From nobody Mon Apr 1 07:01:38 2019 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B7788120149 for ; Mon, 1 Apr 2019 07:01:36 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=ipv-sx.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id M4pjNGROUXv4 for ; Mon, 1 Apr 2019 07:01:35 -0700 (PDT) Received: from mail-ot1-x32e.google.com (mail-ot1-x32e.google.com [IPv6:2607:f8b0:4864:20::32e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 03C04120147 for ; Mon, 1 Apr 2019 07:01:35 -0700 (PDT) Received: by mail-ot1-x32e.google.com with SMTP id c16so8741683otn.4 for ; Mon, 01 Apr 2019 07:01:34 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipv-sx.20150623.gappssmtp.com; s=20150623; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=2ly5L3jektKbDFUwt+hT3Ko7XrbnijuTYhOiSooBy6c=; b=fUWlutazBrdIkLKu/GQB38vKFibHGmdG8TebVLIbMUvq6nwGEG4UtCxrr0BiytBc5c uN9Yp0ZjhDAkTLLyfow3gBIWc4h/xh8z407BlzYy8iQXYmhMedc60DXJOjL9Up36zaXM Sxmi7zWvIEeikWI9srK+UotzKlCw/7dn9rgfvOlNba1RygMhbU34Wd6BRUKUCzhyFtNS TMqsy9sXCYVS3duo99kUgH45akKP9Z/BRCqOe/s1R7J1LWDL4BM0nNlQpgBFO7cCqxaA FAqXS9mjOJzzCXlt9+2jD325dv25igC5w9/Mf0+GtrzI33AmlxTkRCbUdC73aXcv5bpk PTQw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=2ly5L3jektKbDFUwt+hT3Ko7XrbnijuTYhOiSooBy6c=; b=hhuBgq7q18OzBQE/VnDVrW0/YOb9tosQnCryX4Cl2tc9CsvzpA9mB7Da6ZI3+5llMJ HCyvS2XlY0ao2xqoqkLL4dWvyFGZ2Xq/QMt8t/mu6/n8UtHdTD663ITh8cUWON5LpavM FBMtL1GZU0BVPdVxteJflrHoazNlFZbPJnPh925/jHmTci1cDav3+faP55EVfm7uAhMe vprvztf3qA+dhmfVU+1blCBui+yENzDnDoTm24gED9Gv1RmtQjwSpeVZ6LxXiE8Hrg8Y xvFLqZQMqwr9L4BiOFhW3nY/qck49xnrtLdUbdT5zXpy3n52WmrVjyxUQaft3iaOvuyK px8w== X-Gm-Message-State: APjAAAXajXnfW3VRySa1urJXgwLMT7Ucw8Q7jdtSCK69cH+MA/11zvdd A50CytKvM/j3XA7JVEkuClRL2ZMnLmTVw5/3kfsDkCoeIms= X-Google-Smtp-Source: APXvYqy7JvuAbJp769ij4UArThO0sUEA1ZpTODXGBKAP7PcRGsfbKq7XzX/MKEyEhlisIcRX1SLkhd2pRkvkYfl3QLY= X-Received: by 2002:a9d:4d07:: with SMTP id n7mr25347864otf.162.1554127294217; Mon, 01 Apr 2019 07:01:34 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: Richard Barnes Date: Mon, 1 Apr 2019 16:01:05 +0200 Message-ID: To: Russ Housley Cc: IETF STIR Mail List Content-Type: multipart/alternative; boundary="0000000000004ed54b05857875a4" Archived-At: Subject: Re: [stir] Call for Adoption by STIR WG: draft-peterson-stir-cert-delegation-00 X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 01 Apr 2019 14:01:37 -0000 --0000000000004ed54b05857875a4 Content-Type: text/plain; charset="UTF-8" As I said at the mic in Prague, I think there is a need in the ecosystem to have a delegation mechanism of this character, and this draft looks like a good starting point. So I am supportive of its adoption. --Richard On Sun, Mar 31, 2019 at 10:11 PM Russ Housley wrote: > During IETF 104, several people expressed a desire for the STIR WG to > adopt draft-peterson-stir-cert-delegation-00. > > Please send your support or concerns to the list or the chairs by Friday, > 19 April 2019. (This leaves a little over three weeks since many have > travel plans after the IETF week). > > Robert and Russ > _______________________________________________ > stir mailing list > stir@ietf.org > https://www.ietf.org/mailman/listinfo/stir > --0000000000004ed54b05857875a4 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
As I said at the mic in Prague, I think there is a ne= ed in the ecosystem to have a delegation mechanism of this character, and t= his draft looks like a good starting point.=C2=A0 So I am supportive of its= adoption.

--Richard

On Sun, Mar 31, 2019= at 10:11 PM Russ Housley <housl= ey@vigilsec.com> wrote:
During IETF 104, several people expressed a desire for the S= TIR WG to adopt draft-peterson-stir-cert-delegation-00.

Please send your support or concerns to the list or the chairs by Friday, 1= 9 April 2019. (This leaves a little over three weeks since many have travel= plans after the IETF week).

Robert and Russ
_______________________________________________
stir mailing list
stir@ietf.org
https://www.ietf.org/mailman/listinfo/stir
--0000000000004ed54b05857875a4-- From nobody Tue Apr 2 13:31:08 2019 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 28BC012028C for ; Tue, 2 Apr 2019 13:31:06 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.979 X-Spam-Level: X-Spam-Status: No, score=-1.979 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, T_SPF_HELO_PERMERROR=0.01, T_SPF_PERMERROR=0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nostrum.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jCvEexq9AfW2 for ; Tue, 2 Apr 2019 13:31:03 -0700 (PDT) Received: from nostrum.com (raven-v6.nostrum.com [IPv6:2001:470:d:1130::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B8DAB12028B for ; Tue, 2 Apr 2019 13:31:03 -0700 (PDT) Received: from unescapeable.local ([47.186.39.7]) (authenticated bits=0) by nostrum.com (8.15.2/8.15.2) with ESMTPSA id x32KV26R076925 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO) for ; Tue, 2 Apr 2019 15:31:02 -0500 (CDT) (envelope-from rjsparks@nostrum.com) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=nostrum.com; s=default; t=1554237063; bh=eo1niE2oeoVY6Zvj2xj1vi0n/Oi+Ft9MBSW/ZsT6xAI=; h=To:From:Subject:Date; b=clY9lWbURazcvI3IFzIFipzr9ZtCBZdNBANQlnEUg0LDeTyPpxc5GzGsL65nOWBHX 6pZlA6kU1RTc8W8Z8/4nRSAjOGJjNY916Ja1GnMf8/XjKQYQPzx1bo1n05kyVTsON9 U0gt1BnVt2LR8ctdYzu+BCIGQ/liWbGtNb0GMUDM= X-Authentication-Warning: raven.nostrum.com: Host [47.186.39.7] claimed to be unescapeable.local To: "stir@ietf.org" From: Robert Sparks Message-ID: <5c6ffff6-20ca-c5f5-8d91-b72555641edf@nostrum.com> Date: Tue, 2 Apr 2019 15:31:01 -0500 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:60.0) Gecko/20100101 Thunderbird/60.6.1 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Content-Language: en-US Archived-At: Subject: [stir] Draft minutes for STIR@IETF104 X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 02 Apr 2019 20:31:06 -0000 Draft minutes are at https://datatracker.ietf.org/meeting/104/materials/minutes-104-stir-00 Please send any needed corrections or additions to the list or the chairs. RjS From nobody Wed Apr 3 13:58:10 2019 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 979CF120261 for ; Wed, 3 Apr 2019 13:58:09 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 84wwJXyaDjmD for ; Wed, 3 Apr 2019 13:58:06 -0700 (PDT) Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 19E4812026C for ; Wed, 3 Apr 2019 13:58:06 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id D2135300AD5 for ; Wed, 3 Apr 2019 16:39:47 -0400 (EDT) X-Virus-Scanned: amavisd-new at mail.smeinc.net Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id Rwc9B9U6WTbf for ; Wed, 3 Apr 2019 16:39:42 -0400 (EDT) Received: from a860b60074bd.fios-router.home (unknown [138.88.156.37]) by mail.smeinc.net (Postfix) with ESMTPSA id CB9CA300250; Wed, 3 Apr 2019 16:39:42 -0400 (EDT) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 12.2 \(3445.102.3\)) From: Russ Housley In-Reply-To: <5c6ffff6-20ca-c5f5-8d91-b72555641edf@nostrum.com> Date: Wed, 3 Apr 2019 16:57:59 -0400 Cc: IETF STIR Mail List Content-Transfer-Encoding: 7bit Message-Id: <77878E9A-6E88-49F7-97F2-441FBB55FE98@vigilsec.com> References: <5c6ffff6-20ca-c5f5-8d91-b72555641edf@nostrum.com> To: Robert Sparks X-Mailer: Apple Mail (2.3445.102.3) Archived-At: Subject: Re: [stir] Draft minutes for STIR@IETF104 X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 03 Apr 2019 20:58:10 -0000 I made a few very minor edits. Russ > On Apr 2, 2019, at 4:31 PM, Robert Sparks wrote: > > Draft minutes are at > > https://datatracker.ietf.org/meeting/104/materials/minutes-104-stir-00 > > Please send any needed corrections or additions to the list or the chairs. > > RjS > > _______________________________________________ > stir mailing list > stir@ietf.org > https://www.ietf.org/mailman/listinfo/stir From nobody Wed Apr 3 18:16:06 2019 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 592AC120357 for ; Wed, 3 Apr 2019 18:16:04 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (768-bit key) header.d=shockey.us Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MiUhViA89Jv9 for ; Wed, 3 Apr 2019 18:15:59 -0700 (PDT) Received: from gproxy7-pub.mail.unifiedlayer.com (gproxy7-pub.mail.unifiedlayer.com [70.40.196.235]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 570561201A6 for ; Wed, 3 Apr 2019 18:15:59 -0700 (PDT) Received: from cmgw15.unifiedlayer.com (unknown [10.9.0.15]) by gproxy7.mail.unifiedlayer.com (Postfix) with ESMTP id D35C3215CFA for ; Wed, 3 Apr 2019 19:15:57 -0600 (MDT) Received: from box462.bluehost.com ([74.220.219.62]) by cmsmtp with ESMTP id Bqyyh3tQXszDUBqyyhH7eK; Wed, 03 Apr 2019 19:15:57 -0600 X-Authority-Reason: nr=8 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=shockey.us; s=default; h=Content-type:Mime-version:Message-ID:To:From:Subject:Date: Sender:Reply-To:Cc:Content-Transfer-Encoding:Content-ID:Content-Description: Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID: In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:List-Subscribe: List-Post:List-Owner:List-Archive; bh=6TrqGTQeAAeOMXcDUxjtdZYVY6wwlzNhibbf+WXEyLA=; b=cCS6xNwv0+72wgNPNmh/FBFtzA XnyBYeD90ANsrkHDLdbd+m2MEkJVL6+Wyj0gxtuBEtjjmQiTTibvU3j0GM2Jeh5fFAMTWwOrEIO02 9jhZ+fGyR1Ewf9TwOu5oGes98; Received: from pool-100-36-47-17.washdc.fios.verizon.net ([100.36.47.17]:55069 helo=[192.168.1.156]) by box462.bluehost.com with esmtpa (Exim 4.91) (envelope-from ) id 1hBqyx-002MJC-4e for stir@ietf.org; Wed, 03 Apr 2019 19:15:56 -0600 User-Agent: Microsoft-MacOutlook/10.17.1.190326 Date: Wed, 03 Apr 2019 21:15:53 -0400 From: Richard Shockey To: "stir@ietf.org" Message-ID: Thread-Topic: FYI ... STIR/SHAKEN is about to become US Law. Mime-version: 1.0 Content-type: multipart/mixed; boundary="B_3637170955_46328921" X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - box462.bluehost.com X-AntiAbuse: Original Domain - ietf.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - shockey.us X-BWhitelist: no X-Source-IP: 100.36.47.17 X-Source-L: No X-Exim-ID: 1hBqyx-002MJC-4e X-Source: X-Source-Args: X-Source-Dir: X-Source-Sender: pool-100-36-47-17.washdc.fios.verizon.net ([192.168.1.156]) [100.36.47.17]:55069 X-Source-Auth: richard+shockey.us X-Email-Count: 4 X-Source-Cap: c2hvY2tleXU7c2hvY2tleXU7Ym94NDYyLmJsdWVob3N0LmNvbQ== X-Local-Domain: yes Archived-At: Subject: [stir] FYI ... STIR/SHAKEN is about to become US Law. X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 04 Apr 2019 01:16:04 -0000 > This message is in MIME format. Since your mail reader does not understand this format, some or all of this message may not be legible. --B_3637170955_46328921 Content-type: text/plain; charset="UTF-8" Content-transfer-encoding: quoted-printable Protocol becomes Law...or pretty shortly ... S.151=20 https://www.thune.senate.gov/public/index.cfm/2019/4/thune-bill-to-combat-i= llegal-robocalls-heads-to-full-senate BTW I was on the Hill (Congress) about this yesterday on the House side. https://www.youtube.com/watch?v=3DGlLPIEzsvGM enjoy... =E2=80=94=20 Richard Shockey Shockey Consulting LLC Chairman of the Board SIP Forum www.shockey.us www.sipforum.org richardshockey.us Skype-Linkedin-Facebook =E2=80=93Twitter rshockey101 PSTN +1 703-593-2683 =20 --B_3637170955_46328921 Content-type: application/pdf; name="BILLS-116s151is copy.pdf"; x-mac-creator="4F50494D"; x-mac-type="50444620" Content-disposition: attachment; filename="BILLS-116s151is copy.pdf" Content-transfer-encoding: base64 JVBERi0xLjUNJeLjz9MNCjgzIDAgb2JqDTw8L0xpbmVhcml6ZWQgMS9MIDUzMTc2L08gODUv RSAyMzU1Ni9OIDE2L1QgNTI3NjMvSCBbIDQ4MSAyNTJdPj4NZW5kb2JqDSAgICAgICAgICAg ICAgICAgDQo5NiAwIG9iag08PC9EZWNvZGVQYXJtczw8L0NvbHVtbnMgNC9QcmVkaWN0b3Ig MTI+Pi9GaWx0ZXIvRmxhdGVEZWNvZGUvSURbPEExQTU1RkMwQkREQTlCNTdGNkYxNTU3MTcx QkQxNUZCPjw2NzI1MzAwREQ2ODQxQjRBQjNGQjM5RkM0RUU0NkZEND5dL0luZGV4WzgzIDMx XS9JbmZvIDgyIDAgUi9MZW5ndGggNzcvUHJldiA1Mjc2NC9Sb290IDg0IDAgUi9TaXplIDEx NC9UeXBlL1hSZWYvV1sxIDIgMV0+PnN0cmVhbQ0KaN5iYmQQYGBiYDoLJBgDgQRDE5BgFwMS 4kogiVQgwToNRBwGEgL8QIJHDkiw3AMSvC+BxLJbDEyMDI9AehkYqUT8Z+z+CBBgAKM1CyIN CmVuZHN0cmVhbQ1lbmRvYmoNc3RhcnR4cmVmDQowDQolJUVPRg0KICAgICAgICANCjExMyAw IG9iag08PC9GaWx0ZXIvRmxhdGVEZWNvZGUvSSAzMTkvTCAzMDMvTGVuZ3RoIDE2My9TIDI1 ND4+c3RyZWFtDQpo3mJgYGBmYGAyYmBhYGB1ZOBnQAB+oBgIcjRA+EzLtZhMmD9ILlB4IOqQ y9jNMIfNhduCgUHawe/APcapmTMhAKhSyPZ0WKHyna3p5DMKGDg6gCZ1AO2miIHfzUAlBgyM IneBNDcQ84H92cTAy8C4VNeBz6hLkPXj6jlSjyUPXuDcENEyByxtzMAocQ1IMwJxFxCbMTBq SED5fwACDADYYFBODQplbmRzdHJlYW0NZW5kb2JqDTg0IDAgb2JqDTw8L01ldGFkYXRhIDUy IDAgUi9QYWdlTGFiZWxzIDc3IDAgUi9QYWdlcyA3OSAwIFIvVHlwZS9DYXRhbG9nPj4NZW5k b2JqDTg1IDAgb2JqDTw8L0NvbnRlbnRzIDg5IDAgUi9Dcm9wQm94WzAgMCA2MTIgNzkyXS9N ZWRpYUJveFswIDAgNjEyIDc5Ml0vUGFyZW50IDgwIDAgUi9SZXNvdXJjZXMgOTcgMCBSL1Jv dGF0ZSAwL1R5cGUvUGFnZT4+DWVuZG9iag04NiAwIG9iag08PC9GaWx0ZXIvRmxhdGVEZWNv ZGUvRmlyc3QgMTM0L0xlbmd0aCAxNzE2L04gMTYvVHlwZS9PYmpTdG0+PnN0cmVhbQ0KaN6k V9tu2zgQ/YL9Bz7uIsiOKJIiBRQFEruO01wa1GnaopsHxaFjtbbkWsptv34PKcmxLTtJuwgY D+/DuZwzijULWGwYDwWLY8aNYDwImApC/HIWK41fyEq5AUzq2K2QLAxUBEGxkPuRiIVSBxA0 C2PjBMNEKBSEmAnJsZ0HTGj0OOdMBgJrMCoxxN68oXcP5cGgTEoL+WDAnU4B+/j2LfXyrMRY j3uFMEa9ShUvVld7Ufo7vaj8ZV6M/C3VUWfzfDiw5Tc66/bo3D6Ul2/f4ugPZ2yUTAoL4YRx GuzV3cEJC/4OQjp/nNkn/SifVfN+bzcdjezcZkNbfBMhFbNkaJmI6DqfTJI5nkmzBNMTOyor aZ7ejEsmJQ3z6TSh8eNsbDOa2XmaX1MxSYox/WvnOeWZpfI+p3I8t5ZG+e2cRumdpSJ9oMLe YY91J1GWYuEwn+QZhqepl1ikaI/2qUNdekc9OqA+HdJ7OqJjOqFT+kBnzIT0kQZ0Tp/ogj7T F/rKYk0JXdGQrgk30g2NKaXv9IMmNKWMcprRT5pTQSXd0h3d0wM9Mo5X2+m109tm7odxKejn bV5a/2gv+Udf1obMhvl1mt148+0VQ5uVLIo4dZJZ3z8JvYg642QOV/1ZWdRb49C//QtuPcd7 OnjFKV72ES8cQDencwnthtDZaZtA6ytoWUDrkbdkZbVN7sBDb2Ewb8ole1ceql3Tg6G6sOHX yj0nMOY9TLSweePJx41vh+FrI1WLLypn7sPyP+tYoTNYugqA77VvbfbPH27TX9S1laF2w0BT b5LcFCzymbG/nz982+XIs91QuFiPkMciuvSTvXRiBTO6ygQMnCZTS0eHewfd052uvUgzZ9Yy maTDvexmYllAg9JO+3CqFy5YpCunuc1Oh3k6K/M5fak9JXns3bifFNYtWT+78bWDFq9DOi9K 51pAw9qZHnbcmuOkXsKRJIPbq9Ld75TgdJ5/ymDta8tMlegL3ehzel2Oi2+hilkI9Gma4qt9 gXmxvMb1gQ9+nzZ+/WuaX792V9MipZgGQkYiZloaFsUadozwK5mOIyaMYkoZpkPM4QwDJNQq 8PORlNUZcJoyHKkQ4gyBcYM3a5yLc1Sw8d6mSR0zGeOXOxyPmAw5zK2YNO59wGmcGcYh5gDe gHWtOVNuHoDu12OviLEHECykquaE8O+R0Nu15+5fbnCqU+J1i2ujXi4jg+bBEjLoQKwjw6BJ UAcRPqkc8h3S8XLScFMnDd7OtVnOHDgGmePYCeaPpVnOnFi0M6d/utMZ20lps3Ey3d3PJ9eb M0iZOoWc9GwOGdXOoQ23NLmEUM/2siJd9J9PqnA1qYxYz6lWChmXh9v+mlkVNSNP0vqfDhHI a7NCbt6lZHC5nVDX6HLBb7iC+jWVMaPo00YOc3XBE4fB0/KJxVD4cHr8P9S0j4tSHOYox117 BQoYIyz7uOwW14yg3AwX1vxwBx7Zgy4d6DapXrUR3nWwHKUR347viNtWlJ6cNBi8W0XnSpDu crUO9ODsZ4NURO0gbV+ywHtXIb4M+GoN8OGKbYAfqy2AL/mrwcg3rPeA/yt7XmiRcHEOYOZt XRzgv+oMFN7KVMCqw1/TT8YOoEFkJvSyiHCOxhhyTRoH/vJpPcBeRyAxoUEM0oO7J0aQlACx CEdwDvDl0x7g9womR3G8khLhpmrt1bWrK6dWsLrJACFXMsB4HK8YxcSrOB20MqDfOdo5T6e2 2P2YT5NsI0YbWQc/hGeDXwWt4F8//xXoLE07A/RqBij9Ejqrmk9faKscKvQyh4Zhm0PfAY/O wZqupnbeqzm1D+w69q505a/3YeXTvcqrZ6iDuyjCv6KOPfLu3V8BM7WVdiNXsKq6QIjNqjt5 252H73dO7X0H597OHwfD8eTqx3byVXLBvS94Vre5d/tVv8nA8RoDxy8zsH6OgbWpGFPLjW0j E6Oy0tjnmkEp5/tAGScbfH+7bEdWceVHY2CGn6lXVjNRpBd7Ar/GI9VatWaWI831ViPtAmQ5 R8gkIExUbguk8N9U9UeX+z7yyPAenFrR/o8aMM4QoD2Qp4s0H40jRO5VMvxRfTf5uq+J3Suw cgEOPqohp4NYvgcz+wDeSLm185oIdYVhqOoIFXwlQsNWhB52D3b6dnJny3SYbIabpiI0zxeE KhStoFw9/fcCkfM1uuUvR2Ida9uisPqv3IfDK1r7tCamXHNy5HWsznVI5sbcTh/DGHP9YLG6 OaGdG8GSVo38pGsYOvcp/73ponlZRzCgGwmezqpi/D8BBgBokUbbDQplbmRzdHJlYW0NZW5k b2JqDTg3IDAgb2JqDTw8L0ZpbHRlci9GbGF0ZURlY29kZS9MZW5ndGggNTgzNi9TdWJ0eXBl L1R5cGUxQz4+c3RyZWFtDQpo3oxYd1wU59Zms+wMCqyxDOJMnLElxt41dhFFEVQULIgUAUWk 97r0LqKiwCydpRcBASVUjYIFDE1FjRqJmthINFfNGe7LV94FU+5n7ve7P/7YHzvvnOeU533O OStSUf1ERSQSjTLQ19m0YdusDQd32zs7H1R+NVkYryowGlqIQSGfqR795yrJRJXVfsaat0f9 OrrsM8Z9jPKQ2u8vqIjwn4pERUXtExXNUSpTRqksIlV0Jqi4qKjEqqhswSAqqipqKtkqnSKx aJnIWuQtShSViN588sUnyWJWbC1+oLpVNVmiKvGSFEn6CX3iCrmATCQH1WzU+kfsHXFyxMuR TiPPqk9Rl6m/0Nig8UjTUbNGOl5qL30xynvUw081Po3/9OVo/dGNY9gx/mNXj80e+2rcznHt 4xCVSL3X2q7VNn72+Kjx/6Oto52k/XiCxYQn9C7alvZEnPQoL5K+PsoLLbzoet/rCphZIYYE pEGVgQYBoxNvdvxCv9nahJhsFrzJZ1FN9v7+e+ItaLcM37yi3PySG/oNSOMUC+pHkAaJpOH6 O+bRi28YwSgfFsWTsxJ2NSoyLvI1dIFvhqu9p4et3m19GBPBCh2qyIWcnmZaeYVuv1D183G2 bPASBRHku4Cmw5vpDcb7v4xmpQM6PiKYXSG+IUynFETnvdKey3S9S7Gtk4+Pi2Omf1UEmxaT eNSfdnTbuk2flW5Xnn/SIYbzaB0lJxfdM4XJsIeGPU0w+ck9NpVEo+etQUuRLo1076IlMHre h3fAskPcNaBDBZJPVjeiKWg3jXbvQ1MWrWZlJIx+dgeWgC4NumthKRr9jJUOuYTMhl26+btL 3tilgGGXYgNoB7dtSpcmgeElUT04ievBkALnNuRMSGX9ogf9YqAeUa7eXq4u2d4FhdlZRQVe Oa6cFE0e8ucUdga1/VempI6A9oFMifR1MD9A86ILfRDbJ4aUYAo0nsAosIfDi+BTpIE0FqNR yB7ZP0ajQINLVZ3l+RacwEnx7tXLvCnICTl5TJ3FDdX5Ki8Cvz7xIy1BJN9BGMpO93BCmxdp b6nnMyVCLYAEzbhinwX0oCq5PihCj9Uj8Fvdwk1eVFsBhX3iBi1Bg8iBI5JAAo0ICnVfyaBQ Iru+tunb5obKC6Vf16jV1+ZfaqLfLu1Fmki8SmeWcemh8yU5iuJqu+MH5Gzgicgknm7uaL3z +PwuJNoddsDJgnW1sTxktt/Q0MzIeaOaMla4mQ8XeNHtPjDD4ZbAT9Qpsj+rta2XfrSqG42Y u9FwnbXCraAgPbMoJyzVK5kNOBUax9NnGs7eulttsRBp2togiVtwbHB4Ymwqm5adrGBu15hM RoStyaJVRhfy01KOpiZyRXJ5ej5d5JfpdtjN2Xxlrz5IQPPe7bePjdom57DKbMHGGlGzHFyw E/O04Af5PmJbWEYX9xTUq5C6oGtHovLBxZJdEDWD3BIStIXdSgALDhTy5gnwhh+G6ibM4GFy t6i9AhR94j64TMmJtrKWisvM3a/1EIW092ycrWdxtjD5ZAJ/kitLS5OX0vk+2a72zo7m69uN 3jQ3pZfWsJfOFbXfpWHkigdIvMXIcbcdWwr+kthcRWwO8/7emeZyLjpREmBmGrGHOWCeyO/j hpClPJziRb19EIAvxSIopuBEdCWMBHWmodRLxgVYhdnQbpk+eQWKvKJLJs1r9pp6mNuyBusc ZyApjXY9RASQ7x4+gvEg0bszf7OpzTpP9sRCCkZ8faOzs2Ab+hRpHtpqsNmmHaQ4XUFZQme3 CGz6xZ2CLpVKnLqYWJWeq5abduZECwO7CcQh741oDVKjTbNci3LS04tPsqdrI6+duJsE01qA /QVmqg2qYb6F8AMTeNGzCmjGWmQF7dT8g5Z7deh5tzeDGEb1fQ+ajw9cXFTEdjeeaW6lH+hf +WKajs7klZXGvUfYtEgKJh68arOQXmewbf5Ck5bnN8sau0rZ59cpNLp864WbdGfLhQffN5mt NHAxNT7EDrHtlDJVWDnAoU8skAJJoRPHD6GRSJ0xc8hO4+TnkqrpfL9MdxcvDwfjS/vvNjfl 1lWx7b0lP4OUhl3LgUDklOXL0HhEdK37qaOxujeXjXpJoU8tDTZucWqFEUCdaeu+ft4QqbH4 +sP6f68AoFD9WBUgqV/0n4tOu9D0N8oCIZjOzrywwUfkrAW35MTyOIuKa3TmicKUs2xKhQTc iPNIS3LS73hgCG17OHoxK4NncvLLaFmJ0yO0S2jQ9ibQokEHCRprtdlgMYP5HUC9h673qEsi hbPY+Pc81GFxmdEHZ/vFmVrwDQEuQHaB6P7S62hZHpdIwqSc7qa79IOp99FGFnXJiN/iFD5z 6cGZ5FxPn0lxLDjDSwpsya5jqZ0wpcMWib40tkAa7DQZ1U3A0tumWFJUtuxDzC6no9nBXHD2 saJKWgqunvzAal5UB6rCCrlY+AliKaxOi8MXzUUUg6aY4GsdAc7Nv+E6aL6YjvTLuFRo9CMM Q2SOvkxgiDzDm6u22JNtwWze6bLTmNuw3mbGTHpm1eyODezW1mvO9xiY+tMrWJeMk/jwKD/w 6XCQAqgqo7xC/HwntfIS9+PVVhCBCg2ahvDJpHY256B+2kIG3fqbIN9Rwh6yjU/7FsxvL0AB yGvdQmSwNIRXtpYSnMgeHlqHMXbgcN4MzKQGH35kRia8gioZiYx8l3yF1jNfRWU95nDqYPTJ JvMUpK3Gw0AQEYHG7NqHxhxXAxvyTnJ2J3x13wCtKWJTCcwpjNTJw7VhpL1y8cBIJRJ8jASv 5eSkeK+s5zSYkaCV2GQlHwJ4rwQYZ2yGxp9Qg0Pk49SkRy/aI/fXszXW+et4JFaTY5hCTx6a eYEYqg88whesxZOSY7bdzjv97CQrR+9xj1WLLY1YSe8hF+rrr0DS7bhQweDe8A7GgNqtL5B1 FctDrz9hGBrs6MfIQuXpflyNlXX2HmbzDpedJsqCfTnrQ8G2tbQ7tTN159PO1HBZufK0VCbz tMuOFE4qaOJ4H/JQPxzvgz5l8V7LiQ+B2UMvsifnev0lYE/8vTCTfK7I+i0e+/laRv4Wl4MT gzahXthEPs/5y/f/kjCp/R8sEUMojKOUVv7t6b+kVwqcB49ZNF74iheVVEAyfr9XKKHQGxJN cNs+Z4VJQ2PSiZOJbGJKeBZzPj+/ptql0G6PrZXRV726r2HK9Yegw8Hlj12WwvU/ibsdbg27 BbPIX17BElQuSfI/HhhMuziHb4sfvvYLY0zL9z9AG6FF+93r+3fvVT2InyDHZCavRhb7OdA+ QV7uHiwKQX4SCP1PY4v4wwVBLBdnYrJ9fF54Dv8IJlFk4MYZaB0z3y/lCSes/B2AlArzPtiY Lhf0cHKWgCslrFCQsOO/tCRpBBgOaElyBpOJxb4e82Iw+oPf0f9SgaMkmjmYjeYI2RIULSPe xBf4LqHRXRJN99mJVGLxW8VyEkm8LsNMfOEffQBcIBd05WJYi8c4gSIF3cG7ErkQRIBaSfNP x7DVdBnZX2KGpBz6BznICSUStE5GXD5WFlBmoYbDQ6Tz3rlKj5Ll5HzHJjyjDd2MgTXDsjUK awm89qSutGTXNHBP7jT9BiIaVExBtPAuW21unLWN2WbiY2POLVqzF4mQCo1EjUjlyTrWuqHF +wozsEUVptbjBwEoYD/+mIqm7sc0CoCAevwxFWN5YfJ/y0PbMAPKlHA/wj0KjH++8euvkzqR OYcu/M3FF3AmCI+MVxyYknJVCCK7Ek4+ALptP5IgkYENYrBiZWPTfTzUDpsu6W+RK2+WICc+ vOnYTDafDfdXcJky3v+0d5JXnG2CiRpSTawy7mHuVd2CaRFcEIHUjntut2G8QpILwrmw4sSL 3q3OD3d9vThd7SQJ8/nvLj2h+7+8jEzYv/ETt41+ChyGnaOuW836YoMpmopdW+rJPwUzgeNF N5oFqln8XRB17XR2SS6TmR7oo+Asmr/26mJA9fvvQdziXX+whNtXvSN1W9ayQv2MgxfVAhTh ufl058Wme6DStwitb2blkCUjdoQFubgw3iGZmd5c1QGrTBPm89XLpk6+aQlTzTiYYnbPfia9 bqvJEkROegdbDrH+hAzV4hYZ/YFJ1VgC1ZWikF5Avq1dgQzqOJ6IhBLJYA0RiUokeHQ0qKt9 8JYpGEwn/uYa3cW0mT6c7JeYkTOU+nCOXBFvVGzF7qzqdOlnYHbrIzDggCdfVNTdO47ZeVpG Po6ptJpDozwSLTdbjSag0UeuwmQWnn98e6XgJ8saGM+LhLHQJIYuGZVBwHrB7xyMrLz8PAHr QBM2F1fttpn2inAIPMCisQihJYKNJCo1iufpmoqEH5UG+2Vk37HCgNxNalLh8LBF+BoqrkCh GM7KqHQCJgqR8NVgpCSTgLGCYxlollx9dRrbL5SRd2LK7fVot2jnCBd2IfoJfS7oScJzozJ4 uiz/+HWl+QoZ2RGrCEmzLFuoPXlwFJosrJWEFsfknKZzc/kGfKBERt6LK/HI2awmherh5Auz sfY5asF7ObEkyiK/mc5NKc0vY38DBqYha4nc51RgAH3YJnLpMSxFKnJyZaTdmT230RZI0X4F 6n3v7jZ9Fzesgz2xJYH7aXeZg7Mdu2wKUocNkqDMMHkqfaYs4Tvs3qCKjHyeUO5RawArUKT2 JETPQSNWGa06NkEKAR+YUN6XinMhiKGGegu7W963ftNzcjj67nJ3c69IN5kbh2+zBZoIJyWh meFp6XRp+YnvTuDYnsvIh3G5fgX7YDVq1UbT/0ZvlYtkOx6g8YZLeRGbVh/RNab3FzpVFWdn F5b4ptkmsgEJ4cfS6JL869e+ZaVXfXhBhxd1dIBuxy3Mq+uPqY3xuXZ1zOXihqcxXCixNt7D 2pXxiMlt4GAneSm22rWULfSwTDdh5hjuMz6S7VWUn52Zy1XvPZ1EZ5wrvPptnv0adieJ9NyW 7JlPGzZa9fbUV/TksTEwn9IjkXi/wVYrlzOXnl5pAs00Vtrjx+OuB4686GYHBPSJb8qoNKLq mSSRMCysO9LK1FamFpVyDbWFbZ00MCufTd9hcWijOxsFT9HMIKIn5rT7arobvaCAu3Dv1u1y PbzGs7YbNqw2vwnjWWkYto619kwfOFSIBW3QooKI5cG7TTcxC2164AuYWN/z3TfVB90DQhL8 wjmHoICgI7SjwqP4TEFp862dF9duMziMlwVXa5mFKa2fa1RrwdqV1/s2MD9cufQcz4WPZXz8 0KJnz4vK+8C/QywseUQJ3WhbEPmPY7z/fBqZx5DXnMzL8H5m7WN3hDuw33O7Ab22bNNlK9Yn vzikmLnSUNVbxB2fSsDM4xI5qRsbknKV3gIUhSiDZfobDt6ESTCxqqujt3Ud0mKlx3x58OJh 5xDgdqwp40GKg1ot22ehx8wzvwNfJHFQQgAdpnt/MbNr+yGjw5ybhczKnDbM3fq1OWtfVuvb yPRdufiE51A+fELB6Oiqb3uYllLL5Tt8I/Q46ZyjeC3Kh2Be9L4D5jSLQbedgvswMR9NfE3+ WF7fVq4ICAoNOxoazbqFBvm6085ZPoUleQWVFyxrNs3RX4QWx7NL3frQfeJAWLgV6yaDCvlm YldgQj0n7ULWPKzsvs/j5pHFi1r6QK+jAS+pk+ELKj4sIj6S2evkamNSYXM9kosiDYIcXKxp o04bGAufddY+ebyrGBHsImKpdXJlkSKtlssvC6lm3na2v+BKwvPS6erMnMKMpMhwNtg+yJH2 lsuyctPSiyudyw4e9HSziogPj49gw4gWj71ntjGf6xos3l1kedmJg3x0ijI2OozEn5ucuXyt If0dqF/y2cmiHRBB6XvXvnqZU3fjhsJ89iwvS31O2o/TM025UomedSh/QJJrgbvcnbAOS6rm fsU969rTm+cVjttZdJrE8VuzHjL83AXn4tQ5DqzI9wcvrNTba74AUzheInyCZgSRwyQedCaH 80VI0QKMMZGHOf24BOI30EehbPL3ZA6BhWMwGCDR3GiJjLx5LCVoO62AH/H65/2X9S9b+cPS WHSYF34dsrWiGZbhXC8YWPDxQY/BkRT6iZxit1fHzjuZT0pO4BNZBZ+cqqCLfLKcHD3c7XbU HOwC1evfwRxW+JxEjkpoGB2XHTSHlv6AHWZ48BlKijo4iZ8J5dQfEcn+zNArsqP9JZolSfY/ IQun/XxjDignTyc5eTDWTe51BtFwSPtS87WWCwU1sVgTE/HkGVsUfISWhQfIZCz6DDESwfPP pEnRSiyq6rzoRce/hRR+/Mt5eIc9ncqL3nSASQfs7BArtP7MKC7fnJYnXTVZzjv+KF+QDKzk 3sPlUz5v/T/Ph8rrTBwIV5ZXl4RRB9rWGJnuX+ShrO8TmU2dAWO0F//LRcdLQOtfKvZHUQnp +6GCK72y/MilIUbl/CeM+n8hKrEUrh1SDUc8QfsKmyjbw0FuTtzOfQ4b9Wi9Mr3L+1i34oqg s8zZCj6/mGtpLO3qorscunc2svlOh3lbJlj1buVGNA1NPaS7Zs2hmzAVplV238UqiMx4WM0L c3nR0w7w7xM/xYwdtCMPhIdbKisRKD/8gbF2CeS2onqHC8y5c5kVpdy5esXVdvrOkS7j82yW q1OyE7Njn806Fy4aVAg0688oYPcDqrtqA5qEJh7cuFlney9eEOm27zs4aY8Seq2yg/yhv8I6 KpCwnSuJINpczMt2MFOWzUZYS+/P/aW17mx3HncC+RI2YaHWrL0MQuUOhKWycnrwjkLc7lXr dQ53wxRgq7p77jZsQLiDuPxRmVkfXcU/AxtDgnZr340seUQEG2odd4B2zvYuLsjOLT/vUGy6 fZ/Fcm/cscYQaPafQUm9fYcK0lgBsmZxky+VQlQlpWSlMykpIcHpnGdpUXA5c7+5savGo9y8 mLPPMUs1yVUzz/LKr6Jri/Kar141+bKETYEVwcSRcNy4fA83bWQ2791jaJPpVOXMnXFvDGh1 Vav3yvaypS0cnHdvMrgC5CE2mJDqyHjhs3zRLx3wJW74q99SUA3j8tE40Pcio5DY3HCZTM33 MUojZxRY3vuh5jKQMWwgMSPBYbcxYx5UgtP+PpQXPudFPwzRVVgpLKHQVhnxND4/cAutQ6J5 Rot09/uUtLPQiZbhmSle4WdAo/Xk5LN77nc11/2Yxx6PkyCKhLnDHS8Ydzyp3DdLUM63lbBW DA6+VCoBI6Gl+E5RVYNy9twgI2ujFL5OtFe0R6g7uxwd+RwUkqiUGD6VzsxLasLDUYSMvB6X 65m7DQ9+rh+shYBVldLgTl8KD9jq0AsqqFeCbYuhR3Ej70zdCWx7pYysi8zxPUL7R/mEe7K6 6NBSOCWJSovlk+mCjOMNykXPWkZeSMjw4rfOQ/HayyFaElYYk5lI56edqFFOpXYy8lp0pkf2 VjVp1ZAWiqLA6TxYiYO1wFFO7I7zSCmh+ZPp8kz2xg93JkvkvqeCgmlfrzArpf4FyUmLWPd0 pxo0BtZqX79f3Xwu/7LSs30y8lxMdrAnLYvwl/mxpltWv5OEJ0eeSqLlGccrMO4RnJY4RUiO E2iiJdp68y132DgaRE6QViE7XviFFwX1gyX2AvwiKDTa1M7QmJGFHz/NpRSmlNElPjlODh7u hyzKHC5eOl/zfQULqwTtgmvlZd+cwthmMrIpJt/PnvaP9grzZhcoM54oiciIkifTeYqTzcqw Q2Xkt3EZXjkmatIHsKtGBLtUhZi6wRhCKtz78P8/A+v+O5CQeiqEJRkQkZQQT/AjO9R5PlWu oSHPKcnQ0ISUccIy6n8FGABlJJ//DQplbmRzdHJlYW0NZW5kb2JqDTg4IDAgb2JqDTw8L0Zp bHRlci9GbGF0ZURlY29kZS9MZW5ndGggMjg3Pj5zdHJlYW0NCmjeVFG7boQwEOz9FVtelMLA AeEki4YoEkUeCpf0YBaCFIxloODvs4vJRSkw4/HOjDyWRflYmmEB+eYmXeEC3WBah/O0Oo3Q YD8YCCNoB70cu33VY21Bkrja5gXH0nQTKCXkOx3Oi9vg9BTeB3cgX12LbjA9nK7hxycR1Wrt N45oFgggz6HFTsjiubYv9YggWfbHXTeLEO378AieWpxtrdHVpkdQUZCDutCCpv1/JmKvaDr9 VTvhJ4OAfoRjj2PCGeMoCHeceHzOBfkdyvTXx9uqKOOhi3fI2E0TPjeeKIiIQ8KJzyMsVBIx 4SWEhUp54sETKU9k3XEPjs+OeB/IN+O6byXp1Tnqb3+TvSYuaDB4ezY7We6DP/EjwAA+FY0T DQplbmRzdHJlYW0NZW5kb2JqDTg5IDAgb2JqDTw8L0ZpbHRlci9GbGF0ZURlY29kZS9MZW5n dGggMTM1OT4+c3RyZWFtDQpo3pxWS3PaSBC+8yv6iLfMWPPSI3siRtg4DmSRvFVbIQcQg1EW JCLJoXLPPfnJ2zMjHsLsklobEBo+9ePrr3vm5i6i8Fy23satmz4FCvGiRR3Q/3gRnk84eBSX 1y0HnvEdJ/pj22oPBnAVf25RZsEMXy64LiWO4xh8m1JXIwLiGkhAHE59oEIQ15e0iY3vT4y5 jLiCsSbqdjS8G4dRZDx3KBHSYdDB33ro7ZwviRjXF+CK4GAlik99eYS79BR1zp4nCOc8aCIx oMFo2LTJnIB4PJBNpIn7ps8sz9zaxguTPsFMMOE9tkMolYboiOg86kd3JaLWEd4KTBEfdfz9 o8TxnEA/+rEd5zBXlSogKdJ1mk1XUOSzPJmuVvA1zVfTKs2zEqbZHNL1psi/KlDZIi8StVZZ BfkCSpVoDFx9ih9axA9cgXwT6iMZmnTGvEl7NrnS0Gqp4DZfr1+yNKkNdxNjhAZcXBsvaBty BBaweSk2ealKYhILY1TVHb4fMKvPgKxvtf7ew8dPuDBvUUih9QXqrIGhMCQqxINkbZbWLer6 eF21otYfWsxYTQMVyJ0gEiRziNjxw7j0rIaHEN+HEIXDbhzCqG/unoaDOOxBFOOaVdqBbYZO pQsi8PfWbDc8aJxPfAP0CfN8iWCfuIEnG/B2d/jUHf/VNMuxep4IvAZyX8Y2da9RUDSoZe8S l6JojP6F1HVAqLBieV8QiM/EQiUnjPkBCJ+dhH7/NAyb4VCfE+rKJvjgY9LWZVym61KtFqas 2uv7cwz4KH4/OOe1O34XnrJAA0KlZuG82ytIs6rI5y+Jmhu1LfLVKt+m2TPM0tXqd9gu02RZ kyR1nY6kinEYK9tpCYWaooFtmigTfaEWqii0zXwv4rSqlAIUvr5R2BDXECWpyvQX/Yx2Ev9W 5xIX06zc5EU1tb1iBd2Uq2Auof8q18NMcEg9FpjAseCSwAXuSeLv6KCUcksgvB08Pp6MhYPq cRhznH775zitNf+/R0LHVIt4VHCjPea7hlgWCBvR6cz4teFQM4l1xrCN2i9Oi5s+t/ni8GeE ChaYQJAaa+GtgrTCsKdJhVWdfTPeI7yvbMHv85dSad9jtSlUiWFPO9ausHY72Cw6TUfbtTWm DcfU/o40+NKjVl+iJrhKv6pyl/NTluoYIpSGXeyimpAClDLykT2jeyS7LNV6tlLza2iGQV+F wSxAnu7UVKJiWKDrzWzbCGG3gCi8jXF7Akoguh+NY4gH8WNI7ETfuzpSDucNS9Yvb+iMv04f NW6HVbxMbW3X028wU5AYArDrNB0/fsRqpTbLPFMw3snuEvWiqfHXvvX5RHfETJf1difr8Ggn 01XvadUXuoV1eD9/AqpLx3SJcnnJvbNrLcxu3L3FvcPYJxctu/9RTMrkq2LqWhJgBPqjcT8c xE/j8MRJs4zHNqxH72IZnbqZJ+0pdu7ATmhSn2scIjmeppiDWxDHmIJTmdhT0D4IxiiRVPjH wPbdeZscVzhtIMNhOO4+npj0POJKjx8DD1GT79Fh+LyaOydNjq45R9hRRfxfrvWrAw5M2sKD JxIRXSMcfbhdYWuj/OZq/v2iFgILcC3AxSOLTlhfGb4cnSYe1LGf/1RFTw+ySG3MicRBUq4w Fw/3CjyPvcE2fJhi/sKeGfY/PfxdAe7FzHH2Sx9G4Oi//UK/WJsVala8dn9d4QFcsj0gWugV VgP0SvhmMtEbUTSZRPq4PYjqZ/WdmTEOSOjodHAX1Hux1rPZlRI85NpvmP9mlmZIKFauF73z gh67FezDeNSDbVotzVYX1fvqPwIMAEL/DCINCmVuZHN0cmVhbQ1lbmRvYmoNOTAgMCBvYmoN PDwvRmlsdGVyL0ZsYXRlRGVjb2RlL0xlbmd0aCAxMTMzL1N1YnR5cGUvVHlwZTFDPj5zdHJl YW0NCmjeTFJrTFMHGL2X9rbA4KqUy8a97vZK1M0HyEO38XChURGky+Slbuq0wAXKaIttKc+K QEVIBTcRFXxsCgyIIk6HTsmiRqdZxMfmWHm4MTeHXTAm/jDfLR8/Vvy1fMn5cfKdk3OSQxJy H4IkSVVqiiZ5TeqyTL1BtISnmww64ywdJnGkFCqX5geEYAIap6umQ6j5JiIQKuZAzbzB6RdB hA9JtpxcYyouN+vzC6zCuzlLhKjYD1Ytn8X3X2PsLMZGCppcU7YoZJRbrKLBIqQYc0zmYpNZ ZxVzIwRBU1QkpM86WIR00SKabV72dRhBbxF0gtWsyxUNOvPngilP0OqNJmt5sSho1gs6Y+4K k1nQe3WWkmyLPlevM+tFS8T/ixCk94h5fkSAtyshIyjiY2IvMUwmkBXkY594n0KfF7I0gRZo e5cnqIvsmIKjUzJo9vAMBDfhgfUJjejAYAxuhNrHD5rgAASru+So1WEp+mPgAFpBC9oBsEIg +OugFLVq2tnuWVJKgv6JDPxDoKddkVh6eFAtPVfWNWFyJGVXnrrpdB7h+py7bOqZT5SavMa0 Rp52uqTTwyRMPpFJJnib2f0Fpc0ta8jjsE4BCbCWunx1YvIVC/KoB5Ex4VtxmYH/up66carX NcmBf+eKLYk7o1ZGqDEJ06hqiVXS9n5p8k4Q/DImPlI9hHD4g3nY1FnfX+Z7t/CIxswmZidE 8BvFm9u5SqvDtPmv+g6IgoC/IQzeeu+c7oRa9ee9S99cusF+V/wvMsnRRfhmDt++j+puHxid 5Ib7N21Zkbg10ugtC5Wpd6W00qAjF8ExqiqTiqCSWSSl7VDg/Zk0KhX6lKrvMX5EqSqD+JdK TL7LoEMBteCmmhS0/bx0a4wE6WcZpEjjDGxRHD7kPNSs/vZp7UGqak/tnl0cigoksYZyNDTv /ZIDYh+s24YrWaQ1GRv4rOKfUrkcp7Em/6plDKLB5xWEPt3Ts/OaeuOj8OPxbb60vVuSXwHH MbLPDQf+kUnpnkQG6+vwQ9yAO1jMe7kc/CGpH2J+BXa1a0GGrbowkz8J9AvgIKnbF7PxAvOq 952FSG3frE1MHoaEO60dra3qjs7+lj6OPmqT3MPkV5JGJmV5ljIzCkXljp0Lj9dR186e6Bni wKDAT2fc1JACCjxhlDeNh+4OuulaNwymh5kulRsKYIhRPQVl7IBBw67bptPGbR8a4VXuycEL Z7p4jMQ4ZvW9WJjLe5/izoL82n3bj8hOqVUjN3rGB56xro/uIbVqcdbiuIv6CY1XGL0+u2gl qxoZlxYxg2eu/zZyLiszJiNPNPP5p6NvjbL0SRvUXZLk3WTvM3A8l90uYeDgMVgM6VDAQvwy oHAOhsQjgaGxV9AX2B+unzh/mW9q3GvO9I6+PicUboOHKW+o3l3DV9h05YXcghLwc/1+2j0B oU7cvFFN29s8S9vQ1goWpwLaW2aq9ivtbdKmVviszReN+yVLC8x1+nX7T7whNQR7zf4TYADP 4BmjDQplbmRzdHJlYW0NZW5kb2JqDTkxIDAgb2JqDTw8L0ZpbHRlci9GbGF0ZURlY29kZS9M ZW5ndGggNDAyNS9TdWJ0eXBlL1R5cGUxQz4+c3RyZWFtDQpo3mxXaXQTV5aWMFIVCRhCEGNX QZUmIQQGQhKWAwGS4CQQ1mZxEMaYxdjGeLfkVbZkLdZSq0qSLcuSjCTvuw0Ys9jYiH0LJA1J OjmdhXSYnIZkkjSZ9CunxMyUaXrmz5xb9X7Uqffe9+6933fvk0omTpBIpdLZmzYkrN+wccEf MsrezcgvLtFoE9MO5x7MeeWdgtz08R9e5FEpP2MiP2vyTGGloP5d93u1bNaqv04B/qlg4Ln2 Wc9Nmy6ZIJUGB94tKNRqsjIPFyvnpc1Xvv7GimULx8flT8YVyoT0goMZykRtUXFGXpFyQ35a gaawQJNanJG+SKlMyM1VPplbpNRkFGVoSsWvIiLlU0hKEVNBQe7BgoIcZVaRMlVZrElNz8hL 1eQoCw4pN2flFxRrCzOUCe8rU/PTXy3QKLPEhYpKDhZlpWelarIyihb9/8eTSEWTTJVIpssk L8CShTLJkhjJColkpUSCid6RTJRAklckOulc6V8nrIvBY5onyib+SbZLFpVzUBz0BWyDH0wa fWbaM03P/Nez6snPT34wJW/K17Gaqcqpx6KVseOPRRcqA1unnwbbng8/f+D0F4rJkqSTqaOj JwdHRw+cTEo6cCAJi6XP8y0XhkNSkAVejQHfje1UvJe4yLiEgj/4BLpG2bWJSHQyVEGnFFuw XHO6I4eCVfzLkVxIy2hpLWNlxw0uquPONCL8dSiWBnN49qL0BNgIZoNVMUG7ws8GGD8D87Pl DZRoZCMIxu2SE2X2Mls5vM9E6ZNRwSLvaO5s7Ar7PL7aJ69o9TX1tfW1vS3HWlr64I6B8OlR BMQJyBVBvmWf4dBubHdmbtJmZHv39ptnBrqGzxR1HAxgZs7AepGg3+erw8It7a5u9NO+pLU7 y1Py9uGVReXFZaUJb74+f/NSU1VcrG4IXBgFjaPSZvAeWAreigEW8BfFzw2hFauRt/JWLda8 6ztaizFOp4Pj4KaQL9iDDB/o3Jd0KD1JmAHQ1N9Gvq5vH8QuHe85+0cETFl5Voipxf499M3p X5Hzuef2tmMdyYmeRHTrFl16Cp6vUaemI6re1Atnu7rPHjE1Guoxi9tSU+2y19AOZw3c4h9w tqGtvRXF9XigwKnORlKMCzfpKjhOh2ldlQ6tBTYY7KQWKfEZw7UehqkVQxcB02/xKwak4BRY GCMO7ysSID1TaTRhBEGQdhImqqtJM7pbBe5H5CUFNKfFK5x2TwD5/tGtOeAuxJ5ke9hupid+ vTwqiSbJEiDQAj5TCLVCKhSrGwW/X/8SrJZ2g/VgAUiIAW/8rOgK+EN9yHBGT8oHaWkf7OxI PpWP5Q/eNJ5F+wadnh4cSPoufwcmIkApTPpK+Jf9+83l6ZiVstlthA/ExxmHRqzD6H88HPnV jzsZzu7EKqkqwkTC1Wmp1EE0M4tmM/FsNseR44QdFj1tQu2rLautq4g8ez6RZ7Hbq602mLAR VitSbK8vbUEDHnd9Dc66GDfjglkX4XQhjX3dDYPo0T5tXiPemMftzEQWl8wVJmi2+bsdHo8D Gw/8J3eB7qy0A6wFa8DbMSAZ/KeC7aV7uF74k5pWMPMH1N9AGOvwWrPNZKmG9VpzRTGy51jO mat9vVd/Uva98dKb+5fvwLYvrVg8BxHeui+8CDYBJZA8AC8Ol17O7sOOH05s3IVu2VmyOwP/ ceYd72s7d1iFZ1YlGP5+4Zr7x6/wWJ0Yu1XX+SUDUi0YAEvAoxgwDRxUFGzKWrmqGlaBgQiU QqnqLyF9wZ66TgzUyE8KMpeuRl+lj6/Sp3NakYbgUQRaz1YHii4Jbv63uDVyYVp0j+IRYH8S WFksJ+5wMgJaI1IwBawDNNgRA87xf1aEiVZPEGuqGyLCaE+/rawN7yyp238YSaxMSVJje4u2 1uwm4TtRpaK/n2H68UCAZQL4iGvYfaILPtPbcu4SAmYI2NALddjfgkDSBqYjp4tPHW7HBnct q9+ARler5K1UG9tidVIukrNzBGtn7TBnoUzVSLQe0tKcvRKzFia4y0hYBfES8IPi2AhV2In3 5Pv27kdSq/ZmqrGCjF3UXtSQS9cbcVM9GwwgQAvFcrprYzNGpQMgOYb/cexNhZ21OQgHfPwP ybXvofMWH1q7Fk9IODzvRWRB+ysfr8Xe/vSrnN9QsPmXb8D64/g2n0yYVLrmZWEGuifN252J H+qt6jEOw4ZR28g55Dgz5D6G1V1y9vcNw2f6Bhsuo2DmbQERpO34qNMMBmSp8tgrdISPiu6c KrpzSAQBzvNA4aUaPbVY4EgP40fB7HPvC4pG3JXOZqQjRZSGKMKEueWHlgkrUJ2aqS/Hqxoc 7SHkMyFOcfse3XIdv9t+42r3Hbj1kufDG8jDom833sXyuw62pDWkhA84kphFbJzwQNUsD4VZ SxAPWDmjDokGIANjsBsxSqSBnSDsNtJOwXZ1AV2IqqAniTU8CppEnLFgXczY5pl14MhuTia8 lJr4nrAY1WpZVosnO9nwKQQUQD87LmzlFsDn5XbwiyxJbly0Z8e8GhhshxqoI+4Axta6XW4n 7GlsYZpRsHRkizD3JD4it4B62eNlKnl7B2Ntw+tIzsaZYM5KmS1ItOYpPPOh9b5CQoxx7C4R 0ukIaBYhzRAh8W/NjECbHbIdLO2NIEDjgW73lW/pwOuKOTVbBI+Cn5LkpfPz9ik5GByEAmSj z4s1NHcT7SiYe3mNgPQ+ARCQPZ6napUHqTB7xAKHrXSRFolWQzq6ktBhJEHZSYIkxgfYbjKL OrJVJQZQNwLICABnpcdFyn8JlseMwWPvK/QGN1PmzQ7neDLcMKcucqjRQjVhU+MbqvaXqg7C 89ccECTCFGRh2+s338Pe/OMPuX9D7/+559Y1fGSebAQQcj/V2ODGONZJc2zIEaJCDBwReNVF yO9jxlWkiqrQIRpil7kE02fbdDllsL4421yArt3Vd0uNF18x3buBDLMjnjMYmNB84nugQAMN hN2Pg2eyu+cdnTPiiDODo7ID8tgfRE8evwmCT5MwLHozNPa6oo3s4FotcIvFnl+GREshSktW Ulq4gtLa9egGFT8jIjfsZ5lKPNdBd7eKLgdh4QBU5E7OtmNE+V7ShKr46RGokFI7Ch1VnMVF +WAqSIWCCJ8KNdr6O9zY5w5ZJDpNBQWuO3SidNtoC2uFWQNVVYUIyUIYHICO0MFaP1YfvEr4 0Uh0BhQrfP2UL/HjQV82M1IEVTIVlM5hY2yUjYXL3XRTAOEJqI7yOjyYqOE1TifcEGizh9Hu SDRe1SU/QgXZBqvPTlU7DTBrpI1GJFoBpXNFe23YZjGgJ57u8KzojCXgfgz/rzMjGkjHVJB6 zs7YaVF6WELUCNJJOiknTASYgCglk6HvvgdzBLPb4DLbdPEESYrFEiYtFrIaFX1GVDCitv53 BDKwO9yUP/9MvJALHnx572jv0OnLx2454iPCfRUUpJqoZjpsincRDhtrrVFnZFZqhUyhOA60 iL5oC7sxJ+NiRJ6xYSosJkR0ugpqa2fsbXiLiSguQaJGqIquoqow0mg0GSmYVBcSavQfdPmn zMSMrZ3pBU2yXXJhVv7mlcLLaEkp4yjB93GORvIYzJuhE47609jNSBQTufANaSWXI9F8qJzO 15CYmlTbC9lxAoK0p0tO+pCnxVXBJLFTIFbp978majA4GoHmEqYPv0J4FQMB7WNUNiIHmrE5 MiZ6Um5kjDYTRlVbLdWEhTDTFju8XcVPi6jlxcx+m7WLdDEu0gXzJVAz2eJuxkL+dqIR7YoI f5IL86Mbhdf4jTLhc1WLGMpe1m+CG4z2/Arkf6V0+od89ocx4JKoCK+ypYPfIDwM8XnRy7Lr fIO8g+5wtWPei8drRtwiofpV0D2qNesNRDgJReP5AzLBpZKfPF6e2YJHt0PEUr1mkX38tFd0 Z8fwc08oLoyXiuVjCQqw5IiQLkw6RKZZM/FFlaXCZGEy+s7Ono/ycfV1w/3bCJjmBengLczw eJvit2/bP/0Cv3v7NJjwI/Jz+sN1d7HP3369W4m+Mjd9w3p8zTuH5s9BXjkx7+Y67J2PHmb8 jD4RXfcFcPUfCgeqxVrLL50ZyRGbMZ2YimLC0+I7Xq442FzDNtUhYC/0iJQBnARbO8E65Fb5 yM4BLPHENtd6B8zo9YwejS4W9ZXqdLRZnBRHOMYrqZWxwdE2KIsuTqUwqrSMLhXzBfTxjxRB Uux5MV/gKBlCQcxgliATkC1qIRbX6WgdanrCFDAUAY0iwudEhFXj3cBF/ldFiGkN1mE1Ta1U M/r9SP6/CZLEnPkELkoBWcjAQr/YDaq6oSaqxdlQAXsN9qQKJJoGkQfpij0UTGnLaa2oHbNF 0lUwWqrCUcpYXbYQTNXRXvGMFd2Q309Tfvyh1bnVtZzbGudId2e058O5Xcf1p9Av7/Z8G8Cd QSYUQnbLiRzryqSQeEyO5EwhW5OtsfJGXNm9PUNvBGEgqf37MJiGRPIv7u/AdvWoXNuYNWxc rFJ3bmzWOekogMAv4NmYK2bFKfmNa7J9F++U3EVvfuw7MYqfP91582MEvCvMGhTmdGKbvbLt 3g2hu8gnn3bdANP+IkiVR7EReRXwi/q6M1l2VLX9yCZUeEGYmiAs2tiz5VwGfn3vDf2n+rv6 uKvGocL1yMo12WsFZKFYXeVpWLJ8nK5jkrNS0CwS6ya/S3G/fgggYCLqDdt1DM7oaZ1+vDAZ GL3NgFFmo6magol8sZsVHTcvAmkYNalxwBlOurYf4R2Qj/YzPszPhDkvCmRnBMUin1jvdKBZ 9ni+vFJolon5/Rn/2ziZxTiCmzF+sQDUn6OtIdxvZU3iXgug1cFNt1Ow9AsPDLfQcx+5mobw i60nIw1XYE+vo70PAccgx5fe0YcOkVTHVGKlDzIBC3xZxyQmI4IXSmQ+OJyCpWRv036AZhU4 63PxzEClT9cP6/qZi8cRcA/yks0eD9bUNGjs5ERhe35cYXQDY3ERqQtcHQZnbwFHjEuEVStv IRtYb2FNFVfp1IN90d/jPpEDhF8Gno8uk92Rg7X8tcDwkcj5QLyTGTcRkEMF9V8w7s025plz 8ZVCWJjAS4h6i9/tjXeIFzGO9bkbSP/4n2dVIpA6MsC4TfG+MtbsLu19MW6F4BUm8xNldHUT jYkdaK3TybkZys35nQHqybSr/6ewrWLIDCLOy4ynsiMFbBPOxwkqqJzTlFRjZdW72ZLxu+5L ESg3h3bl4mK7yYr8tXnJei8CsqGGznHrGG0f7R4+drV98ItacfUzKqiL6maaNLDTxFmMSJmp ylyBLRDeEWaDEpndZfbVIDUc53Jiodpme5gVpwhi0+YfO+QX/B6Q6peDax4wyfMYZyD+zowx v+J/BBgABR9C8Q0KZW5kc3RyZWFtDWVuZG9iag05MiAwIG9iag08PC9GaWx0ZXIvRmxhdGVE ZWNvZGUvTGVuZ3RoIDMwMTYvU3VidHlwZS9UeXBlMUM+PnN0cmVhbQ0KaN5cVgtUFFe2raKp KkSDsSuFTrepavxgEBQIGv5BFMQekDCCP0bRbsCIyscG+STEEGNUVEBnEvmIgkkkvkQNCv5J 1NH3NCM6EsHGDhKadjrTSSvGwJwip83MbcxM1nqrat2qdevce8/ed599i6ZcXSiapsfFa6O1 MXG+CzI3FGYWZKXrnJ2TZTUtj3eVJ47xxDDc9HPpz8HMxJxLz8GbY+HzcS0TnxOUlAtNVzfO y80rMWS9vrZA81K6jyYwNGS2n7MNHmlDnW1ogCY6I1efqUkuyS/IzM7XaHPScw15uQZdQWbG TI0mesMGzcgM+RpDZn6moZD0/jcXTVa+RqcpMOgyMrN1hvWa3DWahKyc3IKSvExNdJxGl5Ph n2vQZJGx+Zv0+VkZWTpDVmb+b+MpiiYX9RxFjaWoce7UZFdquoIKoKkgmgqmqEiKmktT82lK S1MJFJWooJJdqGUUNYMwQ7lSHOVDRVBbqE8II1voFheFy0aXBsVUxZ8Ura5q1yzXw67trgMM w4QwG5itzB32ebaYHeJELoS77DbV7V23NrfBURNGJYxqGtXv7uv+nvuZ0d6jl4+udyR4jNw4 7dzjIbr/J0W/5yV2Rdly3XZxJddQ+e1+mKh6OJkjEbtGPkPykDCGmuz1E+tRbJKvm+hmG5y3 KeRI+F7AmJVe3t4rhyAGYs4NPX58zgtjRJsneGfAekzDtAxcj97ofRLXQxqknYT14C16NBbK 2ztAVUTDAZsCcDhZmM/mIreiDNl33WIhxLHdxnns6pVPmJSHH4VZ4JiN74YJ8lKhrXIvPA+/ Uz/5PCbZf3HOnNXSzMUM/48ZKdrIbejtJm/qdSjZqqbGv/xwqbNlwuCV3kugVMF4HxN6iHx3 FIYXYIlEQMCBTig0KY9Zo839oN1pXWDjbfxDKIBuoaZ2d42a//HaT2XoHpaQEojj33xwc4cU wO4Nawy7p3crOXZm80U1xHWBAjhb6oW4Q1IFx39/ovri6b+r/hl2DyfiQh3yU0Qz21b15x9h nHrw4/m6IG1enMQ/LH1z9+5SieCHKKO8guDvsyjkBogSjFPkFXM5vOtYxMyGaxhlgSguUJaE CryDhYR2I3SYwMdMyyGEsFj5kQBfmh0Uu8TxnHE7c/rouY++VPffTvEOWjQ3ICLx8/tbSL4Y WA/ua75TQ95xiLwHU3HUN8gmrC4syB5h4CsTxJjoE1b40qqQd8k1AkzegtyZMDWuWY4GnOlf PfuUVor8ojv/svrRqabWZunCxYMX76ggAlV/me2b+sfMTWJ5BdN1BBJBNB5buXCfiEfwktB7 vsMO9NHZC/0Wa4OnpPXcHdnuR2a6WX5D0Uwyl8ezqMZAfAH35ONiNzv7JdyCCCjo6HTrdrzB OXP70Ag5JuUJW6wVdlvn2/gnvF0ukw8K9xMfYQBGpOGYudrjf7xWIPJPorPTUmarsnZF3Vkk rrrS9c5JNYTdARqYS0X3/Fok3v7p/v/79LGKf0J0mCJ8c1Pnhy6vFsSjR+63V9rPtT8iETuN QnxS662zH7bbnnyycHV8amoUYagTtCb4q0l5yhpigcNP+EHYD28L7R3/c/mwVFHO4O83LQvz VfP2ebozX2+Tgti4MzgGQmFbDXTdBXYTrEWS3iC+FIkMviChxjoLPMUak5AUXA9q2+Ub9x+3 xoaj9HLhSmmk0ODqkLL/J77xt2LjV8s1rr/W3bJdvbDHBBt7lV12uGdPsJN8oobHChDD8jJQ rZkLghblzpRwHjvd8bIAX7Hke1CfHTgYG3J0xUGJl03N9TfPqx7O70WViLdZu4MXIJmEmR4U eYcvW+YtYTrrUVVslnvM9JkBxfAr8k4BxrzlCxwuVGMmKnEGbsQjMMsLgi9DXjV81CLNYDF8 HdLZCWqc/xp4QiT8YfAH8Lw9WIDKJsmjipRwWy/dY5c1A4oeT2hhoawDMmA2pCMHk/A1Cc+w 9hABtCxM6A1ALWpDX0KlhElOwGbYaoY8M222K2SHWXDEwlb5RbPjRciTXzU7Gp7q5SbWQ0NK yfSfMIgHkwCDZhwkMVPMjvee6u0sIbexcFhfRFtJQNKwXpg+0os5xb3Dk4roeivk2xX18KYQ wy1oRlcIt4PLWYgQ5cbpjiYu1rA4cIH+U7P4Beex7Nk8RjJPNOwRgAEKqtDBgJLFa/IcuAin GVSx+BgfM/DYuQwxMfPwmF+HPFta1jnr1uPaM6JPDsg7CNc8oICRM3AsUXfADBhLiIy0kUcA BNhIZ6Q44An+oZCPjdgYivnoj/73MR8aofE+5IO/6EwNrvRCRS+hAb4bIEw4tbGc/earnIDp SetnSbiYDXGFQhYCrgIzAG7hZvydhMYRKqp27YezvbCjV2mxw7/sLw8Q7SyE6wK87dSWW/X8 pLxKpGtXSTB6P5tdv61uZ8t74Dlh+4D+gL7ejR8813T55JAK/NC9Fd1F7HNOOjzWFbaxF3q2 oMJrTkmMhJvIlhb3yv29yjbitvC9NdrGd/Ldsl3eI5i2G2A6Vqlx7lx0QVccN7TufJkE07IY /gG45x7Pn6Oagu4lsf5eJ0gNBbALql+7niLmfHYxnRwFhKaXz8OrwMZemXlI4rtRd57RfbC6 4boK6Cf113u+W4uKPYShXUOyXEQ3DHMKsAwJ5SzqZJlBioW6p3rmCXkM6xmknXKpKBzeUUS/ Ae0KKC4WbrG4c3gHo2U9SjvjOmSfTuXn1t/3wHsWvpU/CpNlSmjZW3t9QN3bkp2y1PBuYbmE U0sYvhW9SzZPXaUK/FviDz9eutB8TOQ3pFdWp99TN9TsraqTbnDl75SVv6suKXv/kASXOVCh X7UOhZBUHLddhLsYL/DEIJaEanOOXb15u+b0XhHo2kN/rt3n5lFqTLwuTzLBgiLl/1rgqJVv 40vBy5Nva6/gcg40L3ughvkXIRzGwbQIYFGSEncuNWSmuJVDbRDLlz7Vc7Ir7Bf4NuTSZvkm z2oGqa8WXgReJPNM/BMKCySyBszpgACTssUGLZZgKz8oh0KIkLEjNT5E7b3sr0BLspKFhdEw Bn0xOpII+BX07UcFTBN5+dtjDfs/km6e+air8mM3x2iQhJ4bd3uIH/7z2JywPdJITcpLOkFp os0WBdTJS4TOoHbuVO3BE/tqd+7cJ5q43W9t3r1ZPXv56xFS4Ly5dxxLLPISznmUrHICp9st UEnOzrdBFsBn6tGw4FVL1xnEcjgQ9FRvgRPEULpO3fm2YWWMiN9byK/MVjKyoQi4AeUty3jw lxuEIEeDheUD5F+Ixw4ETeOIJTyLWV9E3+pTwCnoEWAFLGXQlcVNuJGRZ73yVN8HqVznTQjG egYY1gM4Z0Y34k1KklCe835hItkHz5EUJlk++6K9fskqEX+xwB2uo62j6+6h1HkiWi3wCwfT vI4kh619PXWV+Elp9tUZ6hlpibnFUjnL93SFPEP667yVFv7sb0gDU0mYSMK6u0IIBDjB8WdH ljIfXhkg4l2C9i2jPMVIH7fCVaviONQJqDaiFxFEuBG8QA3qKPDCcAyPQi9Ui1bPjsPEu5Wg PIyesbEb0ZN4vXIjeHaIHphYCClGeZIzkWdS64FJ8I7wTC7PtPKbiMRgR5JggboKds2H59Z1 /D8V+qUnZRc64dmd8BwCAZhkirApuy18Mzk4rwrGizfui0etbMXWbbvL1NqV+sS1zvDb/U6Y zu0pNcpTjcrP+uL6oLgvxjLiH8myu3B4M4j42hS/pcjNu7Cms0T80UCc427xkbd0qj8sMiTg 82/fbN0hvsImVNaRQzpdDe4P2oH6OrMF6SZiGUGHmLj6vA9Oq9q7328CRXXKut0ikehWozyu kyZ/aPCBU5/B4B2E3jFzv8aHXMLB1P73P66q/Ey8vYErWburVYJ/cMRIwRVuFYJ7EV07HK+A n2UfoYIdcvgwVhb85AYmiPVy+DPl7FTZn/FhvUfep5F3XxZ8HQ0kyqP44LD+IK6rg+l1LHy4 D56vejqqhhMb55WM/9eYUUZ3y2j50gvkJPm3AAMAfUyUqA0KZW5kc3RyZWFtDWVuZG9iag05 MyAwIG9iag08PC9GaWx0ZXIvRmxhdGVEZWNvZGUvTGVuZ3RoIDkwNS9TdWJ0eXBlL1R5cGUx Qz4+c3RyZWFtDQpo3lyRb0wTdxjHf9dyd5No0R4H2x27u1AwTHQzo3MCDgKFWWJKZouMLQ16 oQcqlbq2m6uQtAxhJsifKQEpI11kS9xqZB1bzMoSYa06FiXR+GJhf7KZDfdim1OTPVd+GHb1 zZI9L79PPvl+n+9DoAwdIggid09d1W5rfbHloOL2Kx0H5SPbqj1uV3plUnlCzc5Q89bn4Brc lZfxyUormfdk0QZ4IQusm8IrRUakI4jahroGi/QfLx3ySbLk98ou5YjsbZc8rVJdh1/xdsj+ Q54O2S01BI4qrXKLIlk83qMe72P52f/7a0OgLGREOSgfmdAWtA2ZUaYWGemQHhWgJnST2Ess 6nS6ct03BkM3VBBfQ4UeJDCz65FTUZzOmBKPx2LxuBJzigZz/xp60Veyptt86sYfBLwFz+sh S33APlgdpxzllxo5H1yfoueq9ic4daWIxjscpMEcmIXUzb+h0Pg55OJcKMPMNWgDC7N8J+Vg u/Dql2+SM+eiH83yf0axrvSlNvN2kRnubBs8JzLfvn9xfIa71BKVm11tzZtB7/oJ8uGZZdgO PN7wOzYKjKup6fhhlzgExSQsUcNQSx6nXvm03c4bbqfDvpq5hk6f/yeh1kWIIcjXq+XQzH72 HDkcGnoneKBhdjfXBZfD9K3mPe7vBdyp/khO9PZ9EORPBHtP9ok7Wsiedzv7gtyJMe9AnzDi xy+vvk7uw4Lr10oNVML0onXfPDd5JnI6LJxfJOEJuMrew4Mkfo0ynO1PwPSFwwkYThh/hlKw gAU/rd0dh0G4y85RV+4H8CacU9K9U5QpyHSwD6FsCipFphqewhu/2DIgDNDMD3dHlufvc5CN 101jJOC/ApQtcbmSW+2hKxxzNi5Awxspnr1BTd9+2yQyW03V3hrBTRnwtf5IqjhC3IFS/cfp nmlrMrkrje2yJ61a9qiW3W5f4tQeeilpX+TCtPbdRIqOEL9oiDoHNvYYVfIQs/gYX6XOUN9d b1zgJvFMgLYl5yoe+9vT/uoUbZACCSWWokdD0faEcWKhEQrBDYUFcaYfMTVoAupZXL9Aj516 b+Qsr2kfzrp+4yEPuHtQIMI4fmSFrdyVry7OC2Dajwtv8czGUBRqnRQjhbpP9oaCfLBzdMwn auior31U5jGN1+3EWSI+A4+u4jKucq/LJmDrBBQ5eUNgUg2Mw4FJCi5ka838K8AAcUmVMg0K ZW5kc3RyZWFtDWVuZG9iag05NCAwIG9iag08PC9GaWx0ZXIvRmxhdGVEZWNvZGUvTGVuZ3Ro IDMyMTkvU3VidHlwZS9UeXBlMUM+PnN0cmVhbQ0KaN60lmtUU2e6xxPD3sRbbDtne8a9273R TsdqdTzWwbFFp4otiIjIRe4ghkBAbgkJJARCIhchCgLhtgPhEgiXQOROuCMQQMAjKqOo1Uqn C3s5XT0zR9vzxnn74Wyw7aw1a50163w4a3/b+9n7+T3/99n/52Gz7Nax2Gz2Vne3Y64eHu99 HOkXk5AQuddNej4uJmL1yQ7bv9rZiE1boSNUv2l35W+HkbdYR5y9Nq9sAZteN7/JC3xjNWrL P7zIYjMXazObtWMdaxeLdYDNOshiOXNZHnYsHztWEItFMWlZdiwu699Yx1l1bEd227pgDodT ase1o5HXEBH6BipCv7G/aP89V8i1rE9cDzeEb2RtDN84twnf1LD5V5trIcW7QrN5tyycWOiJ fXNvaN6KW8QtwsTkFFFCjbpdRZbnFuVm4ZJIn4OuJM8BeE6yq4AnBhLQyikExqM8ILxCg1ja 9iHNtm1d5uzbCrp1qJNGWDWC15Sa6syk5Q4C5GghxAqc0vIgV7NNCYDOHtpr5GW5K2Lb3K+l KLz9o8rtbb8zh7O2gSIgx4AAPC2HTxEeuMJ8/B4NrMzHiwGHI9gKOlEQA+wXv3t0fA6+1UQV aBHg1PjF7DK+/P5NuJeEWiV6N8+YHYEr89JzFSS0//GoKjw7Vpy6TaGKzz13mQs6wefYNBAh t6srddeJ5b4YV/iro87QgYIbYAZ2g3kyjgL0Bt/lcKxraByVHBuY9TERJtO2VRTUaRspHvBN pl8eodmWZY6tAaRj6Sj8nXCf43Zin+/Mi+nKpab/oIzPGu+0jHAn2vqbR4gfrO/AkBxKhy6A BSQdDVTIJEmpmeUaIjejpjaOqpIkliQQTu/773SmTjnG/m4/vqfr4E0vMrZ9IG2MAOv/+jVw NFM82+ZfpACvgfmvwBzH5vJyNwbn/1nBSjCvs//kapK2B9ddrSzUk9MgCQELqA8U/GPg3M+B lUxgFQm4tqMVlqK2pupt+nJTUX8+VwfnlPY/pdOspvOBfAQuoOPAt6Kv2Pz3QB7QM7xf06CD Obrty/e/5QB3sA67CXKRQXSlT3yK8oz28MDPtkUPzFlnwcY+UlWI/FYYGigm0i9WGKh23eAk /ihm1LmVzC9GwDHDysyn+LP94/A4CSv/zxXfAaXYOAhDbupLKm8QwO662Bmu/+Ak/D1zmkeS aRsPyJcYXXdZQLmF0yDFdOi83tjWRjRUKlLrqMiBnpQx4r8ffQY2fBk6dmCGimoINZzv4ooa 0s2d+Pz10T99desD+JZck6SJJ/XoIzCLKNAzyWkJiUSKyqCXU23RcfoQYu8xpx37x/2+O0EN xQ5JTXyuXqpNisdPnPE6AnmHwUYQVUEqmB/KKqVf7qTZf1kG34NEDuCBJkwdoeYH4u88cge/ Bm9PW4FDJ/kl+KZhpaV3vnCbDoqU9nOXzUmhuDQ3IfMCeQB+jsD1cV6BkEu8F2D5tKGopbSd +hb8rfZ+tf5ZHvPCstL+84KurGhceSn9kpzkPVDQtsM0u3QKnLNwbGHgMKa6ikBUEOwdT6hz SiorCmu0TdRX4FvkJBoP7XIKkEeF8b3eRHhIoncQ5eMucnPGd4+fvDM52PuZmSzWIHkyTZoK DzWI2gYm5wGvi4QP4VFMkNxi7SydrLtL6QZ03bXXuN31rXXNxGB99IlDMRANP0lFiGJTYgle bSptO0IDIc2unQJXpzhdQImpQnMEsfihsYAHUzfNs8Pk4LTBOoeDdX6LLkERMS5CMrfwz+AB AqOV6MrljjwBflGTnpNCGn+cxsITr02MVk423KJqrtf2Gpq5pvqmykai1xjnsysSbgh1o6LE 8fI4ghfF5P0jzS5YBGILB/wV7MfUWgSyg457nSYC4jsWnra+GFik+ppa69qJa4aUlKxMTUYW JVep5TJcqlfUm2obLFZ+r8/5kOSwc6SLi/CQM7533u3x0oMbwP76zzqv1vW/Sk0zUjdSYI/t HgLPZqD3rprVAlydu9ronvDS/7vyAT8pMAXSmjngKXgPU2kRBy83P0/ivMQ01VxkLu+kwD7D p9Mr+EBUZzA/KMEngPQ8Ee/iiu+edrt3a3EK2N0gYc4wBnb2jt6fIFobRJEffuwJsXSKB38D z9O2z41ATrOho8UmY1TeaNuB+cC4FOgo3sU9IkuMPEckKWiaKu+6eg2vS6tKFitSE/id0cNg yyQIse18TAIOqq1nNEPBPmPng0XCVJuuotJDNUI8Ra8wNNYaWvsizD4HPJ2gYwT5LpotRXh1 kE8Dl7UpJVgGJToOWHqIfQ3+8ks/LxUK+72Ic2uq+rqL3Y/jeyZdF0f72mZNpDYPgW4h/r/f TURKdTSl69P04oa0KrlIlhIb1nthAbz+8BvgNUZC7yMYX2Ka7GCEXlwTuqaVEbqltpUYbhR8 lJgVLDtJKcPSotMkXL4oViYkeHNZtO0dI4hhzEdroac4ysvYAgqM//UEEKNEVdnF1GR1jDKI kp1I8w7CXUyCgaGhsee9pLoI2XU+PDiKkKl1zR2GYcNdqnqypN+Mz4k6BB6nfgtDDpG5V4GD rQ6BvmtNlCHEVXnKS6kkb08GbTtIA4c/s59YeiwcLcjGdHkIWN8yMttO6EsyZdJkf/H7lMIr I0SA+7YIzb0TTPN2k8pCxCEyzC+OSM8srTboe+rnKeNdvXUEnxN3RAQGnIRvXCCB1OaISeRy SVK13GisqW5skNVImGN/V02/3Eqzq6Y4IB84YxnFjD8F+XlfIOQqXaO+uLGsiwI7bE1rsPcv mzJXO16RIyH3QBuiCssRinCvptj+iYk5sGWc5IHnatp24JVfu1oAOlU+xVGDPKwsFwFcy6j1 GlFZkim/qJFnJ1GOzBrBKGp6/Ay8OUHUlilFSo08V0Edgkuv7q8AYpyoLlZLhKkBKS5UekDG OT7uyZTdP8CMpc7VsQTXCfm+IkKVXVptqrE2fUFVDmm7W/F/j++J8jy+B3q7kTlo7VLFjAW/ K+kU+DjvXb11CW1c0S0M4WNSU0yIrwfcEs6Ab/g7+AbLP6duuf8deHOUqNYydPJXdKpVuuZf 6NRrdOd/pqt9RVf8E53v6cNwP0OXj1TPlo104ZNJrTGh3q9YiuS0zXnNhzTMqfxGjg2OGYf7 KOt8y9Kf8Odn7x4LDRAFhJBe7gnuzvj2Gx8vkR89x3rKJw2LpN5aM9DYxm02GHWNRH/LBb+Y LH+ZC6XwTA1JEnJjpeK0RCIkwTxN8X6AwTRwWvVyNthjAdFTnAgYjIEUXRAaKS/T6wp1hVXU DBAXXUb+mN8bPE6YLfr2burWdMfjx/gLz3uuQf6h+8+RlwqQgvL8inL8trRDEBLAFBDB7KUI QLsHrWaiqlQlkeclZosoiPz4ARKSoZGFETbU9i3W0xLlfkq6O+xDKkgUlxRDRET333/S/MXg Taq/rcXQSvCSr9C2na/O4wMLZ2LrXRS0Lj4E1DxBl1zKodLPZ0XhKZXptc31xtZOUVPsmUAX 6OBPZucj5SPFve34eEpLXCjDw4tZ40Hae6faiYqSzFR1njyHaXwXRuSjNFtlMVrA68scsEGO Pbt5484M/5rHMBVhEhl68f5Os3XAlKQiM0OZZOLKtHrGwEzXQyyfHDvt7eI2fOG2D9kqrkpK xMME0ad8Bc1VpHY0vx+vX3XGFGnC2fHwhyRvJ/NTOxjZFsZP816uw06gZ2Eosh3NkSI/rO55 yEVBVkwc7tEc1TPRexNgHWQ60zgbE/inI1fXraqagpqiGuopmENerFrrDpT3Q9raRnBnlXw9 M6jUzCzMLELeDub7JxBpmeUNFQW1WiP1BXiCuKKwY78T3B5IKDJ0DUa6s2qUarhXfWMMn5e0 RwcHe0P7ILIiB/m+b+i6idBpM+UiJV/hxZiawscf9zBFdk2Ofwb+sEBqNYjsTGYgH/dujLk2 ODIF0CGSZ0ynbYdoNc2+P6W1AGyZcxEUYBWMYXG6hq3NBF2qVihzxWohJT4oPRmAf9QTMjky bflshBz61PBgFr8t6xalpEn4/kZhZzYJj8a8++5pIk5W191T1a0bpKqn6ZFBfCa5LSrU/zTc zCd5T2AkDc7Q7GKLyVJn4WQBzVo2+2tDM2ZCV65OTcuVZIkp8YdiVzf8k65zXbNz/wmCnzCj 1x8GI9A70HPve8ycqCmjSi0FHXi9vFoqUcjFYQP8hRffPwd+Y+QK+JIZO7BtuxN0OEvIlFUt 3TVDNbOUblDXP4LPiNqjAoNOwdcEJE9ab/ukEGSVXc1H6Q2WjXSFrmrTJl2LrmnTZpDzL7Y/ YP8jwADZEvEeDQplbmRzdHJlYW0NZW5kb2JqDTk1IDAgb2JqDTw8L0ZpbHRlci9GbGF0ZURl Y29kZS9MZW5ndGggMjkyPj5zdHJlYW0NCmjeVJFNb8MgDIbv/AofO+1AQluySiiXTpN62IfW bvcUnCzSQhBJD/33syHrtEPwi7Efkxe5PzwefD+DfIujPeIMbe9dxGm8RItwxq73UCpwvZ2X XVrt0ASQ1Hy8TjMOB9+OYIyQ73Q4zfEKq6f1fXEH8jU6jL3vYHUqPz4pcbyE8I0D+hkKqGtw 2Aq5f27CSzMgSG77y52uAUGlfbkMHh1OobEYG98hGFXUYKpdDejd/zOxyR3n1n41UeTKoqAg zOYhaQrCbLdJUxAJRJqCIN7SqX85GWuUpSLlMm3PtJL0Zp2RJSMV6W1OkBZGc4XOcM0VmhlV vpFmRsUtlc7j1TI+D+Q/Y7tvJtlLjORfepNkExvUe7w9WxgD+8Gf+BFgAGptjTsNCmVuZHN0 cmVhbQ1lbmRvYmoNMSAwIG9iag08PC9Db250ZW50cyAyIDAgUi9Dcm9wQm94WzAgMCA2MTIg NzkyXS9NZWRpYUJveFswIDAgNjEyIDc5Ml0vUGFyZW50IDgwIDAgUi9SZXNvdXJjZXMgNTYg MCBSL1JvdGF0ZSAwL1R5cGUvUGFnZT4+DWVuZG9iag0yIDAgb2JqDTw8L0ZpbHRlci9GbGF0 ZURlY29kZS9MZW5ndGggMTA5NT4+c3RyZWFtDQpo3oxXTXfaOBTd8yveYhbmnKBKsmXZ2SUB OmQ4oSe4mUXpwoAAz4Cd8Ucy3c2i+/7lebIdBxtaQQgGWXr33feuru0PH+cMtlnvNuh9GDNg EGx6zAGKf3iwKSe2C9LG8UOPwhb/g5X+eO1ZHPrBX7hKVqu8cpEHzOVgSz3f+q+aIKoJxHFx QjDsEc7KAHNggsFkXs06AecUkWkZiTAhZLlmYbFFH6IYsmKZqVUeJTEsrOWifwXLbxCu11G8 hTCHfKdAxevyWMV3qvgDgfCOXWVSEWGtBOzq/IART0imZ1mbZL9PXjHydSeWfRTL4q0w4iQM oRJZacAfPxaWgzTu9ArGCK8oUyJsD3k7DmEOd8EVglBK69rjwi/W5Gky7Q8cxomwxrPH8WgS fH4c9b8G98ddcwTxfUe2Aljkeyd5plO0/Tp7u5W9PJO9J1mT/Q1mPzmfvaREMmydy/1u9g+Y us0Jtz6OHkaPN9Nu3raHjaaitfQdl3y/ib/Bs0oz7Hm+wyZHGazVoMPKIa6w3eP+OqbGOJL7 5cxcpYcoVmutJa2cu+RwiLIMRXalNReuVkm6DuOVWVPChMlEOe81ynfwHKbhNg2fdyhlGyub pFAJJNnAm8gFtWud54kR3TWhcx8H9Mxd+KLgJUr2YY60Q13gNHmJNGWNnu+wxkdbzQQsjcB2 vZGzXbjfw1LBPgqXe6VZ6Yp/jiOdyDzHfDLYYCVC/TkwAXtmxvXm26goL1KFQorDfY58izQr wjjXGXSLXboNMbL2jQKjtYYDpBgekgLhyuoqTa6b0VqhDk8Yy65r0Q6qPKFM6yZXmi7itUqb jr5rrunEhbjMhGuLFm5745SCP8bPoLITIy434Tb+mu/SpNjq3TQ+v4kWFj/X1xPIrinK013s uY0p3iLY009M0cXsPAm2e2KKk9n0JpjM0BsFZ2jrf06C39++Tx6C0UPQsUmHuUR6PmsFe8+k sclOJzn6sr6cHvNzjBKqCtp2XINLGqsqTKiM1X7c1c0lRmmEd4068modtTy37ZRdYyzTO3ez cQIvjexlvX2iOFeVL63CIlMIt9rVGWjIMw5qBPeM4G4to1+YccevCASX8PZN0A6vLw2XGWQl QRMsN7vkG2OjP6p/inCvyxyaVcaZWWV1m2u6R6R+7phGd+ZGl7SdGrflvpdZppm2bYJ3RX0p fN4Xma6kvmfXSFjat/7GSal69e9KXdJik4tZvzF6hUb5K8O3eO1KbnXSJaL0W33k+KbaZPFJ CQ37SaVD3BAwV8/AGJ5Ct+gPGEWP97H+1+hd98iLO1f6nN+cuv87B+r5nNJm6NMMqH41A+P0 UI7wckRa40MOrit4M2G+0SMYtxkZXS8Wt5PpdL5YzPF5iuDzVLVW/yovHRQEDDQdzoF51U11 edlY9Qb1N92PZRTHGWDLh/M/pD/kdw7/9DgbVvorEXSFRkHvfwEGADxvg3wNCmVuZHN0cmVh bQ1lbmRvYmoNMyAwIG9iag08PC9GaWx0ZXIvRmxhdGVEZWNvZGUvRmlyc3QgNS9MZW5ndGgg MTAwL04gMS9UeXBlL09ialN0bT4+c3RyZWFtDQpo3izLMQqAMAxA0avkBmnUtgrSSeNarJs4 iHRVkAwe30jdHh++dWCg73F8ZEqyS1ZPiaBrtc8hIF+naGMCMvQ15EbZFlogMoVOWRV68PW/ x/s6UpYV48C45Ee2EF4BBgBbmhxsDQplbmRzdHJlYW0NZW5kb2JqDTQgMCBvYmoNPDwvQ29u dGVudHMgNSAwIFIvQ3JvcEJveFswIDAgNjEyIDc5Ml0vTWVkaWFCb3hbMCAwIDYxMiA3OTJd L1BhcmVudCA4MCAwIFIvUmVzb3VyY2VzIDU3IDAgUi9Sb3RhdGUgMC9UeXBlL1BhZ2U+Pg1l bmRvYmoNNSAwIG9iag08PC9GaWx0ZXIvRmxhdGVEZWNvZGUvTGVuZ3RoIDEwODA+PnN0cmVh bQ0KaN6sV01z4jgQvfMrdDRVg0YftmXPnBIgW8lmhhQ4UzW13oMwArwLNmubpHLbQ+7zl7cl my+TjNiqCQFEu1tPr/upLX/8bULRouxcR52PNxRRFM071EUEXvDFCcPcR4KDfd0haAHvKNEf zx2Ho270F0SJOiowQQGiPkNcaH/n39rBqx2w64NDNOhgRs0EE0Q9im4ntdcZOOMuEsTMhHnA QhPz40fs9OMuGusgSjGrvQn2eAAhIsCB54pdXL3QYX/0bTj+biIO1DjFPqfiHAK/XmUvaJ4X c5VW20Khjcrkqnpp6Lr1OnvUxTQIakY1Dj0h4gFNl6MehRUJani7oSeM50xVqlinmZqhbTZT BSq3040s5KKQmyWKnStgmBcwuIbBKWwz7REss8ESAXy1Z7mUqxWaKlSoJH9ShZyu1G4BKqnS PEMecWNHxl1sheUnsOIclrkNW12zARB5eKdmAmICgXwWYkIIPRRuPOoPB4/jYatyLoFMMnYS cEDDr1/z4+qtUjlNV+lb9QsYCY8pubZMtvN4YR1tqfRsuIyIesvUipALmWZlhSTodKOKEuq2 zVaqLAE/We5MherZgH0rcA2bqPRJlahaKpTlVZpoBf2zTQvgPYUlHDHmlzEWF2s2dlw95fxI oTx2ppcoNLAqlBwpdAgwk3cU6mFBmEBu2FLoH050FT1Gw27PC0CUzuhmN7q//XIL125HXyfd P6O7I/m6zIWVBOxktsNSdvJt1Y4RHBB6Qi+0qwYM2rPdyN7SLxQtXW/yEobtvIpWXilpIYt3 q3eu1Ff79Kd9NDyfnh/uBSlU7d2tl86NZE8Bw3NA1hLKGaBLA9+4PqX5ShoZJktZLHTekmRb 6I2wziHD1VJmMMspojhH5DZEIpod/6JkgTZFCvWpckNnJiulN0RalluZJWas7Wf7/Q1c14bL eMO02d7Ndgf03WiO5AYSrbKqaa12VM/OttELtOnPIJaZPYO+VSSsYWJk8q5Orv+HTsSv1Qm3 swys9TqopLxMJlbM0IZJSXNS2t8EfoVKGLHganHgnyzfYdSaLbZXxM1PDpECkxDaPfVpu90/ 3uteHwaY1b3ejPrQ5KPxY193+3azpwL7wjuZyrT46jmtlm/0eM7DHRtm67Jw0q7rUFawZdJs YdrsSj7vJJDkWVXI4uWD+dXP1+u07NnaL+M23P1ppNQCX8sXXfXDveRwK0Hy+CBmBW6ak197 +NgzWdTfDP6Jzh08q0AVvqlioNU9URtEKVyCTHd7lAgfh5C3T5CWO9hfzP2gr4X7S3d/V4gE ISNkb3oYIaL/9oabYm0s3FiEc7OukO97bO8wmWsLzLu3DD/F8fXt/f0kjifwRIPhiaaO1b+M IAjyUE/TAQHSwNzwazUknV4zggRspmmWlQhyOpj8LsIB67vsYTwaIK0VZBB0hoZR5z8BBgDd o1teDQplbmRzdHJlYW0NZW5kb2JqDTYgMCBvYmoNPDwvRmlsdGVyL0ZsYXRlRGVjb2RlL0Zp cnN0IDUvTGVuZ3RoIDEwMC9OIDEvVHlwZS9PYmpTdG0+PnN0cmVhbQ0KaN4syzEKgDAMQNGr 5AZp1FqF0knjKtZNHES6WpAMHt9I3R4fvnVgwHscH5miHJLUUyToO+1LCMj5Em1MQIa+htwo u0ILRKawVVaFDlz97/Odz5hkw3lgXNMjewivAAMAXA0cbQ0KZW5kc3RyZWFtDWVuZG9iag03 IDAgb2JqDTw8L0NvbnRlbnRzIDggMCBSL0Nyb3BCb3hbMCAwIDYxMiA3OTJdL01lZGlhQm94 WzAgMCA2MTIgNzkyXS9QYXJlbnQgODAgMCBSL1Jlc291cmNlcyA1OCAwIFIvUm90YXRlIDAv VHlwZS9QYWdlPj4NZW5kb2JqDTggMCBvYmoNPDwvRmlsdGVyL0ZsYXRlRGVjb2RlL0xlbmd0 aCAxMzY2Pj5zdHJlYW0NCmjehFdNc+I4EL3zK/poqhZFkj9kZ08kwAwJm6TAk62t9R6MEeAN 2JRtkuK2h9wnP3lbthNiQ0ZJCLbc0utuvX5qX3ybMVjlnSu/czFiwMBfdpgFFH/xy6ScmA4I E8e3HQor/PiR+vfSMSzo+v/iLFHNcstJLjCHgymUvfFfZWBXBsRy0MAfdAhn5QIzYDaD8ayy OgHnFJFpuRJhLg6oOTuZhJviAGkCIexkluPFPlnIDOZpsYZ8P9+FWbjKwt06r/2zqoV7NuJa ZuVCFQFrINfPe4y4tmClo8wp7QKjH3QhTBYQGFd4NQ9zuVAuFGsJebiVEKXJYh8V5O3t99JO h8x1yFTUAQcGV4gHyIssfoqTlYoxl1ERI35grIMu0aKZDTTzTJwUByq0OaL1lT1jhFdbQYlt umo/PEyIa4PDPUIprTmhpj08TMbX/avxZOz/Vc49bqLrIoOEaEw64pFXH1OIGUwW+Cly2IYL qaIt1nF7/9Ah6uFKnwKzmtQ5DcykbrWF7xnL1+FmA0laQLhc4hju1gHC6lmawS5LIykXKs1R uu21HDhJrK3DZ4J7pSVGFyFn5nKZZrKkCDK5xKlptAgLCekSkN9RoXKhbnT4jg6fMluUlmU+ +8hQ7ZpCRxbLqdcMjAjJMjhPFmYRi1EbbG43yfK3MewPJuO7YbfnUZtYxuh+2v3Hv2nIDjLN Zm5jsjE9C2QylyApGpbDbz8mfX98fzdrktH0GBFey/oYT0XGkUQ1CTftPLnEcm37c6JcXfK5 U5PvOt1u90kchYpmOajbOM+PdNxlMo+yeC4hk6v9pjbTbZSnxac1+YoU4u1uI0taFb8ouPcq UfXRhhdt8aQtfHFCfq+ucowIBbpYhwlwQZHqhxzLrxr7gvnn6v/UBaZxwTjL+OMyBuONI4rR mlt4MlGkyyeWUKvS49nwmoBJ4Lo/mUD/h/99eOej9im2tZCOvGPcaSxWe9+WZfFl9QZG+HWl YbFQ4dhgOm1ZHo7Gd+MzdcCFTVxXeI0pRzTyOk4afLhsp5ASQZ3mVlitE+0kGG7VbAwMhsHM /PH0Yva9fzu8g/OFbXJiC2wVTMtsK0gz792ewx3iGqNp/49hS0oslxGH2byxitESdlQDizL2 zomWqrcdY8JF1RHH1f68n962EoyTbNvxGnaEC8E+CQ3yfws/f35ORLjHgkiKWilaWXcIY4w3 ku7oGMScGnKZYc2/pNnT2xtsZYjyUvYuMtpnypON3K3TREK8UPDYX2WylSPztPqEFt0tDZ/j PC7w8FOnXh6vkrBA0F7VRKEmLDblMbiEMM9lpgzjRA/u6sC5W/MNT9xtlc99rpCK9Eli/HmB 0GG2yNWhv0uVM6UMStBie9rCfW9X4+SIrsKPmidBIaN1km7S1QFjXuyxxTto0TnVb/q76odF EUZr7JQjTGy8VLil1H7wTG012kllVTFAC8+0wb+3rrjws8ziZZXVPN1nUSX0Ci3Cg4/o0bhO ViyzZnjVKD+e10iLE2aiRjLzpBu5H19jK+KiEgoU9+mjum21I1xgk+CxxuwjcKOan9M4UnWV PbebR4uYHm10r1x3ABi41tvb6y+yZPBad53qoUPs0mv1zfGPKlfxBQ/jfJTZQG3/TO4AtY5T jKyLUi4c4mGeL7FabtQBbf2mnnkfj26eCqCuxyn9GHq4B6p+PgZGGLsasMoRYYy2BTiOzT8M Zks1gut+jAwvgwBfGCazIJhhr0fwNbCaq+7KDaBgQ0+FwzkoJVFHVJn8qNOrr9QL4TxOsJKw vgazW+EN+LXFH6b3A3iJ8X2wRFAZGvqd/wUYAEyJn4INCmVuZHN0cmVhbQ1lbmRvYmoNOSAw IG9iag08PC9GaWx0ZXIvRmxhdGVEZWNvZGUvRmlyc3QgNS9MZW5ndGggOTkvTiAxL1R5cGUv T2JqU3RtPj5zdHJlYW0NCmjeMrVQMFCwsdF3rShxDy5JLEkFst2DDRUsQeJBdnb6bvl5JUAx N0MFQwNDkJi+mwmQaQFhmioYGhpAmGZAphGEaa5gbgzVHlCUnxycWhKtH+Diph+SWlESa2cH EGAAXIAcbg0KZW5kc3RyZWFtDWVuZG9iag0xMCAwIG9iag08PC9Db250ZW50cyAxMSAwIFIv Q3JvcEJveFswIDAgNjEyIDc5Ml0vTWVkaWFCb3hbMCAwIDYxMiA3OTJdL1BhcmVudCA4MCAw IFIvUmVzb3VyY2VzIDU5IDAgUi9Sb3RhdGUgMC9UeXBlL1BhZ2U+Pg1lbmRvYmoNMTEgMCBv YmoNPDwvRmlsdGVyL0ZsYXRlRGVjb2RlL0xlbmd0aCAxMjEzPj5zdHJlYW0NCmjejFfLdts2 EN3rK2ZJnSMiBPgAma5kW06dOLKPpbSLsguKgizGJKHyYR3vusg++eQOQFoxJdeIH3oAA1zM nbkz4LsPCwr39ehsOXp3SYHCcjOiHjj4i2+uw4gbAHdxvBg5cI//y1S97EeWD+PlV1zFu1Wh XhQCDRi4XNlb/3YGfmdAvAANlhcjwqjeYAHUp3C16KxOwJnrAXf0TiSgnqvXxNY0HkMhkrKG pHyCWlSPWSqg2SYNZDVkZSMqu9vR63a0OQLico3dHZ0OIP1u3qYk9DnVJ3SDMNCWqSxLkTZi Dfus2SKMgF27yrMUahxItzjRiFzstrIUMIT1T2CZEZaySFuWotnL6gFdXHeubdqqzOqtqOFR Kn9TWRRtmaWJbQJ1TaCM+lxbNplEVhuJqCAQuEVy8SUr76EStWyrFOE3lSw0DSZcz4gb8C4P 5rJCaqeFqNCfEuZtscKPiHqb41dZdYFuU6OrvgmSBr2r6EmNG6OvypW3D2BCDUyoAesdTdZy p1Jp9aRhzzGGWV0j69CWa+S6xkxT30yI3EjtMyLzaWyJeBxbFGUjNwdcnTtdwKdpo2ZohHoz IYcmZIejcjuhehy+kAU5JzA4RTz+Tae1CSoaQPE3oc7QuaxM83Yt6m9wrH5+rH5nsHXUGbzc 2me9DmMrw62bCstNH6peAcn/yj46xaNHrpzgMbeP1yZJ66zIcgFFkm6zUkyU0nctFrWJUoLE +FWwFrbRR2bCpLwvqV39lAOXTs7xWsxeQXWNzPq9ApFZRa2qqrJtIEe0RifkZFDXjdx6Zj/7 WOo6KspklWMZq0SS201WIMFYae198vSzsJrJ9Y2gXu/mC6FN+hRVheWkdVW/ENLAhBqwvmv9 02ZYsbtmiK0EdpVsZCpzWyUTngYpgLStzZDcBBn6HbcSiyfCCFQJAgs8wK4QZQOxpTqVLPMn c/KERpk8t8eHUu5LSGr4/v38dvbjByaSSs+dqDCLasCEsley/ZWEjYyYTi/NNMlzDN0E9luh VYhyLGWjK+pzKPECguqxjbDMMcG6fu+qykzVqQZJKh8R/2V0jZFkphpk6QQhbxzdYsOa4p6e 2qEHda8wJlNlTylh3ZXOIb4b4r3O4SRimDjU9YnjOP3dUi37svx9Nl9enU+XVzdzvfjFVTQg 3IvcwSrr8lUElwaYK9jOBrZ308+zP2/uPh3tG1ISOdirBrbkuIvQkDAeRs9MHF+qTuPHDhdW 1XmvXmfCDUjIPWTCiYZM/GXNxzZnIQmsD7P57G56Pf57+XFAByeB63mDpT9RybdFu/qK1wlV 2HdJldxXyW5boxwZnubINUYi7kaDbPFMkaad7pXqYsuNxxOthTzBlFQFrQQaAsq+Qcxk0w0K WOO0umoM8d3TZO3ra9BZBMTXbqt3hn+O8hWfWpClP0R1oTZdiB1QilNIzdimDg9IhPn6HkX0 EQ/DvImaiw5THx8acMKIOc5h6PYGHPVzGLisCj3i6xFuXRYNBIHPDgaLjRrBfQ8js/dxfHZ1 fb2I4wU+2xB8tunWqm86gg74YCt3GFMUqaB10UtHdv8JCditsrJUtQQuFp94dMHOPXZ7d3PR PYRoBMXQbDn6T4ABAILcZW4NCmVuZHN0cmVhbQ1lbmRvYmoNMTIgMCBvYmoNPDwvRmlsdGVy L0ZsYXRlRGVjb2RlL0ZpcnN0IDUvTGVuZ3RoIDEwMC9OIDEvVHlwZS9PYmpTdG0+PnN0cmVh bQ0KaN4sy7EKgCAQgOFXuTc4rzINwql0lWyLhgjXgrjBx+/Cto8ffj2AgnHEuXBIfHAWh0Qw WOmLc+jvi6V5AlL0NfSd0FZqIFKVvbCpNGDaf4/PfabMG8bJ45oL7869AgwAXPMcbw0KZW5k c3RyZWFtDWVuZG9iag0xMyAwIG9iag08PC9Db250ZW50cyAxNCAwIFIvQ3JvcEJveFswIDAg NjEyIDc5Ml0vTWVkaWFCb3hbMCAwIDYxMiA3OTJdL1BhcmVudCA4MCAwIFIvUmVzb3VyY2Vz IDYwIDAgUi9Sb3RhdGUgMC9UeXBlL1BhZ2U+Pg1lbmRvYmoNMTQgMCBvYmoNPDwvRmlsdGVy L0ZsYXRlRGVjb2RlL0xlbmd0aCAxMDM1Pj5zdHJlYW0NCmjelFdNV+s2EN3nV8wynIONJMuW /boCElp4POBgn27qLpxESVz8kdoOnLfrgh/ekew4JKYR5StEHs3VvZq5Ui5+DSms6tFVNLq4 oUAhWo4oB4Lf+OIQZjseCAfH8xGBFf5Gc/XnbTT24Cz6C2eJdpavJ/lAPQaOUPHjf9oAtw2w uYcB0WRkM6oThEBdCrdhGzUAp8IHQXQmm3rc0XNkkcybXBYNlEto1mkNl/PmHP+TcCMXskoy uC7zfFuk86RJy6LuFsnb7JaD4JhKr6OlQQ/gu+cWtX1XUL1a6vqejlSJ07rGrFCvkyyDSv69 TSsJCWyq8jVFeLWq1zKdS6hl9apeTfDMBM9FB9+UkOabTGr2inAY3T5fhL9dfp8+QLLFkaLp WBtRHSNpygIduaySXL6V1QukhUZNi0ZWhWwU56aclxngGxVQ78mb4LkJnggsABW5k3EncG0b k7sHyd1hcsfpksdjFp/BrYqn1GZt4RHbdXwOzPHsQHAOrhA2IaTrADXtx9P99Mf0IbqMbh8f 9OR9w+Asnwn3YNYe0H6PjgvVOqRDue26Af3IxzOJxXbp90U/KNWixJpJXqTeQmwh9WQhLZOW woi9a8x6XqUzuVBVskmqZFUlmzXEY4oCp0uN+mFNC4k1ZAT3jUVKuiLN00LWCJI0p3rxXKuQ JYitYs1dEhgX0DoIg7wsmnUNybLNLWGBKGoBn/rV+wBZHJsSOYAWbcCnwsfjS9R4nSD6otw0 uAVDbziSWgzx6FHTDPCQpDahjy6z94ZlWcEc6ww94MglDpHdITIzIfdecMJwBjbxixnYMUns sE7gq53Aq0qivq9lti2apEqzn4CmjOWOiqQbteNGnbmJLWfdvr6lzRpK1LLasxoS7kzZSNb9 ssonTpV+v7+grmdU1++aNx5fd/rO5GpbwOfnnFla8XWKJnZJsTAz9I0tyruTOx5PkOFbij48 k9gnm2SWaXdYbjOsoZ5tWqzMNAMTzU5Www1h37smoowYvcHriB75K/VPGaNlBKZf3tFPTNY2 EzNbT9DvoHPipqD9G3Ec9/Cm8MfRVcHi3LPd8fP06fE5Ovszuvt4c/C5uuUGB1n2C7DfH06d XdS3OSf8gN3xHW+4bX6n3v8+wM6NBxjjZvS+TP/j5j64xNTbmWUE7pzOayNQb62wemX4Q5Ss +IkH9+Z3WU0UyVBugFJ8hGqcWZQIvPhhbXzDPrpDoRk/V8+C/tHdSwPEDxgh/dDTIxD11Q/c VLke8fSIGN/kDXiey/qAcKlGMG8/Mv0Wx1e39/dhHIf4ucjGz0XtXPVOFwsBFyxFhzHVWro+ dKHMR1b3nzolZ2lR6HN4En4XwYRdc/b0/DgBfaBoBKXQNBr9K8AANiKHdw0KZW5kc3RyZWFt DWVuZG9iag0xNSAwIG9iag08PC9GaWx0ZXIvRmxhdGVEZWNvZGUvRmlyc3QgNS9MZW5ndGgg MTAwL04gMS9UeXBlL09ialN0bT4+c3RyZWFtDQpo3jIzUDBQsLHRd60ocQ8uSSxJBbLdgw0V LC2A4kF2dvpu+XklQDE3QwVDA0OQmL6bCZBpAWGaKhgaGkCYZkCmEYRprmBuDNUeUJSfHJxa Eq0f4OKmH5JaURJrZwcQYABZXBxnDQplbmRzdHJlYW0NZW5kb2JqDTE2IDAgb2JqDTw8L0Nv bnRlbnRzIDE3IDAgUi9Dcm9wQm94WzAgMCA2MTIgNzkyXS9NZWRpYUJveFswIDAgNjEyIDc5 Ml0vUGFyZW50IDgwIDAgUi9SZXNvdXJjZXMgNjEgMCBSL1JvdGF0ZSAwL1R5cGUvUGFnZT4+ DWVuZG9iag0xNyAwIG9iag08PC9GaWx0ZXIvRmxhdGVEZWNvZGUvTGVuZ3RoIDExNjg+PnN0 cmVhbQ0KaN6MV0132jgU3fMr3tI5JziS/N2uSCDTpBmSgzmdxTALxYjgKdiMbMiwm0V++DxJ xgXMqZomxZafdd/nveLmt5TCW9W7nfZu7ilQmC561AeC//DDI8z1Qog8XF/3CLzh3zRT/733 nAiupn/jW5F5K9YvxUBDBl6k7J3/jEFgDFw/RIPpsOcyqjdIgQYUHlJj1QGnUQwR0Tu5LGaJ fmed11CXUC8F3JVrvKuFgLLQN0Jm4hrSLBeFuuDFvPHQN1v3PUT2PeOEiYGeYDfP+9SNg4hq V6nXAE8lL6pNKWte54hXLrQPqSh4LTRUxyUbNrNiBw32qBDyba9RDnEeHPhSbit9MxEbKSpR 1LxvA/ZswIzFobas852ogIMUKnIVlMKci1rIdV6YTEjxzzaXYg7bYi6kNWrfBk4irL2y3HDJ 3yTfLGHmsNnVNbwv82wJ1ZKvVpAX2Wo7Fx9WvOAEL7qQZbWgLGfOYHaFScZfvtpXeXXIsfi3 xryqtjMebGR5luOoAxuewAYXcmxmYJdj0jQSh12ZY2ErIXfqc8l3AvL1ZiXWiC5Mg53CBh3Y yAZLD6VNpw+Tm/TL4OtoDHyLexd1npmKLiRfi/dSfv98YYa6mLEtwwyvmgzfNhmuKlFVKq42 x4sFwmf7w70tv4ktUM//5TCRKqpOlNE5U5AzxKiD6DVhvoq8eDspnRmNeok9VYlMoV9jBwOf 962w1Abbzssc579SyGo+eLVBIN1Ymb4/id21h8tsuGEU0aaqPlZ1ouwpdZmhb+IGXuwD80OX +CwALwlcQkijI/jan87o28Poj6s+pWHiRs5gPGyvJ/gofXgetwvPk6NnL0+Du9HVX9PHI63w Y+qGJPBOcJyz7LLA9QnxTZgOPaXBjutKfjyEbHf7fTSe6iBbVIa2CUXbYzsklGbE3I9xWcMK BULVHtveg73gOO18YZaQSpV6YI1EceYrpi0MwpOKnDNnpyIsaCrCs/rHbGHPDbLayKHYCblv 3UAHpNC+XHdotNMPgQ2dJI1aqbjuBTY8X2m52hZN11VGH7FJVf+bJGy2r30rdmiN/JDyVZ5B UdaKP1W8mPNyo6QLfaj3sCglZEpAC8yH1pEPe+DRGb11wGnS0psWEM1tF0ntaBI7AtLBjW0D SNkh4R1G+wn52BknsQA7CuvzTxjEYcSWM4+0oqsk4ZVX6GhzvDgSB+N61emRbrqYlSc91pTp +FwxUOcKKXa5OkRJdc5Zceydo2JZ88WsTElJw9CX5eeCOkC+uCj3HWzPjt1Mxo/Ra89veLTD 0zSi5ibxOItqfnLsGmkP2/9lYRKVPjzNS6jKy0eKzuYN24TGInQDTbnqE7WEEcWz+LUFReSb kEPFoanYAKX4CDFRK0gUugmW5hOOyCOyAPOv1bOkffT4vQYSJ4yQdunlGYj6aRfu5VqvRHol cu7XNYRhwFqDdKFWcN92ZfRpNrt9eHpKZ7MUv9y4+OXGvKvutGYRCKCvwmEMaKwFwyhH1us3 V6pHX/MC+RKLNUy/RsmQ3fnsZfI8hPe8XoJGUBkaTXv/CzAADox3sQ0KZW5kc3RyZWFtDWVu ZG9iag0xOCAwIG9iag08PC9GaWx0ZXIvRmxhdGVEZWNvZGUvRmlyc3QgNS9MZW5ndGggMTAw L04gMS9UeXBlL09ialN0bT4+c3RyZWFtDQpo3jIzVDBQsLHRd60ocQ8uSSxJBbLdgw0VLC2A 4kF2dvpu+XklQDE3QwVDA5DaIH03EyDTAsI0VTA0NIAwzYBMIwjTXMHcGKo9oCg/OTi1JFo/ wMVNPyS1oiTWzg4gwABZzxxoDQplbmRzdHJlYW0NZW5kb2JqDTE5IDAgb2JqDTw8L0NvbnRl bnRzIDIwIDAgUi9Dcm9wQm94WzAgMCA2MTIgNzkyXS9NZWRpYUJveFswIDAgNjEyIDc5Ml0v UGFyZW50IDgwIDAgUi9SZXNvdXJjZXMgNjIgMCBSL1JvdGF0ZSAwL1R5cGUvUGFnZT4+DWVu ZG9iag0yMCAwIG9iag08PC9GaWx0ZXIvRmxhdGVEZWNvZGUvTGVuZ3RoIDEzNDU+PnN0cmVh bQ0KaN6MV1tzozYUfvev0COeiVl0AcH2yVk72WyzyY6hnc6s+yBj2aYx4EqQNG99yA/vERAn YG+1ySTG0tH5zvU74sN1jNFWjy6T0YcrjDBKNiPMkAe/8EE94tIAcQrr+chDW/hLUvPvaeSE aJz8Bad4eypsDoUIBwRRbuSdf1sBvxVwWQACyWzkEtwoiBH2MbqJW6kTcEIZ4l6jyWU0DJoz S+fTcox0vcqzClUlqnYSfSpz+FZJicrCfJm0ClmrcMIBj9EWurUc9xD9dn+C3dDnuDEQMxI1 krlUqbxAcZrJwjyIYo0SJQp9KFUlqgwAy01jRCyLAa5/gktsuCTyeSMpKtlgnbg3L6TaPjd7 p56eIlKrp4TjN09fnflc1rr5spAHJbUsjK+PUiOBlDSuIxsws7rKO1fBKQO5yYp1Vmz1qwlC a6l1DtCoLtZSmZxb3fWt7rZpPQgltkocdmjpTKGeTDjBDlFAZFOTVW1qS8nHzIRBWb0NrLhe V1AQvr2AQBsXU7HfI1HDY1FlaVtNGyVy+VSqh85rGzK3IXscWslIQvzeu325HLtW7aFNO6Od 9qXjQxznRh5jl7Q97Lk+DaGRGXE5Iz5iUeR6nteRCRz77vyRzO/im/u78SQMiOs791evTzdf v93Ov87vkmnybn82n87GfyZf3vEEC7Eb+Iz31DuDWiHMjTwatc45UZ9yhgZjHiLG6Zuy25u7 1rU3cvJ8UOgFPTmXhR1NuS8JJPhKQgrFvunguuhSrNuG1tqke5gA4DvSYyqvZyl1+Ukftd0r npH8p5JQx6aI11Ks91kBXQXFa0otyw97mbd93HJWH7lT/B4Z25Bx0DkrLJWs5N91puS6K+lq l2k7PLHBU9LBa9m0LFo9I0xQXhbVTpum1XW6Q5tagVUKibysgUp+xnFqddzvmrnKckNUbyzd JnUtK6lyCL9GhUyBxYR6RllLa1Z0Zk24WTCi5xGrnajQoVbpTmjgUxOI+gBNv55YoX07dBdy o9gk9dDwM1Clrg/NWDhXCE9lvV/bHQ+s6KxDT6GJqqyqzYw0Y0FXAtCgz3ZCrfUuOzRlL9BB lY+ZqbgTBj8Dz23wRyIFt+S2hJRCMb1CaNeOEFoRcDcSl04KZBqfJ1MgHs6BTAkdkKkzvRqS FIXrGwFGeS/rfP4BSVOX8ebQm+x3Z7q4vF+MJxQoPHKmd0PupZgC93p9a5z7swiUULhMBrwv m3yeL/pWUx+2aTiQW5zXGYSAH0R92fn1b7fN1Ij7mhmDSRGygbXuyyB3BAYNC19nBY4GQ5Cf DsEuaxiydnM+ujR0qc/gAdPhCGxmm+eGzvX8br6Y3p6EGHREg6OvmD+YM4Neh4M49PtXUe+n 6/1kaOmd6XIo/bzeb81NVdV7qV+sHUD6I4WfaXH/2AHmWiahs1f7DFoa+OYJOKXX1Bv0WGbp kFL5KSyxJdALj6NEPRqVZpyu9mX6AIAtSENsK6Hl+gJlwGm7cn/2ZngCTm3gmHRxBrVwQasu zE00K4DC8pY/O4/XZsC9uzZOrNDM6vcxxf93BTUM243YpbNajn+xO91NkqCVCFy/KWbzaYjL MxUMb51Q+79LNTMVFMsDwhi2wKDxBHs8ALoh5CMM2i+iAHK6MHvRcevLQ4W8MCKed1z6do88 83NcuFJ5sxI2K9y5yisUBD45CsQbswJ6jyvzj8vl5c3tbbxcxvBu6sK7aXvWfGv60kM+mhh3 CEE4bFqx7cl0NOmezPvFKiugZyBis/hXHs3IJ0a+Le5n6CmrdqhBMBGaJ6P/BBgAD9DU/g0K ZW5kc3RyZWFtDWVuZG9iag0yMSAwIG9iag08PC9GaWx0ZXIvRmxhdGVEZWNvZGUvRmlyc3Qg NS9MZW5ndGggMTAwL04gMS9UeXBlL09ialN0bT4+c3RyZWFtDQpo3izLMQqAMAxA0avkBmmq tgrSSeNarJs4iHRVkAwe30jdHh++s2Cg73F8ZEqyS1ZPiaBrtc8hIF+naGMCMvQ15FrZFjZA ZAqd0hZ68NW/x/s6UpYV48C45Ee2EF4BBgBaQhxpDQplbmRzdHJlYW0NZW5kb2JqDTIyIDAg b2JqDTw8L0NvbnRlbnRzIDIzIDAgUi9Dcm9wQm94WzAgMCA2MTIgNzkyXS9NZWRpYUJveFsw IDAgNjEyIDc5Ml0vUGFyZW50IDgwIDAgUi9SZXNvdXJjZXMgNjMgMCBSL1JvdGF0ZSAwL1R5 cGUvUGFnZT4+DWVuZG9iag0yMyAwIG9iag08PC9GaWx0ZXIvRmxhdGVEZWNvZGUvTGVuZ3Ro IDEwMjg+PnN0cmVhbQ0KaN7EV8ty2zYU3esr7pKasRgAfIBMV7Fld+Rm6kyk6absAqJACzUf GpKS6l0X+YB+ci8Aiokkt0hXtUcmfXmBg3Nfh3r345LCcze5XU3ePVCgsComNASCv3gJCPOD GHiA9mpC4Bk/q1z/OU68FKar33EVt6sSsygBGjMIuPb3/rQOkXXwwxgdVvOJz6jZYAk0orBY Wq8rcBaEwInZyWdRxM2azLvNpiC7XqxL1W1V/QwCOlFI2Ip23bRQ4EfArm1mdtvQbjvjiBoG 9gD2/PQMN7LPZ9RPIk7NMYNgAD2ojWyhKeDQqFxCJ9uDvhZtU0GpxFqVqn81yPta1RfA0RUw cwGzBA3as5f1Rm4AN1a12Bxki4Ye1mWTv2jmeKJclGUHA28XcOAEJhh3A7yVhsvbB6hUhxGp e1WoXPSqqZ3IoROZsdR4IicNXsqDLDXBvt13vWGn6o3CTOxFObBei05ubpzYkQub2mCrGo7b ppSWLexE298AclM1oleWJ9aVLoYNrF+duLG7vgbOmrCmBGKPtxjXIapFKyp5bNoXzIWuwG6/ dhYXd6ESPuS4k7lBybx1Nv0BRL1xUkrONudvhPKUxsy7u+5TjF4uuw76BnayrVSPNs3b2aqp M4XxgKuBdOZewZRrJ0u8KwqkapOmQ/1tQi8Z88shQS6g+VXlxsOU+LY23Bl1AlMnsC3bsTTO 8qljjPxVYc8yHkMPKic0c0GPNTR0q6Y6Rv6vzvan7wYKXEA0HIAyjyGpO+1Pqc+sRhA/ChIt FNxPOIkgiFOfEDKIlV729PNyMb///GG1wDuz+Ku2BcQPE56erfoK6H9Z1Of1q4kapTmnRUM/ JvE5r/NxF7yRu4RbDRxUyyYRwyeeW7HbYg5pNr0xkA8SH+HMu2uqan/RKcF1SCMnNE1i41oP RdmZrVXX6eLptrpqc7QazSsVdumJfKnc8LELnvBB206yiSUkTnO1tTNdT10NKP8wcoOlfNyq fGtszhNwxwlOfdp++Ze9PHo56q6IhHxIYeZ9wNI0omyU+CSNsjvXKXU5bfj14VNn00fG8U2h upxt40By9SEj7oYfyH7XbPtntbpCpt89ai7kyrkzcyUwDodKtO+UqtqVskI+GDAjVJt9K/9L 8ljw/yRvGDax9Yj9yEw4fUU8RvRYw1f8ya/eL7Kdi17CUu6AUjAve9MZJTz2U4zXe5TQR1ED C2/0s3R89PjSA0lSRsho+vQERP+Mhoe2Mha7insPVQ9xHLHRYVloC+47Wu7fZ9nt4uPHZZYt 8YuAj18E7Fr93/S31SMSjGCm6TAGNDHz2Q7qfDIb7rTurlWNQwxjNl/+xNM5uwvZp89Pcziq fgsGQUfofjX5W4ABAAMFSw4NCmVuZHN0cmVhbQ1lbmRvYmoNMjQgMCBvYmoNPDwvRmlsdGVy L0ZsYXRlRGVjb2RlL0ZpcnN0IDUvTGVuZ3RoIDEwMC9OIDEvVHlwZS9PYmpTdG0+PnN0cmVh bQ0KaN4yM1YwULCx0XetKHEPLkksSQWy3YMNFSwtgOJBdnb6bvl5JUAxN0MFQwNDkJi+mwmQ aQFhmioYGhpAmGZAphGEaa5gbgzVHlCUnxycWhKtH+Diph+SWlESa2cHEGAAWrUcag0KZW5k c3RyZWFtDWVuZG9iag0yNSAwIG9iag08PC9Db250ZW50cyAyNiAwIFIvQ3JvcEJveFswIDAg NjEyIDc5Ml0vTWVkaWFCb3hbMCAwIDYxMiA3OTJdL1BhcmVudCA4MCAwIFIvUmVzb3VyY2Vz IDY0IDAgUi9Sb3RhdGUgMC9UeXBlL1BhZ2U+Pg1lbmRvYmoNMjYgMCBvYmoNPDwvRmlsdGVy L0ZsYXRlRGVjb2RlL0xlbmd0aCAxMzUxPj5zdHJlYW0NCmjehFfLdts2EN3rK2ZJn2MhAPiA mK4cPXKcupaPpXRTdQFRkMWaIlU+4njXRfrfHYCQZFJu4KcIAXPncedi9OHzgsFTNfi0HHyY MWCw3A5YABS/8R+PR0QEIHxc3w8oPOHvMtF/XgYeo3C1/AuPifbYyJwaAYs4+EIf8P5pN4Tt BhJEuGE5GRDOjIUFsJDB7aLddYlOIxDUWCJUiPbM+hXqnYJEZhnIBl/mdZrIOi1y2JZyr16K 8hmafKNKqJr1sDUdtKaHISIHfuuEDaKDbd8fMjIKNd5EA6MnemelEoOy8tarq19A5htwGecd 4+InxlfeeHUFTaU2UCpZFblcZzrIUpEeirhA8Tso/iUKC0JhUTaI8qj3M0Z4m2dKQn+EycYX AachRDwmlFJbcTz2h/f1bno1DGlIAm8+u/pz+eVtkSI0EIe8c84bv48RxSQM8FBn7/x+sXz8 Ol7ezu/NqZNpP6REMBZ3tp+jIT/ui3qX5k+Q5siJtAIsUa/gLCRhSOO36Qq6bHsnXcwWxZS7 2mmmHUqVZM1GGe7NFLJLZjAu9vsmt+yrzGNa9R24KFfoxKe4YBjXkrrYY4BpnSIMxiqhbDK1 l8/64dCUVSPzGuoC0roC9T2tzC6XE5HLCcpslqta1k1dlK+m24oyrV+J07zo9D2jlgXY7hRC Hp6LSYOgpdhiOiYQEHh4nC+nhgsLmD3Of4PFw3w+m05gfHN3t0Bkzb4T9JkrzPc7lls/Rq7W 4HQU2daQ2Bq379OWRiSK0dMg7rWG12Ms54xEfhB3dnqf37fqM+Kj/HW2Tu+njzd3PaNCECGE 39l59ty0AWSyRsWrdzLHWF+VLEFu2xXVrxYlfsD423LFTjZElpIbhIFiCyqXSb1H7dUPpvdu kvraiGKCvYAs1O+9pPXurNZ90oi+FNOeG+KiWrG9BFzCb6Xav+70q9MB5nSghX+38auzWth2 Vd1mdcJzFzwVtgzY7juVHVCWihpjRRy866qkTNcYvVEM1CuVftOwTf6CCoEXiy5C5fbCd3nB Wt4VSC71vYa9qir5pKoWVxoY9KKpjFrliP+mWmrjdiBwOODlzR7jJD+x5LGw1/mXUXAe287H +xz+58KiMTZaEILPRK/zUaBuJ9isRqp69xZFHI731ttTZ0Dy4zbXlds32VOr6ZokleVuLyiO 99dIdPITuQt01G4kxWlqQX27dl9fhsXOEgknU0/Xh2kIowmI+sNtetQbyN5pAisCK49h4XRE n4tvqsyNHN0kSdHktVynGd5UMN9u00RhNxyKsr6Y1y7AYydrfKu6mKWk2K/b+mkfUIOaDdYR fcDafktNIlEcMaeZkptLAfAv4Dl1wh87L0X9TZpSa4ztN0wvttj2KIml+rtJS2w3nJePHHDi Mye+sBwOqb/yEkw/RrhJbbQP7WWgkEp5VWTpxvT7zQHzcShTOXTicxf+aV5uKYt3DrYoGyG7 H5p1liZwJ1+AsfBfFjA9pDsRfRfb/OPkzC3X1qrSmicR3tyDVVO2FJBWhoculvHAGWZ8/Mxh JR0rbkilBWInK+PIkeJ4F6yzInm2+m5U2Bm3lceo3RGR0GiX/s/xh2rBwo+FOJf9rsqJZtlC HTCxOtsBXOEMISISY8E+Ih++oMjz4Fq/F5/e+vJcAx3FnNLT0sMcqP46LczKvV5h7YrwZvsa oijkpw2LrV5Bu6eV6cfV6tMtToKr1QI/OxL87Nie1U9mNsQBE4Y6HM4BmWGGTCPByWBoX2EC Dus01xXMYbL4VcQTPg44jp6TdmQxCDpD0+XgPwEGAPSZxKUNCmVuZHN0cmVhbQ1lbmRvYmoN MjcgMCBvYmoNPDwvRmlsdGVyL0ZsYXRlRGVjb2RlL0ZpcnN0IDUvTGVuZ3RoIDEwMC9OIDEv VHlwZS9PYmpTdG0+PnN0cmVhbQ0KaN4syzEKgDAMQNGr5AZptNoK0knjKtZNHES6WpAMHt9I 3R4ffmvBQN/j+MgU5ZCkniJB57UvISDnS7QxARn6GrJV+sIGiExhq6wKHbj63+c7nzHJhvPA uKZH9hBeAQYAWygcaw0KZW5kc3RyZWFtDWVuZG9iag0yOCAwIG9iag08PC9Db250ZW50cyAy OSAwIFIvQ3JvcEJveFswIDAgNjEyIDc5Ml0vTWVkaWFCb3hbMCAwIDYxMiA3OTJdL1BhcmVu dCA4MSAwIFIvUmVzb3VyY2VzIDY1IDAgUi9Sb3RhdGUgMC9UeXBlL1BhZ2U+Pg1lbmRvYmoN MjkgMCBvYmoNPDwvRmlsdGVyL0ZsYXRlRGVjb2RlL0xlbmd0aCAxMzA5Pj5zdHJlYW0NCmje jFddc9o4FH3nV9xHMhNUS7awaZ/ShGRoOyQT6O7sLPsgjAG12GZkOZS3PuSH75Xk0GBnRklC sGVJ5577cXT94W5GYVP1Ps97H24pUJivezSCAH/xi40SEkcQhzie9wLY4Geemn+HXp9SuJj/ wGWxW5bYVQnQIYMwNgv6v90E7iaQaIgT5jc9wqjdYQaUU5jM3KwOOo0TiAO7E2FDu0JAKna7 TEFdyWIDooC6ELXeZoWWqdDZCqal0lu4yjOFA0VjYeS2HoSIHIXOiIbEGXbzfEBJwmNqTQ1i tMTMnNb5EjdF1IcdblzY209eAHYGwLsAjNt5i364uABkAjLfi1RDWdi7vZJPIj1CuQYBVb2s UiURuIXLO7jhu4mtVZl33GjcXPnZRT52QYIDjl/U8MvW6yzV8ikrsqoCWcATunV9NJ41j0Wa 1qph7CPJ302ySRu5MhTXhqREB8tiXarcXn/CZFp5+Q69fEds1PDlDV/xJOROLOVO6qMFSctK G3Z7VT7JleGNVzpLBz66sY8uixq6lp0NrLGgLg6iOEUVSgU6+6UhR/+LTVbBKhv4iCfv9rRL 0JUJrElXE2q0ZdEXiwvi9e/oTDBo4KQA/3gAURySIAisFJEgcmiz8TUBTmAynY8fr+7G0+t/ 4O/7x6+T6R3cPd5/f2hhvlIXlJTXWzZ6ELSIxm2iIW2IWkowMfMpJawxlfAwQeEMEkJDtDGK 4hbC1C74I7EsIpxGydnM/t3bu4YRYajFZ1PHUyT+rbVpEpAhj8OzmX8sJ89zzIorrUtVZEe4 w0pUYndpQpaWRSsX0Iogis8081w0addHeAS4KqjqnXaldpAoyyYZr7dCYs0VpgLM/W22Muhw XeZ5XWBltvHd9q/xmRd/FNNTHVR2a1lVeH0J1RZrwNA0+mMOEImVobAMCpScQ6l+mnr0WhD6 LDhV4kaV9R50CZWuV+jrEtWuyFGFTNFjddTWO+iLJ1nuhLO3o3xvWBB5LWA8djFoSpCxeNFf Yso2jj853IFepVaU6CiMsFox4l4TuM+EgDYmfCczgnX6YkFXCd7YfegrRJqcCtGwunm7ZHCE 84BjK0Nbhfh9PhnPWnUTcTKiYXI2+w8QeZ5ghQil7GFV1tr60QW2LjCNjeK10jchfMjPmcXv 9tuZel667uCNdHU5ZjP72e/YpHWGdR37Ar/oU3TsKkPEXGK1HLYZmqAu7Skm11CVsC0P5vZo yrhzfnWgR76YsihxjZ6VhJ04VEaV0l1tj0mVbeqmRi5hX+5kKrPKWbPHlqFziLXxmVfcmzYT uyCzMR6Uy3q1ybRQR3Pzo1ayWkkbE2FFpNJKYERMG+NHpz700xm6lUupm/bvTCSqOt2+Uopu g9YBZd5o81PHwjDaTYd0hOyXrLRrstG92J/gMJJ+kWvjfm/AWeh1+ItKmVA2kSw3SuQV0hca MM/L2uS7y7nc9EwZet7v7cirH6whXirMLndKibxExi8cV9leKG3E2plmy87Y6QVvpHHoZgwJ twpjvrHdZ4GRFXzt6v3b/ytTN9hwwyzbA75QsQAz4GJAg3hIRhi8j2jiFzykWHRpno1Oj778 1BAkIxYEp6GHewjMz2ngVuVmBI9rMxL3b3MNwyFnpwmztRnBfU8j44+LxefJt2+zxWKG72YE 383cWnN38d/8CxLkMDB0GAOauF7MCmXaGzRX6ID9UhbmICvgZvY1Ht2w64g9PN7fuDbAIhgP jee9/wUYALFIpqENCmVuZHN0cmVhbQ1lbmRvYmoNMzAgMCBvYmoNPDwvRmlsdGVyL0ZsYXRl RGVjb2RlL0ZpcnN0IDUvTGVuZ3RoIDEwMC9OIDEvVHlwZS9PYmpTdG0+PnN0cmVhbQ0KaN4s yzEKgDAMQNGr5AZp1LYK0knjWqybOIh0VZAMHt9I3R4fvrNgoO9xfGRKsktWT4mga7XPISBf p2hjAjL0NeRG2RZaIDKFTlkVevD1v8f7OlKWFePAuORHthBeAQYAW5scbA0KZW5kc3RyZWFt DWVuZG9iag0zMSAwIG9iag08PC9Db250ZW50cyAzMiAwIFIvQ3JvcEJveFswIDAgNjEyIDc5 Ml0vTWVkaWFCb3hbMCAwIDYxMiA3OTJdL1BhcmVudCA4MSAwIFIvUmVzb3VyY2VzIDY2IDAg Ui9Sb3RhdGUgMC9UeXBlL1BhZ2U+Pg1lbmRvYmoNMzIgMCBvYmoNPDwvRmlsdGVyL0ZsYXRl RGVjb2RlL0xlbmd0aCA5NTE+PnN0cmVhbQ0KaN6MVktz2zYQvutX7JGeiRQCfICMT7UVZ+Jm JplS00vZA0VBEloRUEFSSm455Id3AVKMJMqBbcsCF8B+u98+uG8/ZAQ29eRhMXn7RIDAYj0h Ifj4i180TWYsBBagvJr4sMHPojT/jhOPULhb/IPXWHctsbcSIDGFgJkL3vfuQNQdmIUxHljM JzNKrIYMSETgY9adGqETlgDzraYZZSgwdwq5gqwpGl6/AbNe8ubIuRxkQkKz5bDX/MBlI5Ts jQw77dMAwcOgs6P34wK+35+SWRIxYq31z7H3WtW8bK1mtYa6LbdwEGpXGEl970SjF2jRGI3E SWxP5l6Q34FYGTfW34B/FXUj5MZ6vVeNERc79LfhWlp0fLpEj0bogctXahd4cq92ohS8ht7p jS6qGqktGuCyVK0uNtzuiQp3D9zpeOikGVf2ZKmUXonOpyG+CCkbbQwaR9iY4YKPXh1lV4Rf gxa7ojyg5V6IUS5RM0Za/3BGkF1oZrdoHDT/hpoNVUsu+Vo0V5lTYxBL5BN9LFbTS1w2wk1c HgWn8K1En4yanyDWSltDnjj6iDsvVufY39SFS9Me90Z1llpUwpjyM35GbLP4GphdtwX/Cpld IXuIZFTe/0KVR8hVvNg4E4Z6f8B4HbccmUK6FPC6KZY7UW+h4pXS6F9hrG/lKFgj26nD9hmJ UGCjxTXCyJXpLJpvCm1XNwrMUDt1kha4gIfEf7nETjX/wx2jy6aS/gIu90RfDd2b4jpq6Vh5 5FJOTySi8kvtlrHzjP+gDlMnYOzOlRN5WlYYm1vN6EY2MJcjQfyTpcGTM9N7OItWuIlLXu0H NgYuNhI2A8a9253UpZ7Q/iWWe48vlVRhEhp7U23ExW6njk5g6uoImBA07SabLgtQteb/tYg6 sFm3y73issCmqFVliXZlOSWvLqoTyqOqqlaKsi8o8yjq2tGsejTqojckA73zM3r5V3yz2O5R ioPY4ZiA0S25TRwntc6+QcLTENY2W6VF882we1ZxR9XuMDvRS2S7nxGwsThbFu17SNydiGeR nT/NN8U/34yfOCJP/vL+5HqOUJDxPRCCW2jR3ZT4LJ6lSNs7jP1zIYGGb8xeOmw9/9uAn6TU 9wfRl8/gm59B8KQrI8HGbSTMe6oaiOOIDgeytZGg3kHy/l2eP3z89CnL8wzn6BnO0d1d83T3 9+IZHYxgatyhFEhi52iDYUb4ab8y885SSPNelDDPfmfpnD6G9Msfn+dwFM0WLIJh6P1i8r8A AwCDSRbxDQplbmRzdHJlYW0NZW5kb2JqDTMzIDAgb2JqDTw8L0ZpbHRlci9GbGF0ZURlY29k ZS9GaXJzdCA1L0xlbmd0aCAxMDAvTiAxL1R5cGUvT2JqU3RtPj5zdHJlYW0NCmjeMjNTMFCw sdF3rShxDy5JLEkFst2DDRUsLYDiQXZ2+m75eSVAMTdDBUMDQ5CYvpsJkGkBYZoqGBoaQJhm QKYRhGmuYG4M1R5QlJ8cnFoSrR/g4qYfklpREmtnBxBgAFwOHG0NCmVuZHN0cmVhbQ1lbmRv YmoNMzQgMCBvYmoNPDwvQ29udGVudHMgMzUgMCBSL0Nyb3BCb3hbMCAwIDYxMiA3OTJdL01l ZGlhQm94WzAgMCA2MTIgNzkyXS9QYXJlbnQgODEgMCBSL1Jlc291cmNlcyA2NyAwIFIvUm90 YXRlIDAvVHlwZS9QYWdlPj4NZW5kb2JqDTM1IDAgb2JqDTw8L0ZpbHRlci9GbGF0ZURlY29k ZS9MZW5ndGggMTE2OD4+c3RyZWFtDQpo3oxXy3LbOBC86yvmKFdJDME3k1Ns2S57k0oq0uYS 7YGmIAkb8bEAaEe3PeQD9pN3BqApy3IC+yULHKAxPT0N6M31nMFGjc4XozdXDBgs1iMWgY/f +BLkmZdGkIY4Xo182ODvoqQ/D6MxC+Fs8TdOS+20zMzKgCUBhClNGP9rA2Ib4EUJBixmIy9g ZoU5sJjBzdxGnaL7CaS+WcljuZlRcqXW3Q5aye95rUVTQ1Gv8G2jeNmZ980aVFdu4V40U7tw ZBeexogbhXYLfQpHyP3zKfOyOGUUNd4VtKZ6B79eaRwcLZKeLOKFfmB3vxxfLs/gYcv1lksQ dSl5ofgK1o1cc6E7yU02onq28fRk46Fj416Qx6mJbKVQTV0hWdDyuthpwRUUhNQia/i00Hxi GSsUuAiLXLgs63PlPzSvV6LeYDpP9oCp9mBUIEsv6MYJHLuA/RQVQ5EFaC4r2DX1BknW26KG APa8kL+tokVJXKUMwr6QV08KKfmm6zNB8RX1Hkiaek/gGlylTJ2Usj4zXJVLhbpBvgq465So sR2wmLLAXA29D0ITtWVTObWfuRntJVRhYiWiiEOuKNquXhG/Qu843NxQ5kgGXLwCOXchh3GW WOSuFqVtQXhfagJheRjBchyl8Kc39y48dAkGXJ+UNn3e6v4z1PSE56SXruL/eFhekiqlpFpe irUooe1kiz5DuyA69ijuCcim01MnOHOCBybQLEm4WFJVCa2pgbCexW5n1VQiFch5p7GLTR85 oQMXdJD0fXNoyIem263QD5RQGvVmaejKJ+7rTjl0891X+RVOPvgwxTiho2dtnP7SHZfja6w0 pWf8SpMVPWxFuZ2AMK08gRlvC6lPHPkENHbm23cTwWBqtx0WsuTQNjtRkikjNCpMddzspyfC zXPixA37ZB9JPfCJwiIX2QBHXTUVanxbyGoC7Xav3MipEznunQubeAcrcilp5M0xucEuUWDb 4k7ootb/KTykCiTFiZ05sbMeGzEqgaoh5She2/4laiVZNGILxFY956/Qde5CHk6iR11jwr+X tefMNzh2r/AF1HiQdImS/kjxjHmBvUz5XhxmdKPKvYxleB/LUs/3/f5aR9MuP55ffjE3sScX sDjB8IQdhR+QvJ8LJE3QqVRseF3u0Tfkd5LTBl2xBbUl2zpOLffCKDrK7Nga2QvNatm843Ss kQGvBgolx5JhUTXyeI8thONXHI8lUttLbctOiQ1c8P6hbZURkcnV3KKsat5r3cia7+Ga1waa PFqs6KguWvcGQucG2HCVe35f+wnO5aNXy3U5Zr0XWst7NCo80isuS/7OrdLeAxMbkXixURK9 Bvjjk3zw08bo2/grlzNMBOa8BcboDI/gbMr8NPFyrMlbPIlv6eIWTehZPjy6/a7Bz/LA94eh z5/Ap69h4ApvfyTW0Iyk46tKQ5LEwRAwX9MIrjuMXL5dLs9vPnyYL5dzNC0PP5LYufTu7K/F LSYYw5TSCQLsBtsHpiHK0bT/jyp0J2p0VWzy2fyPNJ8FF1Hw+cunmb2XGQRi6HIx+l+AAQBz a3J/DQplbmRzdHJlYW0NZW5kb2JqDTM2IDAgb2JqDTw8L0ZpbHRlci9GbGF0ZURlY29kZS9G aXJzdCA1L0xlbmd0aCAxMDAvTiAxL1R5cGUvT2JqU3RtPj5zdHJlYW0NCmjeMjNXMFCwsdF3 rShxDy5JLEkFst2DDRUsLYDiQXZ2+m75eSVAMTdDBUMDQ5CYvpsJkGkBYZoqGBoaQJhmQKYR hGmuYG4M1R5QlJ8cnFoSrR/g4qYfklpREmtnBxBgAFyBHG4NCmVuZHN0cmVhbQ1lbmRvYmoN MzcgMCBvYmoNPDwvQ29udGVudHMgMzggMCBSL0Nyb3BCb3hbMCAwIDYxMiA3OTJdL01lZGlh Qm94WzAgMCA2MTIgNzkyXS9QYXJlbnQgODEgMCBSL1Jlc291cmNlcyA2OCAwIFIvUm90YXRl IDAvVHlwZS9QYWdlPj4NZW5kb2JqDTM4IDAgb2JqDTw8L0ZpbHRlci9GbGF0ZURlY29kZS9M ZW5ndGggMTI2Nz4+c3RyZWFtDQpo3pRXy3LiOBTd8xVaOlVBbVl+9qxIgDw6FVKYms0wC7UR 4AnIlCwnzW4W+fC5km06NkypmxTBlq/uOfctf7lLCdqUg5vF4MuUIIIW6wHxkQt/8OMlMY58 FFFY3w9ctIHvItP/3gcOPL9a/APbonpbbHbFiIQeopHe4PxbCwS1APZDEFiMB9gjRkOKSEDQ Q1pLnaO7IYpcowm7ESzoPUvHW14hteVozA9Mqj0XChVrlCqm+B8NI79WNQwAyac1aEO6g9U8 HxIcBxEx1D4B0YtA98We75hYoZRnlczV0Q7q/Qao34BO+YpLtkO3xX5fiTxjKi9EaW7zsoRr Oyz9DdigB7uQbMU7aNpkG6JvQyRxHDaIYYN4U0nOKu3ZWzCw2nOJprlgIsuBxossFM+GNtyg g0vPcB3tPNyjTz+pcUKLBhx4De8V8H7W0oRgr05VFwc0hnwlIQ58L0BBQLDruk3R6G2zesfP 1KYejkhIOqLOcHpZr6/1wkVHeDKezEdPXbXUpcDYo13J9KJWCitJHHbZOovRt8n97Al0pz3V SYRJEHTFW6/gjweBMiblMRebnptJjOMw7oQr6hb8hcRMmsQsKmWSpFTV6ogqAcmJyup7yTMd UbR02PLq2kjkQkHibrjIjui9kK+9nCFnORPbSNA4qtuUtmkji+qAyi3b7VCm83Sn0HuutsAm 2yJRiGFbOaVir9yKntjQCQ0iI7ktdqC4RKw0do6UKqTgR3THhcFbcTB8nwteoi1740ZI8t0Z g6jfCd0eheiMAmmiwN8Y9D7+48Clykt+Dc7OdtVK+0WjPZveBFRGZVlA2ZrQQD2PlJ0EsZFw SeOH2uyytbtfzRd0e72aPtdNvaSpag5VPb9cfW6Ew8ANoAKCblX/5UxeZvPF1ZCGPqbOYnb1 9+Lxc5GHMU5c4nV2OreXUaIIx35Eu7Kz57v5JO1XInUxJTAXP4v+tAV/PBcK7WAaSogOE6Da RSsGnus5zMdBQsOOx6g1JdqaYOtaPwfViutoc8Gy05BU27xEo0yd16Y1ar6Ng+c3luoy79cm NId9Dj2jMMBmfinFgaDQN/Z8DKz5GDX5CIMqg1JIsxzsggs9H2FqivJQSHWqAc0iBdeAj7SA vrVyCK0eaKdox74J1MXmaGD0uqbXMrgvqtLcWLEjGzalRnDOD5KXEG2w9A1aD4Oeow3XRDTi Ohe6P5Qtg7qBW+HjX24H/zcLTq3pw46W9I4r5+nuNWhLh0CDYOIIZmbauWLVHMgk3zB5aoXg lDcuzs4rfWTPtbam9mhmbNMxPcgCTK3axDJz5y0vdjWPS+czeo5LrBYnpwOaPmczGC9lJvND C/u+ZUpT2UD0S/D2Wjvl+sLAuWC0tR+TtrbqgdNO1NXp/F0aK00nydt5t9cHVavh1IbtxT5t pj3K94cd13htWPtBr5MPWLGhFdn/5VBvJDtskUk1bLeo6VRhLQEnRDMf9C+cQD1XDwV4s4Mh 9SeXY91/Un5AhMAj/eI2hAES4gSC8hW66aMeE/61fpacHj2+KuTGiee6p6WXGXL157QwlXu9 Ak1br0TOdK9QGAbeSSBd6xXQe1qZfF0ubx6entLlMoXXPwyvf/VefWcmqIsCNNTmeB4icT3d zJjLBsPmChxw+J4LCAWk5Tj9FiVj79b3XuazcX0sMwjaQ5PF4D8BBgBZr7MODQplbmRzdHJl YW0NZW5kb2JqDTM5IDAgb2JqDTw8L0ZpbHRlci9GbGF0ZURlY29kZS9GaXJzdCA1L0xlbmd0 aCA5OS9OIDEvVHlwZS9PYmpTdG0+PnN0cmVhbQ0KaN4ys1AwULCx0XetKHEPLkksSQWy3YMN FSxB4kF2dvpu+XklQDE3QwVDA0OQmL6bCZBpAWGaKhgaGkCYZkCmEYRprmBuDNUeUJSfHJxa Eq0f4OKmH5JaURJrZwcQYABc9BxvDQplbmRzdHJlYW0NZW5kb2JqDTQwIDAgb2JqDTw8L0Nv bnRlbnRzIDQxIDAgUi9Dcm9wQm94WzAgMCA2MTIgNzkyXS9NZWRpYUJveFswIDAgNjEyIDc5 Ml0vUGFyZW50IDgxIDAgUi9SZXNvdXJjZXMgNjkgMCBSL1JvdGF0ZSAwL1R5cGUvUGFnZT4+ DWVuZG9iag00MSAwIG9iag08PC9GaWx0ZXIvRmxhdGVEZWNvZGUvTGVuZ3RoIDEzOTQ+PnN0 cmVhbQ0KaN6UV01z4jgQvfMr+kiqQGPJ33NjCJllNhOmMNnarWEPxgisHWNRtkmK2x7yw7cl CzMQqjSbhGDLbb33Wv0hfficUNjWvU+L3ocHChQWmx71wMFf/GJxREIPQhfHdz0HtvhZZOrf a69Pfbhb/IOvhe1rkX4rAhowcEP1Qv/f1sBvDYgXoMHivkcY1TMkQH0K00RZUacFxT/fgZBq ROJ4nrL83k8mYwIBgdF4PEkSWMzg6fnrp8kc5pNk9jzHQQJ3fy++IJp3rYK67mlCw7ylZeS6 SMdzYUhJ5IdU83OoH2rLZT9d3sFUE6SEGYrEdyN0juOSOEaCQeSf537StmcP0oAw14tORv3P t+diPonRFyerydNkPnq8mipkxA1DtzMib2YBjOJhjHP4fuvjPrsQ6d8QGUeBEUlR5OQ2MTci TsR8CPy4E/m9/+fo6/RptJjOnu6GnhcQvz97OF09jMeny2+zx+l4Okn0ypyVeBTpBEFwmvRM hbw9yQaKtOHVlTbmEBrQuBXXutq1LSNzWawtmzwtgUYOrNNjDelGTd/kHG8bDnIDvEyzZsfL Rt00uaivwM3cP2F7NmzaIo+yZqChHviaV2kBY7nbHUqRpY2QZa1vRV3jNdR5WhRWYN8qmhlf Zjg1LzMOKewrmXG+FuUWGglrjvp3ouTwmnPkVilyQxtwYFUcmaSx6NzLQmSC11DxbVppUjbs 0IbtMrPSaZbxulYqy8NuhdIqXstDhYMDEGVWHDRe98yqOrKWisi428DARmJsSVzJTcXR9+Ua SlkOzyMNL/g+l+h9ZGHFj63KfRxQligINWbyUKxhxWEn12Ij+Ppn2asj8LpJV4Wo81tuD6/A qXOFHr7PMKoLdB/XUtRNpVdbi8bo2xciVfEnEXDbxsFArUzOi/0t37+DpzZ42rp+fVBRfrXy tZK7lw1mtcB43PNqzxVBiU8wy63gzKr9FHMvQhYmzHHimmfaCYyFy/4KC6suKfw6Iaz4rg3f CY3vscYoEBq7Hiz7XgjPJCHYLk8MlnfEDuddtYt3cF7UtQuGqua324XnEs/BduF6IXEc56em O/n8/Kg7RnLZ1lzskJ7rsItXzmjkbbp5X0CvYoe6JHAYuxDk2/znMlOvblaprkjWcCgRGfZp lW6rdJ/bfRlYoSOTtG3rxfbUtAl71CUa1XZFcs3rrBIrvsY8bg2t8OEvZ+1ZU1s3dGamWS74 C9c0thI9fkHBih5Zk9Yz6FpNR2HQZclFP9xXBl21C3vJiH85aw6nnMWKIbBWcd3/m1zWxvtH U0NNcNhziFnLZcRCatZdVYbR7RyiMWER7vFoTFVCsHMOPS9+m82ni7+uN4YR8WjgXrxwxiJv o/Ko6l+NTn3NJfwo5SvGWXEcXElCBph2F3ssdlmD6Q2HnjK1ySt52OZY/YGjP+WR8wGkW/Tq AMsT+pFXeFGBVFuOV1Hj07WosFoWx2se713LbDSoa1IKEUR5mnigmoBqyB03XFWeqkpdYVy/ ICl0SdrUcmil4NopGE9g9qBU3EWmKrybowoxuWpSUV5sPm5sTKwkPCsJavxwDfM/NiZWFr6V RVdb2148QAi5Q3+oTSmGYZZWldDstioPsbS0RbYRTcFhOrVTMDU2aC3wsKGzQX1j92GOSgE8 2OJR5Q9e3attfsL3gIdA5mDG3GGohwGJMa4+YhP/giHLvIF6FnePvvxowIli5jjd0LcZOOqn G3iodmoEe40aCfsPuwaCwGedQbJRIzhvNzL5uFx+mj4+Jstlgqdfgqff9l11p89JDvgwVHKw odGoPR/ptpj1huZKle6VKFUYl3Cf/B7G92zssW/z2T28iiYHjaA8NFn0/hNgAEYaAR8NCmVu ZHN0cmVhbQ1lbmRvYmoNNDIgMCBvYmoNPDwvRmlsdGVyL0ZsYXRlRGVjb2RlL0ZpcnN0IDUv TGVuZ3RoIDEwMC9OIDEvVHlwZS9PYmpTdG0+PnN0cmVhbQ0KaN4syz0KgDAMQOGr5AZp/GuF 0knjKtZNHES6WpAMHt9I3T4evK4HA97j+MgU5ZCkniJB77QvISDnS7QxARn6GnKjdIUtEJnC TlkVWrD1v893PmOSDeeBcU2P7CG8AgwAXWcccA0KZW5kc3RyZWFtDWVuZG9iag00MyAwIG9i ag08PC9Db250ZW50cyA0NCAwIFIvQ3JvcEJveFswIDAgNjEyIDc5Ml0vTWVkaWFCb3hbMCAw IDYxMiA3OTJdL1BhcmVudCA4MSAwIFIvUmVzb3VyY2VzIDcwIDAgUi9Sb3RhdGUgMC9UeXBl L1BhZ2U+Pg1lbmRvYmoNNDQgMCBvYmoNPDwvRmlsdGVyL0ZsYXRlRGVjb2RlL0xlbmd0aCA2 MTM+PnN0cmVhbQ0KaN6MVMFu2zAMvfsreHSARJVkS7J7a5t2aFegxeztMu9gJ0rqLrEzW2mR W79u3zVKcgIMxebGSWyTj+QjKfLsU8Zg3QeXeXB2w4BBvgpYDBQvvPE0ISoGFaF8G1BY4y9f 2L/XIGQSJvkzmilvljirBJjkEClrEL55gPAAEksE5POAcOY8ZMAEg9vMo95FZ4KCos4T4TyR zqZdgXnScNVut/umXpSmbpseLhYGUMPSKIYijBV8JRm5IsApA20GnrEPMGMYP448lSGVvxl4 PeISoZgnzFFgkb3+RYrJFOoGXup248LbyCV0er0f3ned7hddXekl7Jul7qDfV7MxDnyMA1M8 HTgsXJgiLIsJuILUPQzSKfRP5WYzhaY1r7V56k3ZLOtmfdSP1iIa40EThxM0KsKqmBShOLL4 cFvGOMSjHLhQ71nYxlTaVvsZkwXTYltWbbfStdl3Gna6KTfmcOzJB+shRrnERya+CqWxeRO4 +Hds37B99VEOcvRsCH8ybOttCfB4lstl7ZzbMjQHaLE/3YnHrmtf6iUeUOQI1WGUgRphEG7K 1//1NUy8LhkcSD/kEiLKiOAQpymhlLo9E/4eHEkPlkQ4tL1z/FILwq0VfA+/6W5eGg2Z3gFj dtxjmMwYVZKkIefnODF3ZQM8nlpdelLd/TRAk5RTehI9PgC1n5PgpttaCZNOosKbrQEpBT8B spWVYAInyfV5UVze3t9nRZHhaiO42rytfZv8yO+wmgJmNh3OgSVutfm0F8FseMJq76q6wfHB 5s2zzyqd86uYP355mIOdaHARbIWu8+CPAAMAgppsVA0KZW5kc3RyZWFtDWVuZG9iag00NSAw IG9iag08PC9GaWx0ZXIvRmxhdGVEZWNvZGUvTGVuZ3RoIDE4NC9TdWJ0eXBlL1R5cGUxQz4+ c3RyZWFtDQpo3mJkYGFkYGRkFPD2dHZ089J2ci9OSQkzMASJKf4QZ/khzSMW8jtPhufAz1Os sgy2PK281/nvCDwQXP3dUgikiBOuAwgYGboYmBTWMTAzMrKwe/3o4Pvex/fjyMofKqK/Fb4z /Wb6rgCETN/BNJDH9FsBCIHivxXk5ot9F/3w4bsokFT7LfpbVA1CAkXk+Jon/+iY0NfT9z2O TW6Bq6ur+38ezoNcW7m3Tufh2XqbhxcgwADYf0fsDQplbmRzdHJlYW0NZW5kb2JqDTQ2IDAg b2JqDTw8L0ZpbHRlci9GbGF0ZURlY29kZS9MZW5ndGggMjI0Pj5zdHJlYW0NCmjeVJA9b8Mg EIZ3fsWNqTKAPUQZLBZXkTwkreqkO4Gzi1QDOuPB/z5ArFQdOLiPh3vveNu9d85G4J/kdY8R BusM4ewX0gh3HK2DqgZjddy8YvWkAvAE9+sccerc4KFpGP9KyTnSCrvTcS/egH+QQbJuhN21 un2nQL+E8IsTuggCpASDA+PtWYWLmhB4xv5i1zUg1MWvtsbe4ByURlJuRGhqIaHRBwnozP8c q5/EfdA/itizUoh0sQKkd3uQLHFbRf4hj/USoxeipLPMXuRkIdbhaz3Bh9w3H/YQYAAaomsa DQplbmRzdHJlYW0NZW5kb2JqDTQ3IDAgb2JqDTw8L0ZpbHRlci9GbGF0ZURlY29kZS9GaXJz dCAxOS9MZW5ndGggMjc5L04gMy9UeXBlL09ialN0bT4+c3RyZWFtDQpo3iyPzWrDMBCEX2WP LT2sJP9IhmBwnChJCyXUIRRMDsLeOAbHNrYO6dtXsXL7GM2MZiUDBpIDFxykAB4rWK1w+7C7 whpLjncFh0Q510+aoh566zTtAow/NdShQ+UxAs6Zx9ih8ChBBp4UyPhVdJyGqiBb4nGj8UQP e0lTV7xpr1eaqK9oLgOB82gqAp4ozLYXPP2NhNu+Guq2bxZ7NlfUWzc8xNyMe2qbmwXFYsxv ZnL1b77Bpd9xQ96sUHemmSFejlmvh0cpEuBhAlHAII7YZXnQbUcBhJFf7oRvcyf8OuSZ/vxY 7+a6PjOOB2u6tsr6piNgWFi67yEKFzhDKPzkZ/r5+9SOdpjw97VTiihN/wUYAI7jbSoNCmVu ZHN0cmVhbQ1lbmRvYmoNNDggMCBvYmoNPDwvRmlsdGVyL0ZsYXRlRGVjb2RlL0xlbmd0aCAy MTU+PnN0cmVhbQ0KaN5UUDFuwzAM3PUKjik6yNaSDoYXFwE8JA3qtLss0a6AmhJoefDvKzlu ig48gEce7kjZtK8tuQjyyt50GGFwZBlnv7BB6HF0BKUC60zcuw3NpAPIJO7WOeLU0uChqoR8 T8M58gqH0/G5eAL5xhbZ0QiHW/nxmYhuCeEbJ6QIBdQ1WByEbM46XPSEILPsj7utAUFtfbkb e4tz0AZZ04hQvRT1HZDs/9mvoh/Ml2Zx31SFUrVIuzubVfmURwCzMKds271bhGzuCB8vCT5k r1ziR4ABAI8jaGYNCmVuZHN0cmVhbQ1lbmRvYmoNNDkgMCBvYmoNPDwvRmlsdGVyL0ZsYXRl RGVjb2RlL0xlbmd0aCAyMjIvU3VidHlwZS9UeXBlMUM+PnN0cmVhbQ0KaN5iZGBhZGBkZOTz 9nT09HfWDq7MTcrPAYko/ZBm/CHO8kOGR+y3x++dv679amOVyazh/W7C/91ScMb3HCEGJkbG 8Fjn/ILKosz0jBIFjWRNBUNLC1MdEGkOJi1BpKWBgmNKflKqQnBlcUlqbrGCZ15yflFBflFi SWqKnoKCY06OAtiEYoWi1OLUojKgKNQdQMDIUMLAzMjIwq77vY8PiH4kfGf9/odx7/c/zD/0 vu8UfWd1R0PdykqjR079ttX7Hrl3d26/l+ermvPTdPrvqBlsz7lecQMEGAAhv1CODQplbmRz dHJlYW0NZW5kb2JqDTUwIDAgb2JqDTw8L0ZpbHRlci9GbGF0ZURlY29kZS9GaXJzdCAyNi9M ZW5ndGggMzMwL04gNC9UeXBlL09ialN0bT4+c3RyZWFtDQpo3uyUX2vCMBTFv8p93BBJ0j+2 BRHauk63scHq3IP4ENtrDdS2NBHmt1+abihu7HkPPtxwSc49Ofk9xLOBgucAc1zwXGC+B94I bN2OxyTiEpO6UuRxHs5f4kF63G/qktxVWZ2LqujmKLySRLRSxTveArN80g1MUWataFTddqad 5omfSdLDRh0bJAu9MLKo3yqhHREc32i7bWND3kWudnLljOh6MtGBpmK7xRarDOWqM9ocyhLV up/4jmWUocywUkBJzJsZimJneh0gRXVDZMMz/Jq+JV3aXpyUvJDgmMujqP5YDZlPYWgFNjAa UL0wujaniSjRBifoAeiNZ77HC05zxUuRhVVRovZOFe5nEFimWULgnt55wmWyn2GPw+RhEN3L PF9SdgaeXYC3rR/crQvuwR/cR79zt1wKLr3Wtf5Zmf/gU4ABALX2ISgNCmVuZHN0cmVhbQ1l bmRvYmoNNTEgMCBvYmoNPDwvRmlsdGVyL0ZsYXRlRGVjb2RlL0ZpcnN0IDExL0xlbmd0aCA0 NC9OIDIvVHlwZS9PYmpTdG0+PnN0cmVhbQ0KaN4yN1cwUDC3UDC0VLCx0fcrzS2OBvMNFIJi 7eyAQsH6LnZ2AAEGAKYDCOANCmVuZHN0cmVhbQ1lbmRvYmoNNTIgMCBvYmoNPDwvTGVuZ3Ro IDM0NTkvU3VidHlwZS9YTUwvVHlwZS9NZXRhZGF0YT4+c3RyZWFtDQo8P3hwYWNrZXQgYmVn aW49Iu+7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOVGN6a2M5ZCI/Pgo8eDp4bXBtZXRhIHht bG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJBZG9iZSBYTVAgQ29yZSA1LjItYzAw MSA2My4xMzk0MzksIDIwMTAvMDkvMjctMTM6Mzc6MjYgICAgICAgICI+CiAgIDxyZGY6UkRG IHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8yMi1yZGYtc3ludGF4LW5z IyI+CiAgICAgIDxyZGY6RGVzY3JpcHRpb24gcmRmOmFib3V0PSIiCiAgICAgICAgICAgIHht bG5zOnhtcD0iaHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLyI+CiAgICAgICAgIDx4bXA6 Q3JlYXRlRGF0ZT4yMDE5LTAxLTI1VDIzOjI3OjUxLTA1OjAwPC94bXA6Q3JlYXRlRGF0ZT4K ICAgICAgICAgPHhtcDpDcmVhdG9yVG9vbD5VLlMuIEdvdi4gUHJpbnRpbmcgT2ZmaWNlIC0t IEcuUy5ELkQuPC94bXA6Q3JlYXRvclRvb2w+CiAgICAgICAgIDx4bXA6TW9kaWZ5RGF0ZT4y MDE5LTAxLTI1VDIzOjI3OjUxLTA1OjAwPC94bXA6TW9kaWZ5RGF0ZT4KICAgICAgPC9yZGY6 RGVzY3JpcHRpb24+CiAgICAgIDxyZGY6RGVzY3JpcHRpb24gcmRmOmFib3V0PSIiCiAgICAg ICAgICAgIHhtbG5zOnBkZj0iaHR0cDovL25zLmFkb2JlLmNvbS9wZGYvMS4zLyI+CiAgICAg ICAgIDxwZGY6UHJvZHVjZXI+QWNyb2JhdCBEaXN0aWxsZXIgMTAuMS4xNiAoV2luZG93cyk8 L3BkZjpQcm9kdWNlcj4KICAgICAgPC9yZGY6RGVzY3JpcHRpb24+CiAgICAgIDxyZGY6RGVz Y3JpcHRpb24gcmRmOmFib3V0PSIiCiAgICAgICAgICAgIHhtbG5zOmRjPSJodHRwOi8vcHVy bC5vcmcvZGMvZWxlbWVudHMvMS4xLyI+CiAgICAgICAgIDxkYzpmb3JtYXQ+YXBwbGljYXRp b24vcGRmPC9kYzpmb3JtYXQ+CiAgICAgICAgIDxkYzp0aXRsZT4KICAgICAgICAgICAgPHJk ZjpBbHQ+CiAgICAgICAgICAgICAgIDxyZGY6bGkgeG1sOmxhbmc9IngtZGVmYXVsdCI+dW50 aXRsZWQ8L3JkZjpsaT4KICAgICAgICAgICAgPC9yZGY6QWx0PgogICAgICAgICA8L2RjOnRp dGxlPgogICAgICA8L3JkZjpEZXNjcmlwdGlvbj4KICAgICAgPHJkZjpEZXNjcmlwdGlvbiBy ZGY6YWJvdXQ9IiIKICAgICAgICAgICAgeG1sbnM6eG1wTU09Imh0dHA6Ly9ucy5hZG9iZS5j b20veGFwLzEuMC9tbS8iPgogICAgICAgICA8eG1wTU06RG9jdW1lbnRJRD51dWlkOjI0ZjBk OTAyLTViNmMtNGY0Zi04ZDNjLTNmNDM1MDUyZjdjNjwveG1wTU06RG9jdW1lbnRJRD4KICAg ICAgICAgPHhtcE1NOkluc3RhbmNlSUQ+dXVpZDo0OTc0NjY4ZS00NDY4LTRkZDctOGRhNS03 ZTliMjg3MzI3NWI8L3htcE1NOkluc3RhbmNlSUQ+CiAgICAgIDwvcmRmOkRlc2NyaXB0aW9u PgogICA8L3JkZjpSREY+CjwveDp4bXBtZXRhPgogICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgIAogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg CiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAKICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIAogICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgCiAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAKICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgIAogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIAog ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgCiAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAKICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIAogICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgIAogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAKICAg ICAgICAgICAgICAgICAgICAgICAgICAgCjw/eHBhY2tldCBlbmQ9InciPz4NCmVuZHN0cmVh bQ1lbmRvYmoNNTMgMCBvYmoNPDwvRmlsdGVyL0ZsYXRlRGVjb2RlL0ZpcnN0IDE4L0xlbmd0 aCAxMzYvTiAzL1R5cGUvT2JqU3RtPj5zdHJlYW0NCmjeMrdUMFCwMFAwMVGwMFQwNDVVsLHR d84vzStRMDTT985MKY4GyhooBIGkgVSsfkhlQap+QGJ6arGdHUKtAVStKVgtWKmCCZg0h4hA DDE0hlBmEMoSTBkZQShTiAUBiUWpQCPNwZLYrYO6zMgCrNEYYp0xxD5jiIUmEAtNjAkZChBg AHIYPzwNCmVuZHN0cmVhbQ1lbmRvYmoNNTQgMCBvYmoNPDwvRmlsdGVyL0ZsYXRlRGVjb2Rl L0ZpcnN0IDUvTGVuZ3RoIDE1OC9OIDEvVHlwZS9PYmpTdG0+PnN0cmVhbQ0KaN58jT0LgzAU Rf/K20wG40uK/UKE0oBTqdCWLi5qYnkgCcTY/v0Gupc73OFczt0rQKiq4hxsH8k73UfL9FGh PKBUpdqoXSlzLDPEjP9WPrCHuAlo/FtAG8hFci+4ThONFvIcmgR1Ci8u3vz3tcGbdbSBncbg hz6CpiXSPNsAEoUUcgsde5Iz/rN0nBd3irNla3pMbXhdfwUYALjjNwUNCmVuZHN0cmVhbQ1l bmRvYmoNNTUgMCBvYmoNPDwvRGVjb2RlUGFybXM8PC9Db2x1bW5zIDQvUHJlZGljdG9yIDEy Pj4vRmlsdGVyL0ZsYXRlRGVjb2RlL0lEWzxBMUE1NUZDMEJEREE5QjU3RjZGMTU1NzE3MUJE MTVGQj48NjcyNTMwMERENjg0MUI0QUIzRkIzOUZDNEVFNDZGRDQ+XS9JbmZvIDgyIDAgUi9M ZW5ndGggMTU2L1Jvb3QgODQgMCBSL1NpemUgODMvVHlwZS9YUmVmL1dbMSAyIDFdPj5zdHJl YW0NCmjeYmIAAibGGBYGJgaGBiDB2gtiHQQSjCAuSx2IBeeyzgGx9oOUNIG4IG2Mh0AEiMsS BONCZK+jcNk6ULgs3ih6WftQuSmoiv/iMBmi2ArEOgC3aCeKYubVIC4viFADEWVAgkkWxDIG EStBRBeQ4LsIYj0HEX+AQWIEYjEwU0qwgggGRhjB/A+FCyYY/8JYTP9RJf4BBBgAVRsl3w0K ZW5kc3RyZWFtDWVuZG9iag1zdGFydHhyZWYNCjExNg0KJSVFT0YNCjUyIDAgb2JqCjw8L0xl bmd0aCA1NDAxL1N1YnR5cGUvWE1ML1R5cGUvTWV0YWRhdGE+PnN0cmVhbQo8P3hwYWNrZXQg YmVnaW49Iu+7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOVGN6a2M5ZCI/Pgo8eDp4bXBtZXRh IHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJBZG9iZSBYTVAgQ29yZSA1LjAt amMwMDMgREVCVUctMTIuMzQ1Njc4LCBXZWQgSmFuIDIzIDExOjQxOjIyIEVTVCAyMDE5Ij4K ICAgPHJkZjpSREYgeG1sbnM6cmRmPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5LzAyLzIyLXJk Zi1zeW50YXgtbnMjIj4KICAgICAgPHJkZjpEZXNjcmlwdGlvbiByZGY6YWJvdXQ9IiIKICAg ICAgICAgICAgeG1sbnM6eG1wPSJodHRwOi8vbnMuYWRvYmUuY29tL3hhcC8xLjAvIgogICAg ICAgICAgICB4bWxuczpwZGY9Imh0dHA6Ly9ucy5hZG9iZS5jb20vcGRmLzEuMy8iCiAgICAg ICAgICAgIHhtbG5zOmRjPSJodHRwOi8vcHVybC5vcmcvZGMvZWxlbWVudHMvMS4xLyIKICAg ICAgICAgICAgeG1sbnM6eG1wTU09Imh0dHA6Ly9ucy5hZG9iZS5jb20veGFwLzEuMC9tbS8i PgogICAgICAgICA8eG1wOkNyZWF0ZURhdGU+MjAxOS0wMS0yNVQyMzoyNzo1MS0wNTowMDwv eG1wOkNyZWF0ZURhdGU+CiAgICAgICAgIDx4bXA6Q3JlYXRvclRvb2w+VS5TLiBHb3YuIFBy aW50aW5nIE9mZmljZSAtLSBHLlMuRC5ELjwveG1wOkNyZWF0b3JUb29sPgogICAgICAgICA8 eG1wOk1vZGlmeURhdGU+MjAxOS0wMS0yOFQxODo1MDoxNS0wNTowMDwveG1wOk1vZGlmeURh dGU+CiAgICAgICAgIDx4bXA6TWV0YWRhdGFEYXRlPjIwMTktMDEtMjhUMTg6NTA6MTUtMDU6 MDA8L3htcDpNZXRhZGF0YURhdGU+CiAgICAgICAgIDxwZGY6UHJvZHVjZXI+QWNyb2JhdCBE aXN0aWxsZXIgMTAuMS4xNiAoV2luZG93cyk8L3BkZjpQcm9kdWNlcj4KICAgICAgICAgPGRj OmZvcm1hdD5hcHBsaWNhdGlvbi9wZGY8L2RjOmZvcm1hdD4KICAgICAgICAgPGRjOnRpdGxl PgogICAgICAgICAgICA8cmRmOkFsdD4KICAgICAgICAgICAgICAgPHJkZjpsaSB4bWw6bGFu Zz0ieC1kZWZhdWx0Ij51bnRpdGxlZDwvcmRmOmxpPgogICAgICAgICAgICA8L3JkZjpBbHQ+ CiAgICAgICAgIDwvZGM6dGl0bGU+CiAgICAgICAgIDx4bXBNTTpEb2N1bWVudElEPnV1aWQ6 MjRmMGQ5MDItNWI2Yy00ZjRmLThkM2MtM2Y0MzUwNTJmN2M2PC94bXBNTTpEb2N1bWVudElE PgogICAgICAgICA8eG1wTU06SW5zdGFuY2VJRD51dWlkOjM1M2RkZTIwLTNiYTEtMmYzMy03 ZTUzLTI0ZTVjMjMwOWUxMDwveG1wTU06SW5zdGFuY2VJRD4KICAgICAgPC9yZGY6RGVzY3Jp cHRpb24+CiAgIDwvcmRmOlJERj4KPC94OnhtcG1ldGE+CiAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAKICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgIAogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIAog ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgCiAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAKICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIAogICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgIAogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAKICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIAogICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgCiAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAKICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgIAogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg IAogICAgICAgICAgICAgICAgICAgICAgICAgICAKPD94cGFja2V0IGVuZD0idyI/PiAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgCmVuZHN0cmVh bQplbmRvYmoKODQgMCBvYmoKPDwvTWV0YWRhdGEgNTIgMCBSL1BhZ2VMYWJlbHMgNzcgMCBS L1BhZ2VzIDc5IDAgUi9UeXBlL0NhdGFsb2cvQWNyb0Zvcm0gMTE1IDAgUi9QZXJtcyAxNTAg MCBSL0xlZ2FsIDE1MSAwIFI+PgplbmRvYmoKMTIzIDAgb2JqCjw8L0xlbmd0aCAgICA0NDQ2 Ny9TdWJ0eXBlL1R5cGUxQy9GaWx0ZXIvRmxhdGVEZWNvZGUvRGVjb2RlUGFybXMgbnVsbD4+ c3RyZWFtCnjafHsHXBNn+D8x3AXuIECOo5h4Ce49mGrdDBcoy4GIQoAAkREIYaOAiyGgdSKI ICDixIGKinvgAheOumerrW2tHW/o2fb/XA6R/n6/z//TfvOOu+d93me+zxuiwMjY2EhgbGRk JABIZqRp1cpwH61mqJ8qMilGqf3yzP6vXMFfed3+yhPqbY1Ze7b4r7/+8sL+yjejGSOj0Sst uM/VVvBpFAQfl3+UdNN8JhUBCICYYwHoDlAAegH6ARwA4wCTAFMB0wEzAH6AudyCgGBAKEAF iAQkAJIAWYA8wAbANsBewAnAZcBdwAvAL4C/YSuwB4EU0BcwHDAa4AHwAcwHwNoCWFewGABr CkoAdYCjgEuA+4DvAcjIqBsO+AowADAKAHvuFghYBMgErAFUAA4DzgFaAQ8BbwF/GBkJuwFA H8IegEGAkYDJgFmAMEA8AGQTfgOoARwAnARcAcA+hK8BvwJALmMSADo1Bl0aOwPcAKA7Y9CZ cRwgG7AOAPox3gcA/RhfBTwAfAf4zcgIg/1gVgCwCwa6wcYDZgJA91gMAPaCwRpYNeAg4Czg NuAl4KOREQ52xsG2eG+AIwD0is8BRAFSAQUA0AcO+sCBP34RcAPwBPAz7yIi4C8CetFQAPiD CHQqCgCAvUUpgOWAtQDQhwjsLDoGuAC4DmgDPAK8AnDrgY5Fn4yMTDAA2N3EAgDrm8gAPQFg NxOQ08QJ8DVgIsATMBsAvmCiBABfE/AHE9i/CchvsgIAdjXZAqgFgE1MmgBgXxPYg8kdANjY 5DngRwD4iQnYx1QIAP6mFADsbQp+bwr8Te0BIKcp2MsUfNAUfN0UfNwUdGYKdjNNB4DtTMEX TUH3pqA/0+2APQCwgelpAPilaQsAbGEK9jR9CngHAJuY6iHsgDdhCrAE2ADsAP0BoGMCZCfG AMBWBMhO+ALA3kQEAGxOaAEgO7EUkA8A2YmNAPAjAvRPQFwQIDsB/AmQnQDZCYg3AmKEAP7E P0ZGJOQAEvRPAm8SYo8E+5IDAaB7EuKGdAeAnUmQnVwIUAM0AIhtMgeQC1gNKAWAzkmQnTwE ANuTIDsJvEmwPfkt4BngDeADoB3wr5GRGfA2A9nNIFbNIC+ZgexmwwAgtxnwNoM8YwZ+agb2 NgO+ZqBvs0LAZkAVAPRsBjY2A15mEMNmEHtmjwFgYzPgZfYeAPFjBrY2+wsAPM1B5+YmAIhv c+BtDnFhbg0A3zOHPZiDDcwhB5mDD5iDHswh/5lD3JqDPswnAKYBwA/NFwDAFuZgB/MlAIgh c9iXOcSgOeQlc9CFOfig+REA5AZziElziAdzyBHmoBdz8Alz8Alz0Is52MUcYsP8B8BPALCP OcSIOcSIOexZDPEvhlgRg77EECdi2KsYdCWG/YlhX2LQlRh8VAz+IY4GgH3EKwFgFzH4g3gX oB4AuhKDnsSgHzHwsQBdWEBusoAcZwH+ZgF6t3AFgIwWsJ4F2N0C7G4BudcCfM4iEQB+bwG2 twC/twDbW4DPWZQDIO4tdgPAJhZgf4szgGYA8LOAXG8BdrEAGS1ARgvIjRbg/xYgmyXkaktz ANjAEuSyhPizBB+0HAGAvGsJuc4SYsDSC+APgDxuCf5gCXFoCT5hmQyAM8ES8o/lKgDkIEuw g2UlYAcAcqol5DVLkN3yPAByq+UtAOjeEnRvCTnWEnRh+TuANTKyAl1bQUxagW9YgV9ayQHg D1ZDAJA7rSAfWcFZaAVnoZU3APzTCnzBKhwAurcCf7BKA4CvWkF8WBUD4PyzgrxkBb5hBbaw Ar+wagRAjrAC37UCX7AC3ViBv1qBn1qBXiQQmxLYhwT8VAI+KoH4lEBulIBfSsDuEhcA5CcJ 2F4C+UECZ4pkHiAEALlRAjlKAn4ggfNOsgwA/imB80oC56YEcpUE4lUCeULSAICcL4FcIQHf lNwEQBxJIFdJIIYksCcJxJAE9kXBOUJB7FCQLynIGRTEC9UHMBgAcULBmU1BrqamAOB8oiBO KPBJCs5MCs5eCvI1BTmLgnxNgX9SRYD1gDIAxDO1E7AfALmLOgWAc4iC3E1B/qIgf1EQJxSc 0RTUDNSfAMjf1qAnazhjrUFH1uDL1hC/1hAb1pBHrCFurccCIIdbQx6zhhxqDWeWNZy91hC7 1rEAHSADAHnUGvRjDX5jDTnMGvRhfQ8A/kqDT9AgLw26pyFGaLA9DecQDTqm4dyhQac07JuG uoaGs5+GuLWB/diAH9uAv9hA7WAD9rEB+9iAfWzAPjZAawP2sQH72IB9bMA+NsDfBtayAfvY gC5sYB824CM24CM2kENtwCZfgW6+glzy1Q33MK1GqfOIi5waqtTOAiTFqUc42LuFG+ZVcZFR MBcdqVWp4mKUceHqsDhlvCZRp9XER6l0na+7T5seERwB/weruY9F3EeMYQDdGPWidJVWMywx RpkY5ZGk1UzSquMilWFJOpUqUaeOBTbhhhc0MeGJurQYlSZO1dnXpXyZ10XBNjpHEZok7ZeB OvnLk0R16pe+KlkV1zlSqSOjdJ2jOHUXRvEqbZgq7stDw44i1DrYHLcfvsftpqNn2AvfN+yk o8vtg+9yu+joGfbA9/kd8H0Df777RUFdxjplaFeVdBly++g6NGymy4RhR13H3La6jLm9dR0a Nthlgt9llwnDVruMwzUxcHXoOmNQXpcxZ+j/bCFGA2b/D1edShsDntB1Lu2/+4hLig1VaRPV kf+Z5ZWVBBZTa7ScZj73ObV09g06+TwyKKRzwGnj84BTRWffoIfPI14Jn0cGDXweGD7DO4dh mthYZeeoQzedDznFfB5EpUHcfGERr9RCXKkidP+d0f6Hs0FcdVxEp7if+5y4nX2DuJ9HBnE7 B5y4nwecuJ19g7ifR7y4n0cGcT8POsT9POTF/TzqELfzISfu50GHuJ3rdIr7nxntfzgbxAXD q7RKHS9v54AT+MvAIHHn0CDylxEnc+eIE/rLwCB155AXu3NokLtz1CF455iXvHPYIfqXx5zs naMO4b8s1in9f6e0/92BQf5wVZwmVh33WQNdhpwOug4NWugyYdBD1zGniS5jThddhwZtdJng 9dFlwqCRLuMOnXSZ4bXSZaJDL11f4TTTZdyhm67Ldmrnf05q/+eOlLphYcp4VWw4pEtDL66z lxoWo4wN16TEcaPIJHVMjCpWozMs23WCX7JjJhFyUEzXVwwTna90bBV6CUnceaWJ+7x+qFYZ pvpMaBh0EnGjaJWu60MYdj7+IuznwZdHBvVy+lJpVeHcDGTKRFVCkjIGTmElN8v14UWtJtXQ jdPoDC0EkDpODQlSkw7ntkoNK0RqlTGwvE6tjAlXR0QASXhSmE6rhHNcGZOYBGbj5HFXxeiU 3rGqSGW8Wtl5Nk8K1YJvTIpVQiUQN0kTCX4YrR4WrtG5GR67hSlh3i1MrQ1Lio2IUaW6wSNl GLdxd8MjDwO9B9/vfObBr+fBrzfF8M6UL4tMMfgS/+qUTqIpwTp1TLgKnoVO/fLuNAPxtM63 pvFLT+OXnmYgmf7ldc8uS3sZRPAy7M2r6zwsNiOYq2kcRzjMNLw00/DSzM7JLm97GzbgHZUE GtMmxcYok3Te/B68DUe5gd6P/zSs4teF2N8w7x+mCgefVPp/2ad/l5dmGcj4GmvSbAO72V3Z zebZzeZFns3ZbrZB7rmG1ed+WXVuuBo8J1GdOBd8Ilk178uTeYYJAw9Hh0ADXWCnTid5GCaU BtZKnpuS5/blwAszvBNm2GvYl4XDOlcJNzxSGRZR8f3OZyp+URW/aKThncgvi0R20UZkJ1Hk F4eI+vKu2kCs5hdUd3is4cVFX16K7rJgjGHjMYYdxXSdB0axny0eZ3gpzvBSXOdkl7c1Braa rnbR8HvQfHEDLf9pWEXbhTjRMJ/Y4QaJX/aZ2OUlXRc3cE0ysEvqyi6JZ5fEi5zEuUGSQe4U w+opX1ZN+ewGKQarp315ktbFDRzTDXTpnfpWqvhtxkOO41Xg4GKY4ZMb7IfrGHZp6PDSGLqd DLjRfxbgJj5vx9D/zM2Qh7ndGNJvFzm5MS8q1+Ol5XqcwFxrkJnrTIqJj1K6qnTKKUpQooHf aCeP+ER1jCYuEKY9dMpZcH9RTgOWnlwG9lLGhoYrZyTNTApQe8eqORY+ar8ojb86MlY5S5k0 m6f1iVK7Ral9EtWGJSeNNvDRcYbuWJzv6/g5bvXOzmdJO1Y3zM/uQtTR//IapGPDAyXHIxQ2 G8nJEs7lahX/bjpMwv86ThI1sIjmJIkxSGLYn6tbXFKqWsMz1EZpEjlhdMqkJJ48PkodFqWG vobjZaBwc1B2SqTqsjlVhyBqTZfO561qukiU1IUo6b8SaTol6kr8f73Jz3H7Gemh5E63GJWa p/zPG58HwXz6gVzQOWPwHm6mi8ONmPy/Cbq64Bei/+GpIyYbvK0z3XGTTiPs+caBbxz5xolv nPnGhW9G8s0ovhnNN5P4xpVv3PjGg28mGxr7EXzDM7LnGdnzjOx5RvY8I3uekT3PyJ5nZM8z sucZ2fOM7HlG9u58w/Oz5/k58PwceH4OPD8Hnp8Dz8+B5+fA83Pg+Tnw/Bx4fg48PweenwPP z4Hn58Dzc+D5OfL8HHl+jjw/R56fI8/PkefnyPNz5Pk58vwceX6OPD9Hnp8jz8+R5+fI83Pk +Tnx/Jx4fk48PyeenxPPz4nn58Tzc+L5OfH8nHh+Tjw/J56fE8/PiefnxPNz4vk584yceUbO PCNnnpEzz8iZZ+TMM3LmGTnzjJx5Rs48I2eekTPPwZnnMJqXaLR9RwZO0/6PhGuY+PLwP0+8 o6C0n819aLiPJO4jXBMXyWGYMkYHS9t7TBrBNw5848Q3Lnwzim8m8Y0b33gYGleezpWnc+Xp XHk6V57Oladz5elceTo3ns6Np3Pj6dx4Ojeezo2nc+Pp3Hg6d57Onadz5+nceTp3ns6dp3Pn 6dx5Og+ezoOn8+DpPHg6D57Og6fz4Ok8eLrJPN1knmAyTzC5QyH2fOPIN858M5JvRvONK9+4 881kXgU8nStP58rTufJ0rjydK0/nytO58nRuPJ0bT+fG07nxdG48nRtP58bTufF07jydO0/n ztO583TuPJ07T+fO07nzdB48nQdP58HTefB0HjydB0/nwdN58HSTebrJPMFknmDyaIN7fsnI /LAzFfPDKI0mWhmq6TrVWf998eovi3SZ61ypy9x/lusy37kmn/yhHglVxWhSvsz8h7DLCWHv +j+k6CyL/nuo/B/SfJnu5P7fsum/i/5fkv2P+f+1/P8l4ZcjrquUX2b/1yL/kZab+HxzGRYO p3eXPveKvYsD3xiS3giDn0NjSFcOBp90cDCcXdDw2c7gcA4jDGeeg73hlIPGxVA/D4uA4tnA 39DrWOtz32GE6+iOput3hA7DRowY4aaJTzNcrO3sR492GMJ9Ohk+Rw6xc4Dnhk8nu0nhmlCV nX9aIlxGEu2mQW2vjee+ZYDrt92kmBg7wxKJdlAlqLTJ3CT/Gwo7daKdSg3Vl9ZOCQ8j1YmG K7sdd7+GW4022k7DPekyjPj/sLJTx9nBWnaz4QoPI38otFSJdsq48OGwisbAJUyTFKfTqlWJ wzo24KPVDJ/sPystXmU3yi5cFWEnEHUzEhh5GCUZlRqdM3pi9Kugv2C2oFLwoNvgbhXd9ghp YT9hlnC7UG88xfgb4xJsGOaBVWCNWCvuiwfgy/AifAN+FL+KP8J/wZEoWHRS9Fr0m0l/k3yT gyaXTX4w+Wjyr6m5aU/TGaZVpr+aIsKYMCVGEgsIJRFNxBFZxDniEmlK9iIHkNGkllxCLiXX k2XkcfIUeYf81czSrLsZY2Zvtsis0uyQ2Tkzvdk/5hJzhfkQ8xBzlXm8eZX5LfOH5h/M/xF3 ExNiKzEt7iG2E/cRfy12Fc8VB4s14uXideIK8XbxTnGr+JH4nfg3CxuLARbOFm4WUyy8LPwt Ei1WWKyx2GBRa3HI4pbFS4t3lrhlb0sHyzGWEy19LIMsIyyjLbWWaZbrLfdZnrS8Z/nC8q2V kZWNVR+roVYuVmOs3Kw8rXysIq3irZKs8qyKrDZZlVsdtLpk9cjqrdUnCS6xlQySjJW4SaZI /CULJCrJIkm8JEmSJymT7JOclbRK7kkeSl5I3kreS/6hLCmasqPsqdHURMqDmk2pqERqMbWM WkWtpjZRW6nt1B7qAHWEuki1Uk+oH6l2a5E1bd3b2t56gvVUay9rP+u51kHWautk63TrXOv1 1tus66zrrRusz1hft75n/dL6vfXv1p9oY9qMltC2NEMPoB3p8fQ0ehYdTC+iE+k0egm9jM7T h6JkunB90eZy6WslUrAObE9nVsT2Y/u9HogGPjhTtnmXPPMqtniRKttL5jihCZH5isKr9OW1 B5+8lv1c7eRfoCD1o21W7MlvOCxF00TvIz+wA2b6pieEySt8sW17j29ulP280S1MkSNivQt7 e7KmUlI/FkXRd9go7C3Opre7YL1wNu1vF+wNfgtFYeU36BY0FyPZk3hGXsbKJfLwjNBQH9kY zZXvFajSka0XseO/U95/cerUwSp5EU7qx+ltabYUqdHOtk9Gf7voLdrYRpSLSnGypGFjw4ZD JuC14RvCSoNb2Dm25LD60F1Xpcf2nfv+cmNK1jZ59W1sS+y8ssky9iuncb2G3PBD3cIV30XV R3pJp8wNcvD2q6gOl5Oo1QYdEqFk/VfYAHwQOzMhQBecGtw9H08+ntKQcGoImmk7AEfqT7YY e1BEbjldenLTReC7yW/z/C2z77IZto9wNEKfijnhk9ncDL8lAcsCu+fh2U2LT6VdnIhW2k7C x7KrMuZmzM3m5peeXHJy8VlPVGBLCvX9n9HZ2kVL5skGu91Exh+anyDhiT3ZWZWKihvYpsQF JXNlrENf1ogdyA74YQDqd/1U2aYqBfkngxqf4A/z6qMqhm0dWeq7MdXkDb54e8b1pHcZt2JO zC03KRbdrj5/6bX0dOox9U75AaX3lmEyb6+VS4MVL2fSqzfvXH1Y9n3BVZWTdLxPwDC5A06G rriBNregxFbJ/Zco6dXU76nf7xfRuXXHcptlqNv9iiPHFXv3VB29KP1l4hnPMnmRiNLf3n7k wnXpmeRDUdvle5X+pU6ymd4rlqkUL33o4s1VxYdkr5pjxk6fPX+4Yiw+zfgOTv3+w0PV8IGj FtnHaAuL0xVij5OTf7p5eu+BWnkxTtKu/iEzoiqiD6co8kXU66CUuOj50lknAt48vXTs5olF exZu4Zg+aKwo37dH2hR2YrScep3H/kEviN+9b0917eFNiuNLdqeESCM18cFy6kEhaqaPlMdq ohOTYpYqQjbGb90n3blt+2G5mB7H6HSa+MrEnWgoM44JJejLopaN+xqbpGdjdk+tllPv/StT NtdKt5VWH2vYsXhZibysKW2DZmNEYffzC31E3jmR4QHSWQfjWxLlx9MqM2KlsfHJSjnVFrlo U2miIj0AW1x1IOuAzEckRu+baVY+Dn2FehUqUL+CO0iG+sL/t1g7VsoOHcdSrFxB0tSHjWV7 SutljeXaREVQwZz0CJlmQS1OvT1zJmWeIqYwPnKmTBVeujFDkTYPy9x2dMkJ2a/nz105pTow a50CdPLhRFnd3kPSE5HHnANDMjJ1cnHWc6JGXy7UH7FhI9DPSIkeY/3x4ayDNiQ9JjUMfDCt PnWv9qgDcrDth6NA9gUbyr7DfsEfowH7Lm2t33qwexFeGb4tYp/fC3agrTigMhltuYXqbr4m UBW+sqK6YLvs+b2apmOKvfvKT1yWNic1ReyW14d5VTjLPGatWK5UvPSiV5fWFR+Q/Xg1xGGY Z0CvuMSiNakKMe2oYq7OYWjqdPaM7DmTfGXBSbuPvr/99FXVlty8DYqDn7rTutA5WX4ydgAr +IjGoGDEIBqNRMNf9mb7Kqhn2ayJ35SAQvmiwqx9pff3omm2mxJU60NkrGIgi7GWClh47Mmg i83H6i7tk6/GgWBm3v74Q7J3z16hQWgMa4rErCurZXuzk0HmWZASzdCo1vMb684pxNmVW5dW yo5X7W0tUATh6vycKmJ9hoK0Z4MaUd87+hN3BOdfIePLR18LD++htQfa0i4WFa8qkoW5Y8dX 7srSSpNScpKS075ZnyHPDMFytmxfXis721R1YX/0DtUaxY5GDBGVFx6+lv7se47Fj8r7MWJ6 Rv2MV/eaTt6Vz8UX5SVFBslCtTsPrlCIexWNXmcvzy+Ivhl+e97D7mwMeocNIT2yr+kPX5Xs fzP9KUp8Nv019Rqty6aR5fv7CHs478LXuxXFECCPDtReOid97PWQlbC4k0cf/13+d9TywjyM ej1GHeg7Wjrkydeoh7zoGj1q3sWWYsWVhpP3t8lfac+pxkqnBgSO5WJHf5h+uGv2XJ+QMP9U xcSKwH3XpecPnWiTi++3u9B/u5DCchs9c4utL8K31VRUV9SiGLTXtvAc9glzR6X5eFJCii45 gdWwB2zJuorq2rrkbRoNGcgU4aeGYmQTcw71lhx4jY6/0d6gmtwJ6qEnQzWNJajHT6GfypCy Y9v2Xi1QLMCj85Yuz5Rl/MGQ9HJGF6/ZquNiNpcpY8QxkekXibItlbKtpUuSIxYuyQpWiNfO xJagkTS5+C5xUy+8lZ0iaXuJ6l9R79vYQPolKivC59ed11yTIfyPF8gV9Xf8mTUd6xflE6nI x6nHuU+xsXjRgqJ5M6QvF9CbikuKN0IuaNly/kiz7O2pUYNY4ewJw7zmHL6cocjfmL+pRCpm d+mnn0LyLKJ9FR/EZYYg1ioW/DeIAzqDuGzD5yDO4oP4pOrgrLV8EG+p23NI2mQI4nQuiCOJ X5FAcgUJBr7aQFAfjraPpKN1iTGx2xJ37dtWvbNAsSu5epFcrNNoKhPrdqLhTHKVBiKMNZk4 9R67ReS3PqQmQZ5YuWdJg2xv7Zq1WxS5LVhednqeThaYvrdZgTYjSSsrQQoR2T6AzkgqyE1Q jM5xWzR7jomn54J+rLWUHfcda4QUSPYYdUMkor5+yorcZqtDY+R5eOmfbR+QvKpmdVVheYEJ O+TTDnp44MM/8xVlq0u+2SA/Xt2054zs8Rn/YcMCvCYoxMuJ+60Xzt2Tng2/NHTewlRdvLxy IVaydWf5Ptnp6mhVQEjQqIkKLx9MjOYgK3p9+tqUJGnC4sUJMbFb1ybKSZq1HcqasXEKNrro BQtbkaE+T5AYJaCwcRDQjIJsQ7l3kLqNLNGlr0+ShcSHTy8CXez4hYlLSkxI2KbdASN3nLVl vRAAu42zUuSFkWgIgTbg1+4iLfsM+4izZXpblIcOYqwRDunhm/SktMS0hO556FsnnNwfe+Qy ptt3NLtRhjBk8RBNvpdwPahRcfhKeK3SG6uKDNkULGNFn8zo/EJMuy/76GHpqyO/IKN9O7LT tsl3htNF+HbVuqBFUlYwc+zwWM26Cp2cZM2+YQTr9N7CsjgGjWJz2InsKuw9lEqC8rot28vq IBFviSuL36q5zQpsf8HZ8agYjUZLsCH4lD4ZCRnajDjI5hm1mTVptZN/sxVXQnYlSHoYa4rd wRGFTDExjsQBxB7iW4i5tpfU9RCG2vJURF0vWra8MEfmMyd0epIiF6f25P2AjceLFxYG+klJ dm+16EHt9bdHDizJrJTXtGLl2jmbF8rYHhNHsdaKhClTb3xyhtOtN0bSI1XMNfzUO4xUMpA/ y3O2yY5v23uFy5/R+aT3HwQad0Pw5CWa81KIxtnonRHWymLVom93tn6/t2rlslL539Yv2z1E FZFzNvnLps5Lj1YpFobpvKdKkzuYJK9kyNcp7wYeYqeZrA9ds3CelHV9iSaJTq8/tuGQ/BhE sfDHuzsyb9suXD4jMmje/DlzR6azRia5eNYfoc8CLiw46743qNhE3GbzEm3ES4s2F22St2w6 evyKbNP6gvz1CvISc3UNQ86p9/ka2zfft3yGjHVn4TBh1f33OJz3VsxwxMDWLnRBARZ7OuXs PSnqeRf1QP1PHk6L2ytvmEMX4/v8Ns0Enf2RfVt/6ja58hE2Di8OKwydB2oEBSHj5tvPrh1R BpTJV2cVLsmUkqgnoU9NIfuIqFQ0xJgl8YKil8hsU/mG8k1VYO2ClPzkJKkYg9qXnoVmFYjY CexL8Fc0Af2CHRGJ6fqmhgfIRIpMQh9EnpAH4Ad994zvKbVbND7cVy7OFx1Mmrdvkowl+g9g nQsVbP83A5Dpw0sNZ2u5ajqXuIGfu6VmSH0qTQ4+qDtVWlpUvEG+5hqmyl9afkQqzk3MS8xX gfouJ8yp95Cxxr17wZ2h/9PBSPTg/NGLcMLgk9bs0xyRbdhcWPyNYu1VTF24uPqClDxJt47Q E0NE7O5P1pgfamRHP0GjRaNbaTYYzy/GqLdw+gZurdu6p2x399UFWF7MqthFUjEdB5WYZlvi jp2V1Tt2JFXFK8TlEAf9PqVij/BvUTro76iotKh09UZ5U2ljw0XZ07rp4xTsGZFn8ahNsfKn eM6hVc/OS1GzCH3d+9DUMf4LFyTK83FyFtE7B84MtjuE+i0cdUdeLABzx8mmovrdJ6W1y2uy K+Tk5bzd9WelO5ZX51TKyXYtWkwXrS8sLZU+CkW92QETvMM9F8FqV1ICG5xk873T40MUlb5Y RV3TlmOyn0pHJirIOUQbmKmq8UzZeenRiF1ku5xmr+FK9jpWXF23er8M2Zz3HlmocHKfPcpn TkVZvDxpKpayqznltgz1/PADop6QrPKS4Oo1IbJYTScmRM4PlPofiD1fs29tWYV8cSO2Misj N00Wl1y++8CBI6VbFeKPxB18GDKBPGnDHDccklygLV2eIcvMWL+epGuL1m0pk23evDRnq4JE OAQoEquYKzi5legFQ3Epk0xeA0/9K4XknHBnECSLugwivoxBM2x2PmWSDYdsnUI8i2nDDTp0 YAmsFT/TpmbOumI38eGIwEgV03KbGBxA/M5I7j9BPzyhgpADGkpANg1sQtMuScr+NfLINvrX KCXbqJX8XdJwfUejsnF3C9WGppCobNWHMcn6Gx9XpZCTsbunCLJyIUNO8Kk8cbRxR2vT6fQl FYqtF7HqqMASLxlLe071nL877NpixUoRefzScWK+LDBte9VKyOa1vzAaLrdXamG7u5gXqHc9 VBCkDfL47uYI/QBwxSOfHDFfdI71ELFqVEAXiZAjSijfSaKl1wU70SrhTnSeno5WXYegQtas CQTZcE61dG3xWlBiaYlBiXVPGTIueR9owg8lXRCJt8XHJcPtoQKUhLxs6iqq+OqGm4PqREFm V2zNMRSRV/L5AoYM3jj3zj6siH2Ck6eZO+AvL5g9KbUpJfLpr5nU8OVysfC+jZ5sYxv0P8Ep g7qdf/zk2gmf6Zvkq9NXZaRK4wtSVybJPTPn+MyUkbRPUX0QEjCBcIZvr4JK8QKxAI9fRp5A 5k2BZ9H6M4g4Jjly4V0L8j6F+lyA8lc/iyyCog3pPgWuyyjKWZ7ZPXl+6FSPApPMnMKi5Qpy 1tqD8x+gnsza98Q8NIRJkinjVX6FCvF+JjuFPIVGn3h6WlDVgobcEKIKsnB9WamsZOOK7Arw rqGrnqFL78CM95g6BSm59QplviI1lcn6r9vIgTTVmFPTuOyoDA38+BhZHMloiK1TzDnlsomM RSswtPwOuxpPQNEYOtT26Wucvfy3C0b2Yz0/3ry+KBmtuozE18nVI7GHeN6egqYjUv0TkeOn 1fTigqy8LDmZjF6dE2xFZcKtJOaK/5ZLiLMKsnKz5cGLw8K9ZAtUdad+QFjZ23wwnqI6bN7G ebLExfn5mYoaNAZDhbj4NBrR9PScAEXcFKJKEu42jS1obashg289mXabjM3+yJCsd851PdFC 0l6Fh2a+As33ySVIVug8bbDXUeWFRHke3FEnLQqY6yodRC5OjY7MyQgFpxx2nSFtnrfLJ+LU TbbXhC1TEXZZDYX+sFhY8ZfsmyHJ+iUpJH7tJuRgOlOfgE3BF39KwKjnTe2udJQ2gURfMcj+ pvftmAoJHJshr9DsV+QJDC5Bti/fIzPpW58fWbuJnhoVub+qdh/qzkRVx+8DW5j9dBMZ3Z5z ZkItlO+jUTp9lozlymxiKMSwjGr4vjncy9Vj/gClcu16LRi3qrZ+f+L2KOAYEcmtIN61cufS rfKx+MZFxYGBUvYPkbhNugeRXOENERqvSUmKj9+aVAusjLHTNmOQGUHmzaEvV00bS25DvRkS 8kaFjmzhNFaeMK8ECqEeEwzFAhuyVURG+6er43zyCm1X3yw88UCKQkQkPW3NQeUT2fNDDa1r FFPxRbnZ5OF1R6u3y8tKKzbskFVVLV1WqiBTsC0by7ZWQJG/kyDLF5chMRNJBhEa0j6Hu5CR vy96vPC0nLxyjyDXrMuUL14I964dy7fLTp+qukgOGc6as2Yv3D/cOLd3TwV3/i3GnjBkfl6K HK0RsXeNyROf/qX1knYnzB//JPnbCSO3lFfKKkpWE/R8NPyESJwSvkIubh9HT169d9Yr2YNT h5+sUZBwyzq1H/v97p0b30t/crtAHuhejOerC9RqKRsrEpeVyTZtMgQI7oUY0F3N9u3J1fGk cAxDIqLkfNp5CdmCfmtKaCFjV7Xpa9rIZP21PyGKMtAwgnwJBSlpws69wVpfHSW/ibv/Mot8 LntxgEt9JFKuakOjb31zB0W3eV2FMHhyeVWK5M9b1H7kQSJ6Hfp6zSk5+w9bRJPsvvb5yNTu J8mid2gqif1wyRkvR32x7y6NhvxTW7xuS6mslD8kaGTcCzuLT/odGzGUJpvR8kv7mgQ3HqL5 94UkFNK6iECIo5Q7BJndpv86hXyFsl+ROp00jERtNPXg9t59Ry9Kn5FokC2KxTfewdhDOHmL uU/qLXitWnJaZU1uBCWjluto0B0JyV2Ws+OlyalLdUmk4NB5ITIls7eVL6uUgSacW8na3B25 tQrqQ25tLqnYX6DbHiXj3JT0Ob/WthbZESYkcl+FhrC9khHeRGqSdPEJcP9RQIn3qj3QEcRz dndlbRQQbpXJ7YEpZPbt8GT9+Juk7GHDyTMQ7fqf2kgNkJFSHVftyIEThP4tZbL+31vLUsgR 0y4jUbHi65k0SW+8s/3jtkv+K2zJMnY5KGkLWo6RKdEhstDkPUdALRW7L8nLzyXjLt5kojQ8 IkUF3pJcUw1pWQHHKbc3DVkBhQ3JfS//SpDbbZHQh+vOMPIxyjXaLTAVpAged8voVtLtTLeP Qg9hlDBfWCQsFx4VHhNeE/5rPNVYaZxqXGi803i38T7jK8b/Yv2wKVg89hx7B2VpO94NJ3Fr 3B4fh0/D/fAgPAyPxmPxbLwQL8ZZES6SiGSi/qJg0UVRs+iW6KGo3cTaZKjJfJMYkyKTKlPK VGY61nSq6QrTStN9pvtND5o2mp43/d70T6IbYUzEEcnEUmIdsZ14TPxI/ER8IjEykcwj9WZu ZkFmB817mMvNE82fi1eK/7KgLcZbzLaIsEi2WGOx1mK7xXNLX0ul5TeWhy3vWGFWjlbTrQok /STxkhzJGkmN5JTkjKRF8lDyVvIX5UBNoaZR8ykNlUvlU43UQ+t51vOtF1uvtG6wvk/H0e00 ayOxsbYptlnzldFXw79a/tVbW3PbIbZRtpe7a7onSHFpd+lW6R3pXVm4LE22WnZK9qhH3x5+ PS70uNvjPSNkrJk+jBPjwkxhsplNTANzmXkmF8tHyj3l4fJ18lr5Mfkt+S8Q0oMUsxQ6RaXi vt0su0i7xXYb7Q7anbO7b/faDvXs3/Prnn49F/XM6VnT80TPuz1/7dW7l0evoF65vcp6lfd6 2Ltf71m9G/vgfTz7VPVp6PNj30F9i/q29hvfT93vQH/n/t79i/uv6a/v/9eA4oHdBuYNLBi4 f+CPg4YNGjNo4aCyQQcHPR2sGFwyuHTw3sEvhgwe4j4kaEj8kOIha4asG7JhyKYhTUP+HDpq qMfQyKE1Q48P/W5Y/2Ebhr0Zvnj4LyOCRuy2N7b/2n6s/Xj7ifar7J87THXwc2h2dHb0dYxz vOM00MnRKcgp12m9U53TCafLTo+c3jj94tTuLHK2cu7h3M/Z0Xmcs4ezn/MC50XOS5y/cd7q fMD5hPNF5xvOT5y/d/7o/MnF1IVyYVwGuTi7THSZ4xLhonVZ6rLKZb1Lucsul4MuJ1zOu7S6 3HN57vLe5Q+Xf0ZKRvYdOXbkrJExI5eMXD2yeuTPoxaMujHq/Wjj0YNHzx8dPXrr6Otf+3+9 aYxwzJwxLWNHjg0cu3HsjXGm48hxC8f9O956/MDxBeMLx9eObx7/YgI2QTZh8IRJE/wnRE1o mHBzwo8T/pnYZ6LPRPXEpRPXTKyceG+ifpJ4knzS0EnzJy2aVOhq4ergGuq60rXRtc31dzcz Nxe3WW46t+VutW51bmfcXrr97e7iPss9yT3X/b2Hi0eQh9oj2eONx6+TjSd3nzxo8qTJ8ydn T94yuXGK+5TJU+ZMiZmSM6V8yoMpP041n9pzqtPUw1PvTzOf5j0tcfqA6e7T/aeHTT83/ZUn 5inx7O853zPTc6/nU8+fvQRefb18vcK9Fnut8TrhddnrjtdrL73XXzOoGQNmBM1ImbFmxv4Z V2eKZ86fuWpm1cxjM2/O/MEb85Z7O3l7eM/2zveu8j7gfdX7qfc/PmIfmc9AHxcfd58Qn1gf jc8On4s+d3zu+nzva+c70NfBd7xvpe9O3/2+b3y/9/3Lr5+fg5+f3yy/NX6b/Xb5W/hb+Qf7 K/13+d/0/zTLetacWXtm47Onz26Y/WRO/Jxrcz3nhs69PvdNwKgAz4DygD8D9PPGzTsz73rg 8MCswPOBbfNHz18y/83834J8glYG1QRdCnqxAFswbYFywYoFWxZ8XDhtYdbC6oWHg7sF9w+O CC4MvhD8W0j3EFmIQ0hJyEGlSEkpeyjlygHKLaGWoSGhmtAtoa2hj8Ocw0aGTQvbF3Y0vG/4 qvD94Z9UQpWryl3lowpS6VTJqixVnqoqwjSCjHCPyI7YHPEgsm9kTmRjlFXUiqjf1CbqJep3 6n8WhS+KX/Qs2jV6XvTG6KropzHjY8JiNDEFMYUx62P2x5yOHR5rHxsZuy32ROwvca5xm+Oe a0ZpNsebx/eLXxN/OME4wTJBkqBI6JmwWUtq52qjtfnaE9p7WpRomTgm0S8xI7E0sS6xOfFN YrsO0/XXTdLN1a3QnU7Ck75OSkzalHQo6c/kkcleyeHJBcllyWdTBCkzUmJSqlKOp7SlvEvt njolNTH1UOq3qW9Sf02TpmnTqtNOpT1N+y3dJN0pPSQ9M319+pH05xmCjEEZqoyNGTcypZlT MxMzd2ayi5MWNy6+sfiHJZIlk5YsWlK15M8saZZTVmzWsqwtWVez2rMHZYdl52R/k70l+1EO nTMhR5VTmLMupzynZemQpSFLM5ZuW3pp6XfLui1jliUsK1t2ZtnL5RbLZctHLw9Znre8avnh 5X+tMFkxZIX7itQVK1bUrbix4taKOyt7rFy9ct3KjStLVpau3LXy31xhbnwemWeeZ5lH5UXm NY5adVL//qQAPvucFK4y1ue1+3zKw1Exe5Fmx6N1GHqLs3bsGRpxg09rRZ/whYY+Gs/CGNef prkey43En0Ri9o9sZKm/mCI5j4j+T6ibaCCaQ2/W67DB+OZPOqh997JKuh7K2Xrd9ki1NiHS UNOK2QK9L1ouuPSv0eRso4e3hKfaJ9FoAHPFZgucxWcMZ7HYGYr3gEuo7yXknyLYrx8rRD5o Hb0VKp3f8FS2L8Yq2HX0dhQAwwQ2AGvGoY9wpgb5Yz4w44/1xrm+r6E/xOeFgWiEzxPD22KP 0hv6zFbJ3RcXr/pfuf6S+h3tdaZ/E33ccu7uQ+nruaf7HJY71UdsPy09VHfswbWGpKxKeU0L Rr2P2xJa5l1k8n5GP9HwTB+vUVKnqwt+DZPfjT2oniX1mx/q7j93a3WkPHEqRv2+T9ucdrHA pJ9IjFQNBFWfjbzbByI5w361nWhjnBNm+M6Kufq0SPGk7vo5OZWV/R2jn6Lvb6hxvlLA66xN 4a3pj2VP79xAjAKeI0ufWyPkbQz3jKOeHX31aSFH+GQnLCDelt2iTm7HmiW7ni17hEY+oGL0 P9uEHYk6EHng5KW6Z+V/mIzBl7gkT48JCjnhedevxaRY9OeZhvO3pS+nnx/JGvuMHD2/MnBf MHf7aRivnOU1XNrvviP66u71qrMX5ZRuu6Y8dWuqCdXA5p+jv/a79OD2qSP1VYp7zvdGHwo2 iYoOTPCVUXu26lvpc1ULQv2CI6eEK+Lqk/afkJ6uO3ZeLv5k1j4pRbAXDRK+bR9FZ7sl9E7i yr4dXNknZk+z5u3nBdfuCtHc9um018iprHUBOw8ZMcgaTZaiaWeQTdtP8s/voX5twlesOX3t eSuiUIAUzZuKrD2fyKfgdwacZa3ZKVJ26izWxn0AUIxFr9BHwU6EhGgbuNlM1g7Lx2cgxcyo d6wYyxex/bdiU0RowFboD2HFFyKvo55qppm1u1o/GJlhRSI0OA27IWIHp0D/B2SFiUtQTrMA bb0mRFv1dTSbxSZ7o2Q25xrKQcnNbDLKEoGwrAUqEpQhB+FD1pTecfwoElY9H5hjm+0ab5fk AwLXbWI+mWUjieA0IoVImE23MuxyTkMF6BdhSxiN9rSr4QbJ7v5bjYnnEh5Q3F5/AlcClP0c 7gTZ5xkPuGFsahMg/SuhPsSmjW0sEp2+wiyU75iB1exs2nlJ9n73zGmKgoETR7Jfsw6Tp9rO Fok9sm+j9S0o/LYEvXw97Tvq7eE9dPLua7o2GRrx+LvfvpvePKbM8AeLR3WHLrRKH/reZ609 pmm1annVFiLKjcVkM31ryuCSCdtBHjfRneeC0tdI/VSo77ORKdtR8Z7hOBy4gUbeFaD210K9 RyajPB/QCNM30MUWNOK+YO9LVAUPnKYxnEh32wQX9MOEF9rltCu6DcbY9+kO9h0aTHzNeIwn OAVZoVRk1aEk9AN9lWH/ML7KgIIR2ELQjAjht58VXP18UKeCf9WrDHlnP593Ivi8U7JKXydo aRO2oGW0Ppxdht0UfZJBCikS6bkGRtwkGLhnM+rRLDikLxHqz6A3dPOnEm+RvoQN4Hv8OvqQ W0J9LTpOfwpHS7HJIr0cEku+6BPXwIibFLMeIIE+944EkYgc+K/RTO6rM6dsozfUA6RB/nTB 9rxTZUePnu5+4sKBphvS+3Nvs6I5fhmJi+TVXtjWmkOb6mVXC3arA6QLteEL58jneaf5fDO7 KMGWerufXUhz3xN8vurzAqJhvWsZtM6ZGUYgc4J60Iuh3vZlxIOZZ4Sg/nvhAEL8dMUt/ZGb swnxOEJw/6WwDzwEW168g3Rtgvt/MugiWneHXYd0qK6N/RcXl3J0erPnwr6E+Ca8ePM+2pcy kxCz7xFJCCugo86+q0cp/oQ4FGZ8GfEHbt0qRjyIuLcK4cMKGSrGkaC2jGb+dsHFYYyg/q3e 7XuhHSF2ZDpH7X0TaL8NrmVTt5isFiHjg4/A1pOkaD5Lol6sJzudtYVsH8PGIoYlkNMKecnm lSs3K76Nfx3/XaIJexg50myPsYhGvTv+FN8D9Zeh3reASMYOG8dKWIVCvPA4AxtDKwYx4mcM 99fe2NfCIQR3zOjf340nxCsYwb1X6O4rYR9CrF31ZnIsIVmtP0vFozYbtKLdBRuGszj7AqP2 xzpqXFLHmeTjaQ+1T+K+64We2w7FUfzfLph4NSMpbb9GBaCdNj+i3zAqquZlacumVpMifP2U zdMqnZ+zv9l+hyN/WM4Bd2DfYlRJ8sjUiYsnwWo5t9MepT4ajX6wHYHbs291Tsljsqd2z8ez rqc9S3k2Br2zHY6jCRwXB0b5nEDJr4T9GfFvjGCnPtuD4DKj8bl2t3OCJzeEqJw1ps+xonY3 JDrHev59AA7qlVxuKUJvIYjCaLbGkFxQDZdceEr3cwIkvSHc2u5Kz0Kiv93RIKIE+eqVrm2S Zn08Vanfg3xpKoQN0yuxGTgb9knJffs+Rm+rZtCYT7aYeBRrBXWFPk840XiePu+kqCPh70MD hRACc+HCXfuxkrtwxy8IYY10I03EI4hsgsrsyVBNQxgq0w3a3oR4cfYtVbJ+3C0U/fkvvJmo rw3VtPoRVox71p+PvyVDRkjwAk1SoP6FLr+wZrJx/lGzYxT56ILTpyc4lRmSH5i/SP4d2ktv Lt5UtEHeWn6+oVn27uSoQQqqiRXOmjjcM+Dw5XR5/ob8jRul4iZCcOD1QEaciuwYjumB16ju FdWk798eSLOHY2BnDbCzdEI8CV58hjY+F9oxYvZoJVIQgief//Rl2sqabhfd3dpyr6Z85YoS +aYb2Nr0+LUxstDgJdGLFKHhmTOmSHUdf/dKITgmNS+px3r7OIZ6P5CgHk8mqPcRjHg/twVB GzJnhMmEeDLjTSBTYgkhRgpG0PZKiBhGjFaDx465w/0B/AWKfYFiXlCPfQiqKfdb7o98hr9O iXcx9RD8bTaDCaoxnBGHcSKi42+EPQmxO5Nyl7il78b9BZ0X9b2+PxtIv9Ifw6nHJwsPFzXI R+HU+zxXOCaPJ87bP1HWlzUdw05j+38/EGHfnj1wYruiCEdi4yV56blZ8pkpgVF+skELnv2I BOcefNdyfMHsEkVxduHiLKl4DwEmXESITzKCM8+Q9LmwH/jpmpw7CLUK3r4QvtW/n8qII5l6 hmrUa+MYx94MlepEiPuuejV1ISMp0S+k4kviGOT1KRV7hiM/fSo2HB/K1kAMZgQvDssOM8nD cw4tOZRxdAiqsRXvZSTl7f7U/kSGujmAEfszrPFKRrBeP1+4Xp/aixD/SgjK9cxY0KCE2HE/ ++acVurDDlRKU69vbwiJic+NR18R/a5EPpVXnkvD/XW7zlcXV62uUVCvV1cX19RKC69p9i7c aFIkaty0Y3fBNZPavOrcGjn1Nrc6r7pKehYNYsKHa1bHr9ZwFJrVGo00KifcHQqQ92zxX5mC F63CF+1L6X8yW//KFHFb+PPGnJtZD6jXaD1qoakP7jkH9+1YDf8pqLfQ1O6Qfj/zoIs8ZVY5 frGgMmY26sNocxPjpZ47oo9myfNFwdkatac0frV2dSJsoli7Wpco9U+M9S+Qp8+qxJ9crf+A bJnaWumuDUduy+FEC2utbJE0XdJbNkNKM0IRdHPRtpp6Wf3+ZN1xBfUh+mZ91iHZlYsHkfFK hTc+qyA9LlIWEVFeHaCg4ndPjS5RyibPDui/Gmr3P1iPawQb2MwYivmO4j4KaoKXrejPVkHr K4RdEaKni+kPoqaiw2UVGzOu2mYnRi2eJXOcch0Jf7r86OeTe5dkVSgqWrFNutCShbKfZvQX seKUsQNZWuq6zXevSl4f3qi7towrnaHMQdqrKBNKlj5P/B9Sb/XRUOycKhLtrauu33hkfX3+ gbwDJqjHVZz6wPbBV+xesfuI9Pbus98ersvJKZdXtGAlyZGb5spY4dfjWSL8m/A1sYphXjj1 9iO+OqEwJVE6MWjaVLV8nkgcxxVZyO3knZPofIoAqZ4KUaMNckMjTrIj7nCfNiI0BZ0HH2SN 2JB09ZKYHE33PDxrZ1Ztxt7eKJQ7Bcay5zHWZh4a7sYOh0/WDRd7jLyB/ryK/G9KNkLJUfqc +gCH23f097iOnYf1zdLNmiFLTitel67I8MKWbtmxfI8MmTa8QnSZohopMWQNgr1lzfBvTmN3 1+28fkNWsSV3Rami7NridYnfxBZ2Z2XBrGhAlmLFAmwALvaccbHd9KLk0u2ob9H0hwvawL1s 0G/0zs01u6vku1NPpR/KNLmuq45WSWOWaLRpcl1pWGlAucnYuvid9VLUgE7TW9XzN/vLqAd9 Rs92VBSqy9QVGSbU2znqlIUqqfPtiI9R8rfRddog6Zz5cZ4+gdVbEuWJfpjmwMXFl2Vv3zf+ 3pC8J32zgmo7tKvmwGnpG/cDw3fKJ9bM23pa2thYd+nsoYyM7XKxB0iF9lwVXL+Ncm4L0Xr9 LjpYmaHVKCbfD15wzx1L1qSFzJUGbllYkSB3cz8S3HoX09Yey2yQHTq+uW6n4sb4xqMT72Ll NVuOnJOeyDicWiv/9nbwMfeJWLUmtCxIVuBFP2iYMrmPV5h/wNTD779tvHpXIf6k4K6cUEDz l04qhLtzUpVw6xSzaXo/tAyuJqcMJxXqz2g6jii0bAOM4hcEs0ZJcGCxo27ojQV1eqEQZeqn +jDoFPLyAfrHhmkU3DHdMVGFQoTIHq05T3h3HBZffiox55PzS31qALOAGYV0zXCEewl3ov20 t96rWSQepe/3r9FErlK8kW0EnqiGW5Gq3YVex0ayrmsxNxFyXbfsUxD2BF+mD0Kuy7A7ItZ1 +ToUCYfwv0abOEID9YWOHpqXIvnXqC3b6N6//zZmG90AD4yA5b5hF7CT1sFy1Fs0aS3Ghog6 hh/QxLUrWSX2GF+OlGjSclgfXHDSMgyFiDqGH2C4Fi3AuDo8CC4xR6E+/4iCFhPuevayAKVf vQ0p4Fgg3T7k9t9DrrSHiL7RhhfPkbEaf9a0D2uNunk+VKxlW3AxexZUpBLUowgh6ons6UvH jl26GHTM13f+Ap9Chc/xhRe5myNUfXmCSqgk7rNCmrsxjsixzXGP753M3aRSDE8rwHrc09pj R//c9sweLgLu3A3TBIWs/UzRMQP2/lfQxOnmQ7YROMRedJIK4e6kVGW2G6yJpMzFpfwFFbod Rq/ijA7GTGbQSdYrmRHrnbnLG2RSAkVDcb+Iu6CMyebuHPXcnSMqMSFCEVlQE79Phl7Y1FfX 1qPuzJeJVkZ/q4G4cAuNvUVVPNcjfY+Oa3/XO7/hvq/48k1BocJw0dcLz3S+vJ3In0Nf3jZt rLN2hk/HtwncO3/XontIzlD9jNivDAs+479EqHiOLL07vkToZ9T5FYQcHvDfQkw3+g5E9mBD 2/Qr7hP6xTQIEhlVpamvr9ph+BIHjqcwNoQuTCgOyFCGzOke6K+aP+VbIjtK5hmz91Rj9f7G s4qTzVsvrDibt91WrD+Oegu2IS/htvZpSxmnAMIw8QHNECLf9mlOjGFYg1YLEdk+zYW4gQ+G V25fTLkkqT2Bhhyn4u/pr00hqP0uDBU/k2kh9OfOCbajQuH29vGjGH3rR8HrX4TITt+qJfSt vwrW/vLiZ+FFfeswRr93PxIeEDSc+tAkRL30e/MINqjx99MCNKZZiHoU0UGjjufuzCpM6J6Y vCwpLWXNhs7fddbIzjVtu3Rg0faINYo9pzEx3P8YcG9wZ4v2aYUE6oYYTLyY33gVWitEnvrj SmLKWwKimovkvybykfzXRIhk1I2RFLTnUw2vbai2xwTVcJChru8ixBMJO7i9/5QiePRSqJ8P 51kDWi9C0h/hBspKB2FopxP7RjRyJjZF9OwKxlbBQn0ZSf1r/fTX1J4zcJn6OeaV/2X5FbiN xIQy1B4khArxWvZt7za0sg2p27xvS+rfog+vqOT2n9pothGtRJvb2M2GH9qz9/C05OJirYLa V6TVFEfJ2DmsnP2K1bKzEcEOQqrd24uLoOpJLq7eVlwhQz/hnyzbaGrfsqTwlREy1mEYMkaj 4Jo1uuB7hKHBshO7VyzdrhCrCGRESOpfotDHaOVzSpPGUMFLCUqD+jFUxVGG0rwjxJEEV8NO hRrwHZSw6SkoL0XwAIra0TYIiW5fxm6J3Gdi6IAj+7toig9coW9cxNgGkVid3aJM1k9rkRx4 js69oBqRJUGljt3heTxYrvTGqEY/qOj2ZLdMu4nGXUWKFq6qPfgErXpOnWq/jlIMP/vZIn0R inqywydODx8fKc/H78a6Hx4tY236DmDt2aE/DULW9+7Xf1uvKMbHHrgZ9Ux25vrGbQcV1JIM 7p9PRCzxlg2fcgl1K1CwOrSQ/uXwkOEK6hQr9JvgMtL78e9yasnTA7//IUc6VkFfXrP/0UvZ j1VOswsU4qjsG0HJu5Pb7W5K2l4hycuNz+a9pMYjZxt9kAj1OnL2wZXDYZPTcxevzJJT5X6a 6OAAqX99xOEwef2ico1SukCt8ozVrC1JkFMLMqZiVHlm3aEV+2VIeOP6uzuhh8MOKWJ2p1Tu le6t3dG4VU6N31i2adc+KRKMah4yc366WiUPDov3ZHHppwCReCPc5r5vFuizrwkP6XvDQRPA xl1Du0RiN6JeP6gF2TdG1kuQ6VmEHace7ITTYeFLNuUsSnnZKEIf2Bo6GdVg4/AgVroiZYVu ubZ7Ab58x8qKFZVBqLvt13gKFOWncapxA3LCCmsKt9dIi/FvEtdFr0luYofbnseb0OB1Net2 r63uXowXxq1KKEzewDrZiicQyH3VuYXJ6FRy23kUdHlVSk2KBOG39L53qUPZyAttpanD2Xrp DBGVlj2sgrnM7qSpxOzPf3+2+NsJ4967u/EWc+/GxbP3pGdVl4b8f3+CWrKqGW3o/PLuJs3O 5b+8C7oGx5jhy7u53G+L1oOCSiB+50JBOPgWKrmJLFME91+glS+F921eoBF4XmVt/g4Z6vfn bdTrdMqxqD2K+lDfrWNlkYvyVsYrkK2z6AW7gF5dtnv1Idn3V8KdRvvMZY0SEgrX6BRiJGOQ LLn1SqfA1rf0vVuptDMokBM4/YxeOlNEZZ4ZWsG0cgLDAwlDbT6jr9rIDT42N3mj3EloAAFz fUTc4yHGrHUh/iOy2li2vrykEvUgSuqR8E3zGyQUoPw/hOiU/quHBNrIDuK/v4Legofcdzis e/t3hpsJcqXZj63oo2iqPq+jJ2bL9aOPo/HHBXVwRp8VIhcomCZ5+44vVHic8fn25vUzj2/M uzJaXhBEX9gWFBGojlgYrK4/dmR742mFuONX2obLLHeJF7bBbfofO+532qL5u85yv9Puhro9 QR5okP1PLF6gGDsnas4iuMOfxz+5Gpet2bpms/xS5Zn952VvzowezJr4ujr5Buw9l6pYUZK7 ZbPUoEPB6Yor544h7LQELbrj14YutVDJZ1r0j2gqZeKGst1l9bJj5drEoNkZEQUKzYIdODw9 fSZlXqEiJiFyhuHfXMi5n2tXHVnSJPv1nOHfXMw2/JuLlInHP/+jC6dAZUaGTo48/7amOSts PKPPBSssOfPxctNMlOvKWWEjZ4UlvBXwgsL3BjNsKdkGZggh2FEI7UPC2qbaE3sEDYevHrjQ cPawEHnp8+lyvHLDsrRixZrU4sw1K0wa8Nxv8jasrFm5bemmjG/gnlnxzebN5dKy5SVL18rX Zi1eEyOLT87Py1Swow6ICpEdXbh6beEGWfXGnMz09OXJijS8BuqnoRNdRwy75/ruh7a2t9+5 tg1RLDJuO+Pj6jbH123S7Ittd85ealPwX2BzX24eQic7PF2Z3aLHmlF2CvdNwf43QlRxjv7a 59Gvjw79+dupPUnabYqamPVhXlK2m/84Rzk7WB9Ao14toLKQuvnd8/OwelXkWjgeRGy3EZBS B/80GH2FTBD5LZpZoLibeS3+vDyuOfjsrMY/TtomH2WtZ4bsmrdj/rbuqln70/an7EzqzprM 4qJTX8XvS59Mo0WshgUcDYbiSsONjh5lo6EHCD7KGp4iDSb2YN7tbHhyBO098rJBUH/y5Wl9 t5NC9La9B82OZ6Vwto1nJyJo0Xg0DtkiOZqIxrPQsuMUocZQc3ZjCXYgO4TtxpqyPdk+bDdk igaiIeCfBOqjAEqc3rRkYelcWT97Nxbv1zoGmRw+tq5qnyLrAJapU2WHyYYHXv320bHmd8f3 ZywvUYiHEedhCXOCetyLod73ZXz1R2cz3CTeZZK10Tcsg9nrHyRo7E+v3lNPYf5nmPfVe9I7 nzJJSRqN4XeIM22WM9Dnfn8IK18ApXZZJF9/9CPR8dPGYUTj/j8gh4ef+vE0dR9e+L4vM1D/ Az1DFTpPQT2bfyis+WLDwZNy6vuTEYdmyP8fZe8BFkWy9Q/L4vSwfXdnXXqb1ZntGXOOK2Ja c86YFQxIEEXJOToGkIwiIgKSk6KAiIiAoCgiQZKYA8oYcM27rqfnFnvvV9UzoLv33uf9/o8+ Ol2p61Sdc6pO9e+cCrZmsxKc7XCOnYeznZ1HehrOyTqWflyOW6qHvjQsKYbR5ztbQjP5eSDm mPvKpGN7k6dzzO1oN+8ol0I6DJmXwqAWEzf+3y36uS/AvZq5w6c/Z722rVbiDf+E4X/ARJjz 8T38fLl4l/dJRVIzNvrXHBsvQ1aoH/5jTQ7lNsM/kB5M8JBvmSpAiBylru57XNzd2/A29UGB TcbWSHnqmdbQa7En4npJptC58LXm7Bp9xx9azZEESpuwiT/A9keU6IYpTi5+r3+7zeS16g3T 3p9jPqFYfsgMnJwHetrSV/lDfpw9mS+SkEjvhxE7afJMaZ6nwNC9nAlOuaKpkkgjYxjhx4UL I3T7YXkxjDp/9iGzZroAkmW2Th9LM0emC2fdsEC9WckxJhcFABQesbXTY2gLLhP09IVDb+ZO b5rh8zE7fyUkU18mb4Ptq7iblIDrteBy3+vktt/EdNwkB+cjP83g/qMdNBB2xODk07hfue3P Sb9evGAe9qan/IY78a6zDw+PuHkfcpVtdjRfGqaQtAqvFY7CmTvDcSvgwf/OftjNzaYWzxEF UYuaRDOoj/vJ2TgZos7jcdhMhomkUZ/TesJQdsB+utmU8+fq3+vfUiVhro5XMb/1p5l/NRWz WYkpmZluyQ72rjmcwNQalx8FbpsMbmc7iWR4t2yky3Ca5oj7pboajxBOqsKiIn+9R3X4NdM+ iGM+Wqo3BXK/c2TuhSNwKFQPYn8jnV80l3S+sZAbTVdAPyXN+PXhmLLhHOM3C//fj17DrzD8 X3mYpVawI0Jw9q0P+jkqJ2xSrHrM+CjJMbWSnFMryUG1sh/NlHRD8+D2yP/ZkC+/QjB5RtNn iTGCG4vD5siux4zfdFJyOik6nZSdjhsrV46FwkBc9h4xfnJUe7H5c97mMeNFyhaTsl6kbDEp e3Y6mggt2CwqVp4mT0s59JMghU0b3fhZTWQDPOQa80DwP3Xe/v/D/5SIoPTecPjOBwtgccDx 3aEOvZzd92EBjIjykftsEikTMv1TZJcupFQRedyeZh0pTztTFXo+Lim6l2QGob/raHwaP9iQ +2sSGswPZoeH4FQ8pKdbw/GQ2j5mXvYmImkGp0b+vXgQLk6g7TXU2HW0Nf0E5wl2w0NiMX7x HNNlMjrTUzhXgtx2xgz1RYlBxOrEjZzg4Csyri0qf2JWBqiYFqVwOl6gtOSYGiUYgA0ez5vd jMjTUs5C0yHtmflJiDf8W5INxGtfbSEQ9TQCE3XgGdPch2Zej4A+I/9WHv0I8QIzWGgm+PTT VNKRlGdMNa7xcCrI8etf4bc/XMpdIODergNzmMmbCfaltQCDx7zXeVTuY0ijMXwlHpL/luPH VxI2tub++KDfpHIhY65izneWcMUliviFn91lFUwxLDEgHrP/tbXnuLWuKSHn6mSIu47WYT5Y GQrH7X980PmdGOFC8oUnf3HHPZ4geAs62JnTH+jruL5wGg/+/H6Bvmn0rVi3jFBiznYPehDw WB4eempm0dTi6b3ADr3fN9vCarJ3r2PzRPBDQt0t6CdV95iIcsQTOYrZ8KeRWHITb9Urbn2o XA5r9e+2wT0V81rdg3dmK1eImQfAjRUzrxGH7gkPhsLDiuVXOpzboALuoQoV7yweO4BF9z7A PUqAnrRUgtNNHTBT6fIB/Gv2Zgfecm/BVnKP5dADYWuuBXpUoh7gJJb051GTPlxQWb9gkmqQ mAWvDBgMEhgp/TTl+sDD8nAxc7HhREXlLWnbjCqkM2+2g/sO+TFjUUxaZcolWd1561W/jF2K RI6KI0tE0afyI5NkTNLL0IvGM6R4Z8KNQ4bOcuHj1JWKVfCz9ptNDl/Hl7JMYcVUMZPzGyau sD9aj3+ugvXox50cY/clwH6aeCz6oAXYMzledNfnIRWco/7TA8dDPNJi3S/e8vg5ok+xjxox HeD1Vx8c4aNSnqZDxDGD98SLH0zud2ahzc7dPo5yBx9XV18nvSDoD6sp5nUFWo2HnfTydX/c 3wer7nSUqqBIHB8ac+CIvCSu6MwV/OoF+NXYHkXUQQ7bDLpgaMcZdngcIL3Vr2hYD99yTMtl /iQbd6Qst16a45nhdVi+yEsU73vU1UVq5e7k5SFn6io6qlks1idx/4QPTUsvgVj41lRHI/H8 1fXD/0/XyRdvLg0BMe7HaGTspv6uUR8SHps/YxrPISsWfBPgO7y3M5CqFl8dJczs45q0wtLr 0tb5lwYuXOrkvFV+bLkoJrU0rUxWe2bH2plTLHo7KWIWiw5lnIzMlDGNT/PXG6NRaLetVaBC kq68ucWWJj75hW1MEXG/ZTz+NGpTG4mhsMOYZYpQz43bpto6Hoz0lPvNFu1JzicfB/TaKmCe gl9rKJaE/EHD6KZlzcSdYLMKz4MZOVvW03yLTLx+Mz0+wP+oPJp8i3SM3CGz0H6L9CbfItHm JDwftxOuNiYm+PvHyI/ViQ75OEbZy1ZbeNnbK6ysvI3nSb2FL5ZtuNHNglegT9I1jmlQr1bP ZZnbd/DG8D5+TK0TMS8O0h3jVLwHykkVM7fhBxrb1FaNpm7ghSs4X9TUcL2Iq3hevE9SSKXz Fw9izSI+SkfN7VlcG5efryg8F3vtpZRfJDTjepG044NpHNO4okHprnWaWNPGNMAH9XyWeRHp YxO9Q7Zqk6ftTsUWc98li6W7ujpsRvoj+CRSpEt3T9Q/z0kO2BvX6ZW4de2RlbJ56712bFVs snAmXonILFHMvDh3qEBwVEg6nCVLSvLfc0wh+d/H90u1ROJ8fSGf8dMWwHQxZUhvt5WzvdzN ZbvSPJAQWReXf7qLSHL630fbwCauyx8YBpJ/GS/lfBpvNv6HZ/CDf+m5kvX/L2/QY7y7wSz1 ZdYGV7BLcjqZk5iWhYvvUEgW0XOUN2B5adUFWNikX9828SnD884vWT+Xje5rZMzH1esT8rcq HI67F+6t1IPcUgrvKAupyJADB6VHQ2NDY+RQcAFlU4cvJhYdz9LLPXUu4ZKs6KyfT5oi8boo 1n5jvLFs4kLbNesUFua2y3fN0Vuw/ioV7Bvs4x0QEhAgXWFSTUXNSlt+eove8gs3dj6QXS9P SjpB7JnTeY9yjz3RB8fitmLmoRLq8Lxeyj157pxNzsrl263NzHK2X1YE57GOXseSU2ITMzLj PVycvLwdFMxtZQU4s33Gie5Q0O+JaOWfHv9XXBLmmXIAJwE/ZSJUJcDVRJ0c4Hg7+ElXnQKN bHhIeLgUlqLJMBSZ4z+/oKFoKVoK+H8wh2+gW/m9Bvkqat7ycWbDZGMmnr62QhFwcH/kISks EoeHhYbL+e2pbGBQUKC8w5IKDAoLV8B8cVTEoYMH5VWV908/k6nub11eqTjoH7Fvj1RiSSPH JDd+xB2C6JrXyuRBnAHvNVPMNKIJ0+MWgqxGFNYxgpIgWUgTfGrWwcuLLj/BoAktFDvtCA50 fsUNmLxgm8M2ecoKUVpOaUq5rPr8zoWTZ8xHwwYrTLeLTLECGwoMDdmqpc8Yl/hhLFOwO6V8 d7kMZPB1OT1gwWJnt53CKpRaklwmqzvjsHrJHOuR+xQeQWGLRKFHEkNTrnOToBcNNQ+xQefu yKG+wHBw/SnjkXuamxB0HHpwa9EZ+OrQvV35lr0SPI68ohcr6yGzBgbV6RSr4FCbLj+b/41F +/zQgCp6wNy1W62d7tBrGh+cPJSahhnnWF5KkayldN3E4Us2GCskaNQINz6lRSee76nLD7Hj OnrOhLIszLc1/N4q/QLVosdg+3D+M+YpvILvuBn1SHSRa5sL+rVc+Y7FK82sV++lF8MgulAF kW26D5EeC/5R2JDvD3ZSGDGiDa+lEhXngOiBIKNXFr54WVt0remq8Rgnf9c9foptHqa262QS 2LXvIvx88SH5RyeDfJ2BwY0wpZEc2LzTIje/+OCyemftQ+1HmXsdV1n4Xd1NtIpCH//sJuLn 4U3suFkz0Y+hCmTQvPDB5y86cs0XHQG9qXgYmlVXIZOspdHhLoTfMILwG3YZ7+q1EL96PPlG Bi3oXJi4rJrbrIH4lRyvkr0+sXTBkGkCwE8xd75oNZ71Xp8hfuUCxC+yC+I36uGXEL97WQVa iB87dz6B+KXG09azUHfZkuVpcc4KyeQuiF+0BuLXO5qLzUx6jY3uzxi/R091+aE+nNnl9UXc vC6MX64G42e0gEPTNCC/UH6kbmgXyO9Uxw3RMwHkt2AqvYi2pNfgUqNvEtpPYdr5rzplYcfI 2IWwtBXLwmhKskYrCi/waJhjUVggdtwZHOj0ihs4aeE2B2t5KhaFUxdSymQ1RRpRGDpYYSKI whoiCXfaiCRUC5KQfFEjCXrl9MAFi7okoRRLQm2BIAkjOiUhJjE0+Tq3hkjCHSIJ/o74AQsC YEG4e5qbGJSFBWEdFgQdjSAkekS/otd0CcLlp4Qd+SVEEPb6oYFV9MA567ZaO96h12JBiBQE ISE35bzsBhGEpRuWKSRrNHJQz/+oy5tgOfhxJlzIwk0KclBC5GDnI0EOfsNyML0edb/IPZkL TC1XJsjBmr30GiwHF9qIBD4lcrAvCoZ+loN/oG9VnD2iB2E5WIHloK5LDnYTOdhA5GBNcC10 VOu/V5VeWXfl4jPmI5RMYh+KXx29eK1GWrexcFC2fFyWy7Fcad7Z1EslRd6+KfLUKhHz2uno prjVYXqPVowTG+1evn6BdN6Fbb9tkzc7Z7lbSDebOiw3XRGXaCd3Xipi3p9yrfK+FKw3GU+P I56Kk/CDzoPW1xW6/CBg2T1u25UbZNOXljxvvXylteDkPmWiIq5KFOVuFW0hu75qnhh18545 CXWTIqplNnTbJZ9ZcUN8Liw/Jj5KT7IGM+K3pVdLQP+6/mkYNvQx85Hf+ojd5WLuayJbb3E0 x1rhecw3bV+WHoSXohgq+EhIVJQ0MjQ6NFoOR0rI2hdGHTgRl5GYqHcq59zRc7KSk7t2pSgS q0UxjlaxxrK5c53XrVMwH21tXc2VG/UWmV6hgvyCd+2W+ofuC1XKV5rUUFEbkrcct9UzLalz vS67dvFYbAqeWPR1PTyuBJNG/RO8OYr7d7dVym7Me/gBctgXlDuauau/8+qlwb3cQj3DvQ55 L+65J06Ag9DBBU9jgU2GhT3hh0oCB/mWiryqhYMkxQUExCria0WRvk6HbGVIGroJ6e0a7L+m 52AiMs0wrAKW4V3soEfL7jPveWeDZvIxvyiMyk1NPxNarnc4+EgwJlteQfAzQ6j9CYFJSdI7 uaUtZ7J3K4/JE+pEMa5bj6yXIfHUX5DYPcItwk0xbhXuxGsq3CfUx0e6xnzjAnuCn1kD4tKq Uh1weqgLVwxADCNL0cgq8i8jBkMIEBFc43Bvex8HpVOvQGp3ql+q93EjGElwM0NRgAj9YAIj lqER+F8kxn2HyQT9r3OJQP+3gJsA/f+N8iTQfxnyxMMxVfQ75YKmiqqoFJgKFJcEE0XGlCua KOpHJXf9/hL674pLS1AIv/AClJ+lsf37pvQ+ttQk626PGrNiKuqBvq+YoVKEXmA32VW8aj9e UXQhbdXI4Y4r1ysk0bQZPYdDSn4ZDF9/gXjCw5Z65gCk8ctYxuHD5QsrYd8vYjQHhYnMYbmY OTBAzDhog0CEtsG3R44djj+S2issWBTsEeTqKpWgTH5hOYwqfXRZ662svsmiTZQjWiUKi00I S5E9yLbZaGpmv8lq+5EoL4XvepEysWBXoay95sqdUqdTO+MVcY42B21kfrtDgvcqYlpFMArv FyIIbZNKHl7scuxW32V3+wYHeytW+m/03L5dz9zKYdkM6ZCKue33K6tv315/YdYWG3dXD3kw dbiqqPx+tF7Y0djgaNlQVMqusS+6FBUWGX5QkRaTkXhCVpxlY2JqZ70FL9ZnecuznPqmDYcO 8QuL4WpxGK2+R8J8Ld6eaHPWozPMl42pdLUmzFfDX8N8nfprmK8TOadSM85GK4p3Zbtvlm7r DPN1lS08ZmdvgxX0bhLmKzFHmiWE+UJR/MJLbSVgWKaTUg8DG3Qr8VxGBx8LiQ8viyiOP3lC 70xeVtUj6av1TWMmLF80fc6F9c35x2NTk+ShwfssPG0dXXu5eNgqdwZ6B/mEKEP1foNS9mLy xhV7gv0DAxRufk7eNrLNDifPlh7PLVBIOtbxC4El7JIRn5Ce7pXg6Ojh4eh4zCOd5P1bx1XZ LZvmv2GTczNq4y7P8O+5z8R7ifdmPQlK4H8CHcgI5/iftIHISqQVO0/MT9MEIovpCkS2TxuI 7HBnILI91hbrpKvzHa47yYu9krzsPgcii44jgchSfE4rTwf3Wo5X/CR+HnwFqz/p5NZfOa8L 5vw89qo4MzQtKiZSWdzT38dt307ZevNT1ZdzCy4fT9i3L0YRc0EU6e0S6SS7snG5eIrfxmXT pFtitic5y5OdM33P+OsZiyUdP/Fv39FqeTvXMYj/gfcAllPzrLWJ+RSkJ0V6BdNyTeRllOVV m9t/SD9l3ztzRS7RFNR5fFm3lv+Bzb1QcAfEUvj6cyiTKX2kfWymWhrj+QtBw8ug7CyNhi+n 0QukD7ocGsQKHz4bRyRi4z0NDaqAPCwaG2/qHsFZCzl0Ag0vB24XDVPHYDlEg8I4JgtwOTaK ZrK2cSgTDT/Pwf5JNIpAw7M5CBlDo7NI/yxOI2yKhhdD1fkwGkJHcCgKDTtDo2Gj6I51aDie WzT8EPm5M5tGNkdolIAUFyAznEMmoziUhEYV0WjURLrjp5h39DUyImgL745HBE5so8kDyGm0 ZQeHQuCoQBUcJVTBGUwVJPyFKkj4TBXOIlTBUYEq/j6hChI0VOG8Tqrg6HlO3Z9QBUezOfVg QhWcwcLXn1AFRzVUqYcQqiD2DA2xhCo4iqmCo4QqWJ9NgymhCjIEqmAHoQqii2iIJlTxU9/R vB2hCywFutTzCF1giekCS0JXgEBWAKEqibim63xq0oU5BoQyDV0hn8kyIEQFaGaqidAUgkkK hDQDTFAgISjgPMdLCT0B2RwvJ+QkncUphJoADTG8ghCz/wy9n5ASgCkJIITMzabnEzIOCVSs I0TsLaL3EhLA8B3uKiFhuUABP4VQsBwTsHwHByOVGRy8H8dhw7y8E6KDtBCdCUKSgL9DWvwd +uNYLR1YxW3drsG3nsoT8K1oAvT7DP879Bn+p0nXIsTudyHE0ANNeQ0u8JBxV4oWGHj/Mo2y 4Lo2Xgkv0cYrQXN23+ADbtPqGQR7tXVbikNupyOLgL3awoY6ha/zNjNb28tkhZXp/Lv0rm2y RaE7T5VJCfrqovxCVUKl/0WCvoKeXwCdKzRA5x2O++3hR3pQ9dYuoPOVlPDUiFQCW04LT0vX AJ2PEKBztBbonLY/tQvoXAFDOYtRDgThrAU6O0itd1vNDpaT130Bav5IQM2hu0/nSjMIrFku wJozM6Qvlp7RwpqDkmxXQX/Oeb+TBtasJLDmXQTW7BjhFOFEYM3OEc4u0hXOdiuDtLDmvHfQ k8tMl2YLsGZUPrNCPfuSxudhpuDyMBvEl7QuDyRzziWtW8N2djWI/5wDQ2lUPqnL1cxJcDVj g9E64mrGEFezhReBbXlL2p7U6Wk2ia1trcfbtHVSWDcfWI2j2aBLiEHzBUczljiadXwDmV1I yExfOiakUv/6w4m8JZPEZ7xl68XMxQ59GEl8jfRhlOg68TVaJTIW85aoiK3sMF9O3IoqdfhV D4lXURHW4R2WsEq0ABdHo4hfkT4aKZov5s0Hd5Z+W3W4quHa4Sr9FL6E8eCP84aso9OmHRtl 622SYmwVzLoYG+sUY9ni5ZZWOxQ5W0SZGUUnzssunHLddVzB8L7Zp10qZdWVp89kK3agMayd 0ybbDTKT7clHSNWjNtbJxrIlxlZWOxWnzERZGeePn5OVaare8TuZ53JFVn31dEE2ARP0rgJ5 l7NUb7YKpYpVIBfBoio0gLoHEtFCahqSiFD1MkilfkZyEVq4DPpTv+C0Ouo2zpfAANCrgtlV Ojk1fFaNLn8a9FhVbeO9J8bVRpPWrMSb7RLTVVdnyMYumvvLuKolrQ8uXi4rU5iWVBjflIVW scvNy3MtFfmnz5dekZXmbl23gXzyRsjAxDqvrPh0wYXKgrXW+QpLq40mK2SSpTsb+JZ6nSJ+ ti7vCHdZtBBANJdCCxDAAsSLGqk/4BOLfkBxgfv27wnc1yuICooMiAqMRD9CAt6AQ3zEwYio sEO9wqjwvRF7IvzxOp+Ihl5TX8dbwm8aVzQyjXBVncVG7PYO95Axj7fvVDo6K6wtvVcOlGKT dtARNBcNkw7z3erlJvfZ5e3vLfP1Cw/fq9i1XBQQlbw/RXY6Jy47WZGafazyjZR5DMN2wUwY IH16+Fximjw2Oj7ymOxwdFBQFLYnlDegrgmsb+ikq6C0VfcJ/082IaMoqU72sv1nNFsZsit4 tyKYynczLpkgQ98NQ93QT31q+2Fjqw8mg4VI8ELfQw8kN1pl52yjgJkdPDvHtFz1pu7m/caL G0wSFIjyXTRgjEySTWz4D48g8JEu/4G/ybZ0tM9s/3PUI/UoCBT+E0vchj8f/c+R+tn8OcaM v61uYBdQTBJa+mdkgGuAY6AXHsX9CftS9yah7+BtTyRfnrDhVjaM7ZguqqUk08a08C9u6Efx YR1K6M485qPH4Ff8FC4GPygR4UFzgvOiCPhwo2OLsRj2oOt4hW8UrRVLfENu8GH3dNL5WF2+ wOCCGFnxv4mGUMi643eRiZifcoNFzyj4Dv6MKz5WHZXTK5w6Ypa0IM5ET7KAJtGMxjbqQI9W GPtEl4/nx7KHG0UdEmqqhdLHVXFkrSgyLScsX7Yf/WCPVlkP12ulcu5ngWUEMHowFp2kpkaa HfKRP6b2pe07c08KqWLJaDotD3TzUv7Qz1HFl70v9XvMlF+EC+pbbO8+omoK+v0hQiNRPXul ML9cwZy9eMnyzLLFllvWynGxdQUWVfLgPNbOPSOD5B0/lnEiO9FpJ8mzdXfaIWdce8OCjkvs /0u8ZuZs7+EcrjiLw7/60QRAcuVL/IgrfyqNG0nfq/gy0ZE/UENnoS2V8IsbbGuAJnJIyc+v ZV4DUhuxfzlahb1UM7IUOTts22AiXZmnCW+WRMKb+e/y3u8ls3VLOJmbXxgXpzhFdRjASc1B 7McBnGQu10pnwNf6uS+YxsE0tj0HqUsu0Jqwhq20AIfozBmnnke+68/qBCUU4qpZXxbwVRd3 gj5a6Zx3OrkvYOpb3cE0MlUvZTOTUoUoPZpgkc6ZCq0L5EmgVtMwT/2j0HYyPYUuuqKFhZTw B9P+giqR8nIBFkFKFb/HiaffkOSZ/JAoXO5qhbZYPr+TXQX7KjAnIPMqGLhE8Dj8vlGXX4nk rL+Pb5CPzMHjaHpewdmzGYpYbbTrG1+EwIYiytp584bV0rU5dleOZ0QeTZFLYukzV7qcMNE/ 1afZZaG5G0nkoENcLJ2NO9mVGac+3QUbETw3waPprpBzDh1IomPpfGFwFr95KSS6q+eymYl4 eNxT7TXx1kiwHfw+AiJ5AXrFMKo4+jHzVonLlqlnHOUYUO7ivBU4JdrNK8q1kO5yCb0M1FIa 65ROEIg9XXNFi5iZDEOEHj+RPck7hDPq32sythRH4ad7FdpiRkDV0Og1sroK02xp/cxa7zam HcZjjjP804hi3ns62G4QQuhVpOX8Sh87lZteEJuEd0THKYm9AMfZX3yyLec88wC39U2BksOd 1IJeHsTQWi9V3MuV9IGuThKPVfiqeTkHin/ps2n0ey0SKIX7DUas5t7TJ9zJ17lRzUyeNowb xTTybwzFsBhNZZmiaxENxxu5eJ94VxjGCX6vD5tTOND91w/JHNINaYHQd3DQnfDAD29w+jFs 6mZgbsxwS3GAnzhwjICvB7nxrW2Y0fQr1bMZD/UQg8fUFrWRCOlS6Bt0T8QU2Ro5z/CapxdI eTW53LR/hMRwryfOZTw2YCF8RB2DswffHwBRWCtejxImZxhmD9djikAH3RRdp+AfcP9Ue2Zr yj2s+YLHH0SiAyP00HE+rVNawgnB2jh/mzQQJruxNJOgATAVqxt20uF0Ge7d/ypSoF6tgdwI orkQiyZp8n+Xt1fXBdGScJoUmNr04SFjoili87nIGuTIXouoP94iPelxg473jXfBg2vB5V/p 8hzGi9ZO1jg0d4OGoyy4k9C9K9MB55EQZtD9Bp4J6E7wU5cqPtf9BuZrZRQGcNeIAhJg9TkX cQc+w+rtzDkmB3RpmKneuZrbVMydEgBgxHsYFPwOdqQQUhCvonoiiZBLdeZKAbQgpE5lpXE8 /tRUO5Qr7WhKolsF7NaXqCs/tTU76osWx3P/icwaqrYK0nouv2sqJq7L8C16QOINemQ8pONB wm31sNon1/ozY45yoO/CV4Jue8tpIulpsvTBTLW6GW8szAxU/Gsw1yAbKOc/a1imsTN8IfN4 oS9eeB9qghj6c/VXuhBauTBCiFRIFFBJZaiK9sfD2P0zEOwfOP8XMgG6nRPgz2Eh78wvIGJe i8yugpSEqsTpLxtgrEqXN0Qy1t/Xe7+3zMk9NjP31JmMNAXoJN9RwXQpz43t6CdGQxYtGDRm fi0Mk/P9xnb0EaMt76ZArwB5WFhomMzBztZ8s3T9KdvLGaeiYpNIr/MJIPKW6lrZ67JrKqYV d24cmGgBkf/+DIhs7QJEJhJA5L/t3DsBka0aQCSmH+uXW6pcohBzVczD/vSjAqwN3+3ivBTM Q4KExLowgoDkRhAYGhYb8kDhBzN13V4ugiDi4PTrp6+xSGhdw+3+T9fwhP9313AYrLYKxK+7 Anoj6DZ1gwClIzA9DZQuGksfJ8FJFzAD4iSmcRDHvB+uvhZDyuFJ0hSbrs6qoQmw7mstsK5E Hd+5NP/OnX+nA95vcGqEeoywemS4p9gTdfYVqSG4uxQ+NWBuPaCZwnyOqT9Bv+TjOquPpmsq /gtUzpqfN4EbTT+/8l/yTPne8dxAsp7KuuJH4v0VTK21e8w8fIZX5v+69SH3D8iZR8IVBIpw KnK5yNPeduN66arTtmUZJyPjU+S+50X+fr77PWT27nGnFExZTmpBbKKcuZBG+WcH5Rf9bYsF 0egsyzzsR5x3SvGY9hO8xpGeerwh98VzDz5rCz2f+tWKk3yRulw9XgsXK6Vv/4bT2t7h1BF8 aQudYm/v4mLnkAQSeo/GAz1L65h9v4E599kL3b2AY3K9aJgCu9jYI+V5t6QnPbM8QUTbeXvI JTPwuH4G0EXw3IS/geqGw1H25XpuIbVsOFZLxr+K5rfTM+hbuC+tD9/dFmp9D6eccNrzK58b 2guf4rmJaMtV+Gkx8X7/o/HRY12eRT9hSfXY7ytzc4/JKqgozY9XRIUnR8ZG+tT0/Mt1I9BO /bcLSgY8HQyDDh8KCY2SB4t3uJhvNpGuz7W7dDzrUFyyHGXxNn+5pETiTr+s0HrMPxI85t8O oZlHc2nm7VZCa68JnDv9FPr/zyLD+MHsCNQfG5uVv27nKoeL8ExAfxFuFyzzcK2HDSBpY97B c/V6dmngPLvZ0p2JDol+8poYkWesV1KK9ExeQsFBrA0qkTHLvMMtt+KW323lSAs6v+EW3r9r bmNuCi9+hrNvarLxWnPSicZlBOxh+tOzJTCs2FvF3JjOD8AlVdMFH/szrpvOjZeh7r1HoglI +mQAfHPrYm5RuiJsNYUkCzaMWbb+WOIOElzYMb/Wt1J2reHouRLF+bMpDaArhVNi3NrV0Pzw HPkodIL1CfIK8JGv9DTZvko2wuTerwrmxXQhSnXd2c9RqrHBm0HQhkplIujQe4SLEHC5GBfP KLfO6OpCHIJ8oHJp5rUbzXQchV5dG0trPB0aeOVU4oVnTYPkiuYZb6bjOfRB2MJt4v6A7vrp NfbQfZCK+Qh6fD2bk5x+/IRr2nYbF6edtsmOJxXMb0Xj2LEdHhTDezrYaUyIivRTxITwIxGS ffe7y+xc8V4vQ9jr/Yb3etba4fQvOaE6Wcw8nY8Nl52Ck+BzI7zVW8qhdgFTo17gfg/66beq GA9rZOVKM0VHaT34SV1/joRUuNXsR8d3eLCONCi4Uqy2WrAyBA5rwwcwcDVHjjnVJkQSW1S3 6/F+ah+fwMbGlOa2SHM8s7yw1Nl7u8vRDx0lrIpi7qhNxopJiAZcen0TXlk5zu1fE4TVNNsj U7s4v+RQLd4sv3wHye54tM691IWD8JLNSEhNz3JPcnRwc7V3TMTWCZqPXrJCtMvPkR6ekPju ncEeHhnTTNkXwR7gOrRrlcthTgC1llpyEATthtwXz7thPdZL7bgIBKsXsCOsuOvUlS5pWM8h vz8XsJqyBHDXogK6uVjFtHQ1MLijia0Orz/RyB3ziXN1llpYe5AAqhaC4ulEuerDwQmcBX0N uK40K4gPxXsB4jVpIeiWzrIU2MRznb59wq0RgntfKXHv8/ns3le6goMe/CdDbi0H/aCDNbTi qteQhz5gK+BGhSATW5ptaL+Ocpa54kj/DT+7iH9nyI3/e2o3/p120C5w+hdbrzQffMy0D6Rv oTqWee9Io8DOKBXwVYMuHOdPs6mHL59qkGZ7pntFyxf7ieIE3KG1m5OXnxz9nDqf64xsod/+ JBRvr4TgFiv+fI7ZII225l5W/B1Se58vxsLDvQDu7zk+fGWno6k1h4Xr7/kN/KF4bgcyx1q5 xXwTR6Izm9Taqph72kIHpomYB5/NpfRTv9IJWNZKc9NO430RU5xMBeYFF12Q4tZbBGR6kyr+ wofSoyqmVNn1HqUhAaWjTfwQ9vK5/IsXLQqMF1tuWUOOKQggy84tM/1EQvrxk4lOtrbujjsU pKuCYDZpMNZ7VExBV2s2uDV0gp+HpfQswVifUC7lThEMsRCxo8iZY+4M5uAyQRH/Z7InWJ2j TxEcM7i+e/KWKcXpD3D6L09G/pfSLFgJQOv/ACl/ACvtjP9HVjipowU2E2XWlZEAY+O5L8HK AWoDQ5zw5DcdmPQOP5vycU7E85Xwb5fz6w6lJ8eYKvfQ+Bfxf41TEgdY5UsaOfN9yC05mIGR U4EODGvWbUdOeA+f7Z6piRn+klOb4G3XRzDVBRN1w2pObXNF6/Dcwi4LE8z+vOKrYSoal6N0 jkCmLizGWwTNEQYyL/1UrgO/VAs+zhvHwQ+cRxtXYJNhFanILhdJhDoxkKELeoId9kUnkjm1 1XudqNeqN7qVaqsZwtP7t7owTG21jFObYusnCPcpiGwp1Zvxdj8PbuvC1+oGja1FtvrdyVZf 7VihcwL26p4gW0hfDi1SL837mKfzvvxVuS5s+qcOu8TSfL3JGctrlQWnL5RZnVmqCNrKHk8g +20XW3uPtPSs+LTjConaCu+304kTC+PQIrjR5HUa8w4x9N9jW6Ge0JeYWO+5Nv4NZLSIJXkh Lfyx+zppfI1umgFfc4FCPuruosEU2vWnSNSeykIf/of44mOXD5/SHAkui98AXIe45+egWF1x lb4MevWHshkiboB3s07uiweQ+uCFLrxUsjAN66LvwAc24AW/D1qMNXgv1BvZIDP4HslhviK8 ufOmKBhIroka+JdbohQKJIPb7CxIvSH+HFZLG0wrHa8ATx9iQqp1+TYDTIWRqJ/m/A3bCiN4 q5hzhwsOn8VEHDY/bBG7AUZ3WPb875G3zEJaYN8NsL2hU8ib615SG7Gz+CU3xB3D8bZ2Fk/j X0ZY983kzfHwfRmlq0wwGol1W4WNtApcr8PtT6M2bDlWdbxWUZKx3E482Ok39NP5gA5PcnoL vW+zYAux5ODWHGJEEfDyRsd6YzE4opPID+WK1vIBLWLmcccP1OfoWwfwgvuLuw6EtOke5v9g N3MgcwQxHwAindxnsLIVVj7T5funs9D3CPR+BxtIcLDeH1DvaPmF8evF6IfdaOQgZCFFG6Hf COB2yde2iieAmB1yZOQTGCwFo99b2w7KWw1+3fNqIjKUopHDxw/bI5f8zH3A02veyPdz1yl+ DFMfwpQnumoGEzkOLaXQyMmrfg6Q8/0nYuNz0IE55cBJYYsRchCj2dBjPhgEyJH5IzAXw5BD fzyDWVLJAjo7STgz3Qujpt7Rz+SvMe1NuLW9aJSonMqBUSI40WH+fwJV72C2dg1ZwunAAJXu VpofhvJZrft+h86fRnwPzcnhUbxFUGjYk4FRpDDcJeUrDf40UkEj3EWNKrXRWJSD7kIO5q0M PNhxmoKdpdRGYok9feW9vuubkLbgN8zHTLWpYNQRRw0YyTkSjxpYZJClTSL3I+C0LAXTjmRb WQ1aXQIDlM38Zhi1rFn/9gt+9gvmzla834JL0SyWhZ5aWeiBZWHeBLpTShSBs9m/3pZGZISF /jD4BvSCAQoJ9ND096C7Pq/TxjRupQsWsir3l0MK0AK9Q+YHP98Xc4jcF8PkaW6MuZXp3dxz 899ujPH7w+KLG2M0zJb3Th/GvN7XFvkab0/N1UvYrISUjEx34qLm+vkSCE2avb2bNq2jx1iW uYb5c2xII79GoPn+czjzqfAZ07KVBt8/jdgK8S8X5sA3oC/Fu5me9wTB73cDKdB3oXIkm9N7 8ir5KjjYiAZGiOsvX38LcinMRTQelKVoHpLhP6uQQd2g+lXy/WjgXLFkh7KJ123UhOtKeMQU 8YbYeLjjwOER7o5/pOIf4ze0vlBIXG7SDXCmCkKa9Jsf/wrfHXpgp2L+hLEXWMu8C671sk8f WkAKurNqp8UpIsTMv86nFF65Lf19WtPgRZvddmyXW1lvXYrk0o4t4jnh847skD+kdhcEP7oi Zf6sFwfzHAvywqYHcuZfVws3zl5kZTwtQMH8GewfEOwvWyaOigoNjlKoAhtMhkknrzCePNek MM9FLkH/QHPc1FOxYE/8/eljXUhGJmxDyK3AK/KokMiDh+Tt0OcuGEIP6ZHgI0FR8gnUntDd 2EL5xxzUb/Mk+X7KFobMBKPN1/UGU6XTn6DxucgwZVjQsMBRepKtyuv8THdYQQI+RKtgjYqg /NTj2BS7pWlzZEwHEq0yXr3x9LYUD0WKpyhAzHwcvMFoIuohRaPgq7HwPRh8fA1DX5k2Tb4m ZzomXhdtynVISJemZiRVVFx28kmSIwptZ6tNs1fOk6KvFi6cKmc+TpteB6I/mupun8Hs2Z/W z38xT8W85we3V9NMeyS2HuppNFPdq04n/ykYY3Jfon5sRs7Jh5XSg/sPBITKNxzYELkxXm9m +rpzn6QwCP6B1w7DB3K/ayI0mdq0KSRih2KPsWjv8YKgIlnzfqyA+o5B45FCin5oXqCyk5/x K9yTExDk6LXU10VPYo+HFuzJlRxKd2KnwTgDF7wzauBMlHWQfR0O1+mcboPTbXjU8SI1qgW/ zxV2zIYBaCQaNgGNRmYoRIWt/n4K1J8fycJPF+Hbp6+LsIXeN1S+oDsavwnpjRi37D3MlUsq iUnAOMA4vJ/r+IZi8uy5MVjz7LgkePirdPG7Ycch8fngog2li2737/mBGgvfmtStrTaN7hUu fnz/zq2GGr2I/uIVy+dNN5yotx96UWf8T+yNlhtRhzzDTS2lHd9hBaWL5VLerBPJr9Hluxlg DbmEV4pAvnbT8+GyXb7BgXsVe+eJQg8eDDkgu5o73+iE4sCusD3+0oCgffuVcjSrY5XoBfUW TkafjMmLzO51gDpsGW0TbaMnmYWtjZAnC/FWGToeMw4RdhzM6fAQPaJUMKgdJmC1HhMUE3wY s1+ob4iPt5TJQ92N0HiLKfJAyvfsrgLvwpEkwBwayotrwbFO//SLjaoUmOSOTQb4k5/HenmF +MqYO7+EL8lvkl4+e7H1bN4uZaL82DVRnMOW6DUy1Huu0YQFeWtvuigwHz41dJ4zY6gUTYGp FtDLQx7s5LnEz6XSq2dmzglVufRg4AF/ucXBjQc3xOgNTl9V9ED6qK4BFHKmPYP6SyQ/dxJj oVuLTkMb5OAZGI9Fa9+Z4NbL0rvh4k2ZFY41MqA+PcUcNmDceySbuXKHxVaFlcWOleh7KXIR Tw+bHWUrv83PYEHacqXx2YXJw5HO6skjl6w5W+EtD4wOPnJEKrHDMvZ1PXllQZsun8/vZdEh Cg0M7j8cGWG1/X441m1fgeQuzG2xaV6RL48QBzZnB6fKUGLH1+z4pff/eFH06v27swMmoq8W T56skKCpyibgG3VgDObKm1VssP++kL0yW8e46wrIgKHi6EYRyqZ+sfbd5aU4sk4UkZQeUSa7 iLKoAadM7x5LDD9wWC4xhm84nfo22PNEFzp4j5/pq0QOrNz4xbWE38c8gNGtumCG+7rAfpAg PFOhx3T4Zo8cGT8AvA2RHAG6DSZJYXD/58MXrNjST46KxX3j1t5/Jf29urYsWw7fj2fPxyen Xa6cMhh1XzpjuB9WZPoBnE40v1SX3GE1CT1AM9DbWy7PYfWx/NicmKxeERT0R6UPk/HO4D0e 8vuicdQsNNJti/d23529sCR/B0dFkhs36VozN36vu379Y+h/H4a0MmVQguftASyjYHrUNRgG /aXPPBrds+WTqBi3lKmDpMwjpFgyxnC/nK+Y3FEhnnZgXgn0lcIA8YX9x7H8TKIinULNNknR j2K07ONK+G6vXIKt7W84GEDzPYFfQaNJ/LSGEGH1WNXKmPHDeVuWyTvqZH7ITIZ+GYl+RAbI 4MHs93aK43tz9530D3L2WuLrctWzZ/rJ7McV0sOB4fvC5Bsjtx00jdEzTF9f9qv0bcOT309n 7N2dKu9am+5pbn3Ey9MDyFfPZFe/pZnSs2gTyzzAC1UpWage4IWqVLNQYdVZgisI2pOHqPP0 1Y5nWIN+xBqUr6e/1Gv3hJuf3sKl8zTeJ81ksYJ71MBVcvfJiYiK8cA7he70UrSZFbRSkT3O an+v7/ZmvyrsDeOVyV9iNbc4HeOYgnUzhVL2nAV5u1aO4Ox5ehBaySJpH8zTmKVJ4Iqvocdd mAeDR7zHu/OgBezvBf0mIp3Fv4wfp2Hp3xUCF+JOdDJiGu5GMNr8M03ScQ/q26xet73xf4K1 8kTSCbyLyHLHnfgteubPtDA/mDI8RdChnglSTMGjFXQldxtGI9kLffPnKaozzxmnT+rFrCsa LSqmLsBoEYPHBcnYjGNJaekeiU6Obu6OTgluGQoIMNCmOTq6a9OY/HFTtcSSDt2CMeindtyp Zc9h+HPrJ8xLbMguZt3QGNx2KYwRMbfQbPQTm34sWdu2m5NTgmumAvwNMjVpuG0hLV3BvHSd 9jPd8RXchp46V6CH7nP0NZtafAZ0j90dEtDTf7Zrby9jvaf8CvZ0alZuvnOmlbWjvaV1ml2e QoJrHQCZThEwutANDrD5aVmnzzhlWlk52lsorIIz7PJkEpTDk+lphb66wKkXNmIzdTd/AVPA /aof0Q5D2pk8GIFNXlfc+xJN7x3wyHBsRkJyeoZ7opODm5ujo9D7ANL79AyPRAfHzjQJDKSd X8GwV4xDKt/EttEQYtBGY4X/DfzATrXiKinQXUfjQu6vYCAulIkLZSYmXaUdHMhtNIkuwqBk kRR7BzeckoBTcPXtuDp0t+KuUFPX0XwB9MH28i1sL2P1qof6iC5Tk6CPqMpAeKigJuMHCYi4 X7E5q7bC7JGUmemR5ODgpr2JCTLIKzIz3Zux5YsGfGInoa9F9RTokW8ouN7LL+s1c6S49icu 7vWJvJOUn0SKk8uCdDbx3XU3qRvJXWgkYxTOaDYARngYTUpZ0f8jXMZDvAn/tgWGtejA0jY4 +lw3GNszM2FZx5s2eC5OPn4m/pysLNfVMl2RYh29fpl0uudyOyu5neUWN8vdcfN6nou8mHy2 WO/qhVOq36QNvg1by+XlW9dmz5CtXefmvkMRCKsgsIUizmp9OU1YD40Vn9oiRsPIR/h9yha8 oQW/Gzq5v+ryBeo+7BFn00QjGbLHlsVYtALZYcXLwsr7V+PjTiq860Velia718rQyCFYzH7a r4A3TegtBQZH23+HEbLyEhKD5C8BoLtMbhP6cyxrKPNvgJIGmI3J/r4VtrRB+HNdvGf8nl4r 9/a297YPiJnTM7cgLi5V8bIuEoxgoBTMYEvHK/H+rKL912TtqqRLlxWncpJLaqQwBPW4hmSu lkGBbnKIJJdThSVnhCXJXj6x7DtggslQe7fQcDfMmfX+DeZu0HpzRQNEC8CDRPJaJlfwDLbH tha0QqKYSUQPhbdUy161JlRUKHJOJRfXSaEv+roK9dxmLbwlzlDM5KJklAjJuAJ8Qo/YsITU sBOy9kdWg/uN3zTczjU0wl0heYFnl2mGQZjMRSoIUmlnd3HHGxW0i1OyyxMLZaczdrkmKVKc orZhg2uvCrDV4nXROk+eZWcRv1K2YrmLi5UiCFbDLjyP5kDTZfD1dhpGw+Cd9BLlzQ1u6snu Fef1oVc9SOqZ0kyO8dkzW8SU+tDZ0O8eZ7dRtmH3iRP7FZJyTUi8223/7uZMojMuU3YDPcwO YCqORDNFN6hDMFMEpmojw443qJZ/Q0n+ehC0tXPKrtEvniddwgOTk4SH/962i+tOyk9sWHx0 kczVAo+OAhbAOcxe59BNlkxEoqykaLdzjuKkS/K2tdItvjYuzvJtNqu8VstsXYRBGsYJ7Pkl b0qKQ27wGTf0j9688QCs2jxv4nXMEA8dmiZGenvGuEyRe69xMnHauC6o50HkLWqgDoKRCBso U6iDyEh49BYxvHGYiH8nRqWzWLDqyEBlVGJuUtHRYr3U24efQzfp59MosMPjqgP/fKybRO77 24tq+vqZLdg+vJfrYu+Fdkv0nlLJRXF1cSV6L7JPXYVusuOo+jFUZ1HQ7ZTxqBOKeNO4hSmb cCn7au86l1qbV2bX+0TDXqjpOYBClqhc5ADlRqjckUJWUC6SjFY2Q/R18GrWB9Vz4kJ4k69n U3IvJpXJmPctJVbz5s5d9bPCYsEZiml/8tpu4IxVqwetWpaYZK1wmSfaWVbrd00G38G3l6H3 67nVww9rvA2PVdU8kv4+6Rr6eqaxm+1GueRWyO8T3Pir0B3vTbQ3TU7m2sVgDSoRszOTZuLv 018WulSEixUSJirERZVflFXiwonK+3Qh9CE3z5kLN89d194895m/CG9upyXRMW5Z5KIwffju MTiTPcR3WKzXyJkibx97b4eA6Dk98/Pj4tIUv9YehPEawXYWMx5YJMhZx1D6yxPBL0/KLmt4 BK5r2eQ6VpGkxtjPwfe7jrs6BUM/jE9k8rBMOBCZyPPBmqevA3zPu8B35Nxr7SNYi/cot9TL 2WViZLAXjf4FOUrxYtNvOvTZI1/cWiOGfoeg7wPYJoVtqO8T1PegvEo8vuMdO/jwsAYYJ4VZ n66pDsgfGbwOeLMEzZCiyUMWDt1LTr4aQ5rmEIEjiqZa5XGL8ZjMiRkX3lxg0UaKKRCYtEhg 0rHCAKBq/o1YchTTH3gD/umu09wGWSrdZsL37mI0Eb6yenr1cmxGsTwM5QsnTy2U67Z13htk w03LXyjARiyBeK2QPwH7J2CHR0q9GAv0cxpOdXVHm/Xvf78hWmChshvjQ3rmpR5PHdD0rFjo WanQM6zofJ7TJVj2Sxth1g0dmNYGAS/wymvEzoIZHa+xqjy//6rs2dPEq5cV2acSi7FCHoS+ q0EGjtueceFJ6WEpMlWrRd8B07AixkrRAyvi8YIi/mcjhAijE/b8loopE65HNxSaq5I9f5lU WaHIzkk8Xy2Foejba0jhavWMC4tOD8+WPXtmQfT6MFvcnKeCH8v/zjJ+2sM2K01HQ9yv0e1d bQhrhOQakrtY4C5hlZQse/XYok//CRuG2mr0tA9eBUObwPeGDr+wXRdzbA0LDRTq7f8zid8j W78y5pilwmOuyLXkml+9DO9dB4I+OMI61A1GoG2Llnu6mSqS5osSCotjL8lA8aA/MohWoHpK Ankk3j7UtIAPiQh/u+3NE17xlLGfzLVBzRsxcw6tj4SvUA8YLwNDMIBvwQ829IE+aBZefL9C FDL2VAyimFw4J+a/70As0p8NPaGvgjkHA+vgJ5BCrxrUB0nleDkaMQf9gH6QSyyKOZ0yFfhj G7CbweFjB45GxqfWJrw9jxVf6omos7JaVNSmHkFFbV52YIXMaIHn9i0Kq53OG4ylo64ve+Qr DxS7+7vv8vZetcpzhN3Uva573HZ76vE6gNhgL/sQO9nwWcUP2ltOPsnPDAiMVfz3WwZWYcO2 Wx3sdtc50w5JT3X5ZXg7ZbPLdK+l/wjv+Ts3zNdbO89lDPpKisZdRuNhKvR9+AZ+hpGGj9E/ 5s6znEOuSY8oO1Z34lzexSvpd49kHzh3KC1Kz6pjJPuz9YihwyxBfD//UE5cljw/MS+jXPb7 iQG/KCQT/Kts3MC5EgZd029+BKZt854xXs0GTHFQ+uX9l2S/gmEcME1rz8wWdGZpxZHzeVVS 6IakMZNWLA7w3y5vXc2GJR0Ly5KpzrqYrpjvsVCxgApeztZikWht8pkzZ6yvsb1naLgTtrRN sKoZ04xFVNefbuPHwNZmsWRNSD38Vq9/uOXsXRj7xPHf3RZg4eLhezsO6Yvn7VnosUyu3OZt 47bTPLhnBLLHohYBI/GyBSoqAo3EjwfAHi9b60NFvJEYBc1nYSz6DTlTsRlHjx8+qRd3Kaq6 VvqXexJasa6wuQrW7jpQ1KpLgvmvQg4z95qZ2U7p5bXJe527pd5jKv54zOm4s3r3jhekNcji kE0r2MRSNUXOvxxXHN1y1CLOTk9FuZ/2LvMqtrtjVjjzEKwEh54DKWSIrEVeYD0eWXviBxL+ Gg3fXQeTqmBIrT5kv5j5imkHETiy56iWBs+Fphu3zdy44WjCNoWLsci58IrPFdmHT/kfm5ed m3VQWKMuRVfkV0lfjjk5Y+VKX1sTefJqUdKpczH5sop8B7NN67fPUGyhJHYhjxe58YMekAkM bmU8Amim6C7XldxSgjP21ULPGv9WxhNnnr/LMW77YH3nPaPlZx9GKBZTmwPIXZMWbicLAxWS fniUtl+Dre47aMm0I27HCTBd/90jmNTGeLzDk7NWzBShbgHzNtnId+32gCF0qqKmIOY5/CTF Uj6JqOaxbbyHWHI5iXRB5yx/UfeswQPqCHiGXwyvDbvSK4I6silpTuzGJ2hvz1qqHQIzbsbk x5zrFU6FGUcsCV8bjbx7tlLbeQ8R0qGmIGuPNQ5Tlda9gijlaberu3LHQmBP1I2SbMX9tG+C tYLm9xI4C+zBC9njtxuitcgL1or/ckS1BXfo5yZS2lUl8OHP4Nrxs4r0dTbXefEGmq4pBUZt utF23BwY1vEzKTmsSSz52xUOlZqjnmQ3PtgdC6/+6TYYfR9GtzHlcIoApWzF6Cdl7/HIUMq0 omG/jYXe5NTnvhjnLxeDLAq6tcJYKQwb8BT1OSwHW/HkPwexw44su/tO+rby/psY+X2D175X pw2SDjaePNRPLlnJ2TzBNDq3Of2723wsKx7+NFkiKUEcGvASKQhEkSAQhsI8IGd+rFgyDw/U mDqIddepU4FZm24dnsQpYqRbv+HF+fLY5JN4gVwjjJkH5e5g6Wslm+py9poCCIpkVEgjPxYP 8BOYgv+SMeZf4pIvaJj0hNYmOmp640N648Vf7+xNsdCbUhNtb3xe0PsDqmFLzTPhwA2sVbpH 7bi50K9jjHh/XlFgiaz5weGii4oT6Yk5ZVL4HolPD7K1DQ50kcN4cTByZ8OTEvBK1HTPfcLU WU4z7TzCwj0VkocB1dZuEFsDY9318bxubLvWxpSBHl17N1poK4G09Y++hf122Aft95DDRDFy 7x5+LDksTXa9yXnK9Jn28508wsK8FPCBn4zXxQ4PgXWNhJ7CWIG1dqp0cYvNT6K1vbsgBRaJ TyEdx+3B+93lMEFoMzERL911Ks/xk4xcF9gJbUrQP5RNMKYKhjXowNNnuu2wk4X91LC9C5cO la0wjzvsovBaLHLPv+BXLoMJ7fAV9LnnVGteqCgyW5w6R7Zupa/zFkXCCtGR9PzYMhl0K5s3 4ZACBeJlUqIk4MPt9TDkOl4mm588aIXDKsbeH0/J9gdkmZQffjwO9GQgefUOxsCQce+QPtIb b4h+8FFMIOujmRjOd8xkjcyev8SL45uiF4+fFIwYjZfFURZDfpZLDDHHbK6CX67qnHtOOIaf yruwB7asPLBctth4t4uFYqubw/b10hl1ljX78Arout9T6eNnZr1rsdsGsv4pvfVeUpFHImMO xiYUx1TlZunFJ6QdzpPVoc1tlCHEse4eIdaytVOTq+ub46tOJAYFJisk/zMeHwlNY9TcUrMY Bus/VcGBTzRUilMPxB8+Kj+VeSY1X3Ym23VHouL4+kPLlkn7Os/YZiF3sLXbZbU3fm7P8wfO JeUc16suz3sHMul939uWl+WlOzdkLZMZr7G13IYtxb7gRjGva5AbfEdrlykCsPhypUI0WAlA CQq+W0ej75SN8LMwqaefkaAyFmyMi0nCcmzko6/6o1Go93O8zxndeCkhJlXhWS3Cw+WzVjZs fvWrfQoIrEJB1KPDVxr+kJXleitTFH+5jWYu50x/EZduGQ2rAqo3u0FK9fNG/Y8PsUqCHXjv 91GjhP367Jm9cYdcuccd6+AUrIOPPdPoYCMxUyZIVXFgsaxJFV1UrjiOJaEU5yFxHurmtF24 mHoiFisPLFZJ4Zmy6kfuEyYbuS60x4yLxQpMBblSNmyshgmCZJm1wdY2JrfZjmPssZCAErMQ tv13iQNzi7HsNj2M0r4FS8e3SJw/2F4jHFPGEtN/Pp7J+cT0P4e82fDEJCJ+d90nTZnkuthW Iyq78MiPu9E1yUo8ybni+LD4iCPyorjCwqvakGzpKpwMsnnNA7ft3OvtIHfxcXP3dtYLwgb+ JmEaN+Fp7FrAnkC/HTR80xkOsL1E5w+yFur+8StH1jwYwqFxaD3W5Ju0aq5N2IT8u9tiZbcb ZImAMdjYHyNqwhbyGBGM4T3GYp3qxI+lJOinv6A8xNGwVrSI8kYSvOyv7FpnBl/XrjPW4oMw T7SY2oV0RBK1TZFOMjEddZPVt+5xtoJNmI1tQnX6eW0GnFDbsNX7LQonysabb1kcoKgPFh2P iD5+XlZ8eIc9ufcmh79UopNUCz/W6ib9yi2iNu/H5EjUTIlOQg30rNV9yFexhQcSTxbKziTZ mIUraqnG/dsrxsqmrtsyMUAhKeE08VrNmpii0RzTshBvHMbRzJ3H+LcHLfmd1kDk8xp0B9GS Uk5fWESdGpii2TTTsohjin7BhR/h3x6cpITO5TIbmFJT3MZcza1JcFkcHYq1vzsnmZN/tQK+ 5p6+YY3h2VXxZL5mCT0HRuAkeKsevoTOQot+e//ZtQsOvGNe9+WIV1Z/1MHauc4jt8ctKteH p9c7ncKm8TPW0wlHIwj2pk/Wl95i+nzBJlqIbmz6kaTfw+nPB3Bz+DcsfEVuH5/5UcTcQyNW XOEuQz96+G5OCJBMVZ7X57df7Qp7zPIFFRz8Yw6bfr7wcIn0zPbjm0zs7LZ5yk96kGviE5Nl CbGXNFGUYyu8KvRhGQmQytxX4vqvlLiBXnyB4NWzhesbw6aGHXrDMQ+VCVwKfchbgYvFuHhF ucrMHK1WhCokWWjB+88DQPxV4OAb5i1u6hNu6Ue+IIiz+NduNvMdp/GKcsokscqKLp0WKLyl oRA58gks82hVZL7pXdndggsXI1/T693TUrHOoV6yM/qKKijo/lH0Xyt2gB7HPErnPFzXykxg OEfKwLASfXh8rbPURD4gmGYeZQl5ty+bPNGHRaUw7Dxzg5CsUgohmS+yseEHMaU3MaV7vWW7 fCOjBGqPYGqB5gK3s6siT+fTf6X3xhV9OPSGsdOS68KXdrlnFV8NVaynHP09XExlJp7pKQGK 5n8FsZ70aNzAfcGb7eRb4ug2r8N/GTeFhvHl5MCj13WSJuM5DYtMoYtJcOQ2NwG/9bQ/x/yK lHw/Jcf80Qni+jUGl4Jvs7R+c2v5A5towd/O9CM2QZmPuM5r9BNfzYIOYaFZmIU+Yhaq4ITg z5h3yGsPXSV1TfkD7ChbAu4kvEU4KOP8WS0HmQoclI056EhcYpIs8egljVefwEG323wJHpv5 1A23soI/0IlvZv7opuUgmvmncgO3Z4+3zM/vEGGjP7rFOHsRkLSGjbSjonETLBE8Ak1wbwa4 ctv/tZv4thEhut3mV8e8T6SZdo8ccjlNdJm0YOuJjevsdlp7gAEd//919h1QUSRb/4zj9GCX jDJNgzvz9bRhn25wXVcxg2lNq5hXFBAFA4IiIkoWGRAlCJhBBAQRCUoUA2kAMZIlmFFQzBHD WsM2fvuv6hkQd33vf953jucMdt+qrr5VN3XV/d2ImFg8Ml+PtXbbvG1YDMqPJms9Ka19PeQB 9RQ1bLX59GIu8we6fLVOXVQnyHwKx76C4/A3p0+Z3T3JlQwcXIyvBldCPXw14flOfLFbSue3 qU3Qjv45kKwmSmsdOsQQGt2gR/UXFRNQ7wNOkkrkua+BlG7sS6bDOF6AS3juv9QI8FQUA/6E JJinRhKMqPUv+T+hbvclqXZn9JAhHIE80dJaURhROhVp8Z/8SJ6W53jm0+doBec/fEJdUKIG r5UOqAXORKsjKpJItIiXMn7+W+RbfXhmV/Mym/r5xRN5iGzNu1NrUQf/aw/tgsl1SFI9yQL0 lB7jSO7INUf09zGoO45st7p2kCnAzJF2MAfp3nyke28h3ZuPdO9tpHvvepBc3vKdqFEmD539 Cuf4NGHKRCUivTAR0SYqEfEFJaKunuhBthutjmKo00poyOQlpJeHsEuJdcH+Ad7yLV5wCEll KPl8ILmNM4+xrR3+YZVnXefoUeeWqG8H1LUl6nkt6vgVGsbV/x2L3qRC04BPjYLC11DIZ1WN wGtgO4NWFL68oKqSv2qWYUHGHURrZw2/dt7zyOifzQiXl7uIec/jnX++2L4x9yC6iGUXXbSt UmlpVZO7Ls/1jms8+eX5BNHm89lPRZgz8YgaKVbUzYAZOANKqUmBUmpzoJ4h04IGf4nvu3fr C23f1z69c2FstQsbbnz9UwsP4d2ay/02F6ce8dbGrcWnimpFl5/WtFl88V6IgkekH5if1oIz PAcxa9uWYzT61x1o9I1aNPocRprRUv0mu5ky7cdQ1oMZyvRXhmoaQBpzd3jLNpSEvxbj9KH+ VUHNlA8iUiEiH0SkGkBSRZNhpjdjZek4WYPqbQH7KEnKG1EVICpvRFUwgOQo9QJ6FDdAVEEU QYKkzkLqLk0VTHuE/nwD++Akp682PTuAXKhOpJ8+ImchKqqAGzxmPFNNjMAI4ahBTYGS3FBG +eqgJsU6qI2vzq/4L/RAQ/UCntKCoYqUUDx/ORkvPxyVSuInvWUyWoKwWK1qprz74sfhlG9v nPJd0Be17akeE8JQ+fHfRtIJofuRTlNNRGK2DYsZbyzy45GxOJDK5GAV2sG8Igx3fg/DnRdh uPMmJeqIVC8oJdd/itKyMbv03CH0gr54tHiweKwDSCt1Aj2OM0JaAwqhkYjbH0v+O1JuHaKF 3RDxOWIcoh3G6daQYcj8OARtjOZbwYkFeKa+KTvQTG3FIyrCI9qKR1Sk5DHTTdRG9LHcM/sL ZSftTyCHYb0Dchgame8iO3pysV8st1mfenI7/g6Yfe59qdV91OUOFfwh3+6r/EL84IzVi+mo sL3Rh+QHI7b7xbGIZb7xsf5H5PlH0rTi3kVPaRjoKrfdZGcZzO5YQZuFZs9pkd9QQTG54Th+ cg5TXtrB2fH4PZbh9xjfydk16un07MzZLdcLVdcUi4m1QW5rrOQrXPCo6z+F8/weg+Sqlk/B utl6h0/NottFe8lJeDXjr22Dq3L4q7pwu3b9TtICjTftxqfx9zRTD5UowHuhw9nC49NJZMpG 4v/N0aSJocUq5b/ZUR9RJwPV3+HlZoyW22t+bX+cjtb269d4bf+N/HVfZrzai37yiDTDa/oj v6ar8JqepFnTGrrFV/iOh+COq/h1/AnqzkdTdxpPnUOXqcMPeMtkN8Vi9247Gs9E1G6wuhf9 C0eKqolzDQ5MyWRkhYZCUkRB5QC0qnlf788vPCCo1MyJ1lBruafJh+tg4Aj1d3w+gAXj9Clq L7mGhCuKpQ0t7kgHzUDW+qI6SctJ7i32lzsRevu/GdJCvUMk6n+DzUt9+BTYHU+aA1aGN3Aq zIvWl/h7WEj7HhdmpWbOHsIJVRfwxchW9ByL9ZM1iPE8a7HnT73sR66HMR1y3wilaCJe4olo 5Cfin9RU42n4ulO9vOR+HEOPXM1UEiqkpDTkeDow9egyqr0faf+59z95pRKHfGwfD0d7f29b FjdA8/DwGFYt8ah/JW6wLQTrXKxK0rA394Uiea3UKBLtW2vQ77UvvhbGlJKIzS7MBIZzgtTn 2H4C0y6DFJ99Uchg1axlDAp8ilDgcxcFPkUo8LmHAp+7HgwXtoZnluMar4vkoRgcFGx1s1u2 1Xc5i0KmLsj6eUdxD4lK1MWFiaiPRKUJtuCoF2TBGe5xKM5EwdUTMpRzmPV4xO9wxPWy9QVu Z4maOaBWlqjRWtTmFWoS9Um2l1yHKbU5N1Vvqj6n3FBFxiS3nLOnN2yezqxh8FKqbYH9qhJb qPwOEi9jZGC4+er+3sxSC7SuJpOca6sx+mkf0sozoICEc/h231fFtKDwrgCFd/nTNC214V2x O8NFztZ2UEA+0iTc7MAi7oebnCqxwkUNcKPNys5Wx0tQM+hCJ4ftj0FK7cB2X6TUTuso46GA 5DXZ1n14Bo8rsXuLNNkGPgdQ+7Ju6hkF6BkVb2rwA+6g/m/j7vM7e29CnWd+Mub1FNcdNVJf cRfA5Dfa2gAb26/wXOGTa1YUC2B8lfbOkLxzZEQ0msXYz7PIU/F5RJDkKwDe5Gmp3Cv30JTd REordw6jTkUWRRAPI4Tw97Yo2qSrweF0j5Ka+zHo/hF0u6uNicX3kF0RwPFlQjiqTYJXfRwy pd9H4mYaA5GMzQOVe6ttjtYMREbyZuCmb9xh/3h5fkKnFdBEl7l44aNwq1P3Xy9Cut+J1/24 TiCW0jTYRsXDHm2/dYicDa9Z47HXYMML9GfKEnRzflt0pyjHf/YUMFENGv2FMmGXzrq6BOr8 t0wKFloqF1EMDWG00nrzC2HN1cgqmizB61Yh/HGcC9M2DM3N+CohHKFOOkdGHuqYl+X8vKin Fgmgb40QTlJPpY8TZVlZqqSARGUcO0MpivhAuvj62Cu2EJK2uSjWFaTAvcKUtjO0NsB1Szy6 vSMoPqcJijvowoUpfxqgYPgY4+66hA+F0R0UCQvglCtCaNJ2OIRMwZf4ADiFj3/RvNzkw160 HJTxh/3QhBxJLwthrYl1Qf6fTUBu5Cbvjhh4z8mTZFtmiiBFDYRQr61yGZ89haKdRFiHeD3j T1GXQDOeG7KA/rmS4bOlUKQJKy8JYc+2yo7vF3xbPp5J7WRzpQZQgyhHYczNL6KYXE0Qg1xf TToVdnjbbiFOT0acNm2zoI/l5X7F524TlGjZ3SagU4nqtIyilICjfkfY6b6Y3Rt9fXl2j2JG kSNw6ZdpHcgOq8uoVphr+BnYof2lmHoaS1iPggaM5+59fDkXv9jkgER5cVHCxVPrcG4Y1Zqq Ekm43dzSXPivehs39SicxZh0mcqtJLkYbckEqjBy6yG/2O3LTfpoamfq/pvamSzVyJfPVCTm iEJ37tzJdpZZoG52KbQAo8QSLjeSaRdLqkgn8u+FZMf4lcN+5dD0qiATeRBNwlvqb+lDGdkR 5fJH9ZZczzCWe0IE+4f4eMqGneIYOAz2uw8JnFo17A333fhFnlscFbCai6fnBNiNGyr/3uV+ KXIEuJRIxsSvQf2kXAC7NUGjBiE0V0fSb9LOZGUc2zBtqOUvY0YpoD/3L9rOxXrJTPm8FRlv gtkoMewDe9TDbrC37PmScpNh02ZywxRcnNjFzdnD2eOYZZ/YyNjIwwd1g3cGBcmGHFBNeye/ X519L5+VwPs7YfehbtC8+IwK2v4xU3XIXXrtFsy4daEeTqynXJvbHNt60SMmmyHFKbg6++Gd W0Ww9/u51T+wIRZ02dGZ839du8R86aqi2stJlZdY2KddThdz0YvF7fM4cxqf7fJshuLg64FN ivDQ1EkZk7InfwMncDdED9sUplwcQeU0fxs2Ye9QRUjIhhr7+lU3v+HGw2uiHz8pCAli+XoJ +jcVnrwACdVblQDmNAnVm9XWtIoTiLfnuaU5JejC0ar20TPriAclTvOjWM7VAnoQ0wLmL+N0 5L/PJp4NajC+9ZPuC2LUu5FvTRuhwa7GygNvdSXm0PH8jbwbSHgy4Syh2g620nk/iHekbUl0 jdWFirx2YFZG1J1xtUNdLrCGiwjrbUvXD5dbzCbuTK6YUvGb7ivi11uTb824/GF3bUHEbV2J MgIG7oG+EfDniIORRyMIbnVE7p5je9RgD5ywR/y3u7pf3O1RTbYAWGKgvkMr4lcs79ljZ09Q 3bNny66eeoyOjs5SSkB00xHoTNZx1zmvc0cgEswTHBTc6WbUbWm32m5/CqVCN6G/8I7wSfex 3V267+oe3f109/MiRjRQ5CA6IboiahE9JayJWvFk8XSxvfiq+KmuSLef7s+6Y3QP6WbpvtGF Peb3cOyR1OMT+R3pTR4j08lPoDsYCoaDOWAj8Ac7QAhIBaWA60n2lPY06rmo596eR3om9bzY 85PeAD0rvZV69nrb9UL04vTS9PL0bkn0JP0k5pKVEmeJvyRWkiCpl7yQwF6iXj17/dzLqldA r1299vXK66Xq9bDXs976vUf0ntR7Xu8lvW17B/ZO613Uu7b3o97P9YE+o/+D/mj9yfpm+o76 nvpb9bfrH9ZP0k/XL9Sv1L+r/0xKSPtJf5BOky6QLpPaSZ2km6We0t3SI9IsaZm0QdoobZK+ kr6TfpR+okSUHiWlvqcmUosoa2oj5U75UP5UJJVGnaOuUI1UK/XJoJeBoUFfg8EGowwmGEw3 mG2w0MDOwNMg1CDO4KTBRYNqg2sGjQbNBu/obrQeTdNy+gd6DD2enkMvox1pN1pJB9G76YN0 PJ1MZ9Cn6Dz6Cn2Dfky/NxQYig1pw/6GQw1NDWcYzjc0N1xqaGu42tDZ0McwxDDSMNEw0/CM YYHhZcN6wybDh4athn8adTMijfSNjIwYo/5Gg4yGGZkazTBaaLTMyMHIxcjbSGm03SgEvm2b RP8ti3Man7kG+My1wH9krjFdMte+ZQE8jjMl/rsT5YCG09sXiHYpwwJ2yHZg6EGF+7L1Dps8 Nro6+bgGHJnU58iuM4fOZF8uPtNcDscijfSqzxDiRy7L197Pzt/pm2BiW4pvtvJEP3iyD/AP 9gvyV6zwWbnSTL5sddKFZ1AQ8yKYBddx+mY/Mbf6vQlU4EIjzXCl4ivgOmKgvo9BEF2mQoaz JvzcV21bIOd++RanNph+fAtH1+Ru9c7EtfyinObEmMo5N8SEQZx1CNs/85eLCxVmVU0b38of 30yIOsmCkwm0e3rh1hI5FFddbq63OT3qBGt21Ck2R5aZklqcm+Hte1hxpEIU7WwTZSkfYDbL dP4pqweObOWmxM22spXr181abh0bs1EB1I/aIugDvPFzUJi0DyD+iQf0xXvBp+JDoaLLYanp hTJk7/yOoC7+m8KE3EY4gOsJF9ytiI4+wYJAHqzDzRqDdQi7gHUUZ+Ym/Sewjnw2//QRLVgH +Iz5xQN+Of8T8Cvr3wF+Of8HwK+s/wT4Jfl6macTLfD0l2WdwOk0elNmnUelHA6/+ej96/ml HHGWHcgA6aG2CmppB3KR4/8XuSjmv0cuAinxnRsUQAPlHVa0+wso76sYynuSBso7CkN5EwEr PR03uvFI3oHeIVtCeCRvFV1yZOmCbSEBQTtY904k74LUrFOsZKCyE0II0H6hPiHewQt3WHs4 rMWo6HMmyX4onYpR0W9e51HRPTpQ0Ys0qOg7u6Ki7wnfwx47mHQYo6Kv06Ki0xEu8WN+kXHs 8hGjzBdkvVRAC3HJjiT/CMUoYr9z2OJRMo4Rc32azP6Av+bB0bD/HY+bXicUkn8UPFvLPRe1 tI0cw2UQYLeJ6BYRlB1yViUD+zeu3rdS/k/VhLTHTzjU1+LbAG4u78pVqskqaUlT/eWwZuoD EkNK7XpSpTwp30WsnPL1+udJAUfl5ws66p8nnxVRH+5F552rk/Fiq9hMwomaZHeAMcbDEvd9 iTFeXpp5+nzq4W3bD7IHC0X7tBjj88SmvtZzJshWHLSP34wxxrfk7NCdK5Zo4O4XikIPHQ7n 4e6XLrVxwnD3B3i4e98ucPcZXeDuQzDcfTMPd9+5o5o2lKHKZ5JU2giSqmxmqNseJNjvvHE3 LojwDzXMgqE7ZzPA7zocWw0LqwWnHsCoh8IXfnR8SHLoid21+66mqgp1K8oK3sABMjh2DNRB /P4Gn7TsxQmvD4c9KouPnc1UhBO+4x0X2Kyys7dyWxKwPsg12CNMFxqrU+gnp0ZyQp8gvx3b 2FWbrZ3mySdYXmh8UlJ1nZW0BNTausHLtdC3Vtr4QA0eU4XB8DJ9j6C2cJfFVOGOs0XB5XJo +CG9vJwtL09/iBWH0P723FJF6bxfUrje8mlm2/3NWe7MaDF8Z8jNgG7E7oT0XblyaPboO25E CMvNGfQtN2/tutBwVwUMgDOQl+0Howpc3eCIM/WF0rQq+D8V1BZ4ER6mA48GJyXJPorrnWsG 2dj6ujkpom1EsQnH95+QVxyw9sZoWgbhk5f9KqMKF2fZVOVnJBw9rAhDQ91jK6IK/f6gAwL9 tvspPLa6eK2XOzrHpl1oiEChsWSMnxkJCjBsBr9NXWRFUoXTNOAl2m8GRe4MWH+NrPmtVj3O XdrwAPo8oArVg67Ts/dlbDojj9oTGn4AxRF7K0T2Ycr4Ehl8b8ypEHu8g7x3bFWs8ra1nS8f v67sOgtPGreHisfvmnJgveI24ZcT8rBEdllsF3/K+6y8Pj8vOw754CnqSV8zuMJUQ7WyoV0v nFDrqk+LStqtJsPnQeJ2sv2sCFwKOxmWoRj6GVPJw9JhkXyw1e3nSNaSw/bFRMsjI/B3FIDL uXsMb/dAyl2y86r6dJ3gzONTUAAVf5x5JIRZhqXicdps8M5c8AacC87Jp3Vmgg/qmgneAzkZ c/+RCf6vaWIJDGszofd77nXdJHPy3bJ2ndWxA44KMFVZo06rEWQ2w6PNQmT8TGivM9vOlcug cWjJh7vynFSPdXHs0Tl0lM3exfNl3Fjr/kPtnWJOuCqeqovNGEkNNCmHA8oBPZ2jLCE1Ilic 7GGXsFg+ZMJUThzKDqiZ+ujymaTsI2jiwxeIrhLBCSEZx2VQVVY4u0Y8gfuDRs5G8DbFcuUK 5+XyWfbFVXXZRZX5mevsDrBhAaHKbTIJ3qy93dLKPIBX4e1OTILbMEMMPoM14a+rDXzls80a vKZTUaQu5QEnd61nFp+Ywn9kXaeQNBjeh7nYrO0+qDgblXO2VF6dvnA8kov7sFgcHR69K1Jx 5tDJLJW8Ln3hEJZLug+zxdBk8OlZ1ut8XZ0U7ls83LY4Iwt1wc0i5zf5uGU21s5sEAHoV4WN UAL1OiuC9C6d2MKGFtHLnM69fJp6LleVuEhbEYQeTYRxs0Vz7S2XWS8ohPJ3GU25BYrwsWIb W9thnEDGmT2d0nQpL60kQbGLMI/LX3tJ/uTxPTgDClc22WSxo4OIvGXpxoNlnOGS2RZW9gVl CokArn0ghGuhF41L/5k6dS39d0IOdVs6Sv+BQLKOqPBiAOItUiLCG2H0jrPFQWVyaPSe1xxl 6Y9gNxkU2N/iNcewFE4fa45t5uyDWXSnwhjIDUcKY+bAAdwch3Whu1wV4KoDUzFN1LmmWmBs ixAeavvejNkxnX58qj9nzI216f/LuMUvoCmcev7ZTVZiwUjopC+/YijS3EUxkXhnG2C8Vx5d IvQVv5v9gZPn04cY1+sMrgkayEQzErWP+hZ9wHOvm4eM/44EvMkNIH49CTR71udrHTq397/Y s/7b1o+X4oQ7PityGHCJ6rmlMPOCpiCBei7UZ6oulN6Qlay6/JPFMndXZ0W8tSjqcGpMhrz4 qOPqJTZLR09gzeajHp9ZML8R87QQeYAvKQslpIPyBgPMldVq3WpBTjNMQ2IWq6Sh/pvncBg0 HvgUL5OBP3K/cCNaf4a92eruwxff/vix+HZLS7FJ375LTIaxEs4DRqmgl0oQWw1nVwvhdHUL PWLirAHf1856ePNuMUSS9mzO1R8UwRZ0VdJMi2mrrM0tbAqqziWXVbCSvchtD+iEEAHc2z0M oNdYrTDlesg48anxmVa4FsdFXIsD6py4hYtxCG7cb2Xuw7JkMSTOzBl2nI01Pzz3qLXuM2L9 ZY8yl6v2j21qOOEhuA+W9elPcN6aJCACUFdsGOrgPTF1JWxbQKiffJ75ipmubCBBpQQ9x5Bj y0ItF8gALtDZkEU+gA4x4ru5a0zT2EMrY1YfdNN9Qrie9MrfemL1g6XFpvvgGrihT1+Cm8nZ idygHQFUJDTA2YZubSPdQfuKA25txu4C7hf1DOFAJa3u3WYsWkC09/pkLJJwL61JwJdf/RtO KeBB1dwPKn7DaEkYP9HJVYufuIb8461045uQlpDXB9BCs1JXf1F/Fvwfgg4J/WVhyuHt34sB LpyaS3ylemkLPCX+WhnU0uEE2IQUHexfDduuKt1BfUDaqVJZ+rZjOChJjkvsgsDsksJKfvNe tGoeMjaNrz6eu/O4qsB64UE2XBm6RSkDhxMukSAwIjr4iPxyYXLpWTa//PS7rEfIKXuNXOn+ XJaX1dZVvvbIxfbO8T7plcPJYE4fQGceTcpks0I2H7OX27s4r2HXhCQ6Z8glQmjcZkkbf7Lc TYI8KCqWwkX1869RT3MB3ni1bQZ+XzmT5cWfqImIiYvnz2S5i7l5YQNmct1lU1XTW+9V5VQf R6ZievK1VXflFecPxp9kvctEW51Xb5khB97sxLhl6edkF1VZVxTUw+3t22hTq/zK0ty8qiPs 401FtmYys4U2U5BHnFDKTQgjjieLQF0WCbaTreLi5pKnedeTC+NPHi/TDScCTYNXmMg42ya1 x7di7kcuHMkFIQIYW72kZNWpuV+AlbknHzseewzjqWvByuhvXZEIJeWePoD3H493fa/oWPwl fauHo72f9wp2cCQNOs5FrDm+FG89aY7txMbGaY7trNnmZYM6rCUvGppwjKiUANKj1eblUL/c vIa6CccBHozpAwM6jzM8gDOJXBUcx20RfSQ4B5gN50IrUT+C68+N8/HycvPFaPlgv6dD5Fr5 IltPpw2s7QrveXNknn8vbroI0E5ofW9ALvVx+DPjmuCMBpIUE5eY5BW7caOHp7NLrPsxVkJ5 vDtf+Lk81Uo4XwyopzNIwD1Rr3KDjWWaci7quXypmp+WRyyuTxeFcY2EBJc0qowunbQDlzQy 87bRlWjOtmjrx3O6/prqo/bKlUGgPKAeZwfsbQD2S+TLnfhN91miuGRVQrG8Mc168fixa2ex lr8VEtTT5rurhoayi0IB3vMPZS01e/70v34nwTgGJ80B+sp1Ms0DQxHP9BHF+HzGN37NaErS ++Mv/ftAEXO9pPB6qGazP5os21WdepWJ9YnevEm2as0zJrR2ZqO8SVN6cW7tUBZ4MQP8+BOC aQzIu553K+1aeEifgJEh47DBzrnbNtJYzDlxb0QgmDBHMVZfLnwMB+5u6dMKhyIfbnMZHKUr 6dgjBdAdXqEfQItDmdHZkSe+2UWEOeyx2bXuCGfeB/ylE63UEeyEImEB4Pbj+ob3lO7J7sDq FuzH7GEBu4TYuMNjM0BOjx4DnJh2D6CM12wvpVcHs9bofTTQnKiF/PYpVcmelyTeSQlgJSUt BdBY1VH5CgSUrHGDx0qOlkDHEmkqX7RSFxetBEWChFr4A5rasUBug2YslJWUkhLYDZp31ooC bZOvkiA0gwSwH6megYYq96tV69Qi08v1ENURgOjvx4AbUNw8vcAkgg0XU7k1cSpVjazp1yIA u9vQ5fdF9gWXPCrkcAT8FwTQF7nHCbnF0edlZ+004oK3NGLBSGTIB1sgmeOQX4SBrr+BZkg3 mYmmEpLf92anowEgsgiQnOx+BCBxXinjBj38Dn7z/v1tKINgZAP2dOBu5Ol8TsO7Ige0l9Nc d3P5lLnHL1ysPPqAvVI+H/lwv8NtpWIJzhvtLT0PyUF/6SxQ6lBX4WgAL6pH0NWcFLLiEZtF nO7EGdeB+t4FQTZ0FWZj9NIpSkuLuTJO8HH1y5r6w4lZCkkRc6O48DqgzTE4QBN6BY2U8/iM oCPiriZAsmatAjolDp8nx8BHcC5A6/GaDEB9aenjE5D8669Ypc5tqhX6AUUQkQCJZ8/hjAhd zrTdkx4LZBNKpkCi5EJMQrpiU4XIfeNKQKfFHT2e5pbguM5181rH+E0nWGA5znayw9Tg0D57 HoW1fJTBLBR46EB/EVxJpHLo53oDt5MA2ED6iGJ9QKVn6bocBQjya1DnNQBrUgB2/qUzSanz 119FSh18BltaBzQABxvctAAHIIO01B7/5H337R8ZwPURFRGg/RXnpH41Av1swJmg7cM5U/Xw EZofsYR4sZqR3CmhS8NzGh/IHyYZWwaxQFsOYodyS6CH3MkVuDjJRpksG7l6xZ69mxUSdinh vM3DdYkcRPMBlRIFVKuZS8Q9xOcCQSz8WRgLMJK++pU74H7eWQtf1AEaUpyuCDxT4nNmwHMP chtBPDRiQAv1cm+biKYaze62X2oBcIGycmYNnFJufgkaloPD/AGe9Gq8desQDHgI93oCUhhw nRtsytFcv0WrYo6vVYC2X6GMBBEKM6R5tkS5uMhWuINnonBC9ZOI324FWOFgneWyxkJuA+qQ 8LqJAzNzgwrlAJcvhyHuyEEC8W6wrAoWu4Nm8sYDwHUXVSDTkKi+AjalshIx1diMC6Jj9LQU /LW4T7/B3AgW4FzaLDGns4MzWgS4Yq57KawvgrWlUqQqcaXo3HJczRHcTK58mpPp63NEIXkk iG8RVgJFursIBDqz1NNA58ANzjKAyx/BBhWsQ21/coNjqmHB7Z3uUrSQX5NgFDchQBdOgTb0 TPBNGBHiEey2WSaZhhHrr4qA2p2v4gYQU+HYOpB35mNCE1inbFjhBi66X5QCfLITcAOU1XB8 OexXCQTZ9+Gs29DsvhBwGWrkq3MGr/GAK2H/MphUIwBibhG3R7QKLhWDAC9cCTs3KQK56eLf 4ay2k2jhwEz1Q9FFsUR4w/ABMEReFNiPNd//Axr4eZkKZW5kc3RyZWFtCmVuZG9iagoxMjYg MCBvYmoKPDwvVHlwZS9TaWcvRmlsdGVyL0Fkb2JlLlBQS0xpdGUvU3ViRmlsdGVyL2FkYmUu cGtjczcuZGV0YWNoZWQvUmVmZXJlbmNlWzw8L1R5cGUvU2lnUmVmL1RyYW5zZm9ybU1ldGhv ZC9Eb2NNRFAvRGlnZXN0TWV0aG9kL01ENS9UcmFuc2Zvcm1QYXJhbXM8PC9QIDEvVi8xLjIv VHlwZS9UcmFuc2Zvcm1QYXJhbXM+Pi9EaWdlc3RWYWx1ZTw5MjZjMjk5Zjc3YmU3NThhYzg1 NGVhMDdjZjI1ZDM4YT4vRGlnZXN0TG9jYXRpb25bMTAzNTUyIDM0XSAgICAgICAgICAgIC9E YXRhIDg0IDAgUj4+PDwvVHlwZS9TaWdSZWYvVHJhbnNmb3JtTWV0aG9kL0ZpZWxkTURQL1Ry YW5zZm9ybVBhcmFtczw8L0FjdGlvbi9JbmNsdWRlL1YvMS4yL1R5cGUvVHJhbnNmb3JtUGFy YW1zL0ZpZWxkc1soVVNHUE9TaWduYXR1cmUpXT4+L0RpZ2VzdE1ldGhvZC9NRDUvRGlnZXN0 VmFsdWU8ZGYwMmZhZjczNDA4M2E2ODhmNjE0MGQ0MmVhZjg2NWQ+L0RpZ2VzdExvY2F0aW9u WzEwMzc5MyAzNF0gICAgICAgICAgICAvRGF0YSA4NCAwIFI+Pl0vTmFtZShTdXBlcmludGVu ZGVudCBvZiBEb2N1bWVudHMpL0xvY2F0aW9uKFVTIEdQTywgV2FzaGluZ3RvbiwgREMgMjA0 MDEpL1JlYXNvbihHUE8gYXR0ZXN0cyB0aGF0IHRoaXMgZG9jdW1lbnQgaGFzIG5vdCBiZWVu IGFsdGVyZWQgc2luY2UgaXQgd2FzIGRpc3NlbWluYXRlZCBieSBHUE8pL0NvbnRhY3RJbmZv KFN1cGVyaW50ZW5kZW50IG9mIERvY3VtZW50cykvTShEOjIwMTkwMTI4MTg1MDE1LTA1JzAw JykvQ29udGVudHM8MzA4MDA2MDkyYTg2NDg4NmY3MGQwMTA3MDJhMDgwMzA4MDAyMDEwMTMx MGYzMDBkMDYwOTYwODY0ODAxNjUwMzA0MDIwMTA1MDAzMDgwMDYwOTJhODY0ODg2ZjcwZDAx MDcwMTAwMDBhMDgyMTY2MjMwODIwNGExMzA4MjAzODlhMDAzMDIwMTAyMDIwNDNlMWNiZDI4 MzAwZDA2MDkyYTg2NDg4NmY3MGQwMTAxMDUwNTAwMzA2OTMxMGIzMDA5MDYwMzU1MDQwNjEz MDI1NTUzMzEyMzMwMjEwNjAzNTUwNDBhMTMxYTQxNjQ2ZjYyNjUyMDUzNzk3Mzc0NjU2ZDcz MjA0OTZlNjM2ZjcyNzA2ZjcyNjE3NDY1NjQzMTFkMzAxYjA2MDM1NTA0MGIxMzE0NDE2NDZm NjI2NTIwNTQ3Mjc1NzM3NDIwNTM2NTcyNzY2OTYzNjU3MzMxMTYzMDE0MDYwMzU1MDQwMzEz MGQ0MTY0NmY2MjY1MjA1MjZmNmY3NDIwNDM0MTMwMWUxNzBkMzAzMzMwMzEzMDM4MzIzMzMz MzczMjMzNWExNzBkMzIzMzMwMzEzMDM5MzAzMDMwMzczMjMzNWEzMDY5MzEwYjMwMDkwNjAz NTUwNDA2MTMwMjU1NTMzMTIzMzAyMTA2MDM1NTA0MGExMzFhNDE2NDZmNjI2NTIwNTM3OTcz NzQ2NTZkNzMyMDQ5NmU2MzZmNzI3MDZmNzI2MTc0NjU2NDMxMWQzMDFiMDYwMzU1MDQwYjEz MTQ0MTY0NmY2MjY1MjA1NDcyNzU3Mzc0MjA1MzY1NzI3NjY5NjM2NTczMzExNjMwMTQwNjAz NTUwNDAzMTMwZDQxNjQ2ZjYyNjUyMDUyNmY2Zjc0MjA0MzQxMzA4MjAxMjIzMDBkMDYwOTJh ODY0ODg2ZjcwZDAxMDEwMTA1MDAwMzgyMDEwZjAwMzA4MjAxMGEwMjgyMDEwMTAwY2M0ZjU0 ODRmN2E3YTJlNzMzNTM3ZjNmOWMxMjg4NmIyYzk5NDc2NzdlMGYxZWI5YWQxNDg4ZjljMzEw ZDgxZGYwZjBkNTlmNjkwYTJmNTkzNWIwY2M2Y2E5NGM5YzE1YTA5ZmNlMjBiZmEwY2Y1NGUy ZTAyMDY2NDUzZjM5ODYzODdlOWNjNDhlMDcyMmM2MjRmNjAxMTJiMDM1ZGY1NWVhNjk5MGIw ZGI4NTM3MWVlMjRlMDdiMjQyYTE2YTEzNjlhMDY2ZWE4MDkxMTE1OTJhOWIwODc5NWEyMDQ0 MmRjOWJkNzMzODhiM2MyZmUwNDMxYjVkYjMwYmYwYWYzNTFhMjlmZWVmYTY5MmRkODE0Yzlk M2Q1OThlYWQzMTNjNDA3ZTliOTEzNjA2ZmNlMjVjOGRkMThkMjZkNTVjNDVjZmFmNjUzZmIx YWFkMjYyOTZmNGE4MzhlYWJhNjA0MmY0ZjQxYzRhMzUxNWNlZjg0ZTIyNTYwZjk1MThjNWY4 OTY5ZjlmZmJiMGI3NzgyNWU5ODA2YmJkZDYwYWYwYzY3NDk0OWRmMzBmNTBkYjlhNzdjZTRi NzA4MzIzOGRhMGNhNzgyMDQ0NWMzYzU0NjRmMWVhYTIzMDE5OWZlYTRjMDY0ZDA2Nzg0YjVl OTJkZjIyZDJjOTY3YjM3YWQyMDEwMjAzMDEwMDAxYTM4MjAxNGYzMDgyMDE0YjMwMTEwNjA5 NjA4NjQ4MDE4NmY4NDIwMTAxMDQwNDAzMDIwMDA3MzA4MThlMDYwMzU1MWQxZjA0ODE4NjMw ODE4MzMwODE4MGEwN2VhMDdjYTQ3YTMwNzgzMTBiMzAwOTA2MDM1NTA0MDYxMzAyNTU1MzMx MjMzMDIxMDYwMzU1MDQwYTEzMWE0MTY0NmY2MjY1MjA1Mzc5NzM3NDY1NmQ3MzIwNDk2ZTYz NmY3MjcwNmY3MjYxNzQ2NTY0MzExZDMwMWIwNjAzNTUwNDBiMTMxNDQxNjQ2ZjYyNjUyMDU0 NzI3NTczNzQyMDUzNjU3Mjc2Njk2MzY1NzMzMTE2MzAxNDA2MDM1NTA0MDMxMzBkNDE2NDZm NjI2NTIwNTI2ZjZmNzQyMDQzNDEzMTBkMzAwYjA2MDM1NTA0MDMxMzA0NDM1MjRjMzEzMDJi MDYwMzU1MWQxMDA0MjQzMDIyODAwZjMyMzAzMDMzMzAzMTMwMzgzMjMzMzMzNzMyMzM1YTgx MGYzMjMwMzIzMzMwMzEzMDM5MzAzMDMwMzczMjMzNWEzMDBiMDYwMzU1MWQwZjA0MDQwMzAy MDEwNjMwMWYwNjAzNTUxZDIzMDQxODMwMTY4MDE0ODJiNzM4NGE5M2FhOWIxMGVmODBiYmQ5 NTRlMmYxMGZmYjgwOWNkZTMwMWQwNjAzNTUxZDBlMDQxNjA0MTQ4MmI3Mzg0YTkzYWE5YjEw ZWY4MGJiZDk1NGUyZjEwZmZiODA5Y2RlMzAwYzA2MDM1NTFkMTMwNDA1MzAwMzAxMDFmZjMw MWQwNjA5MmE4NjQ4ODZmNjdkMDc0MTAwMDQxMDMwMGUxYjA4NTYzNjJlMzAzYTM0MmUzMDAz MDIwNDkwMzAwZDA2MDkyYTg2NDg4NmY3MGQwMTAxMDUwNTAwMDM4MjAxMDEwMDMyZGE5ZjQz NzVjMWZhNmZjOTZmZGJhYjFkMzYzNzNlYmM2MTE5MzZiNzAyM2MxZDIzNTk5ODZjOWVlZTRk ODVlNzU0YzgyMDFmYTdkNGJiZTJiZjAwNzc3ZDI0NmI3MDJmNWNjMTNhNzY0OWI1ZDNlMDIz ODQyYTcxNmEyMmYzYzEyNzI5OTgxNWY2MzU5MGU0MDQ0Y2MzOGRiYzlmNjExY2U3ZmQyNDhj ZDE0NDQzOGMxNmJhOWI0ZGE1ZDQzNTJmYmMxMWNlYmRmNzUxMzc4ZDlmOTBlNDE0ZjExODNm YmVlOTU5MTIzNWY5MzM5MmYzOWVlMGQ1NmI5YTcxOWI5OTRiYzg3MWMzZTFiMTYxMDljNGU1 ZmE5MWYwNDIzYTM3N2QzNGY5NzJlOGNkYWE2MjFjMjFlOWQ1ZjQ4MjEwZTM3YjA1YjYyZDY4 NTYwYjdlN2U5MjJjNmY0ZDcyODIwY2VkNTY3NGIyOWRiOWFiMmQyYjFkMTA1ZmRiMjc3NTcw OGZmZDFkZDdlMjAyYTA3OWU1MWNlNWZmYWY2NDQwNTEyZDllOWI0N2RiNDJhNTdjMWZjMmE2 NDhiMGQ3YmU5MjY5NGRhNGY2Mjk1N2M1NzgxMTE4ZGM4NzUxY2ExM2IyNjI5ZDRmMmIzMmJk MzFhNWMxZmE1MmFiMDU4OGM4MzA4MjA1MjQzMDgyMDQwY2EwMDMwMjAxMDIwMjEwMDE2MzUz NzQzMGFmODkxMDg0MzZkZmIyZDQ1ZDYzNWMzMDBkMDYwOTJhODY0ODg2ZjcwZDAxMDEwNTA1 MDAzMDY5MzEwYjMwMDkwNjAzNTUwNDA2MTMwMjU1NTMzMTIzMzAyMTA2MDM1NTA0MGExMzFh NDE2NDZmNjI2NTIwNTM3OTczNzQ2NTZkNzMyMDQ5NmU2MzZmNzI3MDZmNzI2MTc0NjU2NDMx MWQzMDFiMDYwMzU1MDQwYjEzMTQ0MTY0NmY2MjY1MjA1NDcyNzU3Mzc0MjA1MzY1NzI3NjY5 NjM2NTczMzExNjMwMTQwNjAzNTUwNDAzMTMwZDQxNjQ2ZjYyNjUyMDUyNmY2Zjc0MjA0MzQx MzAxZTE3MGQzMTMwMzAzOTMxMzczMDMwMzAzMDMwMzA1YTE3MGQzMjMxMzAzOTMxMzYzMjMz MzUzOTM1Mzk1YTMwNzYzMTBiMzAwOTA2MDM1NTA0MDYxMzAyNTU1MzMxMTczMDE1MDYwMzU1 MDQwYTEzMGU1NjY1NzI2OTUzNjk2NzZlMmMyMDQ5NmU2MzJlMzExZDMwMWIwNjAzNTUwNDBi MTMxNDQxNjQ2ZjYyNjUyMDU0NzI3NTczNzQyMDUzNjU3Mjc2Njk2MzY1NzMzMTJmMzAyZDA2 MDM1NTA0MDMxMzI2NTY2NTcyNjk1MzY5Njc2ZTIwNDk2ZTc0NjU3MjZkNjU2NDY5NjE3NDY1 MjA0MzQxMjA2NjZmNzIyMDQxNjQ2ZjYyNjUyMDQzNDQ1MzMwODIwMTIyMzAwZDA2MDkyYTg2 NDg4NmY3MGQwMTAxMDEwNTAwMDM4MjAxMGYwMDMwODIwMTBhMDI4MjAxMDEwMGE0ZTkxMDQx YmIwZTliODAxMTJiYWU1NjEzYmYzODAyZTYzODQ1M2FmZTNmNTFjOTRjNjZhNDAxZjYxM2Vi YTVmMjUzMjQxMWZiYjY2NzZkNmIxMzdlZjc1NTk4ODYzYWRjYmYwZjEzNTMyMDFmMGU0MjQ3 ZDZkMDJhOWQzMWY1MTY4OGJjNWRlYjNmNTE0YjM5NjFmY2JhY2I5Y2U2ODViNjgzN2Q4OTg2 YjdkN2ZkZDU0OGRkODFlNDAxYTVmZGQ1ZWJhMmVmYWY2NmQ1MmNlYzAwYTI0ZDNkYTc2Mzkx ODY3MTkyMTAwNWUxNTkzMzllZGI1MTg0ZDM5MmY4MjFiNDM4NjM1Mzk4MmY3NWZhODYzZDFk MjEzMWIyNzFmNmFmNDk3NDVkOTVkOTM4ODMxMTNmZjBkNGE3ODJlNjJkYzRiZDFkMDk4NjU2 MDg0NWI2MGY1NTc4YmQ4YTM3NGMwYjc2YzI2MzUzOTE4NDQ0MTJkZWFkZmZlODQyNmM3NDBk Mzk0ZTllMjEwNTE5ZGNmYTZmMjUzYzNhMjRhMzY4MzM1OTk0NTA4NTBhNDI0MGMxOWY3NzM3 YjZiNDYwMzg3N2I4YmRlZDU4MmYwNTFkOGFkNmMwNDA1OTA0OTY4ZDY2NWU2Y2I3ZWFlZGRi NmJmYTQ1MWIzN2FlOWMwNzcxMDIwMzAxMDAwMWEzODIwMWI5MzA4MjAxYjUzMDgxZTQwNjAz NTUxZDIwMDQ4MWRjMzA4MWQ5MzA4MWQ2MDYwOTJhODY0ODg2ZjcyZjAxMDIwMTMwODFjODMw MzYwNjA4MmIwNjAxMDUwNTA3MDIwMTE2MmE2ODc0NzQ3MDczM2EyZjJmNzc3Nzc3MmU2MTY0 NmY2MjY1MmU2MzZmNmQyZjZkNjk3MzYzMmY3MDZiNjkyZjYzNjQ3MzVmNjM3MDJlNjg3NDZk NmMzMDgxOGQwNjA4MmIwNjAxMDUwNTA3MDIwMjMwODE4MDFhN2U1NDY4NjUyMDYzNjU3Mjc0 Njk2NjY5NjM2MTc0NjUyMDY4NjE3MzIwNjI2NTY1NmUyMDY5NzM3Mzc1NjU2NDIwNjk2ZTIw NjM2ZjZlNjY2ZjcyNmQ2MTZlNjM2NTIwNzc2OTc0NjgyMDc0Njg2NTIwNDM2NTcyNzQ2OTY2 Njk2MzYxNzQ2NTIwNTA2ZjZjNjk2Mzc5MjA2NjZmNzU2ZTY0MjA2MTc0MjA2ODc0NzQ3MDcz M2EyZjJmNzc3Nzc3MmU2MTY0NmY2MjY1MmU2MzZmNmQyZjZkNjk3MzYzMmY3MDZiNjkyZjYz NjQ3MzVmNjM3MDJlNjg3NDZkNmMzMDJkMDYwMzU1MWQxZjA0MjYzMDI0MzAyMmEwMjBhMDFl ODYxYzY4NzQ3NDcwM2EyZjJmNjM3MjZjMmU2MTY0NmY2MjY1MmU2MzZmNmQyZjYzNjQ3MzJl NjM3MjZjMzAxNDA2MDM1NTFkMjUwNDBkMzAwYjA2MDkyYTg2NDg4NmY3MmYwMTAxMDUzMDBi MDYwMzU1MWQwZjA0MDQwMzAyMDEwNjMwMjYwNjAzNTUxZDExMDQxZjMwMWRhNDFiMzAxOTMx MTczMDE1MDYwMzU1MDQwMzEzMGU0ZDUwNGI0OTJkMzIzMDM0MzgyZDMxMmQzNzMwMzAxZDA2 MDM1NTFkMGUwNDE2MDQxNGU1ZjkwNjljZTQ0NmY3NGU0OGYzNzhjM2UwYzZlNTllMWRhZWUy M2UzMDFmMDYwMzU1MWQyMzA0MTgzMDE2ODAxNDgyYjczODRhOTNhYTliMTBlZjgwYmJkOTU0 ZTJmMTBmZmI4MDljZGUzMDEyMDYwMzU1MWQxMzAxMDFmZjA0MDgzMDA2MDEwMWZmMDIwMTAx MzAwZDA2MDkyYTg2NDg4NmY3MGQwMTAxMDUwNTAwMDM4MjAxMDEwMDYxYTMwOWE2NjkzMjIx M2FlMWVkYTA3ODlkMzk4ZTYxYzIyOTEyZGNhYTMwNDQ5N2JkNjRhMWYwYTUwYzZlNDY4OTM4 MWNjM2I3NDYzOWVkYzUwYzE3Y2YzMTVmZjcxMTYxNDFjOWRmYzQzNmI1YTNkOTAzZTk4NTlk NjNiYmRkYzExZDcyNmFjZjdiMjQ3MDM1MDg1OWFmMmEwMzQ1NWQ3YmRiOGY0OTI1MjBhOTUy ZjQ2OGZlNDMzMTIzNDM3YWExMDkwMjdlNzM0N2Q4YmZiNjcxNmQ0NTJhZmRjZmY2NWFmYzdi OTNjYzJiNTcyNGQxYzcwOGZkN2VkNDkzYjAzM2Y5OGE5MDVjYTk1Njg4Y2VjZDQ2NmI4ZWRj NTg2ZTNkYTRkZmUzYzg5NmUxMjVhMmY2NTc5M2ZkN2JlNjYzZjNlMjlmMzU1ZGI1YWM2OWNk MDUzZTYwMWFjYjJhOWIzYzFlNDQwYjBlNzQyYTFlMTIyMGE5ZGE0ZDA0NTFlMGJlMGQ1ZTdh Njg1MzEzZWM2YTA4YmQyYWIxMWE5Zjc4OTYyNDFkN2UzMzFiNTc4NmY4ODdiMWViNWNhZDQ5 NDEzNWIzMjI4ZmFhNDMyOTUwNDYxOTNhYjRjNzg1MTYwNTE2NGZhNDg3ZDM1ODIwNzQ1MDUw MWE3OWU5MjRjZjM1MzA4MjA1M2MzMDgyMDQyNGEwMDMwMjAxMDIwMjEwMjFmZWZlM2IxMjQ4 YTRhNGJiMGFkYzcxNmNlYWZiODAzMDBkMDYwOTJhODY0ODg2ZjcwZDAxMDEwNTA1MDAzMDc2 MzEwYjMwMDkwNjAzNTUwNDA2MTMwMjU1NTMzMTE3MzAxNTA2MDM1NTA0MGExMzBlNTY2NTcy Njk1MzY5Njc2ZTJjMjA0OTZlNjMyZTMxMWQzMDFiMDYwMzU1MDQwYjEzMTQ0MTY0NmY2MjY1 MjA1NDcyNzU3Mzc0MjA1MzY1NzI3NjY5NjM2NTczMzEyZjMwMmQwNjAzNTUwNDAzMTMyNjU2 NjU3MjY5NTM2OTY3NmUyMDQ5NmU3NDY1NzI2ZDY1NjQ2OTYxNzQ2NTIwNDM0MTIwNjY2Zjcy MjA0MTY0NmY2MjY1MjA0MzQ0NTMzMDFlMTcwZDMxMzEzMDMzMzAzMzMwMzAzMDMwMzAzMDVh MTcwZDMyMzEzMDM5MzEzNTMyMzMzNTM5MzUzOTVhMzA2ZDMxMGIzMDA5MDYwMzU1MDQwNjEz MDI1NTUzMzExZDMwMWIwNjAzNTUwNDBhMTMxNDUzNzk2ZDYxNmU3NDY1NjMyMDQzNmY3Mjcw NmY3MjYxNzQ2OTZmNmUzMTE0MzAxMjA2MDM1NTA0MGIxMzBiNDM0NDUzMjA1MzY5Njc2ZTY5 NmU2NzMxMjkzMDI3MDYwMzU1MDQwMzEzMjA1Mzc5NmQ2MTZlNzQ2NTYzMjA1MzY4NjE3MjY1 NjQyMDQzNDEyMDY2NmY3MjIwNDE2NDZmNjI2NTIwNDM0NDUzMzA4MjAxMjIzMDBkMDYwOTJh ODY0ODg2ZjcwZDAxMDEwMTA1MDAwMzgyMDEwZjAwMzA4MjAxMGEwMjgyMDEwMTAwOWQ3NTIy NjU2YzVjYTJlNTM5NmNhMGUxYjE4NDBkYWUxNWYzYzVmMGU5MTE5MTAwNjQ5YTNkN2RhZWMx ZGQxNTBkMDA0NWVmOGZlMTI1NzE4NmY2MjdmMzIyMzc3ZWNiMTFhN2VjZGMyMmI0YmI3ZjMz YjllNzM4ZDY0ZmFjMWY4MmEzMjA5MmZjNGEwZWJjNWViYTQ4ODA3NzNmNDhhNjM1ZDAyZjFl MGNiNmU2M2Q5MDEyNDc5ZGM0YTExMDkyN2M1ZTI4MTgwMjI2OWQ2NmZkZDI4MTdhNDI5Mjli Nzc4NzE0YTg5ZmU0ZDc2YWJjNmE4M2Q2NGIzOWRmZmQ1YWYwZWI5MDVkNzU2YjMzOTEyM2Nm MmNhMmE5ZWRkZjE2YjAzMWMxYTg1YWNmZDU3NTQ0NzZiYTE0N2Y3OGUzZDI1NjgyZWYyZjg2 OGRjY2M3ODBmOGU0NmQ0ZjEyNDQwNWQzZTFhOWNiNTllYzM4ZmZiYzQ1NDQ2NTBhMTczMTli ZTJlODgyZTRjYmE5MWRjM2VjNWYyZDI4NjZjM2Q3ZGMxMmQ1NzczMTMxNDgwMDk5YWNiMjVl YTY5YzQ3YzU4ZGRmZjZjNTY3YWZmMmIxNDJlYjllOTQ0MTE0NzFlZmQ5YzAxMWI4ZjIzMGZi MjE5YzBlMThlMDUzMjMwYzJkNzUwMjAzMDEwMDAxYTM4MjAxY2QzMDgyMDFjOTMwMTIwNjAz NTUxZDEzMDEwMWZmMDQwODMwMDYwMTAxZmYwMjAxMDAzMDgxZTQwNjAzNTUxZDIwMDQ4MWRj MzA4MWQ5MzA4MWQ2MDYwOTJhODY0ODg2ZjcyZjAxMDIwMTMwODFjODMwMzYwNjA4MmIwNjAx MDUwNTA3MDIwMTE2MmE2ODc0NzQ3MDczM2EyZjJmNzc3Nzc3MmU2MTY0NmY2MjY1MmU2MzZm NmQyZjZkNjk3MzYzMmY3MDZiNjkyZjYzNjQ3MzVmNjM3MDJlNjg3NDZkNmMzMDgxOGQwNjA4 MmIwNjAxMDUwNTA3MDIwMjMwODE4MDFhN2U1NDY4NjUyMDYzNjU3Mjc0Njk2NjY5NjM2MTc0 NjUyMDY4NjE3MzIwNjI2NTY1NmUyMDY5NzM3Mzc1NjU2NDIwNjk2ZTIwNjM2ZjZlNjY2Zjcy NmQ2MTZlNjM2NTIwNzc2OTc0NjgyMDc0Njg2NTIwNDM2NTcyNzQ2OTY2Njk2MzYxNzQ2NTIw NTA2ZjZjNjk2Mzc5MjA2NjZmNzU2ZTY0MjA2MTc0MjA2ODc0NzQ3MDczM2EyZjJmNzc3Nzc3 MmU2MTY0NmY2MjY1MmU2MzZmNmQyZjZkNjk3MzYzMmY3MDZiNjkyZjYzNjQ3MzVmNjM3MDJl Njg3NDZkNmMzMDNlMDYwMzU1MWQxZjA0MzczMDM1MzAzM2EwMzFhMDJmODYyZDY4NzQ3NDcw M2EyZjJmNjM3MjZjMmU3NjY1NzI2OTczNjk2NzZlMmU2MzZmNmQyZjQzNDQ1MzQ5NmU3NDY1 NzI2ZDY1NjQ2OTYxNzQ2NTQzNDEyZTYzNzI2YzMwMTQwNjAzNTUxZDI1MDQwZDMwMGIwNjA5 MmE4NjQ4ODZmNzJmMDEwMTA1MzAwYjA2MDM1NTFkMGYwNDA0MDMwMjAxMDYzMDI5MDYwMzU1 MWQxMTA0MjIzMDIwYTQxZTMwMWMzMTFhMzAxODA2MDM1NTA0MDMxMzExNTY2NTcyNjk1MzY5 Njc2ZTRkNTA0YjQ5MmQzMjJkMzUzNzMwMWQwNjAzNTUxZDBlMDQxNjA0MTQwMzY5MmJhYjkx YTYxOTVmNDU5OWE3Y2I0NTVhMzAzNDY2ZGYwYWQxMzAxZjA2MDM1NTFkMjMwNDE4MzAxNjgw MTRlNWY5MDY5Y2U0NDZmNzRlNDhmMzc4YzNlMGM2ZTU5ZTFkYWVlMjNlMzAwZDA2MDkyYTg2 NDg4NmY3MGQwMTAxMDUwNTAwMDM4MjAxMDEwMDdlNTUzNDgxMGJiY2Y5NDE4NTkyY2QwOTJh YWJjNDQ3ZDJiZjhiOTEwNTJlYWMzYjg2ZjAxNjkzYzBiOWY1MWE0NTg3NDQ4NzE4ZmU3N2Ex MjQyMjM2N2YxYTgxZDAzNzY0MjU5ZTJiNzQzMWE5OTYyNGZkN2FhOTk4YWFkZWU2ZWEwNDRh NzI4ZjA1NzI1YTExNjUxZTEyMWY1ZjlmYjhiYThhYzAxMThjM2Y2M2I5ODk0MmVhNjIxZDk1 ZDBmNzcwNmU5NzYyMTYwZWU5ZDYzZDgxYzgwYjA5MWE0NzFhMTYzNGUzYTJjYzZkYWRiNDE0 N2I2MWJiZmQ4MzQ1NTVjMTE4ZmJkNjk1ZDdmZmM2YWNlZjk2NmViZTA1MmIxNDYyMzY2NDc4 ZjQ4Yjk4ZGFjYTZjNTY1MjVmN2VkMGI0ZGVlYzVkMjg0OTI5Njk1NjkyYjViOTJmYjE1MGJh ZTBkM2VlOTcxYzY4Mjc3NDRjYjdmMjVjOTdhMmM1ODg5ZDhhMTI4NzU1YTE4Y2I2NzUzNzQ5 MjFiZTAxNzAyZGM2YTA1YjExMGFmNTdlNGM2YWEzODkwN2JmOTViM2Y2ZWRmZTkwYzA0Nzk4 MzI5NmQ1MWUzMDlmZjI0MGM1M2Y1OGI0OWQ3YWIzNGQzNmE0NzJhZGJjZjAyNzY1N2RiMjcw MzA4MjA3NTEzMDgyMDYzOWEwMDMwMjAxMDIwMjEwNGQ1NzI0MDc4YjMzOWMzOWYyOTY1ZTMz NmQwZmE4MGMzMDBkMDYwOTJhODY0ODg2ZjcwZDAxMDEwYjA1MDAzMDZkMzEwYjMwMDkwNjAz NTUwNDA2MTMwMjU1NTMzMTFkMzAxYjA2MDM1NTA0MGExMzE0NTM3OTZkNjE2ZTc0NjU2MzIw NDM2ZjcyNzA2ZjcyNjE3NDY5NmY2ZTMxMTQzMDEyMDYwMzU1MDQwYjEzMGI0MzQ0NTMyMDUz Njk2NzZlNjk2ZTY3MzEyOTMwMjcwNjAzNTUwNDAzMTMyMDUzNzk2ZDYxNmU3NDY1NjMyMDUz Njg2MTcyNjU2NDIwNDM0MTIwNjY2ZjcyMjA0MTY0NmY2MjY1MjA0MzQ0NTMzMDFlMTcwZDMx MzczMDMxMzEzMDMwMzAzMDMwMzAzMDVhMTcwZDMyMzAzMDMxMzEzMDMyMzMzNTM5MzUzOTVh MzA4MTk0MzEyNDMwMjIwNjAzNTUwNDAzMGMxYjUzNzU3MDY1NzI2OTZlNzQ2NTZlNjQ2NTZl NzQyMDZmNjYyMDQ0NmY2Mzc1NmQ2NTZlNzQ3MzMxMjEzMDFmMDYwOTJhODY0ODg2ZjcwZDAx MDkwMTE2MTI3MDZiNjk3Mzc1NzA3MDZmNzI3NDQwNjc3MDZmMmU2NzZmNzYzMTE1MzAxMzA2 MDM1NTA0MGIwYzBjNDE0NDRmNDI0NTI4NzIyOTJkNDM0NDUzMzEwYjMwMDkwNjAzNTUwNDA2 MTMwMjU1NTMzMTI1MzAyMzA2MDM1NTA0MGEwYzFjNDc2Zjc2NjU3MjZlNmQ2NTZlNzQyMDUw NzU2MjZjNjk3MzY4Njk2ZTY3MjA0ZjY2NjY2OTYzNjUzMDgyMDEyMjMwMGQwNjA5MmE4NjQ4 ODZmNzBkMDEwMTAxMDUwMDAzODIwMTBmMDAzMDgyMDEwYTAyODIwMTAxMDBiYmM1M2QxNjFl Yjg3Mzk0YTJmN2NmNDI3NmY3Nzg0NjJlNWYwY2NlOTA5MWQ2NzdjY2IzZGQ4MDk5OGI1ZTM1 ZTlkMTNiM2I3OWQ0OGMwNTJiMDU2MDg0YWQyZTc1MDY3NjI5OGI1MzQwZmE3NWEzY2IzY2E4 NzI1ZTIwMDEzMWI2ZWE2ZWI5NmEwMGE4ZmFkMmJhYWRlM2ZlYjJiODQ1MjQwNjU4NzIyMzg2 NmM2YmM5YzZmOTYyNDhhMTM4NGVmMTg0YWYzM2IyN2YxNWE4MTFkZDdhNjJjYmE5ODk1NDYz MTk5MTA4ZWIxZTU1ZjViOWY3MGJlMzdiM2U0YTcyYzU1ODZhODAzNDcyYzY1ZThkZjAwMjgz NTIxZGVlZThmNjUxOTM1Zjg4MmIyYjgxMzE4YTAzZTA5M2RjN2FiZGQ0OWVlMzgxNTNiZGY1 OTY1MTA2YTUxNmI5MGNiM2Q4ZDcyNThhY2Y0ZjA3NmM1ZmEwNjllYTI0MzFiNGIyYjYxNTkz MGU5NjUzYjgyZjNlOWQwY2ZiYjhkNDhjNzZmYTRiNWY3OGZkYWE4Y2U2NWQwMTBhMDAwYzFi MGQ0MDQzMGM3ZTgwZDZhYjk5ZDdjNWI2N2NiNzM4NjE0ZWI0MjA0OWVjMWVmMzJiOWEyZTI2 OWJkODNlNmExY2ZlMDFhOTAyMDMwMTAwMDFhMzgyMDNjMzMwODIwM2JmMzAwYzA2MDM1NTFk MTMwMTAxZmYwNDAyMzAwMDMwMGIwNjAzNTUxZDBmMDQwNDAzMDIwNmMwMzAxNDA2MDM1NTFk MjUwNDBkMzAwYjA2MDkyYTg2NDg4NmY3MmYwMTAxMDUzMDFkMDYwMzU1MWQwZTA0MTYwNDE0 MDRjNTMwMzk2NGJjN2U4MTlmYTkzNjgxNGI2ZDBmZDRlNDk4YjlhNzMwMWYwNjAzNTUxZDIz MDQxODMwMTY4MDE0MDM2OTJiYWI5MWE2MTk1ZjQ1OTlhN2NiNDU1YTMwMzQ2NmRmMGFkMTMw ODFmZDA2MDgyYjA2MDEwNTA1MDcwMTAxMDQ4MWYwMzA4MWVkMzAyNzA2MDgyYjA2MDEwNTA1 MDczMDAxODYxYjY4NzQ3NDcwM2EyZjJmNzA2YjY5MmQ2ZjYzNzM3MDJlNzM3OTZkNjE3NTc0 NjgyZTYzNmY2ZDMwODFjMTA2MDgyYjA2MDEwNTA1MDczMDAyODY4MWI0NmM2NDYxNzAzYTJm MmY2NDY5NzI2NTYzNzQ2ZjcyNzkyZTczNzk2ZDYxNzU3NDY4MmU2MzZmNmQyZjQzNGUyNTMy MzAyNTMzNDQyNTMyMzA1Mzc5NmQ2MTZlNzQ2NTYzMjUzMjMwNTM2ODYxNzI2NTY0MjUzMjMw NDM0MTI1MzIzMDY2NmY3MjI1MzIzMDQxNjQ2ZjYyNjUyNTMyMzA0MzQ0NTMyNTMyNDM0ZjU1 MjUzMjMwMjUzMzQ0MjUzMjMwNDM0NDUzMjUzMjMwNTM2OTY3NmU2OTZlNjcyNTMyNDM0ZjI1 MzIzMDI1MzM0NDI1MzIzMDUzNzk2ZDYxNmU3NDY1NjMyNTMyMzA0MzZmNzI3MDZmNzI2MTc0 Njk2ZjZlMjUzMjQzNDMyNTMyMzAyNTMzNDQyNTMyMzA1NTUzM2Y2MzQxNDM2NTcyNzQ2OTY2 Njk2MzYxNzQ2NTNiNjI2OTZlNjE3Mjc5MzA1ZDA2MDM1NTFkMWYwNDU2MzA1NDMwNTJhMDUw YTA0ZTg2NGM2ODc0NzQ3MDNhMmYyZjcwNmI2OTJkNjM3MjZjMmU3Mzc5NmQ2MTc1NzQ2ODJl NjM2ZjZkMmY2MzYxNWYzNTM3NjE2NjMwMzczMDY0Mzk2NTM3MzgzNjM3NjUzMzYzMzUzNDM3 NjYzMTY2NjUzMjM1MzMzMDYxNjQ2NTM2MmY0YzYxNzQ2NTczNzQ0MzUyNGMyZTYzNzI2YzMw ODIwMTJmMDYwMzU1MWQyMDAxMDFmZjA0ODIwMTIzMzA4MjAxMWYzMDgyMDExYjA2MDkyYTg2 NDg4NmY3MmYwMTAyMDEzMDgyMDEwYzMwNDYwNjA4MmIwNjAxMDUwNTA3MDIwMTE2M2E2ODc0 NzQ3MDNhMmYyZjc3Nzc3NzJlNzM3OTZkNjE3NTc0NjgyZTYzNmY2ZDJmNzI2NTcwNmY3MzY5 NzQ2ZjcyNzkyZjYzNjQ3MzJkNjE2NDZmNjI2NTJmNjM3MDczMmY2OTZlNjQ2NTc4MmU2ODc0 NmQ2YzMwODFjMTA2MDgyYjA2MDEwNTA1MDcwMjAyMzA4MWI0MWE4MWIxNTQ2ODY1MjA2MzY1 NzI3NDY5NjY2OTYzNjE3NDY1MjA2ODYxNzMyMDYyNjU2NTZlMjA2OTczNzM3NTY1NjQyMDY5 NmUyMDYzNmY2ZTY2NmY3MjZkNjE2ZTYzNjUyMDc3Njk3NDY4MjA3NDY4NjUyMDUzNzk2ZDYx NmU3NDY1NjMyMDJkMjA0MTY0NmY2MjY1MjA0MzQ0NTMyMDQzNjU3Mjc0Njk2NjY5NjM2MTc0 Njk2ZjZlMjA1MDcyNjE2Mzc0Njk2MzY1MjA1Mzc0NjE3NDY1NmQ2NTZlNzQyMDY2NmY3NTZl NjQyMDYxNzQyMDY4NzQ3NDcwM2EyZjJmNzc3Nzc3MmU3Mzc5NmQ2MTc1NzQ2ODJlNjM2ZjZk MmY3MjY1NzA2ZjczNjk3NDZmNzI3OTJmNjM2NDczMmQ2MTY0NmY2MjY1MmY2MzcwNzMyZjY5 NmU2NDY1NzgyZTY4NzQ2ZDZjMzAzYzA2MGEyYTg2NDg4NmY3MmYwMTAxMDkwMTA0MmUzMDJj MDIwMTAxODYyNzY4NzQ3NDcwM2EyZjJmNjE2NDZmNjI2NTJkNzQ2OTZkNjU3Mzc0NjE2ZDcw MmU2NzY1NmY3NDcyNzU3Mzc0MmU2MzZmNmQyZjc0NzM2MTMwMTMwNjBhMmE4NjQ4ODZmNzJm MDEwMTA5MDIwNDA1MzAwMzAyMDEwMTMwMmMwNjBhNjA4NjQ4MDE4NmY4NDUwMTEwMDMwNDFl MzAxYzA2MTI2MDg2NDgwMTg2Zjg0NTAxMTAwMTAyMDUwMTAxZTJhMmI3MjgxNjA2MzgzMDMw MzMzMDMwMzAzOTA2MGE2MDg2NDgwMTg2Zjg0NTAxMTAwNTA0MmIzMDI5MDIwMTAwMTYyNDYx NDg1MjMwNjM0ODRkMzY0Yzc5Mzk3NzYxMzI2Yjc0NjM2ZDQ1NzU2MzMzNmM3NDU5NTg1NjMw NjE0MzM1NmE2MjMyMzAzZDMwMGQwNjA5MmE4NjQ4ODZmNzBkMDEwMTBiMDUwMDAzODIwMTAx MDA0YWRkYmE2ZmVlMDQwZjU5YjMxYjg0MmVjY2ZiZGQ3Y2EyZjg4MjZhNjc2NmNmMjdiODkx NmJiYWE5NzQ5NDEwNzA2MzFmZThmNjJlNTQ1M2VkMWIwZjlmZjVjNmE3Zjg1ZjhjMTFhMjEw NTg2OTY3N2JhNGEyNDI5NzIzM2E1YjlmZDMzMmJjNmMxMWEwODc5YWU1NWE2ODNiMjdjMmY1 ZjE2OGI0ZDNjZjRjZWVhMGJlY2MwYmM5ZjgwMGM4M2ViMjI0YjI5NzEzMTA5NWIyZjYyMDQ3 ZDcwMWY2NTFjMTZiMjJlOTYxODYwODgyYWJkZmM5ZGNjMTVlMTFhNGY2YzlkNGJhMDVhNGVl MzhlNGI2M2IzNGU0MGRlMTEwZWM0YmEzMWNlNWZhY2RiYjYxZDlhYzBjZjUwYmFlNzYyMmM2 N2U2N2Q3N2RhZjE3Yjk1MDk1ODRmMzNlYWFlZDY5NmI2OWE0Nzc3ZjI2ZmIwZTlkN2UwYWU0 MWVkYTZlOWZkMDYwMjQyYTU3NzUxMzUxMzJkNGVkNGU0NWM0NTY3OGM3MGZhZGY2MzM5NDMy NmE0YTM0MTJhMDliODNhYjA3Y2RlNjQ2YzJkY2U4NDdjN2JhYTg5OTA3OGMxZWM1N2ZlYzA0 NzQ1MGQ5N2Y2Mzc1Mzg3YWViNzUyZTk2MGE3YjMxODIwNmQxMzA4MjA2Y2QwMjAxMDEzMDgx ODEzMDZkMzEwYjMwMDkwNjAzNTUwNDA2MTMwMjU1NTMzMTFkMzAxYjA2MDM1NTA0MGExMzE0 NTM3OTZkNjE2ZTc0NjU2MzIwNDM2ZjcyNzA2ZjcyNjE3NDY5NmY2ZTMxMTQzMDEyMDYwMzU1 MDQwYjEzMGI0MzQ0NTMyMDUzNjk2NzZlNjk2ZTY3MzEyOTMwMjcwNjAzNTUwNDAzMTMyMDUz Nzk2ZDYxNmU3NDY1NjMyMDUzNjg2MTcyNjU2NDIwNDM0MTIwNjY2ZjcyMjA0MTY0NmY2MjY1 MjA0MzQ0NTMwMjEwNGQ1NzI0MDc4YjMzOWMzOWYyOTY1ZTMzNmQwZmE4MGMzMDBkMDYwOTYw ODY0ODAxNjUwMzA0MDIwMTA1MDBhMDgyMDUxZTMwMTgwNjA5MmE4NjQ4ODZmNzBkMDEwOTAz MzEwYjA2MDkyYTg2NDg4NmY3MGQwMTA3MDEzMDFjMDYwOTJhODY0ODg2ZjcwZDAxMDkwNTMx MGYxNzBkMzEzOTMwMzEzMjM4MzIzMzM1MzAzMTM1NWEzMDJmMDYwOTJhODY0ODg2ZjcwZDAx MDkwNDMxMjIwNDIwNGUwMWNhZTNlMGNiNTc0YThkNjZkMTc4ZDI0NWE0M2Y5NTk1NzIyZDUw NjZjMjRkMTk0NmRiZjQyMGFmMTdiNzMwODIwNGIxMDYwOTJhODY0ODg2ZjcyZjAxMDEwODMx ODIwNGEyMzA4MjA0OWVhMDgyMDQ5YTMwODIwNDk2MzA4MjAyMTUzMDgxZmUwMjAxMDEzMDBk MDYwOTJhODY0ODg2ZjcwZDAxMDEwNTA1MDAzMDc2MzEwYjMwMDkwNjAzNTUwNDA2MTMwMjU1 NTMzMTE3MzAxNTA2MDM1NTA0MGExMzBlNTY2NTcyNjk1MzY5Njc2ZTJjMjA0OTZlNjMyZTMx MWQzMDFiMDYwMzU1MDQwYjEzMTQ0MTY0NmY2MjY1MjA1NDcyNzU3Mzc0MjA1MzY1NzI3NjY5 NjM2NTczMzEyZjMwMmQwNjAzNTUwNDAzMTMyNjU2NjU3MjY5NTM2OTY3NmUyMDQ5NmU3NDY1 NzI2ZDY1NjQ2OTYxNzQ2NTIwNDM0MTIwNjY2ZjcyMjA0MTY0NmY2MjY1MjA0MzQ0NTMxNzBk MzEzODMwMzkzMDMyMzAzMDMwMzAzMDMwNWExNzBkMzEzOTMwMzkzMTM2MzIzMzM1MzkzNTM5 NWEzMDIzMzAyMTAyMTAxZjljZmZkMDIxMWFiYThmMDQzMzUzNDhiOWYyZDJjYzE3MGQzMTMw MzAzOTMxMzczMjMwMzQzNTMxMzY1YWEwMmYzMDJkMzAwYTA2MDM1NTFkMTQwNDAzMDIwMTBh MzAxZjA2MDM1NTFkMjMwNDE4MzAxNjgwMTRlNWY5MDY5Y2U0NDZmNzRlNDhmMzc4YzNlMGM2 ZTU5ZTFkYWVlMjNlMzAwZDA2MDkyYTg2NDg4NmY3MGQwMTAxMDUwNTAwMDM4MjAxMDEwMDY1 NmJlMzlkZWZlNjJhZjA3N2Y1NGMyNmE4ZDIzYzVkY2U4ZGQxYTZhNmVlYzgwODE5MjQ1NjY0 ZWJkYmYxYjAxN2NmMzlhOWIyNzhiNzFlNjdlYTVkNGI1MzRkOGY4Y2FlYzE1ZTdiNTMxZTUx ZGI2MmIxMjAwNzhjMjBkYTViNzZiZmY0ZmU0MTgwYWQyZmJlN2M5NTZkZTkxOTgyM2M5NDc4 YmNkNzE0NDczMWYzZGU3MDc5NmMxZjllNTUxYTFkZjJlMjQ5MWE1NjhmY2I5MDQ4N2JhZTNl MWIyOTJlOTMwZTU3NmQ1ZTA2ZWYyMjM2MDZiOWJlYWYxOTc0N2NlZjQ0NGZhODdiZDBlODA5 M2MzMmM1ZjlmN2QxODIxYTZlYjc1YmE4MTZjNWIyMWUxYjQ4OTVhOTFlMjc1ODY5Yzg3NmRi OWU4M2JlYmVhZDExNDBhNWRhOGJkZTA4MWZiNThjYjM5MjM1MDA1OTg1ZDkzYjQ1NDI1NGU0 NjhlNGI4YWVlOTJjODQzODQ5OGVhYzZjMmM5OTMxOTczZGQyYmVjY2RlMDNkOGMwZTc3MzY0 MTE3YjYzNjU1NjRiZGEyMmIzMWVjZDFiYzM3YTFhMDc5MDJmODA2OTIxNThlOWFmZGZiMDBi NjQyOWRlYmI2ZGMyMTViMWI0MWY2YTkxMzA4MjAyNzkzMDgyMDE2MTAyMDEwMTMwMGQwNjA5 MmE4NjQ4ODZmNzBkMDEwMTA1MDUwMDMwNjkzMTBiMzAwOTA2MDM1NTA0MDYxMzAyNTU1MzMx MjMzMDIxMDYwMzU1MDQwYTEzMWE0MTY0NmY2MjY1MjA1Mzc5NzM3NDY1NmQ3MzIwNDk2ZTYz NmY3MjcwNmY3MjYxNzQ2NTY0MzExZDMwMWIwNjAzNTUwNDBiMTMxNDQxNjQ2ZjYyNjUyMDU0 NzI3NTczNzQyMDUzNjU3Mjc2Njk2MzY1NzMzMTE2MzAxNDA2MDM1NTA0MDMxMzBkNDE2NDZm NjI2NTIwNTI2ZjZmNzQyMDQzNDExNzBkMzEzODMwMzczMTMxMzAzMDMwMzAzMDMwNWExNzBk MzIzMzMwMzEzMDM5MzIzMzM1MzkzNTM5NWEzMDgxOTIzMDIxMDIxMDA1OThiMzkyODZkMWRl ZjgwODJkYTBlYjMxOWRiNjEwMTcwZDMxMzAzMDM5MzEzNzMyMzAzMzMyMzQzNjVhMzAyMzAy MDQzZTFjYmRhODE3MGQzMDM0MzAzMTMxMzczMDMxMzMzOTMyMzk1YTMwMGMzMDBhMDYwMzU1 MWQxNTA0MDMwYTAxMDQzMDIzMDIwNDNlMWNiZGFhMTcwZDMwMzQzMDMxMzEzNzMwMzEzMDM5 MzAzNTVhMzAwYzMwMGEwNjAzNTUxZDE1MDQwMzBhMDEwNDMwMjMwMjA0M2UxY2JlMGIxNzBk MzEzMDMwMzEzMDM3MzEzODMzMzQzMzM3NWEzMDBjMzAwYTA2MDM1NTFkMTUwNDAzMGEwMTAw YTAyZjMwMmQzMDFmMDYwMzU1MWQyMzA0MTgzMDE2ODAxNDgyYjczODRhOTNhYTliMTBlZjgw YmJkOTU0ZTJmMTBmZmI4MDljZGUzMDBhMDYwMzU1MWQxNDA0MDMwMjAxMTkzMDBkMDYwOTJh ODY0ODg2ZjcwZDAxMDEwNTA1MDAwMzgyMDEwMTAwMTE5MDYzNWY0NmU1ZTYzZjIyY2UxZWFk MDA0ZTQ3MTg3MWZmNjllOTM3YWUwMDc5ODk1YWU5Y2Y1ZDY0MmFlNTc4OGQ0NDAxMDk2Yzcy ZjFmYTE1ZDE2MGRmNDg0ZmMzNmJkYzRlMDVlYzMzMWU3Y2QzMGVjYjI3Mzk0MzhhY2NhZGNj NDZkMmE0YTc3ZjdiODEzNjE3MmNjYWY5OGI0M2EzZmFlYzU2OWE5ZGM3ZGJjZDJkMDI4NWQ5 ODY3ZGJjNGMwMDM0YTQxMTViMTA2NjYzYzFhZTA1ZTJjNGFjMmZmNWY1NDRkOGU4Nzk5ZjA1 YzI2NTNlNTljYjA4OGFhOWUyZjBkZmMzNDYxZTBkOWFiYTM2MGRhYzM2ZjY3M2QwNmVmMjRm YmU3MmU0YmRkMjk1ODc4OWI2YjQ2MWQ4YmViYmIxZjZkODk2ZmUxOGQ3NzM0YTMwMDY5ZTkx YzkwMzg3ODhhYjIwMGY3NWYyZDRkY2Y4YmJlMzUzNmU1MGFkM2Y4YjYwYzg4MmRhNDYwM2Nh YTAyNTg5MjI3OGEwMzk4NmJkNGE4MmFhYTk3OGFkNWU5OWUyY2E5YjM5MDVkZDBkNjM4ZmNl NTQ3ZGYyOTEzOWVhZWJlMmYxMTNkMDljMWNhYjkyMDNiNDVhZjEyOTE3N2I0ZmMyN2Y2YjY0 ZTgzMDBkMDYwOTJhODY0ODg2ZjcwZDAxMDEwMTA1MDAwNDgyMDEwMDZkNWRiZDRmN2JhNzg4 MzI0YTBkMzcyNWVjNGM0NzFlZTFkZGQ5ZmE2OTYxYTJhNGYwZTM1NTYzNzY0MmJiMDgyZWE1 MzhjMjU4ODgyY2VjN2ViZGYzOTg5MWY4OTIyYWMxOWEyNjZlMzU4MjhlNzY3MmM2M2E5NDJm ZTAyNzA5MmYzMWFlZDMwNzliMWVhNTJhYTZkMzY4OTRhYTljMDZiMzNmMTRiZTI0N2RiZjI2 MjYyODhlYTg2NTBhNmUxNDEwZjNiNjlkYzBiY2NkMDcyOTFkOTczMDczMDQ2OTg4ZWU1ZTQ4 MjY0ZjljNmI3OWI1NzFhMDU2MTNiZmRhNzQzZmRlZmU0Y2E2NDcwM2ExYzY1ZTY5MTBlODBm NzRhNTFlOGE5MzliZjRiYWJkMmE1NmYwZDIzYzdiMDVmNWFjZGFhOTc3NDMyOTdhYThjZTRm MjFkM2ZkOWU5NDA3OGYzNjYzNTFlNzQ5ZmZlYTY0Njk3OGNhNTA5ZDU1M2Q1ZTM4NzdlYjg5 MzcyMDQ1NTlmOWE1MWNlNjVlMWY3NWMxYjRiMGZmNGU2OTNjZmZkMmQ1ZTY5MDk1YjZjZTBh NWY5NmU1MTI0ZTkxZmM3ZjQ1MThjOTkzNGFlYWU0MGJmMWY1NDQ3YmU1ZGQ4M2I5YjczN2Qx MzRlN2E5NzQ4N2JhYTEwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwPi9CeXRlUmFuZ2VbMCAxMDQxMjMgMTI5MTI3IDE2ODg0XSAgICAgICAg ICAgICAgICAgICAgICAvUHJvcF9CdWlsZDw8L0ZpbHRlcjw8L05hbWUvQWRvYmVQREZKYXZh VG9vbGtpdC5QUEtMaXRlL1ByZVJlbGVhc2UgZmFsc2UvUiAwLjA+Pi9BcHA8PC9PU1svV2lu ZG93cyMyMFNlcnZlciMyMDIwMDgjMjBSMl0vVHJ1c3RlZE1vZGUgZmFsc2UvTmFtZS9BZG9i ZSMyMExpdmVDeWNsZSMyMERpZ2l0YWwjMjBTaWduYXR1cmVzIzIwRVM0L1JFeC8xMS4wPj4+ Pj4+CmVuZG9iagoxMjcgMCBvYmoKPDwvTGVuZ3RoICAgIDY3L1N1YnR5cGUvRm9ybS9UeXBl L1hPYmplY3QvQkJveFswIDAgOTUgMzVdL1Jlc291cmNlcyAxMzUgMCBSL0ZpbHRlci9GbGF0 ZURlY29kZS9EZWNvZGVQYXJtcyBudWxsPj5zdHJlYW0KeNor5OUK5C3kNdAzMba0MFQw0DOA Yghf19BUz8IYCBR0Tc31zA2AbIXkXF5992BDhfRiXn23XEMFl3zeQF4AAjQOzwplbmRzdHJl YW0KZW5kb2JqCjEzMyAwIG9iago8PC9MZW5ndGggICAgMTM2MzAvU3VidHlwZS9Gb3JtL1R5 cGUvWE9iamVjdC9CQm94WzM2LjAgMTM1LjAgMjUyLjAgMjA3LjBdL1Jlc291cmNlcyAxMjgg MCBSL01hdHJpeFsxIDAgMCAxIDAgMF0vR3JvdXAgMTM0IDAgUi9GaWx0ZXIvRmxhdGVEZWNv ZGUvRGVjb2RlUGFybXMgbnVsbD4+c3RyZWFtCnjahZ1LjmY9bqbnBmIPsYGM0v0y7bLRk/bI KzAC3WUPYlI96t03X5KSqCPF+VEo/JlPUuc7F4miKJLyn47+5z+9a/z/759/+fzb//rP//e/ //n5t3//u/v8H//6988Pz0J/5D/fPx+O//DPf9Af/vvz42//8z/c5z/+70f/crH4+Pmnta8e eumfPxdWv2ILzRMpXy75fILvjwN599VS8f2NfH+c7Pz5k3x//NeH918t+NoIx6/aaqFbP9lG Wq4p3NA3WvYYSrBy4cuVlLKg7oslie7JB34CC0P09Ce6GP23J0L5K6ZSGpDPPlZGubVW5Uef sH55Au/k+6N89dSCXt/3mD7LV3Sxer6JmGLNG/HO5c7tBotfvfbUSSrF4pI+YwfI0dGLsy/n ZJbwez7A3opR/vLBu/4Cvj9eZeS3T4Jm2cUkX69759Gu5trk8UNJTKTzgOQSeud2T9a/fA/0 kv90R7/T6Jon+f44GXWDVpML8gXoyeMN0TePX877KtDHEkgufgXqTVHuPgcMlfiVUq1576Mn 3JB0+IM8Gp7D4heCQfZ/Pnz/arHHIqMv1g4VcYEGUZ+qyYcb+rZN01cpBU3pGr3oFy0telJt 6PXVW0RN0aOSb1aOPqArNZnnyF/0ylvc+r2nPpBjl97QXMEbRrcIwfMYqjG3ZBEGWG7aUln9 Spnuk8Xo1iojGUUGta/Uc/HadMKeCr1bQnRzEbfbv0oK9Mz0bVqg98Codpe1kzzhhuhBe76h R1OVo1fSOn/+F0RN/0JOb+RE3NTVMCBmAsg5emFMSK+TjrGEPlps2lAYvbhSSc+BkI6SN95K eRB6NukMC9LEgVGDt9tJ/Wb+pKRYG30r+rc2elvqpDikH/Gr52FJTSvEmotBBmWgz125BzbR jANRy0oquGg/mnLUKXKTq/nSuD/HmHVGyL66Lv3ex1zlep1fIKHgSDeJaq8hVItwk6FlaTpg /aIOnUUuOOmClaZNA/DjuEVpN1jJGBMg0SXtknTXPEiDD9IjQ20x7D/YSS3mxC3J1Gjy8Wrw nh+z6WxiOsIJN6Td6kSPpgKDow/UtMv8ir4//kpObuSCRB+p3sOD8WheKqp/RXo7GxoKT9Rj IE3RAvcIaLGePanHCwSi3vcX6BtNaaIIVX6bZw9Crjint1NgCwTqL5mnu0Go5cECdTQn5sUL opavcumLlBh1kAvamg67gxC94ybzfmfjIsAKylXmrZrkQQ9mCavyA+ytRAYzQXbljVCzdyn9 /RPxA6LLJGMyEfLBeVUWifTejgqZg1maPqFB5k0/0dZ0ygWy1LyOyV8RNSVztPtmxWhmT67J xUKDJU0o5zHUvIsZo/4CCaUevIwYnyrG1Ym46UWu9+qkU/VKivGGuOkhB4s69/CO+FFD8tKS rGG6c7yRlpqdNwlV79I+XV0gj8auv/AroqY0L2SxOKYcrX16S4KaazSkCRVf9NZa5oXCyUB0 juk6aC5IWj7l7irmgURHRepNWC/YldLJNiLd/4K+0bLogmSMCKDYStUR0XLaERm5OWnTBzSo kMVO/e+GtqZTztFvJZ/eETW1MFR6kyxHBrlYCrWX1nYkayppqpC0Gik3Aq52XUCl2JiUhvlg e0cn3JC88IM8GoqiIlvJN1ffCPWQdylVcCfilqlVXXs0GG4gMiCHQWMJWTOpajth+at0vIl1 pfJVaqE5bBHqwLzQtb/Xvnwhi0iujm7Edgr9nlyKbW3WJ2QpRm2ZkuqxzGuogDkyOh3HvIYy D2kG7Qk3pCbDiR5NBZqP9IK2j3mVkxu5IOl4umAZ9rTpxvTUvaayI5diKnt3H9AgMqBpmm43 tDWdcmvcvaBtfI5vDZSKrn8cvs6OSE+0oRUmlHUSoVqLWiSyTjK6yLymE25IX/qJHk1VLpNy zb28I2r6F3J6IyfipimSLW6/KyG6k2gWShsaKyUDm64C4lrrYmHgyFA1aPrYDCMbMdSYPjdE i+RY7Y/SqsW51Pf7pfdVMBkC1ejVIvJle3ijAk+4IVGBB3k0PGemX4jMdIlMnexEPYtv4efC QFwu5R19o6XoMf6V3ui9ERJHxvxhImSvh83fcrJY6eWG8gLowd9k9A0ehJu1lkIzGhyIRk0x K9wNDR1u4FDi5mpDixu01LiBQ48Dqbtr6HEg9lNZPQ5If2pGjxOq1blg9Ph6VDN6DmaJjsSD 7O2E0RcKpTpVzaWXeEP8JXNVNTzFaMXTtouRHeqzqhJ62eznu0Cg2PU+emgh3JA0fcrRfdDk pxqhFrJ6L0ju9yLnXG/viJsGmLuih2gd1D6To9FP9rRMOc2TIUTI5bGGFkTvl75jbT4aSMhj DWHWsZF6Rewlb8uVCzSoqi/jgramA9LdiSvvFX1/fP7LJ16CuPCNrB+rS+xmuMaju/gcRMNm 3oUQvfCAQPKxifhI66+TSMNDyuvkX9S7f0Hc8iYXU63viJo6GqlRJoTufQl4JSHKQqFgfOIF Y11ReEE0EH/W4TY2cjQxxCAoObqu+QwDbd/mIkdKqbrib2hrOiC6po+tvqPtwxg5stu7uOeS K2EbrmtpcoFAcwsht0qG8AVJ06fcdc7Zic5YZN9Uu9/xc6JEGjvVLM4n+pT0NBdEN7JgJSWF 6R0oSK+hpZr9q0uVnYsTDRekAa6lvv38cm4A8q7K2vUiRHeiz9hDxavO9Gqo324T1gVuSJ75 II+GIkX/LbHUN0Lt3qX0Fk7ET+lb1y1AWesSCjx98oPzd99QiY7X7BdoEGnH5ny7oa0pKVYy 4flX2Zhb3lfcb2h5t4cvcEM6X53o0VTl6INSB/DviO/3kIN169UF3nrMV/T9YSCZfTHQ7wPl EkV10OutyaIK12ON2lRho/dV8ibXxC1uro/323vSlj4OAyR4muAw5qKYM8MAIRRowt/XZRe4 ofn0T/RoKjDT3NRjz+/o++Ov5ORGLoibRlfURyjubUKhtiafK0boK4OWe9tA7HGQfcxyWfZZ x06EQYWm/OaLNlVIhmWk2eZzQ7I5Y34gTaUISHep3tVKsxjkkppcYxQSar7F3RK+wA3JfvJB Hg1FQRw6+AlEfWeyLEsa+wLq/r/ADBfhXOP+hr7R1PlYrPs/01TOq/hlIRFysW87AtT0hDmT GVNCfEfU9FVuePsvaGs6NgCAUhgOQt4AyBjc3uX9c51wQ/K5DvJoKFJYnJY3QK3eZPTnD8LN Mq/ATefDNIjd/LUBsKExR16gQfNNn2hrOuUCdjf373siahpoIq8+73IxpGB3AAi5WErYdgAu MNNypza9EfHsXxA1vciF6dcbPvsL4l+9yGV2Z7wibloDPaPZAsA7KW3bns7xy/cY97XkBWLc qlPkBfEgLfTWH3JkZNdutgAyrYudd/sewAUCzWUn+/ZPIg0fUlct80SqpsiS578aM/NkG9ER caJvtOzVBW88DkBYCRmn8YaGx8HA4XEwVxseB4OWx8FAehc573LD4wDEfnnrcQCEqWY8Drnr imZN+OZZzbc+4YZ0Nj7Ro6nAQgs0Mj36O/r++Cs5uZELoqZY784tMPYwAoUxNmPD2mpDw3Ns YIO5iWgwQmRtypc40FpFGEjriEhLyc8NObayzA8gMMLVpE3V6Uzqt9LMD0KWzHIwmgddvfAC NyRhaQd5NDw7/i9EBlJptMIL6g+VZc/PR6HBn7KOB42Po/UWqSsNVeqB5g9CPtBoMYjuxS4w VC7MbVgsqLCIN4hW0zzdUtMFxxKwYOxF9deQwUaLN/5Vr4pDEDWlq9DteStXYd8kbxQYPWtU 7yDeBj7R98cFEoLLKUnsCVl77Ya46UUuVqy1X9E33nAn9a4TE++Mb8+QE7bwCDmaeLpB/IYz /AlWLn6l3Lr4LsVRaxBdl4N3qOmCM8wSzoHhTpDoMrxh9RKbQEtED4kracpB9UsvLzRB5k/T l2jM+MCxSRdIiJS6brX9irjpRe7ZXS9IunZFR5fouhULfIE1zH48ooEP8v1xkaKbksCE3wC1 OmQuv38iPEAlM3lG6+oUd7KNyFC9oG+0LFUCQ41c88FEAy+wgoEtk5dbEb0TsgkFpockHZza FtF7gdV/teJaekfU1JPmkHE1uikhl4Peh1jlGxrd1MBh3FZ4Gp3uhHBEMBEJDNte0Ak3JG/7 II+GoqPhWq+lvRHq3e9SqnZPRL+Ilad4u0dwMKHsRjyoRAcTopa1bOHBF1ixpmGNPUN/L+j7 4yaHAJCuM53EA18QNa1fNfdaTYgwoZ5dMBHCtU371TzqCTckX+Ugj4bnSPmFiOJoZHFPvT7W wBfYEA4tm/Uv6BtNU3djNcprYEJiQaw1TfOk48q+9DlZc3OH6wVRy1e5sdy9oK3pGGtAPA7X Crj5GXu4TJgL3BC/5JM8GsrHwT55tgbLSegzv0vJLVwQP6XG6Q5FAdJkFT5WwRsaq2DstVz+ wSDzxp9IfvgBqbNG9h++Iu7UDtvdVo5MNedrMSvhynsx6nIZK+ELrIj/FpNurHAviJte5GQH cK1dL4ibHnL0DLxj/4r4WQPyCsxKuMLeytEuXQgVeHm3FcMFYlxqNs8Loo9Di2hVX1Mu0qse G39iSBJa24NjJXyBMIFT0VEui9wL4qaH3FXdPJHqK4RZFFWmI0rgAln7BA2X+hV9o2lIXs1/ CRPgRZW3YVyw0Uvzm9I9GULD1RXyK6F271KqSE5ELTN29DSiQVbuQFHm+xErsKGxcjdwrNzN 1cbK3aC1cjdwxArw1WRneazcgUJUV8tYuQNiDJuVO4ycmEZcDa/czbOavnnCDcmy+oIeTVWu zc2tEQlwQdwZaMyrt1blumY2mKt17GyEvEUMXCAPoaoOOYkEuCBuepFbG/Cyx39BcsOnnCtN XWO/Ium/ues+ikQMwHFA/00mEgAdIYwYvRExQNBDOVm5Mm2tOe0XbOw8J4QTGjS28i9oazrl eAWoMYq/In5WMslK2eXEmlzhArzJNCIIRrjABUJlhKBXk0iACxLV8pRr2ONqyezxXxDf8E3O BZ/fETdNYmyOiAFsu3GU7IoEQDqU+tRWxACcRD6XaOUKwoU1oEgiAcxnWBEDF2jQ2M6/oK3p lGtzLL2g7dtMOUQ9hGgjBszIXBEDF8hTb/HVRAJckAzXU+4y/zyRTGCdGsUwDGSOBP0BHOuq EUZIaBkKiqIJrBT0/UFwRdGqHE2edTjWE3XtDoQFRTCImp7QoLFBfkH8q875nq1cnH1qLJ87 1jHx4a7omXqtmFhTjhRKTULEnbjI6p+LNU2d6Ng1y161jvf0S5fXi/feMaHFKJ6ZwNvM9NbL Vy3S4dUrQPcWqixVdHI273xO4SfrXtXKC6F271Iyz18Qt6y9220skDUg2Ge/oTHzGzhm/o5w yaJpajLzG7RmfgOHz35DMvObH1gzP2AZFrgEQfTl6Bgzv3nUNfNf4IZkDr4g7s8up2JnfkLj E3eNW0A/rTUng7hThuF8VDFSn2F4Y9kA6gh9LJqi4TrWitQQ9nxIxUQ3AK3ZhhcsBi0f8AY5 pKtjCdGcprVyQMel46rHb+w1Y0VRaPkAl9nBFqGv727g27SCBcy7BBot/KcGrALovdBIhcPW kO+PqJ1ssYjVHt5sHXub0B0ZLh26dgg07pG0R3qCvXPsZYFVSgRv809NZHV55DUOUDT2nFsN lGnJHiGTCrYUaeHleVVqCV2m6I8pQxh7pEU/gkI5xZYI+giu5FzAlkWFUQCljXZPtkhX3XcS 226wQAOFt3lfyPfHm9S4g5OgHXVSaP/a1JMRkDeKBQ2RnNCFLfGsAridMrJNeqA3hBg6j+BT esO9JxozltAC3VVpp4y6o6/czjUOCK7oJMh+pE9dRocqZIFwYOAXB5wAJRpe+ROKrCAujQi2 vCL1sSju0Um+P9Jwpk2WZ9+MuiOB8gE9SB8rKfGsWHQ1hJsiC7lxjQUE2DAhyz50Q+gKHBfJ 7ZTRGOB8Qjx64b/LrD/+jt1az/PSIqRWIldlEKcxuhxbZSTRqn4AMo6a336JNCnHNpEhJK5x fMrUPJ5MVzLmg59skdF1TmLbDVaRbscf7ncC7fC71LiDk3CVC8msxtPQ622fVjslzhQ59ZUu 8jXmjjULGaARa3zqHQF79JNBfQbtGy53sigsGT3IMumMjd5zwNZbxawPFw92VZxrhqAdff7c DcPmFeYUvhKCFCxITidNw3yETdFGHqK58efjabWGOLZd8A8c0/SDCiWkUseDM0SFEtSckB8O mMC9QwRHDgZpeRbfdjEyDJuI8d0RKbQy0VHnEhuGF0goS42AN8RNL3K9cwgqhh5G/w1x00OO 1Gnlp/qdcCWWXCPWfPhWMoHMiGBMPPzIKNThx1TEhOstdJ0epliiObhkefYiJT4WSoh2kfIQ A9EUlb3U4Eiq0TI2C3vjmjmyo0HKQVLC7Fch6wBRxQBRpk14H7EW2tDQTQYOpx/K14QxqFkL E5E94YWkhIgOximXhumMMVsxMxPKNBHoXBIxx/KD0kiF9Y/pkmP78Ozi1sF9dOQDop5D4Q3S ibjIA1mNtexyAaa7XI3DPj08QjL4sOh1XQtLPCEQuxoY8cxzQdL0lBt3V1Ev4I6kKsVTjp61 wzv+ivg10aN6sRckpg59q3CQ+7oRdDLeCbc3jB2TUJqVQ6oBVxrB1bi6ySLwJSQO1DSQtHuG LcalPNiQxSwOnxuQmsDUe3vwTV8w2ZlBJsgmZTTyiKPE0OJo5g1JAJc0VRg149Ajo8sNHSc6 6tRlquQqzOmaN+XukSPN/skJPYK3umovUe8bGvp9g6LgcTWJ05q6m1DrZVPwHu7M7JKVmkEO Q8VvZOj4DYqSJxREA5n7fz6nbKdw4QkahhmFbPi32bD9+QhtuKJxWcnDR746R7DNt4iCEmyv 2ReLkgO0+LZvm7PpfRelSGrVW1LUt8DJ9AMOAznAGSF6gG6zwxChH5Wo34W42sXQ11MOI0K0 P6kQ9qrRU5FG6zLkM62buekJgUpFRC20YGgoCHAiaXqR81lH5K+Imzquh4JfFW2PF6zmJK6L 7oBn7XWotyJeloDZpidv5agPNq4JM5cbBhUNxuTyFQOiig3SrgNyNIvOryFjvYDP2hAGtJC8 YceLvyVXsQjI2UxP6Dc1iWU7azocDIQ9TBjdHOl9Emkny15SKQ4VSYjEwBGpFbWDOMecHYpq ORcvXfsCd9Rh8V3Qs6nI9S8E76R3xAne73JyIyfiR9XKGrD/WaWaYZl0tF9G6qzLIOlm6BAR 1v3PR8TgK6OXMIwezo4iCy3ZGTeI1HaPvE41kH6ar4yr9aQKSmLt6UcTBxAsxDm3XSeQKQdX WQ7y/VNDOqJB1NW43hrnVg5YNfAYGby1qBWgz3A8Kl5BTKNEnLFW6Z612MWEkWxOXhbiXmhO j5aYW1mwqkFCFyObKVtFhFvR2X0poggXMlytSwwrL3bVQKuRibQh86MLomgL3Kh0sehlQTef 4HxSzf+CuxLfj3+GXU8/N5hgw/cirpLCivqCOBntIud0bfKCuOkTxja2y7HgKqH1G5KcvaY6 W1RbxIIoqXqWxVtEZSoZQgjckgXGBRo01osXtDWdcp0MJt5qe0Oc2fgiN1agF8RNm+R2T3dJ hDcya+8Wf9CGMipLStMFZRGPq3EGznKs4FdjUDvQBR2gJ+S0wxTVCcY1NS5I0xMfchywEeyM fUGc2MUpWTzZcQpgSiMeHo8QNYVtocKxmdxyQXkl+AXJL8aLq0GuBmvLby/4Ag0an+uCtqZT DvlHc7T/hji38EVu3siJuCkZyWp9S4+gG6GZXj9r4hCNy5jW2HyvG6oYduI8/blBIDis3xEn M3WXxN7rXEEOiWHYlTVOVUI5FHUgCOKWT5gKknH9XyB6B69yvNOTroiaotSj13W2561CQsvj Ir6+DbWYeGfCQFqCBMctx8WwPHF1Q+WrYm9o/1FaVjcyrlgO3mz2wvXQmdDk7tTY67KEBpR8 oDmVJVixuUiPbYgqsk9qOsoJDZrd7kRb0+mhc6g06WV0do7EviBJbpPYgCXnaaaqm4s5w8vN eRO8vg+SD3RCILJ69UZg3Z1EGj6kENPPxTA5UgkGyAVJquNFTt3vvwDpulKlZ64GkLHHm6aM HLY9kIIp5uog9Gbb2I9aYly/sQuSNICEShmyGGha/pK7whMaVDA7pgvZGg4pTDWh9TeiaZXi p1aWnWZt86aGwyYqvrek3yGIucyh/YRALQ3EaWIHkYaHVPJFjPnKDrKTcLtTSqI1XhG3FHf7 WgElhJc0uVhvEQn26I9cYnMi/pRar2XJYRETu2w2dGyD2Q8y0PZFLnLs+3L9hramA+Lhk+jg F7R9lSlHQ9MF9R1KJUgzCiMy8XkT5QKBuKQSI49nuCBpesrdppsH0vkK5UvHcj/zR/i5wZy0 ONQakhfEqY4vckX9aRckuZlS9hlfDeVVIacVnTEBkGXFSaUhcXHCiThbltZr3ls5LOQ53oJ+ IvA+rEFVi/ly+t+AwwZCRmoTf/ww9y5vBO8v01+kfsqcKH9uEInApbfwjiRh+He5MctekDxH 4rKFaMrrSuQkS+Fy23QhT7pcX4GBnMCUkZDgsgy+yPE7OWtIiKz7JXYjL78swcJv2X6gibxu VA7En3tsqEw55JFlL8tyWmRk6SnipMcdiaFwMhDH++QVS1PsoV+QtFQYVxeTHWV+Sfxaka4L x+H+fk9o0PxaJ9qaTrkwfcYviFNiX+TmjZyIU2I132laYkBqyM69UouGJWagWmLmYsMSM2hZ YgYOS4wvxuXtpykGRJ2qbaYYoC/WzZCHU3dZYuZJzQ7oCQ2aNtGJ+EeLWvtTbukmQsFJJvno qgOJzuEBZOTaqAY/91AMMjpnQexLw5tk1BAKmGPDJhfdL+N+zjEl/KtPSE0rHEnqpIbX/IK2 X6UXyzW7kIesVtVwXEN7aThE0DQ9bvqENy13Is2zRDoU1+g2avICCy12SolitXfYCCfhFNPF XEAlHKCsut7TII6GZAkSk3aC5oa/IYEryJpr02wao6a0dt3NpvfGxewKMq24wBzvRSBXCdMw V2EyQ/ACDZpPfaKt6Xy9yO6Umf4FSX7073JTZ5yIHzVJEes5PQCRUSOmjhwKsqGqAYAXaFDT uiUXtDWFzwGzN6ERMjJjHxB21evuXsD+yeUfDJrD+kTyqh4Qn1b3jl8Qf6BDLo90eDg2PSrb X9D3xwYlNBxIt+v5DISQLSqakSxNFSJwOexNsdkCi8v8QNNYQGm6vLYcEowhKAX9poItWZOu bOTGwRYxz/4gtt2U4gAP394RJ9y+yM27OBFnQ+eQm40zATIOzvnXEWGigDQwXjsOt8h5i/hZ iLer2T9vYBr93SKJfNJLx2lzA+jSduwfEqIbKdugq1ogyo7Ngy0yVclBbLspddG8J9KoQgQv ubir7gs0aNzeBXFKbZUYeMDOGbTI0U66GSs2w4Y4BkyScSerfFoDx2BpjIsck8EZu053wzqq I4w03h1i3sXOuxglfIjCBXHTQy6OHPzpkrsgThl9wtIRgc9+36pHVFwQZ8de5DK/wrU5fUHc NM29Hw3eREXm6nSHkLfEdjSy3C2U70BomEfDhkRSrroQln1wgTuSTnaiZ1ORg58mbu7HC5IS BL/LzVFyIm6qdT8BEU4OkpPGd2WuTg8kqavoNxzhIi0fsCDpRTcWxBd8En5QCT/nzQGuOIM3 7kZADLbJ046m6rZQJ0jEt1cNJpHYHHNnRh2e0KCpXE+0NZ2Rfg658TW9I860PuTiyMOpnMjQ 4g3xsDnkUDPLue1qJ+LBesjNzM83ZDNENzlaCOheFp8mdkHc1HOpjzWJzgBk/l7IodnR2Kjd oMw1teo4W8GiPDFxmiJsYPUDX6AE7o7IRmzgnYQbqpNuhONxgjpXvBxjAXeTq/bxqblPaNCc B060Nb3MFy9Ioz/TOD7K7KlcICo3SGLKG+KMU7wwbzQz8i/UaTF+GymtkiRnbucCkWDd+NyO NyTZ2r/LzVd6Is6a1pPlphoGilyiam6qbGgs5Q3Upby52FjKG7SW8gaOpTwQVwmdK3mQkNR7 NlbygKv781Ieed+xuW4HyXrSpa4u0KA5NE+0NR0QXytGu1dyEv6mbdjFKpVmENC8FMImYto2 VE7Gtdb72InGuvAk3O4pRbcgpX7mLsgFya2ecpi0/TuSnqsR98Mx22hIuKo7YrJZ0sIM7lmb Kg1HzhTdElU5/xWlqtPcVGnYqWz7nsrJFtE9jwPYVkMGQyG19kb4CSN3ZytVfIhmOwUvUF27 azvlArnmbWprn+QAokaeMhKtuzZALogb3uQ0hPYFSYp+dpqPINsp9Mm0/PfcJ2lBY1fsfgp9 suplC2rK4WRL0WZjn2S9+7WdcrJFxk7HSWy7KRXh1Uh/gbYvMuUQt8Z1LOZWyhp/ayflZBht oajylA2SC5JRecpd5pgn0jROHDnKZyuYhdIFtpXjoB6tk2jq7WDi42pFtdNychk0vVyGDTfX hsTP1bYcL/FzgUkJ9ennAupdl6aiqap5S3N+OqFB5smfaGs65dCzJfDrBfGTvsjNGzkRNx0j cCy521q8Dz/Xhoaf6wINGk6tC9qaDjO+rbyk4edqiN6b2/46L16gQXOSOtHWdMrN8zjfkOT1 PyB6dJf8suHQuiDO2lxQfFzIxlTrefi4DFo+LgOHj2tD4uMyP7AWSoAzGUp8XEBuhM6L5UFI Sx+ZN3yBBpnHf6Kt6ZSLWlD5FUna9O9y80ZOZJO1p6MLiGviLWfXhobDy0BxegFIRabp9DJo Ob0MHE6vDYnTy1x+Ob4AS7C5UT3MwO0xCPGgM+h5DNYLNGgM/Qvamk65UyVfkOr0LrqRl2dc E+Dnwno3aZi/om+0DJIYPW2m3qZnahhIHfoiq7d12FEXyHnAo1//ir4/3uVGCPMFbU0jIoBU zo81IOdgrKRl+8lOaNB87yfamk65Mo4tekPfH+9y80ZOxE2l6Kbpi4Qqn9qICaEgnH9DOmue zJD5xk+0tZxyNI23qDPEr+gb5SFmZqiKJa21yMGoCBnuae4UDucSN3xClJqYKViS53FBstVy lxU7awVbXxD/8kVuJA69IG7au9d02c6VaZCeP0ah6sis+bebjjwhhqbUx3pDPFr7zNrVhG+H 9e9I+hD/DxhqAOgq0HvO5L9RMM1Yb9h6i/mGpO0DXnXOg2gyldezkUrQ+vE/F2aJ5wKoJ+Fs siah9QVHGPEp0KhYyd4j1KvlsIkNdc2ANhC+FnjHzNUQ1FP0kHJFMAiwrNl+tegCaEOSOwuU YQL/KVULTUlTqcdAkEPHPMpOdHgEUXM2J28elIsiS2r/wSyR2MqT7O1UKo7ydm9Ijo1/k9O7 OBFnB+r5engk9s8CSTgp6v5yqP+Ggk7BBhZAx2mxEuSNTxDYpWMQYrylKyyGQiVIE90QcseS /dGgafrSlFOsStCSYyCd3W/obOxnMU9q+t8JN6R9+USPpmef/43oIdAOx1Wmug2iC/RZ6z/h HcvhOhfE+ZEDFi2bAuQr0vOKKjJD1ltfDPtbYW8YtXCauXzQY5+kKSch82vn9TWhEhCnz6+z Yr8d56nL+U/2tZ9wQ/rwJ3o0VTnkiXJe6RvSfNkXOb2RE0nqtRj90FNy5ncaxQagp9jzsyGp 7i9NH9CgqlWFLmhrCv85fFEeHlZVP1LJEffLO+B2AB/MElUGB9nbqVQeZ2u9Ie4MTxgQYY08 DvQjz2nzF8RHsQ+YNHweKGUevlkdBhvq4ogxDIttBN1tSAqqm+tXxJyx5xlQaknh1XL5JQw/ sjzCUuTBDdPevNsL3NB8+Cd6NFU5P4Ig35Actf0mpzdyIm6KkjlR+wwfSO5HSkLB9g0caBuS AE1pqrBozRcgOVymZC1/ZRCXRPPjVxVGrQO6IQ5tNtcPq7qMV7XGAwsVDCCnRe/n8CNUHMeV mGF6gRuSQX9Bj6Yqd+rjC1KFTlOg54Q2en1cV+nnwsKoJvYrkPzbwtkK6JnsWUd2sBoYUiIj 5HFI1UR80j1Zi8FbOTKIpewIEG+iBFTuwhKdkZdq+RdoUNaKcxe0NZ1yRZcHr4iftEoVviUH n+GYtKRgCd5iq9LfSMTp8eYPFoYbh1Hho55PxC0PuaKp8ui+cnzCBfHt3uS8fJoXxE1zRmFb /KqvKIcQYI5yiRUgyRjOo4zcRPxVPaqKWLmkJ7qxduSaYNtXGGXCDMTKDbsrYa7NyqjpblBU KWk6oerukdTNY5CL6eFGpGKkHYMn3JAOpBM9mqpcHGkbb4gT3l/l9EZOxE0RZ5nMGgQI+fOi ggq8JxsaaxADxxrEXG2sQQxaaxADi1ZtBFpzF69BwtiHsGsQQK9MTk1H+DPXYp8z13pQMxGc cEM6rZzo0VTlCsrVI6KfEaKQLkjGqhxMvuTqcCuuq+E4pFIFSe/ipk9IqHsuRYCmvBd7Qdz0 Ineq4wfRNHta5HXOcxhv+Aep4tgKMwu/0Mf5dGVULDUoa51rLhcwYBT/ZHSjlgcsZ0yEMWjG +CTfHxHdAR9pSWHgs3O/RD231KCsVaD4pPIByzgcOY7413H750Nygn0YGYzFa4/mZ5fKFQui QoOcqAYFwUfIGrRuxUAEoiBMJcIK6lGszMCHcUV4R9kBNRE/f9X3NuXyODMeV+PdDYPMC1gQ 5WIQpR5RpYmDXuYzXJ5Vv3/TyrYyBZMNjpdwQpxLzXkra6q+IDm/+nc5ON9Q2PqCOGVdlL5Y wtBruBFdjOEk9iinHcvGzkKSPJ6yrrsFppkrCeONPUAGcU05/lUDaahycBmO9uVNTzwCD5rL C8HrQz0Brthtl7YXmHBSBpdufUN8L69yosYvSB5DEtkBeZeJUCfLqOxNFxLjkpsuGLm+Bg6o FmWRvjhUAUcbS+1iHPKjiU6xDUf/nHTN1zFIFh0LcdMkxfytnPeidVAyGMozcgGoKk0rZxpJ D3tAIKkpAWubS/NekDSdUGaFiKOd0liec10auhE969y83wvc0OyvT/RoqnJFyzW+EK678SKl N3EQfkw3nUQyywOlot1DPI0bGrO8gWOWN1cbs7xBa5Y3cMzyQJmzq+csDyQ1R8wsDyiV0abG xoo2FONpXA+6ZvmTWSKz7Un490TJGrGlkZpWXzd9dCDRNNQ1k4F8sLZ03KbHYRhkNM2C47gA o3yS5g6gmIUUTi+jJpJUuHhAHMcutZ/ha+Et8QvafjXgAMTGclUKUKF/cO0yKC2J9kI/cj2O cikPeFNuJ5q1G1IV231pxwvckPThC+LUXCmQJ8pLknq7q1WfjTNtNlQ58UzTWuw/NMlp9HKG Ew8AruUGIoEyUBClSBLeCQnJV8X35bSfk3DDB0ttBLfi6XlT94I4WfuQQ8osH12IscSFwC+I y3xc5IYNGrWa8gVxU914ny4KINl7xlsLegT6QmJ7SdMJ5UskVLmrzhstlLiq43BBj152wg1p LzvRo6nKxXGi3RviE71f5XS+PBE37TX5YFaHOIFcwm4KvPFYnwAV57TXcGUFvuEnRDGY4tS/ IYeLXZAUjZF6O9iCKComhbZh0vPA39Dw/21QXKuoXSP5KVCvXEXR3NpSsBe4IdGdF/RoqnKj bucrkpoxTzkcfKgWOOaY5995yGwkQ+9xEZN5kQviQXrIBVh7sb0jOUz4ItflPpCqgOzNC+Km crLanN8ydhGa+q/0LHKLcIaU/uiCkaMdgDjIhLsGByUCdfWmizUoLXeWETIS1TJp7OC8IDlJ WPK8565TDsM5P8ZARgXyh8Z+IgNU9z/B1ugyP/yK5pHjw5YdQ+fnBnORMSTbQ15OEn8Qzg5+ SuGceBlLL4gzIQ+5y12cCI+BI17luCozcV7ghkRzXhAnhDY/7MEp17lENCPe49yQ6quNyb4X ITJYdKSJ5V4QjS7OPETK96ZZqE+Y8ygF9IbsEeZl5Aeg5IHUvYP9CntuIzFjtc0tF5T1DUoq SAgEnpTjb1B6QdJyzUu6wA1pxzvRo6nKpXF+xxviWgavcnojJ+KmUT1GsMCQ34bKCOoLCLqx iVx7H/pjPJ8Q2ew1VTFi5byeC5Ks9wcsXmcVnvzY/r0gTvFtkh+OLwZvF87udXzYwFIj+Leh WGYHPpglOhgOsre7DJlfkabZV0nfYa3KG0I/FwYi2QdviDNVS+CC9HN/gveva7VbEdgKkIB0 s2VxgViKcUGPV8QH/L7IBdldPMnWUAccSM5jqdmw7sc6RursGKV/gRvSt36iR1OVQ4CEq+Ud 8XHEr3J6IyfSY6ZRqGYpDSht3zSYIXGw1IZGXMAFGmTe+BNtTacc9gA1COc3wp3aSw27JQaf YtO9NRx7zad9U59pzRiHPAKfkFDuPqo5wauVC+Kmh1wYBeam0/KC+IYvcl6tjBckAziK3w16 B5k0eCVyCMo0SXm1i+BJa7peYFk7bi+IU7zD9MZOOa3wPo04dg5GvTfPapebPiEQ11UD4cPk TiIND6mLqtmJKiqcUhfibi4czBIdDQfh3NjctiA1EF70LtfRhobryMDhOloXG56jRZbjaLER oWaJuI1ApP67cRsB6q6Buo0451ocO2pWr2c03/dgloghf5K9nbCKorrin35BnMD7Kid3cUHc NEqxnBmgBsThqjM+zZIRnrbYiE4DkerhMzrNoBknZdiITtuQRKety6/gNL5X3dOUZQIIn2yz gtPMU65ud4Ebki58QY+mZ1f/jWg9hjzO7lvbXwi8l2Ipg9WZJja3vwxa218G6vZXHacez40t Psu869jR7S+Urpb6d1OqqY2wtr8MWrs/Bo7tL2R5cBWHeffHM/KR8LPOidn9QpVmSW+dsPKc 2JvZ/TLI3MmCY/cLGf0ccLtUOp4+6AbpUPJIoZZTQZdYN4F/svllkPnRBcfmF3JpOdbBPML5 qJoJXUYktNGcF4gTtiVNecYhXhAfzj3gCE0EypxFOUITDZlDzrARmrghCU00l18mCOAMIZIl GvIVJTlkhiY2njUfEaEXuKH58PmICL3J+bnF+II4cfJVTm/kRHKEuRrWw1IDEgtpRCZaMgIT T7bIiEE8iW03PGfI8SwhmqBE3Kl+qKW1L3BDMgdc0KOpygWNpHlF/FUOuTqO+Z7RLRck2YoK R2QikBxCPSMTN6QrBcNGZOKGJDLRXH95JjlFcgxz2STE6FOXrs7gfEYqHwRt3+8JN6QPf6JH U5Vro0rEG+KzX1/l9EZOxI9a5OCqGZkI5MbMLpGJGxqRiQaOyESkeXIZ8hWZaNCKTDRwRCZu iOcac/0VmQgoh5fPyEQcwKi7ZnP0jdIrdpTymfbnP2xIx/2J5CU/5S4q+USi091X+JT/00NR X/znP7iUAZ+l+QfO3oB1/IEAZOj8BqQkwpsMtqwvSBtiacMMO1f8+1wSgVHSwgzbLfEs3bCV Ck8NivpyYAPfvB6jnbC3joNmgCIfgoKivhxYBiQlTVKVnAG+ES9ZBqmqLQ/ELpU/qeA8jBxv iC0NDbwiKOFBsDTYBETld35oZNFzUPUkbBRpFf8lNjzRdBdkaPluSFdzhy0KYdj44wIMuJSc MI9alpxgxgmWfLLRRGJRcJHkJdZGaTY4uDmNG+9bnjJ7PY5BvtQDEqrZ63eRo4AviJte5Jrn DTX+pGrGPBE3vcjJAaV4hiBG+In4s8hx4IBiE6C+iNShyAh8TDRO8ZYk83gi/jBZEtSXHNnS ib0+6zVNhE+jrjwDkemHcuCcI8g9GrtynCLMxyBh9pxEPo3k3y2xrgWF0UHkaJaGhQQXA0Vn 631UUHlCoMYH6RFKfPbWBUnTi5yEuKJCPS9OL0iaSo2QhDkKO6XNjTA/1EfnQiUzjjs1De9S Q2eHhMbIHQcZXhA3fUJOTcR6nBGKgt2QjNOL3EOJXJCaxHnUukAn49o1PwL5sDFADn9oOMWJ T/bj/Ro2hE4kUzybZQJ13oOZKl3Wc6ZgQ7UbXqLwVlMah8pL9fYchonWRhR1xrZ47pZ4nabk dHeB9HByBhFS7zmBLuGYEUn312zpQTi1/8Fa1sMHXwi3O6XMW+TlyOXF4o031IzkTk1YZrSf G0Q5DbH9gXg1c0FSduMpF7WwPwj2aw7AFUJOGc+pnjmObn8ibljZTQQoChPVRgJbf1C/GfXa gcSJgX3DOmrvbIiLlHBaTaa5uyEb9IK0mMkph9RqGd68wLsgaSqBraRpOON3I1zgAE9ZdAqT JHF5Oztb7yKNUPULkpZPuTzy9Qg5LrB2QdIbTzkp4Z+wlixysQfhhp5fC98uTwnooXJAV8p6 5JlBRQ+9kp48oaQpAHH8VCpq/uH6vL5n5c/fV370AYHYkwnN6XlgXZA0NRBzyBos0LCi6i3q euIcYOQ9sDROl0GBEt+yNg1SFORBWEUU3jKbrDv16/Ig5iG7kFEuBs6xWXWVuMg5gLUEAqpW 40KsBXCQJJdAkLj7yehNjuGIU90533eiBHEx5wxEgAA+a59HsdGXrviYKDKg8dATyYHsYiQs uVHMi60yGjoLwPsa+Y1PhjtrmlDPgQzj5s9HxKN3eKX4xIRpbPxwEjsH0y6I0iQwAFkt5IRw r4XMoxtYkMFLEzRn8XNdrWladGyHYG1gTRBkhNMU060NQou0r8pnbfL1WuZDdBez73xS3CFX /UFye47eWlyX59WU8hSGBYSJ0MvJ8h4xeVJivHXNqiGDfrzJHvRIAbJEyD7mwYJ6H1pq9Ebp xnB2LfRHH4nEN4bWN0loAj7mpSdVJzeG1jdJ5JDyUrGjahKiakn1fcGGEFZrkaM+o9cED3w9 HjIQVGO1j/MZyQT6QvJcZFZz5r1oH0Ybpjiv4dN7elVyvh6qFcihrReGdPObZNGIb34YriB/ Y2iN4q8dVgxKsUi6sp9l3EhL8DAhW4nmUzZuYZVobSzvNITrDykK8ZrSB9dzNP+gzhe7Ubwb c8YfGIRcVQ+N4c+NuG+ikmqGX9YDcbrX49Fp2hlHWPS4njog4R1LOjxN4g1dj0MvZVmIz8WL bx+abnzyU0sxLDIC6afh48UV+bE8p/XJl4lafcUju0tcWPRuqlbnxNfSiBC6RznHEUzssj5q p12QtD3k2jhhuSPaoCHn348SIKhBk3BiLroYqYqKY4SZ8kzHTNY+LMlnJyMzQ+pYMgut6tDK ctQLVA4bpBgw3B2cHkTh+ZxHLnlBLCFfkTOM3TBxWtNCg57jhzmMr5XRbS4MP3yTpE7H/lxc kS1sj2Qdz3mlbYwR+VBa3g1WOWou85fqsjJo2GdH3wVT8xyGY6t832FW7+Qid3xOLz5AT3pA ci+D6aoKhyFXKYmC1kVPTuGiqhnfKuBzJKnAHOgxGrPQnZ4GTcakk3IVqPCakpyYmWL0njt3 DePkb/FKYRCM0o0eJ3JL53ZhBpwPB0uPM50dpir84yi70qr3GtAbtASMFHzh+FXHJ7fbAqr0 HRtGOEaKFGrkHhm8jqlRkDUhRjlF1ljiqpglodFjsyyIC0wMJ28bOUJyYgpixdlHh88iDkHs WFSeA/BeJWQTp0xoSB9g5i1hHFEx5dT8yzAK+LD2MD5oHvvdaDsrkuY+XqsvI/wvw7XEZShQ hkCSqnNT3YEPxfm2QSgv2oHE0sbPwG3kubHsy/AdjuPH8RrFx5erVvTFl5fvCJb5ZA2+RbGB 81ibyY1HB3MEVM50AxO1BxblIPGV+I64MB4Oovar1I2CISk2DD2XfH0cOclrU5rSo2Mzjw+m hKXERWz07NbYxcPEildOuIdTgpUPKc1RhQ4rV43LBpUd7z+JegS/eCh9nVqQAcZWRa/jgjga Vx2bqG0kkf18qDBWLj2rK/FPGDEfHVYn2+BI/eU1EjfVjRSkAPIpln2653EyMIwdvAGpevuH O6nWGnGIzsPA/INzZ3VewEnf/OlSUkNfFAF7H3PSSoB4YHhp+NBsBPRxACKGgJ6Qgp7YpXd2 HFNUpCf52ouYNHghXBuJQ0/QvyISubh8ImJQeHUHsainDNNbj5JtDfWuGXBVYxlZu48jxsQO ARrV6MeSVcZjF9cIzvblI8Zxi1Guh2K8XaYLDB/8cAvTG8eNJWek4Z1AP+BmNAC4Ifc7dzHt PLs5wUqWWuhQ+amLEZgx+rh0BUJdWfk1lH5B2fIb+/64S8YxduEw5y98M0Bhmt7mvx+hnt3S THGMEc+zXWwIsNTCr3Mvvh1/MlAeCiwpMxZXikOKwH3uhbn8b//+98+Pz8//D4xAOVsKZW5k c3RyZWFtCmVuZG9iagoxNDMgMCBvYmoKPDwvTGVuZ3RoICAgMTcvU3VidHlwZS9Gb3JtL1R5 cGUvWE9iamVjdC9CQm94WzAgMCA5NSAzNV0vUmVzb3VyY2VzIDE0MSAwIFIvTWF0cml4WzEg MCAwIDEgMCAwXS9GaWx0ZXIvRmxhdGVEZWNvZGUvRGVjb2RlUGFybXMgbnVsbD4+c3RyZWFt CnjaU1VwCXbKSczLBgALiALFCmVuZHN0cmVhbQplbmRvYmoKMTQ0IDAgb2JqCjw8L0xlbmd0 aCAgICAzNC9TdWJ0eXBlL0Zvcm0vVHlwZS9YT2JqZWN0L0JCb3hbMCAwIDk1IDM1XS9SZXNv dXJjZXMgMTQ1IDAgUi9NYXRyaXhbMSAwIDAgMSAwIDBdL0ZpbHRlci9GbGF0ZURlY29kZS9E ZWNvZGVQYXJtcyBudWxsPj5zdHJlYW0KeNorVDBUMABCCJmcq6CfZ6Dgkq8QyFuIKWMEkQEA HmULBQplbmRzdHJlYW0KZW5kb2JqCjE0NyAwIG9iago8PC9MZW5ndGggICAgMjkvU3VidHlw ZS9Gb3JtL1R5cGUvWE9iamVjdC9CQm94WzAgMCA5NSAzNV0vUmVzb3VyY2VzIDE0OCAwIFIv RmlsdGVyL0ZsYXRlRGVjb2RlL0RlY29kZVBhcm1zIG51bGw+PnN0cmVhbQp42itUMFQwAEII mZyroO8W5Kvgkq8QyAsATYsFyQplbmRzdHJlYW0KZW5kb2JqCjE1MyAwIG9iago8PC9MZW5n dGggICAgMTYyL1R5cGUvT2JqU3RtL0ZpcnN0IDUvTiAxL0ZpbHRlci9GbGF0ZURlY29kZT4+ c3RyZWFtCnjaVY3BCsIwEER/ZW9NDk03kWiVUhADPYkFFS9eapPKQkkgTfX3LQiCzGEO83hT KkCoquIQXZcoeNMlx8xOodyiVFqt1EbLHHWGmPEvFSK7irOAJrwEtJF8Iv+E0zBQ7yDPoVlG s4QXx2D/faUsNUr987Ux2Ll3ke37GB5dAkNTonF0ESQKKeQa7uxG3ob3dOe8uFAaHZuXx6Ut r+sPudw3CAplbmRzdHJlYW0KZW5kb2JqCjE1NCAwIG9iago8PC9MZW5ndGggICAgMTIyNi9U eXBlL09ialN0bS9GaXJzdCAyMzkvTiAyOC9GaWx0ZXIvRmxhdGVEZWNvZGU+PnN0cmVhbQp4 2o1Wy27bOhD9FS6TRUqJD1ECigCOHadB48awfXMLBF4oMuPo1pYMSW6Tv79nRpKd16KLgcjh PA6H81BsRSDC0IpQJfhGInQhvk5oq/CNhY41vokwCmcqEMZhr0JhYsgpJSJFukbEAX1Bjhcx FpFrrcYBdhpuYsiFGnqJBlvDQWIhrI1QgQVbWywctHQkFKtqh4Ul9RgLB3UTYpHAmIGwCiBj IKwMUBnIqIg4iVA6AMcGWAB8COtKw8bXr3JYFo0vmlrECa4+k8Oq3F2Uz/cBdlGohEvUUk78 Kk8/cKdpBU1clRVnvi73VeZrkbiWUTZp40UgFy87D+G1l4OiKJv6ngILieX5OQCMc79ZHXly NOOAk4V5vh5v0nUtdCu5II4cDU7k5KXK09W0Ks9mfr3fpBXkF48i+BKI9alcnPwzv5reQrhI m33lT1sI7F3O9w8N7f7NV2vfAHbW3OMhHYUeD++SADcTsWUEY3oXOfnOb02MmzL7xQ9Lmzus GLUcTIHvB0LNwM/P5fhRhAwaGLO5b+7ldDReyjGizXnEUjj+5je/OaHIysdbUWr1onwHMnC4 AnFCeZHWntlkyzd5lrL4TAR/p/bBq7wssnKVF2vEqBgUdX7Yk/zI11mV75qy4oTnKOVV3Qyf gBfBukm7tbKWgtw81VwRH65xNMTbH+nWf4KlSwDFMheUg2ehdeJMWSpUhD+xSMXrJt3k2aBY byjhhunum8/XT42InJE/u7WJjRzUGaUsdCS5pzVZkvPGb+9EHLOXcb7xVNW6xXyP2qMCEhrl Z5DcNtRUACKi0o5RZbFhMkgfm0RUtEKD+ItKJPm/IdXpkI2eTBAJB79UdNaAUG1RBD78mxh8 lHtkCV8itAtYxjiFojTgxyJCWVu0lvYbQ0/zHSJkqsV5DH2LHmfRSKzVfA9NTQVfxhDg3iAT wzeaiUFXsRHOAsgAg7Wwi9JR1LVwVxNRs4lEjD3xLZoP6dlI4xERD9jUmny1PdNB1uDMAINR XSxxl96/Ir8UG3w5Nlhri94bAJTtiACidiO+HdIOvcy0mrbT7LT5Raxh4nNSDDoLEaqQ4LGB qFUkSJZ7bJsCH54MUC3pkb6j5wYI7Ak6pYDpzjRKnnlhiL1lHoGzoerSBa3ZEDDLOs4eiVKA nv8zckg/i17F6fCKOISvKEJ4+3R4T4SL18a9IU4Jeio8OT3/Z+Qw/gzJIh1eE6fDK2rTq0uH 90RpRl8bviFKCU45Fy77vkETgeYFtWE5yJq8LOR1kW32K98Pkve9f9m34Z2vmtzXPISpa10+ N1dzHlE0hPv2NBkGPJ37/bDclBUGBGYqhgtSOIqP36W8y+v8AU2nqfZeXq7yJj3sRvl261ft elr537n/029yzNzuZJE3G39yk7549NNTdnk1D/h3oIdwO52gqV1M5I+y2qYbORyI8EsAtnhM NzWCMknrXzgsvMxSPhpcz7uzctctOHyHK8v5gN2z/blcVGlR72icZy/y+/Hk7fB6HbB2QP+8 ffgP85P/R97096MjQsSIu6uF/DvTC4+3tNeH/cHhwj83y08wHDyao5GCfn/YhizwE6XcR3Pv dJMjgNkE++N0GpXZZDTt5zqzENjL7YNfrfyKpkNNV/kf8IqIgAplbmRzdHJlYW0KZW5kb2Jq CjE1NSAwIG9iago8PC9MZW5ndGggICAgMTExL1R5cGUvWFJlZi9Sb290IDg0IDAgUi9JbmZv IDgyIDAgUi9JRFs8QTFBNTVGQzBCRERBOUI1N0Y2RjE1NTcxNzFCRDE1RkI+PDkxRTFBQTZD QzdEQjMxQzJGRkYxMDYxRjAyODU0OTEzPl0vU2l6ZSAxNTYvUHJldiAxMTYvSW5kZXhbNTIg MSA4MiAxIDg0IDIgMTE1IDI0IDE0MSAxIDE0MyA5IDE1MyAzXS9XWzEgMyAxXS9EZWNvZGVQ YXJtczw8L0NvbHVtbnMgNS9QcmVkaWN0b3IgMTI+Pi9GaWx0ZXIvRmxhdGVEZWNvZGU+PnN0 cmVhbQp42mNiZDi/g4GJkcHwIQPTf4anLSC2dC0DEwMQMJJAAvUy/gDp/c8JE2GcLPcNyE7b DTTzP7s6N269jL82fASqYQsQIGQLk8GW10A2I8jN/85PEYOLG5q9BImcksCqy+j5UyYwH0iy 6jEAAIKKIj8KZW5kc3RyZWFtCmVuZG9iagpzdGFydHhyZWYKMTQ1NTg1CiUlRU9GCg== --B_3637170955_46328921-- From nobody Mon Apr 8 11:01:08 2019 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9FEB11200A1; Mon, 8 Apr 2019 11:01:07 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.68 X-Spam-Level: X-Spam-Status: No, score=-1.68 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_INVALID=0.1, DKIM_SIGNED=0.1, T_SPF_HELO_PERMERROR=0.01, T_SPF_PERMERROR=0.01] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=fail (1024-bit key) reason="fail (message has been altered)" header.d=nostrum.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wuNmaHVv97h2; Mon, 8 Apr 2019 11:01:06 -0700 (PDT) Received: from nostrum.com (raven-v6.nostrum.com [IPv6:2001:470:d:1130::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5E7311200B5; Mon, 8 Apr 2019 11:01:06 -0700 (PDT) Received: from bens-macbook.lan (cpe-66-25-20-105.tx.res.rr.com [66.25.20.105]) (authenticated bits=0) by nostrum.com (8.15.2/8.15.2) with ESMTPSA id x38I14kq053998 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO); Mon, 8 Apr 2019 13:01:05 -0500 (CDT) (envelope-from ben@nostrum.com) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=nostrum.com; s=default; t=1554746465; bh=cQpi7v7FeU2FkPZqI0OLozZ/+ByQjDgPO7MGjT2Ios8=; h=From:Subject:Date:To; b=g2S6gPKIeGhuxyyqCKLcFeafKvO/zj0BlOR8bnmWj0BPnHYWOmdyorZqfJnPcIaIo HmOkSBvrCs9+HUl2PlgGvWsKkjTlqrc5ATB2YshBram63CnZghj0chuBvMfvO9oTi7 7c8EAdIwspLVB1hK7EsG2g3A2Ggk/5dKCob1YPCE= X-Authentication-Warning: raven.nostrum.com: Host cpe-66-25-20-105.tx.res.rr.com [66.25.20.105] claimed to be bens-macbook.lan From: Ben Campbell Content-Type: multipart/signed; boundary="Apple-Mail=_B61672C2-444F-416F-A0D3-4950D88B0423"; protocol="application/pgp-signature"; micalg=pgp-sha512 Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.8\)) Message-Id: Date: Mon, 8 Apr 2019 13:00:58 -0500 To: stir@ietf.org, draft-ietf-stir-passport-divert@ietf.org X-Mailer: Apple Mail (2.3445.104.8) Archived-At: Subject: [stir] Comments on draft-ietf-stir-passport-divert X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Apr 2019 18:01:08 -0000 --Apple-Mail=_B61672C2-444F-416F-A0D3-4950D88B0423 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Hi, I agreed in Prague to review draft-ietf-stir-passport-divert, and have = done so. I think it=E2=80=99s mostly in good shape, but have some minor = comments and questions. Thanks! Ben. *** Substantive Comments *** =C2=A74.2: - What happens if a =E2=80=9Cdiv=E2=80=9D passport chains back to a = PASSporT object with an unknown =E2=80=9Cppt=E2=80=9D value? Is the = answer the same if the offending ppt occurs at the innermost PASSporT vs = in the middle of the chain? (That is, is there any possibility of = traversing a ppt of unknown type when verifying the chain?) - "The verification service SHOULD also verify that all other "div" PASSporTs in the chain share the same "orig" value.=E2=80=9D What is the benefit of doing this? What would be the consequences of not = doing it? What would be reasonable behavior if the verifier discovered a = non-matching orig? (And depending on the answers: Why not MUST?) - "It is furthermore RECOMMENDED that the verification service check that the "iat" field of the innermost PASSporT is also within the date freshness interval; otherwise the verification service could allow attackers to replay an old, stale PASSporT embedded in a fresh "div=E2=80=9D.=E2=80=9D Why is this not a MUST? Do you envision situations where it would be = reasonable not to comply? - "PASSporT. Note that (per Section 4.1) a chain may terminate at more than one innermost PASSporT, in cases where a single "div" is used to retarget from multiple based PASSporTs.=E2=80=9D What happens if some of the terminating PASSporTs fail verification but = others succeed? =C2=A76: Is =E2=80=9Copt" intended for general purpose use? If so, I suggest = splitting it out into a separate draft. =E2=80=9CDiv" seems like a = strange place to hide it. Is there a hard 3 letter limit for passport parameter names? =E2=80=9Copt=E2= =80=9D seems rather non-mnemonic due to the collision with the plain = English word. =C2=A711: Are there scenarios wheret the original destination in a = diverted call could be privacy sensitive? *** Editorial Comments and Nits *** - There are some minor complaints from IDNits that should be addressed = prior to pubreq. - Please expand the following acronyms: PASSporT (in title, abstract and body) JWT STIR =C2=A71: - "practically speaking some operational environments do alter the To header field=E2=80=9D That may be a bit of an understatement. Perhaps =E2=80=9Csome=E2=80=9D = should be =E2=80=9Cmany=E2=80=9D? - "and they both can capture minor syntactical changes in URIs that do not reflect a change to the actual target of a call.=E2=80=9D= I=E2=80=99m not sure what =E2=80=9Ccapture=E2=80=9D means in this = contexrt. Are we talking about otherwise unnecessary H-I entries due to = semantically equivalent but syntactically different URIs? =C2=A72: Is there a reason not to use the updated boilerplate from = RFC8174? =C2=A74.2: It seems early in the evolution of STIR to call base = verification services =E2=80=9Ctraditional=E2=80=9D :-) --Apple-Mail=_B61672C2-444F-416F-A0D3-4950D88B0423 Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQIzBAEBCgAdFiEExW9rpd7ez4DexOFOgFZKbJXz1A0FAlyrjFoACgkQgFZKbJXz 1A0bxg/8CpBGpvUxyjmIndE2AwyYuaRwh81YsxAspZbOR7kArfreKxIKd1i/XhGN xSerhFs+s2wbhGQDSxCgtFUYsm2tyLdGCfVucSh8/bmUiVcnF3SQV+MPmqbHVo1d iWy1pM6mlPv5mYFJGuuUEOoIopIFONDNMFQUfwaFNX2CGVesjVDTKs5x1uukOp1X xKp+XjZftGbBHPtBFEo4FsZeYloQH3ADtkl2SUqxqkvWqVsSpYXnL88vJLAoe4PW 3PnuhdB2Cf8s1hAAw9/cvVybA49EF4X27lVHWyuJuHDiav7861tX8vZS58etcgY7 QrTF3110Sb1esmzfeaFzfIMvk6lnd0EhAD8QNI4B62mSLAwl8YSEtvBRDKAl7Crn w3iuMWmtCom3bvtkwzgp+wfDR0SqeyVKWKSCDD4JfgRACgPyp/H4NdR8B0BpCCC5 AcKes1qdHvLRLyNZg8ZVgjygsCa5Bq4av3uAueh5mnQWAvKRTXt57OoYX8kGQLHO 1YdvtetZ3nDiMrIgru3HZGP25pbJBuablKAdLRgbF0CCqQsgocyFPMRB1W4Bis+T fxaovpVnXMdden1wIYUQ5c/4J4ffOMGBvCRg+jIG9F3GKdZ4ydbNCVWWdd2BElrN 7xPOdiK+DsU4pkHVRwdWCbaxIlp6vXMtqB8WC/iUmSy850bSMhI= =AlJ3 -----END PGP SIGNATURE----- --Apple-Mail=_B61672C2-444F-416F-A0D3-4950D88B0423-- From nobody Tue Apr 9 09:44:29 2019 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 68A561201AE for ; Tue, 9 Apr 2019 09:44:27 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.979 X-Spam-Level: X-Spam-Status: No, score=-1.979 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, T_SPF_HELO_PERMERROR=0.01, T_SPF_PERMERROR=0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nostrum.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2DyPOHsiKq7t for ; Tue, 9 Apr 2019 09:44:25 -0700 (PDT) Received: from nostrum.com (raven-v6.nostrum.com [IPv6:2001:470:d:1130::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 40B32120026 for ; Tue, 9 Apr 2019 09:44:25 -0700 (PDT) Received: from unescapeable.local ([47.186.39.7]) (authenticated bits=0) by nostrum.com (8.15.2/8.15.2) with ESMTPSA id x39GiN2Y077113 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO) for ; Tue, 9 Apr 2019 11:44:24 -0500 (CDT) (envelope-from rjsparks@nostrum.com) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=nostrum.com; s=default; t=1554828264; bh=ILKa3gycAVY5XWRdEqkSEnSi6DY9suxiMHmdL2jvOtw=; h=Subject:To:References:From:Date:In-Reply-To; b=WLh8yj8qmjjfVjfdRhMqNyOe0t/9mqt1qZqCUTwsl/o89LX2UPdQgcryaShYLTy9x LHmSpilB6d2B5kG9ZpP0wxcNx/kB6wPpn2Tdigpr4O8yHWrmXDKPvJAVKrRNfPFS+J IUjHyrgLXSlT2a/QM2WKivZrJdLtMD/TXdS54SAQ= X-Authentication-Warning: raven.nostrum.com: Host [47.186.39.7] claimed to be unescapeable.local To: stir@ietf.org References: <3BF05F63-D7C2-4BC3-912F-A7628F1B3BEC@vigilsec.com> From: Robert Sparks Message-ID: <8bc5e24f-5e79-a496-664c-9f09aeaa0232@nostrum.com> Date: Tue, 9 Apr 2019 11:44:23 -0500 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:60.0) Gecko/20100101 Thunderbird/60.6.1 MIME-Version: 1.0 In-Reply-To: <3BF05F63-D7C2-4BC3-912F-A7628F1B3BEC@vigilsec.com> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Content-Language: en-US Archived-At: Subject: [stir] Second WGLC: draft-ietf-stir-oob-04 (was Re: Second WGLC: draft-ietf-stir-passport-divert-05) X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Apr 2019 16:44:28 -0000 Retransmitting so that the subject matches the body. RjS On 3/31/19 3:07 PM, Russ Housley wrote: > This is the second Working Group Last Call for draft-ietf-stir-oob, which is now at revision -04. > > Please send your comments to the list or the chairs by Friday, 19 April 2019. (This leaves a little over three weeks since many have travel plans after the IETF week). > > Robert and Russ > _______________________________________________ > stir mailing list > stir@ietf.org > https://www.ietf.org/mailman/listinfo/stir From nobody Fri Apr 12 11:15:54 2019 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 943441202E1 for ; Fri, 12 Apr 2019 11:15:52 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.98 X-Spam-Level: X-Spam-Status: No, score=-1.98 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, T_SPF_HELO_PERMERROR=0.01, T_SPF_PERMERROR=0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nostrum.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dywvON4aKqxs for ; Fri, 12 Apr 2019 11:15:51 -0700 (PDT) Received: from nostrum.com (raven-v6.nostrum.com [IPv6:2001:470:d:1130::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E5F7612012E for ; Fri, 12 Apr 2019 11:15:50 -0700 (PDT) Received: from unescapeable.local ([47.186.39.7]) (authenticated bits=0) by nostrum.com (8.15.2/8.15.2) with ESMTPSA id x3CIFnnn003806 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO) for ; Fri, 12 Apr 2019 13:15:50 -0500 (CDT) (envelope-from rjsparks@nostrum.com) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=nostrum.com; s=default; t=1555092950; bh=8JmSM3/POHfrEM1RZlmLLd1TDrQ9YWlW19j42NLLxT8=; h=To:From:Subject:Date; b=qOh86ibELXSJRCiZ3biiC6yD/mvMGES/e11K1QLZNTfujVyId3XWtHBj5SSWyp7v0 uh3NKSrcgjdWdLtZSKTexdKjAFofFuhmb2d9mKtzIMnFZXSsmR9mjXElsiup11i6bm n6d7dwa+pjKG8PqgP+fuu5xh0CQzFCW72cVws5NM= X-Authentication-Warning: raven.nostrum.com: Host [47.186.39.7] claimed to be unescapeable.local To: "stir@ietf.org" From: Robert Sparks Message-ID: Date: Fri, 12 Apr 2019 13:15:49 -0500 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:60.0) Gecko/20100101 Thunderbird/60.6.1 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Content-Language: en-US Archived-At: Subject: [stir] wglc comment: intended status of draft-ietf-stir-oob-04 X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 12 Apr 2019 18:15:53 -0000 I recall agreement that this would be published as Informational, rather than PS. RjS From nobody Fri Apr 12 12:10:23 2019 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 547061207A0 for ; Fri, 12 Apr 2019 12:10:21 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.979 X-Spam-Level: X-Spam-Status: No, score=-1.979 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, T_SPF_HELO_PERMERROR=0.01, T_SPF_PERMERROR=0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nostrum.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id t_DV0UPqr62p for ; Fri, 12 Apr 2019 12:10:20 -0700 (PDT) Received: from nostrum.com (raven-v6.nostrum.com [IPv6:2001:470:d:1130::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1CBB91201B6 for ; Fri, 12 Apr 2019 12:10:20 -0700 (PDT) Received: from unescapeable.local ([47.186.39.7]) (authenticated bits=0) by nostrum.com (8.15.2/8.15.2) with ESMTPSA id x3CJAIao012503 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO) for ; Fri, 12 Apr 2019 14:10:19 -0500 (CDT) (envelope-from rjsparks@nostrum.com) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=nostrum.com; s=default; t=1555096219; bh=edyor+SimmdevL8HArfoteWV2fEKXMuyAg2r/UIm74Y=; h=To:From:Subject:Date; b=KWYCbMj8OSI0dg4fV7tC82irNqSkzJYovo/utSrhSdaTi6ywpVDl96Uz+mSwEfRoP /NJM4CfOL0+u1i9qdqehx8zKUGMWRfm+94jlk+pIxVV9YtTusnsHawmIpHa1heThcQ Vf6c70H4O2b5zA1KOAjMfXOB8YiWEpY/vgAadnYs= X-Authentication-Warning: raven.nostrum.com: Host [47.186.39.7] claimed to be unescapeable.local To: "stir@ietf.org" From: Robert Sparks Message-ID: Date: Fri, 12 Apr 2019 14:10:17 -0500 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:60.0) Gecko/20100101 Thunderbird/60.6.1 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Content-Language: en-US Archived-At: Subject: [stir] jwt claim review requested for claims in draft-ietf-stir-passport-divert X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 12 Apr 2019 19:10:22 -0000 See From nobody Fri Apr 12 13:32:58 2019 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E7C8F1201A5 for ; Fri, 12 Apr 2019 13:32:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zW13qA8P8nF0 for ; Fri, 12 Apr 2019 13:32:54 -0700 (PDT) Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4B5F61206C5 for ; Fri, 12 Apr 2019 13:32:54 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id 38D54300AA5 for ; Fri, 12 Apr 2019 16:14:36 -0400 (EDT) X-Virus-Scanned: amavisd-new at mail.smeinc.net Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id DQZXPmYFmsJp for ; Fri, 12 Apr 2019 16:14:35 -0400 (EDT) Received: from a860b60074bd.fios-router.home (unknown [138.88.156.37]) by mail.smeinc.net (Postfix) with ESMTPSA id 422683004C7; Fri, 12 Apr 2019 16:14:35 -0400 (EDT) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 12.2 \(3445.102.3\)) From: Russ Housley In-Reply-To: Date: Fri, 12 Apr 2019 16:32:52 -0400 Cc: IETF STIR Mail List Content-Transfer-Encoding: quoted-printable Message-Id: References: To: Robert Sparks X-Mailer: Apple Mail (2.3445.102.3) Archived-At: Subject: Re: [stir] wglc comment: intended status of draft-ietf-stir-oob-04 X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 12 Apr 2019 20:32:56 -0000 > I recall agreement that this would be published as Informational, = rather than PS. Yes, that was agreed in Montreal if memory serves. The minutes do not = reflect that point, but they do reflect the decision to publishe the = architecture/framework and not a protocol document. Russ From nobody Fri Apr 12 13:45:45 2019 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6F76B120615 for ; Fri, 12 Apr 2019 13:45:43 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.98 X-Spam-Level: X-Spam-Status: No, score=-1.98 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, T_SPF_HELO_PERMERROR=0.01, T_SPF_PERMERROR=0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nostrum.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nBz86Qpc-Jnf for ; Fri, 12 Apr 2019 13:45:41 -0700 (PDT) Received: from nostrum.com (raven-v6.nostrum.com [IPv6:2001:470:d:1130::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C3283120396 for ; Fri, 12 Apr 2019 13:45:41 -0700 (PDT) Received: from unescapeable.local ([47.186.39.7]) (authenticated bits=0) by nostrum.com (8.15.2/8.15.2) with ESMTPSA id x3CKjegc027739 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO) for ; Fri, 12 Apr 2019 15:45:41 -0500 (CDT) (envelope-from rjsparks@nostrum.com) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=nostrum.com; s=default; t=1555101941; bh=WLVi4QsLQcS9KWu0417zgPyaE5kgMC0jyiQXg8BMOrs=; h=To:From:Subject:Date; b=KOkwWgDyZPneUC5ayazPHk5F24RL8y09pIQ7Fuh7I++Z9lXu/BK9bhlqsaguoFPbp N8TGRUNvfoJIX3WNRKBpgMqoRsXT+j//HNYGE4F3vnZ4B4MVjak21zmE+Mh/2qqH7o QRoHY6yMvwfk7rtI3Z1ej1b56nUL5X3J7wGeHEeM= X-Authentication-Warning: raven.nostrum.com: Host [47.186.39.7] claimed to be unescapeable.local To: "stir@ietf.org" From: Robert Sparks Message-ID: <739ed9d7-79f3-867b-6dda-4664b23e971f@nostrum.com> Date: Fri, 12 Apr 2019 15:45:39 -0500 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:60.0) Gecko/20100101 Thunderbird/60.6.1 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Content-Language: en-US Archived-At: Subject: [stir] wglc comment: draft-ietf-stir-passport-divert-05 X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 12 Apr 2019 20:45:44 -0000 This is a bit of an edge condition thing. Section 4.2 talks about normal verification, and states (maybe implies) that there will only be one outermost PASSport in a chain of "div"s. What if there are two (from someone trying to be malicious)? RjS From nobody Mon Apr 15 08:04:31 2019 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 444DB1203C5 for ; Mon, 15 Apr 2019 08:04:30 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vvetT0465kv4 for ; Mon, 15 Apr 2019 08:04:28 -0700 (PDT) Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 081241203B4 for ; Mon, 15 Apr 2019 08:04:28 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id 9E8F2300AAA for ; Mon, 15 Apr 2019 10:46:09 -0400 (EDT) X-Virus-Scanned: amavisd-new at mail.smeinc.net Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id wpwcqPSpqlPy for ; Mon, 15 Apr 2019 10:46:07 -0400 (EDT) Received: from [172.20.10.2] (mobile-166-170-29-191.mycingular.net [166.170.29.191]) by mail.smeinc.net (Postfix) with ESMTPSA id 1051C300AF4 for ; Mon, 15 Apr 2019 10:46:06 -0400 (EDT) From: Russ Housley Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.8\)) Message-Id: <3162DDF4-CB71-41F8-983B-8572D33B460B@vigilsec.com> Date: Mon, 15 Apr 2019 11:03:21 -0400 To: IETF STIR Mail List X-Mailer: Apple Mail (2.3445.104.8) Archived-At: Subject: [stir] WG Last Call Comments: draft-ietf-stir-passport-divert-05 X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Apr 2019 15:04:30 -0000 Document: draft-ietf-stir-passport-divert-05 Reviewer: Russ Housley Review Date: 2019-04-15 Major: Section 1: The last paragraph introduces the "div" PASSporT type. In another document, IANA got confused when the "type" was not aligned with the names used for the registries. Looking at the structure of RFC 8225, I think that "div" is a PASSporT Header Parameter value. Please reword to provide clarity. Also, later in the document, "div" PASSporT is used as shorthand. This seems very useful. I suggest this be defined in Section 1 and used consistently in the document. Section 1: Please provide similar clarity for the separate "div-o" PASSporT type and "opt" PASSporT element. Defining a "div-o" PASSporT in Section 1 would also help the reader. Section 3: The first paragraph points out that a new PASSporT is only necessary when the canonical form of the "dest" identifier (per the canonicalization procedures in [RFC8224] Section 8). This seems like a place for a MUST NOT statement. If the canonical form of the "dest" identifier is unchanged, then a new PASSporT with a "div" claim MUST NOT be produced. Section 3: The text talks about the PASSporT claims object. I think this is the PASSporT Payload as described in Section 5 of RFC 8225. Please use the same terms. Similarly, the last paragraph should say that the PASSporT Payload of a "div" PASSporT MUST NOT contain an "opt" claim. Section 5: This section also text talks about the PASSporT claims object. As above, I think this is the PASSporT Payload as described in Section 5 of RFC 8225. Section 10: As I said above, in another document, IANA got confused when the "type" was not aligned with the names used for the registries. This can be avoided by providing the URL for the intended registry in each subsection. Minor: Section 1: The second paragraph says: "... it also provides a signature over the called number as the authentication service sees it." I think the point is to authenticate the intended recipient, not just provide visibility. Section 2: Please update the first paragraph to reference RFC 8174 in addition to RFC 2119, as follows: The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in BCP 14 [RFC2119] [RFC8174] when, and only when, they appear in all capitals, as shown here. Of course, also add a normative reference to RFC 8174. Examples of "x5u" claims use the .pkx file extension. Please use .cer to align with the conventions in RFC 2585. Nits: The document uses 'div' and "div". It also used 'dest' and "dest". Please pick one convention, and then use it throughout the document. Suggestion for the start of the Abstract: "This document extends PASSporT, which is specified in RFC 8224 to convey cryptographically- signed ..." The 'Updates' line in the title page header should list only the numbers of the to-be-updated RFCs (if approved). Outdated reference: draft-ietf-stir-rph has been published as RFC 8443. Please update the reference. From nobody Mon Apr 15 11:18:08 2019 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 93EB712012F for ; Mon, 15 Apr 2019 11:18:07 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.338 X-Spam-Level: X-Spam-Status: No, score=-1.338 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, KHOP_DYNAMIC=1.363, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=team.neustar Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id b0huWoV4c9tP for ; Mon, 15 Apr 2019 11:18:05 -0700 (PDT) Received: from mx0b-0018ba01.pphosted.com (mx0b-0018ba01.pphosted.com [67.231.157.90]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C58F2120058 for ; Mon, 15 Apr 2019 11:18:05 -0700 (PDT) Received: from pps.filterd (m0078668.ppops.net [127.0.0.1]) by mx0b-0018ba01.pphosted.com (8.16.0.27/8.16.0.27) with SMTP id x3FIDFXp023253; Mon, 15 Apr 2019 14:18:02 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=team.neustar; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : content-id : content-transfer-encoding : mime-version; s=selector1; bh=ov4fEr10OEZq8NvpnMwx5at4YW9zbjGY1nG5Gw2NmcY=; b=dMB3YzJMDdAtox2I1x5dE97ZSmEJpIEZRKlDK2/01MQCPFvkz1Sn9wvhRvMH6hqZt/1D hxSlOUw//1P/JVa4ZfT5rk8D2gg/N8dD1WM9swmyncOM4ply6dWpbYX+EiFIoERnABxI 3issKbH3fTKoPaY1m+ucyLWcr3CZdUVOfkMT2X8to7HafEZLjY9AnILqiixvarxUu9p+ 7p8TE8fimJXd3HrShhpwuXFhNaX3pGZtfcMwgtsASdL2JYeNIcera7n6x677/A9y6q1l ftinqJQwMmDrolQlGlwQr27ocayUs+xxFXCtusZDdIMQHJ/pXnA/ux5Uwy2y1hvmofJ0 yQ== Received: from stntexhc12.cis.neustar.com ([156.154.17.216]) by mx0b-0018ba01.pphosted.com with ESMTP id 2ruajn4uau-1 (version=TLSv1 cipher=ECDHE-RSA-AES256-SHA bits=256 verify=NOT); Mon, 15 Apr 2019 14:18:01 -0400 Received: from STNTEXMB101.cis.neustar.com ([fe80::a831:d3b4:fb4e:e45b]) by stntexhc12.cis.neustar.com ([::1]) with mapi id 14.03.0439.000; Mon, 15 Apr 2019 14:18:00 -0400 From: "Peterson, Jon" To: Russ Housley , Robert Sparks CC: IETF STIR Mail List Thread-Topic: [stir] wglc comment: intended status of draft-ietf-stir-oob-04 Thread-Index: AQHU8VvMEtjkgroQlUSL73/xdrqCz6Y5PiMAgAQb94A= Date: Mon, 15 Apr 2019 18:17:59 +0000 Message-ID: <3E29EDF2-BC2A-468A-A5A5-9DA5D659F6BD@team.neustar> References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.10.8.190312 x-originating-ip: [10.96.12.236] Content-Type: text/plain; charset="utf-8" Content-ID: <1AF49431216AB54496FEB6BA03902DF3@neustar.biz> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2019-04-15_07:, , signatures=0 X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1011 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=573 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1810050000 definitions=main-1904150126 Archived-At: Subject: Re: [stir] wglc comment: intended status of draft-ietf-stir-oob-04 X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Apr 2019 18:18:08 -0000 DQpJIGhhZCBmbG9hdGVkIHRoZSBwcm9wb3NhbCB0aGF0IHdlIHRyZWF0IHRoaXMgYXMgYSBmcmFt ZXdvcmsgaW4gYSBwcmV2aW91cyBtZWV0aW5nLCBzbyByZWFsbHkgd2Ugd2VyZSBqdXN0IG1ha2lu ZyBzdXJlIHBlb3BsZSB3ZXJlIHN0aWxsIG9uIHRoZSBzYW1lIHBhZ2UgaW4gUHJhZ3VlLiBJIHRo aW5rIGl0J3MgZmluZSB0byBwdWJsaXNoIHRoaXMgYXMgSW5mb3JtYXRpb25hbDsgYWdhaW4sIHdl IG1heSByZXZpc2l0IHdpdGggYSBtb3JlIGRldGFpbGVkIHNwZWNpZmljYXRpb24gb2YgYSBwcm90 b2NvbCBsYXRlci4NCg0KSm9uIFBldGVyc29uDQpOZXVzdGFyLCBJbmMuDQoNCu+7v09uIDQvMTIv MTksIDE6MzMgUE0sICJzdGlyIG9uIGJlaGFsZiBvZiBSdXNzIEhvdXNsZXkiIDxzdGlyLWJvdW5j ZXNAaWV0Zi5vcmcgb24gYmVoYWxmIG9mIGhvdXNsZXlAdmlnaWxzZWMuY29tPiB3cm90ZToNCg0K ICAgIA0KICAgID4gSSByZWNhbGwgYWdyZWVtZW50IHRoYXQgdGhpcyB3b3VsZCBiZSBwdWJsaXNo ZWQgYXMgSW5mb3JtYXRpb25hbCwgcmF0aGVyIHRoYW4gUFMuDQogICAgDQogICAgWWVzLCB0aGF0 IHdhcyBhZ3JlZWQgaW4gTW9udHJlYWwgaWYgbWVtb3J5IHNlcnZlcy4gIFRoZSBtaW51dGVzIGRv IG5vdCByZWZsZWN0IHRoYXQgcG9pbnQsIGJ1dCB0aGV5IGRvIHJlZmxlY3QgdGhlIGRlY2lzaW9u IHRvIHB1Ymxpc2hlIHRoZSBhcmNoaXRlY3R1cmUvZnJhbWV3b3JrIGFuZCBub3QgYSBwcm90b2Nv bCBkb2N1bWVudC4NCiAgICANCiAgICBSdXNzDQogICAgDQogICAgDQogICAgX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCiAgICBzdGlyIG1haWxpbmcgbGlz dA0KICAgIHN0aXJAaWV0Zi5vcmcNCiAgICBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xp c3RpbmZvL3N0aXINCiAgICANCg0K From nobody Mon Apr 15 11:22:53 2019 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A8B9112012F for ; Mon, 15 Apr 2019 11:22:51 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BRrAOsmm-hoX for ; Mon, 15 Apr 2019 11:22:48 -0700 (PDT) Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CE7D812011D for ; Mon, 15 Apr 2019 11:22:48 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id 9F5DE300AE4 for ; Mon, 15 Apr 2019 14:04:30 -0400 (EDT) X-Virus-Scanned: amavisd-new at mail.smeinc.net Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id j8JpbpYGHQSd for ; Mon, 15 Apr 2019 14:04:29 -0400 (EDT) Received: from a860b60074bd.fios-router.home (unknown [138.88.156.37]) by mail.smeinc.net (Postfix) with ESMTPSA id D8A08300A46; Mon, 15 Apr 2019 14:04:28 -0400 (EDT) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.8\)) From: Russ Housley In-Reply-To: <3E29EDF2-BC2A-468A-A5A5-9DA5D659F6BD@team.neustar> Date: Mon, 15 Apr 2019 14:22:46 -0400 Cc: Robert Sparks , IETF STIR Mail List Content-Transfer-Encoding: quoted-printable Message-Id: <03191A06-62B6-4208-A62F-122C5D728E8F@vigilsec.com> References: <3E29EDF2-BC2A-468A-A5A5-9DA5D659F6BD@team.neustar> To: Jon Peterson X-Mailer: Apple Mail (2.3445.104.8) Archived-At: Subject: Re: [stir] wglc comment: intended status of draft-ietf-stir-oob-04 X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Apr 2019 18:22:52 -0000 Jon: Please post an new draft with the title page header: Intended status: Informational Russ > On Apr 15, 2019, at 2:17 PM, Peterson, Jon = wrote: >=20 >=20 > I had floated the proposal that we treat this as a framework in a = previous meeting, so really we were just making sure people were still = on the same page in Prague. I think it's fine to publish this as = Informational; again, we may revisit with a more detailed specification = of a protocol later. >=20 > Jon Peterson > Neustar, Inc. >=20 > =EF=BB=BFOn 4/12/19, 1:33 PM, "stir on behalf of Russ Housley" = wrote: >=20 >=20 >> I recall agreement that this would be published as Informational, = rather than PS. >=20 > Yes, that was agreed in Montreal if memory serves. The minutes do = not reflect that point, but they do reflect the decision to publishe the = architecture/framework and not a protocol document. >=20 > Russ >=20 >=20 > _______________________________________________ > stir mailing list > stir@ietf.org > https://www.ietf.org/mailman/listinfo/stir >=20 >=20 > _______________________________________________ > stir mailing list > stir@ietf.org > https://www.ietf.org/mailman/listinfo/stir From nobody Mon Apr 15 12:00:59 2019 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8E9E6120428 for ; Mon, 15 Apr 2019 12:00:52 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.638 X-Spam-Level: X-Spam-Status: No, score=-0.638 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, KHOP_DYNAMIC=1.363, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=team.neustar Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dg1VP4NoCicY for ; Mon, 15 Apr 2019 12:00:50 -0700 (PDT) Received: from mx0b-0018ba01.pphosted.com (mx0a-0018ba01.pphosted.com [67.231.149.94]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AB27F12043F for ; Mon, 15 Apr 2019 12:00:44 -0700 (PDT) Received: from pps.filterd (m0078664.ppops.net [127.0.0.1]) by mx0a-0018ba01.pphosted.com (8.16.0.27/8.16.0.27) with SMTP id x3FIqnxs013474; Mon, 15 Apr 2019 15:00:44 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=team.neustar; h=from : to : subject : date : message-id : references : in-reply-to : content-type : content-id : content-transfer-encoding : mime-version; s=selector1; bh=hq5NZA/4J+8B0Va8pLkRt2ru/H7SGUNo/hZL32EhVS4=; b=VSpcMC3ePN3LOiOkiKJEqSlEoX6sUCHIIb3FMHwuCA61pT2b/BBXGYi1CG9FR217e+Dq yd+YtyhW2a6XOitRgugI+VmIGkVUfK9KxmdqWqn27QutMEz4bYBKnKV4XnLTuciWxW1J bNk6+Mprk7QRRQiG2uGVHvte2pWj7OdkjRXv6C8tIsepuCWKpSOz9LapjxpTnafxun6t 7KcIrkwQE124G6JmzBaiUXLSQdv8LR0JxHfhQL80hCRxwljfU9jVX3xIPJggj22nCp15 HboGtXKc2Ny5buf7H/UALEh4kKdrfVwyUpTtRPGplh7TKmuUaRrtirkHtiYCPeh/Jpvq nA== Received: from stntexhc12.cis.neustar.com ([156.154.17.216]) by mx0a-0018ba01.pphosted.com with ESMTP id 2ruadw4gep-1 (version=TLSv1 cipher=ECDHE-RSA-AES256-SHA bits=256 verify=NOT); Mon, 15 Apr 2019 15:00:43 -0400 Received: from STNTEXMB101.cis.neustar.com ([fe80::a831:d3b4:fb4e:e45b]) by stntexhc12.cis.neustar.com ([::1]) with mapi id 14.03.0439.000; Mon, 15 Apr 2019 15:00:42 -0400 From: "Peterson, Jon" To: Robert Sparks , "stir@ietf.org" Thread-Topic: [stir] wglc comment: draft-ietf-stir-passport-divert-05 Thread-Index: AQHU8XC5ERqnAMLDvk+5Z1JNBTSE3aY9Zd0A Date: Mon, 15 Apr 2019 19:00:41 +0000 Message-ID: <616C6425-1E2E-44F4-A28D-D4EDB8BAB8F3@team.neustar> References: <739ed9d7-79f3-867b-6dda-4664b23e971f@nostrum.com> In-Reply-To: <739ed9d7-79f3-867b-6dda-4664b23e971f@nostrum.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.10.8.190312 x-originating-ip: [10.96.12.236] Content-Type: text/plain; charset="utf-8" Content-ID: <5CD967744F997B4FACBA65C79A1E0364@neustar.biz> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2019-04-15_07:, , signatures=0 X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 suspectscore=0 malwarescore=0 phishscore=0 bulkscore=0 spamscore=0 mlxscore=0 lowpriorityscore=0 mlxlogscore=785 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1810050000 definitions=main-1904150130 Archived-At: Subject: Re: [stir] wglc comment: draft-ietf-stir-passport-divert-05 X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Apr 2019 19:00:58 -0000 DQpXZWxsLCBJ4oCZZCB0cmVhdCB0aGF0IGFzIGEgY2FzZSB3aGVyZSB0aGVyZSBhcmUgZWZmZWN0 aXZlbHkgdHdvIGNoYWlucyBpbiB0aGUgcmVxdWVzdCwgZWFjaCBlbmRpbmcgd2l0aCBhbiBvdXRl cm1vc3QgImRpdiIgKGFzIHRoZSBsYXN0IHNlbnRlbmNlIG9mIHRoZSBmaXJzdCBwYXJhZ3JhcGgg b2YgNC4yIHN0YXRlcykuIElmIHRoZSBvdXRlcm1vc3QgImRpdiIgaW4gb25lIG9mIHRob3NlIGNo YWlucyBpcyBtYWxpY2lvdXMsIHdoaWNoIGlzIHRvIHNheSBpdHMgc2lnbmF0dXJlIG9yIGF0dGVz dGF0aW9uIGRvZXNuJ3QgY2hlY2sgb3V0LCB0aGF0IGNoYWluIGlzIHRyZWF0ZWQgYXMgaW52YWxp ZC4gVGhlIGtleSBwb2ludCBpcyB0aGF0IGVhY2ggY2hhaW4gaGFzIGFuIG91dGVybW9zdCAiZGl2 IiwgYXQgbGVhc3Qgd2l0aCB0aGUgcm91Z2ggZGVmaW5pdGlvbiBvZiAiY2hhaW4iIHRoYXQgSSdt IHRyeWluZyB0byB1c2UgaGVyZS4gSWYgdGhlcmUncyBhIHVzZWZ1bCB3YXkgZm9yIG1lIHRvIGNs YXJpZnkgdGhlIGludGVudGlvbiwgaGFwcHkgdG8gZG8gaXQuDQoNCkpvbiBQZXRlcnNvbg0KTmV1 c3RhciwgSW5jLg0KDQrvu79PbiA0LzEyLzE5LCAxOjQ1IFBNLCAic3RpciBvbiBiZWhhbGYgb2Yg Um9iZXJ0IFNwYXJrcyIgPHN0aXItYm91bmNlc0BpZXRmLm9yZyBvbiBiZWhhbGYgb2YgcmpzcGFy a3NAbm9zdHJ1bS5jb20+IHdyb3RlOg0KDQogICAgVGhpcyBpcyBhIGJpdCBvZiBhbiBlZGdlIGNv bmRpdGlvbiB0aGluZy4NCiAgICANCiAgICBTZWN0aW9uIDQuMiB0YWxrcyBhYm91dCBub3JtYWwg dmVyaWZpY2F0aW9uLCBhbmQgc3RhdGVzIChtYXliZSBpbXBsaWVzKSANCiAgICB0aGF0IHRoZXJl IHdpbGwgb25seSBiZSBvbmUgb3V0ZXJtb3N0IFBBU1Nwb3J0IGluIGEgY2hhaW4gb2YgImRpdiJz Lg0KICAgIA0KICAgIFdoYXQgaWYgdGhlcmUgYXJlIHR3byAoZnJvbSBzb21lb25lIHRyeWluZyB0 byBiZSBtYWxpY2lvdXMpPw0KICAgIA0KICAgIFJqUw0KICAgIA0KICAgIF9fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQogICAgc3RpciBtYWlsaW5nIGxpc3QN CiAgICBzdGlyQGlldGYub3JnDQogICAgaHR0cHM6Ly91cmxkZWZlbnNlLnByb29mcG9pbnQuY29t L3YyL3VybD91PWh0dHBzLTNBX193d3cuaWV0Zi5vcmdfbWFpbG1hbl9saXN0aW5mb19zdGlyJmQ9 RHdJQ0FnJmM9TU9wdE5sVnRJRVRlREFMQ19sVUxydyZyPWRRNTF0TGZvR3V1Rmphbm1mZUtDMHdl WEhOTWw5eFpubnNJaXdSZDZJZ1kmbT1KS3Bscjh4UkhVcFAyVk1ZM0o0TnpHTFdQanJ1SGFMS0FB dXYyWHdUOWQwJnM9V3U2SmgzMWxld01rMFJCY3NJNTZyVU5EVlBCQW5lRTRNZmwzREtHTWFiNCZl PQ0KICAgIA0KDQo= From nobody Mon Apr 15 12:15:00 2019 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3CB471200D8 for ; Mon, 15 Apr 2019 12:14:59 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.638 X-Spam-Level: X-Spam-Status: No, score=-0.638 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, KHOP_DYNAMIC=1.363, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=team.neustar Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cs8t5Ep4eTVA for ; Mon, 15 Apr 2019 12:14:58 -0700 (PDT) Received: from mx0b-0018ba01.pphosted.com (mx0a-0018ba01.pphosted.com [67.231.149.94]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 49C76120026 for ; Mon, 15 Apr 2019 12:14:58 -0700 (PDT) Received: from pps.filterd (m0078664.ppops.net [127.0.0.1]) by mx0a-0018ba01.pphosted.com (8.16.0.27/8.16.0.27) with SMTP id x3FJDLvs028148; Mon, 15 Apr 2019 15:14:57 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=team.neustar; h=from : to : subject : date : message-id : references : in-reply-to : content-type : content-id : content-transfer-encoding : mime-version; s=selector1; bh=qbBZydx63VMiruD2cMk/KD2aFzB0EiRzdNsk5tJ+MvA=; b=OO46Z9yMfLd5F1tLWBzZblpROdIIcoYpCK1BpSaF1+NUFAxf5baKd6AcOcVriVs4B1cR hKgw+5hFT5VnT0WbWN0bAY1TQTU/q9mfBd2NOC2X/IPSRL87YklfJai2TTzRGW4OlpEk eSxh1/VYBm11BOUcMi+csGaaszA5ZYpXLKGcvV+0HVKhvFcYyU2HIP9Bz8c0vNuqtU5B 0jzvuQb6oSV3PwVR/JyjEIGU+f0tCfTZy18mPmJxQh/EC9KfFY9ntRYRMbjFBDnjy/0/ YgUB0jSuff9J26AJ45TMhW6FQVR8RzO0QE2WaMKn6kj40UF80siHutez/YSgzPy6PcH1 vA== Received: from stntexhc12.cis.neustar.com ([156.154.17.216]) by mx0a-0018ba01.pphosted.com with ESMTP id 2ruadw4h1x-1 (version=TLSv1 cipher=ECDHE-RSA-AES256-SHA bits=256 verify=NOT); Mon, 15 Apr 2019 15:14:57 -0400 Received: from STNTEXMB101.cis.neustar.com ([fe80::a831:d3b4:fb4e:e45b]) by stntexhc12.cis.neustar.com ([::1]) with mapi id 14.03.0439.000; Mon, 15 Apr 2019 15:14:55 -0400 From: "Peterson, Jon" To: Russ Housley , IETF STIR Mail List Thread-Topic: [stir] WG Last Call Comments: draft-ietf-stir-passport-divert-05 Thread-Index: AQHU85yNh0+cmX1LOUqH/lTch1TgtaY9ZYCA Date: Mon, 15 Apr 2019 19:14:55 +0000 Message-ID: <23FC946B-A5BC-4DAC-A281-9DB202C1DC93@team.neustar> References: <3162DDF4-CB71-41F8-983B-8572D33B460B@vigilsec.com> In-Reply-To: <3162DDF4-CB71-41F8-983B-8572D33B460B@vigilsec.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.10.8.190312 x-originating-ip: [10.96.12.236] Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2019-04-15_07:, , signatures=0 X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1015 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1810050000 definitions=main-1904150133 Archived-At: Subject: Re: [stir] WG Last Call Comments: draft-ietf-stir-passport-divert-05 X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Apr 2019 19:14:59 -0000 DQpUaGFua3MgZm9yIHRoZSBub3RlcyBSdXNzLiBTb21lIHJlc3BvbnNlcyBpbmxpbmUuDQogICAg DQogICAgTWFqb3I6DQogICAgDQogICAgU2VjdGlvbiAxOiBUaGUgbGFzdCBwYXJhZ3JhcGggaW50 cm9kdWNlcyB0aGUgImRpdiIgUEFTU3BvclQgdHlwZS4gIEluDQogICAgYW5vdGhlciBkb2N1bWVu dCwgSUFOQSBnb3QgY29uZnVzZWQgd2hlbiB0aGUgInR5cGUiIHdhcyBub3QgYWxpZ25lZCB3aXRo DQogICAgdGhlIG5hbWVzIHVzZWQgZm9yIHRoZSByZWdpc3RyaWVzLiAgTG9va2luZyBhdCB0aGUg c3RydWN0dXJlIG9mIFJGQyA4MjI1LA0KICAgIEkgdGhpbmsgdGhhdCAiZGl2IiBpcyBhIFBBU1Nw b3JUIEhlYWRlciBQYXJhbWV0ZXIgdmFsdWUuICBQbGVhc2UgcmV3b3JkDQogICAgdG8gcHJvdmlk ZSBjbGFyaXR5LiAgQWxzbywgbGF0ZXIgaW4gdGhlIGRvY3VtZW50LCAiZGl2IiBQQVNTcG9yVCBp cyB1c2VkDQogICAgYXMgc2hvcnRoYW5kLiAgVGhpcyBzZWVtcyB2ZXJ5IHVzZWZ1bC4gIEkgc3Vn Z2VzdCB0aGlzIGJlIGRlZmluZWQgaW4NCiAgICBTZWN0aW9uIDEgYW5kIHVzZWQgY29uc2lzdGVu dGx5IGluIHRoZSBkb2N1bWVudC4NCiAgICANCiAgICBTZWN0aW9uIDE6IFBsZWFzZSBwcm92aWRl IHNpbWlsYXIgY2xhcml0eSBmb3IgdGhlIHNlcGFyYXRlICJkaXYtbyINCiAgICBQQVNTcG9yVCB0 eXBlIGFuZCAib3B0IiBQQVNTcG9yVCBlbGVtZW50LiAgRGVmaW5pbmcgYSAiZGl2LW8iIFBBU1Nw b3JUDQogICAgaW4gU2VjdGlvbiAxIHdvdWxkIGFsc28gaGVscCB0aGUgcmVhZGVyLg0KDQpQQVNT cG9yVCBUeXBlICgicHB0IikgaXMgZGVmaW5lZCBpbiBSRkM4MjI0IFNlY3Rpb24gNC4gSXRzIHVz ZSBpcyBjb25zaXN0ZW50IHdpdGggdGhlIHRlcm1pbm9sb2d5IGluIHRoZSBJQU5BIENvbnNpZGVy YXRpb25zIG9mIFJGQzgyMjUgKFNlY3Rpb24gMTEuNCkgd2hpY2ggZm9ybWFsbHkgbmFtZXMgdGhh dCByZWdpc3RyeSB0aGUgIlBBU1Nwb3JUIEV4dGVuc2lvbnMgUmVnaXN0cnkuIiBJJ2xsIGNsYXJp ZnkgdGhhdCB3ZSBtZWFuIHRoaXMgcmVnaXN0cnkgaW4gdGhlIElBTkEgQ29uc2lkZXJhdGlvbnMg b2YgdGhlIHN0aXItcGFzc3BvcnQtZGl2ZXJ0IHNwZWMgKGFuZCBhZGQgdGhlIFVSTCBvZiB0aGUg cmVnaXN0cnkgYXMgeW91IHN1Z2dlc3QgYmVsb3cpLCBidXQgSSB0aGluayBpdCdzIG9rYXkgaWYg d2Uga2VlcCB1c2luZyB0aGUgdGVybWlub2xvZ3kgIlBBU1Nwb3JUIFR5cGUiLg0KICAgIA0KICAg IFNlY3Rpb24gMzogVGhlIGZpcnN0IHBhcmFncmFwaCBwb2ludHMgb3V0IHRoYXQgYSBuZXcgUEFT U3BvclQgaXMgb25seQ0KICAgIG5lY2Vzc2FyeSB3aGVuIHRoZSBjYW5vbmljYWwgZm9ybSBvZiB0 aGUgImRlc3QiIGlkZW50aWZpZXIgKHBlciB0aGUNCiAgICBjYW5vbmljYWxpemF0aW9uIHByb2Nl ZHVyZXMgaW4gW1JGQzgyMjRdIFNlY3Rpb24gOCkuICBUaGlzIHNlZW1zIGxpa2UNCiAgICBhIHBs YWNlIGZvciBhIE1VU1QgTk9UIHN0YXRlbWVudC4gIElmIHRoZSBjYW5vbmljYWwgZm9ybSBvZiB0 aGUgImRlc3QiDQogICAgaWRlbnRpZmllciBpcyB1bmNoYW5nZWQsIHRoZW4gYSBuZXcgUEFTU3Bv clQgd2l0aCBhICJkaXYiIGNsYWltIE1VU1QNCiAgICBOT1QgYmUgcHJvZHVjZWQuDQoNCk5vIHBy b2JsZW0sIHdpbGwgYWRkIHRoYXQuDQogICAgDQogICAgU2VjdGlvbiAzOiBUaGUgdGV4dCB0YWxr cyBhYm91dCB0aGUgUEFTU3BvclQgY2xhaW1zIG9iamVjdC4gIEkgdGhpbmsNCiAgICB0aGlzIGlz IHRoZSBQQVNTcG9yVCBQYXlsb2FkIGFzIGRlc2NyaWJlZCBpbiBTZWN0aW9uIDUgb2YgUkZDIDgy MjUuDQogICAgUGxlYXNlIHVzZSB0aGUgc2FtZSB0ZXJtcy4gIA0KDQpXZWxsLCB0aGUgImhlYWRl ciIgYW5kICJjbGFpbXMiIHRlcm1pbm9sb2d5IGlzIGZyb20gdGhlIEpXVCBSRkMgKDc1MTkpLCAi cGF5bG9hZCIgY29tZXMgZnJvbSB0aGUgY29yZSBKV1MgUkZDICg3NTE1KS4gVGhleSBhcmUga2lu ZCBvZiB1c2VkIGludGVyY2hhbmdlYWJseSBhcm91bmQgdGhlIFNUSVIgc3BlY3M7IHRoZXJlIGFy ZSBwbGVudHkgb2YgcmVmZXJlbmNlcyB0byBjbGFpbXMgaW4gUkZDODIyNS4gSSB0aGluayBJJ20g b2theSB3aXRoIGNvbnRpbnVpbmcgdG8gdXNlICJwYXlsb2FkIiBhbmQgImNsYWltcyIgdG8gbWVh biB0aGUgc2FtZSB0aGluZy4NCg0KICAgIFNpbWlsYXJseSwgdGhlIGxhc3QgcGFyYWdyYXBoIHNo b3VsZCBzYXkNCiAgICB0aGF0IHRoZSBQQVNTcG9yVCBQYXlsb2FkIG9mIGEgImRpdiIgUEFTU3Bv clQgTVVTVCBOT1QgY29udGFpbiBhbg0KICAgICJvcHQiIGNsYWltLg0KDQpQcm9iYWJseSB0aGF0 J3MgZmluZS4gSSdtIGlkbHkgd29uZGVyaW5nIGlmIHNvbWUgb3RoZXIgUEFTU3BvclQgZXh0ZW5z aW9uIG1pZ2h0IHdhbnQgdG8gdXNlICJvcHQiIGluIGNvbmp1bmN0aW9uIHdpdGggImRpdiIgZm9y IHNvbWUgcmVhc29uLiBTZWVtcyB1bmxpa2VseSwgYW5kIHdlIGNvdWxkIGp1c3QgbGVhdmUgaXQg dG8gYW55IGZ1dHVyZSBleHRlbnNpb24gdG8gcGF0Y2ggdGhpcyBsYXRlciBpZiBuZWVkZWQuDQog ICAgICAgIA0KICAgIE1pbm9yOg0KICAgIA0KICAgIFNlY3Rpb24gMTogVGhlIHNlY29uZCBwYXJh Z3JhcGggc2F5czogIi4uLiBpdCBhbHNvIHByb3ZpZGVzIGEgc2lnbmF0dXJlDQogICAgb3ZlciB0 aGUgY2FsbGVkIG51bWJlciBhcyB0aGUgYXV0aGVudGljYXRpb24gc2VydmljZSBzZWVzIGl0LiIg IEkgdGhpbmsNCiAgICB0aGUgcG9pbnQgaXMgdG8gYXV0aGVudGljYXRlIHRoZSBpbnRlbmRlZCBy ZWNpcGllbnQsIG5vdCBqdXN0IHByb3ZpZGUNCiAgICB2aXNpYmlsaXR5Lg0KDQoiYXMgdGhlIGF1 dGhlbnRpY2F0aW9uIHNlcnZpY2Ugc2VlcyBpdCIgdGhlcmUgaXMgbm90IGFib3V0IHZpc2liaWxp dHksIGl0J3MgcmVmZXJyaW5nIHRvIHRoZSBmYWN0IHRoYXQgdGhlIGludGVuZGVkIHJlY2lwaWVu dCBtYXkgY2hhbmdlIGluIGZsaWdodCAtIHRoZSBhdXRoZW50aWNhdGlvbiBzZXJ2aWNlIHNlZXMg aXQgYmVmb3JlIHRob3NlIGNoYW5nZXMuDQogICAgDQogICAgU2VjdGlvbiAyOiBQbGVhc2UgdXBk YXRlIHRoZSBmaXJzdCBwYXJhZ3JhcGggdG8gcmVmZXJlbmNlIFJGQyA4MTc0DQogICAgaW4gYWRk aXRpb24gdG8gUkZDIDIxMTksIGFzIGZvbGxvd3M6IA0KICAgIA0KICAgICAgIFRoZSBrZXkgd29y ZHMgIk1VU1QiLCAiTVVTVCBOT1QiLCAiUkVRVUlSRUQiLCAiU0hBTEwiLCAiU0hBTEwgTk9UIiwN CiAgICAgICAiU0hPVUxEIiwgIlNIT1VMRCBOT1QiLCAiUkVDT01NRU5ERUQiLCAiTk9UIFJFQ09N TUVOREVEIiwgIk1BWSIsIGFuZA0KICAgICAgICJPUFRJT05BTCIgaW4gdGhpcyBkb2N1bWVudCBh cmUgdG8gYmUgaW50ZXJwcmV0ZWQgYXMgZGVzY3JpYmVkIGluDQogICAgICAgQkNQIDE0IFtSRkMy MTE5XSBbUkZDODE3NF0gd2hlbiwgYW5kIG9ubHkgd2hlbiwgdGhleSBhcHBlYXIgaW4gYWxsDQog ICAgICAgY2FwaXRhbHMsIGFzIHNob3duIGhlcmUuDQogICAgICAgDQogICAgT2YgY291cnNlLCBh bHNvIGFkZCBhIG5vcm1hdGl2ZSByZWZlcmVuY2UgdG8gUkZDIDgxNzQuDQogICAgDQpXaWxsIGRv Lg0KDQogICAgRXhhbXBsZXMgb2YgIng1dSIgY2xhaW1zIHVzZSB0aGUgLnBreCBmaWxlIGV4dGVu c2lvbi4gIFBsZWFzZSB1c2UgLmNlcg0KICAgIHRvIGFsaWduIHdpdGggdGhlIGNvbnZlbnRpb25z IGluIFJGQyAyNTg1Lg0KICAgIA0KV2lsbCBkby4gQW5kIHdpbGwgZG8gdGhvc2Ugbml0cyBiZWxv dywgd2l0aCBteSBvbmUgbm90ZSB0aGVyZS4uLg0KICAgIA0KICAgIE5pdHM6DQogICAgDQogICAg VGhlIGRvY3VtZW50IHVzZXMgJ2RpdicgYW5kICJkaXYiLiAgSXQgYWxzbyB1c2VkICdkZXN0JyBh bmQgImRlc3QiLg0KICAgIFBsZWFzZSBwaWNrIG9uZSBjb252ZW50aW9uLCBhbmQgdGhlbiB1c2Ug aXQgdGhyb3VnaG91dCB0aGUgZG9jdW1lbnQuDQogICAgDQogICAgU3VnZ2VzdGlvbiBmb3IgdGhl IHN0YXJ0IG9mIHRoZSBBYnN0cmFjdDogIlRoaXMgZG9jdW1lbnQgZXh0ZW5kcw0KICAgIFBBU1Nw b3JULCB3aGljaCBpcyBzcGVjaWZpZWQgaW4gUkZDIDgyMjQgdG8gY29udmV5IGNyeXB0b2dyYXBo aWNhbGx5LQ0KICAgIHNpZ25lZCAuLi4iDQoNCkkgdGhvdWdodCB3ZSB3ZXJlbid0IHN1cHBvc2Vk IHRvIHB1dCByZWZlcmVuY2VzIGluIHRoZSBhYnN0cmFjdCAoYXBhcnQgZnJvbSBub3RlcyBhYm91 dCBSRkMgb2Jzb2xldGVkIGV0Yy4gYnkgdGhpcyBzcGVjKS4NCiAgICANCiAgICBUaGUgJ1VwZGF0 ZXMnIGxpbmUgaW4gdGhlIHRpdGxlIHBhZ2UgaGVhZGVyIHNob3VsZCBsaXN0IG9ubHkgdGhlIG51 bWJlcnMNCiAgICBvZiB0aGUgdG8tYmUtdXBkYXRlZCBSRkNzIChpZiBhcHByb3ZlZCkuDQogICAg DQogICAgT3V0ZGF0ZWQgcmVmZXJlbmNlOiBkcmFmdC1pZXRmLXN0aXItcnBoIGhhcyBiZWVuIHB1 Ymxpc2hlZCBhcyBSRkMgODQ0My4NCiAgICBQbGVhc2UgdXBkYXRlIHRoZSByZWZlcmVuY2UuDQog ICAgDQpKb24gUGV0ZXJzb24NCk5ldXN0YXIsIEluYy4NCiAgICANCg0K From nobody Mon Apr 15 12:37:27 2019 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F4236120191 for ; Mon, 15 Apr 2019 12:37:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.98 X-Spam-Level: X-Spam-Status: No, score=-1.98 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, T_SPF_HELO_PERMERROR=0.01, T_SPF_PERMERROR=0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nostrum.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XA0Zes03DkV0 for ; Mon, 15 Apr 2019 12:37:24 -0700 (PDT) Received: from nostrum.com (raven-v6.nostrum.com [IPv6:2001:470:d:1130::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3701E120190 for ; Mon, 15 Apr 2019 12:37:24 -0700 (PDT) Received: from unescapeable.local ([47.186.39.7]) (authenticated bits=0) by nostrum.com (8.15.2/8.15.2) with ESMTPSA id x3FJbLXj000930 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO) for ; Mon, 15 Apr 2019 14:37:22 -0500 (CDT) (envelope-from rjsparks@nostrum.com) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=nostrum.com; s=default; t=1555357042; bh=bUFVhPwu0efg0sLH/WxJM0Cs+i7UeQZwhz5yo8a2cRc=; h=Subject:To:References:From:Date:In-Reply-To; b=MYiSkMBv8XVghVnPLuZ4ZgSaIs0ABZzkv+WWrf0fPE3r70PRBd8Twtj9PVDuQpozc ZjKnck062Jz0Chj2qSPcsb9azg5efB1eMDyuhacts83TrE9EPVMFzWqyhtyeUi8dZm tlca2QJW/4VsvDEQbtLM4E9NABMLFQRCYQgX9pig= X-Authentication-Warning: raven.nostrum.com: Host [47.186.39.7] claimed to be unescapeable.local To: stir@ietf.org References: <3162DDF4-CB71-41F8-983B-8572D33B460B@vigilsec.com> <23FC946B-A5BC-4DAC-A281-9DB202C1DC93@team.neustar> From: Robert Sparks Message-ID: <87e7eb94-af93-4c06-6c59-a3d8b4abff3f@nostrum.com> Date: Mon, 15 Apr 2019 14:37:21 -0500 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:60.0) Gecko/20100101 Thunderbird/60.6.1 MIME-Version: 1.0 In-Reply-To: <23FC946B-A5BC-4DAC-A281-9DB202C1DC93@team.neustar> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Content-Language: en-US Archived-At: Subject: Re: [stir] WG Last Call Comments: draft-ietf-stir-passport-divert-05 X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Apr 2019 19:37:26 -0000 trimming to one thing in the nits: On 4/15/19 2:14 PM, Peterson, Jon wrote: > >> Suggestion for the start of the Abstract: "This document extends >> PASSporT, which is specified in RFC 8224 to convey cryptographically- >> signed ..." > I thought we weren't supposed to put references in the abstract (apart from notes about RFC obsoleted etc. by this spec). > We aren't allowed to use references in the [see the references section] sense. It's perfectly fine to name other RFCs. RjS > > _______________________________________________ > stir mailing list > stir@ietf.org > https://www.ietf.org/mailman/listinfo/stir From nobody Mon Apr 15 12:44:44 2019 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3A8A61201B2 for ; Mon, 15 Apr 2019 12:44:42 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id d8o1h3Kp7JRP for ; Mon, 15 Apr 2019 12:44:40 -0700 (PDT) Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C5B5C1201A6 for ; Mon, 15 Apr 2019 12:44:39 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id BAAE0300ADD for ; Mon, 15 Apr 2019 15:26:21 -0400 (EDT) X-Virus-Scanned: amavisd-new at mail.smeinc.net Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id 9pOz2Ti2ylUD for ; Mon, 15 Apr 2019 15:26:20 -0400 (EDT) Received: from a860b60074bd.fios-router.home (unknown [138.88.156.37]) by mail.smeinc.net (Postfix) with ESMTPSA id 2EA38300580; Mon, 15 Apr 2019 15:26:20 -0400 (EDT) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.8\)) From: Russ Housley In-Reply-To: <23FC946B-A5BC-4DAC-A281-9DB202C1DC93@team.neustar> Date: Mon, 15 Apr 2019 15:44:37 -0400 Cc: IETF STIR Mail List Content-Transfer-Encoding: quoted-printable Message-Id: <060587D1-11D4-45D0-8605-0B11D38415ED@vigilsec.com> References: <3162DDF4-CB71-41F8-983B-8572D33B460B@vigilsec.com> <23FC946B-A5BC-4DAC-A281-9DB202C1DC93@team.neustar> To: Jon Peterson X-Mailer: Apple Mail (2.3445.104.8) Archived-At: Subject: Re: [stir] WG Last Call Comments: draft-ietf-stir-passport-divert-05 X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Apr 2019 19:44:42 -0000 Jon: Minor follow up... > Major: >=20 > Section 1: The last paragraph introduces the "div" PASSporT type. = In > another document, IANA got confused when the "type" was not aligned = with > the names used for the registries. Looking at the structure of RFC = 8225, > I think that "div" is a PASSporT Header Parameter value. Please = reword > to provide clarity. Also, later in the document, "div" PASSporT is = used > as shorthand. This seems very useful. I suggest this be defined = in > Section 1 and used consistently in the document. >=20 > Section 1: Please provide similar clarity for the separate "div-o" > PASSporT type and "opt" PASSporT element. Defining a "div-o" = PASSporT > in Section 1 would also help the reader. >=20 > PASSporT Type ("ppt") is defined in RFC8224 Section 4. Its use is = consistent with the terminology in the IANA Considerations of RFC8225 = (Section 11.4) which formally names that registry the "PASSporT = Extensions Registry." I'll clarify that we mean this registry in the = IANA Considerations of the stir-passport-divert spec (and add the URL of = the registry as you suggest below), but I think it's okay if we keep = using the terminology "PASSporT Type". Yes, I agree that "PASSporT Type" is fine as long as Section 10 has the = right pointer. > Section 3: The first paragraph points out that a new PASSporT is = only > necessary when the canonical form of the "dest" identifier (per the > canonicalization procedures in [RFC8224] Section 8). This seems = like > a place for a MUST NOT statement. If the canonical form of the = "dest" > identifier is unchanged, then a new PASSporT with a "div" claim = MUST > NOT be produced. >=20 > No problem, will add that. >=20 > Section 3: The text talks about the PASSporT claims object. I = think > this is the PASSporT Payload as described in Section 5 of RFC 8225. > Please use the same terms. =20 >=20 > Well, the "header" and "claims" terminology is from the JWT RFC = (7519), "payload" comes from the core JWS RFC (7515). They are kind of = used interchangeably around the STIR specs; there are plenty of = references to claims in RFC8225. I think I'm okay with continuing to use = "payload" and "claims" to mean the same thing. My reading of RFC 8225 is that the payload is composed of a collection = of claims. Some of the claims are defined in the JWT specifications, = and other are defined specifically for PASSporT. In the document, it is = not clear to me whether a "claim object" is one of the claims in this = collection or the whole collection. If the term payload was used for = the whole collection, I think it would be more consistent and clear. > Similarly, the last paragraph should say > that the PASSporT Payload of a "div" PASSporT MUST NOT contain an > "opt" claim. >=20 > Probably that's fine. I'm idly wondering if some other PASSporT = extension might want to use "opt" in conjunction with "div" for some = reason. Seems unlikely, and we could just leave it to any future = extension to patch this later if needed. The document already says otherwise: PASSporTs of type "div" MUST NOT contain an "opt" (see Section 6) element in their claims; PASSporTs of type "div-o" (see Section 5) MUST contain an "opt". It does not say whether for future type "foo" can use it or not, which = seems appropriate. Russ From nobody Mon Apr 15 18:35:58 2019 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 52C981202C7 for ; Mon, 15 Apr 2019 18:35:57 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=sn3rd.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lbwXLjwCV8Kk for ; Mon, 15 Apr 2019 18:35:55 -0700 (PDT) Received: from mail-qt1-x830.google.com (mail-qt1-x830.google.com [IPv6:2607:f8b0:4864:20::830]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 56753120222 for ; Mon, 15 Apr 2019 18:35:55 -0700 (PDT) Received: by mail-qt1-x830.google.com with SMTP id w5so21505318qtb.11 for ; Mon, 15 Apr 2019 18:35:55 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sn3rd.com; s=google; h=from:content-transfer-encoding:mime-version:subject:date:references :to:in-reply-to:message-id; bh=DpyYrUs2AhOibdNswnWD3vuONEcaOfjKUFCTmh279XU=; b=Yfvn5nVJJZZGV+1g9gt5gpNxP5IFV3/0J4wOTbbK0x3AFR4pC5uh3AtR97QMxKOn5+ dRu6iDZQ2hYEYB13kK5UEYTK0tBhBQrkALjyBNR22RRT+W7vOa3dqECC59Y/Doedrwhr ZnlTqS7c9Irj+CjWTWSgg3TWwRZ5F6oi0SUgc= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:content-transfer-encoding:mime-version :subject:date:references:to:in-reply-to:message-id; bh=DpyYrUs2AhOibdNswnWD3vuONEcaOfjKUFCTmh279XU=; b=V9HD94F1vZ5uvUaPr0uVu6LqL4ExRkEmNZjCjjWUZAlykpjTzVJgEXbfUQMCE2n9O3 VjQaIcNV4Wa+Y7SgCfV8qXC20EIWxQEeSZteEWNAdcbqJTgsOH/3OnCJ6LSHtN+fAEX+ 13HI+bg+6cgDlYyfZ6IpWRlodToX90Fe0NlmVGp5MjplmroMNfj00ZawEFMYnhljn6dF YbBS/89DNpAEGvcjhCCaqqYjDGYUzHS+TiYkTxSHtNi7fN7rQhMBgyXwWgyvbMiJA5ko hQ3TpUBDM/B+vbIkE/pgdFrHCJPKe2LSLYhbZL4d7wV507Pvs5vfIbHhDhEHsmx33ILD gDWA== X-Gm-Message-State: APjAAAXaWvC7Xo8mM7mmY/hpyGirb8ops2huKQxJbltyZGxiaBoa3bWv uGllqezwbAo1N1/TyPgkPR4lcOrzPvs= X-Google-Smtp-Source: APXvYqz4vJhQGu93O+ynQBq3XbylLciYNRY6nFgrKhU9Li5J9mnXmmwEw25DRdE17nHQBOqzMXwAnA== X-Received: by 2002:a0c:8a2e:: with SMTP id 43mr63237104qvt.198.1555378554088; Mon, 15 Apr 2019 18:35:54 -0700 (PDT) Received: from sn3rd.lan ([75.102.131.36]) by smtp.gmail.com with ESMTPSA id x12sm4181979qtk.95.2019.04.15.18.35.53 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 15 Apr 2019 18:35:53 -0700 (PDT) From: Sean Turner Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.8\)) Date: Mon, 15 Apr 2019 21:35:51 -0400 References: <9E2381A8-F39F-425D-BB64-EB39AE1018F6@vigilsec.com> To: IETF STIR Mail List In-Reply-To: <9E2381A8-F39F-425D-BB64-EB39AE1018F6@vigilsec.com> Message-Id: <31B1DE4C-97A8-496B-809C-5B1496B771CA@sn3rd.com> X-Mailer: Apple Mail (2.3445.104.8) Archived-At: Subject: Re: [stir] Second WGLC: draft-ietf-stir-passport-divert-05 X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Apr 2019 01:35:57 -0000 I just had nits and Russ caught most of them. Here are mine: 0) Example in s3 and s5 should use .cer not .pkx to algin with = RFC8225->RFC2985. 1) s3: I think this: PASSporTs of type "div-o" (see Section 5) MUST contain an "opt=E2=80=9D. Should go in s5 and not in s3 since s3 is just about =E2=80=9Cdiv=E2=80=9D= ? 2) s7 - I know UAC is in RFC 8224, but I am not sure that most will know = what it is so maybe spell this one out: User Agent Client (UAC). And, = should =E2=80=9Cuser agent=E2=80=9D in the penultimate para be UAC? 3) s8 - Where is =E2=80=9Chi=E2=80=9D defined? 4) s10 - There are two sets of registrations so maybe add a new heading = level: 10. IANA Considerations This documents includes registration for JSON Web Token Claims (see = Section 10.1) and PASSporT Type Registrations (see Section 10.2). 10.1 JSON Web Token Claims This specification requests that the IANA add two new claims to the JSON Web Token Claims registry as defined in [RFC7519]. renumber 10.1. to 10.1.1 renumber 10.2. to 10.1.2 5) Appendix A has an example key pair and to stop people from being = silly and using it anywhere in a production system we should warn them = not to: WARNING: Do not use the key pair in production systems. or something like that. spt > On Mar 31, 2019, at 16:01, Russ Housley wrote: >=20 > This is the second Working Group Last Call for = draft-ietf-stir-passport-divert, which is now at revision -05. >=20 > Please send your comments to the list or the chairs by Friday, 19 = April 2019. (This leaves a little over three weeks since many have = travel plans after the IETF week). >=20 > Robert and Russ > _______________________________________________ > stir mailing list > stir@ietf.org > https://www.ietf.org/mailman/listinfo/stir From nobody Tue Apr 16 08:54:39 2019 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 453A9120972 for ; Tue, 16 Apr 2019 08:54:26 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.98 X-Spam-Level: X-Spam-Status: No, score=-1.98 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, T_SPF_HELO_PERMERROR=0.01, T_SPF_PERMERROR=0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nostrum.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WB6TJ6LH8uqr for ; Tue, 16 Apr 2019 08:54:24 -0700 (PDT) Received: from nostrum.com (raven-v6.nostrum.com [IPv6:2001:470:d:1130::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AA28612070C for ; Tue, 16 Apr 2019 07:48:03 -0700 (PDT) Received: from unescapeable.local ([47.186.39.7]) (authenticated bits=0) by nostrum.com (8.15.2/8.15.2) with ESMTPSA id x3GEm0Jt083454 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO) for ; Tue, 16 Apr 2019 09:48:01 -0500 (CDT) (envelope-from rjsparks@nostrum.com) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=nostrum.com; s=default; t=1555426081; bh=mpJG/j9AbFPuT9OcVZSklzLMeXopnJySlTfieESRN0I=; h=Subject:To:References:From:Date:In-Reply-To; b=jLXhpEw00bXidBUJPIkFnTiPbMFksuguvxKmCCWbNynmFNhLRnQA/l4tw9T3v2/hW kGJ/0w6KqwRQJC+KOAyOoWqz6x9bnbDATi1P3Nr9NnwrELBNDlHEvuYOKtbuZ49VeX APLXQhfWeeaiR/pO2Pt1DHcaAG0A2Iuk9CvEwZpw= X-Authentication-Warning: raven.nostrum.com: Host [47.186.39.7] claimed to be unescapeable.local To: IETF STIR Mail List References: <9E2381A8-F39F-425D-BB64-EB39AE1018F6@vigilsec.com> <31B1DE4C-97A8-496B-809C-5B1496B771CA@sn3rd.com> From: Robert Sparks Message-ID: <900e0c79-14bb-870e-210f-36176225daa1@nostrum.com> Date: Tue, 16 Apr 2019 09:47:59 -0500 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:60.0) Gecko/20100101 Thunderbird/60.6.1 MIME-Version: 1.0 In-Reply-To: <31B1DE4C-97A8-496B-809C-5B1496B771CA@sn3rd.com> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Content-Language: en-US Archived-At: Subject: Re: [stir] Second WGLC: draft-ietf-stir-passport-divert-05 X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Apr 2019 15:54:32 -0000 Hi Jon - I haven't been able to validate that the signatures in the examples (with the given keys) - Could you double-check that they're right? (And if so, remind me of simple ways to manually validate the signature). RjS From nobody Tue Apr 16 08:55:39 2019 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6E92612096D for ; Tue, 16 Apr 2019 08:55:33 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.69 X-Spam-Level: X-Spam-Status: No, score=-1.69 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_INVALID=0.1, DKIM_SIGNED=0.1, T_SPF_PERMERROR=0.01] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=neutral reason="invalid (public key: not available)" header.d=standardstrack.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zkxP39oTPVZk for ; Tue, 16 Apr 2019 08:55:31 -0700 (PDT) Received: from biz221.inmotionhosting.com (biz221.inmotionhosting.com [198.46.93.79]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 82438120777 for ; Tue, 16 Apr 2019 07:51:31 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=standardstrack.com; s=default; h=To:Date:Message-Id:Subject:Mime-Version: Content-Type:From:Sender:Reply-To:Cc:Content-Transfer-Encoding:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=1sasyTzKMVUMRR3+76OaCtcR9aXHyEvLKd8zAjHA0J8=; b=n+Wmq9O1dP/nO5y8iGX0UORoqm R7vtuOE11w/E9ds7f/W/e1jeyTxsDMbGFoxNioplpNpiI/VSJEaPDnBL6UY0S/R0mLIaUuqj2W+tn /zs2VLeg96pXobs/yYatHKI9cgToX7Jg85nkWnkYdq0q/W5T4EhY3pUkJB/WxG9Mv1mU=; Received: from [68.100.196.217] (port=50053 helo=[192.168.10.26]) by biz221.inmotionhosting.com with esmtpsa (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256) (Exim 4.91) (envelope-from ) id 1hGPQh-00ByDz-Gp for stir@ietf.org; Tue, 16 Apr 2019 07:51:28 -0700 From: Eric Burger Content-Type: multipart/signed; boundary="Apple-Mail=_FC2EAC01-91DC-43DD-AE44-F36C4E4E5058"; protocol="application/pgp-signature"; micalg=pgp-sha256 Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.8\)) Message-Id: <9536C2D6-A6EF-48B2-858D-10232CCA028E@standardstrack.com> Date: Tue, 16 Apr 2019 10:51:22 -0400 To: stir@ietf.org X-Mailer: Apple Mail (2.3445.104.8) X-OutGoing-Spam-Status: No, score=-0.5 X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - biz221.inmotionhosting.com X-AntiAbuse: Original Domain - ietf.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - standardstrack.com X-Get-Message-Sender-Via: biz221.inmotionhosting.com: authenticated_id: eburger+standardstrack.com/only user confirmed/virtual account not confirmed X-Authenticated-Sender: biz221.inmotionhosting.com: eburger@standardstrack.com X-Source: X-Source-Args: X-Source-Dir: Archived-At: Subject: [stir] WG LC Comments: draft-ietf-stir-passport-divert-05 X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Apr 2019 15:55:38 -0000 --Apple-Mail=_FC2EAC01-91DC-43DD-AE44-F36C4E4E5058 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Most of my comments and nits have been identified and mostly addressed = already. Here=E2=80=99s what=E2=80=99s =E2=80=98new=E2=80=99: Section 4.1: Is there a scenario where the terminating verification service WOULD NOT = do verification? There=E2=80=99s a bunch of text on how the diverting = platform might or might not do verification and the terminating platform = might or might not do verification. Would it not be better to point out the diverting platform would really, = really, really (SHOULD?) want to verify the inbound call, because it = will be the reputation of the diverting platform on the line if it signs = the diversion on a bad call? Conversely, why would any terminating provider EVER trust a diversion = from a PBX? I.e., would not a terminating provider really, really, = really (SHOULD?) want to verify all of the signatures in the chain? Towards the end of 4.1 we talk about RPH. Is there any issue of = forwarding an RPH call? One would think that once a priority call hits a = PBX, it will lose its priority. I am not stating a fact that I know, but = for those in the RPH world, what is your understanding? Also, this = paragraph is dense and a bit confusing. An example would go a long way = in providing clarity. Section 4.2: Why would a failure in the verification chain EVER result in anything = other than a failed verification, other than the obvious, =E2=80=9Cthe = certificate expired three minutes ago=E2=80=9D? Remember, MAY =3D Never = Will Happen. Section 4.2, Fifth step What is a =E2=80=9Cmultiple based PASSporTs=E2=80=9D? Section 5: As Ben pointed out in his review, div-o seems to be a different beast = that might better be addressed in a separate document. In fact, if the = only purpose of it is to support OOB, I would insist it go into a = separate document. Conversely, if div-o will be the mechanism to support = TN-PoP, then say so. Of course, if that is what div-o is about, again = perhaps it would be better served in a separate document or as part of = the eventual mechanism that allows the originating caller to sign a call = (classic STIR) as well as an authentication service signing the call = (SHAKEN). Section 7: Why would we EVER allow a caller to pickup a signature from a 302 = redirecting server? The text goes to great lengths to explain *how* to = do it, but never says *why*. I=E2=80=99m having trouble groking the use = case. A spammer sends INVITEs to a number, gets back a (set of) signed = PASSporTs to include in their spam calls? Why would I ever care if the = spammer found my current contact from a redirect from a registrar = instead of guessing my current contact directly? Is there a = double-secret use case hiding here? Section [Missing]: Privacy Considerations Sprinkled throughout the document are privacy considerations, like how = this mechanism is inappropriate for anonymization services (see, e.g., = the last paragraph of Section 4.2). --Apple-Mail=_FC2EAC01-91DC-43DD-AE44-F36C4E4E5058 Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP -----BEGIN PGP SIGNATURE----- Comment: GPGTools - http://gpgtools.org iQIzBAEBCAAdFiEEfEc/N7T7IfiAuDEHDDCGh758rskFAly16+oACgkQDDCGh758 rslnTA//fffxybg9cemOmaA+g7IaQ9wxCKyJdXgLvCM7jAhVFON6FlGnVLjIZ7K4 SnutOxq4qXQ9P3n8zMpocX/jlnTNg+rNPYFhMDHGb5+M6qIKCQGFVn2pEfNe0fyM pnBLkmJ9GL1xITbiaokN/yrRozd9jYDwyowis/gNmflM5z/KLN0u4EsHD6c+jZEE 7JpPLs70uKveid0CCw8FpygUQJ6QgGjYLbgPGaRG9meg6bOe+r9DUszFS1Qr0mK1 U0pgz+fuNe9fKej2jvvK5ECtaK8HY4dsm/hihlVCwjXIRILlNGzsfMzfrjLWcVMb hvg0E4ni9MoxBsZNgb56fPD1K8w7aUJqVcaBHxe7RrnijS5JjKZtiux2m9Qxxglm lRFht3zCbSy6Jgyi5Tgfykby5a0+/WzseeyaP1iTNG0V3bhKHw6bU+Rnmh6CRk2e G7oFL1pec+DId4e10Oe+F5wYKkJNFfu3dP5153RF6nnRMdzMGmxJpFQlKL0uisgp pzXqiiKlGQGenWWDZlmGLgoKgsBDqge6jYHObQQaYS/yeexXblCB8ZrhQJDIbQui AinxSRqkfuFar2GMCpkgW0SHc6eV5zVGReD7ClSRkM3H65TvlV5ekMGkFaSZjc5R VFkPX9O0cQzuBjWLh+/pyCptU1902zk2lRLF9jN2Y9Eu3V4GDBg= =dYBS -----END PGP SIGNATURE----- --Apple-Mail=_FC2EAC01-91DC-43DD-AE44-F36C4E4E5058-- From nobody Tue Apr 16 08:59:49 2019 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 88B061207CB for ; Tue, 16 Apr 2019 08:59:45 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.69 X-Spam-Level: X-Spam-Status: No, score=-1.69 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_INVALID=0.1, DKIM_SIGNED=0.1, T_SPF_PERMERROR=0.01] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=neutral reason="invalid (public key: not available)" header.d=standardstrack.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id X5te7Lk0qJmr for ; Tue, 16 Apr 2019 08:59:44 -0700 (PDT) Received: from biz221.inmotionhosting.com (biz221.inmotionhosting.com [198.46.93.79]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 706181207FA for ; Tue, 16 Apr 2019 08:06:09 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=standardstrack.com; s=default; h=To:Date:Message-Id:Subject:Mime-Version: Content-Type:From:Sender:Reply-To:Cc:Content-Transfer-Encoding:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=5x59jcq4z6ykzE/6ugHix8lpI5wAsMhO4Iz/v6PPdWI=; b=jz+uOmVdmpeEJaJe75rw1mfBBV TEstXBoG9kni9+s1WG/fCA22ARocANBOKmyyzib9U46grTVQ5NFbtl/nrmD2LibfMCXmh9rpquCbY TlAal9IzxyEt2aD6contrkNxPddVWGwXu2G12GJwmS0W5/OUkaVLnAreTThiskutlyIQ=; Received: from [68.100.196.217] (port=50242 helo=[192.168.10.26]) by biz221.inmotionhosting.com with esmtpsa (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256) (Exim 4.91) (envelope-from ) id 1hGPer-00D2gy-M0 for stir@ietf.org; Tue, 16 Apr 2019 08:06:06 -0700 From: Eric Burger Content-Type: multipart/signed; boundary="Apple-Mail=_68284805-866C-47E5-A42D-195D2CD63976"; protocol="application/pgp-signature"; micalg=pgp-sha256 Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.8\)) Message-Id: <7E25361F-D726-440F-A77A-332BB97AC77A@standardstrack.com> Date: Tue, 16 Apr 2019 11:05:59 -0400 To: stir@ietf.org X-Mailer: Apple Mail (2.3445.104.8) X-OutGoing-Spam-Status: No, score=-0.5 X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - biz221.inmotionhosting.com X-AntiAbuse: Original Domain - ietf.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - standardstrack.com X-Get-Message-Sender-Via: biz221.inmotionhosting.com: authenticated_id: eburger+standardstrack.com/only user confirmed/virtual account not confirmed X-Authenticated-Sender: biz221.inmotionhosting.com: eburger@standardstrack.com X-Source: X-Source-Args: X-Source-Dir: Archived-At: Subject: [stir] WG LC Comments: draft-ietf-stir-oob-04 X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Apr 2019 15:59:45 -0000 --Apple-Mail=_68284805-866C-47E5-A42D-195D2CD63976 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Section 11: It looks like there was going to be a list of discovery requirements and = considerations for credential discovery, but there=E2=80=99s just a = blank space. There is an element of =E2=80=9Cand then a miracle = occurs=E2=80=9D which is a bit disturbing. Section 10 and Section 5.4: Also =E2=80=9Ca miracle occurs=E2=80=9D moment in how to find a CPS. Section 6.1: Where do the public keys come from? This also means lots of crypto work = for the caller. This could be a benefit, namely requiring a proof of = work to place a phone call. Although, it could be more efficient to = charge some fraction of bitcoin in lieu of proof of work ;-) Section 5.5: This scheme totally fails for a call center or enterprise that just uses = a single number for all (or many) outbound calls. They will all have the = same source address. Section 5.3: Should note that the receiver will need to query every call that does = not have a PASSporT attached. Section 5.2: Should note that the sender will have to deposit a PASSporT for *every* = call placed. Likewise, the receiver will have to attempt to retrieve a = PASSporT for *every* call received without a PASSporT attached. Section 5.1: Should note that the gateway will have to deposit a PASSporT for *every* = call through the gateway, irrespective of receiver=E2=80=99s = capabilities. Section 14: Should note this mechanism adds a ton of vectors for things to go wrong. = As well, while the =46rom identification is nominally encrypted, simple = traffic analysis will give up most of the privacy provisions. Nit: top of page 13: OLD PSTN mechanisms for relying a calling party NEW PSTN mechanisms for relaying a calling party --Apple-Mail=_68284805-866C-47E5-A42D-195D2CD63976 Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP -----BEGIN PGP SIGNATURE----- Comment: GPGTools - http://gpgtools.org iQIzBAEBCAAdFiEEfEc/N7T7IfiAuDEHDDCGh758rskFAly171gACgkQDDCGh758 rsnYiQ/+K3J9zP7zc8p7cLemcH3ddZkFXeshunIneyLwpyQDeVSIZ/Cnzc6GZm9a 19BX3RJqKOl9CSvvUfqWgZey2sZYddXbwBLAU1ZUe1rfk9qGbjTKfNGp/2WheJJJ RWhsNnSCVggbVoWkdKP4UJg0J/vMqeIyXbUfFCvD3xw4EQJ12mNGFPfVuWVzMlqR h5eb7V0YMWLY+7EZHYM8HpyWBRhpPJ7SCq6mrEalfjzwLGra1ls4fe9uWo6Vqkgd EXGZRpVUuQ9bvv4B8FG2aRxkKrvFDj0bKMJDSV7IYnAymRTPvg1FaDrcRaXTrCPt +gLmYoFFUyQl0KgxyFyPhhw/ec/MtgYl0bBg/Leu3VlexhXFOkCRAXAINAYl2M3M wOhYCQAnfhhkIrbvZkVffDQQ8/Riv1Wo2sL/fHiSP7gPeyBm7DmdIKzCqzb40jR9 NOWI7AptDs+9liLX5r30Ua18AEDSSpfTfVbwhYYTMAgvfMECafxpyZaO5ZhUjina egJl/lfoQ1a/6Y3qm/qNCuREDQ2tIukxZZ9lhpouFqVm8H3Qc2G82oPGnK5M7fdR 6O8e1AD5l/IYQt+8IfCILzCGE/xJzA1kll4qLl0TRgCEzg/Oxa8T6je+3zUWHRYX l0AnGc3v/go+LwRO946lyP9CW/XhQEORCrWSs+bBDL3M6/QwtLU= =k+gB -----END PGP SIGNATURE----- --Apple-Mail=_68284805-866C-47E5-A42D-195D2CD63976-- From nobody Tue Apr 16 09:39:10 2019 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B097A1200B8 for ; Tue, 16 Apr 2019 09:39:07 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.338 X-Spam-Level: X-Spam-Status: No, score=-1.338 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, KHOP_DYNAMIC=1.363, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=team.neustar Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HfhWGO0IYCNF for ; Tue, 16 Apr 2019 09:39:06 -0700 (PDT) Received: from mx0b-0018ba01.pphosted.com (mx0b-0018ba01.pphosted.com [67.231.157.90]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 48CA71200C1 for ; Tue, 16 Apr 2019 09:39:06 -0700 (PDT) Received: from pps.filterd (m0049401.ppops.net [127.0.0.1]) by mx0b-0018ba01.pphosted.com (8.16.0.27/8.16.0.27) with SMTP id x3GGWlAD021600; Tue, 16 Apr 2019 12:39:04 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=team.neustar; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : content-id : content-transfer-encoding : mime-version; s=selector1; bh=LgRKW9JizrVm1fHCMcoDEp+AMCkfBGfszAoKWx+ur7U=; b=GUSGRNLBrfBTGYDwCIg5r4dodaSglsrur4sv6Sa7cIcq78n8E6WWTlCe3c4fuahRx3da C5/A6ZqCaxzXkTzTt4FfITPq8Ob2/ZIxfPPwOPN4805FnIYhDC6zkP5XDjCo8VOvKd9O 1IlSbxuQbuthZ5QFVlOEFXlsuUwABZQ+zLIDT6+CPWLPJkwIWzmiknKIW5IZkucb7TKx k1vSlwDfR+kKazx73BH/jlA0c2eYIkrsZMy2PD3vHX33WY4E9zEkA1UoLCBPX1nZ7Zdj ZbVFs5lrhtk/KSh8aNi4QsC3VX/ggvpAlLohjjHzS1vz0JsKKLx7M4HuB6MwsCJnvjQG aA== Received: from stntexhc11.cis.neustar.com ([156.154.17.216]) by mx0b-0018ba01.pphosted.com with ESMTP id 2ruc39fspx-1 (version=TLSv1 cipher=ECDHE-RSA-AES256-SHA bits=256 verify=NOT); Tue, 16 Apr 2019 12:39:04 -0400 Received: from STNTEXMB101.cis.neustar.com ([fe80::a831:d3b4:fb4e:e45b]) by stntexhc11.cis.neustar.com ([::1]) with mapi id 14.03.0439.000; Tue, 16 Apr 2019 12:39:03 -0400 From: "Peterson, Jon" To: Russ Housley CC: IETF STIR Mail List Thread-Topic: [stir] WG Last Call Comments: draft-ietf-stir-passport-divert-05 Thread-Index: AQHU85yNh0+cmX1LOUqH/lTch1TgtaY9ZYCAgAB9pYCAAOkiAA== Date: Tue, 16 Apr 2019 16:39:03 +0000 Message-ID: References: <3162DDF4-CB71-41F8-983B-8572D33B460B@vigilsec.com> <23FC946B-A5BC-4DAC-A281-9DB202C1DC93@team.neustar> <060587D1-11D4-45D0-8605-0B11D38415ED@vigilsec.com> In-Reply-To: <060587D1-11D4-45D0-8605-0B11D38415ED@vigilsec.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.10.8.190312 x-originating-ip: [10.96.12.236] Content-Type: text/plain; charset="utf-8" Content-ID: <47AF0DDCA258D845AE886FD51320B1D8@neustar.biz> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2019-04-16_06:, , signatures=0 X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1015 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=568 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1810050000 definitions=main-1904160109 Archived-At: Subject: Re: [stir] WG Last Call Comments: draft-ietf-stir-passport-divert-05 X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Apr 2019 16:39:08 -0000 DQo8UnVzcz4gTXkgcmVhZGluZyBvZiBSRkMgODIyNSBpcyB0aGF0IHRoZSBwYXlsb2FkIGlzIGNv bXBvc2VkIG9mIGEgY29sbGVjdGlvbiBvZiBjbGFpbXMuICBTb21lIG9mIHRoZSBjbGFpbXMgYXJl IGRlZmluZWQgaW4gdGhlIEpXVCBzcGVjaWZpY2F0aW9ucywgYW5kIG90aGVyIGFyZSBkZWZpbmVk IHNwZWNpZmljYWxseSBmb3IgUEFTU3BvclQuICBJbiB0aGUgZG9jdW1lbnQsIGl0IGlzIG5vdCBj bGVhciB0byBtZSB3aGV0aGVyIGEgImNsYWltIG9iamVjdCIgaXMgb25lIG9mIHRoZSBjbGFpbXMg aW4gdGhpcyBjb2xsZWN0aW9uIG9yIHRoZSB3aG9sZSBjb2xsZWN0aW9uLiAgSWYgdGhlIHRlcm0g cGF5bG9hZCB3YXMgdXNlZCBmb3IgdGhlIHdob2xlIGNvbGxlY3Rpb24sIEkgdGhpbmsgaXQgd291 bGQgYmUgbW9yZSBjb25zaXN0ZW50IGFuZCBjbGVhci48L1J1c3M+DQoNCkkgYWdyZWUgdGhhdCB3 ZSBkb24ndCB3YW50IHRoYXQgYW1iaWd1aXR5IGFib3V0IHdoZXRoZXIgdGhlICJjbGFpbXMgb2Jq ZWN0IiByZWZlcnMgdG8gYSBzaW5nbGUgY2xhaW0gb3IgdGhlIHNldCBvZiBjbGFpbXMuIEkgZ3Vl c3MgSSBhbSBhIGxpdHRsZSBoZXNpdGFudCB0byByZXF1aXJlIHRoYXQgd2UgdXNlIHRoZSBKV1Mg dGVybSAicGF5bG9hZCIgZm9yIHRoaXMsIHRob3VnaCwgYmVjYXVzZSBsb29raW5nIHRocm91Z2gg dGhlIFJGQ3MgSldUIHNlZW1zIHRvIGZhdm9yIHRoZSB0ZXJtICJjbGFpbXMgc2V0Ii4gSSBkb24n dCB3YW50IHRvIGdldCB0b28gcGVkYW50aWMgYWJvdXQgdGhpcywgYnV0IG1heWJlIEkgY2FuIHJl bW92ZSAiY2xhaW1zIG9iamVjdCIgaW4gZmF2b3Igb2YgdXNpbmcgZWl0aGVyICJwYXlsb2FkIiBv ciAiY2xhaW1zIHNldCIgd2hlcmUgdGhlaXIgc2VtYW50aWNzIHNlZW1zIHRvIGZpdD8NCg0KSm9u IFBldGVyc29uDQpOZXVzdGFyLCBJbmMuDQogICAgDQogICAgDQoNCg== From nobody Tue Apr 16 09:39:36 2019 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0FE4D120384 for ; Tue, 16 Apr 2019 09:39:34 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.337 X-Spam-Level: X-Spam-Status: No, score=-1.337 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, KHOP_DYNAMIC=1.363, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=team.neustar Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ruq9Obo4exVB for ; Tue, 16 Apr 2019 09:39:32 -0700 (PDT) Received: from mx0b-0018ba01.pphosted.com (mx0b-0018ba01.pphosted.com [67.231.157.90]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id ED9171202F3 for ; Tue, 16 Apr 2019 09:39:19 -0700 (PDT) Received: from pps.filterd (m0049401.ppops.net [127.0.0.1]) by mx0b-0018ba01.pphosted.com (8.16.0.27/8.16.0.27) with SMTP id x3GGWlAF021600; Tue, 16 Apr 2019 12:39:18 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=team.neustar; h=from : to : subject : date : message-id : references : in-reply-to : content-type : content-id : content-transfer-encoding : mime-version; s=selector1; bh=2lC4lq+efs9tL6tyNHAAZiLnw10F4gZrkwdn0tu2WAI=; b=PpGsUc9IyrNk8/LysBEW6QsJf3CcKiNY/bi3paqW+pW8b/MMPwfMVIpgEDIqNskqbVZ9 Z0DxJSIR5tryv9I4y6wp2cTznwocCwcKBPWASaQq5kXBOwqQX2pSQ/HJYEov51iRcWL9 q+5TW+lTuqSLP0EOkbeTKCKKVBorf/16Y7S47T9rnDnUjqgXF0tAxvvl7RC7SuTx7I61 DAbGisShVeXsDa+Wj03LZidjopLbrBISLU6oZIIg7069B5vOuomM1vUrU8K9rTx5fHaP XbQ4ICnfChp2q7SpIMwAzG6pnIbWj8YE/wtHrrOueV23f/KPWZfFPkP2B72kvIYlioOp Pw== Received: from stntexhc10.cis.neustar.com ([156.154.17.216]) by mx0b-0018ba01.pphosted.com with ESMTP id 2ruc39fsq5-2 (version=TLSv1 cipher=ECDHE-RSA-AES256-SHA bits=256 verify=NOT); Tue, 16 Apr 2019 12:39:18 -0400 Received: from STNTEXMB101.cis.neustar.com ([fe80::a831:d3b4:fb4e:e45b]) by stntexhc10.cis.neustar.com ([10.31.58.69]) with mapi id 14.03.0439.000; Tue, 16 Apr 2019 12:39:18 -0400 From: "Peterson, Jon" To: Sean Turner , IETF STIR Mail List Thread-Topic: [stir] Second WGLC: draft-ietf-stir-passport-divert-05 Thread-Index: AQHU5/ydz8Cl9r14g0GouZqG+MYHkqY+XIeAgACHEQA= Date: Tue, 16 Apr 2019 16:39:16 +0000 Message-ID: <42324BDF-58AD-47FA-BB54-82D4EC8EF94C@team.neustar> References: <9E2381A8-F39F-425D-BB64-EB39AE1018F6@vigilsec.com> <31B1DE4C-97A8-496B-809C-5B1496B771CA@sn3rd.com> In-Reply-To: <31B1DE4C-97A8-496B-809C-5B1496B771CA@sn3rd.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.10.8.190312 x-originating-ip: [10.96.12.236] Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2019-04-16_06:, , signatures=0 X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1015 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=767 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1810050000 definitions=main-1904160109 Archived-At: Subject: Re: [stir] Second WGLC: draft-ietf-stir-passport-divert-05 X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Apr 2019 16:39:34 -0000 DQpUaGFua3MgU2VhbiwgdGhlc2UgYXJlIHByZXR0eSBzdHJhaWdodGZvcndhcmQsIEknbGwgZ2V0 IHRoZW0gZml4ZWQuDQoNCkpvbiBQZXRlcnNvbg0KTmV1c3RhciwgSW5jLg0KDQrvu79PbiA0LzE1 LzE5LCA2OjM2IFBNLCAic3RpciBvbiBiZWhhbGYgb2YgU2VhbiBUdXJuZXIiIDxzdGlyLWJvdW5j ZXNAaWV0Zi5vcmcgb24gYmVoYWxmIG9mIHNlYW5Ac24zcmQuY29tPiB3cm90ZToNCg0KICAgIEkg anVzdCBoYWQgbml0cyBhbmQgUnVzcyBjYXVnaHQgbW9zdCBvZiB0aGVtLiAgSGVyZSBhcmUgbWlu ZToNCiAgICANCiAgICAwKSBFeGFtcGxlIGluIHMzIGFuZCBzNSBzaG91bGQgdXNlIC5jZXIgbm90 IC5wa3ggdG8gYWxnaW4gd2l0aCBSRkM4MjI1LT5SRkMyOTg1Lg0KICAgIA0KICAgIDEpIHMzOiBJ IHRoaW5rIHRoaXM6DQogICAgDQogICAgICBQQVNTcG9yVHMgb2YgdHlwZSAiZGl2LW8iIChzZWUg U2VjdGlvbiA1KQ0KICAgICAgTVVTVCBjb250YWluIGFuICJvcHTigJ0uDQogICAgDQogICAgU2hv dWxkIGdvIGluIHM1IGFuZCBub3QgaW4gczMgc2luY2UgczMgaXMganVzdCBhYm91dCDigJxkaXbi gJ0/DQogICAgDQogICAgMikgczcgLSBJIGtub3cgVUFDIGlzIGluIFJGQyA4MjI0LCBidXQgSSBh bSBub3Qgc3VyZSB0aGF0IG1vc3Qgd2lsbCBrbm93IHdoYXQgaXQgaXMgc28gbWF5YmUgc3BlbGwg dGhpcyBvbmUgb3V0OiBVc2VyIEFnZW50IENsaWVudCAoVUFDKS4gQW5kLCBzaG91bGQg4oCcdXNl ciBhZ2VudOKAnSBpbiB0aGUgcGVudWx0aW1hdGUgcGFyYSBiZSBVQUM/DQogICAgDQogICAgMykg czggLSBXaGVyZSBpcyDigJxoaeKAnSBkZWZpbmVkPw0KICAgIA0KICAgIDQpIHMxMCAtIFRoZXJl IGFyZSB0d28gc2V0cyBvZiByZWdpc3RyYXRpb25zIHNvIG1heWJlIGFkZCBhIG5ldyBoZWFkaW5n IGxldmVsOg0KICAgIA0KICAgIDEwLiBJQU5BIENvbnNpZGVyYXRpb25zDQogICAgDQogICAgICBU aGlzIGRvY3VtZW50cyBpbmNsdWRlcyByZWdpc3RyYXRpb24gZm9yIEpTT04gV2ViIFRva2VuIENs YWltcyAoc2VlIFNlY3Rpb24gMTAuMSkgYW5kIFBBU1Nwb3JUIFR5cGUgUmVnaXN0cmF0aW9ucyAo c2VlIFNlY3Rpb24gMTAuMikuDQogICAgDQogICAgMTAuMSBKU09OIFdlYiBUb2tlbiBDbGFpbXMN CiAgICANCiAgICAgICBUaGlzIHNwZWNpZmljYXRpb24gcmVxdWVzdHMgdGhhdCB0aGUgSUFOQSBh ZGQgdHdvIG5ldyBjbGFpbXMgdG8gdGhlDQogICAgICAgSlNPTiBXZWIgVG9rZW4gQ2xhaW1zIHJl Z2lzdHJ5IGFzIGRlZmluZWQgaW4gW1JGQzc1MTldLg0KICAgIA0KICAgIHJlbnVtYmVyIDEwLjEu IHRvIDEwLjEuMQ0KICAgIHJlbnVtYmVyIDEwLjIuIHRvIDEwLjEuMg0KICAgIA0KICAgIDUpICBB cHBlbmRpeCBBIGhhcyBhbiBleGFtcGxlIGtleSBwYWlyIGFuZCB0byBzdG9wIHBlb3BsZSBmcm9t IGJlaW5nIHNpbGx5IGFuZCB1c2luZyBpdCBhbnl3aGVyZSBpbiBhIHByb2R1Y3Rpb24gc3lzdGVt IHdlIHNob3VsZCB3YXJuIHRoZW0gbm90IHRvOg0KICAgIA0KICAgICAgIFdBUk5JTkc6IERvIG5v dCB1c2UgdGhlIGtleSBwYWlyIGluIHByb2R1Y3Rpb24gc3lzdGVtcy4NCiAgICANCiAgICBvciBz b21ldGhpbmcgbGlrZSB0aGF0Lg0KICAgIA0KICAgIHNwdA0KICAgIA0KICAgIA0KICAgID4gT24g TWFyIDMxLCAyMDE5LCBhdCAxNjowMSwgUnVzcyBIb3VzbGV5IDxob3VzbGV5QHZpZ2lsc2VjLmNv bT4gd3JvdGU6DQogICAgPiANCiAgICA+IFRoaXMgaXMgdGhlIHNlY29uZCBXb3JraW5nIEdyb3Vw IExhc3QgQ2FsbCBmb3IgZHJhZnQtaWV0Zi1zdGlyLXBhc3Nwb3J0LWRpdmVydCwgd2hpY2ggaXMg bm93IGF0IHJldmlzaW9uIC0wNS4NCiAgICA+IA0KICAgID4gUGxlYXNlIHNlbmQgeW91ciBjb21t ZW50cyB0byB0aGUgbGlzdCBvciB0aGUgY2hhaXJzIGJ5IEZyaWRheSwgMTkgQXByaWwgMjAxOS4g KFRoaXMgbGVhdmVzIGEgbGl0dGxlIG92ZXIgdGhyZWUgd2Vla3Mgc2luY2UgbWFueSBoYXZlIHRy YXZlbCBwbGFucyBhZnRlciB0aGUgSUVURiB3ZWVrKS4NCiAgICA+IA0KICAgID4gUm9iZXJ0IGFu ZCBSdXNzDQogICAgPiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fXw0KICAgID4gc3RpciBtYWlsaW5nIGxpc3QNCiAgICA+IHN0aXJAaWV0Zi5vcmcNCiAgICA+ IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vc3Rpcg0KICAgIA0KICAgIF9f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQogICAgc3RpciBt YWlsaW5nIGxpc3QNCiAgICBzdGlyQGlldGYub3JnDQogICAgaHR0cHM6Ly93d3cuaWV0Zi5vcmcv bWFpbG1hbi9saXN0aW5mby9zdGlyDQogICAgDQoNCg== From nobody Tue Apr 16 11:58:29 2019 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 649F31203CA for ; Tue, 16 Apr 2019 11:58:27 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id N5q_WGr6T7LR for ; Tue, 16 Apr 2019 11:58:25 -0700 (PDT) Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7BFA41203A1 for ; Tue, 16 Apr 2019 11:58:25 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id 30E93300A99 for ; Tue, 16 Apr 2019 14:40:07 -0400 (EDT) X-Virus-Scanned: amavisd-new at mail.smeinc.net Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id nfguflRjSRDR for ; Tue, 16 Apr 2019 14:40:05 -0400 (EDT) Received: from a860b60074bd.fios-router.home (unknown [138.88.156.37]) by mail.smeinc.net (Postfix) with ESMTPSA id DAD91300201; Tue, 16 Apr 2019 14:40:05 -0400 (EDT) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.8\)) From: Russ Housley In-Reply-To: Date: Tue, 16 Apr 2019 14:58:23 -0400 Cc: IETF STIR Mail List Content-Transfer-Encoding: quoted-printable Message-Id: <90E14B2C-05AA-46EF-8906-9692217FCBE9@vigilsec.com> References: <3162DDF4-CB71-41F8-983B-8572D33B460B@vigilsec.com> <23FC946B-A5BC-4DAC-A281-9DB202C1DC93@team.neustar> <060587D1-11D4-45D0-8605-0B11D38415ED@vigilsec.com> To: "Peterson, Jon" X-Mailer: Apple Mail (2.3445.104.8) Archived-At: Subject: Re: [stir] WG Last Call Comments: draft-ietf-stir-passport-divert-05 X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Apr 2019 18:58:27 -0000 Jon: > My reading of RFC 8225 is that the payload is composed of a = collection of claims. Some of the claims are defined in the JWT = specifications, and other are defined specifically for PASSporT. In the = document, it is not clear to me whether a "claim object" is one of the = claims in this collection or the whole collection. If the term payload = was used for the whole collection, I think it would be more consistent = and clear. >=20 > I agree that we don't want that ambiguity about whether the "claims = object" refers to a single claim or the set of claims. I guess I am a = little hesitant to require that we use the JWS term "payload" for this, = though, because looking through the RFCs JWT seems to favor the term = "claims set". I don't want to get too pedantic about this, but maybe I = can remove "claims object" in favor of using either "payload" or "claims = set" where their semantics seems to fit? That would totally resolve my concern. Russ From nobody Wed Apr 17 09:33:13 2019 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 13387120164 for ; Wed, 17 Apr 2019 09:33:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sonfJJqyfvWJ for ; Wed, 17 Apr 2019 09:33:10 -0700 (PDT) Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D4F6012015E for ; Wed, 17 Apr 2019 09:33:09 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id CA522300400 for ; Wed, 17 Apr 2019 12:14:51 -0400 (EDT) X-Virus-Scanned: amavisd-new at mail.smeinc.net Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id uFTbf_6DEei2 for ; Wed, 17 Apr 2019 12:14:48 -0400 (EDT) Received: from a860b60074bd.fios-router.home (unknown [138.88.156.37]) by mail.smeinc.net (Postfix) with ESMTPSA id E1DD3300AA5; Wed, 17 Apr 2019 12:14:46 -0400 (EDT) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.8\)) From: Russ Housley In-Reply-To: <9BB03273-2BFA-4907-9234-EC8CE33E0186@team.neustar> Date: Wed, 17 Apr 2019 11:58:21 -0400 Cc: IETF STIR Mail List Content-Transfer-Encoding: 7bit Message-Id: References: <9BB03273-2BFA-4907-9234-EC8CE33E0186@team.neustar> To: Jon Peterson , Eric Rescorla X-Mailer: Apple Mail (2.3445.104.8) Archived-At: Subject: [stir] WG Last Call comments on stir-oob-04 X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 17 Apr 2019 16:33:12 -0000 Document: draft-ietf-stir-oob-04.txt Reviewer: Russ Housley Review Date: 2019-04-17 Major: Title page: As discussed on the mail list, please change the intended status to "Informational". Section 11: To date, STIR certificates are only used to digital signature. This document suggests that the public key in the certificate can also be used to provide confidentiality. This works if the public key is RSA, and the certificate has the appropriate key usage bits set. However, this does not work if the public key is DSA, ECDSA, Ed25519, or several others. I am not asking for a major change to the document, but this should be pointed out in the document. And, Section 11 should point out that finding the credential for the callee cannot leverage the "x5u" claim in the PASSporT when the public key can only be used for digital signature. Minor: Section 2: Please update the first paragraph to reference RFC 8174 in addition to RFC 2119, as follows: The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in BCP 14 [RFC2119] [RFC8174] when, and only when, they appear in all capitals, as shown here. Of course, also add a reference to RFC 8174. The figure in Section 7.2 can be easily adjusted to fit the normal margins. Also, the example telephone numbers should use the 555 conventions. I suggest: Alice Call Placement Service Bob -------------------------------------------------------------------- Store PASSporT for 2.222.555.2222 --> Call from 1.111.555.1111 ------------------------------------------> <-------------- Request PASSporT(s) for 2.222.555.2222 Obtain Encrypted PASSporT --------> (2.222.555.2222, 1.111.555.1111) [Ring phone with callerid = 1.111.555.1111] Also, adjust the text to reference these example telephone numbers. Likewise, please adjust the example telephone numbers in Section 9. It should be equally easy to remove three spaces from the figure in Section 7.4 to fit the normal margins. Section 7.3: Please add a reference for TLS. I assume you will use [RFC8446]. Section 7.5: s/Sign(K_cps, K_temp))/Sign(K_cps, K_temp)/ Section 11: Please add a reference for OCSP. I assume you will use [RFC2560]. Section 14: I think it would be helpful to include pointers to Sections 7.3 and 7.4 in the Security Considerations. Nits: Suggested spelling: s/CPSs/CPSes/ (Note: This spelling is used for Certificate Practice Statements.) Section 3: Please spell out the first use of "POTS". As an alternative, the sentence could be reworded to use PSTN, which has already been used many times by this point in the document. Sections 5.1 and 5.4: s/in the SIP world/in a SIP environment/ Section 5.4: s/back to the IP world/back to a SIP environment/ Section 5.4: s/returns to the IP world/returns to a SIP environment/ Section 5.5: s/a valid calls/a valid call/ Section 6.2: s/one that is valid/one or more that are valid/ Section 7.5: Please add an informative reference on blinded signatures. From nobody Wed Apr 17 16:19:56 2019 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8E0F012004C; Wed, 17 Apr 2019 16:19:54 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.338 X-Spam-Level: X-Spam-Status: No, score=-1.338 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, KHOP_DYNAMIC=1.363, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=team.neustar Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id f1HFnzf57Vfj; Wed, 17 Apr 2019 16:19:53 -0700 (PDT) Received: from mx0b-0018ba01.pphosted.com (mx0b-0018ba01.pphosted.com [67.231.157.90]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E01561200FC; Wed, 17 Apr 2019 16:19:52 -0700 (PDT) Received: from pps.filterd (m0078668.ppops.net [127.0.0.1]) by mx0b-0018ba01.pphosted.com (8.16.0.27/8.16.0.27) with SMTP id x3HN4FoY031979; Wed, 17 Apr 2019 19:19:48 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=team.neustar; h=from : to : subject : date : message-id : references : in-reply-to : content-type : content-id : content-transfer-encoding : mime-version; s=selector1; bh=PRwX9KvNvjWjpezRcpvWtGtmO9f9hWFOSH+8RSUoRms=; b=oKAG2jppVUQUnK+erD5xfgs1xkPDOtO7fTTYuOxLCOjiaNadufJRuak/OTiIGwCsVvgf e6bU2SUoipCgkTvWafo6Fst7qNCj91d8xOV8ZovuU4mFUrhYEyOdyWrdqwqqa+wiz+A3 XKln+HgvWk1pLornR8OABDxx2XLMamDAJ9dzDdxmHysrHVWaQAooCrQDqWWuL52rkl5N Rsv/ZHRG8AxAYE8ZKc/SHK+uJGBepqysxLyAMLo6jnd7iMl9fNgYKNt6c574gB+3niRc TDAZk20BKL6sDelM32cmcBi6Kf2e+XiNXyqNbwc/L/gyCY2fcYTeys2JzHAMBr+zYmZh bg== Received: from stntexhc10.cis.neustar.com ([156.154.17.216]) by mx0b-0018ba01.pphosted.com with ESMTP id 2ruajnamjg-1 (version=TLSv1 cipher=ECDHE-RSA-AES256-SHA bits=256 verify=NOT); Wed, 17 Apr 2019 19:19:48 -0400 Received: from STNTEXMB101.cis.neustar.com ([fe80::a831:d3b4:fb4e:e45b]) by stntexhc10.cis.neustar.com ([10.31.58.69]) with mapi id 14.03.0439.000; Wed, 17 Apr 2019 19:19:47 -0400 From: "Peterson, Jon" To: Ben Campbell , "stir@ietf.org" , "draft-ietf-stir-passport-divert@ietf.org" Thread-Topic: Comments on draft-ietf-stir-passport-divert Thread-Index: AQHU7jUNEBUmNdYE9kOEtQjeT39aGKZA2WIA Date: Wed, 17 Apr 2019 23:19:46 +0000 Message-ID: <784362B3-7E75-4C43-A618-371AF935D7C7@team.neustar> References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.10.8.190312 x-originating-ip: [10.96.12.236] Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2019-04-17_11:, , signatures=0 X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1011 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1810050000 definitions=main-1904170145 Archived-At: Subject: Re: [stir] Comments on draft-ietf-stir-passport-divert X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 17 Apr 2019 23:19:55 -0000 DQoNClRoYW5rcyBmb3IgdGhlIGNvbW1lbnRzLCBCZW4uIEEgZmV3IG5vdGVzIGJlbG93LiAgICAN CiAgICANCiAgICAqKiogU3Vic3RhbnRpdmUgQ29tbWVudHMgKioqDQogICAgDQogICAgwqc0LjI6 DQogICAgDQogICAgLSBXaGF0IGhhcHBlbnMgaWYgYSDigJxkaXbigJ0gcGFzc3BvcnQgY2hhaW5z IGJhY2sgdG8gYSBQQVNTcG9yVCBvYmplY3Qgd2l0aCBhbiB1bmtub3duIOKAnHBwdOKAnSB2YWx1 ZT8gSXMgdGhlIGFuc3dlciB0aGUgc2FtZSBpZiB0aGUgb2ZmZW5kaW5nIHBwdCBvY2N1cnMgYXQg dGhlIGlubmVybW9zdCBQQVNTcG9yVCB2cyBpbiB0aGUgbWlkZGxlIG9mIHRoZSBjaGFpbj8gKFRo YXQgaXMsIGlzIHRoZXJlIGFueSBwb3NzaWJpbGl0eSBvZiB0cmF2ZXJzaW5nIGEgcHB0IG9mIHVu a25vd24gdHlwZSB3aGVuIHZlcmlmeWluZyB0aGUgY2hhaW4/KQ0KDQo8Sm9uPklmIHlvdSBjYW4n dCB2YWxpZGF0ZSB0aGUgaW5uZXJtb3N0IFBBU1Nwb3JUIGluIGEgY2hhaW4sIHZhbGlkYXRpb24g b2YgdGhhdCBjaGFpbiBmYWlscyBmb3IgeW91LiBJIGNhbiBwdXQgaW4gc3BlY2lmaWMgdGV4dCBh Ym91dCB0aGUgaW5uZXJtb3N0IGlmIHRoYXQgaXMgaGVscGZ1bDsgYWxsIG9mIG9uZXMgaW4gdGhl IG1pZGRsZSBvZiB0aGUgY2hhaW4sIHRob3VnaCwgc2hvdWxkIGJlIG9mIHBwdCAiZGl2IiwgdGhv dWdoLCBzbyBJJ20gbm90IHN1cmUgdGhlcmUgcmVhbGx5IGlzIGFueSBwb3NzaWJpbGl0eSBvZiB0 cmF2ZXJzaW5nIGEgUEFTU3BvclQgb2YgdW5rbm93biB0eXBlIGluIHRoZSBtaWRkbGUgb2YgdGhl IGNoYWluLjwvSm9uPg0KICAgIA0KICAgIC0gIlRoZSB2ZXJpZmljYXRpb24gc2VydmljZSBTSE9V TEQgYWxzbyB2ZXJpZnkNCiAgICB0aGF0IGFsbCBvdGhlciAiZGl2IiBQQVNTcG9yVHMgaW4gdGhl IGNoYWluIHNoYXJlIHRoZSBzYW1lICJvcmlnIg0KICAgIHZhbHVlLuKAnQ0KICAgIA0KICAgIFdo YXQgaXMgdGhlIGJlbmVmaXQgb2YgZG9pbmcgdGhpcz8gV2hhdCB3b3VsZCBiZSB0aGUgY29uc2Vx dWVuY2VzIG9mIG5vdCBkb2luZyBpdD8gV2hhdCB3b3VsZCBiZSByZWFzb25hYmxlIGJlaGF2aW9y IGlmIHRoZSB2ZXJpZmllciBkaXNjb3ZlcmVkIGEgbm9uLW1hdGNoaW5nIG9yaWc/IChBbmQgZGVw ZW5kaW5nIG9uIHRoZSBhbnN3ZXJzOiBXaHkgbm90IE1VU1Q/KQ0KDQo8Sm9uPlllYWgsIGl0IHNl ZW1zIGtpbmQgb2YgYmVsdC1hbmQtc3VzcGVuZGVycyB0byBkbyBtYWtlIHZlcmlmaWNhdGlvbiBz ZXJ2aWNlcyBkbyBpdCwgd2hpY2ggaXMgd2h5IEknbSBmZW5jZS1zaXR0aW5nIGEgbGl0dGxlLiBJ dCdzIGtpbmQgb2YgaGFyZCB0byBpbWFnaW5lIHdoYXQgdGhlIG5vbi1tYXRjaGluZyBvcmlnLWlu LXRoZS1taWRkbGUgY2FzZSB3b3VsZCBiZSwgb3IgaG93IGl0IGNvdWxkIGJlIGV4cGxvaXRhYmxl IGZvciBzb21lIHNvcnQgb2YgYXR0YWNrLiBJZiB0aGVyZSB3ZXJlIGEgbm9uLW1hdGNoaW5nIG9y aWcsIGJ1dCB0aGUgZGVzdHMgY2hhaW5lZCBwcm9wZXJseSBvdGhlcndpc2UsIGl0J3MgdW5jbGVh ciB3aGF0IHZ1bG5lcmFiaWxpdHkgdGhhdCBjb3VsZCBleHBvc2UuIEkgZ3Vlc3MgSSdkIGJlIGNv bWZvcnRhYmxlIG1vdmluZyBpdCB0byBhIE1VU1QsIGp1c3QgZm9yIHRoZSBzYWtlIG9mIGJlaW5n IHBhcmFub2lkIC0gaW4gb3JkaW5hcnkgb3BlcmF0aW9ucywgaXQgc2hvdWxkIGFsd2F5cyBiZSB0 cnVlLjwvSm9uPg0KICAgIA0KICAgIC0gIkl0DQogICAgaXMgZnVydGhlcm1vcmUgUkVDT01NRU5E RUQgdGhhdCB0aGUgdmVyaWZpY2F0aW9uIHNlcnZpY2UgY2hlY2sNCiAgICB0aGF0IHRoZSAiaWF0 IiBmaWVsZCBvZiB0aGUgaW5uZXJtb3N0IFBBU1Nwb3JUIGlzIGFsc28gd2l0aGluIHRoZQ0KICAg IGRhdGUgZnJlc2huZXNzIGludGVydmFsOyBvdGhlcndpc2UgdGhlIHZlcmlmaWNhdGlvbiBzZXJ2 aWNlIGNvdWxkDQogICAgYWxsb3cgYXR0YWNrZXJzIHRvIHJlcGxheSBhbiBvbGQsIHN0YWxlIFBB U1Nwb3JUIGVtYmVkZGVkIGluIGENCiAgICBmcmVzaCAiZGl24oCdLuKAnQ0KICAgIA0KICAgIFdo eSBpcyB0aGlzIG5vdCBhIE1VU1Q/IERvIHlvdSBlbnZpc2lvbiBzaXR1YXRpb25zIHdoZXJlIGl0 IHdvdWxkIGJlIHJlYXNvbmFibGUgbm90IHRvIGNvbXBseT8NCg0KPEpvbj5UaGlzIHdvdWxkIGJl IGEgY2FzZSB3aGVyZSBhIGNhbGwgZ290IGJvdW5jZWQgYXJvdW5kIGp1c3QgYSB0b24gYnkgcmVk aXJlY3Rpb24sIGludG8gY2FsbCBwYXJraW5nIG9yIHNvbWV0aGluZy4gVGhlIGRhdGUgZnJlc2hu ZXNzIGludGVydmFsIGlzIGEgbWF0dGVyIG9mIGxvY2FsIHBvbGljeSBpbiA4MjI0LCBpdCBpcyBq dXN0IFJFQ09NTUVOREVEIHRoYXQgaXQgYmUgc2l4dHkgc2Vjb25kcy4gSSdtIGp1c3Qga2VlcGlu ZyB0aGlzIGF0IGFyb3VuZCB0aGUgc2FtZSBub3JtYXRpdmUgbGV2ZWwuPC9Kb24+DQogICAgDQog ICAgLSAiUEFTU3BvclQuIE5vdGUNCiAgICB0aGF0IChwZXIgU2VjdGlvbiA0LjEpIGEgY2hhaW4g bWF5IHRlcm1pbmF0ZSBhdCBtb3JlIHRoYW4gb25lDQogICAgaW5uZXJtb3N0IFBBU1Nwb3JULCBp biBjYXNlcyB3aGVyZSBhIHNpbmdsZSAiZGl2IiBpcyB1c2VkIHRvDQogICAgcmV0YXJnZXQgZnJv bSBtdWx0aXBsZSBiYXNlZCBQQVNTcG9yVHMu4oCdDQogICAgDQogICAgV2hhdCBoYXBwZW5zIGlm IHNvbWUgb2YgdGhlIHRlcm1pbmF0aW5nIFBBU1Nwb3JUcyBmYWlsIHZlcmlmaWNhdGlvbiBidXQg b3RoZXJzIHN1Y2NlZWQ/DQoNCjxKb24+SW4gdGhlIGJhc2VsaW5lIFNUSVIgcGhpbG9zb3BoeSwg aWYgYW4gSU5WSVRFIGFycml2ZXMgd2l0aCA1IElkZW50aXR5IGhlYWRlcnMsIGFuZCA0IG9mIHRo ZW0gZmFpbCwgdGhhdCdzIGZpbmUsIHlvdSBjYW4gdXNlIHRoZSA1dGguIFRoZSBhdXRob3JpemF0 aW9uIGRlY2lzaW9ucyBoZXJlIGFyZSwgYWdhaW4sIGEgbWF0dGVyIG9mIGxvY2FsIHBvbGljeSwg YnV0IGlmIHlvdSBoYXZlIGF0IGxlYXN0IG9uZSBQQVNTcG9yVCB0aGF0IGhhcyBhIHZhbGlkIHNp Z25hdHVyZSBmcm9tIGEgY2VydCB0aGF0IHlvdSB0cnVzdCwgeW91IGNhbiBwYXNzIHRoYXQgdmFs aWRhdGlvbiBpbmZvIHRvIHRoZSBhcHBsaWNhdGlvbi4gVGhpcyBpcyByZWFsbHkgaW50ZW5kZWQg dG8gY292ZXIgY2FzZXMgd2hlcmUsIHNheSwgdGhlcmUgYXJlIG11bHRpcGxlIHRydXN0IGFuY2hv cnMgaW4gcGxheSwgYW5kIG1heWJlIHlvdSB0cnVzdCBjZXJ0cyBpc3N1ZWQgYnkgb25lIG9mIHRo ZW0gYnV0IG5vdCB0aGUgb3RoZXJzOyBvciBjYXNlcyB3aGVyZSBzb21lb25lIGFsb25nIHRoZSB3 YXkgaGFzIGEgYm9ya2VkIGltcGxlbWVudGF0aW9uIGJ1dCB0aGUgb3RoZXIgb25lcyBhcmUgb2th eSwgdGhpbmdzIGxpa2UgdGhhdC4gVGhlIGltcGxpY2F0aW9uIGZvciBtdWx0aXBsZSBjaGFpbnMg aXMgdGhhdCB5b3UgdHJ1c3QgY2hhaW5zIHRoYXQgd29yayBhbmQgaWdub3JlIG9uZXMgdGhhdCBk b27igJl0LjwvSm9uPg0KICAgIA0KICAgIMKnNjoNCiAgICANCiAgICAgSXMg4oCcb3B0IiBpbnRl bmRlZCBmb3IgZ2VuZXJhbCBwdXJwb3NlIHVzZT8gSWYgc28sIEkgc3VnZ2VzdCBzcGxpdHRpbmcg aXQgb3V0IGludG8gYSBzZXBhcmF0ZSBkcmFmdC4g4oCcRGl2IiBzZWVtcyBsaWtlIGEgc3RyYW5n ZSBwbGFjZSB0byBoaWRlIGl0Lg0KDQo8Sm9uPkl0J3Mgb25seSBoZXJlIGJlY2F1c2UgImRpdi1v IiBkZWZpbmVzIGl0IGFuZCB1c2VzIGl0LjwvSm9uPg0KICAgIA0KICAgIElzIHRoZXJlIGEgaGFy ZCAzIGxldHRlciBsaW1pdCBmb3IgcGFzc3BvcnQgcGFyYW1ldGVyIG5hbWVzPyDigJxvcHTigJ0g c2VlbXMgcmF0aGVyIG5vbi1tbmVtb25pYyBkdWUgdG8gdGhlIGNvbGxpc2lvbiB3aXRoIHRoZSBw bGFpbiBFbmdsaXNoIHdvcmQuDQoNCjxKb24+SGVoLCBubywgd2UncmUganVzdCBmb2xsb3dpbmcg dGhlIGNvbnZlbnRpb24gaW4gdGhlIEpXVCBDbGFpbSBSZWdpc3RyeSwgdGhvdWdoIGFzIGEgY29u dmVudGlvbiwgaWYgeW91IGxvb2sgaXQgdXAgaW4gSUFOQSwgaXQgaXMgaG9ub3JlZCBtb3JlIGlu IHRoZSBicmVhY2ggdGhhbiB0aGUgb2JzZXJ2YW5jZS4uLiBJZiB0aGlzIHJlYWxseSBjYXVzZXMg YW55IGhlYXJ0YnVybiBJIGNhbiBjaGFuZ2UgaXQuPC9Kb24+DQogICAgDQogICAgwqcxMTogQXJl IHRoZXJlIHNjZW5hcmlvcyB3aGVyZXQgdGhlIG9yaWdpbmFsIGRlc3RpbmF0aW9uIGluIGEgZGl2 ZXJ0ZWQgY2FsbCBjb3VsZCBiZSBwcml2YWN5IHNlbnNpdGl2ZT8NCiAgICANCjxKb24+SXQgaXMg cHJvYmFibHkgd29ydGggaGF2aW5nIHNvbWUgUHJpdmFjeSBDb25zaWRlcmF0aW9ucyBzb3J0IG9m IHRleHQgYWJvdXQgdGhhdC4gVGhlIHNob3J0IGFuc3dlciBpcyB0aGF0IGl0IGlzIGEgdHJhZGUt b2ZmIGluIG1lY2hhbmlzbXMgbGlrZSB0aGlzIChIaXN0b3J5LUluZm8gaXMgdGhlIHNhbWUgd2F5 KSB0aGF0IHlvdSBjYW4gZXhwb3NlIHNvbWV0aGluZyBsaWtlIHRoZSBzZXJ2aWNlIGxvZ2ljIGlu dm9sdmVkIGluIHJvdXRpbmcgdGhlIGNhbGwgdG8gdGhlIHRlcm1pbmF0aW5nIHNpZGUuIFdoZXRo ZXIgd2Ugc2hvdWxkIHJlYWxseSBjb25zaWRlciB0aGF0IGEgInByaXZhY3kiIHJpc2sgaXMgYSBi aXQgaGFyZCB0byBzYXksIGJlY2F1c2UgaXQgaXMgaW4gb3JkaW5hcnkgb3BlcmF0aW9ucyBpbmZv cm1hdGlvbiBhYm91dCB0aGUgcm91dGluZyBwb2xpY3kgb2YgdGhlIGNhbGxlZCBwYXJ0eSBiZWlu ZyBleHBvc2VkIHRvIHRoZSBjYWxsZWQgcGFydHkgLSBhbmQgaWYgaXQgaXNuJ3QsIGZvciBzb21l IHJlYXNvbiwgYW5kIGNhbGxzIGFyZSBiZWluZyBmb3J3YXJkZWQgaW52b2x1bnRhcmlseSB0byB0 aGUgdWx0aW1hdGUgY2FsbGVkIHBhcnR5LCBpdCBzZWVtcyBsaWtlIHRoZSB1bHRpbWF0ZSBjYWxs ZWQgcGFydHkgbWlnaHQgYmUgZW50aXRsZWQgdG8ga25vdyBhYm91dCBpdC4gQnV0IGl0J3MgcHJv YmFibHkgd29ydGggdGFsa2luZyBhYm91dC48L0pvbj4NCg0KPEpvbj5OaXRzIGJlbG93IGFyZSBh cHByZWNpYXRlZCwgb25lIGNsYXJpZmljYXRpb24uPC9Kb24+DQogICAgDQogICAgKioqIEVkaXRv cmlhbCBDb21tZW50cyBhbmQgTml0cyAqKioNCiAgICANCiAgICAtIFRoZXJlIGFyZSBzb21lIG1p bm9yIGNvbXBsYWludHMgZnJvbSBJRE5pdHMgdGhhdCBzaG91bGQgYmUgYWRkcmVzc2VkIHByaW9y IHRvIHB1YnJlcS4NCiAgICANCiAgICAtIFBsZWFzZSBleHBhbmQgdGhlIGZvbGxvd2luZyBhY3Jv bnltczoNCiAgICANCiAgICBQQVNTcG9yVCAoaW4gdGl0bGUsIGFic3RyYWN0IGFuZCBib2R5KQ0K ICAgIEpXVA0KICAgIFNUSVINCiAgICANCiAgICDCpzE6DQogICAgLSAicHJhY3RpY2FsbHkgc3Bl YWtpbmcgc29tZSBvcGVyYXRpb25hbCBlbnZpcm9ubWVudHMgZG8gYWx0ZXIgdGhlDQogICAgVG8g aGVhZGVyIGZpZWxk4oCdDQogICAgVGhhdCBtYXkgYmUgYSBiaXQgb2YgYW4gdW5kZXJzdGF0ZW1l bnQuIFBlcmhhcHMg4oCcc29tZeKAnSBzaG91bGQgYmUg4oCcbWFueeKAnT8NCiAgICANCiAgICAt ICJhbmQgdGhleSBib3RoIGNhbiBjYXB0dXJlIG1pbm9yIHN5bnRhY3RpY2FsIGNoYW5nZXMgaW4N CiAgICBVUklzIHRoYXQgZG8gbm90IHJlZmxlY3QgYSBjaGFuZ2UgdG8gdGhlIGFjdHVhbCB0YXJn ZXQgb2YgYSBjYWxsLuKAnQ0KICAgIA0KICAgIEnigJltIG5vdCBzdXJlIHdoYXQg4oCcY2FwdHVy ZeKAnSBtZWFucyBpbiB0aGlzIGNvbnRleHJ0LiBBcmUgd2UgdGFsa2luZyBhYm91dCBvdGhlcndp c2UgdW5uZWNlc3NhcnkgSC1JIGVudHJpZXMgZHVlIHRvIHNlbWFudGljYWxseSBlcXVpdmFsZW50 IGJ1dCBzeW50YWN0aWNhbGx5IGRpZmZlcmVudCBVUklzPw0KDQo8Sm9uPlllcy4gSSBnYXRoZXIg SSBzaG91bGQgYmUgYSBsaXR0bGUgbW9yZSBjbGVhci48L0pvbj4NCiAgICANCiAgICDCpzI6IElz IHRoZXJlIGEgcmVhc29uIG5vdCB0byB1c2UgdGhlIHVwZGF0ZWQgYm9pbGVycGxhdGUgZnJvbSBS RkM4MTc0Pw0KICAgIA0KICAgIMKnNC4yOiBJdCBzZWVtcyBlYXJseSBpbiB0aGUgZXZvbHV0aW9u IG9mIFNUSVIgdG8gY2FsbCBiYXNlIHZlcmlmaWNhdGlvbiBzZXJ2aWNlcyDigJx0cmFkaXRpb25h bOKAnSA6LSkNCiAgICANCg0KICAgIA0KICAgIA0KICAgIA0KICAgIA0KICAgIA0KDQo= From nobody Wed Apr 17 16:25:24 2019 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CA3261200FA for ; Wed, 17 Apr 2019 16:25:22 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.638 X-Spam-Level: X-Spam-Status: No, score=-0.638 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, KHOP_DYNAMIC=1.363, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=team.neustar Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ed8xL1biiwx8 for ; Wed, 17 Apr 2019 16:25:21 -0700 (PDT) Received: from mx0b-0018ba01.pphosted.com (mx0a-0018ba01.pphosted.com [67.231.149.94]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 47A2F1200F6 for ; Wed, 17 Apr 2019 16:25:21 -0700 (PDT) Received: from pps.filterd (m0078664.ppops.net [127.0.0.1]) by mx0a-0018ba01.pphosted.com (8.16.0.27/8.16.0.27) with SMTP id x3HNMwo4006839; Wed, 17 Apr 2019 19:25:20 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=team.neustar; h=from : to : subject : date : message-id : references : in-reply-to : content-type : content-id : content-transfer-encoding : mime-version; s=selector1; bh=tg1Cn1J0ODGX3XAJ7rVwDR5if/0lOEJGm5FX3Fwsux4=; b=Jm1FZMT0/XvYDua/8H53nQ8q+WjIlAMiQpVbTGSTfJcKxKtlzA1doBpeb7NGKRj8MauW QgK5kWGYcMA38pSh6tqGrRkDDGeYrZhEWtt2hCNuaZZ3YoHLiFDJGpMvGdsO/iXuJDYo xZBcPTKjQmC4GZylL5GHFH09hZEs1Cj+30PrSjlI0n6UiZ2Sd8ukVi4ruRXWXtDlmdd+ hxfj/rf4Ma0V07gn0rXyMpxdztOynRG3oNr57QwYTJOcBHOtLeAH/jBOmV6fiR5zazxm RhzHxB1+S1buWV709qUXjS7hk9qJ7Fsu2LM+xez8ZElu5GMYvnRFL4FFR7TRdeDGVIid 8w== Received: from stntexhc12.cis.neustar.com ([156.154.17.216]) by mx0a-0018ba01.pphosted.com with ESMTP id 2ruadw9p02-1 (version=TLSv1 cipher=ECDHE-RSA-AES256-SHA bits=256 verify=NOT); Wed, 17 Apr 2019 19:25:20 -0400 Received: from STNTEXMB101.cis.neustar.com ([fe80::a831:d3b4:fb4e:e45b]) by stntexhc12.cis.neustar.com ([::1]) with mapi id 14.03.0439.000; Wed, 17 Apr 2019 19:25:18 -0400 From: "Peterson, Jon" To: Eric Burger , "stir@ietf.org" Thread-Topic: [stir] WG LC Comments: draft-ietf-stir-passport-divert-05 Thread-Index: AQHU9GzctflA9QWVPk2yD3j3wVNQaKZAzn2A Date: Wed, 17 Apr 2019 23:25:18 +0000 Message-ID: <456F0459-D5E2-4AE7-9BA0-1D00401106DF@team.neustar> References: <9536C2D6-A6EF-48B2-858D-10232CCA028E@standardstrack.com> In-Reply-To: <9536C2D6-A6EF-48B2-858D-10232CCA028E@standardstrack.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.10.8.190312 x-originating-ip: [10.96.12.236] Content-Type: text/plain; charset="utf-8" Content-ID: <11129C88B468A548B99839CCBEB34CCF@neustar.biz> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2019-04-17_11:, , signatures=0 X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1011 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1810050000 definitions=main-1904170146 Archived-At: Subject: Re: [stir] WG LC Comments: draft-ietf-stir-passport-divert-05 X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 17 Apr 2019 23:25:23 -0000 DQpUaGFua3MgZm9yIG5vdGVzIEVyaWMuIFNvbWUgcmVzcG9uc2VzIGlubGluZToNCiAgICANCiAg ICBTZWN0aW9uIDQuMToNCiAgICBJcyB0aGVyZSBhIHNjZW5hcmlvIHdoZXJlIHRoZSB0ZXJtaW5h dGluZyB2ZXJpZmljYXRpb24gc2VydmljZSBXT1VMRCBOT1QgZG8gdmVyaWZpY2F0aW9uPyBUaGVy ZeKAmXMgYSBidW5jaCBvZiB0ZXh0IG9uIGhvdyB0aGUgZGl2ZXJ0aW5nIHBsYXRmb3JtIG1pZ2h0 IG9yIG1pZ2h0IG5vdCBkbyB2ZXJpZmljYXRpb24gYW5kIHRoZSB0ZXJtaW5hdGluZyBwbGF0Zm9y bSBtaWdodCBvciBtaWdodCBub3QgZG8gdmVyaWZpY2F0aW9uLg0KICAgIA0KICAgIFdvdWxkIGl0 IG5vdCBiZSBiZXR0ZXIgdG8gcG9pbnQgb3V0IHRoZSBkaXZlcnRpbmcgcGxhdGZvcm0gd291bGQg cmVhbGx5LCByZWFsbHksIHJlYWxseSAoU0hPVUxEPykgd2FudCB0byB2ZXJpZnkgdGhlIGluYm91 bmQgY2FsbCwgYmVjYXVzZSBpdCB3aWxsIGJlIHRoZSByZXB1dGF0aW9uIG9mIHRoZSBkaXZlcnRp bmcgcGxhdGZvcm0gb24gdGhlIGxpbmUgaWYgaXQgc2lnbnMgdGhlIGRpdmVyc2lvbiBvbiBhIGJh ZCBjYWxsPw0KDQo8Sm9uPkkgdGhpbmsgU0hPVUxEIChhcyBpcyB0aGVyZSBub3csIGluIHRoZSBz ZWNvbmQgc2VudGVuY2Ugb2YgNC4xKSBpcyB0aGUgcmlnaHQgbGV2ZWwgb2YgYXJtLXR3aXN0aW5n IHRoZXJlOyB3ZSBkbyBzYXkgdGhlIHNjZW5hcmlvIGluIHdoaWNoIHlvdSB3b3VsZCBub3Qgd2Fu dCB0byBkbyBpdCBpcyBzb21ldGhpbmcgdmVyeSBoaWdoLXZvbHVtZS4gSSBkb24ndCB0aGluayBp dOKAmXMgdGhlIHJlcHV0YXRpb24gb2YgdGhlIGRpdmVydGluZyBwbGF0Zm9ybSB0aGF0IGlzIG9u IHRoZSBsaW5lIGlmIHRoZSBvcmlnaW5hbCBQQVNTcG9yVCBpc24ndCB2YWxpZCAtIGl0J3MgdGhl IGNyZWF0b3Igb2YgdGhlIG9yaWdpbmFsIFBBU1Nwb3JULCB3aGljaCBpcyBzdGlsbCBpbiB0aGUg SU5WSVRFLCBhZnRlciBhbGwuPC9Kb24+DQogICAgDQogICAgQ29udmVyc2VseSwgd2h5IHdvdWxk IGFueSB0ZXJtaW5hdGluZyBwcm92aWRlciBFVkVSIHRydXN0IGEgZGl2ZXJzaW9uIGZyb20gYSBQ Qlg/IEkuZS4sIHdvdWxkIG5vdCBhIHRlcm1pbmF0aW5nIHByb3ZpZGVyIHJlYWxseSwgcmVhbGx5 LCByZWFsbHkgKFNIT1VMRD8pIHdhbnQgdG8gdmVyaWZ5IGFsbCBvZiB0aGUgc2lnbmF0dXJlcyBp biB0aGUgY2hhaW4/DQoNCjxKb24+SGVyZSBpbiB0aGUgSUVURiwgYW55d2F5LCB3ZSdyZSBub3Qg aW4gdGhlIGJ1c2luZXNzIG9mIHRlbGxpbmcgeW91IHdobyB5b3Ugc2hvdWxkIHRydXN0IG9yIHdo eS4gSWYgc29tZW9uZSBzaWducyBhICJkaXYiIFBBU1Nwb3JUIHdpdGggYSBjZXJ0IHlvdSB0cnVz dCwgeW91IGNhbiB0cnVzdCBpdCwgYW5kIGlmIGl0IGdldHMgc2lnbmVkIHdpdGggYSBjZXJ0IHlv dSBkb24ndCB0cnVzdCwgZG9uJ3QgdHJ1c3QgaXQuPC9Kb24+DQogICAgDQogICAgVG93YXJkcyB0 aGUgZW5kIG9mIDQuMSB3ZSB0YWxrIGFib3V0IFJQSC4gSXMgdGhlcmUgYW55IGlzc3VlIG9mIGZv cndhcmRpbmcgYW4gUlBIIGNhbGw/IE9uZSB3b3VsZCB0aGluayB0aGF0IG9uY2UgYSBwcmlvcml0 eSBjYWxsIGhpdHMgYSBQQlgsIGl0IHdpbGwgbG9zZSBpdHMgcHJpb3JpdHkuIEkgYW0gbm90IHN0 YXRpbmcgYSBmYWN0IHRoYXQgSSBrbm93LCBidXQgZm9yIHRob3NlIGluIHRoZSBSUEggd29ybGQs IHdoYXQgaXMgeW91ciB1bmRlcnN0YW5kaW5nPyBBbHNvLCB0aGlzIHBhcmFncmFwaCBpcyBkZW5z ZSBhbmQgYSBiaXQgY29uZnVzaW5nLiBBbiBleGFtcGxlIHdvdWxkIGdvIGEgbG9uZyB3YXkgaW4g cHJvdmlkaW5nIGNsYXJpdHkuDQogICAgDQo8Sm9uPkknbSBqdXN0IHVzaW5nIFJQSCBhcyBhbiBl eGFtcGxlIG9mIHNvbWV0aGluZyB0aGF0IG1pZ2h0IGhhdmUgaXRzIG93biBJZGVudGl0eSBoZWFk ZXI7IEkgY291bGQgaGF2ZSB1c2VkICJyY2QiIGluc3RlYWQuIEkgYWxzbyBkb24ndCByZWFsbHkg a25vdyBob3cgbGlrZWx5IGl0IGlzIHRoYXQgYSBjYWxsIHVzaW5nIFJQSCB3b3VsZCBldmVyIGdl dCByZXRhcmdldGVkLCBidXQgaXQgZG9lc24ndCBzZWVtIG91dHNpZGUgdGhlIHJlYWxtIG9mIHBv c3NpYmlsaXR5LiBJJ2QgYmUgaGFwcHkgdG8gc3dhcCB0aGlzIG91dCBmb3Igc29tZSBvdGhlciBQ QVNTcG9yVCBleHRlbnNpb24gaWYgaXQgc2VlbXMgZXNwZWNpYWxseSBjb25mdXNpbmcuPC9Kb24+ DQogICAgDQogICAgU2VjdGlvbiA0LjI6DQogICAgV2h5IHdvdWxkIGEgZmFpbHVyZSBpbiB0aGUg dmVyaWZpY2F0aW9uIGNoYWluIEVWRVIgcmVzdWx0IGluIGFueXRoaW5nIG90aGVyIHRoYW4gYSBm YWlsZWQgdmVyaWZpY2F0aW9uLCBvdGhlciB0aGFuIHRoZSBvYnZpb3VzLCDigJx0aGUgY2VydGlm aWNhdGUgZXhwaXJlZCB0aHJlZSBtaW51dGVzIGFnb+KAnT8gUmVtZW1iZXIsIE1BWSA9IE5ldmVy IFdpbGwgSGFwcGVuLg0KDQo8Sm9uPlRoYXQgd291bGQgYmUgaW4gdGhlIGNhc2Ugd2hlcmUgdGhl IGNoYWluIGlzbid0IHRoZSBvbmx5IHRoaW5nIHlvdSBjYW4gdmFsaWRhdGUgaW4gdGhlIElOVklU RS4gRXZlbiBpbiBhIG5vbi1kaXYgY2FzZSwgaWYgdGhlcmUgYXJlIDUgSWRlbnRpdHkgaGVhZGVy cywgYW5kIGZvdXIgb2YgdGhlbSBkb24ndCB2YWxpZGF0ZSBmb3IgeW91LCBidXQgdGhlIGZpZnRo IGRvZXMsIHlvdSBjYW4gdHJ1c3QgdGhlIGZpZnRoLiBUaGUgbWVyZSBwcmVzZW5jZSBvZiBpbiBh biBJTlZJVEUgb2Ygc29tZXRoaW5nIHRoYXQgeW91IGNhbid0IHZhbGlkYXRlIGRvZXNuJ3QgbWVh biB2ZXJpZmljYXRpb24gZmFpbHMuPC9Kb24+DQogICAgDQogICAgU2VjdGlvbiA0LjIsIEZpZnRo IHN0ZXANCiAgICBXaGF0IGlzIGEg4oCcbXVsdGlwbGUgYmFzZWQgUEFTU3BvclRz4oCdPw0KICAg IA0KPEpvbj5BIHR5cG8gZm9yICJtdWx0aXBsZSBiYXNlIFBBU1Nwb3JUcyIuIFdpbGwgZml4LCBw cm9iYWJseSB3aXRoICJpbm5lcm1vc3QuIjwvSm9uPg0KDQogICAgU2VjdGlvbiA1Og0KICAgIEFz IEJlbiBwb2ludGVkIG91dCBpbiBoaXMgcmV2aWV3LCBkaXYtbyBzZWVtcyB0byBiZSBhIGRpZmZl cmVudCBiZWFzdCB0aGF0IG1pZ2h0IGJldHRlciBiZSBhZGRyZXNzZWQgaW4gYSBzZXBhcmF0ZSBk b2N1bWVudC4gSW4gZmFjdCwgaWYgdGhlIG9ubHkgcHVycG9zZSBvZiBpdCBpcyB0byBzdXBwb3J0 IE9PQiwgSSB3b3VsZCBpbnNpc3QgaXQgZ28gaW50byBhIHNlcGFyYXRlIGRvY3VtZW50LiBDb252 ZXJzZWx5LCBpZiBkaXYtbyB3aWxsIGJlIHRoZSBtZWNoYW5pc20gdG8gc3VwcG9ydCBUTi1Qb1As IHRoZW4gc2F5IHNvLiBPZiBjb3Vyc2UsIGlmIHRoYXQgaXMgd2hhdCBkaXYtbyBpcyBhYm91dCwg YWdhaW4gcGVyaGFwcyBpdCB3b3VsZCBiZSBiZXR0ZXIgc2VydmVkIGluIGEgc2VwYXJhdGUgZG9j dW1lbnQgb3IgYXMgcGFydCBvZiB0aGUgZXZlbnR1YWwgbWVjaGFuaXNtIHRoYXQgYWxsb3dzIHRo ZSBvcmlnaW5hdGluZyBjYWxsZXIgdG8gc2lnbiBhIGNhbGwgKGNsYXNzaWMgU1RJUikgYXMgd2Vs bCBhcyBhbiBhdXRoZW50aWNhdGlvbiBzZXJ2aWNlIHNpZ25pbmcgdGhlIGNhbGwgKFNIQUtFTiku DQogICAgDQo8Sm9uPkJlbiB3YXMgdGFsa2luZyBhYm91dCAib3B0IiBJIHRoaW5rLCBub3QgImRp di1vIi4gSSB0aGluayAiZGl2LW8iIGlzIGEgc2ltaWxhciBlbm91Z2ggYmVhc3QgdGhhdCBpdCBi ZWxvbmdzIGhlcmUsIGJlY2F1c2UgaXQgaXMgdXNlZCBmb3IgZGl2ZXJzaW9uIGFuZCB1c2VzIHRo ZSBkaXZlcnNpb24gYXV0aGVudGljYXRpb24gYW5kIHZlcmlmaWNhdGlvbiBzZXJ2aWNlIGJlaGF2 aW9ycyBkZXNjcmliZWQgaGVyZSBhbmQgdGhpcyBpcyB0aGUgZGl2ZXJzaW9uIGRyYWZ0LiBUaGUg bmVzdGVkICJkaXYtbyIgbWVjaGFuaXNtIGlzIGV4cGxpY2l0bHkgbWFya2VkIGFzIGJlaW5nIGZv ciBub24tU0lQIGNvbnZleWFuY2UsIHNvIGl0IGRvbid0IHRoaW5rIHRoZSBkb2N1bWVudCBpcyB1 bmNsZWFyIGFib3V0IHdoeSBpdCBpcyB0aGVyZS4gWW91ciBpbnNpc3RlbmNlIGFib3V0IHJlbW92 aW5nIGl0IGlzIG5vdGVkLCBidXQgaWYgSSByZWNhbGwgYWJvdXQgYSB5ZWFyIGFnbyB5b3Ugd2Vy ZSB0aGUgb25lIGluc2lzdGluZyB0aGF0IHRoZSBlbnRpcmUgbWVjaGFuaXNtIHVzZSBuZXN0ZWQs IHdoaWNoIEkgaGFkIHRvIHBhdGNoIGluLCBhbmQgdGhlbiBsYXRlciB1bmRvLiBJIGRvbid0IHRo aW5rIHRoZXJlIGlzIGFueSBwcmFjdGljYWwganVzdGlmaWNhdGlvbiBmb3IgZG9pbmcgbW9yZSBi dXN5d29yayBhbG9uZyB0aG9zZSBsaW5lcy48L0pvbj4NCg0KICAgIFNlY3Rpb24gNzoNCiAgICBX aHkgd291bGQgd2UgRVZFUiBhbGxvdyBhIGNhbGxlciB0byBwaWNrdXAgYSBzaWduYXR1cmUgZnJv bSBhIDMwMiByZWRpcmVjdGluZyBzZXJ2ZXI/IFRoZSB0ZXh0IGdvZXMgdG8gZ3JlYXQgbGVuZ3Ro cyB0byBleHBsYWluICpob3cqIHRvIGRvIGl0LCBidXQgbmV2ZXIgc2F5cyAqd2h5Ki4gSeKAmW0g aGF2aW5nIHRyb3VibGUgZ3Jva2luZyB0aGUgdXNlIGNhc2UuIEEgc3BhbW1lciBzZW5kcyBJTlZJ VEVzIHRvIGEgbnVtYmVyLCBnZXRzIGJhY2sgYSAoc2V0IG9mKSBzaWduZWQgUEFTU3BvclRzIHRv IGluY2x1ZGUgaW4gdGhlaXIgc3BhbSBjYWxscz8gV2h5IHdvdWxkIEkgZXZlciBjYXJlIGlmIHRo ZSBzcGFtbWVyIGZvdW5kIG15IGN1cnJlbnQgY29udGFjdCBmcm9tIGEgcmVkaXJlY3QgZnJvbSBh IHJlZ2lzdHJhciBpbnN0ZWFkIG9mIGd1ZXNzaW5nIG15IGN1cnJlbnQgY29udGFjdCBkaXJlY3Rs eT8gSXMgdGhlcmUgYSBkb3VibGUtc2VjcmV0IHVzZSBjYXNlIGhpZGluZyBoZXJlPw0KDQo8Sm9u PkkgZG9u4oCZdCB1bmRlcnN0YW5kIHdoYXQgYXR0YWNrIHlvdSBiZWxpZXZlIGV4aXN0cyBoZXJl LiBJIGRvbid0IHRoaW5rIHRoZXJlJ3MgYW55IHByYWN0aWNhbCBzZWN1cml0eSBkaWZmZXJlbmNl IChpbiB0aGUgU1RJUiB0aHJlYXQgbW9kZWwpIGJldHdlZW4gaW5zZXJ0aW5nIGEgImRpdiIgUEFT U3BvclQgaW4gYW4gSU5WSVRFIGFzIHlvdSByZXRhcmdldCBhbmQgZm9yd2FyZCBpdCB2ZXJzdXMg c2VuZGluZyBhIDMwMiBpbiB0aGUgYmFja3dhcmRzIGRpcmVjdGlvbiB3aXRoIHRoZSAiZGl2IiBQ QVNTcG9yVC4gSWYgQVQmVCBpcyBjaG9vc2luZyBhIG5ldyB0YXJnZXQgZm9yIHlvdXIgY2FsbCwg YW5kIGNyZWF0ZXMgYSAiZGl2IiBQQVNTcG9yVCB0byByZWZsZWN0IHRoYXQsIGhhdmluZyBhIGNv cHkgb2YgdGhhdCAiZGl2IiBQQVNTcG9yVCBkb2VzIG5vdCBlbmFibGUgYSBzcGFtbWVyIHRvIGFk ZCBhbnl0aGluZyB0byBhIGNhbGwgb3RoZXIgdGhhbiBBVCZUJ3MgYXNzdXJhbmNlIHRoYXQgbnVt YmVyIEEgaXMgYmVpbmcgcmV0YXJnZXRlZCB0byBudW1iZXIgQiBhdCB0aGlzIHNwZWNpZmljIGlh dCBpbnRlcm5hbCwgd2hpY2gsIHdoZW4gYWRkZWQgdG8gYSBjYWxsLCBpcyBvZiBubyB1c2UgaW4g aW1wZXJzb25hdGluZyBhbnlvbmUgb3Igb2JzY3VyaW5nIHlvdXIgaWRlbnRpdHkuPC9Kb24+DQog ICAgDQogICAgU2VjdGlvbiBbTWlzc2luZ106IFByaXZhY3kgQ29uc2lkZXJhdGlvbnMNCiAgICBT cHJpbmtsZWQgdGhyb3VnaG91dCB0aGUgZG9jdW1lbnQgYXJlIHByaXZhY3kgY29uc2lkZXJhdGlv bnMsIGxpa2UgaG93IHRoaXMgbWVjaGFuaXNtIGlzIGluYXBwcm9wcmlhdGUgZm9yIGFub255bWl6 YXRpb24gc2VydmljZXMgKHNlZSwgZS5nLiwgdGhlIGxhc3QgcGFyYWdyYXBoIG9mIFNlY3Rpb24g NC4yKS4NCiAgICANCjxKb24+UHJvYmFibHkgd2UgY291bGQgc3RhbmQgdG8gYWRkIGEgZmV3IHNl bnRlbmNlcyBhYm91dCB0aGUgcHJpdmFjeSBpbXBsaWNhdGlvbnMgb2YgdGhpczsgSSdsbCBkbyB0 aGF0LjwvSm9uPg0KDQpKb24gUGV0ZXJzb24NCk5ldXN0YXIsIEluYy4NCiAgICANCg0K From nobody Wed Apr 17 16:27:10 2019 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6B6B11200FA for ; Wed, 17 Apr 2019 16:27:08 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.338 X-Spam-Level: X-Spam-Status: No, score=-1.338 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, KHOP_DYNAMIC=1.363, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=team.neustar Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HmtTk0Po942w for ; Wed, 17 Apr 2019 16:27:07 -0700 (PDT) Received: from mx0b-0018ba01.pphosted.com (mx0b-0018ba01.pphosted.com [67.231.157.90]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 30ED21200FC for ; Wed, 17 Apr 2019 16:27:07 -0700 (PDT) Received: from pps.filterd (m0078668.ppops.net [127.0.0.1]) by mx0b-0018ba01.pphosted.com (8.16.0.27/8.16.0.27) with SMTP id x3HNMopZ014203; Wed, 17 Apr 2019 19:27:05 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=team.neustar; h=from : to : subject : date : message-id : references : in-reply-to : content-type : content-id : content-transfer-encoding : mime-version; s=selector1; bh=HlXlKv9VEu6GJBoDU36wdSWP6BoZy+H0PVuHRArjq68=; b=cvx87F2TGsurOuqpFvgCTTIwhgYmnnqUkBsMH0u+SvXQUMIBOQOmTy0L2TH3GCR1GdVz swNsgte33Kgza972MV31skwlKvn2X0ManjFX7J9oM91geE3fEhp5yHFUpq6aI58REMfP IyETCXEMq1I2hqLoKNU3yijdJ8AXSAqwMuWieOv8lyxnTUIi6UQKhi/s9zqz3UwlGq5Z 3xuhtpT+hRRDSGK4ZC8yWfeHqqBPnIHT0KY4/nc7MAtHGaYXfG53ck5hozB6pb6SmVam mRLjU9xHKpdK1wqt9mFz6w+bgzwDZhkJT1a8cYqKB67g12/RtCRWG6ptUv9bPsjWJ7N3 3A== Received: from stntexhc11.cis.neustar.com ([156.154.17.216]) by mx0b-0018ba01.pphosted.com with ESMTP id 2ruajnan2w-1 (version=TLSv1 cipher=ECDHE-RSA-AES256-SHA bits=256 verify=NOT); Wed, 17 Apr 2019 19:27:05 -0400 Received: from STNTEXMB101.cis.neustar.com ([fe80::a831:d3b4:fb4e:e45b]) by stntexhc11.cis.neustar.com ([::1]) with mapi id 14.03.0439.000; Wed, 17 Apr 2019 19:27:05 -0400 From: "Peterson, Jon" To: Eric Burger , "stir@ietf.org" Thread-Topic: [stir] WG LC Comments: draft-ietf-stir-oob-04 Thread-Index: AQHU9G1ws2PeKvZK70avTLbxcPSyB6ZAzvqA Date: Wed, 17 Apr 2019 23:27:04 +0000 Message-ID: References: <7E25361F-D726-440F-A77A-332BB97AC77A@standardstrack.com> In-Reply-To: <7E25361F-D726-440F-A77A-332BB97AC77A@standardstrack.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.10.8.190312 x-originating-ip: [10.96.12.236] Content-Type: text/plain; charset="utf-8" Content-ID: <5836F74CFCCA6D4FB8D8AC19D40F7F17@neustar.biz> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2019-04-17_11:, , signatures=0 X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1015 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1810050000 definitions=main-1904170146 Archived-At: Subject: Re: [stir] WG LC Comments: draft-ietf-stir-oob-04 X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 17 Apr 2019 23:27:09 -0000 DQpUaGFua3MgZm9yIHRoZSBub3RlcyBFcmljLiBSZXNwb25zZXMgaW5saW5lOg0KDQogICAgU2Vj dGlvbiAxMToNCiAgICBJdCBsb29rcyBsaWtlIHRoZXJlIHdhcyBnb2luZyB0byBiZSBhIGxpc3Qg b2YgZGlzY292ZXJ5IHJlcXVpcmVtZW50cyBhbmQgY29uc2lkZXJhdGlvbnMgZm9yIGNyZWRlbnRp YWwgZGlzY292ZXJ5LCBidXQgdGhlcmXigJlzIGp1c3QgYSBibGFuayBzcGFjZS4gIFRoZXJlIGlz IGFuIGVsZW1lbnQgb2Yg4oCcYW5kIHRoZW4gYSBtaXJhY2xlIG9jY3Vyc+KAnSB3aGljaCBpcyBh IGJpdCBkaXN0dXJiaW5nLg0KDQo8Sm9uPk5vLCB0aGVyZSB3YXNuJ3Qgc3VwcG9zZWQgdG8gYmUg YSBsaXN0IHRoZXJlLCBidXQgSSdsbCBhZ3JlZSBsb29raW5nIGF0IHRoZSBzZWN0aW9uIHRoZSAi bGlrZToiIGNhbiBtYWtlIGl0IGxvb2sgbGlrZSB0aGVyZSB3YXMgc3VwcG9zZWQgdG8gYmUsIEkn bGwgY2xpcCB0aGF0LiBNb3JlIG9uIHRoZSBzdWJzdGFuYXRpdmUgcG9pbnQgaW4gYSBzZWMuLi48 L0pvbj4NCiAgICANCiAgICBTZWN0aW9uIDEwIGFuZCBTZWN0aW9uIDUuNDoNCiAgICBBbHNvIOKA nGEgbWlyYWNsZSBvY2N1cnPigJ0gbW9tZW50IGluIGhvdyB0byBmaW5kIGEgQ1BTLg0KICAgIA0K ICAgIFNlY3Rpb24gNi4xOg0KICAgIFdoZXJlIGRvIHRoZSBwdWJsaWMga2V5cyBjb21lIGZyb20/ IFRoaXMgYWxzbyBtZWFucyBsb3RzIG9mIGNyeXB0byB3b3JrIGZvciB0aGUgY2FsbGVyLiBUaGlz IGNvdWxkIGJlIGEgYmVuZWZpdCwgbmFtZWx5IHJlcXVpcmluZyBhIHByb29mIG9mIHdvcmsgdG8g cGxhY2UgYSBwaG9uZSBjYWxsLiBBbHRob3VnaCwgaXQgY291bGQgYmUgbW9yZSBlZmZpY2llbnQg dG8gY2hhcmdlIHNvbWUgZnJhY3Rpb24gb2YgYml0Y29pbiBpbiBsaWV1IG9mIHByb29mIG9mIHdv cmsgOy0pDQogICAgDQo8Sm9uPlRvIHRoaXMgYW5kIHRoZSBhYm92ZSB0d28gcG9pbnRzLCBJIGRv bid0IHJlYWxseSB0aGluayB0aGVyZSBpcyBhbnkgbWlyYWNsZSByZXF1aXJlZCBoZXJlLiBGb3Ig dGhlIHB1cnBvc2VzIG9mIGtpY2tpbmcgdGhlIHRpcmVzIHdpdGggT09CLCBtYW51YWxseSBwcm92 aXNpb25pbmcgb2YgQ1BTJ3Mgd2lsbCB3b3JrIGp1c3QgZmluZS4gTW9yZW92ZXIsIFNUSVIgYXNz dW1lcyBhIGNlcnRhaW4gZGVncmVlIG9mIHByZS1hc3NvY2lhdGlvbiB3aXRoIHRydXN0IGFuY2hv cnMsIGFuZCBpdCBpc24ndCB0b28gaGFyZCB0byBpbWFnaW5lIHRoYXQgY2VydGlmaWNhdGUgcmVw b3NpdG9yaWVzLCBvciBwb2ludGVycyB0byBzYW1lLCBjb3VsZCBiZSBtYW5hZ2VkIGJ5IGFueW9u ZSBydW5uaW5nIGEgdHJ1c3Qgcm9vdC4gVGhlIGNlcnRzIHRoZW1zZWx2ZXMgY291bGQgY29udGFp biBwb2ludGVycyB0byBhIENQUywgYXMgdGhlIGRyYWZ0IGFscmVhZHkgbWVudGlvbnMuIE1hZ2lj IG5vdCBuZWNlc3NhcnkuPC9Kb24+DQoNCiAgICBTZWN0aW9uIDUuNToNCiAgICBUaGlzIHNjaGVt ZSB0b3RhbGx5IGZhaWxzIGZvciBhIGNhbGwgY2VudGVyIG9yIGVudGVycHJpc2UgdGhhdCBqdXN0 IHVzZXMgYSBzaW5nbGUgbnVtYmVyIGZvciBhbGwgKG9yIG1hbnkpIG91dGJvdW5kIGNhbGxzLiBU aGV5IHdpbGwgYWxsIGhhdmUgdGhlIHNhbWUgc291cmNlIGFkZHJlc3MuDQoNCjxKb24+RmFpbHMg d2hhdD8gVGhhdCB1c2UgY2FzZSBpcyBkZXNjcmliaW5nIGluYm91bmQgY2FsbHMgdG8gYSBjYWxs IGNlbnRlciwgbm90IG91dGJvdW5kIGNhbGxzIGZyb20gaXQuIEluIGFueSBldmVudCwgdGhlIHBv aW50IGhlcmUgaXMgdGhhdCB0aGVyZSBpcyBhIHRyYWRlLW9mZiBpbiBydW5uaW5nIGEgaGlnaC12 b2x1bWUgbm90aWZpY2F0aW9uIHNlcnZpY2UgZmVlZCBhdCBhIENQUzogYWx0aG91Z2ggeW91IGNh biBhcmd1ZSBpdCBjaGlwcyBhd2F5IGF0IHRoZSBwcml2YWN5IHN0b3J5LCB0aGVuIGFnYWluLCBt ZXJlbHkga25vd2luZyB0aGF0IGEgY2FsbCBpcyBhcnJpdmluZyBhdCBhIGhpZ2gtdm9sdW1lIGNh bGwgY2VudGVyIG1pZ2h0IG5vdCByZXZlYWwgYWxsIHRoYXQgbXVjaC4gSWYgeW91ciB2b2x1bWVz IGFyZSBsb3cgZW5vdWdoIHRoYXQgaXQgbWlnaHQgcmV2ZWFsIHNvbWV0aGluZywgcGVyaGFwcyB5 b3Ugc2hvdWxkbid0IGJlIHVzaW5nIGEgaGlnaC12b2x1bWUgbm90aWZpY2F0aW9uIGludGVyZmFj ZS48L0pvbj4NCiAgICANCiAgICBTZWN0aW9uIDUuMzoNCiAgICBTaG91bGQgbm90ZSB0aGF0IHRo ZSByZWNlaXZlciB3aWxsIG5lZWQgdG8gcXVlcnkgZXZlcnkgY2FsbCB0aGF0IGRvZXMgbm90IGhh dmUgYSBQQVNTcG9yVCBhdHRhY2hlZC4NCiAgICANCiAgICBTZWN0aW9uIDUuMjoNCiAgICBTaG91 bGQgbm90ZSB0aGF0IHRoZSBzZW5kZXIgd2lsbCBoYXZlIHRvIGRlcG9zaXQgYSBQQVNTcG9yVCBm b3IgKmV2ZXJ5KiBjYWxsIHBsYWNlZC4gTGlrZXdpc2UsIHRoZSByZWNlaXZlciB3aWxsIGhhdmUg dG8gYXR0ZW1wdCB0byByZXRyaWV2ZSBhIFBBU1Nwb3JUIGZvciAqZXZlcnkqIGNhbGwgcmVjZWl2 ZWQgd2l0aG91dCBhIFBBU1Nwb3JUIGF0dGFjaGVkLg0KICAgIA0KICAgIFNlY3Rpb24gNS4xOg0K ICAgIFNob3VsZCBub3RlIHRoYXQgdGhlIGdhdGV3YXkgd2lsbCBoYXZlIHRvIGRlcG9zaXQgYSBQ QVNTcG9yVCBmb3IgKmV2ZXJ5KiBjYWxsIHRocm91Z2ggdGhlIGdhdGV3YXksIGlycmVzcGVjdGl2 ZSBvZiByZWNlaXZlcuKAmXMgY2FwYWJpbGl0aWVzLg0KDQo8Sm9uPlRvIGFsbCB0aHJlZSBvZiB0 aGUgYWJvdmUsIHRoZXJlIGNvdWxkIGJlIGRlcGxveW1lbnRzIHdoZXJlIHRoYXQgaXMgb3IgaXMg bm90IHRydWUuIEkgZG9uJ3QgdGhpbmsgaXQgaXMgYSByZXF1aXJlbWVudCBmb3IgT09CIG92ZXJh bGwuPC9Kb24+DQogICAgDQogICAgU2VjdGlvbiAxNDoNCiAgICBTaG91bGQgbm90ZSB0aGlzIG1l Y2hhbmlzbSBhZGRzIGEgdG9uIG9mIHZlY3RvcnMgZm9yIHRoaW5ncyB0byBnbyB3cm9uZy4gQXMg d2VsbCwgd2hpbGUgdGhlIEZyb20gaWRlbnRpZmljYXRpb24gaXMgbm9taW5hbGx5IGVuY3J5cHRl ZCwgc2ltcGxlIHRyYWZmaWMgYW5hbHlzaXMgd2lsbCBnaXZlIHVwIG1vc3Qgb2YgdGhlIHByaXZh Y3kgcHJvdmlzaW9ucy4NCiAgICANCjxKb24+SW4tYmFuZCBTVElSIGFkZHMgdGhlIHZlY3RvciB0 aGF0IHlvdXIgdHJhZmZpYyBtaWdodCBub3QgZ28gU0lQIGVuZC10by1lbmQgYW5kIHRodXMgU1RJ UiBkb2Vzbid0IHdvcmssIHdoaWNoIGlzLCB3ZWxsLCBhIHByZXR0eSBiaWcgdmVjdG9yLiBPZiBj b3Vyc2UgaXQncyBhIHRyYWRlLW9mZi4gVGhlcmUgYXJlIGEgbnVtYmVyIG9mIGNvdW50ZXJtZWFz dXJlcyBkZXNjcmliZWQgaW4gdGhlIGRvY3VtZW50IHRvIHRod2FydCBzaW1wbGUgdHJhZmZpYyBh bmFseXNpcy48L0pvbj4NCiAgICANCiAgICBOaXQ6IHRvcCBvZiBwYWdlIDEzOg0KICAgIE9MRA0K ICAgIFBTVE4gbWVjaGFuaXNtcyBmb3IgcmVseWluZyBhIGNhbGxpbmcgcGFydHkNCiAgICBORVcN CiAgICBQU1ROIG1lY2hhbmlzbXMgZm9yIHJlbGF5aW5nIGEgY2FsbGluZyBwYXJ0eQ0KDQo8Sm9u PldpbGwgZml4LiBUaGFua3MhPC9Kb24+DQogICANCg0K From nobody Wed Apr 17 16:28:39 2019 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B8D3A1200CD for ; Wed, 17 Apr 2019 16:28:37 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.637 X-Spam-Level: X-Spam-Status: No, score=-0.637 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, KHOP_DYNAMIC=1.363, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=team.neustar Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id d8pK3acODH_c for ; Wed, 17 Apr 2019 16:28:36 -0700 (PDT) Received: from mx0b-0018ba01.pphosted.com (mx0a-0018ba01.pphosted.com [67.231.149.94]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BE002120058 for ; Wed, 17 Apr 2019 16:28:36 -0700 (PDT) Received: from pps.filterd (m0078666.ppops.net [127.0.0.1]) by mx0a-0018ba01.pphosted.com (8.16.0.27/8.16.0.27) with SMTP id x3HNMrlT017584; Wed, 17 Apr 2019 19:28:36 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=team.neustar; h=from : to : subject : date : message-id : references : in-reply-to : content-type : content-id : content-transfer-encoding : mime-version; s=selector1; bh=fLjUGXfD83uaS0jT41pueOTTVbC350ZYQWDRv8lOic4=; b=O1ENwKil5i6EtKIRouLo+XEOt5r7LzYm2hpmRTbJkjJ8C0qV/w2aA96J6U//bDfDOK9R b4LvXVGGfgSlOE/h1MiQznTmxHMBipnLl5bYkHr9XE80vEIUWvnfhV0JxIDUI1f3ZcIH GzMVjxzWwrMaYvEHt/FdYv3p0Fz6jwV9N0Q7WYsop8+9sBXCUurw1KRrGbLiGy62hoSw UE4QS5YF/DHzer6defOBSDXjB9zr3D/AVpQr9xxQ8gQbWO0r8L3kdZJLJPzZfCqkIH79 VdK6uzSVaKmF4VH6ZVvXqm4GDDQi1ClVmEqx5kqdUL9QxstLiTbNWgzUGxzWL3nlp8xb +Q== Received: from stntexhc10.cis.neustar.com ([156.154.17.216]) by mx0a-0018ba01.pphosted.com with ESMTP id 2rubvuhjnh-1 (version=TLSv1 cipher=ECDHE-RSA-AES256-SHA bits=256 verify=NOT); Wed, 17 Apr 2019 19:28:36 -0400 Received: from STNTEXMB101.cis.neustar.com ([fe80::a831:d3b4:fb4e:e45b]) by stntexhc10.cis.neustar.com ([10.31.58.69]) with mapi id 14.03.0439.000; Wed, 17 Apr 2019 19:28:35 -0400 From: "Peterson, Jon" To: Robert Sparks , IETF STIR Mail List Thread-Topic: [stir] Second WGLC: draft-ietf-stir-passport-divert-05 Thread-Index: AQHU5/ydz8Cl9r14g0GouZqG+MYHkqY+XIeAgADdUoCAAa5vAA== Date: Wed, 17 Apr 2019 23:28:34 +0000 Message-ID: <3A83F0F2-D11C-4067-8E85-97E286AE17CC@team.neustar> References: <9E2381A8-F39F-425D-BB64-EB39AE1018F6@vigilsec.com> <31B1DE4C-97A8-496B-809C-5B1496B771CA@sn3rd.com> <900e0c79-14bb-870e-210f-36176225daa1@nostrum.com> In-Reply-To: <900e0c79-14bb-870e-210f-36176225daa1@nostrum.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.10.8.190312 x-originating-ip: [10.96.12.236] Content-Type: text/plain; charset="utf-8" Content-ID: <02E05840D10A104EBA9781AB4B8D3715@neustar.biz> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2019-04-17_11:, , signatures=0 X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1015 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1810050000 definitions=main-1904170146 Archived-At: Subject: Re: [stir] Second WGLC: draft-ietf-stir-passport-divert-05 X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 17 Apr 2019 23:28:38 -0000 DQpZZWFoLCBkb2luZyBleGFtcGxlcyBsaWtlIHRoaXMgYWx3YXlzIHNlZW1zIGxpa2UgYSBnb29k IGlkZWEgYW5kIHRoZW4gdGhleSBkb24ndCBhY3R1YWxseSB3b3JrLiBJJ2xsIHNlZSBpZiBJIGNh biBnZXQgc29tZXRoaW5nIGluIHRoZXJlIHRoYXQgaXMgYWN0dWFsbHkgcmVwcm9kdWNpYmxlLiBQ cm9iYWJseSBzaG93aW5nIGEgYml0IG1vcmUgb2YgdGhlIHdvcmsgaXMgbmVjZXNzYXJ5IHRvbyBq dXN0IHNvIGltcGxlbWVudGVycyBjYW4gZGVidWcgYXMgdGhleSB3b3JrIHRocm91Z2ggZXhhbXBs ZXMuDQoNCkpvbiBQZXRlcnNvbg0KTmV1c3RhciwgSW5jLg0KDQrvu79PbiA0LzE2LzE5LCA4OjU1 IEFNLCAic3RpciBvbiBiZWhhbGYgb2YgUm9iZXJ0IFNwYXJrcyIgPHN0aXItYm91bmNlc0BpZXRm Lm9yZyBvbiBiZWhhbGYgb2YgcmpzcGFya3NAbm9zdHJ1bS5jb20+IHdyb3RlOg0KDQogICAgSGkg Sm9uIC0NCiAgICANCiAgICBJIGhhdmVuJ3QgYmVlbiBhYmxlIHRvIHZhbGlkYXRlIHRoYXQgdGhl IHNpZ25hdHVyZXMgaW4gdGhlIGV4YW1wbGVzIA0KICAgICh3aXRoIHRoZSBnaXZlbiBrZXlzKSAt DQogICAgDQogICAgQ291bGQgeW91IGRvdWJsZS1jaGVjayB0aGF0IHRoZXkncmUgcmlnaHQ/IChB bmQgaWYgc28sIHJlbWluZCBtZSBvZiANCiAgICBzaW1wbGUgd2F5cyB0byBtYW51YWxseSB2YWxp ZGF0ZSB0aGUgc2lnbmF0dXJlKS4NCiAgICANCiAgICBSalMNCiAgICANCiAgICANCiAgICBfX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KICAgIHN0aXIgbWFp bGluZyBsaXN0DQogICAgc3RpckBpZXRmLm9yZw0KICAgIGh0dHBzOi8vd3d3LmlldGYub3JnL21h aWxtYW4vbGlzdGluZm8vc3Rpcg0KICAgIA0KDQo= From nobody Thu Apr 18 13:59:29 2019 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6A24912038D for ; Thu, 18 Apr 2019 13:59:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id k2YLXcFH5Dbz for ; Thu, 18 Apr 2019 13:59:25 -0700 (PDT) Received: from mail-lj1-x22c.google.com (mail-lj1-x22c.google.com [IPv6:2a00:1450:4864:20::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F12381200D7 for ; Thu, 18 Apr 2019 13:59:24 -0700 (PDT) Received: by mail-lj1-x22c.google.com with SMTP id j89so3069894ljb.1 for ; Thu, 18 Apr 2019 13:59:24 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=Le9+GD+HatgYSc2cB6ve7y8tMyBICndf4wbiR4LnC3c=; b=fGT6+aiWzYi2Y5Ra+IvX3AXE+xk1kHn7D2WrlQ3juCxYppoAS8rKfqFHGkWClP/cdw HaCQCd5VG+wV8FdZxvJBCfT4/+I38Ux8/DEsk6T7qlOWRsIh1qS/j2FINMtuVukbpTJx uQVaGdlI1aqBKNKi7Of6FgiATWhb2zj5X5H/fff8dAxOp+SxqApU2iR89f/Z6OVfsPkw 4J/XZNooTjozHRpmHL7shviMkroYduOllZfcT8Imsd0BLAzLiMphi2+kSJDln2sVBea4 HGge9qqIbpnDfLNeKJPGO7wWOD5HW4yPY20wbFSEMnC24Zvg8td82Z14JdGP6kiaUzaX Z6hA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=Le9+GD+HatgYSc2cB6ve7y8tMyBICndf4wbiR4LnC3c=; b=UdNKF51LXNQVlM0/qj+mcYCUZKPgGk05IkBB1om+DTsnf5ArAy1Nvz32qudeWAEM5V 4F/naTZ67EOjdM/odGGMDPlOWCo1pCI7ycKj1N0DcJS9it3ditZE6zgzauFfCUgmCPcJ fEFlGRxVY2JjmwlguX8ICjb0+KXyFmXwP/moMh1a+W/1WGdOai6j16M95isTIl1TFJVu iApOWU9Xbb0TAxKFbraPZKlW8NGOWzY6u1fjbxta4XuzIEXI07aBm/SDJN63+qM3g448 yxd/T31+eLtb1VYjMyJ+u5cXfvHmlqPpj13/6ZG6F1t8eYqbJyIwAj9WMDoa+7fxkDAU eAbA== X-Gm-Message-State: APjAAAWoGY1mcfkCqwUAgPDeAaRvh38+hZElFqPrGl7heMPlzJZ8/sok PGGZC82SR2BXjHN0oP52yWL74gRB0o3NIahAtZzaTQ== X-Google-Smtp-Source: APXvYqzOpJVVWr5+4Y+9VGFTwWdwahwFO0uoKx13PIVr9R6gA7MasF7QB44gFQVdbW4jM0ZAKVRMwNH02YvGi9Zlh/k= X-Received: by 2002:a2e:89da:: with SMTP id c26mr173482ljk.186.1555621163072; Thu, 18 Apr 2019 13:59:23 -0700 (PDT) MIME-Version: 1.0 References: <7E25361F-D726-440F-A77A-332BB97AC77A@standardstrack.com> In-Reply-To: From: Mary Barnes Date: Thu, 18 Apr 2019 15:59:11 -0500 Message-ID: To: "Peterson, Jon" Cc: Eric Burger , "stir@ietf.org" Content-Type: multipart/alternative; boundary="000000000000d483d40586d446c9" Archived-At: Subject: Re: [stir] WG LC Comments: draft-ietf-stir-oob-04 X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Apr 2019 20:59:29 -0000 --000000000000d483d40586d446c9 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable I'm in the process of completing my review and had a comment in section 14, so I'd thought I'd just respond here rather than bring up separately [MB]. Regards, Mary. On Wed, Apr 17, 2019 at 6:27 PM Peterson, Jon wrote: > > Thanks for the notes Eric. Responses inline: > > Section 11: > It looks like there was going to be a list of discovery requirements > and considerations for credential discovery, but there=E2=80=99s just a b= lank > space. There is an element of =E2=80=9Cand then a miracle occurs=E2=80= =9D which is a bit > disturbing. > > No, there wasn't supposed to be a list there, but I'll agree looking > at the section the "like:" can make it look like there was supposed to be= , > I'll clip that. More on the substanative point in a sec... > > Section 10 and Section 5.4: > Also =E2=80=9Ca miracle occurs=E2=80=9D moment in how to find a CPS. > > Section 6.1: > Where do the public keys come from? This also means lots of crypto > work for the caller. This could be a benefit, namely requiring a proof of > work to place a phone call. Although, it could be more efficient to charg= e > some fraction of bitcoin in lieu of proof of work ;-) > > To this and the above two points, I don't really think there is any > miracle required here. For the purposes of kicking the tires with OOB, > manually provisioning of CPS's will work just fine. Moreover, STIR assume= s > a certain degree of pre-association with trust anchors, and it isn't too > hard to imagine that certificate repositories, or pointers to same, could > be managed by anyone running a trust root. The certs themselves could > contain pointers to a CPS, as the draft already mentions. Magic not > necessary. > > Section 5.5: > This scheme totally fails for a call center or enterprise that just > uses a single number for all (or many) outbound calls. They will all have > the same source address. > > Fails what? That use case is describing inbound calls to a call > center, not outbound calls from it. In any event, the point here is that > there is a trade-off in running a high-volume notification service feed a= t > a CPS: although you can argue it chips away at the privacy story, then > again, merely knowing that a call is arriving at a high-volume call cente= r > might not reveal all that much. If your volumes are low enough that it > might reveal something, perhaps you shouldn't be using a high-volume > notification interface. > > Section 5.3: > Should note that the receiver will need to query every call that does > not have a PASSporT attached. > > Section 5.2: > Should note that the sender will have to deposit a PASSporT for > *every* call placed. Likewise, the receiver will have to attempt to > retrieve a PASSporT for *every* call received without a PASSporT attached= . > > Section 5.1: > Should note that the gateway will have to deposit a PASSporT for > *every* call through the gateway, irrespective of receiver=E2=80=99s capa= bilities. > > To all three of the above, there could be deployments where that is > or is not true. I don't think it is a requirement for OOB overall. > > Section 14: > Should note this mechanism adds a ton of vectors for things to go > wrong. As well, while the From identification is nominally encrypted, > simple traffic analysis will give up most of the privacy provisions. > > In-band STIR adds the vector that your traffic might not go SIP > end-to-end and thus STIR doesn't work, which is, well, a pretty big vecto= r. > Of course it's a trade-off. There are a number of countermeasures describ= ed > in the document to thwart simple traffic analysis. > [MB] I was thinking something is missing from this section and perhaps adding a statement in the same vain as your response could be helpful. And, I think highlighting the potential for a DoS attack here might be helpful. [/MB] > > Nit: top of page 13: > OLD > PSTN mechanisms for relying a calling party > NEW > PSTN mechanisms for relaying a calling party > > Will fix. Thanks! > > > _______________________________________________ > stir mailing list > stir@ietf.org > https://www.ietf.org/mailman/listinfo/stir > --000000000000d483d40586d446c9 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
I'm in the process of completing my r= eview and had a comment in section 14, so I'd thought I'd just resp= ond here rather than bring up separately [MB].

Regards,<= /div>
Mary.

On Wed, Apr 17, 2019 at 6:27 PM Peterson, Jon <jon.= peterson=3D40team.neustar@= dmarc.ietf.org> wrote:

Thanks for the notes Eric. Responses inline:

=C2=A0 =C2=A0 Section 11:
=C2=A0 =C2=A0 It looks like there was going to be a list of discovery requi= rements and considerations for credential discovery, but there=E2=80=99s ju= st a blank space.=C2=A0 There is an element of =E2=80=9Cand then a miracle = occurs=E2=80=9D which is a bit disturbing.

<Jon>No, there wasn't supposed to be a list there, but I'll a= gree looking at the section the "like:" can make it look like the= re was supposed to be, I'll clip that. More on the substanative point i= n a sec...</Jon>

=C2=A0 =C2=A0 Section 10 and Section 5.4:
=C2=A0 =C2=A0 Also =E2=80=9Ca miracle occurs=E2=80=9D moment in how to find= a CPS.

=C2=A0 =C2=A0 Section 6.1:
=C2=A0 =C2=A0 Where do the public keys come from? This also means lots of c= rypto work for the caller. This could be a benefit, namely requiring a proo= f of work to place a phone call. Although, it could be more efficient to ch= arge some fraction of bitcoin in lieu of proof of work ;-)

<Jon>To this and the above two points, I don't really think there= is any miracle required here. For the purposes of kicking the tires with O= OB, manually provisioning of CPS's will work just fine. Moreover, STIR = assumes a certain degree of pre-association with trust anchors, and it isn&= #39;t too hard to imagine that certificate repositories, or pointers to sam= e, could be managed by anyone running a trust root. The certs themselves co= uld contain pointers to a CPS, as the draft already mentions. Magic not nec= essary.</Jon>

=C2=A0 =C2=A0 Section 5.5:
=C2=A0 =C2=A0 This scheme totally fails for a call center or enterprise tha= t just uses a single number for all (or many) outbound calls. They will all= have the same source address.

<Jon>Fails what? That use case is describing inbound calls to a call = center, not outbound calls from it. In any event, the point here is that th= ere is a trade-off in running a high-volume notification service feed at a = CPS: although you can argue it chips away at the privacy story, then again,= merely knowing that a call is arriving at a high-volume call center might = not reveal all that much. If your volumes are low enough that it might reve= al something, perhaps you shouldn't be using a high-volume notification= interface.</Jon>

=C2=A0 =C2=A0 Section 5.3:
=C2=A0 =C2=A0 Should note that the receiver will need to query every call t= hat does not have a PASSporT attached.

=C2=A0 =C2=A0 Section 5.2:
=C2=A0 =C2=A0 Should note that the sender will have to deposit a PASSporT f= or *every* call placed. Likewise, the receiver will have to attempt to retr= ieve a PASSporT for *every* call received without a PASSporT attached.

=C2=A0 =C2=A0 Section 5.1:
=C2=A0 =C2=A0 Should note that the gateway will have to deposit a PASSporT = for *every* call through the gateway, irrespective of receiver=E2=80=99s ca= pabilities.

<Jon>To all three of the above, there could be deployments where that= is or is not true. I don't think it is a requirement for OOB overall.&= lt;/Jon>

=C2=A0 =C2=A0 Section 14:
=C2=A0 =C2=A0 Should note this mechanism adds a ton of vectors for things t= o go wrong. As well, while the From identification is nominally encrypted, = simple traffic analysis will give up most of the privacy provisions.

<Jon>In-band STIR adds the vector that your traffic might not go SIP = end-to-end and thus STIR doesn't work, which is, well, a pretty big vec= tor. Of course it's a trade-off. There are a number of countermeasures = described in the document to thwart simple traffic analysis.</Jon>

[MB] I was thinking something is missing = from this section and perhaps adding a statement in the same vain as your r= esponse could be helpful.=C2=A0 And, I think highlighting the potential for= a DoS attack here might be helpful.=C2=A0 =C2=A0[/MB]

=C2=A0 =C2=A0 Nit: top of page 13:
=C2=A0 =C2=A0 OLD
=C2=A0 =C2=A0 PSTN mechanisms for relying a calling party
=C2=A0 =C2=A0 NEW
=C2=A0 =C2=A0 PSTN mechanisms for relaying a calling party

<Jon>Will fix. Thanks!</Jon>


_______________________________________________
stir mailing list
stir@ietf.org
https://www.ietf.org/mailman/listinfo/stir
--000000000000d483d40586d446c9-- From nobody Thu Apr 18 14:02:14 2019 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BECA8120404 for ; Thu, 18 Apr 2019 14:02:05 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WVTE3S3-x-hd for ; Thu, 18 Apr 2019 14:02:03 -0700 (PDT) Received: from mail-lf1-x136.google.com (mail-lf1-x136.google.com [IPv6:2a00:1450:4864:20::136]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9A362120126 for ; Thu, 18 Apr 2019 14:02:02 -0700 (PDT) Received: by mail-lf1-x136.google.com with SMTP id k18so2603153lfj.13 for ; Thu, 18 Apr 2019 14:02:02 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to:cc; bh=z28n4GeX2R4rpsELUusULQsCFO48E8uoJMD3EI4JLN4=; b=WUruST/syoEYmuk3m7eQP9w4aYJBFViYAjZQWRXPLP463xeiee2sRDkcgFd3QthbWc meqq13Uc7D4Vp/mYGjH92RJJDjwOCZztAMuOLmFYweTB9nXWsxNKT3JJDbYZQ92EQjg6 fzqbsPSfRWpdvgqSkMk87FICuLA1+VOJMMdw56EplAsa1TtzrU8+Bv3ArbPkDnEayR4l S2+pcEQcVYMuccF4DYQt37DvNMz0ae2yK6dh2HnQxM2Xuk+4YPXPjjmi4hm3V2x5yyVt xkggFhJ9KjXOxnoj8FnMknsW8SNkoN21DL0BqN45VeHdfHqQTOJLI4tN0xh80ftib82b tkrQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to:cc; bh=z28n4GeX2R4rpsELUusULQsCFO48E8uoJMD3EI4JLN4=; b=qAo5eTvRPJEtQLyn9EkrfXQ0Hw2WmuvbW6/T1smtuRec5idztqoz5snE1rvWOX0gVt wF1YgVA/DD6BuvFIHhsOcqDSZgk3Weauj12Uj9Hf5UMN2wM6zaiqZ7Fq9q4YiYWq8v3K UN4Tuy7f83Js0wWTmJ+k/EGMhiPa0kwQKeM2ujdAfQHUnaYjY0z+KTHLKtPgJV6/ARQ9 5I0SCF8joUYiiTAk9u3TQYt+LXYkCD8JDK0puItc+iV7yRaYMnLWtdBo8PQPKO4TGLpB LmYau3Hkv2srGPNSmlkIjtXJmaKSZiOXHSZRw2bcJTy9J0iGULcurUVHhaRWRq5DzH4c hD6w== X-Gm-Message-State: APjAAAVtH5qDvGcG6pMqjeGhTRPjOTIqDf3+RaDhsJCa6IzVFpBkl+1S tE/z5KtNte7qgsri3Jyh8V/tDajW7Ly1gUeflvUovcli X-Google-Smtp-Source: APXvYqxOC9opOrT6Az9tsbbY/zF4Gok3oLXiK+vQXiROjCjUfGh0lRreMlVSgN515/3rkqkiiQ58lU1nurj0xu0CKLs= X-Received: by 2002:a19:e30b:: with SMTP id a11mr141244lfh.4.1555621320552; Thu, 18 Apr 2019 14:02:00 -0700 (PDT) MIME-Version: 1.0 From: Mary Barnes Date: Thu, 18 Apr 2019 16:01:49 -0500 Message-ID: To: "stir@ietf.org Mail List" Cc: Jon Peterson , Eric Rescorla Content-Type: multipart/alternative; boundary="0000000000003776550586d4503e" Archived-At: Subject: [stir] WG last call comments on stir-oob-04 X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Apr 2019 21:02:13 -0000 --0000000000003776550586d4503e Content-Type: text/plain; charset="UTF-8" I think the document is not quite ready to progress and needs some minor changes, as also reflected by Russ' and Eric's reviews. I've responded inline to their review point(s) where I had similar concerns, rather than introduce yet again. I have also tried to not duplicate comments, but don't guarantee I didn't since I started my review prior to their posts. Regards, Mary. Minor comments: ---------------------- - General: per Eric's comments, there is still a lot of work to do to get this completed or even to get a simple profile specified. It might be very helpful somewhere to summarize the gaps that must be addressed. And, it should clearly state that this document doesn't provide a complete solution but rather identifies building blocks and gaps required to realize a solution. Maybe something like this added at the end of the introduction: "This document provides the operating environments in which this out-of-band STIR mechanism is intended to operate. It provides use cases and provides a description of the components and a solution architecture. It describes the storage and retrieval of PASSporTs in the CPS within this context. Gaps that must be addressed in a solution are also identified." - Section 1, 2nd paragraph. Is it really "most" calls that still traverse the PSTN? I would think "a number of" might be a better way to say that. - Section 5.2. I don't quite understand the premise in that first paragraph. Are there 2 simultaneous calls and once it hits the gateway it gets dropped? - Section 7.5, last paragraph. It seems to me that the recommendation for the amount of time to store a PASSporT should have some relation to the time chosen for verifying "iat" values in the PASSporT. Maybe change "for more than sixty seconds." to "something like "no longer than a value that might be selected for the verification service policy for freshness of the "iat" value as described in [RFC 8224]." As I recall, there was a conscious choice made to not put a specific value on that time in 8224 and I can't see why we wouldn't want to do the same here. Editorial nits: ----------------- - Section 1, 3rd sentence: I found this wording awkward, so I suggest the following change: OLD: For example, [RFC8224] defines an Identity header of SIP requests capable of carrying a PASSporT [RFC8225] object in SIP as a means ... NEW: For example, [RFC8224] defines a SIP Identity header field capable of carrying PASSporT [RFC8225] objects in SIP requests as a means ... - Section 4, 3rd paragraph. I think a list with numbers is more readable than this plain list. and strictly speaking an "or" at the end of item 1 is more accurate since I think you're describing two options. - Section 5.3, 1st paragraph: "it will immediate drop" -> "it will immediately drop" - Section 5.4, last paragraph: " perhaps the destination endpoints queries" -> "perhaps the destination endpoint queries" - Section 6.1, 3rd paragraph: "the most obviously way" -> "the most obvious way" - Section 6.2, 3rd paragraph: "will need decrypt" -> "will need to decrypt" - Section 7.3 Again, I think a numbered list is a better way to annotate those two points. - Section 7.5. Ditto Russ' comment on reference to "blind signature" - The reference to the VIPR overview spec isn't to the most recent version. It should be draft-jennings-vipr-overview (and as I've said a number of times, I think it would be good to actually publish that one) --0000000000003776550586d4503e Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
I think the document is not quite ready to progress and ne= eds some minor changes, as also reflected by Russ' and Eric's revie= ws.=C2=A0 =C2=A0I've responded inline to their review point(s) where I = had similar concerns, rather than introduce yet again.=C2=A0 I=C2=A0have al= so tried to not duplicate comments, but don't guarantee I didn't si= nce I started my review prior to their posts.=C2=A0

Rega= rds,
Mary.

Minor comments:
----------------------
- General: per Eric's comments, ther= e is still a lot of work to do to get this completed or even to get a simpl= e profile specified. It might be very helpful somewhere to summarize the ga= ps that must be addressed.=C2=A0 And, it should clearly state that this doc= ument doesn't provide a complete solution but rather identifies buildin= g blocks and gaps required to realize a solution.=C2=A0 Maybe something lik= e this added at the end of the introduction:

"= ;This document provides the operating environments in which this out-of-ban= d STIR mechanism is intended to operate.=C2=A0 It provides use cases and pr= ovides a description of the components and a solution architecture.=C2=A0 I= t describes the=C2=A0storage and retrieval of PASSporTs in the CPS within t= his context.=C2=A0 Gaps that must be addressed in a solution are also ident= ified."

- Section 1, 2nd paragraph.=C2=A0 Is = it really "most" calls that still traverse the PSTN?=C2=A0 I woul= d think "a number of" might be a better way to say that.=C2=A0=C2= =A0

- Section 5.2.=C2=A0 I don't quite und= erstand the premise in that first paragraph.=C2=A0 Are there 2 simultaneous= calls and once it hits the gateway it gets dropped?=C2=A0=C2=A0
=
- Section 7.5, last paragraph.=C2=A0 It seems to me that the= recommendation for the amount of time to store a PASSporT should have some= relation to the time chosen for verifying "iat" values in the PA= SSporT.=C2=A0 Maybe change "for more than sixty seconds."=C2=A0 = =C2=A0to "something like "no longer than a value that might be se= lected for the verification service policy for freshness of the "iat&q= uot; value as described in [RFC 8224]."=C2=A0 =C2=A0As I recall, there= was a conscious choice made to not put a specific value on that time in 82= 24 and I can't see why we wouldn't want to do the same here.
<= div>=C2=A0

Editorial nits:
--------= ---------
- Section 1, 3rd sentence:=C2=A0 I found this wording a= wkward, so I suggest the following change:
OLD:=C2=A0
= =C2=A0 For example, [RFC8224] defines an Identity header of SIP requests ca= pable of carrying a
=C2=A0 PASSporT [RFC8225] object in SIP as a = means ...
NEW:
=C2=A0 =C2=A0For example, [RFC8224]= defines a SIP Identity header field capable of carrying=C2=A0
= =C2=A0 PASSporT [RFC8225] objects in SIP requests as a means ...

- Section 4, 3rd paragraph.=C2=A0 I think a list with = numbers is more readable than this plain list.=C2=A0 and strictly speaking = an "or" at the end of item 1 is more accurate since I think you&#= 39;re describing two options.=C2=A0

- Sectio= n 5.3, 1st paragraph:=C2=A0
"it will immediate drop" -&= gt; "it will immediately drop"=C2=A0=C2=A0

- Section 5.4, last paragraph:
" perhaps the destination = endpoints queries" -> "perhaps the destination endpoint querie= s"

- Section 6.1, 3rd paragraph:=C2=A0 "= the most obviously way" -> "the most obvious way"=C2=A0

- Section 6.2, 3rd paragraph:=C2=A0 "will need= decrypt" -> "will=C2=A0 need to decrypt"

<= /div>
- Section 7.3 Again, I think a numbered list is a better way to a= nnotate those two points.=C2=A0

- Section 7.5. Dit= to Russ' comment on reference to "blind signature"=C2=A0

- The reference to the VIPR overview spec isn't to= the most recent version.=C2=A0 It should be draft-jennings-vipr-overview (= and as I've said a number of times, I think it would be good to actuall= y publish that one)=C2=A0=C2=A0


--0000000000003776550586d4503e-- From nobody Thu Apr 18 14:03:09 2019 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AB50612047C for ; Thu, 18 Apr 2019 14:03:01 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YsMSapIGJfJ2 for ; Thu, 18 Apr 2019 14:02:58 -0700 (PDT) Received: from mail-lf1-x12a.google.com (mail-lf1-x12a.google.com [IPv6:2a00:1450:4864:20::12a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C7F621203FA for ; Thu, 18 Apr 2019 14:02:57 -0700 (PDT) Received: by mail-lf1-x12a.google.com with SMTP id u17so2639101lfi.3 for ; Thu, 18 Apr 2019 14:02:57 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=h80mHwv35/h9iW6tRWt/Ow0N4QKMjlg6/I0FzYlVsuA=; b=nQG3LnGP2058pgkNWTTv8K/G/w1ftBVbeNl0BSTopcD1Rz7hnIGC8+KOXTCa4zB4Zo pctEdYsNruKG0cdHC0p/Wd5Mj8pqafKDFf0Hr9KwsepsngcyiKE4mRQSOnmligewoqD/ h84gzUJ0hHet7EEA59Q1hyocEDJit+6BIhCs2TAsNiWhm5CezA8vNk+8gXKOuUUzzxQ9 Z6sNtz7qOq8JBkmokRtRKWRX7EHu3mnDM0KrqSVFbr/57g5Ahq2QEYkyWhPyCEXvn6O6 3Rj+18+VtLb2uZZaa+HCrwTpkScs0iZe36wyQXCqoSfCL6/rc8hkHDOLsSAPknWmfAb5 LpCA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=h80mHwv35/h9iW6tRWt/Ow0N4QKMjlg6/I0FzYlVsuA=; b=qg21yKs14IthPUfm+rp5GzXjyYulRUlvvr2QAMNUUgS8gfX1tBJuewWidgCdG2wfp/ PuS0zXzjQ5P5VwYjqZiURQ+G/83NBtcjZCuRytUn/XrJEstACNh4G+aJEBxde3OlXgzU DkQzxkshnBqqfAVVz5Vk1+NDYkPfH9Lh9saZGfJ5kUFR353/51YEd4h+6eZJGMOUh9Ou CdMHDes0fbHbutpDNC00MuLj7bmt23jwzCm1eXFAyBnE4DfIbHamMYS4kqRTlz7t4A3C HSQLuvglakxWqBXU7HJWwEE2GDa4Zh3R0RgfXpNNNHbRd0OllrAotyNVpS5xGBtNgTw5 RmFg== X-Gm-Message-State: APjAAAUdJHPoUrbmiBmsFF5qgjZu0WU8buKxqoQrkwXhw7vo7zOQJza2 s6D3ba/H6cRMNNMEnUfBtbiwf3/lMP7mJnHk0CM= X-Google-Smtp-Source: APXvYqywUtbbeTqWSgztSfBKIYzRTzdOe8D5Gy10rIQW+10XbsrG6laEXfz8ED237ONbkxbUhzUtktMTkry6PokDJno= X-Received: by 2002:a19:5507:: with SMTP id n7mr135394lfe.140.1555621375996; Thu, 18 Apr 2019 14:02:55 -0700 (PDT) MIME-Version: 1.0 References: <9BB03273-2BFA-4907-9234-EC8CE33E0186@team.neustar> In-Reply-To: From: Mary Barnes Date: Thu, 18 Apr 2019 16:02:44 -0500 Message-ID: To: Russ Housley Cc: Jon Peterson , Eric Rescorla , IETF STIR Mail List Content-Type: multipart/alternative; boundary="0000000000008575ba0586d45320" Archived-At: Subject: Re: [stir] WG Last Call comments on stir-oob-04 X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Apr 2019 21:03:08 -0000 --0000000000008575ba0586d45320 Content-Type: text/plain; charset="UTF-8" Just one comment below [MB] Regards, Mary. On Wed, Apr 17, 2019 at 11:33 AM Russ Housley wrote: > Document: draft-ietf-stir-oob-04.txt > Reviewer: Russ Housley > Review Date: 2019-04-17 > > Major: > > Title page: As discussed on the mail list, please change the > intended status to "Informational". > > Section 11: To date, STIR certificates are only used to digital > signature. This document suggests that the public key in the > certificate can also be used to provide confidentiality. This > works if the public key is RSA, and the certificate has the > appropriate key usage bits set. However, this does not work if > the public key is DSA, ECDSA, Ed25519, or several others. I > am not asking for a major change to the document, but this > should be pointed out in the document. And, Section 11 should > point out that finding the credential for the callee cannot > leverage the "x5u" claim in the PASSporT when the public key > can only be used for digital signature. > > > Minor: > > Section 2: Please update the first paragraph to reference RFC 8174 > in addition to RFC 2119, as follows: > > The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", > "SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", and > "OPTIONAL" in this document are to be interpreted as described in > BCP 14 [RFC2119] [RFC8174] when, and only when, they appear in all > capitals, as shown here. > > Of course, also add a reference to RFC 8174. > > The figure in Section 7.2 can be easily adjusted to fit the normal > margins. Also, the example telephone numbers should use the 555 > conventions. I suggest: > > Alice Call Placement Service Bob > -------------------------------------------------------------------- > > Store PASSporT for 2.222.555.2222 --> > > Call from 1.111.555.1111 ------------------------------------------> > > > <-------------- Request PASSporT(s) > for 2.222.555.2222 > > Obtain Encrypted PASSporT --------> > (2.222.555.2222, 1.111.555.1111) > > [Ring phone with callerid > = 1.111.555.1111] > > Also, adjust the text to reference these example telephone numbers. > > Likewise, please adjust the example telephone numbers in Section 9. > > It should be equally easy to remove three spaces from the figure in > Section 7.4 to fit the normal margins. > > Section 7.3: Please add a reference for TLS. I assume you will use > [RFC8446]. > > Section 7.5: s/Sign(K_cps, K_temp))/Sign(K_cps, K_temp)/ > > Section 11: Please add a reference for OCSP. I assume you will use > [RFC2560]. > > Section 14: I think it would be helpful to include pointers to > Sections 7.3 and 7.4 in the Security Considerations. > [MB] I agree. [/MB] > > > Nits: > > Suggested spelling: s/CPSs/CPSes/ (Note: This spelling is used for > Certificate Practice Statements.) > > Section 3: Please spell out the first use of "POTS". As an alternative, > the sentence could be reworded to use PSTN, which has already been used > many times by this point in the document. > > Sections 5.1 and 5.4: s/in the SIP world/in a SIP environment/ > > Section 5.4: s/back to the IP world/back to a SIP environment/ > > Section 5.4: s/returns to the IP world/returns to a SIP environment/ > > Section 5.5: s/a valid calls/a valid call/ > > Section 6.2: s/one that is valid/one or more that are valid/ > > Section 7.5: Please add an informative reference on blinded signatures. > > _______________________________________________ > stir mailing list > stir@ietf.org > https://www.ietf.org/mailman/listinfo/stir > --0000000000008575ba0586d45320 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Just one comment below [MB]

Regards,
Mary.

On Wed, Apr 17, 2019 at 11:33 AM Russ H= ousley <housley@vigilsec.com= > wrote:
Docu= ment: draft-ietf-stir-oob-04.txt
Reviewer: Russ Housley
Review Date: 2019-04-17

Major:

Title page: As discussed on the mail list, please change the
intended status to "Informational".

Section 11: To date, STIR certificates are only used to digital
signature.=C2=A0 This document suggests that the public key in the
certificate can also be used to provide confidentiality.=C2=A0 This
works if the public key is RSA, and the certificate has the
appropriate key usage bits set.=C2=A0 However, this does not work if
the public key is DSA, ECDSA, Ed25519, or several others.=C2=A0 I
am not asking for a major change to the document, but this
should be pointed out in the document.=C2=A0 And, Section 11 should
point out that finding the credential for the callee cannot
leverage the "x5u" claim in the PASSporT when the public key
can only be used for digital signature.


Minor:

Section 2: Please update the first paragraph to reference RFC 8174
in addition to RFC 2119, as follows:

=C2=A0 =C2=A0The key words "MUST", "MUST NOT", "RE= QUIRED", "SHALL", "SHALL NOT",
=C2=A0 =C2=A0"SHOULD", "SHOULD NOT", "RECOMMENDED&= quot;, "NOT RECOMMENDED", "MAY", and
=C2=A0 =C2=A0"OPTIONAL" in this document are to be interpreted as= described in
=C2=A0 =C2=A0BCP 14 [RFC2119] [RFC8174] when, and only when, they appear in= all
=C2=A0 =C2=A0capitals, as shown here.

Of course, also add a reference to RFC 8174.

The figure in Section 7.2 can be easily adjusted to fit the normal
margins.=C2=A0 Also, the example telephone numbers should use the 555
conventions.=C2=A0 I suggest:

=C2=A0 =C2=A0Alice=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 Call Placement Service=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 Bob
=C2=A0 =C2=A0--------------------------------------------------------------= ------

=C2=A0 =C2=A0Store PASSporT for 2.222.555.2222 -->

=C2=A0 =C2=A0Call from 1.111.555.1111 -------------------------------------= ----->


=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 <-------------- Req= uest PASSporT(s)
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0for 2.222.555.2222

=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 Obtain Encrypted PASSp= orT -------->
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 (2.222.555.2222, 1.111= .555.1111)

=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 [Ring phone with callerid
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =3D 1.111.555.1111]

Also, adjust the text to reference these example telephone numbers.

Likewise, please adjust the example telephone numbers in Section 9.

It should be equally easy to remove three spaces from the figure in
Section 7.4 to fit the normal margins.

Section 7.3: Please add a reference for TLS.=C2=A0 I assume you will use [RFC8446].

Section 7.5: s/Sign(K_cps, K_temp))/Sign(K_cps, K_temp)/

Section 11: Please add a reference for OCSP.=C2=A0 I assume you will use [RFC2560].

Section 14: I think it would be helpful to include pointers to
Sections 7.3 and 7.4 in the Security Considerations.
[= MB] I agree. [/MB]=C2=A0


Nits:

Suggested spelling: s/CPSs/CPSes/=C2=A0 (Note: This spelling is used for Certificate Practice Statements.)

Section 3: Please spell out the first use of "POTS".=C2=A0 As an = alternative,
the sentence could be reworded to use PSTN, which has already been used
many times by this point in the document.

Sections 5.1 and 5.4: s/in the SIP world/in a SIP environment/

Section 5.4: s/back to the IP world/back to a SIP environment/

Section 5.4: s/returns to the IP world/returns to a SIP environment/

Section 5.5: s/a valid calls/a valid call/

Section 6.2: s/one that is valid/one or more that are valid/

Section 7.5: Please add an informative reference on blinded signatures.

_______________________________________________
stir mailing list
stir@ietf.org
https://www.ietf.org/mailman/listinfo/stir
--0000000000008575ba0586d45320-- From nobody Fri Apr 19 12:37:31 2019 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6902812036E for ; Fri, 19 Apr 2019 12:37:29 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.69 X-Spam-Level: X-Spam-Status: No, score=-1.69 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_INVALID=0.1, DKIM_SIGNED=0.1, T_SPF_PERMERROR=0.01] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=neutral reason="invalid (public key: not available)" header.d=standardstrack.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GRPWgSukZxNp for ; Fri, 19 Apr 2019 12:37:28 -0700 (PDT) Received: from biz221.inmotionhosting.com (biz221.inmotionhosting.com [198.46.93.79]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 271CE120368 for ; Fri, 19 Apr 2019 12:37:28 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=standardstrack.com; s=default; h=To:Date:Message-Id:Subject:Mime-Version: Content-Type:From:Sender:Reply-To:Cc:Content-Transfer-Encoding:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=2DA6y1TB2zsET1pFuavXF1UAbBE/o1YJLChYyodXHnA=; b=hNqdsz1ICEiYIYTDDllhXY0csI 9eCgtHwjUd0QxdKI+ErBM3p5HmQrYXRMDOWpXGNgVvzuuAlQQJDrRs1tpkIYmXWDDbmbzgU9vD/Vz p/+JWQoFOJJL/j8Pfb4iOmbZyl4WqUCzestp79CKJmtQALqBa3OCRGSRZFswP6B4mX50=; Received: from [104.129.194.128] (port=3138 helo=[172.20.27.185]) by biz221.inmotionhosting.com with esmtpsa (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256) (Exim 4.91) (envelope-from ) id 1hHZK6-001hd8-MK for stir@ietf.org; Fri, 19 Apr 2019 12:37:27 -0700 From: Eric Burger Content-Type: multipart/signed; boundary="Apple-Mail=_526680DA-6C2D-43D0-9B46-37C3673CEBF5"; protocol="application/pgp-signature"; micalg=pgp-sha256 Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.8\)) Message-Id: <69ACDD9A-436B-4ED9-AA31-26431256334A@standardstrack.com> Date: Fri, 19 Apr 2019 15:37:18 -0400 To: stir@ietf.org X-Mailer: Apple Mail (2.3445.104.8) X-OutGoing-Spam-Status: No, score=-1.0 X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - biz221.inmotionhosting.com X-AntiAbuse: Original Domain - ietf.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - standardstrack.com X-Get-Message-Sender-Via: biz221.inmotionhosting.com: authenticated_id: eburger+standardstrack.com/only user confirmed/virtual account not confirmed X-Authenticated-Sender: biz221.inmotionhosting.com: eburger@standardstrack.com X-Source: X-Source-Args: X-Source-Dir: Archived-At: Subject: [stir] Comments and Ready for Adoption: draft-peterson-stir-cert-delegation X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 19 Apr 2019 19:37:30 -0000 --Apple-Mail=_526680DA-6C2D-43D0-9B46-37C3673CEBF5 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 High level: it is ready for adoption as a work group item. Since it will need at least a name change, here are my comments at this = point in its lifecycle. Section 3.1 says that a certificate path /should/ be validated. Under = what circumstances would it be OK to not validate the chain? Section 4: an example chain, or at least a picture, would help Section 5: Does this mean that all certificates will have =E2=80=9Cca=E2=80= =9D set? If so, would we not have to validate the entire chain? I.e., = MUST in Section 3.1? If not, what stops a bad actor from generating a = signing certificate for TNs it does not own? Section 7: I=E2=80=99d just refer to STIR=E2=80=99s text with respect there is no = anonymity except for explicit anonymity (RFC 3325). However, if we have = a delegated certificate chain, is there an issue with some information = leakage? I would think not, because would one only use the delegation = mechanism when one is explicitly NOT trying to be anonymous? I.e., use = an asserted identity that may not be obvious to the connected service = provider (in the SHAKEN sense)? --Apple-Mail=_526680DA-6C2D-43D0-9B46-37C3673CEBF5 Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP -----BEGIN PGP SIGNATURE----- Comment: GPGTools - http://gpgtools.org iQIzBAEBCAAdFiEEfEc/N7T7IfiAuDEHDDCGh758rskFAly6I24ACgkQDDCGh758 rsmt4A//S6CUHMcafYhVR2kkhw6ozoKZxB0EnF/FXztm+swjmo8NOkIl5MNfZTwS ng44VgKvTUScZnG3PUmA4kAnJjDbF7Z5jDgjOpWoHEz0DzzY3cQmM966/vSbjL1y 6aQ5u8JCpzEJcIiJT0bG2CbLbjZHyuUHvHqGMzO9QER0kRt5Q1/P0yKzAsZoLhgF yHy6jz2pzrBjMUoK198lPOF0N6UcBbWeH9LbZVk5EynsAnV6z4+yy+HGFRxf9lbk Yme/YZtVOMcP7ba5ajmVMh89TWUuSZjvTAirhaXzg2peJOAIrcT1pG2dz2do0uBk +ro8t6ZHr3Kaw2LtLNxfM3cSSKbkqFl7LE9uSrqhUWHi3geJL/hspsj/j23YcWDK 6EAIXlUTPKcvCGq3ezrPXYNg9VXBBPJkwc9LXgfLLT6N2otC+utKHxNumHV0OYEn 4LzieiZ2muJN59iYc2sWWXtk/I80UFjCPfWoJdcR/eD2psjqoQXmOn7noOR8nKwE kAMFAD+LpAyXNYKzA5qByUD7i/36my4t94LxWKRey10LLdrpxe2qDvoE7PzT1z8T gwj//5y1s/7FDtdHcWzBE9qLzDuX6/YBLLtAyFiiB+fJ0C4HJC+Sl5wfQ4HefcIG 8Bz09kwu2HeTU7fgFTmScRqbNCHEddaEHEt2O9/G8SB+XpDyZDE= =Sl7S -----END PGP SIGNATURE----- --Apple-Mail=_526680DA-6C2D-43D0-9B46-37C3673CEBF5-- From nobody Fri Apr 19 13:26:45 2019 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 86C28120175 for ; Fri, 19 Apr 2019 13:26:44 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=ipv-sx.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Tjt4jlIbsE_I for ; Fri, 19 Apr 2019 13:26:42 -0700 (PDT) Received: from mail-oi1-x231.google.com (mail-oi1-x231.google.com [IPv6:2607:f8b0:4864:20::231]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AA0B312004A for ; Fri, 19 Apr 2019 13:26:42 -0700 (PDT) Received: by mail-oi1-x231.google.com with SMTP id a6so4734153oie.5 for ; Fri, 19 Apr 2019 13:26:42 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipv-sx.20150623.gappssmtp.com; s=20150623; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=oVBdYQrnvpvzB+ZZfCRXzU/jz6brdOkN3dcE4zENa34=; b=J05+HnHwn8U9yBAdAa2nVewe3RruDcPLMiNufMSSrPGQ58A/G44S+KkLMS7Ax3J/Ph /THNWOnIxGwwIhGx6uYsJjw2Gy6L9w1Sv2PhoOwcPVy2VHQTHyu7EMIUtDyFQlZh13KJ p+e2aRAJsx7oTM4Pel8syPpLPlQGNb2DIfysVkhKRMSwJFVbMTNepSJoMH6Vx+vAJBle aKrUhNEGjVJ+yhUSD84+IS3yp3Y6AcXKk90MRIRUUhy4vMlxRN6/PO8QghZ20jku93zQ X+V9ny94chsFF6si1bELsqHV5JA4sOd20gUxVCAGKxvV5tR8sejMMMKU3m9VLRm37TO9 1mAg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=oVBdYQrnvpvzB+ZZfCRXzU/jz6brdOkN3dcE4zENa34=; b=Sl42flO+c5gGrIyUfBst4fshuQD32HP989kbugDqoCw49TMWeIehPifQkdapehubz6 /5WtIfu0pHvaudXv1u4sXK4k67AZYJoswtjfpLFtkcpzZElxDTvsBj2uzA+9j6uck4C+ 5GTauEpVa4zW7nxqqiLCMOkCx5jRyARGXDc0OxUFEzYNqQqBhr8s8mGm1IIOcYh2n6Bi nCfTSjzFi2S0HVxI9iJNRMcN2r9R7Xegbdnr++LnI5SJ5aox+WYLldo/kZft+DDygWkS xybCGKhLiN/l/T9Q+FueV2pweHqNMrcYBU+4vSpTiq9CCu60Din3e6aDz+IGEuNzKoJB zLJA== X-Gm-Message-State: APjAAAXm6Au9H7JYkF/ETarEdIKiv1cn1z6o+v77HWzHltyK8V8jUAwd nCOXErCrXlke9VbPFVugWa8t8oPFmVBRMCDhVlQbgQ== X-Google-Smtp-Source: APXvYqzBh15AT3yh1NDViztZwVJyf80loJnWP8FWizSmYx/6b1SiFwn3frm2c8s2oNv6lzEHCjGYN6CdO38WIblzzfg= X-Received: by 2002:aca:b886:: with SMTP id i128mr2998673oif.169.1555705601661; Fri, 19 Apr 2019 13:26:41 -0700 (PDT) MIME-Version: 1.0 References: <69ACDD9A-436B-4ED9-AA31-26431256334A@standardstrack.com> In-Reply-To: <69ACDD9A-436B-4ED9-AA31-26431256334A@standardstrack.com> From: Richard Barnes Date: Fri, 19 Apr 2019 16:26:22 -0400 Message-ID: To: Eric Burger Cc: IETF STIR Mail List Content-Type: multipart/alternative; boundary="000000000000c3318d0586e7ef84" Archived-At: Subject: Re: [stir] Comments and Ready for Adoption: draft-peterson-stir-cert-delegation X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 19 Apr 2019 20:26:44 -0000 --000000000000c3318d0586e7ef84 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable One point inline below... On Fri, Apr 19, 2019 at 3:37 PM Eric Burger wrote: > High level: it is ready for adoption as a work group item. > > Since it will need at least a name change, here are my comments at this > point in its lifecycle. > > > Section 3.1 says that a certificate path /should/ be validated. Under wha= t > circumstances would it be OK to not validate the chain? > > Section 4: an example chain, or at least a picture, would help > > Section 5: Does this mean that all certificates will have =E2=80=9Cca=E2= =80=9D set? If so, > would we not have to validate the entire chain? I.e., MUST in Section 3.1= ? > If not, what stops a bad actor from generating a signing certificate for > TNs it does not own? > Yes, lots of certificates will have the CA bit set. That's just the PKI's way of saying, "The holder of this certificate can delegate further". Recall that there's a difference between a CA and a trust anchor. Anyone can be a CA and issue certificates, but the verifier should have a limited set of CAs it will trust. Then when you're presented a certificate, the verification you need to do is that there's a way to chain from that certificate to one of your trust anchors. There is a somewhat intersting question around trust anchor configuration here. You probably never want to have a TA like you do in the Web PKI that can vouch for any resources. So we will want to have RPs scope TAs so that they can only issue for some set of TNs. For example, you might have a national TN that is scoped to its country code. The same problem arises in the RPKI with regard to IP addresses and AS numbers, and there was a lot of wrangling since it's not clear what control / ownership structure you should align the PKI with there. I'm pretty sure there is some solution there, but unfortunately I've forgotten the details. --Richard > > Section 7: > I=E2=80=99d just refer to STIR=E2=80=99s text with respect there is no an= onymity except > for explicit anonymity (RFC 3325). However, if we have a delegated > certificate chain, is there an issue with some information leakage? I wou= ld > think not, because would one only use the delegation mechanism when one i= s > explicitly NOT trying to be anonymous? I.e., use an asserted identity tha= t > may not be obvious to the connected service provider (in the SHAKEN sense= )? > > _______________________________________________ > stir mailing list > stir@ietf.org > https://www.ietf.org/mailman/listinfo/stir > --000000000000c3318d0586e7ef84 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
One point inline below...

On Fri, Apr 19, 2019 at = 3:37 PM Eric Burger <eburg= er@standardstrack.com> wrote:
High level: it is ready for adoption as a work group i= tem.

Since it will need at least a name change, here are my comments at this poi= nt in its lifecycle.


Section 3.1 says that a certificate path /should/ be validated. Under what = circumstances would it be OK to not validate the chain?

Section 4: an example chain, or at least a picture, would help

Section 5: Does this mean that all certificates will have =E2=80=9Cca=E2=80= =9D set? If so, would we not have to validate the entire chain? I.e., MUST = in Section 3.1? If not, what stops a bad actor from generating a signing ce= rtificate for TNs it does not own?

Yes,= lots of certificates will have the CA bit set.=C2=A0 That's just the P= KI's way of saying, "The holder of this certificate can delegate f= urther".

Recall that there's a differ= ence between a CA and a trust anchor.=C2=A0 Anyone can be a CA and issue ce= rtificates, but the verifier should have a limited set of CAs it will trust= .=C2=A0 Then when you're presented a certificate, the verification you = need to do is that there's a way to chain from that certificate to one = of your trust anchors.

There is a somewhat interst= ing question around trust anchor configuration here.=C2=A0 You probably nev= er want to have a TA like you do in the Web PKI that can vouch for any reso= urces.=C2=A0 So we will want to have RPs scope TAs so that they can only is= sue for some set of TNs.=C2=A0 For example, you might have a national TN th= at is scoped to its country code.

The same problem= arises in the RPKI with regard to IP addresses and AS numbers, and there w= as a lot of wrangling since it's not clear what control / ownership str= ucture you should align the PKI with there.=C2=A0 I'm pretty sure there= is some solution there, but unfortunately I've forgotten the details.<= /div>

--Richard


<= div>=C2=A0

Section 7:
I=E2=80=99d just refer to STIR=E2=80=99s text with respect there is no anon= ymity except for explicit anonymity (RFC 3325). However, if we have a deleg= ated certificate chain, is there an issue with some information leakage? I = would think not, because would one only use the delegation mechanism when o= ne is explicitly NOT trying to be anonymous? I.e., use an asserted identity= that may not be obvious to the connected service provider (in the SHAKEN s= ense)?

_______________________________________________
stir mailing list
stir@ietf.org
https://www.ietf.org/mailman/listinfo/stir
--000000000000c3318d0586e7ef84-- From nobody Mon Apr 22 20:13:55 2019 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5DA52120090 for ; Mon, 22 Apr 2019 20:13:54 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=chriswendt-net.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZYu3HgOy_3Dc for ; Mon, 22 Apr 2019 20:13:52 -0700 (PDT) Received: from mail-qt1-x833.google.com (mail-qt1-x833.google.com [IPv6:2607:f8b0:4864:20::833]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4AC15120075 for ; Mon, 22 Apr 2019 20:13:52 -0700 (PDT) Received: by mail-qt1-x833.google.com with SMTP id i14so14492478qtr.10 for ; Mon, 22 Apr 2019 20:13:52 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=chriswendt-net.20150623.gappssmtp.com; s=20150623; h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=x+DhgmFBH95gGxNnqxHreEHiOw71h9etGWxAmP5ndaQ=; b=ml3lGwFHqcG3Z2BPf0uCjumgshtVreGnijsgN+lBBYbaoIDNvDS6EbNVugVLrZuyxb j1yhjfcV+Du3bPI/eeGFJ4TWErqBnW731GqaxXs+kaxWbgSWkK7IJ7hHqmjPmHsukK3l TGf/GS5xT1zX0NiwHx3vUR1kqP5byFyxNnPWO5nMJOHoOJF4JEeroZ0ho37GBiPms7xk PlQhVNIJR2TgdWGEaDiEb/CnBV9A5k68oUBmVO72h6hiN5a2yZMmiQ0soSjsLsOGAZcI wdhiUu0gVdt8cjmb6DeKPeNjL/fwiQ+GUix2WPwUFNjh7gL1ox3VSmLG6Tmcq7Hy5z7F 8CIw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=x+DhgmFBH95gGxNnqxHreEHiOw71h9etGWxAmP5ndaQ=; b=ormRCseHNmqhT3xU3fWjCRP2K7q8oGUMAB2vzfgfwa/W2pc3Zc0nZV9kW1AAqWhsv8 UhVSwvxYK54QmnOWya0M3wl7J4KdtzdGB56wFtbaLg1+qWZatMkbV/B7BXC6LBnkn+r6 43dP4wvRu4Z8ICfiRiKtYlp+OPgIOMjM2+U4G6Wf6IbLUe8hCcrn3LPlGkCkkXbCDWr2 0jJ0z58CrO9ph9mbqTcdyir6ILz1w6PK3EDLleh7NwXaprZhBnF268fecf5/3OULeI0k QiuOkYqXYnR8zb3GVFYBOYH1j9KcfLqKnATIaXbWfgWN4XkwMd9388yfAZJXJH8K+vaK VF5w== X-Gm-Message-State: APjAAAVgJXjnDd4QdpCGhVaOSbBIPX5a4zHFLQcMykoEEs2GJYwVgqzV QzVD/kWVfU8eqdOKGclfwf8qDw== X-Google-Smtp-Source: APXvYqyVqoopO0fL6d34GA9VNPsGd7pqfiKI3xEV6AUuPpExsGMbNKrTc6Ib3ybPLWlioLYcI4JXjw== X-Received: by 2002:ac8:16a5:: with SMTP id r34mr6336488qtj.159.1555989231308; Mon, 22 Apr 2019 20:13:51 -0700 (PDT) Received: from ?IPv6:2601:41:c400:2e37:edf9:c8be:943e:41bd? ([2601:41:c400:2e37:edf9:c8be:943e:41bd]) by smtp.gmail.com with ESMTPSA id 50sm9955323qtq.7.2019.04.22.20.13.50 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 22 Apr 2019 20:13:50 -0700 (PDT) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.8\)) From: Chris Wendt In-Reply-To: Date: Mon, 22 Apr 2019 23:13:49 -0400 Cc: IETF STIR Mail List Content-Transfer-Encoding: quoted-printable Message-Id: <4BBC69EB-8008-4B9E-97E8-6541743F5E07@chriswendt.net> References: <9BB03273-2BFA-4907-9234-EC8CE33E0186@team.neustar> To: Eric Rescorla , Jon Peterson X-Mailer: Apple Mail (2.3445.104.8) Archived-At: Subject: Re: [stir] WG Last Call comments on stir-oob-04 X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 23 Apr 2019 03:13:55 -0000 My review of oob document, mostly comments/suggestions/questions. No = major issues since this is a proposed framework vs. protocol = specifications. Abstract - you mentioned other use cases besides non-VoIP protocol, for = enterprise scenarios, Should you include brief reference to that style = of use-case in abstract? Introduction - same comment as abstract, it=E2=80=99s very focused on = PSTN endpoint bridging, where it might benefit from some other use cases Section 3 - similar comment, maybe an example of caller (or telephone = network) to GW to local specialized network to GW to callee (or = telephone network) Section 4 - is it necessary to describe the two data flow architectures?=20= Section 5.5 - this seems like a really specific example, not saying its = an invalid example, but just thinking that maybe there is simpler = examples to include as well, like a more general thing like enterprise = equipment doesn=E2=80=99t support identity headers, enterprise ingress = SBC sends passport to CPS, and endpoint has the ability to retrieve the = passport when call arrives. for example. Section 6 - first paragraph "However, as use cases 3 and 4 in Section 5 = show=E2=80=9D - use case 5 also shows this now For the rest of the document, I didn=E2=80=99t find any obvious logical = issues, obviously this is defining rough details of a potential = framework, so nits on interfaces or other details is probably not = necessary. I do agree with other comments that a more explicit note in abstract = and/or introduction that this is a proposed framework of architectural = elements that are focused on solving the security of issues that are = unique to oob stir would be appropriate. -Chris= From nobody Tue Apr 23 12:52:02 2019 Return-Path: X-Original-To: stir@ietf.org Delivered-To: stir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 7B64612049D; Tue, 23 Apr 2019 12:52:00 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: IETF Meeting Session Request Tool To: Cc: stir@ietf.org, housley@vigilsec.com, adam@nostrum.com, stir-chairs@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.95.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <155604912043.32405.15892214218838683928.idtracker@ietfa.amsl.com> Date: Tue, 23 Apr 2019 12:52:00 -0700 Archived-At: Subject: [stir] stir - New Meeting Session Request for IETF 105 X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.29 List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 23 Apr 2019 19:52:01 -0000 A new meeting session request has just been submitted by Russ Housley, a Chair of the stir working group. --------------------------------------------------------- Working Group Name: Secure Telephone Identity Revisited Area Name: Applications and Real-Time Area Session Requester: Russ Housley Number of Sessions: 1 Length of Session(s): 1 Hour Number of Attendees: 60 Conflicts to Avoid: First Priority: curdle sipbrandy ipwave modern ice secdispatch sipcore mmusic rtcweb avtcore ecrit tls lamps suit mls saag Second Priority: perc clue ace acme oauth dispatch teep People who must be present: Russ Housley Sean Turner Adam Roach Robert Sparks Ben Campbell Jon Peterson Chris Wendt Resources Requested: Special Requests: --------------------------------------------------------- From nobody Tue Apr 23 12:53:10 2019 Return-Path: X-Original-To: stir@ietf.org Delivered-To: stir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 710C51205D5; Tue, 23 Apr 2019 12:53:00 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: IETF Meeting Session Request Tool To: Cc: stir@ietf.org, housley@vigilsec.com, adam@nostrum.com, stir-chairs@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.95.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <155604918045.32545.13131405550516093204.idtracker@ietfa.amsl.com> Date: Tue, 23 Apr 2019 12:53:00 -0700 Archived-At: Subject: [stir] stir - Update to a Meeting Session Request for IETF 105 X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.29 List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 23 Apr 2019 19:53:08 -0000 An update to a meeting session request has just been submitted by Russ Housley, a Chair of the stir working group. --------------------------------------------------------- Working Group Name: Secure Telephone Identity Revisited Area Name: Applications and Real-Time Area Session Requester: Russ Housley Number of Sessions: 1 Length of Session(s): 1 Hour Number of Attendees: 60 Conflicts to Avoid: First Priority: curdle sipbrandy ipwave modern ice secdispatch sipcore mmusic rtcweb avtcore ecrit tls lamps suit mls saag Second Priority: perc clue ace acme oauth dispatch teep cfrg People who must be present: Russ Housley Sean Turner Adam Roach Robert Sparks Ben Campbell Jon Peterson Chris Wendt Resources Requested: Special Requests: Due to a family wedding, please do not schedule this session for Friday. --------------------------------------------------------- From nobody Thu Apr 25 15:03:24 2019 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C8AD41202E4 for ; Thu, 25 Apr 2019 15:03:22 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.637 X-Spam-Level: X-Spam-Status: No, score=-0.637 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, KHOP_DYNAMIC=1.363, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=team.neustar Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KtDthWniRDIT for ; Thu, 25 Apr 2019 15:03:20 -0700 (PDT) Received: from mx0b-0018ba01.pphosted.com (mx0a-0018ba01.pphosted.com [67.231.149.94]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 22153120337 for ; Thu, 25 Apr 2019 15:03:19 -0700 (PDT) Received: from pps.filterd (m0078664.ppops.net [127.0.0.1]) by mx0a-0018ba01.pphosted.com (8.16.0.27/8.16.0.27) with SMTP id x3PLr1jO007305; Thu, 25 Apr 2019 18:03:18 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=team.neustar; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : mime-version; s=selector1; bh=nL5zGfxoqHH085Hr3Q36O08UC7Ghk0ZFzA3v5MGguW8=; b=UgHlzlKa8hMmckT9X5f9e0mbf+YZMJ03zQsZhvQ+ppUs5lbW6IzhfiOTX9eWs4/bKoKj pZXUmfftKp+eJvLrSR0cTvW2t8zoO508Vn4TGqKnUJt8vP6YMgDNrgZyHNK2JuKhSIm4 Cnu7EfsqDgKNwRmzZEilBldu1xlAf/Iznn+2AxwC9NE0K2pGfbSi+PPe9/zL4Hui+puv OtjS0Yo59WeA8jxaS3TDEKlfxxdzHgQJz2uxa318Md6K/HA0TtsghEnnrr/J0g4/7T+e hJA5k6NT+EdqlJhSQF3MUANYtERdPCbdJ+Nt/0lKfOAzbMp/BG7RgTAzy2qp5/UK8KrH YQ== Received: from stntexhc11.cis.neustar.com ([156.154.17.216]) by mx0a-0018ba01.pphosted.com with ESMTP id 2s3g4yrjn6-1 (version=TLSv1 cipher=ECDHE-RSA-AES256-SHA bits=256 verify=NOT); Thu, 25 Apr 2019 18:03:18 -0400 Received: from STNTEXMB101.cis.neustar.com ([fe80::a831:d3b4:fb4e:e45b]) by stntexhc11.cis.neustar.com ([::1]) with mapi id 14.03.0439.000; Thu, 25 Apr 2019 18:03:16 -0400 From: "Peterson, Jon" To: Mary Barnes , "stir@ietf.org Mail List" CC: Eric Rescorla Thread-Topic: WG last call comments on stir-oob-04 Thread-Index: AQHU9in8Lskpqc5P8Uuqk4xpbcNHUqZNRr6A Date: Thu, 25 Apr 2019 22:03:16 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.10.9.190412 x-originating-ip: [10.96.13.90] Content-Type: multipart/alternative; boundary="_000_C89593B64EA949E9A112DA5EDE2AA149teamneustar_" MIME-Version: 1.0 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2019-04-25_18:, , signatures=0 X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1011 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1810050000 definitions=main-1904250134 Archived-At: Subject: Re: [stir] WG last call comments on stir-oob-04 X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 25 Apr 2019 22:03:23 -0000 --_000_C89593B64EA949E9A112DA5EDE2AA149teamneustar_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 DQpUaGFua3MgZm9yIHRoZSBub3RlcyBNYXJ5LiBBIGZldyByZXNwb25zZXMgaW5saW5lLg0KDQpN aW5vciBjb21tZW50czoNCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCi0gR2VuZXJhbDogcGVyIEVy aWMncyBjb21tZW50cywgdGhlcmUgaXMgc3RpbGwgYSBsb3Qgb2Ygd29yayB0byBkbyB0byBnZXQg dGhpcyBjb21wbGV0ZWQgb3IgZXZlbiB0byBnZXQgYSBzaW1wbGUgcHJvZmlsZSBzcGVjaWZpZWQu IEl0IG1pZ2h0IGJlIHZlcnkgaGVscGZ1bCBzb21ld2hlcmUgdG8gc3VtbWFyaXplIHRoZSBnYXBz IHRoYXQgbXVzdCBiZSBhZGRyZXNzZWQuICBBbmQsIGl0IHNob3VsZCBjbGVhcmx5IHN0YXRlIHRo YXQgdGhpcyBkb2N1bWVudCBkb2Vzbid0IHByb3ZpZGUgYSBjb21wbGV0ZSBzb2x1dGlvbiBidXQg cmF0aGVyIGlkZW50aWZpZXMgYnVpbGRpbmcgYmxvY2tzIGFuZCBnYXBzIHJlcXVpcmVkIHRvIHJl YWxpemUgYSBzb2x1dGlvbi4gIE1heWJlIHNvbWV0aGluZyBsaWtlIHRoaXMgYWRkZWQgYXQgdGhl IGVuZCBvZiB0aGUgaW50cm9kdWN0aW9uOg0KDQoiVGhpcyBkb2N1bWVudCBwcm92aWRlcyB0aGUg b3BlcmF0aW5nIGVudmlyb25tZW50cyBpbiB3aGljaCB0aGlzIG91dC1vZi1iYW5kIFNUSVIgbWVj aGFuaXNtIGlzIGludGVuZGVkIHRvIG9wZXJhdGUuICBJdCBwcm92aWRlcyB1c2UgY2FzZXMgYW5k IHByb3ZpZGVzIGEgZGVzY3JpcHRpb24gb2YgdGhlIGNvbXBvbmVudHMgYW5kIGEgc29sdXRpb24g YXJjaGl0ZWN0dXJlLiAgSXQgZGVzY3JpYmVzIHRoZSBzdG9yYWdlIGFuZCByZXRyaWV2YWwgb2Yg UEFTU3BvclRzIGluIHRoZSBDUFMgd2l0aGluIHRoaXMgY29udGV4dC4gIEdhcHMgdGhhdCBtdXN0 IGJlIGFkZHJlc3NlZCBpbiBhIHNvbHV0aW9uIGFyZSBhbHNvIGlkZW50aWZpZWQuIg0KDQo8Sm9u PiBTdXJlLCBJIG1lYW4sIG1vdmluZyBpdCB0byBJbmZvIGZyb20gUFMgaXMgaW50ZW5kZWQgdG8g c2lnbmlmeSB0aGF0IGl0IGlzIGp1c3QgYSBmcmFtZXdvcmsgYW5kIG5vdCBhIHByb3RvY29sIHNw ZWNpZmljYXRpb24gKGFwYXJ0IGZyb20gdGhlIGxpdHRsZSBzdHJhd21hbiB3aGljaCBpcyBtYXJr ZWQgY2xlYXJseSBhcyBhIHN0cmF3bWFuKS4gQnV0IEkgZG9u4oCZdCBoYXZlIGEgcHJvYmxlbSBh ZGRpbmcgc29tZXRoaW5nIGxpa2UgdGhhdCB0byB0aGUgZW5kIG9mIHRoZSBpbnRyby4gPC9Kb24+ DQoNCi0gU2VjdGlvbiAxLCAybmQgcGFyYWdyYXBoLiAgSXMgaXQgcmVhbGx5ICJtb3N0IiBjYWxs cyB0aGF0IHN0aWxsIHRyYXZlcnNlIHRoZSBQU1ROPyAgSSB3b3VsZCB0aGluayAiYSBudW1iZXIg b2YiIG1pZ2h0IGJlIGEgYmV0dGVyIHdheSB0byBzYXkgdGhhdC4NCg0KPEpvbj4gVGhlIG51bWJl cnMgSSBoZWFyIGFyZSB3ZWxsIGludG8g4oCcbW9zdOKAnSwgZXZlbiBpZiBtb3JlIHRoYW4gaGFs ZiBvZiByZXNpZGVudGlhbCBsYW5kbGluZSBpcyBub3cgbGFzdC1taWxlIElQLiBCdXQgaXTigJlz IHRydWUgdGhhdCBzdGF0ZW1lbnRzIGxpa2UgdGhpcyBkb27igJl0IGFnZSB3ZWxsIG9yIGFkZCBt dWNoIHZhbHVlIGZvciBwb3N0ZXJpdHkuIEkgY2FuIHBhdGNoIGl0LiA8L0pvbj4NCg0KLSBTZWN0 aW9uIDUuMi4gIEkgZG9uJ3QgcXVpdGUgdW5kZXJzdGFuZCB0aGUgcHJlbWlzZSBpbiB0aGF0IGZp cnN0IHBhcmFncmFwaC4gIEFyZSB0aGVyZSAyIHNpbXVsdGFuZW91cyBjYWxscyBhbmQgb25jZSBp dCBoaXRzIHRoZSBnYXRld2F5IGl0IGdldHMgZHJvcHBlZD8NCg0KPEpvbj4gTm90IHR3byBjYWxs cywgbm8sIHRoZSBQQlggd2XigJlyZSBhc3N1bWluZyBoZXJlIGRvZXMgbm90IGhhdmUgYSBTSVAg dHJ1bmssIGp1c3QgYW4gb2xkLXNjaG9vbCBQUkkgb3Igc29tZXRoaW5nLCBidXQgaXQgZG9lcyBo YXZlIGEgcmVndWxhciBJbnRlcm5ldCBjb25uZWN0aW9uLiBTbyBpdCBpcyBkcm9wcGluZyB0aGUg Y2FsbCB0byB0aGF0IFBSSSwgYW5kIGFzIGl0IGRvZXMgc28sIGl0IHB1dHMgdGhlIFBBU1Nwb3JU IGluIHRoZSBDUFMuIFdvdWxkIGl0IGhlbHAgaWYgSSBtYWRlIGl0IGNsZWFyIHRoYXQgZGVzcGl0 ZSBoYXZpbmcgSW50ZXJuZXQgYWNjZXNzLCBpdCBkb2VzbuKAmXQgaGF2ZSBhbiBvdXRib3VuZCBJ bnRlcm5ldCB2b2ljZSBjYWxsIHBhdGgsIG9yIHNvbWV0aGluZz8gPC9Kb24+DQoNCi0gU2VjdGlv biA3LjUsIGxhc3QgcGFyYWdyYXBoLiAgSXQgc2VlbXMgdG8gbWUgdGhhdCB0aGUgcmVjb21tZW5k YXRpb24gZm9yIHRoZSBhbW91bnQgb2YgdGltZSB0byBzdG9yZSBhIFBBU1Nwb3JUIHNob3VsZCBo YXZlIHNvbWUgcmVsYXRpb24gdG8gdGhlIHRpbWUgY2hvc2VuIGZvciB2ZXJpZnlpbmcgImlhdCIg dmFsdWVzIGluIHRoZSBQQVNTcG9yVC4gIE1heWJlIGNoYW5nZSAiZm9yIG1vcmUgdGhhbiBzaXh0 eSBzZWNvbmRzLiIgICB0byAic29tZXRoaW5nIGxpa2UgIm5vIGxvbmdlciB0aGFuIGEgdmFsdWUg dGhhdCBtaWdodCBiZSBzZWxlY3RlZCBmb3IgdGhlIHZlcmlmaWNhdGlvbiBzZXJ2aWNlIHBvbGlj eSBmb3IgZnJlc2huZXNzIG9mIHRoZSAiaWF0IiB2YWx1ZSBhcyBkZXNjcmliZWQgaW4gW1JGQyA4 MjI0XS4iICAgQXMgSSByZWNhbGwsIHRoZXJlIHdhcyBhIGNvbnNjaW91cyBjaG9pY2UgbWFkZSB0 byBub3QgcHV0IGEgc3BlY2lmaWMgdmFsdWUgb24gdGhhdCB0aW1lIGluIDgyMjQgYW5kIEkgY2Fu J3Qgc2VlIHdoeSB3ZSB3b3VsZG4ndCB3YW50IHRvIGRvIHRoZSBzYW1lIGhlcmUuDQoNCjxKb24+ IFRoYXTigJlzIHByb2JhYmx5IGZpbmUuIFlvdXIgbml0cyBiZWxvdyBhcmUgYWxzbyBhcHByZWNp YXRlZC4gVGhhbmtzIGFnYWluIGZvciB0aGUgcmVhZC4gPC9Kb24+DQoNCkVkaXRvcmlhbCBuaXRz Og0KLS0tLS0tLS0tLS0tLS0tLS0NCi0gU2VjdGlvbiAxLCAzcmQgc2VudGVuY2U6ICBJIGZvdW5k IHRoaXMgd29yZGluZyBhd2t3YXJkLCBzbyBJIHN1Z2dlc3QgdGhlIGZvbGxvd2luZyBjaGFuZ2U6 DQpPTEQ6DQogIEZvciBleGFtcGxlLCBbUkZDODIyNF0gZGVmaW5lcyBhbiBJZGVudGl0eSBoZWFk ZXIgb2YgU0lQIHJlcXVlc3RzIGNhcGFibGUgb2YgY2FycnlpbmcgYQ0KICBQQVNTcG9yVCBbUkZD ODIyNV0gb2JqZWN0IGluIFNJUCBhcyBhIG1lYW5zIC4uLg0KTkVXOg0KICAgRm9yIGV4YW1wbGUs IFtSRkM4MjI0XSBkZWZpbmVzIGEgU0lQIElkZW50aXR5IGhlYWRlciBmaWVsZCBjYXBhYmxlIG9m IGNhcnJ5aW5nDQogIFBBU1Nwb3JUIFtSRkM4MjI1XSBvYmplY3RzIGluIFNJUCByZXF1ZXN0cyBh cyBhIG1lYW5zIC4uLg0KDQotIFNlY3Rpb24gNCwgM3JkIHBhcmFncmFwaC4gIEkgdGhpbmsgYSBs aXN0IHdpdGggbnVtYmVycyBpcyBtb3JlIHJlYWRhYmxlIHRoYW4gdGhpcyBwbGFpbiBsaXN0LiAg YW5kIHN0cmljdGx5IHNwZWFraW5nIGFuICJvciIgYXQgdGhlIGVuZCBvZiBpdGVtIDEgaXMgbW9y ZSBhY2N1cmF0ZSBzaW5jZSBJIHRoaW5rIHlvdSdyZSBkZXNjcmliaW5nIHR3byBvcHRpb25zLg0K DQotIFNlY3Rpb24gNS4zLCAxc3QgcGFyYWdyYXBoOg0KIml0IHdpbGwgaW1tZWRpYXRlIGRyb3Ai IC0+ICJpdCB3aWxsIGltbWVkaWF0ZWx5IGRyb3AiDQoNCi0gU2VjdGlvbiA1LjQsIGxhc3QgcGFy YWdyYXBoOg0KIiBwZXJoYXBzIHRoZSBkZXN0aW5hdGlvbiBlbmRwb2ludHMgcXVlcmllcyIgLT4g InBlcmhhcHMgdGhlIGRlc3RpbmF0aW9uIGVuZHBvaW50IHF1ZXJpZXMiDQoNCi0gU2VjdGlvbiA2 LjEsIDNyZCBwYXJhZ3JhcGg6ICAidGhlIG1vc3Qgb2J2aW91c2x5IHdheSIgLT4gInRoZSBtb3N0 IG9idmlvdXMgd2F5Ig0KDQotIFNlY3Rpb24gNi4yLCAzcmQgcGFyYWdyYXBoOiAgIndpbGwgbmVl ZCBkZWNyeXB0IiAtPiAid2lsbCAgbmVlZCB0byBkZWNyeXB0Ig0KDQotIFNlY3Rpb24gNy4zIEFn YWluLCBJIHRoaW5rIGEgbnVtYmVyZWQgbGlzdCBpcyBhIGJldHRlciB3YXkgdG8gYW5ub3RhdGUg dGhvc2UgdHdvIHBvaW50cy4NCg0KLSBTZWN0aW9uIDcuNS4gRGl0dG8gUnVzcycgY29tbWVudCBv biByZWZlcmVuY2UgdG8gImJsaW5kIHNpZ25hdHVyZSINCg0KLSBUaGUgcmVmZXJlbmNlIHRvIHRo ZSBWSVBSIG92ZXJ2aWV3IHNwZWMgaXNuJ3QgdG8gdGhlIG1vc3QgcmVjZW50IHZlcnNpb24uICBJ dCBzaG91bGQgYmUgZHJhZnQtamVubmluZ3Mtdmlwci1vdmVydmlldyAoYW5kIGFzIEkndmUgc2Fp ZCBhIG51bWJlciBvZiB0aW1lcywgSSB0aGluayBpdCB3b3VsZCBiZSBnb29kIHRvIGFjdHVhbGx5 IHB1Ymxpc2ggdGhhdCBvbmUpDQoNCjxKb24+IEhlaC4gV2lsbCB1cGRhdGUgdGhlIHJlZiBhdCBs ZWFzdC4gPC9Kb24+DQoNCg0K --_000_C89593B64EA949E9A112DA5EDE2AA149teamneustar_ Content-Type: text/html; charset="utf-8" Content-ID: <27D6078FFD07F94C9DEC0519AE07FAAA@neustar.biz> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2 IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToy IDE1IDUgMiAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3Jt YWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGluOw0KCW1hcmdpbi1i b3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJp IixzYW5zLXNlcmlmO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXBy aW9yaXR5Ojk5Ow0KCWNvbG9yOiMwNTYzQzE7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9 DQphOnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9y aXR5Ojk5Ow0KCWNvbG9yOiM5NTRGNzI7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpw Lm1zb25vcm1hbDAsIGxpLm1zb25vcm1hbDAsIGRpdi5tc29ub3JtYWwwDQoJe21zby1zdHlsZS1u YW1lOm1zb25vcm1hbDsNCgltc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzsNCgltYXJnaW4tcmlnaHQ6 MGluOw0KCW1zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvOw0KCW1hcmdpbi1sZWZ0OjBpbjsNCglm b250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmO30NCnNw YW4uRW1haWxTdHlsZTE4DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsLXJlcGx5Ow0KCWZvbnQt ZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0KLk1zb0No cERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1zaXplOjEwLjBw dDt9DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo4LjVpbiAxMS4waW47DQoJbWFyZ2luOjEu MGluIDEuMGluIDEuMGluIDEuMGluO30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2Vj dGlvbjE7fQ0KLS0+PC9zdHlsZT4NCjwvaGVhZD4NCjxib2R5IGxhbmc9IkVOLVVTIiBsaW5rPSIj MDU2M0MxIiB2bGluaz0iIzk1NEY3MiI+DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEiPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj5UaGFua3MgZm9yIHRoZSBub3RlcyBNYXJ5LiBBIGZldyByZXNwb25zZXMgaW5saW5lLjxv OnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+TWlub3IgY29tbWVudHM6PG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6 LjVpbiI+LS0tLS0tLS0tLS0tLS0tLS0tLS0tLTxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPi0gR2VuZXJh bDogcGVyIEVyaWMncyBjb21tZW50cywgdGhlcmUgaXMgc3RpbGwgYSBsb3Qgb2Ygd29yayB0byBk byB0byBnZXQgdGhpcyBjb21wbGV0ZWQgb3IgZXZlbiB0byBnZXQgYSBzaW1wbGUgcHJvZmlsZSBz cGVjaWZpZWQuIEl0IG1pZ2h0IGJlIHZlcnkgaGVscGZ1bCBzb21ld2hlcmUgdG8gc3VtbWFyaXpl IHRoZSBnYXBzIHRoYXQgbXVzdCBiZSBhZGRyZXNzZWQuJm5ic3A7DQogQW5kLCBpdCBzaG91bGQg Y2xlYXJseSBzdGF0ZSB0aGF0IHRoaXMgZG9jdW1lbnQgZG9lc24ndCBwcm92aWRlIGEgY29tcGxl dGUgc29sdXRpb24gYnV0IHJhdGhlciBpZGVudGlmaWVzIGJ1aWxkaW5nIGJsb2NrcyBhbmQgZ2Fw cyByZXF1aXJlZCB0byByZWFsaXplIGEgc29sdXRpb24uJm5ic3A7IE1heWJlIHNvbWV0aGluZyBs aWtlIHRoaXMgYWRkZWQgYXQgdGhlIGVuZCBvZiB0aGUgaW50cm9kdWN0aW9uOjxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1s ZWZ0Oi41aW4iPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPiZxdW90O1RoaXMgZG9jdW1lbnQg cHJvdmlkZXMgdGhlIG9wZXJhdGluZyBlbnZpcm9ubWVudHMgaW4gd2hpY2ggdGhpcyBvdXQtb2Yt YmFuZCBTVElSIG1lY2hhbmlzbSBpcyBpbnRlbmRlZCB0byBvcGVyYXRlLiZuYnNwOyBJdCBwcm92 aWRlcyB1c2UgY2FzZXMgYW5kIHByb3ZpZGVzIGEgZGVzY3JpcHRpb24gb2YgdGhlIGNvbXBvbmVu dHMgYW5kIGEgc29sdXRpb24gYXJjaGl0ZWN0dXJlLiZuYnNwOw0KIEl0IGRlc2NyaWJlcyB0aGUm bmJzcDtzdG9yYWdlIGFuZCByZXRyaWV2YWwgb2YgUEFTU3BvclRzIGluIHRoZSBDUFMgd2l0aGlu IHRoaXMgY29udGV4dC4mbmJzcDsgR2FwcyB0aGF0IG11c3QgYmUgYWRkcmVzc2VkIGluIGEgc29s dXRpb24gYXJlIGFsc28gaWRlbnRpZmllZC4mcXVvdDs8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ Jmx0O0pvbiZndDsgU3VyZSwgSSBtZWFuLCBtb3ZpbmcgaXQgdG8gSW5mbyBmcm9tIFBTIGlzIGlu dGVuZGVkIHRvIHNpZ25pZnkgdGhhdCBpdCBpcyBqdXN0IGEgZnJhbWV3b3JrIGFuZCBub3QgYSBw cm90b2NvbCBzcGVjaWZpY2F0aW9uIChhcGFydCBmcm9tIHRoZSBsaXR0bGUgc3RyYXdtYW4gd2hp Y2ggaXMgbWFya2VkIGNsZWFybHkgYXMgYSBzdHJhd21hbikuIEJ1dCBJIGRvbuKAmXQgaGF2ZSBh IHByb2JsZW0gYWRkaW5nDQogc29tZXRoaW5nIGxpa2UgdGhhdCB0byB0aGUgZW5kIG9mIHRoZSBp bnRyby4gJmx0Oy9Kb24mZ3Q7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PG86cD4mbmJzcDs8L286cD48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxl ZnQ6LjVpbiI+LSBTZWN0aW9uIDEsIDJuZCBwYXJhZ3JhcGguJm5ic3A7IElzIGl0IHJlYWxseSAm cXVvdDttb3N0JnF1b3Q7IGNhbGxzIHRoYXQgc3RpbGwgdHJhdmVyc2UgdGhlIFBTVE4/Jm5ic3A7 IEkgd291bGQgdGhpbmsgJnF1b3Q7YSBudW1iZXIgb2YmcXVvdDsgbWlnaHQgYmUgYSBiZXR0ZXIg d2F5IHRvIHNheSB0aGF0LiZuYnNwOyZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbHQ7 Sm9uJmd0OyBUaGUgbnVtYmVycyBJIGhlYXIgYXJlIHdlbGwgaW50byDigJxtb3N04oCdLCBldmVu IGlmIG1vcmUgdGhhbiBoYWxmIG9mIHJlc2lkZW50aWFsIGxhbmRsaW5lIGlzIG5vdyBsYXN0LW1p bGUgSVAuIEJ1dCBpdOKAmXMgdHJ1ZSB0aGF0IHN0YXRlbWVudHMgbGlrZSB0aGlzIGRvbuKAmXQg YWdlIHdlbGwgb3IgYWRkIG11Y2ggdmFsdWUgZm9yIHBvc3Rlcml0eS4gSSBjYW4gcGF0Y2ggaXQu ICZsdDsvSm9uJmd0OzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41 aW4iPi0gU2VjdGlvbiA1LjIuJm5ic3A7IEkgZG9uJ3QgcXVpdGUgdW5kZXJzdGFuZCB0aGUgcHJl bWlzZSBpbiB0aGF0IGZpcnN0IHBhcmFncmFwaC4mbmJzcDsgQXJlIHRoZXJlIDIgc2ltdWx0YW5l b3VzIGNhbGxzIGFuZCBvbmNlIGl0IGhpdHMgdGhlIGdhdGV3YXkgaXQgZ2V0cyBkcm9wcGVkPzxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbHQ7Sm9uJmd0OyBOb3QgdHdvIGNhbGxzLCBubywgdGhl IFBCWCB3ZeKAmXJlIGFzc3VtaW5nIGhlcmUgZG9lcyBub3QgaGF2ZSBhIFNJUCB0cnVuaywganVz dCBhbiBvbGQtc2Nob29sIFBSSSBvciBzb21ldGhpbmcsIGJ1dCBpdCBkb2VzIGhhdmUgYSByZWd1 bGFyIEludGVybmV0IGNvbm5lY3Rpb24uIFNvIGl0IGlzIGRyb3BwaW5nIHRoZSBjYWxsIHRvIHRo YXQgUFJJLCBhbmQgYXMgaXQgZG9lcyBzbywgaXQgcHV0cyB0aGUNCiBQQVNTcG9yVCBpbiB0aGUg Q1BTLiBXb3VsZCBpdCBoZWxwIGlmIEkgbWFkZSBpdCBjbGVhciB0aGF0IGRlc3BpdGUgaGF2aW5n IEludGVybmV0IGFjY2VzcywgaXQgZG9lc27igJl0IGhhdmUgYW4gb3V0Ym91bmQgSW50ZXJuZXQg dm9pY2UgY2FsbCBwYXRoLCBvciBzb21ldGhpbmc/ICZsdDsvSm9uJmd0OzxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0 Oi41aW4iPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPi0gU2VjdGlvbiA3LjUsIGxhc3QgcGFy YWdyYXBoLiZuYnNwOyBJdCBzZWVtcyB0byBtZSB0aGF0IHRoZSByZWNvbW1lbmRhdGlvbiBmb3Ig dGhlIGFtb3VudCBvZiB0aW1lIHRvIHN0b3JlIGEgUEFTU3BvclQgc2hvdWxkIGhhdmUgc29tZSBy ZWxhdGlvbiB0byB0aGUgdGltZSBjaG9zZW4gZm9yIHZlcmlmeWluZyAmcXVvdDtpYXQmcXVvdDsg dmFsdWVzIGluIHRoZSBQQVNTcG9yVC4mbmJzcDsgTWF5YmUgY2hhbmdlDQogJnF1b3Q7Zm9yIG1v cmUgdGhhbiBzaXh0eSBzZWNvbmRzLiZxdW90OyZuYnNwOyAmbmJzcDt0byAmcXVvdDtzb21ldGhp bmcgbGlrZSAmcXVvdDtubyBsb25nZXIgdGhhbiBhIHZhbHVlIHRoYXQgbWlnaHQgYmUgc2VsZWN0 ZWQgZm9yIHRoZSB2ZXJpZmljYXRpb24gc2VydmljZSBwb2xpY3kgZm9yIGZyZXNobmVzcyBvZiB0 aGUgJnF1b3Q7aWF0JnF1b3Q7IHZhbHVlIGFzIGRlc2NyaWJlZCBpbiBbUkZDIDgyMjRdLiZxdW90 OyZuYnNwOyAmbmJzcDtBcyBJIHJlY2FsbCwgdGhlcmUgd2FzIGEgY29uc2Npb3VzIGNob2ljZSBt YWRlIHRvIG5vdCBwdXQNCiBhIHNwZWNpZmljIHZhbHVlIG9uIHRoYXQgdGltZSBpbiA4MjI0IGFu ZCBJIGNhbid0IHNlZSB3aHkgd2Ugd291bGRuJ3Qgd2FudCB0byBkbyB0aGUgc2FtZSBoZXJlLjxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbHQ7Sm9uJmd0OyBUaGF04oCZcyBwcm9iYWJseSBmaW5l LiBZb3VyIG5pdHMgYmVsb3cgYXJlIGFsc28gYXBwcmVjaWF0ZWQuIFRoYW5rcyBhZ2FpbiBmb3Ig dGhlIHJlYWQuICZsdDsvSm9uJmd0OzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxvOnA+Jm5ic3A7PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtYXJnaW4tbGVmdDouNWluIj5FZGl0b3JpYWwgbml0czo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj4t LS0tLS0tLS0tLS0tLS0tLTxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPi0gU2VjdGlvbiAxLCAzcmQgc2Vu dGVuY2U6Jm5ic3A7IEkgZm91bmQgdGhpcyB3b3JkaW5nIGF3a3dhcmQsIHNvIEkgc3VnZ2VzdCB0 aGUgZm9sbG93aW5nIGNoYW5nZTo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj5PTEQ6Jm5ic3A7PG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFy Z2luLWxlZnQ6LjVpbiI+Jm5ic3A7IEZvciBleGFtcGxlLCBbUkZDODIyNF0gZGVmaW5lcyBhbiBJ ZGVudGl0eSBoZWFkZXIgb2YgU0lQIHJlcXVlc3RzIGNhcGFibGUgb2YgY2FycnlpbmcgYTxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1h cmdpbi1sZWZ0Oi41aW4iPiZuYnNwOyBQQVNTcG9yVCBbUkZDODIyNV0gb2JqZWN0IGluIFNJUCBh cyBhIG1lYW5zIC4uLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPk5FVzo8bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxl ZnQ6LjVpbiI+Jm5ic3A7ICZuYnNwO0ZvciBleGFtcGxlLCBbUkZDODIyNF0gZGVmaW5lcyBhIFNJ UCBJZGVudGl0eSBoZWFkZXIgZmllbGQgY2FwYWJsZSBvZiBjYXJyeWluZyZuYnNwOzxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdp bi1sZWZ0Oi41aW4iPiZuYnNwOyBQQVNTcG9yVCBbUkZDODIyNV0gb2JqZWN0cyBpbiBTSVAgcmVx dWVzdHMgYXMgYSBtZWFucyAuLi48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxvOnA+Jm5i c3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1hcmdpbi1sZWZ0Oi41aW4iPi0gU2VjdGlvbiA0LCAzcmQgcGFyYWdyYXBoLiZuYnNwOyBJIHRo aW5rIGEgbGlzdCB3aXRoIG51bWJlcnMgaXMgbW9yZSByZWFkYWJsZSB0aGFuIHRoaXMgcGxhaW4g bGlzdC4mbmJzcDsgYW5kIHN0cmljdGx5IHNwZWFraW5nIGFuICZxdW90O29yJnF1b3Q7IGF0IHRo ZSBlbmQgb2YgaXRlbSAxIGlzIG1vcmUgYWNjdXJhdGUgc2luY2UgSSB0aGluayB5b3UncmUgZGVz Y3JpYmluZyB0d28gb3B0aW9ucy4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxv OnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPi0gU2VjdGlvbiA1LjMsIDFzdCBwYXJhZ3JhcGg6Jm5i c3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+JnF1b3Q7aXQgd2lsbCBpbW1lZGlhdGUgZHJvcCZxdW90 OyAtJmd0OyAmcXVvdDtpdCB3aWxsIGltbWVkaWF0ZWx5IGRyb3AmcXVvdDsmbmJzcDsmbmJzcDs8 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtYXJnaW4tbGVmdDouNWluIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj4tIFNlY3Rpb24g NS40LCBsYXN0IHBhcmFncmFwaDo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj4mcXVvdDsgcGVyaGFwcyB0 aGUgZGVzdGluYXRpb24gZW5kcG9pbnRzIHF1ZXJpZXMmcXVvdDsgLSZndDsgJnF1b3Q7cGVyaGFw cyB0aGUgZGVzdGluYXRpb24gZW5kcG9pbnQgcXVlcmllcyZxdW90OzxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41 aW4iPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPi0gU2VjdGlvbiA2LjEsIDNyZCBwYXJhZ3Jh cGg6Jm5ic3A7ICZxdW90O3RoZSBtb3N0IG9idmlvdXNseSB3YXkmcXVvdDsgLSZndDsgJnF1b3Q7 dGhlIG1vc3Qgb2J2aW91cyB3YXkmcXVvdDsmbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48bzpw PiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtYXJnaW4tbGVmdDouNWluIj4tIFNlY3Rpb24gNi4yLCAzcmQgcGFyYWdyYXBoOiZuYnNw OyAmcXVvdDt3aWxsIG5lZWQgZGVjcnlwdCZxdW90OyAtJmd0OyAmcXVvdDt3aWxsJm5ic3A7IG5l ZWQgdG8gZGVjcnlwdCZxdW90OzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxvOnA+Jm5ic3A7PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1s ZWZ0Oi41aW4iPi0gU2VjdGlvbiA3LjMgQWdhaW4sIEkgdGhpbmsgYSBudW1iZXJlZCBsaXN0IGlz IGEgYmV0dGVyIHdheSB0byBhbm5vdGF0ZSB0aG9zZSB0d28gcG9pbnRzLiZuYnNwOzxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdp bi1sZWZ0Oi41aW4iPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPi0gU2VjdGlvbiA3LjUuIERp dHRvIFJ1c3MnIGNvbW1lbnQgb24gcmVmZXJlbmNlIHRvICZxdW90O2JsaW5kIHNpZ25hdHVyZSZx dW90OyZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4i Pi0gVGhlIHJlZmVyZW5jZSB0byB0aGUgVklQUiBvdmVydmlldyBzcGVjIGlzbid0IHRvIHRoZSBt b3N0IHJlY2VudCB2ZXJzaW9uLiZuYnNwOyBJdCBzaG91bGQgYmUgZHJhZnQtamVubmluZ3Mtdmlw ci1vdmVydmlldyAoYW5kIGFzIEkndmUgc2FpZCBhIG51bWJlciBvZiB0aW1lcywgSSB0aGluayBp dCB3b3VsZCBiZSBnb29kIHRvIGFjdHVhbGx5IHB1Ymxpc2ggdGhhdCBvbmUpJm5ic3A7PG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPiZsdDtKb24mZ3Q7IEhlaC4gV2lsbCB1cGRhdGUgdGhlIHJlZiBh dCBsZWFzdC4gJmx0Oy9Kb24mZ3Q7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PG86cD4mbmJzcDs8L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2lu LWxlZnQ6LjVpbiI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+ DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_C89593B64EA949E9A112DA5EDE2AA149teamneustar_-- From nobody Thu Apr 25 15:04:14 2019 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2E9DC12021B for ; Thu, 25 Apr 2019 15:04:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.638 X-Spam-Level: X-Spam-Status: No, score=-0.638 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, KHOP_DYNAMIC=1.363, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=team.neustar Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oeR74CN8Szjv for ; Thu, 25 Apr 2019 15:04:10 -0700 (PDT) Received: from mx0b-0018ba01.pphosted.com (mx0a-0018ba01.pphosted.com [67.231.149.94]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CBDBB12012F for ; Thu, 25 Apr 2019 15:04:10 -0700 (PDT) Received: from pps.filterd (m0078666.ppops.net [127.0.0.1]) by mx0a-0018ba01.pphosted.com (8.16.0.27/8.16.0.27) with SMTP id x3PM4AQW005161; Thu, 25 Apr 2019 18:04:10 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=team.neustar; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : content-id : content-transfer-encoding : mime-version; s=selector1; bh=Hjlie3KP9+T3qz9HN+1kR3rDejkjTPXHbnYBOAh2St4=; b=g3gdIxZcNhRQkxeXFBP5wLS89QhGQQu0o05GPVvX0MlV5NnqaOc5ioTOuw9A6Wu5qaV0 65a5rR4jw1BbEOXfNBf6KFsxmYOHHswDw3mrxWcACrSOmDGw4dOuaV/L4T5clY/3VRjQ 2j0uuecryrd8cNrs6KnAvFk8EbtouEeTFhe/XqpJDm3x0ZADB8atE7elYzMt5Mie1pEM zyRLJf7vkwVedV21wu7Y/xw32jnp9SxrTN2W8O30iNz0+LjwOsdBg3f2en5+l226z6SW IeSstvMtIdJyi3LQC4LrCn/tvyR/1XcN1eRDZrCmWVO5lCLU0m4+7CHx8gLfK02lyxRC iQ== Received: from stntexhc11.cis.neustar.com ([156.154.17.216]) by mx0a-0018ba01.pphosted.com with ESMTP id 2ryyhrtvej-1 (version=TLSv1 cipher=ECDHE-RSA-AES256-SHA bits=256 verify=NOT); Thu, 25 Apr 2019 18:04:10 -0400 Received: from STNTEXMB101.cis.neustar.com ([fe80::a831:d3b4:fb4e:e45b]) by stntexhc11.cis.neustar.com ([::1]) with mapi id 14.03.0439.000; Thu, 25 Apr 2019 18:04:08 -0400 From: "Peterson, Jon" To: Russ Housley , Eric Rescorla CC: IETF STIR Mail List Thread-Topic: WG Last Call comments on stir-oob-04 Thread-Index: AQHU3r2yzeCxb2+EfE2c1NNekzBydKZA8lWAgAyDgQA= Date: Thu, 25 Apr 2019 22:04:08 +0000 Message-ID: <254E8676-CB2A-431E-AC2F-5EEAE2B3453A@team.neustar> References: <9BB03273-2BFA-4907-9234-EC8CE33E0186@team.neustar> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.10.9.190412 x-originating-ip: [10.96.13.90] Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2019-04-25_18:, , signatures=0 X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1015 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1810050000 definitions=main-1904250135 Archived-At: Subject: Re: [stir] WG Last Call comments on stir-oob-04 X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 25 Apr 2019 22:04:12 -0000 DQpUaGFua3MgZm9yIHRoZSBub3RlcyBSdXNzLiBBIGZldyByZXNwb25zZXMgaW5saW5lLg0KICAg IA0KICAgIE1ham9yOg0KICAgIA0KICAgIFRpdGxlIHBhZ2U6IEFzIGRpc2N1c3NlZCBvbiB0aGUg bWFpbCBsaXN0LCBwbGVhc2UgY2hhbmdlIHRoZSANCiAgICBpbnRlbmRlZCBzdGF0dXMgdG8gIklu Zm9ybWF0aW9uYWwiLg0KICAgIA0KICAgIFNlY3Rpb24gMTE6IFRvIGRhdGUsIFNUSVIgY2VydGlm aWNhdGVzIGFyZSBvbmx5IHVzZWQgdG8gZGlnaXRhbA0KICAgIHNpZ25hdHVyZS4gIFRoaXMgZG9j dW1lbnQgc3VnZ2VzdHMgdGhhdCB0aGUgcHVibGljIGtleSBpbiB0aGUNCiAgICBjZXJ0aWZpY2F0 ZSBjYW4gYWxzbyBiZSB1c2VkIHRvIHByb3ZpZGUgY29uZmlkZW50aWFsaXR5LiAgVGhpcw0KICAg IHdvcmtzIGlmIHRoZSBwdWJsaWMga2V5IGlzIFJTQSwgYW5kIHRoZSBjZXJ0aWZpY2F0ZSBoYXMg dGhlDQogICAgYXBwcm9wcmlhdGUga2V5IHVzYWdlIGJpdHMgc2V0LiAgSG93ZXZlciwgdGhpcyBk b2VzIG5vdCB3b3JrIGlmDQogICAgdGhlIHB1YmxpYyBrZXkgaXMgRFNBLCBFQ0RTQSwgRWQyNTUx OSwgb3Igc2V2ZXJhbCBvdGhlcnMuICBJDQogICAgYW0gbm90IGFza2luZyBmb3IgYSBtYWpvciBj aGFuZ2UgdG8gdGhlIGRvY3VtZW50LCBidXQgdGhpcw0KICAgIHNob3VsZCBiZSBwb2ludGVkIG91 dCBpbiB0aGUgZG9jdW1lbnQuICANCg0KPEpvbj5UaGlzIGlzIGFuIGFydGlmYWN0IG9mIGhvdyBs b25nIHRoZSBkb2N1bWVudCBoYXMgYmVlbiBpbiBwcm9ncmVzcyAtIHNpbmNlIGJlZm9yZSB3ZSBt b3ZlZCBTVElSIHRvIEVDRFNBLiBTbywgZ29vZCBjYXRjaC4gSSBkbyB0aGluayB3ZSBzaG91bGQg YXQgbGVhc3Qgc2tldGNoIGEgcGxhdXNpYmxlIHdheSB0byBnZXQgdGhvc2UgZW5jcnlwdGlvbiBr ZXlzIGludG8gdGhlIGFyY2hpdGVjdHVyZS4gV2UnbGwgY2lyY2xlIGFyb3VuZCBvbiB0aGF0IGFu ZCBjb21lIGJhY2sgd2l0aCBzb21ldGhpbmcuIDwvSm9uPg0KDQogICAgQW5kLCBTZWN0aW9uIDEx IHNob3VsZA0KICAgIHBvaW50IG91dCB0aGF0IGZpbmRpbmcgdGhlIGNyZWRlbnRpYWwgZm9yIHRo ZSBjYWxsZWUgY2Fubm90DQogICAgbGV2ZXJhZ2UgdGhlICJ4NXUiIGNsYWltIGluIHRoZSBQQVNT cG9yVCB3aGVuIHRoZSBwdWJsaWMga2V5DQogICAgY2FuIG9ubHkgYmUgdXNlZCBmb3IgZGlnaXRh bCBzaWduYXR1cmUuDQogICAgDQo8Sm9uPiBJJ2QgbGlrZSB0byBrZWVwIHRoZSB4NXUgc2VtYW50 aWNzIHRoZSBzYW1lIGluIE9PQiBhcyBpbi1iYW5kLCBkZWZpbml0ZWx5LCBzbyBzb21lIGNoYW5n ZSB0byB0aGUgdGV4dCBpcyBuZWVkZWQgdGhlcmUsIGFncmVlZC4gPC9Kb24+DQogICAgDQogICAg TWlub3I6DQogICAgDQogICAgU2VjdGlvbiAyOiBQbGVhc2UgdXBkYXRlIHRoZSBmaXJzdCBwYXJh Z3JhcGggdG8gcmVmZXJlbmNlIFJGQyA4MTc0DQogICAgaW4gYWRkaXRpb24gdG8gUkZDIDIxMTks IGFzIGZvbGxvd3M6IA0KICAgIA0KICAgICAgIFRoZSBrZXkgd29yZHMgIk1VU1QiLCAiTVVTVCBO T1QiLCAiUkVRVUlSRUQiLCAiU0hBTEwiLCAiU0hBTEwgTk9UIiwNCiAgICAgICAiU0hPVUxEIiwg IlNIT1VMRCBOT1QiLCAiUkVDT01NRU5ERUQiLCAiTk9UIFJFQ09NTUVOREVEIiwgIk1BWSIsIGFu ZA0KICAgICAgICJPUFRJT05BTCIgaW4gdGhpcyBkb2N1bWVudCBhcmUgdG8gYmUgaW50ZXJwcmV0 ZWQgYXMgZGVzY3JpYmVkIGluDQogICAgICAgQkNQIDE0IFtSRkMyMTE5XSBbUkZDODE3NF0gd2hl biwgYW5kIG9ubHkgd2hlbiwgdGhleSBhcHBlYXIgaW4gYWxsDQogICAgICAgY2FwaXRhbHMsIGFz IHNob3duIGhlcmUuDQogICAgICAgDQogICAgT2YgY291cnNlLCBhbHNvIGFkZCBhIHJlZmVyZW5j ZSB0byBSRkMgODE3NC4NCg0KPEpvbj4gV2lsbCBkby4gPC9Kb24+DQogICAgDQogICAgVGhlIGZp Z3VyZSBpbiBTZWN0aW9uIDcuMiBjYW4gYmUgZWFzaWx5IGFkanVzdGVkIHRvIGZpdCB0aGUgbm9y bWFsDQogICAgbWFyZ2lucy4gIEFsc28sIHRoZSBleGFtcGxlIHRlbGVwaG9uZSBudW1iZXJzIHNo b3VsZCB1c2UgdGhlIDU1NQ0KICAgIGNvbnZlbnRpb25zLiAgSSBzdWdnZXN0Og0KICAgIA0KICAg ICAgIEFsaWNlICAgICAgICAgICAgICAgICAgICBDYWxsIFBsYWNlbWVudCBTZXJ2aWNlICAgICAg ICAgICAgICAgICAgQm9iDQogICAgICAgLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCiAgICANCiAgICAgICBTdG9yZSBQ QVNTcG9yVCBmb3IgMi4yMjIuNTU1LjIyMjIgLS0+DQogICAgDQogICAgICAgQ2FsbCBmcm9tIDEu MTExLjU1NS4xMTExIC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLT4N CiAgICANCiAgICANCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8LS0t LS0tLS0tLS0tLS0gUmVxdWVzdCBQQVNTcG9yVChzKQ0KICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgZm9yIDIuMjIyLjU1NS4yMjIyDQogICAg DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgT2J0YWluIEVuY3J5cHRl ZCBQQVNTcG9yVCAtLS0tLS0tLT4NCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAoMi4yMjIuNTU1LjIyMjIsIDEuMTExLjU1NS4xMTExKQ0KICAgIA0KICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBbUmluZyBwaG9uZSB3aXRoIGNh bGxlcmlkDQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgPSAxLjExMS41NTUuMTExMV0NCiAgICANCiAgICBBbHNvLCBhZGp1c3QgdGhlIHRl eHQgdG8gcmVmZXJlbmNlIHRoZXNlIGV4YW1wbGUgdGVsZXBob25lIG51bWJlcnMuDQogICAgDQog ICAgTGlrZXdpc2UsIHBsZWFzZSBhZGp1c3QgdGhlIGV4YW1wbGUgdGVsZXBob25lIG51bWJlcnMg aW4gU2VjdGlvbiA5Lg0KICAgIA0KICAgIEl0IHNob3VsZCBiZSBlcXVhbGx5IGVhc3kgdG8gcmVt b3ZlIHRocmVlIHNwYWNlcyBmcm9tIHRoZSBmaWd1cmUgaW4NCiAgICBTZWN0aW9uIDcuNCB0byBm aXQgdGhlIG5vcm1hbCBtYXJnaW5zLg0KDQo8Sm9uPiBXaWxsIGZpeCB2YXJpb3VzIG1hcmdpbnMu IFRoZSBudW1iZXJzIGFyZSBpbGxlZ2FsIG9uZXMsIGp1c3QgaWxsZWdhbCBpbiBhIGRpZmZlcmVu dCB3YXkgdGhhbiB1c3VhbC4gPC9Kb24+DQogICAgDQogICAgU2VjdGlvbiA3LjM6IFBsZWFzZSBh ZGQgYSByZWZlcmVuY2UgZm9yIFRMUy4gIEkgYXNzdW1lIHlvdSB3aWxsIHVzZQ0KICAgIFtSRkM4 NDQ2XS4NCiAgICANCiAgICBTZWN0aW9uIDcuNTogcy9TaWduKEtfY3BzLCBLX3RlbXApKS9TaWdu KEtfY3BzLCBLX3RlbXApLw0KICAgIA0KICAgIFNlY3Rpb24gMTE6IFBsZWFzZSBhZGQgYSByZWZl cmVuY2UgZm9yIE9DU1AuICBJIGFzc3VtZSB5b3Ugd2lsbCB1c2UNCiAgICBbUkZDMjU2MF0uDQoN CjxKb24+IFdpbGwgZml4IHRob3NlLiA8L0pvbj4NCiAgICANCiAgICBTZWN0aW9uIDE0OiBJIHRo aW5rIGl0IHdvdWxkIGJlIGhlbHBmdWwgdG8gaW5jbHVkZSBwb2ludGVycyB0bw0KICAgIFNlY3Rp b25zIDcuMyBhbmQgNy40IGluIHRoZSBTZWN1cml0eSBDb25zaWRlcmF0aW9ucy4NCg0KPEpvbj5Z ZXMsIEkgYW0gY29udmluY2VkIHdlIG5lZWQgc29tZSBiZXR0ZXIgU2VjIENvbnMgdGV4dCBoZXJl LiBBbmQgYXMgdG8gbml0cyBiZWxvdywgd2lsbCBmaXggdGhvc2UsIHRoYW5rcy4gPC9Kb24+DQog ICAgDQogICAgTml0czoNCiAgICANCiAgICBTdWdnZXN0ZWQgc3BlbGxpbmc6IHMvQ1BTcy9DUFNl cy8gIChOb3RlOiBUaGlzIHNwZWxsaW5nIGlzIHVzZWQgZm9yDQogICAgQ2VydGlmaWNhdGUgUHJh Y3RpY2UgU3RhdGVtZW50cy4pDQogICAgDQogICAgU2VjdGlvbiAzOiBQbGVhc2Ugc3BlbGwgb3V0 IHRoZSBmaXJzdCB1c2Ugb2YgIlBPVFMiLiAgQXMgYW4gYWx0ZXJuYXRpdmUsDQogICAgdGhlIHNl bnRlbmNlIGNvdWxkIGJlIHJld29yZGVkIHRvIHVzZSBQU1ROLCB3aGljaCBoYXMgYWxyZWFkeSBi ZWVuIHVzZWQNCiAgICBtYW55IHRpbWVzIGJ5IHRoaXMgcG9pbnQgaW4gdGhlIGRvY3VtZW50Lg0K ICAgIA0KICAgIFNlY3Rpb25zIDUuMSBhbmQgNS40OiBzL2luIHRoZSBTSVAgd29ybGQvaW4gYSBT SVAgZW52aXJvbm1lbnQvDQogICAgDQogICAgU2VjdGlvbiA1LjQ6IHMvYmFjayB0byB0aGUgSVAg d29ybGQvYmFjayB0byBhIFNJUCBlbnZpcm9ubWVudC8NCiAgICANCiAgICBTZWN0aW9uIDUuNDog cy9yZXR1cm5zIHRvIHRoZSBJUCB3b3JsZC9yZXR1cm5zIHRvIGEgU0lQIGVudmlyb25tZW50Lw0K ICAgIA0KICAgIFNlY3Rpb24gNS41OiBzL2EgdmFsaWQgY2FsbHMvYSB2YWxpZCBjYWxsLw0KICAg IA0KICAgIFNlY3Rpb24gNi4yOiBzL29uZSB0aGF0IGlzIHZhbGlkL29uZSBvciBtb3JlIHRoYXQg YXJlIHZhbGlkLw0KICAgIA0KICAgIFNlY3Rpb24gNy41OiBQbGVhc2UgYWRkIGFuIGluZm9ybWF0 aXZlIHJlZmVyZW5jZSBvbiBibGluZGVkIHNpZ25hdHVyZXMuDQogICAgDQpKb24gUGV0ZXJzb24N Ck5ldXN0YXIsIEluYy4NCg0K From nobody Thu Apr 25 15:07:25 2019 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E46F7120343 for ; Thu, 25 Apr 2019 15:07:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.338 X-Spam-Level: X-Spam-Status: No, score=-1.338 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, KHOP_DYNAMIC=1.363, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=team.neustar Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vozXYJarebqh for ; Thu, 25 Apr 2019 15:07:22 -0700 (PDT) Received: from mx0b-0018ba01.pphosted.com (mx0b-0018ba01.pphosted.com [67.231.157.90]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5EEF112021B for ; Thu, 25 Apr 2019 15:07:22 -0700 (PDT) Received: from pps.filterd (m0078668.ppops.net [127.0.0.1]) by mx0b-0018ba01.pphosted.com (8.16.0.27/8.16.0.27) with SMTP id x3PM3lRa005742; Thu, 25 Apr 2019 18:07:20 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=team.neustar; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : content-id : content-transfer-encoding : mime-version; s=selector1; bh=F+DRCx3ysMep9yegZOXET++zkzano7adsddHJc08+FM=; b=OhyaSvouiuTAauJQLvJBB3bztwqeMbDjOSbTxTf7vRIP8Lpw9FRaP5pkxSZbkWIG/iFe Uy44gsXEDrb3rz27dnx0rAQ7v4vXEY4YJ1zt9sWTHp7/puCFK68wRmqmCzYEE/tjc8ko 8V9sYu3GsWTL2/3mPZlBW4K8yL26oNhoMlHjKHl9BP4tZB2m3Vd3sJO76QJvDkPsFbxP fyTL5pVPmB31/u2R3USt1ZlshLZmW+TqDjkQwpdsf8/vX6W85oKV7jLnu3EGFjc5FkkN p9KJO++oY6iM9/Cl+0j5P4NENltUnf91mdx7m//aPr6jGNlvRj/NWhbepQogP0J88TZS aw== Received: from stntexhc11.cis.neustar.com ([156.154.17.216]) by mx0b-0018ba01.pphosted.com with ESMTP id 2ryx7jtvu5-1 (version=TLSv1 cipher=ECDHE-RSA-AES256-SHA bits=256 verify=NOT); Thu, 25 Apr 2019 18:07:20 -0400 Received: from STNTEXMB101.cis.neustar.com ([fe80::a831:d3b4:fb4e:e45b]) by stntexhc11.cis.neustar.com ([::1]) with mapi id 14.03.0439.000; Thu, 25 Apr 2019 18:07:20 -0400 From: "Peterson, Jon" To: Chris Wendt , Eric Rescorla CC: IETF STIR Mail List Thread-Topic: [stir] WG Last Call comments on stir-oob-04 Thread-Index: AQHU3r2yzeCxb2+EfE2c1NNekzBydKZA8lWAgAHnYACABrEBgIAD7AIA Date: Thu, 25 Apr 2019 22:07:19 +0000 Message-ID: References: <9BB03273-2BFA-4907-9234-EC8CE33E0186@team.neustar> <4BBC69EB-8008-4B9E-97E8-6541743F5E07@chriswendt.net> In-Reply-To: <4BBC69EB-8008-4B9E-97E8-6541743F5E07@chriswendt.net> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.10.9.190412 x-originating-ip: [10.96.13.90] Content-Type: text/plain; charset="utf-8" Content-ID: <4D4F0949E6FB9E448030A118B7E2895F@neustar.biz> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2019-04-25_18:, , signatures=0 X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1015 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=778 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1810050000 definitions=main-1904250135 Archived-At: Subject: Re: [stir] WG Last Call comments on stir-oob-04 X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 25 Apr 2019 22:07:24 -0000 DQpUaGFua3MgZm9yIHRoZSBub3RlcyBDaHJpcy4gQSBmZXcgcmVzcG9uc2VzIGJlbG93Og0KICAg IA0KICAgIEFic3RyYWN0IC0geW91IG1lbnRpb25lZCBvdGhlciB1c2UgY2FzZXMgYmVzaWRlcyBu b24tVm9JUCBwcm90b2NvbCwgZm9yIGVudGVycHJpc2Ugc2NlbmFyaW9zLCBTaG91bGQgeW91IGlu Y2x1ZGUgYnJpZWYgcmVmZXJlbmNlIHRvIHRoYXQgc3R5bGUgb2YgdXNlLWNhc2UgaW4gYWJzdHJh Y3Q/DQoNCjxKb24+IEkgY2FuIGFkZCB0aGF0LCBzdXJlLiA8L0pvbj4NCiAgICANCiAgICBJbnRy b2R1Y3Rpb24gLSBzYW1lIGNvbW1lbnQgYXMgYWJzdHJhY3QsIGl04oCZcyB2ZXJ5IGZvY3VzZWQg b24gUFNUTiBlbmRwb2ludCBicmlkZ2luZywgd2hlcmUgaXQgbWlnaHQgYmVuZWZpdCBmcm9tIHNv bWUgb3RoZXIgdXNlIGNhc2VzDQogICAgDQo8Sm9uPiBUaGUgcmVmZXJlbmNlcyB0byBJUCBQQlhz IGFuZCB0ZXJtaW5hbCBhZGFwdGVycyB0aGVyZSBhcmUgbWVhbnQgdG8gaW52b2tlIGVudGVycHJp c2UgYW5kIHJlc2lkZW50aWFsIFZvSVAgY2FzZXMsIGJ1dCBJIGNhbiBtYWtlIHRoYXQgbW9yZSBl eHBsaWNpdCBoZXJlLiA8L0pvbj4NCg0KICAgIFNlY3Rpb24gMyAtIHNpbWlsYXIgY29tbWVudCwg bWF5YmUgYW4gZXhhbXBsZSBvZiBjYWxsZXIgKG9yIHRlbGVwaG9uZSBuZXR3b3JrKSB0byBHVyB0 byBsb2NhbCBzcGVjaWFsaXplZCBuZXR3b3JrIHRvIEdXIHRvIGNhbGxlZSAob3IgdGVsZXBob25l IG5ldHdvcmspDQogICAgDQo8Sm9uPiBBZ2FpbiwgSSB0aGluayB0aGlzIHNlY3Rpb24gaXMgcmVh bGx5IGp1c3Qgc2hvd2luZyBhIGhpZ2hlci1sZXZlbCBtb2RlbCB0aGF0IGlzIGFzIGFwcGxpY2Fi bGUgdG8gbG9jYWwgc3BlY2lhbGl6ZWQgbmV0d29yayBhcyBpdCBpcyB0byBjYWxsZXJzLCB3ZSdy ZSB1c2luZyBjYWxsZXIgaGVyZSBhcyBhIGNhdGNoLWFsbCBmb3Igd2hhdGV2ZXIgc29ydCBvZiBl bnZpcm9ubWVudCB0aGUgY2FsbGVyIG1pZ2h0IGV4aXN0IGluLiBCdXQgSSBjYW4gdHJ5IHRvIHB1 dCBpbiBzb21lIG1vcmUgZmxhdm9yIHRleHQgYWJvdXQgaG93IGJyb2FkbHkgdGhlc2UgYXJjaGl0 ZWN0dXJlcyBzaG91bGQgYmUgdW5kZXJzdG9vZC4gPC9Kb24+DQoNCiAgICBTZWN0aW9uIDQgLSBp cyBpdCBuZWNlc3NhcnkgdG8gZGVzY3JpYmUgdGhlIHR3byBkYXRhIGZsb3cgYXJjaGl0ZWN0dXJl cz8gDQoNCjxKb24+IEZvciB0aGlzIHNvcnQgb2YgYXJjaGl0ZWN0dXJlL2ZyYW1ld29yayBkb2N1 bWVudCwgaXQncyBub3QgdGhhdCB1bmNvbW1vbiB0byBzaG93IHlvdXIgd29yayBhIGJpdCBhbmQg ZXhwbGFpbiB3aHkgeW91IHdlbnQgZG93biBvbmUgZGVzaWduIHBhdGggaW5zdGVhZCBvZiBhbm90 aGVyLiBTaW5jZSB3ZSBhcmUgKHNlZSBuZXh0IGNvbW1lbnQpIHRlZWluZyB1cCB0aGUgbm90aWZp Y2F0aW9uIGludGVyZmFjZSwgSSB0aGluayBpdCdzIHdvcnRoIHNob3dpbmcgYm90aCBoZXJlLiA8 L0pvbj4NCiAgICANCiAgICBTZWN0aW9uIDUuNSAtIHRoaXMgc2VlbXMgbGlrZSBhIHJlYWxseSBz cGVjaWZpYyBleGFtcGxlLCBub3Qgc2F5aW5nIGl0cyBhbiBpbnZhbGlkIGV4YW1wbGUsIGJ1dCBq dXN0IHRoaW5raW5nIHRoYXQgbWF5YmUgdGhlcmUgaXMgc2ltcGxlciBleGFtcGxlcyB0byBpbmNs dWRlIGFzIHdlbGwsIGxpa2UgYSBtb3JlIGdlbmVyYWwgdGhpbmcgbGlrZSBlbnRlcnByaXNlIGVx dWlwbWVudCBkb2VzbuKAmXQgc3VwcG9ydCBpZGVudGl0eSBoZWFkZXJzLCBlbnRlcnByaXNlIGlu Z3Jlc3MgU0JDIHNlbmRzIHBhc3Nwb3J0IHRvIENQUywgYW5kIGVuZHBvaW50IGhhcyB0aGUgYWJp bGl0eSB0byByZXRyaWV2ZSB0aGUgcGFzc3BvcnQgd2hlbiBjYWxsIGFycml2ZXMuIGZvciBleGFt cGxlLg0KICAgIA0KPEpvbj4gSXQncyBzbyBzcGVjaWZpYyBiZWNhdXNlIGl0J3MgbW90aXZhdGlu ZyB0aGUgbm90aWZpY2F0aW9uIGludGVyZmFjZSB3aGljaCBpcyBza2V0Y2hlZCBsYXRlci4gT3Ro ZXIgZW50ZXJwcmlzZSB1c2UgY2FzZXMgY2FuIHByZXR0eSBtdWNoIGJlIHRyYW5zcG9zZWQgb250 byB0aGUgZWFybGllciBleGFtcGxlcyAtIGNlcnRhaW5seSBJIGNvdWxkIHBhdGNoIGFuIGVudGVy cHJpc2UgY2FzZSBpbnRvIHNvbWV0aGluZyBsaWtlIHRoZSBmbG93IG9mIDUuMi4gPC9Kb24+DQoN CiAgICBTZWN0aW9uIDYgIC0gZmlyc3QgcGFyYWdyYXBoICJIb3dldmVyLCBhcyB1c2UgY2FzZXMg MyBhbmQgNCBpbiBTZWN0aW9uIDUgc2hvd+KAnSAtIHVzZSBjYXNlIDUgYWxzbyBzaG93cyB0aGlz IG5vdw0KDQo8Sm9uPiBTdXJlLCB3aWxsIGRvLiA8L0pvbj4NCiAgICANCiAgICBGb3IgdGhlIHJl c3Qgb2YgdGhlIGRvY3VtZW50LCBJIGRpZG7igJl0IGZpbmQgYW55IG9idmlvdXMgbG9naWNhbCBp c3N1ZXMsIG9idmlvdXNseSB0aGlzIGlzIGRlZmluaW5nIHJvdWdoIGRldGFpbHMgb2YgYSBwb3Rl bnRpYWwgZnJhbWV3b3JrLCBzbyBuaXRzIG9uIGludGVyZmFjZXMgb3Igb3RoZXIgZGV0YWlscyBp cyBwcm9iYWJseSBub3QgbmVjZXNzYXJ5Lg0KICAgIA0KICAgIEkgZG8gYWdyZWUgd2l0aCBvdGhl ciBjb21tZW50cyB0aGF0IGEgbW9yZSBleHBsaWNpdCBub3RlIGluIGFic3RyYWN0IGFuZC9vciBp bnRyb2R1Y3Rpb24gdGhhdCB0aGlzIGlzIGEgcHJvcG9zZWQgZnJhbWV3b3JrIG9mIGFyY2hpdGVj dHVyYWwgZWxlbWVudHMgdGhhdCBhcmUgZm9jdXNlZCBvbiBzb2x2aW5nIHRoZSBzZWN1cml0eSBv ZiBpc3N1ZXMgdGhhdCBhcmUgdW5pcXVlIHRvIG9vYiBzdGlyIHdvdWxkIGJlIGFwcHJvcHJpYXRl Lg0KICAgIA0KPEpvbj4gQWdhaW4sIHdpbGwgZG8uIDwvSm9uPg0KDQogICAgLUNocmlzDQoNCkpv biBQZXRlcnNvbg0KTmV1c3RhciwgSW5jLg0KDQo= From nobody Thu Apr 25 15:33:54 2019 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D61DD120193 for ; Thu, 25 Apr 2019 15:33:51 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.337 X-Spam-Level: X-Spam-Status: No, score=-1.337 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, KHOP_DYNAMIC=1.363, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=team.neustar Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BKf0a1b0h-A1 for ; Thu, 25 Apr 2019 15:33:49 -0700 (PDT) Received: from mx0b-0018ba01.pphosted.com (mx0b-0018ba01.pphosted.com [67.231.157.90]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B6CC112004B for ; Thu, 25 Apr 2019 15:33:49 -0700 (PDT) Received: from pps.filterd (m0049401.ppops.net [127.0.0.1]) by mx0b-0018ba01.pphosted.com (8.16.0.27/8.16.0.27) with SMTP id x3PM3la2003191; Thu, 25 Apr 2019 18:04:33 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=team.neustar; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : mime-version; s=selector1; bh=HtjMdLOKWgjdPBlvVRHo4cTeYLT7qlIkws721oVw9FU=; b=RXfeFCGdxVFzGGHHp+DIDM9qlt6ZHOVLyCLo+To520AUvA++2/ChA+wEAhbf+EVyrTTy 6Qu6JkkU41OJArJeLtcagzM46Aw1ns36y2gZP8bwCJgO58ev1n32bFqmymTOHORAet6K NSDpb8ORUyroiDEgOcaekhAqoQqcTIeyETcrwSGYRmqxHHBiJAtpyTCVp3e/ZE1R/ooH djFJQbhcngXrX+IjFIvO83iZJLt0R8zSgzueXS+6tNYu6wfPAy6TkgHIWUyUvfYd5ZcN e9gFv0o7iirqb8MOBNJxtji96l3NcovFS/U/ix3dyjNtkc6ocfACBuLH/Jq+YJquLsG8 UQ== Received: from stntexhc12.cis.neustar.com ([156.154.17.216]) by mx0b-0018ba01.pphosted.com with ESMTP id 2ryyr8tv0e-1 (version=TLSv1 cipher=ECDHE-RSA-AES256-SHA bits=256 verify=NOT); Thu, 25 Apr 2019 18:04:32 -0400 Received: from STNTEXMB101.cis.neustar.com ([fe80::a831:d3b4:fb4e:e45b]) by stntexhc12.cis.neustar.com ([::1]) with mapi id 14.03.0439.000; Thu, 25 Apr 2019 18:04:31 -0400 From: "Peterson, Jon" To: Mary Barnes CC: Eric Burger , "stir@ietf.org" Thread-Topic: [stir] WG LC Comments: draft-ietf-stir-oob-04 Thread-Index: AQHU9G1ws2PeKvZK70avTLbxcPSyB6ZAzvqAgAHeXYCACp05AA== Date: Thu, 25 Apr 2019 22:04:30 +0000 Message-ID: <3DB8C765-D510-4A16-A3AE-F2DC4DA7B0AC@team.neustar> References: <7E25361F-D726-440F-A77A-332BB97AC77A@standardstrack.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.10.9.190412 x-originating-ip: [10.96.13.90] Content-Type: multipart/alternative; boundary="_000_3DB8C765D5104A16A3AEF2DC4DA7B0ACteamneustar_" MIME-Version: 1.0 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2019-04-25_18:, , signatures=0 X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1015 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=722 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1810050000 definitions=main-1904250135 Archived-At: Subject: Re: [stir] WG LC Comments: draft-ietf-stir-oob-04 X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 25 Apr 2019 22:33:52 -0000 --_000_3DB8C765D5104A16A3AEF2DC4DA7B0ACteamneustar_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 DQo8Sm9uPkluLWJhbmQgU1RJUiBhZGRzIHRoZSB2ZWN0b3IgdGhhdCB5b3VyIHRyYWZmaWMgbWln aHQgbm90IGdvIFNJUCBlbmQtdG8tZW5kIGFuZCB0aHVzIFNUSVIgZG9lc24ndCB3b3JrLCB3aGlj aCBpcywgd2VsbCwgYSBwcmV0dHkgYmlnIHZlY3Rvci4gT2YgY291cnNlIGl0J3MgYSB0cmFkZS1v ZmYuIFRoZXJlIGFyZSBhIG51bWJlciBvZiBjb3VudGVybWVhc3VyZXMgZGVzY3JpYmVkIGluIHRo ZSBkb2N1bWVudCB0byB0aHdhcnQgc2ltcGxlIHRyYWZmaWMgYW5hbHlzaXMuPC9Kb24+DQoNCltN Ql0gSSB3YXMgdGhpbmtpbmcgc29tZXRoaW5nIGlzIG1pc3NpbmcgZnJvbSB0aGlzIHNlY3Rpb24g YW5kIHBlcmhhcHMgYWRkaW5nIGEgc3RhdGVtZW50IGluIHRoZSBzYW1lIHZhaW4gYXMgeW91ciBy ZXNwb25zZSBjb3VsZCBiZSBoZWxwZnVsLiAgQW5kLCBJIHRoaW5rIGhpZ2hsaWdodGluZyB0aGUg cG90ZW50aWFsIGZvciBhIERvUyBhdHRhY2sgaGVyZSBtaWdodCBiZSBoZWxwZnVsLiAgIFsvTUJd DQoNCldlIGNhbiBkbyB0aGF0LCBubyBwcm9ibGVtLiBCYXNpY2FsbHksIHdl4oCZZCBhZGQgc29t ZSBwb2ludGVycyB0byB0aGUgZWFybGllciBzZWN0aW9ucyB3aGVyZSB0aG9zZSBtZWFzdXJlcyBh cmUgZGlzY3Vzc2VkLg0KDQpKb24gUGV0ZXJzb24NCk5ldXN0YXIsIEluYy4NCg== --_000_3DB8C765D5104A16A3AEF2DC4DA7B0ACteamneustar_ Content-Type: text/html; charset="utf-8" Content-ID: <18193025D007AB409289B21F85821E21@neustar.biz> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2 IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToy IDE1IDUgMiAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3Jt YWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGluOw0KCW1hcmdpbi1i b3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJp IixzYW5zLXNlcmlmO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXBy aW9yaXR5Ojk5Ow0KCWNvbG9yOmJsdWU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQph OnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9yaXR5 Ojk5Ow0KCWNvbG9yOnB1cnBsZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCnAubXNv bm9ybWFsMCwgbGkubXNvbm9ybWFsMCwgZGl2Lm1zb25vcm1hbDANCgl7bXNvLXN0eWxlLW5hbWU6 bXNvbm9ybWFsOw0KCW1zby1tYXJnaW4tdG9wLWFsdDphdXRvOw0KCW1hcmdpbi1yaWdodDowaW47 DQoJbXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87DQoJbWFyZ2luLWxlZnQ6MGluOw0KCWZvbnQt c2l6ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0Kc3Bhbi5F bWFpbFN0eWxlMTgNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWwtcmVwbHk7DQoJZm9udC1mYW1p bHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJY29sb3I6d2luZG93dGV4dDt9DQouTXNvQ2hwRGVm YXVsdA0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25seTsNCglmb250LXNpemU6MTAuMHB0O30N CkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtzaXplOjguNWluIDExLjBpbjsNCgltYXJnaW46MS4waW4g MS4waW4gMS4waW4gMS4waW47fQ0KZGl2LldvcmRTZWN0aW9uMQ0KCXtwYWdlOldvcmRTZWN0aW9u MTt9DQotLT48L3N0eWxlPg0KPC9oZWFkPg0KPGJvZHkgbGFuZz0iRU4tVVMiIGxpbms9ImJsdWUi IHZsaW5rPSJwdXJwbGUiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48YnI+DQombHQ7Sm9uJmd0O0luLWJh bmQgU1RJUiBhZGRzIHRoZSB2ZWN0b3IgdGhhdCB5b3VyIHRyYWZmaWMgbWlnaHQgbm90IGdvIFNJ UCBlbmQtdG8tZW5kIGFuZCB0aHVzIFNUSVIgZG9lc24ndCB3b3JrLCB3aGljaCBpcywgd2VsbCwg YSBwcmV0dHkgYmlnIHZlY3Rvci4gT2YgY291cnNlIGl0J3MgYSB0cmFkZS1vZmYuIFRoZXJlIGFy ZSBhIG51bWJlciBvZiBjb3VudGVybWVhc3VyZXMgZGVzY3JpYmVkIGluIHRoZSBkb2N1bWVudCB0 byB0aHdhcnQgc2ltcGxlIHRyYWZmaWMNCiBhbmFseXNpcy4mbHQ7L0pvbiZndDs8bzpwPjwvbzpw PjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVp biI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+W01CXSBJIHdhcyB0aGlua2luZyBzb21ldGhp bmcgaXMgbWlzc2luZyBmcm9tIHRoaXMgc2VjdGlvbiBhbmQgcGVyaGFwcyBhZGRpbmcgYSBzdGF0 ZW1lbnQgaW4gdGhlIHNhbWUgdmFpbiBhcyB5b3VyIHJlc3BvbnNlIGNvdWxkIGJlIGhlbHBmdWwu Jm5ic3A7IEFuZCwgSSB0aGluayBoaWdobGlnaHRpbmcgdGhlIHBvdGVudGlhbCBmb3IgYSBEb1Mg YXR0YWNrIGhlcmUgbWlnaHQNCiBiZSBoZWxwZnVsLiZuYnNwOyAmbmJzcDtbL01CXTxvOnA+PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj5XZSBjYW4gZG8gdGhhdCwgbm8gcHJvYmxlbS4gQmFzaWNhbGx5LCB3 ZeKAmWQgYWRkIHNvbWUgcG9pbnRlcnMgdG8gdGhlIGVhcmxpZXIgc2VjdGlvbnMgd2hlcmUgdGhv c2UgbWVhc3VyZXMgYXJlIGRpc2N1c3NlZC4NCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5Kb24g UGV0ZXJzb248bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPk5ldXN0YXIsIElu Yy48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_3DB8C765D5104A16A3AEF2DC4DA7B0ACteamneustar_--