From nobody Mon Jan 1 16:16:34 2018 Return-Path: X-Original-To: secdir@ietf.org Delivered-To: secdir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 0AA571270A3; Mon, 1 Jan 2018 16:16:33 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Melinda Shore To: Cc: draft-ietf-pim-yang.all@ietf.org, ietf@ietf.org, pim@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.68.1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <151485219301.22243.12472699709779593358@ietfa.amsl.com> Date: Mon, 01 Jan 2018 16:16:33 -0800 Archived-At: Subject: [secdir] Secdir last call review of draft-ietf-pim-yang-12 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 02 Jan 2018 00:16:33 -0000 Reviewer: Melinda Shore Review result: Ready This document presents a YANG model for devices that implement protocol independent multicast (PIM). The bulk of this document contains data model definitions for the base model and for PIM YANG models and is beyond the scope of this review. The security considerations section appears to be derived directly from published YANG model RFCs and seems reasonable. The nits checker picked up some outdated references and two downrefs (Normative reference to an Informational RFC: RFC 3569 and Normative reference to an Experimental RFC: RFC 3973) as well as several outdated references, and those will need to be fixed prior to publication. Overall, the document quality is good. From nobody Thu Jan 4 06:20:21 2018 Return-Path: X-Original-To: secdir@ietf.org Delivered-To: secdir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 7475212D862 for ; Thu, 4 Jan 2018 06:20:20 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit From: Tero Kivinen To: X-Test-IDTracker: no X-IETF-IDTracker: 6.68.2 Auto-Submitted: auto-generated Precedence: bulk Reply-to: secdir-secretary@mit.edu Message-ID: <151507562047.23754.8980359514456098621.idtracker@ietfa.amsl.com> Date: Thu, 04 Jan 2018 06:20:20 -0800 Archived-At: Subject: [secdir] Assignments X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 04 Jan 2018 14:20:20 -0000 Review instructions and related resources are at: http://tools.ietf.org/area/sec/trac/wiki/SecDirReview For telechat 2018-01-11 Reviewer LC end Draft Shaun Cooley 2018-01-09 draft-ietf-netmod-rfc7223bis-01 Donald Eastlake 2018-01-10 draft-ietf-netmod-revised-datastores-09 Shawn Emery 2018-01-10 draft-ietf-netmod-entity-07 Daniel Franke 2018-01-02 draft-ietf-mpls-flow-ident-06 Daniel Gillmor 2017-12-29 draft-ietf-teas-network-assigned-upstream-label-11 Matthew Miller 2017-12-08 draft-atarius-dispatch-meid-urn-14 Sandra Murphy 2017-11-30 draft-ietf-httpbis-origin-frame-04 Stefan Santesson 2017-12-12 draft-ietf-rtgwg-yang-rip-07 Tina Tsou 2017-12-22 draft-ietf-bess-evpn-overlay-10 Tom Yu 2017-12-28 draft-ietf-pce-pcep-exp-codepoints-04 Tom Yu 2017-12-22 draft-ietf-slim-negotiating-human-language-19 Dacheng Zhang 2018-01-09 draft-ietf-netmod-rfc7277bis-01 For telechat 2018-01-25 Reviewer LC end Draft Tim Polk 2018-01-16 draft-ietf-lwig-energy-efficient-08 Vincent Roca 2018-01-16 draft-ietf-intarea-broadcast-consider-05 Kyle Rose 2018-01-24 draft-ietf-dhc-rfc3315bis-10 Sean Turner 2018-01-16 draft-ietf-ospf-link-overload-11 Carl Wallace 2018-01-15 draft-ietf-netmod-rfc8022bis-07 Brian Weis 2018-01-16 draft-ietf-nfsv4-flex-files-15 Paul Wouters 2018-01-16 draft-ietf-lpwan-overview-07 Paul Wouters 2018-01-11 draft-ietf-ospf-ospfv3-lsa-extend-20 Liang Xia 2018-01-10 draft-ietf-pim-source-discovery-bsr-07 Last calls: Reviewer LC end Draft John Bradley None draft-ietf-acme-acme-09 Shaun Cooley 2018-01-11 draft-ietf-grow-bgp-gshut-13 Russ Mundy 2017-09-14 draft-spinosa-urn-lex-12 Tina Tsou R2017-06-29 draft-ietf-trill-arp-optimization-09 Early review requests: Reviewer Due Draft Ólafur Guðmundsson 2018-01-09 draft-ietf-opsawg-nat-yang-09 Next in the reviewer rotation: Liang Xia Tom Yu Dacheng Zhang Derek Atkins John Bradley Shaun Cooley Alan DeKok Donald Eastlake Shawn Emery Stephen Farrell From nobody Thu Jan 4 17:44:47 2018 Return-Path: X-Original-To: secdir@ietf.org Delivered-To: secdir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 9D256127863; Thu, 4 Jan 2018 17:44:40 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Sean Turner To: Cc: ospf@ietf.org, ietf@ietf.org, draft-ietf-ospf-link-overload.all@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.68.2 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <151511668059.14718.13596043175355413910@ietfa.amsl.com> Date: Thu, 04 Jan 2018 17:44:40 -0800 Archived-At: Subject: [secdir] Secdir telechat review of draft-ietf-ospf-link-overload-11 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 05 Jan 2018 01:44:41 -0000 Reviewer: Sean Turner Review result: Ready In reviewing this draft, I was most concerned that this mechanism could be used by an attacker to push traffic towards or away from a node. If the messages are authenticated then I tend to agree with your assessment that this draft doesn't introduce any new security considerations beyond those in [RFC2328]/[RFC5340]. If not, well all bets are off. I did note a couple of editorial nits, but I sent those directly to the authors. From nobody Fri Jan 5 05:26:14 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 69622127010; Fri, 5 Jan 2018 05:26:12 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.909 X-Spam-Level: X-Spam-Status: No, score=-6.909 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ITkpuW_ZhmIb; Fri, 5 Jan 2018 05:26:09 -0800 (PST) Received: from mail2-relais-roc.national.inria.fr (mail2-relais-roc.national.inria.fr [192.134.164.83]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 930EE126DC2; Fri, 5 Jan 2018 05:26:05 -0800 (PST) X-IronPort-AV: E=Sophos;i="5.46,318,1511823600"; d="scan'208,217";a="307781731" Received: from dom38-1-82-236-155-50.fbx.proxad.net (HELO [192.168.1.112]) ([82.236.155.50]) by mail2-relais-roc.national.inria.fr with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 05 Jan 2018 14:26:03 +0100 From: Vincent Roca Content-Type: multipart/alternative; boundary="Apple-Mail=_D6A7D508-0DB2-4665-A1BC-9FEE4D090177" Mime-Version: 1.0 (Mac OS X Mail 11.2 \(3445.5.20\)) Message-Id: <383EA7C8-CFF0-48AF-AD0C-840545483E94@inria.fr> Date: Fri, 5 Jan 2018 14:26:02 +0100 To: IESG , secdir@ietf.org, draft-ietf-intarea-broadcast-consider.all@ietf.org X-Mailer: Apple Mail (2.3445.5.20) Archived-At: Subject: [secdir] Secdir review of draft-ietf-intarea-broadcast-consider-05 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 05 Jan 2018 13:26:12 -0000 --Apple-Mail=_D6A7D508-0DB2-4665-A1BC-9FEE4D090177 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Hello, I have reviewed this document as part of the security directorate=E2=80=99= s ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments = just like any other last call comments. Summary: Ready with issues This document lists recommendations concerning the use of broadcast/multicast traffic from a privacy point of view, which is highly valuable. However I have a certain number of comments. (sorry if my email is a bit long=E2=80=A6) Main comments: 1) First of all, the focus of this document looks ambiguous. The title refers to "IP broadcast and multicast protocol designers" which I can understand as those low level protocols for IP broadcast and multicast (e.g., IGMP, MLD, and why not various multicast routing protocols, etc.). On the opposite, the abstract restricts the focus: "application-layer protocols make use of IP broadcasts or multicast messages" (1st sentence). Then, when reading the document, I sometimes understand that it could also consider lower layer protocols. This should be clarified. Also, instead of "designers of broadcast/multicast protocols" I'd rather say "designers of protocols relying (in parts or totally) on broadcast/multicast traffic". This applies to the title (in a condensed version) and throughout the core of the document. 2) Another point: I'd like to see the item (b) of introduction developed as this is the key issue with multicast/broadcast traffic. Without encryption, application messages are vulnerable to eavesdropping and all kinds of analyses. A group key could be negociated and used for encrypting this traffic, but this requires a more complex setup mechanism (typically a key management system, probably with re-keying and all the stuff) and requires a preliminary association of a terminal that is not necessarily compatible with the application-layer protocol features. The text could say that if possible, multicast/broadcast traffic encryption should be used, otherwise risks should be minimised as discussed in this document. And of course, it's always good to remind the designers that unicast traffic should be always encrypted since there's no good reason not to do that. 3) I'd like to suggest another recommendation: when applicable, limit or avoid user-originated broadcast/multicast messages, preferring infrastructure originated messages. An example: in a discovery mechanism, avoid terminal sollicitation as much as possible and limit oneself to infrastructure announcement broadcast messages, even if it can include some extra delay (controled with the announcement frequency). This is exactly what happened in Wifi AP discovery, where the passive discovery scheme, AP based, is now prefered to the active scheme. Said differently, multicast/broadcast is not per se the issue, when originating from the infrastructure it is generaly safe. 4) A more general comment, related to item (a) of intro: Broadcast/multicast can simplify user surveillance, I agree. However, when I'm looking at all the practicies of companies working in the advertising area (in particular A&A companies, sitting between smartphone users and advertisers, domain that I know a little bit), the techniques deployed are incredibly smart, some of them bypassing technical protections set up by the OS manufacturers, others relying on hidden technical features. It's impressive how inventive those companies can be. My point is that even if traffic is 100% unicast, as long as a wireless medium is used, anyone wanting to monitor users in order to profile them will set up the required hardware/software configuration. This is trivial and extremely cheap nowadays (except perhaps for 4G connections), and most of the time this is a purely passive monitoring. The unicast/multicast/broadcast nature of traffic has no importance as long as you are within wireless network range. Clarification needed: ** section 4: I cannot understand the meaning of "information" in: "* You SHOULD try to design the protocol in a way that the information cannot be correlated with other information in broadcast/multicast messages" What does the first instance of "information" refer to? ** Last but one sentence of section 2.2: Why do you say "or at least much more difficult"? Without encryption, a persistant application layer identifier voids any lower layer attempt. I'd remove this comment altogether. Various: ** the authors use the term "host name" to refer to a higher layer name of a device. To me this term refers to the DNS notion of "hostname", i.e. something different, hence confusion. I'd recommend to use "device name" in order to avoid it. ** section 2.3: instead of: "If only a persistent ID is needed, this can be generated randomly. =C2=BB I'd rather say: "Persistent identifiers SHOULD be avoided (section 2.2), but if one is absolutely needed and if the devide name is not required, then the identifier SHOULD be generated randomly." Typos: ** section 4: s/broad-/broadcast/ in: "because of the special nature of broad- and multicast." ** section 5: "are" is missing in: ...for another class of attacks that not related to privacy." Regards, Vincent= --Apple-Mail=_D6A7D508-0DB2-4665-A1BC-9FEE4D090177 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8
Hello,

I have reviewed this = document as part of the security directorate=E2=80=99s ongoing
effort to review all IETF documents being processed by the = IESG. These
comments were written primarily for the = benefit of the security area
directors.  Document = editors and WG chairs should treat these comments just
like = any other last call comments.

Summary: Ready with issues

This document lists recommendations = concerning the use of
broadcast/multicast traffic = from a privacy point of view, which is
highly = valuable. However I have a certain number of comments.
(sorry if my email is a bit long=E2=80=A6)


Main comments:

1) First of all, the focus of this = document looks ambiguous.
The title refers to "IP = broadcast and multicast protocol designers"
which I = can understand as those low level protocols for IP broadcast
and multicast (e.g., IGMP, MLD, and why not various multicast = routing
protocols, etc.). On the opposite, the = abstract restricts the focus:
"application-layer = protocols make use of IP broadcasts or multicast
messages" (1st sentence). Then, when reading the document, I = sometimes
understand that it could also consider = lower layer protocols. This
should be = clarified.

Also,= instead of "designers of broadcast/multicast protocols" I'd
rather say "designers of protocols relying (in parts or = totally) on
broadcast/multicast traffic". This = applies to the title (in a
condensed version) and = throughout the core of the document.


2) = Another point: I'd like to see the item (b) of introduction
developed as this is the key issue with multicast/broadcast = traffic.
Without encryption, application messages = are vulnerable to
eavesdropping and all kinds of = analyses. A group key could be
negociated and used = for encrypting this traffic, but this requires a
more= complex setup mechanism (typically a key management system,
probably with re-keying and all the stuff) and requires a = preliminary
association of a terminal that is not = necessarily compatible with the
application-layer = protocol features.
The text could say that if = possible, multicast/broadcast traffic
encryption = should be used, otherwise risks should be minimised as
discussed in this document. And of course, it's always good = to remind
the designers that unicast traffic should = be always encrypted since
there's no good reason = not to do that.


3) I'd like to suggest = another recommendation: when applicable, limit
or = avoid user-originated broadcast/multicast messages, preferring
infrastructure originated messages.
An = example: in a discovery mechanism, avoid terminal sollicitation = as
much as possible and limit oneself to = infrastructure announcement
broadcast messages, = even if it can include some extra delay (controled
with the announcement frequency). This is exactly what = happened in
Wifi AP discovery, where the passive = discovery scheme, AP based, is
now prefered to the = active scheme.
Said differently, = multicast/broadcast is not per se the issue, when
originating from the infrastructure it is = generaly safe.


4) A more general = comment, related to item (a) of intro:
Broadcast/multicast can simplify user surveillance, I agree. = However,
when I'm looking at all the practicies of = companies working in the
advertising area (in = particular A&A companies, sitting between
smartphone users and advertisers, domain that I know a little = bit),
the techniques deployed are incredibly smart, = some of them bypassing
technical protections set up = by the OS manufacturers, others relying
on hidden = technical features. It's impressive how inventive those
companies can be.
My point is that even = if traffic is 100% unicast, as long as a
wireless = medium is used, anyone wanting to monitor users in order to
profile them will set up the required hardware/software = configuration.
This is trivial and extremely cheap = nowadays (except perhaps for 4G
connections), and = most of the time this is a purely passive
monitoring.= The unicast/multicast/broadcast nature of traffic has no
importance as long as you are within wireless network = range.


Clarification = needed:

** = section 4: I cannot understand the meaning of "information" = in:
        "* You SHOULD try = to design the protocol in a way that the
  =        information cannot be correlated with other = information in
        =  broadcast/multicast messages"
What does the = first instance of "information" refer to?


** = Last but one sentence of section 2.2: Why do you say "or at = least
much more difficult"? Without encryption, a = persistant application
layer identifier voids any = lower layer attempt. I'd remove this
comment = altogether.


Various:

** the authors use the = term "host name" to refer to a higher layer
name of = a device. To me this term refers to the DNS notion of
"hostname", i.e. something different, hence confusion. I'd = recommend
to use "device name" in order to avoid = it.

** section = 2.3: instead of:
        "If = only a persistent ID is needed, this can be generated
        randomly. =C2=BB
I'd rather say:
  =       "Persistent identifiers SHOULD be avoided (section = 2.2), but
        if one is = absolutely needed and if the devide name is not
        required, then the identifier = SHOULD be generated randomly."


Typos:

** section 4: s/broad-/broadcast/ in:
        "because of the special nature of = broad- and multicast."

** section 5: "are" is missing in:
  =       ...for another class of attacks that not related to = privacy."


Regards,

  Vincent
= --Apple-Mail=_D6A7D508-0DB2-4665-A1BC-9FEE4D090177-- From nobody Sun Jan 7 19:52:43 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 946CA126E01; Sun, 7 Jan 2018 19:52:36 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.75 X-Spam-Level: X-Spam-Status: No, score=-1.75 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 94iV1qk61H_R; Sun, 7 Jan 2018 19:52:35 -0800 (PST) Received: from mail-ot0-x22f.google.com (mail-ot0-x22f.google.com [IPv6:2607:f8b0:4003:c0f::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 09A2E1200C1; Sun, 7 Jan 2018 19:52:35 -0800 (PST) Received: by mail-ot0-x22f.google.com with SMTP id d10so8240759oti.7; Sun, 07 Jan 2018 19:52:35 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to:cc; bh=WU7Ld9Y8bV55KFMXIdPT+XlYVd7LTsAyVUbQgvwxiTw=; b=S0OH6YzaBifdztVVFNrZJjG5WlLeIUwkCmIxR6JiaenJ26H5Qyu8qrUswq1oLGZvdS 8un6DAk7I9j35Ci5FxqZCanFCHQz3auwZfXhkhXNKmHByMCfO621ClEJonptkFz9X+zY lUnpdXHuqhpdl2wXadjiGymY7do4IPWntkB9cJ/vInMxvinpJPNEdgC2zivfWLV1+QP3 G293jOblp3n4Z0ZTmGxao8RBhRxud/3/UW1Rxj0cskDYM8uua8CYSsG1ZLIVXt2QEv6o yd5vNrSCkH8YctijP71q1pEWOoGX+Sxc5t9UJW6AHPRurkPBkGIxEvG72uPxN0mu1/lH lbRA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to:cc; bh=WU7Ld9Y8bV55KFMXIdPT+XlYVd7LTsAyVUbQgvwxiTw=; b=n1Ym7yDUh4AwYm/ePiVcJ/h1uxLDpawHjHE9omA0sj+WHDX8Fadg5neP5HX0xh44Rm qkQ6/Ql1YX1H31PjpfpzM/qhYkb1pasN4mrTNK74IsT5KIrC6vPlCTxvq2PzqWoZ1ky4 85KVF6IRanSH/ZS4DMs3woqw8ykcv+DRDHt1RbedV5No7q9cGXu2NKIDNFwS0PDV5FYX WtCJ59EfOhGJm/X6n6a4U2TUku35nzVi77A6BbxIp7tvJAsyjg7PZ0ZRD9iRqNN1p6fX Z0BLDoLHrubHDJ5yngUY1iCeiv3goAn3ON9RiKejcGT0dZ5vOybOGsZNNKZBRxjSqeDK h6RQ== X-Gm-Message-State: AKwxytcB3joHdFEwXmPXhWpG+151ISJFyD2Qmy3gXf0SR2a2Jqlq33EZ dnYDrNwmkiuuabe7mM3Hu2hYJ+4emghAeFqlwyJIVQfO X-Google-Smtp-Source: ACJfBovl+JfOtkJvzh+xSBrAZve1j+Q5td3Y+/3iu3h7aBPatFboPWJ2QHmctOrgJ25znra15DQoBrBzvK3/U/mmjcI= X-Received: by 10.157.5.1 with SMTP id 1mr5468459otw.334.1515383554069; Sun, 07 Jan 2018 19:52:34 -0800 (PST) MIME-Version: 1.0 Received: by 10.168.53.129 with HTTP; Sun, 7 Jan 2018 19:52:18 -0800 (PST) From: Donald Eastlake Date: Sun, 7 Jan 2018 22:52:18 -0500 Message-ID: To: "iesg@ietf.org" , draft-ietf-netmod-revised-netstores.all@ietf.org Cc: secdir@ietf.org Content-Type: text/plain; charset="UTF-8" Archived-At: Subject: [secdir] SECDIR review of draft-ietf-netmod-revised-datastores-09 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Jan 2018 03:52:37 -0000 I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. Document editors and WG chairs should treat these comments just like any other last call comments. The summary of the review is Ready. This draft specifies an elaborated datastore model for YANG based on experience with the original model in RFC 6241. It is probably correct, as stated in the Security Considerations, that this model itself has no security effect. The Security Considerations refer to the "YANG security module security guidelines" by that quoted string only. I would assume these guidelines are in a document somewhere and it would be nice to give a pointer to that document. Section 5.1, Page 11, third line up from the 5.1.1 heading, should the reference to "Section 5" be a reference to "Figure 2"? Thanks, Donald =============================== Donald E. Eastlake 3rd +1-508-333-2270 (cell) 155 Beaver Street, Milford, MA 01757 USA d3e3e3@gmail.com From nobody Sun Jan 7 19:59:11 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 229DB126D74; Sun, 7 Jan 2018 19:59:10 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.749 X-Spam-Level: X-Spam-Status: No, score=-1.749 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KE8NGE-hyLqr; Sun, 7 Jan 2018 19:59:08 -0800 (PST) Received: from mail-oi0-x22e.google.com (mail-oi0-x22e.google.com [IPv6:2607:f8b0:4003:c06::22e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9AE501200C1; Sun, 7 Jan 2018 19:59:05 -0800 (PST) Received: by mail-oi0-x22e.google.com with SMTP id a70so232876oib.1; Sun, 07 Jan 2018 19:59:05 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=cANsedGmzzAwg96PiWM8OyxdlPRNLlB3CUy2APQNa3o=; b=I1gqiR8RLdxAmDxUW+PkQAucKD640n7Li1LGiWgPPPqfNFkkmkUY/jKLGfCFpKrDxz ibjHab4PSENflzsJkGiuw6FNLQfFvaDQIy7a7/sATxVK0boWiC8c/1NkIsB1CmJr2hHt HefwAO+AR32Z0tf5x6s2IvvGJGg/0SOd7oNHpYLvdGBXb3X2K9HG42wfFWYrooWZt4IX gM/7uCCIFDjrTEhIVUg3yfamtVzW0K1Z+rzDMEfM2Mo4dbhbOQSj8NDvIAsggRZ1+R+C sUuu3uqdDSfXZhKBKNEKCSu0jLhIwfHGLFqZBK/s7WR40sLUrGaVZ/+wUpFpbZTLPHg+ nnUw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=cANsedGmzzAwg96PiWM8OyxdlPRNLlB3CUy2APQNa3o=; b=L/nUeCMhgUlVBNfDwBtgffqnVXKT4W7qlXfa/mHJukJzepEupcvofUHWvPpXK2dDAC 47hW7ZkJ1ZYp5/okyLNIsKB4B2GAJl7+UFsTDdy4qwOZ85kSjDzZ2Rlmj7EfhFkxKcMo myFt+nkpX6j9gBqMyfA/G/E/GA2u24kAHXH+DNzyYojCF0iytxe3ahI6vn2fR+dQPDF5 Di06eMOj1D1jCCrH326X3L75p4JROqtdjJRsWCjGRqxczVRUVWrkOwgVGHAcksYnH9sa gagP/HQo7/wDltShk5swrUF6n7R7TuF67B1Hl8i4u+MfsxZyA2WW4IKb4JIHy7zm5dHt 1XBw== X-Gm-Message-State: AKGB3mK4eGvkcN5pm8++5oKzWbqbPMeSTfE2lqhfoKqIP1nIY5rjoD51 ErVBX1K/JHHocsrvo6fi/xBvTRMdMeWhys7gcVG2Vg== X-Google-Smtp-Source: ACJfBotoh7OJi2BA+iGy5DPTdXNCW/zrKJJeYk4Gj62L99Usp+7jmXUweMfl5apnr5CxmmnVP9gmzEMo3POe7WNVx9A= X-Received: by 10.202.91.212 with SMTP id p203mr5495953oib.269.1515383944589; Sun, 07 Jan 2018 19:59:04 -0800 (PST) MIME-Version: 1.0 Received: by 10.168.53.129 with HTTP; Sun, 7 Jan 2018 19:58:49 -0800 (PST) In-Reply-To: References: From: Donald Eastlake Date: Sun, 7 Jan 2018 22:58:49 -0500 Message-ID: To: "iesg@ietf.org" , draft-ietf-netmod-revised-datastores.all@ietf.org Cc: secdir@ietf.org Content-Type: multipart/alternative; boundary="001a113d56e6b738d005623bd13c" Archived-At: Subject: Re: [secdir] SECDIR review of draft-ietf-netmod-revised-datastores-09 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Jan 2018 03:59:10 -0000 --001a113d56e6b738d005623bd13c Content-Type: text/plain; charset="UTF-8" Resent with to address fixed. Thanks, Donald =============================== Donald E. Eastlake 3rd +1-508-333-2270 (cell) 155 Beaver Street, Milford, MA 01757 USA d3e3e3@gmail.com On Sun, Jan 7, 2018 at 10:52 PM, Donald Eastlake wrote: > I have reviewed this document as part of the security directorate's > ongoing effort to review all IETF documents being processed by the > IESG. Document editors and WG chairs should treat these comments just > like any other last call comments. > > The summary of the review is Ready. > > This draft specifies an elaborated datastore model for YANG based on > experience with the original model in RFC 6241. It is probably > correct, as stated in the Security Considerations, that this model > itself has no security effect. > > The Security Considerations refer to the "YANG security module > security guidelines" by that quoted string only. I would assume these > guidelines are in a document somewhere and it would be nice to give a > pointer to that document. > > Section 5.1, Page 11, third line up from the 5.1.1 heading, should the > reference to "Section 5" be a reference to "Figure 2"? > > Thanks, > Donald > =============================== > Donald E. Eastlake 3rd +1-508-333-2270 (cell) > 155 Beaver Street, Milford, MA 01757 USA > d3e3e3@gmail.com > --001a113d56e6b738d005623bd13c Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Resent with to address fixed.

Thanks,
Donald
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
=C2=A0Donald E. Eastlak= e 3rd =C2=A0 +1-508-333-2270 (cell)
=C2=A0155 Beaver Street, Milford, MA= 01757 USA
=C2=A0d= 3e3e3@gmail.com

On Sun, Jan 7, 2018 at 10:52 PM, Donald East= lake <d3e3e3@gmail.com> wrote:
I have reviewed this document as part of the security directorate's=
ongoing effort to review all IETF documents being processed by the
IESG.=C2=A0 Document editors and WG chairs should treat these comments just=
like any other last call comments.

The summary of the review is Ready.

This draft specifies an elaborated datastore model for YANG based on
experience with the original model in RFC 6241. It is probably
correct, as stated in the Security Considerations, that this model
itself has no security effect.

The Security Considerations refer to the "YANG security module
security guidelines" by that quoted string only. I would assume these<= br> guidelines are in a document somewhere and it would be nice to give a
pointer to that document.

Section 5.1, Page 11, third line up from the 5.1.1 heading, should the
reference to "Section 5" be a reference to "Figure 2"?<= br>
Thanks,
Donald
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D
=C2=A0Donald E. Eastlake 3rd=C2=A0 =C2=A0+1-508-333-2270 (cell)
=C2=A0155 Beaver Street, Milford, MA 01757 USA
=C2=A0d3e3e3@gmail.com

--001a113d56e6b738d005623bd13c-- From nobody Sun Jan 7 22:22:37 2018 Return-Path: X-Original-To: secdir@ietf.org Delivered-To: secdir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id CEEDC1270AB; Sun, 7 Jan 2018 22:22:17 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Liang Xia To: Cc: draft-ietf-pim-source-discovery-bsr.all@ietf.org, ietf@ietf.org, pim@ietf.org, iesg@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.68.2 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <151539253778.11305.7448095057192632663@ietfa.amsl.com> Date: Sun, 07 Jan 2018 22:22:17 -0800 Archived-At: Subject: [secdir] Secdir last call review of draft-ietf-pim-source-discovery-bsr-07 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Jan 2018 06:22:18 -0000 Reviewer: Liang Xia Review result: Has Issues Nits: 1. In Abstract, the abbreviation is missed when the Term are firstly appeared, such as: Sparse-Mode, Rendezvous Point; 2. Every word in the section titles should be in the capital form Issues: 1. In Security Considerations section, should one sentence be "even if the sources are actually not active"? 2. Generally, the peer authentication (by certificate, shared key...) and the message integration protection are always helpful to defend against the forged routers and PEM messages, even the resulted resource consumption. But in current Security Considerations section, there is nothing discussed about these countermeasures, even in the general way. Suggest to consider this point personally. From nobody Mon Jan 8 13:44:44 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3420C1243F6 for ; Mon, 8 Jan 2018 13:44:42 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aeQ2qE2uQ9CN for ; Mon, 8 Jan 2018 13:44:40 -0800 (PST) Received: from mail-pg0-x22a.google.com (mail-pg0-x22a.google.com [IPv6:2607:f8b0:400e:c05::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 36373120726 for ; Mon, 8 Jan 2018 13:44:40 -0800 (PST) Received: by mail-pg0-x22a.google.com with SMTP id r2so6460505pgq.13 for ; Mon, 08 Jan 2018 13:44:40 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=0F8zg7nkJm8y0NrzHoY7hXGD0rws1k3iQ8F+kD/9QxE=; b=TvCizWqJAz/n5SBMjZTYaoUEJlzTU3MlUoPFdYpNWX7dvElKgrvlQbTql14QwNN+Sa MrX7DoF9+vvPasRWnFiYSQ7+kgt4tk1Nhe619u7SF3V7e5zNlKllrCduSz+RGvpE3aet jJLEvIOhX/KObrx5OsXcQr8SW42I5RNYg1/kWCDwlJ6pCwC8Rs3E/VmknA8PXb12Kcve Alb0oOyZB2c3IzhePR7qRs+w37z78tI9NQOu7tScYdgThJMIWS7sWrkk6Yy4z7m3D14d 65lmRAB88m21QgxAXpicO/0KsvRQfRy5koCt4i6cY8IqAsbe+6jdMzrnd8EzUqnvBOr0 tFKA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=0F8zg7nkJm8y0NrzHoY7hXGD0rws1k3iQ8F+kD/9QxE=; b=lMOiW91ScTnoX1ctKQSsVuyKh2uWlFTgpQ3aQYeN26sMQXlInZPrYjaGchtuOOrElv wZ+wHJjy7KFUX31vGxofifsbfvzLSb/cwo39J4OHw40ZM5m65/pOOTcztFtRFH46Bw43 YL65rB9MNcoyq3JB2AduEZipwI4nZjbVQN8vgwOjwYlBkGmhwUrgLicHJE7kjcxysBTa FVWIfW/47Rvcg3GW6fjhNtIsapwmeWO0sDCNVCBBIX+xxlDTuhaNck3ndOkBEdBsuEro IqoxeHplOXLlF9uVZ4wJOz4rU3PNiblvZuoUooobhaAq/nzXnCfxlvBPNaf0d+zis7i7 BYRw== X-Gm-Message-State: AKGB3mIGDC6kzX5eBnakAEQEXVeXYL8gG5JyRbo2EZakSQ2MJxc1WbjR 1VTuN0Yd+iYXl7axNxVBAwha0WJdA0Gj6y/Nc0UPug== X-Google-Smtp-Source: ACJfBotvIIDRuInzzHhtsBss804oBIIy6PWlp23sEyLvQk+k+mJ9KTqlltLInJH4xRDLYoL++nCyFMsiwclwQGoDMC8= X-Received: by 10.98.138.3 with SMTP id y3mr11855279pfd.132.1515447879756; Mon, 08 Jan 2018 13:44:39 -0800 (PST) MIME-Version: 1.0 Received: by 10.100.186.208 with HTTP; Mon, 8 Jan 2018 13:43:59 -0800 (PST) From: Kathleen Moriarty Date: Mon, 8 Jan 2018 16:43:59 -0500 Message-ID: To: secdir@ietf.org Content-Type: text/plain; charset="UTF-8" Archived-At: Subject: [secdir] YANG Reviews X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Jan 2018 21:44:42 -0000 Hello, We will be seeing many YANG module reviews come through, please don't let page counts scare you on these. One of the main things to look for is that they used the Security Considerations template and filled it out, catching any data nodes that need to be enumerated in the considerations. Templates like this tend to get updated every time there's a new SecAD, :-) . As such, it'll likely be updated again in a few months. Here's the draft with the current template. Have a look so you know key things to look for (transport security is called out and subtrees/data nodes of concern should be listed out). Sometimes more is needed specific to the draft, but often times, this covers it. https://tools.ietf.org/html/draft-ietf-netmod-rfc6087bis-10#page-52 Thanks again for all your reviews, it is a tremendous help to us! -- Best regards, Kathleen From nobody Tue Jan 9 10:46:45 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2C19E12D77D for ; Tue, 9 Jan 2018 10:46:35 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bQog0Bx1KkSF for ; Tue, 9 Jan 2018 10:46:26 -0800 (PST) Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 170BE12D860 for ; Tue, 9 Jan 2018 10:46:26 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id 61C5C3009FC for ; Tue, 9 Jan 2018 13:46:25 -0500 (EST) X-Virus-Scanned: amavisd-new at mail.smeinc.net Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id QYFTt8duUH1n for ; Tue, 9 Jan 2018 13:46:23 -0500 (EST) Received: from a860b60074bd.home (pool-108-45-101-150.washdc.fios.verizon.net [108.45.101.150]) by mail.smeinc.net (Postfix) with ESMTPSA id D2BC530056B; Tue, 9 Jan 2018 13:46:23 -0500 (EST) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\)) From: Russ Housley In-Reply-To: Date: Tue, 9 Jan 2018 13:46:27 -0500 Cc: IETF SecDir Content-Transfer-Encoding: quoted-printable Message-Id: References: To: Kathleen Moriarty X-Mailer: Apple Mail (2.3273) Archived-At: Subject: Re: [secdir] YANG Reviews X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Jan 2018 18:46:35 -0000 For MIB modules, we came up with a short list of things or the SecDir = Reviewer to do. This is a quote from an email message in 2007: > The job of the security reviewers, then, is three-fold: first, to > verify the existence of the boilerplate; second, to verify the = adequacy > of the explanations given for particular items; third -- and this is > the hardest -- to scan the document to see if other items should have > been identified as sensitive but aren't. The real guidance appears here: = http://www.ops.ietf.org/mib-security.html It would be very helpful if we can come up with an equivalent = yang-security.html document. Russ > On Jan 8, 2018, at 4:43 PM, Kathleen Moriarty = wrote: >=20 > Hello, >=20 > We will be seeing many YANG module reviews come through, please don't > let page counts scare you on these. One of the main things to look > for is that they used the Security Considerations template and filled > it out, catching any data nodes that need to be enumerated in the > considerations. >=20 > Templates like this tend to get updated every time there's a new > SecAD, :-) . As such, it'll likely be updated again in a few months. > Here's the draft with the current template. Have a look so you know > key things to look for (transport security is called out and > subtrees/data nodes of concern should be listed out). Sometimes more > is needed specific to the draft, but often times, this covers it. >=20 > https://tools.ietf.org/html/draft-ietf-netmod-rfc6087bis-10#page-52 >=20 > Thanks again for all your reviews, it is a tremendous help to us! >=20 > --=20 >=20 > Best regards, > Kathleen From nobody Tue Jan 9 11:15:28 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 15ACE12D77A for ; Tue, 9 Jan 2018 11:15:27 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.699 X-Spam-Level: X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4ytiSTePx898 for ; Tue, 9 Jan 2018 11:15:25 -0800 (PST) Received: from mail-qk0-x233.google.com (mail-qk0-x233.google.com [IPv6:2607:f8b0:400d:c09::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DC8981271DF for ; Tue, 9 Jan 2018 11:15:24 -0800 (PST) Received: by mail-qk0-x233.google.com with SMTP id u76so1114959qku.11 for ; Tue, 09 Jan 2018 11:15:24 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=Qh240NBLB9yfqsVf/WBHaJjya93MQMbSmB2sCRIR4Ig=; b=bReRaL0K2WomUdfi5IrdKxA3vUEqd0diNp+355ToDJ3hY9Db9EA2bAJNyG4aFZIH4Z CsXc7z0RXXhT/gJnVeKpLX+5kaadxaiFL3HQsnLZr0BiWRFjcEsf7S8tcHTgIhtmrfz9 YGOySgAYqhUFkwC9mdizFYcmgbUbm3AIFf+ihSIJZiFpjIBT9Lsseg18yz5pr4F8cGP0 LslMyoJmBRiSjq5ronDhGnSFyVWMjxZSOBDmU5aw31829PIUm6WB8yVOPkjNBzSbbbuA ot1r0tJccpOM04c93ckXlrBFc9AKTSCtPFARw8JyE+cAQF+vMi0MJ+4fgjJEB6q9ERFG +VqQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=Qh240NBLB9yfqsVf/WBHaJjya93MQMbSmB2sCRIR4Ig=; b=rc6riRr8YpxW+csyXwU19HSMEaJWiBQvmTyo1kNoOP+VV2MPIb9iKtVicNXRtnLntw 8rTM/nBCrrXMarWux4+yfHm5a+D+RMqiNZwqf93dtaR5vVLOpKPn4xpRYTy4rkQ+QbUl dIayi3IUV+AMW5+C7OoOIL2vYWCbPEzJ5BuTUDj0kt/phweL8tqQt3thdbNzGBNeXfUB Ya3O6wBh+g7Ca+JEo9s7LtxH7SrsRai3tnLUTMfPHMkZXdrXlTi380MN66oDYf92l8NI wCF0IKJ4wS309Ry/OGB9wTc/Wqcyy5iIb6zLSaY6j0J9Vcyk4qwYjlO6DWhLu1wwWD+F 91pA== X-Gm-Message-State: AKwxytfvInDQn1ghtPExALQ4bxOxHVE7SZkdQlDZtJPf1SXB35mliNCj iYCvxxfG2fxU2eFUwJ+k0iA= X-Google-Smtp-Source: ACJfBou0yS/dg1tN4E5jsDnwKDQOoITaxJFIVZ060Pni3bTBNFA1lzG/GgiMD3p2aN4R9la+qXGY1w== X-Received: by 10.55.133.2 with SMTP id h2mr22801696qkd.329.1515525324023; Tue, 09 Jan 2018 11:15:24 -0800 (PST) Received: from [192.168.1.219] (209-6-112-84.s338.c3-0.arl-ubr1.sbo-arl.ma.cable.rcncustomer.com. [209.6.112.84]) by smtp.gmail.com with ESMTPSA id w39sm9755934qtw.90.2018.01.09.11.15.23 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 09 Jan 2018 11:15:23 -0800 (PST) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (1.0) From: Kathleen Moriarty X-Mailer: iPhone Mail (15C153) In-Reply-To: Date: Tue, 9 Jan 2018 14:15:22 -0500 Cc: IETF SecDir Content-Transfer-Encoding: quoted-printable Message-Id: References: To: Russ Housley Archived-At: Subject: Re: [secdir] YANG Reviews X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Jan 2018 19:15:27 -0000 Hi Russ, Sent from my mobile device > On Jan 9, 2018, at 1:46 PM, Russ Housley wrote: >=20 > For MIB modules, we came up with a short list of things or the SecDir Revi= ewer to do. This is a quote from an email message in 2007: >=20 >> The job of the security reviewers, then, is three-fold: first, to >> verify the existence of the boilerplate; second, to verify the adequacy >> of the explanations given for particular items; third -- and this is >> the hardest -- to scan the document to see if other items should have >> been identified as sensitive but aren't. The guidance is very similar. >=20 > The real guidance appears here: http://www.ops.ietf.org/mib-security.html >=20 > It would be very helpful if we can come up with an equivalent yang-securit= y.html document. >=20 We can work with Benoit &Warren as it=E2=80=99s better for those writing the= drafts to see it first, so I think the home should be the same. Best, Kathleen=20 > Russ >=20 >=20 >> On Jan 8, 2018, at 4:43 PM, Kathleen Moriarty wrote: >>=20 >> Hello, >>=20 >> We will be seeing many YANG module reviews come through, please don't >> let page counts scare you on these. One of the main things to look >> for is that they used the Security Considerations template and filled >> it out, catching any data nodes that need to be enumerated in the >> considerations. >>=20 >> Templates like this tend to get updated every time there's a new >> SecAD, :-) . As such, it'll likely be updated again in a few months. >> Here's the draft with the current template. Have a look so you know >> key things to look for (transport security is called out and >> subtrees/data nodes of concern should be listed out). Sometimes more >> is needed specific to the draft, but often times, this covers it. >>=20 >> https://tools.ietf.org/html/draft-ietf-netmod-rfc6087bis-10#page-52 >>=20 >> Thanks again for all your reviews, it is a tremendous help to us! >>=20 >> --=20 >>=20 >> Best regards, >> Kathleen >=20 From nobody Tue Jan 9 22:48:08 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DEDDB126CC4 for ; Tue, 9 Jan 2018 22:48:06 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.699 X-Spam-Level: X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GiejEZcvFJsw for ; Tue, 9 Jan 2018 22:48:05 -0800 (PST) Received: from mail-io0-x22c.google.com (mail-io0-x22c.google.com [IPv6:2607:f8b0:4001:c06::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 150FD1200B9 for ; Tue, 9 Jan 2018 22:48:05 -0800 (PST) Received: by mail-io0-x22c.google.com with SMTP id 14so21264970iou.2 for ; Tue, 09 Jan 2018 22:48:05 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to:cc; bh=DsWktwf/QUbeb+gLs4jelqwBD5IDFk2cX02V9dCBCuw=; b=mXrpQfoVVM29dnFfpu/DYB/unVm/NsELG07NZ1B4NRPgJ3uzX7PC7iHjGvG57mzsh/ UGFJHYYhjp1a17dhu2TW9Jw39Opxof5dyuqEfwZaeABlW2nFrVDc8IpdzWniF8HK8ChA K6NYfBbHe9njEw4Tvm4cfwgSUwYydaPBx/7xfWPj5lB3Vc17FYtgtDSiRYHYY2x0+gKJ D0iHPyLU8TJbO5riO43wEEtoGLjXddciWFekuSohxnXI0reAzZAC8O9wtbmBigX4pjJJ NuUj0zyI7BpSAucJForNoJ+1CJMldbbD88MsVhCBnZoe1ARAxFJQvCN5i+av72GZZQbr pfHA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to:cc; bh=DsWktwf/QUbeb+gLs4jelqwBD5IDFk2cX02V9dCBCuw=; b=itAsbSQBoSJSCo50AqHyIJyRRHzuI7CBYtzBy5zSmBn4vi84OEzID+V3+tSb6VKUom 6fyLlVh5mGqfb2ICFUPjHFEid1uJjqEuP6kZ2WwausUZirRWfNjEyTjVF4NkYNKggpuw Ian8/QCfP60Ce0ExB1L6TfttIuWmFs/Onx72ter/R9Xu/O7Oq1CQFkVNtIQ5mg9v0C0e q0Lq0lE3p/Bs/o27sLH7XJFaNbc+aK0E5djeEfQ7hMmu7hzi+9erefb/SatUWVpgc6p3 GgB2isi2JWZwVixVk1NnN+IYz3CR1js6FX2J3Q7fVL9mcqF6g5pUxRLV1ti5CWpBTpTp alxw== X-Gm-Message-State: AKwxytc5ModxmTugz9kpcRhalVAOorloMhONf5OEBCplJxsVV1lH18sp y+8l0THVMnGb/3JCwquwVc7/hgYlDRFaSMIy/YMsNokH X-Google-Smtp-Source: ACJfBovB7r0lubmEW6oK8UZ5Nv73/KzG914cHbiBczRvcMAHtFhcuXnkC8Hhk60T8LxZXdTAlgifyTaZytoHKicDL30= X-Received: by 10.107.81.22 with SMTP id f22mr17091306iob.191.1515566884036; Tue, 09 Jan 2018 22:48:04 -0800 (PST) MIME-Version: 1.0 Received: by 10.2.167.19 with HTTP; Tue, 9 Jan 2018 22:48:03 -0800 (PST) From: Shawn Emery Date: Tue, 9 Jan 2018 23:48:03 -0700 Message-ID: To: secdir@ietf.org, draft-ietf-netmod-entity.all@tools.ietf.org Content-Type: multipart/alternative; boundary="089e08259c40c1a6550562666926" Archived-At: Subject: [secdir] Review of draft-ietf-netmod-entity-07 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 Jan 2018 06:48:07 -0000 --089e08259c40c1a6550562666926 Content-Type: text/plain; charset="UTF-8" I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just like any other last call comments. This draft specifies a YANG data model for server hardware configuration and status information. The security considerations section does exist and follows the mib-security template. With this, the section defines the nodes that have sensitive information. Access controls are provided by the network management protocol. I agree with the provided set of nodes considered sensitive, which covers the majority of them. The section also states that there is a MTI for secure transport of the underlying network management protocols with SSH or TLS. I believe that the section sufficiently covers the various security concerns of the draft. General comments: None. Editorial comments: None. Shawn. -- --089e08259c40c1a6550562666926 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
I have reviewed this docu= ment as part of the security directorate's
ongoing effort to review all=C2= =A0IETF=C2=A0documents being processed by= the IESG.
These comments were written primarily for the benefit of the security=
area= directors. Document editors and WG chairs should treat these
comments just like= any other last call comments.

This draft specif= ies a YANG data model for server hardware configuration and status informat= ion.

The security considerations section does exist and follows the mib= -security template.=C2=A0 With this, the section=C2=A0defines=C2=A0the nodes = that have sensitive information.=C2= =A0=C2=A0Access controls are provid= ed by the network management protocol.=C2=A0=C2=A0I agree with the provided set of nodes considered sensitive,= which covers the majority of them.=C2=A0=C2=A0The section also states= that there is a MTI for secure transport of the underlying network managem= ent protocols with SSH or TLS.=C2=A0 I believe that the section sufficientl= y covers the various security concerns of the draft.

General com= ments:

None.

Editorial comments:

<= div>None.

Shawn.
--
--089e08259c40c1a6550562666926-- From nobody Wed Jan 10 13:37:02 2018 Return-Path: X-Original-To: secdir@ietf.org Delivered-To: secdir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id E21AC12E03B; Wed, 10 Jan 2018 13:36:50 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Daniel Franke To: Cc: draft-ietf-mpls-flow-ident.all@ietf.org, ietf@ietf.org, mpls@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.68.3 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <151562021088.5645.6014648171409606834@ietfa.amsl.com> Date: Wed, 10 Jan 2018 13:36:50 -0800 Archived-At: Subject: [secdir] Secdir last call review of draft-ietf-mpls-flow-ident-06 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 Jan 2018 21:36:51 -0000 Reviewer: Daniel Franke Review result: Has Nits I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just like any other last call comments. I know next to nothing about MPLS. The proposed functionality seems reasonable and persuasively justified, but it is possible that there are significant issues I'm overlooking. I have a couple nitpicks about the Security Considerations section. The lowercased (i.e., non-RFC-2119) "must"s and "should"s are weasel words when not connected with a statement of what objective is achieved by following those recommendations. For example, the sentence "Propagation of identification information outside the MPLS network imposing it must be disabled by default" ought to be prefaced or suffixed with something along the lines of "In order to preserve present assumptions about MPLS privacy properties". I see a lot of discussion about confidentiality concerns when flow information is propagated across trust boundaries, but no discussion about the dual integrity concerns. I suggest including some word of warning that flow information received from an untrusted LSR cannot be assumed correct, so caution is advised before relying on it, e.g., to determine for billing purposes whether SLAs are being met. From nobody Wed Jan 10 19:27:09 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 456EF12D878; Wed, 10 Jan 2018 19:27:02 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.211 X-Spam-Level: X-Spam-Status: No, score=-4.211 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id L4Orl_9FDgeT; Wed, 10 Jan 2018 19:27:00 -0800 (PST) Received: from dmz-mailsec-scanner-1.mit.edu (dmz-mailsec-scanner-1.mit.edu [18.9.25.12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C86C2128954; Wed, 10 Jan 2018 19:26:58 -0800 (PST) X-AuditID: 1209190c-783ff700000049ec-21-5a56d98129c0 Received: from mailhub-auth-1.mit.edu ( [18.9.21.35]) (using TLS with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by dmz-mailsec-scanner-1.mit.edu (Symantec Messaging Gateway) with SMTP id B8.A0.18924.189D65A5; Wed, 10 Jan 2018 22:26:57 -0500 (EST) Received: from outgoing.mit.edu (OUTGOING-AUTH-1.MIT.EDU [18.9.28.11]) by mailhub-auth-1.mit.edu (8.13.8/8.9.2) with ESMTP id w0B3QuND019487; Wed, 10 Jan 2018 22:26:56 -0500 Received: from localhost (nyc-02.triskelion.com [162.243.175.178]) (authenticated bits=0) (User authenticated as tlyu@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id w0B3QsWp005055; Wed, 10 Jan 2018 22:26:55 -0500 From: Taylor Yu To: iesg@ietf.org, secdir@ietf.org, draft-ietf-slim-negotiating-human-language.all@ietf.org Date: Thu, 11 Jan 2018 03:26:54 +0000 Message-ID: Lines: 20 MIME-Version: 1.0 Content-Type: text/plain X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFjrGIsWRmVeSWpSXmKPExsUixCmqrNt4MyzK4PJNDYsV5zQtZvyZyGzx YeFDFgdmjyVLfjIFMEZx2aSk5mSWpRbp2yVwZTzuOslccJ+tYv/TzewNjIdZuxg5OSQETCRu vf3P3MXIxSEksJhJYtHdRYwQzkZGiTOXf7NCON8YJQ7vnMfWxcjBwSYgJ3H5VjCIKSKQIjFv jQrIIGEBd4nmiReYQWwWAVWJkxuOgS3gFbCROL1jB1icR4BTYtFvkCkgcUGJkzOfsIDYzAIS EgdfvGCewMgzC0lqFpLUAkamVYyyKblVurmJmTnFqcm6xcmJeXmpRbqGermZJXqpKaWbGMHB Ismzg/HMG69DjAIcjEo8vIzCYVFCrIllxZW5hxglOZiURHkDOUOjhPiS8lMqMxKLM+KLSnNS iw8xSnAwK4nwLg4EKudNSaysSi3Kh0lJc7AoifO6m2hHCQmkJ5akZqemFqQWwWRlODiUJHif 3gBqFCxKTU+tSMvMKUFIM3FwggznARq+EqSGt7ggMbc4Mx0if4rRkqNt5ZM2Zo4bL14DyWnL 3rQxC7Hk5eelSonzdoM0CIA0ZJTmwc0ERf+iz+s3vWIUB3pRmFcFmAqEeICJA27qK6CFTEAL z28MBVlYkoiQkmpgPLKsabeQUt10l5v+12qS2z51NOY2M3604wnSOumQnMa0T3p92LaQlUcT lH3Drj6eaLr9xqOVlVcvtdVLvA9Z6b5qcr3X9Av/Dv34KmF98k6xJEdJwW75Re6z1LOXGLDf Mew49aqzp2XLzLnfancc0pr8WOZyyongwqd5GV9LMmRE7125+e1JmBJLcUaioRZzUXEiAHcM ShrZAgAA Archived-At: Subject: [secdir] secdir review of draft-ietf-slim-negotiating-human-language-22 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Jan 2018 03:27:02 -0000 I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just like any other last call comments. Summary: ready with minor issues The security considerations section seems mostly reasonable. The emergency services use case vaguely bothered me in ways I couldn't quite articulate at first, but I think Alissa Cooper's ballot comment about denying emergency services by manipulating these attributes captures most of the essence. I would add for that these new language tags, integrity seems to be a stronger requirement than confidentiality, at least in the emergency calling use case. Best regards, -Taylor From nobody Wed Jan 10 19:49:58 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C5C33126CF9; Wed, 10 Jan 2018 19:49:50 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.211 X-Spam-Level: X-Spam-Status: No, score=-4.211 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Xq9Y0SoXet30; Wed, 10 Jan 2018 19:49:49 -0800 (PST) Received: from dmz-mailsec-scanner-1.mit.edu (dmz-mailsec-scanner-1.mit.edu [18.9.25.12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9D70D126C3D; Wed, 10 Jan 2018 19:49:48 -0800 (PST) X-AuditID: 1209190c-76bff700000049ec-9e-5a56dedba35c Received: from mailhub-auth-3.mit.edu ( [18.9.21.43]) (using TLS with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by dmz-mailsec-scanner-1.mit.edu (Symantec Messaging Gateway) with SMTP id 52.81.18924.BDED65A5; Wed, 10 Jan 2018 22:49:47 -0500 (EST) Received: from outgoing.mit.edu (OUTGOING-AUTH-1.MIT.EDU [18.9.28.11]) by mailhub-auth-3.mit.edu (8.13.8/8.9.2) with ESMTP id w0B3nkCY022912; Wed, 10 Jan 2018 22:49:46 -0500 Received: from localhost (nyc-02.triskelion.com [162.243.175.178]) (authenticated bits=0) (User authenticated as tlyu@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id w0B3nipo010555; Wed, 10 Jan 2018 22:49:45 -0500 From: Taylor Yu To: iesg@ietf.org, secdir@ietf.org, draft-ietf-pce-pcep-exp-codepoints.all@ietf.org Date: Thu, 11 Jan 2018 03:49:44 +0000 Message-ID: Lines: 20 MIME-Version: 1.0 Content-Type: text/plain X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFjrBIsWRmVeSWpSXmKPExsUixCmqrXv7XliUQf96VYv1PTuZLWb8mchs 8WHhQxYHZo8lS34yBTBGcdmkpOZklqUW6dslcGW03JzPXHCUveLS8g2MDYxz2LoYOTkkBEwk DrZ9BbK5OIQEFjNJdK3bDeVsZJSYurwDyvnGKPFqzVbWLkYODjYBOYnLt4JBukUEYiT+vO9i B7GFBewl9v34yQRiswioSryZMA0szitgIzHj70wWEJtHgFNi0e95bBBxQYmTM5+AxZkFJCQO vnjBPIGRZxaS1CwkqQWMTKsYZVNyq3RzEzNzilOTdYuTE/PyUot0DfVyM0v0UlNKNzGCA0aS ZwfjmTdehxgFOBiVeHgZhcOihFgTy4orcw8xSnIwKYnyBnKGRgnxJeWnVGYkFmfEF5XmpBYf YpTgYFYS4V0cCFTOm5JYWZValA+TkuZgURLndTfRjhISSE8sSc1OTS1ILYLJynBwKEnwPr4L 1ChYlJqeWpGWmVOCkGbi4AQZzgM0PBqkhre4IDG3ODMdIn+K0ZKjbeWTNmaOGy9eA8lpy960 MQux5OXnpUqJ8+4GaRAAacgozYObCUoAiz6v3/SKURzoRWHeRSBVPMDkATf1FdBCJqCF5zeG giwsSURISTUwOi1Iqbi33OxByJWFh9RP/L+apZLSIluXOdnbo6lZ7FHrki1Z0U/27ZuwuJNb mrPVaf5SZeYPPIYWclyXOnx4Bfg0b/xnVnhh6dNkcUWSx2vVigQf7zuHtaL2z16S8P3X5c2c dbOcMxcfnfAnI9JsDwe/dnl7cbJO1gyrh6zcZ37+Odzget1ciaU4I9FQi7moOBEAclvhzdsC AAA= Archived-At: Subject: [secdir] secdir review of draft-ietf-pce-pcep-exp-codepoints-04 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Jan 2018 03:49:51 -0000 I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just like any other last call comments. Summary: ready The security considerations section seems reasonable. The warning about receiving conflicting experimental codepoints from another system seems a little out of place if this were a protocol exposed to the Internet at large. (An implementation should in general handle all unexpected inputs, accidental or malicious, in a way to avoid harmful consequences.) On the other hand, like many routing-related protocols, PCEP doesn't seem to have very strong integrity or authentication properties and instead relies on filtering, physical measures, or lower layers such as TCP-AO. Best regards, -Taylor From nobody Thu Jan 11 07:10:52 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DC45912420B; Thu, 11 Jan 2018 07:10:47 -0800 (PST) X-Quarantine-ID: X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER SECTION, Duplicate header field: "MIME-Version" X-Spam-Flag: NO X-Spam-Score: -1.91 X-Spam-Level: X-Spam-Status: No, score=-1.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id leBp9rThIXgR; Thu, 11 Jan 2018 07:10:46 -0800 (PST) Received: from turing.pensive.org (turing.pensive.org [99.111.97.161]) by ietfa.amsl.com (Postfix) with ESMTP id 5A4751204DA; Thu, 11 Jan 2018 07:10:46 -0800 (PST) Received: from [99.111.97.136] (99.111.97.161) by turing.pensive.org with ESMTP (EIMS X 3.3.9); Thu, 11 Jan 2018 07:11:19 -0800 Mime-Version: 1.0 Message-Id: In-Reply-To: References: X-Mailer: Eudora for Mac OS X Date: Thu, 11 Jan 2018 07:10:43 -0800 To: Taylor Yu , iesg@ietf.org, secdir@ietf.org, draft-ietf-slim-negotiating-human-language.all@ietf.org From: Randall Gellens Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" ; format="flowed" Archived-At: Subject: Re: [secdir] secdir review of draft-ietf-slim-negotiating-human-language-22 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Jan 2018 15:10:48 -0000 At 3:26 AM +0000 1/11/18, Taylor Yu wrote: > I have reviewed this document as part of the security directorate's > ongoing effort to review all IETF documents being processed by the > IESG. These comments were written primarily for the benefit of the > security area directors. Document editors and WG chairs should treat > these comments just like any other last call comments. > > Summary: ready with minor issues > > The security considerations section seems mostly reasonable. The > emergency services use case vaguely bothered me in ways I couldn't quite > articulate at first, but I think Alissa Cooper's ballot comment about > denying emergency services by manipulating these attributes captures > most of the essence. > > I would add for that these new language tags, integrity seems to be a > stronger requirement than confidentiality, at least in the emergency > calling use case. Hi Taylor, Thanks for your review. In response to Alissa's comments, I reworded the Security Considerations section to read: The Security Considerations of BCP 47 [RFC5646] apply here. An attacker with the ability to modify signaling could prevent a call from succeeding by altering any of several crucial elements, including the 'hlang-send' or 'hlang-recv' values. RFC 5069 [RFC5069] discusses such threats. Use of TLS or IPSec can protect against such threats. Emergency calls are of particular concern; RFC 6881 [RFC6881], which is specific to emergency calls, mandates use of TLS or IPSec (in ED-57/SP-30). I think this also addresses your concern regarding integrity, as it specifically calls out "modification" as a principal threat. --Randall -- Randall Gellens Opinions are personal; facts are suspect; I speak for myself only -------------- Randomly selected tag: --------------- Substitute "damn" every time you're inclined to write "very"; your editor will delete it and the writing will be just as it should be. --William Allen White (famed Kansas newspaper editor) From nobody Thu Jan 11 08:22:09 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 441F312D860 for ; Thu, 11 Jan 2018 08:22:08 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5viMkOne5t8U for ; Thu, 11 Jan 2018 08:22:06 -0800 (PST) Received: from mail-pg0-x22b.google.com (mail-pg0-x22b.google.com [IPv6:2607:f8b0:400e:c05::22b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5858E1275FD for ; Thu, 11 Jan 2018 08:22:06 -0800 (PST) Received: by mail-pg0-x22b.google.com with SMTP id 136so1938366pgd.8 for ; Thu, 11 Jan 2018 08:22:06 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=jme06pQvW0Y2gZQ88wUQ7vyFnKYqRRBoGtbhZg4948A=; b=NmMBVBBn7mjSylVy/S0OcCFn/VcDDbhpOHPaHm4SRzL/CtJ5fALlT3aKWRWp6m4Iaq Lj2ktEnVkzdpHfS5/cfL+ZMCyX0FAW83eq9FTKhcffxHz5GaN1yHWhZiTeiTiaYhmCgI /xw/0fbBpZL7t2ic+Iqru1S3MuEJm0R8xm7scThqZXf5MWEv8FeqdMPR63TOhelwh0lK /4DHExVbXFGfvmsZ3mlTMRV1WWWguQshDseZm9I/uPj03/jI9jkgNcon5J0+QEujGnQv BiE3fDTyUAwXt9XL+ErW0jJfn/vFlccBniH9M4/Yl4kqL6zuFi86Uzs9U2DfcUdsgpyM QYlA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=jme06pQvW0Y2gZQ88wUQ7vyFnKYqRRBoGtbhZg4948A=; b=lagXtkV3qMCYRKxfwsKARdY/6gbn1zrvh03B4Kn63ma+fuHKlSHjQQfrkgT7Ynx6Iw 9GnvaSmB7rniBRzRAKr4yjf7Hyr12o9ZLKPWKT7PYZG4UVQWKHt4DwJJe/eLFHp+HGYc i1WyLKAtP4anFNXl9OZNLA6IjtVXXpmdg+ytLD56twmKXNR754Ri0QDM9gWg5vlS77V0 CRniptYHMVIdWfuaD30jAMTc+alHNSWOyh4XfYICfB3PkoxiHEhoxlCku/Qq8lqoeKaL EmNGe7QrcFGpUgWMUjtYmmyODIYs4aXM3CGwsBG96yhIe/EnzJQo/OP5rRaXJk/75Wd/ +Qdw== X-Gm-Message-State: AKGB3mLcLe26w7Ain8GZ+ux3Dux+1JxeMdr8qZTBe1WQifyBi5Aj2DEr XgYS/Wh4leMZzYiPcIbmgZRvJSwaorh02B+yVLpYZg== X-Google-Smtp-Source: ACJfBovPrvCzI6iE6Vv7uRpv7DnGMxxbb8q+lAF6q4PKi/zDJkuUzvQvFe7h2CCmn2ZKuCWvfF8p55OX2buhkDUq+Ic= X-Received: by 10.84.251.135 with SMTP id w7mr22955633pll.305.1515687725925; Thu, 11 Jan 2018 08:22:05 -0800 (PST) MIME-Version: 1.0 Received: by 10.100.186.208 with HTTP; Thu, 11 Jan 2018 08:21:25 -0800 (PST) In-Reply-To: References: From: Kathleen Moriarty Date: Thu, 11 Jan 2018 11:21:25 -0500 Message-ID: To: Russ Housley Cc: IETF SecDir Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Archived-At: Subject: Re: [secdir] YANG Reviews X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Jan 2018 16:22:08 -0000 Hello, As it turns out, there is a page: https://www.ietf.org/iesg/directorate/yang-doctors.html If anyone has comments on the bis draft with current security considerations template, please provide them to the WG. Here is the link again for your convenience: https://tools.ietf.org/html/draft-ietf-netmod-rfc6087bis-10#page-52 Thank you! On Tue, Jan 9, 2018 at 2:15 PM, Kathleen Moriarty wrote: > Hi Russ, > > Sent from my mobile device > >> On Jan 9, 2018, at 1:46 PM, Russ Housley wrote: >> >> For MIB modules, we came up with a short list of things or the SecDir Re= viewer to do. This is a quote from an email message in 2007: >> >>> The job of the security reviewers, then, is three-fold: first, to >>> verify the existence of the boilerplate; second, to verify the adequacy >>> of the explanations given for particular items; third -- and this is >>> the hardest -- to scan the document to see if other items should have >>> been identified as sensitive but aren't. > > The guidance is very similar. >> >> The real guidance appears here: http://www.ops.ietf.org/mib-security.htm= l >> >> It would be very helpful if we can come up with an equivalent yang-secur= ity.html document. >> > We can work with Benoit &Warren as it=E2=80=99s better for those writing = the drafts to see it first, so I think the home should be the same. > > Best, > Kathleen > >> Russ >> >> >>> On Jan 8, 2018, at 4:43 PM, Kathleen Moriarty wrote: >>> >>> Hello, >>> >>> We will be seeing many YANG module reviews come through, please don't >>> let page counts scare you on these. One of the main things to look >>> for is that they used the Security Considerations template and filled >>> it out, catching any data nodes that need to be enumerated in the >>> considerations. >>> >>> Templates like this tend to get updated every time there's a new >>> SecAD, :-) . As such, it'll likely be updated again in a few months. >>> Here's the draft with the current template. Have a look so you know >>> key things to look for (transport security is called out and >>> subtrees/data nodes of concern should be listed out). Sometimes more >>> is needed specific to the draft, but often times, this covers it. >>> >>> https://tools.ietf.org/html/draft-ietf-netmod-rfc6087bis-10#page-52 >>> >>> Thanks again for all your reviews, it is a tremendous help to us! >>> >>> -- >>> >>> Best regards, >>> Kathleen >> --=20 Best regards, Kathleen From nobody Thu Jan 11 08:52:42 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 95C2012D811 for ; Thu, 11 Jan 2018 08:52:40 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9aaRcdpUe4_o for ; Thu, 11 Jan 2018 08:52:38 -0800 (PST) Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1896B12D7F5 for ; Thu, 11 Jan 2018 08:52:38 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id 72EAA300A01 for ; Thu, 11 Jan 2018 11:52:37 -0500 (EST) X-Virus-Scanned: amavisd-new at mail.smeinc.net Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id HO02Aj2PLuD7 for ; Thu, 11 Jan 2018 11:52:36 -0500 (EST) Received: from a860b60074bd.home (pool-108-45-101-150.washdc.fios.verizon.net [108.45.101.150]) by mail.smeinc.net (Postfix) with ESMTPSA id 54AD3300250; Thu, 11 Jan 2018 11:52:36 -0500 (EST) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\)) From: Russ Housley In-Reply-To: Date: Thu, 11 Jan 2018 11:52:44 -0500 Cc: IETF SecDir Content-Transfer-Encoding: quoted-printable Message-Id: References: To: Kathleen Moriarty X-Mailer: Apple Mail (2.3273) Archived-At: Subject: Re: [secdir] YANG Reviews X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Jan 2018 16:52:40 -0000 https://trac.ietf.org/trac/ops/wiki/yang-security-guidelines This is exactly what a SecDir reviewer will need. Awesome. Russ > On Jan 11, 2018, at 11:21 AM, Kathleen Moriarty = wrote: >=20 > Hello, >=20 > As it turns out, there is a page: >=20 > https://www.ietf.org/iesg/directorate/yang-doctors.html >=20 > If anyone has comments on the bis draft with current security > considerations template, please provide them to the WG. Here is the > link again for your convenience: > https://tools.ietf.org/html/draft-ietf-netmod-rfc6087bis-10#page-52 >=20 > Thank you! >=20 > On Tue, Jan 9, 2018 at 2:15 PM, Kathleen Moriarty > wrote: >> Hi Russ, >>=20 >> Sent from my mobile device >>=20 >>> On Jan 9, 2018, at 1:46 PM, Russ Housley = wrote: >>>=20 >>> For MIB modules, we came up with a short list of things or the = SecDir Reviewer to do. This is a quote from an email message in 2007: >>>=20 >>>> The job of the security reviewers, then, is three-fold: first, to >>>> verify the existence of the boilerplate; second, to verify the = adequacy >>>> of the explanations given for particular items; third -- and this = is >>>> the hardest -- to scan the document to see if other items should = have >>>> been identified as sensitive but aren't. >>=20 >> The guidance is very similar. >>>=20 >>> The real guidance appears here: = http://www.ops.ietf.org/mib-security.html >>>=20 >>> It would be very helpful if we can come up with an equivalent = yang-security.html document. >>>=20 >> We can work with Benoit &Warren as it=E2=80=99s better for those = writing the drafts to see it first, so I think the home should be the = same. >>=20 >> Best, >> Kathleen >>=20 >>> Russ >>>=20 >>>=20 >>>> On Jan 8, 2018, at 4:43 PM, Kathleen Moriarty = wrote: >>>>=20 >>>> Hello, >>>>=20 >>>> We will be seeing many YANG module reviews come through, please = don't >>>> let page counts scare you on these. One of the main things to look >>>> for is that they used the Security Considerations template and = filled >>>> it out, catching any data nodes that need to be enumerated in the >>>> considerations. >>>>=20 >>>> Templates like this tend to get updated every time there's a new >>>> SecAD, :-) . As such, it'll likely be updated again in a few = months. >>>> Here's the draft with the current template. Have a look so you = know >>>> key things to look for (transport security is called out and >>>> subtrees/data nodes of concern should be listed out). Sometimes = more >>>> is needed specific to the draft, but often times, this covers it. >>>>=20 >>>> https://tools.ietf.org/html/draft-ietf-netmod-rfc6087bis-10#page-52 >>>>=20 >>>> Thanks again for all your reviews, it is a tremendous help to us! >>>>=20 >>>> -- >>>>=20 >>>> Best regards, >>>> Kathleen >>>=20 >=20 >=20 >=20 > --=20 >=20 > Best regards, > Kathleen From nobody Thu Jan 11 10:42:33 2018 Return-Path: X-Original-To: secdir@ietf.org Delivered-To: secdir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id E95B6126C23; Mon, 8 Jan 2018 06:01:00 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1515420061; bh=C4D8Wm9wK2typYISCUx0eDxLOb5wyuZIULwPZHpQVKY=; h=To:From:Date:Subject:List-Id:List-Unsubscribe:List-Archive: List-Post:List-Help:List-Subscribe; b=d2sBNpubBwDVdeOixOzeGu4Mua1/1LnIRu8eZwDKMaQRDC45vN5rS1vi8Z5i28Fzv Cgm8Z8H9rbZRZRNeioFD+j7BPZ1AO+JAZAG47YA1KgiyhqoyT4mgMvctWAFWxsuWWp 8teeW1wWg//7cURRIHs4amHqKrPIm2S9+4oxFVCo= X-Original-To: new-work@ietfa.amsl.com Delivered-To: new-work@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5650E127978 for ; Mon, 8 Jan 2018 06:00:59 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.21 X-Spam-Level: X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HK_RANDOM_ENVFROM=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hcrKDjVT5Y3f for ; Mon, 8 Jan 2018 06:00:57 -0800 (PST) Received: from raoul.w3.org (raoul.w3.org [128.30.52.128]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7878A126C25 for ; Mon, 8 Jan 2018 06:00:57 -0800 (PST) Received: from moon.w3.org ([128.30.55.110] helo=XueyuandeMacBook-Pro.local) by raoul.w3.org with esmtpsa (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.84_2) (envelope-from ) id 1eYXyu-0004ie-32 for new-work@ietf.org; Mon, 08 Jan 2018 14:00:52 +0000 To: new-work@ietf.org From: Xueyuan Message-ID: <7a209a0f-8513-d622-43cc-86657b3dccec@w3.org> Date: Mon, 8 Jan 2018 22:00:48 +0800 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:52.0) Gecko/20100101 Thunderbird/52.5.0 MIME-Version: 1.0 Content-Language: en-US Archived-At: X-BeenThere: new-work@ietf.org X-Mailman-Version: 2.1.22 Precedence: list Content-Transfer-Encoding: base64 Content-Type: text/plain; charset="utf-8"; Format="flowed" Errors-To: new-work-bounces@ietf.org Sender: "new-work" Archived-At: X-Mailman-Approved-At: Thu, 11 Jan 2018 10:42:31 -0800 Subject: [secdir] [new-work] Proposed W3C Charter: Web Payments Working Group (until 2018-02-05) X-BeenThere: secdir@ietf.org List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Jan 2018 14:01:01 -0000 CkhlbGxvLAoKVG9kYXkgVzNDIEFkdmlzb3J5IENvbW1pdHRlZSBSZXByZXNlbnRhdGl2ZXMgcmVj ZWl2ZWQgYSBQcm9wb3NhbAp0byByZXZpZXcgYSBkcmFmdCBjaGFydGVyIGZvciB0aGUgV2ViIFBh eW1lbnRzIFdvcmtpbmcgR3JvdXA6CiDCoCBodHRwczovL3czYy5naXRodWIuaW8vd2VicGF5bWVu dHMvcHJvcG9zYWxzL2NoYXJ0ZXItMjAxNwoKQXMgcGFydCBvZiBlbnN1cmluZyB0aGF0IHRoZSBj b21tdW5pdHkgaXMgYXdhcmUgb2YgcHJvcG9zZWQgd29yawphdCBXM0MsIHRoaXMgZHJhZnQgY2hh cnRlciBpcyBwdWJsaWMgZHVyaW5nIHRoZSBBZHZpc29yeQpDb21taXR0ZWUgcmV2aWV3IHBlcmlv ZC4KClczQyBpbnZpdGVzIHB1YmxpYyBjb21tZW50cyB0aHJvdWdoIDIwMTgtMDItMDUgb24gdGhl CnByb3Bvc2VkIGNoYXJ0ZXIuIFBsZWFzZSBzZW5kIGNvbW1lbnRzIHRvCnB1YmxpYy1uZXctd29y a0B3My5vcmcsIHdoaWNoIGhhcyBhIHB1YmxpYyBhcmNoaXZlOgogwqAgaHR0cDovL2xpc3RzLncz Lm9yZy9BcmNoaXZlcy9QdWJsaWMvcHVibGljLW5ldy13b3JrLwoKT3RoZXIgdGhhbiBjb21tZW50 cyBzZW50IGluIGZvcm1hbCByZXNwb25zZXMgYnkgVzNDIEFkdmlzb3J5CkNvbW1pdHRlZSBSZXBy ZXNlbnRhdGl2ZXMsIFczQyBjYW5ub3QgZ3VhcmFudGVlIGEgcmVzcG9uc2UgdG8KY29tbWVudHMu IElmIHlvdSB3b3JrIGZvciBhIFczQyBNZW1iZXIgWzFdLCBwbGVhc2UgY29vcmRpbmF0ZQp5b3Vy IGNvbW1lbnRzIHdpdGggeW91ciBBZHZpc29yeSBDb21taXR0ZWUgUmVwcmVzZW50YXRpdmUuIEZv cgpleGFtcGxlLCB5b3UgbWF5IHdpc2ggdG8gbWFrZSBwdWJsaWMgY29tbWVudHMgdmlhIHRoaXMg bGlzdCBhbmQKaGF2ZSB5b3VyIEFkdmlzb3J5IENvbW1pdHRlZSBSZXByZXNlbnRhdGl2ZSByZWZl ciB0byBpdCBmcm9tIGhpcwpvciBoZXIgZm9ybWFsIHJldmlldyBjb21tZW50cy4KCklmIHlvdSBz aG91bGQgaGF2ZSBhbnkgcXVlc3Rpb25zIG9yIG5lZWQgZnVydGhlciBpbmZvcm1hdGlvbiwgcGxl YXNlCmNvbnRhY3QgSWFuIEphY29icywgV2ViIFBheW1lbnRzIFdHIFRlYW0gQ29udGFjdCA8aWpA dzMub3JnPi4KClRoYW5rIHlvdSwKClh1ZXl1YW4gSmlhLCBXM0MgTWFya2V0aW5nICYgQ29tbXVu aWNhdGlvbnMKClsxXSBodHRwOi8vd3d3LnczLm9yZy9Db25zb3J0aXVtL01lbWJlci9MaXN0Cgpf X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXwpuZXctd29yayBt YWlsaW5nIGxpc3QKbmV3LXdvcmtAaWV0Zi5vcmcKaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1h bi9saXN0aW5mby9uZXctd29yawo= From nobody Thu Jan 11 12:14:38 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 11C5F12EC3D; Thu, 11 Jan 2018 12:14:35 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.21 X-Spam-Level: X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oOfXuYX_tX3a; Thu, 11 Jan 2018 12:14:33 -0800 (PST) Received: from dmz-mailsec-scanner-1.mit.edu (dmz-mailsec-scanner-1.mit.edu [18.9.25.12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EA3DC12EC3C; Thu, 11 Jan 2018 12:14:32 -0800 (PST) X-AuditID: 1209190c-1ffff70000001268-d7-5a57c5a7fda1 Received: from mailhub-auth-1.mit.edu ( [18.9.21.35]) (using TLS with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by dmz-mailsec-scanner-1.mit.edu (Symantec Messaging Gateway) with SMTP id FE.93.04712.7A5C75A5; Thu, 11 Jan 2018 15:14:31 -0500 (EST) Received: from outgoing.mit.edu (OUTGOING-AUTH-1.MIT.EDU [18.9.28.11]) by mailhub-auth-1.mit.edu (8.13.8/8.9.2) with ESMTP id w0BKEUCN030830; Thu, 11 Jan 2018 15:14:31 -0500 Received: from localhost (nyc-02.triskelion.com [162.243.175.178]) (authenticated bits=0) (User authenticated as tlyu@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id w0BKESB0019421; Thu, 11 Jan 2018 15:14:29 -0500 From: Taylor Yu To: Randall Gellens Cc: , , References: Date: Thu, 11 Jan 2018 20:14:28 +0000 In-Reply-To: (Randall Gellens's message of "Thu\, 11 Jan 2018 07\:10\:43 -0800") Message-ID: Lines: 22 MIME-Version: 1.0 Content-Type: text/plain X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFnrPIsWRmVeSWpSXmKPExsUixCmqrLv8aHiUwfkjZhYrzmlazPgzkdni +/MuRosPCx+yOLB4LFnyk8lj653HLAFMUVw2Kak5mWWpRfp2CVwZbz/1MBfMY69Ycns3WwPj HdYuRk4OCQETiX+TH7J3MXJxCAksZpLY92ctC4SzkVHizPobUJlvjBKv+lYAZTg42ATkJC7f CgbpFhHQl/j3+yobiM0skCWxs28mE4gtLOAt8fvYYrC4kICxxJ3W6YwgNouAqsTs8zfA4pwC VRLvV11mB7F5BWwktnx8A3YRjwCnRO/hqawQcUGJkzOfsEDMl5A4+OIF8wRG/llIUrOQpBYw Mq1ilE3JrdLNTczMKU5N1i1OTszLSy3SNdTLzSzRS00p3cQIDkVJnh2MZ954HWIU4GBU4uF9 kBseJcSaWFZcmXuIUZKDSUmUd086UIgvKT+lMiOxOCO+qDQntfgQowQHs5IIb003UI43JbGy KrUoHyYlzcGiJM7rbqIdJSSQnliSmp2aWpBaBJOV4eBQkuCVOwLUKFiUmp5akZaZU4KQZuLg BBnOAzT8+2GQ4cUFibnFmekQ+VOMxhxtK5+0MXPcePG6jVmIJS8/L1VKnLcRpFQApDSjNA9u GiidLPq8ftMrRnGg54R55UGW8gBTEdy8V0CrmIBWnd8YCrKqJBEhJdXA6FXl8WjrzJ+VETsP 23wq2bjgz4vcsprpXrs1Fz/f8cniTs22prifaX/4vJ7/Er41JSN15xoOGxvJotgSdeubE904 tBf+sY3QWLVHYrK0ra+BGk/k4yNGeRsvHNH5Wn9Q4+Vflb9CU0UOvJw13UHgcYmgh6WFyZI5 twwKGcV5z539ub5oJcM1HiWW4oxEQy3mouJEAKukdSUCAwAA Archived-At: Subject: Re: [secdir] secdir review of draft-ietf-slim-negotiating-human-language-22 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Jan 2018 20:14:35 -0000 Randall Gellens writes: > Thanks for your review. In response to Alissa's comments, I reworded > the Security Considerations section to read: > > The Security Considerations of BCP 47 [RFC5646] apply here. An > attacker with the ability to modify signaling could prevent a call > from succeeding by altering any of several crucial elements, > including the 'hlang-send' or 'hlang-recv' values. RFC 5069 > [RFC5069] discusses such threats. Use of TLS or IPSec can protect > against such threats. Emergency calls are of particular concern; RFC > 6881 [RFC6881], which is specific to emergency calls, mandates use of > TLS or IPSec (in ED-57/SP-30). > > I think this also addresses your concern regarding integrity, as it > specifically calls out "modification" as a principal threat. Hi Randall, Thanks. This new text seems reasonable. -Taylor From nobody Thu Jan 11 14:59:12 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F18C812EC5B for ; Thu, 11 Jan 2018 14:59:10 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.21 X-Spam-Level: X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ezOhzZhKxfav for ; Thu, 11 Jan 2018 14:59:08 -0800 (PST) Received: from dmz-mailsec-scanner-7.mit.edu (dmz-mailsec-scanner-7.mit.edu [18.7.68.36]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BEF3E12EC5C for ; Thu, 11 Jan 2018 14:59:07 -0800 (PST) X-AuditID: 12074424-5a1ff70000004eb3-d5-5a57ec37e9ca Received: from mailhub-auth-2.mit.edu ( [18.7.62.36]) (using TLS with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by dmz-mailsec-scanner-7.mit.edu (Symantec Messaging Gateway) with SMTP id 6E.FC.20147.83CE75A5; Thu, 11 Jan 2018 17:59:05 -0500 (EST) Received: from outgoing.mit.edu (OUTGOING-AUTH-1.MIT.EDU [18.9.28.11]) by mailhub-auth-2.mit.edu (8.13.8/8.9.2) with ESMTP id w0BMwx4s005136; Thu, 11 Jan 2018 17:59:01 -0500 Received: from kduck.kaduk.org (24-107-191-124.dhcp.stls.mo.charter.com [24.107.191.124]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id w0BMwuk3014941 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Thu, 11 Jan 2018 17:58:58 -0500 Date: Thu, 11 Jan 2018 16:58:56 -0600 From: Benjamin Kaduk To: Kathleen Moriarty Cc: Russ Housley , IETF SecDir Message-ID: <20180111225855.GQ72574@kduck.kaduk.org> References: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.9.1 (2017-09-22) X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFmplleLIzCtJLcpLzFFi42IRYrdT0bV8Ex5l8HWxssWrFzfZLRp25lt8 WPiQxYHZY+esu+weS5b8ZPJYdecLawBzFJdNSmpOZllqkb5dAlfGsuvz2Au+MlV83/KRtYFx M1MXIyeHhICJxLUni9hAbCGBxUwS6+eEdzFyAdkbGSW+H/jDBuFcZZI48HYWM0gVi4CqxM7l O1lBbDYBFYmG7stgcREBC4k1zd/AJjELuEm8nPQAyObgEBZQkviwuBQkzAu07NHW9ywQMxuY JJ70XGSESAhKnJz5hAWiV0vixr+XTCC9zALSEsv/cYCEOQUCJaa/ewJWLiqgLLG37xD7BEaB WUi6ZyHpnoXQvYCReRWjbEpulW5uYmZOcWqybnFyYl5eapGuuV5uZoleakrpJkZw2Lqo7GDs 7vE+xCjAwajEw/sgNzxKiDWxrLgy9xCjJAeTkijvnnSgEF9SfkplRmJxRnxRaU5q8SFGCQ5m JRHemm6gHG9KYmVValE+TEqag0VJnNfDRDtKSCA9sSQ1OzW1ILUIJivDwaEkwSv3GqhRsCg1 PbUiLTOnBCHNxMEJMpwHaPiHVyDDiwsSc4sz0yHypxiNOdpWPmlj5rjx4nUbsxBLXn5eqpQ4 7zWQUgGQ0ozSPLhpoNQjkb2/5hWjONBzwryGIEt5gGkLbt4roFVMQKvObwwFWVWSiJCSamAs mLKlfIv44ny9ujersk7Prk+9tmPx8cBv/6X2HNmxwrzC/j9P1YLXjl89WxlOMplPOPCbT4z/ etbnKzkzmn7WRKdFCs+1vWrVxfbw8za3X9P9zqhU8uqU9bn2ycr6LdH4H3JX5JuBwF2X7xOU OHfrCr83erxEuKurukKNn3XahNmW246YXlyixFKckWioxVxUnAgA9NjQ4hgDAAA= Archived-At: Subject: Re: [secdir] YANG Reviews X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Jan 2018 22:59:11 -0000 On Thu, Jan 11, 2018 at 11:21:25AM -0500, Kathleen Moriarty wrote: > Hello, > > As it turns out, there is a page: > > https://www.ietf.org/iesg/directorate/yang-doctors.html Was this a casualty of the "new IETF website broke old links"? Or was the intended link actually https://trac.ietf.org/trac/ops/wiki/yang-security-guidelines as appeared later? -Ben From nobody Thu Jan 11 15:54:31 2018 Return-Path: X-Original-To: secdir@ietf.org Delivered-To: secdir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id ACA831205F0 for ; Thu, 11 Jan 2018 15:54:25 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit From: Tero Kivinen To: X-Test-IDTracker: no X-IETF-IDTracker: 6.68.3 Auto-Submitted: auto-generated Precedence: bulk Reply-to: secdir-secratary@mit.edu Message-ID: <151571486570.18699.9988092722185492567.idtracker@ietfa.amsl.com> Date: Thu, 11 Jan 2018 15:54:25 -0800 Archived-At: Subject: [secdir] Assignments X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Jan 2018 23:54:26 -0000 Review instructions and related resources are at: http://tools.ietf.org/area/sec/trac/wiki/SecDirReview For telechat 2018-01-11 Reviewer LC end Draft Shaun Cooley 2018-01-09 draft-ietf-netmod-rfc7223bis-03 For telechat 2018-01-25 Reviewer LC end Draft Tim Polk 2018-01-16 draft-ietf-lwig-energy-efficient-08 Kyle Rose 2018-01-24 draft-ietf-dhc-rfc3315bis-10 Carl Wallace 2018-01-15 draft-ietf-netmod-rfc8022bis-08 Brian Weis 2018-01-16 draft-ietf-nfsv4-flex-files-15 Paul Wouters 2018-01-16 draft-ietf-lpwan-overview-07 Paul Wouters 2018-01-11 draft-ietf-ospf-ospfv3-lsa-extend-20 Last calls: Reviewer LC end Draft John Bradley None draft-ietf-acme-acme-09 Shaun Cooley 2018-01-11 draft-ietf-grow-bgp-gshut-13 Russ Mundy 2017-09-14 draft-spinosa-urn-lex-12 Early review requests: Reviewer Due Draft Ólafur Guðmundsson 2018-01-09 draft-ietf-opsawg-nat-yang-09 Next in the reviewer rotation: Liang Xia Tom Yu Dacheng Zhang Derek Atkins John Bradley Shaun Cooley Alan DeKok Donald Eastlake Shawn Emery Stephen Farrell From nobody Fri Jan 12 10:45:44 2018 Return-Path: X-Original-To: secdir@ietf.org Delivered-To: secdir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id CDC7412D775; Fri, 12 Jan 2018 10:45:42 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit From: Brian Weis To: Cc: nfsv4@ietf.org, draft-ietf-nfsv4-flex-files.all@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.68.3 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <151578274278.18715.11694935076324562133@ietfa.amsl.com> Date: Fri, 12 Jan 2018 10:45:42 -0800 Archived-At: Subject: [secdir] Secdir last call review of draft-ietf-nfsv4-flex-files-15 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 12 Jan 2018 18:45:43 -0000 Reviewer: Brian Weis Review result: Has Issues I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just like any other last call comments. This document defines the Parallel Network File System (pNFS), which allows a storage system to store the metadata for files onto a metadata server, and data of that file onto a separate storage device. The document focuses on the interaction between the two types of servers, and the requirements of clients using a pNFS system. The document describes two models by which the metadata server and file storage server can communicate. One is a “tight coupling model”, in which the two types of servers directly communicate. In this model the metadata server can ensure that file access control state is synchronized between the two servers, and I believe that level of access control is equivalent to NFS v4.x today. From a security considerations perspective, this is perhaps best summarized in Section 2.2: “With tightly coupled storage devices, the metadata server sets the user and group owners, mode bits, and ACL of the data file to be the same as the metadata file. And the client must authenticate with the storage device and go through the same authorization process it would go through via the metadata server.” The other model is a “loose coupling model”, in which the client is authenticated and authorized by the metadata server, and is given access to the file server through the use credentials. However, there is no direct communications between the metadata server and the file server. The metadata server does not seem to provide a fine grained access control to files on the file server, but instead relies upon the client to enforce a less granular level of access control. The Security Considerations section is well-written and helpful. I do have some suggestions for improving it, and also some questions. (1) Section 2.2: should the “recommended” in the Note be RECOMMENDED? Restricting access control to just superuser have access to the storage device seems like a valuable advice. (2) Section 2.2: The NOTE probably should provide guidance regarding protecting the network connections between the metadata server and the file server. For example, something like: “Communications between the metadata server and file server need to secured. If there is not adequate physical security (i.e., the servers are not co-located in a physically secure area), their communications MUST be protected for confidentiality (e.g., using TLS or IPsec).” (3) From the description of synthetic uids/gids in Section 2.2, I believe that the full range of file permissions (e.g., owner r/w/x) is honored in the tightly coupled model, but are restricted in the loosely coupled model to “owner r/w”, “group r”. If that is correct, I think the security considerations should explicitly mention that the effect of access permissions is reduced on the file server files. (4) Section 2.2. In this phrase “it may be assigned some random synthetic uid/gid to deny access”, would a better word for “random” be “unused” or “unpredictable”? Also what is the security value intended by the use of a “random” value for synthetic uids/gids? (5) In the “loose coupling model” file access actually enforced by the client, which presumably can be manipulated by an evil user. This is clearly stated n Section 2.2: “ The client is thus solely responsible for enforcing file permissions in a loosely coupled model.” Also, Section 2.2.1 mentions “a SETATTR would be sent to the storage device to set the owner and group of the data file”, and since here is no control protocol between the metadata server and the file server so I assume it is sent by the client. Put another way, it seems as if any client that has credentials allowing it to access to the file server can access any file on the file system if it is chooses to do so (e.g.., if it is a malicious client). Is that correct? Unless I’m mistaken, this is a serious reduction of actual security from NFS 4.x, and also from the tight coupling model. This should be clearly stated in the security considerations section, so that protocol adopters and users understand the additional risks of the loose coupling model. For this reason, I've marked the review with "Has Issues" rather than "Has Nits". From nobody Fri Jan 12 11:41:34 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 45A9312AF83 for ; Fri, 12 Jan 2018 11:41:32 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.701 X-Spam-Level: X-Spam-Status: No, score=-2.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=primarydata.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cTrNcRKabuhw for ; Fri, 12 Jan 2018 11:41:29 -0800 (PST) Received: from us-smtp-delivery-194.mimecast.com (us-smtp-delivery-194.mimecast.com [63.128.21.194]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1C93412D86C for ; Fri, 12 Jan 2018 11:41:28 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=primarydata.com; s=mimecast20170802; t=1515786088; h=from:subject:date:message-id:to:cc:mime-version:content-type:content-transfer-encoding:in-reply-to:references; bh=Dh1TBphU1DI48a+fvFo5igtmTy82j7ZMZIDZBrRcWOQ=; b=Su2SrXecUsr1ceKR5SYwC3ua2u2Onf9EcrYtPNpSuk3X/kAalBj4XuGIl3/113i8ogKjPPbX/Sf9PzLfqsr/ahic/Rb6NZA1MgIS8DIsCjFNQstQlSgAvGky8+h5kH6SsLTDBDoskqZRoiZuzyhueywoRpm3o3OjlSw58bR/eyY= Received: from NAM01-BY2-obe.outbound.protection.outlook.com (mail-by2nam01lp0184.outbound.protection.outlook.com [216.32.181.184]) (Using TLS) by us-smtp-1.mimecast.com with ESMTP id us-mta-144-MfaGvK9HMnStutO9pY3jQQ-1; Fri, 12 Jan 2018 14:41:26 -0500 Received: from BY2PR1101MB1093.namprd11.prod.outlook.com (10.164.166.21) by BY2PR1101MB1095.namprd11.prod.outlook.com (10.164.166.23) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.386.5; Fri, 12 Jan 2018 19:41:22 +0000 Received: from BY2PR1101MB1093.namprd11.prod.outlook.com ([10.164.166.21]) by BY2PR1101MB1093.namprd11.prod.outlook.com ([10.164.166.21]) with mapi id 15.20.0386.008; Fri, 12 Jan 2018 19:41:22 +0000 From: Thomas Haynes To: Brian Weis CC: "secdir@ietf.org" , NFSv4 , "draft-ietf-nfsv4-flex-files.all@ietf.org" Thread-Topic: [nfsv4] Secdir last call review of draft-ietf-nfsv4-flex-files-15 Thread-Index: AQHTi9WQTx5RarnLbUyAVOTsrpXN+aNwovgA Date: Fri, 12 Jan 2018 19:41:22 +0000 Message-ID: <75FDDF9F-C335-4488-9EAE-679DD9727A99@primarydata.com> References: <151578274278.18715.11694935076324562133@ietfa.amsl.com> In-Reply-To: <151578274278.18715.11694935076324562133@ietfa.amsl.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [63.157.6.18] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; BY2PR1101MB1095; 20:EH++GYwna1O5xZNVSNZnd7pDHYgF/DnSR1Smbn24kuQjRB9fH0tBGyuMDrTyUXM+bEUrOtexIkjqdfkiyzBqHPEiJxBh8aHn0Q+1A4I7wff0bchUE3pMZ8KopOnwOnQES+a8iTsiGXg1M5P7Nw9Sgu4VPsTF25/WbEf7ApgsrdM= x-ms-exchange-antispam-srfa-diagnostics: SSOS; x-ms-office365-filtering-correlation-id: 62bcaba0-e1e5-49eb-f20b-08d559f475ce x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020086)(4652020)(7021116)(5600026)(4604075)(3008032)(2017052603307)(7153060)(7193020); SRVR:BY2PR1101MB1095; x-ms-traffictypediagnostic: BY2PR1101MB1095: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(158342451672863)(192374486261705)(95692535739014)(21532816269658); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040470)(2401047)(5005006)(8121501046)(3231023)(944501147)(93006095)(93001095)(3002001)(10201501046)(6041268)(20161123558120)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123562045)(2016111802025)(20161123564045)(20161123560045)(6072148)(6043046)(201708071742011); SRVR:BY2PR1101MB1095; BCL:0; PCL:0; RULEID:(100000803101)(100110400095); SRVR:BY2PR1101MB1095; x-forefront-prvs: 0550778858 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(39380400002)(376002)(39830400003)(346002)(396003)(366004)(189003)(199004)(24454002)(51914003)(229853002)(6306002)(6436002)(230783001)(6916009)(77096006)(6512007)(81156014)(54906003)(2900100001)(105586002)(7736002)(97736004)(8936002)(2950100002)(5660300001)(106356001)(8676002)(6486002)(2906002)(3280700002)(3660700001)(81166006)(305945005)(33656002)(316002)(86362001)(82746002)(66066001)(76176011)(6116002)(99286004)(53936002)(102836004)(4326008)(68736007)(83716003)(14454004)(478600001)(6506007)(3846002)(25786009)(966005)(36756003)(53546011)(59450400001)(6246003)(42262002); DIR:OUT; SFP:1102; SCL:1; SRVR:BY2PR1101MB1095; H:BY2PR1101MB1093.namprd11.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; x-microsoft-antispam-message-info: 0loQyJQyRUPE1MzkJRxRC0MDtXxmCk7t2kx52ITkSVeA0xxXtEa92uWWzplHCV3txs0Wt1z5MEWCdZCsTi5RuA== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-ID: <1F77B76557A5E841B58F61D1F7280B5F@namprd11.prod.outlook.com> MIME-Version: 1.0 X-OriginatorOrg: primarydata.com X-MS-Exchange-CrossTenant-Network-Message-Id: 62bcaba0-e1e5-49eb-f20b-08d559f475ce X-MS-Exchange-CrossTenant-originalarrivaltime: 12 Jan 2018 19:41:22.4932 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 03193ed6-8726-4bb3-a832-18ab0d28adb7 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY2PR1101MB1095 X-MC-Unique: MfaGvK9HMnStutO9pY3jQQ-1 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: base64 Archived-At: Subject: Re: [secdir] [nfsv4] Secdir last call review of draft-ietf-nfsv4-flex-files-15 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 12 Jan 2018 19:41:32 -0000 SGkgQnJpYW4sDQoNClRoYW5rcyBmb3IgdGhlIHJldmlldyAtIGNvbW1lbnRzIGlubGluZS4uDQoN Cj4gT24gSmFuIDEyLCAyMDE4LCBhdCAxMDo0NSBBTSwgQnJpYW4gV2VpcyA8YmV3QGNpc2NvLmNv bT4gd3JvdGU6DQo+IA0KPiBSZXZpZXdlcjogQnJpYW4gV2Vpcw0KPiBSZXZpZXcgcmVzdWx0OiBI YXMgSXNzdWVzDQo+IA0KPiBJIGhhdmUgcmV2aWV3ZWQgdGhpcyBkb2N1bWVudCBhcyBwYXJ0IG9m IHRoZSBzZWN1cml0eSBkaXJlY3RvcmF0ZSdzIG9uZ29pbmcNCj4gZWZmb3J0IHRvIHJldmlldyBh bGwgSUVURiBkb2N1bWVudHMgYmVpbmcgcHJvY2Vzc2VkIGJ5IHRoZSBJRVNHLiBUaGVzZSBjb21t ZW50cw0KPiB3ZXJlIHdyaXR0ZW4gcHJpbWFyaWx5IGZvciB0aGUgYmVuZWZpdCBvZiB0aGUgc2Vj dXJpdHkgYXJlYSBkaXJlY3RvcnMuIERvY3VtZW50DQo+IGVkaXRvcnMgYW5kIFdHIGNoYWlycyBz aG91bGQgdHJlYXQgdGhlc2UgY29tbWVudHMganVzdCBsaWtlIGFueSBvdGhlciBsYXN0IGNhbGwN Cj4gY29tbWVudHMuDQo+IA0KPiBUaGlzIGRvY3VtZW50IGRlZmluZXMgdGhlIFBhcmFsbGVsIE5l dHdvcmsgRmlsZSBTeXN0ZW0gKHBORlMpLCB3aGljaCBhbGxvd3MgYQ0KPiBzdG9yYWdlIHN5c3Rl bSB0byBzdG9yZSB0aGUgbWV0YWRhdGEgZm9yIGZpbGVzIG9udG8gYSBtZXRhZGF0YSBzZXJ2ZXIs IGFuZCBkYXRhDQo+IG9mIHRoYXQgZmlsZSBvbnRvIGEgc2VwYXJhdGUgc3RvcmFnZSBkZXZpY2Uu IFRoZSBkb2N1bWVudCBmb2N1c2VzIG9uIHRoZQ0KPiBpbnRlcmFjdGlvbiBiZXR3ZWVuIHRoZSB0 d28gdHlwZXMgb2Ygc2VydmVycywgYW5kIHRoZSByZXF1aXJlbWVudHMgb2YgY2xpZW50cw0KPiB1 c2luZyBhIHBORlMgc3lzdGVtLg0KPiANCj4gVGhlIGRvY3VtZW50IGRlc2NyaWJlcyB0d28gbW9k ZWxzIGJ5IHdoaWNoIHRoZSBtZXRhZGF0YSBzZXJ2ZXIgYW5kIGZpbGUgc3RvcmFnZQ0KPiBzZXJ2 ZXIgY2FuIGNvbW11bmljYXRlLiBPbmUgaXMgYSDigJx0aWdodCBjb3VwbGluZyBtb2RlbOKAnSwg aW4gd2hpY2ggdGhlIHR3byB0eXBlcw0KPiBvZiBzZXJ2ZXJzIGRpcmVjdGx5IGNvbW11bmljYXRl LiBJbiB0aGlzIG1vZGVsIHRoZSBtZXRhZGF0YSBzZXJ2ZXIgY2FuIGVuc3VyZQ0KPiB0aGF0IGZp bGUgYWNjZXNzIGNvbnRyb2wgc3RhdGUgaXMgc3luY2hyb25pemVkIGJldHdlZW4gdGhlIHR3byBz ZXJ2ZXJzLCBhbmQgSQ0KPiBiZWxpZXZlIHRoYXQgbGV2ZWwgb2YgYWNjZXNzIGNvbnRyb2wgaXMg ZXF1aXZhbGVudCB0byBORlMgdjQueCB0b2RheS4gRnJvbSBhDQo+IHNlY3VyaXR5IGNvbnNpZGVy YXRpb25zIHBlcnNwZWN0aXZlLCB0aGlzIGlzIHBlcmhhcHMgYmVzdCBzdW1tYXJpemVkIGluIFNl Y3Rpb24NCj4gMi4yOg0KPiANCj4gIOKAnFdpdGggdGlnaHRseSBjb3VwbGVkIHN0b3JhZ2UgZGV2 aWNlcywgdGhlIG1ldGFkYXRhIHNlcnZlciBzZXRzIHRoZQ0KPiAgIHVzZXIgYW5kIGdyb3VwIG93 bmVycywgbW9kZSBiaXRzLCBhbmQgQUNMIG9mIHRoZSBkYXRhIGZpbGUgdG8gYmUgdGhlDQo+ICAg c2FtZSBhcyB0aGUgbWV0YWRhdGEgZmlsZS4gIEFuZCB0aGUgY2xpZW50IG11c3QgYXV0aGVudGlj YXRlIHdpdGggdGhlDQo+ICAgc3RvcmFnZSBkZXZpY2UgYW5kIGdvIHRocm91Z2ggdGhlIHNhbWUg YXV0aG9yaXphdGlvbiBwcm9jZXNzIGl0IHdvdWxkDQo+ICAgZ28gdGhyb3VnaCB2aWEgdGhlIG1l dGFkYXRhIHNlcnZlci7igJ0NCj4gDQo+IFRoZSBvdGhlciBtb2RlbCBpcyBhIOKAnGxvb3NlIGNv dXBsaW5nIG1vZGVs4oCdLCBpbiB3aGljaCB0aGUgY2xpZW50IGlzDQo+IGF1dGhlbnRpY2F0ZWQg YW5kIGF1dGhvcml6ZWQgYnkgdGhlIG1ldGFkYXRhIHNlcnZlciwgYW5kIGlzIGdpdmVuIGFjY2Vz cyB0byB0aGUNCj4gZmlsZSBzZXJ2ZXIgdGhyb3VnaCB0aGUgdXNlIGNyZWRlbnRpYWxzLiBIb3dl dmVyLCB0aGVyZSBpcyBubyBkaXJlY3QNCj4gY29tbXVuaWNhdGlvbnMgYmV0d2VlbiB0aGUgbWV0 YWRhdGEgc2VydmVyIGFuZCB0aGUgZmlsZSBzZXJ2ZXIuIFRoZSBtZXRhZGF0YQ0KPiBzZXJ2ZXIg ZG9lcyBub3Qgc2VlbSB0byBwcm92aWRlIGEgZmluZSBncmFpbmVkIGFjY2VzcyBjb250cm9sIHRv IGZpbGVzIG9uIHRoZQ0KPiBmaWxlIHNlcnZlciwgYnV0IGluc3RlYWQgcmVsaWVzIHVwb24gdGhl IGNsaWVudCB0byBlbmZvcmNlIGEgbGVzcyBncmFudWxhcg0KPiBsZXZlbCBvZiBhY2Nlc3MgY29u dHJvbC4NCg0KWzFdIE5vLCB0aGVyZSBpcyBzdGlsbCBkaXJlY3QgY29tbXVuaWNhdGlvbiBiZXR3 ZWVuIHRoZSBtZXRhZGF0YSBzZXJ2ZXIgYW5kIHRoZSBmaWxlIHNlcnZlci4NCg0KVGhlIGRpZmZl cmVuY2UgaXMgdGhhdCBpdCBpcyB2aWEgYSBzdG9yYWdlIHByb3RvY29sLCBpbiB0aGlzIGNhc2Ug TkZTLg0KDQpUaGUgYWNjZXNzIGNvbnRyb2wgaXMgZW5mb3JjZWQgYnkgdGhlIG1ldGFkYXRhIHNl cnZlci4gVGhlIGNsaWVudCBvbmx5IGdldCBhY2Nlc3MNCnRvIHRoZSBmaWxlIGlmIGl0IGNhbiBn ZXQgYSBsYXlvdXQuIFRoZSBsYXlvdXQgY2FuIGVpdGhlciBwcm92aWRlIHJlYWQvd3JpdGUgYWNj ZXNzDQpvciBvbmx5IHJlYWQgYWNjZXNzLg0KDQpUaGUgbWV0YWRhdGEgc2VydmVyIGNhbiByZXZv a2UgdGhhdCBhY2Nlc3MgYXQgYW55IHBvaW50LCBzbyBpdCBpcyBub3QNCmNvcnJlY3QgdG8gc2F5 IHRoYXQgaXQgZGVwZW5kcyBvbiB0aGUgY2xpZW50IHRvIGVuZm9yY2UgYSBsZXNzIGdyYW51bGFy IGxldmVsDQpvZiBhY2Nlc3MgY29udHJvbC4NCg0KPiANCj4gVGhlIFNlY3VyaXR5IENvbnNpZGVy YXRpb25zIHNlY3Rpb24gaXMgd2VsbC13cml0dGVuIGFuZCBoZWxwZnVsLiBJIGRvIGhhdmUgc29t ZQ0KPiBzdWdnZXN0aW9ucyBmb3IgaW1wcm92aW5nIGl0LCAgYW5kIGFsc28gc29tZSBxdWVzdGlv bnMuDQo+IA0KPiAoMSkgU2VjdGlvbiAyLjI6IHNob3VsZCB0aGUg4oCccmVjb21tZW5kZWTigJ0g aW4gdGhlIE5vdGUgYmUgUkVDT01NRU5ERUQ/DQo+IFJlc3RyaWN0aW5nIGFjY2VzcyBjb250cm9s IHRvIGp1c3Qgc3VwZXJ1c2VyIGhhdmUgYWNjZXNzIHRvIHRoZSBzdG9yYWdlIGRldmljZQ0KPiBz ZWVtcyBsaWtlIGEgdmFsdWFibGUgYWR2aWNlLg0KDQpzdXJlDQoNCj4gDQo+ICgyKSBTZWN0aW9u IDIuMjogVGhlIE5PVEUgcHJvYmFibHkgc2hvdWxkIHByb3ZpZGUgZ3VpZGFuY2UgcmVnYXJkaW5n IHByb3RlY3RpbmcNCj4gdGhlIG5ldHdvcmsgY29ubmVjdGlvbnMgYmV0d2VlbiB0aGUgbWV0YWRh dGEgc2VydmVyIGFuZCB0aGUgZmlsZSBzZXJ2ZXIuIEZvcg0KPiBleGFtcGxlLCBzb21ldGhpbmcg bGlrZTog4oCcQ29tbXVuaWNhdGlvbnMgYmV0d2VlbiB0aGUgbWV0YWRhdGEgc2VydmVyIGFuZCBm aWxlDQo+IHNlcnZlciBuZWVkIHRvIHNlY3VyZWQuIElmIHRoZXJlIGlzIG5vdCBhZGVxdWF0ZSBw aHlzaWNhbCBzZWN1cml0eSAoaS5lLiwgdGhlDQo+IHNlcnZlcnMgYXJlIG5vdCBjby1sb2NhdGVk IGluIGEgcGh5c2ljYWxseSBzZWN1cmUgYXJlYSksIHRoZWlyIGNvbW11bmljYXRpb25zDQo+IE1V U1QgYmUgcHJvdGVjdGVkIGZvciBjb25maWRlbnRpYWxpdHkgKGUuZy4sIHVzaW5nIFRMUyBvciBJ UHNlYyku4oCdDQoNCk5vLCB0aGUgTVVTVCBpcyB0b28gc3Ryb25nIGhlcmUuIFdlIGNhbiByZWNv bW1lbmQgcHJvY2VkdXJlcywgd2UgY2FuIG5vdCBSRVFVSVJFIHRoZW0uDQoNCkkgYW0gZmluZSB3 aXRoOg0KDQpDb21tdW5pY2F0aW9ucyBiZXR3ZWVuIHRoZSBtZXRhZGF0YSBzZXJ2ZXIgYW5kIGZp bGUNCnNlcnZlciBTSE9VTEQgYmUgc2VjdXJlZC4gSWYgdGhlcmUgaXMgbm90IGFkZXF1YXRlIHBo eXNpY2FsIHNlY3VyaXR5IChpLmUuLCB0aGUNCnNlcnZlcnMgYXJlIG5vdCBjby1sb2NhdGVkIGlu IGEgcGh5c2ljYWxseSBzZWN1cmUgYXJlYSksIHRoZWlyIGNvbW11bmljYXRpb25zDQpTSE9VTEQg YmUgcHJvdGVjdGVkIGZvciBjb25maWRlbnRpYWxpdHkgKGUuZy4sIHVzaW5nIFRMUyBvciBJUHNl Yyku4oCdDQoNCj4gDQo+ICgzKSBGcm9tIHRoZSBkZXNjcmlwdGlvbiBvZiBzeW50aGV0aWMgdWlk cy9naWRzIGluIFNlY3Rpb24gMi4yLCBJIGJlbGlldmUgdGhhdA0KPiB0aGUgZnVsbCByYW5nZSBv ZiBmaWxlIHBlcm1pc3Npb25zIChlLmcuLCBvd25lciByL3cveCkgIGlzIGhvbm9yZWQgaW4gdGhl DQo+IHRpZ2h0bHkgY291cGxlZCBtb2RlbCwgYnV0IGFyZSByZXN0cmljdGVkIGluIHRoZSBsb29z ZWx5IGNvdXBsZWQgbW9kZWwgdG8NCj4g4oCcb3duZXIgci934oCdLCDigJxncm91cCBy4oCdLiBJ ZiB0aGF0IGlzIGNvcnJlY3QsIEkgdGhpbmsgdGhlIHNlY3VyaXR5IGNvbnNpZGVyYXRpb25zDQo+ IHNob3VsZCBleHBsaWNpdGx5IG1lbnRpb24gdGhhdCB0aGUgZWZmZWN0IG9mIGFjY2VzcyBwZXJt aXNzaW9ucyBpcyByZWR1Y2VkIG9uDQo+IHRoZSBmaWxlIHNlcnZlciBmaWxlcy4NCg0KWzJdIEkg dGhpbmsgdGhlIGNvbmZ1c2lvbiBoZXJlIGlzIHRoYXQgdGhlIGZpbGVzIG9uIHN0b3JhZ2UgZGV2 aWNlIGFyZSBub3QNCmluIHRoZSBmaWxlIGhpZXJhcmNoeSBhcyBzZWVuIG9uIHRoZSBtZXRhZGF0 YSBzZXJ2ZXIuDQoNCk9uIGEgZmlsZSBieSBmaWxlIGJhc2lzIG9uIHRoZSBzdG9yYWdlIGRldmlj ZSwgd2UgYXJlIGdpdmluZyB0aGUgY2xpZW50IGVpdGhlcg0Kd3JpdGUgbW9kaWZpY2F0aW9uIGFj Y2VzcywgcmVhZCBhY2Nlc3MsIG9yIG5vIGFjY2VzcyBhdCBhbGwuIFRoZSBjbGllbnQgY2Fubm90 DQpyZW1vdmUgdGhlIGZpbGUgKGl0IHdvdWxkIG5lZWQgdG8ga25vdyB0aGUgcGFyZW50IGRpcmVj dG9yeSBGSCBhbmQgdGhlDQpuYW1lIG9mIHRoZSBmaWxlIC0gbmVpdGhlciBvZiB3aGljaCBpdCBo YXMpLiAgSXQgY2FuIGVmZmVjdGl2ZWx5IHJlbW92ZSB0aGUgY29udGVudA0KaWYgaXQgaGFzIHdy aXRlIHBlcm1pc3Npb24gKGJ1dCBub3RoaW5nIHdvdWxkIHByZXZlbnQgdGhpcyBpbiBhIHRpZ2h0 bHkNCmNvdXBsZWQgbW9kZWwpLiANCg0KDQoNCg0KPiANCj4gKDQpIFNlY3Rpb24gMi4yLiBJbiB0 aGlzIHBocmFzZSDigJxpdCBtYXkgYmUgYXNzaWduZWQgc29tZSByYW5kb20gc3ludGhldGljDQo+ IHVpZC9naWQgdG8gZGVueSBhY2Nlc3PigJ0sIHdvdWxkIGEgYmV0dGVyIHdvcmQgZm9yIOKAnHJh bmRvbeKAnSBiZSDigJx1bnVzZWTigJ0gb3INCj4g4oCcdW5wcmVkaWN0YWJsZeKAnT8gQWxzbyB3 aGF0IGlzIHRoZSBzZWN1cml0eSB2YWx1ZSBpbnRlbmRlZCBieSB0aGUgdXNlIG9mIGENCj4g4oCc cmFuZG9t4oCdIHZhbHVlIGZvciBzeW50aGV0aWMgdWlkcy9naWRzPw0KPiANCg0KSW4gYW4gZWFy bGllciByZXZpZXcgKGJ5IExpbmRhIER1bmJhciksIHRoYXQgcGhyYXNlIHdhcyBjaGFuZ2VkOg0K DQoNCiAgT24gdGhlIHN0b3JhZ2UgZGV2aWNlLCBpdCBtYXkgYmUgYXNzaWduZWQgc29tZSByYW5k b20gc3ludGhldGljIHVpZC8NCiAgZ2lkIHRvIGRlbnkgYWNjZXNzOg0KDQogIC1ydy1yLS0tLS0g ICAgMSAxOTQ1MiAgIDI4NDE4ICAgIDE2OTcgRGVjICA0IDExOjMxIGRhdGFfb21waGEuYw0KDQog IFdoZW4gdGhlIGZpbGUgaXMgb3BlbmVkIG9uIGEgY2xpZW50IGFuZCBhY2Nlc3NlZCwgaXQgd2ls bCB0cnkgdG8gZ2V0IGENCiAgbGF5b3V0IGZvciB0aGUgZGF0YSBmaWxlLiBTaW5jZSB0aGUgbGF5 b3V0IGtub3dzIG5vdGhpbmcNCiAgYWJvdXQgdGhlIHVzZXIgKGFuZCBkb2VzIG5vdCBjYXJlKSwg d2hldGhlciB0aGUgdXNlciBsb2doeXIgb3INCiAgZ2FyYm8gb3BlbnMgdGhlIGZpbGUgZG9lcyBu b3QgbWF0dGVyLiAgVGhlIGNsaWVudCBoYXMgdG8gcHJlc2VudA0KICBhbiB1aWQgb2YgMTk0NTIg dG8gZ2V0IHdyaXRlIHBlcm1pc3Npb24uIElmIGl0IHByZXNlbnRzIGFueSBvdGhlcg0KICB2YWx1 ZSBmb3IgdGhlIHVpZCwgdGhlbiBpdCBtdXN0IGdpdmUgYSBnaWQgb2YgMjg0MTggdG8gZ2V0IHJl YWQNCiAgYWNjZXNzLg0KDQogIEZ1cnRoZXIsIGlmIHRoZSBtZXRhZGF0YSBzZXJ2ZXIgZGVjaWRl cyB0byBmZW5jZSB0aGUgZmlsZSwgaXQgbWF5DQogIGNoYW5nZSB0aGUgdWlkIGFuZCBnaWQgYXMg c3VjaDoNCg0KICAtcnctci0tLS0tICAgIDEgMTk0NTMgICAyODQxOSAgICAxNjk3IERlYyAgNCAx MTozMSBkYXRhX29tcGhhLmMNCg0KDQpXaGF0IHdlIGNvdWxkIHN1Z2dlc3Qgd291bGQgYmUgc29t ZXRoaW5nIGFsb25nIHRoZSBsaW5lcyBvZjoNCg0KICBPbiB0aGUgc3RvcmFnZSBkZXZpY2UsIGl0 IG1heSBiZSBhc3NpZ25lZCBzb21lIHVucHJlZGljdGFibGUNCiAgc3ludGhldGljIHVpZC9naWQg dG8gZGVueSBhY2Nlc3MuDQogIOKApg0KICBGdXJ0aGVyLCBpZiB0aGUgbWV0YWRhdGEgc2VydmVy IGRlY2lkZXMgdG8gZmVuY2UgdGhlIGZpbGUsIGl0DQogIHNob3VsZCBjaGFuZ2UgdGhlIHVpZCBh bmQvb3IgZ2lkIHN1Y2ggdGhhdCB0aGVzZSB2YWx1ZXMNCiAgbmVpdGhlciBtYXRjaCBlYXJsaWVy IHZhbHVlcyBmb3IgdGhhdCBmaWxlIG5vciBtYXRjaA0KICBhIHByZWRpY3RhYmxlIGNoYW5nZSBi YXNlZCBvbiBhbiBlYXJsaWVyIGZlbmNpbmcuDQoNClVnaCwgbm90IHN1cmUgSSBsaWtlIHRoZSB3 b3Jkcy4NCg0KdWlkW04rMV0gIT0gdWlkW04tMV0gJiYgdWlkW04rMV0gICE9IGNoYW5nZSh1aWRb Ti0xXSAtPiB1aWRbTl0pLg0KDQpJLmUuLCBkbyBub3Qgc2V0IHRvIHJlY2VudCBvbGQgdmFsdWVz IChtaWdodCBmZW5jZSBiYWNrIHRvIGFuIHVpZA0KYW4gb2xkZXIgY2xpZW50IGFscmVhZHkgaGFz KSBhbmQgZG8gbm90IHVzZSBhIGZpeGVkIGluY3JlbWVudC4NCg0KDQo+ICg1KSBJbiB0aGUg4oCc bG9vc2UgY291cGxpbmcgbW9kZWzigJ0gZmlsZSBhY2Nlc3MgYWN0dWFsbHkgZW5mb3JjZWQgYnkg dGhlIGNsaWVudCwNCj4gd2hpY2ggcHJlc3VtYWJseSBjYW4gYmUgbWFuaXB1bGF0ZWQgYnkgYW4g ZXZpbCB1c2VyLiBUaGlzIGlzIGNsZWFybHkgc3RhdGVkIG4NCj4gU2VjdGlvbiAyLjI6IOKAnCBU aGUgY2xpZW50IGlzIHRodXMgc29sZWx5IHJlc3BvbnNpYmxlIGZvciBlbmZvcmNpbmcgZmlsZQ0K PiBwZXJtaXNzaW9ucyBpbiBhIGxvb3NlbHkgY291cGxlZCBtb2RlbC7igJ0gIEFsc28sIFNlY3Rp b24gMi4yLjEgbWVudGlvbnMg4oCcYQ0KPiBTRVRBVFRSIHdvdWxkIGJlIHNlbnQgdG8gdGhlIHN0 b3JhZ2UgZGV2aWNlIHRvIHNldCB0aGUgb3duZXIgYW5kIGdyb3VwIG9mIHRoZQ0KPiBkYXRhIGZp bGXigJ0sIGFuZCBzaW5jZSBoZXJlIGlzIG5vIGNvbnRyb2wgcHJvdG9jb2wgYmV0d2VlbiB0aGUg bWV0YWRhdGEgc2VydmVyDQo+IGFuZCB0aGUgZmlsZSBzZXJ2ZXIgc28gSSBhc3N1bWUgaXQgaXMg c2VudCBieSB0aGUgY2xpZW50Lg0KDQpJdCBpcyBzdWJ0bGUsIGJ1dCB0aGlzIGdvZXMgYmFjayB0 byB0aGUgZmFjdCAoc2VlIFsxXSkgdGhhdCDigJxubyBjb250cm9sIHByb3RvY29s4oCdIGRvZXMg bm90DQppbXBseSDigJxubyBjb21tdW5pY2F0aW9uIGJldHdlZW4gdGhlIG1ldGFkYXRhIHNlcnZl ciBhbmQgdGhlIHN0b3JhZ2UNCmRldmljZeKAnS4gIEkuZS4sIHRoZSBNRFMgZG9lcyB0aGUgU0VU QVRUUi4NCg0KQWxzbywgSSBub3RpY2UgeW91IGFyZSB1c2luZyB0aGUgcGhyYXNlIOKAnGZpbGUg c2VydmVy4oCdLCB3aGljaCBwcm9iYWJseSBpbXBhY3RzDQp5b3VyIHZpZXcgaW4geW91ciBwb2lu dCAzIChzZWUgbXkgWzJdKSAtIHRoZSB0ZXJtIHdlIHVzZSBpcyBzdG9yYWdlDQpkZXZpY2UuIFRo ZXJlIGlzIG5vIHJlcXVpcmVtZW50IHRoYXQgdGhpcyBkZXZpY2Ugc2VydmUgdXAgZGF0YSBmaWxl cw0KYXMgaWYgdGhleSB3ZXJlIGluIGEgZmlsZXN5c3RlbS4gVGhlIHN0b3JhZ2UgZGV2aWNlIGlz IGxpbWl0ZWQgaW4gdGhlIG9wZXJhdGlvbnMNCnRoYXQgaXQgY2FuIHJlc3BvbmQgdG8gZnJvbSB0 aGUgY2xpZW50IGJhc2VkIG9uIHRoZSBpbmZvcm1hdGlvbiBpdCBpcw0KcHJlc2VudGVkIHdpdGgu DQoNCkZvciBleGFtcGxlLCB0aGUgZXhwb3J0cyBvbiB0aGUgc3RvcmFnZSBkZXZpY2UgY2FuIGJl IGNvbmZpZ3VyZWQgc3VjaA0KdGhhdCB0aGUgbWV0YWRhdGEgc2VydmVyIGlzIHRoZSBvbmx5IG9u ZSB3aGljaCBjYW4gbW91bnQgdGhlIGV4cG9ydHMuDQpBbmQgc2luY2UgdGhlIG1ldGFkYXRhIHNl cnZlciBvbmx5IGhhbmRzIG91dCBGaWxlIEhhbmRsZXMgdG8gdGhlDQpjbGllbnRzLCB0aGV5IHdv dWxkIG5vdCBiZSBhYmxlIHRvIHdhbGsgdGhlIG5hbWVzcGFjZSBvZiB0aGUgc3RvcmFnZQ0KZGV2 aWNlLg0KDQoNCj4gDQo+IFB1dCBhbm90aGVyIHdheSwgaXQgc2VlbXMgYXMgaWYgYW55IGNsaWVu dCB0aGF0IGhhcyBjcmVkZW50aWFscyBhbGxvd2luZyBpdCB0bw0KPiBhY2Nlc3MgdG8gdGhlIGZp bGUgc2VydmVyIGNhbiBhY2Nlc3MgYW55IGZpbGUgb24gdGhlIGZpbGUgc3lzdGVtIGlmIGl0IGlz DQo+IGNob29zZXMgdG8gZG8gc28gKGUuZy4uLCBpZiBpdCBpcyBhIG1hbGljaW91cyBjbGllbnQp LiBJcyB0aGF0IGNvcnJlY3Q/DQoNCkFzIHdpdGggYW55IE5GUyBmaWxlc3lzdGVtIHdoaWNoIHVz ZXMgYW4gQVVUSF9TWVMgc2VjdXJpdHkgbW9kZWwsDQplYWNoIG9mIHRoZSBmaWxlIGhhbmRsZSwg dWlkLCBhbmQgZ2lkIGNhbiBiZSBmb3JnZWQgdG8gZ2FpbiBhY2Nlc3MuDQoNCkluIG90aGVyIHdv cmRzLCB0aGlzIGlzIG5vdGhpbmcgbmV3Lg0KDQpUaGUgc2VjdXJpdHkgbW9kZWwgZm9yIE5GU3Y0 LjIgKGFuZCBiYXNlZCBvbiB0aGF0LCBORlN2NC4wIGFuZCBORlN2NC4xKToNCg0KW1JGQzc4NjJd DQoxNy4gIFNlY3VyaXR5IENvbnNpZGVyYXRpb25zDQoNCiAgIE5GU3Y0LjIgaGFzIGFsbCBvZiB0 aGUgc2VjdXJpdHkgY29uY2VybnMgcHJlc2VudCBpbiBORlN2NC4xIChzZWUNCiAgIFNlY3Rpb24g MjEgb2YgW1JGQzU2NjFdKSwgYXMgd2VsbCBhcyB0aG9zZSBwcmVzZW50IGluIHRoZSBzZXJ2ZXIt c2lkZQ0KICAgY29weSAoc2VlIFNlY3Rpb24gNC45KSBhbmQgaW4gTGFiZWxlZCBORlMgKHNlZSBT ZWN0aW9uIDkuNikuDQoNCldoaWNoIGxlYWRzIHVzIHRvIFtSRkM1NjYxXToNCg0KMi4yLjEuMS4x LjIuICBTZWN1cml0eSBNZWNoYW5pc21zIGZvciBORlN2NC4xDQoNCiAgIFJQQ1NFQ19HU1MsIHZp YSBHU1MtQVBJLCBub3JtYWxpemVzIGFjY2VzcyB0byBtZWNoYW5pc21zIHRoYXQgcHJvdmlkZQ0K ICAgc2VjdXJpdHkgc2VydmljZXMuICBUaGVyZWZvcmUsIE5GU3Y0LjEgY2xpZW50cyBhbmQgc2Vy dmVycyBNVVNUDQogICBzdXBwb3J0IHRoZSBLZXJiZXJvcyBWNSBzZWN1cml0eSBtZWNoYW5pc20u DQoNCiAgIFRoZSB1c2Ugb2YgUlBDU0VDX0dTUyByZXF1aXJlcyBzZWxlY3Rpb24gb2YgbWVjaGFu aXNtLCBxdWFsaXR5IG9mDQogICBwcm90ZWN0aW9uIChRT1ApLCBhbmQgc2VydmljZSAoYXV0aGVu dGljYXRpb24sIGludGVncml0eSwgcHJpdmFjeSkuDQogICBGb3IgdGhlIG1hbmRhdGVkIHNlY3Vy aXR5IG1lY2hhbmlzbXMsIE5GU3Y0LjEgc3BlY2lmaWVzIHRoYXQgYSBRT1Agb2YNCiAgIHplcm8g aXMgdXNlZCwgbGVhdmluZyBpdCB1cCB0byB0aGUgbWVjaGFuaXNtIG9yIHRoZSBtZWNoYW5pc20n cw0KICAgY29uZmlndXJhdGlvbiB0byBtYXAgUU9QIHplcm8gdG8gYW4gYXBwcm9wcmlhdGUgbGV2 ZWwgb2YgcHJvdGVjdGlvbi4NCiAgIEVhY2ggbWFuZGF0ZWQgbWVjaGFuaXNtIHNwZWNpZmllcyBh IG1pbmltdW0gc2V0IG9mIGNyeXB0b2dyYXBoaWMNCiAgIGFsZ29yaXRobXMgZm9yIGltcGxlbWVu dGluZyBpbnRlZ3JpdHkgYW5kIHByaXZhY3kuICBORlN2NC4xIGNsaWVudHMNCiAgIGFuZCBzZXJ2 ZXJzIE1VU1QgYmUgaW1wbGVtZW50ZWQgb24gb3BlcmF0aW5nIGVudmlyb25tZW50cyB0aGF0IGNv bXBseQ0KICAgd2l0aCB0aGUgUkVRVUlSRUQgY3J5cHRvZ3JhcGhpYyBhbGdvcml0aG1zIG9mIGVh Y2ggUkVRVUlSRUQNCiAgIG1lY2hhbmlzbS4NCg0KMi4yLjEuMS4xLjIuMS4gIEtlcmJlcm9zIFY1 DQoNCiAgIFRoZSBLZXJiZXJvcyBWNSBHU1MtQVBJIG1lY2hhbmlzbSBhcyBkZXNjcmliZWQgaW4g WzVdIE1VU1QgYmUNCiAgIGltcGxlbWVudGVkIHdpdGggdGhlIFJQQ1NFQ19HU1Mgc2VydmljZXMg YXMgc3BlY2lmaWVkIGluIHRoZQ0KICAgZm9sbG93aW5nIHRhYmxlOg0KDQpUbyBwYXJhcGhyYXNl IGl0LCBORlN2NC54IGNsaWVudHMgYW5kIHNlcnZlcnMgTVVTVCBzdXBwb3J0DQp0aGUgS2VyYmVy b3MgVjUgc2VjdXJpdHkgbWVjaGFuaXNtLCBidXQgaW5zdGFsbGF0aW9ucyBhcmUgbm90DQpyZXF1 aXJlZCB0byB1c2UgS2VyYmVyb3MuDQoNCkkuZS4sIHRoaXM6DQoNCm1vdW50IC1vIHZlcnM9NC4y LHNlYz1zeXMgc2VydmVyOi8gL21udA0KDQptZWFucyB0aGF0IGFueSBtYWxpY2lvdXMgdXNlciBj YW4gdXNlIGFueSBjbGllbnQgd2hpY2ggY2FuIGNvbm5lY3QNCnRvIHRoZSBzZXJ2ZXIgdG8gZG8g d2hhdGV2ZXIgdGhleSB3YW50Lg0KDQpJbiBvdGhlciB3b3JkcywgdGhpcyBpcyBub3QgYSByZWR1 Y3Rpb24gb2YgdGhlIGFjdHVhbCBzZWN1cml0eSBmcm9tIE5GU3Y0LnguDQoNCg0KPiANCj4gVW5s ZXNzIEnigJltIG1pc3Rha2VuLCB0aGlzIGlzIGEgc2VyaW91cyByZWR1Y3Rpb24gb2YgYWN0dWFs IHNlY3VyaXR5IGZyb20gTkZTDQo+IDQueCwgYW5kIGFsc28gZnJvbSB0aGUgdGlnaHQgY291cGxp bmcgbW9kZWwuIFRoaXMgc2hvdWxkIGJlIGNsZWFybHkgc3RhdGVkIGluDQo+IHRoZSBzZWN1cml0 eSBjb25zaWRlcmF0aW9ucyBzZWN0aW9uLCBzbyB0aGF0IHByb3RvY29sIGFkb3B0ZXJzIGFuZCB1 c2Vycw0KPiB1bmRlcnN0YW5kIHRoZSBhZGRpdGlvbmFsIHJpc2tzIG9mIHRoZSBsb29zZSBjb3Vw bGluZyBtb2RlbC4gRm9yIHRoaXMgIHJlYXNvbiwNCj4gSSd2ZSBtYXJrZWQgdGhlIHJldmlldyB3 aXRoICJIYXMgSXNzdWVzIiByYXRoZXIgdGhhbiAiSGFzIE5pdHMiLg0KPiANCj4gX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4gbmZzdjQgbWFpbGluZyBs aXN0DQo+IG5mc3Y0QGlldGYub3JnDQo+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlz dGluZm8vbmZzdjQNCg0K From nobody Fri Jan 12 15:54:35 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A738E126BF3; Fri, 12 Jan 2018 15:54:33 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.53 X-Spam-Level: X-Spam-Status: No, score=-14.53 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rqcr97ruRK6Q; Fri, 12 Jan 2018 15:54:30 -0800 (PST) Received: from rcdn-iport-2.cisco.com (rcdn-iport-2.cisco.com [173.37.86.73]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 99F00120725; Fri, 12 Jan 2018 15:54:29 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=152510; q=dns/txt; s=iport; t=1515801269; x=1517010869; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=lw4WvW1RbPoxJ2IDM2ZccNqL+XzJ0QXiBTKcGyH++xY=; b=BA3kv188SjBufNeqDB+5FuBQhesP+vS+nroBtAUzqLi69rZ5fj0A+cLB aaqNqUHRSI7RjFqAFW2G92/8U2i4JlLpev5beygHS0YAvd5Vux9wyqeAU /gjdmiznxJQDV0+1akr1yxF23JmQfCkcN2pLwT/Gi8qsknbl6kCGiZi+6 o=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AHAQAKSlla/5JdJa1bAxkBAQEBAQEBA?= =?us-ascii?q?QEBAQEHAQEBAQGCSkcwZnQnB4QMiiSOYpkuFIF/AwoYAQqFGAIahCc/GAEBAQE?= =?us-ascii?q?BAQEBAWsohSQCAQMBARgJBEQBAgQEAxACAQYCDioBBgMCAgIlCxQRAgQKBAWJT?= =?us-ascii?q?2QQkFSdcIFtOoo+AQEBAQEBAQEBAQEBAQEBAQEBAQEBGAWEPIF0IYNAKYF3gQ6?= =?us-ascii?q?DLwEBAoEzCQELBwEJAisKJoJQMYIUIAWSJ5E9Ao90hVWCGSOKD4dFlngCERkBg?= =?us-ascii?q?TsBHzlgcG8VPSoBgX+CVByBZ3iJQwEOGAKBC4EXAQEB?= X-IronPort-AV: E=Sophos;i="5.46,351,1511827200"; d="scan'208,217";a="345788693" Received: from rcdn-core-10.cisco.com ([173.37.93.146]) by rcdn-iport-2.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 12 Jan 2018 23:54:26 +0000 Received: from XCH-RTP-001.cisco.com (xch-rtp-001.cisco.com [64.101.220.141]) by rcdn-core-10.cisco.com (8.14.5/8.14.5) with ESMTP id w0CNsQjt029610 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Fri, 12 Jan 2018 23:54:26 GMT Received: from xch-rtp-001.cisco.com (64.101.220.141) by XCH-RTP-001.cisco.com (64.101.220.141) with Microsoft SMTP Server (TLS) id 15.0.1320.4; Fri, 12 Jan 2018 18:54:25 -0500 Received: from xch-rtp-001.cisco.com ([64.101.220.141]) by XCH-RTP-001.cisco.com ([64.101.220.141]) with mapi id 15.00.1320.000; Fri, 12 Jan 2018 18:54:25 -0500 From: "Brian Weis (bew)" To: Thomas Haynes CC: "secdir@ietf.org" , NFSv4 , "draft-ietf-nfsv4-flex-files.all@ietf.org" Thread-Topic: [nfsv4] Secdir last call review of draft-ietf-nfsv4-flex-files-15 Thread-Index: AQHTi9WQTx5RarnLbUyAVOTsrpXN+aNwovgAgACajgA= Date: Fri, 12 Jan 2018 23:54:25 +0000 Message-ID: <2D43D657-817F-4C43-A405-E7FB83C688AD@cisco.com> References: <151578274278.18715.11694935076324562133@ietfa.amsl.com> <75FDDF9F-C335-4488-9EAE-679DD9727A99@primarydata.com> In-Reply-To: <75FDDF9F-C335-4488-9EAE-679DD9727A99@primarydata.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.32.172.205] Content-Type: multipart/alternative; boundary="_000_2D43D657817F4C43A405E7FB83C688ADciscocom_" MIME-Version: 1.0 Archived-At: Subject: Re: [secdir] [nfsv4] Secdir last call review of draft-ietf-nfsv4-flex-files-15 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 12 Jan 2018 23:54:34 -0000 --_000_2D43D657817F4C43A405E7FB83C688ADciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgVGhvbWFzLA0KDQpPbiBKYW4gMTIsIDIwMTgsIGF0IDExOjQxIEFNLCBUaG9tYXMgSGF5bmVz IDxsb2doeXJAcHJpbWFyeWRhdGEuY29tPG1haWx0bzpsb2doeXJAcHJpbWFyeWRhdGEuY29tPj4g d3JvdGU6DQoNCkhpIEJyaWFuLA0KDQpUaGFua3MgZm9yIHRoZSByZXZpZXcgLSBjb21tZW50cyBp bmxpbmUuLg0KDQpPbiBKYW4gMTIsIDIwMTgsIGF0IDEwOjQ1IEFNLCBCcmlhbiBXZWlzIDxiZXdA Y2lzY28uY29tPG1haWx0bzpiZXdAY2lzY28uY29tPj4gd3JvdGU6DQoNClJldmlld2VyOiBCcmlh biBXZWlzDQpSZXZpZXcgcmVzdWx0OiBIYXMgSXNzdWVzDQoNCkkgaGF2ZSByZXZpZXdlZCB0aGlz IGRvY3VtZW50IGFzIHBhcnQgb2YgdGhlIHNlY3VyaXR5IGRpcmVjdG9yYXRlJ3Mgb25nb2luZw0K ZWZmb3J0IHRvIHJldmlldyBhbGwgSUVURiBkb2N1bWVudHMgYmVpbmcgcHJvY2Vzc2VkIGJ5IHRo ZSBJRVNHLiBUaGVzZSBjb21tZW50cw0Kd2VyZSB3cml0dGVuIHByaW1hcmlseSBmb3IgdGhlIGJl bmVmaXQgb2YgdGhlIHNlY3VyaXR5IGFyZWEgZGlyZWN0b3JzLiBEb2N1bWVudA0KZWRpdG9ycyBh bmQgV0cgY2hhaXJzIHNob3VsZCB0cmVhdCB0aGVzZSBjb21tZW50cyBqdXN0IGxpa2UgYW55IG90 aGVyIGxhc3QgY2FsbA0KY29tbWVudHMuDQoNClRoaXMgZG9jdW1lbnQgZGVmaW5lcyB0aGUgUGFy YWxsZWwgTmV0d29yayBGaWxlIFN5c3RlbSAocE5GUyksIHdoaWNoIGFsbG93cyBhDQpzdG9yYWdl IHN5c3RlbSB0byBzdG9yZSB0aGUgbWV0YWRhdGEgZm9yIGZpbGVzIG9udG8gYSBtZXRhZGF0YSBz ZXJ2ZXIsIGFuZCBkYXRhDQpvZiB0aGF0IGZpbGUgb250byBhIHNlcGFyYXRlIHN0b3JhZ2UgZGV2 aWNlLiBUaGUgZG9jdW1lbnQgZm9jdXNlcyBvbiB0aGUNCmludGVyYWN0aW9uIGJldHdlZW4gdGhl IHR3byB0eXBlcyBvZiBzZXJ2ZXJzLCBhbmQgdGhlIHJlcXVpcmVtZW50cyBvZiBjbGllbnRzDQp1 c2luZyBhIHBORlMgc3lzdGVtLg0KDQpUaGUgZG9jdW1lbnQgZGVzY3JpYmVzIHR3byBtb2RlbHMg Ynkgd2hpY2ggdGhlIG1ldGFkYXRhIHNlcnZlciBhbmQgZmlsZSBzdG9yYWdlDQpzZXJ2ZXIgY2Fu IGNvbW11bmljYXRlLiBPbmUgaXMgYSDigJx0aWdodCBjb3VwbGluZyBtb2RlbOKAnSwgaW4gd2hp Y2ggdGhlIHR3byB0eXBlcw0Kb2Ygc2VydmVycyBkaXJlY3RseSBjb21tdW5pY2F0ZS4gSW4gdGhp cyBtb2RlbCB0aGUgbWV0YWRhdGEgc2VydmVyIGNhbiBlbnN1cmUNCnRoYXQgZmlsZSBhY2Nlc3Mg Y29udHJvbCBzdGF0ZSBpcyBzeW5jaHJvbml6ZWQgYmV0d2VlbiB0aGUgdHdvIHNlcnZlcnMsIGFu ZCBJDQpiZWxpZXZlIHRoYXQgbGV2ZWwgb2YgYWNjZXNzIGNvbnRyb2wgaXMgZXF1aXZhbGVudCB0 byBORlMgdjQueCB0b2RheS4gRnJvbSBhDQpzZWN1cml0eSBjb25zaWRlcmF0aW9ucyBwZXJzcGVj dGl2ZSwgdGhpcyBpcyBwZXJoYXBzIGJlc3Qgc3VtbWFyaXplZCBpbiBTZWN0aW9uDQoyLjI6DQoN CuKAnFdpdGggdGlnaHRseSBjb3VwbGVkIHN0b3JhZ2UgZGV2aWNlcywgdGhlIG1ldGFkYXRhIHNl cnZlciBzZXRzIHRoZQ0KIHVzZXIgYW5kIGdyb3VwIG93bmVycywgbW9kZSBiaXRzLCBhbmQgQUNM IG9mIHRoZSBkYXRhIGZpbGUgdG8gYmUgdGhlDQogc2FtZSBhcyB0aGUgbWV0YWRhdGEgZmlsZS4g IEFuZCB0aGUgY2xpZW50IG11c3QgYXV0aGVudGljYXRlIHdpdGggdGhlDQogc3RvcmFnZSBkZXZp Y2UgYW5kIGdvIHRocm91Z2ggdGhlIHNhbWUgYXV0aG9yaXphdGlvbiBwcm9jZXNzIGl0IHdvdWxk DQogZ28gdGhyb3VnaCB2aWEgdGhlIG1ldGFkYXRhIHNlcnZlci7igJ0NCg0KVGhlIG90aGVyIG1v ZGVsIGlzIGEg4oCcbG9vc2UgY291cGxpbmcgbW9kZWzigJ0sIGluIHdoaWNoIHRoZSBjbGllbnQg aXMNCmF1dGhlbnRpY2F0ZWQgYW5kIGF1dGhvcml6ZWQgYnkgdGhlIG1ldGFkYXRhIHNlcnZlciwg YW5kIGlzIGdpdmVuIGFjY2VzcyB0byB0aGUNCmZpbGUgc2VydmVyIHRocm91Z2ggdGhlIHVzZSBj cmVkZW50aWFscy4gSG93ZXZlciwgdGhlcmUgaXMgbm8gZGlyZWN0DQpjb21tdW5pY2F0aW9ucyBi ZXR3ZWVuIHRoZSBtZXRhZGF0YSBzZXJ2ZXIgYW5kIHRoZSBmaWxlIHNlcnZlci4gVGhlIG1ldGFk YXRhDQpzZXJ2ZXIgZG9lcyBub3Qgc2VlbSB0byBwcm92aWRlIGEgZmluZSBncmFpbmVkIGFjY2Vz cyBjb250cm9sIHRvIGZpbGVzIG9uIHRoZQ0KZmlsZSBzZXJ2ZXIsIGJ1dCBpbnN0ZWFkIHJlbGll cyB1cG9uIHRoZSBjbGllbnQgdG8gZW5mb3JjZSBhIGxlc3MgZ3JhbnVsYXINCmxldmVsIG9mIGFj Y2VzcyBjb250cm9sLg0KDQpbMV0gTm8sIHRoZXJlIGlzIHN0aWxsIGRpcmVjdCBjb21tdW5pY2F0 aW9uIGJldHdlZW4gdGhlIG1ldGFkYXRhIHNlcnZlciBhbmQgdGhlIGZpbGUgc2VydmVyLg0KDQpU aGUgZGlmZmVyZW5jZSBpcyB0aGF0IGl0IGlzIHZpYSBhIHN0b3JhZ2UgcHJvdG9jb2wsIGluIHRo aXMgY2FzZSBORlMuDQoNClRoZSBhY2Nlc3MgY29udHJvbCBpcyBlbmZvcmNlZCBieSB0aGUgbWV0 YWRhdGEgc2VydmVyLiBUaGUgY2xpZW50IG9ubHkgZ2V0IGFjY2Vzcw0KdG8gdGhlIGZpbGUgaWYg aXQgY2FuIGdldCBhIGxheW91dC4gVGhlIGxheW91dCBjYW4gZWl0aGVyIHByb3ZpZGUgcmVhZC93 cml0ZSBhY2Nlc3MNCm9yIG9ubHkgcmVhZCBhY2Nlc3MuDQoNClRoZSBtZXRhZGF0YSBzZXJ2ZXIg Y2FuIHJldm9rZSB0aGF0IGFjY2VzcyBhdCBhbnkgcG9pbnQsIHNvIGl0IGlzIG5vdA0KY29ycmVj dCB0byBzYXkgdGhhdCBpdCBkZXBlbmRzIG9uIHRoZSBjbGllbnQgdG8gZW5mb3JjZSBhIGxlc3Mg Z3JhbnVsYXIgbGV2ZWwNCm9mIGFjY2VzcyBjb250cm9sLg0KDQpUaGFua3MgZm9yIHRoZSBjbGFy aWZpY2F0aW9uLiBUbyBhIG5vbi1ORlMgZXhwZXJ0IHRoZSByZWxhdGlvbnNoaXAgYmV0d2VlbiBs YXlvdXRzIGFuZA0KYWNjZXNzIGNvbnRyb2wgIHdhc27igJl0IG9idmlvdXMuIEkgd29uZGVyIGlm IHRoaXMgZGlzY3Vzc2lvbiBjb3VsZCBiZSBhZGRlZCB0byBTZWN1cml0eQ0KQ29uc2lkZXJhdGlv bnM/DQoNCg0KDQpUaGUgU2VjdXJpdHkgQ29uc2lkZXJhdGlvbnMgc2VjdGlvbiBpcyB3ZWxsLXdy aXR0ZW4gYW5kIGhlbHBmdWwuIEkgZG8gaGF2ZSBzb21lDQpzdWdnZXN0aW9ucyBmb3IgaW1wcm92 aW5nIGl0LCAgYW5kIGFsc28gc29tZSBxdWVzdGlvbnMuDQoNCigxKSBTZWN0aW9uIDIuMjogc2hv dWxkIHRoZSDigJxyZWNvbW1lbmRlZOKAnSBpbiB0aGUgTm90ZSBiZSBSRUNPTU1FTkRFRD8NClJl c3RyaWN0aW5nIGFjY2VzcyBjb250cm9sIHRvIGp1c3Qgc3VwZXJ1c2VyIGhhdmUgYWNjZXNzIHRv IHRoZSBzdG9yYWdlIGRldmljZQ0Kc2VlbXMgbGlrZSBhIHZhbHVhYmxlIGFkdmljZS4NCg0Kc3Vy ZQ0KDQoNCigyKSBTZWN0aW9uIDIuMjogVGhlIE5PVEUgcHJvYmFibHkgc2hvdWxkIHByb3ZpZGUg Z3VpZGFuY2UgcmVnYXJkaW5nIHByb3RlY3RpbmcNCnRoZSBuZXR3b3JrIGNvbm5lY3Rpb25zIGJl dHdlZW4gdGhlIG1ldGFkYXRhIHNlcnZlciBhbmQgdGhlIGZpbGUgc2VydmVyLiBGb3INCmV4YW1w bGUsIHNvbWV0aGluZyBsaWtlOiDigJxDb21tdW5pY2F0aW9ucyBiZXR3ZWVuIHRoZSBtZXRhZGF0 YSBzZXJ2ZXIgYW5kIGZpbGUNCnNlcnZlciBuZWVkIHRvIHNlY3VyZWQuIElmIHRoZXJlIGlzIG5v dCBhZGVxdWF0ZSBwaHlzaWNhbCBzZWN1cml0eSAoaS5lLiwgdGhlDQpzZXJ2ZXJzIGFyZSBub3Qg Y28tbG9jYXRlZCBpbiBhIHBoeXNpY2FsbHkgc2VjdXJlIGFyZWEpLCB0aGVpciBjb21tdW5pY2F0 aW9ucw0KTVVTVCBiZSBwcm90ZWN0ZWQgZm9yIGNvbmZpZGVudGlhbGl0eSAoZS5nLiwgdXNpbmcg VExTIG9yIElQc2VjKS7igJ0NCg0KTm8sIHRoZSBNVVNUIGlzIHRvbyBzdHJvbmcgaGVyZS4gV2Ug Y2FuIHJlY29tbWVuZCBwcm9jZWR1cmVzLCB3ZSBjYW4gbm90IFJFUVVJUkUgdGhlbS4NCg0KSSBh bSBmaW5lIHdpdGg6DQoNCkNvbW11bmljYXRpb25zIGJldHdlZW4gdGhlIG1ldGFkYXRhIHNlcnZl ciBhbmQgZmlsZQ0Kc2VydmVyIFNIT1VMRCBiZSBzZWN1cmVkLiBJZiB0aGVyZSBpcyBub3QgYWRl cXVhdGUgcGh5c2ljYWwgc2VjdXJpdHkgKGkuZS4sIHRoZQ0Kc2VydmVycyBhcmUgbm90IGNvLWxv Y2F0ZWQgaW4gYSBwaHlzaWNhbGx5IHNlY3VyZSBhcmVhKSwgdGhlaXIgY29tbXVuaWNhdGlvbnMN ClNIT1VMRCBiZSBwcm90ZWN0ZWQgZm9yIGNvbmZpZGVudGlhbGl0eSAoZS5nLiwgdXNpbmcgVExT IG9yIElQc2VjKS7igJ0NCg0KSSB1bmRlcnN0YW5kIHRoZSBoZXNpdGF0aW9uIHRvIG1ha2UgaXQg YSBNVVNULCBiZWNhdXNlIGl04oCZcyBvbiBhIHByb3RvY29sDQp0aGF0IGlzbuKAmXQgZGVzY3Jp YmVkIGluIHRoaXMgZG9jdW1lbnQuIEJ1dCBJIHRoaW5rIGl04oCZcyByZWFzb25hYmxlIHRvIGRl c2NyaWJlDQphIHJpc2sgYW5kIG1ha2UgYSByZXF1aXJlbWVudCB0aGF0IHRoZSByaXNrIGJlIG1p dGlnYXRlZC4gQ2VydGFpbmx5IGl04oCZcyBub3QNCnJlYXNvbmFibGUgdG8gcmVxdWlyZSBhIHBh cnRpY3VsYXIgbWV0aG9kIHRvIGJlIHVzZWQgdG8gcHJvdGVjdCB0aGUgcHJvdG9jb2wNCih3aGlj aCBpcyB3aHkgSSBzdWdnZXN0ZWQg4oCcZS5nLiwgdXNpbmcgVExTIG9yIElQc2Vj4oCdIGFib3Zl IHJhdGhlciB0aGFuIOKAnGkuZS7igJ0pLg0KDQpXaXRoIHRvZGF54oCZcyBwZXJ2YXNpdmUgcHJp dmFjeSB0aHJlYXRzIHRvIG5ldHdvcmsgdHJhZmZpYyBpdOKAmXMgaGFyZCB0bw0KanVzdGlmeSBh bGxvd2luZyBtZXRhZGF0YSB0byB0cmF2ZXJzZSB1bnByb3RlY3RlZCBuZXR3b3JrcyBhcyBjbGVh ci10ZXh0DQooaS4uZSwgYXZhaWxhYmxlIHRvICBwYXNzaXZlIGVhdmVzZHJvcHBlcnMpLiBJdOKA mXMgYWxzbyBoYXJkIG9yIHRvIGp1c3RpZnkgYWxsb3dpbmcNCnNlY3VyaXR5LXJlbGV2ZW50IHBy b3RvY29scyB0byBiZSB0cmFuc2ZlcnJpbmcgaXQgd2l0aG91dCBjcnlwdG9ncmFwaGljIGludGVn cml0eQ0KcHJvdGVjdGlvbi4gSXQgc2VlbXMgaW1wb3J0YW50IHRvIHJlbWluZCBwcm90b2NvbCBk ZXZlbG9wZXJzIHRoYXQgYm90aA0KY29uY2VybnMgYXJlIGFwcGxpY2FibGUuIEhvdyBhYm91dCBz b21ldGhpbmcgbGlrZSB0aGlzLCB3aGVyZSBtb3JlIHJhdGlvbmFsZQ0KaXMgZ2l2ZW4uIE5vdGUg dGhhdCB0aGUgcmVxdWlyZW1lbnQgdGhhdCB0aGUgcHJvdG9jb2wgbXVzdCBiZSBwcm90ZWN0ZWQs IGJ1dA0Kbm8gcGFydGljdWxhciBtZXRob2Qgb2YgcHJvdGVjdGlvbiBpcyBub3QgbWFuZGF0ZWQu DQoNCiJDb21tdW5pY2F0aW9ucyBiZXR3ZWVuIHRoZSBtZXRhZGF0YSBzZXJ2ZXIgYW5kIGZpbGUN CnNlcnZlciBNVVNUIGJlIHNlY3VyZSBmcm9tIGVhdmVzZHJvcHBlcnMgYW5kIG1hbi1pbi10aGUt bWlkZGxlIHByb3RvY29sDQp0YW1wZXJpbmcuIFRoZSBzZWN1cml0eSBtZWFzdXJlIGNvdWxkIGJl IGR1ZSB0byBwaHlzaWNhbCBzZWN1cml0eSAoZS5nLiwgdGhlDQpzZXJ2ZXJzIGFyZSBjby1sb2Nh dGVkIGluIGEgcGh5c2ljYWxseSBzZWN1cmUgYXJlYSksIGZyb20gZW5jcnlwdGVkIGNvbW11bmlj YXRpb25zLA0Kb3Igc29tZSBvdGhlciB0ZWNobmlxdWUu4oCdDQoNCigzKSBGcm9tIHRoZSBkZXNj cmlwdGlvbiBvZiBzeW50aGV0aWMgdWlkcy9naWRzIGluIFNlY3Rpb24gMi4yLCBJIGJlbGlldmUg dGhhdA0KdGhlIGZ1bGwgcmFuZ2Ugb2YgZmlsZSBwZXJtaXNzaW9ucyAoZS5nLiwgb3duZXIgci93 L3gpICBpcyBob25vcmVkIGluIHRoZQ0KdGlnaHRseSBjb3VwbGVkIG1vZGVsLCBidXQgYXJlIHJl c3RyaWN0ZWQgaW4gdGhlIGxvb3NlbHkgY291cGxlZCBtb2RlbCB0bw0K4oCcb3duZXIgci934oCd LCDigJxncm91cCBy4oCdLiBJZiB0aGF0IGlzIGNvcnJlY3QsIEkgdGhpbmsgdGhlIHNlY3VyaXR5 IGNvbnNpZGVyYXRpb25zDQpzaG91bGQgZXhwbGljaXRseSBtZW50aW9uIHRoYXQgdGhlIGVmZmVj dCBvZiBhY2Nlc3MgcGVybWlzc2lvbnMgaXMgcmVkdWNlZCBvbg0KdGhlIGZpbGUgc2VydmVyIGZp bGVzLg0KDQpbMl0gSSB0aGluayB0aGUgY29uZnVzaW9uIGhlcmUgaXMgdGhhdCB0aGUgZmlsZXMg b24gc3RvcmFnZSBkZXZpY2UgYXJlIG5vdA0KaW4gdGhlIGZpbGUgaGllcmFyY2h5IGFzIHNlZW4g b24gdGhlIG1ldGFkYXRhIHNlcnZlci4NCg0KT24gYSBmaWxlIGJ5IGZpbGUgYmFzaXMgb24gdGhl IHN0b3JhZ2UgZGV2aWNlLCB3ZSBhcmUgZ2l2aW5nIHRoZSBjbGllbnQgZWl0aGVyDQp3cml0ZSBt b2RpZmljYXRpb24gYWNjZXNzLCByZWFkIGFjY2Vzcywgb3Igbm8gYWNjZXNzIGF0IGFsbC4gVGhl IGNsaWVudCBjYW5ub3QNCnJlbW92ZSB0aGUgZmlsZSAoaXQgd291bGQgbmVlZCB0byBrbm93IHRo ZSBwYXJlbnQgZGlyZWN0b3J5IEZIIGFuZCB0aGUNCm5hbWUgb2YgdGhlIGZpbGUgLSBuZWl0aGVy IG9mIHdoaWNoIGl0IGhhcykuICBJdCBjYW4gZWZmZWN0aXZlbHkgcmVtb3ZlIHRoZSBjb250ZW50 DQppZiBpdCBoYXMgd3JpdGUgcGVybWlzc2lvbiAoYnV0IG5vdGhpbmcgd291bGQgcHJldmVudCB0 aGlzIGluIGEgdGlnaHRseQ0KY291cGxlZCBtb2RlbCkuDQoNCkdvdCBpdCwgdGhhbmtzLg0KDQoN Cg0KDQoNCg0KKDQpIFNlY3Rpb24gMi4yLiBJbiB0aGlzIHBocmFzZSDigJxpdCBtYXkgYmUgYXNz aWduZWQgc29tZSByYW5kb20gc3ludGhldGljDQp1aWQvZ2lkIHRvIGRlbnkgYWNjZXNz4oCdLCB3 b3VsZCBhIGJldHRlciB3b3JkIGZvciDigJxyYW5kb23igJ0gYmUg4oCcdW51c2Vk4oCdIG9yDQri gJx1bnByZWRpY3RhYmxl4oCdPyBBbHNvIHdoYXQgaXMgdGhlIHNlY3VyaXR5IHZhbHVlIGludGVu ZGVkIGJ5IHRoZSB1c2Ugb2YgYQ0K4oCccmFuZG9t4oCdIHZhbHVlIGZvciBzeW50aGV0aWMgdWlk cy9naWRzPw0KDQoNCkluIGFuIGVhcmxpZXIgcmV2aWV3IChieSBMaW5kYSBEdW5iYXIpLCB0aGF0 IHBocmFzZSB3YXMgY2hhbmdlZDoNCg0KDQogT24gdGhlIHN0b3JhZ2UgZGV2aWNlLCBpdCBtYXkg YmUgYXNzaWduZWQgc29tZSByYW5kb20gc3ludGhldGljIHVpZC8NCiBnaWQgdG8gZGVueSBhY2Nl c3M6DQoNCiAtcnctci0tLS0tICAgIDEgMTk0NTIgICAyODQxOCAgICAxNjk3IERlYyAgNCAxMToz MSBkYXRhX29tcGhhLmMNCg0KIFdoZW4gdGhlIGZpbGUgaXMgb3BlbmVkIG9uIGEgY2xpZW50IGFu ZCBhY2Nlc3NlZCwgaXQgd2lsbCB0cnkgdG8gZ2V0IGENCiBsYXlvdXQgZm9yIHRoZSBkYXRhIGZp bGUuIFNpbmNlIHRoZSBsYXlvdXQga25vd3Mgbm90aGluZw0KIGFib3V0IHRoZSB1c2VyIChhbmQg ZG9lcyBub3QgY2FyZSksIHdoZXRoZXIgdGhlIHVzZXIgbG9naHlyIG9yDQogZ2FyYm8gb3BlbnMg dGhlIGZpbGUgZG9lcyBub3QgbWF0dGVyLiAgVGhlIGNsaWVudCBoYXMgdG8gcHJlc2VudA0KIGFu IHVpZCBvZiAxOTQ1MiB0byBnZXQgd3JpdGUgcGVybWlzc2lvbi4gSWYgaXQgcHJlc2VudHMgYW55 IG90aGVyDQogdmFsdWUgZm9yIHRoZSB1aWQsIHRoZW4gaXQgbXVzdCBnaXZlIGEgZ2lkIG9mIDI4 NDE4IHRvIGdldCByZWFkDQogYWNjZXNzLg0KDQogRnVydGhlciwgaWYgdGhlIG1ldGFkYXRhIHNl cnZlciBkZWNpZGVzIHRvIGZlbmNlIHRoZSBmaWxlLCBpdCBtYXkNCiBjaGFuZ2UgdGhlIHVpZCBh bmQgZ2lkIGFzIHN1Y2g6DQoNCiAtcnctci0tLS0tICAgIDEgMTk0NTMgICAyODQxOSAgICAxNjk3 IERlYyAgNCAxMTozMSBkYXRhX29tcGhhLmMNCg0KDQpXaGF0IHdlIGNvdWxkIHN1Z2dlc3Qgd291 bGQgYmUgc29tZXRoaW5nIGFsb25nIHRoZSBsaW5lcyBvZjoNCg0KIE9uIHRoZSBzdG9yYWdlIGRl dmljZSwgaXQgbWF5IGJlIGFzc2lnbmVkIHNvbWUgdW5wcmVkaWN0YWJsZQ0KIHN5bnRoZXRpYyB1 aWQvZ2lkIHRvIGRlbnkgYWNjZXNzLg0KIOKApg0KIEZ1cnRoZXIsIGlmIHRoZSBtZXRhZGF0YSBz ZXJ2ZXIgZGVjaWRlcyB0byBmZW5jZSB0aGUgZmlsZSwgaXQNCiBzaG91bGQgY2hhbmdlIHRoZSB1 aWQgYW5kL29yIGdpZCBzdWNoIHRoYXQgdGhlc2UgdmFsdWVzDQogbmVpdGhlciBtYXRjaCBlYXJs aWVyIHZhbHVlcyBmb3IgdGhhdCBmaWxlIG5vciBtYXRjaA0KIGEgcHJlZGljdGFibGUgY2hhbmdl IGJhc2VkIG9uIGFuIGVhcmxpZXIgZmVuY2luZy4NCg0KVWdoLCBub3Qgc3VyZSBJIGxpa2UgdGhl IHdvcmRzLg0KDQp1aWRbTisxXSAhPSB1aWRbTi0xXSAmJiB1aWRbTisxXSAgIT0gY2hhbmdlKHVp ZFtOLTFdIC0+IHVpZFtOXSkuDQoNCkkuZS4sIGRvIG5vdCBzZXQgdG8gcmVjZW50IG9sZCB2YWx1 ZXMgKG1pZ2h0IGZlbmNlIGJhY2sgdG8gYW4gdWlkDQphbiBvbGRlciBjbGllbnQgYWxyZWFkeSBo YXMpIGFuZCBkbyBub3QgdXNlIGEgZml4ZWQgaW5jcmVtZW50Lg0KDQpTbyBtYXliZSBpbiB0aGUg Zmlyc3QgcGFyYWdyYXBoIHlvdSBtZWFuIOKAnOKApiBzb21lIHVucHJlZGljdGFibGUgYW5kDQp1 bnVzZWQgYnkgYW55IGN1cnJlbnQgY2xpZW504oCdPw0KDQoNCg0KKDUpIEluIHRoZSDigJxsb29z ZSBjb3VwbGluZyBtb2RlbOKAnSBmaWxlIGFjY2VzcyBhY3R1YWxseSBlbmZvcmNlZCBieSB0aGUg Y2xpZW50LA0Kd2hpY2ggcHJlc3VtYWJseSBjYW4gYmUgbWFuaXB1bGF0ZWQgYnkgYW4gZXZpbCB1 c2VyLiBUaGlzIGlzIGNsZWFybHkgc3RhdGVkIG4NClNlY3Rpb24gMi4yOiDigJwgVGhlIGNsaWVu dCBpcyB0aHVzIHNvbGVseSByZXNwb25zaWJsZSBmb3IgZW5mb3JjaW5nIGZpbGUNCnBlcm1pc3Np b25zIGluIGEgbG9vc2VseSBjb3VwbGVkIG1vZGVsLuKAnSAgQWxzbywgU2VjdGlvbiAyLjIuMSBt ZW50aW9ucyDigJxhDQpTRVRBVFRSIHdvdWxkIGJlIHNlbnQgdG8gdGhlIHN0b3JhZ2UgZGV2aWNl IHRvIHNldCB0aGUgb3duZXIgYW5kIGdyb3VwIG9mIHRoZQ0KZGF0YSBmaWxl4oCdLCBhbmQgc2lu Y2UgaGVyZSBpcyBubyBjb250cm9sIHByb3RvY29sIGJldHdlZW4gdGhlIG1ldGFkYXRhIHNlcnZl cg0KYW5kIHRoZSBmaWxlIHNlcnZlciBzbyBJIGFzc3VtZSBpdCBpcyBzZW50IGJ5IHRoZSBjbGll bnQuDQoNCkl0IGlzIHN1YnRsZSwgYnV0IHRoaXMgZ29lcyBiYWNrIHRvIHRoZSBmYWN0IChzZWUg WzFdKSB0aGF0IOKAnG5vIGNvbnRyb2wgcHJvdG9jb2zigJ0gZG9lcyBub3QNCmltcGx5IOKAnG5v IGNvbW11bmljYXRpb24gYmV0d2VlbiB0aGUgbWV0YWRhdGEgc2VydmVyIGFuZCB0aGUgc3RvcmFn ZQ0KZGV2aWNl4oCdLiAgSS5lLiwgdGhlIE1EUyBkb2VzIHRoZSBTRVRBVFRSLg0KDQpBbHNvLCBJ IG5vdGljZSB5b3UgYXJlIHVzaW5nIHRoZSBwaHJhc2Ug4oCcZmlsZSBzZXJ2ZXLigJ0sIHdoaWNo IHByb2JhYmx5IGltcGFjdHMNCnlvdXIgdmlldyBpbiB5b3VyIHBvaW50IDMgKHNlZSBteSBbMl0p IC0gdGhlIHRlcm0gd2UgdXNlIGlzIHN0b3JhZ2UNCmRldmljZS4gVGhlcmUgaXMgbm8gcmVxdWly ZW1lbnQgdGhhdCB0aGlzIGRldmljZSBzZXJ2ZSB1cCBkYXRhIGZpbGVzDQphcyBpZiB0aGV5IHdl cmUgaW4gYSBmaWxlc3lzdGVtLiBUaGUgc3RvcmFnZSBkZXZpY2UgaXMgbGltaXRlZCBpbiB0aGUg b3BlcmF0aW9ucw0KdGhhdCBpdCBjYW4gcmVzcG9uZCB0byBmcm9tIHRoZSBjbGllbnQgYmFzZWQg b24gdGhlIGluZm9ybWF0aW9uIGl0IGlzDQpwcmVzZW50ZWQgd2l0aC4NCg0KRm9yIGV4YW1wbGUs IHRoZSBleHBvcnRzIG9uIHRoZSBzdG9yYWdlIGRldmljZSBjYW4gYmUgY29uZmlndXJlZCBzdWNo DQp0aGF0IHRoZSBtZXRhZGF0YSBzZXJ2ZXIgaXMgdGhlIG9ubHkgb25lIHdoaWNoIGNhbiBtb3Vu dCB0aGUgZXhwb3J0cy4NCkFuZCBzaW5jZSB0aGUgbWV0YWRhdGEgc2VydmVyIG9ubHkgaGFuZHMg b3V0IEZpbGUgSGFuZGxlcyB0byB0aGUNCmNsaWVudHMsIHRoZXkgd291bGQgbm90IGJlIGFibGUg dG8gd2FsayB0aGUgbmFtZXNwYWNlIG9mIHRoZSBzdG9yYWdlDQpkZXZpY2UuDQoNClRoYW5rcyBm b3IgdGhlIGV4cGxhbmF0aW9uIOKApiBtYWtlcyBzZW5zZS4NCg0KDQoNClB1dCBhbm90aGVyIHdh eSwgaXQgc2VlbXMgYXMgaWYgYW55IGNsaWVudCB0aGF0IGhhcyBjcmVkZW50aWFscyBhbGxvd2lu ZyBpdCB0bw0KYWNjZXNzIHRvIHRoZSBmaWxlIHNlcnZlciBjYW4gYWNjZXNzIGFueSBmaWxlIG9u IHRoZSBmaWxlIHN5c3RlbSBpZiBpdCBpcw0KY2hvb3NlcyB0byBkbyBzbyAoZS5nLi4sIGlmIGl0 IGlzIGEgbWFsaWNpb3VzIGNsaWVudCkuIElzIHRoYXQgY29ycmVjdD8NCg0KQXMgd2l0aCBhbnkg TkZTIGZpbGVzeXN0ZW0gd2hpY2ggdXNlcyBhbiBBVVRIX1NZUyBzZWN1cml0eSBtb2RlbCwNCmVh Y2ggb2YgdGhlIGZpbGUgaGFuZGxlLCB1aWQsIGFuZCBnaWQgY2FuIGJlIGZvcmdlZCB0byBnYWlu IGFjY2Vzcy4NCg0KSW4gb3RoZXIgd29yZHMsIHRoaXMgaXMgbm90aGluZyBuZXcuDQoNClRoZSBz ZWN1cml0eSBtb2RlbCBmb3IgTkZTdjQuMiAoYW5kIGJhc2VkIG9uIHRoYXQsIE5GU3Y0LjAgYW5k IE5GU3Y0LjEpOg0KDQpbUkZDNzg2Ml0NCjE3LiAgU2VjdXJpdHkgQ29uc2lkZXJhdGlvbnMNCg0K ICBORlN2NC4yIGhhcyBhbGwgb2YgdGhlIHNlY3VyaXR5IGNvbmNlcm5zIHByZXNlbnQgaW4gTkZT djQuMSAoc2VlDQogIFNlY3Rpb24gMjEgb2YgW1JGQzU2NjFdKSwgYXMgd2VsbCBhcyB0aG9zZSBw cmVzZW50IGluIHRoZSBzZXJ2ZXItc2lkZQ0KICBjb3B5IChzZWUgU2VjdGlvbiA0LjkpIGFuZCBp biBMYWJlbGVkIE5GUyAoc2VlIFNlY3Rpb24gOS42KS4NCg0KV2hpY2ggbGVhZHMgdXMgdG8gW1JG QzU2NjFdOg0KDQoyLjIuMS4xLjEuMi4gIFNlY3VyaXR5IE1lY2hhbmlzbXMgZm9yIE5GU3Y0LjEN Cg0KICBSUENTRUNfR1NTLCB2aWEgR1NTLUFQSSwgbm9ybWFsaXplcyBhY2Nlc3MgdG8gbWVjaGFu aXNtcyB0aGF0IHByb3ZpZGUNCiAgc2VjdXJpdHkgc2VydmljZXMuICBUaGVyZWZvcmUsIE5GU3Y0 LjEgY2xpZW50cyBhbmQgc2VydmVycyBNVVNUDQogIHN1cHBvcnQgdGhlIEtlcmJlcm9zIFY1IHNl Y3VyaXR5IG1lY2hhbmlzbS4NCg0KICBUaGUgdXNlIG9mIFJQQ1NFQ19HU1MgcmVxdWlyZXMgc2Vs ZWN0aW9uIG9mIG1lY2hhbmlzbSwgcXVhbGl0eSBvZg0KICBwcm90ZWN0aW9uIChRT1ApLCBhbmQg c2VydmljZSAoYXV0aGVudGljYXRpb24sIGludGVncml0eSwgcHJpdmFjeSkuDQogIEZvciB0aGUg bWFuZGF0ZWQgc2VjdXJpdHkgbWVjaGFuaXNtcywgTkZTdjQuMSBzcGVjaWZpZXMgdGhhdCBhIFFP UCBvZg0KICB6ZXJvIGlzIHVzZWQsIGxlYXZpbmcgaXQgdXAgdG8gdGhlIG1lY2hhbmlzbSBvciB0 aGUgbWVjaGFuaXNtJ3MNCiAgY29uZmlndXJhdGlvbiB0byBtYXAgUU9QIHplcm8gdG8gYW4gYXBw cm9wcmlhdGUgbGV2ZWwgb2YgcHJvdGVjdGlvbi4NCiAgRWFjaCBtYW5kYXRlZCBtZWNoYW5pc20g c3BlY2lmaWVzIGEgbWluaW11bSBzZXQgb2YgY3J5cHRvZ3JhcGhpYw0KICBhbGdvcml0aG1zIGZv ciBpbXBsZW1lbnRpbmcgaW50ZWdyaXR5IGFuZCBwcml2YWN5LiAgTkZTdjQuMSBjbGllbnRzDQog IGFuZCBzZXJ2ZXJzIE1VU1QgYmUgaW1wbGVtZW50ZWQgb24gb3BlcmF0aW5nIGVudmlyb25tZW50 cyB0aGF0IGNvbXBseQ0KICB3aXRoIHRoZSBSRVFVSVJFRCBjcnlwdG9ncmFwaGljIGFsZ29yaXRo bXMgb2YgZWFjaCBSRVFVSVJFRA0KICBtZWNoYW5pc20uDQoNCjIuMi4xLjEuMS4yLjEuICBLZXJi ZXJvcyBWNQ0KDQogIFRoZSBLZXJiZXJvcyBWNSBHU1MtQVBJIG1lY2hhbmlzbSBhcyBkZXNjcmli ZWQgaW4gWzVdIE1VU1QgYmUNCiAgaW1wbGVtZW50ZWQgd2l0aCB0aGUgUlBDU0VDX0dTUyBzZXJ2 aWNlcyBhcyBzcGVjaWZpZWQgaW4gdGhlDQogIGZvbGxvd2luZyB0YWJsZToNCg0KVG8gcGFyYXBo cmFzZSBpdCwgTkZTdjQueCBjbGllbnRzIGFuZCBzZXJ2ZXJzIE1VU1Qgc3VwcG9ydA0KdGhlIEtl cmJlcm9zIFY1IHNlY3VyaXR5IG1lY2hhbmlzbSwgYnV0IGluc3RhbGxhdGlvbnMgYXJlIG5vdA0K cmVxdWlyZWQgdG8gdXNlIEtlcmJlcm9zLg0KDQpJLmUuLCB0aGlzOg0KDQptb3VudCAtbyB2ZXJz PTQuMixzZWM9c3lzIHNlcnZlcjovIC9tbnQNCg0KbWVhbnMgdGhhdCBhbnkgbWFsaWNpb3VzIHVz ZXIgY2FuIHVzZSBhbnkgY2xpZW50IHdoaWNoIGNhbiBjb25uZWN0DQp0byB0aGUgc2VydmVyIHRv IGRvIHdoYXRldmVyIHRoZXkgd2FudC4NCg0KSW4gb3RoZXIgd29yZHMsIHRoaXMgaXMgbm90IGEg cmVkdWN0aW9uIG9mIHRoZSBhY3R1YWwgc2VjdXJpdHkgZnJvbSBORlN2NC54Lg0KDQpUaGFua3Mg Zm9yIHRoZSBleHRlbnNpdmUgZXhwbGFuYXRpb24uIEl0IHJlc29sdmVzIHRoZSBpc3N1ZSB0aGF0 IEkgcGVyY2VpdmVkLg0KDQpUaGFua3MsDQpCcmlhbg0KDQoNCg0KDQpVbmxlc3MgSeKAmW0gbWlz dGFrZW4sIHRoaXMgaXMgYSBzZXJpb3VzIHJlZHVjdGlvbiBvZiBhY3R1YWwgc2VjdXJpdHkgZnJv bSBORlMNCjQueCwgYW5kIGFsc28gZnJvbSB0aGUgdGlnaHQgY291cGxpbmcgbW9kZWwuIFRoaXMg c2hvdWxkIGJlIGNsZWFybHkgc3RhdGVkIGluDQp0aGUgc2VjdXJpdHkgY29uc2lkZXJhdGlvbnMg c2VjdGlvbiwgc28gdGhhdCBwcm90b2NvbCBhZG9wdGVycyBhbmQgdXNlcnMNCnVuZGVyc3RhbmQg dGhlIGFkZGl0aW9uYWwgcmlza3Mgb2YgdGhlIGxvb3NlIGNvdXBsaW5nIG1vZGVsLiBGb3IgdGhp cyAgcmVhc29uLA0KSSd2ZSBtYXJrZWQgdGhlIHJldmlldyB3aXRoICJIYXMgSXNzdWVzIiByYXRo ZXIgdGhhbiAiSGFzIE5pdHMiLg0KDQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fXw0KbmZzdjQgbWFpbGluZyBsaXN0DQpuZnN2NEBpZXRmLm9yZzxtYWlsdG86 bmZzdjRAaWV0Zi5vcmc+DQpodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL25m c3Y0DQoNCi0tDQpCcmlhbiBXZWlzDQpTZWN1cml0eSwgQ1NHLCBDaXNjbyBTeXN0ZW1zDQpUZWxl cGhvbmU6ICsxIDQwOCA1MjYgNDc5Ng0KRW1haWw6IGJld0BjaXNjby5jb208bWFpbHRvOmJld0Bj aXNjby5jb20+DQoNCg== --_000_2D43D657817F4C43A405E7FB83C688ADciscocom_ Content-Type: text/html; charset="utf-8" Content-ID: <25FC1CCE13360442A5ACE4AE808C72D0@emea.cisco.com> Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgLXdlYmtpdC1saW5lLWJy ZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsiIGNsYXNzPSIiPg0KSGkgVGhvbWFzLA0KPGRpdiBjbGFz cz0iIj48YnIgY2xhc3M9IiI+DQo8ZGl2Pg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9 IiI+DQo8ZGl2IGNsYXNzPSIiPk9uIEphbiAxMiwgMjAxOCwgYXQgMTE6NDEgQU0sIFRob21hcyBI YXluZXMgJmx0OzxhIGhyZWY9Im1haWx0bzpsb2doeXJAcHJpbWFyeWRhdGEuY29tIiBjbGFzcz0i Ij5sb2doeXJAcHJpbWFyeWRhdGEuY29tPC9hPiZndDsgd3JvdGU6PC9kaXY+DQo8YnIgY2xhc3M9 IkFwcGxlLWludGVyY2hhbmdlLW5ld2xpbmUiPg0KPGRpdiBjbGFzcz0iIj48c3BhbiBzdHlsZT0i Zm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3Jt YWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRl ci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0 ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAw cHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6 IGlubGluZSAhaW1wb3J0YW50OyIgY2xhc3M9IiI+SGkNCiBCcmlhbiw8L3NwYW4+PGJyIHN0eWxl PSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5v cm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0 dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7 IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6 IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyIgY2xhc3M9IiI+DQo8YnIgc3R5 bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTog bm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBs ZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBw eDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2lu ZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IiBjbGFzcz0iIj4NCjxzcGFu IHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5 bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1h bDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50 OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNw YWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9uZTsg ZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7IiBjbGFzcz0iIj5UaGFua3MNCiBmb3IgdGhlIHJl dmlldyAtIGNvbW1lbnRzIGlubGluZS4uPC9zcGFuPjxiciBzdHlsZT0iZm9udC1mYW1pbHk6IEhl bHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFu dC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3Jt YWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTog bm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4 dC1zdHJva2Utd2lkdGg6IDBweDsiIGNsYXNzPSIiPg0KPGJyIHN0eWxlPSJmb250LWZhbWlseTog SGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJp YW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5v cm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3Jt OiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10 ZXh0LXN0cm9rZS13aWR0aDogMHB4OyIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRl IiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0 eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3Jt YWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IG9ycGhhbnM6IGF1dG87IHRleHQtYWxpZ246IHN0 YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6 IG5vcm1hbDsgd2lkb3dzOiBhdXRvOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXNp emUtYWRqdXN0OiBhdXRvOyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IiBjbGFzcz0i Ij4NCk9uIEphbiAxMiwgMjAxOCwgYXQgMTA6NDUgQU0sIEJyaWFuIFdlaXMgJmx0OzxhIGhyZWY9 Im1haWx0bzpiZXdAY2lzY28uY29tIiBjbGFzcz0iIj5iZXdAY2lzY28uY29tPC9hPiZndDsgd3Jv dGU6PGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KUmV2aWV3ZXI6IEJyaWFuIFdlaXM8YnIg Y2xhc3M9IiI+DQpSZXZpZXcgcmVzdWx0OiBIYXMgSXNzdWVzPGJyIGNsYXNzPSIiPg0KPGJyIGNs YXNzPSIiPg0KSSBoYXZlIHJldmlld2VkIHRoaXMgZG9jdW1lbnQgYXMgcGFydCBvZiB0aGUgc2Vj dXJpdHkgZGlyZWN0b3JhdGUncyBvbmdvaW5nPGJyIGNsYXNzPSIiPg0KZWZmb3J0IHRvIHJldmll dyBhbGwgSUVURiBkb2N1bWVudHMgYmVpbmcgcHJvY2Vzc2VkIGJ5IHRoZSBJRVNHLiBUaGVzZSBj b21tZW50czxiciBjbGFzcz0iIj4NCndlcmUgd3JpdHRlbiBwcmltYXJpbHkgZm9yIHRoZSBiZW5l Zml0IG9mIHRoZSBzZWN1cml0eSBhcmVhIGRpcmVjdG9ycy4gRG9jdW1lbnQ8YnIgY2xhc3M9IiI+ DQplZGl0b3JzIGFuZCBXRyBjaGFpcnMgc2hvdWxkIHRyZWF0IHRoZXNlIGNvbW1lbnRzIGp1c3Qg bGlrZSBhbnkgb3RoZXIgbGFzdCBjYWxsPGJyIGNsYXNzPSIiPg0KY29tbWVudHMuPGJyIGNsYXNz PSIiPg0KPGJyIGNsYXNzPSIiPg0KVGhpcyBkb2N1bWVudCBkZWZpbmVzIHRoZSBQYXJhbGxlbCBO ZXR3b3JrIEZpbGUgU3lzdGVtIChwTkZTKSwgd2hpY2ggYWxsb3dzIGE8YnIgY2xhc3M9IiI+DQpz dG9yYWdlIHN5c3RlbSB0byBzdG9yZSB0aGUgbWV0YWRhdGEgZm9yIGZpbGVzIG9udG8gYSBtZXRh ZGF0YSBzZXJ2ZXIsIGFuZCBkYXRhPGJyIGNsYXNzPSIiPg0Kb2YgdGhhdCBmaWxlIG9udG8gYSBz ZXBhcmF0ZSBzdG9yYWdlIGRldmljZS4gVGhlIGRvY3VtZW50IGZvY3VzZXMgb24gdGhlPGJyIGNs YXNzPSIiPg0KaW50ZXJhY3Rpb24gYmV0d2VlbiB0aGUgdHdvIHR5cGVzIG9mIHNlcnZlcnMsIGFu ZCB0aGUgcmVxdWlyZW1lbnRzIG9mIGNsaWVudHM8YnIgY2xhc3M9IiI+DQp1c2luZyBhIHBORlMg c3lzdGVtLjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NClRoZSBkb2N1bWVudCBkZXNjcmli ZXMgdHdvIG1vZGVscyBieSB3aGljaCB0aGUgbWV0YWRhdGEgc2VydmVyIGFuZCBmaWxlIHN0b3Jh Z2U8YnIgY2xhc3M9IiI+DQpzZXJ2ZXIgY2FuIGNvbW11bmljYXRlLiBPbmUgaXMgYSDigJx0aWdo dCBjb3VwbGluZyBtb2RlbOKAnSwgaW4gd2hpY2ggdGhlIHR3byB0eXBlczxiciBjbGFzcz0iIj4N Cm9mIHNlcnZlcnMgZGlyZWN0bHkgY29tbXVuaWNhdGUuIEluIHRoaXMgbW9kZWwgdGhlIG1ldGFk YXRhIHNlcnZlciBjYW4gZW5zdXJlPGJyIGNsYXNzPSIiPg0KdGhhdCBmaWxlIGFjY2VzcyBjb250 cm9sIHN0YXRlIGlzIHN5bmNocm9uaXplZCBiZXR3ZWVuIHRoZSB0d28gc2VydmVycywgYW5kIEk8 YnIgY2xhc3M9IiI+DQpiZWxpZXZlIHRoYXQgbGV2ZWwgb2YgYWNjZXNzIGNvbnRyb2wgaXMgZXF1 aXZhbGVudCB0byBORlMgdjQueCB0b2RheS4gRnJvbSBhPGJyIGNsYXNzPSIiPg0Kc2VjdXJpdHkg Y29uc2lkZXJhdGlvbnMgcGVyc3BlY3RpdmUsIHRoaXMgaXMgcGVyaGFwcyBiZXN0IHN1bW1hcml6 ZWQgaW4gU2VjdGlvbjxiciBjbGFzcz0iIj4NCjIuMjo8YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9 IiI+DQrigJxXaXRoIHRpZ2h0bHkgY291cGxlZCBzdG9yYWdlIGRldmljZXMsIHRoZSBtZXRhZGF0 YSBzZXJ2ZXIgc2V0cyB0aGU8YnIgY2xhc3M9IiI+DQombmJzcDt1c2VyIGFuZCBncm91cCBvd25l cnMsIG1vZGUgYml0cywgYW5kIEFDTCBvZiB0aGUgZGF0YSBmaWxlIHRvIGJlIHRoZTxiciBjbGFz cz0iIj4NCiZuYnNwO3NhbWUgYXMgdGhlIG1ldGFkYXRhIGZpbGUuICZuYnNwO0FuZCB0aGUgY2xp ZW50IG11c3QgYXV0aGVudGljYXRlIHdpdGggdGhlPGJyIGNsYXNzPSIiPg0KJm5ic3A7c3RvcmFn ZSBkZXZpY2UgYW5kIGdvIHRocm91Z2ggdGhlIHNhbWUgYXV0aG9yaXphdGlvbiBwcm9jZXNzIGl0 IHdvdWxkPGJyIGNsYXNzPSIiPg0KJm5ic3A7Z28gdGhyb3VnaCB2aWEgdGhlIG1ldGFkYXRhIHNl cnZlci7igJ08YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQpUaGUgb3RoZXIgbW9kZWwgaXMg YSDigJxsb29zZSBjb3VwbGluZyBtb2RlbOKAnSwgaW4gd2hpY2ggdGhlIGNsaWVudCBpczxiciBj bGFzcz0iIj4NCmF1dGhlbnRpY2F0ZWQgYW5kIGF1dGhvcml6ZWQgYnkgdGhlIG1ldGFkYXRhIHNl cnZlciwgYW5kIGlzIGdpdmVuIGFjY2VzcyB0byB0aGU8YnIgY2xhc3M9IiI+DQpmaWxlIHNlcnZl ciB0aHJvdWdoIHRoZSB1c2UgY3JlZGVudGlhbHMuIEhvd2V2ZXIsIHRoZXJlIGlzIG5vIGRpcmVj dDxiciBjbGFzcz0iIj4NCmNvbW11bmljYXRpb25zIGJldHdlZW4gdGhlIG1ldGFkYXRhIHNlcnZl ciBhbmQgdGhlIGZpbGUgc2VydmVyLiBUaGUgbWV0YWRhdGE8YnIgY2xhc3M9IiI+DQpzZXJ2ZXIg ZG9lcyBub3Qgc2VlbSB0byBwcm92aWRlIGEgZmluZSBncmFpbmVkIGFjY2VzcyBjb250cm9sIHRv IGZpbGVzIG9uIHRoZTxiciBjbGFzcz0iIj4NCmZpbGUgc2VydmVyLCBidXQgaW5zdGVhZCByZWxp ZXMgdXBvbiB0aGUgY2xpZW50IHRvIGVuZm9yY2UgYSBsZXNzIGdyYW51bGFyPGJyIGNsYXNzPSIi Pg0KbGV2ZWwgb2YgYWNjZXNzIGNvbnRyb2wuPGJyIGNsYXNzPSIiPg0KPC9ibG9ja3F1b3RlPg0K PGJyIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQt c3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5v cm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5k ZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3Jk LXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyIgY2xhc3M9IiI+ DQo8c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBm b250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0 OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0 LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsg d29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6 IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyIgY2xhc3M9IiI+WzFdDQogTm8sIHRo ZXJlIGlzIHN0aWxsIGRpcmVjdCBjb21tdW5pY2F0aW9uIGJldHdlZW4gdGhlIG1ldGFkYXRhIHNl cnZlciBhbmQgdGhlIGZpbGUgc2VydmVyLjwvc3Bhbj48YnIgc3R5bGU9ImZvbnQtZmFtaWx5OiBI ZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlh bnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9y bWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06 IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRl eHQtc3Ryb2tlLXdpZHRoOiAwcHg7IiBjbGFzcz0iIj4NCjxiciBzdHlsZT0iZm9udC1mYW1pbHk6 IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFy aWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBu b3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9y bTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQt dGV4dC1zdHJva2Utd2lkdGg6IDBweDsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5bGU9ImZvbnQtZmFt aWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250 LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2lu Zzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFu c2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Vi a2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUg IWltcG9ydGFudDsiIGNsYXNzPSIiPlRoZQ0KIGRpZmZlcmVuY2UgaXMgdGhhdCBpdCBpcyB2aWEg YSBzdG9yYWdlIHByb3RvY29sLCBpbiB0aGlzIGNhc2UgTkZTLjwvc3Bhbj48L2Rpdj4NCjwvYmxv Y2txdW90ZT4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0i Ij48YnIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9u dC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDog bm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1p bmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdv cmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IiBjbGFzcz0i Ij4NCjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7 IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWln aHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRl eHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFs OyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9h dDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7IiBjbGFzcz0iIj5UaGUNCiBhY2Nl c3MgY29udHJvbCBpcyBlbmZvcmNlZCBieSB0aGUgbWV0YWRhdGEgc2VydmVyLiBUaGUgY2xpZW50 IG9ubHkgZ2V0IGFjY2Vzczwvc3Bhbj48YnIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7 IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczog bm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0 LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdo aXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tl LXdpZHRoOiAwcHg7IiBjbGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0 aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNh cHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsg dGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25l OyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0 cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7 IiBjbGFzcz0iIj50bw0KIHRoZSBmaWxlIGlmIGl0IGNhbiBnZXQgYSBsYXlvdXQuIFRoZSBsYXlv dXQgY2FuIGVpdGhlciBwcm92aWRlIHJlYWQvd3JpdGUgYWNjZXNzPC9zcGFuPjxiciBzdHlsZT0i Zm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3Jt YWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRl ci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0 ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAw cHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5 bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTog bm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBs ZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBw eDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2lu ZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNw bGF5OiBpbmxpbmUgIWltcG9ydGFudDsiIGNsYXNzPSIiPm9yDQogb25seSByZWFkIGFjY2Vzcy48 L3NwYW4+PGJyIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7 IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWln aHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRl eHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFs OyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyIgY2xh c3M9IiI+DQo8YnIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJw eDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdl aWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsg dGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3Jt YWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IiBj bGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6 IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9u dC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3Rh cnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTog bm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4 OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7IiBjbGFzcz0iIj5UaGUN CiBtZXRhZGF0YSBzZXJ2ZXIgY2FuIHJldm9rZSB0aGF0IGFjY2VzcyBhdCBhbnkgcG9pbnQsIHNv IGl0IGlzIG5vdDwvc3Bhbj48YnIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQt c2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFs OyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWdu OiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNw YWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRo OiAwcHg7IiBjbGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBm b250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5v cm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1h bGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0 ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13 aWR0aDogMHB4OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7IiBjbGFz cz0iIj5jb3JyZWN0DQogdG8gc2F5IHRoYXQgaXQgZGVwZW5kcyBvbiB0aGUgY2xpZW50IHRvIGVu Zm9yY2UgYSBsZXNzIGdyYW51bGFyIGxldmVsPC9zcGFuPjxiciBzdHlsZT0iZm9udC1mYW1pbHk6 IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFy aWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBu b3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9y bTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQt dGV4dC1zdHJva2Utd2lkdGg6IDBweDsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5bGU9ImZvbnQtZmFt aWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250 LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2lu Zzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFu c2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Vi a2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUg IWltcG9ydGFudDsiIGNsYXNzPSIiPm9mDQogYWNjZXNzIGNvbnRyb2wuPC9zcGFuPjxiciBzdHls ZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBu b3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxl dHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4 OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5n OiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiIGNsYXNzPSIiPg0KPC9kaXY+ DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2PjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KVGhhbmtzIGZvciB0 aGUgY2xhcmlmaWNhdGlvbi4gVG8gYSBub24tTkZTIGV4cGVydCB0aGUgcmVsYXRpb25zaGlwIGJl dHdlZW4gbGF5b3V0cyBhbmQmbmJzcDs8L2Rpdj4NCjxkaXY+YWNjZXNzIGNvbnRyb2wgJm5ic3A7 d2FzbuKAmXQgb2J2aW91cy4gSSB3b25kZXIgaWYgdGhpcyBkaXNjdXNzaW9uIGNvdWxkIGJlIGFk ZGVkIHRvIFNlY3VyaXR5PC9kaXY+DQo8ZGl2PkNvbnNpZGVyYXRpb25zPzwvZGl2Pg0KPGRpdiBj bGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4N CjxkaXYgY2xhc3M9IiI+PGJyIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNp emU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsg Zm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjog c3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFj ZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDog MHB4OyIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBzdHlsZT0iZm9udC1mYW1p bHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQt dmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5n OiBub3JtYWw7IG9ycGhhbnM6IGF1dG87IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDog MHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd2lkb3dzOiBh dXRvOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXNpemUtYWRqdXN0OiBhdXRvOyAt d2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IiBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4N ClRoZSBTZWN1cml0eSBDb25zaWRlcmF0aW9ucyBzZWN0aW9uIGlzIHdlbGwtd3JpdHRlbiBhbmQg aGVscGZ1bC4gSSBkbyBoYXZlIHNvbWU8YnIgY2xhc3M9IiI+DQpzdWdnZXN0aW9ucyBmb3IgaW1w cm92aW5nIGl0LCAmbmJzcDthbmQgYWxzbyBzb21lIHF1ZXN0aW9ucy48YnIgY2xhc3M9IiI+DQo8 YnIgY2xhc3M9IiI+DQooMSkgU2VjdGlvbiAyLjI6IHNob3VsZCB0aGUg4oCccmVjb21tZW5kZWTi gJ0gaW4gdGhlIE5vdGUgYmUgUkVDT01NRU5ERUQ/PGJyIGNsYXNzPSIiPg0KUmVzdHJpY3Rpbmcg YWNjZXNzIGNvbnRyb2wgdG8ganVzdCBzdXBlcnVzZXIgaGF2ZSBhY2Nlc3MgdG8gdGhlIHN0b3Jh Z2UgZGV2aWNlPGJyIGNsYXNzPSIiPg0Kc2VlbXMgbGlrZSBhIHZhbHVhYmxlIGFkdmljZS48YnIg Y2xhc3M9IiI+DQo8L2Jsb2NrcXVvdGU+DQo8YnIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRp Y2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fw czogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0 ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7 IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ry b2tlLXdpZHRoOiAwcHg7IiBjbGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTogSGVs dmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50 LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1h bDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBu b25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0 LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRh bnQ7IiBjbGFzcz0iIj5zdXJlPC9zcGFuPjxiciBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGlj YTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBz OiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRl eHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsg d2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJv a2Utd2lkdGg6IDBweDsiIGNsYXNzPSIiPg0KPGJyIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0 aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNh cHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsg dGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25l OyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0 cm9rZS13aWR0aDogMHB4OyIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBzdHls ZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBu b3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxl dHRlci1zcGFjaW5nOiBub3JtYWw7IG9ycGhhbnM6IGF1dG87IHRleHQtYWxpZ246IHN0YXJ0OyB0 ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1h bDsgd2lkb3dzOiBhdXRvOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXNpemUtYWRq dXN0OiBhdXRvOyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IiBjbGFzcz0iIj4NCjxi ciBjbGFzcz0iIj4NCigyKSBTZWN0aW9uIDIuMjogVGhlIE5PVEUgcHJvYmFibHkgc2hvdWxkIHBy b3ZpZGUgZ3VpZGFuY2UgcmVnYXJkaW5nIHByb3RlY3Rpbmc8YnIgY2xhc3M9IiI+DQp0aGUgbmV0 d29yayBjb25uZWN0aW9ucyBiZXR3ZWVuIHRoZSBtZXRhZGF0YSBzZXJ2ZXIgYW5kIHRoZSBmaWxl IHNlcnZlci4gRm9yPGJyIGNsYXNzPSIiPg0KZXhhbXBsZSwgc29tZXRoaW5nIGxpa2U6IOKAnENv bW11bmljYXRpb25zIGJldHdlZW4gdGhlIG1ldGFkYXRhIHNlcnZlciBhbmQgZmlsZTxiciBjbGFz cz0iIj4NCnNlcnZlciBuZWVkIHRvIHNlY3VyZWQuIElmIHRoZXJlIGlzIG5vdCBhZGVxdWF0ZSBw aHlzaWNhbCBzZWN1cml0eSAoaS5lLiwgdGhlPGJyIGNsYXNzPSIiPg0Kc2VydmVycyBhcmUgbm90 IGNvLWxvY2F0ZWQgaW4gYSBwaHlzaWNhbGx5IHNlY3VyZSBhcmVhKSwgdGhlaXIgY29tbXVuaWNh dGlvbnM8YnIgY2xhc3M9IiI+DQpNVVNUIGJlIHByb3RlY3RlZCBmb3IgY29uZmlkZW50aWFsaXR5 IChlLmcuLCB1c2luZyBUTFMgb3IgSVBzZWMpLuKAnTxiciBjbGFzcz0iIj4NCjwvYmxvY2txdW90 ZT4NCjxiciBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBm b250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0 OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0 LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsg d29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiIGNsYXNz PSIiPg0KPHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJw eDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdl aWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsg dGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3Jt YWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZs b2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiIGNsYXNzPSIiPk5vLA0KIHRo ZSBNVVNUIGlzIHRvbyBzdHJvbmcgaGVyZS4gV2UgY2FuIHJlY29tbWVuZCBwcm9jZWR1cmVzLCB3 ZSBjYW4gbm90IFJFUVVJUkUgdGhlbS48L3NwYW4+PGJyIHN0eWxlPSJmb250LWZhbWlseTogSGVs dmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50 LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1h bDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBu b25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0 LXN0cm9rZS13aWR0aDogMHB4OyIgY2xhc3M9IiI+DQo8YnIgc3R5bGU9ImZvbnQtZmFtaWx5OiBI ZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlh bnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9y bWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06 IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRl eHQtc3Ryb2tlLXdpZHRoOiAwcHg7IiBjbGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJmb250LWZhbWls eTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12 YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6 IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNm b3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtp dC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFp bXBvcnRhbnQ7IiBjbGFzcz0iIj5JDQogYW0gZmluZSB3aXRoOjwvc3Bhbj48YnIgc3R5bGU9ImZv bnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFs OyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXIt c3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4 dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4 OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IiBjbGFzcz0iIj4NCjxiciBzdHlsZT0i Zm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3Jt YWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRl ci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0 ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAw cHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5 bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTog bm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBs ZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBw eDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2lu ZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNw bGF5OiBpbmxpbmUgIWltcG9ydGFudDsiIGNsYXNzPSIiPkNvbW11bmljYXRpb25zDQogYmV0d2Vl biB0aGUgbWV0YWRhdGEgc2VydmVyIGFuZCBmaWxlPC9zcGFuPjxiciBzdHlsZT0iZm9udC1mYW1p bHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQt dmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5n OiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5z Zm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJr aXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5bGU9ImZvbnQt ZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBm b250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3Bh Y2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10 cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAt d2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxp bmUgIWltcG9ydGFudDsiIGNsYXNzPSIiPnNlcnZlcg0KIFNIT1VMRCBiZSBzZWN1cmVkLiBJZiB0 aGVyZSBpcyBub3QgYWRlcXVhdGUgcGh5c2ljYWwgc2VjdXJpdHkgKGkuZS4sIHRoZTwvc3Bhbj48 YnIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1z dHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9y bWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRl bnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQt c3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IiBjbGFzcz0iIj4N CjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZv bnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6 IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQt aW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3 b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDog bm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7IiBjbGFzcz0iIj5zZXJ2ZXJzDQogYXJl IG5vdCBjby1sb2NhdGVkIGluIGEgcGh5c2ljYWxseSBzZWN1cmUgYXJlYSksIHRoZWlyIGNvbW11 bmljYXRpb25zPC9zcGFuPjxiciBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1z aXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7 IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246 IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3Bh Y2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6 IDBweDsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZv bnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9y bWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFs aWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRl LXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdp ZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiIGNsYXNz PSIiPlNIT1VMRA0KIGJlIHByb3RlY3RlZCBmb3IgY29uZmlkZW50aWFsaXR5IChlLmcuLCB1c2lu ZyBUTFMgb3IgSVBzZWMpLuKAnTwvc3Bhbj48YnIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRp Y2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fw czogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0 ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7 IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ry b2tlLXdpZHRoOiAwcHg7IiBjbGFzcz0iIj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdiBj bGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCkkgdW5kZXJzdGFuZCB0aGUgaGVzaXRhdGlv biB0byBtYWtlIGl0IGEgTVVTVCwgYmVjYXVzZSBpdOKAmXMgb24gYSBwcm90b2NvbDwvZGl2Pg0K PGRpdiBjbGFzcz0iIj50aGF0IGlzbuKAmXQgZGVzY3JpYmVkIGluIHRoaXMgZG9jdW1lbnQuIEJ1 dCBJIHRoaW5rIGl04oCZcyByZWFzb25hYmxlIHRvIGRlc2NyaWJlPC9kaXY+DQo8ZGl2IGNsYXNz PSIiPmEgcmlzayBhbmQgbWFrZSBhIHJlcXVpcmVtZW50IHRoYXQgdGhlIHJpc2sgYmUgbWl0aWdh dGVkLiBDZXJ0YWlubHkgaXTigJlzIG5vdDwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5yZWFzb25hYmxl IHRvIHJlcXVpcmUgYSBwYXJ0aWN1bGFyIG1ldGhvZCB0byBiZSB1c2VkIHRvIHByb3RlY3QgdGhl IHByb3RvY29sPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPih3aGljaCBpcyB3aHkgSSBzdWdnZXN0ZWQg 4oCcZS5nLiwgdXNpbmcgVExTIG9yIElQc2Vj4oCdIGFib3ZlIHJhdGhlciB0aGFuIOKAnGkuZS7i gJ0pLjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xh c3M9IiI+V2l0aCB0b2RheeKAmXMgcGVydmFzaXZlIHByaXZhY3kgdGhyZWF0cyB0byBuZXR3b3Jr IHRyYWZmaWMgaXTigJlzIGhhcmQgdG8mbmJzcDs8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+anVzdGlm eSBhbGxvd2luZyBtZXRhZGF0YSB0byB0cmF2ZXJzZSB1bnByb3RlY3RlZCBuZXR3b3JrcyBhcyBj bGVhci10ZXh0Jm5ic3A7PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPihpLi5lLCBhdmFpbGFibGUgdG8g Jm5ic3A7cGFzc2l2ZSBlYXZlc2Ryb3BwZXJzKS4gSXTigJlzIGFsc28gaGFyZCBvciB0byBqdXN0 aWZ5IGFsbG93aW5nJm5ic3A7PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPnNlY3VyaXR5LXJlbGV2ZW50 IHByb3RvY29scyB0byBiZSB0cmFuc2ZlcnJpbmcgaXQgd2l0aG91dCBjcnlwdG9ncmFwaGljIGlu dGVncml0eSZuYnNwOzwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5wcm90ZWN0aW9uLiBJdCBzZWVtcyBp bXBvcnRhbnQgdG8gcmVtaW5kIHByb3RvY29sIGRldmVsb3BlcnMgdGhhdCBib3RoPC9kaXY+DQo8 ZGl2IGNsYXNzPSIiPmNvbmNlcm5zIGFyZSBhcHBsaWNhYmxlLiBIb3cgYWJvdXQgc29tZXRoaW5n IGxpa2UgdGhpcywgd2hlcmUgbW9yZSByYXRpb25hbGU8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+aXMg Z2l2ZW4uIE5vdGUgdGhhdCB0aGUgcmVxdWlyZW1lbnQgdGhhdCB0aGUgcHJvdG9jb2wgbXVzdCBi ZSBwcm90ZWN0ZWQsIGJ1dDwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5ubyBwYXJ0aWN1bGFyIG1ldGhv ZCBvZiBwcm90ZWN0aW9uIGlzIG5vdCBtYW5kYXRlZC48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJy IGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPiZxdW90O0NvbW11bmljYXRpb25zIGJl dHdlZW4gdGhlIG1ldGFkYXRhIHNlcnZlciBhbmQgZmlsZTxiciBjbGFzcz0iIj4NCnNlcnZlciBN VVNUIGJlIHNlY3VyZSBmcm9tIGVhdmVzZHJvcHBlcnMgYW5kIG1hbi1pbi10aGUtbWlkZGxlIHBy b3RvY29sJm5ic3A7PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPnRhbXBlcmluZy4gVGhlIHNlY3VyaXR5 IG1lYXN1cmUgY291bGQgYmUgZHVlIHRvIHBoeXNpY2FsIHNlY3VyaXR5IChlLmcuLCB0aGUmbmJz cDs8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+c2VydmVycyBhcmUgY28tbG9jYXRlZCBpbiBhIHBoeXNp Y2FsbHkgc2VjdXJlIGFyZWEpLCBmcm9tIGVuY3J5cHRlZCBjb21tdW5pY2F0aW9ucyw8L2Rpdj4N CjxkaXYgY2xhc3M9IiI+b3Igc29tZSBvdGhlciB0ZWNobmlxdWUu4oCdPC9kaXY+DQo8ZGl2IGNs YXNzPSIiPjxiciBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0K PGRpdiBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIHN0eWxlPSJmb250LWZhbWls eTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12 YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6 IG5vcm1hbDsgb3JwaGFuczogYXV0bzsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAw cHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3aWRvd3M6IGF1 dG87IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc2l6ZS1hZGp1c3Q6IGF1dG87IC13 ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiIGNsYXNzPSIiPg0KKDMpIEZyb20gdGhlIGRl c2NyaXB0aW9uIG9mIHN5bnRoZXRpYyB1aWRzL2dpZHMgaW4gU2VjdGlvbiAyLjIsIEkgYmVsaWV2 ZSB0aGF0PGJyIGNsYXNzPSIiPg0KdGhlIGZ1bGwgcmFuZ2Ugb2YgZmlsZSBwZXJtaXNzaW9ucyAo ZS5nLiwgb3duZXIgci93L3gpICZuYnNwO2lzIGhvbm9yZWQgaW4gdGhlPGJyIGNsYXNzPSIiPg0K dGlnaHRseSBjb3VwbGVkIG1vZGVsLCBidXQgYXJlIHJlc3RyaWN0ZWQgaW4gdGhlIGxvb3NlbHkg Y291cGxlZCBtb2RlbCB0bzxiciBjbGFzcz0iIj4NCuKAnG93bmVyIHIvd+KAnSwg4oCcZ3JvdXAg cuKAnS4gSWYgdGhhdCBpcyBjb3JyZWN0LCBJIHRoaW5rIHRoZSBzZWN1cml0eSBjb25zaWRlcmF0 aW9uczxiciBjbGFzcz0iIj4NCnNob3VsZCBleHBsaWNpdGx5IG1lbnRpb24gdGhhdCB0aGUgZWZm ZWN0IG9mIGFjY2VzcyBwZXJtaXNzaW9ucyBpcyByZWR1Y2VkIG9uPGJyIGNsYXNzPSIiPg0KdGhl IGZpbGUgc2VydmVyIGZpbGVzLjxiciBjbGFzcz0iIj4NCjwvYmxvY2txdW90ZT4NCjxiciBzdHls ZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBu b3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxl dHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4 OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5n OiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiIGNsYXNzPSIiPg0KPHNwYW4g c3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHls ZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFs OyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6 IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3Bh Y2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBk aXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiIGNsYXNzPSIiPlsyXQ0KIEkgdGhpbmsgdGhlIGNv bmZ1c2lvbiBoZXJlIGlzIHRoYXQgdGhlIGZpbGVzIG9uIHN0b3JhZ2UgZGV2aWNlIGFyZSBub3Q8 L3NwYW4+PGJyIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7 IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWln aHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRl eHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFs OyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyIgY2xh c3M9IiI+DQo8c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAx MnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQt d2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0 OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5v cm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsg ZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyIgY2xhc3M9IiI+aW4NCiB0 aGUgZmlsZSBoaWVyYXJjaHkgYXMgc2VlbiBvbiB0aGUgbWV0YWRhdGEgc2VydmVyLjwvc3Bhbj48 YnIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1z dHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9y bWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRl bnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQt c3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IiBjbGFzcz0iIj4N CjxiciBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250 LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBu b3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWlu ZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29y ZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiIGNsYXNzPSIi Pg0KPHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsg Zm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdo dDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4 dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7 IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0 OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiIGNsYXNzPSIiPk9uDQogYSBmaWxl IGJ5IGZpbGUgYmFzaXMgb24gdGhlIHN0b3JhZ2UgZGV2aWNlLCB3ZSBhcmUgZ2l2aW5nIHRoZSBj bGllbnQgZWl0aGVyPC9zcGFuPjxiciBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9u dC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3Jt YWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxp Z246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUt c3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lk dGg6IDBweDsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7 IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczog bm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0 LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdo aXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tl LXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiIGNs YXNzPSIiPndyaXRlDQogbW9kaWZpY2F0aW9uIGFjY2VzcywgcmVhZCBhY2Nlc3MsIG9yIG5vIGFj Y2VzcyBhdCBhbGwuIFRoZSBjbGllbnQgY2Fubm90PC9zcGFuPjxiciBzdHlsZT0iZm9udC1mYW1p bHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQt dmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5n OiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5z Zm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJr aXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5bGU9ImZvbnQt ZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBm b250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3Bh Y2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10 cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAt d2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxp bmUgIWltcG9ydGFudDsiIGNsYXNzPSIiPnJlbW92ZQ0KIHRoZSBmaWxlIChpdCB3b3VsZCBuZWVk IHRvIGtub3cgdGhlIHBhcmVudCBkaXJlY3RvcnkgRkggYW5kIHRoZTwvc3Bhbj48YnIgc3R5bGU9 ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9y bWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0 ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsg dGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzog MHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IiBjbGFzcz0iIj4NCjxzcGFuIHN0 eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6 IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsg bGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAw cHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNp bmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9uZTsgZGlz cGxheTogaW5saW5lICFpbXBvcnRhbnQ7IiBjbGFzcz0iIj5uYW1lDQogb2YgdGhlIGZpbGUgLSBu ZWl0aGVyIG9mIHdoaWNoIGl0IGhhcykuICZuYnNwO0l0IGNhbiBlZmZlY3RpdmVseSByZW1vdmUg dGhlIGNvbnRlbnQ8L3NwYW4+PGJyIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250 LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1h bDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGln bjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1z cGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0 aDogMHB4OyIgY2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsg Zm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBu b3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQt YWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hp dGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Ut d2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyIgY2xh c3M9IiI+aWYNCiBpdCBoYXMgd3JpdGUgcGVybWlzc2lvbiAoYnV0IG5vdGhpbmcgd291bGQgcHJl dmVudCB0aGlzIGluIGEgdGlnaHRseTwvc3Bhbj48YnIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2 ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQt Y2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFs OyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5v bmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQt c3Ryb2tlLXdpZHRoOiAwcHg7IiBjbGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTog SGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJp YW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5v cm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3Jt OiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10 ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBv cnRhbnQ7IiBjbGFzcz0iIj5jb3VwbGVkDQogbW9kZWwpLjxzcGFuIGNsYXNzPSJBcHBsZS1jb252 ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48L3NwYW4+PGJyIHN0eWxlPSJmb250LWZhbWlseTog SGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJp YW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5v cm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3Jt OiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10 ZXh0LXN0cm9rZS13aWR0aDogMHB4OyIgY2xhc3M9IiI+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4N CjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9 IiI+R290IGl0LCB0aGFua3MuPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPiZuYnNwOzxiciBjbGFzcz0i Ij4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj48YnIg c3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHls ZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFs OyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6 IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3Bh Y2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IiBjbGFzcz0iIj4NCjxi ciBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0 eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3Jt YWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVu dDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1z cGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiIGNsYXNzPSIiPg0K PGJyIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQt c3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5v cm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5k ZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3Jk LXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyIgY2xhc3M9IiI+ DQo8YnIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9u dC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDog bm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1p bmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdv cmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IiBjbGFzcz0i Ij4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNh OyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6 IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgb3Jw aGFuczogYXV0bzsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJh bnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3aWRvd3M6IGF1dG87IHdvcmQtc3Bh Y2luZzogMHB4OyAtd2Via2l0LXRleHQtc2l6ZS1hZGp1c3Q6IGF1dG87IC13ZWJraXQtdGV4dC1z dHJva2Utd2lkdGg6IDBweDsiIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KKDQpIFNlY3Rpb24g Mi4yLiBJbiB0aGlzIHBocmFzZSDigJxpdCBtYXkgYmUgYXNzaWduZWQgc29tZSByYW5kb20gc3lu dGhldGljPGJyIGNsYXNzPSIiPg0KdWlkL2dpZCB0byBkZW55IGFjY2Vzc+KAnSwgd291bGQgYSBi ZXR0ZXIgd29yZCBmb3Ig4oCccmFuZG9t4oCdIGJlIOKAnHVudXNlZOKAnSBvcjxiciBjbGFzcz0i Ij4NCuKAnHVucHJlZGljdGFibGXigJ0/IEFsc28gd2hhdCBpcyB0aGUgc2VjdXJpdHkgdmFsdWUg aW50ZW5kZWQgYnkgdGhlIHVzZSBvZiBhPGJyIGNsYXNzPSIiPg0K4oCccmFuZG9t4oCdIHZhbHVl IGZvciBzeW50aGV0aWMgdWlkcy9naWRzPzxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCjwv YmxvY2txdW90ZT4NCjxiciBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXpl OiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZv bnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0 YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6 IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBw eDsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQt c2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFs OyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWdu OiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNw YWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRo OiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiIGNsYXNzPSIi PkluDQogYW4gZWFybGllciByZXZpZXcgKGJ5IExpbmRhIER1bmJhciksIHRoYXQgcGhyYXNlIHdh cyBjaGFuZ2VkOjwvc3Bhbj48YnIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQt c2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFs OyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWdu OiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNw YWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRo OiAwcHg7IiBjbGFzcz0iIj4NCjxiciBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9u dC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3Jt YWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxp Z246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUt c3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lk dGg6IDBweDsiIGNsYXNzPSIiPg0KPGJyIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBm b250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5v cm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1h bGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0 ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13 aWR0aDogMHB4OyIgY2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGlj YTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBz OiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRl eHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsg d2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJv a2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyIg Y2xhc3M9IiI+Jm5ic3A7T24NCiB0aGUgc3RvcmFnZSBkZXZpY2UsIGl0IG1heSBiZSBhc3NpZ25l ZCBzb21lIHJhbmRvbSBzeW50aGV0aWMgdWlkLzwvc3Bhbj48YnIgc3R5bGU9ImZvbnQtZmFtaWx5 OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZh cmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzog bm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zv cm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0 LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IiBjbGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJmb250LWZh bWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9u dC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNp bmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJh bnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdl YmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5l ICFpbXBvcnRhbnQ7IiBjbGFzcz0iIj4mbmJzcDtnaWQNCiB0byBkZW55IGFjY2Vzczo8L3NwYW4+ PGJyIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQt c3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5v cm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5k ZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3Jk LXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyIgY2xhc3M9IiI+ DQo8YnIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9u dC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDog bm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1p bmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdv cmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IiBjbGFzcz0i Ij4NCjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7 IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWln aHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRl eHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFs OyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9h dDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7IiBjbGFzcz0iIj4mbmJzcDstcnct ci0tLS0tDQogJm5ic3A7Jm5ic3A7Jm5ic3A7MSAxOTQ1MiAmbmJzcDsmbmJzcDsyODQxOCAmbmJz cDsmbmJzcDsmbmJzcDsxNjk3IERlYyAmbmJzcDs0IDExOjMxIGRhdGFfb21waGEuYzwvc3Bhbj48 YnIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1z dHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9y bWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRl bnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQt c3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IiBjbGFzcz0iIj4N CjxiciBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250 LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBu b3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWlu ZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29y ZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiIGNsYXNzPSIi Pg0KPHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsg Zm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdo dDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4 dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7 IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0 OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiIGNsYXNzPSIiPiZuYnNwO1doZW4N CiB0aGUgZmlsZSBpcyBvcGVuZWQgb24gYSBjbGllbnQgYW5kIGFjY2Vzc2VkLCBpdCB3aWxsIHRy eSB0byBnZXQgYTwvc3Bhbj48YnIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQt c2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFs OyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWdu OiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNw YWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRo OiAwcHg7IiBjbGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBm b250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5v cm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1h bGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0 ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13 aWR0aDogMHB4OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7IiBjbGFz cz0iIj4mbmJzcDtsYXlvdXQNCiBmb3IgdGhlIGRhdGEgZmlsZS4gU2luY2UgdGhlIGxheW91dCBr bm93cyBub3RoaW5nPC9zcGFuPjxiciBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9u dC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3Jt YWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxp Z246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUt c3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lk dGg6IDBweDsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7 IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczog bm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0 LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdo aXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tl LXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiIGNs YXNzPSIiPiZuYnNwO2Fib3V0DQogdGhlIHVzZXIgKGFuZCBkb2VzIG5vdCBjYXJlKSwgd2hldGhl ciB0aGUgdXNlciBsb2doeXIgb3I8L3NwYW4+PGJyIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0 aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNh cHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsg dGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25l OyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0 cm9rZS13aWR0aDogMHB4OyIgY2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6IEhl bHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFu dC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3Jt YWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTog bm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4 dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0 YW50OyIgY2xhc3M9IiI+Jm5ic3A7Z2FyYm8NCiBvcGVucyB0aGUgZmlsZSBkb2VzIG5vdCBtYXR0 ZXIuICZuYnNwO1RoZSBjbGllbnQgaGFzIHRvIHByZXNlbnQ8L3NwYW4+PGJyIHN0eWxlPSJmb250 LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsg Zm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNw YWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQt dHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsg LXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyIgY2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0i Zm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3Jt YWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRl ci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0 ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAw cHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6 IGlubGluZSAhaW1wb3J0YW50OyIgY2xhc3M9IiI+Jm5ic3A7YW4NCiB1aWQgb2YgMTk0NTIgdG8g Z2V0IHdyaXRlIHBlcm1pc3Npb24uIElmIGl0IHByZXNlbnRzIGFueSBvdGhlcjwvc3Bhbj48YnIg c3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHls ZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFs OyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6 IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3Bh Y2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IiBjbGFzcz0iIj4NCjxz cGFuIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQt c3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5v cm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5k ZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3Jk LXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9u ZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7IiBjbGFzcz0iIj4mbmJzcDt2YWx1ZQ0KIGZv ciB0aGUgdWlkLCB0aGVuIGl0IG11c3QgZ2l2ZSBhIGdpZCBvZiAyODQxOCB0byBnZXQgcmVhZDwv c3Bhbj48YnIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsg Zm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdo dDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4 dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7 IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IiBjbGFz cz0iIj4NCjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEy cHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13 ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7 IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9y bWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBm bG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7IiBjbGFzcz0iIj4mbmJzcDth Y2Nlc3MuPC9zcGFuPjxiciBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXpl OiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZv bnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0 YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6 IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBw eDsiIGNsYXNzPSIiPg0KPGJyIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNp emU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsg Zm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjog c3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFj ZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDog MHB4OyIgY2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9u dC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3Jt YWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxp Z246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUt c3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lk dGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyIgY2xhc3M9 IiI+Jm5ic3A7RnVydGhlciwNCiBpZiB0aGUgbWV0YWRhdGEgc2VydmVyIGRlY2lkZXMgdG8gZmVu Y2UgdGhlIGZpbGUsIGl0IG1heTwvc3Bhbj48YnIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRp Y2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fw czogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0 ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7 IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ry b2tlLXdpZHRoOiAwcHg7IiBjbGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTogSGVs dmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50 LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1h bDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBu b25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0 LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRh bnQ7IiBjbGFzcz0iIj4mbmJzcDtjaGFuZ2UNCiB0aGUgdWlkIGFuZCBnaWQgYXMgc3VjaDo8L3Nw YW4+PGJyIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZv bnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6 IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQt aW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3 b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyIgY2xhc3M9 IiI+DQo8YnIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsg Zm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdo dDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4 dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7 IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IiBjbGFz cz0iIj4NCjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEy cHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13 ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7 IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9y bWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBm bG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7IiBjbGFzcz0iIj4mbmJzcDst cnctci0tLS0tDQogJm5ic3A7Jm5ic3A7Jm5ic3A7MSAxOTQ1MyAmbmJzcDsmbmJzcDsyODQxOSAm bmJzcDsmbmJzcDsmbmJzcDsxNjk3IERlYyAmbmJzcDs0IDExOjMxIGRhdGFfb21waGEuYzwvc3Bh bj48YnIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9u dC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDog bm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1p bmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdv cmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IiBjbGFzcz0i Ij4NCjxiciBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBm b250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0 OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0 LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsg d29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiIGNsYXNz PSIiPg0KPGJyIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7 IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWln aHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRl eHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFs OyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyIgY2xh c3M9IiI+DQo8c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAx MnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQt d2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0 OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5v cm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsg ZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyIgY2xhc3M9IiI+V2hhdA0K IHdlIGNvdWxkIHN1Z2dlc3Qgd291bGQgYmUgc29tZXRoaW5nIGFsb25nIHRoZSBsaW5lcyBvZjo8 L3NwYW4+PGJyIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7 IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWln aHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRl eHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFs OyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyIgY2xh c3M9IiI+DQo8YnIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJw eDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdl aWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsg dGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3Jt YWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IiBj bGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6 IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9u dC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3Rh cnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTog bm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4 OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7IiBjbGFzcz0iIj4mbmJz cDtPbg0KIHRoZSBzdG9yYWdlIGRldmljZSwgaXQgbWF5IGJlIGFzc2lnbmVkIHNvbWUgdW5wcmVk aWN0YWJsZTwvc3Bhbj48YnIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6 ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBm b250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBz dGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNl OiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAw cHg7IiBjbGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250 LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1h bDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGln bjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1z cGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0 aDogMHB4OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7IiBjbGFzcz0i Ij4mbmJzcDtzeW50aGV0aWMNCiB1aWQvZ2lkIHRvIGRlbnkgYWNjZXNzLjwvc3Bhbj48YnIgc3R5 bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTog bm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBs ZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBw eDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2lu ZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IiBjbGFzcz0iIj4NCjxzcGFu IHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5 bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1h bDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50 OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNw YWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9uZTsg ZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7IiBjbGFzcz0iIj4mbmJzcDvigKY8L3NwYW4+PGJy IHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5 bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1h bDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50 OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNw YWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyIgY2xhc3M9IiI+DQo8 c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250 LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBu b3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWlu ZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29y ZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5v bmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyIgY2xhc3M9IiI+Jm5ic3A7RnVydGhlciwN CiBpZiB0aGUgbWV0YWRhdGEgc2VydmVyIGRlY2lkZXMgdG8gZmVuY2UgdGhlIGZpbGUsIGl0PC9z cGFuPjxiciBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBm b250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0 OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0 LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsg d29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiIGNsYXNz PSIiPg0KPHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJw eDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdl aWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsg dGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3Jt YWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZs b2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiIGNsYXNzPSIiPiZuYnNwO3No b3VsZA0KIGNoYW5nZSB0aGUgdWlkIGFuZC9vciBnaWQgc3VjaCB0aGF0IHRoZXNlIHZhbHVlczwv c3Bhbj48YnIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsg Zm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdo dDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4 dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7 IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IiBjbGFz cz0iIj4NCjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEy cHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13 ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7 IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9y bWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBm bG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7IiBjbGFzcz0iIj4mbmJzcDtu ZWl0aGVyDQogbWF0Y2ggZWFybGllciB2YWx1ZXMgZm9yIHRoYXQgZmlsZSBub3IgbWF0Y2g8L3Nw YW4+PGJyIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZv bnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6 IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQt aW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3 b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyIgY2xhc3M9 IiI+DQo8c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4 OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2Vp Z2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0 ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1h bDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxv YXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyIgY2xhc3M9IiI+Jm5ic3A7YQ0K IHByZWRpY3RhYmxlIGNoYW5nZSBiYXNlZCBvbiBhbiBlYXJsaWVyIGZlbmNpbmcuPC9zcGFuPjxi ciBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0 eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3Jt YWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVu dDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1z cGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiIGNsYXNzPSIiPg0K PGJyIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQt c3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5v cm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5k ZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3Jk LXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyIgY2xhc3M9IiI+ DQo8c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBm b250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0 OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0 LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsg d29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6 IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyIgY2xhc3M9IiI+VWdoLA0KIG5vdCBz dXJlIEkgbGlrZSB0aGUgd29yZHMuPC9zcGFuPjxiciBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZl dGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1j YXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7 IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9u ZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1z dHJva2Utd2lkdGg6IDBweDsiIGNsYXNzPSIiPg0KPGJyIHN0eWxlPSJmb250LWZhbWlseTogSGVs dmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50 LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1h bDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBu b25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0 LXN0cm9rZS13aWR0aDogMHB4OyIgY2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6 IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFy aWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBu b3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9y bTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQt dGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1w b3J0YW50OyIgY2xhc3M9IiI+dWlkW04mIzQzOzFdDQogIT0gdWlkW04tMV0gJmFtcDsmYW1wOyB1 aWRbTiYjNDM7MV0gJm5ic3A7IT0gY2hhbmdlKHVpZFtOLTFdIC0mZ3Q7IHVpZFtOXSkuPC9zcGFu PjxiciBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250 LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBu b3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWlu ZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29y ZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiIGNsYXNzPSIi Pg0KPGJyIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZv bnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6 IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQt aW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3 b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyIgY2xhc3M9 IiI+DQo8c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4 OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2Vp Z2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0 ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1h bDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxv YXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyIgY2xhc3M9IiI+SS5lLiwNCiBk byBub3Qgc2V0IHRvIHJlY2VudCBvbGQgdmFsdWVzIChtaWdodCBmZW5jZSBiYWNrIHRvIGFuIHVp ZDwvc3Bhbj48YnIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJw eDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdl aWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsg dGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3Jt YWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IiBj bGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6 IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9u dC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3Rh cnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTog bm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4 OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7IiBjbGFzcz0iIj5hbg0K IG9sZGVyIGNsaWVudCBhbHJlYWR5IGhhcykgYW5kIGRvIG5vdCB1c2UgYSBmaXhlZCBpbmNyZW1l bnQuPC9zcGFuPjxiciBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAx MnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQt d2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0 OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5v cm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsi IGNsYXNzPSIiPg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFz cz0iIj4NCjwvZGl2Pg0KU28gbWF5YmUgaW4gdGhlIGZpcnN0IHBhcmFncmFwaCB5b3UgbWVhbiDi gJzigKYgc29tZSB1bnByZWRpY3RhYmxlIGFuZDwvZGl2Pg0KPGRpdiBjbGFzcz0iIj51bnVzZWQg YnkgYW55IGN1cnJlbnQgY2xpZW504oCdPzwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9 IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+PGJy IHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5 bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1h bDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50 OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNw YWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyIgY2xhc3M9IiI+DQo8 YnIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1z dHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9y bWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRl bnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQt c3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IiBjbGFzcz0iIj4N CjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBm b250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5v cm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgb3JwaGFu czogYXV0bzsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNm b3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3aWRvd3M6IGF1dG87IHdvcmQtc3BhY2lu ZzogMHB4OyAtd2Via2l0LXRleHQtc2l6ZS1hZGp1c3Q6IGF1dG87IC13ZWJraXQtdGV4dC1zdHJv a2Utd2lkdGg6IDBweDsiIGNsYXNzPSIiPg0KKDUpIEluIHRoZSDigJxsb29zZSBjb3VwbGluZyBt b2RlbOKAnSBmaWxlIGFjY2VzcyBhY3R1YWxseSBlbmZvcmNlZCBieSB0aGUgY2xpZW50LDxiciBj bGFzcz0iIj4NCndoaWNoIHByZXN1bWFibHkgY2FuIGJlIG1hbmlwdWxhdGVkIGJ5IGFuIGV2aWwg dXNlci4gVGhpcyBpcyBjbGVhcmx5IHN0YXRlZCBuPGJyIGNsYXNzPSIiPg0KU2VjdGlvbiAyLjI6 IOKAnCBUaGUgY2xpZW50IGlzIHRodXMgc29sZWx5IHJlc3BvbnNpYmxlIGZvciBlbmZvcmNpbmcg ZmlsZTxiciBjbGFzcz0iIj4NCnBlcm1pc3Npb25zIGluIGEgbG9vc2VseSBjb3VwbGVkIG1vZGVs LuKAnSAmbmJzcDtBbHNvLCBTZWN0aW9uIDIuMi4xIG1lbnRpb25zIOKAnGE8YnIgY2xhc3M9IiI+ DQpTRVRBVFRSIHdvdWxkIGJlIHNlbnQgdG8gdGhlIHN0b3JhZ2UgZGV2aWNlIHRvIHNldCB0aGUg b3duZXIgYW5kIGdyb3VwIG9mIHRoZTxiciBjbGFzcz0iIj4NCmRhdGEgZmlsZeKAnSwgYW5kIHNp bmNlIGhlcmUgaXMgbm8gY29udHJvbCBwcm90b2NvbCBiZXR3ZWVuIHRoZSBtZXRhZGF0YSBzZXJ2 ZXI8YnIgY2xhc3M9IiI+DQphbmQgdGhlIGZpbGUgc2VydmVyIHNvIEkgYXNzdW1lIGl0IGlzIHNl bnQgYnkgdGhlIGNsaWVudC48YnIgY2xhc3M9IiI+DQo8L2Jsb2NrcXVvdGU+DQo8YnIgc3R5bGU9 ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9y bWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0 ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsg dGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzog MHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IiBjbGFzcz0iIj4NCjxzcGFuIHN0 eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6 IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsg bGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAw cHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNp bmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9uZTsgZGlz cGxheTogaW5saW5lICFpbXBvcnRhbnQ7IiBjbGFzcz0iIj5JdA0KIGlzIHN1YnRsZSwgYnV0IHRo aXMgZ29lcyBiYWNrIHRvIHRoZSBmYWN0IChzZWUgWzFdKSB0aGF0IOKAnG5vIGNvbnRyb2wgcHJv dG9jb2zigJ0gZG9lcyBub3Q8L3NwYW4+PGJyIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNh OyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6 IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4 dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3 aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9r ZS13aWR0aDogMHB4OyIgY2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZl dGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1j YXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7 IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9u ZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1z dHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50 OyIgY2xhc3M9IiI+aW1wbHkNCiDigJxubyBjb21tdW5pY2F0aW9uIGJldHdlZW4gdGhlIG1ldGFk YXRhIHNlcnZlciBhbmQgdGhlIHN0b3JhZ2U8L3NwYW4+PGJyIHN0eWxlPSJmb250LWZhbWlseTog SGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJp YW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5v cm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3Jt OiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10 ZXh0LXN0cm9rZS13aWR0aDogMHB4OyIgY2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0iZm9udC1mYW1p bHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQt dmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5n OiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5z Zm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJr aXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAh aW1wb3J0YW50OyIgY2xhc3M9IiI+ZGV2aWNl4oCdLg0KICZuYnNwO0kuZS4sIHRoZSBNRFMgZG9l cyB0aGUgU0VUQVRUUi48L3NwYW4+PGJyIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBm b250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5v cm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1h bGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0 ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13 aWR0aDogMHB4OyIgY2xhc3M9IiI+DQo8YnIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7 IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczog bm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0 LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdo aXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tl LXdpZHRoOiAwcHg7IiBjbGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0 aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNh cHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsg dGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25l OyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0 cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7 IiBjbGFzcz0iIj5BbHNvLA0KIEkgbm90aWNlIHlvdSBhcmUgdXNpbmcgdGhlIHBocmFzZSDigJxm aWxlIHNlcnZlcuKAnSwgd2hpY2ggcHJvYmFibHkgaW1wYWN0czwvc3Bhbj48YnIgc3R5bGU9ImZv bnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFs OyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXIt c3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4 dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4 OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IiBjbGFzcz0iIj4NCjxzcGFuIHN0eWxl PSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5v cm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0 dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7 IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6 IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9uZTsgZGlzcGxh eTogaW5saW5lICFpbXBvcnRhbnQ7IiBjbGFzcz0iIj55b3VyDQogdmlldyBpbiB5b3VyIHBvaW50 IDMgKHNlZSBteSBbMl0pIC0gdGhlIHRlcm0gd2UgdXNlIGlzIHN0b3JhZ2U8L3NwYW4+PGJyIHN0 eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6 IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsg bGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAw cHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNp bmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyIgY2xhc3M9IiI+DQo8c3Bh biBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0 eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3Jt YWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVu dDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1z cGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7 IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyIgY2xhc3M9IiI+ZGV2aWNlLg0KIFRoZXJlIGlz IG5vIHJlcXVpcmVtZW50IHRoYXQgdGhpcyBkZXZpY2Ugc2VydmUgdXAgZGF0YSBmaWxlczwvc3Bh bj48YnIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9u dC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDog bm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1p bmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdv cmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IiBjbGFzcz0i Ij4NCjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7 IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWln aHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRl eHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFs OyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9h dDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7IiBjbGFzcz0iIj5hcw0KIGlmIHRo ZXkgd2VyZSBpbiBhIGZpbGVzeXN0ZW0uIFRoZSBzdG9yYWdlIGRldmljZSBpcyBsaW1pdGVkIGlu IHRoZSBvcGVyYXRpb25zPC9zcGFuPjxiciBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsg Zm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBu b3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQt YWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hp dGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Ut d2lkdGg6IDBweDsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRp Y2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fw czogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0 ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7 IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ry b2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsi IGNsYXNzPSIiPnRoYXQNCiBpdCBjYW4gcmVzcG9uZCB0byBmcm9tIHRoZSBjbGllbnQgYmFzZWQg b24gdGhlIGluZm9ybWF0aW9uIGl0IGlzPC9zcGFuPjxiciBzdHlsZT0iZm9udC1mYW1pbHk6IEhl bHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFu dC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3Jt YWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTog bm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4 dC1zdHJva2Utd2lkdGg6IDBweDsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5 OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZh cmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzog bm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zv cm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0 LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWlt cG9ydGFudDsiIGNsYXNzPSIiPnByZXNlbnRlZA0KIHdpdGguPC9zcGFuPjxiciBzdHlsZT0iZm9u dC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7 IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1z cGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0 LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7 IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiIGNsYXNzPSIiPg0KPGJyIHN0eWxlPSJm b250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1h bDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVy LXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRl eHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBw eDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyIgY2xhc3M9IiI+DQo8c3BhbiBzdHls ZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBu b3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxl dHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4 OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5n OiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3Bs YXk6IGlubGluZSAhaW1wb3J0YW50OyIgY2xhc3M9IiI+Rm9yDQogZXhhbXBsZSwgdGhlIGV4cG9y dHMgb24gdGhlIHN0b3JhZ2UgZGV2aWNlIGNhbiBiZSBjb25maWd1cmVkIHN1Y2g8L3NwYW4+PGJy IHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5 bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1h bDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50 OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNw YWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyIgY2xhc3M9IiI+DQo8 c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250 LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBu b3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWlu ZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29y ZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5v bmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyIgY2xhc3M9IiI+dGhhdA0KIHRoZSBtZXRh ZGF0YSBzZXJ2ZXIgaXMgdGhlIG9ubHkgb25lIHdoaWNoIGNhbiBtb3VudCB0aGUgZXhwb3J0cy48 L3NwYW4+PGJyIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7 IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWln aHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRl eHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFs OyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyIgY2xh c3M9IiI+DQo8c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAx MnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQt d2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0 OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5v cm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsg ZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyIgY2xhc3M9IiI+QW5kDQog c2luY2UgdGhlIG1ldGFkYXRhIHNlcnZlciBvbmx5IGhhbmRzIG91dCBGaWxlIEhhbmRsZXMgdG8g dGhlPC9zcGFuPjxiciBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAx MnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQt d2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0 OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5v cm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsi IGNsYXNzPSIiPg0KPHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6 ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBm b250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBz dGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNl OiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAw cHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiIGNsYXNzPSIiPmNs aWVudHMsDQogdGhleSB3b3VsZCBub3QgYmUgYWJsZSB0byB3YWxrIHRoZSBuYW1lc3BhY2Ugb2Yg dGhlIHN0b3JhZ2U8L3NwYW4+PGJyIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250 LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1h bDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGln bjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1z cGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0 aDogMHB4OyIgY2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsg Zm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBu b3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQt YWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hp dGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Ut d2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyIgY2xh c3M9IiI+ZGV2aWNlLjwvc3Bhbj48YnIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZv bnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9y bWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFs aWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRl LXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdp ZHRoOiAwcHg7IiBjbGFzcz0iIj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdiBjbGFzcz0i Ij48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NClRoYW5rcyBmb3IgdGhlIGV4cGxhbmF0aW9uIOKApiBt YWtlcyBzZW5zZS48YnIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0i Ij4NCjxkaXYgY2xhc3M9IiI+PGJyIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250 LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1h bDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGln bjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1z cGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0 aDogMHB4OyIgY2xhc3M9IiI+DQo8YnIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZv bnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9y bWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFs aWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRl LXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdp ZHRoOiAwcHg7IiBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIHN0eWxlPSJmb250 LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsg Zm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNw YWNpbmc6IG5vcm1hbDsgb3JwaGFuczogYXV0bzsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5k ZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3aWRv d3M6IGF1dG87IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc2l6ZS1hZGp1c3Q6IGF1 dG87IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiIGNsYXNzPSIiPg0KPGJyIGNsYXNz PSIiPg0KUHV0IGFub3RoZXIgd2F5LCBpdCBzZWVtcyBhcyBpZiBhbnkgY2xpZW50IHRoYXQgaGFz IGNyZWRlbnRpYWxzIGFsbG93aW5nIGl0IHRvPGJyIGNsYXNzPSIiPg0KYWNjZXNzIHRvIHRoZSBm aWxlIHNlcnZlciBjYW4gYWNjZXNzIGFueSBmaWxlIG9uIHRoZSBmaWxlIHN5c3RlbSBpZiBpdCBp czxiciBjbGFzcz0iIj4NCmNob29zZXMgdG8gZG8gc28gKGUuZy4uLCBpZiBpdCBpcyBhIG1hbGlj aW91cyBjbGllbnQpLiBJcyB0aGF0IGNvcnJlY3Q/PGJyIGNsYXNzPSIiPg0KPC9ibG9ja3F1b3Rl Pg0KPGJyIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZv bnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6 IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQt aW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3 b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyIgY2xhc3M9 IiI+DQo8c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4 OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2Vp Z2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0 ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1h bDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxv YXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyIgY2xhc3M9IiI+QXMNCiB3aXRo IGFueSBORlMgZmlsZXN5c3RlbSB3aGljaCB1c2VzIGFuIEFVVEhfU1lTIHNlY3VyaXR5IG1vZGVs LDwvc3Bhbj48YnIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJw eDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdl aWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsg dGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3Jt YWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IiBj bGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6 IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9u dC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3Rh cnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTog bm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4 OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7IiBjbGFzcz0iIj5lYWNo DQogb2YgdGhlIGZpbGUgaGFuZGxlLCB1aWQsIGFuZCBnaWQgY2FuIGJlIGZvcmdlZCB0byBnYWlu IGFjY2Vzcy48L3NwYW4+PGJyIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNp emU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsg Zm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjog c3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFj ZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDog MHB4OyIgY2xhc3M9IiI+DQo8YnIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQt c2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFs OyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWdu OiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNw YWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRo OiAwcHg7IiBjbGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBm b250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5v cm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1h bGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0 ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13 aWR0aDogMHB4OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7IiBjbGFz cz0iIj5Jbg0KIG90aGVyIHdvcmRzLCB0aGlzIGlzIG5vdGhpbmcgbmV3Ljwvc3Bhbj48YnIgc3R5 bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTog bm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBs ZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBw eDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2lu ZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IiBjbGFzcz0iIj4NCjxiciBz dHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxl OiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7 IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDog MHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFj aW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiIGNsYXNzPSIiPg0KPHNw YW4gc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1z dHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9y bWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRl bnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQt c3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBub25l OyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiIGNsYXNzPSIiPlRoZQ0KIHNlY3VyaXR5IG1v ZGVsIGZvciBORlN2NC4yIChhbmQgYmFzZWQgb24gdGhhdCwgTkZTdjQuMCBhbmQgTkZTdjQuMSk6 PC9zcGFuPjxiciBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4 OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2Vp Z2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0 ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1h bDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiIGNs YXNzPSIiPg0KPGJyIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEy cHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13 ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7 IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9y bWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyIg Y2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXpl OiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZv bnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0 YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6 IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBw eDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyIgY2xhc3M9IiI+W1JG Qzc4NjJdPC9zcGFuPjxiciBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXpl OiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZv bnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0 YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6 IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBw eDsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQt c2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFs OyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWdu OiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNw YWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRo OiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiIGNsYXNzPSIi PjE3Lg0KICZuYnNwO1NlY3VyaXR5IENvbnNpZGVyYXRpb25zPC9zcGFuPjxiciBzdHlsZT0iZm9u dC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7 IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1z cGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0 LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7 IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiIGNsYXNzPSIiPg0KPGJyIHN0eWxlPSJm b250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1h bDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVy LXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRl eHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBw eDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyIgY2xhc3M9IiI+DQo8c3BhbiBzdHls ZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBu b3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxl dHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4 OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5n OiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3Bs YXk6IGlubGluZSAhaW1wb3J0YW50OyIgY2xhc3M9IiI+Jm5ic3A7Jm5ic3A7TkZTdjQuMg0KIGhh cyBhbGwgb2YgdGhlIHNlY3VyaXR5IGNvbmNlcm5zIHByZXNlbnQgaW4gTkZTdjQuMSAoc2VlPC9z cGFuPjxiciBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBm b250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0 OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0 LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsg d29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiIGNsYXNz PSIiPg0KPHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJw eDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdl aWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsg dGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3Jt YWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZs b2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiIGNsYXNzPSIiPiZuYnNwOyZu YnNwO1NlY3Rpb24NCiAyMSBvZiBbUkZDNTY2MV0pLCBhcyB3ZWxsIGFzIHRob3NlIHByZXNlbnQg aW4gdGhlIHNlcnZlci1zaWRlPC9zcGFuPjxiciBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGlj YTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBz OiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRl eHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsg d2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJv a2Utd2lkdGg6IDBweDsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2 ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQt Y2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFs OyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5v bmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQt c3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFu dDsiIGNsYXNzPSIiPiZuYnNwOyZuYnNwO2NvcHkNCiAoc2VlIFNlY3Rpb24gNC45KSBhbmQgaW4g TGFiZWxlZCBORlMgKHNlZSBTZWN0aW9uIDkuNikuPC9zcGFuPjxiciBzdHlsZT0iZm9udC1mYW1p bHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQt dmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5n OiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5z Zm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJr aXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiIGNsYXNzPSIiPg0KPGJyIHN0eWxlPSJmb250LWZh bWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9u dC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNp bmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJh bnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdl YmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyIgY2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0iZm9u dC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7 IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1z cGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0 LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7 IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlu bGluZSAhaW1wb3J0YW50OyIgY2xhc3M9IiI+V2hpY2gNCiBsZWFkcyB1cyB0byBbUkZDNTY2MV06 PC9zcGFuPjxiciBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4 OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2Vp Z2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0 ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1h bDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiIGNs YXNzPSIiPg0KPGJyIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEy cHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13 ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7 IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9y bWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyIg Y2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXpl OiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZv bnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0 YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6 IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBw eDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyIgY2xhc3M9IiI+Mi4y LjEuMS4xLjIuDQogJm5ic3A7U2VjdXJpdHkgTWVjaGFuaXNtcyBmb3IgTkZTdjQuMTwvc3Bhbj48 YnIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1z dHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9y bWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRl bnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQt c3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IiBjbGFzcz0iIj4N CjxiciBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250 LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBu b3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWlu ZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29y ZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiIGNsYXNzPSIi Pg0KPHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsg Zm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdo dDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4 dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7 IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0 OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiIGNsYXNzPSIiPiZuYnNwOyZuYnNw O1JQQ1NFQ19HU1MsDQogdmlhIEdTUy1BUEksIG5vcm1hbGl6ZXMgYWNjZXNzIHRvIG1lY2hhbmlz bXMgdGhhdCBwcm92aWRlPC9zcGFuPjxiciBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsg Zm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBu b3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQt YWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hp dGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Ut d2lkdGg6IDBweDsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRp Y2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fw czogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0 ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7 IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ry b2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsi IGNsYXNzPSIiPiZuYnNwOyZuYnNwO3NlY3VyaXR5DQogc2VydmljZXMuICZuYnNwO1RoZXJlZm9y ZSwgTkZTdjQuMSBjbGllbnRzIGFuZCBzZXJ2ZXJzIE1VU1Q8L3NwYW4+PGJyIHN0eWxlPSJmb250 LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsg Zm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNw YWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQt dHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsg LXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyIgY2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0i Zm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3Jt YWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRl ci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0 ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAw cHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6 IGlubGluZSAhaW1wb3J0YW50OyIgY2xhc3M9IiI+Jm5ic3A7Jm5ic3A7c3VwcG9ydA0KIHRoZSBL ZXJiZXJvcyBWNSBzZWN1cml0eSBtZWNoYW5pc20uPC9zcGFuPjxiciBzdHlsZT0iZm9udC1mYW1p bHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQt dmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5n OiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5z Zm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJr aXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiIGNsYXNzPSIiPg0KPGJyIHN0eWxlPSJmb250LWZh bWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9u dC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNp bmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJh bnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdl YmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyIgY2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0iZm9u dC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7 IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1z cGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0 LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7 IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlu bGluZSAhaW1wb3J0YW50OyIgY2xhc3M9IiI+Jm5ic3A7Jm5ic3A7VGhlDQogdXNlIG9mIFJQQ1NF Q19HU1MgcmVxdWlyZXMgc2VsZWN0aW9uIG9mIG1lY2hhbmlzbSwgcXVhbGl0eSBvZjwvc3Bhbj48 YnIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1z dHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9y bWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRl bnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQt c3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IiBjbGFzcz0iIj4N CjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZv bnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6 IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQt aW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3 b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDog bm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7IiBjbGFzcz0iIj4mbmJzcDsmbmJzcDtw cm90ZWN0aW9uDQogKFFPUCksIGFuZCBzZXJ2aWNlIChhdXRoZW50aWNhdGlvbiwgaW50ZWdyaXR5 LCBwcml2YWN5KS48L3NwYW4+PGJyIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250 LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1h bDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGln bjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1z cGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0 aDogMHB4OyIgY2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsg Zm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBu b3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQt YWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hp dGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Ut d2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyIgY2xh c3M9IiI+Jm5ic3A7Jm5ic3A7Rm9yDQogdGhlIG1hbmRhdGVkIHNlY3VyaXR5IG1lY2hhbmlzbXMs IE5GU3Y0LjEgc3BlY2lmaWVzIHRoYXQgYSBRT1Agb2Y8L3NwYW4+PGJyIHN0eWxlPSJmb250LWZh bWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9u dC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNp bmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJh bnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdl YmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyIgY2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0iZm9u dC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7 IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1z cGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0 LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7 IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlu bGluZSAhaW1wb3J0YW50OyIgY2xhc3M9IiI+Jm5ic3A7Jm5ic3A7emVybw0KIGlzIHVzZWQsIGxl YXZpbmcgaXQgdXAgdG8gdGhlIG1lY2hhbmlzbSBvciB0aGUgbWVjaGFuaXNtJ3M8L3NwYW4+PGJy IHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5 bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1h bDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50 OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNw YWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyIgY2xhc3M9IiI+DQo8 c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250 LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBu b3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWlu ZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29y ZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5v bmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyIgY2xhc3M9IiI+Jm5ic3A7Jm5ic3A7Y29u ZmlndXJhdGlvbg0KIHRvIG1hcCBRT1AgemVybyB0byBhbiBhcHByb3ByaWF0ZSBsZXZlbCBvZiBw cm90ZWN0aW9uLjwvc3Bhbj48YnIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQt c2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFs OyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWdu OiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNw YWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRo OiAwcHg7IiBjbGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBm b250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5v cm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1h bGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0 ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13 aWR0aDogMHB4OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7IiBjbGFz cz0iIj4mbmJzcDsmbmJzcDtFYWNoDQogbWFuZGF0ZWQgbWVjaGFuaXNtIHNwZWNpZmllcyBhIG1p bmltdW0gc2V0IG9mIGNyeXB0b2dyYXBoaWM8L3NwYW4+PGJyIHN0eWxlPSJmb250LWZhbWlseTog SGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJp YW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5v cm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3Jt OiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10 ZXh0LXN0cm9rZS13aWR0aDogMHB4OyIgY2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0iZm9udC1mYW1p bHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQt dmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5n OiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5z Zm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJr aXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAh aW1wb3J0YW50OyIgY2xhc3M9IiI+Jm5ic3A7Jm5ic3A7YWxnb3JpdGhtcw0KIGZvciBpbXBsZW1l bnRpbmcgaW50ZWdyaXR5IGFuZCBwcml2YWN5LiAmbmJzcDtORlN2NC4xIGNsaWVudHM8L3NwYW4+ PGJyIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQt c3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5v cm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5k ZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3Jk LXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyIgY2xhc3M9IiI+ DQo8c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBm b250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0 OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0 LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsg d29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6 IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyIgY2xhc3M9IiI+Jm5ic3A7Jm5ic3A7 YW5kDQogc2VydmVycyBNVVNUIGJlIGltcGxlbWVudGVkIG9uIG9wZXJhdGluZyBlbnZpcm9ubWVu dHMgdGhhdCBjb21wbHk8L3NwYW4+PGJyIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBm b250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5v cm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1h bGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0 ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13 aWR0aDogMHB4OyIgY2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGlj YTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBz OiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRl eHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsg d2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJv a2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyIg Y2xhc3M9IiI+Jm5ic3A7Jm5ic3A7d2l0aA0KIHRoZSBSRVFVSVJFRCBjcnlwdG9ncmFwaGljIGFs Z29yaXRobXMgb2YgZWFjaCBSRVFVSVJFRDwvc3Bhbj48YnIgc3R5bGU9ImZvbnQtZmFtaWx5OiBI ZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlh bnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9y bWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06 IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRl eHQtc3Ryb2tlLXdpZHRoOiAwcHg7IiBjbGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJmb250LWZhbWls eTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12 YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6 IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNm b3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtp dC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFp bXBvcnRhbnQ7IiBjbGFzcz0iIj4mbmJzcDsmbmJzcDttZWNoYW5pc20uPC9zcGFuPjxiciBzdHls ZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBu b3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxl dHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4 OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5n OiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiIGNsYXNzPSIiPg0KPGJyIHN0 eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6 IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsg bGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAw cHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNp bmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyIgY2xhc3M9IiI+DQo8c3Bh biBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0 eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3Jt YWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVu dDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1z cGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7 IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyIgY2xhc3M9IiI+Mi4yLjEuMS4xLjIuMS4NCiAm bmJzcDtLZXJiZXJvcyBWNTwvc3Bhbj48YnIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7 IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczog bm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0 LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdo aXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tl LXdpZHRoOiAwcHg7IiBjbGFzcz0iIj4NCjxiciBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGlj YTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBz OiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRl eHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsg d2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJv a2Utd2lkdGg6IDBweDsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2 ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQt Y2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFs OyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5v bmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQt c3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFu dDsiIGNsYXNzPSIiPiZuYnNwOyZuYnNwO1RoZQ0KIEtlcmJlcm9zIFY1IEdTUy1BUEkgbWVjaGFu aXNtIGFzIGRlc2NyaWJlZCBpbiBbNV0gTVVTVCBiZTwvc3Bhbj48YnIgc3R5bGU9ImZvbnQtZmFt aWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250 LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2lu Zzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFu c2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Vi a2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IiBjbGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJmb250 LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsg Zm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNw YWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQt dHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsg LXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5s aW5lICFpbXBvcnRhbnQ7IiBjbGFzcz0iIj4mbmJzcDsmbmJzcDtpbXBsZW1lbnRlZA0KIHdpdGgg dGhlIFJQQ1NFQ19HU1Mgc2VydmljZXMgYXMgc3BlY2lmaWVkIGluIHRoZTwvc3Bhbj48YnIgc3R5 bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTog bm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBs ZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBw eDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2lu ZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IiBjbGFzcz0iIj4NCjxzcGFu IHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5 bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1h bDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50 OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNw YWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9uZTsg ZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7IiBjbGFzcz0iIj4mbmJzcDsmbmJzcDtmb2xsb3dp bmcNCiB0YWJsZTo8L3NwYW4+PGJyIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250 LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1h bDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGln bjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1z cGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0 aDogMHB4OyIgY2xhc3M9IiI+DQo8YnIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZv bnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9y bWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFs aWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRl LXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdp ZHRoOiAwcHg7IiBjbGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNh OyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6 IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4 dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3 aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9r ZS13aWR0aDogMHB4OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7IiBj bGFzcz0iIj5Ubw0KIHBhcmFwaHJhc2UgaXQsIE5GU3Y0LnggY2xpZW50cyBhbmQgc2VydmVycyBN VVNUIHN1cHBvcnQ8L3NwYW4+PGJyIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250 LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1h bDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGln bjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1z cGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0 aDogMHB4OyIgY2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsg Zm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBu b3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQt YWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hp dGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Ut d2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyIgY2xh c3M9IiI+dGhlDQogS2VyYmVyb3MgVjUgc2VjdXJpdHkgbWVjaGFuaXNtLCBidXQgaW5zdGFsbGF0 aW9ucyBhcmUgbm90PC9zcGFuPjxiciBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9u dC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3Jt YWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxp Z246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUt c3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lk dGg6IDBweDsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7 IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczog bm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0 LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdo aXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tl LXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiIGNs YXNzPSIiPnJlcXVpcmVkDQogdG8gdXNlIEtlcmJlcm9zLjwvc3Bhbj48YnIgc3R5bGU9ImZvbnQt ZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBm b250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3Bh Y2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10 cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAt d2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IiBjbGFzcz0iIj4NCjxiciBzdHlsZT0iZm9u dC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7 IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1z cGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0 LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7 IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5bGU9 ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9y bWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0 ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsg dGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzog MHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5 OiBpbmxpbmUgIWltcG9ydGFudDsiIGNsYXNzPSIiPkkuZS4sDQogdGhpczo8L3NwYW4+PGJyIHN0 eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6 IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsg bGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAw cHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNp bmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyIgY2xhc3M9IiI+DQo8YnIg c3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHls ZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFs OyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6 IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3Bh Y2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IiBjbGFzcz0iIj4NCjxz cGFuIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQt c3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5v cm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5k ZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3Jk LXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9u ZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7IiBjbGFzcz0iIj5tb3VudA0KIC1vIHZlcnM9 NC4yLHNlYz1zeXMgc2VydmVyOi8gL21udDwvc3Bhbj48YnIgc3R5bGU9ImZvbnQtZmFtaWx5OiBI ZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlh bnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9y bWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06 IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRl eHQtc3Ryb2tlLXdpZHRoOiAwcHg7IiBjbGFzcz0iIj4NCjxiciBzdHlsZT0iZm9udC1mYW1pbHk6 IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFy aWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBu b3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9y bTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQt dGV4dC1zdHJva2Utd2lkdGg6IDBweDsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5bGU9ImZvbnQtZmFt aWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250 LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2lu Zzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFu c2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Vi a2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUg IWltcG9ydGFudDsiIGNsYXNzPSIiPm1lYW5zDQogdGhhdCBhbnkgbWFsaWNpb3VzIHVzZXIgY2Fu IHVzZSBhbnkgY2xpZW50IHdoaWNoIGNhbiBjb25uZWN0PC9zcGFuPjxiciBzdHlsZT0iZm9udC1m YW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZv bnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFj aW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRy YW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13 ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5bGU9ImZv bnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFs OyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXIt c3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4 dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4 OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBp bmxpbmUgIWltcG9ydGFudDsiIGNsYXNzPSIiPnRvDQogdGhlIHNlcnZlciB0byBkbyB3aGF0ZXZl ciB0aGV5IHdhbnQuPC9zcGFuPjxiciBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9u dC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3Jt YWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxp Z246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUt c3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lk dGg6IDBweDsiIGNsYXNzPSIiPg0KPGJyIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBm b250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5v cm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1h bGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0 ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13 aWR0aDogMHB4OyIgY2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGlj YTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBz OiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRl eHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsg d2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJv a2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyIg Y2xhc3M9IiI+SW4NCiBvdGhlciB3b3JkcywgdGhpcyBpcyBub3QgYSByZWR1Y3Rpb24gb2YgdGhl IGFjdHVhbCBzZWN1cml0eSBmcm9tIE5GU3Y0LnguPC9zcGFuPjxiciBzdHlsZT0iZm9udC1mYW1p bHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQt dmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5n OiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5z Zm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJr aXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiIGNsYXNzPSIiPg0KPC9kaXY+DQo8L2Jsb2NrcXVv dGU+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KVGhhbmtzIGZvciB0aGUg ZXh0ZW5zaXZlIGV4cGxhbmF0aW9uLiBJdCByZXNvbHZlcyB0aGUgaXNzdWUgdGhhdCBJIHBlcmNl aXZlZC48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNs YXNzPSIiPlRoYW5rcyw8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+QnJpYW48L2Rpdj4NCjxkaXYgY2xh c3M9IiI+PGJyIGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+DQo8 ZGl2IGNsYXNzPSIiPjxiciBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXpl OiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZv bnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0 YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6 IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBw eDsiIGNsYXNzPSIiPg0KPGJyIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNp emU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsg Zm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjog c3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFj ZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDog MHB4OyIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBzdHlsZT0iZm9udC1mYW1p bHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQt dmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5n OiBub3JtYWw7IG9ycGhhbnM6IGF1dG87IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDog MHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd2lkb3dzOiBh dXRvOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXNpemUtYWRqdXN0OiBhdXRvOyAt d2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IiBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4N ClVubGVzcyBJ4oCZbSBtaXN0YWtlbiwgdGhpcyBpcyBhIHNlcmlvdXMgcmVkdWN0aW9uIG9mIGFj dHVhbCBzZWN1cml0eSBmcm9tIE5GUzxiciBjbGFzcz0iIj4NCjQueCwgYW5kIGFsc28gZnJvbSB0 aGUgdGlnaHQgY291cGxpbmcgbW9kZWwuIFRoaXMgc2hvdWxkIGJlIGNsZWFybHkgc3RhdGVkIGlu PGJyIGNsYXNzPSIiPg0KdGhlIHNlY3VyaXR5IGNvbnNpZGVyYXRpb25zIHNlY3Rpb24sIHNvIHRo YXQgcHJvdG9jb2wgYWRvcHRlcnMgYW5kIHVzZXJzPGJyIGNsYXNzPSIiPg0KdW5kZXJzdGFuZCB0 aGUgYWRkaXRpb25hbCByaXNrcyBvZiB0aGUgbG9vc2UgY291cGxpbmcgbW9kZWwuIEZvciB0aGlz ICZuYnNwO3JlYXNvbiw8YnIgY2xhc3M9IiI+DQpJJ3ZlIG1hcmtlZCB0aGUgcmV2aWV3IHdpdGgg JnF1b3Q7SGFzIElzc3VlcyZxdW90OyByYXRoZXIgdGhhbiAmcXVvdDtIYXMgTml0cyZxdW90Oy48 YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQpfX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fXzxiciBjbGFzcz0iIj4NCm5mc3Y0IG1haWxpbmcgbGlzdDxiciBj bGFzcz0iIj4NCjxhIGhyZWY9Im1haWx0bzpuZnN2NEBpZXRmLm9yZyIgY2xhc3M9IiI+bmZzdjRA aWV0Zi5vcmc8L2E+PGJyIGNsYXNzPSIiPg0KPGEgaHJlZj0iaHR0cHM6Ly93d3cuaWV0Zi5vcmcv bWFpbG1hbi9saXN0aW5mby9uZnN2NCIgY2xhc3M9IiI+aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFp bG1hbi9saXN0aW5mby9uZnN2NDwvYT48L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjwvYmxvY2txdW90 ZT4NCjwvZGl2Pg0KPGJyIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj4tLSZuYnNwOzxiciBjbGFz cz0iIj4NCkJyaWFuIFdlaXM8YnIgY2xhc3M9IiI+DQpTZWN1cml0eSwgQ1NHLCBDaXNjbyBTeXN0 ZW1zPGJyIGNsYXNzPSIiPg0KVGVsZXBob25lOiAmIzQzOzEgNDA4IDUyNiA0Nzk2PGJyIGNsYXNz PSIiPg0KRW1haWw6IDxhIGhyZWY9Im1haWx0bzpiZXdAY2lzY28uY29tIiBjbGFzcz0iIj5iZXdA Y2lzY28uY29tPC9hPiA8L2Rpdj4NCjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9o dG1sPg0K --_000_2D43D657817F4C43A405E7FB83C688ADciscocom_-- From nobody Mon Jan 15 11:21:45 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1457912EB73; Mon, 15 Jan 2018 11:21:43 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.131 X-Spam-Level: X-Spam-Status: No, score=-1.131 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_NEUTRAL=0.779, T_RP_MATCHES_RCVD=-0.01] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QAizb_hZfK5y; Mon, 15 Jan 2018 11:21:40 -0800 (PST) Received: from fly2.rz.hs-augsburg.de (fly2.RZ.HS-Augsburg.DE [IPv6:2001:638:102:201::11:24]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DF48012D850; Mon, 15 Jan 2018 11:21:31 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by fly2.rz.hs-augsburg.de (Postfix) with ESMTP id D71C1120D3E; Mon, 15 Jan 2018 20:21:12 +0100 (CET) X-Virus-Scanned: Debian amavisd-new at hs-augsburg.de Received: from fly2.rz.hs-augsburg.de ([127.0.0.1]) by localhost (fly2.rz.hs-augsburg.de [127.0.0.1]) (amavisd-new, port 10024) with LMTP id wQxqWCPaCizo; Mon, 15 Jan 2018 20:21:12 +0100 (CET) Received: from [192.168.178.42] (ppp-212-114-180-26.dynamic.mnet-online.de [212.114.180.26]) by fly2.rz.hs-augsburg.de (Postfix) with ESMTPSA id D55FA120C51; Mon, 15 Jan 2018 20:21:11 +0100 (CET) To: Vincent Roca , IESG , secdir@ietf.org, draft-ietf-intarea-broadcast-consider.all@ietf.org References: <383EA7C8-CFF0-48AF-AD0C-840545483E94@inria.fr> From: Rolf Winter Message-ID: <80beb32b-35fe-9a2d-e951-037a34d81a5f@hs-augsburg.de> Date: Mon, 15 Jan 2018 20:21:28 +0100 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:52.0) Gecko/20100101 Thunderbird/52.5.2 MIME-Version: 1.0 In-Reply-To: <383EA7C8-CFF0-48AF-AD0C-840545483E94@inria.fr> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit Archived-At: Subject: Re: [secdir] Secdir review of draft-ietf-intarea-broadcast-consider-05 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Jan 2018 19:21:43 -0000 Hi Vincent, thanks for the detailed review and sorry for the belated reply. We have submitted a new version based on these comments and recommendations. Please see inline: Am 05.01.18 um 14:26 schrieb Vincent Roca: > Hello, > > I have reviewed this document as part of the security directorate’s ongoing > effort to review all IETF documents being processed by the IESG. These > comments were written primarily for the benefit of the security area > directors.  Document editors and WG chairs should treat these comments just > like any other last call comments. > > Summary: *Ready with issues* > > This document lists recommendations concerning the use of > broadcast/multicast traffic from a privacy point of view, which is > highly valuable. However I have a certain number of comments. > (sorry if my email is a bit long…) > > > *Main comments:* > > 1) First of all, the focus of this document looks ambiguous. > The title refers to "IP broadcast and multicast protocol designers" > which I can understand as those low level protocols for IP broadcast > and multicast (e.g., IGMP, MLD, and why not various multicast routing > protocols, etc.). On the opposite, the abstract restricts the focus: > "application-layer protocols make use of IP broadcasts or multicast > messages" (1st sentence). Then, when reading the document, I sometimes > understand that it could also consider lower layer protocols. This > should be clarified. > > Also, instead of "designers of broadcast/multicast protocols" I'd > rather say "designers of protocols relying (in parts or totally) on > broadcast/multicast traffic". This applies to the title (in a > condensed version) and throughout the core of the document. Makes complete sense. I hope we have spotted all occurences in the main text and also changed the title accordingly: was: "Privacy considerations for IP broadcast and multicast protocol designers" new: "Privacy considerations for protocols relying on IP broadcast and multicast" > > > 2) Another point: I'd like to see the item (b) of introduction > developed as this is the key issue with multicast/broadcast traffic. > Without encryption, application messages are vulnerable to > eavesdropping and all kinds of analyses. A group key could be > negociated and used for encrypting this traffic, but this requires a > more complex setup mechanism (typically a key management system, > probably with re-keying and all the stuff) and requires a preliminary > association of a terminal that is not necessarily compatible with the > application-layer protocol features. > The text could say that if possible, multicast/broadcast traffic > encryption should be used, otherwise risks should be minimised as > discussed in this document. And of course, it's always good to remind > the designers that unicast traffic should be always encrypted since > there's no good reason not to do that. > We talk about this in the security considerations section and come to the same conclusion as you do: "It should be noted that certain applications could make use of existing mechanisms to protect multicast traffic such as the ones defined in [RFC5374]. Examples of such applications can be found in Appendix A. of [RFC5374]. Given the required infrastructure and assumptions about these applications and the security infrastructure, many applications will not be able to make use of such mechanisms." In which way would you expand on this? > > 3) I'd like to suggest another recommendation: when applicable, limit > or avoid user-originated broadcast/multicast messages, preferring > infrastructure originated messages. > An example: in a discovery mechanism, avoid terminal sollicitation as > much as possible and limit oneself to infrastructure announcement > broadcast messages, even if it can include some extra delay (controled > with the announcement frequency). This is exactly what happened in > Wifi AP discovery, where the passive discovery scheme, AP based, is > now prefered to the active scheme. > Said differently, multicast/broadcast is not per se the issue, when > originating from the infrastructure it is generaly safe. > > I think I disagree somewhat (and it is not a generally applicable use case, e.g. if resources on a host are offered there is no general way to delegate announcements of these to the infrastructure). Saying that infrastructure announcements are generally safe requires that a receiver can validate that a message came from the infrastructure which is a problem (e.g. rogue DHCP servers). A lot of deployments solve some of this through infrastructure means (e.g. DHCP snooping), but we have documented that. Also, whatever comes from the infrastructure requires a standard so that devices/apps understand it. We have text around that, too. > 4) A more general comment, related to item (a) of intro: > Broadcast/multicast can simplify user surveillance, I agree. However, > when I'm looking at all the practicies of companies working in the > advertising area (in particular A&A companies, sitting between > smartphone users and advertisers, domain that I know a little bit), > the techniques deployed are incredibly smart, some of them bypassing > technical protections set up by the OS manufacturers, others relying > on hidden technical features. It's impressive how inventive those > companies can be. > My point is that even if traffic is 100% unicast, as long as a > wireless medium is used, anyone wanting to monitor users in order to > profile them will set up the required hardware/software configuration. > This is trivial and extremely cheap nowadays (except perhaps for 4G > connections), and most of the time this is a purely passive > monitoring. The unicast/multicast/broadcast nature of traffic has no > importance as long as you are within wireless network range. I think there is little that the IETF can do about that. Also "bypassing technical protection" and using "hidden technical features" is nothing you can protect against in general and I assume is often not by design. > > > *Clarification needed:* > > ** section 4: I cannot understand the meaning of "information" in: >         "* You SHOULD try to design the protocol in a way that the >          information cannot be correlated with other information in >          broadcast/multicast messages" > What does the first instance of "information" refer to? Clarified. > > > ** Last but one sentence of section 2.2: Why do you say "or at least > much more difficult"? Without encryption, a persistant application > layer identifier voids any lower layer attempt. I'd remove this > comment altogether. Done. > > > *Various:* > > ** the authors use the term "host name" to refer to a higher layer > name of a device. To me this term refers to the DNS notion of > "hostname", i.e. something different, hence confusion. I'd recommend > to use "device name" in order to avoid it. Well, RFC 7719 even admits the term is ill defined and does refer to various things. Also, for the protocols we looked at and OS configurations, sometimes there are different host namens being used for different purposes. We would like to stick with host names (also since RFC8117 useses the term which is highly relevant in this context). > > ** section 2.3: instead of: >         "If only a persistent ID is needed, this can be generated >         randomly. » > I'd rather say: >         "Persistent identifiers SHOULD be avoided (section 2.2), but >         if one is absolutely needed and if the devide name is not >         required, then the identifier SHOULD be generated randomly." > That would have not read nicely with the sentence before that. We made adjustments to that passage, based on this suggestion. > > *Typos:* > > ** section 4: s/broad-/broadcast/ in: >         "because of the special nature of broad- and multicast." > > ** section 5: "are" is missing in: >         ...for another class of attacks that not related to privacy." > > Nice catch. Best, Rolf > Regards, > >   Vincent From nobody Tue Jan 16 00:57:18 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2BFD212FAC4; Tue, 16 Jan 2018 00:57:12 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.186 X-Spam-Level: X-Spam-Status: No, score=-6.186 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, MIME_HTML_ONLY=0.723, RCVD_IN_DNSWL_HI=-5, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id h3eY4ghN_OmD; Tue, 16 Jan 2018 00:57:09 -0800 (PST) Received: from mail2-relais-roc.national.inria.fr (mail2-relais-roc.national.inria.fr [192.134.164.83]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 679F0126D05; Tue, 16 Jan 2018 00:57:08 -0800 (PST) X-IronPort-AV: E=Sophos;i="5.46,367,1511823600"; d="scan'208,217";a="309217945" Received: from agrenoble-651-1-576-228.w92-129.abo.wanadoo.fr (HELO [192.168.10.46]) ([92.129.108.228]) by mail2-relais-roc.national.inria.fr with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 16 Jan 2018 09:57:05 +0100 To: Rolf Winter Mime-Version: 1.0 (Mac OS X Mail 11.2 \(3445.5.20\)) Content-Type: text/html; charset=utf-8 X-Apple-Base-Url: x-msg://13/ X-Apple-Mail-Remote-Attachments: YES From: Vincent Roca In-Reply-To: <80beb32b-35fe-9a2d-e951-037a34d81a5f@hs-augsburg.de> X-Should-Pgp-Sign: NO Date: Tue, 16 Jan 2018 09:50:26 +0100 Cc: Vincent Roca , IESG , secdir@ietf.org, draft-ietf-intarea-broadcast-consider.all@ietf.org Content-Transfer-Encoding: quoted-printable Message-Id: <50006956-2D5C-49F9-8CA8-ACBEC2B266F1@inria.fr> References: <383EA7C8-CFF0-48AF-AD0C-840545483E94@inria.fr> <80beb32b-35fe-9a2d-e951-037a34d81a5f@hs-augsburg.de> X-Should-Pgp-Encrypt: NO X-Mailer: Apple Mail (2.3445.5.20) Archived-At: Subject: Re: [secdir] Secdir review of draft-ietf-intarea-broadcast-consider-05 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Jan 2018 08:57:12 -0000
Hello Rolf,

thanks for the detailed review = and sorry for the belated reply. We have submitted a new version based = on these comments and recommendations. Please see inline:

You=E2=80=99re welcome.

2) Another point: I'd like to see the item (b) of = introduction
developed as this is the key issue with = multicast/broadcast traffic.
Without encryption, = application messages are vulnerable to
eavesdropping and = all kinds of analyses. A group key could be
negociated and = used for encrypting this traffic, but this requires a
more = complex setup mechanism (typically a key management system,
probably with re-keying and all the stuff) and requires a = preliminary
association of a terminal that is not = necessarily compatible with the
application-layer protocol = features.
The text could say that if possible, = multicast/broadcast traffic
encryption should be used, = otherwise risks should be minimised as
discussed in this = document. And of course, it's always good to remind
the = designers that unicast traffic should be always encrypted since
there's no good reason not to do that.


We talk about this in the = security considerations section and come to the same conclusion as you = do:

"It should be noted that certain = applications could make use of
  existing mechanisms = to protect multicast traffic such as the ones
  defined in [RFC5374].  Examples = of such applications can be found in
  Appendix A. of = [RFC5374].  Given the required infrastructure and
  assumptions about these applications = and the security infrastructure,
  many applications = will not be able to make use of such mechanisms."
In which way would you expand on this?

I=E2=80=99d like you extend a little the the bullet (b) of = introduction:
(b) Encryption is more difficult = when broadcast/multicast messages,
   =      leaving content of these messages in the clear and = making it
        easier = to spoof and replay them.
It = suggests that because it=E2=80=99s difficult, it won=E2=80=99t be used. = This is not the
message the I-D should carry. = It=E2=80=99s difficult (add a reference here), sure,
but not impossible. You can also briefly explain why it=E2=80=99= s more difficult with
multicast/broadcast.


3) I'd like to suggest another recommendation: when = applicable, limit
or avoid user-originated = broadcast/multicast messages, preferring
infrastructure = originated messages.
An example: in a discovery mechanism, = avoid terminal sollicitation as
much as possible and limit = oneself to infrastructure announcement
broadcast messages, = even if it can include some extra delay (controled
with = the announcement frequency). This is exactly what happened in
Wifi AP discovery, where the passive discovery scheme, AP = based, is
now prefered to the active scheme.
Said differently, multicast/broadcast is not per se the = issue, when
originating from the infrastructure it is = generaly safe.

I think I disagree somewhat (and = it is not a generally applicable use case, e.g. if resources on a host = are offered there is no general way to delegate announcements of these = to the infrastructure). Saying that infrastructure announcements are = generally safe requires that a receiver can validate that a message came = from the infrastructure which is a problem (e.g. rogue DHCP servers). A = lot of deployments solve some of this through infrastructure means (e.g. = DHCP snooping), but we have documented that. Also, whatever comes from = the infrastructure requires a standard so that devices/apps understand = it. We have text around that, too.

Let me clarify what I had in mind. A few years ago, discovery = of a known WiFi AP
from a device was accelerated = through the use of an active mechanism, with the
device sending probes to potentially detects those know WiFi = APs. That was
awful from a privacy point of view as = highlighted by researchers. The trend was to
move = to a passive approach, relying mostly on AP announcements (in addition = to
MAC address randomisation). The privacy benefits = while doing so are terrible.
See e.g., my colleague = Mathieu publication on the topic: https://hal.inria.fr/hal-00747825
This= is perfectly in line with your  I-D. How privacy can be = compromised by using
a broadcast based = protocol. 

Having said that, I agree with you that rogue announcements = raise security concerns
(but that=E2=80=99s true = for any message sent), and it does not work for resources offered = by
a host. I agree, this is not a universal = approach. I let you judge whether it makes sense
to = talk about it or not.


4) A more general comment, = related to item (a) of intro:
Broadcast/multicast can = simplify user surveillance, I agree. However,
when I'm = looking at all the practicies of companies working in the
advertising area (in particular A&A companies, sitting = between
smartphone users and advertisers, domain that I = know a little bit),
the techniques deployed are incredibly = smart, some of them bypassing
technical protections set up = by the OS manufacturers, others relying
on hidden = technical features. It's impressive how inventive those
companies can be.
My point is that even if = traffic is 100% unicast, as long as a
wireless medium is = used, anyone wanting to monitor users in order to
profile = them will set up the required hardware/software configuration.
This is trivial and extremely cheap nowadays (except perhaps = for 4G
connections), and most of the time this is a purely = passive
monitoring. The unicast/multicast/broadcast nature = of traffic has no
importance as long as you are within = wireless network range.

I think there is little that the IETF can do = about that. Also "bypassing technical protection" and using "hidden = technical features" is nothing you can protect against in general and I = assume is often not by design.

I agree and I don=E2=80=99t want to question the importance = of this I-D here.
But it remains that wireless = communications are so easy to monitor.


*Various:*
** = the authors use the term "host name" to refer to a higher layer
name of a device. To me this term refers to the DNS notion = of
"hostname", i.e. something different, hence confusion. = I'd recommend
to use "device name" in order to avoid = it.

Well, RFC 7719 even admits the = term is ill defined and does refer to various things. Also, for the = protocols we looked at and OS configurations, sometimes there are = different host namens being used for different purposes. We would like = to stick with host names (also since RFC8117 useses the term which is = highly relevant in this context).

I was not aware of those RFCs. Do what you believe is the = most appropriate.

Cheers,

  =  Vincent
= From nobody Tue Jan 16 09:51:59 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2AD3212E887 for ; Tue, 16 Jan 2018 09:51:31 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_LOW=-0.7] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=venaas-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id i3pjttaGHPSp for ; Tue, 16 Jan 2018 09:51:30 -0800 (PST) Received: from mail-qk0-x22d.google.com (mail-qk0-x22d.google.com [IPv6:2607:f8b0:400d:c09::22d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5E85512E885 for ; Tue, 16 Jan 2018 09:51:28 -0800 (PST) Received: by mail-qk0-x22d.google.com with SMTP id d21so21925926qkj.3 for ; Tue, 16 Jan 2018 09:51:28 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=venaas-com.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=fynCVErqUtKxANJdU4gsldkHJgE7RlmRnlg0Pv1m8v8=; b=K5GE3JRvtX7gmrU+3jsRaoJZFNbef79ZPDGbV6eta9VZf7JzQ7EQpZQHmr1fVwBnC2 HDzqe0yRaaGyBy47CZX1iRAPI9MZ4TtzYk7ykuF99hZI0h8BadrCdjv7LWr+/QNw3/8D baGCtbnXf6awMMVMwm52+/mCgkV9S/jDpASObEl4nePWzFf10EZEkuwWp3fOS/6wY/Uu RSh7bl+hooE10ken7lKRCvDY/JPxGNQW2ubhc3oRV6yCGdTKu+X2YpbHrd9hOPeoYw1G tmhONOvWFRxDXT/G0TskdemCyKU6Oxci9MtRL67iEfw1jbZERUZaTqYMnKiFRce8mM44 Pe9Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=fynCVErqUtKxANJdU4gsldkHJgE7RlmRnlg0Pv1m8v8=; b=WNs91B9ZfRY0QoB8TiCxWke55NB2JNclcpdzIOVBCWgBOKIPwwurduKXTE9J99b3Yb RCiaLg6k8mM/H75cTVK8tEGgRz6WGHYmjJDFQJBObBdvLT7esu4FtPuoM1WHolafoq4m jXCwbxcttA2jTx1cwq297XXHOROWFrDjI3gjm/WyDuTr04p9lDktdOJ45jUKb5cldB7J 9ByGbrPO9SqC+fkxo+Kuh+vlBu4saLwJz8nTig6FmpcAlFoFdPd0c+6Q43Vnbd3JxLEZ 50chIqOXMbABZP68Wnyp73QMhS9ELpaNnW0vSEHn+NgzET0fX+EfBeVSGmRBBmlJeQCb oA3Q== X-Gm-Message-State: AKwxytehXEWbudwlQVM7mFe9vRe7ddq7ppsnjOCQZRDLXxVEca6+mSjb 4AlYAqDOQ2ARAogARHm3j8pNBE7JRavo4wOFkUqY+g== X-Google-Smtp-Source: ACJfBouPWJNXsJ8pcNKxkP7vlKJydx1tYfzT4EczJPrQi+Fo9dKV9E+eAhVBWBw6y7IlD+kjV6Pb/JiVideEoHZDmtY= X-Received: by 10.55.142.70 with SMTP id q67mr16315404qkd.92.1516125087469; Tue, 16 Jan 2018 09:51:27 -0800 (PST) MIME-Version: 1.0 Received: by 10.140.20.81 with HTTP; Tue, 16 Jan 2018 09:51:26 -0800 (PST) In-Reply-To: <151539253778.11305.7448095057192632663@ietfa.amsl.com> References: <151539253778.11305.7448095057192632663@ietfa.amsl.com> From: Stig Venaas Date: Tue, 16 Jan 2018 09:51:26 -0800 Message-ID: To: Liang Xia Cc: secdir@ietf.org, draft-ietf-pim-source-discovery-bsr.all@ietf.org, ietf@ietf.org, pim@ietf.org, The IESG Content-Type: text/plain; charset="UTF-8" Archived-At: Subject: Re: [secdir] Secdir last call review of draft-ietf-pim-source-discovery-bsr-07 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Jan 2018 17:51:31 -0000 Thanks for great feedback! I've tried to address all of your comments. I'm planning to add this paragraph to the security considerations. PIM-SM link-local messages can be authenticated using IPsec, see [RFC7761] section 6.3 and [RFC5796]. Since PFM messages are link-local messages sent hop by hop, a link-local PFM message can be authenticated using IPsec such that a router can verify that a message was sent by a trusted neighbor and has not been modified. However, to verify that a received message contains correct information announced by the originator specified in the message, one will have to trust every router on the path from the originator and that each router has authenticated the received message. Let me know if you have any comments on that paragraph. Thanks, Stig On Sun, Jan 7, 2018 at 10:22 PM, Liang Xia wrote: > Reviewer: Liang Xia > Review result: Has Issues > > Nits: > 1. In Abstract, the abbreviation is missed when the Term are firstly appeared, > such as: Sparse-Mode, Rendezvous Point; 2. Every word in the section titles > should be in the capital form > > Issues: > 1. In Security Considerations section, should one sentence be "even if the > sources are actually not active"? 2. Generally, the peer authentication (by > certificate, shared key...) and the message integration protection are always > helpful to defend against the forged routers and PEM messages, even the > resulted resource consumption. But in current Security Considerations section, > there is nothing discussed about these countermeasures, even in the general > way. Suggest to consider this point personally. > From nobody Tue Jan 16 10:57:53 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 55A5A12EA91 for ; Tue, 16 Jan 2018 10:57:44 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.7 X-Spam-Level: X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=primarydata.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IItMsMPlmlZy for ; Tue, 16 Jan 2018 10:57:40 -0800 (PST) Received: from us-smtp-delivery-194.mimecast.com (us-smtp-delivery-194.mimecast.com [216.205.24.194]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EDC8812EAB0 for ; Tue, 16 Jan 2018 10:57:27 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=primarydata.com; s=mimecast20170802; t=1516129046; h=from:subject:date:message-id:to:cc:mime-version:content-type:in-reply-to:references; bh=lQeGcCWsLh5WclnAMEtpNDeEr7jkETfnx8glsG79Fmc=; b=ZPh5W5S9KNsj3VHHzurKn4PuLQRwNW+IHW4ucFG0pJA8QoJoDYfvBBhAdg/1+7aKISim7UcPVaZopfHi2jY+KpCvy6TX8EsanETUuKzLFS3f3EI9j1vMF1uhkFSmyhKxl60YAXnQM2fu9mBbJfD9a0ZSLYjCGq70+s4T0VGrTUo= Received: from NAM01-SN1-obe.outbound.protection.outlook.com (mail-sn1nam01lp0118.outbound.protection.outlook.com [207.46.163.118]) (Using TLS) by us-smtp-1.mimecast.com with ESMTP id us-mta-225-lgaimzIBM9ip7ui4hZNRFg-1; Tue, 16 Jan 2018 13:56:18 -0500 Received: from BY2PR1101MB1093.namprd11.prod.outlook.com (10.164.166.21) by BY2PR1101MB1095.namprd11.prod.outlook.com (10.164.166.23) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.407.7; Tue, 16 Jan 2018 18:56:15 +0000 Received: from BY2PR1101MB1093.namprd11.prod.outlook.com ([10.164.166.21]) by BY2PR1101MB1093.namprd11.prod.outlook.com ([10.164.166.21]) with mapi id 15.20.0407.012; Tue, 16 Jan 2018 18:56:15 +0000 From: Thomas Haynes To: "Brian Weis (bew)" CC: "secdir@ietf.org" , NFSv4 , "draft-ietf-nfsv4-flex-files.all@ietf.org" Thread-Topic: [nfsv4] Secdir last call review of draft-ietf-nfsv4-flex-files-15 Thread-Index: AQHTi9WQTx5RarnLbUyAVOTsrpXN+aNwovgAgACajgCABaIqgA== Date: Tue, 16 Jan 2018 18:56:15 +0000 Message-ID: <599605AF-7CB3-4A56-A26A-3DE56B805309@primarydata.com> References: <151578274278.18715.11694935076324562133@ietfa.amsl.com> <75FDDF9F-C335-4488-9EAE-679DD9727A99@primarydata.com> <2D43D657-817F-4C43-A405-E7FB83C688AD@cisco.com> In-Reply-To: <2D43D657-817F-4C43-A405-E7FB83C688AD@cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [63.157.6.18] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; BY2PR1101MB1095; 20:daUj76h4BIHJYG29OWFPvIF0HHcZ6OvMFPyQWuQDnddjbWk5M9ndG8QDNSqJ36U1piTGi/M9TpD61rqhvEr0KgQ+hVUVdW+LgIi+3bD1uajhE5xfm8ITaMEMYN99uRKxO6kwG2lMVrYNIqrH3TKyt9qpLiGgrehx+ZtiX7nc/bI= x-ms-exchange-antispam-srfa-diagnostics: SSOS; x-ms-office365-filtering-correlation-id: b048988c-1529-4f5b-fbec-08d55d12d1bf x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(7021125)(5600026)(4604075)(3008032)(2017052603307)(7153060)(7193020); SRVR:BY2PR1101MB1095; x-ms-traffictypediagnostic: BY2PR1101MB1095: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(158342451672863)(192374486261705)(95692535739014)(21532816269658); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040470)(2401047)(8121501046)(5005006)(3002001)(93006095)(93001095)(3231023)(2400038)(944501161)(10201501046)(6041268)(20161123560045)(20161123562045)(20161123564045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123558120)(2016111802025)(6043046)(6072148)(201708071742011); SRVR:BY2PR1101MB1095; BCL:0; PCL:0; RULEID:(100000803101)(100110400095); SRVR:BY2PR1101MB1095; x-forefront-prvs: 0554B1F54F x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(39830400003)(366004)(396003)(376002)(39380400002)(346002)(54094003)(252514010)(51914003)(24454002)(199004)(189003)(102836004)(77096006)(6486002)(54906003)(36756003)(316002)(606006)(4326008)(16200700003)(53946003)(82746002)(3660700001)(106356001)(3280700002)(99286004)(966005)(26005)(478600001)(8676002)(81156014)(59450400001)(25786009)(6506007)(53546011)(76176011)(81166006)(14454004)(53936002)(2906002)(229853002)(6512007)(86362001)(6116002)(3846002)(66066001)(83716003)(97736004)(33656002)(2900100001)(230783001)(8936002)(7736002)(54896002)(236005)(6306002)(68736007)(105586002)(6246003)(6436002)(6916009)(2950100002)(5660300001)(42262002)(579004)(569006); DIR:OUT; SFP:1102; SCL:1; SRVR:BY2PR1101MB1095; H:BY2PR1101MB1093.namprd11.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; x-microsoft-antispam-message-info: iwqn/o95CS6Eil7TuhSL3H33QhQlU5vslmX5tHUlZoBTg4kM514Xm3McW/eEtGDo95jQvz75foB9c66s3r3vuA== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM MIME-Version: 1.0 X-OriginatorOrg: primarydata.com X-MS-Exchange-CrossTenant-Network-Message-Id: b048988c-1529-4f5b-fbec-08d55d12d1bf X-MS-Exchange-CrossTenant-originalarrivaltime: 16 Jan 2018 18:56:15.1668 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 03193ed6-8726-4bb3-a832-18ab0d28adb7 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY2PR1101MB1095 X-MC-Unique: lgaimzIBM9ip7ui4hZNRFg-1 Content-Type: multipart/alternative; boundary="_000_599605AF7CB34A56A26A3DE56B805309primarydatacom_" Archived-At: Subject: Re: [secdir] [nfsv4] Secdir last call review of draft-ietf-nfsv4-flex-files-15 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Jan 2018 18:57:44 -0000 --_000_599605AF7CB34A56A26A3DE56B805309primarydatacom_ Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: base64 DQoNCk9uIEphbiAxMiwgMjAxOCwgYXQgMzo1NCBQTSwgQnJpYW4gV2VpcyAoYmV3KSA8YmV3QGNp c2NvLmNvbTxtYWlsdG86YmV3QGNpc2NvLmNvbT4+IHdyb3RlOg0KDQpIaSBUaG9tYXMsDQoNCk9u IEphbiAxMiwgMjAxOCwgYXQgMTE6NDEgQU0sIFRob21hcyBIYXluZXMgPGxvZ2h5ckBwcmltYXJ5 ZGF0YS5jb208bWFpbHRvOmxvZ2h5ckBwcmltYXJ5ZGF0YS5jb20+PiB3cm90ZToNCg0KSGkgQnJp YW4sDQoNClRoYW5rcyBmb3IgdGhlIHJldmlldyAtIGNvbW1lbnRzIGlubGluZS4uDQoNCk9uIEph biAxMiwgMjAxOCwgYXQgMTA6NDUgQU0sIEJyaWFuIFdlaXMgPGJld0BjaXNjby5jb208bWFpbHRv OmJld0BjaXNjby5jb20+PiB3cm90ZToNCg0KUmV2aWV3ZXI6IEJyaWFuIFdlaXMNClJldmlldyBy ZXN1bHQ6IEhhcyBJc3N1ZXMNCg0KSSBoYXZlIHJldmlld2VkIHRoaXMgZG9jdW1lbnQgYXMgcGFy dCBvZiB0aGUgc2VjdXJpdHkgZGlyZWN0b3JhdGUncyBvbmdvaW5nDQplZmZvcnQgdG8gcmV2aWV3 IGFsbCBJRVRGIGRvY3VtZW50cyBiZWluZyBwcm9jZXNzZWQgYnkgdGhlIElFU0cuIFRoZXNlIGNv bW1lbnRzDQp3ZXJlIHdyaXR0ZW4gcHJpbWFyaWx5IGZvciB0aGUgYmVuZWZpdCBvZiB0aGUgc2Vj dXJpdHkgYXJlYSBkaXJlY3RvcnMuIERvY3VtZW50DQplZGl0b3JzIGFuZCBXRyBjaGFpcnMgc2hv dWxkIHRyZWF0IHRoZXNlIGNvbW1lbnRzIGp1c3QgbGlrZSBhbnkgb3RoZXIgbGFzdCBjYWxsDQpj b21tZW50cy4NCg0KVGhpcyBkb2N1bWVudCBkZWZpbmVzIHRoZSBQYXJhbGxlbCBOZXR3b3JrIEZp bGUgU3lzdGVtIChwTkZTKSwgd2hpY2ggYWxsb3dzIGENCnN0b3JhZ2Ugc3lzdGVtIHRvIHN0b3Jl IHRoZSBtZXRhZGF0YSBmb3IgZmlsZXMgb250byBhIG1ldGFkYXRhIHNlcnZlciwgYW5kIGRhdGEN Cm9mIHRoYXQgZmlsZSBvbnRvIGEgc2VwYXJhdGUgc3RvcmFnZSBkZXZpY2UuIFRoZSBkb2N1bWVu dCBmb2N1c2VzIG9uIHRoZQ0KaW50ZXJhY3Rpb24gYmV0d2VlbiB0aGUgdHdvIHR5cGVzIG9mIHNl cnZlcnMsIGFuZCB0aGUgcmVxdWlyZW1lbnRzIG9mIGNsaWVudHMNCnVzaW5nIGEgcE5GUyBzeXN0 ZW0uDQoNClRoZSBkb2N1bWVudCBkZXNjcmliZXMgdHdvIG1vZGVscyBieSB3aGljaCB0aGUgbWV0 YWRhdGEgc2VydmVyIGFuZCBmaWxlIHN0b3JhZ2UNCnNlcnZlciBjYW4gY29tbXVuaWNhdGUuIE9u ZSBpcyBhIOKAnHRpZ2h0IGNvdXBsaW5nIG1vZGVs4oCdLCBpbiB3aGljaCB0aGUgdHdvIHR5cGVz DQpvZiBzZXJ2ZXJzIGRpcmVjdGx5IGNvbW11bmljYXRlLiBJbiB0aGlzIG1vZGVsIHRoZSBtZXRh ZGF0YSBzZXJ2ZXIgY2FuIGVuc3VyZQ0KdGhhdCBmaWxlIGFjY2VzcyBjb250cm9sIHN0YXRlIGlz IHN5bmNocm9uaXplZCBiZXR3ZWVuIHRoZSB0d28gc2VydmVycywgYW5kIEkNCmJlbGlldmUgdGhh dCBsZXZlbCBvZiBhY2Nlc3MgY29udHJvbCBpcyBlcXVpdmFsZW50IHRvIE5GUyB2NC54IHRvZGF5 LiBGcm9tIGENCnNlY3VyaXR5IGNvbnNpZGVyYXRpb25zIHBlcnNwZWN0aXZlLCB0aGlzIGlzIHBl cmhhcHMgYmVzdCBzdW1tYXJpemVkIGluIFNlY3Rpb24NCjIuMjoNCg0K4oCcV2l0aCB0aWdodGx5 IGNvdXBsZWQgc3RvcmFnZSBkZXZpY2VzLCB0aGUgbWV0YWRhdGEgc2VydmVyIHNldHMgdGhlDQog dXNlciBhbmQgZ3JvdXAgb3duZXJzLCBtb2RlIGJpdHMsIGFuZCBBQ0wgb2YgdGhlIGRhdGEgZmls ZSB0byBiZSB0aGUNCiBzYW1lIGFzIHRoZSBtZXRhZGF0YSBmaWxlLiAgQW5kIHRoZSBjbGllbnQg bXVzdCBhdXRoZW50aWNhdGUgd2l0aCB0aGUNCiBzdG9yYWdlIGRldmljZSBhbmQgZ28gdGhyb3Vn aCB0aGUgc2FtZSBhdXRob3JpemF0aW9uIHByb2Nlc3MgaXQgd291bGQNCiBnbyB0aHJvdWdoIHZp YSB0aGUgbWV0YWRhdGEgc2VydmVyLuKAnQ0KDQpUaGUgb3RoZXIgbW9kZWwgaXMgYSDigJxsb29z ZSBjb3VwbGluZyBtb2RlbOKAnSwgaW4gd2hpY2ggdGhlIGNsaWVudCBpcw0KYXV0aGVudGljYXRl ZCBhbmQgYXV0aG9yaXplZCBieSB0aGUgbWV0YWRhdGEgc2VydmVyLCBhbmQgaXMgZ2l2ZW4gYWNj ZXNzIHRvIHRoZQ0KZmlsZSBzZXJ2ZXIgdGhyb3VnaCB0aGUgdXNlIGNyZWRlbnRpYWxzLiBIb3dl dmVyLCB0aGVyZSBpcyBubyBkaXJlY3QNCmNvbW11bmljYXRpb25zIGJldHdlZW4gdGhlIG1ldGFk YXRhIHNlcnZlciBhbmQgdGhlIGZpbGUgc2VydmVyLiBUaGUgbWV0YWRhdGENCnNlcnZlciBkb2Vz IG5vdCBzZWVtIHRvIHByb3ZpZGUgYSBmaW5lIGdyYWluZWQgYWNjZXNzIGNvbnRyb2wgdG8gZmls ZXMgb24gdGhlDQpmaWxlIHNlcnZlciwgYnV0IGluc3RlYWQgcmVsaWVzIHVwb24gdGhlIGNsaWVu dCB0byBlbmZvcmNlIGEgbGVzcyBncmFudWxhcg0KbGV2ZWwgb2YgYWNjZXNzIGNvbnRyb2wuDQoN ClsxXSBObywgdGhlcmUgaXMgc3RpbGwgZGlyZWN0IGNvbW11bmljYXRpb24gYmV0d2VlbiB0aGUg bWV0YWRhdGEgc2VydmVyIGFuZCB0aGUgZmlsZSBzZXJ2ZXIuDQoNClRoZSBkaWZmZXJlbmNlIGlz IHRoYXQgaXQgaXMgdmlhIGEgc3RvcmFnZSBwcm90b2NvbCwgaW4gdGhpcyBjYXNlIE5GUy4NCg0K VGhlIGFjY2VzcyBjb250cm9sIGlzIGVuZm9yY2VkIGJ5IHRoZSBtZXRhZGF0YSBzZXJ2ZXIuIFRo ZSBjbGllbnQgb25seSBnZXQgYWNjZXNzDQp0byB0aGUgZmlsZSBpZiBpdCBjYW4gZ2V0IGEgbGF5 b3V0LiBUaGUgbGF5b3V0IGNhbiBlaXRoZXIgcHJvdmlkZSByZWFkL3dyaXRlIGFjY2Vzcw0Kb3Ig b25seSByZWFkIGFjY2Vzcy4NCg0KVGhlIG1ldGFkYXRhIHNlcnZlciBjYW4gcmV2b2tlIHRoYXQg YWNjZXNzIGF0IGFueSBwb2ludCwgc28gaXQgaXMgbm90DQpjb3JyZWN0IHRvIHNheSB0aGF0IGl0 IGRlcGVuZHMgb24gdGhlIGNsaWVudCB0byBlbmZvcmNlIGEgbGVzcyBncmFudWxhciBsZXZlbA0K b2YgYWNjZXNzIGNvbnRyb2wuDQoNClRoYW5rcyBmb3IgdGhlIGNsYXJpZmljYXRpb24uIFRvIGEg bm9uLU5GUyBleHBlcnQgdGhlIHJlbGF0aW9uc2hpcCBiZXR3ZWVuIGxheW91dHMgYW5kDQphY2Nl c3MgY29udHJvbCAgd2FzbuKAmXQgb2J2aW91cy4gSSB3b25kZXIgaWYgdGhpcyBkaXNjdXNzaW9u IGNvdWxkIGJlIGFkZGVkIHRvIFNlY3VyaXR5DQpDb25zaWRlcmF0aW9ucz8NCg0KDQpIaSBCcmlh biwNCg0KSeKAmXZlIGFscmVhZHkgZ290IHRoYXQgKGFuZCB5ZXMsIEkgdW5kZXJzdGFuZCBpdCBp cyBub3Qgc3VmZmljaWVudCBpZiBJIGhhdmUgdG8gc3BlbGwgaXQgb3V0IDotKToNCg0KMTUuICBT ZWN1cml0eSBDb25zaWRlcmF0aW9ucw0KLi4uDQogICBUaGUgbWV0YWRhdGEgc2VydmVyIGlzIHBy aW1hcmlseSByZXNwb25zaWJsZSBmb3Igc2VjdXJpbmcgdGhlIGRhdGENCiAgIHBhdGguICBJdCBo YXMgdG8gYXV0aGVudGljYXRlIHRoZSBjbGllbnQgYWNjZXNzIGFuZCBwcm92aWRlDQogICBhcHBy b3ByaWF0ZSBjcmVkZW50aWFscyB0byB0aGUgY2xpZW50IHRvIGFjY2VzcyBkYXRhIGZpbGVzIG9u IHRoZQ0KICAgc3RvcmFnZSBkZXZpY2UuICBGaW5hbGx5LCBpdCBpcyByZXNwb25zaWJsZSBmb3Ig cmV2b2tpbmcgYWNjZXNzIGZvciBhDQogICBjbGllbnQgdG8gdGhlIHN0b3JhZ2UgZGV2aWNlLg0K DQogICBUaGUgbWV0YWRhdGEgc2VydmVyIGVuZm9yY2VzIHRoZSBmaWxlIGFjY2Vzcy1jb250cm9s IHBvbGljeSBhdA0KICAgTEFZT1VUR0VUIHRpbWUuICBUaGUgY2xpZW50IHNob3VsZCB1c2UgUlBD IGF1dGhvcml6YXRpb24gY3JlZGVudGlhbHMNCiAgIGZvciBnZXR0aW5nIHRoZSBsYXlvdXQgZm9y IHRoZSByZXF1ZXN0ZWQgaW9tb2RlIChSRUFEIG9yIFJXKSBhbmQgdGhlDQogICBzZXJ2ZXIgdmVy aWZpZXMgdGhlIHBlcm1pc3Npb25zIGFuZCBBQ0wgZm9yIHRoZXNlIGNyZWRlbnRpYWxzLA0KICAg cG9zc2libHkgcmV0dXJuaW5nIE5GUzRFUlJfQUNDRVNTIGlmIHRoZSBjbGllbnQgaXMgbm90IGFs bG93ZWQgdGhlDQogICByZXF1ZXN0ZWQgaW9tb2RlLiAgSWYgdGhlIExBWU9VVEdFVCBvcGVyYXRp b24gc3VjY2VlZHMgdGhlIGNsaWVudA0KICAgcmVjZWl2ZXMsIGFzIHBhcnQgb2YgdGhlIGxheW91 dCwgYSBzZXQgb2YgY3JlZGVudGlhbHMgYWxsb3dpbmcgaXQgSS9PDQogICBhY2Nlc3MgdG8gdGhl IHNwZWNpZmllZCBkYXRhIGZpbGVzIGNvcnJlc3BvbmRpbmcgdG8gdGhlIHJlcXVlc3RlZA0KICAg aW9tb2RlLiAgV2hlbiB0aGUgY2xpZW50IGFjdHMgb24gSS9PIG9wZXJhdGlvbnMgb24gYmVoYWxm IG9mIGl0cw0KICAgbG9jYWwgdXNlcnMsIGl0IE1VU1QgYXV0aGVudGljYXRlIGFuZCBhdXRob3Jp emUgdGhlIHVzZXIgYnkgaXNzdWluZw0KICAgcmVzcGVjdGl2ZSBPUEVOIGFuZCBBQ0NFU1MgY2Fs bHMgdG8gdGhlIG1ldGFkYXRhIHNlcnZlciwgc2ltaWxhciB0bw0KICAgaGF2aW5nIE5GU3Y0IGRh dGEgZGVsZWdhdGlvbnMuDQoNCiAgIElmIGFjY2VzcyBpcyBhbGxvd2VkLCB0aGUgY2xpZW50IHVz ZXMgdGhlIGNvcnJlc3BvbmRpbmcgKFJFQUQgb3IgUlcpDQogICBjcmVkZW50aWFscyB0byBwZXJm b3JtIHRoZSBJL08gb3BlcmF0aW9ucyBhdCB0aGUgZGF0YSBmaWxlJ3Mgc3RvcmFnZQ0KICAgZGV2 aWNlcy4gIFdoZW4gdGhlIG1ldGFkYXRhIHNlcnZlciByZWNlaXZlcyBhIHJlcXVlc3QgdG8gY2hh bmdlIGENCiAgIGZpbGUncyBwZXJtaXNzaW9ucyBvciBBQ0wsIGl0IFNIT1VMRCByZWNhbGwgYWxs IGxheW91dHMgZm9yIHRoYXQgZmlsZQ0KICAgYW5kIHRoZW4gTVVTVCBmZW5jZSBvZmYgYW55IGNs aWVudHMgc3RpbGwgaG9sZGluZyBvdXRzdGFuZGluZyBsYXlvdXRzDQogICBmb3IgdGhlIHJlc3Bl Y3RpdmUgZmlsZXMgYnkgaW1wbGljaXRseSBpbnZhbGlkYXRpbmcgdGhlIHByZXZpb3VzbHkNCiAg IGRpc3RyaWJ1dGVkIGNyZWRlbnRpYWwgb24gYWxsIGRhdGEgZmlsZSBjb21wcmlzaW5nIHRoZSBm aWxlIGluDQogICBxdWVzdGlvbi4gIEl0IGlzIFJFUVVJUkVEIHRoYXQgdGhpcyBiZSBkb25lIGJl Zm9yZSBjb21taXR0aW5nIHRvIHRoZQ0KICAgbmV3IHBlcm1pc3Npb25zIGFuZC9vciBBQ0wuICBC eSByZXF1ZXN0aW5nIG5ldyBsYXlvdXRzLCB0aGUgY2xpZW50cw0KICAgd2lsbCByZWF1dGhvcml6 ZSBhY2Nlc3MgYWdhaW5zdCB0aGUgbW9kaWZpZWQgYWNjZXNzIGNvbnRyb2wgbWV0YWRhdGEuDQog ICBSZWNhbGxpbmcgdGhlIGxheW91dHMgaW4gdGhpcyBjYXNlIGlzIGludGVuZGVkIHRvIHByZXZl bnQgY2xpZW50cw0KICAgZnJvbSBnZXR0aW5nIGFuIGVycm9yIG9uIEkvT3MgZG9uZSBhZnRlciB0 aGUgY2xpZW50IHdhcyBmZW5jZWQgb2ZmLg0KDQpIb3cgYWJvdXQ6DQoNCiAgIElmIGFjY2VzcyBp cyBhbGxvd2VkLCB0aGUgY2xpZW50IHVzZXMgdGhlIGNvcnJlc3BvbmRpbmcgKFJFQUQgb3IgUlcp DQogICBjcmVkZW50aWFscyB0byBwZXJmb3JtIHRoZSBJL08gb3BlcmF0aW9ucyBhdCB0aGUgZGF0 YSBmaWxlJ3Mgc3RvcmFnZQ0KICAgZGV2aWNlcy4g4oCmDQoNCmJlY29tZXMNCg0KICBUaGUgY29t YmluYXRpb24gb2YgZmlsZSBoYW5kbGUsIHN5bnRoZXRpYyB1aWQsIGFuZCBnaWQgaW4gdGhlIGxh eW91dA0KICBhcmUgdGhlIHdheSB0aGF0IHRoZSBtZXRhZGF0YSBzZXJ2ZXIgZW5mb3JjZXMgYWNj ZXNzIGNvbnRyb2wgdG8gdGhlDQogIGRhdGEgc2VydmVyLiBUaGUgZGlyZWN0b3J5IG5hbWVzcGFj ZSBvbiB0aGUgc3RvcmFnZSBkZXZpY2UgU0hPVUxEDQogIG9ubHkgYmUgYWNjZXNzaWJsZSB0byB0 aGUgbWV0YWRhdGEgc2VydmVyIGFuZCBub3QgdGhlIGNsaWVudHMuIEluIHRoYXQgY2FzZSwNCiAg dGhlIGNsaWVudCBvbmx5IGhhcyBhY2Nlc3MgdG8gZmlsZSBoYW5kbGVzIG9mIGZpbGUgb2JqZWN0 cyBhbmQgbm90DQogIGRpcmVjdG9yeSBvYmplY3RzLiBUaHVzLCBnaXZlbiBhIGZpbGUgaGFuZGxl IGluIGEgbGF5b3V0LCBpdCBpcyBub3QNCiAgcG9zc2libGUgdG8gZ3Vlc3MgdGhlIHBhcmVudCBk aXJlY3RvcnkgZmlsZSBoYW5kbGUuIEZ1cnRoZXIsIGFzIHRoZQ0KICBkYXRhIGZpbGUgcGVybWlz c2lvbnMgb25seSBhbGxvdyB0aGUgZ2l2ZW4gc3ludGhldGljIHVpZCByZWFkL3dyaXRlDQogIHBl cm1pc3Npb24gYW5kIHRoZSBnaXZlbiBzeW50aGV0aWMgZ2lkIHJlYWQgcGVybWlzc2lvbiwga25v d2luZw0KICB0aGUgc3ludGhldGljIGlkcyBvZiBvbmUgZmlsZSBkb2VzIG5vdCBuZWNlc3Nhcmls eSBhbGxvdyBhY2Nlc3MgdG8gYW55DQogIG90aGVyIGRhdGEgZmlsZSBvbiB0aGUgc3RvcmFnZSBk ZXZpY2UuDQoNCiAgVGhlIG1ldGFkYXRhIHNlcnZlciBjYW4gYWxzbyBkZW55IGFjY2VzcyBhdCBh bnkgdGltZSBieSBmZW5jaW5nDQogIHRoZSBkYXRhIGZpbGUsIHdoaWNoIG1lYW5zIGNoYW5naW5n IHRoZSBzeW50aGV0aWMgaWRzLiBJbiB0dXJuLCB0aGF0DQogIGZvcmNlcyB0aGUgY2xpZW50IHRv IHJldHVybiBpdHMgY3VycmVudCBsYXlvdXQgYW5kIGdldCBhIG5ldyBsYXlvdXQgaWYNCiAgaXQg d2FudHMgdG8gY29udGludWUgSU8gdG8gdGhlIGRhdGEgZmlsZS4NCg0KICBJZiB0aGUgY29uZmln dXJhdGlvbiBvZiB0aGUgc3RvcmFnZSBkZXZpY2UgaXMgc3VjaCB0aGF0IGNsaWVudHMNCiAgY2Fu IGFjY2VzcyB0aGUgZGlyZWN0b3J5IG5hbWVzcGFjZSwgdGhlbiB0aGUgYWNjZXNzIGNvbnRyb2wN CiAgZGVncmFkZXMgdG8gdGhhdCBvZiBhIHR5cGljYWwgTkZTIHNlcnZlciB3aXRoIGV4cG9ydHMg d2l0aCBhDQogIHNlY3VyaXR5IGZsYXZvciBvZiBBVVRIX1NZUy4gIEFueSBjbGllbnQgd2hpY2gg aXMgYWxsb3dlZA0KICBhY2Nlc3MgY2FuIGZvcmdlIGNyZWRlbnRpYWxzIHRvIGFjY2VzcyBhbnkg ZGF0YSBmaWxlLiBUaGUNCiAgY2F2ZWF0IGlzIHRoYXQgdGhlIHJvZ3VlIGNsaWVudCBtaWdodCBo YXZlIG5vIGtub3dsZWRnZSBvZg0KICB0aGUgZGF0YSBmaWxl4oCZcyB0eXBlIG9yIHBvc2l0aW9u IGluIHRoZSBtZXRhZGF0YSBkaXJlY3RvcnkNCiAgbmFtZXNwYWNlLg0KDQogICBJZiBhY2Nlc3Mg aXMgYWxsb3dlZCwgdGhlIGNsaWVudCB1c2VzIHRoZSBjb3JyZXNwb25kaW5nIChSRUFEIG9yIFJX KQ0KICAgY3JlZGVudGlhbHMgdG8gcGVyZm9ybSB0aGUgSS9PIG9wZXJhdGlvbnMgYXQgdGhlIGRh dGEgZmlsZSdzIHN0b3JhZ2UNCiAgIGRldmljZXMuIOKApg0KDQpPciBkbyB5b3Ugd2FudCBtZSB0 byBwdWxsIHRoYXQgbmV3IHRleHQgaW50byBhIG5ldyBzdWJzZWN0aW9uIDE1LjEgYW5kDQpzbGFt IHRoZSBvdGhlciBzdWJzZWN0aW9ucyBkb3duPw0KDQoNCg0KDQoNClRoZSBTZWN1cml0eSBDb25z aWRlcmF0aW9ucyBzZWN0aW9uIGlzIHdlbGwtd3JpdHRlbiBhbmQgaGVscGZ1bC4gSSBkbyBoYXZl IHNvbWUNCnN1Z2dlc3Rpb25zIGZvciBpbXByb3ZpbmcgaXQsICBhbmQgYWxzbyBzb21lIHF1ZXN0 aW9ucy4NCg0KKDEpIFNlY3Rpb24gMi4yOiBzaG91bGQgdGhlIOKAnHJlY29tbWVuZGVk4oCdIGlu IHRoZSBOb3RlIGJlIFJFQ09NTUVOREVEPw0KUmVzdHJpY3RpbmcgYWNjZXNzIGNvbnRyb2wgdG8g anVzdCBzdXBlcnVzZXIgaGF2ZSBhY2Nlc3MgdG8gdGhlIHN0b3JhZ2UgZGV2aWNlDQpzZWVtcyBs aWtlIGEgdmFsdWFibGUgYWR2aWNlLg0KDQpzdXJlDQoNCg0KKDIpIFNlY3Rpb24gMi4yOiBUaGUg Tk9URSBwcm9iYWJseSBzaG91bGQgcHJvdmlkZSBndWlkYW5jZSByZWdhcmRpbmcgcHJvdGVjdGlu Zw0KdGhlIG5ldHdvcmsgY29ubmVjdGlvbnMgYmV0d2VlbiB0aGUgbWV0YWRhdGEgc2VydmVyIGFu ZCB0aGUgZmlsZSBzZXJ2ZXIuIEZvcg0KZXhhbXBsZSwgc29tZXRoaW5nIGxpa2U6IOKAnENvbW11 bmljYXRpb25zIGJldHdlZW4gdGhlIG1ldGFkYXRhIHNlcnZlciBhbmQgZmlsZQ0Kc2VydmVyIG5l ZWQgdG8gc2VjdXJlZC4gSWYgdGhlcmUgaXMgbm90IGFkZXF1YXRlIHBoeXNpY2FsIHNlY3VyaXR5 IChpLmUuLCB0aGUNCnNlcnZlcnMgYXJlIG5vdCBjby1sb2NhdGVkIGluIGEgcGh5c2ljYWxseSBz ZWN1cmUgYXJlYSksIHRoZWlyIGNvbW11bmljYXRpb25zDQpNVVNUIGJlIHByb3RlY3RlZCBmb3Ig Y29uZmlkZW50aWFsaXR5IChlLmcuLCB1c2luZyBUTFMgb3IgSVBzZWMpLuKAnQ0KDQpObywgdGhl IE1VU1QgaXMgdG9vIHN0cm9uZyBoZXJlLiBXZSBjYW4gcmVjb21tZW5kIHByb2NlZHVyZXMsIHdl IGNhbiBub3QgUkVRVUlSRSB0aGVtLg0KDQpJIGFtIGZpbmUgd2l0aDoNCg0KQ29tbXVuaWNhdGlv bnMgYmV0d2VlbiB0aGUgbWV0YWRhdGEgc2VydmVyIGFuZCBmaWxlDQpzZXJ2ZXIgU0hPVUxEIGJl IHNlY3VyZWQuIElmIHRoZXJlIGlzIG5vdCBhZGVxdWF0ZSBwaHlzaWNhbCBzZWN1cml0eSAoaS5l LiwgdGhlDQpzZXJ2ZXJzIGFyZSBub3QgY28tbG9jYXRlZCBpbiBhIHBoeXNpY2FsbHkgc2VjdXJl IGFyZWEpLCB0aGVpciBjb21tdW5pY2F0aW9ucw0KU0hPVUxEIGJlIHByb3RlY3RlZCBmb3IgY29u ZmlkZW50aWFsaXR5IChlLmcuLCB1c2luZyBUTFMgb3IgSVBzZWMpLuKAnQ0KDQpJIHVuZGVyc3Rh bmQgdGhlIGhlc2l0YXRpb24gdG8gbWFrZSBpdCBhIE1VU1QsIGJlY2F1c2UgaXTigJlzIG9uIGEg cHJvdG9jb2wNCnRoYXQgaXNu4oCZdCBkZXNjcmliZWQgaW4gdGhpcyBkb2N1bWVudC4gQnV0IEkg dGhpbmsgaXTigJlzIHJlYXNvbmFibGUgdG8gZGVzY3JpYmUNCmEgcmlzayBhbmQgbWFrZSBhIHJl cXVpcmVtZW50IHRoYXQgdGhlIHJpc2sgYmUgbWl0aWdhdGVkLg0KDQpJIGRvIG5vdCBkaXNhZ3Jl ZSB3aXRoIHRoYXQgc3RhdGVtZW50Lg0KDQpDZXJ0YWlubHkgaXTigJlzIG5vdA0KcmVhc29uYWJs ZSB0byByZXF1aXJlIGEgcGFydGljdWxhciBtZXRob2QgdG8gYmUgdXNlZCB0byBwcm90ZWN0IHRo ZSBwcm90b2NvbA0KKHdoaWNoIGlzIHdoeSBJIHN1Z2dlc3RlZCDigJxlLmcuLCB1c2luZyBUTFMg b3IgSVBzZWPigJ0gYWJvdmUgcmF0aGVyIHRoYW4g4oCcaS5lLuKAnSkuDQoNCldpdGggdG9kYXni gJlzIHBlcnZhc2l2ZSBwcml2YWN5IHRocmVhdHMgdG8gbmV0d29yayB0cmFmZmljIGl04oCZcyBo YXJkIHRvDQpqdXN0aWZ5IGFsbG93aW5nIG1ldGFkYXRhIHRvIHRyYXZlcnNlIHVucHJvdGVjdGVk IG5ldHdvcmtzIGFzIGNsZWFyLXRleHQNCihpLi5lLCBhdmFpbGFibGUgdG8gIHBhc3NpdmUgZWF2 ZXNkcm9wcGVycykuIEl04oCZcyBhbHNvIGhhcmQgb3IgdG8ganVzdGlmeSBhbGxvd2luZw0Kc2Vj dXJpdHktcmVsZXZlbnQgcHJvdG9jb2xzIHRvIGJlIHRyYW5zZmVycmluZyBpdCB3aXRob3V0IGNy eXB0b2dyYXBoaWMgaW50ZWdyaXR5DQpwcm90ZWN0aW9uLiBJdCBzZWVtcyBpbXBvcnRhbnQgdG8g cmVtaW5kIHByb3RvY29sIGRldmVsb3BlcnMgdGhhdCBib3RoDQpjb25jZXJucyBhcmUgYXBwbGlj YWJsZS4gSG93IGFib3V0IHNvbWV0aGluZyBsaWtlIHRoaXMsIHdoZXJlIG1vcmUgcmF0aW9uYWxl DQppcyBnaXZlbi4gTm90ZSB0aGF0IHRoZSByZXF1aXJlbWVudCB0aGF0IHRoZSBwcm90b2NvbCBt dXN0IGJlIHByb3RlY3RlZCwgYnV0DQpubyBwYXJ0aWN1bGFyIG1ldGhvZCBvZiBwcm90ZWN0aW9u IGlzIG5vdCBtYW5kYXRlZC4NCg0KIkNvbW11bmljYXRpb25zIGJldHdlZW4gdGhlIG1ldGFkYXRh IHNlcnZlciBhbmQgZmlsZQ0Kc2VydmVyIE1VU1QgYmUgc2VjdXJlIGZyb20gZWF2ZXNkcm9wcGVy cyBhbmQgbWFuLWluLXRoZS1taWRkbGUgcHJvdG9jb2wNCnRhbXBlcmluZy4gVGhlIHNlY3VyaXR5 IG1lYXN1cmUgY291bGQgYmUgZHVlIHRvIHBoeXNpY2FsIHNlY3VyaXR5IChlLmcuLCB0aGUNCnNl cnZlcnMgYXJlIGNvLWxvY2F0ZWQgaW4gYSBwaHlzaWNhbGx5IHNlY3VyZSBhcmVhKSwgZnJvbSBl bmNyeXB0ZWQgY29tbXVuaWNhdGlvbnMsDQpvciBzb21lIG90aGVyIHRlY2huaXF1ZS7igJ0NCg0K DQpJ4oCZbSBzdGlsbCBoZXNpdGFudCwgaW4gcGFydCBiZWNhdXNlIEkgY2Fu4oCZdCBtYWtlIGFu IGlyb25jbGFkIHJ1bGUgYXMgYSBzdGFuZGFyZOKAmXMNCmF1dGhvciB0aGF0IEkga25vdyBJIGFt IGdvaW5nIHRvIHZpb2xhdGUgd2l0aCBteSBvd24gaW1wbGVtZW50YXRpb24uDQoNCkFsc28sIEkg a25vdyB0aGF0IHRoZXJlIG1pZ2h0IGJlIGV4aXN0ZW50IHN0b3JhZ2UgZGV2aWNlcyB3aGljaCBk byBub3Qgc3VwcG9ydA0KTkZTIG92ZXIgVExTL0lQc2VjL2V0Yy4gWWVzLCBwaHlzaWNhbCBzZWN1 cml0eSBpcyB0aGUgYW5zd2VyIGhlcmUsIGJ1dCBJIGNhbm5vdA0KaW4gZnVsbCBjb25maWRlbmNl IGV4cGVjdCB0aGF0IGFuIGFjdHVhbCBkZXBsb3ltZW50IG1lZXRzIGFsbCBvZiB0aGVzZSBjcml0 ZXJpYS4NCkF0IHNvbWUgcG9pbnQsIHRoZSBidXJkZW4gaXMgb2ZmIG9mIHRoZSBwcm90b2NvbCBp bXBsZW1lbnRhdGlvbiBhbmQgb250byB0aGUNCmRlcGxveW1lbnQuDQoNCklmIHdlIGNoYW5nZSB0 aGUgTVVTVCB0byBhIFNIT1VMRCwgSSBhbSBwZXJmZWN0bHkgZmluZSBtYWtpbmcgdGhlIGNoYW5n ZS4gOi0pDQoNCg0KDQoNCigzKSBGcm9tIHRoZSBkZXNjcmlwdGlvbiBvZiBzeW50aGV0aWMgdWlk cy9naWRzIGluIFNlY3Rpb24gMi4yLCBJIGJlbGlldmUgdGhhdA0KdGhlIGZ1bGwgcmFuZ2Ugb2Yg ZmlsZSBwZXJtaXNzaW9ucyAoZS5nLiwgb3duZXIgci93L3gpICBpcyBob25vcmVkIGluIHRoZQ0K dGlnaHRseSBjb3VwbGVkIG1vZGVsLCBidXQgYXJlIHJlc3RyaWN0ZWQgaW4gdGhlIGxvb3NlbHkg Y291cGxlZCBtb2RlbCB0bw0K4oCcb3duZXIgci934oCdLCDigJxncm91cCBy4oCdLiBJZiB0aGF0 IGlzIGNvcnJlY3QsIEkgdGhpbmsgdGhlIHNlY3VyaXR5IGNvbnNpZGVyYXRpb25zDQpzaG91bGQg ZXhwbGljaXRseSBtZW50aW9uIHRoYXQgdGhlIGVmZmVjdCBvZiBhY2Nlc3MgcGVybWlzc2lvbnMg aXMgcmVkdWNlZCBvbg0KdGhlIGZpbGUgc2VydmVyIGZpbGVzLg0KDQpbMl0gSSB0aGluayB0aGUg Y29uZnVzaW9uIGhlcmUgaXMgdGhhdCB0aGUgZmlsZXMgb24gc3RvcmFnZSBkZXZpY2UgYXJlIG5v dA0KaW4gdGhlIGZpbGUgaGllcmFyY2h5IGFzIHNlZW4gb24gdGhlIG1ldGFkYXRhIHNlcnZlci4N Cg0KT24gYSBmaWxlIGJ5IGZpbGUgYmFzaXMgb24gdGhlIHN0b3JhZ2UgZGV2aWNlLCB3ZSBhcmUg Z2l2aW5nIHRoZSBjbGllbnQgZWl0aGVyDQp3cml0ZSBtb2RpZmljYXRpb24gYWNjZXNzLCByZWFk IGFjY2Vzcywgb3Igbm8gYWNjZXNzIGF0IGFsbC4gVGhlIGNsaWVudCBjYW5ub3QNCnJlbW92ZSB0 aGUgZmlsZSAoaXQgd291bGQgbmVlZCB0byBrbm93IHRoZSBwYXJlbnQgZGlyZWN0b3J5IEZIIGFu ZCB0aGUNCm5hbWUgb2YgdGhlIGZpbGUgLSBuZWl0aGVyIG9mIHdoaWNoIGl0IGhhcykuICBJdCBj YW4gZWZmZWN0aXZlbHkgcmVtb3ZlIHRoZSBjb250ZW50DQppZiBpdCBoYXMgd3JpdGUgcGVybWlz c2lvbiAoYnV0IG5vdGhpbmcgd291bGQgcHJldmVudCB0aGlzIGluIGEgdGlnaHRseQ0KY291cGxl ZCBtb2RlbCkuDQoNCkdvdCBpdCwgdGhhbmtzLg0KDQoNCg0KDQoNCg0KKDQpIFNlY3Rpb24gMi4y LiBJbiB0aGlzIHBocmFzZSDigJxpdCBtYXkgYmUgYXNzaWduZWQgc29tZSByYW5kb20gc3ludGhl dGljDQp1aWQvZ2lkIHRvIGRlbnkgYWNjZXNz4oCdLCB3b3VsZCBhIGJldHRlciB3b3JkIGZvciDi gJxyYW5kb23igJ0gYmUg4oCcdW51c2Vk4oCdIG9yDQrigJx1bnByZWRpY3RhYmxl4oCdPyBBbHNv IHdoYXQgaXMgdGhlIHNlY3VyaXR5IHZhbHVlIGludGVuZGVkIGJ5IHRoZSB1c2Ugb2YgYQ0K4oCc cmFuZG9t4oCdIHZhbHVlIGZvciBzeW50aGV0aWMgdWlkcy9naWRzPw0KDQoNCkluIGFuIGVhcmxp ZXIgcmV2aWV3IChieSBMaW5kYSBEdW5iYXIpLCB0aGF0IHBocmFzZSB3YXMgY2hhbmdlZDoNCg0K DQogT24gdGhlIHN0b3JhZ2UgZGV2aWNlLCBpdCBtYXkgYmUgYXNzaWduZWQgc29tZSByYW5kb20g c3ludGhldGljIHVpZC8NCiBnaWQgdG8gZGVueSBhY2Nlc3M6DQoNCiAtcnctci0tLS0tICAgIDEg MTk0NTIgICAyODQxOCAgICAxNjk3IERlYyAgNCAxMTozMSBkYXRhX29tcGhhLmMNCg0KIFdoZW4g dGhlIGZpbGUgaXMgb3BlbmVkIG9uIGEgY2xpZW50IGFuZCBhY2Nlc3NlZCwgaXQgd2lsbCB0cnkg dG8gZ2V0IGENCiBsYXlvdXQgZm9yIHRoZSBkYXRhIGZpbGUuIFNpbmNlIHRoZSBsYXlvdXQga25v d3Mgbm90aGluZw0KIGFib3V0IHRoZSB1c2VyIChhbmQgZG9lcyBub3QgY2FyZSksIHdoZXRoZXIg dGhlIHVzZXIgbG9naHlyIG9yDQogZ2FyYm8gb3BlbnMgdGhlIGZpbGUgZG9lcyBub3QgbWF0dGVy LiAgVGhlIGNsaWVudCBoYXMgdG8gcHJlc2VudA0KIGFuIHVpZCBvZiAxOTQ1MiB0byBnZXQgd3Jp dGUgcGVybWlzc2lvbi4gSWYgaXQgcHJlc2VudHMgYW55IG90aGVyDQogdmFsdWUgZm9yIHRoZSB1 aWQsIHRoZW4gaXQgbXVzdCBnaXZlIGEgZ2lkIG9mIDI4NDE4IHRvIGdldCByZWFkDQogYWNjZXNz Lg0KDQogRnVydGhlciwgaWYgdGhlIG1ldGFkYXRhIHNlcnZlciBkZWNpZGVzIHRvIGZlbmNlIHRo ZSBmaWxlLCBpdCBtYXkNCiBjaGFuZ2UgdGhlIHVpZCBhbmQgZ2lkIGFzIHN1Y2g6DQoNCiAtcnct ci0tLS0tICAgIDEgMTk0NTMgICAyODQxOSAgICAxNjk3IERlYyAgNCAxMTozMSBkYXRhX29tcGhh LmMNCg0KDQpXaGF0IHdlIGNvdWxkIHN1Z2dlc3Qgd291bGQgYmUgc29tZXRoaW5nIGFsb25nIHRo ZSBsaW5lcyBvZjoNCg0KIE9uIHRoZSBzdG9yYWdlIGRldmljZSwgaXQgbWF5IGJlIGFzc2lnbmVk IHNvbWUgdW5wcmVkaWN0YWJsZQ0KIHN5bnRoZXRpYyB1aWQvZ2lkIHRvIGRlbnkgYWNjZXNzLg0K IOKApg0KIEZ1cnRoZXIsIGlmIHRoZSBtZXRhZGF0YSBzZXJ2ZXIgZGVjaWRlcyB0byBmZW5jZSB0 aGUgZmlsZSwgaXQNCiBzaG91bGQgY2hhbmdlIHRoZSB1aWQgYW5kL29yIGdpZCBzdWNoIHRoYXQg dGhlc2UgdmFsdWVzDQogbmVpdGhlciBtYXRjaCBlYXJsaWVyIHZhbHVlcyBmb3IgdGhhdCBmaWxl IG5vciBtYXRjaA0KIGEgcHJlZGljdGFibGUgY2hhbmdlIGJhc2VkIG9uIGFuIGVhcmxpZXIgZmVu Y2luZy4NCg0KVWdoLCBub3Qgc3VyZSBJIGxpa2UgdGhlIHdvcmRzLg0KDQp1aWRbTisxXSAhPSB1 aWRbTi0xXSAmJiB1aWRbTisxXSAgIT0gY2hhbmdlKHVpZFtOLTFdIC0+IHVpZFtOXSkuDQoNCkku ZS4sIGRvIG5vdCBzZXQgdG8gcmVjZW50IG9sZCB2YWx1ZXMgKG1pZ2h0IGZlbmNlIGJhY2sgdG8g YW4gdWlkDQphbiBvbGRlciBjbGllbnQgYWxyZWFkeSBoYXMpIGFuZCBkbyBub3QgdXNlIGEgZml4 ZWQgaW5jcmVtZW50Lg0KDQpTbyBtYXliZSBpbiB0aGUgZmlyc3QgcGFyYWdyYXBoIHlvdSBtZWFu IOKAnOKApiBzb21lIHVucHJlZGljdGFibGUgYW5kDQp1bnVzZWQgYnkgYW55IGN1cnJlbnQgY2xp ZW504oCdPw0KDQoNCg0KKDUpIEluIHRoZSDigJxsb29zZSBjb3VwbGluZyBtb2RlbOKAnSBmaWxl IGFjY2VzcyBhY3R1YWxseSBlbmZvcmNlZCBieSB0aGUgY2xpZW50LA0Kd2hpY2ggcHJlc3VtYWJs eSBjYW4gYmUgbWFuaXB1bGF0ZWQgYnkgYW4gZXZpbCB1c2VyLiBUaGlzIGlzIGNsZWFybHkgc3Rh dGVkIG4NClNlY3Rpb24gMi4yOiDigJwgVGhlIGNsaWVudCBpcyB0aHVzIHNvbGVseSByZXNwb25z aWJsZSBmb3IgZW5mb3JjaW5nIGZpbGUNCnBlcm1pc3Npb25zIGluIGEgbG9vc2VseSBjb3VwbGVk IG1vZGVsLuKAnSAgQWxzbywgU2VjdGlvbiAyLjIuMSBtZW50aW9ucyDigJxhDQpTRVRBVFRSIHdv dWxkIGJlIHNlbnQgdG8gdGhlIHN0b3JhZ2UgZGV2aWNlIHRvIHNldCB0aGUgb3duZXIgYW5kIGdy b3VwIG9mIHRoZQ0KZGF0YSBmaWxl4oCdLCBhbmQgc2luY2UgaGVyZSBpcyBubyBjb250cm9sIHBy b3RvY29sIGJldHdlZW4gdGhlIG1ldGFkYXRhIHNlcnZlcg0KYW5kIHRoZSBmaWxlIHNlcnZlciBz byBJIGFzc3VtZSBpdCBpcyBzZW50IGJ5IHRoZSBjbGllbnQuDQoNCkl0IGlzIHN1YnRsZSwgYnV0 IHRoaXMgZ29lcyBiYWNrIHRvIHRoZSBmYWN0IChzZWUgWzFdKSB0aGF0IOKAnG5vIGNvbnRyb2wg cHJvdG9jb2zigJ0gZG9lcyBub3QNCmltcGx5IOKAnG5vIGNvbW11bmljYXRpb24gYmV0d2VlbiB0 aGUgbWV0YWRhdGEgc2VydmVyIGFuZCB0aGUgc3RvcmFnZQ0KZGV2aWNl4oCdLiAgSS5lLiwgdGhl IE1EUyBkb2VzIHRoZSBTRVRBVFRSLg0KDQpBbHNvLCBJIG5vdGljZSB5b3UgYXJlIHVzaW5nIHRo ZSBwaHJhc2Ug4oCcZmlsZSBzZXJ2ZXLigJ0sIHdoaWNoIHByb2JhYmx5IGltcGFjdHMNCnlvdXIg dmlldyBpbiB5b3VyIHBvaW50IDMgKHNlZSBteSBbMl0pIC0gdGhlIHRlcm0gd2UgdXNlIGlzIHN0 b3JhZ2UNCmRldmljZS4gVGhlcmUgaXMgbm8gcmVxdWlyZW1lbnQgdGhhdCB0aGlzIGRldmljZSBz ZXJ2ZSB1cCBkYXRhIGZpbGVzDQphcyBpZiB0aGV5IHdlcmUgaW4gYSBmaWxlc3lzdGVtLiBUaGUg c3RvcmFnZSBkZXZpY2UgaXMgbGltaXRlZCBpbiB0aGUgb3BlcmF0aW9ucw0KdGhhdCBpdCBjYW4g cmVzcG9uZCB0byBmcm9tIHRoZSBjbGllbnQgYmFzZWQgb24gdGhlIGluZm9ybWF0aW9uIGl0IGlz DQpwcmVzZW50ZWQgd2l0aC4NCg0KRm9yIGV4YW1wbGUsIHRoZSBleHBvcnRzIG9uIHRoZSBzdG9y YWdlIGRldmljZSBjYW4gYmUgY29uZmlndXJlZCBzdWNoDQp0aGF0IHRoZSBtZXRhZGF0YSBzZXJ2 ZXIgaXMgdGhlIG9ubHkgb25lIHdoaWNoIGNhbiBtb3VudCB0aGUgZXhwb3J0cy4NCkFuZCBzaW5j ZSB0aGUgbWV0YWRhdGEgc2VydmVyIG9ubHkgaGFuZHMgb3V0IEZpbGUgSGFuZGxlcyB0byB0aGUN CmNsaWVudHMsIHRoZXkgd291bGQgbm90IGJlIGFibGUgdG8gd2FsayB0aGUgbmFtZXNwYWNlIG9m IHRoZSBzdG9yYWdlDQpkZXZpY2UuDQoNClRoYW5rcyBmb3IgdGhlIGV4cGxhbmF0aW9uIOKApiBt YWtlcyBzZW5zZS4NCg0KDQoNClB1dCBhbm90aGVyIHdheSwgaXQgc2VlbXMgYXMgaWYgYW55IGNs aWVudCB0aGF0IGhhcyBjcmVkZW50aWFscyBhbGxvd2luZyBpdCB0bw0KYWNjZXNzIHRvIHRoZSBm aWxlIHNlcnZlciBjYW4gYWNjZXNzIGFueSBmaWxlIG9uIHRoZSBmaWxlIHN5c3RlbSBpZiBpdCBp cw0KY2hvb3NlcyB0byBkbyBzbyAoZS5nLi4sIGlmIGl0IGlzIGEgbWFsaWNpb3VzIGNsaWVudCku IElzIHRoYXQgY29ycmVjdD8NCg0KQXMgd2l0aCBhbnkgTkZTIGZpbGVzeXN0ZW0gd2hpY2ggdXNl cyBhbiBBVVRIX1NZUyBzZWN1cml0eSBtb2RlbCwNCmVhY2ggb2YgdGhlIGZpbGUgaGFuZGxlLCB1 aWQsIGFuZCBnaWQgY2FuIGJlIGZvcmdlZCB0byBnYWluIGFjY2Vzcy4NCg0KSW4gb3RoZXIgd29y ZHMsIHRoaXMgaXMgbm90aGluZyBuZXcuDQoNClRoZSBzZWN1cml0eSBtb2RlbCBmb3IgTkZTdjQu MiAoYW5kIGJhc2VkIG9uIHRoYXQsIE5GU3Y0LjAgYW5kIE5GU3Y0LjEpOg0KDQpbUkZDNzg2Ml0N CjE3LiAgU2VjdXJpdHkgQ29uc2lkZXJhdGlvbnMNCg0KICBORlN2NC4yIGhhcyBhbGwgb2YgdGhl IHNlY3VyaXR5IGNvbmNlcm5zIHByZXNlbnQgaW4gTkZTdjQuMSAoc2VlDQogIFNlY3Rpb24gMjEg b2YgW1JGQzU2NjFdKSwgYXMgd2VsbCBhcyB0aG9zZSBwcmVzZW50IGluIHRoZSBzZXJ2ZXItc2lk ZQ0KICBjb3B5IChzZWUgU2VjdGlvbiA0LjkpIGFuZCBpbiBMYWJlbGVkIE5GUyAoc2VlIFNlY3Rp b24gOS42KS4NCg0KV2hpY2ggbGVhZHMgdXMgdG8gW1JGQzU2NjFdOg0KDQoyLjIuMS4xLjEuMi4g IFNlY3VyaXR5IE1lY2hhbmlzbXMgZm9yIE5GU3Y0LjENCg0KICBSUENTRUNfR1NTLCB2aWEgR1NT LUFQSSwgbm9ybWFsaXplcyBhY2Nlc3MgdG8gbWVjaGFuaXNtcyB0aGF0IHByb3ZpZGUNCiAgc2Vj dXJpdHkgc2VydmljZXMuICBUaGVyZWZvcmUsIE5GU3Y0LjEgY2xpZW50cyBhbmQgc2VydmVycyBN VVNUDQogIHN1cHBvcnQgdGhlIEtlcmJlcm9zIFY1IHNlY3VyaXR5IG1lY2hhbmlzbS4NCg0KICBU aGUgdXNlIG9mIFJQQ1NFQ19HU1MgcmVxdWlyZXMgc2VsZWN0aW9uIG9mIG1lY2hhbmlzbSwgcXVh bGl0eSBvZg0KICBwcm90ZWN0aW9uIChRT1ApLCBhbmQgc2VydmljZSAoYXV0aGVudGljYXRpb24s IGludGVncml0eSwgcHJpdmFjeSkuDQogIEZvciB0aGUgbWFuZGF0ZWQgc2VjdXJpdHkgbWVjaGFu aXNtcywgTkZTdjQuMSBzcGVjaWZpZXMgdGhhdCBhIFFPUCBvZg0KICB6ZXJvIGlzIHVzZWQsIGxl YXZpbmcgaXQgdXAgdG8gdGhlIG1lY2hhbmlzbSBvciB0aGUgbWVjaGFuaXNtJ3MNCiAgY29uZmln dXJhdGlvbiB0byBtYXAgUU9QIHplcm8gdG8gYW4gYXBwcm9wcmlhdGUgbGV2ZWwgb2YgcHJvdGVj dGlvbi4NCiAgRWFjaCBtYW5kYXRlZCBtZWNoYW5pc20gc3BlY2lmaWVzIGEgbWluaW11bSBzZXQg b2YgY3J5cHRvZ3JhcGhpYw0KICBhbGdvcml0aG1zIGZvciBpbXBsZW1lbnRpbmcgaW50ZWdyaXR5 IGFuZCBwcml2YWN5LiAgTkZTdjQuMSBjbGllbnRzDQogIGFuZCBzZXJ2ZXJzIE1VU1QgYmUgaW1w bGVtZW50ZWQgb24gb3BlcmF0aW5nIGVudmlyb25tZW50cyB0aGF0IGNvbXBseQ0KICB3aXRoIHRo ZSBSRVFVSVJFRCBjcnlwdG9ncmFwaGljIGFsZ29yaXRobXMgb2YgZWFjaCBSRVFVSVJFRA0KICBt ZWNoYW5pc20uDQoNCjIuMi4xLjEuMS4yLjEuICBLZXJiZXJvcyBWNQ0KDQogIFRoZSBLZXJiZXJv cyBWNSBHU1MtQVBJIG1lY2hhbmlzbSBhcyBkZXNjcmliZWQgaW4gWzVdIE1VU1QgYmUNCiAgaW1w bGVtZW50ZWQgd2l0aCB0aGUgUlBDU0VDX0dTUyBzZXJ2aWNlcyBhcyBzcGVjaWZpZWQgaW4gdGhl DQogIGZvbGxvd2luZyB0YWJsZToNCg0KVG8gcGFyYXBocmFzZSBpdCwgTkZTdjQueCBjbGllbnRz IGFuZCBzZXJ2ZXJzIE1VU1Qgc3VwcG9ydA0KdGhlIEtlcmJlcm9zIFY1IHNlY3VyaXR5IG1lY2hh bmlzbSwgYnV0IGluc3RhbGxhdGlvbnMgYXJlIG5vdA0KcmVxdWlyZWQgdG8gdXNlIEtlcmJlcm9z Lg0KDQpJLmUuLCB0aGlzOg0KDQptb3VudCAtbyB2ZXJzPTQuMixzZWM9c3lzIHNlcnZlcjovIC9t bnQNCg0KbWVhbnMgdGhhdCBhbnkgbWFsaWNpb3VzIHVzZXIgY2FuIHVzZSBhbnkgY2xpZW50IHdo aWNoIGNhbiBjb25uZWN0DQp0byB0aGUgc2VydmVyIHRvIGRvIHdoYXRldmVyIHRoZXkgd2FudC4N Cg0KSW4gb3RoZXIgd29yZHMsIHRoaXMgaXMgbm90IGEgcmVkdWN0aW9uIG9mIHRoZSBhY3R1YWwg c2VjdXJpdHkgZnJvbSBORlN2NC54Lg0KDQpUaGFua3MgZm9yIHRoZSBleHRlbnNpdmUgZXhwbGFu YXRpb24uIEl0IHJlc29sdmVzIHRoZSBpc3N1ZSB0aGF0IEkgcGVyY2VpdmVkLg0KDQpUaGFua3Ms DQpCcmlhbg0KDQoNCg0KDQpVbmxlc3MgSeKAmW0gbWlzdGFrZW4sIHRoaXMgaXMgYSBzZXJpb3Vz IHJlZHVjdGlvbiBvZiBhY3R1YWwgc2VjdXJpdHkgZnJvbSBORlMNCjQueCwgYW5kIGFsc28gZnJv bSB0aGUgdGlnaHQgY291cGxpbmcgbW9kZWwuIFRoaXMgc2hvdWxkIGJlIGNsZWFybHkgc3RhdGVk IGluDQp0aGUgc2VjdXJpdHkgY29uc2lkZXJhdGlvbnMgc2VjdGlvbiwgc28gdGhhdCBwcm90b2Nv bCBhZG9wdGVycyBhbmQgdXNlcnMNCnVuZGVyc3RhbmQgdGhlIGFkZGl0aW9uYWwgcmlza3Mgb2Yg dGhlIGxvb3NlIGNvdXBsaW5nIG1vZGVsLiBGb3IgdGhpcyAgcmVhc29uLA0KSSd2ZSBtYXJrZWQg dGhlIHJldmlldyB3aXRoICJIYXMgSXNzdWVzIiByYXRoZXIgdGhhbiAiSGFzIE5pdHMiLg0KDQpf X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KbmZzdjQgbWFp bGluZyBsaXN0DQpuZnN2NEBpZXRmLm9yZzxtYWlsdG86bmZzdjRAaWV0Zi5vcmc+DQpodHRwczov L3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL25mc3Y0DQoNCi0tDQpCcmlhbiBXZWlzDQpT ZWN1cml0eSwgQ1NHLCBDaXNjbyBTeXN0ZW1zDQpUZWxlcGhvbmU6ICsxIDQwOCA1MjYgNDc5Ng0K RW1haWw6IGJld0BjaXNjby5jb208bWFpbHRvOmJld0BjaXNjby5jb20+DQoNCg== --_000_599605AF7CB34A56A26A3DE56B805309primarydatacom_ Content-Type: text/html; charset=UTF-8 Content-ID: <07DA438C2AE7DC4A9796AEF913CA518B@namprd11.prod.outlook.com> Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgbGluZS1icmVhazogYWZ0 ZXItd2hpdGUtc3BhY2U7IiBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCjxkaXY+PGJyIGNsYXNz PSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPk9u IEphbiAxMiwgMjAxOCwgYXQgMzo1NCBQTSwgQnJpYW4gV2VpcyAoYmV3KSAmbHQ7PGEgaHJlZj0i bWFpbHRvOmJld0BjaXNjby5jb20iIGNsYXNzPSIiPmJld0BjaXNjby5jb208L2E+Jmd0OyB3cm90 ZTo8L2Rpdj4NCjxiciBjbGFzcz0iQXBwbGUtaW50ZXJjaGFuZ2UtbmV3bGluZSI+DQo8ZGl2IGNs YXNzPSIiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEy cHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13 ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7 IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9y bWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBm bG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7IiBjbGFzcz0iIj5IaQ0KIFRo b21hcyw8L3NwYW4+DQo8ZGl2IGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNh OyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6 IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4 dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3 aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9r ZS13aWR0aDogMHB4OyI+DQo8YnIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPg0KPGJsb2NrcXVv dGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPk9uIEphbiAxMiwgMjAxOCwg YXQgMTE6NDEgQU0sIFRob21hcyBIYXluZXMgJmx0OzxhIGhyZWY9Im1haWx0bzpsb2doeXJAcHJp bWFyeWRhdGEuY29tIiBjbGFzcz0iIj5sb2doeXJAcHJpbWFyeWRhdGEuY29tPC9hPiZndDsgd3Jv dGU6PC9kaXY+DQo8YnIgY2xhc3M9IkFwcGxlLWludGVyY2hhbmdlLW5ld2xpbmUiPg0KPGRpdiBj bGFzcz0iIj48c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9u dC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3Jt YWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxp Z246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUt c3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lk dGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyI+SGkNCiBC cmlhbiw8L3NwYW4+PGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBm b250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5v cm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1h bGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0 ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13 aWR0aDogMHB4OyI+DQo8YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7 IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczog bm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0 LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdo aXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tl LXdpZHRoOiAwcHg7Ij4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0 aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNh cHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsg dGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25l OyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0 cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7 Ij5UaGFua3MNCiBmb3IgdGhlIHJldmlldyAtIGNvbW1lbnRzIGlubGluZS4uPC9zcGFuPjxiciBj bGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBm b250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0 OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0 LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsg d29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPGJy IGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7 IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWln aHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRl eHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFs OyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8 YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZl dGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1j YXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7 IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9u ZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1z dHJva2Utd2lkdGg6IDBweDsiPg0KT24gSmFuIDEyLCAyMDE4LCBhdCAxMDo0NSBBTSwgQnJpYW4g V2VpcyAmbHQ7PGEgaHJlZj0ibWFpbHRvOmJld0BjaXNjby5jb20iIGNsYXNzPSIiPmJld0BjaXNj by5jb208L2E+Jmd0OyB3cm90ZTo8YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQpSZXZpZXdl cjogQnJpYW4gV2VpczxiciBjbGFzcz0iIj4NClJldmlldyByZXN1bHQ6IEhhcyBJc3N1ZXM8YnIg Y2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQpJIGhhdmUgcmV2aWV3ZWQgdGhpcyBkb2N1bWVudCBh cyBwYXJ0IG9mIHRoZSBzZWN1cml0eSBkaXJlY3RvcmF0ZSdzIG9uZ29pbmc8YnIgY2xhc3M9IiI+ DQplZmZvcnQgdG8gcmV2aWV3IGFsbCBJRVRGIGRvY3VtZW50cyBiZWluZyBwcm9jZXNzZWQgYnkg dGhlIElFU0cuIFRoZXNlIGNvbW1lbnRzPGJyIGNsYXNzPSIiPg0Kd2VyZSB3cml0dGVuIHByaW1h cmlseSBmb3IgdGhlIGJlbmVmaXQgb2YgdGhlIHNlY3VyaXR5IGFyZWEgZGlyZWN0b3JzLiBEb2N1 bWVudDxiciBjbGFzcz0iIj4NCmVkaXRvcnMgYW5kIFdHIGNoYWlycyBzaG91bGQgdHJlYXQgdGhl c2UgY29tbWVudHMganVzdCBsaWtlIGFueSBvdGhlciBsYXN0IGNhbGw8YnIgY2xhc3M9IiI+DQpj b21tZW50cy48YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQpUaGlzIGRvY3VtZW50IGRlZmlu ZXMgdGhlIFBhcmFsbGVsIE5ldHdvcmsgRmlsZSBTeXN0ZW0gKHBORlMpLCB3aGljaCBhbGxvd3Mg YTxiciBjbGFzcz0iIj4NCnN0b3JhZ2Ugc3lzdGVtIHRvIHN0b3JlIHRoZSBtZXRhZGF0YSBmb3Ig ZmlsZXMgb250byBhIG1ldGFkYXRhIHNlcnZlciwgYW5kIGRhdGE8YnIgY2xhc3M9IiI+DQpvZiB0 aGF0IGZpbGUgb250byBhIHNlcGFyYXRlIHN0b3JhZ2UgZGV2aWNlLiBUaGUgZG9jdW1lbnQgZm9j dXNlcyBvbiB0aGU8YnIgY2xhc3M9IiI+DQppbnRlcmFjdGlvbiBiZXR3ZWVuIHRoZSB0d28gdHlw ZXMgb2Ygc2VydmVycywgYW5kIHRoZSByZXF1aXJlbWVudHMgb2YgY2xpZW50czxiciBjbGFzcz0i Ij4NCnVzaW5nIGEgcE5GUyBzeXN0ZW0uPGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KVGhl IGRvY3VtZW50IGRlc2NyaWJlcyB0d28gbW9kZWxzIGJ5IHdoaWNoIHRoZSBtZXRhZGF0YSBzZXJ2 ZXIgYW5kIGZpbGUgc3RvcmFnZTxiciBjbGFzcz0iIj4NCnNlcnZlciBjYW4gY29tbXVuaWNhdGUu IE9uZSBpcyBhIOKAnHRpZ2h0IGNvdXBsaW5nIG1vZGVs4oCdLCBpbiB3aGljaCB0aGUgdHdvIHR5 cGVzPGJyIGNsYXNzPSIiPg0Kb2Ygc2VydmVycyBkaXJlY3RseSBjb21tdW5pY2F0ZS4gSW4gdGhp cyBtb2RlbCB0aGUgbWV0YWRhdGEgc2VydmVyIGNhbiBlbnN1cmU8YnIgY2xhc3M9IiI+DQp0aGF0 IGZpbGUgYWNjZXNzIGNvbnRyb2wgc3RhdGUgaXMgc3luY2hyb25pemVkIGJldHdlZW4gdGhlIHR3 byBzZXJ2ZXJzLCBhbmQgSTxiciBjbGFzcz0iIj4NCmJlbGlldmUgdGhhdCBsZXZlbCBvZiBhY2Nl c3MgY29udHJvbCBpcyBlcXVpdmFsZW50IHRvIE5GUyB2NC54IHRvZGF5LiBGcm9tIGE8YnIgY2xh c3M9IiI+DQpzZWN1cml0eSBjb25zaWRlcmF0aW9ucyBwZXJzcGVjdGl2ZSwgdGhpcyBpcyBwZXJo YXBzIGJlc3Qgc3VtbWFyaXplZCBpbiBTZWN0aW9uPGJyIGNsYXNzPSIiPg0KMi4yOjxiciBjbGFz cz0iIj4NCjxiciBjbGFzcz0iIj4NCuKAnFdpdGggdGlnaHRseSBjb3VwbGVkIHN0b3JhZ2UgZGV2 aWNlcywgdGhlIG1ldGFkYXRhIHNlcnZlciBzZXRzIHRoZTxiciBjbGFzcz0iIj4NCiZuYnNwO3Vz ZXIgYW5kIGdyb3VwIG93bmVycywgbW9kZSBiaXRzLCBhbmQgQUNMIG9mIHRoZSBkYXRhIGZpbGUg dG8gYmUgdGhlPGJyIGNsYXNzPSIiPg0KJm5ic3A7c2FtZSBhcyB0aGUgbWV0YWRhdGEgZmlsZS4g Jm5ic3A7QW5kIHRoZSBjbGllbnQgbXVzdCBhdXRoZW50aWNhdGUgd2l0aCB0aGU8YnIgY2xhc3M9 IiI+DQombmJzcDtzdG9yYWdlIGRldmljZSBhbmQgZ28gdGhyb3VnaCB0aGUgc2FtZSBhdXRob3Jp emF0aW9uIHByb2Nlc3MgaXQgd291bGQ8YnIgY2xhc3M9IiI+DQombmJzcDtnbyB0aHJvdWdoIHZp YSB0aGUgbWV0YWRhdGEgc2VydmVyLuKAnTxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NClRo ZSBvdGhlciBtb2RlbCBpcyBhIOKAnGxvb3NlIGNvdXBsaW5nIG1vZGVs4oCdLCBpbiB3aGljaCB0 aGUgY2xpZW50IGlzPGJyIGNsYXNzPSIiPg0KYXV0aGVudGljYXRlZCBhbmQgYXV0aG9yaXplZCBi eSB0aGUgbWV0YWRhdGEgc2VydmVyLCBhbmQgaXMgZ2l2ZW4gYWNjZXNzIHRvIHRoZTxiciBjbGFz cz0iIj4NCmZpbGUgc2VydmVyIHRocm91Z2ggdGhlIHVzZSBjcmVkZW50aWFscy4gSG93ZXZlciwg dGhlcmUgaXMgbm8gZGlyZWN0PGJyIGNsYXNzPSIiPg0KY29tbXVuaWNhdGlvbnMgYmV0d2VlbiB0 aGUgbWV0YWRhdGEgc2VydmVyIGFuZCB0aGUgZmlsZSBzZXJ2ZXIuIFRoZSBtZXRhZGF0YTxiciBj bGFzcz0iIj4NCnNlcnZlciBkb2VzIG5vdCBzZWVtIHRvIHByb3ZpZGUgYSBmaW5lIGdyYWluZWQg YWNjZXNzIGNvbnRyb2wgdG8gZmlsZXMgb24gdGhlPGJyIGNsYXNzPSIiPg0KZmlsZSBzZXJ2ZXIs IGJ1dCBpbnN0ZWFkIHJlbGllcyB1cG9uIHRoZSBjbGllbnQgdG8gZW5mb3JjZSBhIGxlc3MgZ3Jh bnVsYXI8YnIgY2xhc3M9IiI+DQpsZXZlbCBvZiBhY2Nlc3MgY29udHJvbC48YnIgY2xhc3M9IiI+ DQo8L2Jsb2NrcXVvdGU+DQo8YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRp Y2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fw czogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0 ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7 IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ry b2tlLXdpZHRoOiAwcHg7Ij4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVs dmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50 LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1h bDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBu b25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0 LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRh bnQ7Ij5bMV0NCiBObywgdGhlcmUgaXMgc3RpbGwgZGlyZWN0IGNvbW11bmljYXRpb24gYmV0d2Vl biB0aGUgbWV0YWRhdGEgc2VydmVyIGFuZCB0aGUgZmlsZSBzZXJ2ZXIuPC9zcGFuPjxiciBjbGFz cz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250 LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBu b3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWlu ZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29y ZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPGJyIGNs YXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZv bnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6 IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQt aW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3 b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8c3Bh biBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4 OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2Vp Z2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0 ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1h bDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxv YXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyI+VGhlDQogZGlmZmVyZW5jZSBp cyB0aGF0IGl0IGlzIHZpYSBhIHN0b3JhZ2UgcHJvdG9jb2wsIGluIHRoaXMgY2FzZSBORlMuPC9z cGFuPjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9 IiI+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZl dGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1j YXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7 IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9u ZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1z dHJva2Utd2lkdGg6IDBweDsiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBI ZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlh bnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9y bWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06 IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRl eHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9y dGFudDsiPlRoZQ0KIGFjY2VzcyBjb250cm9sIGlzIGVuZm9yY2VkIGJ5IHRoZSBtZXRhZGF0YSBz ZXJ2ZXIuIFRoZSBjbGllbnQgb25seSBnZXQgYWNjZXNzPC9zcGFuPjxiciBjbGFzcz0iIiBzdHls ZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBu b3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxl dHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4 OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5n OiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPHNwYW4gY2xhc3M9IiIg c3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHls ZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFs OyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6 IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3Bh Y2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBk aXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiPnRvDQogdGhlIGZpbGUgaWYgaXQgY2FuIGdldCBh IGxheW91dC4gVGhlIGxheW91dCBjYW4gZWl0aGVyIHByb3ZpZGUgcmVhZC93cml0ZSBhY2Nlc3M8 L3NwYW4+PGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNp emU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsg Zm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjog c3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFj ZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDog MHB4OyI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9u dC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3Jt YWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxp Z246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUt c3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lk dGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyI+b3INCiBv bmx5IHJlYWQgYWNjZXNzLjwvc3Bhbj48YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBI ZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlh bnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9y bWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06 IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRl eHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6 IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFy aWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBu b3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9y bTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQt dGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFt aWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250 LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2lu Zzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFu c2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Vi a2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUg IWltcG9ydGFudDsiPlRoZQ0KIG1ldGFkYXRhIHNlcnZlciBjYW4gcmV2b2tlIHRoYXQgYWNjZXNz IGF0IGFueSBwb2ludCwgc28gaXQgaXMgbm90PC9zcGFuPjxiciBjbGFzcz0iIiBzdHlsZT0iZm9u dC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7 IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1z cGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0 LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7 IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9 ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9y bWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0 ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsg dGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzog MHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5 OiBpbmxpbmUgIWltcG9ydGFudDsiPmNvcnJlY3QNCiB0byBzYXkgdGhhdCBpdCBkZXBlbmRzIG9u IHRoZSBjbGllbnQgdG8gZW5mb3JjZSBhIGxlc3MgZ3JhbnVsYXIgbGV2ZWw8L3NwYW4+PGJyIGNs YXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZv bnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6 IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQt aW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3 b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8c3Bh biBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4 OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2Vp Z2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0 ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1h bDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxv YXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyI+b2YNCiBhY2Nlc3MgY29udHJv bC48L3NwYW4+PGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250 LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1h bDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGln bjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1z cGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0 aDogMHB4OyI+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNz PSIiPg0KPC9kaXY+DQpUaGFua3MgZm9yIHRoZSBjbGFyaWZpY2F0aW9uLiBUbyBhIG5vbi1ORlMg ZXhwZXJ0IHRoZSByZWxhdGlvbnNoaXAgYmV0d2VlbiBsYXlvdXRzIGFuZCZuYnNwOzwvZGl2Pg0K PGRpdiBjbGFzcz0iIj5hY2Nlc3MgY29udHJvbCAmbmJzcDt3YXNu4oCZdCBvYnZpb3VzLiBJIHdv bmRlciBpZiB0aGlzIGRpc2N1c3Npb24gY291bGQgYmUgYWRkZWQgdG8gU2VjdXJpdHk8L2Rpdj4N CjxkaXYgY2xhc3M9IiI+Q29uc2lkZXJhdGlvbnM/PC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9i bG9ja3F1b3RlPg0KPGRpdj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXY+PGJyIGNsYXNzPSIi Pg0KPC9kaXY+DQo8ZGl2PkhpIEJyaWFuLDwvZGl2Pg0KPGRpdj48YnIgY2xhc3M9IiI+DQo8L2Rp dj4NCjxkaXY+SeKAmXZlIGFscmVhZHkgZ290IHRoYXQgKGFuZCB5ZXMsIEkgdW5kZXJzdGFuZCBp dCBpcyBub3Qgc3VmZmljaWVudCBpZiBJIGhhdmUgdG8gc3BlbGwgaXQgb3V0IDotKTo8L2Rpdj4N CjxkaXY+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4xNS4gJm5ic3A7U2VjdXJp dHkgQ29uc2lkZXJhdGlvbnM8L2Rpdj4NCjxkaXY+Li4uPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0K PGRpdiBjbGFzcz0iIj4mbmJzcDsgJm5ic3A7VGhlIG1ldGFkYXRhIHNlcnZlciBpcyBwcmltYXJp bHkgcmVzcG9uc2libGUgZm9yIHNlY3VyaW5nIHRoZSBkYXRhPC9kaXY+DQo8ZGl2IGNsYXNzPSIi PiZuYnNwOyAmbmJzcDtwYXRoLiAmbmJzcDtJdCBoYXMgdG8gYXV0aGVudGljYXRlIHRoZSBjbGll bnQgYWNjZXNzIGFuZCBwcm92aWRlPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPiZuYnNwOyAmbmJzcDth cHByb3ByaWF0ZSBjcmVkZW50aWFscyB0byB0aGUgY2xpZW50IHRvIGFjY2VzcyBkYXRhIGZpbGVz IG9uIHRoZTwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4mbmJzcDsgJm5ic3A7c3RvcmFnZSBkZXZpY2Uu ICZuYnNwO0ZpbmFsbHksIGl0IGlzIHJlc3BvbnNpYmxlIGZvciByZXZva2luZyBhY2Nlc3MgZm9y IGE8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+Jm5ic3A7ICZuYnNwO2NsaWVudCB0byB0aGUgc3RvcmFn ZSBkZXZpY2UuPC9kaXY+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9k aXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2PiZuYnNwOyAmbmJzcDtUaGUgbWV0YWRhdGEgc2VydmVy IGVuZm9yY2VzIHRoZSBmaWxlIGFjY2Vzcy1jb250cm9sIHBvbGljeSBhdDwvZGl2Pg0KPGRpdj4m bmJzcDsgJm5ic3A7TEFZT1VUR0VUIHRpbWUuICZuYnNwO1RoZSBjbGllbnQgc2hvdWxkIHVzZSBS UEMgYXV0aG9yaXphdGlvbiBjcmVkZW50aWFsczwvZGl2Pg0KPGRpdj4mbmJzcDsgJm5ic3A7Zm9y IGdldHRpbmcgdGhlIGxheW91dCBmb3IgdGhlIHJlcXVlc3RlZCBpb21vZGUgKFJFQUQgb3IgUlcp IGFuZCB0aGU8L2Rpdj4NCjxkaXY+Jm5ic3A7ICZuYnNwO3NlcnZlciB2ZXJpZmllcyB0aGUgcGVy bWlzc2lvbnMgYW5kIEFDTCBmb3IgdGhlc2UgY3JlZGVudGlhbHMsPC9kaXY+DQo8ZGl2PiZuYnNw OyAmbmJzcDtwb3NzaWJseSByZXR1cm5pbmcgTkZTNEVSUl9BQ0NFU1MgaWYgdGhlIGNsaWVudCBp cyBub3QgYWxsb3dlZCB0aGU8L2Rpdj4NCjxkaXY+Jm5ic3A7ICZuYnNwO3JlcXVlc3RlZCBpb21v ZGUuICZuYnNwO0lmIHRoZSBMQVlPVVRHRVQgb3BlcmF0aW9uIHN1Y2NlZWRzIHRoZSBjbGllbnQ8 L2Rpdj4NCjxkaXY+Jm5ic3A7ICZuYnNwO3JlY2VpdmVzLCBhcyBwYXJ0IG9mIHRoZSBsYXlvdXQs IGEgc2V0IG9mIGNyZWRlbnRpYWxzIGFsbG93aW5nIGl0IEkvTzwvZGl2Pg0KPGRpdj4mbmJzcDsg Jm5ic3A7YWNjZXNzIHRvIHRoZSBzcGVjaWZpZWQgZGF0YSBmaWxlcyBjb3JyZXNwb25kaW5nIHRv IHRoZSByZXF1ZXN0ZWQ8L2Rpdj4NCjxkaXY+Jm5ic3A7ICZuYnNwO2lvbW9kZS4gJm5ic3A7V2hl biB0aGUgY2xpZW50IGFjdHMgb24gSS9PIG9wZXJhdGlvbnMgb24gYmVoYWxmIG9mIGl0czwvZGl2 Pg0KPGRpdj4mbmJzcDsgJm5ic3A7bG9jYWwgdXNlcnMsIGl0IE1VU1QgYXV0aGVudGljYXRlIGFu ZCBhdXRob3JpemUgdGhlIHVzZXIgYnkgaXNzdWluZzwvZGl2Pg0KPGRpdj4mbmJzcDsgJm5ic3A7 cmVzcGVjdGl2ZSBPUEVOIGFuZCBBQ0NFU1MgY2FsbHMgdG8gdGhlIG1ldGFkYXRhIHNlcnZlciwg c2ltaWxhciB0bzwvZGl2Pg0KPGRpdj4mbmJzcDsgJm5ic3A7aGF2aW5nIE5GU3Y0IGRhdGEgZGVs ZWdhdGlvbnMuPC9kaXY+DQo8ZGl2PjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdj4mbmJzcDsg Jm5ic3A7SWYgYWNjZXNzIGlzIGFsbG93ZWQsIHRoZSBjbGllbnQgdXNlcyB0aGUgY29ycmVzcG9u ZGluZyAoUkVBRCBvciBSVyk8L2Rpdj4NCjxkaXY+Jm5ic3A7ICZuYnNwO2NyZWRlbnRpYWxzIHRv IHBlcmZvcm0gdGhlIEkvTyBvcGVyYXRpb25zIGF0IHRoZSBkYXRhIGZpbGUncyBzdG9yYWdlPC9k aXY+DQo8ZGl2PiZuYnNwOyAmbmJzcDtkZXZpY2VzLiAmbmJzcDtXaGVuIHRoZSBtZXRhZGF0YSBz ZXJ2ZXIgcmVjZWl2ZXMgYSByZXF1ZXN0IHRvIGNoYW5nZSBhPC9kaXY+DQo8ZGl2PiZuYnNwOyAm bmJzcDtmaWxlJ3MgcGVybWlzc2lvbnMgb3IgQUNMLCBpdCBTSE9VTEQgcmVjYWxsIGFsbCBsYXlv dXRzIGZvciB0aGF0IGZpbGU8L2Rpdj4NCjxkaXY+Jm5ic3A7ICZuYnNwO2FuZCB0aGVuIE1VU1Qg ZmVuY2Ugb2ZmIGFueSBjbGllbnRzIHN0aWxsIGhvbGRpbmcgb3V0c3RhbmRpbmcgbGF5b3V0czwv ZGl2Pg0KPGRpdj4mbmJzcDsgJm5ic3A7Zm9yIHRoZSByZXNwZWN0aXZlIGZpbGVzIGJ5IGltcGxp Y2l0bHkgaW52YWxpZGF0aW5nIHRoZSBwcmV2aW91c2x5PC9kaXY+DQo8ZGl2PiZuYnNwOyAmbmJz cDtkaXN0cmlidXRlZCBjcmVkZW50aWFsIG9uIGFsbCBkYXRhIGZpbGUgY29tcHJpc2luZyB0aGUg ZmlsZSBpbjwvZGl2Pg0KPGRpdj4mbmJzcDsgJm5ic3A7cXVlc3Rpb24uICZuYnNwO0l0IGlzIFJF UVVJUkVEIHRoYXQgdGhpcyBiZSBkb25lIGJlZm9yZSBjb21taXR0aW5nIHRvIHRoZTwvZGl2Pg0K PGRpdj4mbmJzcDsgJm5ic3A7bmV3IHBlcm1pc3Npb25zIGFuZC9vciBBQ0wuICZuYnNwO0J5IHJl cXVlc3RpbmcgbmV3IGxheW91dHMsIHRoZSBjbGllbnRzPC9kaXY+DQo8ZGl2PiZuYnNwOyAmbmJz cDt3aWxsIHJlYXV0aG9yaXplIGFjY2VzcyBhZ2FpbnN0IHRoZSBtb2RpZmllZCBhY2Nlc3MgY29u dHJvbCBtZXRhZGF0YS48L2Rpdj4NCjxkaXY+Jm5ic3A7ICZuYnNwO1JlY2FsbGluZyB0aGUgbGF5 b3V0cyBpbiB0aGlzIGNhc2UgaXMgaW50ZW5kZWQgdG8gcHJldmVudCBjbGllbnRzPC9kaXY+DQo8 ZGl2PiZuYnNwOyAmbmJzcDtmcm9tIGdldHRpbmcgYW4gZXJyb3Igb24gSS9PcyBkb25lIGFmdGVy IHRoZSBjbGllbnQgd2FzIGZlbmNlZCBvZmYuPC9kaXY+DQo8L2Rpdj4NCjxkaXY+PGJyIGNsYXNz PSIiPg0KPC9kaXY+DQo8ZGl2PkhvdyBhYm91dDo8L2Rpdj4NCjxkaXY+PGJyIGNsYXNzPSIiPg0K PC9kaXY+DQo8ZGl2Pg0KPGRpdj4mbmJzcDsgJm5ic3A7SWYgYWNjZXNzIGlzIGFsbG93ZWQsIHRo ZSBjbGllbnQgdXNlcyB0aGUgY29ycmVzcG9uZGluZyAoUkVBRCBvciBSVyk8L2Rpdj4NCjxkaXY+ Jm5ic3A7ICZuYnNwO2NyZWRlbnRpYWxzIHRvIHBlcmZvcm0gdGhlIEkvTyBvcGVyYXRpb25zIGF0 IHRoZSBkYXRhIGZpbGUncyBzdG9yYWdlPC9kaXY+DQo8ZGl2PiZuYnNwOyAmbmJzcDtkZXZpY2Vz LiDigKY8L2Rpdj4NCjxkaXY+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2PmJlY29tZXM8L2Rp dj4NCjxkaXY+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2PiZuYnNwOyBUaGUgY29tYmluYXRp b24gb2YgZmlsZSBoYW5kbGUsIHN5bnRoZXRpYyB1aWQsIGFuZCBnaWQgaW4gdGhlIGxheW91dDwv ZGl2Pg0KPGRpdj4mbmJzcDsgYXJlIHRoZSB3YXkgdGhhdCB0aGUgbWV0YWRhdGEgc2VydmVyIGVu Zm9yY2VzIGFjY2VzcyBjb250cm9sIHRvIHRoZTwvZGl2Pg0KPGRpdj4mbmJzcDsgZGF0YSBzZXJ2 ZXIuIFRoZSBkaXJlY3RvcnkgbmFtZXNwYWNlIG9uIHRoZSBzdG9yYWdlIGRldmljZSBTSE9VTEQ8 L2Rpdj4NCjxkaXY+Jm5ic3A7IG9ubHkgYmUgYWNjZXNzaWJsZSB0byB0aGUgbWV0YWRhdGEgc2Vy dmVyIGFuZCBub3QgdGhlIGNsaWVudHMuIEluIHRoYXQgY2FzZSwmbmJzcDs8L2Rpdj4NCjxkaXY+ Jm5ic3A7IHRoZSBjbGllbnQgb25seSBoYXMgYWNjZXNzIHRvIGZpbGUgaGFuZGxlcyBvZiBmaWxl IG9iamVjdHMgYW5kIG5vdDwvZGl2Pg0KPGRpdj4mbmJzcDsgZGlyZWN0b3J5IG9iamVjdHMuIFRo dXMsIGdpdmVuIGEgZmlsZSBoYW5kbGUgaW4gYSBsYXlvdXQsIGl0IGlzIG5vdDwvZGl2Pg0KPGRp dj4mbmJzcDsgcG9zc2libGUgdG8gZ3Vlc3MgdGhlIHBhcmVudCBkaXJlY3RvcnkgZmlsZSBoYW5k bGUuIEZ1cnRoZXIsIGFzIHRoZTwvZGl2Pg0KPGRpdj4mbmJzcDsgZGF0YSBmaWxlIHBlcm1pc3Np b25zIG9ubHkgYWxsb3cgdGhlIGdpdmVuIHN5bnRoZXRpYyB1aWQgcmVhZC93cml0ZTwvZGl2Pg0K PGRpdj4mbmJzcDsgcGVybWlzc2lvbiBhbmQgdGhlIGdpdmVuIHN5bnRoZXRpYyBnaWQgcmVhZCBw ZXJtaXNzaW9uLCBrbm93aW5nPC9kaXY+DQo8ZGl2PiZuYnNwOyB0aGUgc3ludGhldGljIGlkcyBv ZiBvbmUgZmlsZSBkb2VzIG5vdCBuZWNlc3NhcmlseSBhbGxvdyBhY2Nlc3MgdG8gYW55PC9kaXY+ DQo8ZGl2PiZuYnNwOyBvdGhlciBkYXRhIGZpbGUgb24gdGhlIHN0b3JhZ2UgZGV2aWNlLjwvZGl2 Pg0KPGRpdj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXY+Jm5ic3A7IFRoZSBtZXRhZGF0YSBz ZXJ2ZXIgY2FuIGFsc28gZGVueSBhY2Nlc3MgYXQgYW55IHRpbWUgYnkgZmVuY2luZzwvZGl2Pg0K PGRpdj4mbmJzcDsgdGhlIGRhdGEgZmlsZSwgd2hpY2ggbWVhbnMgY2hhbmdpbmcgdGhlIHN5bnRo ZXRpYyBpZHMuIEluIHR1cm4sIHRoYXQ8L2Rpdj4NCjxkaXY+Jm5ic3A7IGZvcmNlcyB0aGUgY2xp ZW50IHRvIHJldHVybiBpdHMgY3VycmVudCBsYXlvdXQgYW5kIGdldCBhIG5ldyBsYXlvdXQgaWY8 L2Rpdj4NCjxkaXY+Jm5ic3A7IGl0IHdhbnRzIHRvIGNvbnRpbnVlIElPIHRvIHRoZSBkYXRhIGZp bGUuPC9kaXY+DQo8ZGl2PjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdj4mbmJzcDsgSWYgdGhl IGNvbmZpZ3VyYXRpb24gb2YgdGhlIHN0b3JhZ2UgZGV2aWNlIGlzIHN1Y2ggdGhhdCBjbGllbnRz PC9kaXY+DQo8ZGl2PiZuYnNwOyBjYW4gYWNjZXNzIHRoZSBkaXJlY3RvcnkgbmFtZXNwYWNlLCB0 aGVuIHRoZSBhY2Nlc3MgY29udHJvbDwvZGl2Pg0KPGRpdj4mbmJzcDsgZGVncmFkZXMgdG8gdGhh dCBvZiBhIHR5cGljYWwgTkZTIHNlcnZlciB3aXRoIGV4cG9ydHMgd2l0aCBhPC9kaXY+DQo8ZGl2 PiZuYnNwOyBzZWN1cml0eSBmbGF2b3Igb2YgQVVUSF9TWVMuICZuYnNwO0FueSBjbGllbnQgd2hp Y2ggaXMgYWxsb3dlZDwvZGl2Pg0KPGRpdj4mbmJzcDsgYWNjZXNzIGNhbiBmb3JnZSBjcmVkZW50 aWFscyB0byBhY2Nlc3MgYW55IGRhdGEgZmlsZS4gVGhlPC9kaXY+DQo8ZGl2PiZuYnNwOyBjYXZl YXQgaXMgdGhhdCB0aGUgcm9ndWUgY2xpZW50IG1pZ2h0IGhhdmUgbm8ga25vd2xlZGdlIG9mPC9k aXY+DQo8ZGl2PiZuYnNwOyB0aGUgZGF0YSBmaWxl4oCZcyB0eXBlIG9yIHBvc2l0aW9uIGluIHRo ZSBtZXRhZGF0YSBkaXJlY3Rvcnk8L2Rpdj4NCjxkaXY+Jm5ic3A7IG5hbWVzcGFjZS48L2Rpdj4N CjxkaXY+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4mbmJzcDsgJm5ic3A7SWYg YWNjZXNzIGlzIGFsbG93ZWQsIHRoZSBjbGllbnQgdXNlcyB0aGUgY29ycmVzcG9uZGluZyAoUkVB RCBvciBSVyk8L2Rpdj4NCjxkaXY+Jm5ic3A7ICZuYnNwO2NyZWRlbnRpYWxzIHRvIHBlcmZvcm0g dGhlIEkvTyBvcGVyYXRpb25zIGF0IHRoZSBkYXRhIGZpbGUncyBzdG9yYWdlPC9kaXY+DQo8ZGl2 PiZuYnNwOyAmbmJzcDtkZXZpY2VzLiDigKY8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNz PSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPk9yIGRvIHlvdSB3YW50IG1lIHRvIHB1bGwgdGhh dCBuZXcgdGV4dCBpbnRvIGEgbmV3IHN1YnNlY3Rpb24gMTUuMSBhbmQ8L2Rpdj4NCjxkaXYgY2xh c3M9IiI+c2xhbSB0aGUgb3RoZXIgc3Vic2VjdGlvbnMgZG93bj88L2Rpdj4NCjwvZGl2Pg0KPC9k aXY+DQo8ZGl2PjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdj48YnIgY2xhc3M9IiI+DQo8L2Rp dj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj4NCjxk aXYgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJw eDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdl aWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsg dGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3Jt YWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4N CjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xh c3M9IiI+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhl bHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFu dC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3Jt YWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTog bm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4 dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiIg c3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHls ZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFs OyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6 IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3Bh Y2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxiciBjbGFzcz0i Ij4NClRoZSBTZWN1cml0eSBDb25zaWRlcmF0aW9ucyBzZWN0aW9uIGlzIHdlbGwtd3JpdHRlbiBh bmQgaGVscGZ1bC4gSSBkbyBoYXZlIHNvbWU8YnIgY2xhc3M9IiI+DQpzdWdnZXN0aW9ucyBmb3Ig aW1wcm92aW5nIGl0LCAmbmJzcDthbmQgYWxzbyBzb21lIHF1ZXN0aW9ucy48YnIgY2xhc3M9IiI+ DQo8YnIgY2xhc3M9IiI+DQooMSkgU2VjdGlvbiAyLjI6IHNob3VsZCB0aGUg4oCccmVjb21tZW5k ZWTigJ0gaW4gdGhlIE5vdGUgYmUgUkVDT01NRU5ERUQ/PGJyIGNsYXNzPSIiPg0KUmVzdHJpY3Rp bmcgYWNjZXNzIGNvbnRyb2wgdG8ganVzdCBzdXBlcnVzZXIgaGF2ZSBhY2Nlc3MgdG8gdGhlIHN0 b3JhZ2UgZGV2aWNlPGJyIGNsYXNzPSIiPg0Kc2VlbXMgbGlrZSBhIHZhbHVhYmxlIGFkdmljZS48 YnIgY2xhc3M9IiI+DQo8L2Jsb2NrcXVvdGU+DQo8YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFt aWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250 LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2lu Zzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFu c2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Vi a2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250 LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsg Zm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNw YWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQt dHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsg LXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5s aW5lICFpbXBvcnRhbnQ7Ij5zdXJlPC9zcGFuPjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1p bHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQt dmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5n OiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5z Zm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJr aXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZh bWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9u dC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNp bmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJh bnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdl YmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBj bGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBm b250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0 OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0 LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsg d29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPGJy IGNsYXNzPSIiPg0KKDIpIFNlY3Rpb24gMi4yOiBUaGUgTk9URSBwcm9iYWJseSBzaG91bGQgcHJv dmlkZSBndWlkYW5jZSByZWdhcmRpbmcgcHJvdGVjdGluZzxiciBjbGFzcz0iIj4NCnRoZSBuZXR3 b3JrIGNvbm5lY3Rpb25zIGJldHdlZW4gdGhlIG1ldGFkYXRhIHNlcnZlciBhbmQgdGhlIGZpbGUg c2VydmVyLiBGb3I8YnIgY2xhc3M9IiI+DQpleGFtcGxlLCBzb21ldGhpbmcgbGlrZTog4oCcQ29t bXVuaWNhdGlvbnMgYmV0d2VlbiB0aGUgbWV0YWRhdGEgc2VydmVyIGFuZCBmaWxlPGJyIGNsYXNz PSIiPg0Kc2VydmVyIG5lZWQgdG8gc2VjdXJlZC4gSWYgdGhlcmUgaXMgbm90IGFkZXF1YXRlIHBo eXNpY2FsIHNlY3VyaXR5IChpLmUuLCB0aGU8YnIgY2xhc3M9IiI+DQpzZXJ2ZXJzIGFyZSBub3Qg Y28tbG9jYXRlZCBpbiBhIHBoeXNpY2FsbHkgc2VjdXJlIGFyZWEpLCB0aGVpciBjb21tdW5pY2F0 aW9uczxiciBjbGFzcz0iIj4NCk1VU1QgYmUgcHJvdGVjdGVkIGZvciBjb25maWRlbnRpYWxpdHkg KGUuZy4sIHVzaW5nIFRMUyBvciBJUHNlYyku4oCdPGJyIGNsYXNzPSIiPg0KPC9ibG9ja3F1b3Rl Pg0KPGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6 IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9u dC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3Rh cnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTog bm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4 OyI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1z aXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7 IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246 IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3Bh Y2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6 IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyI+Tm8sDQogdGhl IE1VU1QgaXMgdG9vIHN0cm9uZyBoZXJlLiBXZSBjYW4gcmVjb21tZW5kIHByb2NlZHVyZXMsIHdl IGNhbiBub3QgUkVRVUlSRSB0aGVtLjwvc3Bhbj48YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFt aWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250 LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2lu Zzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFu c2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Vi a2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1m YW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZv bnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFj aW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRy YW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13 ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZv bnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFs OyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXIt c3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4 dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4 OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBp bmxpbmUgIWltcG9ydGFudDsiPkkNCiBhbSBmaW5lIHdpdGg6PC9zcGFuPjxiciBjbGFzcz0iIiBz dHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxl OiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7 IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDog MHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFj aW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPGJyIGNsYXNzPSIi IHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5 bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1h bDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50 OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNw YWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8c3BhbiBjbGFz cz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250 LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBu b3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWlu ZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29y ZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5v bmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyI+Q29tbXVuaWNhdGlvbnMNCiBiZXR3ZWVu IHRoZSBtZXRhZGF0YSBzZXJ2ZXIgYW5kIGZpbGU8L3NwYW4+PGJyIGNsYXNzPSIiIHN0eWxlPSJm b250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1h bDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVy LXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRl eHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBw eDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8c3BhbiBjbGFzcz0iIiBzdHls ZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBu b3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxl dHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4 OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5n OiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3Bs YXk6IGlubGluZSAhaW1wb3J0YW50OyI+c2VydmVyDQogU0hPVUxEIGJlIHNlY3VyZWQuIElmIHRo ZXJlIGlzIG5vdCBhZGVxdWF0ZSBwaHlzaWNhbCBzZWN1cml0eSAoaS5lLiwgdGhlPC9zcGFuPjxi ciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4 OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2Vp Z2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0 ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1h bDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0K PHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTog MTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250 LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFy dDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBu b3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7 IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiPnNlcnZlcnMNCiBhcmUg bm90IGNvLWxvY2F0ZWQgaW4gYSBwaHlzaWNhbGx5IHNlY3VyZSBhcmVhKSwgdGhlaXIgY29tbXVu aWNhdGlvbnM8L3NwYW4+PGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNh OyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6 IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4 dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3 aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9r ZS13aWR0aDogMHB4OyI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZl dGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1j YXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7 IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9u ZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1z dHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50 OyI+U0hPVUxEDQogYmUgcHJvdGVjdGVkIGZvciBjb25maWRlbnRpYWxpdHkgKGUuZy4sIHVzaW5n IFRMUyBvciBJUHNlYyku4oCdPC9zcGFuPjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6 IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFy aWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBu b3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9y bTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQt dGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2IGNs YXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KSSB1bmRlcnN0YW5kIHRoZSBoZXNpdGF0aW9u IHRvIG1ha2UgaXQgYSBNVVNULCBiZWNhdXNlIGl04oCZcyBvbiBhIHByb3RvY29sPC9kaXY+DQo8 ZGl2IGNsYXNzPSIiPnRoYXQgaXNu4oCZdCBkZXNjcmliZWQgaW4gdGhpcyBkb2N1bWVudC4gQnV0 IEkgdGhpbmsgaXTigJlzIHJlYXNvbmFibGUgdG8gZGVzY3JpYmU8L2Rpdj4NCjxkaXYgY2xhc3M9 IiI+YSByaXNrIGFuZCBtYWtlIGEgcmVxdWlyZW1lbnQgdGhhdCB0aGUgcmlzayBiZSBtaXRpZ2F0 ZWQuPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdj48YnIgY2xhc3M9 IiI+DQo8L2Rpdj4NCjxkaXY+SSBkbyBub3QgZGlzYWdyZWUgd2l0aCB0aGF0IHN0YXRlbWVudC48 L2Rpdj4NCjxiciBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0K PGRpdiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRp Y2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fw czogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0 ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7 IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ry b2tlLXdpZHRoOiAwcHg7Ij4NCjxkaXYgY2xhc3M9IiI+Q2VydGFpbmx5IGl04oCZcyBub3Q8L2Rp dj4NCjxkaXYgY2xhc3M9IiI+cmVhc29uYWJsZSB0byByZXF1aXJlIGEgcGFydGljdWxhciBtZXRo b2QgdG8gYmUgdXNlZCB0byBwcm90ZWN0IHRoZSBwcm90b2NvbDwvZGl2Pg0KPGRpdiBjbGFzcz0i Ij4od2hpY2ggaXMgd2h5IEkgc3VnZ2VzdGVkIOKAnGUuZy4sIHVzaW5nIFRMUyBvciBJUHNlY+KA nSBhYm92ZSByYXRoZXIgdGhhbiDigJxpLmUu4oCdKS48L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8 L2Jsb2NrcXVvdGU+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4NCjxkaXYgY2xh c3M9IiI+DQo8ZGl2IGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250 LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1h bDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGln bjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1z cGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0 aDogMHB4OyI+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFz cz0iIj5XaXRoIHRvZGF54oCZcyBwZXJ2YXNpdmUgcHJpdmFjeSB0aHJlYXRzIHRvIG5ldHdvcmsg dHJhZmZpYyBpdOKAmXMgaGFyZCB0byZuYnNwOzwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5qdXN0aWZ5 IGFsbG93aW5nIG1ldGFkYXRhIHRvIHRyYXZlcnNlIHVucHJvdGVjdGVkIG5ldHdvcmtzIGFzIGNs ZWFyLXRleHQmbmJzcDs8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+KGkuLmUsIGF2YWlsYWJsZSB0byAm bmJzcDtwYXNzaXZlIGVhdmVzZHJvcHBlcnMpLiBJdOKAmXMgYWxzbyBoYXJkIG9yIHRvIGp1c3Rp ZnkgYWxsb3dpbmcmbmJzcDs8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+c2VjdXJpdHktcmVsZXZlbnQg cHJvdG9jb2xzIHRvIGJlIHRyYW5zZmVycmluZyBpdCB3aXRob3V0IGNyeXB0b2dyYXBoaWMgaW50 ZWdyaXR5Jm5ic3A7PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPnByb3RlY3Rpb24uIEl0IHNlZW1zIGlt cG9ydGFudCB0byByZW1pbmQgcHJvdG9jb2wgZGV2ZWxvcGVycyB0aGF0IGJvdGg8L2Rpdj4NCjxk aXYgY2xhc3M9IiI+Y29uY2VybnMgYXJlIGFwcGxpY2FibGUuIEhvdyBhYm91dCBzb21ldGhpbmcg bGlrZSB0aGlzLCB3aGVyZSBtb3JlIHJhdGlvbmFsZTwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5pcyBn aXZlbi4gTm90ZSB0aGF0IHRoZSByZXF1aXJlbWVudCB0aGF0IHRoZSBwcm90b2NvbCBtdXN0IGJl IHByb3RlY3RlZCwgYnV0PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPm5vIHBhcnRpY3VsYXIgbWV0aG9k IG9mIHByb3RlY3Rpb24gaXMgbm90IG1hbmRhdGVkLjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIg Y2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+JnF1b3Q7Q29tbXVuaWNhdGlvbnMgYmV0 d2VlbiB0aGUgbWV0YWRhdGEgc2VydmVyIGFuZCBmaWxlPGJyIGNsYXNzPSIiPg0Kc2VydmVyIE1V U1QgYmUgc2VjdXJlIGZyb20gZWF2ZXNkcm9wcGVycyBhbmQgbWFuLWluLXRoZS1taWRkbGUgcHJv dG9jb2wmbmJzcDs8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+dGFtcGVyaW5nLiBUaGUgc2VjdXJpdHkg bWVhc3VyZSBjb3VsZCBiZSBkdWUgdG8gcGh5c2ljYWwgc2VjdXJpdHkgKGUuZy4sIHRoZSZuYnNw OzwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5zZXJ2ZXJzIGFyZSBjby1sb2NhdGVkIGluIGEgcGh5c2lj YWxseSBzZWN1cmUgYXJlYSksIGZyb20gZW5jcnlwdGVkIGNvbW11bmljYXRpb25zLDwvZGl2Pg0K PGRpdiBjbGFzcz0iIj5vciBzb21lIG90aGVyIHRlY2huaXF1ZS7igJ08L2Rpdj4NCjwvZGl2Pg0K PC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2PjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdj48 YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXY+SeKAmW0gc3RpbGwgaGVzaXRhbnQsIGluIHBhcnQg YmVjYXVzZSBJIGNhbuKAmXQgbWFrZSBhbiBpcm9uY2xhZCBydWxlIGFzIGEgc3RhbmRhcmTigJlz PC9kaXY+DQo8ZGl2PmF1dGhvciB0aGF0IEkga25vdyBJIGFtIGdvaW5nIHRvIHZpb2xhdGUgd2l0 aCBteSBvd24gaW1wbGVtZW50YXRpb24uPC9kaXY+DQo8ZGl2PjxiciBjbGFzcz0iIj4NCjwvZGl2 Pg0KPGRpdj5BbHNvLCBJIGtub3cgdGhhdCB0aGVyZSBtaWdodCBiZSBleGlzdGVudCBzdG9yYWdl IGRldmljZXMgd2hpY2ggZG8gbm90IHN1cHBvcnQ8L2Rpdj4NCjxkaXY+TkZTIG92ZXIgVExTL0lQ c2VjL2V0Yy4gWWVzLCBwaHlzaWNhbCBzZWN1cml0eSBpcyB0aGUgYW5zd2VyIGhlcmUsIGJ1dCBJ IGNhbm5vdDwvZGl2Pg0KPGRpdj5pbiBmdWxsIGNvbmZpZGVuY2UgZXhwZWN0IHRoYXQgYW4gYWN0 dWFsIGRlcGxveW1lbnQgbWVldHMgYWxsIG9mIHRoZXNlIGNyaXRlcmlhLjwvZGl2Pg0KPGRpdj5B dCBzb21lIHBvaW50LCB0aGUgYnVyZGVuIGlzIG9mZiBvZiB0aGUgcHJvdG9jb2wgaW1wbGVtZW50 YXRpb24gYW5kIG9udG8gdGhlPC9kaXY+DQo8ZGl2PmRlcGxveW1lbnQuPC9kaXY+DQo8ZGl2Pjxi ciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdj5JZiB3ZSBjaGFuZ2UgdGhlIE1VU1QgdG8gYSBTSE9V TEQsIEkgYW0gcGVyZmVjdGx5IGZpbmUgbWFraW5nIHRoZSBjaGFuZ2UuIDotKTwvZGl2Pg0KPGRp dj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXY+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8YnIg Y2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9 IiI+DQo8ZGl2IGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNp emU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsg Zm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjog c3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFj ZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDog MHB4OyI+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNp dGUiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNs YXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZv bnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6 IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQt aW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3 b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQooMykg RnJvbSB0aGUgZGVzY3JpcHRpb24gb2Ygc3ludGhldGljIHVpZHMvZ2lkcyBpbiBTZWN0aW9uIDIu MiwgSSBiZWxpZXZlIHRoYXQ8YnIgY2xhc3M9IiI+DQp0aGUgZnVsbCByYW5nZSBvZiBmaWxlIHBl cm1pc3Npb25zIChlLmcuLCBvd25lciByL3cveCkgJm5ic3A7aXMgaG9ub3JlZCBpbiB0aGU8YnIg Y2xhc3M9IiI+DQp0aWdodGx5IGNvdXBsZWQgbW9kZWwsIGJ1dCBhcmUgcmVzdHJpY3RlZCBpbiB0 aGUgbG9vc2VseSBjb3VwbGVkIG1vZGVsIHRvPGJyIGNsYXNzPSIiPg0K4oCcb3duZXIgci934oCd LCDigJxncm91cCBy4oCdLiBJZiB0aGF0IGlzIGNvcnJlY3QsIEkgdGhpbmsgdGhlIHNlY3VyaXR5 IGNvbnNpZGVyYXRpb25zPGJyIGNsYXNzPSIiPg0Kc2hvdWxkIGV4cGxpY2l0bHkgbWVudGlvbiB0 aGF0IHRoZSBlZmZlY3Qgb2YgYWNjZXNzIHBlcm1pc3Npb25zIGlzIHJlZHVjZWQgb248YnIgY2xh c3M9IiI+DQp0aGUgZmlsZSBzZXJ2ZXIgZmlsZXMuPGJyIGNsYXNzPSIiPg0KPC9ibG9ja3F1b3Rl Pg0KPGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6 IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9u dC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3Rh cnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTog bm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4 OyI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1z aXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7 IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246 IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3Bh Y2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6 IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyI+WzJdDQogSSB0 aGluayB0aGUgY29uZnVzaW9uIGhlcmUgaXMgdGhhdCB0aGUgZmlsZXMgb24gc3RvcmFnZSBkZXZp Y2UgYXJlIG5vdDwvc3Bhbj48YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRp Y2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fw czogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0 ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7 IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ry b2tlLXdpZHRoOiAwcHg7Ij4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVs dmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50 LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1h bDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBu b25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0 LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRh bnQ7Ij5pbg0KIHRoZSBmaWxlIGhpZXJhcmNoeSBhcyBzZWVuIG9uIHRoZSBtZXRhZGF0YSBzZXJ2 ZXIuPC9zcGFuPjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9u dC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3Jt YWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxp Z246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUt c3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lk dGg6IDBweDsiPg0KPGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBm b250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5v cm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1h bGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0 ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13 aWR0aDogMHB4OyI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGlj YTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBz OiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRl eHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsg d2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJv a2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyI+ T24NCiBhIGZpbGUgYnkgZmlsZSBiYXNpcyBvbiB0aGUgc3RvcmFnZSBkZXZpY2UsIHdlIGFyZSBn aXZpbmcgdGhlIGNsaWVudCBlaXRoZXI8L3NwYW4+PGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZh bWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9u dC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNp bmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJh bnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdl YmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9u dC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7 IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1z cGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0 LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7 IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlu bGluZSAhaW1wb3J0YW50OyI+d3JpdGUNCiBtb2RpZmljYXRpb24gYWNjZXNzLCByZWFkIGFjY2Vz cywgb3Igbm8gYWNjZXNzIGF0IGFsbC4gVGhlIGNsaWVudCBjYW5ub3Q8L3NwYW4+PGJyIGNsYXNz PSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQt c3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5v cm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5k ZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3Jk LXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8c3BhbiBj bGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBm b250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0 OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0 LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsg d29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6 IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyI+cmVtb3ZlDQogdGhlIGZpbGUgKGl0 IHdvdWxkIG5lZWQgdG8ga25vdyB0aGUgcGFyZW50IGRpcmVjdG9yeSBGSCBhbmQgdGhlPC9zcGFu PjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAx MnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQt d2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0 OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5v cm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsi Pg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6 ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBm b250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBz dGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNl OiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAw cHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiPm5hbWUNCiBvZiB0 aGUgZmlsZSAtIG5laXRoZXIgb2Ygd2hpY2ggaXQgaGFzKS4gJm5ic3A7SXQgY2FuIGVmZmVjdGl2 ZWx5IHJlbW92ZSB0aGUgY29udGVudDwvc3Bhbj48YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFt aWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250 LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2lu Zzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFu c2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Vi a2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250 LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsg Zm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNw YWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQt dHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsg LXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5s aW5lICFpbXBvcnRhbnQ7Ij5pZg0KIGl0IGhhcyB3cml0ZSBwZXJtaXNzaW9uIChidXQgbm90aGlu ZyB3b3VsZCBwcmV2ZW50IHRoaXMgaW4gYSB0aWdodGx5PC9zcGFuPjxiciBjbGFzcz0iIiBzdHls ZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBu b3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxl dHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4 OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5n OiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPHNwYW4gY2xhc3M9IiIg c3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHls ZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFs OyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6 IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3Bh Y2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBk aXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiPmNvdXBsZWQNCiBtb2RlbCkuPHNwYW4gY2xhc3M9 IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjwvc3Bhbj48YnIgY2xhc3M9IiIg c3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHls ZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFs OyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6 IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3Bh Y2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjwvZGl2Pg0KPC9i bG9ja3F1b3RlPg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjwvZGl2Pg0K PGRpdiBjbGFzcz0iIj5Hb3QgaXQsIHRoYW5rcy48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+Jm5ic3A7 PGJyIGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+DQo8ZGl2IGNs YXNzPSIiPjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1z aXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7 IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246 IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3Bh Y2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6 IDBweDsiPg0KPGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250 LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1h bDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGln bjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1z cGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0 aDogMHB4OyI+DQo8YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZv bnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9y bWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFs aWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRl LXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdp ZHRoOiAwcHg7Ij4NCjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsg Zm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBu b3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQt YWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hp dGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Ut d2lkdGg6IDBweDsiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiIgc3R5bGU9ImZv bnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFs OyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXIt c3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4 dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4 OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxiciBjbGFzcz0iIj4NCig0KSBT ZWN0aW9uIDIuMi4gSW4gdGhpcyBwaHJhc2Ug4oCcaXQgbWF5IGJlIGFzc2lnbmVkIHNvbWUgcmFu ZG9tIHN5bnRoZXRpYzxiciBjbGFzcz0iIj4NCnVpZC9naWQgdG8gZGVueSBhY2Nlc3PigJ0sIHdv dWxkIGEgYmV0dGVyIHdvcmQgZm9yIOKAnHJhbmRvbeKAnSBiZSDigJx1bnVzZWTigJ0gb3I8YnIg Y2xhc3M9IiI+DQrigJx1bnByZWRpY3RhYmxl4oCdPyBBbHNvIHdoYXQgaXMgdGhlIHNlY3VyaXR5 IHZhbHVlIGludGVuZGVkIGJ5IHRoZSB1c2Ugb2YgYTxiciBjbGFzcz0iIj4NCuKAnHJhbmRvbeKA nSB2YWx1ZSBmb3Igc3ludGhldGljIHVpZHMvZ2lkcz88YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9 IiI+DQo8L2Jsb2NrcXVvdGU+DQo8YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2 ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQt Y2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFs OyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5v bmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQt c3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTog SGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJp YW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5v cm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3Jt OiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10 ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBv cnRhbnQ7Ij5Jbg0KIGFuIGVhcmxpZXIgcmV2aWV3IChieSBMaW5kYSBEdW5iYXIpLCB0aGF0IHBo cmFzZSB3YXMgY2hhbmdlZDo8L3NwYW4+PGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTog SGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJp YW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5v cm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3Jt OiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10 ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5 OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZh cmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzog bm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zv cm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0 LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1p bHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQt dmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5n OiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5z Zm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJr aXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQt ZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBm b250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3Bh Y2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10 cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAt d2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxp bmUgIWltcG9ydGFudDsiPiZuYnNwO09uDQogdGhlIHN0b3JhZ2UgZGV2aWNlLCBpdCBtYXkgYmUg YXNzaWduZWQgc29tZSByYW5kb20gc3ludGhldGljIHVpZC88L3NwYW4+PGJyIGNsYXNzPSIiIHN0 eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6 IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsg bGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAw cHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNp bmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8c3BhbiBjbGFzcz0i IiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0 eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3Jt YWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVu dDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1z cGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7 IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyI+Jm5ic3A7Z2lkDQogdG8gZGVueSBhY2Nlc3M6 PC9zcGFuPjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1z aXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7 IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246 IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3Bh Y2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6 IDBweDsiPg0KPGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250 LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1h bDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGln bjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1z cGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0 aDogMHB4OyI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsg Zm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBu b3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQt YWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hp dGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Ut d2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyI+Jm5i c3A7LXJ3LXItLS0tLQ0KICZuYnNwOyZuYnNwOyZuYnNwOzEgMTk0NTIgJm5ic3A7Jm5ic3A7Mjg0 MTggJm5ic3A7Jm5ic3A7Jm5ic3A7MTY5NyBEZWMgJm5ic3A7NCAxMTozMSBkYXRhX29tcGhhLmM8 L3NwYW4+PGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNp emU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsg Zm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjog c3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFj ZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDog MHB4OyI+DQo8YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQt c2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFs OyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWdu OiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNw YWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRo OiAwcHg7Ij4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBm b250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5v cm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1h bGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0 ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13 aWR0aDogMHB4OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7Ij4mbmJz cDtXaGVuDQogdGhlIGZpbGUgaXMgb3BlbmVkIG9uIGEgY2xpZW50IGFuZCBhY2Nlc3NlZCwgaXQg d2lsbCB0cnkgdG8gZ2V0IGE8L3NwYW4+PGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTog SGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJp YW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5v cm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3Jt OiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10 ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1p bHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQt dmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5n OiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5z Zm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJr aXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAh aW1wb3J0YW50OyI+Jm5ic3A7bGF5b3V0DQogZm9yIHRoZSBkYXRhIGZpbGUuIFNpbmNlIHRoZSBs YXlvdXQga25vd3Mgbm90aGluZzwvc3Bhbj48YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5 OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZh cmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzog bm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zv cm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0 LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LWZh bWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9u dC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNp bmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJh bnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdl YmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5l ICFpbXBvcnRhbnQ7Ij4mbmJzcDthYm91dA0KIHRoZSB1c2VyIChhbmQgZG9lcyBub3QgY2FyZSks IHdoZXRoZXIgdGhlIHVzZXIgbG9naHlyIG9yPC9zcGFuPjxiciBjbGFzcz0iIiBzdHlsZT0iZm9u dC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7 IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1z cGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0 LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7 IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9 ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9y bWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0 ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsg dGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzog MHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5 OiBpbmxpbmUgIWltcG9ydGFudDsiPiZuYnNwO2dhcmJvDQogb3BlbnMgdGhlIGZpbGUgZG9lcyBu b3QgbWF0dGVyLiAmbmJzcDtUaGUgY2xpZW50IGhhcyB0byBwcmVzZW50PC9zcGFuPjxiciBjbGFz cz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250 LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBu b3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWlu ZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29y ZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPHNwYW4g Y2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsg Zm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdo dDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4 dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7 IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0 OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiPiZuYnNwO2FuDQogdWlkIG9mIDE5 NDUyIHRvIGdldCB3cml0ZSBwZXJtaXNzaW9uLiBJZiBpdCBwcmVzZW50cyBhbnkgb3RoZXI8L3Nw YW4+PGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6 IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9u dC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3Rh cnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTog bm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4 OyI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1z aXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7 IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246 IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3Bh Y2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6 IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyI+Jm5ic3A7dmFs dWUNCiBmb3IgdGhlIHVpZCwgdGhlbiBpdCBtdXN0IGdpdmUgYSBnaWQgb2YgMjg0MTggdG8gZ2V0 IHJlYWQ8L3NwYW4+PGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBm b250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5v cm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1h bGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0 ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13 aWR0aDogMHB4OyI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGlj YTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBz OiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRl eHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsg d2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJv a2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyI+ Jm5ic3A7YWNjZXNzLjwvc3Bhbj48YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2 ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQt Y2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFs OyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5v bmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQt c3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhl bHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFu dC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3Jt YWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTog bm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4 dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5 OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZh cmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzog bm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zv cm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0 LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWlt cG9ydGFudDsiPiZuYnNwO0Z1cnRoZXIsDQogaWYgdGhlIG1ldGFkYXRhIHNlcnZlciBkZWNpZGVz IHRvIGZlbmNlIHRoZSBmaWxlLCBpdCBtYXk8L3NwYW4+PGJyIGNsYXNzPSIiIHN0eWxlPSJmb250 LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsg Zm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNw YWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQt dHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsg LXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0i Zm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3Jt YWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRl ci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0 ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAw cHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6 IGlubGluZSAhaW1wb3J0YW50OyI+Jm5ic3A7Y2hhbmdlDQogdGhlIHVpZCBhbmQgZ2lkIGFzIHN1 Y2g6PC9zcGFuPjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9u dC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3Jt YWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxp Z246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUt c3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lk dGg6IDBweDsiPg0KPGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBm b250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5v cm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1h bGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0 ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13 aWR0aDogMHB4OyI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGlj YTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBz OiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRl eHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsg d2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJv a2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyI+ Jm5ic3A7LXJ3LXItLS0tLQ0KICZuYnNwOyZuYnNwOyZuYnNwOzEgMTk0NTMgJm5ic3A7Jm5ic3A7 Mjg0MTkgJm5ic3A7Jm5ic3A7Jm5ic3A7MTY5NyBEZWMgJm5ic3A7NCAxMTozMSBkYXRhX29tcGhh LmM8L3NwYW4+PGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250 LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1h bDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGln bjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1z cGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0 aDogMHB4OyI+DQo8YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZv bnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9y bWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFs aWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRl LXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdp ZHRoOiAwcHg7Ij4NCjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsg Zm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBu b3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQt YWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hp dGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Ut d2lkdGg6IDBweDsiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRp Y2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fw czogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0 ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7 IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ry b2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsi PldoYXQNCiB3ZSBjb3VsZCBzdWdnZXN0IHdvdWxkIGJlIHNvbWV0aGluZyBhbG9uZyB0aGUgbGlu ZXMgb2Y6PC9zcGFuPjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsg Zm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBu b3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQt YWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hp dGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Ut d2lkdGg6IDBweDsiPg0KPGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNh OyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6 IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4 dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3 aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9r ZS13aWR0aDogMHB4OyI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZl dGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1j YXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7 IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9u ZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1z dHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50 OyI+Jm5ic3A7T24NCiB0aGUgc3RvcmFnZSBkZXZpY2UsIGl0IG1heSBiZSBhc3NpZ25lZCBzb21l IHVucHJlZGljdGFibGU8L3NwYW4+PGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVs dmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50 LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1h bDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBu b25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0 LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6 IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFy aWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBu b3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9y bTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQt dGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1w b3J0YW50OyI+Jm5ic3A7c3ludGhldGljDQogdWlkL2dpZCB0byBkZW55IGFjY2Vzcy48L3NwYW4+ PGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEy cHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13 ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7 IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9y bWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+ DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXpl OiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZv bnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0 YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6 IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBw eDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyI+Jm5ic3A74oCmPC9z cGFuPjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXpl OiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZv bnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0 YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6 IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBw eDsiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQt c2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFs OyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWdu OiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNw YWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRo OiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiPiZuYnNwO0Z1 cnRoZXIsDQogaWYgdGhlIG1ldGFkYXRhIHNlcnZlciBkZWNpZGVzIHRvIGZlbmNlIHRoZSBmaWxl LCBpdDwvc3Bhbj48YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZv bnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9y bWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFs aWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRl LXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdp ZHRoOiAwcHg7Ij4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNh OyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6 IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4 dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3 aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9r ZS13aWR0aDogMHB4OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7Ij4m bmJzcDtzaG91bGQNCiBjaGFuZ2UgdGhlIHVpZCBhbmQvb3IgZ2lkIHN1Y2ggdGhhdCB0aGVzZSB2 YWx1ZXM8L3NwYW4+PGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBm b250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5v cm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1h bGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0 ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13 aWR0aDogMHB4OyI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGlj YTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBz OiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRl eHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsg d2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJv a2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyI+ Jm5ic3A7bmVpdGhlcg0KIG1hdGNoIGVhcmxpZXIgdmFsdWVzIGZvciB0aGF0IGZpbGUgbm9yIG1h dGNoPC9zcGFuPjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9u dC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3Jt YWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxp Z246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUt c3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lk dGg6IDBweDsiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7 IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczog bm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0 LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdo aXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tl LXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiPiZu YnNwO2ENCiBwcmVkaWN0YWJsZSBjaGFuZ2UgYmFzZWQgb24gYW4gZWFybGllciBmZW5jaW5nLjwv c3Bhbj48YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6 ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBm b250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBz dGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNl OiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAw cHg7Ij4NCjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1z aXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7 IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246 IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3Bh Y2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6 IDBweDsiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZv bnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9y bWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFs aWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRl LXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdp ZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiPlVnaCwN CiBub3Qgc3VyZSBJIGxpa2UgdGhlIHdvcmRzLjwvc3Bhbj48YnIgY2xhc3M9IiIgc3R5bGU9ImZv bnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFs OyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXIt c3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4 dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4 OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxiciBjbGFzcz0iIiBzdHlsZT0i Zm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3Jt YWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRl ci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0 ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAw cHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPHNwYW4gY2xhc3M9IiIgc3R5 bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTog bm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBs ZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBw eDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2lu ZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNw bGF5OiBpbmxpbmUgIWltcG9ydGFudDsiPnVpZFtOJiM0MzsxXQ0KICE9IHVpZFtOLTFdICZhbXA7 JmFtcDsgdWlkW04mIzQzOzFdICZuYnNwOyE9IGNoYW5nZSh1aWRbTi0xXSAtJmd0OyB1aWRbTl0p Ljwvc3Bhbj48YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQt c2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFs OyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWdu OiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNw YWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRo OiAwcHg7Ij4NCjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9u dC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3Jt YWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxp Z246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUt c3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lk dGg6IDBweDsiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7 IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczog bm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0 LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdo aXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tl LXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiPkku ZS4sDQogZG8gbm90IHNldCB0byByZWNlbnQgb2xkIHZhbHVlcyAobWlnaHQgZmVuY2UgYmFjayB0 byBhbiB1aWQ8L3NwYW4+PGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNh OyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6 IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4 dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3 aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9r ZS13aWR0aDogMHB4OyI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZl dGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1j YXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7 IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9u ZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1z dHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50 OyI+YW4NCiBvbGRlciBjbGllbnQgYWxyZWFkeSBoYXMpIGFuZCBkbyBub3QgdXNlIGEgZml4ZWQg aW5jcmVtZW50Ljwvc3Bhbj48YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRp Y2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fw czogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0 ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7 IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ry b2tlLXdpZHRoOiAwcHg7Ij4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdiBjbGFzcz0iIj48 YnIgY2xhc3M9IiI+DQo8L2Rpdj4NClNvIG1heWJlIGluIHRoZSBmaXJzdCBwYXJhZ3JhcGggeW91 IG1lYW4g4oCc4oCmIHNvbWUgdW5wcmVkaWN0YWJsZSBhbmQ8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+ dW51c2VkIGJ5IGFueSBjdXJyZW50IGNsaWVudOKAnT88L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJy IGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNz PSIiPjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXpl OiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZv bnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0 YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6 IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBw eDsiPg0KPGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNp emU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsg Zm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjog c3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFj ZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDog MHB4OyI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1p bHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQt dmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5n OiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5z Zm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJr aXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KKDUpIEluIHRoZSDigJxsb29zZSBjb3VwbGlu ZyBtb2RlbOKAnSBmaWxlIGFjY2VzcyBhY3R1YWxseSBlbmZvcmNlZCBieSB0aGUgY2xpZW50LDxi ciBjbGFzcz0iIj4NCndoaWNoIHByZXN1bWFibHkgY2FuIGJlIG1hbmlwdWxhdGVkIGJ5IGFuIGV2 aWwgdXNlci4gVGhpcyBpcyBjbGVhcmx5IHN0YXRlZCBuPGJyIGNsYXNzPSIiPg0KU2VjdGlvbiAy LjI6IOKAnCBUaGUgY2xpZW50IGlzIHRodXMgc29sZWx5IHJlc3BvbnNpYmxlIGZvciBlbmZvcmNp bmcgZmlsZTxiciBjbGFzcz0iIj4NCnBlcm1pc3Npb25zIGluIGEgbG9vc2VseSBjb3VwbGVkIG1v ZGVsLuKAnSAmbmJzcDtBbHNvLCBTZWN0aW9uIDIuMi4xIG1lbnRpb25zIOKAnGE8YnIgY2xhc3M9 IiI+DQpTRVRBVFRSIHdvdWxkIGJlIHNlbnQgdG8gdGhlIHN0b3JhZ2UgZGV2aWNlIHRvIHNldCB0 aGUgb3duZXIgYW5kIGdyb3VwIG9mIHRoZTxiciBjbGFzcz0iIj4NCmRhdGEgZmlsZeKAnSwgYW5k IHNpbmNlIGhlcmUgaXMgbm8gY29udHJvbCBwcm90b2NvbCBiZXR3ZWVuIHRoZSBtZXRhZGF0YSBz ZXJ2ZXI8YnIgY2xhc3M9IiI+DQphbmQgdGhlIGZpbGUgc2VydmVyIHNvIEkgYXNzdW1lIGl0IGlz IHNlbnQgYnkgdGhlIGNsaWVudC48YnIgY2xhc3M9IiI+DQo8L2Jsb2NrcXVvdGU+DQo8YnIgY2xh c3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9u dC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDog bm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1p bmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdv cmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxzcGFu IGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7 IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWln aHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRl eHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFs OyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9h dDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7Ij5JdA0KIGlzIHN1YnRsZSwgYnV0 IHRoaXMgZ29lcyBiYWNrIHRvIHRoZSBmYWN0IChzZWUgWzFdKSB0aGF0IOKAnG5vIGNvbnRyb2wg cHJvdG9jb2zigJ0gZG9lcyBub3Q8L3NwYW4+PGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWls eTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12 YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6 IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNm b3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtp dC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1m YW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZv bnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFj aW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRy YW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13 ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGlu ZSAhaW1wb3J0YW50OyI+aW1wbHkNCiDigJxubyBjb21tdW5pY2F0aW9uIGJldHdlZW4gdGhlIG1l dGFkYXRhIHNlcnZlciBhbmQgdGhlIHN0b3JhZ2U8L3NwYW4+PGJyIGNsYXNzPSIiIHN0eWxlPSJm b250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1h bDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVy LXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRl eHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBw eDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8c3BhbiBjbGFzcz0iIiBzdHls ZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBu b3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxl dHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4 OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5n OiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3Bs YXk6IGlubGluZSAhaW1wb3J0YW50OyI+ZGV2aWNl4oCdLg0KICZuYnNwO0kuZS4sIHRoZSBNRFMg ZG9lcyB0aGUgU0VUQVRUUi48L3NwYW4+PGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTog SGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJp YW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5v cm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3Jt OiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10 ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5 OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZh cmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzog bm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zv cm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0 LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LWZh bWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9u dC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNp bmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJh bnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdl YmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5l ICFpbXBvcnRhbnQ7Ij5BbHNvLA0KIEkgbm90aWNlIHlvdSBhcmUgdXNpbmcgdGhlIHBocmFzZSDi gJxmaWxlIHNlcnZlcuKAnSwgd2hpY2ggcHJvYmFibHkgaW1wYWN0czwvc3Bhbj48YnIgY2xhc3M9 IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1z dHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9y bWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRl bnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQt c3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxzcGFuIGNs YXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZv bnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6 IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQt aW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3 b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDog bm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7Ij55b3VyDQogdmlldyBpbiB5b3VyIHBv aW50IDMgKHNlZSBteSBbMl0pIC0gdGhlIHRlcm0gd2UgdXNlIGlzIHN0b3JhZ2U8L3NwYW4+PGJy IGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7 IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWln aHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRl eHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFs OyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8 c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAx MnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQt d2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0 OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5v cm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsg ZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyI+ZGV2aWNlLg0KIFRoZXJl IGlzIG5vIHJlcXVpcmVtZW50IHRoYXQgdGhpcyBkZXZpY2Ugc2VydmUgdXAgZGF0YSBmaWxlczwv c3Bhbj48YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6 ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBm b250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBz dGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNl OiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAw cHg7Ij4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250 LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1h bDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGln bjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1z cGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0 aDogMHB4OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7Ij5hcw0KIGlm IHRoZXkgd2VyZSBpbiBhIGZpbGVzeXN0ZW0uIFRoZSBzdG9yYWdlIGRldmljZSBpcyBsaW1pdGVk IGluIHRoZSBvcGVyYXRpb25zPC9zcGFuPjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6 IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFy aWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBu b3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9y bTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQt dGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFt aWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250 LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2lu Zzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFu c2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Vi a2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUg IWltcG9ydGFudDsiPnRoYXQNCiBpdCBjYW4gcmVzcG9uZCB0byBmcm9tIHRoZSBjbGllbnQgYmFz ZWQgb24gdGhlIGluZm9ybWF0aW9uIGl0IGlzPC9zcGFuPjxiciBjbGFzcz0iIiBzdHlsZT0iZm9u dC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7 IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1z cGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0 LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7 IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9 ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9y bWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0 ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsg dGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzog MHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5 OiBpbmxpbmUgIWltcG9ydGFudDsiPnByZXNlbnRlZA0KIHdpdGguPC9zcGFuPjxiciBjbGFzcz0i IiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0 eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3Jt YWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVu dDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1z cGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPGJyIGNsYXNz PSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQt c3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5v cm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5k ZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3Jk LXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8c3BhbiBj bGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBm b250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0 OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0 LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsg d29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6 IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyI+Rm9yDQogZXhhbXBsZSwgdGhlIGV4 cG9ydHMgb24gdGhlIHN0b3JhZ2UgZGV2aWNlIGNhbiBiZSBjb25maWd1cmVkIHN1Y2g8L3NwYW4+ PGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEy cHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13 ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7 IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9y bWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+ DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXpl OiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZv bnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0 YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6 IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBw eDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyI+dGhhdA0KIHRoZSBt ZXRhZGF0YSBzZXJ2ZXIgaXMgdGhlIG9ubHkgb25lIHdoaWNoIGNhbiBtb3VudCB0aGUgZXhwb3J0 cy48L3NwYW4+PGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250 LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1h bDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGln bjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1z cGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0 aDogMHB4OyI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsg Zm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBu b3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQt YWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hp dGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Ut d2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyI+QW5k DQogc2luY2UgdGhlIG1ldGFkYXRhIHNlcnZlciBvbmx5IGhhbmRzIG91dCBGaWxlIEhhbmRsZXMg dG8gdGhlPC9zcGFuPjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsg Zm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBu b3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQt YWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hp dGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Ut d2lkdGg6IDBweDsiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRp Y2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fw czogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0 ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7 IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ry b2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsi PmNsaWVudHMsDQogdGhleSB3b3VsZCBub3QgYmUgYWJsZSB0byB3YWxrIHRoZSBuYW1lc3BhY2Ug b2YgdGhlIHN0b3JhZ2U8L3NwYW4+PGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVs dmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50 LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1h bDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBu b25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0 LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6 IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFy aWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBu b3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9y bTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQt dGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1w b3J0YW50OyI+ZGV2aWNlLjwvc3Bhbj48YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBI ZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlh bnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9y bWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06 IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRl eHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdiBjbGFz cz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NClRoYW5rcyBmb3IgdGhlIGV4cGxhbmF0aW9uIOKA piBtYWtlcyBzZW5zZS48YnIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFz cz0iIj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVs dmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50 LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1h bDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBu b25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0 LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBI ZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlh bnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9y bWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06 IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRl eHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIi IHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5 bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1h bDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50 OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNw YWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8YnIgY2xhc3M9 IiI+DQpQdXQgYW5vdGhlciB3YXksIGl0IHNlZW1zIGFzIGlmIGFueSBjbGllbnQgdGhhdCBoYXMg Y3JlZGVudGlhbHMgYWxsb3dpbmcgaXQgdG88YnIgY2xhc3M9IiI+DQphY2Nlc3MgdG8gdGhlIGZp bGUgc2VydmVyIGNhbiBhY2Nlc3MgYW55IGZpbGUgb24gdGhlIGZpbGUgc3lzdGVtIGlmIGl0IGlz PGJyIGNsYXNzPSIiPg0KY2hvb3NlcyB0byBkbyBzbyAoZS5nLi4sIGlmIGl0IGlzIGEgbWFsaWNp b3VzIGNsaWVudCkuIElzIHRoYXQgY29ycmVjdD88YnIgY2xhc3M9IiI+DQo8L2Jsb2NrcXVvdGU+ DQo8YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTog MTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250 LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFy dDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBu b3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7 Ij4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNp emU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsg Zm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjog c3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFj ZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDog MHB4OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7Ij5Bcw0KIHdpdGgg YW55IE5GUyBmaWxlc3lzdGVtIHdoaWNoIHVzZXMgYW4gQVVUSF9TWVMgc2VjdXJpdHkgbW9kZWws PC9zcGFuPjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1z aXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7 IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246 IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3Bh Y2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6 IDBweDsiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZv bnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9y bWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFs aWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRl LXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdp ZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiPmVhY2gN CiBvZiB0aGUgZmlsZSBoYW5kbGUsIHVpZCwgYW5kIGdpZCBjYW4gYmUgZm9yZ2VkIHRvIGdhaW4g YWNjZXNzLjwvc3Bhbj48YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7 IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczog bm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0 LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdo aXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tl LXdpZHRoOiAwcHg7Ij4NCjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGlj YTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBz OiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRl eHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsg d2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJv a2Utd2lkdGg6IDBweDsiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2 ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQt Y2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFs OyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5v bmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQt c3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFu dDsiPkluDQogb3RoZXIgd29yZHMsIHRoaXMgaXMgbm90aGluZyBuZXcuPC9zcGFuPjxiciBjbGFz cz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250 LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBu b3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWlu ZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29y ZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPGJyIGNs YXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZv bnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6 IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQt aW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3 b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8c3Bh biBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4 OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2Vp Z2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0 ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1h bDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxv YXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyI+VGhlDQogc2VjdXJpdHkgbW9k ZWwgZm9yIE5GU3Y0LjIgKGFuZCBiYXNlZCBvbiB0aGF0LCBORlN2NC4wIGFuZCBORlN2NC4xKTo8 L3NwYW4+PGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNp emU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsg Zm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjog c3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFj ZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDog MHB4OyI+DQo8YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQt c2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFs OyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWdu OiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNw YWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRo OiAwcHg7Ij4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBm b250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5v cm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1h bGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0 ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13 aWR0aDogMHB4OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7Ij5bUkZD Nzg2Ml08L3NwYW4+PGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBm b250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5v cm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1h bGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0 ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13 aWR0aDogMHB4OyI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGlj YTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBz OiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRl eHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsg d2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJv a2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyI+ MTcuDQogJm5ic3A7U2VjdXJpdHkgQ29uc2lkZXJhdGlvbnM8L3NwYW4+PGJyIGNsYXNzPSIiIHN0 eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6 IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsg bGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAw cHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNp bmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8YnIgY2xhc3M9IiIg c3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHls ZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFs OyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6 IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3Bh Y2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxzcGFuIGNsYXNz PSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQt c3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5v cm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5k ZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3Jk LXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9u ZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7Ij4mbmJzcDsmbmJzcDtORlN2NC4yDQogaGFz IGFsbCBvZiB0aGUgc2VjdXJpdHkgY29uY2VybnMgcHJlc2VudCBpbiBORlN2NC4xIChzZWU8L3Nw YW4+PGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6 IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9u dC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3Rh cnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTog bm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4 OyI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1z aXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7 IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246 IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3Bh Y2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6 IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyI+Jm5ic3A7Jm5i c3A7U2VjdGlvbg0KIDIxIG9mIFtSRkM1NjYxXSksIGFzIHdlbGwgYXMgdGhvc2UgcHJlc2VudCBp biB0aGUgc2VydmVyLXNpZGU8L3NwYW4+PGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTog SGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJp YW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5v cm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3Jt OiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10 ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1p bHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQt dmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5n OiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5z Zm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJr aXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAh aW1wb3J0YW50OyI+Jm5ic3A7Jm5ic3A7Y29weQ0KIChzZWUgU2VjdGlvbiA0LjkpIGFuZCBpbiBM YWJlbGVkIE5GUyAoc2VlIFNlY3Rpb24gOS42KS48L3NwYW4+PGJyIGNsYXNzPSIiIHN0eWxlPSJm b250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1h bDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVy LXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRl eHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBw eDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8YnIgY2xhc3M9IiIgc3R5bGU9 ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9y bWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0 ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsg dGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzog MHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxzcGFuIGNsYXNzPSIiIHN0 eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6 IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsg bGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAw cHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNp bmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9uZTsgZGlz cGxheTogaW5saW5lICFpbXBvcnRhbnQ7Ij5XaGljaA0KIGxlYWRzIHVzIHRvIFtSRkM1NjYxXTo8 L3NwYW4+PGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNp emU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsg Zm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjog c3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFj ZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDog MHB4OyI+DQo8YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQt c2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFs OyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWdu OiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNw YWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRo OiAwcHg7Ij4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBm b250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5v cm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1h bGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0 ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13 aWR0aDogMHB4OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7Ij4yLjIu MS4xLjEuMi4NCiAmbmJzcDtTZWN1cml0eSBNZWNoYW5pc21zIGZvciBORlN2NC4xPC9zcGFuPjxi ciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4 OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2Vp Z2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0 ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1h bDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0K PGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEy cHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13 ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7 IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9y bWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+ DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXpl OiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZv bnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0 YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6 IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBw eDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyI+Jm5ic3A7Jm5ic3A7 UlBDU0VDX0dTUywNCiB2aWEgR1NTLUFQSSwgbm9ybWFsaXplcyBhY2Nlc3MgdG8gbWVjaGFuaXNt cyB0aGF0IHByb3ZpZGU8L3NwYW4+PGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVs dmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50 LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1h bDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBu b25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0 LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6 IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFy aWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBu b3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9y bTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQt dGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1w b3J0YW50OyI+Jm5ic3A7Jm5ic3A7c2VjdXJpdHkNCiBzZXJ2aWNlcy4gJm5ic3A7VGhlcmVmb3Jl LCBORlN2NC4xIGNsaWVudHMgYW5kIHNlcnZlcnMgTVVTVDwvc3Bhbj48YnIgY2xhc3M9IiIgc3R5 bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTog bm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBs ZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBw eDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2lu ZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxzcGFuIGNsYXNzPSIi IHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5 bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1h bDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50 OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNw YWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9uZTsg ZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7Ij4mbmJzcDsmbmJzcDtzdXBwb3J0DQogdGhlIEtl cmJlcm9zIFY1IHNlY3VyaXR5IG1lY2hhbmlzbS48L3NwYW4+PGJyIGNsYXNzPSIiIHN0eWxlPSJm b250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1h bDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVy LXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRl eHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBw eDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8YnIgY2xhc3M9IiIgc3R5bGU9 ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9y bWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0 ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsg dGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzog MHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxzcGFuIGNsYXNzPSIiIHN0 eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6 IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsg bGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAw cHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNp bmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9uZTsgZGlz cGxheTogaW5saW5lICFpbXBvcnRhbnQ7Ij4mbmJzcDsmbmJzcDtUaGUNCiB1c2Ugb2YgUlBDU0VD X0dTUyByZXF1aXJlcyBzZWxlY3Rpb24gb2YgbWVjaGFuaXNtLCBxdWFsaXR5IG9mPC9zcGFuPjxi ciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4 OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2Vp Z2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0 ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1h bDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0K PHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTog MTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250 LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFy dDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBu b3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7 IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiPiZuYnNwOyZuYnNwO3By b3RlY3Rpb24NCiAoUU9QKSwgYW5kIHNlcnZpY2UgKGF1dGhlbnRpY2F0aW9uLCBpbnRlZ3JpdHks IHByaXZhY3kpLjwvc3Bhbj48YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRp Y2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fw czogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0 ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7 IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ry b2tlLXdpZHRoOiAwcHg7Ij4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVs dmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50 LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1h bDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBu b25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0 LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRh bnQ7Ij4mbmJzcDsmbmJzcDtGb3INCiB0aGUgbWFuZGF0ZWQgc2VjdXJpdHkgbWVjaGFuaXNtcywg TkZTdjQuMSBzcGVjaWZpZXMgdGhhdCBhIFFPUCBvZjwvc3Bhbj48YnIgY2xhc3M9IiIgc3R5bGU9 ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9y bWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0 ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsg dGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzog MHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxzcGFuIGNsYXNzPSIiIHN0 eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6 IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsg bGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAw cHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNp bmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9uZTsgZGlz cGxheTogaW5saW5lICFpbXBvcnRhbnQ7Ij4mbmJzcDsmbmJzcDt6ZXJvDQogaXMgdXNlZCwgbGVh dmluZyBpdCB1cCB0byB0aGUgbWVjaGFuaXNtIG9yIHRoZSBtZWNoYW5pc20nczwvc3Bhbj48YnIg Y2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsg Zm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdo dDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4 dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7 IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxz cGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEy cHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13 ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7 IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9y bWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBm bG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7Ij4mbmJzcDsmbmJzcDtjb25m aWd1cmF0aW9uDQogdG8gbWFwIFFPUCB6ZXJvIHRvIGFuIGFwcHJvcHJpYXRlIGxldmVsIG9mIHBy b3RlY3Rpb24uPC9zcGFuPjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGlj YTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBz OiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRl eHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsg d2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJv a2Utd2lkdGg6IDBweDsiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2 ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQt Y2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFs OyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5v bmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQt c3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFu dDsiPiZuYnNwOyZuYnNwO0VhY2gNCiBtYW5kYXRlZCBtZWNoYW5pc20gc3BlY2lmaWVzIGEgbWlu aW11bSBzZXQgb2YgY3J5cHRvZ3JhcGhpYzwvc3Bhbj48YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQt ZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBm b250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3Bh Y2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10 cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAt d2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJm b250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1h bDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVy LXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRl eHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBw eDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9uZTsgZGlzcGxheTog aW5saW5lICFpbXBvcnRhbnQ7Ij4mbmJzcDsmbmJzcDthbGdvcml0aG1zDQogZm9yIGltcGxlbWVu dGluZyBpbnRlZ3JpdHkgYW5kIHByaXZhY3kuICZuYnNwO05GU3Y0LjEgY2xpZW50czwvc3Bhbj48 YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJw eDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdl aWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsg dGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3Jt YWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4N CjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6 IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9u dC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3Rh cnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTog bm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4 OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7Ij4mbmJzcDsmbmJzcDth bmQNCiBzZXJ2ZXJzIE1VU1QgYmUgaW1wbGVtZW50ZWQgb24gb3BlcmF0aW5nIGVudmlyb25tZW50 cyB0aGF0IGNvbXBseTwvc3Bhbj48YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2 ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQt Y2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFs OyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5v bmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQt c3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTog SGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJp YW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5v cm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3Jt OiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10 ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBv cnRhbnQ7Ij4mbmJzcDsmbmJzcDt3aXRoDQogdGhlIFJFUVVJUkVEIGNyeXB0b2dyYXBoaWMgYWxn b3JpdGhtcyBvZiBlYWNoIFJFUVVJUkVEPC9zcGFuPjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1m YW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZv bnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFj aW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRy YW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13 ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZv bnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFs OyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXIt c3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4 dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4 OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBp bmxpbmUgIWltcG9ydGFudDsiPiZuYnNwOyZuYnNwO21lY2hhbmlzbS48L3NwYW4+PGJyIGNsYXNz PSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQt c3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5v cm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5k ZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3Jk LXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8YnIgY2xh c3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9u dC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDog bm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1p bmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdv cmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxzcGFu IGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7 IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWln aHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRl eHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFs OyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9h dDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7Ij4yLjIuMS4xLjEuMi4xLg0KICZu YnNwO0tlcmJlcm9zIFY1PC9zcGFuPjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhl bHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFu dC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3Jt YWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTog bm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4 dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTog SGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJp YW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5v cm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3Jt OiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10 ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1p bHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQt dmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5n OiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5z Zm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJr aXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAh aW1wb3J0YW50OyI+Jm5ic3A7Jm5ic3A7VGhlDQogS2VyYmVyb3MgVjUgR1NTLUFQSSBtZWNoYW5p c20gYXMgZGVzY3JpYmVkIGluIFs1XSBNVVNUIGJlPC9zcGFuPjxiciBjbGFzcz0iIiBzdHlsZT0i Zm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3Jt YWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRl ci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0 ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAw cHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPHNwYW4gY2xhc3M9IiIgc3R5 bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTog bm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBs ZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBw eDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2lu ZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNw bGF5OiBpbmxpbmUgIWltcG9ydGFudDsiPiZuYnNwOyZuYnNwO2ltcGxlbWVudGVkDQogd2l0aCB0 aGUgUlBDU0VDX0dTUyBzZXJ2aWNlcyBhcyBzcGVjaWZpZWQgaW4gdGhlPC9zcGFuPjxiciBjbGFz cz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250 LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBu b3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWlu ZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29y ZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPHNwYW4g Y2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsg Zm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdo dDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4 dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7 IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0 OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiPiZuYnNwOyZuYnNwO2ZvbGxvd2lu Zw0KIHRhYmxlOjwvc3Bhbj48YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRp Y2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fw czogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0 ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7 IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ry b2tlLXdpZHRoOiAwcHg7Ij4NCjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZl dGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1j YXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7 IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9u ZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1z dHJva2Utd2lkdGg6IDBweDsiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBI ZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlh bnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9y bWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06 IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRl eHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9y dGFudDsiPlRvDQogcGFyYXBocmFzZSBpdCwgTkZTdjQueCBjbGllbnRzIGFuZCBzZXJ2ZXJzIE1V U1Qgc3VwcG9ydDwvc3Bhbj48YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRp Y2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fw czogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0 ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7 IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ry b2tlLXdpZHRoOiAwcHg7Ij4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVs dmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50 LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1h bDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBu b25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0 LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRh bnQ7Ij50aGUNCiBLZXJiZXJvcyBWNSBzZWN1cml0eSBtZWNoYW5pc20sIGJ1dCBpbnN0YWxsYXRp b25zIGFyZSBub3Q8L3NwYW4+PGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0 aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNh cHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsg dGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25l OyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0 cm9rZS13aWR0aDogMHB4OyI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhl bHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFu dC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3Jt YWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTog bm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4 dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0 YW50OyI+cmVxdWlyZWQNCiB0byB1c2UgS2VyYmVyb3MuPC9zcGFuPjxiciBjbGFzcz0iIiBzdHls ZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBu b3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxl dHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4 OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5n OiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPGJyIGNsYXNzPSIiIHN0 eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6 IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsg bGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAw cHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNp bmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8c3BhbiBjbGFzcz0i IiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0 eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3Jt YWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVu dDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1z cGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7 IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyI+SS5lLiwNCiB0aGlzOjwvc3Bhbj48YnIgY2xh c3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9u dC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDog bm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1p bmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdv cmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxiciBj bGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBm b250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0 OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0 LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsg d29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPHNw YW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJw eDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdl aWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsg dGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3Jt YWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZs b2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiPm1vdW50DQogLW8gdmVycz00 LjIsc2VjPXN5cyBzZXJ2ZXI6LyAvbW50PC9zcGFuPjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1m YW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZv bnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFj aW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRy YW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13 ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPGJyIGNsYXNzPSIiIHN0eWxlPSJmb250 LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsg Zm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNw YWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQt dHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsg LXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0i Zm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3Jt YWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRl ci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0 ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAw cHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6 IGlubGluZSAhaW1wb3J0YW50OyI+bWVhbnMNCiB0aGF0IGFueSBtYWxpY2lvdXMgdXNlciBjYW4g dXNlIGFueSBjbGllbnQgd2hpY2ggY2FuIGNvbm5lY3Q8L3NwYW4+PGJyIGNsYXNzPSIiIHN0eWxl PSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5v cm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0 dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7 IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6 IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8c3BhbiBjbGFzcz0iIiBz dHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxl OiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7 IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDog MHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFj aW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRp c3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyI+dG8NCiB0aGUgc2VydmVyIHRvIGRvIHdoYXRldmVy IHRoZXkgd2FudC48L3NwYW4+PGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0 aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNh cHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsg dGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25l OyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0 cm9rZS13aWR0aDogMHB4OyI+DQo8YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2 ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQt Y2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFs OyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5v bmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQt c3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTog SGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJp YW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5v cm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3Jt OiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10 ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBv cnRhbnQ7Ij5Jbg0KIG90aGVyIHdvcmRzLCB0aGlzIGlzIG5vdCBhIHJlZHVjdGlvbiBvZiB0aGUg YWN0dWFsIHNlY3VyaXR5IGZyb20gTkZTdjQueC48L3NwYW4+PGJyIGNsYXNzPSIiIHN0eWxlPSJm b250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1h bDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVy LXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRl eHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBw eDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8L2Rpdj4NCjwvYmxvY2txdW90 ZT4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQpUaGFua3MgZm9yIHRoZSBl eHRlbnNpdmUgZXhwbGFuYXRpb24uIEl0IHJlc29sdmVzIHRoZSBpc3N1ZSB0aGF0IEkgcGVyY2Vp dmVkLjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xh c3M9IiI+VGhhbmtzLDwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5CcmlhbjwvZGl2Pg0KPGRpdiBjbGFz cz0iIj48YnIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4NCjxk aXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBm b250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5v cm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1h bGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0 ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13 aWR0aDogMHB4OyI+DQo8YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7 IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczog bm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0 LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdo aXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tl LXdpZHRoOiAwcHg7Ij4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiIHN0eWxlPSJm b250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1h bDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVy LXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRl eHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBw eDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8YnIgY2xhc3M9IiI+DQpVbmxl c3MgSeKAmW0gbWlzdGFrZW4sIHRoaXMgaXMgYSBzZXJpb3VzIHJlZHVjdGlvbiBvZiBhY3R1YWwg c2VjdXJpdHkgZnJvbSBORlM8YnIgY2xhc3M9IiI+DQo0LngsIGFuZCBhbHNvIGZyb20gdGhlIHRp Z2h0IGNvdXBsaW5nIG1vZGVsLiBUaGlzIHNob3VsZCBiZSBjbGVhcmx5IHN0YXRlZCBpbjxiciBj bGFzcz0iIj4NCnRoZSBzZWN1cml0eSBjb25zaWRlcmF0aW9ucyBzZWN0aW9uLCBzbyB0aGF0IHBy b3RvY29sIGFkb3B0ZXJzIGFuZCB1c2VyczxiciBjbGFzcz0iIj4NCnVuZGVyc3RhbmQgdGhlIGFk ZGl0aW9uYWwgcmlza3Mgb2YgdGhlIGxvb3NlIGNvdXBsaW5nIG1vZGVsLiBGb3IgdGhpcyAmbmJz cDtyZWFzb24sPGJyIGNsYXNzPSIiPg0KSSd2ZSBtYXJrZWQgdGhlIHJldmlldyB3aXRoICZxdW90 O0hhcyBJc3N1ZXMmcXVvdDsgcmF0aGVyIHRoYW4gJnF1b3Q7SGFzIE5pdHMmcXVvdDsuPGJyIGNs YXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX188YnIgY2xhc3M9IiI+DQpuZnN2NCBtYWlsaW5nIGxpc3Q8YnIgY2xhc3M9 IiI+DQo8YSBocmVmPSJtYWlsdG86bmZzdjRAaWV0Zi5vcmciIGNsYXNzPSIiPm5mc3Y0QGlldGYu b3JnPC9hPjxiciBjbGFzcz0iIj4NCjxhIGhyZWY9Imh0dHBzOi8vd3d3LmlldGYub3JnL21haWxt YW4vbGlzdGluZm8vbmZzdjQiIGNsYXNzPSIiPmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4v bGlzdGluZm8vbmZzdjQ8L2E+PC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8 L2Rpdj4NCjxiciBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+LS0mbmJzcDs8YnIgY2xhc3M9IiI+ DQpCcmlhbiBXZWlzPGJyIGNsYXNzPSIiPg0KU2VjdXJpdHksIENTRywgQ2lzY28gU3lzdGVtczxi ciBjbGFzcz0iIj4NClRlbGVwaG9uZTogJiM0MzsxIDQwOCA1MjYgNDc5NjxiciBjbGFzcz0iIj4N CkVtYWlsOjxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48 YSBocmVmPSJtYWlsdG86YmV3QGNpc2NvLmNvbSIgY2xhc3M9IiI+YmV3QGNpc2NvLmNvbTwvYT48 L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjxiciBjbGFzcz0i Ij4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_599605AF7CB34A56A26A3DE56B805309primarydatacom_-- From nobody Tue Jan 16 10:59:50 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 20DA612E88B for ; Tue, 16 Jan 2018 10:59:49 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.7 X-Spam-Level: X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=primarydata.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fkEvJ7-dj9TF for ; Tue, 16 Jan 2018 10:59:45 -0800 (PST) Received: from us-smtp-delivery-194.mimecast.com (us-smtp-delivery-194.mimecast.com [63.128.21.194]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D810F12E874 for ; Tue, 16 Jan 2018 10:59:44 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=primarydata.com; s=mimecast20170802; t=1516129183; h=from:subject:date:message-id:to:cc:mime-version:content-type:in-reply-to:references; bh=1ZuHfuA4lR3/0/rpg1HJjrgTVE2taVEvtG7I6y7L4Ag=; b=gcnk5YHgarqZNinkZt/r7tEgBiqkwV9t2ZMLRQTS7wj2Dw0OvKp4K7Y1ZlaXgq5xZc4xihYnkNRIJu6odbgc7KNamFK2DV6XEMOAaz19Is7KxCzfHtJHXq2BEdVZoc98GJn/DI6zQK48Yn27tvHIwBREdBDbCSBNbgI7JDc3DBA= Received: from NAM01-BY2-obe.outbound.protection.outlook.com (mail-by2nam01lp0176.outbound.protection.outlook.com [216.32.181.176]) (Using TLS) by us-smtp-1.mimecast.com with ESMTP id us-mta-128-0SuIOIFEPKuGiHFYBECZAg-1; Tue, 16 Jan 2018 13:59:38 -0500 Received: from BY2PR1101MB1093.namprd11.prod.outlook.com (10.164.166.21) by BY2PR1101MB1093.namprd11.prod.outlook.com (10.164.166.21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.407.7; Tue, 16 Jan 2018 18:59:35 +0000 Received: from BY2PR1101MB1093.namprd11.prod.outlook.com ([10.164.166.21]) by BY2PR1101MB1093.namprd11.prod.outlook.com ([10.164.166.21]) with mapi id 15.20.0407.012; Tue, 16 Jan 2018 18:59:35 +0000 From: Thomas Haynes To: "Brian Weis (bew)" CC: "secdir@ietf.org" , NFSv4 , "draft-ietf-nfsv4-flex-files.all@ietf.org" Thread-Topic: [nfsv4] Secdir last call review of draft-ietf-nfsv4-flex-files-15 Thread-Index: AQHTi9WQTx5RarnLbUyAVOTsrpXN+aNwovgAgACajgCABaIqgIAAAPAA Date: Tue, 16 Jan 2018 18:59:35 +0000 Message-ID: <67066ED3-51BF-428C-A73E-8519570C104C@primarydata.com> References: <151578274278.18715.11694935076324562133@ietfa.amsl.com> <75FDDF9F-C335-4488-9EAE-679DD9727A99@primarydata.com> <2D43D657-817F-4C43-A405-E7FB83C688AD@cisco.com> <599605AF-7CB3-4A56-A26A-3DE56B805309@primarydata.com> In-Reply-To: <599605AF-7CB3-4A56-A26A-3DE56B805309@primarydata.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [63.157.6.18] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; BY2PR1101MB1093; 20:f0r5AU+lUd1cv0QS6R/zCW7DJ1r5x5FDtQWZoYN3jZ5HF3xxhfG/TFKy3c04xfgKBYt8V3JjKTYwPPtAmDUm/NxDoLaovoBC5vgF+0lSawFJSvU+89F3zWrlu5zGc38ysmjG3zYLXGHpLLMXnGOaV+K5GpkaXWRqjFe/fMI7MbU= x-ms-exchange-antispam-srfa-diagnostics: SSOS; x-ms-office365-filtering-correlation-id: 95ba478c-db1d-43a6-f9c8-08d55d134939 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(7021125)(5600026)(4604075)(3008032)(2017052603307)(7153060)(7193020); SRVR:BY2PR1101MB1093; x-ms-traffictypediagnostic: BY2PR1101MB1093: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(158342451672863)(192374486261705)(95692535739014)(21532816269658); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040470)(2401047)(8121501046)(5005006)(3002001)(3231023)(944501161)(10201501046)(93006095)(93001095)(6041268)(20161123558120)(20161123564045)(20161123562045)(20161123560045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(2016111802025)(6043046)(6072148)(201708071742011); SRVR:BY2PR1101MB1093; BCL:0; PCL:0; RULEID:(100000803101)(100110400095); SRVR:BY2PR1101MB1093; x-forefront-prvs: 0554B1F54F x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(376002)(39830400003)(396003)(346002)(366004)(39380400002)(54094003)(51914003)(252514010)(24454002)(189003)(199004)(33656002)(2950100002)(99286004)(6916009)(6116002)(3846002)(66066001)(36756003)(966005)(316002)(105586002)(6486002)(77096006)(8676002)(229853002)(2900100001)(54906003)(478600001)(3280700002)(3660700001)(5660300001)(93886005)(106356001)(7736002)(606006)(2906002)(82746002)(68736007)(230783001)(6246003)(8936002)(53936002)(14454004)(53546011)(102836004)(6506007)(25786009)(16200700003)(4326008)(81166006)(53946003)(86362001)(6436002)(6512007)(26005)(97736004)(236005)(54896002)(6306002)(59450400001)(76176011)(81156014)(83716003)(42262002)(579004)(559001)(569006); DIR:OUT; SFP:1102; SCL:1; SRVR:BY2PR1101MB1093; H:BY2PR1101MB1093.namprd11.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; x-microsoft-antispam-message-info: lLsQoz7YV6cMKr6ED1uRVT5I6ebzKJl2NFPn4a9fc/g095H4iGr45EaHFxg1BQiHJV8+xOCI96G4pWxpzcnkVQ== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM MIME-Version: 1.0 X-OriginatorOrg: primarydata.com X-MS-Exchange-CrossTenant-Network-Message-Id: 95ba478c-db1d-43a6-f9c8-08d55d134939 X-MS-Exchange-CrossTenant-originalarrivaltime: 16 Jan 2018 18:59:35.5684 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 03193ed6-8726-4bb3-a832-18ab0d28adb7 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY2PR1101MB1093 X-MC-Unique: 0SuIOIFEPKuGiHFYBECZAg-1 Content-Type: multipart/alternative; boundary="_000_67066ED351BF428CA73E8519570C104Cprimarydatacom_" Archived-At: Subject: Re: [secdir] [nfsv4] Secdir last call review of draft-ietf-nfsv4-flex-files-15 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Jan 2018 18:59:49 -0000 --_000_67066ED351BF428CA73E8519570C104Cprimarydatacom_ Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: base64 DQoNCk9uIEphbiAxNiwgMjAxOCwgYXQgMTA6NTYgQU0sIFRob21hcyBIYXluZXMgPGxvZ2h5ckBw cmltYXJ5ZGF0YS5jb208bWFpbHRvOmxvZ2h5ckBwcmltYXJ5ZGF0YS5jb20+PiB3cm90ZToNCg0K DQoNCk9uIEphbiAxMiwgMjAxOCwgYXQgMzo1NCBQTSwgQnJpYW4gV2VpcyAoYmV3KSA8YmV3QGNp c2NvLmNvbTxtYWlsdG86YmV3QGNpc2NvLmNvbT4+IHdyb3RlOg0KDQpIaSBUaG9tYXMsDQoNCk9u IEphbiAxMiwgMjAxOCwgYXQgMTE6NDEgQU0sIFRob21hcyBIYXluZXMgPGxvZ2h5ckBwcmltYXJ5 ZGF0YS5jb208bWFpbHRvOmxvZ2h5ckBwcmltYXJ5ZGF0YS5jb20+PiB3cm90ZToNCg0KSGkgQnJp YW4sDQoNClRoYW5rcyBmb3IgdGhlIHJldmlldyAtIGNvbW1lbnRzIGlubGluZS4uDQoNCk9uIEph biAxMiwgMjAxOCwgYXQgMTA6NDUgQU0sIEJyaWFuIFdlaXMgPGJld0BjaXNjby5jb208bWFpbHRv OmJld0BjaXNjby5jb20+PiB3cm90ZToNCg0KUmV2aWV3ZXI6IEJyaWFuIFdlaXMNClJldmlldyBy ZXN1bHQ6IEhhcyBJc3N1ZXMNCg0KSSBoYXZlIHJldmlld2VkIHRoaXMgZG9jdW1lbnQgYXMgcGFy dCBvZiB0aGUgc2VjdXJpdHkgZGlyZWN0b3JhdGUncyBvbmdvaW5nDQplZmZvcnQgdG8gcmV2aWV3 IGFsbCBJRVRGIGRvY3VtZW50cyBiZWluZyBwcm9jZXNzZWQgYnkgdGhlIElFU0cuIFRoZXNlIGNv bW1lbnRzDQp3ZXJlIHdyaXR0ZW4gcHJpbWFyaWx5IGZvciB0aGUgYmVuZWZpdCBvZiB0aGUgc2Vj dXJpdHkgYXJlYSBkaXJlY3RvcnMuIERvY3VtZW50DQplZGl0b3JzIGFuZCBXRyBjaGFpcnMgc2hv dWxkIHRyZWF0IHRoZXNlIGNvbW1lbnRzIGp1c3QgbGlrZSBhbnkgb3RoZXIgbGFzdCBjYWxsDQpj b21tZW50cy4NCg0KVGhpcyBkb2N1bWVudCBkZWZpbmVzIHRoZSBQYXJhbGxlbCBOZXR3b3JrIEZp bGUgU3lzdGVtIChwTkZTKSwgd2hpY2ggYWxsb3dzIGENCnN0b3JhZ2Ugc3lzdGVtIHRvIHN0b3Jl IHRoZSBtZXRhZGF0YSBmb3IgZmlsZXMgb250byBhIG1ldGFkYXRhIHNlcnZlciwgYW5kIGRhdGEN Cm9mIHRoYXQgZmlsZSBvbnRvIGEgc2VwYXJhdGUgc3RvcmFnZSBkZXZpY2UuIFRoZSBkb2N1bWVu dCBmb2N1c2VzIG9uIHRoZQ0KaW50ZXJhY3Rpb24gYmV0d2VlbiB0aGUgdHdvIHR5cGVzIG9mIHNl cnZlcnMsIGFuZCB0aGUgcmVxdWlyZW1lbnRzIG9mIGNsaWVudHMNCnVzaW5nIGEgcE5GUyBzeXN0 ZW0uDQoNClRoZSBkb2N1bWVudCBkZXNjcmliZXMgdHdvIG1vZGVscyBieSB3aGljaCB0aGUgbWV0 YWRhdGEgc2VydmVyIGFuZCBmaWxlIHN0b3JhZ2UNCnNlcnZlciBjYW4gY29tbXVuaWNhdGUuIE9u ZSBpcyBhIOKAnHRpZ2h0IGNvdXBsaW5nIG1vZGVs4oCdLCBpbiB3aGljaCB0aGUgdHdvIHR5cGVz DQpvZiBzZXJ2ZXJzIGRpcmVjdGx5IGNvbW11bmljYXRlLiBJbiB0aGlzIG1vZGVsIHRoZSBtZXRh ZGF0YSBzZXJ2ZXIgY2FuIGVuc3VyZQ0KdGhhdCBmaWxlIGFjY2VzcyBjb250cm9sIHN0YXRlIGlz IHN5bmNocm9uaXplZCBiZXR3ZWVuIHRoZSB0d28gc2VydmVycywgYW5kIEkNCmJlbGlldmUgdGhh dCBsZXZlbCBvZiBhY2Nlc3MgY29udHJvbCBpcyBlcXVpdmFsZW50IHRvIE5GUyB2NC54IHRvZGF5 LiBGcm9tIGENCnNlY3VyaXR5IGNvbnNpZGVyYXRpb25zIHBlcnNwZWN0aXZlLCB0aGlzIGlzIHBl cmhhcHMgYmVzdCBzdW1tYXJpemVkIGluIFNlY3Rpb24NCjIuMjoNCg0K4oCcV2l0aCB0aWdodGx5 IGNvdXBsZWQgc3RvcmFnZSBkZXZpY2VzLCB0aGUgbWV0YWRhdGEgc2VydmVyIHNldHMgdGhlDQog dXNlciBhbmQgZ3JvdXAgb3duZXJzLCBtb2RlIGJpdHMsIGFuZCBBQ0wgb2YgdGhlIGRhdGEgZmls ZSB0byBiZSB0aGUNCiBzYW1lIGFzIHRoZSBtZXRhZGF0YSBmaWxlLiAgQW5kIHRoZSBjbGllbnQg bXVzdCBhdXRoZW50aWNhdGUgd2l0aCB0aGUNCiBzdG9yYWdlIGRldmljZSBhbmQgZ28gdGhyb3Vn aCB0aGUgc2FtZSBhdXRob3JpemF0aW9uIHByb2Nlc3MgaXQgd291bGQNCiBnbyB0aHJvdWdoIHZp YSB0aGUgbWV0YWRhdGEgc2VydmVyLuKAnQ0KDQpUaGUgb3RoZXIgbW9kZWwgaXMgYSDigJxsb29z ZSBjb3VwbGluZyBtb2RlbOKAnSwgaW4gd2hpY2ggdGhlIGNsaWVudCBpcw0KYXV0aGVudGljYXRl ZCBhbmQgYXV0aG9yaXplZCBieSB0aGUgbWV0YWRhdGEgc2VydmVyLCBhbmQgaXMgZ2l2ZW4gYWNj ZXNzIHRvIHRoZQ0KZmlsZSBzZXJ2ZXIgdGhyb3VnaCB0aGUgdXNlIGNyZWRlbnRpYWxzLiBIb3dl dmVyLCB0aGVyZSBpcyBubyBkaXJlY3QNCmNvbW11bmljYXRpb25zIGJldHdlZW4gdGhlIG1ldGFk YXRhIHNlcnZlciBhbmQgdGhlIGZpbGUgc2VydmVyLiBUaGUgbWV0YWRhdGENCnNlcnZlciBkb2Vz IG5vdCBzZWVtIHRvIHByb3ZpZGUgYSBmaW5lIGdyYWluZWQgYWNjZXNzIGNvbnRyb2wgdG8gZmls ZXMgb24gdGhlDQpmaWxlIHNlcnZlciwgYnV0IGluc3RlYWQgcmVsaWVzIHVwb24gdGhlIGNsaWVu dCB0byBlbmZvcmNlIGEgbGVzcyBncmFudWxhcg0KbGV2ZWwgb2YgYWNjZXNzIGNvbnRyb2wuDQoN ClsxXSBObywgdGhlcmUgaXMgc3RpbGwgZGlyZWN0IGNvbW11bmljYXRpb24gYmV0d2VlbiB0aGUg bWV0YWRhdGEgc2VydmVyIGFuZCB0aGUgZmlsZSBzZXJ2ZXIuDQoNClRoZSBkaWZmZXJlbmNlIGlz IHRoYXQgaXQgaXMgdmlhIGEgc3RvcmFnZSBwcm90b2NvbCwgaW4gdGhpcyBjYXNlIE5GUy4NCg0K VGhlIGFjY2VzcyBjb250cm9sIGlzIGVuZm9yY2VkIGJ5IHRoZSBtZXRhZGF0YSBzZXJ2ZXIuIFRo ZSBjbGllbnQgb25seSBnZXQgYWNjZXNzDQp0byB0aGUgZmlsZSBpZiBpdCBjYW4gZ2V0IGEgbGF5 b3V0LiBUaGUgbGF5b3V0IGNhbiBlaXRoZXIgcHJvdmlkZSByZWFkL3dyaXRlIGFjY2Vzcw0Kb3Ig b25seSByZWFkIGFjY2Vzcy4NCg0KVGhlIG1ldGFkYXRhIHNlcnZlciBjYW4gcmV2b2tlIHRoYXQg YWNjZXNzIGF0IGFueSBwb2ludCwgc28gaXQgaXMgbm90DQpjb3JyZWN0IHRvIHNheSB0aGF0IGl0 IGRlcGVuZHMgb24gdGhlIGNsaWVudCB0byBlbmZvcmNlIGEgbGVzcyBncmFudWxhciBsZXZlbA0K b2YgYWNjZXNzIGNvbnRyb2wuDQoNClRoYW5rcyBmb3IgdGhlIGNsYXJpZmljYXRpb24uIFRvIGEg bm9uLU5GUyBleHBlcnQgdGhlIHJlbGF0aW9uc2hpcCBiZXR3ZWVuIGxheW91dHMgYW5kDQphY2Nl c3MgY29udHJvbCAgd2FzbuKAmXQgb2J2aW91cy4gSSB3b25kZXIgaWYgdGhpcyBkaXNjdXNzaW9u IGNvdWxkIGJlIGFkZGVkIHRvIFNlY3VyaXR5DQpDb25zaWRlcmF0aW9ucz8NCg0KDQpIaSBCcmlh biwNCg0KSeKAmXZlIGFscmVhZHkgZ290IHRoYXQgKGFuZCB5ZXMsIEkgdW5kZXJzdGFuZCBpdCBp cyBub3Qgc3VmZmljaWVudCBpZiBJIGhhdmUgdG8gc3BlbGwgaXQgb3V0IDotKToNCg0KMTUuICBT ZWN1cml0eSBDb25zaWRlcmF0aW9ucw0KLi4uDQogICBUaGUgbWV0YWRhdGEgc2VydmVyIGlzIHBy aW1hcmlseSByZXNwb25zaWJsZSBmb3Igc2VjdXJpbmcgdGhlIGRhdGENCiAgIHBhdGguICBJdCBo YXMgdG8gYXV0aGVudGljYXRlIHRoZSBjbGllbnQgYWNjZXNzIGFuZCBwcm92aWRlDQogICBhcHBy b3ByaWF0ZSBjcmVkZW50aWFscyB0byB0aGUgY2xpZW50IHRvIGFjY2VzcyBkYXRhIGZpbGVzIG9u IHRoZQ0KICAgc3RvcmFnZSBkZXZpY2UuICBGaW5hbGx5LCBpdCBpcyByZXNwb25zaWJsZSBmb3Ig cmV2b2tpbmcgYWNjZXNzIGZvciBhDQogICBjbGllbnQgdG8gdGhlIHN0b3JhZ2UgZGV2aWNlLg0K DQogICBUaGUgbWV0YWRhdGEgc2VydmVyIGVuZm9yY2VzIHRoZSBmaWxlIGFjY2Vzcy1jb250cm9s IHBvbGljeSBhdA0KICAgTEFZT1VUR0VUIHRpbWUuICBUaGUgY2xpZW50IHNob3VsZCB1c2UgUlBD IGF1dGhvcml6YXRpb24gY3JlZGVudGlhbHMNCiAgIGZvciBnZXR0aW5nIHRoZSBsYXlvdXQgZm9y IHRoZSByZXF1ZXN0ZWQgaW9tb2RlIChSRUFEIG9yIFJXKSBhbmQgdGhlDQogICBzZXJ2ZXIgdmVy aWZpZXMgdGhlIHBlcm1pc3Npb25zIGFuZCBBQ0wgZm9yIHRoZXNlIGNyZWRlbnRpYWxzLA0KICAg cG9zc2libHkgcmV0dXJuaW5nIE5GUzRFUlJfQUNDRVNTIGlmIHRoZSBjbGllbnQgaXMgbm90IGFs bG93ZWQgdGhlDQogICByZXF1ZXN0ZWQgaW9tb2RlLiAgSWYgdGhlIExBWU9VVEdFVCBvcGVyYXRp b24gc3VjY2VlZHMgdGhlIGNsaWVudA0KICAgcmVjZWl2ZXMsIGFzIHBhcnQgb2YgdGhlIGxheW91 dCwgYSBzZXQgb2YgY3JlZGVudGlhbHMgYWxsb3dpbmcgaXQgSS9PDQogICBhY2Nlc3MgdG8gdGhl IHNwZWNpZmllZCBkYXRhIGZpbGVzIGNvcnJlc3BvbmRpbmcgdG8gdGhlIHJlcXVlc3RlZA0KICAg aW9tb2RlLiAgV2hlbiB0aGUgY2xpZW50IGFjdHMgb24gSS9PIG9wZXJhdGlvbnMgb24gYmVoYWxm IG9mIGl0cw0KICAgbG9jYWwgdXNlcnMsIGl0IE1VU1QgYXV0aGVudGljYXRlIGFuZCBhdXRob3Jp emUgdGhlIHVzZXIgYnkgaXNzdWluZw0KICAgcmVzcGVjdGl2ZSBPUEVOIGFuZCBBQ0NFU1MgY2Fs bHMgdG8gdGhlIG1ldGFkYXRhIHNlcnZlciwgc2ltaWxhciB0bw0KICAgaGF2aW5nIE5GU3Y0IGRh dGEgZGVsZWdhdGlvbnMuDQoNCiAgIElmIGFjY2VzcyBpcyBhbGxvd2VkLCB0aGUgY2xpZW50IHVz ZXMgdGhlIGNvcnJlc3BvbmRpbmcgKFJFQUQgb3IgUlcpDQogICBjcmVkZW50aWFscyB0byBwZXJm b3JtIHRoZSBJL08gb3BlcmF0aW9ucyBhdCB0aGUgZGF0YSBmaWxlJ3Mgc3RvcmFnZQ0KICAgZGV2 aWNlcy4gIFdoZW4gdGhlIG1ldGFkYXRhIHNlcnZlciByZWNlaXZlcyBhIHJlcXVlc3QgdG8gY2hh bmdlIGENCiAgIGZpbGUncyBwZXJtaXNzaW9ucyBvciBBQ0wsIGl0IFNIT1VMRCByZWNhbGwgYWxs IGxheW91dHMgZm9yIHRoYXQgZmlsZQ0KICAgYW5kIHRoZW4gTVVTVCBmZW5jZSBvZmYgYW55IGNs aWVudHMgc3RpbGwgaG9sZGluZyBvdXRzdGFuZGluZyBsYXlvdXRzDQogICBmb3IgdGhlIHJlc3Bl Y3RpdmUgZmlsZXMgYnkgaW1wbGljaXRseSBpbnZhbGlkYXRpbmcgdGhlIHByZXZpb3VzbHkNCiAg IGRpc3RyaWJ1dGVkIGNyZWRlbnRpYWwgb24gYWxsIGRhdGEgZmlsZSBjb21wcmlzaW5nIHRoZSBm aWxlIGluDQogICBxdWVzdGlvbi4gIEl0IGlzIFJFUVVJUkVEIHRoYXQgdGhpcyBiZSBkb25lIGJl Zm9yZSBjb21taXR0aW5nIHRvIHRoZQ0KICAgbmV3IHBlcm1pc3Npb25zIGFuZC9vciBBQ0wuICBC eSByZXF1ZXN0aW5nIG5ldyBsYXlvdXRzLCB0aGUgY2xpZW50cw0KICAgd2lsbCByZWF1dGhvcml6 ZSBhY2Nlc3MgYWdhaW5zdCB0aGUgbW9kaWZpZWQgYWNjZXNzIGNvbnRyb2wgbWV0YWRhdGEuDQog ICBSZWNhbGxpbmcgdGhlIGxheW91dHMgaW4gdGhpcyBjYXNlIGlzIGludGVuZGVkIHRvIHByZXZl bnQgY2xpZW50cw0KICAgZnJvbSBnZXR0aW5nIGFuIGVycm9yIG9uIEkvT3MgZG9uZSBhZnRlciB0 aGUgY2xpZW50IHdhcyBmZW5jZWQgb2ZmLg0KDQpIb3cgYWJvdXQ6DQoNCiAgIElmIGFjY2VzcyBp cyBhbGxvd2VkLCB0aGUgY2xpZW50IHVzZXMgdGhlIGNvcnJlc3BvbmRpbmcgKFJFQUQgb3IgUlcp DQogICBjcmVkZW50aWFscyB0byBwZXJmb3JtIHRoZSBJL08gb3BlcmF0aW9ucyBhdCB0aGUgZGF0 YSBmaWxlJ3Mgc3RvcmFnZQ0KICAgZGV2aWNlcy4g4oCmDQoNCmJlY29tZXMNCg0KICBUaGUgY29t YmluYXRpb24gb2YgZmlsZSBoYW5kbGUsIHN5bnRoZXRpYyB1aWQsIGFuZCBnaWQgaW4gdGhlIGxh eW91dA0KICBhcmUgdGhlIHdheSB0aGF0IHRoZSBtZXRhZGF0YSBzZXJ2ZXIgZW5mb3JjZXMgYWNj ZXNzIGNvbnRyb2wgdG8gdGhlDQogIGRhdGEgc2VydmVyLiBUaGUgZGlyZWN0b3J5IG5hbWVzcGFj ZSBvbiB0aGUgc3RvcmFnZSBkZXZpY2UgU0hPVUxEDQogIG9ubHkgYmUgYWNjZXNzaWJsZSB0byB0 aGUgbWV0YWRhdGEgc2VydmVyIGFuZCBub3QgdGhlIGNsaWVudHMuIEluIHRoYXQgY2FzZSwNCiAg dGhlIGNsaWVudCBvbmx5IGhhcyBhY2Nlc3MgdG8gZmlsZSBoYW5kbGVzIG9mIGZpbGUgb2JqZWN0 cyBhbmQgbm90DQogIGRpcmVjdG9yeSBvYmplY3RzLiBUaHVzLCBnaXZlbiBhIGZpbGUgaGFuZGxl IGluIGEgbGF5b3V0LCBpdCBpcyBub3QNCiAgcG9zc2libGUgdG8gZ3Vlc3MgdGhlIHBhcmVudCBk aXJlY3RvcnkgZmlsZSBoYW5kbGUuIEZ1cnRoZXIsIGFzIHRoZQ0KICBkYXRhIGZpbGUgcGVybWlz c2lvbnMgb25seSBhbGxvdyB0aGUgZ2l2ZW4gc3ludGhldGljIHVpZCByZWFkL3dyaXRlDQogIHBl cm1pc3Npb24gYW5kIHRoZSBnaXZlbiBzeW50aGV0aWMgZ2lkIHJlYWQgcGVybWlzc2lvbiwga25v d2luZw0KICB0aGUgc3ludGhldGljIGlkcyBvZiBvbmUgZmlsZSBkb2VzIG5vdCBuZWNlc3Nhcmls eSBhbGxvdyBhY2Nlc3MgdG8gYW55DQogIG90aGVyIGRhdGEgZmlsZSBvbiB0aGUgc3RvcmFnZSBk ZXZpY2UuDQoNCiAgVGhlIG1ldGFkYXRhIHNlcnZlciBjYW4gYWxzbyBkZW55IGFjY2VzcyBhdCBh bnkgdGltZSBieSBmZW5jaW5nDQogIHRoZSBkYXRhIGZpbGUsIHdoaWNoIG1lYW5zIGNoYW5naW5n IHRoZSBzeW50aGV0aWMgaWRzLiBJbiB0dXJuLCB0aGF0DQogIGZvcmNlcyB0aGUgY2xpZW50IHRv IHJldHVybiBpdHMgY3VycmVudCBsYXlvdXQgYW5kIGdldCBhIG5ldyBsYXlvdXQgaWYNCiAgaXQg d2FudHMgdG8gY29udGludWUgSU8gdG8gdGhlIGRhdGEgZmlsZS4NCg0KICBJZiB0aGUgY29uZmln dXJhdGlvbiBvZiB0aGUgc3RvcmFnZSBkZXZpY2UgaXMgc3VjaCB0aGF0IGNsaWVudHMNCiAgY2Fu IGFjY2VzcyB0aGUgZGlyZWN0b3J5IG5hbWVzcGFjZSwgdGhlbiB0aGUgYWNjZXNzIGNvbnRyb2wN CiAgZGVncmFkZXMgdG8gdGhhdCBvZiBhIHR5cGljYWwgTkZTIHNlcnZlciB3aXRoIGV4cG9ydHMg d2l0aCBhDQogIHNlY3VyaXR5IGZsYXZvciBvZiBBVVRIX1NZUy4gIEFueSBjbGllbnQgd2hpY2gg aXMgYWxsb3dlZA0KICBhY2Nlc3MgY2FuIGZvcmdlIGNyZWRlbnRpYWxzIHRvIGFjY2VzcyBhbnkg ZGF0YSBmaWxlLiBUaGUNCiAgY2F2ZWF0IGlzIHRoYXQgdGhlIHJvZ3VlIGNsaWVudCBtaWdodCBo YXZlIG5vIGtub3dsZWRnZSBvZg0KICB0aGUgZGF0YSBmaWxl4oCZcyB0eXBlIG9yIHBvc2l0aW9u IGluIHRoZSBtZXRhZGF0YSBkaXJlY3RvcnkNCiAgbmFtZXNwYWNlLg0KDQogICBJZiBhY2Nlc3Mg aXMgYWxsb3dlZCwgdGhlIGNsaWVudCB1c2VzIHRoZSBjb3JyZXNwb25kaW5nIChSRUFEIG9yIFJX KQ0KICAgY3JlZGVudGlhbHMgdG8gcGVyZm9ybSB0aGUgSS9PIG9wZXJhdGlvbnMgYXQgdGhlIGRh dGEgZmlsZSdzIHN0b3JhZ2UNCiAgIGRldmljZXMuIOKApg0KDQpPciBkbyB5b3Ugd2FudCBtZSB0 byBwdWxsIHRoYXQgbmV3IHRleHQgaW50byBhIG5ldyBzdWJzZWN0aW9uIDE1LjEgYW5kDQpzbGFt IHRoZSBvdGhlciBzdWJzZWN0aW9ucyBkb3duPw0KDQoNCg0KDQoNClRoZSBTZWN1cml0eSBDb25z aWRlcmF0aW9ucyBzZWN0aW9uIGlzIHdlbGwtd3JpdHRlbiBhbmQgaGVscGZ1bC4gSSBkbyBoYXZl IHNvbWUNCnN1Z2dlc3Rpb25zIGZvciBpbXByb3ZpbmcgaXQsICBhbmQgYWxzbyBzb21lIHF1ZXN0 aW9ucy4NCg0KKDEpIFNlY3Rpb24gMi4yOiBzaG91bGQgdGhlIOKAnHJlY29tbWVuZGVk4oCdIGlu IHRoZSBOb3RlIGJlIFJFQ09NTUVOREVEPw0KUmVzdHJpY3RpbmcgYWNjZXNzIGNvbnRyb2wgdG8g anVzdCBzdXBlcnVzZXIgaGF2ZSBhY2Nlc3MgdG8gdGhlIHN0b3JhZ2UgZGV2aWNlDQpzZWVtcyBs aWtlIGEgdmFsdWFibGUgYWR2aWNlLg0KDQpzdXJlDQoNCg0KKDIpIFNlY3Rpb24gMi4yOiBUaGUg Tk9URSBwcm9iYWJseSBzaG91bGQgcHJvdmlkZSBndWlkYW5jZSByZWdhcmRpbmcgcHJvdGVjdGlu Zw0KdGhlIG5ldHdvcmsgY29ubmVjdGlvbnMgYmV0d2VlbiB0aGUgbWV0YWRhdGEgc2VydmVyIGFu ZCB0aGUgZmlsZSBzZXJ2ZXIuIEZvcg0KZXhhbXBsZSwgc29tZXRoaW5nIGxpa2U6IOKAnENvbW11 bmljYXRpb25zIGJldHdlZW4gdGhlIG1ldGFkYXRhIHNlcnZlciBhbmQgZmlsZQ0Kc2VydmVyIG5l ZWQgdG8gc2VjdXJlZC4gSWYgdGhlcmUgaXMgbm90IGFkZXF1YXRlIHBoeXNpY2FsIHNlY3VyaXR5 IChpLmUuLCB0aGUNCnNlcnZlcnMgYXJlIG5vdCBjby1sb2NhdGVkIGluIGEgcGh5c2ljYWxseSBz ZWN1cmUgYXJlYSksIHRoZWlyIGNvbW11bmljYXRpb25zDQpNVVNUIGJlIHByb3RlY3RlZCBmb3Ig Y29uZmlkZW50aWFsaXR5IChlLmcuLCB1c2luZyBUTFMgb3IgSVBzZWMpLuKAnQ0KDQpObywgdGhl IE1VU1QgaXMgdG9vIHN0cm9uZyBoZXJlLiBXZSBjYW4gcmVjb21tZW5kIHByb2NlZHVyZXMsIHdl IGNhbiBub3QgUkVRVUlSRSB0aGVtLg0KDQpJIGFtIGZpbmUgd2l0aDoNCg0KQ29tbXVuaWNhdGlv bnMgYmV0d2VlbiB0aGUgbWV0YWRhdGEgc2VydmVyIGFuZCBmaWxlDQpzZXJ2ZXIgU0hPVUxEIGJl IHNlY3VyZWQuIElmIHRoZXJlIGlzIG5vdCBhZGVxdWF0ZSBwaHlzaWNhbCBzZWN1cml0eSAoaS5l LiwgdGhlDQpzZXJ2ZXJzIGFyZSBub3QgY28tbG9jYXRlZCBpbiBhIHBoeXNpY2FsbHkgc2VjdXJl IGFyZWEpLCB0aGVpciBjb21tdW5pY2F0aW9ucw0KU0hPVUxEIGJlIHByb3RlY3RlZCBmb3IgY29u ZmlkZW50aWFsaXR5IChlLmcuLCB1c2luZyBUTFMgb3IgSVBzZWMpLuKAnQ0KDQpJIHVuZGVyc3Rh bmQgdGhlIGhlc2l0YXRpb24gdG8gbWFrZSBpdCBhIE1VU1QsIGJlY2F1c2UgaXTigJlzIG9uIGEg cHJvdG9jb2wNCnRoYXQgaXNu4oCZdCBkZXNjcmliZWQgaW4gdGhpcyBkb2N1bWVudC4gQnV0IEkg dGhpbmsgaXTigJlzIHJlYXNvbmFibGUgdG8gZGVzY3JpYmUNCmEgcmlzayBhbmQgbWFrZSBhIHJl cXVpcmVtZW50IHRoYXQgdGhlIHJpc2sgYmUgbWl0aWdhdGVkLg0KDQpJIGRvIG5vdCBkaXNhZ3Jl ZSB3aXRoIHRoYXQgc3RhdGVtZW50Lg0KDQpDZXJ0YWlubHkgaXTigJlzIG5vdA0KcmVhc29uYWJs ZSB0byByZXF1aXJlIGEgcGFydGljdWxhciBtZXRob2QgdG8gYmUgdXNlZCB0byBwcm90ZWN0IHRo ZSBwcm90b2NvbA0KKHdoaWNoIGlzIHdoeSBJIHN1Z2dlc3RlZCDigJxlLmcuLCB1c2luZyBUTFMg b3IgSVBzZWPigJ0gYWJvdmUgcmF0aGVyIHRoYW4g4oCcaS5lLuKAnSkuDQoNCldpdGggdG9kYXni gJlzIHBlcnZhc2l2ZSBwcml2YWN5IHRocmVhdHMgdG8gbmV0d29yayB0cmFmZmljIGl04oCZcyBo YXJkIHRvDQpqdXN0aWZ5IGFsbG93aW5nIG1ldGFkYXRhIHRvIHRyYXZlcnNlIHVucHJvdGVjdGVk IG5ldHdvcmtzIGFzIGNsZWFyLXRleHQNCihpLi5lLCBhdmFpbGFibGUgdG8gIHBhc3NpdmUgZWF2 ZXNkcm9wcGVycykuIEl04oCZcyBhbHNvIGhhcmQgb3IgdG8ganVzdGlmeSBhbGxvd2luZw0Kc2Vj dXJpdHktcmVsZXZlbnQgcHJvdG9jb2xzIHRvIGJlIHRyYW5zZmVycmluZyBpdCB3aXRob3V0IGNy eXB0b2dyYXBoaWMgaW50ZWdyaXR5DQpwcm90ZWN0aW9uLiBJdCBzZWVtcyBpbXBvcnRhbnQgdG8g cmVtaW5kIHByb3RvY29sIGRldmVsb3BlcnMgdGhhdCBib3RoDQpjb25jZXJucyBhcmUgYXBwbGlj YWJsZS4gSG93IGFib3V0IHNvbWV0aGluZyBsaWtlIHRoaXMsIHdoZXJlIG1vcmUgcmF0aW9uYWxl DQppcyBnaXZlbi4gTm90ZSB0aGF0IHRoZSByZXF1aXJlbWVudCB0aGF0IHRoZSBwcm90b2NvbCBt dXN0IGJlIHByb3RlY3RlZCwgYnV0DQpubyBwYXJ0aWN1bGFyIG1ldGhvZCBvZiBwcm90ZWN0aW9u IGlzIG5vdCBtYW5kYXRlZC4NCg0KIkNvbW11bmljYXRpb25zIGJldHdlZW4gdGhlIG1ldGFkYXRh IHNlcnZlciBhbmQgZmlsZQ0Kc2VydmVyIE1VU1QgYmUgc2VjdXJlIGZyb20gZWF2ZXNkcm9wcGVy cyBhbmQgbWFuLWluLXRoZS1taWRkbGUgcHJvdG9jb2wNCnRhbXBlcmluZy4gVGhlIHNlY3VyaXR5 IG1lYXN1cmUgY291bGQgYmUgZHVlIHRvIHBoeXNpY2FsIHNlY3VyaXR5IChlLmcuLCB0aGUNCnNl cnZlcnMgYXJlIGNvLWxvY2F0ZWQgaW4gYSBwaHlzaWNhbGx5IHNlY3VyZSBhcmVhKSwgZnJvbSBl bmNyeXB0ZWQgY29tbXVuaWNhdGlvbnMsDQpvciBzb21lIG90aGVyIHRlY2huaXF1ZS7igJ0NCg0K DQpJ4oCZbSBzdGlsbCBoZXNpdGFudCwgaW4gcGFydCBiZWNhdXNlIEkgY2Fu4oCZdCBtYWtlIGFu IGlyb25jbGFkIHJ1bGUgYXMgYSBzdGFuZGFyZOKAmXMNCmF1dGhvciB0aGF0IEkga25vdyBJIGFt IGdvaW5nIHRvIHZpb2xhdGUgd2l0aCBteSBvd24gaW1wbGVtZW50YXRpb24uDQoNCkFsc28sIEkg a25vdyB0aGF0IHRoZXJlIG1pZ2h0IGJlIGV4aXN0ZW50IHN0b3JhZ2UgZGV2aWNlcyB3aGljaCBk byBub3Qgc3VwcG9ydA0KTkZTIG92ZXIgVExTL0lQc2VjL2V0Yy4gWWVzLCBwaHlzaWNhbCBzZWN1 cml0eSBpcyB0aGUgYW5zd2VyIGhlcmUsIGJ1dCBJIGNhbm5vdA0KaW4gZnVsbCBjb25maWRlbmNl IGV4cGVjdCB0aGF0IGFuIGFjdHVhbCBkZXBsb3ltZW50IG1lZXRzIGFsbCBvZiB0aGVzZSBjcml0 ZXJpYS4NCkF0IHNvbWUgcG9pbnQsIHRoZSBidXJkZW4gaXMgb2ZmIG9mIHRoZSBwcm90b2NvbCBp bXBsZW1lbnRhdGlvbiBhbmQgb250byB0aGUNCmRlcGxveW1lbnQuDQoNCklmIHdlIGNoYW5nZSB0 aGUgTVVTVCB0byBhIFNIT1VMRCwgSSBhbSBwZXJmZWN0bHkgZmluZSBtYWtpbmcgdGhlIGNoYW5n ZS4gOi0pDQoNCg0KDQoNCg0KQnkgdGhlIHdheSwgbm9uZSBvZiB0aGUgb3RoZXIgbGF5b3V0IHR5 cGVzIG1ha2UgdGhpcyB0eXBlIG9mIHJlcXVpcmVtZW50IG9uDQp0aGVpciBjb250cm9sIHByb3Rv Y29scy4gVGhlIG92ZXJhbGwgc2VjdXJpdHkgb2YgdGhlIGRhdGEgbGllcyBpbiB0aGUgY29tYmlu YXRpb24NCm9mIG1ldGFkYXRhIHNlcnZlciwgc3RvcmFnZSBkZXZpY2UsIGFuZCBjbGllbnQuDQoN Cg0KDQoNCg0KKDMpIEZyb20gdGhlIGRlc2NyaXB0aW9uIG9mIHN5bnRoZXRpYyB1aWRzL2dpZHMg aW4gU2VjdGlvbiAyLjIsIEkgYmVsaWV2ZSB0aGF0DQp0aGUgZnVsbCByYW5nZSBvZiBmaWxlIHBl cm1pc3Npb25zIChlLmcuLCBvd25lciByL3cveCkgIGlzIGhvbm9yZWQgaW4gdGhlDQp0aWdodGx5 IGNvdXBsZWQgbW9kZWwsIGJ1dCBhcmUgcmVzdHJpY3RlZCBpbiB0aGUgbG9vc2VseSBjb3VwbGVk IG1vZGVsIHRvDQrigJxvd25lciByL3figJ0sIOKAnGdyb3VwIHLigJ0uIElmIHRoYXQgaXMgY29y cmVjdCwgSSB0aGluayB0aGUgc2VjdXJpdHkgY29uc2lkZXJhdGlvbnMNCnNob3VsZCBleHBsaWNp dGx5IG1lbnRpb24gdGhhdCB0aGUgZWZmZWN0IG9mIGFjY2VzcyBwZXJtaXNzaW9ucyBpcyByZWR1 Y2VkIG9uDQp0aGUgZmlsZSBzZXJ2ZXIgZmlsZXMuDQoNClsyXSBJIHRoaW5rIHRoZSBjb25mdXNp b24gaGVyZSBpcyB0aGF0IHRoZSBmaWxlcyBvbiBzdG9yYWdlIGRldmljZSBhcmUgbm90DQppbiB0 aGUgZmlsZSBoaWVyYXJjaHkgYXMgc2VlbiBvbiB0aGUgbWV0YWRhdGEgc2VydmVyLg0KDQpPbiBh IGZpbGUgYnkgZmlsZSBiYXNpcyBvbiB0aGUgc3RvcmFnZSBkZXZpY2UsIHdlIGFyZSBnaXZpbmcg dGhlIGNsaWVudCBlaXRoZXINCndyaXRlIG1vZGlmaWNhdGlvbiBhY2Nlc3MsIHJlYWQgYWNjZXNz LCBvciBubyBhY2Nlc3MgYXQgYWxsLiBUaGUgY2xpZW50IGNhbm5vdA0KcmVtb3ZlIHRoZSBmaWxl IChpdCB3b3VsZCBuZWVkIHRvIGtub3cgdGhlIHBhcmVudCBkaXJlY3RvcnkgRkggYW5kIHRoZQ0K bmFtZSBvZiB0aGUgZmlsZSAtIG5laXRoZXIgb2Ygd2hpY2ggaXQgaGFzKS4gIEl0IGNhbiBlZmZl Y3RpdmVseSByZW1vdmUgdGhlIGNvbnRlbnQNCmlmIGl0IGhhcyB3cml0ZSBwZXJtaXNzaW9uIChi dXQgbm90aGluZyB3b3VsZCBwcmV2ZW50IHRoaXMgaW4gYSB0aWdodGx5DQpjb3VwbGVkIG1vZGVs KS4NCg0KR290IGl0LCB0aGFua3MuDQoNCg0KDQoNCg0KDQooNCkgU2VjdGlvbiAyLjIuIEluIHRo aXMgcGhyYXNlIOKAnGl0IG1heSBiZSBhc3NpZ25lZCBzb21lIHJhbmRvbSBzeW50aGV0aWMNCnVp ZC9naWQgdG8gZGVueSBhY2Nlc3PigJ0sIHdvdWxkIGEgYmV0dGVyIHdvcmQgZm9yIOKAnHJhbmRv beKAnSBiZSDigJx1bnVzZWTigJ0gb3INCuKAnHVucHJlZGljdGFibGXigJ0/IEFsc28gd2hhdCBp cyB0aGUgc2VjdXJpdHkgdmFsdWUgaW50ZW5kZWQgYnkgdGhlIHVzZSBvZiBhDQrigJxyYW5kb23i gJ0gdmFsdWUgZm9yIHN5bnRoZXRpYyB1aWRzL2dpZHM/DQoNCg0KSW4gYW4gZWFybGllciByZXZp ZXcgKGJ5IExpbmRhIER1bmJhciksIHRoYXQgcGhyYXNlIHdhcyBjaGFuZ2VkOg0KDQoNCiBPbiB0 aGUgc3RvcmFnZSBkZXZpY2UsIGl0IG1heSBiZSBhc3NpZ25lZCBzb21lIHJhbmRvbSBzeW50aGV0 aWMgdWlkLw0KIGdpZCB0byBkZW55IGFjY2VzczoNCg0KIC1ydy1yLS0tLS0gICAgMSAxOTQ1MiAg IDI4NDE4ICAgIDE2OTcgRGVjICA0IDExOjMxIGRhdGFfb21waGEuYw0KDQogV2hlbiB0aGUgZmls ZSBpcyBvcGVuZWQgb24gYSBjbGllbnQgYW5kIGFjY2Vzc2VkLCBpdCB3aWxsIHRyeSB0byBnZXQg YQ0KIGxheW91dCBmb3IgdGhlIGRhdGEgZmlsZS4gU2luY2UgdGhlIGxheW91dCBrbm93cyBub3Ro aW5nDQogYWJvdXQgdGhlIHVzZXIgKGFuZCBkb2VzIG5vdCBjYXJlKSwgd2hldGhlciB0aGUgdXNl ciBsb2doeXIgb3INCiBnYXJibyBvcGVucyB0aGUgZmlsZSBkb2VzIG5vdCBtYXR0ZXIuICBUaGUg Y2xpZW50IGhhcyB0byBwcmVzZW50DQogYW4gdWlkIG9mIDE5NDUyIHRvIGdldCB3cml0ZSBwZXJt aXNzaW9uLiBJZiBpdCBwcmVzZW50cyBhbnkgb3RoZXINCiB2YWx1ZSBmb3IgdGhlIHVpZCwgdGhl biBpdCBtdXN0IGdpdmUgYSBnaWQgb2YgMjg0MTggdG8gZ2V0IHJlYWQNCiBhY2Nlc3MuDQoNCiBG dXJ0aGVyLCBpZiB0aGUgbWV0YWRhdGEgc2VydmVyIGRlY2lkZXMgdG8gZmVuY2UgdGhlIGZpbGUs IGl0IG1heQ0KIGNoYW5nZSB0aGUgdWlkIGFuZCBnaWQgYXMgc3VjaDoNCg0KIC1ydy1yLS0tLS0g ICAgMSAxOTQ1MyAgIDI4NDE5ICAgIDE2OTcgRGVjICA0IDExOjMxIGRhdGFfb21waGEuYw0KDQoN CldoYXQgd2UgY291bGQgc3VnZ2VzdCB3b3VsZCBiZSBzb21ldGhpbmcgYWxvbmcgdGhlIGxpbmVz IG9mOg0KDQogT24gdGhlIHN0b3JhZ2UgZGV2aWNlLCBpdCBtYXkgYmUgYXNzaWduZWQgc29tZSB1 bnByZWRpY3RhYmxlDQogc3ludGhldGljIHVpZC9naWQgdG8gZGVueSBhY2Nlc3MuDQog4oCmDQog RnVydGhlciwgaWYgdGhlIG1ldGFkYXRhIHNlcnZlciBkZWNpZGVzIHRvIGZlbmNlIHRoZSBmaWxl LCBpdA0KIHNob3VsZCBjaGFuZ2UgdGhlIHVpZCBhbmQvb3IgZ2lkIHN1Y2ggdGhhdCB0aGVzZSB2 YWx1ZXMNCiBuZWl0aGVyIG1hdGNoIGVhcmxpZXIgdmFsdWVzIGZvciB0aGF0IGZpbGUgbm9yIG1h dGNoDQogYSBwcmVkaWN0YWJsZSBjaGFuZ2UgYmFzZWQgb24gYW4gZWFybGllciBmZW5jaW5nLg0K DQpVZ2gsIG5vdCBzdXJlIEkgbGlrZSB0aGUgd29yZHMuDQoNCnVpZFtOKzFdICE9IHVpZFtOLTFd ICYmIHVpZFtOKzFdICAhPSBjaGFuZ2UodWlkW04tMV0gLT4gdWlkW05dKS4NCg0KSS5lLiwgZG8g bm90IHNldCB0byByZWNlbnQgb2xkIHZhbHVlcyAobWlnaHQgZmVuY2UgYmFjayB0byBhbiB1aWQN CmFuIG9sZGVyIGNsaWVudCBhbHJlYWR5IGhhcykgYW5kIGRvIG5vdCB1c2UgYSBmaXhlZCBpbmNy ZW1lbnQuDQoNClNvIG1heWJlIGluIHRoZSBmaXJzdCBwYXJhZ3JhcGggeW91IG1lYW4g4oCc4oCm IHNvbWUgdW5wcmVkaWN0YWJsZSBhbmQNCnVudXNlZCBieSBhbnkgY3VycmVudCBjbGllbnTigJ0/ DQoNCg0KDQooNSkgSW4gdGhlIOKAnGxvb3NlIGNvdXBsaW5nIG1vZGVs4oCdIGZpbGUgYWNjZXNz IGFjdHVhbGx5IGVuZm9yY2VkIGJ5IHRoZSBjbGllbnQsDQp3aGljaCBwcmVzdW1hYmx5IGNhbiBi ZSBtYW5pcHVsYXRlZCBieSBhbiBldmlsIHVzZXIuIFRoaXMgaXMgY2xlYXJseSBzdGF0ZWQgbg0K U2VjdGlvbiAyLjI6IOKAnCBUaGUgY2xpZW50IGlzIHRodXMgc29sZWx5IHJlc3BvbnNpYmxlIGZv ciBlbmZvcmNpbmcgZmlsZQ0KcGVybWlzc2lvbnMgaW4gYSBsb29zZWx5IGNvdXBsZWQgbW9kZWwu 4oCdICBBbHNvLCBTZWN0aW9uIDIuMi4xIG1lbnRpb25zIOKAnGENClNFVEFUVFIgd291bGQgYmUg c2VudCB0byB0aGUgc3RvcmFnZSBkZXZpY2UgdG8gc2V0IHRoZSBvd25lciBhbmQgZ3JvdXAgb2Yg dGhlDQpkYXRhIGZpbGXigJ0sIGFuZCBzaW5jZSBoZXJlIGlzIG5vIGNvbnRyb2wgcHJvdG9jb2wg YmV0d2VlbiB0aGUgbWV0YWRhdGEgc2VydmVyDQphbmQgdGhlIGZpbGUgc2VydmVyIHNvIEkgYXNz dW1lIGl0IGlzIHNlbnQgYnkgdGhlIGNsaWVudC4NCg0KSXQgaXMgc3VidGxlLCBidXQgdGhpcyBn b2VzIGJhY2sgdG8gdGhlIGZhY3QgKHNlZSBbMV0pIHRoYXQg4oCcbm8gY29udHJvbCBwcm90b2Nv bOKAnSBkb2VzIG5vdA0KaW1wbHkg4oCcbm8gY29tbXVuaWNhdGlvbiBiZXR3ZWVuIHRoZSBtZXRh ZGF0YSBzZXJ2ZXIgYW5kIHRoZSBzdG9yYWdlDQpkZXZpY2XigJ0uICBJLmUuLCB0aGUgTURTIGRv ZXMgdGhlIFNFVEFUVFIuDQoNCkFsc28sIEkgbm90aWNlIHlvdSBhcmUgdXNpbmcgdGhlIHBocmFz ZSDigJxmaWxlIHNlcnZlcuKAnSwgd2hpY2ggcHJvYmFibHkgaW1wYWN0cw0KeW91ciB2aWV3IGlu IHlvdXIgcG9pbnQgMyAoc2VlIG15IFsyXSkgLSB0aGUgdGVybSB3ZSB1c2UgaXMgc3RvcmFnZQ0K ZGV2aWNlLiBUaGVyZSBpcyBubyByZXF1aXJlbWVudCB0aGF0IHRoaXMgZGV2aWNlIHNlcnZlIHVw IGRhdGEgZmlsZXMNCmFzIGlmIHRoZXkgd2VyZSBpbiBhIGZpbGVzeXN0ZW0uIFRoZSBzdG9yYWdl IGRldmljZSBpcyBsaW1pdGVkIGluIHRoZSBvcGVyYXRpb25zDQp0aGF0IGl0IGNhbiByZXNwb25k IHRvIGZyb20gdGhlIGNsaWVudCBiYXNlZCBvbiB0aGUgaW5mb3JtYXRpb24gaXQgaXMNCnByZXNl bnRlZCB3aXRoLg0KDQpGb3IgZXhhbXBsZSwgdGhlIGV4cG9ydHMgb24gdGhlIHN0b3JhZ2UgZGV2 aWNlIGNhbiBiZSBjb25maWd1cmVkIHN1Y2gNCnRoYXQgdGhlIG1ldGFkYXRhIHNlcnZlciBpcyB0 aGUgb25seSBvbmUgd2hpY2ggY2FuIG1vdW50IHRoZSBleHBvcnRzLg0KQW5kIHNpbmNlIHRoZSBt ZXRhZGF0YSBzZXJ2ZXIgb25seSBoYW5kcyBvdXQgRmlsZSBIYW5kbGVzIHRvIHRoZQ0KY2xpZW50 cywgdGhleSB3b3VsZCBub3QgYmUgYWJsZSB0byB3YWxrIHRoZSBuYW1lc3BhY2Ugb2YgdGhlIHN0 b3JhZ2UNCmRldmljZS4NCg0KVGhhbmtzIGZvciB0aGUgZXhwbGFuYXRpb24g4oCmIG1ha2VzIHNl bnNlLg0KDQoNCg0KUHV0IGFub3RoZXIgd2F5LCBpdCBzZWVtcyBhcyBpZiBhbnkgY2xpZW50IHRo YXQgaGFzIGNyZWRlbnRpYWxzIGFsbG93aW5nIGl0IHRvDQphY2Nlc3MgdG8gdGhlIGZpbGUgc2Vy dmVyIGNhbiBhY2Nlc3MgYW55IGZpbGUgb24gdGhlIGZpbGUgc3lzdGVtIGlmIGl0IGlzDQpjaG9v c2VzIHRvIGRvIHNvIChlLmcuLiwgaWYgaXQgaXMgYSBtYWxpY2lvdXMgY2xpZW50KS4gSXMgdGhh dCBjb3JyZWN0Pw0KDQpBcyB3aXRoIGFueSBORlMgZmlsZXN5c3RlbSB3aGljaCB1c2VzIGFuIEFV VEhfU1lTIHNlY3VyaXR5IG1vZGVsLA0KZWFjaCBvZiB0aGUgZmlsZSBoYW5kbGUsIHVpZCwgYW5k IGdpZCBjYW4gYmUgZm9yZ2VkIHRvIGdhaW4gYWNjZXNzLg0KDQpJbiBvdGhlciB3b3JkcywgdGhp cyBpcyBub3RoaW5nIG5ldy4NCg0KVGhlIHNlY3VyaXR5IG1vZGVsIGZvciBORlN2NC4yIChhbmQg YmFzZWQgb24gdGhhdCwgTkZTdjQuMCBhbmQgTkZTdjQuMSk6DQoNCltSRkM3ODYyXQ0KMTcuICBT ZWN1cml0eSBDb25zaWRlcmF0aW9ucw0KDQogIE5GU3Y0LjIgaGFzIGFsbCBvZiB0aGUgc2VjdXJp dHkgY29uY2VybnMgcHJlc2VudCBpbiBORlN2NC4xIChzZWUNCiAgU2VjdGlvbiAyMSBvZiBbUkZD NTY2MV0pLCBhcyB3ZWxsIGFzIHRob3NlIHByZXNlbnQgaW4gdGhlIHNlcnZlci1zaWRlDQogIGNv cHkgKHNlZSBTZWN0aW9uIDQuOSkgYW5kIGluIExhYmVsZWQgTkZTIChzZWUgU2VjdGlvbiA5LjYp Lg0KDQpXaGljaCBsZWFkcyB1cyB0byBbUkZDNTY2MV06DQoNCjIuMi4xLjEuMS4yLiAgU2VjdXJp dHkgTWVjaGFuaXNtcyBmb3IgTkZTdjQuMQ0KDQogIFJQQ1NFQ19HU1MsIHZpYSBHU1MtQVBJLCBu b3JtYWxpemVzIGFjY2VzcyB0byBtZWNoYW5pc21zIHRoYXQgcHJvdmlkZQ0KICBzZWN1cml0eSBz ZXJ2aWNlcy4gIFRoZXJlZm9yZSwgTkZTdjQuMSBjbGllbnRzIGFuZCBzZXJ2ZXJzIE1VU1QNCiAg c3VwcG9ydCB0aGUgS2VyYmVyb3MgVjUgc2VjdXJpdHkgbWVjaGFuaXNtLg0KDQogIFRoZSB1c2Ug b2YgUlBDU0VDX0dTUyByZXF1aXJlcyBzZWxlY3Rpb24gb2YgbWVjaGFuaXNtLCBxdWFsaXR5IG9m DQogIHByb3RlY3Rpb24gKFFPUCksIGFuZCBzZXJ2aWNlIChhdXRoZW50aWNhdGlvbiwgaW50ZWdy aXR5LCBwcml2YWN5KS4NCiAgRm9yIHRoZSBtYW5kYXRlZCBzZWN1cml0eSBtZWNoYW5pc21zLCBO RlN2NC4xIHNwZWNpZmllcyB0aGF0IGEgUU9QIG9mDQogIHplcm8gaXMgdXNlZCwgbGVhdmluZyBp dCB1cCB0byB0aGUgbWVjaGFuaXNtIG9yIHRoZSBtZWNoYW5pc20ncw0KICBjb25maWd1cmF0aW9u IHRvIG1hcCBRT1AgemVybyB0byBhbiBhcHByb3ByaWF0ZSBsZXZlbCBvZiBwcm90ZWN0aW9uLg0K ICBFYWNoIG1hbmRhdGVkIG1lY2hhbmlzbSBzcGVjaWZpZXMgYSBtaW5pbXVtIHNldCBvZiBjcnlw dG9ncmFwaGljDQogIGFsZ29yaXRobXMgZm9yIGltcGxlbWVudGluZyBpbnRlZ3JpdHkgYW5kIHBy aXZhY3kuICBORlN2NC4xIGNsaWVudHMNCiAgYW5kIHNlcnZlcnMgTVVTVCBiZSBpbXBsZW1lbnRl ZCBvbiBvcGVyYXRpbmcgZW52aXJvbm1lbnRzIHRoYXQgY29tcGx5DQogIHdpdGggdGhlIFJFUVVJ UkVEIGNyeXB0b2dyYXBoaWMgYWxnb3JpdGhtcyBvZiBlYWNoIFJFUVVJUkVEDQogIG1lY2hhbmlz bS4NCg0KMi4yLjEuMS4xLjIuMS4gIEtlcmJlcm9zIFY1DQoNCiAgVGhlIEtlcmJlcm9zIFY1IEdT Uy1BUEkgbWVjaGFuaXNtIGFzIGRlc2NyaWJlZCBpbiBbNV0gTVVTVCBiZQ0KICBpbXBsZW1lbnRl ZCB3aXRoIHRoZSBSUENTRUNfR1NTIHNlcnZpY2VzIGFzIHNwZWNpZmllZCBpbiB0aGUNCiAgZm9s bG93aW5nIHRhYmxlOg0KDQpUbyBwYXJhcGhyYXNlIGl0LCBORlN2NC54IGNsaWVudHMgYW5kIHNl cnZlcnMgTVVTVCBzdXBwb3J0DQp0aGUgS2VyYmVyb3MgVjUgc2VjdXJpdHkgbWVjaGFuaXNtLCBi dXQgaW5zdGFsbGF0aW9ucyBhcmUgbm90DQpyZXF1aXJlZCB0byB1c2UgS2VyYmVyb3MuDQoNCkku ZS4sIHRoaXM6DQoNCm1vdW50IC1vIHZlcnM9NC4yLHNlYz1zeXMgc2VydmVyOi8gL21udA0KDQpt ZWFucyB0aGF0IGFueSBtYWxpY2lvdXMgdXNlciBjYW4gdXNlIGFueSBjbGllbnQgd2hpY2ggY2Fu IGNvbm5lY3QNCnRvIHRoZSBzZXJ2ZXIgdG8gZG8gd2hhdGV2ZXIgdGhleSB3YW50Lg0KDQpJbiBv dGhlciB3b3JkcywgdGhpcyBpcyBub3QgYSByZWR1Y3Rpb24gb2YgdGhlIGFjdHVhbCBzZWN1cml0 eSBmcm9tIE5GU3Y0LnguDQoNClRoYW5rcyBmb3IgdGhlIGV4dGVuc2l2ZSBleHBsYW5hdGlvbi4g SXQgcmVzb2x2ZXMgdGhlIGlzc3VlIHRoYXQgSSBwZXJjZWl2ZWQuDQoNClRoYW5rcywNCkJyaWFu DQoNCg0KDQoNClVubGVzcyBJ4oCZbSBtaXN0YWtlbiwgdGhpcyBpcyBhIHNlcmlvdXMgcmVkdWN0 aW9uIG9mIGFjdHVhbCBzZWN1cml0eSBmcm9tIE5GUw0KNC54LCBhbmQgYWxzbyBmcm9tIHRoZSB0 aWdodCBjb3VwbGluZyBtb2RlbC4gVGhpcyBzaG91bGQgYmUgY2xlYXJseSBzdGF0ZWQgaW4NCnRo ZSBzZWN1cml0eSBjb25zaWRlcmF0aW9ucyBzZWN0aW9uLCBzbyB0aGF0IHByb3RvY29sIGFkb3B0 ZXJzIGFuZCB1c2Vycw0KdW5kZXJzdGFuZCB0aGUgYWRkaXRpb25hbCByaXNrcyBvZiB0aGUgbG9v c2UgY291cGxpbmcgbW9kZWwuIEZvciB0aGlzICByZWFzb24sDQpJJ3ZlIG1hcmtlZCB0aGUgcmV2 aWV3IHdpdGggIkhhcyBJc3N1ZXMiIHJhdGhlciB0aGFuICJIYXMgTml0cyIuDQoNCl9fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQpuZnN2NCBtYWlsaW5nIGxp c3QNCm5mc3Y0QGlldGYub3JnPG1haWx0bzpuZnN2NEBpZXRmLm9yZz4NCmh0dHBzOi8vd3d3Lmll dGYub3JnL21haWxtYW4vbGlzdGluZm8vbmZzdjQNCg0KLS0NCkJyaWFuIFdlaXMNClNlY3VyaXR5 LCBDU0csIENpc2NvIFN5c3RlbXMNClRlbGVwaG9uZTogKzEgNDA4IDUyNiA0Nzk2DQpFbWFpbDog YmV3QGNpc2NvLmNvbTxtYWlsdG86YmV3QGNpc2NvLmNvbT4NCg0K --_000_67066ED351BF428CA73E8519570C104Cprimarydatacom_ Content-Type: text/html; charset=UTF-8 Content-ID: <63CC58538CC0E84680CAF3F0941DB814@namprd11.prod.outlook.com> Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgbGluZS1icmVhazogYWZ0 ZXItd2hpdGUtc3BhY2U7IiBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCjxkaXY+PGJyIGNsYXNz PSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPk9u IEphbiAxNiwgMjAxOCwgYXQgMTA6NTYgQU0sIFRob21hcyBIYXluZXMgJmx0OzxhIGhyZWY9Im1h aWx0bzpsb2doeXJAcHJpbWFyeWRhdGEuY29tIiBjbGFzcz0iIj5sb2doeXJAcHJpbWFyeWRhdGEu Y29tPC9hPiZndDsgd3JvdGU6PC9kaXY+DQo8YnIgY2xhc3M9IkFwcGxlLWludGVyY2hhbmdlLW5l d2xpbmUiPg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IkFwcGxlLWludGVyY2hhbmdlLW5ld2xp bmUiPg0KPGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNp emU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsg Zm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjog c3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFj ZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDog MHB4OyI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1p bHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQt dmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5n OiBub3JtYWw7IG9ycGhhbnM6IGF1dG87IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDog MHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd2lkb3dzOiBh dXRvOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXNpemUtYWRqdXN0OiBhdXRvOyAt d2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxkaXYgY2xhc3M9IiI+T24gSmFuIDEy LCAyMDE4LCBhdCAzOjU0IFBNLCBCcmlhbiBXZWlzIChiZXcpICZsdDs8YSBocmVmPSJtYWlsdG86 YmV3QGNpc2NvLmNvbSIgY2xhc3M9IiI+YmV3QGNpc2NvLmNvbTwvYT4mZ3Q7IHdyb3RlOjwvZGl2 Pg0KPGJyIGNsYXNzPSJBcHBsZS1pbnRlcmNoYW5nZS1uZXdsaW5lIj4NCjxkaXYgY2xhc3M9IiI+ PHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTog MTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250 LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFy dDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBu b3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7 IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiPkhpDQogVGhvbWFzLDwv c3Bhbj4NCjxkaXYgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQt c2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFs OyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWdu OiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNw YWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRo OiAwcHg7Ij4NCjxiciBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBl PSJjaXRlIiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+T24gSmFuIDEyLCAyMDE4LCBhdCAxMTo0 MSBBTSwgVGhvbWFzIEhheW5lcyAmbHQ7PGEgaHJlZj0ibWFpbHRvOmxvZ2h5ckBwcmltYXJ5ZGF0 YS5jb20iIGNsYXNzPSIiPmxvZ2h5ckBwcmltYXJ5ZGF0YS5jb208L2E+Jmd0OyB3cm90ZTo8L2Rp dj4NCjxiciBjbGFzcz0iQXBwbGUtaW50ZXJjaGFuZ2UtbmV3bGluZSI+DQo8ZGl2IGNsYXNzPSIi PjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6 IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9u dC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3Rh cnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTog bm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4 OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7Ij5IaQ0KIEJyaWFuLDwv c3Bhbj48YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6 ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBm b250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBz dGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNl OiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAw cHg7Ij4NCjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1z aXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7 IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246 IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3Bh Y2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6 IDBweDsiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZv bnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9y bWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFs aWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRl LXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdp ZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiPlRoYW5r cw0KIGZvciB0aGUgcmV2aWV3IC0gY29tbWVudHMgaW5saW5lLi48L3NwYW4+PGJyIGNsYXNzPSIi IHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5 bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1h bDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50 OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNw YWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8YnIgY2xhc3M9 IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1z dHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9y bWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRl bnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQt c3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxibG9ja3F1 b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBm b250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5v cm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1h bGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0 ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13 aWR0aDogMHB4OyI+DQpPbiBKYW4gMTIsIDIwMTgsIGF0IDEwOjQ1IEFNLCBCcmlhbiBXZWlzICZs dDs8YSBocmVmPSJtYWlsdG86YmV3QGNpc2NvLmNvbSIgY2xhc3M9IiI+YmV3QGNpc2NvLmNvbTwv YT4mZ3Q7IHdyb3RlOjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NClJldmlld2VyOiBCcmlh biBXZWlzPGJyIGNsYXNzPSIiPg0KUmV2aWV3IHJlc3VsdDogSGFzIElzc3VlczxiciBjbGFzcz0i Ij4NCjxiciBjbGFzcz0iIj4NCkkgaGF2ZSByZXZpZXdlZCB0aGlzIGRvY3VtZW50IGFzIHBhcnQg b2YgdGhlIHNlY3VyaXR5IGRpcmVjdG9yYXRlJ3Mgb25nb2luZzxiciBjbGFzcz0iIj4NCmVmZm9y dCB0byByZXZpZXcgYWxsIElFVEYgZG9jdW1lbnRzIGJlaW5nIHByb2Nlc3NlZCBieSB0aGUgSUVT Ry4gVGhlc2UgY29tbWVudHM8YnIgY2xhc3M9IiI+DQp3ZXJlIHdyaXR0ZW4gcHJpbWFyaWx5IGZv ciB0aGUgYmVuZWZpdCBvZiB0aGUgc2VjdXJpdHkgYXJlYSBkaXJlY3RvcnMuIERvY3VtZW50PGJy IGNsYXNzPSIiPg0KZWRpdG9ycyBhbmQgV0cgY2hhaXJzIHNob3VsZCB0cmVhdCB0aGVzZSBjb21t ZW50cyBqdXN0IGxpa2UgYW55IG90aGVyIGxhc3QgY2FsbDxiciBjbGFzcz0iIj4NCmNvbW1lbnRz LjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NClRoaXMgZG9jdW1lbnQgZGVmaW5lcyB0aGUg UGFyYWxsZWwgTmV0d29yayBGaWxlIFN5c3RlbSAocE5GUyksIHdoaWNoIGFsbG93cyBhPGJyIGNs YXNzPSIiPg0Kc3RvcmFnZSBzeXN0ZW0gdG8gc3RvcmUgdGhlIG1ldGFkYXRhIGZvciBmaWxlcyBv bnRvIGEgbWV0YWRhdGEgc2VydmVyLCBhbmQgZGF0YTxiciBjbGFzcz0iIj4NCm9mIHRoYXQgZmls ZSBvbnRvIGEgc2VwYXJhdGUgc3RvcmFnZSBkZXZpY2UuIFRoZSBkb2N1bWVudCBmb2N1c2VzIG9u IHRoZTxiciBjbGFzcz0iIj4NCmludGVyYWN0aW9uIGJldHdlZW4gdGhlIHR3byB0eXBlcyBvZiBz ZXJ2ZXJzLCBhbmQgdGhlIHJlcXVpcmVtZW50cyBvZiBjbGllbnRzPGJyIGNsYXNzPSIiPg0KdXNp bmcgYSBwTkZTIHN5c3RlbS48YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQpUaGUgZG9jdW1l bnQgZGVzY3JpYmVzIHR3byBtb2RlbHMgYnkgd2hpY2ggdGhlIG1ldGFkYXRhIHNlcnZlciBhbmQg ZmlsZSBzdG9yYWdlPGJyIGNsYXNzPSIiPg0Kc2VydmVyIGNhbiBjb21tdW5pY2F0ZS4gT25lIGlz IGEg4oCcdGlnaHQgY291cGxpbmcgbW9kZWzigJ0sIGluIHdoaWNoIHRoZSB0d28gdHlwZXM8YnIg Y2xhc3M9IiI+DQpvZiBzZXJ2ZXJzIGRpcmVjdGx5IGNvbW11bmljYXRlLiBJbiB0aGlzIG1vZGVs IHRoZSBtZXRhZGF0YSBzZXJ2ZXIgY2FuIGVuc3VyZTxiciBjbGFzcz0iIj4NCnRoYXQgZmlsZSBh Y2Nlc3MgY29udHJvbCBzdGF0ZSBpcyBzeW5jaHJvbml6ZWQgYmV0d2VlbiB0aGUgdHdvIHNlcnZl cnMsIGFuZCBJPGJyIGNsYXNzPSIiPg0KYmVsaWV2ZSB0aGF0IGxldmVsIG9mIGFjY2VzcyBjb250 cm9sIGlzIGVxdWl2YWxlbnQgdG8gTkZTIHY0LnggdG9kYXkuIEZyb20gYTxiciBjbGFzcz0iIj4N CnNlY3VyaXR5IGNvbnNpZGVyYXRpb25zIHBlcnNwZWN0aXZlLCB0aGlzIGlzIHBlcmhhcHMgYmVz dCBzdW1tYXJpemVkIGluIFNlY3Rpb248YnIgY2xhc3M9IiI+DQoyLjI6PGJyIGNsYXNzPSIiPg0K PGJyIGNsYXNzPSIiPg0K4oCcV2l0aCB0aWdodGx5IGNvdXBsZWQgc3RvcmFnZSBkZXZpY2VzLCB0 aGUgbWV0YWRhdGEgc2VydmVyIHNldHMgdGhlPGJyIGNsYXNzPSIiPg0KJm5ic3A7dXNlciBhbmQg Z3JvdXAgb3duZXJzLCBtb2RlIGJpdHMsIGFuZCBBQ0wgb2YgdGhlIGRhdGEgZmlsZSB0byBiZSB0 aGU8YnIgY2xhc3M9IiI+DQombmJzcDtzYW1lIGFzIHRoZSBtZXRhZGF0YSBmaWxlLiAmbmJzcDtB bmQgdGhlIGNsaWVudCBtdXN0IGF1dGhlbnRpY2F0ZSB3aXRoIHRoZTxiciBjbGFzcz0iIj4NCiZu YnNwO3N0b3JhZ2UgZGV2aWNlIGFuZCBnbyB0aHJvdWdoIHRoZSBzYW1lIGF1dGhvcml6YXRpb24g cHJvY2VzcyBpdCB3b3VsZDxiciBjbGFzcz0iIj4NCiZuYnNwO2dvIHRocm91Z2ggdmlhIHRoZSBt ZXRhZGF0YSBzZXJ2ZXIu4oCdPGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KVGhlIG90aGVy IG1vZGVsIGlzIGEg4oCcbG9vc2UgY291cGxpbmcgbW9kZWzigJ0sIGluIHdoaWNoIHRoZSBjbGll bnQgaXM8YnIgY2xhc3M9IiI+DQphdXRoZW50aWNhdGVkIGFuZCBhdXRob3JpemVkIGJ5IHRoZSBt ZXRhZGF0YSBzZXJ2ZXIsIGFuZCBpcyBnaXZlbiBhY2Nlc3MgdG8gdGhlPGJyIGNsYXNzPSIiPg0K ZmlsZSBzZXJ2ZXIgdGhyb3VnaCB0aGUgdXNlIGNyZWRlbnRpYWxzLiBIb3dldmVyLCB0aGVyZSBp cyBubyBkaXJlY3Q8YnIgY2xhc3M9IiI+DQpjb21tdW5pY2F0aW9ucyBiZXR3ZWVuIHRoZSBtZXRh ZGF0YSBzZXJ2ZXIgYW5kIHRoZSBmaWxlIHNlcnZlci4gVGhlIG1ldGFkYXRhPGJyIGNsYXNzPSIi Pg0Kc2VydmVyIGRvZXMgbm90IHNlZW0gdG8gcHJvdmlkZSBhIGZpbmUgZ3JhaW5lZCBhY2Nlc3Mg Y29udHJvbCB0byBmaWxlcyBvbiB0aGU8YnIgY2xhc3M9IiI+DQpmaWxlIHNlcnZlciwgYnV0IGlu c3RlYWQgcmVsaWVzIHVwb24gdGhlIGNsaWVudCB0byBlbmZvcmNlIGEgbGVzcyBncmFudWxhcjxi ciBjbGFzcz0iIj4NCmxldmVsIG9mIGFjY2VzcyBjb250cm9sLjxiciBjbGFzcz0iIj4NCjwvYmxv Y2txdW90ZT4NCjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9u dC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3Jt YWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxp Z246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUt c3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lk dGg6IDBweDsiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7 IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczog bm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0 LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdo aXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tl LXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiPlsx XQ0KIE5vLCB0aGVyZSBpcyBzdGlsbCBkaXJlY3QgY29tbXVuaWNhdGlvbiBiZXR3ZWVuIHRoZSBt ZXRhZGF0YSBzZXJ2ZXIgYW5kIHRoZSBmaWxlIHNlcnZlci48L3NwYW4+PGJyIGNsYXNzPSIiIHN0 eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6 IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsg bGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAw cHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNp bmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8YnIgY2xhc3M9IiIg c3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHls ZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFs OyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6 IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3Bh Y2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxzcGFuIGNsYXNz PSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQt c3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5v cm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5k ZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3Jk LXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9u ZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7Ij5UaGUNCiBkaWZmZXJlbmNlIGlzIHRoYXQg aXQgaXMgdmlhIGEgc3RvcmFnZSBwcm90b2NvbCwgaW4gdGhpcyBjYXNlIE5GUy48L3NwYW4+PC9k aXY+DQo8L2Jsb2NrcXVvdGU+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4NCjxk aXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBm b250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5v cm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1h bGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0 ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13 aWR0aDogMHB4OyI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGlj YTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBz OiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRl eHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsg d2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJv a2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyI+ VGhlDQogYWNjZXNzIGNvbnRyb2wgaXMgZW5mb3JjZWQgYnkgdGhlIG1ldGFkYXRhIHNlcnZlci4g VGhlIGNsaWVudCBvbmx5IGdldCBhY2Nlc3M8L3NwYW4+PGJyIGNsYXNzPSIiIHN0eWxlPSJmb250 LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsg Zm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNw YWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQt dHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsg LXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0i Zm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3Jt YWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRl ci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0 ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAw cHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6 IGlubGluZSAhaW1wb3J0YW50OyI+dG8NCiB0aGUgZmlsZSBpZiBpdCBjYW4gZ2V0IGEgbGF5b3V0 LiBUaGUgbGF5b3V0IGNhbiBlaXRoZXIgcHJvdmlkZSByZWFkL3dyaXRlIGFjY2Vzczwvc3Bhbj48 YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJw eDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdl aWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsg dGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3Jt YWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4N CjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6 IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9u dC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3Rh cnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTog bm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4 OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7Ij5vcg0KIG9ubHkgcmVh ZCBhY2Nlc3MuPC9zcGFuPjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGlj YTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBz OiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRl eHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsg d2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJv a2Utd2lkdGg6IDBweDsiPg0KPGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0 aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNh cHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsg dGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25l OyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0 cm9rZS13aWR0aDogMHB4OyI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhl bHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFu dC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3Jt YWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTog bm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4 dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0 YW50OyI+VGhlDQogbWV0YWRhdGEgc2VydmVyIGNhbiByZXZva2UgdGhhdCBhY2Nlc3MgYXQgYW55 IHBvaW50LCBzbyBpdCBpcyBub3Q8L3NwYW4+PGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWls eTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12 YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6 IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNm b3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtp dC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1m YW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZv bnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFj aW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRy YW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13 ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGlu ZSAhaW1wb3J0YW50OyI+Y29ycmVjdA0KIHRvIHNheSB0aGF0IGl0IGRlcGVuZHMgb24gdGhlIGNs aWVudCB0byBlbmZvcmNlIGEgbGVzcyBncmFudWxhciBsZXZlbDwvc3Bhbj48YnIgY2xhc3M9IiIg c3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHls ZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFs OyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6 IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3Bh Y2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxzcGFuIGNsYXNz PSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQt c3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5v cm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5k ZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3Jk LXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9u ZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7Ij5vZg0KIGFjY2VzcyBjb250cm9sLjwvc3Bh bj48YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTog MTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250 LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFy dDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBu b3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7 Ij4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8 L2Rpdj4NClRoYW5rcyBmb3IgdGhlIGNsYXJpZmljYXRpb24uIFRvIGEgbm9uLU5GUyBleHBlcnQg dGhlIHJlbGF0aW9uc2hpcCBiZXR3ZWVuIGxheW91dHMgYW5kJm5ic3A7PC9kaXY+DQo8ZGl2IGNs YXNzPSIiPmFjY2VzcyBjb250cm9sICZuYnNwO3dhc27igJl0IG9idmlvdXMuIEkgd29uZGVyIGlm IHRoaXMgZGlzY3Vzc2lvbiBjb3VsZCBiZSBhZGRlZCB0byBTZWN1cml0eTwvZGl2Pg0KPGRpdiBj bGFzcz0iIj5Db25zaWRlcmF0aW9ucz88L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVv dGU+DQo8ZGl2IHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7 IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWln aHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRl eHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFs OyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyIgY2xh c3M9IiI+DQo8YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9ImZvbnQtZmFtaWx5OiBI ZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlh bnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9y bWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06 IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRl eHQtc3Ryb2tlLXdpZHRoOiAwcHg7IiBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0K PGRpdiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250 LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBu b3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWlu ZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29y ZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiIGNsYXNzPSIi Pg0KSGkgQnJpYW4sPC9kaXY+DQo8ZGl2IHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBm b250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5v cm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1h bGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0 ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13 aWR0aDogMHB4OyIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9 ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9y bWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0 ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsg dGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzog MHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IiBjbGFzcz0iIj4NCknigJl2ZSBh bHJlYWR5IGdvdCB0aGF0IChhbmQgeWVzLCBJIHVuZGVyc3RhbmQgaXQgaXMgbm90IHN1ZmZpY2ll bnQgaWYgSSBoYXZlIHRvIHNwZWxsIGl0IG91dCA6LSk6PC9kaXY+DQo8ZGl2IHN0eWxlPSJmb250 LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsg Zm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNw YWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQt dHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsg LXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+ DQo8L2Rpdj4NCjxkaXYgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTog MTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250 LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFy dDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBu b3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7 IiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+MTUuICZuYnNwO1NlY3VyaXR5IENvbnNpZGVyYXRp b25zPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPi4uLjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYg Y2xhc3M9IiI+Jm5ic3A7ICZuYnNwO1RoZSBtZXRhZGF0YSBzZXJ2ZXIgaXMgcHJpbWFyaWx5IHJl c3BvbnNpYmxlIGZvciBzZWN1cmluZyB0aGUgZGF0YTwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4mbmJz cDsgJm5ic3A7cGF0aC4gJm5ic3A7SXQgaGFzIHRvIGF1dGhlbnRpY2F0ZSB0aGUgY2xpZW50IGFj Y2VzcyBhbmQgcHJvdmlkZTwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4mbmJzcDsgJm5ic3A7YXBwcm9w cmlhdGUgY3JlZGVudGlhbHMgdG8gdGhlIGNsaWVudCB0byBhY2Nlc3MgZGF0YSBmaWxlcyBvbiB0 aGU8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+Jm5ic3A7ICZuYnNwO3N0b3JhZ2UgZGV2aWNlLiAmbmJz cDtGaW5hbGx5LCBpdCBpcyByZXNwb25zaWJsZSBmb3IgcmV2b2tpbmcgYWNjZXNzIGZvciBhPC9k aXY+DQo8ZGl2IGNsYXNzPSIiPiZuYnNwOyAmbmJzcDtjbGllbnQgdG8gdGhlIHN0b3JhZ2UgZGV2 aWNlLjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0K PC9kaXY+DQo8ZGl2IHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEy cHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13 ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7 IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9y bWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyIg Y2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPiZuYnNwOyAmbmJzcDtUaGUgbWV0YWRhdGEgc2VydmVy IGVuZm9yY2VzIHRoZSBmaWxlIGFjY2Vzcy1jb250cm9sIHBvbGljeSBhdDwvZGl2Pg0KPGRpdiBj bGFzcz0iIj4mbmJzcDsgJm5ic3A7TEFZT1VUR0VUIHRpbWUuICZuYnNwO1RoZSBjbGllbnQgc2hv dWxkIHVzZSBSUEMgYXV0aG9yaXphdGlvbiBjcmVkZW50aWFsczwvZGl2Pg0KPGRpdiBjbGFzcz0i Ij4mbmJzcDsgJm5ic3A7Zm9yIGdldHRpbmcgdGhlIGxheW91dCBmb3IgdGhlIHJlcXVlc3RlZCBp b21vZGUgKFJFQUQgb3IgUlcpIGFuZCB0aGU8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+Jm5ic3A7ICZu YnNwO3NlcnZlciB2ZXJpZmllcyB0aGUgcGVybWlzc2lvbnMgYW5kIEFDTCBmb3IgdGhlc2UgY3Jl ZGVudGlhbHMsPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPiZuYnNwOyAmbmJzcDtwb3NzaWJseSByZXR1 cm5pbmcgTkZTNEVSUl9BQ0NFU1MgaWYgdGhlIGNsaWVudCBpcyBub3QgYWxsb3dlZCB0aGU8L2Rp dj4NCjxkaXYgY2xhc3M9IiI+Jm5ic3A7ICZuYnNwO3JlcXVlc3RlZCBpb21vZGUuICZuYnNwO0lm IHRoZSBMQVlPVVRHRVQgb3BlcmF0aW9uIHN1Y2NlZWRzIHRoZSBjbGllbnQ8L2Rpdj4NCjxkaXYg Y2xhc3M9IiI+Jm5ic3A7ICZuYnNwO3JlY2VpdmVzLCBhcyBwYXJ0IG9mIHRoZSBsYXlvdXQsIGEg c2V0IG9mIGNyZWRlbnRpYWxzIGFsbG93aW5nIGl0IEkvTzwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4m bmJzcDsgJm5ic3A7YWNjZXNzIHRvIHRoZSBzcGVjaWZpZWQgZGF0YSBmaWxlcyBjb3JyZXNwb25k aW5nIHRvIHRoZSByZXF1ZXN0ZWQ8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+Jm5ic3A7ICZuYnNwO2lv bW9kZS4gJm5ic3A7V2hlbiB0aGUgY2xpZW50IGFjdHMgb24gSS9PIG9wZXJhdGlvbnMgb24gYmVo YWxmIG9mIGl0czwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4mbmJzcDsgJm5ic3A7bG9jYWwgdXNlcnMs IGl0IE1VU1QgYXV0aGVudGljYXRlIGFuZCBhdXRob3JpemUgdGhlIHVzZXIgYnkgaXNzdWluZzwv ZGl2Pg0KPGRpdiBjbGFzcz0iIj4mbmJzcDsgJm5ic3A7cmVzcGVjdGl2ZSBPUEVOIGFuZCBBQ0NF U1MgY2FsbHMgdG8gdGhlIG1ldGFkYXRhIHNlcnZlciwgc2ltaWxhciB0bzwvZGl2Pg0KPGRpdiBj bGFzcz0iIj4mbmJzcDsgJm5ic3A7aGF2aW5nIE5GU3Y0IGRhdGEgZGVsZWdhdGlvbnMuPC9kaXY+ DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4mbmJz cDsgJm5ic3A7SWYgYWNjZXNzIGlzIGFsbG93ZWQsIHRoZSBjbGllbnQgdXNlcyB0aGUgY29ycmVz cG9uZGluZyAoUkVBRCBvciBSVyk8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+Jm5ic3A7ICZuYnNwO2Ny ZWRlbnRpYWxzIHRvIHBlcmZvcm0gdGhlIEkvTyBvcGVyYXRpb25zIGF0IHRoZSBkYXRhIGZpbGUn cyBzdG9yYWdlPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPiZuYnNwOyAmbmJzcDtkZXZpY2VzLiAmbmJz cDtXaGVuIHRoZSBtZXRhZGF0YSBzZXJ2ZXIgcmVjZWl2ZXMgYSByZXF1ZXN0IHRvIGNoYW5nZSBh PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPiZuYnNwOyAmbmJzcDtmaWxlJ3MgcGVybWlzc2lvbnMgb3Ig QUNMLCBpdCBTSE9VTEQgcmVjYWxsIGFsbCBsYXlvdXRzIGZvciB0aGF0IGZpbGU8L2Rpdj4NCjxk aXYgY2xhc3M9IiI+Jm5ic3A7ICZuYnNwO2FuZCB0aGVuIE1VU1QgZmVuY2Ugb2ZmIGFueSBjbGll bnRzIHN0aWxsIGhvbGRpbmcgb3V0c3RhbmRpbmcgbGF5b3V0czwvZGl2Pg0KPGRpdiBjbGFzcz0i Ij4mbmJzcDsgJm5ic3A7Zm9yIHRoZSByZXNwZWN0aXZlIGZpbGVzIGJ5IGltcGxpY2l0bHkgaW52 YWxpZGF0aW5nIHRoZSBwcmV2aW91c2x5PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPiZuYnNwOyAmbmJz cDtkaXN0cmlidXRlZCBjcmVkZW50aWFsIG9uIGFsbCBkYXRhIGZpbGUgY29tcHJpc2luZyB0aGUg ZmlsZSBpbjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4mbmJzcDsgJm5ic3A7cXVlc3Rpb24uICZuYnNw O0l0IGlzIFJFUVVJUkVEIHRoYXQgdGhpcyBiZSBkb25lIGJlZm9yZSBjb21taXR0aW5nIHRvIHRo ZTwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4mbmJzcDsgJm5ic3A7bmV3IHBlcm1pc3Npb25zIGFuZC9v ciBBQ0wuICZuYnNwO0J5IHJlcXVlc3RpbmcgbmV3IGxheW91dHMsIHRoZSBjbGllbnRzPC9kaXY+ DQo8ZGl2IGNsYXNzPSIiPiZuYnNwOyAmbmJzcDt3aWxsIHJlYXV0aG9yaXplIGFjY2VzcyBhZ2Fp bnN0IHRoZSBtb2RpZmllZCBhY2Nlc3MgY29udHJvbCBtZXRhZGF0YS48L2Rpdj4NCjxkaXYgY2xh c3M9IiI+Jm5ic3A7ICZuYnNwO1JlY2FsbGluZyB0aGUgbGF5b3V0cyBpbiB0aGlzIGNhc2UgaXMg aW50ZW5kZWQgdG8gcHJldmVudCBjbGllbnRzPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPiZuYnNwOyAm bmJzcDtmcm9tIGdldHRpbmcgYW4gZXJyb3Igb24gSS9PcyBkb25lIGFmdGVyIHRoZSBjbGllbnQg d2FzIGZlbmNlZCBvZmYuPC9kaXY+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9ImZvbnQtZmFtaWx5OiBI ZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlh bnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9y bWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06 IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRl eHQtc3Ryb2tlLXdpZHRoOiAwcHg7IiBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0K PGRpdiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250 LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBu b3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWlu ZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29y ZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiIGNsYXNzPSIi Pg0KSG93IGFib3V0OjwvZGl2Pg0KPGRpdiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsg Zm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBu b3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQt YWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hp dGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Ut d2lkdGg6IDBweDsiIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IHN0eWxl PSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5v cm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0 dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7 IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6 IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyIgY2xhc3M9IiI+DQo8ZGl2IGNs YXNzPSIiPiZuYnNwOyAmbmJzcDtJZiBhY2Nlc3MgaXMgYWxsb3dlZCwgdGhlIGNsaWVudCB1c2Vz IHRoZSBjb3JyZXNwb25kaW5nIChSRUFEIG9yIFJXKTwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4mbmJz cDsgJm5ic3A7Y3JlZGVudGlhbHMgdG8gcGVyZm9ybSB0aGUgSS9PIG9wZXJhdGlvbnMgYXQgdGhl IGRhdGEgZmlsZSdzIHN0b3JhZ2U8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+Jm5ic3A7ICZuYnNwO2Rl dmljZXMuIOKApjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxk aXYgY2xhc3M9IiI+YmVjb21lczwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8 L2Rpdj4NCjxkaXYgY2xhc3M9IiI+Jm5ic3A7IFRoZSBjb21iaW5hdGlvbiBvZiBmaWxlIGhhbmRs ZSwgc3ludGhldGljIHVpZCwgYW5kIGdpZCBpbiB0aGUgbGF5b3V0PC9kaXY+DQo8ZGl2IGNsYXNz PSIiPiZuYnNwOyBhcmUgdGhlIHdheSB0aGF0IHRoZSBtZXRhZGF0YSBzZXJ2ZXIgZW5mb3JjZXMg YWNjZXNzIGNvbnRyb2wgdG8gdGhlPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPiZuYnNwOyBkYXRhIHNl cnZlci4gVGhlIGRpcmVjdG9yeSBuYW1lc3BhY2Ugb24gdGhlIHN0b3JhZ2UgZGV2aWNlIFNIT1VM RDwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4mbmJzcDsgb25seSBiZSBhY2Nlc3NpYmxlIHRvIHRoZSBt ZXRhZGF0YSBzZXJ2ZXIgYW5kIG5vdCB0aGUgY2xpZW50cy4gSW4gdGhhdCBjYXNlLCZuYnNwOzwv ZGl2Pg0KPGRpdiBjbGFzcz0iIj4mbmJzcDsgdGhlIGNsaWVudCBvbmx5IGhhcyBhY2Nlc3MgdG8g ZmlsZSBoYW5kbGVzIG9mIGZpbGUgb2JqZWN0cyBhbmQgbm90PC9kaXY+DQo8ZGl2IGNsYXNzPSIi PiZuYnNwOyBkaXJlY3Rvcnkgb2JqZWN0cy4gVGh1cywgZ2l2ZW4gYSBmaWxlIGhhbmRsZSBpbiBh IGxheW91dCwgaXQgaXMgbm90PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPiZuYnNwOyBwb3NzaWJsZSB0 byBndWVzcyB0aGUgcGFyZW50IGRpcmVjdG9yeSBmaWxlIGhhbmRsZS4gRnVydGhlciwgYXMgdGhl PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPiZuYnNwOyBkYXRhIGZpbGUgcGVybWlzc2lvbnMgb25seSBh bGxvdyB0aGUgZ2l2ZW4gc3ludGhldGljIHVpZCByZWFkL3dyaXRlPC9kaXY+DQo8ZGl2IGNsYXNz PSIiPiZuYnNwOyBwZXJtaXNzaW9uIGFuZCB0aGUgZ2l2ZW4gc3ludGhldGljIGdpZCByZWFkIHBl cm1pc3Npb24sIGtub3dpbmc8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+Jm5ic3A7IHRoZSBzeW50aGV0 aWMgaWRzIG9mIG9uZSBmaWxlIGRvZXMgbm90IG5lY2Vzc2FyaWx5IGFsbG93IGFjY2VzcyB0byBh bnk8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+Jm5ic3A7IG90aGVyIGRhdGEgZmlsZSBvbiB0aGUgc3Rv cmFnZSBkZXZpY2UuPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0K PGRpdiBjbGFzcz0iIj4mbmJzcDsgVGhlIG1ldGFkYXRhIHNlcnZlciBjYW4gYWxzbyBkZW55IGFj Y2VzcyBhdCBhbnkgdGltZSBieSBmZW5jaW5nPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPiZuYnNwOyB0 aGUgZGF0YSBmaWxlLCB3aGljaCBtZWFucyBjaGFuZ2luZyB0aGUgc3ludGhldGljIGlkcy4gSW4g dHVybiwgdGhhdDwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4mbmJzcDsgZm9yY2VzIHRoZSBjbGllbnQg dG8gcmV0dXJuIGl0cyBjdXJyZW50IGxheW91dCBhbmQgZ2V0IGEgbmV3IGxheW91dCBpZjwvZGl2 Pg0KPGRpdiBjbGFzcz0iIj4mbmJzcDsgaXQgd2FudHMgdG8gY29udGludWUgSU8gdG8gdGhlIGRh dGEgZmlsZS48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2 IGNsYXNzPSIiPiZuYnNwOyBJZiB0aGUgY29uZmlndXJhdGlvbiBvZiB0aGUgc3RvcmFnZSBkZXZp Y2UgaXMgc3VjaCB0aGF0IGNsaWVudHM8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+Jm5ic3A7IGNhbiBh Y2Nlc3MgdGhlIGRpcmVjdG9yeSBuYW1lc3BhY2UsIHRoZW4gdGhlIGFjY2VzcyBjb250cm9sPC9k aXY+DQo8ZGl2IGNsYXNzPSIiPiZuYnNwOyBkZWdyYWRlcyB0byB0aGF0IG9mIGEgdHlwaWNhbCBO RlMgc2VydmVyIHdpdGggZXhwb3J0cyB3aXRoIGE8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+Jm5ic3A7 IHNlY3VyaXR5IGZsYXZvciBvZiBBVVRIX1NZUy4gJm5ic3A7QW55IGNsaWVudCB3aGljaCBpcyBh bGxvd2VkPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPiZuYnNwOyBhY2Nlc3MgY2FuIGZvcmdlIGNyZWRl bnRpYWxzIHRvIGFjY2VzcyBhbnkgZGF0YSBmaWxlLiBUaGU8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+ Jm5ic3A7IGNhdmVhdCBpcyB0aGF0IHRoZSByb2d1ZSBjbGllbnQgbWlnaHQgaGF2ZSBubyBrbm93 bGVkZ2Ugb2Y8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+Jm5ic3A7IHRoZSBkYXRhIGZpbGXigJlzIHR5 cGUgb3IgcG9zaXRpb24gaW4gdGhlIG1ldGFkYXRhIGRpcmVjdG9yeTwvZGl2Pg0KPGRpdiBjbGFz cz0iIj4mbmJzcDsgbmFtZXNwYWNlLjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+ DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPiZuYnNwOyAmbmJzcDtJZiBh Y2Nlc3MgaXMgYWxsb3dlZCwgdGhlIGNsaWVudCB1c2VzIHRoZSBjb3JyZXNwb25kaW5nIChSRUFE IG9yIFJXKTwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4mbmJzcDsgJm5ic3A7Y3JlZGVudGlhbHMgdG8g cGVyZm9ybSB0aGUgSS9PIG9wZXJhdGlvbnMgYXQgdGhlIGRhdGEgZmlsZSdzIHN0b3JhZ2U8L2Rp dj4NCjxkaXYgY2xhc3M9IiI+Jm5ic3A7ICZuYnNwO2RldmljZXMuIOKApjwvZGl2Pg0KPGRpdiBj bGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+T3IgZG8geW91IHdh bnQgbWUgdG8gcHVsbCB0aGF0IG5ldyB0ZXh0IGludG8gYSBuZXcgc3Vic2VjdGlvbiAxNS4xIGFu ZDwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5zbGFtIHRoZSBvdGhlciBzdWJzZWN0aW9ucyBkb3duPzwv ZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7 IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczog bm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0 LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdo aXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tl LXdpZHRoOiAwcHg7IiBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBzdHls ZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBu b3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxl dHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4 OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5n OiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiIGNsYXNzPSIiPg0KPGJyIGNs YXNzPSIiPg0KPC9kaXY+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIiBzdHlsZT0i Zm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3Jt YWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRl ci1zcGFjaW5nOiBub3JtYWw7IG9ycGhhbnM6IGF1dG87IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0 LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsg d2lkb3dzOiBhdXRvOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXNpemUtYWRqdXN0 OiBhdXRvOyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxkaXYgY2xhc3M9IiI+ DQo8ZGl2IGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6 IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9u dC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3Rh cnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTog bm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4 OyI+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUi IGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5 OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZh cmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzog bm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zv cm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0 LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNz PSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQt c3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5v cm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5k ZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3Jk LXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8YnIgY2xh c3M9IiI+DQpUaGUgU2VjdXJpdHkgQ29uc2lkZXJhdGlvbnMgc2VjdGlvbiBpcyB3ZWxsLXdyaXR0 ZW4gYW5kIGhlbHBmdWwuIEkgZG8gaGF2ZSBzb21lPGJyIGNsYXNzPSIiPg0Kc3VnZ2VzdGlvbnMg Zm9yIGltcHJvdmluZyBpdCwgJm5ic3A7YW5kIGFsc28gc29tZSBxdWVzdGlvbnMuPGJyIGNsYXNz PSIiPg0KPGJyIGNsYXNzPSIiPg0KKDEpIFNlY3Rpb24gMi4yOiBzaG91bGQgdGhlIOKAnHJlY29t bWVuZGVk4oCdIGluIHRoZSBOb3RlIGJlIFJFQ09NTUVOREVEPzxiciBjbGFzcz0iIj4NClJlc3Ry aWN0aW5nIGFjY2VzcyBjb250cm9sIHRvIGp1c3Qgc3VwZXJ1c2VyIGhhdmUgYWNjZXNzIHRvIHRo ZSBzdG9yYWdlIGRldmljZTxiciBjbGFzcz0iIj4NCnNlZW1zIGxpa2UgYSB2YWx1YWJsZSBhZHZp Y2UuPGJyIGNsYXNzPSIiPg0KPC9ibG9ja3F1b3RlPg0KPGJyIGNsYXNzPSIiIHN0eWxlPSJmb250 LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsg Zm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNw YWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQt dHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsg LXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0i Zm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3Jt YWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRl ci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0 ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAw cHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6 IGlubGluZSAhaW1wb3J0YW50OyI+c3VyZTwvc3Bhbj48YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQt ZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBm b250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3Bh Y2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10 cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAt d2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxiciBjbGFzcz0iIiBzdHlsZT0iZm9u dC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7 IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1z cGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0 LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7 IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0 ZSIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJw eDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdl aWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsg dGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3Jt YWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4N CjxiciBjbGFzcz0iIj4NCigyKSBTZWN0aW9uIDIuMjogVGhlIE5PVEUgcHJvYmFibHkgc2hvdWxk IHByb3ZpZGUgZ3VpZGFuY2UgcmVnYXJkaW5nIHByb3RlY3Rpbmc8YnIgY2xhc3M9IiI+DQp0aGUg bmV0d29yayBjb25uZWN0aW9ucyBiZXR3ZWVuIHRoZSBtZXRhZGF0YSBzZXJ2ZXIgYW5kIHRoZSBm aWxlIHNlcnZlci4gRm9yPGJyIGNsYXNzPSIiPg0KZXhhbXBsZSwgc29tZXRoaW5nIGxpa2U6IOKA nENvbW11bmljYXRpb25zIGJldHdlZW4gdGhlIG1ldGFkYXRhIHNlcnZlciBhbmQgZmlsZTxiciBj bGFzcz0iIj4NCnNlcnZlciBuZWVkIHRvIHNlY3VyZWQuIElmIHRoZXJlIGlzIG5vdCBhZGVxdWF0 ZSBwaHlzaWNhbCBzZWN1cml0eSAoaS5lLiwgdGhlPGJyIGNsYXNzPSIiPg0Kc2VydmVycyBhcmUg bm90IGNvLWxvY2F0ZWQgaW4gYSBwaHlzaWNhbGx5IHNlY3VyZSBhcmVhKSwgdGhlaXIgY29tbXVu aWNhdGlvbnM8YnIgY2xhc3M9IiI+DQpNVVNUIGJlIHByb3RlY3RlZCBmb3IgY29uZmlkZW50aWFs aXR5IChlLmcuLCB1c2luZyBUTFMgb3IgSVBzZWMpLuKAnTxiciBjbGFzcz0iIj4NCjwvYmxvY2tx dW90ZT4NCjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1z aXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7 IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246 IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3Bh Y2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6 IDBweDsiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZv bnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9y bWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFs aWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRl LXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdp ZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiPk5vLA0K IHRoZSBNVVNUIGlzIHRvbyBzdHJvbmcgaGVyZS4gV2UgY2FuIHJlY29tbWVuZCBwcm9jZWR1cmVz LCB3ZSBjYW4gbm90IFJFUVVJUkUgdGhlbS48L3NwYW4+PGJyIGNsYXNzPSIiIHN0eWxlPSJmb250 LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsg Zm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNw YWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQt dHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsg LXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8YnIgY2xhc3M9IiIgc3R5bGU9ImZv bnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFs OyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXIt c3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4 dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4 OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxzcGFuIGNsYXNzPSIiIHN0eWxl PSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5v cm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0 dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7 IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6 IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9uZTsgZGlzcGxh eTogaW5saW5lICFpbXBvcnRhbnQ7Ij5JDQogYW0gZmluZSB3aXRoOjwvc3Bhbj48YnIgY2xhc3M9 IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1z dHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9y bWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRl bnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQt c3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxiciBjbGFz cz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250 LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBu b3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWlu ZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29y ZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPHNwYW4g Y2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsg Zm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdo dDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4 dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7 IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0 OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiPkNvbW11bmljYXRpb25zDQogYmV0 d2VlbiB0aGUgbWV0YWRhdGEgc2VydmVyIGFuZCBmaWxlPC9zcGFuPjxiciBjbGFzcz0iIiBzdHls ZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBu b3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxl dHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4 OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5n OiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPHNwYW4gY2xhc3M9IiIg c3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHls ZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFs OyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6 IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3Bh Y2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBk aXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiPnNlcnZlcg0KIFNIT1VMRCBiZSBzZWN1cmVkLiBJ ZiB0aGVyZSBpcyBub3QgYWRlcXVhdGUgcGh5c2ljYWwgc2VjdXJpdHkgKGkuZS4sIHRoZTwvc3Bh bj48YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTog MTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250 LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFy dDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBu b3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7 Ij4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNp emU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsg Zm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjog c3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFj ZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDog MHB4OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7Ij5zZXJ2ZXJzDQog YXJlIG5vdCBjby1sb2NhdGVkIGluIGEgcGh5c2ljYWxseSBzZWN1cmUgYXJlYSksIHRoZWlyIGNv bW11bmljYXRpb25zPC9zcGFuPjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZl dGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1j YXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7 IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9u ZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1z dHJva2Utd2lkdGg6IDBweDsiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBI ZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlh bnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9y bWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06 IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRl eHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9y dGFudDsiPlNIT1VMRA0KIGJlIHByb3RlY3RlZCBmb3IgY29uZmlkZW50aWFsaXR5IChlLmcuLCB1 c2luZyBUTFMgb3IgSVBzZWMpLuKAnTwvc3Bhbj48YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFt aWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250 LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2lu Zzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFu c2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Vi a2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRp diBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCkkgdW5kZXJzdGFuZCB0aGUgaGVzaXRh dGlvbiB0byBtYWtlIGl0IGEgTVVTVCwgYmVjYXVzZSBpdOKAmXMgb24gYSBwcm90b2NvbDwvZGl2 Pg0KPGRpdiBjbGFzcz0iIj50aGF0IGlzbuKAmXQgZGVzY3JpYmVkIGluIHRoaXMgZG9jdW1lbnQu IEJ1dCBJIHRoaW5rIGl04oCZcyByZWFzb25hYmxlIHRvIGRlc2NyaWJlPC9kaXY+DQo8ZGl2IGNs YXNzPSIiPmEgcmlzayBhbmQgbWFrZSBhIHJlcXVpcmVtZW50IHRoYXQgdGhlIHJpc2sgYmUgbWl0 aWdhdGVkLjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxkaXYgc3R5bGU9 ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9y bWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0 ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsg dGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzog MHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IiBjbGFzcz0iIj4NCjxiciBjbGFz cz0iIj4NCjwvZGl2Pg0KPGRpdiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1z aXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7 IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246 IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3Bh Y2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6 IDBweDsiIGNsYXNzPSIiPg0KSSBkbyBub3QgZGlzYWdyZWUgd2l0aCB0aGF0IHN0YXRlbWVudC48 L2Rpdj4NCjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1z aXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7 IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246 IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3Bh Y2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6 IDBweDsiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFt aWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250 LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2lu Zzogbm9ybWFsOyBvcnBoYW5zOiBhdXRvOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6 IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdpZG93czog YXV0bzsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zaXplLWFkanVzdDogYXV0bzsg LXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBj bGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBm b250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0 OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0 LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsg d29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPGRp diBjbGFzcz0iIj5DZXJ0YWlubHkgaXTigJlzIG5vdDwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5yZWFz b25hYmxlIHRvIHJlcXVpcmUgYSBwYXJ0aWN1bGFyIG1ldGhvZCB0byBiZSB1c2VkIHRvIHByb3Rl Y3QgdGhlIHByb3RvY29sPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPih3aGljaCBpcyB3aHkgSSBzdWdn ZXN0ZWQg4oCcZS5nLiwgdXNpbmcgVExTIG9yIElQc2Vj4oCdIGFib3ZlIHJhdGhlciB0aGFuIOKA nGkuZS7igJ0pLjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxibG9ja3F1 b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBm b250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5v cm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgb3JwaGFu czogYXV0bzsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNm b3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3aWRvd3M6IGF1dG87IHdvcmQtc3BhY2lu ZzogMHB4OyAtd2Via2l0LXRleHQtc2l6ZS1hZGp1c3Q6IGF1dG87IC13ZWJraXQtdGV4dC1zdHJv a2Utd2lkdGg6IDBweDsiPg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiIgc3R5bGU9ImZv bnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFs OyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXIt c3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4 dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4 OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxkaXYgY2xhc3M9IiI+PGJyIGNs YXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPldpdGggdG9kYXnigJlzIHBlcnZhc2l2ZSBw cml2YWN5IHRocmVhdHMgdG8gbmV0d29yayB0cmFmZmljIGl04oCZcyBoYXJkIHRvJm5ic3A7PC9k aXY+DQo8ZGl2IGNsYXNzPSIiPmp1c3RpZnkgYWxsb3dpbmcgbWV0YWRhdGEgdG8gdHJhdmVyc2Ug dW5wcm90ZWN0ZWQgbmV0d29ya3MgYXMgY2xlYXItdGV4dCZuYnNwOzwvZGl2Pg0KPGRpdiBjbGFz cz0iIj4oaS4uZSwgYXZhaWxhYmxlIHRvICZuYnNwO3Bhc3NpdmUgZWF2ZXNkcm9wcGVycykuIEl0 4oCZcyBhbHNvIGhhcmQgb3IgdG8ganVzdGlmeSBhbGxvd2luZyZuYnNwOzwvZGl2Pg0KPGRpdiBj bGFzcz0iIj5zZWN1cml0eS1yZWxldmVudCBwcm90b2NvbHMgdG8gYmUgdHJhbnNmZXJyaW5nIGl0 IHdpdGhvdXQgY3J5cHRvZ3JhcGhpYyBpbnRlZ3JpdHkmbmJzcDs8L2Rpdj4NCjxkaXYgY2xhc3M9 IiI+cHJvdGVjdGlvbi4gSXQgc2VlbXMgaW1wb3J0YW50IHRvIHJlbWluZCBwcm90b2NvbCBkZXZl bG9wZXJzIHRoYXQgYm90aDwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5jb25jZXJucyBhcmUgYXBwbGlj YWJsZS4gSG93IGFib3V0IHNvbWV0aGluZyBsaWtlIHRoaXMsIHdoZXJlIG1vcmUgcmF0aW9uYWxl PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPmlzIGdpdmVuLiBOb3RlIHRoYXQgdGhlIHJlcXVpcmVtZW50 IHRoYXQgdGhlIHByb3RvY29sIG11c3QgYmUgcHJvdGVjdGVkLCBidXQ8L2Rpdj4NCjxkaXYgY2xh c3M9IiI+bm8gcGFydGljdWxhciBtZXRob2Qgb2YgcHJvdGVjdGlvbiBpcyBub3QgbWFuZGF0ZWQu PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0i Ij4mcXVvdDtDb21tdW5pY2F0aW9ucyBiZXR3ZWVuIHRoZSBtZXRhZGF0YSBzZXJ2ZXIgYW5kIGZp bGU8YnIgY2xhc3M9IiI+DQpzZXJ2ZXIgTVVTVCBiZSBzZWN1cmUgZnJvbSBlYXZlc2Ryb3BwZXJz IGFuZCBtYW4taW4tdGhlLW1pZGRsZSBwcm90b2NvbCZuYnNwOzwvZGl2Pg0KPGRpdiBjbGFzcz0i Ij50YW1wZXJpbmcuIFRoZSBzZWN1cml0eSBtZWFzdXJlIGNvdWxkIGJlIGR1ZSB0byBwaHlzaWNh bCBzZWN1cml0eSAoZS5nLiwgdGhlJm5ic3A7PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPnNlcnZlcnMg YXJlIGNvLWxvY2F0ZWQgaW4gYSBwaHlzaWNhbGx5IHNlY3VyZSBhcmVhKSwgZnJvbSBlbmNyeXB0 ZWQgY29tbXVuaWNhdGlvbnMsPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPm9yIHNvbWUgb3RoZXIgdGVj aG5pcXVlLuKAnTwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxkaXYgc3R5 bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTog bm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBs ZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBw eDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2lu ZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IiBjbGFzcz0iIj4NCjxiciBj bGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9u dC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3Jt YWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxp Z246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUt c3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lk dGg6IDBweDsiIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IHN0eWxlPSJm b250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1h bDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVy LXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRl eHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBw eDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyIgY2xhc3M9IiI+DQpJ4oCZbSBzdGls bCBoZXNpdGFudCwgaW4gcGFydCBiZWNhdXNlIEkgY2Fu4oCZdCBtYWtlIGFuIGlyb25jbGFkIHJ1 bGUgYXMgYSBzdGFuZGFyZOKAmXM8L2Rpdj4NCjxkaXYgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2 ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQt Y2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFs OyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5v bmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQt c3Ryb2tlLXdpZHRoOiAwcHg7IiBjbGFzcz0iIj4NCmF1dGhvciB0aGF0IEkga25vdyBJIGFtIGdv aW5nIHRvIHZpb2xhdGUgd2l0aCBteSBvd24gaW1wbGVtZW50YXRpb24uPC9kaXY+DQo8ZGl2IHN0 eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6 IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsg bGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAw cHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNp bmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyIgY2xhc3M9IiI+DQo8YnIg Y2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZv bnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9y bWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFs aWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRl LXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdp ZHRoOiAwcHg7IiBjbGFzcz0iIj4NCkFsc28sIEkga25vdyB0aGF0IHRoZXJlIG1pZ2h0IGJlIGV4 aXN0ZW50IHN0b3JhZ2UgZGV2aWNlcyB3aGljaCBkbyBub3Qgc3VwcG9ydDwvZGl2Pg0KPGRpdiBz dHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxl OiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7 IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDog MHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFj aW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiIGNsYXNzPSIiPg0KTkZT IG92ZXIgVExTL0lQc2VjL2V0Yy4gWWVzLCBwaHlzaWNhbCBzZWN1cml0eSBpcyB0aGUgYW5zd2Vy IGhlcmUsIGJ1dCBJIGNhbm5vdDwvZGl2Pg0KPGRpdiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZl dGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1j YXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7 IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9u ZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1z dHJva2Utd2lkdGg6IDBweDsiIGNsYXNzPSIiPg0KaW4gZnVsbCBjb25maWRlbmNlIGV4cGVjdCB0 aGF0IGFuIGFjdHVhbCBkZXBsb3ltZW50IG1lZXRzIGFsbCBvZiB0aGVzZSBjcml0ZXJpYS48L2Rp dj4NCjxkaXYgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsg Zm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdo dDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4 dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7 IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IiBjbGFz cz0iIj4NCkF0IHNvbWUgcG9pbnQsIHRoZSBidXJkZW4gaXMgb2ZmIG9mIHRoZSBwcm90b2NvbCBp bXBsZW1lbnRhdGlvbiBhbmQgb250byB0aGU8L2Rpdj4NCjxkaXYgc3R5bGU9ImZvbnQtZmFtaWx5 OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZh cmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzog bm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zv cm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0 LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IiBjbGFzcz0iIj4NCmRlcGxveW1lbnQuPC9kaXY+DQo8 ZGl2IHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQt c3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5v cm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5k ZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3Jk LXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyIgY2xhc3M9IiI+ DQo8YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRp Y2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fw czogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0 ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7 IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ry b2tlLXdpZHRoOiAwcHg7IiBjbGFzcz0iIj4NCklmIHdlIGNoYW5nZSB0aGUgTVVTVCB0byBhIFNI T1VMRCwgSSBhbSBwZXJmZWN0bHkgZmluZSBtYWtpbmcgdGhlIGNoYW5nZS4gOi0pPC9kaXY+DQo8 ZGl2IHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQt c3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5v cm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5k ZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3Jk LXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyIgY2xhc3M9IiI+ DQo8YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRp Y2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fw czogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0 ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7 IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ry b2tlLXdpZHRoOiAwcHg7IiBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPC9kaXY+ DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2PjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdj48YnIgY2xh c3M9IiI+DQo8L2Rpdj4NCjxkaXY+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2PkJ5IHRoZSB3 YXksIG5vbmUgb2YgdGhlIG90aGVyIGxheW91dCB0eXBlcyBtYWtlIHRoaXMgdHlwZSBvZiByZXF1 aXJlbWVudCBvbjwvZGl2Pg0KPGRpdj50aGVpciBjb250cm9sIHByb3RvY29scy4gVGhlIG92ZXJh bGwgc2VjdXJpdHkgb2YgdGhlIGRhdGEgbGllcyBpbiB0aGUgY29tYmluYXRpb248L2Rpdj4NCjxk aXY+b2YgbWV0YWRhdGEgc2VydmVyLCBzdG9yYWdlIGRldmljZSwgYW5kIGNsaWVudC48L2Rpdj4N CjxkaXY+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2PjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0K PGJyIGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+DQo8ZGl2IGNs YXNzPSIiPjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1z aXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7 IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246 IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3Bh Y2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6 IDBweDsiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFt aWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250 LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2lu Zzogbm9ybWFsOyBvcnBoYW5zOiBhdXRvOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6 IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdpZG93czog YXV0bzsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zaXplLWFkanVzdDogYXV0bzsg LXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBj bGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBm b250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0 OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0 LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsg d29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPGRp diBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0i Ij4NCjxkaXYgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIiBzdHls ZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBu b3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxl dHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4 OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5n OiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KKDMpIEZyb20gdGhlIGRl c2NyaXB0aW9uIG9mIHN5bnRoZXRpYyB1aWRzL2dpZHMgaW4gU2VjdGlvbiAyLjIsIEkgYmVsaWV2 ZSB0aGF0PGJyIGNsYXNzPSIiPg0KdGhlIGZ1bGwgcmFuZ2Ugb2YgZmlsZSBwZXJtaXNzaW9ucyAo ZS5nLiwgb3duZXIgci93L3gpICZuYnNwO2lzIGhvbm9yZWQgaW4gdGhlPGJyIGNsYXNzPSIiPg0K dGlnaHRseSBjb3VwbGVkIG1vZGVsLCBidXQgYXJlIHJlc3RyaWN0ZWQgaW4gdGhlIGxvb3NlbHkg Y291cGxlZCBtb2RlbCB0bzxiciBjbGFzcz0iIj4NCuKAnG93bmVyIHIvd+KAnSwg4oCcZ3JvdXAg cuKAnS4gSWYgdGhhdCBpcyBjb3JyZWN0LCBJIHRoaW5rIHRoZSBzZWN1cml0eSBjb25zaWRlcmF0 aW9uczxiciBjbGFzcz0iIj4NCnNob3VsZCBleHBsaWNpdGx5IG1lbnRpb24gdGhhdCB0aGUgZWZm ZWN0IG9mIGFjY2VzcyBwZXJtaXNzaW9ucyBpcyByZWR1Y2VkIG9uPGJyIGNsYXNzPSIiPg0KdGhl IGZpbGUgc2VydmVyIGZpbGVzLjxiciBjbGFzcz0iIj4NCjwvYmxvY2txdW90ZT4NCjxiciBjbGFz cz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250 LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBu b3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWlu ZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29y ZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPHNwYW4g Y2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsg Zm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdo dDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4 dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7 IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0 OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiPlsyXQ0KIEkgdGhpbmsgdGhlIGNv bmZ1c2lvbiBoZXJlIGlzIHRoYXQgdGhlIGZpbGVzIG9uIHN0b3JhZ2UgZGV2aWNlIGFyZSBub3Q8 L3NwYW4+PGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNp emU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsg Zm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjog c3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFj ZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDog MHB4OyI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9u dC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3Jt YWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxp Z246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUt c3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lk dGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyI+aW4NCiB0 aGUgZmlsZSBoaWVyYXJjaHkgYXMgc2VlbiBvbiB0aGUgbWV0YWRhdGEgc2VydmVyLjwvc3Bhbj48 YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJw eDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdl aWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsg dGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3Jt YWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4N CjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAx MnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQt d2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0 OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5v cm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsi Pg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6 ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBm b250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBz dGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNl OiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAw cHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiPk9uDQogYSBmaWxl IGJ5IGZpbGUgYmFzaXMgb24gdGhlIHN0b3JhZ2UgZGV2aWNlLCB3ZSBhcmUgZ2l2aW5nIHRoZSBj bGllbnQgZWl0aGVyPC9zcGFuPjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZl dGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1j YXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7 IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9u ZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1z dHJva2Utd2lkdGg6IDBweDsiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBI ZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlh bnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9y bWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06 IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRl eHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9y dGFudDsiPndyaXRlDQogbW9kaWZpY2F0aW9uIGFjY2VzcywgcmVhZCBhY2Nlc3MsIG9yIG5vIGFj Y2VzcyBhdCBhbGwuIFRoZSBjbGllbnQgY2Fubm90PC9zcGFuPjxiciBjbGFzcz0iIiBzdHlsZT0i Zm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3Jt YWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRl ci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0 ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAw cHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPHNwYW4gY2xhc3M9IiIgc3R5 bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTog bm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBs ZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBw eDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2lu ZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNw bGF5OiBpbmxpbmUgIWltcG9ydGFudDsiPnJlbW92ZQ0KIHRoZSBmaWxlIChpdCB3b3VsZCBuZWVk IHRvIGtub3cgdGhlIHBhcmVudCBkaXJlY3RvcnkgRkggYW5kIHRoZTwvc3Bhbj48YnIgY2xhc3M9 IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1z dHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9y bWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRl bnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQt c3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxzcGFuIGNs YXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZv bnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6 IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQt aW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3 b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDog bm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7Ij5uYW1lDQogb2YgdGhlIGZpbGUgLSBu ZWl0aGVyIG9mIHdoaWNoIGl0IGhhcykuICZuYnNwO0l0IGNhbiBlZmZlY3RpdmVseSByZW1vdmUg dGhlIGNvbnRlbnQ8L3NwYW4+PGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0 aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNh cHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsg dGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25l OyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0 cm9rZS13aWR0aDogMHB4OyI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhl bHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFu dC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3Jt YWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTog bm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4 dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0 YW50OyI+aWYNCiBpdCBoYXMgd3JpdGUgcGVybWlzc2lvbiAoYnV0IG5vdGhpbmcgd291bGQgcHJl dmVudCB0aGlzIGluIGEgdGlnaHRseTwvc3Bhbj48YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFt aWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250 LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2lu Zzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFu c2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Vi a2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250 LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsg Zm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNw YWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQt dHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsg LXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5s aW5lICFpbXBvcnRhbnQ7Ij5jb3VwbGVkDQogbW9kZWwpLjxzcGFuIGNsYXNzPSJBcHBsZS1jb252 ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48L3NwYW4+PGJyIGNsYXNzPSIiIHN0eWxlPSJmb250 LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsg Zm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNw YWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQt dHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsg LXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4N CjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9 IiI+R290IGl0LCB0aGFua3MuPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPiZuYnNwOzxiciBjbGFzcz0i Ij4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj48YnIg Y2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsg Zm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdo dDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4 dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7 IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxi ciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4 OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2Vp Z2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0 ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1h bDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0K PGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEy cHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13 ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7 IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9y bWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+ DQo8YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTog MTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250 LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFy dDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBu b3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7 Ij4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTog SGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJp YW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5v cm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3Jt OiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10 ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8YnIgY2xhc3M9IiI+DQooNCkgU2VjdGlvbiAyLjIu IEluIHRoaXMgcGhyYXNlIOKAnGl0IG1heSBiZSBhc3NpZ25lZCBzb21lIHJhbmRvbSBzeW50aGV0 aWM8YnIgY2xhc3M9IiI+DQp1aWQvZ2lkIHRvIGRlbnkgYWNjZXNz4oCdLCB3b3VsZCBhIGJldHRl ciB3b3JkIGZvciDigJxyYW5kb23igJ0gYmUg4oCcdW51c2Vk4oCdIG9yPGJyIGNsYXNzPSIiPg0K 4oCcdW5wcmVkaWN0YWJsZeKAnT8gQWxzbyB3aGF0IGlzIHRoZSBzZWN1cml0eSB2YWx1ZSBpbnRl bmRlZCBieSB0aGUgdXNlIG9mIGE8YnIgY2xhc3M9IiI+DQrigJxyYW5kb23igJ0gdmFsdWUgZm9y IHN5bnRoZXRpYyB1aWRzL2dpZHM/PGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KPC9ibG9j a3F1b3RlPg0KPGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250 LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1h bDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGln bjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1z cGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0 aDogMHB4OyI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsg Zm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBu b3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQt YWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hp dGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Ut d2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyI+SW4N CiBhbiBlYXJsaWVyIHJldmlldyAoYnkgTGluZGEgRHVuYmFyKSwgdGhhdCBwaHJhc2Ugd2FzIGNo YW5nZWQ6PC9zcGFuPjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsg Zm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBu b3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQt YWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hp dGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Ut d2lkdGg6IDBweDsiPg0KPGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNh OyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6 IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4 dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3 aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9r ZS13aWR0aDogMHB4OyI+DQo8YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRp Y2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fw czogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0 ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7 IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ry b2tlLXdpZHRoOiAwcHg7Ij4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVs dmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50 LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1h bDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBu b25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0 LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRh bnQ7Ij4mbmJzcDtPbg0KIHRoZSBzdG9yYWdlIGRldmljZSwgaXQgbWF5IGJlIGFzc2lnbmVkIHNv bWUgcmFuZG9tIHN5bnRoZXRpYyB1aWQvPC9zcGFuPjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1m YW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZv bnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFj aW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRy YW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13 ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZv bnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFs OyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXIt c3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4 dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4 OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBp bmxpbmUgIWltcG9ydGFudDsiPiZuYnNwO2dpZA0KIHRvIGRlbnkgYWNjZXNzOjwvc3Bhbj48YnIg Y2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsg Zm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdo dDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4 dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7 IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxi ciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4 OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2Vp Z2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0 ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1h bDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0K PHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTog MTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250 LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFy dDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBu b3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7 IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiPiZuYnNwOy1ydy1yLS0t LS0NCiAmbmJzcDsmbmJzcDsmbmJzcDsxIDE5NDUyICZuYnNwOyZuYnNwOzI4NDE4ICZuYnNwOyZu YnNwOyZuYnNwOzE2OTcgRGVjICZuYnNwOzQgMTE6MzEgZGF0YV9vbXBoYS5jPC9zcGFuPjxiciBj bGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBm b250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0 OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0 LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsg d29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPGJy IGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7 IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWln aHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRl eHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFs OyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8 c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAx MnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQt d2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0 OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5v cm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsg ZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyI+Jm5ic3A7V2hlbg0KIHRo ZSBmaWxlIGlzIG9wZW5lZCBvbiBhIGNsaWVudCBhbmQgYWNjZXNzZWQsIGl0IHdpbGwgdHJ5IHRv IGdldCBhPC9zcGFuPjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsg Zm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBu b3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQt YWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hp dGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Ut d2lkdGg6IDBweDsiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRp Y2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fw czogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0 ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7 IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ry b2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsi PiZuYnNwO2xheW91dA0KIGZvciB0aGUgZGF0YSBmaWxlLiBTaW5jZSB0aGUgbGF5b3V0IGtub3dz IG5vdGhpbmc8L3NwYW4+PGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNh OyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6 IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4 dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3 aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9r ZS13aWR0aDogMHB4OyI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZl dGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1j YXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7 IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9u ZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1z dHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50 OyI+Jm5ic3A7YWJvdXQNCiB0aGUgdXNlciAoYW5kIGRvZXMgbm90IGNhcmUpLCB3aGV0aGVyIHRo ZSB1c2VyIGxvZ2h5ciBvcjwvc3Bhbj48YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBI ZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlh bnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9y bWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06 IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRl eHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWls eTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12 YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6 IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNm b3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtp dC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFp bXBvcnRhbnQ7Ij4mbmJzcDtnYXJibw0KIG9wZW5zIHRoZSBmaWxlIGRvZXMgbm90IG1hdHRlci4g Jm5ic3A7VGhlIGNsaWVudCBoYXMgdG8gcHJlc2VudDwvc3Bhbj48YnIgY2xhc3M9IiIgc3R5bGU9 ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9y bWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0 ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsg dGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzog MHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxzcGFuIGNsYXNzPSIiIHN0 eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6 IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsg bGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAw cHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNp bmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9uZTsgZGlz cGxheTogaW5saW5lICFpbXBvcnRhbnQ7Ij4mbmJzcDthbg0KIHVpZCBvZiAxOTQ1MiB0byBnZXQg d3JpdGUgcGVybWlzc2lvbi4gSWYgaXQgcHJlc2VudHMgYW55IG90aGVyPC9zcGFuPjxiciBjbGFz cz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250 LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBu b3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWlu ZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29y ZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPHNwYW4g Y2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsg Zm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdo dDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4 dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7 IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0 OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiPiZuYnNwO3ZhbHVlDQogZm9yIHRo ZSB1aWQsIHRoZW4gaXQgbXVzdCBnaXZlIGEgZ2lkIG9mIDI4NDE4IHRvIGdldCByZWFkPC9zcGFu PjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAx MnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQt d2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0 OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5v cm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsi Pg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6 ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBm b250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBz dGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNl OiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAw cHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiPiZuYnNwO2FjY2Vz cy48L3NwYW4+PGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250 LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1h bDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGln bjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1z cGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0 aDogMHB4OyI+DQo8YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZv bnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9y bWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFs aWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRl LXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdp ZHRoOiAwcHg7Ij4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNh OyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6 IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4 dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3 aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9r ZS13aWR0aDogMHB4OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7Ij4m bmJzcDtGdXJ0aGVyLA0KIGlmIHRoZSBtZXRhZGF0YSBzZXJ2ZXIgZGVjaWRlcyB0byBmZW5jZSB0 aGUgZmlsZSwgaXQgbWF5PC9zcGFuPjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhl bHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFu dC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3Jt YWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTog bm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4 dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5 OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZh cmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzog bm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zv cm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0 LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWlt cG9ydGFudDsiPiZuYnNwO2NoYW5nZQ0KIHRoZSB1aWQgYW5kIGdpZCBhcyBzdWNoOjwvc3Bhbj48 YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJw eDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdl aWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsg dGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3Jt YWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4N CjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAx MnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQt d2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0 OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5v cm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsi Pg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6 ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBm b250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBz dGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNl OiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAw cHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiPiZuYnNwOy1ydy1y LS0tLS0NCiAmbmJzcDsmbmJzcDsmbmJzcDsxIDE5NDUzICZuYnNwOyZuYnNwOzI4NDE5ICZuYnNw OyZuYnNwOyZuYnNwOzE2OTcgRGVjICZuYnNwOzQgMTE6MzEgZGF0YV9vbXBoYS5jPC9zcGFuPjxi ciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4 OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2Vp Z2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0 ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1h bDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0K PGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEy cHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13 ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7 IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9y bWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+ DQo8YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTog MTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250 LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFy dDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBu b3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7 Ij4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNp emU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsg Zm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjog c3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFj ZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDog MHB4OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7Ij5XaGF0DQogd2Ug Y291bGQgc3VnZ2VzdCB3b3VsZCBiZSBzb21ldGhpbmcgYWxvbmcgdGhlIGxpbmVzIG9mOjwvc3Bh bj48YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTog MTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250 LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFy dDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBu b3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7 Ij4NCjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXpl OiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZv bnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0 YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6 IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBw eDsiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQt c2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFs OyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWdu OiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNw YWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRo OiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiPiZuYnNwO09u DQogdGhlIHN0b3JhZ2UgZGV2aWNlLCBpdCBtYXkgYmUgYXNzaWduZWQgc29tZSB1bnByZWRpY3Rh YmxlPC9zcGFuPjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9u dC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3Jt YWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxp Z246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUt c3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lk dGg6IDBweDsiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7 IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczog bm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0 LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdo aXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tl LXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiPiZu YnNwO3N5bnRoZXRpYw0KIHVpZC9naWQgdG8gZGVueSBhY2Nlc3MuPC9zcGFuPjxiciBjbGFzcz0i IiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0 eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3Jt YWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVu dDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1z cGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPHNwYW4gY2xh c3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9u dC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDog bm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1p bmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdv cmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBu b25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiPiZuYnNwO+KApjwvc3Bhbj48YnIgY2xh c3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9u dC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDog bm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1p bmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdv cmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxzcGFu IGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7 IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWln aHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRl eHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFs OyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9h dDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7Ij4mbmJzcDtGdXJ0aGVyLA0KIGlm IHRoZSBtZXRhZGF0YSBzZXJ2ZXIgZGVjaWRlcyB0byBmZW5jZSB0aGUgZmlsZSwgaXQ8L3NwYW4+ PGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEy cHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13 ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7 IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9y bWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+ DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXpl OiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZv bnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0 YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6 IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBw eDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyI+Jm5ic3A7c2hvdWxk DQogY2hhbmdlIHRoZSB1aWQgYW5kL29yIGdpZCBzdWNoIHRoYXQgdGhlc2UgdmFsdWVzPC9zcGFu PjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAx MnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQt d2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0 OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5v cm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsi Pg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6 ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBm b250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBz dGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNl OiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAw cHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiPiZuYnNwO25laXRo ZXINCiBtYXRjaCBlYXJsaWVyIHZhbHVlcyBmb3IgdGhhdCBmaWxlIG5vciBtYXRjaDwvc3Bhbj48 YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJw eDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdl aWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsg dGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3Jt YWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4N CjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6 IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9u dC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3Rh cnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTog bm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4 OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7Ij4mbmJzcDthDQogcHJl ZGljdGFibGUgY2hhbmdlIGJhc2VkIG9uIGFuIGVhcmxpZXIgZmVuY2luZy48L3NwYW4+PGJyIGNs YXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZv bnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6 IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQt aW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3 b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8YnIg Y2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsg Zm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdo dDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4 dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7 IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxz cGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEy cHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13 ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7 IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9y bWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBm bG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7Ij5VZ2gsDQogbm90IHN1cmUg SSBsaWtlIHRoZSB3b3Jkcy48L3NwYW4+PGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTog SGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJp YW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5v cm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3Jt OiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10 ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5 OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZh cmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzog bm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zv cm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0 LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LWZh bWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9u dC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNp bmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJh bnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdl YmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5l ICFpbXBvcnRhbnQ7Ij51aWRbTiYjNDM7MV0NCiAhPSB1aWRbTi0xXSAmYW1wOyZhbXA7IHVpZFtO JiM0MzsxXSAmbmJzcDshPSBjaGFuZ2UodWlkW04tMV0gLSZndDsgdWlkW05dKS48L3NwYW4+PGJy IGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7 IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWln aHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRl eHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFs OyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8 YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJw eDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdl aWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsg dGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3Jt YWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4N CjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6 IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9u dC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3Rh cnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTog bm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4 OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7Ij5JLmUuLA0KIGRvIG5v dCBzZXQgdG8gcmVjZW50IG9sZCB2YWx1ZXMgKG1pZ2h0IGZlbmNlIGJhY2sgdG8gYW4gdWlkPC9z cGFuPjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXpl OiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZv bnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0 YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6 IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBw eDsiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQt c2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFs OyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWdu OiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNw YWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRo OiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiPmFuDQogb2xk ZXIgY2xpZW50IGFscmVhZHkgaGFzKSBhbmQgZG8gbm90IHVzZSBhIGZpeGVkIGluY3JlbWVudC48 L3NwYW4+PGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNp emU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsg Zm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjog c3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFj ZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDog MHB4OyI+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIi Pg0KPC9kaXY+DQpTbyBtYXliZSBpbiB0aGUgZmlyc3QgcGFyYWdyYXBoIHlvdSBtZWFuIOKAnOKA piBzb21lIHVucHJlZGljdGFibGUgYW5kPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPnVudXNlZCBieSBh bnkgY3VycmVudCBjbGllbnTigJ0/PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4N CjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj48YnIgY2xh c3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9u dC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDog bm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1p bmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdv cmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxiciBj bGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBm b250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0 OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0 LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsg d29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPGJs b2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRp Y2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fw czogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0 ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7 IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ry b2tlLXdpZHRoOiAwcHg7Ij4NCig1KSBJbiB0aGUg4oCcbG9vc2UgY291cGxpbmcgbW9kZWzigJ0g ZmlsZSBhY2Nlc3MgYWN0dWFsbHkgZW5mb3JjZWQgYnkgdGhlIGNsaWVudCw8YnIgY2xhc3M9IiI+ DQp3aGljaCBwcmVzdW1hYmx5IGNhbiBiZSBtYW5pcHVsYXRlZCBieSBhbiBldmlsIHVzZXIuIFRo aXMgaXMgY2xlYXJseSBzdGF0ZWQgbjxiciBjbGFzcz0iIj4NClNlY3Rpb24gMi4yOiDigJwgVGhl IGNsaWVudCBpcyB0aHVzIHNvbGVseSByZXNwb25zaWJsZSBmb3IgZW5mb3JjaW5nIGZpbGU8YnIg Y2xhc3M9IiI+DQpwZXJtaXNzaW9ucyBpbiBhIGxvb3NlbHkgY291cGxlZCBtb2RlbC7igJ0gJm5i c3A7QWxzbywgU2VjdGlvbiAyLjIuMSBtZW50aW9ucyDigJxhPGJyIGNsYXNzPSIiPg0KU0VUQVRU UiB3b3VsZCBiZSBzZW50IHRvIHRoZSBzdG9yYWdlIGRldmljZSB0byBzZXQgdGhlIG93bmVyIGFu ZCBncm91cCBvZiB0aGU8YnIgY2xhc3M9IiI+DQpkYXRhIGZpbGXigJ0sIGFuZCBzaW5jZSBoZXJl IGlzIG5vIGNvbnRyb2wgcHJvdG9jb2wgYmV0d2VlbiB0aGUgbWV0YWRhdGEgc2VydmVyPGJyIGNs YXNzPSIiPg0KYW5kIHRoZSBmaWxlIHNlcnZlciBzbyBJIGFzc3VtZSBpdCBpcyBzZW50IGJ5IHRo ZSBjbGllbnQuPGJyIGNsYXNzPSIiPg0KPC9ibG9ja3F1b3RlPg0KPGJyIGNsYXNzPSIiIHN0eWxl PSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5v cm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0 dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7 IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6 IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8c3BhbiBjbGFzcz0iIiBz dHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxl OiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7 IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDog MHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFj aW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRp c3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyI+SXQNCiBpcyBzdWJ0bGUsIGJ1dCB0aGlzIGdvZXMg YmFjayB0byB0aGUgZmFjdCAoc2VlIFsxXSkgdGhhdCDigJxubyBjb250cm9sIHByb3RvY29s4oCd IGRvZXMgbm90PC9zcGFuPjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGlj YTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBz OiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRl eHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsg d2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJv a2Utd2lkdGg6IDBweDsiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2 ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQt Y2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFs OyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5v bmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQt c3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFu dDsiPmltcGx5DQog4oCcbm8gY29tbXVuaWNhdGlvbiBiZXR3ZWVuIHRoZSBtZXRhZGF0YSBzZXJ2 ZXIgYW5kIHRoZSBzdG9yYWdlPC9zcGFuPjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6 IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFy aWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBu b3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9y bTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQt dGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFt aWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250 LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2lu Zzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFu c2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Vi a2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUg IWltcG9ydGFudDsiPmRldmljZeKAnS4NCiAmbmJzcDtJLmUuLCB0aGUgTURTIGRvZXMgdGhlIFNF VEFUVFIuPC9zcGFuPjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsg Zm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBu b3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQt YWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hp dGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Ut d2lkdGg6IDBweDsiPg0KPGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNh OyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6 IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4 dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3 aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9r ZS13aWR0aDogMHB4OyI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZl dGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1j YXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7 IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9u ZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1z dHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50 OyI+QWxzbywNCiBJIG5vdGljZSB5b3UgYXJlIHVzaW5nIHRoZSBwaHJhc2Ug4oCcZmlsZSBzZXJ2 ZXLigJ0sIHdoaWNoIHByb2JhYmx5IGltcGFjdHM8L3NwYW4+PGJyIGNsYXNzPSIiIHN0eWxlPSJm b250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1h bDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVy LXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRl eHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBw eDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8c3BhbiBjbGFzcz0iIiBzdHls ZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBu b3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxl dHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4 OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5n OiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3Bs YXk6IGlubGluZSAhaW1wb3J0YW50OyI+eW91cg0KIHZpZXcgaW4geW91ciBwb2ludCAzIChzZWUg bXkgWzJdKSAtIHRoZSB0ZXJtIHdlIHVzZSBpcyBzdG9yYWdlPC9zcGFuPjxiciBjbGFzcz0iIiBz dHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxl OiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7 IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDog MHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFj aW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPHNwYW4gY2xhc3M9 IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1z dHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9y bWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRl bnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQt c3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBub25l OyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiPmRldmljZS4NCiBUaGVyZSBpcyBubyByZXF1 aXJlbWVudCB0aGF0IHRoaXMgZGV2aWNlIHNlcnZlIHVwIGRhdGEgZmlsZXM8L3NwYW4+PGJyIGNs YXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZv bnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6 IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQt aW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3 b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8c3Bh biBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4 OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2Vp Z2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0 ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1h bDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxv YXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyI+YXMNCiBpZiB0aGV5IHdlcmUg aW4gYSBmaWxlc3lzdGVtLiBUaGUgc3RvcmFnZSBkZXZpY2UgaXMgbGltaXRlZCBpbiB0aGUgb3Bl cmF0aW9uczwvc3Bhbj48YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7 IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczog bm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0 LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdo aXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tl LXdpZHRoOiAwcHg7Ij4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0 aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNh cHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsg dGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25l OyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0 cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7 Ij50aGF0DQogaXQgY2FuIHJlc3BvbmQgdG8gZnJvbSB0aGUgY2xpZW50IGJhc2VkIG9uIHRoZSBp bmZvcm1hdGlvbiBpdCBpczwvc3Bhbj48YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBI ZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlh bnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9y bWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06 IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRl eHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWls eTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12 YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6 IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNm b3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtp dC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFp bXBvcnRhbnQ7Ij5wcmVzZW50ZWQNCiB3aXRoLjwvc3Bhbj48YnIgY2xhc3M9IiIgc3R5bGU9ImZv bnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFs OyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXIt c3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4 dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4 OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxiciBjbGFzcz0iIiBzdHlsZT0i Zm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3Jt YWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRl ci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0 ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAw cHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPHNwYW4gY2xhc3M9IiIgc3R5 bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTog bm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBs ZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBw eDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2lu ZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNw bGF5OiBpbmxpbmUgIWltcG9ydGFudDsiPkZvcg0KIGV4YW1wbGUsIHRoZSBleHBvcnRzIG9uIHRo ZSBzdG9yYWdlIGRldmljZSBjYW4gYmUgY29uZmlndXJlZCBzdWNoPC9zcGFuPjxiciBjbGFzcz0i IiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0 eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3Jt YWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVu dDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1z cGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPHNwYW4gY2xh c3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9u dC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDog bm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1p bmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdv cmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBu b25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiPnRoYXQNCiB0aGUgbWV0YWRhdGEgc2Vy dmVyIGlzIHRoZSBvbmx5IG9uZSB3aGljaCBjYW4gbW91bnQgdGhlIGV4cG9ydHMuPC9zcGFuPjxi ciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4 OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2Vp Z2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0 ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1h bDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0K PHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTog MTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250 LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFy dDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBu b3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7 IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiPkFuZA0KIHNpbmNlIHRo ZSBtZXRhZGF0YSBzZXJ2ZXIgb25seSBoYW5kcyBvdXQgRmlsZSBIYW5kbGVzIHRvIHRoZTwvc3Bh bj48YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTog MTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250 LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFy dDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBu b3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7 Ij4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNp emU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsg Zm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjog c3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFj ZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDog MHB4OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7Ij5jbGllbnRzLA0K IHRoZXkgd291bGQgbm90IGJlIGFibGUgdG8gd2FsayB0aGUgbmFtZXNwYWNlIG9mIHRoZSBzdG9y YWdlPC9zcGFuPjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9u dC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3Jt YWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxp Z246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUt c3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lk dGg6IDBweDsiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7 IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczog bm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0 LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdo aXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tl LXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiPmRl dmljZS48L3NwYW4+PGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBm b250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5v cm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1h bGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0 ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13 aWR0aDogMHB4OyI+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxkaXYgY2xhc3M9IiI+PGJyIGNs YXNzPSIiPg0KPC9kaXY+DQpUaGFua3MgZm9yIHRoZSBleHBsYW5hdGlvbiDigKYgbWFrZXMgc2Vu c2UuPGJyIGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+DQo8ZGl2 IGNsYXNzPSIiPjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9u dC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3Jt YWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxp Z246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUt c3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lk dGg6IDBweDsiPg0KPGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBm b250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5v cm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1h bGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0 ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13 aWR0aDogMHB4OyI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIiBzdHlsZT0iZm9u dC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7 IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1z cGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0 LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7 IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPGJyIGNsYXNzPSIiPg0KUHV0IGFu b3RoZXIgd2F5LCBpdCBzZWVtcyBhcyBpZiBhbnkgY2xpZW50IHRoYXQgaGFzIGNyZWRlbnRpYWxz IGFsbG93aW5nIGl0IHRvPGJyIGNsYXNzPSIiPg0KYWNjZXNzIHRvIHRoZSBmaWxlIHNlcnZlciBj YW4gYWNjZXNzIGFueSBmaWxlIG9uIHRoZSBmaWxlIHN5c3RlbSBpZiBpdCBpczxiciBjbGFzcz0i Ij4NCmNob29zZXMgdG8gZG8gc28gKGUuZy4uLCBpZiBpdCBpcyBhIG1hbGljaW91cyBjbGllbnQp LiBJcyB0aGF0IGNvcnJlY3Q/PGJyIGNsYXNzPSIiPg0KPC9ibG9ja3F1b3RlPg0KPGJyIGNsYXNz PSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQt c3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5v cm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5k ZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3Jk LXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8c3BhbiBj bGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBm b250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0 OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0 LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsg d29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6 IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyI+QXMNCiB3aXRoIGFueSBORlMgZmls ZXN5c3RlbSB3aGljaCB1c2VzIGFuIEFVVEhfU1lTIHNlY3VyaXR5IG1vZGVsLDwvc3Bhbj48YnIg Y2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsg Zm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdo dDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4 dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7 IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxz cGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEy cHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13 ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7 IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9y bWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBm bG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7Ij5lYWNoDQogb2YgdGhlIGZp bGUgaGFuZGxlLCB1aWQsIGFuZCBnaWQgY2FuIGJlIGZvcmdlZCB0byBnYWluIGFjY2Vzcy48L3Nw YW4+PGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6 IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9u dC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3Rh cnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTog bm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4 OyI+DQo8YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6 ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBm b250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBz dGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNl OiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAw cHg7Ij4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250 LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1h bDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGln bjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1z cGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0 aDogMHB4OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7Ij5Jbg0KIG90 aGVyIHdvcmRzLCB0aGlzIGlzIG5vdGhpbmcgbmV3Ljwvc3Bhbj48YnIgY2xhc3M9IiIgc3R5bGU9 ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9y bWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0 ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsg dGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzog MHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxiciBjbGFzcz0iIiBzdHls ZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBu b3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxl dHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4 OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5n OiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPHNwYW4gY2xhc3M9IiIg c3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHls ZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFs OyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6 IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3Bh Y2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBk aXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiPlRoZQ0KIHNlY3VyaXR5IG1vZGVsIGZvciBORlN2 NC4yIChhbmQgYmFzZWQgb24gdGhhdCwgTkZTdjQuMCBhbmQgTkZTdjQuMSk6PC9zcGFuPjxiciBj bGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBm b250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0 OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0 LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsg d29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPGJy IGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7 IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWln aHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRl eHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFs OyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8 c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAx MnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQt d2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0 OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5v cm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsg ZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyI+W1JGQzc4NjJdPC9zcGFu PjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAx MnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQt d2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0 OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5v cm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsi Pg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6 ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBm b250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBz dGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNl OiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAw cHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiPjE3Lg0KICZuYnNw O1NlY3VyaXR5IENvbnNpZGVyYXRpb25zPC9zcGFuPjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1m YW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZv bnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFj aW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRy YW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13 ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPGJyIGNsYXNzPSIiIHN0eWxlPSJmb250 LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsg Zm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNw YWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQt dHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsg LXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0i Zm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3Jt YWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRl ci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0 ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAw cHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6 IGlubGluZSAhaW1wb3J0YW50OyI+Jm5ic3A7Jm5ic3A7TkZTdjQuMg0KIGhhcyBhbGwgb2YgdGhl IHNlY3VyaXR5IGNvbmNlcm5zIHByZXNlbnQgaW4gTkZTdjQuMSAoc2VlPC9zcGFuPjxiciBjbGFz cz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250 LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBu b3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWlu ZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29y ZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPHNwYW4g Y2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsg Zm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdo dDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4 dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7 IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0 OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiPiZuYnNwOyZuYnNwO1NlY3Rpb24N CiAyMSBvZiBbUkZDNTY2MV0pLCBhcyB3ZWxsIGFzIHRob3NlIHByZXNlbnQgaW4gdGhlIHNlcnZl ci1zaWRlPC9zcGFuPjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsg Zm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBu b3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQt YWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hp dGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Ut d2lkdGg6IDBweDsiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRp Y2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fw czogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0 ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7 IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ry b2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsi PiZuYnNwOyZuYnNwO2NvcHkNCiAoc2VlIFNlY3Rpb24gNC45KSBhbmQgaW4gTGFiZWxlZCBORlMg KHNlZSBTZWN0aW9uIDkuNikuPC9zcGFuPjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6 IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFy aWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBu b3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9y bTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQt dGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWls eTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12 YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6 IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNm b3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtp dC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1m YW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZv bnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFj aW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRy YW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13 ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGlu ZSAhaW1wb3J0YW50OyI+V2hpY2gNCiBsZWFkcyB1cyB0byBbUkZDNTY2MV06PC9zcGFuPjxiciBj bGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBm b250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0 OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0 LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsg d29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPGJy IGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7 IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWln aHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRl eHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFs OyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8 c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAx MnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQt d2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0 OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5v cm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsg ZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyI+Mi4yLjEuMS4xLjIuDQog Jm5ic3A7U2VjdXJpdHkgTWVjaGFuaXNtcyBmb3IgTkZTdjQuMTwvc3Bhbj48YnIgY2xhc3M9IiIg c3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHls ZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFs OyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6 IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3Bh Y2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxiciBjbGFzcz0i IiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0 eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3Jt YWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVu dDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1z cGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPHNwYW4gY2xh c3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9u dC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDog bm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1p bmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdv cmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBu b25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiPiZuYnNwOyZuYnNwO1JQQ1NFQ19HU1Ms DQogdmlhIEdTUy1BUEksIG5vcm1hbGl6ZXMgYWNjZXNzIHRvIG1lY2hhbmlzbXMgdGhhdCBwcm92 aWRlPC9zcGFuPjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9u dC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3Jt YWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxp Z246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUt c3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lk dGg6IDBweDsiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7 IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczog bm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0 LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdo aXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tl LXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiPiZu YnNwOyZuYnNwO3NlY3VyaXR5DQogc2VydmljZXMuICZuYnNwO1RoZXJlZm9yZSwgTkZTdjQuMSBj bGllbnRzIGFuZCBzZXJ2ZXJzIE1VU1Q8L3NwYW4+PGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZh bWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9u dC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNp bmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJh bnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdl YmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9u dC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7 IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1z cGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0 LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7 IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlu bGluZSAhaW1wb3J0YW50OyI+Jm5ic3A7Jm5ic3A7c3VwcG9ydA0KIHRoZSBLZXJiZXJvcyBWNSBz ZWN1cml0eSBtZWNoYW5pc20uPC9zcGFuPjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6 IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFy aWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBu b3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9y bTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQt dGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWls eTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12 YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6 IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNm b3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtp dC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1m YW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZv bnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFj aW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRy YW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13 ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGlu ZSAhaW1wb3J0YW50OyI+Jm5ic3A7Jm5ic3A7VGhlDQogdXNlIG9mIFJQQ1NFQ19HU1MgcmVxdWly ZXMgc2VsZWN0aW9uIG9mIG1lY2hhbmlzbSwgcXVhbGl0eSBvZjwvc3Bhbj48YnIgY2xhc3M9IiIg c3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHls ZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFs OyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6 IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3Bh Y2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxzcGFuIGNsYXNz PSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQt c3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5v cm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5k ZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3Jk LXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9u ZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7Ij4mbmJzcDsmbmJzcDtwcm90ZWN0aW9uDQog KFFPUCksIGFuZCBzZXJ2aWNlIChhdXRoZW50aWNhdGlvbiwgaW50ZWdyaXR5LCBwcml2YWN5KS48 L3NwYW4+PGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNp emU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsg Zm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjog c3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFj ZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDog MHB4OyI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9u dC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3Jt YWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxp Z246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUt c3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lk dGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyI+Jm5ic3A7 Jm5ic3A7Rm9yDQogdGhlIG1hbmRhdGVkIHNlY3VyaXR5IG1lY2hhbmlzbXMsIE5GU3Y0LjEgc3Bl Y2lmaWVzIHRoYXQgYSBRT1Agb2Y8L3NwYW4+PGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWls eTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12 YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6 IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNm b3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtp dC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1m YW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZv bnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFj aW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRy YW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13 ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGlu ZSAhaW1wb3J0YW50OyI+Jm5ic3A7Jm5ic3A7emVybw0KIGlzIHVzZWQsIGxlYXZpbmcgaXQgdXAg dG8gdGhlIG1lY2hhbmlzbSBvciB0aGUgbWVjaGFuaXNtJ3M8L3NwYW4+PGJyIGNsYXNzPSIiIHN0 eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6 IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsg bGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAw cHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNp bmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8c3BhbiBjbGFzcz0i IiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0 eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3Jt YWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVu dDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1z cGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7 IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyI+Jm5ic3A7Jm5ic3A7Y29uZmlndXJhdGlvbg0K IHRvIG1hcCBRT1AgemVybyB0byBhbiBhcHByb3ByaWF0ZSBsZXZlbCBvZiBwcm90ZWN0aW9uLjwv c3Bhbj48YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6 ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBm b250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBz dGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNl OiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAw cHg7Ij4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250 LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1h bDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGln bjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1z cGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0 aDogMHB4OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7Ij4mbmJzcDsm bmJzcDtFYWNoDQogbWFuZGF0ZWQgbWVjaGFuaXNtIHNwZWNpZmllcyBhIG1pbmltdW0gc2V0IG9m IGNyeXB0b2dyYXBoaWM8L3NwYW4+PGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVs dmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50 LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1h bDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBu b25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0 LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6 IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFy aWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBu b3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9y bTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQt dGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1w b3J0YW50OyI+Jm5ic3A7Jm5ic3A7YWxnb3JpdGhtcw0KIGZvciBpbXBsZW1lbnRpbmcgaW50ZWdy aXR5IGFuZCBwcml2YWN5LiAmbmJzcDtORlN2NC4xIGNsaWVudHM8L3NwYW4+PGJyIGNsYXNzPSIi IHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5 bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1h bDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50 OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNw YWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8c3BhbiBjbGFz cz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250 LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBu b3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWlu ZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29y ZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5v bmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyI+Jm5ic3A7Jm5ic3A7YW5kDQogc2VydmVy cyBNVVNUIGJlIGltcGxlbWVudGVkIG9uIG9wZXJhdGluZyBlbnZpcm9ubWVudHMgdGhhdCBjb21w bHk8L3NwYW4+PGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250 LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1h bDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGln bjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1z cGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0 aDogMHB4OyI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsg Zm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBu b3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQt YWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hp dGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Ut d2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyI+Jm5i c3A7Jm5ic3A7d2l0aA0KIHRoZSBSRVFVSVJFRCBjcnlwdG9ncmFwaGljIGFsZ29yaXRobXMgb2Yg ZWFjaCBSRVFVSVJFRDwvc3Bhbj48YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2 ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQt Y2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFs OyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5v bmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQt c3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTog SGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJp YW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5v cm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3Jt OiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10 ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBv cnRhbnQ7Ij4mbmJzcDsmbmJzcDttZWNoYW5pc20uPC9zcGFuPjxiciBjbGFzcz0iIiBzdHlsZT0i Zm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3Jt YWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRl ci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0 ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAw cHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPGJyIGNsYXNzPSIiIHN0eWxl PSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5v cm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0 dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7 IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6 IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8c3BhbiBjbGFzcz0iIiBz dHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxl OiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7 IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDog MHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFj aW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRp c3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyI+Mi4yLjEuMS4xLjIuMS4NCiAmbmJzcDtLZXJiZXJv cyBWNTwvc3Bhbj48YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZv bnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9y bWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFs aWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRl LXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdp ZHRoOiAwcHg7Ij4NCjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsg Zm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBu b3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQt YWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hp dGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Ut d2lkdGg6IDBweDsiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRp Y2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fw czogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0 ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7 IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ry b2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsi PiZuYnNwOyZuYnNwO1RoZQ0KIEtlcmJlcm9zIFY1IEdTUy1BUEkgbWVjaGFuaXNtIGFzIGRlc2Ny aWJlZCBpbiBbNV0gTVVTVCBiZTwvc3Bhbj48YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5 OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZh cmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzog bm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zv cm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0 LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LWZh bWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9u dC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNp bmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJh bnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdl YmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5l ICFpbXBvcnRhbnQ7Ij4mbmJzcDsmbmJzcDtpbXBsZW1lbnRlZA0KIHdpdGggdGhlIFJQQ1NFQ19H U1Mgc2VydmljZXMgYXMgc3BlY2lmaWVkIGluIHRoZTwvc3Bhbj48YnIgY2xhc3M9IiIgc3R5bGU9 ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9y bWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0 ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsg dGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzog MHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxzcGFuIGNsYXNzPSIiIHN0 eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6 IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsg bGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAw cHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNp bmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9uZTsgZGlz cGxheTogaW5saW5lICFpbXBvcnRhbnQ7Ij4mbmJzcDsmbmJzcDtmb2xsb3dpbmcNCiB0YWJsZTo8 L3NwYW4+PGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNp emU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsg Zm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjog c3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFj ZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDog MHB4OyI+DQo8YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQt c2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFs OyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWdu OiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNw YWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRo OiAwcHg7Ij4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBm b250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5v cm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1h bGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0 ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13 aWR0aDogMHB4OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7Ij5Ubw0K IHBhcmFwaHJhc2UgaXQsIE5GU3Y0LnggY2xpZW50cyBhbmQgc2VydmVycyBNVVNUIHN1cHBvcnQ8 L3NwYW4+PGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNp emU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsg Zm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjog c3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFj ZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDog MHB4OyI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9u dC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3Jt YWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxp Z246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUt c3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lk dGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyI+dGhlDQog S2VyYmVyb3MgVjUgc2VjdXJpdHkgbWVjaGFuaXNtLCBidXQgaW5zdGFsbGF0aW9ucyBhcmUgbm90 PC9zcGFuPjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1z aXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7 IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246 IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3Bh Y2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6 IDBweDsiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZv bnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9y bWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFs aWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRl LXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdp ZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiPnJlcXVp cmVkDQogdG8gdXNlIEtlcmJlcm9zLjwvc3Bhbj48YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFt aWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250 LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2lu Zzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFu c2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Vi a2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1m YW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZv bnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFj aW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRy YW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13 ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZv bnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFs OyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXIt c3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4 dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4 OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBp bmxpbmUgIWltcG9ydGFudDsiPkkuZS4sDQogdGhpczo8L3NwYW4+PGJyIGNsYXNzPSIiIHN0eWxl PSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5v cm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0 dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7 IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6 IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8YnIgY2xhc3M9IiIgc3R5 bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTog bm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBs ZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBw eDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2lu ZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxzcGFuIGNsYXNzPSIi IHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5 bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1h bDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50 OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNw YWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9uZTsg ZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7Ij5tb3VudA0KIC1vIHZlcnM9NC4yLHNlYz1zeXMg c2VydmVyOi8gL21udDwvc3Bhbj48YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2 ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQt Y2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFs OyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5v bmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQt c3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhl bHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFu dC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3Jt YWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTog bm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4 dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5 OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZh cmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzog bm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zv cm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0 LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWlt cG9ydGFudDsiPm1lYW5zDQogdGhhdCBhbnkgbWFsaWNpb3VzIHVzZXIgY2FuIHVzZSBhbnkgY2xp ZW50IHdoaWNoIGNhbiBjb25uZWN0PC9zcGFuPjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1p bHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQt dmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5n OiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5z Zm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJr aXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQt ZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBm b250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3Bh Y2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10 cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAt d2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxp bmUgIWltcG9ydGFudDsiPnRvDQogdGhlIHNlcnZlciB0byBkbyB3aGF0ZXZlciB0aGV5IHdhbnQu PC9zcGFuPjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1z aXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7 IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246 IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3Bh Y2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6 IDBweDsiPg0KPGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250 LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1h bDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGln bjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1z cGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0 aDogMHB4OyI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsg Zm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBu b3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQt YWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hp dGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Ut d2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyI+SW4N CiBvdGhlciB3b3JkcywgdGhpcyBpcyBub3QgYSByZWR1Y3Rpb24gb2YgdGhlIGFjdHVhbCBzZWN1 cml0eSBmcm9tIE5GU3Y0LnguPC9zcGFuPjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6 IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFy aWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBu b3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9y bTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQt dGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2IGNs YXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KVGhhbmtzIGZvciB0aGUgZXh0ZW5zaXZlIGV4 cGxhbmF0aW9uLiBJdCByZXNvbHZlcyB0aGUgaXNzdWUgdGhhdCBJIHBlcmNlaXZlZC48L2Rpdj4N CjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPlRoYW5r cyw8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+QnJpYW48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNs YXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIi PjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAx MnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQt d2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0 OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5v cm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsi Pg0KPGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6 IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9u dC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3Rh cnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTog bm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4 OyI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6 IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFy aWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBu b3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9y bTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQt dGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPGJyIGNsYXNzPSIiPg0KVW5sZXNzIEnigJltIG1p c3Rha2VuLCB0aGlzIGlzIGEgc2VyaW91cyByZWR1Y3Rpb24gb2YgYWN0dWFsIHNlY3VyaXR5IGZy b20gTkZTPGJyIGNsYXNzPSIiPg0KNC54LCBhbmQgYWxzbyBmcm9tIHRoZSB0aWdodCBjb3VwbGlu ZyBtb2RlbC4gVGhpcyBzaG91bGQgYmUgY2xlYXJseSBzdGF0ZWQgaW48YnIgY2xhc3M9IiI+DQp0 aGUgc2VjdXJpdHkgY29uc2lkZXJhdGlvbnMgc2VjdGlvbiwgc28gdGhhdCBwcm90b2NvbCBhZG9w dGVycyBhbmQgdXNlcnM8YnIgY2xhc3M9IiI+DQp1bmRlcnN0YW5kIHRoZSBhZGRpdGlvbmFsIHJp c2tzIG9mIHRoZSBsb29zZSBjb3VwbGluZyBtb2RlbC4gRm9yIHRoaXMgJm5ic3A7cmVhc29uLDxi ciBjbGFzcz0iIj4NCkkndmUgbWFya2VkIHRoZSByZXZpZXcgd2l0aCAmcXVvdDtIYXMgSXNzdWVz JnF1b3Q7IHJhdGhlciB0aGFuICZxdW90O0hhcyBOaXRzJnF1b3Q7LjxiciBjbGFzcz0iIj4NCjxi ciBjbGFzcz0iIj4NCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fPGJyIGNsYXNzPSIiPg0KbmZzdjQgbWFpbGluZyBsaXN0PGJyIGNsYXNzPSIiPg0KPGEgaHJl Zj0ibWFpbHRvOm5mc3Y0QGlldGYub3JnIiBjbGFzcz0iIj5uZnN2NEBpZXRmLm9yZzwvYT48YnIg Y2xhc3M9IiI+DQo8YSBocmVmPSJodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZv L25mc3Y0IiBjbGFzcz0iIj5odHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL25m c3Y0PC9hPjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8YnIg Y2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPi0tJm5ic3A7PGJyIGNsYXNzPSIiPg0KQnJpYW4gV2Vp czxiciBjbGFzcz0iIj4NClNlY3VyaXR5LCBDU0csIENpc2NvIFN5c3RlbXM8YnIgY2xhc3M9IiI+ DQpUZWxlcGhvbmU6ICYjNDM7MSA0MDggNTI2IDQ3OTY8YnIgY2xhc3M9IiI+DQpFbWFpbDo8c3Bh biBjbGFzcz0iQXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PGEgaHJlZj0ibWFp bHRvOmJld0BjaXNjby5jb20iIGNsYXNzPSIiPmJld0BjaXNjby5jb208L2E+PC9kaXY+DQo8L2Rp dj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4N CjxiciBjbGFzcz0iIj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_67066ED351BF428CA73E8519570C104Cprimarydatacom_-- From nobody Tue Jan 16 23:56:23 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9007812F4BD; Tue, 16 Jan 2018 23:56:05 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.23 X-Spam-Level: X-Spam-Status: No, score=-4.23 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Du7PusTJk0YY; Tue, 16 Jan 2018 23:56:03 -0800 (PST) Received: from huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B737012F3D0; Tue, 16 Jan 2018 23:56:03 -0800 (PST) Received: from lhreml709-cah.china.huawei.com (unknown [172.18.7.107]) by Forcepoint Email with ESMTP id CAA404DB65A75; Wed, 17 Jan 2018 07:55:59 +0000 (GMT) Received: from DGGEML422-HUB.china.huawei.com (10.1.199.39) by lhreml709-cah.china.huawei.com (10.201.108.32) with Microsoft SMTP Server (TLS) id 14.3.361.1; Wed, 17 Jan 2018 07:56:00 +0000 Received: from DGGEML502-MBS.china.huawei.com ([169.254.3.252]) by dggeml422-hub.china.huawei.com ([10.1.199.39]) with mapi id 14.03.0361.001; Wed, 17 Jan 2018 15:55:53 +0800 From: "Xialiang (Frank)" To: Stig Venaas CC: "secdir@ietf.org" , "draft-ietf-pim-source-discovery-bsr.all@ietf.org" , "ietf@ietf.org" , "pim@ietf.org" , The IESG Thread-Topic: Secdir last call review of draft-ietf-pim-source-discovery-bsr-07 Thread-Index: AQHTjvKnLy8vudAFbEqCEiSghPCF7aN3sw/g Date: Wed, 17 Jan 2018 07:55:52 +0000 Message-ID: References: <151539253778.11305.7448095057192632663@ietfa.amsl.com> In-Reply-To: Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.134.159.76] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Subject: [secdir] =?utf-8?b?562U5aSNOiBTZWNkaXIgbGFzdCBjYWxsIHJldmlldyBv?= =?utf-8?q?f_draft-ietf-pim-source-discovery-bsr-07?= X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 17 Jan 2018 07:56:06 -0000 SGkgU3RpZywNCllvdXIgZmVlZGJhY2sgbG9va3MgZmluZSB0byBtZS4NCg0KVGhhbmtzICENCg0K Qi5SLg0KRnJhbmsNCg0KLS0tLS3pgq7ku7bljp/ku7YtLS0tLQ0K5Y+R5Lu25Lq6OiBTdGlnIFZl bmFhcyBbbWFpbHRvOnN0aWdAdmVuYWFzLmNvbV0gDQrlj5HpgIHml7bpl7Q6IDIwMTjlubQx5pyI MTfml6UgMTo1MQ0K5pS25Lu25Lq6OiBYaWFsaWFuZyAoRnJhbmspDQrmioTpgIE6IHNlY2RpckBp ZXRmLm9yZzsgZHJhZnQtaWV0Zi1waW0tc291cmNlLWRpc2NvdmVyeS1ic3IuYWxsQGlldGYub3Jn OyBpZXRmQGlldGYub3JnOyBwaW1AaWV0Zi5vcmc7IFRoZSBJRVNHDQrkuLvpopg6IFJlOiBTZWNk aXIgbGFzdCBjYWxsIHJldmlldyBvZiBkcmFmdC1pZXRmLXBpbS1zb3VyY2UtZGlzY292ZXJ5LWJz ci0wNw0KDQpUaGFua3MgZm9yIGdyZWF0IGZlZWRiYWNrIQ0KDQpJJ3ZlIHRyaWVkIHRvIGFkZHJl c3MgYWxsIG9mIHlvdXIgY29tbWVudHMuIEknbSBwbGFubmluZyB0byBhZGQgdGhpcyBwYXJhZ3Jh cGggdG8gdGhlIHNlY3VyaXR5IGNvbnNpZGVyYXRpb25zLg0KDQpQSU0tU00gbGluay1sb2NhbCBt ZXNzYWdlcyBjYW4gYmUgYXV0aGVudGljYXRlZCB1c2luZyBJUHNlYywgc2VlIFtSRkM3NzYxXSBz ZWN0aW9uIDYuMyBhbmQgW1JGQzU3OTZdLiBTaW5jZSBQRk0gbWVzc2FnZXMgYXJlIGxpbmstbG9j YWwgbWVzc2FnZXMgc2VudCBob3AgYnkgaG9wLCBhIGxpbmstbG9jYWwgUEZNIG1lc3NhZ2UgY2Fu IGJlIGF1dGhlbnRpY2F0ZWQgdXNpbmcgSVBzZWMgc3VjaCB0aGF0IGEgcm91dGVyIGNhbiB2ZXJp ZnkgdGhhdCBhIG1lc3NhZ2Ugd2FzIHNlbnQgYnkgYSB0cnVzdGVkIG5laWdoYm9yIGFuZCBoYXMg bm90IGJlZW4gbW9kaWZpZWQuIEhvd2V2ZXIsIHRvIHZlcmlmeSB0aGF0IGEgcmVjZWl2ZWQgbWVz c2FnZSBjb250YWlucyBjb3JyZWN0IGluZm9ybWF0aW9uIGFubm91bmNlZCBieSB0aGUgb3JpZ2lu YXRvciBzcGVjaWZpZWQgaW4gdGhlIG1lc3NhZ2UsIG9uZSB3aWxsIGhhdmUgdG8gdHJ1c3QgZXZl cnkgcm91dGVyIG9uIHRoZSBwYXRoIGZyb20gdGhlIG9yaWdpbmF0b3IgYW5kIHRoYXQgZWFjaCBy b3V0ZXIgaGFzIGF1dGhlbnRpY2F0ZWQgdGhlIHJlY2VpdmVkIG1lc3NhZ2UuDQoNCkxldCBtZSBr bm93IGlmIHlvdSBoYXZlIGFueSBjb21tZW50cyBvbiB0aGF0IHBhcmFncmFwaC4NClRoYW5rcywN ClN0aWcNCg0KT24gU3VuLCBKYW4gNywgMjAxOCBhdCAxMDoyMiBQTSwgTGlhbmcgWGlhIDxmcmFu ay54aWFsaWFuZ0BodWF3ZWkuY29tPiB3cm90ZToNCj4gUmV2aWV3ZXI6IExpYW5nIFhpYQ0KPiBS ZXZpZXcgcmVzdWx0OiBIYXMgSXNzdWVzDQo+DQo+IE5pdHM6DQo+IDEuIEluIEFic3RyYWN0LCB0 aGUgYWJicmV2aWF0aW9uIGlzIG1pc3NlZCB3aGVuIHRoZSBUZXJtIGFyZSBmaXJzdGx5IA0KPiBh cHBlYXJlZCwgc3VjaCBhczogU3BhcnNlLU1vZGUsIFJlbmRlenZvdXMgUG9pbnQ7IDIuIEV2ZXJ5 IHdvcmQgaW4gdGhlIA0KPiBzZWN0aW9uIHRpdGxlcyBzaG91bGQgYmUgaW4gdGhlIGNhcGl0YWwg Zm9ybQ0KPg0KPiBJc3N1ZXM6DQo+IDEuIEluIFNlY3VyaXR5IENvbnNpZGVyYXRpb25zIHNlY3Rp b24sICBzaG91bGQgb25lIHNlbnRlbmNlIGJlICJldmVuIA0KPiBpZiB0aGUgc291cmNlcyBhcmUg YWN0dWFsbHkgbm90IGFjdGl2ZSI/IDIuIEdlbmVyYWxseSwgdGhlIHBlZXIgDQo+IGF1dGhlbnRp Y2F0aW9uIChieSBjZXJ0aWZpY2F0ZSwgc2hhcmVkIGtleS4uLikgYW5kIHRoZSBtZXNzYWdlIA0K PiBpbnRlZ3JhdGlvbiBwcm90ZWN0aW9uIGFyZSBhbHdheXMgaGVscGZ1bCB0byBkZWZlbmQgYWdh aW5zdCB0aGUgZm9yZ2VkIA0KPiByb3V0ZXJzIGFuZCBQRU0gbWVzc2FnZXMsIGV2ZW4gdGhlIHJl c3VsdGVkIHJlc291cmNlIGNvbnN1bXB0aW9uLiBCdXQgDQo+IGluIGN1cnJlbnQgU2VjdXJpdHkg Q29uc2lkZXJhdGlvbnMgc2VjdGlvbiwgdGhlcmUgaXMgbm90aGluZyBkaXNjdXNzZWQgDQo+IGFi b3V0IHRoZXNlIGNvdW50ZXJtZWFzdXJlcywgZXZlbiBpbiB0aGUgZ2VuZXJhbCB3YXkuIFN1Z2dl c3QgdG8gY29uc2lkZXIgdGhpcyBwb2ludCBwZXJzb25hbGx5Lg0KPg0K From nobody Wed Jan 17 13:37:20 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0B7BD12D7F7 for ; Wed, 17 Jan 2018 13:37:15 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=krose.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mDDdKXQIDJc5 for ; Wed, 17 Jan 2018 13:37:13 -0800 (PST) Received: from mail-qt0-x229.google.com (mail-qt0-x229.google.com [IPv6:2607:f8b0:400d:c0d::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CF43F129C6F for ; Wed, 17 Jan 2018 13:37:12 -0800 (PST) Received: by mail-qt0-x229.google.com with SMTP id x27so17281501qtm.12 for ; Wed, 17 Jan 2018 13:37:12 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=krose.org; s=google; h=mime-version:from:date:message-id:subject:to; bh=C6U6x1UB0iHNdsfwb3tOegJqMXt1pMQPbNVBAakOnfI=; b=nO0TaFpLXjtxzuQ0XO3dvq0v0+A8CaRTfX0KWGeicIABtOayAKXEwZj7Gr/SsXnOkY mHycrYCHKrsGYHwHBU8lPnPkBnP0MvrcNf+lE2BAtSCQqmUgdGhw0/LOkDYkpmRUB+ls 53RqldED+wtvyCnmIZqbxTiEQFlwR+LJXqiyA= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=C6U6x1UB0iHNdsfwb3tOegJqMXt1pMQPbNVBAakOnfI=; b=Ht074GDcH77DUBYdPmV3bJ5TfqhDSQAQEXQwQukgetTp0+HOzThqqraOT4c/P37mtx Y3r0WykRgWiZ5xtm1fSlfyLY4K5jYTEvdI32T8WB4h0ePLvdWVIWroitkdg09Vl1oy0g Bkg1N4j10WCmCw94ViRhtcgLUUbQbh5slXPfjy9Bg5lcZ7c1FRIZDBtCYHogXhNKPGMN cfhqnDU1Y7gZBoxfcBjZaqKkhcl2IZSc8FMy62RIXXTzYxjrwnTLD8Pm5PMGLvIs2dZY X71xQwtTJBry8Pn2sOg99GLFq0NtHO3ForWf4KEBsLap0cELoueuS+PYBs8MJgINOivd LcGw== X-Gm-Message-State: AKwxytfi3yxQ86fLm/ONL9rNKnfcBYvFcvk5RJbgRXbhp5ydSrwypCIe v+9HDm5bhVVHuNkPwWojnh56cblSNzEfqnH5sRwsNg== X-Google-Smtp-Source: ACJfBotsf6/JVQYMVSHeFbZQJDwvKmY80uaK7E6wcUKk6Vakr4wndJSO5FuSwYqPUFYc2kR1UAUXZ9FoB7U2X7J0420= X-Received: by 10.237.35.14 with SMTP id h14mr38831828qtc.300.1516225031687; Wed, 17 Jan 2018 13:37:11 -0800 (PST) MIME-Version: 1.0 Received: by 10.12.160.129 with HTTP; Wed, 17 Jan 2018 13:37:11 -0800 (PST) X-Originating-IP: [2001:4878:a000:3000:90dd:a551:c1d:b21] From: Kyle Rose Date: Wed, 17 Jan 2018 16:37:11 -0500 Message-ID: To: The IESG , secdir@ietf.org, draft-dhcwg-dhc-rfc3315bis.all@ietf.org Content-Type: multipart/alternative; boundary="001a1147374669e4890562ffa6af" Archived-At: Subject: [secdir] Secdir last call review of draft-dhcwg-dhc-rfc3315bis-10 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 17 Jan 2018 21:37:15 -0000 --001a1147374669e4890562ffa6af Content-Type: text/plain; charset="UTF-8" Reviewer: Kyle Rose Review result: Ready with issues I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just like any other last call comments. 13.1: "By default, DHCP server implementations SHOULD NOT generate predictable addresses." The justification for this is not addressed in the security considerations section, while the privacy considerations section might be punting this to RFC 7824, though the only mention I can find in a quick search regards iterative allocation in section 4.3. 20.4.1: RKAP uses HMAC-MD5 for symmetric authentication. As an informational matter for an existing protocol, this is certainly justified, but I don't know how the IETF handles obsolete crypto in standards revisions. 20.4.3: "...the client computes an HMAC-MD5 over the DHCP Reconfigure message [ADD: with zeroes substituted for the HMAC-MD5 field], using the Reconfigure Key received from the server" 22. DHCP's security threat model is not clearly stated. For instance, RKAP provides protection against man-on-the-side reconfiguration attacks, but DHCP has no ability by itself to protect against a race between legitimate and rogue DHCP servers: such protection relies on management of multicast groups at layer 2. This is implied by the paragraph on snooping DHCP multicast traffic, but nowhere is it specified normatively that restrictive group management is necessary to eliminate this part of the attack surface. Similarly, it's not clear to me whether a rogue or misconfigured server temporarily in the All_DHCP_Servers or All_DHCP_Relay_Agents_and_Servers multicast group can then hide a client from the official DHCP servers forever by sending it the unicast option, thus maintaining exclusive access to certain messages, notabley Request and Renew. The threat model should be stated clearly in this document, even if the recommended countermeasures are in some other RFC (such as RFC 7610) because they rely on information not in this document. 23. Does it make sense to clarify the threat model for privacy? For instance, this protocol doesn't try to defend clients against tracking within a LAN that can observe the DHCP traffic. I can guess what the threat model is, but ISTM that it should be specified explicitly. --001a1147374669e4890562ffa6af Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Reviewer: Kyle Rose
Review result: Ready wit= h issues

I have reviewed this document as part of the secu= rity directorate's ongoing effort to review all IETF documents being pr= ocessed by the IESG.=C2=A0 These comments were written primarily for the be= nefit of the security area directors.=C2=A0 Document editors and WG chairs = should treat these comments just like any other last call comments.

= 13.1: "By default, DHCP server implementations SHOULD NOT generate pre= dictable addresses." The justification for this is not addressed in th= e security considerations section, while the privacy considerations section= might be punting this to RFC 7824, though the only mention I can find in a= quick search regards iterative allocation in section 4.3.

20.4.1: R= KAP uses HMAC-MD5 for symmetric authentication. As an informational matter = for an existing protocol, this is certainly justified, but I don't know= how the IETF handles obsolete crypto in standards revisions.

20.4.3= : "...the client computes an HMAC-MD5 over the DHCP Reconfigure messag= e [ADD: with zeroes substituted for the HMAC-MD5 field], using the Reconfig= ure Key received from the server"

22. DHCP's security threa= t model is not clearly stated. For instance, RKAP provides protection again= st man-on-the-side reconfiguration attacks, but DHCP has no ability by itse= lf to protect against a race between legitimate and rogue DHCP servers: suc= h protection relies on management of multicast groups at layer 2. This is i= mplied by the paragraph on snooping DHCP multicast traffic, but nowhere is = it specified normatively that restrictive group management is necessary to = eliminate this part of the attack surface. Similarly, it's not clear to= me whether a rogue or misconfigured server temporarily in the All_DHCP_Ser= vers or All_DHCP_Relay_Agents_and_Servers multicast group can then hide a c= lient from the official DHCP servers forever by sending it the unicast opti= on, thus maintaining exclusive access to certain messages, notabley Request= and Renew. The threat model should be stated clearly in this document, eve= n if the recommended countermeasures are in some other RFC (such as RFC 761= 0) because they rely on information not in this document.

23. Does i= t make sense to clarify the threat model for privacy? For instance, this pr= otocol doesn't try to defend clients against tracking within a LAN that= can observe the DHCP traffic. I can guess what the threat model is, but IS= TM that it should be specified explicitly.


--001a1147374669e4890562ffa6af-- From nobody Wed Jan 17 13:39:44 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D3C3E12EA58 for ; Wed, 17 Jan 2018 13:39:41 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, HTML_NONELEMENT_30_40=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=krose.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hvMzNLaIaClD for ; Wed, 17 Jan 2018 13:39:40 -0800 (PST) Received: from mail-qt0-x234.google.com (mail-qt0-x234.google.com [IPv6:2607:f8b0:400d:c0d::234]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EA48C12D811 for ; Wed, 17 Jan 2018 13:39:39 -0800 (PST) Received: by mail-qt0-x234.google.com with SMTP id d54so13275839qtd.4 for ; Wed, 17 Jan 2018 13:39:39 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=krose.org; s=google; h=mime-version:from:date:message-id:subject:to; bh=PkFudlXbtPEljOY2A2//uIRcEZJ31zDtvq3q8S9yLk0=; b=ZH1ztcMvicUYqKpyDKCOsG0SQGDhzhildbqzWNuUVmWDX1uixA8cFA8eFJvM4Kv1oq N/GKmnReIfKfXjag/mESOgDBRHk+ZpCxDByF4vwbWY0U9T6nbkbx6zdDROWKspLMeLiI WNF9kUiPfcGqurSM7YdGp7TGmvXkby48FfBJM= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=PkFudlXbtPEljOY2A2//uIRcEZJ31zDtvq3q8S9yLk0=; b=moPK6F3mMCic5zQvs8N+CyUF4ntBIkNpgQvTgGdX46xbzGFj7aTY5YhO2Js4wB1y3y MUKAsz6+6hoZ6s+INVPgTtOYt+e2gVSJrdH3kIRozFe1YhAdBXnevbKPucMpsLx2NkfS 3Gs8dwJ0f+Ne/PgLq135Zu5dyuZ+hM4PzlhRtyTQzlsMvamyMxtUEldByOdAlIRSrAvb YChju4i6VA+cOQJ1mfGMCTBDB7TaNYfuBsPI5BiwO1Jc8Y4YeAFM4Dt3S0wl3ZP0kJzy qOWPyzG2TmuOGj6acQ1suCWAfc9hfNSdFes9E6mKCt+DiHVa1+ahbCIo7pv+lkKTvOMM gmCg== X-Gm-Message-State: AKwxytdRYMVbAgTPChyVpcfpMNkOlkGrz7/wd0JpZIQ7ub8oyuXK4BOi 4JJIur52JOTKG3y+37SOdPLN/oDa6wcciWkfKq/XJw== X-Google-Smtp-Source: ACJfBottt5z2/OwcM1I99n+SRATYoJCy1oLJUtus7j3gvLAe6h+0IarkFjfUyNQ/CKaObkm/YjrGqxZzH48WnS0W9Ak= X-Received: by 10.200.25.91 with SMTP id g27mr29966854qtk.71.1516225178834; Wed, 17 Jan 2018 13:39:38 -0800 (PST) MIME-Version: 1.0 Received: by 10.12.160.129 with HTTP; Wed, 17 Jan 2018 13:39:38 -0800 (PST) X-Originating-IP: [2001:4878:a000:3000:90dd:a551:c1d:b21] From: Kyle Rose Date: Wed, 17 Jan 2018 16:39:38 -0500 Message-ID: To: The IESG , secdir@ietf.org, draft-ietf-dhc-rfc3315bis.all@ietf.org Content-Type: multipart/alternative; boundary="001a11482cbe2f2cf80562ffaf14" Archived-At: Subject: [secdir] Secdir last call review of draft-ietf-dhc-rfc3315bis-10 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 17 Jan 2018 21:39:42 -0000 --001a11482cbe2f2cf80562ffaf14 Content-Type: text/plain; charset="UTF-8" Let me try sending this to the right .all address. Reviewer: Kyle Rose Review result: Ready with issues I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just like any other last call comments. 13.1: "By default, DHCP server implementations SHOULD NOT generate predictable addresses." The justification for this is not addressed in the security considerations section, while the privacy considerations section might be punting this to RFC 7824, though the only mention I can find in a quick search regards iterative allocation in section 4.3. 20.4.1: RKAP uses HMAC-MD5 for symmetric authentication. As an informational matter for an existing protocol, this is certainly justified, but I don't know how the IETF handles obsolete crypto in standards revisions. 20.4.3: "...the client computes an HMAC-MD5 over the DHCP Reconfigure message [ADD: with zeroes substituted for the HMAC-MD5 field], using the Reconfigure Key received from the server" 22. DHCP's security threat model is not clearly stated. For instance, RKAP provides protection against man-on-the-side reconfiguration attacks, but DHCP has no ability by itself to protect against a race between legitimate and rogue DHCP servers: such protection relies on management of multicast groups at layer 2. This is implied by the paragraph on snooping DHCP multicast traffic, but nowhere is it specified normatively that restrictive group management is necessary to eliminate this part of the attack surface. Similarly, it's not clear to me whether a rogue or misconfigured server temporarily in the All_DHCP_Servers or All_DHCP_Relay_Agents_and_Servers multicast group can then hide a client from the official DHCP servers forever by sending it the unicast option, thus maintaining exclusive access to certain messages, notabley Request and Renew. The threat model should be stated clearly in this document, even if the recommended countermeasures are in some other RFC (such as RFC 7610) because they rely on information not in this document. 23. Does it make sense to clarify the threat model for privacy? For instance, this protocol doesn't try to defend clients against tracking within a LAN that can observe the DHCP traffic. I can guess what the threat model is, but ISTM that it should be specified explicitly. --001a11482cbe2f2cf80562ffaf14 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Let me try sending this to the right .all address.

=
Reviewer: Kyle Rose
Rev= iew result: Ready with issues

I have reviewed this document as part of the security directorate's=20 ongoing effort to review all IETF documents being processed by the=20 IESG.=C2=A0 These comments were written primarily for the benefit of the=20 security area directors.=C2=A0 Document editors and WG chairs should treat= =20 these comments just like any other last call comments.

13.1: "B= y=20 default, DHCP server implementations SHOULD NOT generate predictable=20 addresses." The justification for this is not addressed in the securit= y=20 considerations section, while the privacy considerations section might=20 be punting this to RFC 7824, though the only mention I can find in a=20 quick search regards iterative allocation in section 4.3.

20.4.1: RKAP uses HMAC-MD5 for symmetric authentication. As an informational=20 matter for an existing protocol, this is certainly justified, but I=20 don't know how the IETF handles obsolete crypto in standards revisions.=

20.4.3: "...the client computes an HMAC-MD5 over the DHCP Reconfigure message= =20 [ADD: with zeroes substituted for the HMAC-MD5 field], using the=20 Reconfigure Key received from the server"

22. DHCP's securi= ty=20 threat model is not clearly stated. For instance, RKAP provides=20 protection against man-on-the-side reconfiguration attacks, but DHCP has no ability by itself to protect against a race between legitimate and=20 rogue DHCP servers: such protection relies on management of multicast=20 groups at layer 2. This is implied by the paragraph on snooping DHCP=20 multicast traffic, but nowhere is it specified normatively that=20 restrictive group management is necessary to eliminate this part of the=20 attack surface. Similarly, it's not clear to me whether a rogue or=20 misconfigured server temporarily in the All_DHCP_Servers or=20 All_DHCP_Relay_Agents_and_Servers multicast group can then hide a=20 client from the official DHCP servers forever by sending it the unicast=20 option, thus maintaining exclusive access to certain messages, notabley=20 Request and Renew. The threat model should be stated clearly in this=20 document, even if the recommended countermeasures are in some other RFC=20 (such as RFC 7610) because they rely on information not in this=20 document.

23. Does it make sense to clarify the threat model for=20 privacy? For instance, this protocol doesn't try to defend clients=20 against tracking within a LAN that can observe the DHCP traffic. I can=20 guess what the threat model is, but ISTM that it should be specified=20 explicitly.



--001a11482cbe2f2cf80562ffaf14-- From nobody Thu Jan 18 14:55:10 2018 Return-Path: X-Original-To: secdir@ietf.org Delivered-To: secdir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id C6B5912751F for ; Thu, 18 Jan 2018 14:55:01 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit From: Tero Kivinen To: X-Test-IDTracker: no X-IETF-IDTracker: 6.69.0 Auto-Submitted: auto-generated Precedence: bulk Reply-to: secdir-secratary@mit.edu Message-ID: <151631610180.26839.11837591282524094206.idtracker@ietfa.amsl.com> Date: Thu, 18 Jan 2018 14:55:01 -0800 Archived-At: Subject: [secdir] Assignments X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Jan 2018 22:55:09 -0000 Review instructions and related resources are at: http://tools.ietf.org/area/sec/trac/wiki/SecDirReview For telechat 2018-01-25 Reviewer LC end Draft Tim Polk 2018-01-16 draft-ietf-lwig-energy-efficient-08 Vincent Roca R2018-01-16 draft-ietf-intarea-broadcast-consider-06 Carl Wallace 2018-01-15 draft-ietf-netmod-rfc8022bis-09 Paul Wouters 2018-01-16 draft-ietf-lpwan-overview-07 Paul Wouters 2018-01-11 draft-ietf-ospf-ospfv3-lsa-extend-20 For telechat 2018-02-08 Reviewer LC end Draft Derek Atkins 2018-01-31 draft-ietf-bier-mvpn-09 Donald Eastlake 2018-01-31 draft-farrel-sfc-convent-05 Brian Weis R2018-01-26 draft-ietf-idr-bgp-prefix-sid-10 Liang Xia 2018-01-31 draft-ietf-rtgwg-ni-model-06 Taylor Yu 2018-01-31 draft-ietf-rtgwg-lne-model-05 Dacheng Zhang 2018-01-31 draft-ietf-mtgvenue-iaoc-venue-selection-process-11 Last calls: Reviewer LC end Draft John Bradley None draft-ietf-acme-acme-09 Shawn Emery 2018-01-26 draft-ietf-mmusic-trickle-ice-sip-12 Stephen Farrell 2018-01-26 draft-ietf-ice-rfc5245bis-16 Russ Mundy 2017-09-14 draft-spinosa-urn-lex-12 Early review requests: Reviewer Due Draft Daniel Franke 2018-01-31 draft-ietf-intarea-provisioning-domains-00 Ólafur Guðmundsson 2018-01-09 draft-ietf-opsawg-nat-yang-09 Next in the reviewer rotation: Daniel Gillmor Tobias Gondrom Ólafur Guðmundsson Phillip Hallam-Baker Steve Hanna Dan Harkins Paul Hoffman Russ Housley Christian Huitema Leif Johansson From nobody Fri Jan 19 01:24:07 2018 Return-Path: X-Original-To: secdir@ietf.org Delivered-To: secdir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id EE7F41272E1; Fri, 19 Jan 2018 01:23:56 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Liang Xia To: Cc: draft-ietf-rtgwg-ni-model.all@ietf.org, ietf@ietf.org, rtgwg@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.69.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <151635383693.27079.16419648768867795104@ietfa.amsl.com> Date: Fri, 19 Jan 2018 01:23:56 -0800 Archived-At: Subject: [secdir] Secdir last call review of draft-ietf-rtgwg-ni-model-06 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 19 Jan 2018 09:23:57 -0000 Reviewer: Liang Xia Review result: Has Issues For the section of Security Considerations: 1. you may refer to templete in https://trac.ietf.org/trac/ops/wiki/yang-security-guidelines to add some required general security considerations; 2. According to the above templete, [RFC5246], [RFC6241], [RFC6242], [RFC6536], and [RFC8040] must be "normative references"; 3. I don't see the security consideration content about the readable data nodes. Is it missed, or there are not such readable date nodes need to be considered? From nobody Fri Jan 19 06:53:39 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1F70F120726; Fri, 19 Jan 2018 06:53:37 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.529 X-Spam-Level: X-Spam-Status: No, score=-14.529 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qGb3fRbULFzL; Fri, 19 Jan 2018 06:53:35 -0800 (PST) Received: from alln-iport-3.cisco.com (alln-iport-3.cisco.com [173.37.142.90]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CC34F12D953; Fri, 19 Jan 2018 06:53:34 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=18272; q=dns/txt; s=iport; t=1516373614; x=1517583214; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=QWUcpZTT7NpiqlpKPxfPUDk2f2gGbwbjnPt+PFmG4FA=; b=J2Wv9mZqmGxjyMiuqsxCDxmrlE+6kwdQCW8MOkrpr4wPFrFQxXBtj99q fcx4sQyYqSPofQoz9wiJ5m26QW0x2+DaD0VVxCu1OMVpt8aRDxom7lYgF w2vwDsk0vLSBgBDchsY2sICorSiUNVwZzXh+8doM40vu8KhuvQBRyIlZg 0=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0ADAgAdBmJa/4oNJK1eGQEBAQEBAQEBA?= =?us-ascii?q?QEBAQcBAQEBAYJKeGZ0JweDVpkEggKRYIVnggIKhTsCGoRIQhUBAQEBAQEBAQF?= =?us-ascii?q?rKIUjAQEBAQMjCkwQAgEIDgMEAQEoAwICAjAUCQgCBA4FCIlHZK8qgieKMQEBA?= =?us-ascii?q?QEBAQEBAQEBAQEBAQEBAQEBAR2ERASBDoEHgz+DLoMvBIE8ARIBCUyCYYJlBaN?= =?us-ascii?q?1ApVNlCGXEQIRGQGBOwE1I19wbxWCZ4JVG4FneIoVDxgEgQmBFwEBAQ?= X-IronPort-AV: E=Sophos; i="5.46,381,1511827200"; d="scan'208,217"; a="58995587" Received: from alln-core-5.cisco.com ([173.36.13.138]) by alln-iport-3.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 19 Jan 2018 14:53:33 +0000 Received: from XCH-RCD-001.cisco.com (xch-rcd-001.cisco.com [173.37.102.11]) by alln-core-5.cisco.com (8.14.5/8.14.5) with ESMTP id w0JErXUW006990 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Fri, 19 Jan 2018 14:53:33 GMT Received: from xch-aln-003.cisco.com (173.36.7.13) by XCH-RCD-001.cisco.com (173.37.102.11) with Microsoft SMTP Server (TLS) id 15.0.1320.4; Fri, 19 Jan 2018 08:53:33 -0600 Received: from xch-aln-003.cisco.com ([173.36.7.13]) by XCH-ALN-003.cisco.com ([173.36.7.13]) with mapi id 15.00.1320.000; Fri, 19 Jan 2018 08:53:32 -0600 From: "Bernie Volz (volz)" To: Kyle Rose CC: The IESG , "secdir@ietf.org" , "draft-ietf-dhc-rfc3315bis.all@ietf.org" Thread-Topic: Secdir last call review of draft-ietf-dhc-rfc3315bis-10 Thread-Index: AQHTj9uyrsvjo+IRTkmYu3nNI56zPaN7SK3Q Date: Fri, 19 Jan 2018 14:53:32 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.98.1.196] Content-Type: multipart/alternative; boundary="_000_a29a0d22e62f457792d2985f125a87f9XCHALN003ciscocom_" MIME-Version: 1.0 Archived-At: Subject: Re: [secdir] Secdir last call review of draft-ietf-dhc-rfc3315bis-10 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 19 Jan 2018 14:53:37 -0000 --_000_a29a0d22e62f457792d2985f125a87f9XCHALN003ciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 S3lsZToNCg0KT24gYmVoYWxmIG9mIHRoZSBhdXRob3JzIG9mIGRyYWZ0LWlldGYtZGhjLXJmYzMz MTViaXMsIHRoYW5rcyBtdWNoIGZvciB0aGUgdmVyeSB0aG9yb3VnaCByZXZpZXcgKHRoaXMgZW1h aWwgYW5kIHlvdXIgb3RoZXIgZW1haWwgd2l0aCB0aGUgbml0cyDigJMgbW9zdCBvZiB0aG9zZSBu aXRzIGxvb2sgYXBwcm9wcmlhdGUgdG8gYXBwbHkpLg0KDQpSZWdhcmRpbmcgdGhlIEhNQUMtTUQ1 IGlzc3VlOiBUaGF0IHdhcyB3aGF0IFJGQyAzMzE1IHNwZWNpZmllZC4gQWxzbywgdGhlIEFVVEgg T3B0aW9uIChleGNlcHQgZm9yIHVzZSBieSBSS0FQKSBpcyBiZWluZyBkZXByZWNhdGVkLiBGb3Ig UktBUCwgdGhlcmUgaXMgYWxzbyBhIGZsYXcgYXMgdGhlcmUgaXMgbm8gbWVhbnMgZm9yIHRoZSBj bGllbnQgdG8gaW5kaWNhdGUgdGhlIGFsZ29yaXRobXMgaXQgc3VwcG9ydHMgYW5kIHRoZSBzZXJ2 ZXIgZ2VuZXJhdGVzIHRoaXMga2V5IOKAkyBzbyB3aGF0IGl0IHVzZXMgbXVzdCBiZSBzdXBwb3J0 ZWQgYnkgdGhlIGNsaWVudCBmb3IgaXQgdG8gd29yay4gVGhlcmVmb3JlLCBzaW1wbHkgY2hhbmdp bmcgYWxnb3JpdGhtcyBpcyBub3QgdmVyeSByZWFsbHkgcG9zc2libGUgKGxpa2VseSBpdCB3b3Vs ZCByZXF1aXJlIGEgTkVXIG9wdGlvbiB0byBoYXZlIHRoZSBjbGllbnQgY29tbXVuaWNhdGUgd2hp Y2ggYWxnb3JpdGhtKHMpIGl0IHN1cHBvcnRzKS4NCg0KDQotICAgICAgICAgIEJlcm5pZQ0KDQpG cm9tOiBLeWxlIFJvc2UgW21haWx0bzprcm9zZUBrcm9zZS5vcmddDQpTZW50OiBXZWRuZXNkYXks IEphbnVhcnkgMTcsIDIwMTggNDo0MCBQTQ0KVG86IFRoZSBJRVNHIDxpZXNnQGlldGYub3JnPjsg c2VjZGlyQGlldGYub3JnOyBkcmFmdC1pZXRmLWRoYy1yZmMzMzE1YmlzLmFsbEBpZXRmLm9yZw0K U3ViamVjdDogU2VjZGlyIGxhc3QgY2FsbCByZXZpZXcgb2YgZHJhZnQtaWV0Zi1kaGMtcmZjMzMx NWJpcy0xMA0KDQpMZXQgbWUgdHJ5IHNlbmRpbmcgdGhpcyB0byB0aGUgcmlnaHQgLmFsbCBhZGRy ZXNzLg0KUmV2aWV3ZXI6IEt5bGUgUm9zZQ0KUmV2aWV3IHJlc3VsdDogUmVhZHkgd2l0aCBpc3N1 ZXMNCg0KSSBoYXZlIHJldmlld2VkIHRoaXMgZG9jdW1lbnQgYXMgcGFydCBvZiB0aGUgc2VjdXJp dHkgZGlyZWN0b3JhdGUncyBvbmdvaW5nIGVmZm9ydCB0byByZXZpZXcgYWxsIElFVEYgZG9jdW1l bnRzIGJlaW5nIHByb2Nlc3NlZCBieSB0aGUgSUVTRy4gIFRoZXNlIGNvbW1lbnRzIHdlcmUgd3Jp dHRlbiBwcmltYXJpbHkgZm9yIHRoZSBiZW5lZml0IG9mIHRoZSBzZWN1cml0eSBhcmVhIGRpcmVj dG9ycy4gIERvY3VtZW50IGVkaXRvcnMgYW5kIFdHIGNoYWlycyBzaG91bGQgdHJlYXQgdGhlc2Ug Y29tbWVudHMganVzdCBsaWtlIGFueSBvdGhlciBsYXN0IGNhbGwgY29tbWVudHMuDQoNCjEzLjE6 ICJCeSBkZWZhdWx0LCBESENQIHNlcnZlciBpbXBsZW1lbnRhdGlvbnMgU0hPVUxEIE5PVCBnZW5l cmF0ZSBwcmVkaWN0YWJsZSBhZGRyZXNzZXMuIiBUaGUganVzdGlmaWNhdGlvbiBmb3IgdGhpcyBp cyBub3QgYWRkcmVzc2VkIGluIHRoZSBzZWN1cml0eSBjb25zaWRlcmF0aW9ucyBzZWN0aW9uLCB3 aGlsZSB0aGUgcHJpdmFjeSBjb25zaWRlcmF0aW9ucyBzZWN0aW9uIG1pZ2h0IGJlIHB1bnRpbmcg dGhpcyB0byBSRkMgNzgyNCwgdGhvdWdoIHRoZSBvbmx5IG1lbnRpb24gSSBjYW4gZmluZCBpbiBh IHF1aWNrIHNlYXJjaCByZWdhcmRzIGl0ZXJhdGl2ZSBhbGxvY2F0aW9uIGluIHNlY3Rpb24gNC4z Lg0KDQoyMC40LjE6IFJLQVAgdXNlcyBITUFDLU1ENSBmb3Igc3ltbWV0cmljIGF1dGhlbnRpY2F0 aW9uLiBBcyBhbiBpbmZvcm1hdGlvbmFsIG1hdHRlciBmb3IgYW4gZXhpc3RpbmcgcHJvdG9jb2ws IHRoaXMgaXMgY2VydGFpbmx5IGp1c3RpZmllZCwgYnV0IEkgZG9uJ3Qga25vdyBob3cgdGhlIElF VEYgaGFuZGxlcyBvYnNvbGV0ZSBjcnlwdG8gaW4gc3RhbmRhcmRzIHJldmlzaW9ucy4NCg0KMjAu NC4zOiAiLi4udGhlIGNsaWVudCBjb21wdXRlcyBhbiBITUFDLU1ENSBvdmVyIHRoZSBESENQIFJl Y29uZmlndXJlIG1lc3NhZ2UgW0FERDogd2l0aCB6ZXJvZXMgc3Vic3RpdHV0ZWQgZm9yIHRoZSBI TUFDLU1ENSBmaWVsZF0sIHVzaW5nIHRoZSBSZWNvbmZpZ3VyZSBLZXkgcmVjZWl2ZWQgZnJvbSB0 aGUgc2VydmVyIg0KDQoyMi4gREhDUCdzIHNlY3VyaXR5IHRocmVhdCBtb2RlbCBpcyBub3QgY2xl YXJseSBzdGF0ZWQuIEZvciBpbnN0YW5jZSwgUktBUCBwcm92aWRlcyBwcm90ZWN0aW9uIGFnYWlu c3QgbWFuLW9uLXRoZS1zaWRlIHJlY29uZmlndXJhdGlvbiBhdHRhY2tzLCBidXQgREhDUCBoYXMg bm8gYWJpbGl0eSBieSBpdHNlbGYgdG8gcHJvdGVjdCBhZ2FpbnN0IGEgcmFjZSBiZXR3ZWVuIGxl Z2l0aW1hdGUgYW5kIHJvZ3VlIERIQ1Agc2VydmVyczogc3VjaCBwcm90ZWN0aW9uIHJlbGllcyBv biBtYW5hZ2VtZW50IG9mIG11bHRpY2FzdCBncm91cHMgYXQgbGF5ZXIgMi4gVGhpcyBpcyBpbXBs aWVkIGJ5IHRoZSBwYXJhZ3JhcGggb24gc25vb3BpbmcgREhDUCBtdWx0aWNhc3QgdHJhZmZpYywg YnV0IG5vd2hlcmUgaXMgaXQgc3BlY2lmaWVkIG5vcm1hdGl2ZWx5IHRoYXQgcmVzdHJpY3RpdmUg Z3JvdXAgbWFuYWdlbWVudCBpcyBuZWNlc3NhcnkgdG8gZWxpbWluYXRlIHRoaXMgcGFydCBvZiB0 aGUgYXR0YWNrIHN1cmZhY2UuIFNpbWlsYXJseSwgaXQncyBub3QgY2xlYXIgdG8gbWUgd2hldGhl ciBhIHJvZ3VlIG9yIG1pc2NvbmZpZ3VyZWQgc2VydmVyIHRlbXBvcmFyaWx5IGluIHRoZSBBbGxf REhDUF9TZXJ2ZXJzIG9yIEFsbF9ESENQX1JlbGF5X0FnZW50c19hbmRfU2VydmVycyBtdWx0aWNh c3QgZ3JvdXAgY2FuIHRoZW4gaGlkZSBhIGNsaWVudCBmcm9tIHRoZSBvZmZpY2lhbCBESENQIHNl cnZlcnMgZm9yZXZlciBieSBzZW5kaW5nIGl0IHRoZSB1bmljYXN0IG9wdGlvbiwgdGh1cyBtYWlu dGFpbmluZyBleGNsdXNpdmUgYWNjZXNzIHRvIGNlcnRhaW4gbWVzc2FnZXMsIG5vdGFibGV5IFJl cXVlc3QgYW5kIFJlbmV3LiBUaGUgdGhyZWF0IG1vZGVsIHNob3VsZCBiZSBzdGF0ZWQgY2xlYXJs eSBpbiB0aGlzIGRvY3VtZW50LCBldmVuIGlmIHRoZSByZWNvbW1lbmRlZCBjb3VudGVybWVhc3Vy ZXMgYXJlIGluIHNvbWUgb3RoZXIgUkZDIChzdWNoIGFzIFJGQyA3NjEwKSBiZWNhdXNlIHRoZXkg cmVseSBvbiBpbmZvcm1hdGlvbiBub3QgaW4gdGhpcyBkb2N1bWVudC4NCg0KMjMuIERvZXMgaXQg bWFrZSBzZW5zZSB0byBjbGFyaWZ5IHRoZSB0aHJlYXQgbW9kZWwgZm9yIHByaXZhY3k/IEZvciBp bnN0YW5jZSwgdGhpcyBwcm90b2NvbCBkb2Vzbid0IHRyeSB0byBkZWZlbmQgY2xpZW50cyBhZ2Fp bnN0IHRyYWNraW5nIHdpdGhpbiBhIExBTiB0aGF0IGNhbiBvYnNlcnZlIHRoZSBESENQIHRyYWZm aWMuIEkgY2FuIGd1ZXNzIHdoYXQgdGhlIHRocmVhdCBtb2RlbCBpcywgYnV0IElTVE0gdGhhdCBp dCBzaG91bGQgYmUgc3BlY2lmaWVkIGV4cGxpY2l0bHkuDQoNCg0K --_000_a29a0d22e62f457792d2985f125a87f9XCHALN003ciscocom_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 V2luZ2RpbmdzOw0KCXBhbm9zZS0xOjUgMCAwIDAgMCAwIDAgMCAwIDA7fQ0KQGZvbnQtZmFjZQ0K CXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2IDMg MiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1 IDUgMiAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWws IGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGluOw0KCW1hcmdpbi1ib3R0 b206LjAwMDFwdDsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcg Um9tYW4iLHNlcmlmO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXBy aW9yaXR5Ojk5Ow0KCWNvbG9yOiMwNTYzQzE7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9 DQphOnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9y aXR5Ojk5Ow0KCWNvbG9yOiM5NTRGNzI7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpw Lk1zb0xpc3RQYXJhZ3JhcGgsIGxpLk1zb0xpc3RQYXJhZ3JhcGgsIGRpdi5Nc29MaXN0UGFyYWdy YXBoDQoJe21zby1zdHlsZS1wcmlvcml0eTozNDsNCgltYXJnaW4tdG9wOjBpbjsNCgltYXJnaW4t cmlnaHQ6MGluOw0KCW1hcmdpbi1ib3R0b206MGluOw0KCW1hcmdpbi1sZWZ0Oi41aW47DQoJbWFy Z2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMi4wcHQ7DQoJZm9udC1mYW1pbHk6IlRp bWVzIE5ldyBSb21hbiIsc2VyaWY7fQ0Kc3Bhbi5FbWFpbFN0eWxlMTcNCgl7bXNvLXN0eWxlLXR5 cGU6cGVyc29uYWwtcmVwbHk7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJ Y29sb3I6IzFGNDk3RDt9DQouTXNvQ2hwRGVmYXVsdA0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQt b25seTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQpAcGFnZSBXb3JkU2Vj dGlvbjENCgl7c2l6ZTo4LjVpbiAxMS4waW47DQoJbWFyZ2luOjEuMGluIDEuMGluIDEuMGluIDEu MGluO30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLyogTGlzdCBE ZWZpbml0aW9ucyAqLw0KQGxpc3QgbDANCgl7bXNvLWxpc3QtaWQ6MjExMjMxMjc5NzsNCgltc28t bGlzdC10eXBlOmh5YnJpZDsNCgltc28tbGlzdC10ZW1wbGF0ZS1pZHM6OTAzNjU2NDAgLTQzODUx MzkxMiA2NzY5ODY5MSA2NzY5ODY5MyA2NzY5ODY4OSA2NzY5ODY5MSA2NzY5ODY5MyA2NzY5ODY4 OSA2NzY5ODY5MSA2NzY5ODY5Mzt9DQpAbGlzdCBsMDpsZXZlbDENCgl7bXNvLWxldmVsLXN0YXJ0 LWF0OjI7DQoJbXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0 Oi07DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlv bjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fu cy1zZXJpZjsNCgltc28tZmFyZWFzdC1mb250LWZhbWlseTpDYWxpYnJpOw0KCW1zby1iaWRpLWZv bnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iO30NCkBsaXN0IGwwOmxldmVsMg0KCXttc28tbGV2 ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ6bzsNCgltc28tbGV2ZWwt dGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1p bmRlbnQ6LS4yNWluOw0KCWZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyI7fQ0KQGxpc3QgbDA6bGV2 ZWwzDQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrv gqc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlv bjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCglmb250LWZhbWlseTpXaW5nZGluZ3M7fQ0K QGxpc3QgbDA6bGV2ZWw0DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28t bGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51 bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCglmb250LWZhbWlseTpT eW1ib2w7fQ0KQGxpc3QgbDA6bGV2ZWw1DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxl dDsNCgltc28tbGV2ZWwtdGV4dDpvOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1s ZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJZm9udC1m YW1pbHk6IkNvdXJpZXIgTmV3Ijt9DQpAbGlzdCBsMDpsZXZlbDYNCgl7bXNvLWxldmVsLW51bWJl ci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CpzsNCgltc28tbGV2ZWwtdGFiLXN0 b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6 LS4yNWluOw0KCWZvbnQtZmFtaWx5OldpbmdkaW5nczt9DQpAbGlzdCBsMDpsZXZlbDcNCgl7bXNv LWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28t bGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJ dGV4dC1pbmRlbnQ6LS4yNWluOw0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMDpsZXZl bDgNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Om87 DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjps ZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCglmb250LWZhbWlseToiQ291cmllciBOZXciO30N CkBsaXN0IGwwOmxldmVsOQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNv LWxldmVsLXRleHQ674KnOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1u dW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJZm9udC1mYW1pbHk6 V2luZ2RpbmdzO30NCm9sDQoJe21hcmdpbi1ib3R0b206MGluO30NCnVsDQoJe21hcmdpbi1ib3R0 b206MGluO30NCi0tPjwvc3R5bGU+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWRl ZmF1bHRzIHY6ZXh0PSJlZGl0IiBzcGlkbWF4PSIxMDI2IiAvPg0KPC94bWw+PCFbZW5kaWZdLS0+ PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWxheW91dCB2OmV4dD0iZWRpdCI+DQo8 bzppZG1hcCB2OmV4dD0iZWRpdCIgZGF0YT0iMSIgLz4NCjwvbzpzaGFwZWxheW91dD48L3htbD48 IVtlbmRpZl0tLT4NCjwvaGVhZD4NCjxib2R5IGxhbmc9IkVOLVVTIiBsaW5rPSIjMDU2M0MxIiB2 bGluaz0iIzk1NEY3MiI+DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEiPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPkt5bGU6PG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMx RjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkm cXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj5PbiBiZWhhbGYgb2YgdGhlIGF1dGhvcnMg b2YgZHJhZnQtaWV0Zi1kaGMtcmZjMzMxNWJpcywgdGhhbmtzIG11Y2ggZm9yIHRoZSB2ZXJ5IHRo b3JvdWdoIHJldmlldyAodGhpcyBlbWFpbCBhbmQgeW91ciBvdGhlciBlbWFpbCB3aXRoIHRoZSBu aXRzIOKAkyBtb3N0IG9mIHRob3NlDQogbml0cyBsb29rIGFwcHJvcHJpYXRlIHRvIGFwcGx5KS48 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2Vy aWY7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPlJlZ2FyZGluZyB0aGUg SE1BQy1NRDUgaXNzdWU6IFRoYXQgd2FzIHdoYXQgUkZDIDMzMTUgc3BlY2lmaWVkLiBBbHNvLCB0 aGUgQVVUSCBPcHRpb24gKGV4Y2VwdCBmb3IgdXNlIGJ5IFJLQVApIGlzIGJlaW5nIGRlcHJlY2F0 ZWQuIEZvciBSS0FQLCB0aGVyZSBpcyBhbHNvIGENCiBmbGF3IGFzIHRoZXJlIGlzIG5vIG1lYW5z IGZvciB0aGUgY2xpZW50IHRvIGluZGljYXRlIHRoZSBhbGdvcml0aG1zIGl0IHN1cHBvcnRzIGFu ZCB0aGUgc2VydmVyIGdlbmVyYXRlcyB0aGlzIGtleSDigJMgc28gd2hhdCBpdCB1c2VzIG11c3Qg YmUgc3VwcG9ydGVkIGJ5IHRoZSBjbGllbnQgZm9yIGl0IHRvIHdvcmsuIFRoZXJlZm9yZSwgc2lt cGx5IGNoYW5naW5nIGFsZ29yaXRobXMgaXMgbm90IHZlcnkgcmVhbGx5IHBvc3NpYmxlIChsaWtl bHkgaXQNCiB3b3VsZCByZXF1aXJlIGEgTkVXIG9wdGlvbiB0byBoYXZlIHRoZSBjbGllbnQgY29t bXVuaWNhdGUgd2hpY2ggYWxnb3JpdGhtKHMpIGl0IHN1cHBvcnRzKS48bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3 RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb0xpc3RQYXJhZ3Jh cGgiIHN0eWxlPSJ0ZXh0LWluZGVudDotLjI1aW47bXNvLWxpc3Q6bDAgbGV2ZWwxIGxmbzEiPjwh W2lmICFzdXBwb3J0TGlzdHNdPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj48c3BhbiBz dHlsZT0ibXNvLWxpc3Q6SWdub3JlIj4tPHNwYW4gc3R5bGU9ImZvbnQ6Ny4wcHQgJnF1b3Q7VGlt ZXMgTmV3IFJvbWFuJnF1b3Q7Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsNCjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwhW2VuZGlmXT48c3BhbiBz dHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNh bnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+QmVybmllPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5i c3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1z ZXJpZiI+RnJvbTo8L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+IEt5bGUgUm9zZSBbbWFpbHRv Omtyb3NlQGtyb3NlLm9yZ10NCjxicj4NCjxiPlNlbnQ6PC9iPiBXZWRuZXNkYXksIEphbnVhcnkg MTcsIDIwMTggNDo0MCBQTTxicj4NCjxiPlRvOjwvYj4gVGhlIElFU0cgJmx0O2llc2dAaWV0Zi5v cmcmZ3Q7OyBzZWNkaXJAaWV0Zi5vcmc7IGRyYWZ0LWlldGYtZGhjLXJmYzMzMTViaXMuYWxsQGll dGYub3JnPGJyPg0KPGI+U3ViamVjdDo8L2I+IFNlY2RpciBsYXN0IGNhbGwgcmV2aWV3IG9mIGRy YWZ0LWlldGYtZGhjLXJmYzMzMTViaXMtMTA8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibWFyZ2luLWJvdHRvbToxMi4wcHQiPkxldCBtZSB0cnkgc2VuZGluZyB0 aGlzIHRvIHRoZSByaWdodCAuYWxsIGFkZHJlc3MuPG86cD48L286cD48L3A+DQo8ZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlJldmlld2VyOiBLeWxlIFJvc2U8bzpwPjwvbzpwPjwv cD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5SZXZpZXcgcmVzdWx0OiBSZWFkeSB3aXRo IGlzc3VlczxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibWFyZ2luLWJvdHRvbToxMi4wcHQiPjxicj4NCkkgaGF2ZSByZXZpZXdlZCB0aGlz IGRvY3VtZW50IGFzIHBhcnQgb2YgdGhlIHNlY3VyaXR5IGRpcmVjdG9yYXRlJ3Mgb25nb2luZyBl ZmZvcnQgdG8gcmV2aWV3IGFsbCBJRVRGIGRvY3VtZW50cyBiZWluZyBwcm9jZXNzZWQgYnkgdGhl IElFU0cuJm5ic3A7IFRoZXNlIGNvbW1lbnRzIHdlcmUgd3JpdHRlbiBwcmltYXJpbHkgZm9yIHRo ZSBiZW5lZml0IG9mIHRoZSBzZWN1cml0eSBhcmVhIGRpcmVjdG9ycy4mbmJzcDsgRG9jdW1lbnQg ZWRpdG9ycyBhbmQgV0cgY2hhaXJzDQogc2hvdWxkIHRyZWF0IHRoZXNlIGNvbW1lbnRzIGp1c3Qg bGlrZSBhbnkgb3RoZXIgbGFzdCBjYWxsIGNvbW1lbnRzLjxicj4NCjxicj4NCjEzLjE6ICZxdW90 O0J5IGRlZmF1bHQsIERIQ1Agc2VydmVyIGltcGxlbWVudGF0aW9ucyBTSE9VTEQgTk9UIGdlbmVy YXRlIHByZWRpY3RhYmxlIGFkZHJlc3Nlcy4mcXVvdDsgVGhlIGp1c3RpZmljYXRpb24gZm9yIHRo aXMgaXMgbm90IGFkZHJlc3NlZCBpbiB0aGUgc2VjdXJpdHkgY29uc2lkZXJhdGlvbnMgc2VjdGlv biwgd2hpbGUgdGhlIHByaXZhY3kgY29uc2lkZXJhdGlvbnMgc2VjdGlvbiBtaWdodCBiZSBwdW50 aW5nIHRoaXMgdG8gUkZDIDc4MjQsIHRob3VnaA0KIHRoZSBvbmx5IG1lbnRpb24gSSBjYW4gZmlu ZCBpbiBhIHF1aWNrIHNlYXJjaCByZWdhcmRzIGl0ZXJhdGl2ZSBhbGxvY2F0aW9uIGluIHNlY3Rp b24gNC4zLjxicj4NCjxicj4NCjIwLjQuMTogUktBUCB1c2VzIEhNQUMtTUQ1IGZvciBzeW1tZXRy aWMgYXV0aGVudGljYXRpb24uIEFzIGFuIGluZm9ybWF0aW9uYWwgbWF0dGVyIGZvciBhbiBleGlz dGluZyBwcm90b2NvbCwgdGhpcyBpcyBjZXJ0YWlubHkganVzdGlmaWVkLCBidXQgSSBkb24ndCBr bm93IGhvdyB0aGUgSUVURiBoYW5kbGVzIG9ic29sZXRlIGNyeXB0byBpbiBzdGFuZGFyZHMgcmV2 aXNpb25zLjxicj4NCjxicj4NCjIwLjQuMzogJnF1b3Q7Li4udGhlIGNsaWVudCBjb21wdXRlcyBh biBITUFDLU1ENSBvdmVyIHRoZSBESENQIFJlY29uZmlndXJlIG1lc3NhZ2UgW0FERDogd2l0aCB6 ZXJvZXMgc3Vic3RpdHV0ZWQgZm9yIHRoZSBITUFDLU1ENSBmaWVsZF0sIHVzaW5nIHRoZSBSZWNv bmZpZ3VyZSBLZXkgcmVjZWl2ZWQgZnJvbSB0aGUgc2VydmVyJnF1b3Q7PGJyPg0KPGJyPg0KMjIu IERIQ1AncyBzZWN1cml0eSB0aHJlYXQgbW9kZWwgaXMgbm90IGNsZWFybHkgc3RhdGVkLiBGb3Ig aW5zdGFuY2UsIFJLQVAgcHJvdmlkZXMgcHJvdGVjdGlvbiBhZ2FpbnN0IG1hbi1vbi10aGUtc2lk ZSByZWNvbmZpZ3VyYXRpb24gYXR0YWNrcywgYnV0IERIQ1AgaGFzIG5vIGFiaWxpdHkgYnkgaXRz ZWxmIHRvIHByb3RlY3QgYWdhaW5zdCBhIHJhY2UgYmV0d2VlbiBsZWdpdGltYXRlIGFuZCByb2d1 ZSBESENQIHNlcnZlcnM6IHN1Y2ggcHJvdGVjdGlvbg0KIHJlbGllcyBvbiBtYW5hZ2VtZW50IG9m IG11bHRpY2FzdCBncm91cHMgYXQgbGF5ZXIgMi4gVGhpcyBpcyBpbXBsaWVkIGJ5IHRoZSBwYXJh Z3JhcGggb24gc25vb3BpbmcgREhDUCBtdWx0aWNhc3QgdHJhZmZpYywgYnV0IG5vd2hlcmUgaXMg aXQgc3BlY2lmaWVkIG5vcm1hdGl2ZWx5IHRoYXQgcmVzdHJpY3RpdmUgZ3JvdXAgbWFuYWdlbWVu dCBpcyBuZWNlc3NhcnkgdG8gZWxpbWluYXRlIHRoaXMgcGFydCBvZiB0aGUgYXR0YWNrIHN1cmZh Y2UuIFNpbWlsYXJseSwNCiBpdCdzIG5vdCBjbGVhciB0byBtZSB3aGV0aGVyIGEgcm9ndWUgb3Ig bWlzY29uZmlndXJlZCBzZXJ2ZXIgdGVtcG9yYXJpbHkgaW4gdGhlIEFsbF9ESENQX1NlcnZlcnMg b3IgQWxsX0RIQ1BfUmVsYXlfQWdlbnRzX2FuZF9TZXJ2ZXJzIG11bHRpY2FzdCBncm91cCBjYW4g dGhlbiBoaWRlIGEgY2xpZW50IGZyb20gdGhlIG9mZmljaWFsIERIQ1Agc2VydmVycyBmb3JldmVy IGJ5IHNlbmRpbmcgaXQgdGhlIHVuaWNhc3Qgb3B0aW9uLCB0aHVzIG1haW50YWluaW5nDQogZXhj bHVzaXZlIGFjY2VzcyB0byBjZXJ0YWluIG1lc3NhZ2VzLCBub3RhYmxleSBSZXF1ZXN0IGFuZCBS ZW5ldy4gVGhlIHRocmVhdCBtb2RlbCBzaG91bGQgYmUgc3RhdGVkIGNsZWFybHkgaW4gdGhpcyBk b2N1bWVudCwgZXZlbiBpZiB0aGUgcmVjb21tZW5kZWQgY291bnRlcm1lYXN1cmVzIGFyZSBpbiBz b21lIG90aGVyIFJGQyAoc3VjaCBhcyBSRkMgNzYxMCkgYmVjYXVzZSB0aGV5IHJlbHkgb24gaW5m b3JtYXRpb24gbm90IGluIHRoaXMgZG9jdW1lbnQuPGJyPg0KPGJyPg0KMjMuIERvZXMgaXQgbWFr ZSBzZW5zZSB0byBjbGFyaWZ5IHRoZSB0aHJlYXQgbW9kZWwgZm9yIHByaXZhY3k/IEZvciBpbnN0 YW5jZSwgdGhpcyBwcm90b2NvbCBkb2Vzbid0IHRyeSB0byBkZWZlbmQgY2xpZW50cyBhZ2FpbnN0 IHRyYWNraW5nIHdpdGhpbiBhIExBTiB0aGF0IGNhbiBvYnNlcnZlIHRoZSBESENQIHRyYWZmaWMu IEkgY2FuIGd1ZXNzIHdoYXQgdGhlIHRocmVhdCBtb2RlbCBpcywgYnV0IElTVE0gdGhhdCBpdCBz aG91bGQgYmUgc3BlY2lmaWVkDQogZXhwbGljaXRseS48YnI+DQo8YnI+DQo8bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2JvZHk+DQo8 L2h0bWw+DQo= --_000_a29a0d22e62f457792d2985f125a87f9XCHALN003ciscocom_-- From nobody Fri Jan 19 07:10:42 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E335112D957; Fri, 19 Jan 2018 07:10:35 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.908 X-Spam-Level: X-Spam-Status: No, score=-6.908 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, T_RP_MATCHES_RCVD=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nKJa3HhIOb6P; Fri, 19 Jan 2018 07:10:33 -0800 (PST) Received: from mail2-relais-roc.national.inria.fr (mail2-relais-roc.national.inria.fr [192.134.164.83]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B29A312D950; Fri, 19 Jan 2018 07:10:31 -0800 (PST) X-IronPort-AV: E=Sophos;i="5.46,381,1511823600"; d="scan'208,217";a="309834864" Received: from dom38-1-82-236-155-50.fbx.proxad.net (HELO [192.168.1.112]) ([82.236.155.50]) by mail2-relais-roc.national.inria.fr with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 19 Jan 2018 16:10:29 +0100 From: Vincent Roca Message-Id: <1A4312A1-16CA-4BC9-BDEB-FDF0E33CF1FA@inria.fr> Content-Type: multipart/alternative; boundary="Apple-Mail=_351A80C2-6966-4850-A879-A327113FB7FF" Mime-Version: 1.0 (Mac OS X Mail 11.2 \(3445.5.20\)) Date: Fri, 19 Jan 2018 16:10:27 +0100 In-Reply-To: <50006956-2D5C-49F9-8CA8-ACBEC2B266F1@inria.fr> To: IESG , secdir@ietf.org, draft-ietf-intarea-broadcast-consider.all@ietf.org References: <383EA7C8-CFF0-48AF-AD0C-840545483E94@inria.fr> <80beb32b-35fe-9a2d-e951-037a34d81a5f@hs-augsburg.de> <50006956-2D5C-49F9-8CA8-ACBEC2B266F1@inria.fr> X-Mailer: Apple Mail (2.3445.5.20) Archived-At: Subject: [secdir] Secdir review of draft-ietf-intarea-broadcast-consider-07 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 19 Jan 2018 15:10:36 -0000 --Apple-Mail=_351A80C2-6966-4850-A879-A327113FB7FF Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 This is a re-review. My answer below, sent on Jan. 16th, also applies = to version -07. Summary: Almost ready Most of my initial comments have been addressed by the authors. I made a few suggestions/clarifications (below), in addition to my = initial review. I would insist on implementing the first one, 2), beginning with: "I=E2=80=99d like you extend a little the the bullet (b) of = introduction: =E2=80=A6 =C2=BB but let the authors judge what they prefer to do for the next ones. Regards, Vincent > Le 16 janv. 2018 =C3=A0 09:50, Vincent Roca a = =C3=A9crit : >=20 > Hello Rolf, >=20 >> thanks for the detailed review and sorry for the belated reply. We = have submitted a new version based on these comments and = recommendations. Please see inline: >=20 > You=E2=80=99re welcome. >=20 >>> 2) Another point: I'd like to see the item (b) of introduction >>> developed as this is the key issue with multicast/broadcast traffic. >>> Without encryption, application messages are vulnerable to >>> eavesdropping and all kinds of analyses. A group key could be >>> negociated and used for encrypting this traffic, but this requires a >>> more complex setup mechanism (typically a key management system, >>> probably with re-keying and all the stuff) and requires a = preliminary >>> association of a terminal that is not necessarily compatible with = the >>> application-layer protocol features. >>> The text could say that if possible, multicast/broadcast traffic >>> encryption should be used, otherwise risks should be minimised as >>> discussed in this document. And of course, it's always good to = remind >>> the designers that unicast traffic should be always encrypted since >>> there's no good reason not to do that. >>=20 >>=20 >> We talk about this in the security considerations section and come to = the same conclusion as you do: >>=20 >> "It should be noted that certain applications could make use of >> existing mechanisms to protect multicast traffic such as the ones >> defined in [RFC5374]. Examples of such applications can be found = in >> Appendix A. of [RFC5374]. Given the required infrastructure and >> assumptions about these applications and the security = infrastructure, >> many applications will not be able to make use of such mechanisms." >>=20 >> In which way would you expand on this? >=20 > I=E2=80=99d like you extend a little the the bullet (b) of = introduction: > (b) Encryption is more difficult when broadcast/multicast messages, > leaving content of these messages in the clear and making it > easier to spoof and replay them. > It suggests that because it=E2=80=99s difficult, it won=E2=80=99t be = used. This is not the > message the I-D should carry. It=E2=80=99s difficult (add a reference = here), sure, > but not impossible. You can also briefly explain why it=E2=80=99s more = difficult with > multicast/broadcast. >=20 >=20 >>> 3) I'd like to suggest another recommendation: when applicable, = limit >>> or avoid user-originated broadcast/multicast messages, preferring >>> infrastructure originated messages. >>> An example: in a discovery mechanism, avoid terminal sollicitation = as >>> much as possible and limit oneself to infrastructure announcement >>> broadcast messages, even if it can include some extra delay = (controled >>> with the announcement frequency). This is exactly what happened in >>> Wifi AP discovery, where the passive discovery scheme, AP based, is >>> now prefered to the active scheme. >>> Said differently, multicast/broadcast is not per se the issue, when >>> originating from the infrastructure it is generaly safe. >>=20 >> I think I disagree somewhat (and it is not a generally applicable use = case, e.g. if resources on a host are offered there is no general way to = delegate announcements of these to the infrastructure). Saying that = infrastructure announcements are generally safe requires that a receiver = can validate that a message came from the infrastructure which is a = problem (e.g. rogue DHCP servers). A lot of deployments solve some of = this through infrastructure means (e.g. DHCP snooping), but we have = documented that. Also, whatever comes from the infrastructure requires a = standard so that devices/apps understand it. We have text around that, = too. >=20 > Let me clarify what I had in mind. A few years ago, discovery of a = known WiFi AP > from a device was accelerated through the use of an active mechanism, = with the > device sending probes to potentially detects those know WiFi APs. That = was > awful from a privacy point of view as highlighted by researchers. The = trend was to > move to a passive approach, relying mostly on AP announcements (in = addition to > MAC address randomisation). The privacy benefits while doing so are = terrible. > See e.g., my colleague Mathieu publication on the topic: = https://hal.inria.fr/hal-00747825 > This is perfectly in line with your I-D. How privacy can be = compromised by using > a broadcast based protocol.=20 >=20 > Having said that, I agree with you that rogue announcements raise = security concerns > (but that=E2=80=99s true for any message sent), and it does not work = for resources offered by > a host. I agree, this is not a universal approach. I let you judge = whether it makes sense > to talk about it or not. >=20 >=20 >>> 4) A more general comment, related to item (a) of intro: >>> Broadcast/multicast can simplify user surveillance, I agree. = However, >>> when I'm looking at all the practicies of companies working in the >>> advertising area (in particular A&A companies, sitting between >>> smartphone users and advertisers, domain that I know a little bit), >>> the techniques deployed are incredibly smart, some of them bypassing >>> technical protections set up by the OS manufacturers, others relying >>> on hidden technical features. It's impressive how inventive those >>> companies can be. >>> My point is that even if traffic is 100% unicast, as long as a >>> wireless medium is used, anyone wanting to monitor users in order to >>> profile them will set up the required hardware/software = configuration. >>> This is trivial and extremely cheap nowadays (except perhaps for 4G >>> connections), and most of the time this is a purely passive >>> monitoring. The unicast/multicast/broadcast nature of traffic has no >>> importance as long as you are within wireless network range. >>=20 >>=20 >> I think there is little that the IETF can do about that. Also = "bypassing technical protection" and using "hidden technical features" = is nothing you can protect against in general and I assume is often not = by design. >=20 > I agree and I don=E2=80=99t want to question the importance of this = I-D here. > But it remains that wireless communications are so easy to monitor. >=20 >=20 >>> *Various:* >>> ** the authors use the term "host name" to refer to a higher layer >>> name of a device. To me this term refers to the DNS notion of >>> "hostname", i.e. something different, hence confusion. I'd recommend >>> to use "device name" in order to avoid it. >>=20 >> Well, RFC 7719 even admits the term is ill defined and does refer to = various things. Also, for the protocols we looked at and OS = configurations, sometimes there are different host namens being used for = different purposes. We would like to stick with host names (also since = RFC8117 useses the term which is highly relevant in this context). >=20 > I was not aware of those RFCs. Do what you believe is the most = appropriate. >=20 > Cheers, >=20 > Vincent --Apple-Mail=_351A80C2-6966-4850-A879-A327113FB7FF Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8
This is a re-review. My answer below, sent on Jan. 16th, =  also applies to version -07.

Summary: Almost ready

Most of my initial comments have been addressed by the = authors.

I = made a few suggestions/clarifications (below), in addition to my initial = review.

I = would insist on implementing the first one, 2), beginning = with:
"I=E2=80=99d like you extend a = little the the bullet (b) of introduction: =E2=80=A6 =C2=BB

but let the authors = judge what they prefer to do for the next ones.

Regards,

  Vincent



Le 16 janv. 2018 =C3=A0 09:50, Vincent Roca = <vincent.roca@inria.fr> a =C3=A9crit :

Hello Rolf,

thanks for the detailed review = and sorry for the belated reply. We have submitted a new version based = on these comments and recommendations. Please see inline:

You=E2=80=99re welcome.

2) Another point: I'd like to see the item (b) of = introduction
developed as this is the key issue with = multicast/broadcast traffic.
Without encryption, = application messages are vulnerable to
eavesdropping and = all kinds of analyses. A group key could be
negociated and = used for encrypting this traffic, but this requires a
more = complex setup mechanism (typically a key management system,
probably with re-keying and all the stuff) and requires a = preliminary
association of a terminal that is not = necessarily compatible with the
application-layer protocol = features.
The text could say that if possible, = multicast/broadcast traffic
encryption should be used, = otherwise risks should be minimised as
discussed in this = document. And of course, it's always good to remind
the = designers that unicast traffic should be always encrypted since
there's no good reason not to do that.


We talk about this in the = security considerations section and come to the same conclusion as you = do:

"It should be noted that certain = applications could make use of
  existing mechanisms = to protect multicast traffic such as the ones
  defined in [RFC5374].  Examples = of such applications can be found in
  Appendix A. of = [RFC5374].  Given the required infrastructure and
  assumptions about these applications = and the security infrastructure,
  many applications = will not be able to make use of such mechanisms."
In which way would you expand on this?

I=E2=80=99d like you extend a little the the bullet (b) of = introduction:
(b) Encryption is more difficult = when broadcast/multicast messages,
   =      leaving content of these messages in the clear and = making it
        easier = to spoof and replay them.
It = suggests that because it=E2=80=99s difficult, it won=E2=80=99t be used. = This is not the
message the I-D should carry. = It=E2=80=99s difficult (add a reference here), sure,
but not impossible. You can also briefly explain why it=E2=80=99= s more difficult with
multicast/broadcast.


3) I'd like to suggest another recommendation: when = applicable, limit
or avoid user-originated = broadcast/multicast messages, preferring
infrastructure = originated messages.
An example: in a discovery mechanism, = avoid terminal sollicitation as
much as possible and limit = oneself to infrastructure announcement
broadcast messages, = even if it can include some extra delay (controled
with = the announcement frequency). This is exactly what happened in
Wifi AP discovery, where the passive discovery scheme, AP = based, is
now prefered to the active scheme.
Said differently, multicast/broadcast is not per se the = issue, when
originating from the infrastructure it is = generaly safe.

I think I disagree somewhat (and = it is not a generally applicable use case, e.g. if resources on a host = are offered there is no general way to delegate announcements of these = to the infrastructure). Saying that infrastructure announcements are = generally safe requires that a receiver can validate that a message came = from the infrastructure which is a problem (e.g. rogue DHCP servers). A = lot of deployments solve some of this through infrastructure means (e.g. = DHCP snooping), but we have documented that. Also, whatever comes from = the infrastructure requires a standard so that devices/apps understand = it. We have text around that, too.

Let me clarify what I had in mind. A few years ago, discovery = of a known WiFi AP
from a device was accelerated = through the use of an active mechanism, with the
device sending probes to potentially detects those know WiFi = APs. That was
awful from a privacy point of view as = highlighted by researchers. The trend was to
move = to a passive approach, relying mostly on AP announcements (in addition = to
MAC address randomisation). The privacy benefits = while doing so are terrible.
See e.g., my colleague = Mathieu publication on the topic: https://hal.inria.fr/hal-00747825
This= is perfectly in line with your  I-D. How privacy can be = compromised by using
a broadcast based = protocol. 

Having said that, I agree with you that rogue announcements = raise security concerns
(but that=E2=80=99s true = for any message sent), and it does not work for resources offered = by
a host. I agree, this is not a universal = approach. I let you judge whether it makes sense
to = talk about it or not.


4) A more general comment, = related to item (a) of intro:
Broadcast/multicast can = simplify user surveillance, I agree. However,
when I'm = looking at all the practicies of companies working in the
advertising area (in particular A&A companies, sitting = between
smartphone users and advertisers, domain that I = know a little bit),
the techniques deployed are incredibly = smart, some of them bypassing
technical protections set up = by the OS manufacturers, others relying
on hidden = technical features. It's impressive how inventive those
companies can be.
My point is that even if = traffic is 100% unicast, as long as a
wireless medium is = used, anyone wanting to monitor users in order to
profile = them will set up the required hardware/software configuration.
This is trivial and extremely cheap nowadays (except perhaps = for 4G
connections), and most of the time this is a purely = passive
monitoring. The unicast/multicast/broadcast nature = of traffic has no
importance as long as you are within = wireless network range.

I think there is little that the IETF can do = about that. Also "bypassing technical protection" and using "hidden = technical features" is nothing you can protect against in general and I = assume is often not by design.

I agree and I don=E2=80=99t want to question the importance = of this I-D here.
But it remains that wireless = communications are so easy to monitor.


*Various:*
** = the authors use the term "host name" to refer to a higher layer
name of a device. To me this term refers to the DNS notion = of
"hostname", i.e. something different, hence confusion. = I'd recommend
to use "device name" in order to avoid = it.

Well, RFC 7719 even admits the = term is ill defined and does refer to various things. Also, for the = protocols we looked at and OS configurations, sometimes there are = different host namens being used for different purposes. We would like = to stick with host names (also since RFC8117 useses the term which is = highly relevant in this context).

I was not aware of those RFCs. Do what you believe is the = most appropriate.

Cheers,

  =  Vincent
=

= --Apple-Mail=_351A80C2-6966-4850-A879-A327113FB7FF-- From nobody Fri Jan 19 07:20:15 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 639C212D964; Fri, 19 Jan 2018 07:20:09 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.13 X-Spam-Level: X-Spam-Status: No, score=-1.13 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_NEUTRAL=0.779, T_RP_MATCHES_RCVD=-0.01, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 50AfmYBbqsMj; Fri, 19 Jan 2018 07:20:05 -0800 (PST) Received: from fly1.rz.hs-augsburg.de (fly1.RZ.HS-Augsburg.DE [IPv6:2001:638:102:201::11:25]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7736F12D958; Fri, 19 Jan 2018 07:20:05 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by fly1.rz.hs-augsburg.de (Postfix) with ESMTP id 2820740B82; Fri, 19 Jan 2018 16:19:55 +0100 (CET) X-Virus-Scanned: Debian amavisd-new at hs-augsburg.de Received: from fly1.rz.hs-augsburg.de ([127.0.0.1]) by localhost (fly1.rz.hs-augsburg.de [127.0.0.1]) (amavisd-new, port 10024) with LMTP id S_ZLEE9J0TfD; Fri, 19 Jan 2018 16:19:54 +0100 (CET) Received: from [192.168.1.148] (nightswatch.informatik.hs-augsburg.de [141.82.79.79]) by fly1.rz.hs-augsburg.de (Postfix) with ESMTPSA id 413904098C; Fri, 19 Jan 2018 16:19:54 +0100 (CET) To: Vincent Roca , IESG , secdir@ietf.org, draft-ietf-intarea-broadcast-consider.all@ietf.org References: <383EA7C8-CFF0-48AF-AD0C-840545483E94@inria.fr> <80beb32b-35fe-9a2d-e951-037a34d81a5f@hs-augsburg.de> <50006956-2D5C-49F9-8CA8-ACBEC2B266F1@inria.fr> <1A4312A1-16CA-4BC9-BDEB-FDF0E33CF1FA@inria.fr> From: Rolf Winter Message-ID: Date: Fri, 19 Jan 2018 16:20:01 +0100 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:52.0) Gecko/20100101 Thunderbird/52.5.2 MIME-Version: 1.0 In-Reply-To: <1A4312A1-16CA-4BC9-BDEB-FDF0E33CF1FA@inria.fr> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit Archived-At: Subject: Re: [secdir] Secdir review of draft-ietf-intarea-broadcast-consider-07 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 19 Jan 2018 15:20:09 -0000 Hi Vincent, we have not forgotten about this point. You say about the text that: "It suggests that because it’s difficult, it won’t be used. This is not the message the I-D should carry." The reality today is, that it is not used, even for IETF-specified protocols it is mostly not specified. We still think about a good way to phrase it without making a point about this and then having to admit that the IETF itself has failed at doing it, which would be hypocitical. Best, Rolf Am 19.01.18 um 16:10 schrieb Vincent Roca: > This is a re-review. My answer below, sent on Jan. 16th,  also applies > to version -07. > > Summary: *Almost r**eady* > > Most of my initial comments have been addressed by the authors. > > I made a few suggestions/clarifications (below), in addition to my > initial review. > > I would insist on implementing the first one, 2), beginning with: > "I’d like you extend a little the the bullet (b) of introduction: … » > > but let the authors judge what they prefer to do for the next ones. > > Regards, > >   Vincent > > > >> Le 16 janv. 2018 à 09:50, Vincent Roca > > a écrit : >> >> Hello Rolf, >> >>> thanks for the detailed review and sorry for the belated reply. We >>> have submitted a new version based on these comments and >>> recommendations. Please see inline: >> >> You’re welcome. >> >>>> 2) Another point: I'd like to see the item (b) of introduction >>>> developed as this is the key issue with multicast/broadcast traffic. >>>> Without encryption, application messages are vulnerable to >>>> eavesdropping and all kinds of analyses. A group key could be >>>> negociated and used for encrypting this traffic, but this requires a >>>> more complex setup mechanism (typically a key management system, >>>> probably with re-keying and all the stuff) and requires a preliminary >>>> association of a terminal that is not necessarily compatible with the >>>> application-layer protocol features. >>>> The text could say that if possible, multicast/broadcast traffic >>>> encryption should be used, otherwise risks should be minimised as >>>> discussed in this document. And of course, it's always good to remind >>>> the designers that unicast traffic should be always encrypted since >>>> there's no good reason not to do that. >>> >>> >>> We talk about this in the security considerations section and come to >>> the same conclusion as you do: >>> >>> "It should be noted that certain applications could make use of >>>   existing mechanisms to protect multicast traffic such as the ones >>>   defined in [RFC5374].  Examples of such applications can be found in >>>   Appendix A. of [RFC5374].  Given the required infrastructure and >>>   assumptions about these applications and the security infrastructure, >>>   many applications will not be able to make use of such mechanisms." >>> >>> In which way would you expand on this? >> >> I’d like you extend a little the the bullet (b) of introduction: >> (b) Encryption is more difficult when broadcast/multicast messages, >>         leaving content of these messages in the clear and making it >>         easier to spoof and replay them. >> It suggests that because it’s difficult, it won’t be used. This is not the >> message the I-D should carry. It’s difficult (add a reference here), sure, >> but not impossible. You can also briefly explain why it’s more >> difficult with >> multicast/broadcast. >> >> >>>> 3) I'd like to suggest another recommendation: when applicable, limit >>>> or avoid user-originated broadcast/multicast messages, preferring >>>> infrastructure originated messages. >>>> An example: in a discovery mechanism, avoid terminal sollicitation as >>>> much as possible and limit oneself to infrastructure announcement >>>> broadcast messages, even if it can include some extra delay (controled >>>> with the announcement frequency). This is exactly what happened in >>>> Wifi AP discovery, where the passive discovery scheme, AP based, is >>>> now prefered to the active scheme. >>>> Said differently, multicast/broadcast is not per se the issue, when >>>> originating from the infrastructure it is generaly safe. >>> >>> I think I disagree somewhat (and it is not a generally applicable use >>> case, e.g. if resources on a host are offered there is no general way >>> to delegate announcements of these to the infrastructure). Saying >>> that infrastructure announcements are generally safe requires that a >>> receiver can validate that a message came from the infrastructure >>> which is a problem (e.g. rogue DHCP servers). A lot of deployments >>> solve some of this through infrastructure means (e.g. DHCP snooping), >>> but we have documented that. Also, whatever comes from the >>> infrastructure requires a standard so that devices/apps understand >>> it. We have text around that, too. >> >> Let me clarify what I had in mind. A few years ago, discovery of a >> known WiFi AP >> from a device was accelerated through the use of an active mechanism, >> with the >> device sending probes to potentially detects those know WiFi APs. That was >> awful from a privacy point of view as highlighted by researchers. The >> trend was to >> move to a passive approach, relying mostly on AP announcements (in >> addition to >> MAC address randomisation). The privacy benefits while doing so are >> terrible. >> See e.g., my colleague Mathieu publication on the topic: >> https://hal.inria.fr/hal-00747825 >> This is perfectly in line with your  I-D. How privacy can be >> compromised by using >> a broadcast based protocol. >> >> Having said that, I agree with you that rogue announcements raise >> security concerns >> (but that’s true for any message sent), and it does not work for >> resources offered by >> a host. I agree, this is not a universal approach. I let you judge >> whether it makes sense >> to talk about it or not. >> >> >>>> 4) A more general comment, related to item (a) of intro: >>>> Broadcast/multicast can simplify user surveillance, I agree. However, >>>> when I'm looking at all the practicies of companies working in the >>>> advertising area (in particular A&A companies, sitting between >>>> smartphone users and advertisers, domain that I know a little bit), >>>> the techniques deployed are incredibly smart, some of them bypassing >>>> technical protections set up by the OS manufacturers, others relying >>>> on hidden technical features. It's impressive how inventive those >>>> companies can be. >>>> My point is that even if traffic is 100% unicast, as long as a >>>> wireless medium is used, anyone wanting to monitor users in order to >>>> profile them will set up the required hardware/software configuration. >>>> This is trivial and extremely cheap nowadays (except perhaps for 4G >>>> connections), and most of the time this is a purely passive >>>> monitoring. The unicast/multicast/broadcast nature of traffic has no >>>> importance as long as you are within wireless network range. >>> >>> >>> I think there is little that the IETF can do about that. Also >>> "bypassing technical protection" and using "hidden technical >>> features" is nothing you can protect against in general and I assume >>> is often not by design. >> >> I agree and I don’t want to question the importance of this I-D here. >> But it remains that wireless communications are so easy to monitor. >> >> >>>> *Various:* >>>> ** the authors use the term "host name" to refer to a higher layer >>>> name of a device. To me this term refers to the DNS notion of >>>> "hostname", i.e. something different, hence confusion. I'd recommend >>>> to use "device name" in order to avoid it. >>> >>> Well, RFC 7719 even admits the term is ill defined and does refer to >>> various things. Also, for the protocols we looked at and OS >>> configurations, sometimes there are different host namens being used >>> for different purposes. We would like to stick with host names (also >>> since RFC8117 useses the term which is highly relevant in this context). >> >> I was not aware of those RFCs. Do what you believe is the most >> appropriate. >> >> Cheers, >> >>    Vincent > From nobody Fri Jan 19 07:28:10 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AD6AD12D7E5; Fri, 19 Jan 2018 07:28:09 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.909 X-Spam-Level: X-Spam-Status: No, score=-6.909 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, T_RP_MATCHES_RCVD=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3pMDAZTHnJ2C; Fri, 19 Jan 2018 07:28:05 -0800 (PST) Received: from mail2-relais-roc.national.inria.fr (mail2-relais-roc.national.inria.fr [192.134.164.83]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CD6E1127241; Fri, 19 Jan 2018 07:28:04 -0800 (PST) X-IronPort-AV: E=Sophos;i="5.46,381,1511823600"; d="scan'208";a="309837895" Received: from dom38-1-82-236-155-50.fbx.proxad.net (HELO [192.168.1.112]) ([82.236.155.50]) by mail2-relais-roc.national.inria.fr with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 19 Jan 2018 16:28:01 +0100 Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 11.2 \(3445.5.20\)) From: Vincent Roca In-Reply-To: Date: Fri, 19 Jan 2018 16:28:00 +0100 Cc: Vincent Roca , IESG , secdir@ietf.org, draft-ietf-intarea-broadcast-consider.all@ietf.org Content-Transfer-Encoding: quoted-printable Message-Id: References: <383EA7C8-CFF0-48AF-AD0C-840545483E94@inria.fr> <80beb32b-35fe-9a2d-e951-037a34d81a5f@hs-augsburg.de> <50006956-2D5C-49F9-8CA8-ACBEC2B266F1@inria.fr> <1A4312A1-16CA-4BC9-BDEB-FDF0E33CF1FA@inria.fr> To: Rolf Winter X-Mailer: Apple Mail (2.3445.5.20) Archived-At: Subject: Re: [secdir] Secdir review of draft-ietf-intarea-broadcast-consider-07 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 19 Jan 2018 15:28:10 -0000 Hi Rolf, What about: OLD: (b) Encryption is more difficult when broadcast/multicast messages, leaving content of these messages in the clear and making it easier to spoof and replay them. NEW: (b) Encryption is difficult when broadcast/multicast messages are used, for instance because a non trivial key management protocol can be = required. When encryption is not used, the content of these messages is easily accessible, making it easier to spoof and replay them. Cheers, Vincent > Le 19 janv. 2018 =C3=A0 16:20, Rolf Winter = a =C3=A9crit : >=20 > Hi Vincent, >=20 > we have not forgotten about this point. You say about the text that: >=20 > "It suggests that because it=E2=80=99s difficult, it won=E2=80=99t be = used. This is not the message the I-D should carry." >=20 > The reality today is, that it is not used, even for IETF-specified = protocols it is mostly not specified. We still think about a good way to = phrase it without making a point about this and then having to admit = that the IETF itself has failed at doing it, which would be hypocitical. >=20 > Best, >=20 > Rolf >=20 > Am 19.01.18 um 16:10 schrieb Vincent Roca: >> This is a re-review. My answer below, sent on Jan. 16th, also = applies to version -07. >> Summary: *Almost r**eady* >> Most of my initial comments have been addressed by the authors. >> I made a few suggestions/clarifications (below), in addition to my = initial review. >> I would insist on implementing the first one, 2), beginning with: >> "I=E2=80=99d like you extend a little the the bullet (b) of = introduction: =E2=80=A6 =C2=BB >> but let the authors judge what they prefer to do for the next ones. >> Regards, >> Vincent >>> Le 16 janv. 2018 =C3=A0 09:50, Vincent Roca > a =C3=A9crit : >>>=20 >>> Hello Rolf, >>>=20 >>>> thanks for the detailed review and sorry for the belated reply. We = have submitted a new version based on these comments and = recommendations. Please see inline: >>>=20 >>> You=E2=80=99re welcome. >>>=20 >>>>> 2) Another point: I'd like to see the item (b) of introduction >>>>> developed as this is the key issue with multicast/broadcast = traffic. >>>>> Without encryption, application messages are vulnerable to >>>>> eavesdropping and all kinds of analyses. A group key could be >>>>> negociated and used for encrypting this traffic, but this requires = a >>>>> more complex setup mechanism (typically a key management system, >>>>> probably with re-keying and all the stuff) and requires a = preliminary >>>>> association of a terminal that is not necessarily compatible with = the >>>>> application-layer protocol features. >>>>> The text could say that if possible, multicast/broadcast traffic >>>>> encryption should be used, otherwise risks should be minimised as >>>>> discussed in this document. And of course, it's always good to = remind >>>>> the designers that unicast traffic should be always encrypted = since >>>>> there's no good reason not to do that. >>>>=20 >>>>=20 >>>> We talk about this in the security considerations section and come = to the same conclusion as you do: >>>>=20 >>>> "It should be noted that certain applications could make use of >>>> existing mechanisms to protect multicast traffic such as the ones >>>> defined in [RFC5374]. Examples of such applications can be found = in >>>> Appendix A. of [RFC5374]. Given the required infrastructure and >>>> assumptions about these applications and the security = infrastructure, >>>> many applications will not be able to make use of such = mechanisms." >>>>=20 >>>> In which way would you expand on this? >>>=20 >>> I=E2=80=99d like you extend a little the the bullet (b) of = introduction: >>> (b) Encryption is more difficult when broadcast/multicast messages, >>> leaving content of these messages in the clear and making it >>> easier to spoof and replay them. >>> It suggests that because it=E2=80=99s difficult, it won=E2=80=99t be = used. This is not the >>> message the I-D should carry. It=E2=80=99s difficult (add a = reference here), sure, >>> but not impossible. You can also briefly explain why it=E2=80=99s = more difficult with >>> multicast/broadcast. >>>=20 >>>=20 >>>>> 3) I'd like to suggest another recommendation: when applicable, = limit >>>>> or avoid user-originated broadcast/multicast messages, preferring >>>>> infrastructure originated messages. >>>>> An example: in a discovery mechanism, avoid terminal sollicitation = as >>>>> much as possible and limit oneself to infrastructure announcement >>>>> broadcast messages, even if it can include some extra delay = (controled >>>>> with the announcement frequency). This is exactly what happened in >>>>> Wifi AP discovery, where the passive discovery scheme, AP based, = is >>>>> now prefered to the active scheme. >>>>> Said differently, multicast/broadcast is not per se the issue, = when >>>>> originating from the infrastructure it is generaly safe. >>>>=20 >>>> I think I disagree somewhat (and it is not a generally applicable = use case, e.g. if resources on a host are offered there is no general = way to delegate announcements of these to the infrastructure). Saying = that infrastructure announcements are generally safe requires that a = receiver can validate that a message came from the infrastructure which = is a problem (e.g. rogue DHCP servers). A lot of deployments solve some = of this through infrastructure means (e.g. DHCP snooping), but we have = documented that. Also, whatever comes from the infrastructure requires a = standard so that devices/apps understand it. We have text around that, = too. >>>=20 >>> Let me clarify what I had in mind. A few years ago, discovery of a = known WiFi AP >>> from a device was accelerated through the use of an active = mechanism, with the >>> device sending probes to potentially detects those know WiFi APs. = That was >>> awful from a privacy point of view as highlighted by researchers. = The trend was to >>> move to a passive approach, relying mostly on AP announcements (in = addition to >>> MAC address randomisation). The privacy benefits while doing so are = terrible. >>> See e.g., my colleague Mathieu publication on the topic: = https://hal.inria.fr/hal-00747825 >>> This is perfectly in line with your I-D. How privacy can be = compromised by using >>> a broadcast based protocol. >>>=20 >>> Having said that, I agree with you that rogue announcements raise = security concerns >>> (but that=E2=80=99s true for any message sent), and it does not work = for resources offered by >>> a host. I agree, this is not a universal approach. I let you judge = whether it makes sense >>> to talk about it or not. >>>=20 >>>=20 >>>>> 4) A more general comment, related to item (a) of intro: >>>>> Broadcast/multicast can simplify user surveillance, I agree. = However, >>>>> when I'm looking at all the practicies of companies working in the >>>>> advertising area (in particular A&A companies, sitting between >>>>> smartphone users and advertisers, domain that I know a little = bit), >>>>> the techniques deployed are incredibly smart, some of them = bypassing >>>>> technical protections set up by the OS manufacturers, others = relying >>>>> on hidden technical features. It's impressive how inventive those >>>>> companies can be. >>>>> My point is that even if traffic is 100% unicast, as long as a >>>>> wireless medium is used, anyone wanting to monitor users in order = to >>>>> profile them will set up the required hardware/software = configuration. >>>>> This is trivial and extremely cheap nowadays (except perhaps for = 4G >>>>> connections), and most of the time this is a purely passive >>>>> monitoring. The unicast/multicast/broadcast nature of traffic has = no >>>>> importance as long as you are within wireless network range. >>>>=20 >>>>=20 >>>> I think there is little that the IETF can do about that. Also = "bypassing technical protection" and using "hidden technical features" = is nothing you can protect against in general and I assume is often not = by design. >>>=20 >>> I agree and I don=E2=80=99t want to question the importance of this = I-D here. >>> But it remains that wireless communications are so easy to monitor. >>>=20 >>>=20 >>>>> *Various:* >>>>> ** the authors use the term "host name" to refer to a higher layer >>>>> name of a device. To me this term refers to the DNS notion of >>>>> "hostname", i.e. something different, hence confusion. I'd = recommend >>>>> to use "device name" in order to avoid it. >>>>=20 >>>> Well, RFC 7719 even admits the term is ill defined and does refer = to various things. Also, for the protocols we looked at and OS = configurations, sometimes there are different host namens being used for = different purposes. We would like to stick with host names (also since = RFC8117 useses the term which is highly relevant in this context). >>>=20 >>> I was not aware of those RFCs. Do what you believe is the most = appropriate. >>>=20 >>> Cheers, >>>=20 >>> Vincent From nobody Fri Jan 19 07:38:07 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D0B3112D95E; Fri, 19 Jan 2018 07:38:05 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.13 X-Spam-Level: X-Spam-Status: No, score=-1.13 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_NEUTRAL=0.779, T_RP_MATCHES_RCVD=-0.01, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SyzA49N4ursh; Fri, 19 Jan 2018 07:38:03 -0800 (PST) Received: from fly1.rz.hs-augsburg.de (fly1.RZ.HS-Augsburg.DE [IPv6:2001:638:102:201::11:25]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AF58A12D96A; Fri, 19 Jan 2018 07:38:01 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by fly1.rz.hs-augsburg.de (Postfix) with ESMTP id 41BCD40CB1; Fri, 19 Jan 2018 16:37:52 +0100 (CET) X-Virus-Scanned: Debian amavisd-new at hs-augsburg.de Received: from fly1.rz.hs-augsburg.de ([127.0.0.1]) by localhost (fly1.rz.hs-augsburg.de [127.0.0.1]) (amavisd-new, port 10024) with LMTP id dUr8AkbKzzAG; Fri, 19 Jan 2018 16:37:51 +0100 (CET) Received: from [192.168.1.148] (nightswatch.informatik.hs-augsburg.de [141.82.79.79]) by fly1.rz.hs-augsburg.de (Postfix) with ESMTPSA id 4CE0E4098C; Fri, 19 Jan 2018 16:37:51 +0100 (CET) To: Vincent Roca Cc: IESG , secdir@ietf.org, draft-ietf-intarea-broadcast-consider.all@ietf.org References: <383EA7C8-CFF0-48AF-AD0C-840545483E94@inria.fr> <80beb32b-35fe-9a2d-e951-037a34d81a5f@hs-augsburg.de> <50006956-2D5C-49F9-8CA8-ACBEC2B266F1@inria.fr> <1A4312A1-16CA-4BC9-BDEB-FDF0E33CF1FA@inria.fr> From: Rolf Winter Message-ID: <4bcd8cb8-30ea-13df-c7cc-d98e916c62cd@hs-augsburg.de> Date: Fri, 19 Jan 2018 16:37:58 +0100 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:52.0) Gecko/20100101 Thunderbird/52.5.2 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit Archived-At: Subject: Re: [secdir] Secdir review of draft-ietf-intarea-broadcast-consider-07 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 19 Jan 2018 15:38:06 -0000 Ahh, I though you wanted more than that. A new version with that text suggestion has just been upload. Thanks again, Rolf Am 19.01.18 um 16:28 schrieb Vincent Roca: > Hi Rolf, > > What about: > > OLD: > > (b) Encryption is more difficult when broadcast/multicast messages, > leaving content of these messages in the clear and making it > easier to spoof and replay them. > > NEW: > > (b) Encryption is difficult when broadcast/multicast messages are used, > for instance because a non trivial key management protocol can be required. > When encryption is not used, the content of these messages is easily > accessible, making it easier to spoof and replay them. > > > Cheers, > > Vincent > > >> Le 19 janv. 2018 à 16:20, Rolf Winter a écrit : >> >> Hi Vincent, >> >> we have not forgotten about this point. You say about the text that: >> >> "It suggests that because it’s difficult, it won’t be used. This is not the message the I-D should carry." >> >> The reality today is, that it is not used, even for IETF-specified protocols it is mostly not specified. We still think about a good way to phrase it without making a point about this and then having to admit that the IETF itself has failed at doing it, which would be hypocitical. >> >> Best, >> >> Rolf >> >> Am 19.01.18 um 16:10 schrieb Vincent Roca: >>> This is a re-review. My answer below, sent on Jan. 16th, also applies to version -07. >>> Summary: *Almost r**eady* >>> Most of my initial comments have been addressed by the authors. >>> I made a few suggestions/clarifications (below), in addition to my initial review. >>> I would insist on implementing the first one, 2), beginning with: >>> "I’d like you extend a little the the bullet (b) of introduction: … » >>> but let the authors judge what they prefer to do for the next ones. >>> Regards, >>> Vincent >>>> Le 16 janv. 2018 à 09:50, Vincent Roca > a écrit : >>>> >>>> Hello Rolf, >>>> >>>>> thanks for the detailed review and sorry for the belated reply. We have submitted a new version based on these comments and recommendations. Please see inline: >>>> >>>> You’re welcome. >>>> >>>>>> 2) Another point: I'd like to see the item (b) of introduction >>>>>> developed as this is the key issue with multicast/broadcast traffic. >>>>>> Without encryption, application messages are vulnerable to >>>>>> eavesdropping and all kinds of analyses. A group key could be >>>>>> negociated and used for encrypting this traffic, but this requires a >>>>>> more complex setup mechanism (typically a key management system, >>>>>> probably with re-keying and all the stuff) and requires a preliminary >>>>>> association of a terminal that is not necessarily compatible with the >>>>>> application-layer protocol features. >>>>>> The text could say that if possible, multicast/broadcast traffic >>>>>> encryption should be used, otherwise risks should be minimised as >>>>>> discussed in this document. And of course, it's always good to remind >>>>>> the designers that unicast traffic should be always encrypted since >>>>>> there's no good reason not to do that. >>>>> >>>>> >>>>> We talk about this in the security considerations section and come to the same conclusion as you do: >>>>> >>>>> "It should be noted that certain applications could make use of >>>>> existing mechanisms to protect multicast traffic such as the ones >>>>> defined in [RFC5374]. Examples of such applications can be found in >>>>> Appendix A. of [RFC5374]. Given the required infrastructure and >>>>> assumptions about these applications and the security infrastructure, >>>>> many applications will not be able to make use of such mechanisms." >>>>> >>>>> In which way would you expand on this? >>>> >>>> I’d like you extend a little the the bullet (b) of introduction: >>>> (b) Encryption is more difficult when broadcast/multicast messages, >>>> leaving content of these messages in the clear and making it >>>> easier to spoof and replay them. >>>> It suggests that because it’s difficult, it won’t be used. This is not the >>>> message the I-D should carry. It’s difficult (add a reference here), sure, >>>> but not impossible. You can also briefly explain why it’s more difficult with >>>> multicast/broadcast. >>>> >>>> >>>>>> 3) I'd like to suggest another recommendation: when applicable, limit >>>>>> or avoid user-originated broadcast/multicast messages, preferring >>>>>> infrastructure originated messages. >>>>>> An example: in a discovery mechanism, avoid terminal sollicitation as >>>>>> much as possible and limit oneself to infrastructure announcement >>>>>> broadcast messages, even if it can include some extra delay (controled >>>>>> with the announcement frequency). This is exactly what happened in >>>>>> Wifi AP discovery, where the passive discovery scheme, AP based, is >>>>>> now prefered to the active scheme. >>>>>> Said differently, multicast/broadcast is not per se the issue, when >>>>>> originating from the infrastructure it is generaly safe. >>>>> >>>>> I think I disagree somewhat (and it is not a generally applicable use case, e.g. if resources on a host are offered there is no general way to delegate announcements of these to the infrastructure). Saying that infrastructure announcements are generally safe requires that a receiver can validate that a message came from the infrastructure which is a problem (e.g. rogue DHCP servers). A lot of deployments solve some of this through infrastructure means (e.g. DHCP snooping), but we have documented that. Also, whatever comes from the infrastructure requires a standard so that devices/apps understand it. We have text around that, too. >>>> >>>> Let me clarify what I had in mind. A few years ago, discovery of a known WiFi AP >>>> from a device was accelerated through the use of an active mechanism, with the >>>> device sending probes to potentially detects those know WiFi APs. That was >>>> awful from a privacy point of view as highlighted by researchers. The trend was to >>>> move to a passive approach, relying mostly on AP announcements (in addition to >>>> MAC address randomisation). The privacy benefits while doing so are terrible. >>>> See e.g., my colleague Mathieu publication on the topic: https://hal.inria.fr/hal-00747825 >>>> This is perfectly in line with your I-D. How privacy can be compromised by using >>>> a broadcast based protocol. >>>> >>>> Having said that, I agree with you that rogue announcements raise security concerns >>>> (but that’s true for any message sent), and it does not work for resources offered by >>>> a host. I agree, this is not a universal approach. I let you judge whether it makes sense >>>> to talk about it or not. >>>> >>>> >>>>>> 4) A more general comment, related to item (a) of intro: >>>>>> Broadcast/multicast can simplify user surveillance, I agree. However, >>>>>> when I'm looking at all the practicies of companies working in the >>>>>> advertising area (in particular A&A companies, sitting between >>>>>> smartphone users and advertisers, domain that I know a little bit), >>>>>> the techniques deployed are incredibly smart, some of them bypassing >>>>>> technical protections set up by the OS manufacturers, others relying >>>>>> on hidden technical features. It's impressive how inventive those >>>>>> companies can be. >>>>>> My point is that even if traffic is 100% unicast, as long as a >>>>>> wireless medium is used, anyone wanting to monitor users in order to >>>>>> profile them will set up the required hardware/software configuration. >>>>>> This is trivial and extremely cheap nowadays (except perhaps for 4G >>>>>> connections), and most of the time this is a purely passive >>>>>> monitoring. The unicast/multicast/broadcast nature of traffic has no >>>>>> importance as long as you are within wireless network range. >>>>> >>>>> >>>>> I think there is little that the IETF can do about that. Also "bypassing technical protection" and using "hidden technical features" is nothing you can protect against in general and I assume is often not by design. >>>> >>>> I agree and I don’t want to question the importance of this I-D here. >>>> But it remains that wireless communications are so easy to monitor. >>>> >>>> >>>>>> *Various:* >>>>>> ** the authors use the term "host name" to refer to a higher layer >>>>>> name of a device. To me this term refers to the DNS notion of >>>>>> "hostname", i.e. something different, hence confusion. I'd recommend >>>>>> to use "device name" in order to avoid it. >>>>> >>>>> Well, RFC 7719 even admits the term is ill defined and does refer to various things. Also, for the protocols we looked at and OS configurations, sometimes there are different host namens being used for different purposes. We would like to stick with host names (also since RFC8117 useses the term which is highly relevant in this context). >>>> >>>> I was not aware of those RFCs. Do what you believe is the most appropriate. >>>> >>>> Cheers, >>>> >>>> Vincent > From nobody Fri Jan 19 07:44:36 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8A25312700F; Fri, 19 Jan 2018 07:44:30 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.909 X-Spam-Level: X-Spam-Status: No, score=-6.909 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, T_RP_MATCHES_RCVD=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qPCQuG0OAZEp; Fri, 19 Jan 2018 07:44:28 -0800 (PST) Received: from mail2-relais-roc.national.inria.fr (mail2-relais-roc.national.inria.fr [192.134.164.83]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D126A126E3A; Fri, 19 Jan 2018 07:44:27 -0800 (PST) X-IronPort-AV: E=Sophos;i="5.46,381,1511823600"; d="scan'208";a="309841195" Received: from dom38-1-82-236-155-50.fbx.proxad.net (HELO [192.168.1.112]) ([82.236.155.50]) by mail2-relais-roc.national.inria.fr with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 19 Jan 2018 16:44:25 +0100 Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 11.2 \(3445.5.20\)) From: Vincent Roca In-Reply-To: <4bcd8cb8-30ea-13df-c7cc-d98e916c62cd@hs-augsburg.de> Date: Fri, 19 Jan 2018 16:44:24 +0100 Cc: Vincent Roca , IESG , secdir@ietf.org, draft-ietf-intarea-broadcast-consider.all@ietf.org Content-Transfer-Encoding: quoted-printable Message-Id: <6E03AFCA-0A24-4405-96B6-2DCE79380234@inria.fr> References: <383EA7C8-CFF0-48AF-AD0C-840545483E94@inria.fr> <80beb32b-35fe-9a2d-e951-037a34d81a5f@hs-augsburg.de> <50006956-2D5C-49F9-8CA8-ACBEC2B266F1@inria.fr> <1A4312A1-16CA-4BC9-BDEB-FDF0E33CF1FA@inria.fr> <4bcd8cb8-30ea-13df-c7cc-d98e916c62cd@hs-augsburg.de> To: Rolf Winter X-Mailer: Apple Mail (2.3445.5.20) Archived-At: Subject: Re: [secdir] Secdir review of draft-ietf-intarea-broadcast-consider-07 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 19 Jan 2018 15:44:30 -0000 Thanks Rolf. Version -08 answers my main comments then. Cheers, Vincent > Le 19 janv. 2018 =C3=A0 16:37, Rolf Winter = a =C3=A9crit : >=20 > Ahh, I though you wanted more than that. A new version with that text = suggestion has just been upload. >=20 > Thanks again, >=20 > Rolf >=20 > Am 19.01.18 um 16:28 schrieb Vincent Roca: >> Hi Rolf, >> What about: >> OLD: >> (b) Encryption is more difficult when broadcast/multicast messages, >> leaving content of these messages in the clear and making it >> easier to spoof and replay them. >> NEW: >> (b) Encryption is difficult when broadcast/multicast messages are = used, >> for instance because a non trivial key management protocol can be = required. >> When encryption is not used, the content of these messages is easily >> accessible, making it easier to spoof and replay them. >> Cheers, >> Vincent >>> Le 19 janv. 2018 =C3=A0 16:20, Rolf Winter = a =C3=A9crit : >>>=20 >>> Hi Vincent, >>>=20 >>> we have not forgotten about this point. You say about the text that: >>>=20 >>> "It suggests that because it=E2=80=99s difficult, it won=E2=80=99t = be used. This is not the message the I-D should carry." >>>=20 >>> The reality today is, that it is not used, even for IETF-specified = protocols it is mostly not specified. We still think about a good way to = phrase it without making a point about this and then having to admit = that the IETF itself has failed at doing it, which would be hypocitical. >>>=20 >>> Best, >>>=20 >>> Rolf >>>=20 >>> Am 19.01.18 um 16:10 schrieb Vincent Roca: >>>> This is a re-review. My answer below, sent on Jan. 16th, also = applies to version -07. >>>> Summary: *Almost r**eady* >>>> Most of my initial comments have been addressed by the authors. >>>> I made a few suggestions/clarifications (below), in addition to my = initial review. >>>> I would insist on implementing the first one, 2), beginning with: >>>> "I=E2=80=99d like you extend a little the the bullet (b) of = introduction: =E2=80=A6 =C2=BB >>>> but let the authors judge what they prefer to do for the next ones. >>>> Regards, >>>> Vincent >>>>> Le 16 janv. 2018 =C3=A0 09:50, Vincent Roca > a =C3=A9crit : >>>>>=20 >>>>> Hello Rolf, >>>>>=20 >>>>>> thanks for the detailed review and sorry for the belated reply. = We have submitted a new version based on these comments and = recommendations. Please see inline: >>>>>=20 >>>>> You=E2=80=99re welcome. >>>>>=20 >>>>>>> 2) Another point: I'd like to see the item (b) of introduction >>>>>>> developed as this is the key issue with multicast/broadcast = traffic. >>>>>>> Without encryption, application messages are vulnerable to >>>>>>> eavesdropping and all kinds of analyses. A group key could be >>>>>>> negociated and used for encrypting this traffic, but this = requires a >>>>>>> more complex setup mechanism (typically a key management system, >>>>>>> probably with re-keying and all the stuff) and requires a = preliminary >>>>>>> association of a terminal that is not necessarily compatible = with the >>>>>>> application-layer protocol features. >>>>>>> The text could say that if possible, multicast/broadcast traffic >>>>>>> encryption should be used, otherwise risks should be minimised = as >>>>>>> discussed in this document. And of course, it's always good to = remind >>>>>>> the designers that unicast traffic should be always encrypted = since >>>>>>> there's no good reason not to do that. >>>>>>=20 >>>>>>=20 >>>>>> We talk about this in the security considerations section and = come to the same conclusion as you do: >>>>>>=20 >>>>>> "It should be noted that certain applications could make use of >>>>>> existing mechanisms to protect multicast traffic such as the = ones >>>>>> defined in [RFC5374]. Examples of such applications can be = found in >>>>>> Appendix A. of [RFC5374]. Given the required infrastructure = and >>>>>> assumptions about these applications and the security = infrastructure, >>>>>> many applications will not be able to make use of such = mechanisms." >>>>>>=20 >>>>>> In which way would you expand on this? >>>>>=20 >>>>> I=E2=80=99d like you extend a little the the bullet (b) of = introduction: >>>>> (b) Encryption is more difficult when broadcast/multicast = messages, >>>>> leaving content of these messages in the clear and making = it >>>>> easier to spoof and replay them. >>>>> It suggests that because it=E2=80=99s difficult, it won=E2=80=99t = be used. This is not the >>>>> message the I-D should carry. It=E2=80=99s difficult (add a = reference here), sure, >>>>> but not impossible. You can also briefly explain why it=E2=80=99s = more difficult with >>>>> multicast/broadcast. >>>>>=20 >>>>>=20 >>>>>>> 3) I'd like to suggest another recommendation: when applicable, = limit >>>>>>> or avoid user-originated broadcast/multicast messages, = preferring >>>>>>> infrastructure originated messages. >>>>>>> An example: in a discovery mechanism, avoid terminal = sollicitation as >>>>>>> much as possible and limit oneself to infrastructure = announcement >>>>>>> broadcast messages, even if it can include some extra delay = (controled >>>>>>> with the announcement frequency). This is exactly what happened = in >>>>>>> Wifi AP discovery, where the passive discovery scheme, AP based, = is >>>>>>> now prefered to the active scheme. >>>>>>> Said differently, multicast/broadcast is not per se the issue, = when >>>>>>> originating from the infrastructure it is generaly safe. >>>>>>=20 >>>>>> I think I disagree somewhat (and it is not a generally applicable = use case, e.g. if resources on a host are offered there is no general = way to delegate announcements of these to the infrastructure). Saying = that infrastructure announcements are generally safe requires that a = receiver can validate that a message came from the infrastructure which = is a problem (e.g. rogue DHCP servers). A lot of deployments solve some = of this through infrastructure means (e.g. DHCP snooping), but we have = documented that. Also, whatever comes from the infrastructure requires a = standard so that devices/apps understand it. We have text around that, = too. >>>>>=20 >>>>> Let me clarify what I had in mind. A few years ago, discovery of a = known WiFi AP >>>>> from a device was accelerated through the use of an active = mechanism, with the >>>>> device sending probes to potentially detects those know WiFi APs. = That was >>>>> awful from a privacy point of view as highlighted by researchers. = The trend was to >>>>> move to a passive approach, relying mostly on AP announcements (in = addition to >>>>> MAC address randomisation). The privacy benefits while doing so = are terrible. >>>>> See e.g., my colleague Mathieu publication on the topic: = https://hal.inria.fr/hal-00747825 >>>>> This is perfectly in line with your I-D. How privacy can be = compromised by using >>>>> a broadcast based protocol. >>>>>=20 >>>>> Having said that, I agree with you that rogue announcements raise = security concerns >>>>> (but that=E2=80=99s true for any message sent), and it does not = work for resources offered by >>>>> a host. I agree, this is not a universal approach. I let you judge = whether it makes sense >>>>> to talk about it or not. >>>>>=20 >>>>>=20 >>>>>>> 4) A more general comment, related to item (a) of intro: >>>>>>> Broadcast/multicast can simplify user surveillance, I agree. = However, >>>>>>> when I'm looking at all the practicies of companies working in = the >>>>>>> advertising area (in particular A&A companies, sitting between >>>>>>> smartphone users and advertisers, domain that I know a little = bit), >>>>>>> the techniques deployed are incredibly smart, some of them = bypassing >>>>>>> technical protections set up by the OS manufacturers, others = relying >>>>>>> on hidden technical features. It's impressive how inventive = those >>>>>>> companies can be. >>>>>>> My point is that even if traffic is 100% unicast, as long as a >>>>>>> wireless medium is used, anyone wanting to monitor users in = order to >>>>>>> profile them will set up the required hardware/software = configuration. >>>>>>> This is trivial and extremely cheap nowadays (except perhaps for = 4G >>>>>>> connections), and most of the time this is a purely passive >>>>>>> monitoring. The unicast/multicast/broadcast nature of traffic = has no >>>>>>> importance as long as you are within wireless network range. >>>>>>=20 >>>>>>=20 >>>>>> I think there is little that the IETF can do about that. Also = "bypassing technical protection" and using "hidden technical features" = is nothing you can protect against in general and I assume is often not = by design. >>>>>=20 >>>>> I agree and I don=E2=80=99t want to question the importance of = this I-D here. >>>>> But it remains that wireless communications are so easy to = monitor. >>>>>=20 >>>>>=20 >>>>>>> *Various:* >>>>>>> ** the authors use the term "host name" to refer to a higher = layer >>>>>>> name of a device. To me this term refers to the DNS notion of >>>>>>> "hostname", i.e. something different, hence confusion. I'd = recommend >>>>>>> to use "device name" in order to avoid it. >>>>>>=20 >>>>>> Well, RFC 7719 even admits the term is ill defined and does refer = to various things. Also, for the protocols we looked at and OS = configurations, sometimes there are different host namens being used for = different purposes. We would like to stick with host names (also since = RFC8117 useses the term which is highly relevant in this context). >>>>>=20 >>>>> I was not aware of those RFCs. Do what you believe is the most = appropriate. >>>>>=20 >>>>> Cheers, >>>>>=20 >>>>> Vincent From nobody Mon Jan 22 09:25:33 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EE71C12702E for ; Mon, 22 Jan 2018 09:25:31 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=krose.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yI2KRZY8RE-9 for ; Mon, 22 Jan 2018 09:25:30 -0800 (PST) Received: from mail-qt0-x229.google.com (mail-qt0-x229.google.com [IPv6:2607:f8b0:400d:c0d::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4466E120727 for ; Mon, 22 Jan 2018 09:25:19 -0800 (PST) Received: by mail-qt0-x229.google.com with SMTP id i1so22720968qtj.8 for ; Mon, 22 Jan 2018 09:25:19 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=krose.org; s=google; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=xTf4lMnM36u0Vv6aHQd375B3DmYVryQPlnvikl+PCag=; b=WBVkNbafW8O442eCrTLpQXan9UGLYO4UTud0CMsnDgnOE7efe2SJAKkrT2Dy/NV1AL uDRwR7EwcaohURsLIl6c8GMVowX46BoeNAL0yHxSjQCJo8Oxj2tifwKfB41QmwYRKhUE dukeEOOrT9ANRO8urQtumJg7Z+FKirDBSrwGI= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=xTf4lMnM36u0Vv6aHQd375B3DmYVryQPlnvikl+PCag=; b=pzFHmMp2hfvpNIs5wUoQwUIBzoei342eIaPL9hnJLdHyvxC5y88xyFoIEwhYNrtN3r bObRdn5KzCIW9FVw4T7tKc3RHYK+lXzIG8qbMX5bYXzfSLtBzzKAfCI+qBtK8ilzwnW3 ClyIewaod608r6K76pKKJrPX37swX+KSLCKX05flq/ozhduLc9rOlHF3mpd+HO3GHF4A GgKDItelM+jp49QbMQPIEg4JtIdTy8ZukuHqVomyUUwOOnIBAUkd9PEfx9GgcUiTRHlk tfVPIT8VwyBGA0Ti81i0jfa/VqyP7/ohj4jemrqpBMiXNx7pNVy9nL6aij9XDrhmMzHk UDHw== X-Gm-Message-State: AKwxytf0QYZ+EoK7QsfU2XInlBfmVupA2JItTGSwRC5OYOYQOy6DI1Ga 4rzcIM6xWN7RbZ1UktqA41irGD/4CiMrPQAK6qSJ7g== X-Google-Smtp-Source: AH8x2256iFcTZNmkWtYLkDrx2LvyXhpi6Stlqdfz7ZSjSv22IPyR/v2ccIU4/K6Rnja5kgMXM08rYsedBGafgEAKGkY= X-Received: by 10.237.36.103 with SMTP id s36mr11595401qtc.148.1516641918165; Mon, 22 Jan 2018 09:25:18 -0800 (PST) MIME-Version: 1.0 Received: by 10.12.213.247 with HTTP; Mon, 22 Jan 2018 09:25:17 -0800 (PST) X-Originating-IP: [2001:4878:a000:3000:208e:f325:623b:dbab] In-Reply-To: References: From: Kyle Rose Date: Mon, 22 Jan 2018 12:25:17 -0500 Message-ID: To: "Bernie Volz (volz)" Cc: The IESG , "secdir@ietf.org" , "draft-ietf-dhc-rfc3315bis.all@ietf.org" Content-Type: multipart/alternative; boundary="001a1145ea1cc8d3d3056360b6aa" Archived-At: Subject: Re: [secdir] Secdir last call review of draft-ietf-dhc-rfc3315bis-10 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 22 Jan 2018 17:25:32 -0000 --001a1145ea1cc8d3d3056360b6aa Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Fri, Jan 19, 2018 at 9:53 AM, Bernie Volz (volz) wrote: > On behalf of the authors of draft-ietf-dhc-rfc3315bis, thanks much for th= e > very thorough review (this email and your other email with the nits =E2= =80=93 most > of those nits look appropriate to apply). > My pleasure. I hope the feedback was helpful. > Regarding the HMAC-MD5 issue: That was what RFC 3315 specified. Also, the > AUTH Option (except for use by RKAP) is being deprecated. For RKAP, there > is also a flaw as there is no means for the client to indicate the > algorithms it supports and the server generates this key =E2=80=93 so wha= t it uses > must be supported by the client for it to work. Therefore, simply changin= g > algorithms is not very really possible (likely it would require a NEW > option to have the client communicate which algorithm(s) it supports). > > Understood. I personally feel that this is not a problem, for three reasons= : (1) It's documentation of an existing practice, not a new use of MD5. (2) AFAIK HMAC-MD5 has not actually been broken. (3) The protected resource's attack surface has much weaker points in the real world than attacking the crypto. That said, I raised it because normatively specifying MD5 in a standard may not be appropriate for a standard published in 2018. However, going back through the text right now, it appears to already be worded less as a normative specification than as an informational description of "this is how you interoperate with existing deployments", which I think is entirely appropriate for a proposed standard with legacy components. It may still be worthwhile to separately pursue a replacement for RKAP that incorporates algorithmic agility. Kyle --001a1145ea1cc8d3d3056360b6aa Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
On F= ri, Jan 19, 2018 at 9:53 AM, Bernie Volz (volz) <volz@cisco.com> wrote:
On behalf = of the authors of draft-ietf-dhc-rfc3315bis, thanks much for the very thoro= ugh review (this email and your other email with the nits =E2=80=93 most of= those nits look appropriate to apply).

<= /div>
My pleasure. I hope the feedback was helpful.
=C2= =A0

Regarding the HMAC-MD5 issue: That wa= s what RFC 3315 specified. Also, the AUTH Option (except for use by RKAP) i= s being deprecated. For RKAP, there is also a flaw as there is no means for the client to indicate the algorithms it sup= ports and the server generates this key =E2=80=93 so what it uses must be s= upported by the client for it to work. Therefore, simply changing algorithm= s is not very really possible (likely it would require a NEW option to have the client communicate which algorithm(= s) it supports).

<= div>=C2=A0
Understood. I personally feel that this is not a probl= em, for three reasons:

(1) It's documentation = of an existing practice, not a new use of MD5.
(2) AFAIK HMAC= -MD5 has not actually been broken.
(3) The protected resource'= ;s attack surface has much weaker points in the real world than attacking t= he crypto.

That said, I raised it because normativ= ely specifying MD5 in a standard may not be appropriate for a standard publ= ished in 2018. However, going back through the text right now, it appears t= o already be worded less as a normative specification than as an informatio= nal description of "this is how you interoperate with existing deploym= ents", which I think is entirely appropriate for a proposed standard w= ith legacy components.

It may still be worthwhile = to separately pursue a replacement for RKAP that incorporates algorithmic a= gility.

Kyle

--001a1145ea1cc8d3d3056360b6aa-- From nobody Mon Jan 22 11:01:13 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D75BD12AF6E for ; Mon, 22 Jan 2018 11:01:12 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=redhoundsoftware.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id O7jTYOZijZfJ for ; Mon, 22 Jan 2018 11:01:03 -0800 (PST) Received: from mail-qt0-x232.google.com (mail-qt0-x232.google.com [IPv6:2607:f8b0:400d:c0d::232]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B9B9D129C56 for ; Mon, 22 Jan 2018 11:01:02 -0800 (PST) Received: by mail-qt0-x232.google.com with SMTP id x27so23514829qtm.12 for ; Mon, 22 Jan 2018 11:01:02 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhoundsoftware.com; s=google; h=user-agent:date:subject:from:to:cc:message-id:thread-topic :mime-version:content-transfer-encoding; bh=9AA/MfyfpFgCYire9qRoFP2IqpluyldncvtEYAElV3k=; b=ZRPM2A3DS2m3q/M4YVU8hVQhl4VEOc6qIPrYnhOvNy6APx+JRCxi7EdF5RYsONP3aG GV3zkiXt05zUM6Ivr4x/fkGQUBQ3q+/dV+6EVF3fAF4jCUfnAH3aA85JLAYjEHBe2EU9 ioSRAb0AMPAvxNgtEP938oWS75sL+G0XbMI/A= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:user-agent:date:subject:from:to:cc:message-id :thread-topic:mime-version:content-transfer-encoding; bh=9AA/MfyfpFgCYire9qRoFP2IqpluyldncvtEYAElV3k=; b=HMSvLnl9iv5lDkqcK6wtg2FZgq+V5dvUaZ/kjl9XJ3AX1WTHqZadusCRpFUmvkdecK xP+rceuQawJRzllQgE2TgB5GRewMU/ONb4ZZctGD/5KGy75dzAzecul8DkypeZBdGIIF wE7WyT9YvOnPvMwzgBp+mEL8HnSJFeCTv2nkAQ6UMOu/YmPsuxXTIYtTIltk1O7MILsE odLtCsWU5P9Sqv9p63v414Jb26a8yjckeIm5GNpKvgQjcXrLlNz6ZUG3glj2s/LsCEa+ gei64ncJa/+VKMWPJ7lKAnD1CI/5iXNbMxyBQ+g7SvjDWsGvrvkxQy1Qs1hzwOaAlT0/ fhug== X-Gm-Message-State: AKwxytdZqxe0OLANlqzXzHENdUPrFpI80/S5Vege8OK1pCGLzedyyMK5 dIA6T8OjOJGGxrAS7tePhQsRJw== X-Google-Smtp-Source: AH8x227knu9IRQvl5LssoTURdsc7rm+HSnyfPIQdrxXJo68v3fWyGa0IQbtpG64mz3oIOcA6D8v4IQ== X-Received: by 10.55.204.18 with SMTP id r18mr11327476qki.212.1516647661419; Mon, 22 Jan 2018 11:01:01 -0800 (PST) Received: from [10.44.104.35] ([64.94.31.206]) by smtp.googlemail.com with ESMTPSA id k3sm10667270qtj.40.2018.01.22.11.00.56 (version=TLS1 cipher=AES128-SHA bits=128/128); Mon, 22 Jan 2018 11:01:00 -0800 (PST) User-Agent: Microsoft-MacOutlook/14.7.6.170621 Date: Mon, 22 Jan 2018 14:00:49 -0500 From: Carl Wallace To: CC: , Message-ID: Thread-Topic: secdir review of draft-ietf-netmod-rfc8022bis Mime-version: 1.0 Content-type: text/plain; charset="UTF-8" Content-transfer-encoding: 7bit Archived-At: Subject: [secdir] secdir review of draft-ietf-netmod-rfc8022bis X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 22 Jan 2018 19:01:13 -0000 I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just like any other last call comments. I found no issues with the draft. The security considerations section references NETCONF and RESTCONF for network security, with SSH and TLS used. This seems fine but I wonder if some guidance on using these a la RFC6125 would be helpful for some. One question in the security consideration section. Twice "/routing/ribs/rib" is referred to a list. Should this be "/routing/ribs"? From nobody Mon Jan 22 12:02:16 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9C9A31270A0; Mon, 22 Jan 2018 12:02:15 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.531 X-Spam-Level: X-Spam-Status: No, score=-14.531 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YSzjMh2Xjque; Mon, 22 Jan 2018 12:02:13 -0800 (PST) Received: from alln-iport-3.cisco.com (alln-iport-3.cisco.com [173.37.142.90]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AD62612706D; Mon, 22 Jan 2018 12:02:13 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=1918; q=dns/txt; s=iport; t=1516651333; x=1517860933; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=U4DsgBUFfbi4iyn1z9a3OcOeYHRsaeg4rfojcCmlRQU=; b=eMxZRJQeNsuFlGK/IkD1TLBB7CROgvJKODnsgWUO8oKPLnuiO0RIrQxX 4bx/smOmlPr58cFGIt9GfmN0y9rQDxXyBB8BHHGQYeejl9A/44txeYcXN G3OEBGqANZrgoEuLgCLea1TNhp2e70lHDBDT88sG8YqS4eOuyeuGf9AFy Y=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AfAQApQmZa/4QNJK1eGQEBAQEBAQEBA?= =?us-ascii?q?QEBAQcBAQEBAYNCZnQnB4NWiiSOZYFbl2WCFwojhRgCGoRWVBgBAQEBAQEBAQF?= =?us-ascii?q?rKIUkBiMRRRACAQgaAiYCAgIwFRACBAENBYozELRrgieKNwEBAQEBAQEBAQEBA?= =?us-ascii?q?QEBAQEBAQEBARgFgQ+DOoIVgz8pDIJ5gy8CAoFvgxcxgjQFo3oCiBGNSA2CDpI?= =?us-ascii?q?EinWCXIlJAhEZAYE7AR85gVBvFT0qAYF/hFd4iVKBFwEBAQ?= X-IronPort-AV: E=Sophos;i="5.46,398,1511827200"; d="scan'208";a="60216382" Received: from alln-core-10.cisco.com ([173.36.13.132]) by alln-iport-3.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 22 Jan 2018 20:02:13 +0000 Received: from XCH-RTP-015.cisco.com (xch-rtp-015.cisco.com [64.101.220.155]) by alln-core-10.cisco.com (8.14.5/8.14.5) with ESMTP id w0MK2Cls011889 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Mon, 22 Jan 2018 20:02:12 GMT Received: from xch-rtp-015.cisco.com (64.101.220.155) by XCH-RTP-015.cisco.com (64.101.220.155) with Microsoft SMTP Server (TLS) id 15.0.1320.4; Mon, 22 Jan 2018 15:02:11 -0500 Received: from xch-rtp-015.cisco.com ([64.101.220.155]) by XCH-RTP-015.cisco.com ([64.101.220.155]) with mapi id 15.00.1320.000; Mon, 22 Jan 2018 15:02:11 -0500 From: "Acee Lindem (acee)" To: Carl Wallace , "draft-ietf-netmod-rfc8022bis.all@ietf.org" CC: "secdir@ietf.org" , "iesg@ietf.org" Thread-Topic: secdir review of draft-ietf-netmod-rfc8022bis Thread-Index: AQHTk7NiLwnCM3+r8067/UkErtLxMKOAUGMA Date: Mon, 22 Jan 2018 20:02:11 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.116.152.198] Content-Type: text/plain; charset="utf-8" Content-ID: <73C2CCA7F33EC841967A19CD27007064@emea.cisco.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [secdir] secdir review of draft-ietf-netmod-rfc8022bis X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 22 Jan 2018 20:02:16 -0000 SGkgQ2FybCwgDQoNClRoYW5rcyBmb3IgdGhlIHJldmlldy4gDQoNCk9uIDEvMjIvMTgsIDI6MDEg UE0sICJDYXJsIFdhbGxhY2UiIDxjYXJsQHJlZGhvdW5kc29mdHdhcmUuY29tPiB3cm90ZToNCg0K ICAgIEkgaGF2ZSByZXZpZXdlZCB0aGlzIGRvY3VtZW50IGFzIHBhcnQgb2YgdGhlIHNlY3VyaXR5 IGRpcmVjdG9yYXRlJ3MNCiAgICBvbmdvaW5nIGVmZm9ydCB0byByZXZpZXcgYWxsIElFVEYgZG9j dW1lbnRzIGJlaW5nIHByb2Nlc3NlZCBieSB0aGUgSUVTRy4NCiAgICBUaGVzZSBjb21tZW50cyB3 ZXJlIHdyaXR0ZW4gcHJpbWFyaWx5IGZvciB0aGUgYmVuZWZpdCBvZiB0aGUgc2VjdXJpdHkgYXJl YQ0KICAgIGRpcmVjdG9ycy4gRG9jdW1lbnQgZWRpdG9ycyBhbmQgV0cgY2hhaXJzIHNob3VsZCB0 cmVhdCB0aGVzZSBjb21tZW50cyBqdXN0DQogICAgbGlrZSBhbnkgb3RoZXIgbGFzdCBjYWxsIGNv bW1lbnRzLg0KICAgIA0KICAgIEkgZm91bmQgbm8gaXNzdWVzIHdpdGggdGhlIGRyYWZ0LiBUaGUg c2VjdXJpdHkgY29uc2lkZXJhdGlvbnMgc2VjdGlvbg0KICAgIHJlZmVyZW5jZXMgTkVUQ09ORiBh bmQgUkVTVENPTkYgZm9yIG5ldHdvcmsgc2VjdXJpdHksIHdpdGggU1NIIGFuZCBUTFMNCiAgICB1 c2VkLiBUaGlzIHNlZW1zIGZpbmUgYnV0IEkgd29uZGVyIGlmIHNvbWUgZ3VpZGFuY2Ugb24gdXNp bmcgdGhlc2UgYSBsYQ0KICAgIFJGQzYxMjUgd291bGQgYmUgaGVscGZ1bCBmb3Igc29tZS4gDQoN ClRoZSBpbmZvcm1hdGlvbiBvbiB0cmFuc3BvcnQgbGF5ZXIgc2VjdXJpdHkgaXMgYSBib2lsZXJw bGF0ZS4gaHR0cHM6Ly90cmFjLmlldGYub3JnL3RyYWMvb3BzL3dpa2kveWFuZy1zZWN1cml0eS1n dWlkZWxpbmVzDQpJZiB0aGlzIHdlcmUgdG8gYmUgYWRkZWQsIGl0IHNob3VsZCBhZGRlZCBoZXJl IGZpcnN0LiBIb3dldmVyLCBJ4oCZbSBub3QgdGhpcyBkcmFmdCBvbiBob3cgdG8gdXNlIFRMUyB3 aXRoIFBLSSBpcyByZWFsbHkgbmVjZXNzYXJ5LiBUaGlzIGlzIG1vcmUgYSBjb25zaWRlcmF0aW9u IGZvciBUTFMgaXRzZWxmIHRoYW4gaXRzIHVzYWdlIHdpdGggTkVUQ09ORi9SRVNUQ09ORi4gDQoN Cg0KICAgIE9uZSBxdWVzdGlvbiBpbiB0aGUgc2VjdXJpdHkNCiAgICBjb25zaWRlcmF0aW9uIHNl Y3Rpb24uIFR3aWNlICIvcm91dGluZy9yaWJzL3JpYiIgaXMgcmVmZXJyZWQgdG8gYSBsaXN0Lg0K ICAgIFNob3VsZCB0aGlzIGJlICIvcm91dGluZy9yaWJzIj8NCg0KWWVzIOKAkyB0aGlzIHByb2Jh Ymx5IHNob3VsZCBiZSBjaGFuZ2VkIHNpbmNlIHRoZSBjdXJyZW50IG5vZGUgcmVmZXJzIHRvIGEg bGlzdCBlbGVtZW50IGFuZCBub3QgdGhlIGxpc3QgaXRzZWxmLiBJ4oCZbGwgdXBkYXRlIGl0LiAN Cg0KVGhhbmtzLA0KQWNlZSANCiAgIA0KICAgIA0KDQo= From nobody Mon Jan 22 12:06:37 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 58B16127136; Mon, 22 Jan 2018 12:06:35 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.531 X-Spam-Level: X-Spam-Status: No, score=-14.531 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SU_69K5LQP2N; Mon, 22 Jan 2018 12:06:33 -0800 (PST) Received: from alln-iport-6.cisco.com (alln-iport-6.cisco.com [173.37.142.93]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 432AE12D77B; Mon, 22 Jan 2018 12:06:31 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2444; q=dns/txt; s=iport; t=1516651591; x=1517861191; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=tuzMjb0bHRD/4PJaK52c0+umet8as2BxBDAc9TSf3dk=; b=bOt4iyhQrMWhtT3HbZtR8Fit26sVBeQ7SwrO2Ze3IluPhTNNFpQvGwN9 Aj7d96oiaZfVc4B83TwGLVa8nOXo0f7W+gSS5gHWcdhPMDgx4WzhNqjLv INDB/F1jOpyodkyzxuhRtCUqAluqApd+zLSJMhxIVDlI1Ar6K3c2NHlgq g=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AfAQBJQ2Za/4cNJK1eGQEBAQEBAQEBA?= =?us-ascii?q?QEBAQcBAQEBAYNCZnQnB4NWiiSOZYFbl2WCFwojhRgCGoRWVBgBAQEBAQEBAQF?= =?us-ascii?q?rKIUkBiMRRRACAQgaAiYCAgIwFRACBAENBYozELRtgieKNwEBAQEBAQEBAQEBA?= =?us-ascii?q?QEBAQEBAQEBARgFgQ+DOoIVgz8pDIJ5gy8CAoFvgxcxgjQFo3oCiBGNSIIbkgS?= =?us-ascii?q?KdYJciUkCERkBgTsBHzmBUG8VPSoBgX+EV3iJUoEXAQEB?= X-IronPort-AV: E=Sophos;i="5.46,398,1511827200"; d="scan'208";a="59555760" Received: from alln-core-2.cisco.com ([173.36.13.135]) by alln-iport-6.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 22 Jan 2018 20:06:30 +0000 Received: from XCH-RTP-014.cisco.com (xch-rtp-014.cisco.com [64.101.220.154]) by alln-core-2.cisco.com (8.14.5/8.14.5) with ESMTP id w0MK6U26006996 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Mon, 22 Jan 2018 20:06:30 GMT Received: from xch-rtp-015.cisco.com (64.101.220.155) by XCH-RTP-014.cisco.com (64.101.220.154) with Microsoft SMTP Server (TLS) id 15.0.1320.4; Mon, 22 Jan 2018 15:06:29 -0500 Received: from xch-rtp-015.cisco.com ([64.101.220.155]) by XCH-RTP-015.cisco.com ([64.101.220.155]) with mapi id 15.00.1320.000; Mon, 22 Jan 2018 15:06:29 -0500 From: "Acee Lindem (acee)" To: Carl Wallace , "draft-ietf-netmod-rfc8022bis.all@ietf.org" CC: "secdir@ietf.org" , "iesg@ietf.org" Thread-Topic: secdir review of draft-ietf-netmod-rfc8022bis Thread-Index: AQHTk7NiLwnCM3+r8067/UkErtLxMKOAUGMAgAABM4A= Date: Mon, 22 Jan 2018 20:06:29 +0000 Message-ID: <419C7C18-650C-4280-BE36-E2D5CC24A33B@cisco.com> References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.116.152.198] Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [secdir] secdir review of draft-ietf-netmod-rfc8022bis X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 22 Jan 2018 20:06:35 -0000 SGkgQ2FybCwNCg0KQ29ycmVjdGlvbjovcm91dGluZy9yaWJzL3JpYiBpcywgaW4gZmFjdCwgdGhl IFlBTkcgbGlzdC4gL3JvdXRpbmcvcmlicyBpcyBhIGNvbnRhaW5lciBmb3IgdGhlIGxpc3Qgb2Yg UklCcy4gU28sIHRoaXMgaXMgdGhlIHByb3BlciB0ZXJtaW5vbG9neS4NCg0KVGhhbmtzLA0KQWNl ZSAgDQoNCk9uIDEvMjIvMTgsIDM6MDIgUE0sICJBY2VlIExpbmRlbSAoYWNlZSkiIDxhY2VlQGNp c2NvLmNvbT4gd3JvdGU6DQoNCiAgICBIaSBDYXJsLCANCiAgICANCiAgICBUaGFua3MgZm9yIHRo ZSByZXZpZXcuIA0KICAgIA0KICAgIE9uIDEvMjIvMTgsIDI6MDEgUE0sICJDYXJsIFdhbGxhY2Ui IDxjYXJsQHJlZGhvdW5kc29mdHdhcmUuY29tPiB3cm90ZToNCiAgICANCiAgICAgICAgSSBoYXZl IHJldmlld2VkIHRoaXMgZG9jdW1lbnQgYXMgcGFydCBvZiB0aGUgc2VjdXJpdHkgZGlyZWN0b3Jh dGUncw0KICAgICAgICBvbmdvaW5nIGVmZm9ydCB0byByZXZpZXcgYWxsIElFVEYgZG9jdW1lbnRz IGJlaW5nIHByb2Nlc3NlZCBieSB0aGUgSUVTRy4NCiAgICAgICAgVGhlc2UgY29tbWVudHMgd2Vy ZSB3cml0dGVuIHByaW1hcmlseSBmb3IgdGhlIGJlbmVmaXQgb2YgdGhlIHNlY3VyaXR5IGFyZWEN CiAgICAgICAgZGlyZWN0b3JzLiBEb2N1bWVudCBlZGl0b3JzIGFuZCBXRyBjaGFpcnMgc2hvdWxk IHRyZWF0IHRoZXNlIGNvbW1lbnRzIGp1c3QNCiAgICAgICAgbGlrZSBhbnkgb3RoZXIgbGFzdCBj YWxsIGNvbW1lbnRzLg0KICAgICAgICANCiAgICAgICAgSSBmb3VuZCBubyBpc3N1ZXMgd2l0aCB0 aGUgZHJhZnQuIFRoZSBzZWN1cml0eSBjb25zaWRlcmF0aW9ucyBzZWN0aW9uDQogICAgICAgIHJl ZmVyZW5jZXMgTkVUQ09ORiBhbmQgUkVTVENPTkYgZm9yIG5ldHdvcmsgc2VjdXJpdHksIHdpdGgg U1NIIGFuZCBUTFMNCiAgICAgICAgdXNlZC4gVGhpcyBzZWVtcyBmaW5lIGJ1dCBJIHdvbmRlciBp ZiBzb21lIGd1aWRhbmNlIG9uIHVzaW5nIHRoZXNlIGEgbGENCiAgICAgICAgUkZDNjEyNSB3b3Vs ZCBiZSBoZWxwZnVsIGZvciBzb21lLiANCiAgICANCiAgICBUaGUgaW5mb3JtYXRpb24gb24gdHJh bnNwb3J0IGxheWVyIHNlY3VyaXR5IGlzIGEgYm9pbGVycGxhdGUuIGh0dHBzOi8vdHJhYy5pZXRm Lm9yZy90cmFjL29wcy93aWtpL3lhbmctc2VjdXJpdHktZ3VpZGVsaW5lcw0KICAgIElmIHRoaXMg d2VyZSB0byBiZSBhZGRlZCwgaXQgc2hvdWxkIGFkZGVkIGhlcmUgZmlyc3QuIEhvd2V2ZXIsIEni gJltIG5vdCB0aGlzIGRyYWZ0IG9uIGhvdyB0byB1c2UgVExTIHdpdGggUEtJIGlzIHJlYWxseSBu ZWNlc3NhcnkuIFRoaXMgaXMgbW9yZSBhIGNvbnNpZGVyYXRpb24gZm9yIFRMUyBpdHNlbGYgdGhh biBpdHMgdXNhZ2Ugd2l0aCBORVRDT05GL1JFU1RDT05GLiANCiAgICANCiAgICANCiAgICAgICAg T25lIHF1ZXN0aW9uIGluIHRoZSBzZWN1cml0eQ0KICAgICAgICBjb25zaWRlcmF0aW9uIHNlY3Rp b24uIFR3aWNlICIvcm91dGluZy9yaWJzL3JpYiIgaXMgcmVmZXJyZWQgdG8gYSBsaXN0Lg0KICAg ICAgICBTaG91bGQgdGhpcyBiZSAiL3JvdXRpbmcvcmlicyI/DQogICAgDQogICAgWWVzIOKAkyB0 aGlzIHByb2JhYmx5IHNob3VsZCBiZSBjaGFuZ2VkIHNpbmNlIHRoZSBjdXJyZW50IG5vZGUgcmVm ZXJzIHRvIGEgbGlzdCBlbGVtZW50IGFuZCBub3QgdGhlIGxpc3QgaXRzZWxmLiBJ4oCZbGwgdXBk YXRlIGl0LiANCiAgICANCiAgICBUaGFua3MsDQogICAgQWNlZSANCiAgICAgICANCiAgICAgICAg DQogICAgDQogICAgDQoNCg== From nobody Mon Jan 22 16:56:30 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7F41B12D852 for ; Mon, 22 Jan 2018 16:56:29 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AdLGkakbg2cG for ; Mon, 22 Jan 2018 16:56:27 -0800 (PST) Received: from mail-it0-x22b.google.com (mail-it0-x22b.google.com [IPv6:2607:f8b0:4001:c0b::22b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 31E0D12D850 for ; Mon, 22 Jan 2018 16:56:27 -0800 (PST) Received: by mail-it0-x22b.google.com with SMTP id e1so11876622ita.0 for ; Mon, 22 Jan 2018 16:56:27 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to:cc; bh=0N+O/XFtBfQoxWEPcE1bFMW5+gJUiICkLnuSDASoibI=; b=PI1H/K3MIy4rYIiVHp2w0/+7h25m1Fd5vslj4b0IsCZTiEpnoUISAw4mkX8y3Gt8S8 Dyv9D0qEyYSh7KYrPMi+a9Jy3AizNwiVakv0bJdK0JQ9ya9OJqHgaL860kEenZ9PABRF oJgCVWvmVDI7/Q/iTZ/jhpQ16hsW6XefGNTXplcxaI/Ib0HDO1CBmEfJslJWzuErdSfm 9QxvwOGChUNyDo2iBVCe7roLoos8pRMuOuuhmOMSOiWN0dv0BJqSxXpdcKswoa5Ei1wT XBPERGPWXtsOPYWDoyV7gclT+VkURBWsrmFnwe9SpHAde5NB+MjYSfOUqrUEQ4BC9FBV /MnA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to:cc; bh=0N+O/XFtBfQoxWEPcE1bFMW5+gJUiICkLnuSDASoibI=; b=aHujI9nGlgMlCJUx+XliaB9NFBxKUUxSwcys6dzCKqR9Hsr93coPEsK8aeh3AL50wA HubLhzbx6Q8Fhxw9yowIqSSU5W1iFcx4j/SdQTosfryUaWfnOaYGPtqsH6/ArHhWDtmx qyPpYi2ReLkSZZmuy5kVk4XRIjA88kgPgIvD1WGPE5Sna8CBvC1f9Cr7rD09QIhkyx00 8OI5dg2crBtsE+owysQ9FcHRwTUqitA9ruHYH5uwRobTl7nGtjGOkp/m22gMmKv4L7qC P6AEsDvKM0lK3cB3RKEgBJQSSndWwrgcYwymNJpBBmx67Qc963vjtMj3hccaCB0POtt5 nX6w== X-Gm-Message-State: AKwxytf7aAtFhZNPHwPF5epsyjYSSZZ3PGUdjbvsf9Zo9ALJAghmdVdH gPj+gZWvA5Mu9hWORQBu5cHoURikK2yDbg++/J/nH90f X-Google-Smtp-Source: AH8x224mv/CweRbxwJ94lhAe7qnJcdWtnWdSfWVE0sdYK77x+gxlFtiJkogZhepCNC35K6dcHNTFf8OWYrAdDx44ob0= X-Received: by 10.36.219.137 with SMTP id c131mr1239462itg.22.1516668986246; Mon, 22 Jan 2018 16:56:26 -0800 (PST) MIME-Version: 1.0 Received: by 10.2.153.19 with HTTP; Mon, 22 Jan 2018 16:56:25 -0800 (PST) From: Shawn Emery Date: Mon, 22 Jan 2018 17:56:25 -0700 Message-ID: To: secdir@ietf.org, draft-ietf-mmusic-trickle-ice-sip.all@tools.ietf.org Content-Type: multipart/alternative; boundary="94eb2c05ae482ac9e50563670410" Archived-At: Subject: [secdir] Review of draft-ietf-mmusic-trickle-ice-sip-12 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 23 Jan 2018 00:56:29 -0000 --94eb2c05ae482ac9e50563670410 Content-Type: text/plain; charset="UTF-8" I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just like any other last call comments. This draft specifies how the Session Initiation Protocol (SIP) can use the non-blocking version of the Interactive Connectivity Establishment (ICE) protocol, Trickle ICE, and defines a new registry for this usage. The security considerations section does exist and defers security concerns to draft-ietf-mmusic-ice-sip-sdp, RFC 6086, and draft-ietf-ice-trickle. 1. draft-ietf-mmusic-ice-sip-sdp This will hopefully be available for a secdir review in the near future, see general comments concern below. 2. RFC 6086 6086 prescribes S/MIME if the environment requires payloads to be private and also suggests a digest-challenge in order to provide integrity protection. 3. draft-ietf-ice-trickle defers to draft-ietf-ice-rfc5245bis. ice-sip should reference the 5245bis draft directly. I won't duplicate Stephen's efforts in reviewing 5245bis. General comments: I'm concerned about the normative references to ietf-mmusic-ice-sip-sdp. This draft should progress before or along with any dependents. Editorial comments: Some of the abbreviations that are not expanded and are not listed as well known by the RFC Editor: SDP AOR STUN TURN GRUU (needs to be expanded in Section 3.1) making it cumbersome to follow the specification. Shawn. -- --94eb2c05ae482ac9e50563670410 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
I have reviewed this docu= ment as part of the security directorate's
ongoing effort to review all=C2= =A0IETF=C2=A0documents being processed by = the IESG.
These comments were written primarily for the benefit of the security<= /span>
area = directors. Document editors and WG chairs should treat these
comments just like = any other last call comments.

<= div>
This draft specifies how the Session In= itiation Protocol (SIP) can use the
no= n-blocking version of the Interactive=C2=A0Connectivity Establishment (ICE) protocol,
Trickle ICE, and defines a ne= w registry for this usage.

=
The security considerations section d= oes exist and defers security concerns to
draft-ietf-mmusic-ice-sip-sdp, RFC 6086, and draft-ietf-ice-trickle.

1.=C2=A0draft-ietf-mmusic-ice-sip-sdp
= This will hopefully be available for a secdir review in the near future, se= e general
comments concern below.
2. RFC 6086
6086 prescribes S/MIME = if the environment requires payloads to be private and
also suggests a di= gest-challenge in order to provide integrity protection.
3. draft-ietf-ice-trickle
defers to draft-ietf-ice-rfc5245bis.=C2=A0 ice-sip should ref= erence the 5245bis draft
directly.=C2=A0 I won't duplicate Stephen's e= fforts in reviewing 5245bis.
General comments:

I'm con= cerned about the normative references to ietf-mmusic-ice-sip-sdp.
This draft should progress before or along with= any dependents.

Editorial comments:

<= div>Some of the= abbreviations that are not expanded and are not listed as well
kn= own by the RFC Editor:

SDP
<= font color=3D"#000000">AOR
STU= N
TURN
GRUU (needs to be expanded in Section 3.1)

making it cumbersome to follow the specification.

Shawn.
--
--94eb2c05ae482ac9e50563670410-- From nobody Mon Jan 22 19:41:04 2018 Return-Path: X-Original-To: secdir@ietf.org Delivered-To: secdir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 1E9B912D941; Mon, 22 Jan 2018 19:40:53 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Paul Wouters To: Cc: lp-wan@ietf.org, draft-ietf-lpwan-overview.all@ietf.org, ietf@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.69.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <151667885305.29680.3881213464243513010@ietfa.amsl.com> Date: Mon, 22 Jan 2018 19:40:53 -0800 Archived-At: Subject: [secdir] Secdir last call review of draft-ietf-lpwan-overview-07 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 23 Jan 2018 03:40:53 -0000 Reviewer: Paul Wouters Review result: Ready I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just like any other last call comments. The summary of the review is that the document is Ready. This document is an overview of existing Low Power Wide Area Networks (LPWAN) technologies. As the review states, no LPWAN devices have IP capabilities at the moment. It also describes a lot of standards in this area are coming from outside the IETF. Nevertheless, a Security Section is included that lists a few of the items of concern, and how some existing IETF security technologies might not work on LPWAN. From nobody Thu Jan 25 10:06:14 2018 Return-Path: X-Original-To: secdir@ietf.org Delivered-To: secdir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id E61BE12E889 for ; Thu, 25 Jan 2018 10:06:12 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit From: Tero Kivinen To: X-Test-IDTracker: no X-IETF-IDTracker: 6.70.0 Auto-Submitted: auto-generated Precedence: bulk Reply-to: secdir-secratary@mit.edu Message-ID: <151690357293.8330.3167877704232348310.idtracker@ietfa.amsl.com> Date: Thu, 25 Jan 2018 10:06:12 -0800 Archived-At: Subject: [secdir] Assignments X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 25 Jan 2018 18:06:13 -0000 Review instructions and related resources are at: http://tools.ietf.org/area/sec/trac/wiki/SecDirReview For telechat 2018-01-25 Reviewer LC end Draft Tim Polk 2018-01-16 draft-ietf-lwig-energy-efficient-08 Paul Wouters 2018-01-11 draft-ietf-ospf-ospfv3-lsa-extend-23 For telechat 2018-02-08 Reviewer LC end Draft Derek Atkins 2018-01-31 draft-ietf-bier-mvpn-09 Donald Eastlake 2018-01-31 draft-farrel-sfc-convent-05 Ólafur Guðmundsson 2018-02-07 draft-ietf-tls-dnssec-chain-extension-06 Phillip Hallam-Baker 2018-02-07 draft-ietf-netmod-yang-tree-diagrams-05 Steve Hanna 2018-02-05 draft-ietf-trill-ecn-support-04 Dan Harkins 2018-02-05 draft-ietf-trill-address-flush-05 Brian Weis R2018-01-26 draft-ietf-idr-bgp-prefix-sid-10 Taylor Yu 2018-01-31 draft-ietf-rtgwg-lne-model-05 Dacheng Zhang 2018-01-31 draft-ietf-mtgvenue-iaoc-venue-selection-process-11 For telechat 2018-02-22 Reviewer LC end Draft Tobias Gondrom None draft-ietf-sacm-nea-swima-patnc-01 For telechat 2018-03-08 Reviewer LC end Draft Daniel Gillmor None draft-gutmann-scep-08 Last calls: Reviewer LC end Draft John Bradley None draft-ietf-acme-acme-09 Stephen Farrell 2018-01-26 draft-ietf-ice-rfc5245bis-16 Paul Hoffman 2018-02-02 draft-ietf-bmwg-sdn-controller-benchmark-term-07 Russ Housley 2018-02-02 draft-ietf-bmwg-sdn-controller-benchmark-meth-07 Christian Huitema None draft-ietf-bfd-yang-09 Russ Mundy 2017-09-14 draft-spinosa-urn-lex-12 Early review requests: Reviewer Due Draft Daniel Franke 2018-01-31 draft-ietf-intarea-provisioning-domains-00 Ólafur Guðmundsson 2018-01-09 draft-ietf-opsawg-nat-yang-09 Next in the reviewer rotation: Leif Johansson Benjamin Kaduk Charlie Kaufman Scott Kelly Stephen Kent Tero Kivinen Watson Ladd Ben Laurie Barry Leiba Chris Lonvick From nobody Thu Jan 25 10:44:58 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1DF9812E895; Thu, 25 Jan 2018 10:44:57 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.529 X-Spam-Level: X-Spam-Status: No, score=-14.529 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xxZJHzB9XHCS; Thu, 25 Jan 2018 10:44:52 -0800 (PST) Received: from rcdn-iport-3.cisco.com (rcdn-iport-3.cisco.com [173.37.86.74]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 321D312E882; Thu, 25 Jan 2018 10:44:52 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=189640; q=dns/txt; s=iport; t=1516905892; x=1518115492; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=E78qzt16bCYglmHWZVziDg4dMTK4tVscmdL65rqdYuY=; b=ZOCyad7Nhp81rjzE/hR4eJkGbaGbsWED9PRRCE+kWJ0SASCEOwIawQby n7+9pwa8ErHxLC1fwl8VVwWyRtzsqHykWFAf/49ncwiIxgvuWhgsx0nK0 +kul7SEd5TnUdFKVz3H05MaX3UbtIKrGWwaQ055dw7dfrUcLGaYG6OMU/ c=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0ACAQA5JWpa/4kNJK1ZAxkBAQEBAQEBA?= =?us-ascii?q?QEBAQEHAQEBAQGCSkcxZnQnB4NWiiSOaZlFFYF/AwoYAQqFGAIagX5UGAEBAQE?= =?us-ascii?q?BAQEBAmsohSQCBAEBGAEIBEQBAgQEAxACAQYCDioBBgMCAgIlCxQRAgQKBAWJU?= =?us-ascii?q?WQQlwSdcYFtOopWAQEBAQEBAQEBAQEBAQEBAQEBAQEBGAWEUYF0IYM/KYF3gQ6?= =?us-ascii?q?DLwEBAoEzCQELBwEJAisKJoJQMYIUIAWSOYdViXwCkAWFW4IbI4oTh1SXLQIRG?= =?us-ascii?q?QGBOwEfOWBwcBU9KgGBf4JUHIFneItvAQ4YAoELgRcBAQE?= X-IronPort-AV: E=Sophos;i="5.46,413,1511827200"; d="scan'208,217";a="337373610" Received: from alln-core-4.cisco.com ([173.36.13.137]) by rcdn-iport-3.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 25 Jan 2018 18:44:50 +0000 Received: from XCH-RTP-004.cisco.com (xch-rtp-004.cisco.com [64.101.220.144]) by alln-core-4.cisco.com (8.14.5/8.14.5) with ESMTP id w0PIiniY003605 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Thu, 25 Jan 2018 18:44:49 GMT Received: from xch-rtp-001.cisco.com (64.101.220.141) by XCH-RTP-004.cisco.com (64.101.220.144) with Microsoft SMTP Server (TLS) id 15.0.1320.4; Thu, 25 Jan 2018 13:44:48 -0500 Received: from xch-rtp-001.cisco.com ([64.101.220.141]) by XCH-RTP-001.cisco.com ([64.101.220.141]) with mapi id 15.00.1320.000; Thu, 25 Jan 2018 13:44:48 -0500 From: "Brian Weis (bew)" To: Thomas Haynes CC: "secdir@ietf.org" , NFSv4 , "draft-ietf-nfsv4-flex-files.all@ietf.org" Thread-Topic: [nfsv4] Secdir last call review of draft-ietf-nfsv4-flex-files-15 Thread-Index: AQHTi9WQTx5RarnLbUyAVOTsrpXN+aNwovgAgACajgCABaIqgIAOdZ0A Date: Thu, 25 Jan 2018 18:44:48 +0000 Message-ID: References: <151578274278.18715.11694935076324562133@ietfa.amsl.com> <75FDDF9F-C335-4488-9EAE-679DD9727A99@primarydata.com> <2D43D657-817F-4C43-A405-E7FB83C688AD@cisco.com> <599605AF-7CB3-4A56-A26A-3DE56B805309@primarydata.com> In-Reply-To: <599605AF-7CB3-4A56-A26A-3DE56B805309@primarydata.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.24.20.196] Content-Type: multipart/alternative; boundary="_000_B541D533FCBA45B08C3576A9FA320074ciscocom_" MIME-Version: 1.0 Archived-At: Subject: Re: [secdir] [nfsv4] Secdir last call review of draft-ietf-nfsv4-flex-files-15 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 25 Jan 2018 18:44:57 -0000 --_000_B541D533FCBA45B08C3576A9FA320074ciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgVGhvbWFzLA0KDQpPbiBKYW4gMTYsIDIwMTgsIGF0IDc6NTYgUE0sIFRob21hcyBIYXluZXMg PGxvZ2h5ckBwcmltYXJ5ZGF0YS5jb208bWFpbHRvOmxvZ2h5ckBwcmltYXJ5ZGF0YS5jb20+PiB3 cm90ZToNCg0KDQoNCk9uIEphbiAxMiwgMjAxOCwgYXQgMzo1NCBQTSwgQnJpYW4gV2VpcyAoYmV3 KSA8YmV3QGNpc2NvLmNvbTxtYWlsdG86YmV3QGNpc2NvLmNvbT4+IHdyb3RlOg0KDQpIaSBUaG9t YXMsDQoNCk9uIEphbiAxMiwgMjAxOCwgYXQgMTE6NDEgQU0sIFRob21hcyBIYXluZXMgPGxvZ2h5 ckBwcmltYXJ5ZGF0YS5jb208bWFpbHRvOmxvZ2h5ckBwcmltYXJ5ZGF0YS5jb20+PiB3cm90ZToN Cg0KSGkgQnJpYW4sDQoNClRoYW5rcyBmb3IgdGhlIHJldmlldyAtIGNvbW1lbnRzIGlubGluZS4u DQoNCk9uIEphbiAxMiwgMjAxOCwgYXQgMTA6NDUgQU0sIEJyaWFuIFdlaXMgPGJld0BjaXNjby5j b208bWFpbHRvOmJld0BjaXNjby5jb20+PiB3cm90ZToNCg0KUmV2aWV3ZXI6IEJyaWFuIFdlaXMN ClJldmlldyByZXN1bHQ6IEhhcyBJc3N1ZXMNCg0KSSBoYXZlIHJldmlld2VkIHRoaXMgZG9jdW1l bnQgYXMgcGFydCBvZiB0aGUgc2VjdXJpdHkgZGlyZWN0b3JhdGUncyBvbmdvaW5nDQplZmZvcnQg dG8gcmV2aWV3IGFsbCBJRVRGIGRvY3VtZW50cyBiZWluZyBwcm9jZXNzZWQgYnkgdGhlIElFU0cu IFRoZXNlIGNvbW1lbnRzDQp3ZXJlIHdyaXR0ZW4gcHJpbWFyaWx5IGZvciB0aGUgYmVuZWZpdCBv ZiB0aGUgc2VjdXJpdHkgYXJlYSBkaXJlY3RvcnMuIERvY3VtZW50DQplZGl0b3JzIGFuZCBXRyBj aGFpcnMgc2hvdWxkIHRyZWF0IHRoZXNlIGNvbW1lbnRzIGp1c3QgbGlrZSBhbnkgb3RoZXIgbGFz dCBjYWxsDQpjb21tZW50cy4NCg0KVGhpcyBkb2N1bWVudCBkZWZpbmVzIHRoZSBQYXJhbGxlbCBO ZXR3b3JrIEZpbGUgU3lzdGVtIChwTkZTKSwgd2hpY2ggYWxsb3dzIGENCnN0b3JhZ2Ugc3lzdGVt IHRvIHN0b3JlIHRoZSBtZXRhZGF0YSBmb3IgZmlsZXMgb250byBhIG1ldGFkYXRhIHNlcnZlciwg YW5kIGRhdGENCm9mIHRoYXQgZmlsZSBvbnRvIGEgc2VwYXJhdGUgc3RvcmFnZSBkZXZpY2UuIFRo ZSBkb2N1bWVudCBmb2N1c2VzIG9uIHRoZQ0KaW50ZXJhY3Rpb24gYmV0d2VlbiB0aGUgdHdvIHR5 cGVzIG9mIHNlcnZlcnMsIGFuZCB0aGUgcmVxdWlyZW1lbnRzIG9mIGNsaWVudHMNCnVzaW5nIGEg cE5GUyBzeXN0ZW0uDQoNClRoZSBkb2N1bWVudCBkZXNjcmliZXMgdHdvIG1vZGVscyBieSB3aGlj aCB0aGUgbWV0YWRhdGEgc2VydmVyIGFuZCBmaWxlIHN0b3JhZ2UNCnNlcnZlciBjYW4gY29tbXVu aWNhdGUuIE9uZSBpcyBhIOKAnHRpZ2h0IGNvdXBsaW5nIG1vZGVs4oCdLCBpbiB3aGljaCB0aGUg dHdvIHR5cGVzDQpvZiBzZXJ2ZXJzIGRpcmVjdGx5IGNvbW11bmljYXRlLiBJbiB0aGlzIG1vZGVs IHRoZSBtZXRhZGF0YSBzZXJ2ZXIgY2FuIGVuc3VyZQ0KdGhhdCBmaWxlIGFjY2VzcyBjb250cm9s IHN0YXRlIGlzIHN5bmNocm9uaXplZCBiZXR3ZWVuIHRoZSB0d28gc2VydmVycywgYW5kIEkNCmJl bGlldmUgdGhhdCBsZXZlbCBvZiBhY2Nlc3MgY29udHJvbCBpcyBlcXVpdmFsZW50IHRvIE5GUyB2 NC54IHRvZGF5LiBGcm9tIGENCnNlY3VyaXR5IGNvbnNpZGVyYXRpb25zIHBlcnNwZWN0aXZlLCB0 aGlzIGlzIHBlcmhhcHMgYmVzdCBzdW1tYXJpemVkIGluIFNlY3Rpb24NCjIuMjoNCg0K4oCcV2l0 aCB0aWdodGx5IGNvdXBsZWQgc3RvcmFnZSBkZXZpY2VzLCB0aGUgbWV0YWRhdGEgc2VydmVyIHNl dHMgdGhlDQogdXNlciBhbmQgZ3JvdXAgb3duZXJzLCBtb2RlIGJpdHMsIGFuZCBBQ0wgb2YgdGhl IGRhdGEgZmlsZSB0byBiZSB0aGUNCiBzYW1lIGFzIHRoZSBtZXRhZGF0YSBmaWxlLiAgQW5kIHRo ZSBjbGllbnQgbXVzdCBhdXRoZW50aWNhdGUgd2l0aCB0aGUNCiBzdG9yYWdlIGRldmljZSBhbmQg Z28gdGhyb3VnaCB0aGUgc2FtZSBhdXRob3JpemF0aW9uIHByb2Nlc3MgaXQgd291bGQNCiBnbyB0 aHJvdWdoIHZpYSB0aGUgbWV0YWRhdGEgc2VydmVyLuKAnQ0KDQpUaGUgb3RoZXIgbW9kZWwgaXMg YSDigJxsb29zZSBjb3VwbGluZyBtb2RlbOKAnSwgaW4gd2hpY2ggdGhlIGNsaWVudCBpcw0KYXV0 aGVudGljYXRlZCBhbmQgYXV0aG9yaXplZCBieSB0aGUgbWV0YWRhdGEgc2VydmVyLCBhbmQgaXMg Z2l2ZW4gYWNjZXNzIHRvIHRoZQ0KZmlsZSBzZXJ2ZXIgdGhyb3VnaCB0aGUgdXNlIGNyZWRlbnRp YWxzLiBIb3dldmVyLCB0aGVyZSBpcyBubyBkaXJlY3QNCmNvbW11bmljYXRpb25zIGJldHdlZW4g dGhlIG1ldGFkYXRhIHNlcnZlciBhbmQgdGhlIGZpbGUgc2VydmVyLiBUaGUgbWV0YWRhdGENCnNl cnZlciBkb2VzIG5vdCBzZWVtIHRvIHByb3ZpZGUgYSBmaW5lIGdyYWluZWQgYWNjZXNzIGNvbnRy b2wgdG8gZmlsZXMgb24gdGhlDQpmaWxlIHNlcnZlciwgYnV0IGluc3RlYWQgcmVsaWVzIHVwb24g dGhlIGNsaWVudCB0byBlbmZvcmNlIGEgbGVzcyBncmFudWxhcg0KbGV2ZWwgb2YgYWNjZXNzIGNv bnRyb2wuDQoNClsxXSBObywgdGhlcmUgaXMgc3RpbGwgZGlyZWN0IGNvbW11bmljYXRpb24gYmV0 d2VlbiB0aGUgbWV0YWRhdGEgc2VydmVyIGFuZCB0aGUgZmlsZSBzZXJ2ZXIuDQoNClRoZSBkaWZm ZXJlbmNlIGlzIHRoYXQgaXQgaXMgdmlhIGEgc3RvcmFnZSBwcm90b2NvbCwgaW4gdGhpcyBjYXNl IE5GUy4NCg0KVGhlIGFjY2VzcyBjb250cm9sIGlzIGVuZm9yY2VkIGJ5IHRoZSBtZXRhZGF0YSBz ZXJ2ZXIuIFRoZSBjbGllbnQgb25seSBnZXQgYWNjZXNzDQp0byB0aGUgZmlsZSBpZiBpdCBjYW4g Z2V0IGEgbGF5b3V0LiBUaGUgbGF5b3V0IGNhbiBlaXRoZXIgcHJvdmlkZSByZWFkL3dyaXRlIGFj Y2Vzcw0Kb3Igb25seSByZWFkIGFjY2Vzcy4NCg0KVGhlIG1ldGFkYXRhIHNlcnZlciBjYW4gcmV2 b2tlIHRoYXQgYWNjZXNzIGF0IGFueSBwb2ludCwgc28gaXQgaXMgbm90DQpjb3JyZWN0IHRvIHNh eSB0aGF0IGl0IGRlcGVuZHMgb24gdGhlIGNsaWVudCB0byBlbmZvcmNlIGEgbGVzcyBncmFudWxh ciBsZXZlbA0Kb2YgYWNjZXNzIGNvbnRyb2wuDQoNClRoYW5rcyBmb3IgdGhlIGNsYXJpZmljYXRp b24uIFRvIGEgbm9uLU5GUyBleHBlcnQgdGhlIHJlbGF0aW9uc2hpcCBiZXR3ZWVuIGxheW91dHMg YW5kDQphY2Nlc3MgY29udHJvbCAgd2FzbuKAmXQgb2J2aW91cy4gSSB3b25kZXIgaWYgdGhpcyBk aXNjdXNzaW9uIGNvdWxkIGJlIGFkZGVkIHRvIFNlY3VyaXR5DQpDb25zaWRlcmF0aW9ucz8NCg0K DQpIaSBCcmlhbiwNCg0KSeKAmXZlIGFscmVhZHkgZ290IHRoYXQgKGFuZCB5ZXMsIEkgdW5kZXJz dGFuZCBpdCBpcyBub3Qgc3VmZmljaWVudCBpZiBJIGhhdmUgdG8gc3BlbGwgaXQgb3V0IDotKToN Cg0KMTUuICBTZWN1cml0eSBDb25zaWRlcmF0aW9ucw0KLi4uDQogICBUaGUgbWV0YWRhdGEgc2Vy dmVyIGlzIHByaW1hcmlseSByZXNwb25zaWJsZSBmb3Igc2VjdXJpbmcgdGhlIGRhdGENCiAgIHBh dGguICBJdCBoYXMgdG8gYXV0aGVudGljYXRlIHRoZSBjbGllbnQgYWNjZXNzIGFuZCBwcm92aWRl DQogICBhcHByb3ByaWF0ZSBjcmVkZW50aWFscyB0byB0aGUgY2xpZW50IHRvIGFjY2VzcyBkYXRh IGZpbGVzIG9uIHRoZQ0KICAgc3RvcmFnZSBkZXZpY2UuICBGaW5hbGx5LCBpdCBpcyByZXNwb25z aWJsZSBmb3IgcmV2b2tpbmcgYWNjZXNzIGZvciBhDQogICBjbGllbnQgdG8gdGhlIHN0b3JhZ2Ug ZGV2aWNlLg0KDQogICBUaGUgbWV0YWRhdGEgc2VydmVyIGVuZm9yY2VzIHRoZSBmaWxlIGFjY2Vz cy1jb250cm9sIHBvbGljeSBhdA0KICAgTEFZT1VUR0VUIHRpbWUuICBUaGUgY2xpZW50IHNob3Vs ZCB1c2UgUlBDIGF1dGhvcml6YXRpb24gY3JlZGVudGlhbHMNCiAgIGZvciBnZXR0aW5nIHRoZSBs YXlvdXQgZm9yIHRoZSByZXF1ZXN0ZWQgaW9tb2RlIChSRUFEIG9yIFJXKSBhbmQgdGhlDQogICBz ZXJ2ZXIgdmVyaWZpZXMgdGhlIHBlcm1pc3Npb25zIGFuZCBBQ0wgZm9yIHRoZXNlIGNyZWRlbnRp YWxzLA0KICAgcG9zc2libHkgcmV0dXJuaW5nIE5GUzRFUlJfQUNDRVNTIGlmIHRoZSBjbGllbnQg aXMgbm90IGFsbG93ZWQgdGhlDQogICByZXF1ZXN0ZWQgaW9tb2RlLiAgSWYgdGhlIExBWU9VVEdF VCBvcGVyYXRpb24gc3VjY2VlZHMgdGhlIGNsaWVudA0KICAgcmVjZWl2ZXMsIGFzIHBhcnQgb2Yg dGhlIGxheW91dCwgYSBzZXQgb2YgY3JlZGVudGlhbHMgYWxsb3dpbmcgaXQgSS9PDQogICBhY2Nl c3MgdG8gdGhlIHNwZWNpZmllZCBkYXRhIGZpbGVzIGNvcnJlc3BvbmRpbmcgdG8gdGhlIHJlcXVl c3RlZA0KICAgaW9tb2RlLiAgV2hlbiB0aGUgY2xpZW50IGFjdHMgb24gSS9PIG9wZXJhdGlvbnMg b24gYmVoYWxmIG9mIGl0cw0KICAgbG9jYWwgdXNlcnMsIGl0IE1VU1QgYXV0aGVudGljYXRlIGFu ZCBhdXRob3JpemUgdGhlIHVzZXIgYnkgaXNzdWluZw0KICAgcmVzcGVjdGl2ZSBPUEVOIGFuZCBB Q0NFU1MgY2FsbHMgdG8gdGhlIG1ldGFkYXRhIHNlcnZlciwgc2ltaWxhciB0bw0KICAgaGF2aW5n IE5GU3Y0IGRhdGEgZGVsZWdhdGlvbnMuDQoNCiAgIElmIGFjY2VzcyBpcyBhbGxvd2VkLCB0aGUg Y2xpZW50IHVzZXMgdGhlIGNvcnJlc3BvbmRpbmcgKFJFQUQgb3IgUlcpDQogICBjcmVkZW50aWFs cyB0byBwZXJmb3JtIHRoZSBJL08gb3BlcmF0aW9ucyBhdCB0aGUgZGF0YSBmaWxlJ3Mgc3RvcmFn ZQ0KICAgZGV2aWNlcy4gIFdoZW4gdGhlIG1ldGFkYXRhIHNlcnZlciByZWNlaXZlcyBhIHJlcXVl c3QgdG8gY2hhbmdlIGENCiAgIGZpbGUncyBwZXJtaXNzaW9ucyBvciBBQ0wsIGl0IFNIT1VMRCBy ZWNhbGwgYWxsIGxheW91dHMgZm9yIHRoYXQgZmlsZQ0KICAgYW5kIHRoZW4gTVVTVCBmZW5jZSBv ZmYgYW55IGNsaWVudHMgc3RpbGwgaG9sZGluZyBvdXRzdGFuZGluZyBsYXlvdXRzDQogICBmb3Ig dGhlIHJlc3BlY3RpdmUgZmlsZXMgYnkgaW1wbGljaXRseSBpbnZhbGlkYXRpbmcgdGhlIHByZXZp b3VzbHkNCiAgIGRpc3RyaWJ1dGVkIGNyZWRlbnRpYWwgb24gYWxsIGRhdGEgZmlsZSBjb21wcmlz aW5nIHRoZSBmaWxlIGluDQogICBxdWVzdGlvbi4gIEl0IGlzIFJFUVVJUkVEIHRoYXQgdGhpcyBi ZSBkb25lIGJlZm9yZSBjb21taXR0aW5nIHRvIHRoZQ0KICAgbmV3IHBlcm1pc3Npb25zIGFuZC9v ciBBQ0wuICBCeSByZXF1ZXN0aW5nIG5ldyBsYXlvdXRzLCB0aGUgY2xpZW50cw0KICAgd2lsbCBy ZWF1dGhvcml6ZSBhY2Nlc3MgYWdhaW5zdCB0aGUgbW9kaWZpZWQgYWNjZXNzIGNvbnRyb2wgbWV0 YWRhdGEuDQogICBSZWNhbGxpbmcgdGhlIGxheW91dHMgaW4gdGhpcyBjYXNlIGlzIGludGVuZGVk IHRvIHByZXZlbnQgY2xpZW50cw0KICAgZnJvbSBnZXR0aW5nIGFuIGVycm9yIG9uIEkvT3MgZG9u ZSBhZnRlciB0aGUgY2xpZW50IHdhcyBmZW5jZWQgb2ZmLg0KDQpIb3cgYWJvdXQ6DQoNCiAgIElm IGFjY2VzcyBpcyBhbGxvd2VkLCB0aGUgY2xpZW50IHVzZXMgdGhlIGNvcnJlc3BvbmRpbmcgKFJF QUQgb3IgUlcpDQogICBjcmVkZW50aWFscyB0byBwZXJmb3JtIHRoZSBJL08gb3BlcmF0aW9ucyBh dCB0aGUgZGF0YSBmaWxlJ3Mgc3RvcmFnZQ0KICAgZGV2aWNlcy4g4oCmDQoNCmJlY29tZXMNCg0K ICBUaGUgY29tYmluYXRpb24gb2YgZmlsZSBoYW5kbGUsIHN5bnRoZXRpYyB1aWQsIGFuZCBnaWQg aW4gdGhlIGxheW91dA0KICBhcmUgdGhlIHdheSB0aGF0IHRoZSBtZXRhZGF0YSBzZXJ2ZXIgZW5m b3JjZXMgYWNjZXNzIGNvbnRyb2wgdG8gdGhlDQogIGRhdGEgc2VydmVyLiBUaGUgZGlyZWN0b3J5 IG5hbWVzcGFjZSBvbiB0aGUgc3RvcmFnZSBkZXZpY2UgU0hPVUxEDQogIG9ubHkgYmUgYWNjZXNz aWJsZSB0byB0aGUgbWV0YWRhdGEgc2VydmVyIGFuZCBub3QgdGhlIGNsaWVudHMuIEluIHRoYXQg Y2FzZSwNCiAgdGhlIGNsaWVudCBvbmx5IGhhcyBhY2Nlc3MgdG8gZmlsZSBoYW5kbGVzIG9mIGZp bGUgb2JqZWN0cyBhbmQgbm90DQogIGRpcmVjdG9yeSBvYmplY3RzLiBUaHVzLCBnaXZlbiBhIGZp bGUgaGFuZGxlIGluIGEgbGF5b3V0LCBpdCBpcyBub3QNCiAgcG9zc2libGUgdG8gZ3Vlc3MgdGhl IHBhcmVudCBkaXJlY3RvcnkgZmlsZSBoYW5kbGUuIEZ1cnRoZXIsIGFzIHRoZQ0KICBkYXRhIGZp bGUgcGVybWlzc2lvbnMgb25seSBhbGxvdyB0aGUgZ2l2ZW4gc3ludGhldGljIHVpZCByZWFkL3dy aXRlDQogIHBlcm1pc3Npb24gYW5kIHRoZSBnaXZlbiBzeW50aGV0aWMgZ2lkIHJlYWQgcGVybWlz c2lvbiwga25vd2luZw0KICB0aGUgc3ludGhldGljIGlkcyBvZiBvbmUgZmlsZSBkb2VzIG5vdCBu ZWNlc3NhcmlseSBhbGxvdyBhY2Nlc3MgdG8gYW55DQogIG90aGVyIGRhdGEgZmlsZSBvbiB0aGUg c3RvcmFnZSBkZXZpY2UuDQoNCiAgVGhlIG1ldGFkYXRhIHNlcnZlciBjYW4gYWxzbyBkZW55IGFj Y2VzcyBhdCBhbnkgdGltZSBieSBmZW5jaW5nDQogIHRoZSBkYXRhIGZpbGUsIHdoaWNoIG1lYW5z IGNoYW5naW5nIHRoZSBzeW50aGV0aWMgaWRzLiBJbiB0dXJuLCB0aGF0DQogIGZvcmNlcyB0aGUg Y2xpZW50IHRvIHJldHVybiBpdHMgY3VycmVudCBsYXlvdXQgYW5kIGdldCBhIG5ldyBsYXlvdXQg aWYNCiAgaXQgd2FudHMgdG8gY29udGludWUgSU8gdG8gdGhlIGRhdGEgZmlsZS4NCg0KICBJZiB0 aGUgY29uZmlndXJhdGlvbiBvZiB0aGUgc3RvcmFnZSBkZXZpY2UgaXMgc3VjaCB0aGF0IGNsaWVu dHMNCiAgY2FuIGFjY2VzcyB0aGUgZGlyZWN0b3J5IG5hbWVzcGFjZSwgdGhlbiB0aGUgYWNjZXNz IGNvbnRyb2wNCiAgZGVncmFkZXMgdG8gdGhhdCBvZiBhIHR5cGljYWwgTkZTIHNlcnZlciB3aXRo IGV4cG9ydHMgd2l0aCBhDQogIHNlY3VyaXR5IGZsYXZvciBvZiBBVVRIX1NZUy4gIEFueSBjbGll bnQgd2hpY2ggaXMgYWxsb3dlZA0KICBhY2Nlc3MgY2FuIGZvcmdlIGNyZWRlbnRpYWxzIHRvIGFj Y2VzcyBhbnkgZGF0YSBmaWxlLiBUaGUNCiAgY2F2ZWF0IGlzIHRoYXQgdGhlIHJvZ3VlIGNsaWVu dCBtaWdodCBoYXZlIG5vIGtub3dsZWRnZSBvZg0KICB0aGUgZGF0YSBmaWxl4oCZcyB0eXBlIG9y IHBvc2l0aW9uIGluIHRoZSBtZXRhZGF0YSBkaXJlY3RvcnkNCiAgbmFtZXNwYWNlLg0KDQogICBJ ZiBhY2Nlc3MgaXMgYWxsb3dlZCwgdGhlIGNsaWVudCB1c2VzIHRoZSBjb3JyZXNwb25kaW5nIChS RUFEIG9yIFJXKQ0KICAgY3JlZGVudGlhbHMgdG8gcGVyZm9ybSB0aGUgSS9PIG9wZXJhdGlvbnMg YXQgdGhlIGRhdGEgZmlsZSdzIHN0b3JhZ2UNCiAgIGRldmljZXMuIOKApg0KDQpPciBkbyB5b3Ug d2FudCBtZSB0byBwdWxsIHRoYXQgbmV3IHRleHQgaW50byBhIG5ldyBzdWJzZWN0aW9uIDE1LjEg YW5kDQpzbGFtIHRoZSBvdGhlciBzdWJzZWN0aW9ucyBkb3duPw0KDQoNCllvdXIgdGV4dCBhYm92 ZSBzb3VuZHMgZ3JlYXQgdG8gbWUsIGFuZCBhZGRpbmcgaXQgdG8gc2VjdXJpdHkgIGNvbnNpZGVy YXRpb25zIGFzIHlvdQ0Kc3VnZ2VzdCBpcyBmaW5lLg0KDQoNCg0KDQoNCg0KDQpUaGUgU2VjdXJp dHkgQ29uc2lkZXJhdGlvbnMgc2VjdGlvbiBpcyB3ZWxsLXdyaXR0ZW4gYW5kIGhlbHBmdWwuIEkg ZG8gaGF2ZSBzb21lDQpzdWdnZXN0aW9ucyBmb3IgaW1wcm92aW5nIGl0LCAgYW5kIGFsc28gc29t ZSBxdWVzdGlvbnMuDQoNCigxKSBTZWN0aW9uIDIuMjogc2hvdWxkIHRoZSDigJxyZWNvbW1lbmRl ZOKAnSBpbiB0aGUgTm90ZSBiZSBSRUNPTU1FTkRFRD8NClJlc3RyaWN0aW5nIGFjY2VzcyBjb250 cm9sIHRvIGp1c3Qgc3VwZXJ1c2VyIGhhdmUgYWNjZXNzIHRvIHRoZSBzdG9yYWdlIGRldmljZQ0K c2VlbXMgbGlrZSBhIHZhbHVhYmxlIGFkdmljZS4NCg0Kc3VyZQ0KDQoNCigyKSBTZWN0aW9uIDIu MjogVGhlIE5PVEUgcHJvYmFibHkgc2hvdWxkIHByb3ZpZGUgZ3VpZGFuY2UgcmVnYXJkaW5nIHBy b3RlY3RpbmcNCnRoZSBuZXR3b3JrIGNvbm5lY3Rpb25zIGJldHdlZW4gdGhlIG1ldGFkYXRhIHNl cnZlciBhbmQgdGhlIGZpbGUgc2VydmVyLiBGb3INCmV4YW1wbGUsIHNvbWV0aGluZyBsaWtlOiDi gJxDb21tdW5pY2F0aW9ucyBiZXR3ZWVuIHRoZSBtZXRhZGF0YSBzZXJ2ZXIgYW5kIGZpbGUNCnNl cnZlciBuZWVkIHRvIHNlY3VyZWQuIElmIHRoZXJlIGlzIG5vdCBhZGVxdWF0ZSBwaHlzaWNhbCBz ZWN1cml0eSAoaS5lLiwgdGhlDQpzZXJ2ZXJzIGFyZSBub3QgY28tbG9jYXRlZCBpbiBhIHBoeXNp Y2FsbHkgc2VjdXJlIGFyZWEpLCB0aGVpciBjb21tdW5pY2F0aW9ucw0KTVVTVCBiZSBwcm90ZWN0 ZWQgZm9yIGNvbmZpZGVudGlhbGl0eSAoZS5nLiwgdXNpbmcgVExTIG9yIElQc2VjKS7igJ0NCg0K Tm8sIHRoZSBNVVNUIGlzIHRvbyBzdHJvbmcgaGVyZS4gV2UgY2FuIHJlY29tbWVuZCBwcm9jZWR1 cmVzLCB3ZSBjYW4gbm90IFJFUVVJUkUgdGhlbS4NCg0KSSBhbSBmaW5lIHdpdGg6DQoNCkNvbW11 bmljYXRpb25zIGJldHdlZW4gdGhlIG1ldGFkYXRhIHNlcnZlciBhbmQgZmlsZQ0Kc2VydmVyIFNI T1VMRCBiZSBzZWN1cmVkLiBJZiB0aGVyZSBpcyBub3QgYWRlcXVhdGUgcGh5c2ljYWwgc2VjdXJp dHkgKGkuZS4sIHRoZQ0Kc2VydmVycyBhcmUgbm90IGNvLWxvY2F0ZWQgaW4gYSBwaHlzaWNhbGx5 IHNlY3VyZSBhcmVhKSwgdGhlaXIgY29tbXVuaWNhdGlvbnMNClNIT1VMRCBiZSBwcm90ZWN0ZWQg Zm9yIGNvbmZpZGVudGlhbGl0eSAoZS5nLiwgdXNpbmcgVExTIG9yIElQc2VjKS7igJ0NCg0KSSB1 bmRlcnN0YW5kIHRoZSBoZXNpdGF0aW9uIHRvIG1ha2UgaXQgYSBNVVNULCBiZWNhdXNlIGl04oCZ cyBvbiBhIHByb3RvY29sDQp0aGF0IGlzbuKAmXQgZGVzY3JpYmVkIGluIHRoaXMgZG9jdW1lbnQu IEJ1dCBJIHRoaW5rIGl04oCZcyByZWFzb25hYmxlIHRvIGRlc2NyaWJlDQphIHJpc2sgYW5kIG1h a2UgYSByZXF1aXJlbWVudCB0aGF0IHRoZSByaXNrIGJlIG1pdGlnYXRlZC4NCg0KSSBkbyBub3Qg ZGlzYWdyZWUgd2l0aCB0aGF0IHN0YXRlbWVudC4NCg0KQ2VydGFpbmx5IGl04oCZcyBub3QNCnJl YXNvbmFibGUgdG8gcmVxdWlyZSBhIHBhcnRpY3VsYXIgbWV0aG9kIHRvIGJlIHVzZWQgdG8gcHJv dGVjdCB0aGUgcHJvdG9jb2wNCih3aGljaCBpcyB3aHkgSSBzdWdnZXN0ZWQg4oCcZS5nLiwgdXNp bmcgVExTIG9yIElQc2Vj4oCdIGFib3ZlIHJhdGhlciB0aGFuIOKAnGkuZS7igJ0pLg0KDQpXaXRo IHRvZGF54oCZcyBwZXJ2YXNpdmUgcHJpdmFjeSB0aHJlYXRzIHRvIG5ldHdvcmsgdHJhZmZpYyBp dOKAmXMgaGFyZCB0bw0KanVzdGlmeSBhbGxvd2luZyBtZXRhZGF0YSB0byB0cmF2ZXJzZSB1bnBy b3RlY3RlZCBuZXR3b3JrcyBhcyBjbGVhci10ZXh0DQooaS4uZSwgYXZhaWxhYmxlIHRvICBwYXNz aXZlIGVhdmVzZHJvcHBlcnMpLiBJdOKAmXMgYWxzbyBoYXJkIG9yIHRvIGp1c3RpZnkgYWxsb3dp bmcNCnNlY3VyaXR5LXJlbGV2ZW50IHByb3RvY29scyB0byBiZSB0cmFuc2ZlcnJpbmcgaXQgd2l0 aG91dCBjcnlwdG9ncmFwaGljIGludGVncml0eQ0KcHJvdGVjdGlvbi4gSXQgc2VlbXMgaW1wb3J0 YW50IHRvIHJlbWluZCBwcm90b2NvbCBkZXZlbG9wZXJzIHRoYXQgYm90aA0KY29uY2VybnMgYXJl IGFwcGxpY2FibGUuIEhvdyBhYm91dCBzb21ldGhpbmcgbGlrZSB0aGlzLCB3aGVyZSBtb3JlIHJh dGlvbmFsZQ0KaXMgZ2l2ZW4uIE5vdGUgdGhhdCB0aGUgcmVxdWlyZW1lbnQgdGhhdCB0aGUgcHJv dG9jb2wgbXVzdCBiZSBwcm90ZWN0ZWQsIGJ1dA0Kbm8gcGFydGljdWxhciBtZXRob2Qgb2YgcHJv dGVjdGlvbiBpcyBub3QgbWFuZGF0ZWQuDQoNCiJDb21tdW5pY2F0aW9ucyBiZXR3ZWVuIHRoZSBt ZXRhZGF0YSBzZXJ2ZXIgYW5kIGZpbGUNCnNlcnZlciBNVVNUIGJlIHNlY3VyZSBmcm9tIGVhdmVz ZHJvcHBlcnMgYW5kIG1hbi1pbi10aGUtbWlkZGxlIHByb3RvY29sDQp0YW1wZXJpbmcuIFRoZSBz ZWN1cml0eSBtZWFzdXJlIGNvdWxkIGJlIGR1ZSB0byBwaHlzaWNhbCBzZWN1cml0eSAoZS5nLiwg dGhlDQpzZXJ2ZXJzIGFyZSBjby1sb2NhdGVkIGluIGEgcGh5c2ljYWxseSBzZWN1cmUgYXJlYSks IGZyb20gZW5jcnlwdGVkIGNvbW11bmljYXRpb25zLA0Kb3Igc29tZSBvdGhlciB0ZWNobmlxdWUu 4oCdDQoNCg0KSeKAmW0gc3RpbGwgaGVzaXRhbnQsIGluIHBhcnQgYmVjYXVzZSBJIGNhbuKAmXQg bWFrZSBhbiBpcm9uY2xhZCBydWxlIGFzIGEgc3RhbmRhcmTigJlzDQphdXRob3IgdGhhdCBJIGtu b3cgSSBhbSBnb2luZyB0byB2aW9sYXRlIHdpdGggbXkgb3duIGltcGxlbWVudGF0aW9uLg0KDQpB bHNvLCBJIGtub3cgdGhhdCB0aGVyZSBtaWdodCBiZSBleGlzdGVudCBzdG9yYWdlIGRldmljZXMg d2hpY2ggZG8gbm90IHN1cHBvcnQNCk5GUyBvdmVyIFRMUy9JUHNlYy9ldGMuIFllcywgcGh5c2lj YWwgc2VjdXJpdHkgaXMgdGhlIGFuc3dlciBoZXJlLCBidXQgSSBjYW5ub3QNCmluIGZ1bGwgY29u ZmlkZW5jZSBleHBlY3QgdGhhdCBhbiBhY3R1YWwgZGVwbG95bWVudCBtZWV0cyBhbGwgb2YgdGhl c2UgY3JpdGVyaWEuDQpBdCBzb21lIHBvaW50LCB0aGUgYnVyZGVuIGlzIG9mZiBvZiB0aGUgcHJv dG9jb2wgaW1wbGVtZW50YXRpb24gYW5kIG9udG8gdGhlDQpkZXBsb3ltZW50Lg0KDQpJZiB3ZSBj aGFuZ2UgdGhlIE1VU1QgdG8gYSBTSE9VTEQsIEkgYW0gcGVyZmVjdGx5IGZpbmUgbWFraW5nIHRo ZSBjaGFuZ2UuIDotKQ0KDQoNCkhtbW0uIFdlbGwsIEkgZ3Vlc3Mgd2l0aCB0aGUgcmlza3MgZXhw bGljaXRseSBtZW50aW9uZWQgdGhlcmXigJlzIGxlc3MgaGFybSBpbiBhDQpTSE9VTEQuIElmIHlv deKAmXJlIE9LIHdpdGggdGhlIHJlc3Qgb2YgdGhlIHdvcmRpbmcsIGdvIGFoZWFkIGFuZCBzdWJz dGl0dXRlIHRoZQ0KU0hPVUxEIGZvciB0aGUgTVVTVC4NCg0KDQpUaGFua3MsDQpCcmlhbg0KDQoN Cg0KDQoNCigzKSBGcm9tIHRoZSBkZXNjcmlwdGlvbiBvZiBzeW50aGV0aWMgdWlkcy9naWRzIGlu IFNlY3Rpb24gMi4yLCBJIGJlbGlldmUgdGhhdA0KdGhlIGZ1bGwgcmFuZ2Ugb2YgZmlsZSBwZXJt aXNzaW9ucyAoZS5nLiwgb3duZXIgci93L3gpICBpcyBob25vcmVkIGluIHRoZQ0KdGlnaHRseSBj b3VwbGVkIG1vZGVsLCBidXQgYXJlIHJlc3RyaWN0ZWQgaW4gdGhlIGxvb3NlbHkgY291cGxlZCBt b2RlbCB0bw0K4oCcb3duZXIgci934oCdLCDigJxncm91cCBy4oCdLiBJZiB0aGF0IGlzIGNvcnJl Y3QsIEkgdGhpbmsgdGhlIHNlY3VyaXR5IGNvbnNpZGVyYXRpb25zDQpzaG91bGQgZXhwbGljaXRs eSBtZW50aW9uIHRoYXQgdGhlIGVmZmVjdCBvZiBhY2Nlc3MgcGVybWlzc2lvbnMgaXMgcmVkdWNl ZCBvbg0KdGhlIGZpbGUgc2VydmVyIGZpbGVzLg0KDQpbMl0gSSB0aGluayB0aGUgY29uZnVzaW9u IGhlcmUgaXMgdGhhdCB0aGUgZmlsZXMgb24gc3RvcmFnZSBkZXZpY2UgYXJlIG5vdA0KaW4gdGhl IGZpbGUgaGllcmFyY2h5IGFzIHNlZW4gb24gdGhlIG1ldGFkYXRhIHNlcnZlci4NCg0KT24gYSBm aWxlIGJ5IGZpbGUgYmFzaXMgb24gdGhlIHN0b3JhZ2UgZGV2aWNlLCB3ZSBhcmUgZ2l2aW5nIHRo ZSBjbGllbnQgZWl0aGVyDQp3cml0ZSBtb2RpZmljYXRpb24gYWNjZXNzLCByZWFkIGFjY2Vzcywg b3Igbm8gYWNjZXNzIGF0IGFsbC4gVGhlIGNsaWVudCBjYW5ub3QNCnJlbW92ZSB0aGUgZmlsZSAo aXQgd291bGQgbmVlZCB0byBrbm93IHRoZSBwYXJlbnQgZGlyZWN0b3J5IEZIIGFuZCB0aGUNCm5h bWUgb2YgdGhlIGZpbGUgLSBuZWl0aGVyIG9mIHdoaWNoIGl0IGhhcykuICBJdCBjYW4gZWZmZWN0 aXZlbHkgcmVtb3ZlIHRoZSBjb250ZW50DQppZiBpdCBoYXMgd3JpdGUgcGVybWlzc2lvbiAoYnV0 IG5vdGhpbmcgd291bGQgcHJldmVudCB0aGlzIGluIGEgdGlnaHRseQ0KY291cGxlZCBtb2RlbCku DQoNCkdvdCBpdCwgdGhhbmtzLg0KDQoNCg0KDQoNCg0KKDQpIFNlY3Rpb24gMi4yLiBJbiB0aGlz IHBocmFzZSDigJxpdCBtYXkgYmUgYXNzaWduZWQgc29tZSByYW5kb20gc3ludGhldGljDQp1aWQv Z2lkIHRvIGRlbnkgYWNjZXNz4oCdLCB3b3VsZCBhIGJldHRlciB3b3JkIGZvciDigJxyYW5kb23i gJ0gYmUg4oCcdW51c2Vk4oCdIG9yDQrigJx1bnByZWRpY3RhYmxl4oCdPyBBbHNvIHdoYXQgaXMg dGhlIHNlY3VyaXR5IHZhbHVlIGludGVuZGVkIGJ5IHRoZSB1c2Ugb2YgYQ0K4oCccmFuZG9t4oCd IHZhbHVlIGZvciBzeW50aGV0aWMgdWlkcy9naWRzPw0KDQoNCkluIGFuIGVhcmxpZXIgcmV2aWV3 IChieSBMaW5kYSBEdW5iYXIpLCB0aGF0IHBocmFzZSB3YXMgY2hhbmdlZDoNCg0KDQogT24gdGhl IHN0b3JhZ2UgZGV2aWNlLCBpdCBtYXkgYmUgYXNzaWduZWQgc29tZSByYW5kb20gc3ludGhldGlj IHVpZC8NCiBnaWQgdG8gZGVueSBhY2Nlc3M6DQoNCiAtcnctci0tLS0tICAgIDEgMTk0NTIgICAy ODQxOCAgICAxNjk3IERlYyAgNCAxMTozMSBkYXRhX29tcGhhLmMNCg0KIFdoZW4gdGhlIGZpbGUg aXMgb3BlbmVkIG9uIGEgY2xpZW50IGFuZCBhY2Nlc3NlZCwgaXQgd2lsbCB0cnkgdG8gZ2V0IGEN CiBsYXlvdXQgZm9yIHRoZSBkYXRhIGZpbGUuIFNpbmNlIHRoZSBsYXlvdXQga25vd3Mgbm90aGlu Zw0KIGFib3V0IHRoZSB1c2VyIChhbmQgZG9lcyBub3QgY2FyZSksIHdoZXRoZXIgdGhlIHVzZXIg bG9naHlyIG9yDQogZ2FyYm8gb3BlbnMgdGhlIGZpbGUgZG9lcyBub3QgbWF0dGVyLiAgVGhlIGNs aWVudCBoYXMgdG8gcHJlc2VudA0KIGFuIHVpZCBvZiAxOTQ1MiB0byBnZXQgd3JpdGUgcGVybWlz c2lvbi4gSWYgaXQgcHJlc2VudHMgYW55IG90aGVyDQogdmFsdWUgZm9yIHRoZSB1aWQsIHRoZW4g aXQgbXVzdCBnaXZlIGEgZ2lkIG9mIDI4NDE4IHRvIGdldCByZWFkDQogYWNjZXNzLg0KDQogRnVy dGhlciwgaWYgdGhlIG1ldGFkYXRhIHNlcnZlciBkZWNpZGVzIHRvIGZlbmNlIHRoZSBmaWxlLCBp dCBtYXkNCiBjaGFuZ2UgdGhlIHVpZCBhbmQgZ2lkIGFzIHN1Y2g6DQoNCiAtcnctci0tLS0tICAg IDEgMTk0NTMgICAyODQxOSAgICAxNjk3IERlYyAgNCAxMTozMSBkYXRhX29tcGhhLmMNCg0KDQpX aGF0IHdlIGNvdWxkIHN1Z2dlc3Qgd291bGQgYmUgc29tZXRoaW5nIGFsb25nIHRoZSBsaW5lcyBv ZjoNCg0KIE9uIHRoZSBzdG9yYWdlIGRldmljZSwgaXQgbWF5IGJlIGFzc2lnbmVkIHNvbWUgdW5w cmVkaWN0YWJsZQ0KIHN5bnRoZXRpYyB1aWQvZ2lkIHRvIGRlbnkgYWNjZXNzLg0KIOKApg0KIEZ1 cnRoZXIsIGlmIHRoZSBtZXRhZGF0YSBzZXJ2ZXIgZGVjaWRlcyB0byBmZW5jZSB0aGUgZmlsZSwg aXQNCiBzaG91bGQgY2hhbmdlIHRoZSB1aWQgYW5kL29yIGdpZCBzdWNoIHRoYXQgdGhlc2UgdmFs dWVzDQogbmVpdGhlciBtYXRjaCBlYXJsaWVyIHZhbHVlcyBmb3IgdGhhdCBmaWxlIG5vciBtYXRj aA0KIGEgcHJlZGljdGFibGUgY2hhbmdlIGJhc2VkIG9uIGFuIGVhcmxpZXIgZmVuY2luZy4NCg0K VWdoLCBub3Qgc3VyZSBJIGxpa2UgdGhlIHdvcmRzLg0KDQp1aWRbTisxXSAhPSB1aWRbTi0xXSAm JiB1aWRbTisxXSAgIT0gY2hhbmdlKHVpZFtOLTFdIC0+IHVpZFtOXSkuDQoNCkkuZS4sIGRvIG5v dCBzZXQgdG8gcmVjZW50IG9sZCB2YWx1ZXMgKG1pZ2h0IGZlbmNlIGJhY2sgdG8gYW4gdWlkDQph biBvbGRlciBjbGllbnQgYWxyZWFkeSBoYXMpIGFuZCBkbyBub3QgdXNlIGEgZml4ZWQgaW5jcmVt ZW50Lg0KDQpTbyBtYXliZSBpbiB0aGUgZmlyc3QgcGFyYWdyYXBoIHlvdSBtZWFuIOKAnOKApiBz b21lIHVucHJlZGljdGFibGUgYW5kDQp1bnVzZWQgYnkgYW55IGN1cnJlbnQgY2xpZW504oCdPw0K DQoNCg0KKDUpIEluIHRoZSDigJxsb29zZSBjb3VwbGluZyBtb2RlbOKAnSBmaWxlIGFjY2VzcyBh Y3R1YWxseSBlbmZvcmNlZCBieSB0aGUgY2xpZW50LA0Kd2hpY2ggcHJlc3VtYWJseSBjYW4gYmUg bWFuaXB1bGF0ZWQgYnkgYW4gZXZpbCB1c2VyLiBUaGlzIGlzIGNsZWFybHkgc3RhdGVkIG4NClNl Y3Rpb24gMi4yOiDigJwgVGhlIGNsaWVudCBpcyB0aHVzIHNvbGVseSByZXNwb25zaWJsZSBmb3Ig ZW5mb3JjaW5nIGZpbGUNCnBlcm1pc3Npb25zIGluIGEgbG9vc2VseSBjb3VwbGVkIG1vZGVsLuKA nSAgQWxzbywgU2VjdGlvbiAyLjIuMSBtZW50aW9ucyDigJxhDQpTRVRBVFRSIHdvdWxkIGJlIHNl bnQgdG8gdGhlIHN0b3JhZ2UgZGV2aWNlIHRvIHNldCB0aGUgb3duZXIgYW5kIGdyb3VwIG9mIHRo ZQ0KZGF0YSBmaWxl4oCdLCBhbmQgc2luY2UgaGVyZSBpcyBubyBjb250cm9sIHByb3RvY29sIGJl dHdlZW4gdGhlIG1ldGFkYXRhIHNlcnZlcg0KYW5kIHRoZSBmaWxlIHNlcnZlciBzbyBJIGFzc3Vt ZSBpdCBpcyBzZW50IGJ5IHRoZSBjbGllbnQuDQoNCkl0IGlzIHN1YnRsZSwgYnV0IHRoaXMgZ29l cyBiYWNrIHRvIHRoZSBmYWN0IChzZWUgWzFdKSB0aGF0IOKAnG5vIGNvbnRyb2wgcHJvdG9jb2zi gJ0gZG9lcyBub3QNCmltcGx5IOKAnG5vIGNvbW11bmljYXRpb24gYmV0d2VlbiB0aGUgbWV0YWRh dGEgc2VydmVyIGFuZCB0aGUgc3RvcmFnZQ0KZGV2aWNl4oCdLiAgSS5lLiwgdGhlIE1EUyBkb2Vz IHRoZSBTRVRBVFRSLg0KDQpBbHNvLCBJIG5vdGljZSB5b3UgYXJlIHVzaW5nIHRoZSBwaHJhc2Ug 4oCcZmlsZSBzZXJ2ZXLigJ0sIHdoaWNoIHByb2JhYmx5IGltcGFjdHMNCnlvdXIgdmlldyBpbiB5 b3VyIHBvaW50IDMgKHNlZSBteSBbMl0pIC0gdGhlIHRlcm0gd2UgdXNlIGlzIHN0b3JhZ2UNCmRl dmljZS4gVGhlcmUgaXMgbm8gcmVxdWlyZW1lbnQgdGhhdCB0aGlzIGRldmljZSBzZXJ2ZSB1cCBk YXRhIGZpbGVzDQphcyBpZiB0aGV5IHdlcmUgaW4gYSBmaWxlc3lzdGVtLiBUaGUgc3RvcmFnZSBk ZXZpY2UgaXMgbGltaXRlZCBpbiB0aGUgb3BlcmF0aW9ucw0KdGhhdCBpdCBjYW4gcmVzcG9uZCB0 byBmcm9tIHRoZSBjbGllbnQgYmFzZWQgb24gdGhlIGluZm9ybWF0aW9uIGl0IGlzDQpwcmVzZW50 ZWQgd2l0aC4NCg0KRm9yIGV4YW1wbGUsIHRoZSBleHBvcnRzIG9uIHRoZSBzdG9yYWdlIGRldmlj ZSBjYW4gYmUgY29uZmlndXJlZCBzdWNoDQp0aGF0IHRoZSBtZXRhZGF0YSBzZXJ2ZXIgaXMgdGhl IG9ubHkgb25lIHdoaWNoIGNhbiBtb3VudCB0aGUgZXhwb3J0cy4NCkFuZCBzaW5jZSB0aGUgbWV0 YWRhdGEgc2VydmVyIG9ubHkgaGFuZHMgb3V0IEZpbGUgSGFuZGxlcyB0byB0aGUNCmNsaWVudHMs IHRoZXkgd291bGQgbm90IGJlIGFibGUgdG8gd2FsayB0aGUgbmFtZXNwYWNlIG9mIHRoZSBzdG9y YWdlDQpkZXZpY2UuDQoNClRoYW5rcyBmb3IgdGhlIGV4cGxhbmF0aW9uIOKApiBtYWtlcyBzZW5z ZS4NCg0KDQoNClB1dCBhbm90aGVyIHdheSwgaXQgc2VlbXMgYXMgaWYgYW55IGNsaWVudCB0aGF0 IGhhcyBjcmVkZW50aWFscyBhbGxvd2luZyBpdCB0bw0KYWNjZXNzIHRvIHRoZSBmaWxlIHNlcnZl ciBjYW4gYWNjZXNzIGFueSBmaWxlIG9uIHRoZSBmaWxlIHN5c3RlbSBpZiBpdCBpcw0KY2hvb3Nl cyB0byBkbyBzbyAoZS5nLi4sIGlmIGl0IGlzIGEgbWFsaWNpb3VzIGNsaWVudCkuIElzIHRoYXQg Y29ycmVjdD8NCg0KQXMgd2l0aCBhbnkgTkZTIGZpbGVzeXN0ZW0gd2hpY2ggdXNlcyBhbiBBVVRI X1NZUyBzZWN1cml0eSBtb2RlbCwNCmVhY2ggb2YgdGhlIGZpbGUgaGFuZGxlLCB1aWQsIGFuZCBn aWQgY2FuIGJlIGZvcmdlZCB0byBnYWluIGFjY2Vzcy4NCg0KSW4gb3RoZXIgd29yZHMsIHRoaXMg aXMgbm90aGluZyBuZXcuDQoNClRoZSBzZWN1cml0eSBtb2RlbCBmb3IgTkZTdjQuMiAoYW5kIGJh c2VkIG9uIHRoYXQsIE5GU3Y0LjAgYW5kIE5GU3Y0LjEpOg0KDQpbUkZDNzg2Ml0NCjE3LiAgU2Vj dXJpdHkgQ29uc2lkZXJhdGlvbnMNCg0KICBORlN2NC4yIGhhcyBhbGwgb2YgdGhlIHNlY3VyaXR5 IGNvbmNlcm5zIHByZXNlbnQgaW4gTkZTdjQuMSAoc2VlDQogIFNlY3Rpb24gMjEgb2YgW1JGQzU2 NjFdKSwgYXMgd2VsbCBhcyB0aG9zZSBwcmVzZW50IGluIHRoZSBzZXJ2ZXItc2lkZQ0KICBjb3B5 IChzZWUgU2VjdGlvbiA0LjkpIGFuZCBpbiBMYWJlbGVkIE5GUyAoc2VlIFNlY3Rpb24gOS42KS4N Cg0KV2hpY2ggbGVhZHMgdXMgdG8gW1JGQzU2NjFdOg0KDQoyLjIuMS4xLjEuMi4gIFNlY3VyaXR5 IE1lY2hhbmlzbXMgZm9yIE5GU3Y0LjENCg0KICBSUENTRUNfR1NTLCB2aWEgR1NTLUFQSSwgbm9y bWFsaXplcyBhY2Nlc3MgdG8gbWVjaGFuaXNtcyB0aGF0IHByb3ZpZGUNCiAgc2VjdXJpdHkgc2Vy dmljZXMuICBUaGVyZWZvcmUsIE5GU3Y0LjEgY2xpZW50cyBhbmQgc2VydmVycyBNVVNUDQogIHN1 cHBvcnQgdGhlIEtlcmJlcm9zIFY1IHNlY3VyaXR5IG1lY2hhbmlzbS4NCg0KICBUaGUgdXNlIG9m IFJQQ1NFQ19HU1MgcmVxdWlyZXMgc2VsZWN0aW9uIG9mIG1lY2hhbmlzbSwgcXVhbGl0eSBvZg0K ICBwcm90ZWN0aW9uIChRT1ApLCBhbmQgc2VydmljZSAoYXV0aGVudGljYXRpb24sIGludGVncml0 eSwgcHJpdmFjeSkuDQogIEZvciB0aGUgbWFuZGF0ZWQgc2VjdXJpdHkgbWVjaGFuaXNtcywgTkZT djQuMSBzcGVjaWZpZXMgdGhhdCBhIFFPUCBvZg0KICB6ZXJvIGlzIHVzZWQsIGxlYXZpbmcgaXQg dXAgdG8gdGhlIG1lY2hhbmlzbSBvciB0aGUgbWVjaGFuaXNtJ3MNCiAgY29uZmlndXJhdGlvbiB0 byBtYXAgUU9QIHplcm8gdG8gYW4gYXBwcm9wcmlhdGUgbGV2ZWwgb2YgcHJvdGVjdGlvbi4NCiAg RWFjaCBtYW5kYXRlZCBtZWNoYW5pc20gc3BlY2lmaWVzIGEgbWluaW11bSBzZXQgb2YgY3J5cHRv Z3JhcGhpYw0KICBhbGdvcml0aG1zIGZvciBpbXBsZW1lbnRpbmcgaW50ZWdyaXR5IGFuZCBwcml2 YWN5LiAgTkZTdjQuMSBjbGllbnRzDQogIGFuZCBzZXJ2ZXJzIE1VU1QgYmUgaW1wbGVtZW50ZWQg b24gb3BlcmF0aW5nIGVudmlyb25tZW50cyB0aGF0IGNvbXBseQ0KICB3aXRoIHRoZSBSRVFVSVJF RCBjcnlwdG9ncmFwaGljIGFsZ29yaXRobXMgb2YgZWFjaCBSRVFVSVJFRA0KICBtZWNoYW5pc20u DQoNCjIuMi4xLjEuMS4yLjEuICBLZXJiZXJvcyBWNQ0KDQogIFRoZSBLZXJiZXJvcyBWNSBHU1Mt QVBJIG1lY2hhbmlzbSBhcyBkZXNjcmliZWQgaW4gWzVdIE1VU1QgYmUNCiAgaW1wbGVtZW50ZWQg d2l0aCB0aGUgUlBDU0VDX0dTUyBzZXJ2aWNlcyBhcyBzcGVjaWZpZWQgaW4gdGhlDQogIGZvbGxv d2luZyB0YWJsZToNCg0KVG8gcGFyYXBocmFzZSBpdCwgTkZTdjQueCBjbGllbnRzIGFuZCBzZXJ2 ZXJzIE1VU1Qgc3VwcG9ydA0KdGhlIEtlcmJlcm9zIFY1IHNlY3VyaXR5IG1lY2hhbmlzbSwgYnV0 IGluc3RhbGxhdGlvbnMgYXJlIG5vdA0KcmVxdWlyZWQgdG8gdXNlIEtlcmJlcm9zLg0KDQpJLmUu LCB0aGlzOg0KDQptb3VudCAtbyB2ZXJzPTQuMixzZWM9c3lzIHNlcnZlcjovIC9tbnQNCg0KbWVh bnMgdGhhdCBhbnkgbWFsaWNpb3VzIHVzZXIgY2FuIHVzZSBhbnkgY2xpZW50IHdoaWNoIGNhbiBj b25uZWN0DQp0byB0aGUgc2VydmVyIHRvIGRvIHdoYXRldmVyIHRoZXkgd2FudC4NCg0KSW4gb3Ro ZXIgd29yZHMsIHRoaXMgaXMgbm90IGEgcmVkdWN0aW9uIG9mIHRoZSBhY3R1YWwgc2VjdXJpdHkg ZnJvbSBORlN2NC54Lg0KDQpUaGFua3MgZm9yIHRoZSBleHRlbnNpdmUgZXhwbGFuYXRpb24uIEl0 IHJlc29sdmVzIHRoZSBpc3N1ZSB0aGF0IEkgcGVyY2VpdmVkLg0KDQpUaGFua3MsDQpCcmlhbg0K DQoNCg0KDQpVbmxlc3MgSeKAmW0gbWlzdGFrZW4sIHRoaXMgaXMgYSBzZXJpb3VzIHJlZHVjdGlv biBvZiBhY3R1YWwgc2VjdXJpdHkgZnJvbSBORlMNCjQueCwgYW5kIGFsc28gZnJvbSB0aGUgdGln aHQgY291cGxpbmcgbW9kZWwuIFRoaXMgc2hvdWxkIGJlIGNsZWFybHkgc3RhdGVkIGluDQp0aGUg c2VjdXJpdHkgY29uc2lkZXJhdGlvbnMgc2VjdGlvbiwgc28gdGhhdCBwcm90b2NvbCBhZG9wdGVy cyBhbmQgdXNlcnMNCnVuZGVyc3RhbmQgdGhlIGFkZGl0aW9uYWwgcmlza3Mgb2YgdGhlIGxvb3Nl IGNvdXBsaW5nIG1vZGVsLiBGb3IgdGhpcyAgcmVhc29uLA0KSSd2ZSBtYXJrZWQgdGhlIHJldmll dyB3aXRoICJIYXMgSXNzdWVzIiByYXRoZXIgdGhhbiAiSGFzIE5pdHMiLg0KDQpfX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KbmZzdjQgbWFpbGluZyBsaXN0 DQpuZnN2NEBpZXRmLm9yZzxtYWlsdG86bmZzdjRAaWV0Zi5vcmc+DQpodHRwczovL3d3dy5pZXRm Lm9yZy9tYWlsbWFuL2xpc3RpbmZvL25mc3Y0DQoNCi0tDQpCcmlhbiBXZWlzDQpTZWN1cml0eSwg Q1NHLCBDaXNjbyBTeXN0ZW1zDQpUZWxlcGhvbmU6ICsxIDQwOCA1MjYgNDc5Ng0KRW1haWw6IGJl d0BjaXNjby5jb208bWFpbHRvOmJld0BjaXNjby5jb20+DQoNCi0tDQpCcmlhbiBXZWlzDQpTZWN1 cml0eSwgQ1NHLCBDaXNjbyBTeXN0ZW1zDQpUZWxlcGhvbmU6ICsxIDQwOCA1MjYgNDc5Ng0KRW1h aWw6IGJld0BjaXNjby5jb208bWFpbHRvOmJld0BjaXNjby5jb20+DQoNCg== --_000_B541D533FCBA45B08C3576A9FA320074ciscocom_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgLXdlYmtpdC1saW5lLWJy ZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsiIGNsYXNzPSIiPg0KSGkgVGhvbWFzLA0KPGRpdiBjbGFz cz0iIj48YnIgY2xhc3M9IiI+DQo8ZGl2Pg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9 IiI+DQo8ZGl2IGNsYXNzPSIiPk9uIEphbiAxNiwgMjAxOCwgYXQgNzo1NiBQTSwgVGhvbWFzIEhh eW5lcyAmbHQ7PGEgaHJlZj0ibWFpbHRvOmxvZ2h5ckBwcmltYXJ5ZGF0YS5jb20iIGNsYXNzPSIi PmxvZ2h5ckBwcmltYXJ5ZGF0YS5jb208L2E+Jmd0OyB3cm90ZTo8L2Rpdj4NCjxiciBjbGFzcz0i QXBwbGUtaW50ZXJjaGFuZ2UtbmV3bGluZSI+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iQXBw bGUtaW50ZXJjaGFuZ2UtbmV3bGluZSI+DQo8YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5 OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZh cmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzog bm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zv cm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0 LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNz PSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQt c3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5v cm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgb3JwaGFuczogYXV0bzsgdGV4dC1hbGlnbjog c3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFj ZTogbm9ybWFsOyB3aWRvd3M6IGF1dG87IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQt c2l6ZS1hZGp1c3Q6IGF1dG87IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPGRp diBjbGFzcz0iIj5PbiBKYW4gMTIsIDIwMTgsIGF0IDM6NTQgUE0sIEJyaWFuIFdlaXMgKGJldykg Jmx0OzxhIGhyZWY9Im1haWx0bzpiZXdAY2lzY28uY29tIiBjbGFzcz0iIj5iZXdAY2lzY28uY29t PC9hPiZndDsgd3JvdGU6PC9kaXY+DQo8YnIgY2xhc3M9IkFwcGxlLWludGVyY2hhbmdlLW5ld2xp bmUiPg0KPGRpdiBjbGFzcz0iIj48c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhl bHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFu dC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3Jt YWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTog bm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4 dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0 YW50OyI+SGkNCiBUaG9tYXMsPC9zcGFuPg0KPGRpdiBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1p bHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQt dmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5n OiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5z Zm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJr aXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPGJyIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0i Ij4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj5PbiBK YW4gMTIsIDIwMTgsIGF0IDExOjQxIEFNLCBUaG9tYXMgSGF5bmVzICZsdDs8YSBocmVmPSJtYWls dG86bG9naHlyQHByaW1hcnlkYXRhLmNvbSIgY2xhc3M9IiI+bG9naHlyQHByaW1hcnlkYXRhLmNv bTwvYT4mZ3Q7IHdyb3RlOjwvZGl2Pg0KPGJyIGNsYXNzPSJBcHBsZS1pbnRlcmNoYW5nZS1uZXds aW5lIj4NCjxkaXYgY2xhc3M9IiI+PHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBI ZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlh bnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9y bWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06 IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRl eHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9y dGFudDsiPkhpDQogQnJpYW4sPC9zcGFuPjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6 IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFy aWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBu b3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9y bTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQt dGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWls eTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12 YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6 IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNm b3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtp dC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1m YW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZv bnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFj aW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRy YW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13 ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGlu ZSAhaW1wb3J0YW50OyI+VGhhbmtzDQogZm9yIHRoZSByZXZpZXcgLSBjb21tZW50cyBpbmxpbmUu Ljwvc3Bhbj48YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQt c2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFs OyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWdu OiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNw YWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRo OiAwcHg7Ij4NCjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9u dC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3Jt YWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxp Z246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUt c3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lk dGg6IDBweDsiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiIgc3R5bGU9ImZvbnQt ZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBm b250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3Bh Y2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10 cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAt d2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCk9uIEphbiAxMiwgMjAxOCwgYXQgMTA6 NDUgQU0sIEJyaWFuIFdlaXMgJmx0OzxhIGhyZWY9Im1haWx0bzpiZXdAY2lzY28uY29tIiBjbGFz cz0iIj5iZXdAY2lzY28uY29tPC9hPiZndDsgd3JvdGU6PGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNz PSIiPg0KUmV2aWV3ZXI6IEJyaWFuIFdlaXM8YnIgY2xhc3M9IiI+DQpSZXZpZXcgcmVzdWx0OiBI YXMgSXNzdWVzPGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KSSBoYXZlIHJldmlld2VkIHRo aXMgZG9jdW1lbnQgYXMgcGFydCBvZiB0aGUgc2VjdXJpdHkgZGlyZWN0b3JhdGUncyBvbmdvaW5n PGJyIGNsYXNzPSIiPg0KZWZmb3J0IHRvIHJldmlldyBhbGwgSUVURiBkb2N1bWVudHMgYmVpbmcg cHJvY2Vzc2VkIGJ5IHRoZSBJRVNHLiBUaGVzZSBjb21tZW50czxiciBjbGFzcz0iIj4NCndlcmUg d3JpdHRlbiBwcmltYXJpbHkgZm9yIHRoZSBiZW5lZml0IG9mIHRoZSBzZWN1cml0eSBhcmVhIGRp cmVjdG9ycy4gRG9jdW1lbnQ8YnIgY2xhc3M9IiI+DQplZGl0b3JzIGFuZCBXRyBjaGFpcnMgc2hv dWxkIHRyZWF0IHRoZXNlIGNvbW1lbnRzIGp1c3QgbGlrZSBhbnkgb3RoZXIgbGFzdCBjYWxsPGJy IGNsYXNzPSIiPg0KY29tbWVudHMuPGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KVGhpcyBk b2N1bWVudCBkZWZpbmVzIHRoZSBQYXJhbGxlbCBOZXR3b3JrIEZpbGUgU3lzdGVtIChwTkZTKSwg d2hpY2ggYWxsb3dzIGE8YnIgY2xhc3M9IiI+DQpzdG9yYWdlIHN5c3RlbSB0byBzdG9yZSB0aGUg bWV0YWRhdGEgZm9yIGZpbGVzIG9udG8gYSBtZXRhZGF0YSBzZXJ2ZXIsIGFuZCBkYXRhPGJyIGNs YXNzPSIiPg0Kb2YgdGhhdCBmaWxlIG9udG8gYSBzZXBhcmF0ZSBzdG9yYWdlIGRldmljZS4gVGhl IGRvY3VtZW50IGZvY3VzZXMgb24gdGhlPGJyIGNsYXNzPSIiPg0KaW50ZXJhY3Rpb24gYmV0d2Vl biB0aGUgdHdvIHR5cGVzIG9mIHNlcnZlcnMsIGFuZCB0aGUgcmVxdWlyZW1lbnRzIG9mIGNsaWVu dHM8YnIgY2xhc3M9IiI+DQp1c2luZyBhIHBORlMgc3lzdGVtLjxiciBjbGFzcz0iIj4NCjxiciBj bGFzcz0iIj4NClRoZSBkb2N1bWVudCBkZXNjcmliZXMgdHdvIG1vZGVscyBieSB3aGljaCB0aGUg bWV0YWRhdGEgc2VydmVyIGFuZCBmaWxlIHN0b3JhZ2U8YnIgY2xhc3M9IiI+DQpzZXJ2ZXIgY2Fu IGNvbW11bmljYXRlLiBPbmUgaXMgYSDigJx0aWdodCBjb3VwbGluZyBtb2RlbOKAnSwgaW4gd2hp Y2ggdGhlIHR3byB0eXBlczxiciBjbGFzcz0iIj4NCm9mIHNlcnZlcnMgZGlyZWN0bHkgY29tbXVu aWNhdGUuIEluIHRoaXMgbW9kZWwgdGhlIG1ldGFkYXRhIHNlcnZlciBjYW4gZW5zdXJlPGJyIGNs YXNzPSIiPg0KdGhhdCBmaWxlIGFjY2VzcyBjb250cm9sIHN0YXRlIGlzIHN5bmNocm9uaXplZCBi ZXR3ZWVuIHRoZSB0d28gc2VydmVycywgYW5kIEk8YnIgY2xhc3M9IiI+DQpiZWxpZXZlIHRoYXQg bGV2ZWwgb2YgYWNjZXNzIGNvbnRyb2wgaXMgZXF1aXZhbGVudCB0byBORlMgdjQueCB0b2RheS4g RnJvbSBhPGJyIGNsYXNzPSIiPg0Kc2VjdXJpdHkgY29uc2lkZXJhdGlvbnMgcGVyc3BlY3RpdmUs IHRoaXMgaXMgcGVyaGFwcyBiZXN0IHN1bW1hcml6ZWQgaW4gU2VjdGlvbjxiciBjbGFzcz0iIj4N CjIuMjo8YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQrigJxXaXRoIHRpZ2h0bHkgY291cGxl ZCBzdG9yYWdlIGRldmljZXMsIHRoZSBtZXRhZGF0YSBzZXJ2ZXIgc2V0cyB0aGU8YnIgY2xhc3M9 IiI+DQombmJzcDt1c2VyIGFuZCBncm91cCBvd25lcnMsIG1vZGUgYml0cywgYW5kIEFDTCBvZiB0 aGUgZGF0YSBmaWxlIHRvIGJlIHRoZTxiciBjbGFzcz0iIj4NCiZuYnNwO3NhbWUgYXMgdGhlIG1l dGFkYXRhIGZpbGUuICZuYnNwO0FuZCB0aGUgY2xpZW50IG11c3QgYXV0aGVudGljYXRlIHdpdGgg dGhlPGJyIGNsYXNzPSIiPg0KJm5ic3A7c3RvcmFnZSBkZXZpY2UgYW5kIGdvIHRocm91Z2ggdGhl IHNhbWUgYXV0aG9yaXphdGlvbiBwcm9jZXNzIGl0IHdvdWxkPGJyIGNsYXNzPSIiPg0KJm5ic3A7 Z28gdGhyb3VnaCB2aWEgdGhlIG1ldGFkYXRhIHNlcnZlci7igJ08YnIgY2xhc3M9IiI+DQo8YnIg Y2xhc3M9IiI+DQpUaGUgb3RoZXIgbW9kZWwgaXMgYSDigJxsb29zZSBjb3VwbGluZyBtb2RlbOKA nSwgaW4gd2hpY2ggdGhlIGNsaWVudCBpczxiciBjbGFzcz0iIj4NCmF1dGhlbnRpY2F0ZWQgYW5k IGF1dGhvcml6ZWQgYnkgdGhlIG1ldGFkYXRhIHNlcnZlciwgYW5kIGlzIGdpdmVuIGFjY2VzcyB0 byB0aGU8YnIgY2xhc3M9IiI+DQpmaWxlIHNlcnZlciB0aHJvdWdoIHRoZSB1c2UgY3JlZGVudGlh bHMuIEhvd2V2ZXIsIHRoZXJlIGlzIG5vIGRpcmVjdDxiciBjbGFzcz0iIj4NCmNvbW11bmljYXRp b25zIGJldHdlZW4gdGhlIG1ldGFkYXRhIHNlcnZlciBhbmQgdGhlIGZpbGUgc2VydmVyLiBUaGUg bWV0YWRhdGE8YnIgY2xhc3M9IiI+DQpzZXJ2ZXIgZG9lcyBub3Qgc2VlbSB0byBwcm92aWRlIGEg ZmluZSBncmFpbmVkIGFjY2VzcyBjb250cm9sIHRvIGZpbGVzIG9uIHRoZTxiciBjbGFzcz0iIj4N CmZpbGUgc2VydmVyLCBidXQgaW5zdGVhZCByZWxpZXMgdXBvbiB0aGUgY2xpZW50IHRvIGVuZm9y Y2UgYSBsZXNzIGdyYW51bGFyPGJyIGNsYXNzPSIiPg0KbGV2ZWwgb2YgYWNjZXNzIGNvbnRyb2wu PGJyIGNsYXNzPSIiPg0KPC9ibG9ja3F1b3RlPg0KPGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZh bWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9u dC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNp bmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJh bnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdl YmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9u dC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7 IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1z cGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0 LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7 IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlu bGluZSAhaW1wb3J0YW50OyI+WzFdDQogTm8sIHRoZXJlIGlzIHN0aWxsIGRpcmVjdCBjb21tdW5p Y2F0aW9uIGJldHdlZW4gdGhlIG1ldGFkYXRhIHNlcnZlciBhbmQgdGhlIGZpbGUgc2VydmVyLjwv c3Bhbj48YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6 ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBm b250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBz dGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNl OiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAw cHg7Ij4NCjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1z aXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7 IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246 IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3Bh Y2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6 IDBweDsiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZv bnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9y bWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFs aWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRl LXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdp ZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiPlRoZQ0K IGRpZmZlcmVuY2UgaXMgdGhhdCBpdCBpcyB2aWEgYSBzdG9yYWdlIHByb3RvY29sLCBpbiB0aGlz IGNhc2UgTkZTLjwvc3Bhbj48L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxibG9ja3F1b3RlIHR5cGU9 ImNpdGUiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQt ZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBm b250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3Bh Y2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10 cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAt d2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJm b250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1h bDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVy LXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRl eHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBw eDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9uZTsgZGlzcGxheTog aW5saW5lICFpbXBvcnRhbnQ7Ij5UaGUNCiBhY2Nlc3MgY29udHJvbCBpcyBlbmZvcmNlZCBieSB0 aGUgbWV0YWRhdGEgc2VydmVyLiBUaGUgY2xpZW50IG9ubHkgZ2V0IGFjY2Vzczwvc3Bhbj48YnIg Y2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsg Zm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdo dDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4 dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7 IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxz cGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEy cHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13 ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7 IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9y bWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBm bG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7Ij50bw0KIHRoZSBmaWxlIGlm IGl0IGNhbiBnZXQgYSBsYXlvdXQuIFRoZSBsYXlvdXQgY2FuIGVpdGhlciBwcm92aWRlIHJlYWQv d3JpdGUgYWNjZXNzPC9zcGFuPjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZl dGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1j YXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7 IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9u ZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1z dHJva2Utd2lkdGg6IDBweDsiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBI ZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlh bnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9y bWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06 IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRl eHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9y dGFudDsiPm9yDQogb25seSByZWFkIGFjY2Vzcy48L3NwYW4+PGJyIGNsYXNzPSIiIHN0eWxlPSJm b250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1h bDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVy LXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRl eHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBw eDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8YnIgY2xhc3M9IiIgc3R5bGU9 ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9y bWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0 ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsg dGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzog MHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxzcGFuIGNsYXNzPSIiIHN0 eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6 IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsg bGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAw cHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNp bmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9uZTsgZGlz cGxheTogaW5saW5lICFpbXBvcnRhbnQ7Ij5UaGUNCiBtZXRhZGF0YSBzZXJ2ZXIgY2FuIHJldm9r ZSB0aGF0IGFjY2VzcyBhdCBhbnkgcG9pbnQsIHNvIGl0IGlzIG5vdDwvc3Bhbj48YnIgY2xhc3M9 IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1z dHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9y bWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRl bnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQt c3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxzcGFuIGNs YXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZv bnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6 IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQt aW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3 b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDog bm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7Ij5jb3JyZWN0DQogdG8gc2F5IHRoYXQg aXQgZGVwZW5kcyBvbiB0aGUgY2xpZW50IHRvIGVuZm9yY2UgYSBsZXNzIGdyYW51bGFyIGxldmVs PC9zcGFuPjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1z aXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7 IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246 IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3Bh Y2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6 IDBweDsiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZv bnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9y bWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFs aWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRl LXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdp ZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiPm9mDQog YWNjZXNzIGNvbnRyb2wuPC9zcGFuPjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhl bHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFu dC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3Jt YWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTog bm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4 dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2IGNsYXNz PSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KVGhhbmtzIGZvciB0aGUgY2xhcmlmaWNhdGlvbi4g VG8gYSBub24tTkZTIGV4cGVydCB0aGUgcmVsYXRpb25zaGlwIGJldHdlZW4gbGF5b3V0cyBhbmQm bmJzcDs8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+YWNjZXNzIGNvbnRyb2wgJm5ic3A7d2FzbuKAmXQg b2J2aW91cy4gSSB3b25kZXIgaWYgdGhpcyBkaXNjdXNzaW9uIGNvdWxkIGJlIGFkZGVkIHRvIFNl Y3VyaXR5PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPkNvbnNpZGVyYXRpb25zPzwvZGl2Pg0KPC9kaXY+ DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxkaXYgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRp Y2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fw czogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0 ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7 IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ry b2tlLXdpZHRoOiAwcHg7IiBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBz dHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxl OiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7 IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDog MHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFj aW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiIGNsYXNzPSIiPg0KPGJy IGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBm b250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5v cm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1h bGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0 ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13 aWR0aDogMHB4OyIgY2xhc3M9IiI+DQpIaSBCcmlhbiw8L2Rpdj4NCjxkaXYgc3R5bGU9ImZvbnQt ZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBm b250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3Bh Y2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10 cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAt d2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IiBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4N CjwvZGl2Pg0KPGRpdiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAx MnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQt d2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0 OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5v cm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsi IGNsYXNzPSIiPg0KSeKAmXZlIGFscmVhZHkgZ290IHRoYXQgKGFuZCB5ZXMsIEkgdW5kZXJzdGFu ZCBpdCBpcyBub3Qgc3VmZmljaWVudCBpZiBJIGhhdmUgdG8gc3BlbGwgaXQgb3V0IDotKTo8L2Rp dj4NCjxkaXYgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsg Zm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdo dDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4 dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7 IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IiBjbGFz cz0iIj4NCjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBzdHlsZT0iZm9udC1mYW1pbHk6IEhl bHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFu dC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3Jt YWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTog bm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4 dC1zdHJva2Utd2lkdGg6IDBweDsiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj4xNS4gJm5ic3A7 U2VjdXJpdHkgQ29uc2lkZXJhdGlvbnM8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+Li4uPC9kaXY+DQo8 ZGl2IGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj4mbmJzcDsgJm5ic3A7VGhlIG1ldGFkYXRhIHNl cnZlciBpcyBwcmltYXJpbHkgcmVzcG9uc2libGUgZm9yIHNlY3VyaW5nIHRoZSBkYXRhPC9kaXY+ DQo8ZGl2IGNsYXNzPSIiPiZuYnNwOyAmbmJzcDtwYXRoLiAmbmJzcDtJdCBoYXMgdG8gYXV0aGVu dGljYXRlIHRoZSBjbGllbnQgYWNjZXNzIGFuZCBwcm92aWRlPC9kaXY+DQo8ZGl2IGNsYXNzPSIi PiZuYnNwOyAmbmJzcDthcHByb3ByaWF0ZSBjcmVkZW50aWFscyB0byB0aGUgY2xpZW50IHRvIGFj Y2VzcyBkYXRhIGZpbGVzIG9uIHRoZTwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4mbmJzcDsgJm5ic3A7 c3RvcmFnZSBkZXZpY2UuICZuYnNwO0ZpbmFsbHksIGl0IGlzIHJlc3BvbnNpYmxlIGZvciByZXZv a2luZyBhY2Nlc3MgZm9yIGE8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+Jm5ic3A7ICZuYnNwO2NsaWVu dCB0byB0aGUgc3RvcmFnZSBkZXZpY2UuPC9kaXY+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJy IGNsYXNzPSIiPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2 ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQt Y2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFs OyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5v bmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQt c3Ryb2tlLXdpZHRoOiAwcHg7IiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+Jm5ic3A7ICZuYnNw O1RoZSBtZXRhZGF0YSBzZXJ2ZXIgZW5mb3JjZXMgdGhlIGZpbGUgYWNjZXNzLWNvbnRyb2wgcG9s aWN5IGF0PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPiZuYnNwOyAmbmJzcDtMQVlPVVRHRVQgdGltZS4g Jm5ic3A7VGhlIGNsaWVudCBzaG91bGQgdXNlIFJQQyBhdXRob3JpemF0aW9uIGNyZWRlbnRpYWxz PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPiZuYnNwOyAmbmJzcDtmb3IgZ2V0dGluZyB0aGUgbGF5b3V0 IGZvciB0aGUgcmVxdWVzdGVkIGlvbW9kZSAoUkVBRCBvciBSVykgYW5kIHRoZTwvZGl2Pg0KPGRp diBjbGFzcz0iIj4mbmJzcDsgJm5ic3A7c2VydmVyIHZlcmlmaWVzIHRoZSBwZXJtaXNzaW9ucyBh bmQgQUNMIGZvciB0aGVzZSBjcmVkZW50aWFscyw8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+Jm5ic3A7 ICZuYnNwO3Bvc3NpYmx5IHJldHVybmluZyBORlM0RVJSX0FDQ0VTUyBpZiB0aGUgY2xpZW50IGlz IG5vdCBhbGxvd2VkIHRoZTwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4mbmJzcDsgJm5ic3A7cmVxdWVz dGVkIGlvbW9kZS4gJm5ic3A7SWYgdGhlIExBWU9VVEdFVCBvcGVyYXRpb24gc3VjY2VlZHMgdGhl IGNsaWVudDwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4mbmJzcDsgJm5ic3A7cmVjZWl2ZXMsIGFzIHBh cnQgb2YgdGhlIGxheW91dCwgYSBzZXQgb2YgY3JlZGVudGlhbHMgYWxsb3dpbmcgaXQgSS9PPC9k aXY+DQo8ZGl2IGNsYXNzPSIiPiZuYnNwOyAmbmJzcDthY2Nlc3MgdG8gdGhlIHNwZWNpZmllZCBk YXRhIGZpbGVzIGNvcnJlc3BvbmRpbmcgdG8gdGhlIHJlcXVlc3RlZDwvZGl2Pg0KPGRpdiBjbGFz cz0iIj4mbmJzcDsgJm5ic3A7aW9tb2RlLiAmbmJzcDtXaGVuIHRoZSBjbGllbnQgYWN0cyBvbiBJ L08gb3BlcmF0aW9ucyBvbiBiZWhhbGYgb2YgaXRzPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPiZuYnNw OyAmbmJzcDtsb2NhbCB1c2VycywgaXQgTVVTVCBhdXRoZW50aWNhdGUgYW5kIGF1dGhvcml6ZSB0 aGUgdXNlciBieSBpc3N1aW5nPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPiZuYnNwOyAmbmJzcDtyZXNw ZWN0aXZlIE9QRU4gYW5kIEFDQ0VTUyBjYWxscyB0byB0aGUgbWV0YWRhdGEgc2VydmVyLCBzaW1p bGFyIHRvPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPiZuYnNwOyAmbmJzcDtoYXZpbmcgTkZTdjQgZGF0 YSBkZWxlZ2F0aW9ucy48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+ DQo8ZGl2IGNsYXNzPSIiPiZuYnNwOyAmbmJzcDtJZiBhY2Nlc3MgaXMgYWxsb3dlZCwgdGhlIGNs aWVudCB1c2VzIHRoZSBjb3JyZXNwb25kaW5nIChSRUFEIG9yIFJXKTwvZGl2Pg0KPGRpdiBjbGFz cz0iIj4mbmJzcDsgJm5ic3A7Y3JlZGVudGlhbHMgdG8gcGVyZm9ybSB0aGUgSS9PIG9wZXJhdGlv bnMgYXQgdGhlIGRhdGEgZmlsZSdzIHN0b3JhZ2U8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+Jm5ic3A7 ICZuYnNwO2RldmljZXMuICZuYnNwO1doZW4gdGhlIG1ldGFkYXRhIHNlcnZlciByZWNlaXZlcyBh IHJlcXVlc3QgdG8gY2hhbmdlIGE8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+Jm5ic3A7ICZuYnNwO2Zp bGUncyBwZXJtaXNzaW9ucyBvciBBQ0wsIGl0IFNIT1VMRCByZWNhbGwgYWxsIGxheW91dHMgZm9y IHRoYXQgZmlsZTwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4mbmJzcDsgJm5ic3A7YW5kIHRoZW4gTVVT VCBmZW5jZSBvZmYgYW55IGNsaWVudHMgc3RpbGwgaG9sZGluZyBvdXRzdGFuZGluZyBsYXlvdXRz PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPiZuYnNwOyAmbmJzcDtmb3IgdGhlIHJlc3BlY3RpdmUgZmls ZXMgYnkgaW1wbGljaXRseSBpbnZhbGlkYXRpbmcgdGhlIHByZXZpb3VzbHk8L2Rpdj4NCjxkaXYg Y2xhc3M9IiI+Jm5ic3A7ICZuYnNwO2Rpc3RyaWJ1dGVkIGNyZWRlbnRpYWwgb24gYWxsIGRhdGEg ZmlsZSBjb21wcmlzaW5nIHRoZSBmaWxlIGluPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPiZuYnNwOyAm bmJzcDtxdWVzdGlvbi4gJm5ic3A7SXQgaXMgUkVRVUlSRUQgdGhhdCB0aGlzIGJlIGRvbmUgYmVm b3JlIGNvbW1pdHRpbmcgdG8gdGhlPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPiZuYnNwOyAmbmJzcDtu ZXcgcGVybWlzc2lvbnMgYW5kL29yIEFDTC4gJm5ic3A7QnkgcmVxdWVzdGluZyBuZXcgbGF5b3V0 cywgdGhlIGNsaWVudHM8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+Jm5ic3A7ICZuYnNwO3dpbGwgcmVh dXRob3JpemUgYWNjZXNzIGFnYWluc3QgdGhlIG1vZGlmaWVkIGFjY2VzcyBjb250cm9sIG1ldGFk YXRhLjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4mbmJzcDsgJm5ic3A7UmVjYWxsaW5nIHRoZSBsYXlv dXRzIGluIHRoaXMgY2FzZSBpcyBpbnRlbmRlZCB0byBwcmV2ZW50IGNsaWVudHM8L2Rpdj4NCjxk aXYgY2xhc3M9IiI+Jm5ic3A7ICZuYnNwO2Zyb20gZ2V0dGluZyBhbiBlcnJvciBvbiBJL09zIGRv bmUgYWZ0ZXIgdGhlIGNsaWVudCB3YXMgZmVuY2VkIG9mZi48L2Rpdj4NCjwvZGl2Pg0KPGRpdiBz dHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxl OiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7 IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDog MHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFj aW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiIGNsYXNzPSIiPg0KPGJy IGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBm b250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5v cm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1h bGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0 ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13 aWR0aDogMHB4OyIgY2xhc3M9IiI+DQpIb3cgYWJvdXQ6PC9kaXY+DQo8ZGl2IHN0eWxlPSJmb250 LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsg Zm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNw YWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQt dHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsg LXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+ DQo8L2Rpdj4NCjxkaXYgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTog MTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250 LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFy dDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBu b3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7 IiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+Jm5ic3A7ICZuYnNwO0lmIGFjY2VzcyBpcyBhbGxv d2VkLCB0aGUgY2xpZW50IHVzZXMgdGhlIGNvcnJlc3BvbmRpbmcgKFJFQUQgb3IgUlcpPC9kaXY+ DQo8ZGl2IGNsYXNzPSIiPiZuYnNwOyAmbmJzcDtjcmVkZW50aWFscyB0byBwZXJmb3JtIHRoZSBJ L08gb3BlcmF0aW9ucyBhdCB0aGUgZGF0YSBmaWxlJ3Mgc3RvcmFnZTwvZGl2Pg0KPGRpdiBjbGFz cz0iIj4mbmJzcDsgJm5ic3A7ZGV2aWNlcy4g4oCmPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBj bGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5iZWNvbWVzPC9kaXY+DQo8ZGl2IGNsYXNz PSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4mbmJzcDsgVGhlIGNvbWJp bmF0aW9uIG9mIGZpbGUgaGFuZGxlLCBzeW50aGV0aWMgdWlkLCBhbmQgZ2lkIGluIHRoZSBsYXlv dXQ8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+Jm5ic3A7IGFyZSB0aGUgd2F5IHRoYXQgdGhlIG1ldGFk YXRhIHNlcnZlciBlbmZvcmNlcyBhY2Nlc3MgY29udHJvbCB0byB0aGU8L2Rpdj4NCjxkaXYgY2xh c3M9IiI+Jm5ic3A7IGRhdGEgc2VydmVyLiBUaGUgZGlyZWN0b3J5IG5hbWVzcGFjZSBvbiB0aGUg c3RvcmFnZSBkZXZpY2UgU0hPVUxEPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPiZuYnNwOyBvbmx5IGJl IGFjY2Vzc2libGUgdG8gdGhlIG1ldGFkYXRhIHNlcnZlciBhbmQgbm90IHRoZSBjbGllbnRzLiBJ biB0aGF0IGNhc2UsJm5ic3A7PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPiZuYnNwOyB0aGUgY2xpZW50 IG9ubHkgaGFzIGFjY2VzcyB0byBmaWxlIGhhbmRsZXMgb2YgZmlsZSBvYmplY3RzIGFuZCBub3Q8 L2Rpdj4NCjxkaXYgY2xhc3M9IiI+Jm5ic3A7IGRpcmVjdG9yeSBvYmplY3RzLiBUaHVzLCBnaXZl biBhIGZpbGUgaGFuZGxlIGluIGEgbGF5b3V0LCBpdCBpcyBub3Q8L2Rpdj4NCjxkaXYgY2xhc3M9 IiI+Jm5ic3A7IHBvc3NpYmxlIHRvIGd1ZXNzIHRoZSBwYXJlbnQgZGlyZWN0b3J5IGZpbGUgaGFu ZGxlLiBGdXJ0aGVyLCBhcyB0aGU8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+Jm5ic3A7IGRhdGEgZmls ZSBwZXJtaXNzaW9ucyBvbmx5IGFsbG93IHRoZSBnaXZlbiBzeW50aGV0aWMgdWlkIHJlYWQvd3Jp dGU8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+Jm5ic3A7IHBlcm1pc3Npb24gYW5kIHRoZSBnaXZlbiBz eW50aGV0aWMgZ2lkIHJlYWQgcGVybWlzc2lvbiwga25vd2luZzwvZGl2Pg0KPGRpdiBjbGFzcz0i Ij4mbmJzcDsgdGhlIHN5bnRoZXRpYyBpZHMgb2Ygb25lIGZpbGUgZG9lcyBub3QgbmVjZXNzYXJp bHkgYWxsb3cgYWNjZXNzIHRvIGFueTwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4mbmJzcDsgb3RoZXIg ZGF0YSBmaWxlIG9uIHRoZSBzdG9yYWdlIGRldmljZS48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJy IGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPiZuYnNwOyBUaGUgbWV0YWRhdGEgc2Vy dmVyIGNhbiBhbHNvIGRlbnkgYWNjZXNzIGF0IGFueSB0aW1lIGJ5IGZlbmNpbmc8L2Rpdj4NCjxk aXYgY2xhc3M9IiI+Jm5ic3A7IHRoZSBkYXRhIGZpbGUsIHdoaWNoIG1lYW5zIGNoYW5naW5nIHRo ZSBzeW50aGV0aWMgaWRzLiBJbiB0dXJuLCB0aGF0PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPiZuYnNw OyBmb3JjZXMgdGhlIGNsaWVudCB0byByZXR1cm4gaXRzIGN1cnJlbnQgbGF5b3V0IGFuZCBnZXQg YSBuZXcgbGF5b3V0IGlmPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPiZuYnNwOyBpdCB3YW50cyB0byBj b250aW51ZSBJTyB0byB0aGUgZGF0YSBmaWxlLjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xh c3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+Jm5ic3A7IElmIHRoZSBjb25maWd1cmF0aW9u IG9mIHRoZSBzdG9yYWdlIGRldmljZSBpcyBzdWNoIHRoYXQgY2xpZW50czwvZGl2Pg0KPGRpdiBj bGFzcz0iIj4mbmJzcDsgY2FuIGFjY2VzcyB0aGUgZGlyZWN0b3J5IG5hbWVzcGFjZSwgdGhlbiB0 aGUgYWNjZXNzIGNvbnRyb2w8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+Jm5ic3A7IGRlZ3JhZGVzIHRv IHRoYXQgb2YgYSB0eXBpY2FsIE5GUyBzZXJ2ZXIgd2l0aCBleHBvcnRzIHdpdGggYTwvZGl2Pg0K PGRpdiBjbGFzcz0iIj4mbmJzcDsgc2VjdXJpdHkgZmxhdm9yIG9mIEFVVEhfU1lTLiAmbmJzcDtB bnkgY2xpZW50IHdoaWNoIGlzIGFsbG93ZWQ8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+Jm5ic3A7IGFj Y2VzcyBjYW4gZm9yZ2UgY3JlZGVudGlhbHMgdG8gYWNjZXNzIGFueSBkYXRhIGZpbGUuIFRoZTwv ZGl2Pg0KPGRpdiBjbGFzcz0iIj4mbmJzcDsgY2F2ZWF0IGlzIHRoYXQgdGhlIHJvZ3VlIGNsaWVu dCBtaWdodCBoYXZlIG5vIGtub3dsZWRnZSBvZjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4mbmJzcDsg dGhlIGRhdGEgZmlsZeKAmXMgdHlwZSBvciBwb3NpdGlvbiBpbiB0aGUgbWV0YWRhdGEgZGlyZWN0 b3J5PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPiZuYnNwOyBuYW1lc3BhY2UuPC9kaXY+DQo8ZGl2IGNs YXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9 IiI+Jm5ic3A7ICZuYnNwO0lmIGFjY2VzcyBpcyBhbGxvd2VkLCB0aGUgY2xpZW50IHVzZXMgdGhl IGNvcnJlc3BvbmRpbmcgKFJFQUQgb3IgUlcpPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPiZuYnNwOyAm bmJzcDtjcmVkZW50aWFscyB0byBwZXJmb3JtIHRoZSBJL08gb3BlcmF0aW9ucyBhdCB0aGUgZGF0 YSBmaWxlJ3Mgc3RvcmFnZTwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4mbmJzcDsgJm5ic3A7ZGV2aWNl cy4g4oCmPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBj bGFzcz0iIj5PciBkbyB5b3Ugd2FudCBtZSB0byBwdWxsIHRoYXQgbmV3IHRleHQgaW50byBhIG5l dyBzdWJzZWN0aW9uIDE1LjEgYW5kPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPnNsYW0gdGhlIG90aGVy IHN1YnNlY3Rpb25zIGRvd24/PC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2Nr cXVvdGU+DQo8ZGl2PjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdj48YnIgY2xhc3M9IiI+DQo8 L2Rpdj4NCllvdXIgdGV4dCBhYm92ZSBzb3VuZHMgZ3JlYXQgdG8gbWUsIGFuZCBhZGRpbmcgaXQg dG8gc2VjdXJpdHkgJm5ic3A7Y29uc2lkZXJhdGlvbnMgYXMgeW91PC9kaXY+DQo8ZGl2PnN1Z2dl c3QgaXMgZmluZS48L2Rpdj4NCjxkaXY+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2PiZuYnNw OzxiciBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGRpdiBj bGFzcz0iIj4NCjxkaXYgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTog MTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250 LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFy dDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBu b3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7 IiBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBzdHlsZT0iZm9udC1mYW1p bHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQt dmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5n OiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5z Zm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJr aXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KPC9k aXY+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6 IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFy aWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBu b3JtYWw7IG9ycGhhbnM6IGF1dG87IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4 OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd2lkb3dzOiBhdXRv OyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXNpemUtYWRqdXN0OiBhdXRvOyAtd2Vi a2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGNsYXNz PSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQt c3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5v cm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5k ZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3Jk LXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8ZGl2IGNs YXNzPSIiPjxiciBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0K PGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7 IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczog bm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0 LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdo aXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tl LXdpZHRoOiAwcHg7Ij4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiIHN0eWxlPSJm b250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1h bDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVy LXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRl eHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBw eDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8YnIgY2xhc3M9IiI+DQpUaGUg U2VjdXJpdHkgQ29uc2lkZXJhdGlvbnMgc2VjdGlvbiBpcyB3ZWxsLXdyaXR0ZW4gYW5kIGhlbHBm dWwuIEkgZG8gaGF2ZSBzb21lPGJyIGNsYXNzPSIiPg0Kc3VnZ2VzdGlvbnMgZm9yIGltcHJvdmlu ZyBpdCwgJm5ic3A7YW5kIGFsc28gc29tZSBxdWVzdGlvbnMuPGJyIGNsYXNzPSIiPg0KPGJyIGNs YXNzPSIiPg0KKDEpIFNlY3Rpb24gMi4yOiBzaG91bGQgdGhlIOKAnHJlY29tbWVuZGVk4oCdIGlu IHRoZSBOb3RlIGJlIFJFQ09NTUVOREVEPzxiciBjbGFzcz0iIj4NClJlc3RyaWN0aW5nIGFjY2Vz cyBjb250cm9sIHRvIGp1c3Qgc3VwZXJ1c2VyIGhhdmUgYWNjZXNzIHRvIHRoZSBzdG9yYWdlIGRl dmljZTxiciBjbGFzcz0iIj4NCnNlZW1zIGxpa2UgYSB2YWx1YWJsZSBhZHZpY2UuPGJyIGNsYXNz PSIiPg0KPC9ibG9ja3F1b3RlPg0KPGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVs dmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50 LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1h bDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBu b25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0 LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6 IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFy aWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBu b3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9y bTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQt dGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1w b3J0YW50OyI+c3VyZTwvc3Bhbj48YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2 ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQt Y2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFs OyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5v bmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQt c3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhl bHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFu dC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3Jt YWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTog bm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4 dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiIg c3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHls ZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFs OyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6 IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3Bh Y2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxiciBjbGFzcz0i Ij4NCigyKSBTZWN0aW9uIDIuMjogVGhlIE5PVEUgcHJvYmFibHkgc2hvdWxkIHByb3ZpZGUgZ3Vp ZGFuY2UgcmVnYXJkaW5nIHByb3RlY3Rpbmc8YnIgY2xhc3M9IiI+DQp0aGUgbmV0d29yayBjb25u ZWN0aW9ucyBiZXR3ZWVuIHRoZSBtZXRhZGF0YSBzZXJ2ZXIgYW5kIHRoZSBmaWxlIHNlcnZlci4g Rm9yPGJyIGNsYXNzPSIiPg0KZXhhbXBsZSwgc29tZXRoaW5nIGxpa2U6IOKAnENvbW11bmljYXRp b25zIGJldHdlZW4gdGhlIG1ldGFkYXRhIHNlcnZlciBhbmQgZmlsZTxiciBjbGFzcz0iIj4NCnNl cnZlciBuZWVkIHRvIHNlY3VyZWQuIElmIHRoZXJlIGlzIG5vdCBhZGVxdWF0ZSBwaHlzaWNhbCBz ZWN1cml0eSAoaS5lLiwgdGhlPGJyIGNsYXNzPSIiPg0Kc2VydmVycyBhcmUgbm90IGNvLWxvY2F0 ZWQgaW4gYSBwaHlzaWNhbGx5IHNlY3VyZSBhcmVhKSwgdGhlaXIgY29tbXVuaWNhdGlvbnM8YnIg Y2xhc3M9IiI+DQpNVVNUIGJlIHByb3RlY3RlZCBmb3IgY29uZmlkZW50aWFsaXR5IChlLmcuLCB1 c2luZyBUTFMgb3IgSVBzZWMpLuKAnTxiciBjbGFzcz0iIj4NCjwvYmxvY2txdW90ZT4NCjxiciBj bGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBm b250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0 OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0 LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsg d29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPHNw YW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJw eDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdl aWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsg dGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3Jt YWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZs b2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiPk5vLA0KIHRoZSBNVVNUIGlz IHRvbyBzdHJvbmcgaGVyZS4gV2UgY2FuIHJlY29tbWVuZCBwcm9jZWR1cmVzLCB3ZSBjYW4gbm90 IFJFUVVJUkUgdGhlbS48L3NwYW4+PGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVs dmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50 LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1h bDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBu b25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0 LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBI ZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlh bnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9y bWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06 IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRl eHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWls eTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12 YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6 IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNm b3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtp dC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFp bXBvcnRhbnQ7Ij5JDQogYW0gZmluZSB3aXRoOjwvc3Bhbj48YnIgY2xhc3M9IiIgc3R5bGU9ImZv bnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFs OyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXIt c3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4 dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4 OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxiciBjbGFzcz0iIiBzdHlsZT0i Zm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3Jt YWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRl ci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0 ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAw cHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPHNwYW4gY2xhc3M9IiIgc3R5 bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTog bm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBs ZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBw eDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2lu ZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNw bGF5OiBpbmxpbmUgIWltcG9ydGFudDsiPkNvbW11bmljYXRpb25zDQogYmV0d2VlbiB0aGUgbWV0 YWRhdGEgc2VydmVyIGFuZCBmaWxlPC9zcGFuPjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1p bHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQt dmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5n OiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5z Zm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJr aXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQt ZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBm b250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3Bh Y2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10 cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAt d2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxp bmUgIWltcG9ydGFudDsiPnNlcnZlcg0KIFNIT1VMRCBiZSBzZWN1cmVkLiBJZiB0aGVyZSBpcyBu b3QgYWRlcXVhdGUgcGh5c2ljYWwgc2VjdXJpdHkgKGkuZS4sIHRoZTwvc3Bhbj48YnIgY2xhc3M9 IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1z dHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9y bWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRl bnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQt c3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxzcGFuIGNs YXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZv bnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6 IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQt aW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3 b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDog bm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7Ij5zZXJ2ZXJzDQogYXJlIG5vdCBjby1s b2NhdGVkIGluIGEgcGh5c2ljYWxseSBzZWN1cmUgYXJlYSksIHRoZWlyIGNvbW11bmljYXRpb25z PC9zcGFuPjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1z aXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7 IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246 IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3Bh Y2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6 IDBweDsiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZv bnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9y bWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFs aWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRl LXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdp ZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiPlNIT1VM RA0KIGJlIHByb3RlY3RlZCBmb3IgY29uZmlkZW50aWFsaXR5IChlLmcuLCB1c2luZyBUTFMgb3Ig SVBzZWMpLuKAnTwvc3Bhbj48YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRp Y2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fw czogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0 ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7 IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ry b2tlLXdpZHRoOiAwcHg7Ij4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdiBjbGFzcz0iIj48 YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCkkgdW5kZXJzdGFuZCB0aGUgaGVzaXRhdGlvbiB0byBtYWtl IGl0IGEgTVVTVCwgYmVjYXVzZSBpdOKAmXMgb24gYSBwcm90b2NvbDwvZGl2Pg0KPGRpdiBjbGFz cz0iIj50aGF0IGlzbuKAmXQgZGVzY3JpYmVkIGluIHRoaXMgZG9jdW1lbnQuIEJ1dCBJIHRoaW5r IGl04oCZcyByZWFzb25hYmxlIHRvIGRlc2NyaWJlPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPmEgcmlz ayBhbmQgbWFrZSBhIHJlcXVpcmVtZW50IHRoYXQgdGhlIHJpc2sgYmUgbWl0aWdhdGVkLjwvZGl2 Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxkaXYgc3R5bGU9ImZvbnQtZmFtaWx5 OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZh cmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzog bm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zv cm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0 LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IiBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCjwvZGl2 Pg0KPGRpdiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBm b250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0 OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0 LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsg d29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiIGNsYXNz PSIiPg0KSSBkbyBub3QgZGlzYWdyZWUgd2l0aCB0aGF0IHN0YXRlbWVudC48L2Rpdj4NCjxiciBj bGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBm b250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0 OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0 LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsg d29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPGJs b2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRp Y2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fw czogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyBv cnBoYW5zOiBhdXRvOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10 cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdpZG93czogYXV0bzsgd29yZC1z cGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zaXplLWFkanVzdDogYXV0bzsgLXdlYmtpdC10ZXh0 LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIiBzdHls ZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBu b3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxl dHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4 OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5n OiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPGRpdiBjbGFzcz0iIj5D ZXJ0YWlubHkgaXTigJlzIG5vdDwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5yZWFzb25hYmxlIHRvIHJl cXVpcmUgYSBwYXJ0aWN1bGFyIG1ldGhvZCB0byBiZSB1c2VkIHRvIHByb3RlY3QgdGhlIHByb3Rv Y29sPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPih3aGljaCBpcyB3aHkgSSBzdWdnZXN0ZWQg4oCcZS5n LiwgdXNpbmcgVExTIG9yIElQc2Vj4oCdIGFib3ZlIHJhdGhlciB0aGFuIOKAnGkuZS7igJ0pLjwv ZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxibG9ja3F1b3RlIHR5cGU9ImNp dGUiIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEy cHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13 ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgb3JwaGFuczogYXV0bzsgdGV4 dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3 aGl0ZS1zcGFjZTogbm9ybWFsOyB3aWRvd3M6IGF1dG87IHdvcmQtc3BhY2luZzogMHB4OyAtd2Vi a2l0LXRleHQtc2l6ZS1hZGp1c3Q6IGF1dG87IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBw eDsiPg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBI ZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlh bnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9y bWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06 IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRl eHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9k aXY+DQo8ZGl2IGNsYXNzPSIiPldpdGggdG9kYXnigJlzIHBlcnZhc2l2ZSBwcml2YWN5IHRocmVh dHMgdG8gbmV0d29yayB0cmFmZmljIGl04oCZcyBoYXJkIHRvJm5ic3A7PC9kaXY+DQo8ZGl2IGNs YXNzPSIiPmp1c3RpZnkgYWxsb3dpbmcgbWV0YWRhdGEgdG8gdHJhdmVyc2UgdW5wcm90ZWN0ZWQg bmV0d29ya3MgYXMgY2xlYXItdGV4dCZuYnNwOzwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4oaS4uZSwg YXZhaWxhYmxlIHRvICZuYnNwO3Bhc3NpdmUgZWF2ZXNkcm9wcGVycykuIEl04oCZcyBhbHNvIGhh cmQgb3IgdG8ganVzdGlmeSBhbGxvd2luZyZuYnNwOzwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5zZWN1 cml0eS1yZWxldmVudCBwcm90b2NvbHMgdG8gYmUgdHJhbnNmZXJyaW5nIGl0IHdpdGhvdXQgY3J5 cHRvZ3JhcGhpYyBpbnRlZ3JpdHkmbmJzcDs8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+cHJvdGVjdGlv bi4gSXQgc2VlbXMgaW1wb3J0YW50IHRvIHJlbWluZCBwcm90b2NvbCBkZXZlbG9wZXJzIHRoYXQg Ym90aDwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5jb25jZXJucyBhcmUgYXBwbGljYWJsZS4gSG93IGFi b3V0IHNvbWV0aGluZyBsaWtlIHRoaXMsIHdoZXJlIG1vcmUgcmF0aW9uYWxlPC9kaXY+DQo8ZGl2 IGNsYXNzPSIiPmlzIGdpdmVuLiBOb3RlIHRoYXQgdGhlIHJlcXVpcmVtZW50IHRoYXQgdGhlIHBy b3RvY29sIG11c3QgYmUgcHJvdGVjdGVkLCBidXQ8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+bm8gcGFy dGljdWxhciBtZXRob2Qgb2YgcHJvdGVjdGlvbiBpcyBub3QgbWFuZGF0ZWQuPC9kaXY+DQo8ZGl2 IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4mcXVvdDtDb21t dW5pY2F0aW9ucyBiZXR3ZWVuIHRoZSBtZXRhZGF0YSBzZXJ2ZXIgYW5kIGZpbGU8YnIgY2xhc3M9 IiI+DQpzZXJ2ZXIgTVVTVCBiZSBzZWN1cmUgZnJvbSBlYXZlc2Ryb3BwZXJzIGFuZCBtYW4taW4t dGhlLW1pZGRsZSBwcm90b2NvbCZuYnNwOzwvZGl2Pg0KPGRpdiBjbGFzcz0iIj50YW1wZXJpbmcu IFRoZSBzZWN1cml0eSBtZWFzdXJlIGNvdWxkIGJlIGR1ZSB0byBwaHlzaWNhbCBzZWN1cml0eSAo ZS5nLiwgdGhlJm5ic3A7PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPnNlcnZlcnMgYXJlIGNvLWxvY2F0 ZWQgaW4gYSBwaHlzaWNhbGx5IHNlY3VyZSBhcmVhKSwgZnJvbSBlbmNyeXB0ZWQgY29tbXVuaWNh dGlvbnMsPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPm9yIHNvbWUgb3RoZXIgdGVjaG5pcXVlLuKAnTwv ZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxkaXYgc3R5bGU9ImZvbnQtZmFt aWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250 LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2lu Zzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFu c2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Vi a2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IiBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCjwv ZGl2Pg0KPGRpdiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4 OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2Vp Z2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0 ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1h bDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiIGNs YXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IHN0eWxlPSJmb250LWZhbWlseTog SGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJp YW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5v cm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3Jt OiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10 ZXh0LXN0cm9rZS13aWR0aDogMHB4OyIgY2xhc3M9IiI+DQpJ4oCZbSBzdGlsbCBoZXNpdGFudCwg aW4gcGFydCBiZWNhdXNlIEkgY2Fu4oCZdCBtYWtlIGFuIGlyb25jbGFkIHJ1bGUgYXMgYSBzdGFu ZGFyZOKAmXM8L2Rpdj4NCjxkaXYgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQt c2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFs OyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWdu OiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNw YWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRo OiAwcHg7IiBjbGFzcz0iIj4NCmF1dGhvciB0aGF0IEkga25vdyBJIGFtIGdvaW5nIHRvIHZpb2xh dGUgd2l0aCBteSBvd24gaW1wbGVtZW50YXRpb24uPC9kaXY+DQo8ZGl2IHN0eWxlPSJmb250LWZh bWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9u dC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNp bmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJh bnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdl YmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQo8 L2Rpdj4NCjxkaXYgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJw eDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdl aWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsg dGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3Jt YWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IiBj bGFzcz0iIj4NCkFsc28sIEkga25vdyB0aGF0IHRoZXJlIG1pZ2h0IGJlIGV4aXN0ZW50IHN0b3Jh Z2UgZGV2aWNlcyB3aGljaCBkbyBub3Qgc3VwcG9ydDwvZGl2Pg0KPGRpdiBzdHlsZT0iZm9udC1m YW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZv bnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFj aW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRy YW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13 ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiIGNsYXNzPSIiPg0KTkZTIG92ZXIgVExTL0lQ c2VjL2V0Yy4gWWVzLCBwaHlzaWNhbCBzZWN1cml0eSBpcyB0aGUgYW5zd2VyIGhlcmUsIGJ1dCBJ IGNhbm5vdDwvZGl2Pg0KPGRpdiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1z aXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7 IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246 IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3Bh Y2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6 IDBweDsiIGNsYXNzPSIiPg0KaW4gZnVsbCBjb25maWRlbmNlIGV4cGVjdCB0aGF0IGFuIGFjdHVh bCBkZXBsb3ltZW50IG1lZXRzIGFsbCBvZiB0aGVzZSBjcml0ZXJpYS48L2Rpdj4NCjxkaXYgc3R5 bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTog bm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBs ZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBw eDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2lu ZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IiBjbGFzcz0iIj4NCkF0IHNv bWUgcG9pbnQsIHRoZSBidXJkZW4gaXMgb2ZmIG9mIHRoZSBwcm90b2NvbCBpbXBsZW1lbnRhdGlv biBhbmQgb250byB0aGU8L2Rpdj4NCjxkaXYgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7 IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczog bm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0 LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdo aXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tl LXdpZHRoOiAwcHg7IiBjbGFzcz0iIj4NCmRlcGxveW1lbnQuPC9kaXY+DQo8ZGl2IHN0eWxlPSJm b250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1h bDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVy LXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRl eHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBw eDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9 IiI+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6 ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBm b250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBz dGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNl OiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAw cHg7IiBjbGFzcz0iIj4NCklmIHdlIGNoYW5nZSB0aGUgTVVTVCB0byBhIFNIT1VMRCwgSSBhbSBw ZXJmZWN0bHkgZmluZSBtYWtpbmcgdGhlIGNoYW5nZS4gOi0pPC9kaXY+DQo8L2Rpdj4NCjwvYmxv Y2txdW90ZT4NCjxkaXY+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2PjxiciBjbGFzcz0iIj4N CjwvZGl2Pg0KSG1tbS4gV2VsbCwgSSBndWVzcyB3aXRoIHRoZSByaXNrcyBleHBsaWNpdGx5IG1l bnRpb25lZCB0aGVyZeKAmXMgbGVzcyBoYXJtIGluIGE8L2Rpdj4NCjxkaXY+U0hPVUxELiBJZiB5 b3XigJlyZSBPSyB3aXRoIHRoZSByZXN0IG9mIHRoZSB3b3JkaW5nLCBnbyBhaGVhZCBhbmQgc3Vi c3RpdHV0ZSB0aGUmbmJzcDs8L2Rpdj4NCjxkaXY+U0hPVUxEIGZvciB0aGUgTVVTVC48L2Rpdj4N CjxkaXY+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2PjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0K PGRpdj5UaGFua3MsPC9kaXY+DQo8ZGl2PkJyaWFuPC9kaXY+DQo8ZGl2PjxiciBjbGFzcz0iIj4N CjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYg c3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHls ZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFs OyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6 IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3Bh Y2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IiBjbGFzcz0iIj4NCjxi ciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsg Zm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBu b3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQt YWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hp dGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Ut d2lkdGg6IDBweDsiIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8YnIgY2xhc3M9 IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1z dHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9y bWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRl bnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQt c3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxibG9ja3F1 b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBm b250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5v cm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgb3JwaGFu czogYXV0bzsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNm b3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3aWRvd3M6IGF1dG87IHdvcmQtc3BhY2lu ZzogMHB4OyAtd2Via2l0LXRleHQtc2l6ZS1hZGp1c3Q6IGF1dG87IC13ZWJraXQtdGV4dC1zdHJv a2Utd2lkdGg6IDBweDsiPg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiIgc3R5bGU9ImZv bnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFs OyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXIt c3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4 dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4 OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxkaXYgY2xhc3M9IiI+PGJyIGNs YXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIi Pg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBI ZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlh bnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9y bWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06 IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRl eHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCigzKSBGcm9tIHRoZSBkZXNjcmlwdGlvbiBvZiBzeW50 aGV0aWMgdWlkcy9naWRzIGluIFNlY3Rpb24gMi4yLCBJIGJlbGlldmUgdGhhdDxiciBjbGFzcz0i Ij4NCnRoZSBmdWxsIHJhbmdlIG9mIGZpbGUgcGVybWlzc2lvbnMgKGUuZy4sIG93bmVyIHIvdy94 KSAmbmJzcDtpcyBob25vcmVkIGluIHRoZTxiciBjbGFzcz0iIj4NCnRpZ2h0bHkgY291cGxlZCBt b2RlbCwgYnV0IGFyZSByZXN0cmljdGVkIGluIHRoZSBsb29zZWx5IGNvdXBsZWQgbW9kZWwgdG88 YnIgY2xhc3M9IiI+DQrigJxvd25lciByL3figJ0sIOKAnGdyb3VwIHLigJ0uIElmIHRoYXQgaXMg Y29ycmVjdCwgSSB0aGluayB0aGUgc2VjdXJpdHkgY29uc2lkZXJhdGlvbnM8YnIgY2xhc3M9IiI+ DQpzaG91bGQgZXhwbGljaXRseSBtZW50aW9uIHRoYXQgdGhlIGVmZmVjdCBvZiBhY2Nlc3MgcGVy bWlzc2lvbnMgaXMgcmVkdWNlZCBvbjxiciBjbGFzcz0iIj4NCnRoZSBmaWxlIHNlcnZlciBmaWxl cy48YnIgY2xhc3M9IiI+DQo8L2Jsb2NrcXVvdGU+DQo8YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQt ZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBm b250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3Bh Y2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10 cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAt d2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJm b250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1h bDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVy LXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRl eHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBw eDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9uZTsgZGlzcGxheTog aW5saW5lICFpbXBvcnRhbnQ7Ij5bMl0NCiBJIHRoaW5rIHRoZSBjb25mdXNpb24gaGVyZSBpcyB0 aGF0IHRoZSBmaWxlcyBvbiBzdG9yYWdlIGRldmljZSBhcmUgbm90PC9zcGFuPjxiciBjbGFzcz0i IiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0 eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3Jt YWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVu dDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1z cGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPHNwYW4gY2xh c3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9u dC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDog bm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1p bmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdv cmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBu b25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiPmluDQogdGhlIGZpbGUgaGllcmFyY2h5 IGFzIHNlZW4gb24gdGhlIG1ldGFkYXRhIHNlcnZlci48L3NwYW4+PGJyIGNsYXNzPSIiIHN0eWxl PSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5v cm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0 dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7 IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6 IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8YnIgY2xhc3M9IiIgc3R5 bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTog bm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBs ZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBw eDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2lu ZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxzcGFuIGNsYXNzPSIi IHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5 bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1h bDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50 OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNw YWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9uZTsg ZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7Ij5Pbg0KIGEgZmlsZSBieSBmaWxlIGJhc2lzIG9u IHRoZSBzdG9yYWdlIGRldmljZSwgd2UgYXJlIGdpdmluZyB0aGUgY2xpZW50IGVpdGhlcjwvc3Bh bj48YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTog MTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250 LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFy dDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBu b3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7 Ij4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNp emU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsg Zm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjog c3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFj ZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDog MHB4OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7Ij53cml0ZQ0KIG1v ZGlmaWNhdGlvbiBhY2Nlc3MsIHJlYWQgYWNjZXNzLCBvciBubyBhY2Nlc3MgYXQgYWxsLiBUaGUg Y2xpZW50IGNhbm5vdDwvc3Bhbj48YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2 ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQt Y2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFs OyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5v bmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQt c3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTog SGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJp YW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5v cm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3Jt OiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10 ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBv cnRhbnQ7Ij5yZW1vdmUNCiB0aGUgZmlsZSAoaXQgd291bGQgbmVlZCB0byBrbm93IHRoZSBwYXJl bnQgZGlyZWN0b3J5IEZIIGFuZCB0aGU8L3NwYW4+PGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZh bWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9u dC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNp bmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJh bnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdl YmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9u dC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7 IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1z cGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0 LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7 IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlu bGluZSAhaW1wb3J0YW50OyI+bmFtZQ0KIG9mIHRoZSBmaWxlIC0gbmVpdGhlciBvZiB3aGljaCBp dCBoYXMpLiAmbmJzcDtJdCBjYW4gZWZmZWN0aXZlbHkgcmVtb3ZlIHRoZSBjb250ZW50PC9zcGFu PjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAx MnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQt d2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0 OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5v cm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsi Pg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6 ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBm b250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBz dGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNl OiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAw cHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiPmlmDQogaXQgaGFz IHdyaXRlIHBlcm1pc3Npb24gKGJ1dCBub3RoaW5nIHdvdWxkIHByZXZlbnQgdGhpcyBpbiBhIHRp Z2h0bHk8L3NwYW4+PGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBm b250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5v cm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1h bGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0 ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13 aWR0aDogMHB4OyI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGlj YTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBz OiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRl eHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsg d2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJv a2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyI+ Y291cGxlZA0KIG1vZGVsKS48c3BhbiBjbGFzcz0iQXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJz cDs8L3NwYW4+PC9zcGFuPjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGlj YTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBz OiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRl eHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsg d2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJv a2Utd2lkdGg6IDBweDsiPg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2IGNsYXNzPSIiPjxi ciBjbGFzcz0iIj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPkdvdCBpdCwgdGhhbmtz LjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4mbmJzcDs8YnIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0 eXBlPSJjaXRlIiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiIHN0eWxlPSJm b250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1h bDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVy LXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRl eHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBw eDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8YnIgY2xhc3M9IiIgc3R5bGU9 ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9y bWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0 ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsg dGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzog MHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxiciBjbGFzcz0iIiBzdHls ZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBu b3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxl dHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4 OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5n OiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPGJyIGNsYXNzPSIiIHN0 eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6 IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsg bGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAw cHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNp bmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8YmxvY2txdW90ZSB0 eXBlPSJjaXRlIiBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1z aXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7 IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246 IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3Bh Y2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6 IDBweDsiPg0KPGJyIGNsYXNzPSIiPg0KKDQpIFNlY3Rpb24gMi4yLiBJbiB0aGlzIHBocmFzZSDi gJxpdCBtYXkgYmUgYXNzaWduZWQgc29tZSByYW5kb20gc3ludGhldGljPGJyIGNsYXNzPSIiPg0K dWlkL2dpZCB0byBkZW55IGFjY2Vzc+KAnSwgd291bGQgYSBiZXR0ZXIgd29yZCBmb3Ig4oCccmFu ZG9t4oCdIGJlIOKAnHVudXNlZOKAnSBvcjxiciBjbGFzcz0iIj4NCuKAnHVucHJlZGljdGFibGXi gJ0/IEFsc28gd2hhdCBpcyB0aGUgc2VjdXJpdHkgdmFsdWUgaW50ZW5kZWQgYnkgdGhlIHVzZSBv ZiBhPGJyIGNsYXNzPSIiPg0K4oCccmFuZG9t4oCdIHZhbHVlIGZvciBzeW50aGV0aWMgdWlkcy9n aWRzPzxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCjwvYmxvY2txdW90ZT4NCjxiciBjbGFz cz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250 LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBu b3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWlu ZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29y ZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPHNwYW4g Y2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsg Zm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdo dDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4 dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7 IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0 OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiPkluDQogYW4gZWFybGllciByZXZp ZXcgKGJ5IExpbmRhIER1bmJhciksIHRoYXQgcGhyYXNlIHdhcyBjaGFuZ2VkOjwvc3Bhbj48YnIg Y2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsg Zm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdo dDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4 dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7 IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxi ciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4 OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2Vp Z2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0 ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1h bDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0K PGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEy cHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13 ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7 IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9y bWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+ DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXpl OiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZv bnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0 YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6 IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBw eDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyI+Jm5ic3A7T24NCiB0 aGUgc3RvcmFnZSBkZXZpY2UsIGl0IG1heSBiZSBhc3NpZ25lZCBzb21lIHJhbmRvbSBzeW50aGV0 aWMgdWlkLzwvc3Bhbj48YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7 IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczog bm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0 LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdo aXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tl LXdpZHRoOiAwcHg7Ij4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0 aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNh cHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsg dGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25l OyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0 cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7 Ij4mbmJzcDtnaWQNCiB0byBkZW55IGFjY2Vzczo8L3NwYW4+PGJyIGNsYXNzPSIiIHN0eWxlPSJm b250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1h bDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVy LXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRl eHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBw eDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8YnIgY2xhc3M9IiIgc3R5bGU9 ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9y bWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0 ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsg dGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzog MHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxzcGFuIGNsYXNzPSIiIHN0 eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6 IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsg bGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAw cHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNp bmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9uZTsgZGlz cGxheTogaW5saW5lICFpbXBvcnRhbnQ7Ij4mbmJzcDstcnctci0tLS0tDQogJm5ic3A7Jm5ic3A7 Jm5ic3A7MSAxOTQ1MiAmbmJzcDsmbmJzcDsyODQxOCAmbmJzcDsmbmJzcDsmbmJzcDsxNjk3IERl YyAmbmJzcDs0IDExOjMxIGRhdGFfb21waGEuYzwvc3Bhbj48YnIgY2xhc3M9IiIgc3R5bGU9ImZv bnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFs OyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXIt c3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4 dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4 OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxiciBjbGFzcz0iIiBzdHlsZT0i Zm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3Jt YWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRl ci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0 ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAw cHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPHNwYW4gY2xhc3M9IiIgc3R5 bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTog bm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBs ZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBw eDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2lu ZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNw bGF5OiBpbmxpbmUgIWltcG9ydGFudDsiPiZuYnNwO1doZW4NCiB0aGUgZmlsZSBpcyBvcGVuZWQg b24gYSBjbGllbnQgYW5kIGFjY2Vzc2VkLCBpdCB3aWxsIHRyeSB0byBnZXQgYTwvc3Bhbj48YnIg Y2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsg Zm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdo dDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4 dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7 IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxz cGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEy cHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13 ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7 IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9y bWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBm bG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7Ij4mbmJzcDtsYXlvdXQNCiBm b3IgdGhlIGRhdGEgZmlsZS4gU2luY2UgdGhlIGxheW91dCBrbm93cyBub3RoaW5nPC9zcGFuPjxi ciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4 OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2Vp Z2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0 ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1h bDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0K PHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTog MTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250 LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFy dDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBu b3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7 IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiPiZuYnNwO2Fib3V0DQog dGhlIHVzZXIgKGFuZCBkb2VzIG5vdCBjYXJlKSwgd2hldGhlciB0aGUgdXNlciBsb2doeXIgb3I8 L3NwYW4+PGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNp emU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsg Zm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjog c3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFj ZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDog MHB4OyI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9u dC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3Jt YWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxp Z246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUt c3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lk dGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyI+Jm5ic3A7 Z2FyYm8NCiBvcGVucyB0aGUgZmlsZSBkb2VzIG5vdCBtYXR0ZXIuICZuYnNwO1RoZSBjbGllbnQg aGFzIHRvIHByZXNlbnQ8L3NwYW4+PGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVs dmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50 LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1h bDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBu b25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0 LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6 IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFy aWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBu b3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9y bTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQt dGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1w b3J0YW50OyI+Jm5ic3A7YW4NCiB1aWQgb2YgMTk0NTIgdG8gZ2V0IHdyaXRlIHBlcm1pc3Npb24u IElmIGl0IHByZXNlbnRzIGFueSBvdGhlcjwvc3Bhbj48YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQt ZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBm b250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3Bh Y2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10 cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAt d2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJm b250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1h bDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVy LXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRl eHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBw eDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9uZTsgZGlzcGxheTog aW5saW5lICFpbXBvcnRhbnQ7Ij4mbmJzcDt2YWx1ZQ0KIGZvciB0aGUgdWlkLCB0aGVuIGl0IG11 c3QgZ2l2ZSBhIGdpZCBvZiAyODQxOCB0byBnZXQgcmVhZDwvc3Bhbj48YnIgY2xhc3M9IiIgc3R5 bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTog bm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBs ZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBw eDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2lu ZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxzcGFuIGNsYXNzPSIi IHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5 bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1h bDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50 OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNw YWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9uZTsg ZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7Ij4mbmJzcDthY2Nlc3MuPC9zcGFuPjxiciBjbGFz cz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250 LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBu b3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWlu ZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29y ZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPGJyIGNs YXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZv bnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6 IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQt aW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3 b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8c3Bh biBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4 OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2Vp Z2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0 ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1h bDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxv YXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyI+Jm5ic3A7RnVydGhlciwNCiBp ZiB0aGUgbWV0YWRhdGEgc2VydmVyIGRlY2lkZXMgdG8gZmVuY2UgdGhlIGZpbGUsIGl0IG1heTwv c3Bhbj48YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6 ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBm b250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBz dGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNl OiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAw cHg7Ij4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250 LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1h bDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGln bjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1z cGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0 aDogMHB4OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7Ij4mbmJzcDtj aGFuZ2UNCiB0aGUgdWlkIGFuZCBnaWQgYXMgc3VjaDo8L3NwYW4+PGJyIGNsYXNzPSIiIHN0eWxl PSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5v cm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0 dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7 IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6 IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8YnIgY2xhc3M9IiIgc3R5 bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTog bm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBs ZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBw eDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2lu ZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxzcGFuIGNsYXNzPSIi IHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5 bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1h bDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50 OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNw YWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9uZTsg ZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7Ij4mbmJzcDstcnctci0tLS0tDQogJm5ic3A7Jm5i c3A7Jm5ic3A7MSAxOTQ1MyAmbmJzcDsmbmJzcDsyODQxOSAmbmJzcDsmbmJzcDsmbmJzcDsxNjk3 IERlYyAmbmJzcDs0IDExOjMxIGRhdGFfb21waGEuYzwvc3Bhbj48YnIgY2xhc3M9IiIgc3R5bGU9 ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9y bWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0 ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsg dGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzog MHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxiciBjbGFzcz0iIiBzdHls ZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBu b3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxl dHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4 OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5n OiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPGJyIGNsYXNzPSIiIHN0 eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6 IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsg bGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAw cHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNp bmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8c3BhbiBjbGFzcz0i IiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0 eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3Jt YWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVu dDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1z cGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7 IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyI+V2hhdA0KIHdlIGNvdWxkIHN1Z2dlc3Qgd291 bGQgYmUgc29tZXRoaW5nIGFsb25nIHRoZSBsaW5lcyBvZjo8L3NwYW4+PGJyIGNsYXNzPSIiIHN0 eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6 IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsg bGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAw cHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNp bmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8YnIgY2xhc3M9IiIg c3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHls ZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFs OyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6 IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3Bh Y2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxzcGFuIGNsYXNz PSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQt c3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5v cm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5k ZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3Jk LXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9u ZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7Ij4mbmJzcDtPbg0KIHRoZSBzdG9yYWdlIGRl dmljZSwgaXQgbWF5IGJlIGFzc2lnbmVkIHNvbWUgdW5wcmVkaWN0YWJsZTwvc3Bhbj48YnIgY2xh c3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9u dC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDog bm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1p bmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdv cmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxzcGFu IGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7 IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWln aHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRl eHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFs OyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9h dDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7Ij4mbmJzcDtzeW50aGV0aWMNCiB1 aWQvZ2lkIHRvIGRlbnkgYWNjZXNzLjwvc3Bhbj48YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFt aWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250 LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2lu Zzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFu c2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Vi a2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250 LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsg Zm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNw YWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQt dHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsg LXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5s aW5lICFpbXBvcnRhbnQ7Ij4mbmJzcDvigKY8L3NwYW4+PGJyIGNsYXNzPSIiIHN0eWxlPSJmb250 LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsg Zm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNw YWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQt dHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsg LXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0i Zm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3Jt YWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRl ci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0 ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAw cHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6 IGlubGluZSAhaW1wb3J0YW50OyI+Jm5ic3A7RnVydGhlciwNCiBpZiB0aGUgbWV0YWRhdGEgc2Vy dmVyIGRlY2lkZXMgdG8gZmVuY2UgdGhlIGZpbGUsIGl0PC9zcGFuPjxiciBjbGFzcz0iIiBzdHls ZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBu b3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxl dHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4 OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5n OiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPHNwYW4gY2xhc3M9IiIg c3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHls ZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFs OyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6 IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3Bh Y2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBk aXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiPiZuYnNwO3Nob3VsZA0KIGNoYW5nZSB0aGUgdWlk IGFuZC9vciBnaWQgc3VjaCB0aGF0IHRoZXNlIHZhbHVlczwvc3Bhbj48YnIgY2xhc3M9IiIgc3R5 bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTog bm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBs ZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBw eDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2lu ZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxzcGFuIGNsYXNzPSIi IHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5 bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1h bDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50 OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNw YWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9uZTsg ZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7Ij4mbmJzcDtuZWl0aGVyDQogbWF0Y2ggZWFybGll ciB2YWx1ZXMgZm9yIHRoYXQgZmlsZSBub3IgbWF0Y2g8L3NwYW4+PGJyIGNsYXNzPSIiIHN0eWxl PSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5v cm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0 dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7 IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6 IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8c3BhbiBjbGFzcz0iIiBz dHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxl OiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7 IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDog MHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFj aW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRp c3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyI+Jm5ic3A7YQ0KIHByZWRpY3RhYmxlIGNoYW5nZSBi YXNlZCBvbiBhbiBlYXJsaWVyIGZlbmNpbmcuPC9zcGFuPjxiciBjbGFzcz0iIiBzdHlsZT0iZm9u dC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7 IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1z cGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0 LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7 IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPGJyIGNsYXNzPSIiIHN0eWxlPSJm b250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1h bDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVy LXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRl eHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBw eDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8c3BhbiBjbGFzcz0iIiBzdHls ZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBu b3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxl dHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4 OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5n OiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3Bs YXk6IGlubGluZSAhaW1wb3J0YW50OyI+VWdoLA0KIG5vdCBzdXJlIEkgbGlrZSB0aGUgd29yZHMu PC9zcGFuPjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1z aXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7 IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246 IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3Bh Y2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6 IDBweDsiPg0KPGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250 LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1h bDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGln bjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1z cGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0 aDogMHB4OyI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsg Zm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBu b3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQt YWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hp dGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Ut d2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyI+dWlk W04mIzQzOzFdDQogIT0gdWlkW04tMV0gJmFtcDsmYW1wOyB1aWRbTiYjNDM7MV0gJm5ic3A7IT0g Y2hhbmdlKHVpZFtOLTFdIC0mZ3Q7IHVpZFtOXSkuPC9zcGFuPjxiciBjbGFzcz0iIiBzdHlsZT0i Zm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3Jt YWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRl ci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0 ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAw cHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPGJyIGNsYXNzPSIiIHN0eWxl PSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5v cm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0 dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7 IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6 IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8c3BhbiBjbGFzcz0iIiBz dHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxl OiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7 IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDog MHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFj aW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRp c3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyI+SS5lLiwNCiBkbyBub3Qgc2V0IHRvIHJlY2VudCBv bGQgdmFsdWVzIChtaWdodCBmZW5jZSBiYWNrIHRvIGFuIHVpZDwvc3Bhbj48YnIgY2xhc3M9IiIg c3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHls ZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFs OyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6 IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3Bh Y2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxzcGFuIGNsYXNz PSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQt c3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5v cm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5k ZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3Jk LXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9u ZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7Ij5hbg0KIG9sZGVyIGNsaWVudCBhbHJlYWR5 IGhhcykgYW5kIGRvIG5vdCB1c2UgYSBmaXhlZCBpbmNyZW1lbnQuPC9zcGFuPjxiciBjbGFzcz0i IiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0 eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3Jt YWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVu dDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1z cGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPC9kaXY+DQo8 L2Jsb2NrcXVvdGU+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KU28gbWF5 YmUgaW4gdGhlIGZpcnN0IHBhcmFncmFwaCB5b3UgbWVhbiDigJzigKYgc29tZSB1bnByZWRpY3Rh YmxlIGFuZDwvZGl2Pg0KPGRpdiBjbGFzcz0iIj51bnVzZWQgYnkgYW55IGN1cnJlbnQgY2xpZW50 4oCdPzwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBl PSJjaXRlIiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiIHN0eWxlPSJmb250 LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsg Zm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNw YWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQt dHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsg LXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8YnIgY2xhc3M9IiIgc3R5bGU9ImZv bnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFs OyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXIt c3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4 dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4 OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxibG9ja3F1b3RlIHR5cGU9ImNp dGUiIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEy cHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13 ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7 IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9y bWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+ DQooNSkgSW4gdGhlIOKAnGxvb3NlIGNvdXBsaW5nIG1vZGVs4oCdIGZpbGUgYWNjZXNzIGFjdHVh bGx5IGVuZm9yY2VkIGJ5IHRoZSBjbGllbnQsPGJyIGNsYXNzPSIiPg0Kd2hpY2ggcHJlc3VtYWJs eSBjYW4gYmUgbWFuaXB1bGF0ZWQgYnkgYW4gZXZpbCB1c2VyLiBUaGlzIGlzIGNsZWFybHkgc3Rh dGVkIG48YnIgY2xhc3M9IiI+DQpTZWN0aW9uIDIuMjog4oCcIFRoZSBjbGllbnQgaXMgdGh1cyBz b2xlbHkgcmVzcG9uc2libGUgZm9yIGVuZm9yY2luZyBmaWxlPGJyIGNsYXNzPSIiPg0KcGVybWlz c2lvbnMgaW4gYSBsb29zZWx5IGNvdXBsZWQgbW9kZWwu4oCdICZuYnNwO0Fsc28sIFNlY3Rpb24g Mi4yLjEgbWVudGlvbnMg4oCcYTxiciBjbGFzcz0iIj4NClNFVEFUVFIgd291bGQgYmUgc2VudCB0 byB0aGUgc3RvcmFnZSBkZXZpY2UgdG8gc2V0IHRoZSBvd25lciBhbmQgZ3JvdXAgb2YgdGhlPGJy IGNsYXNzPSIiPg0KZGF0YSBmaWxl4oCdLCBhbmQgc2luY2UgaGVyZSBpcyBubyBjb250cm9sIHBy b3RvY29sIGJldHdlZW4gdGhlIG1ldGFkYXRhIHNlcnZlcjxiciBjbGFzcz0iIj4NCmFuZCB0aGUg ZmlsZSBzZXJ2ZXIgc28gSSBhc3N1bWUgaXQgaXMgc2VudCBieSB0aGUgY2xpZW50LjxiciBjbGFz cz0iIj4NCjwvYmxvY2txdW90ZT4NCjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhl bHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFu dC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3Jt YWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTog bm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4 dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5 OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZh cmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzog bm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zv cm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0 LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWlt cG9ydGFudDsiPkl0DQogaXMgc3VidGxlLCBidXQgdGhpcyBnb2VzIGJhY2sgdG8gdGhlIGZhY3Qg KHNlZSBbMV0pIHRoYXQg4oCcbm8gY29udHJvbCBwcm90b2NvbOKAnSBkb2VzIG5vdDwvc3Bhbj48 YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJw eDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdl aWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsg dGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3Jt YWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4N CjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6 IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9u dC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3Rh cnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTog bm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4 OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7Ij5pbXBseQ0KIOKAnG5v IGNvbW11bmljYXRpb24gYmV0d2VlbiB0aGUgbWV0YWRhdGEgc2VydmVyIGFuZCB0aGUgc3RvcmFn ZTwvc3Bhbj48YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQt c2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFs OyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWdu OiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNw YWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRo OiAwcHg7Ij4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBm b250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5v cm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1h bGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0 ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13 aWR0aDogMHB4OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7Ij5kZXZp Y2XigJ0uDQogJm5ic3A7SS5lLiwgdGhlIE1EUyBkb2VzIHRoZSBTRVRBVFRSLjwvc3Bhbj48YnIg Y2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsg Zm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdo dDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4 dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7 IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxi ciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4 OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2Vp Z2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0 ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1h bDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0K PHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTog MTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250 LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFy dDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBu b3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7 IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiPkFsc28sDQogSSBub3Rp Y2UgeW91IGFyZSB1c2luZyB0aGUgcGhyYXNlIOKAnGZpbGUgc2VydmVy4oCdLCB3aGljaCBwcm9i YWJseSBpbXBhY3RzPC9zcGFuPjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZl dGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1j YXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7 IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9u ZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1z dHJva2Utd2lkdGg6IDBweDsiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBI ZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlh bnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9y bWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06 IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRl eHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9y dGFudDsiPnlvdXINCiB2aWV3IGluIHlvdXIgcG9pbnQgMyAoc2VlIG15IFsyXSkgLSB0aGUgdGVy bSB3ZSB1c2UgaXMgc3RvcmFnZTwvc3Bhbj48YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5 OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZh cmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzog bm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zv cm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0 LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LWZh bWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9u dC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNp bmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJh bnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdl YmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5l ICFpbXBvcnRhbnQ7Ij5kZXZpY2UuDQogVGhlcmUgaXMgbm8gcmVxdWlyZW1lbnQgdGhhdCB0aGlz IGRldmljZSBzZXJ2ZSB1cCBkYXRhIGZpbGVzPC9zcGFuPjxiciBjbGFzcz0iIiBzdHlsZT0iZm9u dC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7 IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1z cGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0 LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7 IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9 ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9y bWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0 ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsg dGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzog MHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5 OiBpbmxpbmUgIWltcG9ydGFudDsiPmFzDQogaWYgdGhleSB3ZXJlIGluIGEgZmlsZXN5c3RlbS4g VGhlIHN0b3JhZ2UgZGV2aWNlIGlzIGxpbWl0ZWQgaW4gdGhlIG9wZXJhdGlvbnM8L3NwYW4+PGJy IGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7 IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWln aHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRl eHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFs OyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8 c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAx MnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQt d2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0 OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5v cm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsg ZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyI+dGhhdA0KIGl0IGNhbiBy ZXNwb25kIHRvIGZyb20gdGhlIGNsaWVudCBiYXNlZCBvbiB0aGUgaW5mb3JtYXRpb24gaXQgaXM8 L3NwYW4+PGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNp emU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsg Zm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjog c3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFj ZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDog MHB4OyI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9u dC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3Jt YWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxp Z246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUt c3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lk dGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyI+cHJlc2Vu dGVkDQogd2l0aC48L3NwYW4+PGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0 aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNh cHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsg dGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25l OyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0 cm9rZS13aWR0aDogMHB4OyI+DQo8YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2 ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQt Y2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFs OyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5v bmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQt c3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTog SGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJp YW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5v cm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3Jt OiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10 ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBv cnRhbnQ7Ij5Gb3INCiBleGFtcGxlLCB0aGUgZXhwb3J0cyBvbiB0aGUgc3RvcmFnZSBkZXZpY2Ug Y2FuIGJlIGNvbmZpZ3VyZWQgc3VjaDwvc3Bhbj48YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFt aWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250 LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2lu Zzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFu c2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Vi a2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250 LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsg Zm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNw YWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQt dHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsg LXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5s aW5lICFpbXBvcnRhbnQ7Ij50aGF0DQogdGhlIG1ldGFkYXRhIHNlcnZlciBpcyB0aGUgb25seSBv bmUgd2hpY2ggY2FuIG1vdW50IHRoZSBleHBvcnRzLjwvc3Bhbj48YnIgY2xhc3M9IiIgc3R5bGU9 ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9y bWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0 ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsg dGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzog MHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxzcGFuIGNsYXNzPSIiIHN0 eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6 IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsg bGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAw cHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNp bmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9uZTsgZGlz cGxheTogaW5saW5lICFpbXBvcnRhbnQ7Ij5BbmQNCiBzaW5jZSB0aGUgbWV0YWRhdGEgc2VydmVy IG9ubHkgaGFuZHMgb3V0IEZpbGUgSGFuZGxlcyB0byB0aGU8L3NwYW4+PGJyIGNsYXNzPSIiIHN0 eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6 IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsg bGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAw cHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNp bmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8c3BhbiBjbGFzcz0i IiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0 eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3Jt YWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVu dDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1z cGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7 IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyI+Y2xpZW50cywNCiB0aGV5IHdvdWxkIG5vdCBi ZSBhYmxlIHRvIHdhbGsgdGhlIG5hbWVzcGFjZSBvZiB0aGUgc3RvcmFnZTwvc3Bhbj48YnIgY2xh c3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9u dC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDog bm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1p bmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdv cmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxzcGFu IGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7 IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWln aHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRl eHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFs OyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9h dDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7Ij5kZXZpY2UuPC9zcGFuPjxiciBj bGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBm b250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0 OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0 LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsg d29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPC9k aXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0K VGhhbmtzIGZvciB0aGUgZXhwbGFuYXRpb24g4oCmIG1ha2VzIHNlbnNlLjxiciBjbGFzcz0iIj4N CjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj48YnIgY2xh c3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9u dC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDog bm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1p bmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdv cmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxiciBj bGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBm b250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0 OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0 LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsg d29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPGJs b2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRp Y2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fw czogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0 ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7 IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ry b2tlLXdpZHRoOiAwcHg7Ij4NCjxiciBjbGFzcz0iIj4NClB1dCBhbm90aGVyIHdheSwgaXQgc2Vl bXMgYXMgaWYgYW55IGNsaWVudCB0aGF0IGhhcyBjcmVkZW50aWFscyBhbGxvd2luZyBpdCB0bzxi ciBjbGFzcz0iIj4NCmFjY2VzcyB0byB0aGUgZmlsZSBzZXJ2ZXIgY2FuIGFjY2VzcyBhbnkgZmls ZSBvbiB0aGUgZmlsZSBzeXN0ZW0gaWYgaXQgaXM8YnIgY2xhc3M9IiI+DQpjaG9vc2VzIHRvIGRv IHNvIChlLmcuLiwgaWYgaXQgaXMgYSBtYWxpY2lvdXMgY2xpZW50KS4gSXMgdGhhdCBjb3JyZWN0 PzxiciBjbGFzcz0iIj4NCjwvYmxvY2txdW90ZT4NCjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1m YW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZv bnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFj aW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRy YW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13 ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZv bnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFs OyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXIt c3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4 dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4 OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBp bmxpbmUgIWltcG9ydGFudDsiPkFzDQogd2l0aCBhbnkgTkZTIGZpbGVzeXN0ZW0gd2hpY2ggdXNl cyBhbiBBVVRIX1NZUyBzZWN1cml0eSBtb2RlbCw8L3NwYW4+PGJyIGNsYXNzPSIiIHN0eWxlPSJm b250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1h bDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVy LXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRl eHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBw eDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8c3BhbiBjbGFzcz0iIiBzdHls ZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBu b3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxl dHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4 OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5n OiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3Bs YXk6IGlubGluZSAhaW1wb3J0YW50OyI+ZWFjaA0KIG9mIHRoZSBmaWxlIGhhbmRsZSwgdWlkLCBh bmQgZ2lkIGNhbiBiZSBmb3JnZWQgdG8gZ2FpbiBhY2Nlc3MuPC9zcGFuPjxiciBjbGFzcz0iIiBz dHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxl OiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7 IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDog MHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFj aW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPGJyIGNsYXNzPSIi IHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5 bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1h bDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50 OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNw YWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8c3BhbiBjbGFz cz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250 LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBu b3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWlu ZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29y ZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5v bmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyI+SW4NCiBvdGhlciB3b3JkcywgdGhpcyBp cyBub3RoaW5nIG5ldy48L3NwYW4+PGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVs dmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50 LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1h bDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBu b25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0 LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBI ZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlh bnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9y bWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06 IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRl eHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWls eTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12 YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6 IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNm b3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtp dC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFp bXBvcnRhbnQ7Ij5UaGUNCiBzZWN1cml0eSBtb2RlbCBmb3IgTkZTdjQuMiAoYW5kIGJhc2VkIG9u IHRoYXQsIE5GU3Y0LjAgYW5kIE5GU3Y0LjEpOjwvc3Bhbj48YnIgY2xhc3M9IiIgc3R5bGU9ImZv bnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFs OyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXIt c3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4 dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4 OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxiciBjbGFzcz0iIiBzdHlsZT0i Zm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3Jt YWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRl ci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0 ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAw cHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPHNwYW4gY2xhc3M9IiIgc3R5 bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTog bm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBs ZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBw eDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2lu ZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNw bGF5OiBpbmxpbmUgIWltcG9ydGFudDsiPltSRkM3ODYyXTwvc3Bhbj48YnIgY2xhc3M9IiIgc3R5 bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTog bm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBs ZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBw eDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2lu ZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxzcGFuIGNsYXNzPSIi IHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5 bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1h bDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50 OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNw YWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9uZTsg ZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7Ij4xNy4NCiAmbmJzcDtTZWN1cml0eSBDb25zaWRl cmF0aW9uczwvc3Bhbj48YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7 IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczog bm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0 LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdo aXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tl LXdpZHRoOiAwcHg7Ij4NCjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGlj YTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBz OiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRl eHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsg d2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJv a2Utd2lkdGg6IDBweDsiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2 ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQt Y2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFs OyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5v bmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQt c3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFu dDsiPiZuYnNwOyZuYnNwO05GU3Y0LjINCiBoYXMgYWxsIG9mIHRoZSBzZWN1cml0eSBjb25jZXJu cyBwcmVzZW50IGluIE5GU3Y0LjEgKHNlZTwvc3Bhbj48YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQt ZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBm b250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3Bh Y2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10 cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAt d2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJm b250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1h bDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVy LXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRl eHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBw eDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9uZTsgZGlzcGxheTog aW5saW5lICFpbXBvcnRhbnQ7Ij4mbmJzcDsmbmJzcDtTZWN0aW9uDQogMjEgb2YgW1JGQzU2NjFd KSwgYXMgd2VsbCBhcyB0aG9zZSBwcmVzZW50IGluIHRoZSBzZXJ2ZXItc2lkZTwvc3Bhbj48YnIg Y2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsg Zm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdo dDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4 dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7 IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxz cGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEy cHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13 ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7 IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9y bWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBm bG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7Ij4mbmJzcDsmbmJzcDtjb3B5 DQogKHNlZSBTZWN0aW9uIDQuOSkgYW5kIGluIExhYmVsZWQgTkZTIChzZWUgU2VjdGlvbiA5LjYp Ljwvc3Bhbj48YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQt c2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFs OyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWdu OiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNw YWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRo OiAwcHg7Ij4NCjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9u dC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3Jt YWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxp Z246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUt c3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lk dGg6IDBweDsiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7 IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczog bm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0 LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdo aXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tl LXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiPldo aWNoDQogbGVhZHMgdXMgdG8gW1JGQzU2NjFdOjwvc3Bhbj48YnIgY2xhc3M9IiIgc3R5bGU9ImZv bnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFs OyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXIt c3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4 dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4 OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxiciBjbGFzcz0iIiBzdHlsZT0i Zm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3Jt YWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRl ci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0 ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAw cHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPHNwYW4gY2xhc3M9IiIgc3R5 bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTog bm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBs ZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBw eDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2lu ZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNw bGF5OiBpbmxpbmUgIWltcG9ydGFudDsiPjIuMi4xLjEuMS4yLg0KICZuYnNwO1NlY3VyaXR5IE1l Y2hhbmlzbXMgZm9yIE5GU3Y0LjE8L3NwYW4+PGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWls eTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12 YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6 IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNm b3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtp dC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFt aWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250 LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2lu Zzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFu c2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Vi a2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250 LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsg Zm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNw YWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQt dHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsg LXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5s aW5lICFpbXBvcnRhbnQ7Ij4mbmJzcDsmbmJzcDtSUENTRUNfR1NTLA0KIHZpYSBHU1MtQVBJLCBu b3JtYWxpemVzIGFjY2VzcyB0byBtZWNoYW5pc21zIHRoYXQgcHJvdmlkZTwvc3Bhbj48YnIgY2xh c3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9u dC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDog bm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1p bmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdv cmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxzcGFu IGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7 IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWln aHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRl eHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFs OyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9h dDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7Ij4mbmJzcDsmbmJzcDtzZWN1cml0 eQ0KIHNlcnZpY2VzLiAmbmJzcDtUaGVyZWZvcmUsIE5GU3Y0LjEgY2xpZW50cyBhbmQgc2VydmVy cyBNVVNUPC9zcGFuPjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsg Zm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBu b3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQt YWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hp dGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Ut d2lkdGg6IDBweDsiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRp Y2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fw czogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0 ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7 IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ry b2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsi PiZuYnNwOyZuYnNwO3N1cHBvcnQNCiB0aGUgS2VyYmVyb3MgVjUgc2VjdXJpdHkgbWVjaGFuaXNt Ljwvc3Bhbj48YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQt c2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFs OyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWdu OiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNw YWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRo OiAwcHg7Ij4NCjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9u dC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3Jt YWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxp Z246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUt c3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lk dGg6IDBweDsiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7 IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczog bm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0 LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdo aXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tl LXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiPiZu YnNwOyZuYnNwO1RoZQ0KIHVzZSBvZiBSUENTRUNfR1NTIHJlcXVpcmVzIHNlbGVjdGlvbiBvZiBt ZWNoYW5pc20sIHF1YWxpdHkgb2Y8L3NwYW4+PGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWls eTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12 YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6 IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNm b3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtp dC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1m YW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZv bnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFj aW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRy YW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13 ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGlu ZSAhaW1wb3J0YW50OyI+Jm5ic3A7Jm5ic3A7cHJvdGVjdGlvbg0KIChRT1ApLCBhbmQgc2Vydmlj ZSAoYXV0aGVudGljYXRpb24sIGludGVncml0eSwgcHJpdmFjeSkuPC9zcGFuPjxiciBjbGFzcz0i IiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0 eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3Jt YWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVu dDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1z cGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPHNwYW4gY2xh c3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9u dC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDog bm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1p bmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdv cmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBu b25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiPiZuYnNwOyZuYnNwO0Zvcg0KIHRoZSBt YW5kYXRlZCBzZWN1cml0eSBtZWNoYW5pc21zLCBORlN2NC4xIHNwZWNpZmllcyB0aGF0IGEgUU9Q IG9mPC9zcGFuPjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9u dC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3Jt YWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxp Z246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUt c3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lk dGg6IDBweDsiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7 IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczog bm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0 LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdo aXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tl LXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiPiZu YnNwOyZuYnNwO3plcm8NCiBpcyB1c2VkLCBsZWF2aW5nIGl0IHVwIHRvIHRoZSBtZWNoYW5pc20g b3IgdGhlIG1lY2hhbmlzbSdzPC9zcGFuPjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6 IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFy aWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBu b3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9y bTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQt dGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFt aWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250 LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2lu Zzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFu c2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Vi a2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUg IWltcG9ydGFudDsiPiZuYnNwOyZuYnNwO2NvbmZpZ3VyYXRpb24NCiB0byBtYXAgUU9QIHplcm8g dG8gYW4gYXBwcm9wcmlhdGUgbGV2ZWwgb2YgcHJvdGVjdGlvbi48L3NwYW4+PGJyIGNsYXNzPSIi IHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5 bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1h bDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50 OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNw YWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8c3BhbiBjbGFz cz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250 LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBu b3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWlu ZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29y ZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5v bmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyI+Jm5ic3A7Jm5ic3A7RWFjaA0KIG1hbmRh dGVkIG1lY2hhbmlzbSBzcGVjaWZpZXMgYSBtaW5pbXVtIHNldCBvZiBjcnlwdG9ncmFwaGljPC9z cGFuPjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXpl OiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZv bnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0 YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6 IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBw eDsiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQt c2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFs OyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWdu OiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNw YWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRo OiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiPiZuYnNwOyZu YnNwO2FsZ29yaXRobXMNCiBmb3IgaW1wbGVtZW50aW5nIGludGVncml0eSBhbmQgcHJpdmFjeS4g Jm5ic3A7TkZTdjQuMSBjbGllbnRzPC9zcGFuPjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1p bHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQt dmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5n OiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5z Zm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJr aXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQt ZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBm b250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3Bh Y2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10 cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAt d2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxp bmUgIWltcG9ydGFudDsiPiZuYnNwOyZuYnNwO2FuZA0KIHNlcnZlcnMgTVVTVCBiZSBpbXBsZW1l bnRlZCBvbiBvcGVyYXRpbmcgZW52aXJvbm1lbnRzIHRoYXQgY29tcGx5PC9zcGFuPjxiciBjbGFz cz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250 LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBu b3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWlu ZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29y ZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPHNwYW4g Y2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsg Zm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdo dDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4 dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7 IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0 OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiPiZuYnNwOyZuYnNwO3dpdGgNCiB0 aGUgUkVRVUlSRUQgY3J5cHRvZ3JhcGhpYyBhbGdvcml0aG1zIG9mIGVhY2ggUkVRVUlSRUQ8L3Nw YW4+PGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6 IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9u dC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3Rh cnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTog bm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4 OyI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1z aXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7 IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246 IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3Bh Y2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6 IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyI+Jm5ic3A7Jm5i c3A7bWVjaGFuaXNtLjwvc3Bhbj48YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2 ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQt Y2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFs OyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5v bmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQt c3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhl bHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFu dC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3Jt YWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTog bm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4 dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5 OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZh cmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzog bm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zv cm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0 LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWlt cG9ydGFudDsiPjIuMi4xLjEuMS4yLjEuDQogJm5ic3A7S2VyYmVyb3MgVjU8L3NwYW4+PGJyIGNs YXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZv bnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6 IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQt aW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3 b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8YnIg Y2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsg Zm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdo dDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4 dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7 IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxz cGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEy cHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13 ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7 IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9y bWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBm bG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7Ij4mbmJzcDsmbmJzcDtUaGUN CiBLZXJiZXJvcyBWNSBHU1MtQVBJIG1lY2hhbmlzbSBhcyBkZXNjcmliZWQgaW4gWzVdIE1VU1Qg YmU8L3NwYW4+PGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250 LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1h bDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGln bjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1z cGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0 aDogMHB4OyI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsg Zm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBu b3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQt YWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hp dGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Ut d2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyI+Jm5i c3A7Jm5ic3A7aW1wbGVtZW50ZWQNCiB3aXRoIHRoZSBSUENTRUNfR1NTIHNlcnZpY2VzIGFzIHNw ZWNpZmllZCBpbiB0aGU8L3NwYW4+PGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVs dmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50 LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1h bDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBu b25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0 LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6 IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFy aWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBu b3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9y bTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQt dGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1w b3J0YW50OyI+Jm5ic3A7Jm5ic3A7Zm9sbG93aW5nDQogdGFibGU6PC9zcGFuPjxiciBjbGFzcz0i IiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0 eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3Jt YWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVu dDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1z cGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPGJyIGNsYXNz PSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQt c3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5v cm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5k ZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3Jk LXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8c3BhbiBj bGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBm b250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0 OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0 LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsg d29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6 IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyI+VG8NCiBwYXJhcGhyYXNlIGl0LCBO RlN2NC54IGNsaWVudHMgYW5kIHNlcnZlcnMgTVVTVCBzdXBwb3J0PC9zcGFuPjxiciBjbGFzcz0i IiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0 eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3Jt YWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVu dDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1z cGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPHNwYW4gY2xh c3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9u dC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDog bm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1p bmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdv cmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0OiBu b25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiPnRoZQ0KIEtlcmJlcm9zIFY1IHNlY3Vy aXR5IG1lY2hhbmlzbSwgYnV0IGluc3RhbGxhdGlvbnMgYXJlIG5vdDwvc3Bhbj48YnIgY2xhc3M9 IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1z dHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9y bWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRl bnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQt c3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxzcGFuIGNs YXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZv bnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6 IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQt aW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3 b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmbG9hdDog bm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7Ij5yZXF1aXJlZA0KIHRvIHVzZSBLZXJi ZXJvcy48L3NwYW4+PGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBm b250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5v cm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1h bGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0 ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13 aWR0aDogMHB4OyI+DQo8YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7 IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczog bm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0 LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdo aXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tl LXdpZHRoOiAwcHg7Ij4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0 aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNh cHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsg dGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25l OyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0 cm9rZS13aWR0aDogMHB4OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7 Ij5JLmUuLA0KIHRoaXM6PC9zcGFuPjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhl bHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFu dC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3Jt YWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTog bm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4 dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTog SGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJp YW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5v cm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3Jt OiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10 ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1p bHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQt dmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5n OiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5z Zm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJr aXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAh aW1wb3J0YW50OyI+bW91bnQNCiAtbyB2ZXJzPTQuMixzZWM9c3lzIHNlcnZlcjovIC9tbnQ8L3Nw YW4+PGJyIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6 IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9u dC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3Rh cnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTog bm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4 OyI+DQo8YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6 ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBm b250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBz dGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNl OiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAw cHg7Ij4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250 LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1h bDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGln bjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1z cGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0 aDogMHB4OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7Ij5tZWFucw0K IHRoYXQgYW55IG1hbGljaW91cyB1c2VyIGNhbiB1c2UgYW55IGNsaWVudCB3aGljaCBjYW4gY29u bmVjdDwvc3Bhbj48YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZv bnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9y bWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFs aWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRl LXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdp ZHRoOiAwcHg7Ij4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNh OyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6 IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4 dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3 aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9r ZS13aWR0aDogMHB4OyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7Ij50 bw0KIHRoZSBzZXJ2ZXIgdG8gZG8gd2hhdGV2ZXIgdGhleSB3YW50Ljwvc3Bhbj48YnIgY2xhc3M9 IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1z dHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9y bWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRl bnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQt c3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxiciBjbGFz cz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250 LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBu b3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWlu ZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29y ZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPHNwYW4g Y2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsg Zm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdo dDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4 dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7 IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZsb2F0 OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiPkluDQogb3RoZXIgd29yZHMsIHRo aXMgaXMgbm90IGEgcmVkdWN0aW9uIG9mIHRoZSBhY3R1YWwgc2VjdXJpdHkgZnJvbSBORlN2NC54 Ljwvc3Bhbj48YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQt c2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFs OyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWdu OiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNw YWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRo OiAwcHg7Ij4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9 IiI+DQo8L2Rpdj4NClRoYW5rcyBmb3IgdGhlIGV4dGVuc2l2ZSBleHBsYW5hdGlvbi4gSXQgcmVz b2x2ZXMgdGhlIGlzc3VlIHRoYXQgSSBwZXJjZWl2ZWQuPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxi ciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5UaGFua3MsPC9kaXY+DQo8ZGl2IGNs YXNzPSIiPkJyaWFuPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjxibG9ja3F1 b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiIgc3R5 bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTog bm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBs ZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBw eDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2lu ZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxiciBjbGFzcz0iIiBz dHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxl OiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7 IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDog MHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFj aW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiPg0KPGJsb2NrcXVvdGUg dHlwZT0iY2l0ZSIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQt c2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFs OyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWdu OiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNw YWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRo OiAwcHg7Ij4NCjxiciBjbGFzcz0iIj4NClVubGVzcyBJ4oCZbSBtaXN0YWtlbiwgdGhpcyBpcyBh IHNlcmlvdXMgcmVkdWN0aW9uIG9mIGFjdHVhbCBzZWN1cml0eSBmcm9tIE5GUzxiciBjbGFzcz0i Ij4NCjQueCwgYW5kIGFsc28gZnJvbSB0aGUgdGlnaHQgY291cGxpbmcgbW9kZWwuIFRoaXMgc2hv dWxkIGJlIGNsZWFybHkgc3RhdGVkIGluPGJyIGNsYXNzPSIiPg0KdGhlIHNlY3VyaXR5IGNvbnNp ZGVyYXRpb25zIHNlY3Rpb24sIHNvIHRoYXQgcHJvdG9jb2wgYWRvcHRlcnMgYW5kIHVzZXJzPGJy IGNsYXNzPSIiPg0KdW5kZXJzdGFuZCB0aGUgYWRkaXRpb25hbCByaXNrcyBvZiB0aGUgbG9vc2Ug Y291cGxpbmcgbW9kZWwuIEZvciB0aGlzICZuYnNwO3JlYXNvbiw8YnIgY2xhc3M9IiI+DQpJJ3Zl IG1hcmtlZCB0aGUgcmV2aWV3IHdpdGggJnF1b3Q7SGFzIElzc3VlcyZxdW90OyByYXRoZXIgdGhh biAmcXVvdDtIYXMgTml0cyZxdW90Oy48YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQpfX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXzxiciBjbGFzcz0iIj4N Cm5mc3Y0IG1haWxpbmcgbGlzdDxiciBjbGFzcz0iIj4NCjxhIGhyZWY9Im1haWx0bzpuZnN2NEBp ZXRmLm9yZyIgY2xhc3M9IiI+bmZzdjRAaWV0Zi5vcmc8L2E+PGJyIGNsYXNzPSIiPg0KPGEgaHJl Zj0iaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9uZnN2NCIgY2xhc3M9IiI+ aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9uZnN2NDwvYT48L2Jsb2NrcXVv dGU+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPGJyIGNsYXNzPSIiPg0KPGRpdiBj bGFzcz0iIj4tLSZuYnNwOzxiciBjbGFzcz0iIj4NCkJyaWFuIFdlaXM8YnIgY2xhc3M9IiI+DQpT ZWN1cml0eSwgQ1NHLCBDaXNjbyBTeXN0ZW1zPGJyIGNsYXNzPSIiPg0KVGVsZXBob25lOiAmIzQz OzEgNDA4IDUyNiA0Nzk2PGJyIGNsYXNzPSIiPg0KRW1haWw6PHNwYW4gY2xhc3M9IkFwcGxlLWNv bnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxhIGhyZWY9Im1haWx0bzpiZXdAY2lzY28uY29t IiBjbGFzcz0iIj5iZXdAY2lzY28uY29tPC9hPjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxv Y2txdW90ZT4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8YnIgY2xhc3M9IiI+DQo8 ZGl2IGNsYXNzPSIiPi0tJm5ic3A7PGJyIGNsYXNzPSIiPg0KQnJpYW4gV2VpczxiciBjbGFzcz0i Ij4NClNlY3VyaXR5LCBDU0csIENpc2NvIFN5c3RlbXM8YnIgY2xhc3M9IiI+DQpUZWxlcGhvbmU6 ICYjNDM7MSA0MDggNTI2IDQ3OTY8YnIgY2xhc3M9IiI+DQpFbWFpbDogPGEgaHJlZj0ibWFpbHRv OmJld0BjaXNjby5jb20iIGNsYXNzPSIiPmJld0BjaXNjby5jb208L2E+IDwvZGl2Pg0KPGJyIGNs YXNzPSIiPg0KPC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_B541D533FCBA45B08C3576A9FA320074ciscocom_-- From nobody Thu Jan 25 12:36:28 2018 Return-Path: X-Original-To: secdir@ietf.org Delivered-To: secdir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id C2E2F12EAAA; Thu, 25 Jan 2018 12:35:55 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Phillip Hallam-Baker To: Cc: draft-ietf-netmod-yang-tree-diagrams.all@ietf.org, ietf@ietf.org, netmod@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.70.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <151691255573.8494.16260998328717962330@ietfa.amsl.com> Date: Thu, 25 Jan 2018 12:35:55 -0800 Archived-At: Subject: [secdir] Secdir telechat review of draft-ietf-netmod-yang-tree-diagrams-05 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 25 Jan 2018 20:35:56 -0000 Reviewer: Phillip Hallam-Baker Review result: Has Nits I have reviewed the document and it is generally free of security considerations as claimed. There are some areas of concern however, the significance of which may become more apparent as such tools find future use. As described in the document, the tree diagram format is intended to serve as an output generated by a tool to aid human interpretation. Thus, a potential ambiguity can arise if the tool used to generate the format is buggy or if the document contains schema and presentation data compiled from different versions of the source. Specifications using this representation need to make clear which representation is canonical. Otherwise we end up in a situation in which a document that has an ambiguity being unfixable by means of issuing an errata because there is no agreement as to whether the change is breaking or not. Another issue that is of concern is that even though the format is not intended to be an input format, there can be no guarantee it will not be used as such. Indeed it could be argued that a spec that makes use of this format should encourage this approach so as to detect possible ambiguities. From nobody Thu Jan 25 15:51:00 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D175D12EB13 for ; Thu, 25 Jan 2018 15:50:58 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.699 X-Spam-Level: X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=primarydata.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UDhhMFYfEYmk for ; Thu, 25 Jan 2018 15:50:56 -0800 (PST) Received: from us-smtp-delivery-194.mimecast.com (us-smtp-delivery-194.mimecast.com [63.128.21.194]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B52B312EB04 for ; Thu, 25 Jan 2018 15:50:56 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=primarydata.com; s=mimecast20170802; t=1516924255; h=from:subject:date:message-id:to:cc:mime-version:content-type:in-reply-to:references; bh=dmHpIa9Stui8hLDBfDtm0VwVUdzao8vQvcMGa0/Cazc=; b=eIbTv/XdMFVBPL/1b4jvHKBDEkSQCTll7kQgwyiql27cA3WAIoUkBkZoVqthsXre91yU65zNaV8MpY+IEJ4JZfmrscdn1itkLD8QqreCNj4LVkJbGWnMKcLeatiF9E4t7390V/dgG+gYiYAIF+1GTuc4QyGfA4T2YxiqJNGjFPg= Received: from NAM03-CO1-obe.outbound.protection.outlook.com (mail-co1nam03lp0015.outbound.protection.outlook.com [216.32.181.15]) (Using TLS) by us-smtp-1.mimecast.com with ESMTP id us-mta-222-1YgEVrxRPteCOcyed1Rm6A-1; Thu, 25 Jan 2018 18:50:53 -0500 Received: from BY2PR1101MB1093.namprd11.prod.outlook.com (10.164.166.21) by BY2PR1101MB1096.namprd11.prod.outlook.com (10.164.166.24) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.428.17; Thu, 25 Jan 2018 23:50:49 +0000 Received: from BY2PR1101MB1093.namprd11.prod.outlook.com ([10.164.166.21]) by BY2PR1101MB1093.namprd11.prod.outlook.com ([10.164.166.21]) with mapi id 15.20.0428.024; Thu, 25 Jan 2018 23:50:48 +0000 From: Thomas Haynes To: "Brian Weis (bew)" CC: "draft-ietf-nfsv4-flex-files.all@ietf.org" , NFSv4 , "secdir@ietf.org" Thread-Topic: [nfsv4] Secdir last call review of draft-ietf-nfsv4-flex-files-15 Thread-Index: AQHTi9WQTx5RarnLbUyAVOTsrpXN+aNwovgAgACajgCABaIqgIAOdZ0AgAABmYA= Date: Thu, 25 Jan 2018 23:50:48 +0000 Message-ID: References: <151578274278.18715.11694935076324562133@ietfa.amsl.com> <75FDDF9F-C335-4488-9EAE-679DD9727A99@primarydata.com> <2D43D657-817F-4C43-A405-E7FB83C688AD@cisco.com> <599605AF-7CB3-4A56-A26A-3DE56B805309@primarydata.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [63.157.6.18] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; BY2PR1101MB1096; 20:QYwsJG2ATIjoBxbJQNdmHYtNdCJCnBQldq3G1Y25tm3j5eD9RelHR1W/xCzAmpIHI+/EiMuJFljlO/EeoekuE/6KvTYqnfUwYWwofbkaIf6ph5IxxIiekxhuMDkNMM3ipIpGLHp23JRX7ldyu9M9c2qCV1JMQl7cT6a9EVGCqRg= x-ms-exchange-antispam-srfa-diagnostics: SSOS; x-ms-office365-filtering-correlation-id: afb2099a-83d1-4f31-d508-08d5644e75bb x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(7021125)(4534165)(7022125)(4603075)(4627221)(201702281549075)(7048125)(7024125)(7027125)(7028125)(7023125)(5600026)(4604075)(3008032)(2017052603307)(7153060)(7193020); SRVR:BY2PR1101MB1096; x-ms-traffictypediagnostic: BY2PR1101MB1096: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(95692535739014); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040501)(2401047)(5005006)(8121501046)(3231062)(2400081)(944501161)(93006095)(93001095)(3002001)(10201501046)(6041288)(2016111802025)(20161123562045)(20161123558120)(20161123560045)(20161123564045)(6043046)(6072148)(201708071742011); SRVR:BY2PR1101MB1096; BCL:0; PCL:0; RULEID:; SRVR:BY2PR1101MB1096; x-forefront-prvs: 0563F2E8B7 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(396003)(376002)(346002)(366004)(39830400003)(39380400002)(51914003)(189003)(199004)(81156014)(54906003)(25786009)(83716003)(77096007)(81166006)(316002)(26005)(6116002)(99286004)(36756003)(8936002)(2950100002)(76176011)(6916009)(102836004)(4326008)(66066001)(3846002)(82746002)(14454004)(68736007)(6506007)(53546011)(186003)(8676002)(6246003)(5660300001)(478600001)(86362001)(6486002)(106356001)(230783001)(2900100001)(6436002)(33656002)(93886005)(53936002)(229853002)(6512007)(2906002)(7736002)(236005)(3660700001)(54896002)(105586002)(97736004)(3280700002)(42262002); DIR:OUT; SFP:1102; SCL:1; SRVR:BY2PR1101MB1096; H:BY2PR1101MB1093.namprd11.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; x-microsoft-antispam-message-info: uj1H669xwz8PMyWxfiyFaeye7CLk8MJwfbPMgd2IX2bds5va0od/4QTYI5JcqAL5eTaht8WPAJ3XLxbZKrYFVw== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM MIME-Version: 1.0 X-OriginatorOrg: primarydata.com X-MS-Exchange-CrossTenant-Network-Message-Id: afb2099a-83d1-4f31-d508-08d5644e75bb X-MS-Exchange-CrossTenant-originalarrivaltime: 25 Jan 2018 23:50:48.5951 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 03193ed6-8726-4bb3-a832-18ab0d28adb7 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY2PR1101MB1096 X-MC-Unique: 1YgEVrxRPteCOcyed1Rm6A-1 Content-Type: multipart/alternative; boundary="_000_B95A8549FC804CB4BEDA44AAE40EA7EFprimarydatacom_" Archived-At: Subject: Re: [secdir] [nfsv4] Secdir last call review of draft-ietf-nfsv4-flex-files-15 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 25 Jan 2018 23:50:59 -0000 --_000_B95A8549FC804CB4BEDA44AAE40EA7EFprimarydatacom_ Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: base64 DQoNCk9uIEphbiAyNSwgMjAxOCwgYXQgMTA6NDQgQU0sIEJyaWFuIFdlaXMgKGJldykgPGJld0Bj aXNjby5jb208bWFpbHRvOmJld0BjaXNjby5jb20+PiB3cm90ZToNCg0KSGkgVGhvbWFzLA0KDQoN CklmIHdlIGNoYW5nZSB0aGUgTVVTVCB0byBhIFNIT1VMRCwgSSBhbSBwZXJmZWN0bHkgZmluZSBt YWtpbmcgdGhlIGNoYW5nZS4gOi0pDQoNCg0KSG1tbS4gV2VsbCwgSSBndWVzcyB3aXRoIHRoZSBy aXNrcyBleHBsaWNpdGx5IG1lbnRpb25lZCB0aGVyZeKAmXMgbGVzcyBoYXJtIGluIGENClNIT1VM RC4gSWYgeW914oCZcmUgT0sgd2l0aCB0aGUgcmVzdCBvZiB0aGUgd29yZGluZywgZ28gYWhlYWQg YW5kIHN1YnN0aXR1dGUgdGhlDQpTSE9VTEQgZm9yIHRoZSBNVVNULg0KDQoNClRoYW5rcywNCkJy aWFuDQoNCg0KSGkgQnJpYW4sDQoNClRoYW5rcyBmb3IgdGhlIHJlc3BvbnNlIC0gSSBoYWQgbW9k aWZpZWQgdGhpcyBzbGlnaHRseSBhcyBwZXIgS2F0aGxlZW7igJlzIHJldmlldy4NClRoZSBuZXcg dmVyc2lvbiBpcyBwb3N0ZWQuDQoNClRoYW5rcywNClRvbQ0K --_000_B95A8549FC804CB4BEDA44AAE40EA7EFprimarydatacom_ Content-Type: text/html; charset=UTF-8 Content-ID: Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgbGluZS1icmVhazogYWZ0 ZXItd2hpdGUtc3BhY2U7IiBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCjxkaXY+PGJyIGNsYXNz PSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPk9u IEphbiAyNSwgMjAxOCwgYXQgMTA6NDQgQU0sIEJyaWFuIFdlaXMgKGJldykgJmx0OzxhIGhyZWY9 Im1haWx0bzpiZXdAY2lzY28uY29tIiBjbGFzcz0iIj5iZXdAY2lzY28uY29tPC9hPiZndDsgd3Jv dGU6PC9kaXY+DQo8YnIgY2xhc3M9IkFwcGxlLWludGVyY2hhbmdlLW5ld2xpbmUiPg0KPGRpdiBj bGFzcz0iIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAx MnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQt d2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0 OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5v cm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsg ZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyIgY2xhc3M9IiI+SGkNCiBU aG9tYXMsPC9zcGFuPg0KPGRpdiBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGlj YTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBz OiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRl eHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsg d2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJv a2Utd2lkdGg6IDBweDsiPg0KPGJyIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj4NCjxibG9ja3F1 b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8 L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxibG9ja3F1b3Rl IHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiIgc3R5 bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTog bm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBs ZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBw eDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2lu ZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCklmIHdlIGNoYW5nZSB0 aGUgTVVTVCB0byBhIFNIT1VMRCwgSSBhbSBwZXJmZWN0bHkgZmluZSBtYWtpbmcgdGhlIGNoYW5n ZS4gOi0pPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxkaXYgY2xhc3M9IiI+PGJyIGNs YXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KSG1t bS4gV2VsbCwgSSBndWVzcyB3aXRoIHRoZSByaXNrcyBleHBsaWNpdGx5IG1lbnRpb25lZCB0aGVy ZeKAmXMgbGVzcyBoYXJtIGluIGE8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+U0hPVUxELiBJZiB5b3Xi gJlyZSBPSyB3aXRoIHRoZSByZXN0IG9mIHRoZSB3b3JkaW5nLCBnbyBhaGVhZCBhbmQgc3Vic3Rp dHV0ZSB0aGUmbmJzcDs8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+U0hPVUxEIGZvciB0aGUgTVVTVC48 L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIi PjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5UaGFua3MsPC9kaXY+DQo8ZGl2 IGNsYXNzPSIiPkJyaWFuPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9k aXY+DQo8YnIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0K PGRpdiBjbGFzcz0iIj5IaSBCcmlhbiw8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIi Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPlRoYW5rcyBmb3IgdGhlIHJlc3BvbnNlIC0gSSBoYWQg bW9kaWZpZWQgdGhpcyBzbGlnaHRseSBhcyBwZXIgS2F0aGxlZW7igJlzIHJldmlldy48L2Rpdj4N CjxkaXYgY2xhc3M9IiI+VGhlIG5ldyB2ZXJzaW9uIGlzIHBvc3RlZC48L2Rpdj4NCjxkaXYgY2xh c3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPlRoYW5rcyw8L2Rpdj4N CjxkaXYgY2xhc3M9IiI+VG9tPC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_B95A8549FC804CB4BEDA44AAE40EA7EFprimarydatacom_-- From nobody Thu Jan 25 18:36:52 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AB2E912D940 for ; Thu, 25 Jan 2018 18:36:48 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id B_sxxJx7WGKn for ; Thu, 25 Jan 2018 18:36:47 -0800 (PST) Received: from mail.proper.com (Opus1.Proper.COM [207.182.41.91]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6530912D854 for ; Thu, 25 Jan 2018 18:36:47 -0800 (PST) Received: from [10.32.60.193] (50-1-51-141.dsl.dynamic.fusionbroadband.com [50.1.51.141]) (authenticated bits=0) by mail.proper.com (8.15.2/8.15.2) with ESMTPSA id w0Q2aUv9066773 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO) for ; Thu, 25 Jan 2018 19:36:31 -0700 (MST) (envelope-from paul.hoffman@vpnc.org) X-Authentication-Warning: mail.proper.com: Host 50-1-51-141.dsl.dynamic.fusionbroadband.com [50.1.51.141] claimed to be [10.32.60.193] From: "Paul Hoffman" To: secdir Date: Thu, 25 Jan 2018 18:36:44 -0800 X-Mailer: MailMate (1.10r5443) Message-ID: MIME-Version: 1.0 Content-Type: text/plain; format=flowed Archived-At: Subject: [secdir] Secdir review of draft-ietf-bmwg-sdn-controller-benchmark-term X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 26 Jan 2018 02:36:49 -0000 This is a benchmarking terminology document that extends the terminology already in RFC 7426. The document, correctly, says "Security issues are not discussed in this memo". It's just a small extension for a benchmarking protocol. --Paul Hoffman From nobody Fri Jan 26 08:49:11 2018 Return-Path: X-Original-To: secdir@ietf.org Delivered-To: secdir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 45A4A126BFD; Fri, 26 Jan 2018 08:49:00 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Stephen Farrell To: Cc: draft-ietf-ice-rfc5245bis.all@ietf.org, ietf@ietf.org, ice@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.70.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <151698534014.492.17944720668568287169@ietfa.amsl.com> Date: Fri, 26 Jan 2018 08:49:00 -0800 Archived-At: Subject: [secdir] Secdir last call review of draft-ietf-ice-rfc5245bis-16 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 26 Jan 2018 16:49:00 -0000 Reviewer: Stephen Farrell Review result: Has Issues (1) I think a bit more work on the security and privacy issues around ICE would improve the document, and hopefully, ICE implementations. - There has been (IMO somewhat justified) concern [1] about exposing all possible addresses, for example where one is from a VPN intended to preserve privacy, say if a user is aiming to circumvent local censorship or surveillance. 5.1.1.1 has a SHOULD that, as I read it, says to always include such addresses. [1] https://www.w3.org/wiki/Privacy/IPAddresses (Note: I'm not claiming [1] is authoritative, it's just a page I found that describes the issue reasonably well.) There is a bit of text about this (1st para in section 19), but IMO it's a bit weak. - Did the WG consider REQUIRING or RECOMMENDING agent implementations provide some local interface that allows the host or an application to say "Don't use interface to generate any candidates until I tell you otherwise"? That might be better than having VPN operators recommending to turn off WebRTC entirely for example. (Note: this is my main comment, the rest are mostly suggested things to think about, if you've not already.) - Even if the text isn't changed, a reference to [2] would I think be useful. (Assuming [2] is still being worked on in rtcweb, though mind you, I don't like how [2] refers to "consent" as I doubt a random person can really provide meaningful consent for things like this.) [2] https://tools.ietf.org/html/draft-ietf-rtcweb-ip-handling-04 - Separately [1] also describes another potential privacy issue with STUN urls. I think it'd be worthwhile noting such issues that have been found with deployments of ICE here, as any protocol using ICE and accepting non locally configured STUN/TURN URLs may have issues like that. For example, a recent paper [3] also describes some attacks (in section 4.2 mostly) that could (I guess) be mounted against any ICE agent and not only WebRTC clients. That'd be worth a reference and maybe thinking about which attacks are generic ICE issues and don't only affect WebRTC. [3] https://doi.org/10.1145/3019612.3019844 - I also wondered if I can fingerprint a host based on how it does ICE? I suspect that might work, but haven't tried to figure out details. - Could I probe an internal network based on feeding it candidates to check? E.g. checking timing of reactions. If I could that seems noteworthy. (2) 5.3: "...MUST contain ... bits of randomness" Don't you need to say when these values MUST be different and when they're ok to be re-used? I forget if STUN/TURN do that. (Also - the phrasing isn't that great - how do I "contain" randomness? But that's just a nit.) Nits: I took at look at the diff [4] between this and 5245, but that wasn't really that useful, so this review is based on a read of the draft without comparing it to 5245. Apologies if that causes me to comment on text that's unchanged - in such cases, I think it's fine to not heed those particular comments. [4] https://tools.ietf.org/rfcdiff?url1=rfc5245&url2=draft-ietf-ice-rfc5245bis-16.txt - 2.1: Why "only UDP specified here"? Does that include QUIC which is UDP-based, but not UDP? I assume so. - 2.3: how the controlling/controlled stuff works isn't clear from this, nor even (as I was reading it) in section 7.3.1.1 - I wasn't clear how the tie-breaker value is initialised until I got to 16.1. In any case I think a bit more explanatory text in 2.3 might be good. (But if implementers haven't had a problem with this, maybe it's just me.) - 5.2: "The procedures in this section is common across the initiating and responding agents." s/is/are/ I guess? - 6.1.1: What is "3PCC"? That note could maybe also do with a reference, as I at least don't get what you're trying to tell me. Ah - it's 3rd party call control (mentioned in 7.3.1.1). - 16.1: For a given ICE session, are the random numbers in the ICE-CONTROLLED and ICE-CONTROLLING attributes sent by the same agent supposed to have the same value? I wasn't clear. If they are the same, I understand how tie-breaking happens. If they can differ, I'm not sure. (But I didn't go back and re-read 7.3.1.1, so it may be ok either way:-) In any case saying "referred to as the tie-breaker value" twice seems odd. - 16.1: (mega-mega-nit:-) the fact that tie-breaker is split over a line-breaker here is why I didn't find this when I was reading 2.3/7.3.1.1 - maybe tweak the words so a grep will find it?) - 17: "looking to deploy ICE" is a bit confusing - do you mean "looking to be nice to ICE"? My assumption is that endpoints deploy ICE agents but network operators don't, though they might deploy STUN/TURN servers I guess. But maybe I'm thinking too much about WebRTC there. - 18: I wondered if this is still needed, given that 5245 already said it (I didn't check if the text has been updated). Saying this once would seem sufficient to me anyway. I guess leaving it in is the easier path. - 19: s/DNS-SEC/DNSSEC/ would be more common - 19.4.1: 1st sentence if missing a "T" - s/he/The/ From nobody Fri Jan 26 10:11:46 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 080511200E5; Fri, 26 Jan 2018 10:11:34 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4-SyWHOHQDcy; Fri, 26 Jan 2018 10:11:32 -0800 (PST) Received: from mail-oi0-x243.google.com (mail-oi0-x243.google.com [IPv6:2607:f8b0:4003:c06::243]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 16081126CC7; Fri, 26 Jan 2018 10:11:29 -0800 (PST) Received: by mail-oi0-x243.google.com with SMTP id 5so879811oip.5; Fri, 26 Jan 2018 10:11:29 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=Id7y8Uf2eetfZebA/0U70vXr3rksiSY5pdkayCLBIVY=; b=CRtGmWHMKDXvV2OTiHBp1T2Owg4Muk2WQUZllvuhiI3LC/NZiHTkvL9sKb6xlUFWPf PyEf8sxA/ML1uFv58A59fuaNkreok7VcJeDwEmYQ7wEnAnpjRTtjA1wcgsoYTUEGiIPS 35aaWUCR/mPRfCboQeIqt7gbNvmwT2DoU91WNoBCe6JnZOxKeLWJI0i4RWL19sFCbujS oMiTfjHXmCE7aQ7Qci2J6NS8bK2YTT7KaghnlX3LeiFr7iC8KxaTEO9utLkCqtpw7yvM gXqRk8Kz6Ld0JGRcPssTOhXJ1/H/LLO8YniOQrXMIHmrhqEIi80GaQSCpFevCrWrhPKE aBvA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=Id7y8Uf2eetfZebA/0U70vXr3rksiSY5pdkayCLBIVY=; b=VQMd1QmY2IvDuQgZx7KrC6yHA4UgrSffhguWOkKU+UeEJt/nkymaxFROt7BcalcyV8 JpRc/4jf6HZo/kBBhh3dWnkx0whncGLiPimnjlh/SH+0q1VebAVHK6w1/KEV5PqC2/1m K3OhuNVGF9z0cXYP/yZhlIit4tt+MdYuJ/Z3HK+5jhvzvGIRcW+DKAd38++cPSQnAh4L etGbJ5fP8+Lg051uqgPbm0awdHzidVxUJWAqA92+B+zgVqfl3p9y7wfQTPBiQnNZo7K5 34r7aKvprCPjG/WLapZ+/b70Zr5PhlNYwy7k1rc2KYos3QUYNFe7k4X7L7PeYpZd51C2 o5tg== X-Gm-Message-State: AKwxytcd32EzAPMD5VBJXKkSinwsZw7Xn4+UoRHd5X3iEd+JpUEdxMIQ MJoLYdVEadfVSRpi+Lw+HcgGwCOCGjHo9WqJU08= X-Google-Smtp-Source: AH8x227BSLq4Xeq+5P2Tav8YYotxKHlKnORgU3QNJB5zAyoDsxkePCbRUJIWUNtUAf0aw+p4YplUf2lNImA24Tf8i+0= X-Received: by 10.202.183.139 with SMTP id h133mr13420458oif.103.1516990288193; Fri, 26 Jan 2018 10:11:28 -0800 (PST) MIME-Version: 1.0 Received: by 10.157.37.125 with HTTP; Fri, 26 Jan 2018 10:11:27 -0800 (PST) In-Reply-To: <151691255573.8494.16260998328717962330@ietfa.amsl.com> References: <151691255573.8494.16260998328717962330@ietfa.amsl.com> From: Phillip Hallam-Baker Date: Fri, 26 Jan 2018 13:11:27 -0500 Message-ID: To: secdir@ietf.org Cc: draft-ietf-netmod-yang-tree-diagrams.all@ietf.org, IETF Discussion Mailing List , netmod@ietf.org Content-Type: multipart/alternative; boundary="001a113cd22a41707b0563b1d377" Archived-At: Subject: Re: [secdir] Secdir telechat review of draft-ietf-netmod-yang-tree-diagrams-05 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 26 Jan 2018 18:11:34 -0000 --001a113cd22a41707b0563b1d377 Content-Type: text/plain; charset="UTF-8" Just saw this didn't get the boilerplate added when posted by the tracker. Please assume it to be there. On Thu, Jan 25, 2018 at 3:35 PM, Phillip Hallam-Baker wrote: > Reviewer: Phillip Hallam-Baker > Review result: Has Nits > > I have reviewed the document and it is generally free of security > considerations as claimed. There are some areas of concern however, the > significance of which may become more apparent as such tools find future > use. > > As described in the document, the tree diagram format is intended to serve > as > an output generated by a tool to aid human interpretation. Thus, a > potential > ambiguity can arise if the tool used to generate the format is buggy or if > the > document contains schema and presentation data compiled from different > versions > of the source. > > Specifications using this representation need to make clear which > representation is canonical. Otherwise we end up in a situation in which a > document that has an ambiguity being unfixable by means of issuing an > errata > because there is no agreement as to whether the change is breaking or not. > > Another issue that is of concern is that even though the format is not > intended > to be an input format, there can be no guarantee it will not be used as > such. > Indeed it could be argued that a spec that makes use of this format should > encourage this approach so as to detect possible ambiguities. > > _______________________________________________ > secdir mailing list > secdir@ietf.org > https://www.ietf.org/mailman/listinfo/secdir > wiki: http://tools.ietf.org/area/sec/trac/wiki/SecDirReview > -- Website: http://hallambaker.com/ --001a113cd22a41707b0563b1d377 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Jus= t saw this didn't get the boilerplate added when posted by the tracker.= Please assume it to be there.

On Thu, Jan 25, 2018 at 3:35 PM, Phillip Hallam-Ba= ker <hallam@gmail.com> wrote:
Reviewer: Phillip Hallam-Baker
Review result: Has Nits

I have reviewed the document and it is generally free of security
considerations as claimed. There are some areas of concern however, the
significance of which may become more apparent as such tools find future us= e.

As described in the document, the tree diagram format is intended to serve = as
an output generated by a tool to aid human interpretation. Thus, a potentia= l
ambiguity can arise if the tool used to generate the format is buggy or if = the
document contains schema and presentation data compiled from different vers= ions
of the source.

Specifications using this representation need to make clear which
representation is canonical. Otherwise we end up in a situation in which a<= br> document that has an ambiguity being unfixable by means of issuing an errat= a
because there is no agreement as to whether the change is breaking or not.<= br>
Another issue that is of concern is that even though the format is not inte= nded
to be an input format, there can be no guarantee it will not be used as suc= h.
Indeed it could be argued that a spec that makes use of this format should<= br> encourage this approach so as to detect possible ambiguities.

_______________________________________________
secdir mailing list
secdir@ietf.org
https://www.ietf.org/mailman/listinfo/secdir wiki: http://tools.ietf.org/area/sec/trac/= wiki/SecDirReview



--
Website: http://hallambaker.com/
=
--001a113cd22a41707b0563b1d377-- From nobody Fri Jan 26 13:04:31 2018 Return-Path: X-Original-To: secdir@ietf.org Delivered-To: secdir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id E25FC126BFD; Fri, 26 Jan 2018 13:04:15 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Russ Housley To: Cc: ietf@ietf.org, bmwg@ietf.org, draft-ietf-bmwg-sdn-controller-benchmark-meth.all@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.70.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <151700065585.4373.15947979044552046715@ietfa.amsl.com> Date: Fri, 26 Jan 2018 13:04:15 -0800 Archived-At: Subject: [secdir] Secdir last call review of draft-ietf-bmwg-sdn-controller-benchmark-meth-07 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 26 Jan 2018 21:04:16 -0000 Reviewer: Russ Housley Review result: Has Issues I reviewed this document as part of the Security Directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the Security Area Directors. Document authors, document editors, and WG chairs should treat these comments just like any other IETF Last Call comments. Document: draft-ietf-bmwg-sdn-controller-benchmark-meth-05 Reviewer: Russ Housley Review Date: 2018-01-26 IETF LC End Date: 2018-02-02 IESG Telechat date: Unknown Summary: Has (Minor) Issues Major Concerns The tests cover encrypted and unencrypted communications, but nothing is said about the key management. I recognize that the tests will be conducted in the lab, but it would be desirable for the key management to exercise the same interfaces that will be used in a production setting. Minor Concerns Section 1: Please update the first paragraph to reference RFC 8174 in addition to RFC 2119, as follows: The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in BCP 14 [RFC2119] [RFC8174] when, and only when, they appear in all capitals, as shown here. RFC 2119 is missing from the normative references. If you accept the above suggestion, RFC 8174 needs to be added as well. Nits The term "SDN Controller" is not defined in the companion terminology document, and a definition does not emerge in this document until Section 2, where it says: ... the SDN controller is a function that manages and controls Network Devices. ... I recognize that this is very basic, but it also seems like very important information for the Introduction. Similarly, please explain the difference between a "cluster of homogeneous controllers" and a "federation of controllers." The indenting in the document shifts in Section 5. Some lines other than Section headers are flush with the left margin. From nobody Fri Jan 26 13:45:11 2018 Return-Path: X-Original-To: secdir@ietf.org Delivered-To: secdir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 3FF7012DA45; Fri, 26 Jan 2018 13:05:16 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1517000716; bh=Wo5HLa/QGGs73z52dOUpmq8wYYKZlT9zsfM8bRRHHEE=; h=From:To:Date:Subject:List-Id:List-Unsubscribe:List-Archive: List-Post:List-Help:List-Subscribe; b=v4NBIrHr8r+mMYfTzzD9k1dnYG0edSCO8aKoxUlKSKLXz6e2cax9hZBrfuXVZ/VjR pB+6FTd4em8v6H3NPJQyWyXcAWFuDjOQxoTAAZ1zAFyUyh2QAhkep8wArSwiXn8FCF VLN1YYOLdMeWpWI31Bglj6aQJG45rfaWtiuHhB4M= X-Original-To: new-work@ietf.org Delivered-To: new-work@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 7AC5712DA12 for ; Fri, 26 Jan 2018 13:05:09 -0800 (PST) MIME-Version: 1.0 From: The IESG To: X-Test-IDTracker: no X-IETF-IDTracker: 6.70.0 Auto-Submitted: auto-generated Precedence: bulk MIME-Version: 1.0 Reply_to: Message-ID: <151700070949.4399.17288791167199581988.idtracker@ietfa.amsl.com> Date: Fri, 26 Jan 2018 13:05:09 -0800 Archived-At: X-BeenThere: new-work@ietf.org X-Mailman-Version: 2.1.22 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Errors-To: new-work-bounces@ietf.org Sender: "new-work" Archived-At: X-Mailman-Approved-At: Fri, 26 Jan 2018 13:45:10 -0800 Subject: [secdir] [new-work] WG Review: Routing In Fat Trees (rift) X-BeenThere: secdir@ietf.org List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 26 Jan 2018 21:05:16 -0000 A new IETF WG has been proposed in the Routing Area. The IESG has not made any determination yet. The following draft charter was submitted, and is provided for informational purposes only. Please send your comments to the IESG mailing list (iesg@ietf.org) by 2018-02-05. Routing In Fat Trees (rift) ----------------------------------------------------------------------- Current status: Proposed WG Chairs: Zhaohui Zhang Assigned Area Director: Alvaro Retana Routing Area Directors: Alia Atlas Alvaro Retana Deborah Brungard Mailing list: Address: rift@ietf.org To subscribe: https://www.ietf.org/mailman/listinfo/rift Archive: https://mailarchive.ietf.org/arch/search/?email_list=rift Group page: https://datatracker.ietf.org/group/rift/ Charter: https://datatracker.ietf.org/doc/charter-ietf-rift/ Data Centers have been steadily growing to commonly host tens of thousands of end points, or more, in a single network. Because of their topologies (traditional and emerging), traffic patterns, need for fast restoration, and for low human intervention, data center networks have a unique set of requirements that is resulting in the design of routing solutions specific to them. Clos and Fat-Tree topologies have gained popularity in data center networks as a result of a trend towards centralized data center network architectures that may deliver computation and storage services. The Routing in Fat Trees (RIFT) protocol addresses the demands of routing in Clos and Fat-Tree networks via a mixture of both link-state and distance-vector techniques colloquially described as 'link-state towards the spine and distance vector towards the leafs'. RIFT uses this hybrid approach to focus on networks with regular topologies with a high degree of connectivity, a defined directionality, and large scale. The RIFT Working Group will work on a standards track specification of a specialized, dynamic routing protocol for Clos and fat-tree network topologies. The protocol will: - deal with automatic construction of fat-tree topologies based on detection of links, - minimize the amount of routing state held at each topology level, - automatically prune topology distribution exchanges to a sufficient subset of links, - support automatic disaggregation of prefixes on link and node failures to prevent black-holing and suboptimal routing, - allow traffic steering and re-routing policies, - and provide mechanisms to synchronize a limited key-value data-store that can be used after protocol convergence. It is important that nodes participating in the protocol should need only very light configuration and should be able to join a network as leaf nodes simply by connecting to the network using default configuration. The protocol must support IPv6 and should also support IPv4. The Working Group may establish additional requirements to constrain and inform their work. The RIFT Working Group is chartered for the following list of items: - A Standards Track specification that will include: - an Implementation Status section as described in RFC 7942 - an Operational Considerations section to explain how the protocol is configured, deployed, and diagnosed - Security and Privacy Considerations, although this material may refer to a separate Threat Analysis document (q.v.) - A YANG module focused on configuration and monitoring of protocol instances - An Applicability Statement that describes how to deploy and configure the protocol in networks with different topologies - A Security Threat Analysis document that describes the attack vectors and mitigations that shall be sent for publication at the same time as the protocol specification Milestones Mar 2018 Adopt a protocol specification document Feb 2019 Submit protocol specification to IESG for publication Feb 2019 Submit Threat Analysis to IESG for publication Apr 2019 Submit YANG module to IESG for publication Apr 2019 Submit Applicability Statement to IESG for publication _______________________________________________ new-work mailing list new-work@ietf.org https://www.ietf.org/mailman/listinfo/new-work From nobody Fri Jan 26 13:45:15 2018 Return-Path: X-Original-To: secdir@ietf.org Delivered-To: secdir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id C2E0712DA41; Fri, 26 Jan 2018 13:10:40 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1517001040; bh=qSqOPsknRCYIK72jW84yls9Jl9m/e0nITbz8b7EeR7A=; h=From:To:Date:Subject:List-Id:List-Unsubscribe:List-Archive: List-Post:List-Help:List-Subscribe; b=SQdxCakgoVpSWvK6N0SuyxVrIkDbt/93fhYsfYJhynUI6C70Gbg+xdhThT7mBT6Xl +UTibbyqWVUThMBv42FjrU8CO4G7w9dZ+QxKG3lp51EulgQSW8ipGvtVSXrDS1Z/l2 zEO93+jYvwi2F2EOmleWJAGILHuYewQN59wiKVrI= X-Original-To: new-work@ietf.org Delivered-To: new-work@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 6CAA71270AC for ; Fri, 26 Jan 2018 13:10:33 -0800 (PST) MIME-Version: 1.0 From: The IESG To: X-Test-IDTracker: no X-IETF-IDTracker: 6.70.0 Auto-Submitted: auto-generated Precedence: bulk MIME-Version: 1.0 Reply_to: Message-ID: <151700103344.4373.16879925767925585636.idtracker@ietfa.amsl.com> Date: Fri, 26 Jan 2018 13:10:33 -0800 Archived-At: X-BeenThere: new-work@ietf.org X-Mailman-Version: 2.1.22 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Errors-To: new-work-bounces@ietf.org Sender: "new-work" Archived-At: X-Mailman-Approved-At: Fri, 26 Jan 2018 13:45:10 -0800 Subject: [secdir] [new-work] WG Review: Service Function Chaining (sfc) X-BeenThere: secdir@ietf.org List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 26 Jan 2018 21:10:41 -0000 The Service Function Chaining (sfc) WG in the Routing Area of the IETF is undergoing rechartering. The IESG has not made any determination yet. The following draft charter was submitted, and is provided for informational purposes only. Please send your comments to the IESG mailing list (iesg@ietf.org) by 2018-02-05. Service Function Chaining (sfc) ----------------------------------------------------------------------- Current status: Active WG Chairs: Joel Halpern Jim Guichard Secretaries: Tal Mizrahi Assigned Area Director: Alia Atlas Routing Area Directors: Alia Atlas Alvaro Retana Deborah Brungard Mailing list: Address: sfc@ietf.org To subscribe: https://www.ietf.org/mailman/listinfo/sfc Archive: https://mailarchive.ietf.org/arch/browse/sfc/ Group page: https://datatracker.ietf.org/group/sfc/ Charter: https://datatracker.ietf.org/doc/charter-ietf-sfc/ Network operators frequently utilize service functions such as packet filtering at firewalls, load-balancing and transactional proxies (for example spam filters) in the delivery of services to end users. Delivery of these types of services is undergoing significant change with the introduction of virtualization, network overlays, and orchestration. The SFC Working Group has developed an Architecture [RFC 7665] and the Network Service Header [RFC 8300] for service function chaining. The focus of the SFC working group moving forward is on aspects of the architecture and/or protocol that need to be addressed to enable effective deployment and usage of this work. In order to maintain focus, the working group primarily produces and advances documents on four topics: 1) Metadata - Define the common type-length-value encoded metadata types with Standards Track RFCs, and produce Informational RFCs to describe common fixed-length (MD-1) metadata usages. 2) Security and Privacy - Mechanisms and guidance for securing metadata via authentication, integrity protection, confidentiality, and/or data minimization are not yet defined. What can be effectively provided, for which scenarios, and how those tools can be provided need to be determined and the tools standardized. 3) OAM and Operations & Management - In order for operators to use these tools in production networks, they need Operations, Administration, and Maintenance tools, as well as management mechanisms. This includes YANG models, OAM frameworks, and specific OAM mechanisms to address operational needs. 4) Transport Considerations - This will capture the expectations SFC places on transport behavior, including dealing with issues such as congestion indications and responses. This should define how NSH works on standardized transports that are expected to see widespread use. Specifically, the SFC WG is chartered to deliver the following: 1. A Standards Track base set of the metadata MD-2 type codes within the metadata class reserved for IETF usage, as specified in RFC 8300. 2. Related Metadata drafts that require more explanation than is reasonable to include in the base MD-2 draft, including MD-1 descriptions and items done once the base draft is complete. 3. YANG models for the management of SFC Components. 4. One or more security related Standards Track and / or Informational RFCs. At least one Standards Track security mechanism RFC is needed. 5. OAM Framework document to provide a common basis for OAM work. This draft will include guidance on how active, passive, and hybrid OAM are to be supported if at all. 6. Specific OAM mechanism documents to provide the tools needed for operational environments. 7. Transport Considerations RFC to cover the expectations SFC and NSH place on transport, and the operational constraints transports used by NSH need to meet. The SFC WG may work on Informational applicability documents that show how the technology, meta-data, and associated control-plane mechanisms can be used in specific use-cases. The SFC WG may work on Informational documents that provide operational considerations. The SFC WG will coordinate with BESS and PCE on the control-plane work related to SFC. Milestones: TBD _______________________________________________ new-work mailing list new-work@ietf.org https://www.ietf.org/mailman/listinfo/new-work From nobody Fri Jan 26 16:27:35 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 940CE12D777; Fri, 26 Jan 2018 16:27:15 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.62 X-Spam-Level: X-Spam-Status: No, score=-2.62 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yt9xH44WrdOa; Fri, 26 Jan 2018 16:27:13 -0800 (PST) Received: from mx0a-00191d01.pphosted.com (mx0b-00191d01.pphosted.com [67.231.157.136]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 54B8012DA4B; Fri, 26 Jan 2018 16:27:13 -0800 (PST) Received: from pps.filterd (m0049459.ppops.net [127.0.0.1]) by m0049459.ppops.net-00191d01. (8.16.0.21/8.16.0.21) with SMTP id w0QLkreT035417; Fri, 26 Jan 2018 16:55:39 -0500 Received: from tlpd255.enaf.dadc.sbc.com (sbcsmtp3.sbc.com [144.160.112.28]) by m0049459.ppops.net-00191d01. with ESMTP id 2fr9wvbt9v-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Fri, 26 Jan 2018 16:55:38 -0500 Received: from enaf.dadc.sbc.com (localhost [127.0.0.1]) by tlpd255.enaf.dadc.sbc.com (8.14.5/8.14.5) with ESMTP id w0QLtZEu122459; Fri, 26 Jan 2018 15:55:37 -0600 Received: from dalint01.pst.cso.att.com (dalint01.pst.cso.att.com [135.31.133.159]) by tlpd255.enaf.dadc.sbc.com (8.14.5/8.14.5) with ESMTP id w0QLtVn3122451 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO); Fri, 26 Jan 2018 15:55:32 -0600 Received: from zlp30494.vci.att.com (zlp30494.vci.att.com [135.46.181.159]) by dalint01.pst.cso.att.com (RSA Interceptor); Fri, 26 Jan 2018 21:55:10 GMT Received: from zlp30494.vci.att.com (zlp30494.vci.att.com [127.0.0.1]) by zlp30494.vci.att.com (Service) with ESMTP id 0D6214000483; Fri, 26 Jan 2018 21:55:10 +0000 (GMT) Received: from clpi183.sldc.sbc.com (unknown [135.41.1.46]) by zlp30494.vci.att.com (Service) with ESMTP id DC0E04000484; Fri, 26 Jan 2018 21:55:09 +0000 (GMT) Received: from sldc.sbc.com (localhost [127.0.0.1]) by clpi183.sldc.sbc.com (8.14.5/8.14.5) with ESMTP id w0QLt9cK017896; Fri, 26 Jan 2018 15:55:09 -0600 Received: from mail-blue.research.att.com (mail-blue.research.att.com [135.207.178.11]) by clpi183.sldc.sbc.com (8.14.5/8.14.5) with ESMTP id w0QLt2h2017251; Fri, 26 Jan 2018 15:55:02 -0600 Received: from exchange.research.att.com (njmtcas2.research.att.com [135.207.255.47]) by mail-blue.research.att.com (Postfix) with ESMTP id 8271BF09F6; Fri, 26 Jan 2018 16:55:01 -0500 (EST) Received: from njmtexg5.research.att.com ([fe80::b09c:ff13:4487:78b6]) by njmtcas2.research.att.com ([fe80::d550:ec84:f872:cad9%15]) with mapi id 14.03.0361.001; Fri, 26 Jan 2018 16:55:01 -0500 From: "MORTON, ALFRED C (AL)" To: Russ Housley , "secdir@ietf.org" CC: "ietf@ietf.org" , "bmwg@ietf.org" , "draft-ietf-bmwg-sdn-controller-benchmark-meth.all@ietf.org" Thread-Topic: Secdir last call review of draft-ietf-bmwg-sdn-controller-benchmark-meth-07 Thread-Index: AQHTluk+i8SJhlZobkC/vLRUYprn5qOGrsZg Date: Fri, 26 Jan 2018 21:55:00 +0000 Message-ID: <4D7F4AD313D3FC43A053B309F97543CF490A6DC9@njmtexg5.research.att.com> References: <151700065585.4373.15947979044552046715@ietfa.amsl.com> In-Reply-To: <151700065585.4373.15947979044552046715@ietfa.amsl.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [69.141.203.172] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-RSA-Inspected: yes X-RSA-Classifications: public X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:, , definitions=2018-01-26_10:, , signatures=0 X-Proofpoint-Spam-Details: rule=outbound_policy_notspam policy=outbound_policy score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1011 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1711220000 definitions=main-1801260285 Archived-At: Subject: Re: [secdir] Secdir last call review of draft-ietf-bmwg-sdn-controller-benchmark-meth-07 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 27 Jan 2018 00:27:16 -0000 SGkgUnVzcywNCg0KPiBNYWpvciBDb25jZXJucw0KPiANCj4gVGhlIHRlc3RzIGNvdmVyIGVuY3J5 cHRlZCBhbmQgdW5lbmNyeXB0ZWQgY29tbXVuaWNhdGlvbnMsIGJ1dCBub3RoaW5nDQo+IGlzIHNh aWQgYWJvdXQgdGhlIGtleSBtYW5hZ2VtZW50LiAgSSByZWNvZ25pemUgdGhhdCB0aGUgdGVzdHMg d2lsbCBiZQ0KPiBjb25kdWN0ZWQgaW4gdGhlIGxhYiwgYnV0IGl0IHdvdWxkIGJlIGRlc2lyYWJs ZSBmb3IgdGhlIGtleSBtYW5hZ2VtZW50DQo+IHRvIGV4ZXJjaXNlIHRoZSBzYW1lIGludGVyZmFj ZXMgdGhhdCB3aWxsIGJlIHVzZWQgaW4gYSBwcm9kdWN0aW9uDQo+IHNldHRpbmcuDQoNCkVuY3J5 cHRlZCBjb25uZWN0aW9ucyB3aXRoIG5ldHdvcmsgZGV2aWNlcyBhcmUgbWVudGlvbmVkIGluIGdl bmVyYWwsDQpwcmltYXJpbHkgaW4gU2VjdGlvbiA0LjQsIGFzIGEgcG9zc2liaWxpdHkgdGhhdCBt YXkgYmUgdGVzdGVkOg0KaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWlldGYtYm13 Zy1zZG4tY29udHJvbGxlci1iZW5jaG1hcmstbWV0aC0wNyNzZWN0aW9uLTQuNA0KDQpJdCB3aWxs IGhlbHAgaWYgd2UgY2FuIGl0ZXJhdGUgb24gdGV4dCB0byBzYXRpc2Z5IHlvdXIgY29tbWVudCwN CnN1Y2ggYXMgYWRkaW5nOg0KNC40LiBDb25uZWN0aW9uIFNldHVwDQoNCiAgIFRoZXJlIG1heSBi ZSBjb250cm9sbGVyIGltcGxlbWVudGF0aW9ucyB0aGF0IHN1cHBvcnQgdW5lbmNyeXB0ZWQgYW5k DQogICBlbmNyeXB0ZWQgbmV0d29yayBjb25uZWN0aW9ucyB3aXRoIE5ldHdvcmsgRGV2aWNlcy4g RnVydGhlciwgdGhlDQogICBjb250cm9sbGVyIG1heSBoYXZlIGJhY2t3YXJkIGNvbXBhdGliaWxp dHkgd2l0aCBOZXR3b3JrIERldmljZXMNCiAgIHJ1bm5pbmcgb2xkZXIgdmVyc2lvbnMgb2Ygc291 dGhib3VuZCBwcm90b2NvbHMuIEl0IG1heSBiZSB1c2VmdWwgdG8NCiAgIG1lYXN1cmUgdGhlIGNv bnRyb2xsZXIgcGVyZm9ybWFuY2Ugd2l0aCBvbmUgb3IgbW9yZSBhcHBsaWNhYmxlDQogICBjb25u ZWN0aW9uIHNldHVwIG1ldGhvZHMgZGVmaW5lZCBiZWxvdy4NCkFERA0KRm9yIGNhc2VzIHdpdGgg ZW5jcnlwdGVkIGNvbW11bmljYXRpb25zIGJldHdlZW4gdGhlIGNvbnRyb2xsZXIgYW5kIHRoZSAN CnN3aXRjaCwga2V5IG1hbmFnZW1lbnQgYW5kIGtleSBleGNoYW5nZSBNVVNUIHRha2UgcGxhY2Ug YmVmb3JlDQphbnkgcGVyZm9ybWFuY2Ugb3IgYmVuY2htYXJrIG1lYXN1cmVtZW50cy4NCg0KanVz dCB0cnlpbmcgdG8gY2xhcmlmeSB3aGF0IHlvdSB3YW50IHRvIHNlZSBhZGRlZCwNCkFsDQpkb2Mg c2hlcGhlcmQNCg0KDQo+IC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQo+IEZyb206IFJ1c3Mg SG91c2xleSBbbWFpbHRvOmhvdXNsZXlAdmlnaWxzZWMuY29tXQ0KPiBTZW50OiBGcmlkYXksIEph bnVhcnkgMjYsIDIwMTggNDowNCBQTQ0KPiBUbzogc2VjZGlyQGlldGYub3JnDQo+IENjOiBpZXRm QGlldGYub3JnOyBibXdnQGlldGYub3JnOyBkcmFmdC1pZXRmLWJtd2ctc2RuLWNvbnRyb2xsZXIt DQo+IGJlbmNobWFyay1tZXRoLmFsbEBpZXRmLm9yZw0KPiBTdWJqZWN0OiBTZWNkaXIgbGFzdCBj YWxsIHJldmlldyBvZiBkcmFmdC1pZXRmLWJtd2ctc2RuLWNvbnRyb2xsZXItDQo+IGJlbmNobWFy ay1tZXRoLTA3DQo+IA0KPiBSZXZpZXdlcjogUnVzcyBIb3VzbGV5DQo+IFJldmlldyByZXN1bHQ6 IEhhcyBJc3N1ZXMNCj4gDQo+IEkgcmV2aWV3ZWQgdGhpcyBkb2N1bWVudCBhcyBwYXJ0IG9mIHRo ZSBTZWN1cml0eSBEaXJlY3RvcmF0ZSdzIG9uZ29pbmcNCj4gZWZmb3J0IHRvIHJldmlldyBhbGwg SUVURiBkb2N1bWVudHMgYmVpbmcgcHJvY2Vzc2VkIGJ5IHRoZSBJRVNHLiAgVGhlc2UNCj4gY29t bWVudHMgd2VyZSB3cml0dGVuIHByaW1hcmlseSBmb3IgdGhlIGJlbmVmaXQgb2YgdGhlIFNlY3Vy aXR5IEFyZWENCj4gRGlyZWN0b3JzLiAgRG9jdW1lbnQgYXV0aG9ycywgZG9jdW1lbnQgZWRpdG9y cywgYW5kIFdHIGNoYWlycyBzaG91bGQNCj4gdHJlYXQgdGhlc2UgY29tbWVudHMganVzdCBsaWtl IGFueSBvdGhlciBJRVRGIExhc3QgQ2FsbCBjb21tZW50cy4NCj4gDQo+IERvY3VtZW50OiBkcmFm dC1pZXRmLWJtd2ctc2RuLWNvbnRyb2xsZXItYmVuY2htYXJrLW1ldGgtMDUNCj4gUmV2aWV3ZXI6 IFJ1c3MgSG91c2xleQ0KPiBSZXZpZXcgRGF0ZTogMjAxOC0wMS0yNg0KPiBJRVRGIExDIEVuZCBE YXRlOiAyMDE4LTAyLTAyDQo+IElFU0cgVGVsZWNoYXQgZGF0ZTogVW5rbm93bg0KPiANCj4gU3Vt bWFyeTogSGFzIChNaW5vcikgSXNzdWVzDQo+IA0KPiBNYWpvciBDb25jZXJucw0KPiANCj4gVGhl IHRlc3RzIGNvdmVyIGVuY3J5cHRlZCBhbmQgdW5lbmNyeXB0ZWQgY29tbXVuaWNhdGlvbnMsIGJ1 dCBub3RoaW5nDQo+IGlzIHNhaWQgYWJvdXQgdGhlIGtleSBtYW5hZ2VtZW50LiAgSSByZWNvZ25p emUgdGhhdCB0aGUgdGVzdHMgd2lsbCBiZQ0KPiBjb25kdWN0ZWQgaW4gdGhlIGxhYiwgYnV0IGl0 IHdvdWxkIGJlIGRlc2lyYWJsZSBmb3IgdGhlIGtleSBtYW5hZ2VtZW50DQo+IHRvIGV4ZXJjaXNl IHRoZSBzYW1lIGludGVyZmFjZXMgdGhhdCB3aWxsIGJlIHVzZWQgaW4gYSBwcm9kdWN0aW9uDQo+ IHNldHRpbmcuDQo+IA0KPiANCj4gTWlub3IgQ29uY2VybnMNCj4gDQo+IFNlY3Rpb24gMTogUGxl YXNlIHVwZGF0ZSB0aGUgZmlyc3QgcGFyYWdyYXBoIHRvIHJlZmVyZW5jZSBSRkMgODE3NA0KPiBp biBhZGRpdGlvbiB0byBSRkMgMjExOSwgYXMgZm9sbG93czoNCj4gDQo+ICAgIFRoZSBrZXkgd29y ZHMgIk1VU1QiLCAiTVVTVCBOT1QiLCAiUkVRVUlSRUQiLCAiU0hBTEwiLCAiU0hBTEwgTk9UIiwN Cj4gICAgIlNIT1VMRCIsICJTSE9VTEQgTk9UIiwgIlJFQ09NTUVOREVEIiwgIk5PVCBSRUNPTU1F TkRFRCIsICJNQVkiLCBhbmQNCj4gICAgIk9QVElPTkFMIiBpbiB0aGlzIGRvY3VtZW50IGFyZSB0 byBiZSBpbnRlcnByZXRlZCBhcyBkZXNjcmliZWQgaW4gQkNQDQo+ICAgIDE0IFtSRkMyMTE5XSBb UkZDODE3NF0gd2hlbiwgYW5kIG9ubHkgd2hlbiwgdGhleSBhcHBlYXIgaW4gYWxsDQo+ICAgIGNh cGl0YWxzLCBhcyBzaG93biBoZXJlLg0KPiANCj4gUkZDIDIxMTkgaXMgbWlzc2luZyBmcm9tIHRo ZSBub3JtYXRpdmUgcmVmZXJlbmNlcy4gIElmIHlvdSBhY2NlcHQgdGhlDQo+IGFib3ZlIHN1Z2dl c3Rpb24sIFJGQyA4MTc0IG5lZWRzIHRvIGJlIGFkZGVkIGFzIHdlbGwuDQo+IA0KPiANCj4gTml0 cw0KPiANCj4gVGhlIHRlcm0gIlNETiBDb250cm9sbGVyIiBpcyBub3QgZGVmaW5lZCBpbiB0aGUg Y29tcGFuaW9uIHRlcm1pbm9sb2d5DQo+IGRvY3VtZW50LCBhbmQgYSBkZWZpbml0aW9uIGRvZXMg bm90IGVtZXJnZSBpbiB0aGlzIGRvY3VtZW50IHVudGlsDQo+IFNlY3Rpb24gMiwgd2hlcmUgaXQg c2F5czoNCj4gDQo+ICAgIC4uLiB0aGUgU0ROIGNvbnRyb2xsZXIgaXMgYSBmdW5jdGlvbiB0aGF0 IG1hbmFnZXMgYW5kDQo+ICAgIGNvbnRyb2xzIE5ldHdvcmsgRGV2aWNlcy4gLi4uDQo+IA0KPiBJ IHJlY29nbml6ZSB0aGF0IHRoaXMgaXMgdmVyeSBiYXNpYywgYnV0IGl0IGFsc28gc2VlbXMgbGlr ZSB2ZXJ5DQo+IGltcG9ydGFudCBpbmZvcm1hdGlvbiBmb3IgdGhlIEludHJvZHVjdGlvbi4NCj4g DQo+IFNpbWlsYXJseSwgcGxlYXNlIGV4cGxhaW4gdGhlIGRpZmZlcmVuY2UgYmV0d2VlbiBhICJj bHVzdGVyIG9mDQo+IGhvbW9nZW5lb3VzIGNvbnRyb2xsZXJzIiBhbmQgYSAiZmVkZXJhdGlvbiBv ZiBjb250cm9sbGVycy4iDQo+IA0KPiBUaGUgaW5kZW50aW5nIGluIHRoZSBkb2N1bWVudCBzaGlm dHMgaW4gU2VjdGlvbiA1LiAgU29tZSBsaW5lcw0KPiBvdGhlciB0aGFuIFNlY3Rpb24gaGVhZGVy cyBhcmUgZmx1c2ggd2l0aCB0aGUgbGVmdCBtYXJnaW4uDQo+IA0KDQo= From nobody Sun Jan 28 04:57:33 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 41EA812EBCC; Sun, 28 Jan 2018 04:57:32 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.221 X-Spam-Level: X-Spam-Status: No, score=-4.221 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id c9JxMJJ3W51I; Sun, 28 Jan 2018 04:57:29 -0800 (PST) Received: from sesbmg23.ericsson.net (sesbmg23.ericsson.net [193.180.251.37]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 938AB12EBC6; Sun, 28 Jan 2018 04:57:28 -0800 (PST) X-AuditID: c1b4fb25-48bff7000000341b-35-5a6dc8b6b585 Received: from ESESSHC012.ericsson.se (Unknown_Domain [153.88.183.54]) by sesbmg23.ericsson.net (Symantec Mail Security) with SMTP id FB.83.13339.6B8CD6A5; Sun, 28 Jan 2018 13:57:26 +0100 (CET) Received: from ESESSMB109.ericsson.se ([169.254.9.195]) by ESESSHC012.ericsson.se ([153.88.183.54]) with mapi id 14.03.0352.000; Sun, 28 Jan 2018 13:57:25 +0100 From: Christer Holmberg To: Stephen Farrell , "secdir@ietf.org" CC: "draft-ietf-ice-rfc5245bis.all@ietf.org" , "ietf@ietf.org" , "ice@ietf.org" Thread-Topic: Secdir last call review of draft-ietf-ice-rfc5245bis-16 Thread-Index: AQHTlsWSdlXqvNmVDEWzQ6CHG1vNgKOG2Qlg Date: Sun, 28 Jan 2018 12:57:24 +0000 Message-ID: <7594FB04B1934943A5C02806D1A2204B6C143E76@ESESSMB109.ericsson.se> References: <151698534014.492.17944720668568287169@ietfa.amsl.com> In-Reply-To: <151698534014.492.17944720668568287169@ietfa.amsl.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [153.88.183.154] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFupkkeLIzCtJLcpLzFFi42KZGbHdTHfbidwog5OX+C2O//jDbvHtQq3F s43zWSw+LHzIYjF97zV2B1aPtd1X2TyWLPnJFMAUxWWTkpqTWZZapG+XwJWx+NlZpoJ3SRUr Zu1ib2BckdDFyMkhIWAisW9KJ0sXIxeHkMBhRokD0z4yQThLGCUOP1zF3sXIwcEmYCHR/U8b pEFEIEzi/vtDrCA1zAIzGSVe/3zJCJIQFnCRePmtjRWiyFVi5aYfTBC2kcSh1w3MIDaLgKrE rAULwGp4BXwldh6YBBYXEnCSePp6FhuIzSngLNG7oJkdxGYUEJP4fmoN2BxmAXGJW0/mM0Fc LSCxZM95ZghbVOLl43+sELaSxKLbn5lAbmYW0JRYv0sfolVRYkr3Q3aItYISJ2c+YZnAKDoL ydRZCB2zkHTMQtKxgJFlFaNocWpxUm66kbFealFmcnFxfp5eXmrJJkZgBB3c8lt1B+PlN46H GAU4GJV4eCfszo0SYk0sK67MPcQowcGsJMJ7bDpQiDclsbIqtSg/vqg0J7X4EKM0B4uSOO9J T94oIYH0xJLU7NTUgtQimCwTB6dUA2OAa92DZ3OXf6vM8vy/+1j5+Vu6fcYnmrRTZl090TKB 1fuHVafEDd2vYfUCUlNNkhtP7H915brJXS7TB6v4K45ev1DtvVNY5F7NwU7WhvN3AlJPHjBS KOu/9yb5TDDLg9wgm7cK/RaHIz4ZVuc+EdkeulKKpVjy/tUZLfe9X7X7Rr/+JZQvKaHEUpyR aKjFXFScCADbg0U4nAIAAA== Archived-At: Subject: Re: [secdir] Secdir last call review of draft-ietf-ice-rfc5245bis-16 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 28 Jan 2018 12:57:32 -0000 SGkgU3RlcGhlbiwNCg0KVGhhbmsgWW91IGZvciB5b3VyIHJldmlldyEgUGxlYXNlIHNlZSBpbmxp bmUuDQoNCj5SZXZpZXdlcjogU3RlcGhlbiBGYXJyZWxsDQo+UmV2aWV3IHJlc3VsdDogSGFzIElz c3Vlcw0KPg0KPigxKSBJIHRoaW5rIGEgYml0IG1vcmUgd29yayBvbiB0aGUgc2VjdXJpdHkgYW5k IHByaXZhY3kgaXNzdWVzIGFyb3VuZCBJQ0Ugd291bGQgaW1wcm92ZSA+dGhlIGRvY3VtZW50LCBh bmQgaG9wZWZ1bGx5LCBJQ0UgaW1wbGVtZW50YXRpb25zLg0KPg0KPi0gVGhlcmUgaGFzIGJlZW4g KElNTyBzb21ld2hhdCBqdXN0aWZpZWQpIGNvbmNlcm4gWzFdIGFib3V0IGV4cG9zaW5nIGFsbCBw b3NzaWJsZSA+YWRkcmVzc2VzLCBmb3IgZXhhbXBsZSB3aGVyZSBvbmUgaXMgZnJvbSBhIFZQTiBp bnRlbmRlZCB0byBwcmVzZXJ2ZSBwcml2YWN5LCBzYXkgaWYgYSA+dXNlciBpcyBhaW1pbmcgdG8g Y2lyY3VtdmVudCBsb2NhbCBjZW5zb3JzaGlwIG9yIHN1cnZlaWxsYW5jZS4gIDUuMS4xLjEgaGFz IGEgU0hPVUxEIHRoYXQsID5hcyBJIHJlYWQgaXQsIHNheXMgdG8gYWx3YXlzIGluY2x1ZGUgc3Vj aCBhZGRyZXNzZXMuICANCj4NCj4gICBbMV0gaHR0cHM6Ly93d3cudzMub3JnL3dpa2kvUHJpdmFj eS9JUEFkZHJlc3Nlcw0KPg0KPihOb3RlOiBJJ20gbm90IGNsYWltaW5nIFsxXSBpcyBhdXRob3Jp dGF0aXZlLCBpdCdzIGp1c3QgYSBwYWdlIEkgZm91bmQgdGhhdCBkZXNjcmliZXMgdGhlIGlzc3Vl IHJlYXNvbmFibHkgd2VsbC4pDQo+DQo+VGhlcmUgaXMgYSBiaXQgb2YgdGV4dCBhYm91dCB0aGlz ICgxc3QgcGFyYSBpbiBzZWN0aW9uIDE5KSwgYnV0IElNTyBpdCdzIGEgYml0IHdlYWsuIA0KPg0K Pi0gRGlkIHRoZSBXRyBjb25zaWRlciBSRVFVSVJJTkcgb3IgUkVDT01NRU5ESU5HIGFnZW50IGlt cGxlbWVudGF0aW9ucw0KPiAgcHJvdmlkZSBzb21lIGxvY2FsIGludGVyZmFjZSB0aGF0IGFsbG93 cyB0aGUgaG9zdCBvciBhbiBhcHBsaWNhdGlvbiB0byBzYXkgIkRvbid0IHVzZSANCj4gPHRoaXM+ IGludGVyZmFjZSB0byBnZW5lcmF0ZSBhbnkgY2FuZGlkYXRlcyB1bnRpbCBJIHRlbGwgeW91IG90 aGVyd2lzZSI/ICBUaGF0IG1pZ2h0IGJlIA0KPiBiZXR0ZXIgdGhhbiBoYXZpbmcgVlBOIG9wZXJh dG9ycyByZWNvbW1lbmRpbmcgdG8gdHVybiBvZmYgV2ViUlRDIGVudGlyZWx5IGZvciANCj4gZXhh bXBsZS4gKE5vdGU6IHRoaXMgaXMgbXkgbWFpbiBjb21tZW50LCB0aGUgcmVzdCBhcmUgbW9zdGx5 IHN1Z2dlc3RlZCB0aGluZ3MgdG8gdGhpbmsgDQo+IGFib3V0LCBpZiB5b3UndmUgbm90IGFscmVh ZHkuKQ0KPg0KPiAtIEV2ZW4gaWYgdGhlIHRleHQgaXNuJ3QgY2hhbmdlZCwgYSByZWZlcmVuY2Ug dG8gWzJdIHdvdWxkIEkgdGhpbmsgYmUNCj4gIHVzZWZ1bC4gKEFzc3VtaW5nIFsyXSBpcyBzdGls bCBiZWluZyB3b3JrZWQgb24gaW4gcnRjd2ViLCB0aG91Z2ggbWluZCB5b3UsIEkgZG9uJ3QgbGlr ZSANCj4gaG93IFsyXSByZWZlcnMgdG8gImNvbnNlbnQiIGFzIEkgZG91YnQgYSByYW5kb20gcGVy c29uIGNhbiByZWFsbHkgcHJvdmlkZSBtZWFuaW5nZnVsIA0KPiBjb25zZW50IGZvciB0aGluZ3Mg bGlrZSB0aGlzLikNCj4NCj4gICBbMl0gaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0 LWlldGYtcnRjd2ViLWlwLWhhbmRsaW5nLTA0DQoNCkkgd291bGQgbm90IHdhbnQgdG8gUkVRVUlS RSBpbXBsZW1lbnRpbmcgYSBsb2NhbCBpbnRlcmZhY2UgZm9yIGNvbnRyb2xsaW5nIHRoZSBjYW5k aWRhdGVzLCBhcyBJQ0UgaXMgYWxzbyB1c2VkIGJ5IGRpZmZlcmVudCB0eXBlcyBvZiBuZXR3b3Jr IGVudGl0aWVzIChnYXRld2F5cyBldGMpLiBCdXQsIEkgYW0gb2sgdG8gUkVDT01NRU5ELg0KDQpX aGF0IGFib3V0Og0KDQpPTEQ6DQoNCiAgICJJbmRpdmlkdWFsIGltcGxlbWVudGF0aW9ucyBtYXkg YWxzbyBoYXZlIGltcGxlbWVudGF0aW9uLXNwZWNpZmljIHJ1bGVzIGZvciBjb250cm9sbGluZyB3 aGljaA0KICAgYWRkcmVzc2VzIGFyZSByZXZlYWxlZC4iDQoNCk5FVzoNCg0KICAgIkluZGl2aWR1 YWwgaW1wbGVtZW50YXRpb25zIG1heSBhbHNvIGhhdmUgaW1wbGVtZW50YXRpb24tc3BlY2lmaWMg cnVsZXMgZm9yIGNvbnRyb2xsaW5nIHdoaWNoDQogICBhZGRyZXNzZXMgYXJlIHJldmVhbGVkLiBJ dCBpcyBSRUNPTU1FTkRFRCB0aGF0IGFwcGxpY2F0aW9ucyBpbnRlcmFjdGluZyB3aXRoIGh1bWFu IHVzZXJzIHByb3ZpZGUgDQogICBhIHVzZXIgaW50ZXJmYWNlcyB0aGF0IGFsbG93cyB0aGUgdXNl cnMgdG8gY29udHJvbCB3aGljaCBpbnRlcmZhY2VzIGFyZSB1c2VkIHRvIGdlbmVyYXRlIGNhbmRp ZGF0ZXMsIG9yIA0KICAgd2hlbiB0byB1c2UgY2FuZGlkYXRlcyBnZW5lcmF0ZWQgZm9yIHRoZSBp bnRlcmZhY2VzLg0KDQogICBbUkVGLXRvLSBkcmFmdC1pZXRmLXJ0Y3dlYi1pcC1oYW5kbGluZ10g cHJvdmlkZSBhZGRpdGlvbmFsIGluZm9ybWF0aW9uIGFuZA0KICAgUmVxdWlyZW1lbnRzIHJlZ2Fy ZGluZyB0aGUgaGFuZGluZyBvZiBJUCBhZGRyZXNzZXMgZm9yIFdlYlJUQyBhcHBsaWNhdGlvbnMu Ig0KDQo+IC0gU2VwYXJhdGVseSBbMV0gYWxzbyBkZXNjcmliZXMgYW5vdGhlciBwb3RlbnRpYWwg cHJpdmFjeSBpc3N1ZSB3aXRoDQo+ICBTVFVOIHVybHMuIEkgdGhpbmsgaXQnZCBiZSB3b3J0aHdo aWxlIG5vdGluZyBzdWNoIGlzc3VlcyB0aGF0IGhhdmUgYmVlbiBmb3VuZCB3aXRoIGRlcGxveW1l bnRzIG9mIA0KPiBJQ0UgaGVyZSwgYXMgYW55IHByb3RvY29sIHVzaW5nIElDRSBhbmQgYWNjZXB0 aW5nIG5vbiBsb2NhbGx5IGNvbmZpZ3VyZWQgU1RVTi9UVVJOIFVSTHMgbWF5IGhhdmUgDQo+IGlz c3VlcyBsaWtlIHRoYXQuIEZvciBleGFtcGxlLCBhIHJlY2VudCBwYXBlciBbM10gYWxzbyBkZXNj cmliZXMgc29tZSBhdHRhY2tzIChpbiBzZWN0aW9uIDQuMiBtb3N0bHkpIHRoYXQgDQo+IGNvdWxk IChJIGd1ZXNzKSBiZSBtb3VudGVkIGFnYWluc3QgYW55IElDRSBhZ2VudCBhbmQgbm90IG9ubHkg V2ViUlRDIGNsaWVudHMuIFRoYXQnZCBiZSB3b3J0aCBhIHJlZmVyZW5jZSANCj4gYW5kIG1heWJl IHRoaW5raW5nIGFib3V0IHdoaWNoIGF0dGFja3MgYXJlIGdlbmVyaWMgSUNFIGlzc3VlcyBhbmQg ZG9uJ3Qgb25seSBhZmZlY3QgV2ViUlRDLg0KPg0KPiAgIFszXSBodHRwczovL2RvaS5vcmcvMTAu MTE0NS8zMDE5NjEyLjMwMTk4NDQNCg0KSSBhbSBzdHJ1Z2dsaW5nIHRvIGZpZ3VyZSBvdXQgZXhh Y3RseSB3aGF0IHRvIGRvIGhlcmUuLi4gSSByZWFsbHkgaG9wZSB3ZSBkb24ndCBoYXZlIHRvIHBl cmZvbSBhIHN0dWR5IG9uIFszXSwgYW5kIHNlZSB3aGF0IGlzIGdlbmVyYWwsIGFuZCB3aGF0IGlz IFdlYlJUQy1zcGVjaWZpYy4gQXJlIHdlIGV2ZW4gYWxsb3dlZCB0byByZWZlcmVuY2UgWzNdLCBh cyBpdCdzIG5vdCBmcmVlbHkgYXZhaWxhYmxlPw0KDQpTb21lIGhlbHAgYW5kIGd1aWRhbmNlIHdv dWxkIGJlIGFwcHJlY2lhdGVkIDopDQoNCi0tLQ0KDQo+IC0gSSBhbHNvIHdvbmRlcmVkIGlmIEkg Y2FuIGZpbmdlcnByaW50IGEgaG9zdCBiYXNlZCBvbiBob3cgaXQgZG9lcyBJQ0U/ICANCj4gIEkg IHN1c3BlY3QgdGhhdCBtaWdodCB3b3JrLCBidXQgaGF2ZW4ndCB0cmllZCB0byBmaWd1cmUgb3V0 IGRldGFpbHMuDQo+DQo+IC0gQ291bGQgSSBwcm9iZSBhbiBpbnRlcm5hbCBuZXR3b3JrIGJhc2Vk IG9uIGZlZWRpbmcgaXQgY2FuZGlkYXRlcyB0bw0KPiAgY2hlY2s/IEUuZy4gY2hlY2tpbmcgdGlt aW5nIG9mIHJlYWN0aW9ucy4gIElmIEkgY291bGQgdGhhdCBzZWVtcyBub3Rld29ydGh5Lg0KDQpT b21ldGhpbmcgbGlrZT8NCg0KIkJhc2VkIG9uIHRoZSB0eXBlcyBvZiBjYW5kaWRhdGVzIHByb3Zp ZGVkIGJ5IHRoZSBwZWVyLCBhbmQgdGhlIHJlc3VsdHMgb2YgdGhlIGNvbm5lY3Rpdml0eSB0ZXN0 cyBwZXJmb3JtZWQgDQpBZ2FpbnN0IHRob3NlIGNhbmRpZGF0ZXMsIGFuIGFnZW50IG1pZ2h0IGJl IGFibGUgdG8gZGV0ZXJtaW5lIGNoYXJhY3RlcmlzdGljcyBvZiB0aGUgcGVlciBuZXR3b3JrLiIN Cg0KLS0tDQoNCj4gKDIpIDUuMzogIi4uLk1VU1QgY29udGFpbiAuLi4gPGZvbz4gYml0cyBvZiBy YW5kb21uZXNzIiBEb24ndCB5b3UgbmVlZCB0byBzYXkgd2hlbiB0aGVzZSB2YWx1ZXMgTVVTVCBi ZSBkaWZmZXJlbnQgYW5kIHdoZW4gdGhleSdyZSBvayB0byBiZSByZS11c2VkPyBJIGZvcmdldCBp ZiBTVFVOL1RVUk4gZG8gdGhhdC4gDQoNClNlY3Rpb24gNy4yLjIgc2F5czoNCg0KIkEgY29ubmVj dGl2aXR5IGNoZWNrIEJpbmRpbmcgcmVxdWVzdCBNVVNUIHV0aWxpemUgdGhlIFNUVU4gc2hvcnQt dGVybSBjcmVkZW50aWFsIG1lY2hhbmlzbS4iDQoNClJGQyA1Mzg5IChTVFVOKSBzYXlzOg0KDQog ICAgICAiU2hvcnQtVGVybSBDcmVkZW50aWFsOiAgQSB0ZW1wb3JhcnkgdXNlcm5hbWUgYW5kIGFz c29jaWF0ZWQgcGFzc3dvcmQNCiAgICAgIHRoYXQgcmVwcmVzZW50IGEgc2hhcmVkIHNlY3JldCBi ZXR3ZWVuIGNsaWVudCBhbmQgc2VydmVyLiAgU2hvcnQtDQogICAgICB0ZXJtIGNyZWRlbnRpYWxz IGFyZSBvYnRhaW5lZCB0aHJvdWdoIHNvbWUga2luZCBvZiBwcm90b2NvbA0KICAgICAgbWVjaGFu aXNtIGJldHdlZW4gdGhlIGNsaWVudCBhbmQgc2VydmVyLCBwcmVjZWRpbmcgdGhlIFNUVU4NCiAg ICAgIGV4Y2hhbmdlLiAgQSBzaG9ydC10ZXJtIGNyZWRlbnRpYWwgaGFzIGFuIGV4cGxpY2l0IHRl bXBvcmFsIHNjb3BlLA0KICAgICAgd2hpY2ggbWF5IGJlIGJhc2VkIG9uIGEgc3BlY2lmaWMgYW1v dW50IG9mIHRpbWUgKHN1Y2ggYXMgNQ0KICAgICAgbWludXRlcykgb3Igb24gYW4gZXZlbnQgKHN1 Y2ggYXMgdGVybWluYXRpb24gb2YgYSBTSVAgZGlhbG9nKS4NCiAgICAgIFRoZSBzcGVjaWZpYyBz Y29wZSBvZiBhIHNob3J0LXRlcm0gY3JlZGVudGlhbCBpcyBkZWZpbmVkIGJ5IHRoZQ0KICAgICAg YXBwbGljYXRpb24gdXNhZ2UuIg0KDQpJZiBhbnl0aGluZyBleHRyYSBpcyBuZWVkZWQsIEkgdGhp bmsgdGhhdCBzaG91bGQgYmUgZG9uZSBhcyBhbiB1cGRhdGUgdG8gU1RVTi4NCg0KID4gKEFsc28g LSB0aGUgcGhyYXNpbmcgaXNuJ3QgdGhhdCBncmVhdCAtIGhvdyBkbyBJICJjb250YWluIiByYW5k b21uZXNzPyBCdXQgdGhhdCdzIGp1c3QgYSBuaXQuKQ0KDQpEbyB5b3UgaGF2ZSBhIHN1Z2dlc3Rp b24gZm9yIGEgYmV0dGVyIHdvcmQ/DQoNCj09PT09PT09PT09PT09PT09PT09PT09PQ0KDQpOaXRz Og0KDQo+IEkgdG9vayBhIGxvb2sgYXQgdGhlIGRpZmYgWzRdIGJldHdlZW4gdGhpcyBhbmQgNTI0 NSwgYnV0IHRoYXQgd2Fzbid0IHJlYWxseSB0aGF0IHVzZWZ1bCwgc28gdGhpcyByZXZpZXcgaXMg YmFzZWQgb24NCj4gYSByZWFkIG9mIHRoZSBkcmFmdCB3aXRob3V0IGNvbXBhcmluZyBpdCB0byA1 MjQ1LiBBcG9sb2dpZXMgaWYgdGhhdCBjYXVzZXMgbWUgdG8gY29tbWVudCBvbiB0ZXh0IHRoYXQn cw0KPiB1bmNoYW5nZWQgLSBpbiBzdWNoIGNhc2VzLCBJIHRoaW5rIGl0J3MgZmluZSB0byBub3Qg aGVlZCB0aG9zZSBwYXJ0aWN1bGFyIGNvbW1lbnRzLiANCj4NCj4gICBbNF0gaHR0cHM6Ly90b29s cy5pZXRmLm9yZy9yZmNkaWZmP3VybDE9cmZjNTI0NSZ1cmwyPWRyYWZ0LWlldGYtaWNlLXJmYzUy NDViaXMtMTYudHh0DQo+DQo+IC0gMi4xOiBXaHkgIm9ubHkgVURQIHNwZWNpZmllZCBoZXJlIj8g RG9lcyB0aGF0IGluY2x1ZGUgUVVJQyB3aGljaCBpcw0KPiAgIFVEUC1iYXNlZCwgYnV0IG5vdCBV RFA/IEkgYXNzdW1lIHNvLg0KDQpUaGVyZSBpcyBhIHNlcGFyYXRlIHNwZWNpZmljYXRpb24sIFJG QyA2NTQ0LCBmb3IgVENQIGJhc2VkIGNhbmRpZGF0ZXMuDQoNClJlZ2FyZGluZyBRVUlDLCBJIGRv bid0IGtub3cuIFFVSUMgd2Fzbid0IGRpc2N1c3NlZCBkdXJpbmcgdGhlIHdvcmssIGJ1dCBob3cv aWYgdGhlIHByb2NlZHVyZXMgYWxzbyBhcHBseSB0byBRVUlDIHdpdGhvdXQgYW55IG1vZGlmaWNh dGlvbnMgZXRjIEkgZG9uJ3Qga25vdy4NCg0KPiAtIDIuMzogaG93IHRoZSBjb250cm9sbGluZy9j b250cm9sbGVkIHN0dWZmIHdvcmtzIGlzbid0IGNsZWFyIGZyb20NCj4gIHRoaXMsIG5vciBldmVu IChhcyBJIHdhcyByZWFkaW5nIGl0KSBpbiBzZWN0aW9uIDcuMy4xLjEgLSBJIHdhc24ndCBjbGVh ciBob3cgdGhlIHRpZS1icmVha2VyIHZhbHVlIGlzIGluaXRpYWxpc2VkIHVudGlsIEkgZ290IHRv IDE2LjEuDQo+IEluIGFueSBjYXNlIEkgdGhpbmsgYSBiaXQgbW9yZSBleHBsYW5hdG9yeSB0ZXh0 IGluIDIuMyBtaWdodCBiZSBnb29kLg0KPiAoQnV0IGlmIGltcGxlbWVudGVycyBoYXZlbid0IGhh ZCBhIHByb2JsZW0gd2l0aCB0aGlzLCBtYXliZSBpdCdzIGp1c3QgbWUuKQ0KDQpJbiBnZW5lcmFs LCBvbmUgb2YgdGhlIHRhc2tzIG9mIHRoZSBiaXMgd29yayB3YXMgdG8gKnNpbXBsaWZ5KiBzZWN0 aW9uIDIsIGJlY2F1c2UgdGhlIHByZXZpb3VzIHZlcnNpb24gd2FzIHRvbyBkZXRhaWxlZCBmb3Ig bm9uLWltcGxlbWVudGVycyB3aG8ganVzdCB3YW50IHRvIGZpZ3VyZSBvdXQgd2hhdCBJQ0UgaXMg YWxsIGFib3V0IChpbiBvcmRlciB0byAgYWN0dWFsbHkgaW1wbGVtZW50IElDRSwgcmVhZGluZyBz ZWN0aW9uIDIgaXMgb2J2aW91c2x5IG5vdCBlbm91Z2gpLiBGb3IgdGhhdCByZWFzb24sIG15IG9w aW5pb24gd2FzIHRoYXQgc2VjdGlvbiAyIGRvZXNuJ3QgcmVhbGx5IG5lZWQgdG8gdGFsayBhYm91 dCByb2xlIGNvbmZsaWN0cyBhbmQgdGllLWJyZWFrZXIgdmFsdWVzLCBhcyBpdCdzIG5vdCBlc3Nl bnRpYWwgZm9yIGEgaGlnaC1sZXZlbCBkZXNjcmlwdGlvbiBvZiBJQ0UuDQoNCi0tLQ0KDQo+IC0g NS4yOiAiVGhlIHByb2NlZHVyZXMgaW4gdGhpcyBzZWN0aW9uIGlzIGNvbW1vbiBhY3Jvc3MgdGhl IGluaXRpYXRpbmcNCj4gIGFuZCByZXNwb25kaW5nIGFnZW50cy4iIHMvaXMvYXJlLyBJIGd1ZXNz Pw0KDQpZZXMuIEkgd2lsbCBmaXggYXMgc3VnZ2VzdGVkLg0KDQotLS0NCg0KPiAtIDYuMS4xOiBX aGF0IGlzICIzUENDIj8gVGhhdCBub3RlIGNvdWxkIG1heWJlIGFsc28gZG8gd2l0aCBhDQo+ICBy ZWZlcmVuY2UsIGFzIEkgYXQgbGVhc3QgZG9uJ3QgZ2V0IHdoYXQgeW91J3JlIHRyeWluZyB0byB0 ZWxsIG1lLiBBaA0KPiAtIGl0J3MgM3JkIHBhcnR5IGNhbGwgY29udHJvbCAobWVudGlvbmVkIGlu IDcuMy4xLjEpLg0KDQpJIGNhbiB1c2UgIjNQQ0MgKDNyZCBQYXJ0eSBDYWxsIENvbnRyb2wpIiBp biBzZWN0aW9uIDYuMS4xLg0KDQpBcyB0aGUgc3BlYyBpcyBwcm90b2NvbCBpbmRlcGVuZGVudCwg SSBkb24ndCB0aGluayB0aGVyZSBhcmUgYW55IHJlZmVyZW5jZXMgdGhhdCBjYW4gYmUgYWRkZWQu DQoNCi0tLQ0KDQo+IC0gMTYuMTogRm9yIGEgZ2l2ZW4gSUNFIHNlc3Npb24sIGFyZSB0aGUgcmFu ZG9tIG51bWJlcnMgaW4gdGhlDQo+ICBJQ0UtQ09OVFJPTExFRCBhbmQgSUNFLUNPTlRST0xMSU5H IGF0dHJpYnV0ZXMgc2VudCBieSB0aGUgc2FtZSBhZ2VudCBzdXBwb3NlZCB0byBoYXZlDQo+IHRo ZSBzYW1lIHZhbHVlPyBJIHdhc24ndCBjbGVhci4gSWYgdGhleSBhcmUgdGhlIHNhbWUsIEkgdW5k ZXJzdGFuZCBob3cgdGllLWJyZWFraW5nIGhhcHBlbnMuIA0KPiBJZiB0aGV5IGNhbiBkaWZmZXIs IEknbSBub3Qgc3VyZS4gKEJ1dCBJIGRpZG4ndCBnbyBiYWNrIGFuZCByZS1yZWFkIDcuMy4xLjEs IHNvIGl0IG1heSBiZSBvayBlaXRoZXIgDQo+IHdheTotKSANCg0KSXQgaXMgY292ZXJlZCBpbiB0 aGUgMm5kIHBhcmFncmFwaCBvZiBzZWN0aW9uIDcuMi41LjEsIHdoaWNoIHNheXMgdGhhdCB0aGUg YWdlbnQgTUFZIGNoYW5nZSB0aGUgdmFsdWUgd2hlbiBpdCBzd2l0Y2hlcyByb2xlLg0KDQo+IElu IGFueSBjYXNlIHNheWluZyAicmVmZXJyZWQgdG8gYXMgdGhlIHRpZS1icmVha2VyIHZhbHVlIiB0 d2ljZSBzZWVtcyBvZGQuIA0KDQpJJ2xsIHJlbW92ZSBpdCBmcm9tIHRoZSBJQ0UtQ09OVFJPTExJ TkcgZGVmaW5pdGlvbi4NCg0KLS0tDQoNCj4gLSAxNi4xOiAobWVnYS1tZWdhLW5pdDotKSB0aGUg ZmFjdCB0aGF0IHRpZS1icmVha2VyIGlzIHNwbGl0IG92ZXIgYQ0KPiAgbGluZS1icmVha2VyIGhl cmUgaXMgd2h5IEkgZGlkbid0IGZpbmQgdGhpcyB3aGVuIEkgd2FzIHJlYWRpbmcNCj4gMi4zLzcu My4xLjEgLSBtYXliZSB0d2VhayB0aGUgd29yZHMgc28gYSBncmVwIHdpbGwgZmluZCBpdD8pDQoN Ckdvb2QgY2F0Y2guIEknbGwgZml4IGl0Lg0KDQpJdCB3b3VsZCBiZSByZWFsbHkgY29vbCBpZiBz ZWFyY2ggZnVuY3Rpb25zIGNvdWxkIGRpc2NhcmQgbGluZS1icmVha3Mgd2hlbiBzZWFyY2hpbmcg Zm9yIHN0cmluZ3MuDQoNCi0tLQ0KDQo+IC0gMTc6ICJsb29raW5nIHRvIGRlcGxveSBJQ0UiIGlz IGEgYml0IGNvbmZ1c2luZyAtIGRvIHlvdSBtZWFuDQo+ICAibG9va2luZyB0byBiZSBuaWNlIHRv IElDRSI/IE15IGFzc3VtcHRpb24gaXMgdGhhdCBlbmRwb2ludHMgZGVwbG95IElDRSBhZ2VudHMg YnV0IA0KPiBuZXR3b3JrIG9wZXJhdG9ycyBkb24ndCwgdGhvdWdoIHRoZXkgbWlnaHQgZGVwbG95 IFNUVU4vVFVSTiBzZXJ2ZXJzIEkgZ3Vlc3MuIEJ1dCANCj4gbWF5YmUgSSdtIHRoaW5raW5nIHRv byBtdWNoIGFib3V0IFdlYlJUQyB0aGVyZS4NCg0KUGVyaGFwcyBzb21ldGhpbmcgbGlrZToNCg0K ICAgIlRoaXMgc2VjdGlvbiBkaXNjdXNzZXMgaXNzdWVzIHJlbGV2YW50IHRvIG9wZXJhdG9ycyBv cGVyYXRpbmcgbmV0d29ya3Mgd2hlcmUgSUNFIHdpbGwgYmUgdXNlZCBieSBlbmRwb2ludHMuIg0K DQotLS0NCg0KPiAtIDE4OiBJIHdvbmRlcmVkIGlmIHRoaXMgaXMgc3RpbGwgbmVlZGVkLCBnaXZl biB0aGF0IDUyNDUgYWxyZWFkeSBzYWlkDQo+ICBpdCAoSSBkaWRuJ3QgY2hlY2sgaWYgdGhlIHRl eHQgaGFzIGJlZW4gdXBkYXRlZCkuIFNheWluZyB0aGlzIG9uY2Ugd291bGQgc2VlbSBzdWZmaWNp ZW50IA0KPiB0byBtZSBhbnl3YXkuIEkgZ3Vlc3MgbGVhdmluZyBpdCBpbiBpcyB0aGUgZWFzaWVy IHBhdGguDQoNCkknbGwgbGVhdmUgaXQgOikNCg0KLS0tDQoNCj4gLSAxOTogcy9ETlMtU0VDL0RO U1NFQy8gd291bGQgYmUgbW9yZSBjb21tb24NCg0KSSB3aWxsIGZpeCBhcyBzdWdnZXN0ZWQuDQoN Ci0tLQ0KDQo+IC0gMTkuNC4xOiAxc3Qgc2VudGVuY2UgaWYgbWlzc2luZyBhICJUIiAtIHMvaGUv VGhlLw0KDQpJIHdpbGwgZml4IGFzIHN1Z2dlc3RlZC4NCg0KLS0tDQoNClJlZ2FyZHMsDQoNCkNo cmlzdGVyDQoNCg== From nobody Sun Jan 28 23:26:41 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CF770131676; Sun, 28 Jan 2018 23:26:24 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id u1ktg2Vnhu-m; Sun, 28 Jan 2018 23:26:21 -0800 (PST) Received: from smtpout4.netcore.co.in (sm23841.nsmailserv.com [202.162.238.41]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 92C06131708; Sun, 28 Jan 2018 23:26:19 -0800 (PST) Received: from smtpin4.netcore.co.in (unknown [192.168.2.129]) by cf3.netcore.co.in (Postfix) with ESMTP id 43CCE1200F3; Mon, 29 Jan 2018 12:55:57 +0530 (IST) Received: from cloudmail14.netcore.co.in (cloudmail12.netcore.co.in [202.162.231.3]) by smtpin4.netcore.co.in (Postfix) with ESMTP id 335201686D0; Mon, 29 Jan 2018 12:56:08 +0530 (IST) Mime-Version: 1.0 Date: Mon, 29 Jan 2018 07:26:09 +0000 Content-Type: multipart/alternative; boundary="----=_Part_916_174912113.1517210769" Message-ID: <6daa3d4a041bf3a87936bd27901f2039@cloudmail14.netcore.co.in> X-Mailer: AfterLogic webmail client From: bhuvaneswaran.vengainathan@veryxtech.com To: "MORTON, ALFRED C (AL)" Cc: "Russ Housley" , "secdir@ietf.org" , "ietf@ietf.org" , "bmwg@ietf.org" , "draft-ietf-bmwg-sdn-controller-benchmark-meth.all@ietf.org" In-Reply-To: <4D7F4AD313D3FC43A053B309F97543CF490A6DC9@njmtexg5.research.att.com> References: <151700065585.4373.15947979044552046715@ietfa.amsl.com> <4D7F4AD313D3FC43A053B309F97543CF490A6DC9@njmtexg5.research.att.com> X-Priority: 3 (Normal) X-SMTP30-MailScanner-Information: Please contact the ISP for more information X-MailScanner-ID: 335201686D0.A2D7F X-SMTP30-MailScanner: Found to be clean X-MailScanner-From: bhuvaneswaran.vengainathan@veryxtech.com X-Cloudmilter-Processed: 1 Archived-At: Subject: Re: [secdir] [bmwg] Secdir last call review of draft-ietf-bmwg-sdn-controller-benchmark-meth-07 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 29 Jan 2018 07:26:25 -0000 ------=_Part_916_174912113.1517210769 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Hi Russ, Thank you for your comments. I believe adding Al text helps to address your major concerns.=20 Regarding your minor concerns and Nits feedback, we will address and submit= the revised drafts. Best Regards, Bhuvan On Sat, Jan 27, 2018 at 05:58 AM, "MORTON, ALFRED C (AL)" wrote: Hi Russ, Major Concerns The tests cover encrypted and unencrypted communications, but nothing is said about the key management. I recognize that the tests will be conducted in the lab, but it would be desirable for the key management to exercise the same interfaces that will be used in a production setting. Encrypted connections with network devices are mentioned in general, primarily in Section 4.4, as a possibility that may be tested: https://tools.ietf.org/html/draft-ietf-bmwg-sdn-controller-benchmark-meth-0= 7#section-4.4 (https://tools.ietf.org/html/draft-ietf-bmwg-sdn-controller-b= enchmark-meth-07#section-4.4) It will help if we can iterate on text to satisfy your comment, such as adding: 4.4. Connection Setup There may be controller implementations that support unencrypted and encrypted network connections with Network Devices. Further, the controller may have backward compatibility with Network Devices running older versions of southbound protocols. It may be useful to measure the controller performance with one or more applicable connection setup methods defined below. ADD For cases with encrypted communications between the controller and the=20 switch, key management and key exchange MUST take place before any performance or benchmark measurements. just trying to clarify what you want to see added, Al doc shepherd -----Original Message----- From: Russ Housley [mailto:housley@vigilsec.com (mailto:housley@vigilsec.co= m)] Sent: Friday, January 26, 2018 4:04 PM To: secdir@ietf.org (mailto:secdir@ietf.org) Cc: ietf@ietf.org (mailto:ietf@ietf.org); bmwg@ietf.org (mailto:bmwg@ietf.o= rg); draft-ietf-bmwg-sdn-controller- benchmark-meth.all@ietf.org (mailto:benchmark-meth.all@ietf.org) Subject: Secdir last call review of draft-ietf-bmwg-sdn-controller- benchmark-meth-07 Reviewer: Russ Housley Review result: Has Issues I reviewed this document as part of the Security Directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the Security Area Directors. Document authors, document editors, and WG chairs should treat these comments just like any other IETF Last Call comments. Document: draft-ietf-bmwg-sdn-controller-benchmark-meth-05 Reviewer: Russ Housley Review Date: 2018-01-26 IETF LC End Date: 2018-02-02 IESG Telechat date: Unknown Summary: Has (Minor) Issues Major Concerns The tests cover encrypted and unencrypted communications, but nothing is said about the key management. I recognize that the tests will be conducted in the lab, but it would be desirable for the key management to exercise the same interfaces that will be used in a production setting. Minor Concerns Section 1: Please update the first paragraph to reference RFC 8174 in addition to RFC 2119, as follows: The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in BCP 14 [RFC2119] [RFC8174] when, and only when, they appear in all capitals, as shown here. RFC 2119 is missing from the normative references. If you accept the above suggestion, RFC 8174 needs to be added as well. Nits The term "SDN Controller" is not defined in the companion terminology document, and a definition does not emerge in this document until Section 2, where it says: ... the SDN controller is a function that manages and controls Network Devices. ... I recognize that this is very basic, but it also seems like very important information for the Introduction. Similarly, please explain the difference between a "cluster of homogeneous controllers" and a "federation of controllers." The indenting in the document shifts in Section 5. Some lines other than Section headers are flush with the left margin. _______________________________________________ bmwg mailing list bmwg@ietf.org (mailto:bmwg@ietf.org) https://www.ietf.org/mailman/listinfo/bmwg (https://www.ietf.org/mailman/li= stinfo/bmwg) DISCLAIMER: Privileged and/or Confidential information may be contained in this message. If you are not the addressee of this message, you may not copy, use or deliver this message to anyone. In such event,you should destroy the message and kindly notify the sender by reply e-mail. It is understood that opinions or conclusions that do not relate to the official business of the company are neither given nor endorsed by the company. ------=_Part_916_174912113.1517210769 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable
Hi Russ,

Th= ank you for your comments.
I believe adding Al text helps to address you= r major concerns.=C2=A0
Regarding your minor concerns and Nits fe= edback, we will address and submit the revised drafts.

=
Best Regards,
Bhuvan

On Sat, Jan 27, 2018 at 05:58 AM, "MORTON, ALFRED C (AL)" <acmorton@att= .com> wrote:
Hi Russ,

Major Con= cerns

The tests cover encrypted and unencrypted communications, but = nothing
is said about the key management.=C2=A0=C2=A0I recognize that th= e tests will be
conducted in the lab, but it would be desirable for the = key management
to exercise the same interfaces that will be used in a pr= oduction
setting.


Encrypted connections with network= devices are mentioned in general,
primarily in Section 4.4, as a possib= ility that may be tested:
https://tools.ietf.org/html/draft-ietf-bmwg-sdn-co= ntroller-benchmark-meth-07#section-4.4

It will help if we can it= erate on text to satisfy your comment,
such as adding:
4.4. Connectio= n Setup

There may be controller implementations that support unencry= pted and
encrypted network connections with Network Devices. Further, th= e
controller may have backward compatibility with Network Devices
run= ning older versions of southbound protocols. It may be useful to
measure= the controller performance with one or more applicable
connection setup= methods defined below.
ADD
For cases with encrypted communications b= etween the controller and the
switch, key management and key exchange M= UST take place before
any performance or benchmark measurements.

= just trying to clarify what you want to see added,
Al
doc shepherd
-----Original Message-----
From: Russ Housley [mailto:<= a target=3D"_blank" href=3D"mailto:housley@vigilsec.com" style=3D"cursor: i= nherit;">housley@vigilsec.com]
Sent: Friday, January 26, 2018 4:04 P= M
To: secdir@ietf.org
Cc: ietf@ietf.org; bmwg@ietf= .org; draft-ietf-bmwg-sdn-controller-
benchmark-met= h.all@ietf.org
Subject: Secdir last call review of draft-ietf-bmwg-s= dn-controller-
benchmark-meth-07

Reviewer: Russ Housley
Review= result: Has Issues

I reviewed this document as part of the Security= Directorate's ongoing
effort to review all IETF documents being process= ed by the IESG.=C2=A0=C2=A0These
comments were written primarily for the= benefit of the Security Area
Directors.=C2=A0=C2=A0Document authors, do= cument editors, and WG chairs should
treat these comments just like any = other IETF Last Call comments.

Document: draft-ietf-bmwg-sdn-control= ler-benchmark-meth-05
Reviewer: Russ Housley
Review Date: 2018-01-26<= br>IETF LC End Date: 2018-02-02
IESG Telechat date: Unknown

Summa= ry: Has (Minor) Issues

Major Concerns

The tests cover encrypt= ed and unencrypted communications, but nothing
is said about the key man= agement.=C2=A0=C2=A0I recognize that the tests will be
conducted in the = lab, but it would be desirable for the key management
to exercise the sa= me interfaces that will be used in a production
setting.

Minor Co= ncerns

Section 1: Please update the first paragraph to reference RFC= 8174
in addition to RFC 2119, as follows:

The key words "MUST", = "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT",
"SHOULD", "SHOULD NOT", "R= ECOMMENDED", "NOT RECOMMENDED", "MAY", and
"OPTIONAL" in this document a= re to be interpreted as described in BCP
14 [RFC2119] [RFC8174] when, an= d only when, they appear in all
capitals, as shown here.

RFC 2119= is missing from the normative references.=C2=A0=C2=A0If you accept the
= above suggestion, RFC 8174 needs to be added as well.

Nits

Th= e term "SDN Controller" is not defined in the companion terminology
docu= ment, and a definition does not emerge in this document until
Section 2,= where it says:

... the SDN controller is a function that manages an= d
controls Network Devices. ...

I recognize that this is very bas= ic, but it also seems like very
important information for the Introducti= on.

Similarly, please explain the difference between a "cluster ofhomogeneous controllers" and a "federation of controllers."

The in= denting in the document shifts in Section 5.=C2=A0=C2=A0Some lines
other= than Section headers are flush with the left margin.


_= ______________________________________________
bmwg mailing list
b= mwg@ietf.org
https://www.ietf.org/mailman/l= istinfo/bmwg
DISCLAIMER: Privileged and/o= r Confidential information may be contained in this message. If you are not the addressee of this message, you may not copy, use or deliver this message to anyone. In such event,you should destroy the message and kindly notify the sender by reply e-mail. It is understood that opinions or conclusions that do not relate to the official business of the company are neither given nor endorsed by the company. ------=_Part_916_174912113.1517210769-- From nobody Tue Jan 30 03:20:55 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7D0E6131B0E; Tue, 30 Jan 2018 03:20:50 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.31 X-Spam-Level: X-Spam-Status: No, score=-4.31 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cs.tcd.ie Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KH0FxLat31ZZ; Tue, 30 Jan 2018 03:20:42 -0800 (PST) Received: from mercury.scss.tcd.ie (mercury.scss.tcd.ie [134.226.56.6]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 281CE13179D; Tue, 30 Jan 2018 03:18:15 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by mercury.scss.tcd.ie (Postfix) with ESMTP id 21415BE56; Tue, 30 Jan 2018 11:18:13 +0000 (GMT) Received: from mercury.scss.tcd.ie ([127.0.0.1]) by localhost (mercury.scss.tcd.ie [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id H7stoCDx7eIF; Tue, 30 Jan 2018 11:18:12 +0000 (GMT) Received: from [134.226.36.93] (bilbo.dsg.cs.tcd.ie [134.226.36.93]) by mercury.scss.tcd.ie (Postfix) with ESMTPSA id C7E24BDF9; Tue, 30 Jan 2018 11:18:12 +0000 (GMT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cs.tcd.ie; s=mail; t=1517311092; bh=bV/RJXemE5iTzhf6HDSxUHkk9UvyUWXQyb60QVVlXVQ=; h=Subject:To:Cc:References:From:Date:In-Reply-To:From; b=zG00OHwIYXn9srgHkFddOHvFp5yDApHmiAcoAE/ReQepoY4AVQH4QcksawykS3F1r /Ffq8DfzRFqroP7pvyaUHg6qy/UlkCBwM0d5CLah0Cj87ejovWTB89Ejm6yTxzYvX0 +QlZ55yk8wd+mS4T0Z14q156gLY/1BqbWLdQ1fxc= To: Christer Holmberg , "secdir@ietf.org" Cc: "draft-ietf-ice-rfc5245bis.all@ietf.org" , "ietf@ietf.org" , "ice@ietf.org" References: <151698534014.492.17944720668568287169@ietfa.amsl.com> <7594FB04B1934943A5C02806D1A2204B6C143E76@ESESSMB109.ericsson.se> From: Stephen Farrell Openpgp: id=5BB5A6EA5765D2C5863CAE275AB2FAF17B172BEA; url= Message-ID: Date: Tue, 30 Jan 2018 11:18:11 +0000 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.6.0 MIME-Version: 1.0 In-Reply-To: <7594FB04B1934943A5C02806D1A2204B6C143E76@ESESSMB109.ericsson.se> Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="ZbqazTyWcpZvcqsfpx3erplxS9izLcC5b" Archived-At: Subject: Re: [secdir] Secdir last call review of draft-ietf-ice-rfc5245bis-16 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 30 Jan 2018 11:20:51 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --ZbqazTyWcpZvcqsfpx3erplxS9izLcC5b Content-Type: multipart/mixed; boundary="YTrqgvD2chIL0rRga9MPRa2TrVNsMa1hn"; protected-headers="v1" From: Stephen Farrell To: Christer Holmberg , "secdir@ietf.org" Cc: "draft-ietf-ice-rfc5245bis.all@ietf.org" , "ietf@ietf.org" , "ice@ietf.org" Message-ID: Subject: Re: Secdir last call review of draft-ietf-ice-rfc5245bis-16 References: <151698534014.492.17944720668568287169@ietfa.amsl.com> <7594FB04B1934943A5C02806D1A2204B6C143E76@ESESSMB109.ericsson.se> In-Reply-To: <7594FB04B1934943A5C02806D1A2204B6C143E76@ESESSMB109.ericsson.se> --YTrqgvD2chIL0rRga9MPRa2TrVNsMa1hn Content-Type: multipart/mixed; boundary="------------FB8F40EBBA5D0F52B3AC56EA" Content-Language: en-GB This is a multi-part message in MIME format. --------------FB8F40EBBA5D0F52B3AC56EA Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hiya, Sorry for the slowish response, more inline... On 28/01/18 12:57, Christer Holmberg wrote: > Hi Stephen, >=20 > Thank You for your review! Please see inline. >=20 >> Reviewer: Stephen Farrell Review result: Has Issues >>=20 >> (1) I think a bit more work on the security and privacy issues >> around ICE would improve >the document, and hopefully, ICE >> implementations. >>=20 >> - There has been (IMO somewhat justified) concern [1] about >> exposing all possible >addresses, for example where one is from a >> VPN intended to preserve privacy, say if a >user is aiming to >> circumvent local censorship or surveillance. 5.1.1.1 has a SHOULD >> that, >as I read it, says to always include such addresses. >>=20 >> [1] https://www.w3.org/wiki/Privacy/IPAddresses >>=20 >> (Note: I'm not claiming [1] is authoritative, it's just a page I >> found that describes the issue reasonably well.) >>=20 >> There is a bit of text about this (1st para in section 19), but IMO >> it's a bit weak. >>=20 >> - Did the WG consider REQUIRING or RECOMMENDING agent >> implementations provide some local interface that allows the host >> or an application to say "Don't use interface to generate >> any candidates until I tell you otherwise"? That might be better >> than having VPN operators recommending to turn off WebRTC entirely >> for example. (Note: this is my main comment, the rest are mostly >> suggested things to think about, if you've not already.) >>=20 >> - Even if the text isn't changed, a reference to [2] would I think >> be useful. (Assuming [2] is still being worked on in rtcweb, though >> mind you, I don't like how [2] refers to "consent" as I doubt a >> random person can really provide meaningful consent for things like >> this.) >>=20 >> [2] https://tools.ietf.org/html/draft-ietf-rtcweb-ip-handling-04 >=20 > I would not want to REQUIRE implementing a local interface for > controlling the candidates, as ICE is also used by different types of > network entities (gateways etc). But, I am ok to RECOMMEND. Fair enough. >=20 > What about: >=20 > OLD: >=20 > "Individual implementations may also have implementation-specific > rules for controlling which addresses are revealed." >=20 > NEW: >=20 > "Individual implementations may also have implementation-specific > rules for controlling which addresses are revealed. It is RECOMMENDED > that applications interacting with human users provide a user > interfaces that allows the users to control which interfaces are used > to generate candidates, or when to use candidates generated for the > interfaces. >=20 > [REF-to- draft-ietf-rtcweb-ip-handling] provide additional > information and Requirements regarding the handing of IP addresses > for WebRTC applications." That's a fine improvement from my POV, esp if folks will really provide such interfaces. I'm not sure "interacting with humans" is quite right though, maybe it'd be better to add a reference to the problem (via [1] or [rtcweb-ip]) and to then say "Implementations where such issues can arise are RECOMMENDED to..." I'd also suggest maybe s/user interface/interface/ there, as e.g. a VPN client might want to use an API provided by an ICE implementation so the UI might be part of the VPN client and not the ICE implementation. So, overall I'd suggest something like this: "Individual implementations may also have implementation-specific rules for controlling which addresses are revealed. For example, [REF-to- draft-ietf-rtcweb-ip-handling] provides additional information about the privacy aspects of revealing IP addresses via ICE for WebRTC applications. ICE implementations where such issues can arise are RECOMMENDED to provide a programmatic or user interface that provides control over which network interfaces are used to generate candidates." >=20 >> - Separately [1] also describes another potential privacy issue >> with STUN urls. I think it'd be worthwhile noting such issues that >> have been found with deployments of ICE here, as any protocol using >> ICE and accepting non locally configured STUN/TURN URLs may have=20 >> issues like that. For example, a recent paper [3] also describes >> some attacks (in section 4.2 mostly) that could (I guess) be >> mounted against any ICE agent and not only WebRTC clients. That'd >> be worth a reference and maybe thinking about which attacks are >> generic ICE issues and don't only affect WebRTC. >>=20 >> [3] https://doi.org/10.1145/3019612.3019844 >=20 > I am struggling to figure out exactly what to do here... I really > hope we don't have to perfom a study on [3], and see what is general, > and what is WebRTC-specific. Are we even allowed to reference [3], as > it's not freely available? Sure, we can reference academic papers behind paywalls, and there's often another version available that's not. (Not sure in this case.) >=20 > Some help and guidance would be appreciated :) I guess about as much as can be done with this -bis effort is to note where any leakages have been found. There's been some recent traffic on the W3C WebRTC list about that I think, (in the thread about CSP iirc) so maybe a trawl of that thread will suggest some text? >=20 > --- >=20 >> - I also wondered if I can fingerprint a host based on how it does >> ICE? I suspect that might work, but haven't tried to figure out >> details. >>=20 >> - Could I probe an internal network based on feeding it candidates >> to check? E.g. checking timing of reactions. If I could that seems >> noteworthy. >=20 > Something like? >=20 > "Based on the types of candidates provided by the peer, and the > results of the connectivity tests performed Against those candidates, > an agent might be able to determine characteristics of the peer > network." Maybe: "Based on the types of candidates provided by the peer, and the results of the connectivity tests performed against those candidates, the peer might be able to determine characteristics of the local network, e.g. if different timings are apparent to the peer. In the limit the peer might be able to probe the local network." That said - I'm not claiming this is possible for-sure, I just bet it would be:-) >=20 > --- >=20 >> (2) 5.3: "...MUST contain ... bits of randomness" Don't you >> need to say when these values MUST be different and when they're ok >> to be re-used? I forget if STUN/TURN do that. >=20 > Section 7.2.2 says: >=20 > "A connectivity check Binding request MUST utilize the STUN > short-term credential mechanism." >=20 > RFC 5389 (STUN) says: >=20 > "Short-Term Credential: A temporary username and associated > password that represent a shared secret between client and server. > Short- term credentials are obtained through some kind of protocol=20 > mechanism between the client and server, preceding the STUN exchange. > A short-term credential has an explicit temporal scope, which may be > based on a specific amount of time (such as 5 minutes) or on an event > (such as termination of a SIP dialog). The specific scope of a > short-term credential is defined by the application usage." >=20 > If anything extra is needed, I think that should be done as an update > to STUN. Not sure I agree - maybe I wasn't clear in my comment though, so let me try rephrase it. STUN doesn't define the duration for which short-term creds are OK to be used. ICE does define a session concept therefore ICE ought to say if short term STUN creds MUST/MUST-NOT/MAY (or whatever) be re-used in different ICE sessions. Even within an ICE session I guess in theory one could require different short-term STUN credentials every single time, or not. So I do think there's something to be said here. >=20 >> (Also - the phrasing isn't that great - how do I "contain" >> randomness? But that's just a nit.) >=20 > Do you have a suggestion for a better word? I think what you want is to say "unguessable, with at least 128 bits of random number generator output used to generate each" or something like that? It's a hard one to get right, but even what you have isn't that bad (I did say this was a nit:-) The rest below are all fine, Thanks, S. >=20 > =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= >=20 > Nits: >=20 >> I took a look at the diff [4] between this and 5245, but that >> wasn't really that useful, so this review is based on a read of the >> draft without comparing it to 5245. Apologies if that causes me to >> comment on text that's unchanged - in such cases, I think it's fine >> to not heed those particular comments. >>=20 >> [4] >> https://tools.ietf.org/rfcdiff?url1=3Drfc5245&url2=3Ddraft-ietf-ice-rf= c5245bis-16.txt >> >> >>=20 - 2.1: Why "only UDP specified here"? Does that include QUIC which is >> UDP-based, but not UDP? I assume so. >=20 > There is a separate specification, RFC 6544, for TCP based > candidates. >=20 > Regarding QUIC, I don't know. QUIC wasn't discussed during the work, > but how/if the procedures also apply to QUIC without any > modifications etc I don't know. >=20 >> - 2.3: how the controlling/controlled stuff works isn't clear from=20 >> this, nor even (as I was reading it) in section 7.3.1.1 - I wasn't >> clear how the tie-breaker value is initialised until I got to >> 16.1. In any case I think a bit more explanatory text in 2.3 might >> be good. (But if implementers haven't had a problem with this, >> maybe it's just me.) >=20 > In general, one of the tasks of the bis work was to *simplify* > section 2, because the previous version was too detailed for > non-implementers who just want to figure out what ICE is all about > (in order to actually implement ICE, reading section 2 is obviously > not enough). For that reason, my opinion was that section 2 doesn't > really need to talk about role conflicts and tie-breaker values, as > it's not essential for a high-level description of ICE. >=20 > --- >=20 >> - 5.2: "The procedures in this section is common across the >> initiating and responding agents." s/is/are/ I guess? >=20 > Yes. I will fix as suggested. >=20 > --- >=20 >> - 6.1.1: What is "3PCC"? That note could maybe also do with a=20 >> reference, as I at least don't get what you're trying to tell me. >> Ah - it's 3rd party call control (mentioned in 7.3.1.1). >=20 > I can use "3PCC (3rd Party Call Control)" in section 6.1.1. >=20 > As the spec is protocol independent, I don't think there are any > references that can be added. >=20 > --- >=20 >> - 16.1: For a given ICE session, are the random numbers in the=20 >> ICE-CONTROLLED and ICE-CONTROLLING attributes sent by the same >> agent supposed to have the same value? I wasn't clear. If they are >> the same, I understand how tie-breaking happens. If they can >> differ, I'm not sure. (But I didn't go back and re-read 7.3.1.1, so >> it may be ok either way:-) >=20 > It is covered in the 2nd paragraph of section 7.2.5.1, which says > that the agent MAY change the value when it switches role. >=20 >> In any case saying "referred to as the tie-breaker value" twice >> seems odd. >=20 > I'll remove it from the ICE-CONTROLLING definition. >=20 > --- >=20 >> - 16.1: (mega-mega-nit:-) the fact that tie-breaker is split over >> a line-breaker here is why I didn't find this when I was reading=20 >> 2.3/7.3.1.1 - maybe tweak the words so a grep will find it?) >=20 > Good catch. I'll fix it. >=20 > It would be really cool if search functions could discard line-breaks > when searching for strings. >=20 > --- >=20 >> - 17: "looking to deploy ICE" is a bit confusing - do you mean=20 >> "looking to be nice to ICE"? My assumption is that endpoints deploy >> ICE agents but network operators don't, though they might deploy >> STUN/TURN servers I guess. But maybe I'm thinking too much about >> WebRTC there. >=20 > Perhaps something like: >=20 > "This section discusses issues relevant to operators operating > networks where ICE will be used by endpoints." >=20 > --- >=20 >> - 18: I wondered if this is still needed, given that 5245 already >> said it (I didn't check if the text has been updated). Saying this >> once would seem sufficient to me anyway. I guess leaving it in is >> the easier path. >=20 > I'll leave it :) >=20 > --- >=20 >> - 19: s/DNS-SEC/DNSSEC/ would be more common >=20 > I will fix as suggested. >=20 > --- >=20 >> - 19.4.1: 1st sentence if missing a "T" - s/he/The/ >=20 > I will fix as suggested. >=20 > --- >=20 > Regards, >=20 > Christer >=20 --=20 PGP key change time for me. New-ID 7B172BEA; old-ID 805F8DA2 expires Jan 24 2018. NewWithOld sigs in keyservers. Sorry if that mucks something up;-) --------------FB8F40EBBA5D0F52B3AC56EA Content-Type: application/pgp-keys; name="0x7B172BEA.asc" Content-Transfer-Encoding: quoted-printable Content-Disposition: attachment; filename="0x7B172BEA.asc" -----BEGIN PGP PUBLIC KEY BLOCK----- mQINBFo9UDIBEADUH4ZPcUnX5WWRWO4kEkHea5Y5eEvZjSwe/YA+G0nrTuOU9nem CP5PMvmh5Cg8gBTyWyN4Z2+O25p9Tja5zUb+vPMWYvOtokRrp46yhFZOmiS5b6kT q0IqYzsEv5HI58S+QtaFq978CRa4xH9Gi9u4yzUmT03QNIGDXE37honcAM4MOEtE gvw4fVhVWJuyy3w//0F2tzKrEMjmL5VGuD/Q9+G/7abuXiYNNd9ZFjv4625AUWwy +pAh4EKzS1FE7BOZp9daMu9MUQmDqtZUbUv0Q+DnQAB/4tNncejJPz0p2z3MWCp5 iSwHiQvytYgatMp34a50l6CWqa13n6vY8VcPlIqOVz+7L+WiVfxLbeVqBwV+4uL9 to9zLF9IyUvl94lCxpscR2kgRgpM6A5LylRDkR6E0oudFnJgb097ZaNyuY1ETghV B5Uir1GCYChs8NUNumTHXiOkuzk+Gs4DAHx/a78YxBolKHi+esLH8r2k4LyM2lp5 FmBKjG7cGcpBGmWavACYEa7rwAadg4uBx9SHMV5i33vDXQUZcmW0vslQ2Is02NMK 7uB7E7HlVE1IM1zNkVTYYGkKreU8DVQu8qNOtPVE/CdaCJ/pbXoYeHz2B1Nvbl9t lyWxn5XiHzFPJleXc0ksb9SkJokAfwTSZzTxeQPER8la5lsEEPbU/cDTcwARAQAB tCFTdGVwaGVuIEZhcnJlbGwgPHN0ZXBoZW5AamVsbC5pZT6JAj0EEwEIACcFAlo9 UYwCGwMFCQmUJgAFCwkIBwIGFQgJCgsCBBYCAwECHgECF4AACgkQWrL68XsXK+qG CxAApYHWYgGOIL3G6/OpkejdAkQoCVQAK8LJUSf6vzwost4iVfxIKcKW/3RqKNKk rRl8beJ7j1CWXAz9+VXAOsE9+zNxXIDgGA7HlvJnhffl+qwibVgiHgUcJFhCSbBr sjC+1uULaTU8zYEyET//GOGPLF+X+degkE/sesh4zcEAjF7fGPnlncdCCH3tvPZZ sdTcjwOCRVonKsDgQzBTCMz/RPBfEFX44HZx4g1UQAcCA4xlucY8QkJEyCrSNGpG nvGK8DcGSmnstl1/a9fnlhpdFxieX3oY2phJ1WKkYTn6Advrek3UP71CKxpgtPmk d3iUUz/VZa0Cv6YxQXskspRDVEvdCMYSQBtJPQ4y2+5UxVR9GIQXenwYp9AP2niv Voh+ITsDWWeWnnvYMq07rSDjq0nGdj41MJkNX+Yb2PXVyXItcj5ybE3T2+y3pSBG FEZYJGuaL4NwtBJFMOdOtBmUOPbetS2971EL3Izxb7ibOZWDwexv+8R6SWYfP1wV N3p46RyBQuXqJV8ccE11m6vtZTGSYgnLUUFZMRQYH+0hwuYe0T3AA18xDdSYsa8v ovCCd3l5S4UNzIM2PMChqGrEzKapUpZg7+8ACcxRU3b9Ihd7WYjJ+pQPCoWYKozv tEvenbNpE/govO/ED3B14e+R2yevRPjRrsN7PJzSf15fQLuJARwEEAEIAAYFAlo9 UqAACgkQLzyHNoBfjaLrSwf+MIHbFRQ4O5cmLYR5sIByWelN3SuRN/gW8rpKo9Ok Cz6An8uV/iCXy5tNMLzzi0BFl8f22DwBcC5qy9qnlIAdogWam1qWoTAoAD8veEqm uKhYrqJsCcAyNrKYmK0hP3rpHxx1LySDmKYXmw/8qtBXKHTouMm+5tSsznhykRMT AAr2p7PSaHgo+hIVaW/rKSspHjDhhZS+G9mtOZad1IH29M6G1Q1NCO0Ywe8krKLQ IAQlFxtgvOqpPOZNzeKBa/+KbE8TGgMWrkOhC8OeEM5PVzdDhlhD9kPzB/pCKDF5 DofJ/ZRqnDpbKPQ0bsW38AOig3kOc0A27awiBEw3urqR1bQyU3RlcGhlbiBGYXJy ZWxsICgyMDE3KSA8c3RlcGhlbi5mYXJyZWxsQGNzLnRjZC5pZT6JAkAEEwEIACoC GwMFCQmUJgAFCwkIBwIGFQgJCgsCBBYCAwECHgECF4AFAlo+o3cCGQEACgkQWrL6 8XsXK+qO0A//ZsfQzyXrZlu/eEV5jU620yeOM3P7SW3C3UQYdCgZ/TlvxGgKow5o DSXgjMiUyq9csGqbPBxlDYSxFZHNeDVKYIuP2ZK24tw5k6duTh4+sFwUualTMlcp 0zBCIzn3hRcsRvuPKHfl5+6oOi0+xqx3jX/s/69L/fvHmdSKet5LIUAxoYaZkTCr uFrPWb01tgAl5JExWkhmCY98iD+EeiIMAWBjMw1xV+p0uCwNbN6XDzcToK7wsm+t AIiWUy3DpP60a6WbVwdV0HNt2WZq5U5Jdh2k4S+sN2CnYk4tTW7jHjsWarV3FLIS COObADZuB7ljU4kYfdwZ+WzenXY4LGlxGQSlAblGjwZe4EIkCXAJUtzJhoFUuGaF /PlWjxqV3UFRcgTERZTijguVyREre8GNERNgvDxZvuXssEjvz9X5JfcIZDIJpdzh LiEIj9noUbfx1SzB5KDPQj0O7elMHa1671/rwWcpGr/MfVPTOik4H7F8rcVJelce ZTzC4tvya7M+jM4fyFWWt8Y4atTixUiP7U9o4uBZCQ0GzvsmFA4XLqn2pA5rVizM XnGbGOjufAP/efEJ4ul3qvjYe8ye8DXEDjKAxo/tuHYtk19XCi83QzFhWls5TT+X QeVTMEvVqo9Wek8yoxo67qvLKKqIcG9givQd8MxYNAbNYgSPtkbhZ8SJARwEEAEI AAYFAlo9UqAACgkQLzyHNoBfjaLzHAgAlWT6NXEGtw/r1miKNGcopzvzILQ9oB8r KI9U9EL6tOf/y2V5oYee/GyQDb3ZdoPxxYYcJf+RyiH1nMoqUIZiZJaf3bJXinDZ 5+AdfE++UR2NBvqaNyC6u3r24jo1B/sagKbYtWgsYtRqHLD4IWi37MZrVyjBuF7u 14Q07+uhjq6mX2O/tHpCYw/Q82tbeTRPyUf1WQOAfD1kfBpW9PvAva5Iw9FWeXpC XRzwxnCZhYfGfqtuSw6CPBYLdbikqML6FZ7EDuTBb/8um1wK7Y9bgeIQC+CYjhYB 5RXa1tDJRab2Js4luCvSR0w/CgHw26293tlve2Q6UTrmHxP5U22DlrQuU3RlcGhl biBGYXJyZWxsIDxzdGVwaGVuQHRvbGVyYW50bmV0d29ya3MuY29tPokCPQQTAQgA JwUCWj1RWgIbAwUJCZQmAAULCQgHAgYVCAkKCwIEFgIDAQIeAQIXgAAKCRBasvrx excr6jscEADEcB0WQEZn2AkrzDs1RhL0Lp6cZi0BigofkbcGfdhJyMSs19C0dhvn crAFClVI6/Udw3yFtDyYtOCf2W3M3A1K6/RfEizCLzTsdFIhni9gOJLlUpXViQtg rlstjk7hqVV3Ooz4BlCqS4cG7rfqf4LQQPpTAuFUEV9I28FBUB2irqC+v4gTysIg pMw0bA1yBU9sX5jE/tRkzqnuzZrkwiobDtRFJ9qp+7O2JtcY4EsVtLAsaodJKc5c F8R4OvB1n66vxxcgg9Eh4JNWZ47xsaCmAGo1Bcb2jIY35OtgAL7gCGLRSMKTtAaP y1/fEgIqhCljJ9x40Fkn/3r2BX21WC9HFSPFTBz2RluLRzxdgxOrkYK8EiHUPoE5 b1AEzZKw2AbeXfr57f5zYsN3IqfbQLUjMYtUN1wK3Pjb+idD972wyXMWt8uOzlI7 b9Ocu+nYm2whBfJv9Pmp3QYTmPz+LB9lH65VNVUSxSXVr5iWXO3qx1HtEiGEqkpo rMQCTh3T5Ud3PvMSRBFFKNs9WhJ/Lxz+SV30WLwG6dr5mQqlzAhb4Phc/zekZyXR dS/oDKrBLUucS36O//49JeyRi1QvOfxnfmIqRIAf/k3PoYJmTo5E82//r5Qj3YGl Ru78ba0HArxs+ACD6AnEHHcbswpbtVEKYzlSu0Ar0Dc7vRWM/IyQdIkBHAQQAQgA BgUCWj1SoAAKCRAvPIc2gF+NosIsB/9f/29FNla3BJfGIEIDnhrqGD0i9bSa89Sq Bd++uG06TQgW5wsqtNcrwn81yZTq6XE6i9VtD4GKfqC0d4KZJr9bnbeD81cI64VO dL8zJWJs0vj5EIXCobKyX74Kb4uePUyZqwT2Q74I116u/HwA9/FXsPo5isbh4ZqD 4t0VHpWkmfq1FPT9a/JPyX46qKqB2Fce/7Qy+SQP1NfkuUlbhUH/JG9aSSYvk3lz nNiH41x9M+FDlL106itXOubrl3oi2fT3fsSedq7uzt+IV0DQEeNaoQAUuwEhdB8I WOMqN2woDjGVKJftfsSWY9ilZrnDBNDrp0vRqcx33LUMkIw4d7iBuQINBFo9UDIB EAD6DdHQfMav8OXfhjTteoarOrlJTSdci727xiezGPuBHmpvceBRZgRasdbaMc4H Jee+R9+5x/nLPCuy/DxDyIjwIUeJNgc+l7LjI9WfpHTD8U4xxjvR5Mi7+ToQQUOU NuzT0O0pyuxP1uY3RehHEhOVfBZO59ipSeZL5iQC6T5MsK1SKfs51pLa5ToC1rc8 tBJ4zZmxRAyZiYc/AH2uZ/6rYjTTkAn1DVI9DYo2D/zE4bGjXdJW5pKphFB2lX3d G4I7ODi+5e1H6A/QpCu6z8/ZkIQ+9T1xcX/YwiFeA7PbTuW/eITbMbI1eV3+fyym 9aT7Rsflmp31Zxtr+sZwGGZf00ooMBFmqOS//NUQ/Vf3vDUew1h5QU1yDaWT3NAp vi+XWPH9TPy6TMfZA2FThHf11sX/gDBa5JWQZbptPEcmoazpiKZt91CrFPOaoXDP ck/Q61dfmr/oPikfByYnASIM3OwEuXqyQ9JDRfKrem5r+oA/wxWb5jELElAhOpny qMMvOh7uz1foUssL8MAv2TGXmxpVJ8Nu4je6wf96Z22fQ0D38zud+CKH3bMP3ayX XJBcdPoENrzFbWP5FTg/4TTDJ3vOAHZR5iCunYghx8b7Ffa4UbkwlD+dh8GiIAtv T51Ac0cO0Wc0Zjc57zPUz1zloMbf+zb1Bsn7DuEQoqj1gwARAQABiQIlBBgBCAAP BQJaPVAyAhsMBQkJlCYAAAoJEFqy+vF7FyvqrC8P/1tF6TeR83xD6MasqXyrBjwc LmziaF0Mlkj8k/YUiZ/knb53n97xQnh9yxPv0TT8Wpfdn3BmvqGyh8+ouHX9jMOx iRkMdNhIauVYY/8jmRfBSYWcFkfMzdYasvdLtmYJgx252HKTFdeOrszoOjWjEzwm h+tca3AFMu/nB++/KAmi5UJV7zsZ7uYJ5jm97LV5SLjNJIXXM+lHqCDrjDaDhNcz mq1LCRlU6/WDjvkuwaVhZG4lXxMDrvKnXMkjseQ2oKjwrIdfQM86H1z5J31lfhqo p+of0cimcIsBgSCPu+h96LHuAzeRBCbDKeqrfZtAZAGsokRina9947fRWxXHh3O6 6ILmXKNRxxWbDkPvYnQWUat8SbSTDoPWrDIGDRIAypqYo3pcN2OE0C1chqgDZQxk r+9kYZQpupOAN2TR+fM7JvbO9coKI8Uqog8CopoMeDQkd0YjcqlB1E0svODHTzcS oRzogDBYDqNLP7qVkNXpcOAXSVioBgiSDf7o5RdS/qmUyXBIeq6I5z8xBcd+BQ/n /9Frkm6K7IKP3ngUP4wEoiPx5ZE5+fPIScGmVUcZIMhkvMvem9XXh1yyhqN14gfj mLwPGdWbrgG8QUe0s2WeWIyss6uTiyF+ZbJSo2XOKVc3YFMVUUfgyudqAV1wWdZi nUk+H3pkqOKoHAy/8fST =3Dg8yx -----END PGP PUBLIC KEY BLOCK----- --------------FB8F40EBBA5D0F52B3AC56EA-- --YTrqgvD2chIL0rRga9MPRa2TrVNsMa1hn-- --ZbqazTyWcpZvcqsfpx3erplxS9izLcC5b Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQIcBAEBCAAGBQJacFRzAAoJEFqy+vF7FyvqkZgP/02RywEIyZ0Wde78RS30PH0J TeRfU6KmUv3VXID5hgZ5U5/LYl1hX/7WWLKrszLJpv/1xF6HJFzYBtBT+vXIzLJG h6rqPQK3U8/EJM45FhqPzGRQrm5zKV7n4z11/GDA7c72dWJ2dD4KdPSxr6FvZPJl jI3lgby0Qqb+GPGsOJNvD2g9RMwCjzMImTavHVZ+a/9tuMr6ZVw4UT5zILsuYhPG CTYl3Wj+WCto5RuIyCh//u6lNhBSsxCO9ojGjS6wBcrdDr5rwJm8RGHJ0w/YoOII 1/WN7exIXaUt0O+USGG95vfrItvvxfDcMbFk7FgU7VGC12tyLzNg8ygfknSWmL1T OWYBshCgKqZGvILbc5Vq1J3hr7wbPoLTzMR/HFzgrwQ/vTpktuHpkjIhSbBGl/ZF XvbraO0nhiOjE/RTUQPJhECf7FMfqzfsxXe7dgoN0TSod9ENjONa5cnzWEWfhBgY pvPzuFwLYBSLl1nDpkSPSNaePfg0a7T67xH+3zSWwCUEo38oshqVxr3iXqpE2mEB TyZ/wCoP23YlQDfhHq4TdWEv7q9EStJjB0ImAo/u79MW49ncJ6NESbiNyyo10Udv 2m7ImXKrwn+umiaNSzXToJjeue69VKqtP9DSUCXb+OS6GddbWj6OmtzvlY0BMDSP feU5cnpCnF+3VTziIZFZ =bnFc -----END PGP SIGNATURE----- --ZbqazTyWcpZvcqsfpx3erplxS9izLcC5b-- From nobody Tue Jan 30 05:54:42 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4D19012EB5D; Tue, 30 Jan 2018 05:54:29 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.22 X-Spam-Level: X-Spam-Status: No, score=-4.22 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5zS6nw8ievF5; Tue, 30 Jan 2018 05:54:26 -0800 (PST) Received: from sessmg23.ericsson.net (sessmg23.ericsson.net [193.180.251.45]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AFDCF13182F; Tue, 30 Jan 2018 05:53:50 -0800 (PST) X-AuditID: c1b4fb2d-b35ff70000007932-f8-5a7078ec9e76 Received: from ESESSHC014.ericsson.se (Unknown_Domain [153.88.183.60]) by sessmg23.ericsson.net (Symantec Mail Security) with SMTP id 7D.BD.31026.CE8707A5; Tue, 30 Jan 2018 14:53:49 +0100 (CET) Received: from ESESSMB109.ericsson.se ([169.254.9.195]) by ESESSHC014.ericsson.se ([153.88.183.60]) with mapi id 14.03.0352.000; Tue, 30 Jan 2018 14:53:48 +0100 From: Christer Holmberg To: Stephen Farrell , "secdir@ietf.org" CC: "draft-ietf-ice-rfc5245bis.all@ietf.org" , "ietf@ietf.org" , "ice@ietf.org" Thread-Topic: Secdir last call review of draft-ietf-ice-rfc5245bis-16 Thread-Index: AQHTlsWSdlXqvNmVDEWzQ6CHG1vNgKOG2QlggAVgroCAAFA6gA== Date: Tue, 30 Jan 2018 13:53:47 +0000 Message-ID: References: <151698534014.492.17944720668568287169@ietfa.amsl.com> <7594FB04B1934943A5C02806D1A2204B6C143E76@ESESSMB109.ericsson.se> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.7.7.170905 x-originating-ip: [153.88.183.17] Content-Type: text/plain; charset="iso-8859-1" Content-ID: <87D58AC9560843479E1B9C991A846F46@ericsson.com> Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFlrDIsWRmVeSWpSXmKPExsUyM2K7je7bioIogyP3mS2O//jDbvHtQq3F s43zWSw+LHzIYjF97zV2B1aPtd1X2TyWLPnJFMAUxWWTkpqTWZZapG+XwJXRtOECe8Gegoo3 E5YyNzDOiOpi5OSQEDCRmPm8mQnEFhI4zChx5XpoFyMXkL2EUWL7xk+sXYwcHGwCFhLd/7RB akQEwiTuvz/EClLDLDCTUeL1z5eMIAlhAReJV4//MEEUuUqs3PSDCaRXRMBJ4ssCH5Awi4Cq xPL139hBbF4Ba4m7vXsZIXbtZJTYObGBEaSeU8BW4uovI5AaRgExie+n1oCNZBYQl7j1ZD4T xM0CEkv2nGeGsEUlXj7+xwpiiwroSWw4cZsdZIyEgKLE8n45iFY9iRtTp7BB2NYS11fuZIGw tSWWLXzNDHGOoMTJmU9YJjCKz0KybRaS9llI2mchaZ+FpH0BI+sqRtHi1OLi3HQjY73Uoszk 4uL8PL281JJNjMA4PLjlt+4OxtWvHQ8xCnAwKvHwXswuiBJiTSwrrsw9xCjBwawkwiuyOj9K iDclsbIqtSg/vqg0J7X4EKM0B4uSOO9JT94oIYH0xJLU7NTUgtQimCwTB6dUA6PWRLPb9hs4 0svbS5eXGB2eudNdmFE1eaUtb9+ml8bHWev5nsTwHti/azvDNt9ZjHK2Nw1lfuQm7o1hFmN3 uCU0/cij3JzHsp5B+ou2Je85/uqbhyj7kdj1DbJv3VP2BSZc5FpqZLrJQmfXvaiKvMkvW9VE F2y4Fiac2lMRalK882wTr7y4uhJLcUaioRZzUXEiANOUv/6/AgAA Archived-At: Subject: Re: [secdir] Secdir last call review of draft-ietf-ice-rfc5245bis-16 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 30 Jan 2018 13:54:30 -0000 Hi, >>>Reviewer: Stephen Farrell Review result: Has Issues >>>=20 >>> (1) I think a bit more work on the security and privacy issues >>> around ICE would improve >the document, and hopefully, ICE >>> implementations. >>>=20 >>> - There has been (IMO somewhat justified) concern [1] about >>> exposing all possible >addresses, for example where one is from a >>> VPN intended to preserve privacy, say if a >user is aiming to >>> circumvent local censorship or surveillance. 5.1.1.1 has a SHOULD >>> that, >as I read it, says to always include such addresses. >>>=20 >>> [1] https://www.w3.org/wiki/Privacy/IPAddresses >>>=20 >>> (Note: I'm not claiming [1] is authoritative, it's just a page I >>> found that describes the issue reasonably well.) >>>=20 >>> There is a bit of text about this (1st para in section 19), but IMO >>> it's a bit weak. >>>=20 >>> - Did the WG consider REQUIRING or RECOMMENDING agent >>> implementations provide some local interface that allows the host >>> or an application to say "Don't use interface to generate >>> any candidates until I tell you otherwise"? That might be better >>> than having VPN operators recommending to turn off WebRTC entirely >>> for example. (Note: this is my main comment, the rest are mostly >>> suggested things to think about, if you've not already.) >>>=20 >>> - Even if the text isn't changed, a reference to [2] would I think >>> be useful. (Assuming [2] is still being worked on in rtcweb, though >>> mind you, I don't like how [2] refers to "consent" as I doubt a >>> random person can really provide meaningful consent for things like >>> this.) >>>=20 >>> [2] https://tools.ietf.org/html/draft-ietf-rtcweb-ip-handling-04 >>=20 >> I would not want to REQUIRE implementing a local interface for >> controlling the candidates, as ICE is also used by different types of >> network entities (gateways etc). But, I am ok to RECOMMEND. > >Fair enough. > >>=20 >> What about: >>=20 >> OLD: >>=20 >> "Individual implementations may also have implementation-specific >> rules for controlling which addresses are revealed." >>=20 >> NEW: >>=20 >> "Individual implementations may also have implementation-specific >> rules for controlling which addresses are revealed. It is RECOMMENDED >> that applications interacting with human users provide a user >> interfaces that allows the users to control which interfaces are used >> to generate candidates, or when to use candidates generated for the >> interfaces. >>=20 >> [REF-to- draft-ietf-rtcweb-ip-handling] provide additional >> information and Requirements regarding the handing of IP addresses >> for WebRTC applications." > >That's a fine improvement from my POV, esp if folks will >really provide such interfaces. I'm not sure "interacting >with humans" is quite right though, maybe it'd be better >to add a reference to the problem (via [1] or [rtcweb-ip]) >and to then say "Implementations where such issues can >arise are RECOMMENDED to..." I'd also suggest maybe >s/user interface/interface/ there, as e.g. a VPN client >might want to use an API provided by an ICE implementation >so the UI might be part of the VPN client and not the ICE >implementation. So, overall I'd suggest something like >this: > >"Individual implementations may also have implementation-specific >rules for controlling which addresses are revealed. For example, >[REF-to- draft-ietf-rtcweb-ip-handling] provides additional >information about the privacy aspects of revealing IP addresses >via ICE for WebRTC applications. ICE implementations where such >issues can arise are RECOMMENDED to provide a programmatic or >user interface that provides control over which network interfaces >are used to generate candidates." Looks good :) --- >>=20 >>> - Separately [1] also describes another potential privacy issue >>> with STUN urls. I think it'd be worthwhile noting such issues that >>> have been found with deployments of ICE here, as any protocol using >>> ICE and accepting non locally configured STUN/TURN URLs may have >>> issues like that. For example, a recent paper [3] also describes >>> some attacks (in section 4.2 mostly) that could (I guess) be >>> mounted against any ICE agent and not only WebRTC clients. That'd >>> be worth a reference and maybe thinking about which attacks are >>> generic ICE issues and don't only affect WebRTC. >>>=20 >>> [3] https://doi.org/10.1145/3019612.3019844 >>=20 >> I am struggling to figure out exactly what to do here... I really >> hope we don't have to perfom a study on [3], and see what is general, >> and what is WebRTC-specific. Are we even allowed to reference [3], as >> it's not freely available? > >Sure, we can reference academic papers behind paywalls, and >there's often another version available that's not. (Not sure >in this case.) > >>=20 >> Some help and guidance would be appreciated :) > >I guess about as much as can be done with this -bis effort is >to note where any leakages have been found. There's been some >recent traffic on the W3C WebRTC list about that I think, (in >the thread about CSP iirc) so maybe a trawl of that thread >will suggest some text? I did follow that discussion. I will take a second look. --- >>>- I also wondered if I can fingerprint a host based on how it does >>> ICE? I suspect that might work, but haven't tried to figure out >>> details. >>>=20 >>> - Could I probe an internal network based on feeding it candidates >>> to check? E.g. checking timing of reactions. If I could that seems >>> noteworthy. >>=20 >> Something like? >>=20 >> "Based on the types of candidates provided by the peer, and the >> results of the connectivity tests performed Against those candidates, >> an agent might be able to determine characteristics of the peer >> network." > >Maybe: > >"Based on the types of candidates provided by the peer, and the >results of the connectivity tests performed against those candidates, >the peer might be able to determine characteristics of the local >network, e.g. if different timings are apparent to the peer. In >the limit the peer might be able to probe the local network." > >That said - I'm not claiming this is possible for-sure, I just >bet it would be:-) The text looks good. --- >>>(2) 5.3: "...MUST contain ... bits of randomness" Don't you >>> need to say when these values MUST be different and when they're ok >>> to be re-used? I forget if STUN/TURN do that. >>=20 >> Section 7.2.2 says: >>=20 >> "A connectivity check Binding request MUST utilize the STUN >> short-term credential mechanism." >>=20 >> RFC 5389 (STUN) says: >>=20 >> "Short-Term Credential: A temporary username and associated >> password that represent a shared secret between client and server. >> Short- term credentials are obtained through some kind of protocol >> mechanism between the client and server, preceding the STUN exchange. >> A short-term credential has an explicit temporal scope, which may be >> based on a specific amount of time (such as 5 minutes) or on an event >> (such as termination of a SIP dialog). The specific scope of a >> short-term credential is defined by the application usage." >>=20 >> If anything extra is needed, I think that should be done as an update >> to STUN. > >Not sure I agree - maybe I wasn't clear in my comment though, >so let me try rephrase it. > >STUN doesn't define the duration for which short-term creds >are OK to be used. ICE does define a session concept therefore >ICE ought to say if short term STUN creds MUST/MUST-NOT/MAY >(or whatever) be re-used in different ICE sessions. Even >within an ICE session I guess in theory one could require >different short-term STUN credentials every single time, or >not. So I do think there's something to be said here. Section 9 says that an agent must create a new username fragment and password for every new ICE session: "To restart ICE, an agent MUST change both the password and the username fragment for the data stream(s) being restarted.=B2 Since I also uses the username to identity the ICE session, the values cannot be changed within a session. There is no text on when a value can be re-used - apart from the fact that they cannot be re-used when an ICE restart takes place. My assumption has been that the randomness criteria are assumed to ensure that two agents don=B9t choose the same values for the same session, and that values are unlikely to be re-used within a short period of time. We could say that agents shall verify that the same value is not re-used as long as packets from a previous ICE session may still be present in the network. But, that is not really security related, but more to make sure ICE works. --- >>=20 >>> (Also - the phrasing isn't that great - how do I "contain" >>> randomness? But that's just a nit.) >>=20 >> Do you have a suggestion for a better word? > >I think what you want is to say "unguessable, with at >least 128 bits of random number generator output used >to generate each" or something like that? It's a hard >one to get right, but even what you have isn't that >bad (I did say this was a nit:-) What about? "Username Fragment and Password: Values used to perform connectivity checks. The values MUST be unguessable, with at least 128 bits of random=20 number generator output used to generate the password, and at least 24=20 bits output to generate the username fragment." Thanks! :) Regards, Christer >>=20 >> =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D >>=20 >> Nits: >>=20 >>> I took a look at the diff [4] between this and 5245, but that >>> wasn't really that useful, so this review is based on a read of the >>> draft without comparing it to 5245. Apologies if that causes me to >>> comment on text that's unchanged - in such cases, I think it's fine >>> to not heed those particular comments. >>>=20 >>> [4] >>>=20 >>>https://tools.ietf.org/rfcdiff?url1=3Drfc5245&url2=3Ddraft-ietf-ice-rfc5= 245b >>>is-16.txt >>> >>> >>>=20 >- 2.1: Why "only UDP specified here"? Does that include QUIC which is >>> UDP-based, but not UDP? I assume so. >>=20 >> There is a separate specification, RFC 6544, for TCP based >> candidates. >>=20 >> Regarding QUIC, I don't know. QUIC wasn't discussed during the work, >> but how/if the procedures also apply to QUIC without any >> modifications etc I don't know. >>=20 >>> - 2.3: how the controlling/controlled stuff works isn't clear from >>> this, nor even (as I was reading it) in section 7.3.1.1 - I wasn't >>> clear how the tie-breaker value is initialised until I got to >>> 16.1. In any case I think a bit more explanatory text in 2.3 might >>> be good. (But if implementers haven't had a problem with this, >>> maybe it's just me.) >>=20 >> In general, one of the tasks of the bis work was to *simplify* >> section 2, because the previous version was too detailed for >> non-implementers who just want to figure out what ICE is all about >> (in order to actually implement ICE, reading section 2 is obviously >> not enough). For that reason, my opinion was that section 2 doesn't >> really need to talk about role conflicts and tie-breaker values, as >> it's not essential for a high-level description of ICE. >>=20 >> --- >>=20 >>> - 5.2: "The procedures in this section is common across the >>> initiating and responding agents." s/is/are/ I guess? >>=20 >> Yes. I will fix as suggested. >>=20 >> --- >>=20 >>> - 6.1.1: What is "3PCC"? That note could maybe also do with a >>> reference, as I at least don't get what you're trying to tell me. >>> Ah - it's 3rd party call control (mentioned in 7.3.1.1). >>=20 >> I can use "3PCC (3rd Party Call Control)" in section 6.1.1. >>=20 >> As the spec is protocol independent, I don't think there are any >> references that can be added. >>=20 >> --- >>=20 >>> - 16.1: For a given ICE session, are the random numbers in the >>> ICE-CONTROLLED and ICE-CONTROLLING attributes sent by the same >>> agent supposed to have the same value? I wasn't clear. If they are >>> the same, I understand how tie-breaking happens. If they can >>> differ, I'm not sure. (But I didn't go back and re-read 7.3.1.1, so >>> it may be ok either way:-) >>=20 >> It is covered in the 2nd paragraph of section 7.2.5.1, which says >> that the agent MAY change the value when it switches role. >>=20 >>> In any case saying "referred to as the tie-breaker value" twice >>> seems odd. >>=20 >> I'll remove it from the ICE-CONTROLLING definition. >>=20 >> --- >>=20 >>> - 16.1: (mega-mega-nit:-) the fact that tie-breaker is split over >>> a line-breaker here is why I didn't find this when I was reading >>> 2.3/7.3.1.1 - maybe tweak the words so a grep will find it?) >>=20 >> Good catch. I'll fix it. >>=20 >> It would be really cool if search functions could discard line-breaks >> when searching for strings. >>=20 >> --- >>=20 >>> - 17: "looking to deploy ICE" is a bit confusing - do you mean >>> "looking to be nice to ICE"? My assumption is that endpoints deploy >>> ICE agents but network operators don't, though they might deploy >>> STUN/TURN servers I guess. But maybe I'm thinking too much about >>> WebRTC there. >>=20 >> Perhaps something like: >>=20 >> "This section discusses issues relevant to operators operating >> networks where ICE will be used by endpoints." >>=20 >> --- >>=20 >>> - 18: I wondered if this is still needed, given that 5245 already >>> said it (I didn't check if the text has been updated). Saying this >>> once would seem sufficient to me anyway. I guess leaving it in is >>> the easier path. >>=20 >> I'll leave it :) >>=20 >> --- >>=20 >>> - 19: s/DNS-SEC/DNSSEC/ would be more common >>=20 >> I will fix as suggested. >>=20 >> --- >>=20 >>> - 19.4.1: 1st sentence if missing a "T" - s/he/The/ >>=20 >> I will fix as suggested. >>=20 >> --- >>=20 >> Regards, >>=20 >> Christer >>=20 > >--=20 >PGP key change time for me. >New-ID 7B172BEA; old-ID 805F8DA2 expires Jan 24 2018. >NewWithOld sigs in keyservers. >Sorry if that mucks something up;-) From nobody Tue Jan 30 06:35:46 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 10C6112EB44; Tue, 30 Jan 2018 06:35:40 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.31 X-Spam-Level: X-Spam-Status: No, score=-4.31 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cs.tcd.ie Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HIviab6gemY2; Tue, 30 Jan 2018 06:35:34 -0800 (PST) Received: from mercury.scss.tcd.ie (mercury.scss.tcd.ie [134.226.56.6]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A0B271319FD; Tue, 30 Jan 2018 06:32:32 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by mercury.scss.tcd.ie (Postfix) with ESMTP id D379CBE73; Tue, 30 Jan 2018 14:32:30 +0000 (GMT) Received: from mercury.scss.tcd.ie ([127.0.0.1]) by localhost (mercury.scss.tcd.ie [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tT82PKJiB-ZJ; Tue, 30 Jan 2018 14:32:30 +0000 (GMT) Received: from [134.226.36.93] (bilbo.dsg.cs.tcd.ie [134.226.36.93]) by mercury.scss.tcd.ie (Postfix) with ESMTPSA id 90F15BE6F; Tue, 30 Jan 2018 14:32:30 +0000 (GMT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cs.tcd.ie; s=mail; t=1517322750; bh=j4kt6ZBz6ItCQrD5uukl5BDZKBFRepcC0nHbydLKN5o=; h=Subject:To:Cc:References:From:Date:In-Reply-To:From; b=SN6TMmmeIyzeaSbytXL2oKhQA+uFLqFHnay59X1/xLIQ3QZ3bkENgkUW2C3Rk/j/U qD1FL/H4dUvK3Vx4tAoHq9zikEUQL8l+E2Evs7wLU+a7acbzI+I3w7ld8OblD73aEt 83H3bqV8UfpzsPIjkWSd1PoCq+PIR3Tv4K9wGVds= To: Christer Holmberg , "secdir@ietf.org" Cc: "draft-ietf-ice-rfc5245bis.all@ietf.org" , "ietf@ietf.org" , "ice@ietf.org" References: <151698534014.492.17944720668568287169@ietfa.amsl.com> <7594FB04B1934943A5C02806D1A2204B6C143E76@ESESSMB109.ericsson.se> From: Stephen Farrell Openpgp: id=5BB5A6EA5765D2C5863CAE275AB2FAF17B172BEA; url= Message-ID: Date: Tue, 30 Jan 2018 14:32:29 +0000 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.6.0 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="2yGQSXqGz4gH2bxKFLs0nYL2G7TYBYpw8" Archived-At: Subject: Re: [secdir] Secdir last call review of draft-ietf-ice-rfc5245bis-16 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 30 Jan 2018 14:35:40 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --2yGQSXqGz4gH2bxKFLs0nYL2G7TYBYpw8 Content-Type: multipart/mixed; boundary="z4EfMfxgBGtJ1H2NIPrsYnaxmy6uooEGe"; protected-headers="v1" From: Stephen Farrell To: Christer Holmberg , "secdir@ietf.org" Cc: "draft-ietf-ice-rfc5245bis.all@ietf.org" , "ietf@ietf.org" , "ice@ietf.org" Message-ID: Subject: Re: Secdir last call review of draft-ietf-ice-rfc5245bis-16 References: <151698534014.492.17944720668568287169@ietfa.amsl.com> <7594FB04B1934943A5C02806D1A2204B6C143E76@ESESSMB109.ericsson.se> In-Reply-To: --z4EfMfxgBGtJ1H2NIPrsYnaxmy6uooEGe Content-Type: multipart/mixed; boundary="------------335A015E9235FE76353BBBAB" Content-Language: en-GB This is a multi-part message in MIME format. --------------335A015E9235FE76353BBBAB Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hiya, Those look close-enough or fine to me. For the recent WebRTC thread, if you find something, that'll be a good thing. If not, and nobody suggests some text, then I guess at least we did try:-) And FWIW I'm fine with that, as I'm not up to speed on non-WebRTC uses of ICE, so don't know if the same leakage issues can arise in reality, outside of WebRTC. Thanks, S. On 30/01/18 13:53, Christer Holmberg wrote: > Hi, >=20 >>>> Reviewer: Stephen Farrell Review result: Has Issues >>>> >>>> (1) I think a bit more work on the security and privacy issues >>>> around ICE would improve >the document, and hopefully, ICE >>>> implementations. >>>> >>>> - There has been (IMO somewhat justified) concern [1] about >>>> exposing all possible >addresses, for example where one is from a >>>> VPN intended to preserve privacy, say if a >user is aiming to >>>> circumvent local censorship or surveillance. 5.1.1.1 has a SHOULD >>>> that, >as I read it, says to always include such addresses. >>>> >>>> [1] https://www.w3.org/wiki/Privacy/IPAddresses >>>> >>>> (Note: I'm not claiming [1] is authoritative, it's just a page I >>>> found that describes the issue reasonably well.) >>>> >>>> There is a bit of text about this (1st para in section 19), but IMO >>>> it's a bit weak. >>>> >>>> - Did the WG consider REQUIRING or RECOMMENDING agent >>>> implementations provide some local interface that allows the host >>>> or an application to say "Don't use interface to generate >>>> any candidates until I tell you otherwise"? That might be better >>>> than having VPN operators recommending to turn off WebRTC entirely >>>> for example. (Note: this is my main comment, the rest are mostly >>>> suggested things to think about, if you've not already.) >>>> >>>> - Even if the text isn't changed, a reference to [2] would I think >>>> be useful. (Assuming [2] is still being worked on in rtcweb, though >>>> mind you, I don't like how [2] refers to "consent" as I doubt a >>>> random person can really provide meaningful consent for things like >>>> this.) >>>> >>>> [2] https://tools.ietf.org/html/draft-ietf-rtcweb-ip-handling-04 >>> >>> I would not want to REQUIRE implementing a local interface for >>> controlling the candidates, as ICE is also used by different types of= >>> network entities (gateways etc). But, I am ok to RECOMMEND. >> >> Fair enough. >> >>> >>> What about: >>> >>> OLD: >>> >>> "Individual implementations may also have implementation-specific >>> rules for controlling which addresses are revealed." >>> >>> NEW: >>> >>> "Individual implementations may also have implementation-specific >>> rules for controlling which addresses are revealed. It is RECOMMENDED= >>> that applications interacting with human users provide a user >>> interfaces that allows the users to control which interfaces are used= >>> to generate candidates, or when to use candidates generated for the >>> interfaces. >>> >>> [REF-to- draft-ietf-rtcweb-ip-handling] provide additional >>> information and Requirements regarding the handing of IP addresses >>> for WebRTC applications." >> >> That's a fine improvement from my POV, esp if folks will >> really provide such interfaces. I'm not sure "interacting >> with humans" is quite right though, maybe it'd be better >> to add a reference to the problem (via [1] or [rtcweb-ip]) >> and to then say "Implementations where such issues can >> arise are RECOMMENDED to..." I'd also suggest maybe >> s/user interface/interface/ there, as e.g. a VPN client >> might want to use an API provided by an ICE implementation >> so the UI might be part of the VPN client and not the ICE >> implementation. So, overall I'd suggest something like >> this: >> >> "Individual implementations may also have implementation-specific >> rules for controlling which addresses are revealed. For example, >> [REF-to- draft-ietf-rtcweb-ip-handling] provides additional >> information about the privacy aspects of revealing IP addresses >> via ICE for WebRTC applications. ICE implementations where such >> issues can arise are RECOMMENDED to provide a programmatic or >> user interface that provides control over which network interfaces >> are used to generate candidates." >=20 > Looks good :) >=20 > --- >=20 >>> >>>> - Separately [1] also describes another potential privacy issue >>>> with STUN urls. I think it'd be worthwhile noting such issues that >>>> have been found with deployments of ICE here, as any protocol using >>>> ICE and accepting non locally configured STUN/TURN URLs may have >>>> issues like that. For example, a recent paper [3] also describes >>>> some attacks (in section 4.2 mostly) that could (I guess) be >>>> mounted against any ICE agent and not only WebRTC clients. That'd >>>> be worth a reference and maybe thinking about which attacks are >>>> generic ICE issues and don't only affect WebRTC. >>>> >>>> [3] https://doi.org/10.1145/3019612.3019844 >>> >>> I am struggling to figure out exactly what to do here... I really >>> hope we don't have to perfom a study on [3], and see what is general,= >>> and what is WebRTC-specific. Are we even allowed to reference [3], as= >>> it's not freely available? >> >> Sure, we can reference academic papers behind paywalls, and >> there's often another version available that's not. (Not sure >> in this case.) >> >>> >>> Some help and guidance would be appreciated :) >> >> I guess about as much as can be done with this -bis effort is >> to note where any leakages have been found. There's been some >> recent traffic on the W3C WebRTC list about that I think, (in >> the thread about CSP iirc) so maybe a trawl of that thread >> will suggest some text? >=20 > I did follow that discussion. I will take a second look. >=20 > --- >=20 >>>> - I also wondered if I can fingerprint a host based on how it does >>>> ICE? I suspect that might work, but haven't tried to figure out >>>> details. >>>> >>>> - Could I probe an internal network based on feeding it candidates >>>> to check? E.g. checking timing of reactions. If I could that seems >>>> noteworthy. >>> >>> Something like? >>> >>> "Based on the types of candidates provided by the peer, and the >>> results of the connectivity tests performed Against those candidates,= >>> an agent might be able to determine characteristics of the peer >>> network." >> >> Maybe: >> >> "Based on the types of candidates provided by the peer, and the >> results of the connectivity tests performed against those candidates, >> the peer might be able to determine characteristics of the local >> network, e.g. if different timings are apparent to the peer. In >> the limit the peer might be able to probe the local network." >> >> That said - I'm not claiming this is possible for-sure, I just >> bet it would be:-) >=20 > The text looks good. >=20 > --- >=20 >>>> (2) 5.3: "...MUST contain ... bits of randomness" Don't you >>>> need to say when these values MUST be different and when they're ok >>>> to be re-used? I forget if STUN/TURN do that. >>> >>> Section 7.2.2 says: >>> >>> "A connectivity check Binding request MUST utilize the STUN >>> short-term credential mechanism." >>> >>> RFC 5389 (STUN) says: >>> >>> "Short-Term Credential: A temporary username and associated >>> password that represent a shared secret between client and server. >>> Short- term credentials are obtained through some kind of protocol >>> mechanism between the client and server, preceding the STUN exchange.= >>> A short-term credential has an explicit temporal scope, which may be >>> based on a specific amount of time (such as 5 minutes) or on an event= >>> (such as termination of a SIP dialog). The specific scope of a >>> short-term credential is defined by the application usage." >>> >>> If anything extra is needed, I think that should be done as an update= >>> to STUN. >> >> Not sure I agree - maybe I wasn't clear in my comment though, >> so let me try rephrase it. >> >> STUN doesn't define the duration for which short-term creds >> are OK to be used. ICE does define a session concept therefore >> ICE ought to say if short term STUN creds MUST/MUST-NOT/MAY >> (or whatever) be re-used in different ICE sessions. Even >> within an ICE session I guess in theory one could require >> different short-term STUN credentials every single time, or >> not. So I do think there's something to be said here. >=20 > Section 9 says that an agent must create a new username fragment and > password for every new ICE session: >=20 > "To restart ICE, an agent MUST change both the password and the > username fragment for the data stream(s) being restarted.=C2=B2 >=20 >=20 > Since I also uses the username to identity the ICE session, the values > cannot be changed within a session. >=20 > There is no text on when a value can be re-used - apart from the fact t= hat > they cannot be re-used when an ICE restart takes place. >=20 > My assumption has been that the randomness criteria are assumed to ensu= re > that two agents don=C2=B9t choose the same values for the same session,= and > that values are unlikely to be re-used within a short period of time. >=20 > We could say that agents shall verify that the same value is not re-use= d > as long as packets from a previous ICE session may still be present in = the > network. But, that is not really security related, but more to make sur= e > ICE works. >=20 > --- >=20 >>> >>>> (Also - the phrasing isn't that great - how do I "contain" >>>> randomness? But that's just a nit.) >>> >>> Do you have a suggestion for a better word? >> >> I think what you want is to say "unguessable, with at >> least 128 bits of random number generator output used >> to generate each" or something like that? It's a hard >> one to get right, but even what you have isn't that >> bad (I did say this was a nit:-) >=20 > What about? >=20 > "Username Fragment and Password: Values used to perform connectiv= ity > checks. The values MUST be unguessable, with at least 128 bits of= > random=20 > number generator output used to generate the password, and at lea= st > 24=20 > bits output to generate the username fragment." >=20 >=20 > Thanks! :) >=20 > Regards, >=20 > Christer >=20 >=20 >>> >>> =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D >>> >>> Nits: >>> >>>> I took a look at the diff [4] between this and 5245, but that >>>> wasn't really that useful, so this review is based on a read of the >>>> draft without comparing it to 5245. Apologies if that causes me to >>>> comment on text that's unchanged - in such cases, I think it's fine >>>> to not heed those particular comments. >>>> >>>> [4] >>>> >>>> https://tools.ietf.org/rfcdiff?url1=3Drfc5245&url2=3Ddraft-ietf-ice-= rfc5245b >>>> is-16.txt >>>> >>>> >>>> >> - 2.1: Why "only UDP specified here"? Does that include QUIC which is >>>> UDP-based, but not UDP? I assume so. >>> >>> There is a separate specification, RFC 6544, for TCP based >>> candidates. >>> >>> Regarding QUIC, I don't know. QUIC wasn't discussed during the work, >>> but how/if the procedures also apply to QUIC without any >>> modifications etc I don't know. >>> >>>> - 2.3: how the controlling/controlled stuff works isn't clear from >>>> this, nor even (as I was reading it) in section 7.3.1.1 - I wasn't >>>> clear how the tie-breaker value is initialised until I got to >>>> 16.1. In any case I think a bit more explanatory text in 2.3 might >>>> be good. (But if implementers haven't had a problem with this, >>>> maybe it's just me.) >>> >>> In general, one of the tasks of the bis work was to *simplify* >>> section 2, because the previous version was too detailed for >>> non-implementers who just want to figure out what ICE is all about >>> (in order to actually implement ICE, reading section 2 is obviously >>> not enough). For that reason, my opinion was that section 2 doesn't >>> really need to talk about role conflicts and tie-breaker values, as >>> it's not essential for a high-level description of ICE. >>> >>> --- >>> >>>> - 5.2: "The procedures in this section is common across the >>>> initiating and responding agents." s/is/are/ I guess? >>> >>> Yes. I will fix as suggested. >>> >>> --- >>> >>>> - 6.1.1: What is "3PCC"? That note could maybe also do with a >>>> reference, as I at least don't get what you're trying to tell me. >>>> Ah - it's 3rd party call control (mentioned in 7.3.1.1). >>> >>> I can use "3PCC (3rd Party Call Control)" in section 6.1.1. >>> >>> As the spec is protocol independent, I don't think there are any >>> references that can be added. >>> >>> --- >>> >>>> - 16.1: For a given ICE session, are the random numbers in the >>>> ICE-CONTROLLED and ICE-CONTROLLING attributes sent by the same >>>> agent supposed to have the same value? I wasn't clear. If they are >>>> the same, I understand how tie-breaking happens. If they can >>>> differ, I'm not sure. (But I didn't go back and re-read 7.3.1.1, so >>>> it may be ok either way:-) >>> >>> It is covered in the 2nd paragraph of section 7.2.5.1, which says >>> that the agent MAY change the value when it switches role. >>> >>>> In any case saying "referred to as the tie-breaker value" twice >>>> seems odd. >>> >>> I'll remove it from the ICE-CONTROLLING definition. >>> >>> --- >>> >>>> - 16.1: (mega-mega-nit:-) the fact that tie-breaker is split over >>>> a line-breaker here is why I didn't find this when I was reading >>>> 2.3/7.3.1.1 - maybe tweak the words so a grep will find it?) >>> >>> Good catch. I'll fix it. >>> >>> It would be really cool if search functions could discard line-breaks= >>> when searching for strings. >>> >>> --- >>> >>>> - 17: "looking to deploy ICE" is a bit confusing - do you mean >>>> "looking to be nice to ICE"? My assumption is that endpoints deploy >>>> ICE agents but network operators don't, though they might deploy >>>> STUN/TURN servers I guess. But maybe I'm thinking too much about >>>> WebRTC there. >>> >>> Perhaps something like: >>> >>> "This section discusses issues relevant to operators operating >>> networks where ICE will be used by endpoints." >>> >>> --- >>> >>>> - 18: I wondered if this is still needed, given that 5245 already >>>> said it (I didn't check if the text has been updated). Saying this >>>> once would seem sufficient to me anyway. I guess leaving it in is >>>> the easier path. >>> >>> I'll leave it :) >>> >>> --- >>> >>>> - 19: s/DNS-SEC/DNSSEC/ would be more common >>> >>> I will fix as suggested. >>> >>> --- >>> >>>> - 19.4.1: 1st sentence if missing a "T" - s/he/The/ >>> >>> I will fix as suggested. >>> >>> --- >>> >>> Regards, >>> >>> Christer >>> >> >> --=20 >> PGP key change time for me. >> New-ID 7B172BEA; old-ID 805F8DA2 expires Jan 24 2018. >> NewWithOld sigs in keyservers. >> Sorry if that mucks something up;-) >=20 >=20 --=20 PGP key change time for me. New-ID 7B172BEA; old-ID 805F8DA2 expires Jan 24 2018. NewWithOld sigs in keyservers. Sorry if that mucks something up;-) --------------335A015E9235FE76353BBBAB Content-Type: application/pgp-keys; name="0x7B172BEA.asc" Content-Transfer-Encoding: quoted-printable Content-Disposition: attachment; filename="0x7B172BEA.asc" -----BEGIN PGP PUBLIC KEY BLOCK----- mQINBFo9UDIBEADUH4ZPcUnX5WWRWO4kEkHea5Y5eEvZjSwe/YA+G0nrTuOU9nem CP5PMvmh5Cg8gBTyWyN4Z2+O25p9Tja5zUb+vPMWYvOtokRrp46yhFZOmiS5b6kT q0IqYzsEv5HI58S+QtaFq978CRa4xH9Gi9u4yzUmT03QNIGDXE37honcAM4MOEtE gvw4fVhVWJuyy3w//0F2tzKrEMjmL5VGuD/Q9+G/7abuXiYNNd9ZFjv4625AUWwy +pAh4EKzS1FE7BOZp9daMu9MUQmDqtZUbUv0Q+DnQAB/4tNncejJPz0p2z3MWCp5 iSwHiQvytYgatMp34a50l6CWqa13n6vY8VcPlIqOVz+7L+WiVfxLbeVqBwV+4uL9 to9zLF9IyUvl94lCxpscR2kgRgpM6A5LylRDkR6E0oudFnJgb097ZaNyuY1ETghV B5Uir1GCYChs8NUNumTHXiOkuzk+Gs4DAHx/a78YxBolKHi+esLH8r2k4LyM2lp5 FmBKjG7cGcpBGmWavACYEa7rwAadg4uBx9SHMV5i33vDXQUZcmW0vslQ2Is02NMK 7uB7E7HlVE1IM1zNkVTYYGkKreU8DVQu8qNOtPVE/CdaCJ/pbXoYeHz2B1Nvbl9t lyWxn5XiHzFPJleXc0ksb9SkJokAfwTSZzTxeQPER8la5lsEEPbU/cDTcwARAQAB tCFTdGVwaGVuIEZhcnJlbGwgPHN0ZXBoZW5AamVsbC5pZT6JAj0EEwEIACcFAlo9 UYwCGwMFCQmUJgAFCwkIBwIGFQgJCgsCBBYCAwECHgECF4AACgkQWrL68XsXK+qG CxAApYHWYgGOIL3G6/OpkejdAkQoCVQAK8LJUSf6vzwost4iVfxIKcKW/3RqKNKk rRl8beJ7j1CWXAz9+VXAOsE9+zNxXIDgGA7HlvJnhffl+qwibVgiHgUcJFhCSbBr sjC+1uULaTU8zYEyET//GOGPLF+X+degkE/sesh4zcEAjF7fGPnlncdCCH3tvPZZ sdTcjwOCRVonKsDgQzBTCMz/RPBfEFX44HZx4g1UQAcCA4xlucY8QkJEyCrSNGpG nvGK8DcGSmnstl1/a9fnlhpdFxieX3oY2phJ1WKkYTn6Advrek3UP71CKxpgtPmk d3iUUz/VZa0Cv6YxQXskspRDVEvdCMYSQBtJPQ4y2+5UxVR9GIQXenwYp9AP2niv Voh+ITsDWWeWnnvYMq07rSDjq0nGdj41MJkNX+Yb2PXVyXItcj5ybE3T2+y3pSBG FEZYJGuaL4NwtBJFMOdOtBmUOPbetS2971EL3Izxb7ibOZWDwexv+8R6SWYfP1wV N3p46RyBQuXqJV8ccE11m6vtZTGSYgnLUUFZMRQYH+0hwuYe0T3AA18xDdSYsa8v ovCCd3l5S4UNzIM2PMChqGrEzKapUpZg7+8ACcxRU3b9Ihd7WYjJ+pQPCoWYKozv tEvenbNpE/govO/ED3B14e+R2yevRPjRrsN7PJzSf15fQLuJARwEEAEIAAYFAlo9 UqAACgkQLzyHNoBfjaLrSwf+MIHbFRQ4O5cmLYR5sIByWelN3SuRN/gW8rpKo9Ok Cz6An8uV/iCXy5tNMLzzi0BFl8f22DwBcC5qy9qnlIAdogWam1qWoTAoAD8veEqm uKhYrqJsCcAyNrKYmK0hP3rpHxx1LySDmKYXmw/8qtBXKHTouMm+5tSsznhykRMT AAr2p7PSaHgo+hIVaW/rKSspHjDhhZS+G9mtOZad1IH29M6G1Q1NCO0Ywe8krKLQ IAQlFxtgvOqpPOZNzeKBa/+KbE8TGgMWrkOhC8OeEM5PVzdDhlhD9kPzB/pCKDF5 DofJ/ZRqnDpbKPQ0bsW38AOig3kOc0A27awiBEw3urqR1bQyU3RlcGhlbiBGYXJy ZWxsICgyMDE3KSA8c3RlcGhlbi5mYXJyZWxsQGNzLnRjZC5pZT6JAkAEEwEIACoC GwMFCQmUJgAFCwkIBwIGFQgJCgsCBBYCAwECHgECF4AFAlo+o3cCGQEACgkQWrL6 8XsXK+qO0A//ZsfQzyXrZlu/eEV5jU620yeOM3P7SW3C3UQYdCgZ/TlvxGgKow5o DSXgjMiUyq9csGqbPBxlDYSxFZHNeDVKYIuP2ZK24tw5k6duTh4+sFwUualTMlcp 0zBCIzn3hRcsRvuPKHfl5+6oOi0+xqx3jX/s/69L/fvHmdSKet5LIUAxoYaZkTCr uFrPWb01tgAl5JExWkhmCY98iD+EeiIMAWBjMw1xV+p0uCwNbN6XDzcToK7wsm+t AIiWUy3DpP60a6WbVwdV0HNt2WZq5U5Jdh2k4S+sN2CnYk4tTW7jHjsWarV3FLIS COObADZuB7ljU4kYfdwZ+WzenXY4LGlxGQSlAblGjwZe4EIkCXAJUtzJhoFUuGaF /PlWjxqV3UFRcgTERZTijguVyREre8GNERNgvDxZvuXssEjvz9X5JfcIZDIJpdzh LiEIj9noUbfx1SzB5KDPQj0O7elMHa1671/rwWcpGr/MfVPTOik4H7F8rcVJelce ZTzC4tvya7M+jM4fyFWWt8Y4atTixUiP7U9o4uBZCQ0GzvsmFA4XLqn2pA5rVizM XnGbGOjufAP/efEJ4ul3qvjYe8ye8DXEDjKAxo/tuHYtk19XCi83QzFhWls5TT+X QeVTMEvVqo9Wek8yoxo67qvLKKqIcG9givQd8MxYNAbNYgSPtkbhZ8SJARwEEAEI AAYFAlo9UqAACgkQLzyHNoBfjaLzHAgAlWT6NXEGtw/r1miKNGcopzvzILQ9oB8r KI9U9EL6tOf/y2V5oYee/GyQDb3ZdoPxxYYcJf+RyiH1nMoqUIZiZJaf3bJXinDZ 5+AdfE++UR2NBvqaNyC6u3r24jo1B/sagKbYtWgsYtRqHLD4IWi37MZrVyjBuF7u 14Q07+uhjq6mX2O/tHpCYw/Q82tbeTRPyUf1WQOAfD1kfBpW9PvAva5Iw9FWeXpC XRzwxnCZhYfGfqtuSw6CPBYLdbikqML6FZ7EDuTBb/8um1wK7Y9bgeIQC+CYjhYB 5RXa1tDJRab2Js4luCvSR0w/CgHw26293tlve2Q6UTrmHxP5U22DlrQuU3RlcGhl biBGYXJyZWxsIDxzdGVwaGVuQHRvbGVyYW50bmV0d29ya3MuY29tPokCPQQTAQgA JwUCWj1RWgIbAwUJCZQmAAULCQgHAgYVCAkKCwIEFgIDAQIeAQIXgAAKCRBasvrx excr6jscEADEcB0WQEZn2AkrzDs1RhL0Lp6cZi0BigofkbcGfdhJyMSs19C0dhvn crAFClVI6/Udw3yFtDyYtOCf2W3M3A1K6/RfEizCLzTsdFIhni9gOJLlUpXViQtg rlstjk7hqVV3Ooz4BlCqS4cG7rfqf4LQQPpTAuFUEV9I28FBUB2irqC+v4gTysIg pMw0bA1yBU9sX5jE/tRkzqnuzZrkwiobDtRFJ9qp+7O2JtcY4EsVtLAsaodJKc5c F8R4OvB1n66vxxcgg9Eh4JNWZ47xsaCmAGo1Bcb2jIY35OtgAL7gCGLRSMKTtAaP y1/fEgIqhCljJ9x40Fkn/3r2BX21WC9HFSPFTBz2RluLRzxdgxOrkYK8EiHUPoE5 b1AEzZKw2AbeXfr57f5zYsN3IqfbQLUjMYtUN1wK3Pjb+idD972wyXMWt8uOzlI7 b9Ocu+nYm2whBfJv9Pmp3QYTmPz+LB9lH65VNVUSxSXVr5iWXO3qx1HtEiGEqkpo rMQCTh3T5Ud3PvMSRBFFKNs9WhJ/Lxz+SV30WLwG6dr5mQqlzAhb4Phc/zekZyXR dS/oDKrBLUucS36O//49JeyRi1QvOfxnfmIqRIAf/k3PoYJmTo5E82//r5Qj3YGl Ru78ba0HArxs+ACD6AnEHHcbswpbtVEKYzlSu0Ar0Dc7vRWM/IyQdIkBHAQQAQgA BgUCWj1SoAAKCRAvPIc2gF+NosIsB/9f/29FNla3BJfGIEIDnhrqGD0i9bSa89Sq Bd++uG06TQgW5wsqtNcrwn81yZTq6XE6i9VtD4GKfqC0d4KZJr9bnbeD81cI64VO dL8zJWJs0vj5EIXCobKyX74Kb4uePUyZqwT2Q74I116u/HwA9/FXsPo5isbh4ZqD 4t0VHpWkmfq1FPT9a/JPyX46qKqB2Fce/7Qy+SQP1NfkuUlbhUH/JG9aSSYvk3lz nNiH41x9M+FDlL106itXOubrl3oi2fT3fsSedq7uzt+IV0DQEeNaoQAUuwEhdB8I WOMqN2woDjGVKJftfsSWY9ilZrnDBNDrp0vRqcx33LUMkIw4d7iBuQINBFo9UDIB EAD6DdHQfMav8OXfhjTteoarOrlJTSdci727xiezGPuBHmpvceBRZgRasdbaMc4H Jee+R9+5x/nLPCuy/DxDyIjwIUeJNgc+l7LjI9WfpHTD8U4xxjvR5Mi7+ToQQUOU NuzT0O0pyuxP1uY3RehHEhOVfBZO59ipSeZL5iQC6T5MsK1SKfs51pLa5ToC1rc8 tBJ4zZmxRAyZiYc/AH2uZ/6rYjTTkAn1DVI9DYo2D/zE4bGjXdJW5pKphFB2lX3d G4I7ODi+5e1H6A/QpCu6z8/ZkIQ+9T1xcX/YwiFeA7PbTuW/eITbMbI1eV3+fyym 9aT7Rsflmp31Zxtr+sZwGGZf00ooMBFmqOS//NUQ/Vf3vDUew1h5QU1yDaWT3NAp vi+XWPH9TPy6TMfZA2FThHf11sX/gDBa5JWQZbptPEcmoazpiKZt91CrFPOaoXDP ck/Q61dfmr/oPikfByYnASIM3OwEuXqyQ9JDRfKrem5r+oA/wxWb5jELElAhOpny qMMvOh7uz1foUssL8MAv2TGXmxpVJ8Nu4je6wf96Z22fQ0D38zud+CKH3bMP3ayX XJBcdPoENrzFbWP5FTg/4TTDJ3vOAHZR5iCunYghx8b7Ffa4UbkwlD+dh8GiIAtv T51Ac0cO0Wc0Zjc57zPUz1zloMbf+zb1Bsn7DuEQoqj1gwARAQABiQIlBBgBCAAP BQJaPVAyAhsMBQkJlCYAAAoJEFqy+vF7FyvqrC8P/1tF6TeR83xD6MasqXyrBjwc LmziaF0Mlkj8k/YUiZ/knb53n97xQnh9yxPv0TT8Wpfdn3BmvqGyh8+ouHX9jMOx iRkMdNhIauVYY/8jmRfBSYWcFkfMzdYasvdLtmYJgx252HKTFdeOrszoOjWjEzwm h+tca3AFMu/nB++/KAmi5UJV7zsZ7uYJ5jm97LV5SLjNJIXXM+lHqCDrjDaDhNcz mq1LCRlU6/WDjvkuwaVhZG4lXxMDrvKnXMkjseQ2oKjwrIdfQM86H1z5J31lfhqo p+of0cimcIsBgSCPu+h96LHuAzeRBCbDKeqrfZtAZAGsokRina9947fRWxXHh3O6 6ILmXKNRxxWbDkPvYnQWUat8SbSTDoPWrDIGDRIAypqYo3pcN2OE0C1chqgDZQxk r+9kYZQpupOAN2TR+fM7JvbO9coKI8Uqog8CopoMeDQkd0YjcqlB1E0svODHTzcS oRzogDBYDqNLP7qVkNXpcOAXSVioBgiSDf7o5RdS/qmUyXBIeq6I5z8xBcd+BQ/n /9Frkm6K7IKP3ngUP4wEoiPx5ZE5+fPIScGmVUcZIMhkvMvem9XXh1yyhqN14gfj mLwPGdWbrgG8QUe0s2WeWIyss6uTiyF+ZbJSo2XOKVc3YFMVUUfgyudqAV1wWdZi nUk+H3pkqOKoHAy/8fST =3Dg8yx -----END PGP PUBLIC KEY BLOCK----- --------------335A015E9235FE76353BBBAB-- --z4EfMfxgBGtJ1H2NIPrsYnaxmy6uooEGe-- --2yGQSXqGz4gH2bxKFLs0nYL2G7TYBYpw8 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQIcBAEBCAAGBQJacIH9AAoJEFqy+vF7FyvqxDoQAITOSo7KhUzzjAFq0gQPjTT2 Q3H1VM1PItppMW1xXv8lFRDTj8t3JUnkEy3KS/TQ0uQ9f8qexk/EWIC4PJeAPHhk 8YwnoEPDMggmVZlTDaNfFHIBTD2JFD0uc6hSfeXs5ZeptbnQapIZjYt06xOIBDRa 13pM1BKM0jM2vq9FqA7g5QNOXVWaR2/lf5CXn7/LIC8icuyW0Pf6zanFgnKB7EtQ 8kkTldCh8+69RzL9IYQqsAP62UF7RNoGxsTof0O/ObIE/R9jfZWYQt5hXhQYpOU2 uabWuE/yOfKh8knQs1sFdYKcBjma2jiavDjYwhCP30ZiCgn9tD7ErZNjz6vrk5Wz VRYGAWTrFd7FwjK5DTG3OvayLFKoR8b5JZK7hOY5xt7wh+abR8EtDzYMG5WZJeOI WrBWP1v65Jps+Z3Wx36GiCfi6yi0j4IaFNsJ4vodQJkEzqW+7spuDQVb0fvPMvh6 t1bX+e3zEjxerFOXRZl3RznfVtTM5CluX136IRvOJO+pXvLKsgBPFvWwLoBZsVCq cbT+wqx/2uYkxiUSTVwhL0XEeeoKlA65MTE/q8Wl/zFZA/CMnlpeQ0cMDfGk7Iyk jkvw8UxnLADaoyxq9rHER05mJYvABEFzWJIAKExpodXfKi3MiBKFNzxPJzz2Vrrp rk27TPLFrLrscdkxh7iq =lgd9 -----END PGP SIGNATURE----- --2yGQSXqGz4gH2bxKFLs0nYL2G7TYBYpw8-- From nobody Wed Jan 31 03:55:56 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4C27C12E051 for ; Wed, 31 Jan 2018 03:55:55 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.231 X-Spam-Level: X-Spam-Status: No, score=-4.231 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id to9rHi3tBXdj for ; Wed, 31 Jan 2018 03:55:53 -0800 (PST) Received: from huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B149412D82C for ; Wed, 31 Jan 2018 03:55:24 -0800 (PST) Received: from LHREML710-CAH.china.huawei.com (unknown [172.18.7.107]) by Forcepoint Email with ESMTP id 62064AABD4710 for ; Wed, 31 Jan 2018 11:55:20 +0000 (GMT) Received: from DGGEMI403-HUB.china.huawei.com (10.3.17.136) by LHREML710-CAH.china.huawei.com (10.201.108.33) with Microsoft SMTP Server (TLS) id 14.3.361.1; Wed, 31 Jan 2018 11:55:21 +0000 Received: from DGGEMI501-MBS.china.huawei.com ([169.254.2.249]) by dggemi403-hub.china.huawei.com ([10.3.17.136]) with mapi id 14.03.0361.001; Wed, 31 Jan 2018 19:55:14 +0800 From: zhangdacheng To: secdir CC: "draft-ietf-mtgvenue-iaoc-venue-selection-process.all@tools.ietf.org" Thread-Topic: Secdir review of draft-ietf-mtgvenue-iaoc-venue-selection-process-11 Thread-Index: AdOaidiwmNb+jvbkRYeCaN7ErZDdvw== Date: Wed, 31 Jan 2018 11:55:14 +0000 Message-ID: <879E76B64CF340468BF5E4DE504C2242016A132F@dggemi501-mbs.china.huawei.com> Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.110.117.46] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Subject: [secdir] Secdir review of draft-ietf-mtgvenue-iaoc-venue-selection-process-11 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 31 Jan 2018 11:55:55 -0000 I have reviewed this document as part of the security directorate's ongoing= effort to review all IETF documents being processed by the IESG. These com= ments were written primarily for the benefit of the security area directors= . Document editors and WG chairs should treat these comments just like any = other last call comments. This document details the IETF's Meeting Venue Selection Process from the p= erspective of the community's goals, criteria and thought processes. It poi= nts to additional process documents on the IAOC Web Site that go into furth= er detail and are subject to change with experience. This note proposes no = protocols, and therefore no new protocol insecurities. So, no additional comments.=20 Cheers Dacheng From nobody Wed Jan 31 06:42:41 2018 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6DBEA131B22 for ; Wed, 31 Jan 2018 06:42:39 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.32 X-Spam-Level: X-Spam-Status: No, score=-4.32 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XT5Cv05rcgX4 for ; Wed, 31 Jan 2018 06:42:36 -0800 (PST) Received: from sesbmg22.ericsson.net (sesbmg22.ericsson.net [193.180.251.48]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1844412EACF for ; Wed, 31 Jan 2018 06:39:15 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; d=ericsson.com; s=mailgw201801; c=relaxed/simple; q=dns/txt; i=@ericsson.com; t=1517409554; h=From:Sender:Reply-To:Subject:Date:Message-ID:To:CC:MIME-Version:Content-Type: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=MypaGRKItGlda/LgU6E5riFrwV9GkkVawrq5ijuohMQ=; b=G3pDIVFMw5txAMeT4+U+TZZeuVpxyBQVMc2f0Oh02ZpWad5rhGmbqttP6tepAx/r g4+wRxbt/asR1gAQ03pZk8y+qpXLqS5ZKIKk6abwUyKTvuoBGufJgXZ5Mj4Tcgnv UtTXXGvGcJGAUpEIlTfG0kW1bLp8EbyJo+suLlRiJbk=; X-AuditID: c1b4fb30-11d5e9c000006bc7-76-5a71d5124cb4 Received: from ESESSHC019.ericsson.se (Unknown_Domain [153.88.183.75]) by sesbmg22.ericsson.net (Symantec Mail Security) with SMTP id D1.14.27591.215D17A5; Wed, 31 Jan 2018 15:39:14 +0100 (CET) Received: from ESESSMB109.ericsson.se ([169.254.9.195]) by ESESSHC019.ericsson.se ([153.88.183.75]) with mapi id 14.03.0352.000; Wed, 31 Jan 2018 15:39:13 +0100 From: Christer Holmberg To: Stephen Farrell , "secdir@ietf.org" CC: "draft-ietf-ice-rfc5245bis.all@ietf.org" , "ietf@ietf.org" , "ice@ietf.org" Thread-Topic: Secdir last call review of draft-ietf-ice-rfc5245bis-16 Thread-Index: AQHTlsWSdlXqvNmVDEWzQ6CHG1vNgKOG2QlggAVgroCAAFA6gP//5hCAgAG49wA= Date: Wed, 31 Jan 2018 14:39:12 +0000 Message-ID: References: <151698534014.492.17944720668568287169@ietfa.amsl.com> <7594FB04B1934943A5C02806D1A2204B6C143E76@ESESSMB109.ericsson.se> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.7.7.170905 x-originating-ip: [153.88.183.17] Content-Type: text/plain; charset="euc-kr" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFlrHIsWRmVeSWpSXmKPExsUyM2K7t67Q1cIogwcXxC2O//jDbvHtQq3F s43zWSw+LHzIYjF97zV2B1aPtd1X2TyWLPnJFMAUxWWTkpqTWZZapG+XwJXxovMqc8GD1YwV C/sjGxjXLGfsYuTkkBAwkWh++JsZxBYSOMwosf43dxcjF5C9hFFi7v4FLF2MHBxsAhYS3f+0 QWpEBMIk7r8/xApSwywwk1Hi9c+XYIOEBVwkXj3+wwRR5CqxctMPKNtP4sTqTrAFLAKqEveb /7OD2LwC1hJts09DLZ7HJHH5ujGIzSlgK7Hv3wewOKOAmMT3U2vA5jALiEvcejKfCeJoAYkl e84zQ9iiEi8f/2MFsUUF9CQ2nLjNDnKzhICixPJ+OYhWLYkvP/axQdjWEoc2NLJD2IoSU7of Qp0jKHFy5hOWCYzis5Bsm4WkfRaS9llI2mchaV/AyLqKUbQ4tTgpN93ISC+1KDO5uDg/Ty8v tWQTIzAWD275bbCD8eVzx0OMAhyMSjy8Mw4VRgmxJpYVV+YeYpTgYFYS4d1zESjEm5JYWZVa lB9fVJqTWnyIUZqDRUmc96Qnb5SQQHpiSWp2ampBahFMlomDU6qBcfHLb1d+u/xp27nR/pPG VtFZPn7N7o5H1dd23tHKuZx/ZllJ0pVtX03fP2l81easFOR70tnITtXd71rrcXvu3Vrs86pW 6Oy8veP7RLnuk1KLXsYZn1D0No87w7AtWo3j4CKJF9r8ezg/zf2Q/OdyzQev2pyU4g2iO76f so34VvxojydD27bJz5VYijMSDbWYi4oTAZv9qrXBAgAA Archived-At: Subject: Re: [secdir] Secdir last call review of draft-ietf-ice-rfc5245bis-16 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 31 Jan 2018 14:42:39 -0000 SGksDQoNCkmhr3ZlIHVwZGF0ZWQgdGhlIHB1bGwgcmVxdWVzdCB3aXRoIGNoYW5nZXMgYmFzZWQg b24gU3RlcGhlbqGvcyBzZWMtZGlyDQpyZXZpZXcuDQoNCkkgYW0gc3RpbGwgbG9va2luZyB3aGV0 aGVyIHRoZXJlIGlzIHNvbWV0aGluZyB0aGF0IGNvdWxkIGJlIGFkZGVkDQpyZWdhcmRpbmcgV2Vi UlRDIElQIGxlYWthZ2UuDQoNCmh0dHBzOi8vZ2l0aHViLmNvbS9pY2Utd2cvcmZjNTI0NWJpcy9w dWxsLzU3DQoNCg0KSSBoYXZlIG5vdCB5ZXQgY29tbWl0dGVkIGFueSBjaGFuZ2VzIGJhc2VkIG9u IE1hZ251c6GvIHRydi1kaXIgcmV2aWV3Lg0KDQpSZWdhcmRzLA0KDQpDaHJpc3Rlcg0KDQoNCg0K DQpPbiAzMC8wMS8xOCAxNjozMiwgIlN0ZXBoZW4gRmFycmVsbCIgPHN0ZXBoZW4uZmFycmVsbEBj cy50Y2QuaWU+IHdyb3RlOg0KDQo+DQo+SGl5YSwNCj4NCj5UaG9zZSBsb29rIGNsb3NlLWVub3Vn aCBvciBmaW5lIHRvIG1lLiBGb3IgdGhlDQo+cmVjZW50IFdlYlJUQyB0aHJlYWQsIGlmIHlvdSBm aW5kIHNvbWV0aGluZywgdGhhdCdsbA0KPmJlIGEgZ29vZCB0aGluZy4gSWYgbm90LCBhbmQgbm9i b2R5IHN1Z2dlc3RzIHNvbWUNCj50ZXh0LCB0aGVuIEkgZ3Vlc3MgYXQgbGVhc3Qgd2UgZGlkIHRy eTotKSBBbmQgRldJVyBJJ20NCj5maW5lIHdpdGggdGhhdCwgYXMgSSdtIG5vdCB1cCB0byBzcGVl ZCBvbiBub24tV2ViUlRDDQo+dXNlcyBvZiBJQ0UsIHNvIGRvbid0IGtub3cgaWYgdGhlIHNhbWUg bGVha2FnZSBpc3N1ZXMNCj5jYW4gYXJpc2UgaW4gcmVhbGl0eSwgb3V0c2lkZSBvZiBXZWJSVEMu DQo+DQo+VGhhbmtzLA0KPlMuDQo+DQo+T24gMzAvMDEvMTggMTM6NTMsIENocmlzdGVyIEhvbG1i ZXJnIHdyb3RlOg0KPj4gSGksDQo+PiANCj4+Pj4+IFJldmlld2VyOiBTdGVwaGVuIEZhcnJlbGwg UmV2aWV3IHJlc3VsdDogSGFzIElzc3Vlcw0KPj4+Pj4NCj4+Pj4+ICgxKSBJIHRoaW5rIGEgYml0 IG1vcmUgd29yayBvbiB0aGUgc2VjdXJpdHkgYW5kIHByaXZhY3kgaXNzdWVzDQo+Pj4+PiBhcm91 bmQgSUNFIHdvdWxkIGltcHJvdmUgPnRoZSBkb2N1bWVudCwgYW5kIGhvcGVmdWxseSwgSUNFDQo+ Pj4+PiBpbXBsZW1lbnRhdGlvbnMuDQo+Pj4+Pg0KPj4+Pj4gLSBUaGVyZSBoYXMgYmVlbiAoSU1P IHNvbWV3aGF0IGp1c3RpZmllZCkgY29uY2VybiBbMV0gYWJvdXQNCj4+Pj4+IGV4cG9zaW5nIGFs bCBwb3NzaWJsZSA+YWRkcmVzc2VzLCBmb3IgZXhhbXBsZSB3aGVyZSBvbmUgaXMgZnJvbSBhDQo+ Pj4+PiBWUE4gaW50ZW5kZWQgdG8gcHJlc2VydmUgcHJpdmFjeSwgc2F5IGlmIGEgPnVzZXIgaXMg YWltaW5nIHRvDQo+Pj4+PiBjaXJjdW12ZW50IGxvY2FsIGNlbnNvcnNoaXAgb3Igc3VydmVpbGxh bmNlLiAgNS4xLjEuMSBoYXMgYSBTSE9VTEQNCj4+Pj4+IHRoYXQsID5hcyBJIHJlYWQgaXQsIHNh eXMgdG8gYWx3YXlzIGluY2x1ZGUgc3VjaCBhZGRyZXNzZXMuDQo+Pj4+Pg0KPj4+Pj4gWzFdIGh0 dHBzOi8vd3d3LnczLm9yZy93aWtpL1ByaXZhY3kvSVBBZGRyZXNzZXMNCj4+Pj4+DQo+Pj4+PiAo Tm90ZTogSSdtIG5vdCBjbGFpbWluZyBbMV0gaXMgYXV0aG9yaXRhdGl2ZSwgaXQncyBqdXN0IGEg cGFnZSBJDQo+Pj4+PiBmb3VuZCB0aGF0IGRlc2NyaWJlcyB0aGUgaXNzdWUgcmVhc29uYWJseSB3 ZWxsLikNCj4+Pj4+DQo+Pj4+PiBUaGVyZSBpcyBhIGJpdCBvZiB0ZXh0IGFib3V0IHRoaXMgKDFz dCBwYXJhIGluIHNlY3Rpb24gMTkpLCBidXQgSU1PDQo+Pj4+PiBpdCdzIGEgYml0IHdlYWsuDQo+ Pj4+Pg0KPj4+Pj4gLSBEaWQgdGhlIFdHIGNvbnNpZGVyIFJFUVVJUklORyBvciBSRUNPTU1FTkRJ TkcgYWdlbnQNCj4+Pj4+IGltcGxlbWVudGF0aW9ucyBwcm92aWRlIHNvbWUgbG9jYWwgaW50ZXJm YWNlIHRoYXQgYWxsb3dzIHRoZSBob3N0DQo+Pj4+PiBvciBhbiBhcHBsaWNhdGlvbiB0byBzYXkg IkRvbid0IHVzZSA8dGhpcz4gaW50ZXJmYWNlIHRvIGdlbmVyYXRlDQo+Pj4+PiBhbnkgY2FuZGlk YXRlcyB1bnRpbCBJIHRlbGwgeW91IG90aGVyd2lzZSI/ICBUaGF0IG1pZ2h0IGJlIGJldHRlcg0K Pj4+Pj4gdGhhbiBoYXZpbmcgVlBOIG9wZXJhdG9ycyByZWNvbW1lbmRpbmcgdG8gdHVybiBvZmYg V2ViUlRDIGVudGlyZWx5DQo+Pj4+PiBmb3IgZXhhbXBsZS4gKE5vdGU6IHRoaXMgaXMgbXkgbWFp biBjb21tZW50LCB0aGUgcmVzdCBhcmUgbW9zdGx5DQo+Pj4+PiBzdWdnZXN0ZWQgdGhpbmdzIHRv IHRoaW5rIGFib3V0LCBpZiB5b3UndmUgbm90IGFscmVhZHkuKQ0KPj4+Pj4NCj4+Pj4+IC0gRXZl biBpZiB0aGUgdGV4dCBpc24ndCBjaGFuZ2VkLCBhIHJlZmVyZW5jZSB0byBbMl0gd291bGQgSSB0 aGluaw0KPj4+Pj4gYmUgdXNlZnVsLiAoQXNzdW1pbmcgWzJdIGlzIHN0aWxsIGJlaW5nIHdvcmtl ZCBvbiBpbiBydGN3ZWIsIHRob3VnaA0KPj4+Pj4gbWluZCB5b3UsIEkgZG9uJ3QgbGlrZSBob3cg WzJdIHJlZmVycyB0byAiY29uc2VudCIgYXMgSSBkb3VidCBhDQo+Pj4+PiByYW5kb20gcGVyc29u IGNhbiByZWFsbHkgcHJvdmlkZSBtZWFuaW5nZnVsIGNvbnNlbnQgZm9yIHRoaW5ncyBsaWtlDQo+ Pj4+PiB0aGlzLikNCj4+Pj4+DQo+Pj4+PiBbMl0gaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1s L2RyYWZ0LWlldGYtcnRjd2ViLWlwLWhhbmRsaW5nLTA0DQo+Pj4+DQo+Pj4+IEkgd291bGQgbm90 IHdhbnQgdG8gUkVRVUlSRSBpbXBsZW1lbnRpbmcgYSBsb2NhbCBpbnRlcmZhY2UgZm9yDQo+Pj4+ IGNvbnRyb2xsaW5nIHRoZSBjYW5kaWRhdGVzLCBhcyBJQ0UgaXMgYWxzbyB1c2VkIGJ5IGRpZmZl cmVudCB0eXBlcyBvZg0KPj4+PiBuZXR3b3JrIGVudGl0aWVzIChnYXRld2F5cyBldGMpLiBCdXQs IEkgYW0gb2sgdG8gUkVDT01NRU5ELg0KPj4+DQo+Pj4gRmFpciBlbm91Z2guDQo+Pj4NCj4+Pj4N Cj4+Pj4gV2hhdCBhYm91dDoNCj4+Pj4NCj4+Pj4gT0xEOg0KPj4+Pg0KPj4+PiAiSW5kaXZpZHVh bCBpbXBsZW1lbnRhdGlvbnMgbWF5IGFsc28gaGF2ZSBpbXBsZW1lbnRhdGlvbi1zcGVjaWZpYw0K Pj4+PiBydWxlcyBmb3IgY29udHJvbGxpbmcgd2hpY2ggYWRkcmVzc2VzIGFyZSByZXZlYWxlZC4i DQo+Pj4+DQo+Pj4+IE5FVzoNCj4+Pj4NCj4+Pj4gIkluZGl2aWR1YWwgaW1wbGVtZW50YXRpb25z IG1heSBhbHNvIGhhdmUgaW1wbGVtZW50YXRpb24tc3BlY2lmaWMNCj4+Pj4gcnVsZXMgZm9yIGNv bnRyb2xsaW5nIHdoaWNoIGFkZHJlc3NlcyBhcmUgcmV2ZWFsZWQuIEl0IGlzIFJFQ09NTUVOREVE DQo+Pj4+IHRoYXQgYXBwbGljYXRpb25zIGludGVyYWN0aW5nIHdpdGggaHVtYW4gdXNlcnMgcHJv dmlkZSBhIHVzZXINCj4+Pj4gaW50ZXJmYWNlcyB0aGF0IGFsbG93cyB0aGUgdXNlcnMgdG8gY29u dHJvbCB3aGljaCBpbnRlcmZhY2VzIGFyZSB1c2VkDQo+Pj4+IHRvIGdlbmVyYXRlIGNhbmRpZGF0 ZXMsIG9yIHdoZW4gdG8gdXNlIGNhbmRpZGF0ZXMgZ2VuZXJhdGVkIGZvciB0aGUNCj4+Pj4gaW50 ZXJmYWNlcy4NCj4+Pj4NCj4+Pj4gW1JFRi10by0gZHJhZnQtaWV0Zi1ydGN3ZWItaXAtaGFuZGxp bmddIHByb3ZpZGUgYWRkaXRpb25hbA0KPj4+PiBpbmZvcm1hdGlvbiBhbmQgUmVxdWlyZW1lbnRz IHJlZ2FyZGluZyB0aGUgaGFuZGluZyBvZiBJUCBhZGRyZXNzZXMNCj4+Pj4gZm9yIFdlYlJUQyBh cHBsaWNhdGlvbnMuIg0KPj4+DQo+Pj4gVGhhdCdzIGEgZmluZSBpbXByb3ZlbWVudCBmcm9tIG15 IFBPViwgZXNwIGlmIGZvbGtzIHdpbGwNCj4+PiByZWFsbHkgcHJvdmlkZSBzdWNoIGludGVyZmFj ZXMuIEknbSBub3Qgc3VyZSAiaW50ZXJhY3RpbmcNCj4+PiB3aXRoIGh1bWFucyIgaXMgcXVpdGUg cmlnaHQgdGhvdWdoLCBtYXliZSBpdCdkIGJlIGJldHRlcg0KPj4+IHRvIGFkZCBhIHJlZmVyZW5j ZSB0byB0aGUgcHJvYmxlbSAodmlhIFsxXSBvciBbcnRjd2ViLWlwXSkNCj4+PiBhbmQgdG8gdGhl biBzYXkgIkltcGxlbWVudGF0aW9ucyB3aGVyZSBzdWNoIGlzc3VlcyBjYW4NCj4+PiBhcmlzZSBh cmUgUkVDT01NRU5ERUQgdG8uLi4iIEknZCBhbHNvIHN1Z2dlc3QgbWF5YmUNCj4+PiBzL3VzZXIg aW50ZXJmYWNlL2ludGVyZmFjZS8gdGhlcmUsIGFzIGUuZy4gYSBWUE4gY2xpZW50DQo+Pj4gbWln aHQgd2FudCB0byB1c2UgYW4gQVBJIHByb3ZpZGVkIGJ5IGFuIElDRSBpbXBsZW1lbnRhdGlvbg0K Pj4+IHNvIHRoZSBVSSBtaWdodCBiZSBwYXJ0IG9mIHRoZSBWUE4gY2xpZW50IGFuZCBub3QgdGhl IElDRQ0KPj4+IGltcGxlbWVudGF0aW9uLiBTbywgb3ZlcmFsbCBJJ2Qgc3VnZ2VzdCBzb21ldGhp bmcgbGlrZQ0KPj4+IHRoaXM6DQo+Pj4NCj4+PiAiSW5kaXZpZHVhbCBpbXBsZW1lbnRhdGlvbnMg bWF5IGFsc28gaGF2ZSBpbXBsZW1lbnRhdGlvbi1zcGVjaWZpYw0KPj4+IHJ1bGVzIGZvciBjb250 cm9sbGluZyB3aGljaCBhZGRyZXNzZXMgYXJlIHJldmVhbGVkLiBGb3IgZXhhbXBsZSwNCj4+PiBb UkVGLXRvLSBkcmFmdC1pZXRmLXJ0Y3dlYi1pcC1oYW5kbGluZ10gcHJvdmlkZXMgYWRkaXRpb25h bA0KPj4+IGluZm9ybWF0aW9uIGFib3V0IHRoZSBwcml2YWN5IGFzcGVjdHMgb2YgcmV2ZWFsaW5n IElQIGFkZHJlc3Nlcw0KPj4+IHZpYSBJQ0UgZm9yIFdlYlJUQyBhcHBsaWNhdGlvbnMuIElDRSBp bXBsZW1lbnRhdGlvbnMgd2hlcmUgc3VjaA0KPj4+IGlzc3VlcyBjYW4gYXJpc2UgYXJlIFJFQ09N TUVOREVEIHRvIHByb3ZpZGUgYSBwcm9ncmFtbWF0aWMgb3INCj4+PiB1c2VyIGludGVyZmFjZSB0 aGF0IHByb3ZpZGVzIGNvbnRyb2wgb3ZlciB3aGljaCBuZXR3b3JrIGludGVyZmFjZXMNCj4+PiBh cmUgdXNlZCB0byBnZW5lcmF0ZSBjYW5kaWRhdGVzLiINCj4+IA0KPj4gTG9va3MgZ29vZCA6KQ0K Pj4gDQo+PiAtLS0NCj4+IA0KPj4+Pg0KPj4+Pj4gLSBTZXBhcmF0ZWx5IFsxXSBhbHNvIGRlc2Ny aWJlcyBhbm90aGVyIHBvdGVudGlhbCBwcml2YWN5IGlzc3VlDQo+Pj4+PiB3aXRoIFNUVU4gdXJs cy4gSSB0aGluayBpdCdkIGJlIHdvcnRod2hpbGUgbm90aW5nIHN1Y2ggaXNzdWVzIHRoYXQNCj4+ Pj4+IGhhdmUgYmVlbiBmb3VuZCB3aXRoIGRlcGxveW1lbnRzIG9mIElDRSBoZXJlLCBhcyBhbnkg cHJvdG9jb2wgdXNpbmcNCj4+Pj4+IElDRSBhbmQgYWNjZXB0aW5nIG5vbiBsb2NhbGx5IGNvbmZp Z3VyZWQgU1RVTi9UVVJOIFVSTHMgbWF5IGhhdmUNCj4+Pj4+IGlzc3VlcyBsaWtlIHRoYXQuIEZv ciBleGFtcGxlLCBhIHJlY2VudCBwYXBlciBbM10gYWxzbyBkZXNjcmliZXMNCj4+Pj4+IHNvbWUg YXR0YWNrcyAoaW4gc2VjdGlvbiA0LjIgbW9zdGx5KSB0aGF0IGNvdWxkIChJIGd1ZXNzKSBiZQ0K Pj4+Pj4gbW91bnRlZCBhZ2FpbnN0IGFueSBJQ0UgYWdlbnQgYW5kIG5vdCBvbmx5IFdlYlJUQyBj bGllbnRzLiBUaGF0J2QNCj4+Pj4+IGJlIHdvcnRoIGEgcmVmZXJlbmNlIGFuZCBtYXliZSB0aGlu a2luZyBhYm91dCB3aGljaCBhdHRhY2tzIGFyZQ0KPj4+Pj4gZ2VuZXJpYyBJQ0UgaXNzdWVzIGFu ZCBkb24ndCBvbmx5IGFmZmVjdCBXZWJSVEMuDQo+Pj4+Pg0KPj4+Pj4gWzNdIGh0dHBzOi8vZG9p Lm9yZy8xMC4xMTQ1LzMwMTk2MTIuMzAxOTg0NA0KPj4+Pg0KPj4+PiBJIGFtIHN0cnVnZ2xpbmcg dG8gZmlndXJlIG91dCBleGFjdGx5IHdoYXQgdG8gZG8gaGVyZS4uLiBJIHJlYWxseQ0KPj4+PiBo b3BlIHdlIGRvbid0IGhhdmUgdG8gcGVyZm9tIGEgc3R1ZHkgb24gWzNdLCBhbmQgc2VlIHdoYXQg aXMgZ2VuZXJhbCwNCj4+Pj4gYW5kIHdoYXQgaXMgV2ViUlRDLXNwZWNpZmljLiBBcmUgd2UgZXZl biBhbGxvd2VkIHRvIHJlZmVyZW5jZSBbM10sIGFzDQo+Pj4+IGl0J3Mgbm90IGZyZWVseSBhdmFp bGFibGU/DQo+Pj4NCj4+PiBTdXJlLCB3ZSBjYW4gcmVmZXJlbmNlIGFjYWRlbWljIHBhcGVycyBi ZWhpbmQgcGF5d2FsbHMsIGFuZA0KPj4+IHRoZXJlJ3Mgb2Z0ZW4gYW5vdGhlciB2ZXJzaW9uIGF2 YWlsYWJsZSB0aGF0J3Mgbm90LiAoTm90IHN1cmUNCj4+PiBpbiB0aGlzIGNhc2UuKQ0KPj4+DQo+ Pj4+DQo+Pj4+IFNvbWUgaGVscCBhbmQgZ3VpZGFuY2Ugd291bGQgYmUgYXBwcmVjaWF0ZWQgOikN Cj4+Pg0KPj4+IEkgZ3Vlc3MgYWJvdXQgYXMgbXVjaCBhcyBjYW4gYmUgZG9uZSB3aXRoIHRoaXMg LWJpcyBlZmZvcnQgaXMNCj4+PiB0byBub3RlIHdoZXJlIGFueSBsZWFrYWdlcyBoYXZlIGJlZW4g Zm91bmQuIFRoZXJlJ3MgYmVlbiBzb21lDQo+Pj4gcmVjZW50IHRyYWZmaWMgb24gdGhlIFczQyBX ZWJSVEMgbGlzdCBhYm91dCB0aGF0IEkgdGhpbmssIChpbg0KPj4+IHRoZSB0aHJlYWQgYWJvdXQg Q1NQIGlpcmMpIHNvIG1heWJlIGEgdHJhd2wgb2YgdGhhdCB0aHJlYWQNCj4+PiB3aWxsIHN1Z2dl c3Qgc29tZSB0ZXh0Pw0KPj4gDQo+PiBJIGRpZCBmb2xsb3cgdGhhdCBkaXNjdXNzaW9uLiBJIHdp bGwgdGFrZSBhIHNlY29uZCBsb29rLg0KPj4gDQo+PiAtLS0NCj4+IA0KPj4+Pj4gLSBJIGFsc28g d29uZGVyZWQgaWYgSSBjYW4gZmluZ2VycHJpbnQgYSBob3N0IGJhc2VkIG9uIGhvdyBpdCBkb2Vz DQo+Pj4+PiBJQ0U/IEkgIHN1c3BlY3QgdGhhdCBtaWdodCB3b3JrLCBidXQgaGF2ZW4ndCB0cmll ZCB0byBmaWd1cmUgb3V0DQo+Pj4+PiBkZXRhaWxzLg0KPj4+Pj4NCj4+Pj4+IC0gQ291bGQgSSBw cm9iZSBhbiBpbnRlcm5hbCBuZXR3b3JrIGJhc2VkIG9uIGZlZWRpbmcgaXQgY2FuZGlkYXRlcw0K Pj4+Pj4gdG8gY2hlY2s/IEUuZy4gY2hlY2tpbmcgdGltaW5nIG9mIHJlYWN0aW9ucy4gIElmIEkg Y291bGQgdGhhdCBzZWVtcw0KPj4+Pj4gbm90ZXdvcnRoeS4NCj4+Pj4NCj4+Pj4gU29tZXRoaW5n IGxpa2U/DQo+Pj4+DQo+Pj4+ICJCYXNlZCBvbiB0aGUgdHlwZXMgb2YgY2FuZGlkYXRlcyBwcm92 aWRlZCBieSB0aGUgcGVlciwgYW5kIHRoZQ0KPj4+PiByZXN1bHRzIG9mIHRoZSBjb25uZWN0aXZp dHkgdGVzdHMgcGVyZm9ybWVkIEFnYWluc3QgdGhvc2UgY2FuZGlkYXRlcywNCj4+Pj4gYW4gYWdl bnQgbWlnaHQgYmUgYWJsZSB0byBkZXRlcm1pbmUgY2hhcmFjdGVyaXN0aWNzIG9mIHRoZSBwZWVy DQo+Pj4+IG5ldHdvcmsuIg0KPj4+DQo+Pj4gTWF5YmU6DQo+Pj4NCj4+PiAiQmFzZWQgb24gdGhl IHR5cGVzIG9mIGNhbmRpZGF0ZXMgcHJvdmlkZWQgYnkgdGhlIHBlZXIsIGFuZCB0aGUNCj4+PiBy ZXN1bHRzIG9mIHRoZSBjb25uZWN0aXZpdHkgdGVzdHMgcGVyZm9ybWVkIGFnYWluc3QgdGhvc2Ug Y2FuZGlkYXRlcywNCj4+PiB0aGUgcGVlciBtaWdodCBiZSBhYmxlIHRvIGRldGVybWluZSBjaGFy YWN0ZXJpc3RpY3Mgb2YgdGhlIGxvY2FsDQo+Pj4gbmV0d29yaywgZS5nLiBpZiBkaWZmZXJlbnQg dGltaW5ncyBhcmUgYXBwYXJlbnQgdG8gdGhlIHBlZXIuIEluDQo+Pj4gdGhlIGxpbWl0IHRoZSBw ZWVyIG1pZ2h0IGJlIGFibGUgdG8gcHJvYmUgdGhlIGxvY2FsIG5ldHdvcmsuIg0KPj4+DQo+Pj4g VGhhdCBzYWlkIC0gSSdtIG5vdCBjbGFpbWluZyB0aGlzIGlzIHBvc3NpYmxlIGZvci1zdXJlLCBJ IGp1c3QNCj4+PiBiZXQgaXQgd291bGQgYmU6LSkNCj4+IA0KPj4gVGhlIHRleHQgbG9va3MgZ29v ZC4NCj4+IA0KPj4gLS0tDQo+PiANCj4+Pj4+ICgyKSA1LjM6ICIuLi5NVVNUIGNvbnRhaW4gLi4u IDxmb28+IGJpdHMgb2YgcmFuZG9tbmVzcyIgRG9uJ3QgeW91DQo+Pj4+PiBuZWVkIHRvIHNheSB3 aGVuIHRoZXNlIHZhbHVlcyBNVVNUIGJlIGRpZmZlcmVudCBhbmQgd2hlbiB0aGV5J3JlIG9rDQo+ Pj4+PiB0byBiZSByZS11c2VkPyBJIGZvcmdldCBpZiBTVFVOL1RVUk4gZG8gdGhhdC4NCj4+Pj4N Cj4+Pj4gU2VjdGlvbiA3LjIuMiBzYXlzOg0KPj4+Pg0KPj4+PiAiQSBjb25uZWN0aXZpdHkgY2hl Y2sgQmluZGluZyByZXF1ZXN0IE1VU1QgdXRpbGl6ZSB0aGUgU1RVTg0KPj4+PiBzaG9ydC10ZXJt IGNyZWRlbnRpYWwgbWVjaGFuaXNtLiINCj4+Pj4NCj4+Pj4gUkZDIDUzODkgKFNUVU4pIHNheXM6 DQo+Pj4+DQo+Pj4+ICJTaG9ydC1UZXJtIENyZWRlbnRpYWw6ICBBIHRlbXBvcmFyeSB1c2VybmFt ZSBhbmQgYXNzb2NpYXRlZA0KPj4+PiBwYXNzd29yZCB0aGF0IHJlcHJlc2VudCBhIHNoYXJlZCBz ZWNyZXQgYmV0d2VlbiBjbGllbnQgYW5kIHNlcnZlci4NCj4+Pj4gU2hvcnQtIHRlcm0gY3JlZGVu dGlhbHMgYXJlIG9idGFpbmVkIHRocm91Z2ggc29tZSBraW5kIG9mIHByb3RvY29sDQo+Pj4+IG1l Y2hhbmlzbSBiZXR3ZWVuIHRoZSBjbGllbnQgYW5kIHNlcnZlciwgcHJlY2VkaW5nIHRoZSBTVFVO IGV4Y2hhbmdlLg0KPj4+PiBBIHNob3J0LXRlcm0gY3JlZGVudGlhbCBoYXMgYW4gZXhwbGljaXQg dGVtcG9yYWwgc2NvcGUsIHdoaWNoIG1heSBiZQ0KPj4+PiBiYXNlZCBvbiBhIHNwZWNpZmljIGFt b3VudCBvZiB0aW1lIChzdWNoIGFzIDUgbWludXRlcykgb3Igb24gYW4gZXZlbnQNCj4+Pj4gKHN1 Y2ggYXMgdGVybWluYXRpb24gb2YgYSBTSVAgZGlhbG9nKS4gVGhlIHNwZWNpZmljIHNjb3BlIG9m IGENCj4+Pj4gc2hvcnQtdGVybSBjcmVkZW50aWFsIGlzIGRlZmluZWQgYnkgdGhlIGFwcGxpY2F0 aW9uIHVzYWdlLiINCj4+Pj4NCj4+Pj4gSWYgYW55dGhpbmcgZXh0cmEgaXMgbmVlZGVkLCBJIHRo aW5rIHRoYXQgc2hvdWxkIGJlIGRvbmUgYXMgYW4gdXBkYXRlDQo+Pj4+IHRvIFNUVU4uDQo+Pj4N Cj4+PiBOb3Qgc3VyZSBJIGFncmVlIC0gbWF5YmUgSSB3YXNuJ3QgY2xlYXIgaW4gbXkgY29tbWVu dCB0aG91Z2gsDQo+Pj4gc28gbGV0IG1lIHRyeSByZXBocmFzZSBpdC4NCj4+Pg0KPj4+IFNUVU4g ZG9lc24ndCBkZWZpbmUgdGhlIGR1cmF0aW9uIGZvciB3aGljaCBzaG9ydC10ZXJtIGNyZWRzDQo+ Pj4gYXJlIE9LIHRvIGJlIHVzZWQuIElDRSBkb2VzIGRlZmluZSBhIHNlc3Npb24gY29uY2VwdCB0 aGVyZWZvcmUNCj4+PiBJQ0Ugb3VnaHQgdG8gc2F5IGlmIHNob3J0IHRlcm0gU1RVTiBjcmVkcyBN VVNUL01VU1QtTk9UL01BWQ0KPj4+IChvciB3aGF0ZXZlcikgYmUgcmUtdXNlZCBpbiBkaWZmZXJl bnQgSUNFIHNlc3Npb25zLiBFdmVuDQo+Pj4gd2l0aGluIGFuIElDRSBzZXNzaW9uIEkgZ3Vlc3Mg aW4gdGhlb3J5IG9uZSBjb3VsZCByZXF1aXJlDQo+Pj4gZGlmZmVyZW50IHNob3J0LXRlcm0gU1RV TiBjcmVkZW50aWFscyBldmVyeSBzaW5nbGUgdGltZSwgb3INCj4+PiBub3QuIFNvIEkgZG8gdGhp bmsgdGhlcmUncyBzb21ldGhpbmcgdG8gYmUgc2FpZCBoZXJlLg0KPj4gDQo+PiBTZWN0aW9uIDkg c2F5cyB0aGF0IGFuIGFnZW50IG11c3QgY3JlYXRlIGEgbmV3IHVzZXJuYW1lIGZyYWdtZW50IGFu ZA0KPj4gcGFzc3dvcmQgZm9yIGV2ZXJ5IG5ldyBJQ0Ugc2Vzc2lvbjoNCj4+IA0KPj4gICAgICAi VG8gcmVzdGFydCBJQ0UsIGFuIGFnZW50IE1VU1QgY2hhbmdlIGJvdGggdGhlIHBhc3N3b3JkIGFu ZCB0aGUNCj4+ICAgICAgIHVzZXJuYW1lIGZyYWdtZW50IGZvciB0aGUgZGF0YSBzdHJlYW0ocykg YmVpbmcgcmVzdGFydGVkLqn3DQo+PiANCj4+IA0KPj4gU2luY2UgSSBhbHNvIHVzZXMgdGhlIHVz ZXJuYW1lIHRvIGlkZW50aXR5IHRoZSBJQ0Ugc2Vzc2lvbiwgdGhlIHZhbHVlcw0KPj4gY2Fubm90 IGJlIGNoYW5nZWQgd2l0aGluIGEgc2Vzc2lvbi4NCj4+IA0KPj4gVGhlcmUgaXMgbm8gdGV4dCBv biB3aGVuIGEgdmFsdWUgY2FuIGJlIHJlLXVzZWQgLSBhcGFydCBmcm9tIHRoZSBmYWN0DQo+PnRo YXQNCj4+IHRoZXkgY2Fubm90IGJlIHJlLXVzZWQgd2hlbiBhbiBJQ0UgcmVzdGFydCB0YWtlcyBw bGFjZS4NCj4+IA0KPj4gTXkgYXNzdW1wdGlvbiBoYXMgYmVlbiB0aGF0IHRoZSByYW5kb21uZXNz IGNyaXRlcmlhIGFyZSBhc3N1bWVkIHRvDQo+PmVuc3VyZQ0KPj4gdGhhdCB0d28gYWdlbnRzIGRv bqn2dCBjaG9vc2UgdGhlIHNhbWUgdmFsdWVzIGZvciB0aGUgc2FtZSBzZXNzaW9uLCBhbmQNCj4+ IHRoYXQgdmFsdWVzIGFyZSB1bmxpa2VseSB0byBiZSByZS11c2VkIHdpdGhpbiBhIHNob3J0IHBl cmlvZCBvZiB0aW1lLg0KPj4gDQo+PiBXZSBjb3VsZCBzYXkgdGhhdCBhZ2VudHMgc2hhbGwgdmVy aWZ5IHRoYXQgdGhlIHNhbWUgdmFsdWUgaXMgbm90IHJlLXVzZWQNCj4+IGFzIGxvbmcgYXMgcGFj a2V0cyBmcm9tIGEgcHJldmlvdXMgSUNFIHNlc3Npb24gbWF5IHN0aWxsIGJlIHByZXNlbnQgaW4N Cj4+dGhlDQo+PiBuZXR3b3JrLiBCdXQsIHRoYXQgaXMgbm90IHJlYWxseSBzZWN1cml0eSByZWxh dGVkLCBidXQgbW9yZSB0byBtYWtlIHN1cmUNCj4+IElDRSB3b3Jrcy4NCj4+IA0KPj4gLS0tDQo+ PiANCj4+Pj4NCj4+Pj4+IChBbHNvIC0gdGhlIHBocmFzaW5nIGlzbid0IHRoYXQgZ3JlYXQgLSBo b3cgZG8gSSAiY29udGFpbiINCj4+Pj4+IHJhbmRvbW5lc3M/IEJ1dCB0aGF0J3MganVzdCBhIG5p dC4pDQo+Pj4+DQo+Pj4+IERvIHlvdSBoYXZlIGEgc3VnZ2VzdGlvbiBmb3IgYSBiZXR0ZXIgd29y ZD8NCj4+Pg0KPj4+IEkgdGhpbmsgd2hhdCB5b3Ugd2FudCBpcyB0byBzYXkgInVuZ3Vlc3NhYmxl LCB3aXRoIGF0DQo+Pj4gbGVhc3QgMTI4IGJpdHMgb2YgcmFuZG9tIG51bWJlciBnZW5lcmF0b3Ig b3V0cHV0IHVzZWQNCj4+PiB0byBnZW5lcmF0ZSBlYWNoIiBvciBzb21ldGhpbmcgbGlrZSB0aGF0 PyBJdCdzIGEgaGFyZA0KPj4+IG9uZSB0byBnZXQgcmlnaHQsIGJ1dCBldmVuIHdoYXQgeW91IGhh dmUgaXNuJ3QgdGhhdA0KPj4+IGJhZCAoSSBkaWQgc2F5IHRoaXMgd2FzIGEgbml0Oi0pDQo+PiAN Cj4+IFdoYXQgYWJvdXQ/DQo+PiANCj4+ICAgICAgIlVzZXJuYW1lIEZyYWdtZW50IGFuZCBQYXNz d29yZDogIFZhbHVlcyB1c2VkIHRvIHBlcmZvcm0NCj4+Y29ubmVjdGl2aXR5DQo+PiAgICAgICBj aGVja3MuIFRoZSB2YWx1ZXMgTVVTVCBiZSB1bmd1ZXNzYWJsZSwgd2l0aCBhdCBsZWFzdCAxMjgg Yml0cyBvZg0KPj4gcmFuZG9tIA0KPj4gICAgICAgbnVtYmVyIGdlbmVyYXRvciBvdXRwdXQgdXNl ZCB0byBnZW5lcmF0ZSB0aGUgcGFzc3dvcmQsIGFuZCBhdA0KPj5sZWFzdA0KPj4gMjQgDQo+PiAg ICAgICBiaXRzIG91dHB1dCB0byBnZW5lcmF0ZSB0aGUgdXNlcm5hbWUgZnJhZ21lbnQuIg0KPj4g DQo+PiANCj4+IFRoYW5rcyEgOikNCj4+IA0KPj4gUmVnYXJkcywNCj4+IA0KPj4gQ2hyaXN0ZXIN Cj4+IA0KPj4gDQo+Pj4+DQo+Pj4+ID09PT09PT09PT09PT09PT09PT09PT09PQ0KPj4+Pg0KPj4+ PiBOaXRzOg0KPj4+Pg0KPj4+Pj4gSSB0b29rIGEgbG9vayBhdCB0aGUgZGlmZiBbNF0gYmV0d2Vl biB0aGlzIGFuZCA1MjQ1LCBidXQgdGhhdA0KPj4+Pj4gd2Fzbid0IHJlYWxseSB0aGF0IHVzZWZ1 bCwgc28gdGhpcyByZXZpZXcgaXMgYmFzZWQgb24gYSByZWFkIG9mIHRoZQ0KPj4+Pj4gZHJhZnQg d2l0aG91dCBjb21wYXJpbmcgaXQgdG8gNTI0NS4gQXBvbG9naWVzIGlmIHRoYXQgY2F1c2VzIG1l IHRvDQo+Pj4+PiBjb21tZW50IG9uIHRleHQgdGhhdCdzIHVuY2hhbmdlZCAtIGluIHN1Y2ggY2Fz ZXMsIEkgdGhpbmsgaXQncyBmaW5lDQo+Pj4+PiB0byBub3QgaGVlZCB0aG9zZSBwYXJ0aWN1bGFy IGNvbW1lbnRzLg0KPj4+Pj4NCj4+Pj4+IFs0XQ0KPj4+Pj4NCj4+Pj4+IA0KPj4+Pj5odHRwczov L3Rvb2xzLmlldGYub3JnL3JmY2RpZmY/dXJsMT1yZmM1MjQ1JnVybDI9ZHJhZnQtaWV0Zi1pY2Ut cmZjNTI0DQo+Pj4+PjViDQo+Pj4+PiBpcy0xNi50eHQNCj4+Pj4+DQo+Pj4+Pg0KPj4+Pj4NCj4+ PiAtIDIuMTogV2h5ICJvbmx5IFVEUCBzcGVjaWZpZWQgaGVyZSI/IERvZXMgdGhhdCBpbmNsdWRl IFFVSUMgd2hpY2ggaXMNCj4+Pj4+IFVEUC1iYXNlZCwgYnV0IG5vdCBVRFA/IEkgYXNzdW1lIHNv Lg0KPj4+Pg0KPj4+PiBUaGVyZSBpcyBhIHNlcGFyYXRlIHNwZWNpZmljYXRpb24sIFJGQyA2NTQ0 LCBmb3IgVENQIGJhc2VkDQo+Pj4+IGNhbmRpZGF0ZXMuDQo+Pj4+DQo+Pj4+IFJlZ2FyZGluZyBR VUlDLCBJIGRvbid0IGtub3cuIFFVSUMgd2Fzbid0IGRpc2N1c3NlZCBkdXJpbmcgdGhlIHdvcmss DQo+Pj4+IGJ1dCBob3cvaWYgdGhlIHByb2NlZHVyZXMgYWxzbyBhcHBseSB0byBRVUlDIHdpdGhv dXQgYW55DQo+Pj4+IG1vZGlmaWNhdGlvbnMgZXRjIEkgZG9uJ3Qga25vdy4NCj4+Pj4NCj4+Pj4+ IC0gMi4zOiBob3cgdGhlIGNvbnRyb2xsaW5nL2NvbnRyb2xsZWQgc3R1ZmYgd29ya3MgaXNuJ3Qg Y2xlYXIgZnJvbQ0KPj4+Pj4gdGhpcywgbm9yIGV2ZW4gKGFzIEkgd2FzIHJlYWRpbmcgaXQpIGlu IHNlY3Rpb24gNy4zLjEuMSAtIEkgd2Fzbid0DQo+Pj4+PiBjbGVhciBob3cgdGhlIHRpZS1icmVh a2VyIHZhbHVlIGlzIGluaXRpYWxpc2VkIHVudGlsIEkgZ290IHRvDQo+Pj4+PiAxNi4xLiBJbiBh bnkgY2FzZSBJIHRoaW5rIGEgYml0IG1vcmUgZXhwbGFuYXRvcnkgdGV4dCBpbiAyLjMgbWlnaHQN Cj4+Pj4+IGJlIGdvb2QuIChCdXQgaWYgaW1wbGVtZW50ZXJzIGhhdmVuJ3QgaGFkIGEgcHJvYmxl bSB3aXRoIHRoaXMsDQo+Pj4+PiBtYXliZSBpdCdzIGp1c3QgbWUuKQ0KPj4+Pg0KPj4+PiBJbiBn ZW5lcmFsLCBvbmUgb2YgdGhlIHRhc2tzIG9mIHRoZSBiaXMgd29yayB3YXMgdG8gKnNpbXBsaWZ5 Kg0KPj4+PiBzZWN0aW9uIDIsIGJlY2F1c2UgdGhlIHByZXZpb3VzIHZlcnNpb24gd2FzIHRvbyBk ZXRhaWxlZCBmb3INCj4+Pj4gbm9uLWltcGxlbWVudGVycyB3aG8ganVzdCB3YW50IHRvIGZpZ3Vy ZSBvdXQgd2hhdCBJQ0UgaXMgYWxsIGFib3V0DQo+Pj4+IChpbiBvcmRlciB0byAgYWN0dWFsbHkg aW1wbGVtZW50IElDRSwgcmVhZGluZyBzZWN0aW9uIDIgaXMgb2J2aW91c2x5DQo+Pj4+IG5vdCBl bm91Z2gpLiBGb3IgdGhhdCByZWFzb24sIG15IG9waW5pb24gd2FzIHRoYXQgc2VjdGlvbiAyIGRv ZXNuJ3QNCj4+Pj4gcmVhbGx5IG5lZWQgdG8gdGFsayBhYm91dCByb2xlIGNvbmZsaWN0cyBhbmQg dGllLWJyZWFrZXIgdmFsdWVzLCBhcw0KPj4+PiBpdCdzIG5vdCBlc3NlbnRpYWwgZm9yIGEgaGln aC1sZXZlbCBkZXNjcmlwdGlvbiBvZiBJQ0UuDQo+Pj4+DQo+Pj4+IC0tLQ0KPj4+Pg0KPj4+Pj4g LSA1LjI6ICJUaGUgcHJvY2VkdXJlcyBpbiB0aGlzIHNlY3Rpb24gaXMgY29tbW9uIGFjcm9zcyB0 aGUNCj4+Pj4+IGluaXRpYXRpbmcgYW5kIHJlc3BvbmRpbmcgYWdlbnRzLiIgcy9pcy9hcmUvIEkg Z3Vlc3M/DQo+Pj4+DQo+Pj4+IFllcy4gSSB3aWxsIGZpeCBhcyBzdWdnZXN0ZWQuDQo+Pj4+DQo+ Pj4+IC0tLQ0KPj4+Pg0KPj4+Pj4gLSA2LjEuMTogV2hhdCBpcyAiM1BDQyI/IFRoYXQgbm90ZSBj b3VsZCBtYXliZSBhbHNvIGRvIHdpdGggYQ0KPj4+Pj4gcmVmZXJlbmNlLCBhcyBJIGF0IGxlYXN0 IGRvbid0IGdldCB3aGF0IHlvdSdyZSB0cnlpbmcgdG8gdGVsbCBtZS4NCj4+Pj4+IEFoIC0gaXQn cyAzcmQgcGFydHkgY2FsbCBjb250cm9sIChtZW50aW9uZWQgaW4gNy4zLjEuMSkuDQo+Pj4+DQo+ Pj4+IEkgY2FuIHVzZSAiM1BDQyAoM3JkIFBhcnR5IENhbGwgQ29udHJvbCkiIGluIHNlY3Rpb24g Ni4xLjEuDQo+Pj4+DQo+Pj4+IEFzIHRoZSBzcGVjIGlzIHByb3RvY29sIGluZGVwZW5kZW50LCBJ IGRvbid0IHRoaW5rIHRoZXJlIGFyZSBhbnkNCj4+Pj4gcmVmZXJlbmNlcyB0aGF0IGNhbiBiZSBh ZGRlZC4NCj4+Pj4NCj4+Pj4gLS0tDQo+Pj4+DQo+Pj4+PiAtIDE2LjE6IEZvciBhIGdpdmVuIElD RSBzZXNzaW9uLCBhcmUgdGhlIHJhbmRvbSBudW1iZXJzIGluIHRoZQ0KPj4+Pj4gSUNFLUNPTlRS T0xMRUQgYW5kIElDRS1DT05UUk9MTElORyBhdHRyaWJ1dGVzIHNlbnQgYnkgdGhlIHNhbWUNCj4+ Pj4+IGFnZW50IHN1cHBvc2VkIHRvIGhhdmUgdGhlIHNhbWUgdmFsdWU/IEkgd2Fzbid0IGNsZWFy LiBJZiB0aGV5IGFyZQ0KPj4+Pj4gdGhlIHNhbWUsIEkgdW5kZXJzdGFuZCBob3cgdGllLWJyZWFr aW5nIGhhcHBlbnMuIElmIHRoZXkgY2FuDQo+Pj4+PiBkaWZmZXIsIEknbSBub3Qgc3VyZS4gKEJ1 dCBJIGRpZG4ndCBnbyBiYWNrIGFuZCByZS1yZWFkIDcuMy4xLjEsIHNvDQo+Pj4+PiBpdCBtYXkg YmUgb2sgZWl0aGVyIHdheTotKQ0KPj4+Pg0KPj4+PiBJdCBpcyBjb3ZlcmVkIGluIHRoZSAybmQg cGFyYWdyYXBoIG9mIHNlY3Rpb24gNy4yLjUuMSwgd2hpY2ggc2F5cw0KPj4+PiB0aGF0IHRoZSBh Z2VudCBNQVkgY2hhbmdlIHRoZSB2YWx1ZSB3aGVuIGl0IHN3aXRjaGVzIHJvbGUuDQo+Pj4+DQo+ Pj4+PiBJbiBhbnkgY2FzZSBzYXlpbmcgInJlZmVycmVkIHRvIGFzIHRoZSB0aWUtYnJlYWtlciB2 YWx1ZSIgdHdpY2UNCj4+Pj4+IHNlZW1zIG9kZC4NCj4+Pj4NCj4+Pj4gSSdsbCByZW1vdmUgaXQg ZnJvbSB0aGUgSUNFLUNPTlRST0xMSU5HIGRlZmluaXRpb24uDQo+Pj4+DQo+Pj4+IC0tLQ0KPj4+ Pg0KPj4+Pj4gLSAxNi4xOiAobWVnYS1tZWdhLW5pdDotKSB0aGUgZmFjdCB0aGF0IHRpZS1icmVh a2VyIGlzIHNwbGl0IG92ZXINCj4+Pj4+IGEgbGluZS1icmVha2VyIGhlcmUgaXMgd2h5IEkgZGlk bid0IGZpbmQgdGhpcyB3aGVuIEkgd2FzIHJlYWRpbmcNCj4+Pj4+IDIuMy83LjMuMS4xIC0gbWF5 YmUgdHdlYWsgdGhlIHdvcmRzIHNvIGEgZ3JlcCB3aWxsIGZpbmQgaXQ/KQ0KPj4+Pg0KPj4+PiBH b29kIGNhdGNoLiBJJ2xsIGZpeCBpdC4NCj4+Pj4NCj4+Pj4gSXQgd291bGQgYmUgcmVhbGx5IGNv b2wgaWYgc2VhcmNoIGZ1bmN0aW9ucyBjb3VsZCBkaXNjYXJkIGxpbmUtYnJlYWtzDQo+Pj4+IHdo ZW4gc2VhcmNoaW5nIGZvciBzdHJpbmdzLg0KPj4+Pg0KPj4+PiAtLS0NCj4+Pj4NCj4+Pj4+IC0g MTc6ICJsb29raW5nIHRvIGRlcGxveSBJQ0UiIGlzIGEgYml0IGNvbmZ1c2luZyAtIGRvIHlvdSBt ZWFuDQo+Pj4+PiAibG9va2luZyB0byBiZSBuaWNlIHRvIElDRSI/IE15IGFzc3VtcHRpb24gaXMg dGhhdCBlbmRwb2ludHMgZGVwbG95DQo+Pj4+PiBJQ0UgYWdlbnRzIGJ1dCBuZXR3b3JrIG9wZXJh dG9ycyBkb24ndCwgdGhvdWdoIHRoZXkgbWlnaHQgZGVwbG95DQo+Pj4+PiBTVFVOL1RVUk4gc2Vy dmVycyBJIGd1ZXNzLiBCdXQgbWF5YmUgSSdtIHRoaW5raW5nIHRvbyBtdWNoIGFib3V0DQo+Pj4+ PiBXZWJSVEMgdGhlcmUuDQo+Pj4+DQo+Pj4+IFBlcmhhcHMgc29tZXRoaW5nIGxpa2U6DQo+Pj4+ DQo+Pj4+ICJUaGlzIHNlY3Rpb24gZGlzY3Vzc2VzIGlzc3VlcyByZWxldmFudCB0byBvcGVyYXRv cnMgb3BlcmF0aW5nDQo+Pj4+IG5ldHdvcmtzIHdoZXJlIElDRSB3aWxsIGJlIHVzZWQgYnkgZW5k cG9pbnRzLiINCj4+Pj4NCj4+Pj4gLS0tDQo+Pj4+DQo+Pj4+PiAtIDE4OiBJIHdvbmRlcmVkIGlm IHRoaXMgaXMgc3RpbGwgbmVlZGVkLCBnaXZlbiB0aGF0IDUyNDUgYWxyZWFkeQ0KPj4+Pj4gc2Fp ZCBpdCAoSSBkaWRuJ3QgY2hlY2sgaWYgdGhlIHRleHQgaGFzIGJlZW4gdXBkYXRlZCkuIFNheWlu ZyB0aGlzDQo+Pj4+PiBvbmNlIHdvdWxkIHNlZW0gc3VmZmljaWVudCB0byBtZSBhbnl3YXkuIEkg Z3Vlc3MgbGVhdmluZyBpdCBpbiBpcw0KPj4+Pj4gdGhlIGVhc2llciBwYXRoLg0KPj4+Pg0KPj4+ PiBJJ2xsIGxlYXZlIGl0IDopDQo+Pj4+DQo+Pj4+IC0tLQ0KPj4+Pg0KPj4+Pj4gLSAxOTogcy9E TlMtU0VDL0ROU1NFQy8gd291bGQgYmUgbW9yZSBjb21tb24NCj4+Pj4NCj4+Pj4gSSB3aWxsIGZp eCBhcyBzdWdnZXN0ZWQuDQo+Pj4+DQo+Pj4+IC0tLQ0KPj4+Pg0KPj4+Pj4gLSAxOS40LjE6IDFz dCBzZW50ZW5jZSBpZiBtaXNzaW5nIGEgIlQiIC0gcy9oZS9UaGUvDQo+Pj4+DQo+Pj4+IEkgd2ls bCBmaXggYXMgc3VnZ2VzdGVkLg0KPj4+Pg0KPj4+PiAtLS0NCj4+Pj4NCj4+Pj4gUmVnYXJkcywN Cj4+Pj4NCj4+Pj4gQ2hyaXN0ZXINCj4+Pj4NCj4+Pg0KPj4+IC0tIA0KPj4+IFBHUCBrZXkgY2hh bmdlIHRpbWUgZm9yIG1lLg0KPj4+IE5ldy1JRCA3QjE3MkJFQTsgb2xkLUlEIDgwNUY4REEyIGV4 cGlyZXMgSmFuIDI0IDIwMTguDQo+Pj4gTmV3V2l0aE9sZCBzaWdzIGluIGtleXNlcnZlcnMuDQo+ Pj4gU29ycnkgaWYgdGhhdCBtdWNrcyBzb21ldGhpbmcgdXA7LSkNCj4+IA0KPj4gDQo+DQo+LS0g DQo+UEdQIGtleSBjaGFuZ2UgdGltZSBmb3IgbWUuDQo+TmV3LUlEIDdCMTcyQkVBOyBvbGQtSUQg ODA1RjhEQTIgZXhwaXJlcyBKYW4gMjQgMjAxOC4NCj5OZXdXaXRoT2xkIHNpZ3MgaW4ga2V5c2Vy dmVycy4NCj5Tb3JyeSBpZiB0aGF0IG11Y2tzIHNvbWV0aGluZyB1cDstKQ0KDQo= From nobody Wed Jan 31 19:01:13 2018 Return-Path: X-Original-To: secdir@ietf.org Delivered-To: secdir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 6FDE7127201 for ; Wed, 31 Jan 2018 19:01:11 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit From: Tero Kivinen To: X-Test-IDTracker: no X-IETF-IDTracker: 6.71.0 Auto-Submitted: auto-generated Precedence: bulk Reply-to: secdir-secratary@mit.edu Message-ID: <151745407145.7831.9217891553509910086.idtracker@ietfa.amsl.com> Date: Wed, 31 Jan 2018 19:01:11 -0800 Archived-At: Subject: [secdir] Assignments X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.22 List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 01 Feb 2018 03:01:11 -0000 Review instructions and related resources are at: http://tools.ietf.org/area/sec/trac/wiki/SecDirReview For telechat 2018-02-08 Reviewer LC end Draft Derek Atkins 2018-01-31 draft-ietf-bier-mvpn-09 Donald Eastlake 2018-01-31 draft-farrel-sfc-convent-05 Ólafur Guðmundsson 2018-02-07 draft-ietf-tls-dnssec-chain-extension-06 Steve Hanna 2018-02-05 draft-ietf-trill-ecn-support-04 Dan Harkins 2018-02-05 draft-ietf-trill-address-flush-05 Brian Weis R2018-01-26 draft-ietf-idr-bgp-prefix-sid-11 Taylor Yu 2018-01-31 draft-ietf-rtgwg-lne-model-05 For telechat 2018-02-22 Reviewer LC end Draft Tobias Gondrom None draft-ietf-sacm-nea-swima-patnc-01 Leif Johansson None draft-ietf-nvo3-hpvr2nve-cp-req-13 Benjamin Kaduk 2018-02-14 draft-ietf-rtgwg-backoff-algo-07 Scott Kelly 2018-02-09 draft-ietf-bess-fat-pw-bgp-03 Stephen Kent 2018-02-09 draft-ietf-bess-evpn-usage-07 Tero Kivinen 2018-02-09 draft-ietf-bess-dci-evpn-overlay-07 For telechat 2018-03-08 Reviewer LC end Draft Daniel Gillmor None draft-gutmann-scep-08 Last calls: Reviewer LC end Draft John Bradley None draft-ietf-acme-acme-09 Christian Huitema None draft-ietf-bfd-yang-09 Charlie Kaufman 2018-02-14 draft-ietf-mmusic-sdp-bundle-negotiation-48 Russ Mundy 2017-09-14 draft-spinosa-urn-lex-12 Early review requests: Reviewer Due Draft Daniel Franke 2018-01-31 draft-ietf-intarea-provisioning-domains-00 Ólafur Guðmundsson 2018-01-09 draft-ietf-opsawg-nat-yang-09 Next in the reviewer rotation: Watson Ladd Ben Laurie Barry Leiba Chris Lonvick David Mandelberg Catherine Meadows Alexey Melnikov Daniel Migault Matthew Miller Adam Montville