBhc3N1cmFuY2Ugb2YgdGhlPC9zcGFuPjwvdHQ+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPjxicj4NCjwvc3Bh bj48dHQ+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPiZuYnNwOyZuYnNwOyB2YWxpZGl0 eSBvZiB0aGUgY2FsbGluZyBwYXJ0eSBudW1iZXIgaW4gb3JkZXIgdG8gcHJldmVudDwvc3Bhbj48 L3R0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJp ZXIgTmV3JnF1b3Q7Ij48YnI+DQo8L3NwYW4+PHR0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAu MHB0Ij4mbmJzcDsmbmJzcDsgaW1wZXJzb25hdGlvbiBhdHRhY2tzLiZuYnNwOyBUaGUgU1RJUiBh cmNoaXRlY3R1cmUgYWxsb3dzIGV4dGVuc2lvbiB0aGF0PC9zcGFuPjwvdHQ+PG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDss c2Fucy1zZXJpZiI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFs dDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hl bHZldGljYSZxdW90OyxzYW5zLXNlcmlmIj4mcXVvdDsuLi5hbGxvd3MgZXh0ZW5zaW9ucy4uLiZx dW90OzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDss c2Fucy1zZXJpZiI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPGJsb2NrcXVvdGUgc3R5 bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHR0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij4mbmJzcDsm bmJzcDsgY2FuIGJlIHV0aWxpemVkIGJ5IGF1dGhvcml0aWVzIHN1cHBvcnRpbmcgcmVhbC10aW1l IGNvbW11bmljYXRpb248L3NwYW4+PC90dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtm b250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+PGJyPg0KPC9zcGFuPjx0dD48c3Bh biBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+Jm5ic3A7Jm5ic3A7IHNlcnZpY2VzIHVzaW5nIHRo ZSAnUmVzb3VyY2UtUHJpb3JpdHknIGhlYWRlciBmaWVsZCB0bzwvc3Bhbj48L3R0PjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7 Ij48YnI+DQo8L3NwYW4+PHR0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij4mbmJzcDsm bmJzcDsgY3J5cHRvZ3JhcGhpY2FsbHkgc2lnbiB0aGUgU0lQICdSZXNvdXJjZS1Qcmlvcml0eScg aGVhZGVyIGZpZWxkIGFuZDwvc3Bhbj48L3R0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48YnI+DQo8L3NwYW4+PHR0Pjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij4mbmJzcDsmbmJzcDsgY29udmV5IGFzc2VydGlv biBvZiB0aGUgYXV0aG9yaXphdGlvbiBmb3IgJ1Jlc291cmNlLVByaW9yaXR5Jy4mbmJzcDsgRm9y PC9zcGFuPjwvdHQ+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q291cmllciBOZXcmcXVvdDsiPjxicj4NCjwvc3Bhbj48dHQ+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMC4wcHQiPiZuYnNwOyZuYnNwOyBleGFtcGxlLCB0aGUgYXV0aG9yaXR5IG9uIHRoZSBv cmlnaW5hdGluZyBzaWRlIHZlcmlmeWluZyB0aGU8L3NwYW4+PC90dD48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+PGJyPg0K PC9zcGFuPjx0dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+Jm5ic3A7Jm5ic3A7IGF1 dGhvcml6YXRpb24gb2YgYSBwYXJ0aWN1bGFyIGNvbW11bmljYXRpb24gZm9yIFJlc291cmNlLVBy aW9yaXR5IGNhbjwvc3Bhbj48L3R0PjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Jsb2NrcXVv dGU+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87 bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPiZuYnNwOzxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2lu LXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJp ZiI+U2luZ2xlIHF1b3RlcyBhcm91bmQgJ1Jlc291cmNlLVByaW9yaXR5Jy48bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0 OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPiZuYnNw OzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUu MHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjx0 dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+Jm5ic3A7Jm5ic3A7IHVzZSBhIFBBU1NQ b3JUIGNsYWltIHRvIGNyeXB0b2dyYXBoaWNhbGx5LXNpZ24gdGhlIFNJUCAnUmVzb3VyY2UtPC9z cGFuPjwvdHQ+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJv dHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTom cXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRv O21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlmIj4mcXVvdDsuLi5j cnlwdG9ncmFwaGljYWxseSBzaWduLi4uJnF1b3Q7PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJn aW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlmIj4mbmJzcDs8bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90 dG9tOjUuMHB0Ij4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48dHQ+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMC4wcHQiPiZuYnNwOyZuYnNwOyBQcmlvcml0eScgaGVhZGVyIGZpZWxkIGFu ZCBjb252ZXkgYW4gYXNzZXJ0aW9uIG9mIHRoZSBhdXRob3JpemF0aW9uPC9zcGFuPjwvdHQ+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcm cXVvdDsiPjxicj4NCjwvc3Bhbj48dHQ+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPiZu YnNwOyZuYnNwOyBmb3IgJ1Jlc291cmNlLVByaW9yaXR5Jy4mbmJzcDsgVGhpcyB3aWxsIGFsbG93 IGEgcmVjZWl2aW5nIGVudGl0eTwvc3Bhbj48L3R0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48YnI+DQo8L3NwYW4+PHR0 PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij4mbmJzcDsmbmJzcDsgKGluY2x1ZGluZyBl bnRpdGllcyBsb2NhdGVkIGluIGRpZmZlcmVudCBuZXR3b3JrIGRvbWFpbnMvYm91bmRhcmllcyk8 L3NwYW4+PC90dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVv dDtDb3VyaWVyIE5ldyZxdW90OyI+PGJyPg0KPC9zcGFuPjx0dD48c3BhbiBzdHlsZT0iZm9udC1z aXplOjEwLjBwdCI+Jm5ic3A7Jm5ic3A7IHRvIHZlcmlmeSB0aGUgdmFsaWRpdHkgb2YgYXNzZXJ0 aW9ucyBhdXRob3JpemluZyBSZXNvdXJjZS1Qcmlvcml0eS48L3NwYW4+PC90dD48bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90 OyxzYW5zLXNlcmlmIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20t YWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPlNpbmdsZSBxdW90ZXMgYXJvdW5kICdSZXNvdXJj ZS1Qcmlvcml0eScuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRv Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGlj YSZxdW90OyxzYW5zLXNlcmlmIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8YmxvY2tx dW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48dHQ+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQi PiZuYnNwOyZuYnNwOyBDcnlwdG9ncmFwaGljYWxseS1zaWduZWQgU0lQICdSZXNvdXJjZS1Qcmlv cml0eScgaGVhZGVycyB3aWxsIGFsbG93IGE8L3NwYW4+PC90dD48bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJn aW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNl cmlmIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8i PjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNh JnF1b3Q7LHNhbnMtc2VyaWYiPiZxdW90Oy4uLmNyeXB0b2dyYXBoaWNhbGx5IHNpZ25lZCBTSVAg J1Jlc291cmNlLVByaW9yaXR5JyBoZWFkZXIgZmllbGRzLi4uJnF1b3Q7PG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDph dXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjku MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlmIj4ocmVtb3Zl IGh5cGhlbiwgYW5kIHJlcGxhY2UgJnF1b3Q7aGVhZGVycyZxdW90OyB3aXRoICZxdW90O2hlYWRl ciBmaWVsZHMmcXVvdDspPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDph dXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZl dGljYSZxdW90OyxzYW5zLXNlcmlmIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8Ymxv Y2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48dHQ+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4w cHQiPiZuYnNwOyZuYnNwOyByZWNlaXZpbmcgZW50aXR5IHRvIHZlcmlmeSBhbmQgYWN0IG9uIHRo ZSBpbmZvcm1hdGlvbiB3aXRoIGNvbmZpZGVuY2U8L3NwYW4+PC90dD48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+PGJyPg0K PC9zcGFuPjx0dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+Jm5ic3A7Jm5ic3A7IHRo YXQgdGhlIGluZm9ybWF0aW9uIGhhdmUgbm90IGJlZW4gc3Bvb2ZlZCBvciBjb21wcm9taXNlZC48 L3NwYW4+PC90dD48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4t Ym90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlmIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1 dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPiZxdW90Oy4u LmhhcyBub3QgYmVlbiBzcG9vZmVkIG9yIGNvbXByb21pc2VkLiZxdW90OzxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6 YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5 LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+Jm5ic3A7 PG86cD48L286cD48L3NwYW4+PC9wPg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4w cHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcm cXVvdDsiPjxicj4NCjwvc3Bhbj48dHQ+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPiZu YnNwOyZuYnNwOyBUaGlzIHNwZWNpZmljYXRpb24gZG9jdW1lbnRzIGFuIG9wdGlvbmFsIGV4dGVu c2lvbiB0byBQQVNTcG9yVCBhbmQ8L3NwYW4+PC90dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEw LjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+PGJyPg0KPC9zcGFuPjx0 dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+Jm5ic3A7Jm5ic3A7IHRoZSBhc3NvY2lh dGVkIFNUSVIgbWVjaGFuaXNtcyB0byBwcm92aWRlIGEgZnVuY3Rpb24gdG8gc2lnbiB0aGUgU0lQ PC9zcGFuPjwvdHQ+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q291cmllciBOZXcmcXVvdDsiPjxicj4NCjwvc3Bhbj48dHQ+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMC4wcHQiPiZuYnNwOyZuYnNwOyAnUmVzb3VyY2UtUHJpb3JpdHknIGhlYWRlciBmaWVs ZC4mbmJzcDsgVGhpcyBQQVNTcG9yVCBvYmplY3QgaXMgdXNlZCB0bzwvc3Bhbj48L3R0PjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1 b3Q7Ij48YnI+DQo8L3NwYW4+PHR0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij4mbmJz cDsmbmJzcDsgcHJvdmlkZSBhdHRlc3RhdGlvbiBvZiBhIGNhbGxpbmcgdXNlciBhdXRob3JpemF0 aW9uIGZvciBwcmlvcml0eTwvc3Bhbj48L3R0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48YnI+DQo8L3NwYW4+PHR0Pjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij4mbmJzcDsmbmJzcDsgY29tbXVuaWNhdGlvbnMu Jm5ic3A7IFRoaXMgaXMgbmVjZXNzYXJ5IGluIGFkZGl0aW9uIHRvIHRoZSBQQVNTcG9yVCBvYmpl Y3Q8L3NwYW4+PC90dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTom cXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+PGJyPg0KPC9zcGFuPjx0dD48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEwLjBwdCI+Jm5ic3A7Jm5ic3A7IHRoYXQgaXMgdXNlZCBmb3IgY2FsbGluZyB1c2Vy IHRlbGVwaG9uZSBudW1iZXIgYXR0ZXN0YXRpb24uJm5ic3A7IEhvdyB0aGU8L3NwYW4+PC90dD48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5l dyZxdW90OyI+PGJyPg0KPC9zcGFuPjx0dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+ Jm5ic3A7Jm5ic3A7IG9wdGlvbmFsIGV4dGVuc2lvbiB0byBQQVNTcG9yVCBpcyB1c2VkIGZvciBy ZWFsLXRpbWUgY29tbXVuaWNhdGlvbnM8L3NwYW4+PC90dD48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+PGJyPg0KPC9zcGFu Pjx0dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+Jm5ic3A7Jm5ic3A7IHN1cHBvcnRl ZCB1c2luZyBTSVAgJ1Jlc291cmNlLVByaW9yaXR5JyBoZWFkZXIgZmllbGQgaXMgZGVmaW5lZCBp bjwvc3Bhbj48L3R0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48YnI+DQo8L3NwYW4+PHR0PjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTAuMHB0Ij4mbmJzcDsmbmJzcDsgb3RoZXIgZG9jdW1lbnRzIGFuZCBpcyBvdXRzaWRl IHRoZSBzY29wZSBvZiB0aGlzIGRvY3VtZW50Ljwvc3Bhbj48L3R0PjxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1h cmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxl PSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMt c2VyaWYiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0 byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRp Y2EmcXVvdDssc2Fucy1zZXJpZiI+SSBhc3N1bWUgdGhlc2Ugb3RoZXIgZG9jdW1lbnRzIGFyZSB1 bmRlciBkZXZlbG9wbWVudD8gSWYgc28sIHRoZXkgc2hvdWxkIGJlIGNpdGVkIGhlcmUuPG86cD48 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4t dG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlm Ij4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2lu LXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3Vy aWVyIE5ldyZxdW90OyI+PGJyPg0KPC9zcGFuPjx0dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEw LjBwdCI+Mi4mbmJzcDsgVGVybWlub2xvZ3k8L3NwYW4+PC90dD48c3BhbiBzdHlsZT0iZm9udC1z aXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+PGJyPg0KPGJy Pg0KPC9zcGFuPjx0dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+Jm5ic3A7Jm5ic3A7 IFRoZSBrZXkgd29yZHMgJnF1b3Q7TVVTVCZxdW90OywgJnF1b3Q7TVVTVCBOT1QmcXVvdDssICZx dW90O1JFUVVJUkVEJnF1b3Q7LCAmcXVvdDtTSEFMTCZxdW90OywgJnF1b3Q7U0hBTEwgTk9UJnF1 b3Q7LDwvc3Bhbj48L3R0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48YnI+DQo8L3NwYW4+PHR0PjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTAuMHB0Ij4mbmJzcDsmbmJzcDsgJnF1b3Q7U0hPVUxEJnF1b3Q7LCAmcXVvdDtT SE9VTEQgTk9UJnF1b3Q7LCAmcXVvdDtSRUNPTU1FTkRFRCZxdW90OywgJnF1b3Q7TUFZJnF1b3Q7 LCBhbmQgJnF1b3Q7T1BUSU9OQUwmcXVvdDsgaW4gdGhpczwvc3Bhbj48L3R0PjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48 YnI+DQo8L3NwYW4+PHR0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij4mbmJzcDsmbmJz cDsgZG9jdW1lbnQgYXJlIHRvIGJlIGludGVycHJldGVkIGFzIGRlc2NyaWJlZCBpbiBSRkMgMjEx OSBbUkZDMjExOV0uPC9zcGFuPjwvdHQ+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvYmxvY2tx dW90ZT4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0 bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBw dDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+Jm5ic3A7PG86 cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJn aW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNl cmlmIj5UaGlzIGRvY3VtZW50IGhhcyBzZXZlcmFsIG5vbi1ub3JtYXRpdmUgdXNlcyBvZiAmcXVv dDttdXN0JnF1b3Q7LCAmcXVvdDtzaG91bGQsJnF1b3Q7IGFuZCAmcXVvdDttYXksJnF1b3Q7IGFu ZCBzbyBpdCBuZWVkcyB0byB1c2UgdGhlIFJGQzgxNzQNCiBib2lsZXJwbGF0ZSBpbnN0ZWFkIG9m IHRoZSBSRkMyMTE5IGJvaWxlcnBsYXRlLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJv dHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTom cXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+ PC9wPg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1 LjBwdCI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPjxicj4NCjwvc3Bh bj48dHQ+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPjMuJm5ic3A7IFBBU1Nwb3JUICdy cGgnIENsYWltPC9zcGFuPjwvdHQ+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPjxicj4NCjxicj4NCjwvc3Bhbj48dHQ+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPiZuYnNwOyZuYnNwOyBUaGlzIHNwZWNpZmljYXRp b24gZGVmaW5lcyBhIG5ldyBKU09OIFdlYiBUb2tlbiBjbGFpbSBmb3IgJnF1b3Q7cnBoJnF1b3Q7 LDwvc3Bhbj48L3R0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48YnI+DQo8L3NwYW4+PHR0PjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTAuMHB0Ij4mbmJzcDsmbmJzcDsgd2hpY2ggcHJvdmlkZXMgYW4gYXNzZXJ0aW9uIGZv ciBpbmZvcm1hdGlvbiBpbiBTSVAgJ1Jlc291cmNlLTwvc3Bhbj48L3R0PjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48YnI+ DQo8L3NwYW4+PHR0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij4mbmJzcDsmbmJzcDsg UHJpb3JpdHknaGVhZGVyLjwvc3Bhbj48L3R0PjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Js b2NrcXVvdGU+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0 OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPiZuYnNw OzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28t bWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fu cy1zZXJpZiI+JnF1b3Q7Li4uUHJpb3JpdHknIGhlYWRlciBmaWVsZC4mcXVvdDs8bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3At YWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNp emU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPihz cGFjZSBhZnRlciBjbG9zaW5nIHF1b3RhdGlvbiBtYXJrLCAmcXVvdDtoZWFkZXIgZmllbGQmcXVv dDsgaW5zdGVhZCBvZiAmcXVvdDtoZWFkZXImcXVvdDspPG86cD48L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1t YXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlmIj4mbmJzcDs8bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4t Ym90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+PGJy Pg0KPC9zcGFuPjx0dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+Jm5ic3A7Jm5ic3A7 IFRoZSBjcmVhdG9yIG9mIGEgUEFTU3BvclQgb2JqZWN0IGFkZHMgYSAmcXVvdDtwcHQmcXVvdDsg dmFsdWUgb2YgJnF1b3Q7cnBoJnF1b3Q7IHRvIHRoZTwvc3Bhbj48L3R0PjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48YnI+ DQo8L3NwYW4+PHR0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij4mbmJzcDsmbmJzcDsg aGVhZGVyIG9mIGEgUEFTU3BvclQgb2JqZWN0LCBpbiB3aGljaCBjYXNlIHRoZSBQQVNTcG9yVCBj bGFpbXMgTVVTVDwvc3Bhbj48L3R0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48YnI+DQo8L3NwYW4+PHR0PjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTAuMHB0Ij4mbmJzcDsmbmJzcDsgY29udGFpbiBhICZxdW90O3JwaCZx dW90OyBjbGFpbSwgYW5kIGFueSBlbnRpdGllcyB2ZXJpZnlpbmcgdGhlIFBBU1Nwb3JUIG9iamVj dDwvc3Bhbj48L3R0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48YnI+DQo8L3NwYW4+PHR0PjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTAuMHB0Ij4mbmJzcDsmbmJzcDsgd2lsbCBiZSByZXF1aXJlZCB0byB1bmRlcnN0YW5k IHRoZSAmcXVvdDtwcHQmcXVvdDsgZXh0ZW5zaW9uIGluIG9yZGVyIHRvPC9zcGFuPjwvdHQ+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcm cXVvdDsiPjxicj4NCjwvc3Bhbj48dHQ+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPiZu YnNwOyZuYnNwOyBwcm9jZXNzIHRoZSBQQVNTcG9yVCBpbiBxdWVzdGlvbi4mbmJzcDsgQSBQQVNT UG9yVCBoZWFkZXIgd2l0aCB0aGUgJnF1b3Q7cHB0JnF1b3Q7PC9zcGFuPjwvdHQ+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsi Pjxicj4NCjwvc3Bhbj48dHQ+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPiZuYnNwOyZu YnNwOyBpbmNsdWRlZCB3aWxsIGxvb2sgYXMgZm9sbG93czo8L3NwYW4+PC90dD48c3BhbiBzdHls ZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+ PGJyPg0KPGJyPg0KPC9zcGFuPjx0dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+Jm5i c3A7Jm5ic3A7IHsmbmJzcDsgJnF1b3Q7dHlwJnF1b3Q7OiZxdW90O3Bhc3Nwb3J0JnF1b3Q7LDwv c3Bhbj48L3R0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NvdXJpZXIgTmV3JnF1b3Q7Ij48YnI+DQo8L3NwYW4+PHR0PjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTAuMHB0Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgJnF1b3Q7cHB0JnF1b3Q7OiZxdW90 O3JwaCZxdW90Oyw8L3NwYW4+PC90dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250 LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+PGJyPg0KPC9zcGFuPjx0dD48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjBwdCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ICZxdW90O2Fs ZyZxdW90OzomcXVvdDtFUzI1NiZxdW90Oyw8L3NwYW4+PC90dD48c3BhbiBzdHlsZT0iZm9udC1z aXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+PGJyPg0KPC9z cGFuPjx0dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7ICZxdW90O3g1dSZxdW90Ozo8L3NwYW4+PC90dD48YSBocmVmPSJodHRwczovL3VybGRl ZmVuc2UucHJvb2Zwb2ludC5jb20vdjIvdXJsP3U9aHR0cHMtM0FfX3d3dy5leGFtcGxlLm9yZ19j ZXJ0LmNlciZhbXA7ZD1Ed01GYVEmYW1wO2M9TEZZWi1vOV9IVU1lTVRTUWljdmpJZyZhbXA7cj1H OXY4dUNTU1FoQ21wdzdJdEcwcjJnJmFtcDttPXNsS0lCWTM3eThwNGlDM0pnanV3RDFUSTlPZ1c3 UVRIV3ptSlZ5cXlKTmcmYW1wO3M9V1RUdURteTM5aTJ6STNpY01IbzgyY3FSR2FYanpIeXdJZ0JB SUsxb3FDVSZhbXA7ZT0iIHRhcmdldD0iX2JsYW5rIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEw LjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpwdXJwbGUiPiZx dW90O2h0dHBzOi8vd3d3LmV4YW1wbGUub3JnL2NlcnQuY2VyJnF1b3Q7PC9zcGFuPjwvYT48dHQ+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPn08L3NwYW4+PC90dD48bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1z by1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90Oyxz YW5zLXNlcmlmIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0 OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVs dmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPklkZWFsbHksIHRoaXMgd291bGQgYmUgZWl0aGVyIHBy ZXR0eS1wcmludGVkIG9yIGNhbm9uaWNhbGl6ZWQuIFNpbmNlIGl0J3MgdG9vIGxvbmcgdG8gZml0 IG9uIGEgbGluZSBpbiBjYW5vbmljYWwNCiBmb3JtLCBJIHByb3Bvc2U6PG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDph dXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48dHQ+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMC4wcHQiPns8L3NwYW4+PC90dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250 LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+PGJyPg0KPHR0PiZuYnNwOyAmcXVvdDt0 eXAmcXVvdDs6JnF1b3Q7cGFzc3BvcnQmcXVvdDssPC90dD48YnI+DQo8dHQ+Jm5ic3A7ICZxdW90 O3BwdCZxdW90OzomcXVvdDtycGgmcXVvdDssPC90dD48YnI+DQo8dHQ+Jm5ic3A7ICZxdW90O2Fs ZyZxdW90OzomcXVvdDtFUzI1NiZxdW90Oyw8L3R0Pjxicj4NCjx0dD4mbmJzcDsgJnF1b3Q7eDV1 JnF1b3Q7OjwvdHQ+PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPjxhIGhyZWY9Imh0dHBzOi8vdXJs ZGVmZW5zZS5wcm9vZnBvaW50LmNvbS92Mi91cmw/dT1odHRwcy0zQV9fd3d3LmV4YW1wbGUub3Jn X2NlcnQuY2VyJmFtcDtkPUR3TUZhUSZhbXA7Yz1MRllaLW85X0hVTWVNVFNRaWN2aklnJmFtcDty PUc5djh1Q1NTUWhDbXB3N0l0RzByMmcmYW1wO209c2xLSUJZMzd5OHA0aUMzSmdqdXdEMVRJOU9n VzdRVEhXem1KVnlxeUpOZyZhbXA7cz1XVFR1RG15MzlpMnpJM2ljTUhvODJjcVJHYVhqekh5d0ln QkFJSzFvcUNVJmFtcDtlPSIgdGFyZ2V0PSJfYmxhbmsiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOnB1cnBsZSI+ JnF1b3Q7aHR0cHM6Ly93d3cuZXhhbXBsZS5vcmcvY2VydC5jZXImcXVvdDs8L3NwYW4+PC9hPjwv c3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3Vy aWVyIE5ldyZxdW90OyI+PGJyPg0KPHR0Pn08L3R0Pjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlmIj48 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1h cmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxl PSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMt c2VyaWYiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxibG9ja3F1b3RlIHN0eWxlPSJt YXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NvdXJpZXIgTmV3JnF1b3Q7Ij48YnI+DQo8L3NwYW4+PHR0PjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTAuMHB0Ij4mbmJzcDsmbmJzcDsgVGhlICZxdW90O3JwaCZxdW90OyBjbGFpbSB3aWxsIHBy b3ZpZGUgYW4gYXNzZXJ0aW9uIG9mIGF1dGhvcml6YXRpb24sJnF1b3Q7YXV0aCZxdW90Oyw8L3Nw YW4+PC90dD48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90 dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlmIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87 bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPiZxdW90Oy4uLmF1 dGhvcml6YXRpb24sICZxdW90O2F1dGgmcXVvdDssIC4uLiZxdW90OzxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0 bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBw dDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+KHNwYWNlIGJl dHdlZW4gY29tbWEgYW5kIG9wZW5pbmcgcXVvdGF0aW9uIG1hcmspPG86cD48L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRv O21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlmIj4mbmJzcDs8bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDtt YXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48dHQ+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPiZuYnNwOyZuYnNwOyBmb3IgaW5mb3JtYXRpb24g aW4gdGhlIFNJUCAmcXVvdDtSZXNvdXJjZS1Qcmlvcml0eSZxdW90OyBoZWFkZXIgZmllbGQgKGku ZS4sPC9zcGFuPjwvdHQ+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPjxicj4NCjwvc3Bhbj48dHQ+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMC4wcHQiPiZuYnNwOyZuYnNwOyBSZXNvdXJjZS1Qcmlvcml0eTogbmFtZXNwYWNl ICZxdW90Oy4mcXVvdDsgci1wcmlvcml0eSkgYmFzZWQgb24gW1JGQzQ0MTJdLjwvc3Bhbj48L3R0 PjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0 OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVs dmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFy Z2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZh bWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+VGhlIHVzZSBvZiB0aGUgc3Ry aW5nICduYW1lc3BhY2UgJnF1b3Q7LiZxdW90OyByLXByaW9yaXR5JyBoZXJlIGFuZCBlbHNld2hl cmUgaW4gdGhlIGRvY3VtZW50IGhhcyBhIGRldHJpbWVudGFsIGltcGFjdCBvbg0KIHJlYWRhYmls aXR5LiBJIHN0cm9uZ2x5IHN1Z2dlc3QgcmVwbGFjaW5nIGl0IHdpdGggJnF1b3Q7ci12YWx1ZSZx dW90OyAodGhlIG5hbWUgb2YgdGhpcyBwcm9kdWN0aW9uIGluIFJGQzQ0MTIpIGV2ZXJ5d2hlcmUu PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1t YXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5z LXNlcmlmIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8YmxvY2txdW90ZSBzdHlsZT0i bWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48dHQ+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPiZuYnNwOyZuYnNw OyBTcGVjaWZpY2FsbHksIHRoZSAmcXVvdDtycGgmcXVvdDsgY2xhaW0gaW5jbHVkZXMgYXNzZXJ0 aW9uIG9mIHRoZSBwcmlvcml0eS08L3NwYW4+PC90dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEw LjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+PGJyPg0KPC9zcGFuPjx0 dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+Jm5ic3A7Jm5ic3A7IGxldmVsIG9mIHRo ZSB1c2VyIHRvIGJlIHVzZWQgZm9yIGEgZ2l2ZW4gY29tbXVuaWNhdGlvbiBzZXNzaW9uLiZuYnNw OyBUaGU8L3NwYW4+PC90dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWls eTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+PGJyPg0KPC9zcGFuPjx0dD48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEwLjBwdCI+Jm5ic3A7Jm5ic3A7IHZhbHVlIG9mIHRoZSAmcXVvdDtycGgmcXVv dDsgY2xhaW0gaXMgYW4gYXJyYXkgY29udGFpbmluZyBvbmUgb3IgbW9yZSBvZiBKU09OPC9zcGFu PjwvdHQ+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291 cmllciBOZXcmcXVvdDsiPjxicj4NCjwvc3Bhbj48dHQ+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MC4wcHQiPiZuYnNwOyZuYnNwOyBvYmplY3RzIGZvciB0aGUgY29udGVudCBvZiB0aGUgU0lQICdS ZXNvdXJjZS1Qcmlvcml0eScgaGVhZGVyIHRoYXQgaXM8L3NwYW4+PC90dD48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+PGJy Pg0KPC9zcGFuPjx0dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+Jm5ic3A7Jm5ic3A7 IGJlaW5nIGFzc2VydGVkIG9mIHdoaWNoIG9uZSBvZiB0aGUgJnF1b3Q7cnBoJnF1b3Q7IG9iamVj dCwgaXMgbWFuZGF0b3J5Ljwvc3Bhbj48L3R0PjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Js b2NrcXVvdGU+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0 OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPiZuYnNw OzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28t bWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fu cy1zZXJpZiI+VGhpcyBsYXN0IHNlbnRlbmNlIGlzIHZlcnkgaGFyZCB0byBwYXJzZTsgYW5kIChi YXNlZCBvbiB0aGUgZXhhbXBsZSkgdGhlIHZhbHVlIGlzIGludGVuZGVkIHRvIGJlIGEgSlNPTiBP YmplY3QgKGN1cmx5DQogYnJhY2VzKSByYXRoZXIgdGhhbiBhIEpTT04gQXJyYXkgKHNxdWFyZSBi cmFjZXMpLiBJIHN1Z2dlc3Q6ICdUaGUgdmFsdWUgb2YgdGhlICZxdW90O3JwaCZxdW90OyBjbGFp bSBpcyBhbiBPYmplY3Qgd2l0aCBvbmUgb3IgbW9yZSBrZXlzLiBFYWNoIGtleSBpcyBhc3NvY2lh dGVkIHdpdGggYSBKU09OIEFycmF5LiBUaGVzZSBhcnJheXMgY29udGFpbiBTdHJpbmdzIHRoYXQg Y29ycmVzcG9uZCB0byB0aGUgci12YWx1ZXMgaW5kaWNhdGVkIGluIHRoZSBTSVAgJnF1b3Q7UmVz b3VyY2UtUHJpb3JpdHkmcXVvdDsNCiBoZWFkZXIgZmllbGQuJyAobm90ZTogJnF1b3Q7aGVhZGVy IGZpZWxkJnF1b3Q7LCBub3QgJnF1b3Q7aGVhZGVyJnF1b3Q7KTxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bztt c28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtm b250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+Jm5ic3A7PG86cD48 L286cD48L3NwYW4+PC9wPg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFy Z2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsi Pjxicj4NCjwvc3Bhbj48dHQ+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPiZuYnNwOyZu YnNwOyBUaGUgZm9sbG93aW5nIGlzIGFuIGV4YW1wbGUgJnF1b3Q7cnBoJnF1b3Q7IGNsYWltIGZv ciBhIFNJUCAmcXVvdDtSZXNvdXJjZS1Qcmlvcml0eSZxdW90Ozwvc3Bhbj48L3R0PjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7 Ij48YnI+DQo8L3NwYW4+PHR0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij4mbmJzcDsm bmJzcDsgaGVhZGVyIGZpZWxkIHdpdGggYSAmcXVvdDtuYW1lc3BhY2UgJnF1b3Q7LiZxdW90OyBy LXByaW9yaXR5JnF1b3Q7IHZhbHVlIG9mICZxdW90O2V0cy4wJnF1b3Q7IGFuZDwvc3Bhbj48L3R0 PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIg TmV3JnF1b3Q7Ij48YnI+DQo8L3NwYW4+PHR0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0 Ij4mbmJzcDsmbmJzcDsgd2l0aCBhICZxdW90O25hbWVzcGFjZSAmcXVvdDsuJnF1b3Q7IHItcHJp b3JpdHkmcXVvdDsgdmFsdWUgb2YgJnF1b3Q7d3BzLjAmcXVvdDsuPC9zcGFuPjwvdHQ+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVv dDsiPjxicj4NCjxicj4NCjwvc3Bhbj48dHQ+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQi PiZuYnNwOyZuYnNwOyZuYnNwOyB7ICZxdW90O29yaWcmcXVvdDs6eyZxdW90O3RuJnF1b3Q7OiZx dW90Ozwvc3Bhbj48L3R0PjxhIGhyZWY9InRlbDooMjE1KSUyMDU1NS0xMjEyIiB0YXJnZXQ9Il9i bGFuayI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291 cmllciBOZXcmcXVvdDs7Y29sb3I6cHVycGxlIj4xMjE1NTU1MTIxMjwvc3Bhbj48L2E+PHR0Pjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij4mcXVvdDt9PC9zcGFuPjwvdHQ+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsi Pjxicj4NCjwvc3Bhbj48dHQ+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPiZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyAmcXVvdDtkZXN0JnF1b3Q7OntbJnF1b3Q7dG4mcXVvdDs6JnF1b3Q7 PC9zcGFuPjwvdHQ+PGEgaHJlZj0idGVsOigyMTIpJTIwNTU1LTEyMTMiIHRhcmdldD0iX2JsYW5r Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVy IE5ldyZxdW90Oztjb2xvcjpwdXJwbGUiPjEyMTI1NTUxMjEzPC9zcGFuPjwvYT48dHQ+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPiZxdW90O119LDwvc3Bhbj48L3R0PjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48 YnI+DQo8L3NwYW4+PHR0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij4mbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsgJnF1b3Q7aWF0JnF1b3Q7OjE0NDMyMDgzNDUsPC9zcGFuPjwvdHQ+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcm cXVvdDsiPjxicj4NCjwvc3Bhbj48dHQ+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPiZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAmcXVvdDtycGgmcXVvdDs6eyZxdW90O2F1dGgmcXVvdDs6 WyZxdW90O2V0cy4wJnF1b3Q7LCZxdW90O3dwcy4wJnF1b3Q7XX08L3NwYW4+PC90dD48bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZx dW90OyxzYW5zLXNlcmlmIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0 b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPkFzIGFib3ZlLCBJIHJlY29tbWVuZCBwcmV0 dHktcHJpbnRpbmcgdGhpcy4gSXQncyBhbHNvIG1pc3NpbmcgYSBjb21tYSBhZnRlciB0aGUgJnF1 b3Q7b3JpZyZxdW90OyB2YWx1ZSwgYW5kIHRoZSB0b3AtbGV2ZWwNCiBzdHJ1Y3R1cmUgaXMgbWlz c2luZyBhIGNsb3NpbmcgYnJhY2UuIFRoZSB2YWx1ZSBmb3IgJnF1b3Q7aWF0JnF1b3Q7IG5lZWRz IHRvIGJlIGVuY2xvc2VkIGluIHF1b3Rlcy48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1i b3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPlRoZSBOQU5QQSBoYXMgYWxsb2NhdGVk IE5QQTU1NTAxeHggZm9yIGV4YW1wbGUgdXNlLCBub3QgTlBBNTU1eHh4eCwgbXVjaCBvZiB3aGlj aCByZW1haW5zIGFzc2lnbmFibGUgKGNmPGEgaHJlZj0iaHR0cHM6Ly91cmxkZWZlbnNlLnByb29m cG9pbnQuY29tL3YyL3VybD91PWh0dHBzLTNBX193d3cubmF0aW9uYWxuYW5wYS5jb21fcGRmX05S VUZfQVRJUy0yRDAzMDAxMTUucGRmJmFtcDtkPUR3TUZhUSZhbXA7Yz1MRllaLW85X0hVTWVNVFNR aWN2aklnJmFtcDtyPUc5djh1Q1NTUWhDbXB3N0l0RzByMmcmYW1wO209c2xLSUJZMzd5OHA0aUMz SmdqdXdEMVRJOU9nVzdRVEhXem1KVnlxeUpOZyZhbXA7cz1qNXFCanN3U1FBMHlzb09fcExLVFVk Q2tLUExid1I2US1nZzhBYmFCY0ZNJmFtcDtlPSIgdGFyZ2V0PSJfYmxhbmsiPjxzcGFuIHN0eWxl PSJjb2xvcjpwdXJwbGUiPiZsdDtodHRwczovL3d3dy5uYXRpb25hbG5hbnBhLmNvbS9wZGYvTlJV Ri9BVElTLTAzMDAxMTUucGRmJmd0Ozwvc3Bhbj48L2E+KS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNv LW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPlB1dHRpbmcgYWxsIHRo aXMgdG9nZXRoZXIsIEkgYmVsaWV2ZSB3aGF0IHlvdSB3YW50IGlzOjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0 bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHR0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTAuMHB0Ij57PC9zcGFuPjwvdHQ+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPjxicj4NCjx0dD4mbmJzcDsgJnF1b3Q7b3Jp ZyZxdW90Ozp7JnF1b3Q7dG4mcXVvdDs6JnF1b3Q7PC90dD48L3NwYW4+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJp ZiI+PGEgaHJlZj0idGVsOigyMTUpJTIwNTU1LTAxMTIiIHRhcmdldD0iX2JsYW5rIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90 Oztjb2xvcjpwdXJwbGUiPjEyMTU1NTUwMTEyPC9zcGFuPjwvYT48L3NwYW4+PHR0PjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTAuMHB0Ij4mcXVvdDt9LDwvc3Bhbj48L3R0PjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48YnI+ DQo8dHQ+Jm5ic3A7ICZxdW90O2Rlc3QmcXVvdDs6e1smcXVvdDt0biZxdW90OzomcXVvdDs8L3R0 Pjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hl bHZldGljYSZxdW90OyxzYW5zLXNlcmlmIj48YSBocmVmPSJ0ZWw6KDIxMiklMjA1NTUtMDExMyIg dGFyZ2V0PSJfYmxhbmsiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOnB1cnBsZSI+MTIxMjU1NTAxMTM8L3NwYW4+ PC9hPjwvc3Bhbj48dHQ+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPiZxdW90O119LDwv c3Bhbj48L3R0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NvdXJpZXIgTmV3JnF1b3Q7Ij48YnI+DQo8dHQ+Jm5ic3A7ICZxdW90O2lhdCZxdW90OzomcXVv dDsxNDQzMjA4MzQ1JnF1b3Q7LDwvdHQ+PGJyPg0KPHR0PiZuYnNwOyAmcXVvdDtycGgmcXVvdDs6 eyZxdW90O2F1dGgmcXVvdDs6WyZxdW90O2V0cy4wJnF1b3Q7LCZxdW90O3dwcy4wJnF1b3Q7XX08 L3R0Pjxicj4NCjx0dD59PC90dD48L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtm b250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+PG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFs dDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlmIj4mbmJz cDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1 LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5l dyZxdW90OyI+PGJyPg0KPC9zcGFuPjx0dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+ Jm5ic3A7Jm5ic3A7IEFmdGVyIHRoZSBoZWFkZXIgYW5kIGNsYWltcyBQQVNTcG9yVCBvYmplY3Rz IGhhdmUgYmVlbiBjb25zdHJ1Y3RlZCw8L3NwYW4+PC90dD48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+PGJyPg0KPC9zcGFu Pjx0dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+Jm5ic3A7Jm5ic3A7IHRoZWlyIHNp Z25hdHVyZSBpcyBnZW5lcmF0ZWQgbm9ybWFsbHkgcGVyIHRoZSBndWlkYW5jZSBpbjwvc3Bhbj48 L3R0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJp ZXIgTmV3JnF1b3Q7Ij48YnI+DQo8L3NwYW4+PHR0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAu MHB0Ij4mbmJzcDsmbmJzcDsgW0ktRC5pZXRmLXN0aXItcGFzc3BvcnRdIHVzaW5nIHRoZSBmdWxs IGZvcm0gb2YgUEFTU1BvclQuJm5ic3A7IFRoZTwvc3Bhbj48L3R0PjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48YnI+DQo8 L3NwYW4+PHR0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij4mbmJzcDsmbmJzcDsgY3Jl ZGVudGlhbHMgKGUuZy4sIGF1dGhvcml0eSByZXNwb25zaWJsZSBmb3IgYXV0aG9yaXppbmcgUmVz b3VyY2UtPC9zcGFuPjwvdHQ+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPjxicj4NCjwvc3Bhbj48dHQ+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMC4wcHQiPiZuYnNwOyZuYnNwOyBQcmlvcml0eSkgdXNlZCB0byBjcmVhdGUg dGhlIHNpZ25hdHVyZSBtdXN0IGhhdmUgYXV0aG9yaXR5IG92ZXIgdGhlPC9zcGFuPjwvdHQ+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcm cXVvdDsiPjxicj4NCjwvc3Bhbj48dHQ+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPiZu YnNwOyZuYnNwOyAmcXVvdDtycGgmcXVvdDsgY2xhaW0gYW5kIHRoZXJlIGlzIG9ubHkgb25lIGF1 dGhvcml0eSBwZXIgY2xhaW0uJm5ic3A7IFRoZSBhdXRob3JpdHk8L3NwYW4+PC90dD48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90 OyI+PGJyPg0KPC9zcGFuPjx0dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+Jm5ic3A7 Jm5ic3A7IE1VU1QgdXNlIGl0cyBjcmVkZW50aWFscyAoaS5lLiwgQ0VSVCkgYXNzb2NpYXRlZCB3 aXRoIHRoZSBzcGVjaWZpYzwvc3Bhbj48L3R0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48YnI+DQo8L3NwYW4+PHR0Pjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij4mbmJzcDsmbmJzcDsgc2VydmljZSBzdXBwb3J0 ZWQgYnkgdGhlIFNJUCBuYW1lc3BhY2UgaW4gdGhlIGNsYWltLjwvc3Bhbj48L3R0PjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7 Ij48YnI+DQo8YnI+DQo8L3NwYW4+PHR0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij40 LiZuYnNwOyAncnBoJyBpbiBTSVA8L3NwYW4+PC90dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEw LjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+PGJyPg0KPGJyPg0KPC9z cGFuPjx0dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+Jm5ic3A7Jm5ic3A7IFRoaXMg c2VjdGlvbiBzcGVjaWZpZXMgU0lQLXNwZWNpZmljIHVzYWdlIGZvciB0aGUgJnF1b3Q7cnBoJnF1 b3Q7IGNsYWltIGluPC9zcGFuPjwvdHQ+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPjxicj4NCjwvc3Bhbj48dHQ+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPiZuYnNwOyZuYnNwOyBQQVNTcG9yVC48L3NwYW4+PC90 dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVy IE5ldyZxdW90OyI+PGJyPg0KPGJyPg0KPC9zcGFuPjx0dD48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEwLjBwdCI+NC4xLiZuYnNwOyBBdXRoZW50aWNhdGlvbiBTZXJ2aWNlIEJlaGF2aW9yPC9zcGFu PjwvdHQ+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291 cmllciBOZXcmcXVvdDsiPjxicj4NCjxicj4NCjwvc3Bhbj48dHQ+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMC4wcHQiPiZuYnNwOyZuYnNwOyBUaGUgQXV0aGVudGljYXRpb24gU2VydmljZSB3aWxs IGNyZWF0ZSB0aGUgJnF1b3Q7cnBoJnF1b3Q7IGNsYWltIHVzaW5nIHRoZTwvc3Bhbj48L3R0Pjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3 JnF1b3Q7Ij48YnI+DQo8L3NwYW4+PHR0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij4m bmJzcDsmbmJzcDsgdmFsdWVzIGRpc2N1c3NlZCBpbiBzZWN0aW9uIDMgYmFzZWQgb24gW1JGQzQ0 MTJdLiZuYnNwOyBUaGUgY29uc3RydWN0aW9uPC9zcGFuPjwvdHQ+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPjxicj4NCjwv c3Bhbj48dHQ+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPiZuYnNwOyZuYnNwOyBvZiAm cXVvdDtycGgmcXVvdDsgY2xhaW0gZm9sbG93cyB0aGUgc3RlcHMgZGVzY3JpYmVkIGluIFNlY3Rp b24gNCBvZjwvc3Bhbj48L3R0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48YnI+DQo8L3NwYW4+PHR0PjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTAuMHB0Ij4mbmJzcDsmbmJzcDsgW0ktRC5pZXRmLXN0aXItcmZjNDQ3NGJp c10uPC9zcGFuPjwvdHQ+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPjxicj4NCjxicj4NCjwvc3Bhbj48dHQ+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMC4wcHQiPiZuYnNwOyZuYnNwOyBUaGUgcmVzdWx0aW5nIElkZW50aXR5 IGhlYWRlciBmb3IgJnF1b3Q7cnBoJnF1b3Q7IG1pZ2h0IGxvb2sgYXMgZm9sbG93czo8L3NwYW4+ PC90dD48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9t LWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlmIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNv LW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPiZxdW90Oy4uLmhlYWRl ciBmaWVsZC4uLiZxdW90OzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6 YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2 ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPGJs b2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPjxicj4NCjwvc3Bhbj48dHQ+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPiZuYnNwOyZuYnNwOyAmcXVvdDtleUpoYkdjaU9p SkZVekkxTmlJc0luUjVjQ0k2SWtwWFZDSjkuZXlKcGMzTWlPaUpsZVVvd1pWaEJhVTlwU25kPC9z cGFuPjwvdHQ+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q291cmllciBOZXcmcXVvdDsiPjxicj4NCjwvc3Bhbj48dHQ+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMC4wcHQiPiZuYnNwOyZuYnNwOyBaV0U1NlkwYzVlV1JEU1hORVVXOXBZMGhDTUVscWIybGpi a0p2U1dsM1RrTnBTbWhpUjJOcFQybEtSbFY2U1RGTzwvc3Bhbj48L3R0PjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48YnI+ DQo8L3NwYW4+PHR0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij4mbmJzcDsmbmJzcDsg YVVselJGRnZhV1ZFVmpGSmFuQnZaRWhTZDJONmIzWk1NMlF6WkhrMWJHVkhSblJqUjNoc1RHMU9k bUpUT1dwYVc8L3NwYW4+PC90dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZh bWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+PGJyPg0KPC9zcGFuPjx0dD48c3BhbiBzdHls ZT0iZm9udC1zaXplOjEwLjBwdCI+Jm5ic3A7Jm5ic3A7IEVvd1RHMU9iR051TUU1RFp6QkxJSHg4 NG9DWkx1S0FtWHg4SUdWNVFXbGlNMHB3V25sSk5tVjVTakJpYVVrMlNXPC9zcGFuPjwvdHQ+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcm cXVvdDsiPjxicj4NCjwvc3Bhbj48dHQ+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPiZu YnNwOyZuYnNwOyBwRmVVMVVWVEZPVkZWNFRXcEZlVWx1TUU1RGFVcHJXbGhPTUVscWNEZFhlVW93 WW1sSk5rbHFSWGxOVkVreFRsUjwvc3Bhbj48L3R0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48YnI+DQo8L3NwYW4+PHR0 PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij4mbmJzcDsmbmJzcDsgVmVFMXFSWHBKYkRF NVRFRXdTMGx0Ykdoa1EwazJUVlJSTUUxNlNYZFBSRTB3VGxOM1RrTnBTbmxqUjJkcFQyNXo8L3Nw YW4+PC90dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtD b3VyaWVyIE5ldyZxdW90OyI+PGJyPg0KPC9zcGFuPjx0dD48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEwLjBwdCI+Jm5ic3A7Jm5ic3A7IGFWbFlWakJoUTBrMlYzbEtiR1JJVFhWTlEwbHpTVzVrZDJO NU5IZEpiREU1UkZGdlBTSjkuczM3UzZWQzhITTZEPC9zcGFuPjwvdHQ+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPjxicj4N Cjwvc3Bhbj48dHQ+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPiZuYnNwOyZuYnNwOyBs Nll6SmVRRHNyWmN3SjBsaXp4aFVyQTdmXzk4b1dCSHZvLWNsLW44TUlob0NyMTh2WVlGeTNibFh2 czNmc2xNXzwvc3Bhbj48L3R0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48YnI+DQo8L3NwYW4+PHR0PjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTAuMHB0Ij4mbmJzcDsmbmJzcDsgb29zMlAyRHl3JnF1b3Q7OyBpbmZvPTwv c3Bhbj48L3R0PjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4m bmJzcDs8L3NwYW4+PC9zcGFuPjxhIGhyZWY9Imh0dHBzOi8vdXJsZGVmZW5zZS5wcm9vZnBvaW50 LmNvbS92Mi91cmw/dT1odHRwcy0zQV9fd3d3LmV4YW1wbGUub3JnX2NlcnQuY2VyJmFtcDtkPUR3 TUZhUSZhbXA7Yz1MRllaLW85X0hVTWVNVFNRaWN2aklnJmFtcDtyPUc5djh1Q1NTUWhDbXB3N0l0 RzByMmcmYW1wO209c2xLSUJZMzd5OHA0aUMzSmdqdXdEMVRJOU9nVzdRVEhXem1KVnlxeUpOZyZh bXA7cz1XVFR1RG15MzlpMnpJM2ljTUhvODJjcVJHYVhqekh5d0lnQkFJSzFvcUNVJmFtcDtlPSIg dGFyZ2V0PSJfYmxhbmsiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOnB1cnBsZSI+JnF1b3Q7aHR0cHM6Ly93d3cu ZXhhbXBsZS5vcmcvY2VydC5jZXImcXVvdDs8L3NwYW4+PC9hPjx0dD48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEwLjBwdCI+O2FsZz1FUzI1Njs8L3NwYW4+PC90dD48c3BhbiBzdHlsZT0iZm9udC1z aXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+PGJyPg0KPC9z cGFuPjx0dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+Jm5ic3A7Jm5ic3A7IHBwdD0m cXVvdDtycGgmcXVvdDs8L3NwYW4+PC90dD48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9ibG9j a3F1b3RlPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDph dXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjku MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlmIj4mbmJzcDs8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1h cmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxl PSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMt c2VyaWYiPlRoaXMgZXhhbXBsZSBoYXMgYSBudW1iZXIgb2YgaXNzdWVzOjxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjx1bCBzdHlsZT0ibWFyZ2luLXRvcDowY20iIHR5cGU9ImRpc2MiPg0KPGxpIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbGlzdDpsMSBsZXZlbDEgbGZvMiI+SW4gdGhlIElk ZW50aXR5IGhlYWRlciBmaWVsZCwgdGhlIHNpZ25lZC1pZGVudGl0eS1kaWdlc3Qgc2hvdWxkbid0 IGJlIHF1b3RlZC48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3Nw YW4+PG86cD48L286cD48L2xpPjxsaSBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLWxpc3Q6 bDEgbGV2ZWwxIGxmbzIiPkluIHRoZSBJZGVudGl0eSBoZWFkZXIgZmllbGQsIGluZm8gaXMgZW5j bG9zZWQgaW4gJmx0OyZndDsgcmF0aGVyIHRoYW4gJnF1b3Q7JnF1b3Q7LjxzcGFuIGNsYXNzPSJh cHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvbGk+PGxpIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbGlzdDpsMSBsZXZlbDEgbGZvMiI+SW4gdGhlIElk ZW50aXR5IGhlYWRlciBmaWVsZCwgcHB0IGlzIGEgdG9rZW4gcmF0aGVyIHRoYW4gYSBxdW90ZWQg c3RyaW5nLjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48 bzpwPjwvbzpwPjwvbGk+PGxpIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbGlzdDpsMSBs ZXZlbDEgbGZvMiI+VGhlIHNpZ25lZC1pZGVudGl0eS1kaWdlc3QgaGVhZGVyIG5lZWRzIHRvIGlu ZGljYXRlIGEgJnF1b3Q7dHlwJnF1b3Q7IG9mICZxdW90O3Bhc3Nwb3J0JnF1b3Q7IHJhdGhlciB0 aGFuIEpXVCwgYW5kIGl0IG5lZWRzIHRvIGluY2x1ZGUgYm90aCBhICZxdW90O3BwdCZxdW90OyBh bmQgJnF1b3Q7eDV1JnF1b3Q7IGZpZWxkLjxvOnA+PC9vOnA+PC9saT48bGkgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1zby1saXN0OmwxIGxldmVsMSBsZm8yIj5UaGUgc2lnbmVkLWlkZW50aXR5 LWRpZ2VzdCBib2R5IHNob3VsZCBjb250YWluIG9ubHkgdGhlIHBhc3Nwb3J0IGNsYWltIHJhdGhl ciB0aGFuIGEgSlNPTiBvYmplY3QgdGhhdCBpdHNlbGYgY29udGFpbnMgYSBiYXNlNjQtZW5jb2Rl ZCBKV1MgaGVhZGVyIGNvbmNhdGVuYXRlZCB3aXRoIGEgY2xhaW0uPG86cD48L286cD48L2xpPjxs aSBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLWxpc3Q6bDEgbGV2ZWwxIGxmbzIiPkkgYmVs aWV2ZSB0aGF0LCBldmVuIHdoZW4gdGhlIGJvZHkgaXMgaW5jbHVkZWQsIHZhbHVlcyBpbiB0aGUg aGVhZGVyIGFuZCBib2R5IG5lZWQgdG8gYmUgYmUgY2Fub25pY2FsaXplZCAoaS5lLiwgYWxsIG9u IG9uZSBsaW5lLCBubyBzcGFjZXMsIGluIGFscGhhYmV0aWNhbCBvcmRlciwgZXRjLik8bzpwPjwv bzpwPjwvbGk+PC91bD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRv cC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+ SSB3b3VsZCBhbHNvIHJlY29tbWVuZCBmb2xsb3dpbmcgdGhlIGNvbnZlbnRpb24gb2YgaW5kaWNh dGluZyB0aGF0IGxpbmUtd3JhcHMgYXJlIG9ubHkgZm9yIHJlYWRhYmlsaXR5LCBhbmQgaW5jbHVk aW5nDQogdGhlIGhlYWRlciBmaWVsZCBuYW1lIGluIHRoZSBleGFtcGxlLiBQdXR0aW5nIGFsbCB0 aGlzIHRvZ2V0aGVyLCBJIGJlbGlldmUgd2hhdCB5b3Ugd2FudCBpczo8bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1 dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjx0dD48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEwLjBwdCI+Jm5ic3A7Jm5ic3A7IEZvciBleGFtcGxlLCBhIElkZW50aXR5IGhlYWRlciBmaWVs ZCBmb3IgJnF1b3Q7cnBoJnF1b3Q7IG1pZ2h0IGxvb2s8L3NwYW4+PC90dD48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+PGJy Pg0KPHR0PiZuYnNwOyZuYnNwOyBhcyBmb2xsb3dzIChiYWNrc2xhc2hlcyBzaG93biBmb3IgbGlu ZSBmb2xkaW5nIG9ubHkpOjwvdHQ+PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPjxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1h bHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHR0PjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTAuMHB0Ij4mbmJzcDsmbmJzcDsgSWRlbnRpdHk6IGV5SmhiR2NpT2lKRlV6STFOaUlz SW5Cd2RDSTZJbkp3YUNJc0luUjVjQ0k2SW5CaGMzTndiM0owSSBcPC9zcGFuPjwvdHQ+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVv dDsiPjxicj4NCjx0dD4mbmJzcDsmbmJzcDsgaXdpZURWMUlqb2lhSFIwY0hNNkx5OTNkM2N1Wlho aGJYQnNaUzVqYjIwdlkyVnlkQzVqWlhJaWZRby5leUprWlhOMCBcPC90dD48YnI+DQo8dHQ+Jm5i c3A7Jm5ic3A7IElqcDdXeUowYmlJNklqRXlNVEkxTlRVd01URXpJbDE5TENKcFlYUWlPaUl4TkRR ek1qQTRNelExSWl3aWIzSnBaeUkgXDwvdHQ+PGJyPg0KPHR0PiZuYnNwOyZuYnNwOyA2ZXlKMGJp STZJakV5TVRVMU5UVXdNVEV5SW4wc0luSndhQ0k2ZXlKaGRYUm9JanBiSW1WMGN5NHdJaXdpZDNC ekxqIFw8L3R0Pjxicj4NCjx0dD4mbmJzcDsmbmJzcDsgQWlYWDE5Q2cuczM3UzZWQzhITTZEbDZZ ekplUURzclpjd0owbGl6eGhVckE3Zl85OG9XQkh2by1jbC1uOE1JaG9DciBcPC90dD48YnI+DQo8 dHQ+Jm5ic3A7Jm5ic3A7IDE4dllZRnkzYmxYdnMzZnNsTV9vb3MyUDJEeXc7aW5mbz0mbHQ7PC90 dD48L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtI ZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+PGEgaHJlZj0iaHR0cHM6Ly91cmxkZWZlbnNlLnBy b29mcG9pbnQuY29tL3YyL3VybD91PWh0dHBzLTNBX193d3cuZXhhbXBsZS5vcmdfY2VydC5jZXIm YW1wO2Q9RHdNRmFRJmFtcDtjPUxGWVotbzlfSFVNZU1UU1FpY3ZqSWcmYW1wO3I9Rzl2OHVDU1NR aENtcHc3SXRHMHIyZyZhbXA7bT1zbEtJQlkzN3k4cDRpQzNKZ2p1d0QxVEk5T2dXN1FUSFd6bUpW eXF5Sk5nJmFtcDtzPVdUVHVEbXkzOWkyekkzaWNNSG84MmNxUkdhWGp6SHl3SWdCQUlLMW9xQ1Um YW1wO2U9IiB0YXJnZXQ9Il9ibGFuayI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6cHVycGxlIj5odHRwczovL3d3 dy5leGFtcGxlLm9yZy9jZXJ0LmNlcjwvc3Bhbj48L2E+PC9zcGFuPjxzcGFuIGNsYXNzPSJhcHBs ZS1jb252ZXJ0ZWQtc3BhY2UiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDs8L3NwYW4+PC9zcGFuPjx0dD48c3Bh biBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+XDwvc3Bhbj48L3R0PjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48YnI+DQo8 dHQ+Jm5ic3A7Jm5ic3A7ICZndDs7YWxnPUVTMjU2O3BwdD1ycGg8L3R0Pjxicj4NCjwvc3Bhbj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZx dW90OyxzYW5zLXNlcmlmIj48YnI+DQooTm90ZTogdGhpcyBleGFtcGxlIGFzc3VtZXMgdGhlIGNh bGxpbmcgYW5kIGNhbGxlZCBwYXJ0eSBudW1iZXJzIGluIHRoZSBwcmV2aW91cyBleGFtcGxlIGFy ZSBjaGFuZ2VkIHRvPHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9z cGFuPjxhIGhyZWY9InRlbDooMjE1KSUyMDU1NS0wMTEyIiB0YXJnZXQ9Il9ibGFuayI+PHNwYW4g c3R5bGU9ImNvbG9yOnB1cnBsZSI+MTIxNTU1NTAxMTI8L3NwYW4+PC9hPmFuZDxzcGFuIGNsYXNz PSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48YSBocmVmPSJ0ZWw6KDIxNSkl MjA1NTUtMDExMyIgdGFyZ2V0PSJfYmxhbmsiPjxzcGFuIHN0eWxlPSJjb2xvcjpwdXJwbGUiPjEy MTU1NTUwMTEzPC9zcGFuPjwvYT4sDQogcmVzcGVjdGl2ZWx5KTxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bztt c28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtm b250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+Jm5ic3A7PG86cD48 L286cD48L3NwYW4+PC9wPg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFy Z2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsi Pjxicj4NCjwvc3Bhbj48dHQ+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPiZuYnNwOyZu YnNwOyBBIFNJUCBhdXRoZW50aWNhdGlvbiBzZXJ2aWNlIHR5cGljYWxseSB3aWxsIGRlcml2ZSB0 aGUgdmFsdWUgb2YgJnF1b3Q7cnBoJnF1b3Q7PC9zcGFuPjwvdHQ+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPjxicj4NCjwv c3Bhbj48dHQ+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPiZuYnNwOyZuYnNwOyBmcm9t IHRoZSAnUmVzb3VyY2UtUHJpb3JpdHknIGhlYWRlciBmaWVsZCBiYXNlZCBvbiBwb2xpY3kgYXNz b2NpYXRlZDwvc3Bhbj48L3R0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48YnI+DQo8L3NwYW4+PHR0PjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTAuMHB0Ij4mbmJzcDsmbmJzcDsgd2l0aCBzZXJ2aWNlIHNwZWNpZmljIHVz ZSBvZiB0aGUgJnF1b3Q7bmFtZXNwYWNlICZxdW90Oy4mcXVvdDsgci1wcmlvcml0eSZxdW90OyB2 YWx1ZXM8L3NwYW4+PC90dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWls eTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+PGJyPg0KPC9zcGFuPjx0dD48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEwLjBwdCI+Jm5ic3A7Jm5ic3A7IGJhc2VkIG9uIFtSRkM0NDEyXS4mbmJzcDsg VGhlIGF1dGhlbnRpY2F0aW9uIHNlcnZpY2UgZGVyaXZlcyB0aGUgdmFsdWUgb2Y8L3NwYW4+PC90 dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVy IE5ldyZxdW90OyI+PGJyPg0KPC9zcGFuPjx0dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBw dCI+Jm5ic3A7Jm5ic3A7IHRoZSBQQVNTUG9yVCBjbGFpbSBieSB2ZXJpZnlpbmcgdGhlIGF1dGhv cml6YXRpb24gZm9yIFJlc291cmNlLTwvc3Bhbj48L3R0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48YnI+DQo8L3NwYW4+ PHR0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij4mbmJzcDsmbmJzcDsgUHJpb3JpdHkg KGkuZS4sIHZlcmlmeWluZyBhIGNhbGxpbmcgdXNlciBwcml2aWxlZ2UgZm9yIFJlc291cmNlLTwv c3Bhbj48L3R0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NvdXJpZXIgTmV3JnF1b3Q7Ij48YnI+DQo8L3NwYW4+PHR0PjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTAuMHB0Ij4mbmJzcDsmbmJzcDsgUHJpb3JpdHkgYmFzZWQgb24gaXRzIGlkZW50aXR5KSB3 aGljaCBtaWdodCBiZSBkZXJpdmVkIGZyb20gY3VzdG9tZXI8L3NwYW4+PC90dD48c3BhbiBzdHls ZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+ PGJyPg0KPC9zcGFuPjx0dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+Jm5ic3A7Jm5i c3A7IHByb2ZpbGUgZGF0YSBvciBmcm9tIGFjY2VzcyB0byBleHRlcm5hbCBzZXJ2aWNlcy48L3Nw YW4+PC90dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtD b3VyaWVyIE5ldyZxdW90OyI+PGJyPg0KPGJyPg0KPC9zcGFuPjx0dD48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEwLjBwdCI+Jm5ic3A7Jm5ic3A7IFtSRkM0NDEyXSBhbGxvd3MgbXVsdGlwbGUgJnF1 b3Q7bmFtZXNwYWNlICZxdW90Oy4mcXVvdDsgci1wcmlvcml0eSZxdW90OyBwYWlycywgZWl0aGVy IGluPC9zcGFuPjwvdHQ+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPjxicj4NCjwvc3Bhbj48dHQ+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMC4wcHQiPiZuYnNwOyZuYnNwOyBhIHNpbmdsZSBTSVAgUmVzb3VyY2UtUHJpb3Jp dHkgaGVhZGVyIG9yIGFjcm9zcyBtdWx0aXBsZSBTSVA8L3NwYW4+PC90dD48bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1z by1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90Oyxz YW5zLXNlcmlmIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0 OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVs dmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPlNpbmdsZSBxdW90ZXMgYXJvdW5kICdSZXNvdXJjZS1Q cmlvcml0eScuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZx dW90OyxzYW5zLXNlcmlmIj4mcXVvdDsuLi5oZWFkZXIgZmllbGQuLi4mcXVvdDs8bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3At YWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNp emU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPiZu YnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9w OjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi Pjx0dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+Jm5ic3A7Jm5ic3A7IFJlc291cmNl LVByaW9yaXR5IGhlYWRlcnMuJm5ic3A7IEhvd2V2ZXIsIGl0IGlzIG5vdCBuZWNlc3NhcnkgdG8g c2lnbiBhbGw8L3NwYW4+PC90dD48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9ibG9ja3F1b3Rl Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21z by1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlmIj4mbmJzcDs8bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10 b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYi PlNpbmdsZSBxdW90ZXMgYXJvdW5kICdSZXNvdXJjZS1Qcmlvcml0eScuPG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDph dXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjku MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlmIj4mcXVvdDsu Li5oZWFkZXIgZmllbGRzLi4uJnF1b3Q7PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90 dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlmIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUu MHB0Ij4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48dHQ+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMC4wcHQiPiZuYnNwOyZuYnNwOyBjb250ZW50IG9mIGEgU0lQIFJlc291cmNlLVByaW9y aXR5IGhlYWRlciBvciBhbGwgU0lQIFJlc291cmNlLTwvc3Bhbj48L3R0PjxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNv LW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNh bnMtc2VyaWYiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6 YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2 ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+U2luZ2xlIHF1b3RlcyBhcm91bmQgJ1Jlc291cmNlLVBy aW9yaXR5Jy48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxz cGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1 b3Q7LHNhbnMtc2VyaWYiPiZxdW90Oy4uLmhlYWRlciBmaWVsZC4uLiZxdW90OzxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1h bHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+Jm5i c3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6 NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHR0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij4mbmJzcDsmbmJzcDsgUHJpb3JpdHkg aGVhZGVycyBpbiBhIGdpdmVuIFNJUCBtZXNzYWdlLiZuYnNwOyBBbiBhdXRob3JpdHkgaXMgb25s eTwvc3Bhbj48L3R0PjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdp bi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPiZuYnNwOzxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6 YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5 LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+U2luZ2xl IHF1b3RlcyBhcm91bmQgJ1Jlc291cmNlLVByaW9yaXR5Jy48bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNv LW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPiZxdW90Oy4uLmhlYWRl ciBmaWVsZHMuLi4mcXVvdDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0 OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVs dmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxi bG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjx0dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEw LjBwdCI+Jm5ic3A7Jm5ic3A7IHJlc3BvbnNpYmxlIGZvciBzaWduaW5nIHRoZSBjb250ZW50IG9m IGEgU0lQIFJlc291cmNlLVByaW9yaXR5IGhlYWRlcjwvc3Bhbj48L3R0PjxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNv LW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNh bnMtc2VyaWYiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6 YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2 ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+U2luZ2xlIHF1b3RlcyBhcm91bmQgJ1Jlc291cmNlLVBy aW9yaXR5Jy48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxz cGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1 b3Q7LHNhbnMtc2VyaWYiPiZxdW90Oy4uLmhlYWRlciBmaWVsZC4uLiZxdW90OzxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1h bHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+Jm5i c3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6 NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHR0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij4mbmJzcDsmbmJzcDsgZm9yIHdoaWNo IGl0IGhhcyBhdXRob3JpdHkgKGUuZy4sIGEgc3BlY2lmaWMgJnF1b3Q7bmFtZXNwYWNlICZxdW90 Oy4mcXVvdDs8L3NwYW4+PC90dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZh bWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+PGJyPg0KPC9zcGFuPjx0dD48c3BhbiBzdHls ZT0iZm9udC1zaXplOjEwLjBwdCI+Jm5ic3A7Jm5ic3A7IHItcHJpb3JpdHkmcXVvdDspLjwvc3Bh bj48L3R0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nv dXJpZXIgTmV3JnF1b3Q7Ij48YnI+DQo8YnI+DQo8L3NwYW4+PHR0PjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTAuMHB0Ij40LjIuJm5ic3A7IFZlcmlmaWNhdGlvbiBTZXJ2aWNlIEJlaGF2aW9yPC9z cGFuPjwvdHQ+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q291cmllciBOZXcmcXVvdDsiPjxicj4NCjxicj4NCjwvc3Bhbj48dHQ+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMC4wcHQiPiZuYnNwOyZuYnNwOyBbSS1ELmlldGYtc3Rpci1yZmM0NDc0YmlzXSBT ZWN0aW9uIDYuMiBTdGVwIDUgcmVxdWlyZXMgdGhhdDwvc3Bhbj48L3R0PjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48YnI+ DQo8L3NwYW4+PHR0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij4mbmJzcDsmbmJzcDsg c3BlY2lmaWNhdGlvbnMgZGVmaW5pbmcgJnF1b3Q7cHB0JnF1b3Q7IHZhbHVlcyBkZXNjcmliZSBh bnkgYWRkaXRpb25hbCB2ZXJpZmllcjwvc3Bhbj48L3R0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48YnI+DQo8L3NwYW4+ PHR0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij4mbmJzcDsmbmJzcDsgYmVoYXZpb3Iu Jm5ic3A7IFRoZSBiZWhhdmlvciBzcGVjaWZpZWQgZm9yIHRoZSAmcXVvdDtwcHQmcXVvdDsgdmFs dWVzIG9mICZxdW90O3JwaCZxdW90OyBpcyBhczwvc3Bhbj48L3R0PjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48YnI+DQo8 L3NwYW4+PHR0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij4mbmJzcDsmbmJzcDsgZm9s bG93czo8L3NwYW4+PC90dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWls eTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+PGJyPg0KPGJyPg0KPC9zcGFuPjx0dD48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjBwdCI+Jm5ic3A7Jm5ic3A7IFRoZSB2ZXJpZmljYXRpb24gc2Vy dmljZSBNVVNUIGV4dHJhY3QgdGhlIHZhbHVlIGFzc29jaWF0ZWQgd2l0aCB0aGU8L3NwYW4+PC90 dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVy IE5ldyZxdW90OyI+PGJyPg0KPC9zcGFuPjx0dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBw dCI+Jm5ic3A7Jm5ic3A7ICZxdW90O2F1dGgmcXVvdDsga2V5IGluIGEgZnVsbCBmb3JtIFBBU1NQ b3JUIHdpdGggYSAmcXVvdDtwcHQmcXVvdDsgdmFsdWUgb2YgJnF1b3Q7cnBoJnF1b3Q7LiZuYnNw OyBJZjwvc3Bhbj48L3R0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48YnI+DQo8L3NwYW4+PHR0PjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTAuMHB0Ij4mbmJzcDsmbmJzcDsgdGhlIHNpZ25hdHVyZSB2YWxpZGF0ZXMsIHRo ZW4gdGhlIHZlcmlmaWNhdGlvbiBzZXJ2aWNlIGNhbiB1c2UgdGhlPC9zcGFuPjwvdHQ+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVv dDsiPjxicj4NCjwvc3Bhbj48dHQ+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPiZuYnNw OyZuYnNwOyB2YWx1ZSBvZiB0aGUgJnF1b3Q7cnBoJnF1b3Q7IGNsYWltIGFzIHZhbGlkYXRpb24g dGhhdCB0aGUgY2FsbGluZyBwYXJ0eSBpczwvc3Bhbj48L3R0PjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48YnI+DQo8L3Nw YW4+PHR0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij4mbmJzcDsmbmJzcDsgYXV0aG9y aXplZCBmb3IgUmVzb3VyY2UtUHJpb3JpdHksIHdoaWNoIHdvdWxkIGluIHR1cm4gYmUgdXNlZCBm b3I8L3NwYW4+PC90dD48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1h cmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPlNpbmdsZSBxdW90ZXMgYXJv dW5kICdSZXNvdXJjZS1Qcmlvcml0eScuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90 dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlmIj5UaGlzIHRleHQgaXMgYW1iaWd1b3VzIGFi b3V0IHdoZXRoZXIgdGhlIHZhbGlkYXRpb24gaW5kaWNhdGVzIHRoYXQgdGhlIGNhbGxpbmcgcGFy dHkgaXMgYXV0aG9yaXplZCB0byB1c2UgdGhlIHByaW9yaXRpZXMNCiBpbmRpY2F0ZWQgaW4gdGhl IHBhc3Nwb3J0IG9iamVjdCwgb3IgdGhlIHZhbHVlcyBpbiB0aGUgU0lQICdSZXNvdXJjZS1Qcmlv cml0eScgaGVhZGVyIGZpZWxkOyBhbmQgKHRha2VuIG9uIGl0cyBmYWNlKSBpbXBsaWVzIHRoZSBs YXR0ZXIsIHdoZW4gdGhlIGludGVudGlvbiBoZXJlIHNob3VsZCBjbGVhcmx5IGJlIHRoZSBmb3Jt ZXIuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1z by1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90Oyxz YW5zLXNlcmlmIj4mcXVvdDsuLi5hdXRob3JpemVkIGZvciAnUmVzb3VyY2UtUHJpb3JpdHknIGlu ZGljYXRlZCBpbiB0aGUgY2xhaW0uIFRoaXMgdmFsdWUgd291bGQgaW4gdHVybiBiZSB1c2VkIGZv ci4uLiZxdW90OzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2Em cXVvdDssc2Fucy1zZXJpZiI+VGhlIHRleHQgYWxzbyBuZWVkcyB0byBzYXkgc29tZXRoaW5nIGFi b3V0IGNvbXBhcmluZyB2YWx1ZXMgaW4gdGhlIGNsYWltIHRvIHZhbHVlcyBpbiB0aGUgJ1Jlc291 cmNlLVByaW9yaXR5JyBoZWFkZXINCiBmaWVsZCwgYW5kIHdoYXQgYSBtaXNtYXRjaCBtaWdodCBt ZWFuLiBUaGUgZG9jdW1lbnQgc2F5cyBlbHNld2hlcmUgdGhhdCB0aGUgc2lnbmF0dXJlIG1pZ2h0 IG9ubHkgY292ZXIgc29tZSBvZiB0aGUgci12YWx1ZXMsIHdoaWNoIG1ha2VzIGl0IGVudGlyZWx5 IHBvc3NpYmxlIHRoYXQgdGhlICdSZXNvdXJjZS1Qcmlvcml0eScgZmllbGQgbWlnaHQgY29udGFp biBtb3JlIHZhbHVlcyB0aGFuIGFyZSBzaWduZWQuIE9uIHRoZSBvdGhlciBoYW5kLCBpbnRlcm1l ZGlhcmllcw0KIG1pZ2h0IHJlYXNvbmFibHkgcmVtb3ZlIHItdmFsdWVzIGFzIHRoZSBjYWxsIGlz IHByb2Nlc3NlZC4gVGhpcyBwcm9iYWJseSBtZWFucyB0aGF0IHRob3NlIHJlbW92ZWQgcHJpb3Jp dGllcyBzaG91bGQgbm90IGJlIHVzZWQsIGV2ZW4gaWYgdGhleSBhcmUgcHJlc2VudCBpbiB0aGUg cGFzc3BvcnQuIEl0IHNlZW1zIHJlYXNvbmFibGUgdG8gc2F5IHRoYXQgKnR5cGljYWwqIHByb2Nl c3NpbmcgYnkgYSByZWNlaXZpbmcgcGFydHkgd291bGQgYmUgdG8NCiB0YWtlIHRoZSAqdW5pb24q IG9mIGFsbCBSUEggcGFzc3BvcnRzIHRoYXQgdGhleSB0cnVzdCwgYW5kICppbnRlcnNlY3QqIHRo YXQgd2l0aCB0aGUgcHJpb3JpdGllcyBpbiAnUmVzb3VyY2UtUHJpb3JpdHknIGhlYWRlciBmaWVs ZHMgdG8gZ2V0IHRoZSBhY3R1YWwgcHJpb3JpdHkgb3IgcHJpb3JpdGllcyB0byBiZSBhcHBsaWVk IHRvIHRoZSBjYWxsIChzdWJqZWN0IHRvIGxvY2FsIHBvbGljeSkuPG86cD48L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRv O21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlmIj4mbmJzcDs8bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDtt YXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48dHQ+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPiZuYnNwOyZuYnNwOyBwcmlvcml0eSB0cmVhdG1l bnQgaW4gYWNjb3JkYW5jZSB3aXRoIGxvY2FsIHBvbGljeSBmb3IgdGhlIGFzc29jaWF0ZWQ8L3Nw YW4+PC90dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtD b3VyaWVyIE5ldyZxdW90OyI+PGJyPg0KPC9zcGFuPjx0dD48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEwLjBwdCI+Jm5ic3A7Jm5ic3A7IGNvbW11bmljYXRpb24gc2VydmljZS48L3NwYW4+PC90dD48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5l dyZxdW90OyI+PGJyPg0KPGJyPg0KPC9zcGFuPjx0dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEw LjBwdCI+Jm5ic3A7Jm5ic3A7IEluIGFkZGl0aW9uLCBbSS1ELmlldGYtc3Rpci1yZmM0NDc0Ymlz XSBTZWN0aW9uIDYuMiBTdGVwIDQgcmVxdWlyZXM8L3NwYW4+PC90dD48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+PGJyPg0K PC9zcGFuPjx0dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+Jm5ic3A7Jm5ic3A7ICZx dW90O2lhdCZxdW90OyB2YWx1ZSBpbiAmcXVvdDtycGgmcXVvdDsgY2xhaW0gdG8gYmUgdmVyaWZp ZWQuPC9zcGFuPjwvdHQ+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPjxicj4NCjxicj4NCjwvc3Bhbj48dHQ+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMC4wcHQiPiZuYnNwOyZuYnNwOyBUaGUgYmVoYXZpb3Igb2YgYSBTSVAg VUFzIHVwb24gcmVjZWl2aW5nIGFuIElOVklURSBjb250YWluaW5nIGE8L3NwYW4+PC90dD48bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRv Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGlj YSZxdW90OyxzYW5zLXNlcmlmIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1i b3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPiZxdW90Oy4uLm9mIGEgU0lQIFVBIHVw b24uLi4mcXVvdDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8i PjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNh JnF1b3Q7LHNhbnMtc2VyaWYiPm9yPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9t LWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlmIj4mcXVvdDsuLi5vZiBTSVAgVUFzIHVwb24uLi4m cXVvdDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFu IHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7 LHNhbnMtc2VyaWYiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxibG9ja3F1b3RlIHN0 eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjx0dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+Jm5ic3A7 Jm5ic3A7IFBBU1Nwb3JUIG9iamVjdCB3aXRoIGEgJnF1b3Q7cnBoJnF1b3Q7IGNsYWltIHdpbGwg bGFyZ2VseSByZW1haW4gYSBtYXR0ZXIgb2Y8L3NwYW4+PC90dD48c3BhbiBzdHlsZT0iZm9udC1z aXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+PGJyPg0KPC9z cGFuPjx0dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+Jm5ic3A7Jm5ic3A7IGltcGxl bWVudGF0aW9uIHBvbGljeSBmb3IgdGhlIHNwZWNpZmljIGNvbW11bmljYXRpb24gc2VydmljZS4m bmJzcDsgSW48L3NwYW4+PC90dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZh bWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+PGJyPg0KPC9zcGFuPjx0dD48c3BhbiBzdHls ZT0iZm9udC1zaXplOjEwLjBwdCI+Jm5ic3A7Jm5ic3A7IG1vc3QgY2FzZXMsaW1wbGVtZW50YXRp b25zIHdvdWxkIGFjdCBiYXNlZCBvbiBjb25maWRlbmNlIGluIHRoZTwvc3Bhbj48L3R0PjxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8i PjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNh JnF1b3Q7LHNhbnMtc2VyaWYiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJv dHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTom cXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+JnF1b3Q7Li4uY2FzZXMsIGltcGxlbWVu dGF0aW9ucy4uLiZxdW90OzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6 YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2 ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+KHNwYWNlIGFmdGVyIGNvbW1hKTxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6 YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5 LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+Jm5ic3A7 PG86cD48L286cD48L3NwYW4+PC9wPg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4w cHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHR0 PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij4mbmJzcDsmbmJzcDsgdmVyYWNpdHkgb2Yg dGhpcyBpbmZvcm1hdGlvbi4mbmJzcDsgVGhlIHVzZSBvZiB0aGUgY29tcGFjdCBmb3JtIG9mPC9z cGFuPjwvdHQ+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJv dHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTom cXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRv O21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlmIj5QYXJhZ3JhcGgg YnJlYWsgYmVmb3JlICZxdW90O1RoZSZxdW90Oy48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdp bi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPiZuYnNwOzxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0 b206NS4wcHQiPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjx0dD48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEwLjBwdCI+Jm5ic3A7Jm5ic3A7IFBBU1Nwb3JUIGlzIG5vdCBzcGVjaWZpZWQg aW4gdGhpcyBkb2N1bWVudC48L3NwYW4+PC90dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBw dDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+PGJyPg0KPGJyPg0KPC9zcGFu Pjx0dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+NS4mbmJzcDsgRnVydGhlciBJbmZv cm1hdGlvbiBBc3NvY2lhdGVkIHdpdGggUmVzb3VyY2UtUHJpb3JpdHk8L3NwYW4+PC90dD48bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRv Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGlj YSZxdW90OyxzYW5zLXNlcmlmIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1i b3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPlNpbmdsZSBxdW90ZXMgYXJvdW5kICdS ZXNvdXJjZS1Qcmlvcml0eScuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFs dDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hl bHZldGljYSZxdW90OyxzYW5zLXNlcmlmIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBw dDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+PGJyPg0KPC9zcGFuPjx0dD48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+Jm5ic3A7Jm5ic3A7IFRoZXJlIG1heSBiZSBh ZGRpdGlvbmFsIGluZm9ybWF0aW9uIGFib3V0IHRoZSBjYWxsaW5nIHBhcnR5IG9yIHRoZTwvc3Bh bj48L3R0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nv dXJpZXIgTmV3JnF1b3Q7Ij48YnI+DQo8L3NwYW4+PHR0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTAuMHB0Ij4mbmJzcDsmbmJzcDsgY2FsbCB0aGF0IGNvdWxkIGJlIHJlbGV2YW50IHRvIGF1dGhv cml6YXRpb24gZm9yIFJlc291cmNlLVByaW9yaXR5Ljwvc3Bhbj48L3R0PjxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNv LW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNh bnMtc2VyaWYiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6 YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2 ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+U2luZ2xlIHF1b3RlcyBhcm91bmQgJ1Jlc291cmNlLVBy aW9yaXR5Jy48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxz cGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1 b3Q7LHNhbnMtc2VyaWYiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxibG9ja3F1b3Rl IHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjx0dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+Jm5i c3A7Jm5ic3A7IFRoaXMgbWF5IGluY2x1ZGUgaW5mb3JtYXRpb24gcmVsYXRlZCB0byB0aGUgZGV2 aWNlIHN1YnNjcmlwdGlvbiBvZjwvc3Bhbj48L3R0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48YnI+DQo8L3NwYW4+PHR0 PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij4mbmJzcDsmbmJzcDsgdGhlIGNhbGxlciwg b3IgdG8gYW55IGluc3RpdHV0aW9ucyB0aGF0IHRoZSBjYWxsZXIgb3IgZGV2aWNlIGlzPC9zcGFu PjwvdHQ+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291 cmllciBOZXcmcXVvdDsiPjxicj4NCjwvc3Bhbj48dHQ+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MC4wcHQiPiZuYnNwOyZuYnNwOyBhc3NvY2lhdGVkIHdpdGgsIG9yIGV2ZW4gY2F0ZWdvcmllcyBv ZiBpbnN0aXR1dGlvbnMuJm5ic3A7IEFsbCBvZiB0aGVzZTwvc3Bhbj48L3R0PjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48 YnI+DQo8L3NwYW4+PHR0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij4mbmJzcDsmbmJz cDsgZGF0YSBlbGVtZW50cyB3b3VsZCBiZW5lZml0IGZyb20gdGhlIHNlY3VyZSBhdHRlc3RhdGlv bnMgcHJvdmlkZWQgYnk8L3NwYW4+PC90dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtm b250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+PGJyPg0KPC9zcGFuPjx0dD48c3Bh biBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+Jm5ic3A7Jm5ic3A7IHRoZSBTVElSIGFuZCBQQVNT cG9yVCBmcmFtZXdvcmtzLiZuYnNwOyBUaGUgc3BlY2lmaWNhdGlvbiBvZiB0aGUgJnF1b3Q7cnBo JnF1b3Q7PC9zcGFuPjwvdHQ+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPjxicj4NCjwvc3Bhbj48dHQ+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMC4wcHQiPiZuYnNwOyZuYnNwOyBjbGFpbSBjb3VsZCBlbnRhaWwgdGhlIG9w dGlvbmFsIHByZXNlbmNlIG9mIG9uZSBvciBtb3JlIHN1Y2g8L3NwYW4+PC90dD48c3BhbiBzdHls ZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+ PGJyPg0KPC9zcGFuPjx0dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+Jm5ic3A7Jm5i c3A7IGFkZGl0aW9uYWwgaW5mb3JtYXRpb24gZmllbGRzLjwvc3Bhbj48L3R0PjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48 YnI+DQo8YnI+DQo8L3NwYW4+PHR0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij4mbmJz cDsmbmJzcDsgQSBuZXcgSUFOQSByZWdpc3RyeSBoYXMgYmVlbiBkZWZpbmVkIHRvIGhvbGQgcG90 ZW50aWFsIHZhbHVlcyBvZiB0aGU8L3NwYW4+PC90dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEw LjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+PGJyPg0KPC9zcGFuPjx0 dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+Jm5ic3A7Jm5ic3A7ICZxdW90O3JwaCZx dW90OyBhcnJheTsgc2VlIFNlY3Rpb24gNi4yLiZuYnNwOyBUaGUgZGVmaW5pdGlvbiBvZiB0aGUg JnF1b3Q7cnBoJnF1b3Q7IGNsYWltIG1heTwvc3Bhbj48L3R0PjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48YnI+DQo8L3Nw YW4+PHR0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij4mbmJzcDsmbmJzcDsgaGF2ZSBv bmUgb3IgbW9yZSBzdWNoIGFkZGl0aW9uYWwgaW5mb3JtYXRpb24gZmllbGQocykuJm5ic3A7IERl dGFpbHMgb2Y8L3NwYW4+PC90dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZh bWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+PGJyPg0KPC9zcGFuPjx0dD48c3BhbiBzdHls ZT0iZm9udC1zaXplOjEwLjBwdCI+Jm5ic3A7Jm5ic3A7IHN1Y2ggJnF1b3Q7cnBoJnF1b3Q7IGNs YWltIHRvIGVuY29tcGFzcyBvdGhlciBkYXRhIGVsZW1lbnRzIGFyZSBsZWZ0IGZvciBmdXR1cmU8 L3NwYW4+PC90dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVv dDtDb3VyaWVyIE5ldyZxdW90OyI+PGJyPg0KPC9zcGFuPjx0dD48c3BhbiBzdHlsZT0iZm9udC1z aXplOjEwLjBwdCI+Jm5ic3A7Jm5ic3A7IHZlcnNpb24gb2YgdGhpcyBzcGVjaWZpY2F0aW9uLjwv c3Bhbj48L3R0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NvdXJpZXIgTmV3JnF1b3Q7Ij48YnI+DQo8YnI+DQo8L3NwYW4+PHR0PjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTAuMHB0Ij42LiZuYnNwOyBJQU5BIENvbnNpZGVyYXRpb25zPC9zcGFuPjwvdHQ+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBO ZXcmcXVvdDsiPjxicj4NCjxicj4NCjwvc3Bhbj48dHQ+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MC4wcHQiPjYuMS4mbmJzcDsgSlNPTiBXZWIgVG9rZW4gQ2xhaW1zIFJlZ2lzdHJhdGlvbjwvc3Bh bj48L3R0PjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0 b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bztt c28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtm b250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+SSB0aGluayB0aGVy ZSdzIHNvbWUgY29uZnVzaW9uIGhlcmUuIFlvdSdyZSByZWdpc3RlcmluZyBhIFBBU1Nwb3JUIHBw dCB2YWx1ZSwgbm90IGEgbmV3IEpXVCBjbGFpbS4gVGhhdCBpcyB0byBzYXksDQogeW91J3JlIGFk ZGluZyBhbiBlbnRyeSB0byB0aGlzIHRhYmxlOjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2lu LWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWls eTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+PGEgaHJlZj0iaHR0cHM6Ly91cmxk ZWZlbnNlLnByb29mcG9pbnQuY29tL3YyL3VybD91PWh0dHBzLTNBX193d3cuaWFuYS5vcmdfYXNz aWdubWVudHNfcGFzc3BvcnRfcGFzc3BvcnQueGh0bWwmYW1wO2Q9RHdNRmFRJmFtcDtjPUxGWVot bzlfSFVNZU1UU1FpY3ZqSWcmYW1wO3I9Rzl2OHVDU1NRaENtcHc3SXRHMHIyZyZhbXA7bT1zbEtJ QlkzN3k4cDRpQzNKZ2p1d0QxVEk5T2dXN1FUSFd6bUpWeXF5Sk5nJmFtcDtzPVhISXNXTXV5dEE2 TWp1Nm1pRXpWcG50MEQ0WnhrQUJUU3ZKLWpmY1l1VFUmYW1wO2U9IiB0YXJnZXQ9Il9ibGFuayI+ PHNwYW4gc3R5bGU9ImNvbG9yOnB1cnBsZSI+aHR0cHM6Ly93d3cuaWFuYS5vcmcvYXNzaWdubWVu dHMvcGFzc3BvcnQvcGFzc3BvcnQueGh0bWw8L3NwYW4+PC9hPjxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bztt c28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtm b250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+Tm90IHRvIHRoaXMg dGFibGU6PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90 OyxzYW5zLXNlcmlmIj48YSBocmVmPSJodHRwczovL3VybGRlZmVuc2UucHJvb2Zwb2ludC5jb20v djIvdXJsP3U9aHR0cHMtM0FfX3d3dy5pYW5hLm9yZ19hc3NpZ25tZW50c19qd3Rfand0LnhodG1s JmFtcDtkPUR3TUZhUSZhbXA7Yz1MRllaLW85X0hVTWVNVFNRaWN2aklnJmFtcDtyPUc5djh1Q1NT UWhDbXB3N0l0RzByMmcmYW1wO209c2xLSUJZMzd5OHA0aUMzSmdqdXdEMVRJOU9nVzdRVEhXem1K VnlxeUpOZyZhbXA7cz1Bem1qZm81NDZZSFdrOXI0SFFXZEVCNVBqWTlOeEFQOGxsdVdmYTZmX0I0 JmFtcDtlPSIgdGFyZ2V0PSJfYmxhbmsiPjxzcGFuIHN0eWxlPSJjb2xvcjpwdXJwbGUiPmh0dHBz Oi8vd3d3LmlhbmEub3JnL2Fzc2lnbm1lbnRzL2p3dC9qd3QueGh0bWw8L3NwYW4+PC9hPjxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2lu LXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJp ZiI+WW91IHdvdWxkIG9ubHkgdXNlIHRoZSBzZWNvbmQgdGFibGUgaWYgeW91IGhhZCBhIG5ldyBr ZXkgdG8gYWRkIHRvIHRoZSBQQVNTcG9yVCBoZWFkZXIgLS0gdGhpcyBzcGVjaWZpY2F0aW9uIGRv ZXMNCiBub3QgZG8gdGhhdC48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0 OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVs dmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPlRoaXMgc2VjdGlvbiBhbHNvIG5lZWRzIHNvbWUgaW50 cm9kdWN0b3J5IHRleHQgdG8gbGV0IHRoZSBJQU5BIGtub3cgZXhhY3RseSB3aGF0IHRvIGRvOyBl LmcuICZxdW90O1RoaXMgZG9jdW1lbnQgcmVnaXN0ZXJzDQogYSBuZXcgdmFsdWUgZm9yIHRoZSAm cXVvdDtQZXJzb25hbCBBc3NlcnRpb24gVG9rZW4gKFBBU1Nwb3JUKSBFeHRlbnNpb25zJnF1b3Q7 IHRhYmxlLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4t dG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJp ZXIgTmV3JnF1b3Q7Ij48YnI+DQo8L3NwYW4+PHR0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAu MHB0Ij4mbmJzcDsmbmJzcDsgbyZuYnNwOyBwcHQgdmFsdWU6ICZxdW90O3JwaCZxdW90Ozwvc3Bh bj48L3R0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nv dXJpZXIgTmV3JnF1b3Q7Ij48YnI+DQo8YnI+DQo8L3NwYW4+PHR0PjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTAuMHB0Ij4mbmJzcDsmbmJzcDsgbyZuYnNwOyBTcGVjaWZpY2F0aW9uIERvY3VtZW50 KHMpOiBTZWN0aW9uIDMgb2YgW1JGQ1RoaXNdPC9zcGFuPjwvdHQ+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPjxicj4NCjxi cj4NCjwvc3Bhbj48dHQ+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPjYuMi4mbmJzcDsg UEFTU3BvclQgJ3JwaCcgVHlwZXM8L3NwYW4+PC90dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEw LjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+PGJyPg0KPGJyPg0KPC9z cGFuPjx0dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+Jm5ic3A7Jm5ic3A7IFRoaXMg ZG9jdW1lbnQgcmVxdWVzdHMgdGhhdCB0aGUgSUFOQSBhZGQgYSBuZXcgZW50cnkgdG8gdGhlIFBB U1Nwb3JUPC9zcGFuPjwvdHQ+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPjxicj4NCjwvc3Bhbj48dHQ+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMC4wcHQiPiZuYnNwOyZuYnNwOyBUeXBlcyByZWdpc3RyeSBmb3IgdGhlIHR5 cGUgJnF1b3Q7cnBoJnF1b3Q7IHdoaWNoIGlzIHNwZWNpZmllZCBpbiBbUkZDVGhpc10uPC9zcGFu PjwvdHQ+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRv bS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVv dDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21z by1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlmIj5UaGVyZSBpc24ndCBh biBJQU5BIHRhYmxlIGNhbGxlZCAmcXVvdDtQQVNTcG9yVCBUeXBlcy4mcXVvdDsgSSBwcmVzdW1l IHRoaXMgaXMgdGhlIHJlZ2lzdHJhdGlvbiB3ZSBqdXN0IGRpc2N1c3NlZCBpbiBzZWN0aW9uDQog Ni4xLCBhbmQgc28gdGhlIGFib3ZlIHR3byBsaW5lcyBjYW4gYmUgcmVtb3ZlZC48bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3At YWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNp emU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPiZu YnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9w OjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi Pjx0dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+Jm5ic3A7Jm5ic3A7IFRoaXMgc3Bl Y2lmaWNhdGlvbiBhbHNvIHJlcXVlc3RzIHRoYXQgdGhlIElBTkEgY3JlYXRlIGEgbmV3IHJlZ2lz dHJ5PC9zcGFuPjwvdHQ+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPjxicj4NCjwvc3Bhbj48dHQ+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMC4wcHQiPiZuYnNwOyZuYnNwOyBmb3IgUEFTU3BvclQgJnF1b3Q7cnBoJnF1b3Q7 IHR5cGVzLiZuYnNwOyBSZWdpc3RyYXRpb24gb2YgbmV3IFBBU1Nwb3JUICZxdW90O3JwaCZxdW90 OyB0eXBlczwvc3Bhbj48L3R0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48YnI+DQo8L3NwYW4+PHR0PjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTAuMHB0Ij4mbmJzcDsmbmJzcDsgc2hhbGwgYmUgdW5kZXIgdGhlIHNwZWNp ZmljYXRpb24gcmVxdWlyZWQgcG9saWN5LiZuYnNwOyBUaGlzIHJlZ2lzdHJ5IGlzPC9zcGFuPjwv dHQ+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmll ciBOZXcmcXVvdDsiPjxicj4NCjwvc3Bhbj48dHQ+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4w cHQiPiZuYnNwOyZuYnNwOyB0byBiZSBpbml0aWFsbHkgcG9wdWxhdGVkIHdpdGggYSBzaW5nbGUg dmFsdWUgZm9yICZxdW90O2F1dGgmcXVvdDsgd2hpY2ggaXM8L3NwYW4+PC90dD48c3BhbiBzdHls ZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+ PGJyPg0KPC9zcGFuPjx0dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+Jm5ic3A7Jm5i c3A7IHNwZWNpZmllZCBpbiBbUkZDVGhpc10uPC9zcGFuPjwvdHQ+PG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFy Z2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1z ZXJpZiI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRv Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGlj YSZxdW90OyxzYW5zLXNlcmlmIj5UaGlzIG5lZWRzIHRvIGJlIHZlcnkgY2xlYXIgYWJvdXQgdGhl IGZpZWxkcyB0byBiZSBpbmNsdWRlZCBpbiB0aGlzIG5ldyByZWdpc3RyeSAoZS5nLiwgJnF1b3Q7 UmVnaXN0cnkgZW50cmllcyBtdXN0IGNvbnRhaW4NCiB0d28gZmllbGRzOiB0aGUgbmFtZSBvZiB0 aGUgJ3JwaCcgdHlwZSBhbmQgdGhlIHNwZWNpZmljYXRpb24gaW4gd2hpY2ggdGhlIHR5cGUgaXMg ZGVzY3JpYmVkJnF1b3Q7KS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0 OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVs dmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxi bG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48YnI+DQo8L3NwYW4+PHR0Pjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij43LiZuYnNwOyBTZWN1cml0eSBDb25zaWRlcmF0 aW9uczwvc3Bhbj48L3R0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48YnI+DQo8YnI+DQo8L3NwYW4+PHR0PjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTAuMHB0Ij4mbmJzcDsmbmJzcDsgVGhlIHNlY3VyaXR5IGNvbnNpZGVy YXRpb25zIGRpc2N1c3NlZCBpbiBbSS1ELmlldGYtc3Rpci1yZmM0NDc0YmlzXTwvc3Bhbj48L3R0 PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIg TmV3JnF1b3Q7Ij48YnI+DQo8L3NwYW4+PHR0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0 Ij4mbmJzcDsmbmJzcDsgaW4gU2VjdGlvbiAxMCBhcmUgYXBwbGljYWJsZSBoZXJlLjwvc3Bhbj48 L3R0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJp ZXIgTmV3JnF1b3Q7Ij48YnI+DQo8YnI+DQo8L3NwYW4+PHR0PjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTAuMHB0Ij43LjEuJm5ic3A7IEF2b2lkYW5jZSBvZiByZXBsYXkgYW5kIGN1dCBhbmQgcGFz dGUgYXR0YWNrczwvc3Bhbj48L3R0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48YnI+DQo8YnI+DQo8L3NwYW4+PHR0Pjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij4mbmJzcDsmbmJzcDsgVGhlIFBBU1Nwb3JUIGV4 dGVuc2lvbiB3aXRoIGEgJnF1b3Q7cHB0JnF1b3Q7IHZhbHVlIG9mICZxdW90O3JwaCZxdW90OyBN VVNUIG9ubHkgYmUgc2VudDwvc3Bhbj48L3R0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48YnI+DQo8L3NwYW4+PHR0Pjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij4mbmJzcDsmbmJzcDsgd2l0aCBTSVAgSU5WSVRF IHdoZW4gJ1Jlc291cmNlLVByaW9yaXR5JyBoZWFkZXIgaXMgdXNlZCB0byBjb252ZXkgdGhlPC9z cGFuPjwvdHQ+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJv dHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTom cXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRv O21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlmIj4mcXVvdDsuLi5o ZWFkZXIgZmllbGQuLi4mcXVvdDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20t YWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQi Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjx0dD48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEwLjBwdCI+Jm5ic3A7Jm5ic3A7IHByaW9yaXR5IG9mIHRoZSBjb21tdW5pY2F0aW9uIGFzIGRl ZmluZWQgaW4gW1JGQzQ0MTJdLiZuYnNwOyBUbyBhdm9pZCB0aGU8L3NwYW4+PC90dD48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90 OyI+PGJyPg0KPC9zcGFuPjx0dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+Jm5ic3A7 Jm5ic3A7IHJlcGxheSwgYW5kIGN1dCBhbmQgcGFzdGUgYXR0YWNrcywgdGhlIHByb2NlZHVyZXMg ZGVzY3JpYmVkIGluPC9zcGFuPjwvdHQ+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPjxicj4NCjwvc3Bhbj48dHQ+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPiZuYnNwOyZuYnNwOyBTZWN0aW9uIDEwLjEgb2YgW0kt RC5pZXRmLXN0aXItcmZjNDQ3NGJpc10gTVVTVCBiZSBmb2xsb3dlZC48L3NwYW4+PC90dD48c3Bh biBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZx dW90OyI+PGJyPg0KPGJyPg0KPC9zcGFuPjx0dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBw dCI+Ny4yLiZuYnNwOyBTb2x1dGlvbiBDb25zaWRlcmF0aW9uczwvc3Bhbj48L3R0PjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7 Ij48YnI+DQo8YnI+DQo8L3NwYW4+PHR0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij4m bmJzcDsmbmJzcDsgVGhlIHVzZSBvZiBleHRlbnNpb24gdG8gUEFTU3BvclQgdG9rZW5zIHdpdGgg JnF1b3Q7cHB0JnF1b3Q7IHZhbHVlICZxdW90O3JwaCZxdW90OyBiYXNlZDwvc3Bhbj48L3R0Pjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3 JnF1b3Q7Ij48YnI+DQo8L3NwYW4+PHR0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij4m bmJzcDsmbmJzcDsgb24gdGhlIHZhbGlkYXRpb24gb2YgdGhlIGRpZ2l0YWwgc2lnbmF0dXJlIGFu ZCB0aGUgYXNzb2NpYXRlZDwvc3Bhbj48L3R0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48YnI+DQo8L3NwYW4+PHR0Pjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij4mbmJzcDsmbmJzcDsgY2VydGlmaWNhdGUgcmVx dWlyZXMgY29uc2lkZXJhdGlvbiBvZiB0aGUgYXV0aGVudGljYXRpb24gYW5kPC9zcGFuPjwvdHQ+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBO ZXcmcXVvdDsiPjxicj4NCjwvc3Bhbj48dHQ+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQi PiZuYnNwOyZuYnNwOyBhdXRob3JpdHkgb3IgcmVwdXRhdGlvbiBvZiB0aGUgc2lnbmVyIHRvIGF0 dGVzdCB0byB0aGUgaWRlbnRpdHkgYmVpbmc8L3NwYW4+PC90dD48c3BhbiBzdHlsZT0iZm9udC1z aXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+PGJyPg0KPC9z cGFuPjx0dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+Jm5ic3A7Jm5ic3A7IGFzc2Vy dGVkLiZuYnNwOyBUaGUgZm9sbG93aW5nIGNvbnNpZGVyYXRpb25zIHNob3VsZCBiZSByZWNvZ25p emVkIHdoZW48L3NwYW4+PC90dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZh bWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+PGJyPg0KPC9zcGFuPjx0dD48c3BhbiBzdHls ZT0iZm9udC1zaXplOjEwLjBwdCI+Jm5ic3A7Jm5ic3A7IHVzaW5nIFBBU1Nwb3JUIGV4dGVuc2lv biB3aXRoICZxdW90O3BwdCZxdW90OyB2YWx1ZSBvZiAmcXVvdDtycGgmcXVvdDs6PC9zcGFuPjwv dHQ+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmll ciBOZXcmcXVvdDsiPjxicj4NCjxicj4NCjwvc3Bhbj48dHQ+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMC4wcHQiPiZuYnNwOyZuYnNwOyBvJm5ic3A7IEFuIGF1dGhvcml0eSAoc2lnbmVyKSBpcyBv bmx5IGFsbG93ZWQgdG8gc2lnbiB0aGUgY29udGVudCBvZiBhIFNJUDwvc3Bhbj48L3R0PjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1 b3Q7Ij48YnI+DQo8L3NwYW4+PHR0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij4mbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgJ1Jlc291cmNlLVByaW9yaXR5JyBoZWFkZXIgZm9y IHdoaWNoIGl0IGhhcyB0aGUgcmlnaHQgYXV0aG9yaXR5Ljwvc3Bhbj48L3R0PjxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFu IHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7 LHNhbnMtc2VyaWYiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1h bHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtI ZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+JnF1b3Q7Li4uaGVhZGVyIGZpZWxkLi4uJnF1b3Q7 PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1t YXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5z LXNlcmlmIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8YmxvY2txdW90ZSBzdHlsZT0i bWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48dHQ+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPiZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyBUaGUgYXV0aG9yaXR5IHRoYXQgc2lnbnMgdGhlIHRva2VuIE1V U1QgaGF2ZSBhIHNlY3VyZSBtZXRob2QgZm9yPC9zcGFuPjwvdHQ+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPjxicj4NCjwv c3Bhbj48dHQ+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPiZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyBhdXRoZW50aWNhdGlvbiBvZiB0aGUgZW5kIHVzZXIgb3IgdGhlIGRldmlj ZS48L3NwYW4+PC90dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTom cXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+PGJyPg0KPGJyPg0KPC9zcGFuPjx0dD48c3BhbiBzdHls ZT0iZm9udC1zaXplOjEwLjBwdCI+Jm5ic3A7Jm5ic3A7IG8mbmJzcDsgVGhlIHZlcmlmaWNhdGlv biBvZiB0aGUgc2lnbmF0dXJlIE1VU1QgaW5jbHVkZSBtZWFucyBvZiB2ZXJpZnlpbmc8L3NwYW4+ PC90dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3Vy aWVyIE5ldyZxdW90OyI+PGJyPg0KPC9zcGFuPjx0dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEw LjBwdCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHRoYXQgdGhlIHNpZ25lciBpcyBh dXRob3JpdGF0aXZlIGZvciB0aGUgc2lnbmVkIGNvbnRlbnQgb2YgdGhlIFNJUDwvc3Bhbj48L3R0 PjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0 OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVs dmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFy Z2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZh bWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+SXQncyBub3QgY2xlYXIgd2hh dCBhdXRob3JpdHkgaXMgYmVpbmcgY2xhaW1lZCBoZXJlLiBJcyB0aGlzIHN1cHBvc2VkIHRvIG1l YW4gc29tZXRoaW5nIGxpa2UgJnF1b3Q7Li4udmVyaWZ5aW5nIHRoYXQNCiB0aGUgc2lnbmVyIGlz IGF1dGhvcml0YXRpdmUgZm9yIHRoZSBvcmlnaW5hdGluZyB0biBpbiB0aGUgUEFTU3BvclQuLi4m cXVvdDs/IE9yICZxdW90Oy4uLmF1dGhvcml0YXRpdmUgZm9yIHRoZSByZXNvdXJjZSBwcmlvcml0 eSBuYW1lc3BhY2UgaW4gdGhlIFBBU1Nwb3JUPyZxdW90OyBXaGF0ZXZlciB0aGUgc2VydmVyIGlz IHB1cnBvcnRlZGx5IGF1dGhvcml0YXRpdmUgZm9yIG5lZWRzIHRvIGJlIGNsZWFybHkgc3BlbGxl ZCBvdXQuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90 OyxzYW5zLXNlcmlmIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8YmxvY2txdW90ZSBz dHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48dHQ+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPiZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAnUmVzb3VyY2UtUHJpb3JpdHknIGhlYWRlci48L3Nw YW4+PC90dD48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90 dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlmIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87 bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPiZxdW90Oy4uLmhl YWRlciBmaWVsZC4mcXVvdDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0 OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVs dmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4vYTxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQt c3BhY2UiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tYm90dG9tOjEyLjBwdCI+PGJy Pg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX188YnI+DQpz dGlyIG1haWxpbmcgbGlzdDxicj4NCjxhIGhyZWY9Im1haWx0bzpzdGlyQGlldGYub3JnIiB0YXJn ZXQ9Il9ibGFuayI+PHNwYW4gc3R5bGU9ImNvbG9yOnB1cnBsZSI+c3RpckBpZXRmLm9yZzwvc3Bh bj48L2E+PGJyPg0KPGEgaHJlZj0iaHR0cHM6Ly91cmxkZWZlbnNlLnByb29mcG9pbnQuY29tL3Yy L3VybD91PWh0dHBzLTNBX193d3cuaWV0Zi5vcmdfbWFpbG1hbl9saXN0aW5mb19zdGlyJmFtcDtk PUR3TUZhUSZhbXA7Yz1MRllaLW85X0hVTWVNVFNRaWN2aklnJmFtcDtyPUc5djh1Q1NTUWhDbXB3 N0l0RzByMmcmYW1wO209c2xLSUJZMzd5OHA0aUMzSmdqdXdEMVRJOU9nVzdRVEhXem1KVnlxeUpO ZyZhbXA7cz11NlFDcm5ta2p6cXh1NlEzWlRNNk1DVVBQandYRmJpWW5SUnRNcFpUWDZJJmFtcDtl PSIgdGFyZ2V0PSJfYmxhbmsiPjxzcGFuIHN0eWxlPSJjb2xvcjpwdXJwbGUiPmh0dHBzOi8vd3d3 LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vc3Rpcjwvc3Bhbj48L2E+PG86cD48L286cD48L3A+ DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJz cDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4N CjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8 L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+X19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX188YnI+DQpzdGlyIG1h aWxpbmcgbGlzdDxicj4NCjxhIGhyZWY9Im1haWx0bzpzdGlyQGlldGYub3JnIj5zdGlyQGlldGYu b3JnPC9hPjxicj4NCjxhIGhyZWY9Imh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGlu Zm8vc3RpciI+aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9zdGlyPC9hPjwv c3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8 L2JvZHk+DQo8L2h0bWw+DQo= --_000_7594FB04B1934943A5C02806D1A2204B6C2007D4ESESSMB109erics_-- From nobody Tue Mar 13 12:58:17 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 45232126CD6 for ; Tue, 13 Mar 2018 12:58:16 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.33 X-Spam-Level: X-Spam-Status: No, score=-2.33 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=1.989, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jit5LPCDv7fY for ; Tue, 13 Mar 2018 12:58:14 -0700 (PDT) Received: from sessmg22.ericsson.net (sessmg22.ericsson.net [193.180.251.58]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9A7E9120047 for ; Tue, 13 Mar 2018 12:58:13 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; d=ericsson.com; s=mailgw201801; c=relaxed/simple; q=dns/txt; i=@ericsson.com; t=1520971091; h=From:Sender:Reply-To:Subject:Date:Message-ID:To:CC:MIME-Version:Content-Type: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=zHSLkJNXWwB0yUNa/57lLgB51Ssj2EL+RTAc/Nkvgu8=; b=VjRDZ2Kjx+qJppJa7Z2epDnlgnsA47AanLnps1xNOdn44nfWAVIKYXE2uT1JwqTO 1qPq/Ga94Na9268jxOa4BaFpfEVHrtSTQyYZkvQe3+hqBqZ8zePBwa55gZwE3zeB /uE6nANOAAY5DIIlI3nHndCRKPe+NhyyEdX19G3CbxA=; X-AuditID: c1b4fb3a-728f89c0000067b4-c3-5aa82d53caf0 Received: from ESESSHC011.ericsson.se (Unknown_Domain [153.88.183.51]) by sessmg22.ericsson.net (Symantec Mail Security) with SMTP id 66.4E.26548.35D28AA5; Tue, 13 Mar 2018 20:58:11 +0100 (CET) Received: from ESESSMB109.ericsson.se ([169.254.9.172]) by ESESSHC011.ericsson.se ([153.88.183.51]) with mapi id 14.03.0382.000; Tue, 13 Mar 2018 20:58:11 +0100 From: Christer Holmberg To: "Politz, Ken" , Chris Wendt CC: "stir@ietf.org" , "adam@nostrum.com" Thread-Topic: [stir] PASSporT extensions: order of claims Thread-Index: AdO4Vc+a+PS/xYPIRfO1T1CAVYYAVAAHa1xAAJ5T3oAAA66kkP//+HEA///ksgA= Date: Tue, 13 Mar 2018 19:58:10 +0000 Message-ID: <7594FB04B1934943A5C02806D1A2204B6C200A0A@ESESSMB109.ericsson.se> References: <7594FB04B1934943A5C02806D1A2204B6C1D17C1@ESESSMB109.ericsson.se> <7594FB04B1934943A5C02806D1A2204B6C1D1804@ESESSMB109.ericsson.se> <8B0E0275-68BD-41E9-B128-589F13C06D66@chriswendt.net> <7594FB04B1934943A5C02806D1A2204B6C2007A0@ESESSMB109.ericsson.se> <46946849EEFF3043A8FBCC3D102A2C1A3FCADE50@stntexmb13.cis.neustar.com> In-Reply-To: <46946849EEFF3043A8FBCC3D102A2C1A3FCADE50@stntexmb13.cis.neustar.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [153.88.183.166] Content-Type: multipart/alternative; boundary="_000_7594FB04B1934943A5C02806D1A2204B6C200A0AESESSMB109erics_" MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFlrBIsWRmVeSWpSXmKPExsUyM2K7sW6w7ooog1kLLC32/F3EbjH9025m i80f1rJYLF+7jcmBxWNC3xpWjyVLfjJ5zNr5hMXj9YY57AEsUVw2Kak5mWWpRfp2CVwZi7p2 sRU82chYMWvePvYGxo61jF2MnBwSAiYS515uBrK5OIQEDjNKvJ/YxgrhLGGUeP7vP3MXIwcH m4CFRPc/bRBTRCBK4tFMYZBeZgEviU8LVjOBhIWBKr52GYCERQQsJSa/W88MYftJdC1uZwKx WQRUJWb86QZbyyvgK/Hyzj4WiE1XmSQW/JzLCpLgFAiSWLK2EayIUUBM4vupNUwQu8Qlbj2Z zwRxs4DEkj3nmSFsUYmXj/+xQthKEkdPX2KFqM+XOPCyjQ1imaDEyZlPWCYwisxCMmoWkrJZ SMpmAb3DLKApsX6XPkSJosSU7ofsELaGROucuezI4gsY2VcxihanFhfnphsZ6aUWZSYXF+fn 6eWllmxiBMbfwS2/rXYwHnzueIhRgINRiYd3m+KKKCHWxLLiytxDjBIczEoivFtlgEK8KYmV ValF+fFFpTmpxYcYpTlYlMR5ndIsooQE0hNLUrNTUwtSi2CyTBycUg2Mhd2zFyWlcUzZtr78 TadR+0yzmwmVPT3TvuY53zrGwRawX0ZQL2himHCVPJO9//HrDWrvr2eEiTlHTw5tqz742z9g o/Wt7Yv+FBjIfDFIuh3puMPg+aUX0Sb+OrmpM1X8nt+qstRVNEmsV3XI9DTcEV5tL+KscnOx 23WLiJgPPU5Pz4jqNimxFGckGmoxFxUnAgDZ6nviuwIAAA== Archived-At: Subject: Re: [stir] PASSporT extensions: order of claims X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 13 Mar 2018 19:58:16 -0000 --_000_7594FB04B1934943A5C02806D1A2204B6C200A0AESESSMB109erics_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGksDQoNCj5UcnkgUkZDIDgyMjUsIFNlY3Rpb24gOSwgcGVyaGFwcz8NCg0KT2ssIHNvIGlmIHRo YXTigJlzIGEgZ2VuZXJpYyBydWxlLCB3aHkgdGhlIHN0YXRlbWVudCBzYXlpbmcgdGhhdCBQQVNT cG9yVCBleHRlbnNpb25zIG11c3Qgc3BlY2lmeSB0aGUgb3JkZXI/DQoNClJlZ2FyZHMsDQoNCkNo cmlzdGVyDQoNCkZyb206IENocmlzdGVyIEhvbG1iZXJnIFttYWlsdG86Y2hyaXN0ZXIuaG9sbWJl cmdAZXJpY3Nzb24uY29tXQ0KU2VudDogVHVlc2RheSwgTWFyY2ggMTMsIDIwMTggMjo0NyBQTQ0K VG86IENocmlzIFdlbmR0IDxjaHJpcy1pZXRmQGNocmlzd2VuZHQubmV0PG1haWx0bzpjaHJpcy1p ZXRmQGNocmlzd2VuZHQubmV0Pj4NCkNjOiBzdGlyQGlldGYub3JnPG1haWx0bzpzdGlyQGlldGYu b3JnPjsgYWRhbUBub3N0cnVtLmNvbTxtYWlsdG86YWRhbUBub3N0cnVtLmNvbT4NClN1YmplY3Q6 IFJlOiBbc3Rpcl0gUEFTU3BvclQgZXh0ZW5zaW9uczogb3JkZXIgb2YgY2xhaW1zDQoNCkhpLA0K DQo+SSB3b3VsZCBhZ3JlZSB3aXRoIHRoZSB0ZXh0LCB0aGUgb25seSBjYXZlYXQgaSB3b3VsZCBw b2ludCBvdXQgaXMgdGhhdCB0aGUgZXh0ZW5zaW9uIGRlZmluaXRpb24gaGFzDQo+bm8gY2hvaWNl IHRvIHRoZSBvcmRlciBvdGhlciB0aGFuIGFscGhhYmV0aWMgb3JkZXIsIHNvIHRoZSBvcmRlciBp cyBlc3NlbnRpYWxseSBpbXBsaWVkLiAgU28sIGl04oCZcyBzb3J0DQo+b2YgYSB0ZWNobmljYWxp dHkgdGhhdCBtYXliZSB3ZSBkaWRu4oCZdCBhbnRpY2lwYXRlLCBidXQgaSB0aGluayB0ZWNobmlj YWxseSB5b3UgYXJlIGNvcnJlY3QuDQoNCk5vdCBzdXJlIEkgdW5kZXJzdGFuZCB0aGUgaGFzLW5v LWNob2ljZSBwYXJ0LiBXaGVyZSBpcyBpdCBzYWlkIHRoYXQgdGhlIGNsYWltcyBtdXN0IGJlIG9y ZGVyZWQgaW4gYWxwaGFiZXRpYyBvcmRlcj8gV2UgY291bGQgZm9yIHN1cmUgc3BlY2lmeSBpdCB0 aGF0IHdheSwgYnV0IGJhc2VkIG9uIHlvdXIgZS1tYWlsIGl0IHNlZW1zIGxpa2UgaXQgaXMgYWxy ZWFkeSBzcGVjaWZpZWQgc29tZXdoZXJlPw0KDQpSZWdhcmRzLA0KDQpDaHJpc3Rlcg0KDQoNCk9u IE1hciAxMCwgMjAxOCwgYXQgODoyNyBBTSwgQ2hyaXN0ZXIgSG9sbWJlcmcgPGNocmlzdGVyLmhv bG1iZXJnQGVyaWNzc29uLmNvbTxtYWlsdG86Y2hyaXN0ZXIuaG9sbWJlcmdAZXJpY3Nzb24uY29t Pj4gd3JvdGU6DQoNClNlY3Rpb24gOC4zIG9mIFJGQyA4MjI1LCB0aGF0IGlzLg0KDQpGcm9tOiBz dGlyIFttYWlsdG86c3Rpci1ib3VuY2VzQGlldGYub3JnXSBPbiBCZWhhbGYgT2YgQ2hyaXN0ZXIg SG9sbWJlcmcNClNlbnQ6IDEwIE1hcmNoIDIwMTggMTU6MjYNClRvOiBzdGlyQGlldGYub3JnPG1h aWx0bzpzdGlyQGlldGYub3JnPg0KQ2M6IGFkYW1Abm9zdHJ1bS5jb208bWFpbHRvOmFkYW1Abm9z dHJ1bS5jb20+DQpTdWJqZWN0OiBbc3Rpcl0gUEFTU3BvclQgZXh0ZW5zaW9uczogb3JkZXIgb2Yg Y2xhaW1zDQoNCkhpLA0KDQpTZWN0aW9uICBzYXlzOg0KDQogICDigJxTcGVjaWZpY2F0aW9ucyB0 aGF0IGRlZmluZSBleHRlbnNpb25zIHRvIHRoZSBQQVNTcG9yVCBtZWNoYW5pc20gTVVTVA0KICAg ZXhwbGljaXRseSBzcGVjaWZ5IHdoYXQgY2xhaW1zIHRoZXkgaW5jbHVkZSBiZXlvbmQgdGhlIGJh c2Ugc2V0IG9mDQogICBjbGFpbXMgZnJvbSB0aGlzIGRvY3VtZW50LCB0aGUgb3JkZXIgaW4gd2hp Y2ggdGhleSB3aWxsIGFwcGVhcizigKbigJ0NCg0KV2hlbiBsb29raW5nIGF0IHRoZSBleHRlbnNp b25zIHdlIGFyZSBjdXJyZW50bHkgd29ya2luZyBvbjoNCg0KZHJhZnQtaWV0Zi1zdGlyLXJwaC0w Mw0KZHJhZnQtaWV0Zi1zdGlyLXBhc3Nwb3J0LXNoYWtlbi0wMQ0KZHJhZnQtaWV0Zi1zdGlyLXBh c3Nwb3J0LWRpdmVydC0wMg0KDQrigKZJIGRvbuKAmXQgc2VlIGFueXRoaW5nIGFib3V0IHRoZSBv cmRlciBpbiBhbnkgb2YgdGhlIGRvY3VtZW50cy4NCg0KSSB0aGluayBpdCB3b3VsZCBiZSBnb29k IHRvIGhhdmUgYSBkZWRpY2F0ZWQg4oCcT3JkZXIgb2YgY2xhaW1z4oCdIHNlY3Rpb24sIG9yIHNv bWV0aGluZyBzaW1pbGFyLCBpbiBlYWNoIGV4dGVuc2lvbiBzcGVjaWZpY2F0aW9uLg0KDQpXaGVu IGxvb2tpbmcgYXQgdGhlIGV4YW1wbGVzIGluIHRoZSBkcmFmdHMgYWJvdmUsIGl0IHNlZW1zIGxp a2UgZXZlbiB0aGUgYmFzZSBjbGFpbXMgYXJlIGluIGRpZmZlcmVudCBvcmRlcnMuIE5vdCBzdXJl IHdoZXRoZXIgdGhlcmUgaXMgYW4gZXhwbGljaXQgcmVxdWlyZW1lbnQgdGhhdCB0aGV5IG5lZWQg dG8gYmUgaW4gb3JkZXIsIHRob3VnaHQuDQoNClJlZ2FyZHMsDQoNCkNocmlzdGVyDQoNCg0KX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCnN0aXIgbWFpbGlu ZyBsaXN0DQpzdGlyQGlldGYub3JnPG1haWx0bzpzdGlyQGlldGYub3JnPg0KaHR0cHM6Ly93d3cu aWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9zdGlyPGh0dHBzOi8vdXJsZGVmZW5zZS5wcm9vZnBv aW50LmNvbS92Mi91cmw/dT1odHRwcy0zQV9fd3d3LmlldGYub3JnX21haWxtYW5fbGlzdGluZm9f c3RpciZkPUR3TUdhUSZjPU1PcHRObFZ0SUVUZURBTENfbFVMcncmcj13dzFTOUJIRWNwRTRNTVVi Z0dRcnNvTC1TSzNVQ0dZMzNLb2FqMmg5ell3Jm09X0RCZG1VS3BrVUFVVnYxMjBQdUhvTXQtVFZ0 VHV6T0hzZkZRZEFXbWVGcyZzPXlZWTZrdk5TbHg3Vzg0blhMZllQN240UFNIMFM3VWlxM1ZLMkZJ Nml3RVUmZT0+DQoNCg== --_000_7594FB04B1934943A5C02806D1A2204B6C200A0AESESSMB109erics_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 SGVsdmV0aWNhOw0KCXBhbm9zZS0xOjIgMTEgNiA0IDIgMiAyIDIgMiA0O30NCkBmb250LWZhY2UN Cgl7Zm9udC1mYW1pbHk6IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAz IDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAx NSA1IDIgMiAyIDQgMyAyIDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFs LCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBjbTsNCgltYXJnaW4tYm90 dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseToiVGltZXMgTmV3 IFJvbWFuIixzZXJpZjt9DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1w cmlvcml0eTo5OTsNCgljb2xvcjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0K YTp2aXNpdGVkLCBzcGFuLk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0 eTo5OTsNCgljb2xvcjpwdXJwbGU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpzcGFu LmFwcGxlLWNvbnZlcnRlZC1zcGFjZQ0KCXttc28tc3R5bGUtbmFtZTphcHBsZS1jb252ZXJ0ZWQt c3BhY2U7fQ0Kc3Bhbi5FbWFpbFN0eWxlMTgNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWw7DQoJ Zm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJY29sb3I6IzFGNDk3RDt9DQpzcGFu LkVtYWlsU3R5bGUxOQ0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbDsNCglmb250LWZhbWlseToi Q2FsaWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjp3aW5kb3d0ZXh0O30NCnNwYW4uRW1haWxTdHls ZTIwDQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsOw0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixz YW5zLXNlcmlmOw0KCWNvbG9yOiMxRjQ5N0Q7fQ0Kc3Bhbi5FbWFpbFN0eWxlMjENCgl7bXNvLXN0 eWxlLXR5cGU6cGVyc29uYWwtcmVwbHk7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2Vy aWY7DQoJY29sb3I6IzFGNDk3RDt9DQouTXNvQ2hwRGVmYXVsdA0KCXttc28tc3R5bGUtdHlwZTpl eHBvcnQtb25seTsNCglmb250LXNpemU6MTAuMHB0O30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtz aXplOjYxMi4wcHQgNzkyLjBwdDsNCgltYXJnaW46NzIuMHB0IDcyLjBwdCA3Mi4wcHQgNzIuMHB0 O30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLS0+PC9zdHlsZT48 IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlZGVmYXVsdHMgdjpleHQ9ImVkaXQiIHNw aWRtYXg9IjEwMjYiIC8+DQo8L3htbD48IVtlbmRpZl0tLT48IS0tW2lmIGd0ZSBtc28gOV0+PHht bD4NCjxvOnNoYXBlbGF5b3V0IHY6ZXh0PSJlZGl0Ij4NCjxvOmlkbWFwIHY6ZXh0PSJlZGl0IiBk YXRhPSIxIiAvPg0KPC9vOnNoYXBlbGF5b3V0PjwveG1sPjwhW2VuZGlmXS0tPg0KPC9oZWFkPg0K PGJvZHkgbGFuZz0iRU4tR0IiIGxpbms9ImJsdWUiIHZsaW5rPSJwdXJwbGUiPg0KPGRpdiBjbGFz cz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtj b2xvcjojMUY0OTdEO21zby1mYXJlYXN0LWxhbmd1YWdlOkVOLVVTIj5IaSw8bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEx LjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFG NDk3RCI+Jmd0O1RyeSBSRkMgODIyNSwgU2VjdGlvbiA5LCBwZXJoYXBzPyZuYnNwOzxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBz dHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNh bnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0 OTdEIj5Paywgc28gaWYgdGhhdOKAmXMgYSBnZW5lcmljIHJ1bGUsIHdoeSB0aGUgc3RhdGVtZW50 IHNheWluZyB0aGF0IFBBU1Nwb3JUIGV4dGVuc2lvbnMgbXVzdCBzcGVjaWZ5IHRoZSBvcmRlcj88 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJF Ti1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZx dW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1z aXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29s b3I6IzFGNDk3RCI+UmVnYXJkcyw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9 IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJp JnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+Q2hyaXN0ZXI8bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlm O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXY+DQo8ZGl2 IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNFMUUxRTEgMS4wcHQ7cGFkZGlu ZzozLjBwdCAwY20gMGNtIDBjbSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBsYW5n PSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJy aSZxdW90OyxzYW5zLXNlcmlmIj5Gcm9tOjwvc3Bhbj48L2I+PHNwYW4gbGFuZz0iRU4tVVMiIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fu cy1zZXJpZiI+IENocmlzdGVyIEhvbG1iZXJnIFs8YSBocmVmPSJtYWlsdG86Y2hyaXN0ZXIuaG9s bWJlcmdAZXJpY3Nzb24uY29tIj5tYWlsdG86Y2hyaXN0ZXIuaG9sbWJlcmdAZXJpY3Nzb24uY29t PC9hPl0NCjxicj4NCjxiPlNlbnQ6PC9iPiBUdWVzZGF5LCBNYXJjaCAxMywgMjAxOCAyOjQ3IFBN PGJyPg0KPGI+VG86PC9iPiBDaHJpcyBXZW5kdCAmbHQ7PGEgaHJlZj0ibWFpbHRvOmNocmlzLWll dGZAY2hyaXN3ZW5kdC5uZXQiPmNocmlzLWlldGZAY2hyaXN3ZW5kdC5uZXQ8L2E+Jmd0Ozxicj4N CjxiPkNjOjwvYj4gPGEgaHJlZj0ibWFpbHRvOnN0aXJAaWV0Zi5vcmciPnN0aXJAaWV0Zi5vcmc8 L2E+OyA8YSBocmVmPSJtYWlsdG86YWRhbUBub3N0cnVtLmNvbSI+DQphZGFtQG5vc3RydW0uY29t PC9hPjxicj4NCjxiPlN1YmplY3Q6PC9iPiBSZTogW3N0aXJdIFBBU1Nwb3JUIGV4dGVuc2lvbnM6 IG9yZGVyIG9mIGNsYWltczxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD4mbmJzcDs8L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMx RjQ5N0QiPkhpLDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxv OnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jmd0O0kgd291bGQgYWdy ZWUgd2l0aCB0aGUgdGV4dCwgdGhlIG9ubHkgY2F2ZWF0IGkgd291bGQgcG9pbnQgb3V0IGlzIHRo YXQgdGhlIGV4dGVuc2lvbiBkZWZpbml0aW9uIGhhcw0KPG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTom cXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPiZndDs8L3NwYW4+bm8gY2hvaWNlIHRvIHRo ZSBvcmRlciBvdGhlciB0aGFuIGFscGhhYmV0aWMgb3JkZXIsIHNvIHRoZSBvcmRlciBpcyBlc3Nl bnRpYWxseSBpbXBsaWVkLiAmbmJzcDtTbywgaXTigJlzIHNvcnQNCjxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj4mZ3Q7PC9zcGFuPm9mIGEgdGVj aG5pY2FsaXR5IHRoYXQgbWF5YmUgd2UgZGlkbuKAmXQgYW50aWNpcGF0ZSwgYnV0IGkgdGhpbmsg dGVjaG5pY2FsbHkgeW91IGFyZSBjb3JyZWN0LjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+PG86cD48L286cD48 L3NwYW4+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5Ob3Qgc3VyZSBJIHVu ZGVyc3RhbmQgdGhlIGhhcy1uby1jaG9pY2UgcGFydC4gV2hlcmUgaXMgaXQgc2FpZCB0aGF0IHRo ZSBjbGFpbXMgbXVzdCBiZSBvcmRlcmVkIGluIGFscGhhYmV0aWMgb3JkZXI/IFdlIGNvdWxkIGZv ciBzdXJlIHNwZWNpZnkgaXQgdGhhdCB3YXksIGJ1dCBiYXNlZCBvbiB5b3VyDQogZS1tYWlsIGl0 IHNlZW1zIGxpa2UgaXQgaXMgYWxyZWFkeSBzcGVjaWZpZWQgc29tZXdoZXJlPzxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+PG86cD4m bmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNl cmlmIj5SZWdhcmRzLDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkm cXVvdDssc2Fucy1zZXJpZiI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5DaHJpc3RlcjxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+PG86cD4mbmJzcDs8L286 cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtYXJnaW4tYm90dG9tOjEyLjBwdCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8Ymxv Y2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5PbiBNYXIgMTAsIDIwMTgsIGF0IDg6MjcgQU0sIENo cmlzdGVyIEhvbG1iZXJnICZsdDs8YSBocmVmPSJtYWlsdG86Y2hyaXN0ZXIuaG9sbWJlcmdAZXJp Y3Nzb24uY29tIj5jaHJpc3Rlci5ob2xtYmVyZ0Blcmljc3Nvbi5jb208L2E+Jmd0OyB3cm90ZTo8 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8 L286cD48L3A+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1z ZXJpZjtjb2xvcjojMUY0OTdEIj5TZWN0aW9uIDguMyBvZiBSRkMgODIyNSwgdGhhdCBpcy48L3Nw YW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJy aSZxdW90OyxzYW5zLXNlcmlmIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+Jm5i c3A7PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjRTFFMUUx IDEuMHB0O3BhZGRpbmc6My4wcHQgMGNtIDBjbSAwY20iPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPkZyb206PC9zcGFuPjwvYj48 c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5z LXNlcmlmIj4mbmJzcDs8L3NwYW4+PC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9u dC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYi PnN0aXINCiBbPGEgaHJlZj0ibWFpbHRvOnN0aXItYm91bmNlc0BpZXRmLm9yZyI+bWFpbHRvOnN0 aXItYm91bmNlc0BpZXRmLm9yZzwvYT5dPHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFj ZSI+Jm5ic3A7PC9zcGFuPjxiPk9uIEJlaGFsZiBPZjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0 ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48L2I+Q2hyaXN0ZXIgSG9sbWJlcmc8YnI+DQo8Yj5TZW50 OjwvYj48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+MTAg TWFyY2ggMjAxOCAxNToyNjxicj4NCjxiPlRvOjwvYj48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVy dGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PGEgaHJlZj0ibWFpbHRvOnN0aXJAaWV0Zi5vcmciPnN0 aXJAaWV0Zi5vcmc8L2E+PGJyPg0KPGI+Q2M6PC9iPjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0 ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48YSBocmVmPSJtYWlsdG86YWRhbUBub3N0cnVtLmNvbSI+ YWRhbUBub3N0cnVtLmNvbTwvYT48YnI+DQo8Yj5TdWJqZWN0OjwvYj48c3BhbiBjbGFzcz0iYXBw bGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+W3N0aXJdIFBBU1Nwb3JUIGV4dGVuc2lv bnM6IG9yZGVyIG9mIGNsYWltczwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtm b250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPjxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxp YnJpJnF1b3Q7LHNhbnMtc2VyaWYiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+SGksPG86cD48 L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90 OyxzYW5zLXNlcmlmIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPlNlY3Rpb24mbmJzcDsgc2F5 czo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxp YnJpJnF1b3Q7LHNhbnMtc2VyaWYiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+Jm5ic3A7Jm5i c3A7IOKAnFNwZWNpZmljYXRpb25zIHRoYXQgZGVmaW5lIGV4dGVuc2lvbnMgdG8gdGhlIFBBU1Nw b3JUIG1lY2hhbmlzbSBNVVNUPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj4mbmJzcDsmbmJzcDsgZXhwbGlj aXRseSBzcGVjaWZ5IHdoYXQgY2xhaW1zIHRoZXkgaW5jbHVkZSBiZXlvbmQgdGhlIGJhc2Ugc2V0 IG9mPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2Fs aWJyaSZxdW90OyxzYW5zLXNlcmlmIj4mbmJzcDsmbmJzcDsgY2xhaW1zIGZyb20gdGhpcyBkb2N1 bWVudCw8c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PGI+ dGhlIG9yZGVyIGluIHdoaWNoIHRoZXkgd2lsbCBhcHBlYXI8L2I+LOKApuKAnTxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fu cy1zZXJpZiI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5XaGVuIGxvb2tpbmcgYXQgdGhlIGV4 dGVuc2lvbnMgd2UgYXJlIGN1cnJlbnRseSB3b3JraW5nIG9uOjxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+ Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5kcmFmdC1pZXRmLXN0aXItcnBoLTAzPG86cD48L286 cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90Oyxz YW5zLXNlcmlmIj5kcmFmdC1pZXRmLXN0aXItcGFzc3BvcnQtc2hha2VuLTAxPG86cD48L286cD48 L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5z LXNlcmlmIj5kcmFmdC1pZXRmLXN0aXItcGFzc3BvcnQtZGl2ZXJ0LTAyPG86cD48L286cD48L3Nw YW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNl cmlmIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTom cXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPuKApkkgZG9u4oCZdCBzZWUgYW55dGhpbmcg YWJvdXQgdGhlIG9yZGVyIGluIGFueSBvZiB0aGUgZG9jdW1lbnRzLjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJp ZiI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5JIHRoaW5rIGl0IHdvdWxkIGJlIGdvb2QgdG8g aGF2ZSBhIGRlZGljYXRlZCDigJxPcmRlciBvZiBjbGFpbXPigJ0gc2VjdGlvbiwgb3Igc29tZXRo aW5nIHNpbWlsYXIsIGluIGVhY2ggZXh0ZW5zaW9uIHNwZWNpZmljYXRpb24uPG86cD48L286cD48 L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5z LXNlcmlmIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWls eTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPldoZW4gbG9va2luZyBhdCB0aGUgZXhh bXBsZXMgaW4gdGhlIGRyYWZ0cyBhYm92ZSwgaXQgc2VlbXMgbGlrZSBldmVuIHRoZSBiYXNlIGNs YWltcyBhcmUgaW4gZGlmZmVyZW50IG9yZGVycy4gTm90IHN1cmUgd2hldGhlciB0aGVyZSBpcyBh biBleHBsaWNpdCByZXF1aXJlbWVudCB0aGF0IHRoZXkgbmVlZA0KIHRvIGJlIGluIG9yZGVyLCB0 aG91Z2h0LjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5SZWdh cmRzLDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nh bGlicmkmcXVvdDssc2Fucy1zZXJpZiI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5DaHJpc3Rl cjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGli cmkmcXVvdDssc2Fucy1zZXJpZiI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj4mbmJzcDs8bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNh bnMtc2VyaWYiPl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f PGJyPg0Kc3RpciBtYWlsaW5nIGxpc3Q8YnI+DQo8YSBocmVmPSJtYWlsdG86c3RpckBpZXRmLm9y ZyI+c3RpckBpZXRmLm9yZzwvYT48YnI+DQo8YSBocmVmPSJodHRwczovL3VybGRlZmVuc2UucHJv b2Zwb2ludC5jb20vdjIvdXJsP3U9aHR0cHMtM0FfX3d3dy5pZXRmLm9yZ19tYWlsbWFuX2xpc3Rp bmZvX3N0aXImYW1wO2Q9RHdNR2FRJmFtcDtjPU1PcHRObFZ0SUVUZURBTENfbFVMcncmYW1wO3I9 d3cxUzlCSEVjcEU0TU1VYmdHUXJzb0wtU0szVUNHWTMzS29hajJoOXpZdyZhbXA7bT1fREJkbVVL cGtVQVVWdjEyMFB1SG9NdC1UVnRUdXpPSHNmRlFkQVdtZUZzJmFtcDtzPXlZWTZrdk5TbHg3Vzg0 blhMZllQN240UFNIMFM3VWlxM1ZLMkZJNml3RVUmYW1wO2U9Ij5odHRwczovL3d3dy5pZXRmLm9y Zy9tYWlsbWFuL2xpc3RpbmZvL3N0aXI8L2E+PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_7594FB04B1934943A5C02806D1A2204B6C200A0AESESSMB109erics_-- From nobody Tue Mar 13 14:22:03 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5D5ED129C56 for ; Tue, 13 Mar 2018 12:19:05 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.01 X-Spam-Level: X-Spam-Status: No, score=-0.01 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=1.989, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=team.neustar Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ASDkcIPrC_wC for ; Tue, 13 Mar 2018 12:19:03 -0700 (PDT) Received: from mx0b-0018ba01.pphosted.com (mx0b-0018ba01.pphosted.com [67.231.157.90]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0484F129C6C for ; Tue, 13 Mar 2018 12:19:02 -0700 (PDT) Received: from pps.filterd (m0049401.ppops.net [127.0.0.1]) by mx0b-0018ba01.pphosted.com (8.16.0.22/8.16.0.22) with SMTP id w2DJF0OI005495; Tue, 13 Mar 2018 15:18:58 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=team.neustar; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : mime-version; s=selector1; bh=j5hKckGBSJWCG9hyQf2vOR+lBEgMmI34Qlvizu+IY8I=; b=fHiPhMsOX+vm/MpgdJIv4GC7w+EH2X/H/NVzRxUUBNTCPsc92ggCTRxLP3lCUPMSPBvv gBCVQMEAvsfdLyJwAQ3mhcJdXHASCg5pkVWFfIDNvo9f600HZUN8+Mrr8rtMq6pgbUn8 cL94FaHxvLJPMKOLvDmJM2uKAiiahZl5udqBoHzPZe/hWJHcW8sXaLQJvcpJz0oI9kgn UpybZx0RlXuwmkTzLOmsbM1QGhRv50uK9vQDYgsn0Zd/C7L34Dh0asKYa3upRMgj53DX BRqTF1V42ginAOlD+fIO7ssETFxy+BOs7vUVXJX6jWBxfm1p4jpa/9k3qKU3j1ucVQUE 9w== Received: from stntexhc11.cis.neustar.com ([156.154.17.216]) by mx0b-0018ba01.pphosted.com with ESMTP id 2gmcjf47kj-1 (version=TLSv1 cipher=ECDHE-RSA-AES256-SHA bits=256 verify=NOT); Tue, 13 Mar 2018 15:18:58 -0400 Received: from STNTEXMB13.cis.neustar.com ([169.254.3.141]) by stntexhc11.cis.neustar.com ([::1]) with mapi id 14.03.0279.002; Tue, 13 Mar 2018 15:18:57 -0400 From: "Politz, Ken" To: Christer Holmberg , Chris Wendt CC: "stir@ietf.org" , "adam@nostrum.com" Thread-Topic: [stir] PASSporT extensions: order of claims Thread-Index: AQHTuvvKLoGLTt5520aG5ALLxR8fX6POigGA Date: Tue, 13 Mar 2018 19:18:56 +0000 Message-ID: <46946849EEFF3043A8FBCC3D102A2C1A3FCADE50@stntexmb13.cis.neustar.com> References: <7594FB04B1934943A5C02806D1A2204B6C1D17C1@ESESSMB109.ericsson.se> <7594FB04B1934943A5C02806D1A2204B6C1D1804@ESESSMB109.ericsson.se> <8B0E0275-68BD-41E9-B128-589F13C06D66@chriswendt.net> <7594FB04B1934943A5C02806D1A2204B6C2007A0@ESESSMB109.ericsson.se> In-Reply-To: <7594FB04B1934943A5C02806D1A2204B6C2007A0@ESESSMB109.ericsson.se> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.96.9.94] Content-Type: multipart/alternative; boundary="_000_46946849EEFF3043A8FBCC3D102A2C1A3FCADE50stntexmb13cisne_" MIME-Version: 1.0 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:, , definitions=2018-03-13_08:, , signatures=0 X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1011 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1711220000 definitions=main-1803130214 Archived-At: X-Mailman-Approved-At: Tue, 13 Mar 2018 14:22:01 -0700 Subject: Re: [stir] PASSporT extensions: order of claims X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 13 Mar 2018 19:19:05 -0000 --_000_46946849EEFF3043A8FBCC3D102A2C1A3FCADE50stntexmb13cisne_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 VHJ5IFJGQyA4MjI1LCBTZWN0aW9uIDksIHBlcmhhcHM/ICBLZW4uDQoNCkZyb206IENocmlzdGVy IEhvbG1iZXJnIFttYWlsdG86Y2hyaXN0ZXIuaG9sbWJlcmdAZXJpY3Nzb24uY29tXQ0KU2VudDog VHVlc2RheSwgTWFyY2ggMTMsIDIwMTggMjo0NyBQTQ0KVG86IENocmlzIFdlbmR0IDxjaHJpcy1p ZXRmQGNocmlzd2VuZHQubmV0Pg0KQ2M6IHN0aXJAaWV0Zi5vcmc7IGFkYW1Abm9zdHJ1bS5jb20N ClN1YmplY3Q6IFJlOiBbc3Rpcl0gUEFTU3BvclQgZXh0ZW5zaW9uczogb3JkZXIgb2YgY2xhaW1z DQoNCkhpLA0KDQo+SSB3b3VsZCBhZ3JlZSB3aXRoIHRoZSB0ZXh0LCB0aGUgb25seSBjYXZlYXQg aSB3b3VsZCBwb2ludCBvdXQgaXMgdGhhdCB0aGUgZXh0ZW5zaW9uIGRlZmluaXRpb24gaGFzDQo+ bm8gY2hvaWNlIHRvIHRoZSBvcmRlciBvdGhlciB0aGFuIGFscGhhYmV0aWMgb3JkZXIsIHNvIHRo ZSBvcmRlciBpcyBlc3NlbnRpYWxseSBpbXBsaWVkLiAgU28sIGl04oCZcyBzb3J0DQo+b2YgYSB0 ZWNobmljYWxpdHkgdGhhdCBtYXliZSB3ZSBkaWRu4oCZdCBhbnRpY2lwYXRlLCBidXQgaSB0aGlu ayB0ZWNobmljYWxseSB5b3UgYXJlIGNvcnJlY3QuDQoNCk5vdCBzdXJlIEkgdW5kZXJzdGFuZCB0 aGUgaGFzLW5vLWNob2ljZSBwYXJ0LiBXaGVyZSBpcyBpdCBzYWlkIHRoYXQgdGhlIGNsYWltcyBt dXN0IGJlIG9yZGVyZWQgaW4gYWxwaGFiZXRpYyBvcmRlcj8gV2UgY291bGQgZm9yIHN1cmUgc3Bl Y2lmeSBpdCB0aGF0IHdheSwgYnV0IGJhc2VkIG9uIHlvdXIgZS1tYWlsIGl0IHNlZW1zIGxpa2Ug aXQgaXMgYWxyZWFkeSBzcGVjaWZpZWQgc29tZXdoZXJlPw0KDQpSZWdhcmRzLA0KDQpDaHJpc3Rl cg0KDQoNCk9uIE1hciAxMCwgMjAxOCwgYXQgODoyNyBBTSwgQ2hyaXN0ZXIgSG9sbWJlcmcgPGNo cmlzdGVyLmhvbG1iZXJnQGVyaWNzc29uLmNvbTxtYWlsdG86Y2hyaXN0ZXIuaG9sbWJlcmdAZXJp Y3Nzb24uY29tPj4gd3JvdGU6DQoNClNlY3Rpb24gOC4zIG9mIFJGQyA4MjI1LCB0aGF0IGlzLg0K DQpGcm9tOiBzdGlyIFttYWlsdG86c3Rpci1ib3VuY2VzQGlldGYub3JnXSBPbiBCZWhhbGYgT2Yg Q2hyaXN0ZXIgSG9sbWJlcmcNClNlbnQ6IDEwIE1hcmNoIDIwMTggMTU6MjYNClRvOiBzdGlyQGll dGYub3JnPG1haWx0bzpzdGlyQGlldGYub3JnPg0KQ2M6IGFkYW1Abm9zdHJ1bS5jb208bWFpbHRv OmFkYW1Abm9zdHJ1bS5jb20+DQpTdWJqZWN0OiBbc3Rpcl0gUEFTU3BvclQgZXh0ZW5zaW9uczog b3JkZXIgb2YgY2xhaW1zDQoNCkhpLA0KDQpTZWN0aW9uICBzYXlzOg0KDQogICDigJxTcGVjaWZp Y2F0aW9ucyB0aGF0IGRlZmluZSBleHRlbnNpb25zIHRvIHRoZSBQQVNTcG9yVCBtZWNoYW5pc20g TVVTVA0KICAgZXhwbGljaXRseSBzcGVjaWZ5IHdoYXQgY2xhaW1zIHRoZXkgaW5jbHVkZSBiZXlv bmQgdGhlIGJhc2Ugc2V0IG9mDQogICBjbGFpbXMgZnJvbSB0aGlzIGRvY3VtZW50LCB0aGUgb3Jk ZXIgaW4gd2hpY2ggdGhleSB3aWxsIGFwcGVhcizigKbigJ0NCg0KV2hlbiBsb29raW5nIGF0IHRo ZSBleHRlbnNpb25zIHdlIGFyZSBjdXJyZW50bHkgd29ya2luZyBvbjoNCg0KZHJhZnQtaWV0Zi1z dGlyLXJwaC0wMw0KZHJhZnQtaWV0Zi1zdGlyLXBhc3Nwb3J0LXNoYWtlbi0wMQ0KZHJhZnQtaWV0 Zi1zdGlyLXBhc3Nwb3J0LWRpdmVydC0wMg0KDQrigKZJIGRvbuKAmXQgc2VlIGFueXRoaW5nIGFi b3V0IHRoZSBvcmRlciBpbiBhbnkgb2YgdGhlIGRvY3VtZW50cy4NCg0KSSB0aGluayBpdCB3b3Vs ZCBiZSBnb29kIHRvIGhhdmUgYSBkZWRpY2F0ZWQg4oCcT3JkZXIgb2YgY2xhaW1z4oCdIHNlY3Rp b24sIG9yIHNvbWV0aGluZyBzaW1pbGFyLCBpbiBlYWNoIGV4dGVuc2lvbiBzcGVjaWZpY2F0aW9u Lg0KDQpXaGVuIGxvb2tpbmcgYXQgdGhlIGV4YW1wbGVzIGluIHRoZSBkcmFmdHMgYWJvdmUsIGl0 IHNlZW1zIGxpa2UgZXZlbiB0aGUgYmFzZSBjbGFpbXMgYXJlIGluIGRpZmZlcmVudCBvcmRlcnMu IE5vdCBzdXJlIHdoZXRoZXIgdGhlcmUgaXMgYW4gZXhwbGljaXQgcmVxdWlyZW1lbnQgdGhhdCB0 aGV5IG5lZWQgdG8gYmUgaW4gb3JkZXIsIHRob3VnaHQuDQoNClJlZ2FyZHMsDQoNCkNocmlzdGVy DQoNCg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCnN0 aXIgbWFpbGluZyBsaXN0DQpzdGlyQGlldGYub3JnPG1haWx0bzpzdGlyQGlldGYub3JnPg0KaHR0 cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9zdGlyPGh0dHBzOi8vdXJsZGVmZW5z ZS5wcm9vZnBvaW50LmNvbS92Mi91cmw/dT1odHRwcy0zQV9fd3d3LmlldGYub3JnX21haWxtYW5f bGlzdGluZm9fc3RpciZkPUR3TUdhUSZjPU1PcHRObFZ0SUVUZURBTENfbFVMcncmcj13dzFTOUJI RWNwRTRNTVViZ0dRcnNvTC1TSzNVQ0dZMzNLb2FqMmg5ell3Jm09X0RCZG1VS3BrVUFVVnYxMjBQ dUhvTXQtVFZ0VHV6T0hzZkZRZEFXbWVGcyZzPXlZWTZrdk5TbHg3Vzg0blhMZllQN240UFNIMFM3 VWlxM1ZLMkZJNml3RVUmZT0+DQoNCg== --_000_46946849EEFF3043A8FBCC3D102A2C1A3FCADE50stntexmb13cisne_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 SGVsdmV0aWNhOw0KCXBhbm9zZS0xOjIgMTEgNiA0IDIgMiAyIDIgMiA0O30NCkBmb250LWZhY2UN Cgl7Zm9udC1mYW1pbHk6SGVsdmV0aWNhOw0KCXBhbm9zZS0xOjIgMTEgNiA0IDIgMiAyIDIgMiA0 O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1IDUg MiAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxp Lk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGluOw0KCW1hcmdpbi1ib3R0b206 LjAwMDFwdDsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9t YW4iLHNlcmlmO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXByaW9y aXR5Ojk5Ow0KCWNvbG9yOmJsdWU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQphOnZp c2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5 Ow0KCWNvbG9yOnB1cnBsZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCnNwYW4uYXBw bGUtY29udmVydGVkLXNwYWNlDQoJe21zby1zdHlsZS1uYW1lOmFwcGxlLWNvbnZlcnRlZC1zcGFj ZTt9DQpzcGFuLkVtYWlsU3R5bGUxOA0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbDsNCglmb250 LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjojMUY0OTdEO30NCnNwYW4uRW1h aWxTdHlsZTE5DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsOw0KCWZvbnQtZmFtaWx5OiJDYWxp YnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0Kc3Bhbi5FbWFpbFN0eWxlMjAN Cgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWwtcmVwbHk7DQoJZm9udC1mYW1pbHk6IkNhbGlicmki LHNhbnMtc2VyaWY7DQoJY29sb3I6IzFGNDk3RDt9DQouTXNvQ2hwRGVmYXVsdA0KCXttc28tc3R5 bGUtdHlwZTpleHBvcnQtb25seTsNCglmb250LXNpemU6MTAuMHB0O30NCkBwYWdlIFdvcmRTZWN0 aW9uMQ0KCXtzaXplOjguNWluIDExLjBpbjsNCgltYXJnaW46MS4waW4gMS4waW4gMS4waW4gMS4w aW47fQ0KZGl2LldvcmRTZWN0aW9uMQ0KCXtwYWdlOldvcmRTZWN0aW9uMTt9DQotLT48L3N0eWxl PjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVkZWZhdWx0cyB2OmV4dD0iZWRpdCIg c3BpZG1heD0iMTAyNiIgLz4NCjwveG1sPjwhW2VuZGlmXS0tPjwhLS1baWYgZ3RlIG1zbyA5XT48 eG1sPg0KPG86c2hhcGVsYXlvdXQgdjpleHQ9ImVkaXQiPg0KPG86aWRtYXAgdjpleHQ9ImVkaXQi IGRhdGE9IjEiIC8+DQo8L286c2hhcGVsYXlvdXQ+PC94bWw+PCFbZW5kaWZdLS0+DQo8L2hlYWQ+ DQo8Ym9keSBsYW5nPSJFTi1VUyIgbGluaz0iYmx1ZSIgdmxpbms9InB1cnBsZSI+DQo8ZGl2IGNs YXNzPSJXb3JkU2VjdGlvbjEiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlm O2NvbG9yOiMxRjQ5N0QiPlRyeSBSRkMgODIyNSwgU2VjdGlvbiA5LCBwZXJoYXBzPyZuYnNwOyBL ZW4uPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5z LXNlcmlmO2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXY+ DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNFMUUxRTEgMS4wcHQ7 cGFkZGluZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7 LHNhbnMtc2VyaWYiPkZyb206PC9zcGFuPjwvYj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPiBDaHJpc3RlciBI b2xtYmVyZyBbbWFpbHRvOmNocmlzdGVyLmhvbG1iZXJnQGVyaWNzc29uLmNvbV0NCjxicj4NCjxi PlNlbnQ6PC9iPiBUdWVzZGF5LCBNYXJjaCAxMywgMjAxOCAyOjQ3IFBNPGJyPg0KPGI+VG86PC9i PiBDaHJpcyBXZW5kdCAmbHQ7Y2hyaXMtaWV0ZkBjaHJpc3dlbmR0Lm5ldCZndDs8YnI+DQo8Yj5D Yzo8L2I+IHN0aXJAaWV0Zi5vcmc7IGFkYW1Abm9zdHJ1bS5jb208YnI+DQo8Yj5TdWJqZWN0Ojwv Yj4gUmU6IFtzdGlyXSBQQVNTcG9yVCBleHRlbnNpb25zOiBvcmRlciBvZiBjbGFpbXM8bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86 cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1H QiIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90 OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPkhpLDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIj48bzpwPiZuYnNwOzwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiI+Jmd0O0kg d291bGQgYWdyZWUgd2l0aCB0aGUgdGV4dCwgdGhlIG9ubHkgY2F2ZWF0IGkgd291bGQgcG9pbnQg b3V0IGlzIHRoYXQgdGhlIGV4dGVuc2lvbiBkZWZpbml0aW9uIGhhcw0KPG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJm b250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJp ZiI+Jmd0Ozwvc3Bhbj48c3BhbiBsYW5nPSJFTi1HQiI+bm8gY2hvaWNlIHRvIHRoZSBvcmRlciBv dGhlciB0aGFuIGFscGhhYmV0aWMgb3JkZXIsIHNvIHRoZSBvcmRlciBpcyBlc3NlbnRpYWxseSBp bXBsaWVkLiAmbmJzcDtTbywgaXTigJlzIHNvcnQNCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iZm9udC1zaXplOjEx LjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPiZndDs8L3Nw YW4+PHNwYW4gbGFuZz0iRU4tR0IiPm9mIGEgdGVjaG5pY2FsaXR5IHRoYXQgbWF5YmUgd2UgZGlk buKAmXQgYW50aWNpcGF0ZSwgYnV0IGkgdGhpbmsgdGVjaG5pY2FsbHkgeW91IGFyZSBjb3JyZWN0 Ljwvc3Bhbj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj48bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9 IkVOLUdCIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJp JnF1b3Q7LHNhbnMtc2VyaWYiPk5vdCBzdXJlIEkgdW5kZXJzdGFuZCB0aGUgaGFzLW5vLWNob2lj ZSBwYXJ0LiBXaGVyZSBpcyBpdCBzYWlkIHRoYXQgdGhlIGNsYWltcyBtdXN0IGJlIG9yZGVyZWQg aW4gYWxwaGFiZXRpYyBvcmRlcj8gV2UgY291bGQgZm9yIHN1cmUgc3BlY2lmeSBpdCB0aGF0IHdh eSwgYnV0DQogYmFzZWQgb24geW91ciBlLW1haWwgaXQgc2VlbXMgbGlrZSBpdCBpcyBhbHJlYWR5 IHNwZWNpZmllZCBzb21ld2hlcmU/PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+PG86cD4mbmJzcDs8L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxl PSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1z ZXJpZiI+UmVnYXJkcyw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImZvbnQt c2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5D aHJpc3RlcjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IGxhbmc9IkVOLUdCIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtD YWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWJv dHRvbToxMi4wcHQiPjxzcGFuIGxhbmc9IkVOLUdCIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48 L3A+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUu MHB0Ij4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiI+T24g TWFyIDEwLCAyMDE4LCBhdCA4OjI3IEFNLCBDaHJpc3RlciBIb2xtYmVyZyAmbHQ7PGEgaHJlZj0i bWFpbHRvOmNocmlzdGVyLmhvbG1iZXJnQGVyaWNzc29uLmNvbSI+Y2hyaXN0ZXIuaG9sbWJlcmdA ZXJpY3Nzb24uY29tPC9hPiZndDsgd3JvdGU6PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiI+PG86cD4mbmJzcDs8L286 cD48L3NwYW4+PC9wPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBs YW5nPSJFTi1HQiIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2Fs aWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPlNlY3Rpb24gOC4zIG9mIFJGQyA4 MjI1LCB0aGF0IGlzLjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj48bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBsYW5nPSJFTi1HQiIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48c3Bh biBsYW5nPSJFTi1HQiIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNFMUUxRTEg MS4wcHQ7cGFkZGluZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5Gcm9tOjwvc3Bhbj48L2I+PHNwYW4gY2xhc3M9ImFw cGxlLWNvbnZlcnRlZC1zcGFjZSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj4mbmJzcDs8L3NwYW4+PC9zcGFu PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkm cXVvdDssc2Fucy1zZXJpZiI+c3Rpcg0KIFs8YSBocmVmPSJtYWlsdG86c3Rpci1ib3VuY2VzQGll dGYub3JnIj5tYWlsdG86c3Rpci1ib3VuY2VzQGlldGYub3JnPC9hPl08c3BhbiBjbGFzcz0iYXBw bGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PGI+T24gQmVoYWxmIE9mPHNwYW4gY2xh c3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjwvYj5DaHJpc3RlciBIb2xt YmVyZzxicj4NCjxiPlNlbnQ6PC9iPjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2Ui PiZuYnNwOzwvc3Bhbj4xMCBNYXJjaCAyMDE4IDE1OjI2PGJyPg0KPGI+VG86PC9iPjxzcGFuIGNs YXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48YSBocmVmPSJtYWlsdG86 c3RpckBpZXRmLm9yZyI+c3RpckBpZXRmLm9yZzwvYT48YnI+DQo8Yj5DYzo8L2I+PHNwYW4gY2xh c3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxhIGhyZWY9Im1haWx0bzph ZGFtQG5vc3RydW0uY29tIj5hZGFtQG5vc3RydW0uY29tPC9hPjxicj4NCjxiPlN1YmplY3Q6PC9i PjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj5bc3Rpcl0g UEFTU3BvclQgZXh0ZW5zaW9uczogb3JkZXIgb2YgY2xhaW1zPC9zcGFuPjxzcGFuIGxhbmc9IkVO LUdCIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1 b3Q7LHNhbnMtc2VyaWYiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5z LXNlcmlmIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5IaSw8bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBsYW5nPSJFTi1HQiIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5z LXNlcmlmIj5TZWN0aW9uJm5ic3A7IHNheXM6PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJm b250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJp ZiI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+Jm5ic3A7Jm5ic3A7IOKA nFNwZWNpZmljYXRpb25zIHRoYXQgZGVmaW5lIGV4dGVuc2lvbnMgdG8gdGhlIFBBU1Nwb3JUIG1l Y2hhbmlzbSBNVVNUPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+Jm5ic3A7Jm5ic3A7 IGV4cGxpY2l0bHkgc3BlY2lmeSB3aGF0IGNsYWltcyB0aGV5IGluY2x1ZGUgYmV5b25kIHRoZSBi YXNlIHNldCBvZjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtm b250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPiZuYnNwOyZuYnNwOyBj bGFpbXMgZnJvbSB0aGlzIGRvY3VtZW50LDxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3Bh Y2UiPiZuYnNwOzwvc3Bhbj48Yj50aGUgb3JkZXIgaW4gd2hpY2ggdGhleSB3aWxsIGFwcGVhcjwv Yj4s4oCm4oCdPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+Jm5ic3A7PG86cD48L286 cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g bGFuZz0iRU4tR0IiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nh bGlicmkmcXVvdDssc2Fucy1zZXJpZiI+V2hlbiBsb29raW5nIGF0IHRoZSBleHRlbnNpb25zIHdl IGFyZSBjdXJyZW50bHkgd29ya2luZyBvbjo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlm Ij4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5kcmFmdC1pZXRmLXN0aXIt cnBoLTAzPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+ZHJhZnQtaWV0Zi1zdGlyLXBh c3Nwb3J0LXNoYWtlbi0wMTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iZm9udC1zaXplOjEx LjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPmRyYWZ0LWll dGYtc3Rpci1wYXNzcG9ydC1kaXZlcnQtMDI8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlm Ij4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj7igKZJIGRvbuKAmXQgc2Vl IGFueXRoaW5nIGFib3V0IHRoZSBvcmRlciBpbiBhbnkgb2YgdGhlIGRvY3VtZW50cy48bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBsYW5nPSJFTi1HQiIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5z LXNlcmlmIj5JIHRoaW5rIGl0IHdvdWxkIGJlIGdvb2QgdG8gaGF2ZSBhIGRlZGljYXRlZCDigJxP cmRlciBvZiBjbGFpbXPigJ0gc2VjdGlvbiwgb3Igc29tZXRoaW5nIHNpbWlsYXIsIGluIGVhY2gg ZXh0ZW5zaW9uIHNwZWNpZmljYXRpb24uPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJmb250 LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+ Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+V2hlbiBsb29raW5nIGF0IHRo ZSBleGFtcGxlcyBpbiB0aGUgZHJhZnRzIGFib3ZlLCBpdCBzZWVtcyBsaWtlIGV2ZW4gdGhlIGJh c2UgY2xhaW1zIGFyZSBpbiBkaWZmZXJlbnQgb3JkZXJzLiBOb3Qgc3VyZSB3aGV0aGVyIHRoZXJl IGlzIGFuIGV4cGxpY2l0IHJlcXVpcmVtZW50DQogdGhhdCB0aGV5IG5lZWQgdG8gYmUgaW4gb3Jk ZXIsIHRob3VnaHQuPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+Jm5ic3A7PG86cD48 L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+UmVnYXJkcyw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIg c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90Oyxz YW5zLXNlcmlmIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5DaHJpc3Rl cjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWls eTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVO LUdCIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1 b3Q7LHNhbnMtc2VyaWYiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJmb250LXNpemU6OS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPl9fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fPGJyPg0Kc3RpciBtYWlsaW5n IGxpc3Q8YnI+DQo8YSBocmVmPSJtYWlsdG86c3RpckBpZXRmLm9yZyI+c3RpckBpZXRmLm9yZzwv YT48YnI+DQo8YSBocmVmPSJodHRwczovL3VybGRlZmVuc2UucHJvb2Zwb2ludC5jb20vdjIvdXJs P3U9aHR0cHMtM0FfX3d3dy5pZXRmLm9yZ19tYWlsbWFuX2xpc3RpbmZvX3N0aXImYW1wO2Q9RHdN R2FRJmFtcDtjPU1PcHRObFZ0SUVUZURBTENfbFVMcncmYW1wO3I9d3cxUzlCSEVjcEU0TU1VYmdH UXJzb0wtU0szVUNHWTMzS29hajJoOXpZdyZhbXA7bT1fREJkbVVLcGtVQVVWdjEyMFB1SG9NdC1U VnRUdXpPSHNmRlFkQVdtZUZzJmFtcDtzPXlZWTZrdk5TbHg3Vzg0blhMZllQN240UFNIMFM3VWlx M1ZLMkZJNml3RVUmYW1wO2U9Ij5odHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZv L3N0aXI8L2E+PC9zcGFuPjxzcGFuIGxhbmc9IkVOLUdCIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gbGFuZz0iRU4tR0IiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9k aXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_46946849EEFF3043A8FBCC3D102A2C1A3FCADE50stntexmb13cisne_-- From nobody Tue Mar 13 14:50:45 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 56DDD120713 for ; Tue, 13 Mar 2018 14:35:34 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.01 X-Spam-Level: X-Spam-Status: No, score=-0.01 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=1.989, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=team.neustar Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RqmE7CiP0gDG for ; Tue, 13 Mar 2018 14:35:32 -0700 (PDT) Received: from mx0b-0018ba01.pphosted.com (mx0a-0018ba01.pphosted.com [67.231.149.94]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8B437120454 for ; Tue, 13 Mar 2018 14:35:32 -0700 (PDT) Received: from pps.filterd (m0078664.ppops.net [127.0.0.1]) by mx0a-0018ba01.pphosted.com (8.16.0.22/8.16.0.22) with SMTP id w2DLXmh8029818; Tue, 13 Mar 2018 17:35:28 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=team.neustar; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : mime-version; s=selector1; bh=AZRrWUBnjHxDQUv+YdjvLSbixGx0+ClEwMjKSSMNO8I=; b=dwcg9VOT0M0B9TfWOMsXVxWns3lwmZGazG1rYwcYQWTjxsvhAFCnzsrQb677Yw9aMTdh sL8+SVpL2KKRfU2h4qUK88UgiT4NLP4wA0QVT16XShB/xVOoJjYtnm3AUmiz3xVo+qnK xKO9MvHQMfP/vb1PtY0eci+UXvNnB8+3QykjBel4Y6PKp7X8T9VRAYfFvzN9lRJmTkc8 UXgtD0C4SN+ITL4ddIC7N0xCXp8paHZVaulcczItJZ/FSw6qhG1uiGlPdiObAkcvneDd BvYWSZqDSnJCszZ3+C5GNP2f7TQybUOrMJ00SUTJMw8AvH5H3IK6wXyNXTZ32wb2EfbH /g== Received: from stntexhc10.cis.neustar.com ([156.154.17.216]) by mx0a-0018ba01.pphosted.com with ESMTP id 2gmaw34uet-1 (version=TLSv1 cipher=ECDHE-RSA-AES256-SHA bits=256 verify=NOT); Tue, 13 Mar 2018 17:35:28 -0400 Received: from STNTEXMB13.cis.neustar.com ([169.254.3.141]) by stntexhc10.cis.neustar.com ([10.31.58.69]) with mapi id 14.03.0279.002; Tue, 13 Mar 2018 17:35:26 -0400 From: "Politz, Ken" To: Christer Holmberg , Chris Wendt CC: "stir@ietf.org" , "adam@nostrum.com" Thread-Topic: [stir] PASSporT extensions: order of claims Thread-Index: AQHTuvvKLoGLTt5520aG5ALLxR8fX6POigGAgABOTgCAABsrQA== Date: Tue, 13 Mar 2018 21:35:25 +0000 Message-ID: <46946849EEFF3043A8FBCC3D102A2C1A3FCAE30D@stntexmb13.cis.neustar.com> References: <7594FB04B1934943A5C02806D1A2204B6C1D17C1@ESESSMB109.ericsson.se> <7594FB04B1934943A5C02806D1A2204B6C1D1804@ESESSMB109.ericsson.se> <8B0E0275-68BD-41E9-B128-589F13C06D66@chriswendt.net> <7594FB04B1934943A5C02806D1A2204B6C2007A0@ESESSMB109.ericsson.se> <46946849EEFF3043A8FBCC3D102A2C1A3FCADE50@stntexmb13.cis.neustar.com> <7594FB04B1934943A5C02806D1A2204B6C200A0A@ESESSMB109.ericsson.se> In-Reply-To: <7594FB04B1934943A5C02806D1A2204B6C200A0A@ESESSMB109.ericsson.se> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.96.9.94] Content-Type: multipart/alternative; boundary="_000_46946849EEFF3043A8FBCC3D102A2C1A3FCAE30Dstntexmb13cisne_" MIME-Version: 1.0 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:, , definitions=2018-03-13_09:, , signatures=0 X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1015 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1711220000 definitions=main-1803130240 Archived-At: X-Mailman-Approved-At: Tue, 13 Mar 2018 14:50:44 -0700 Subject: Re: [stir] PASSporT extensions: order of claims X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 13 Mar 2018 21:35:34 -0000 --_000_46946849EEFF3043A8FBCC3D102A2C1A3FCAE30Dstntexmb13cisne_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 VGhhdCwgSSBjYW7igJl0IGFuc3dlciDimLoNCg0KRnJvbTogQ2hyaXN0ZXIgSG9sbWJlcmcgW21h aWx0bzpjaHJpc3Rlci5ob2xtYmVyZ0Blcmljc3Nvbi5jb21dDQpTZW50OiBUdWVzZGF5LCBNYXJj aCAxMywgMjAxOCAzOjU4IFBNDQpUbzogUG9saXR6LCBLZW4gPEtlbm5ldGguUG9saXR6QHRlYW0u bmV1c3Rhcj47IENocmlzIFdlbmR0IDxjaHJpcy1pZXRmQGNocmlzd2VuZHQubmV0Pg0KQ2M6IHN0 aXJAaWV0Zi5vcmc7IGFkYW1Abm9zdHJ1bS5jb20NClN1YmplY3Q6IFJlOiBbc3Rpcl0gUEFTU3Bv clQgZXh0ZW5zaW9uczogb3JkZXIgb2YgY2xhaW1zDQoNCkhpLA0KDQo+VHJ5IFJGQyA4MjI1LCBT ZWN0aW9uIDksIHBlcmhhcHM/DQoNCk9rLCBzbyBpZiB0aGF04oCZcyBhIGdlbmVyaWMgcnVsZSwg d2h5IHRoZSBzdGF0ZW1lbnQgc2F5aW5nIHRoYXQgUEFTU3BvclQgZXh0ZW5zaW9ucyBtdXN0IHNw ZWNpZnkgdGhlIG9yZGVyPw0KDQpSZWdhcmRzLA0KDQpDaHJpc3Rlcg0KDQpGcm9tOiBDaHJpc3Rl ciBIb2xtYmVyZyBbbWFpbHRvOmNocmlzdGVyLmhvbG1iZXJnQGVyaWNzc29uLmNvbV0NClNlbnQ6 IFR1ZXNkYXksIE1hcmNoIDEzLCAyMDE4IDI6NDcgUE0NClRvOiBDaHJpcyBXZW5kdCA8Y2hyaXMt aWV0ZkBjaHJpc3dlbmR0Lm5ldDxtYWlsdG86Y2hyaXMtaWV0ZkBjaHJpc3dlbmR0Lm5ldD4+DQpD Yzogc3RpckBpZXRmLm9yZzxtYWlsdG86c3RpckBpZXRmLm9yZz47IGFkYW1Abm9zdHJ1bS5jb208 bWFpbHRvOmFkYW1Abm9zdHJ1bS5jb20+DQpTdWJqZWN0OiBSZTogW3N0aXJdIFBBU1Nwb3JUIGV4 dGVuc2lvbnM6IG9yZGVyIG9mIGNsYWltcw0KDQpIaSwNCg0KPkkgd291bGQgYWdyZWUgd2l0aCB0 aGUgdGV4dCwgdGhlIG9ubHkgY2F2ZWF0IGkgd291bGQgcG9pbnQgb3V0IGlzIHRoYXQgdGhlIGV4 dGVuc2lvbiBkZWZpbml0aW9uIGhhcw0KPm5vIGNob2ljZSB0byB0aGUgb3JkZXIgb3RoZXIgdGhh biBhbHBoYWJldGljIG9yZGVyLCBzbyB0aGUgb3JkZXIgaXMgZXNzZW50aWFsbHkgaW1wbGllZC4g IFNvLCBpdOKAmXMgc29ydA0KPm9mIGEgdGVjaG5pY2FsaXR5IHRoYXQgbWF5YmUgd2UgZGlkbuKA mXQgYW50aWNpcGF0ZSwgYnV0IGkgdGhpbmsgdGVjaG5pY2FsbHkgeW91IGFyZSBjb3JyZWN0Lg0K DQpOb3Qgc3VyZSBJIHVuZGVyc3RhbmQgdGhlIGhhcy1uby1jaG9pY2UgcGFydC4gV2hlcmUgaXMg aXQgc2FpZCB0aGF0IHRoZSBjbGFpbXMgbXVzdCBiZSBvcmRlcmVkIGluIGFscGhhYmV0aWMgb3Jk ZXI/IFdlIGNvdWxkIGZvciBzdXJlIHNwZWNpZnkgaXQgdGhhdCB3YXksIGJ1dCBiYXNlZCBvbiB5 b3VyIGUtbWFpbCBpdCBzZWVtcyBsaWtlIGl0IGlzIGFscmVhZHkgc3BlY2lmaWVkIHNvbWV3aGVy ZT8NCg0KUmVnYXJkcywNCg0KQ2hyaXN0ZXINCg0KDQpPbiBNYXIgMTAsIDIwMTgsIGF0IDg6Mjcg QU0sIENocmlzdGVyIEhvbG1iZXJnIDxjaHJpc3Rlci5ob2xtYmVyZ0Blcmljc3Nvbi5jb208bWFp bHRvOmNocmlzdGVyLmhvbG1iZXJnQGVyaWNzc29uLmNvbT4+IHdyb3RlOg0KDQpTZWN0aW9uIDgu MyBvZiBSRkMgODIyNSwgdGhhdCBpcy4NCg0KRnJvbTogc3RpciBbbWFpbHRvOnN0aXItYm91bmNl c0BpZXRmLm9yZ10gT24gQmVoYWxmIE9mIENocmlzdGVyIEhvbG1iZXJnDQpTZW50OiAxMCBNYXJj aCAyMDE4IDE1OjI2DQpUbzogc3RpckBpZXRmLm9yZzxtYWlsdG86c3RpckBpZXRmLm9yZz4NCkNj OiBhZGFtQG5vc3RydW0uY29tPG1haWx0bzphZGFtQG5vc3RydW0uY29tPg0KU3ViamVjdDogW3N0 aXJdIFBBU1Nwb3JUIGV4dGVuc2lvbnM6IG9yZGVyIG9mIGNsYWltcw0KDQpIaSwNCg0KU2VjdGlv biAgc2F5czoNCg0KICAg4oCcU3BlY2lmaWNhdGlvbnMgdGhhdCBkZWZpbmUgZXh0ZW5zaW9ucyB0 byB0aGUgUEFTU3BvclQgbWVjaGFuaXNtIE1VU1QNCiAgIGV4cGxpY2l0bHkgc3BlY2lmeSB3aGF0 IGNsYWltcyB0aGV5IGluY2x1ZGUgYmV5b25kIHRoZSBiYXNlIHNldCBvZg0KICAgY2xhaW1zIGZy b20gdGhpcyBkb2N1bWVudCwgdGhlIG9yZGVyIGluIHdoaWNoIHRoZXkgd2lsbCBhcHBlYXIs4oCm 4oCdDQoNCldoZW4gbG9va2luZyBhdCB0aGUgZXh0ZW5zaW9ucyB3ZSBhcmUgY3VycmVudGx5IHdv cmtpbmcgb246DQoNCmRyYWZ0LWlldGYtc3Rpci1ycGgtMDMNCmRyYWZ0LWlldGYtc3Rpci1wYXNz cG9ydC1zaGFrZW4tMDENCmRyYWZ0LWlldGYtc3Rpci1wYXNzcG9ydC1kaXZlcnQtMDINCg0K4oCm SSBkb27igJl0IHNlZSBhbnl0aGluZyBhYm91dCB0aGUgb3JkZXIgaW4gYW55IG9mIHRoZSBkb2N1 bWVudHMuDQoNCkkgdGhpbmsgaXQgd291bGQgYmUgZ29vZCB0byBoYXZlIGEgZGVkaWNhdGVkIOKA nE9yZGVyIG9mIGNsYWltc+KAnSBzZWN0aW9uLCBvciBzb21ldGhpbmcgc2ltaWxhciwgaW4gZWFj aCBleHRlbnNpb24gc3BlY2lmaWNhdGlvbi4NCg0KV2hlbiBsb29raW5nIGF0IHRoZSBleGFtcGxl cyBpbiB0aGUgZHJhZnRzIGFib3ZlLCBpdCBzZWVtcyBsaWtlIGV2ZW4gdGhlIGJhc2UgY2xhaW1z IGFyZSBpbiBkaWZmZXJlbnQgb3JkZXJzLiBOb3Qgc3VyZSB3aGV0aGVyIHRoZXJlIGlzIGFuIGV4 cGxpY2l0IHJlcXVpcmVtZW50IHRoYXQgdGhleSBuZWVkIHRvIGJlIGluIG9yZGVyLCB0aG91Z2h0 Lg0KDQpSZWdhcmRzLA0KDQpDaHJpc3Rlcg0KDQoNCl9fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fDQpzdGlyIG1haWxpbmcgbGlzdA0Kc3RpckBpZXRmLm9yZzxt YWlsdG86c3RpckBpZXRmLm9yZz4NCmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGlu Zm8vc3RpcjxodHRwczovL3VybGRlZmVuc2UucHJvb2Zwb2ludC5jb20vdjIvdXJsP3U9aHR0cHMt M0FfX3d3dy5pZXRmLm9yZ19tYWlsbWFuX2xpc3RpbmZvX3N0aXImZD1Ed01HYVEmYz1NT3B0TmxW dElFVGVEQUxDX2xVTHJ3JnI9d3cxUzlCSEVjcEU0TU1VYmdHUXJzb0wtU0szVUNHWTMzS29hajJo OXpZdyZtPV9EQmRtVUtwa1VBVVZ2MTIwUHVIb010LVRWdFR1ek9Ic2ZGUWRBV21lRnMmcz15WVk2 a3ZOU2x4N1c4NG5YTGZZUDduNFBTSDBTN1VpcTNWSzJGSTZpd0VVJmU9Pg0KDQo= --_000_46946849EEFF3043A8FBCC3D102A2C1A3FCAE30Dstntexmb13cisne_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 SGVsdmV0aWNhOw0KCXBhbm9zZS0xOjIgMTEgNiA0IDIgMiAyIDIgMiA0O30NCkBmb250LWZhY2UN Cgl7Zm9udC1mYW1pbHk6V2luZ2RpbmdzOw0KCXBhbm9zZS0xOjUgMCAwIDAgMCAwIDAgMCAwIDA7 fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToy IDQgNSAzIDUgNCA2IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsN CglwYW5vc2UtMToyIDE1IDUgMiAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAq Lw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGlu Ow0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFt aWx5OiJUaW1lcyBOZXcgUm9tYW4iLHNlcmlmO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsN Cgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOmJsdWU7DQoJdGV4dC1kZWNvcmF0aW9u OnVuZGVybGluZTt9DQphOnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNv LXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOnB1cnBsZTsNCgl0ZXh0LWRlY29yYXRpb246dW5k ZXJsaW5lO30NCnNwYW4uYXBwbGUtY29udmVydGVkLXNwYWNlDQoJe21zby1zdHlsZS1uYW1lOmFw cGxlLWNvbnZlcnRlZC1zcGFjZTt9DQpzcGFuLkVtYWlsU3R5bGUxOA0KCXttc28tc3R5bGUtdHlw ZTpwZXJzb25hbDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjoj MUY0OTdEO30NCnNwYW4uRW1haWxTdHlsZTE5DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsOw0K CWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0K c3Bhbi5FbWFpbFN0eWxlMjANCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWw7DQoJZm9udC1mYW1p bHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJY29sb3I6IzFGNDk3RDt9DQpzcGFuLkVtYWlsU3R5 bGUyMQ0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIs c2Fucy1zZXJpZjsNCgljb2xvcjojMUY0OTdEO30NCnNwYW4uRW1haWxTdHlsZTIyDQoJe21zby1z dHlsZS10eXBlOnBlcnNvbmFsLXJlcGx5Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNl cmlmOw0KCWNvbG9yOiMxRjQ5N0Q7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6 ZXhwb3J0LW9ubHk7DQoJZm9udC1zaXplOjEwLjBwdDt9DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7 c2l6ZTo4LjVpbiAxMS4waW47DQoJbWFyZ2luOjEuMGluIDEuMGluIDEuMGluIDEuMGluO30NCmRp di5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLS0+PC9zdHlsZT48IS0tW2lm IGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlZGVmYXVsdHMgdjpleHQ9ImVkaXQiIHNwaWRtYXg9 IjEwMjYiIC8+DQo8L3htbD48IVtlbmRpZl0tLT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxv OnNoYXBlbGF5b3V0IHY6ZXh0PSJlZGl0Ij4NCjxvOmlkbWFwIHY6ZXh0PSJlZGl0IiBkYXRhPSIx IiAvPg0KPC9vOnNoYXBlbGF5b3V0PjwveG1sPjwhW2VuZGlmXS0tPg0KPC9oZWFkPg0KPGJvZHkg bGFuZz0iRU4tVVMiIGxpbms9ImJsdWUiIHZsaW5rPSJwdXJwbGUiPg0KPGRpdiBjbGFzcz0iV29y ZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjoj MUY0OTdEIj5UaGF0LCBJIGNhbuKAmXQgYW5zd2VyDQo8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6V2luZ2RpbmdzO2NvbG9yOiMxRjQ5N0QiPko8L3NwYW4+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZx dW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj48bzpwPiZu YnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9y ZGVyLXRvcDpzb2xpZCAjRTFFMUUxIDEuMHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5Gcm9tOjwvc3Bhbj48L2I+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZx dW90OyxzYW5zLXNlcmlmIj4gQ2hyaXN0ZXIgSG9sbWJlcmcgW21haWx0bzpjaHJpc3Rlci5ob2xt YmVyZ0Blcmljc3Nvbi5jb21dDQo8YnI+DQo8Yj5TZW50OjwvYj4gVHVlc2RheSwgTWFyY2ggMTMs IDIwMTggMzo1OCBQTTxicj4NCjxiPlRvOjwvYj4gUG9saXR6LCBLZW4gJmx0O0tlbm5ldGguUG9s aXR6QHRlYW0ubmV1c3RhciZndDs7IENocmlzIFdlbmR0ICZsdDtjaHJpcy1pZXRmQGNocmlzd2Vu ZHQubmV0Jmd0Ozxicj4NCjxiPkNjOjwvYj4gc3RpckBpZXRmLm9yZzsgYWRhbUBub3N0cnVtLmNv bTxicj4NCjxiPlN1YmplY3Q6PC9iPiBSZTogW3N0aXJdIFBBU1Nwb3JUIGV4dGVuc2lvbnM6IG9y ZGVyIG9mIGNsYWltczxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWls eTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+SGksPG86cD48 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0Ii PjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDss c2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj4mZ3Q7VHJ5IFJGQyA4MjI1LCBTZWN0aW9uIDksIHBl cmhhcHM/Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZx dW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj5P aywgc28gaWYgdGhhdOKAmXMgYSBnZW5lcmljIHJ1bGUsIHdoeSB0aGUgc3RhdGVtZW50IHNheWlu ZyB0aGF0IFBBU1Nwb3JUIGV4dGVuc2lvbnMgbXVzdCBzcGVjaWZ5IHRoZSBvcmRlcj88bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29s b3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2Fs aWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPlJlZ2FyZHMsPG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMx RjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkm cXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj5DaHJpc3RlcjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdE Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVy Om5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjRTFFMUUxIDEuMHB0O3BhZGRpbmc6My4wcHQgMGluIDBp biAwaW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5Gcm9tOjwv c3Bhbj48L2I+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj4gQ2hyaXN0ZXIgSG9sbWJlcmcgWzxhIGhyZWY9Im1h aWx0bzpjaHJpc3Rlci5ob2xtYmVyZ0Blcmljc3Nvbi5jb20iPm1haWx0bzpjaHJpc3Rlci5ob2xt YmVyZ0Blcmljc3Nvbi5jb208L2E+XQ0KPGJyPg0KPGI+U2VudDo8L2I+IFR1ZXNkYXksIE1hcmNo IDEzLCAyMDE4IDI6NDcgUE08YnI+DQo8Yj5Ubzo8L2I+IENocmlzIFdlbmR0ICZsdDs8YSBocmVm PSJtYWlsdG86Y2hyaXMtaWV0ZkBjaHJpc3dlbmR0Lm5ldCI+Y2hyaXMtaWV0ZkBjaHJpc3dlbmR0 Lm5ldDwvYT4mZ3Q7PGJyPg0KPGI+Q2M6PC9iPiA8YSBocmVmPSJtYWlsdG86c3RpckBpZXRmLm9y ZyI+c3RpckBpZXRmLm9yZzwvYT47IDxhIGhyZWY9Im1haWx0bzphZGFtQG5vc3RydW0uY29tIj4N CmFkYW1Abm9zdHJ1bS5jb208L2E+PGJyPg0KPGI+U3ViamVjdDo8L2I+IFJlOiBbc3Rpcl0gUEFT U3BvclQgZXh0ZW5zaW9uczogb3JkZXIgb2YgY2xhaW1zPG86cD48L286cD48L3NwYW4+PC9wPg0K PC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJmb250LXNp emU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xv cjojMUY0OTdEIj5IaSw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBsYW5nPSJFTi1HQiI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiPiZndDtJIHdvdWxkIGFncmVlIHdpdGgg dGhlIHRleHQsIHRoZSBvbmx5IGNhdmVhdCBpIHdvdWxkIHBvaW50IG91dCBpcyB0aGF0IHRoZSBl eHRlbnNpb24gZGVmaW5pdGlvbiBoYXMNCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtm b250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPiZndDs8L3NwYW4+PHNw YW4gbGFuZz0iRU4tR0IiPm5vIGNob2ljZSB0byB0aGUgb3JkZXIgb3RoZXIgdGhhbiBhbHBoYWJl dGljIG9yZGVyLCBzbyB0aGUgb3JkZXIgaXMgZXNzZW50aWFsbHkgaW1wbGllZC4gJm5ic3A7U28s IGl04oCZcyBzb3J0DQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj4mZ3Q7PC9zcGFuPjxzcGFuIGxhbmc9IkVO LUdCIj5vZiBhIHRlY2huaWNhbGl0eSB0aGF0IG1heWJlIHdlIGRpZG7igJl0IGFudGljaXBhdGUs IGJ1dCBpIHRoaW5rIHRlY2huaWNhbGx5IHlvdSBhcmUgY29ycmVjdC48L3NwYW4+PHNwYW4gbGFu Zz0iRU4tR0IiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGli cmkmcXVvdDssc2Fucy1zZXJpZiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlm Ij5Ob3Qgc3VyZSBJIHVuZGVyc3RhbmQgdGhlIGhhcy1uby1jaG9pY2UgcGFydC4gV2hlcmUgaXMg aXQgc2FpZCB0aGF0IHRoZSBjbGFpbXMgbXVzdCBiZSBvcmRlcmVkIGluIGFscGhhYmV0aWMgb3Jk ZXI/IFdlIGNvdWxkIGZvciBzdXJlIHNwZWNpZnkgaXQgdGhhdCB3YXksIGJ1dA0KIGJhc2VkIG9u IHlvdXIgZS1tYWlsIGl0IHNlZW1zIGxpa2UgaXQgaXMgYWxyZWFkeSBzcGVjaWZpZWQgc29tZXdo ZXJlPzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxh bmc9IkVOLUdCIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxp YnJpJnF1b3Q7LHNhbnMtc2VyaWYiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iZm9udC1zaXplOjExLjBw dDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPlJlZ2FyZHMsPG86 cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4t R0IiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVv dDssc2Fucy1zZXJpZiI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+Q2hyaXN0ZXI8bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5z LXNlcmlmIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1ib3R0b206MTIuMHB0Ij48c3Bh biBsYW5nPSJFTi1HQiI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPGJsb2NrcXVvdGUg c3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiPk9uIE1hciAxMCwgMjAxOCwgYXQg ODoyNyBBTSwgQ2hyaXN0ZXIgSG9sbWJlcmcgJmx0OzxhIGhyZWY9Im1haWx0bzpjaHJpc3Rlci5o b2xtYmVyZ0Blcmljc3Nvbi5jb20iPmNocmlzdGVyLmhvbG1iZXJnQGVyaWNzc29uLmNvbTwvYT4m Z3Q7IHdyb3RlOjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxk aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxl PSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1z ZXJpZjtjb2xvcjojMUY0OTdEIj5TZWN0aW9uIDguMyBvZiBSRkMgODIyNSwgdGhhdCBpcy48L3Nw YW4+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+PG86cD48L286cD48L3NwYW4+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fu cy1zZXJpZjtjb2xvcjojMUY0OTdEIj4mbmJzcDs8L3NwYW4+PHNwYW4gbGFuZz0iRU4tR0IiIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fu cy1zZXJpZiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdiBzdHls ZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjRTFFMUUxIDEuMHB0O3BhZGRpbmc6My4w cHQgMGluIDBpbiAwaW4iPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fu cy1zZXJpZiI+RnJvbTo8L3NwYW4+PC9iPjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3Bh Y2UiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGli cmkmcXVvdDssc2Fucy1zZXJpZiI+Jm5ic3A7PC9zcGFuPjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYi PnN0aXINCiBbPGEgaHJlZj0ibWFpbHRvOnN0aXItYm91bmNlc0BpZXRmLm9yZyI+bWFpbHRvOnN0 aXItYm91bmNlc0BpZXRmLm9yZzwvYT5dPHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFj ZSI+Jm5ic3A7PC9zcGFuPjxiPk9uIEJlaGFsZiBPZjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0 ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48L2I+Q2hyaXN0ZXIgSG9sbWJlcmc8YnI+DQo8Yj5TZW50 OjwvYj48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+MTAg TWFyY2ggMjAxOCAxNToyNjxicj4NCjxiPlRvOjwvYj48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVy dGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PGEgaHJlZj0ibWFpbHRvOnN0aXJAaWV0Zi5vcmciPnN0 aXJAaWV0Zi5vcmc8L2E+PGJyPg0KPGI+Q2M6PC9iPjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0 ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48YSBocmVmPSJtYWlsdG86YWRhbUBub3N0cnVtLmNvbSI+ YWRhbUBub3N0cnVtLmNvbTwvYT48YnI+DQo8Yj5TdWJqZWN0OjwvYj48c3BhbiBjbGFzcz0iYXBw bGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+W3N0aXJdIFBBU1Nwb3JUIGV4dGVuc2lv bnM6IG9yZGVyIG9mIGNsYWltczwvc3Bhbj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImZvbnQt c2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj48 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJmb250LXNpemU6MTEu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+Jm5ic3A7PG86 cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+SGksPG86cD48L286cD48L3NwYW4+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fu cy1zZXJpZiI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJmb250LXNpemU6MTEu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+U2VjdGlvbiZu YnNwOyBzYXlzOjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtm b250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPiZuYnNwOzxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IGxhbmc9IkVOLUdCIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtD YWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPiZuYnNwOyZuYnNwOyDigJxTcGVjaWZpY2F0aW9ucyB0 aGF0IGRlZmluZSBleHRlbnNpb25zIHRvIHRoZSBQQVNTcG9yVCBtZWNoYW5pc20gTVVTVDxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVv dDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPiZuYnNwOyZuYnNwOyBleHBsaWNpdGx5IHNwZWNp Znkgd2hhdCBjbGFpbXMgdGhleSBpbmNsdWRlIGJleW9uZCB0aGUgYmFzZSBzZXQgb2Y8bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBsYW5nPSJFTi1HQiIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj4mbmJzcDsmbmJzcDsgY2xhaW1zIGZyb20gdGhpcyBk b2N1bWVudCw8c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+ PGI+dGhlIG9yZGVyIGluIHdoaWNoIHRoZXkgd2lsbCBhcHBlYXI8L2I+LOKApuKAnTxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IGxhbmc9IkVOLUdCIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtD YWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHls ZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMt c2VyaWYiPldoZW4gbG9va2luZyBhdCB0aGUgZXh0ZW5zaW9ucyB3ZSBhcmUgY3VycmVudGx5IHdv cmtpbmcgb246PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+Jm5ic3A7PG86cD48L286 cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g bGFuZz0iRU4tR0IiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nh bGlicmkmcXVvdDssc2Fucy1zZXJpZiI+ZHJhZnQtaWV0Zi1zdGlyLXJwaC0wMzxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxh bmc9IkVOLUdCIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxp YnJpJnF1b3Q7LHNhbnMtc2VyaWYiPmRyYWZ0LWlldGYtc3Rpci1wYXNzcG9ydC1zaGFrZW4tMDE8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5kcmFmdC1pZXRmLXN0aXItcGFzc3BvcnQt ZGl2ZXJ0LTAyPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+Jm5ic3A7PG86cD48L286 cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g bGFuZz0iRU4tR0IiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nh bGlicmkmcXVvdDssc2Fucy1zZXJpZiI+4oCmSSBkb27igJl0IHNlZSBhbnl0aGluZyBhYm91dCB0 aGUgb3JkZXIgaW4gYW55IG9mIHRoZSBkb2N1bWVudHMuPG86cD48L286cD48L3NwYW4+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fu cy1zZXJpZiI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJmb250LXNpemU6MTEu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+SSB0aGluayBp dCB3b3VsZCBiZSBnb29kIHRvIGhhdmUgYSBkZWRpY2F0ZWQg4oCcT3JkZXIgb2YgY2xhaW1z4oCd IHNlY3Rpb24sIG9yIHNvbWV0aGluZyBzaW1pbGFyLCBpbiBlYWNoIGV4dGVuc2lvbiBzcGVjaWZp Y2F0aW9uLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPiZuYnNwOzxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxh bmc9IkVOLUdCIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxp YnJpJnF1b3Q7LHNhbnMtc2VyaWYiPldoZW4gbG9va2luZyBhdCB0aGUgZXhhbXBsZXMgaW4gdGhl IGRyYWZ0cyBhYm92ZSwgaXQgc2VlbXMgbGlrZSBldmVuIHRoZSBiYXNlIGNsYWltcyBhcmUgaW4g ZGlmZmVyZW50IG9yZGVycy4gTm90IHN1cmUgd2hldGhlciB0aGVyZSBpcyBhbiBleHBsaWNpdCBy ZXF1aXJlbWVudA0KIHRoYXQgdGhleSBuZWVkIHRvIGJlIGluIG9yZGVyLCB0aG91Z2h0LjxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVv dDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBz dHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNh bnMtc2VyaWYiPlJlZ2FyZHMsPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJmb250LXNpemU6 MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+Jm5ic3A7 PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+Q2hyaXN0ZXI8bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJF Ti1HQiIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZx dW90OyxzYW5zLXNlcmlmIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImZvbnQt c2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj4m bmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlmIj5fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fXzxicj4NCnN0aXIgbWFpbGluZyBsaXN0PGJyPg0KPGEgaHJl Zj0ibWFpbHRvOnN0aXJAaWV0Zi5vcmciPnN0aXJAaWV0Zi5vcmc8L2E+PGJyPg0KPGEgaHJlZj0i aHR0cHM6Ly91cmxkZWZlbnNlLnByb29mcG9pbnQuY29tL3YyL3VybD91PWh0dHBzLTNBX193d3cu aWV0Zi5vcmdfbWFpbG1hbl9saXN0aW5mb19zdGlyJmFtcDtkPUR3TUdhUSZhbXA7Yz1NT3B0TmxW dElFVGVEQUxDX2xVTHJ3JmFtcDtyPXd3MVM5QkhFY3BFNE1NVWJnR1Fyc29MLVNLM1VDR1kzM0tv YWoyaDl6WXcmYW1wO209X0RCZG1VS3BrVUFVVnYxMjBQdUhvTXQtVFZ0VHV6T0hzZkZRZEFXbWVG cyZhbXA7cz15WVk2a3ZOU2x4N1c4NG5YTGZZUDduNFBTSDBTN1VpcTNWSzJGSTZpd0VVJmFtcDtl PSI+aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9zdGlyPC9hPjwvc3Bhbj48 c3BhbiBsYW5nPSJFTi1HQiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Jsb2Nr cXVvdGU+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIj48 bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9o dG1sPg0K --_000_46946849EEFF3043A8FBCC3D102A2C1A3FCAE30Dstntexmb13cisne_-- From nobody Wed Mar 14 00:53:25 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F389B126DFF for ; Wed, 14 Mar 2018 00:53:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.32 X-Spam-Level: X-Spam-Status: No, score=-4.32 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3YlO08v58eLt for ; Wed, 14 Mar 2018 00:53:22 -0700 (PDT) Received: from sessmg22.ericsson.net (sessmg22.ericsson.net [193.180.251.58]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C95811200C5 for ; Wed, 14 Mar 2018 00:53:21 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; d=ericsson.com; s=mailgw201801; c=relaxed/simple; q=dns/txt; i=@ericsson.com; t=1521013999; h=From:Sender:Reply-To:Subject:Date:Message-ID:To:Cc:MIME-Version:Content-Type: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=FLIewZGkW67bjsQ8Yo8iaZrdrI5vkPncRnRBwCv7Z7Y=; b=HW/A8hSvGFnjZLFku32Y5zCCPHFHxSYTa+jGGLd5jDgFfuSAi6eVJHV00s52cW4g SJ5L5/m+fqAEJ5Le866VnDxwFwkqcQfcHBH/MNGJveF9Ns3hsNUaXjiW4TEo6+VO mQnPqeFz7iHNDExfCCBzplgbsrPXngQ9U+GnMzqnzZU=; X-AuditID: c1b4fb3a-347ff700000067b4-c4-5aa8d4ef8a44 Received: from ESESSHC008.ericsson.se (Unknown_Domain [153.88.183.42]) by sessmg22.ericsson.net (Symantec Mail Security) with SMTP id A6.E4.26548.FE4D8AA5; Wed, 14 Mar 2018 08:53:19 +0100 (CET) Received: from ESESSMB109.ericsson.se ([169.254.9.172]) by ESESSHC008.ericsson.se ([153.88.183.42]) with mapi id 14.03.0382.000; Wed, 14 Mar 2018 08:53:18 +0100 From: Christer Holmberg To: "stir@ietf.org" Thread-Topic: Comments on draft-stir-callback Thread-Index: AQHTtR6koGFWqP8WoE6Onck/KJHQHw== Date: Wed, 14 Mar 2018 07:53:18 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.7.7.170905 x-originating-ip: [153.88.183.19] Content-Type: multipart/alternative; boundary="_000_D6C415C72C225christerholmbergericssoncom_" MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFmpgkeLIzCtJLcpLzFFi42KZGbFdS/f9lRVRBt8bDCyWr93G5MDosWTJ T6YAxigum5TUnMyy1CJ9uwSujHerfjMV3J7GXLHi4xy2Bsabr5i6GDk5JARMJO6smsXcxcjF ISRwmFHi6trTjBDOEkaJaRP/snYxcnCwCVhIdP/TBmkQEVCW2LLuDjuILSygIdF1fAc7RFxX 4tKKyUwQtp7Ex523WUBsFgFViXdXprGC2LwC1hJ3Lt9jBLEZBcQkvp9aA1bPLCAucevJfKiD BCSW7DnPDGGLSrx8/A+sVxRo5oYTt9kh4ooS7U8bGCF6EyQWb94JNV9Q4uTMJywTGIVmIRk7 C0nZLCRlEHEDiffn5jND2NoSyxa+hrL1JTZ+OcsIYVtLtOxpYERWs4CRYxWjaHFqcXFuupGR XmpRZnJxcX6eXl5qySZGYLwc3PLbagfjweeOhxgFOBiVeHgbLq2IEmJNLCuuzD3EKMHBrCTC u1UGKMSbklhZlVqUH19UmpNafIhRmoNFSZzXKc0iSkggPbEkNTs1tSC1CCbLxMEp1cCYzbHn WP5xwzsTLkU1Wpb3xJRM//DYPf/rnaeme/eqn/2m2Hb/ibi3j/IznWDppK3sMd2b2Oq+vN57 6gD73Kd3GJ77cWt3T/joa7gl7ZH9necnlh18eb3Y8GEZ3/uVH/YmVVycVcx5IVgit+WudvvG j7vvW35Wn7F2w8K24tSs9l8nN4o1u4kdVWIpzkg01GIuKk4EAEcYFFOTAgAA Archived-At: Subject: [stir] Comments on draft-stir-callback X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Mar 2018 07:53:24 -0000 --_000_D6C415C72C225christerholmbergericssoncom_ Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable Hi, On a high-level, for a =93temporary solution=94, I think this would take qu= ite a bit of effort to deploy. Shouldn=92t the focus be on getting the "cer= tificate systems" up and running? Also, how does this relate to activities like SHAKEN? Anyway, assuming this would be needed, I have some comments on the protocol= parts. First, even though I do consider myself more pragmatic than purist, I think= usage of INVITE, and the usage of error response codes to return the verif= ication result, is a really ugly hack. Second, there are also some operational issues with using INVITE: 1. Good old forking: The callback/verifying INVITE might get forked, and= the terminating agent may receive a non-471/472 response. 2. SDP: The draft requires SDP in the INVITE, but at the same time says = that it=92s not used for anything. If so, why is it mandated? Because offer= less INVITEs might get rejected? SDP in INVITE might trigger media resource= s etc to be reserved. 3. Section 7.3 talks about attacks by the agent receiving the callback/v= erifying INVITE, but it does not cover the case where the agent would send = a 200 OK response =96 which would establish a session and could trigger cha= rging. Alternatively, the attacker could remove the option-tag and forward = the request somewhere. All this without the originally called party knowing= anything. The terminating agent can of course terminate such =93call" as s= oon as it gets the 200 OK, but it may already have triggered some charging = etc. Third, did the authors consider other mechanisms? For example, is there a r= eason e.g., SUB/NOT couldn=92t be used for this? It would have none of the = INVITE issues above (yes, a SUB can also get forked, but the client will re= ceive NOT from each remote peer). Finally, it seems like the callback request (whatever SIP method is used) c= ontains the called party in the From header field. Is there a technical rea= son why that is needed, or is it just for convenience? Thanks! Regards, Christer --_000_D6C415C72C225christerholmbergericssoncom_ Content-Type: text/html; charset="Windows-1252" Content-ID: <4743E7E69ACF1B4FBFE75C47BD8FBB0D@ericsson.com> Content-Transfer-Encoding: quoted-printable

Hi,

 

On a high-level, for a =93temporary solution=94, I think this = would take quite a bit of effort to deploy. Shouldn=92t the focus be on getting the "certificate systems" up and running? 

 

Also, how does this relate to activities like SHAKEN?

 


Anyway, assuming this would be needed, I have some commen= ts on the protocol parts.

 

First, even though I do consider myself more pragmatic than pu= rist, I think usage of INVITE, and the usage of error response codes to return the verification result, is a really ugly hack.=

 

Second, there are also some operational issues with using INVI= TE:

  1. Good old forking: The = callback/verifying INVITE might get forked, and the terminating agent may r= eceive a non-471/472 response. 
  2. SDP: The draft require= s SDP in the INVITE, but at the same time says that it=92s not used for any= thing. If so, why is it mandated? Because offerless INVITEs might get rejected? SDP in INVITE might trigger media resources etc to be = reserved. 
  3. Section 7.3 talks abou= t attacks by the agent receiving the callback/verifying INVITE, but it does= not cover the case where the agent would send a 200 OK response =96 which would establish a session and could trigger charging. A= lternatively, the attacker could remove the option-tag and forward the requ= est somewhere. All this without the originally called party knowing anythin= g. The terminating agent can of course terminate such =93call" as soon as it gets the 200 OK, but it may alr= eady have triggered some charging etc.


Third, = did the authors consider other mechanisms? For example, is there a reason e.g., SUB/NOT couldn=92t be used for this? It would have none of the INVITE issues above (yes, a SU= B can also get forked, but the client will receive NOT from each remote pee= r).

 

Finally= , it seems like the callback request (whatever SIP method is used) contains= the called party in the From header field. Is there a technical reason why= that is needed, or is it just for convenience? 

 

Thanks!

 

Regards,

 

Christer

--_000_D6C415C72C225christerholmbergericssoncom_-- From nobody Wed Mar 14 01:39:56 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1BFE7126C0F for ; Wed, 14 Mar 2018 01:39:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.321 X-Spam-Level: X-Spam-Status: No, score=-4.321 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bXnpAYQ1ZRP5 for ; Wed, 14 Mar 2018 01:39:53 -0700 (PDT) Received: from sesbmg23.ericsson.net (sesbmg23.ericsson.net [193.180.251.37]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BA84912783A for ; Wed, 14 Mar 2018 01:39:17 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; d=ericsson.com; s=mailgw201801; c=relaxed/simple; q=dns/txt; i=@ericsson.com; t=1521016755; h=From:Sender:Reply-To:Subject:Date:Message-ID:To:Cc:MIME-Version:Content-Type: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=DAwP97CF5MuYn5XQ53cgI3vPUx9vKQPIZ7Gj+ZO+EhQ=; b=BOx6rKz+X4UbtHUNJXJmV3y52UWmxBbyNZKtrEHK1eckhBDIDh/kaSggQDE+NA0K Ls3QkOisYXk6TLwLslEBPx98eRiPUFoZ1kC78PzASt0rOJVZf0W5lR9JfsvBjlJd CJlNExKyQWkzDl46fsmDXl6QT8d8Y1rltMlspo/60U8=; X-AuditID: c1b4fb25-669ff70000006222-3f-5aa8dfb3e990 Received: from ESESSHC013.ericsson.se (Unknown_Domain [153.88.183.57]) by sesbmg23.ericsson.net (Symantec Mail Security) with SMTP id 7B.76.25122.3BFD8AA5; Wed, 14 Mar 2018 09:39:15 +0100 (CET) Received: from ESESSMB109.ericsson.se ([169.254.9.172]) by ESESSHC013.ericsson.se ([153.88.183.57]) with mapi id 14.03.0382.000; Wed, 14 Mar 2018 09:39:15 +0100 From: Christer Holmberg To: "Gorman, Pierce A [CTO]" , Russ Housley , IETF STIR Mail List Thread-Topic: [stir] DRAFT STIR Agenda for London Thread-Index: AQHTt+0fEDwMiDqclkW7s196x6oZNKPJe1iggAMUKACAAvFSAA== Date: Wed, 14 Mar 2018 08:39:14 +0000 Message-ID: References: <7594FB04B1934943A5C02806D1A2204B6C1D1AA8@ESESSMB109.ericsson.se> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.7.7.170905 x-originating-ip: [153.88.183.20] Content-Type: text/plain; charset="iso-8859-1" Content-ID: <52369ED7F1A4AB43BC44A834B787BD63@ericsson.com> Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprHIsWRmVeSWpSXmKPExsUyM2K7pe7m+yuiDPa2G1q8enGT3eLEt/+M FsvXbmNyYPZYsuQnk0fbpd3MHqvufGENYI7isklJzcksSy3St0vgyri0JqFgmWLFysOT2BsY D0t1MXJwSAiYSHx+wt/FyMUhJHCYUWLhtNfsEM4SRokJm98ygxSxCVhIdP/TBomLCDQzSry9 tpK1i5GTQ1jAQGLltelsILaIgKHEwbmboWwnie6fj1hAbBYBVYlf+9+C1fMKWEtc6NvFBrHg IKPExxtLmEASnAIeEr+X/WQGsRkFxCS+n1oDFmcWEJe49WQ+mC0hICCxZM95ZghbVOLl439g Q0UF9CQ2nLjNDhFXlLg6fTlUr57EjalT2CBsa4nVSx4zQ9jaEssWvmaGOEhQ4uTMJywTGMVm IVk3C0n7LCTts5C0z0LSvoCRdRWjaHFqcVJuupGxXmpRZnJxcX6eXl5qySZGYKwd3PJbdQfj 5TeOhxgFOBiVeHgXXlgRJcSaWFZcmXuIUYKDWUmEd6sMUIg3JbGyKrUoP76oNCe1+BCjNAeL kjjvHOH2KCGB9MSS1OzU1ILUIpgsEwenVANj/QrmoDVGC0zU3Qu4Zv6v1Gh0/jw9YY/SlQVP d831/T/5r/Fzt3cMsj3dtwo05nQynpDpO2V5YEcjB49VuL/TrZbNk+9udBKbMfdIguzerDvL A3v2Bd6bsKSa9cOTqHS2+3H7jK/ZMr35onqpTdQ+9Jh9YNiRxuWMM/WY9NO9YwvPNYS0NYQp sRRnJBpqMRcVJwIA5eyb8bECAAA= Archived-At: Subject: Re: [stir] DRAFT STIR Agenda for London X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Mar 2018 08:39:55 -0000 Hi, For the Feature-Caps header field, we have the following text in RFC 6809: "When a SIP entity adds a Feature-Caps header field to a SIP message, it MUST place the header field before any existing Feature-Caps header field in the message to be forwarded, so that the added header field becomes the top-most one.=B2 If we were to take the same approach for Identity, the text could look something like: "When a SIP entity adds an Identity header field to a SIP request, it MUST place the header field before any existing Identity header field in the message to be forwarded, so that the added header field becomes the top-most one.=B2 Alternatively, we could say that a header field is places AFTER any existing header field. As long as we say something :) And, if we decide that the order of header fields has no relevance, we should say that. However, I would at least not suggest such approach. Regards, Christer On 12/03/18 15:43, "Gorman, Pierce A [CTO]" wrote: >I agree that the question of order (or not) of Identity headers needs to >be resolved. > >I started to write assumptions and questions on this topic but decided it >wouldn't add much to a discussion amongst development professionals who >have encountered the issue before (which is my assumption about the >authors and Christer). I can re-create it if anyone wants it. > >Pierce > > >-----Original Message----- >From: Christer Holmberg [mailto:christer.holmberg@ericsson.com] >Sent: Saturday, March 10, 2018 11:33 AM >To: Russ Housley ; IETF STIR Mail List > >Subject: Re: [stir] DRAFT STIR Agenda for London > >Hi, > >I think there are some generic things that we need to sort out. > >For example, do we specify in which order Identity header fields are >added to a SIP message. Or, do we assume they can be put in any order, >possible re-ordered by intermediaries, and the entities consuming them >will figure out how they are related? > >I think that is an essential issue to solve, considering that there are a >number of PASSporT extensions in the pipeline. And, we should make a >decision that apply to all of them. > >Regards, > >Christer > > > > >-----Original Message----- >From: stir [mailto:stir-bounces@ietf.org] On Behalf Of Russ Housley >Sent: 09 March 2018 23:25 >To: IETF STIR Mail List >Subject: [stir] DRAFT STIR Agenda for London > >We only have 1 hour. We received more speaking slots than we expected. >I have ordered the speaking slots to put priority on the active WG >documents. Time will be VERY tight. > >For the active WG documents, please focus on the changes since Singapore >and open issues. > >For the other documents, please introduce the high-level concept, and >then as the WG for advice on the way forward. > >Russ > >=3D =3D =3D =3D =3D =3D =3D =3D =3D > >STIR WG Agenda for IETF 101 >Thursday, 22 March 2018 at 11:00 AM >Co-chairs: Robert Sparks and Russ Housley > >0) Minute Taker, Jabber Scribe, Bluesheets > >1) Agenda Bash > >2) Documents that have been sent to the IESG > a) 5 min : draft-ietf-stir-rph-03 (Ray, Martin, Subir, and An) > >3) Active Working Group Documents > a) 10 min : draft-ietf-stir-passport-shaken-01 (Chris and Mary) > b) 10 min : draft-ietf-stir-passport-divert-02 (Jon) > c) 10 min : draft-ietf-stir-oob-02 (EKR and Jon) > >4) Other Business (if time allows) > a) 5 min : draft-burger-stir-iana-cert-00 (Eric) > b) 5 min : draft-peterson-stir-rfc4916-update-00 (Jon and Chris) > c) 5 min : draft-rosenberg-stir-callback-00 (Jonathan and Cullen) > d) 5 min : draft-rosenberg-stir-sipcoin-00 (Jonathan and Cullen) > >5) Wrap Up > >_______________________________________________ >stir mailing list >stir@ietf.org >https://www.ietf.org/mailman/listinfo/stir > > > >________________________________ > >This e-mail may contain Sprint proprietary information intended for the >sole use of the recipient(s). Any use by others is prohibited. If you are >not the intended recipient, please contact the sender and delete all >copies of the message. From nobody Wed Mar 14 04:36:14 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DD3741271DF for ; Wed, 14 Mar 2018 04:36:11 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.001 X-Spam-Level: X-Spam-Status: No, score=0.001 tagged_above=-999 required=5 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=chriswendt-net.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3uzqlKxsUoWZ for ; Wed, 14 Mar 2018 04:36:10 -0700 (PDT) Received: from mail-ua0-x234.google.com (mail-ua0-x234.google.com [IPv6:2607:f8b0:400c:c08::234]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D71E71242EA for ; Wed, 14 Mar 2018 04:36:09 -0700 (PDT) Received: by mail-ua0-x234.google.com with SMTP id c40so1825508uae.2 for ; Wed, 14 Mar 2018 04:36:09 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=chriswendt-net.20150623.gappssmtp.com; s=20150623; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=KHfrnGiK1GOgaI/jfzfWiu0ou7+hvEBAMPf7LjK/ABI=; b=DTlz9EtwybQlKKan/X92SVd0Noxtz3m9fCkoeRJgg/rHnDVjAhZAw66SAbNiXBxmc0 H7ZxVi89/9mOOI+VtVSlKH7bDeefqM1IhQiMXPpnfapGl56pnftZo7PyBduJivtwPnAt KmwIYGAEnIvQhk+dPxnQb6IcQRnmEtCXrNd3uOgQEzUCZJDOKJ2ToSKAiwD7lhLCx4R7 PfCC69SosuYN/JSZW0ehWIV/jmVV7f3Ep6eqJ/bwwnRWjdglQwI47gWHhnvmlrrthTtz B6OBp3xZ72x+BCClVIaxY/vLOgAG9TWf6XJFMoX/GbmiLZKlHA3JUF9Cv0iJnwuwAYMy 2FSw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=KHfrnGiK1GOgaI/jfzfWiu0ou7+hvEBAMPf7LjK/ABI=; b=iXHIP2vMyafljo488sVl27TwUegnNlamD3naGOaRWeAO3048HTTGegBBAyX1PMNIil C+lB5E8mVmzebEqoM5WNE0wmOL5iQDl7Mn6AnoabVX8Zw83JtPjusDnhgSJ0wz+PqICm KbI5/Nvyue4yuwSeduXV5S142REXj/9izLkMKJHeZSgr//sJQYeDItEV5GMHF7CSoC9V coNRpkfm55N8s+HnB4L4kdtp4wwPHi9Rb4LyOSwKl7yy3YlzcZR4mq6KPxr2mU9ieX50 krlZbS7lYNwxKn1H2+mRRWIHZbHV5xuuByC5RDyYfzu7MXnb2eZ5JCL+UqgJxmLES4Jg DpFA== X-Gm-Message-State: AElRT7EwJTq4QmcSV4CqG19H86SkVQjCr/BzW0/Oqzi4V8MdqyhNTE1t LOpZolU3lgyKyhrafSRZn79BCoDQjME= X-Google-Smtp-Source: AG47ELv4P4Ly5BFT+IkjUZa4wtfpOuSidDNnphfs0RnZXVJXOeTF/AjTersNQ/azMSkoNDKzHy/9iw== X-Received: by 10.176.2.244 with SMTP id 107mr2823008uah.52.1521027368936; Wed, 14 Mar 2018 04:36:08 -0700 (PDT) Received: from [10.199.14.150] ([65.112.138.226]) by smtp.gmail.com with ESMTPSA id k26sm1052963uag.45.2018.03.14.04.36.06 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 14 Mar 2018 04:36:07 -0700 (PDT) From: Chris Wendt Message-Id: <08B1E835-CA5E-4636-AE0E-983F3EFA82C1@chriswendt.net> Content-Type: multipart/alternative; boundary="Apple-Mail=_0BB87491-61A7-4860-8C5C-0BC70B18A3E8" Mime-Version: 1.0 (Mac OS X Mail 11.2 \(3445.5.20\)) Date: Wed, 14 Mar 2018 07:36:05 -0400 In-Reply-To: <7594FB04B1934943A5C02806D1A2204B6C200A0A@ESESSMB109.ericsson.se> Cc: "Politz, Ken" , "stir@ietf.org" , "adam@nostrum.com" To: Christer Holmberg References: <7594FB04B1934943A5C02806D1A2204B6C1D17C1@ESESSMB109.ericsson.se> <7594FB04B1934943A5C02806D1A2204B6C1D1804@ESESSMB109.ericsson.se> <8B0E0275-68BD-41E9-B128-589F13C06D66@chriswendt.net> <7594FB04B1934943A5C02806D1A2204B6C2007A0@ESESSMB109.ericsson.se> <46946849EEFF3043A8FBCC3D102A2C1A3FCADE50@stntexmb13.cis.neustar.com> <7594FB04B1934943A5C02806D1A2204B6C200A0A@ESESSMB109.ericsson.se> X-Mailer: Apple Mail (2.3445.5.20) Archived-At: Subject: Re: [stir] PASSporT extensions: order of claims X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Mar 2018 11:36:12 -0000 --Apple-Mail=_0BB87491-61A7-4860-8C5C-0BC70B18A3E8 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Perhaps its a bit over prescriptive, i think the intention was only to = say that it should be documented what claims and provide order and = examples. It wasn=E2=80=99t to imply that it would be different or = there would be implications of order or anything. To step up a level, in general, JSON object key order never matters, = it=E2=80=99s a key value object that you index on key, so order in most = cases is arbitrary. For PASSporT, we have a short form that is = supported in RFC8224, where you don=E2=80=99t need to send the = header/claims because those objects are already in the SIP INVITE. So = we needed a way to have the header/claims to be reconstructed in a = predictable and reproducible way. An therefore the dependency on order. So again, yes we say you should say order in RFC8225, which i would say = would inherently be the case with an example at a minimum. A MUST might = have been a bit strong, but i don=E2=80=99t see this as a huge concern. = I=E2=80=99d be curious to hear from others whether they think this is a = real concern or not. > On Mar 13, 2018, at 3:58 PM, Christer Holmberg = wrote: >=20 > Hi, > =20 > >Try RFC 8225, Section 9, perhaps?=20 > =20 > Ok, so if that=E2=80=99s a generic rule, why the statement saying that = PASSporT extensions must specify the order? > =20 > Regards, > =20 > Christer > =20 > From: Christer Holmberg [mailto:christer.holmberg@ericsson.com = ]=20 > Sent: Tuesday, March 13, 2018 2:47 PM > To: Chris Wendt > > Cc: stir@ietf.org ; adam@nostrum.com = > Subject: Re: [stir] PASSporT extensions: order of claims > =20 > Hi, > =20 > >I would agree with the text, the only caveat i would point out is = that the extension definition has > >no choice to the order other than alphabetic order, so the order is = essentially implied. So, it=E2=80=99s sort > >of a technicality that maybe we didn=E2=80=99t anticipate, but i = think technically you are correct. > =20 > Not sure I understand the has-no-choice part. Where is it said that = the claims must be ordered in alphabetic order? We could for sure = specify it that way, but based on your e-mail it seems like it is = already specified somewhere? > =20 > Regards, > =20 > Christer > =20 > =20 >=20 > On Mar 10, 2018, at 8:27 AM, Christer Holmberg = > = wrote: > =20 > Section 8.3 of RFC 8225, that is. > =20 > From: stir [mailto:stir-bounces@ietf.org = ] On Behalf Of Christer Holmberg > Sent: 10 March 2018 15:26 > To: stir@ietf.org > Cc: adam@nostrum.com > Subject: [stir] PASSporT extensions: order of claims > =20 > Hi, > =20 > Section says: > =20 > =E2=80=9CSpecifications that define extensions to the PASSporT = mechanism MUST > explicitly specify what claims they include beyond the base set of > claims from this document, the order in which they will = appear,=E2=80=A6=E2=80=9D > =20 > When looking at the extensions we are currently working on: > =20 > draft-ietf-stir-rph-03 > draft-ietf-stir-passport-shaken-01 > draft-ietf-stir-passport-divert-02 > =20 > =E2=80=A6I don=E2=80=99t see anything about the order in any of the = documents. > =20 > I think it would be good to have a dedicated =E2=80=9COrder of = claims=E2=80=9D section, or something similar, in each extension = specification. > =20 > When looking at the examples in the drafts above, it seems like even = the base claims are in different orders. Not sure whether there is an = explicit requirement that they need to be in order, thought. > =20 > Regards, > =20 > Christer > =20 > =20 > _______________________________________________ > stir mailing list > stir@ietf.org > https://www.ietf.org/mailman/listinfo/stir = --Apple-Mail=_0BB87491-61A7-4860-8C5C-0BC70B18A3E8 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Perhaps its a bit over prescriptive, i think the intention = was only to say that it should be documented what claims and provide = order and examples.  It wasn=E2=80=99t to imply that it would be = different or there would be implications of order or anything.

To step up a level, in = general, JSON object key order never matters, it=E2=80=99s a key value = object that you index on key, so order in most cases is arbitrary. =  For PASSporT, we have a short form that is supported in RFC8224, = where you don=E2=80=99t need to send the header/claims because those = objects are already in the SIP INVITE.  So we needed a way to have = the header/claims to be reconstructed in a predictable and reproducible = way.  An therefore the dependency on order.

So again, yes we say you should say = order in RFC8225, which i would say would inherently be the case with an = example at a minimum.  A MUST might have been a bit strong, but i = don=E2=80=99t see this as a huge concern.  I=E2=80=99d be curious = to hear from others whether they think this is a real concern or = not.


On Mar = 13, 2018, at 3:58 PM, Christer Holmberg <christer.holmberg@ericsson.com> wrote:

Hi,
 
>Try RFC 8225, Section 9, = perhaps? 
 
Ok, so if that=E2=80=99s a generic rule, why the statement = saying that PASSporT extensions must specify the order?
 
Regards,
 
Christer
 
From: Christer = Holmberg [mailto:christer.holmberg@ericsson.com] 
Sent: Tuesday, March 13, 2018 = 2:47 PM
To: Chris Wendt <chris-ietf@chriswendt.net>
Cc: stir@ietf.org; adam@nostrum.com
Subject: Re: [stir] PASSporT = extensions: order of claims
 
Hi,
 
>I would agree with the text, the only caveat i = would point out is that the extension definition has
>no choice to the order other than = alphabetic order, so the order is essentially implied.  So, it=E2=80=99= s sort
>of a technicality that maybe we = didn=E2=80=99t anticipate, but i think technically you are correct.
 
Not sure I understand the has-no-choice part. = Where is it said that the claims must be ordered in alphabetic order? We = could for sure specify it that way, but based on your e-mail it seems = like it is already specified somewhere?
 
Regards,
 
Christer
 

 

On Mar 10, 2018, at 8:27 AM, Christer = Holmberg <christer.holmberg@ericsson.com> wrote:
 
Section 8.3 of RFC 8225, that = is.
 
From: stir [mailto:stir-bounces@ietf.org] On Behalf = Of Christer = Holmberg
Sent: 10 March 2018 15:26
To: stir@ietf.org
Cc: adam@nostrum.com
Subject: [stir] PASSporT extensions: = order of claims
 
Hi,
 
Section  says:
 
   = =E2=80=9CSpecifications that define extensions to the PASSporT mechanism = MUST
   = explicitly specify what claims they include beyond the base set of
   claims from = this document, the order in which they will appear,=E2=80=A6=E2=80=9D
 
When looking at the = extensions we are currently working on:
 
draft-ietf-stir-rph-03
draft-ietf-stir-passport-shaken-01
draft-ietf-stir-passport-divert-02
 
=E2=80=A6I don=E2=80=99t = see anything about the order in any of the documents.
 
I think it would be good = to have a dedicated =E2=80=9COrder of claims=E2=80=9D section, or = something similar, in each extension specification.
 
When looking at the = examples in the drafts above, it seems like even the base claims are in = different orders. Not sure whether there is an explicit requirement that = they need to be in order, thought.
 
Regards,
 
Christer
 
 
_______________________________________________
stir mailing list
stir@ietf.org
https://www.ietf.org/mailman/listinfo/stir

= --Apple-Mail=_0BB87491-61A7-4860-8C5C-0BC70B18A3E8-- From nobody Wed Mar 14 05:00:54 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 83F271271DF for ; Wed, 14 Mar 2018 05:00:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.42 X-Spam-Level: X-Spam-Status: No, score=-2.42 tagged_above=-999 required=5 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0oJoZC2YI4aY for ; Wed, 14 Mar 2018 05:00:51 -0700 (PDT) Received: from sessmg23.ericsson.net (sessmg23.ericsson.net [193.180.251.45]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A97E0126CC7 for ; Wed, 14 Mar 2018 05:00:50 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; d=ericsson.com; s=mailgw201801; c=relaxed/simple; q=dns/txt; i=@ericsson.com; t=1521028849; h=From:Sender:Reply-To:Subject:Date:Message-ID:To:CC:MIME-Version:Content-Type: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=81hiP0tVqTDxFR/+hzk0gUc0zfcvXbMZNDbOng+7MWY=; b=VfOWUtJsC9AGgFHWRWlytjc/Z0LEh6mLw6m8lmgjF8462GfKfyuyOwYUCMCh/YyO ufjebQhkAyIsP7opvWoVYefLE0mh9PUijAQm6thueYgf7eIeb7pp26EXE3URNaoB xdJ52R4tHpl8EW4xIJqZ5is0lKODaFGXlAsJYGVpUw8=; X-AuditID: c1b4fb2d-87c029c000005540-d6-5aa90ef08927 Received: from ESESSHC005.ericsson.se (Unknown_Domain [153.88.183.33]) by sessmg23.ericsson.net (Symantec Mail Security) with SMTP id 0F.CA.21824.0FE09AA5; Wed, 14 Mar 2018 13:00:49 +0100 (CET) Received: from ESESSMB109.ericsson.se ([169.254.9.172]) by ESESSHC005.ericsson.se ([153.88.183.33]) with mapi id 14.03.0382.000; Wed, 14 Mar 2018 13:00:33 +0100 From: Christer Holmberg To: Chris Wendt CC: "Politz, Ken" , "stir@ietf.org" , "adam@nostrum.com" Thread-Topic: [stir] PASSporT extensions: order of claims Thread-Index: AdO4Vc+a+PS/xYPIRfO1T1CAVYYAVAAHa1xAAJ5T3oAAA66kkP//+HEA///ksgCAASxRgIAAKGgA Date: Wed, 14 Mar 2018 12:00:33 +0000 Message-ID: References: <7594FB04B1934943A5C02806D1A2204B6C1D17C1@ESESSMB109.ericsson.se> <7594FB04B1934943A5C02806D1A2204B6C1D1804@ESESSMB109.ericsson.se> <8B0E0275-68BD-41E9-B128-589F13C06D66@chriswendt.net> <7594FB04B1934943A5C02806D1A2204B6C2007A0@ESESSMB109.ericsson.se> <46946849EEFF3043A8FBCC3D102A2C1A3FCADE50@stntexmb13.cis.neustar.com> <7594FB04B1934943A5C02806D1A2204B6C200A0A@ESESSMB109.ericsson.se> <08B1E835-CA5E-4636-AE0E-983F3EFA82C1@chriswendt.net> In-Reply-To: <08B1E835-CA5E-4636-AE0E-983F3EFA82C1@chriswendt.net> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.7.7.170905 x-originating-ip: [153.88.183.16] Content-Type: multipart/alternative; boundary="_000_D6CED8EF2CC5Bchristerholmbergericssoncom_" MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFjrAIsWRmVeSWpSXmKPExsUyM2K7ou5HvpVRBi9cLfb8XcRuMf3TbmaL zR/WslgsX7uNyYHFY0LfGlaPJUt+MnnM2vmExeP1hjnsASxRXDYpqTmZZalF+nYJXBkfdx5i LPj7n7GibbJFA+One4xdjJwcEgImEkv62pi6GLk4hAQOM0r8PHWLGcJZwijxovseexcjBweb gIVE9z9tkAYRAW2Jw2cawJqZBSolZs2dzQxiCwOVTNj3kBWixlJi8rv1zCCtIgJRErMmuIOE WQRUJc5NOcIOYvMKWEu83/YfatVFZokld7+wgCQ4BZwk2qadYAOxGQXEJL6fWsMEsUtc4taT +UwQRwtILNlznhnCFpV4+fgf2F5RAT2JDSdus0PEFSV2nm1nhuhNkOhdt54FYrGgxMmZT1gm MIrOQjJ2FpKyWUjKIOIGEu/PzWeGsLUlli18DWXrS2z8cpYRwraWOHBmOzuymgWMHKsYRYtT i4tz042M9VKLMpOLi/Pz9PJSSzYxAuP14JbfujsYV792PMQowMGoxMP7m2lllBBrYllxZe4h RgkOZiUR3q0yK6KEeFMSK6tSi/Lji0pzUosPMUpzsCiJ85705I0SEkhPLEnNTk0tSC2CyTJx cEo1MFbf6Ord9Ghx68qHNXrL9d3Wvnjqe/BUnsz2zifPjYRZEs/e3nWrp2OHTd2k5IKpF9yL n19pV4+b/yrnbOePkH/Hn17P2Pp93hWno3N67PfOYmF8svyT9IqjdpuZ69xqTMyDK5zfcUw+ rrVsatHq8+Els/dvu3DQy0ut99OuxDUK++dL2j0v+VisxFKckWioxVxUnAgA3DhAftMCAAA= Archived-At: Subject: Re: [stir] PASSporT extensions: order of claims X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Mar 2018 12:00:53 -0000 --_000_D6CED8EF2CC5Bchristerholmbergericssoncom_ Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable Hi, > Perhaps its a bit over prescriptive, i think the intention was only to sa= y that it should be documented what claims and provide order and examples. > > It wasn=92t to imply that it would be different or there would be implica= tions of order or anything. > > To step up a level, in general, JSON object key order never matters, it= =92s a key value object that you index on key, so order in most cases is ar= bitrary. For PASSporT, we > have a short form that is supported in RFC8224, where you don=92t need to= send the header/claims because those objects are already in the SIP INVITE= . So we needed a > way to have the header/claims to be reconstructed in a predictable and re= producible way. An therefore the dependency on order. Correct. I wasn=92t questioning the need for ordering, but maybe I wasn=92t= clear about that :) > So again, yes we say you should say order in RFC8225, which i would say w= ould inherently be the case with an example at a minimum. A MUST might hav= e been > a bit strong, but i don=92t see this as a huge concern. I=92d be curious= to hear from others whether they think this is a real concern or not. It depends on what is meant by =93concern=94. When people define PASSporT e= xtensions future, they will not look at this e-mail thread =96 they will re= ad RFC8225. We shouldn=92t have MUSTs if they don=92t mean anything. Anyway, as far as the current PASSporT extensions are concerned, maybe we c= ould solve the issue by including a statement saying something like: =93The order of the claims within the PASSporT JSON object does not matter. However, as defined in Section 9 of RF= C8225, when the JSON serialisation takes place, the claims must be placed i= n lexicographic order=94 Regards, Christer On Mar 13, 2018, at 3:58 PM, Christer Holmberg > wrote: Hi, >Try RFC 8225, Section 9, perhaps? Ok, so if that=92s a generic rule, why the statement saying that PASSporT e= xtensions must specify the order? Regards, Christer From: Christer Holmberg [mailto:christer.holmberg@ericsson.com] Sent: Tuesday, March 13, 2018 2:47 PM To: Chris Wendt > Cc: stir@ietf.org; adam@nostrum.com Subject: Re: [stir] PASSporT extensions: order of claims Hi, >I would agree with the text, the only caveat i would point out is that the= extension definition has >no choice to the order other than alphabetic order, so the order is essent= ially implied. So, it=92s sort >of a technicality that maybe we didn=92t anticipate, but i think technical= ly you are correct. Not sure I understand the has-no-choice part. Where is it said that the cla= ims must be ordered in alphabetic order? We could for sure specify it that = way, but based on your e-mail it seems like it is already specified somewhe= re? Regards, Christer On Mar 10, 2018, at 8:27 AM, Christer Holmberg > wrote: Section 8.3 of RFC 8225, that is. From: stir [mailto:stir-bounces@ietf.org] On Behalf Of Christer Holmberg Sent: 10 March 2018 15:26 To: stir@ietf.org Cc: adam@nostrum.com Subject: [stir] PASSporT extensions: order of claims Hi, Section says: =93Specifications that define extensions to the PASSporT mechanism MUST explicitly specify what claims they include beyond the base set of claims from this document, the order in which they will appear,=85=94 When looking at the extensions we are currently working on: draft-ietf-stir-rph-03 draft-ietf-stir-passport-shaken-01 draft-ietf-stir-passport-divert-02 =85I don=92t see anything about the order in any of the documents. I think it would be good to have a dedicated =93Order of claims=94 section,= or something similar, in each extension specification. When looking at the examples in the drafts above, it seems like even the ba= se claims are in different orders. Not sure whether there is an explicit re= quirement that they need to be in order, thought. Regards, Christer _______________________________________________ stir mailing list stir@ietf.org https://www.ietf.org/mailman/listinfo/stir --_000_D6CED8EF2CC5Bchristerholmbergericssoncom_ Content-Type: text/html; charset="Windows-1252" Content-ID: <0B6764186A99904DAA50BADCA2A7481A@ericsson.com> Content-Transfer-Encoding: quoted-printable
Hi,

> Perhaps its a bit over prescriptive, i think the intention was only to= say that it should be documented what claims and provide order and example= s.  
>
> It wasn=92t to imply that it would be different or there would be impl= ications of order or anything.
>
> To step up a level, in general, JSON object key order = never matters, it=92s a key value object that you index on key, so order in= most cases is arbitrary.  For PASSporT, we
> have a short form that is supported in RFC8224, where you don=92t need= to send the header/claims because those objects are already in the SIP INV= ITE.  So we needed a 
> way to have the header/claims to be reconstructed in a predictable and= reproducible way.  An therefore the dependency on order.

Correct. I wasn=92t questioning the need for ordering, but maybe I wasn=92t= clear about that :)

> So again, yes we say you should say order in RFC8225, = which i would say would inherently be the case with an example at a minimum= .  A MUST might have been
> a bit strong, but i don=92t see this as a huge concern.  I=92d be= curious to hear from others whether they think this is a real concern or n= ot.

It depends on what is meant by =93concern=94. When people d= efine PASSporT extensions future, they will not look at this e-mail thread = =96 they will read RFC8225. We shouldn=92t have MUSTs if they don=92t mean = anything.

Anyway, as far as the current PASSporT extensions are concerned, maybe we c= ould solve the issue by including a statement saying something like:

=93= The order of the claims within the PASSporT <insert-name-of-PASSporT ext= ension> JSON object does not matter. However, as defined in Section 9 of= RFC8225, when the JSON serialisation takes place, the claims must be placed in lexicographi= c order=94

Regards,

Christer






On Mar 13, 2018, at 3:58 PM, Christer Holmberg <christer.holmberg@eri= csson.com> wrote:

Hi,
 
>Try RFC 8225, Section 9, per= haps? 
 
Ok, so if that=92s a generic rul= e, why the statement saying that PASSporT extensions must specify the order= ?
 
Regards,
 
Christer
 
From: Christer Holmberg [mailto:christer.holmberg@ericsson.= com] 
Sent: T= uesday, March 13, 2018 2:47 PM
To: Chr= is Wendt <chris-ietf@chriswendt.net>
Cc: stir@ietf.org;=  adam@nostrum.com
Subject: Re: [stir] PASSporT extensions: order of claims
 
Hi,
 
>I would agree with the text, the only caveat i would point out is that = the extension definition has
>no choice to the order other than alphabetic order, so the or= der is essentially implied.  So, it=92s sort
>of a technicality that maybe we didn=92t anticipate, but i th= ink technically you are correct.
 
Not sure I understand the has-no-choice part. Where is it said that the = claims must be ordered in alphabetic order? We could for sure specify it th= at way, but based on your e-mail it seems like it is already specified somewhere?=
 
Regards,
 
Christer
 

 

On Mar 10, 2018, at 8:27 AM, Christer Holmberg <christer.holmberg@ericsson.com> wrote:
 
Section 8.3 of RFC 8225, that is.
 
From: stir [mailto:stir-bounces@ietf.org] On Behalf Of Christer Holmberg
Sent: 1= 0 March 2018 15:26
To: stir@ietf.org
Cc: adam@nostrum.com
Subject: [stir] PASSporT extensions: order of claims
 
Hi,
 
Section  says:
 
   =93Specifications that define extensions to the PASSporT me= chanism MUST
   explicitly specify what claims they include beyond the base= set of
   claims from this document, the order in which they will appear,=85= =94
 
When looking at the extensions we are currently working on:
 
draft-ietf-stir-rph-03
draft-ietf-stir-passport-shaken-01
draft-ietf-stir-passport-divert-02
 
=85I don=92t see anything about the order in any of the documents.
 
I think it would be good to have a dedicated =93Order of claims=94 secti= on, or something similar, in each extension specification.<= /o:p>
 
When looking at the examples in the drafts above, it seems like even the= base claims are in different orders. Not sure whether there is an explicit= requirement that they need to be in order, thought.
 
Regards,
 
Christer
 
 
_______________________________________________
stir mailing list
stir@ietf.org
https://www.ietf.org/mailman/listinfo/stir

 --_000_D6CED8EF2CC5Bchristerholmbergericssoncom_-- From nobody Wed Mar 14 06:32:24 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 81A1112AF84 for ; Wed, 14 Mar 2018 06:32:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.001 X-Spam-Level: X-Spam-Status: No, score=0.001 tagged_above=-999 required=5 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=chriswendt-net.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7NRVY9_LBfA4 for ; Wed, 14 Mar 2018 06:32:21 -0700 (PDT) Received: from mail-ua0-x22b.google.com (mail-ua0-x22b.google.com [IPv6:2607:f8b0:400c:c08::22b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5450F12711B for ; Wed, 14 Mar 2018 06:32:21 -0700 (PDT) Received: by mail-ua0-x22b.google.com with SMTP id j15so2059383uan.3 for ; Wed, 14 Mar 2018 06:32:21 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=chriswendt-net.20150623.gappssmtp.com; s=20150623; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=AsCHmQ4ADot51lVMBOdAijXra7SFWQbkNBHJEeAgDfw=; b=Dr0kMcOV021zH1cyOKg/sC2NFLlFY/Zf1rtvCI/9YqTA7w6lC66tWg6p6dKr8ELzhw kYtsl0V+MJZO/vwJafElQLVuagbBJ041QZECpgQlkyoE8YcPhCPnCi993QAas8JxG8Mu SJ7W/xPDCXc9ZMzRrDe+8eKSFbL52S3e4TSZCGMheBCTp1WtBp+uCxXvPe46fxQun45J gmH2wpWbxd3np+sRGRKqqnkycrdxv97TZeX0DyukdxeSe3osnogYvCGjUihGUymdkJTT UW8i+PWUENLd1ju0e7811vhGfO1t9DcGGrByHuncwW+fUAyOWy/2dH858ZTxdHvVEMdP FfBw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=AsCHmQ4ADot51lVMBOdAijXra7SFWQbkNBHJEeAgDfw=; b=tEopF8TsXFzFEAproBkq0CRgrDpF5LsN0kHSzDc1R7C3tEh34XWIEBQOTFSVwkDg0s Ii6zOzgjmf04rRMC4BzWEvRaxSoiAg2aX2XM0nP9ikt164ctOyVxS/40pOBMWwlfeUQq ymL9PeNcro17BYC4jhzCJKnacArHr79tEsa6iArqe1ehsDU4cQpYJ8Zq6Lx+aSgs8ZQ6 QLgdAKkuwsCim0ash/OJqmnq/dzWXjcNjeglzbGDb1fMlYkAhmX8pzvtEsbGZFfhR19r HqmtxTMahv7GQs5nhMuHCw/UI335GfDJvxOi6b3IQ7lv/fuNnAsY9mBLVdzimSrnOQUf DG1w== X-Gm-Message-State: AElRT7FZaIyyW09NCacJc6DtU3YXBfWutFdRHqsuVkPzqC7ePhLDXT2D a/JKOJ9hhcfgkD834EL8UnAwGg== X-Google-Smtp-Source: AG47ELsSIumsEcvUZwo+Ecj2f+rIU2SociQ+qEnLJG9buke/oP1GXLkL4doHOPkTq7+hf1uc/nJK+A== X-Received: by 10.159.56.74 with SMTP id q10mr3232997uad.53.1521034340401; Wed, 14 Mar 2018 06:32:20 -0700 (PDT) Received: from [10.199.14.150] ([65.112.138.226]) by smtp.gmail.com with ESMTPSA id 60sm488383uab.37.2018.03.14.06.32.18 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 14 Mar 2018 06:32:19 -0700 (PDT) From: Chris Wendt Message-Id: Content-Type: multipart/alternative; boundary="Apple-Mail=_B0BD99E1-8F16-4A9B-9D91-BB5254CFC5CB" Mime-Version: 1.0 (Mac OS X Mail 11.2 \(3445.5.20\)) Date: Wed, 14 Mar 2018 09:32:13 -0400 In-Reply-To: Cc: "Politz, Ken" , "stir@ietf.org" , "adam@nostrum.com" To: Christer Holmberg References: <7594FB04B1934943A5C02806D1A2204B6C1D17C1@ESESSMB109.ericsson.se> <7594FB04B1934943A5C02806D1A2204B6C1D1804@ESESSMB109.ericsson.se> <8B0E0275-68BD-41E9-B128-589F13C06D66@chriswendt.net> <7594FB04B1934943A5C02806D1A2204B6C2007A0@ESESSMB109.ericsson.se> <46946849EEFF3043A8FBCC3D102A2C1A3FCADE50@stntexmb13.cis.neustar.com> <7594FB04B1934943A5C02806D1A2204B6C200A0A@ESESSMB109.ericsson.se> <08B1E835-CA5E-4636-AE0E-983F3EFA82C1@chriswendt.net> X-Mailer: Apple Mail (2.3445.5.20) Archived-At: Subject: Re: [stir] PASSporT extensions: order of claims X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Mar 2018 13:32:23 -0000 --Apple-Mail=_B0BD99E1-8F16-4A9B-9D91-BB5254CFC5CB Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 To be clear, and i think this was the point of my last e-mail, I=E2=80=99m= not suggesting it doesn=E2=80=99t mean anything. It certainly is good = to be explicit about the order and provide examples and if that=E2=80=99s = all you are suggesting, i can=E2=80=99t disagree. I think at some point in the e-mail thread you were questioning the = logic of the MUST for providing details of the order of claims in = RFC8225 and that=E2=80=99s what i was trying to address. I think we are = going in circles at this point, so i=E2=80=99ll let others comment. > On Mar 14, 2018, at 8:00 AM, Christer Holmberg = wrote: >=20 > Hi, >=20 > > Perhaps its a bit over prescriptive, i think the intention was only = to say that it should be documented what claims and provide order and = examples. =20 > > > > It wasn=E2=80=99t to imply that it would be different or there would = be implications of order or anything. > > > > To step up a level, in general, JSON object key order never matters, = it=E2=80=99s a key value object that you index on key, so order in most = cases is arbitrary. For PASSporT, we > > have a short form that is supported in RFC8224, where you don=E2=80=99= t need to send the header/claims because those objects are already in = the SIP INVITE. So we needed a=20 > > way to have the header/claims to be reconstructed in a predictable = and reproducible way. An therefore the dependency on order. >=20 > Correct. I wasn=E2=80=99t questioning the need for ordering, but maybe = I wasn=E2=80=99t clear about that :) >=20 > > So again, yes we say you should say order in RFC8225, which i would = say would inherently be the case with an example at a minimum. A MUST = might have been > > a bit strong, but i don=E2=80=99t see this as a huge concern. I=E2=80= =99d be curious to hear from others whether they think this is a real = concern or not. >=20 > It depends on what is meant by =E2=80=9Cconcern=E2=80=9D. When people = define PASSporT extensions future, they will not look at this e-mail = thread =E2=80=93 they will read RFC8225. We shouldn=E2=80=99t have MUSTs = if they don=E2=80=99t mean anything. >=20 > Anyway, as far as the current PASSporT extensions are concerned, maybe = we could solve the issue by including a statement saying something like: >=20 > =E2=80=9CThe order of the claims within the PASSporT = JSON object does not matter. = However, as defined in Section 9 of RFC8225, when the JSON serialisation = takes place, the claims must be placed in lexicographic order=E2=80=9D >=20 > Regards, >=20 > Christer >=20 >=20 >=20 >=20 >=20 >=20 >> On Mar 13, 2018, at 3:58 PM, Christer Holmberg = > = wrote: >>=20 >> Hi, >> =20 >> >Try RFC 8225, Section 9, perhaps?=20 >> =20 >> Ok, so if that=E2=80=99s a generic rule, why the statement saying = that PASSporT extensions must specify the order? >> =20 >> Regards, >> =20 >> Christer >> =20 >> From: Christer Holmberg [mailto:christer.holmberg@ericsson.com = ]=20 >> Sent: Tuesday, March 13, 2018 2:47 PM >> To: Chris Wendt > >> Cc: stir@ietf.org ; adam@nostrum.com = >> Subject: Re: [stir] PASSporT extensions: order of claims >> =20 >> Hi, >> =20 >> >I would agree with the text, the only caveat i would point out is = that the extension definition has >> >no choice to the order other than alphabetic order, so the order is = essentially implied. So, it=E2=80=99s sort >> >of a technicality that maybe we didn=E2=80=99t anticipate, but i = think technically you are correct. >> =20 >> Not sure I understand the has-no-choice part. Where is it said that = the claims must be ordered in alphabetic order? We could for sure = specify it that way, but based on your e-mail it seems like it is = already specified somewhere? >> =20 >> Regards, >> =20 >> Christer >> =20 >> =20 >>=20 >>> On Mar 10, 2018, at 8:27 AM, Christer Holmberg = > = wrote: >>> =20 >>> Section 8.3 of RFC 8225, that is. >>> =20 >>> From: stir [mailto:stir-bounces@ietf.org = ] On Behalf Of Christer Holmberg >>> Sent: 10 March 2018 15:26 >>> To: stir@ietf.org >>> Cc: adam@nostrum.com >>> Subject: [stir] PASSporT extensions: order of claims >>> =20 >>> Hi, >>> =20 >>> Section says: >>> =20 >>> =E2=80=9CSpecifications that define extensions to the PASSporT = mechanism MUST >>> explicitly specify what claims they include beyond the base set = of >>> claims from this document, the order in which they will = appear,=E2=80=A6=E2=80=9D >>> =20 >>> When looking at the extensions we are currently working on: >>> =20 >>> draft-ietf-stir-rph-03 >>> draft-ietf-stir-passport-shaken-01 >>> draft-ietf-stir-passport-divert-02 >>> =20 >>> =E2=80=A6I don=E2=80=99t see anything about the order in any of the = documents. >>> =20 >>> I think it would be good to have a dedicated =E2=80=9COrder of = claims=E2=80=9D section, or something similar, in each extension = specification. >>> =20 >>> When looking at the examples in the drafts above, it seems like even = the base claims are in different orders. Not sure whether there is an = explicit requirement that they need to be in order, thought. >>> =20 >>> Regards, >>> =20 >>> Christer >>> =20 >>> =20 >>> _______________________________________________ >>> stir mailing list >>> stir@ietf.org >>> https://www.ietf.org/mailman/listinfo/stir = --Apple-Mail=_B0BD99E1-8F16-4A9B-9D91-BB5254CFC5CB Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8
To be clear, and i think this was the point of my last = e-mail, I=E2=80=99m not suggesting it doesn=E2=80=99t mean anything. =  It certainly is good to be explicit about the order and provide = examples and if that=E2=80=99s all you are suggesting, i can=E2=80=99t = disagree.

I = think at some point in the e-mail thread you were questioning the logic = of the MUST for providing details of the order of claims in RFC8225 and = that=E2=80=99s what i was trying to address.  I think we are going = in circles at this point, so i=E2=80=99ll let others comment.

On Mar 14, 2018, at 8:00 AM, Christer Holmberg <christer.holmberg@ericsson.com> wrote:

Hi,

> Perhaps its a bit over prescriptive, i think the intention was only = to say that it should be documented what claims and provide order and = examples.  
>
> It wasn=E2=80=99t to imply that it would be different or there = would be implications of order or anything.
>
> To step up a level, in general, JSON object key = order never matters, it=E2=80=99s a key value object that you index on = key, so order in most cases is arbitrary.  For PASSporT, we
> have a short form that is supported in RFC8224, where you don=E2=80=99= t need to send the header/claims because those objects are already in = the SIP INVITE.  So we needed a 
> way to have the header/claims to be reconstructed in a predictable = and reproducible way.  An therefore the dependency on order.

Correct. I wasn=E2=80=99t questioning the need for ordering, but maybe I = wasn=E2=80=99t clear about that :)

> So again, yes we say you should say order in = RFC8225, which i would say would inherently be the case with an example = at a minimum.  A MUST might have been
> a bit strong, but i don=E2=80=99t see this as a huge concern. =  I=E2=80=99d be curious to hear from others whether they think this = is a real concern or not.

It depends on what is meant by =E2=80=9Cconcern=E2=80=9D. = When people define PASSporT extensions future, they will not look at = this e-mail thread =E2=80=93 they will read RFC8225. We shouldn=E2=80=99t = have MUSTs if they don=E2=80=99t mean anything.

Anyway, as far as the current PASSporT extensions are concerned, maybe = we could solve the issue by including a statement saying something = like:

=E2=80=9CThe order of the claims = within the PASSporT <insert-name-of-PASSporT extension> JSON = object does not matter. However, as defined in Section 9 of RFC8225, = when the JSON serialisation takes place, the claims must be placed in lexicographic = order=E2=80=9D<= /div>

Regards,

Christer






On Mar 13, 2018, at 3:58 PM, Christer Holmberg <christer.holmberg@ericsson.com> wrote:

Hi,
 
>Try RFC 8225, = Section 9, perhaps? 
 
Ok, so if that=E2=80=99s = a generic rule, why the statement saying that PASSporT extensions must = specify the order?
 
Regards,
 
Christer
 
From: Christer Holmberg [mailto:christer.holmberg@ericsson.com] 
Sent: Tuesday, March 13, 2018 = 2:47 PM
To: Chris Wendt <chris-ietf@chriswendt.net>
Cc: stir@ietf.org; adam@nostrum.com
Subject: Re: [stir] PASSporT = extensions: order of claims
 
Hi,
 
>I would agree with the text, the only caveat i would point out is = that the extension definition has
>no choice to the order other than alphabetic = order, so the order is essentially implied.  So, it=E2=80=99s = sort
>of a technicality that maybe we didn=E2=80=99t = anticipate, but i think technically you are correct.
 
Not sure I understand the has-no-choice part. Where is it = said that the claims must be ordered in alphabetic order? We could for = sure specify it that way, but based on your e-mail it seems like it is already specified somewhere?
 
Regards,
 
Christer
 

 

On Mar 10, 2018, at 8:27 AM, Christer Holmberg <christer.holmberg@ericsson.com> wrote:
 
Section 8.3 of RFC 8225, that = is.
 
From: stir [mailto:stir-bounces@ietf.org] On Behalf = Of Christer Holmberg
Sent: 10 March 2018 15:26
To: stir@ietf.org
Cc: adam@nostrum.com
Subject: [stir] PASSporT extensions: = order of claims
 
Hi,
 
Section  says:
 
   =E2=80=9CSpecifications that define extensions = to the PASSporT mechanism MUST
   explicitly specify what claims they include = beyond the base set of
   claims from this document, the order in = which they will appear,=E2=80=A6=E2=80=9D
 
When looking at the extensions we are currently working = on:
 
draft-ietf-stir-rph-03
draft-ietf-stir-passport-shaken-01
draft-ietf-stir-passport-divert-02
 
=E2=80=A6I don=E2=80=99t see anything about the order in any = of the documents.
 
I think it would be good to have a dedicated =E2=80=9COrder = of claims=E2=80=9D section, or something similar, in each extension = specification.
 
When looking at the examples in the drafts above, it seems = like even the base claims are in different orders. Not sure whether = there is an explicit requirement that they need to be in order, thought.
 
Regards,
 
Christer
 
 
_______________________________________________
stir mailing list
stir@ietf.org
https://www.ietf.org/mailman/listinfo/stir

= --Apple-Mail=_B0BD99E1-8F16-4A9B-9D91-BB5254CFC5CB-- From nobody Wed Mar 14 06:38:34 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 25C4612D778 for ; Wed, 14 Mar 2018 06:38:33 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.42 X-Spam-Level: X-Spam-Status: No, score=-2.42 tagged_above=-999 required=5 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mJSgE0SGgz5a for ; Wed, 14 Mar 2018 06:38:30 -0700 (PDT) Received: from sesbmg23.ericsson.net (sesbmg23.ericsson.net [193.180.251.37]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F054712D0C3 for ; Wed, 14 Mar 2018 06:38:29 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; d=ericsson.com; s=mailgw201801; c=relaxed/simple; q=dns/txt; i=@ericsson.com; t=1521034707; h=From:Sender:Reply-To:Subject:Date:Message-ID:To:CC:MIME-Version:Content-Type: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=tocM3VG/7Hz7nlrvzItJHOUKwmJ9ecTITmaaAP7fxSg=; b=R21t+7NZQuxJZLKFjKbKT0aT6Ubu2608a5AlC90BoMpHybItToE5Yj8JEtlIY/Gx Q2wtCjPEGXwfn3dXDX8HNge9PT67JlllMEe1qrQ0mtR6JQbqgyGnc9PE2is5aTby bWiZCiWAqfBvdr3nUxHJcu1cYGYTJothS7M7CY8CNPA=; X-AuditID: c1b4fb25-669ff70000006222-34-5aa925d3286d Received: from ESESSHC020.ericsson.se (Unknown_Domain [153.88.183.78]) by sesbmg23.ericsson.net (Symantec Mail Security) with SMTP id 08.FC.25122.3D529AA5; Wed, 14 Mar 2018 14:38:27 +0100 (CET) Received: from ESESSMB109.ericsson.se ([169.254.9.172]) by ESESSHC020.ericsson.se ([153.88.183.78]) with mapi id 14.03.0382.000; Wed, 14 Mar 2018 14:38:27 +0100 From: Christer Holmberg To: Chris Wendt CC: "Politz, Ken" , "stir@ietf.org" , "adam@nostrum.com" Thread-Topic: [stir] PASSporT extensions: order of claims Thread-Index: AdO4Vc+a+PS/xYPIRfO1T1CAVYYAVAAHa1xAAJ5T3oAAA66kkP//+HEA///ksgCAASxRgIAAKGgA///4C4CAACNNAA== Date: Wed, 14 Mar 2018 13:38:26 +0000 Message-ID: References: <7594FB04B1934943A5C02806D1A2204B6C1D17C1@ESESSMB109.ericsson.se> <7594FB04B1934943A5C02806D1A2204B6C1D1804@ESESSMB109.ericsson.se> <8B0E0275-68BD-41E9-B128-589F13C06D66@chriswendt.net> <7594FB04B1934943A5C02806D1A2204B6C2007A0@ESESSMB109.ericsson.se> <46946849EEFF3043A8FBCC3D102A2C1A3FCADE50@stntexmb13.cis.neustar.com> <7594FB04B1934943A5C02806D1A2204B6C200A0A@ESESSMB109.ericsson.se> <08B1E835-CA5E-4636-AE0E-983F3EFA82C1@chriswendt.net> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.7.7.170905 x-originating-ip: [153.88.183.16] Content-Type: multipart/alternative; boundary="_000_D6CEF1A52CC9Fchristerholmbergericssoncom_" MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFjrAIsWRmVeSWpSXmKPExsUyM2K7n+5l1ZVRBmuWmVrs+buI3WL6p93M Fps/rGWxWL52G5MDi8eEvjWsHkuW/GTymLXzCYvH6w1z2ANYorhsUlJzMstSi/TtErgyvm06 yVzQMI2pYvqarYwNjC8/MnYxcnJICJhI3Ly5DMjm4hASOMwosXHFfChnCaPEi1MgGQ4ONgEL ie5/2iANIgLaEofPNIA1MwtUSsyaO5sZxBYGKpmw7yErRI2lxOR365lBWkUEsiSWHjQDCbMI qEqc+feVBSTMK2Atsf+jJ0hYSGA3i0RHL1gJp4CTxKT9bWBTGAXEJL6fWsMEsUlc4taT+UwQ JwtILNlznhnCFpV4+fgfWL2ogJ7EhhO32SHiihI7z7YzQ/QmSCx6sooFxOYVEJQ4OfMJywRG 0VlIxs5CUjYLSRlE3EDi/bn5zBC2tsSyha+hbH2JjV/OMkLY1hIHDu1mQlazgJFjFaNocWpx Um66kbFealFmcnFxfp5eXmrJJkZgvB7c8lt1B+PlN46HGAU4GJV4eO3lVkYJsSaWFVfmHmKU 4GBWEuF14gMK8aYkVlalFuXHF5XmpBYfYpTmYFES550j3B4lJJCeWJKanZpakFoEk2Xi4JRq YGSOPKlUXVJ3g1vxyfLbx6/vMOzaJ6xkvHSGfIDlqfK+Y3HFrwzcVrBJP33zxOyJ77We9ffX zzK4cD90u7Gx6rUgyScnl8T9EVrcYfuaeUPIqV3swZldlvfFRDILD6j7n0yffVHzAov1vvk3 ZieEmZ03KkkRe8F7M3sLu+T9WT+/v5l+Ie2z6T0lluKMREMt5qLiRAD0ipal0wIAAA== Archived-At: Subject: Re: [stir] PASSporT extensions: order of claims X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Mar 2018 13:38:33 -0000 --_000_D6CEF1A52CC9Fchristerholmbergericssoncom_ Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable Hi, >To be clear, and i think this was the point of my last e-mail, I=92m not s= uggesting it doesn=92t mean anything. It certainly is good to be explicit = about the order and provide examples and if that=92s all you are suggesting= , i can=92t disagree. > >I think at some point in the e-mail thread you were questioning the logic = of the MUST for providing details of the order of claims in RFC8225 and tha= t=92s what i was trying to address. My initial comment was that the current PASSporT extensions do not provide = details of the order, and that we should fix that :) Later, I questioned the logic of the MUST when I was told that RFC8225 alre= ady defines the order for extensions. Regards, Christer On Mar 14, 2018, at 8:00 AM, Christer Holmberg > wrote: Hi, > Perhaps its a bit over prescriptive, i think the intention was only to sa= y that it should be documented what claims and provide order and examples. > > It wasn=92t to imply that it would be different or there would be implica= tions of order or anything. > > To step up a level, in general, JSON object key order never matters, it= =92s a key value object that you index on key, so order in most cases is ar= bitrary. For PASSporT, we > have a short form that is supported in RFC8224, where you don=92t need to= send the header/claims because those objects are already in the SIP INVITE= . So we needed a > way to have the header/claims to be reconstructed in a predictable and re= producible way. An therefore the dependency on order. Correct. I wasn=92t questioning the need for ordering, but maybe I wasn=92t= clear about that :) > So again, yes we say you should say order in RFC8225, which i would say w= ould inherently be the case with an example at a minimum. A MUST might hav= e been > a bit strong, but i don=92t see this as a huge concern. I=92d be curious= to hear from others whether they think this is a real concern or not. It depends on what is meant by =93concern=94. When people define PASSporT e= xtensions future, they will not look at this e-mail thread =96 they will re= ad RFC8225. We shouldn=92t have MUSTs if they don=92t mean anything. Anyway, as far as the current PASSporT extensions are concerned, maybe we c= ould solve the issue by including a statement saying something like: =93The order of the claims within the PASSporT JSON object does not matter. However, as defined in Section 9 of RF= C8225, when the JSON serialisation takes place, the claims must be placed i= n lexicographic order=94 Regards, Christer On Mar 13, 2018, at 3:58 PM, Christer Holmberg > wrote: Hi, >Try RFC 8225, Section 9, perhaps? Ok, so if that=92s a generic rule, why the statement saying that PASSporT e= xtensions must specify the order? Regards, Christer From: Christer Holmberg [mailto:christer.holmberg@ericsson.com] Sent: Tuesday, March 13, 2018 2:47 PM To: Chris Wendt > Cc: stir@ietf.org; adam@nostrum.com Subject: Re: [stir] PASSporT extensions: order of claims Hi, >I would agree with the text, the only caveat i would point out is that the= extension definition has >no choice to the order other than alphabetic order, so the order is essent= ially implied. So, it=92s sort >of a technicality that maybe we didn=92t anticipate, but i think technical= ly you are correct. Not sure I understand the has-no-choice part. Where is it said that the cla= ims must be ordered in alphabetic order? We could for sure specify it that = way, but based on your e-mail it seems like it is already specified somewhe= re? Regards, Christer On Mar 10, 2018, at 8:27 AM, Christer Holmberg > wrote: Section 8.3 of RFC 8225, that is. From: stir [mailto:stir-bounces@ietf.org] On Behalf Of Christer Holmberg Sent: 10 March 2018 15:26 To: stir@ietf.org Cc: adam@nostrum.com Subject: [stir] PASSporT extensions: order of claims Hi, Section says: =93Specifications that define extensions to the PASSporT mechanism MUST explicitly specify what claims they include beyond the base set of claims from this document, the order in which they will appear,=85=94 When looking at the extensions we are currently working on: draft-ietf-stir-rph-03 draft-ietf-stir-passport-shaken-01 draft-ietf-stir-passport-divert-02 =85I don=92t see anything about the order in any of the documents. I think it would be good to have a dedicated =93Order of claims=94 section,= or something similar, in each extension specification. When looking at the examples in the drafts above, it seems like even the ba= se claims are in different orders. Not sure whether there is an explicit re= quirement that they need to be in order, thought. Regards, Christer _______________________________________________ stir mailing list stir@ietf.org https://www.ietf.org/mailman/listinfo/stir --_000_D6CEF1A52CC9Fchristerholmbergericssoncom_ Content-Type: text/html; charset="Windows-1252" Content-ID: Content-Transfer-Encoding: quoted-printable
Hi,

>To be clear, and i think this was the point of my last = e-mail, I=92m not suggesting it doesn=92t mean anything.  It certainly= is good to be explicit about the order and provide examples and if that=92= s all you are suggesting, i can=92t disagree.
>
>I think at some point in the e-mail thread you were que= stioning the logic of the MUST for providing details of the order of claims= in RFC8225 and that=92s what i was trying to address.

My initial comment was that the current PASSporT extensions do not pro= vide details of the order, and that we should fix that :)

Later, I questioned the logic of the MUST when I was told that RFC8225= already defines the order for extensions.

Regards,

Christer


On Mar 14, 2018, at 8:00 AM, Christer Holmberg <christer.holmberg@eri= csson.com> wrote:

Hi,

> Perhaps its a bit over prescriptive, i think the intention was only to= say that it should be documented what claims and provide order and example= s.  
>
> It wasn=92t to imply that it would be different or there would be impl= ications of order or anything.
>
> To step up a level, in general, JSON object key order = never matters, it=92s a key value object that you index on key, so order in= most cases is arbitrary.  For PASSporT, we
> have a short form that is supported in RFC8224, where you don=92t ne= ed to send the header/claims because those objects are already in the SIP I= NVITE.  So we needed a 
> way to have the header/claims to be reconstructed in a predictable a= nd reproducible way.  An therefore the dependency on order.

Correct. I wasn=92t questioning the need for ordering, but maybe I wasn= =92t clear about that :)

> So again, yes we say you should say order in RFC8225, = which i would say would inherently be the case with an example at a minimum= .  A MUST might have been
> a bit strong, but i don=92t see this as a huge concern.  I=92d = be curious to hear from others whether they think this is a real concern or= not.

It depends on what is meant by =93concern=94. When people d= efine PASSporT extensions future, they will not look at this e-mail thread = =96 they will read RFC8225. We shouldn=92t have MUSTs if they don=92t mean = anything.

Anyway, as far as the current PASSporT extensions are concerned, maybe we= could solve the issue by including a statement saying something like:

=93The order of the claims within the PASSporT <inser= t-name-of-PASSporT extension> JSON object does not matter. However, as d= efined in Section 9 of RFC8225, when the JSON serialisation takes place, the claims must be placed in lexicographic or= der=94

Regards,

Christer






On Mar 13, 2018, at 3:58 PM, Christer Holmberg <christer.holmberg@eri= csson.com> wrote:

Hi,
 
>Try RFC 8225, Section 9, per= haps? 
 
Ok, so if that=92s a generic rul= e, why the statement saying that PASSporT extensions must specify the order= ?
 
Regards,
 
Christer
 
From: Christer Holmberg [mailto:christer.holmberg@ericsson.= com] 
Sent: T= uesday, March 13, 2018 2:47 PM
To: Chr= is Wendt <chris-ietf@chriswendt.net>
Cc: stir@ietf.org;=  adam@nostrum.com
Subject: Re: [stir] PASSporT extensions: order of claims
 
Hi,
 
>I would agree with the text, the only caveat i would point out is that = the extension definition has
>no choice to the order other than alphabetic order, so the or= der is essentially implied.  So, it=92s sort
>of a technicality that maybe we didn=92t anticipate, but i th= ink technically you are correct.
 
Not sure I understand the has-no-choice part. Where is it said that the = claims must be ordered in alphabetic order? We could for sure specify it th= at way, but based on your e-mail it seems like it is already specified somewhere?=
 
Regards,
 
Christer
 

 

On Mar 10, 2018, at 8:27 AM, Christer Holmberg <christer.holmberg@ericsson.com> wrote:
 
Section 8.3 of RFC 8225, that is.
 
From: stir [mailto:stir-bounces@ietf.org] On Behalf Of Christer Holmberg
Sent: 1= 0 March 2018 15:26
To: stir@ietf.org
Cc: adam@nostrum.com
Subject: [stir] PASSporT extensions: order of claims
 
Hi,
 
Section  says:
 
   =93Specifications that define extensions to the PASSporT me= chanism MUST
   explicitly specify what claims they include beyond the base= set of
   claims from this document, the order in which they will appear,=85= =94
 
When looking at the extensions we are currently working on:
 
draft-ietf-stir-rph-03
draft-ietf-stir-passport-shaken-01
draft-ietf-stir-passport-divert-02
 
=85I don=92t see anything about the order in any of the documents.
 
I think it would be good to have a dedicated =93Order of claims=94 secti= on, or something similar, in each extension specification.<= /o:p>
 
When looking at the examples in the drafts above, it seems like even the= base claims are in different orders. Not sure whether there is an explicit= requirement that they need to be in order, thought.
 
Regards,
 
Christer
 
 
_______________________________________________
stir mailing list
stir@ietf.org
https://www.ietf.org/mailman/listinfo/stir


 --_000_D6CEF1A52CC9Fchristerholmbergericssoncom_-- From nobody Wed Mar 14 11:23:13 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1CB1912D0C3 for ; Wed, 14 Mar 2018 06:43:05 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.1 X-Spam-Level: X-Spam-Status: No, score=-0.1 tagged_above=-999 required=5 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=team.neustar Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0_NuEEzcRP8U for ; Wed, 14 Mar 2018 06:43:02 -0700 (PDT) Received: from mx0b-0018ba01.pphosted.com (mx0a-0018ba01.pphosted.com [67.231.149.94]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7F07112D775 for ; Wed, 14 Mar 2018 06:42:57 -0700 (PDT) Received: from pps.filterd (m0078664.ppops.net [127.0.0.1]) by mx0a-0018ba01.pphosted.com (8.16.0.22/8.16.0.22) with SMTP id w2EDWtPY004752; Wed, 14 Mar 2018 09:42:53 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=team.neustar; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : mime-version; s=selector1; bh=YXEehS8X1/paOFflZ+vMjOtIm2Z5eYI43QhObaWv2EU=; b=bps22rZiUoCQKdsxv9SPza+oVjGxlx9MIRx9HgGx8MOFVKORA423vtkSUQCtqwgRbdZV 93alxO8Q9YMgiBLklsgXSg8vc8cN59jyiviNm7dg/xVAYVwI0Lz2+bGxsrKvELMsdWdU AdKgaXSpLS7Z8pELFlBmfBealEVhfsU0Hr9zb2VjTKhUgh6kQQ47jMaO9feV8AjFtRCU 1jtWsd+NKT5phlYCuNdE99AvYmpL68MFj+A7/Ck1taiCPujpYM3ZyggpkWUYVPMYUhA4 95DDglLA6gF621MV6N0DAZoJyhVDE8alszKsIoeJUSGN6TmLi8ydLzE7O28MIirQnt8K mQ== Received: from stntexhc12.cis.neustar.com ([156.154.17.216]) by mx0a-0018ba01.pphosted.com with ESMTP id 2gmaw35v2d-1 (version=TLSv1 cipher=ECDHE-RSA-AES256-SHA bits=256 verify=NOT); Wed, 14 Mar 2018 09:42:52 -0400 Received: from STNTEXMB13.cis.neustar.com ([169.254.3.141]) by stntexhc12.cis.neustar.com ([::1]) with mapi id 14.03.0279.002; Wed, 14 Mar 2018 09:42:51 -0400 From: "Politz, Ken" To: Chris Wendt , Christer Holmberg CC: "stir@ietf.org" , "adam@nostrum.com" Thread-Topic: [EXTERNAL] Re: [stir] PASSporT extensions: order of claims Thread-Index: AQHTuvvKLoGLTt5520aG5ALLxR8fX6POigGAgAERWYiAACL8UA== Date: Wed, 14 Mar 2018 13:42:51 +0000 Message-ID: <46946849EEFF3043A8FBCC3D102A2C1A3FCAF4E9@stntexmb13.cis.neustar.com> References: <7594FB04B1934943A5C02806D1A2204B6C1D17C1@ESESSMB109.ericsson.se> <7594FB04B1934943A5C02806D1A2204B6C1D1804@ESESSMB109.ericsson.se> <8B0E0275-68BD-41E9-B128-589F13C06D66@chriswendt.net> <7594FB04B1934943A5C02806D1A2204B6C2007A0@ESESSMB109.ericsson.se> <46946849EEFF3043A8FBCC3D102A2C1A3FCADE50@stntexmb13.cis.neustar.com> <7594FB04B1934943A5C02806D1A2204B6C200A0A@ESESSMB109.ericsson.se> <08B1E835-CA5E-4636-AE0E-983F3EFA82C1@chriswendt.net> In-Reply-To: <08B1E835-CA5E-4636-AE0E-983F3EFA82C1@chriswendt.net> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.96.9.94] Content-Type: multipart/alternative; boundary="_000_46946849EEFF3043A8FBCC3D102A2C1A3FCAF4E9stntexmb13cisne_" MIME-Version: 1.0 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:, , definitions=2018-03-14_06:, , signatures=0 X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1015 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1711220000 definitions=main-1803140155 Archived-At: X-Mailman-Approved-At: Wed, 14 Mar 2018 11:23:11 -0700 Subject: Re: [stir] [EXTERNAL] Re: PASSporT extensions: order of claims X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Mar 2018 13:43:05 -0000 --_000_46946849EEFF3043A8FBCC3D102A2C1A3FCAF4E9stntexmb13cisne_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 QWxsIEkgY2FuIHNheSBpcyB0aGF0LCB3aXRoIHJlbGF0aXZlbHkgbGltaXRlZCBTSEFLRU4gaW5k dXN0cnkgdGVzdGluZywgSlNPTiBrZXkgb3JkZXIgaGFzIGNvbWUgdXAgdHdpY2UuICBBcyBuZXcg ZXh0ZW5zaW9ucyBnZXQgYWRkZWQgYW5kIGZvciBpbnRlcm9wZXJhYmlsaXR5IHB1cnBvc2VzLCBJ IHdvdWxkIHJlcXVlc3QgdGhhdCBjbGFyaXR5IGJlIHByb3ZpZGVkIGluIHJlbGF0ZWQgc3BlY3Mg d2l0aCBjb25zaXN0ZW50IGV4YW1wbGVzIGZvciBpbXBsZW1lbnRlcnMuICBUaGFua3MsIEtlbi4N Cg0KRnJvbTogQ2hyaXMgV2VuZHQgW21haWx0bzpjaHJpcy1pZXRmQGNocmlzd2VuZHQubmV0XQ0K U2VudDogV2VkbmVzZGF5LCBNYXJjaCAxNCwgMjAxOCA3OjM2IEFNDQpUbzogQ2hyaXN0ZXIgSG9s bWJlcmcgPGNocmlzdGVyLmhvbG1iZXJnQGVyaWNzc29uLmNvbT4NCkNjOiBQb2xpdHosIEtlbiA8 S2VubmV0aC5Qb2xpdHpAdGVhbS5uZXVzdGFyPjsgc3RpckBpZXRmLm9yZzsgYWRhbUBub3N0cnVt LmNvbQ0KU3ViamVjdDogW0VYVEVSTkFMXSBSZTogW3N0aXJdIFBBU1Nwb3JUIGV4dGVuc2lvbnM6 IG9yZGVyIG9mIGNsYWltcw0KDQpQZXJoYXBzIGl0cyBhIGJpdCBvdmVyIHByZXNjcmlwdGl2ZSwg aSB0aGluayB0aGUgaW50ZW50aW9uIHdhcyBvbmx5IHRvIHNheSB0aGF0IGl0IHNob3VsZCBiZSBk b2N1bWVudGVkIHdoYXQgY2xhaW1zIGFuZCBwcm92aWRlIG9yZGVyIGFuZCBleGFtcGxlcy4gIEl0 IHdhc27igJl0IHRvIGltcGx5IHRoYXQgaXQgd291bGQgYmUgZGlmZmVyZW50IG9yIHRoZXJlIHdv dWxkIGJlIGltcGxpY2F0aW9ucyBvZiBvcmRlciBvciBhbnl0aGluZy4NCg0KVG8gc3RlcCB1cCBh IGxldmVsLCBpbiBnZW5lcmFsLCBKU09OIG9iamVjdCBrZXkgb3JkZXIgbmV2ZXIgbWF0dGVycywg aXTigJlzIGEga2V5IHZhbHVlIG9iamVjdCB0aGF0IHlvdSBpbmRleCBvbiBrZXksIHNvIG9yZGVy IGluIG1vc3QgY2FzZXMgaXMgYXJiaXRyYXJ5LiAgRm9yIFBBU1Nwb3JULCB3ZSBoYXZlIGEgc2hv cnQgZm9ybSB0aGF0IGlzIHN1cHBvcnRlZCBpbiBSRkM4MjI0LCB3aGVyZSB5b3UgZG9u4oCZdCBu ZWVkIHRvIHNlbmQgdGhlIGhlYWRlci9jbGFpbXMgYmVjYXVzZSB0aG9zZSBvYmplY3RzIGFyZSBh bHJlYWR5IGluIHRoZSBTSVAgSU5WSVRFLiAgU28gd2UgbmVlZGVkIGEgd2F5IHRvIGhhdmUgdGhl IGhlYWRlci9jbGFpbXMgdG8gYmUgcmVjb25zdHJ1Y3RlZCBpbiBhIHByZWRpY3RhYmxlIGFuZCBy ZXByb2R1Y2libGUgd2F5LiAgQW4gdGhlcmVmb3JlIHRoZSBkZXBlbmRlbmN5IG9uIG9yZGVyLg0K DQpTbyBhZ2FpbiwgeWVzIHdlIHNheSB5b3Ugc2hvdWxkIHNheSBvcmRlciBpbiBSRkM4MjI1LCB3 aGljaCBpIHdvdWxkIHNheSB3b3VsZCBpbmhlcmVudGx5IGJlIHRoZSBjYXNlIHdpdGggYW4gZXhh bXBsZSBhdCBhIG1pbmltdW0uICBBIE1VU1QgbWlnaHQgaGF2ZSBiZWVuIGEgYml0IHN0cm9uZywg YnV0IGkgZG9u4oCZdCBzZWUgdGhpcyBhcyBhIGh1Z2UgY29uY2Vybi4gIEnigJlkIGJlIGN1cmlv dXMgdG8gaGVhciBmcm9tIG90aGVycyB3aGV0aGVyIHRoZXkgdGhpbmsgdGhpcyBpcyBhIHJlYWwg Y29uY2VybiBvciBub3QuDQoNCg0KDQpPbiBNYXIgMTMsIDIwMTgsIGF0IDM6NTggUE0sIENocmlz dGVyIEhvbG1iZXJnIDxjaHJpc3Rlci5ob2xtYmVyZ0Blcmljc3Nvbi5jb208bWFpbHRvOmNocmlz dGVyLmhvbG1iZXJnQGVyaWNzc29uLmNvbT4+IHdyb3RlOg0KDQpIaSwNCg0KPlRyeSBSRkMgODIy NSwgU2VjdGlvbiA5LCBwZXJoYXBzPw0KDQpPaywgc28gaWYgdGhhdOKAmXMgYSBnZW5lcmljIHJ1 bGUsIHdoeSB0aGUgc3RhdGVtZW50IHNheWluZyB0aGF0IFBBU1Nwb3JUIGV4dGVuc2lvbnMgbXVz dCBzcGVjaWZ5IHRoZSBvcmRlcj8NCg0KUmVnYXJkcywNCg0KQ2hyaXN0ZXINCg0KRnJvbTogQ2hy aXN0ZXIgSG9sbWJlcmcgW21haWx0bzpjaHJpc3Rlci5ob2xtYmVyZ0Blcmljc3Nvbi5jb21dDQpT ZW50OiBUdWVzZGF5LCBNYXJjaCAxMywgMjAxOCAyOjQ3IFBNDQpUbzogQ2hyaXMgV2VuZHQgPGNo cmlzLWlldGZAY2hyaXN3ZW5kdC5uZXQ8bWFpbHRvOmNocmlzLWlldGZAY2hyaXN3ZW5kdC5uZXQ+ Pg0KQ2M6IHN0aXJAaWV0Zi5vcmc8bWFpbHRvOnN0aXJAaWV0Zi5vcmc+OyBhZGFtQG5vc3RydW0u Y29tPG1haWx0bzphZGFtQG5vc3RydW0uY29tPg0KU3ViamVjdDogUmU6IFtzdGlyXSBQQVNTcG9y VCBleHRlbnNpb25zOiBvcmRlciBvZiBjbGFpbXMNCg0KSGksDQoNCj5JIHdvdWxkIGFncmVlIHdp dGggdGhlIHRleHQsIHRoZSBvbmx5IGNhdmVhdCBpIHdvdWxkIHBvaW50IG91dCBpcyB0aGF0IHRo ZSBleHRlbnNpb24gZGVmaW5pdGlvbiBoYXMNCj5ubyBjaG9pY2UgdG8gdGhlIG9yZGVyIG90aGVy IHRoYW4gYWxwaGFiZXRpYyBvcmRlciwgc28gdGhlIG9yZGVyIGlzIGVzc2VudGlhbGx5IGltcGxp ZWQuICBTbywgaXTigJlzIHNvcnQNCj5vZiBhIHRlY2huaWNhbGl0eSB0aGF0IG1heWJlIHdlIGRp ZG7igJl0IGFudGljaXBhdGUsIGJ1dCBpIHRoaW5rIHRlY2huaWNhbGx5IHlvdSBhcmUgY29ycmVj dC4NCg0KTm90IHN1cmUgSSB1bmRlcnN0YW5kIHRoZSBoYXMtbm8tY2hvaWNlIHBhcnQuIFdoZXJl IGlzIGl0IHNhaWQgdGhhdCB0aGUgY2xhaW1zIG11c3QgYmUgb3JkZXJlZCBpbiBhbHBoYWJldGlj IG9yZGVyPyBXZSBjb3VsZCBmb3Igc3VyZSBzcGVjaWZ5IGl0IHRoYXQgd2F5LCBidXQgYmFzZWQg b24geW91ciBlLW1haWwgaXQgc2VlbXMgbGlrZSBpdCBpcyBhbHJlYWR5IHNwZWNpZmllZCBzb21l d2hlcmU/DQoNClJlZ2FyZHMsDQoNCkNocmlzdGVyDQoNCg0KT24gTWFyIDEwLCAyMDE4LCBhdCA4 OjI3IEFNLCBDaHJpc3RlciBIb2xtYmVyZyA8Y2hyaXN0ZXIuaG9sbWJlcmdAZXJpY3Nzb24uY29t PG1haWx0bzpjaHJpc3Rlci5ob2xtYmVyZ0Blcmljc3Nvbi5jb20+PiB3cm90ZToNCg0KU2VjdGlv biA4LjMgb2YgUkZDIDgyMjUsIHRoYXQgaXMuDQoNCkZyb206IHN0aXIgW21haWx0bzpzdGlyLWJv dW5jZXNAaWV0Zi5vcmddIE9uIEJlaGFsZiBPZiBDaHJpc3RlciBIb2xtYmVyZw0KU2VudDogMTAg TWFyY2ggMjAxOCAxNToyNg0KVG86IHN0aXJAaWV0Zi5vcmc8bWFpbHRvOnN0aXJAaWV0Zi5vcmc+ DQpDYzogYWRhbUBub3N0cnVtLmNvbTxtYWlsdG86YWRhbUBub3N0cnVtLmNvbT4NClN1YmplY3Q6 IFtzdGlyXSBQQVNTcG9yVCBleHRlbnNpb25zOiBvcmRlciBvZiBjbGFpbXMNCg0KSGksDQoNClNl Y3Rpb24gIHNheXM6DQoNCiAgIOKAnFNwZWNpZmljYXRpb25zIHRoYXQgZGVmaW5lIGV4dGVuc2lv bnMgdG8gdGhlIFBBU1Nwb3JUIG1lY2hhbmlzbSBNVVNUDQogICBleHBsaWNpdGx5IHNwZWNpZnkg d2hhdCBjbGFpbXMgdGhleSBpbmNsdWRlIGJleW9uZCB0aGUgYmFzZSBzZXQgb2YNCiAgIGNsYWlt cyBmcm9tIHRoaXMgZG9jdW1lbnQsIHRoZSBvcmRlciBpbiB3aGljaCB0aGV5IHdpbGwgYXBwZWFy LOKApuKAnQ0KDQpXaGVuIGxvb2tpbmcgYXQgdGhlIGV4dGVuc2lvbnMgd2UgYXJlIGN1cnJlbnRs eSB3b3JraW5nIG9uOg0KDQpkcmFmdC1pZXRmLXN0aXItcnBoLTAzDQpkcmFmdC1pZXRmLXN0aXIt cGFzc3BvcnQtc2hha2VuLTAxDQpkcmFmdC1pZXRmLXN0aXItcGFzc3BvcnQtZGl2ZXJ0LTAyDQoN CuKApkkgZG9u4oCZdCBzZWUgYW55dGhpbmcgYWJvdXQgdGhlIG9yZGVyIGluIGFueSBvZiB0aGUg ZG9jdW1lbnRzLg0KDQpJIHRoaW5rIGl0IHdvdWxkIGJlIGdvb2QgdG8gaGF2ZSBhIGRlZGljYXRl ZCDigJxPcmRlciBvZiBjbGFpbXPigJ0gc2VjdGlvbiwgb3Igc29tZXRoaW5nIHNpbWlsYXIsIGlu IGVhY2ggZXh0ZW5zaW9uIHNwZWNpZmljYXRpb24uDQoNCldoZW4gbG9va2luZyBhdCB0aGUgZXhh bXBsZXMgaW4gdGhlIGRyYWZ0cyBhYm92ZSwgaXQgc2VlbXMgbGlrZSBldmVuIHRoZSBiYXNlIGNs YWltcyBhcmUgaW4gZGlmZmVyZW50IG9yZGVycy4gTm90IHN1cmUgd2hldGhlciB0aGVyZSBpcyBh biBleHBsaWNpdCByZXF1aXJlbWVudCB0aGF0IHRoZXkgbmVlZCB0byBiZSBpbiBvcmRlciwgdGhv dWdodC4NCg0KUmVnYXJkcywNCg0KQ2hyaXN0ZXINCg0KDQpfX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fXw0Kc3RpciBtYWlsaW5nIGxpc3QNCnN0aXJAaWV0Zi5v cmc8bWFpbHRvOnN0aXJAaWV0Zi5vcmc+DQpodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xp c3RpbmZvL3N0aXI8aHR0cHM6Ly91cmxkZWZlbnNlLnByb29mcG9pbnQuY29tL3YyL3VybD91PWh0 dHBzLTNBX193d3cuaWV0Zi5vcmdfbWFpbG1hbl9saXN0aW5mb19zdGlyJmQ9RHdNR2FRJmM9TU9w dE5sVnRJRVRlREFMQ19sVUxydyZyPXd3MVM5QkhFY3BFNE1NVWJnR1Fyc29MLVNLM1VDR1kzM0tv YWoyaDl6WXcmbT1fREJkbVVLcGtVQVVWdjEyMFB1SG9NdC1UVnRUdXpPSHNmRlFkQVdtZUZzJnM9 eVlZNmt2TlNseDdXODRuWExmWVA3bjRQU0gwUzdVaXEzVksyRkk2aXdFVSZlPT4NCg0K --_000_46946849EEFF3043A8FBCC3D102A2C1A3FCAF4E9stntexmb13cisne_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 SGVsdmV0aWNhOw0KCXBhbm9zZS0xOjIgMTEgNiA0IDIgMiAyIDIgMiA0O30NCkBmb250LWZhY2UN Cgl7Zm9udC1mYW1pbHk6IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAz IDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAx NSA1IDIgMiAyIDQgMyAyIDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFs LCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90 dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseToiVGltZXMgTmV3 IFJvbWFuIixzZXJpZjt9DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1w cmlvcml0eTo5OTsNCgljb2xvcjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0K YTp2aXNpdGVkLCBzcGFuLk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0 eTo5OTsNCgljb2xvcjpwdXJwbGU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpzcGFu LmFwcGxlLWNvbnZlcnRlZC1zcGFjZQ0KCXttc28tc3R5bGUtbmFtZTphcHBsZS1jb252ZXJ0ZWQt c3BhY2U7fQ0Kc3Bhbi5FbWFpbFN0eWxlMTgNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWwtcmVw bHk7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJY29sb3I6IzFGNDk3RDt9 DQouTXNvQ2hwRGVmYXVsdA0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25seTsNCglmb250LXNp emU6MTAuMHB0O30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtzaXplOjguNWluIDExLjBpbjsNCglt YXJnaW46MS4waW4gMS4waW4gMS4waW4gMS4waW47fQ0KZGl2LldvcmRTZWN0aW9uMQ0KCXtwYWdl OldvcmRTZWN0aW9uMTt9DQotLT48L3N0eWxlPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86 c2hhcGVkZWZhdWx0cyB2OmV4dD0iZWRpdCIgc3BpZG1heD0iMTAyNiIgLz4NCjwveG1sPjwhW2Vu ZGlmXS0tPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVsYXlvdXQgdjpleHQ9ImVk aXQiPg0KPG86aWRtYXAgdjpleHQ9ImVkaXQiIGRhdGE9IjEiIC8+DQo8L286c2hhcGVsYXlvdXQ+ PC94bWw+PCFbZW5kaWZdLS0+DQo8L2hlYWQ+DQo8Ym9keSBsYW5nPSJFTi1VUyIgbGluaz0iYmx1 ZSIgdmxpbms9InB1cnBsZSI+DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEiPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPkFsbCBJIGNhbiBzYXkg aXMgdGhhdCwgd2l0aCByZWxhdGl2ZWx5IGxpbWl0ZWQgU0hBS0VOIGluZHVzdHJ5IHRlc3Rpbmcs IEpTT04ga2V5IG9yZGVyIGhhcyBjb21lIHVwIHR3aWNlLiZuYnNwOyBBcyBuZXcgZXh0ZW5zaW9u cyBnZXQgYWRkZWQgYW5kIGZvciBpbnRlcm9wZXJhYmlsaXR5DQogcHVycG9zZXMsIEkgd291bGQg cmVxdWVzdCB0aGF0IGNsYXJpdHkgYmUgcHJvdmlkZWQgaW4gcmVsYXRlZCBzcGVjcyB3aXRoIGNv bnNpc3RlbnQgZXhhbXBsZXMgZm9yIGltcGxlbWVudGVycy4mbmJzcDsgVGhhbmtzLCBLZW4uPG86 cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlm O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXY+DQo8ZGl2 IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNFMUUxRTEgMS4wcHQ7cGFkZGlu ZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMt c2VyaWYiPkZyb206PC9zcGFuPjwvYj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPiBDaHJpcyBXZW5kdCBbbWFp bHRvOmNocmlzLWlldGZAY2hyaXN3ZW5kdC5uZXRdDQo8YnI+DQo8Yj5TZW50OjwvYj4gV2VkbmVz ZGF5LCBNYXJjaCAxNCwgMjAxOCA3OjM2IEFNPGJyPg0KPGI+VG86PC9iPiBDaHJpc3RlciBIb2xt YmVyZyAmbHQ7Y2hyaXN0ZXIuaG9sbWJlcmdAZXJpY3Nzb24uY29tJmd0Ozxicj4NCjxiPkNjOjwv Yj4gUG9saXR6LCBLZW4gJmx0O0tlbm5ldGguUG9saXR6QHRlYW0ubmV1c3RhciZndDs7IHN0aXJA aWV0Zi5vcmc7IGFkYW1Abm9zdHJ1bS5jb208YnI+DQo8Yj5TdWJqZWN0OjwvYj4gW0VYVEVSTkFM XSBSZTogW3N0aXJdIFBBU1Nwb3JUIGV4dGVuc2lvbnM6IG9yZGVyIG9mIGNsYWltczxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpw PiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlBlcmhhcHMgaXRzIGEgYml0 IG92ZXIgcHJlc2NyaXB0aXZlLCBpIHRoaW5rIHRoZSBpbnRlbnRpb24gd2FzIG9ubHkgdG8gc2F5 IHRoYXQgaXQgc2hvdWxkIGJlIGRvY3VtZW50ZWQgd2hhdCBjbGFpbXMgYW5kIHByb3ZpZGUgb3Jk ZXIgYW5kIGV4YW1wbGVzLiAmbmJzcDtJdCB3YXNu4oCZdCB0byBpbXBseSB0aGF0IGl0IHdvdWxk IGJlIGRpZmZlcmVudCBvciB0aGVyZSB3b3VsZCBiZSBpbXBsaWNhdGlvbnMgb2Ygb3JkZXIgb3IN CiBhbnl0aGluZy48bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PlRvIHN0ZXAgdXAgYSBsZXZlbCwgaW4gZ2VuZXJhbCwgSlNPTiBvYmplY3Qga2V5IG9yZGVyIG5l dmVyIG1hdHRlcnMsIGl04oCZcyBhIGtleSB2YWx1ZSBvYmplY3QgdGhhdCB5b3UgaW5kZXggb24g a2V5LCBzbyBvcmRlciBpbiBtb3N0IGNhc2VzIGlzIGFyYml0cmFyeS4gJm5ic3A7Rm9yIFBBU1Nw b3JULCB3ZSBoYXZlIGEgc2hvcnQgZm9ybSB0aGF0IGlzIHN1cHBvcnRlZCBpbiBSRkM4MjI0LCB3 aGVyZSB5b3UgZG9u4oCZdCBuZWVkDQogdG8gc2VuZCB0aGUgaGVhZGVyL2NsYWltcyBiZWNhdXNl IHRob3NlIG9iamVjdHMgYXJlIGFscmVhZHkgaW4gdGhlIFNJUCBJTlZJVEUuICZuYnNwO1NvIHdl IG5lZWRlZCBhIHdheSB0byBoYXZlIHRoZSBoZWFkZXIvY2xhaW1zIHRvIGJlIHJlY29uc3RydWN0 ZWQgaW4gYSBwcmVkaWN0YWJsZSBhbmQgcmVwcm9kdWNpYmxlIHdheS4gJm5ic3A7QW4gdGhlcmVm b3JlIHRoZSBkZXBlbmRlbmN5IG9uIG9yZGVyLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5TbyBhZ2FpbiwgeWVzIHdlIHNheSB5b3Ugc2hvdWxk IHNheSBvcmRlciBpbiBSRkM4MjI1LCB3aGljaCBpIHdvdWxkIHNheSB3b3VsZCBpbmhlcmVudGx5 IGJlIHRoZSBjYXNlIHdpdGggYW4gZXhhbXBsZSBhdCBhIG1pbmltdW0uICZuYnNwO0EgTVVTVCBt aWdodCBoYXZlIGJlZW4gYSBiaXQgc3Ryb25nLCBidXQgaSBkb27igJl0IHNlZSB0aGlzIGFzIGEg aHVnZSBjb25jZXJuLiAmbmJzcDtJ4oCZZCBiZSBjdXJpb3VzIHRvIGhlYXIgZnJvbQ0KIG90aGVy cyB3aGV0aGVyIHRoZXkgdGhpbmsgdGhpcyBpcyBhIHJlYWwgY29uY2VybiBvciBub3QuPG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNw OzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 YnI+DQo8YnI+DQo8bzpwPjwvbzpwPjwvcD4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9w OjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi Pk9uIE1hciAxMywgMjAxOCwgYXQgMzo1OCBQTSwgQ2hyaXN0ZXIgSG9sbWJlcmcgJmx0OzxhIGhy ZWY9Im1haWx0bzpjaHJpc3Rlci5ob2xtYmVyZ0Blcmljc3Nvbi5jb20iPmNocmlzdGVyLmhvbG1i ZXJnQGVyaWNzc29uLmNvbTwvYT4mZ3Q7IHdyb3RlOjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPkhpLDwv c3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJy aSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPiZndDtUcnkgUkZDIDgyMjUsIFNlY3Rp b24gOSwgcGVyaGFwcz8mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+Jm5i c3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2Fs aWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPk9rLCBzbyBpZiB0aGF04oCZcyBh IGdlbmVyaWMgcnVsZSwgd2h5IHRoZSBzdGF0ZW1lbnQgc2F5aW5nIHRoYXQgUEFTU3BvclQgZXh0 ZW5zaW9ucyBtdXN0IHNwZWNpZnkgdGhlIG9yZGVyPzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjoj MUY0OTdEIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWls eTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+UmVnYXJkcyw8 L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJp JnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlm O2NvbG9yOiMxRjQ5N0QiPkNocmlzdGVyPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0Qi PiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9 ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0UxRTFFMSAxLjBwdDtwYWRkaW5nOjMuMHB0 IDBpbiAwaW4gMGluIj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMt c2VyaWYiPkZyb206PC9zcGFuPjwvYj48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNl Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJp JnF1b3Q7LHNhbnMtc2VyaWYiPiZuYnNwOzwvc3Bhbj48L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5D aHJpc3Rlcg0KIEhvbG1iZXJnIFs8YSBocmVmPSJtYWlsdG86Y2hyaXN0ZXIuaG9sbWJlcmdAZXJp Y3Nzb24uY29tIj48c3BhbiBzdHlsZT0iY29sb3I6cHVycGxlIj5tYWlsdG86Y2hyaXN0ZXIuaG9s bWJlcmdAZXJpY3Nzb24uY29tPC9zcGFuPjwvYT5dPHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRl ZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxicj4NCjxiPlNlbnQ6PC9iPjxzcGFuIGNsYXNzPSJhcHBs ZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj5UdWVzZGF5LCBNYXJjaCAxMywgMjAxOCAy OjQ3IFBNPGJyPg0KPGI+VG86PC9iPjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2Ui PiZuYnNwOzwvc3Bhbj5DaHJpcyBXZW5kdCAmbHQ7PGEgaHJlZj0ibWFpbHRvOmNocmlzLWlldGZA Y2hyaXN3ZW5kdC5uZXQiPjxzcGFuIHN0eWxlPSJjb2xvcjpwdXJwbGUiPmNocmlzLWlldGZAY2hy aXN3ZW5kdC5uZXQ8L3NwYW4+PC9hPiZndDs8YnI+DQo8Yj5DYzo8L2I+PHNwYW4gY2xhc3M9ImFw cGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxhIGhyZWY9Im1haWx0bzpzdGlyQGll dGYub3JnIj48c3BhbiBzdHlsZT0iY29sb3I6cHVycGxlIj5zdGlyQGlldGYub3JnPC9zcGFuPjwv YT47PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxhIGhy ZWY9Im1haWx0bzphZGFtQG5vc3RydW0uY29tIj48c3BhbiBzdHlsZT0iY29sb3I6cHVycGxlIj5h ZGFtQG5vc3RydW0uY29tPC9zcGFuPjwvYT48YnI+DQo8Yj5TdWJqZWN0OjwvYj48c3BhbiBjbGFz cz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+UmU6IFtzdGlyXSBQQVNTcG9y VCBleHRlbnNpb25zOiBvcmRlciBvZiBjbGFpbXM8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rp dj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNh bnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+SGksPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mZ3Q7SSB3b3VsZCBhZ3JlZSB3aXRoIHRo ZSB0ZXh0LCB0aGUgb25seSBjYXZlYXQgaSB3b3VsZCBwb2ludCBvdXQgaXMgdGhhdCB0aGUgZXh0 ZW5zaW9uIGRlZmluaXRpb24gaGFzPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWls eTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPiZndDs8L3NwYW4+bm8gY2hvaWNlIHRv IHRoZSBvcmRlciBvdGhlciB0aGFuIGFscGhhYmV0aWMgb3JkZXIsIHNvIHRoZSBvcmRlciBpcyBl c3NlbnRpYWxseSBpbXBsaWVkLiAmbmJzcDtTbywgaXTigJlzIHNvcnQ8bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+Jmd0 Ozwvc3Bhbj5vZiBhIHRlY2huaWNhbGl0eSB0aGF0IG1heWJlIHdlIGRpZG7igJl0IGFudGljaXBh dGUsIGJ1dCBpIHRoaW5rIHRlY2huaWNhbGx5IHlvdSBhcmUgY29ycmVjdC48bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fu cy1zZXJpZiI+Tm90IHN1cmUgSSB1bmRlcnN0YW5kIHRoZSBoYXMtbm8tY2hvaWNlIHBhcnQuIFdo ZXJlIGlzIGl0IHNhaWQgdGhhdCB0aGUgY2xhaW1zIG11c3QgYmUgb3JkZXJlZCBpbiBhbHBoYWJl dGljIG9yZGVyPyBXZSBjb3VsZCBmb3Igc3VyZSBzcGVjaWZ5IGl0IHRoYXQgd2F5LCBidXQgYmFz ZWQgb24geW91cg0KIGUtbWFpbCBpdCBzZWVtcyBsaWtlIGl0IGlzIGFscmVhZHkgc3BlY2lmaWVk IHNvbWV3aGVyZT88L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTom cXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+ UmVnYXJkcyw8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVv dDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+Q2hy aXN0ZXI8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtD YWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt YXJnaW4tYm90dG9tOjEyLjBwdCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8YmxvY2txdW90ZSBz dHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+T24gTWFyIDEwLCAyMDE4LCBhdCA4OjI3IEFNLCBDaHJp c3RlciBIb2xtYmVyZyAmbHQ7PGEgaHJlZj0ibWFpbHRvOmNocmlzdGVyLmhvbG1iZXJnQGVyaWNz c29uLmNvbSI+PHNwYW4gc3R5bGU9ImNvbG9yOnB1cnBsZSI+Y2hyaXN0ZXIuaG9sbWJlcmdAZXJp Y3Nzb24uY29tPC9zcGFuPjwvYT4mZ3Q7IHdyb3RlOjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90Oyxz YW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPlNlY3Rpb24gOC4zIG9mIFJGQyA4MjI1LCB0aGF0IGlz Ljwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj4mbmJzcDs8 L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9 ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0UxRTFFMSAxLjBwdDtwYWRkaW5nOjMuMHB0 IDBpbiAwaW4gMGluIj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90 OyxzYW5zLXNlcmlmIj5Gcm9tOjwvc3Bhbj48L2I+PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRl ZC1zcGFjZSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj4mbmJzcDs8L3NwYW4+PC9zcGFuPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1z ZXJpZiI+c3Rpcg0KIFs8YSBocmVmPSJtYWlsdG86c3Rpci1ib3VuY2VzQGlldGYub3JnIj48c3Bh biBzdHlsZT0iY29sb3I6cHVycGxlIj5tYWlsdG86c3Rpci1ib3VuY2VzQGlldGYub3JnPC9zcGFu PjwvYT5dPHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxi Pk9uIEJlaGFsZiBPZjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwv c3Bhbj48L2I+Q2hyaXN0ZXIgSG9sbWJlcmc8YnI+DQo8Yj5TZW50OjwvYj48c3BhbiBjbGFzcz0i YXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+MTAgTWFyY2ggMjAxOCAxNToyNjxi cj4NCjxiPlRvOjwvYj48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8 L3NwYW4+PGEgaHJlZj0ibWFpbHRvOnN0aXJAaWV0Zi5vcmciPjxzcGFuIHN0eWxlPSJjb2xvcjpw dXJwbGUiPnN0aXJAaWV0Zi5vcmc8L3NwYW4+PC9hPjxicj4NCjxiPkNjOjwvYj48c3BhbiBjbGFz cz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PGEgaHJlZj0ibWFpbHRvOmFk YW1Abm9zdHJ1bS5jb20iPjxzcGFuIHN0eWxlPSJjb2xvcjpwdXJwbGUiPmFkYW1Abm9zdHJ1bS5j b208L3NwYW4+PC9hPjxicj4NCjxiPlN1YmplY3Q6PC9iPjxzcGFuIGNsYXNzPSJhcHBsZS1jb252 ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj5bc3Rpcl0gUEFTU3BvclQgZXh0ZW5zaW9uczogb3Jk ZXIgb2YgY2xhaW1zPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2 Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1z ZXJpZiI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5IaSw8L3NwYW4+ PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVv dDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDss c2Fucy1zZXJpZiI+U2VjdGlvbiZuYnNwOyBzYXlzOjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fu cy1zZXJpZiI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxk aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj4mbmJzcDsm bmJzcDsg4oCcU3BlY2lmaWNhdGlvbnMgdGhhdCBkZWZpbmUgZXh0ZW5zaW9ucyB0byB0aGUgUEFT U3BvclQgbWVjaGFuaXNtIE1VU1Q8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2 Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPiZu YnNwOyZuYnNwOyBleHBsaWNpdGx5IHNwZWNpZnkgd2hhdCBjbGFpbXMgdGhleSBpbmNsdWRlIGJl eW9uZCB0aGUgYmFzZSBzZXQgb2Y8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2 Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPiZu YnNwOyZuYnNwOyBjbGFpbXMgZnJvbSB0aGlzIGRvY3VtZW50LDxzcGFuIGNsYXNzPSJhcHBsZS1j b252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48Yj50aGUgb3JkZXIgaW4gd2hpY2ggdGhleSB3 aWxsIGFwcGVhcjwvYj4s4oCm4oCdPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rp dj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj4m bmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPldoZW4gbG9va2luZyBhdCB0 aGUgZXh0ZW5zaW9ucyB3ZSBhcmUgY3VycmVudGx5IHdvcmtpbmcgb246PC9zcGFuPjxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJy aSZxdW90OyxzYW5zLXNlcmlmIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4N CjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2Vy aWYiPmRyYWZ0LWlldGYtc3Rpci1ycGgtMDM8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4N CjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2Vy aWYiPmRyYWZ0LWlldGYtc3Rpci1wYXNzcG9ydC1zaGFrZW4tMDE8L3NwYW4+PG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1 b3Q7LHNhbnMtc2VyaWYiPmRyYWZ0LWlldGYtc3Rpci1wYXNzcG9ydC1kaXZlcnQtMDI8L3NwYW4+ PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVv dDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDss c2Fucy1zZXJpZiI+4oCmSSBkb27igJl0IHNlZSBhbnl0aGluZyBhYm91dCB0aGUgb3JkZXIgaW4g YW55IG9mIHRoZSBkb2N1bWVudHMuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rp dj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj4m bmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPkkgdGhpbmsgaXQgd291bGQg YmUgZ29vZCB0byBoYXZlIGEgZGVkaWNhdGVkIOKAnE9yZGVyIG9mIGNsYWltc+KAnSBzZWN0aW9u LCBvciBzb21ldGhpbmcgc2ltaWxhciwgaW4gZWFjaCBleHRlbnNpb24gc3BlY2lmaWNhdGlvbi48 L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWls eTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkm cXVvdDssc2Fucy1zZXJpZiI+V2hlbiBsb29raW5nIGF0IHRoZSBleGFtcGxlcyBpbiB0aGUgZHJh ZnRzIGFib3ZlLCBpdCBzZWVtcyBsaWtlIGV2ZW4gdGhlIGJhc2UgY2xhaW1zIGFyZSBpbiBkaWZm ZXJlbnQgb3JkZXJzLiBOb3Qgc3VyZSB3aGV0aGVyIHRoZXJlIGlzIGFuIGV4cGxpY2l0IHJlcXVp cmVtZW50IHRoYXQgdGhleSBuZWVkDQogdG8gYmUgaW4gb3JkZXIsIHRob3VnaHQuPC9zcGFuPjxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNh bnMtc2VyaWYiPlJlZ2FyZHMsPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4N CjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj4mbmJz cDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZh bWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPkNocmlzdGVyPC9zcGFuPjxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2Fs aWJyaSZxdW90OyxzYW5zLXNlcmlmIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rp dj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMt c2VyaWYiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250 LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+X19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX188YnI+DQpzdGlyIG1haWxpbmcgbGlzdDxi cj4NCjxhIGhyZWY9Im1haWx0bzpzdGlyQGlldGYub3JnIj48c3BhbiBzdHlsZT0iY29sb3I6cHVy cGxlIj5zdGlyQGlldGYub3JnPC9zcGFuPjwvYT48YnI+DQo8YSBocmVmPSJodHRwczovL3VybGRl ZmVuc2UucHJvb2Zwb2ludC5jb20vdjIvdXJsP3U9aHR0cHMtM0FfX3d3dy5pZXRmLm9yZ19tYWls bWFuX2xpc3RpbmZvX3N0aXImYW1wO2Q9RHdNR2FRJmFtcDtjPU1PcHRObFZ0SUVUZURBTENfbFVM cncmYW1wO3I9d3cxUzlCSEVjcEU0TU1VYmdHUXJzb0wtU0szVUNHWTMzS29hajJoOXpZdyZhbXA7 bT1fREJkbVVLcGtVQVVWdjEyMFB1SG9NdC1UVnRUdXpPSHNmRlFkQVdtZUZzJmFtcDtzPXlZWTZr dk5TbHg3Vzg0blhMZllQN240UFNIMFM3VWlxM1ZLMkZJNml3RVUmYW1wO2U9Ij48c3BhbiBzdHls ZT0iY29sb3I6cHVycGxlIj5odHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3N0 aXI8L3NwYW4+PC9hPjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Js b2NrcXVvdGU+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rp dj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_46946849EEFF3043A8FBCC3D102A2C1A3FCAF4E9stntexmb13cisne_-- From nobody Wed Mar 14 12:09:56 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2FC87124BE8 for ; Wed, 14 Mar 2018 12:09:54 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.01 X-Spam-Level: X-Spam-Status: No, score=-1.01 tagged_above=-999 required=5 tests=[HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H5=-1, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id n3xipnh7dFO5 for ; Wed, 14 Mar 2018 12:09:50 -0700 (PDT) Received: from NAM02-CY1-obe.outbound.protection.outlook.com (mail-cys01nam02on0096.outbound.protection.outlook.com [104.47.37.96]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E3E79124C27 for ; Wed, 14 Mar 2018 12:09:49 -0700 (PDT) Received: from SN4PR0501CA0074.namprd05.prod.outlook.com (2603:10b6:803:22::12) by BY1PR0501MB1192.namprd05.prod.outlook.com (2a01:111:e400:4806::16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.588.7; Wed, 14 Mar 2018 19:09:48 +0000 Received: from SN1NAM01FT043.eop-nam01.prod.protection.outlook.com (2a01:111:f400:7e40::204) by SN4PR0501CA0074.outlook.office365.com (2603:10b6:803:22::12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.609.6 via Frontend Transport; Wed, 14 Mar 2018 19:09:48 +0000 Authentication-Results: spf=pass (sender IP is 144.230.172.36) smtp.mailfrom=sprint.com; team.neustar; dkim=none (message not signed) header.d=none;team.neustar; dmarc=bestguesspass action=none header.from=sprint.com; Received-SPF: Pass (protection.outlook.com: domain of sprint.com designates 144.230.172.36 as permitted sender) receiver=protection.outlook.com; client-ip=144.230.172.36; helo=plsapdm1.corp.sprint.com; Received: from plsapdm1.corp.sprint.com (144.230.172.36) by SN1NAM01FT043.mail.protection.outlook.com (10.152.65.216) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.567.18 via Frontend Transport; Wed, 14 Mar 2018 19:09:47 +0000 Received: from pps.filterd (plsapdm1.corp.sprint.com [127.0.0.1]) by plsapdm1.corp.sprint.com (8.16.0.21/8.16.0.21) with SMTP id w2EHw5WX031909; Wed, 14 Mar 2018 14:09:47 -0500 Received: from pps.reinject (localhost [127.0.0.1]) by plsapdm1.corp.sprint.com with ESMTP id 2gmdvm0qfj-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Wed, 14 Mar 2018 14:09:47 -0500 Received: from plsapdm1.corp.sprint.com (plsapdm1.corp.sprint.com [127.0.0.1]) by pps.reinject (8.16.0.20/8.16.0.20) with SMTP id w2EJ9laF001653; Wed, 14 Mar 2018 14:09:47 -0500 Received: from prewe13m04.ad.sprint.com (prewe13m04.corp.sprint.com [144.226.128.23]) by plsapdm1.corp.sprint.com with ESMTP id 2gmdvm0qf9-3 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT); Wed, 14 Mar 2018 14:09:47 -0500 Received: from PLSWE13M04.ad.sprint.com (2002:90e5:d617::90e5:d617) by PREWE13M04.ad.sprint.com (2002:90e2:8017::90e2:8017) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Wed, 14 Mar 2018 15:09:45 -0400 Received: from PLSWE13M04.ad.sprint.com ([fe80::2c01:fcb8:e729:4a7a]) by plswe13m04.ad.sprint.com ([fe80::2c01:fcb8:e729:4a7a%24]) with mapi id 15.00.1347.000; Wed, 14 Mar 2018 14:09:45 -0500 From: "Gorman, Pierce A [CTO]" To: "Politz, Ken" , Chris Wendt , Christer Holmberg CC: "stir@ietf.org" , "adam@nostrum.com" Thread-Topic: [stir] [EXTERNAL] Re: PASSporT extensions: order of claims Thread-Index: AQHTu8GKHaP97jojikmMyd1iHk2zZqPQFfqQ Date: Wed, 14 Mar 2018 19:09:44 +0000 Message-ID: References: <7594FB04B1934943A5C02806D1A2204B6C1D17C1@ESESSMB109.ericsson.se> <7594FB04B1934943A5C02806D1A2204B6C1D1804@ESESSMB109.ericsson.se> <8B0E0275-68BD-41E9-B128-589F13C06D66@chriswendt.net> <7594FB04B1934943A5C02806D1A2204B6C2007A0@ESESSMB109.ericsson.se> <46946849EEFF3043A8FBCC3D102A2C1A3FCADE50@stntexmb13.cis.neustar.com> <7594FB04B1934943A5C02806D1A2204B6C200A0A@ESESSMB109.ericsson.se> <08B1E835-CA5E-4636-AE0E-983F3EFA82C1@chriswendt.net> <46946849EEFF3043A8FBCC3D102A2C1A3FCAF4E9@stntexmb13.cis.neustar.com> In-Reply-To: <46946849EEFF3043A8FBCC3D102A2C1A3FCAF4E9@stntexmb13.cis.neustar.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.214.116.26] Content-Type: multipart/alternative; boundary="_000_ed7ff4de91c94af2a12bea3d4a03ddddplswe13m04adsprintcom_" MIME-Version: 1.0 X-EOPAttributedMessage: 0 X-MS-Office365-Filtering-HT: Tenant X-Forefront-Antispam-Report: CIP:144.230.172.36; IPV:NLI; CTRY:US; EFV:NLI; SFV:NSPM; SFS:(10019020)(396003)(39860400002)(346002)(376002)(39380400002)(2980300002)(438002)(199004)(189003)(7736002)(3846002)(8936002)(229853002)(4546004)(97736004)(72206003)(478600001)(426003)(790700001)(2950100002)(5250100002)(606006)(6116002)(2906002)(14454004)(106466001)(356003)(966005)(76176011)(86362001)(575784001)(7696005)(108616005)(33964004)(24736004)(102836004)(106002)(59450400001)(54906003)(6246003)(16586007)(110136005)(53546011)(8676002)(54896002)(68736007)(186003)(53936002)(6306002)(84326002)(93886005)(81156014)(81166006)(26005)(2900100001)(316002)(5660300001)(336012)(4326008)(236005); DIR:OUT; SFP:1102; SCL:1; SRVR:BY1PR0501MB1192; H:plsapdm1.corp.sprint.com; FPR:; SPF:Pass; PTR:InfoDomainNonexistent; A:1; MX:1; LANG:en; X-Microsoft-Exchange-Diagnostics: 1; SN1NAM01FT043; 1:SJdVsN096DGEoWW1aQyarFAF9FHYXstL0MfM3wWjsz+MD6/GTDy0HrTivAKXv3oOx5sAMFibwtmxkrBWHB8wkpZ+igIQ9nik+hN3OTHuZh5jTkg0t3KN6aar7JiQ+85n X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-Correlation-Id: e5e7acda-633e-4abc-a2b6-08d589df2796 X-Microsoft-Antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(8989060)(5600026)(4604075)(4608076)(4534165)(4627221)(201703031133081)(201702281549075)(8990040)(2017052603328)(7153060)(7193020); SRVR:BY1PR0501MB1192; X-Microsoft-Exchange-Diagnostics: 1; BY1PR0501MB1192; 3:rxT9O5d81AM+E8OQ6qVQ94793z43NxfFHDkxTZRNA8HuCfD7gGJ6UaR06EAcKKl2BbNJh2pFAl1ZdFyrqTtCRHONfjJnicA6ArSnSd+06y3Xygt3Lvltkd6eSnu1Si0FWE99hpZgArp6hK1nhXuWyWd6v4XLxbU9yxnUfZGsmPzHBPf3F0O4Qj2YCF5q5GABJinhT9s8VzwY4bubhx9ngrw022Ufrqggou6rGF+EIZ2wmpVFyLtANJK9Oltr0QmkSb1qFxkaZk9FOXKI9q0FP/8v0iv1BHguAYCqPJ1JbUOW64Cp+HI5SSEFvwfoBuDRIDW5YhMlPpEuRBcR0K8myITLOi2RXt9JYzUHiyrgcng=; 25:GveE5LKXf/hsbKffeVws48Wlz1g5Arq/I8d0PTN8K3aQCjCzh65V6BV6K/kAlWGAvb8UhTG0HX+fdY0ZVNKQQne2TMhn3J6uCvCg2SRHNbGkr69FAVzDcDgWh4HWkfFxcprhGVO9zeu6JlRxQFiItGpgsPTgHViDqwYnnkKrZX57zyQbhiUCPPbvrnSbRYLy7Yf2lSrMQCrIzl7gfh4grJdigMVNKe9W5wWLQFACzPbRej91Zkt4KnPk7Yv1s8M2dsPgnqLY+m0W1nGwSwPvd8h4dSPLmLkAKGiUEow+Z3IK/HPgKM+83fxnK3ULK3lIWc0jh1rB8eg9tZBk2/qD9w== X-MS-TrafficTypeDiagnostic: BY1PR0501MB1192: X-Microsoft-Exchange-Diagnostics: 1; BY1PR0501MB1192; 31:+IAuN5JnITLTHlVxCB+JpXby0hctyaQimHe1GYL65DFYLoWWVkI8J/Wyb52iKXeR2/SKEc4OW2C+4lCCGUOS/Zm1wvVipGQv4fGVEx+ZKRFrHxanibut3nVO880/RwKRXb1GZxYDCQ0Bm9gJsmouYFfdg0qER3EU8392RAuK4268yQViz5d74WvW98W9qxgtw94kp91setOttYoo/6TA68nyfXo4+vtUfGVnPc+CqZE=; 20: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 X-Microsoft-Antispam-PRVS: X-Exchange-Antispam-Report-Test: UriScan:(37575265505322)(28532068793085)(10436049006162)(21748063052155); X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(5005006)(8121501046)(93006095)(93004095)(3231221)(944501244)(52105095)(3002001)(10201501046)(6055026)(6041310)(20161123558120)(20161123560045)(20161123562045)(20161123564045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(6072148)(201708071742011); SRVR:BY1PR0501MB1192; BCL:0; PCL:0; RULEID:; SRVR:BY1PR0501MB1192; X-Microsoft-Exchange-Diagnostics: 1; BY1PR0501MB1192; 4:AwUen+qM9hb8PGaK9xvPSneRXQ67vugjplt244mF7OWx8hjcdvcNRN0svLwqzu/Pr+cZcMPOi0aTAqwteWUthp0ksCEEmkqcImtSO+XaDFRHp4LjfjAOs2eoW92ruXb2XEQpj5p1vSojj3bTnUiPJyqs7urqiCaVHScSo/wNlDtzR6k96QRwNCrZuArtFAx1qsFV6mQmiw/GBlDeijl2iCbv2Gxtt8Q0MB6M/bk0GOy8oo/2gcJ89H06VAmAgcu3go/fpMZjj3kK073tVcHbD+XGBfXm1lP2oiibv2S7pY9zVRepzjupgxlUfFeh2WYY5iGMeaa2FhcuyXjp8CJhBN4lhOYKSbh2EMmZDh1quPvypItIpew2TJIrqx4xI6uzosfunfZNIv37JUkvX61y3FrVxQZPTTy/oZ42+uRK7LA= X-Forefront-PRVS: 0611A21987 X-Microsoft-Exchange-Diagnostics: =?us-ascii?Q?1; BY1PR0501MB1192; 23:J1LtM8czyP9aaxM/vXafqhfnL0vOfFwSS5dLRjF?= =?us-ascii?Q?G+Af9SLKMCFFF/Ojd/i+k/oApCpZhrcPmgVnearGqR29rlflE/Djc1ViBeTJ?= =?us-ascii?Q?7/yaroOaIc2FT1T5mjAT+aXwwnQtvSQPnqePqsfGKr0plXaHI/q9TPVvxMTw?= =?us-ascii?Q?IQIA3nZp57ju2KRWWXd6T9A7SWHVwq2ZTT1k6yN8WSaPKaDwx+1Wr/3QO3sl?= =?us-ascii?Q?+bGl2f2yuYS2th55jKzGVTJcgC1V6vgdwlmQeafytqyE5g6im05PeqL4aWgL?= =?us-ascii?Q?CtWAIZ2V0ucEujegz2bjkRhWdoMUMxWLjEibdrWVtMXvd8m0hlhE9DbpESfm?= =?us-ascii?Q?5wx8xR6Z1mbLZDAl4e36AvSjLm9d2C53wk8I8aHb4NEx1BtfQ9B9J0zs8gfV?= =?us-ascii?Q?EnkUZB/SStHy05lJ1kD2auNTkOiJCp+LKoxWX/qSvDj/IaLgNh0z1RbWpaoR?= =?us-ascii?Q?AKE72BrCsgivFU+ePOuP7d3/gLYwmIeK9NFeVbKjW73HmDVQb83LrpE6nfvJ?= =?us-ascii?Q?4xz87NEVP52Lh35OZIexhoDF82AsEhx/VT66qC3lb2HlKxtKoC2DJnL+sPPG?= =?us-ascii?Q?hgvnYB+/JnxKThoSiDYZO6Niotw/97hBWCWab7GcupOwK06HCKC/HN5sjQI7?= =?us-ascii?Q?sJTfCOicLbOmybpeVBqbwNxYw4EWiPNmtYbfJZ3nqf7ILKz8PUO66vIhnBNP?= =?us-ascii?Q?kvZNG2QOzH5nSbzIuLrLmiw6LNlrtLVlcT9h9z/4tLg5nezB9/ki+D8ZciWx?= =?us-ascii?Q?9VziXX6oKzuacSarWIGUmelHRe4CyATWyGBXh7nMSw3zSVe7nA0QFgu+o3yi?= =?us-ascii?Q?TsrustbEM+6SbWHUhuPb9PLTECyHwyx7UfsJrDuNLLR0psocbYuwDkfQpJFT?= =?us-ascii?Q?JfrRFaIagycCOSuD/vsiH4O0cHjJOC3U4bVIgpR3imNi9W2U//4IqaCBUd/d?= =?us-ascii?Q?2chNou33qH8qvur4n/ayeQ2WhVdkyJcRAdIddktvQhlBXRBWVulUa9P9ywK7?= =?us-ascii?Q?DuUSUqpnwUgh5y7B4ExIkWYlZT4HB85ypkL8w/FGXMmuJJcO+Aafpof2RCNf?= =?us-ascii?Q?PWQveW2HrvZ8kgY2goRyiCkptGLuPf5memxf8JWFdVdbwp+PhmjzIcy6WMNV?= =?us-ascii?Q?/VbfRieis+g4UAM6/34CfWYg/GKvtFAR4uzofATptiNIziQnZtzs8HeB/C25?= =?us-ascii?Q?WI8tyhdqg8y9ubydsmfE5FTm+z8ov9wyhlNi1n+In/DcyUl2GZ59SwNOXyvD?= =?us-ascii?Q?UyL5OBC2q0/bp8QiA1wjgKh6QrAfRVpp9+Uq+nTqjfvv1Ucmq3r9oWa6gTII?= =?us-ascii?Q?5yVRLFgprPJfAhcbNy5bj+NAKkyVE+TtptZn9LDxAsubxAt2xLWCDTpfvM+e?= =?us-ascii?Q?+s4FMrg=3D=3D?= X-Microsoft-Antispam-Message-Info: AvmdjCxnpQxqxA+0qE1Tb/qGpdBKAlsODiRzK4Po6soKRaGpEqyvZJRcpkHt0TM/VdtobWWCia7BqfhWVmhe75QXQanVgvI/K1jLn2QKY0W+9AOY01ENh+rHcnCRTl7wQwXWB02nn+SAU2g4oSsT60TnUbwGR7MFXxE0Wa71a/0QlQN/R7oLXfHZQ+qa416Y X-Microsoft-Exchange-Diagnostics: 1; BY1PR0501MB1192; 6:rBLJfx4hnY+1ua0Nn7LijZ2xii4+I+OX0lMH00WHGRCTc9e0/Rl2LFWwmKIZwjm1V+mUc98LrLWFV+OugQjvb//3x2PbAYZizAtl5zpWx31kigCmFblvCNpnwpJqBmN+2SobbXkBd8zD12kUXEydokUsrnjUm0+jKCSWj5CNBalfxnbLHlJdjwhniFvWwmYL0trmNzBzXvsY7YlUId1mv8ccMTtXfXq/99w7gJQDjDP45t3GuDtGwcObXuHGuMkYUqhJMHOfGeAWz7Kzk3WEvMwl9WHX1/DOfrcI2BIWomDLF7s8RSt9l/ZZgwaHzW6Ez7IrYT3aFeYv2crf+LNp59vHjlP6DbT2GA0e5Yqr3z8=; 5:/YULOx3b2l/wD1/hnc7uBR7DvNCgF3S9PDgUs1F3i7M+9EOAzfRfMYPI4m0tNbuBH5BlAPmT6teSuUiYQUCKo9K3+SWYTj5S7aTmQFN5bkK3MWCktPG5+09Q4/LyVkgy/5+ihhMsoSi8adPGkXLW9kI1vBw8LFKFvBA/DFTmH/Q=; 24:QzTklzqrheivOXOCfYHvohL9cc3Kk+xEvmyVpqi1B5zHgbINlIcbsDjgUva5B/rwbXjNi68g+lqYQmk1gWkNb/kGvT9qdTQxTZTLnf5v/7A=; 7:6hs+IVvjHXeF1Lr0zpA5qVTJ1jG5XHifnlvktQz+ijtVs1iMZevHKFfCrRmpPztzb4ltQ0KBlb/G3RIbct6MKTxuizeR+tz1YAl5VDkAChzplOiQT/Rfjxk9d0ZaYryiwiCXcw78lSnYHf3QKPxlN+ZlO/LOWRmvbHvNFlmXNVdaJ02oVzoyEI4deG0lM9490rTlACoEFAIKprJ6j5Zn7QPxbatFhUDGxSLpFf5rD/qJvdzC0d2sBA0YIYZY7G4e SpamDiagnosticOutput: 1:99 SpamDiagnosticMetadata: NSPM X-OriginatorOrg: sprint.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 14 Mar 2018 19:09:47.5501 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: e5e7acda-633e-4abc-a2b6-08d589df2796 X-MS-Exchange-CrossTenant-Id: 4f8bc0ac-bd78-4bf5-b55f-1b31301d9adf X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=4f8bc0ac-bd78-4bf5-b55f-1b31301d9adf; Ip=[144.230.172.36]; Helo=[plsapdm1.corp.sprint.com] X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY1PR0501MB1192 Archived-At: Subject: Re: [stir] [EXTERNAL] Re: PASSporT extensions: order of claims X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Mar 2018 19:09:54 -0000 --_000_ed7ff4de91c94af2a12bea3d4a03ddddplswe13m04adsprintcom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Q2hyaXMsDQoNClRoZSBjb2xsZWN0aXZlIGJvZHkgb2Ygd29yayBmcm9tIFROIFBvUCwgUlBIIGV4 dGVuc2lvbiwgdGhlIHJlY2VudCBTSVBjb2luIGFuZCBjYWxsLWJhY2sgUkZDIGRyYWZ0cyBtYWtl IG1lIHRoaW5rIGZ1dHVyZSBpbm5vdmF0aW9uIGludm9sdmluZyBtdWx0aXBsZSBJZGVudGl0eSBo ZWFkZXJzIGFuZC9vciBhIG5lZWQgb2Ygb3JkZXIgb2YgSlNPTiBrZXlzIGlzIG1vcmUgbGlrZWx5 IHRoYW4gbm90LiAgSXMgdGhpcyBhIGJhZCBhc3N1bXB0aW9uPw0KDQpQaWVyY2UNCg0KRnJvbTog UG9saXR6LCBLZW4gW21haWx0bzpLZW5uZXRoLlBvbGl0ekB0ZWFtLm5ldXN0YXJdDQpTZW50OiBX ZWRuZXNkYXksIE1hcmNoIDE0LCAyMDE4IDg6NDMgQU0NClRvOiBDaHJpcyBXZW5kdCA8Y2hyaXMt aWV0ZkBjaHJpc3dlbmR0Lm5ldD47IENocmlzdGVyIEhvbG1iZXJnIDxjaHJpc3Rlci5ob2xtYmVy Z0Blcmljc3Nvbi5jb20+DQpDYzogc3RpckBpZXRmLm9yZzsgYWRhbUBub3N0cnVtLmNvbQ0KU3Vi amVjdDogUmU6IFtzdGlyXSBbRVhURVJOQUxdIFJlOiBQQVNTcG9yVCBleHRlbnNpb25zOiBvcmRl ciBvZiBjbGFpbXMNCg0KQWxsIEkgY2FuIHNheSBpcyB0aGF0LCB3aXRoIHJlbGF0aXZlbHkgbGlt aXRlZCBTSEFLRU4gaW5kdXN0cnkgdGVzdGluZywgSlNPTiBrZXkgb3JkZXIgaGFzIGNvbWUgdXAg dHdpY2UuICBBcyBuZXcgZXh0ZW5zaW9ucyBnZXQgYWRkZWQgYW5kIGZvciBpbnRlcm9wZXJhYmls aXR5IHB1cnBvc2VzLCBJIHdvdWxkIHJlcXVlc3QgdGhhdCBjbGFyaXR5IGJlIHByb3ZpZGVkIGlu IHJlbGF0ZWQgc3BlY3Mgd2l0aCBjb25zaXN0ZW50IGV4YW1wbGVzIGZvciBpbXBsZW1lbnRlcnMu ICBUaGFua3MsIEtlbi4NCg0KRnJvbTogQ2hyaXMgV2VuZHQgW21haWx0bzpjaHJpcy1pZXRmQGNo cmlzd2VuZHQubmV0XQ0KU2VudDogV2VkbmVzZGF5LCBNYXJjaCAxNCwgMjAxOCA3OjM2IEFNDQpU bzogQ2hyaXN0ZXIgSG9sbWJlcmcgPGNocmlzdGVyLmhvbG1iZXJnQGVyaWNzc29uLmNvbTxtYWls dG86Y2hyaXN0ZXIuaG9sbWJlcmdAZXJpY3Nzb24uY29tPj4NCkNjOiBQb2xpdHosIEtlbiA8S2Vu bmV0aC5Qb2xpdHpAdGVhbS5uZXVzdGFyPG1haWx0bzpLZW5uZXRoLlBvbGl0ekB0ZWFtLm5ldXN0 YXI+Pjsgc3RpckBpZXRmLm9yZzxtYWlsdG86c3RpckBpZXRmLm9yZz47IGFkYW1Abm9zdHJ1bS5j b208bWFpbHRvOmFkYW1Abm9zdHJ1bS5jb20+DQpTdWJqZWN0OiBbRVhURVJOQUxdIFJlOiBbc3Rp cl0gUEFTU3BvclQgZXh0ZW5zaW9uczogb3JkZXIgb2YgY2xhaW1zDQoNClBlcmhhcHMgaXRzIGEg Yml0IG92ZXIgcHJlc2NyaXB0aXZlLCBpIHRoaW5rIHRoZSBpbnRlbnRpb24gd2FzIG9ubHkgdG8g c2F5IHRoYXQgaXQgc2hvdWxkIGJlIGRvY3VtZW50ZWQgd2hhdCBjbGFpbXMgYW5kIHByb3ZpZGUg b3JkZXIgYW5kIGV4YW1wbGVzLiAgSXQgd2FzbuKAmXQgdG8gaW1wbHkgdGhhdCBpdCB3b3VsZCBi ZSBkaWZmZXJlbnQgb3IgdGhlcmUgd291bGQgYmUgaW1wbGljYXRpb25zIG9mIG9yZGVyIG9yIGFu eXRoaW5nLg0KDQpUbyBzdGVwIHVwIGEgbGV2ZWwsIGluIGdlbmVyYWwsIEpTT04gb2JqZWN0IGtl eSBvcmRlciBuZXZlciBtYXR0ZXJzLCBpdOKAmXMgYSBrZXkgdmFsdWUgb2JqZWN0IHRoYXQgeW91 IGluZGV4IG9uIGtleSwgc28gb3JkZXIgaW4gbW9zdCBjYXNlcyBpcyBhcmJpdHJhcnkuICBGb3Ig UEFTU3BvclQsIHdlIGhhdmUgYSBzaG9ydCBmb3JtIHRoYXQgaXMgc3VwcG9ydGVkIGluIFJGQzgy MjQsIHdoZXJlIHlvdSBkb27igJl0IG5lZWQgdG8gc2VuZCB0aGUgaGVhZGVyL2NsYWltcyBiZWNh dXNlIHRob3NlIG9iamVjdHMgYXJlIGFscmVhZHkgaW4gdGhlIFNJUCBJTlZJVEUuICBTbyB3ZSBu ZWVkZWQgYSB3YXkgdG8gaGF2ZSB0aGUgaGVhZGVyL2NsYWltcyB0byBiZSByZWNvbnN0cnVjdGVk IGluIGEgcHJlZGljdGFibGUgYW5kIHJlcHJvZHVjaWJsZSB3YXkuICBBbiB0aGVyZWZvcmUgdGhl IGRlcGVuZGVuY3kgb24gb3JkZXIuDQoNClNvIGFnYWluLCB5ZXMgd2Ugc2F5IHlvdSBzaG91bGQg c2F5IG9yZGVyIGluIFJGQzgyMjUsIHdoaWNoIGkgd291bGQgc2F5IHdvdWxkIGluaGVyZW50bHkg YmUgdGhlIGNhc2Ugd2l0aCBhbiBleGFtcGxlIGF0IGEgbWluaW11bS4gIEEgTVVTVCBtaWdodCBo YXZlIGJlZW4gYSBiaXQgc3Ryb25nLCBidXQgaSBkb27igJl0IHNlZSB0aGlzIGFzIGEgaHVnZSBj b25jZXJuLiAgSeKAmWQgYmUgY3VyaW91cyB0byBoZWFyIGZyb20gb3RoZXJzIHdoZXRoZXIgdGhl eSB0aGluayB0aGlzIGlzIGEgcmVhbCBjb25jZXJuIG9yIG5vdC4NCg0KDQpPbiBNYXIgMTMsIDIw MTgsIGF0IDM6NTggUE0sIENocmlzdGVyIEhvbG1iZXJnIDxjaHJpc3Rlci5ob2xtYmVyZ0Blcmlj c3Nvbi5jb208bWFpbHRvOmNocmlzdGVyLmhvbG1iZXJnQGVyaWNzc29uLmNvbT4+IHdyb3RlOg0K DQpIaSwNCg0KPlRyeSBSRkMgODIyNSwgU2VjdGlvbiA5LCBwZXJoYXBzPw0KDQpPaywgc28gaWYg dGhhdOKAmXMgYSBnZW5lcmljIHJ1bGUsIHdoeSB0aGUgc3RhdGVtZW50IHNheWluZyB0aGF0IFBB U1Nwb3JUIGV4dGVuc2lvbnMgbXVzdCBzcGVjaWZ5IHRoZSBvcmRlcj8NCg0KUmVnYXJkcywNCg0K Q2hyaXN0ZXINCg0KRnJvbTogQ2hyaXN0ZXIgSG9sbWJlcmcgW21haWx0bzpjaHJpc3Rlci5ob2xt YmVyZ0Blcmljc3Nvbi5jb21dDQpTZW50OiBUdWVzZGF5LCBNYXJjaCAxMywgMjAxOCAyOjQ3IFBN DQpUbzogQ2hyaXMgV2VuZHQgPGNocmlzLWlldGZAY2hyaXN3ZW5kdC5uZXQ8bWFpbHRvOmNocmlz LWlldGZAY2hyaXN3ZW5kdC5uZXQ+Pg0KQ2M6IHN0aXJAaWV0Zi5vcmc8bWFpbHRvOnN0aXJAaWV0 Zi5vcmc+OyBhZGFtQG5vc3RydW0uY29tPG1haWx0bzphZGFtQG5vc3RydW0uY29tPg0KU3ViamVj dDogUmU6IFtzdGlyXSBQQVNTcG9yVCBleHRlbnNpb25zOiBvcmRlciBvZiBjbGFpbXMNCg0KSGks DQoNCj5JIHdvdWxkIGFncmVlIHdpdGggdGhlIHRleHQsIHRoZSBvbmx5IGNhdmVhdCBpIHdvdWxk IHBvaW50IG91dCBpcyB0aGF0IHRoZSBleHRlbnNpb24gZGVmaW5pdGlvbiBoYXMNCj5ubyBjaG9p Y2UgdG8gdGhlIG9yZGVyIG90aGVyIHRoYW4gYWxwaGFiZXRpYyBvcmRlciwgc28gdGhlIG9yZGVy IGlzIGVzc2VudGlhbGx5IGltcGxpZWQuICBTbywgaXTigJlzIHNvcnQNCj5vZiBhIHRlY2huaWNh bGl0eSB0aGF0IG1heWJlIHdlIGRpZG7igJl0IGFudGljaXBhdGUsIGJ1dCBpIHRoaW5rIHRlY2hu aWNhbGx5IHlvdSBhcmUgY29ycmVjdC4NCg0KTm90IHN1cmUgSSB1bmRlcnN0YW5kIHRoZSBoYXMt bm8tY2hvaWNlIHBhcnQuIFdoZXJlIGlzIGl0IHNhaWQgdGhhdCB0aGUgY2xhaW1zIG11c3QgYmUg b3JkZXJlZCBpbiBhbHBoYWJldGljIG9yZGVyPyBXZSBjb3VsZCBmb3Igc3VyZSBzcGVjaWZ5IGl0 IHRoYXQgd2F5LCBidXQgYmFzZWQgb24geW91ciBlLW1haWwgaXQgc2VlbXMgbGlrZSBpdCBpcyBh bHJlYWR5IHNwZWNpZmllZCBzb21ld2hlcmU/DQoNClJlZ2FyZHMsDQoNCkNocmlzdGVyDQoNCg0K T24gTWFyIDEwLCAyMDE4LCBhdCA4OjI3IEFNLCBDaHJpc3RlciBIb2xtYmVyZyA8Y2hyaXN0ZXIu aG9sbWJlcmdAZXJpY3Nzb24uY29tPG1haWx0bzpjaHJpc3Rlci5ob2xtYmVyZ0Blcmljc3Nvbi5j b20+PiB3cm90ZToNCg0KU2VjdGlvbiA4LjMgb2YgUkZDIDgyMjUsIHRoYXQgaXMuDQoNCkZyb206 IHN0aXIgW21haWx0bzpzdGlyLWJvdW5jZXNAaWV0Zi5vcmddIE9uIEJlaGFsZiBPZiBDaHJpc3Rl ciBIb2xtYmVyZw0KU2VudDogMTAgTWFyY2ggMjAxOCAxNToyNg0KVG86IHN0aXJAaWV0Zi5vcmc8 bWFpbHRvOnN0aXJAaWV0Zi5vcmc+DQpDYzogYWRhbUBub3N0cnVtLmNvbTxtYWlsdG86YWRhbUBu b3N0cnVtLmNvbT4NClN1YmplY3Q6IFtzdGlyXSBQQVNTcG9yVCBleHRlbnNpb25zOiBvcmRlciBv ZiBjbGFpbXMNCg0KSGksDQoNClNlY3Rpb24gIHNheXM6DQoNCiAgIOKAnFNwZWNpZmljYXRpb25z IHRoYXQgZGVmaW5lIGV4dGVuc2lvbnMgdG8gdGhlIFBBU1Nwb3JUIG1lY2hhbmlzbSBNVVNUDQog ICBleHBsaWNpdGx5IHNwZWNpZnkgd2hhdCBjbGFpbXMgdGhleSBpbmNsdWRlIGJleW9uZCB0aGUg YmFzZSBzZXQgb2YNCiAgIGNsYWltcyBmcm9tIHRoaXMgZG9jdW1lbnQsIHRoZSBvcmRlciBpbiB3 aGljaCB0aGV5IHdpbGwgYXBwZWFyLOKApuKAnQ0KDQpXaGVuIGxvb2tpbmcgYXQgdGhlIGV4dGVu c2lvbnMgd2UgYXJlIGN1cnJlbnRseSB3b3JraW5nIG9uOg0KDQpkcmFmdC1pZXRmLXN0aXItcnBo LTAzDQpkcmFmdC1pZXRmLXN0aXItcGFzc3BvcnQtc2hha2VuLTAxDQpkcmFmdC1pZXRmLXN0aXIt cGFzc3BvcnQtZGl2ZXJ0LTAyDQoNCuKApkkgZG9u4oCZdCBzZWUgYW55dGhpbmcgYWJvdXQgdGhl IG9yZGVyIGluIGFueSBvZiB0aGUgZG9jdW1lbnRzLg0KDQpJIHRoaW5rIGl0IHdvdWxkIGJlIGdv b2QgdG8gaGF2ZSBhIGRlZGljYXRlZCDigJxPcmRlciBvZiBjbGFpbXPigJ0gc2VjdGlvbiwgb3Ig c29tZXRoaW5nIHNpbWlsYXIsIGluIGVhY2ggZXh0ZW5zaW9uIHNwZWNpZmljYXRpb24uDQoNCldo ZW4gbG9va2luZyBhdCB0aGUgZXhhbXBsZXMgaW4gdGhlIGRyYWZ0cyBhYm92ZSwgaXQgc2VlbXMg bGlrZSBldmVuIHRoZSBiYXNlIGNsYWltcyBhcmUgaW4gZGlmZmVyZW50IG9yZGVycy4gTm90IHN1 cmUgd2hldGhlciB0aGVyZSBpcyBhbiBleHBsaWNpdCByZXF1aXJlbWVudCB0aGF0IHRoZXkgbmVl ZCB0byBiZSBpbiBvcmRlciwgdGhvdWdodC4NCg0KUmVnYXJkcywNCg0KQ2hyaXN0ZXINCg0KDQpf X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0Kc3RpciBtYWls aW5nIGxpc3QNCnN0aXJAaWV0Zi5vcmc8bWFpbHRvOnN0aXJAaWV0Zi5vcmc+DQpodHRwczovL3d3 dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3N0aXI8aHR0cHM6Ly91cmxkZWZlbnNlLnByb29m cG9pbnQuY29tL3YyL3VybD91PWh0dHBzLTNBX193d3cuaWV0Zi5vcmdfbWFpbG1hbl9saXN0aW5m b19zdGlyJmQ9RHdNR2FRJmM9TU9wdE5sVnRJRVRlREFMQ19sVUxydyZyPXd3MVM5QkhFY3BFNE1N VWJnR1Fyc29MLVNLM1VDR1kzM0tvYWoyaDl6WXcmbT1fREJkbVVLcGtVQVVWdjEyMFB1SG9NdC1U VnRUdXpPSHNmRlFkQVdtZUZzJnM9eVlZNmt2TlNseDdXODRuWExmWVA3bjRQU0gwUzdVaXEzVksy Rkk2aXdFVSZlPT4NCg0KDQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KDQpUaGlz IGUtbWFpbCBtYXkgY29udGFpbiBTcHJpbnQgcHJvcHJpZXRhcnkgaW5mb3JtYXRpb24gaW50ZW5k ZWQgZm9yIHRoZSBzb2xlIHVzZSBvZiB0aGUgcmVjaXBpZW50KHMpLiBBbnkgdXNlIGJ5IG90aGVy cyBpcyBwcm9oaWJpdGVkLiBJZiB5b3UgYXJlIG5vdCB0aGUgaW50ZW5kZWQgcmVjaXBpZW50LCBw bGVhc2UgY29udGFjdCB0aGUgc2VuZGVyIGFuZCBkZWxldGUgYWxsIGNvcGllcyBvZiB0aGUgbWVz c2FnZS4NCg== --_000_ed7ff4de91c94af2a12bea3d4a03ddddplswe13m04adsprintcom_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 SGVsdmV0aWNhOw0KCXBhbm9zZS0xOjIgMTEgNiA0IDIgMiAyIDIgMiA0O30NCkBmb250LWZhY2UN Cgl7Zm9udC1mYW1pbHk6IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAz IDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAx NSA1IDIgMiAyIDQgMyAyIDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFs LCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90 dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseToiVGltZXMgTmV3 IFJvbWFuIixzZXJpZjt9DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1w cmlvcml0eTo5OTsNCgljb2xvcjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0K YTp2aXNpdGVkLCBzcGFuLk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0 eTo5OTsNCgljb2xvcjpwdXJwbGU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpzcGFu LmFwcGxlLWNvbnZlcnRlZC1zcGFjZQ0KCXttc28tc3R5bGUtbmFtZTphcHBsZS1jb252ZXJ0ZWQt c3BhY2U7fQ0Kc3Bhbi5FbWFpbFN0eWxlMTgNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWw7DQoJ Zm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJY29sb3I6IzFGNDk3RDt9DQpzcGFu LkVtYWlsU3R5bGUxOQ0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1yZXBseTsNCglmb250LWZh bWlseToiQXJpYWwiLHNhbnMtc2VyaWY7DQoJY29sb3I6IzAwMDA2NjsNCglmb250LXdlaWdodDpu b3JtYWw7DQoJZm9udC1zdHlsZTpub3JtYWw7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNvLXN0eWxl LXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1zaXplOjEwLjBwdDt9DQpAcGFnZSBXb3JkU2VjdGlv bjENCgl7c2l6ZTo4LjVpbiAxMS4waW47DQoJbWFyZ2luOjEuMGluIDEuMGluIDEuMGluIDEuMGlu O30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLS0+PC9zdHlsZT48 IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlZGVmYXVsdHMgdjpleHQ9ImVkaXQiIHNw aWRtYXg9IjEwMjYiIC8+DQo8L3htbD48IVtlbmRpZl0tLT48IS0tW2lmIGd0ZSBtc28gOV0+PHht bD4NCjxvOnNoYXBlbGF5b3V0IHY6ZXh0PSJlZGl0Ij4NCjxvOmlkbWFwIHY6ZXh0PSJlZGl0IiBk YXRhPSIxIiAvPg0KPC9vOnNoYXBlbGF5b3V0PjwveG1sPjwhW2VuZGlmXS0tPg0KPC9oZWFkPg0K PGJvZHkgbGFuZz0iRU4tVVMiIGxpbms9ImJsdWUiIHZsaW5rPSJwdXJwbGUiPg0KPGRpdiBjbGFz cz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29s b3I6IzAwMDA2NiI+Q2hyaXMsPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJp YWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMDAwMDY2Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMwMDAwNjYi PlRoZSBjb2xsZWN0aXZlIGJvZHkgb2Ygd29yayBmcm9tIFROIFBvUCwgUlBIIGV4dGVuc2lvbiwg dGhlIHJlY2VudCBTSVBjb2luIGFuZCBjYWxsLWJhY2sgUkZDIGRyYWZ0cyBtYWtlIG1lIHRoaW5r IGZ1dHVyZSBpbm5vdmF0aW9uIGludm9sdmluZyBtdWx0aXBsZSBJZGVudGl0eQ0KIGhlYWRlcnMg YW5kL29yIGEgbmVlZCBvZiBvcmRlciBvZiBKU09OIGtleXMgaXMgbW9yZSBsaWtlbHkgdGhhbiBu b3QuJm5ic3A7IElzIHRoaXMgYSBiYWQgYXNzdW1wdGlvbj88bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMwMDAwNjYiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2Vy aWY7Y29sb3I6IzAwMDA2NiI+UGllcmNlPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMDAwMDY2Ij48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpz b2xpZCAjRTFFMUUxIDEuMHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5Gcm9tOjwvc3Bhbj48L2I+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5z LXNlcmlmIj4gUG9saXR6LCBLZW4gW21haWx0bzpLZW5uZXRoLlBvbGl0ekB0ZWFtLm5ldXN0YXJd DQo8YnI+DQo8Yj5TZW50OjwvYj4gV2VkbmVzZGF5LCBNYXJjaCAxNCwgMjAxOCA4OjQzIEFNPGJy Pg0KPGI+VG86PC9iPiBDaHJpcyBXZW5kdCAmbHQ7Y2hyaXMtaWV0ZkBjaHJpc3dlbmR0Lm5ldCZn dDs7IENocmlzdGVyIEhvbG1iZXJnICZsdDtjaHJpc3Rlci5ob2xtYmVyZ0Blcmljc3Nvbi5jb20m Z3Q7PGJyPg0KPGI+Q2M6PC9iPiBzdGlyQGlldGYub3JnOyBhZGFtQG5vc3RydW0uY29tPGJyPg0K PGI+U3ViamVjdDo8L2I+IFJlOiBbc3Rpcl0gW0VYVEVSTkFMXSBSZTogUEFTU3BvclQgZXh0ZW5z aW9uczogb3JkZXIgb2YgY2xhaW1zPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPkFsbCBJIGNhbiBzYXkg aXMgdGhhdCwgd2l0aCByZWxhdGl2ZWx5IGxpbWl0ZWQgU0hBS0VOIGluZHVzdHJ5IHRlc3Rpbmcs IEpTT04ga2V5IG9yZGVyIGhhcyBjb21lIHVwIHR3aWNlLiZuYnNwOyBBcyBuZXcgZXh0ZW5zaW9u cyBnZXQgYWRkZWQgYW5kIGZvciBpbnRlcm9wZXJhYmlsaXR5DQogcHVycG9zZXMsIEkgd291bGQg cmVxdWVzdCB0aGF0IGNsYXJpdHkgYmUgcHJvdmlkZWQgaW4gcmVsYXRlZCBzcGVjcyB3aXRoIGNv bnNpc3RlbnQgZXhhbXBsZXMgZm9yIGltcGxlbWVudGVycy4mbmJzcDsgVGhhbmtzLCBLZW4uPG86 cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlm O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXY+DQo8ZGl2 IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNFMUUxRTEgMS4wcHQ7cGFkZGlu ZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMt c2VyaWYiPkZyb206PC9zcGFuPjwvYj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPiBDaHJpcyBXZW5kdCBbPGEg aHJlZj0ibWFpbHRvOmNocmlzLWlldGZAY2hyaXN3ZW5kdC5uZXQiPm1haWx0bzpjaHJpcy1pZXRm QGNocmlzd2VuZHQubmV0PC9hPl0NCjxicj4NCjxiPlNlbnQ6PC9iPiBXZWRuZXNkYXksIE1hcmNo IDE0LCAyMDE4IDc6MzYgQU08YnI+DQo8Yj5Ubzo8L2I+IENocmlzdGVyIEhvbG1iZXJnICZsdDs8 YSBocmVmPSJtYWlsdG86Y2hyaXN0ZXIuaG9sbWJlcmdAZXJpY3Nzb24uY29tIj5jaHJpc3Rlci5o b2xtYmVyZ0Blcmljc3Nvbi5jb208L2E+Jmd0Ozxicj4NCjxiPkNjOjwvYj4gUG9saXR6LCBLZW4g Jmx0OzxhIGhyZWY9Im1haWx0bzpLZW5uZXRoLlBvbGl0ekB0ZWFtLm5ldXN0YXIiPktlbm5ldGgu UG9saXR6QHRlYW0ubmV1c3RhcjwvYT4mZ3Q7Ow0KPGEgaHJlZj0ibWFpbHRvOnN0aXJAaWV0Zi5v cmciPnN0aXJAaWV0Zi5vcmc8L2E+OyA8YSBocmVmPSJtYWlsdG86YWRhbUBub3N0cnVtLmNvbSI+ DQphZGFtQG5vc3RydW0uY29tPC9hPjxicj4NCjxiPlN1YmplY3Q6PC9iPiBbRVhURVJOQUxdIFJl OiBbc3Rpcl0gUEFTU3BvclQgZXh0ZW5zaW9uczogb3JkZXIgb2YgY2xhaW1zPG86cD48L286cD48 L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5i c3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+UGVyaGFwcyBpdHMgYSBiaXQgb3Zl ciBwcmVzY3JpcHRpdmUsIGkgdGhpbmsgdGhlIGludGVudGlvbiB3YXMgb25seSB0byBzYXkgdGhh dCBpdCBzaG91bGQgYmUgZG9jdW1lbnRlZCB3aGF0IGNsYWltcyBhbmQgcHJvdmlkZSBvcmRlciBh bmQgZXhhbXBsZXMuICZuYnNwO0l0IHdhc27igJl0IHRvIGltcGx5IHRoYXQgaXQgd291bGQgYmUg ZGlmZmVyZW50IG9yIHRoZXJlIHdvdWxkIGJlIGltcGxpY2F0aW9ucyBvZiBvcmRlciBvcg0KIGFu eXRoaW5nLjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+VG8g c3RlcCB1cCBhIGxldmVsLCBpbiBnZW5lcmFsLCBKU09OIG9iamVjdCBrZXkgb3JkZXIgbmV2ZXIg bWF0dGVycywgaXTigJlzIGEga2V5IHZhbHVlIG9iamVjdCB0aGF0IHlvdSBpbmRleCBvbiBrZXks IHNvIG9yZGVyIGluIG1vc3QgY2FzZXMgaXMgYXJiaXRyYXJ5LiAmbmJzcDtGb3IgUEFTU3BvclQs IHdlIGhhdmUgYSBzaG9ydCBmb3JtIHRoYXQgaXMgc3VwcG9ydGVkIGluIFJGQzgyMjQsIHdoZXJl IHlvdSBkb27igJl0IG5lZWQNCiB0byBzZW5kIHRoZSBoZWFkZXIvY2xhaW1zIGJlY2F1c2UgdGhv c2Ugb2JqZWN0cyBhcmUgYWxyZWFkeSBpbiB0aGUgU0lQIElOVklURS4gJm5ic3A7U28gd2UgbmVl ZGVkIGEgd2F5IHRvIGhhdmUgdGhlIGhlYWRlci9jbGFpbXMgdG8gYmUgcmVjb25zdHJ1Y3RlZCBp biBhIHByZWRpY3RhYmxlIGFuZCByZXByb2R1Y2libGUgd2F5LiAmbmJzcDtBbiB0aGVyZWZvcmUg dGhlIGRlcGVuZGVuY3kgb24gb3JkZXIuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPlNvIGFnYWluLCB5ZXMgd2Ugc2F5IHlvdSBzaG91bGQgc2F5 IG9yZGVyIGluIFJGQzgyMjUsIHdoaWNoIGkgd291bGQgc2F5IHdvdWxkIGluaGVyZW50bHkgYmUg dGhlIGNhc2Ugd2l0aCBhbiBleGFtcGxlIGF0IGEgbWluaW11bS4gJm5ic3A7QSBNVVNUIG1pZ2h0 IGhhdmUgYmVlbiBhIGJpdCBzdHJvbmcsIGJ1dCBpIGRvbuKAmXQgc2VlIHRoaXMgYXMgYSBodWdl IGNvbmNlcm4uICZuYnNwO0nigJlkIGJlIGN1cmlvdXMgdG8gaGVhciBmcm9tDQogb3RoZXJzIHdo ZXRoZXIgdGhleSB0aGluayB0aGlzIGlzIGEgcmVhbCBjb25jZXJuIG9yIG5vdC48bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtYXJnaW4tYm90dG9tOjEyLjBwdCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8YmxvY2txdW90 ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj5PbiBNYXIgMTMsIDIwMTgsIGF0IDM6NTggUE0sIENocmlzdGVy IEhvbG1iZXJnICZsdDs8YSBocmVmPSJtYWlsdG86Y2hyaXN0ZXIuaG9sbWJlcmdAZXJpY3Nzb24u Y29tIj5jaHJpc3Rlci5ob2xtYmVyZ0Blcmljc3Nvbi5jb208L2E+Jmd0OyB3cm90ZTo8bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48 L3A+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtj b2xvcjojMUY0OTdEIj5IaSw8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj4mZ3Q7 VHJ5IFJGQyA4MjI1LCBTZWN0aW9uIDksIHBlcmhhcHM/Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlm O2NvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj5P aywgc28gaWYgdGhhdOKAmXMgYSBnZW5lcmljIHJ1bGUsIHdoeSB0aGUgc3RhdGVtZW50IHNheWlu ZyB0aGF0IFBBU1Nwb3JUIGV4dGVuc2lvbnMgbXVzdCBzcGVjaWZ5IHRoZSBvcmRlcj88L3NwYW4+ PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7 LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9y OiMxRjQ5N0QiPlJlZ2FyZHMsPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPiZuYnNw Ozwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGli cmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj5DaHJpc3Rlcjwvc3Bhbj48bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1z ZXJpZjtjb2xvcjojMUY0OTdEIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNFMUUxRTEg MS4wcHQ7cGFkZGluZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5Gcm9tOjwvc3Bhbj48L2I+PHNwYW4gY2xhc3M9ImFw cGxlLWNvbnZlcnRlZC1zcGFjZSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj4mbmJzcDs8L3NwYW4+PC9zcGFu PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkm cXVvdDssc2Fucy1zZXJpZiI+Q2hyaXN0ZXINCiBIb2xtYmVyZyBbPGEgaHJlZj0ibWFpbHRvOmNo cmlzdGVyLmhvbG1iZXJnQGVyaWNzc29uLmNvbSI+PHNwYW4gc3R5bGU9ImNvbG9yOnB1cnBsZSI+ bWFpbHRvOmNocmlzdGVyLmhvbG1iZXJnQGVyaWNzc29uLmNvbTwvc3Bhbj48L2E+XTxzcGFuIGNs YXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48YnI+DQo8Yj5TZW50Ojwv Yj48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+VHVlc2Rh eSwgTWFyY2ggMTMsIDIwMTggMjo0NyBQTTxicj4NCjxiPlRvOjwvYj48c3BhbiBjbGFzcz0iYXBw bGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+Q2hyaXMgV2VuZHQgJmx0OzxhIGhyZWY9 Im1haWx0bzpjaHJpcy1pZXRmQGNocmlzd2VuZHQubmV0Ij48c3BhbiBzdHlsZT0iY29sb3I6cHVy cGxlIj5jaHJpcy1pZXRmQGNocmlzd2VuZHQubmV0PC9zcGFuPjwvYT4mZ3Q7PGJyPg0KPGI+Q2M6 PC9iPjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48YSBo cmVmPSJtYWlsdG86c3RpckBpZXRmLm9yZyI+PHNwYW4gc3R5bGU9ImNvbG9yOnB1cnBsZSI+c3Rp ckBpZXRmLm9yZzwvc3Bhbj48L2E+OzxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2Ui PiZuYnNwOzwvc3Bhbj48YSBocmVmPSJtYWlsdG86YWRhbUBub3N0cnVtLmNvbSI+PHNwYW4gc3R5 bGU9ImNvbG9yOnB1cnBsZSI+YWRhbUBub3N0cnVtLmNvbTwvc3Bhbj48L2E+PGJyPg0KPGI+U3Vi amVjdDo8L2I+PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFu PlJlOiBbc3Rpcl0gUEFTU3BvclQgZXh0ZW5zaW9uczogb3JkZXIgb2YgY2xhaW1zPC9zcGFuPjxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPkhpLDwvc3Bhbj48bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jmd0O0kg d291bGQgYWdyZWUgd2l0aCB0aGUgdGV4dCwgdGhlIG9ubHkgY2F2ZWF0IGkgd291bGQgcG9pbnQg b3V0IGlzIHRoYXQgdGhlIGV4dGVuc2lvbiBkZWZpbml0aW9uIGhhczxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj4mZ3Q7 PC9zcGFuPm5vIGNob2ljZSB0byB0aGUgb3JkZXIgb3RoZXIgdGhhbiBhbHBoYWJldGljIG9yZGVy LCBzbyB0aGUgb3JkZXIgaXMgZXNzZW50aWFsbHkgaW1wbGllZC4gJm5ic3A7U28sIGl04oCZcyBz b3J0PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1 b3Q7LHNhbnMtc2VyaWYiPiZndDs8L3NwYW4+b2YgYSB0ZWNobmljYWxpdHkgdGhhdCBtYXliZSB3 ZSBkaWRu4oCZdCBhbnRpY2lwYXRlLCBidXQgaSB0aGluayB0ZWNobmljYWxseSB5b3UgYXJlIGNv cnJlY3QuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVv dDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPk5vdCBzdXJlIEkgdW5kZXJzdGFuZCB0aGUgaGFz LW5vLWNob2ljZSBwYXJ0LiBXaGVyZSBpcyBpdCBzYWlkIHRoYXQgdGhlIGNsYWltcyBtdXN0IGJl IG9yZGVyZWQgaW4gYWxwaGFiZXRpYyBvcmRlcj8gV2UgY291bGQgZm9yIHN1cmUgc3BlY2lmeSBp dCB0aGF0IHdheSwgYnV0IGJhc2VkIG9uIHlvdXINCiBlLW1haWwgaXQgc2VlbXMgbGlrZSBpdCBp cyBhbHJlYWR5IHNwZWNpZmllZCBzb21ld2hlcmU/PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj4mbmJzcDs8 L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJp JnF1b3Q7LHNhbnMtc2VyaWYiPlJlZ2FyZHMsPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj4mbmJzcDs8L3Nw YW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1 b3Q7LHNhbnMtc2VyaWYiPkNocmlzdGVyPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj4mbmJzcDs8L3NwYW4+ PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWJvdHRvbToxMi4wcHQiPiZuYnNwOzxvOnA+PC9vOnA+ PC9wPg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1 LjBwdCI+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPk9uIE1hciAxMCwgMjAx OCwgYXQgODoyNyBBTSwgQ2hyaXN0ZXIgSG9sbWJlcmcgJmx0OzxhIGhyZWY9Im1haWx0bzpjaHJp c3Rlci5ob2xtYmVyZ0Blcmljc3Nvbi5jb20iPjxzcGFuIHN0eWxlPSJjb2xvcjpwdXJwbGUiPmNo cmlzdGVyLmhvbG1iZXJnQGVyaWNzc29uLmNvbTwvc3Bhbj48L2E+Jmd0OyB3cm90ZTo8bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5i c3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj5TZWN0aW9uIDguMyBv ZiBSRkMgODIyNSwgdGhhdCBpcy48L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2 Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29s b3I6IzFGNDk3RCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4N CjxkaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNFMUUxRTEg MS4wcHQ7cGFkZGluZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+RnJvbTo8L3NwYW4+PC9iPjxzcGFuIGNs YXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+Jm5ic3A7PC9zcGFu Pjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtD YWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPnN0aXINCiBbPGEgaHJlZj0ibWFpbHRvOnN0aXItYm91 bmNlc0BpZXRmLm9yZyI+PHNwYW4gc3R5bGU9ImNvbG9yOnB1cnBsZSI+bWFpbHRvOnN0aXItYm91 bmNlc0BpZXRmLm9yZzwvc3Bhbj48L2E+XTxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3Bh Y2UiPiZuYnNwOzwvc3Bhbj48Yj5PbiBCZWhhbGYgT2Y8c3BhbiBjbGFzcz0iYXBwbGUtY29udmVy dGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PC9iPkNocmlzdGVyIEhvbG1iZXJnPGJyPg0KPGI+U2Vu dDo8L2I+PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjEw IE1hcmNoIDIwMTggMTU6MjY8YnI+DQo8Yj5Ubzo8L2I+PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZl cnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxhIGhyZWY9Im1haWx0bzpzdGlyQGlldGYub3JnIj48 c3BhbiBzdHlsZT0iY29sb3I6cHVycGxlIj5zdGlyQGlldGYub3JnPC9zcGFuPjwvYT48YnI+DQo8 Yj5DYzo8L2I+PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFu PjxhIGhyZWY9Im1haWx0bzphZGFtQG5vc3RydW0uY29tIj48c3BhbiBzdHlsZT0iY29sb3I6cHVy cGxlIj5hZGFtQG5vc3RydW0uY29tPC9zcGFuPjwvYT48YnI+DQo8Yj5TdWJqZWN0OjwvYj48c3Bh biBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+W3N0aXJdIFBBU1Nw b3JUIGV4dGVuc2lvbnM6IG9yZGVyIG9mIGNsYWltczwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtD YWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fu cy1zZXJpZiI+SGksPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj4mbmJzcDs8L3Nw YW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTom cXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPlNlY3Rpb24mbmJzcDsgc2F5czo8L3NwYW4+ PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVv dDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDss c2Fucy1zZXJpZiI+Jm5ic3A7Jm5ic3A7IOKAnFNwZWNpZmljYXRpb25zIHRoYXQgZGVmaW5lIGV4 dGVuc2lvbnMgdG8gdGhlIFBBU1Nwb3JUIG1lY2hhbmlzbSBNVVNUPC9zcGFuPjxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZx dW90OyxzYW5zLXNlcmlmIj4mbmJzcDsmbmJzcDsgZXhwbGljaXRseSBzcGVjaWZ5IHdoYXQgY2xh aW1zIHRoZXkgaW5jbHVkZSBiZXlvbmQgdGhlIGJhc2Ugc2V0IG9mPC9zcGFuPjxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZx dW90OyxzYW5zLXNlcmlmIj4mbmJzcDsmbmJzcDsgY2xhaW1zIGZyb20gdGhpcyBkb2N1bWVudCw8 c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PGI+dGhlIG9y ZGVyIGluIHdoaWNoIHRoZXkgd2lsbCBhcHBlYXI8L2I+LOKApuKAnTwvc3Bhbj48bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkm cXVvdDssc2Fucy1zZXJpZiI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlm Ij5XaGVuIGxvb2tpbmcgYXQgdGhlIGV4dGVuc2lvbnMgd2UgYXJlIGN1cnJlbnRseSB3b3JraW5n IG9uOjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+Jm5ic3A7PC9zcGFuPjxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2Fs aWJyaSZxdW90OyxzYW5zLXNlcmlmIj5kcmFmdC1pZXRmLXN0aXItcnBoLTAzPC9zcGFuPjxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2Fs aWJyaSZxdW90OyxzYW5zLXNlcmlmIj5kcmFmdC1pZXRmLXN0aXItcGFzc3BvcnQtc2hha2VuLTAx PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5kcmFmdC1pZXRmLXN0aXItcGFzc3Bv cnQtZGl2ZXJ0LTAyPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj4mbmJzcDs8L3Nw YW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTom cXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPuKApkkgZG9u4oCZdCBzZWUgYW55dGhpbmcg YWJvdXQgdGhlIG9yZGVyIGluIGFueSBvZiB0aGUgZG9jdW1lbnRzLjwvc3Bhbj48bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkm cXVvdDssc2Fucy1zZXJpZiI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlm Ij5JIHRoaW5rIGl0IHdvdWxkIGJlIGdvb2QgdG8gaGF2ZSBhIGRlZGljYXRlZCDigJxPcmRlciBv ZiBjbGFpbXPigJ0gc2VjdGlvbiwgb3Igc29tZXRoaW5nIHNpbWlsYXIsIGluIGVhY2ggZXh0ZW5z aW9uIHNwZWNpZmljYXRpb24uPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4N CjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj4mbmJz cDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZh bWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPldoZW4gbG9va2luZyBhdCB0aGUg ZXhhbXBsZXMgaW4gdGhlIGRyYWZ0cyBhYm92ZSwgaXQgc2VlbXMgbGlrZSBldmVuIHRoZSBiYXNl IGNsYWltcyBhcmUgaW4gZGlmZmVyZW50IG9yZGVycy4gTm90IHN1cmUgd2hldGhlciB0aGVyZSBp cyBhbiBleHBsaWNpdCByZXF1aXJlbWVudCB0aGF0IHRoZXkgbmVlZA0KIHRvIGJlIGluIG9yZGVy LCB0aG91Z2h0Ljwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+Jm5ic3A7PC9zcGFu PjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5SZWdhcmRzLDwvc3Bhbj48bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVv dDssc2Fucy1zZXJpZiI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rp dj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5D aHJpc3Rlcjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+Jm5ic3A7PC9zcGFuPjxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2Vy aWYiPl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fPGJyPg0K c3RpciBtYWlsaW5nIGxpc3Q8YnI+DQo8YSBocmVmPSJtYWlsdG86c3RpckBpZXRmLm9yZyI+PHNw YW4gc3R5bGU9ImNvbG9yOnB1cnBsZSI+c3RpckBpZXRmLm9yZzwvc3Bhbj48L2E+PGJyPg0KPGEg aHJlZj0iaHR0cHM6Ly91cmxkZWZlbnNlLnByb29mcG9pbnQuY29tL3YyL3VybD91PWh0dHBzLTNB X193d3cuaWV0Zi5vcmdfbWFpbG1hbl9saXN0aW5mb19zdGlyJmFtcDtkPUR3TUdhUSZhbXA7Yz1N T3B0TmxWdElFVGVEQUxDX2xVTHJ3JmFtcDtyPXd3MVM5QkhFY3BFNE1NVWJnR1Fyc29MLVNLM1VD R1kzM0tvYWoyaDl6WXcmYW1wO209X0RCZG1VS3BrVUFVVnYxMjBQdUhvTXQtVFZ0VHV6T0hzZkZR ZEFXbWVGcyZhbXA7cz15WVk2a3ZOU2x4N1c4NG5YTGZZUDduNFBTSDBTN1VpcTNWSzJGSTZpd0VV JmFtcDtlPSI+PHNwYW4gc3R5bGU9ImNvbG9yOnB1cnBsZSI+aHR0cHM6Ly93d3cuaWV0Zi5vcmcv bWFpbG1hbi9saXN0aW5mby9zdGlyPC9zcGFuPjwvYT48L3NwYW4+PG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9i bG9ja3F1b3RlPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpw PjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8YnI+DQo8aHI+DQo8Zm9udCBmYWNlPSJBcmlhbCIgY29s b3I9IkdyYXkiIHNpemU9IjEiPjxicj4NClRoaXMgZS1tYWlsIG1heSBjb250YWluIFNwcmludCBw cm9wcmlldGFyeSBpbmZvcm1hdGlvbiBpbnRlbmRlZCBmb3IgdGhlIHNvbGUgdXNlIG9mIHRoZSBy ZWNpcGllbnQocykuIEFueSB1c2UgYnkgb3RoZXJzIGlzIHByb2hpYml0ZWQuIElmIHlvdSBhcmUg bm90IHRoZSBpbnRlbmRlZCByZWNpcGllbnQsIHBsZWFzZSBjb250YWN0IHRoZSBzZW5kZXIgYW5k IGRlbGV0ZSBhbGwgY29waWVzIG9mIHRoZSBtZXNzYWdlLjxicj4NCjwvZm9udD4NCjwvYm9keT4N CjwvaHRtbD4NCg== --_000_ed7ff4de91c94af2a12bea3d4a03ddddplswe13m04adsprintcom_-- From nobody Sat Mar 17 06:34:09 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BA753127867; Sat, 17 Mar 2018 06:34:02 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.788 X-Spam-Level: X-Spam-Status: No, score=-1.788 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, HTML_MESSAGE=0.001, T_DKIM_INVALID=0.01, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=neutral reason="invalid (public key: not available)" header.d=jdrosen.net Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dp4hPkKbsKVk; Sat, 17 Mar 2018 06:34:01 -0700 (PDT) Received: from ecbiz193.inmotionhosting.com (ecbiz193.inmotionhosting.com [69.174.52.145]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7505F12708C; Sat, 17 Mar 2018 06:34:01 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=jdrosen.net ; s=default; h=Content-Type:Cc:To:Subject:Message-ID:Date:From:MIME-Version: Sender:Reply-To:Content-Transfer-Encoding:Content-ID:Content-Description: Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID: In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:List-Subscribe: List-Post:List-Owner:List-Archive; bh=geYyrMbKTCH3JMt5cyLz2qQ+epehpJxRxlOdO5Au4Vo=; b=L5VNaxXwMfLM3wXQS9aDFSHXcP TYQ3njusphMfmDvgJ2DAH9erX8fIcP6dS78FS6/uHtYmkpsiTeVid6EmVLluUa0uXzZIU2RKK+Qvs bQ9D4vaOikjnRNnFK2NFC9YF1Tkqqqp1z8+D+MJSwOKMNkZZLbvVYTPBchK8osQMRM25MLJo6hNl1 rEtv/IQMaM0+HD9UXRkrh7jOrJ8ci9hZviHznCIvzP64P0rjgtKtu3XL/WJDFibNPOy2ErEPQJiqO EMMROIW7iAEVqEbR9AG3CpHlPKO8vmUiZZ8x7jhSZlyYJU/55Q39QYqxUlh1Y5ca1Hq07mMt3onX2 ypaaAq7w==; Received: from mail-oi0-f53.google.com ([209.85.218.53]:34853) by ecbiz193.inmotionhosting.com with esmtpsa (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128) (Exim 4.89_1) (envelope-from ) id 1exBy2-000sCU-D4; Sat, 17 Mar 2018 09:34:00 -0400 Received: by mail-oi0-f53.google.com with SMTP id a189so3894128oii.2; Sat, 17 Mar 2018 06:33:50 -0700 (PDT) X-Gm-Message-State: AElRT7GcH99nkUde9GVd7qjSBK3/N/6feQDbG3KwESUFjuD4AOXfi2zg Daosfy4RQ1Zx3+KYR5NvmtBgZ0XSMUpnyo2cXZU= X-Google-Smtp-Source: AG47ELsjI2IvKVKTjJAk17C8wCefTUyzTghhNLANq9UDvKe9K7WjYFN21TPCrhqatqthumJCdKALIRqmDNSVW4BRkEA= X-Received: by 10.202.6.3 with SMTP id 3mr3491896oig.279.1521293630108; Sat, 17 Mar 2018 06:33:50 -0700 (PDT) MIME-Version: 1.0 Received: by 10.74.190.6 with HTTP; Sat, 17 Mar 2018 06:33:49 -0700 (PDT) From: Jonathan Rosenberg Date: Sat, 17 Mar 2018 09:33:49 -0400 X-Gmail-Original-Message-ID: Message-ID: To: art@ietf.org, stir@ietf.org Cc: Jennings Cullen Content-Type: multipart/alternative; boundary="94eb2c18d7a86bfdbc05679bc669" X-OutGoing-Spam-Status: No, score=-1.0 X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - ecbiz193.inmotionhosting.com X-AntiAbuse: Original Domain - ietf.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - jdrosen.net X-Get-Message-Sender-Via: ecbiz193.inmotionhosting.com: authenticated_id: jdrosen+jdrosen.net/only user confirmed/virtual account not confirmed X-Authenticated-Sender: ecbiz193.inmotionhosting.com: jdrosen@jdrosen.net X-Source: X-Source-Args: X-Source-Dir: Archived-At: Subject: [stir] Thursday lunch discussion on new techniques for stopping robocalling X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 17 Mar 2018 13:34:03 -0000 --94eb2c18d7a86bfdbc05679bc669 Content-Type: text/plain; charset="UTF-8" Folks - The problem of robocalling on the PSTN has only continued to increase over the last few years. As with any battle this significant, we need multiple tools on the table that can be used to fight it. Recently, Cullen and I proposed some new ideas for techniques to work in concert with STIR - notably https://tools.ietf.org/html/draft-rosenberg-stir-sipcoin-00 and https://tools.ietf.org/html/draft-rosenberg-stir-callback-00.html . We'd like to hold a lunch discussion to discuss these concepts and more importantly, discuss other possible ideas people have on work the IETF can do to increase the number of weapons in the arsenal. We've got a room booked on Thursday lunch, room Hilton Meeting Rooms 1-4. Anyone who'd like to discuss is welcome to join. Thx, Jonathan R. -- Jonathan Rosenberg, Ph.D. jdrosen@jdrosen.net http://www.jdrosen.net --94eb2c18d7a86bfdbc05679bc669 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Folks -=C2=A0

The problem of robocallin= g on the PSTN has only continued to increase over the last few years. As wi= th any battle this significant, we need multiple tools on the table that ca= n be used to fight it. Recently, Cullen and I proposed some new ideas for t= echniques to work in concert with STIR - notably=C2=A0https://tools.ietf.org/html/draft-rosenberg-stir-= sipcoin-00=C2=A0and=C2=A0https://tools.ietf.org/html/draft-rosenberg-stir-callback-00.html=C2=A0. We'd like to hold a lunch discussion to discuss these concepts= and more importantly, discuss other possible ideas people have on work the= IETF can do to increase the number of weapons in the arsenal.



--
--94eb2c18d7a86bfdbc05679bc669-- From nobody Sat Mar 17 10:58:50 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1C50F127342; Sat, 17 Mar 2018 10:58:48 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Y6TmVNYDONop; Sat, 17 Mar 2018 10:58:46 -0700 (PDT) Received: from mail-ot0-x233.google.com (mail-ot0-x233.google.com [IPv6:2607:f8b0:4003:c0f::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 067F21271DF; Sat, 17 Mar 2018 10:58:46 -0700 (PDT) Received: by mail-ot0-x233.google.com with SMTP id t2-v6so4258866otj.4; Sat, 17 Mar 2018 10:58:45 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=4k7sxu+4WmmdpWcw8b4MEOAXyzUOpqkuTk07vrwyqtA=; b=VospMid8N2FKVt+HWtDJb+8UCIs37iS6iZj9/TnlJj5a3IJL2f1Xb8HNF5L9AsLckU er6PwkAy9G51+L68Bk2maCOTOsKDOys5fRP37Ypw0loPEgeVpDcF613guhrDeVsZO5OL p9NAxrxQB3V2y7TATFz5pf37YstcxZHnFnPPPgxmX9IcOEYFMvFegpgeB0pUzPBrfSGK kR6iaJRwu+Dk8MEedJJcz/oASWAWT6UBkfz5Mr9rp74D1TQowK2E/XlgEd5vYphuXKK9 +PPPhyYmMtC9sKn0w1hNTt1p7IY2yZT93FqxeHDpCyfYf8L3osSsJFJcHR3EmeSM2uNO uroQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=4k7sxu+4WmmdpWcw8b4MEOAXyzUOpqkuTk07vrwyqtA=; b=LwbQlk7c5R6OEYvJtfQSfzJNZQthWEvGVy6+GH2MzABTN+jYd1FMElatUy4DKHp3z/ uqHktnrluRlyyqvP5MA+HNnjsRlKJO4UnE1HtoWBwOPmXDc0q6h0nsrzSwMSSORaYewL wyP7g4fHIMJ70iGbjIJSxFtk2lipmMvlRc+pOuG5m2on7hA+SllmI74G0i/svIE2/IQQ WgPPXv+tAxp5uskRqhCYCRpszMuGjZI9yA1Sfn3OMnwjN5B5QK2jm/LE2pZ+ulmJCDOb /S/x5x1YKViCR+XU8cm+s58BOfKgu+5YreyZ+4+7/cj6dVMBZZabYFcTZfe4oDK4GQgb L7mw== X-Gm-Message-State: AElRT7FP0ZqjfVl2vI61A8totMhMBem3dpVkMFSGFCkmI6q3tr+9au39 zAsW/ZC048El5uFtIM2+C7Z+/8d+bWRSvw1mH6sftQ== X-Google-Smtp-Source: AG47ELvF/wmhYb6BUs0I+/BzfSr67w3CPTCb29oHz4MVKBQlSKCI+YIwJqEkQXe8pfHQVVAeEnSZNGCxXrum+61Md3A= X-Received: by 2002:a9d:2a2f:: with SMTP id t44-v6mr4414141ota.193.1521309524972; Sat, 17 Mar 2018 10:58:44 -0700 (PDT) MIME-Version: 1.0 Received: by 10.74.7.27 with HTTP; Sat, 17 Mar 2018 10:58:14 -0700 (PDT) In-Reply-To: References: From: Ted Hardie Date: Sat, 17 Mar 2018 10:58:14 -0700 Message-ID: To: Jonathan Rosenberg Cc: Applications and Real-Time Area Discussion , stir@ietf.org, Jennings Cullen Content-Type: multipart/alternative; boundary="000000000000d459d205679f79c7" Archived-At: Subject: Re: [stir] [art] Thursday lunch discussion on new techniques for stopping robocalling X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 17 Mar 2018 17:58:48 -0000 --000000000000d459d205679f79c7 Content-Type: text/plain; charset="UTF-8" Hi Jonathan, Cullen, I was somewhat surprised that the draft did not have a direct reference to the SIP Hashcash work (especially since Cullen was the author of https://tools.ietf.org/html/draft-jennings-sip-hashcash-06). From my perspective at least, it still looks to be a useful historical antecedent to consult, since it is a proof-of-work system (and one on which a bunch of later cryptocurrencies draw). In particular, its view that this is about a demonstration of work rather than a payment to send may still be a valuable perspective. http://www.hashcash.org/ still appears to be up, by the way, for folks that want to see how its original use case tied into thwarting denial of service attacks. Ted On Sat, Mar 17, 2018 at 6:33 AM, Jonathan Rosenberg wrote: > Folks - > > The problem of robocalling on the PSTN has only continued to increase over > the last few years. As with any battle this significant, we need multiple > tools on the table that can be used to fight it. Recently, Cullen and I > proposed some new ideas for techniques to work in concert with STIR - > notably https://tools.ietf.org/html/draft-rosenberg-stir-sipcoin-00 and > https://tools.ietf.org/html/draft-rosenberg-stir-callback-00.html . We'd > like to hold a lunch discussion to discuss these concepts and more > importantly, discuss other possible ideas people have on work the IETF can > do to increase the number of weapons in the arsenal. > > We've got a room booked on Thursday lunch, room Hilton Meeting Rooms 1-4. > Anyone who'd like to discuss is welcome to join. > > Thx, > Jonathan R. > > > -- > Jonathan Rosenberg, Ph.D. > jdrosen@jdrosen.net > http://www.jdrosen.net > > _______________________________________________ > art mailing list > art@ietf.org > https://www.ietf.org/mailman/listinfo/art > > --000000000000d459d205679f79c7 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi Jonathan, Cullen,

I was somewhat= surprised that the draft did not have a direct reference to the SIP Hashca= sh work (especially since Cullen was the author of https://tools.ietf.org/html/= draft-jennings-sip-hashcash-06).=C2=A0 From my perspective at least, it= still looks to be a useful historical antecedent to consult, since it is a= proof-of-work system (and one on which a bunch of later cryptocurrencies d= raw).=C2=A0 In particular, its view that this is about a demonstration of w= ork rather than a payment to send may still be a valuable perspective.
=
http://www.hashcash.org/ still= appears to be up, by the way, for folks that want to see how its original = use case tied into thwarting denial of service attacks.

T= ed

On Sat, Mar 17, 2018 at 6:33 AM, Jonathan Rosenberg <= jdrosen@jdrosen.ne= t> wrote:
Folks -=C2=A0

The problem of robocallin= g on the PSTN has only continued to increase over the last few years. As wi= th any battle this significant, we need multiple tools on the table that ca= n be used to fight it. Recently, Cullen and I proposed some new ideas for t= echniques to work in concert with STIR - notably=C2=A0https:= //tools.ietf.org/html/draft-rosenberg-stir-sipcoin-00=C2=A0an= d=C2=A0https://tools.ietf.org/html/draft-rosenber= g-stir-callback-00.html=C2=A0. We'd like to hold a lunch discu= ssion to discuss these concepts and more importantly, discuss other possibl= e ideas people have on work the IETF can do to increase the number of weapo= ns in the arsenal.

We've got a room booked on = Thursday lunch, room Hilton Meeting Rooms 1-4. Anyone who'd like to disc= uss is welcome to join.

Thx,
Jonathan R.=


--

_______________________________________________
art mailing list
art@ietf.org
https://www.ietf.org/mailman/listinfo/art


--000000000000d459d205679f79c7-- From nobody Sat Mar 17 12:10:12 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D0F47127876 for ; Sat, 17 Mar 2018 12:10:05 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=hiya-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PdhIvXA1Lenn for ; Sat, 17 Mar 2018 12:10:03 -0700 (PDT) Received: from mail-oi0-x22b.google.com (mail-oi0-x22b.google.com [IPv6:2607:f8b0:4003:c06::22b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B852312D7F2 for ; Sat, 17 Mar 2018 12:10:03 -0700 (PDT) Received: by mail-oi0-x22b.google.com with SMTP id f186so11295467oig.4 for ; Sat, 17 Mar 2018 12:10:03 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hiya-com.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=4tU4BSBMqaWM9hWRZNPYjxVVH1vaQVC6o6J6iix6EWs=; b=RRUgbpiEUMYXRT2oSd0sugLXP1GDeg2eoi9EkSpOFmoOZWNkP1vByEmYxZeER1mysV 9YhRGzX2NAOiys53+pnvZI6jvobXquwlH+2ofZ/JzQ+xbHf5LmKzk9xAe1Nw0HprUKVs RHZGgz8KQSgn/kp+F18lbj7wrngM78TdTE0RfqA6PBEuY1solAP4yfzxUAM24LZJAPOw hnjoEedZ3YDi3a1yYl8rj1fy2HkAF5mZVvhB0ZBTVXq6wHXkMZrOAcSZo7OV1myVvHv0 2cTE46lAoJYVbFqq0vPOWaWA/OGSiICI+qsMJVR8kpYyvn0dufW9Gqq49ilnMTRjRlDO bY+A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=4tU4BSBMqaWM9hWRZNPYjxVVH1vaQVC6o6J6iix6EWs=; b=MSZHJKBmillm3jUJFkbdqzeQ8edKgIEujbhVPQs3J/+8ykMODL0ZgmhhSe4ekFNjaX cg+kI9G3W3LPVLXrkR2uNM0jtj7x+6+uph/BYKLL6ILRl4B4qFkpltWH53JpeYxU4cuC FFnO8M/fUHk88l2F9XJZMkOXk1Y8OUvcSTHmzWPIGkXQDWHYOEQ+H/akRn4Iib2C7CkK +lUYUsaqAA6HAnq6OSqoA//YEsnS3ujeZg9XUkHnlgy3Mcj8qzj9ASMHdHrOrg32iyWU c15yGAk5DW8g1z2ngHq8uUosVQbwYRczmj7z43pQBR3MftGJONbfUDXrCqVNZDd9I2fS xBYQ== X-Gm-Message-State: AElRT7H6IFLtCncNWIwhFVAp88aWBJQmN3I5S+jsq9ZBfv8KlxjfUIiY Y/I42avQIPMleZYchbJetJMS2lMRJmjrnO0k/LlK7A== X-Google-Smtp-Source: AG47ELv9Y1l2xnF+csxMsjeNjAeHdv2p9MHAuk/sWkzJCyfJWsme/S54vPOKOLgrKi0H/H8+huXhor801f1EdYrDDWA= X-Received: by 10.202.196.80 with SMTP id u77mr4015927oif.9.1521313802891; Sat, 17 Mar 2018 12:10:02 -0700 (PDT) MIME-Version: 1.0 Received: by 10.201.64.136 with HTTP; Sat, 17 Mar 2018 12:10:02 -0700 (PDT) Received: by 10.201.64.136 with HTTP; Sat, 17 Mar 2018 12:10:02 -0700 (PDT) In-Reply-To: References: From: Jonathan Nelson Date: Sat, 17 Mar 2018 12:10:02 -0700 Message-ID: To: Jonathan Rosenberg Cc: art@ietf.org, stir@ietf.org, Jennings Cullen Content-Type: multipart/alternative; boundary="001a113e2324d04f6a0567a078c2" Archived-At: Subject: Re: [stir] Thursday lunch discussion on new techniques for stopping robocalling X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 17 Mar 2018 19:10:06 -0000 --001a113e2324d04f6a0567a078c2 Content-Type: text/plain; charset="UTF-8" Unfortunately I'm in DC during this meeting for the FCC/FTC joint session on robocalling 3/23. Any chance of setting up a bridge for this lunch discussion? Thanks, Jonathan Nelson Hiya Spam and Caller ID On Mar 17, 2018 6:34 AM, "Jonathan Rosenberg" wrote: Folks - The problem of robocalling on the PSTN has only continued to increase over the last few years. As with any battle this significant, we need multiple tools on the table that can be used to fight it. Recently, Cullen and I proposed some new ideas for techniques to work in concert with STIR - notably https://tools.ietf.org/html/draft-rosenberg-stir-sipcoin-00 and https://tools.ietf.org/html/draft-rosenberg-stir-callback-00.html . We'd like to hold a lunch discussion to discuss these concepts and more importantly, discuss other possible ideas people have on work the IETF can do to increase the number of weapons in the arsenal. We've got a room booked on Thursday lunch, room Hilton Meeting Rooms 1-4. Anyone who'd like to discuss is welcome to join. Thx, Jonathan R. -- Jonathan Rosenberg, Ph.D. jdrosen@jdrosen.net http://www.jdrosen.net _______________________________________________ stir mailing list stir@ietf.org https://www.ietf.org/mailman/listinfo/stir --001a113e2324d04f6a0567a078c2 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Unfortunately I'm in DC during this meeting for = the FCC/FTC joint session on robocalling 3/23. Any chance of setting up a b= ridge for this lunch discussion?=C2=A0

Thanks,=C2=A0

Jonathan Nelson=C2=A0
Hiya Spam and Caller ID= =C2=A0

On Mar 17, 2018 6:34 AM, "Jonathan Rosenberg" <jdrosen@jdrosen.net> wrote:
Folks -=C2=A0

The problem of robocallin= g on the PSTN has only continued to increase over the last few years. As wi= th any battle this significant, we need multiple tools on the table that ca= n be used to fight it. Recently, Cullen and I proposed some new ideas for t= echniques to work in concert with STIR - notably=C2=A0https:= //tools.ietf.org/html/draft-rosenberg-stir-sipcoin-00=C2=A0an= d=C2=A0https://tools.ietf.org/html/draft-rosenber= g-stir-callback-00.html=C2=A0. We'd like to hold a lunch discu= ssion to discuss these concepts and more importantly, discuss other possibl= e ideas people have on work the IETF can do to increase the number of weapo= ns in the arsenal.

We've got a room booked on = Thursday lunch, room Hilton Meeting Rooms 1-4. Anyone who'd like to disc= uss is welcome to join.

Thx,
Jonathan R.=


--

_______________________________________________
stir mailing list
stir@ietf.org
https://www.ietf.org/mailman/listinfo/stir


--001a113e2324d04f6a0567a078c2-- From nobody Sat Mar 17 12:27:24 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 146E712D7EA; Sat, 17 Mar 2018 12:27:19 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.788 X-Spam-Level: X-Spam-Status: No, score=-1.788 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, HTML_MESSAGE=0.001, T_DKIM_INVALID=0.01, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=neutral reason="invalid (public key: not available)" header.d=jdrosen.net Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8tOOrst9TXWR; Sat, 17 Mar 2018 12:27:17 -0700 (PDT) Received: from ecbiz193.inmotionhosting.com (ecbiz193.inmotionhosting.com [69.174.52.145]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 81A3A127876; Sat, 17 Mar 2018 12:27:17 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=jdrosen.net ; s=default; h=Content-Type:Cc:To:Subject:Message-ID:Date:From:References: In-Reply-To:MIME-Version:Sender:Reply-To:Content-Transfer-Encoding:Content-ID :Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To: Resent-Cc:Resent-Message-ID:List-Id:List-Help:List-Unsubscribe:List-Subscribe :List-Post:List-Owner:List-Archive; bh=p9Ihxe6dqUG6iodGatJzKOqfTT/gtetRwr5iw2Iq3gc=; b=Q2RIpqPiKoJhp7edU+9j+FATeC T0Tqpw5repoxMAB1KeqcF9uK4p8pQjIF5hfEYLAaqVdR9J/YQO4Jn1rhvBjqQ464QvOy2oPNHmpk9 nVMvFE1PhsZ/KbTl0Tzex3gl1HnSwNcxpC2np3tgvEk7XkL18GrHa4ZL5RFxw8iydZlCP5qcO+9sc hDX+KSYYhvnW7LbyGLiiYXQo80DvIgRg9w5xXtqE+htFwCQbHceEU4Wq1tv4fTLKCHHhIBQZQ3bVc gdZGfb5zZGO8lRrptAK6ZbyUSsZSl69deD5iVc+LG7jqHAtUYojOAlWjaIEMhwoQXewfruvT0fmBH K/+OHlsA==; Received: from mail-ot0-f172.google.com ([74.125.82.172]:37045) by ecbiz193.inmotionhosting.com with esmtpsa (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128) (Exim 4.89_1) (envelope-from ) id 1exHTq-001pLU-Ov; Sat, 17 Mar 2018 15:27:16 -0400 Received: by mail-ot0-f172.google.com with SMTP id t2-v6so4385622otj.4; Sat, 17 Mar 2018 12:27:02 -0700 (PDT) X-Gm-Message-State: AElRT7FF8Yo9hIMSrdz+JrLkdHdBTAFfLb024Ir4yM3hbkFpK4hq4Exe NCXiHQQF/aF4ItX1YpttIK3YEe0Fg/3HpxuwNL8= X-Google-Smtp-Source: AG47ELutrb1lvs395MktD1QepTtDUxpJ9jJFx4PnCXy/ND3sd1TXR6fplxMmamGp+3NNHCFd/2uQYznPIwn32Cn+//w= X-Received: by 2002:a9d:2f04:: with SMTP id h4-v6mr4355453otb.279.1521314822467; Sat, 17 Mar 2018 12:27:02 -0700 (PDT) MIME-Version: 1.0 Received: by 10.74.190.6 with HTTP; Sat, 17 Mar 2018 12:27:02 -0700 (PDT) In-Reply-To: References: From: Jonathan Rosenberg Date: Sat, 17 Mar 2018 15:27:02 -0400 X-Gmail-Original-Message-ID: Message-ID: To: Ted Hardie Cc: Jonathan Rosenberg , Applications and Real-Time Area Discussion , stir@ietf.org, Jennings Cullen Content-Type: multipart/alternative; boundary="00000000000095b8c40567a0b5a2" X-OutGoing-Spam-Status: No, score=-1.0 X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - ecbiz193.inmotionhosting.com X-AntiAbuse: Original Domain - ietf.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - jdrosen.net X-Get-Message-Sender-Via: ecbiz193.inmotionhosting.com: authenticated_id: jdrosen+jdrosen.net/only user confirmed/virtual account not confirmed X-Authenticated-Sender: ecbiz193.inmotionhosting.com: jdrosen@jdrosen.net X-Source: X-Source-Args: X-Source-Dir: Archived-At: Subject: Re: [stir] [art] Thursday lunch discussion on new techniques for stopping robocalling X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 17 Mar 2018 19:27:19 -0000 --00000000000095b8c40567a0b5a2 Content-Type: text/plain; charset="UTF-8" This is mostly to blame on getting the draft together last minute. Of course we're familiar with that document ;) We'll get that fixed in the next rev. The SIPCoin doc makes reference to the technique even though it omits the citation. draft-jennings-sip-hashcash is in the category of challenge-based solutions described in Section 6 of the draft. The problem with these approaches in general is that, any amount of compute that incurs an actual useful cost, would take far too long to perform, and thus impact actual call setup delays. Bad guys and larger players might get around this by distributing the work across machines in parallel, but it punishes the 'normal guy', which is not what we want. Thx, Jonathan R. On Sat, Mar 17, 2018 at 1:58 PM, Ted Hardie wrote: > Hi Jonathan, Cullen, > > I was somewhat surprised that the draft did not have a direct reference to > the SIP Hashcash work (especially since Cullen was the author of > https://tools.ietf.org/html/draft-jennings-sip-hashcash-06). From my > perspective at least, it still looks to be a useful historical antecedent > to consult, since it is a proof-of-work system (and one on which a bunch of > later cryptocurrencies draw). In particular, its view that this is about a > demonstration of work rather than a payment to send may still be a valuable > perspective. > > http://www.hashcash.org/ still appears to be up, by the way, for folks > that want to see how its original use case tied into thwarting denial of > service attacks. > > Ted > > On Sat, Mar 17, 2018 at 6:33 AM, Jonathan Rosenberg > wrote: > >> Folks - >> >> The problem of robocalling on the PSTN has only continued to increase >> over the last few years. As with any battle this significant, we need >> multiple tools on the table that can be used to fight it. Recently, Cullen >> and I proposed some new ideas for techniques to work in concert with STIR - >> notably https://tools.ietf.org/html/draft-rosenberg-stir-sipcoin-00 and >> https://tools.ietf.org/html/draft-rosenberg-stir-callback-00.html . We'd >> like to hold a lunch discussion to discuss these concepts and more >> importantly, discuss other possible ideas people have on work the IETF can >> do to increase the number of weapons in the arsenal. >> >> We've got a room booked on Thursday lunch, room Hilton Meeting Rooms 1-4. >> Anyone who'd like to discuss is welcome to join. >> >> Thx, >> Jonathan R. >> >> >> -- >> Jonathan Rosenberg, Ph.D. >> jdrosen@jdrosen.net >> http://www.jdrosen.net >> >> _______________________________________________ >> art mailing list >> art@ietf.org >> https://www.ietf.org/mailman/listinfo/art >> >> > -- Jonathan Rosenberg, Ph.D. jdrosen@jdrosen.net http://www.jdrosen.net --00000000000095b8c40567a0b5a2 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
This is mostly to blame on getting the draft together last= minute. Of course we're familiar with that document ;) We'll get t= hat fixed in the next rev.

The SIPCoin doc makes referen= ce to the technique even though it omits the citation. draft-jennings-sip-h= ashcash is in the category of challenge-based solutions described in Sectio= n 6 of the draft. The problem with these approaches in general is that, any= amount of compute that incurs an actual useful cost, would take far too lo= ng to perform, and thus impact actual call setup delays. Bad guys and large= r players might get around this by distributing the work across machines in= parallel, but it punishes the 'normal guy', which is not what we w= ant.

Thx,
Jonathan R.

On Sat, Mar 17, 2018 at = 1:58 PM, Ted Hardie <ted.ietf@gmail.com> wrote:
Hi Jonathan, Cullen,
<= br>
I was somewhat surprised that the draft did not have a direct refe= rence to the SIP Hashcash work (especially since Cullen was the author of <= a href=3D"https://tools.ietf.org/html/draft-jennings-sip-hashcash-06" targe= t=3D"_blank">https://tools.ietf.org/html/draft-jennings-sip-hashcash-0= 6).=C2=A0 From my perspective at least, it still looks to be a use= ful historical antecedent to consult, since it is a proof-of-work system (a= nd one on which a bunch of later cryptocurrencies draw).=C2=A0 In particula= r, its view that this is about a demonstration of work rather than a paymen= t to send may still be a valuable perspective.

http://www.hashcash.org/ still appea= rs to be up, by the way, for folks that want to see how its original use ca= se tied into thwarting denial of service attacks.

Ted
=

=
On Sat, Mar 17, 2018 at 6:33 AM, Jonathan Rosenberg <j= drosen@jdrosen.net> wrote:
Folks -=C2=A0

The problem of robocallin= g on the PSTN has only continued to increase over the last few years. As wi= th any battle this significant, we need multiple tools on the table that ca= n be used to fight it. Recently, Cullen and I proposed some new ideas for t= echniques to work in concert with STIR - notably=C2=A0https:= //tools.ietf.org/html/draft-rosenberg-stir-sipcoin-00=C2=A0an= d=C2=A0https://tools.ietf.org/html/draft-rosenber= g-stir-callback-00.html=C2=A0. We'd like to hold a lunch discu= ssion to discuss these concepts and more importantly, discuss other possibl= e ideas people have on work the IETF can do to increase the number of weapo= ns in the arsenal.

We've got a room booked on = Thursday lunch, room Hilton Meeting Rooms 1-4. Anyone who'd like to disc= uss is welcome to join.

Thx,
Jonathan R.=


--

_______________________________________________
art mailing list
art@ietf.org
https://www.ietf.org/mailman/listinfo/art





--
--00000000000095b8c40567a0b5a2-- From nobody Sat Mar 17 13:49:25 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 40FA4124217; Sat, 17 Mar 2018 13:49:17 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.01 X-Spam-Level: X-Spam-Status: No, score=-2.01 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=wordtothewise.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZzJnDqFIUzse; Sat, 17 Mar 2018 13:49:15 -0700 (PDT) Received: from mail.wordtothewise.com (mail.wordtothewise.com [IPv6:2001:470:1:6d::9a]) by ietfa.amsl.com (Postfix) with ESMTP id DF7791200E5; Sat, 17 Mar 2018 13:49:15 -0700 (PDT) Received: from satsuke.wordtothewise.com (204.11.227.194.static.etheric.net [204.11.227.194]) by mail.wordtothewise.com (Postfix) with ESMTPSA id B838B23379; Sat, 17 Mar 2018 13:50:07 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=wordtothewise.com; s=aardvark; t=1521319807; bh=ln0dNUz091rkN0Kzc0AEfqTPVe0INXLrE0WzmiKJe4U=; h=Subject:From:In-Reply-To:Date:Cc:References:To:From; b=n2SQ83H6xy69scmq/MZNgmK8zzCncg+SJqM8v8wW1m9HPCtfEPBoLzPpXFw9iOqdK EupJgMV9hthiWaUFUeBfaEJKqQuQvzR/s0PwLxbgvfjmdC7jGP3883RN9X473fnJEN 6C6KWtZjCwFZmXVV70XjPZh7+a5F8rL7eE4Yo+FU= Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\)) From: Steve Atkins In-Reply-To: Date: Sat, 17 Mar 2018 13:49:13 -0700 Cc: stir@ietf.org Content-Transfer-Encoding: quoted-printable Message-Id: <1760564F-45CC-4EE2-869A-76EDB434694A@wordtothewise.com> References: To: Applications and Real-Time Area Discussion X-Mailer: Apple Mail (2.3273) Archived-At: Subject: Re: [stir] [art] Thursday lunch discussion on new techniques for stopping robocalling X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 17 Mar 2018 20:49:17 -0000 > On Mar 17, 2018, at 10:58 AM, Ted Hardie wrote: >=20 > Hi Jonathan, Cullen, >=20 > I was somewhat surprised that the draft did not have a direct = reference to the SIP Hashcash work (especially since Cullen was the = author of https://tools.ietf.org/html/draft-jennings-sip-hashcash-06). = =46rom my perspective at least, it still looks to be a useful historical = antecedent to consult, since it is a proof-of-work system (and one on = which a bunch of later cryptocurrencies draw). In particular, its view = that this is about a demonstration of work rather than a payment to send = may still be a valuable perspective.=20 >=20 > http://www.hashcash.org/ still appears to be up, by the way, for folks = that want to see how its original use case tied into thwarting denial of = service attacks. I hope someone is soliciting input from the email community, who went = through this process a decade or so ago and noted that bad actors have = much, much cheaper access to CPU for proof-of-work than good actors do. Cheers, Steve= From nobody Sat Mar 17 14:09:16 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CF48A12D870 for ; Sat, 17 Mar 2018 14:09:11 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.209 X-Spam-Level: X-Spam-Status: No, score=-4.209 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YEODwTFvtVLE for ; Sat, 17 Mar 2018 14:09:10 -0700 (PDT) Received: from outprodmail02.cc.columbia.edu (outprodmail02.cc.columbia.edu [128.59.72.51]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 61A2C12D871 for ; Sat, 17 Mar 2018 14:09:07 -0700 (PDT) Received: from hazelnut (hazelnut.cc.columbia.edu [128.59.213.250]) by outprodmail02.cc.columbia.edu (8.14.4/8.14.4) with ESMTP id w2HL7fWq036236 for ; Sat, 17 Mar 2018 17:09:06 -0400 Received: from hazelnut (localhost.localdomain [127.0.0.1]) by hazelnut (Postfix) with ESMTP id 28CA383 for ; Sat, 17 Mar 2018 17:09:06 -0400 (EDT) Received: from sendprodmail02.cc.columbia.edu (sendprodmail02.cc.columbia.edu [128.59.72.14]) by hazelnut (Postfix) with ESMTP id 11E4792 for ; Sat, 17 Mar 2018 17:09:04 -0400 (EDT) Received: from mail-ot0-f200.google.com (mail-ot0-f200.google.com [74.125.82.200]) by sendprodmail02.cc.columbia.edu (8.14.4/8.14.4) with ESMTP id w2HL93tm063511 (version=TLSv1/SSLv3 cipher=AES128-GCM-SHA256 bits=128 verify=NOT) for ; Sat, 17 Mar 2018 17:09:03 -0400 Received: by mail-ot0-f200.google.com with SMTP id h8-v6so1146006otj.11 for ; Sat, 17 Mar 2018 14:09:03 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=EK3VI1Baqa/TLBsb2D6VZMwpe+P3iQwlLWpJppeeakY=; b=U2gdAI8JCUA8CGMzsq65K4eqnHhTLTlr5a5Q1KbKWiL/roGmw+mIT4POX1JpRHa64J PhxQtGaPhadDOi/yPWd6f+BSXHEjAfOQT+5s6I70D//U8tW0gOyAP/O0p1+fjTjVItHA g4LWsi+mpy2ymedBR42Hs0VN+/uGYJKCJACkdtMNCv1C3koRUouQbUbqrf+LjAdq2dI7 tvBjjD+LgFYeI1T58CbaKgH8kRRGd1rlnxc2Sfow7Iy11OqoIpNdjA0gzpXdYQe2797z /fibrk05GzjXaa0a1H71VwSOD8d5kyje4WqmQAtD9MEdJEFUAxV2iNnlHNiSUSKKpvoP oL6Q== X-Gm-Message-State: AElRT7GURyE06P+kGwE8cGtlzOoAg7YqrFbjrhqKiiywQSa28lmCLCNm SIMwgxUcY3p6dA2PAT5DibgXvd7u+vpZ+O81Q0k/HeLuMZN1ED16SkcIb+eBMW1zeKO4/nSGLAe CHLlrgMG7gjcEOP9cFHYHVEzmFn1q X-Received: by 2002:a9d:3364:: with SMTP id u33-v6mr4643497otd.26.1521320942712; Sat, 17 Mar 2018 14:09:02 -0700 (PDT) X-Google-Smtp-Source: AG47ELshRvA2fPKaMEcdFrDnrSCQfRkg4luxXNtQ/xIJEMlj/pAcOz2HSZwoIQWlKCX1nEFlUxoH0XqX0xxX/6zl3Qw= X-Received: by 2002:a9d:3364:: with SMTP id u33-v6mr4643480otd.26.1521320942376; Sat, 17 Mar 2018 14:09:02 -0700 (PDT) MIME-Version: 1.0 Received: by 2002:a9d:b72:0:0:0:0:0 with HTTP; Sat, 17 Mar 2018 14:08:41 -0700 (PDT) In-Reply-To: <1760564F-45CC-4EE2-869A-76EDB434694A@wordtothewise.com> References: <1760564F-45CC-4EE2-869A-76EDB434694A@wordtothewise.com> From: Henning Schulzrinne Date: Sat, 17 Mar 2018 17:08:41 -0400 Message-ID: To: Steve Atkins Cc: Applications and Real-Time Area Discussion , stir@ietf.org Content-Type: multipart/alternative; boundary="0000000000005c2e7c0567a222ae" X-No-Spam-Score: Local X-Scanned-By: MIMEDefang 2.78 on 128.59.72.14 Archived-At: Subject: Re: [stir] [art] Thursday lunch discussion on new techniques for stopping robocalling X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 17 Mar 2018 21:09:12 -0000 --0000000000005c2e7c0567a222ae Content-Type: text/plain; charset="UTF-8" I admit that I'm less than thrilled with having VoIP add to global warming. Is that really what we want to accomplish, just as other blockchain-like systems are getting, rightfully, dinged for that? We have to consider that the most likely parties affected will be legitimate mass callers, e.g., for emergency notifications or appointment reminders, increasing their costs for no particularly good reason. As long as this isn't universal, the bad guys will simply avoid such destinations. (They don't seem to be focusing on the PBX market anyway - they may suspect that corporate offices are not promising target markets for cruise deals and credit repair pitches.) Henning On Sat, Mar 17, 2018 at 4:49 PM, Steve Atkins wrote: > > > On Mar 17, 2018, at 10:58 AM, Ted Hardie wrote: > > > > Hi Jonathan, Cullen, > > > > I was somewhat surprised that the draft did not have a direct reference > to the SIP Hashcash work (especially since Cullen was the author of > https://tools.ietf.org/html/draft-jennings-sip-hashcash-06). From my > perspective at least, it still looks to be a useful historical antecedent > to consult, since it is a proof-of-work system (and one on which a bunch of > later cryptocurrencies draw). In particular, its view that this is about a > demonstration of work rather than a payment to send may still be a valuable > perspective. > > > > http://www.hashcash.org/ still appears to be up, by the way, for folks > that want to see how its original use case tied into thwarting denial of > service attacks. > > I hope someone is soliciting input from the email community, who went > through this process a decade or so ago and noted that bad actors have > much, much cheaper access to CPU for proof-of-work than good actors do. > > Cheers, > Steve > _______________________________________________ > art mailing list > art@ietf.org > https://www.ietf.org/mailman/listinfo/art > --0000000000005c2e7c0567a222ae Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
I admit that I'm less than thrilled with having VoIP a= dd to global warming. Is that really what we want to accomplish, just as ot= her blockchain-like systems are getting, rightfully, dinged for that?
<= br>
We have to consider that the most likely parties affected wil= l be legitimate mass callers, e.g., for emergency notifications or appointm= ent reminders, increasing their costs for no particularly good reason. As l= ong as this isn't universal, the bad guys will simply avoid such destin= ations. (They don't seem to be focusing on the PBX market anyway - they= may suspect that corporate offices are not promising target markets for cr= uise deals and credit repair pitches.)

Henning
=

On Sa= t, Mar 17, 2018 at 4:49 PM, Steve Atkins <steve@wordtothewise.com> wrote:

> On Mar 17, 2018, at 10:58 AM, Ted Hardie <ted.ietf@gmail.com> wrote:
>
> Hi Jonathan, Cullen,
>
> I was somewhat surprised that the draft did not have a direct referenc= e to the SIP Hashcash work (especially since Cullen was the author of https://tools.ietf.org/html/draft-jennings= -sip-hashcash-06).=C2=A0 From my perspective at least, it still lo= oks to be a useful historical antecedent to consult, since it is a proof-of= -work system (and one on which a bunch of later cryptocurrencies draw).=C2= =A0 In particular, its view that this is about a demonstration of work rath= er than a payment to send may still be a valuable perspective.
>
> http://www.hashcash.org/ still appears to be up, by the way, for fo= lks that want to see how its original use case tied into thwarting denial o= f service attacks.

I hope someone is soliciting input from the email community, who went throu= gh this process a decade or so ago and noted that bad actors have much, muc= h cheaper access to CPU for proof-of-work than good actors do.

Cheers,
=C2=A0 Steve
_______________________________________________
art mailing list
art@ietf.org
https://www.ietf.org/mailman/listinfo/art

--0000000000005c2e7c0567a222ae-- From nobody Sat Mar 17 14:41:04 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6E12F12D88D for ; Sat, 17 Mar 2018 14:40:59 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, MIME_QP_LONG_LINE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (768-bit key) header.d=shockey.us Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ERa49JPsVbck for ; Sat, 17 Mar 2018 14:40:52 -0700 (PDT) Received: from qproxy2.mail.unifiedlayer.com (qproxy2-pub.mail.unifiedlayer.com [69.89.16.161]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EE0C712D87B for ; Sat, 17 Mar 2018 14:40:50 -0700 (PDT) Received: from CMOut01 (unknown [10.0.90.82]) by qproxy2.mail.unifiedlayer.com (Postfix) with ESMTP id EB9B3357E4 for ; Sat, 17 Mar 2018 15:40:48 -0600 (MDT) Received: from box462.bluehost.com ([74.220.219.62]) by CMOut01 with id P9gl1x0061MNPNq019goVS; Sat, 17 Mar 2018 15:40:48 -0600 X-Authority-Analysis: v=2.2 cv=ft6sXBwf c=1 sm=1 tr=0 a=jTEj1adHphCQ5SwrTAOQMg==:117 a=jTEj1adHphCQ5SwrTAOQMg==:17 a=MKtGQD3n3ToA:10 a=1oJP67jkp3AA:10 a=v2DPQv5-lfwA:10 a=jqBRFv0mrdUA:10 a=ZZnuYtJkoWoA:10 a=PeFO9FbFhS32YxYntvkA:9 a=ll-iCDY8AAAA:8 a=M0OflfRGAAAA:8 a=48vgC7mUAAAA:8 a=u8ph0NzlAAAA:8 a=pGLkceISAAAA:8 a=qvsWzU6JAAAA:8 a=EhO-pxMShd_XVbA6TcEA:9 a=ZKdbOnpDVyppFdLL:21 a=ChcENGcouZqDuUdX:21 a=QEXdDO2ut3YA:10 a=ivbTfD_dPm4A:10 a=yMhMjlubAAAA:8 a=SSmOFEACAAAA:8 a=kc5Gw_OyfFleZYW0mZwA:9 a=-DZIZsYpFUb_p4aH:21 a=Yfhab2hWbqag2-gy:21 a=6W1aCpWd1cxc9aqd:21 a=gKO2Hq4RSVkA:10 a=UiCQ7L4-1S4A:10 a=hTZeC7Yk6K0A:10 a=frz4AuCg-hUA:10 a=VpyrLIdO_Ztbr3SWPBuH:22 a=6yl0mh0s51TKORVA8GqK:22 a=w1C3t2QeGrPiZgrLijVG:22 a=LESzyHZpAfU_M3OAKf2k:22 a=ltXdlpPeNBtwtZKez3Wm:22 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=shockey.us; s=default; h=Content-type:Mime-version:In-Reply-To:References:Message-ID:CC: To:From:Subject:Date:Sender:Reply-To:Content-Transfer-Encoding:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:List-Id:List-Help:List-Unsubscribe:List-Subscribe: List-Post:List-Owner:List-Archive; bh=o2QWtpYmDY6HTf9dPprmgEM485+sDFwrbTqTHi63J2c=; b=c+RDpjwAiGB02E4sCkxF/DC0mq OJQ6AbFYNabt9kZdaA2zT0RCEJtWgEDRb3uY7A5VzNGSkOAv7UedjzM8X5jUoLa91jkhPz0NsCv8r d0LDIjFB6zg/XeJ60UN4uiffe; Received: from pool-173-79-80-207.washdc.fios.verizon.net ([173.79.80.207]:57073 helo=[192.168.1.155]) by box462.bluehost.com with esmtpa (Exim 4.89_1) (envelope-from ) id 1exJZE-000irq-Jx; Sat, 17 Mar 2018 15:40:44 -0600 User-Agent: Microsoft-MacOutlook/10.b.0.180311 Date: Sat, 17 Mar 2018 17:40:44 -0400 From: Richard Shockey To: Henning Schulzrinne , Steve Atkins CC: Applications and Real-Time Area Discussion , Message-ID: Thread-Topic: [stir] [art] Thursday lunch discussion on new techniques for stopping robocalling References: <1760564F-45CC-4EE2-869A-76EDB434694A@wordtothewise.com> In-Reply-To: Mime-version: 1.0 Content-type: multipart/alternative; boundary="B_3604153244_2144703146" X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - box462.bluehost.com X-AntiAbuse: Original Domain - ietf.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - shockey.us X-BWhitelist: no X-Source-IP: 173.79.80.207 X-Exim-ID: 1exJZE-000irq-Jx X-Source: X-Source-Args: X-Source-Dir: X-Source-Sender: pool-173-79-80-207.washdc.fios.verizon.net ([192.168.1.155]) [173.79.80.207]:57073 X-Source-Auth: richard+shockey.us X-Email-Count: 6 X-Source-Cap: c2hvY2tleXU7c2hvY2tleXU7Ym94NDYyLmJsdWVob3N0LmNvbQ== X-Local-Domain: yes Archived-At: Subject: Re: [stir] [art] Thursday lunch discussion on new techniques for stopping robocalling X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 17 Mar 2018 21:41:02 -0000 > This message is in MIME format. Since your mail reader does not understand this format, some or all of this message may not be legible. --B_3604153244_2144703146 Content-type: text/plain; charset="UTF-8" Content-transfer-encoding: quoted-printable =20 +1=C2=A0=C2=A0 =E2=98=BA=C2=A0=20 =20 =E2=80=94=20 Richard Shockey Shockey Consulting LLC Chairman of the Board SIP Forum www.shockey.us www.sipforum.org richardshockey.us Skype-Linkedin-Facebook =E2=80=93Twitter rshockey101 PSTN +1 703-593-2683 =20 From: stir on behalf of Henning Schulzrinne Date: Saturday, March 17, 2018 at 5:08 PM To: Steve Atkins Cc: Applications and Real-Time Area Discussion , Subject: Re: [stir] [art] Thursday lunch discussion on new techniques for s= topping robocalling =20 I admit that I'm less than thrilled with having VoIP add to global warming.= Is that really what we want to accomplish, just as other blockchain-like sy= stems are getting, rightfully, dinged for that? =20 We have to consider that the most likely parties affected will be legitimat= e mass callers, e.g., for emergency notifications or appointment reminders, = increasing their costs for no particularly good reason. As long as this isn'= t universal, the bad guys will simply avoid such destinations. (They don't s= eem to be focusing on the PBX market anyway - they may suspect that corporat= e offices are not promising target markets for cruise deals and credit repai= r pitches.) =20 Henning =20 On Sat, Mar 17, 2018 at 4:49 PM, Steve Atkins wro= te: > On Mar 17, 2018, at 10:58 AM, Ted Hardie wrote: > > Hi Jonathan, Cullen, > > I was somewhat surprised that the draft did not have a direct reference t= o the SIP Hashcash work (especially since Cullen was the author of https://t= ools.ietf.org/html/draft-jennings-sip-hashcash-06). From my perspective at = least, it still looks to be a useful historical antecedent to consult, since= it is a proof-of-work system (and one on which a bunch of later cryptocurre= ncies draw). In particular, its view that this is about a demonstration of = work rather than a payment to send may still be a valuable perspective. > > http://www.hashcash.org/ still appears to be up, by the way, for folks th= at want to see how its original use case tied into thwarting denial of servi= ce attacks. I hope someone is soliciting input from the email community, who went throu= gh this process a decade or so ago and noted that bad actors have much, much= cheaper access to CPU for proof-of-work than good actors do. Cheers, Steve _______________________________________________ art mailing list art@ietf.org https://www.ietf.org/mailman/listinfo/art =20 _______________________________________________ stir mailing list stir@ietf= .org https://www.ietf.org/mailman/listinfo/stir=20 --B_3604153244_2144703146 Content-type: text/html; charset="UTF-8" Content-transfer-encoding: quoted-printable

 

+1=C2=A0=C2=A0 =E2=98=BA=C2=A0

 

=E2=80=94 

Richard Shockey

Shockey Consulting LLC

Chairman of the Board SIP Forum

www.shockey.us

www.sipforum.org

richard<at>shockey.us

Skype-Linkedin-Facebook =E2=80=93Twitter  rshoc= key101

PSTN +1 703-5= 93-2683

 

= From: stir <stir-bo= unces@ietf.org> on behalf of Henning Schulzrinne <hgs@cs.columbia.edu&= gt;
Date: Saturday, March 17, 2018 at 5:08 PM
To: Steve = Atkins <steve@wordtothewise.com>
Cc: Applications and Real-T= ime Area Discussion <art@ietf.org>, <stir@ietf.org>
Subjec= t: Re: [stir] [art] Thursday lunch discussion on new techniques for stop= ping robocalling

&nb= sp;

I adm= it that I'm less than thrilled with having VoIP add to global warming. Is th= at really what we want to accomplish, just as other blockchain-like systems = are getting, rightfully, dinged for that?

 

We have to consider that the most likely parties affected will be legiti= mate mass callers, e.g., for emergency notifications or appointment reminder= s, increasing their costs for no particularly good reason. As long as this i= sn't universal, the bad guys will simply avoid such destinations. (They don'= t seem to be focusing on the PBX market anyway - they may suspect that corpo= rate offices are not promising target markets for cruise deals and credit re= pair pitches.)

 

Henning

 

On Sat, Mar 17, 2018 at 4:49 PM, St= eve Atkins <steve@wordtothewise.com> wrote:


> On Mar 17, 2018, at 10:58 AM, Ted Hardie <<= /span>ted.ietf@gmail.com> wrote:
= >
> Hi Jonathan, Cullen,
>
> I was somewhat surprised t= hat the draft did not have a direct reference to the SIP Hashcash work (espe= cially since Cullen was the author of https://tools.ietf.org/html/draft-jennings-sip-hashca= sh-06).  From my perspective at least, = it still looks to be a useful historical antecedent to consult, since it is = a proof-of-work system (and one on which a bunch of later cryptocurrencies d= raw).  In particular, its view that this is about a demonstration of wo= rk rather than a payment to send may still be a valuable perspective.
>= ;
> http://www.hashcash.org/ still appears to be up, by the way, for folks that want to= see how its original use case tied into thwarting denial of service attacks= .

I hope someone is soliciting input from the email community, who we= nt through this process a decade or so ago and noted that bad actors have mu= ch, much cheaper access to CPU for proof-of-work than good actors do.
Cheers,
  Steve
_______________________________________________<= br>art mailing list
art@ietf.org= https://www.ietf.org/mailman/li= stinfo/art

=  

_______________________________________________ stir mailin= g list stir@ietf.org https://www.ietf.org/mailman/listinfo/stir =

--B_3604153244_2144703146-- From nobody Mon Mar 19 03:49:32 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2ED9D127522 for ; Mon, 19 Mar 2018 03:49:24 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=digicert.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NK296PIiaa2H for ; Mon, 19 Mar 2018 03:49:16 -0700 (PDT) Received: from mail1.bemta8.messagelabs.com (mail1.bemta8.messagelabs.com [216.82.243.199]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BF8C4128D2E for ; Mon, 19 Mar 2018 03:49:11 -0700 (PDT) Received: from [216.82.242.46] (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256 bits)) by server-7.bemta-8.messagelabs.com id 99/FC-03133-6A59FAA5; Mon, 19 Mar 2018 10:49:10 +0000 X-Brightmail-Tracker: H4sIAAAAAAAAA1WTe0xTVxzHPffetldt9VCq/CTi4y5LJgYsGrN GY3xtseqIJEtM1rBsF722nX2Qe6vBJUYMghE0dls7sT6qs5WhsMYhA9xgE51kdhEFI2gkKo9o SwwQ/mDM5709xcf94+Rzft/f43tOzmVpfUCTzgpFHkF08Q5OPYXpnlefkhX2RyxG3yHO9MeLn zSm4ch/yFTy+KzGVFX7G7WKMYdC45S5s30EmUsjR5E50NTP5DEWld1V4C76WmW7dqFRU/h9BB VVH6uji9Gzk6gcTWEZPERBWYRs9PhHCkIXTmrI5iGCutYuVTmazKqxEe40t1EKG/Aa2D8QpxW mcS7s29+pUTgVrwffiaFkzgYYjdSrJ/LvV3TIOaw87kNoatilhHU4H04PhZKD6xD82dOT6DkZ L4ORthZGYYRnwtj1GorMSoN7/cEEAzbAo1tRNeEZEOt7qSL5+XBitDUZ5+DpgE9FOAM6ghWI8 EUKan//lnAWDPv9NOFc+DlWmTAEuAPB8QPeZEEmPNwbZghvB2+NN1mwAV79e5gmBSEauvb5ku 5mQ2XdYRURflBDc2l7woYebwXfOcWeIjyjoKHlBuVFmYF3jheQNRoHEVx5EFQFEheVAv8c7Wd IkgWqS5oQ4Uzw18aT8YVw9vQgHZDvmMYL4Fon935Y4eVQ+f9lNeH54Kt4pCG8FAb/HkGn0NRz 6CNJEHcKYlaOMbtAtFttHidvd8g7U7ZTkCTeKjj4Ail7i9v5K5Jf5ST5a0SR0rWtaBZLcTN07 u8iFv20AvfWXTZesn0l7nAIUiuazbIc6Lw+WUsRBatQtM3ukJ/2hAysljPoriiyTirknZLdSq TraCV7+8jjMpq92BuT178Sa/eTwTJaz7jcLiE9TXdJKcNKmW2H603TiV+mA2Wkp+qQbFOvLRR Ep93zvh5HaSziUnVBpYvW7vK8mR2XbVGyrc/CNYotD/9WSi9G3dvNn8TaGqN7TuGub/rWbrTO yYvtLm9x8e5Dhc9zzgervxiOwmjfllfnbZvuln5ZhV/Mudu0eMw48GBJS/tL1fjB6Vp9qGR8L HeuIeif9MsHV+Prdt/YvOhMxacN0Yyl4Xpmz8cmusfw+YqDC/OLcbjZOCZe7V29uVdrecrYbn ZFOUay8TmZtCjxrwHhj8hILQQAAA== X-Env-Sender: tim.hollebeek@digicert.com X-Msg-Ref: server-10.tower-96.messagelabs.com!1521456548!90845232!1 X-Originating-IP: [216.32.181.17] X-SYMC-ESS-Client-Auth: mailfrom-relay-check=pass X-StarScan-Received: X-StarScan-Version: 9.9.15; banners=-,-,- X-VirusChecked: Checked Received: (qmail 22869 invoked from network); 19 Mar 2018 10:49:09 -0000 Received: from mail-co1nam03lp0017.outbound.protection.outlook.com (HELO NAM03-CO1-obe.outbound.protection.outlook.com) (216.32.181.17) by server-10.tower-96.messagelabs.com with AES256-GCM-SHA384 encrypted SMTP; 19 Mar 2018 10:49:09 -0000 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=digicert.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=dpGVHzV6vEs7nHqXxIirEWgWeFeh6kC8Rc6sFHwLmwc=; b=pWyzIS6Mv0rLGDZlQ2Y9lydUuxAafwc+hnFPJFFET0KYaV/xx6TYKST4tMW/a/ZyxmBk36EECAq7+W38SNWju0XZsz1N/ox6+InIFw17syZxvSIrOmOtGj5TdgjkMvg5Kj1ZkbLWRB/Bv7GkFX2Xvr0RHH3n5HiT3rIxQZ94rlY= Received: from MWHPR14MB1376.namprd14.prod.outlook.com (10.173.232.139) by MWHPR14MB1373.namprd14.prod.outlook.com (10.173.232.136) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.588.14; Mon, 19 Mar 2018 10:49:07 +0000 Received: from MWHPR14MB1376.namprd14.prod.outlook.com ([fe80::7929:3f48:4a4f:1e32]) by MWHPR14MB1376.namprd14.prod.outlook.com ([fe80::7929:3f48:4a4f:1e32%18]) with mapi id 15.20.0588.016; Mon, 19 Mar 2018 10:49:07 +0000 From: Tim Hollebeek To: Cullen Jennings , Adam Roach CC: Jonathan Rosenberg , "stir@ietf.org" Thread-Topic: [stir] SIPCoin - a new cryptocurrency for stopping robocalls Thread-Index: AQHTsngsTnylzONuGkmJ8pKXnnc3mKO/NE2AgAccMICAESQ4YA== Date: Mon, 19 Mar 2018 10:49:07 +0000 Message-ID: References: <64ca7065-a73d-ce53-d715-a5569823a3c2@nostrum.com> <9E1327D0-EEE7-4AFD-9E42-91A355683820@iii.ca> In-Reply-To: <9E1327D0-EEE7-4AFD-9E42-91A355683820@iii.ca> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: x-originating-ip: [31.133.148.144] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; MWHPR14MB1373; 7:85Fq7q2AM4+5yRoAutgCybIWMTAQeyGLQhHq/t5Z9bgDrVn+yRIJvQPTiM2vMqj3v7TXElKophC7A4LgHk3XQ8Y3ae+ts292KyA/65aDVmv8KGBCaaF65H5qqeT3yx+FWHJXWnFDKxkSbWjqCrPOJYTPKdVxmRhR4C3OsAum6z48Giiekl5lgXJBCiavhO5M+PfiFwOcnTfl2V/GmwI54YWgHFqbNgEytzRVRXQDvz6CFgq2bruRkDNIdAv32JJr x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: 54d1747c-a79a-46ae-a006-08d58d870a10 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(5600026)(4604075)(3008032)(4534165)(4627221)(201703031133081)(201702281549075)(2017052603328)(7153060)(49563074)(7193020); SRVR:MWHPR14MB1373; x-ms-traffictypediagnostic: MWHPR14MB1373: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(28532068793085)(21748063052155); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(102415395)(6040522)(2401047)(8121501046)(5005006)(10201501046)(3231221)(944501244)(52105095)(3002001)(93006095)(93001095)(6041310)(20161123560045)(20161123562045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123558120)(20161123564045)(6072148)(201708071742011); SRVR:MWHPR14MB1373; BCL:0; PCL:0; RULEID:; SRVR:MWHPR14MB1373; x-forefront-prvs: 06167FAD59 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(366004)(39850400004)(39380400002)(396003)(376002)(346002)(189003)(199004)(478600001)(606006)(53386004)(102836004)(561944003)(6246003)(33656002)(966005)(74316002)(66066001)(2950100002)(186003)(3846002)(26005)(8936002)(229853002)(81156014)(81166006)(5660300001)(99936001)(14454004)(8676002)(790700001)(55016002)(97736004)(7736002)(6116002)(68736007)(3660700001)(4326008)(236005)(54896002)(2900100001)(6306002)(53936002)(3280700002)(5250100002)(106356001)(6506007)(53546011)(25786009)(316002)(9686003)(59450400001)(105586002)(7696005)(110136005)(6436002)(54906003)(2906002)(86362001)(76176011)(99286004); DIR:OUT; SFP:1102; SCL:1; SRVR:MWHPR14MB1373; H:MWHPR14MB1376.namprd14.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: digicert.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: F65++x5lJ3EesvOyJA7upnNpHrUh7xZd6D+slKrFBlvXjcF+9a4hCL/gOIC7Xa+8nuskUMbjLbXHqm2Mk9mFGQmSpI2zzEEw/sIV7AvcFHcy0mfF3DUwiKMhjzTmK52KDkWTGNZDzjtQuwlSyxfTrCJ1K3CAAxpB4HZDoryjug4ipRiHcd1CGRF13427shlmWRjxLuYoXhFlqgrCqCCDVlVNlKbBU8ZYn1AYdXvkqS5xtSdGH0cCyiJwqmV0XOY3N4GWVykAe76bQ6hVGIKpAz/OPQ3f0Cj4GneoNzPm54ChkuBb1Vf1cJ2XL054WGmb8zT7XYgScyBfzTGq1QbNpQ== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=2.16.840.1.101.3.4.2.1; boundary="----=_NextPart_000_0419_01D3BF6F.E5C5FFF0" MIME-Version: 1.0 X-OriginatorOrg: digicert.com X-MS-Exchange-CrossTenant-Network-Message-Id: 54d1747c-a79a-46ae-a006-08d58d870a10 X-MS-Exchange-CrossTenant-originalarrivaltime: 19 Mar 2018 10:49:07.0193 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: cf813fa1-bde5-4e75-9479-f6aaa8b1f284 X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR14MB1373 Archived-At: Subject: Re: [stir] SIPCoin - a new cryptocurrency for stopping robocalls X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Mar 2018 10:49:24 -0000 ------=_NextPart_000_0419_01D3BF6F.E5C5FFF0 Content-Type: multipart/alternative; boundary="----=_NextPart_001_041A_01D3BF6F.E5C5FFF0" ------=_NextPart_001_041A_01D3BF6F.E5C5FFF0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable =20 So, that environmental computation assumes that the energy input comes = from fossil fuel, and the heat output is a useless waste product that = has no value. =20 This is in fact largely true for mining operations that are sited = primarily based on access to the cheapest carbon electricity in order to = maximize profits, and then cool them to keep them operating. Which is = likely to be true today in many cases. =20 However, there are other use cases where you put your crypto miners in a = location where you would otherwise be using an electric heater, using = responsibly sourced electricity. Crypto miners can also be seen as very = expensive electric heaters, that also produce a computational side = benefit. =20 >From that point of view (setting aside the question of whether mining = cryptocurrency is useful computational work and whether there is another = kind of computation that is more valuable for the same energy cost), is = there an economical way to upgrade all the world=E2=80=99s electric = heaters to provide useful computation resources available on demand as = part of some sort of network? =20 That would have a much larger ecological impact if someone figures it = out. Moving computation to where heating is required makes more sense = than providing cooling where computation is required. Unfortunately = it=E2=80=99s also generally much harder, which is why we often = don=E2=80=99t do it today. =20 But I just wanted to throw it out there in case it inspires someone = else. =20 -Tim =20 From: stir [mailto:stir-bounces@ietf.org] On Behalf Of Cullen Jennings Sent: Thursday, March 8, 2018 12:41 PM To: Adam Roach Cc: Jonathan Rosenberg ; stir@ietf.org Subject: Re: [stir] SIPCoin - a new cryptocurrency for stopping = robocalls =20 =20 So as a super casual analysis of the current draft,=20 =20 Lets say we need order of magnitude 10 cents to stop spam, that equates = to something like 1KW, which equates to something like 1Kg of CO2. Each = of of those steps is only an order go magnitude estimate so this cab be = way out but you get the idea. So we would have a one time, assuming = major carriers shared validation data, ( or small number of times ) = validation of the self signed cert and each validation would take about = 1 Kg CO2. That sounds really bad. But for comparisons sake, your flight = to IETF is probably over 1000 Kg and it is not a one time event =20 But all that said, I don=E2=80=99t think we would actually go for with = something as simple as pure proof of work based approach so I = don=E2=80=99t think that is a realistic look at the power usage. There = are a bunch of techniques that add to the complexity but greatly reduce = the reliance on proof work and more move to things like proof of stake = or more risk based approaches. Solutions like that could greatly reduce = the power usage. Keep in mind reducing the amount of spam calls would = reduce the power usage of the whole phone system.=20 =20 On Mar 3, 2018, at 5:06 PM, Adam Roach > wrote: =20 One of the issues that has arisen in parallel with cryptocurrencies is a = recognition of the exorbitant energy (and therefore environmental) costs = they entail. I think this document probably requires a section = addressing this aspect of the system, including any ways that it varies = significantly from traditional cryptocurrencies in this regard. /a On 3/2/18 4:45 PM, Jonathan Rosenberg wrote: Cullen and I have just submitted this: https://www.ietf.org/id/draft-rosenberg-stir-sipcoin-00.txt which is a proposal for a new type of cyryptocurrency dedicated solely = to preventing spam on the SIP-based phone network. It is designed to be = fast, causing less than one second increases in call setup time. = NOn-transferrable to avoid being a tool for fraud and avoid being tied = to market whim; backed by public CAs with a new type of centralized = ledger validation; trivially verifiable by receivers of calls. Also we = suggest a technique for incremental deployment on the PSTN which has = incremental benefits and economic benefits for each deployment phase. = We've done some analysis on the economics to help motivate the solution. WHen combined with our previous draft, and some nice whitelisting thrown = in as described in here, I think this is a very interested technique to = put this robocalling plague to rest. I'm coming to London and looking forward to discussing.=20 Comments are, of course, welcome. --=20 Jonathan Rosenberg, Ph.D. jdrosen@jdrosen.net =20 http://www.jdrosen.net =20 _______________________________________________ stir mailing list stir@ietf.org =20 https://www.ietf.org/mailman/listinfo/stir =20 _______________________________________________ stir mailing list stir@ietf.org =20 https://www.ietf.org/mailman/listinfo/stir =20 ------=_NextPart_001_041A_01D3BF6F.E5C5FFF0 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable

 

So, that = environmental computation assumes that the energy input comes from = fossil fuel, and the heat output is a useless waste product that has no = value.

 

This is in fact largely true for mining operations = that are sited primarily based on access to the cheapest carbon = electricity in order to maximize profits, and then cool them to keep = them operating.=C2=A0 Which is likely to be true today in many = cases.

 

However, there are other use cases where you put your = crypto miners in a location where you would otherwise be using an = electric heater, using responsibly sourced electricity.=C2=A0 Crypto = miners can also be seen as very expensive electric heaters, that also = produce a computational side benefit.

 

From that = point of view (setting aside the question of whether mining = cryptocurrency is useful computational work and whether there is another = kind of computation that is more valuable for the same energy cost), is = there an economical way to upgrade all the world=E2=80=99s electric = heaters to provide useful computation resources available on demand as = part of some sort of network?

 

That would = have a much larger ecological impact if someone figures it out.=C2=A0 = Moving computation to where heating is required makes more sense than = providing cooling where computation is required.=C2=A0 Unfortunately = it=E2=80=99s also generally much harder, which is why we often = don=E2=80=99t do it today.

 

But I just = wanted to throw it out there in case it inspires someone = else.

 

-Tim

 

From: stir = [mailto:stir-bounces@ietf.org] On Behalf Of Cullen = Jennings
Sent: Thursday, March 8, 2018 12:41 PM
To: = Adam Roach <adam@nostrum.com>
Cc: Jonathan Rosenberg = <jdrosen@jdrosen.net>; stir@ietf.org
Subject: Re: [stir] = SIPCoin - a new cryptocurrency for stopping = robocalls

 

 

So as = a super casual analysis of the current = draft, 

 

Lets say we need order of magnitude 10 cents to stop = spam, that equates to something like 1KW, which equates to something = like 1Kg of CO2. Each of of those steps is only an order go magnitude = estimate so this cab be way out but you get the idea. So we would have a = one time, assuming major carriers shared validation data,  ( or = small number of times ) validation of the self signed cert and each = validation would take about 1 Kg CO2. That sounds really bad. But for = comparisons sake, your flight to IETF is probably over 1000 Kg and it is = not a one time event

 

But all that said, I don=E2=80=99t think we would = actually go for with something as simple as pure proof of work based = approach so I don=E2=80=99t think that is a realistic look at the power = usage. There are a bunch of techniques that add to the complexity but = greatly reduce the reliance on proof work and more move to things like = proof of stake or more risk based approaches. Solutions like that could = greatly reduce the power usage. Keep in mind reducing the amount of spam = calls would reduce the power usage of the whole phone = system. 

 



On Mar 3, 2018, at 5:06 PM, Adam Roach <adam@nostrum.com> = wrote:

 

One of the issues that has arisen in parallel with = cryptocurrencies is a recognition of the exorbitant energy (and = therefore environmental) costs they entail. I think this document = probably requires a section addressing this aspect of the system, = including any ways that it varies significantly from traditional = cryptocurrencies in this regard.

/a

On 3/2/18 4:45 PM, = Jonathan Rosenberg wrote:

<= p class=3DMsoNormal style=3D'margin-bottom:12.0pt'>Cullen and I have = just submitted this:
http= s://www.ietf.org/id/draft-rosenberg-stir-sipcoin-00.txt

which is a = proposal for a new type of cyryptocurrency dedicated solely to = preventing spam on the SIP-based phone network. It is designed to be = fast, causing less than one second increases in call setup time. = NOn-transferrable to avoid being a tool for fraud and avoid being tied = to market whim; backed by public CAs with a new type of centralized = ledger validation; trivially verifiable by receivers of calls. Also we = suggest a technique for incremental deployment on the PSTN which has = incremental benefits and economic benefits for each deployment phase. = We've done some analysis on the economics to help motivate the = solution.

WHen combined with our previous draft, = and some nice whitelisting thrown in as described in here, I think this = is a very interested technique to put this robocalling plague to = rest.

I'm coming to London and looking forward = to discussing.

Comments are, = of course, welcome.


-- 




_______________________=
________________________
stir mailing =
list
stir@ietf.org
https://www.ietf.org/=
mailman/listinfo/stir

 <= /o:p>

_______________________________________________
stir= mailing list
stir@ietf.org
https://www.ietf.org/= mailman/listinfo/stir

 

------=_NextPart_001_041A_01D3BF6F.E5C5FFF0-- ------=_NextPart_000_0419_01D3BF6F.E5C5FFF0 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCCD0sw ggO3MIICn6ADAgECAhAM5+DlF9hG/o/lYPwb8DA5MA0GCSqGSIb3DQEBBQUAMGUxCzAJBgNVBAYT AlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xJDAi BgNVBAMTG0RpZ2lDZXJ0IEFzc3VyZWQgSUQgUm9vdCBDQTAeFw0wNjExMTAwMDAwMDBaFw0zMTEx MTAwMDAwMDBaMGUxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsT EHd3dy5kaWdpY2VydC5jb20xJDAiBgNVBAMTG0RpZ2lDZXJ0IEFzc3VyZWQgSUQgUm9vdCBDQTCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK0OFc7kQ4BcsYfzt2D5cRKlrtwmlIiq9M71 IDkoWGAM+IDaqRWVMmE8tbEohIqK3J8KDIMXeo+QrIrneVNcMYQq9g+YMjZ2zN7dPKii72r7IfJS Yd+fINcf4rHZ/hhk0hJbX/lYGDW8R82hNvlrf9SwOD7BG8OMM9nYLxj+KA+zp4PWw25EwGE1lhb+ WZyLdm3X8aJLDSv/C3LanmDQjpA1xnhVhyChz+VtCshJfDGYM2wi6YfQMlqiuhOCEe05F52ZOnKh 5vqk2dUXMXWuhX0irj8BRob2KHnIsdrkVxfEfhwOsLSSplazvbKX7aqn8LfFqD+VFtD/oZbrCF8Y d08CAwEAAaNjMGEwDgYDVR0PAQH/BAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFEXr oq/0ksuCMS1Ri6enIZ3zbcgPMB8GA1UdIwQYMBaAFEXroq/0ksuCMS1Ri6enIZ3zbcgPMA0GCSqG SIb3DQEBBQUAA4IBAQCiDrzf4u3w43JzemSUv/dyZtgy5EJ1Yq6H6/LV2d5Ws5/MzhQouQ2XYFwS TFjk0z2DSUVYlzVpGqhH6lbGeasS2GeBhN9/CTyU5rgmLCC9PbMoifdf/yLil4Qf6WXvh+DfwWdJ s13rsgkq6ybteL59PyvztyY1bV+JAbZJW58BBZurPSXBzLZ/wvFvhsb6ZGjrgS2U60K3+owe3WLx vlBnt2y98/Efaww2BxZ/N3ypW2168RJGYIPXJwS+S86XvsNnKmgR34DnDDNmvxMNFG7zfx9jEB76 jRslbWyPpbdhAbHSoyahEHGdreLD+cOZUbcrBwjOLuZQsqf6CkUvovDyMIIFOjCCBCKgAwIBAgIQ Di7WjgxCjxTrYbReNHesEzANBgkqhkiG9w0BAQsFADBlMQswCQYDVQQGEwJVUzEVMBMGA1UEChMM RGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMSQwIgYDVQQDExtEaWdpQ2Vy dCBTSEEyIEFzc3VyZWQgSUQgQ0EwHhcNMTcxMTI4MDAwMDAwWhcNMjIwMjI1MTIwMDAwWjBWMQsw CQYDVQQGEwJVUzENMAsGA1UECBMEVXRhaDENMAsGA1UEBxMETGVoaTERMA8GA1UEChMIRGlnaUNl cnQxFjAUBgNVBAMTDVRpbSBIb2xsZWJlZWswggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKUTIS9F3d7CfkCjsf4my28pYoZJDkEAiXVqGP4jzbFkszUQNfW3PYpFUo1GnKQykl/tM0qnzw 05bfVLo1+ce0e9fyAwYfulr+HaAVCPqx+PZw9CDY6c0NYd7Fc7S0scONxKekNF4q1mUucfGuGapW sEsyix0CuR0NMuJ4I+w8qMn9MzjzI7bvduG+uVLmZIi0p6D8+2R5BOQFy0tVeQ/aLfS91fG1DTYF YkPF+a/6JlFxzywPzCth8KW2Po4w8JqQWtam/ADKrgMaOnEJs9csefTW/FWRDeGQk5t3rnyS19FP QfpyPPau4ChB5xokfRcg3VEwqfOoIIexjUhZY5X9AgMBAAGjggHzMIIB7zAfBgNVHSMEGDAWgBTn AiOAAE/Y17yUC9k/dDlJMjyKeTAdBgNVHQ4EFgQUjqBhf3GcBV6YGYSmp2iS4Wi/3N4wDAYDVR0T AQH/BAIwADAlBgNVHREEHjAcgRp0aW0uaG9sbGViZWVrQGRpZ2ljZXJ0LmNvbTAOBgNVHQ8BAf8E BAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMEMEMGA1UdIAQ8MDowOAYKYIZIAYb9 bAQBAjAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMIGIBgNVHR8E gYAwfjA9oDugOYY3aHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0U0hBMkFzc3VyZWRJ RENBLWcyLmNybDA9oDugOYY3aHR0cDovL2NybDQuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0U0hBMkFz c3VyZWRJRENBLWcyLmNybDB5BggrBgEFBQcBAQRtMGswJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3Nw LmRpZ2ljZXJ0LmNvbTBDBggrBgEFBQcwAoY3aHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0Rp Z2lDZXJ0U0hBMkFzc3VyZWRJRENBLmNydDANBgkqhkiG9w0BAQsFAAOCAQEAmOLw9+cVMHn8tJ0k 76baCfFZwkvfvxSAlCXo+Fcsv55/og0V065Rpb4HvVTi0e0qKCMbBxc71NWxhMvKJHt+sfSmVatX mAOPNDRvtVvJBkcd0bvzMut/r3npQqs1wezHLtAq+MlQZDjgiJB+DkNblnnphzEQSp7q/4K9oMoP KViRxBv+/kseA8GOfhHU6EVmeu9xQrBqexH1DPUrUSGpNGDyvtUaU+bBy8Kz2hQfOu6f/73wLqUx e583C9y2Gqn1xCB77yPxXqRSLLRC6FbrToJbKiFYQJ4znZZyhPYJHL0SOpWyXfVKp4PEO54A/xr5 oVyPhEQhOtasoIRCLtHZrzCCBk4wggU2oAMCAQICEASueWBmZpAaucV/pmxb3M0wDQYJKoZIhvcN AQELBQAwZTELMAkGA1UEBhMCVVMxFTATBgNVBAoTDERpZ2lDZXJ0IEluYzEZMBcGA1UECxMQd3d3 LmRpZ2ljZXJ0LmNvbTEkMCIGA1UEAxMbRGlnaUNlcnQgQXNzdXJlZCBJRCBSb290IENBMB4XDTEz MTEwNTEyMDAwMFoXDTI4MTEwNTEyMDAwMFowZTELMAkGA1UEBhMCVVMxFTATBgNVBAoTDERpZ2lD ZXJ0IEluYzEZMBcGA1UECxMQd3d3LmRpZ2ljZXJ0LmNvbTEkMCIGA1UEAxMbRGlnaUNlcnQgU0hB MiBBc3N1cmVkIElEIENBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3PgRIz9qte/A J3kbLQWHohBDMd8O1BUbT3ekIs4+jHDwvgeO3ScqvAEdtiwKyt1pWB9B7WoFH9pjeFkeIiwr+Lp+ yTU7VvEffEJ+JbAjGcZFONc9RPkgfGCuHLBaGAS+jzv3qfCUmqYMY0m2QRdTQDK9T+ZQelAfJUXo 8Ymvzf9e/1Dz8BcR/73FifW9YrnY+45FBIVtmc3FSE39JqsCNkXqNtdfauIagkEK3OnZ9ZEXjsYh rTg8E+Yef2ac1U3ZRtr2z1KnfTskw7TBUTXGm+vU737kewPhRL16CzfgT8uCig1xGOSm4IksG/Oy czzBsJKeGH29q33FfQihLMKfcwIDAQABo4IC+DCCAvQwEgYDVR0TAQH/BAgwBgEB/wIBADAOBgNV HQ8BAf8EBAMCAYYwNAYIKwYBBQUHAQEEKDAmMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdp Y2VydC5jb20wgYEGA1UdHwR6MHgwOqA4oDaGNGh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdp Q2VydEFzc3VyZWRJRFJvb3RDQS5jcmwwOqA4oDaGNGh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9E aWdpQ2VydEFzc3VyZWRJRFJvb3RDQS5jcmwwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwME MIIBswYDVR0gBIIBqjCCAaYwggGiBgpghkgBhv1sAAIEMIIBkjAoBggrBgEFBQcCARYcaHR0cHM6 Ly93d3cuZGlnaWNlcnQuY29tL0NQUzCCAWQGCCsGAQUFBwICMIIBVh6CAVIAQQBuAHkAIAB1AHMA ZQAgAG8AZgAgAHQAaABpAHMAIABDAGUAcgB0AGkAZgBpAGMAYQB0AGUAIABjAG8AbgBzAHQAaQB0 AHUAdABlAHMAIABhAGMAYwBlAHAAdABhAG4AYwBlACAAbwBmACAAdABoAGUAIABEAGkAZwBpAEMA ZQByAHQAIABDAFAALwBDAFAAUwAgAGEAbgBkACAAdABoAGUAIABSAGUAbAB5AGkAbgBnACAAUABh AHIAdAB5ACAAQQBnAHIAZQBlAG0AZQBuAHQAIAB3AGgAaQBjAGgAIABsAGkAbQBpAHQAIABsAGkA YQBiAGkAbABpAHQAeQAgAGEAbgBkACAAYQByAGUAIABpAG4AYwBvAHIAcABvAHIAYQB0AGUAZAAg AGgAZQByAGUAaQBuACAAYgB5ACAAcgBlAGYAZQByAGUAbgBjAGUALjAdBgNVHQ4EFgQU5wIjgABP 2Ne8lAvZP3Q5STI8inkwHwYDVR0jBBgwFoAUReuir/SSy4IxLVGLp6chnfNtyA8wDQYJKoZIhvcN AQELBQADggEBAE7UiSe5/R2Hd34PKAWQ8QovyTs+vZOckMav+pFRhzJUa+jKwXFRXJmOtfrgYhmZ pgeafBMn2+UCooQS2RX2CkRXxDSPbXMfOtagAT3e44LkRWuy6yX9gF4dOZC+W0L2zpFg4/mgVgxI EM4zaHvNk6vwastPWA+5e10bBIGepyLiV0kn7pKTCL5pCFMCOi5dyBn0UIBOAtmwXZG0k4f5lpaB VUCOZu2C2LsoX+1MYe0GWCgZUxFEvEcgKbIEbNiJVJk7ddtneCweknjGVT1YEhEybr1DDE0023vG QtvsvqubYUwGkuOO3yEqUFcEwGCiNdUknmY3CUnP1fhls+DibsIxggO/MIIDuwIBATB5MGUxCzAJ BgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j b20xJDAiBgNVBAMTG0RpZ2lDZXJ0IFNIQTIgQXNzdXJlZCBJRCBDQQIQDi7WjgxCjxTrYbReNHes EzANBglghkgBZQMEAgEFAKCCAhcwGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0B CQUxDxcNMTgwMzE5MTA0OTA0WjAvBgkqhkiG9w0BCQQxIgQgWvBqec8G2ei9ySi0pp7STYmehmPJ zkqjQ55xTUgAoqswgYgGCSsGAQQBgjcQBDF7MHkwZTELMAkGA1UEBhMCVVMxFTATBgNVBAoTDERp Z2lDZXJ0IEluYzEZMBcGA1UECxMQd3d3LmRpZ2ljZXJ0LmNvbTEkMCIGA1UEAxMbRGlnaUNlcnQg U0hBMiBBc3N1cmVkIElEIENBAhAOLtaODEKPFOthtF40d6wTMIGKBgsqhkiG9w0BCRACCzF7oHkw ZTELMAkGA1UEBhMCVVMxFTATBgNVBAoTDERpZ2lDZXJ0IEluYzEZMBcGA1UECxMQd3d3LmRpZ2lj ZXJ0LmNvbTEkMCIGA1UEAxMbRGlnaUNlcnQgU0hBMiBBc3N1cmVkIElEIENBAhAOLtaODEKPFOth tF40d6wTMIGTBgkqhkiG9w0BCQ8xgYUwgYIwCwYJYIZIAWUDBAEqMAsGCWCGSAFlAwQBFjAKBggq hkiG9w0DBzALBglghkgBZQMEAQIwDgYIKoZIhvcNAwICAgCAMA0GCCqGSIb3DQMCAgFAMAsGCWCG SAFlAwQCATALBglghkgBZQMEAgMwCwYJYIZIAWUDBAICMAcGBSsOAwIaMA0GCSqGSIb3DQEBAQUA BIIBAArcfDeLjsDnIKgzyTUW6sxwl8CMtp9wx5PHd+jxeNTBrOqCDDpVYjKcoZlM+Vd7aL5NF+co MqN3qBC1mQNEkQkG/p+2zan238Sji8WlCYzGmmD8h8Ni1N8+O4laoeVuzDIurWjpYJrwHv7LZ71l fvwX3ZsdKO3M4WQAMDYd3jwrNsLNKDnWF5eiT47Q9TmvT9Jpk5aCBPsevw1uMEiy7w5AsBvL/unq N35wi7fA4p0LHDrn0nHVkhxdFOu7Z5kXQc6PTcaP0Y5zZIfdJ75frWUsvVgsrADpViO/75GWWDd8 9NX7xaaS7VMqR96aDcNmpLcAfBGd245ZYNf+LTpxKFsAAAAAAAA= ------=_NextPart_000_0419_01D3BF6F.E5C5FFF0-- From nobody Mon Mar 19 06:05:14 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D8BA012778D for ; Mon, 19 Mar 2018 06:05:13 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.778 X-Spam-Level: X-Spam-Status: No, score=-1.778 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, HTML_MESSAGE=0.001, T_DKIM_INVALID=0.01, T_SPF_PERMERROR=0.01, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=neutral reason="invalid (public key: not available)" header.d=standardstrack.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wWbySkH307Ty for ; Mon, 19 Mar 2018 06:05:12 -0700 (PDT) Received: from biz221.inmotionhosting.com (biz221.inmotionhosting.com [23.235.223.233]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0C4351275FD for ; Mon, 19 Mar 2018 06:05:12 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=standardstrack.com; s=default; h=Message-Id:In-Reply-To:To:References:Date: Subject:Mime-Version:Content-Type:From:Sender:Reply-To:Cc: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date: Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=PrssJ5od/NFsYQKINyuyzEQSKqNapWmWZeMlCVivnk8=; b=RnxBkxFIfSPUvBATw1COmCbA1 /oVwTmUVT2Vz0wJZgUvXjJVSPE33j4Kw8kAXoGIjDPKwq98TbyZjigIBgk16kfM3ysJLebt0AoLHX MnWxgDzVaPDvqDI8/z/zmSUHyKEudW5zfHPC5xTa9ExRnLtKOjEOB/Mkb6nxS9InAjuyk=; Received: from [141.161.133.132] (port=30713 helo=[10.128.14.146]) by biz221.inmotionhosting.com with esmtpsa (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256) (Exim 4.89_1) (envelope-from ) id 1exuTB-0006Ui-8w for stir@ietf.org; Mon, 19 Mar 2018 06:05:11 -0700 From: Eric Burger Content-Type: multipart/signed; boundary="Apple-Mail=_D1105291-0E73-4A50-B897-42B491130054"; protocol="application/pgp-signature"; micalg=pgp-sha256 Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\)) Date: Mon, 19 Mar 2018 09:04:56 -0400 References: <64ca7065-a73d-ce53-d715-a5569823a3c2@nostrum.com> <9E1327D0-EEE7-4AFD-9E42-91A355683820@iii.ca> To: "stir@ietf.org" In-Reply-To: Message-Id: X-Mailer: Apple Mail (2.3273) X-OutGoing-Spam-Status: No, score=-1.0 X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - biz221.inmotionhosting.com X-AntiAbuse: Original Domain - ietf.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - standardstrack.com X-Get-Message-Sender-Via: biz221.inmotionhosting.com: authenticated_id: eburger+standardstrack.com/only user confirmed/virtual account not confirmed X-Authenticated-Sender: biz221.inmotionhosting.com: eburger@standardstrack.com X-Source: X-Source-Args: X-Source-Dir: Archived-At: Subject: Re: [stir] SIPCoin - a new cryptocurrency for stopping robocalls X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Mar 2018 13:05:14 -0000 --Apple-Mail=_D1105291-0E73-4A50-B897-42B491130054 Content-Type: multipart/alternative; boundary="Apple-Mail=_4D07A9DB-CDE4-4177-A185-F991B6DCF14D" --Apple-Mail=_4D07A9DB-CDE4-4177-A185-F991B6DCF14D Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 See https://www.qarnot.com . Been around for a = few years. > On Mar 19, 2018, at 6:49 AM, Tim Hollebeek = wrote: >=20 >=20 > So, that environmental computation assumes that the energy input comes = from fossil fuel, and the heat output is a useless waste product that = has no value. >=20 > This is in fact largely true for mining operations that are sited = primarily based on access to the cheapest carbon electricity in order to = maximize profits, and then cool them to keep them operating. Which is = likely to be true today in many cases. >=20 > However, there are other use cases where you put your crypto miners in = a location where you would otherwise be using an electric heater, using = responsibly sourced electricity. Crypto miners can also be seen as very = expensive electric heaters, that also produce a computational side = benefit. >=20 > =46rom that point of view (setting aside the question of whether = mining cryptocurrency is useful computational work and whether there is = another kind of computation that is more valuable for the same energy = cost), is there an economical way to upgrade all the world=E2=80=99s = electric heaters to provide useful computation resources available on = demand as part of some sort of network? >=20 > That would have a much larger ecological impact if someone figures it = out. Moving computation to where heating is required makes more sense = than providing cooling where computation is required. Unfortunately = it=E2=80=99s also generally much harder, which is why we often don=E2=80=99= t do it today. >=20 > But I just wanted to throw it out there in case it inspires someone = else. >=20 > -Tim >=20 > From: stir [mailto:stir-bounces@ietf.org] On Behalf Of Cullen Jennings > Sent: Thursday, March 8, 2018 12:41 PM > To: Adam Roach > Cc: Jonathan Rosenberg ; stir@ietf.org > Subject: Re: [stir] SIPCoin - a new cryptocurrency for stopping = robocalls >=20 >=20 > So as a super casual analysis of the current draft, >=20 > Lets say we need order of magnitude 10 cents to stop spam, that = equates to something like 1KW, which equates to something like 1Kg of = CO2. Each of of those steps is only an order go magnitude estimate so = this cab be way out but you get the idea. So we would have a one time, = assuming major carriers shared validation data, ( or small number of = times ) validation of the self signed cert and each validation would = take about 1 Kg CO2. That sounds really bad. But for comparisons sake, = your flight to IETF is probably over 1000 Kg and it is not a one time = event >=20 > But all that said, I don=E2=80=99t think we would actually go for with = something as simple as pure proof of work based approach so I don=E2=80=99= t think that is a realistic look at the power usage. There are a bunch = of techniques that add to the complexity but greatly reduce the reliance = on proof work and more move to things like proof of stake or more risk = based approaches. Solutions like that could greatly reduce the power = usage. Keep in mind reducing the amount of spam calls would reduce the = power usage of the whole phone system. >=20 >=20 >=20 > On Mar 3, 2018, at 5:06 PM, Adam Roach > wrote: >=20 > One of the issues that has arisen in parallel with cryptocurrencies is = a recognition of the exorbitant energy (and therefore environmental) = costs they entail. I think this document probably requires a section = addressing this aspect of the system, including any ways that it varies = significantly from traditional cryptocurrencies in this regard. >=20 > /a >=20 > On 3/2/18 4:45 PM, Jonathan Rosenberg wrote: > Cullen and I have just submitted this: > https://www.ietf.org/id/draft-rosenberg-stir-sipcoin-00.txt = > which is a proposal for a new type of cyryptocurrency dedicated solely = to preventing spam on the SIP-based phone network. It is designed to be = fast, causing less than one second increases in call setup time. = NOn-transferrable to avoid being a tool for fraud and avoid being tied = to market whim; backed by public CAs with a new type of centralized = ledger validation; trivially verifiable by receivers of calls. Also we = suggest a technique for incremental deployment on the PSTN which has = incremental benefits and economic benefits for each deployment phase. = We've done some analysis on the economics to help motivate the solution. >=20 > WHen combined with our previous draft, and some nice whitelisting = thrown in as described in here, I think this is a very interested = technique to put this robocalling plague to rest. >=20 > I'm coming to London and looking forward to discussing. >=20 > Comments are, of course, welcome. >=20 > -- > Jonathan Rosenberg, Ph.D. > jdrosen@jdrosen.net > http://www.jdrosen.net >=20 >=20 >=20 > _______________________________________________ > stir mailing list > stir@ietf.org > https://www.ietf.org/mailman/listinfo/stir = >=20 > _______________________________________________ > stir mailing list > stir@ietf.org > https://www.ietf.org/mailman/listinfo/stir = >=20 > _______________________________________________ > stir mailing list > stir@ietf.org > https://www.ietf.org/mailman/listinfo/stir --Apple-Mail=_4D07A9DB-CDE4-4177-A185-F991B6DCF14D Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 See https://www.qarnot.com. Been around for a few years.

On Mar 19, 2018, at 6:49 AM, Tim Hollebeek <tim.hollebeek@digicert.com> wrote:

 
So, that environmental computation assumes that the energy = input comes from fossil fuel, and the heat output is a useless waste = product that has no value.
 
This is in fact largely true for mining = operations that are sited primarily based on access to the cheapest = carbon electricity in order to maximize profits, and then cool them to = keep them operating.  Which is likely to be true today in many = cases.
 
However, there are other use cases where you put your crypto = miners in a location where you would otherwise be using an electric = heater, using responsibly sourced electricity.  Crypto miners can = also be seen as very expensive electric heaters, that also produce a = computational side benefit.
 
=46rom that point of view (setting = aside the question of whether mining cryptocurrency is useful = computational work and whether there is another kind of computation that = is more valuable for the same energy cost), is there an economical way = to upgrade all the world=E2=80=99s electric heaters to provide useful = computation resources available on demand as part of some sort of = network?
 
That would have a much larger ecological impact if someone = figures it out.  Moving computation to where heating is required = makes more sense than providing cooling where computation is = required.  Unfortunately it=E2=80=99s also generally much harder, = which is why we often don=E2=80=99t do it today.
 
But I = just wanted to throw it out there in case it inspires someone else.
 
-Tim
 
From: stir [mailto:stir-bounces@ietf.org] On Behalf = Of Cullen = Jennings
Sent: Thursday, March 8, 2018 = 12:41 PM
To: Adam Roach <adam@nostrum.com>
Cc: Jonathan Rosenberg <jdrosen@jdrosen.net>; stir@ietf.org
Subject: Re: [stir] SIPCoin - a new = cryptocurrency for stopping robocalls
 
 
So as a super casual analysis of the current draft, 
 
Lets say we need order of magnitude 10 = cents to stop spam, that equates to something like 1KW, which equates to = something like 1Kg of CO2. Each of of those steps is only an order go = magnitude estimate so this cab be way out but you get the idea. So we = would have a one time, assuming major carriers shared validation data, =  ( or small number of times ) validation of the self signed cert = and each validation would take about 1 Kg CO2. That sounds really bad. = But for comparisons sake, your flight to IETF is probably over 1000 Kg = and it is not a one time event
 
But all that said, I don=E2=80=99t think we would actually go = for with something as simple as pure proof of work based approach so I = don=E2=80=99t think that is a realistic look at the power usage. There = are a bunch of techniques that add to the complexity but greatly reduce = the reliance on proof work and more move to things like proof of stake = or more risk based approaches. Solutions like that could greatly reduce = the power usage. Keep in mind reducing the amount of spam calls would = reduce the power usage of the whole phone system. 
 


On Mar 3, 2018, at 5:06 PM, Adam Roach <adam@nostrum.com> = wrote:
 
One of = the issues that has arisen in parallel with cryptocurrencies is a = recognition of the exorbitant energy (and therefore environmental) costs = they entail. I think this document probably requires a section = addressing this aspect of the system, including any ways that it varies = significantly from traditional cryptocurrencies in this regard.

/a

On 3/2/18 4:45 = PM, Jonathan Rosenberg wrote:

Cullen and I have = just submitted this:
https://www.ietf.org/id/draft-rosenberg-stir-sipcoin-00.txt=

which = is a proposal for a new type of cyryptocurrency dedicated solely to = preventing spam on the SIP-based phone network. It is designed to be = fast, causing less than one second increases in call setup time. = NOn-transferrable to avoid being a tool for fraud and avoid being tied = to market whim; backed by public CAs with a new type of centralized = ledger validation; trivially verifiable by receivers of calls. Also we = suggest a technique for incremental deployment on the PSTN which has = incremental benefits and economic benefits for each deployment phase. = We've done some analysis on the economics to help motivate the = solution.

WHen combined with our previous draft, and some nice = whitelisting thrown in as described in here, I think this is a very = interested technique to put this robocalling plague to rest.

I'm coming = to London and looking forward to discussing. 

Comments = are, of course, welcome.

-- 
Jonathan Rosenberg, Ph.D.
jdrosen@jdrosen.net
http://www.jdrosen.net



_______________________________________________
stir mailing =
list
stir@ietf.org
https://www.ietf.org/mailman/listinfo/stir
 
_______________________________________________
stir mailing list
stir@ietf.org
https://www.ietf.org/mailman/listinfo/stir
 
_______________________________________________
stir mailing list
stir@ietf.org
https://www.ietf.org/mailman/listinfo/stir
= --Apple-Mail=_4D07A9DB-CDE4-4177-A185-F991B6DCF14D-- --Apple-Mail=_D1105291-0E73-4A50-B897-42B491130054 Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP -----BEGIN PGP SIGNATURE----- Comment: GPGTools - http://gpgtools.org iQIzBAEBCAAdFiEEfEc/N7T7IfiAuDEHDDCGh758rskFAlqvtXgACgkQDDCGh758 rsk90Q//XZZ0a5FsAFenJQ21tPLdVSSqxHQWq3AEyprC3dKdd6KbEp0+3XasJVPS HBMuet6uisO1wEto4TqyB0nC0HqJmzHtZ7HtYDwbRDdeTuJ5QB/Y5t2rTZDRlw4b yeyzv1G4/GWKyUP6WZH7XcW8IEgxScIlzIB9iCFtHCYAjKZpTnd9REAuTbj8CTvS J2fgcOR55FYdG/Ye7TagQnsU4rpMpl8+R1N1q0Z/J1tHBELCIfcyji1JWrDxvddk mrw2Cjj0GBMLTxcoB5+Qo+yttM2s0bmxkmtmFeZwijoyYYHC+/NJKJYO3T8x2Dh3 MKPqgl/QgoN5zKZgV4gvswDS4Kn/enrSmgJUxHhTLukaXcTWkaekJjaJqG4XNZt7 dRz5JETqR48jbCovNdYgS+S3YQvUZOm0uao1+2YkENFcj3qBei52+1OWXUXjOZx+ XJsTbSq8WQnbEogTQzTIKHcxrSrZJDgeQWwRcmNS1KbXUNtDgoM1shtQmp422MWN bWqv9BYgh7ZejHsbpaBbez42siIXVdjak4xZf5MpbDGhtrNVpsZTpYyKxxBTDa4O eHyqr1ksZgM09gb45dU7ijzAIvUoRAL4ZeMBw3CGt4bylMljgvzpeLE5Yr8fkdiP SprP0i037RUY+xxrWzC99voDMOc7q/4YHAtgKnGexkWH8A6EFZ0= =CVik -----END PGP SIGNATURE----- --Apple-Mail=_D1105291-0E73-4A50-B897-42B491130054-- From nobody Mon Mar 19 10:06:41 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 386B612D7FC; Mon, 19 Mar 2018 10:06:35 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.01 X-Spam-Level: X-Spam-Status: No, score=-2.01 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mrochek.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id biwMuF4vzBVt; Mon, 19 Mar 2018 10:06:33 -0700 (PDT) Received: from mauve.mrochek.com (mauve.mrochek.com [68.183.62.69]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2C885128959; Mon, 19 Mar 2018 10:06:32 -0700 (PDT) Received: from dkim-sign.mauve.mrochek.com by mauve.mrochek.com (PMDF V6.1-1 #35243) id <01QQBGF789KG00EC0K@mauve.mrochek.com>; Mon, 19 Mar 2018 10:01:29 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=mrochek.com; s=201712; t=1521478888; bh=qJdSy78SvZvCnpNxOKS32IRVUcjXQzNpVAORkG/z8J8=; h=Cc:Date:From:Subject:In-reply-to:References:To:From; b=kNfMmet/I8mpDgRYJTxgKAhkA4cIf9ECANEciSG5YiTpdDBgUGOcByLZHClRtHgS8 EsWibXezHgL3Eqtu9eQH6sRdDZkpCJRcrplQ4GwzTttFaEgBuxlIO205G5o9oHjzRr nsoqGa4hSZJG21ScKBN9oY+fw5LEn4JnDTMFs1Lg= MIME-version: 1.0 Content-transfer-encoding: 7BIT Content-type: TEXT/PLAIN; CHARSET=us-ascii Received: from mauve.mrochek.com by mauve.mrochek.com (PMDF V6.1-1 #35243) id <01QQ1J13T4YO00CZTT@mauve.mrochek.com>; Mon, 19 Mar 2018 10:01:26 -0700 (PDT) Cc: Applications and Real-Time Area Discussion , stir@ietf.org Message-id: <01QQBGF58BIE00CZTT@mauve.mrochek.com> Date: Mon, 19 Mar 2018 10:00:56 -0700 (PDT) From: Ned Freed In-reply-to: "Your message dated Sat, 17 Mar 2018 13:49:13 -0700" <1760564F-45CC-4EE2-869A-76EDB434694A@wordtothewise.com> References: <1760564F-45CC-4EE2-869A-76EDB434694A@wordtothewise.com> To: Steve Atkins Archived-At: Subject: Re: [stir] [art] Thursday lunch discussion on new techniques for stopping robocalling X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Mar 2018 17:06:35 -0000 > > On Mar 17, 2018, at 10:58 AM, Ted Hardie wrote: > > > > Hi Jonathan, Cullen, > > > > I was somewhat surprised that the draft did not have a direct reference to the SIP Hashcash work (especially since Cullen was the author of https://tools.ietf.org/html/draft-jennings-sip-hashcash-06). From my perspective at least, it still looks to be a useful historical antecedent to consult, since it is a proof-of-work system (and one on which a bunch of later cryptocurrencies draw). In particular, its view that this is about a demonstration of work rather than a payment to send may still be a valuable perspective. > > > > http://www.hashcash.org/ still appears to be up, by the way, for folks that want to see how its original use case tied into thwarting denial of service attacks. > I hope someone is soliciting input from the email community, who went through > this process a decade or so ago and noted that bad actors have much, much > cheaper access to CPU for proof-of-work than good actors do. +1 And if anything it's even more lopsided now. Ned From nobody Mon Mar 19 10:12:07 2018 Return-Path: X-Original-To: stir@ietf.org Delivered-To: stir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 93627128959; Mon, 19 Mar 2018 10:12:00 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: stir@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.75.2 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <152147952053.31056.3563220954085220104@ietfa.amsl.com> Date: Mon, 19 Mar 2018 10:12:00 -0700 Archived-At: Subject: [stir] I-D Action: draft-ietf-stir-passport-shaken-02.txt X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Mar 2018 17:12:01 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Secure Telephone Identity Revisited WG of the IETF. Title : PASSporT SHAKEN Extension (SHAKEN) Authors : Chris Wendt Mary Barnes Filename : draft-ietf-stir-passport-shaken-02.txt Pages : 7 Date : 2018-03-19 Abstract: This document extends PASSporT, which is a token object that conveys cryptographically-signed information about the participants involved in communications, to include information defined as part of the SHAKEN specification from ATIS (Alliance for Telecommunications Industry Solutions) and the SIP Forum IP-NNI Joint Task Force. These extensions provide a level of confidence in the correctness of the originating identity for a telephone network that has communications coming from both STIR participating originating communications as well as communications that does not include STIR information. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-stir-passport-shaken/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-stir-passport-shaken-02 https://datatracker.ietf.org/doc/html/draft-ietf-stir-passport-shaken-02 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-stir-passport-shaken-02 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Mon Mar 19 10:21:02 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A87DC129BBF for ; Mon, 19 Mar 2018 10:21:00 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_LOW=-0.7, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=chriswendt-net.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TF5_BnOTLrJ0 for ; Mon, 19 Mar 2018 10:20:53 -0700 (PDT) Received: from mail-wm0-x230.google.com (mail-wm0-x230.google.com [IPv6:2a00:1450:400c:c09::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2598F1204DA for ; Mon, 19 Mar 2018 10:20:53 -0700 (PDT) Received: by mail-wm0-x230.google.com with SMTP id s206so13669499wme.0 for ; Mon, 19 Mar 2018 10:20:53 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=chriswendt-net.20150623.gappssmtp.com; s=20150623; h=from:content-transfer-encoding:mime-version:subject:date:references :to:in-reply-to:message-id; bh=G725Auv0bzghU16vOfSm1WsR8S7AHspvnTlIUX8vPlc=; b=I0ZF8qTptrC4qYA0CZHwlacaP0Z9S7Ebk+2zC2g8Aj03z3mpq0RhxTU8pThconN+ZH mN7m/Sy3vyOje84QumqyB3qcz2fR2zgnRUotiwcghig+j75AiviQIo3E9zdaZnKiEoZE 2nU3H4B5T38Ig9y1AFcE6hlwADHQf8NJ2fZlYEMd41UeqvUIVeoaLY+lQ8fI1BupgOPp uGQhodvWFMo1N/2qHbDYQJNHVgySs+oUZ/eXar46CJx3csJ2xTfbRPWWlvMhC5mAqgo5 XT/kts+yUX7MW/ZnhsK8tLDLwrxbpEYxiqks8I3m/BZgCBOi2g0Wjk/3z9TFV+0mLwtD I6CQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:content-transfer-encoding:mime-version :subject:date:references:to:in-reply-to:message-id; bh=G725Auv0bzghU16vOfSm1WsR8S7AHspvnTlIUX8vPlc=; b=bdoffK5WT+0ThhlQrEooY2OSRg6zOx8/UZ47qEaes5Juh18dMWieuVY5OvHlvwxz/1 f8B0C0yhWX+4j0Tk9DC89to9xEZtCsWdcVHH9FNmsy+3vOPJr0hEnSx5p8r/jIGNklK6 Km1sLifwf/bfZcodS3leQpzNuY33IZH07tbv/TX9tK58C7BbgwZDsfGIUvlYBFxHHNpe kT/BtPLSrJmwRalGjRMhZlgI6WVuGz6gm7HkJoeTx8wyfHqtHIQlvCHTdVEaQNY1LOrW CNzQmGt8EUO6vPoIa1r1hMmEjaYPeXgsfRLlkO+R2KDJUxTxGxL2vpcJLMTPelJOT+7W dQQw== X-Gm-Message-State: AElRT7GlQm0+ZRTx1fDlT4uj+kah/QLCypEC8OIpjR7pnRH958ZP44by PteXs8VYXY1CM+3Hq6LRsnT04fuu2Bk= X-Google-Smtp-Source: AG47ELtayUV7gloitIGe9PI6zY/PNFXrlalCfemZgTcqMfsQINe+OBRcWstuAYqBvi+kSlIQExEBtQ== X-Received: by 10.28.25.130 with SMTP id 124mr9645820wmz.92.1521480051494; Mon, 19 Mar 2018 10:20:51 -0700 (PDT) Received: from ?IPv6:2001:67c:370:128:a12b:7b18:c342:c7de? ([2001:67c:370:128:a12b:7b18:c342:c7de]) by smtp.gmail.com with ESMTPSA id c192sm1104427wma.12.2018.03.19.10.20.50 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 19 Mar 2018 10:20:50 -0700 (PDT) From: Chris Wendt Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Mime-Version: 1.0 (Mac OS X Mail 11.2 \(3445.5.20\)) Date: Mon, 19 Mar 2018 17:20:49 +0000 References: <152147952053.31056.3563220954085220104@ietfa.amsl.com> To: IETF STIR Mail List In-Reply-To: <152147952053.31056.3563220954085220104@ietfa.amsl.com> Message-Id: X-Mailer: Apple Mail (2.3445.5.20) Archived-At: Subject: Re: [stir] I-D Action: draft-ietf-stir-passport-shaken-02.txt X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Mar 2018 17:21:01 -0000 Hi All, I have updated the draft with some fixes based on comments from = Christer, both editorial and related to ordering comments. Summary of changes: - addressing Christer=E2=80=99s comments around order of claims adding a = brief new section - clarified the definition of =E2=80=9Ccustomer=E2=80=9D in the PASSporT = =E2=80=98attest=E2=80=99 claim section 4 - clarified that it is calling party telephone number that is being = attested to in same section - removed last sentence in section 7, it=E2=80=99s repetitive and not = needed. I figured i would include these changes and update document for = efficiency, but will review these in meeting on Thursday in either case. -Chris > On Mar 19, 2018, at 5:12 PM, internet-drafts@ietf.org wrote: >=20 >=20 > A New Internet-Draft is available from the on-line Internet-Drafts = directories. > This draft is a work item of the Secure Telephone Identity Revisited = WG of the IETF. >=20 > Title : PASSporT SHAKEN Extension (SHAKEN) > Authors : Chris Wendt > Mary Barnes > Filename : draft-ietf-stir-passport-shaken-02.txt > Pages : 7 > Date : 2018-03-19 >=20 > Abstract: > This document extends PASSporT, which is a token object that conveys > cryptographically-signed information about the participants involved > in communications, to include information defined as part of the > SHAKEN specification from ATIS (Alliance for Telecommunications > Industry Solutions) and the SIP Forum IP-NNI Joint Task Force. = These > extensions provide a level of confidence in the correctness of the > originating identity for a telephone network that has communications > coming from both STIR participating originating communications as > well as communications that does not include STIR information. >=20 >=20 > The IETF datatracker status page for this draft is: > https://datatracker.ietf.org/doc/draft-ietf-stir-passport-shaken/ >=20 > There are also htmlized versions available at: > https://tools.ietf.org/html/draft-ietf-stir-passport-shaken-02 > = https://datatracker.ietf.org/doc/html/draft-ietf-stir-passport-shaken-02 >=20 > A diff from the previous version is available at: > https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-stir-passport-shaken-02 >=20 >=20 > Please note that it may take a couple of minutes from the time of = submission > until the htmlized version and diff are available at tools.ietf.org. >=20 > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ >=20 > _______________________________________________ > stir mailing list > stir@ietf.org > https://www.ietf.org/mailman/listinfo/stir From nobody Mon Mar 19 16:02:37 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 13F0012D7F4 for ; Mon, 19 Mar 2018 16:02:35 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.778 X-Spam-Level: X-Spam-Status: No, score=-1.778 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, HTML_MESSAGE=0.001, T_DKIM_INVALID=0.01, T_SPF_PERMERROR=0.01, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=neutral reason="invalid (public key: not available)" header.d=standardstrack.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yo7l28rpMUsI for ; Mon, 19 Mar 2018 16:02:33 -0700 (PDT) Received: from biz221.inmotionhosting.com (biz221.inmotionhosting.com [23.235.223.233]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6AF6912AF84 for ; Mon, 19 Mar 2018 16:02:26 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=standardstrack.com; s=default; h=Message-Id:In-Reply-To:To:References:Date: Subject:Mime-Version:Content-Type:From:Sender:Reply-To:Cc: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date: Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=mTsOxHx3KHkO8y0wuQCv65ZYq1w9aAiJCP9cwVceVUA=; b=O0epnWDbvs40NEqd/wrF9CPZS 1tazSEUd+tdlmRMooRZJzcICnFXPFCHeUkL+LkQqvbouVmi7gJRvptkW+P2tp3YNVZTrwigRvqYlr cleIYGsTz4vNpnHlj5gm4O7oNyOyu9RaxxBKW+MzVei0eO6h/HNORWf3+88yqhG+lpCH8=; Received: from [141.161.133.132] (port=46679 helo=[10.128.14.146]) by biz221.inmotionhosting.com with esmtpsa (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256) (Exim 4.89_1) (envelope-from ) id 1ey3nF-000Hpr-4Z for stir@ietf.org; Mon, 19 Mar 2018 16:02:25 -0700 From: Eric Burger Content-Type: multipart/signed; boundary="Apple-Mail=_FDFFB248-1768-4739-95D0-4D126154C4E4"; protocol="application/pgp-signature"; micalg=pgp-sha256 Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\)) Date: Mon, 19 Mar 2018 19:02:15 -0400 References: <152028300904.31710.8973954292655207142.idtracker@ietfa.amsl.com> To: stir@ietf.org In-Reply-To: Message-Id: X-Mailer: Apple Mail (2.3273) X-OutGoing-Spam-Status: No, score=-1.0 X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - biz221.inmotionhosting.com X-AntiAbuse: Original Domain - ietf.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - standardstrack.com X-Get-Message-Sender-Via: biz221.inmotionhosting.com: authenticated_id: eburger+standardstrack.com/only user confirmed/virtual account not confirmed X-Authenticated-Sender: biz221.inmotionhosting.com: eburger@standardstrack.com X-Source: X-Source-Args: X-Source-Dir: Archived-At: Subject: Re: [stir] New Version Notification for draft-burger-stir-iana-cert-00.txt X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Mar 2018 23:02:35 -0000 --Apple-Mail=_FDFFB248-1768-4739-95D0-4D126154C4E4 Content-Type: multipart/alternative; boundary="Apple-Mail=_8A107D96-6710-4EE1-A712-BBB94A8FE951" --Apple-Mail=_8A107D96-6710-4EE1-A712-BBB94A8FE951 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 This is covered in Section 5.1 and 5.2. It is the same model used for = the time zone database. Registration will usually be obvious, like the = FCC or NTIA registering for the U.S., OFCOM registering for the U.K., = FICORA registering for Finland, etc. IANA can look up the national = authorities via the ITU-T document normatively referenced in the text. = If it is not obvious or cleared up by a phone call, e.g., asking the FCC = if Neustar or iconectiv is OK for the U.S., that is why the document = says to take it to the list. One open question is that since this is something that would probably = get zero traffic, I defaulted to saying =E2=80=9Cuse the RAI list if = there=E2=80=99s a dispute.=E2=80=9D Do we need to setup a separate, = =E2=80=9CNational Numbering Authorities Dispute List=E2=80=9D? That = would be easy enough if necessary. > On Mar 6, 2018, at 1:15 AM, Christer Holmberg = wrote: >=20 > Hi Eric, >=20 > The IANA policy is Expert Review. What exactly is the ER supposed to = do in this case? >=20 > Regards, >=20 > Christer >=20 > Sent from my iPhone >=20 > On 6 Mar 2018, at 2.56, Eric Burger > wrote: >=20 >> I could not stay away either. >>=20 >>> Begin forwarded message: >>>=20 >>> From: internet-drafts@ietf.org >>> Subject: New Version Notification for = draft-burger-stir-iana-cert-00.txt >>> Date: March 5, 2018 at 3:50:09 PM EST >>> To: "Eric W. Burger" >, "Eric Burger" = > >>>=20 >>>=20 >>> A new version of I-D, draft-burger-stir-iana-cert-00.txt >>> has been successfully submitted by Eric W. Burger and posted to the >>> IETF repository. >>>=20 >>> Name: draft-burger-stir-iana-cert >>> Revision: 00 >>> Title: Registry for Country-Specific Secure Telephone Identity = (STIR) Root Certificates >>> Document date: 2018-03-05 >>> Group: Individual Submission >>> Pages: 13 >>> URL: = https://www.ietf.org/internet-drafts/draft-burger-stir-iana-cert-00.txt = >>> Status: = https://datatracker.ietf.org/doc/draft-burger-stir-iana-cert/ = >>> Htmlized: = https://tools.ietf.org/html/draft-burger-stir-iana-cert-00 = >>> Htmlized: = https://datatracker.ietf.org/doc/html/draft-burger-stir-iana-cert-00 = >>>=20 >>>=20 >>> Abstract: >>> This document defines an IANA registry that maps country codes to >>> secure telephone identity (STIR) root certificates authorized to >>> create signing certificates for telephone numbers under the = authority >>> of a given country. Some countries allow carriers to block >>> unsolicited, automatically generated nuisance calls commonly known = as >>> 'robocalls.' The use of signed STIR tokens in the Session = Initiation >>> Protocol (SIP) may be useful in such scenarios to provide positive >>> attestations as to call origin. Legacy telephone numbering = resources >>> are administrated by national policy. Unlike the market-driven = use >>> case of Web commerce, some nations may restrict the list of STIR = root >>> certificate authorities acceptable for issuing signing = certificates >>> for STIR tokens that provide attestations for their local legacy >>> telephone numbering resources. The registry described in this >>> document enables call recipients in a first country to validate = that >>> signaling it receives from a caller with a telephone number = claiming >>> to be in a second country conforms to the second country's policy = of >>> (1) having a limited list of STIR root certificate authorities (or >>> not) and (2) the certificate that produced the signature over the >>> signaling is signed by one of those authorized STIR root = certificate >>> authorities. >>>=20 >>>=20 >>>=20 >>>=20 >>> Please note that it may take a couple of minutes from the time of = submission >>> until the htmlized version and diff are available at tools.ietf.org = . >>>=20 >>> The IETF Secretariat >>>=20 >>=20 >> _______________________________________________ >> stir mailing list >> stir@ietf.org >> https://www.ietf.org/mailman/listinfo/stir = --Apple-Mail=_8A107D96-6710-4EE1-A712-BBB94A8FE951 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 This is covered in Section 5.1 and 5.2. It is the same model = used for the time zone database. Registration will usually be obvious, = like the FCC or NTIA registering for the U.S., OFCOM registering for the = U.K., FICORA registering for Finland, etc. IANA can look up the national = authorities via the ITU-T document normatively referenced in the text. = If it is not obvious or cleared up by a phone call, e.g., asking the FCC = if Neustar or iconectiv is OK for the U.S., that is why the document = says to take it to the list.

One open question is that since this is something that would = probably get zero traffic, I defaulted to saying =E2=80=9Cuse the RAI = list if there=E2=80=99s a dispute.=E2=80=9D Do we need to setup a = separate, =E2=80=9CNational Numbering Authorities Dispute List=E2=80=9D? = That would be easy enough if necessary.

On = Mar 6, 2018, at 1:15 AM, Christer Holmberg <christer.holmberg@ericsson.com> wrote:

Hi Eric,

The IANA policy is Expert Review. What exactly is the ER = supposed to do in this case? 

Regards,

Christer

Sent from my iPhone

On 6 Mar 2018, at 2.56, Eric Burger <eburger@standardstrack.com> wrote:

I could not stay away either.

Begin forwarded message:

From: internet-drafts@ietf.org
Subject: New Version = Notification for draft-burger-stir-iana-cert-00.txt
Date: March 5, 2018 at 3:50:09 PM = EST
To: "Eric W. Burger" <eburger@standardstrack.com>, "Eric Burger" <eburger@standardstrack.com>


A new version of I-D, draft-burger-stir-iana-cert-00.txt
has been successfully submitted by Eric W. Burger and posted to the
IETF repository.

Name: = draft-burger-stir-iana-cert
Revision: = 00
Title: = Registry for Country-Specific Secure = Telephone Identity (STIR) Root Certificates
Document date: = 2018-03-05
Group: = Individual Submission
Pages: = 13
URL: =            https://www.ietf.org/internet-drafts/draft-burger-stir-iana-cer= t-00.txt
Status:         https://datatracker.ietf.org/doc/draft-burger-stir-iana-cert/
Htmlized:       https://tools.ietf.org/html/draft-burger-stir-iana-cert-00<= br class=3D""> Htmlized:       https://datatracker.ietf.org/doc/html/draft-burger-stir-iana-ce= rt-00


Abstract:
  This document defines an IANA registry that maps country = codes to
  secure telephone identity (STIR) root certificates = authorized to
  create signing certificates for telephone numbers under the = authority
  of a given country.  Some countries allow carriers to = block
  unsolicited, automatically generated nuisance calls commonly = known as
  'robocalls.'  The use of signed STIR tokens in the = Session Initiation
  Protocol (SIP) may be useful in such scenarios to provide = positive
  attestations as to call origin.  Legacy telephone = numbering resources
  are administrated by national policy.  Unlike the = market-driven use
  case of Web commerce, some nations may restrict the list of = STIR root
  certificate authorities acceptable for issuing signing = certificates
  for STIR tokens that provide attestations for their local = legacy
  telephone numbering resources.  The registry described = in this
  document enables call recipients in a first country to = validate that
  signaling it receives from a caller with a telephone number = claiming
  to be in a second country conforms to the second country's = policy of
  (1) having a limited list of STIR root certificate = authorities (or
  not) and (2) the certificate that produced the signature = over the
  signaling is signed by one of those authorized STIR root = certificate
  authorities.




Please note that it may take a couple of minutes from the time of = submission
until the htmlized version and diff are available at tools.ietf.org.

The IETF Secretariat


_______________________________________________
stir mailing list
stir@ietf.org
https://www.ietf.org/mailman/listinfo/stir

= --Apple-Mail=_8A107D96-6710-4EE1-A712-BBB94A8FE951-- --Apple-Mail=_FDFFB248-1768-4739-95D0-4D126154C4E4 Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP -----BEGIN PGP SIGNATURE----- Comment: GPGTools - http://gpgtools.org iQIzBAEBCAAdFiEEfEc/N7T7IfiAuDEHDDCGh758rskFAlqwQXcACgkQDDCGh758 rslkTQ/+PakN0BYdUtuu4TikhPHeKWUgkxWNDfR2PHbUiYDTrSR187cwjUjFgYBf dG+ZaNg+RlDawJyLm0ZX3a0wTuldAEI/Or9P8AW6K5ifqBOuiypnpKd2WiUCeBip grYq16av8oZ6EKZBIlKzw+fFenw29/k2fPsDuPdwGTxbScEMDeB6KBdPzUIdIwu8 S5oihfrWl4XUFJeGzWSS4DBgdA//H+Sr7A3Stx+Vl5iOpfISyp61YilDcfEikMR1 8vMzu62walgDTmO2/JXOleoyz2hPyHu3TPUfRM2WcOS2UegOe58tRcGsExSm7QVe LV7qJZ3fssaz91YMEaNe0Pm/zpCVt1sW1byIBwTqNpd/JGD+yf/avcq9Jj2MT3VQ cAX9Y7lrCZ3aQ/hdkUe07MniBbK3TeRC7XKYEDJg73QElkkMA2G3Zg5p+Cqdx0pD ovu9ayzPu+mJCNq7TqpBB96/TY0JN2chQMriIqhmZzjuAYamDLUhK+QzK6whI4eq 8595RmAOJBcxsF/ifFAECxx1lIqHbGM3Ik35Kq8oVBUj8HtedLiZS8fuFIBs8kwM hpMAS4aVCgeQSFoa3STZLyuiROT3M00jKAfyFqmXRO/YGHj1iZ1J87iMxpxWxDph Uy5ssGYz1qRszhCpCQg5R6s+noaItvlJBRNf+Po4gdh/sWCx6QQ= =FHZl -----END PGP SIGNATURE----- --Apple-Mail=_FDFFB248-1768-4739-95D0-4D126154C4E4-- From nobody Tue Mar 20 04:23:46 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B403A126DED for ; Tue, 20 Mar 2018 04:23:44 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KPBxuX17pMlQ for ; Tue, 20 Mar 2018 04:23:43 -0700 (PDT) Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F0683126DC2 for ; Tue, 20 Mar 2018 04:23:42 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id CDD85300494 for ; Tue, 20 Mar 2018 07:23:40 -0400 (EDT) X-Virus-Scanned: amavisd-new at mail.smeinc.net Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id whYIJUgeT7fJ for ; Tue, 20 Mar 2018 07:23:39 -0400 (EDT) Received: from dhcp-8e33.meeting.ietf.org (dhcp-8e33.meeting.ietf.org [31.133.142.51]) by mail.smeinc.net (Postfix) with ESMTPSA id 499B8300418 for ; Tue, 20 Mar 2018 07:23:39 -0400 (EDT) From: Russ Housley Content-Type: multipart/alternative; boundary="Apple-Mail=_BC43C163-AF7E-4D96-BF4C-F27493122541" Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\)) Message-Id: References: <152154341255.9789.5103138898002615166.idtracker@ietfa.amsl.com> To: IETF STIR Mail List Date: Tue, 20 Mar 2018 07:23:43 -0400 X-Mailer: Apple Mail (2.3273) Archived-At: Subject: [stir] STIR Agenda Changes X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 20 Mar 2018 11:23:45 -0000 --Apple-Mail=_BC43C163-AF7E-4D96-BF4C-F27493122541 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Please note the change of start time for the STIR portion for the = meeting on Thursday morning. > TIME CHANGE: > SIPCORE 09:30 =E2=80=93 10:00 on Thursday in Viscount > STIR 10:30 =E2=80=93 12:00 on Thursday in Viscount I have added a few minutes to four of the presentations. See https://datatracker.ietf.org/meeting/101/materials/agenda-101-stir-02 = Russ= --Apple-Mail=_BC43C163-AF7E-4D96-BF4C-F27493122541 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Please note the change of start time for the STIR portion for = the meeting on Thursday morning.

TIME CHANGE:
SIPCORE 09:30 =E2=80=93 10:00 on Thursday in = Viscount
STIR 10:30 =E2=80=93 12:00 on Thursday in = Viscount

I have added a few minutes to four of the presentations. =  See
https://datatracker.ietf.org/meeting/101/materials/agenda-101-s= tir-02

Russ
= --Apple-Mail=_BC43C163-AF7E-4D96-BF4C-F27493122541-- From nobody Wed Mar 21 04:41:32 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5CE9712DA29 for ; Wed, 21 Mar 2018 04:41:31 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=team.neustar Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id z2oQofKiPOEt for ; Wed, 21 Mar 2018 04:41:29 -0700 (PDT) Received: from mx0b-0018ba01.pphosted.com (mx0a-0018ba01.pphosted.com [67.231.149.94]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A923D12D88D for ; Wed, 21 Mar 2018 04:41:24 -0700 (PDT) Received: from pps.filterd (m0078664.ppops.net [127.0.0.1]) by mx0a-0018ba01.pphosted.com (8.16.0.22/8.16.0.22) with SMTP id w2LBX0Ye026083; Wed, 21 Mar 2018 07:41:24 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=team.neustar; h=from : to : cc : subject : date : message-id : content-type : mime-version; s=selector1; bh=kZ5vG/MiEblyJ1VOcAs8lLhKmRCvIGNda5LuEUQ2Fvc=; b=bWetfuBPcL1yWUX+cJ59h35DHVzhG/tEV9AisTH/+aGiM6UFatBZp0NVBCBIiW+25j4m 3xdSi7GVsSAKGcBjbXjWC3WS9zKpiEUvp5KA8YnO/C2Bap2Xum8srQBdH7gnSutvwvIf E4ZxnMznmKpRfkFvLfiJElcUt1PECwp5xSeqivZOZOmQT0V3ZZNqICg2Cu4s+73KEGP/ CQ8Ix4sygJIQQmU0WqOVP31zthEy01PAD1fEUvb58UgVMAnjCFGrN3D6rGLGp1xr602c 2LKq+o35LTTAxnorAtlWzbg1xFqXGHocHyIoTbrVCAnjZFZmOx9Csw9fnscNjjgMAXov 9w== Received: from stntexhc11.cis.neustar.com ([156.154.17.216]) by mx0a-0018ba01.pphosted.com with ESMTP id 2gueb88g0t-1 (version=TLSv1 cipher=ECDHE-RSA-AES256-SHA bits=256 verify=NOT); Wed, 21 Mar 2018 07:41:23 -0400 Received: from STNTEXMB11.cis.neustar.com ([169.254.1.236]) by stntexhc11.cis.neustar.com ([::1]) with mapi id 14.03.0279.002; Wed, 21 Mar 2018 07:41:22 -0400 From: "Peterson, Jon" To: Jonathan Rosenberg CC: "stir@ietf.org" Thread-Topic: Re: [stir] New draft draft-rosenberg-stir-callback-00 Thread-Index: AQHTvBAQ9S8lRhGli0md6LCm7RFBYg== Date: Wed, 21 Mar 2018 11:41:21 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.b.0.180311 x-originating-ip: [10.96.13.96] Content-Type: multipart/alternative; boundary="_000_D6BF109B1F7425jonpetersonneustarbiz_" MIME-Version: 1.0 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:, , definitions=2018-03-21_04:, , signatures=0 X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1011 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1711220000 definitions=main-1803210141 Archived-At: Subject: Re: [stir] New draft draft-rosenberg-stir-callback-00 X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 21 Mar 2018 11:41:31 -0000 --_000_D6BF109B1F7425jonpetersonneustarbiz_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 QSBjb3VwbGUgbW9yZSBub3RlcyBvbiB0aGUgZGVzaWduIGNob2ljZXMgb2YgYXR0ZXN0aW5nIGVm ZmVjdGl2ZSBjb250cm9sIG9mIGEgbnVtYmVyIHZpYSBhIENBIHZzLiBjYWNoaW5nIOKAnGNhbGxi YWNrIG9uIGZpcnN0LXVzZeKAnSBzZWxmLXNpZ25lZCBjZXJ0cywgYXMgSeKAmW0gZG9pbmcgc2xp ZGVzIGZvciB0b21vcnJvd+KApg0KDQpUaGUgQ0Egc3RpbGwgYmVjb21lcyBhY2NvdW50YWJsZSBm b3IgaG9sZGluZyBhbiBhY2N1cmF0ZSBhbmQgYXV0aG9yaXRhdGl2ZSBkYXRhYmFzZSBvZiBudW1i ZXJzIGZvciAocHJlc3VtYWJseSkgYSB2ZXJ5IGxhcmdlIG51bWJlciBvZiB1c2VycywgZm9yIGtl ZXBpbmcgaXQgdXAgdG8gZGF0ZSwgZm9yIGhhbmRsaW5nIGNvcnJlY3Rpb25zIHNob3VsZCBhbiBl cnJvciBnZXQgbWFkZSAod2hpY2ggaW52YXJpYWJseSBpdCB3aWxsIGZvciBzb21lIHJlYXNvbiks IGZvciBkZWNpZGluZyBob3cgdG8gcHJpY2Ugc3VjaCBhIHNlcnZpY2UsDQoNClNvIExldCdzIEVu Y3J5cHQgaXMgbm93IGRvaW5nIHRoaXMgc29ydCBvZiB0aGluZyBncmF0aXMgZm9yIHdoYXQsIDUw IG1pbGxpb24gYWN0aXZlIGNlcnRzIG9yIHNvPyBJdCBkb2Vzbid0IGhhdmUgdG8gYmUganVzdCBv bmUgQ0EgZG9pbmcgYWxsIHRoZSB3b3JrOiBmb3IgdmFyaW91cyBvcGVyYXRpb25hbCBhbmQgYWRt aW5pc3RyYXRpdmUgcmVhc29ucywgb25lIHNpemUgcHJvYmFibHkgd29u4oCZdCBmaXQgYWxsIGZv ciBTVElSLiBBbmQgc3VyZSwgbm8gQ0EgaXMgcGVyZmVjdCBpbiB0ZXJtcyBvZiBoYW5kbGluZyBl cnJvcnMgLSBidXQgdGhlbiBhZ2FpbiB0aGUgImVmZmVjdGl2ZSBwcm9vZiBvZiBjb250cm9sIG9m IGEgdGVsZXBob25lIG51bWJlciIgYXR0ZXN0YXRpb24gd2UncmUgc2Vla2luZyBmb3IgdGhpcyBw YXJ0aWN1bGFyIHVzZSBjYXNlIGlzIGNsb3NlciB0byBUT0ZVIHRoYW4gdG8gaGVhdnl3ZWlnaHQg ZW5yb2xsbWVudCBtZWNoYW5pc21zIGZvciBsaWFiaWxpdHktZ3JhZGUgY2VydHMuIE91ciB0aHJl YXQgbW9kZWwgY2FuIGJlIG1pdGlnYXRlZCB3aXRoIHNvbWV0aGluZyB3ZWFrZXIgdGhhbiBsaWFi aWxpdHktZ3JhZGUgY2VydHMsIGFueXdheS4gU28gd2UganVzdCBuZWVkIHRvIGhhdmUgYSBzYW5l IENQL0NQUyB0aGF0IGRvZXMgbm90IG92ZXJwcm9taXNlIG9uIHRoZSBsZXZlbCBvZiBhc3N1cmFu Y2UgdGhlc2UgY2VydHMgcHJvdmlkZS4NCg0KZm9yIGRlYWxpbmcgd2l0aCB3aGF0ZXZlciBsb2Nh bCByZWd1bGF0aW9ucyB0aGVpciBsYXd5ZXJzIHRoaW5rIHRoZXkgbWF5IGJlIHNpZ25pbmcgdXAg Zm9yIGJ5IGJlaW5nIGluIHRoZSB0ZWxjbyBidXNpbmVzcy4gU2luY2UsIHJlZ2FyZGxlc3Mgb2Yg aG93IHRoaXMgZGF0YWJhc2UgZ2V0cyBwb3B1bGF0ZSwgdGhleSBhcmUgaW4gdGhlIHRlbGNvIGJ1 c2luZXNzIGJlY2F1c2UgdGhleSBzZWxsIGEgdGVsY28gZGF0YWJhc2UuDQoNCkkgZG9uJ3Qga25v dyBpZiB5b3UncmUgaW1wbHlpbmcgc29tZXRoaW5nIG1vcmUgc3BlY2lmaWMgaGVyZSwgYnV0IEkg Z3Vlc3MgSSBhZ3JlZSB0aGF0IGFueSBkYXRhYmFzZSB1c2VkIGluIGNvbW11bmljYXRpb25zIGNv dWxkIGVuZCB1cCBiZWluZyByZWd1bGF0ZWQgc29tZXdoZXJlIGluIHRoZSB3b3JsZC4gSSdtIHN1 cmUgdGhhdCdzIGFzIHRydWUgb2YgZGlzdHJpYnV0ZWQgZGF0YWJhc2VzIGFzIGNlbnRyYWxpemVk IG9uZXMuIENlcnRpZmljYXRlcyBoYXZlIGFsd2F5cyBiZWVuIGFibGUgdG8gaGF2ZSB0ZWxlcGhv bmUgbnVtYmVycyBpbiB0aGVtLCBpbmNsdWRpbmcgYSB0ZWxlcGhvbmUgbnVtYmVyIGluIGEgY2Vy dCBkb2Vzbid0IHBvbHltb3JwaCBpdHMgaXNzdWluZyBDQSBpbnRvIGEgInRlbGNvIGRhdGFiYXNl IiB3aXRoIGEgbmF0aW9uYWwgZmxhZyBzdGlja2luZyBvdXQgb2YgaXQuDQoNCkRpc3RyaWJ1dGlu ZyB0aGUgd29yayBkaXN0cmlidXRlcyB0aGUgYWNjb3VudGFiaWxpdHksIGFuZCBwbGFjZXMgaXQg aW4gdGhlIGZpcnN0IHBhcnR5ICh0aGUgZW50aXR5IHRoYXQgY29uc3VtZXMgaXQpIHJhdGhlciB0 aGFuIHRoZSB0aGlyZCBwYXJ0eSAod2l0aCBzb21lb25lIGVsc2UpLiBUaGF0IGlzIGEgZHJhbWF0 aWMgZGlmZmVyZW5jZS4NCg0KQUNNRSBpcyBqdXN0IGEgcHJvdG9jb2w6IHdobyBvcGVyYXRlcyB0 aGUgQ0FzIGFuZCB0aGUgcmVsYXRpb25zaGlwIG9mIHRob3NlIGVudGl0aWVzIHRvIHRoZSBjb21t dW5pY2F0aW5nIHBhcnRpZXMgaXNuJ3QgcHJlc2NyaWJlZCBieSB0aGUgYXJjaGl0ZWN0dXJlLiBT byBpdCBkb2VzbuKAmXQgZW50YWlsIGNlbnRyYWxpemluZyB0aGUgYWNjb3VudGFiaWxpdHkgaW4g b25lIHBsYWNlIG9yIGRpc3RhbmNpbmcgaXQgZnJvbSB0aGUgZmlyc3QgKG9yIHNlY29uZCkgcGFy dHkuIE1heWJlIHNvbWUgb2YgdGhlIENTUHMgaW52b2x2ZWQgaW4gU1RJUiB3YW50IHRvIGFjdCBh cyBDQXMgdGhlbXNlbHZlcyAob3IgY29udHJhY3Qgb3V0IGZvciB0aGF0IGFzIGEgd2hpdGUgbGFi ZWwgc2VydmljZSksIGluIHdoaWNoIGNhc2Ugd2Ugc2hvdWxkIGhlc2l0YXRlIHRvIGNvbnNpZGVy IHRoZW0g4oCcdGhpcmQgcGFydGllc+KAnSBhdCBhbGwuIE1vcmVvdmVyLCB3aGVyZSB0aGVyZSBh cmUgb25lIG9yIG1vcmUgdGhpcmQgcGFydGllcywgb3IgYSBmZWRlcmF0ZWQgY29uc29ydGl1bSBs aWtlIExldCdzIEVuY3J5cHQsIHNheSwgYWNjb3VudGFiaWxpdHkgaXMgYWx3YXlzIGxpbWl0ZWQg YnkgdGhlIHBvbGljaWVzIHVzZWQgdG8gaXNzdWUgY2VydGlmaWNhdGVzIC0gd2hpY2ggY2FuIGJl IGZhdm9yYWJsZSBvciB1bmZhdm9yYWJsZSB0byB2YXJpb3VzIHVzZXIgYW5kL29yIGdvdmVybm1l bnQgaW50ZXJlc3RzLCBzdXJlLg0KDQpCdXQgdG8gdGhlIGJyb2FkZXIgcXVlc3Rpb24gaGVyZSwg SSB0aGluayB0aGVyZSBhcmUgb3RoZXIgZGlmZmVyZW5jZXMgdGhhdCBtYXR0ZXIsIGJleW9uZCBq dXN0IGFjY291bnRhYmlsaXR5LiBUaGUgZGVzaWduIGRlY2lzaW9uIHRvIGhhdmUgY2FsbGVycyBl bnJvbGwgdG8gZXN0YWJsaXNoIHRoZWlyIGlkZW50aXRpZXMgcHJpb3IgdG8gdGhlIGZpcnN0IHRp bWUgdGhleSBwbGFjZSBhIHNlY3VyZSBjYWxsIHRvIGFueW9uZSwgdmVyc3VzIGVzdGFibGlzaGlu ZyB0aGVpciBpZGVudGl0eSBpbiByZWFsIHRpbWUgZXZlcnkgdGltZSB0aGV5IGNhbGwgc29tZW9u ZSBuZXcsIGhhcyBhIGhvc3Qgb2YgYXJjaGl0ZWN0dXJhbCBpbXBsaWNhdGlvbnMgYW5kIGFzc29j aWF0ZWQgdHJhZGUtb2Zmcy4gSG93IG1hbnkgdGltZXMgeW91IG5lZWQgdG8gcHJvdmUgeW91ciBl ZmZlY3RpdmUgY29udHJvbCwgYW5kIHdoZXRoZXIgeW91IG5lZWQgdG8gcHJvdmUgaXQgd2l0aGlu IGNhbGwgc2V0LXVwIHRpbWUsIGNhbiBsZWFkIHRvIHNvbWUgcHJldHR5IHN1YnN0YW50aWFsbHkg ZGlmZmVyZW5jZXMgaW4gaG93IHRoZSBzeXN0ZW0gYmVoYXZlcy4NCg0KV2XigJl2ZSBjb25zaWRl cmVkIHNvbWV0aGluZyBzaW1pbGFyIHdoZW4gbG9va2luZyBhdCBtb2RlbHMgd2hlcmUgeW91IG1p Z2h0IHJlcXVpcmUgYSBuZXcgc2hvcnQtdGVybSBjZXJ0IGZvciBldmVyeSBzaWduZWQgY2FsbCBh cyBhbiBhbHRlcm5hdGl2ZSB0byBkb2luZyBzb21ldGhpbmcgbGlrZSBPQ1NQIHN0YXBsaW5nIGlu IFNJUCBmb3IgY3JlZGVudGlhbCBmcmVzaG5lc3MgLSBzb21lIG9mIHRoZSBzYW1lIHByaW5jaXBs ZXMgcHJvYmFibHkgYXBwbHkgaGVyZS4gQW55IHN0cmF0ZWd5IHRoYXQgcmVsaWVzIG9uIGNhbGxl ZCBwYXJ0aWVzIHJlbWVtYmVyaW5nIHRoZSBsYXN0IGNlcnQgeW91IHVzZWQgaW5jaWRlbnRhbGx5 IGxpbWl0cyBjZXJ0YWluIHdheXMgb2YgdXNpbmcgc2hvcnQtdGVybSBjZXJ0cywgYW5kIHRoYXQg aGFzIGJlZW4gb3VyIG9zdGVuc2libGUgZGlyZWN0aW9uIGZvciBjZXJ0aWZpY2F0ZSBmcmVzaG5l c3MgaGVyZSBpbiBTVElSIHNpbmNlIHdlIGdhdmUgdXAgb24gT0NTUCBzdGFwbGluZy4NCg0KQSBs b3Qgb2Ygc2NhbSBjYWxscyB0aGVzZSBkYXlzIGltcGVyc29uYXRlIGdvdmVybm1lbnQgYWdlbmNp ZXMgb3IgbGFyZ2UgZW50ZXJwcmlzZXMgLSBidXQgdGhvc2UgZW50aXRpZXMgcGxhY2UgYSBsb3Qg b2YgbGVnaXRpbWF0ZSBjYWxscyB0b28gZnJvbSBvbmUgbnVtYmVyLCBzb21ldGltZXMgYSBsYXJn ZSBudW1iZXIgb2YgbGVnYWwgY2FsbHMgYWxsIGF0IG9uY2UsIGFuZCBpbiBhIENPRlUgc2NoZW1l IHRoYXQgY291bGQgY2F1c2UgdmFzdCBhbW91bnRzIG9mIHNpbXVsdGFuZW91cyBjYWxsYmFja3Mu IEluIHNvIGZhciBhcyB3ZSBjYXJlIGFib3V0IHRoZSBwb3RlbnRpYWwgcG9zdC1kaWFsIGRlbGF5 IGR1ZSB0byB0aGUgUlRUIGluIHRoZSByZXZlcnNlIGRpcmVjdGlvbiBiZWZvcmUgY29ubmVjdGlu ZywgdGhvc2UgcHJvYmxlbXMgY291bGQgYmUgY29tcG91bmRlZCBpbiBzb21lIG9mIHRoZSBoYXJk ZXIgdXNlIGNhc2VzIHdlIGhvcGUgdG8gc29sdmUgZm9yLg0KDQpBcyBDaHJpc3RlciBtZW50aW9u ZWQgdGhlcmUgYXJlIHByb2JhYmx5IHNvbWUgaGFyZCBlZGdlcyBhcm91bmQgZm9ya2luZyBhbmQg Zm9yd2FyZGluZyBjYXNlcyB3aGVyZSBhIGNhbGxiYWNrIGhhcyB0cm91YmxlIGZpbmRpbmcgaXRz IHdheSBob21lIG9yIHRoZSB3aG9sZSB0aGluZyBpcyBvdGhlcndpc2UgY29uZnVzZWQgYnkgdW5l eHBlY3RlZCByZXRhcmdldGluZy4gVGhlIGRpZmZlcmVuY2UgYmV0d2VlbiB0aGUgd2F5IFNJUCBy ZXF1ZXN0cyBhcmUgcm91dGVkIGFuZCBob3cgUFNUTiBjYWxscy9tZXNzYWdlcyBhcmUgcm91dGVk IGhhcyBhbHdheXMgYmVlbiBhIGNoYWxsZW5nZSBpbiBjb25zaWRlcmluZyDigJxwdXJlIFNJUOKA nSBjYWxsYmFjayBtZWNoYW5pc21zIGFzIGEgd2F5IHRvIHByb3ZlIG93bmVyc2hpcCBvZiBhIHRl bGVwaG9uZSBudW1iZXIg4oCTIEkga25vdyBpdOKAmXMga2luZCBvZiBhbiBhc3N1bXB0aW9uIG9m IHRoZSBkcmFmdCB0aGF0IHRoaXMganVzdCB3b3JrcywgYnV0IEkgd29ycnkgZW5vdWdoIGFib3V0 IGl0IHRoYXQgSSB0aGluayBTTVMgcm91dGFiaWxpdHkgdGVzdHMgYXJlIGF0IGxlYXN0IGFzIHZp YWJsZSwgZXZlbiB3aXRoIHRoZSBsaW1pdGF0aW9ucyBvZiBTTVMuDQoNCldlIHNvbWV0aW1lcyB0 YWxrIGFib3V0ICJsZWdpdGltYXRlIHNwb29maW5nIiBjYXNlcyBpbiBTVElSOiBjYXNlcyB3aGVy ZSBhbiBlbnRpdHkgKGEgZG9jdG9yIGlzIHRoZSB1c3VhbCBleGFtcGxlKSBpcyBhdXRob3JpemVk IHRvIHVzZSBzb21lb25lIGVsc2UncyB0ZWxlcGhvbmUgbnVtYmVyLiBUeXBpY2FsbHkgd2Ugd291 bGQgYWRkcmVzcyB0aGF0IHdpdGggY2VydGlmaWNhdGUgZGVsZWdhdGlvbiwgdW5kZXIgdGhlIFJG QzgyMjYgbW9kZWwuIFRoZXJlIGFyZSB0cmFkZS1vZmZzIHJlbGF0ZWQgdG8gaW1wbGVtZW50aW5n IHRoaXMgd2l0aCBjYWxsYmFja3M6IGlmIGxlZ2l0aW1hdGUgc3Bvb2ZpbmcgbmVlZHMgdG8gYmUg YXV0aG9yaXplZCBpbiByZWFsIHRpbWUgZHVyaW5nIGNhbGwgc2V0LXVwLCB0aGF0IHJlcXVpcmVz IHRoZSBkZWxlZ2F0aW5nIGF1dGhvcml0eSB0byBiZSBhdmFpbGFibGUgYW5kIHJlc3BvbnNpdmUg YXQgdGhlIG5lY2Vzc2FyeSBtb21lbnQuIFNvbWV0aW1lcyB0aGF04oCZcyBjb252ZW5pZW50IGJ1 dCBzb21ldGltZXMgaXQgbWlnaHQgbm90IGJlLg0KDQpXZSBjYW4gd29yayB0aHJvdWdoIHRob3Nl IHRyYWRlLW9mZnMsIGJ1dCBhdCB0aGUgZW5kIG9mIHRoZSBkYXkgbXkgYmlnZ2VzdCBjb25jZXJu IGlzIHRoYXQgdGhpcyBpc27igJl0IG1vdmluZyB0aGUgYmFsbCBpbiB0aGUgcmlnaHQgZGlyZWN0 aW9uLiBTSVAgaXNuJ3QgdGhlIG9ubHkgcHJvdG9jb2wgdXNlZCB0byBvcmlnaW5hdGUgcm9ib2Nh bGxzLCBzbyB3ZSd2ZSBzcGVudCBzb21lIHRpbWUgaGVyZSB0aGlua2luZyBhYm91dCBob3cgdG8g bWFrZSBQQVNTcG9yVCBhbmQgdGhlIFNUSVIgYXJjaGl0ZWN0dXJlIGFwcGxpY2FibGUgd2hlbiBT SVAgaXNuJ3QgYmVpbmcgdXNlZCBlbmQtdG8tZW5kLCBsaWtlIGluIG91ciBvdXQtb2YtYmFuZCBk cmFmdC4gSSB0aGluayB3ZSB3YW50IGVudGl0aWVzIHRoYXQgZG9uJ3QgZXZlbiBzdXBwb3J0IFNJ UCB0byBiZSBhYmxlIHRvIHVzZSBQQVNTcG9yVC4gU28gd2hpbGUgSSB0aGluayBhIFNJUCBjYWxs YmFjayBjb3VsZCBiZSBhIHdheSB0byBoZWxwIGdldCBjcmVkZW50aWFscyBmb3IgU1RJUiwgaXQg c2hvdWxkbid0IGJlIHRoZSBvbmx5IHdheSAtIGFuZCB0aGUgc2VjdXJpdHkgYXNzb2NpYXRpb24g aXQgY3JlYXRlcyBzaG91bGQgaWRlYWxseSBiZSBhcHBsaWNhYmxlIHRvIHNpZ25pbmcgUEFTU3Bv clRzIGluIG5vbi1TSVAgdXNlIGNhc2VzLiBUaGlzIGlzIHdoeSBhdCBsZWFzdCBJ4oCZdmUgYmVl biBsb29raW5nIGF0IGEgbW9yZSBnZW5lcmljIGNyZWRlbnRpYWwgYXJjaGl0ZWN0dXJlIGxpa2Ug QUNNRS4gSGF2aW5nIHRoZSBjcmVkZW50aWFscyBqdXN0IGJlIGJhcmUgc2VsZi1zaWduZWQga2V5 cyB0aGF0IGFyZSBvbmx5IHRydXN0ZWQgYmVjYXVzZSBhIHJlY2lwaWVudCBoYXMgc2VlbiB0aGVt IGJlZm9yZSBkb2Vzbid0IHNlZW0gbGlrZSBhIHByb21pc2luZyBpbmNyZW1lbnRhbCBzdGVwIGlu IHRoZSBkaXJlY3Rpb24gd2Ugd2FudCB0byBnby4gSWYgd2UgaGF2ZSBjZXJ0aWZpY2F0ZXMgdGhh dCBzaG93IGV2ZW4gZWZmZWN0aXZlIHByb29mIG9mIGNvbnRyb2wgb3ZlciBhIHRlbGVwaG9uZSBu dW1iZXIgdGhleSBjb3VsZCBiZSBsZXZlcmFnZWQgZm9yIG90aGVyIGZ1bmN0aW9ucyB0aGFuIGJl YXRpbmcgaW1wZXJzb25hdGlvbiBhcyB3ZWxsLCB3aGljaCB3ZeKAmXJlIHRhbGtpbmcgYWJvdXQg ZWxzZXdoZXJlIGluIHRoZSBJRVRGLg0KDQpJIHRoaW5rIHRoZXJlIGFyZSBwcm9iYWJseSBwYXRo cyBoZXJlIHRoYXQgaGF2ZSBtYW55IG9mIHRoZSBkZXNpcmFibGUgcHJvcGVydGllcyBvZiBhIGNh bGxiYWNrIHNvbHV0aW9uIHRoYXQgbm9uZXRoZWxlc3MgaGF2ZSBhIGNsZWFyZXIgdHJhbnNpdGlv biBwYXRoIHRvIG91ciBpbnRlbmRlZCBhcmNoaXRlY3R1cmUsIGFuZCB3aGljaCBwZXJoYXBzIGRv buKAmXQgaW5jdXIgc29tZSBvZiB0aGUgY2hhbGxlbmdlcyB0aGF0IGFyaXNlIGZyb20gZG9pbmcg dGhpcyBpbiByZWFsIHRpbWUuDQoNCkpvbiBQZXRlcnNvbg0KTmV1c3RhciwgSW5jLg0K --_000_D6BF109B1F7425jonpetersonneustarbiz_ Content-Type: text/html; charset="utf-8" Content-ID: <7BD863125E36644697B144D40E3817B3@neustar.biz> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2 IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToy IDE1IDUgMiAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3Jt YWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGluOw0KCW1hcmdpbi1i b3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJp IixzYW5zLXNlcmlmO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXBy aW9yaXR5Ojk5Ow0KCWNvbG9yOiMwNTYzQzE7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9 DQphOnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9y aXR5Ojk5Ow0KCWNvbG9yOiM5NTRGNzI7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpw Lm1zb25vcm1hbDAsIGxpLm1zb25vcm1hbDAsIGRpdi5tc29ub3JtYWwwDQoJe21zby1zdHlsZS1u YW1lOm1zb25vcm1hbDsNCgltc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzsNCgltYXJnaW4tcmlnaHQ6 MGluOw0KCW1zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvOw0KCW1hcmdpbi1sZWZ0OjBpbjsNCglm b250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmO30NCi5N c29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQtc2l6ZTox MC4wcHQ7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6OC41aW4gMTEuMGluOw0KCW1hcmdp bjoxLjBpbiAxLjBpbiAxLjBpbiAxLjBpbjt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6V29y ZFNlY3Rpb24xO30NCi0tPjwvc3R5bGU+DQo8L2hlYWQ+DQo8Ym9keSBsYW5nPSJFTi1VUyIgbGlu az0iIzA1NjNDMSIgdmxpbms9IiM5NTRGNzIiIHN0eWxlPSJ3b3JkLXdyYXA6IGJyZWFrLXdvcmQ7 LXdlYmtpdC1uYnNwLW1vZGU6IHNwYWNlOy13ZWJraXQtbGluZS1icmVhazogYWZ0ZXItd2hpdGUt c3BhY2UiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2NvbG9yOmJsYWNrIj5BIGNvdXBsZSBtb3Jl IG5vdGVzIG9uIHRoZSBkZXNpZ24gY2hvaWNlcyBvZiBhdHRlc3RpbmcgZWZmZWN0aXZlIGNvbnRy b2wgb2YgYSBudW1iZXIgdmlhIGEgQ0EgdnMuIGNhY2hpbmcg4oCcY2FsbGJhY2sgb24gZmlyc3Qt dXNl4oCdIHNlbGYtc2lnbmVkIGNlcnRzLCBhcyBJ4oCZbSBkb2luZyBzbGlkZXMgZm9yIHRvbW9y cm934oCmPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9z cGFuPjwvcD4NCjxibG9ja3F1b3RlIHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xp ZCAjQjVDNERGIDQuNXB0O3BhZGRpbmc6MGluIDBpbiAwaW4gNC4wcHQ7bWFyZ2luLWxlZnQ6My43 NXB0O21hcmdpbi1yaWdodDowaW4iIGlkPSJNQUNfT1VUTE9PS19BVFRSSUJVVElPTl9CTE9DS1FV T1RFIj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTAuNXB0O2NvbG9yOmJsYWNrIj5UaGUgQ0Egc3RpbGwgYmVjb21lcyBh Y2NvdW50YWJsZSBmb3IgaG9sZGluZyBhbiBhY2N1cmF0ZSBhbmQgYXV0aG9yaXRhdGl2ZSBkYXRh YmFzZSBvZiBudW1iZXJzIGZvciAocHJlc3VtYWJseSkgYSB2ZXJ5IGxhcmdlIG51bWJlciBvZiB1 c2VycywgZm9yIGtlZXBpbmcgaXQgdXAgdG8gZGF0ZSwgZm9yIGhhbmRsaW5nIGNvcnJlY3Rpb25z DQogc2hvdWxkIGFuIGVycm9yIGdldCBtYWRlICh3aGljaCBpbnZhcmlhYmx5IGl0IHdpbGwgZm9y IHNvbWUgcmVhc29uKSwgZm9yIGRlY2lkaW5nIGhvdyB0byBwcmljZSBzdWNoIGEgc2VydmljZSwN CjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2tx dW90ZT4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEwLjVwdDtjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41 cHQ7Y29sb3I6YmxhY2siPlNvIExldCdzIEVuY3J5cHQgaXMgbm93IGRvaW5nIHRoaXMgc29ydCBv ZiB0aGluZyBncmF0aXMgZm9yIHdoYXQsIDUwIG1pbGxpb24gYWN0aXZlIGNlcnRzIG9yIHNvPyBJ dCBkb2Vzbid0IGhhdmUgdG8gYmUganVzdCBvbmUgQ0EgZG9pbmcgYWxsIHRoZSB3b3JrOiBmb3Ig dmFyaW91cyBvcGVyYXRpb25hbCBhbmQgYWRtaW5pc3RyYXRpdmUNCiByZWFzb25zLCBvbmUgc2l6 ZSBwcm9iYWJseSB3b27igJl0IGZpdCBhbGwgZm9yIFNUSVIuIEFuZCBzdXJlLCBubyBDQSBpcyBw ZXJmZWN0IGluIHRlcm1zIG9mIGhhbmRsaW5nIGVycm9ycyAtIGJ1dCB0aGVuIGFnYWluIHRoZSAm cXVvdDtlZmZlY3RpdmUgcHJvb2Ygb2YgY29udHJvbCBvZiBhIHRlbGVwaG9uZSBudW1iZXImcXVv dDsgYXR0ZXN0YXRpb24gd2UncmUgc2Vla2luZyBmb3IgdGhpcyBwYXJ0aWN1bGFyIHVzZSBjYXNl IGlzIGNsb3NlciB0byBUT0ZVIHRoYW4NCiB0byBoZWF2eXdlaWdodCBlbnJvbGxtZW50IG1lY2hh bmlzbXMgZm9yIGxpYWJpbGl0eS1ncmFkZSBjZXJ0cy4gT3VyIHRocmVhdCBtb2RlbCBjYW4gYmUg bWl0aWdhdGVkIHdpdGggc29tZXRoaW5nIHdlYWtlciB0aGFuIGxpYWJpbGl0eS1ncmFkZSBjZXJ0 cywgYW55d2F5LiBTbyB3ZSBqdXN0IG5lZWQgdG8gaGF2ZSBhIHNhbmUgQ1AvQ1BTIHRoYXQgZG9l cyBub3Qgb3ZlcnByb21pc2Ugb24gdGhlIGxldmVsIG9mIGFzc3VyYW5jZSB0aGVzZSBjZXJ0cw0K IHByb3ZpZGUuPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Y29sb3I6YmxhY2siPjxv OnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9ImJv cmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkICNCNUM0REYgNC41cHQ7cGFkZGluZzowaW4gMGlu IDBpbiA0LjBwdDttYXJnaW4tbGVmdDozLjc1cHQ7bWFyZ2luLXJpZ2h0OjBpbiIgaWQ9Ik1BQ19P VVRMT09LX0FUVFJJQlVUSU9OX0JMT0NLUVVPVEUiPg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Y29sb3I6Ymxh Y2siPmZvciBkZWFsaW5nIHdpdGggd2hhdGV2ZXIgbG9jYWwgcmVndWxhdGlvbnMgdGhlaXIgbGF3 eWVycyB0aGluayB0aGV5IG1heSBiZSBzaWduaW5nIHVwIGZvciBieSBiZWluZyBpbiB0aGUgdGVs Y28gYnVzaW5lc3MuIFNpbmNlLCByZWdhcmRsZXNzIG9mIGhvdyB0aGlzIGRhdGFiYXNlIGdldHMg cG9wdWxhdGUsIHRoZXkgYXJlIGluIHRoZQ0KIHRlbGNvIGJ1c2luZXNzIGJlY2F1c2UgdGhleSBz ZWxsIGEgdGVsY28gZGF0YWJhc2UuPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rp dj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2NvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjVwdDtjb2xvcjpibGFjayI+SSBkb24ndCBrbm93IGlmIHlvdSdy ZSBpbXBseWluZyBzb21ldGhpbmcgbW9yZSBzcGVjaWZpYyBoZXJlLCBidXQgSSBndWVzcyBJIGFn cmVlIHRoYXQgYW55IGRhdGFiYXNlIHVzZWQgaW4gY29tbXVuaWNhdGlvbnMgY291bGQgZW5kIHVw IGJlaW5nIHJlZ3VsYXRlZCBzb21ld2hlcmUgaW4gdGhlIHdvcmxkLiBJJ20gc3VyZSB0aGF0J3Mg YXMNCiB0cnVlIG9mIGRpc3RyaWJ1dGVkIGRhdGFiYXNlcyBhcyBjZW50cmFsaXplZCBvbmVzLiBD ZXJ0aWZpY2F0ZXMgaGF2ZSBhbHdheXMgYmVlbiBhYmxlIHRvIGhhdmUgdGVsZXBob25lIG51bWJl cnMgaW4gdGhlbSwgaW5jbHVkaW5nIGEgdGVsZXBob25lIG51bWJlciBpbiBhIGNlcnQgZG9lc24n dCBwb2x5bW9ycGggaXRzIGlzc3VpbmcgQ0EgaW50byBhICZxdW90O3RlbGNvIGRhdGFiYXNlJnF1 b3Q7IHdpdGggYSBuYXRpb25hbCBmbGFnIHN0aWNraW5nIG91dCBvZiBpdC48bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjEwLjVwdDtjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+ PC9wPg0KPC9kaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6 c29saWQgI0I1QzRERiA0LjVwdDtwYWRkaW5nOjBpbiAwaW4gMGluIDQuMHB0O21hcmdpbi1sZWZ0 OjMuNzVwdDttYXJnaW4tcmlnaHQ6MGluIiBpZD0iTUFDX09VVExPT0tfQVRUUklCVVRJT05fQkxP Q0tRVU9URSI+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTAuNXB0O2NvbG9yOmJsYWNrIj5EaXN0cmlidXRpbmcgdGhlIHdvcmsgZGlz dHJpYnV0ZXMgdGhlIGFjY291bnRhYmlsaXR5LCBhbmQgcGxhY2VzIGl0IGluIHRoZSBmaXJzdCBw YXJ0eSAodGhlIGVudGl0eSB0aGF0IGNvbnN1bWVzIGl0KSByYXRoZXIgdGhhbiB0aGUgdGhpcmQg cGFydHkgKHdpdGggc29tZW9uZSBlbHNlKS4gVGhhdCBpcyBhIGRyYW1hdGljIGRpZmZlcmVuY2Uu Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90 ZT4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEw LjVwdDtjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7 Y29sb3I6YmxhY2siPkFDTUUgaXMganVzdCBhIHByb3RvY29sOiB3aG8gb3BlcmF0ZXMgdGhlIENB cyBhbmQgdGhlIHJlbGF0aW9uc2hpcCBvZiB0aG9zZSBlbnRpdGllcyB0byB0aGUgY29tbXVuaWNh dGluZyBwYXJ0aWVzIGlzbid0IHByZXNjcmliZWQgYnkgdGhlIGFyY2hpdGVjdHVyZS4gU28gaXQg ZG9lc27igJl0IGVudGFpbCBjZW50cmFsaXppbmcgdGhlIGFjY291bnRhYmlsaXR5DQogaW4gb25l IHBsYWNlIG9yIGRpc3RhbmNpbmcgaXQgZnJvbSB0aGUgZmlyc3QgKG9yIHNlY29uZCkgcGFydHku IE1heWJlIHNvbWUgb2YgdGhlIENTUHMgaW52b2x2ZWQgaW4gU1RJUiB3YW50IHRvIGFjdCBhcyBD QXMgdGhlbXNlbHZlcyAob3IgY29udHJhY3Qgb3V0IGZvciB0aGF0IGFzIGEgd2hpdGUgbGFiZWwg c2VydmljZSksIGluIHdoaWNoIGNhc2Ugd2Ugc2hvdWxkIGhlc2l0YXRlIHRvIGNvbnNpZGVyIHRo ZW0g4oCcdGhpcmQgcGFydGllc+KAnSBhdA0KIGFsbC4gTW9yZW92ZXIsIHdoZXJlIHRoZXJlIGFy ZSBvbmUgb3IgbW9yZSB0aGlyZCBwYXJ0aWVzLCBvciBhIGZlZGVyYXRlZCBjb25zb3J0aXVtIGxp a2UgTGV0J3MgRW5jcnlwdCwgc2F5LCBhY2NvdW50YWJpbGl0eSBpcyBhbHdheXMgbGltaXRlZCBi eSB0aGUgcG9saWNpZXMgdXNlZCB0byBpc3N1ZSBjZXJ0aWZpY2F0ZXMgLSB3aGljaCBjYW4gYmUg ZmF2b3JhYmxlIG9yIHVuZmF2b3JhYmxlIHRvIHZhcmlvdXMgdXNlciBhbmQvb3IgZ292ZXJubWVu dA0KIGludGVyZXN0cywgc3VyZS4gPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Y29s b3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2NvbG9yOmJs YWNrIj5CdXQgdG8gdGhlIGJyb2FkZXIgcXVlc3Rpb24gaGVyZSwgSSB0aGluayB0aGVyZSBhcmUg b3RoZXIgZGlmZmVyZW5jZXMgdGhhdCBtYXR0ZXIsIGJleW9uZCBqdXN0IGFjY291bnRhYmlsaXR5 LiBUaGUgZGVzaWduIGRlY2lzaW9uIHRvIGhhdmUgY2FsbGVycyBlbnJvbGwgdG8gZXN0YWJsaXNo IHRoZWlyIGlkZW50aXRpZXMgcHJpb3IgdG8NCiB0aGUgZmlyc3QgdGltZSB0aGV5IHBsYWNlIGEg c2VjdXJlIGNhbGwgdG8gYW55b25lLCB2ZXJzdXMgZXN0YWJsaXNoaW5nIHRoZWlyIGlkZW50aXR5 IGluIHJlYWwgdGltZSBldmVyeSB0aW1lIHRoZXkgY2FsbCBzb21lb25lIG5ldywgaGFzIGEgaG9z dCBvZiBhcmNoaXRlY3R1cmFsIGltcGxpY2F0aW9ucyBhbmQgYXNzb2NpYXRlZCB0cmFkZS1vZmZz LiBIb3cgbWFueSB0aW1lcyB5b3UgbmVlZCB0byBwcm92ZSB5b3VyIGVmZmVjdGl2ZSBjb250cm9s LA0KIGFuZCB3aGV0aGVyIHlvdSBuZWVkIHRvIHByb3ZlIGl0IHdpdGhpbiBjYWxsIHNldC11cCB0 aW1lLCBjYW4gbGVhZCB0byBzb21lIHByZXR0eSBzdWJzdGFudGlhbGx5IGRpZmZlcmVuY2VzIGlu IGhvdyB0aGUgc3lzdGVtIGJlaGF2ZXMuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Y29sb3I6YmxhY2siPjxv OnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTAuNXB0O2NvbG9yOmJsYWNrIj5XZeKAmXZlIGNvbnNpZGVyZWQgc29t ZXRoaW5nIHNpbWlsYXIgd2hlbiBsb29raW5nIGF0IG1vZGVscyB3aGVyZSB5b3UgbWlnaHQgcmVx dWlyZSBhIG5ldyBzaG9ydC10ZXJtIGNlcnQgZm9yIGV2ZXJ5IHNpZ25lZCBjYWxsIGFzIGFuIGFs dGVybmF0aXZlIHRvIGRvaW5nIHNvbWV0aGluZyBsaWtlIE9DU1Agc3RhcGxpbmcgaW4gU0lQIGZv cg0KIGNyZWRlbnRpYWwgZnJlc2huZXNzIC0gc29tZSBvZiB0aGUgc2FtZSBwcmluY2lwbGVzIHBy b2JhYmx5IGFwcGx5IGhlcmUuIEFueSBzdHJhdGVneSB0aGF0IHJlbGllcyBvbiBjYWxsZWQgcGFy dGllcyByZW1lbWJlcmluZyB0aGUgbGFzdCBjZXJ0IHlvdSB1c2VkIGluY2lkZW50YWxseSBsaW1p dHMgY2VydGFpbiB3YXlzIG9mIHVzaW5nIHNob3J0LXRlcm0gY2VydHMsIGFuZCB0aGF0IGhhcyBi ZWVuIG91ciBvc3RlbnNpYmxlIGRpcmVjdGlvbiBmb3INCiBjZXJ0aWZpY2F0ZSBmcmVzaG5lc3Mg aGVyZSBpbiBTVElSIHNpbmNlIHdlIGdhdmUgdXAgb24gT0NTUCBzdGFwbGluZy4gPG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMC41cHQ7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2NvbG9yOmJsYWNr Ij5BIGxvdCBvZiBzY2FtIGNhbGxzIHRoZXNlIGRheXMgaW1wZXJzb25hdGUgZ292ZXJubWVudCBh Z2VuY2llcyBvciBsYXJnZSBlbnRlcnByaXNlcyAtIGJ1dCB0aG9zZSBlbnRpdGllcyBwbGFjZSBh IGxvdCBvZiBsZWdpdGltYXRlIGNhbGxzIHRvbyBmcm9tIG9uZSBudW1iZXIsIHNvbWV0aW1lcyBh IGxhcmdlIG51bWJlciBvZiBsZWdhbCBjYWxscw0KIGFsbCBhdCBvbmNlLCBhbmQgaW4gYSBDT0ZV IHNjaGVtZSB0aGF0IGNvdWxkIGNhdXNlIHZhc3QgYW1vdW50cyBvZiBzaW11bHRhbmVvdXMgY2Fs bGJhY2tzLiBJbiBzbyBmYXIgYXMgd2UgY2FyZSBhYm91dCB0aGUgcG90ZW50aWFsIHBvc3QtZGlh bCBkZWxheSBkdWUgdG8gdGhlIFJUVCBpbiB0aGUgcmV2ZXJzZSBkaXJlY3Rpb24gYmVmb3JlIGNv bm5lY3RpbmcsIHRob3NlIHByb2JsZW1zIGNvdWxkIGJlIGNvbXBvdW5kZWQgaW4gc29tZSBvZiB0 aGUNCiBoYXJkZXIgdXNlIGNhc2VzIHdlIGhvcGUgdG8gc29sdmUgZm9yLjxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTAuNXB0O2NvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtj b2xvcjpibGFjayI+QXMgQ2hyaXN0ZXIgbWVudGlvbmVkIHRoZXJlIGFyZSBwcm9iYWJseSBzb21l IGhhcmQgZWRnZXMgYXJvdW5kIGZvcmtpbmcgYW5kIGZvcndhcmRpbmcgY2FzZXMgd2hlcmUgYSBj YWxsYmFjayBoYXMgdHJvdWJsZSBmaW5kaW5nIGl0cyB3YXkgaG9tZSBvciB0aGUgd2hvbGUgdGhp bmcgaXMgb3RoZXJ3aXNlIGNvbmZ1c2VkIGJ5IHVuZXhwZWN0ZWQNCiByZXRhcmdldGluZy4gVGhl IGRpZmZlcmVuY2UgYmV0d2VlbiB0aGUgd2F5IFNJUCByZXF1ZXN0cyBhcmUgcm91dGVkIGFuZCBo b3cgUFNUTiBjYWxscy9tZXNzYWdlcyBhcmUgcm91dGVkIGhhcyBhbHdheXMgYmVlbiBhIGNoYWxs ZW5nZSBpbiBjb25zaWRlcmluZyDigJxwdXJlIFNJUOKAnSBjYWxsYmFjayBtZWNoYW5pc21zIGFz IGEgd2F5IHRvIHByb3ZlIG93bmVyc2hpcCBvZiBhIHRlbGVwaG9uZSBudW1iZXIg4oCTIEkga25v dyBpdOKAmXMga2luZCBvZiBhbg0KIGFzc3VtcHRpb24gb2YgdGhlIGRyYWZ0IHRoYXQgdGhpcyBq dXN0IHdvcmtzLCBidXQgSSB3b3JyeSBlbm91Z2ggYWJvdXQgaXQgdGhhdCBJIHRoaW5rIFNNUyBy b3V0YWJpbGl0eSB0ZXN0cyBhcmUgYXQgbGVhc3QgYXMgdmlhYmxlLCBldmVuIHdpdGggdGhlIGxp bWl0YXRpb25zIG9mIFNNUy48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtjb2xvcjpibGFjayI+PG86cD4mbmJz cDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMC41cHQ7Y29sb3I6YmxhY2siPldlIHNvbWV0aW1lcyB0YWxrIGFib3V0ICZxdW90 O2xlZ2l0aW1hdGUgc3Bvb2ZpbmcmcXVvdDsgY2FzZXMgaW4gU1RJUjogY2FzZXMgd2hlcmUgYW4g ZW50aXR5IChhIGRvY3RvciBpcyB0aGUgdXN1YWwgZXhhbXBsZSkgaXMgYXV0aG9yaXplZCB0byB1 c2Ugc29tZW9uZSBlbHNlJ3MgdGVsZXBob25lIG51bWJlci4gVHlwaWNhbGx5IHdlIHdvdWxkIGFk ZHJlc3MNCiB0aGF0IHdpdGggY2VydGlmaWNhdGUgZGVsZWdhdGlvbiwgdW5kZXIgdGhlIFJGQzgy MjYgbW9kZWwuIFRoZXJlIGFyZSB0cmFkZS1vZmZzIHJlbGF0ZWQgdG8gaW1wbGVtZW50aW5nIHRo aXMgd2l0aCBjYWxsYmFja3M6IGlmIGxlZ2l0aW1hdGUgc3Bvb2ZpbmcgbmVlZHMgdG8gYmUgYXV0 aG9yaXplZCBpbiByZWFsIHRpbWUgZHVyaW5nIGNhbGwgc2V0LXVwLCB0aGF0IHJlcXVpcmVzIHRo ZSBkZWxlZ2F0aW5nIGF1dGhvcml0eSB0byBiZSBhdmFpbGFibGUNCiBhbmQgcmVzcG9uc2l2ZSBh dCB0aGUgbmVjZXNzYXJ5IG1vbWVudC4gU29tZXRpbWVzIHRoYXTigJlzIGNvbnZlbmllbnQgYnV0 IHNvbWV0aW1lcyBpdCBtaWdodCBub3QgYmUuPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41 cHQ7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2Nv bG9yOmJsYWNrIj5XZSBjYW4gd29yayB0aHJvdWdoIHRob3NlIHRyYWRlLW9mZnMsIGJ1dCBhdCB0 aGUgZW5kIG9mIHRoZSBkYXkgbXkgYmlnZ2VzdCBjb25jZXJuIGlzIHRoYXQgdGhpcyBpc27igJl0 IG1vdmluZyB0aGUgYmFsbCBpbiB0aGUgcmlnaHQgZGlyZWN0aW9uLiBTSVAgaXNuJ3QgdGhlIG9u bHkgcHJvdG9jb2wgdXNlZCB0byBvcmlnaW5hdGUgcm9ib2NhbGxzLA0KIHNvIHdlJ3ZlIHNwZW50 IHNvbWUgdGltZSBoZXJlIHRoaW5raW5nIGFib3V0IGhvdyB0byBtYWtlIFBBU1Nwb3JUIGFuZCB0 aGUgU1RJUiBhcmNoaXRlY3R1cmUgYXBwbGljYWJsZSB3aGVuIFNJUCBpc24ndCBiZWluZyB1c2Vk IGVuZC10by1lbmQsIGxpa2UgaW4gb3VyIG91dC1vZi1iYW5kIGRyYWZ0LiBJIHRoaW5rIHdlIHdh bnQgZW50aXRpZXMgdGhhdCBkb24ndCBldmVuIHN1cHBvcnQgU0lQIHRvIGJlIGFibGUgdG8gdXNl IFBBU1Nwb3JULiBTbw0KIHdoaWxlIEkgdGhpbmsgYSBTSVAgY2FsbGJhY2sgY291bGQgYmUgYSB3 YXkgdG8gaGVscCBnZXQgY3JlZGVudGlhbHMgZm9yIFNUSVIsIGl0IHNob3VsZG4ndCBiZSB0aGUg b25seSB3YXkgLSBhbmQgdGhlIHNlY3VyaXR5IGFzc29jaWF0aW9uIGl0IGNyZWF0ZXMgc2hvdWxk IGlkZWFsbHkgYmUgYXBwbGljYWJsZSB0byBzaWduaW5nIFBBU1Nwb3JUcyBpbiBub24tU0lQIHVz ZSBjYXNlcy4gVGhpcyBpcyB3aHkgYXQgbGVhc3QgSeKAmXZlIGJlZW4gbG9va2luZw0KIGF0IGEg bW9yZSBnZW5lcmljIGNyZWRlbnRpYWwgYXJjaGl0ZWN0dXJlIGxpa2UgQUNNRS4gSGF2aW5nIHRo ZSBjcmVkZW50aWFscyBqdXN0IGJlIGJhcmUgc2VsZi1zaWduZWQga2V5cyB0aGF0IGFyZSBvbmx5 IHRydXN0ZWQgYmVjYXVzZSBhIHJlY2lwaWVudCBoYXMgc2VlbiB0aGVtIGJlZm9yZSBkb2Vzbid0 IHNlZW0gbGlrZSBhIHByb21pc2luZyBpbmNyZW1lbnRhbCBzdGVwIGluIHRoZSBkaXJlY3Rpb24g d2Ugd2FudCB0byBnby4gSWYgd2UgaGF2ZQ0KIGNlcnRpZmljYXRlcyB0aGF0IHNob3cgZXZlbiBl ZmZlY3RpdmUgcHJvb2Ygb2YgY29udHJvbCBvdmVyIGEgdGVsZXBob25lIG51bWJlciB0aGV5IGNv dWxkIGJlIGxldmVyYWdlZCBmb3Igb3RoZXIgZnVuY3Rpb25zIHRoYW4gYmVhdGluZyBpbXBlcnNv bmF0aW9uIGFzIHdlbGwsIHdoaWNoIHdl4oCZcmUgdGFsa2luZyBhYm91dCBlbHNld2hlcmUgaW4g dGhlIElFVEYuDQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMC41cHQ7Y29sb3I6YmxhY2siPkkgdGhpbmsgdGhlcmUgYXJlIHByb2JhYmx5IHBhdGhzIGhl cmUgdGhhdCBoYXZlIG1hbnkgb2YgdGhlIGRlc2lyYWJsZSBwcm9wZXJ0aWVzIG9mIGEgY2FsbGJh Y2sgc29sdXRpb24gdGhhdCBub25ldGhlbGVzcyBoYXZlIGEgY2xlYXJlciB0cmFuc2l0aW9uIHBh dGggdG8gb3VyIGludGVuZGVkIGFyY2hpdGVjdHVyZSwgYW5kIHdoaWNoIHBlcmhhcHMNCiBkb27i gJl0IGluY3VyIHNvbWUgb2YgdGhlIGNoYWxsZW5nZXMgdGhhdCBhcmlzZSBmcm9tIGRvaW5nIHRo aXMgaW4gcmVhbCB0aW1lLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2NvbG9yOmJs YWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtjb2xvcjpibGFjayI+ Sm9uIFBldGVyc29uPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Y29sb3I6YmxhY2si Pk5ldXN0YXIsIEluYy48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9i b2R5Pg0KPC9odG1sPg0K --_000_D6BF109B1F7425jonpetersonneustarbiz_-- From nobody Wed Mar 21 10:52:40 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3728712E058 for ; Wed, 21 Mar 2018 10:52:39 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HwPKLcJaDgL3 for ; Wed, 21 Mar 2018 10:52:38 -0700 (PDT) Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0748E12E055 for ; Wed, 21 Mar 2018 10:52:38 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id CE443300A10 for ; Wed, 21 Mar 2018 13:52:35 -0400 (EDT) X-Virus-Scanned: amavisd-new at mail.smeinc.net Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id 830cNRseXYv8 for ; Wed, 21 Mar 2018 13:52:35 -0400 (EDT) Received: from dhcp-8e33.meeting.ietf.org (dhcp-8e33.meeting.ietf.org [31.133.142.51]) by mail.smeinc.net (Postfix) with ESMTPSA id D595A300577 for ; Wed, 21 Mar 2018 13:52:34 -0400 (EDT) From: Russ Housley Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\)) Message-Id: <9FCEC48B-464B-4254-813E-57FA35B7307C@vigilsec.com> Date: Wed, 21 Mar 2018 13:52:32 -0400 To: IETF STIR Mail List X-Mailer: Apple Mail (2.3273) Archived-At: Subject: [stir] Note taker and jabber scribe X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 21 Mar 2018 17:52:39 -0000 We need someone to take notes and and another person to be jabber scribe = for the STIR session tomorrow morning. Please volunteer now so that we = do not need to spend valuable meeting time twisting arms. Russ From nobody Wed Mar 21 12:43:27 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E669212785F for ; Wed, 21 Mar 2018 12:43:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.788 X-Spam-Level: X-Spam-Status: No, score=-1.788 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, HTML_MESSAGE=0.001, T_DKIM_INVALID=0.01, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=neutral reason="invalid (public key: not available)" header.d=jdrosen.net Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EdgxzYJaRcn5 for ; Wed, 21 Mar 2018 12:43:23 -0700 (PDT) Received: from ecbiz193.inmotionhosting.com (ecbiz193.inmotionhosting.com [173.205.124.208]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 681321275AB for ; Wed, 21 Mar 2018 12:43:23 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=jdrosen.net ; s=default; h=Content-Type:Cc:To:Subject:Message-ID:Date:From:References: In-Reply-To:MIME-Version:Sender:Reply-To:Content-Transfer-Encoding:Content-ID :Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To: Resent-Cc:Resent-Message-ID:List-Id:List-Help:List-Unsubscribe:List-Subscribe :List-Post:List-Owner:List-Archive; bh=cgU5fG/IDmQwlFqCqcMKl+ywOy5WHdrYiuAVWJ/LmJo=; b=skCLF32DiObIu6aERYk4hoOmqr UUXEXGGUzWQqEabe0aCq7sZub53KdaO4CLBoNoNRWoDvUPuz45WDhhQb8QJzBFNcZllYmf+puAUNq w6bkZKR2S/gM2cHgjXdRmvPISh9ANs4qL7xQogcPmAWcFc/9Ptw6EgPVO/VMUf4cbzxFJjAnlanr4 bF1xK9M9fhaQnxsA6iU0VRSnErCd4JZUdyYfGJYH/8aBkAU56jfcNOI/JrBviscGRgXEYzRQ3gha7 SOBbpQuAzFMAhuJkc3xpKYNWTtplU1zMV+EV1xOFfnsrNLxCyIW8V32fPHyVuXJOHeJp68rQM/znK Rc1lG26g==; Received: from mail-oi0-f45.google.com ([209.85.218.45]:44101) by ecbiz193.inmotionhosting.com with esmtpsa (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128) (Exim 4.89_1) (envelope-from ) id 1eyjdf-003Ajv-Np for stir@ietf.org; Wed, 21 Mar 2018 15:43:21 -0400 Received: by mail-oi0-f45.google.com with SMTP id 23-v6so5339929oir.11 for ; Wed, 21 Mar 2018 12:43:11 -0700 (PDT) X-Gm-Message-State: AElRT7FGtnUXfgjTWjCGHWQ5D5j+s3wSWZBeS36J1q+YZE2rANzcn74s BVXBnttOqzAgRGbesPodyp2hhfRaLZ2ajNlRHQ8= X-Google-Smtp-Source: AG47ELu2oou8fdQ1T1V3UQgpaPcqlSzQGo0Fmf4RE1+SOOCx9p/0A33BISmFeRmsktDjYp9i71VQ/CFBiZ1/DjnNPoA= X-Received: by 10.202.90.138 with SMTP id o132mr11700928oib.11.1521661391419; Wed, 21 Mar 2018 12:43:11 -0700 (PDT) MIME-Version: 1.0 Received: by 10.74.165.132 with HTTP; Wed, 21 Mar 2018 12:43:10 -0700 (PDT) In-Reply-To: References: From: Jonathan Rosenberg Date: Wed, 21 Mar 2018 19:43:10 +0000 X-Gmail-Original-Message-ID: Message-ID: To: Christer Holmberg Cc: "stir@ietf.org" Content-Type: multipart/alternative; boundary="001a113d2bd8b43fd80567f1669b" X-OutGoing-Spam-Status: No, score=-1.0 X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - ecbiz193.inmotionhosting.com X-AntiAbuse: Original Domain - ietf.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - jdrosen.net X-Get-Message-Sender-Via: ecbiz193.inmotionhosting.com: authenticated_id: jdrosen+jdrosen.net/only user confirmed/virtual account not confirmed X-Authenticated-Sender: ecbiz193.inmotionhosting.com: jdrosen@jdrosen.net X-Source: X-Source-Args: X-Source-Dir: Archived-At: Subject: Re: [stir] Comments on draft-stir-callback X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 21 Mar 2018 19:43:26 -0000 --001a113d2bd8b43fd80567f1669b Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable I believe its basically a step towards deployment of the full STIR solution. If you think about it, STIR requires support in the calling SIP network, the terminating network, and requires a phone-number based certificate system they can both connect to. WIth callback, it requires support in the calling SIP network, the terminating network. But thats it - no new certificate authorities required. Since it requires one less dependency - and a significant one at that - it would allow quicker deployment. To your question on "why INVITE"? yes its a hack. Its based on the hypothesis that - given the large number of proxies, SBCs and other gunk that sit in the network, the odds that anything but an INVITE make it through, seemed low. Architecturally i think OPTIONS is the best match but does any SBC pass that? To your specific questions: 1. most forking happens downstream from the proxy of record for the number; since this request is handled by that proxy I dont think this is likely. Can you think of a case were forking would happen upstream from the proxy/agent which owns the number? 2. SDP is mandated because, per above, seems likely SBCs and other middle-boxy SIP things will expect to see it in an INVITE. 3.good catch on receiver sending 200 OK. clearly in such cases a BYE would be generated right away. Thx, Jonathan R. On Wed, Mar 14, 2018 at 7:53 AM, Christer Holmberg < christer.holmberg@ericsson.com> wrote: > Hi, > > > > On a high-level, for a =E2=80=9Ctemporary solution=E2=80=9D, I think this= would take quite > a bit of effort to deploy. Shouldn=E2=80=99t the focus be on getting the > "certificate systems" up and running? > > > > Also, how does this relate to activities like SHAKEN? > > > > > Anyway, assuming this would be needed, I have some comments on the > protocol parts. > > > > First, even though I do consider myself more pragmatic than purist, I > think usage of INVITE, and the usage of error response codes to return th= e > verification result, is a really ugly hack. > > > > Second, there are also some operational issues with using INVITE: > > 1. Good old forking: The callback/verifying INVITE might get forked, > and the terminating agent may receive a non-471/472 response. > 2. SDP: The draft requires SDP in the INVITE, but at the same time > says that it=E2=80=99s not used for anything. If so, why is it mandate= d? Because > offerless INVITEs might get rejected? SDP in INVITE might trigger medi= a > resources etc to be reserved. > 3. Section 7.3 talks about attacks by the agent receiving the > callback/verifying INVITE, but it does not cover the case where the ag= ent > would send a 200 OK response =E2=80=93 which would establish a session= and could > trigger charging. Alternatively, the attacker could remove the option-= tag > and forward the request somewhere. All this without the originally cal= led > party knowing anything. The terminating agent can of course terminate = such > =E2=80=9Ccall" as soon as it gets the 200 OK, but it may already have = triggered > some charging etc. > > > Third, did the authors consider other mechanisms? For example, is there a > reason e.g., SUB/NOT couldn=E2=80=99t be used for this? It would have non= e of the > INVITE issues above (yes, a SUB can also get forked, but the client will > receive NOT from each remote peer). > > > > Finally, it seems like the callback request (whatever SIP method is used) > contains the called party in the From header field. Is there a technical > reason why that is needed, or is it just for convenience? > > > > Thanks! > > > > Regards, > > > > Christer > > _______________________________________________ > stir mailing list > stir@ietf.org > https://www.ietf.org/mailman/listinfo/stir > > --=20 Jonathan Rosenberg, Ph.D. jdrosen@jdrosen.net http://www.jdrosen.net --001a113d2bd8b43fd80567f1669b Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
I believe its basically= a step towards deployment of the full STIR solution. If you think about it= , STIR requires support in the calling SIP network, the terminating network= , and requires a phone-number based certificate system they can both connec= t to. WIth callback, it requires support in the calling SIP network, the te= rminating network. But thats it - no new certificate authorities required. = Since it requires one less dependency - and a significant one at that - it = would allow quicker deployment.

To your question on "why = INVITE"? yes its a hack. Its based on the hypothesis that - given the = large number of proxies, SBCs and other gunk that sit in the network, the o= dds that anything but an INVITE make it through, seemed low. Architecturall= y i think OPTIONS is the best match but does any SBC pass that?

To your specific questions:

1. most forking happens downstre= am from the proxy of record for the number; since this request is handled b= y that proxy I dont think this is likely. Can you think of a case were fork= ing would happen upstream from the proxy/agent which owns the number?
2. SDP is mandated because, per above, seems likely SBCs and other = middle-boxy SIP things will expect to see it in an INVITE.

3.g= ood catch on receiver sending 200 OK. clearly in such cases a BYE would be = generated right away.

Thx,
Jonathan R.
<= div>



On Wed, Mar 14, 2018 at= 7:53 AM, Christer Holmberg <christer.holmberg@ericsson.com> wrote:

Hi,

=C2=A0

On a high-level, for a =E2=80=9Ctempora= ry solution=E2=80=9D, I think this would take quite a bit of effort to depl= oy. Shouldn=E2=80=99t the focus be on getting the "certificate systems" up and running?=C2=A0=

=C2=A0

Also, how does this relate to activitie= s like SHAKEN?

=C2=A0


Anyway, assuming this would be n= eeded, I have some comments on the protocol parts.

=C2=A0

First, even though I do consider myself= more pragmatic than purist, I think usage of INVITE, and the usage of erro= r response codes to return the verification result, is a really ugly hack.<= /u>

=C2=A0

Second, there are also some operational= issues with using INVITE:

  1. Good old forking: The callback/verifying INVITE might get forked, and the = terminating agent may receive a non-471/472 response.=C2=A0
  2. SDP: The draft requires SDP in the INVITE, but at the same time says that = it=E2=80=99s not used for anything. If so, why is it mandated? Because offe= rless INVITEs might get rejected? SDP in INVITE might trigger media resources etc to be = reserved.=C2=A0
  3. Section 7.3 talks about attacks by the agent receiving the callback/verify= ing INVITE, but it does not cover the case where the agent would send a 200= OK response =E2=80=93 which would establish a session and could trigger charg= ing. Alternatively, the attacker could remove the option-tag and forward th= e request somewhere. All this without the originally called party knowing a= nything. The terminating agent can of course terminate such =E2=80=9Ccall" as soon as it gets the 200 OK, but it m= ay already have triggered some charging etc.


Third, = did the authors consider other mechanisms? For example, is the= re a reason e.g., SUB/NOT couldn=E2=80=99t be used for this? It would have none of the INVITE issues above (yes, a SU= B can also get forked, but the client will receive NOT from each remote pee= r).

=C2=A0

Finally= , it seems like the callback request (whatever SIP method is used) contains= the called party in the From header field. Is there a technical reason why= that is needed, or is it just for convenience?=C2=A0<= /p>

=C2=A0

Thanks!

=C2=A0

Regards,

=C2=A0

Christer


_______________________________________________
stir mailing list
stir@ietf.org
https://www.ietf.org/mailman/listinfo/stir




--
--001a113d2bd8b43fd80567f1669b-- From nobody Thu Mar 22 04:57:00 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F10D0127873 for ; Thu, 22 Mar 2018 04:56:58 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.119 X-Spam-Level: X-Spam-Status: No, score=0.119 tagged_above=-999 required=5 tests=[BAYES_40=-0.001, DKIM_SIGNED=0.1, T_DKIM_INVALID=0.01, T_SPF_PERMERROR=0.01] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=neutral reason="invalid (public key: not available)" header.d=standardstrack.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BNvVH0sx9PfM for ; Thu, 22 Mar 2018 04:56:58 -0700 (PDT) Received: from biz221.inmotionhosting.com (biz221.inmotionhosting.com [23.235.223.233]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EF11012420B for ; Thu, 22 Mar 2018 04:56:57 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=standardstrack.com; s=default; h=To:Date:Message-Id:Subject:Mime-Version: Content-Type:From:Sender:Reply-To:Cc:Content-Transfer-Encoding:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=kMX2wDPLfc3eKcfSO+SMW9BQKSiod9iQ9ykd5zusuIo=; b=SBNnwiOwbnQQMwAeC6lUCnJkTB CBmNHS+9ea80IGNfhBdoFExcoBJf8jmHr0d3z8sd8+Z+AeiCsuyO5n7m4ZV+S+vwasVE1vY3u4f70 gjfad7PHZLtgEjsjvb07Bx3LaPREHqvY/I63Q76RrP8ab44kJtFsTAwPktKEuwPtux+o=; Received: from [68.100.196.217] (port=56660 helo=[192.168.10.26]) by biz221.inmotionhosting.com with esmtpsa (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256) (Exim 4.89_1) (envelope-from ) id 1eyypw-00083L-Fp for stir@ietf.org; Thu, 22 Mar 2018 04:56:57 -0700 From: Eric Burger Content-Type: multipart/signed; boundary="Apple-Mail=_C1AAA00E-A201-439D-82FB-5C9E21DA5BEC"; protocol="application/pgp-signature"; micalg=pgp-sha256 Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\)) Message-Id: Date: Thu, 22 Mar 2018 07:56:51 -0400 To: stir@ietf.org X-Mailer: Apple Mail (2.3273) X-OutGoing-Spam-Status: No, score=-1.0 X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - biz221.inmotionhosting.com X-AntiAbuse: Original Domain - ietf.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - standardstrack.com X-Get-Message-Sender-Via: biz221.inmotionhosting.com: authenticated_id: eburger+standardstrack.com/only user confirmed/virtual account not confirmed X-Authenticated-Sender: biz221.inmotionhosting.com: eburger@standardstrack.com X-Source: X-Source-Args: X-Source-Dir: Archived-At: Subject: [stir] Thoughts on SIPCOIN X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 22 Mar 2018 11:56:59 -0000 --Apple-Mail=_C1AAA00E-A201-439D-82FB-5C9E21DA5BEC Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii Would it not be easier for the national authorities to assess a = $0.20/call tax? Kills the robocallers (per the draft), raises needed tax = revenue, and (uh oh) annoys the vast number of regular citizens. I would offer the draft explains why voice call screening (most recently = embodied by GoogleVoice, NoMoRobo, etc.) have 'solved' the problem. = Identical economic approach for far less money. --Apple-Mail=_C1AAA00E-A201-439D-82FB-5C9E21DA5BEC Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP -----BEGIN PGP SIGNATURE----- Comment: GPGTools - http://gpgtools.org iQIzBAEBCAAdFiEEfEc/N7T7IfiAuDEHDDCGh758rskFAlqzmgMACgkQDDCGh758 rslF/w/+MVSyI8lec72Qv6SkXMzieFz6a092tqSRMIqdLaMZfFj5jqzdJR3fePCL vRxa/RCQ9DKi/0tumVdwmftls0uz7e1pSPXJspecBh88W8SR+fUuyM67sK+okVlY JYFR7nxK5920qAIjLHnqi06cIKfqaiFOlcH6N62UnZAe3xsnsCZVXYASMvox3mEo LyQi8ukyyllfb1uclrhs8eI+1LyNQ4sfuWZXl0jNtftWoC0OzwtlBXYn2nZdkmFi 5Daugls6QkM73WqeZEXxywmWk6dXPwQjVmnbcU9df3h2LItBVvPO5S3KyPK1zwP+ sDB8IoQp9hg1jmB7+5rVobwa//aY2fMOFQT4rud14QuiShkIhrX7Eum3lUm8/b/t Qq4qwpdDjeC76H8NWPG+SvjzEwGTVx87LhWEmIBcSJVWAnhxpfyo93YLLjYb5ymy syrgXq7nGSxAG+WJXT2yPH+23j5XyDWIRw7WcBCl8WMEKB0WkGqvt0+rpnORsHF8 f/7PpxCi4aA2Kq9HlO/3RteeQB8J4XnxhLhyetA25hiVXt1RtgWhJYL2yOgvOBhl qmoUgdijvzv6CFrxdGdRYW836y8lRcbFBx5Wm+G9ta7qKJu8Trs6suJvqlOQ5hV6 M7ZdPxCRc2CxG7bTDeKloFqtNP6JoqEUB+PF+SI1DxEJEyEIHAs= =Vt6w -----END PGP SIGNATURE----- --Apple-Mail=_C1AAA00E-A201-439D-82FB-5C9E21DA5BEC-- From nobody Thu Mar 22 05:14:40 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 644DF127873 for ; Thu, 22 Mar 2018 05:14:39 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.491 X-Spam-Level: X-Spam-Status: No, score=-2.491 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, T_DKIM_INVALID=0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=fail (1024-bit key) reason="fail (message has been altered)" header.d=sonusnetworks.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sIKqjwBDiIIl for ; Thu, 22 Mar 2018 05:14:36 -0700 (PDT) Received: from us-smtp-delivery-181.mimecast.com (us-smtp-delivery-181.mimecast.com [216.205.24.181]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C18981242F7 for ; Thu, 22 Mar 2018 05:14:35 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=SonusNetworks.onmicrosoft.com; s=selector1-rbbn-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=mpIeoMt6dmoj8wkvCHpMV1NSxtUUQXL5xMIMvrrOlFs=; b=PiUxhbzM9uY6tMOedK7PXr8UjHDpcOnKfCDHo8GH09GVJsWXkahCU96W6vTyB0YonGydX5YZV9AQSzELvBtza3wjMjj/lJW4zefH8ybiFuD1Aax2CBfz10ZQfs5YQufiAwbAS0PGBITjv4iDaGvtOv4z88EriHXDB9kDI9Ru6OM= Received: from NAM02-BL2-obe.outbound.protection.outlook.com (mail-bl2nam02lp0083.outbound.protection.outlook.com [207.46.163.83]) (Using TLS) by us-smtp-1.mimecast.com with ESMTP id us-mta-179-NeCHxs63OKeG6WZ31SA-4Q-1; Thu, 22 Mar 2018 08:14:33 -0400 Received: from CY4PR03MB3160.namprd03.prod.outlook.com (10.171.245.165) by CY4PR03MB3094.namprd03.prod.outlook.com (10.171.245.147) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.588.14; Thu, 22 Mar 2018 12:14:31 +0000 Received: from CY4PR03MB3160.namprd03.prod.outlook.com ([fe80::34a3:3001:f444:3072]) by CY4PR03MB3160.namprd03.prod.outlook.com ([fe80::34a3:3001:f444:3072%13]) with mapi id 15.20.0588.017; Thu, 22 Mar 2018 12:14:31 +0000 From: "Asveren, Tolga" To: "stir@ietf.org" , "jon.peterson@neustar.biz" Thread-Topic: RFC8224 / Use of a=fingerprint Thread-Index: AdPB1mxgabmHnDCQRziVwwwAjrynyw== Date: Thu, 22 Mar 2018 12:14:31 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [73.29.251.142] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; CY4PR03MB3094; 7:llHMwV0BTExHfsquvQ2Mr85uP6D9bU7qS7WdPWLZhoi/97PRMVK/lqeMa+tf1NsEIs98+AnTvmZVpQVd3Ew6f5Pg4Dsni7xcnU3HFPxWerPSdf3lKTh5ifT0C/c4/MIm/1MGqIcX+eLAgMsxo258Z/avUHzHNUHR5hy/FxvSPvAAbNsL5TE4FF/vENQc4+jKJhUZzlaZSd2X1/w7azrtn7XFHo/wnhWt6d22N4rwSJPTPkoqO8PVDMHluAXQAQlo; 20:8nCvwbuVmveGBHufhsJJozLzqLkNk7E/KldJXRjhk7q69oevOHlqpeyO15B//4cafvzBtDb4ZInMBrnaVgMe9lclYUkBlag5iLlSbBEivryKGxQ78yqPrPqIseGo7orbjta7cOMtC95H0zpizHgS1Q1Xz6P5WBv9FXE8Jgkb6uw= x-ms-office365-filtering-correlation-id: d540d36f-1195-4c3e-0082-08d58fee77b4 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(5600026)(4604075)(3008032)(4534165)(4627221)(201703031133081)(201702281549075)(2017052603328)(7153060)(7193020); SRVR:CY4PR03MB3094; x-ms-traffictypediagnostic: CY4PR03MB3094: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:; x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(5005006)(8121501046)(10201501046)(3231221)(944501327)(52105095)(93006095)(93001095)(3002001)(6041310)(20161123562045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123560045)(20161123558120)(20161123564045)(6072148)(201708071742011); SRVR:CY4PR03MB3094; BCL:0; PCL:0; RULEID:; SRVR:CY4PR03MB3094; x-forefront-prvs: 0619D53754 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(979002)(366004)(39860400002)(396003)(346002)(376002)(39380400002)(199004)(189003)(6506007)(99286004)(478600001)(59450400001)(6436002)(186003)(14454004)(5250100002)(102836004)(33656002)(2501003)(7696005)(53936002)(74316002)(26005)(25786009)(105586002)(97736004)(3660700001)(2906002)(81166006)(81156014)(8936002)(305945005)(55016002)(5660300001)(9686003)(8676002)(7736002)(3280700002)(6116002)(106356001)(316002)(68736007)(2900100001)(86362001)(110136005)(3846002)(66066001)(969003)(989001)(999001)(1009001)(1019001); DIR:OUT; SFP:1101; SCL:1; SRVR:CY4PR03MB3094; H:CY4PR03MB3160.namprd03.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; x-microsoft-antispam-message-info: LJqQ1AUrLW6VQPcirieXuyf+7q1EzTwp0n6Z1d7M3mj84IN5A6i5aNc7xfuIeSl7oSfHMf4Pn9XfIMH6QKCKRjF64HdGe1HUEXN+2NbsG+fw/vMGZOJEB4ziguYL6X/GtwMfLERhsqhOeuCtLMKcopfXBgMENU9tLYy+cUUh9YjSJlG4Ti091M1j3NTi2Uy60rpQsyCDvEo6UDvgI2YKx0TNdZllMyRStFp7hySFkXkRhYjfiwQztyPd6fdv2ULMg7vUqlLdbkvtQyGZMDjNDZ7UwXI3OSiOwCK6jYR495JUyATfHEy6kuRjnjAIJF79+93AERZAwVcpD8pLjLB8xQ== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM MIME-Version: 1.0 X-OriginatorOrg: rbbn.com X-MS-Exchange-CrossTenant-Network-Message-Id: d540d36f-1195-4c3e-0082-08d58fee77b4 X-MS-Exchange-CrossTenant-originalarrivaltime: 22 Mar 2018 12:14:31.5754 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 29a671dc-ed7e-4a54-b1e5-8da1eb495dc3 X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY4PR03MB3094 X-MC-Unique: NeCHxs63OKeG6WZ31SA-4Q-1 Content-Type: text/plain; charset=WINDOWS-1252 Content-Transfer-Encoding: quoted-printable Archived-At: Subject: [stir] RFC8224 / Use of a=fingerprint X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 22 Mar 2018 12:14:39 -0000 A few doubts regarding use of a=3Dfingerprint for RFC8224: 4.1. PASSporT Construction ... o Fourth, if the request contains a Session Description Protocol (SDP) message body and if that SDP contains one or more "a=3Dfingerprint" attributes, then the JSON key "mky" MUST appear with the algorithm(s) and value(s) of the fingerprint attributes (if they differ), following the format given in [RFC8225], Section 5.2.2. 12.1. Protected Request Fields ... When signing a request that contains a fingerprint of keying material in SDP for DTLS-SRTP [RFC5763], this mechanism always provides a signature over that fingerprint. This signature prevents certain classes of impersonation attacks in which an attacker forwards or cut-and-pastes a legitimate request. Although the target of the attack may accept the request, the attacker will be unable to exchange media with the target, as they will not possess a key corresponding to the fingerprint. For example, there are some baiting attacks, launched with the REFER method or through social engineering, where the attacker receives a request from the target and reoriginates it to a third party. These might not be prevented by only a signature over the From, To, and Date, but they could be prevented by securing a fingerprint for DTLS-SRTP. While this is a different form of impersonation than is commonly used for robocalling, ultimately there is little purpose in establishing the identity of the user that originated a SIP request if this assurance is not coupled with a comparable assurance over the contents of the subsequent media communication. This signature also reduces the potential for active eavesdropping attacks against the SIP media. In environments where DTLS-SRTP is unsupported, however, no field is signed and no protections are provided. i- (with lawyer hat on) Which one of these statements prevails? I assume it is the former as it is = using normative language as "MUST" therefore "a=3Dfingerprint" must be used= when it is present. ii- (with technical hat on) Wouldn't the attack vector mentioned in 12.1 be applicable for connection o= riented media, e.g. a=3Dfingerprint in SDP is used while establishing a MSR= P session (and possibly for other cases) as well? Thanks, Tolga From nobody Thu Mar 22 05:22:56 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 753D21242F7 for ; Thu, 22 Mar 2018 05:22:54 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.902 X-Spam-Level: X-Spam-Status: No, score=-1.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zYfHmhtPz5c1 for ; Thu, 22 Mar 2018 05:22:53 -0700 (PDT) Received: from smtp66.iad3a.emailsrvr.com (smtp66.iad3a.emailsrvr.com [173.203.187.66]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2B9901200C5 for ; Thu, 22 Mar 2018 05:22:52 -0700 (PDT) Received: from smtp25.relay.iad3a.emailsrvr.com (localhost [127.0.0.1]) by smtp25.relay.iad3a.emailsrvr.com (SMTP Server) with ESMTP id 514F125495; Thu, 22 Mar 2018 08:22:47 -0400 (EDT) X-Auth-ID: fluffy@iii.ca Received: by smtp25.relay.iad3a.emailsrvr.com (Authenticated sender: fluffy-AT-iii.ca) with ESMTPSA id E554C252F5; Thu, 22 Mar 2018 08:22:46 -0400 (EDT) X-Sender-Id: fluffy@iii.ca Received: from [10.61.212.241] ([UNAVAILABLE]. [173.38.220.61]) (using TLSv1 with cipher DHE-RSA-AES256-SHA) by 0.0.0.0:587 (trex/5.7.12); Thu, 22 Mar 2018 08:22:47 -0400 From: Cullen Jennings Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Date: Thu, 22 Mar 2018 12:22:53 +0000 Message-Id: <7B7C3B70-7DDB-443D-8E63-F9A966726B76@iii.ca> Cc: Jonathan Rosenberg To: stir@ietf.org Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\)) X-Mailer: Apple Mail (2.3124) Archived-At: Subject: [stir] Notification about IPR on SIPCoin X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 22 Mar 2018 12:22:54 -0000 JDR and I are aware of IPR on the draft-rosenberg-stir-sipcoin-00 draft. = We are in the process of getting the proper disclosure done. We were = sort of surprised this had not already happens but will make it happen = ASAP.=20 From nobody Thu Mar 22 09:40:42 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E31651200A0 for ; Thu, 22 Mar 2018 09:40:39 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RAObAFZhxMRp for ; Thu, 22 Mar 2018 09:40:38 -0700 (PDT) Received: from smtp66.ord1c.emailsrvr.com (smtp66.ord1c.emailsrvr.com [108.166.43.66]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 17117124B17 for ; Thu, 22 Mar 2018 09:40:37 -0700 (PDT) Received: from smtp17.relay.ord1c.emailsrvr.com (localhost [127.0.0.1]) by smtp17.relay.ord1c.emailsrvr.com (SMTP Server) with ESMTP id 373CA607AD for ; Thu, 22 Mar 2018 12:40:37 -0400 (EDT) X-Auth-ID: fluffy@iii.ca Received: by smtp17.relay.ord1c.emailsrvr.com (Authenticated sender: fluffy-AT-iii.ca) with ESMTPSA id C30A5607A0 for ; Thu, 22 Mar 2018 12:40:36 -0400 (EDT) X-Sender-Id: fluffy@iii.ca Received: from [10.61.212.241] ([UNAVAILABLE]. [173.38.220.47]) (using TLSv1 with cipher DHE-RSA-AES256-SHA) by 0.0.0.0:587 (trex/5.7.12); Thu, 22 Mar 2018 12:40:37 -0400 From: Cullen Jennings Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Message-Id: <5241C8E9-C886-4373-84ED-CA57D23DA733@iii.ca> Date: Thu, 22 Mar 2018 16:40:43 +0000 To: stir@ietf.org Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\)) X-Mailer: Apple Mail (2.3124) Archived-At: Subject: [stir] Notes from lunch meeting around reducing spam X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 22 Mar 2018 16:40:40 -0000 Huge thanks to Mat Miller for taking notes.=20 SIPCOIN/CALLBACK Side Meeting * Hilton Meeting Rooms 1-4 * 2018-03-22 T 12:15:00 We had 16 people.=20 =3D=3D=3D=3D=3D=3D=3D=3D SIPCOIN =3D=3D=3D=3D=3D=3D=3D=3D DISCLOSURES * There is IPR on SIPCoin draft, will be posted * other prior art (hashcash, for email then phone) - The compute time is too long for typical use OVERVIEW * mint a coin ahead of time * burn a coin at use * posted to a CA for verification by signing block * merkle tree to track history efficiently IETF responsible for determining value - WG? document? - robocallers packing the WG? - not possible/feasible for such an org COMPUTE * bitcoin is competitive mining * assumption is robocalls will use most optimal equip (ASICs) * less compute --> less coins * going with "unresistant" models that favor ASICs is ok - ASICs needed for buy-in - (ots ASCIs, cloud service in Iceland, etc) BREAKING IT * centralized email spam mitigations <-- more centralized services - email spammers: central advertiser contracts with smaller ops, who = contracts with smaller ops et al .... who operates botnets - small players see bits, and money filters down ALTERNATIVES The idea is make the problem an economics one * SIPCoin is one * donations to LE or other foundations rather than community-based, make it regulatory - pay penalties if you're not doing STIR - big carriers cannot legally force downstream to comply (needs to be = regulators) if PASSPOrT goes to edges, then leave it to ends to force compliance = laws cannot: * bond on the phone number holder * who will issue the bond? (financial incentives?) - carrier bonding --> deal with legal but incentivized? - ends bonding --> not sure * problem starts to mitigates with verified source (STIR) - PSTN is the biggest problem - SIP has more leverage * traceability works for post-facto (forensics), but not real-time - may only work for robocalls if high value victim (e.g., Senator)=20 * total solution involves multiple factors (relevance scores) - find the knobs to turn the costs up for spammers CHALLENGES * cost on acquiring numbers vs impersonation * cheap/free gateways also complicate (e.g, Skype, Twilio, Tropo, etc) - banks of numbers --> spammers mixed into legitimate callers * phone calling margins are tightening (??) * all carriers have to offer call blocking services (via FCC) - Opt-in, centralized SIP app analyzing - works really well - e.g., COMCAST -- NoMoRobo - carrier cost is very very low (so far) - still based on unverified reported numbers (spammers can adapt) * honeypots and heuristics interesting - could be an economic disincentive=20 FOLLOW UPS * FCC motivated for solutions * research validation - Barbara van Schewick - Moz Foundation for more contacts * Mark and Jon to help continue it * how to bootstrap? =3D=3D=3D=3D=3D=3D=3D=3D CALLBACK =3D=3D=3D=3D=3D=3D=3D=3D OVERVIEW * callee calls back the caller (no dial) - verify the callers really made the call * each agent builds up cache of certs found QUESTIONS ASSUMPTION * validation on cert (by accepted CA), not on the identity per-se CHALLENGES * if the middle is not SIP (e.g., SS7) - OOB is solving this (designed for smart end-points) - might also trickle into SHAKEN - OOB still assumes 8226 cert * More work on the gateways (SIP terminations) - put something in front-end to do this - also not yet doing STIR (?) - out-of-band made for this issue * deployment ()? - STIR is a set of tools - work in ACME to define proofs et al (for PASSPOrT) - to start, agreement on what the CAs are - this will get shaken out over the next year or so =20 FOLLOW UPS * look for a distributed technique to generate certs that are combined = over the top? From nobody Fri Mar 23 09:07:33 2018 Return-Path: X-Original-To: stir@ietf.org Delivered-To: stir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 262EA127698; Fri, 23 Mar 2018 09:07:32 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: The IESG To: "IETF-Announce" X-Test-IDTracker: no X-IETF-IDTracker: 6.76.0 Auto-Submitted: auto-generated Precedence: bulk CC: adam@nostrum.com, stir@ietf.org, rhousley@vigilsec.com, draft-ietf-stir-rph@ietf.org, stir-chairs@ietf.org, Russ Housley Reply-To: ietf@ietf.org Sender: MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit Message-ID: <152182125214.5865.10620869146444301378.idtracker@ietfa.amsl.com> Date: Fri, 23 Mar 2018 09:07:32 -0700 Archived-At: Subject: [stir] Last Call: (PASSporT Extension for Resource-Priority Authorization) to Proposed Standard X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 23 Mar 2018 16:07:32 -0000 The IESG has received a request from the Secure Telephone Identity Revisited WG (stir) to consider the following document: - 'PASSporT Extension for Resource-Priority Authorization' as Proposed Standard The IESG plans to make a decision in the next few weeks, and solicits final comments on this action. Please send substantive comments to the ietf@ietf.org mailing lists by 2018-04-06. Exceptionally, comments may be sent to iesg@ietf.org instead. In either case, please retain the beginning of the Subject line to allow automated sorting. Abstract This document extends the Secure Telephone Identity Revisited (STIR) Personal Assertion Token (PASSporT) specification defined in [I-D.ietf-stir-passport] to allow the inclusion of cryptographically signed assertions of authorization for the values populated in the Session Initiation Protocol (SIP) 'Resource-Priority' header field, which is used for communications resource prioritization. The file can be obtained via https://datatracker.ietf.org/doc/draft-ietf-stir-rph/ IESG discussion can be tracked via https://datatracker.ietf.org/doc/draft-ietf-stir-rph/ballot/ No IPR declarations have been submitted directly on this I-D. From nobody Sun Mar 25 19:26:26 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5B12B1242EA for ; Sun, 25 Mar 2018 19:26:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=chriswendt-net.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IRdBOZ3YnlAK for ; Sun, 25 Mar 2018 19:26:21 -0700 (PDT) Received: from mail-qk0-x22c.google.com (mail-qk0-x22c.google.com [IPv6:2607:f8b0:400d:c09::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id ACDC2126FDC for ; Sun, 25 Mar 2018 19:26:21 -0700 (PDT) Received: by mail-qk0-x22c.google.com with SMTP id d206so6250863qkb.0 for ; Sun, 25 Mar 2018 19:26:21 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=chriswendt-net.20150623.gappssmtp.com; s=20150623; h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=q3HKn5mFiD/BsnfN9o7MWm3YAyj3ulaFU/YAVJAGepQ=; b=okpvlZnSooM0zwr+ovdu7Qzryy7sRaf4hNfOw0+VCEp8hw2OVyO3PbgZfD/AG1JZCE 2mcn5Q24DzDKR+7ByfT9FXs1ANydb0g4yUIfLs2iU90LFwZlwwTUIJgrdSHAaE1CRRKG sJoubReibB90JNjZl1HiNib421Xfi29HFqP86B2dTB5mCGaT5i79ObxKNMQaRcOqTqYX ZSTzPt6/HnFu1oRjTtn4g+7PNa/fivnEUwA7V2WCUhOYOMVxYBt+fDH6ERRfTe56blil +AXPpa0RNjEl2gW2GUq49AJNklukFMEwddfZpUUiGjle/oJ4ZECAdZ8IBPnXeNw+LREW 3P2Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=q3HKn5mFiD/BsnfN9o7MWm3YAyj3ulaFU/YAVJAGepQ=; b=PQFmFcOUV/14Vljdi2SLtTSg0iiP+7+swUxc+XXlWFnOTC5kOlaRm3RZuxqdssqJu+ xihhePkSV5Ddg0knPCFx1ZLcVXDAl9Wf23u8Lld0Nx07dYIRD9wKINJ09/K/gTLFXgpH GLGwJbtw45UKF0/7HerfCjnDBWgFtFoHiAyXS9Ff3nDCBN00jBW3amxL4YyYVkJaJcda bsjDOUDolXor119d6sCT8Xe1PFHYyRdo4j6Jf4BJLEzqI2JUutWdfx7V/nyoNnfG64ps NwspvpK8wGPwbSO+Bot27hsZy3j+QqcjTSGo2x9ei7sO0qUJaI/fdinU10+bMiAIPy71 mGCA== X-Gm-Message-State: AElRT7FsmLA1kr3zt/BOS3rCS5ijiFF0yJnqD36oe1lbmOiTlQNDcIsK OFWPo+mScN+FmH4uFC9CFuGeJA== X-Google-Smtp-Source: AG47ELvKNZYHahW1jy6IR9GVrQ+OKlx4gfD3vlNZuDP3JAlM7g+xOPdbMw7PG6FOanGzrrVUdjhbOA== X-Received: by 10.55.105.131 with SMTP id e125mr54275941qkc.322.1522031180696; Sun, 25 Mar 2018 19:26:20 -0700 (PDT) Received: from ?IPv6:2601:41:c102:3d1e:b54d:7aad:1aec:7fa2? ([2601:41:c102:3d1e:b54d:7aad:1aec:7fa2]) by smtp.gmail.com with ESMTPSA id c5sm10687021qkf.93.2018.03.25.19.26.19 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Sun, 25 Mar 2018 19:26:19 -0700 (PDT) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 11.2 \(3445.5.20\)) From: Chris Wendt In-Reply-To: Date: Sun, 25 Mar 2018 22:26:10 -0400 Cc: "stir@ietf.org" , "jon.peterson@neustar.biz" Content-Transfer-Encoding: quoted-printable Message-Id: References: To: "Asveren, Tolga" X-Mailer: Apple Mail (2.3445.5.20) Archived-At: Subject: Re: [stir] RFC8224 / Use of a=fingerprint X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 26 Mar 2018 02:26:23 -0000 MSRP is tcp/tls so doesn=E2=80=99t apply to intended the use of = a=3Dfingerprint/mky > On Mar 22, 2018, at 8:14 AM, Asveren, Tolga wrote: >=20 > A few doubts regarding use of a=3Dfingerprint for RFC8224: >=20 > 4.1. PASSporT Construction > .... >=20 > o Fourth, if the request contains a Session Description Protocol > (SDP) message body and if that SDP contains one or more > "a=3Dfingerprint" attributes, then the JSON key "mky" MUST appear > with the algorithm(s) and value(s) of the fingerprint attributes > (if they differ), following the format given in [RFC8225], > Section 5.2.2. >=20 >=20 > 12.1. Protected Request Fields > .... > When signing a request that contains a fingerprint of keying material > in SDP for DTLS-SRTP [RFC5763], this mechanism always provides a > signature over that fingerprint. This signature prevents certain > classes of impersonation attacks in which an attacker forwards or > cut-and-pastes a legitimate request. Although the target of the > attack may accept the request, the attacker will be unable to > exchange media with the target, as they will not possess a key > corresponding to the fingerprint. For example, there are some > baiting attacks, launched with the REFER method or through social > engineering, where the attacker receives a request from the target > and reoriginates it to a third party. These might not be prevented > by only a signature over the From, To, and Date, but they could be > prevented by securing a fingerprint for DTLS-SRTP. While this is a > different form of impersonation than is commonly used for > robocalling, ultimately there is little purpose in establishing the > identity of the user that originated a SIP request if this assurance > is not coupled with a comparable assurance over the contents of the > subsequent media communication. This signature also reduces the > potential for active eavesdropping attacks against the SIP media. = In > environments where DTLS-SRTP is unsupported, however, no field is > signed and no protections are provided. >=20 > i- (with lawyer hat on) > Which one of these statements prevails? I assume it is the former as = it is using normative language as "MUST" therefore "a=3Dfingerprint" = must be used when it is present. >=20 > ii- (with technical hat on) > Wouldn't the attack vector mentioned in 12.1 be applicable for = connection oriented media, e.g. a=3Dfingerprint in SDP is used while = establishing a MSRP session (and possibly for other cases) as well? >=20 > Thanks, > Tolga >=20 > _______________________________________________ > stir mailing list > stir@ietf.org > https://www.ietf.org/mailman/listinfo/stir From nobody Sun Mar 25 20:53:00 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EB362120727 for ; Sun, 25 Mar 2018 20:52:57 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.49 X-Spam-Level: X-Spam-Status: No, score=-2.49 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, T_DKIM_INVALID=0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=fail (1024-bit key) reason="fail (body has been altered)" header.d=sonusnetworks.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9VN2FcMh8fZz for ; Sun, 25 Mar 2018 20:52:55 -0700 (PDT) Received: from us-smtp-delivery-181.mimecast.com (us-smtp-delivery-181.mimecast.com [216.205.24.181]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D59D21200A0 for ; Sun, 25 Mar 2018 20:52:54 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=SonusNetworks.onmicrosoft.com; s=selector1-rbbn-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=fM9TkfWCc8/ak/hwPEisA1j219bMLQxEU1wOdzXYU1I=; b=lxI9tgqKBGrp3BEfGkjcdSe8LH5qJR4BeQpcQUojECBJQCnDsrw9lKOGHP2seAyBQ9uMgDSej7pviz7ltlbRmV0qoiCCZUk1lU1Vh3EvqRPD6CoyjPPG7EuYeei/IsNhyjdlpn8Dd9Uv00Qggp7p0OSqSS9rBIWlnvzBS/aKTDw= Received: from NAM02-BL2-obe.outbound.protection.outlook.com (mail-bl2nam02lp0083.outbound.protection.outlook.com [207.46.163.83]) (Using TLS) by us-smtp-1.mimecast.com with ESMTP id us-mta-239-hiu6oiAFM7u-lUPfwzcqsg-1; Sun, 25 Mar 2018 23:52:52 -0400 Received: from CY4PR03MB3160.namprd03.prod.outlook.com (10.171.245.165) by CY4SPR00MB2510.namprd03.prod.outlook.com (10.175.82.23) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.609.12; Mon, 26 Mar 2018 03:52:50 +0000 Received: from CY4PR03MB3160.namprd03.prod.outlook.com ([fe80::d8f0:24ac:4222:be23]) by CY4PR03MB3160.namprd03.prod.outlook.com ([fe80::d8f0:24ac:4222:be23%13]) with mapi id 15.20.0609.012; Mon, 26 Mar 2018 03:52:50 +0000 From: "Asveren, Tolga" To: Chris Wendt CC: "stir@ietf.org" , "jon.peterson@neustar.biz" Thread-Topic: [stir] RFC8224 / Use of a=fingerprint Thread-Index: AdPB1mxgabmHnDCQRziVwwwAjrynywC02EcAAALue6A= Date: Mon, 26 Mar 2018 03:52:50 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [73.29.251.142] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; CY4SPR00MB2510; 7:M5bQOXM2qrqj9UpeV0w57ep2NeiC+ac0rNHNuf/ouiv52Kt4SX24QgvQ9DJnnY20nx41313sO2tnthkNQH6HylZElqJs3uvS5Anwwk0niFpswIw9hjyZBMo11nclFL+dL6RsGVrxdVsA810iayRQeHdvXROSSVqmxNP3Oqe6/CEjnZ5WDm3W/RESQxqiA5YB9hpnudDQQdweVd9OHzOZucqZbIOWWbAsacDZZ8omLCgT+8a5lLHy7RM/g33cMuTH; 20:AsiLwIK/2tKB8EM1s+6G70QO5R2Q4UAjnH1Pnb55Na/HutMyBEXLF+sJXA7vJRtO6fEVEqCTwbtwLW71XnOwlmSrMAm1ykttpAUops/oCY52mLtd6lQN1iKc025aEtJwsgckk5X8FYlKykTYXUGGjtdSNmsZA8+zD+Z55j1cQ8I= x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: 44111a0b-02e9-40f9-8af9-08d592cd0b90 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(5600026)(4604075)(3008032)(4534165)(4627221)(201703031133081)(201702281549075)(2017052603328)(7153060)(7193020); SRVR:CY4SPR00MB2510; x-ms-traffictypediagnostic: CY4SPR00MB2510: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(28532068793085)(21748063052155); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(5005006)(8121501046)(3231221)(944501327)(52105095)(93006095)(93001095)(3002001)(10201501046)(6041310)(20161123562045)(20161123558120)(20161123564045)(20161123560045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(6072148)(201708071742011); SRVR:CY4SPR00MB2510; BCL:0; PCL:0; RULEID:; SRVR:CY4SPR00MB2510; x-forefront-prvs: 06237E4555 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(39380400002)(346002)(396003)(39860400002)(376002)(366004)(189003)(199004)(54906003)(6436002)(2906002)(6916009)(106356001)(6246003)(478600001)(5250100002)(86362001)(74316002)(8936002)(7736002)(81156014)(8676002)(3846002)(790700001)(6116002)(68736007)(14454004)(81166006)(97736004)(53936002)(105586002)(5660300001)(966005)(7696005)(11346002)(316002)(3660700001)(25786009)(33656002)(3280700002)(186003)(76176011)(53546011)(6506007)(66066001)(4326008)(446003)(99286004)(2900100001)(59450400001)(236005)(102836004)(19609705001)(55016002)(606006)(9686003)(26005)(229853002)(6306002)(54896002); DIR:OUT; SFP:1101; SCL:1; SRVR:CY4SPR00MB2510; H:CY4PR03MB3160.namprd03.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; x-microsoft-antispam-message-info: VDoYU2RPCgV9eMvOCGIt6GOSDwg9t+itjcKdsZ47/gys8dPIiAGiLnSFcSKwFu1KWdowpEVytOAzG2ae7T53ssxRkStsiSegQ3sm6dSjZ0G0kyf1LV1Pe2L89q6Vn2BZAnXlGZUR0mz0zKdDErwSwmk9AQ/W3NL9xwWNdTyt+TFryXsPPd60YoyrlRsLBS7RATvlqfVuYn8cVV2JSNAyJU/fPolT1va+qz6O0tPElY2a9f1o+TvcwtFx+fJxcZERAD66RxV/jyREG+E/T3IZ3MyQnCaa0WJLtdQIX9kScYJZqMTNmy7UGyflW68Jc3F++you6KZLA8/C8Dm9BByT7w== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM MIME-Version: 1.0 X-OriginatorOrg: rbbn.com X-MS-Exchange-CrossTenant-Network-Message-Id: 44111a0b-02e9-40f9-8af9-08d592cd0b90 X-MS-Exchange-CrossTenant-originalarrivaltime: 26 Mar 2018 03:52:50.1672 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 29a671dc-ed7e-4a54-b1e5-8da1eb495dc3 X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY4SPR00MB2510 X-MC-Unique: hiu6oiAFM7u-lUPfwzcqsg-1 Content-Type: multipart/alternative; boundary="_000_CY4PR03MB316004D9C8DC50D82D8DC730A5AD0CY4PR03MB3160namp_" Archived-At: Subject: Re: [stir] RFC8224 / Use of a=fingerprint X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 26 Mar 2018 03:52:58 -0000 --_000_CY4PR03MB316004D9C8DC50D82D8DC730A5AD0CY4PR03MB3160namp_ Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: base64 Q291bGQgeW91IGVsYWJvcmF0ZSBtb3JlIHdoeSBpdCBpcyBub3QgYXBwbGljYWJsZT8gVXNlIG9m IGE9ZmluZ2VycHJpbnQgZm9yIE1TUlAgaXMgcG9zc2libGUgcGVyIFJGQ1JGQzQ5NzU6DQoNCjE0 LjQuICBVc2luZyBUTFMgaW4gUGVlci10by1QZWVyIE1vZGUNCg0KICAgVExTIGNhbiBiZSB1c2Vk IHdpdGggYSBzZWxmLXNpZ25lZCBjZXJ0aWZpY2F0ZSBhcyBsb25nIGFzIHRoZXJlIGlzIGENCiAg IG1lY2hhbmlzbSBmb3IgYm90aCBzaWRlcyB0byBhc2NlcnRhaW4gdGhhdCB0aGUgb3RoZXIgc2lk ZSB1c2VkIHRoZQ0KICAgY29ycmVjdCBjZXJ0aWZpY2F0ZS4gIFdoZW4gdXNlZCB3aXRoIFNEUCBh bmQgU0lQLCB0aGUgY29ycmVjdA0KICAgY2VydGlmaWNhdGUgY2FuIGJlIHZlcmlmaWVkIGJ5IHBh c3NpbmcgYSBmaW5nZXJwcmludCBvZiB0aGUNCiAgIGNlcnRpZmljYXRlIGluIHRoZSBTRFAgYW5k IGVuc3VyaW5nIHRoYXQgdGhlIFNEUCBoYXMgc3VpdGFibGUNCiAgIGludGVncml0eSBwcm90ZWN0 aW9uLiAgV2hlbiBTSVAgaXMgdXNlZCB0byB0cmFuc3BvcnQgdGhlIFNEUCwgdGhlDQogICBpbnRl Z3JpdHkgY2FuIGJlIHByb3ZpZGVkIGJ5IHRoZSBTSVAgSWRlbnRpdHkgbWVjaGFuaXNtIFsxN10u ICBUaGUNCiAgIHJlc3Qgb2YgdGhpcyBzZWN0aW9uIGRlc2NyaWJlcyB0aGUgZGV0YWlscyBvZiB0 aGlzIGFwcHJvYWNoLg0KDQpUaGFua3MsDQpUb2xnYQ0KDQpGcm9tOiBDaHJpcyBXZW5kdCA8Y2hy aXMtaWV0ZkBjaHJpc3dlbmR0Lm5ldD4NClNlbnQ6IFN1bmRheSwgTWFyY2ggMjUsIDIwMTggMTA6 MjYgUE0NClRvOiBBc3ZlcmVuLCBUb2xnYSA8dGFzdmVyZW5AcmJibi5jb20+DQpDYzogc3RpckBp ZXRmLm9yZzsgam9uLnBldGVyc29uQG5ldXN0YXIuYml6DQpTdWJqZWN0OiBSZTogW3N0aXJdIFJG QzgyMjQgLyBVc2Ugb2YgYT1maW5nZXJwcmludA0KDQpfX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fXw0KTk9USUNFOiBUaGlzIGVtYWlsIHdhcyByZWNlaXZlZCBmcm9tIGFuIEVYVEVSTkFM IHNlbmRlcg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCg0KTVNSUCBpcyB0Y3Av dGxzIHNvIGRvZXNu4oCZdCBhcHBseSB0byBpbnRlbmRlZCB0aGUgdXNlIG9mIGE9ZmluZ2VycHJp bnQvbWt5DQoNCj4gT24gTWFyIDIyLCAyMDE4LCBhdCA4OjE0IEFNLCBBc3ZlcmVuLCBUb2xnYSA8 dGFzdmVyZW5AcmJibi5jb208bWFpbHRvOnRhc3ZlcmVuQHJiYm4uY29tPj4gd3JvdGU6DQo+DQo+ IEEgZmV3IGRvdWJ0cyByZWdhcmRpbmcgdXNlIG9mIGE9ZmluZ2VycHJpbnQgZm9yIFJGQzgyMjQ6 DQo+DQo+IDQuMS4gUEFTU3BvclQgQ29uc3RydWN0aW9uDQo+IC4uLi4NCj4NCj4gbyBGb3VydGgs IGlmIHRoZSByZXF1ZXN0IGNvbnRhaW5zIGEgU2Vzc2lvbiBEZXNjcmlwdGlvbiBQcm90b2NvbA0K PiAoU0RQKSBtZXNzYWdlIGJvZHkgYW5kIGlmIHRoYXQgU0RQIGNvbnRhaW5zIG9uZSBvciBtb3Jl DQo+ICJhPWZpbmdlcnByaW50IiBhdHRyaWJ1dGVzLCB0aGVuIHRoZSBKU09OIGtleSAibWt5IiBN VVNUIGFwcGVhcg0KPiB3aXRoIHRoZSBhbGdvcml0aG0ocykgYW5kIHZhbHVlKHMpIG9mIHRoZSBm aW5nZXJwcmludCBhdHRyaWJ1dGVzDQo+IChpZiB0aGV5IGRpZmZlciksIGZvbGxvd2luZyB0aGUg Zm9ybWF0IGdpdmVuIGluIFtSRkM4MjI1XSwNCj4gU2VjdGlvbiA1LjIuMi4NCj4NCj4NCj4gMTIu MS4gUHJvdGVjdGVkIFJlcXVlc3QgRmllbGRzDQo+IC4uLi4NCj4gV2hlbiBzaWduaW5nIGEgcmVx dWVzdCB0aGF0IGNvbnRhaW5zIGEgZmluZ2VycHJpbnQgb2Yga2V5aW5nIG1hdGVyaWFsDQo+IGlu IFNEUCBmb3IgRFRMUy1TUlRQIFtSRkM1NzYzXSwgdGhpcyBtZWNoYW5pc20gYWx3YXlzIHByb3Zp ZGVzIGENCj4gc2lnbmF0dXJlIG92ZXIgdGhhdCBmaW5nZXJwcmludC4gVGhpcyBzaWduYXR1cmUg cHJldmVudHMgY2VydGFpbg0KPiBjbGFzc2VzIG9mIGltcGVyc29uYXRpb24gYXR0YWNrcyBpbiB3 aGljaCBhbiBhdHRhY2tlciBmb3J3YXJkcyBvcg0KPiBjdXQtYW5kLXBhc3RlcyBhIGxlZ2l0aW1h dGUgcmVxdWVzdC4gQWx0aG91Z2ggdGhlIHRhcmdldCBvZiB0aGUNCj4gYXR0YWNrIG1heSBhY2Nl cHQgdGhlIHJlcXVlc3QsIHRoZSBhdHRhY2tlciB3aWxsIGJlIHVuYWJsZSB0bw0KPiBleGNoYW5n ZSBtZWRpYSB3aXRoIHRoZSB0YXJnZXQsIGFzIHRoZXkgd2lsbCBub3QgcG9zc2VzcyBhIGtleQ0K PiBjb3JyZXNwb25kaW5nIHRvIHRoZSBmaW5nZXJwcmludC4gRm9yIGV4YW1wbGUsIHRoZXJlIGFy ZSBzb21lDQo+IGJhaXRpbmcgYXR0YWNrcywgbGF1bmNoZWQgd2l0aCB0aGUgUkVGRVIgbWV0aG9k IG9yIHRocm91Z2ggc29jaWFsDQo+IGVuZ2luZWVyaW5nLCB3aGVyZSB0aGUgYXR0YWNrZXIgcmVj ZWl2ZXMgYSByZXF1ZXN0IGZyb20gdGhlIHRhcmdldA0KPiBhbmQgcmVvcmlnaW5hdGVzIGl0IHRv IGEgdGhpcmQgcGFydHkuIFRoZXNlIG1pZ2h0IG5vdCBiZSBwcmV2ZW50ZWQNCj4gYnkgb25seSBh IHNpZ25hdHVyZSBvdmVyIHRoZSBGcm9tLCBUbywgYW5kIERhdGUsIGJ1dCB0aGV5IGNvdWxkIGJl DQo+IHByZXZlbnRlZCBieSBzZWN1cmluZyBhIGZpbmdlcnByaW50IGZvciBEVExTLVNSVFAuIFdo aWxlIHRoaXMgaXMgYQ0KPiBkaWZmZXJlbnQgZm9ybSBvZiBpbXBlcnNvbmF0aW9uIHRoYW4gaXMg Y29tbW9ubHkgdXNlZCBmb3INCj4gcm9ib2NhbGxpbmcsIHVsdGltYXRlbHkgdGhlcmUgaXMgbGl0 dGxlIHB1cnBvc2UgaW4gZXN0YWJsaXNoaW5nIHRoZQ0KPiBpZGVudGl0eSBvZiB0aGUgdXNlciB0 aGF0IG9yaWdpbmF0ZWQgYSBTSVAgcmVxdWVzdCBpZiB0aGlzIGFzc3VyYW5jZQ0KPiBpcyBub3Qg Y291cGxlZCB3aXRoIGEgY29tcGFyYWJsZSBhc3N1cmFuY2Ugb3ZlciB0aGUgY29udGVudHMgb2Yg dGhlDQo+IHN1YnNlcXVlbnQgbWVkaWEgY29tbXVuaWNhdGlvbi4gVGhpcyBzaWduYXR1cmUgYWxz byByZWR1Y2VzIHRoZQ0KPiBwb3RlbnRpYWwgZm9yIGFjdGl2ZSBlYXZlc2Ryb3BwaW5nIGF0dGFj a3MgYWdhaW5zdCB0aGUgU0lQIG1lZGlhLiBJbg0KPiBlbnZpcm9ubWVudHMgd2hlcmUgRFRMUy1T UlRQIGlzIHVuc3VwcG9ydGVkLCBob3dldmVyLCBubyBmaWVsZCBpcw0KPiBzaWduZWQgYW5kIG5v IHByb3RlY3Rpb25zIGFyZSBwcm92aWRlZC4NCj4NCj4gaS0gKHdpdGggbGF3eWVyIGhhdCBvbikN Cj4gV2hpY2ggb25lIG9mIHRoZXNlIHN0YXRlbWVudHMgcHJldmFpbHM/IEkgYXNzdW1lIGl0IGlz IHRoZSBmb3JtZXIgYXMgaXQgaXMgdXNpbmcgbm9ybWF0aXZlIGxhbmd1YWdlIGFzICJNVVNUIiB0 aGVyZWZvcmUgImE9ZmluZ2VycHJpbnQiIG11c3QgYmUgdXNlZCB3aGVuIGl0IGlzIHByZXNlbnQu DQo+DQo+IGlpLSAod2l0aCB0ZWNobmljYWwgaGF0IG9uKQ0KPiBXb3VsZG4ndCB0aGUgYXR0YWNr IHZlY3RvciBtZW50aW9uZWQgaW4gMTIuMSBiZSBhcHBsaWNhYmxlIGZvciBjb25uZWN0aW9uIG9y aWVudGVkIG1lZGlhLCBlLmcuIGE9ZmluZ2VycHJpbnQgaW4gU0RQIGlzIHVzZWQgd2hpbGUgZXN0 YWJsaXNoaW5nIGEgTVNSUCBzZXNzaW9uIChhbmQgcG9zc2libHkgZm9yIG90aGVyIGNhc2VzKSBh cyB3ZWxsPw0KPg0KPiBUaGFua3MsDQo+IFRvbGdhDQo+DQo+IF9fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+IHN0aXIgbWFpbGluZyBsaXN0DQo+IHN0aXJA aWV0Zi5vcmc8bWFpbHRvOnN0aXJAaWV0Zi5vcmc+DQo+IGh0dHBzOi8vd3d3LmlldGYub3JnL21h aWxtYW4vbGlzdGluZm8vc3Rpcg0K --_000_CY4PR03MB316004D9C8DC50D82D8DC730A5AD0CY4PR03MB3160namp_ Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPCEtLVtp ZiAhbXNvXT48c3R5bGU+dlw6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kb1w6KiB7 YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kd1w6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0 I1ZNTCk7fQ0KLnNoYXBlIHtiZWhhdmlvcjp1cmwoI2RlZmF1bHQjVk1MKTt9DQo8L3N0eWxlPjwh W2VuZGlmXS0tPjxzdHlsZT48IS0tDQovKiBGb250IERlZmluaXRpb25zICovDQpAZm9udC1mYWNl DQoJe2ZvbnQtZmFtaWx5OiJDYW1icmlhIE1hdGgiOw0KCXBhbm9zZS0xOjIgNCA1IDMgNSA0IDYg MyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDYWxpYnJpOw0KCXBhbm9zZS0xOjIg MTUgNSAyIDIgMiA0IDMgMiA0O30NCi8qIFN0eWxlIERlZmluaXRpb25zICovDQpwLk1zb05vcm1h bCwgbGkuTXNvTm9ybWFsLCBkaXYuTXNvTm9ybWFsDQoJe21hcmdpbjowaW47DQoJbWFyZ2luLWJv dHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmki LHNhbnMtc2VyaWY7fQ0KYTpsaW5rLCBzcGFuLk1zb0h5cGVybGluaw0KCXttc28tc3R5bGUtcHJp b3JpdHk6OTk7DQoJY29sb3I6Ymx1ZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCmE6 dmlzaXRlZCwgc3Bhbi5Nc29IeXBlcmxpbmtGb2xsb3dlZA0KCXttc28tc3R5bGUtcHJpb3JpdHk6 OTk7DQoJY29sb3I6cHVycGxlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KcC5tc29u b3JtYWwwLCBsaS5tc29ub3JtYWwwLCBkaXYubXNvbm9ybWFsMA0KCXttc28tc3R5bGUtbmFtZTpt c29ub3JtYWw7DQoJbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87DQoJbWFyZ2luLXJpZ2h0OjBpbjsN Cgltc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzsNCgltYXJnaW4tbGVmdDowaW47DQoJZm9udC1z aXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQpzcGFuLkVt YWlsU3R5bGUxOQ0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1yZXBseTsNCglmb250LWZhbWls eToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjp3aW5kb3d0ZXh0O30NCi5Nc29DaHBEZWZh dWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7fQ0K QHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6OC41aW4gMTEuMGluOw0KCW1hcmdpbjoxLjBpbiAx LjBpbiAxLjBpbiAxLjBpbjt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rpb24x O30NCi0tPjwvc3R5bGU+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWRlZmF1bHRz IHY6ZXh0PSJlZGl0IiBzcGlkbWF4PSIxMDI2IiAvPg0KPC94bWw+PCFbZW5kaWZdLS0+PCEtLVtp ZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWxheW91dCB2OmV4dD0iZWRpdCI+DQo8bzppZG1h cCB2OmV4dD0iZWRpdCIgZGF0YT0iMSIgLz4NCjwvbzpzaGFwZWxheW91dD48L3htbD48IVtlbmRp Zl0tLT4NCjwvaGVhZD4NCjxib2R5IGxhbmc9IkVOLVVTIiBsaW5rPSJibHVlIiB2bGluaz0icHVy cGxlIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5D b3VsZCB5b3UgZWxhYm9yYXRlIG1vcmUgd2h5IGl0IGlzIG5vdCBhcHBsaWNhYmxlPyBVc2Ugb2Yg YT1maW5nZXJwcmludCBmb3IgTVNSUCBpcyBwb3NzaWJsZSBwZXIgUkZDUkZDNDk3NTo8bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+MTQuNC4mbmJzcDsgVXNpbmcgVExTIGluIFBlZXItdG8tUGVlciBN b2RlPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOyZuYnNwOyBUTFMgY2FuIGJlIHVzZWQg d2l0aCBhIHNlbGYtc2lnbmVkIGNlcnRpZmljYXRlIGFzIGxvbmcgYXMgdGhlcmUgaXMgYTxvOnA+ PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7Jm5ic3A7IG1lY2hhbmlzbSBm b3IgYm90aCBzaWRlcyB0byBhc2NlcnRhaW4gdGhhdCB0aGUgb3RoZXIgc2lkZSB1c2VkIHRoZTxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7Jm5ic3A7IGNvcnJlY3Qg Y2VydGlmaWNhdGUuJm5ic3A7IFdoZW4gdXNlZCB3aXRoIFNEUCBhbmQgU0lQLCB0aGUgY29ycmVj dDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7Jm5ic3A7IGNlcnRp ZmljYXRlIGNhbiBiZSB2ZXJpZmllZCBieSBwYXNzaW5nIGEgZmluZ2VycHJpbnQgb2YgdGhlPG86 cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDsmbmJzcDsgY2VydGlmaWNh dGUgaW4gdGhlIFNEUCBhbmQgZW5zdXJpbmcgdGhhdCB0aGUgU0RQIGhhcyBzdWl0YWJsZTxvOnA+ PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7Jm5ic3A7IGludGVncml0eSBw cm90ZWN0aW9uLiZuYnNwOyBXaGVuIFNJUCBpcyB1c2VkIHRvIHRyYW5zcG9ydCB0aGUgU0RQLCB0 aGU8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOyZuYnNwOyBpbnRl Z3JpdHkgY2FuIGJlIHByb3ZpZGVkIGJ5IHRoZSBTSVAgSWRlbnRpdHkgbWVjaGFuaXNtIFsxN10u Jm5ic3A7IFRoZTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7Jm5i c3A7IHJlc3Qgb2YgdGhpcyBzZWN0aW9uIGRlc2NyaWJlcyB0aGUgZGV0YWlscyBvZiB0aGlzIGFw cHJvYWNoLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5UaGFua3MsPG86cD48L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj5Ub2xnYTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3Jk ZXItbGVmdDpzb2xpZCBibHVlIDEuNXB0O3BhZGRpbmc6MGluIDBpbiAwaW4gNC4wcHQiPg0KPGRp dj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0UxRTFFMSAxLjBw dDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPkZy b206PC9iPiBDaHJpcyBXZW5kdCAmbHQ7Y2hyaXMtaWV0ZkBjaHJpc3dlbmR0Lm5ldCZndDsgPGJy Pg0KPGI+U2VudDo8L2I+IFN1bmRheSwgTWFyY2ggMjUsIDIwMTggMTA6MjYgUE08YnI+DQo8Yj5U bzo8L2I+IEFzdmVyZW4sIFRvbGdhICZsdDt0YXN2ZXJlbkByYmJuLmNvbSZndDs8YnI+DQo8Yj5D Yzo8L2I+IHN0aXJAaWV0Zi5vcmc7IGpvbi5wZXRlcnNvbkBuZXVzdGFyLmJpejxicj4NCjxiPlN1 YmplY3Q6PC9iPiBSZTogW3N0aXJdIFJGQzgyMjQgLyBVc2Ugb2YgYT1maW5nZXJwcmludDxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5i c3A7PC9vOnA+PC9wPg0KPGRpdiBjbGFzcz0iTXNvTm9ybWFsIiBhbGlnbj0iY2VudGVyIiBzdHls ZT0idGV4dC1hbGlnbjpjZW50ZXIiPg0KPGhyIHNpemU9IjIiIHdpZHRoPSIxMDAlIiBhbGlnbj0i Y2VudGVyIj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Tk9USUNFOiBUaGlzIGVtYWls IHdhcyByZWNlaXZlZCBmcm9tIGFuIEVYVEVSTkFMIHNlbmRlcjxvOnA+PC9vOnA+PC9wPg0KPGRp diBjbGFzcz0iTXNvTm9ybWFsIiBhbGlnbj0iY2VudGVyIiBzdHlsZT0idGV4dC1hbGlnbjpjZW50 ZXIiPg0KPGhyIHNpemU9IjIiIHdpZHRoPSIxMDAlIiBhbGlnbj0iY2VudGVyIj4NCjwvZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PGJyPg0KTVNSUCBpcyB0Y3AvdGxzIHNvIGRvZXNu4oCZdCBh cHBseSB0byBpbnRlbmRlZCB0aGUgdXNlIG9mIGE9ZmluZ2VycHJpbnQvbWt5PGJyPg0KPGJyPg0K Jmd0OyBPbiBNYXIgMjIsIDIwMTgsIGF0IDg6MTQgQU0sIEFzdmVyZW4sIFRvbGdhICZsdDs8YSBo cmVmPSJtYWlsdG86dGFzdmVyZW5AcmJibi5jb20iPnRhc3ZlcmVuQHJiYm4uY29tPC9hPiZndDsg d3JvdGU6PGJyPg0KJmd0OyA8YnI+DQomZ3Q7IEEgZmV3IGRvdWJ0cyByZWdhcmRpbmcgdXNlIG9m IGE9ZmluZ2VycHJpbnQgZm9yIFJGQzgyMjQ6PGJyPg0KJmd0OyA8YnI+DQomZ3Q7IDQuMS4gUEFT U3BvclQgQ29uc3RydWN0aW9uPGJyPg0KJmd0OyAuLi4uPGJyPg0KJmd0OyA8YnI+DQomZ3Q7IG8g Rm91cnRoLCBpZiB0aGUgcmVxdWVzdCBjb250YWlucyBhIFNlc3Npb24gRGVzY3JpcHRpb24gUHJv dG9jb2w8YnI+DQomZ3Q7IChTRFApIG1lc3NhZ2UgYm9keSBhbmQgaWYgdGhhdCBTRFAgY29udGFp bnMgb25lIG9yIG1vcmU8YnI+DQomZ3Q7ICZxdW90O2E9ZmluZ2VycHJpbnQmcXVvdDsgYXR0cmli dXRlcywgdGhlbiB0aGUgSlNPTiBrZXkgJnF1b3Q7bWt5JnF1b3Q7IE1VU1QgYXBwZWFyPGJyPg0K Jmd0OyB3aXRoIHRoZSBhbGdvcml0aG0ocykgYW5kIHZhbHVlKHMpIG9mIHRoZSBmaW5nZXJwcmlu dCBhdHRyaWJ1dGVzPGJyPg0KJmd0OyAoaWYgdGhleSBkaWZmZXIpLCBmb2xsb3dpbmcgdGhlIGZv cm1hdCBnaXZlbiBpbiBbUkZDODIyNV0sPGJyPg0KJmd0OyBTZWN0aW9uIDUuMi4yLjxicj4NCiZn dDsgPGJyPg0KJmd0OyA8YnI+DQomZ3Q7IDEyLjEuIFByb3RlY3RlZCBSZXF1ZXN0IEZpZWxkczxi cj4NCiZndDsgLi4uLjxicj4NCiZndDsgV2hlbiBzaWduaW5nIGEgcmVxdWVzdCB0aGF0IGNvbnRh aW5zIGEgZmluZ2VycHJpbnQgb2Yga2V5aW5nIG1hdGVyaWFsPGJyPg0KJmd0OyBpbiBTRFAgZm9y IERUTFMtU1JUUCBbUkZDNTc2M10sIHRoaXMgbWVjaGFuaXNtIGFsd2F5cyBwcm92aWRlcyBhPGJy Pg0KJmd0OyBzaWduYXR1cmUgb3ZlciB0aGF0IGZpbmdlcnByaW50LiBUaGlzIHNpZ25hdHVyZSBw cmV2ZW50cyBjZXJ0YWluPGJyPg0KJmd0OyBjbGFzc2VzIG9mIGltcGVyc29uYXRpb24gYXR0YWNr cyBpbiB3aGljaCBhbiBhdHRhY2tlciBmb3J3YXJkcyBvcjxicj4NCiZndDsgY3V0LWFuZC1wYXN0 ZXMgYSBsZWdpdGltYXRlIHJlcXVlc3QuIEFsdGhvdWdoIHRoZSB0YXJnZXQgb2YgdGhlPGJyPg0K Jmd0OyBhdHRhY2sgbWF5IGFjY2VwdCB0aGUgcmVxdWVzdCwgdGhlIGF0dGFja2VyIHdpbGwgYmUg dW5hYmxlIHRvPGJyPg0KJmd0OyBleGNoYW5nZSBtZWRpYSB3aXRoIHRoZSB0YXJnZXQsIGFzIHRo ZXkgd2lsbCBub3QgcG9zc2VzcyBhIGtleTxicj4NCiZndDsgY29ycmVzcG9uZGluZyB0byB0aGUg ZmluZ2VycHJpbnQuIEZvciBleGFtcGxlLCB0aGVyZSBhcmUgc29tZTxicj4NCiZndDsgYmFpdGlu ZyBhdHRhY2tzLCBsYXVuY2hlZCB3aXRoIHRoZSBSRUZFUiBtZXRob2Qgb3IgdGhyb3VnaCBzb2Np YWw8YnI+DQomZ3Q7IGVuZ2luZWVyaW5nLCB3aGVyZSB0aGUgYXR0YWNrZXIgcmVjZWl2ZXMgYSBy ZXF1ZXN0IGZyb20gdGhlIHRhcmdldDxicj4NCiZndDsgYW5kIHJlb3JpZ2luYXRlcyBpdCB0byBh IHRoaXJkIHBhcnR5LiBUaGVzZSBtaWdodCBub3QgYmUgcHJldmVudGVkPGJyPg0KJmd0OyBieSBv bmx5IGEgc2lnbmF0dXJlIG92ZXIgdGhlIEZyb20sIFRvLCBhbmQgRGF0ZSwgYnV0IHRoZXkgY291 bGQgYmU8YnI+DQomZ3Q7IHByZXZlbnRlZCBieSBzZWN1cmluZyBhIGZpbmdlcnByaW50IGZvciBE VExTLVNSVFAuIFdoaWxlIHRoaXMgaXMgYTxicj4NCiZndDsgZGlmZmVyZW50IGZvcm0gb2YgaW1w ZXJzb25hdGlvbiB0aGFuIGlzIGNvbW1vbmx5IHVzZWQgZm9yPGJyPg0KJmd0OyByb2JvY2FsbGlu ZywgdWx0aW1hdGVseSB0aGVyZSBpcyBsaXR0bGUgcHVycG9zZSBpbiBlc3RhYmxpc2hpbmcgdGhl PGJyPg0KJmd0OyBpZGVudGl0eSBvZiB0aGUgdXNlciB0aGF0IG9yaWdpbmF0ZWQgYSBTSVAgcmVx dWVzdCBpZiB0aGlzIGFzc3VyYW5jZTxicj4NCiZndDsgaXMgbm90IGNvdXBsZWQgd2l0aCBhIGNv bXBhcmFibGUgYXNzdXJhbmNlIG92ZXIgdGhlIGNvbnRlbnRzIG9mIHRoZTxicj4NCiZndDsgc3Vi c2VxdWVudCBtZWRpYSBjb21tdW5pY2F0aW9uLiBUaGlzIHNpZ25hdHVyZSBhbHNvIHJlZHVjZXMg dGhlPGJyPg0KJmd0OyBwb3RlbnRpYWwgZm9yIGFjdGl2ZSBlYXZlc2Ryb3BwaW5nIGF0dGFja3Mg YWdhaW5zdCB0aGUgU0lQIG1lZGlhLiBJbjxicj4NCiZndDsgZW52aXJvbm1lbnRzIHdoZXJlIERU TFMtU1JUUCBpcyB1bnN1cHBvcnRlZCwgaG93ZXZlciwgbm8gZmllbGQgaXM8YnI+DQomZ3Q7IHNp Z25lZCBhbmQgbm8gcHJvdGVjdGlvbnMgYXJlIHByb3ZpZGVkLjxicj4NCiZndDsgPGJyPg0KJmd0 OyBpLSAod2l0aCBsYXd5ZXIgaGF0IG9uKTxicj4NCiZndDsgV2hpY2ggb25lIG9mIHRoZXNlIHN0 YXRlbWVudHMgcHJldmFpbHM/IEkgYXNzdW1lIGl0IGlzIHRoZSBmb3JtZXIgYXMgaXQgaXMgdXNp bmcgbm9ybWF0aXZlIGxhbmd1YWdlIGFzICZxdW90O01VU1QmcXVvdDsgdGhlcmVmb3JlICZxdW90 O2E9ZmluZ2VycHJpbnQmcXVvdDsgbXVzdCBiZSB1c2VkIHdoZW4gaXQgaXMgcHJlc2VudC48YnI+ DQomZ3Q7IDxicj4NCiZndDsgaWktICh3aXRoIHRlY2huaWNhbCBoYXQgb24pPGJyPg0KJmd0OyBX b3VsZG4ndCB0aGUgYXR0YWNrIHZlY3RvciBtZW50aW9uZWQgaW4gMTIuMSBiZSBhcHBsaWNhYmxl IGZvciBjb25uZWN0aW9uIG9yaWVudGVkIG1lZGlhLCBlLmcuIGE9ZmluZ2VycHJpbnQgaW4gU0RQ IGlzIHVzZWQgd2hpbGUgZXN0YWJsaXNoaW5nIGEgTVNSUCBzZXNzaW9uIChhbmQgcG9zc2libHkg Zm9yIG90aGVyIGNhc2VzKSBhcyB3ZWxsPzxicj4NCiZndDsgPGJyPg0KJmd0OyBUaGFua3MsPGJy Pg0KJmd0OyBUb2xnYTxicj4NCiZndDsgPGJyPg0KJmd0OyBfX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fXzxicj4NCiZndDsgc3RpciBtYWlsaW5nIGxpc3Q8YnI+ DQomZ3Q7IDxhIGhyZWY9Im1haWx0bzpzdGlyQGlldGYub3JnIj5zdGlyQGlldGYub3JnPC9hPjxi cj4NCiZndDsgPGEgaHJlZj0iaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9z dGlyIiB0YXJnZXQ9Il9ibGFuayI+aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5m by9zdGlyPC9hPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRt bD4NCg== --_000_CY4PR03MB316004D9C8DC50D82D8DC730A5AD0CY4PR03MB3160namp_-- From nobody Mon Mar 26 03:40:08 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 86A361242F7 for ; Mon, 26 Mar 2018 03:40:05 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.32 X-Spam-Level: X-Spam-Status: No, score=-4.32 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id P6ISxgoTKKRP for ; Mon, 26 Mar 2018 03:40:04 -0700 (PDT) Received: from sesbmg22.ericsson.net (sesbmg22.ericsson.net [193.180.251.48]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 42B75120713 for ; Mon, 26 Mar 2018 03:40:04 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; d=ericsson.com; s=mailgw201801; c=relaxed/simple; q=dns/txt; i=@ericsson.com; t=1522060801; h=From:Sender:Reply-To:Subject:Date:Message-ID:To:Cc:MIME-Version:Content-Type: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=nkcq4W2I9IaU1Im3EROorwvt/Iv0RIMRK4KctEeS4uA=; b=FfHTKOHpxkdfxPlxM9Kd16zSigFrXLVTMvxNVimFqjeWIK5r2w+T0Lc1X/g8zEN7 rFtecCj3SLmoUgf3waxK6L3G1LU8n9A3KvgjkkQ0Gz5m07pXwKhkg0nFZtMuqNnL ehFR1XhYjmuvloJquPXtmBRbYcOEU9Qps327kmc027M=; X-AuditID: c1b4fb30-44bff7000000197d-23-5ab8ce019b05 Received: from ESESSHC006.ericsson.se (Unknown_Domain [153.88.183.36]) by sesbmg22.ericsson.net (Symantec Mail Security) with SMTP id A8.C9.06525.10EC8BA5; Mon, 26 Mar 2018 12:40:01 +0200 (CEST) Received: from ESESSMB109.ericsson.se ([169.254.9.115]) by ESESSHC006.ericsson.se ([153.88.183.36]) with mapi id 14.03.0382.000; Mon, 26 Mar 2018 12:40:01 +0200 From: Christer Holmberg To: "stir@ietf.org" , "stir-chairs@ietf.org" Thread-Topic: IETF#101: STIR minutes (Christer) Thread-Index: AQHTxO7Kl54eMXG+eUGxF0LL6flnfg== Date: Mon, 26 Mar 2018 10:40:00 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.7.7.170905 x-originating-ip: [131.160.50.130] Content-Type: multipart/alternative; boundary="_000_D6DEA8E92D164christerholmbergericssoncom_" MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFmpkkeLIzCtJLcpLzFFi42KZGbFdRZfx3I4og5P9ihbPdqxntVi+dhuT A5PHkiU/mQIYo7hsUlJzMstSi/TtErgyzvy+x17QkFqxbeVR9gbGQ8FdjJwcEgImEhfPTWDr YuTiEBI4wiixtK+DGSQhJLCEUaLxtFsXIwcHm4CFRPc/bZCwiECIxNapB9lBbGEBLYmW/its EHF9ifc9q5khbD2J5i/XwGwWAVWJt2/PMoLYvALWEhfmrACrZxQQk/h+ag0TiM0sIC5x68l8 Joh7BCSW7DnPDGGLSrx8/I8VxBYFmrnhxG12kHMkBJQkbm9wgmhNkHj+7RETxHhBiZMzn7BM YBSahWTqLCRls5CUQcQNJN6fm88MYWtLLFv4GsrWl9j45SwjhG0tMenULiZkNQsYOVYxihan FiflphsZ6aUWZSYXF+fn6eWllmxiBEbMwS2/DXYwvnzueIhRgINRiYd39dEdUUKsiWXFlbmH GCU4mJVEePnmA4V4UxIrq1KL8uOLSnNSiw8xSnOwKInzWvhtjhISSE8sSc1OTS1ILYLJMnFw SjUwxh07uO7sts8CH3jnMM4+NWFltmjyuoiIC5UC0yeELF82jyNsJeOmKfU90lnrffk9r8Sd tfbSEF8bc5ZJxdW2teG2TJXn3yUfeh6captQef+43UwWhfBrn8zEc4xez310rPDb9J6YVTkc RrUb9NTTGV5/uXT0UWbPu8zfs9zUE/5xlhoKdcpsUWIpzkg01GIuKk4EAIkQG3WUAgAA Archived-At: Subject: [stir] IETF#101: STIR minutes (Christer) X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 26 Mar 2018 10:40:05 -0000 --_000_D6DEA8E92D164christerholmbergericssoncom_ Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable Hi, Below are my minutes from the IETF#101 STIR session. Note that there is one OUTCOME with =93????=94, regarding whether we should= allow Identity in 3xx responses, because I missed what was decided. Please= fill in :) Regards, Christer -------- Topic: PASSporT Extension for Resource-Priority Authorization Presenter: Martin Dolly Draft: draft-ietf-stir-rph-03 Status update. An issue whether ppt values should be quoted or not. Both ways are used, an= d we should agree on a common way. See 'PASSporT Extension for Divert' minu= tes. NEXT STEP: Submit new version of draft. --- Topic: PASSporT Extension for SHAKEN Presenter: Chris Wendt Draft: draft-ietf-stir-passport-shaken-01 Status update. Indicated that some minor changes are still to be done, but otherwise the d= raft is ready to be moved forwarded. Nobody objected to moving the draft fo= rward. NEXT STEP: Submit new version of draft. --- Topic: PASSporT Extension for Divert Presenter: Jon Peterson Draft: draft-ietf-stir-passport-divert-02 ISSUE: It was suggested to allow Identity in 3xx responses. OUTCOME: ???? ISSUE: It was discussed on whether we should deprecate the usage of nested = claims for the in-band solution. It was indicated that the total size of an INVITE request is not a problem = (the size will be large even without Identity header fields), but a large s= ize of a single header field can cause problems. It was indicated that we should use the same mechanism for in-band and out-= of-band (nesting is needed for out-of-band). It was indicated that, if nesting is used, it needs to be clarified how nes= ting is done when there are multiple incoming Identity header fields, if e.= g., all of them are to be nested. OUTCOME: Nesting will stay. ISSUE: It was discussed whether we should define the order of Identity head= er fields in a SIP message, when multiple header fields are included. OUTCOME: No need to define order of Identity header fields. ISSUE: It was discussed whether we should define the order of claims within= a PASSporT, as required by RFC 8225. OUTCOME: No need to define anything additional, as RFC 8225 already defines= how to order the claims as part of the serialisation. ISSUE: Should we make 'opt' independent of 'div', so nesting can be used wi= th other PASSporT extensions? OUTCOME: Will allow 'opt' with other extensions, if needed in future. ISSUE: Should ppt=3D values be quoted or not? OUTCOME: Keep quoting mandatory. It was indicated that more reviewers of the draft are needed. NEXT STEP: Submit new version of the draft. WGLC once the next version of t= he draft has been submitted. --- Topic: Out-Of-Band (OOB) Presenter: Jon P Draft: draft-ietf-stir-oob-02 Presentation of changes: - More generic guidance for validating PASSportTS against calls without SIP= . - Mocked up a REST interface for a CPS. Initial work, more work is needed. It was indicated that there a need to specify at least one CPS discovery me= chanism (while realising that service discovery in general is a complex and= much-studied topic). NEXT STEP: Work will continue. --- Topic: Registry for Country-Specific STIR Root Certificates Presenter: Eric B (remote) Draft: draft-burger-stir-iana-cert-00 There was much concern about the suggestion. It would come with a big liabi= lity and huge responsibility on IANA. It was also unclear what the Expert R= eviewer is expected to do. It was indicated that, if such registry is to be created, it should be done= e.g., by ITU-T. While to problem might be clear, it is not the within the = expertise of IETF or IANA. It was indicated that, even if a registry exist, people will not rely on th= e information and will anyway do vetting. NEXT STEP: No decision. --- Topic: Connected Identity for STIR Presenter: Jon P Draft: draft-peterson-stir-rfc4916-update-00 "STIR backwards". Send an UPDATE request in the backwards direction while t= he call is being established. NEXT STEP: No decision (discussions will continue). --- Topic: Callback Presenter: Jonathan R Draft: draft-rosenberg-stir-callback-00 It was indicated that the mechanism should be seen as a complement to RFC 8= 226. It was indicated that the callback INVITE will often reach a PSTN gateway t= hat do not support the Require header field value, which would trigger a ca= ll establishment in the PSTN network. It was indicated that perhaps OOB could be used for this. NEXT STEP: No decision. --- Topic: SIPcoin Presenter: Jonathan R Draft: draft-rosenberg-stir-sipcoin-00 Short presentation of the mechanism. It was clarified the a blockchain is not needed: an entity will only do wor= k before the call, and then show proof of the work when establishing a call= . Interested parties were invited to a lunch meeting, where further discussio= ns could take place. NEXT STEP: No decision. --_000_D6DEA8E92D164christerholmbergericssoncom_ Content-Type: text/html; charset="Windows-1252" Content-ID: <1AF038F3C5065E45B141508FF1186798@ericsson.com> Content-Transfer-Encoding: quoted-printable
Hi,

Below are my minutes from the IETF#101 STIR session.

Note that there is one OUTCOME with =93????=94, regarding whether we s= hould allow Identity in 3xx responses, because I missed what was decided. P= lease fill in :)

Regards,

Christer

--------


Topic: PASSporT Extension for Resource-Priority Authorization
Presenter: Martin Dolly
Draft: draft-ietf-stir-rph-03

Status update.

An issue whether ppt values should be quoted or not. Both ways are use= d, and we should agree on a common way. See 'PASSporT Extension for Divert'= minutes.

NEXT STEP: Submit new version of draft.

---

Topic: PASSporT Extension for SHAKEN
Presenter: Chris Wendt
Draft: draft-ietf-stir-passport-shaken-01

Status update. 

Indicated that some minor changes are still to be done, but otherwise = the draft is ready to be moved forwarded. Nobody objected to moving the dra= ft forward.

NEXT STEP: Submit new version of draft.

---

Topic: PASSporT Extension for Divert
Presenter: Jon Peterson
Draft: draft-ietf-stir-passport-divert-02

ISSUE: It was suggested to allow Identity in 3xx responses.
OUTCOME: ????

ISSUE: It was discussed on whether we should deprecate the usage of ne= sted claims for the in-band solution. 
It was indicated that the total size of an INVITE request is not a pro= blem (the size will be large even without Identity header fields), but a la= rge size of a single header field can cause problems.
It was indicated that we should use the same mechanism for in-band and= out-of-band (nesting is needed for out-of-band).
It was indicated that, if nesting is used, it needs to be clarified ho= w nesting is done when there are multiple incoming Identity header fields, = if e.g., all of them are to be nested.
OUTCOME: Nesting will stay.

ISSUE: It was discussed whether we should define the order of Identity= header fields in a SIP message, when multiple header fields are included.<= /div>
OUTCOME: No need to define order of Identity header fields.

ISSUE: It was discussed whether we should define the order of claims w= ithin a PASSporT, as required by RFC 8225.
OUTCOME: No need to define anything additional, as RFC 8225 already de= fines how to order the claims as part of the serialisation.

ISSUE: Should we make 'opt' independent of 'div', so nesting can be us= ed with other PASSporT extensions? 
OUTCOME: Will allow 'opt' with other extensions, if needed in future.<= /div>

ISSUE: Should ppt=3D values be quoted or not?
OUTCOME: Keep quoting mandatory.

It was indicated that more reviewers of the draft are needed.

NEXT STEP: Submit new version of the draft. WGLC once the next version= of the draft has been submitted.

---

Topic: Out-Of-Band (OOB)
Presenter: Jon P
Draft: draft-ietf-stir-oob-02

Presentation of changes:

- More generic guidance for validating PASSportTS against calls withou= t SIP.

- Mocked up a REST interface for a CPS. Initial work, more work is nee= ded.

It was indicated that there a need to specify at least one CPS discove= ry mechanism (while realising that service discovery in general is a comple= x and much-studied topic).

NEXT STEP: Work will continue.

---

Topic: Registry for Country-Specific STIR Root Certificates
Presenter: Eric B (remote)
Draft: draft-burger-stir-iana-cert-00

There was much concern about the suggestion. It would come with a big = liability and huge responsibility on IANA. It was also unclear what the Exp= ert Reviewer is expected to do.

It was indicated that, if such registry is to be created, it should be= done e.g., by ITU-T. While to problem might be clear, it is not the within= the expertise of IETF or IANA.

It was indicated that, even if a registry exist, people will not rely = on the information and will anyway do vetting.

NEXT STEP: No decision.

---

Topic: Connected Identity for STIR
Presenter: Jon P
Draft: draft-peterson-stir-rfc4916-update-00

"STIR backwards". Send an UPDATE request in the backwards di= rection while the call is being established.

NEXT STEP: No decision (discussions will continue).

---

Topic: Callback
Presenter: Jonathan R
Draft: draft-rosenberg-stir-callback-00

It was indicated that the mechanism should be seen as a complement to = RFC 8226.

It was indicated that the callback INVITE will often reach a PSTN gate= way that do not support the Require header field value, which would trigger= a call establishment in the PSTN network.

It was indicated that perhaps OOB could be used for this. 

NEXT STEP: No decision.

---

Topic: SIPcoin
Presenter: Jonathan R
Draft: draft-rosenberg-stir-sipcoin-00

Short presentation of the mechanism. 

It was clarified the a blockchain is not needed: an entity will only d= o work before the call, and then show proof of the work when establishing a= call.

Interested parties were invited to a lunch meeting, where further disc= ussions could take place.

NEXT STEP: No decision.

 


--_000_D6DEA8E92D164christerholmbergericssoncom_-- From nobody Mon Mar 26 17:00:01 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0FDED120726 for ; Mon, 26 Mar 2018 17:00:00 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=chriswendt-net.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RjRl5N08byda for ; Mon, 26 Mar 2018 16:59:57 -0700 (PDT) Received: from mail-qk0-x22b.google.com (mail-qk0-x22b.google.com [IPv6:2607:f8b0:400d:c09::22b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 81AC912895E for ; Mon, 26 Mar 2018 16:59:57 -0700 (PDT) Received: by mail-qk0-x22b.google.com with SMTP id o184so22076316qkd.13 for ; Mon, 26 Mar 2018 16:59:57 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=chriswendt-net.20150623.gappssmtp.com; s=20150623; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=znkVg9D3nWeCXSN3tVg2EPOeLrBykj+jRvinQVK/k8M=; b=gkW/hHWUnP8+ScoqiKjewyU/mgiUe67GVOBbJTH0CO2jCWzSq9xB3+i1vqo4TOtY60 VJ1yrlVIRCrXNVbwPVgpBiyMUAvNYvX8X0J30hZqT9NsP4vOYHOG5/9mdFsUA6DVenb1 Fo6B8JimL5EATE6Vb3deJNJzkm2RpCFZIL8SDiY2zviyivFla4wqpCp0GNwQ07NMNE+G C41OCK1zoqpxRdxz3yiyr/MPFm8FYeZJmrkcypBt6VHwhjvBHudR5I6bW11OW/jlcd/g 6+YFxmZxunD2lvajXG5CYUoup0PduZ5s3tuD6yAtrV774P33hojvxxhXeJ3tReZKAgV7 SMiw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=znkVg9D3nWeCXSN3tVg2EPOeLrBykj+jRvinQVK/k8M=; b=uV5VEakWKQ8UO9eZER/PGJHC3xd3HQruGsFaYYKIKygRoewz+yKWIexJqyj8OzjyGt +f5CY6Gi0H+PMK3zZX59mGctLHY6W2cFvZn16icDzQNM/yWSSEGQzWcjmU5IbLX0lD23 HBudt9GFWvQU4KRG7LULCOJxkPBjSA0rNMe3BtF7IyguZEaMW96swJiaP6iN5MFPZIV8 jBsDq5AEnSzu75H+j33v95SpJ1Kv9dxEUVbUbWZ/ig+E0DtrYMh6yMQT1dvy4B3AIiqd decBn4gTCekiyrGrFusuqFs/JuD8TyyGWihaOV4tFDtdwe7NVQYB/kdkxj3j5YAJEA5O EP3g== X-Gm-Message-State: AElRT7E+0AoBTRIiZ1UzY5CaaCA53HMj042tV2mrbVeeegbNj1nz2iEm Y0uvJYaBuxW83Pf8s6t5j5hOZg== X-Google-Smtp-Source: AG47ELv/DabX5vOQaMLf0E8Ffd4wmLWGEP9JZAYNgJ2010lZJCM5v+LQtE/hiXo/HC0mQ4GuKrnbjA== X-Received: by 10.55.169.207 with SMTP id s198mr56100385qke.96.1522108796651; Mon, 26 Mar 2018 16:59:56 -0700 (PDT) Received: from [172.31.99.30] (96-83-244-75-static.hfc.comcastbusiness.net. [96.83.244.75]) by smtp.gmail.com with ESMTPSA id m31sm11200961qtd.95.2018.03.26.16.59.55 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 26 Mar 2018 16:59:55 -0700 (PDT) From: Chris Wendt Message-Id: <8A3D65E3-9C98-4013-AB60-02E8F4B025C5@chriswendt.net> Content-Type: multipart/alternative; boundary="Apple-Mail=_03E3987D-28C4-40C9-91BE-0DD9FA86712A" Mime-Version: 1.0 (Mac OS X Mail 11.2 \(3445.5.20\)) Date: Mon, 26 Mar 2018 19:59:54 -0400 In-Reply-To: Cc: "stir@ietf.org" , "jon.peterson@neustar.biz" To: "Asveren, Tolga" References: X-Mailer: Apple Mail (2.3445.5.20) Archived-At: Subject: Re: [stir] RFC8224 / Use of a=fingerprint X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 Mar 2018 00:00:00 -0000 --Apple-Mail=_03E3987D-28C4-40C9-91BE-0DD9FA86712A Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 I stand corrected. Thanks for pointing that out. It references RFC4474 in that section = which RFC8224 replaces, but seems to be to be fairly compatible with the = intent of support of fingerprint in RFC8224/8225, although procedures = are different of course. > On Mar 25, 2018, at 11:52 PM, Asveren, Tolga = wrote: >=20 > Could you elaborate more why it is not applicable? Use of = a=3Dfingerprint for MSRP is possible per RFCRFC4975: > =20 > 14.4. Using TLS in Peer-to-Peer Mode > =20 > TLS can be used with a self-signed certificate as long as there is = a > mechanism for both sides to ascertain that the other side used the > correct certificate. When used with SDP and SIP, the correct > certificate can be verified by passing a fingerprint of the > certificate in the SDP and ensuring that the SDP has suitable > integrity protection. When SIP is used to transport the SDP, the > integrity can be provided by the SIP Identity mechanism [17]. The > rest of this section describes the details of this approach. > =20 > Thanks, > Tolga > =20 > From: Chris Wendt >=20 > Sent: Sunday, March 25, 2018 10:26 PM > To: Asveren, Tolga > > Cc: stir@ietf.org ; jon.peterson@neustar.biz = > Subject: Re: [stir] RFC8224 / Use of a=3Dfingerprint > =20 > NOTICE: This email was received from an EXTERNAL sender >=20 > MSRP is tcp/tls so doesn=E2=80=99t apply to intended the use of = a=3Dfingerprint/mky >=20 > > On Mar 22, 2018, at 8:14 AM, Asveren, Tolga > wrote: > >=20 > > A few doubts regarding use of a=3Dfingerprint for RFC8224: > >=20 > > 4.1. PASSporT Construction > > .... > >=20 > > o Fourth, if the request contains a Session Description Protocol > > (SDP) message body and if that SDP contains one or more > > "a=3Dfingerprint" attributes, then the JSON key "mky" MUST appear > > with the algorithm(s) and value(s) of the fingerprint attributes > > (if they differ), following the format given in [RFC8225], > > Section 5.2.2. > >=20 > >=20 > > 12.1. Protected Request Fields > > .... > > When signing a request that contains a fingerprint of keying = material > > in SDP for DTLS-SRTP [RFC5763], this mechanism always provides a > > signature over that fingerprint. This signature prevents certain > > classes of impersonation attacks in which an attacker forwards or > > cut-and-pastes a legitimate request. Although the target of the > > attack may accept the request, the attacker will be unable to > > exchange media with the target, as they will not possess a key > > corresponding to the fingerprint. For example, there are some > > baiting attacks, launched with the REFER method or through social > > engineering, where the attacker receives a request from the target > > and reoriginates it to a third party. These might not be prevented > > by only a signature over the From, To, and Date, but they could be > > prevented by securing a fingerprint for DTLS-SRTP. While this is a > > different form of impersonation than is commonly used for > > robocalling, ultimately there is little purpose in establishing the > > identity of the user that originated a SIP request if this assurance > > is not coupled with a comparable assurance over the contents of the > > subsequent media communication. This signature also reduces the > > potential for active eavesdropping attacks against the SIP media. In > > environments where DTLS-SRTP is unsupported, however, no field is > > signed and no protections are provided. > >=20 > > i- (with lawyer hat on) > > Which one of these statements prevails? I assume it is the former as = it is using normative language as "MUST" therefore "a=3Dfingerprint" = must be used when it is present. > >=20 > > ii- (with technical hat on) > > Wouldn't the attack vector mentioned in 12.1 be applicable for = connection oriented media, e.g. a=3Dfingerprint in SDP is used while = establishing a MSRP session (and possibly for other cases) as well? > >=20 > > Thanks, > > Tolga > >=20 > > _______________________________________________ > > stir mailing list > > stir@ietf.org > > https://www.ietf.org/mailman/listinfo/stir = --Apple-Mail=_03E3987D-28C4-40C9-91BE-0DD9FA86712A Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8
I stand corrected.

Thanks for pointing that out.  It = references RFC4474 in that section which RFC8224 replaces, but seems to = be to be fairly compatible with the intent of support of fingerprint in = RFC8224/8225, although procedures are different of course.


On Mar 25, 2018, at 11:52 PM, = Asveren, Tolga <tasveren@rbbn.com> wrote:

Could you elaborate more why it is not applicable? Use of = a=3Dfingerprint for MSRP is possible per RFCRFC4975:
 
14.4. = Using TLS in Peer-to-Peer Mode
 
   TLS can be used with a = self-signed certificate as long as there is a
   mechanism for both sides to ascertain that the = other side used the
   correct certificate.  When used with SDP = and SIP, the correct
   certificate can be verified by passing a = fingerprint of the
   certificate in the SDP and ensuring that the SDP = has suitable
   integrity protection.  When SIP is used to = transport the SDP, the
   integrity can be provided by the SIP Identity = mechanism [17].  The
   rest of this section describes the details of = this approach.
 
Thanks,
Tolga
 
From: Chris Wendt <chris-ietf@chriswendt.net> 
Sent: Sunday, March 25, 2018 = 10:26 PM
To: Asveren, Tolga <tasveren@rbbn.com>
Cc: stir@ietf.org; jon.peterson@neustar.biz
Subject: Re: [stir] RFC8224 / Use of = a=3Dfingerprint
 
NOTICE: This email = was received from an EXTERNAL sender

MSRP = is tcp/tls so doesn=E2=80=99t apply to intended the use of = a=3Dfingerprint/mky

> On Mar 22, 2018, = at 8:14 AM, Asveren, Tolga <tasveren@rbbn.com> wrote:
> 
> A few = doubts regarding use of a=3Dfingerprint for RFC8224:
> 
> 4.1. PASSporT Construction
> ....
> 
> o Fourth, if the request contains a Session Description = Protocol
> (SDP) message body and if that SDP contains = one or more
> "a=3Dfingerprint" attributes, then the = JSON key "mky" MUST appear
> with the algorithm(s) and = value(s) of the fingerprint attributes
> (if they = differ), following the format given in [RFC8225],
> = Section 5.2.2.
> 
> 
> 12.1. = Protected Request Fields
> ....
> When = signing a request that contains a fingerprint of keying material
> in SDP for DTLS-SRTP [RFC5763], this mechanism always = provides a
> signature over that fingerprint. This = signature prevents certain
> classes of impersonation = attacks in which an attacker forwards or
> = cut-and-pastes a legitimate request. Although the target of the
> attack may accept the request, the attacker will be = unable to
> exchange media with the target, as they = will not possess a key
> corresponding to the = fingerprint. For example, there are some
> baiting = attacks, launched with the REFER method or through social
> engineering, where the attacker receives a request from = the target
> and reoriginates it to a third party. = These might not be prevented
> by only a signature over = the From, To, and Date, but they could be
> prevented = by securing a fingerprint for DTLS-SRTP. While this is a
> different form of impersonation than is commonly used = for
> robocalling, ultimately there is little purpose = in establishing the
> identity of the user that = originated a SIP request if this assurance
> is not = coupled with a comparable assurance over the contents of the
> subsequent media communication. This signature also = reduces the
> potential for active eavesdropping = attacks against the SIP media. In
> environments where = DTLS-SRTP is unsupported, however, no field is
> signed = and no protections are provided.
> 
> i- = (with lawyer hat on)
> Which one of these statements = prevails? I assume it is the former as it is using normative language as = "MUST" therefore "a=3Dfingerprint" must be used when it is present.
> 
> ii- (with technical hat on)
> Wouldn't = the attack vector mentioned in 12.1 be applicable for connection = oriented media, e.g. a=3Dfingerprint in SDP is used while establishing a = MSRP session (and possibly for other cases) as well?
> 
> Thanks,
> Tolga
> 
> = _______________________________________________
> stir = mailing list
> stir@ietf.org
> https://www.ietf.org/mailman/listinfo/stir

= --Apple-Mail=_03E3987D-28C4-40C9-91BE-0DD9FA86712A-- From nobody Wed Mar 28 11:51:17 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9AF6F12741D for ; Wed, 28 Mar 2018 11:51:16 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iqshdFcFIluG for ; Wed, 28 Mar 2018 11:51:13 -0700 (PDT) Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A5EF51201F2 for ; Wed, 28 Mar 2018 11:51:13 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id 9A2E7300A12 for ; Wed, 28 Mar 2018 14:51:11 -0400 (EDT) X-Virus-Scanned: amavisd-new at mail.smeinc.net Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id AfGTcUTPWTtA for ; Wed, 28 Mar 2018 14:51:09 -0400 (EDT) Received: from a860b60074bd.home (pool-108-45-101-150.washdc.fios.verizon.net [108.45.101.150]) by mail.smeinc.net (Postfix) with ESMTPSA id 54851300498 for ; Wed, 28 Mar 2018 14:51:09 -0400 (EDT) From: Russ Housley Content-Type: multipart/alternative; boundary="Apple-Mail=_8499AEB4-68F2-43C0-AF7E-4ED3D675E720" Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\)) Date: Wed, 28 Mar 2018 14:51:10 -0400 References: To: IETF STIR Mail List In-Reply-To: Message-Id: <43C51A3E-1F71-477F-90A5-B1D97FC5D283@vigilsec.com> X-Mailer: Apple Mail (2.3273) Archived-At: Subject: [stir] Question from the IETF 101 note taker X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 28 Mar 2018 18:51:16 -0000 --Apple-Mail=_8499AEB4-68F2-43C0-AF7E-4ED3D675E720 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Can anyone answer this question? If not, we will need to review the = audio. Russ > On Mar 26, 2018, at 6:40 AM, Christer Holmberg = wrote: >=20 > Hi, >=20 > Below are my minutes from the IETF#101 STIR session. >=20 > Note that there is one OUTCOME with =E2=80=9C????=E2=80=9D, regarding = whether we should allow Identity in 3xx responses, because I missed what = was decided. Please fill in :) >=20 > Regards, >=20 > Christer >=20 > -------- >=20 >=20 > Topic: PASSporT Extension for Resource-Priority Authorization > Presenter: Martin Dolly > Draft: draft-ietf-stir-rph-03 >=20 > Status update. >=20 > An issue whether ppt values should be quoted or not. Both ways are = used, and we should agree on a common way. See 'PASSporT Extension for = Divert' minutes. >=20 > NEXT STEP: Submit new version of draft. >=20 > --- >=20 > Topic: PASSporT Extension for SHAKEN > Presenter: Chris Wendt > Draft: draft-ietf-stir-passport-shaken-01 >=20 > Status update.=20 >=20 > Indicated that some minor changes are still to be done, but otherwise = the draft is ready to be moved forwarded. Nobody objected to moving the = draft forward. >=20 > NEXT STEP: Submit new version of draft. >=20 > --- >=20 > Topic: PASSporT Extension for Divert > Presenter: Jon Peterson > Draft: draft-ietf-stir-passport-divert-02 >=20 > ISSUE: It was suggested to allow Identity in 3xx responses. > OUTCOME: ???? >=20 > ISSUE: It was discussed on whether we should deprecate the usage of = nested claims for the in-band solution.=20 > It was indicated that the total size of an INVITE request is not a = problem (the size will be large even without Identity header fields), = but a large size of a single header field can cause problems. > It was indicated that we should use the same mechanism for in-band and = out-of-band (nesting is needed for out-of-band). > It was indicated that, if nesting is used, it needs to be clarified = how nesting is done when there are multiple incoming Identity header = fields, if e.g., all of them are to be nested. > OUTCOME: Nesting will stay. >=20 > ISSUE: It was discussed whether we should define the order of Identity = header fields in a SIP message, when multiple header fields are = included. > OUTCOME: No need to define order of Identity header fields. >=20 > ISSUE: It was discussed whether we should define the order of claims = within a PASSporT, as required by RFC 8225. > OUTCOME: No need to define anything additional, as RFC 8225 already = defines how to order the claims as part of the serialisation. >=20 > ISSUE: Should we make 'opt' independent of 'div', so nesting can be = used with other PASSporT extensions?=20 > OUTCOME: Will allow 'opt' with other extensions, if needed in future. >=20 > ISSUE: Should ppt=3D values be quoted or not? > OUTCOME: Keep quoting mandatory. >=20 > It was indicated that more reviewers of the draft are needed. >=20 > NEXT STEP: Submit new version of the draft. WGLC once the next version = of the draft has been submitted. >=20 > --- >=20 > Topic: Out-Of-Band (OOB) > Presenter: Jon P > Draft: draft-ietf-stir-oob-02 >=20 > Presentation of changes: >=20 > - More generic guidance for validating PASSportTS against calls = without SIP. >=20 > - Mocked up a REST interface for a CPS. Initial work, more work is = needed. >=20 > It was indicated that there a need to specify at least one CPS = discovery mechanism (while realising that service discovery in general = is a complex and much-studied topic). >=20 > NEXT STEP: Work will continue. >=20 > --- >=20 > Topic: Registry for Country-Specific STIR Root Certificates > Presenter: Eric B (remote) > Draft: draft-burger-stir-iana-cert-00 >=20 > There was much concern about the suggestion. It would come with a big = liability and huge responsibility on IANA. It was also unclear what the = Expert Reviewer is expected to do. >=20 > It was indicated that, if such registry is to be created, it should be = done e.g., by ITU-T. While to problem might be clear, it is not the = within the expertise of IETF or IANA. >=20 > It was indicated that, even if a registry exist, people will not rely = on the information and will anyway do vetting. >=20 > NEXT STEP: No decision. >=20 > --- >=20 > Topic: Connected Identity for STIR > Presenter: Jon P > Draft: draft-peterson-stir-rfc4916-update-00 >=20 > "STIR backwards". Send an UPDATE request in the backwards direction = while the call is being established. >=20 > NEXT STEP: No decision (discussions will continue). >=20 > --- >=20 > Topic: Callback > Presenter: Jonathan R > Draft: draft-rosenberg-stir-callback-00 >=20 > It was indicated that the mechanism should be seen as a complement to = RFC 8226. >=20 > It was indicated that the callback INVITE will often reach a PSTN = gateway that do not support the Require header field value, which would = trigger a call establishment in the PSTN network. >=20 > It was indicated that perhaps OOB could be used for this.=20 >=20 > NEXT STEP: No decision. >=20 > --- >=20 > Topic: SIPcoin > Presenter: Jonathan R > Draft: draft-rosenberg-stir-sipcoin-00 >=20 > Short presentation of the mechanism.=20 >=20 > It was clarified the a blockchain is not needed: an entity will only = do work before the call, and then show proof of the work when = establishing a call. >=20 > Interested parties were invited to a lunch meeting, where further = discussions could take place. >=20 > NEXT STEP: No decision. >=20 > =20 >=20 >=20 > _______________________________________________ > stir mailing list > stir@ietf.org > https://www.ietf.org/mailman/listinfo/stir --Apple-Mail=_8499AEB4-68F2-43C0-AF7E-4ED3D675E720 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Can anyone answer this question?  If not, we will need = to review the audio.

Russ


On Mar 26, 2018, at 6:40 AM, Christer Holmberg <christer.holmberg@ericsson.com> wrote:

Hi,

Below are my minutes from the IETF#101 STIR = session.

Note that there is one OUTCOME with =E2=80=9C????=E2=80=9D= , regarding whether we should allow Identity in 3xx responses, because I = missed what was decided. Please fill in :)

Regards,

Christer

--------


Topic: PASSporT Extension for = Resource-Priority Authorization
Presenter: Martin Dolly
Draft: draft-ietf-stir-rph-03

Status update.

An issue whether ppt values should be quoted or not. = Both ways are used, and we should agree on a common way. See 'PASSporT = Extension for Divert' minutes.

NEXT STEP: Submit new version of draft.

---

Topic: PASSporT Extension for = SHAKEN
Presenter: Chris Wendt
Draft: = draft-ietf-stir-passport-shaken-01

Status update. 

Indicated that some minor changes are still to be done, = but otherwise the draft is ready to be moved forwarded. Nobody objected = to moving the draft forward.

NEXT STEP: Submit new version of draft.

---

Topic: PASSporT Extension for = Divert
Presenter: Jon Peterson
Draft: = draft-ietf-stir-passport-divert-02

ISSUE: It was suggested to allow Identity in 3xx = responses.
OUTCOME: ????

ISSUE: It was discussed on whether we should deprecate = the usage of nested claims for the in-band solution. 
It was indicated that the total size of an INVITE = request is not a problem (the size will be large even without Identity = header fields), but a large size of a single header field can cause = problems.
It was indicated that we should use the same mechanism = for in-band and out-of-band (nesting is needed for out-of-band).
It was indicated that, if nesting is used, it needs to = be clarified how nesting is done when there are multiple incoming = Identity header fields, if e.g., all of them are to be nested.
OUTCOME: Nesting will stay.

ISSUE: It was discussed whether we should define the = order of Identity header fields in a SIP message, when multiple header = fields are included.
OUTCOME: No need to define order of Identity header = fields.

ISSUE: It was discussed whether we should define the = order of claims within a PASSporT, as required by RFC 8225.
OUTCOME: No need to define anything additional, as RFC = 8225 already defines how to order the claims as part of the = serialisation.

ISSUE: Should we make 'opt' independent of 'div', so = nesting can be used with other PASSporT extensions? 
OUTCOME: Will allow 'opt' with other extensions, if = needed in future.

ISSUE: Should ppt=3D values be quoted or not?
OUTCOME: Keep quoting mandatory.

It was indicated that more reviewers of the draft are = needed.

NEXT STEP: Submit new version of the draft. WGLC once = the next version of the draft has been submitted.

---

Topic: Out-Of-Band (OOB)
Presenter: Jon P
Draft: draft-ietf-stir-oob-02

Presentation of changes:

- More generic guidance for validating PASSportTS = against calls without SIP.

- Mocked up a REST interface for a CPS. Initial work, = more work is needed.

It was indicated that there a need to specify at least = one CPS discovery mechanism (while realising that service discovery in = general is a complex and much-studied topic).

NEXT STEP: Work will continue.

---

Topic: Registry for Country-Specific STIR = Root Certificates
Presenter: Eric B (remote)
Draft: = draft-burger-stir-iana-cert-00

There was much concern about the suggestion. It would = come with a big liability and huge responsibility on IANA. It was also = unclear what the Expert Reviewer is expected to do.

It was indicated that, if such registry is to be = created, it should be done e.g., by ITU-T. While to problem might be = clear, it is not the within the expertise of IETF or IANA.

It was indicated that, even if a registry exist, people = will not rely on the information and will anyway do vetting.

NEXT STEP: No decision.

---

Topic: Connected Identity for = STIR
Presenter: Jon P
Draft: = draft-peterson-stir-rfc4916-update-00

"STIR backwards". Send an UPDATE request in the = backwards direction while the call is being established.

NEXT STEP: No decision (discussions will = continue).

---

Topic: Callback
Presenter: Jonathan R
Draft: = draft-rosenberg-stir-callback-00

It was indicated that the mechanism should be seen as a = complement to RFC 8226.

It was indicated that the callback INVITE will often = reach a PSTN gateway that do not support the Require header field value, = which would trigger a call establishment in the PSTN network.

It was indicated that perhaps OOB could be used for = this. 

NEXT STEP: No decision.

---

Topic: SIPcoin
Presenter: Jonathan R
Draft: draft-rosenberg-stir-sipcoin-00

Short presentation of the mechanism. 

It was clarified the a blockchain is not needed: an = entity will only do work before the call, and then show proof of the = work when establishing a call.

Interested parties were invited to a lunch meeting, = where further discussions could take place.

NEXT STEP: No decision.

 


_______________________________________________
stir = mailing list
stir@ietf.org
https://www.ietf.org/mailman/listinfo/stir

= --Apple-Mail=_8499AEB4-68F2-43C0-AF7E-4ED3D675E720-- From nobody Wed Mar 28 12:48:34 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 92E7B126D05 for ; Wed, 28 Mar 2018 12:48:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.011 X-Spam-Level: X-Spam-Status: No, score=-0.011 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=1.989, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=team.neustar Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zcTG3sLP2uCB for ; Wed, 28 Mar 2018 12:48:29 -0700 (PDT) Received: from mx0b-0018ba01.pphosted.com (mx0a-0018ba01.pphosted.com [67.231.149.94]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1DBC71250B8 for ; Wed, 28 Mar 2018 12:48:29 -0700 (PDT) Received: from pps.filterd (m0078664.ppops.net [127.0.0.1]) by mx0a-0018ba01.pphosted.com (8.16.0.22/8.16.0.22) with SMTP id w2SJiBxI001497; Wed, 28 Mar 2018 15:48:28 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=team.neustar; h=from : to : subject : date : message-id : content-type : mime-version; s=selector1; bh=QtLx+D1vybTgCsUs+e0J2Onjd4QG2E53Ce80s6DymS4=; b=P6bsaLgRGVKkLGBEfxbcs462OEkKCA0Mk2msW8lMAMNjkifX3+KI3HkSWljc5zz/w4sw dWMlF9Dlu2ydGtAmajgU9h0DY6Pht3VzfJG7nP7/L5a1SrK9fWzmxbWpUeGDUHyYAKcx dhEc2hIrgYpNtVpFc8rmK6p51Kbnkjl4yOJyKvmjHOkU3yJLDqBkVAnYTkZL8lH6WYdm oGbC9+RpgTxNZxBkuoRxr34g8s+nrXidA81BVaX2i3JfE1OKGFCL4YC75PhhpM46ioKp l5WSP19tytaURAV0729JKTBcrU8yFW0BkKErjN6RiDloXgjrpU26VSDebbT8eyDS17ij UQ== Received: from stntexhc12.cis.neustar.com ([156.154.17.216]) by mx0a-0018ba01.pphosted.com with ESMTP id 2gwkpkfues-1 (version=TLSv1 cipher=ECDHE-RSA-AES256-SHA bits=256 verify=NOT); Wed, 28 Mar 2018 15:48:27 -0400 Received: from STNTEXMB11.cis.neustar.com ([169.254.1.236]) by stntexhc12.cis.neustar.com ([::1]) with mapi id 14.03.0279.002; Wed, 28 Mar 2018 15:48:26 -0400 From: "Peterson, Jon" To: Russ Housley , IETF STIR Mail List Thread-Topic: [stir] Question from the IETF 101 note taker Thread-Index: AQHTxs28s4EuGl8e/0+2RaujrSdkeg== Date: Wed, 28 Mar 2018 19:48:26 +0000 Message-ID: <9D06C2A9-EC93-4713-B28F-A309FF8834AA@team.neustar> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.b.0.180311 x-originating-ip: [10.96.13.45] Content-Type: multipart/alternative; boundary="_000_9D06C2A9EC934713B28FA309FF8834AAteamneustar_" MIME-Version: 1.0 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:, , definitions=2018-03-28_07:, , signatures=0 X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1011 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1711220000 definitions=main-1803280202 Archived-At: Subject: Re: [stir] Question from the IETF 101 note taker X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 28 Mar 2018 19:48:33 -0000 --_000_9D06C2A9EC934713B28FA309FF8834AAteamneustar_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SSBkb27igJl0IHRoaW5rIHRoZSBpZGVhIG9mIGhhdmluZyBJZGVudGl0eSBoZWFkZXJzIGluIGEg M1hYLCB3aGljaCB0aGUgb3JpZ2luYWwgVUFDIGNvdWxkIG9wdGlvbmFsbHkgdXNlIGluIHN1YnNl cXVlbnQgcmVxdWVzdHMsIHdhcyBjb250cm92ZXJzaWFsIHdpdGggYW55b25lLiBJIGp1c3Qga2lu ZCBvZiBhc2tlZCBpZiBhbnlvbmUgb2JqZWN0ZWQsIGJ1dCBwZW9wbGUgc2VlbWVkIHRvIGdldCB0 aGUgcmF0aW9uYWxlIGFuZCB3ZXJlIGNvb2wgd2l0aCBpdC4gU28gSSB0aG91Z2h0IHRoZSB0YWtl IGF3YXkgd2FzIHRoYXQgd2XigJlyZSBrZWVwaW5nIGl0LiBJdCBkb2VzIGhhdmUgc29tZSBwb3Rl bnRpYWxseSBjb21wbGV4IGludGVyYWN0aW9ucyB3aXRoIG5lc3RpbmcgYW5kIG11bHRpcGxlIElk ZW50aXR5IGhlYWRlcnMsIGJ1dCB0aGF04oCZcyB1cCB0byB1cyB0byBkb2N1bWVudCBhZGVxdWF0 ZWx5Lg0KDQpKb24gUGV0ZXJzb24NCk5ldXN0YXIsIEluYy4NCg0KRnJvbTogc3RpciA8c3Rpci1i b3VuY2VzQGlldGYub3JnPiBvbiBiZWhhbGYgb2YgUnVzcyBIb3VzbGV5IDxob3VzbGV5QHZpZ2ls c2VjLmNvbT4NCkRhdGU6IFdlZG5lc2RheSwgTWFyY2ggMjgsIDIwMTggYXQgMTE6NTEgQU0NClRv OiBJRVRGIFNUSVIgTWFpbCBMaXN0IDxzdGlyQGlldGYub3JnPg0KU3ViamVjdDogW3N0aXJdIFF1 ZXN0aW9uIGZyb20gdGhlIElFVEYgMTAxIG5vdGUgdGFrZXINCg0KQ2FuIGFueW9uZSBhbnN3ZXIg dGhpcyBxdWVzdGlvbj8gIElmIG5vdCwgd2Ugd2lsbCBuZWVkIHRvIHJldmlldyB0aGUgYXVkaW8u DQoNClJ1c3MNCg0KDQpPbiBNYXIgMjYsIDIwMTgsIGF0IDY6NDAgQU0sIENocmlzdGVyIEhvbG1i ZXJnIDxjaHJpc3Rlci5ob2xtYmVyZ0Blcmljc3Nvbi5jb208bWFpbHRvOmNocmlzdGVyLmhvbG1i ZXJnQGVyaWNzc29uLmNvbT4+IHdyb3RlOg0KDQpIaSwNCg0KQmVsb3cgYXJlIG15IG1pbnV0ZXMg ZnJvbSB0aGUgSUVURiMxMDEgU1RJUiBzZXNzaW9uLg0KDQpOb3RlIHRoYXQgdGhlcmUgaXMgb25l IE9VVENPTUUgd2l0aCDigJw/Pz8/4oCdLCByZWdhcmRpbmcgd2hldGhlciB3ZSBzaG91bGQgYWxs b3cgSWRlbnRpdHkgaW4gM3h4IHJlc3BvbnNlcywgYmVjYXVzZSBJIG1pc3NlZCB3aGF0IHdhcyBk ZWNpZGVkLiBQbGVhc2UgZmlsbCBpbiA6KQ0KDQpSZWdhcmRzLA0KDQpDaHJpc3Rlcg0KDQotLS0t LS0tLQ0KDQoNClRvcGljOiBQQVNTcG9yVCBFeHRlbnNpb24gZm9yIFJlc291cmNlLVByaW9yaXR5 IEF1dGhvcml6YXRpb24NClByZXNlbnRlcjogTWFydGluIERvbGx5DQpEcmFmdDogZHJhZnQtaWV0 Zi1zdGlyLXJwaC0wMw0KDQpTdGF0dXMgdXBkYXRlLg0KDQpBbiBpc3N1ZSB3aGV0aGVyIHBwdCB2 YWx1ZXMgc2hvdWxkIGJlIHF1b3RlZCBvciBub3QuIEJvdGggd2F5cyBhcmUgdXNlZCwgYW5kIHdl IHNob3VsZCBhZ3JlZSBvbiBhIGNvbW1vbiB3YXkuIFNlZSAnUEFTU3BvclQgRXh0ZW5zaW9uIGZv ciBEaXZlcnQnIG1pbnV0ZXMuDQoNCk5FWFQgU1RFUDogU3VibWl0IG5ldyB2ZXJzaW9uIG9mIGRy YWZ0Lg0KDQotLS0NCg0KVG9waWM6IFBBU1Nwb3JUIEV4dGVuc2lvbiBmb3IgU0hBS0VODQpQcmVz ZW50ZXI6IENocmlzIFdlbmR0DQpEcmFmdDogZHJhZnQtaWV0Zi1zdGlyLXBhc3Nwb3J0LXNoYWtl bi0wMQ0KDQpTdGF0dXMgdXBkYXRlLg0KDQpJbmRpY2F0ZWQgdGhhdCBzb21lIG1pbm9yIGNoYW5n ZXMgYXJlIHN0aWxsIHRvIGJlIGRvbmUsIGJ1dCBvdGhlcndpc2UgdGhlIGRyYWZ0IGlzIHJlYWR5 IHRvIGJlIG1vdmVkIGZvcndhcmRlZC4gTm9ib2R5IG9iamVjdGVkIHRvIG1vdmluZyB0aGUgZHJh ZnQgZm9yd2FyZC4NCg0KTkVYVCBTVEVQOiBTdWJtaXQgbmV3IHZlcnNpb24gb2YgZHJhZnQuDQoN Ci0tLQ0KDQpUb3BpYzogUEFTU3BvclQgRXh0ZW5zaW9uIGZvciBEaXZlcnQNClByZXNlbnRlcjog Sm9uIFBldGVyc29uDQpEcmFmdDogZHJhZnQtaWV0Zi1zdGlyLXBhc3Nwb3J0LWRpdmVydC0wMg0K DQpJU1NVRTogSXQgd2FzIHN1Z2dlc3RlZCB0byBhbGxvdyBJZGVudGl0eSBpbiAzeHggcmVzcG9u c2VzLg0KT1VUQ09NRTogPz8/Pw0KDQpJU1NVRTogSXQgd2FzIGRpc2N1c3NlZCBvbiB3aGV0aGVy IHdlIHNob3VsZCBkZXByZWNhdGUgdGhlIHVzYWdlIG9mIG5lc3RlZCBjbGFpbXMgZm9yIHRoZSBp bi1iYW5kIHNvbHV0aW9uLg0KSXQgd2FzIGluZGljYXRlZCB0aGF0IHRoZSB0b3RhbCBzaXplIG9m IGFuIElOVklURSByZXF1ZXN0IGlzIG5vdCBhIHByb2JsZW0gKHRoZSBzaXplIHdpbGwgYmUgbGFy Z2UgZXZlbiB3aXRob3V0IElkZW50aXR5IGhlYWRlciBmaWVsZHMpLCBidXQgYSBsYXJnZSBzaXpl IG9mIGEgc2luZ2xlIGhlYWRlciBmaWVsZCBjYW4gY2F1c2UgcHJvYmxlbXMuDQpJdCB3YXMgaW5k aWNhdGVkIHRoYXQgd2Ugc2hvdWxkIHVzZSB0aGUgc2FtZSBtZWNoYW5pc20gZm9yIGluLWJhbmQg YW5kIG91dC1vZi1iYW5kIChuZXN0aW5nIGlzIG5lZWRlZCBmb3Igb3V0LW9mLWJhbmQpLg0KSXQg d2FzIGluZGljYXRlZCB0aGF0LCBpZiBuZXN0aW5nIGlzIHVzZWQsIGl0IG5lZWRzIHRvIGJlIGNs YXJpZmllZCBob3cgbmVzdGluZyBpcyBkb25lIHdoZW4gdGhlcmUgYXJlIG11bHRpcGxlIGluY29t aW5nIElkZW50aXR5IGhlYWRlciBmaWVsZHMsIGlmIGUuZy4sIGFsbCBvZiB0aGVtIGFyZSB0byBi ZSBuZXN0ZWQuDQpPVVRDT01FOiBOZXN0aW5nIHdpbGwgc3RheS4NCg0KSVNTVUU6IEl0IHdhcyBk aXNjdXNzZWQgd2hldGhlciB3ZSBzaG91bGQgZGVmaW5lIHRoZSBvcmRlciBvZiBJZGVudGl0eSBo ZWFkZXIgZmllbGRzIGluIGEgU0lQIG1lc3NhZ2UsIHdoZW4gbXVsdGlwbGUgaGVhZGVyIGZpZWxk cyBhcmUgaW5jbHVkZWQuDQpPVVRDT01FOiBObyBuZWVkIHRvIGRlZmluZSBvcmRlciBvZiBJZGVu dGl0eSBoZWFkZXIgZmllbGRzLg0KDQpJU1NVRTogSXQgd2FzIGRpc2N1c3NlZCB3aGV0aGVyIHdl IHNob3VsZCBkZWZpbmUgdGhlIG9yZGVyIG9mIGNsYWltcyB3aXRoaW4gYSBQQVNTcG9yVCwgYXMg cmVxdWlyZWQgYnkgUkZDIDgyMjUuDQpPVVRDT01FOiBObyBuZWVkIHRvIGRlZmluZSBhbnl0aGlu ZyBhZGRpdGlvbmFsLCBhcyBSRkMgODIyNSBhbHJlYWR5IGRlZmluZXMgaG93IHRvIG9yZGVyIHRo ZSBjbGFpbXMgYXMgcGFydCBvZiB0aGUgc2VyaWFsaXNhdGlvbi4NCg0KSVNTVUU6IFNob3VsZCB3 ZSBtYWtlICdvcHQnIGluZGVwZW5kZW50IG9mICdkaXYnLCBzbyBuZXN0aW5nIGNhbiBiZSB1c2Vk IHdpdGggb3RoZXIgUEFTU3BvclQgZXh0ZW5zaW9ucz8NCk9VVENPTUU6IFdpbGwgYWxsb3cgJ29w dCcgd2l0aCBvdGhlciBleHRlbnNpb25zLCBpZiBuZWVkZWQgaW4gZnV0dXJlLg0KDQpJU1NVRTog U2hvdWxkIHBwdD0gdmFsdWVzIGJlIHF1b3RlZCBvciBub3Q/DQpPVVRDT01FOiBLZWVwIHF1b3Rp bmcgbWFuZGF0b3J5Lg0KDQpJdCB3YXMgaW5kaWNhdGVkIHRoYXQgbW9yZSByZXZpZXdlcnMgb2Yg dGhlIGRyYWZ0IGFyZSBuZWVkZWQuDQoNCk5FWFQgU1RFUDogU3VibWl0IG5ldyB2ZXJzaW9uIG9m IHRoZSBkcmFmdC4gV0dMQyBvbmNlIHRoZSBuZXh0IHZlcnNpb24gb2YgdGhlIGRyYWZ0IGhhcyBi ZWVuIHN1Ym1pdHRlZC4NCg0KLS0tDQoNClRvcGljOiBPdXQtT2YtQmFuZCAoT09CKQ0KUHJlc2Vu dGVyOiBKb24gUA0KRHJhZnQ6IGRyYWZ0LWlldGYtc3Rpci1vb2ItMDINCg0KUHJlc2VudGF0aW9u IG9mIGNoYW5nZXM6DQoNCi0gTW9yZSBnZW5lcmljIGd1aWRhbmNlIGZvciB2YWxpZGF0aW5nIFBB U1Nwb3J0VFMgYWdhaW5zdCBjYWxscyB3aXRob3V0IFNJUC4NCg0KLSBNb2NrZWQgdXAgYSBSRVNU IGludGVyZmFjZSBmb3IgYSBDUFMuIEluaXRpYWwgd29yaywgbW9yZSB3b3JrIGlzIG5lZWRlZC4N Cg0KSXQgd2FzIGluZGljYXRlZCB0aGF0IHRoZXJlIGEgbmVlZCB0byBzcGVjaWZ5IGF0IGxlYXN0 IG9uZSBDUFMgZGlzY292ZXJ5IG1lY2hhbmlzbSAod2hpbGUgcmVhbGlzaW5nIHRoYXQgc2Vydmlj ZSBkaXNjb3ZlcnkgaW4gZ2VuZXJhbCBpcyBhIGNvbXBsZXggYW5kIG11Y2gtc3R1ZGllZCB0b3Bp YykuDQoNCk5FWFQgU1RFUDogV29yayB3aWxsIGNvbnRpbnVlLg0KDQotLS0NCg0KVG9waWM6IFJl Z2lzdHJ5IGZvciBDb3VudHJ5LVNwZWNpZmljIFNUSVIgUm9vdCBDZXJ0aWZpY2F0ZXMNClByZXNl bnRlcjogRXJpYyBCIChyZW1vdGUpDQpEcmFmdDogZHJhZnQtYnVyZ2VyLXN0aXItaWFuYS1jZXJ0 LTAwDQoNClRoZXJlIHdhcyBtdWNoIGNvbmNlcm4gYWJvdXQgdGhlIHN1Z2dlc3Rpb24uIEl0IHdv dWxkIGNvbWUgd2l0aCBhIGJpZyBsaWFiaWxpdHkgYW5kIGh1Z2UgcmVzcG9uc2liaWxpdHkgb24g SUFOQS4gSXQgd2FzIGFsc28gdW5jbGVhciB3aGF0IHRoZSBFeHBlcnQgUmV2aWV3ZXIgaXMgZXhw ZWN0ZWQgdG8gZG8uDQoNCkl0IHdhcyBpbmRpY2F0ZWQgdGhhdCwgaWYgc3VjaCByZWdpc3RyeSBp cyB0byBiZSBjcmVhdGVkLCBpdCBzaG91bGQgYmUgZG9uZSBlLmcuLCBieSBJVFUtVC4gV2hpbGUg dG8gcHJvYmxlbSBtaWdodCBiZSBjbGVhciwgaXQgaXMgbm90IHRoZSB3aXRoaW4gdGhlIGV4cGVy dGlzZSBvZiBJRVRGIG9yIElBTkEuDQoNCkl0IHdhcyBpbmRpY2F0ZWQgdGhhdCwgZXZlbiBpZiBh IHJlZ2lzdHJ5IGV4aXN0LCBwZW9wbGUgd2lsbCBub3QgcmVseSBvbiB0aGUgaW5mb3JtYXRpb24g YW5kIHdpbGwgYW55d2F5IGRvIHZldHRpbmcuDQoNCk5FWFQgU1RFUDogTm8gZGVjaXNpb24uDQoN Ci0tLQ0KDQpUb3BpYzogQ29ubmVjdGVkIElkZW50aXR5IGZvciBTVElSDQpQcmVzZW50ZXI6IEpv biBQDQpEcmFmdDogZHJhZnQtcGV0ZXJzb24tc3Rpci1yZmM0OTE2LXVwZGF0ZS0wMA0KDQoiU1RJ UiBiYWNrd2FyZHMiLiBTZW5kIGFuIFVQREFURSByZXF1ZXN0IGluIHRoZSBiYWNrd2FyZHMgZGly ZWN0aW9uIHdoaWxlIHRoZSBjYWxsIGlzIGJlaW5nIGVzdGFibGlzaGVkLg0KDQpORVhUIFNURVA6 IE5vIGRlY2lzaW9uIChkaXNjdXNzaW9ucyB3aWxsIGNvbnRpbnVlKS4NCg0KLS0tDQoNClRvcGlj OiBDYWxsYmFjaw0KUHJlc2VudGVyOiBKb25hdGhhbiBSDQpEcmFmdDogZHJhZnQtcm9zZW5iZXJn LXN0aXItY2FsbGJhY2stMDANCg0KSXQgd2FzIGluZGljYXRlZCB0aGF0IHRoZSBtZWNoYW5pc20g c2hvdWxkIGJlIHNlZW4gYXMgYSBjb21wbGVtZW50IHRvIFJGQyA4MjI2Lg0KDQpJdCB3YXMgaW5k aWNhdGVkIHRoYXQgdGhlIGNhbGxiYWNrIElOVklURSB3aWxsIG9mdGVuIHJlYWNoIGEgUFNUTiBn YXRld2F5IHRoYXQgZG8gbm90IHN1cHBvcnQgdGhlIFJlcXVpcmUgaGVhZGVyIGZpZWxkIHZhbHVl LCB3aGljaCB3b3VsZCB0cmlnZ2VyIGEgY2FsbCBlc3RhYmxpc2htZW50IGluIHRoZSBQU1ROIG5l dHdvcmsuDQoNCkl0IHdhcyBpbmRpY2F0ZWQgdGhhdCBwZXJoYXBzIE9PQiBjb3VsZCBiZSB1c2Vk IGZvciB0aGlzLg0KDQpORVhUIFNURVA6IE5vIGRlY2lzaW9uLg0KDQotLS0NCg0KVG9waWM6IFNJ UGNvaW4NClByZXNlbnRlcjogSm9uYXRoYW4gUg0KRHJhZnQ6IGRyYWZ0LXJvc2VuYmVyZy1zdGly LXNpcGNvaW4tMDANCg0KU2hvcnQgcHJlc2VudGF0aW9uIG9mIHRoZSBtZWNoYW5pc20uDQoNCkl0 IHdhcyBjbGFyaWZpZWQgdGhlIGEgYmxvY2tjaGFpbiBpcyBub3QgbmVlZGVkOiBhbiBlbnRpdHkg d2lsbCBvbmx5IGRvIHdvcmsgYmVmb3JlIHRoZSBjYWxsLCBhbmQgdGhlbiBzaG93IHByb29mIG9m IHRoZSB3b3JrIHdoZW4gZXN0YWJsaXNoaW5nIGEgY2FsbC4NCg0KSW50ZXJlc3RlZCBwYXJ0aWVz IHdlcmUgaW52aXRlZCB0byBhIGx1bmNoIG1lZXRpbmcsIHdoZXJlIGZ1cnRoZXIgZGlzY3Vzc2lv bnMgY291bGQgdGFrZSBwbGFjZS4NCg0KTkVYVCBTVEVQOiBObyBkZWNpc2lvbi4NCg0KDQoNCg0K X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCnN0aXIgbWFp bGluZyBsaXN0DQpzdGlyQGlldGYub3JnPG1haWx0bzpzdGlyQGlldGYub3JnPg0KaHR0cHM6Ly93 d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9zdGlyPGh0dHBzOi8vdXJsZGVmZW5zZS5wcm9v ZnBvaW50LmNvbS92Mi91cmw/dT1odHRwcy0zQV9fd3d3LmlldGYub3JnX21haWxtYW5fbGlzdGlu Zm9fc3RpciZkPUR3UUZhUSZjPU1PcHRObFZ0SUVUZURBTENfbFVMcncmcj1kUTUxdExmb0d1dUZq YW5tZmVLQzB3ZVhITk1sOXhabm5zSWl3UmQ2SWdZJm09SC1QcThMamJoS1dyMzBSY2tZYWVCWmZQ eFZvSDRpTnI0aURNNExTaVEyUSZzPW96UU1DZWpLbGRkLURobkdjNjFOOFJJc0p1MlBGdl9yUDRZ RE9iLVFSRWcmZT0+DQoNCg== --_000_9D06C2A9EC934713B28FA309FF8834AAteamneustar_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2 IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToy IDE1IDUgMiAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3Jt YWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGluOw0KCW1hcmdpbi1i b3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJp IixzYW5zLXNlcmlmO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXBy aW9yaXR5Ojk5Ow0KCWNvbG9yOmJsdWU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQph OnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9yaXR5 Ojk5Ow0KCWNvbG9yOnB1cnBsZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCnAubXNv bm9ybWFsMCwgbGkubXNvbm9ybWFsMCwgZGl2Lm1zb25vcm1hbDANCgl7bXNvLXN0eWxlLW5hbWU6 bXNvbm9ybWFsOw0KCW1zby1tYXJnaW4tdG9wLWFsdDphdXRvOw0KCW1hcmdpbi1yaWdodDowaW47 DQoJbXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87DQoJbWFyZ2luLWxlZnQ6MGluOw0KCWZvbnQt c2l6ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0Kc3Bhbi5F bWFpbFN0eWxlMTgNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWwtcmVwbHk7DQoJZm9udC1mYW1p bHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJY29sb3I6d2luZG93dGV4dDt9DQouTXNvQ2hwRGVm YXVsdA0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25seTsNCglmb250LXNpemU6MTAuMHB0O30N CkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtzaXplOjguNWluIDExLjBpbjsNCgltYXJnaW46MS4waW4g MS4waW4gMS4waW4gMS4waW47fQ0KZGl2LldvcmRTZWN0aW9uMQ0KCXtwYWdlOldvcmRTZWN0aW9u MTt9DQotLT48L3N0eWxlPg0KPC9oZWFkPg0KPGJvZHkgbGFuZz0iRU4tVVMiIGxpbms9ImJsdWUi IHZsaW5rPSJwdXJwbGUiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPkkgZG9u4oCZdCB0aGluayB0aGUgaWRlYSBvZiBoYXZpbmcgSWRlbnRpdHkgaGVh ZGVycyBpbiBhIDNYWCwgd2hpY2ggdGhlIG9yaWdpbmFsIFVBQyBjb3VsZCBvcHRpb25hbGx5IHVz ZSBpbiBzdWJzZXF1ZW50IHJlcXVlc3RzLCB3YXMgY29udHJvdmVyc2lhbCB3aXRoIGFueW9uZS4g SSBqdXN0IGtpbmQgb2YgYXNrZWQgaWYgYW55b25lIG9iamVjdGVkLCBidXQgcGVvcGxlIHNlZW1l ZCB0byBnZXQgdGhlIHJhdGlvbmFsZQ0KIGFuZCB3ZXJlIGNvb2wgd2l0aCBpdC4gU28gSSB0aG91 Z2h0IHRoZSB0YWtlIGF3YXkgd2FzIHRoYXQgd2XigJlyZSBrZWVwaW5nIGl0LiBJdCBkb2VzIGhh dmUgc29tZSBwb3RlbnRpYWxseSBjb21wbGV4IGludGVyYWN0aW9ucyB3aXRoIG5lc3RpbmcgYW5k IG11bHRpcGxlIElkZW50aXR5IGhlYWRlcnMsIGJ1dCB0aGF04oCZcyB1cCB0byB1cyB0byBkb2N1 bWVudCBhZGVxdWF0ZWx5LjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86 cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5Kb24gUGV0ZXJzb248bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPk5ldXN0YXIsIEluYy48bzpwPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdiBz dHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjQjVDNERGIDEuMHB0O3BhZGRpbmc6 My4wcHQgMGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMi4wcHQ7Y29sb3I6YmxhY2siPkZyb206IDwvc3Bhbj48L2I+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Y29sb3I6YmxhY2siPnN0aXIgJmx0O3N0aXItYm91bmNlc0Bp ZXRmLm9yZyZndDsgb24gYmVoYWxmIG9mIFJ1c3MgSG91c2xleSAmbHQ7aG91c2xleUB2aWdpbHNl Yy5jb20mZ3Q7PGJyPg0KPGI+RGF0ZTogPC9iPldlZG5lc2RheSwgTWFyY2ggMjgsIDIwMTggYXQg MTE6NTEgQU08YnI+DQo8Yj5UbzogPC9iPklFVEYgU1RJUiBNYWlsIExpc3QgJmx0O3N0aXJAaWV0 Zi5vcmcmZ3Q7PGJyPg0KPGI+U3ViamVjdDogPC9iPltzdGlyXSBRdWVzdGlvbiBmcm9tIHRoZSBJ RVRGIDEwMSBub3RlIHRha2VyPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxhIG5hbWU9Il9NYWlsT3JpZ2luYWxCb2R5Ij5DYW4gYW55b25lIGFu c3dlciB0aGlzIHF1ZXN0aW9uPyAmbmJzcDtJZiBub3QsIHdlIHdpbGwgbmVlZCB0byByZXZpZXcg dGhlIGF1ZGlvLg0KPG86cD48L286cD48L2E+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJtc28tYm9va21hcms6X01haWxPcmlnaW5hbEJvZHkiPjxvOnA+Jm5i c3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJtc28tYm9va21hcms6X01haWxPcmlnaW5hbEJvZHkiPlJ1c3M8bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0ibXNvLWJvb2ttYXJrOl9NYWlsT3JpZ2luYWxCb2R5Ij48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0ibXNvLWJvb2ttYXJrOl9NYWlsT3JpZ2luYWxCb2R5Ij48bzpwPiZuYnNwOzwvbzpwPjwv c3Bhbj48L3A+DQo8ZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFy Z2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9Im1zby1ib29rbWFyazpfTWFpbE9yaWdpbmFsQm9keSI+T24gTWFyIDI2LCAyMDE4LCBhdCA2 OjQwIEFNLCBDaHJpc3RlciBIb2xtYmVyZyAmbHQ7PC9zcGFuPjxhIGhyZWY9Im1haWx0bzpjaHJp c3Rlci5ob2xtYmVyZ0Blcmljc3Nvbi5jb20iPjxzcGFuIHN0eWxlPSJtc28tYm9va21hcms6X01h aWxPcmlnaW5hbEJvZHkiPmNocmlzdGVyLmhvbG1iZXJnQGVyaWNzc29uLmNvbTwvc3Bhbj48c3Bh biBzdHlsZT0ibXNvLWJvb2ttYXJrOl9NYWlsT3JpZ2luYWxCb2R5Ij48L3NwYW4+PC9hPjxzcGFu IHN0eWxlPSJtc28tYm9va21hcms6X01haWxPcmlnaW5hbEJvZHkiPiZndDsNCiB3cm90ZTo8bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJtc28tYm9va21hcms6X01haWxPcmlnaW5hbEJvZHkiPjxvOnA+Jm5ic3A7PC9vOnA+PC9z cGFuPjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJtc28tYm9va21hcms6X01haWxPcmlnaW5hbEJvZHkiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTAuNXB0Ij5IaSw8bzpwPjwvbzpwPjwvc3Bhbj48L3NwYW4+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9Im1zby1ib29rbWFyazpfTWFp bE9yaWdpbmFsQm9keSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9zcGFuPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0ibXNvLWJvb2ttYXJrOl9NYWlsT3JpZ2luYWxCb2R5Ij48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjVwdCI+QmVsb3cgYXJlIG15IG1pbnV0ZXMgZnJvbSB0aGUgSUVU RiMxMDEgU1RJUiBzZXNzaW9uLjxvOnA+PC9vOnA+PC9zcGFuPjwvc3Bhbj48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0ibXNvLWJvb2ttYXJrOl9N YWlsT3JpZ2luYWxCb2R5Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdCI+PG86cD4mbmJz cDs8L286cD48L3NwYW4+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJtc28tYm9va21hcms6X01haWxPcmlnaW5hbEJvZHkiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTAuNXB0Ij5Ob3RlIHRoYXQgdGhlcmUgaXMgb25lIE9VVENPTUUg d2l0aCDigJw/Pz8/4oCdLCByZWdhcmRpbmcgd2hldGhlciB3ZSBzaG91bGQgYWxsb3cgSWRlbnRp dHkgaW4gM3h4IHJlc3BvbnNlcywgYmVjYXVzZSBJIG1pc3NlZCB3aGF0IHdhcyBkZWNpZGVkLiBQ bGVhc2UgZmlsbCBpbiA6KTxvOnA+PC9vOnA+PC9zcGFuPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0ibXNvLWJvb2ttYXJrOl9NYWls T3JpZ2luYWxCb2R5Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdCI+PG86cD4mbmJzcDs8 L286cD48L3NwYW4+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJtc28tYm9va21hcms6X01haWxPcmlnaW5hbEJvZHkiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTAuNXB0Ij5SZWdhcmRzLDxvOnA+PC9vOnA+PC9zcGFuPjwvc3Bhbj48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0ibXNv LWJvb2ttYXJrOl9NYWlsT3JpZ2luYWxCb2R5Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVw dCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJtc28tYm9va21hcms6X01haWxPcmlnaW5h bEJvZHkiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0Ij5DaHJpc3RlcjxvOnA+PC9vOnA+ PC9zcGFuPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0ibXNvLWJvb2ttYXJrOl9NYWlsT3JpZ2luYWxCb2R5Ij48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEwLjVwdCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9zcGFuPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJtc28tYm9va21h cms6X01haWxPcmlnaW5hbEJvZHkiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0Ij4tLS0t LS0tLTxvOnA+PC9vOnA+PC9zcGFuPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0ibXNvLWJvb2ttYXJrOl9NYWlsT3JpZ2luYWxCb2R5 Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+ PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0ibXNvLWJvb2ttYXJrOl9NYWlsT3JpZ2luYWxCb2R5Ij48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEwLjVwdCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9zcGFuPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJtc28tYm9va21h cms6X01haWxPcmlnaW5hbEJvZHkiPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0Ij5U b3BpYzogUEFTU3BvclQgRXh0ZW5zaW9uIGZvciBSZXNvdXJjZS1Qcmlvcml0eSBBdXRob3JpemF0 aW9uPC9zcGFuPjwvYj48L3NwYW4+PHNwYW4gc3R5bGU9Im1zby1ib29rbWFyazpfTWFpbE9yaWdp bmFsQm9keSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQiPjxvOnA+PC9vOnA+PC9zcGFu Pjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0ibXNvLWJvb2ttYXJrOl9NYWlsT3JpZ2luYWxCb2R5Ij48Yj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEwLjVwdCI+UHJlc2VudGVyOiBNYXJ0aW4gRG9sbHk8L3NwYW4+PC9iPjwvc3Bhbj48 c3BhbiBzdHlsZT0ibXNvLWJvb2ttYXJrOl9NYWlsT3JpZ2luYWxCb2R5Ij48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEwLjVwdCI+PG86cD48L286cD48L3NwYW4+PC9zcGFuPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJtc28tYm9va21hcms6X01h aWxPcmlnaW5hbEJvZHkiPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0Ij5EcmFmdDog ZHJhZnQtaWV0Zi1zdGlyLXJwaC0wMzwvc3Bhbj48L2I+PC9zcGFuPjxzcGFuIHN0eWxlPSJtc28t Ym9va21hcms6X01haWxPcmlnaW5hbEJvZHkiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0 Ij48bzpwPjwvbzpwPjwvc3Bhbj48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9Im1zby1ib29rbWFyazpfTWFpbE9yaWdpbmFsQm9keSI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwv c3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0ibXNvLWJvb2ttYXJrOl9NYWlsT3JpZ2luYWxCb2R5Ij48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEwLjVwdCI+U3RhdHVzIHVwZGF0ZS48bzpwPjwvbzpwPjwvc3Bhbj48L3NwYW4+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9Im1zby1ib29rbWFy azpfTWFpbE9yaWdpbmFsQm9keSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9zcGFuPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0ibXNvLWJvb2ttYXJrOl9NYWlsT3JpZ2luYWxCb2R5Ij48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdCI+QW4gaXNzdWUgd2hldGhlciBwcHQgdmFsdWVz IHNob3VsZCBiZSBxdW90ZWQgb3Igbm90LiBCb3RoIHdheXMgYXJlIHVzZWQsIGFuZCB3ZSBzaG91 bGQgYWdyZWUgb24gYSBjb21tb24gd2F5LiBTZWUgJ1BBU1Nwb3JUIEV4dGVuc2lvbiBmb3IgRGl2 ZXJ0JyBtaW51dGVzLjxvOnA+PC9vOnA+PC9zcGFuPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0ibXNvLWJvb2ttYXJrOl9NYWlsT3Jp Z2luYWxCb2R5Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdCI+PG86cD4mbmJzcDs8L286 cD48L3NwYW4+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJtc28tYm9va21hcms6X01haWxPcmlnaW5hbEJvZHkiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTAuNXB0Ij5ORVhUIFNURVA6IFN1Ym1pdCBuZXcgdmVyc2lvbiBvZiBkcmFm dC48bzpwPjwvbzpwPjwvc3Bhbj48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9Im1zby1ib29rbWFyazpfTWFpbE9yaWdpbmFsQm9keSI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwv c3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0ibXNvLWJvb2ttYXJrOl9NYWlsT3JpZ2luYWxCb2R5Ij48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEwLjVwdCI+LS0tPG86cD48L286cD48L3NwYW4+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJtc28tYm9va21hcms6X01haWxPcmln aW5hbEJvZHkiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0Ij48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9Im1zby1ib29rbWFyazpfTWFpbE9yaWdpbmFsQm9keSI+PGI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMC41cHQiPlRvcGljOiBQQVNTcG9yVCBFeHRlbnNpb24gZm9yIFNIQUtF Tjwvc3Bhbj48L2I+PC9zcGFuPjxzcGFuIHN0eWxlPSJtc28tYm9va21hcms6X01haWxPcmlnaW5h bEJvZHkiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0Ij48bzpwPjwvbzpwPjwvc3Bhbj48 L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9Im1zby1ib29rbWFyazpfTWFpbE9yaWdpbmFsQm9keSI+PGI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMC41cHQiPlByZXNlbnRlcjogQ2hyaXMgV2VuZHQ8L3NwYW4+PC9iPjwvc3Bhbj48c3Bh biBzdHlsZT0ibXNvLWJvb2ttYXJrOl9NYWlsT3JpZ2luYWxCb2R5Ij48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEwLjVwdCI+PG86cD48L286cD48L3NwYW4+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJtc28tYm9va21hcms6X01haWxP cmlnaW5hbEJvZHkiPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0Ij5EcmFmdDogZHJh ZnQtaWV0Zi1zdGlyLXBhc3Nwb3J0LXNoYWtlbi0wMTwvc3Bhbj48L2I+PC9zcGFuPjxzcGFuIHN0 eWxlPSJtc28tYm9va21hcms6X01haWxPcmlnaW5hbEJvZHkiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTAuNXB0Ij48bzpwPjwvbzpwPjwvc3Bhbj48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9Im1zby1ib29rbWFyazpfTWFpbE9yaWdp bmFsQm9keSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9zcGFuPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0ibXNvLWJvb2ttYXJrOl9NYWlsT3JpZ2luYWxCb2R5Ij48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEwLjVwdCI+U3RhdHVzIHVwZGF0ZS4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48 L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9Im1zby1ib29rbWFyazpfTWFpbE9yaWdpbmFsQm9keSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMC41cHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0ibXNvLWJvb2ttYXJrOl9NYWls T3JpZ2luYWxCb2R5Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdCI+SW5kaWNhdGVkIHRo YXQgc29tZSBtaW5vciBjaGFuZ2VzIGFyZSBzdGlsbCB0byBiZSBkb25lLCBidXQgb3RoZXJ3aXNl IHRoZSBkcmFmdCBpcyByZWFkeSB0byBiZSBtb3ZlZCBmb3J3YXJkZWQuIE5vYm9keSBvYmplY3Rl ZCB0byBtb3ZpbmcgdGhlIGRyYWZ0IGZvcndhcmQuPG86cD48L286cD48L3NwYW4+PC9zcGFuPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJtc28t Ym9va21hcms6X01haWxPcmlnaW5hbEJvZHkiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0 Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9Im1zby1ib29rbWFyazpfTWFpbE9yaWdpbmFs Qm9keSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQiPk5FWFQgU1RFUDogU3VibWl0IG5l dyB2ZXJzaW9uIG9mIGRyYWZ0LjxvOnA+PC9vOnA+PC9zcGFuPjwvc3Bhbj48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0ibXNvLWJvb2ttYXJrOl9N YWlsT3JpZ2luYWxCb2R5Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdCI+PG86cD4mbmJz cDs8L286cD48L3NwYW4+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJtc28tYm9va21hcms6X01haWxPcmlnaW5hbEJvZHkiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTAuNXB0Ij4tLS08bzpwPjwvbzpwPjwvc3Bhbj48L3NwYW4+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9Im1zby1i b29rbWFyazpfTWFpbE9yaWdpbmFsQm9keSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQi PjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0ibXNvLWJvb2ttYXJrOl9NYWlsT3JpZ2luYWxC b2R5Ij48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdCI+VG9waWM6IFBBU1Nwb3JUIEV4 dGVuc2lvbiBmb3IgRGl2ZXJ0PC9zcGFuPjwvYj48L3NwYW4+PHNwYW4gc3R5bGU9Im1zby1ib29r bWFyazpfTWFpbE9yaWdpbmFsQm9keSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQiPjxv OnA+PC9vOnA+PC9zcGFuPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0ibXNvLWJvb2ttYXJrOl9NYWlsT3JpZ2luYWxCb2R5Ij48Yj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdCI+UHJlc2VudGVyOiBKb24gUGV0ZXJzb248L3Nw YW4+PC9iPjwvc3Bhbj48c3BhbiBzdHlsZT0ibXNvLWJvb2ttYXJrOl9NYWlsT3JpZ2luYWxCb2R5 Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdCI+PG86cD48L286cD48L3NwYW4+PC9zcGFu PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJt c28tYm9va21hcms6X01haWxPcmlnaW5hbEJvZHkiPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTAuNXB0Ij5EcmFmdDogZHJhZnQtaWV0Zi1zdGlyLXBhc3Nwb3J0LWRpdmVydC0wMjwvc3Bhbj48 L2I+PC9zcGFuPjxzcGFuIHN0eWxlPSJtc28tYm9va21hcms6X01haWxPcmlnaW5hbEJvZHkiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0Ij48bzpwPjwvbzpwPjwvc3Bhbj48L3NwYW4+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9Im1zby1i b29rbWFyazpfTWFpbE9yaWdpbmFsQm9keSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQi PjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0ibXNvLWJvb2ttYXJrOl9NYWlsT3JpZ2luYWxC b2R5Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdCI+SVNTVUU6IEl0IHdhcyBzdWdnZXN0 ZWQgdG8gYWxsb3cgSWRlbnRpdHkgaW4gM3h4IHJlc3BvbnNlcy48bzpwPjwvbzpwPjwvc3Bhbj48 L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9Im1zby1ib29rbWFyazpfTWFpbE9yaWdpbmFsQm9keSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMC41cHQiPk9VVENPTUU6ID8/Pz88bzpwPjwvbzpwPjwvc3Bhbj48L3NwYW4+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9Im1zby1ib29rbWFy azpfTWFpbE9yaWdpbmFsQm9keSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9zcGFuPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0ibXNvLWJvb2ttYXJrOl9NYWlsT3JpZ2luYWxCb2R5Ij48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdCI+SVNTVUU6IEl0IHdhcyBkaXNjdXNzZWQgb24g d2hldGhlciB3ZSBzaG91bGQgZGVwcmVjYXRlIHRoZSB1c2FnZSBvZiBuZXN0ZWQgY2xhaW1zIGZv ciB0aGUgaW4tYmFuZCBzb2x1dGlvbi4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3NwYW4+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJtc28tYm9va21hcms6X01haWxPcmlnaW5hbEJvZHkiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTAuNXB0Ij5JdCB3YXMgaW5kaWNhdGVkIHRoYXQgdGhlIHRvdGFsIHNpemUgb2YgYW4gSU5WSVRF IHJlcXVlc3QgaXMgbm90IGEgcHJvYmxlbSAodGhlIHNpemUgd2lsbCBiZSBsYXJnZSBldmVuIHdp dGhvdXQgSWRlbnRpdHkgaGVhZGVyIGZpZWxkcyksIGJ1dCBhIGxhcmdlIHNpemUgb2YgYSBzaW5n bGUNCiBoZWFkZXIgZmllbGQgY2FuIGNhdXNlIHByb2JsZW1zLjxvOnA+PC9vOnA+PC9zcGFuPjwv c3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJtc28tYm9va21hcms6X01haWxPcmlnaW5hbEJvZHkiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTAuNXB0Ij5JdCB3YXMgaW5kaWNhdGVkIHRoYXQgd2Ugc2hvdWxkIHVzZSB0aGUg c2FtZSBtZWNoYW5pc20gZm9yIGluLWJhbmQgYW5kIG91dC1vZi1iYW5kIChuZXN0aW5nIGlzIG5l ZWRlZCBmb3Igb3V0LW9mLWJhbmQpLjxvOnA+PC9vOnA+PC9zcGFuPjwvc3Bhbj48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0ibXNvLWJvb2ttYXJr Ol9NYWlsT3JpZ2luYWxCb2R5Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdCI+SXQgd2Fz IGluZGljYXRlZCB0aGF0LCBpZiBuZXN0aW5nIGlzIHVzZWQsIGl0IG5lZWRzIHRvIGJlIGNsYXJp ZmllZCBob3cgbmVzdGluZyBpcyBkb25lIHdoZW4gdGhlcmUgYXJlIG11bHRpcGxlIGluY29taW5n IElkZW50aXR5IGhlYWRlciBmaWVsZHMsIGlmIGUuZy4sIGFsbCBvZg0KIHRoZW0gYXJlIHRvIGJl IG5lc3RlZC48bzpwPjwvbzpwPjwvc3Bhbj48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9Im1zby1ib29rbWFyazpfTWFpbE9yaWdpbmFs Qm9keSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQiPk9VVENPTUU6IE5lc3Rpbmcgd2ls bCBzdGF5LjxvOnA+PC9vOnA+PC9zcGFuPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0ibXNvLWJvb2ttYXJrOl9NYWlsT3JpZ2luYWxC b2R5Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdCI+PG86cD4mbmJzcDs8L286cD48L3Nw YW4+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJtc28tYm9va21hcms6X01haWxPcmlnaW5hbEJvZHkiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTAuNXB0Ij5JU1NVRTogSXQgd2FzIGRpc2N1c3NlZCB3aGV0aGVyIHdlIHNob3VsZCBk ZWZpbmUgdGhlIG9yZGVyIG9mIElkZW50aXR5IGhlYWRlciBmaWVsZHMgaW4gYSBTSVAgbWVzc2Fn ZSwgd2hlbiBtdWx0aXBsZSBoZWFkZXIgZmllbGRzIGFyZSBpbmNsdWRlZC48bzpwPjwvbzpwPjwv c3Bhbj48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9Im1zby1ib29rbWFyazpfTWFpbE9yaWdpbmFsQm9keSI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMC41cHQiPk9VVENPTUU6IE5vIG5lZWQgdG8gZGVmaW5lIG9yZGVyIG9mIElkZW50 aXR5IGhlYWRlciBmaWVsZHMuPG86cD48L286cD48L3NwYW4+PC9zcGFuPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJtc28tYm9va21hcms6X01h aWxPcmlnaW5hbEJvZHkiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0Ij48bzpwPiZuYnNw OzwvbzpwPjwvc3Bhbj48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJtc28tYm9va21hcms6X01haWxPcmlnaW5hbEJvZHki PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0Ij5JU1NVRTogSXQgd2FzIGRpc2N1c3NlZCB3 aGV0aGVyIHdlIHNob3VsZCBkZWZpbmUgdGhlIG9yZGVyIG9mIGNsYWltcyB3aXRoaW4gYSBQQVNT cG9yVCwgYXMgcmVxdWlyZWQgYnkgUkZDIDgyMjUuPG86cD48L286cD48L3NwYW4+PC9zcGFuPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJtc28t Ym9va21hcms6X01haWxPcmlnaW5hbEJvZHkiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0 Ij5PVVRDT01FOiBObyBuZWVkIHRvIGRlZmluZSBhbnl0aGluZyBhZGRpdGlvbmFsLCBhcyBSRkMg ODIyNSBhbHJlYWR5IGRlZmluZXMgaG93IHRvIG9yZGVyIHRoZSBjbGFpbXMgYXMgcGFydCBvZiB0 aGUgc2VyaWFsaXNhdGlvbi48bzpwPjwvbzpwPjwvc3Bhbj48L3NwYW4+PC9wPg0KPC9kaXY+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0ibXNvLWJvb2tt YXJrOl9NYWlsT3JpZ2luYWxCb2R5Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdCI+PG86 cD4mbmJzcDs8L286cD48L3NwYW4+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJtc28tYm9va21hcms6X01haWxPcmlnaW5hbEJvZHki PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0Ij5JU1NVRTogU2hvdWxkIHdlIG1ha2UgJ29w dCcgaW5kZXBlbmRlbnQgb2YgJ2RpdicsIHNvIG5lc3RpbmcgY2FuIGJlIHVzZWQgd2l0aCBvdGhl ciBQQVNTcG9yVCBleHRlbnNpb25zPyZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvc3Bhbj48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0ibXNvLWJv b2ttYXJrOl9NYWlsT3JpZ2luYWxCb2R5Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdCI+ T1VUQ09NRTogV2lsbCBhbGxvdyAnb3B0JyB3aXRoIG90aGVyIGV4dGVuc2lvbnMsIGlmIG5lZWRl ZCBpbiBmdXR1cmUuPG86cD48L286cD48L3NwYW4+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJtc28tYm9va21hcms6X01haWxPcmln aW5hbEJvZHkiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0Ij48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9Im1zby1ib29rbWFyazpfTWFpbE9yaWdpbmFsQm9keSI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMC41cHQiPklTU1VFOiBTaG91bGQgcHB0PSB2YWx1ZXMgYmUgcXVvdGVkIG9y IG5vdD88bzpwPjwvbzpwPjwvc3Bhbj48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9Im1zby1ib29rbWFyazpfTWFpbE9yaWdpbmFsQm9k eSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQiPk9VVENPTUU6IEtlZXAgcXVvdGluZyBt YW5kYXRvcnkuPG86cD48L286cD48L3NwYW4+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJtc28tYm9va21hcms6X01haWxPcmlnaW5h bEJvZHkiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0Ij48bzpwPiZuYnNwOzwvbzpwPjwv c3Bhbj48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9Im1zby1ib29rbWFyazpfTWFpbE9yaWdpbmFsQm9keSI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMC41cHQiPkl0IHdhcyBpbmRpY2F0ZWQgdGhhdCBtb3JlIHJldmlld2VycyBvZiB0 aGUgZHJhZnQgYXJlIG5lZWRlZC48bzpwPjwvbzpwPjwvc3Bhbj48L3NwYW4+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9Im1zby1ib29rbWFyazpf TWFpbE9yaWdpbmFsQm9keSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQiPjxvOnA+Jm5i c3A7PC9vOnA+PC9zcGFuPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0ibXNvLWJvb2ttYXJrOl9NYWlsT3JpZ2luYWxCb2R5Ij48c3Bh biBzdHlsZT0iZm9udC1zaXplOjEwLjVwdCI+TkVYVCBTVEVQOiBTdWJtaXQgbmV3IHZlcnNpb24g b2YgdGhlIGRyYWZ0LiBXR0xDIG9uY2UgdGhlIG5leHQgdmVyc2lvbiBvZiB0aGUgZHJhZnQgaGFz IGJlZW4gc3VibWl0dGVkLjxvOnA+PC9vOnA+PC9zcGFuPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0ibXNvLWJvb2ttYXJrOl9NYWls T3JpZ2luYWxCb2R5Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdCI+PG86cD4mbmJzcDs8 L286cD48L3NwYW4+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJtc28tYm9va21hcms6X01haWxPcmlnaW5hbEJvZHkiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTAuNXB0Ij4tLS08bzpwPjwvbzpwPjwvc3Bhbj48L3NwYW4+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9Im1zby1ib29r bWFyazpfTWFpbE9yaWdpbmFsQm9keSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQiPjxv OnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0ibXNvLWJvb2ttYXJrOl9NYWlsT3JpZ2luYWxCb2R5 Ij48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdCI+VG9waWM6IE91dC1PZi1CYW5kIChP T0IpPC9zcGFuPjwvYj48L3NwYW4+PHNwYW4gc3R5bGU9Im1zby1ib29rbWFyazpfTWFpbE9yaWdp bmFsQm9keSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQiPjxvOnA+PC9vOnA+PC9zcGFu Pjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0ibXNvLWJvb2ttYXJrOl9NYWlsT3JpZ2luYWxCb2R5Ij48Yj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEwLjVwdCI+UHJlc2VudGVyOiBKb24gUDwvc3Bhbj48L2I+PC9zcGFuPjxzcGFuIHN0 eWxlPSJtc28tYm9va21hcms6X01haWxPcmlnaW5hbEJvZHkiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTAuNXB0Ij48bzpwPjwvbzpwPjwvc3Bhbj48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9Im1zby1ib29rbWFyazpfTWFpbE9yaWdp bmFsQm9keSI+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQiPkRyYWZ0OiBkcmFmdC1p ZXRmLXN0aXItb29iLTAyPC9zcGFuPjwvYj48L3NwYW4+PHNwYW4gc3R5bGU9Im1zby1ib29rbWFy azpfTWFpbE9yaWdpbmFsQm9keSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQiPjxvOnA+ PC9vOnA+PC9zcGFuPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0ibXNvLWJvb2ttYXJrOl9NYWlsT3JpZ2luYWxCb2R5Ij48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjVwdCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9zcGFuPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJtc28t Ym9va21hcms6X01haWxPcmlnaW5hbEJvZHkiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0 Ij5QcmVzZW50YXRpb24gb2YgY2hhbmdlczo8bzpwPjwvbzpwPjwvc3Bhbj48L3NwYW4+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9Im1zby1ib29r bWFyazpfTWFpbE9yaWdpbmFsQm9keSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQiPjxv OnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0ibXNvLWJvb2ttYXJrOl9NYWlsT3JpZ2luYWxCb2R5 Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdCI+LSBNb3JlIGdlbmVyaWMgZ3VpZGFuY2Ug Zm9yIHZhbGlkYXRpbmcgUEFTU3BvcnRUUyBhZ2FpbnN0IGNhbGxzIHdpdGhvdXQgU0lQLjxvOnA+ PC9vOnA+PC9zcGFuPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0ibXNvLWJvb2ttYXJrOl9NYWlsT3JpZ2luYWxCb2R5Ij48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjVwdCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9zcGFuPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJtc28t Ym9va21hcms6X01haWxPcmlnaW5hbEJvZHkiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0 Ij4tIE1vY2tlZCB1cCBhIFJFU1QgaW50ZXJmYWNlIGZvciBhIENQUy4gSW5pdGlhbCB3b3JrLCBt b3JlIHdvcmsgaXMgbmVlZGVkLjxvOnA+PC9vOnA+PC9zcGFuPjwvc3Bhbj48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0ibXNvLWJvb2ttYXJrOl9N YWlsT3JpZ2luYWxCb2R5Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdCI+PG86cD4mbmJz cDs8L286cD48L3NwYW4+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJtc28tYm9va21hcms6X01haWxPcmlnaW5hbEJvZHkiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTAuNXB0Ij5JdCB3YXMgaW5kaWNhdGVkIHRoYXQgdGhlcmUgYSBu ZWVkIHRvIHNwZWNpZnkgYXQgbGVhc3Qgb25lIENQUyBkaXNjb3ZlcnkgbWVjaGFuaXNtICh3aGls ZSByZWFsaXNpbmcgdGhhdCBzZXJ2aWNlIGRpc2NvdmVyeSBpbiBnZW5lcmFsIGlzIGEgY29tcGxl eCBhbmQgbXVjaC1zdHVkaWVkDQogdG9waWMpLjxvOnA+PC9vOnA+PC9zcGFuPjwvc3Bhbj48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0ibXNvLWJv b2ttYXJrOl9NYWlsT3JpZ2luYWxCb2R5Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdCI+ PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJtc28tYm9va21hcms6X01haWxPcmlnaW5hbEJv ZHkiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0Ij5ORVhUIFNURVA6IFdvcmsgd2lsbCBj b250aW51ZS48bzpwPjwvbzpwPjwvc3Bhbj48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9Im1zby1ib29rbWFyazpfTWFpbE9yaWdpbmFs Qm9keSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9z cGFuPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0ibXNvLWJvb2ttYXJrOl9NYWlsT3JpZ2luYWxCb2R5Ij48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEwLjVwdCI+LS0tPG86cD48L286cD48L3NwYW4+PC9zcGFuPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJtc28tYm9va21hcms6X01h aWxPcmlnaW5hbEJvZHkiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0Ij48bzpwPiZuYnNw OzwvbzpwPjwvc3Bhbj48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9Im1zby1ib29rbWFyazpfTWFpbE9yaWdpbmFsQm9keSI+PGI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQiPlRvcGljOiBSZWdpc3RyeSBmb3IgQ291bnRyeS1T cGVjaWZpYyBTVElSIFJvb3QgQ2VydGlmaWNhdGVzPC9zcGFuPjwvYj48L3NwYW4+PHNwYW4gc3R5 bGU9Im1zby1ib29rbWFyazpfTWFpbE9yaWdpbmFsQm9keSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMC41cHQiPjxvOnA+PC9vOnA+PC9zcGFuPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0ibXNvLWJvb2ttYXJrOl9NYWlsT3JpZ2lu YWxCb2R5Ij48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdCI+UHJlc2VudGVyOiBFcmlj IEIgKHJlbW90ZSk8L3NwYW4+PC9iPjwvc3Bhbj48c3BhbiBzdHlsZT0ibXNvLWJvb2ttYXJrOl9N YWlsT3JpZ2luYWxCb2R5Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdCI+PG86cD48L286 cD48L3NwYW4+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJtc28tYm9va21hcms6X01haWxPcmlnaW5hbEJvZHkiPjxiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTAuNXB0Ij5EcmFmdDogZHJhZnQtYnVyZ2VyLXN0aXItaWFuYS1jZXJ0 LTAwPC9zcGFuPjwvYj48L3NwYW4+PHNwYW4gc3R5bGU9Im1zby1ib29rbWFyazpfTWFpbE9yaWdp bmFsQm9keSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQiPjxvOnA+PC9vOnA+PC9zcGFu Pjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0ibXNvLWJvb2ttYXJrOl9NYWlsT3JpZ2luYWxCb2R5Ij48c3BhbiBzdHlsZT0iZm9udC1z aXplOjEwLjVwdCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9zcGFuPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJtc28tYm9va21hcms6X01h aWxPcmlnaW5hbEJvZHkiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0Ij5UaGVyZSB3YXMg bXVjaCBjb25jZXJuIGFib3V0IHRoZSBzdWdnZXN0aW9uLiBJdCB3b3VsZCBjb21lIHdpdGggYSBi aWcgbGlhYmlsaXR5IGFuZCBodWdlIHJlc3BvbnNpYmlsaXR5IG9uIElBTkEuIEl0IHdhcyBhbHNv IHVuY2xlYXIgd2hhdCB0aGUgRXhwZXJ0IFJldmlld2VyIGlzDQogZXhwZWN0ZWQgdG8gZG8uPG86 cD48L286cD48L3NwYW4+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJtc28tYm9va21hcms6X01haWxPcmlnaW5hbEJvZHkiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTAuNXB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3NwYW4+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9Im1z by1ib29rbWFyazpfTWFpbE9yaWdpbmFsQm9keSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41 cHQiPkl0IHdhcyBpbmRpY2F0ZWQgdGhhdCwgaWYgc3VjaCByZWdpc3RyeSBpcyB0byBiZSBjcmVh dGVkLCBpdCBzaG91bGQgYmUgZG9uZSBlLmcuLCBieSBJVFUtVC4gV2hpbGUgdG8gcHJvYmxlbSBt aWdodCBiZSBjbGVhciwgaXQgaXMgbm90IHRoZSB3aXRoaW4gdGhlIGV4cGVydGlzZQ0KIG9mIElF VEYgb3IgSUFOQS48bzpwPjwvbzpwPjwvc3Bhbj48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9Im1zby1ib29rbWFyazpfTWFpbE9yaWdp bmFsQm9keSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9zcGFuPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0ibXNvLWJvb2ttYXJrOl9NYWlsT3JpZ2luYWxCb2R5Ij48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEwLjVwdCI+SXQgd2FzIGluZGljYXRlZCB0aGF0LCBldmVuIGlmIGEgcmVnaXN0 cnkgZXhpc3QsIHBlb3BsZSB3aWxsIG5vdCByZWx5IG9uIHRoZSBpbmZvcm1hdGlvbiBhbmQgd2ls bCBhbnl3YXkgZG8gdmV0dGluZy48bzpwPjwvbzpwPjwvc3Bhbj48L3NwYW4+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9Im1zby1ib29rbWFyazpf TWFpbE9yaWdpbmFsQm9keSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQiPjxvOnA+Jm5i c3A7PC9vOnA+PC9zcGFuPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0ibXNvLWJvb2ttYXJrOl9NYWlsT3JpZ2luYWxCb2R5Ij48c3Bh biBzdHlsZT0iZm9udC1zaXplOjEwLjVwdCI+TkVYVCBTVEVQOiBObyBkZWNpc2lvbi48bzpwPjwv bzpwPjwvc3Bhbj48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9Im1zby1ib29rbWFyazpfTWFpbE9yaWdpbmFsQm9keSI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMC41cHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvc3Bhbj48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0ibXNvLWJv b2ttYXJrOl9NYWlsT3JpZ2luYWxCb2R5Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdCI+ LS0tPG86cD48L286cD48L3NwYW4+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJtc28tYm9va21hcms6X01haWxPcmlnaW5hbEJvZHki PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48 L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9Im1zby1ib29rbWFyazpfTWFpbE9yaWdpbmFsQm9keSI+PGI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMC41cHQiPlRvcGljOiBDb25uZWN0ZWQgSWRlbnRpdHkgZm9yIFNUSVI8L3NwYW4+PC9i Pjwvc3Bhbj48c3BhbiBzdHlsZT0ibXNvLWJvb2ttYXJrOl9NYWlsT3JpZ2luYWxCb2R5Ij48c3Bh biBzdHlsZT0iZm9udC1zaXplOjEwLjVwdCI+PG86cD48L286cD48L3NwYW4+PC9zcGFuPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJtc28tYm9v a21hcms6X01haWxPcmlnaW5hbEJvZHkiPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0 Ij5QcmVzZW50ZXI6IEpvbiBQPC9zcGFuPjwvYj48L3NwYW4+PHNwYW4gc3R5bGU9Im1zby1ib29r bWFyazpfTWFpbE9yaWdpbmFsQm9keSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQiPjxv OnA+PC9vOnA+PC9zcGFuPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0ibXNvLWJvb2ttYXJrOl9NYWlsT3JpZ2luYWxCb2R5Ij48Yj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdCI+RHJhZnQ6IGRyYWZ0LXBldGVyc29uLXN0aXIt cmZjNDkxNi11cGRhdGUtMDA8L3NwYW4+PC9iPjwvc3Bhbj48c3BhbiBzdHlsZT0ibXNvLWJvb2tt YXJrOl9NYWlsT3JpZ2luYWxCb2R5Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdCI+PG86 cD48L286cD48L3NwYW4+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJtc28tYm9va21hcms6X01haWxPcmlnaW5hbEJvZHkiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTAuNXB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3NwYW4+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9Im1z by1ib29rbWFyazpfTWFpbE9yaWdpbmFsQm9keSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41 cHQiPiZxdW90O1NUSVIgYmFja3dhcmRzJnF1b3Q7LiBTZW5kIGFuIFVQREFURSByZXF1ZXN0IGlu IHRoZSBiYWNrd2FyZHMgZGlyZWN0aW9uIHdoaWxlIHRoZSBjYWxsIGlzIGJlaW5nIGVzdGFibGlz aGVkLjxvOnA+PC9vOnA+PC9zcGFuPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0ibXNvLWJvb2ttYXJrOl9NYWlsT3JpZ2luYWxCb2R5 Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+ PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJtc28tYm9va21hcms6X01haWxPcmlnaW5hbEJvZHkiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTAuNXB0Ij5ORVhUIFNURVA6IE5vIGRlY2lzaW9uIChkaXNjdXNzaW9ucyB3aWxsIGNvbnRp bnVlKS48bzpwPjwvbzpwPjwvc3Bhbj48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9Im1zby1ib29rbWFyazpfTWFpbE9yaWdpbmFsQm9k eSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFu Pjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0ibXNvLWJvb2ttYXJrOl9NYWlsT3JpZ2luYWxCb2R5Ij48c3BhbiBzdHlsZT0iZm9udC1z aXplOjEwLjVwdCI+LS0tPG86cD48L286cD48L3NwYW4+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJtc28tYm9va21hcms6X01haWxP cmlnaW5hbEJvZHkiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0Ij48bzpwPiZuYnNwOzwv bzpwPjwvc3Bhbj48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9Im1zby1ib29rbWFyazpfTWFpbE9yaWdpbmFsQm9keSI+PGI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMC41cHQiPlRvcGljOiBDYWxsYmFjazwvc3Bhbj48L2I+PC9zcGFu PjxzcGFuIHN0eWxlPSJtc28tYm9va21hcms6X01haWxPcmlnaW5hbEJvZHkiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTAuNXB0Ij48bzpwPjwvbzpwPjwvc3Bhbj48L3NwYW4+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9Im1zby1ib29rbWFyazpf TWFpbE9yaWdpbmFsQm9keSI+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQiPlByZXNl bnRlcjogSm9uYXRoYW4gUjwvc3Bhbj48L2I+PC9zcGFuPjxzcGFuIHN0eWxlPSJtc28tYm9va21h cms6X01haWxPcmlnaW5hbEJvZHkiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0Ij48bzpw PjwvbzpwPjwvc3Bhbj48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9Im1zby1ib29rbWFyazpfTWFpbE9yaWdpbmFsQm9keSI+PGI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQiPkRyYWZ0OiBkcmFmdC1yb3NlbmJlcmctc3Rpci1j YWxsYmFjay0wMDwvc3Bhbj48L2I+PC9zcGFuPjxzcGFuIHN0eWxlPSJtc28tYm9va21hcms6X01h aWxPcmlnaW5hbEJvZHkiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0Ij48bzpwPjwvbzpw Pjwvc3Bhbj48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9Im1zby1ib29rbWFyazpfTWFpbE9yaWdpbmFsQm9keSI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMC41cHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvc3Bhbj48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0ibXNvLWJvb2tt YXJrOl9NYWlsT3JpZ2luYWxCb2R5Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdCI+SXQg d2FzIGluZGljYXRlZCB0aGF0IHRoZSBtZWNoYW5pc20gc2hvdWxkIGJlIHNlZW4gYXMgYSBjb21w bGVtZW50IHRvIFJGQyA4MjI2LjxvOnA+PC9vOnA+PC9zcGFuPjwvc3Bhbj48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0ibXNvLWJvb2ttYXJrOl9N YWlsT3JpZ2luYWxCb2R5Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdCI+PG86cD4mbmJz cDs8L286cD48L3NwYW4+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJtc28tYm9va21hcms6X01haWxPcmlnaW5hbEJvZHkiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTAuNXB0Ij5JdCB3YXMgaW5kaWNhdGVkIHRoYXQgdGhlIGNhbGxi YWNrIElOVklURSB3aWxsIG9mdGVuIHJlYWNoIGEgUFNUTiBnYXRld2F5IHRoYXQgZG8gbm90IHN1 cHBvcnQgdGhlIFJlcXVpcmUgaGVhZGVyIGZpZWxkIHZhbHVlLCB3aGljaCB3b3VsZCB0cmlnZ2Vy IGEgY2FsbCBlc3RhYmxpc2htZW50DQogaW4gdGhlIFBTVE4gbmV0d29yay48bzpwPjwvbzpwPjwv c3Bhbj48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9Im1zby1ib29rbWFyazpfTWFpbE9yaWdpbmFsQm9keSI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMC41cHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvc3Bhbj48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0ibXNvLWJvb2ttYXJr Ol9NYWlsT3JpZ2luYWxCb2R5Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdCI+SXQgd2Fz IGluZGljYXRlZCB0aGF0IHBlcmhhcHMgT09CIGNvdWxkIGJlIHVzZWQgZm9yIHRoaXMuJm5ic3A7 PG86cD48L286cD48L3NwYW4+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJtc28tYm9va21hcms6X01haWxPcmlnaW5hbEJvZHkiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3Nw YW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 Im1zby1ib29rbWFyazpfTWFpbE9yaWdpbmFsQm9keSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MC41cHQiPk5FWFQgU1RFUDogTm8gZGVjaXNpb24uPG86cD48L286cD48L3NwYW4+PC9zcGFuPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJtc28t Ym9va21hcms6X01haWxPcmlnaW5hbEJvZHkiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0 Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9Im1zby1ib29rbWFyazpfTWFpbE9yaWdpbmFs Qm9keSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQiPi0tLTxvOnA+PC9vOnA+PC9zcGFu Pjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0ibXNvLWJvb2ttYXJrOl9NYWlsT3JpZ2luYWxCb2R5Ij48c3BhbiBzdHlsZT0iZm9udC1z aXplOjEwLjVwdCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9zcGFuPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0ibXNvLWJvb2tt YXJrOl9NYWlsT3JpZ2luYWxCb2R5Ij48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdCI+ VG9waWM6IFNJUGNvaW48L3NwYW4+PC9iPjwvc3Bhbj48c3BhbiBzdHlsZT0ibXNvLWJvb2ttYXJr Ol9NYWlsT3JpZ2luYWxCb2R5Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdCI+PG86cD48 L286cD48L3NwYW4+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJtc28tYm9va21hcms6X01haWxPcmlnaW5hbEJvZHkiPjxiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTAuNXB0Ij5QcmVzZW50ZXI6IEpvbmF0aGFuIFI8L3NwYW4+PC9i Pjwvc3Bhbj48c3BhbiBzdHlsZT0ibXNvLWJvb2ttYXJrOl9NYWlsT3JpZ2luYWxCb2R5Ij48c3Bh biBzdHlsZT0iZm9udC1zaXplOjEwLjVwdCI+PG86cD48L286cD48L3NwYW4+PC9zcGFuPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJtc28tYm9v a21hcms6X01haWxPcmlnaW5hbEJvZHkiPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0 Ij5EcmFmdDombmJzcDtkcmFmdC1yb3NlbmJlcmctc3Rpci1zaXBjb2luLTAwPC9zcGFuPjwvYj48 L3NwYW4+PHNwYW4gc3R5bGU9Im1zby1ib29rbWFyazpfTWFpbE9yaWdpbmFsQm9keSI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMC41cHQiPjxvOnA+PC9vOnA+PC9zcGFuPjwvc3Bhbj48L3A+DQo8 L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJt c28tYm9va21hcms6X01haWxPcmlnaW5hbEJvZHkiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAu NXB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9Im1zby1ib29rbWFyazpfTWFpbE9yaWdp bmFsQm9keSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQiPlNob3J0IHByZXNlbnRhdGlv biBvZiB0aGUgbWVjaGFuaXNtLiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvc3Bhbj48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0ibXNvLWJvb2tt YXJrOl9NYWlsT3JpZ2luYWxCb2R5Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdCI+PG86 cD4mbmJzcDs8L286cD48L3NwYW4+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJtc28tYm9va21hcms6X01haWxPcmlnaW5hbEJvZHki PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0Ij5JdCB3YXMgY2xhcmlmaWVkIHRoZSBhIGJs b2NrY2hhaW4gaXMgbm90IG5lZWRlZDogYW4gZW50aXR5IHdpbGwgb25seSBkbyB3b3JrIGJlZm9y ZSB0aGUgY2FsbCwgYW5kIHRoZW4gc2hvdyBwcm9vZiBvZiB0aGUgd29yayB3aGVuIGVzdGFibGlz aGluZyBhIGNhbGwuPG86cD48L286cD48L3NwYW4+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJtc28tYm9va21hcms6X01haWxPcmln aW5hbEJvZHkiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0Ij48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9Im1zby1ib29rbWFyazpfTWFpbE9yaWdpbmFsQm9keSI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMC41cHQiPkludGVyZXN0ZWQgcGFydGllcyB3ZXJlIGludml0ZWQgdG8gYSBs dW5jaCBtZWV0aW5nLCB3aGVyZSBmdXJ0aGVyIGRpc2N1c3Npb25zIGNvdWxkIHRha2UgcGxhY2Uu PG86cD48L286cD48L3NwYW4+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJtc28tYm9va21hcms6X01haWxPcmlnaW5hbEJvZHkiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3Nw YW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 Im1zby1ib29rbWFyazpfTWFpbE9yaWdpbmFsQm9keSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MC41cHQiPk5FWFQgU1RFUDogTm8gZGVjaXNpb24uPG86cD48L286cD48L3NwYW4+PC9zcGFuPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJtc28t Ym9va21hcms6X01haWxPcmlnaW5hbEJvZHkiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0 Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9Im1zby1ib29rbWFyazpfTWFpbE9yaWdpbmFs Qm9keSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQiPiZuYnNwOzxvOnA+PC9vOnA+PC9z cGFuPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJtc28tYm9va21hcms6X01haWxPcmlnaW5hbEJvZHkiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTAuNXB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3NwYW4+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9Im1zby1i b29rbWFyazpfTWFpbE9yaWdpbmFsQm9keSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQi PjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9Im1zby1ib29rbWFyazpfTWFpbE9yaWdpbmFs Qm9keSI+X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX188YnI+ DQpzdGlyIG1haWxpbmcgbGlzdDxicj4NCjwvc3Bhbj48YSBocmVmPSJtYWlsdG86c3RpckBpZXRm Lm9yZyI+PHNwYW4gc3R5bGU9Im1zby1ib29rbWFyazpfTWFpbE9yaWdpbmFsQm9keSI+c3RpckBp ZXRmLm9yZzwvc3Bhbj48c3BhbiBzdHlsZT0ibXNvLWJvb2ttYXJrOl9NYWlsT3JpZ2luYWxCb2R5 Ij48L3NwYW4+PC9hPjxzcGFuIHN0eWxlPSJtc28tYm9va21hcms6X01haWxPcmlnaW5hbEJvZHki Pjxicj4NCjwvc3Bhbj48YSBocmVmPSJodHRwczovL3VybGRlZmVuc2UucHJvb2Zwb2ludC5jb20v djIvdXJsP3U9aHR0cHMtM0FfX3d3dy5pZXRmLm9yZ19tYWlsbWFuX2xpc3RpbmZvX3N0aXImYW1w O2Q9RHdRRmFRJmFtcDtjPU1PcHRObFZ0SUVUZURBTENfbFVMcncmYW1wO3I9ZFE1MXRMZm9HdXVG amFubWZlS0Mwd2VYSE5NbDl4Wm5uc0lpd1JkNklnWSZhbXA7bT1ILVBxOExqYmhLV3IzMFJja1lh ZUJaZlB4Vm9INGlOcjRpRE00TFNpUTJRJmFtcDtzPW96UU1DZWpLbGRkLURobkdjNjFOOFJJc0p1 MlBGdl9yUDRZRE9iLVFSRWcmYW1wO2U9Ij48c3BhbiBzdHlsZT0ibXNvLWJvb2ttYXJrOl9NYWls T3JpZ2luYWxCb2R5Ij5odHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3N0aXI8 L3NwYW4+PHNwYW4gc3R5bGU9Im1zby1ib29rbWFyazpfTWFpbE9yaWdpbmFsQm9keSI+PC9zcGFu PjwvYT48c3BhbiBzdHlsZT0ibXNvLWJvb2ttYXJrOl9NYWlsT3JpZ2luYWxCb2R5Ij48bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9Im1zby1ib29rbWFyazpfTWFpbE9yaWdpbmFsQm9keSI+ PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvYm9keT4NCjwv aHRtbD4NCg== --_000_9D06C2A9EC934713B28FA309FF8834AAteamneustar_-- From nobody Fri Mar 30 13:53:55 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5AB0A126DD9 for ; Fri, 30 Mar 2018 13:53:54 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Kgqh46Z6CqFN for ; Fri, 30 Mar 2018 13:53:52 -0700 (PDT) Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EDC12126D0C for ; Fri, 30 Mar 2018 13:53:51 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id E142B300A10 for ; Fri, 30 Mar 2018 16:53:49 -0400 (EDT) X-Virus-Scanned: amavisd-new at mail.smeinc.net Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id XhVsKOLD0SjW for ; Fri, 30 Mar 2018 16:53:48 -0400 (EDT) Received: from a860b60074bd.home (pool-108-45-101-150.washdc.fios.verizon.net [108.45.101.150]) by mail.smeinc.net (Postfix) with ESMTPSA id E5E4A30044B for ; Fri, 30 Mar 2018 16:53:48 -0400 (EDT) From: Russ Housley Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\)) Message-Id: <4BD4F5F2-5492-466A-9CD2-38FA02C5A7FC@vigilsec.com> Date: Fri, 30 Mar 2018 16:54:00 -0400 To: IETF STIR Mail List X-Mailer: Apple Mail (2.3273) Archived-At: Subject: [stir] DRAFT STIR Minutes X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 30 Mar 2018 20:53:54 -0000 https://datatracker.ietf.org/meeting/101/materials/minutes-101-stir Please review and send comments to the list. Russ