From nobody Fri Oct 9 07:14:03 2020 Return-Path: X-Original-To: stir@ietf.org Delivered-To: stir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id C7DD33A082C; Fri, 9 Oct 2020 07:13:58 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: stir@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 7.19.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: stir@ietf.org Message-ID: <160225283873.16740.10202145667406309076@ietfa.amsl.com> Date: Fri, 09 Oct 2020 07:13:58 -0700 Archived-At: Subject: [stir] I-D Action: draft-ietf-stir-rph-emergency-services-03.txt X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.29 List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 09 Oct 2020 14:13:59 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Secure Telephone Identity Revisited WG of the IETF. Title : Assertion Values for a Resource Priority Header Claim and a SIP Priority Header Claim in Support of Emergency Services Networks Authors : Martin Dolly Chris Wendt Filename : draft-ietf-stir-rph-emergency-services-03.txt Pages : 8 Date : 2020-10-09 Abstract: This document adds new assertion values for a Resource Priority Header ("rph") claim and a new SIP Priority Header claim ("sph") for protection of the "psap-callback" value as part of the "rph" PASSporT extension, in support of the security of Emergency Services Networks for emergency call origination and callback. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-stir-rph-emergency-services/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-stir-rph-emergency-services-03 https://datatracker.ietf.org/doc/html/draft-ietf-stir-rph-emergency-services-03 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-stir-rph-emergency-services-03 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Fri Oct 9 07:18:25 2020 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 48AEA3A0838 for ; Fri, 9 Oct 2020 07:18:24 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.795 X-Spam-Level: X-Spam-Status: No, score=-1.795 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_FONT_LOW_CONTRAST=0.001, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=chriswendt-net.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ju2H3Q7oKp4t for ; Fri, 9 Oct 2020 07:18:21 -0700 (PDT) Received: from mail-qk1-x735.google.com (mail-qk1-x735.google.com [IPv6:2607:f8b0:4864:20::735]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CBA793A0820 for ; Fri, 9 Oct 2020 07:18:20 -0700 (PDT) Received: by mail-qk1-x735.google.com with SMTP id d20so10697946qka.5 for ; Fri, 09 Oct 2020 07:18:20 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=chriswendt-net.20150623.gappssmtp.com; s=20150623; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=WiiubHnViXFKz2hRzbG2nC5v327LJ2IxvMoDClc6PNc=; b=pJiol0QKWqQwkbCtw4IkzKd/gxDro7DLHG2cQwHU2C4hgx55QGxgnSa3KiIkSQsal6 hDel+UJtoOYNKw4CqJ90U4A9QlhnYwNLD7R2RZZ+9eNV3+jJ6TcV97k9WkW5hi/jm8eP Fhcjd7knkVp2n7yJ6AJvV/orYVCaB44yhT2EhhdMWm6zyIyo/Cc5X17y6oSn7dxZjei3 oQYzWUbOhi5CjCuc31IDYSfwwRJDio63zBAZfILqUYS2jRIS+fKq4tAYrH6orM4/6kIg vOWeqJEevfxC5J4GYeSEzg54EvYK9dQ6cPliFsm1nxXJiPrqqfxzXqDy5k9PS4iIz6z6 DY0g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=WiiubHnViXFKz2hRzbG2nC5v327LJ2IxvMoDClc6PNc=; b=JdXFtsrOKP5bJWRssyXUecsnQq0WXIqgQd0ZLckD2v48IL8lukRIHE8vjxQf3qPLPM tFMkl+AkisHDQHMZ64L7uDlPzFEoYM3riQAG7ysudrzFENrl29yMDW6xZ77PpTQuIP+d djzTUO2XTKBlT7fv0a0Ls33Gnih/N7OPeluHZKd47EnWaTk9k2I9ielgNki2kyTb422a RwHn/arJZvJ+ylMttEloynr5oAvUX0cx9JiSyOPXcRhUiPfK0FwUXfYlBPxFoU0nneri 1rW3eqtvys/O9jgWgqcsHCMv6+PU3c6JIYJCkqzZ14ZtcGmXnV4PG5AnWAR/CbGyqFh8 coFQ== X-Gm-Message-State: AOAM531rSTXvi5kqJ9lY1Jqqau+L90HPJYozJkzw6bMGEAAIN7/Q8jmg h4wzvFqoVn1rhp8+L45Fft4bRQ== X-Google-Smtp-Source: ABdhPJxwMpK7gII69dPEY+W8YETSb9R4T5p/SghWGzCRNW2sRQPyDHnR8qksvHSK/XSgpdq/RImpKQ== X-Received: by 2002:a37:448a:: with SMTP id r132mr12461173qka.261.1602253099778; Fri, 09 Oct 2020 07:18:19 -0700 (PDT) Received: from [192.168.0.153] (c-69-242-45-210.hsd1.pa.comcast.net. [69.242.45.210]) by smtp.gmail.com with ESMTPSA id h18sm6227843qkl.12.2020.10.09.07.18.18 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Fri, 09 Oct 2020 07:18:19 -0700 (PDT) From: Chris Wendt Message-Id: <7E2BC364-2CCF-43EE-BFAF-9B9A29A2BE11@chriswendt.net> Content-Type: multipart/alternative; boundary="Apple-Mail=_5069A4E2-D974-452C-9392-AF84A76C8496" Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.120.23.2.4\)) Date: Fri, 9 Oct 2020 10:18:18 -0400 In-Reply-To: Cc: Brian Rosen , "draft-ietf-stir-rph-emergency-services@ietf.org" , "stir@ietf.org" To: Jack Rickard References: <959DCC43-1686-49D3-9195-719CF65C9EE9@brianrosen.net> <14ACD074-FD66-4161-AC7A-ADB07127BE2D@chriswendt.net> <0D26A9F6-5559-4273-ACBA-9501E958DF22@chriswendt.net> X-Mailer: Apple Mail (2.3608.120.23.2.4) Archived-At: Subject: Re: [stir] Review of draft-ietf-stir-rph-emergency-services X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 09 Oct 2020 14:18:24 -0000 --Apple-Mail=_5069A4E2-D974-452C-9392-AF84A76C8496 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 So, we had discussions with the experts on =E2=80=98rph=E2=80=99 and = emergency services and agreed to do a 03 rev of this draft that does = indeed modify the procedures to remove the ESOrig/ESCallback and = incorporate the esnet.x value into the =E2=80=9Cauth=E2=80=9D object = array. Hopefully this addresses the concerns and makes things a bit = simpler. Thanks for the input. Please, to everyone, review and provide comments. Thanks. -Chris > On Sep 3, 2020, at 9:28 AM, Jack Rickard = wrote: >=20 > I agree with what you have said there, however Section 4.2 of 8443 = also states that you should strip from the INVITE any = 'Resource-Priority' header that isn't validated by the passports, which = in this case would be the "esnet.x" header. This doesn't seem like a = good behaviour to me, which is why I think "esnet" should go in the = "auth" claim (as an signing service that didn't implement this would do = anyway), at which point I don't see what utility the "ES*" claims = provide. > =20 > Thanks, > Jack > =20 > From: Chris Wendt =20 > Sent: 02 September 2020 21:00 > To: Jack Rickard > Cc: Brian Rosen ; = draft-ietf-stir-rph-emergency-services@ietf.org; stir@ietf.org > Subject: Re: [stir] Review of draft-ietf-stir-rph-emergency-services > =20 > Not sure why they would break anything. I think the idea is that if = you are doing emergency services you should not include =E2=80=9Cauth=E2=80= =9D key and value. If you implement only 8443 and you only know what to = do with =E2=80=9Cauth=E2=80=9D and =E2=80=9Cauth=E2=80=9D is not = included in the PASSporT you are verifying, you must ignore other key = values you don=E2=80=99t understand. Therefore the validation will fail = and you should not try to provide any type of priority service with that = call. This is approach for all PASSporTs with newly defined claims and = key values in general. =20 > =20 > -Chris >=20 >=20 > On Sep 2, 2020, at 5:33 AM, Jack Rickard > wrote: > =20 > Hi Chris, > =20 > I'm still unconvinced about the ESorig and EScallback keys, I'm happy = for them to be added as long as they don't break anything. The problem I = see is with an intermediate that implements 8443 but not this spec: if = "esnet.x" isn't in the auth claim the it should remove "esnet.x" from = the 'Resource-Priority' header, which seems like a bad thing to me. Even = with this spec it's not currently clear that you shouldn't do that as = there's nothing overriding that text from 8443 currently. > =20 > As for compact form, I'm perfectly happy with it remaining = unspecified, it just surprised me. > =20 > Thanks, > Jack > =20 > From: Chris Wendt >=20 > Sent: 25 August 2020 16:15 > To: Jack Rickard > > Cc: Brian Rosen >; = draft-ietf-stir-rph-emergency-services@ietf.org = ; stir@ietf.org = > Subject: Re: [stir] Review of draft-ietf-stir-rph-emergency-services > =20 > Hi Jack,=20 > =20 > I think we still want to keep =E2=80=9Cauth=E2=80=9D and = =E2=80=9CESorig/ESCallback=E2=80=9D as separate and distinct key/value = objects, i see your comments as maybe disagreement stylistically but = didn=E2=80=99t see anything to suggest that it wouldn=E2=80=99t work. = The reasoning though is that =E2=80=9Cauth=E2=80=9D is intended to be = specific to priority services only, not extensible for other = applications. And the fact of the matter is key/values are cheap, no = reason we can=E2=80=99t have new values and be explicit about the = intent. This document is specific to 911 and emergency services and to = extend the key/values defined for =E2=80=98rph=E2=80=99 claim and = =E2=80=98rph=E2=80=99 PASSporT extension. > =20 > I will make this clearer in the document and explicitly say that = =E2=80=9Cauth=E2=80=9D should not be used for emergency services = purposes of using resource priority header. > =20 > I think it would also make sense to make it clear that that this = document extends 8443 and linking the documents. > =20 > For compact form, we think it would confuse folks to add provisions = for compact form or allow it for little gain, and therefore prefer to = leave it undefined. > =20 > Thanks. > =20 > -Chris >=20 >=20 >=20 > On Aug 20, 2020, at 1:30 PM, Jack Rickard > wrote: > =20 > It's not clear that this spec relies on that, and I'm not sure that it = should? To me it seems like this could be more widely applicable. > =20 > Would you be able to address, from a verification service's point of = view, what it should do? I think that will clear up why "Esorig" and = "EScallback" are useful above plain "auth". > I think the spec would benefit from that section as well Section 4 of = RFC 8443 and section 11 of draft-ietf-stir-passport-rcd-06 are both = incredibly useful. > =20 > Thanks, > Jack > =20 > From: Brian Rosen >=20 > Sent: 19 August 2020 14:40 > To: Jack Rickard > > Cc: draft-ietf-stir-rph-emergency-services@ietf.org = ; stir@ietf.org = > Subject: Re: [stir] Review of draft-ietf-stir-rph-emergency-services > =20 > About 20% of the US has now upgraded to NG9-1-1, although most service = providers haven=E2=80=99t yet. The wireless carriers are moving towards = it; testing is underway. =20 > I will have a companion document in sipcore that handles the signaling = aspects of this mechanism. For the older E911 system, none of stir = really helps because the existing system is built on the older Class 4 = switches (=E2=80=9CSelective Routers=E2=80=9D). All of this mechanism = is for NG9-1-1 and the equivalent services in the rest of the world, = based on IETF standards (RFC6881, RFC5222, and several others). =20 >=20 >=20 >=20 >=20 > On Aug 19, 2020, at 7:19 AM, Jack Rickard > wrote: > =20 > Thanks, that's really useful, however, I'm not convinced. > =20 > For ESorig, as far as I know this isn't currently always the case, I = am aware of situations where emergency calls just look like normal calls = with a number of 911. I'm also still unclear about what affect this has, = as you can currently already sign emergency calls using the standard = mechanisms (barring the whole "urn:service:sos" tn which I don't believe = is standardised for STIR yet?) by putting "esnet.0" in the auth field = of an rph passport. > =20 > For EScallback, if the sph and "rph.auth" claims cover theis entirely = why is EScallback needed? I'm also still unclear what the verification = service behaviour is here. > =20 > I'm still unclear as to how this spec helps with allowing and = preventing malicious use of emergency calls. You can already put esnet = resource priority pairs in the "rph.auth" claim and that seems to = provide as much security as this does. I do agree the sph claim does = provide value, however. > =20 > I did just realise that the esnet Resource Priority needs to be in the = "rph.auth" claim or the logic from that rfc will kick in and remove it, = as per: > RFC 8443, section 4.2 > In such scenarios, the SIP 'Resource-Priority' header field SHOULD = be > stripped from the SIP request, and the network entities should = treat > the call as an ordinary call. > =20 > I'll note that some of my questions and concerns haven't been = addressed yet, I'm happy to resolve this first, just making a note so = that they don't get lost/I don't forget about them. > Jack > =20 > From: Brian Rosen >=20 > Sent: 18 August 2020 22:31 > To: Jack Rickard > > Cc: draft-ietf-stir-rph-emergency-services@ietf.org = ; stir@ietf.org = > Subject: Re: [stir] Review of draft-ietf-stir-rph-emergency-services > =20 > Let=E2=80=99s keep the two use cases separate:=20 > ESorig is an emergency call (user to authority). > EScallback is a call from authority to user. > =20 > For ESorg, the call is marked with a Request-URI of urn:service:sos. = The =E2=80=9CTo=E2=80=9D field is ignored in routing and handling the = call. That=E2=80=99s how you know this is an emergency call. For stir = purposes, the =46rom is an ordinary identifier, and gets treated in the = normal way. However, the rph value can only be used by a valid = emergency call, and a valid emergency call is a Request URI of = urn:service:sos, and a valid From. So you don=E2=80=99t have any = knowledge of emergency services identifiers, only the Request URI of = urn:service:sos. =20 > =20 > For EScallback, the marking is a distinguished value in SIP Priority. = If a call has that value, it=E2=80=99s a call back. The originating = service provider knows who are the authorities who are allowed to place = call backs, so the check is what is in SIP Priority, and one of the = allowed authorities in From. As a practical matter, in most cases, the = call will be signed by the emergency authorities themselves, who will be = able to get appropriate credentials for this purpose. In most cases = I=E2=80=99m aware of, the To in an emergency call won=E2=80=99t match = the =46rom in a Callback, but it=E2=80=99s possible for that to happen, = and we want to allow it. > =20 > Esnet is a Resource Priority Header namespace, not a SIP Priority = value. We=E2=80=99re allowing emergency calls and call backs to use = rph, and we=E2=80=99re protecting against malicious use of it. So = unless the call has urn:service:sos in Request URI, or the right SIP = Priority in a call back (and from an authorized authority) they can=E2=80=99= t use rph with the esnet namespace. Generally, unless under attack, = emergency calls go through even if there isn=E2=80=99t a passport. Many = networks won=E2=80=99t offer actual priority to emergency calls, but the = emergency services networks (ESInets) will. =20 > =20 > If a call arrives anywhere with an rph using esnet, and isn=E2=80=99t = an emergency call, with the appropriate passport, any intermediary can = refuse to give it any priority, The emergency authorities may accept a = call without a valid passport, but they might treat it with much more = suspicion than they would any other call. > =20 > For call backs, the network may have special behavior. For example, = it may send the call to the device that placed the emergency call, = rather than, for example, voice mail. The network has to be able to = trust that SIP Priority is set appropriately. It will also have rph = using esnet, and the network can grant it appropriate priority if it has = that capability, and would not allow esnet otherwise. > =20 > The only value in covering other uses of SIP Priority is to protect = against middle boxes modifying it. We don=E2=80=99t really have use = cases for that. It probably wouldn=E2=80=99t hurt to allow it though. > =20 > Does that help? > =20 > Brian > =20 >=20 >=20 >=20 >=20 >=20 > On Aug 14, 2020, at 1:21 PM, Jack Rickard = > wrote: > =20 > I have reviewed draft-ietf-stir-rph-emergency-services-02 and have = some concerns and questions. I don't believe this spec is implementable = in its current form. > =20 > Thanks, > Jack > =20 > Why are "ESorig" and "EScallback" distinct? > They seem to serve a very similar purpose with the only difference = being whether orig or dest should be the emergency services. I don't = believe there's any check that can be done to validate: > When using "ESorig" as the "rph" assertion value, the "orig" claim = of > the PASSporT MUST represent the calling party number that initiates > the call to emergency services. > This (and the equivalent statement for EScallback) don't seem possible = to me to check (barring the standard orig/dest checking).. > This would make the check "at least one of the parties should be the = emergency services" enough to validate that this was a reasonable call. > =20 > =20 > Why have them at all rather than just using auth? > This is very possibly an issue with my understanding, but I'm not = clear on why "ESorig" and "EScallback" even need to exist. "esnet.0" = etc. are SIP Resource Priority headers, so should be included in the = "auth" field anyway by the RPH spec. This spec appears to apply extra = constraints (that a one of the callers must be the emergency services) = for the "esnet" namespace but it's not clear why entirely separate = claims are needed. > =20 > In a similar vein, what should a verifier do if it receives a call = containing an invalid "ESorig" or "EScallback" value or the passport is = invalid/untrusted, I'm assuming the behaviour is the same as for auth = but this isn't clear. Although stripping the fact that this is an = emergency call is potentially dangerous.. > =20 > =20 > Specify the type of the "ESorig" and "EScallback" claims. > This specification currently doesn't specify the type of the new = fields, there are only examples and this isn't enough. It looks like = they both follow the same scheme as the rph "auth" claim, however = "esnet,x" doesn't quite fit into that due to the comma and that x isn't = a valid priority value. > =20 > =20 > Why is sph limited to psap-callback? What should the verifier do if it = isn't that? What should it do if it is? > I'm not entirely clear on the purpose of the sph claim, however, it = seems odd that it doesn't cover the full range of possible values for = the SIP Priority Header. Is there a reason that it doesn't cover the = "non-urgent", "normal", "urgent", or "emergency" values? > There is also no verifier behaviour defined here, should the verifier = remove the Priority header if it receives an invite with no passports = signing for it? That seems dangerous to me but would be consistent with = rph. Alternatively, what should the verifier do if it receives an invite = with a valid passport claiming sph but with no Priority header should it = add it in? I'm not sure the spec needs to be too prescriptive here, = however some mention of verifier behaviour and the associated security = considerations would be useful. >=20 >=20 > Should the spec be stronger about the compact form? > Section 3 currently states > The use of the compact form of PASSporT is not specified in this > document. > However, a compact-form passport following this spec would be hard to = verify as it introduces multiple possible rph variants, I think this = spec could go further and say you shouldn't/mustn't. >=20 >=20 > What is the requirement of these new parameters. > As I understand it, the passport spec allows you to create a passport = containing whatever JWT fields you want and verifiers should just ignore = any fields they don't understand. Unless the "ppt" claim is set, which = indicates that verifiers should discard it if they don't recognise that = passport type. As this spec adds additional fields to an existing = passport type it isn't immediately clear what the behaviour should be. = Specifically, is an rph passport containing only "rph.ESorig" valid now = (where it wouldn't be before because auth isn't present), is an rph = passport containing no rph and only sph valid, and what does a non-rph = passport with sph or ESorig set mean? > =20 > _______________________________________________ > stir mailing list > stir@ietf.org > https://www.ietf.org/mailman/listinfo/stir = --Apple-Mail=_5069A4E2-D974-452C-9392-AF84A76C8496 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 So, = we had discussions with the experts on =E2=80=98rph=E2=80=99 and = emergency services and agreed to do a 03 rev of this draft that does = indeed modify the procedures to remove the ESOrig/ESCallback and = incorporate the esnet.x value into the =E2=80=9Cauth=E2=80=9D object = array.  Hopefully this addresses the concerns and makes things a = bit simpler.  Thanks for the input.

Please, to everyone, review and provide = comments.

Thanks.

-Chris

On Sep 3, 2020, at 9:28 AM, = Jack Rickard <Jack.Rickard@metaswitch.com> wrote:

I agree = with what you have said there, however Section 4.2 of 8443 also states = that you should strip from the INVITE any 'Resource-Priority' header = that isn't validated by the passports, which in this case would be the = "esnet.x" header. This doesn't seem like a good behaviour to me, which = is why I think "esnet" should go in the "auth" claim (as an signing = service that didn't implement this would do anyway), at which point I = don't see what utility the "ES*" claims provide.
 
Thanks,
Jack
 
From: Chris Wendt <chris-ietf@chriswendt.net> 
Sent: 02 = September 2020 21:00
To: Jack Rickard <Jack.Rickard@metaswitch.com>
Cc: Brian= Rosen <br@brianrosen.net>; draft-ietf-stir-rph-emergency-services@ietf.org; stir@ietf.org
Subject: Re: [stir] Review of = draft-ietf-stir-rph-emergency-services
 
Not sure = why they would break anything.  I think the idea is that if you are = doing emergency services you should not include =E2=80=9Cauth=E2=80=9D = key and value.  If you implement only 8443 and you only know what = to do with =E2=80=9Cauth=E2=80=9D and =E2=80=9Cauth=E2=80=9D is not = included in the PASSporT you are verifying, you must ignore other key = values you don=E2=80=99t understand. Therefore the validation will fail = and you should not try to provide any type of priority service with that = call.  This is approach for all PASSporTs with newly defined claims = and key values in general.  
 
-Chris


On = Sep 2, 2020, at 5:33 AM, Jack Rickard <Jack.Rickard@metaswitch.com> wrote:
 
Hi Chris,
 
I'm still = unconvinced about the ESorig and EScallback keys, I'm happy for them to = be added as long as they don't break anything. The problem I see is with = an intermediate that implements 8443 but not this spec: if "esnet.x" = isn't in the auth claim the it should remove "esnet.x" from the = 'Resource-Priority' header, which seems like a bad thing to me. Even = with this spec it's not currently clear that you shouldn't do that as = there's nothing overriding that text from 8443 currently.
 
As for = compact form, I'm perfectly happy with it remaining unspecified, it just = surprised me.
 
Thanks,
Jack
 
From: Chris Wendt <chris-ietf@chriswendt.net> 
Sent: 25 = August 2020 16:15
To: Jack Rickard <Jack.Rickard@metaswitch.com>
Cc: Brian= Rosen <br@brianrosen.net>; draft-ietf-stir-rph-emergency-services@ietf.org; stir@ietf.org
Subject: Re: [stir] Review of = draft-ietf-stir-rph-emergency-services
 
Hi Jack, 
 
I think we still want to = keep =E2=80=9Cauth=E2=80=9D and =E2=80=9CESorig/ESCallback=E2=80=9D as = separate and distinct key/value objects, i see your comments as maybe = disagreement stylistically but didn=E2=80=99t see anything to suggest = that it wouldn=E2=80=99t work.  The reasoning though is that = =E2=80=9Cauth=E2=80=9D is intended to be specific to priority services = only, not extensible for other applications.  And the fact of the = matter is key/values are cheap, no reason we can=E2=80=99t have new = values and be explicit about the intent.  This document is specific = to 911 and emergency services and to extend the key/values defined for = =E2=80=98rph=E2=80=99 claim and =E2=80=98rph=E2=80=99 PASSporT = extension.
 
I will make this clearer in the document and = explicitly say that =E2=80=9Cauth=E2=80=9D should not be used for = emergency services purposes of using resource priority header.
 
I think it would also make = sense to make it clear that that this document extends 8443 and linking = the documents.
 
For compact form, we think it would confuse = folks to add provisions for compact form or allow it for little gain, = and therefore prefer to leave it undefined.
 
Thanks.
 
-Chris



On Aug 20, 2020, at 1:30 = PM, Jack Rickard <Jack.Rickard@metaswitch.com> wrote:
 
It's not clear that this = spec relies on that, and I'm not sure that it should? To me it seems = like this could be more widely applicable.
 
Would you be able to = address, from a verification service's point of view, what it should do? = I think that will clear up why "Esorig" and "EScallback" are useful = above plain "auth".
I think the spec would = benefit from that section as well Section 4 of RFC 8443 and section 11 = of draft-ietf-stir-passport-rcd-06 are both incredibly useful.
 
Thanks,
Jack
 
From: Brian = Rosen <br@brianrosen.net> 
Sent: 19 = August 2020 14:40
To: Jack Rickard <Jack.Rickard@metaswitch.com>
Cc: draft-ietf-stir-rph-emergency-services@ietf.org; stir@ietf.org
Subject: Re: [stir] Review of = draft-ietf-stir-rph-emergency-services
 
About 20% of the US has now upgraded to NG9-1-1, although = most service providers haven=E2=80=99t yet.  The wireless carriers = are moving towards it; testing is underway.  
I will have a companion document in = sipcore that handles the signaling aspects of this mechanism.  For = the older E911 system, none of stir really helps because the existing = system is built on the older Class 4 switches (=E2=80=9CSelective = Routers=E2=80=9D).  All of this mechanism is for NG9-1-1 and the = equivalent services in the rest of the world, based on IETF standards = (RFC6881, RFC5222, and several others).  




On Aug 19, 2020, at 7:19 AM, Jack = Rickard <Jack.Rickard@metaswitch.com> wrote:
 
Thanks, that's really = useful, however, I'm not convinced.
 
For ESorig, as far as I = know this isn't currently always the case, I am aware of situations = where emergency calls just look like normal calls with a number of 911. = I'm also still unclear about what affect this has, as you can currently = already sign emergency calls using the standard mechanisms (barring the = whole "urn:service:sos" tn which I don't believe is standardised for = STIR yet?)  by putting "esnet.0" in the auth field of an rph = passport.
 
For EScallback, if the sph = and "rph.auth" claims cover theis entirely why is EScallback needed? I'm = also still unclear what the verification service behaviour is here.
 
I'm still unclear as to = how this spec helps with allowing and preventing malicious use of = emergency calls. You can already put esnet resource priority pairs in = the "rph.auth" claim and that seems to provide as much security as this = does. I do agree the sph claim does provide value, however.
 
I did just realise that = the esnet Resource Priority needs to be in the "rph.auth" claim or the = logic from that rfc will kick in and remove it, as per:
RFC 8443, section 4.2
   In = such scenarios, the SIP 'Resource-Priority' header field SHOULD = be
   stripped from the SIP request, and the network = entities should treat
   the = call as an ordinary call.
 
I'll note that some of my = questions and concerns haven't been addressed yet, I'm happy to resolve = this first, just making a note so that they don't get lost/I don't = forget about them.
Jack
 
From: Brian Rosen <br@brianrosen.net> 
Sent: 18 = August 2020 22:31
To: Jack Rickard <Jack.Rickard@metaswitch.com>
Cc: draft-ietf-stir-rph-emergency-services@ietf.org; stir@ietf.org
Subject: Re: [stir] Review of = draft-ietf-stir-rph-emergency-services
 
Let=E2=80=99s keep the two = use cases separate: 
ESorig is = an emergency call (user to authority).
EScallback = is a call from authority to user.
 
For = ESorg, the call is marked with a Request-URI of urn:service:sos. =  The =E2=80=9CTo=E2=80=9D field is ignored in routing and handling = the call.  That=E2=80=99s how you know this is an emergency call. =   For stir purposes, the =46rom is an ordinary identifier, and gets = treated in the normal way.  However, the rph value can only be used = by a valid emergency call, and a valid emergency call is a Request URI = of urn:service:sos, and a valid From.  So you don=E2=80=99t have = any knowledge of emergency services identifiers, only the Request URI of = urn:service:sos.   
 
For = EScallback, the marking is a distinguished value in SIP Priority. =  If a call has that value, it=E2=80=99s a call back.  The = originating service provider knows who are the authorities who are = allowed to place call backs, so the check is what is in SIP Priority, = and one of the allowed authorities in From.  As a practical matter, = in most cases, the call will be signed by the emergency authorities = themselves, who will be able to get appropriate credentials for this = purpose.  In most cases I=E2=80=99m aware of, the To in an = emergency call won=E2=80=99t match the =46rom in a Callback, but it=E2=80=99= s possible for that to happen, and we want to allow it.
 
Esnet is = a Resource Priority Header namespace, not a SIP Priority value. =  We=E2=80=99re allowing emergency calls and call backs to use rph, = and we=E2=80=99re protecting against malicious use of it.  So = unless the call has urn:service:sos in Request URI, or the right SIP = Priority in a call back (and from an authorized authority) they can=E2=80=99= t use rph with the esnet namespace.  Generally, unless under = attack, emergency calls go through even if there isn=E2=80=99t a = passport.  Many networks won=E2=80=99t offer actual priority to = emergency calls, but the emergency services networks (ESInets) will. =  
 
If a call = arrives anywhere with an rph using esnet, and isn=E2=80=99t an emergency = call, with the appropriate passport,  any intermediary can refuse = to give it any priority,  The emergency authorities may accept a = call without a valid passport, but they might treat it with much more = suspicion than they would any other call.
 
For call = backs, the network may have special behavior.  For example, it may = send the call to the device that placed the emergency call, rather than, = for example, voice mail.  The network has to be able to trust that = SIP Priority is set appropriately.  It will also have rph using = esnet, and the network can grant it appropriate priority if it has that = capability, and would not allow esnet otherwise.
 
The only = value in covering other uses of SIP Priority is to protect against = middle boxes modifying it.  We don=E2=80=99t really have use cases = for that.  It probably wouldn=E2=80=99t hurt to allow it = though.
 
Does that = help?
 
Brian
 





On Aug 14, 2020, at 1:21 PM, Jack Rickard <Jack.Rickard=3D40metaswitch.com@dmarc.ietf.org> = wrote:
 
I have reviewed = draft-ietf-stir-rph-emergency-services-02 and have some concerns and = questions. I don't believe this spec is implementable in its current = form.
 
Thanks,
Jack
 
Why are "ESorig" and "EScallback" distinct?
They seem = to serve a very similar purpose with the only difference being whether = orig or dest should be the emergency services. I don't believe there's = any check that can be done to validate:
   When using "ESorig" as the "rph" assertion = value, the "orig" claim of
   the PASSporT MUST represent the calling party = number that initiates
   the call to emergency services.
This (and = the equivalent statement for EScallback) don't seem possible to me to = check (barring the standard orig/dest checking)..
This = would make the check "at least one of the parties should be the = emergency services" enough to validate that this was a reasonable = call.
 
 
Why have them at all rather than just using auth?
This is = very possibly an issue with my understanding, but I'm not clear on why = "ESorig" and "EScallback" even need to exist. "esnet.0" etc. are SIP = Resource Priority headers, so should be included in the "auth" field = anyway by the RPH spec. This spec appears to apply extra constraints = (that a one of the callers must be the emergency services) for the = "esnet" namespace but it's not clear why entirely separate claims are = needed.
 
In a = similar vein, what should a verifier do if it receives a call containing = an invalid "ESorig" or "EScallback" value or the passport is = invalid/untrusted, I'm assuming the behaviour is the same as for auth = but this isn't clear. Although stripping the fact that this is an = emergency call is potentially dangerous..
 
 
Specify the type of the "ESorig" and "EScallback" = claims.
This specification currently doesn't specify the = type of the new fields, there are only examples and this isn't enough. = It looks like they both follow the same scheme as the rph "auth" claim, = however "esnet,x" doesn't quite fit into that due to the comma and that = x isn't a valid priority value.
 
 
Why is sph limited to psap-callback? What should the verifier = do if it isn't that? What should it do if it is?
I'm not = entirely clear on the purpose of the sph claim, however, it seems odd = that it doesn't cover the full range of possible values for the SIP = Priority Header. Is there a reason that it doesn't cover the = "non-urgent", "normal", "urgent", or "emergency" values?
There is = also no verifier behaviour defined here, should the verifier remove the = Priority header if it receives an invite with no passports signing for = it? That seems dangerous to me but would be consistent with rph. = Alternatively, what should the verifier do if it receives an invite with = a valid passport claiming sph but with no Priority header should it add = it in? I'm not sure the spec needs to be too prescriptive here, however = some mention of verifier behaviour and the associated security = considerations would be useful.


Should the = spec be stronger about the compact form?
Section 3 = currently states
   The use of the compact =
form of PASSporT is not specified in this
   document.
However, a compact-form = passport following this spec would be hard to verify as it introduces = multiple possible rph variants, I think this spec could go further and = say you shouldn't/mustn't.


What is the requirement of = these new parameters.
As I = understand it, the passport spec allows you to create a passport = containing whatever JWT fields you want and verifiers should just ignore = any fields they don't understand. Unless the "ppt" claim is set, which = indicates that verifiers should discard it if they don't recognise that = passport type. As this spec adds additional fields to an existing = passport type it isn't immediately clear what the behaviour should be. = Specifically, is an rph passport containing only "rph.ESorig" valid now = (where it wouldn't be before because auth isn't present), is an rph = passport containing no rph and only sph valid, and what does a non-rph = passport with sph or ESorig set mean?
 
_______________________________________________
stir mailing list
stir@ietf.org
https://www.ietf.org/mailman/listinfo/stir

= --Apple-Mail=_5069A4E2-D974-452C-9392-AF84A76C8496-- From nobody Sat Oct 10 15:29:27 2020 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C3A643A09DB for ; Sat, 10 Oct 2020 15:29:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.995 X-Spam-Level: X-Spam-Status: No, score=-1.995 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_FONT_LOW_CONTRAST=0.001, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=rbbn.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id h8on77klmbci for ; Sat, 10 Oct 2020 15:29:21 -0700 (PDT) Received: from us-smtp-delivery-181.mimecast.com (us-smtp-delivery-181.mimecast.com [63.128.21.181]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9A6013A09D5 for ; Sat, 10 Oct 2020 15:29:21 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rbbn.com; s=mimecast20180816; t=1602368960; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=TZ2n6Mn8E8ytMRtXn4nPXP2ZBoo0m9Bo8UaotJ9lIkY=; b=GdA+ejJTXj+tmB035gSTVfniTm4zDbyu6jjE8EvZE6VrI3XhkLKc783adkENp/FGQLf+u5 scZSex20u0d0Yvy1xFJL9+Gp7j/yW325w+JkaSQN/FU5FGlsyX2Se9zgOAn3g93HWeBkM8 nknQC9N6ym0n58HA15WP5AuYF0FcXQ4= Received: from NAM04-SN1-obe.outbound.protection.outlook.com (mail-sn1nam04lp2057.outbound.protection.outlook.com [104.47.44.57]) (Using TLS) by relay.mimecast.com with ESMTP id us-mta-254-gvOzXGW5PduchMQXS9y5Lg-1; Sat, 10 Oct 2020 18:29:17 -0400 Received: from BN7PR03MB3827.namprd03.prod.outlook.com (2603:10b6:408:23::13) by BN7PR03MB3427.namprd03.prod.outlook.com (2603:10b6:406:c2::15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3455.24; Sat, 10 Oct 2020 22:29:13 +0000 Received: from BN7PR03MB3827.namprd03.prod.outlook.com ([fe80::80a3:233e:f637:82ce]) by BN7PR03MB3827.namprd03.prod.outlook.com ([fe80::80a3:233e:f637:82ce%4]) with mapi id 15.20.3455.028; Sat, 10 Oct 2020 22:29:12 +0000 From: "Asveren, Tolga" To: Chris Wendt , Jack Rickard CC: "stir@ietf.org" , "draft-ietf-stir-rph-emergency-services@ietf.org" , Brian Rosen Thread-Topic: [stir] Review of draft-ietf-stir-rph-emergency-services Thread-Index: AdZrPXk4d/f2kRt0QXimDVa1DUwOuwKaVPgAABiWh4AACUk0gAA5+/HQAPcQIAABhbHxwAAWmFOAACRbGyAHFH28AABCKX5g Date: Sat, 10 Oct 2020 22:29:12 +0000 Message-ID: References: <959DCC43-1686-49D3-9195-719CF65C9EE9@brianrosen.net> <14ACD074-FD66-4161-AC7A-ADB07127BE2D@chriswendt.net> <0D26A9F6-5559-4273-ACBA-9501E958DF22@chriswendt.net> <7E2BC364-2CCF-43EE-BFAF-9B9A29A2BE11@chriswendt.net> In-Reply-To: <7E2BC364-2CCF-43EE-BFAF-9B9A29A2BE11@chriswendt.net> Accept-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [73.80.74.66] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 99172fbd-0abb-43bb-570e-08d86d6bea0d x-ms-traffictypediagnostic: BN7PR03MB3427: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000 x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0 x-microsoft-antispam-message-info: 3avLmyCIVgSZ/zYXzzJjolUHf2ukfC8/QFbzYRrcMLhCa4oWn78bQwqEheHwEaYBvtZmczEGdo4l/3DcJ4aNVoCbs4JFxMzkMWWuvlXkdqVc/M2lfQvTeq6ChVF1puDUy3NaNPenuNtt6gWWMFMZHAWIjiYbb7lsy9tT8DHlCbC3/DEjb9yeC9vibndagIW6QNUlhbUKbG8zZ+c9NIyJGY/nmAWAdPEtgigeoEmVfNZcE2mm/cOn77HGGx0lx6LLOWYPP4c15lD++lj+4GspS2Ggd+6iMgansUZwdfS3BUz1rEpJ5uQ7uUTd4sMa8hN5Q72rUOD1AqRxpnBhApoe6TjxBGhEkCwXAPP1uCoxQedvx0TZQAy9UOyzQz/MiK9tGCmgViQsi3LWR83Sp/zW9Q== x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:BN7PR03MB3827.namprd03.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(376002)(346002)(396003)(39850400004)(136003)(366004)(4326008)(86362001)(71200400001)(8936002)(77540400001)(8676002)(2906002)(26005)(186003)(5660300002)(55016002)(7696005)(9686003)(6506007)(53546011)(30864003)(33656002)(64756008)(66946007)(66446008)(76116006)(66556008)(110136005)(966005)(478600001)(316002)(52536014)(54906003)(66476007)(83080400001)(166002)(83380400001); DIR:OUT; SFP:1101 x-ms-exchange-antispam-messagedata: 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 x-ms-exchange-transport-forked: True x-mc-unique: gvOzXGW5PduchMQXS9y5Lg-1 x-originatororg: rbbn.com x-ms-exchange-crosstenant-authas: Internal x-ms-exchange-crosstenant-authsource: BN7PR03MB3827.namprd03.prod.outlook.com x-ms-exchange-crosstenant-network-message-id: 99172fbd-0abb-43bb-570e-08d86d6bea0d x-ms-exchange-crosstenant-originalarrivaltime: 10 Oct 2020 22:29:12.7346 (UTC) x-ms-exchange-crosstenant-fromentityheader: Hosted x-ms-exchange-crosstenant-id: 29a671dc-ed7e-4a54-b1e5-8da1eb495dc3 x-ms-exchange-crosstenant-mailboxtype: HOSTED x-ms-exchange-crosstenant-userprincipalname: o69DnX//6yhSb+Lelo0vOywTo5zdTKWYfBP3LiWoy8omr9Q0VKi4mvhCFE7V7qp/c1jIFYv10n2awfEicMW9Sw== x-ms-exchange-transport-crosstenantheadersstamped: BN7PR03MB3427 MIME-Version: 1.0 Authentication-Results: relay.mimecast.com; auth=pass smtp.auth=CUSA81A106 smtp.mailfrom=tasveren@rbbn.com X-Mimecast-Spam-Score: 0 X-Mimecast-Originator: rbbn.com Content-Language: en-US Content-Type: multipart/alternative; boundary="_000_BN7PR03MB3827DCC6788EEFEB1C20DCC9A5090BN7PR03MB3827namp_" Archived-At: Subject: Re: [stir] Review of draft-ietf-stir-rph-emergency-services X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 10 Oct 2020 22:29:26 -0000 --_000_BN7PR03MB3827DCC6788EEFEB1C20DCC9A5090BN7PR03MB3827namp_ Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: base64 Tm90IHJlYWxseSByZWxhdGVkIHRvIHRoZSByZWNlbnQgY2hhbmdlIGJ1dCBhIGZldyBxdWVzdGlv bnMvY29tbWVudHM6DQoNCg0KaS0NCiAgIFRoaXMgZG9jdW1lbnQgYWRkcyBuZXcgImF1dGgiIGFy cmF5IGtleSB2YWx1ZXMgZm9yIGEgUmVzb3VyY2UNCiAgIFByaW9yaXR5IEhlYWRlciAoInJwaCIp IGNsYWltIGRlZmluZWQgaW4gW1JGQzg0NDNdDQpXYXMgdGhlcmUgcmVhbGx5IGEgcmVzdHJpY3Rp b24gaW4gUkZDODQ0MyBvbiB0aGUgdmFsdWVzIHBvc3NpYmx5IGNhbiBiZSB1c2VkIGZvciDigJxy cGjigJ0gY2xhaW0/IE15IHJlYWRpbmcgaXMgdGhlcmUgd2FzbuKAmXQuIEkgd291bGQgc2F5IHRo aXMgZHJhZnQgaXMgbm90IGFkZGluZyBuZXcga2V5IHZhbHVlcyBidXQgZGVmaW5lcyBzZW1hbnRp Y3MgYXNzb2NpYXRlZCB3aXRoIHNvbWUga2V5IHZhbHVlcy4NCg0KDQppaS0gSW4gYWRkaXRpb24s IHRoZSBQQVNTUG9yVCBjbGFpbXMgYW5kIHZhbHVlcw0KICAgZGVmaW5lZCBpbiB0aGlzIGRvY3Vt ZW50IGFyZSBpbnRlbmRlZCBmb3IgdXNlIGluIGVudmlyb25tZW50cyB3aGVyZQ0KICAgdGhlcmUg YXJlIG1lYW5zIHRvIHZlcmlmeSB0aGF0IHRoZSBzaWduZXIgb2YgdGhlIFNJUCAnUmVzb3VyY2Ut DQogICBQcmlvcml0eScgYW5kICdQcmlvcml0eScgaGVhZGVyIGZpZWxkcyBpcyBhdXRob3JpdGF0 aXZlLg0KSXNu4oCZdCB0aGlzIGFscmVhZHkgY292ZXJlZCBieSDigJw3LjIgU29sdXRpb24gQ29u c2lkZXJhdGlvbnPigJ0gaW4gUkZDODQ0MyBpbiBhIGdlbmVyaWMgd2F5Pw0KDQppaWktIE1lYW5z IHRvIHZlcmlmeSB0aGF0IHRoZSBzaWduZXIgb2YgUmVzb3VyY2UtUHJpb3JpdHkvUHJpb3JpdHkg aGVhZGVyIGZpZWxkcyBpcyBhdXRob3JpdGF0aXZlDQpJdCBzZWVtcyB0aGUgZm9sbG93aW5nIHNl Y3Rpb24gZnJvbSBkcmFmdC1yb3Nlbi1zdGlyLWVtZXJnZW5jeS1jYWxscy0wMCBpcyByZWxldmFu dDoNCk1hbnkgY291bnRyaWVzIGFyZSBzdGFydGluZyB0byBhZG9wdCB0aGUgZW1lcmdlbmN5IGNh bGxpbmcgcGFyYWRpZ21zDQogICBwcm9tdWxnYXRlZCBieSB0aGUgSUVURi4gIEZvciBleGFtcGxl LCBpbiBOb3J0aCBBbWVyaWNhLCB0aGUgW2kzPGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9k cmFmdC1yb3Nlbi1zdGlyLWVtZXJnZW5jeS1jYWxscy0wMCNyZWYtaTM+XQ0KICAgc3RhbmRhcmQg ZGVmaW5lcyBJUCBiYXNlZCBlbWVyZ2VuY3kgY2FsbGluZyBuZXR3b3JrcywgZHJhd2luZyBmcm9t DQogICBJRVRGIHdvcmsuICBJbiB0aG9zZSBzeXN0ZW1zLCBhIFBLSSBpcyBiZWluZyBjcmVhdGVk LCB3aXRoIGEgdHJ1c3RlZA0KICAgcm9vdCwgdGhlICJQU0FQIENyZWRlbnRpYWxpbmcgQWdlbmN5 IiAoUENBKS4gIFRoZSBQQ0EgcHJvdmlkZXMgYSByb290DQogICBvZiB0cnVzdCB0aGF0IGNvdWxk IGJlIHVzZWQgdG8gc2lnbiBjYWxsLWJhY2tzIHByb3RlY3RpbmcgdGhlIFNJUA0KICAgUHJpb3Jp dHkgYW5kIFJlc291cmNlIFByaW9yaXR5IGhlYWRlciBmaWVsZHMuDQpBcmd1YWJseSBhbiBhbHRl cm5hdGl2ZSB3b3VsZCBiZSBhZGRpbmcgYSBuZXcgZXh0ZW5zaW9uIHRvIFNUSVIgY2VydGlmaWNh dGVzIGEgbGEgVE4gQXV0aG9yaXphdGlvbiBMaXN0IGluIFJGQzgyMjYuIEFjdHVhbGx5IEkgd291 bGQgcHJlZmVyIHRoaXMgYXBwcm9hY2ggYXMgaXQgd291bGQgZWxpbWluYXRlIGFtYmlndWl0eSwg d291bGQganVzdCB3b3JrIHdpdGggYSBzaW5nbGUgY2VydGlmaWNhdGUvUEtJIGFuZCBiZSBnZW5l cmljYWxseSBhcHBsaWNhYmxlLg0KDQppdi0gQSBxdWVzdGlvbiByZWdhcmRpbmcgZHJhZnQtcm9z ZW4tc3Rpci1lbWVyZ2VuY3ktY2FsbHMtMDANCg0KICAgVGhpcyBkb2N1bWVudCByZWNvbW1lbmRz IHRoYXQgZW1lcmdlbmN5IGNhbGxzIGZyb20gb3V0c2lkZSBhbg0KICAgRW1lcmdlbmN5IFNlcnZp Y2VzIElQIE5ldHdvcmsgYmUgYXNzaWduZWQgZXNuZXQuMC4NClNob3VsZCB0aGlzIG5lIGVzbmV0 LjE/IElmIGl0IGluZGVlZCBpdCBlc25ldC4wIHRoZW4gd2h5IGlzIHRoZSB2YWx1ZSBlc25ldC4x IGZvciBlbWVyZ2VuY3kgY2FsbHMgaW4gZHJhZnQtaWV0Zi1ycGgtZW1lcmdlbmN5LXNlcnZpY2Vz Pw0KDQoNClRoYW5rcywNClRvbGdhDQoNCkZyb206IHN0aXIgPHN0aXItYm91bmNlc0BpZXRmLm9y Zz4gT24gQmVoYWxmIE9mIENocmlzIFdlbmR0DQpTZW50OiBGcmlkYXksIE9jdG9iZXIgOSwgMjAy MCAxMDoxOCBBTQ0KVG86IEphY2sgUmlja2FyZCA8SmFjay5SaWNrYXJkQG1ldGFzd2l0Y2guY29t Pg0KQ2M6IHN0aXJAaWV0Zi5vcmc7IGRyYWZ0LWlldGYtc3Rpci1ycGgtZW1lcmdlbmN5LXNlcnZp Y2VzQGlldGYub3JnOyBCcmlhbiBSb3NlbiA8YnJAYnJpYW5yb3Nlbi5uZXQ+DQpTdWJqZWN0OiBS ZTogW3N0aXJdIFJldmlldyBvZiBkcmFmdC1pZXRmLXN0aXItcnBoLWVtZXJnZW5jeS1zZXJ2aWNl cw0KDQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KTk9USUNFOiBUaGlzIGVtYWls IHdhcyByZWNlaXZlZCBmcm9tIGFuIEVYVEVSTkFMIHNlbmRlcg0KX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX18NCg0KU28sIHdlIGhhZCBkaXNjdXNzaW9ucyB3aXRoIHRoZSBleHBlcnRz IG9uIOKAmHJwaOKAmSBhbmQgZW1lcmdlbmN5IHNlcnZpY2VzIGFuZCBhZ3JlZWQgdG8gZG8gYSAw MyByZXYgb2YgdGhpcyBkcmFmdCB0aGF0IGRvZXMgaW5kZWVkIG1vZGlmeSB0aGUgcHJvY2VkdXJl cyB0byByZW1vdmUgdGhlIEVTT3JpZy9FU0NhbGxiYWNrIGFuZCBpbmNvcnBvcmF0ZSB0aGUgZXNu ZXQueCB2YWx1ZSBpbnRvIHRoZSDigJxhdXRo4oCdIG9iamVjdCBhcnJheS4gIEhvcGVmdWxseSB0 aGlzIGFkZHJlc3NlcyB0aGUgY29uY2VybnMgYW5kIG1ha2VzIHRoaW5ncyBhIGJpdCBzaW1wbGVy LiAgVGhhbmtzIGZvciB0aGUgaW5wdXQuDQoNClBsZWFzZSwgdG8gZXZlcnlvbmUsIHJldmlldyBh bmQgcHJvdmlkZSBjb21tZW50cy4NCg0KVGhhbmtzLg0KDQotQ2hyaXMNCg0KDQpPbiBTZXAgMywg MjAyMCwgYXQgOToyOCBBTSwgSmFjayBSaWNrYXJkIDxKYWNrLlJpY2thcmRAbWV0YXN3aXRjaC5j b208bWFpbHRvOkphY2suUmlja2FyZEBtZXRhc3dpdGNoLmNvbT4+IHdyb3RlOg0KDQpJIGFncmVl IHdpdGggd2hhdCB5b3UgaGF2ZSBzYWlkIHRoZXJlLCBob3dldmVyIFNlY3Rpb24gNC4yIG9mIDg0 NDMgYWxzbyBzdGF0ZXMgdGhhdCB5b3Ugc2hvdWxkIHN0cmlwIGZyb20gdGhlIElOVklURSBhbnkg J1Jlc291cmNlLVByaW9yaXR5JyBoZWFkZXIgdGhhdCBpc24ndCB2YWxpZGF0ZWQgYnkgdGhlIHBh c3Nwb3J0cywgd2hpY2ggaW4gdGhpcyBjYXNlIHdvdWxkIGJlIHRoZSAiZXNuZXQueCIgaGVhZGVy LiBUaGlzIGRvZXNuJ3Qgc2VlbSBsaWtlIGEgZ29vZCBiZWhhdmlvdXIgdG8gbWUsIHdoaWNoIGlz IHdoeSBJIHRoaW5rICJlc25ldCIgc2hvdWxkIGdvIGluIHRoZSAiYXV0aCIgY2xhaW0gKGFzIGFu IHNpZ25pbmcgc2VydmljZSB0aGF0IGRpZG4ndCBpbXBsZW1lbnQgdGhpcyB3b3VsZCBkbyBhbnl3 YXkpLCBhdCB3aGljaCBwb2ludCBJIGRvbid0IHNlZSB3aGF0IHV0aWxpdHkgdGhlICJFUyoiIGNs YWltcyBwcm92aWRlLg0KDQpUaGFua3MsDQpKYWNrDQoNCkZyb206IENocmlzIFdlbmR0IDxjaHJp cy1pZXRmQGNocmlzd2VuZHQubmV0PG1haWx0bzpjaHJpcy1pZXRmQGNocmlzd2VuZHQubmV0Pj4N ClNlbnQ6IDAyIFNlcHRlbWJlciAyMDIwIDIxOjAwDQpUbzogSmFjayBSaWNrYXJkIDxKYWNrLlJp Y2thcmRAbWV0YXN3aXRjaC5jb208bWFpbHRvOkphY2suUmlja2FyZEBtZXRhc3dpdGNoLmNvbT4+ DQpDYzogQnJpYW4gUm9zZW4gPGJyQGJyaWFucm9zZW4ubmV0PG1haWx0bzpickBicmlhbnJvc2Vu Lm5ldD4+OyBkcmFmdC1pZXRmLXN0aXItcnBoLWVtZXJnZW5jeS1zZXJ2aWNlc0BpZXRmLm9yZzxt YWlsdG86ZHJhZnQtaWV0Zi1zdGlyLXJwaC1lbWVyZ2VuY3ktc2VydmljZXNAaWV0Zi5vcmc+OyBz dGlyQGlldGYub3JnPG1haWx0bzpzdGlyQGlldGYub3JnPg0KU3ViamVjdDogUmU6IFtzdGlyXSBS ZXZpZXcgb2YgZHJhZnQtaWV0Zi1zdGlyLXJwaC1lbWVyZ2VuY3ktc2VydmljZXMNCg0KTm90IHN1 cmUgd2h5IHRoZXkgd291bGQgYnJlYWsgYW55dGhpbmcuICBJIHRoaW5rIHRoZSBpZGVhIGlzIHRo YXQgaWYgeW91IGFyZSBkb2luZyBlbWVyZ2VuY3kgc2VydmljZXMgeW91IHNob3VsZCBub3QgaW5j bHVkZSDigJxhdXRo4oCdIGtleSBhbmQgdmFsdWUuICBJZiB5b3UgaW1wbGVtZW50IG9ubHkgODQ0 MyBhbmQgeW91IG9ubHkga25vdyB3aGF0IHRvIGRvIHdpdGgg4oCcYXV0aOKAnSBhbmQg4oCcYXV0 aOKAnSBpcyBub3QgaW5jbHVkZWQgaW4gdGhlIFBBU1Nwb3JUIHlvdSBhcmUgdmVyaWZ5aW5nLCB5 b3UgbXVzdCBpZ25vcmUgb3RoZXIga2V5IHZhbHVlcyB5b3UgZG9u4oCZdCB1bmRlcnN0YW5kLiBU aGVyZWZvcmUgdGhlIHZhbGlkYXRpb24gd2lsbCBmYWlsIGFuZCB5b3Ugc2hvdWxkIG5vdCB0cnkg dG8gcHJvdmlkZSBhbnkgdHlwZSBvZiBwcmlvcml0eSBzZXJ2aWNlIHdpdGggdGhhdCBjYWxsLiAg VGhpcyBpcyBhcHByb2FjaCBmb3IgYWxsIFBBU1Nwb3JUcyB3aXRoIG5ld2x5IGRlZmluZWQgY2xh aW1zIGFuZCBrZXkgdmFsdWVzIGluIGdlbmVyYWwuDQoNCi1DaHJpcw0KDQoNCg0KT24gU2VwIDIs IDIwMjAsIGF0IDU6MzMgQU0sIEphY2sgUmlja2FyZCA8SmFjay5SaWNrYXJkQG1ldGFzd2l0Y2gu Y29tPG1haWx0bzpKYWNrLlJpY2thcmRAbWV0YXN3aXRjaC5jb20+PiB3cm90ZToNCg0KSGkgQ2hy aXMsDQoNCkknbSBzdGlsbCB1bmNvbnZpbmNlZCBhYm91dCB0aGUgRVNvcmlnIGFuZCBFU2NhbGxi YWNrIGtleXMsIEknbSBoYXBweSBmb3IgdGhlbSB0byBiZSBhZGRlZCBhcyBsb25nIGFzIHRoZXkg ZG9uJ3QgYnJlYWsgYW55dGhpbmcuIFRoZSBwcm9ibGVtIEkgc2VlIGlzIHdpdGggYW4gaW50ZXJt ZWRpYXRlIHRoYXQgaW1wbGVtZW50cyA4NDQzIGJ1dCBub3QgdGhpcyBzcGVjOiBpZiAiZXNuZXQu eCIgaXNuJ3QgaW4gdGhlIGF1dGggY2xhaW0gdGhlIGl0IHNob3VsZCByZW1vdmUgImVzbmV0Lngi IGZyb20gdGhlICdSZXNvdXJjZS1Qcmlvcml0eScgaGVhZGVyLCB3aGljaCBzZWVtcyBsaWtlIGEg YmFkIHRoaW5nIHRvIG1lLiBFdmVuIHdpdGggdGhpcyBzcGVjIGl0J3Mgbm90IGN1cnJlbnRseSBj bGVhciB0aGF0IHlvdSBzaG91bGRuJ3QgZG8gdGhhdCBhcyB0aGVyZSdzIG5vdGhpbmcgb3ZlcnJp ZGluZyB0aGF0IHRleHQgZnJvbSA4NDQzIGN1cnJlbnRseS4NCg0KQXMgZm9yIGNvbXBhY3QgZm9y bSwgSSdtIHBlcmZlY3RseSBoYXBweSB3aXRoIGl0IHJlbWFpbmluZyB1bnNwZWNpZmllZCwgaXQg anVzdCBzdXJwcmlzZWQgbWUuDQoNClRoYW5rcywNCkphY2sNCg0KRnJvbTogQ2hyaXMgV2VuZHQg PGNocmlzLWlldGZAY2hyaXN3ZW5kdC5uZXQ8bWFpbHRvOmNocmlzLWlldGZAY2hyaXN3ZW5kdC5u ZXQ+Pg0KU2VudDogMjUgQXVndXN0IDIwMjAgMTY6MTUNClRvOiBKYWNrIFJpY2thcmQgPEphY2su Umlja2FyZEBtZXRhc3dpdGNoLmNvbTxtYWlsdG86SmFjay5SaWNrYXJkQG1ldGFzd2l0Y2guY29t Pj4NCkNjOiBCcmlhbiBSb3NlbiA8YnJAYnJpYW5yb3Nlbi5uZXQ8bWFpbHRvOmJyQGJyaWFucm9z ZW4ubmV0Pj47IGRyYWZ0LWlldGYtc3Rpci1ycGgtZW1lcmdlbmN5LXNlcnZpY2VzQGlldGYub3Jn PG1haWx0bzpkcmFmdC1pZXRmLXN0aXItcnBoLWVtZXJnZW5jeS1zZXJ2aWNlc0BpZXRmLm9yZz47 IHN0aXJAaWV0Zi5vcmc8bWFpbHRvOnN0aXJAaWV0Zi5vcmc+DQpTdWJqZWN0OiBSZTogW3N0aXJd IFJldmlldyBvZiBkcmFmdC1pZXRmLXN0aXItcnBoLWVtZXJnZW5jeS1zZXJ2aWNlcw0KDQpIaSBK YWNrLA0KDQpJIHRoaW5rIHdlIHN0aWxsIHdhbnQgdG8ga2VlcCDigJxhdXRo4oCdIGFuZCDigJxF U29yaWcvRVNDYWxsYmFja+KAnSBhcyBzZXBhcmF0ZSBhbmQgZGlzdGluY3Qga2V5L3ZhbHVlIG9i amVjdHMsIGkgc2VlIHlvdXIgY29tbWVudHMgYXMgbWF5YmUgZGlzYWdyZWVtZW50IHN0eWxpc3Rp Y2FsbHkgYnV0IGRpZG7igJl0IHNlZSBhbnl0aGluZyB0byBzdWdnZXN0IHRoYXQgaXQgd291bGRu 4oCZdCB3b3JrLiAgVGhlIHJlYXNvbmluZyB0aG91Z2ggaXMgdGhhdCDigJxhdXRo4oCdIGlzIGlu dGVuZGVkIHRvIGJlIHNwZWNpZmljIHRvIHByaW9yaXR5IHNlcnZpY2VzIG9ubHksIG5vdCBleHRl bnNpYmxlIGZvciBvdGhlciBhcHBsaWNhdGlvbnMuICBBbmQgdGhlIGZhY3Qgb2YgdGhlIG1hdHRl ciBpcyBrZXkvdmFsdWVzIGFyZSBjaGVhcCwgbm8gcmVhc29uIHdlIGNhbuKAmXQgaGF2ZSBuZXcg dmFsdWVzIGFuZCBiZSBleHBsaWNpdCBhYm91dCB0aGUgaW50ZW50LiAgVGhpcyBkb2N1bWVudCBp cyBzcGVjaWZpYyB0byA5MTEgYW5kIGVtZXJnZW5jeSBzZXJ2aWNlcyBhbmQgdG8gZXh0ZW5kIHRo ZSBrZXkvdmFsdWVzIGRlZmluZWQgZm9yIOKAmHJwaOKAmSBjbGFpbSBhbmQg4oCYcnBo4oCZIFBB U1Nwb3JUIGV4dGVuc2lvbi4NCg0KSSB3aWxsIG1ha2UgdGhpcyBjbGVhcmVyIGluIHRoZSBkb2N1 bWVudCBhbmQgZXhwbGljaXRseSBzYXkgdGhhdCDigJxhdXRo4oCdIHNob3VsZCBub3QgYmUgdXNl ZCBmb3IgZW1lcmdlbmN5IHNlcnZpY2VzIHB1cnBvc2VzIG9mIHVzaW5nIHJlc291cmNlIHByaW9y aXR5IGhlYWRlci4NCg0KSSB0aGluayBpdCB3b3VsZCBhbHNvIG1ha2Ugc2Vuc2UgdG8gbWFrZSBp dCBjbGVhciB0aGF0IHRoYXQgdGhpcyBkb2N1bWVudCBleHRlbmRzIDg0NDMgYW5kIGxpbmtpbmcg dGhlIGRvY3VtZW50cy4NCg0KRm9yIGNvbXBhY3QgZm9ybSwgd2UgdGhpbmsgaXQgd291bGQgY29u ZnVzZSBmb2xrcyB0byBhZGQgcHJvdmlzaW9ucyBmb3IgY29tcGFjdCBmb3JtIG9yIGFsbG93IGl0 IGZvciBsaXR0bGUgZ2FpbiwgYW5kIHRoZXJlZm9yZSBwcmVmZXIgdG8gbGVhdmUgaXQgdW5kZWZp bmVkLg0KDQpUaGFua3MuDQoNCi1DaHJpcw0KDQoNCg0KDQpPbiBBdWcgMjAsIDIwMjAsIGF0IDE6 MzAgUE0sIEphY2sgUmlja2FyZCA8SmFjay5SaWNrYXJkQG1ldGFzd2l0Y2guY29tPG1haWx0bzpK YWNrLlJpY2thcmRAbWV0YXN3aXRjaC5jb20+PiB3cm90ZToNCg0KSXQncyBub3QgY2xlYXIgdGhh dCB0aGlzIHNwZWMgcmVsaWVzIG9uIHRoYXQsIGFuZCBJJ20gbm90IHN1cmUgdGhhdCBpdCBzaG91 bGQ/IFRvIG1lIGl0IHNlZW1zIGxpa2UgdGhpcyBjb3VsZCBiZSBtb3JlIHdpZGVseSBhcHBsaWNh YmxlLg0KDQpXb3VsZCB5b3UgYmUgYWJsZSB0byBhZGRyZXNzLCBmcm9tIGEgdmVyaWZpY2F0aW9u IHNlcnZpY2UncyBwb2ludCBvZiB2aWV3LCB3aGF0IGl0IHNob3VsZCBkbz8gSSB0aGluayB0aGF0 IHdpbGwgY2xlYXIgdXAgd2h5ICJFc29yaWciIGFuZCAiRVNjYWxsYmFjayIgYXJlIHVzZWZ1bCBh Ym92ZSBwbGFpbiAiYXV0aCIuDQpJIHRoaW5rIHRoZSBzcGVjIHdvdWxkIGJlbmVmaXQgZnJvbSB0 aGF0IHNlY3Rpb24gYXMgd2VsbCBTZWN0aW9uIDQgb2YgUkZDIDg0NDMgYW5kIHNlY3Rpb24gMTEg b2YgZHJhZnQtaWV0Zi1zdGlyLXBhc3Nwb3J0LXJjZC0wNiBhcmUgYm90aCBpbmNyZWRpYmx5IHVz ZWZ1bC4NCg0KVGhhbmtzLA0KSmFjaw0KDQpGcm9tOiBCcmlhbiBSb3NlbiA8YnJAYnJpYW5yb3Nl bi5uZXQ8bWFpbHRvOmJyQGJyaWFucm9zZW4ubmV0Pj4NClNlbnQ6IDE5IEF1Z3VzdCAyMDIwIDE0 OjQwDQpUbzogSmFjayBSaWNrYXJkIDxKYWNrLlJpY2thcmRAbWV0YXN3aXRjaC5jb208bWFpbHRv OkphY2suUmlja2FyZEBtZXRhc3dpdGNoLmNvbT4+DQpDYzogZHJhZnQtaWV0Zi1zdGlyLXJwaC1l bWVyZ2VuY3ktc2VydmljZXNAaWV0Zi5vcmc8bWFpbHRvOmRyYWZ0LWlldGYtc3Rpci1ycGgtZW1l cmdlbmN5LXNlcnZpY2VzQGlldGYub3JnPjsgc3RpckBpZXRmLm9yZzxtYWlsdG86c3RpckBpZXRm Lm9yZz4NClN1YmplY3Q6IFJlOiBbc3Rpcl0gUmV2aWV3IG9mIGRyYWZ0LWlldGYtc3Rpci1ycGgt ZW1lcmdlbmN5LXNlcnZpY2VzDQoNCkFib3V0IDIwJSBvZiB0aGUgVVMgaGFzIG5vdyB1cGdyYWRl ZCB0byBORzktMS0xLCBhbHRob3VnaCBtb3N0IHNlcnZpY2UgcHJvdmlkZXJzIGhhdmVu4oCZdCB5 ZXQuICBUaGUgd2lyZWxlc3MgY2FycmllcnMgYXJlIG1vdmluZyB0b3dhcmRzIGl0OyB0ZXN0aW5n IGlzIHVuZGVyd2F5Lg0KSSB3aWxsIGhhdmUgYSBjb21wYW5pb24gZG9jdW1lbnQgaW4gc2lwY29y ZSB0aGF0IGhhbmRsZXMgdGhlIHNpZ25hbGluZyBhc3BlY3RzIG9mIHRoaXMgbWVjaGFuaXNtLiAg Rm9yIHRoZSBvbGRlciBFOTExIHN5c3RlbSwgbm9uZSBvZiBzdGlyIHJlYWxseSBoZWxwcyBiZWNh dXNlIHRoZSBleGlzdGluZyBzeXN0ZW0gaXMgYnVpbHQgb24gdGhlIG9sZGVyIENsYXNzIDQgc3dp dGNoZXMgKOKAnFNlbGVjdGl2ZSBSb3V0ZXJz4oCdKS4gIEFsbCBvZiB0aGlzIG1lY2hhbmlzbSBp cyBmb3IgTkc5LTEtMSBhbmQgdGhlIGVxdWl2YWxlbnQgc2VydmljZXMgaW4gdGhlIHJlc3Qgb2Yg dGhlIHdvcmxkLCBiYXNlZCBvbiBJRVRGIHN0YW5kYXJkcyAoUkZDNjg4MSwgUkZDNTIyMiwgYW5k IHNldmVyYWwgb3RoZXJzKS4NCg0KDQoNCg0KDQpPbiBBdWcgMTksIDIwMjAsIGF0IDc6MTkgQU0s IEphY2sgUmlja2FyZCA8SmFjay5SaWNrYXJkQG1ldGFzd2l0Y2guY29tPG1haWx0bzpKYWNrLlJp Y2thcmRAbWV0YXN3aXRjaC5jb20+PiB3cm90ZToNCg0KVGhhbmtzLCB0aGF0J3MgcmVhbGx5IHVz ZWZ1bCwgaG93ZXZlciwgSSdtIG5vdCBjb252aW5jZWQuDQoNCkZvciBFU29yaWcsIGFzIGZhciBh cyBJIGtub3cgdGhpcyBpc24ndCBjdXJyZW50bHkgYWx3YXlzIHRoZSBjYXNlLCBJIGFtIGF3YXJl IG9mIHNpdHVhdGlvbnMgd2hlcmUgZW1lcmdlbmN5IGNhbGxzIGp1c3QgbG9vayBsaWtlIG5vcm1h bCBjYWxscyB3aXRoIGEgbnVtYmVyIG9mIDkxMS4gSSdtIGFsc28gc3RpbGwgdW5jbGVhciBhYm91 dCB3aGF0IGFmZmVjdCB0aGlzIGhhcywgYXMgeW91IGNhbiBjdXJyZW50bHkgYWxyZWFkeSBzaWdu IGVtZXJnZW5jeSBjYWxscyB1c2luZyB0aGUgc3RhbmRhcmQgbWVjaGFuaXNtcyAoYmFycmluZyB0 aGUgd2hvbGUgInVybjpzZXJ2aWNlOnNvcyIgdG4gd2hpY2ggSSBkb24ndCBiZWxpZXZlIGlzIHN0 YW5kYXJkaXNlZCBmb3IgU1RJUiB5ZXQ/KSAgYnkgcHV0dGluZyAiZXNuZXQuMCIgaW4gdGhlIGF1 dGggZmllbGQgb2YgYW4gcnBoIHBhc3Nwb3J0Lg0KDQpGb3IgRVNjYWxsYmFjaywgaWYgdGhlIHNw aCBhbmQgInJwaC5hdXRoIiBjbGFpbXMgY292ZXIgdGhlaXMgZW50aXJlbHkgd2h5IGlzIEVTY2Fs bGJhY2sgbmVlZGVkPyBJJ20gYWxzbyBzdGlsbCB1bmNsZWFyIHdoYXQgdGhlIHZlcmlmaWNhdGlv biBzZXJ2aWNlIGJlaGF2aW91ciBpcyBoZXJlLg0KDQpJJ20gc3RpbGwgdW5jbGVhciBhcyB0byBo b3cgdGhpcyBzcGVjIGhlbHBzIHdpdGggYWxsb3dpbmcgYW5kIHByZXZlbnRpbmcgbWFsaWNpb3Vz IHVzZSBvZiBlbWVyZ2VuY3kgY2FsbHMuIFlvdSBjYW4gYWxyZWFkeSBwdXQgZXNuZXQgcmVzb3Vy Y2UgcHJpb3JpdHkgcGFpcnMgaW4gdGhlICJycGguYXV0aCIgY2xhaW0gYW5kIHRoYXQgc2VlbXMg dG8gcHJvdmlkZSBhcyBtdWNoIHNlY3VyaXR5IGFzIHRoaXMgZG9lcy4gSSBkbyBhZ3JlZSB0aGUg c3BoIGNsYWltIGRvZXMgcHJvdmlkZSB2YWx1ZSwgaG93ZXZlci4NCg0KSSBkaWQganVzdCByZWFs aXNlIHRoYXQgdGhlIGVzbmV0IFJlc291cmNlIFByaW9yaXR5IG5lZWRzIHRvIGJlIGluIHRoZSAi cnBoLmF1dGgiIGNsYWltIG9yIHRoZSBsb2dpYyBmcm9tIHRoYXQgcmZjIHdpbGwga2ljayBpbiBh bmQgcmVtb3ZlIGl0LCBhcyBwZXI6DQpSRkMgODQ0Mywgc2VjdGlvbiA0LjINCiAgIEluIHN1Y2gg c2NlbmFyaW9zLCB0aGUgU0lQICdSZXNvdXJjZS1Qcmlvcml0eScgaGVhZGVyIGZpZWxkIFNIT1VM RCBiZQ0KICAgc3RyaXBwZWQgZnJvbSB0aGUgU0lQIHJlcXVlc3QsIGFuZCB0aGUgbmV0d29yayBl bnRpdGllcyBzaG91bGQgdHJlYXQNCiAgIHRoZSBjYWxsIGFzIGFuIG9yZGluYXJ5IGNhbGwuDQoN CkknbGwgbm90ZSB0aGF0IHNvbWUgb2YgbXkgcXVlc3Rpb25zIGFuZCBjb25jZXJucyBoYXZlbid0 IGJlZW4gYWRkcmVzc2VkIHlldCwgSSdtIGhhcHB5IHRvIHJlc29sdmUgdGhpcyBmaXJzdCwganVz dCBtYWtpbmcgYSBub3RlIHNvIHRoYXQgdGhleSBkb24ndCBnZXQgbG9zdC9JIGRvbid0IGZvcmdl dCBhYm91dCB0aGVtLg0KSmFjaw0KDQpGcm9tOiBCcmlhbiBSb3NlbiA8YnJAYnJpYW5yb3Nlbi5u ZXQ8bWFpbHRvOmJyQGJyaWFucm9zZW4ubmV0Pj4NClNlbnQ6IDE4IEF1Z3VzdCAyMDIwIDIyOjMx DQpUbzogSmFjayBSaWNrYXJkIDxKYWNrLlJpY2thcmRAbWV0YXN3aXRjaC5jb208bWFpbHRvOkph Y2suUmlja2FyZEBtZXRhc3dpdGNoLmNvbT4+DQpDYzogZHJhZnQtaWV0Zi1zdGlyLXJwaC1lbWVy Z2VuY3ktc2VydmljZXNAaWV0Zi5vcmc8bWFpbHRvOmRyYWZ0LWlldGYtc3Rpci1ycGgtZW1lcmdl bmN5LXNlcnZpY2VzQGlldGYub3JnPjsgc3RpckBpZXRmLm9yZzxtYWlsdG86c3RpckBpZXRmLm9y Zz4NClN1YmplY3Q6IFJlOiBbc3Rpcl0gUmV2aWV3IG9mIGRyYWZ0LWlldGYtc3Rpci1ycGgtZW1l cmdlbmN5LXNlcnZpY2VzDQoNCkxldOKAmXMga2VlcCB0aGUgdHdvIHVzZSBjYXNlcyBzZXBhcmF0 ZToNCkVTb3JpZyBpcyBhbiBlbWVyZ2VuY3kgY2FsbCAodXNlciB0byBhdXRob3JpdHkpLg0KRVNj YWxsYmFjayBpcyBhIGNhbGwgZnJvbSBhdXRob3JpdHkgdG8gdXNlci4NCg0KRm9yIEVTb3JnLCB0 aGUgY2FsbCBpcyBtYXJrZWQgd2l0aCBhIFJlcXVlc3QtVVJJIG9mIHVybjpzZXJ2aWNlOnNvcy4g IFRoZSDigJxUb+KAnSBmaWVsZCBpcyBpZ25vcmVkIGluIHJvdXRpbmcgYW5kIGhhbmRsaW5nIHRo ZSBjYWxsLiAgVGhhdOKAmXMgaG93IHlvdSBrbm93IHRoaXMgaXMgYW4gZW1lcmdlbmN5IGNhbGwu ICAgRm9yIHN0aXIgcHVycG9zZXMsIHRoZSBGcm9tIGlzIGFuIG9yZGluYXJ5IGlkZW50aWZpZXIs IGFuZCBnZXRzIHRyZWF0ZWQgaW4gdGhlIG5vcm1hbCB3YXkuICBIb3dldmVyLCB0aGUgcnBoIHZh bHVlIGNhbiBvbmx5IGJlIHVzZWQgYnkgYSB2YWxpZCBlbWVyZ2VuY3kgY2FsbCwgYW5kIGEgdmFs aWQgZW1lcmdlbmN5IGNhbGwgaXMgYSBSZXF1ZXN0IFVSSSBvZiB1cm46c2VydmljZTpzb3MsIGFu ZCBhIHZhbGlkIEZyb20uICBTbyB5b3UgZG9u4oCZdCBoYXZlIGFueSBrbm93bGVkZ2Ugb2YgZW1l cmdlbmN5IHNlcnZpY2VzIGlkZW50aWZpZXJzLCBvbmx5IHRoZSBSZXF1ZXN0IFVSSSBvZiB1cm46 c2VydmljZTpzb3MuDQoNCkZvciBFU2NhbGxiYWNrLCB0aGUgbWFya2luZyBpcyBhIGRpc3Rpbmd1 aXNoZWQgdmFsdWUgaW4gU0lQIFByaW9yaXR5LiAgSWYgYSBjYWxsIGhhcyB0aGF0IHZhbHVlLCBp dOKAmXMgYSBjYWxsIGJhY2suICBUaGUgb3JpZ2luYXRpbmcgc2VydmljZSBwcm92aWRlciBrbm93 cyB3aG8gYXJlIHRoZSBhdXRob3JpdGllcyB3aG8gYXJlIGFsbG93ZWQgdG8gcGxhY2UgY2FsbCBi YWNrcywgc28gdGhlIGNoZWNrIGlzIHdoYXQgaXMgaW4gU0lQIFByaW9yaXR5LCBhbmQgb25lIG9m IHRoZSBhbGxvd2VkIGF1dGhvcml0aWVzIGluIEZyb20uICBBcyBhIHByYWN0aWNhbCBtYXR0ZXIs IGluIG1vc3QgY2FzZXMsIHRoZSBjYWxsIHdpbGwgYmUgc2lnbmVkIGJ5IHRoZSBlbWVyZ2VuY3kg YXV0aG9yaXRpZXMgdGhlbXNlbHZlcywgd2hvIHdpbGwgYmUgYWJsZSB0byBnZXQgYXBwcm9wcmlh dGUgY3JlZGVudGlhbHMgZm9yIHRoaXMgcHVycG9zZS4gIEluIG1vc3QgY2FzZXMgSeKAmW0gYXdh cmUgb2YsIHRoZSBUbyBpbiBhbiBlbWVyZ2VuY3kgY2FsbCB3b27igJl0IG1hdGNoIHRoZSBGcm9t IGluIGEgQ2FsbGJhY2ssIGJ1dCBpdOKAmXMgcG9zc2libGUgZm9yIHRoYXQgdG8gaGFwcGVuLCBh bmQgd2Ugd2FudCB0byBhbGxvdyBpdC4NCg0KRXNuZXQgaXMgYSBSZXNvdXJjZSBQcmlvcml0eSBI ZWFkZXIgbmFtZXNwYWNlLCBub3QgYSBTSVAgUHJpb3JpdHkgdmFsdWUuICBXZeKAmXJlIGFsbG93 aW5nIGVtZXJnZW5jeSBjYWxscyBhbmQgY2FsbCBiYWNrcyB0byB1c2UgcnBoLCBhbmQgd2XigJly ZSBwcm90ZWN0aW5nIGFnYWluc3QgbWFsaWNpb3VzIHVzZSBvZiBpdC4gIFNvIHVubGVzcyB0aGUg Y2FsbCBoYXMgdXJuOnNlcnZpY2U6c29zIGluIFJlcXVlc3QgVVJJLCBvciB0aGUgcmlnaHQgU0lQ IFByaW9yaXR5IGluIGEgY2FsbCBiYWNrIChhbmQgZnJvbSBhbiBhdXRob3JpemVkIGF1dGhvcml0 eSkgdGhleSBjYW7igJl0IHVzZSBycGggd2l0aCB0aGUgZXNuZXQgbmFtZXNwYWNlLiAgR2VuZXJh bGx5LCB1bmxlc3MgdW5kZXIgYXR0YWNrLCBlbWVyZ2VuY3kgY2FsbHMgZ28gdGhyb3VnaCBldmVu IGlmIHRoZXJlIGlzbuKAmXQgYSBwYXNzcG9ydC4gIE1hbnkgbmV0d29ya3Mgd29u4oCZdCBvZmZl ciBhY3R1YWwgcHJpb3JpdHkgdG8gZW1lcmdlbmN5IGNhbGxzLCBidXQgdGhlIGVtZXJnZW5jeSBz ZXJ2aWNlcyBuZXR3b3JrcyAoRVNJbmV0cykgd2lsbC4NCg0KSWYgYSBjYWxsIGFycml2ZXMgYW55 d2hlcmUgd2l0aCBhbiBycGggdXNpbmcgZXNuZXQsIGFuZCBpc27igJl0IGFuIGVtZXJnZW5jeSBj YWxsLCB3aXRoIHRoZSBhcHByb3ByaWF0ZSBwYXNzcG9ydCwgIGFueSBpbnRlcm1lZGlhcnkgY2Fu IHJlZnVzZSB0byBnaXZlIGl0IGFueSBwcmlvcml0eSwgIFRoZSBlbWVyZ2VuY3kgYXV0aG9yaXRp ZXMgbWF5IGFjY2VwdCBhIGNhbGwgd2l0aG91dCBhIHZhbGlkIHBhc3Nwb3J0LCBidXQgdGhleSBt aWdodCB0cmVhdCBpdCB3aXRoIG11Y2ggbW9yZSBzdXNwaWNpb24gdGhhbiB0aGV5IHdvdWxkIGFu eSBvdGhlciBjYWxsLg0KDQpGb3IgY2FsbCBiYWNrcywgdGhlIG5ldHdvcmsgbWF5IGhhdmUgc3Bl Y2lhbCBiZWhhdmlvci4gIEZvciBleGFtcGxlLCBpdCBtYXkgc2VuZCB0aGUgY2FsbCB0byB0aGUg ZGV2aWNlIHRoYXQgcGxhY2VkIHRoZSBlbWVyZ2VuY3kgY2FsbCwgcmF0aGVyIHRoYW4sIGZvciBl eGFtcGxlLCB2b2ljZSBtYWlsLiAgVGhlIG5ldHdvcmsgaGFzIHRvIGJlIGFibGUgdG8gdHJ1c3Qg dGhhdCBTSVAgUHJpb3JpdHkgaXMgc2V0IGFwcHJvcHJpYXRlbHkuICBJdCB3aWxsIGFsc28gaGF2 ZSBycGggdXNpbmcgZXNuZXQsIGFuZCB0aGUgbmV0d29yayBjYW4gZ3JhbnQgaXQgYXBwcm9wcmlh dGUgcHJpb3JpdHkgaWYgaXQgaGFzIHRoYXQgY2FwYWJpbGl0eSwgYW5kIHdvdWxkIG5vdCBhbGxv dyBlc25ldCBvdGhlcndpc2UuDQoNClRoZSBvbmx5IHZhbHVlIGluIGNvdmVyaW5nIG90aGVyIHVz ZXMgb2YgU0lQIFByaW9yaXR5IGlzIHRvIHByb3RlY3QgYWdhaW5zdCBtaWRkbGUgYm94ZXMgbW9k aWZ5aW5nIGl0LiAgV2UgZG9u4oCZdCByZWFsbHkgaGF2ZSB1c2UgY2FzZXMgZm9yIHRoYXQuICBJ dCBwcm9iYWJseSB3b3VsZG7igJl0IGh1cnQgdG8gYWxsb3cgaXQgdGhvdWdoLg0KDQpEb2VzIHRo YXQgaGVscD8NCg0KQnJpYW4NCg0KDQoNCg0KDQoNCg0KT24gQXVnIDE0LCAyMDIwLCBhdCAxOjIx IFBNLCBKYWNrIFJpY2thcmQgPEphY2suUmlja2FyZD00MG1ldGFzd2l0Y2guY29tQGRtYXJjLmll dGYub3JnPG1haWx0bzpKYWNrLlJpY2thcmQ9NDBtZXRhc3dpdGNoLmNvbUBkbWFyYy5pZXRmLm9y Zz4+IHdyb3RlOg0KDQpJIGhhdmUgcmV2aWV3ZWQgZHJhZnQtaWV0Zi1zdGlyLXJwaC1lbWVyZ2Vu Y3ktc2VydmljZXMtMDIgYW5kIGhhdmUgc29tZSBjb25jZXJucyBhbmQgcXVlc3Rpb25zLiBJIGRv bid0IGJlbGlldmUgdGhpcyBzcGVjIGlzIGltcGxlbWVudGFibGUgaW4gaXRzIGN1cnJlbnQgZm9y bS4NCg0KVGhhbmtzLA0KSmFjaw0KDQpXaHkgYXJlICJFU29yaWciIGFuZCAiRVNjYWxsYmFjayIg ZGlzdGluY3Q/DQpUaGV5IHNlZW0gdG8gc2VydmUgYSB2ZXJ5IHNpbWlsYXIgcHVycG9zZSB3aXRo IHRoZSBvbmx5IGRpZmZlcmVuY2UgYmVpbmcgd2hldGhlciBvcmlnIG9yIGRlc3Qgc2hvdWxkIGJl IHRoZSBlbWVyZ2VuY3kgc2VydmljZXMuIEkgZG9uJ3QgYmVsaWV2ZSB0aGVyZSdzIGFueSBjaGVj ayB0aGF0IGNhbiBiZSBkb25lIHRvIHZhbGlkYXRlOg0KICAgV2hlbiB1c2luZyAiRVNvcmlnIiBh cyB0aGUgInJwaCIgYXNzZXJ0aW9uIHZhbHVlLCB0aGUgIm9yaWciIGNsYWltIG9mDQogICB0aGUg UEFTU3BvclQgTVVTVCByZXByZXNlbnQgdGhlIGNhbGxpbmcgcGFydHkgbnVtYmVyIHRoYXQgaW5p dGlhdGVzDQogICB0aGUgY2FsbCB0byBlbWVyZ2VuY3kgc2VydmljZXMuDQpUaGlzIChhbmQgdGhl IGVxdWl2YWxlbnQgc3RhdGVtZW50IGZvciBFU2NhbGxiYWNrKSBkb24ndCBzZWVtIHBvc3NpYmxl IHRvIG1lIHRvIGNoZWNrIChiYXJyaW5nIHRoZSBzdGFuZGFyZCBvcmlnL2Rlc3QgY2hlY2tpbmcp Li4NClRoaXMgd291bGQgbWFrZSB0aGUgY2hlY2sgImF0IGxlYXN0IG9uZSBvZiB0aGUgcGFydGll cyBzaG91bGQgYmUgdGhlIGVtZXJnZW5jeSBzZXJ2aWNlcyIgZW5vdWdoIHRvIHZhbGlkYXRlIHRo YXQgdGhpcyB3YXMgYSByZWFzb25hYmxlIGNhbGwuDQoNCg0KV2h5IGhhdmUgdGhlbSBhdCBhbGwg cmF0aGVyIHRoYW4ganVzdCB1c2luZyBhdXRoPw0KVGhpcyBpcyB2ZXJ5IHBvc3NpYmx5IGFuIGlz c3VlIHdpdGggbXkgdW5kZXJzdGFuZGluZywgYnV0IEknbSBub3QgY2xlYXIgb24gd2h5ICJFU29y aWciIGFuZCAiRVNjYWxsYmFjayIgZXZlbiBuZWVkIHRvIGV4aXN0LiAiZXNuZXQuMCIgZXRjLiBh cmUgU0lQIFJlc291cmNlIFByaW9yaXR5IGhlYWRlcnMsIHNvIHNob3VsZCBiZSBpbmNsdWRlZCBp biB0aGUgImF1dGgiIGZpZWxkIGFueXdheSBieSB0aGUgUlBIIHNwZWMuIFRoaXMgc3BlYyBhcHBl YXJzIHRvIGFwcGx5IGV4dHJhIGNvbnN0cmFpbnRzICh0aGF0IGEgb25lIG9mIHRoZSBjYWxsZXJz IG11c3QgYmUgdGhlIGVtZXJnZW5jeSBzZXJ2aWNlcykgZm9yIHRoZSAiZXNuZXQiIG5hbWVzcGFj ZSBidXQgaXQncyBub3QgY2xlYXIgd2h5IGVudGlyZWx5IHNlcGFyYXRlIGNsYWltcyBhcmUgbmVl ZGVkLg0KDQpJbiBhIHNpbWlsYXIgdmVpbiwgd2hhdCBzaG91bGQgYSB2ZXJpZmllciBkbyBpZiBp dCByZWNlaXZlcyBhIGNhbGwgY29udGFpbmluZyBhbiBpbnZhbGlkICJFU29yaWciIG9yICJFU2Nh bGxiYWNrIiB2YWx1ZSBvciB0aGUgcGFzc3BvcnQgaXMgaW52YWxpZC91bnRydXN0ZWQsIEknbSBh c3N1bWluZyB0aGUgYmVoYXZpb3VyIGlzIHRoZSBzYW1lIGFzIGZvciBhdXRoIGJ1dCB0aGlzIGlz bid0IGNsZWFyLiBBbHRob3VnaCBzdHJpcHBpbmcgdGhlIGZhY3QgdGhhdCB0aGlzIGlzIGFuIGVt ZXJnZW5jeSBjYWxsIGlzIHBvdGVudGlhbGx5IGRhbmdlcm91cy4uDQoNCg0KU3BlY2lmeSB0aGUg dHlwZSBvZiB0aGUgIkVTb3JpZyIgYW5kICJFU2NhbGxiYWNrIiBjbGFpbXMuDQpUaGlzIHNwZWNp ZmljYXRpb24gY3VycmVudGx5IGRvZXNuJ3Qgc3BlY2lmeSB0aGUgdHlwZSBvZiB0aGUgbmV3IGZp ZWxkcywgdGhlcmUgYXJlIG9ubHkgZXhhbXBsZXMgYW5kIHRoaXMgaXNuJ3QgZW5vdWdoLiBJdCBs b29rcyBsaWtlIHRoZXkgYm90aCBmb2xsb3cgdGhlIHNhbWUgc2NoZW1lIGFzIHRoZSBycGggImF1 dGgiIGNsYWltLCBob3dldmVyICJlc25ldCx4IiBkb2Vzbid0IHF1aXRlIGZpdCBpbnRvIHRoYXQg ZHVlIHRvIHRoZSBjb21tYSBhbmQgdGhhdCB4IGlzbid0IGEgdmFsaWQgcHJpb3JpdHkgdmFsdWUu DQoNCg0KV2h5IGlzIHNwaCBsaW1pdGVkIHRvIHBzYXAtY2FsbGJhY2s/IFdoYXQgc2hvdWxkIHRo ZSB2ZXJpZmllciBkbyBpZiBpdCBpc24ndCB0aGF0PyBXaGF0IHNob3VsZCBpdCBkbyBpZiBpdCBp cz8NCkknbSBub3QgZW50aXJlbHkgY2xlYXIgb24gdGhlIHB1cnBvc2Ugb2YgdGhlIHNwaCBjbGFp bSwgaG93ZXZlciwgaXQgc2VlbXMgb2RkIHRoYXQgaXQgZG9lc24ndCBjb3ZlciB0aGUgZnVsbCBy YW5nZSBvZiBwb3NzaWJsZSB2YWx1ZXMgZm9yIHRoZSBTSVAgUHJpb3JpdHkgSGVhZGVyLiBJcyB0 aGVyZSBhIHJlYXNvbiB0aGF0IGl0IGRvZXNuJ3QgY292ZXIgdGhlICJub24tdXJnZW50IiwgIm5v cm1hbCIsICJ1cmdlbnQiLCBvciAiZW1lcmdlbmN5IiB2YWx1ZXM/DQpUaGVyZSBpcyBhbHNvIG5v IHZlcmlmaWVyIGJlaGF2aW91ciBkZWZpbmVkIGhlcmUsIHNob3VsZCB0aGUgdmVyaWZpZXIgcmVt b3ZlIHRoZSBQcmlvcml0eSBoZWFkZXIgaWYgaXQgcmVjZWl2ZXMgYW4gaW52aXRlIHdpdGggbm8g cGFzc3BvcnRzIHNpZ25pbmcgZm9yIGl0PyBUaGF0IHNlZW1zIGRhbmdlcm91cyB0byBtZSBidXQg d291bGQgYmUgY29uc2lzdGVudCB3aXRoIHJwaC4gQWx0ZXJuYXRpdmVseSwgd2hhdCBzaG91bGQg dGhlIHZlcmlmaWVyIGRvIGlmIGl0IHJlY2VpdmVzIGFuIGludml0ZSB3aXRoIGEgdmFsaWQgcGFz c3BvcnQgY2xhaW1pbmcgc3BoIGJ1dCB3aXRoIG5vIFByaW9yaXR5IGhlYWRlciBzaG91bGQgaXQg YWRkIGl0IGluPyBJJ20gbm90IHN1cmUgdGhlIHNwZWMgbmVlZHMgdG8gYmUgdG9vIHByZXNjcmlw dGl2ZSBoZXJlLCBob3dldmVyIHNvbWUgbWVudGlvbiBvZiB2ZXJpZmllciBiZWhhdmlvdXIgYW5k IHRoZSBhc3NvY2lhdGVkIHNlY3VyaXR5IGNvbnNpZGVyYXRpb25zIHdvdWxkIGJlIHVzZWZ1bC4N Cg0KDQpTaG91bGQgdGhlIHNwZWMgYmUgc3Ryb25nZXIgYWJvdXQgdGhlIGNvbXBhY3QgZm9ybT8N ClNlY3Rpb24gMyBjdXJyZW50bHkgc3RhdGVzDQoNCiAgIFRoZSB1c2Ugb2YgdGhlIGNvbXBhY3Qg Zm9ybSBvZiBQQVNTcG9yVCBpcyBub3Qgc3BlY2lmaWVkIGluIHRoaXMNCg0KICAgZG9jdW1lbnQu DQpIb3dldmVyLCBhIGNvbXBhY3QtZm9ybSBwYXNzcG9ydCBmb2xsb3dpbmcgdGhpcyBzcGVjIHdv dWxkIGJlIGhhcmQgdG8gdmVyaWZ5IGFzIGl0IGludHJvZHVjZXMgbXVsdGlwbGUgcG9zc2libGUg cnBoIHZhcmlhbnRzLCBJIHRoaW5rIHRoaXMgc3BlYyBjb3VsZCBnbyBmdXJ0aGVyIGFuZCBzYXkg eW91IHNob3VsZG4ndC9tdXN0bid0Lg0KDQoNCldoYXQgaXMgdGhlIHJlcXVpcmVtZW50IG9mIHRo ZXNlIG5ldyBwYXJhbWV0ZXJzLg0KQXMgSSB1bmRlcnN0YW5kIGl0LCB0aGUgcGFzc3BvcnQgc3Bl YyBhbGxvd3MgeW91IHRvIGNyZWF0ZSBhIHBhc3Nwb3J0IGNvbnRhaW5pbmcgd2hhdGV2ZXIgSldU IGZpZWxkcyB5b3Ugd2FudCBhbmQgdmVyaWZpZXJzIHNob3VsZCBqdXN0IGlnbm9yZSBhbnkgZmll bGRzIHRoZXkgZG9uJ3QgdW5kZXJzdGFuZC4gVW5sZXNzIHRoZSAicHB0IiBjbGFpbSBpcyBzZXQs IHdoaWNoIGluZGljYXRlcyB0aGF0IHZlcmlmaWVycyBzaG91bGQgZGlzY2FyZCBpdCBpZiB0aGV5 IGRvbid0IHJlY29nbmlzZSB0aGF0IHBhc3Nwb3J0IHR5cGUuIEFzIHRoaXMgc3BlYyBhZGRzIGFk ZGl0aW9uYWwgZmllbGRzIHRvIGFuIGV4aXN0aW5nIHBhc3Nwb3J0IHR5cGUgaXQgaXNuJ3QgaW1t ZWRpYXRlbHkgY2xlYXIgd2hhdCB0aGUgYmVoYXZpb3VyIHNob3VsZCBiZS4gU3BlY2lmaWNhbGx5 LCBpcyBhbiBycGggcGFzc3BvcnQgY29udGFpbmluZyBvbmx5ICJycGguRVNvcmlnIiB2YWxpZCBu b3cgKHdoZXJlIGl0IHdvdWxkbid0IGJlIGJlZm9yZSBiZWNhdXNlIGF1dGggaXNuJ3QgcHJlc2Vu dCksIGlzIGFuIHJwaCBwYXNzcG9ydCBjb250YWluaW5nIG5vIHJwaCBhbmQgb25seSBzcGggdmFs aWQsIGFuZCB3aGF0IGRvZXMgYSBub24tcnBoIHBhc3Nwb3J0IHdpdGggc3BoIG9yIEVTb3JpZyBz ZXQgbWVhbj8NCg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X18NCnN0aXIgbWFpbGluZyBsaXN0DQpzdGlyQGlldGYub3JnPG1haWx0bzpzdGlyQGlldGYub3Jn Pg0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9zdGlyPGh0dHBzOi8vbmFt MTAuc2FmZWxpbmtzLnByb3RlY3Rpb24ub3V0bG9vay5jb20vP3VybD1odHRwcyUzQSUyRiUyRnd3 dy5pZXRmLm9yZyUyRm1haWxtYW4lMkZsaXN0aW5mbyUyRnN0aXImZGF0YT0wMiU3QzAxJTdDSmFj ay5SaWNrYXJkJTQwbWV0YXN3aXRjaC5jb20lN0NmZWM1N2MwZTY0YTM0MTU2NDczNTA4ZDg0Zjdh Y2EwNiU3QzlkOWU1NmViZjYxMzRkZGJiMjdiYmZjZGYxNGIyY2RiJTdDMSU3QzAlN0M2MzczNDY3 MzYwOTY4MTEwNzYmc2RhdGE9M0JtY0doVE14ckdRQ21wakRRR1Y1c0cwbENjWVZpVSUyRnhwakJK djNtbGIwJTNEJnJlc2VydmVkPTA+DQoNCg0KLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCk5vdGljZTogVGhpcyBlLW1haWwgdG9n ZXRoZXIgd2l0aCBhbnkgYXR0YWNobWVudHMgbWF5IGNvbnRhaW4gaW5mb3JtYXRpb24gb2YgUmli Ym9uIENvbW11bmljYXRpb25zIEluYy4gdGhhdA0KaXMgY29uZmlkZW50aWFsIGFuZC9vciBwcm9w cmlldGFyeSBmb3IgdGhlIHNvbGUgdXNlIG9mIHRoZSBpbnRlbmRlZCByZWNpcGllbnQuICBBbnkg cmV2aWV3LCBkaXNjbG9zdXJlLCByZWxpYW5jZSBvcg0KZGlzdHJpYnV0aW9uIGJ5IG90aGVycyBv ciBmb3J3YXJkaW5nIHdpdGhvdXQgZXhwcmVzcyBwZXJtaXNzaW9uIGlzIHN0cmljdGx5IHByb2hp Yml0ZWQuICBJZiB5b3UgYXJlIG5vdCB0aGUgaW50ZW5kZWQNCnJlY2lwaWVudCwgcGxlYXNlIG5v dGlmeSB0aGUgc2VuZGVyIGltbWVkaWF0ZWx5IGFuZCB0aGVuIGRlbGV0ZSBhbGwgY29waWVzLCBp bmNsdWRpbmcgYW55IGF0dGFjaG1lbnRzLg0KLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCg== --_000_BN7PR03MB3827DCC6788EEFEB1C20DCC9A5090BN7PR03MB3827namp_ Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: base64 PGh0bWw+PGhlYWQ+DQo8bWV0YSBodHRwLWVxdWl2PSJDb250ZW50LVR5cGUiIGNvbnRlbnQ9InRl eHQvaHRtbDsgY2hhcnNldD11dGYtOCI+DQo8bWV0YSBuYW1lPSJHZW5lcmF0b3IiIGNvbnRlbnQ9 Ik1pY3Jvc29mdCBXb3JkIDE1IChmaWx0ZXJlZCBtZWRpdW0pIj4NCjwhLS1baWYgIW1zb10+PHN0 eWxlPnZcOioge2JlaGF2aW9yOnVybCgjZGVmYXVsdCNWTUwpO30NCm9cOioge2JlaGF2aW9yOnVy bCgjZGVmYXVsdCNWTUwpO30NCndcOioge2JlaGF2aW9yOnVybCgjZGVmYXVsdCNWTUwpO30NCi5z aGFwZSB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0KPC9zdHlsZT48IVtlbmRpZl0tLT48 c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFjZQ0KCXtmb250LWZh bWlseTpIZWx2ZXRpY2E7DQoJcGFub3NlLTE6MiAxMSA2IDQgMiAyIDIgMiAyIDQ7fQ0KQGZvbnQt ZmFjZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUg NCA2IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2Ut MToyIDE1IDUgMiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNvbnNv bGFzOw0KCXBhbm9zZS0xOjIgMTEgNiA5IDIgMiA0IDMgMiA0O30NCi8qIFN0eWxlIERlZmluaXRp b25zICovDQpwLk1zb05vcm1hbCwgbGkuTXNvTm9ybWFsLCBkaXYuTXNvTm9ybWFsDQoJe21hcmdp bjowaW47DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1z ZXJpZjt9DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5 OTsNCgljb2xvcjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KcHJlDQoJe21z by1zdHlsZS1wcmlvcml0eTo5OTsNCgltc28tc3R5bGUtbGluazoiSFRNTCBQcmVmb3JtYXR0ZWQg Q2hhciI7DQoJbWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXpl OjEwLjBwdDsNCglmb250LWZhbWlseToiQ291cmllciBOZXciO30NCnNwYW4uYXBwbGUtY29udmVy dGVkLXNwYWNlDQoJe21zby1zdHlsZS1uYW1lOmFwcGxlLWNvbnZlcnRlZC1zcGFjZTt9DQpzcGFu LkhUTUxQcmVmb3JtYXR0ZWRDaGFyDQoJe21zby1zdHlsZS1uYW1lOiJIVE1MIFByZWZvcm1hdHRl ZCBDaGFyIjsNCgltc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJbXNvLXN0eWxlLWxpbms6IkhUTUwg UHJlZm9ybWF0dGVkIjsNCglmb250LWZhbWlseTpDb25zb2xhczt9DQpzcGFuLkVtYWlsU3R5bGUy MQ0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1yZXBseTsNCglmb250LWZhbWlseToiQ2FsaWJy aSIsc2Fucy1zZXJpZjsNCgljb2xvcjp3aW5kb3d0ZXh0O30NCi5Nc29DaHBEZWZhdWx0DQoJe21z by1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7fQ0KQHBhZ2UgV29y ZFNlY3Rpb24xDQoJe3NpemU6OC41aW4gMTEuMGluOw0KCW1hcmdpbjoxLjBpbiAxLjBpbiAxLjBp biAxLjBpbjt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi8qIExp c3QgRGVmaW5pdGlvbnMgKi8NCkBsaXN0IGwwDQoJe21zby1saXN0LWlkOjg5ODYzNzQ3MTsNCglt c28tbGlzdC10eXBlOmh5YnJpZDsNCgltc28tbGlzdC10ZW1wbGF0ZS1pZHM6MTk5ODA4MTkzMiAx ODI0NzA5NDY0IDY3Njk4NzEzIDY3Njk4NzE1IDY3Njk4NzAzIDY3Njk4NzEzIDY3Njk4NzE1IDY3 Njk4NzAzIDY3Njk4NzEzIDY3Njk4NzE1O30NCkBsaXN0IGwwOmxldmVsMQ0KCXttc28tbGV2ZWwt bnVtYmVyLWZvcm1hdDpyb21hbi1sb3dlcjsNCgltc28tbGV2ZWwtdGV4dDolMS07DQoJbXNvLWxl dmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCW1h cmdpbi1sZWZ0Oi43NWluOw0KCXRleHQtaW5kZW50Oi0uNWluO30NCkBsaXN0IGwwOmxldmVsMg0K CXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDphbHBoYS1sb3dlcjsNCgltc28tbGV2ZWwtdGFiLXN0 b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6 LS4yNWluO30NCkBsaXN0IGwwOmxldmVsMw0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpyb21h bi1sb3dlcjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBv c2l0aW9uOnJpZ2h0Ow0KCXRleHQtaW5kZW50Oi05LjBwdDt9DQpAbGlzdCBsMDpsZXZlbDQNCgl7 bXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0 Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsMDpsZXZlbDUNCgl7bXNvLWxldmVsLW51 bWJlci1mb3JtYXQ6YWxwaGEtbG93ZXI7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNv LWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlz dCBsMDpsZXZlbDYNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6cm9tYW4tbG93ZXI7DQoJbXNv LWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpyaWdodDsN Cgl0ZXh0LWluZGVudDotOS4wcHQ7fQ0KQGxpc3QgbDA6bGV2ZWw3DQoJe21zby1sZXZlbC10YWIt c3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVu dDotLjI1aW47fQ0KQGxpc3QgbDA6bGV2ZWw4DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmFs cGhhLWxvd2VyOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXIt cG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDA6bGV2ZWw5DQoJ e21zby1sZXZlbC1udW1iZXItZm9ybWF0OnJvbWFuLWxvd2VyOw0KCW1zby1sZXZlbC10YWItc3Rv cDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246cmlnaHQ7DQoJdGV4dC1pbmRlbnQ6 LTkuMHB0O30NCm9sDQoJe21hcmdpbi1ib3R0b206MGluO30NCnVsDQoJe21hcmdpbi1ib3R0b206 MGluO30NCi0tPjwvc3R5bGU+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWRlZmF1 bHRzIHY6ZXh0PSJlZGl0IiBzcGlkbWF4PSIxMDI2IiAvPg0KPC94bWw+PCFbZW5kaWZdLS0+PCEt LVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWxheW91dCB2OmV4dD0iZWRpdCI+DQo8bzpp ZG1hcCB2OmV4dD0iZWRpdCIgZGF0YT0iMSIgLz4NCjwvbzpzaGFwZWxheW91dD48L3htbD48IVtl bmRpZl0tLT4NCjwvaGVhZD48Ym9keSBsYW5nPSJFTi1VUyIgbGluaz0iYmx1ZSIgdmxpbms9InB1 cnBsZSIgc3R5bGU9IndvcmQtd3JhcDpicmVhay13b3JkIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0 aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5Ob3QgcmVhbGx5IHJlbGF0ZWQgdG8gdGhlIHJl Y2VudCBjaGFuZ2UgYnV0IGEgZmV3IHF1ZXN0aW9ucy9jb21tZW50czo8bzpwPjwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHByZT48c3BhbiBz dHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5pLSA8L3Nw YW4+PG86cD48L286cD48L3ByZT4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJz cDsmbmJzcDsmbmJzcDtUaGlzIGRvY3VtZW50IGFkZHMgbmV3ICZxdW90O2F1dGgmcXVvdDsgYXJy YXkga2V5IHZhbHVlcyBmb3IgYSBSZXNvdXJjZTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsgUHJpb3JpdHkgSGVhZGVyICgm cXVvdDtycGgmcXVvdDspIGNsYWltIGRlZmluZWQgaW4gW1JGQzg0NDNdPG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+V2FzIHRoZXJlIHJlYWxseSBhIHJlc3RyaWN0 aW9uIGluIFJGQzg0NDMgb24gdGhlIHZhbHVlcyBwb3NzaWJseSBjYW4gYmUgdXNlZCBmb3Ig4oCc cnBo4oCdIGNsYWltPyBNeSByZWFkaW5nIGlzIHRoZXJlIHdhc27igJl0LiBJIHdvdWxkIHNheSB0 aGlzIGRyYWZ0IGlzIG5vdCBhZGRpbmcgbmV3IGtleSB2YWx1ZXMgYnV0IGRlZmluZXMgc2VtYW50 aWNzIGFzc29jaWF0ZWQgd2l0aCBzb21lIGtleSB2YWx1ZXMuPG86cD48L286cD48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwcmU+PHNwYW4gc3R5bGU9 ImZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+aWktIDwvc3Bhbj5J biBhZGRpdGlvbiwgdGhlIFBBU1NQb3JUIGNsYWltcyBhbmQgdmFsdWVzPG86cD48L286cD48L3By ZT4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsgZGVmaW5lZCBp biB0aGlzIGRvY3VtZW50IGFyZSBpbnRlbmRlZCBmb3IgdXNlIGluIGVudmlyb25tZW50cyB3aGVy ZTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4m bmJzcDsmbmJzcDsgdGhlcmUgYXJlIG1lYW5zIHRvIHZlcmlmeSB0aGF0IHRoZSBzaWduZXIgb2Yg dGhlIFNJUCAnUmVzb3VyY2UtPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291 cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyBQcmlvcml0eScgYW5kICdQcmlvcml0eScgaGVh ZGVyIGZpZWxkcyBpcyBhdXRob3JpdGF0aXZlLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPklzbuKAmXQgdGhpcyBhbHJlYWR5IGNvdmVyZWQgYnkg4oCcNy4yIFNv bHV0aW9uIENvbnNpZGVyYXRpb25z4oCdIGluIFJGQzg0NDMgaW4gYSBnZW5lcmljIHdheT88bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+aWlpLSBNZWFucyB0byB2ZXJpZnkgdGhhdCB0aGUgc2lnbmVy IG9mIFJlc291cmNlLVByaW9yaXR5L1ByaW9yaXR5IGhlYWRlciBmaWVsZHMgaXMgYXV0aG9yaXRh dGl2ZTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SXQgc2VlbXMgdGhlIGZv bGxvd2luZyBzZWN0aW9uIGZyb20gZHJhZnQtcm9zZW4tc3Rpci1lbWVyZ2VuY3ktY2FsbHMtMDAg aXMgcmVsZXZhbnQ6PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90 OyI+TWFueSBjb3VudHJpZXMgYXJlIHN0YXJ0aW5nIHRvIGFkb3B0IHRoZSBlbWVyZ2VuY3kgY2Fs bGluZyBwYXJhZGlnbXM8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVy IE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7IHByb211bGdhdGVkIGJ5IHRoZSBJRVRGLiZuYnNwOyBG b3IgZXhhbXBsZSwgaW4gTm9ydGggQW1lcmljYSwgdGhlIFs8YSBocmVmPSJodHRwczovL3Rvb2xz LmlldGYub3JnL2h0bWwvZHJhZnQtcm9zZW4tc3Rpci1lbWVyZ2VuY3ktY2FsbHMtMDAjcmVmLWkz IiB0aXRsZT0iJnF1b3Q7RGV0YWlsZWQgRnVuY3Rpb25hbCBhbmQgSW50ZXJmYWNlIFN0YW5kYXJk cyBmb3IgdGhlIE5FTkEgaTMgU29sdXRpb24mcXVvdDsiPmkzPC9hPl08bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBw dDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7IHN0YW5k YXJkIGRlZmluZXMgSVAgYmFzZWQgZW1lcmdlbmN5IGNhbGxpbmcgbmV0d29ya3MsIGRyYXdpbmcg ZnJvbTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7 Ij4mbmJzcDsmbmJzcDsgSUVURiB3b3JrLiZuYnNwOyBJbiB0aG9zZSBzeXN0ZW1zLCBhIFBLSSBp cyBiZWluZyBjcmVhdGVkLCB3aXRoIGEgdHJ1c3RlZDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsgcm9vdCwgdGhlICZxdW90 O1BTQVAgQ3JlZGVudGlhbGluZyBBZ2VuY3kmcXVvdDsgKFBDQSkuJm5ic3A7IFRoZSBQQ0EgcHJv dmlkZXMgYSByb290PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBO ZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyBvZiB0cnVzdCB0aGF0IGNvdWxkIGJlIHVzZWQgdG8gc2ln biBjYWxsLWJhY2tzIHByb3RlY3RpbmcgdGhlIFNJUDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsgUHJpb3JpdHkgYW5kIFJl c291cmNlIFByaW9yaXR5IGhlYWRlciBmaWVsZHMuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+QXJndWFibHkgYW4gYWx0ZXJuYXRpdmUgd291bGQgYmUgYWRkaW5n IGEgbmV3IGV4dGVuc2lvbiB0byBTVElSIGNlcnRpZmljYXRlcyBhIGxhIFROIEF1dGhvcml6YXRp b24gTGlzdCBpbiBSRkM4MjI2LiBBY3R1YWxseSBJIHdvdWxkIHByZWZlciB0aGlzIGFwcHJvYWNo IGFzIGl0IHdvdWxkIGVsaW1pbmF0ZSBhbWJpZ3VpdHksIHdvdWxkIGp1c3Qgd29yayB3aXRoIGEg c2luZ2xlIGNlcnRpZmljYXRlL1BLSSBhbmQNCiBiZSBnZW5lcmljYWxseSBhcHBsaWNhYmxlLjxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5pdi0gQSBxdWVzdGlvbiByZWdhcmRpbmcgZHJhZnQtcm9z ZW4tc3Rpci1lbWVyZ2VuY3ktY2FsbHMtMDA8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nv dXJpZXIgTmV3JnF1b3Q7Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVv dDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7IFRoaXMgZG9jdW1lbnQgcmVjb21tZW5k cyB0aGF0IGVtZXJnZW5jeSBjYWxscyBmcm9tIG91dHNpZGUgYW48bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtm b250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7IEVtZXJnZW5j eSBTZXJ2aWNlcyBJUCBOZXR3b3JrIGJlIGFzc2lnbmVkIGVzbmV0LjAuDQo8bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5TaG91bGQgdGhpcyBuZSBlc25ldC4xPyBJ ZiBpdCBpbmRlZWQgaXQgZXNuZXQuMCB0aGVuIHdoeSBpcyB0aGUgdmFsdWUgZXNuZXQuMSBmb3Ig ZW1lcmdlbmN5IGNhbGxzIGluIGRyYWZ0LWlldGYtcnBoLWVtZXJnZW5jeS1zZXJ2aWNlcz88bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj5UaGFua3MsPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5Ub2xn YTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48 L3A+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjRTFF MUUxIDEuMHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PGI+RnJvbTo8L2I+IHN0aXIgJmx0O3N0aXItYm91bmNlc0BpZXRmLm9yZyZndDsgPGI+T24g QmVoYWxmIE9mIDwvYj4NCkNocmlzIFdlbmR0PGJyPg0KPGI+U2VudDo8L2I+IEZyaWRheSwgT2N0 b2JlciA5LCAyMDIwIDEwOjE4IEFNPGJyPg0KPGI+VG86PC9iPiBKYWNrIFJpY2thcmQgJmx0O0ph Y2suUmlja2FyZEBtZXRhc3dpdGNoLmNvbSZndDs8YnI+DQo8Yj5DYzo8L2I+IHN0aXJAaWV0Zi5v cmc7IGRyYWZ0LWlldGYtc3Rpci1ycGgtZW1lcmdlbmN5LXNlcnZpY2VzQGlldGYub3JnOyBCcmlh biBSb3NlbiAmbHQ7YnJAYnJpYW5yb3Nlbi5uZXQmZ3Q7PGJyPg0KPGI+U3ViamVjdDo8L2I+IFJl OiBbc3Rpcl0gUmV2aWV3IG9mIGRyYWZ0LWlldGYtc3Rpci1ycGgtZW1lcmdlbmN5LXNlcnZpY2Vz PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86 cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2IGNsYXNzPSJNc29Ob3JtYWwiIGFsaWduPSJjZW50ZXIi IHN0eWxlPSJ0ZXh0LWFsaWduOmNlbnRlciI+DQo8aHIgc2l6ZT0iMiIgd2lkdGg9IjEwMCUiIGFs aWduPSJjZW50ZXIiPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5OT1RJQ0U6IFRoaXMg ZW1haWwgd2FzIHJlY2VpdmVkIGZyb20gYW4gRVhURVJOQUwgc2VuZGVyPG86cD48L286cD48L3A+ DQo8ZGl2IGNsYXNzPSJNc29Ob3JtYWwiIGFsaWduPSJjZW50ZXIiIHN0eWxlPSJ0ZXh0LWFsaWdu OmNlbnRlciI+DQo8aHIgc2l6ZT0iMiIgd2lkdGg9IjEwMCUiIGFsaWduPSJjZW50ZXIiPg0KPC9k aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48YnI+DQpTbywgd2UgaGFkIGRpc2N1c3Npb25zIHdp dGggdGhlIGV4cGVydHMgb24g4oCYcnBo4oCZIGFuZCBlbWVyZ2VuY3kgc2VydmljZXMgYW5kIGFn cmVlZCB0byBkbyBhIDAzIHJldiBvZiB0aGlzIGRyYWZ0IHRoYXQgZG9lcyBpbmRlZWQgbW9kaWZ5 IHRoZSBwcm9jZWR1cmVzIHRvIHJlbW92ZSB0aGUgRVNPcmlnL0VTQ2FsbGJhY2sgYW5kIGluY29y cG9yYXRlIHRoZSBlc25ldC54IHZhbHVlIGludG8gdGhlIOKAnGF1dGjigJ0gb2JqZWN0IGFycmF5 LiAmbmJzcDtIb3BlZnVsbHkNCiB0aGlzIGFkZHJlc3NlcyB0aGUgY29uY2VybnMgYW5kIG1ha2Vz IHRoaW5ncyBhIGJpdCBzaW1wbGVyLiAmbmJzcDtUaGFua3MgZm9yIHRoZSBpbnB1dC48bzpwPjwv bzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlBsZWFzZSwgdG8gZXZlcnlv bmUsIHJldmlldyBhbmQgcHJvdmlkZSBjb21tZW50cy48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+VGhhbmtzLjxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4tQ2hyaXM8bzpwPjwvbzpwPjwvcD4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48YnI+DQo8YnI+DQo8bzpwPjwvbzpwPjwvcD4N CjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQi Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPk9uIFNlcCAzLCAyMDIwLCBhdCA5OjI4IEFN LCBKYWNrIFJpY2thcmQgJmx0OzxhIGhyZWY9Im1haWx0bzpKYWNrLlJpY2thcmRAbWV0YXN3aXRj aC5jb20iPkphY2suUmlja2FyZEBtZXRhc3dpdGNoLmNvbTwvYT4mZ3Q7IHdyb3RlOjxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwv cD4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SSBhZ3JlZSB3aXRoIHdoYXQg eW91IGhhdmUgc2FpZCB0aGVyZSwgaG93ZXZlciBTZWN0aW9uIDQuMiBvZiA4NDQzIGFsc28gc3Rh dGVzIHRoYXQgeW91IHNob3VsZCBzdHJpcCBmcm9tIHRoZSBJTlZJVEUgYW55ICdSZXNvdXJjZS1Q cmlvcml0eScgaGVhZGVyIHRoYXQgaXNuJ3QgdmFsaWRhdGVkIGJ5IHRoZSBwYXNzcG9ydHMsIHdo aWNoIGluIHRoaXMgY2FzZSB3b3VsZCBiZSB0aGUgJnF1b3Q7ZXNuZXQueCZxdW90OyBoZWFkZXIu DQogVGhpcyBkb2Vzbid0IHNlZW0gbGlrZSBhIGdvb2QgYmVoYXZpb3VyIHRvIG1lLCB3aGljaCBp cyB3aHkgSSB0aGluayAmcXVvdDtlc25ldCZxdW90OyBzaG91bGQgZ28gaW4gdGhlICZxdW90O2F1 dGgmcXVvdDsgY2xhaW0gKGFzIGFuIHNpZ25pbmcgc2VydmljZSB0aGF0IGRpZG4ndCBpbXBsZW1l bnQgdGhpcyB3b3VsZCBkbyBhbnl3YXkpLCBhdCB3aGljaCBwb2ludCBJIGRvbid0IHNlZSB3aGF0 IHV0aWxpdHkgdGhlICZxdW90O0VTKiZxdW90OyBjbGFpbXMgcHJvdmlkZS48bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+VGhhbmtzLDxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SmFjazxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXIt dG9wOnNvbGlkICNFMUUxRTEgMS4wcHQ7cGFkZGluZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+RnJvbTo8L2I+PHNwYW4gY2xhc3M9ImFwcGxlLWNv bnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPkNocmlzIFdlbmR0ICZsdDs8YSBocmVmPSJtYWls dG86Y2hyaXMtaWV0ZkBjaHJpc3dlbmR0Lm5ldCI+Y2hyaXMtaWV0ZkBjaHJpc3dlbmR0Lm5ldDwv YT4mZ3Q7PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxi cj4NCjxiPlNlbnQ6PC9iPjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNw Ozwvc3Bhbj4wMiBTZXB0ZW1iZXIgMjAyMCAyMTowMDxicj4NCjxiPlRvOjwvYj48c3BhbiBjbGFz cz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+SmFjayBSaWNrYXJkICZsdDs8 YSBocmVmPSJtYWlsdG86SmFjay5SaWNrYXJkQG1ldGFzd2l0Y2guY29tIj5KYWNrLlJpY2thcmRA bWV0YXN3aXRjaC5jb208L2E+Jmd0Ozxicj4NCjxiPkNjOjwvYj48c3BhbiBjbGFzcz0iYXBwbGUt Y29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+QnJpYW4gUm9zZW4gJmx0OzxhIGhyZWY9Im1h aWx0bzpickBicmlhbnJvc2VuLm5ldCI+YnJAYnJpYW5yb3Nlbi5uZXQ8L2E+Jmd0OzsNCjxhIGhy ZWY9Im1haWx0bzpkcmFmdC1pZXRmLXN0aXItcnBoLWVtZXJnZW5jeS1zZXJ2aWNlc0BpZXRmLm9y ZyI+ZHJhZnQtaWV0Zi1zdGlyLXJwaC1lbWVyZ2VuY3ktc2VydmljZXNAaWV0Zi5vcmc8L2E+Ow0K PGEgaHJlZj0ibWFpbHRvOnN0aXJAaWV0Zi5vcmciPnN0aXJAaWV0Zi5vcmc8L2E+PGJyPg0KPGI+ U3ViamVjdDo8L2I+PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9z cGFuPlJlOiBbc3Rpcl0gUmV2aWV3IG9mIGRyYWZ0LWlldGYtc3Rpci1ycGgtZW1lcmdlbmN5LXNl cnZpY2VzPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Tm90IHN1cmUgd2h5IHRoZXkgd291bGQgYnJlYWsg YW55dGhpbmcuICZuYnNwO0kgdGhpbmsgdGhlIGlkZWEgaXMgdGhhdCBpZiB5b3UgYXJlIGRvaW5n IGVtZXJnZW5jeSBzZXJ2aWNlcyB5b3Ugc2hvdWxkIG5vdCBpbmNsdWRlIOKAnGF1dGjigJ0ga2V5 IGFuZCB2YWx1ZS4gJm5ic3A7SWYgeW91IGltcGxlbWVudCBvbmx5IDg0NDMgYW5kIHlvdSBvbmx5 IGtub3cgd2hhdCB0byBkbyB3aXRoIOKAnGF1dGjigJ0gYW5kIOKAnGF1dGjigJ0gaXMgbm90IGlu Y2x1ZGVkDQogaW4gdGhlIFBBU1Nwb3JUIHlvdSBhcmUgdmVyaWZ5aW5nLCB5b3UgbXVzdCBpZ25v cmUgb3RoZXIga2V5IHZhbHVlcyB5b3UgZG9u4oCZdCB1bmRlcnN0YW5kLiBUaGVyZWZvcmUgdGhl IHZhbGlkYXRpb24gd2lsbCBmYWlsIGFuZCB5b3Ugc2hvdWxkIG5vdCB0cnkgdG8gcHJvdmlkZSBh bnkgdHlwZSBvZiBwcmlvcml0eSBzZXJ2aWNlIHdpdGggdGhhdCBjYWxsLiAmbmJzcDtUaGlzIGlz IGFwcHJvYWNoIGZvciBhbGwgUEFTU3BvclRzIHdpdGggbmV3bHkgZGVmaW5lZA0KIGNsYWltcyBh bmQga2V5IHZhbHVlcyBpbiBnZW5lcmFsLiZuYnNwOzxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0 ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPi1DaHJpczxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxicj4N Cjxicj4NCjxicj4NCjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0i bWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+T24gU2VwIDIsIDIwMjAsIGF0IDU6MzMgQU0sIEphY2sgUmlja2Fy ZCAmbHQ7PGEgaHJlZj0ibWFpbHRvOkphY2suUmlja2FyZEBtZXRhc3dpdGNoLmNvbSI+SmFjay5S aWNrYXJkQG1ldGFzd2l0Y2guY29tPC9hPiZndDsgd3JvdGU6PG86cD48L286cD48L3A+DQo8L2Rp dj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5I aSBDaHJpcyw8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4N CjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SSdtIHN0aWxsIHVuY29udmluY2Vk IGFib3V0IHRoZSBFU29yaWcgYW5kIEVTY2FsbGJhY2sga2V5cywgSSdtIGhhcHB5IGZvciB0aGVt IHRvIGJlIGFkZGVkIGFzIGxvbmcgYXMgdGhleSBkb24ndCBicmVhayBhbnl0aGluZy4gVGhlIHBy b2JsZW0gSSBzZWUgaXMgd2l0aCBhbiBpbnRlcm1lZGlhdGUgdGhhdCBpbXBsZW1lbnRzIDg0NDMg YnV0IG5vdCB0aGlzIHNwZWM6IGlmICZxdW90O2VzbmV0LngmcXVvdDsgaXNuJ3QgaW4gdGhlDQog YXV0aCBjbGFpbSB0aGUgaXQgc2hvdWxkIHJlbW92ZSAmcXVvdDtlc25ldC54JnF1b3Q7IGZyb20g dGhlICdSZXNvdXJjZS1Qcmlvcml0eScgaGVhZGVyLCB3aGljaCBzZWVtcyBsaWtlIGEgYmFkIHRo aW5nIHRvIG1lLiBFdmVuIHdpdGggdGhpcyBzcGVjIGl0J3Mgbm90IGN1cnJlbnRseSBjbGVhciB0 aGF0IHlvdSBzaG91bGRuJ3QgZG8gdGhhdCBhcyB0aGVyZSdzIG5vdGhpbmcgb3ZlcnJpZGluZyB0 aGF0IHRleHQgZnJvbSA4NDQzIGN1cnJlbnRseS48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9k aXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ QXMgZm9yIGNvbXBhY3QgZm9ybSwgSSdtIHBlcmZlY3RseSBoYXBweSB3aXRoIGl0IHJlbWFpbmlu ZyB1bnNwZWNpZmllZCwgaXQganVzdCBzdXJwcmlzZWQgbWUuPG86cD48L286cD48L3A+DQo8L2Rp dj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPlRoYW5rcyw8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkphY2s8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9k aXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3Jk ZXItdG9wOnNvbGlkICNFMUUxRTEgMS4wcHQ7cGFkZGluZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8 ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPkZyb206PC9iPjxzcGFuIGNsYXNz PSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj5DaHJpcyBXZW5kdCAmbHQ7PGEg aHJlZj0ibWFpbHRvOmNocmlzLWlldGZAY2hyaXN3ZW5kdC5uZXQiPmNocmlzLWlldGZAY2hyaXN3 ZW5kdC5uZXQ8L2E+Jmd0OzxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNw Ozwvc3Bhbj48YnI+DQo8Yj5TZW50OjwvYj48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNw YWNlIj4mbmJzcDs8L3NwYW4+MjUgQXVndXN0IDIwMjAgMTY6MTU8YnI+DQo8Yj5Ubzo8L2I+PHNw YW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPkphY2sgUmlja2Fy ZCAmbHQ7PGEgaHJlZj0ibWFpbHRvOkphY2suUmlja2FyZEBtZXRhc3dpdGNoLmNvbSI+SmFjay5S aWNrYXJkQG1ldGFzd2l0Y2guY29tPC9hPiZndDs8YnI+DQo8Yj5DYzo8L2I+PHNwYW4gY2xhc3M9 ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPkJyaWFuIFJvc2VuICZsdDs8YSBo cmVmPSJtYWlsdG86YnJAYnJpYW5yb3Nlbi5uZXQiPmJyQGJyaWFucm9zZW4ubmV0PC9hPiZndDs7 PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxhIGhyZWY9 Im1haWx0bzpkcmFmdC1pZXRmLXN0aXItcnBoLWVtZXJnZW5jeS1zZXJ2aWNlc0BpZXRmLm9yZyI+ ZHJhZnQtaWV0Zi1zdGlyLXJwaC1lbWVyZ2VuY3ktc2VydmljZXNAaWV0Zi5vcmc8L2E+OzxzcGFu IGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48YSBocmVmPSJtYWls dG86c3RpckBpZXRmLm9yZyI+c3RpckBpZXRmLm9yZzwvYT48YnI+DQo8Yj5TdWJqZWN0OjwvYj48 c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+UmU6IFtzdGly XSBSZXZpZXcgb2YgZHJhZnQtaWV0Zi1zdGlyLXJwaC1lbWVyZ2VuY3ktc2VydmljZXM8bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+ DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5IaSBKYWNrLDxzcGFu IGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+ DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkkgdGhpbmsgd2Ugc3RpbGwgd2Fu dCB0byBrZWVwIOKAnGF1dGjigJ0gYW5kIOKAnEVTb3JpZy9FU0NhbGxiYWNr4oCdIGFzIHNlcGFy YXRlIGFuZCBkaXN0aW5jdCBrZXkvdmFsdWUgb2JqZWN0cywgaSBzZWUgeW91ciBjb21tZW50cyBh cyBtYXliZSBkaXNhZ3JlZW1lbnQgc3R5bGlzdGljYWxseSBidXQgZGlkbuKAmXQgc2VlIGFueXRo aW5nIHRvIHN1Z2dlc3QgdGhhdCBpdCB3b3VsZG7igJl0IHdvcmsuICZuYnNwO1RoZSByZWFzb25p bmcgdGhvdWdoDQogaXMgdGhhdCDigJxhdXRo4oCdIGlzIGludGVuZGVkIHRvIGJlIHNwZWNpZmlj IHRvIHByaW9yaXR5IHNlcnZpY2VzIG9ubHksIG5vdCBleHRlbnNpYmxlIGZvciBvdGhlciBhcHBs aWNhdGlvbnMuICZuYnNwO0FuZCB0aGUgZmFjdCBvZiB0aGUgbWF0dGVyIGlzIGtleS92YWx1ZXMg YXJlIGNoZWFwLCBubyByZWFzb24gd2UgY2Fu4oCZdCBoYXZlIG5ldyB2YWx1ZXMgYW5kIGJlIGV4 cGxpY2l0IGFib3V0IHRoZSBpbnRlbnQuICZuYnNwO1RoaXMgZG9jdW1lbnQgaXMgc3BlY2lmaWMN CiB0byA5MTEgYW5kIGVtZXJnZW5jeSBzZXJ2aWNlcyBhbmQgdG8gZXh0ZW5kIHRoZSBrZXkvdmFs dWVzIGRlZmluZWQgZm9yIOKAmHJwaOKAmSBjbGFpbSBhbmQg4oCYcnBo4oCZIFBBU1Nwb3JUIGV4 dGVuc2lvbi48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8 ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+SSB3aWxsIG1ha2UgdGhpcyBjbGVhcmVyIGluIHRoZSBkb2N1bWVudCBhbmQgZXhw bGljaXRseSBzYXkgdGhhdCDigJxhdXRo4oCdIHNob3VsZCBub3QgYmUgdXNlZCBmb3IgZW1lcmdl bmN5IHNlcnZpY2VzIHB1cnBvc2VzIG9mIHVzaW5nIHJlc291cmNlIHByaW9yaXR5IGhlYWRlci48 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ SSB0aGluayBpdCB3b3VsZCBhbHNvIG1ha2Ugc2Vuc2UgdG8gbWFrZSBpdCBjbGVhciB0aGF0IHRo YXQgdGhpcyBkb2N1bWVudCBleHRlbmRzIDg0NDMgYW5kIGxpbmtpbmcgdGhlIGRvY3VtZW50cy48 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ Rm9yIGNvbXBhY3QgZm9ybSwgd2UgdGhpbmsgaXQgd291bGQgY29uZnVzZSBmb2xrcyB0byBhZGQg cHJvdmlzaW9ucyBmb3IgY29tcGFjdCBmb3JtIG9yIGFsbG93IGl0IGZvciBsaXR0bGUgZ2Fpbiwg YW5kIHRoZXJlZm9yZSBwcmVmZXIgdG8gbGVhdmUgaXQgdW5kZWZpbmVkLjxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+ DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5UaGFua3MuPG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+ DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPi1DaHJp czxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48YnI+DQo8YnI+DQo8YnI+DQo8YnI+DQo8bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1 LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPk9uIEF1ZyAyMCwgMjAyMCwgYXQgMTozMCBQTSwgSmFjayBSaWNrYXJkICZs dDs8YSBocmVmPSJtYWlsdG86SmFjay5SaWNrYXJkQG1ldGFzd2l0Y2guY29tIj5KYWNrLlJpY2th cmRAbWV0YXN3aXRjaC5jb208L2E+Jmd0OyB3cm90ZTo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7 PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkl0J3Mgbm90IGNsZWFyIHRoYXQgdGhpcyBzcGVjIHJl bGllcyBvbiB0aGF0LCBhbmQgSSdtIG5vdCBzdXJlIHRoYXQgaXQgc2hvdWxkPyBUbyBtZSBpdCBz ZWVtcyBsaWtlIHRoaXMgY291bGQgYmUgbW9yZSB3aWRlbHkgYXBwbGljYWJsZS48bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwv ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+V291bGQgeW91 IGJlIGFibGUgdG8gYWRkcmVzcywgZnJvbSBhIHZlcmlmaWNhdGlvbiBzZXJ2aWNlJ3MgcG9pbnQg b2Ygdmlldywgd2hhdCBpdCBzaG91bGQgZG8/IEkgdGhpbmsgdGhhdCB3aWxsIGNsZWFyIHVwIHdo eSAmcXVvdDtFc29yaWcmcXVvdDsgYW5kICZxdW90O0VTY2FsbGJhY2smcXVvdDsgYXJlIHVzZWZ1 bCBhYm92ZSBwbGFpbiAmcXVvdDthdXRoJnF1b3Q7LjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ SSB0aGluayB0aGUgc3BlYyB3b3VsZCBiZW5lZml0IGZyb20gdGhhdCBzZWN0aW9uIGFzIHdlbGwg U2VjdGlvbiA0IG9mIFJGQyA4NDQzIGFuZCBzZWN0aW9uIDExIG9mIGRyYWZ0LWlldGYtc3Rpci1w YXNzcG9ydC1yY2QtMDYgYXJlIGJvdGggaW5jcmVkaWJseSB1c2VmdWwuPG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4N CjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlRoYW5rcyw8bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPkphY2s8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8 L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9 ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0UxRTFFMSAxLjBwdDtwYWRkaW5nOjMuMHB0 IDBpbiAwaW4gMGluIj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxiPkZyb206PC9iPjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwv c3Bhbj5CcmlhbiBSb3NlbiAmbHQ7PGEgaHJlZj0ibWFpbHRvOmJyQGJyaWFucm9zZW4ubmV0Ij5i ckBicmlhbnJvc2VuLm5ldDwvYT4mZ3Q7PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFj ZSI+Jm5ic3A7PC9zcGFuPjxicj4NCjxiPlNlbnQ6PC9iPjxzcGFuIGNsYXNzPSJhcHBsZS1jb252 ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj4xOSBBdWd1c3QgMjAyMCAxNDo0MDxicj4NCjxiPlRv OjwvYj48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+SmFj ayBSaWNrYXJkICZsdDs8YSBocmVmPSJtYWlsdG86SmFjay5SaWNrYXJkQG1ldGFzd2l0Y2guY29t Ij5KYWNrLlJpY2thcmRAbWV0YXN3aXRjaC5jb208L2E+Jmd0Ozxicj4NCjxiPkNjOjwvYj48c3Bh biBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PGEgaHJlZj0ibWFp bHRvOmRyYWZ0LWlldGYtc3Rpci1ycGgtZW1lcmdlbmN5LXNlcnZpY2VzQGlldGYub3JnIj5kcmFm dC1pZXRmLXN0aXItcnBoLWVtZXJnZW5jeS1zZXJ2aWNlc0BpZXRmLm9yZzwvYT47PHNwYW4gY2xh c3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxhIGhyZWY9Im1haWx0bzpz dGlyQGlldGYub3JnIj5zdGlyQGlldGYub3JnPC9hPjxicj4NCjxiPlN1YmplY3Q6PC9iPjxzcGFu IGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj5SZTogW3N0aXJdIFJl dmlldyBvZiBkcmFmdC1pZXRmLXN0aXItcnBoLWVtZXJnZW5jeS1zZXJ2aWNlczxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjp3aGl0ZSI+QWJvdXQgMjAlIG9mIHRoZSBV UyBoYXMgbm93IHVwZ3JhZGVkIHRvIE5HOS0xLTEsIGFsdGhvdWdoIG1vc3Qgc2VydmljZSBwcm92 aWRlcnMgaGF2ZW7igJl0IHlldC4gJm5ic3A7VGhlIHdpcmVsZXNzIGNhcnJpZXJzIGFyZSBtb3Zp bmcgdG93YXJkcyBpdDsgdGVzdGluZyBpcyB1bmRlcndheS4gJm5ic3A7PC9zcGFuPjxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkkgd2lsbCBoYXZlIGEgY29tcGFuaW9uIGRvY3VtZW50 IGluIHNpcGNvcmUgdGhhdCBoYW5kbGVzIHRoZSBzaWduYWxpbmcgYXNwZWN0cyBvZiB0aGlzIG1l Y2hhbmlzbS4gJm5ic3A7Rm9yIHRoZSBvbGRlciBFOTExIHN5c3RlbSwgbm9uZSBvZiBzdGlyIHJl YWxseSBoZWxwcyBiZWNhdXNlIHRoZSBleGlzdGluZyBzeXN0ZW0gaXMgYnVpbHQgb24gdGhlIG9s ZGVyIENsYXNzIDQgc3dpdGNoZXMgKOKAnFNlbGVjdGl2ZSBSb3V0ZXJz4oCdKS4NCiAmbmJzcDtB bGwgb2YgdGhpcyBtZWNoYW5pc20gaXMgZm9yIE5HOS0xLTEgYW5kIHRoZSBlcXVpdmFsZW50IHNl cnZpY2VzIGluIHRoZSByZXN0IG9mIHRoZSB3b3JsZCwgYmFzZWQgb24gSUVURiBzdGFuZGFyZHMg KFJGQzY4ODEsIFJGQzUyMjIsIGFuZCBzZXZlcmFsIG90aGVycykuICZuYnNwOzxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+ DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxicj4NCjxicj4NCjxicj4NCjxi cj4NCjxicj4NCjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGJsb2Nr cXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2 Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+T24gQXVnIDE5LCAy MDIwLCBhdCA3OjE5IEFNLCBKYWNrIFJpY2thcmQgJmx0OzxhIGhyZWY9Im1haWx0bzpKYWNrLlJp Y2thcmRAbWV0YXN3aXRjaC5jb20iPkphY2suUmlja2FyZEBtZXRhc3dpdGNoLmNvbTwvYT4mZ3Q7 IHdyb3RlOjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8 ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+VGhhbmtzLCB0aGF0J3MgcmVhbGx5IHVzZWZ1 bCwgaG93ZXZlciwgSSdtIG5vdCBjb252aW5jZWQuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwv ZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rp dj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPkZvciBFU29yaWcsIGFzIGZhciBhcyBJIGtub3cgdGhpcyBpc24ndCBjdXJyZW50bHkgYWx3 YXlzIHRoZSBjYXNlLCBJIGFtIGF3YXJlIG9mIHNpdHVhdGlvbnMgd2hlcmUgZW1lcmdlbmN5IGNh bGxzIGp1c3QgbG9vayBsaWtlIG5vcm1hbCBjYWxscyB3aXRoIGEgbnVtYmVyIG9mIDkxMS4gSSdt IGFsc28gc3RpbGwgdW5jbGVhciBhYm91dCB3aGF0IGFmZmVjdCB0aGlzIGhhcywgYXMgeW91IGNh biBjdXJyZW50bHkNCiBhbHJlYWR5IHNpZ24gZW1lcmdlbmN5IGNhbGxzIHVzaW5nIHRoZSBzdGFu ZGFyZCBtZWNoYW5pc21zIChiYXJyaW5nIHRoZSB3aG9sZSAmcXVvdDt1cm46c2VydmljZTpzb3Mm cXVvdDsgdG4gd2hpY2ggSSBkb24ndCBiZWxpZXZlIGlzIHN0YW5kYXJkaXNlZCBmb3IgU1RJUiB5 ZXQ/KSZuYnNwOyBieSBwdXR0aW5nICZxdW90O2VzbmV0LjAmcXVvdDsgaW4gdGhlIGF1dGggZmll bGQgb2YgYW4gcnBoIHBhc3Nwb3J0LjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwv ZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rp dj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5Gb3Ig RVNjYWxsYmFjaywgaWYgdGhlIHNwaCBhbmQgJnF1b3Q7cnBoLmF1dGgmcXVvdDsgY2xhaW1zIGNv dmVyIHRoZWlzIGVudGlyZWx5IHdoeSBpcyBFU2NhbGxiYWNrIG5lZWRlZD8gSSdtIGFsc28gc3Rp bGwgdW5jbGVhciB3aGF0IHRoZSB2ZXJpZmljYXRpb24gc2VydmljZSBiZWhhdmlvdXIgaXMgaGVy ZS48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4N CjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxk aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SSdtIHN0aWxsIHVuY2xlYXIgYXMgdG8g aG93IHRoaXMgc3BlYyBoZWxwcyB3aXRoIGFsbG93aW5nIGFuZCBwcmV2ZW50aW5nIG1hbGljaW91 cyB1c2Ugb2YgZW1lcmdlbmN5IGNhbGxzLiBZb3UgY2FuIGFscmVhZHkgcHV0IGVzbmV0IHJlc291 cmNlIHByaW9yaXR5IHBhaXJzIGluIHRoZSAmcXVvdDtycGguYXV0aCZxdW90OyBjbGFpbSBhbmQg dGhhdCBzZWVtcyB0byBwcm92aWRlIGFzIG11Y2ggc2VjdXJpdHkgYXMgdGhpcyBkb2VzLg0KIEkg ZG8gYWdyZWUgdGhlIHNwaCBjbGFpbSBkb2VzIHByb3ZpZGUgdmFsdWUsIGhvd2V2ZXIuPG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0K PGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkkgZGlkIGp1c3QgcmVhbGlzZSB0aGF0IHRoZSBlc25l dCBSZXNvdXJjZSBQcmlvcml0eSBuZWVkcyB0byBiZSBpbiB0aGUgJnF1b3Q7cnBoLmF1dGgmcXVv dDsgY2xhaW0gb3IgdGhlIGxvZ2ljIGZyb20gdGhhdCByZmMgd2lsbCBraWNrIGluIGFuZCByZW1v dmUgaXQsIGFzIHBlcjo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwv ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlJG QyA4NDQzLCBzZWN0aW9uIDQuMjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2 Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmll ciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyBJbiBzdWNoIHNjZW5hcmlvcywgdGhlIFNJUCAnUmVz b3VyY2UtUHJpb3JpdHknIGhlYWRlciBmaWVsZCBTSE9VTEQgYmU8L3NwYW4+PG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBw dDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7IHN0cmlw cGVkIGZyb20gdGhlIFNJUCByZXF1ZXN0LCBhbmQgdGhlIG5ldHdvcmsgZW50aXRpZXMgc2hvdWxk IHRyZWF0PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9k aXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcm cXVvdDsiPiZuYnNwOyZuYnNwOyB0aGUgY2FsbCBhcyBhbiBvcmRpbmFyeSBjYWxsLjwvc3Bhbj48 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxk aXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SSdsbCBub3RlIHRoYXQgc29tZSBvZiBteSBx dWVzdGlvbnMgYW5kIGNvbmNlcm5zIGhhdmVuJ3QgYmVlbiBhZGRyZXNzZWQgeWV0LCBJJ20gaGFw cHkgdG8gcmVzb2x2ZSB0aGlzIGZpcnN0LCBqdXN0IG1ha2luZyBhIG5vdGUgc28gdGhhdCB0aGV5 IGRvbid0IGdldCBsb3N0L0kgZG9uJ3QgZm9yZ2V0IGFib3V0IHRoZW0uPG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5KYWNrPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwv ZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rp dj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29s aWQgI0UxRTFFMSAxLjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGluIj4NCjxkaXY+DQo8ZGl2 Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj5Gcm9tOjwvYj48c3BhbiBj bGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+QnJpYW4gUm9zZW4gJmx0 OzxhIGhyZWY9Im1haWx0bzpickBicmlhbnJvc2VuLm5ldCI+YnJAYnJpYW5yb3Nlbi5uZXQ8L2E+ Jmd0OzxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48YnI+ DQo8Yj5TZW50OjwvYj48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8 L3NwYW4+MTggQXVndXN0IDIwMjAgMjI6MzE8YnI+DQo8Yj5Ubzo8L2I+PHNwYW4gY2xhc3M9ImFw cGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPkphY2sgUmlja2FyZCAmbHQ7PGEgaHJl Zj0ibWFpbHRvOkphY2suUmlja2FyZEBtZXRhc3dpdGNoLmNvbSI+SmFjay5SaWNrYXJkQG1ldGFz d2l0Y2guY29tPC9hPiZndDs8YnI+DQo8Yj5DYzo8L2I+PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZl cnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxhIGhyZWY9Im1haWx0bzpkcmFmdC1pZXRmLXN0aXIt cnBoLWVtZXJnZW5jeS1zZXJ2aWNlc0BpZXRmLm9yZyI+ZHJhZnQtaWV0Zi1zdGlyLXJwaC1lbWVy Z2VuY3ktc2VydmljZXNAaWV0Zi5vcmc8L2E+OzxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQt c3BhY2UiPiZuYnNwOzwvc3Bhbj48YSBocmVmPSJtYWlsdG86c3RpckBpZXRmLm9yZyI+c3RpckBp ZXRmLm9yZzwvYT48YnI+DQo8Yj5TdWJqZWN0OjwvYj48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVy dGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+UmU6IFtzdGlyXSBSZXZpZXcgb2YgZHJhZnQtaWV0Zi1z dGlyLXJwaC1lbWVyZ2VuY3ktc2VydmljZXM8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+ DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxk aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5MZXTigJlzIGtlZXAgdGhlIHR3byB1c2UgY2FzZXMgc2Vw YXJhdGU6PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRp dj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkVTb3JpZyBpcyBh biBlbWVyZ2VuY3kgY2FsbCAodXNlciB0byBhdXRob3JpdHkpLjxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4N CjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+RVNjYWxsYmFjayBpcyBhIGNhbGwg ZnJvbSBhdXRob3JpdHkgdG8gdXNlci48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8 L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rp dj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Rm9yIEVTb3JnLCB0aGUgY2FsbCBpcyBtYXJrZWQg d2l0aCBhIFJlcXVlc3QtVVJJIG9mIHVybjpzZXJ2aWNlOnNvcy4gJm5ic3A7VGhlIOKAnFRv4oCd IGZpZWxkIGlzIGlnbm9yZWQgaW4gcm91dGluZyBhbmQgaGFuZGxpbmcgdGhlIGNhbGwuICZuYnNw O1RoYXTigJlzIGhvdyB5b3Uga25vdyB0aGlzIGlzIGFuIGVtZXJnZW5jeSBjYWxsLiAmbmJzcDsg Rm9yIHN0aXIgcHVycG9zZXMsIHRoZSBGcm9tIGlzIGFuIG9yZGluYXJ5IGlkZW50aWZpZXIsIGFu ZA0KIGdldHMgdHJlYXRlZCBpbiB0aGUgbm9ybWFsIHdheS4gJm5ic3A7SG93ZXZlciwgdGhlIHJw aCB2YWx1ZSBjYW4gb25seSBiZSB1c2VkIGJ5IGEgdmFsaWQgZW1lcmdlbmN5IGNhbGwsIGFuZCBh IHZhbGlkIGVtZXJnZW5jeSBjYWxsIGlzIGEgUmVxdWVzdCBVUkkgb2YgdXJuOnNlcnZpY2U6c29z LCBhbmQgYSB2YWxpZCBGcm9tLiAmbmJzcDtTbyB5b3UgZG9u4oCZdCBoYXZlIGFueSBrbm93bGVk Z2Ugb2YgZW1lcmdlbmN5IHNlcnZpY2VzIGlkZW50aWZpZXJzLCBvbmx5IHRoZQ0KIFJlcXVlc3Qg VVJJIG9mIHVybjpzZXJ2aWNlOnNvcy4gJm5ic3A7Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rp dj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0K PGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxk aXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkZvciBFU2NhbGxiYWNrLCB0 aGUgbWFya2luZyBpcyBhIGRpc3Rpbmd1aXNoZWQgdmFsdWUgaW4gU0lQIFByaW9yaXR5LiAmbmJz cDtJZiBhIGNhbGwgaGFzIHRoYXQgdmFsdWUsIGl04oCZcyBhIGNhbGwgYmFjay4gJm5ic3A7VGhl IG9yaWdpbmF0aW5nIHNlcnZpY2UgcHJvdmlkZXIga25vd3Mgd2hvIGFyZSB0aGUgYXV0aG9yaXRp ZXMgd2hvIGFyZSBhbGxvd2VkIHRvIHBsYWNlIGNhbGwgYmFja3MsIHNvIHRoZSBjaGVjayBpcyB3 aGF0DQogaXMgaW4gU0lQIFByaW9yaXR5LCBhbmQgb25lIG9mIHRoZSBhbGxvd2VkIGF1dGhvcml0 aWVzIGluIEZyb20uICZuYnNwO0FzIGEgcHJhY3RpY2FsIG1hdHRlciwgaW4gbW9zdCBjYXNlcywg dGhlIGNhbGwgd2lsbCBiZSBzaWduZWQgYnkgdGhlIGVtZXJnZW5jeSBhdXRob3JpdGllcyB0aGVt c2VsdmVzLCB3aG8gd2lsbCBiZSBhYmxlIHRvIGdldCBhcHByb3ByaWF0ZSBjcmVkZW50aWFscyBm b3IgdGhpcyBwdXJwb3NlLiAmbmJzcDtJbiBtb3N0IGNhc2VzIEnigJltIGF3YXJlDQogb2YsIHRo ZSBUbyBpbiBhbiBlbWVyZ2VuY3kgY2FsbCB3b27igJl0IG1hdGNoIHRoZSBGcm9tIGluIGEgQ2Fs bGJhY2ssIGJ1dCBpdOKAmXMgcG9zc2libGUgZm9yIHRoYXQgdG8gaGFwcGVuLCBhbmQgd2Ugd2Fu dCB0byBhbGxvdyBpdC48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwv ZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2 Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+RXNuZXQgaXMgYSBSZXNvdXJjZSBQcmlvcml0eSBIZWFkZXIgbmFt ZXNwYWNlLCBub3QgYSBTSVAgUHJpb3JpdHkgdmFsdWUuICZuYnNwO1dl4oCZcmUgYWxsb3dpbmcg ZW1lcmdlbmN5IGNhbGxzIGFuZCBjYWxsIGJhY2tzIHRvIHVzZSBycGgsIGFuZCB3ZeKAmXJlIHBy b3RlY3RpbmcgYWdhaW5zdCBtYWxpY2lvdXMgdXNlIG9mIGl0LiAmbmJzcDtTbyB1bmxlc3MgdGhl IGNhbGwgaGFzIHVybjpzZXJ2aWNlOnNvcyBpbiBSZXF1ZXN0IFVSSSwNCiBvciB0aGUgcmlnaHQg U0lQIFByaW9yaXR5IGluIGEgY2FsbCBiYWNrIChhbmQgZnJvbSBhbiBhdXRob3JpemVkIGF1dGhv cml0eSkgdGhleSBjYW7igJl0IHVzZSBycGggd2l0aCB0aGUgZXNuZXQgbmFtZXNwYWNlLiAmbmJz cDtHZW5lcmFsbHksIHVubGVzcyB1bmRlciBhdHRhY2ssIGVtZXJnZW5jeSBjYWxscyBnbyB0aHJv dWdoIGV2ZW4gaWYgdGhlcmUgaXNu4oCZdCBhIHBhc3Nwb3J0LiAmbmJzcDtNYW55IG5ldHdvcmtz IHdvbuKAmXQgb2ZmZXIgYWN0dWFsIHByaW9yaXR5DQogdG8gZW1lcmdlbmN5IGNhbGxzLCBidXQg dGhlIGVtZXJnZW5jeSBzZXJ2aWNlcyBuZXR3b3JrcyAoRVNJbmV0cykgd2lsbC4gJm5ic3A7PG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRp dj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJz cDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+ DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PklmIGEgY2FsbCBhcnJpdmVzIGFueXdoZXJlIHdpdGggYW4gcnBoIHVzaW5nIGVzbmV0LCBhbmQg aXNu4oCZdCBhbiBlbWVyZ2VuY3kgY2FsbCwgd2l0aCB0aGUgYXBwcm9wcmlhdGUgcGFzc3BvcnQs ICZuYnNwO2FueSBpbnRlcm1lZGlhcnkgY2FuIHJlZnVzZSB0byBnaXZlIGl0IGFueSBwcmlvcml0 eSwgJm5ic3A7VGhlIGVtZXJnZW5jeSBhdXRob3JpdGllcyBtYXkgYWNjZXB0IGEgY2FsbCB3aXRo b3V0IGEgdmFsaWQgcGFzc3BvcnQsDQogYnV0IHRoZXkgbWlnaHQgdHJlYXQgaXQgd2l0aCBtdWNo IG1vcmUgc3VzcGljaW9uIHRoYW4gdGhleSB3b3VsZCBhbnkgb3RoZXIgY2FsbC48bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRp dj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+ DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Rm9yIGNh bGwgYmFja3MsIHRoZSBuZXR3b3JrIG1heSBoYXZlIHNwZWNpYWwgYmVoYXZpb3IuICZuYnNwO0Zv ciBleGFtcGxlLCBpdCBtYXkgc2VuZCB0aGUgY2FsbCB0byB0aGUgZGV2aWNlIHRoYXQgcGxhY2Vk IHRoZSBlbWVyZ2VuY3kgY2FsbCwgcmF0aGVyIHRoYW4sIGZvciBleGFtcGxlLCB2b2ljZSBtYWls LiAmbmJzcDtUaGUgbmV0d29yayBoYXMgdG8gYmUgYWJsZSB0byB0cnVzdCB0aGF0IFNJUCBQcmlv cml0eSBpcyBzZXQNCiBhcHByb3ByaWF0ZWx5LiAmbmJzcDtJdCB3aWxsIGFsc28gaGF2ZSBycGgg dXNpbmcgZXNuZXQsIGFuZCB0aGUgbmV0d29yayBjYW4gZ3JhbnQgaXQgYXBwcm9wcmlhdGUgcHJp b3JpdHkgaWYgaXQgaGFzIHRoYXQgY2FwYWJpbGl0eSwgYW5kIHdvdWxkIG5vdCBhbGxvdyBlc25l dCBvdGhlcndpc2UuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rp dj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4N CjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPlRoZSBvbmx5IHZhbHVlIGluIGNvdmVyaW5nIG90aGVyIHVzZXMgb2Yg U0lQIFByaW9yaXR5IGlzIHRvIHByb3RlY3QgYWdhaW5zdCBtaWRkbGUgYm94ZXMgbW9kaWZ5aW5n IGl0LiAmbmJzcDtXZSBkb27igJl0IHJlYWxseSBoYXZlIHVzZSBjYXNlcyBmb3IgdGhhdC4gJm5i c3A7SXQgcHJvYmFibHkgd291bGRu4oCZdCBodXJ0IHRvIGFsbG93IGl0IHRob3VnaC48bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0K PGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxk aXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+RG9l cyB0aGF0IGhlbHA/PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rp dj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4N CjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPkJyaWFuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9k aXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+ DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48YnI+DQo8YnI+DQo8YnI+DQo8YnI+DQo8YnI+DQo8YnI+DQo8bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGJsb2NrcXVvdGUg c3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPGRp dj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPk9uIEF1ZyAxNCwg MjAyMCwgYXQgMToyMSBQTSwgSmFjayBSaWNrYXJkICZsdDs8YSBocmVmPSJtYWlsdG86SmFjay5S aWNrYXJkPTQwbWV0YXN3aXRjaC5jb21AZG1hcmMuaWV0Zi5vcmciPkphY2suUmlja2FyZD00MG1l dGFzd2l0Y2guY29tQGRtYXJjLmlldGYub3JnPC9hPiZndDsgd3JvdGU6PG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8 ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2 Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5JIGhhdmUgcmV2aWV3ZWQgZHJh ZnQtaWV0Zi1zdGlyLXJwaC1lbWVyZ2VuY3ktc2VydmljZXMtMDIgYW5kIGhhdmUgc29tZSBjb25j ZXJucyBhbmQgcXVlc3Rpb25zLiBJIGRvbid0IGJlbGlldmUgdGhpcyBzcGVjIGlzIGltcGxlbWVu dGFibGUgaW4gaXRzIGN1cnJlbnQgZm9ybS48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+ DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+VGhhbmtzLDxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4N CjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SmFjazxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRp dj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+ DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj5XaHkgYXJlICZx dW90O0VTb3JpZyZxdW90OyBhbmQgJnF1b3Q7RVNjYWxsYmFjayZxdW90OyBkaXN0aW5jdD88L2I+ PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0K PGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5U aGV5IHNlZW0gdG8gc2VydmUgYSB2ZXJ5IHNpbWlsYXIgcHVycG9zZSB3aXRoIHRoZSBvbmx5IGRp ZmZlcmVuY2UgYmVpbmcgd2hldGhlciBvcmlnIG9yIGRlc3Qgc2hvdWxkIGJlIHRoZSBlbWVyZ2Vu Y3kgc2VydmljZXMuIEkgZG9uJ3QgYmVsaWV2ZSB0aGVyZSdzIGFueSBjaGVjayB0aGF0IGNhbiBi ZSBkb25lIHRvIHZhbGlkYXRlOjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2 Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyBXaGVuIHVzaW5nICZxdW90 O0VTb3JpZyZxdW90OyBhcyB0aGUgJnF1b3Q7cnBoJnF1b3Q7IGFzc2VydGlvbiB2YWx1ZSwgdGhl ICZxdW90O29yaWcmcXVvdDsgY2xhaW0gb2Y8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4N CjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEw LjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7IHRo ZSBQQVNTcG9yVCBNVVNUIHJlcHJlc2VudCB0aGUgY2FsbGluZyBwYXJ0eSBudW1iZXIgdGhhdCBp bml0aWF0ZXM8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8 L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTom cXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7IHRoZSBjYWxsIHRvIGVtZXJnZW5j eSBzZXJ2aWNlcy48L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+ DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj5UaGlzIChhbmQgdGhlIGVxdWl2YWxlbnQgc3RhdGVtZW50IGZvciBF U2NhbGxiYWNrKSBkb24ndCBzZWVtIHBvc3NpYmxlIHRvIG1lIHRvIGNoZWNrIChiYXJyaW5nIHRo ZSBzdGFuZGFyZCBvcmlnL2Rlc3QgY2hlY2tpbmcpLi48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlRoaXMgd291bGQgbWFrZSB0aGUgY2hlY2sg JnF1b3Q7YXQgbGVhc3Qgb25lIG9mIHRoZSBwYXJ0aWVzIHNob3VsZCBiZSB0aGUgZW1lcmdlbmN5 IHNlcnZpY2VzJnF1b3Q7IGVub3VnaCB0byB2YWxpZGF0ZSB0aGF0IHRoaXMgd2FzIGEgcmVhc29u YWJsZSBjYWxsLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+ DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8 L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rp dj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxiPldoeSBoYXZlIHRoZW0gYXQgYWxsIHJhdGhlciB0aGFuIGp1 c3QgdXNpbmcgYXV0aD88L2I+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+ DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj5UaGlzIGlzIHZlcnkgcG9zc2libHkgYW4gaXNzdWUgd2l0aCBteSB1 bmRlcnN0YW5kaW5nLCBidXQgSSdtIG5vdCBjbGVhciBvbiB3aHkgJnF1b3Q7RVNvcmlnJnF1b3Q7 IGFuZCAmcXVvdDtFU2NhbGxiYWNrJnF1b3Q7IGV2ZW4gbmVlZCB0byBleGlzdC4gJnF1b3Q7ZXNu ZXQuMCZxdW90OyBldGMuIGFyZSBTSVAgUmVzb3VyY2UgUHJpb3JpdHkgaGVhZGVycywgc28gc2hv dWxkIGJlIGluY2x1ZGVkIGluIHRoZSAmcXVvdDthdXRoJnF1b3Q7IGZpZWxkIGFueXdheSBieSB0 aGUgUlBIIHNwZWMuDQogVGhpcyBzcGVjIGFwcGVhcnMgdG8gYXBwbHkgZXh0cmEgY29uc3RyYWlu dHMgKHRoYXQgYSBvbmUgb2YgdGhlIGNhbGxlcnMgbXVzdCBiZSB0aGUgZW1lcmdlbmN5IHNlcnZp Y2VzKSBmb3IgdGhlICZxdW90O2VzbmV0JnF1b3Q7IG5hbWVzcGFjZSBidXQgaXQncyBub3QgY2xl YXIgd2h5IGVudGlyZWx5IHNlcGFyYXRlIGNsYWltcyBhcmUgbmVlZGVkLjxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0K PGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxk aXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5JbiBhIHNpbWls YXIgdmVpbiwgd2hhdCBzaG91bGQgYSB2ZXJpZmllciBkbyBpZiBpdCByZWNlaXZlcyBhIGNhbGwg Y29udGFpbmluZyBhbiBpbnZhbGlkICZxdW90O0VTb3JpZyZxdW90OyBvciAmcXVvdDtFU2NhbGxi YWNrJnF1b3Q7IHZhbHVlIG9yIHRoZSBwYXNzcG9ydCBpcyBpbnZhbGlkL3VudHJ1c3RlZCwgSSdt IGFzc3VtaW5nIHRoZSBiZWhhdmlvdXIgaXMgdGhlIHNhbWUgYXMgZm9yIGF1dGggYnV0IHRoaXMg aXNuJ3QgY2xlYXIuIEFsdGhvdWdoDQogc3RyaXBwaW5nIHRoZSBmYWN0IHRoYXQgdGhpcyBpcyBh biBlbWVyZ2VuY3kgY2FsbCBpcyBwb3RlbnRpYWxseSBkYW5nZXJvdXMuLjxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0K PGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxk aXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2 Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPlNw ZWNpZnkgdGhlIHR5cGUgb2YgdGhlICZxdW90O0VTb3JpZyZxdW90OyBhbmQgJnF1b3Q7RVNjYWxs YmFjayZxdW90OyBjbGFpbXMuPC9iPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwv ZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+VGhpcyBzcGVjaWZpY2F0aW9uIGN1cnJlbnRseSBkb2Vzbid0 IHNwZWNpZnkgdGhlIHR5cGUgb2YgdGhlIG5ldyBmaWVsZHMsIHRoZXJlIGFyZSBvbmx5IGV4YW1w bGVzIGFuZCB0aGlzIGlzbid0IGVub3VnaC4gSXQgbG9va3MgbGlrZSB0aGV5IGJvdGggZm9sbG93 IHRoZSBzYW1lIHNjaGVtZSBhcyB0aGUgcnBoICZxdW90O2F1dGgmcXVvdDsgY2xhaW0sIGhvd2V2 ZXIgJnF1b3Q7ZXNuZXQseCZxdW90OyBkb2Vzbid0IHF1aXRlIGZpdCBpbnRvIHRoYXQNCiBkdWUg dG8gdGhlIGNvbW1hIGFuZCB0aGF0IHggaXNuJ3QgYSB2YWxpZCBwcmlvcml0eSB2YWx1ZS48bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2 Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNw OzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4N CjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwv ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48Yj5XaHkgaXMgc3BoIGxpbWl0ZWQgdG8gcHNhcC1jYWxsYmFjaz8gV2hhdCBzaG91bGQg dGhlIHZlcmlmaWVyIGRvIGlmIGl0IGlzbid0IHRoYXQ/IFdoYXQgc2hvdWxkIGl0IGRvIGlmIGl0 IGlzPzwvYj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0K PC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPkknbSBub3QgZW50aXJlbHkgY2xlYXIgb24gdGhlIHB1cnBvc2Ugb2YgdGhlIHNwaCBj bGFpbSwgaG93ZXZlciwgaXQgc2VlbXMgb2RkIHRoYXQgaXQgZG9lc24ndCBjb3ZlciB0aGUgZnVs bCByYW5nZSBvZiBwb3NzaWJsZSB2YWx1ZXMgZm9yIHRoZSBTSVAgUHJpb3JpdHkgSGVhZGVyLiBJ cyB0aGVyZSBhIHJlYXNvbiB0aGF0IGl0IGRvZXNuJ3QgY292ZXIgdGhlICZxdW90O25vbi11cmdl bnQmcXVvdDssICZxdW90O25vcm1hbCZxdW90OywgJnF1b3Q7dXJnZW50JnF1b3Q7LA0KIG9yICZx dW90O2VtZXJnZW5jeSZxdW90OyB2YWx1ZXM/PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2 Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5UaGVyZSBpcyBhbHNvIG5vIHZlcmlmaWVyIGJlaGF2 aW91ciBkZWZpbmVkIGhlcmUsIHNob3VsZCB0aGUgdmVyaWZpZXIgcmVtb3ZlIHRoZSBQcmlvcml0 eSBoZWFkZXIgaWYgaXQgcmVjZWl2ZXMgYW4gaW52aXRlIHdpdGggbm8gcGFzc3BvcnRzIHNpZ25p bmcgZm9yIGl0PyBUaGF0IHNlZW1zIGRhbmdlcm91cyB0byBtZSBidXQgd291bGQgYmUgY29uc2lz dGVudCB3aXRoIHJwaC4gQWx0ZXJuYXRpdmVseSwgd2hhdA0KIHNob3VsZCB0aGUgdmVyaWZpZXIg ZG8gaWYgaXQgcmVjZWl2ZXMgYW4gaW52aXRlIHdpdGggYSB2YWxpZCBwYXNzcG9ydCBjbGFpbWlu ZyBzcGggYnV0IHdpdGggbm8gUHJpb3JpdHkgaGVhZGVyIHNob3VsZCBpdCBhZGQgaXQgaW4/IEkn bSBub3Qgc3VyZSB0aGUgc3BlYyBuZWVkcyB0byBiZSB0b28gcHJlc2NyaXB0aXZlIGhlcmUsIGhv d2V2ZXIgc29tZSBtZW50aW9uIG9mIHZlcmlmaWVyIGJlaGF2aW91ciBhbmQgdGhlIGFzc29jaWF0 ZWQgc2VjdXJpdHkNCiBjb25zaWRlcmF0aW9ucyB3b3VsZCBiZSB1c2VmdWwuPG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+ DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48YnI+DQo8L2I+ PGJyPg0KPGI+U2hvdWxkIHRoZSBzcGVjIGJlIHN0cm9uZ2VyIGFib3V0IHRoZSBjb21wYWN0IGZv cm0/PC9iPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8 L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+U2VjdGlvbiAzIGN1cnJlbnRseSBzdGF0ZXM8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8cHJlPiZuYnNwOyZuYnNwOyBUaGUgdXNl IG9mIHRoZSBjb21wYWN0IGZvcm0gb2YgUEFTU3BvclQgaXMgbm90IHNwZWNpZmllZCBpbiB0aGlz PG86cD48L286cD48L3ByZT4NCjxwcmU+Jm5ic3A7Jm5ic3A7IGRvY3VtZW50LjxvOnA+PC9vOnA+ PC9wcmU+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPkhvd2V2ZXIsIGEgY29tcGFjdC1mb3JtIHBhc3Nwb3J0IGZvbGxvd2luZyB0aGlzIHNw ZWMgd291bGQgYmUgaGFyZCB0byB2ZXJpZnkgYXMgaXQgaW50cm9kdWNlcyBtdWx0aXBsZSBwb3Nz aWJsZSBycGggdmFyaWFudHMsIEkgdGhpbmsgdGhpcyBzcGVjIGNvdWxkIGdvIGZ1cnRoZXIgYW5k IHNheSB5b3Ugc2hvdWxkbid0L211c3RuJ3QuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2 Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48YnI+DQo8YnI+DQpXaGF0IGlzIHRoZSByZXF1 aXJlbWVudCBvZiB0aGVzZSBuZXcgcGFyYW1ldGVycy48L2I+PG86cD48L286cD48L3A+DQo8L2Rp dj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0K PGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5BcyBJIHVuZGVyc3RhbmQgaXQsIHRo ZSBwYXNzcG9ydCBzcGVjIGFsbG93cyB5b3UgdG8gY3JlYXRlIGEgcGFzc3BvcnQgY29udGFpbmlu ZyB3aGF0ZXZlciBKV1QgZmllbGRzIHlvdSB3YW50IGFuZCB2ZXJpZmllcnMgc2hvdWxkIGp1c3Qg aWdub3JlIGFueSBmaWVsZHMgdGhleSBkb24ndCB1bmRlcnN0YW5kLiBVbmxlc3MgdGhlICZxdW90 O3BwdCZxdW90OyBjbGFpbSBpcyBzZXQsIHdoaWNoIGluZGljYXRlcyB0aGF0IHZlcmlmaWVycw0K IHNob3VsZCBkaXNjYXJkIGl0IGlmIHRoZXkgZG9uJ3QgcmVjb2duaXNlIHRoYXQgcGFzc3BvcnQg dHlwZS4gQXMgdGhpcyBzcGVjIGFkZHMgYWRkaXRpb25hbCBmaWVsZHMgdG8gYW4gZXhpc3Rpbmcg cGFzc3BvcnQgdHlwZSBpdCBpc24ndCBpbW1lZGlhdGVseSBjbGVhciB3aGF0IHRoZSBiZWhhdmlv dXIgc2hvdWxkIGJlLiBTcGVjaWZpY2FsbHksIGlzIGFuIHJwaCBwYXNzcG9ydCBjb250YWluaW5n IG9ubHkgJnF1b3Q7cnBoLkVTb3JpZyZxdW90OyB2YWxpZCBub3cNCiAod2hlcmUgaXQgd291bGRu J3QgYmUgYmVmb3JlIGJlY2F1c2UgYXV0aCBpc24ndCBwcmVzZW50KSwgaXMgYW4gcnBoIHBhc3Nw b3J0IGNvbnRhaW5pbmcgbm8gcnBoIGFuZCBvbmx5IHNwaCB2YWxpZCwgYW5kIHdoYXQgZG9lcyBh IG5vbi1ycGggcGFzc3BvcnQgd2l0aCBzcGggb3IgRVNvcmlnIHNldCBtZWFuPzxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2 Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+Jm5ic3A7PC9i PjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4N CjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90Oyxz YW5zLXNlcmlmIj5fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f Xzxicj4NCnN0aXIgbWFpbGluZyBsaXN0PGJyPg0KPC9zcGFuPjxhIGhyZWY9Im1haWx0bzpzdGly QGlldGYub3JnIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlmIj5zdGlyQGlldGYub3JnPC9zcGFuPjwvYT48c3Bh biBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90 OyxzYW5zLXNlcmlmIj48YnI+DQo8L3NwYW4+PGEgaHJlZj0iaHR0cHM6Ly9uYW0xMC5zYWZlbGlu a3MucHJvdGVjdGlvbi5vdXRsb29rLmNvbS8/dXJsPWh0dHBzJTNBJTJGJTJGd3d3LmlldGYub3Jn JTJGbWFpbG1hbiUyRmxpc3RpbmZvJTJGc3RpciZhbXA7ZGF0YT0wMiU3QzAxJTdDSmFjay5SaWNr YXJkJTQwbWV0YXN3aXRjaC5jb20lN0NmZWM1N2MwZTY0YTM0MTU2NDczNTA4ZDg0ZjdhY2EwNiU3 QzlkOWU1NmViZjYxMzRkZGJiMjdiYmZjZGYxNGIyY2RiJTdDMSU3QzAlN0M2MzczNDY3MzYwOTY4 MTEwNzYmYW1wO3NkYXRhPTNCbWNHaFRNeHJHUUNtcGpEUUdWNXNHMGxDY1lWaVUlMkZ4cGpCSnYz bWxiMCUzRCZhbXA7cmVzZXJ2ZWQ9MCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250 LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+aHR0cHM6Ly93d3cuaWV0 Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9zdGlyPC9zcGFuPjwvYT48bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rp dj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPC9kaXY+ DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0K PC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwv ZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZu YnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQoNCg0KPGJyPjxicj48c3BhbiBzdHlsZT0i Zm9udC1mYW1pbHk6QXJpYWw7IEZvbnQtc2l6ZTo4LjBwdCI+IDxocj4gTm90aWNlOiBUaGlzIGUt bWFpbCB0b2dldGhlciB3aXRoIGFueSBhdHRhY2htZW50cyBtYXkgY29udGFpbiBpbmZvcm1hdGlv biBvZiBSaWJib24gQ29tbXVuaWNhdGlvbnMgSW5jLiB0aGF0IGlzIGNvbmZpZGVudGlhbCBhbmQv b3IgcHJvcHJpZXRhcnkgZm9yIHRoZSBzb2xlIHVzZSBvZiB0aGUgaW50ZW5kZWQgcmVjaXBpZW50 LiAgQW55IHJldmlldywgZGlzY2xvc3VyZSwgcmVsaWFuY2Ugb3IgZGlzdHJpYnV0aW9uIGJ5IG90 aGVycyBvciBmb3J3YXJkaW5nIHdpdGhvdXQgZXhwcmVzcyBwZXJtaXNzaW9uIGlzIHN0cmljdGx5 IHByb2hpYml0ZWQuICBJZiB5b3UgYXJlIG5vdCB0aGUgaW50ZW5kZWQgcmVjaXBpZW50LCBwbGVh c2Ugbm90aWZ5IHRoZSBzZW5kZXIgaW1tZWRpYXRlbHkgYW5kIHRoZW4gZGVsZXRlIGFsbCBjb3Bp ZXMsIGluY2x1ZGluZyBhbnkgYXR0YWNobWVudHMuPGhyPiA8L3NwYW4+PC9ib2R5PjwvaHRtbD4N Cg== --_000_BN7PR03MB3827DCC6788EEFEB1C20DCC9A5090BN7PR03MB3827namp_-- From nobody Mon Oct 12 07:19:17 2020 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2E0E73A150E for ; Mon, 12 Oct 2020 07:19:16 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.888 X-Spam-Level: X-Spam-Status: No, score=-1.888 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, T_SPF_PERMERROR=0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=brianrosen-net.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8lfIriXXvql3 for ; Mon, 12 Oct 2020 07:19:14 -0700 (PDT) Received: from mail-il1-x135.google.com (mail-il1-x135.google.com [IPv6:2607:f8b0:4864:20::135]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5B5B03A1508 for ; Mon, 12 Oct 2020 07:19:14 -0700 (PDT) Received: by mail-il1-x135.google.com with SMTP id q1so16076459ilt.6 for ; Mon, 12 Oct 2020 07:19:14 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=brianrosen-net.20150623.gappssmtp.com; s=20150623; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=agHho8O9pHFW1dhG5zzjjvSkafMEUjWkwHD8jFrwyqU=; b=IuwS4Qgo1lmq2TOFjCGJMkPqBUuFi0bo6OGsxraZbHHVg57o9ND12lDvJ9LfRO5Hu8 BCDaweMqDX3UeLZtS5BJYre3ZCX1b2+MK9Q5RJ0rVotC0uaZselAHvfDyEbUDVu/Fo6q qG3+GSTJv1irFPa3UPbV46NooQRIEYAs1HYVw4/sffcK6ba87/S/g8iPqtC3fAq9/BFC Uo20JN6GZxrXQXlzbV1v7eYRJV2FxbECOhLGvD2d30D+b8cb1PtgNTFgdqRDVPLfAKcy dZEK/hGRlrVk8ijpd5G2gAd4b4KK1RlCSeWlSQm/Dbv/258t2fi9yez8GQFBz67y+Wa5 /7Rg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=agHho8O9pHFW1dhG5zzjjvSkafMEUjWkwHD8jFrwyqU=; b=SJjuUzhc4MyTokzTDxyJQ4TIlHENSWQAwX8DHF2+shOURsj19tGsfHNf1DZGCIQYiA RLbmGbNl4+kXEW1gc13ptMWRK9Wrz6J2lEk3vgpPfgbx9xVi0eJwNllwtyokllbo7vsv Kpm4QeaF63pEoFRZH05NrOsPjAYbNf8TITFapJ3IezOOB0ZpcQHrdEzysVxRZzZac+NK NDrEQhQpf11UN1Zy0g1d+djUiUNuG5bRoxBYYdm8V840MZvuIFTj0QBcvDfO4nfFLr5T MnjEVZXtYvse2Te7y8kWl0VszquBXv6JI/OBiocvwML4LpDmmQQ3O9qpGELnSKH42XG/ ChPw== X-Gm-Message-State: AOAM531ofQeO5aSpqCRl8q4fLMzN3lugY6uOlOVu0vFBtfjXPceEnejI 1NzPHgwMic88a6U6s0mFQZ6jjxkOympeXGxT X-Google-Smtp-Source: ABdhPJxcZGD874+ON29PsQh8PCVn+I4+NvEeuEqbT2VIpFLlQ3IVpUNfTUg+/ODvz5/bthyMVYxiXQ== X-Received: by 2002:a05:6e02:106d:: with SMTP id q13mr4372629ilj.304.1602512353503; Mon, 12 Oct 2020 07:19:13 -0700 (PDT) Received: from brians-mbp-2871.lan (dynamic-acs-24-154-119-158.zoominternet.net. [24.154.119.158]) by smtp.gmail.com with ESMTPSA id r4sm9494003ilc.32.2020.10.12.07.19.12 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Mon, 12 Oct 2020 07:19:12 -0700 (PDT) From: Brian Rosen Message-Id: <6AA85445-9755-4B55-B297-150980A3344D@brianrosen.net> Content-Type: multipart/alternative; boundary="Apple-Mail=_F744083B-CA55-4FB9-A056-F5BEE639E604" Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.120.23.2.1\)) Date: Mon, 12 Oct 2020 10:19:10 -0400 In-Reply-To: Cc: Chris Wendt , Jack Rickard , "stir@ietf.org" , "draft-ietf-stir-rph-emergency-services@ietf.org" To: Tolga Asveren References: <959DCC43-1686-49D3-9195-719CF65C9EE9@brianrosen.net> <14ACD074-FD66-4161-AC7A-ADB07127BE2D@chriswendt.net> <0D26A9F6-5559-4273-ACBA-9501E958DF22@chriswendt.net> <7E2BC364-2CCF-43EE-BFAF-9B9A29A2BE11@chriswendt.net> X-Mailer: Apple Mail (2.3608.120.23.2.1) Archived-At: Subject: Re: [stir] Review of draft-ietf-stir-rph-emergency-services X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 12 Oct 2020 14:19:16 -0000 --Apple-Mail=_F744083B-CA55-4FB9-A056-F5BEE639E604 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 >=20 > iv- A question regarding draft-rosen-stir-emergency-calls-00 > =20 > This document recommends that emergency calls from outside an > Emergency Services IP Network be assigned esnet.0. > Should this ne esnet.1? If it indeed it esnet.0 then why is the value = esnet.1 for emergency calls in draft-ietf-rph-emergency-services? > =20 Emergency Calls are handled by a Emergency Services IP network (ESInet). = That network has to handle a lot of different kinds of emergency = communications, some higher priority and some lower priority. Esnet.1 = was chosen to reflect this, Outside the ESInet, at least for the past = decades, emergency calling (9-1-1, 1-1-2, etc.) is the lowest priority = and in many networks, gets no priority at all. So marking with esnet.0 = seems closest to reality. It is somewhat annoying to have to remap at = the boundary to the ESInet, but it has to police the marking anyway, so = no actual added complexity. I=E2=80=99d be okay with making the = recommended marking esnet.1 if it confuses readers. Brian --Apple-Mail=_F744083B-CA55-4FB9-A056-F5BEE639E604 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8

iv- A = question regarding draft-rosen-stir-emergency-calls-00
 
   This document recommends that emergency calls = from outside an
   Emergency Services IP Network be assigned = esnet.0.
Should = this ne esnet.1? If it indeed it esnet.0 then why is the value esnet.1 = for emergency calls in draft-ietf-rph-emergency-services?
 
Emergency Calls are = handled by a Emergency Services IP network (ESInet).  That network = has to handle a lot of different kinds of emergency communications, some = higher priority and some lower priority.  Esnet.1 was chosen to = reflect this,  Outside the ESInet, at least for the past decades, = emergency calling (9-1-1, 1-1-2, etc.) is the lowest priority and in = many networks, gets no priority at all.  So marking with esnet.0 = seems closest to reality.  It is somewhat annoying to have to remap = at the boundary to the ESInet, but it has to police the marking anyway, = so no actual added complexity.  I=E2=80=99d be okay with making the = recommended marking esnet.1 if it confuses readers.

Brian



= --Apple-Mail=_F744083B-CA55-4FB9-A056-F5BEE639E604-- From nobody Mon Oct 12 07:37:57 2020 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2114E3A1532 for ; Mon, 12 Oct 2020 07:37:49 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.887 X-Spam-Level: X-Spam-Status: No, score=-1.887 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, T_SPF_PERMERROR=0.01, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=brianrosen-net.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DRDgCdfTiU3j for ; Mon, 12 Oct 2020 07:37:47 -0700 (PDT) Received: from mail-il1-x132.google.com (mail-il1-x132.google.com [IPv6:2607:f8b0:4864:20::132]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B007A3A09F1 for ; Mon, 12 Oct 2020 07:37:45 -0700 (PDT) Received: by mail-il1-x132.google.com with SMTP id y16so12026804ila.7 for ; Mon, 12 Oct 2020 07:37:45 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=brianrosen-net.20150623.gappssmtp.com; s=20150623; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=D57BJO699VaizE5PL9+k03Qpqp4NNBh0Ve4EgEEn+68=; b=B0bJDt73OlgSnDQbAIWGH0bv/Wjlox+dP81ZxH/enYv+u+VWxOQX0vGsKJT0gmU0bF vH6fQ4OwCVf/Uny+3acZ6jZmvgCnC/4NeBPrHwThoFgWCoXqW9x/RDMIOREcrrRFlsMx wiFQMFtaZtkNFaW5SPSxcLrHZhokgZHZAJ2Eh2qgbW4+W33fnpnfBJ/4ZkOKdGQlgR5z ETfTbHKucn2Edjqm35bKasr0NZJj0eqeoEYNLFCAdVohaBEJMmoaN9H4Tkvw1NuAVD7T r0Mme8dYewCyPmle+6HFHnoHuc2pRtlu8YsKNgafTutXcDp4ttKGjPPz8ZWHfOhQsbLG 5bRg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=D57BJO699VaizE5PL9+k03Qpqp4NNBh0Ve4EgEEn+68=; b=UYau/GDgiLpjH45vGojdTtIWgELpcejG0WzC04+KBN2JfIkZJVA3/aratizkTjT1Kz roh0N8QWMajO0avLzUjYV+TOff1Rr5zgiRR7qB2MCzh7NFXpOMIO5jZW23MrBkCjBYVc TG8liJM0ElwxNHLwhTyIOqwtScWHQrISqRfjRsTzfye83KAiSAiqGdOF91wZwAqu7yC2 u8nXY92oVVszX10McQu66ML+74NI7klVdAvc0OqR5SUdiWJd3mvmNTfynD/ePl/Swnn0 ghzhZUPCRm0q9sY7sjH4BVbHSWQcs8/prVO/L9tlnJzcMmIw6SFg6yV5BWkEeRsnK9Zt 0I4Q== X-Gm-Message-State: AOAM530UDZjrQklmb3h9SH4roCox9wnTLIsqditL9zFnh6F0JJYZxNeS /klJlMa0480WSFNZ+9SwHt5qIA== X-Google-Smtp-Source: ABdhPJwg/9tdCn19zD1QJB5NN+Dn2Fi8K0m88tDGYR4kPkvogbqDGbKhlhUqNgmxvK5qpN8lBO3r6w== X-Received: by 2002:a92:d8ce:: with SMTP id l14mr19209212ilo.86.1602513464828; Mon, 12 Oct 2020 07:37:44 -0700 (PDT) Received: from brians-mbp-2871.lan (dynamic-acs-24-154-119-158.zoominternet.net. [24.154.119.158]) by smtp.gmail.com with ESMTPSA id z19sm7436236ioz.4.2020.10.12.07.37.42 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Mon, 12 Oct 2020 07:37:43 -0700 (PDT) From: Brian Rosen Message-Id: <17CE89AF-3EC8-44DB-BA99-94FDDC8A39F5@brianrosen.net> Content-Type: multipart/alternative; boundary="Apple-Mail=_934A91B7-3E12-4AA7-8AA2-BDF746D89F3E" Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.120.23.2.1\)) Date: Mon, 12 Oct 2020 10:37:42 -0400 In-Reply-To: <6AA85445-9755-4B55-B297-150980A3344D@brianrosen.net> Cc: Chris Wendt , Jack Rickard , "stir@ietf.org" , "draft-ietf-stir-rph-emergency-services@ietf.org" To: Tolga Asveren References: <959DCC43-1686-49D3-9195-719CF65C9EE9@brianrosen.net> <14ACD074-FD66-4161-AC7A-ADB07127BE2D@chriswendt.net> <0D26A9F6-5559-4273-ACBA-9501E958DF22@chriswendt.net> <7E2BC364-2CCF-43EE-BFAF-9B9A29A2BE11@chriswendt.net> <6AA85445-9755-4B55-B297-150980A3344D@brianrosen.net> X-Mailer: Apple Mail (2.3608.120.23.2.1) Archived-At: Subject: Re: [stir] Review of draft-ietf-stir-rph-emergency-services X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 12 Oct 2020 14:37:49 -0000 --Apple-Mail=_934A91B7-3E12-4AA7-8AA2-BDF746D89F3E Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 I was reminded that actually, we did agree to change it to avoid = confusion. So it will be esnet.1 > On Oct 12, 2020, at 10:19 AM, Brian Rosen wrote: >=20 >>=20 >> iv- A question regarding draft-rosen-stir-emergency-calls-00 >> =20 >> This document recommends that emergency calls from outside an >> Emergency Services IP Network be assigned esnet.0. >> Should this ne esnet.1? If it indeed it esnet.0 then why is the value = esnet.1 for emergency calls in draft-ietf-rph-emergency-services? >> =20 > Emergency Calls are handled by a Emergency Services IP network = (ESInet). That network has to handle a lot of different kinds of = emergency communications, some higher priority and some lower priority. = Esnet.1 was chosen to reflect this, Outside the ESInet, at least for = the past decades, emergency calling (9-1-1, 1-1-2, etc.) is the lowest = priority and in many networks, gets no priority at all. So marking with = esnet.0 seems closest to reality. It is somewhat annoying to have to = remap at the boundary to the ESInet, but it has to police the marking = anyway, so no actual added complexity. I=E2=80=99d be okay with making = the recommended marking esnet.1 if it confuses readers. >=20 > Brian >=20 >=20 >=20 --Apple-Mail=_934A91B7-3E12-4AA7-8AA2-BDF746D89F3E Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 I = was reminded that actually, we did agree to change it to avoid = confusion.  So it will be esnet.1

On Oct = 12, 2020, at 10:19 AM, Brian Rosen <br@brianrosen.net> = wrote:


iv- A = question regarding draft-rosen-stir-emergency-calls-00
 
   This document recommends that emergency calls = from outside an
   Emergency Services IP Network be assigned = esnet.0.
Should = this ne esnet.1? If it indeed it esnet.0 then why is the value esnet.1 = for emergency calls in draft-ietf-rph-emergency-services?
 
Emergency Calls are = handled by a Emergency Services IP network (ESInet).  That network = has to handle a lot of different kinds of emergency communications, some = higher priority and some lower priority.  Esnet.1 was chosen to = reflect this,  Outside the ESInet, at least for the past decades, = emergency calling (9-1-1, 1-1-2, etc.) is the lowest priority and in = many networks, gets no priority at all.  So marking with esnet.0 = seems closest to reality.  It is somewhat annoying to have to remap = at the boundary to the ESInet, but it has to police the marking anyway, = so no actual added complexity.  I=E2=80=99d be okay with making the = recommended marking esnet.1 if it confuses readers.

Brian




= --Apple-Mail=_934A91B7-3E12-4AA7-8AA2-BDF746D89F3E-- From nobody Fri Oct 23 14:20:33 2020 Return-Path: X-Original-To: stir@ietf.org Delivered-To: stir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id AEA273A13FD; Fri, 23 Oct 2020 14:16:20 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: "\"IETF Secretariat\"" To: , Cc: stir@ietf.org, superuser@gmail.com X-Test-IDTracker: no X-IETF-IDTracker: 7.20.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <160348778070.5087.13587299020562971742@ietfa.amsl.com> Date: Fri, 23 Oct 2020 14:16:20 -0700 Archived-At: Subject: [stir] stir - Requested session has been scheduled for IETF 109 X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.29 List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 23 Oct 2020 21:16:24 -0000 Dear Russ Housley, The session(s) that you have requested have been scheduled. Below is the scheduled session information followed by the original request. stir Session 1 (1:00 requested) Friday, 20 November 2020, Session III 1600-1800 Room Name: Room 2 size: 502 --------------------------------------------- iCalendar: https://datatracker.ietf.org/meeting/109/sessions/stir.ics Request Information: --------------------------------------------------------- Working Group Name: Secure Telephone Identity Revisited Area Name: Applications and Real-Time Area Session Requester: Russ Housley Number of Sessions: 1 Length of Session(s): 1 Hour Number of Attendees: 60 Conflicts to Avoid: Chair Conflict: ipwave lamps suit Technology Overlap: sipcore ecrit Key Participant Conflict: dispatch secdispatch saag sipbrandy tls mls teep oauth acme perc cfrg mmusic avtcore emu People who must be present: Russ Housley Sean Turner Robert Sparks Eric Burger Jon Peterson Martin Dolly Murray Kucherawy Brian Rosen Chris Wendt Resources Requested: Special Requests: --------------------------------------------------------- From nobody Mon Oct 26 05:13:51 2020 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 82A173A0916; Mon, 26 Oct 2020 05:13:49 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_FONT_LOW_CONTRAST=0.001, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=metaswitch.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MplVqaLe-iNG; Mon, 26 Oct 2020 05:13:44 -0700 (PDT) Received: from NAM04-SN1-obe.outbound.protection.outlook.com (mail-eopbgr700117.outbound.protection.outlook.com [40.107.70.117]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1E5AF3A08FA; Mon, 26 Oct 2020 05:13:42 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=VlNbhD71fXiW43KDStgUScxyYFoiN5yVB8jgH7cAGVnXZxMyYPhWmIKaUpxzs8IRAPV5cXs/uRnNgB8vcdGoIdrS0tF+8QhVr+L7TuryeYPVPGU2yFL1yTfD/CFZlxZ3o/pseN/qIxpyoCRkBjVtuv8rBBsh1PjYDd5iUQJB8TWsVgibqdahy/PbDyfeduGhvRRwY7sV776WdN0BORgfEjq9BtZETcUmztnXp3yMPSZwmOffYA7FH6LhoLoDW7OHmbvYMyNpTM6sdUUjZZKEGesPTvmB5fSRXfZi6oPJGYggpqGGogOUFl5jjfb4TGVyancj7Lio7te5s31XnHi3CA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=1I8dsHhT854pNhQ2QgalSeQ4RZ/N0teCGl+yKL4u6Bk=; b=Vhc9axZkcoDUbbixArVz1WFB7NrUeov2x4woF4YnvT9LEGDR3TXqCeeBQ0U+9Fcuza/eeaplmjCo8zASbmm7aoMOOW5eCexAGNwaPSViVE2kjbJN2UWpGGM4LGTi2tTnM6rYTGxpEvkc3S3ZzEswctaZNNgWCpogL7xp/vc+AXHzHAqWgpEwsyl8sYeYOO7bdfDtAS0giNMfIXyCIr8dCRX1j26brdC8FPMzwoqERZcEUtXxOz+XzqwdNAFbNTVRql8wnr88MFj7L5qOIg8cHhnkTOrkLA0OsDE3lGnLsJPfdO2gNG4/LaSIv3qwKpipjPFndupNmdyfL2fvs5LB5w== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=metaswitch.com; dmarc=pass action=none header.from=metaswitch.com; dkim=pass header.d=metaswitch.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=metaswitch.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=1I8dsHhT854pNhQ2QgalSeQ4RZ/N0teCGl+yKL4u6Bk=; b=eLjMiNKgpsZ9s2Ec7CtjQiU4O9k8ioJLlwD1tcSqtvAOyf4I/k6i+3r2p1TW4PeqVuwsQoXKOkBodmAGBjgV6h/kXPeSvnB18OBtiDe2WbK10wos7knVSHvuAAJpSNcegSR0S2lKTxLU5EKZdGq/XglJuuS1jmpPWAO2Y9LYEdg= Received: from BYAPR02MB5189.namprd02.prod.outlook.com (2603:10b6:a03:62::29) by BY5PR02MB7057.namprd02.prod.outlook.com (2603:10b6:a03:23f::14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3499.18; Mon, 26 Oct 2020 12:13:38 +0000 Received: from BYAPR02MB5189.namprd02.prod.outlook.com ([fe80::cc5b:75a:a778:3ac3]) by BYAPR02MB5189.namprd02.prod.outlook.com ([fe80::cc5b:75a:a778:3ac3%6]) with mapi id 15.20.3499.018; Mon, 26 Oct 2020 12:13:38 +0000 From: Jack Rickard To: Chris Wendt CC: Brian Rosen , "draft-ietf-stir-rph-emergency-services@ietf.org" , "stir@ietf.org" Thread-Topic: [stir] Review of draft-ietf-stir-rph-emergency-services Thread-Index: AdZrPXk4d/f2kRt0QXimDVa1DUwOuwKaVPgAABiWh4AACUk0gAA5+/HQAPcQIAABhbHxwAAWmFOAACRbGyAHFH28AANPFG0A Date: Mon, 26 Oct 2020 12:13:38 +0000 Message-ID: References: <959DCC43-1686-49D3-9195-719CF65C9EE9@brianrosen.net> <14ACD074-FD66-4161-AC7A-ADB07127BE2D@chriswendt.net> <0D26A9F6-5559-4273-ACBA-9501E958DF22@chriswendt.net> <7E2BC364-2CCF-43EE-BFAF-9B9A29A2BE11@chriswendt.net> In-Reply-To: <7E2BC364-2CCF-43EE-BFAF-9B9A29A2BE11@chriswendt.net> Accept-Language: en-GB, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: chriswendt.net; dkim=none (message not signed) header.d=none;chriswendt.net; dmarc=none action=none header.from=metaswitch.com; x-originating-ip: [84.92.33.46] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: a08439a0-ae95-4e1f-63fd-08d879a891db x-ms-traffictypediagnostic: BY5PR02MB7057: x-ld-processed: 9d9e56eb-f613-4ddb-b27b-bfcdf14b2cdb,ExtAddr x-ms-exchange-transport-forked: True x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: DirETXzERQ495O6vGJWnQWBZnXMVo2wo/TFC9mcdN9RVIkyrFX5x/FIm9Q94xtq3Q1RnXOuHs1xd+kFrIFkyoQxCiQDFrZYXGj8xMSIKznJvBLFSAjgXHs3R1e8mZ65AT+XpA8BTjhJOCfONOFRi5ogShKuG3R0mBZe/6rKxbYNFgSpeF/uPTLHV9GqQnMzlyQXdylJIIyLFhfYAu4mzz6AsromciPAuIh+F0eaD/fC2+fFWecoT2jDeWRY+4Dk9uwzr3lr04F+UqjtfkPTVp+Sewn6p/YLwQ75zZytJfCnrKWJYAg/9tH0JJnC25Hilbqeukb6OerQK6UirM3UGdkQhYT4IeN8QE75HD3kRAo6vd1S0uzdshp+ddb+fp3kj3x7iL9U/tRK4lCdSqzRUsQ== x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:BYAPR02MB5189.namprd02.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(136003)(346002)(376002)(396003)(39850400004)(366004)(6916009)(9686003)(30864003)(71200400001)(52536014)(76116006)(4326008)(66476007)(66946007)(83380400001)(66446008)(64756008)(5660300002)(166002)(66556008)(77540400001)(53546011)(966005)(186003)(55016002)(8676002)(26005)(54906003)(478600001)(86362001)(2906002)(6506007)(33656002)(8936002)(7696005)(316002)(579004); DIR:OUT; SFP:1102; x-ms-exchange-antispam-messagedata: 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 Content-Type: multipart/alternative; boundary="_000_BYAPR02MB5189874A25C4013D1F9DCA08F3190BYAPR02MB5189namp_" MIME-Version: 1.0 X-OriginatorOrg: metaswitch.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: BYAPR02MB5189.namprd02.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: a08439a0-ae95-4e1f-63fd-08d879a891db X-MS-Exchange-CrossTenant-originalarrivaltime: 26 Oct 2020 12:13:38.0536 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 9d9e56eb-f613-4ddb-b27b-bfcdf14b2cdb X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: 6Uw9sbo4Gx1Y8z7CvHvQ+m2MJX3lLLloQ5sgwcGISSA18qDW/b58afPHPStGdmKfz55+pGrbrOxvIY+aiIMG+Q== X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY5PR02MB7057 Archived-At: Subject: Re: [stir] Review of draft-ietf-stir-rph-emergency-services X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 26 Oct 2020 12:13:50 -0000 --_000_BYAPR02MB5189874A25C4013D1F9DCA08F3190BYAPR02MB5189namp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 VGhhbmsgeW91LCB0aGlzIGFkZHJlc3NlcyB0aGUgdmFzdCBtYWpvcml0eSBvZiBteSBjb25jZXJu cyBhbmQgZmVlbHMgbXVjaCBzaW1wbGVyLiBJJ2QgbGlrZSBhIGNvdXBsZSBvZiBtaW5vciBjbGFy aWZpY2F0aW9ucyBhcm91bmQgdGhlICJzcGgiIGNsYWltIGJ1dCBvdmVyYWxsIEknbSBtdWNoIGhh cHBpZXIgd2l0aCB0aGlzIGRvY3VtZW50Lg0KDQpDbGFyaWZpY2F0aW9uczoNCg0KICAxLiAgQXQg dGhlIHN0YXJ0IG9mIHRoZSBzZWNvbmQgcGFyYWdyYXBoIG9mIHNlY3Rpb24gNCBpdCBzdGF0ZXM6 DQo+IFdlIGRlZmluZSBhIG5ldyBjbGFpbSBrZXkgYXMgcGFydCBvZiB0aGUgInJwaCIgUEFTU3Bv clQsICJzcGgiDQpJdCdzIG5vdCBlbnRpcmVseSBjbGVhciB3aGF0IHRoaXMgbWVhbnMsIEknbSBh c3N1bWluZyB0aGlzICJzcGgiIGNsYWltIGlzIG9wdGlvbmFsIChvdGhlcndpc2UgdGhlcmUgd291 bGQgYmUgaW50ZXJvcGVyYWJpbGl0eSBpc3N1ZXMpLCBidXQgaWYgc28gaG93IGlzIGl0IHRpZWQg dG8gdGhlICJycGgiIHBhc3Nwb3J0IGV4dGVuc2lvbj8gVGhlIHN0YXRlZCBtZWFuaW5nIG9mIGEg cGFzc3BvcnQgZXh0ZW5zaW9uIGlzOg0KPiBJZiBpdCBpcyBuZWNlc3NhcnkgZm9yIGFuIGV4dGVu c2lvbiB0byBQQVNTcG9yVCB0byByZXF1aXJlIHRoYXQgYSByZWx5aW5nIHBhcnR5IHN1cHBvcnQg YSBwYXJ0aWN1bGFyIGV4dGVuZGVkIGNsYWltIG9yIHNldCBvZiBjbGFpbXMgaW4gdGhlIFBBU1Nw b3JUIG9iamVjdCwgaXQgY2FuIGRvIHNvIGJ5IHNwZWNpZnlpbmcgYSAicHB0IiBlbGVtZW50IGZv ciB0aGUgUEFTU3BvclQgSk9TRSBIZWFkZXIuDQpJdCdzIG5vdCBjbGVhciBpZiBhbiAic3BoIiBj bGFpbSBjYW4gYmUgaW5jbHVkZWQgaW4gYSBub24tcnBoIHBhc3Nwb3J0LCBJIGJlbGlldmUgdGhp cyBpcyBzZW5zaWJsZSBhcyBhbiBPU1Agd2l0aCBhdXRob3JpdHkgb3ZlciBib3RoIHRoZSBUTiBh bmQgU1BIIGNvdWxkIHB1dCBib3RoIGluIG9uZSBwYXNzcG9ydC4gSG93ZXZlciwgSSB0aGluayB0 aGVyZSdzIHNvbWUgY29tcGxleGl0eSBhcm91bmQgd2hpY2ggY2VydGlmaWNhdGVzIGhhdmUgYXV0 aG9yaXR5IG92ZXIgVE5zIGFuZCBTUEgsIHNvIG91dHJpZ2h0IGJhbm5pbmcgaXQgc2VlbXMgc2Vu c2libGUgYnV0IEkgdGhpbmsgaXQgc2hvdWxkIGJlIGV4cGxpY2l0Lg0KICAyLiAgQXQgdGhlIHN0 YXJ0IG9mIHRoZSB0aGlyZCBwYXJhZ3JhcGggb2Ygc2VjdGlvbiA0IGl0IHN0YXRlczoNCj4gVGhl IHZhbHVlIG9mIHRoZSAic3BoIiBjbGFpbSBrZXkgc2hvdWxkIG9ubHkgYmUgInBzYXAtY2FsbGJh Y2siIHRvIG1hdGNoIHRoZSBTSVAgUHJpb3JpdHkgaGVhZGVyIGZpZWxkIHZhbHVlIGZvciBhdXRo b3JpemVkIGVtZXJnZW5jeSBzZXJ2aWNlcyBjYWxsYmFja3MuDQpJdCdzIG5vdCBjbGVhciB3aGF0 IHRoZSBiZWhhdmlvdXIgb2YgdGhlIHZlcmlmaWNhdGlvbiBzZXJ2aWNlIHNob3VsZCBiZSBpZiB0 aGlzIGNsYWltIGlzIG5vdCBwcmVzZW50IG9yIGhhcyBhIHZhbHVlIG90aGVyIHRoYW4gInBzYXAt Y2FsbGJhY2siIChvciBpbiBmYWN0IHdoYXQgdGhlIGJlaGF2aW91ciBzaG91bGQgYmUgaWYgaXQg aXMgcHJlc2VudCkuIEkgdGhpbmsgYmVoYXZpb3VyIHNpbWlsYXIgdG8gdGhlICJhdXRoIiBjbGFp bSBpcyByZWFzb25hYmxlIGJ1dCBJIGRvbid0IGhhdmUgbXVjaCBleHBlcmllbmNlIGluIHRoaXMg YXJlYS4NCg0KDQpOaXQ6DQpBbGwgb2YgdGhlIGV4YW1wbGVzIGluIHRoZSBkb2N1bWVudCBsb29r IGxpa2UgdGhpczoNCiAgICAgew0KICAgICAgICJvcmlnIjp7InRuIjoiMTIxNTU1NTEyMTIifSwN CiAgICAgICAiZGVzdCI6e1sidXJpIjoidXJuOnNlcnZpY2U6c29zIl19LA0KICAgICAgICJpYXQi OjE0NDMyMDgzNDUsDQogICAgICAgInJwaCI6eyJhdXRoIjpbImVzbmV0LjEiXX0NCiAgICAgfQ0K QnV0IEkgYmVsaWV2ZSB0aGUgZGVzdCBmaWVsZCBzaG91bGQgbG9vayBsaWtlIHRoaXM6DQogICAg IHsNCiAgICAgICAib3JpZyI6eyJ0biI6IjEyMTU1NTUxMjEyIn0sDQogICAgICAgImRlc3QiOnsi dXJpIjpbInVybjpzZXJ2aWNlOnNvcyJdfSwNCiAgICAgICAiaWF0IjoxNDQzMjA4MzQ1LA0KICAg ICAgICJycGgiOnsiYXV0aCI6WyJlc25ldC4xIl19DQogICAgIH0NCihhbmQgc2ltaWxhcmx5IGZv ciBhbGwgdGhlIG90aGVyIGV4YW1wbGVzKQ0KDQpUaGFua3MsDQpKYWNrDQoNCkZyb206IENocmlz IFdlbmR0IDxjaHJpcy1pZXRmQGNocmlzd2VuZHQubmV0Pg0KU2VudDogMDkgT2N0b2JlciAyMDIw IDE1OjE4DQpUbzogSmFjayBSaWNrYXJkIDxKYWNrLlJpY2thcmRAbWV0YXN3aXRjaC5jb20+DQpD YzogQnJpYW4gUm9zZW4gPGJyQGJyaWFucm9zZW4ubmV0PjsgZHJhZnQtaWV0Zi1zdGlyLXJwaC1l bWVyZ2VuY3ktc2VydmljZXNAaWV0Zi5vcmc7IHN0aXJAaWV0Zi5vcmcNClN1YmplY3Q6IFJlOiBb c3Rpcl0gUmV2aWV3IG9mIGRyYWZ0LWlldGYtc3Rpci1ycGgtZW1lcmdlbmN5LXNlcnZpY2VzDQoN Ck5PVEU6IE1lc3NhZ2UgaXMgZnJvbSBhbiBleHRlcm5hbCBzZW5kZXINClNvLCB3ZSBoYWQgZGlz Y3Vzc2lvbnMgd2l0aCB0aGUgZXhwZXJ0cyBvbiDigJhycGjigJkgYW5kIGVtZXJnZW5jeSBzZXJ2 aWNlcyBhbmQgYWdyZWVkIHRvIGRvIGEgMDMgcmV2IG9mIHRoaXMgZHJhZnQgdGhhdCBkb2VzIGlu ZGVlZCBtb2RpZnkgdGhlIHByb2NlZHVyZXMgdG8gcmVtb3ZlIHRoZSBFU09yaWcvRVNDYWxsYmFj ayBhbmQgaW5jb3Jwb3JhdGUgdGhlIGVzbmV0LnggdmFsdWUgaW50byB0aGUg4oCcYXV0aOKAnSBv YmplY3QgYXJyYXkuICBIb3BlZnVsbHkgdGhpcyBhZGRyZXNzZXMgdGhlIGNvbmNlcm5zIGFuZCBt YWtlcyB0aGluZ3MgYSBiaXQgc2ltcGxlci4gIFRoYW5rcyBmb3IgdGhlIGlucHV0Lg0KDQpQbGVh c2UsIHRvIGV2ZXJ5b25lLCByZXZpZXcgYW5kIHByb3ZpZGUgY29tbWVudHMuDQoNClRoYW5rcy4N Cg0KLUNocmlzDQoNCg0KT24gU2VwIDMsIDIwMjAsIGF0IDk6MjggQU0sIEphY2sgUmlja2FyZCA8 SmFjay5SaWNrYXJkQG1ldGFzd2l0Y2guY29tPG1haWx0bzpKYWNrLlJpY2thcmRAbWV0YXN3aXRj aC5jb20+PiB3cm90ZToNCg0KSSBhZ3JlZSB3aXRoIHdoYXQgeW91IGhhdmUgc2FpZCB0aGVyZSwg aG93ZXZlciBTZWN0aW9uIDQuMiBvZiA4NDQzIGFsc28gc3RhdGVzIHRoYXQgeW91IHNob3VsZCBz dHJpcCBmcm9tIHRoZSBJTlZJVEUgYW55ICdSZXNvdXJjZS1Qcmlvcml0eScgaGVhZGVyIHRoYXQg aXNuJ3QgdmFsaWRhdGVkIGJ5IHRoZSBwYXNzcG9ydHMsIHdoaWNoIGluIHRoaXMgY2FzZSB3b3Vs ZCBiZSB0aGUgImVzbmV0LngiIGhlYWRlci4gVGhpcyBkb2Vzbid0IHNlZW0gbGlrZSBhIGdvb2Qg YmVoYXZpb3VyIHRvIG1lLCB3aGljaCBpcyB3aHkgSSB0aGluayAiZXNuZXQiIHNob3VsZCBnbyBp biB0aGUgImF1dGgiIGNsYWltIChhcyBhbiBzaWduaW5nIHNlcnZpY2UgdGhhdCBkaWRuJ3QgaW1w bGVtZW50IHRoaXMgd291bGQgZG8gYW55d2F5KSwgYXQgd2hpY2ggcG9pbnQgSSBkb24ndCBzZWUg d2hhdCB1dGlsaXR5IHRoZSAiRVMqIiBjbGFpbXMgcHJvdmlkZS4NCg0KVGhhbmtzLA0KSmFjaw0K DQpGcm9tOiBDaHJpcyBXZW5kdCA8Y2hyaXMtaWV0ZkBjaHJpc3dlbmR0Lm5ldDxtYWlsdG86Y2hy aXMtaWV0ZkBjaHJpc3dlbmR0Lm5ldD4+DQpTZW50OiAwMiBTZXB0ZW1iZXIgMjAyMCAyMTowMA0K VG86IEphY2sgUmlja2FyZCA8SmFjay5SaWNrYXJkQG1ldGFzd2l0Y2guY29tPG1haWx0bzpKYWNr LlJpY2thcmRAbWV0YXN3aXRjaC5jb20+Pg0KQ2M6IEJyaWFuIFJvc2VuIDxickBicmlhbnJvc2Vu Lm5ldDxtYWlsdG86YnJAYnJpYW5yb3Nlbi5uZXQ+PjsgZHJhZnQtaWV0Zi1zdGlyLXJwaC1lbWVy Z2VuY3ktc2VydmljZXNAaWV0Zi5vcmc8bWFpbHRvOmRyYWZ0LWlldGYtc3Rpci1ycGgtZW1lcmdl bmN5LXNlcnZpY2VzQGlldGYub3JnPjsgc3RpckBpZXRmLm9yZzxtYWlsdG86c3RpckBpZXRmLm9y Zz4NClN1YmplY3Q6IFJlOiBbc3Rpcl0gUmV2aWV3IG9mIGRyYWZ0LWlldGYtc3Rpci1ycGgtZW1l cmdlbmN5LXNlcnZpY2VzDQoNCk5vdCBzdXJlIHdoeSB0aGV5IHdvdWxkIGJyZWFrIGFueXRoaW5n LiAgSSB0aGluayB0aGUgaWRlYSBpcyB0aGF0IGlmIHlvdSBhcmUgZG9pbmcgZW1lcmdlbmN5IHNl cnZpY2VzIHlvdSBzaG91bGQgbm90IGluY2x1ZGUg4oCcYXV0aOKAnSBrZXkgYW5kIHZhbHVlLiAg SWYgeW91IGltcGxlbWVudCBvbmx5IDg0NDMgYW5kIHlvdSBvbmx5IGtub3cgd2hhdCB0byBkbyB3 aXRoIOKAnGF1dGjigJ0gYW5kIOKAnGF1dGjigJ0gaXMgbm90IGluY2x1ZGVkIGluIHRoZSBQQVNT cG9yVCB5b3UgYXJlIHZlcmlmeWluZywgeW91IG11c3QgaWdub3JlIG90aGVyIGtleSB2YWx1ZXMg eW91IGRvbuKAmXQgdW5kZXJzdGFuZC4gVGhlcmVmb3JlIHRoZSB2YWxpZGF0aW9uIHdpbGwgZmFp bCBhbmQgeW91IHNob3VsZCBub3QgdHJ5IHRvIHByb3ZpZGUgYW55IHR5cGUgb2YgcHJpb3JpdHkg c2VydmljZSB3aXRoIHRoYXQgY2FsbC4gIFRoaXMgaXMgYXBwcm9hY2ggZm9yIGFsbCBQQVNTcG9y VHMgd2l0aCBuZXdseSBkZWZpbmVkIGNsYWltcyBhbmQga2V5IHZhbHVlcyBpbiBnZW5lcmFsLg0K DQotQ2hyaXMNCg0KDQoNCk9uIFNlcCAyLCAyMDIwLCBhdCA1OjMzIEFNLCBKYWNrIFJpY2thcmQg PEphY2suUmlja2FyZEBtZXRhc3dpdGNoLmNvbTxtYWlsdG86SmFjay5SaWNrYXJkQG1ldGFzd2l0 Y2guY29tPj4gd3JvdGU6DQoNCkhpIENocmlzLA0KDQpJJ20gc3RpbGwgdW5jb252aW5jZWQgYWJv dXQgdGhlIEVTb3JpZyBhbmQgRVNjYWxsYmFjayBrZXlzLCBJJ20gaGFwcHkgZm9yIHRoZW0gdG8g YmUgYWRkZWQgYXMgbG9uZyBhcyB0aGV5IGRvbid0IGJyZWFrIGFueXRoaW5nLiBUaGUgcHJvYmxl bSBJIHNlZSBpcyB3aXRoIGFuIGludGVybWVkaWF0ZSB0aGF0IGltcGxlbWVudHMgODQ0MyBidXQg bm90IHRoaXMgc3BlYzogaWYgImVzbmV0LngiIGlzbid0IGluIHRoZSBhdXRoIGNsYWltIHRoZSBp dCBzaG91bGQgcmVtb3ZlICJlc25ldC54IiBmcm9tIHRoZSAnUmVzb3VyY2UtUHJpb3JpdHknIGhl YWRlciwgd2hpY2ggc2VlbXMgbGlrZSBhIGJhZCB0aGluZyB0byBtZS4gRXZlbiB3aXRoIHRoaXMg c3BlYyBpdCdzIG5vdCBjdXJyZW50bHkgY2xlYXIgdGhhdCB5b3Ugc2hvdWxkbid0IGRvIHRoYXQg YXMgdGhlcmUncyBub3RoaW5nIG92ZXJyaWRpbmcgdGhhdCB0ZXh0IGZyb20gODQ0MyBjdXJyZW50 bHkuDQoNCkFzIGZvciBjb21wYWN0IGZvcm0sIEknbSBwZXJmZWN0bHkgaGFwcHkgd2l0aCBpdCBy ZW1haW5pbmcgdW5zcGVjaWZpZWQsIGl0IGp1c3Qgc3VycHJpc2VkIG1lLg0KDQpUaGFua3MsDQpK YWNrDQoNCkZyb206IENocmlzIFdlbmR0IDxjaHJpcy1pZXRmQGNocmlzd2VuZHQubmV0PG1haWx0 bzpjaHJpcy1pZXRmQGNocmlzd2VuZHQubmV0Pj4NClNlbnQ6IDI1IEF1Z3VzdCAyMDIwIDE2OjE1 DQpUbzogSmFjayBSaWNrYXJkIDxKYWNrLlJpY2thcmRAbWV0YXN3aXRjaC5jb208bWFpbHRvOkph Y2suUmlja2FyZEBtZXRhc3dpdGNoLmNvbT4+DQpDYzogQnJpYW4gUm9zZW4gPGJyQGJyaWFucm9z ZW4ubmV0PG1haWx0bzpickBicmlhbnJvc2VuLm5ldD4+OyBkcmFmdC1pZXRmLXN0aXItcnBoLWVt ZXJnZW5jeS1zZXJ2aWNlc0BpZXRmLm9yZzxtYWlsdG86ZHJhZnQtaWV0Zi1zdGlyLXJwaC1lbWVy Z2VuY3ktc2VydmljZXNAaWV0Zi5vcmc+OyBzdGlyQGlldGYub3JnPG1haWx0bzpzdGlyQGlldGYu b3JnPg0KU3ViamVjdDogUmU6IFtzdGlyXSBSZXZpZXcgb2YgZHJhZnQtaWV0Zi1zdGlyLXJwaC1l bWVyZ2VuY3ktc2VydmljZXMNCg0KSGkgSmFjaywNCg0KSSB0aGluayB3ZSBzdGlsbCB3YW50IHRv IGtlZXAg4oCcYXV0aOKAnSBhbmQg4oCcRVNvcmlnL0VTQ2FsbGJhY2vigJ0gYXMgc2VwYXJhdGUg YW5kIGRpc3RpbmN0IGtleS92YWx1ZSBvYmplY3RzLCBpIHNlZSB5b3VyIGNvbW1lbnRzIGFzIG1h eWJlIGRpc2FncmVlbWVudCBzdHlsaXN0aWNhbGx5IGJ1dCBkaWRu4oCZdCBzZWUgYW55dGhpbmcg dG8gc3VnZ2VzdCB0aGF0IGl0IHdvdWxkbuKAmXQgd29yay4gIFRoZSByZWFzb25pbmcgdGhvdWdo IGlzIHRoYXQg4oCcYXV0aOKAnSBpcyBpbnRlbmRlZCB0byBiZSBzcGVjaWZpYyB0byBwcmlvcml0 eSBzZXJ2aWNlcyBvbmx5LCBub3QgZXh0ZW5zaWJsZSBmb3Igb3RoZXIgYXBwbGljYXRpb25zLiAg QW5kIHRoZSBmYWN0IG9mIHRoZSBtYXR0ZXIgaXMga2V5L3ZhbHVlcyBhcmUgY2hlYXAsIG5vIHJl YXNvbiB3ZSBjYW7igJl0IGhhdmUgbmV3IHZhbHVlcyBhbmQgYmUgZXhwbGljaXQgYWJvdXQgdGhl IGludGVudC4gIFRoaXMgZG9jdW1lbnQgaXMgc3BlY2lmaWMgdG8gOTExIGFuZCBlbWVyZ2VuY3kg c2VydmljZXMgYW5kIHRvIGV4dGVuZCB0aGUga2V5L3ZhbHVlcyBkZWZpbmVkIGZvciDigJhycGji gJkgY2xhaW0gYW5kIOKAmHJwaOKAmSBQQVNTcG9yVCBleHRlbnNpb24uDQoNCkkgd2lsbCBtYWtl IHRoaXMgY2xlYXJlciBpbiB0aGUgZG9jdW1lbnQgYW5kIGV4cGxpY2l0bHkgc2F5IHRoYXQg4oCc YXV0aOKAnSBzaG91bGQgbm90IGJlIHVzZWQgZm9yIGVtZXJnZW5jeSBzZXJ2aWNlcyBwdXJwb3Nl cyBvZiB1c2luZyByZXNvdXJjZSBwcmlvcml0eSBoZWFkZXIuDQoNCkkgdGhpbmsgaXQgd291bGQg YWxzbyBtYWtlIHNlbnNlIHRvIG1ha2UgaXQgY2xlYXIgdGhhdCB0aGF0IHRoaXMgZG9jdW1lbnQg ZXh0ZW5kcyA4NDQzIGFuZCBsaW5raW5nIHRoZSBkb2N1bWVudHMuDQoNCkZvciBjb21wYWN0IGZv cm0sIHdlIHRoaW5rIGl0IHdvdWxkIGNvbmZ1c2UgZm9sa3MgdG8gYWRkIHByb3Zpc2lvbnMgZm9y IGNvbXBhY3QgZm9ybSBvciBhbGxvdyBpdCBmb3IgbGl0dGxlIGdhaW4sIGFuZCB0aGVyZWZvcmUg cHJlZmVyIHRvIGxlYXZlIGl0IHVuZGVmaW5lZC4NCg0KVGhhbmtzLg0KDQotQ2hyaXMNCg0KDQoN Cg0KT24gQXVnIDIwLCAyMDIwLCBhdCAxOjMwIFBNLCBKYWNrIFJpY2thcmQgPEphY2suUmlja2Fy ZEBtZXRhc3dpdGNoLmNvbTxtYWlsdG86SmFjay5SaWNrYXJkQG1ldGFzd2l0Y2guY29tPj4gd3Jv dGU6DQoNCkl0J3Mgbm90IGNsZWFyIHRoYXQgdGhpcyBzcGVjIHJlbGllcyBvbiB0aGF0LCBhbmQg SSdtIG5vdCBzdXJlIHRoYXQgaXQgc2hvdWxkPyBUbyBtZSBpdCBzZWVtcyBsaWtlIHRoaXMgY291 bGQgYmUgbW9yZSB3aWRlbHkgYXBwbGljYWJsZS4NCg0KV291bGQgeW91IGJlIGFibGUgdG8gYWRk cmVzcywgZnJvbSBhIHZlcmlmaWNhdGlvbiBzZXJ2aWNlJ3MgcG9pbnQgb2Ygdmlldywgd2hhdCBp dCBzaG91bGQgZG8/IEkgdGhpbmsgdGhhdCB3aWxsIGNsZWFyIHVwIHdoeSAiRXNvcmlnIiBhbmQg IkVTY2FsbGJhY2siIGFyZSB1c2VmdWwgYWJvdmUgcGxhaW4gImF1dGgiLg0KSSB0aGluayB0aGUg c3BlYyB3b3VsZCBiZW5lZml0IGZyb20gdGhhdCBzZWN0aW9uIGFzIHdlbGwgU2VjdGlvbiA0IG9m IFJGQyA4NDQzIGFuZCBzZWN0aW9uIDExIG9mIGRyYWZ0LWlldGYtc3Rpci1wYXNzcG9ydC1yY2Qt MDYgYXJlIGJvdGggaW5jcmVkaWJseSB1c2VmdWwuDQoNClRoYW5rcywNCkphY2sNCg0KRnJvbTog QnJpYW4gUm9zZW4gPGJyQGJyaWFucm9zZW4ubmV0PG1haWx0bzpickBicmlhbnJvc2VuLm5ldD4+ DQpTZW50OiAxOSBBdWd1c3QgMjAyMCAxNDo0MA0KVG86IEphY2sgUmlja2FyZCA8SmFjay5SaWNr YXJkQG1ldGFzd2l0Y2guY29tPG1haWx0bzpKYWNrLlJpY2thcmRAbWV0YXN3aXRjaC5jb20+Pg0K Q2M6IGRyYWZ0LWlldGYtc3Rpci1ycGgtZW1lcmdlbmN5LXNlcnZpY2VzQGlldGYub3JnPG1haWx0 bzpkcmFmdC1pZXRmLXN0aXItcnBoLWVtZXJnZW5jeS1zZXJ2aWNlc0BpZXRmLm9yZz47IHN0aXJA aWV0Zi5vcmc8bWFpbHRvOnN0aXJAaWV0Zi5vcmc+DQpTdWJqZWN0OiBSZTogW3N0aXJdIFJldmll dyBvZiBkcmFmdC1pZXRmLXN0aXItcnBoLWVtZXJnZW5jeS1zZXJ2aWNlcw0KDQpBYm91dCAyMCUg b2YgdGhlIFVTIGhhcyBub3cgdXBncmFkZWQgdG8gTkc5LTEtMSwgYWx0aG91Z2ggbW9zdCBzZXJ2 aWNlIHByb3ZpZGVycyBoYXZlbuKAmXQgeWV0LiAgVGhlIHdpcmVsZXNzIGNhcnJpZXJzIGFyZSBt b3ZpbmcgdG93YXJkcyBpdDsgdGVzdGluZyBpcyB1bmRlcndheS4NCkkgd2lsbCBoYXZlIGEgY29t cGFuaW9uIGRvY3VtZW50IGluIHNpcGNvcmUgdGhhdCBoYW5kbGVzIHRoZSBzaWduYWxpbmcgYXNw ZWN0cyBvZiB0aGlzIG1lY2hhbmlzbS4gIEZvciB0aGUgb2xkZXIgRTkxMSBzeXN0ZW0sIG5vbmUg b2Ygc3RpciByZWFsbHkgaGVscHMgYmVjYXVzZSB0aGUgZXhpc3Rpbmcgc3lzdGVtIGlzIGJ1aWx0 IG9uIHRoZSBvbGRlciBDbGFzcyA0IHN3aXRjaGVzICjigJxTZWxlY3RpdmUgUm91dGVyc+KAnSku ICBBbGwgb2YgdGhpcyBtZWNoYW5pc20gaXMgZm9yIE5HOS0xLTEgYW5kIHRoZSBlcXVpdmFsZW50 IHNlcnZpY2VzIGluIHRoZSByZXN0IG9mIHRoZSB3b3JsZCwgYmFzZWQgb24gSUVURiBzdGFuZGFy ZHMgKFJGQzY4ODEsIFJGQzUyMjIsIGFuZCBzZXZlcmFsIG90aGVycykuDQoNCg0KDQoNCg0KT24g QXVnIDE5LCAyMDIwLCBhdCA3OjE5IEFNLCBKYWNrIFJpY2thcmQgPEphY2suUmlja2FyZEBtZXRh c3dpdGNoLmNvbTxtYWlsdG86SmFjay5SaWNrYXJkQG1ldGFzd2l0Y2guY29tPj4gd3JvdGU6DQoN ClRoYW5rcywgdGhhdCdzIHJlYWxseSB1c2VmdWwsIGhvd2V2ZXIsIEknbSBub3QgY29udmluY2Vk Lg0KDQpGb3IgRVNvcmlnLCBhcyBmYXIgYXMgSSBrbm93IHRoaXMgaXNuJ3QgY3VycmVudGx5IGFs d2F5cyB0aGUgY2FzZSwgSSBhbSBhd2FyZSBvZiBzaXR1YXRpb25zIHdoZXJlIGVtZXJnZW5jeSBj YWxscyBqdXN0IGxvb2sgbGlrZSBub3JtYWwgY2FsbHMgd2l0aCBhIG51bWJlciBvZiA5MTEuIEkn bSBhbHNvIHN0aWxsIHVuY2xlYXIgYWJvdXQgd2hhdCBhZmZlY3QgdGhpcyBoYXMsIGFzIHlvdSBj YW4gY3VycmVudGx5IGFscmVhZHkgc2lnbiBlbWVyZ2VuY3kgY2FsbHMgdXNpbmcgdGhlIHN0YW5k YXJkIG1lY2hhbmlzbXMgKGJhcnJpbmcgdGhlIHdob2xlICJ1cm46c2VydmljZTpzb3MiIHRuIHdo aWNoIEkgZG9uJ3QgYmVsaWV2ZSBpcyBzdGFuZGFyZGlzZWQgZm9yIFNUSVIgeWV0PykgIGJ5IHB1 dHRpbmcgImVzbmV0LjAiIGluIHRoZSBhdXRoIGZpZWxkIG9mIGFuIHJwaCBwYXNzcG9ydC4NCg0K Rm9yIEVTY2FsbGJhY2ssIGlmIHRoZSBzcGggYW5kICJycGguYXV0aCIgY2xhaW1zIGNvdmVyIHRo ZWlzIGVudGlyZWx5IHdoeSBpcyBFU2NhbGxiYWNrIG5lZWRlZD8gSSdtIGFsc28gc3RpbGwgdW5j bGVhciB3aGF0IHRoZSB2ZXJpZmljYXRpb24gc2VydmljZSBiZWhhdmlvdXIgaXMgaGVyZS4NCg0K SSdtIHN0aWxsIHVuY2xlYXIgYXMgdG8gaG93IHRoaXMgc3BlYyBoZWxwcyB3aXRoIGFsbG93aW5n IGFuZCBwcmV2ZW50aW5nIG1hbGljaW91cyB1c2Ugb2YgZW1lcmdlbmN5IGNhbGxzLiBZb3UgY2Fu IGFscmVhZHkgcHV0IGVzbmV0IHJlc291cmNlIHByaW9yaXR5IHBhaXJzIGluIHRoZSAicnBoLmF1 dGgiIGNsYWltIGFuZCB0aGF0IHNlZW1zIHRvIHByb3ZpZGUgYXMgbXVjaCBzZWN1cml0eSBhcyB0 aGlzIGRvZXMuIEkgZG8gYWdyZWUgdGhlIHNwaCBjbGFpbSBkb2VzIHByb3ZpZGUgdmFsdWUsIGhv d2V2ZXIuDQoNCkkgZGlkIGp1c3QgcmVhbGlzZSB0aGF0IHRoZSBlc25ldCBSZXNvdXJjZSBQcmlv cml0eSBuZWVkcyB0byBiZSBpbiB0aGUgInJwaC5hdXRoIiBjbGFpbSBvciB0aGUgbG9naWMgZnJv bSB0aGF0IHJmYyB3aWxsIGtpY2sgaW4gYW5kIHJlbW92ZSBpdCwgYXMgcGVyOg0KUkZDIDg0NDMs IHNlY3Rpb24gNC4yDQogICBJbiBzdWNoIHNjZW5hcmlvcywgdGhlIFNJUCAnUmVzb3VyY2UtUHJp b3JpdHknIGhlYWRlciBmaWVsZCBTSE9VTEQgYmUNCiAgIHN0cmlwcGVkIGZyb20gdGhlIFNJUCBy ZXF1ZXN0LCBhbmQgdGhlIG5ldHdvcmsgZW50aXRpZXMgc2hvdWxkIHRyZWF0DQogICB0aGUgY2Fs bCBhcyBhbiBvcmRpbmFyeSBjYWxsLg0KDQpJJ2xsIG5vdGUgdGhhdCBzb21lIG9mIG15IHF1ZXN0 aW9ucyBhbmQgY29uY2VybnMgaGF2ZW4ndCBiZWVuIGFkZHJlc3NlZCB5ZXQsIEknbSBoYXBweSB0 byByZXNvbHZlIHRoaXMgZmlyc3QsIGp1c3QgbWFraW5nIGEgbm90ZSBzbyB0aGF0IHRoZXkgZG9u J3QgZ2V0IGxvc3QvSSBkb24ndCBmb3JnZXQgYWJvdXQgdGhlbS4NCkphY2sNCg0KRnJvbTogQnJp YW4gUm9zZW4gPGJyQGJyaWFucm9zZW4ubmV0PG1haWx0bzpickBicmlhbnJvc2VuLm5ldD4+DQpT ZW50OiAxOCBBdWd1c3QgMjAyMCAyMjozMQ0KVG86IEphY2sgUmlja2FyZCA8SmFjay5SaWNrYXJk QG1ldGFzd2l0Y2guY29tPG1haWx0bzpKYWNrLlJpY2thcmRAbWV0YXN3aXRjaC5jb20+Pg0KQ2M6 IGRyYWZ0LWlldGYtc3Rpci1ycGgtZW1lcmdlbmN5LXNlcnZpY2VzQGlldGYub3JnPG1haWx0bzpk cmFmdC1pZXRmLXN0aXItcnBoLWVtZXJnZW5jeS1zZXJ2aWNlc0BpZXRmLm9yZz47IHN0aXJAaWV0 Zi5vcmc8bWFpbHRvOnN0aXJAaWV0Zi5vcmc+DQpTdWJqZWN0OiBSZTogW3N0aXJdIFJldmlldyBv ZiBkcmFmdC1pZXRmLXN0aXItcnBoLWVtZXJnZW5jeS1zZXJ2aWNlcw0KDQpMZXTigJlzIGtlZXAg dGhlIHR3byB1c2UgY2FzZXMgc2VwYXJhdGU6DQpFU29yaWcgaXMgYW4gZW1lcmdlbmN5IGNhbGwg KHVzZXIgdG8gYXV0aG9yaXR5KS4NCkVTY2FsbGJhY2sgaXMgYSBjYWxsIGZyb20gYXV0aG9yaXR5 IHRvIHVzZXIuDQoNCkZvciBFU29yZywgdGhlIGNhbGwgaXMgbWFya2VkIHdpdGggYSBSZXF1ZXN0 LVVSSSBvZiB1cm46c2VydmljZTpzb3MuICBUaGUg4oCcVG/igJ0gZmllbGQgaXMgaWdub3JlZCBp biByb3V0aW5nIGFuZCBoYW5kbGluZyB0aGUgY2FsbC4gIFRoYXTigJlzIGhvdyB5b3Uga25vdyB0 aGlzIGlzIGFuIGVtZXJnZW5jeSBjYWxsLiAgIEZvciBzdGlyIHB1cnBvc2VzLCB0aGUgRnJvbSBp cyBhbiBvcmRpbmFyeSBpZGVudGlmaWVyLCBhbmQgZ2V0cyB0cmVhdGVkIGluIHRoZSBub3JtYWwg d2F5LiAgSG93ZXZlciwgdGhlIHJwaCB2YWx1ZSBjYW4gb25seSBiZSB1c2VkIGJ5IGEgdmFsaWQg ZW1lcmdlbmN5IGNhbGwsIGFuZCBhIHZhbGlkIGVtZXJnZW5jeSBjYWxsIGlzIGEgUmVxdWVzdCBV Ukkgb2YgdXJuOnNlcnZpY2U6c29zLCBhbmQgYSB2YWxpZCBGcm9tLiAgU28geW91IGRvbuKAmXQg aGF2ZSBhbnkga25vd2xlZGdlIG9mIGVtZXJnZW5jeSBzZXJ2aWNlcyBpZGVudGlmaWVycywgb25s eSB0aGUgUmVxdWVzdCBVUkkgb2YgdXJuOnNlcnZpY2U6c29zLg0KDQpGb3IgRVNjYWxsYmFjaywg dGhlIG1hcmtpbmcgaXMgYSBkaXN0aW5ndWlzaGVkIHZhbHVlIGluIFNJUCBQcmlvcml0eS4gIElm IGEgY2FsbCBoYXMgdGhhdCB2YWx1ZSwgaXTigJlzIGEgY2FsbCBiYWNrLiAgVGhlIG9yaWdpbmF0 aW5nIHNlcnZpY2UgcHJvdmlkZXIga25vd3Mgd2hvIGFyZSB0aGUgYXV0aG9yaXRpZXMgd2hvIGFy ZSBhbGxvd2VkIHRvIHBsYWNlIGNhbGwgYmFja3MsIHNvIHRoZSBjaGVjayBpcyB3aGF0IGlzIGlu IFNJUCBQcmlvcml0eSwgYW5kIG9uZSBvZiB0aGUgYWxsb3dlZCBhdXRob3JpdGllcyBpbiBGcm9t LiAgQXMgYSBwcmFjdGljYWwgbWF0dGVyLCBpbiBtb3N0IGNhc2VzLCB0aGUgY2FsbCB3aWxsIGJl IHNpZ25lZCBieSB0aGUgZW1lcmdlbmN5IGF1dGhvcml0aWVzIHRoZW1zZWx2ZXMsIHdobyB3aWxs IGJlIGFibGUgdG8gZ2V0IGFwcHJvcHJpYXRlIGNyZWRlbnRpYWxzIGZvciB0aGlzIHB1cnBvc2Uu ICBJbiBtb3N0IGNhc2VzIEnigJltIGF3YXJlIG9mLCB0aGUgVG8gaW4gYW4gZW1lcmdlbmN5IGNh bGwgd29u4oCZdCBtYXRjaCB0aGUgRnJvbSBpbiBhIENhbGxiYWNrLCBidXQgaXTigJlzIHBvc3Np YmxlIGZvciB0aGF0IHRvIGhhcHBlbiwgYW5kIHdlIHdhbnQgdG8gYWxsb3cgaXQuDQoNCkVzbmV0 IGlzIGEgUmVzb3VyY2UgUHJpb3JpdHkgSGVhZGVyIG5hbWVzcGFjZSwgbm90IGEgU0lQIFByaW9y aXR5IHZhbHVlLiAgV2XigJlyZSBhbGxvd2luZyBlbWVyZ2VuY3kgY2FsbHMgYW5kIGNhbGwgYmFj a3MgdG8gdXNlIHJwaCwgYW5kIHdl4oCZcmUgcHJvdGVjdGluZyBhZ2FpbnN0IG1hbGljaW91cyB1 c2Ugb2YgaXQuICBTbyB1bmxlc3MgdGhlIGNhbGwgaGFzIHVybjpzZXJ2aWNlOnNvcyBpbiBSZXF1 ZXN0IFVSSSwgb3IgdGhlIHJpZ2h0IFNJUCBQcmlvcml0eSBpbiBhIGNhbGwgYmFjayAoYW5kIGZy b20gYW4gYXV0aG9yaXplZCBhdXRob3JpdHkpIHRoZXkgY2Fu4oCZdCB1c2UgcnBoIHdpdGggdGhl IGVzbmV0IG5hbWVzcGFjZS4gIEdlbmVyYWxseSwgdW5sZXNzIHVuZGVyIGF0dGFjaywgZW1lcmdl bmN5IGNhbGxzIGdvIHRocm91Z2ggZXZlbiBpZiB0aGVyZSBpc27igJl0IGEgcGFzc3BvcnQuICBN YW55IG5ldHdvcmtzIHdvbuKAmXQgb2ZmZXIgYWN0dWFsIHByaW9yaXR5IHRvIGVtZXJnZW5jeSBj YWxscywgYnV0IHRoZSBlbWVyZ2VuY3kgc2VydmljZXMgbmV0d29ya3MgKEVTSW5ldHMpIHdpbGwu DQoNCklmIGEgY2FsbCBhcnJpdmVzIGFueXdoZXJlIHdpdGggYW4gcnBoIHVzaW5nIGVzbmV0LCBh bmQgaXNu4oCZdCBhbiBlbWVyZ2VuY3kgY2FsbCwgd2l0aCB0aGUgYXBwcm9wcmlhdGUgcGFzc3Bv cnQsICBhbnkgaW50ZXJtZWRpYXJ5IGNhbiByZWZ1c2UgdG8gZ2l2ZSBpdCBhbnkgcHJpb3JpdHks ICBUaGUgZW1lcmdlbmN5IGF1dGhvcml0aWVzIG1heSBhY2NlcHQgYSBjYWxsIHdpdGhvdXQgYSB2 YWxpZCBwYXNzcG9ydCwgYnV0IHRoZXkgbWlnaHQgdHJlYXQgaXQgd2l0aCBtdWNoIG1vcmUgc3Vz cGljaW9uIHRoYW4gdGhleSB3b3VsZCBhbnkgb3RoZXIgY2FsbC4NCg0KRm9yIGNhbGwgYmFja3Ms IHRoZSBuZXR3b3JrIG1heSBoYXZlIHNwZWNpYWwgYmVoYXZpb3IuICBGb3IgZXhhbXBsZSwgaXQg bWF5IHNlbmQgdGhlIGNhbGwgdG8gdGhlIGRldmljZSB0aGF0IHBsYWNlZCB0aGUgZW1lcmdlbmN5 IGNhbGwsIHJhdGhlciB0aGFuLCBmb3IgZXhhbXBsZSwgdm9pY2UgbWFpbC4gIFRoZSBuZXR3b3Jr IGhhcyB0byBiZSBhYmxlIHRvIHRydXN0IHRoYXQgU0lQIFByaW9yaXR5IGlzIHNldCBhcHByb3By aWF0ZWx5LiAgSXQgd2lsbCBhbHNvIGhhdmUgcnBoIHVzaW5nIGVzbmV0LCBhbmQgdGhlIG5ldHdv cmsgY2FuIGdyYW50IGl0IGFwcHJvcHJpYXRlIHByaW9yaXR5IGlmIGl0IGhhcyB0aGF0IGNhcGFi aWxpdHksIGFuZCB3b3VsZCBub3QgYWxsb3cgZXNuZXQgb3RoZXJ3aXNlLg0KDQpUaGUgb25seSB2 YWx1ZSBpbiBjb3ZlcmluZyBvdGhlciB1c2VzIG9mIFNJUCBQcmlvcml0eSBpcyB0byBwcm90ZWN0 IGFnYWluc3QgbWlkZGxlIGJveGVzIG1vZGlmeWluZyBpdC4gIFdlIGRvbuKAmXQgcmVhbGx5IGhh dmUgdXNlIGNhc2VzIGZvciB0aGF0LiAgSXQgcHJvYmFibHkgd291bGRu4oCZdCBodXJ0IHRvIGFs bG93IGl0IHRob3VnaC4NCg0KRG9lcyB0aGF0IGhlbHA/DQoNCkJyaWFuDQoNCg0KDQoNCg0KDQoN Ck9uIEF1ZyAxNCwgMjAyMCwgYXQgMToyMSBQTSwgSmFjayBSaWNrYXJkIDxKYWNrLlJpY2thcmQ9 NDBtZXRhc3dpdGNoLmNvbUBkbWFyYy5pZXRmLm9yZzxtYWlsdG86SmFjay5SaWNrYXJkPTQwbWV0 YXN3aXRjaC5jb21AZG1hcmMuaWV0Zi5vcmc+PiB3cm90ZToNCg0KSSBoYXZlIHJldmlld2VkIGRy YWZ0LWlldGYtc3Rpci1ycGgtZW1lcmdlbmN5LXNlcnZpY2VzLTAyIGFuZCBoYXZlIHNvbWUgY29u Y2VybnMgYW5kIHF1ZXN0aW9ucy4gSSBkb24ndCBiZWxpZXZlIHRoaXMgc3BlYyBpcyBpbXBsZW1l bnRhYmxlIGluIGl0cyBjdXJyZW50IGZvcm0uDQoNClRoYW5rcywNCkphY2sNCg0KV2h5IGFyZSAi RVNvcmlnIiBhbmQgIkVTY2FsbGJhY2siIGRpc3RpbmN0Pw0KVGhleSBzZWVtIHRvIHNlcnZlIGEg dmVyeSBzaW1pbGFyIHB1cnBvc2Ugd2l0aCB0aGUgb25seSBkaWZmZXJlbmNlIGJlaW5nIHdoZXRo ZXIgb3JpZyBvciBkZXN0IHNob3VsZCBiZSB0aGUgZW1lcmdlbmN5IHNlcnZpY2VzLiBJIGRvbid0 IGJlbGlldmUgdGhlcmUncyBhbnkgY2hlY2sgdGhhdCBjYW4gYmUgZG9uZSB0byB2YWxpZGF0ZToN CiAgIFdoZW4gdXNpbmcgIkVTb3JpZyIgYXMgdGhlICJycGgiIGFzc2VydGlvbiB2YWx1ZSwgdGhl ICJvcmlnIiBjbGFpbSBvZg0KICAgdGhlIFBBU1Nwb3JUIE1VU1QgcmVwcmVzZW50IHRoZSBjYWxs aW5nIHBhcnR5IG51bWJlciB0aGF0IGluaXRpYXRlcw0KICAgdGhlIGNhbGwgdG8gZW1lcmdlbmN5 IHNlcnZpY2VzLg0KVGhpcyAoYW5kIHRoZSBlcXVpdmFsZW50IHN0YXRlbWVudCBmb3IgRVNjYWxs YmFjaykgZG9uJ3Qgc2VlbSBwb3NzaWJsZSB0byBtZSB0byBjaGVjayAoYmFycmluZyB0aGUgc3Rh bmRhcmQgb3JpZy9kZXN0IGNoZWNraW5nKS4uDQpUaGlzIHdvdWxkIG1ha2UgdGhlIGNoZWNrICJh dCBsZWFzdCBvbmUgb2YgdGhlIHBhcnRpZXMgc2hvdWxkIGJlIHRoZSBlbWVyZ2VuY3kgc2Vydmlj ZXMiIGVub3VnaCB0byB2YWxpZGF0ZSB0aGF0IHRoaXMgd2FzIGEgcmVhc29uYWJsZSBjYWxsLg0K DQoNCldoeSBoYXZlIHRoZW0gYXQgYWxsIHJhdGhlciB0aGFuIGp1c3QgdXNpbmcgYXV0aD8NClRo aXMgaXMgdmVyeSBwb3NzaWJseSBhbiBpc3N1ZSB3aXRoIG15IHVuZGVyc3RhbmRpbmcsIGJ1dCBJ J20gbm90IGNsZWFyIG9uIHdoeSAiRVNvcmlnIiBhbmQgIkVTY2FsbGJhY2siIGV2ZW4gbmVlZCB0 byBleGlzdC4gImVzbmV0LjAiIGV0Yy4gYXJlIFNJUCBSZXNvdXJjZSBQcmlvcml0eSBoZWFkZXJz LCBzbyBzaG91bGQgYmUgaW5jbHVkZWQgaW4gdGhlICJhdXRoIiBmaWVsZCBhbnl3YXkgYnkgdGhl IFJQSCBzcGVjLiBUaGlzIHNwZWMgYXBwZWFycyB0byBhcHBseSBleHRyYSBjb25zdHJhaW50cyAo dGhhdCBhIG9uZSBvZiB0aGUgY2FsbGVycyBtdXN0IGJlIHRoZSBlbWVyZ2VuY3kgc2VydmljZXMp IGZvciB0aGUgImVzbmV0IiBuYW1lc3BhY2UgYnV0IGl0J3Mgbm90IGNsZWFyIHdoeSBlbnRpcmVs eSBzZXBhcmF0ZSBjbGFpbXMgYXJlIG5lZWRlZC4NCg0KSW4gYSBzaW1pbGFyIHZlaW4sIHdoYXQg c2hvdWxkIGEgdmVyaWZpZXIgZG8gaWYgaXQgcmVjZWl2ZXMgYSBjYWxsIGNvbnRhaW5pbmcgYW4g aW52YWxpZCAiRVNvcmlnIiBvciAiRVNjYWxsYmFjayIgdmFsdWUgb3IgdGhlIHBhc3Nwb3J0IGlz IGludmFsaWQvdW50cnVzdGVkLCBJJ20gYXNzdW1pbmcgdGhlIGJlaGF2aW91ciBpcyB0aGUgc2Ft ZSBhcyBmb3IgYXV0aCBidXQgdGhpcyBpc24ndCBjbGVhci4gQWx0aG91Z2ggc3RyaXBwaW5nIHRo ZSBmYWN0IHRoYXQgdGhpcyBpcyBhbiBlbWVyZ2VuY3kgY2FsbCBpcyBwb3RlbnRpYWxseSBkYW5n ZXJvdXMuLg0KDQoNClNwZWNpZnkgdGhlIHR5cGUgb2YgdGhlICJFU29yaWciIGFuZCAiRVNjYWxs YmFjayIgY2xhaW1zLg0KVGhpcyBzcGVjaWZpY2F0aW9uIGN1cnJlbnRseSBkb2Vzbid0IHNwZWNp ZnkgdGhlIHR5cGUgb2YgdGhlIG5ldyBmaWVsZHMsIHRoZXJlIGFyZSBvbmx5IGV4YW1wbGVzIGFu ZCB0aGlzIGlzbid0IGVub3VnaC4gSXQgbG9va3MgbGlrZSB0aGV5IGJvdGggZm9sbG93IHRoZSBz YW1lIHNjaGVtZSBhcyB0aGUgcnBoICJhdXRoIiBjbGFpbSwgaG93ZXZlciAiZXNuZXQseCIgZG9l c24ndCBxdWl0ZSBmaXQgaW50byB0aGF0IGR1ZSB0byB0aGUgY29tbWEgYW5kIHRoYXQgeCBpc24n dCBhIHZhbGlkIHByaW9yaXR5IHZhbHVlLg0KDQoNCldoeSBpcyBzcGggbGltaXRlZCB0byBwc2Fw LWNhbGxiYWNrPyBXaGF0IHNob3VsZCB0aGUgdmVyaWZpZXIgZG8gaWYgaXQgaXNuJ3QgdGhhdD8g V2hhdCBzaG91bGQgaXQgZG8gaWYgaXQgaXM/DQpJJ20gbm90IGVudGlyZWx5IGNsZWFyIG9uIHRo ZSBwdXJwb3NlIG9mIHRoZSBzcGggY2xhaW0sIGhvd2V2ZXIsIGl0IHNlZW1zIG9kZCB0aGF0IGl0 IGRvZXNuJ3QgY292ZXIgdGhlIGZ1bGwgcmFuZ2Ugb2YgcG9zc2libGUgdmFsdWVzIGZvciB0aGUg U0lQIFByaW9yaXR5IEhlYWRlci4gSXMgdGhlcmUgYSByZWFzb24gdGhhdCBpdCBkb2Vzbid0IGNv dmVyIHRoZSAibm9uLXVyZ2VudCIsICJub3JtYWwiLCAidXJnZW50Iiwgb3IgImVtZXJnZW5jeSIg dmFsdWVzPw0KVGhlcmUgaXMgYWxzbyBubyB2ZXJpZmllciBiZWhhdmlvdXIgZGVmaW5lZCBoZXJl LCBzaG91bGQgdGhlIHZlcmlmaWVyIHJlbW92ZSB0aGUgUHJpb3JpdHkgaGVhZGVyIGlmIGl0IHJl Y2VpdmVzIGFuIGludml0ZSB3aXRoIG5vIHBhc3Nwb3J0cyBzaWduaW5nIGZvciBpdD8gVGhhdCBz ZWVtcyBkYW5nZXJvdXMgdG8gbWUgYnV0IHdvdWxkIGJlIGNvbnNpc3RlbnQgd2l0aCBycGguIEFs dGVybmF0aXZlbHksIHdoYXQgc2hvdWxkIHRoZSB2ZXJpZmllciBkbyBpZiBpdCByZWNlaXZlcyBh biBpbnZpdGUgd2l0aCBhIHZhbGlkIHBhc3Nwb3J0IGNsYWltaW5nIHNwaCBidXQgd2l0aCBubyBQ cmlvcml0eSBoZWFkZXIgc2hvdWxkIGl0IGFkZCBpdCBpbj8gSSdtIG5vdCBzdXJlIHRoZSBzcGVj IG5lZWRzIHRvIGJlIHRvbyBwcmVzY3JpcHRpdmUgaGVyZSwgaG93ZXZlciBzb21lIG1lbnRpb24g b2YgdmVyaWZpZXIgYmVoYXZpb3VyIGFuZCB0aGUgYXNzb2NpYXRlZCBzZWN1cml0eSBjb25zaWRl cmF0aW9ucyB3b3VsZCBiZSB1c2VmdWwuDQoNCg0KU2hvdWxkIHRoZSBzcGVjIGJlIHN0cm9uZ2Vy IGFib3V0IHRoZSBjb21wYWN0IGZvcm0/DQpTZWN0aW9uIDMgY3VycmVudGx5IHN0YXRlcw0KDQog ICBUaGUgdXNlIG9mIHRoZSBjb21wYWN0IGZvcm0gb2YgUEFTU3BvclQgaXMgbm90IHNwZWNpZmll ZCBpbiB0aGlzDQoNCiAgIGRvY3VtZW50Lg0KSG93ZXZlciwgYSBjb21wYWN0LWZvcm0gcGFzc3Bv cnQgZm9sbG93aW5nIHRoaXMgc3BlYyB3b3VsZCBiZSBoYXJkIHRvIHZlcmlmeSBhcyBpdCBpbnRy b2R1Y2VzIG11bHRpcGxlIHBvc3NpYmxlIHJwaCB2YXJpYW50cywgSSB0aGluayB0aGlzIHNwZWMg Y291bGQgZ28gZnVydGhlciBhbmQgc2F5IHlvdSBzaG91bGRuJ3QvbXVzdG4ndC4NCg0KDQpXaGF0 IGlzIHRoZSByZXF1aXJlbWVudCBvZiB0aGVzZSBuZXcgcGFyYW1ldGVycy4NCkFzIEkgdW5kZXJz dGFuZCBpdCwgdGhlIHBhc3Nwb3J0IHNwZWMgYWxsb3dzIHlvdSB0byBjcmVhdGUgYSBwYXNzcG9y dCBjb250YWluaW5nIHdoYXRldmVyIEpXVCBmaWVsZHMgeW91IHdhbnQgYW5kIHZlcmlmaWVycyBz aG91bGQganVzdCBpZ25vcmUgYW55IGZpZWxkcyB0aGV5IGRvbid0IHVuZGVyc3RhbmQuIFVubGVz cyB0aGUgInBwdCIgY2xhaW0gaXMgc2V0LCB3aGljaCBpbmRpY2F0ZXMgdGhhdCB2ZXJpZmllcnMg c2hvdWxkIGRpc2NhcmQgaXQgaWYgdGhleSBkb24ndCByZWNvZ25pc2UgdGhhdCBwYXNzcG9ydCB0 eXBlLiBBcyB0aGlzIHNwZWMgYWRkcyBhZGRpdGlvbmFsIGZpZWxkcyB0byBhbiBleGlzdGluZyBw YXNzcG9ydCB0eXBlIGl0IGlzbid0IGltbWVkaWF0ZWx5IGNsZWFyIHdoYXQgdGhlIGJlaGF2aW91 ciBzaG91bGQgYmUuIFNwZWNpZmljYWxseSwgaXMgYW4gcnBoIHBhc3Nwb3J0IGNvbnRhaW5pbmcg b25seSAicnBoLkVTb3JpZyIgdmFsaWQgbm93ICh3aGVyZSBpdCB3b3VsZG4ndCBiZSBiZWZvcmUg YmVjYXVzZSBhdXRoIGlzbid0IHByZXNlbnQpLCBpcyBhbiBycGggcGFzc3BvcnQgY29udGFpbmlu ZyBubyBycGggYW5kIG9ubHkgc3BoIHZhbGlkLCBhbmQgd2hhdCBkb2VzIGEgbm9uLXJwaCBwYXNz cG9ydCB3aXRoIHNwaCBvciBFU29yaWcgc2V0IG1lYW4/DQoNCl9fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fDQpzdGlyIG1haWxpbmcgbGlzdA0Kc3RpckBpZXRm Lm9yZzxtYWlsdG86c3RpckBpZXRmLm9yZz4NCmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4v bGlzdGluZm8vc3RpcjxodHRwczovL25hbTEwLnNhZmVsaW5rcy5wcm90ZWN0aW9uLm91dGxvb2su Y29tLz91cmw9aHR0cHMlM0ElMkYlMkZ3d3cuaWV0Zi5vcmclMkZtYWlsbWFuJTJGbGlzdGluZm8l MkZzdGlyJmRhdGE9MDIlN0MwMSU3Q0phY2suUmlja2FyZCU0MG1ldGFzd2l0Y2guY29tJTdDYjUx NWNlMTg1NTU2NGUxYmY4YmYwOGQ4NmM1ZTJjZDklN0M5ZDllNTZlYmY2MTM0ZGRiYjI3YmJmY2Rm MTRiMmNkYiU3QzElN0MwJTdDNjM3Mzc4NDk5MDMzMDg5MzA1JnNkYXRhPU9jb0ZmUXNBMHp0d1hH VWd3eDRSd3pYbEJoZGU2MmJ0Z2xsNEhsOHltT0ElM0QmcmVzZXJ2ZWQ9MD4NCg0K --_000_BYAPR02MB5189874A25C4013D1F9DCA08F3190BYAPR02MB5189namp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6ZHQ9InV1aWQ6QzJGNDEwMTAtNjVC My0xMWQxLUEyOUYtMDBBQTAwQzE0ODgyIiB4bWxuczptPSJodHRwOi8vc2NoZW1hcy5taWNyb3Nv ZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy9UUi9S RUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVpdj0iQ29udGVudC1UeXBlIiBjb250 ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1ldGEgbmFtZT0iR2VuZXJhdG9yIiBj b250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQgbWVkaXVtKSI+DQo8c3R5bGU+PCEt LQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpIZWx2 ZXRpY2E7DQoJcGFub3NlLTE6MiAxMSA2IDQgMiAyIDIgMiAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtm b250LWZhbWlseTpXaW5nZGluZ3M7DQoJcGFub3NlLTE6NSAwIDAgMCAwIDAgMCAwIDAgMDt9DQpA Zm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJDYW1icmlhIE1hdGgiOw0KCXBhbm9zZS0xOjIgNCA1 IDMgNSA0IDYgMyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDYWxpYnJpOw0KCXBh bm9zZS0xOjIgMTUgNSAyIDIgMiA0IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 IlNlZ29lIFVJIjsNCglwYW5vc2UtMToyIDExIDUgMiA0IDIgNCAyIDIgMzt9DQpAZm9udC1mYWNl DQoJe2ZvbnQtZmFtaWx5OkNvbnNvbGFzOw0KCXBhbm9zZS0xOjIgMTEgNiA5IDIgMiA0IDMgMiA0 O30NCi8qIFN0eWxlIERlZmluaXRpb25zICovDQpwLk1zb05vcm1hbCwgbGkuTXNvTm9ybWFsLCBk aXYuTXNvTm9ybWFsDQoJe21hcmdpbjowY207DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250LWZh bWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJ e21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1 bmRlcmxpbmU7fQ0KcHJlDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgltc28tc3R5bGUtbGlu azoiSFRNTCBQcmVmb3JtYXR0ZWQgQ2hhciI7DQoJbWFyZ2luOjBjbTsNCgltYXJnaW4tYm90dG9t Oi4wMDAxcHQ7DQoJZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseToiQ291cmllciBOZXci O30NCnAuTXNvTGlzdFBhcmFncmFwaCwgbGkuTXNvTGlzdFBhcmFncmFwaCwgZGl2Lk1zb0xpc3RQ YXJhZ3JhcGgNCgl7bXNvLXN0eWxlLXByaW9yaXR5OjM0Ow0KCW1hcmdpbi10b3A6MGNtOw0KCW1h cmdpbi1yaWdodDowY207DQoJbWFyZ2luLWJvdHRvbTowY207DQoJbWFyZ2luLWxlZnQ6MzYuMHB0 Ow0KCWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7 fQ0Kc3Bhbi5IVE1MUHJlZm9ybWF0dGVkQ2hhcg0KCXttc28tc3R5bGUtbmFtZToiSFRNTCBQcmVm b3JtYXR0ZWQgQ2hhciI7DQoJbXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1zdHlsZS1saW5r OiJIVE1MIFByZWZvcm1hdHRlZCI7DQoJZm9udC1mYW1pbHk6Q29uc29sYXM7fQ0Kc3Bhbi5hcHBs ZS1jb252ZXJ0ZWQtc3BhY2UNCgl7bXNvLXN0eWxlLW5hbWU6YXBwbGUtY29udmVydGVkLXNwYWNl O30NCnNwYW4uRW1haWxTdHlsZTIyDQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsLXJlcGx5Ow0K CWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0K Lk1zb0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1zaXpl OjEwLjBwdDt9DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo2MTIuMHB0IDc5Mi4wcHQ7DQoJ bWFyZ2luOjcyLjBwdCA3Mi4wcHQgNzIuMHB0IDcyLjBwdDt9DQpkaXYuV29yZFNlY3Rpb24xDQoJ e3BhZ2U6V29yZFNlY3Rpb24xO30NCi8qIExpc3QgRGVmaW5pdGlvbnMgKi8NCkBsaXN0IGwwDQoJ e21zby1saXN0LWlkOjE5NjA0MTM4MDsNCgltc28tbGlzdC10eXBlOmh5YnJpZDsNCgltc28tbGlz dC10ZW1wbGF0ZS1pZHM6LTQ0NDI5MzUyIC0xNzExNDgxMjIwIDEzNDgwNzU3NyAxMzQ4MDc1Nzkg MTM0ODA3NTY3IDEzNDgwNzU3NyAxMzQ4MDc1NzkgMTM0ODA3NTY3IDEzNDgwNzU3NyAxMzQ4MDc1 Nzk7fQ0KQGxpc3QgbDA6bGV2ZWwxDQoJe21zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1s ZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotMTguMHB0Ow0KCWZvbnQt ZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iLHNlcmlmOw0KCW1zby1hc2NpaS1mb250LWZhbWlseTpD YWxpYnJpOw0KCW1zby1oYW5zaS1mb250LWZhbWlseTpDYWxpYnJpOw0KCW1zby1iaWRpLWZvbnQt ZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iO30NCkBsaXN0IGwwOmxldmVsMg0KCXttc28tbGV2ZWwt bnVtYmVyLWZvcm1hdDphbHBoYS1sb3dlcjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCglt c28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LTE4LjBwdDt9DQpA bGlzdCBsMDpsZXZlbDMNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6cm9tYW4tbG93ZXI7DQoJ bXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpyaWdo dDsNCgl0ZXh0LWluZGVudDotOS4wcHQ7fQ0KQGxpc3QgbDA6bGV2ZWw0DQoJe21zby1sZXZlbC10 YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWlu ZGVudDotMTguMHB0O30NCkBsaXN0IGwwOmxldmVsNQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1h dDphbHBoYS1sb3dlcjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVt YmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LTE4LjBwdDt9DQpAbGlzdCBsMDpsZXZl bDYNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6cm9tYW4tbG93ZXI7DQoJbXNvLWxldmVsLXRh Yi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpyaWdodDsNCgl0ZXh0LWlu ZGVudDotOS4wcHQ7fQ0KQGxpc3QgbDA6bGV2ZWw3DQoJe21zby1sZXZlbC10YWItc3RvcDpub25l Ow0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotMTguMHB0 O30NCkBsaXN0IGwwOmxldmVsOA0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDphbHBoYS1sb3dl cjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9u OmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LTE4LjBwdDt9DQpAbGlzdCBsMDpsZXZlbDkNCgl7bXNvLWxl dmVsLW51bWJlci1mb3JtYXQ6cm9tYW4tbG93ZXI7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7 DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpyaWdodDsNCgl0ZXh0LWluZGVudDotOS4wcHQ7 fQ0KQGxpc3QgbDENCgl7bXNvLWxpc3QtaWQ6NzEyOTI4OTM4Ow0KCW1zby1saXN0LXRlbXBsYXRl LWlkczotMTY0NDI1MDMyMjt9DQpAbGlzdCBsMg0KCXttc28tbGlzdC1pZDoxOTM1NTQ3MjU3Ow0K CW1zby1saXN0LXR5cGU6aHlicmlkOw0KCW1zby1saXN0LXRlbXBsYXRlLWlkczoxMjk0NjM3MDg4 IDQ0MTUwMTk5MCAxMzQ4MDc1NTUgMTM0ODA3NTU3IDEzNDgwNzU1MyAxMzQ4MDc1NTUgMTM0ODA3 NTU3IDEzNDgwNzU1MyAxMzQ4MDc1NTUgMTM0ODA3NTU3O30NCkBsaXN0IGwyOmxldmVsMQ0KCXtt c28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674OYOw0KCW1z by1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsN CgltYXJnaW4tbGVmdDo1NC4wcHQ7DQoJdGV4dC1pbmRlbnQ6LTE4LjBwdDsNCglmb250LWZhbWls eTpXaW5nZGluZ3M7DQoJbXNvLWZhcmVhc3QtZm9udC1mYW1pbHk6Q2FsaWJyaTsNCgltc28tYmlk aS1mb250LWZhbWlseTpDYWxpYnJpO30NCkBsaXN0IGwyOmxldmVsMg0KCXttc28tbGV2ZWwtbnVt YmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ6bzsNCgltc28tbGV2ZWwtdGFiLXN0 b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJbWFyZ2luLWxlZnQ6 OTAuMHB0Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3 Ijt9DQpAbGlzdCBsMjpsZXZlbDMNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0K CW1zby1sZXZlbC10ZXh0Ou+CpzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2 ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJbWFyZ2luLWxlZnQ6MTI2LjBwdDsNCgl0ZXh0LWlu ZGVudDotMTguMHB0Ow0KCWZvbnQtZmFtaWx5OldpbmdkaW5nczt9DQpAbGlzdCBsMjpsZXZlbDQN Cgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsN Cgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxl ZnQ7DQoJbWFyZ2luLWxlZnQ6MTYyLjBwdDsNCgl0ZXh0LWluZGVudDotMTguMHB0Ow0KCWZvbnQt ZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMjpsZXZlbDUNCgl7bXNvLWxldmVsLW51bWJlci1mb3Jt YXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Om87DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7 DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCW1hcmdpbi1sZWZ0OjE5OC4wcHQ7 DQoJdGV4dC1pbmRlbnQ6LTE4LjBwdDsNCglmb250LWZhbWlseToiQ291cmllciBOZXciO30NCkBs aXN0IGwyOmxldmVsNg0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxl dmVsLXRleHQ674KnOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1i ZXItcG9zaXRpb246bGVmdDsNCgltYXJnaW4tbGVmdDoyMzQuMHB0Ow0KCXRleHQtaW5kZW50Oi0x OC4wcHQ7DQoJZm9udC1mYW1pbHk6V2luZ2RpbmdzO30NCkBsaXN0IGwyOmxldmVsNw0KCXttc28t bGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1s ZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCglt YXJnaW4tbGVmdDoyNzAuMHB0Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7DQoJZm9udC1mYW1pbHk6 U3ltYm9sO30NCkBsaXN0IGwyOmxldmVsOA0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxs ZXQ7DQoJbXNvLWxldmVsLXRleHQ6bzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28t bGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJbWFyZ2luLWxlZnQ6MzA2LjBwdDsNCgl0ZXh0 LWluZGVudDotMTguMHB0Ow0KCWZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyI7fQ0KQGxpc3QgbDI6 bGV2ZWw5DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4 dDrvgqc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3Np dGlvbjpsZWZ0Ow0KCW1hcmdpbi1sZWZ0OjM0Mi4wcHQ7DQoJdGV4dC1pbmRlbnQ6LTE4LjBwdDsN Cglmb250LWZhbWlseTpXaW5nZGluZ3M7fQ0Kb2wNCgl7bWFyZ2luLWJvdHRvbTowY207fQ0KdWwN Cgl7bWFyZ2luLWJvdHRvbTowY207fQ0KLS0+PC9zdHlsZT48IS0tW2lmIGd0ZSBtc28gOV0+PHht bD4NCjxvOnNoYXBlZGVmYXVsdHMgdjpleHQ9ImVkaXQiIHNwaWRtYXg9IjEwMjYiIC8+DQo8L3ht bD48IVtlbmRpZl0tLT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlbGF5b3V0IHY6 ZXh0PSJlZGl0Ij4NCjxvOmlkbWFwIHY6ZXh0PSJlZGl0IiBkYXRhPSIxIiAvPg0KPC9vOnNoYXBl bGF5b3V0PjwveG1sPjwhW2VuZGlmXS0tPg0KPC9oZWFkPg0KPGJvZHkgbGFuZz0iRU4tR0IiIGxp bms9ImJsdWUiIHZsaW5rPSJwdXJwbGUiIHN0eWxlPSJ3b3JkLXdyYXA6YnJlYWstd29yZCI+DQo8 ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOkVOLVVTIj5UaGFuayB5b3UsIHRoaXMgYWRkcmVzc2Vz IHRoZSB2YXN0IG1ham9yaXR5IG9mIG15IGNvbmNlcm5zIGFuZCBmZWVscyBtdWNoIHNpbXBsZXIu IEknZCBsaWtlIGEgY291cGxlIG9mIG1pbm9yIGNsYXJpZmljYXRpb25zIGFyb3VuZCB0aGUgJnF1 b3Q7c3BoJnF1b3Q7IGNsYWltIGJ1dCBvdmVyYWxsIEknbSBtdWNoIGhhcHBpZXIgd2l0aCB0aGlz IGRvY3VtZW50LjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1VUyI+PG86cD4mbmJzcDs8L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9Im1zby1mYXJlYXN0 LWxhbmd1YWdlOkVOLVVTIj5DbGFyaWZpY2F0aW9uczo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 b2wgc3R5bGU9Im1hcmdpbi10b3A6MGNtIiBzdGFydD0iMSIgdHlwZT0iMSI+DQo8bGkgY2xhc3M9 Ik1zb0xpc3RQYXJhZ3JhcGgiIHN0eWxlPSJtYXJnaW4tbGVmdDowY207bXNvLWxpc3Q6bDAgbGV2 ZWwxIGxmbzMiPjxzcGFuIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1VUyI+QXQgdGhl IHN0YXJ0IG9mIHRoZSBzZWNvbmQgcGFyYWdyYXBoIG9mIHNlY3Rpb24gNCBpdCBzdGF0ZXM6PGJy Pg0KPC9zcGFuPiZndDsgV2UgZGVmaW5lIGEgbmV3IGNsYWltIGtleSBhcyBwYXJ0IG9mIHRoZSAm cXVvdDtycGgmcXVvdDsgUEFTU3BvclQsICZxdW90O3NwaCZxdW90Ozxicj4NCkl0J3Mgbm90IGVu dGlyZWx5IGNsZWFyIHdoYXQgdGhpcyBtZWFucywgSSdtIGFzc3VtaW5nIHRoaXMgJnF1b3Q7c3Bo JnF1b3Q7IGNsYWltIGlzIG9wdGlvbmFsIChvdGhlcndpc2UgdGhlcmUgd291bGQgYmUgaW50ZXJv cGVyYWJpbGl0eSBpc3N1ZXMpLCBidXQgaWYgc28gaG93IGlzIGl0IHRpZWQgdG8gdGhlICZxdW90 O3JwaCZxdW90OyBwYXNzcG9ydCBleHRlbnNpb24/IFRoZSBzdGF0ZWQgbWVhbmluZyBvZiBhIHBh c3Nwb3J0IGV4dGVuc2lvbiBpczo8YnI+DQomZ3Q7IElmIGl0IGlzIG5lY2Vzc2FyeSBmb3IgYW4g ZXh0ZW5zaW9uIHRvIFBBU1Nwb3JUIHRvIHJlcXVpcmUgdGhhdCBhIHJlbHlpbmcgcGFydHkgc3Vw cG9ydCBhIHBhcnRpY3VsYXIgZXh0ZW5kZWQgY2xhaW0gb3Igc2V0IG9mIGNsYWltcyBpbiB0aGUg UEFTU3BvclQgb2JqZWN0LCBpdCBjYW4gZG8gc28gYnkgc3BlY2lmeWluZyBhICZxdW90O3BwdCZx dW90OyBlbGVtZW50IGZvciB0aGUgUEFTU3BvclQgSk9TRSBIZWFkZXIuPGJyPg0KSXQncyBub3Qg Y2xlYXIgaWYgYW4gJnF1b3Q7c3BoJnF1b3Q7IGNsYWltIGNhbiBiZSBpbmNsdWRlZCBpbiBhIG5v bi1ycGggcGFzc3BvcnQsIEkgYmVsaWV2ZSB0aGlzIGlzIHNlbnNpYmxlIGFzIGFuIE9TUCB3aXRo IGF1dGhvcml0eSBvdmVyIGJvdGggdGhlIFROIGFuZCBTUEggY291bGQgcHV0IGJvdGggaW4gb25l IHBhc3Nwb3J0LiBIb3dldmVyLCBJIHRoaW5rIHRoZXJlJ3Mgc29tZSBjb21wbGV4aXR5IGFyb3Vu ZCB3aGljaCBjZXJ0aWZpY2F0ZXMgaGF2ZSBhdXRob3JpdHkNCiBvdmVyIFROcyBhbmQgU1BILCBz byBvdXRyaWdodCBiYW5uaW5nIGl0IHNlZW1zIHNlbnNpYmxlIGJ1dCBJIHRoaW5rIGl0IHNob3Vs ZCBiZSBleHBsaWNpdC48bzpwPjwvbzpwPjwvbGk+PGxpIGNsYXNzPSJNc29MaXN0UGFyYWdyYXBo IiBzdHlsZT0ibWFyZ2luLWxlZnQ6MGNtO21zby1saXN0OmwwIGxldmVsMSBsZm8zIj5BdCB0aGUg c3RhcnQgb2YgdGhlIHRoaXJkIHBhcmFncmFwaCBvZiBzZWN0aW9uIDQgaXQgc3RhdGVzOjxicj4N CiZndDsgVGhlIHZhbHVlIG9mIHRoZSAmcXVvdDtzcGgmcXVvdDsgY2xhaW0ga2V5IHNob3VsZCBv bmx5IGJlICZxdW90O3BzYXAtY2FsbGJhY2smcXVvdDsgdG8gbWF0Y2ggdGhlIFNJUCBQcmlvcml0 eSBoZWFkZXIgZmllbGQgdmFsdWUgZm9yIGF1dGhvcml6ZWQgZW1lcmdlbmN5IHNlcnZpY2VzIGNh bGxiYWNrcy48YnI+DQpJdCdzIG5vdCBjbGVhciB3aGF0IHRoZSBiZWhhdmlvdXIgb2YgdGhlIHZl cmlmaWNhdGlvbiBzZXJ2aWNlIHNob3VsZCBiZSBpZiB0aGlzIGNsYWltIGlzIG5vdCBwcmVzZW50 IG9yIGhhcyBhIHZhbHVlIG90aGVyIHRoYW4gJnF1b3Q7cHNhcC1jYWxsYmFjayZxdW90OyAob3Ig aW4gZmFjdCB3aGF0IHRoZSBiZWhhdmlvdXIgc2hvdWxkIGJlIGlmIGl0IGlzIHByZXNlbnQpLiBJ IHRoaW5rIGJlaGF2aW91ciBzaW1pbGFyIHRvIHRoZSAmcXVvdDthdXRoJnF1b3Q7IGNsYWltIGlz IHJlYXNvbmFibGUNCiBidXQgSSBkb24ndCBoYXZlIG11Y2ggZXhwZXJpZW5jZSBpbiB0aGlzIGFy ZWEuPGJyPg0KPGJyPg0KPG86cD48L286cD48L2xpPjwvb2w+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVMiPjxvOnA+Jm5ic3A7PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJtc28tZmFy ZWFzdC1sYW5ndWFnZTpFTi1VUyI+Tml0OjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1VUyI+QWxs IG9mIHRoZSBleGFtcGxlcyBpbiB0aGUgZG9jdW1lbnQgbG9vayBsaWtlIHRoaXM6PG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyB7PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmll ciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAmcXVvdDtv cmlnJnF1b3Q7OnsmcXVvdDt0biZxdW90OzomcXVvdDsxMjE1NTU1MTIxMiZxdW90O30sPG86cD48 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZu YnNwOyZuYnNwOyAmbmJzcDsmbmJzcDsmbmJzcDsmcXVvdDtkZXN0JnF1b3Q7OntbJnF1b3Q7dXJp JnF1b3Q7OiZxdW90O3VybjpzZXJ2aWNlOnNvcyZxdW90O119LDxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsgJnF1b3Q7aWF0JnF1b3Q7OjE0NDMyMDgzNDUsPG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyAmcXVvdDtycGgmcXVvdDs6eyZxdW90O2F1dGgmcXVvdDs6WyZx dW90O2VzbmV0LjEmcXVvdDtdfTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nv dXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfTxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJtc28tZmFyZWFzdC1s YW5ndWFnZTpFTi1VUyI+QnV0IEkgYmVsaWV2ZSB0aGUgZGVzdCBmaWVsZCBzaG91bGQgbG9vayBs aWtlIHRoaXM6PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcm cXVvdDsiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB7PG86cD48L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyAmcXVvdDtvcmlnJnF1b3Q7OnsmcXVvdDt0biZxdW90OzomcXVvdDsxMjE1NTU1 MTIxMiZxdW90O30sPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBO ZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAmcXVvdDtkZXN0 JnF1b3Q7OnsmcXVvdDt1cmkmcXVvdDs6WyZxdW90O3VybjpzZXJ2aWNlOnNvcyZxdW90O119LDxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgJnF1b3Q7aWF0JnF1b3Q7OjE0NDMyMDgz NDUsPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsi PiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAmcXVvdDtycGgmcXVvdDs6eyZx dW90O2F1dGgmcXVvdDs6WyZxdW90O2VzbmV0LjEmcXVvdDtdfTxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsgfTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1VUyI+KGFuZCBzaW1pbGFybHkgZm9yIGFsbCB0 aGUgb3RoZXIgZXhhbXBsZXMpPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOkVOLVVTIj48bzpwPiZuYnNw OzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0ibXNv LWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVMiPlRoYW5rcyw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4t VVMiPkphY2s8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVMiPjxvOnA+Jm5ic3A7PC9vOnA+PC9z cGFuPjwvcD4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlk ICNFMUUxRTEgMS4wcHQ7cGFkZGluZzozLjBwdCAwY20gMGNtIDBjbSI+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48Yj48c3BhbiBsYW5nPSJFTi1VUyI+RnJvbTo8L3NwYW4+PC9iPjxzcGFuIGxhbmc9 IkVOLVVTIj4gQ2hyaXMgV2VuZHQgJmx0O2NocmlzLWlldGZAY2hyaXN3ZW5kdC5uZXQmZ3Q7DQo8 YnI+DQo8Yj5TZW50OjwvYj4gMDkgT2N0b2JlciAyMDIwIDE1OjE4PGJyPg0KPGI+VG86PC9iPiBK YWNrIFJpY2thcmQgJmx0O0phY2suUmlja2FyZEBtZXRhc3dpdGNoLmNvbSZndDs8YnI+DQo8Yj5D Yzo8L2I+IEJyaWFuIFJvc2VuICZsdDtickBicmlhbnJvc2VuLm5ldCZndDs7IGRyYWZ0LWlldGYt c3Rpci1ycGgtZW1lcmdlbmN5LXNlcnZpY2VzQGlldGYub3JnOyBzdGlyQGlldGYub3JnPGJyPg0K PGI+U3ViamVjdDo8L2I+IFJlOiBbc3Rpcl0gUmV2aWV3IG9mIGRyYWZ0LWlldGYtc3Rpci1ycGgt ZW1lcmdlbmN5LXNlcnZpY2VzPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHRhYmxlIGNsYXNz PSJNc29Ob3JtYWxUYWJsZSIgYm9yZGVyPSIwIiBjZWxsc3BhY2luZz0iMCIgY2VsbHBhZGRpbmc9 IjAiIGFsaWduPSJsZWZ0IiB3aWR0aD0iMTAwJSIgc3R5bGU9IndpZHRoOjEwMC4wJTtib3JkZXIt Y29sbGFwc2U6Y29sbGFwc2UiPg0KPHRib2R5Pg0KPHRyPg0KPHRkIHN0eWxlPSJiYWNrZ3JvdW5k OiM5MTBBMTk7cGFkZGluZzozLjBwdCAxLjVwdCAzLjBwdCAxLjVwdCI+PC90ZD4NCjx0ZCB3aWR0 aD0iMTAwJSIgc3R5bGU9IndpZHRoOjEwMC4wJTtiYWNrZ3JvdW5kOiNGREYyRjQ7cGFkZGluZzoz LjBwdCAzLjc1cHQgMy4wcHQgMTEuMjVwdCI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bXNvLWVsZW1lbnQ6ZnJhbWU7bXNvLWVsZW1lbnQtZnJhbWUtaHNwYWNlOjIuMjVwdDttc28tZWxl bWVudC13cmFwOmFyb3VuZDttc28tZWxlbWVudC1hbmNob3ItdmVydGljYWw6cGFyYWdyYXBoO21z by1lbGVtZW50LWFuY2hvci1ob3Jpem9udGFsOmNvbHVtbjttc28taGVpZ2h0LXJ1bGU6ZXhhY3Rs eSI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1NlZ29l IFVJJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzIxMjEyMSI+Tk9URTogTWVzc2FnZSBpcyBmcm9t IGFuIGV4dGVybmFsIHNlbmRlcjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvdGQ+DQo8L3RyPg0K PC90Ym9keT4NCjwvdGFibGU+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+U28sIHdlIGhh ZCBkaXNjdXNzaW9ucyB3aXRoIHRoZSBleHBlcnRzIG9uIOKAmHJwaOKAmSBhbmQgZW1lcmdlbmN5 IHNlcnZpY2VzIGFuZCBhZ3JlZWQgdG8gZG8gYSAwMyByZXYgb2YgdGhpcyBkcmFmdCB0aGF0IGRv ZXMgaW5kZWVkIG1vZGlmeSB0aGUgcHJvY2VkdXJlcyB0byByZW1vdmUgdGhlIEVTT3JpZy9FU0Nh bGxiYWNrIGFuZCBpbmNvcnBvcmF0ZSB0aGUgZXNuZXQueCB2YWx1ZSBpbnRvIHRoZSDigJxhdXRo 4oCdIG9iamVjdA0KIGFycmF5LiAmbmJzcDtIb3BlZnVsbHkgdGhpcyBhZGRyZXNzZXMgdGhlIGNv bmNlcm5zIGFuZCBtYWtlcyB0aGluZ3MgYSBiaXQgc2ltcGxlci4gJm5ic3A7VGhhbmtzIGZvciB0 aGUgaW5wdXQuDQo8bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PlBsZWFzZSwgdG8gZXZlcnlvbmUsIHJldmlldyBhbmQgcHJvdmlkZSBjb21tZW50cy48bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+VGhhbmtzLjxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4m bmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4tQ2hy aXM8bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48YnI+DQo8YnI+ DQo8bzpwPjwvbzpwPjwvcD4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21h cmdpbi1ib3R0b206NS4wcHQiPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPk9uIFNlcCAz LCAyMDIwLCBhdCA5OjI4IEFNLCBKYWNrIFJpY2thcmQgJmx0OzxhIGhyZWY9Im1haWx0bzpKYWNr LlJpY2thcmRAbWV0YXN3aXRjaC5jb20iPkphY2suUmlja2FyZEBtZXRhc3dpdGNoLmNvbTwvYT4m Z3Q7IHdyb3RlOjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ SSBhZ3JlZSB3aXRoIHdoYXQgeW91IGhhdmUgc2FpZCB0aGVyZSwgaG93ZXZlciBTZWN0aW9uIDQu MiBvZiA4NDQzIGFsc28gc3RhdGVzIHRoYXQgeW91IHNob3VsZCBzdHJpcCBmcm9tIHRoZSBJTlZJ VEUgYW55ICdSZXNvdXJjZS1Qcmlvcml0eScgaGVhZGVyIHRoYXQgaXNuJ3QgdmFsaWRhdGVkIGJ5 IHRoZSBwYXNzcG9ydHMsIHdoaWNoIGluIHRoaXMgY2FzZSB3b3VsZCBiZSB0aGUgJnF1b3Q7ZXNu ZXQueCZxdW90OyBoZWFkZXIuDQogVGhpcyBkb2Vzbid0IHNlZW0gbGlrZSBhIGdvb2QgYmVoYXZp b3VyIHRvIG1lLCB3aGljaCBpcyB3aHkgSSB0aGluayAmcXVvdDtlc25ldCZxdW90OyBzaG91bGQg Z28gaW4gdGhlICZxdW90O2F1dGgmcXVvdDsgY2xhaW0gKGFzIGFuIHNpZ25pbmcgc2VydmljZSB0 aGF0IGRpZG4ndCBpbXBsZW1lbnQgdGhpcyB3b3VsZCBkbyBhbnl3YXkpLCBhdCB3aGljaCBwb2lu dCBJIGRvbid0IHNlZSB3aGF0IHV0aWxpdHkgdGhlICZxdW90O0VTKiZxdW90OyBjbGFpbXMgcHJv dmlkZS48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+VGhhbmtzLDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+SmFjazxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJi b3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNFMUUxRTEgMS4wcHQ7cGFkZGluZzozLjBwdCAw Y20gMGNtIDBjbSI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gbGFuZz0i RU4tVVMiPkZyb206PC9zcGFuPjwvYj48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNl Ij48c3BhbiBsYW5nPSJFTi1VUyI+Jm5ic3A7PC9zcGFuPjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1V UyI+Q2hyaXMgV2VuZHQgJmx0Ozwvc3Bhbj48YSBocmVmPSJtYWlsdG86Y2hyaXMtaWV0ZkBjaHJp c3dlbmR0Lm5ldCI+PHNwYW4gbGFuZz0iRU4tVVMiPmNocmlzLWlldGZAY2hyaXN3ZW5kdC5uZXQ8 L3NwYW4+PC9hPjxzcGFuIGxhbmc9IkVOLVVTIj4mZ3Q7PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZl cnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxicj4NCjxiPlNlbnQ6PC9iPjxzcGFuIGNsYXNzPSJh cHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj4wMiBTZXB0ZW1iZXIgMjAyMCAyMTow MDxicj4NCjxiPlRvOjwvYj48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJz cDs8L3NwYW4+SmFjayBSaWNrYXJkICZsdDs8L3NwYW4+PGEgaHJlZj0ibWFpbHRvOkphY2suUmlj a2FyZEBtZXRhc3dpdGNoLmNvbSI+PHNwYW4gbGFuZz0iRU4tVVMiPkphY2suUmlja2FyZEBtZXRh c3dpdGNoLmNvbTwvc3Bhbj48L2E+PHNwYW4gbGFuZz0iRU4tVVMiPiZndDs8YnI+DQo8Yj5DYzo8 L2I+PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPkJyaWFu IFJvc2VuICZsdDs8L3NwYW4+PGEgaHJlZj0ibWFpbHRvOmJyQGJyaWFucm9zZW4ubmV0Ij48c3Bh biBsYW5nPSJFTi1VUyI+YnJAYnJpYW5yb3Nlbi5uZXQ8L3NwYW4+PC9hPjxzcGFuIGxhbmc9IkVO LVVTIj4mZ3Q7Ow0KPC9zcGFuPjxhIGhyZWY9Im1haWx0bzpkcmFmdC1pZXRmLXN0aXItcnBoLWVt ZXJnZW5jeS1zZXJ2aWNlc0BpZXRmLm9yZyI+PHNwYW4gbGFuZz0iRU4tVVMiPmRyYWZ0LWlldGYt c3Rpci1ycGgtZW1lcmdlbmN5LXNlcnZpY2VzQGlldGYub3JnPC9zcGFuPjwvYT48c3BhbiBsYW5n PSJFTi1VUyI+Ow0KPC9zcGFuPjxhIGhyZWY9Im1haWx0bzpzdGlyQGlldGYub3JnIj48c3BhbiBs YW5nPSJFTi1VUyI+c3RpckBpZXRmLm9yZzwvc3Bhbj48L2E+PHNwYW4gbGFuZz0iRU4tVVMiPjxi cj4NCjxiPlN1YmplY3Q6PC9iPjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZu YnNwOzwvc3Bhbj5SZTogW3N0aXJdIFJldmlldyBvZiBkcmFmdC1pZXRmLXN0aXItcnBoLWVtZXJn ZW5jeS1zZXJ2aWNlczwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5Ob3Qgc3VyZSB3aHkgdGhl eSB3b3VsZCBicmVhayBhbnl0aGluZy4gJm5ic3A7SSB0aGluayB0aGUgaWRlYSBpcyB0aGF0IGlm IHlvdSBhcmUgZG9pbmcgZW1lcmdlbmN5IHNlcnZpY2VzIHlvdSBzaG91bGQgbm90IGluY2x1ZGUg 4oCcYXV0aOKAnSBrZXkgYW5kIHZhbHVlLiAmbmJzcDtJZiB5b3UgaW1wbGVtZW50IG9ubHkgODQ0 MyBhbmQgeW91IG9ubHkga25vdyB3aGF0IHRvIGRvIHdpdGgg4oCcYXV0aOKAnSBhbmQg4oCcYXV0 aOKAnSBpcyBub3QgaW5jbHVkZWQNCiBpbiB0aGUgUEFTU3BvclQgeW91IGFyZSB2ZXJpZnlpbmcs IHlvdSBtdXN0IGlnbm9yZSBvdGhlciBrZXkgdmFsdWVzIHlvdSBkb27igJl0IHVuZGVyc3RhbmQu IFRoZXJlZm9yZSB0aGUgdmFsaWRhdGlvbiB3aWxsIGZhaWwgYW5kIHlvdSBzaG91bGQgbm90IHRy eSB0byBwcm92aWRlIGFueSB0eXBlIG9mIHByaW9yaXR5IHNlcnZpY2Ugd2l0aCB0aGF0IGNhbGwu ICZuYnNwO1RoaXMgaXMgYXBwcm9hY2ggZm9yIGFsbCBQQVNTcG9yVHMgd2l0aCBuZXdseSBkZWZp bmVkDQogY2xhaW1zIGFuZCBrZXkgdmFsdWVzIGluIGdlbmVyYWwuJm5ic3A7PHNwYW4gY2xhc3M9 ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ LUNocmlzPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PGJyPg0KPGJyPg0KPGJyPg0KPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxibG9j a3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGRp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5PbiBTZXAgMiwgMjAyMCwgYXQgNTozMyBB TSwgSmFjayBSaWNrYXJkICZsdDs8YSBocmVmPSJtYWlsdG86SmFjay5SaWNrYXJkQG1ldGFzd2l0 Y2guY29tIj5KYWNrLlJpY2thcmRAbWV0YXN3aXRjaC5jb208L2E+Jmd0OyB3cm90ZTo8bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5i c3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPkhpIENocmlzLDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxk aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5JJ20gc3Rp bGwgdW5jb252aW5jZWQgYWJvdXQgdGhlIEVTb3JpZyBhbmQgRVNjYWxsYmFjayBrZXlzLCBJJ20g aGFwcHkgZm9yIHRoZW0gdG8gYmUgYWRkZWQgYXMgbG9uZyBhcyB0aGV5IGRvbid0IGJyZWFrIGFu eXRoaW5nLiBUaGUgcHJvYmxlbSBJIHNlZSBpcyB3aXRoIGFuIGludGVybWVkaWF0ZSB0aGF0IGlt cGxlbWVudHMgODQ0MyBidXQgbm90IHRoaXMgc3BlYzogaWYgJnF1b3Q7ZXNuZXQueCZxdW90OyBp c24ndCBpbiB0aGUNCiBhdXRoIGNsYWltIHRoZSBpdCBzaG91bGQgcmVtb3ZlICZxdW90O2VzbmV0 LngmcXVvdDsgZnJvbSB0aGUgJ1Jlc291cmNlLVByaW9yaXR5JyBoZWFkZXIsIHdoaWNoIHNlZW1z IGxpa2UgYSBiYWQgdGhpbmcgdG8gbWUuIEV2ZW4gd2l0aCB0aGlzIHNwZWMgaXQncyBub3QgY3Vy cmVudGx5IGNsZWFyIHRoYXQgeW91IHNob3VsZG4ndCBkbyB0aGF0IGFzIHRoZXJlJ3Mgbm90aGlu ZyBvdmVycmlkaW5nIHRoYXQgdGV4dCBmcm9tIDg0NDMgY3VycmVudGx5LjxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5i c3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj5BcyBmb3IgY29tcGFjdCBmb3JtLCBJJ20gcGVyZmVjdGx5IGhhcHB5IHdp dGggaXQgcmVtYWluaW5nIHVuc3BlY2lmaWVkLCBpdCBqdXN0IHN1cnByaXNlZCBtZS48bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+VGhhbmtzLDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rp dj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SmFjazxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5i c3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJv cmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0UxRTFFMSAxLjBwdDtwYWRkaW5nOjMuMHB0IDBj bSAwY20gMGNtIj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4g bGFuZz0iRU4tVVMiPkZyb206PC9zcGFuPjwvYj48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVk LXNwYWNlIj48c3BhbiBsYW5nPSJFTi1VUyI+Jm5ic3A7PC9zcGFuPjwvc3Bhbj48c3BhbiBsYW5n PSJFTi1VUyI+Q2hyaXMgV2VuZHQgJmx0Ozwvc3Bhbj48YSBocmVmPSJtYWlsdG86Y2hyaXMtaWV0 ZkBjaHJpc3dlbmR0Lm5ldCI+PHNwYW4gbGFuZz0iRU4tVVMiPmNocmlzLWlldGZAY2hyaXN3ZW5k dC5uZXQ8L3NwYW4+PC9hPjxzcGFuIGxhbmc9IkVOLVVTIj4mZ3Q7PHNwYW4gY2xhc3M9ImFwcGxl LWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxicj4NCjxiPlNlbnQ6PC9iPjxzcGFuIGNs YXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj4yNSBBdWd1c3QgMjAyMCAx NjoxNTxicj4NCjxiPlRvOjwvYj48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4m bmJzcDs8L3NwYW4+SmFjayBSaWNrYXJkICZsdDs8L3NwYW4+PGEgaHJlZj0ibWFpbHRvOkphY2su Umlja2FyZEBtZXRhc3dpdGNoLmNvbSI+PHNwYW4gbGFuZz0iRU4tVVMiPkphY2suUmlja2FyZEBt ZXRhc3dpdGNoLmNvbTwvc3Bhbj48L2E+PHNwYW4gbGFuZz0iRU4tVVMiPiZndDs8YnI+DQo8Yj5D Yzo8L2I+PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPkJy aWFuIFJvc2VuICZsdDs8L3NwYW4+PGEgaHJlZj0ibWFpbHRvOmJyQGJyaWFucm9zZW4ubmV0Ij48 c3BhbiBsYW5nPSJFTi1VUyI+YnJAYnJpYW5yb3Nlbi5uZXQ8L3NwYW4+PC9hPjxzcGFuIGxhbmc9 IkVOLVVTIj4mZ3Q7OzxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwv c3Bhbj48L3NwYW4+PGEgaHJlZj0ibWFpbHRvOmRyYWZ0LWlldGYtc3Rpci1ycGgtZW1lcmdlbmN5 LXNlcnZpY2VzQGlldGYub3JnIj48c3BhbiBsYW5nPSJFTi1VUyI+ZHJhZnQtaWV0Zi1zdGlyLXJw aC1lbWVyZ2VuY3ktc2VydmljZXNAaWV0Zi5vcmc8L3NwYW4+PC9hPjxzcGFuIGxhbmc9IkVOLVVT Ij47PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjwvc3Bh bj48YSBocmVmPSJtYWlsdG86c3RpckBpZXRmLm9yZyI+PHNwYW4gbGFuZz0iRU4tVVMiPnN0aXJA aWV0Zi5vcmc8L3NwYW4+PC9hPjxzcGFuIGxhbmc9IkVOLVVTIj48YnI+DQo8Yj5TdWJqZWN0Ojwv Yj48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+UmU6IFtz dGlyXSBSZXZpZXcgb2YgZHJhZnQtaWV0Zi1zdGlyLXJwaC1lbWVyZ2VuY3ktc2VydmljZXM8L3Nw YW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rp dj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SGkg SmFjayw8c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9k aXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5JIHRoaW5rIHdl IHN0aWxsIHdhbnQgdG8ga2VlcCDigJxhdXRo4oCdIGFuZCDigJxFU29yaWcvRVNDYWxsYmFja+KA nSBhcyBzZXBhcmF0ZSBhbmQgZGlzdGluY3Qga2V5L3ZhbHVlIG9iamVjdHMsIGkgc2VlIHlvdXIg Y29tbWVudHMgYXMgbWF5YmUgZGlzYWdyZWVtZW50IHN0eWxpc3RpY2FsbHkgYnV0IGRpZG7igJl0 IHNlZSBhbnl0aGluZyB0byBzdWdnZXN0IHRoYXQgaXQgd291bGRu4oCZdCB3b3JrLiAmbmJzcDtU aGUgcmVhc29uaW5nIHRob3VnaA0KIGlzIHRoYXQg4oCcYXV0aOKAnSBpcyBpbnRlbmRlZCB0byBi ZSBzcGVjaWZpYyB0byBwcmlvcml0eSBzZXJ2aWNlcyBvbmx5LCBub3QgZXh0ZW5zaWJsZSBmb3Ig b3RoZXIgYXBwbGljYXRpb25zLiAmbmJzcDtBbmQgdGhlIGZhY3Qgb2YgdGhlIG1hdHRlciBpcyBr ZXkvdmFsdWVzIGFyZSBjaGVhcCwgbm8gcmVhc29uIHdlIGNhbuKAmXQgaGF2ZSBuZXcgdmFsdWVz IGFuZCBiZSBleHBsaWNpdCBhYm91dCB0aGUgaW50ZW50LiAmbmJzcDtUaGlzIGRvY3VtZW50IGlz IHNwZWNpZmljDQogdG8gOTExIGFuZCBlbWVyZ2VuY3kgc2VydmljZXMgYW5kIHRvIGV4dGVuZCB0 aGUga2V5L3ZhbHVlcyBkZWZpbmVkIGZvciDigJhycGjigJkgY2xhaW0gYW5kIOKAmHJwaOKAmSBQ QVNTcG9yVCBleHRlbnNpb24uPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+ DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPkkgd2lsbCBtYWtlIHRoaXMgY2xlYXJlciBpbiB0aGUgZG9jdW1l bnQgYW5kIGV4cGxpY2l0bHkgc2F5IHRoYXQg4oCcYXV0aOKAnSBzaG91bGQgbm90IGJlIHVzZWQg Zm9yIGVtZXJnZW5jeSBzZXJ2aWNlcyBwdXJwb3NlcyBvZiB1c2luZyByZXNvdXJjZSBwcmlvcml0 eSBoZWFkZXIuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0K PGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPkkgdGhpbmsgaXQgd291bGQgYWxzbyBtYWtlIHNlbnNlIHRvIG1ha2UgaXQgY2xl YXIgdGhhdCB0aGF0IHRoaXMgZG9jdW1lbnQgZXh0ZW5kcyA4NDQzIGFuZCBsaW5raW5nIHRoZSBk b2N1bWVudHMuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0K PGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPkZvciBjb21wYWN0IGZvcm0sIHdlIHRoaW5rIGl0IHdvdWxkIGNvbmZ1c2UgZm9s a3MgdG8gYWRkIHByb3Zpc2lvbnMgZm9yIGNvbXBhY3QgZm9ybSBvciBhbGxvdyBpdCBmb3IgbGl0 dGxlIGdhaW4sIGFuZCB0aGVyZWZvcmUgcHJlZmVyIHRvIGxlYXZlIGl0IHVuZGVmaW5lZC48bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rp dj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+VGhh bmtzLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rp dj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj4tQ2hyaXM8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4N CjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGJyPg0KPGJyPg0KPGJyPg0KPGJy Pg0KPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1h cmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5PbiBBdWcgMjAsIDIwMjAsIGF0IDE6MzAgUE0sIEphY2sg Umlja2FyZCAmbHQ7PGEgaHJlZj0ibWFpbHRvOkphY2suUmlja2FyZEBtZXRhc3dpdGNoLmNvbSI+ SmFjay5SaWNrYXJkQG1ldGFzd2l0Y2guY29tPC9hPiZndDsgd3JvdGU6PG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0K PGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5JdCdzIG5vdCBjbGVhciB0aGF0IHRo aXMgc3BlYyByZWxpZXMgb24gdGhhdCwgYW5kIEknbSBub3Qgc3VyZSB0aGF0IGl0IHNob3VsZD8g VG8gbWUgaXQgc2VlbXMgbGlrZSB0aGlzIGNvdWxkIGJlIG1vcmUgd2lkZWx5IGFwcGxpY2FibGUu PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PldvdWxkIHlvdSBiZSBhYmxlIHRvIGFkZHJlc3MsIGZyb20gYSB2ZXJpZmljYXRpb24gc2Vydmlj ZSdzIHBvaW50IG9mIHZpZXcsIHdoYXQgaXQgc2hvdWxkIGRvPyBJIHRoaW5rIHRoYXQgd2lsbCBj bGVhciB1cCB3aHkgJnF1b3Q7RXNvcmlnJnF1b3Q7IGFuZCAmcXVvdDtFU2NhbGxiYWNrJnF1b3Q7 IGFyZSB1c2VmdWwgYWJvdmUgcGxhaW4gJnF1b3Q7YXV0aCZxdW90Oy48bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPkkgdGhpbmsgdGhlIHNwZWMgd291bGQgYmVuZWZpdCBmcm9tIHRoYXQgc2VjdGlv biBhcyB3ZWxsIFNlY3Rpb24gNCBvZiBSRkMgODQ0MyBhbmQgc2VjdGlvbiAxMSBvZiBkcmFmdC1p ZXRmLXN0aXItcGFzc3BvcnQtcmNkLTA2IGFyZSBib3RoIGluY3JlZGlibHkgdXNlZnVsLjxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2 Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5UaGFu a3MsPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5KYWNrPG86cD48L286cD48L3A+DQo8L2Rpdj4N CjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8 ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNFMUUxRTEgMS4wcHQ7cGFk ZGluZzozLjBwdCAwY20gMGNtIDBjbSI+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48Yj48c3BhbiBsYW5nPSJFTi1VUyI+RnJvbTo8L3NwYW4+PC9iPjxzcGFuIGNs YXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPjxzcGFuIGxhbmc9IkVOLVVTIj4mbmJzcDs8L3Nw YW4+PC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIj5CcmlhbiBSb3NlbiAmbHQ7PC9zcGFuPjxhIGhy ZWY9Im1haWx0bzpickBicmlhbnJvc2VuLm5ldCI+PHNwYW4gbGFuZz0iRU4tVVMiPmJyQGJyaWFu cm9zZW4ubmV0PC9zcGFuPjwvYT48c3BhbiBsYW5nPSJFTi1VUyI+Jmd0OzxzcGFuIGNsYXNzPSJh cHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48YnI+DQo8Yj5TZW50OjwvYj48c3Bh biBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+MTkgQXVndXN0IDIw MjAgMTQ6NDA8YnI+DQo8Yj5Ubzo8L2I+PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFj ZSI+Jm5ic3A7PC9zcGFuPkphY2sgUmlja2FyZCAmbHQ7PC9zcGFuPjxhIGhyZWY9Im1haWx0bzpK YWNrLlJpY2thcmRAbWV0YXN3aXRjaC5jb20iPjxzcGFuIGxhbmc9IkVOLVVTIj5KYWNrLlJpY2th cmRAbWV0YXN3aXRjaC5jb208L3NwYW4+PC9hPjxzcGFuIGxhbmc9IkVOLVVTIj4mZ3Q7PGJyPg0K PGI+Q2M6PC9iPjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bh bj48L3NwYW4+PGEgaHJlZj0ibWFpbHRvOmRyYWZ0LWlldGYtc3Rpci1ycGgtZW1lcmdlbmN5LXNl cnZpY2VzQGlldGYub3JnIj48c3BhbiBsYW5nPSJFTi1VUyI+ZHJhZnQtaWV0Zi1zdGlyLXJwaC1l bWVyZ2VuY3ktc2VydmljZXNAaWV0Zi5vcmc8L3NwYW4+PC9hPjxzcGFuIGxhbmc9IkVOLVVTIj47 PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjwvc3Bhbj48 YSBocmVmPSJtYWlsdG86c3RpckBpZXRmLm9yZyI+PHNwYW4gbGFuZz0iRU4tVVMiPnN0aXJAaWV0 Zi5vcmc8L3NwYW4+PC9hPjxzcGFuIGxhbmc9IkVOLVVTIj48YnI+DQo8Yj5TdWJqZWN0OjwvYj48 c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+UmU6IFtzdGly XSBSZXZpZXcgb2YgZHJhZnQtaWV0Zi1zdGlyLXJwaC1lbWVyZ2VuY3ktc2VydmljZXM8L3NwYW4+ PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0K PGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOndoaXRlIj5BYm91dCAy MCUgb2YgdGhlIFVTIGhhcyBub3cgdXBncmFkZWQgdG8gTkc5LTEtMSwgYWx0aG91Z2ggbW9zdCBz ZXJ2aWNlIHByb3ZpZGVycyBoYXZlbuKAmXQgeWV0LiAmbmJzcDtUaGUgd2lyZWxlc3MgY2Fycmll cnMgYXJlIG1vdmluZyB0b3dhcmRzIGl0OyB0ZXN0aW5nIGlzIHVuZGVyd2F5LiAmbmJzcDs8L3Nw YW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4N CjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SSB3aWxsIGhhdmUgYSBjb21wYW5p b24gZG9jdW1lbnQgaW4gc2lwY29yZSB0aGF0IGhhbmRsZXMgdGhlIHNpZ25hbGluZyBhc3BlY3Rz IG9mIHRoaXMgbWVjaGFuaXNtLiAmbmJzcDtGb3IgdGhlIG9sZGVyIEU5MTEgc3lzdGVtLCBub25l IG9mIHN0aXIgcmVhbGx5IGhlbHBzIGJlY2F1c2UgdGhlIGV4aXN0aW5nIHN5c3RlbSBpcyBidWls dCBvbiB0aGUgb2xkZXIgQ2xhc3MgNCBzd2l0Y2hlcyAo4oCcU2VsZWN0aXZlIFJvdXRlcnPigJ0p Lg0KICZuYnNwO0FsbCBvZiB0aGlzIG1lY2hhbmlzbSBpcyBmb3IgTkc5LTEtMSBhbmQgdGhlIGVx dWl2YWxlbnQgc2VydmljZXMgaW4gdGhlIHJlc3Qgb2YgdGhlIHdvcmxkLCBiYXNlZCBvbiBJRVRG IHN0YW5kYXJkcyAoUkZDNjg4MSwgUkZDNTIyMiwgYW5kIHNldmVyYWwgb3RoZXJzKS4gJm5ic3A7 PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8 ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGJyPg0KPGJy Pg0KPGJyPg0KPGJyPg0KPGJyPg0KPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9k aXY+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUu MHB0Ij4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5P biBBdWcgMTksIDIwMjAsIGF0IDc6MTkgQU0sIEphY2sgUmlja2FyZCAmbHQ7PGEgaHJlZj0ibWFp bHRvOkphY2suUmlja2FyZEBtZXRhc3dpdGNoLmNvbSI+SmFjay5SaWNrYXJkQG1ldGFzd2l0Y2gu Y29tPC9hPiZndDsgd3JvdGU6PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+ DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNw OzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8 ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5UaGFua3MsIHRoYXQncyBy ZWFsbHkgdXNlZnVsLCBob3dldmVyLCBJJ20gbm90IGNvbnZpbmNlZC48bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+Rm9yIEVTb3JpZywgYXMgZmFyIGFzIEkga25vdyB0aGlzIGlzbid0IGN1 cnJlbnRseSBhbHdheXMgdGhlIGNhc2UsIEkgYW0gYXdhcmUgb2Ygc2l0dWF0aW9ucyB3aGVyZSBl bWVyZ2VuY3kgY2FsbHMganVzdCBsb29rIGxpa2Ugbm9ybWFsIGNhbGxzIHdpdGggYSBudW1iZXIg b2YgOTExLiBJJ20gYWxzbyBzdGlsbCB1bmNsZWFyIGFib3V0IHdoYXQgYWZmZWN0IHRoaXMgaGFz LCBhcyB5b3UgY2FuIGN1cnJlbnRseQ0KIGFscmVhZHkgc2lnbiBlbWVyZ2VuY3kgY2FsbHMgdXNp bmcgdGhlIHN0YW5kYXJkIG1lY2hhbmlzbXMgKGJhcnJpbmcgdGhlIHdob2xlICZxdW90O3Vybjpz ZXJ2aWNlOnNvcyZxdW90OyB0biB3aGljaCBJIGRvbid0IGJlbGlldmUgaXMgc3RhbmRhcmRpc2Vk IGZvciBTVElSIHlldD8pJm5ic3A7IGJ5IHB1dHRpbmcgJnF1b3Q7ZXNuZXQuMCZxdW90OyBpbiB0 aGUgYXV0aCBmaWVsZCBvZiBhbiBycGggcGFzc3BvcnQuPG86cD48L286cD48L3A+DQo8L2Rpdj4N CjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8 L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPkZvciBFU2NhbGxiYWNrLCBpZiB0aGUgc3BoIGFuZCAmcXVvdDtycGguYXV0aCZxdW90 OyBjbGFpbXMgY292ZXIgdGhlaXMgZW50aXJlbHkgd2h5IGlzIEVTY2FsbGJhY2sgbmVlZGVkPyBJ J20gYWxzbyBzdGlsbCB1bmNsZWFyIHdoYXQgdGhlIHZlcmlmaWNhdGlvbiBzZXJ2aWNlIGJlaGF2 aW91ciBpcyBoZXJlLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9k aXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5i c3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+ DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5JJ20gc3RpbGwgdW5j bGVhciBhcyB0byBob3cgdGhpcyBzcGVjIGhlbHBzIHdpdGggYWxsb3dpbmcgYW5kIHByZXZlbnRp bmcgbWFsaWNpb3VzIHVzZSBvZiBlbWVyZ2VuY3kgY2FsbHMuIFlvdSBjYW4gYWxyZWFkeSBwdXQg ZXNuZXQgcmVzb3VyY2UgcHJpb3JpdHkgcGFpcnMgaW4gdGhlICZxdW90O3JwaC5hdXRoJnF1b3Q7 IGNsYWltIGFuZCB0aGF0IHNlZW1zIHRvIHByb3ZpZGUgYXMgbXVjaCBzZWN1cml0eSBhcyB0aGlz IGRvZXMuDQogSSBkbyBhZ3JlZSB0aGUgc3BoIGNsYWltIGRvZXMgcHJvdmlkZSB2YWx1ZSwgaG93 ZXZlci48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRp dj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4N CjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SSBkaWQganVzdCByZWFsaXNlIHRo YXQgdGhlIGVzbmV0IFJlc291cmNlIFByaW9yaXR5IG5lZWRzIHRvIGJlIGluIHRoZSAmcXVvdDty cGguYXV0aCZxdW90OyBjbGFpbSBvciB0aGUgbG9naWMgZnJvbSB0aGF0IHJmYyB3aWxsIGtpY2sg aW4gYW5kIHJlbW92ZSBpdCwgYXMgcGVyOjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4N CjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+UkZDIDg0NDMsIHNlY3Rpb24gNC4yPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwv ZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTom cXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7IEluIHN1Y2ggc2NlbmFyaW9zLCB0 aGUgU0lQICdSZXNvdXJjZS1Qcmlvcml0eScgaGVhZGVyIGZpZWxkIFNIT1VMRCBiZTwvc3Bhbj48 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxk aXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsm bmJzcDsgc3RyaXBwZWQgZnJvbSB0aGUgU0lQIHJlcXVlc3QsIGFuZCB0aGUgbmV0d29yayBlbnRp dGllcyBzaG91bGQgdHJlYXQ8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0K PC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtD b3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7IHRoZSBjYWxsIGFzIGFuIG9yZGluYXJ5IGNh bGwuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+ DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7 PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8 ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5JJ2xsIG5vdGUgdGhhdCBz b21lIG9mIG15IHF1ZXN0aW9ucyBhbmQgY29uY2VybnMgaGF2ZW4ndCBiZWVuIGFkZHJlc3NlZCB5 ZXQsIEknbSBoYXBweSB0byByZXNvbHZlIHRoaXMgZmlyc3QsIGp1c3QgbWFraW5nIGEgbm90ZSBz byB0aGF0IHRoZXkgZG9uJ3QgZ2V0IGxvc3QvSSBkb24ndCBmb3JnZXQgYWJvdXQgdGhlbS48bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+ DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkphY2s8bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9y ZGVyLXRvcDpzb2xpZCAjRTFFMUUxIDEuMHB0O3BhZGRpbmc6My4wcHQgMGNtIDBjbSAwY20iPg0K PGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFu IGxhbmc9IkVOLVVTIj5Gcm9tOjwvc3Bhbj48L2I+PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRl ZC1zcGFjZSI+PHNwYW4gbGFuZz0iRU4tVVMiPiZuYnNwOzwvc3Bhbj48L3NwYW4+PHNwYW4gbGFu Zz0iRU4tVVMiPkJyaWFuIFJvc2VuICZsdDs8L3NwYW4+PGEgaHJlZj0ibWFpbHRvOmJyQGJyaWFu cm9zZW4ubmV0Ij48c3BhbiBsYW5nPSJFTi1VUyI+YnJAYnJpYW5yb3Nlbi5uZXQ8L3NwYW4+PC9h PjxzcGFuIGxhbmc9IkVOLVVTIj4mZ3Q7PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFj ZSI+Jm5ic3A7PC9zcGFuPjxicj4NCjxiPlNlbnQ6PC9iPjxzcGFuIGNsYXNzPSJhcHBsZS1jb252 ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj4xOCBBdWd1c3QgMjAyMCAyMjozMTxicj4NCjxiPlRv OjwvYj48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+SmFj ayBSaWNrYXJkICZsdDs8L3NwYW4+PGEgaHJlZj0ibWFpbHRvOkphY2suUmlja2FyZEBtZXRhc3dp dGNoLmNvbSI+PHNwYW4gbGFuZz0iRU4tVVMiPkphY2suUmlja2FyZEBtZXRhc3dpdGNoLmNvbTwv c3Bhbj48L2E+PHNwYW4gbGFuZz0iRU4tVVMiPiZndDs8YnI+DQo8Yj5DYzo8L2I+PHNwYW4gY2xh c3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjwvc3Bhbj48YSBocmVmPSJt YWlsdG86ZHJhZnQtaWV0Zi1zdGlyLXJwaC1lbWVyZ2VuY3ktc2VydmljZXNAaWV0Zi5vcmciPjxz cGFuIGxhbmc9IkVOLVVTIj5kcmFmdC1pZXRmLXN0aXItcnBoLWVtZXJnZW5jeS1zZXJ2aWNlc0Bp ZXRmLm9yZzwvc3Bhbj48L2E+PHNwYW4gbGFuZz0iRU4tVVMiPjs8c3BhbiBjbGFzcz0iYXBwbGUt Y29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PC9zcGFuPjxhIGhyZWY9Im1haWx0bzpzdGly QGlldGYub3JnIj48c3BhbiBsYW5nPSJFTi1VUyI+c3RpckBpZXRmLm9yZzwvc3Bhbj48L2E+PHNw YW4gbGFuZz0iRU4tVVMiPjxicj4NCjxiPlN1YmplY3Q6PC9iPjxzcGFuIGNsYXNzPSJhcHBsZS1j b252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj5SZTogW3N0aXJdIFJldmlldyBvZiBkcmFmdC1p ZXRmLXN0aXItcnBoLWVtZXJnZW5jeS1zZXJ2aWNlczwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2 Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0K PGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5MZXTigJlzIGtlZXAgdGhlIHR3byB1 c2UgY2FzZXMgc2VwYXJhdGU6PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5i c3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+ DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PkVTb3JpZyBpcyBhbiBlbWVyZ2VuY3kgY2FsbCAodXNlciB0byBhdXRob3JpdHkpLjxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8 ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+RVNjYWxsYmFj ayBpcyBhIGNhbGwgZnJvbSBhdXRob3JpdHkgdG8gdXNlci48bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8 ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRp dj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Rm9yIEVTb3JnLCB0aGUgY2Fs bCBpcyBtYXJrZWQgd2l0aCBhIFJlcXVlc3QtVVJJIG9mIHVybjpzZXJ2aWNlOnNvcy4gJm5ic3A7 VGhlIOKAnFRv4oCdIGZpZWxkIGlzIGlnbm9yZWQgaW4gcm91dGluZyBhbmQgaGFuZGxpbmcgdGhl IGNhbGwuICZuYnNwO1RoYXTigJlzIGhvdyB5b3Uga25vdyB0aGlzIGlzIGFuIGVtZXJnZW5jeSBj YWxsLiAmbmJzcDsgRm9yIHN0aXIgcHVycG9zZXMsIHRoZSBGcm9tIGlzIGFuIG9yZGluYXJ5IGlk ZW50aWZpZXIsIGFuZA0KIGdldHMgdHJlYXRlZCBpbiB0aGUgbm9ybWFsIHdheS4gJm5ic3A7SG93 ZXZlciwgdGhlIHJwaCB2YWx1ZSBjYW4gb25seSBiZSB1c2VkIGJ5IGEgdmFsaWQgZW1lcmdlbmN5 IGNhbGwsIGFuZCBhIHZhbGlkIGVtZXJnZW5jeSBjYWxsIGlzIGEgUmVxdWVzdCBVUkkgb2YgdXJu OnNlcnZpY2U6c29zLCBhbmQgYSB2YWxpZCBGcm9tLiAmbmJzcDtTbyB5b3UgZG9u4oCZdCBoYXZl IGFueSBrbm93bGVkZ2Ugb2YgZW1lcmdlbmN5IHNlcnZpY2VzIGlkZW50aWZpZXJzLCBvbmx5IHRo ZQ0KIFJlcXVlc3QgVVJJIG9mIHVybjpzZXJ2aWNlOnNvcy4gJm5ic3A7Jm5ic3A7PG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxk aXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2 Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkZvciBF U2NhbGxiYWNrLCB0aGUgbWFya2luZyBpcyBhIGRpc3Rpbmd1aXNoZWQgdmFsdWUgaW4gU0lQIFBy aW9yaXR5LiAmbmJzcDtJZiBhIGNhbGwgaGFzIHRoYXQgdmFsdWUsIGl04oCZcyBhIGNhbGwgYmFj ay4gJm5ic3A7VGhlIG9yaWdpbmF0aW5nIHNlcnZpY2UgcHJvdmlkZXIga25vd3Mgd2hvIGFyZSB0 aGUgYXV0aG9yaXRpZXMgd2hvIGFyZSBhbGxvd2VkIHRvIHBsYWNlIGNhbGwgYmFja3MsIHNvIHRo ZSBjaGVjayBpcyB3aGF0DQogaXMgaW4gU0lQIFByaW9yaXR5LCBhbmQgb25lIG9mIHRoZSBhbGxv d2VkIGF1dGhvcml0aWVzIGluIEZyb20uICZuYnNwO0FzIGEgcHJhY3RpY2FsIG1hdHRlciwgaW4g bW9zdCBjYXNlcywgdGhlIGNhbGwgd2lsbCBiZSBzaWduZWQgYnkgdGhlIGVtZXJnZW5jeSBhdXRo b3JpdGllcyB0aGVtc2VsdmVzLCB3aG8gd2lsbCBiZSBhYmxlIHRvIGdldCBhcHByb3ByaWF0ZSBj cmVkZW50aWFscyBmb3IgdGhpcyBwdXJwb3NlLiAmbmJzcDtJbiBtb3N0IGNhc2VzIEnigJltIGF3 YXJlDQogb2YsIHRoZSBUbyBpbiBhbiBlbWVyZ2VuY3kgY2FsbCB3b27igJl0IG1hdGNoIHRoZSBG cm9tIGluIGEgQ2FsbGJhY2ssIGJ1dCBpdOKAmXMgcG9zc2libGUgZm9yIHRoYXQgdG8gaGFwcGVu LCBhbmQgd2Ugd2FudCB0byBhbGxvdyBpdC48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+ DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+RXNuZXQgaXMgYSBSZXNvdXJjZSBQcmlvcml0 eSBIZWFkZXIgbmFtZXNwYWNlLCBub3QgYSBTSVAgUHJpb3JpdHkgdmFsdWUuICZuYnNwO1dl4oCZ cmUgYWxsb3dpbmcgZW1lcmdlbmN5IGNhbGxzIGFuZCBjYWxsIGJhY2tzIHRvIHVzZSBycGgsIGFu ZCB3ZeKAmXJlIHByb3RlY3RpbmcgYWdhaW5zdCBtYWxpY2lvdXMgdXNlIG9mIGl0LiAmbmJzcDtT byB1bmxlc3MgdGhlIGNhbGwgaGFzIHVybjpzZXJ2aWNlOnNvcyBpbiBSZXF1ZXN0IFVSSSwNCiBv ciB0aGUgcmlnaHQgU0lQIFByaW9yaXR5IGluIGEgY2FsbCBiYWNrIChhbmQgZnJvbSBhbiBhdXRo b3JpemVkIGF1dGhvcml0eSkgdGhleSBjYW7igJl0IHVzZSBycGggd2l0aCB0aGUgZXNuZXQgbmFt ZXNwYWNlLiAmbmJzcDtHZW5lcmFsbHksIHVubGVzcyB1bmRlciBhdHRhY2ssIGVtZXJnZW5jeSBj YWxscyBnbyB0aHJvdWdoIGV2ZW4gaWYgdGhlcmUgaXNu4oCZdCBhIHBhc3Nwb3J0LiAmbmJzcDtN YW55IG5ldHdvcmtzIHdvbuKAmXQgb2ZmZXIgYWN0dWFsIHByaW9yaXR5DQogdG8gZW1lcmdlbmN5 IGNhbGxzLCBidXQgdGhlIGVtZXJnZW5jeSBzZXJ2aWNlcyBuZXR3b3JrcyAoRVNJbmV0cykgd2ls bC4gJm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4N CjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwv ZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPklmIGEgY2FsbCBhcnJpdmVzIGFueXdoZXJlIHdpdGggYW4gcnBoIHVzaW5n IGVzbmV0LCBhbmQgaXNu4oCZdCBhbiBlbWVyZ2VuY3kgY2FsbCwgd2l0aCB0aGUgYXBwcm9wcmlh dGUgcGFzc3BvcnQsICZuYnNwO2FueSBpbnRlcm1lZGlhcnkgY2FuIHJlZnVzZSB0byBnaXZlIGl0 IGFueSBwcmlvcml0eSwgJm5ic3A7VGhlIGVtZXJnZW5jeSBhdXRob3JpdGllcyBtYXkgYWNjZXB0 IGEgY2FsbCB3aXRob3V0IGEgdmFsaWQgcGFzc3BvcnQsDQogYnV0IHRoZXkgbWlnaHQgdHJlYXQg aXQgd2l0aCBtdWNoIG1vcmUgc3VzcGljaW9uIHRoYW4gdGhleSB3b3VsZCBhbnkgb3RoZXIgY2Fs bC48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+ DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8 L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+Rm9yIGNhbGwgYmFja3MsIHRoZSBuZXR3b3JrIG1heSBoYXZlIHNwZWNpYWwgYmVoYXZp b3IuICZuYnNwO0ZvciBleGFtcGxlLCBpdCBtYXkgc2VuZCB0aGUgY2FsbCB0byB0aGUgZGV2aWNl IHRoYXQgcGxhY2VkIHRoZSBlbWVyZ2VuY3kgY2FsbCwgcmF0aGVyIHRoYW4sIGZvciBleGFtcGxl LCB2b2ljZSBtYWlsLiAmbmJzcDtUaGUgbmV0d29yayBoYXMgdG8gYmUgYWJsZSB0byB0cnVzdCB0 aGF0IFNJUCBQcmlvcml0eSBpcyBzZXQNCiBhcHByb3ByaWF0ZWx5LiAmbmJzcDtJdCB3aWxsIGFs c28gaGF2ZSBycGggdXNpbmcgZXNuZXQsIGFuZCB0aGUgbmV0d29yayBjYW4gZ3JhbnQgaXQgYXBw cm9wcmlhdGUgcHJpb3JpdHkgaWYgaXQgaGFzIHRoYXQgY2FwYWJpbGl0eSwgYW5kIHdvdWxkIG5v dCBhbGxvdyBlc25ldCBvdGhlcndpc2UuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0K PC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9k aXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlRoZSBvbmx5IHZhbHVlIGluIGNvdmVyaW5nIG90 aGVyIHVzZXMgb2YgU0lQIFByaW9yaXR5IGlzIHRvIHByb3RlY3QgYWdhaW5zdCBtaWRkbGUgYm94 ZXMgbW9kaWZ5aW5nIGl0LiAmbmJzcDtXZSBkb27igJl0IHJlYWxseSBoYXZlIHVzZSBjYXNlcyBm b3IgdGhhdC4gJm5ic3A7SXQgcHJvYmFibHkgd291bGRu4oCZdCBodXJ0IHRvIGFsbG93IGl0IHRo b3VnaC48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9k aXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+ DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+RG9lcyB0aGF0IGhlbHA/PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0K PC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9k aXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkJyaWFuPG86cD48L286cD48L3A+DQo8L2Rpdj4N CjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48YnI+DQo8YnI+DQo8YnI+DQo8YnI+DQo8YnI+ DQo8YnI+DQo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0K PGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+ DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi Pk9uIEF1ZyAxNCwgMjAyMCwgYXQgMToyMSBQTSwgSmFjayBSaWNrYXJkICZsdDs8YSBocmVmPSJt YWlsdG86SmFjay5SaWNrYXJkPTQwbWV0YXN3aXRjaC5jb21AZG1hcmMuaWV0Zi5vcmciPkphY2su Umlja2FyZD00MG1ldGFzd2l0Y2guY29tQGRtYXJjLmlldGYub3JnPC9hPiZndDsgd3JvdGU6PG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRp dj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4N CjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5JIGhhdmUg cmV2aWV3ZWQgZHJhZnQtaWV0Zi1zdGlyLXJwaC1lbWVyZ2VuY3ktc2VydmljZXMtMDIgYW5kIGhh dmUgc29tZSBjb25jZXJucyBhbmQgcXVlc3Rpb25zLiBJIGRvbid0IGJlbGlldmUgdGhpcyBzcGVj IGlzIGltcGxlbWVudGFibGUgaW4gaXRzIGN1cnJlbnQgZm9ybS48bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+ DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0K PGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+VGhhbmtzLDxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8 ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SmFjazxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+ DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7 PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0K PGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 Yj5XaHkgYXJlICZxdW90O0VTb3JpZyZxdW90OyBhbmQgJnF1b3Q7RVNjYWxsYmFjayZxdW90OyBk aXN0aW5jdD88L2I+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rp dj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj5UaGV5IHNlZW0gdG8gc2VydmUgYSB2ZXJ5IHNpbWlsYXIgcHVycG9zZSB3aXRo IHRoZSBvbmx5IGRpZmZlcmVuY2UgYmVpbmcgd2hldGhlciBvcmlnIG9yIGRlc3Qgc2hvdWxkIGJl IHRoZSBlbWVyZ2VuY3kgc2VydmljZXMuIEkgZG9uJ3QgYmVsaWV2ZSB0aGVyZSdzIGFueSBjaGVj ayB0aGF0IGNhbiBiZSBkb25lIHRvIHZhbGlkYXRlOjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyBXaGVu IHVzaW5nICZxdW90O0VTb3JpZyZxdW90OyBhcyB0aGUgJnF1b3Q7cnBoJnF1b3Q7IGFzc2VydGlv biB2YWx1ZSwgdGhlICZxdW90O29yaWcmcXVvdDsgY2xhaW0gb2Y8L3NwYW4+PG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+ DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5i c3A7Jm5ic3A7IHRoZSBQQVNTcG9yVCBNVVNUIHJlcHJlc2VudCB0aGUgY2FsbGluZyBwYXJ0eSBu dW1iZXIgdGhhdCBpbml0aWF0ZXM8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2 Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtm b250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7IHRoZSBjYWxs IHRvIGVtZXJnZW5jeSBzZXJ2aWNlcy48L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwv ZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5UaGlzIChhbmQgdGhlIGVxdWl2YWxlbnQgc3Rh dGVtZW50IGZvciBFU2NhbGxiYWNrKSBkb24ndCBzZWVtIHBvc3NpYmxlIHRvIG1lIHRvIGNoZWNr IChiYXJyaW5nIHRoZSBzdGFuZGFyZCBvcmlnL2Rlc3QgY2hlY2tpbmcpLi48bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4N CjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlRoaXMgd291bGQgbWFr ZSB0aGUgY2hlY2sgJnF1b3Q7YXQgbGVhc3Qgb25lIG9mIHRoZSBwYXJ0aWVzIHNob3VsZCBiZSB0 aGUgZW1lcmdlbmN5IHNlcnZpY2VzJnF1b3Q7IGVub3VnaCB0byB2YWxpZGF0ZSB0aGF0IHRoaXMg d2FzIGEgcmVhc29uYWJsZSBjYWxsLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwv ZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2 Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPldoeSBoYXZlIHRoZW0gYXQgYWxsIHJh dGhlciB0aGFuIGp1c3QgdXNpbmcgYXV0aD88L2I+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwv ZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5UaGlzIGlzIHZlcnkgcG9zc2libHkgYW4gaXNz dWUgd2l0aCBteSB1bmRlcnN0YW5kaW5nLCBidXQgSSdtIG5vdCBjbGVhciBvbiB3aHkgJnF1b3Q7 RVNvcmlnJnF1b3Q7IGFuZCAmcXVvdDtFU2NhbGxiYWNrJnF1b3Q7IGV2ZW4gbmVlZCB0byBleGlz dC4gJnF1b3Q7ZXNuZXQuMCZxdW90OyBldGMuIGFyZSBTSVAgUmVzb3VyY2UgUHJpb3JpdHkgaGVh ZGVycywgc28gc2hvdWxkIGJlIGluY2x1ZGVkIGluIHRoZSAmcXVvdDthdXRoJnF1b3Q7IGZpZWxk IGFueXdheSBieSB0aGUgUlBIIHNwZWMuDQogVGhpcyBzcGVjIGFwcGVhcnMgdG8gYXBwbHkgZXh0 cmEgY29uc3RyYWludHMgKHRoYXQgYSBvbmUgb2YgdGhlIGNhbGxlcnMgbXVzdCBiZSB0aGUgZW1l cmdlbmN5IHNlcnZpY2VzKSBmb3IgdGhlICZxdW90O2VzbmV0JnF1b3Q7IG5hbWVzcGFjZSBidXQg aXQncyBub3QgY2xlYXIgd2h5IGVudGlyZWx5IHNlcGFyYXRlIGNsYWltcyBhcmUgbmVlZGVkLjxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxk aXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5i c3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2 Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij5JbiBhIHNpbWlsYXIgdmVpbiwgd2hhdCBzaG91bGQgYSB2ZXJpZmllciBkbyBpZiBpdCByZWNl aXZlcyBhIGNhbGwgY29udGFpbmluZyBhbiBpbnZhbGlkICZxdW90O0VTb3JpZyZxdW90OyBvciAm cXVvdDtFU2NhbGxiYWNrJnF1b3Q7IHZhbHVlIG9yIHRoZSBwYXNzcG9ydCBpcyBpbnZhbGlkL3Vu dHJ1c3RlZCwgSSdtIGFzc3VtaW5nIHRoZSBiZWhhdmlvdXIgaXMgdGhlIHNhbWUgYXMgZm9yIGF1 dGggYnV0IHRoaXMgaXNuJ3QgY2xlYXIuIEFsdGhvdWdoDQogc3RyaXBwaW5nIHRoZSBmYWN0IHRo YXQgdGhpcyBpcyBhbiBlbWVyZ2VuY3kgY2FsbCBpcyBwb3RlbnRpYWxseSBkYW5nZXJvdXMuLjxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxk aXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5i c3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2 Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0K PC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxiPlNwZWNpZnkgdGhlIHR5cGUgb2YgdGhlICZxdW90O0VTb3JpZyZxdW90OyBhbmQg JnF1b3Q7RVNjYWxsYmFjayZxdW90OyBjbGFpbXMuPC9iPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxk aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+VGhpcyBzcGVjaWZpY2F0aW9uIGN1cnJl bnRseSBkb2Vzbid0IHNwZWNpZnkgdGhlIHR5cGUgb2YgdGhlIG5ldyBmaWVsZHMsIHRoZXJlIGFy ZSBvbmx5IGV4YW1wbGVzIGFuZCB0aGlzIGlzbid0IGVub3VnaC4gSXQgbG9va3MgbGlrZSB0aGV5 IGJvdGggZm9sbG93IHRoZSBzYW1lIHNjaGVtZSBhcyB0aGUgcnBoICZxdW90O2F1dGgmcXVvdDsg Y2xhaW0sIGhvd2V2ZXIgJnF1b3Q7ZXNuZXQseCZxdW90OyBkb2Vzbid0IHF1aXRlIGZpdCBpbnRv IHRoYXQNCiBkdWUgdG8gdGhlIGNvbW1hIGFuZCB0aGF0IHggaXNuJ3QgYSB2YWxpZCBwcmlvcml0 eSB2YWx1ZS48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0K PC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9k aXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+ DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48Yj5XaHkgaXMgc3BoIGxpbWl0ZWQgdG8gcHNhcC1jYWxsYmFjaz8g V2hhdCBzaG91bGQgdGhlIHZlcmlmaWVyIGRvIGlmIGl0IGlzbid0IHRoYXQ/IFdoYXQgc2hvdWxk IGl0IGRvIGlmIGl0IGlzPzwvYj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rp dj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPkknbSBub3QgZW50aXJlbHkgY2xlYXIgb24gdGhlIHB1cnBvc2Ug b2YgdGhlIHNwaCBjbGFpbSwgaG93ZXZlciwgaXQgc2VlbXMgb2RkIHRoYXQgaXQgZG9lc24ndCBj b3ZlciB0aGUgZnVsbCByYW5nZSBvZiBwb3NzaWJsZSB2YWx1ZXMgZm9yIHRoZSBTSVAgUHJpb3Jp dHkgSGVhZGVyLiBJcyB0aGVyZSBhIHJlYXNvbiB0aGF0IGl0IGRvZXNuJ3QgY292ZXIgdGhlICZx dW90O25vbi11cmdlbnQmcXVvdDssICZxdW90O25vcm1hbCZxdW90OywgJnF1b3Q7dXJnZW50JnF1 b3Q7LA0KIG9yICZxdW90O2VtZXJnZW5jeSZxdW90OyB2YWx1ZXM/PG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2 Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5UaGVyZSBpcyBhbHNvIG5vIHZl cmlmaWVyIGJlaGF2aW91ciBkZWZpbmVkIGhlcmUsIHNob3VsZCB0aGUgdmVyaWZpZXIgcmVtb3Zl IHRoZSBQcmlvcml0eSBoZWFkZXIgaWYgaXQgcmVjZWl2ZXMgYW4gaW52aXRlIHdpdGggbm8gcGFz c3BvcnRzIHNpZ25pbmcgZm9yIGl0PyBUaGF0IHNlZW1zIGRhbmdlcm91cyB0byBtZSBidXQgd291 bGQgYmUgY29uc2lzdGVudCB3aXRoIHJwaC4gQWx0ZXJuYXRpdmVseSwgd2hhdA0KIHNob3VsZCB0 aGUgdmVyaWZpZXIgZG8gaWYgaXQgcmVjZWl2ZXMgYW4gaW52aXRlIHdpdGggYSB2YWxpZCBwYXNz cG9ydCBjbGFpbWluZyBzcGggYnV0IHdpdGggbm8gUHJpb3JpdHkgaGVhZGVyIHNob3VsZCBpdCBh ZGQgaXQgaW4/IEknbSBub3Qgc3VyZSB0aGUgc3BlYyBuZWVkcyB0byBiZSB0b28gcHJlc2NyaXB0 aXZlIGhlcmUsIGhvd2V2ZXIgc29tZSBtZW50aW9uIG9mIHZlcmlmaWVyIGJlaGF2aW91ciBhbmQg dGhlIGFzc29jaWF0ZWQgc2VjdXJpdHkNCiBjb25zaWRlcmF0aW9ucyB3b3VsZCBiZSB1c2VmdWwu PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0K PGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 Yj48YnI+DQo8L2I+PGJyPg0KPGI+U2hvdWxkIHRoZSBzcGVjIGJlIHN0cm9uZ2VyIGFib3V0IHRo ZSBjb21wYWN0IGZvcm0/PC9iPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2 Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+U2VjdGlvbiAzIGN1cnJlbnRseSBzdGF0ZXM8bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8cHJlPiZuYnNwOyZu YnNwOyBUaGUgdXNlIG9mIHRoZSBjb21wYWN0IGZvcm0gb2YgUEFTU3BvclQgaXMgbm90IHNwZWNp ZmllZCBpbiB0aGlzPG86cD48L286cD48L3ByZT4NCjxwcmU+Jm5ic3A7Jm5ic3A7IGRvY3VtZW50 LjxvOnA+PC9vOnA+PC9wcmU+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPkhvd2V2ZXIsIGEgY29tcGFjdC1mb3JtIHBhc3Nwb3J0IGZvbGxv d2luZyB0aGlzIHNwZWMgd291bGQgYmUgaGFyZCB0byB2ZXJpZnkgYXMgaXQgaW50cm9kdWNlcyBt dWx0aXBsZSBwb3NzaWJsZSBycGggdmFyaWFudHMsIEkgdGhpbmsgdGhpcyBzcGVjIGNvdWxkIGdv IGZ1cnRoZXIgYW5kIHNheSB5b3Ugc2hvdWxkbid0L211c3RuJ3QuPG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2 Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48YnI+DQo8YnI+DQpXaGF0 IGlzIHRoZSByZXF1aXJlbWVudCBvZiB0aGVzZSBuZXcgcGFyYW1ldGVycy48L2I+PG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxk aXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5BcyBJIHVuZGVy c3RhbmQgaXQsIHRoZSBwYXNzcG9ydCBzcGVjIGFsbG93cyB5b3UgdG8gY3JlYXRlIGEgcGFzc3Bv cnQgY29udGFpbmluZyB3aGF0ZXZlciBKV1QgZmllbGRzIHlvdSB3YW50IGFuZCB2ZXJpZmllcnMg c2hvdWxkIGp1c3QgaWdub3JlIGFueSBmaWVsZHMgdGhleSBkb24ndCB1bmRlcnN0YW5kLiBVbmxl c3MgdGhlICZxdW90O3BwdCZxdW90OyBjbGFpbSBpcyBzZXQsIHdoaWNoIGluZGljYXRlcyB0aGF0 IHZlcmlmaWVycw0KIHNob3VsZCBkaXNjYXJkIGl0IGlmIHRoZXkgZG9uJ3QgcmVjb2duaXNlIHRo YXQgcGFzc3BvcnQgdHlwZS4gQXMgdGhpcyBzcGVjIGFkZHMgYWRkaXRpb25hbCBmaWVsZHMgdG8g YW4gZXhpc3RpbmcgcGFzc3BvcnQgdHlwZSBpdCBpc24ndCBpbW1lZGlhdGVseSBjbGVhciB3aGF0 IHRoZSBiZWhhdmlvdXIgc2hvdWxkIGJlLiBTcGVjaWZpY2FsbHksIGlzIGFuIHJwaCBwYXNzcG9y dCBjb250YWluaW5nIG9ubHkgJnF1b3Q7cnBoLkVTb3JpZyZxdW90OyB2YWxpZCBub3cNCiAod2hl cmUgaXQgd291bGRuJ3QgYmUgYmVmb3JlIGJlY2F1c2UgYXV0aCBpc24ndCBwcmVzZW50KSwgaXMg YW4gcnBoIHBhc3Nwb3J0IGNvbnRhaW5pbmcgbm8gcnBoIGFuZCBvbmx5IHNwaCB2YWxpZCwgYW5k IHdoYXQgZG9lcyBhIG5vbi1ycGggcGFzc3BvcnQgd2l0aCBzcGggb3IgRVNvcmlnIHNldCBtZWFu PzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4N CjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PGI+Jm5ic3A7PC9iPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9k aXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZl dGljYSZxdW90OyxzYW5zLXNlcmlmIj5fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fXzxicj4NCnN0aXIgbWFpbGluZyBsaXN0PGJyPg0KPC9zcGFuPjxhIGhyZWY9 Im1haWx0bzpzdGlyQGlldGYub3JnIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlmIj5zdGlyQGlldGYub3JnPC9z cGFuPjwvYT48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hl bHZldGljYSZxdW90OyxzYW5zLXNlcmlmIj48YnI+DQo8L3NwYW4+PGEgaHJlZj0iaHR0cHM6Ly9u YW0xMC5zYWZlbGlua3MucHJvdGVjdGlvbi5vdXRsb29rLmNvbS8/dXJsPWh0dHBzJTNBJTJGJTJG d3d3LmlldGYub3JnJTJGbWFpbG1hbiUyRmxpc3RpbmZvJTJGc3RpciZhbXA7ZGF0YT0wMiU3QzAx JTdDSmFjay5SaWNrYXJkJTQwbWV0YXN3aXRjaC5jb20lN0NiNTE1Y2UxODU1NTY0ZTFiZjhiZjA4 ZDg2YzVlMmNkOSU3QzlkOWU1NmViZjYxMzRkZGJiMjdiYmZjZGYxNGIyY2RiJTdDMSU3QzAlN0M2 MzczNzg0OTkwMzMwODkzMDUmYW1wO3NkYXRhPU9jb0ZmUXNBMHp0d1hHVWd3eDRSd3pYbEJoZGU2 MmJ0Z2xsNEhsOHltT0ElM0QmYW1wO3Jlc2VydmVkPTAiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPmh0dHBz Oi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vc3Rpcjwvc3Bhbj48L2E+PG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1 b3RlPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rp dj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPC9kaXY+ DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjwvZGl2Pg0K PC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2JvZHk+ DQo8L2h0bWw+DQo= --_000_BYAPR02MB5189874A25C4013D1F9DCA08F3190BYAPR02MB5189namp_-- From nobody Fri Oct 30 06:52:39 2020 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 957A03A0EB8 for ; Fri, 30 Oct 2020 06:52:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.795 X-Spam-Level: X-Spam-Status: No, score=-1.795 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_FONT_LOW_CONTRAST=0.001, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=chriswendt-net.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YKZyYVG7vh4r for ; Fri, 30 Oct 2020 06:52:35 -0700 (PDT) Received: from mail-qt1-x82b.google.com (mail-qt1-x82b.google.com [IPv6:2607:f8b0:4864:20::82b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E2A3F3A0EB6 for ; Fri, 30 Oct 2020 06:52:34 -0700 (PDT) Received: by mail-qt1-x82b.google.com with SMTP id j62so4125586qtd.0 for ; Fri, 30 Oct 2020 06:52:34 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=chriswendt-net.20150623.gappssmtp.com; s=20150623; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=jDl9np4veJ40t0TG/afP4xofzgziyJ3NyPppc95UHQk=; b=Bsp8R7RCO99/4fnsalY31oeXTtOVHY7mXFA9S8NEBVywwoKiZ/wNRFtuSXOrrPmIMx Xw+rgS3mYM/EvXauQ++BasfmRIS7hzmUDxH1y9YNY314OPD+5L5ziTgGwb4ou5x/CMgA C6NZJjnx+TdvCl8lm6xtiY7U/8C84i2Fkudh1yl3W2c2ldkwKFJI9ontNQJ/g5qZ9Dfz 7vQAUmzuNyKQ/dg8yz9+FY28BrD4HYq+jmzkMTlQnXDzkV2DE+oYgLpbpFtTtyTulXWy MNaxwdgYds2PphFQsKhgSr7elgYt/+CcboSEVefKf4RFlok0OISYeqQF9+ox+vgsvNyD sMsA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=jDl9np4veJ40t0TG/afP4xofzgziyJ3NyPppc95UHQk=; b=s7VwUwGnXpztGoiOsxCHGDNbBhknAzRak26z1C1aMWOC6fH28Rl0RVqnzTzjncvb/6 bIMna7sLT+LvftbVSPgnKNL2LcaYpmT6PblgzD6fPgzi3H4O3nBJ9VLcIcPHqzFGYCh5 4Ehiz/6nLlxEYmAOpXdo2nTgrjJeGU9Cx/nnZEIyi8o3qsed2sEz5xvvtL3BHCepkTZ6 RNRaV0XOsmLsxR8g+CLdFO0Fadef0ihVxbaPJ/jT6jPrDwrKCRfSF7jlVkTyuQQQpydK xAnm/vSddoGYO6LrpIFHkgQYjWpgOeGNOx4vqrtY9r9nYNbU6ESH/8DbxkZvnMtVHo0Q 3SXw== X-Gm-Message-State: AOAM532MTh3nbkfAWGhlf84MK1HXBDC55+gxH5Zz8vxUxx0mCcpUMD5F 301pagHhLkZfTpXqIYdar6ugNg== X-Google-Smtp-Source: ABdhPJyAm3MqUo6N9THynNvOCpgCZsLAk3GWhTSWY4gViy4zypkFytUyC30vv30RXOJzyKhUEiLu1Q== X-Received: by 2002:ac8:4d92:: with SMTP id a18mr2292280qtw.338.1604065953728; Fri, 30 Oct 2020 06:52:33 -0700 (PDT) Received: from [192.168.0.136] (c-68-82-121-87.hsd1.pa.comcast.net. [68.82.121.87]) by smtp.gmail.com with ESMTPSA id v204sm2646882qka.4.2020.10.30.06.52.32 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Fri, 30 Oct 2020 06:52:32 -0700 (PDT) From: Chris Wendt Message-Id: <9DAA5196-AA7F-4AD7-964C-CAE1FB073A89@chriswendt.net> Content-Type: multipart/alternative; boundary="Apple-Mail=_A6982ADE-1780-4CB5-83CC-DBA3F16C3638" Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.120.23.2.4\)) Date: Fri, 30 Oct 2020 09:52:31 -0400 In-Reply-To: Cc: Brian Rosen , "draft-ietf-stir-rph-emergency-services@ietf.org" , "stir@ietf.org" To: Jack Rickard References: <959DCC43-1686-49D3-9195-719CF65C9EE9@brianrosen.net> <14ACD074-FD66-4161-AC7A-ADB07127BE2D@chriswendt.net> <0D26A9F6-5559-4273-ACBA-9501E958DF22@chriswendt.net> <7E2BC364-2CCF-43EE-BFAF-9B9A29A2BE11@chriswendt.net> X-Mailer: Apple Mail (2.3608.120.23.2.4) Archived-At: Subject: Re: [stir] Review of draft-ietf-stir-rph-emergency-services X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 30 Oct 2020 13:52:39 -0000 --Apple-Mail=_A6982ADE-1780-4CB5-83CC-DBA3F16C3638 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Hi Jack, Thanks for the further comments. I fixed the examples. For 1. I agree i could have been clearer about the intention so i=E2=80=99= ll make sure the usage is clear, but yes =E2=80=99sph=E2=80=99 is = optional and should or should not be included depending on scenario. = The intention was not necessarily to include or be a stand alone = =E2=80=99sph=E2=80=99. We are only targeting potential emergency = services scenarios with a resource priority header or resource priority = + priority header. There is no scenario that we are looking to protect = priority alone. For 2. i will also try to clarify usage, but the simple answer is that = relative to emergency services, it=E2=80=99s really only about = =E2=80=9Cpsap-callback=E2=80=9D. Not that the door might not be open in = the future for other specifications to add other values. Hoping to send an update soon. -Chris > On Oct 26, 2020, at 8:13 AM, Jack Rickard = wrote: >=20 > Thank you, this addresses the vast majority of my concerns and feels = much simpler. I'd like a couple of minor clarifications around the "sph" = claim but overall I'm much happier with this document. > =20 > Clarifications: > At the start of the second paragraph of section 4 it states: > > We define a new claim key as part of the "rph" PASSporT, "sph" > It's not entirely clear what this means, I'm assuming this "sph" claim = is optional (otherwise there would be interoperability issues), but if = so how is it tied to the "rph" passport extension? The stated meaning of = a passport extension is: > > If it is necessary for an extension to PASSporT to require that a = relying party support a particular extended claim or set of claims in = the PASSporT object, it can do so by specifying a "ppt" element for the = PASSporT JOSE Header. > It's not clear if an "sph" claim can be included in a non-rph = passport, I believe this is sensible as an OSP with authority over both = the TN and SPH could put both in one passport. However, I think there's = some complexity around which certificates have authority over TNs and = SPH, so outright banning it seems sensible but I think it should be = explicit. > At the start of the third paragraph of section 4 it states: > > The value of the "sph" claim key should only be "psap-callback" to = match the SIP Priority header field value for authorized emergency = services callbacks. > It's not clear what the behaviour of the verification service should = be if this claim is not present or has a value other than = "psap-callback" (or in fact what the behaviour should be if it is = present). I think behaviour similar to the "auth" claim is reasonable = but I don't have much experience in this area. >=20 > =20 > Nit: > All of the examples in the document look like this: > { > "orig":{"tn":"12155551212"}, > "dest":{["uri":"urn:service:sos"]}, > "iat":1443208345, > "rph":{"auth":["esnet.1"]} > } > But I believe the dest field should look like this: > { > "orig":{"tn":"12155551212"}, > "dest":{"uri":["urn:service:sos"]}, > "iat":1443208345, > "rph":{"auth":["esnet.1"]} > } > (and similarly for all the other examples) > =20 > Thanks, > Jack > =20 > From: Chris Wendt >=20 > Sent: 09 October 2020 15:18 > To: Jack Rickard > > Cc: Brian Rosen >; = draft-ietf-stir-rph-emergency-services@ietf.org = ; stir@ietf.org = > Subject: Re: [stir] Review of draft-ietf-stir-rph-emergency-services > =20 > NOTE: Message is from an external sender > So, we had discussions with the experts on =E2=80=98rph=E2=80=99 and = emergency services and agreed to do a 03 rev of this draft that does = indeed modify the procedures to remove the ESOrig/ESCallback and = incorporate the esnet.x value into the =E2=80=9Cauth=E2=80=9D object = array. Hopefully this addresses the concerns and makes things a bit = simpler. Thanks for the input. > =20 > Please, to everyone, review and provide comments. > =20 > Thanks. > =20 > -Chris >=20 >=20 > On Sep 3, 2020, at 9:28 AM, Jack Rickard > wrote: > =20 > I agree with what you have said there, however Section 4.2 of 8443 = also states that you should strip from the INVITE any = 'Resource-Priority' header that isn't validated by the passports, which = in this case would be the "esnet.x" header. This doesn't seem like a = good behaviour to me, which is why I think "esnet" should go in the = "auth" claim (as an signing service that didn't implement this would do = anyway), at which point I don't see what utility the "ES*" claims = provide. > =20 > Thanks, > Jack > =20 > From: Chris Wendt >=20 > Sent: 02 September 2020 21:00 > To: Jack Rickard > > Cc: Brian Rosen >; = draft-ietf-stir-rph-emergency-services@ietf.org = ; stir@ietf.org = > Subject: Re: [stir] Review of draft-ietf-stir-rph-emergency-services > =20 > Not sure why they would break anything. I think the idea is that if = you are doing emergency services you should not include =E2=80=9Cauth=E2=80= =9D key and value. If you implement only 8443 and you only know what to = do with =E2=80=9Cauth=E2=80=9D and =E2=80=9Cauth=E2=80=9D is not = included in the PASSporT you are verifying, you must ignore other key = values you don=E2=80=99t understand. Therefore the validation will fail = and you should not try to provide any type of priority service with that = call. This is approach for all PASSporTs with newly defined claims and = key values in general. =20 > =20 > -Chris >=20 >=20 >=20 > On Sep 2, 2020, at 5:33 AM, Jack Rickard > wrote: > =20 > Hi Chris, > =20 > I'm still unconvinced about the ESorig and EScallback keys, I'm happy = for them to be added as long as they don't break anything. The problem I = see is with an intermediate that implements 8443 but not this spec: if = "esnet.x" isn't in the auth claim the it should remove "esnet.x" from = the 'Resource-Priority' header, which seems like a bad thing to me. Even = with this spec it's not currently clear that you shouldn't do that as = there's nothing overriding that text from 8443 currently. > =20 > As for compact form, I'm perfectly happy with it remaining = unspecified, it just surprised me. > =20 > Thanks, > Jack > =20 > From: Chris Wendt >=20 > Sent: 25 August 2020 16:15 > To: Jack Rickard > > Cc: Brian Rosen >; = draft-ietf-stir-rph-emergency-services@ietf.org = ; stir@ietf.org = > Subject: Re: [stir] Review of draft-ietf-stir-rph-emergency-services > =20 > Hi Jack,=20 > =20 > I think we still want to keep =E2=80=9Cauth=E2=80=9D and = =E2=80=9CESorig/ESCallback=E2=80=9D as separate and distinct key/value = objects, i see your comments as maybe disagreement stylistically but = didn=E2=80=99t see anything to suggest that it wouldn=E2=80=99t work. = The reasoning though is that =E2=80=9Cauth=E2=80=9D is intended to be = specific to priority services only, not extensible for other = applications. And the fact of the matter is key/values are cheap, no = reason we can=E2=80=99t have new values and be explicit about the = intent. This document is specific to 911 and emergency services and to = extend the key/values defined for =E2=80=98rph=E2=80=99 claim and = =E2=80=98rph=E2=80=99 PASSporT extension. > =20 > I will make this clearer in the document and explicitly say that = =E2=80=9Cauth=E2=80=9D should not be used for emergency services = purposes of using resource priority header. > =20 > I think it would also make sense to make it clear that that this = document extends 8443 and linking the documents. > =20 > For compact form, we think it would confuse folks to add provisions = for compact form or allow it for little gain, and therefore prefer to = leave it undefined. > =20 > Thanks. > =20 > -Chris >=20 >=20 >=20 >=20 > On Aug 20, 2020, at 1:30 PM, Jack Rickard > wrote: > =20 > It's not clear that this spec relies on that, and I'm not sure that it = should? To me it seems like this could be more widely applicable. > =20 > Would you be able to address, from a verification service's point of = view, what it should do? I think that will clear up why "Esorig" and = "EScallback" are useful above plain "auth". > I think the spec would benefit from that section as well Section 4 of = RFC 8443 and section 11 of draft-ietf-stir-passport-rcd-06 are both = incredibly useful. > =20 > Thanks, > Jack > =20 > From: Brian Rosen >=20 > Sent: 19 August 2020 14:40 > To: Jack Rickard > > Cc: draft-ietf-stir-rph-emergency-services@ietf.org = ; stir@ietf.org = > Subject: Re: [stir] Review of draft-ietf-stir-rph-emergency-services > =20 > About 20% of the US has now upgraded to NG9-1-1, although most service = providers haven=E2=80=99t yet. The wireless carriers are moving towards = it; testing is underway. =20 > I will have a companion document in sipcore that handles the signaling = aspects of this mechanism. For the older E911 system, none of stir = really helps because the existing system is built on the older Class 4 = switches (=E2=80=9CSelective Routers=E2=80=9D). All of this mechanism = is for NG9-1-1 and the equivalent services in the rest of the world, = based on IETF standards (RFC6881, RFC5222, and several others). =20 >=20 >=20 >=20 >=20 >=20 > On Aug 19, 2020, at 7:19 AM, Jack Rickard > wrote: > =20 > Thanks, that's really useful, however, I'm not convinced. > =20 > For ESorig, as far as I know this isn't currently always the case, I = am aware of situations where emergency calls just look like normal calls = with a number of 911. I'm also still unclear about what affect this has, = as you can currently already sign emergency calls using the standard = mechanisms (barring the whole "urn:service:sos" tn which I don't believe = is standardised for STIR yet?) by putting "esnet.0" in the auth field = of an rph passport. > =20 > For EScallback, if the sph and "rph.auth" claims cover theis entirely = why is EScallback needed? I'm also still unclear what the verification = service behaviour is here. > =20 > I'm still unclear as to how this spec helps with allowing and = preventing malicious use of emergency calls. You can already put esnet = resource priority pairs in the "rph.auth" claim and that seems to = provide as much security as this does. I do agree the sph claim does = provide value, however. > =20 > I did just realise that the esnet Resource Priority needs to be in the = "rph.auth" claim or the logic from that rfc will kick in and remove it, = as per: > RFC 8443, section 4.2 > In such scenarios, the SIP 'Resource-Priority' header field SHOULD = be > stripped from the SIP request, and the network entities should = treat > the call as an ordinary call. > =20 > I'll note that some of my questions and concerns haven't been = addressed yet, I'm happy to resolve this first, just making a note so = that they don't get lost/I don't forget about them. > Jack > =20 > From: Brian Rosen >=20 > Sent: 18 August 2020 22:31 > To: Jack Rickard > > Cc: draft-ietf-stir-rph-emergency-services@ietf.org = ; stir@ietf.org = > Subject: Re: [stir] Review of draft-ietf-stir-rph-emergency-services > =20 > Let=E2=80=99s keep the two use cases separate:=20 > ESorig is an emergency call (user to authority). > EScallback is a call from authority to user. > =20 > For ESorg, the call is marked with a Request-URI of urn:service:sos. = The =E2=80=9CTo=E2=80=9D field is ignored in routing and handling the = call. That=E2=80=99s how you know this is an emergency call. For stir = purposes, the =46rom is an ordinary identifier, and gets treated in the = normal way. However, the rph value can only be used by a valid = emergency call, and a valid emergency call is a Request URI of = urn:service:sos, and a valid From. So you don=E2=80=99t have any = knowledge of emergency services identifiers, only the Request URI of = urn:service:sos. =20 > =20 > For EScallback, the marking is a distinguished value in SIP Priority. = If a call has that value, it=E2=80=99s a call back. The originating = service provider knows who are the authorities who are allowed to place = call backs, so the check is what is in SIP Priority, and one of the = allowed authorities in From. As a practical matter, in most cases, the = call will be signed by the emergency authorities themselves, who will be = able to get appropriate credentials for this purpose. In most cases = I=E2=80=99m aware of, the To in an emergency call won=E2=80=99t match = the =46rom in a Callback, but it=E2=80=99s possible for that to happen, = and we want to allow it. > =20 > Esnet is a Resource Priority Header namespace, not a SIP Priority = value. We=E2=80=99re allowing emergency calls and call backs to use = rph, and we=E2=80=99re protecting against malicious use of it. So = unless the call has urn:service:sos in Request URI, or the right SIP = Priority in a call back (and from an authorized authority) they can=E2=80=99= t use rph with the esnet namespace. Generally, unless under attack, = emergency calls go through even if there isn=E2=80=99t a passport. Many = networks won=E2=80=99t offer actual priority to emergency calls, but the = emergency services networks (ESInets) will. =20 > =20 > If a call arrives anywhere with an rph using esnet, and isn=E2=80=99t = an emergency call, with the appropriate passport, any intermediary can = refuse to give it any priority, The emergency authorities may accept a = call without a valid passport, but they might treat it with much more = suspicion than they would any other call. > =20 > For call backs, the network may have special behavior. For example, = it may send the call to the device that placed the emergency call, = rather than, for example, voice mail. The network has to be able to = trust that SIP Priority is set appropriately. It will also have rph = using esnet, and the network can grant it appropriate priority if it has = that capability, and would not allow esnet otherwise. > =20 > The only value in covering other uses of SIP Priority is to protect = against middle boxes modifying it. We don=E2=80=99t really have use = cases for that. It probably wouldn=E2=80=99t hurt to allow it though. > =20 > Does that help? > =20 > Brian > =20 >=20 >=20 >=20 >=20 >=20 >=20 > On Aug 14, 2020, at 1:21 PM, Jack Rickard = > wrote: > =20 > I have reviewed draft-ietf-stir-rph-emergency-services-02 and have = some concerns and questions. I don't believe this spec is implementable = in its current form. > =20 > Thanks, > Jack > =20 > Why are "ESorig" and "EScallback" distinct? > They seem to serve a very similar purpose with the only difference = being whether orig or dest should be the emergency services. I don't = believe there's any check that can be done to validate: > When using "ESorig" as the "rph" assertion value, the "orig" claim = of > the PASSporT MUST represent the calling party number that initiates > the call to emergency services. > This (and the equivalent statement for EScallback) don't seem possible = to me to check (barring the standard orig/dest checking).. > This would make the check "at least one of the parties should be the = emergency services" enough to validate that this was a reasonable call. > =20 > =20 > Why have them at all rather than just using auth? > This is very possibly an issue with my understanding, but I'm not = clear on why "ESorig" and "EScallback" even need to exist. "esnet.0" = etc. are SIP Resource Priority headers, so should be included in the = "auth" field anyway by the RPH spec. This spec appears to apply extra = constraints (that a one of the callers must be the emergency services) = for the "esnet" namespace but it's not clear why entirely separate = claims are needed. > =20 > In a similar vein, what should a verifier do if it receives a call = containing an invalid "ESorig" or "EScallback" value or the passport is = invalid/untrusted, I'm assuming the behaviour is the same as for auth = but this isn't clear. Although stripping the fact that this is an = emergency call is potentially dangerous.. > =20 > =20 > Specify the type of the "ESorig" and "EScallback" claims. > This specification currently doesn't specify the type of the new = fields, there are only examples and this isn't enough. It looks like = they both follow the same scheme as the rph "auth" claim, however = "esnet,x" doesn't quite fit into that due to the comma and that x isn't = a valid priority value. > =20 > =20 > Why is sph limited to psap-callback? What should the verifier do if it = isn't that? What should it do if it is? > I'm not entirely clear on the purpose of the sph claim, however, it = seems odd that it doesn't cover the full range of possible values for = the SIP Priority Header. Is there a reason that it doesn't cover the = "non-urgent", "normal", "urgent", or "emergency" values? > There is also no verifier behaviour defined here, should the verifier = remove the Priority header if it receives an invite with no passports = signing for it? That seems dangerous to me but would be consistent with = rph. Alternatively, what should the verifier do if it receives an invite = with a valid passport claiming sph but with no Priority header should it = add it in? I'm not sure the spec needs to be too prescriptive here, = however some mention of verifier behaviour and the associated security = considerations would be useful. >=20 >=20 > Should the spec be stronger about the compact form? > Section 3 currently states > The use of the compact form of PASSporT is not specified in this > document. > However, a compact-form passport following this spec would be hard to = verify as it introduces multiple possible rph variants, I think this = spec could go further and say you shouldn't/mustn't. >=20 >=20 > What is the requirement of these new parameters. > As I understand it, the passport spec allows you to create a passport = containing whatever JWT fields you want and verifiers should just ignore = any fields they don't understand. Unless the "ppt" claim is set, which = indicates that verifiers should discard it if they don't recognise that = passport type. As this spec adds additional fields to an existing = passport type it isn't immediately clear what the behaviour should be. = Specifically, is an rph passport containing only "rph.ESorig" valid now = (where it wouldn't be before because auth isn't present), is an rph = passport containing no rph and only sph valid, and what does a non-rph = passport with sph or ESorig set mean? > =20 > _______________________________________________ > stir mailing list > stir@ietf.org > https://www.ietf.org/mailman/listinfo/stir = --Apple-Mail=_A6982ADE-1780-4CB5-83CC-DBA3F16C3638 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Hi = Jack,

Thanks for the = further comments.  I fixed the examples.

For 1. I agree i could have been = clearer about the intention so i=E2=80=99ll make sure the usage is = clear, but yes =E2=80=99sph=E2=80=99 is optional and should or should = not be included depending on scenario.  The intention was not = necessarily to include or be a stand alone =E2=80=99sph=E2=80=99. =  We are only targeting potential emergency services scenarios with = a resource priority header or resource priority + priority header. =  There is no scenario that we are looking to protect priority = alone.

For 2. = i will also try to clarify usage, but the simple answer is that relative = to emergency services, it=E2=80=99s really only about = =E2=80=9Cpsap-callback=E2=80=9D.  Not that the door might not be = open in the future for other specifications to add other = values.

Hoping = to send an update soon.

-Chris

On Oct 26, 2020, at 8:13 AM, = Jack Rickard <Jack.Rickard@metaswitch.com> wrote:

Thank = you, this addresses the vast majority of my concerns and feels much = simpler. I'd like a couple of minor clarifications around the "sph" = claim but overall I'm much happier with this document.
 
Clarifications:
  1. At = the start of the second paragraph of section 4 it states:
    > We define a new claim key as part of the "rph" = PASSporT, "sph"
    It's not entirely clear what this means, = I'm assuming this "sph" claim is optional (otherwise there would be = interoperability issues), but if so how is it tied to the "rph" passport = extension? The stated meaning of a passport extension is:
    > If it is necessary for an extension to PASSporT to = require that a relying party support a particular extended claim or set = of claims in the PASSporT object, it can do so by specifying a "ppt" = element for the PASSporT JOSE Header.
    It's not clear if an = "sph" claim can be included in a non-rph passport, I believe this is = sensible as an OSP with authority over both the TN and SPH could put = both in one passport. However, I think there's some complexity around = which certificates have authority over TNs and SPH, so outright banning = it seems sensible but I think it should be explicit.
  2. At the start of = the third paragraph of section 4 it states:
    > The value = of the "sph" claim key should only be "psap-callback" to match the SIP = Priority header field value for authorized emergency services = callbacks.
    It's not clear what the behaviour of the = verification service should be if this claim is not present or has a = value other than "psap-callback" (or in fact what the behaviour should = be if it is present). I think behaviour similar to the "auth" claim is = reasonable but I don't have much experience in this area.

 
Nit:
All of the examples in the document look like this:
     {
       = "orig":{"tn":"12155551212"},
    =    "dest":{["uri":"urn:service:sos"]},
       "iat":1443208345,
       = "rph":{"auth":["esnet.1"]}
     }
But = I believe the dest field should look like this:
     {
       = "orig":{"tn":"12155551212"},
       = "dest":{"uri":["urn:service:sos"]},
       = "iat":1443208345,
       = "rph":{"auth":["esnet.1"]}
     }
(and = similarly for all the other examples)
 
Thanks,
Jack
 
From: Chris Wendt <chris-ietf@chriswendt.net> 
Sent: 09 = October 2020 15:18
To: Jack Rickard <Jack.Rickard@metaswitch.com>
Cc: Brian= Rosen <br@brianrosen.net>; draft-ietf-stir-rph-emergency-services@ietf.org; stir@ietf.org
Subject: Re: [stir] Review of = draft-ietf-stir-rph-emergency-services
 
NOTE: Message is from an external sender
So, we had discussions with the experts = on =E2=80=98rph=E2=80=99 and emergency services and agreed to do a 03 = rev of this draft that does indeed modify the procedures to remove the = ESOrig/ESCallback and incorporate the esnet.x value into the =E2=80=9Cauth= =E2=80=9D object array.  Hopefully this addresses the concerns and = makes things a bit simpler.  Thanks for the input.
 
Please, to everyone, review and provide comments.
 
Thanks.
 
-Chris


On = Sep 3, 2020, at 9:28 AM, Jack Rickard <Jack.Rickard@metaswitch.com> wrote:
 
I agree with what you have said there, however = Section 4.2 of 8443 also states that you should strip from the INVITE = any 'Resource-Priority' header that isn't validated by the passports, = which in this case would be the "esnet.x" header. This doesn't seem like = a good behaviour to me, which is why I think "esnet" should go in the = "auth" claim (as an signing service that didn't implement this would do = anyway), at which point I don't see what utility the "ES*" claims = provide.
 
Thanks,
Jack
 
From: Chris Wendt <chris-ietf@chriswendt.net> 
Sent: 02 September 2020 21:00
To: Jack Rickard <Jack.Rickard@metaswitch.com>
Cc: Brian Rosen <br@brianrosen.net>; draft-ietf-stir-rph-emergency-services@ietf.org; stir@ietf.org
Subject: Re: [stir] Review of = draft-ietf-stir-rph-emergency-services
 
Not sure why they would = break anything.  I think the idea is that if you are doing = emergency services you should not include =E2=80=9Cauth=E2=80=9D key and = value.  If you implement only 8443 and you only know what to do = with =E2=80=9Cauth=E2=80=9D and =E2=80=9Cauth=E2=80=9D is not included = in the PASSporT you are verifying, you must ignore other key values you = don=E2=80=99t understand. Therefore the validation will fail and you = should not try to provide any type of priority service with that call. =  This is approach for all PASSporTs with newly defined claims and = key values in general.  
 
-Chris



On Sep 2, 2020, at 5:33 AM, Jack Rickard <Jack.Rickard@metaswitch.com> wrote:
 
Hi Chris,
 
I'm still unconvinced = about the ESorig and EScallback keys, I'm happy for them to be added as = long as they don't break anything. The problem I see is with an = intermediate that implements 8443 but not this spec: if "esnet.x" isn't = in the auth claim the it should remove "esnet.x" from the = 'Resource-Priority' header, which seems like a bad thing to me. Even = with this spec it's not currently clear that you shouldn't do that as = there's nothing overriding that text from 8443 currently.
 
As for compact form, I'm = perfectly happy with it remaining unspecified, it just surprised me.
 
Thanks,
Jack
 
From: Chris = Wendt <chris-ietf@chriswendt.net> 
Sent: 25 = August 2020 16:15
To: Jack Rickard <Jack.Rickard@metaswitch.com>
Cc: Brian Rosen <br@brianrosen.net>; draft-ietf-stir-rph-emergency-services@ietf.org; stir@ietf.org
Subject: Re: [stir] Review of = draft-ietf-stir-rph-emergency-services
 
Hi Jack, 
 
I think we still want to = keep =E2=80=9Cauth=E2=80=9D and =E2=80=9CESorig/ESCallback=E2=80=9D as = separate and distinct key/value objects, i see your comments as maybe = disagreement stylistically but didn=E2=80=99t see anything to suggest = that it wouldn=E2=80=99t work.  The reasoning though is that = =E2=80=9Cauth=E2=80=9D is intended to be specific to priority services = only, not extensible for other applications.  And the fact of the = matter is key/values are cheap, no reason we can=E2=80=99t have new = values and be explicit about the intent.  This document is specific = to 911 and emergency services and to extend the key/values defined for = =E2=80=98rph=E2=80=99 claim and =E2=80=98rph=E2=80=99 PASSporT = extension.
 
I will make this clearer = in the document and explicitly say that =E2=80=9Cauth=E2=80=9D should = not be used for emergency services purposes of using resource priority = header.
 
I think it would also make = sense to make it clear that that this document extends 8443 and linking = the documents.
 
For compact form, we think = it would confuse folks to add provisions for compact form or allow it = for little gain, and therefore prefer to leave it undefined.
 
Thanks.
 
-Chris




On Aug 20, 2020, at 1:30 PM, Jack = Rickard <Jack.Rickard@metaswitch.com> wrote:
 
It's not clear that this = spec relies on that, and I'm not sure that it should? To me it seems = like this could be more widely applicable.
 
Would you be able to = address, from a verification service's point of view, what it should do? = I think that will clear up why "Esorig" and "EScallback" are useful = above plain "auth".
I think = the spec would benefit from that section as well Section 4 of RFC 8443 = and section 11 of draft-ietf-stir-passport-rcd-06 are both incredibly = useful.
 
Thanks,
Jack
 
From: Brian Rosen <br@brianrosen.net> 
Sent: 19 August 2020 14:40
To: Jack Rickard <Jack.Rickard@metaswitch.com>
Cc: draft-ietf-stir-rph-emergency-services@ietf.org; stir@ietf.org
Subject: Re: [stir] Review of = draft-ietf-stir-rph-emergency-services
 
About 20% of the US has now upgraded = to NG9-1-1, although most service providers haven=E2=80=99t yet. =  The wireless carriers are moving towards it; testing is underway. =  
I will have a companion document in sipcore that = handles the signaling aspects of this mechanism.  For the older = E911 system, none of stir really helps because the existing system is = built on the older Class 4 switches (=E2=80=9CSelective Routers=E2=80=9D).=  All of this mechanism is for NG9-1-1 and the equivalent services = in the rest of the world, based on IETF standards (RFC6881, RFC5222, and = several others).  





On Aug 19, 2020, at 7:19 = AM, Jack Rickard <Jack.Rickard@metaswitch.com> wrote:
 
Thanks, that's really useful, however, I'm not = convinced.
 
For = ESorig, as far as I know this isn't currently always the case, I am = aware of situations where emergency calls just look like normal calls = with a number of 911. I'm also still unclear about what affect this has, = as you can currently already sign emergency calls using the standard = mechanisms (barring the whole "urn:service:sos" tn which I don't believe = is standardised for STIR yet?)  by putting "esnet.0" in the auth = field of an rph passport.
 
For = EScallback, if the sph and "rph.auth" claims cover theis entirely why is = EScallback needed? I'm also still unclear what the verification service = behaviour is here.
 
I'm still = unclear as to how this spec helps with allowing and preventing malicious = use of emergency calls. You can already put esnet resource priority = pairs in the "rph.auth" claim and that seems to provide as much security = as this does. I do agree the sph claim does provide value, however.
 
I did = just realise that the esnet Resource Priority needs to be in the = "rph.auth" claim or the logic from that rfc will kick in and remove it, = as per:
RFC 8443, section 4.2
   In such scenarios, the SIP 'Resource-Priority' = header field SHOULD be
   stripped from the SIP request, and the network = entities should treat
   the call as an ordinary call.
 
I'll note = that some of my questions and concerns haven't been addressed yet, I'm = happy to resolve this first, just making a note so that they don't get = lost/I don't forget about them.
Jack
 
From: Brian Rosen <br@brianrosen.net> 
Sent: 18 August 2020 22:31
To: Jack Rickard <Jack.Rickard@metaswitch.com>
Cc: draft-ietf-stir-rph-emergency-services@ietf.org; stir@ietf.org
Subject: Re: [stir] Review of = draft-ietf-stir-rph-emergency-services
 
Let=E2=80=99= s keep the two use cases separate: 
ESorig is an emergency call (user to = authority).
EScallback is a call from authority to = user.
 
For ESorg, the call is marked with a Request-URI = of urn:service:sos.  The =E2=80=9CTo=E2=80=9D field is ignored in = routing and handling the call.  That=E2=80=99s how you know this is = an emergency call.   For stir purposes, the =46rom is an ordinary = identifier, and gets treated in the normal way.  However, the rph = value can only be used by a valid emergency call, and a valid emergency = call is a Request URI of urn:service:sos, and a valid From.  So you = don=E2=80=99t have any knowledge of emergency services identifiers, only = the Request URI of urn:service:sos.   
 
For EScallback, the marking is a distinguished = value in SIP Priority.  If a call has that value, it=E2=80=99s a = call back.  The originating service provider knows who are the = authorities who are allowed to place call backs, so the check is what is = in SIP Priority, and one of the allowed authorities in From.  As a = practical matter, in most cases, the call will be signed by the = emergency authorities themselves, who will be able to get appropriate = credentials for this purpose.  In most cases I=E2=80=99m aware of, = the To in an emergency call won=E2=80=99t match the =46rom in a = Callback, but it=E2=80=99s possible for that to happen, and we want to = allow it.
 
Esnet is a Resource Priority Header namespace, = not a SIP Priority value.  We=E2=80=99re allowing emergency calls = and call backs to use rph, and we=E2=80=99re protecting against = malicious use of it.  So unless the call has urn:service:sos in = Request URI, or the right SIP Priority in a call back (and from an = authorized authority) they can=E2=80=99t use rph with the esnet = namespace.  Generally, unless under attack, emergency calls go = through even if there isn=E2=80=99t a passport.  Many networks = won=E2=80=99t offer actual priority to emergency calls, but the = emergency services networks (ESInets) will.  
 
If a call arrives anywhere with an rph using = esnet, and isn=E2=80=99t an emergency call, with the appropriate = passport,  any intermediary can refuse to give it any priority, =  The emergency authorities may accept a call without a valid = passport, but they might treat it with much more suspicion than they = would any other call.
 
For call backs, the network may have special = behavior.  For example, it may send the call to the device that = placed the emergency call, rather than, for example, voice mail. =  The network has to be able to trust that SIP Priority is set = appropriately.  It will also have rph using esnet, and the network = can grant it appropriate priority if it has that capability, and would = not allow esnet otherwise.
 
The only value in covering other uses of SIP = Priority is to protect against middle boxes modifying it.  We = don=E2=80=99t really have use cases for that.  It probably = wouldn=E2=80=99t hurt to allow it though.
 
Does that help?
 
Brian
 






On Aug 14, 2020, at 1:21 PM, Jack = Rickard <Jack.Rickard=3D40metaswitch.com@dmarc.ietf.org> = wrote:
 
I have reviewed = draft-ietf-stir-rph-emergency-services-02 and have some concerns and = questions. I don't believe this spec is implementable in its current = form.
 
Thanks,
Jack
 
Why are "ESorig" and "EScallback" = distinct?
They seem to serve a very similar purpose with = the only difference being whether orig or dest should be the emergency = services. I don't believe there's any check that can be done to = validate:
   When = using "ESorig" as the "rph" assertion value, the "orig" claim = of
   the = PASSporT MUST represent the calling party number that = initiates
   the call to emergency = services.
This (and the equivalent statement for = EScallback) don't seem possible to me to check (barring the standard = orig/dest checking)..
This would make the check "at least one of the = parties should be the emergency services" enough to validate that this = was a reasonable call.
 
 
Why have them at all rather than = just using auth?
This is very possibly an issue with my = understanding, but I'm not clear on why "ESorig" and "EScallback" even = need to exist. "esnet.0" etc. are SIP Resource Priority headers, so = should be included in the "auth" field anyway by the RPH spec. This spec = appears to apply extra constraints (that a one of the callers must be = the emergency services) for the "esnet" namespace but it's not clear why = entirely separate claims are needed.
 
In a similar vein, what should a verifier do if = it receives a call containing an invalid "ESorig" or "EScallback" value = or the passport is invalid/untrusted, I'm assuming the behaviour is the = same as for auth but this isn't clear. Although stripping the fact that = this is an emergency call is potentially dangerous..
 
 
Specify the type of the "ESorig" = and "EScallback" claims.
This specification currently doesn't specify the = type of the new fields, there are only examples and this isn't enough. = It looks like they both follow the same scheme as the rph "auth" claim, = however "esnet,x" doesn't quite fit into that due to the comma and that = x isn't a valid priority value.
 
 
Why is sph limited to = psap-callback? What should the verifier do if it isn't that? What should = it do if it is?
I'm not entirely clear on the purpose of the sph = claim, however, it seems odd that it doesn't cover the full range of = possible values for the SIP Priority Header. Is there a reason that it = doesn't cover the "non-urgent", "normal", "urgent", or "emergency" = values?
There is also no verifier behaviour = defined here, should the verifier remove the Priority header if it = receives an invite with no passports signing for it? That seems = dangerous to me but would be consistent with rph. Alternatively, what = should the verifier do if it receives an invite with a valid passport = claiming sph but with no Priority header should it add it in? I'm not = sure the spec needs to be too prescriptive here, however some mention of = verifier behaviour and the associated security considerations would be = useful.


Should the spec be stronger about the compact = form?
Section 3 currently states
   The use of the compact form of =
PASSporT is not specified in this
   document.
However, = a compact-form passport following this spec would be hard to verify as = it introduces multiple possible rph variants, I think this spec could go = further and say you shouldn't/mustn't.


What = is the requirement of these new parameters.
As I understand it, the passport spec allows you = to create a passport containing whatever JWT fields you want and = verifiers should just ignore any fields they don't understand. Unless = the "ppt" claim is set, which indicates that verifiers should discard it = if they don't recognise that passport type. As this spec adds additional = fields to an existing passport type it isn't immediately clear what the = behaviour should be. Specifically, is an rph passport containing only = "rph.ESorig" valid now (where it wouldn't be before because auth isn't = present), is an rph passport containing no rph and only sph valid, and = what does a non-rph passport with sph or ESorig set mean?
 
_______________________________________________
stir mailing list
stir@ietf.org
https://www.ietf.org/mailman/listinfo/stir

= --Apple-Mail=_A6982ADE-1780-4CB5-83CC-DBA3F16C3638--