From rbonica@juniper.net Thu Oct 4 05:47:41 2012 Return-Path: X-Original-To: wpkops@ietfa.amsl.com Delivered-To: wpkops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6C53921F864D for ; Thu, 4 Oct 2012 05:47:41 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -106.599 X-Spam-Level: X-Spam-Status: No, score=-106.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2fG71THq3yBD for ; Thu, 4 Oct 2012 05:47:40 -0700 (PDT) Received: from exprod7og102.obsmtp.com (exprod7og102.obsmtp.com [64.18.2.157]) by ietfa.amsl.com (Postfix) with ESMTP id 892EF21F86A4 for ; Thu, 4 Oct 2012 05:47:35 -0700 (PDT) Received: from P-EMHUB01-HQ.jnpr.net ([66.129.224.36]) (using TLSv1) by exprod7ob102.postini.com ([64.18.6.12]) with SMTP ID DSNKUG2FZS+UNWTVnM2kTuTlBrBmEGPGhSJA@postini.com; Thu, 04 Oct 2012 05:47:35 PDT Received: from p-emfe02-wf.jnpr.net (172.28.145.25) by P-EMHUB01-HQ.jnpr.net (172.24.192.35) with Microsoft SMTP Server (TLS) id 8.3.213.0; Thu, 4 Oct 2012 05:45:46 -0700 Received: from EMBX01-WF.jnpr.net ([fe80::1914:3299:33d9:e43b]) by p-emfe02-wf.jnpr.net ([fe80::c126:c633:d2dc:8090%11]) with mapi; Thu, 4 Oct 2012 08:45:46 -0400 From: Ronald Bonica To: "wpkops@ietf.org" Date: Thu, 4 Oct 2012 08:45:45 -0400 Thread-Topic: BoF Request Thread-Index: Ac2g9z4TUnxbxeZIQsOUDcFl9qeIcw== Message-ID: <13205C286662DE4387D9AF3AC30EF456D7838E930E@EMBX01-WF.jnpr.net> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Subject: [wpkops] BoF Request X-BeenThere: wpkops@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 04 Oct 2012 12:47:41 -0000 Folks, By now, most of you already know that your BoF request has been approved. T= he next steps are for the chairs to: - solicit presentations - post an agenda -------------------------- Ron Bonica vcard: www.bonica.org/ron/ronbonica.vcf From tim.moses@entrust.com Thu Oct 4 08:09:44 2012 Return-Path: X-Original-To: wpkops@ietfa.amsl.com Delivered-To: wpkops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 489A121F85FC for ; Thu, 4 Oct 2012 08:09:44 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.353 X-Spam-Level: X-Spam-Status: No, score=-2.353 tagged_above=-999 required=5 tests=[AWL=0.245, BAYES_00=-2.599, HTML_MESSAGE=0.001] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Q44iEcyfLTUO for ; Thu, 4 Oct 2012 08:09:42 -0700 (PDT) Received: from ipedge2.entrust.com (ipedge2.entrust.com [216.191.252.25]) by ietfa.amsl.com (Postfix) with ESMTP id 5689D21F8539 for ; Thu, 4 Oct 2012 08:09:42 -0700 (PDT) X-IronPort-AV: E=Sophos;i="4.80,535,1344225600"; d="scan'208,217";a="2109022" Received: from unknown (HELO SOTTEXCHCAS2.corp.ad.entrust.com) ([10.4.51.224]) by ipedge2.entrust.com with ESMTP; 04 Oct 2012 11:09:27 -0400 Received: from SOTTEXCH10.corp.ad.entrust.com ([fe80::389b:f45b:7ea1:79b7]) by SOTTEXCHCAS2.corp.ad.entrust.com ([::1]) with mapi id 14.02.0318.001; Thu, 4 Oct 2012 11:09:27 -0400 From: Tim Moses To: 'Carl Wallace' Thread-Topic: [wpkops] Third draft charter proposal Thread-Index: AQHNlQaFt+5+AKCyQmSih2MU3O89AZepVnCg Date: Thu, 4 Oct 2012 15:09:27 +0000 Message-ID: <5B68A271B9C97046963CB6A5B8D6F62C3A595D11@SOTTEXCH10.corp.ad.entrust.com> References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.4.160.88] Content-Type: multipart/alternative; boundary="_000_5B68A271B9C97046963CB6A5B8D6F62C3A595D11SOTTEXCH10corpa_" MIME-Version: 1.0 Cc: "wpkops@ietf.org" Subject: Re: [wpkops] Third draft charter proposal X-BeenThere: wpkops@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 04 Oct 2012 15:09:44 -0000 --_000_5B68A271B9C97046963CB6A5B8D6F62C3A595D11SOTTEXCH10corpa_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi Carl. I am just taking a crack at updating the draft charter. Can you = provide some examples of "problems created by reuse"? That, I think, will = be important for dealing with scope questions when they come up. Thanks a = lot. All the best. Tim. From: Carl Wallace [mailto:carl@redhoundsoftware.com] Sent: Monday, September 17, 2012 2:59 PM To: Tim Moses; wpkops@ietf.org Subject: Re: [wpkops] Third draft charter proposal From: Tim Moses > Date: Saturday, September 15, 2012 12:00 PM To: "wpkops@ietf.org" > Subject: [wpkops] Third draft charter proposal Additionally, a number of applications (such as client authentication, docu= ment signing, code signing, and email) may use the same trust anchors and c= ertificate-handling libraries as the ones used for server authentication on= the Web. Nevertheless, they may use the results in a way that is visibly = different from the way in which they are used for server authentication. I think the concern is that reused mechanisms can interfere with each other= , not that results are used differently. While these applications are considered outside the scope of this working g= roup, deliverables should (wherever practical within the available expertis= e and time) identify other applications that exhibit identical behavior and= identify the implications of that behavior where they differ from those fo= r server authentication. I don't understand the reference to identical behavior. I suggest the foll= owing: Additionally, a number of applications (such as client authentication, docu= ment signing, code signing, and email) use the same trust anchors and certi= ficate processing mechanisms as used for server authentication on the Web. = This reuse creates problems in some situations. While these applications = are outside the scope of this working group, deliverables should (wherever = practical within the available expertise and time) identify mechanisms that= are reused by other applications and identify the implications of that reu= se. --_000_5B68A271B9C97046963CB6A5B8D6F62C3A595D11SOTTEXCH10corpa_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi Carl.  I am ju= st taking a crack at updating the draft charter.  Can you provide some= examples of “problems created by reuse”?  That, I think, = will be important for dealing with scope questions when they come up.  Thanks a lot.  All the best.  Tim.

 

From: Carl Wal= lace [mailto:carl@redhoundsoftware.com]
Sent: Monday, September 17, 2012 2:59 PM
To: Tim Moses; wpkops@ietf.org
Subject: Re: [wpkops] Third draft charter proposal=

 

&n= bsp;

From: Tim Moses <tim.moses@entrust.com>
Date: Saturday, September 15, 2012 12:00 PM
To: "wpkops@ietf.org&quo= t; <wpkops@ietf.org>
Subject: [wpkops] Third draft charter proposal

&n= bsp;

<snip><= /span>

Additionally, a number of applications (such a= s client authentication, document signing, code signing, and email) may use= the same trust anchors and certificate-handling libraries as the ones used for server authentication on the Web.  Nev= ertheless, they may use the results in a way that is visibly different from= the way in which they are used for server authentication. 

&n= bsp;

I think= the concern is that reused mechanisms can interfere with each other, not t= hat results are used differently.

&n= bsp;

While these applications are considered outsid= e the scope of this working group, deliverables should (wherever practical = within the available expertise and time) identify other applications that exhibit identical behavior and identify the implic= ations of that behavior where they differ from those for server authenticat= ion.

&n= bsp;

I don't= understand the reference to identical behavior.  I suggest the follow= ing:

&n= bsp;

Additionally, a number = of applications (such as client authentication, document signing, code sign= ing, and email) use the same trust anchors and certificate processing mechanisms as used for server authentication on the= Web.  This reuse creates problems in some situations.  While the= se applications are outside the scope of this working group, deliverables s= hould (wherever practical within the available expertise and time) identify mechanisms that are reused by other applicati= ons and identify the implications of that reuse.

&n= bsp;

&n= bsp;

--_000_5B68A271B9C97046963CB6A5B8D6F62C3A595D11SOTTEXCH10corpa_-- From carl@redhoundsoftware.com Thu Oct 4 08:48:37 2012 Return-Path: X-Original-To: wpkops@ietfa.amsl.com Delivered-To: wpkops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6987921F8610 for ; Thu, 4 Oct 2012 08:48:37 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.418 X-Spam-Level: X-Spam-Status: No, score=-4.418 tagged_above=-999 required=5 tests=[AWL=-2.216, BAYES_00=-2.599, HTML_MESSAGE=0.001, MIME_QP_LONG_LINE=1.396, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UVSfNYpX2OKe for ; Thu, 4 Oct 2012 08:48:35 -0700 (PDT) Received: from mail-qc0-f172.google.com (mail-qc0-f172.google.com [209.85.216.172]) by ietfa.amsl.com (Postfix) with ESMTP id 0077C21F8504 for ; Thu, 4 Oct 2012 08:48:34 -0700 (PDT) Received: by mail-qc0-f172.google.com with SMTP id c10so597104qca.31 for ; Thu, 04 Oct 2012 08:48:34 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=user-agent:date:subject:from:to:cc:message-id:thread-topic :in-reply-to:mime-version:content-type:x-gm-message-state; bh=K8PEivYAJBJahJ9nCVA3jjnBp7aZdTbCCnCM7nCY/dA=; b=Nl5UqGIlC6s7BU0ytI6bhLdRoxgrpzDjHd2j06+/eN+7oyJmlvETerrwszRof1IfBx 0Y/g0ynEucBtzrJb/7dE+dvvIT5OhfEEIoiJrbHbdBpO57tJ2AVU1tdMT+Z8UAafDee0 cUvl4jNN2+CK6v4RqHP0G0AQxbuRQjq6jRHysEv5DwIYG0zww9HayHNlF6hkMXN2i7sr dd0W69pFCAOrdmB2hBGcT26/VSGO/X3eMW3Jqdz9XPGOymJtpY+/coPTvwFv1lSxk1gw BGApXkvWMNM3kkyY9IAWcG08uJilZ8dM6fVDvIbtMC9tB+oUX4czL3Fbysopdth2EaHk JUBQ== Received: by 10.49.132.65 with SMTP id os1mr19601114qeb.7.1349365714167; Thu, 04 Oct 2012 08:48:34 -0700 (PDT) Received: from [192.168.2.8] (pool-72-66-83-116.washdc.fios.verizon.net. [72.66.83.116]) by mx.google.com with ESMTPS id gw9sm7484887qab.4.2012.10.04.08.48.30 (version=SSLv3 cipher=OTHER); Thu, 04 Oct 2012 08:48:32 -0700 (PDT) User-Agent: Microsoft-MacOutlook/14.2.4.120824 Date: Thu, 04 Oct 2012 11:48:23 -0400 From: Carl Wallace To: Tim Moses Message-ID: Thread-Topic: [wpkops] Third draft charter proposal In-Reply-To: <5B68A271B9C97046963CB6A5B8D6F62C3A595D11@SOTTEXCH10.corp.ad.entrust.com> Mime-version: 1.0 Content-type: multipart/alternative; boundary="B_3432196113_1245578" X-Gm-Message-State: ALoCoQnVTEzbdxZGmCN3mgwZYCuI6yiA1sMUdUTTsHuiTzp9QI+4QqlOfX25ktGm6Tp3OuBZmMEw Cc: "wpkops@ietf.org" Subject: Re: [wpkops] Third draft charter proposal X-BeenThere: wpkops@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 04 Oct 2012 15:48:37 -0000 > This message is in MIME format. Since your mail reader does not understand this format, some or all of this message may not be legible. --B_3432196113_1245578 Content-type: text/plain; charset="ISO-8859-1" Content-transfer-encoding: quoted-printable A few items come to mind. The CAPI TA store is reused by many applications. The need to have it full of more or less unconstrained trust anchors to avoid "breaking the internet" when browsing leaves users of othe= r applications (email, doc signing, etc) trusting an unnecessarily large and unintended set of PKIs. Problems can arise when reusing certificate stores= , including sluggish performance or misbehavior (for example, client authentication is not possible in some cases without cleaning up certificates in a shared certificate store). Allocation of privileges to reused trust anchors can cause problems too, such as settings that enable TAs to terminate certification paths used to validate locally trusted OCSP responses. The settings may be appropriate in some scenarios, but not for global, multi-application use. I'm not sure my examples should be used to answer scope questions. More generally, reuse of documented mechanisms should be considered and noted as this work proceeds. From: Tim Moses Date: Thursday, October 4, 2012 11:09 AM To: Carl Wallace Cc: "wpkops@ietf.org" Subject: RE: [wpkops] Third draft charter proposal > Hi Carl. I am just taking a crack at updating the draft charter. Can yo= u > provide some examples of =B3problems created by reuse=B2? That, I think, wil= l be > important for dealing with scope questions when they come up. Thanks a l= ot. > All the best. Tim. > =20 >=20 > From: Carl Wallace [mailto:carl@redhoundsoftware.com] > Sent: Monday, September 17, 2012 2:59 PM > To: Tim Moses; wpkops@ietf.org > Subject: Re: [wpkops] Third draft charter proposal > =20 >=20 > =20 >=20 > From: Tim Moses > Date: Saturday, September 15, 2012 12:00 PM > To: "wpkops@ietf.org" > Subject: [wpkops] Third draft charter proposal >=20 > =20 >>=20 >> >>=20 >> Additionally, a number of applications (such as client authentication, >> document signing, code signing, and email) may use the same trust anchor= s and >> certificate-handling libraries as the ones used for server authenticatio= n on >> the Web. Nevertheless, they may use the results in a way that is visibl= y >> different from the way in which they are used for server authentication. >=20 > =20 >=20 > I think the concern is that reused mechanisms can interfere with each oth= er, > not that results are used differently. >=20 > =20 >>=20 >> While these applications are considered outside the scope of this workin= g >> group, deliverables should (wherever practical within the available expe= rtise >> and time) identify other applications that exhibit identical behavior an= d >> identify the implications of that behavior where they differ from those = for >> server authentication. >=20 > =20 >=20 > I don't understand the reference to identical behavior. I suggest the > following: >=20 > =20 >=20 > Additionally, a number of applications (such as client authentication, > document signing, code signing, and email) use the same trust anchors and > certificate processing mechanisms as used for server authentication on th= e > Web. This reuse creates problems in some situations. While these > applications are outside the scope of this working group, deliverables sh= ould > (wherever practical within the available expertise and time) identify > mechanisms that are reused by other applications and identify the implica= tions > of that reuse. >=20 > =20 >=20 > =20 --B_3432196113_1245578 Content-type: text/html; charset="ISO-8859-1" Content-transfer-encoding: quoted-printable
A few items come to mind. &n= bsp; The CAPI TA store is reused by many applications.  The need to hav= e it full of more or less unconstrained trust anchors to avoid "breaking the= internet" when browsing leaves users of other applications (email, doc sign= ing, etc) trusting an unnecessarily large and unintended set of PKIs.  = Problems can arise when reusing certificate stores, including sluggish perfo= rmance or misbehavior (for example, client authentication is not possible in= some cases without cleaning up certificates in a shared certificate store).=  Allocation of privileges to reused trust anchors can cause problems t= oo, such as settings that enable TAs to terminate certification paths used t= o validate locally trusted OCSP responses.  The settings may be appropr= iate in some scenarios, but not for global, multi-application use.

I'm not sure my examples should be used to answer scope ques= tions.  More generally, reuse of documented mechanisms should be consid= ered and noted as this work proceeds.  

From: Tim Moses <tim.moses@entrust.com>
Date= : Thursday, October 4, 2012 11:09 AM
To: Carl Wallace <c= arl@redhoundsoftware.com>
Cc: "wpkops@ietf.org" <wpkops@ietf.org>
Subject: RE: [wpkops] Third draft charter proposal

Hi Carl.  I am just taking a crack at updating the draft charter.&nb= sp; Can you provide some examples of “problems created by reuse”= ?  That, I think, will be important for dealing with scope questions wh= en they come up.  Thanks a lot.  All the best.  Tim.

 <= /p>

From: Carl Wallace [mailto:carl@redhoundsoftware.com]
Sent: Monday, September 17, 2012 2:59 PM
To: Tim Moses= ; wpkops@ietf.org
Subject: Re= : [wpkops] Third draft charter proposal

 

 

From: Tim Moses <tim.moses@= entrust.com>
Date: Saturday, September 15, 2012 12:00 PMTo: "wpkops@ietf.org" <wpkops@ietf.org>
Subject: [wpko= ps] Third draft charter proposal

 

<snip>

Additionally, a number of applications (such= as client authentication, document signing, code signing, and email) may us= e the same trust anchors and certificate-handling libraries as the ones used for server authentication on the Web.  Nev= ertheless, they may use the results in a way that is visibly different from = the way in which they are used for server authentication. 

 

I think the concern is that reused mechanisms can i= nterfere with each other, not that results are used differently.<= /span>

 

While these applications are considered outside the scope of this = working group, deliverables should (wherever practical within the available = expertise and time) identify other applications that exhibit identical behavior and identify the implic= ations of that behavior where they differ from those for server authenticati= on.

=  

I don't understand the reference to identical beh= avior.  I suggest the following:

 <= /span>

Additionally,= a number of applications (such as client authentication, document signing, = code signing, and email) use the same trust anchors and certificate processing mechanisms as used for server authentication on the= Web.  This reuse creates problems in some situations.  While thes= e applications are outside the scope of this working group, deliverables sho= uld (wherever practical within the available expertise and time) identify mechanisms that are reused by other applicati= ons and identify the implications of that reuse.

=

&n= bsp;

 

 --B_3432196113_1245578-- From Jeff.Hodges@KingsMountain.com Mon Oct 8 17:42:42 2012 Return-Path: X-Original-To: wpkops@ietfa.amsl.com Delivered-To: wpkops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E86DB1F0C88 for ; Mon, 8 Oct 2012 17:42:42 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -100.781 X-Spam-Level: X-Spam-Status: No, score=-100.781 tagged_above=-999 required=5 tests=[AWL=-0.286, BAYES_00=-2.599, FH_RELAY_NODNS=1.451, HELO_MISMATCH_COM=0.553, RDNS_NONE=0.1, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aWaUp0-o0sQU for ; Mon, 8 Oct 2012 17:42:42 -0700 (PDT) Received: from oproxy7-pub.bluehost.com (oproxy7.bluehost.com [IPv6:2605:dc00:100:2::a7]) by ietfa.amsl.com (Postfix) with SMTP id 4B20A1F0C4A for ; Mon, 8 Oct 2012 17:42:42 -0700 (PDT) Received: (qmail 30959 invoked by uid 0); 9 Oct 2012 00:42:41 -0000 Received: from unknown (HELO box514.bluehost.com) (74.220.219.114) by oproxy7.bluehost.com with SMTP; 9 Oct 2012 00:42:41 -0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=kingsmountain.com; s=default; h=Content-Transfer-Encoding:Content-Type:Subject:To:MIME-Version:From:Date:Message-ID; bh=83UZx3aEPcKEk/3JLde3nGWmWG1W0gRvJHjCu1kPNKM=; b=LSlsC9em9GLBcx6c5TMybVCJH+Wvvg6sevaFd2z5v2Xw3mWvs0BdJf0NiIRa4X+TkCuUc3fv2xh1BVxC/LjnNl+Ei5IJ7ltn2PJggZGOFnFwCXVb8Avv2lKwYHNxrVnD; Received: from [24.4.122.173] (port=48779 helo=[192.168.11.12]) by box514.bluehost.com with esmtpsa (TLSv1:CAMELLIA256-SHA:256) (Exim 4.76) (envelope-from ) id 1TLNuD-00050G-4G for wpkops@ietf.org; Mon, 08 Oct 2012 18:42:41 -0600 Message-ID: <50737300.30708@KingsMountain.com> Date: Mon, 08 Oct 2012 17:42:40 -0700 From: =JeffH User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:15.0) Gecko/20120912 Thunderbird/15.0.1 MIME-Version: 1.0 To: wpkops@ietf.org Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Identified-User: {11025:box514.bluehost.com:kingsmou:kingsmountain.com} {sentby:smtp auth 24.4.122.173 authed with jeff.hodges+kingsmountain.com} Subject: [wpkops] fyi: CA/Browser Forum (CABF) Organisational Reform vote results X-BeenThere: wpkops@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Oct 2012 00:42:43 -0000 Of possible interest.. Subject: [saag] fyi: CA/Browser Forum (CABF) Organisational Reform vote results From: =JeffH Date: Mon, 08 Oct 2012 11:37:41 -0700 To: IETF Security Area Advisory Group , IETF PKIX WG Greetings again, As I'd pointed out earlier this year [1][2], the CA/Browser Forum (CABF) was entertaining organisational reform proposals. It recently completed its final voting exercise [3] and decided on a governance reform proposal [4]. Also, the CABF has created a publicly readable email distribution list [5]. One overall assessment of the reform voting results is here.. Certificate Authorities asked to step up for Internet security; CABF takes a step back instead. (5-Oct-2012) =JeffH [1] Re: [saag] fyi: CA/Browser Forum Announces Organizational Reform Working Group https://www.ietf.org/mail-archive/web/saag/current/msg03585.html [2] [saag] fyi: CA/Browser Forum (CABF) reform voting (corrected) https://www.ietf.org/mail-archive/web/saag/current/msg04015.html [3] [cabfpub] Tally Results on Ballot 90 https://cabforum.org/pipermail/public/2012-September/000544.html [4] https://www.cabforum.org/governance/Trend_Micro_Governance_Proposal.pdf [5] https://cabforum.org/mailman/listinfo/public Note: only CABF members may post to this list. Others may subscribe and receive list traffic. The archives are publicly readable. From tim.moses@entrust.com Wed Oct 17 11:13:54 2012 Return-Path: X-Original-To: wpkops@ietfa.amsl.com Delivered-To: wpkops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8B5AA21F8435 for ; Wed, 17 Oct 2012 11:13:54 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.375 X-Spam-Level: X-Spam-Status: No, score=-2.375 tagged_above=-999 required=5 tests=[AWL=0.223, BAYES_00=-2.599, HTML_MESSAGE=0.001] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QzPiJEVnM9gQ for ; Wed, 17 Oct 2012 11:13:49 -0700 (PDT) Received: from ipedge2.entrust.com (ipedge2.entrust.com [216.191.252.25]) by ietfa.amsl.com (Postfix) with ESMTP id 4AF4821F84CE for ; Wed, 17 Oct 2012 11:13:49 -0700 (PDT) X-IronPort-AV: E=Sophos;i="4.80,602,1344225600"; d="scan'208,217";a="2199536" Received: from unknown (HELO sottexchcas1.corp.ad.entrust.com) ([10.4.51.93]) by ipedge2.entrust.com with ESMTP; 17 Oct 2012 14:13:48 -0400 Received: from SOTTEXCH10.corp.ad.entrust.com ([fe80::389b:f45b:7ea1:79b7]) by sottexchcas1.corp.ad.entrust.com ([::1]) with mapi id 14.02.0318.001; Wed, 17 Oct 2012 14:13:48 -0400 From: Tim Moses To: "wpkops@ietf.org" Thread-Topic: Support for this activity from product developers? Thread-Index: Ac2skyYC5dyuL3oPS0SUNgXGzcUU8g== Date: Wed, 17 Oct 2012 18:13:46 +0000 Message-ID: <5B68A271B9C97046963CB6A5B8D6F62C3A5A1ABE@SOTTEXCH10.corp.ad.entrust.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.4.160.88] Content-Type: multipart/alternative; boundary="_000_5B68A271B9C97046963CB6A5B8D6F62C3A5A1ABESOTTEXCH10corpa_" MIME-Version: 1.0 Subject: [wpkops] Support for this activity from product developers? X-BeenThere: wpkops@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 17 Oct 2012 18:13:54 -0000 --_000_5B68A271B9C97046963CB6A5B8D6F62C3A5A1ABESOTTEXCH10corpa_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Colleagues - One of the premises of this initiative (perhaps the main premi= se) was that product developers would be willing to be governed by the resu= lts of an industry consensus process when it comes to handling certificates= and acting on the results of certificate validation. That is, that develo= pers would see value in claiming conformance to any resulting standard. Fo= r instance, suppose consensus were to emerge that certain certificate valid= ation failures should be "fatal" (i.e. the associated application should re= fuse to perform the requested operation), would application developers be w= illing to modify their products accordingly? Nothing in the discussions on the list to date confirms or refutes the prem= ise. I think it would be useful to hear from developers of relevant produc= ts how they would view the outcome of this type of IETF initiative. Thanks a lot. All the best. Tim. T: +1 613 270 3183 --_000_5B68A271B9C97046963CB6A5B8D6F62C3A5A1ABESOTTEXCH10corpa_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Colleagues – One of the premises of this initi= ative (perhaps the main premise) was that product developers would be willi= ng to be governed by the results of an industry consensus process when it c= omes to handling certificates and acting on the results of certificate validation.  That is, that developers w= ould see value in claiming conformance to any resulting standard.  For= instance, suppose consensus were to emerge that certain certificate valida= tion failures should be “fatal” (i.e. the associated application should refuse to perform the requested operation), = would application developers be willing to modify their products accordingl= y?

 

Nothing in the discussions on the list to date confi= rms or refutes the premise.  I think it would be useful to hear from d= evelopers of relevant products how they would view the outcome of this type= of IETF initiative.

 

Thanks a lot.  All the best.  Tim.

 

T: +1 613 270 3183

 

--_000_5B68A271B9C97046963CB6A5B8D6F62C3A5A1ABESOTTEXCH10corpa_-- From ryan-ietf@sleevi.com Wed Oct 17 11:42:15 2012 Return-Path: X-Original-To: wpkops@ietfa.amsl.com Delivered-To: wpkops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7DE7921F8525 for ; Wed, 17 Oct 2012 11:42:15 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FtqoY1n-5deO for ; Wed, 17 Oct 2012 11:42:14 -0700 (PDT) Received: from homiemail-a29.g.dreamhost.com (caiajhbdcaid.dreamhost.com [208.97.132.83]) by ietfa.amsl.com (Postfix) with ESMTP id C0EAB21F84EA for ; Wed, 17 Oct 2012 11:42:14 -0700 (PDT) Received: from homiemail-a29.g.dreamhost.com (localhost [127.0.0.1]) by homiemail-a29.g.dreamhost.com (Postfix) with ESMTP id 5C2AE674078; Wed, 17 Oct 2012 11:42:14 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sleevi.com; h=message-id :in-reply-to:references:date:subject:from:to:cc:reply-to :mime-version:content-type:content-transfer-encoding; s= sleevi.com; bh=+QWkPRgSPPY5NKRsnUF6Gba4ey8=; b=tMMUkSFyg71vAcC4B VyqM/yptv1+eiXmSRfY1ajdX9VynQeLsruFhiwizBexrGCeXzYlwnRal2aHejcmj NjM+t3n9kLGWrgeaOpXt3l27ACrqbus1NbZrkk0dAP04bd14c15BaGioxTu5K8WR Eyk4xV6FT8fUnTHj9QLcs7qCHs= Received: from webmail.dreamhost.com (caiajhbihbdd.dreamhost.com [208.97.187.133]) (Authenticated sender: ryan@sleevi.com) by homiemail-a29.g.dreamhost.com (Postfix) with ESMTPA id 2209167406A; Wed, 17 Oct 2012 11:42:14 -0700 (PDT) Received: from 173.8.157.162 (proxying for 173.8.157.162) (SquirrelMail authenticated user ryan@sleevi.com) by webmail.dreamhost.com with HTTP; Wed, 17 Oct 2012 11:42:14 -0700 Message-ID: <23270db22ddb2ef28a987c8a5ca9e5f3.squirrel@webmail.dreamhost.com> In-Reply-To: <5B68A271B9C97046963CB6A5B8D6F62C3A5A1ABE@SOTTEXCH10.corp.ad.entrust.com> References: <5B68A271B9C97046963CB6A5B8D6F62C3A5A1ABE@SOTTEXCH10.corp.ad.entrust.com> Date: Wed, 17 Oct 2012 11:42:14 -0700 From: "Ryan Sleevi" To: "Tim Moses" User-Agent: SquirrelMail/1.4.21 MIME-Version: 1.0 Content-Type: text/plain;charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable Cc: "wpkops@ietf.org" Subject: Re: [wpkops] Support for this activity from product developers? X-BeenThere: wpkops@ietf.org X-Mailman-Version: 2.1.12 Precedence: list Reply-To: ryan-ietf@sleevi.com List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 17 Oct 2012 18:42:15 -0000 On Wed, October 17, 2012 11:13 am, Tim Moses wrote: > Colleagues - One of the premises of this initiative (perhaps the main > premise) was that product developers would be willing to be governed b= y > the results of an industry consensus process when it comes to handling > certificates and acting on the results of certificate validation. Tha= t > is, that developers would see value in claiming conformance to any > resulting standard. For instance, suppose consensus were to emerge th= at > certain certificate validation failures should be "fatal" (i.e. the > associated application should refuse to perform the requested operatio= n), > would application developers be willing to modify their products > accordingly? > > Nothing in the discussions on the list to date confirms or refutes the > premise. I think it would be useful to hear from developers of releva= nt > products how they would view the outcome of this type of IETF initiati= ve. > > Thanks a lot. All the best. Tim. > > T: +1 613 270 3183 Tim, According to your current (third) charter proposal: "Future activities may attempt to prescribe how the Web PKI "should" work= , and the prescription may turn out to be a proper subset of the PKIX PKI.=20 However, that task is explicitly not a goal of the proposed working group= . Instead, the group's goal is merely to describe how the Web PKI "actually" works in the set of browsers and servers that are in common us= e today." This would suggest that the current work is not to the production of normative work product for any of the participants in the "Web PKI", but rather informative work. It seems like discussion about the introduction of normative behaviours, for applications or for authorities, was something that was explicitly being avoided, as discussed during the scoping thread, until such a time as the WG had worked to produce informative work. At present, I'm very supportive of the work set out in the proposed charter, but further broadening the charter to include normative work may= , I fear, prevent the delivery of useful and relevant documentation that ca= n be used today. From tim.moses@entrust.com Wed Oct 17 11:49:21 2012 Return-Path: X-Original-To: wpkops@ietfa.amsl.com Delivered-To: wpkops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C952621F854E for ; Wed, 17 Oct 2012 11:49:21 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.394 X-Spam-Level: X-Spam-Status: No, score=-2.394 tagged_above=-999 required=5 tests=[AWL=0.205, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OxRZtFGo1ban for ; Wed, 17 Oct 2012 11:49:21 -0700 (PDT) Received: from ipedge2.entrust.com (ipedge2.entrust.com [216.191.252.25]) by ietfa.amsl.com (Postfix) with ESMTP id 19B3C21F854C for ; Wed, 17 Oct 2012 11:49:20 -0700 (PDT) X-IronPort-AV: E=Sophos;i="4.80,602,1344225600"; d="scan'208";a="2199836" Received: from unknown (HELO sottexchcas1.corp.ad.entrust.com) ([10.4.51.93]) by ipedge2.entrust.com with ESMTP; 17 Oct 2012 14:49:08 -0400 Received: from SOTTEXCH10.corp.ad.entrust.com ([fe80::389b:f45b:7ea1:79b7]) by sottexchcas1.corp.ad.entrust.com ([::1]) with mapi id 14.02.0318.001; Wed, 17 Oct 2012 14:49:08 -0400 From: Tim Moses To: "'ryan-ietf@sleevi.com'" Thread-Topic: [wpkops] Support for this activity from product developers? Thread-Index: Ac2skyYC5dyuL3oPS0SUNgXGzcUU8gAJYEEAAAhYMzA= Date: Wed, 17 Oct 2012 18:49:08 +0000 Message-ID: <5B68A271B9C97046963CB6A5B8D6F62C3A5A1FCC@SOTTEXCH10.corp.ad.entrust.com> References: <5B68A271B9C97046963CB6A5B8D6F62C3A5A1ABE@SOTTEXCH10.corp.ad.entrust.com> <23270db22ddb2ef28a987c8a5ca9e5f3.squirrel@webmail.dreamhost.com> In-Reply-To: <23270db22ddb2ef28a987c8a5ca9e5f3.squirrel@webmail.dreamhost.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.4.160.88] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Cc: "wpkops@ietf.org" Subject: Re: [wpkops] Support for this activity from product developers? X-BeenThere: wpkops@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 17 Oct 2012 18:49:21 -0000 Hi Ryan. You are exactly right. And, if that is how I should read the fac= t that we haven't generated more evidence that product developers are inter= ested and prepared to act on the results of the projected second phase, the= n I am comforted. Thanks for reiterating your support. All the best. Tim. -----Original Message----- From: wpkops-bounces@ietf.org [mailto:wpkops-bounces@ietf.org] On Behalf Of= Ryan Sleevi Sent: Wednesday, October 17, 2012 2:42 PM To: Tim Moses Cc: wpkops@ietf.org Subject: Re: [wpkops] Support for this activity from product developers? On Wed, October 17, 2012 11:13 am, Tim Moses wrote: > Colleagues - One of the premises of this initiative (perhaps the main > premise) was that product developers would be willing to be governed=20 > by the results of an industry consensus process when it comes to=20 > handling certificates and acting on the results of certificate=20 > validation. That is, that developers would see value in claiming=20 > conformance to any resulting standard. For instance, suppose=20 > consensus were to emerge that certain certificate validation failures=20 > should be "fatal" (i.e. the associated application should refuse to=20 > perform the requested operation), would application developers be=20 > willing to modify their products accordingly? > > Nothing in the discussions on the list to date confirms or refutes=20 > the premise. I think it would be useful to hear from developers of=20 > relevant products how they would view the outcome of this type of IETF i= nitiative. > > Thanks a lot. All the best. Tim. > > T: +1 613 270 3183 Tim, According to your current (third) charter proposal: "Future activities may attempt to prescribe how the Web PKI "should" work, = and the prescription may turn out to be a proper subset of the PKIX PKI.=20 However, that task is explicitly not a goal of the proposed working group. Instead, the group's goal is merely to describe how the Web PKI "actually"= works in the set of browsers and servers that are in common use today." This would suggest that the current work is not to the production of normat= ive work product for any of the participants in the "Web PKI", but rather i= nformative work. It seems like discussion about the introduction of normati= ve behaviours, for applications or for authorities, was something that was = explicitly being avoided, as discussed during the scoping thread, until suc= h a time as the WG had worked to produce informative work. At present, I'm very supportive of the work set out in the proposed charter= , but further broadening the charter to include normative work may, I fear,= prevent the delivery of useful and relevant documentation that can be used= today. _______________________________________________ wpkops mailing list wpkops@ietf.org https://www.ietf.org/mailman/listinfo/wpkops From ynir@checkpoint.com Wed Oct 17 12:47:04 2012 Return-Path: X-Original-To: wpkops@ietfa.amsl.com Delivered-To: wpkops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D32D821F86A4 for ; Wed, 17 Oct 2012 12:47:04 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.579 X-Spam-Level: X-Spam-Status: No, score=-10.579 tagged_above=-999 required=5 tests=[AWL=0.020, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wBFA2Nn9wsCV for ; Wed, 17 Oct 2012 12:47:04 -0700 (PDT) Received: from smtp.checkpoint.com (smtp.checkpoint.com [194.29.34.68]) by ietfa.amsl.com (Postfix) with ESMTP id D7D3A21F85B8 for ; Wed, 17 Oct 2012 12:47:03 -0700 (PDT) Received: from il-ex01.ad.checkpoint.com (il-ex01.ad.checkpoint.com [194.29.34.26]) by smtp.checkpoint.com (8.13.8/8.13.8) with ESMTP id q9HJkqfL001997; Wed, 17 Oct 2012 21:46:52 +0200 X-CheckPoint: {507F0964-0-1B221DC2-2FFFF} Received: from il-ex03.ad.checkpoint.com (194.29.34.71) by il-ex01.ad.checkpoint.com (194.29.34.26) with Microsoft SMTP Server (TLS) id 8.3.213.0; Wed, 17 Oct 2012 21:46:51 +0200 Received: from il-ex01.ad.checkpoint.com ([194.29.34.26]) by il-ex03.ad.checkpoint.com ([194.29.34.71]) with mapi; Wed, 17 Oct 2012 21:46:52 +0200 From: Yoav Nir To: "ryan-ietf@sleevi.com" Date: Wed, 17 Oct 2012 21:46:49 +0200 Thread-Topic: [wpkops] Support for this activity from product developers? Thread-Index: Ac2soCbrMrweLHJ2Taid80V4FO8XTw== Message-ID: <94A70C39-0E7B-46E0-9034-E97FFD7FE20B@checkpoint.com> References: <5B68A271B9C97046963CB6A5B8D6F62C3A5A1ABE@SOTTEXCH10.corp.ad.entrust.com> <23270db22ddb2ef28a987c8a5ca9e5f3.squirrel@webmail.dreamhost.com> In-Reply-To: <23270db22ddb2ef28a987c8a5ca9e5f3.squirrel@webmail.dreamhost.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US x-kse-antivirus-interceptor-info: scan successful x-kse-antivirus-info: Clean Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-KSE-AntiSpam-Interceptor-Info: protection disabled Cc: "wpkops@ietf.org" , Tim Moses Subject: Re: [wpkops] Support for this activity from product developers? X-BeenThere: wpkops@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 17 Oct 2012 19:47:05 -0000 On Oct 17, 2012, at 8:42 PM, Ryan Sleevi wrote: > On Wed, October 17, 2012 11:13 am, Tim Moses wrote: >> Colleagues - One of the premises of this initiative (perhaps the main >> premise) was that product developers would be willing to be governed by >> the results of an industry consensus process when it comes to handling >> certificates and acting on the results of certificate validation. That >> is, that developers would see value in claiming conformance to any >> resulting standard. For instance, suppose consensus were to emerge that >> certain certificate validation failures should be "fatal" (i.e. the >> associated application should refuse to perform the requested operation)= , >> would application developers be willing to modify their products >> accordingly? >>=20 >> Nothing in the discussions on the list to date confirms or refutes the >> premise. I think it would be useful to hear from developers of relevant >> products how they would view the outcome of this type of IETF initiative= . >>=20 >> Thanks a lot. All the best. Tim. >>=20 >> T: +1 613 270 3183 >=20 > Tim, >=20 > According to your current (third) charter proposal: >=20 > "Future activities may attempt to prescribe how the Web PKI "should" work= , > and the prescription may turn out to be a proper subset of the PKIX PKI.= =20 > However, that task is explicitly not a goal of the proposed working group= . > Instead, the group's goal is merely to describe how the Web PKI > "actually" works in the set of browsers and servers that are in common us= e > today." >=20 > This would suggest that the current work is not to the production of > normative work product for any of the participants in the "Web PKI", but > rather informative work. It seems like discussion about the introduction > of normative behaviours, for applications or for authorities, was > something that was explicitly being avoided, as discussed during the > scoping thread, until such a time as the WG had worked to produce > informative work. >=20 > At present, I'm very supportive of the work set out in the proposed > charter, but further broadening the charter to include normative work may= , > I fear, prevent the delivery of useful and relevant documentation that ca= n > be used today. It might turn out to be like a dictionary. Modern linguists write descripti= ve dictionaries, so "google" and "friend" become verbs, but then people use= those dictionaries as the authority of what is correct usage. Similarly, if this descriptive work shows a disparity, like if certain vali= dation failures are fatal in some browsers, but not in others, then the len= ient browsers might be shamed into complying with the "best practice" as de= scribed in the descriptive work. From Jeff.Hodges@KingsMountain.com Fri Oct 19 11:24:23 2012 Return-Path: X-Original-To: wpkops@ietfa.amsl.com Delivered-To: wpkops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8D07021F85AE for ; Fri, 19 Oct 2012 11:24:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.198 X-Spam-Level: X-Spam-Status: No, score=-101.198 tagged_above=-999 required=5 tests=[AWL=1.066, BAYES_00=-2.599, HTML_MESSAGE=0.001, IP_NOT_FRIENDLY=0.334, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bwDadReeB8PZ for ; Fri, 19 Oct 2012 11:24:21 -0700 (PDT) Received: from oproxy8-pub.bluehost.com (oproxy8-pub.bluehost.com [69.89.22.20]) by ietfa.amsl.com (Postfix) with SMTP id 5CFB421F859E for ; Fri, 19 Oct 2012 11:24:21 -0700 (PDT) Received: (qmail 21835 invoked by uid 0); 19 Oct 2012 18:23:50 -0000 Received: from unknown (HELO box514.bluehost.com) (74.220.219.114) by oproxy8.bluehost.com with SMTP; 19 Oct 2012 18:23:50 -0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=kingsmountain.com; s=default; h=Content-Type:Subject:CC:To:MIME-Version:From:Date:Message-ID; bh=pT9XdFYx6amN1ZBYBdNbDzqFmeKWCKc4iJuHt0HXFQk=; b=O2Ej/tR5+wlr5FVJS+rCwU3jNclTw0R/EoMlmGqj890pK5Ec4FXb+UcqZqPmjdcmZhqdK2ZotaYfXv47bODsrfhDWEgRjs60+Axk6KaALlZsF+X8GUL6en7IsvGJpC6B; Received: from [216.113.168.128] (port=12133 helo=[10.244.136.166]) by box514.bluehost.com with esmtpsa (TLSv1:CAMELLIA256-SHA:256) (Exim 4.76) (envelope-from ) id 1TPHEZ-0007s1-CL; Fri, 19 Oct 2012 12:23:47 -0600 Message-ID: <50819AB5.2000108@KingsMountain.com> Date: Fri, 19 Oct 2012 11:23:49 -0700 From: =JeffH User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:16.0) Gecko/20121011 Thunderbird/16.0.1 MIME-Version: 1.0 To: wpkops@ietf.org Content-Type: multipart/mixed; boundary="------------090302060606000105050404" X-Identified-User: {11025:box514.bluehost.com:kingsmou:kingsmountain.com} {sentby:smtp auth 216.113.168.128 authed with jeff.hodges+kingsmountain.com} Cc: =JeffH Subject: [wpkops] draft 4th draft charter X-BeenThere: wpkops@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 19 Oct 2012 18:24:23 -0000 This is a multi-part message in MIME format. --------------090302060606000105050404 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Hi wpkops denizens, In an effort to help out, below is an updated draft 4th draft charter :) I rolled in changes suggested by Stephen Farrell, Carl Wallace, and myself. I did not alter the list of proposed deliverables -- StephenF suggested it be refined -- that should probably be an item for list and/or BoF discussion. I incorp'd Carl Wallace's suggested text, but didn't add in the specific examples he sent in a later message -- I finessed it by just referencing his message. side-by-side diff (generated via www.text-compare.com) attached. HTH, =JeffH ==================================================================== The Web PKI is the set of systems and procedures most commonly used, in conjunction with security protocols such as TLS, to protect the confidentiality, integrity and authenticity of communications between Web browsers and Web content servers. More specifically, the Web PKI (as considered here) consists of the actual contents of the certificates issued to Web application providers by Certification Authorities (CAs), the certificate validation services provided by the Authorities to web browsers and their users, and the TLS/SSL protocol stacks embedded in web servers and browsers. The Web PKI first appeared in 1993 or thereabouts and has developed continuously in a somewhat organic fashion since then. Across all the suppliers and the point releases of their products, there are now hundreds of variations on the Web PKI in regular use. And this can be a source of problems for end-users, certificate holders, and certificate issuers (CAs). For end-users, there is no clear view whether certificate "problems" remain when they see indication of a "good" connection. For instance, in some browsers, a "good" indication may be displayed when a "revoked" response has been received and "accepted" by the user, whereas other browsers may refuse to display the contents under these circumstances. Certificate holders may have difficulty understanding whether some browser versions will reject their certificate if certain content specifications are not met, such as a subject public key that does not satisfy a minimum key size, or a certificate policies extension that does not contain a particular standard policy identifier. And for certificate issuers, it can be difficult to predict what proportion of the user population will accept a certificate chain with certain characteristics. For instance, when a browser includes a nonce in an OCSP request but the server supplies a response that does not include the nonce, it is hard to know which browsers will accept and which will reject the response. Starting from the premise that more consistency in Web security behavior is desirable, a natural first step would be to document current and historic browser and server behavior. But, such a project has to be bounded. Therefore, only server-authentication behavior encountered in more than 0.1 percent of connections made by desktop and mobile browsers should be considered. While it is not intended to apply the threshold with any precision, it may be used to justify the inclusion or exclusion of a technique. Future activities may attempt to prescribe how the Web PKI "should" work, and the prescription may turn out to be a proper subset of the PKIX PKI. However, that task is explicitly not a goal of the proposed working group. Instead, the group's goal is merely to describe how the Web PKI "actually" works in the set of browsers and servers that are in common use today. Additionally, a number of applications (such as client authentication, document signing, code signing, and email) often use the same trust anchors and certificate processing mechanisms as used for server authentication on the Web. This reuse creates problems in some situations [1]. While these applications are outside the scope of this working group, deliverables should (wherever practical within the available expertise and time) identify mechanisms that are reused by other applications and identify the implications of that reuse. Also, the reliability of the Web PKI depends critically on the "practices" of its certificate issuers; these practices comprise how certificate issuers perform their functions and implement controls, and are described in documents known as "Certification Practice Statements" [2][3] and operational requirements documents [4][5]. However, the topic of certification practices is outside the scope of the working group. That there are technical shortcomings with Web PKI, as it is practiced today, is well recognised. And, that there is also some urgency in addressing these shortcomings is also well recognised. But, it is felt that too much haste can be counter-productive. The expectation is that the work of this group will bring to light, in a systematic way, aspects of the Web PKI that should be progressed in future working groups of the IETF's Security Area, and that suppliers will be willing to participate in those working groups and modify their products to comply with their standards. Given the urgency of the required developments and the scale of the task, it is agreed that adherence to the published schedule should take precedence over completeness of the results, though without sacrificing technical correctness. Milestones ========== 1. First WG draft of "trust model" document (4 months). 2. First WG draft of "certificate, CRL, and OCSP field and extension processing" document (12 months). 3. First WG draft of "certificate revocation" document (8 months). 4. First WG draft of "TLS stack operation" document (8 months). 5. IESG submission of "trust model" document (16 months). 6. IESG submission of "certificate, CRL, and OCSP field and extension processing" document (24 months). 7. IESG submission of "certificate revocation" document (20 months). 8. IESG submission of "TLS stack operation" document (16 months). References: [1] https://www.ietf.org/mail-archive/web/wpkops/current/msg00104.html [2] Internet X.509 Public Key Infrastructure Certificate Policy and Certification Practices Framework. S. Chokhani et al, IETF RFC3647 https://tools.ietf.org/html/rfc3647 [3] Electronic Signatures and Infrastructures (ESI); Policy requirements for certification authorities issuing public key certificates. ETSI TS 102 042 V2.2.1 (2011-12) http://www.etsi.org/deliver/etsi_ts/102000_102099/102042 /02.02.01_60/ts_102042v020201p.pdf [4] Network and certificate system security requirements, CA/Browser Forum, Aug 2012, https://www.cabforum.org/Network_Security_Controls_V1.pdf [5] Baseline Requirements for the Issuance and Management of Publicly-Trusted Certificates Version 1.0, CA/Browser Forum, Nov 2011, https://www.cabforum.org/Baseline_Requirements_V1.pdf ==================================================================== --------------090302060606000105050404 Content-Type: text/html; name="wpkops-charter-4thdraft-diff.html" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="wpkops-charter-4thdraft-diff.html" PGh0bWw+PGhlYWQ+IAo8L2hlYWQ+PGJvZHk+PHRhYmxlIGJvcmRlcj0iMSIgY2xhc3M9InRl eHQtY29tcGFyZSIgaWQ9InRvcCIgY2VsbHNwYWNpbmc9IjAiIGNlbGxwYWRkaW5nPSIwIiBy dWxlcz0iZ3JvdXBzIiBzdHlsZT0iYm9yZGVyOiAxcHggc29saWQgI2FiYWJhYjsgYmFja2dy b3VuZDogd2hpdGU7IHdpZHRoOiA5NiU7IG1hcmdpbi1sZWZ0OiBhdXRvOyBtYXJnaW4tcmln aHQ6IGF1dG8iPgo8Y29sZ3JvdXAgc3R5bGU9ImJvcmRlci1jb2xvcjogI2FiYWJhYiI+PC9j b2xncm91cD4gPGNvbGdyb3VwIHN0eWxlPSJib3JkZXItY29sb3I6ICNhYmFiYWIiPjwvY29s Z3JvdXA+IDxjb2xncm91cCBzdHlsZT0iYm9yZGVyLWNvbG9yOiAjYWJhYmFiIj48L2NvbGdy b3VwPgo8Y29sZ3JvdXAgc3R5bGU9ImJvcmRlci1jb2xvcjogI2FiYWJhYiI+PC9jb2xncm91 cD4gPGNvbGdyb3VwIHN0eWxlPSJib3JkZXItY29sb3I6ICNhYmFiYWIiPjwvY29sZ3JvdXA+ IDxjb2xncm91cCBzdHlsZT0iYm9yZGVyLWNvbG9yOiAjYWJhYmFiIj48L2NvbGdyb3VwPgo8 dGJvZHkgc3R5bGU9ImJvcmRlcjogbm9uZSI+Cjx0cj48dGQgY2xhc3M9ImRpZmZfbmV4dCIg aWQ9ImRpZmZlcmVuY2VfMSIgZ2xvd2luZz0iMCIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25v c3BhY2U7IHBhZGRpbmctbGVmdDogMnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IHdpZHRoOiAx MXB4OyBwYWRkaW5nLXRvcDogMnB4OyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyBiYWNrZ3JvdW5k OiAjZGVkZWRlOyBiYWNrZ3JvdW5kLWNvbG9yOiByZ2IoMjIyLCAyMjIsIDIyMik7ICI+PGRp diBjbGFzcz0ibGlua19uZXh0IiB0aXRsZT0iR28gdG8gbmV4dCBkaWZmZXJlbmNlIiBzdHls ZT0iYmFja2dyb3VuZC1pbWFnZTogdXJsKGh0dHA6Ly93d3cudGV4dC1jb21wYXJlLmNvbS9t ZWRpYS90Yy1hcnJvdy1kb3duLWJsdWUucG5nKTsgYmFja2dyb3VuZC1wb3NpdGlvbjogdG9w OyBiYWNrZ3JvdW5kLXJlcGVhdDogbm8tcmVwZWF0OyBoZWlnaHQ6IDEycHg7IHdpZHRoOiAx MXB4Ij48YSBocmVmPSIjZGlmZmVyZW5jZV8yIj48ZGl2IGNsYXNzPSJ0ZXh0X25leHQiIHN0 eWxlPSJ2aXNpYmlsaXR5OiBoaWRkZW4iPm48L2Rpdj48L2E+PC9kaXY+PC90ZD48dGQgY2xh c3M9IiBoYXNfZGlmZmVyZW5jZSIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBh ZGRpbmctbGVmdDogMnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IGJhY2tncm91bmQ6ICM4MUY3 ODE7IHdpZHRoOiAxZW0iPjE8L3RkPjx0ZCBjbGFzcz0ibGluZUNvbnRlbnQiIHN0eWxlPSJm b250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdo dDogMnB4OyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyB0ZXh0LWFsaWduOiBsZWZ0Ij48c3BhbiBj bGFzcz0iZGlmZmVyZW5jZSIgc3R5bGU9IndpZHRoOiAxZW07IGJhY2tncm91bmQ6ICNBOUQw RjUiPlRoZSBXZWIgUEtJIGlzIHRoZSBzZXQgb2Ygc3lzdGVtcyBhbmQgcHJvY2VkdXJlcyBt b3N0IGNvbW1vbmx5IHVzZWQgdG8gcHJvdGVjdCB0aGUgY29uZmlkZW50aWFsaXR5LCBpbnRl Z3JpdHkgYW5kIGF1dGhlbnRpY2l0eSBvZiBjb21tdW5pY2F0aW9ucyBiZXR3ZWVuIFdlYiBi cm93c2VycyBhbmQgV2ViIGNvbnRlbnQgc2VydmVycy4gJm5ic3A7SXQgZmlyc3QgYXBwZWFy ZWQgaW4gMTk5MyBvciB0aGVyZWFib3V0cyBhbmQgaGFzIGRldmVsb3BlZCBjb250aW51b3Vz bHkgaW4gYSBzb21ld2hhdCBvcmdhbmljIGZhc2hpb24gc2luY2UgdGhlbi4gJm5ic3A7QWNy b3NzIGFsbCB0aGUgc3VwcGxpZXJzIGFuZCB0aGUgcG9pbnQgcmVsZWFzZXMgb2YgdGhlaXIg cHJvZHVjdHMsIHRoZXJlIGFyZSBub3cgaHVuZHJlZHMgb2YgdmFyaWF0aW9ucyBvbiB0aGUg V2ViIFBLSSBpbiByZWd1bGFyIHVzZS4gJm5ic3A7QW5kIHRoaXMgY2FuIGJlIGEgc291cmNl IG9mIHByb2JsZW1zIGZvciBlbmQtdXNlcnMsIGNlcnRpZmljYXRlIGhvbGRlcnMsIGFuZCBj ZXJ0aWZpY2F0ZSBpc3N1ZXJzLgo8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImRpZmZfbmV4dCIg Z2xvd2luZz0iMCIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRpbmctbGVm dDogMnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IHdpZHRoOiAxMXB4OyBwYWRkaW5nLXRvcDog MnB4OyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyBiYWNrZ3JvdW5kOiAjZGVkZWRlOyBiYWNrZ3Jv dW5kLWNvbG9yOiByZ2IoMjIyLCAyMjIsIDIyMik7ICI+PGRpdiBjbGFzcz0ibGlua19uZXh0 IiB0aXRsZT0iR28gdG8gbmV4dCBkaWZmZXJlbmNlIiBzdHlsZT0iYmFja2dyb3VuZC1pbWFn ZTogdXJsKGh0dHA6Ly93d3cudGV4dC1jb21wYXJlLmNvbS9tZWRpYS90Yy1hcnJvdy1kb3du LWJsdWUucG5nKTsgYmFja2dyb3VuZC1wb3NpdGlvbjogdG9wOyBiYWNrZ3JvdW5kLXJlcGVh dDogbm8tcmVwZWF0OyBoZWlnaHQ6IDEycHg7IHdpZHRoOiAxMXB4Ij48YSBocmVmPSIjZGlm ZmVyZW5jZV8yIj48ZGl2IGNsYXNzPSJ0ZXh0X25leHQiIHN0eWxlPSJ2aXNpYmlsaXR5OiBo aWRkZW4iPm48L2Rpdj48L2E+PC9kaXY+PC90ZD48dGQgY2xhc3M9IiBoYXNfZGlmZmVyZW5j ZSIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRpbmctbGVmdDogMnB4OyBw YWRkaW5nLXJpZ2h0OiAycHg7IGJhY2tncm91bmQ6ICM4MUY3ODE7IHdpZHRoOiAxZW0iPjE8 L3RkPjx0ZCBjbGFzcz0ibGluZUNvbnRlbnQiIHN0eWxlPSJmb250LWZhbWlseTogbW9ub3Nw YWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4OyB2ZXJ0aWNhbC1h bGlnbjogdG9wOyB0ZXh0LWFsaWduOiBsZWZ0Ij48c3BhbiBjbGFzcz0iZGlmZmVyZW5jZSIg c3R5bGU9IndpZHRoOiAxZW07IGJhY2tncm91bmQ6ICNBOUQwRjUiPlRoZSBXZWIgUEtJIGlz IHRoZSBzZXQgb2Ygc3lzdGVtcyBhbmQgcHJvY2VkdXJlcyBtb3N0IGNvbW1vbmx5IHVzZWQs IGluIAo8L3NwYW4+PC90ZD48L3RyPgo8dHI+PHRkIGNsYXNzPSJkaWZmX25leHQiIHN0eWxl PSJmb250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1y aWdodDogMnB4OyB3aWR0aDogMTFweDsgcGFkZGluZy10b3A6IDJweDsgdmVydGljYWwtYWxp Z246IHRvcDsgYmFja2dyb3VuZDogI2RlZGVkZSI+PC90ZD48dGQgY2xhc3M9IiBoYXNfZGlm ZmVyZW5jZSIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRpbmctbGVmdDog MnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IGJhY2tncm91bmQ6ICM4MUY3ODE7IHdpZHRoOiAx ZW0iPjwvdGQ+PHRkIGNsYXNzPSJsaW5lQ29udGVudCIgc3R5bGU9ImZvbnQtZmFtaWx5OiBt b25vc3BhY2U7IHBhZGRpbmctbGVmdDogMnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IHZlcnRp Y2FsLWFsaWduOiB0b3A7IHRleHQtYWxpZ246IGxlZnQiPjwvdGQ+PHRkIGNsYXNzPSJkaWZm X25leHQiIHN0eWxlPSJmb250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJw eDsgcGFkZGluZy1yaWdodDogMnB4OyB3aWR0aDogMTFweDsgcGFkZGluZy10b3A6IDJweDsg dmVydGljYWwtYWxpZ246IHRvcDsgYmFja2dyb3VuZDogI2RlZGVkZSI+PC90ZD48dGQgY2xh c3M9IiBoYXNfZGlmZmVyZW5jZSIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBh ZGRpbmctbGVmdDogMnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IGJhY2tncm91bmQ6ICM4MUY3 ODE7IHdpZHRoOiAxZW0iPjI8L3RkPjx0ZCBjbGFzcz0ibGluZUNvbnRlbnQiIHN0eWxlPSJm b250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdo dDogMnB4OyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyB0ZXh0LWFsaWduOiBsZWZ0Ij48c3BhbiBj bGFzcz0iZGlmZmVyZW5jZSIgc3R5bGU9IndpZHRoOiAxZW07IGJhY2tncm91bmQ6ICNBOUQw RjUiPmNvbmp1bmN0aW9uIHdpdGggc2VjdXJpdHkgcHJvdG9jb2xzIHN1Y2ggYXMgVExTLCB0 byBwcm90ZWN0IHRoZSBjb25maWRlbnRpYWxpdHksIGludGVncml0eSBhbmQgYXV0aGVudGlj aXR5IG9mIGNvbW11bmljYXRpb25zIGJldHdlZW4gV2ViIGJyb3dzZXJzIGFuZCBXZWIgY29u dGVudCBzZXJ2ZXJzLiBNb3JlIHNwZWNpZmljYWxseSwgdGhlIFdlYiBQS0kgKGFzIGNvbnNp ZGVyZWQgaGVyZSkgY29uc2lzdHMgb2YgdGhlIGFjdHVhbCBjb250ZW50cyBvZiB0aGUgY2Vy dGlmaWNhdGVzIGlzc3VlZCB0byBXZWIgYXBwbGljYXRpb24gcHJvdmlkZXJzIGJ5IENlcnRp ZmljYXRpb24gQXV0aG9yaXRpZXMgKENBcyksIHRoZSBjZXJ0aWZpY2F0ZSB2YWxpZGF0aW9u IHNlcnZpY2VzIHByb3ZpZGVkIGJ5IHRoZSBBdXRob3JpdGllcyB0byB3ZWIgYnJvd3NlcnMg YW5kIHRoZWlyIHVzZXJzLCBhbmQgdGhlIFRMUy9TU0wgcHJvdG9jb2wgc3RhY2tzIGVtYmVk ZGVkIGluIHdlYiBzZXJ2ZXJzIGFuZCBicm93c2Vycy4KPC9zcGFuPjwvdGQ+PC90cj4KPHRy Pjx0ZCBjbGFzcz0iZGlmZl9uZXh0IiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsg cGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgd2lkdGg6IDExcHg7IHBh ZGRpbmctdG9wOiAycHg7IHZlcnRpY2FsLWFsaWduOiB0b3A7IGJhY2tncm91bmQ6ICNkZWRl ZGUiPjwvdGQ+PHRkIGNsYXNzPSIgaGFzX2RpZmZlcmVuY2UiIHN0eWxlPSJmb250LWZhbWls eTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4OyBi YWNrZ3JvdW5kOiAjODFGNzgxOyB3aWR0aDogMWVtIj48L3RkPjx0ZCBjbGFzcz0ibGluZUNv bnRlbnQiIHN0eWxlPSJmb250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJw eDsgcGFkZGluZy1yaWdodDogMnB4OyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyB0ZXh0LWFsaWdu OiBsZWZ0Ij48L3RkPjx0ZCBjbGFzcz0iZGlmZl9uZXh0IiBzdHlsZT0iZm9udC1mYW1pbHk6 IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgd2lk dGg6IDExcHg7IHBhZGRpbmctdG9wOiAycHg7IHZlcnRpY2FsLWFsaWduOiB0b3A7IGJhY2tn cm91bmQ6ICNkZWRlZGUiPjwvdGQ+PHRkIGNsYXNzPSIgaGFzX2RpZmZlcmVuY2UiIHN0eWxl PSJmb250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1y aWdodDogMnB4OyBiYWNrZ3JvdW5kOiAjODFGNzgxOyB3aWR0aDogMWVtIj4zPC90ZD48dGQg Y2xhc3M9ImxpbmVDb250ZW50IiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsgcGFk ZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgdmVydGljYWwtYWxpZ246IHRv cDsgdGV4dC1hbGlnbjogbGVmdCI+PHNwYW4gY2xhc3M9ImRpZmZlcmVuY2UiIHN0eWxlPSJ3 aWR0aDogMWVtOyBiYWNrZ3JvdW5kOiAjQTlEMEY1Ij4KPC9zcGFuPjwvdGQ+PC90cj4KPHRy Pjx0ZCBjbGFzcz0iZGlmZl9uZXh0IiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsg cGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgd2lkdGg6IDExcHg7IHBh ZGRpbmctdG9wOiAycHg7IHZlcnRpY2FsLWFsaWduOiB0b3A7IGJhY2tncm91bmQ6ICNkZWRl ZGUiPjwvdGQ+PHRkIGNsYXNzPSIgaGFzX2RpZmZlcmVuY2UiIHN0eWxlPSJmb250LWZhbWls eTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4OyBi YWNrZ3JvdW5kOiAjODFGNzgxOyB3aWR0aDogMWVtIj48L3RkPjx0ZCBjbGFzcz0ibGluZUNv bnRlbnQiIHN0eWxlPSJmb250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJw eDsgcGFkZGluZy1yaWdodDogMnB4OyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyB0ZXh0LWFsaWdu OiBsZWZ0Ij48L3RkPjx0ZCBjbGFzcz0iZGlmZl9uZXh0IiBzdHlsZT0iZm9udC1mYW1pbHk6 IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgd2lk dGg6IDExcHg7IHBhZGRpbmctdG9wOiAycHg7IHZlcnRpY2FsLWFsaWduOiB0b3A7IGJhY2tn cm91bmQ6ICNkZWRlZGUiPjwvdGQ+PHRkIGNsYXNzPSIgaGFzX2RpZmZlcmVuY2UiIHN0eWxl PSJmb250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1y aWdodDogMnB4OyBiYWNrZ3JvdW5kOiAjODFGNzgxOyB3aWR0aDogMWVtIj40PC90ZD48dGQg Y2xhc3M9ImxpbmVDb250ZW50IiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsgcGFk ZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgdmVydGljYWwtYWxpZ246IHRv cDsgdGV4dC1hbGlnbjogbGVmdCI+PHNwYW4gY2xhc3M9ImRpZmZlcmVuY2UiIHN0eWxlPSJ3 aWR0aDogMWVtOyBiYWNrZ3JvdW5kOiAjQTlEMEY1Ij5UaGUgV2ViIFBLSSBmaXJzdCBhcHBl YXJlZCBpbiAxOTkzIG9yIHRoZXJlYWJvdXRzIGFuZCBoYXMgZGV2ZWxvcGVkIAo8L3NwYW4+ PC90ZD48L3RyPgo8dHI+PHRkIGNsYXNzPSJkaWZmX25leHQiIHN0eWxlPSJmb250LWZhbWls eTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4OyB3 aWR0aDogMTFweDsgcGFkZGluZy10b3A6IDJweDsgdmVydGljYWwtYWxpZ246IHRvcDsgYmFj a2dyb3VuZDogI2RlZGVkZSI+PC90ZD48dGQgY2xhc3M9IiBoYXNfZGlmZmVyZW5jZSIgc3R5 bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRpbmctbGVmdDogMnB4OyBwYWRkaW5n LXJpZ2h0OiAycHg7IGJhY2tncm91bmQ6ICM4MUY3ODE7IHdpZHRoOiAxZW0iPjwvdGQ+PHRk IGNsYXNzPSJsaW5lQ29udGVudCIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBh ZGRpbmctbGVmdDogMnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IHZlcnRpY2FsLWFsaWduOiB0 b3A7IHRleHQtYWxpZ246IGxlZnQiPjwvdGQ+PHRkIGNsYXNzPSJkaWZmX25leHQiIHN0eWxl PSJmb250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1y aWdodDogMnB4OyB3aWR0aDogMTFweDsgcGFkZGluZy10b3A6IDJweDsgdmVydGljYWwtYWxp Z246IHRvcDsgYmFja2dyb3VuZDogI2RlZGVkZSI+PC90ZD48dGQgY2xhc3M9IiBoYXNfZGlm ZmVyZW5jZSIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRpbmctbGVmdDog MnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IGJhY2tncm91bmQ6ICM4MUY3ODE7IHdpZHRoOiAx ZW0iPjU8L3RkPjx0ZCBjbGFzcz0ibGluZUNvbnRlbnQiIHN0eWxlPSJmb250LWZhbWlseTog bW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4OyB2ZXJ0 aWNhbC1hbGlnbjogdG9wOyB0ZXh0LWFsaWduOiBsZWZ0Ij48c3BhbiBjbGFzcz0iZGlmZmVy ZW5jZSIgc3R5bGU9IndpZHRoOiAxZW07IGJhY2tncm91bmQ6ICNBOUQwRjUiPmNvbnRpbnVv dXNseSBpbiBhIHNvbWV3aGF0IG9yZ2FuaWMgZmFzaGlvbiBzaW5jZSB0aGVuLiAmbmJzcDtB Y3Jvc3MgYWxsIHRoZSAKPC9zcGFuPjwvdGQ+PC90cj4KPHRyPjx0ZCBjbGFzcz0iZGlmZl9u ZXh0IiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7 IHBhZGRpbmctcmlnaHQ6IDJweDsgd2lkdGg6IDExcHg7IHBhZGRpbmctdG9wOiAycHg7IHZl cnRpY2FsLWFsaWduOiB0b3A7IGJhY2tncm91bmQ6ICNkZWRlZGUiPjwvdGQ+PHRkIGNsYXNz PSIgaGFzX2RpZmZlcmVuY2UiIHN0eWxlPSJmb250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRk aW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4OyBiYWNrZ3JvdW5kOiAjODFGNzgx OyB3aWR0aDogMWVtIj48L3RkPjx0ZCBjbGFzcz0ibGluZUNvbnRlbnQiIHN0eWxlPSJmb250 LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdodDog MnB4OyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyB0ZXh0LWFsaWduOiBsZWZ0Ij48L3RkPjx0ZCBj bGFzcz0iZGlmZl9uZXh0IiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsgcGFkZGlu Zy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgd2lkdGg6IDExcHg7IHBhZGRpbmct dG9wOiAycHg7IHZlcnRpY2FsLWFsaWduOiB0b3A7IGJhY2tncm91bmQ6ICNkZWRlZGUiPjwv dGQ+PHRkIGNsYXNzPSIgaGFzX2RpZmZlcmVuY2UiIHN0eWxlPSJmb250LWZhbWlseTogbW9u b3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4OyBiYWNrZ3Jv dW5kOiAjODFGNzgxOyB3aWR0aDogMWVtIj42PC90ZD48dGQgY2xhc3M9ImxpbmVDb250ZW50 IiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBh ZGRpbmctcmlnaHQ6IDJweDsgdmVydGljYWwtYWxpZ246IHRvcDsgdGV4dC1hbGlnbjogbGVm dCI+PHNwYW4gY2xhc3M9ImRpZmZlcmVuY2UiIHN0eWxlPSJ3aWR0aDogMWVtOyBiYWNrZ3Jv dW5kOiAjQTlEMEY1Ij5zdXBwbGllcnMgYW5kIHRoZSBwb2ludCByZWxlYXNlcyBvZiB0aGVp ciBwcm9kdWN0cywgdGhlcmUgYXJlIG5vdyBodW5kcmVkcyBvZiAKPC9zcGFuPjwvdGQ+PC90 cj4KPHRyPjx0ZCBjbGFzcz0iZGlmZl9uZXh0IiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9z cGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgd2lkdGg6IDEx cHg7IHBhZGRpbmctdG9wOiAycHg7IHZlcnRpY2FsLWFsaWduOiB0b3A7IGJhY2tncm91bmQ6 ICNkZWRlZGUiPjwvdGQ+PHRkIGNsYXNzPSIgaGFzX2RpZmZlcmVuY2UiIHN0eWxlPSJmb250 LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdodDog MnB4OyBiYWNrZ3JvdW5kOiAjODFGNzgxOyB3aWR0aDogMWVtIj48L3RkPjx0ZCBjbGFzcz0i bGluZUNvbnRlbnQiIHN0eWxlPSJmb250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxl ZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4OyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyB0ZXh0 LWFsaWduOiBsZWZ0Ij48L3RkPjx0ZCBjbGFzcz0iZGlmZl9uZXh0IiBzdHlsZT0iZm9udC1m YW1pbHk6IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJw eDsgd2lkdGg6IDExcHg7IHBhZGRpbmctdG9wOiAycHg7IHZlcnRpY2FsLWFsaWduOiB0b3A7 IGJhY2tncm91bmQ6ICNkZWRlZGUiPjwvdGQ+PHRkIGNsYXNzPSIgaGFzX2RpZmZlcmVuY2Ui IHN0eWxlPSJmb250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFk ZGluZy1yaWdodDogMnB4OyBiYWNrZ3JvdW5kOiAjODFGNzgxOyB3aWR0aDogMWVtIj43PC90 ZD48dGQgY2xhc3M9ImxpbmVDb250ZW50IiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFj ZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgdmVydGljYWwtYWxp Z246IHRvcDsgdGV4dC1hbGlnbjogbGVmdCI+PHNwYW4gY2xhc3M9ImRpZmZlcmVuY2UiIHN0 eWxlPSJ3aWR0aDogMWVtOyBiYWNrZ3JvdW5kOiAjQTlEMEY1Ij52YXJpYXRpb25zIG9uIHRo ZSBXZWIgUEtJIGluIHJlZ3VsYXIgdXNlLiAmbmJzcDtBbmQgdGhpcyBjYW4gYmUgYSBzb3Vy Y2Ugb2YgcHJvYmxlbXMgCjwvc3Bhbj48L3RkPjwvdHI+Cjx0cj48dGQgY2xhc3M9ImRpZmZf bmV4dCIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRpbmctbGVmdDogMnB4 OyBwYWRkaW5nLXJpZ2h0OiAycHg7IHdpZHRoOiAxMXB4OyBwYWRkaW5nLXRvcDogMnB4OyB2 ZXJ0aWNhbC1hbGlnbjogdG9wOyBiYWNrZ3JvdW5kOiAjZGVkZWRlIj48L3RkPjx0ZCBjbGFz cz0iIGhhc19kaWZmZXJlbmNlIiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsgcGFk ZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgYmFja2dyb3VuZDogIzgxRjc4 MTsgd2lkdGg6IDFlbSI+PC90ZD48dGQgY2xhc3M9ImxpbmVDb250ZW50IiBzdHlsZT0iZm9u dC1mYW1pbHk6IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6 IDJweDsgdmVydGljYWwtYWxpZ246IHRvcDsgdGV4dC1hbGlnbjogbGVmdCI+PC90ZD48dGQg Y2xhc3M9ImRpZmZfbmV4dCIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRp bmctbGVmdDogMnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IHdpZHRoOiAxMXB4OyBwYWRkaW5n LXRvcDogMnB4OyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyBiYWNrZ3JvdW5kOiAjZGVkZWRlIj48 L3RkPjx0ZCBjbGFzcz0iIGhhc19kaWZmZXJlbmNlIiBzdHlsZT0iZm9udC1mYW1pbHk6IG1v bm9zcGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgYmFja2dy b3VuZDogIzgxRjc4MTsgd2lkdGg6IDFlbSI+ODwvdGQ+PHRkIGNsYXNzPSJsaW5lQ29udGVu dCIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRpbmctbGVmdDogMnB4OyBw YWRkaW5nLXJpZ2h0OiAycHg7IHZlcnRpY2FsLWFsaWduOiB0b3A7IHRleHQtYWxpZ246IGxl ZnQiPjxzcGFuIGNsYXNzPSJkaWZmZXJlbmNlIiBzdHlsZT0id2lkdGg6IDFlbTsgYmFja2dy b3VuZDogI0E5RDBGNSI+Zm9yIGVuZC11c2VycywgY2VydGlmaWNhdGUgaG9sZGVycywgYW5k IGNlcnRpZmljYXRlIGlzc3VlcnMgKENBcykuCjwvc3Bhbj48L3RkPjwvdHI+Cjx0cj48dGQg Y2xhc3M9ImRpZmZfbmV4dCIgaWQ9ImRpZmZlcmVuY2VfMiIgc3R5bGU9ImZvbnQtZmFtaWx5 OiBtb25vc3BhY2U7IHBhZGRpbmctbGVmdDogMnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IHdp ZHRoOiAxMXB4OyBwYWRkaW5nLXRvcDogMnB4OyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyBiYWNr Z3JvdW5kOiAjZGVkZWRlIj48L3RkPjx0ZCBjbGFzcz0iZGlmZl9oZWFkZXIgIiBzdHlsZT0i Zm9udC1mYW1pbHk6IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmln aHQ6IDJweDsgd2lkdGg6IDFlbTsgdmVydGljYWwtYWxpZ246IHRvcDsgYmFja2dyb3VuZDog I2RlZGVkZSI+MjwvdGQ+PHRkIGNsYXNzPSJsaW5lQ29udGVudCIgc3R5bGU9ImZvbnQtZmFt aWx5OiBtb25vc3BhY2U7IHBhZGRpbmctbGVmdDogMnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7 IHZlcnRpY2FsLWFsaWduOiB0b3A7IHRleHQtYWxpZ246IGxlZnQiPjwvdGQ+PHRkIGNsYXNz PSJkaWZmX25leHQiIHN0eWxlPSJmb250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxl ZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4OyB3aWR0aDogMTFweDsgcGFkZGluZy10b3A6 IDJweDsgdmVydGljYWwtYWxpZ246IHRvcDsgYmFja2dyb3VuZDogI2RlZGVkZSI+PC90ZD48 dGQgY2xhc3M9ImRpZmZfaGVhZGVyICIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7 IHBhZGRpbmctbGVmdDogMnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IHdpZHRoOiAxZW07IHZl cnRpY2FsLWFsaWduOiB0b3A7IGJhY2tncm91bmQ6ICNkZWRlZGUiPjk8L3RkPjx0ZCBjbGFz cz0ibGluZUNvbnRlbnQiIHN0eWxlPSJmb250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5n LWxlZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4OyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyB0 ZXh0LWFsaWduOiBsZWZ0Ij48L3RkPjwvdHI+Cjx0cj48dGQgY2xhc3M9ImRpZmZfbmV4dCIg c3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRpbmctbGVmdDogMnB4OyBwYWRk aW5nLXJpZ2h0OiAycHg7IHdpZHRoOiAxMXB4OyBwYWRkaW5nLXRvcDogMnB4OyB2ZXJ0aWNh bC1hbGlnbjogdG9wOyBiYWNrZ3JvdW5kOiAjZGVkZWRlIj48L3RkPjx0ZCBjbGFzcz0iZGlm Zl9oZWFkZXIgIiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0 OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgd2lkdGg6IDFlbTsgdmVydGljYWwtYWxpZ246 IHRvcDsgYmFja2dyb3VuZDogI2RlZGVkZSI+MzwvdGQ+PHRkIGNsYXNzPSJsaW5lQ29udGVu dCIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRpbmctbGVmdDogMnB4OyBw YWRkaW5nLXJpZ2h0OiAycHg7IHZlcnRpY2FsLWFsaWduOiB0b3A7IHRleHQtYWxpZ246IGxl ZnQiPkZvciBlbmQtdXNlcnMsIHRoZXJlIGlzIG5vIGNsZWFyIHZpZXcgd2hldGhlciBjZXJ0 aWZpY2F0ZSAicHJvYmxlbXMiIHJlbWFpbiB3aGVuIHRoZXkgc2VlIGluZGljYXRpb24gb2Yg YSAiZ29vZCIgY29ubmVjdGlvbi4gJm5ic3A7Rm9yIGluc3RhbmNlLCBpbiBzb21lIGJyb3dz ZXJzLCBhICJnb29kIiBpbmRpY2F0aW9uIG1heSBiZSBkaXNwbGF5ZWQgd2hlbiBhICJyZXZv a2VkIiByZXNwb25zZSBoYXMgYmVlbiByZWNlaXZlZCBhbmQgImFjY2VwdGVkIiBieSB0aGUg dXNlciwgd2hlcmVhcyBvdGhlciBicm93c2VycyBtYXkgcmVmdXNlIHRvIGRpc3BsYXkgdGhl IGNvbnRlbnRzIHVuZGVyIHRoZXNlIGNpcmN1bXN0YW5jZXMuPC90ZD48dGQgY2xhc3M9ImRp ZmZfbmV4dCIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRpbmctbGVmdDog MnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IHdpZHRoOiAxMXB4OyBwYWRkaW5nLXRvcDogMnB4 OyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyBiYWNrZ3JvdW5kOiAjZGVkZWRlIj48L3RkPjx0ZCBj bGFzcz0iZGlmZl9oZWFkZXIgIiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsgcGFk ZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgd2lkdGg6IDFlbTsgdmVydGlj YWwtYWxpZ246IHRvcDsgYmFja2dyb3VuZDogI2RlZGVkZSI+MTA8L3RkPjx0ZCBjbGFzcz0i bGluZUNvbnRlbnQiIHN0eWxlPSJmb250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxl ZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4OyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyB0ZXh0 LWFsaWduOiBsZWZ0Ij5Gb3IgZW5kLXVzZXJzLCB0aGVyZSBpcyBubyBjbGVhciB2aWV3IHdo ZXRoZXIgY2VydGlmaWNhdGUgInByb2JsZW1zIiByZW1haW4gd2hlbiB0aGV5IHNlZSBpbmRp Y2F0aW9uIG9mIGEgImdvb2QiIGNvbm5lY3Rpb24uICZuYnNwO0ZvciBpbnN0YW5jZSwgaW4g c29tZSBicm93c2VycywgYSAiZ29vZCIgaW5kaWNhdGlvbiBtYXkgYmUgZGlzcGxheWVkIHdo ZW4gYSAicmV2b2tlZCIgcmVzcG9uc2UgaGFzIGJlZW4gcmVjZWl2ZWQgYW5kICJhY2NlcHRl ZCIgYnkgdGhlIHVzZXIsIHdoZXJlYXMgb3RoZXIgYnJvd3NlcnMgbWF5IHJlZnVzZSB0byBk aXNwbGF5IHRoZSBjb250ZW50cyB1bmRlciB0aGVzZSBjaXJjdW1zdGFuY2VzLjwvdGQ+PC90 cj4KPHRyPjx0ZCBjbGFzcz0iZGlmZl9uZXh0IiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9z cGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgd2lkdGg6IDEx cHg7IHBhZGRpbmctdG9wOiAycHg7IHZlcnRpY2FsLWFsaWduOiB0b3A7IGJhY2tncm91bmQ6 ICNkZWRlZGUiPjwvdGQ+PHRkIGNsYXNzPSJkaWZmX2hlYWRlciAiIHN0eWxlPSJmb250LWZh bWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4 OyB3aWR0aDogMWVtOyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyBiYWNrZ3JvdW5kOiAjZGVkZWRl Ij40PC90ZD48dGQgY2xhc3M9ImxpbmVDb250ZW50IiBzdHlsZT0iZm9udC1mYW1pbHk6IG1v bm9zcGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgdmVydGlj YWwtYWxpZ246IHRvcDsgdGV4dC1hbGlnbjogbGVmdCI+PC90ZD48dGQgY2xhc3M9ImRpZmZf bmV4dCIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRpbmctbGVmdDogMnB4 OyBwYWRkaW5nLXJpZ2h0OiAycHg7IHdpZHRoOiAxMXB4OyBwYWRkaW5nLXRvcDogMnB4OyB2 ZXJ0aWNhbC1hbGlnbjogdG9wOyBiYWNrZ3JvdW5kOiAjZGVkZWRlIj48L3RkPjx0ZCBjbGFz cz0iZGlmZl9oZWFkZXIgIiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsgcGFkZGlu Zy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgd2lkdGg6IDFlbTsgdmVydGljYWwt YWxpZ246IHRvcDsgYmFja2dyb3VuZDogI2RlZGVkZSI+MTE8L3RkPjx0ZCBjbGFzcz0ibGlu ZUNvbnRlbnQiIHN0eWxlPSJmb250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6 IDJweDsgcGFkZGluZy1yaWdodDogMnB4OyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyB0ZXh0LWFs aWduOiBsZWZ0Ij48L3RkPjwvdHI+Cjx0cj48dGQgY2xhc3M9ImRpZmZfbmV4dCIgc3R5bGU9 ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRpbmctbGVmdDogMnB4OyBwYWRkaW5nLXJp Z2h0OiAycHg7IHdpZHRoOiAxMXB4OyBwYWRkaW5nLXRvcDogMnB4OyB2ZXJ0aWNhbC1hbGln bjogdG9wOyBiYWNrZ3JvdW5kOiAjZGVkZWRlIj48L3RkPjx0ZCBjbGFzcz0iZGlmZl9oZWFk ZXIgIiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7 IHBhZGRpbmctcmlnaHQ6IDJweDsgd2lkdGg6IDFlbTsgdmVydGljYWwtYWxpZ246IHRvcDsg YmFja2dyb3VuZDogI2RlZGVkZSI+NTwvdGQ+PHRkIGNsYXNzPSJsaW5lQ29udGVudCIgc3R5 bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRpbmctbGVmdDogMnB4OyBwYWRkaW5n LXJpZ2h0OiAycHg7IHZlcnRpY2FsLWFsaWduOiB0b3A7IHRleHQtYWxpZ246IGxlZnQiPkNl cnRpZmljYXRlIGhvbGRlcnMgbWF5IGhhdmUgZGlmZmljdWx0eSB1bmRlcnN0YW5kaW5nIHdo ZXRoZXIgc29tZSBicm93c2VyIHZlcnNpb25zIHdpbGwgcmVqZWN0IHRoZWlyIGNlcnRpZmlj YXRlIGlmIGNlcnRhaW4gY29udGVudCBzcGVjaWZpY2F0aW9ucyBhcmUgbm90IG1ldCwgc3Vj aCBhcyBhIHN1YmplY3QgcHVibGljIGtleSB0aGF0IGRvZXMgbm90IHNhdGlzZnkgYSBtaW5p bXVtIGtleSBzaXplLCBvciBhIGNlcnRpZmljYXRlIHBvbGljaWVzIGV4dGVuc2lvbiB0aGF0 IGRvZXMgbm90IGNvbnRhaW4gYSBwYXJ0aWN1bGFyIHN0YW5kYXJkIHBvbGljeSBpZGVudGlm aWVyLjwvdGQ+PHRkIGNsYXNzPSJkaWZmX25leHQiIHN0eWxlPSJmb250LWZhbWlseTogbW9u b3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4OyB3aWR0aDog MTFweDsgcGFkZGluZy10b3A6IDJweDsgdmVydGljYWwtYWxpZ246IHRvcDsgYmFja2dyb3Vu ZDogI2RlZGVkZSI+PC90ZD48dGQgY2xhc3M9ImRpZmZfaGVhZGVyICIgc3R5bGU9ImZvbnQt ZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRpbmctbGVmdDogMnB4OyBwYWRkaW5nLXJpZ2h0OiAy cHg7IHdpZHRoOiAxZW07IHZlcnRpY2FsLWFsaWduOiB0b3A7IGJhY2tncm91bmQ6ICNkZWRl ZGUiPjEyPC90ZD48dGQgY2xhc3M9ImxpbmVDb250ZW50IiBzdHlsZT0iZm9udC1mYW1pbHk6 IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgdmVy dGljYWwtYWxpZ246IHRvcDsgdGV4dC1hbGlnbjogbGVmdCI+Q2VydGlmaWNhdGUgaG9sZGVy cyBtYXkgaGF2ZSBkaWZmaWN1bHR5IHVuZGVyc3RhbmRpbmcgd2hldGhlciBzb21lIGJyb3dz ZXIgdmVyc2lvbnMgd2lsbCByZWplY3QgdGhlaXIgY2VydGlmaWNhdGUgaWYgY2VydGFpbiBj b250ZW50IHNwZWNpZmljYXRpb25zIGFyZSBub3QgbWV0LCBzdWNoIGFzIGEgc3ViamVjdCBw dWJsaWMga2V5IHRoYXQgZG9lcyBub3Qgc2F0aXNmeSBhIG1pbmltdW0ga2V5IHNpemUsIG9y IGEgY2VydGlmaWNhdGUgcG9saWNpZXMgZXh0ZW5zaW9uIHRoYXQgZG9lcyBub3QgY29udGFp biBhIHBhcnRpY3VsYXIgc3RhbmRhcmQgcG9saWN5IGlkZW50aWZpZXIuPC90ZD48L3RyPgo8 dHI+PHRkIGNsYXNzPSJkaWZmX25leHQiIHN0eWxlPSJmb250LWZhbWlseTogbW9ub3NwYWNl OyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4OyB3aWR0aDogMTFweDsg cGFkZGluZy10b3A6IDJweDsgdmVydGljYWwtYWxpZ246IHRvcDsgYmFja2dyb3VuZDogI2Rl ZGVkZSI+PC90ZD48dGQgY2xhc3M9ImRpZmZfaGVhZGVyICIgc3R5bGU9ImZvbnQtZmFtaWx5 OiBtb25vc3BhY2U7IHBhZGRpbmctbGVmdDogMnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IHdp ZHRoOiAxZW07IHZlcnRpY2FsLWFsaWduOiB0b3A7IGJhY2tncm91bmQ6ICNkZWRlZGUiPjY8 L3RkPjx0ZCBjbGFzcz0ibGluZUNvbnRlbnQiIHN0eWxlPSJmb250LWZhbWlseTogbW9ub3Nw YWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4OyB2ZXJ0aWNhbC1h bGlnbjogdG9wOyB0ZXh0LWFsaWduOiBsZWZ0Ij48L3RkPjx0ZCBjbGFzcz0iZGlmZl9uZXh0 IiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBh ZGRpbmctcmlnaHQ6IDJweDsgd2lkdGg6IDExcHg7IHBhZGRpbmctdG9wOiAycHg7IHZlcnRp Y2FsLWFsaWduOiB0b3A7IGJhY2tncm91bmQ6ICNkZWRlZGUiPjwvdGQ+PHRkIGNsYXNzPSJk aWZmX2hlYWRlciAiIHN0eWxlPSJmb250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxl ZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4OyB3aWR0aDogMWVtOyB2ZXJ0aWNhbC1hbGln bjogdG9wOyBiYWNrZ3JvdW5kOiAjZGVkZWRlIj4xMzwvdGQ+PHRkIGNsYXNzPSJsaW5lQ29u dGVudCIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRpbmctbGVmdDogMnB4 OyBwYWRkaW5nLXJpZ2h0OiAycHg7IHZlcnRpY2FsLWFsaWduOiB0b3A7IHRleHQtYWxpZ246 IGxlZnQiPjwvdGQ+PC90cj4KPHRyPjx0ZCBjbGFzcz0iZGlmZl9uZXh0IiBnbG93aW5nPSIw IiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBh ZGRpbmctcmlnaHQ6IDJweDsgd2lkdGg6IDExcHg7IHBhZGRpbmctdG9wOiAycHg7IHZlcnRp Y2FsLWFsaWduOiB0b3A7IGJhY2tncm91bmQ6ICNkZWRlZGU7IGJhY2tncm91bmQtY29sb3I6 IHJnYigyMjIsIDIyMiwgMjIyKTsgIj48ZGl2IGNsYXNzPSJsaW5rX25leHQiIHRpdGxlPSJH byB0byBuZXh0IGRpZmZlcmVuY2UiIHN0eWxlPSJiYWNrZ3JvdW5kLWltYWdlOiB1cmwoaHR0 cDovL3d3dy50ZXh0LWNvbXBhcmUuY29tL21lZGlhL3RjLWFycm93LWRvd24tYmx1ZS5wbmcp OyBiYWNrZ3JvdW5kLXBvc2l0aW9uOiB0b3A7IGJhY2tncm91bmQtcmVwZWF0OiBuby1yZXBl YXQ7IGhlaWdodDogMTJweDsgd2lkdGg6IDExcHgiPjxhIGhyZWY9IiNkaWZmZXJlbmNlXzMi PjxkaXYgY2xhc3M9InRleHRfbmV4dCIgc3R5bGU9InZpc2liaWxpdHk6IGhpZGRlbiI+bjwv ZGl2PjwvYT48L2Rpdj48L3RkPjx0ZCBjbGFzcz0iIGhhc19kaWZmZXJlbmNlIiBzdHlsZT0i Zm9udC1mYW1pbHk6IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmln aHQ6IDJweDsgYmFja2dyb3VuZDogIzgxRjc4MTsgd2lkdGg6IDFlbSI+NzwvdGQ+PHRkIGNs YXNzPSJsaW5lQ29udGVudCIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRp bmctbGVmdDogMnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IHZlcnRpY2FsLWFsaWduOiB0b3A7 IHRleHQtYWxpZ246IGxlZnQiPkFuZCBmb3I8c3BhbiBjbGFzcz0iZGlmZmVyZW5jZSIgc3R5 bGU9IndpZHRoOiAxZW07IGJhY2tncm91bmQ6ICNBOUQwRjUiPiZuYnNwO2lzc3VlcnMsIGl0 IGNhbiBiZSBkaWZmaWN1bHQgdG8gcHJlZGljdCB3aGF0IHByb3BvcnRpb24gb2YgdGhlIHVz ZXIgcG9wdWxhdGlvbiB3aWxsIGFjY2VwdCBhPC9zcGFuPiZuYnNwO2NlcnRpZmljYXRlIGNo YWluIHdpdGggY2VydGFpbiBjaGFyYWN0ZXJpc3RpY3MuICZuYnNwO0ZvciBpbnN0YW5jZSwg d2hlbiBhIGJyb3dzZXIgaW5jbHVkZXMgYSBub25jZSBpbiBhbiBPQ1NQIHJlcXVlc3QgYnV0 IHRoZSBzZXJ2ZXIgc3VwcGxpZXMgYSByZXNwb25zZSB0aGF0IGRvZXMgbm90IGluY2x1ZGUg dGhlIG5vbmNlLCBpdCBpcyBoYXJkIHRvIGtub3cgd2hpY2ggYnJvd3NlcnMgd2lsbCBhY2Nl cHQgYW5kIHdoaWNoIHdpbGwgcmVqZWN0IHRoZSByZXNwb25zZS48L3RkPjx0ZCBjbGFzcz0i ZGlmZl9uZXh0IiBnbG93aW5nPSIwIiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsg cGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgd2lkdGg6IDExcHg7IHBh ZGRpbmctdG9wOiAycHg7IHZlcnRpY2FsLWFsaWduOiB0b3A7IGJhY2tncm91bmQ6ICNkZWRl ZGU7IGJhY2tncm91bmQtY29sb3I6IHJnYigyMjIsIDIyMiwgMjIyKTsgIj48ZGl2IGNsYXNz PSJsaW5rX25leHQiIHRpdGxlPSJHbyB0byBuZXh0IGRpZmZlcmVuY2UiIHN0eWxlPSJiYWNr Z3JvdW5kLWltYWdlOiB1cmwoaHR0cDovL3d3dy50ZXh0LWNvbXBhcmUuY29tL21lZGlhL3Rj LWFycm93LWRvd24tYmx1ZS5wbmcpOyBiYWNrZ3JvdW5kLXBvc2l0aW9uOiB0b3A7IGJhY2tn cm91bmQtcmVwZWF0OiBuby1yZXBlYXQ7IGhlaWdodDogMTJweDsgd2lkdGg6IDExcHgiPjxh IGhyZWY9IiNkaWZmZXJlbmNlXzMiPjxkaXYgY2xhc3M9InRleHRfbmV4dCIgc3R5bGU9InZp c2liaWxpdHk6IGhpZGRlbiI+bjwvZGl2PjwvYT48L2Rpdj48L3RkPjx0ZCBjbGFzcz0iIGhh c19kaWZmZXJlbmNlIiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsgcGFkZGluZy1s ZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgYmFja2dyb3VuZDogIzgxRjc4MTsgd2lk dGg6IDFlbSI+MTQ8L3RkPjx0ZCBjbGFzcz0ibGluZUNvbnRlbnQiIHN0eWxlPSJmb250LWZh bWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4 OyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyB0ZXh0LWFsaWduOiBsZWZ0Ij5BbmQgZm9yIGNlcnRp ZmljYXRlJm5ic3A7PHNwYW4gY2xhc3M9ImRpZmZlcmVuY2UiIHN0eWxlPSJ3aWR0aDogMWVt OyBiYWNrZ3JvdW5kOiAjQTlEMEY1Ij5pc3N1ZXJzLCBpdCBjYW4gYmUgZGlmZmljdWx0IHRv IHByZWRpY3Qgd2hhdCBwcm9wb3J0aW9uIG9mIHRoZSB1c2VyIHBvcHVsYXRpb24gd2lsbCBh Y2NlcHQgYSBjZXJ0aWZpY2F0ZSZuYnNwOzwvc3Bhbj5jaGFpbiB3aXRoIGNlcnRhaW4gY2hh cmFjdGVyaXN0aWNzLiAmbmJzcDtGb3IgaW5zdGFuY2UsIHdoZW4gYSBicm93c2VyIGluY2x1 ZGVzIGEgbm9uY2UgaW4gYW4gT0NTUCByZXF1ZXN0IGJ1dCB0aGUgc2VydmVyIHN1cHBsaWVz IGEgcmVzcG9uc2UgdGhhdCBkb2VzIG5vdCBpbmNsdWRlIHRoZSBub25jZSwgaXQgaXMgaGFy ZCB0byBrbm93IHdoaWNoIGJyb3dzZXJzIHdpbGwgYWNjZXB0IGFuZCB3aGljaCB3aWxsIHJl amVjdCB0aGUgcmVzcG9uc2UuPC90ZD48L3RyPgo8dHI+PHRkIGNsYXNzPSJkaWZmX25leHQi IGlkPSJkaWZmZXJlbmNlXzMiIHN0eWxlPSJmb250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRk aW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4OyB3aWR0aDogMTFweDsgcGFkZGlu Zy10b3A6IDJweDsgdmVydGljYWwtYWxpZ246IHRvcDsgYmFja2dyb3VuZDogI2RlZGVkZSI+ PC90ZD48dGQgY2xhc3M9ImRpZmZfaGVhZGVyICIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25v c3BhY2U7IHBhZGRpbmctbGVmdDogMnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IHdpZHRoOiAx ZW07IHZlcnRpY2FsLWFsaWduOiB0b3A7IGJhY2tncm91bmQ6ICNkZWRlZGUiPjg8L3RkPjx0 ZCBjbGFzcz0ibGluZUNvbnRlbnQiIHN0eWxlPSJmb250LWZhbWlseTogbW9ub3NwYWNlOyBw YWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4OyB2ZXJ0aWNhbC1hbGlnbjog dG9wOyB0ZXh0LWFsaWduOiBsZWZ0Ij48L3RkPjx0ZCBjbGFzcz0iZGlmZl9uZXh0IiBzdHls ZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmct cmlnaHQ6IDJweDsgd2lkdGg6IDExcHg7IHBhZGRpbmctdG9wOiAycHg7IHZlcnRpY2FsLWFs aWduOiB0b3A7IGJhY2tncm91bmQ6ICNkZWRlZGUiPjwvdGQ+PHRkIGNsYXNzPSJkaWZmX2hl YWRlciAiIHN0eWxlPSJmb250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJw eDsgcGFkZGluZy1yaWdodDogMnB4OyB3aWR0aDogMWVtOyB2ZXJ0aWNhbC1hbGlnbjogdG9w OyBiYWNrZ3JvdW5kOiAjZGVkZWRlIj4xNTwvdGQ+PHRkIGNsYXNzPSJsaW5lQ29udGVudCIg c3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRpbmctbGVmdDogMnB4OyBwYWRk aW5nLXJpZ2h0OiAycHg7IHZlcnRpY2FsLWFsaWduOiB0b3A7IHRleHQtYWxpZ246IGxlZnQi PjwvdGQ+PC90cj4KPHRyPjx0ZCBjbGFzcz0iZGlmZl9uZXh0IiBzdHlsZT0iZm9udC1mYW1p bHk6IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsg d2lkdGg6IDExcHg7IHBhZGRpbmctdG9wOiAycHg7IHZlcnRpY2FsLWFsaWduOiB0b3A7IGJh Y2tncm91bmQ6ICNkZWRlZGUiPjwvdGQ+PHRkIGNsYXNzPSJkaWZmX2hlYWRlciAiIHN0eWxl PSJmb250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1y aWdodDogMnB4OyB3aWR0aDogMWVtOyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyBiYWNrZ3JvdW5k OiAjZGVkZWRlIj45PC90ZD48dGQgY2xhc3M9ImxpbmVDb250ZW50IiBzdHlsZT0iZm9udC1m YW1pbHk6IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJw eDsgdmVydGljYWwtYWxpZ246IHRvcDsgdGV4dC1hbGlnbjogbGVmdCI+U3RhcnRpbmcgZnJv bSB0aGUgcHJlbWlzZSB0aGF0IG1vcmUgY29uc2lzdGVuY3kgaW4gV2ViIHNlY3VyaXR5IGJl aGF2aW9yIGlzIGRlc2lyYWJsZSwgYSBuYXR1cmFsIGZpcnN0IHN0ZXAgd291bGQgYmUgdG8g ZG9jdW1lbnQgY3VycmVudCBhbmQgaGlzdG9yaWMgYnJvd3NlciBhbmQgc2VydmVyIGJlaGF2 aW9yLiAmbmJzcDtCdXQsIHN1Y2ggYSBwcm9qZWN0IGhhcyB0byBiZSBib3VuZGVkLiAmbmJz cDtUaGVyZWZvcmUsIG9ubHkgc2VydmVyLWF1dGhlbnRpY2F0aW9uIGJlaGF2aW9yIGVuY291 bnRlcmVkIGluIG1vcmUgdGhhbiAwLjEgcGVyY2VudCBvZiBjb25uZWN0aW9ucyBtYWRlIGJ5 IGRlc2t0b3AgYW5kIG1vYmlsZSBicm93c2VycyBzaG91bGQgYmUgY29uc2lkZXJlZC4gJm5i c3A7V2hpbGUgaXQgaXMgbm90IGludGVuZGVkIHRvIGFwcGx5IHRoZSB0aHJlc2hvbGQgd2l0 aCBhbnkgcHJlY2lzaW9uLCBpdCBtYXkgYmUgdXNlZCB0byBqdXN0aWZ5IHRoZSBpbmNsdXNp b24gb3IgZXhjbHVzaW9uIG9mIGEgdGVjaG5pcXVlLjwvdGQ+PHRkIGNsYXNzPSJkaWZmX25l eHQiIHN0eWxlPSJmb250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsg cGFkZGluZy1yaWdodDogMnB4OyB3aWR0aDogMTFweDsgcGFkZGluZy10b3A6IDJweDsgdmVy dGljYWwtYWxpZ246IHRvcDsgYmFja2dyb3VuZDogI2RlZGVkZSI+PC90ZD48dGQgY2xhc3M9 ImRpZmZfaGVhZGVyICIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRpbmct bGVmdDogMnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IHdpZHRoOiAxZW07IHZlcnRpY2FsLWFs aWduOiB0b3A7IGJhY2tncm91bmQ6ICNkZWRlZGUiPjE2PC90ZD48dGQgY2xhc3M9ImxpbmVD b250ZW50IiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0OiAy cHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgdmVydGljYWwtYWxpZ246IHRvcDsgdGV4dC1hbGln bjogbGVmdCI+U3RhcnRpbmcgZnJvbSB0aGUgcHJlbWlzZSB0aGF0IG1vcmUgY29uc2lzdGVu Y3kgaW4gV2ViIHNlY3VyaXR5IGJlaGF2aW9yIGlzIGRlc2lyYWJsZSwgYSBuYXR1cmFsIGZp cnN0IHN0ZXAgd291bGQgYmUgdG8gZG9jdW1lbnQgY3VycmVudCBhbmQgaGlzdG9yaWMgYnJv d3NlciBhbmQgc2VydmVyIGJlaGF2aW9yLiAmbmJzcDtCdXQsIHN1Y2ggYSBwcm9qZWN0IGhh cyB0byBiZSBib3VuZGVkLiAmbmJzcDtUaGVyZWZvcmUsIG9ubHkgc2VydmVyLWF1dGhlbnRp Y2F0aW9uIGJlaGF2aW9yIGVuY291bnRlcmVkIGluIG1vcmUgdGhhbiAwLjEgcGVyY2VudCBv ZiBjb25uZWN0aW9ucyBtYWRlIGJ5IGRlc2t0b3AgYW5kIG1vYmlsZSBicm93c2VycyBzaG91 bGQgYmUgY29uc2lkZXJlZC4gJm5ic3A7V2hpbGUgaXQgaXMgbm90IGludGVuZGVkIHRvIGFw cGx5IHRoZSB0aHJlc2hvbGQgd2l0aCBhbnkgcHJlY2lzaW9uLCBpdCBtYXkgYmUgdXNlZCB0 byBqdXN0aWZ5IHRoZSBpbmNsdXNpb24gb3IgZXhjbHVzaW9uIG9mIGEgdGVjaG5pcXVlLjwv dGQ+PC90cj4KPHRyPjx0ZCBjbGFzcz0iZGlmZl9uZXh0IiBzdHlsZT0iZm9udC1mYW1pbHk6 IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgd2lk dGg6IDExcHg7IHBhZGRpbmctdG9wOiAycHg7IHZlcnRpY2FsLWFsaWduOiB0b3A7IGJhY2tn cm91bmQ6ICNkZWRlZGUiPjwvdGQ+PHRkIGNsYXNzPSJkaWZmX2hlYWRlciAiIHN0eWxlPSJm b250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdo dDogMnB4OyB3aWR0aDogMWVtOyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyBiYWNrZ3JvdW5kOiAj ZGVkZWRlIj4xMDwvdGQ+PHRkIGNsYXNzPSJsaW5lQ29udGVudCIgc3R5bGU9ImZvbnQtZmFt aWx5OiBtb25vc3BhY2U7IHBhZGRpbmctbGVmdDogMnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7 IHZlcnRpY2FsLWFsaWduOiB0b3A7IHRleHQtYWxpZ246IGxlZnQiPjwvdGQ+PHRkIGNsYXNz PSJkaWZmX25leHQiIHN0eWxlPSJmb250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxl ZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4OyB3aWR0aDogMTFweDsgcGFkZGluZy10b3A6 IDJweDsgdmVydGljYWwtYWxpZ246IHRvcDsgYmFja2dyb3VuZDogI2RlZGVkZSI+PC90ZD48 dGQgY2xhc3M9ImRpZmZfaGVhZGVyICIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7 IHBhZGRpbmctbGVmdDogMnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IHdpZHRoOiAxZW07IHZl cnRpY2FsLWFsaWduOiB0b3A7IGJhY2tncm91bmQ6ICNkZWRlZGUiPjE3PC90ZD48dGQgY2xh c3M9ImxpbmVDb250ZW50IiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsgcGFkZGlu Zy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgdmVydGljYWwtYWxpZ246IHRvcDsg dGV4dC1hbGlnbjogbGVmdCI+PC90ZD48L3RyPgo8dHI+PHRkIGNsYXNzPSJkaWZmX25leHQi IHN0eWxlPSJmb250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFk ZGluZy1yaWdodDogMnB4OyB3aWR0aDogMTFweDsgcGFkZGluZy10b3A6IDJweDsgdmVydGlj YWwtYWxpZ246IHRvcDsgYmFja2dyb3VuZDogI2RlZGVkZSI+PC90ZD48dGQgY2xhc3M9ImRp ZmZfaGVhZGVyICIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRpbmctbGVm dDogMnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IHdpZHRoOiAxZW07IHZlcnRpY2FsLWFsaWdu OiB0b3A7IGJhY2tncm91bmQ6ICNkZWRlZGUiPjExPC90ZD48dGQgY2xhc3M9ImxpbmVDb250 ZW50IiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7 IHBhZGRpbmctcmlnaHQ6IDJweDsgdmVydGljYWwtYWxpZ246IHRvcDsgdGV4dC1hbGlnbjog bGVmdCI+RnV0dXJlIGFjdGl2aXRpZXMgbWF5IGF0dGVtcHQgdG8gcHJlc2NyaWJlIGhvdyB0 aGUgV2ViIFBLSSAic2hvdWxkIiB3b3JrLCBhbmQgdGhlIHByZXNjcmlwdGlvbiBtYXkgdHVy biBvdXQgdG8gYmUgYSBwcm9wZXIgc3Vic2V0IG9mIHRoZSBQS0lYIFBLSS4gJm5ic3A7SG93 ZXZlciwgdGhhdCB0YXNrIGlzIGV4cGxpY2l0bHkgbm90IGEgZ29hbCBvZiB0aGUgcHJvcG9z ZWQgd29ya2luZyBncm91cC4gJm5ic3A7SW5zdGVhZCwgdGhlIGdyb3VwJ3MgZ29hbCBpcyBt ZXJlbHkgdG8gZGVzY3JpYmUgaG93IHRoZSBXZWIgUEtJICJhY3R1YWxseSIgd29ya3MgaW4g dGhlIHNldCBvZiBicm93c2VycyBhbmQgc2VydmVycyB0aGF0IGFyZSBpbiBjb21tb24gdXNl IHRvZGF5LjwvdGQ+PHRkIGNsYXNzPSJkaWZmX25leHQiIHN0eWxlPSJmb250LWZhbWlseTog bW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4OyB3aWR0 aDogMTFweDsgcGFkZGluZy10b3A6IDJweDsgdmVydGljYWwtYWxpZ246IHRvcDsgYmFja2dy b3VuZDogI2RlZGVkZSI+PC90ZD48dGQgY2xhc3M9ImRpZmZfaGVhZGVyICIgc3R5bGU9ImZv bnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRpbmctbGVmdDogMnB4OyBwYWRkaW5nLXJpZ2h0 OiAycHg7IHdpZHRoOiAxZW07IHZlcnRpY2FsLWFsaWduOiB0b3A7IGJhY2tncm91bmQ6ICNk ZWRlZGUiPjE4PC90ZD48dGQgY2xhc3M9ImxpbmVDb250ZW50IiBzdHlsZT0iZm9udC1mYW1p bHk6IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsg dmVydGljYWwtYWxpZ246IHRvcDsgdGV4dC1hbGlnbjogbGVmdCI+RnV0dXJlIGFjdGl2aXRp ZXMgbWF5IGF0dGVtcHQgdG8gcHJlc2NyaWJlIGhvdyB0aGUgV2ViIFBLSSAic2hvdWxkIiB3 b3JrLCBhbmQgdGhlIHByZXNjcmlwdGlvbiBtYXkgdHVybiBvdXQgdG8gYmUgYSBwcm9wZXIg c3Vic2V0IG9mIHRoZSBQS0lYIFBLSS4gJm5ic3A7SG93ZXZlciwgdGhhdCB0YXNrIGlzIGV4 cGxpY2l0bHkgbm90IGEgZ29hbCBvZiB0aGUgcHJvcG9zZWQgd29ya2luZyBncm91cC4gJm5i c3A7SW5zdGVhZCwgdGhlIGdyb3VwJ3MgZ29hbCBpcyBtZXJlbHkgdG8gZGVzY3JpYmUgaG93 IHRoZSBXZWIgUEtJICJhY3R1YWxseSIgd29ya3MgaW4gdGhlIHNldCBvZiBicm93c2VycyBh bmQgc2VydmVycyB0aGF0IGFyZSBpbiBjb21tb24gdXNlIHRvZGF5LjwvdGQ+PC90cj4KPHRy Pjx0ZCBjbGFzcz0iZGlmZl9uZXh0IiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsg cGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgd2lkdGg6IDExcHg7IHBh ZGRpbmctdG9wOiAycHg7IHZlcnRpY2FsLWFsaWduOiB0b3A7IGJhY2tncm91bmQ6ICNkZWRl ZGUiPjwvdGQ+PHRkIGNsYXNzPSJkaWZmX2hlYWRlciAiIHN0eWxlPSJmb250LWZhbWlseTog bW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4OyB3aWR0 aDogMWVtOyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyBiYWNrZ3JvdW5kOiAjZGVkZWRlIj4xMjwv dGQ+PHRkIGNsYXNzPSJsaW5lQ29udGVudCIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3Bh Y2U7IHBhZGRpbmctbGVmdDogMnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IHZlcnRpY2FsLWFs aWduOiB0b3A7IHRleHQtYWxpZ246IGxlZnQiPjwvdGQ+PHRkIGNsYXNzPSJkaWZmX25leHQi IHN0eWxlPSJmb250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFk ZGluZy1yaWdodDogMnB4OyB3aWR0aDogMTFweDsgcGFkZGluZy10b3A6IDJweDsgdmVydGlj YWwtYWxpZ246IHRvcDsgYmFja2dyb3VuZDogI2RlZGVkZSI+PC90ZD48dGQgY2xhc3M9ImRp ZmZfaGVhZGVyICIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRpbmctbGVm dDogMnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IHdpZHRoOiAxZW07IHZlcnRpY2FsLWFsaWdu OiB0b3A7IGJhY2tncm91bmQ6ICNkZWRlZGUiPjE5PC90ZD48dGQgY2xhc3M9ImxpbmVDb250 ZW50IiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7 IHBhZGRpbmctcmlnaHQ6IDJweDsgdmVydGljYWwtYWxpZ246IHRvcDsgdGV4dC1hbGlnbjog bGVmdCI+PC90ZD48L3RyPgo8dHI+PHRkIGNsYXNzPSJkaWZmX25leHQiIGdsb3dpbmc9IjAi IHN0eWxlPSJmb250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFk ZGluZy1yaWdodDogMnB4OyB3aWR0aDogMTFweDsgcGFkZGluZy10b3A6IDJweDsgdmVydGlj YWwtYWxpZ246IHRvcDsgYmFja2dyb3VuZDogI2RlZGVkZTsgYmFja2dyb3VuZC1jb2xvcjog cmdiKDIyMiwgMjIyLCAyMjIpOyAiPjxkaXYgY2xhc3M9ImxpbmtfbmV4dCIgdGl0bGU9Ikdv IHRvIG5leHQgZGlmZmVyZW5jZSIgc3R5bGU9ImJhY2tncm91bmQtaW1hZ2U6IHVybChodHRw Oi8vd3d3LnRleHQtY29tcGFyZS5jb20vbWVkaWEvdGMtYXJyb3ctZG93bi1ibHVlLnBuZyk7 IGJhY2tncm91bmQtcG9zaXRpb246IHRvcDsgYmFja2dyb3VuZC1yZXBlYXQ6IG5vLXJlcGVh dDsgaGVpZ2h0OiAxMnB4OyB3aWR0aDogMTFweCI+PGEgaHJlZj0iI2RpZmZlcmVuY2VfNCI+ PGRpdiBjbGFzcz0idGV4dF9uZXh0IiBzdHlsZT0idmlzaWJpbGl0eTogaGlkZGVuIj5uPC9k aXY+PC9hPjwvZGl2PjwvdGQ+PHRkIGNsYXNzPSIgaGFzX2RpZmZlcmVuY2UiIHN0eWxlPSJm b250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdo dDogMnB4OyBiYWNrZ3JvdW5kOiAjODFGNzgxOyB3aWR0aDogMWVtIj4xMzwvdGQ+PHRkIGNs YXNzPSJsaW5lQ29udGVudCIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRp bmctbGVmdDogMnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IHZlcnRpY2FsLWFsaWduOiB0b3A7 IHRleHQtYWxpZ246IGxlZnQiPjxzcGFuIGNsYXNzPSJkaWZmZXJlbmNlIiBzdHlsZT0id2lk dGg6IDFlbTsgYmFja2dyb3VuZDogI0E5RDBGNSI+QWRkaXRpb25hbGx5LCBhIG51bWJlciBv ZiBhcHBsaWNhdGlvbnMgKHN1Y2ggYXMgY2xpZW50IGF1dGhlbnRpY2F0aW9uLCBkb2N1bWVu dCBzaWduaW5nLCBjb2RlIHNpZ25pbmcsIGFuZCBlbWFpbCkgbWF5IHVzZSB0aGUgc2FtZSB0 cnVzdCBhbmNob3JzIGFuZCBjZXJ0aWZpY2F0ZS1oYW5kbGluZyBsaWJyYXJpZXMgYXMgdGhl IG9uZXMgdXNlZCBmb3Igc2VydmVyIGF1dGhlbnRpY2F0aW9uIG9uIHRoZSBXZWIuICZuYnNw O05ldmVydGhlbGVzcywgdGhleSBtYXkgdXNlIHRoZSByZXN1bHRzIGluIGEgd2F5IHRoYXQg aXMgdmlzaWJseSBkaWZmZXJlbnQgZnJvbSB0aGUgd2F5IGluIHdoaWNoIHRoZXkgYXJlIHVz ZWQgZm9yIHNlcnZlciBhdXRoZW50aWNhdGlvbi4gJm5ic3A7V2hpbGUgdGhlc2UgYXBwbGlj YXRpb25zIGFyZSBjb25zaWRlcmVkIG91dHNpZGUgdGhlIHNjb3BlIG9mIHRoaXMgd29ya2lu ZyBncm91cCwgZGVsaXZlcmFibGVzIHNob3VsZCAod2hlcmV2ZXIgcHJhY3RpY2FsIHdpdGhp biB0aGUgYXZhaWxhYmxlIGV4cGVydGlzZSBhbmQgdGltZSkgaWRlbnRpZnkgb3RoZXIgYXBw bGljYXRpb25zIHRoYXQgZXhoaWJpdCBpZGVudGljYWwgYmVoYXZpb3IgYW5kIGlkZW50aWZ5 IHRoZSBpbXBsaWNhdGlvbnMgb2YgdGhhdCBiZWhhdmlvciB3aGVyZSB0aGV5IGRpZmZlciBm cm9tIHRob3NlIGZvciBzZXJ2ZXIgYXV0aGVudGljYXRpb24uCjwvc3Bhbj48L3RkPjx0ZCBj bGFzcz0iZGlmZl9uZXh0IiBnbG93aW5nPSIwIiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9z cGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgd2lkdGg6IDEx cHg7IHBhZGRpbmctdG9wOiAycHg7IHZlcnRpY2FsLWFsaWduOiB0b3A7IGJhY2tncm91bmQ6 ICNkZWRlZGU7IGJhY2tncm91bmQtY29sb3I6IHJnYigyMjIsIDIyMiwgMjIyKTsgIj48ZGl2 IGNsYXNzPSJsaW5rX25leHQiIHRpdGxlPSJHbyB0byBuZXh0IGRpZmZlcmVuY2UiIHN0eWxl PSJiYWNrZ3JvdW5kLWltYWdlOiB1cmwoaHR0cDovL3d3dy50ZXh0LWNvbXBhcmUuY29tL21l ZGlhL3RjLWFycm93LWRvd24tYmx1ZS5wbmcpOyBiYWNrZ3JvdW5kLXBvc2l0aW9uOiB0b3A7 IGJhY2tncm91bmQtcmVwZWF0OiBuby1yZXBlYXQ7IGhlaWdodDogMTJweDsgd2lkdGg6IDEx cHgiPjxhIGhyZWY9IiNkaWZmZXJlbmNlXzQiPjxkaXYgY2xhc3M9InRleHRfbmV4dCIgc3R5 bGU9InZpc2liaWxpdHk6IGhpZGRlbiI+bjwvZGl2PjwvYT48L2Rpdj48L3RkPjx0ZCBjbGFz cz0iIGhhc19kaWZmZXJlbmNlIiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsgcGFk ZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgYmFja2dyb3VuZDogIzgxRjc4 MTsgd2lkdGg6IDFlbSI+MjA8L3RkPjx0ZCBjbGFzcz0ibGluZUNvbnRlbnQiIHN0eWxlPSJm b250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdo dDogMnB4OyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyB0ZXh0LWFsaWduOiBsZWZ0Ij48c3BhbiBj bGFzcz0iZGlmZmVyZW5jZSIgc3R5bGU9IndpZHRoOiAxZW07IGJhY2tncm91bmQ6ICNBOUQw RjUiPkFkZGl0aW9uYWxseSwgYSBudW1iZXIgb2YgYXBwbGljYXRpb25zIChzdWNoIGFzIGNs aWVudCBhdXRoZW50aWNhdGlvbiwKPC9zcGFuPjwvdGQ+PC90cj4KPHRyPjx0ZCBjbGFzcz0i ZGlmZl9uZXh0IiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0 OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgd2lkdGg6IDExcHg7IHBhZGRpbmctdG9wOiAy cHg7IHZlcnRpY2FsLWFsaWduOiB0b3A7IGJhY2tncm91bmQ6ICNkZWRlZGUiPjwvdGQ+PHRk IGNsYXNzPSIgaGFzX2RpZmZlcmVuY2UiIHN0eWxlPSJmb250LWZhbWlseTogbW9ub3NwYWNl OyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4OyBiYWNrZ3JvdW5kOiAj ODFGNzgxOyB3aWR0aDogMWVtIj48L3RkPjx0ZCBjbGFzcz0ibGluZUNvbnRlbnQiIHN0eWxl PSJmb250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1y aWdodDogMnB4OyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyB0ZXh0LWFsaWduOiBsZWZ0Ij48L3Rk Pjx0ZCBjbGFzcz0iZGlmZl9uZXh0IiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsg cGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgd2lkdGg6IDExcHg7IHBh ZGRpbmctdG9wOiAycHg7IHZlcnRpY2FsLWFsaWduOiB0b3A7IGJhY2tncm91bmQ6ICNkZWRl ZGUiPjwvdGQ+PHRkIGNsYXNzPSIgaGFzX2RpZmZlcmVuY2UiIHN0eWxlPSJmb250LWZhbWls eTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4OyBi YWNrZ3JvdW5kOiAjODFGNzgxOyB3aWR0aDogMWVtIj4yMTwvdGQ+PHRkIGNsYXNzPSJsaW5l Q29udGVudCIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRpbmctbGVmdDog MnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IHZlcnRpY2FsLWFsaWduOiB0b3A7IHRleHQtYWxp Z246IGxlZnQiPjxzcGFuIGNsYXNzPSJkaWZmZXJlbmNlIiBzdHlsZT0id2lkdGg6IDFlbTsg YmFja2dyb3VuZDogI0E5RDBGNSI+ZG9jdW1lbnQgc2lnbmluZywgY29kZSBzaWduaW5nLCBh bmQgZW1haWwpIG9mdGVuIHVzZSB0aGUgc2FtZSB0cnVzdCBhbmNob3JzIGFuZAo8L3NwYW4+ PC90ZD48L3RyPgo8dHI+PHRkIGNsYXNzPSJkaWZmX25leHQiIHN0eWxlPSJmb250LWZhbWls eTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4OyB3 aWR0aDogMTFweDsgcGFkZGluZy10b3A6IDJweDsgdmVydGljYWwtYWxpZ246IHRvcDsgYmFj a2dyb3VuZDogI2RlZGVkZSI+PC90ZD48dGQgY2xhc3M9IiBoYXNfZGlmZmVyZW5jZSIgc3R5 bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRpbmctbGVmdDogMnB4OyBwYWRkaW5n LXJpZ2h0OiAycHg7IGJhY2tncm91bmQ6ICM4MUY3ODE7IHdpZHRoOiAxZW0iPjwvdGQ+PHRk IGNsYXNzPSJsaW5lQ29udGVudCIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBh ZGRpbmctbGVmdDogMnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IHZlcnRpY2FsLWFsaWduOiB0 b3A7IHRleHQtYWxpZ246IGxlZnQiPjwvdGQ+PHRkIGNsYXNzPSJkaWZmX25leHQiIHN0eWxl PSJmb250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1y aWdodDogMnB4OyB3aWR0aDogMTFweDsgcGFkZGluZy10b3A6IDJweDsgdmVydGljYWwtYWxp Z246IHRvcDsgYmFja2dyb3VuZDogI2RlZGVkZSI+PC90ZD48dGQgY2xhc3M9IiBoYXNfZGlm ZmVyZW5jZSIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRpbmctbGVmdDog MnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IGJhY2tncm91bmQ6ICM4MUY3ODE7IHdpZHRoOiAx ZW0iPjIyPC90ZD48dGQgY2xhc3M9ImxpbmVDb250ZW50IiBzdHlsZT0iZm9udC1mYW1pbHk6 IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgdmVy dGljYWwtYWxpZ246IHRvcDsgdGV4dC1hbGlnbjogbGVmdCI+PHNwYW4gY2xhc3M9ImRpZmZl cmVuY2UiIHN0eWxlPSJ3aWR0aDogMWVtOyBiYWNrZ3JvdW5kOiAjQTlEMEY1Ij5jZXJ0aWZp Y2F0ZSBwcm9jZXNzaW5nIG1lY2hhbmlzbXMgYXMgdXNlZCBmb3Igc2VydmVyIGF1dGhlbnRp Y2F0aW9uIG9uIHRoZQo8L3NwYW4+PC90ZD48L3RyPgo8dHI+PHRkIGNsYXNzPSJkaWZmX25l eHQiIHN0eWxlPSJmb250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsg cGFkZGluZy1yaWdodDogMnB4OyB3aWR0aDogMTFweDsgcGFkZGluZy10b3A6IDJweDsgdmVy dGljYWwtYWxpZ246IHRvcDsgYmFja2dyb3VuZDogI2RlZGVkZSI+PC90ZD48dGQgY2xhc3M9 IiBoYXNfZGlmZmVyZW5jZSIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRp bmctbGVmdDogMnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IGJhY2tncm91bmQ6ICM4MUY3ODE7 IHdpZHRoOiAxZW0iPjwvdGQ+PHRkIGNsYXNzPSJsaW5lQ29udGVudCIgc3R5bGU9ImZvbnQt ZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRpbmctbGVmdDogMnB4OyBwYWRkaW5nLXJpZ2h0OiAy cHg7IHZlcnRpY2FsLWFsaWduOiB0b3A7IHRleHQtYWxpZ246IGxlZnQiPjwvdGQ+PHRkIGNs YXNzPSJkaWZmX25leHQiIHN0eWxlPSJmb250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5n LWxlZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4OyB3aWR0aDogMTFweDsgcGFkZGluZy10 b3A6IDJweDsgdmVydGljYWwtYWxpZ246IHRvcDsgYmFja2dyb3VuZDogI2RlZGVkZSI+PC90 ZD48dGQgY2xhc3M9IiBoYXNfZGlmZmVyZW5jZSIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25v c3BhY2U7IHBhZGRpbmctbGVmdDogMnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IGJhY2tncm91 bmQ6ICM4MUY3ODE7IHdpZHRoOiAxZW0iPjIzPC90ZD48dGQgY2xhc3M9ImxpbmVDb250ZW50 IiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBh ZGRpbmctcmlnaHQ6IDJweDsgdmVydGljYWwtYWxpZ246IHRvcDsgdGV4dC1hbGlnbjogbGVm dCI+PHNwYW4gY2xhc3M9ImRpZmZlcmVuY2UiIHN0eWxlPSJ3aWR0aDogMWVtOyBiYWNrZ3Jv dW5kOiAjQTlEMEY1Ij5XZWIuICZuYnNwO1RoaXMgcmV1c2UgY3JlYXRlcyBwcm9ibGVtcyBp biBzb21lIHNpdHVhdGlvbnMgWzFdLiAmbmJzcDtXaGlsZSB0aGVzZQo8L3NwYW4+PC90ZD48 L3RyPgo8dHI+PHRkIGNsYXNzPSJkaWZmX25leHQiIGlkPSJkaWZmZXJlbmNlXzQiIHN0eWxl PSJmb250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1y aWdodDogMnB4OyB3aWR0aDogMTFweDsgcGFkZGluZy10b3A6IDJweDsgdmVydGljYWwtYWxp Z246IHRvcDsgYmFja2dyb3VuZDogI2RlZGVkZSI+PC90ZD48dGQgY2xhc3M9IiBoYXNfZGlm ZmVyZW5jZSIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRpbmctbGVmdDog MnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IGJhY2tncm91bmQ6ICM4MUY3ODE7IHdpZHRoOiAx ZW0iPjwvdGQ+PHRkIGNsYXNzPSJsaW5lQ29udGVudCIgc3R5bGU9ImZvbnQtZmFtaWx5OiBt b25vc3BhY2U7IHBhZGRpbmctbGVmdDogMnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IHZlcnRp Y2FsLWFsaWduOiB0b3A7IHRleHQtYWxpZ246IGxlZnQiPjwvdGQ+PHRkIGNsYXNzPSJkaWZm X25leHQiIHN0eWxlPSJmb250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJw eDsgcGFkZGluZy1yaWdodDogMnB4OyB3aWR0aDogMTFweDsgcGFkZGluZy10b3A6IDJweDsg dmVydGljYWwtYWxpZ246IHRvcDsgYmFja2dyb3VuZDogI2RlZGVkZSI+PC90ZD48dGQgY2xh c3M9IiBoYXNfZGlmZmVyZW5jZSIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBh ZGRpbmctbGVmdDogMnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IGJhY2tncm91bmQ6ICM4MUY3 ODE7IHdpZHRoOiAxZW0iPjI0PC90ZD48dGQgY2xhc3M9ImxpbmVDb250ZW50IiBzdHlsZT0i Zm9udC1mYW1pbHk6IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmln aHQ6IDJweDsgdmVydGljYWwtYWxpZ246IHRvcDsgdGV4dC1hbGlnbjogbGVmdCI+PHNwYW4g Y2xhc3M9ImRpZmZlcmVuY2UiIHN0eWxlPSJ3aWR0aDogMWVtOyBiYWNrZ3JvdW5kOiAjQTlE MEY1Ij5hcHBsaWNhdGlvbnMgYXJlIG91dHNpZGUgdGhlIHNjb3BlIG9mIHRoaXMgd29ya2lu ZyBncm91cCwgZGVsaXZlcmFibGVzCjwvc3Bhbj48L3RkPjwvdHI+Cjx0cj48dGQgY2xhc3M9 ImRpZmZfbmV4dCIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRpbmctbGVm dDogMnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IHdpZHRoOiAxMXB4OyBwYWRkaW5nLXRvcDog MnB4OyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyBiYWNrZ3JvdW5kOiAjZGVkZWRlIj48L3RkPjx0 ZCBjbGFzcz0iIGhhc19kaWZmZXJlbmNlIiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFj ZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgYmFja2dyb3VuZDog IzgxRjc4MTsgd2lkdGg6IDFlbSI+PC90ZD48dGQgY2xhc3M9ImxpbmVDb250ZW50IiBzdHls ZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmct cmlnaHQ6IDJweDsgdmVydGljYWwtYWxpZ246IHRvcDsgdGV4dC1hbGlnbjogbGVmdCI+PC90 ZD48dGQgY2xhc3M9ImRpZmZfbmV4dCIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7 IHBhZGRpbmctbGVmdDogMnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IHdpZHRoOiAxMXB4OyBw YWRkaW5nLXRvcDogMnB4OyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyBiYWNrZ3JvdW5kOiAjZGVk ZWRlIj48L3RkPjx0ZCBjbGFzcz0iIGhhc19kaWZmZXJlbmNlIiBzdHlsZT0iZm9udC1mYW1p bHk6IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsg YmFja2dyb3VuZDogIzgxRjc4MTsgd2lkdGg6IDFlbSI+MjU8L3RkPjx0ZCBjbGFzcz0ibGlu ZUNvbnRlbnQiIHN0eWxlPSJmb250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6 IDJweDsgcGFkZGluZy1yaWdodDogMnB4OyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyB0ZXh0LWFs aWduOiBsZWZ0Ij48c3BhbiBjbGFzcz0iZGlmZmVyZW5jZSIgc3R5bGU9IndpZHRoOiAxZW07 IGJhY2tncm91bmQ6ICNBOUQwRjUiPnNob3VsZCAod2hlcmV2ZXIgcHJhY3RpY2FsIHdpdGhp biB0aGUgYXZhaWxhYmxlIGV4cGVydGlzZSBhbmQgdGltZSkgaWRlbnRpZnkKPC9zcGFuPjwv dGQ+PC90cj4KPHRyPjx0ZCBjbGFzcz0iZGlmZl9uZXh0IiBpZD0iZGlmZmVyZW5jZV81IiBz dHlsZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBhZGRp bmctcmlnaHQ6IDJweDsgd2lkdGg6IDExcHg7IHBhZGRpbmctdG9wOiAycHg7IHZlcnRpY2Fs LWFsaWduOiB0b3A7IGJhY2tncm91bmQ6ICNkZWRlZGUiPjwvdGQ+PHRkIGNsYXNzPSIgaGFz X2RpZmZlcmVuY2UiIHN0eWxlPSJmb250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxl ZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4OyBiYWNrZ3JvdW5kOiAjODFGNzgxOyB3aWR0 aDogMWVtIj48L3RkPjx0ZCBjbGFzcz0ibGluZUNvbnRlbnQiIHN0eWxlPSJmb250LWZhbWls eTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4OyB2 ZXJ0aWNhbC1hbGlnbjogdG9wOyB0ZXh0LWFsaWduOiBsZWZ0Ij48L3RkPjx0ZCBjbGFzcz0i ZGlmZl9uZXh0IiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0 OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgd2lkdGg6IDExcHg7IHBhZGRpbmctdG9wOiAy cHg7IHZlcnRpY2FsLWFsaWduOiB0b3A7IGJhY2tncm91bmQ6ICNkZWRlZGUiPjwvdGQ+PHRk IGNsYXNzPSIgaGFzX2RpZmZlcmVuY2UiIHN0eWxlPSJmb250LWZhbWlseTogbW9ub3NwYWNl OyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4OyBiYWNrZ3JvdW5kOiAj ODFGNzgxOyB3aWR0aDogMWVtIj4yNjwvdGQ+PHRkIGNsYXNzPSJsaW5lQ29udGVudCIgc3R5 bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRpbmctbGVmdDogMnB4OyBwYWRkaW5n LXJpZ2h0OiAycHg7IHZlcnRpY2FsLWFsaWduOiB0b3A7IHRleHQtYWxpZ246IGxlZnQiPjxz cGFuIGNsYXNzPSJkaWZmZXJlbmNlIiBzdHlsZT0id2lkdGg6IDFlbTsgYmFja2dyb3VuZDog I0E5RDBGNSI+bWVjaGFuaXNtcyB0aGF0IGFyZSByZXVzZWQgYnkgb3RoZXIgYXBwbGljYXRp b25zIGFuZCBpZGVudGlmeSB0aGUKPC9zcGFuPjwvdGQ+PC90cj4KPHRyPjx0ZCBjbGFzcz0i ZGlmZl9uZXh0IiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0 OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgd2lkdGg6IDExcHg7IHBhZGRpbmctdG9wOiAy cHg7IHZlcnRpY2FsLWFsaWduOiB0b3A7IGJhY2tncm91bmQ6ICNkZWRlZGUiPjwvdGQ+PHRk IGNsYXNzPSIgaGFzX2RpZmZlcmVuY2UiIHN0eWxlPSJmb250LWZhbWlseTogbW9ub3NwYWNl OyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4OyBiYWNrZ3JvdW5kOiAj ODFGNzgxOyB3aWR0aDogMWVtIj48L3RkPjx0ZCBjbGFzcz0ibGluZUNvbnRlbnQiIHN0eWxl PSJmb250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1y aWdodDogMnB4OyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyB0ZXh0LWFsaWduOiBsZWZ0Ij48L3Rk Pjx0ZCBjbGFzcz0iZGlmZl9uZXh0IiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsg cGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgd2lkdGg6IDExcHg7IHBh ZGRpbmctdG9wOiAycHg7IHZlcnRpY2FsLWFsaWduOiB0b3A7IGJhY2tncm91bmQ6ICNkZWRl ZGUiPjwvdGQ+PHRkIGNsYXNzPSIgaGFzX2RpZmZlcmVuY2UiIHN0eWxlPSJmb250LWZhbWls eTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4OyBi YWNrZ3JvdW5kOiAjODFGNzgxOyB3aWR0aDogMWVtIj4yNzwvdGQ+PHRkIGNsYXNzPSJsaW5l Q29udGVudCIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRpbmctbGVmdDog MnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IHZlcnRpY2FsLWFsaWduOiB0b3A7IHRleHQtYWxp Z246IGxlZnQiPjxzcGFuIGNsYXNzPSJkaWZmZXJlbmNlIiBzdHlsZT0id2lkdGg6IDFlbTsg YmFja2dyb3VuZDogI0E5RDBGNSI+aW1wbGljYXRpb25zIG9mIHRoYXQgcmV1c2UuCjwvc3Bh bj48L3RkPjwvdHI+Cjx0cj48dGQgY2xhc3M9ImRpZmZfbmV4dCIgaWQ9ImRpZmZlcmVuY2Vf NiIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRpbmctbGVmdDogMnB4OyBw YWRkaW5nLXJpZ2h0OiAycHg7IHdpZHRoOiAxMXB4OyBwYWRkaW5nLXRvcDogMnB4OyB2ZXJ0 aWNhbC1hbGlnbjogdG9wOyBiYWNrZ3JvdW5kOiAjZGVkZWRlIj48L3RkPjx0ZCBjbGFzcz0i ZGlmZl9oZWFkZXIgIiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsgcGFkZGluZy1s ZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgd2lkdGg6IDFlbTsgdmVydGljYWwtYWxp Z246IHRvcDsgYmFja2dyb3VuZDogI2RlZGVkZSI+MTQ8L3RkPjx0ZCBjbGFzcz0ibGluZUNv bnRlbnQiIHN0eWxlPSJmb250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJw eDsgcGFkZGluZy1yaWdodDogMnB4OyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyB0ZXh0LWFsaWdu OiBsZWZ0Ij48L3RkPjx0ZCBjbGFzcz0iZGlmZl9uZXh0IiBzdHlsZT0iZm9udC1mYW1pbHk6 IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgd2lk dGg6IDExcHg7IHBhZGRpbmctdG9wOiAycHg7IHZlcnRpY2FsLWFsaWduOiB0b3A7IGJhY2tn cm91bmQ6ICNkZWRlZGUiPjwvdGQ+PHRkIGNsYXNzPSJkaWZmX2hlYWRlciAiIHN0eWxlPSJm b250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdo dDogMnB4OyB3aWR0aDogMWVtOyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyBiYWNrZ3JvdW5kOiAj ZGVkZWRlIj4yODwvdGQ+PHRkIGNsYXNzPSJsaW5lQ29udGVudCIgc3R5bGU9ImZvbnQtZmFt aWx5OiBtb25vc3BhY2U7IHBhZGRpbmctbGVmdDogMnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7 IHZlcnRpY2FsLWFsaWduOiB0b3A7IHRleHQtYWxpZ246IGxlZnQiPjwvdGQ+PC90cj4KPHRy Pjx0ZCBjbGFzcz0iZGlmZl9uZXh0IiBnbG93aW5nPSIwIiBzdHlsZT0iZm9udC1mYW1pbHk6 IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgd2lk dGg6IDExcHg7IHBhZGRpbmctdG9wOiAycHg7IHZlcnRpY2FsLWFsaWduOiB0b3A7IGJhY2tn cm91bmQ6ICNkZWRlZGU7IGJhY2tncm91bmQtY29sb3I6IHJnYigyMjIsIDIyMiwgMjIyKTsg Ij48ZGl2IGNsYXNzPSJsaW5rX25leHQiIHRpdGxlPSJHbyB0byBuZXh0IGRpZmZlcmVuY2Ui IHN0eWxlPSJiYWNrZ3JvdW5kLWltYWdlOiB1cmwoaHR0cDovL3d3dy50ZXh0LWNvbXBhcmUu Y29tL21lZGlhL3RjLWFycm93LWRvd24tYmx1ZS5wbmcpOyBiYWNrZ3JvdW5kLXBvc2l0aW9u OiB0b3A7IGJhY2tncm91bmQtcmVwZWF0OiBuby1yZXBlYXQ7IGhlaWdodDogMTJweDsgd2lk dGg6IDExcHgiPjxhIGhyZWY9IiNkaWZmZXJlbmNlXzUiPjxkaXYgY2xhc3M9InRleHRfbmV4 dCIgc3R5bGU9InZpc2liaWxpdHk6IGhpZGRlbiI+bjwvZGl2PjwvYT48L2Rpdj48L3RkPjx0 ZCBjbGFzcz0iIGhhc19kaWZmZXJlbmNlIiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFj ZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgYmFja2dyb3VuZDog IzgxRjc4MTsgd2lkdGg6IDFlbSI+MTU8L3RkPjx0ZCBjbGFzcz0ibGluZUNvbnRlbnQiIHN0 eWxlPSJmb250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGlu Zy1yaWdodDogMnB4OyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyB0ZXh0LWFsaWduOiBsZWZ0Ij5B bHNvLCB0aGUgcmVsaWFiaWxpdHkgb2YgdGhlIFdlYiBQS0kgZGVwZW5kcyBjcml0aWNhbGx5 IG9uIHRoZSBwcmFjdGljZXMgb2YgaXRzIGNlcnRpZmljYXRlIGlzc3VlcnM7IHByYWN0aWNl cyBzPHNwYW4gY2xhc3M9ImRpZmZlcmVuY2UiIHN0eWxlPSJ3aWR0aDogMWVtOyBiYWNrZ3Jv dW5kOiAjQTlEMEY1Ij51Y2ggYXM6PC9zcGFuPiZuYnNwO2hvdzxzcGFuIGNsYXNzPSJkaWZm ZXJlbmNlIiBzdHlsZT0id2lkdGg6IDFlbTsgYmFja2dyb3VuZDogI0E5RDBGNSI+Jm5ic3A7 dGhlIGNvbnRlbnRzIG9mPC9zcGFuPiZuYnNwO2NlcnRpZmljYXRlIGE8c3BhbiBjbGFzcz0i ZGlmZmVyZW5jZSIgc3R5bGU9IndpZHRoOiAxZW07IGJhY2tncm91bmQ6ICNBOUQwRjUiPnA8 L3NwYW4+cGxpY2F0aW9uczxzcGFuIGNsYXNzPSJkaWZmZXJlbmNlIiBzdHlsZT0id2lkdGg6 IDFlbTsgYmFja2dyb3VuZDogI0E5RDBGNSI+Jm5ic3A7YXJlIHZlcmlmaWVkPC9zcGFuPiZu YnNwO2FuZCZuYnNwOzxzcGFuIGNsYXNzPSJkaWZmZXJlbmNlIiBzdHlsZT0id2lkdGg6IDFl bTsgYmFja2dyb3VuZDogI0E5RDBGNSI+aDwvc3Bhbj5vPHNwYW4gY2xhc3M9ImRpZmZlcmVu Y2UiIHN0eWxlPSJ3aWR0aDogMWVtOyBiYWNrZ3JvdW5kOiAjQTlEMEY1Ij53Jm5ic3A7PC9z cGFuPmE8c3BhbiBjbGFzcz0iZGlmZmVyZW5jZSIgc3R5bGU9IndpZHRoOiAxZW07IGJhY2tn cm91bmQ6ICNBOUQwRjUiPmNjPC9zcGFuPmU8c3BhbiBjbGFzcz0iZGlmZmVyZW5jZSIgc3R5 bGU9IndpZHRoOiAxZW07IGJhY2tncm91bmQ6ICNBOUQwRjUiPnNzIChib3RoIGQ8L3NwYW4+ aXJlPHNwYW4gY2xhc3M9ImRpZmZlcmVuY2UiIHN0eWxlPSJ3aWR0aDogMWVtOyBiYWNrZ3Jv dW5kOiAjQTlEMEY1Ij5jdCBhbmQgaW5kaXI8L3NwYW4+ZTxzcGFuIGNsYXNzPSJkaWZmZXJl bmNlIiBzdHlsZT0id2lkdGg6IDFlbTsgYmFja2dyb3VuZDogI0E5RDBGNSI+Y3QpIHRvIHRo ZSBDQSdzIHByaXZhdGUga2V5IGlzIGNvPC9zcGFuPm50PHNwYW4gY2xhc3M9ImRpZmZlcmVu Y2UiIHN0eWxlPSJ3aWR0aDogMWVtOyBiYWNrZ3JvdW5kOiAjQTlEMEY1Ij5yPC9zcGFuPm88 c3BhbiBjbGFzcz0iZGlmZmVyZW5jZSIgc3R5bGU9IndpZHRoOiAxZW07IGJhY2tncm91bmQ6 ICNBOUQwRjUiPmxsPC9zcGFuPmU8c3BhbiBjbGFzcz0iZGlmZmVyZW5jZSIgc3R5bGU9Indp ZHRoOiAxZW07IGJhY2tncm91bmQ6ICNBOUQwRjUiPmQ8L3NwYW4+LjxzcGFuIGNsYXNzPSJk aWZmZXJlbmNlIiBzdHlsZT0id2lkdGg6IDFlbTsgYmFja2dyb3VuZDogI0E5RDBGNSI+Jm5i c3A7PC9zcGFuPiZuYnNwO0hvd2V2ZXIsIHRoZSB0b3BpYyBvZiBwcmFjdGljZXMgaXM8c3Bh biBjbGFzcz0iZGlmZmVyZW5jZSIgc3R5bGU9IndpZHRoOiAxZW07IGJhY2tncm91bmQ6ICNB OUQwRjUiPiZuYnNwO2NvbnNpZGVyZWQ8L3NwYW4+Jm5ic3A7b3V0c2lkZSB0aGUgc2NvcGUg b2YgdGhlIHdvcmtpbmcgZ3JvdXAuJm5ic3A7PHNwYW4gY2xhc3M9ImRpZmZlcmVuY2UiIHN0 eWxlPSJ3aWR0aDogMWVtOyBiYWNrZ3JvdW5kOiAjQTlEMEY1Ij4mbmJzcDtUaGlzIHRvcGlj IHdpbGwgYmUgbGVmdCB0byBvdGhlciBjb21wZXRlbnQgYm9kaWVzLCBzdWNoIGFzIHRoZSBD QS9Ccm93c2VyIEZvcnVtIFsxXVsyXS48L3NwYW4+PC90ZD48dGQgY2xhc3M9ImRpZmZfbmV4 dCIgZ2xvd2luZz0iMCIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRpbmct bGVmdDogMnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IHdpZHRoOiAxMXB4OyBwYWRkaW5nLXRv cDogMnB4OyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyBiYWNrZ3JvdW5kOiAjZGVkZWRlOyBiYWNr Z3JvdW5kLWNvbG9yOiByZ2IoMjIyLCAyMjIsIDIyMik7ICI+PGRpdiBjbGFzcz0ibGlua19u ZXh0IiB0aXRsZT0iR28gdG8gbmV4dCBkaWZmZXJlbmNlIiBzdHlsZT0iYmFja2dyb3VuZC1p bWFnZTogdXJsKGh0dHA6Ly93d3cudGV4dC1jb21wYXJlLmNvbS9tZWRpYS90Yy1hcnJvdy1k b3duLWJsdWUucG5nKTsgYmFja2dyb3VuZC1wb3NpdGlvbjogdG9wOyBiYWNrZ3JvdW5kLXJl cGVhdDogbm8tcmVwZWF0OyBoZWlnaHQ6IDEycHg7IHdpZHRoOiAxMXB4Ij48YSBocmVmPSIj ZGlmZmVyZW5jZV81Ij48ZGl2IGNsYXNzPSJ0ZXh0X25leHQiIHN0eWxlPSJ2aXNpYmlsaXR5 OiBoaWRkZW4iPm48L2Rpdj48L2E+PC9kaXY+PC90ZD48dGQgY2xhc3M9IiBoYXNfZGlmZmVy ZW5jZSIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRpbmctbGVmdDogMnB4 OyBwYWRkaW5nLXJpZ2h0OiAycHg7IGJhY2tncm91bmQ6ICM4MUY3ODE7IHdpZHRoOiAxZW0i PjI5PC90ZD48dGQgY2xhc3M9ImxpbmVDb250ZW50IiBzdHlsZT0iZm9udC1mYW1pbHk6IG1v bm9zcGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgdmVydGlj YWwtYWxpZ246IHRvcDsgdGV4dC1hbGlnbjogbGVmdCI+QWxzbywgdGhlIHJlbGlhYmlsaXR5 IG9mIHRoZSBXZWIgUEtJIGRlcGVuZHMgY3JpdGljYWxseSBvbiB0aGUmbmJzcDs8c3BhbiBj bGFzcz0iZGlmZmVyZW5jZSIgc3R5bGU9IndpZHRoOiAxZW07IGJhY2tncm91bmQ6ICNBOUQw RjUiPiI8L3NwYW4+cHJhY3RpY2VzPHNwYW4gY2xhc3M9ImRpZmZlcmVuY2UiIHN0eWxlPSJ3 aWR0aDogMWVtOyBiYWNrZ3JvdW5kOiAjQTlEMEY1Ij4iPC9zcGFuPiZuYnNwO29mIGl0cyBj ZXJ0aWZpY2F0ZSBpc3N1ZXJzOzxzcGFuIGNsYXNzPSJkaWZmZXJlbmNlIiBzdHlsZT0id2lk dGg6IDFlbTsgYmFja2dyb3VuZDogI0E5RDBGNSI+Jm5ic3A7dGhlc2U8L3NwYW4+Jm5ic3A7 cHJhY3RpY2VzJm5ic3A7PHNwYW4gY2xhc3M9ImRpZmZlcmVuY2UiIHN0eWxlPSJ3aWR0aDog MWVtOyBiYWNrZ3JvdW5kOiAjQTlEMEY1Ij5jb21wcmk8L3NwYW4+czxzcGFuIGNsYXNzPSJk aWZmZXJlbmNlIiBzdHlsZT0id2lkdGg6IDFlbTsgYmFja2dyb3VuZDogI0E5RDBGNSI+ZTwv c3Bhbj4mbmJzcDtob3cgY2VydGlmaWNhdGUmbmJzcDs8c3BhbiBjbGFzcz0iZGlmZmVyZW5j ZSIgc3R5bGU9IndpZHRoOiAxZW07IGJhY2tncm91bmQ6ICNBOUQwRjUiPmlzc3VlcnMgcGVy Zm9ybSB0aGVpciBmdW5jdGlvbnMmbmJzcDs8L3NwYW4+YTxzcGFuIGNsYXNzPSJkaWZmZXJl bmNlIiBzdHlsZT0id2lkdGg6IDFlbTsgYmFja2dyb3VuZDogI0E5RDBGNSI+bmQgaW08L3Nw YW4+cGw8c3BhbiBjbGFzcz0iZGlmZmVyZW5jZSIgc3R5bGU9IndpZHRoOiAxZW07IGJhY2tn cm91bmQ6ICNBOUQwRjUiPmVtZW50IGNvbnRyb2xzLCBhbmQgYXJlIGRlc2NyaWJlZCBpbiBk b2N1bWVudHMga25vd24gYXMgIkNlcnRpZjwvc3Bhbj5pY2F0aW9uPHNwYW4gY2xhc3M9ImRp ZmZlcmVuY2UiIHN0eWxlPSJ3aWR0aDogMWVtOyBiYWNrZ3JvdW5kOiAjQTlEMEY1Ij4mbmJz cDtQcmFjdGljZSBTdGF0ZW1lbnQ8L3NwYW4+czxzcGFuIGNsYXNzPSJkaWZmZXJlbmNlIiBz dHlsZT0id2lkdGg6IDFlbTsgYmFja2dyb3VuZDogI0E5RDBGNSI+IiBbMl1bM108L3NwYW4+ Jm5ic3A7YW5kIG88c3BhbiBjbGFzcz0iZGlmZmVyZW5jZSIgc3R5bGU9IndpZHRoOiAxZW07 IGJhY2tncm91bmQ6ICNBOUQwRjUiPnBlcjwvc3Bhbj5hPHNwYW4gY2xhc3M9ImRpZmZlcmVu Y2UiIHN0eWxlPSJ3aWR0aDogMWVtOyBiYWNrZ3JvdW5kOiAjQTlEMEY1Ij50aW9uYWwgcjwv c3Bhbj5lPHNwYW4gY2xhc3M9ImRpZmZlcmVuY2UiIHN0eWxlPSJ3aWR0aDogMWVtOyBiYWNr Z3JvdW5kOiAjQTlEMEY1Ij5xdTwvc3Bhbj5pcmU8c3BhbiBjbGFzcz0iZGlmZmVyZW5jZSIg c3R5bGU9IndpZHRoOiAxZW07IGJhY2tncm91bmQ6ICNBOUQwRjUiPm08L3NwYW4+ZW50PHNw YW4gY2xhc3M9ImRpZmZlcmVuY2UiIHN0eWxlPSJ3aWR0aDogMWVtOyBiYWNrZ3JvdW5kOiAj QTlEMEY1Ij5zIGQ8L3NwYW4+bzxzcGFuIGNsYXNzPSJkaWZmZXJlbmNlIiBzdHlsZT0id2lk dGg6IDFlbTsgYmFja2dyb3VuZDogI0E5RDBGNSI+Y3VtPC9zcGFuPmU8c3BhbiBjbGFzcz0i ZGlmZmVyZW5jZSIgc3R5bGU9IndpZHRoOiAxZW07IGJhY2tncm91bmQ6ICNBOUQwRjUiPm50 cyBbNF1bNV08L3NwYW4+LiBIb3dldmVyLCB0aGUgdG9waWMgb2Y8c3BhbiBjbGFzcz0iZGlm ZmVyZW5jZSIgc3R5bGU9IndpZHRoOiAxZW07IGJhY2tncm91bmQ6ICNBOUQwRjUiPiZuYnNw O2NlcnRpZmljYXRpb248L3NwYW4+Jm5ic3A7cHJhY3RpY2VzIGlzIG91dHNpZGUgdGhlIHNj b3BlIG9mIHRoZSB3b3JraW5nIGdyb3VwLjwvdGQ+PC90cj4KPHRyPjx0ZCBjbGFzcz0iZGlm Zl9uZXh0IiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0OiAy cHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgd2lkdGg6IDExcHg7IHBhZGRpbmctdG9wOiAycHg7 IHZlcnRpY2FsLWFsaWduOiB0b3A7IGJhY2tncm91bmQ6ICNkZWRlZGUiPjwvdGQ+PHRkIGNs YXNzPSJkaWZmX2hlYWRlciAiIHN0eWxlPSJmb250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRk aW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4OyB3aWR0aDogMWVtOyB2ZXJ0aWNh bC1hbGlnbjogdG9wOyBiYWNrZ3JvdW5kOiAjZGVkZWRlIj4xNjwvdGQ+PHRkIGNsYXNzPSJs aW5lQ29udGVudCIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRpbmctbGVm dDogMnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IHZlcnRpY2FsLWFsaWduOiB0b3A7IHRleHQt YWxpZ246IGxlZnQiPjwvdGQ+PHRkIGNsYXNzPSJkaWZmX25leHQiIHN0eWxlPSJmb250LWZh bWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4 OyB3aWR0aDogMTFweDsgcGFkZGluZy10b3A6IDJweDsgdmVydGljYWwtYWxpZ246IHRvcDsg YmFja2dyb3VuZDogI2RlZGVkZSI+PC90ZD48dGQgY2xhc3M9ImRpZmZfaGVhZGVyICIgc3R5 bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRpbmctbGVmdDogMnB4OyBwYWRkaW5n LXJpZ2h0OiAycHg7IHdpZHRoOiAxZW07IHZlcnRpY2FsLWFsaWduOiB0b3A7IGJhY2tncm91 bmQ6ICNkZWRlZGUiPjMwPC90ZD48dGQgY2xhc3M9ImxpbmVDb250ZW50IiBzdHlsZT0iZm9u dC1mYW1pbHk6IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6 IDJweDsgdmVydGljYWwtYWxpZ246IHRvcDsgdGV4dC1hbGlnbjogbGVmdCI+PC90ZD48L3Ry Pgo8dHI+PHRkIGNsYXNzPSJkaWZmX25leHQiIGdsb3dpbmc9IjAiIHN0eWxlPSJmb250LWZh bWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4 OyB3aWR0aDogMTFweDsgcGFkZGluZy10b3A6IDJweDsgdmVydGljYWwtYWxpZ246IHRvcDsg YmFja2dyb3VuZDogI2RlZGVkZTsgYmFja2dyb3VuZC1jb2xvcjogcmdiKDIyMiwgMjIyLCAy MjIpOyAiPjxkaXYgY2xhc3M9ImxpbmtfbmV4dCIgdGl0bGU9IkdvIHRvIG5leHQgZGlmZmVy ZW5jZSIgc3R5bGU9ImJhY2tncm91bmQtaW1hZ2U6IHVybChodHRwOi8vd3d3LnRleHQtY29t cGFyZS5jb20vbWVkaWEvdGMtYXJyb3ctZG93bi1ibHVlLnBuZyk7IGJhY2tncm91bmQtcG9z aXRpb246IHRvcDsgYmFja2dyb3VuZC1yZXBlYXQ6IG5vLXJlcGVhdDsgaGVpZ2h0OiAxMnB4 OyB3aWR0aDogMTFweCI+PGEgaHJlZj0iI2RpZmZlcmVuY2VfNiI+PGRpdiBjbGFzcz0idGV4 dF9uZXh0IiBzdHlsZT0idmlzaWJpbGl0eTogaGlkZGVuIj5uPC9kaXY+PC9hPjwvZGl2Pjwv dGQ+PHRkIGNsYXNzPSIgaGFzX2RpZmZlcmVuY2UiIHN0eWxlPSJmb250LWZhbWlseTogbW9u b3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4OyBiYWNrZ3Jv dW5kOiAjODFGNzgxOyB3aWR0aDogMWVtIj4xNzwvdGQ+PHRkIGNsYXNzPSJsaW5lQ29udGVu dCIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRpbmctbGVmdDogMnB4OyBw YWRkaW5nLXJpZ2h0OiAycHg7IHZlcnRpY2FsLWFsaWduOiB0b3A7IHRleHQtYWxpZ246IGxl ZnQiPlRoYXQgdGhlcmUgYXJlIHRlY2huaWNhbCBzaG9ydGNvbWluZ3Mgd2l0aCBXZWIgUEtJ LCBhcyBpdCBpcyBwcmFjdGljZWQgdG9kYXksIGlzIHdlbGwgcmVjb2duaTxzcGFuIGNsYXNz PSJkaWZmZXJlbmNlIiBzdHlsZT0id2lkdGg6IDFlbTsgYmFja2dyb3VuZDogI0E5RDBGNSI+ ejwvc3Bhbj5lZC4gJm5ic3A7QW5kLCB0aGF0IHRoZXJlIGlzIGFsc28gc29tZSB1cmdlbmN5 IGluIGFkZHJlc3NpbmcgdGhlc2Ugc2hvcnRjb21pbmdzIGlzIGFsc28gd2VsbCByZWNvZ25p PHNwYW4gY2xhc3M9ImRpZmZlcmVuY2UiIHN0eWxlPSJ3aWR0aDogMWVtOyBiYWNrZ3JvdW5k OiAjQTlEMEY1Ij56PC9zcGFuPmVkLiAmbmJzcDtCdXQsIGl0IGlzIGZlbHQgdGhhdCB0b28g bXVjaCBoYXN0ZSBjYW4gYmUgY291bnRlci1wcm9kdWN0aXZlLiAmbmJzcDtUaGUgZXhwZWN0 YXRpb24gaXMgdGhhdCB0aGUgd29yayBvZiB0aGlzIGdyb3VwIHdpbGwgYnJpbmcgdG8gbGln aHQsIGluIGEgc3lzdGVtYXRpYyB3YXksIGFzcGVjdHMgb2YgdGhlIFdlYiBQS0kgdGhhdCBz aG91bGQgYmUgcHJvZ3Jlc3NlZCBpbiBmdXR1cmUgd29ya2luZyBncm91cHMgb2YgdGhlIElF VEYncyBTZWN1cml0eSBBcmVhLCBhbmQgdGhhdCBzdXBwbGllcnMgd2lsbCBiZSB3aWxsaW5n IHRvIHBhcnRpY2lwYXRlIGluIHRob3NlIHdvcmtpbmcgZ3JvdXBzIGFuZCBtb2RpZnkgdGhl aXIgcHJvZHVjdHMgdG8gY29tcGx5IHdpdGggdGhlaXIgc3RhbmRhcmRzLjwvdGQ+PHRkIGNs YXNzPSJkaWZmX25leHQiIGdsb3dpbmc9IjAiIHN0eWxlPSJmb250LWZhbWlseTogbW9ub3Nw YWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4OyB3aWR0aDogMTFw eDsgcGFkZGluZy10b3A6IDJweDsgdmVydGljYWwtYWxpZ246IHRvcDsgYmFja2dyb3VuZDog I2RlZGVkZTsgYmFja2dyb3VuZC1jb2xvcjogcmdiKDIyMiwgMjIyLCAyMjIpOyAiPjxkaXYg Y2xhc3M9ImxpbmtfbmV4dCIgdGl0bGU9IkdvIHRvIG5leHQgZGlmZmVyZW5jZSIgc3R5bGU9 ImJhY2tncm91bmQtaW1hZ2U6IHVybChodHRwOi8vd3d3LnRleHQtY29tcGFyZS5jb20vbWVk aWEvdGMtYXJyb3ctZG93bi1ibHVlLnBuZyk7IGJhY2tncm91bmQtcG9zaXRpb246IHRvcDsg YmFja2dyb3VuZC1yZXBlYXQ6IG5vLXJlcGVhdDsgaGVpZ2h0OiAxMnB4OyB3aWR0aDogMTFw eCI+PGEgaHJlZj0iI2RpZmZlcmVuY2VfNiI+PGRpdiBjbGFzcz0idGV4dF9uZXh0IiBzdHls ZT0idmlzaWJpbGl0eTogaGlkZGVuIj5uPC9kaXY+PC9hPjwvZGl2PjwvdGQ+PHRkIGNsYXNz PSIgaGFzX2RpZmZlcmVuY2UiIHN0eWxlPSJmb250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRk aW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4OyBiYWNrZ3JvdW5kOiAjODFGNzgx OyB3aWR0aDogMWVtIj4zMTwvdGQ+PHRkIGNsYXNzPSJsaW5lQ29udGVudCIgc3R5bGU9ImZv bnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRpbmctbGVmdDogMnB4OyBwYWRkaW5nLXJpZ2h0 OiAycHg7IHZlcnRpY2FsLWFsaWduOiB0b3A7IHRleHQtYWxpZ246IGxlZnQiPlRoYXQgdGhl cmUgYXJlIHRlY2huaWNhbCBzaG9ydGNvbWluZ3Mgd2l0aCBXZWIgUEtJLCBhcyBpdCBpcyBw cmFjdGljZWQgdG9kYXksIGlzIHdlbGwgcmVjb2duaTxzcGFuIGNsYXNzPSJkaWZmZXJlbmNl IiBzdHlsZT0id2lkdGg6IDFlbTsgYmFja2dyb3VuZDogI0E5RDBGNSI+czwvc3Bhbj5lZC4g Jm5ic3A7QW5kLCB0aGF0IHRoZXJlIGlzIGFsc28gc29tZSB1cmdlbmN5IGluIGFkZHJlc3Np bmcgdGhlc2Ugc2hvcnRjb21pbmdzIGlzIGFsc28gd2VsbCByZWNvZ25pPHNwYW4gY2xhc3M9 ImRpZmZlcmVuY2UiIHN0eWxlPSJ3aWR0aDogMWVtOyBiYWNrZ3JvdW5kOiAjQTlEMEY1Ij5z PC9zcGFuPmVkLiAmbmJzcDtCdXQsIGl0IGlzIGZlbHQgdGhhdCB0b28gbXVjaCBoYXN0ZSBj YW4gYmUgY291bnRlci1wcm9kdWN0aXZlLiAmbmJzcDtUaGUgZXhwZWN0YXRpb24gaXMgdGhh dCB0aGUgd29yayBvZiB0aGlzIGdyb3VwIHdpbGwgYnJpbmcgdG8gbGlnaHQsIGluIGEgc3lz dGVtYXRpYyB3YXksIGFzcGVjdHMgb2YgdGhlIFdlYiBQS0kgdGhhdCBzaG91bGQgYmUgcHJv Z3Jlc3NlZCBpbiBmdXR1cmUgd29ya2luZyBncm91cHMgb2YgdGhlIElFVEYncyBTZWN1cml0 eSBBcmVhLCBhbmQgdGhhdCBzdXBwbGllcnMgd2lsbCBiZSB3aWxsaW5nIHRvIHBhcnRpY2lw YXRlIGluIHRob3NlIHdvcmtpbmcgZ3JvdXBzIGFuZCBtb2RpZnkgdGhlaXIgcHJvZHVjdHMg dG8gY29tcGx5IHdpdGggdGhlaXIgc3RhbmRhcmRzLjwvdGQ+PC90cj4KPHRyPjx0ZCBjbGFz cz0iZGlmZl9uZXh0IiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsgcGFkZGluZy1s ZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgd2lkdGg6IDExcHg7IHBhZGRpbmctdG9w OiAycHg7IHZlcnRpY2FsLWFsaWduOiB0b3A7IGJhY2tncm91bmQ6ICNkZWRlZGUiPjwvdGQ+ PHRkIGNsYXNzPSJkaWZmX2hlYWRlciAiIHN0eWxlPSJmb250LWZhbWlseTogbW9ub3NwYWNl OyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4OyB3aWR0aDogMWVtOyB2 ZXJ0aWNhbC1hbGlnbjogdG9wOyBiYWNrZ3JvdW5kOiAjZGVkZWRlIj4xODwvdGQ+PHRkIGNs YXNzPSJsaW5lQ29udGVudCIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRp bmctbGVmdDogMnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IHZlcnRpY2FsLWFsaWduOiB0b3A7 IHRleHQtYWxpZ246IGxlZnQiPjwvdGQ+PHRkIGNsYXNzPSJkaWZmX25leHQiIHN0eWxlPSJm b250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdo dDogMnB4OyB3aWR0aDogMTFweDsgcGFkZGluZy10b3A6IDJweDsgdmVydGljYWwtYWxpZ246 IHRvcDsgYmFja2dyb3VuZDogI2RlZGVkZSI+PC90ZD48dGQgY2xhc3M9ImRpZmZfaGVhZGVy ICIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRpbmctbGVmdDogMnB4OyBw YWRkaW5nLXJpZ2h0OiAycHg7IHdpZHRoOiAxZW07IHZlcnRpY2FsLWFsaWduOiB0b3A7IGJh Y2tncm91bmQ6ICNkZWRlZGUiPjMyPC90ZD48dGQgY2xhc3M9ImxpbmVDb250ZW50IiBzdHls ZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmct cmlnaHQ6IDJweDsgdmVydGljYWwtYWxpZ246IHRvcDsgdGV4dC1hbGlnbjogbGVmdCI+PC90 ZD48L3RyPgo8dHI+PHRkIGNsYXNzPSJkaWZmX25leHQiIGdsb3dpbmc9IjAiIHN0eWxlPSJm b250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdo dDogMnB4OyB3aWR0aDogMTFweDsgcGFkZGluZy10b3A6IDJweDsgdmVydGljYWwtYWxpZ246 IHRvcDsgYmFja2dyb3VuZDogI2RlZGVkZTsgYmFja2dyb3VuZC1jb2xvcjogcmdiKDIyMiwg MjIyLCAyMjIpOyAiPjxkaXYgY2xhc3M9ImxpbmtfbmV4dCIgdGl0bGU9IkdvIHRvIG5leHQg ZGlmZmVyZW5jZSIgc3R5bGU9ImJhY2tncm91bmQtaW1hZ2U6IHVybChodHRwOi8vd3d3LnRl eHQtY29tcGFyZS5jb20vbWVkaWEvdGMtYXJyb3ctZG93bi1ibHVlLnBuZyk7IGJhY2tncm91 bmQtcG9zaXRpb246IHRvcDsgYmFja2dyb3VuZC1yZXBlYXQ6IG5vLXJlcGVhdDsgaGVpZ2h0 OiAxMnB4OyB3aWR0aDogMTFweCI+PGEgaHJlZj0iI2RpZmZlcmVuY2VfNyI+PGRpdiBjbGFz cz0idGV4dF9uZXh0IiBzdHlsZT0idmlzaWJpbGl0eTogaGlkZGVuIj5uPC9kaXY+PC9hPjwv ZGl2PjwvdGQ+PHRkIGNsYXNzPSIgaGFzX2RpZmZlcmVuY2UiIHN0eWxlPSJmb250LWZhbWls eTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4OyBi YWNrZ3JvdW5kOiAjODFGNzgxOyB3aWR0aDogMWVtIj4xOTwvdGQ+PHRkIGNsYXNzPSJsaW5l Q29udGVudCIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRpbmctbGVmdDog MnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IHZlcnRpY2FsLWFsaWduOiB0b3A7IHRleHQtYWxp Z246IGxlZnQiPkdpdmVuIHRoZSB1cmdlbmN5IG9mIHRoZSByZXF1aXJlZCBkZXZlbG9wbWVu dHMgYW5kIHRoZSBzY2FsZSBvZiB0aGUgdGFzaywgaXQgaXMgYWdyZWVkIHRoYXQgYWRoZXJl bmNlIHRvIHRoZSBwdWJsaXNoZWQgc2NoZWR1bGUgc2hvdWxkIHRha2UgcHJlY2VkZW5jZSBv dmVyIGNvbXBsZXRlbmVzcyBvZiB0aGUgcmVzdWx0cy48L3RkPjx0ZCBjbGFzcz0iZGlmZl9u ZXh0IiBnbG93aW5nPSIwIiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsgcGFkZGlu Zy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgd2lkdGg6IDExcHg7IHBhZGRpbmct dG9wOiAycHg7IHZlcnRpY2FsLWFsaWduOiB0b3A7IGJhY2tncm91bmQ6ICNkZWRlZGU7IGJh Y2tncm91bmQtY29sb3I6IHJnYigyMjIsIDIyMiwgMjIyKTsgIj48ZGl2IGNsYXNzPSJsaW5r X25leHQiIHRpdGxlPSJHbyB0byBuZXh0IGRpZmZlcmVuY2UiIHN0eWxlPSJiYWNrZ3JvdW5k LWltYWdlOiB1cmwoaHR0cDovL3d3dy50ZXh0LWNvbXBhcmUuY29tL21lZGlhL3RjLWFycm93 LWRvd24tYmx1ZS5wbmcpOyBiYWNrZ3JvdW5kLXBvc2l0aW9uOiB0b3A7IGJhY2tncm91bmQt cmVwZWF0OiBuby1yZXBlYXQ7IGhlaWdodDogMTJweDsgd2lkdGg6IDExcHgiPjxhIGhyZWY9 IiNkaWZmZXJlbmNlXzciPjxkaXYgY2xhc3M9InRleHRfbmV4dCIgc3R5bGU9InZpc2liaWxp dHk6IGhpZGRlbiI+bjwvZGl2PjwvYT48L2Rpdj48L3RkPjx0ZCBjbGFzcz0iIGhhc19kaWZm ZXJlbmNlIiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0OiAy cHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgYmFja2dyb3VuZDogIzgxRjc4MTsgd2lkdGg6IDFl bSI+MzM8L3RkPjx0ZCBjbGFzcz0ibGluZUNvbnRlbnQiIHN0eWxlPSJmb250LWZhbWlseTog bW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4OyB2ZXJ0 aWNhbC1hbGlnbjogdG9wOyB0ZXh0LWFsaWduOiBsZWZ0Ij5HaXZlbiB0aGUgdXJnZW5jeSBv ZiB0aGUgcmVxdWlyZWQgZGV2ZWxvcG1lbnRzIGFuZCB0aGUgc2NhbGUgb2YgdGhlIHRhc2ss IGl0IGlzIGFncmVlZCB0aGF0IGFkaGVyZW5jZSB0byB0aGUgcHVibGlzaGVkIHNjaGVkdWxl IHNob3VsZCB0YWtlIHByZWNlZGVuY2Ugb3ZlciBjb21wbGV0ZW5lc3Mgb2YgdGhlIHJlc3Vs dHM8c3BhbiBjbGFzcz0iZGlmZmVyZW5jZSIgc3R5bGU9IndpZHRoOiAxZW07IGJhY2tncm91 bmQ6ICNBOUQwRjUiPiwgdGhvdWdoIHdpdGhvdXQgc2FjcmlmaWNpbmcgdGVjaG5pY2FsIGNv cnJlY3RuZXNzPC9zcGFuPi48c3BhbiBjbGFzcz0iZGlmZmVyZW5jZSIgc3R5bGU9IndpZHRo OiAxZW07IGJhY2tncm91bmQ6ICNBOUQwRjUiPiZuYnNwOzwvc3Bhbj48L3RkPjwvdHI+Cjx0 cj48dGQgY2xhc3M9ImRpZmZfbmV4dCIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7 IHBhZGRpbmctbGVmdDogMnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IHdpZHRoOiAxMXB4OyBw YWRkaW5nLXRvcDogMnB4OyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyBiYWNrZ3JvdW5kOiAjZGVk ZWRlIj48L3RkPjx0ZCBjbGFzcz0iZGlmZl9oZWFkZXIgIiBzdHlsZT0iZm9udC1mYW1pbHk6 IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgd2lk dGg6IDFlbTsgdmVydGljYWwtYWxpZ246IHRvcDsgYmFja2dyb3VuZDogI2RlZGVkZSI+MjA8 L3RkPjx0ZCBjbGFzcz0ibGluZUNvbnRlbnQiIHN0eWxlPSJmb250LWZhbWlseTogbW9ub3Nw YWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4OyB2ZXJ0aWNhbC1h bGlnbjogdG9wOyB0ZXh0LWFsaWduOiBsZWZ0Ij48L3RkPjx0ZCBjbGFzcz0iZGlmZl9uZXh0 IiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBh ZGRpbmctcmlnaHQ6IDJweDsgd2lkdGg6IDExcHg7IHBhZGRpbmctdG9wOiAycHg7IHZlcnRp Y2FsLWFsaWduOiB0b3A7IGJhY2tncm91bmQ6ICNkZWRlZGUiPjwvdGQ+PHRkIGNsYXNzPSJk aWZmX2hlYWRlciAiIHN0eWxlPSJmb250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxl ZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4OyB3aWR0aDogMWVtOyB2ZXJ0aWNhbC1hbGln bjogdG9wOyBiYWNrZ3JvdW5kOiAjZGVkZWRlIj4zNDwvdGQ+PHRkIGNsYXNzPSJsaW5lQ29u dGVudCIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRpbmctbGVmdDogMnB4 OyBwYWRkaW5nLXJpZ2h0OiAycHg7IHZlcnRpY2FsLWFsaWduOiB0b3A7IHRleHQtYWxpZ246 IGxlZnQiPjwvdGQ+PC90cj4KPHRyPjx0ZCBjbGFzcz0iZGlmZl9uZXh0IiBzdHlsZT0iZm9u dC1mYW1pbHk6IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6 IDJweDsgd2lkdGg6IDExcHg7IHBhZGRpbmctdG9wOiAycHg7IHZlcnRpY2FsLWFsaWduOiB0 b3A7IGJhY2tncm91bmQ6ICNkZWRlZGUiPjwvdGQ+PHRkIGNsYXNzPSJkaWZmX2hlYWRlciAi IHN0eWxlPSJmb250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFk ZGluZy1yaWdodDogMnB4OyB3aWR0aDogMWVtOyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyBiYWNr Z3JvdW5kOiAjZGVkZWRlIj4yMTwvdGQ+PHRkIGNsYXNzPSJsaW5lQ29udGVudCIgc3R5bGU9 ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRpbmctbGVmdDogMnB4OyBwYWRkaW5nLXJp Z2h0OiAycHg7IHZlcnRpY2FsLWFsaWduOiB0b3A7IHRleHQtYWxpZ246IGxlZnQiPk1pbGVz dG9uZXM8L3RkPjx0ZCBjbGFzcz0iZGlmZl9uZXh0IiBzdHlsZT0iZm9udC1mYW1pbHk6IG1v bm9zcGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgd2lkdGg6 IDExcHg7IHBhZGRpbmctdG9wOiAycHg7IHZlcnRpY2FsLWFsaWduOiB0b3A7IGJhY2tncm91 bmQ6ICNkZWRlZGUiPjwvdGQ+PHRkIGNsYXNzPSJkaWZmX2hlYWRlciAiIHN0eWxlPSJmb250 LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdodDog MnB4OyB3aWR0aDogMWVtOyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyBiYWNrZ3JvdW5kOiAjZGVk ZWRlIj4zNTwvdGQ+PHRkIGNsYXNzPSJsaW5lQ29udGVudCIgc3R5bGU9ImZvbnQtZmFtaWx5 OiBtb25vc3BhY2U7IHBhZGRpbmctbGVmdDogMnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IHZl cnRpY2FsLWFsaWduOiB0b3A7IHRleHQtYWxpZ246IGxlZnQiPk1pbGVzdG9uZXM8L3RkPjwv dHI+Cjx0cj48dGQgY2xhc3M9ImRpZmZfbmV4dCIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25v c3BhY2U7IHBhZGRpbmctbGVmdDogMnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IHdpZHRoOiAx MXB4OyBwYWRkaW5nLXRvcDogMnB4OyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyBiYWNrZ3JvdW5k OiAjZGVkZWRlIj48L3RkPjx0ZCBjbGFzcz0iZGlmZl9oZWFkZXIgIiBzdHlsZT0iZm9udC1m YW1pbHk6IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJw eDsgd2lkdGg6IDFlbTsgdmVydGljYWwtYWxpZ246IHRvcDsgYmFja2dyb3VuZDogI2RlZGVk ZSI+MjI8L3RkPjx0ZCBjbGFzcz0ibGluZUNvbnRlbnQiIHN0eWxlPSJmb250LWZhbWlseTog bW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4OyB2ZXJ0 aWNhbC1hbGlnbjogdG9wOyB0ZXh0LWFsaWduOiBsZWZ0Ij49PT09PT09PT09PC90ZD48dGQg Y2xhc3M9ImRpZmZfbmV4dCIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRp bmctbGVmdDogMnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IHdpZHRoOiAxMXB4OyBwYWRkaW5n LXRvcDogMnB4OyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyBiYWNrZ3JvdW5kOiAjZGVkZWRlIj48 L3RkPjx0ZCBjbGFzcz0iZGlmZl9oZWFkZXIgIiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9z cGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgd2lkdGg6IDFl bTsgdmVydGljYWwtYWxpZ246IHRvcDsgYmFja2dyb3VuZDogI2RlZGVkZSI+MzY8L3RkPjx0 ZCBjbGFzcz0ibGluZUNvbnRlbnQiIHN0eWxlPSJmb250LWZhbWlseTogbW9ub3NwYWNlOyBw YWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4OyB2ZXJ0aWNhbC1hbGlnbjog dG9wOyB0ZXh0LWFsaWduOiBsZWZ0Ij49PT09PT09PT09PC90ZD48L3RyPgo8dHI+PHRkIGNs YXNzPSJkaWZmX25leHQiIHN0eWxlPSJmb250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5n LWxlZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4OyB3aWR0aDogMTFweDsgcGFkZGluZy10 b3A6IDJweDsgdmVydGljYWwtYWxpZ246IHRvcDsgYmFja2dyb3VuZDogI2RlZGVkZSI+PC90 ZD48dGQgY2xhc3M9ImRpZmZfaGVhZGVyICIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3Bh Y2U7IHBhZGRpbmctbGVmdDogMnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IHdpZHRoOiAxZW07 IHZlcnRpY2FsLWFsaWduOiB0b3A7IGJhY2tncm91bmQ6ICNkZWRlZGUiPjIzPC90ZD48dGQg Y2xhc3M9ImxpbmVDb250ZW50IiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsgcGFk ZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgdmVydGljYWwtYWxpZ246IHRv cDsgdGV4dC1hbGlnbjogbGVmdCI+PC90ZD48dGQgY2xhc3M9ImRpZmZfbmV4dCIgc3R5bGU9 ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRpbmctbGVmdDogMnB4OyBwYWRkaW5nLXJp Z2h0OiAycHg7IHdpZHRoOiAxMXB4OyBwYWRkaW5nLXRvcDogMnB4OyB2ZXJ0aWNhbC1hbGln bjogdG9wOyBiYWNrZ3JvdW5kOiAjZGVkZWRlIj48L3RkPjx0ZCBjbGFzcz0iZGlmZl9oZWFk ZXIgIiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7 IHBhZGRpbmctcmlnaHQ6IDJweDsgd2lkdGg6IDFlbTsgdmVydGljYWwtYWxpZ246IHRvcDsg YmFja2dyb3VuZDogI2RlZGVkZSI+Mzc8L3RkPjx0ZCBjbGFzcz0ibGluZUNvbnRlbnQiIHN0 eWxlPSJmb250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGlu Zy1yaWdodDogMnB4OyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyB0ZXh0LWFsaWduOiBsZWZ0Ij48 L3RkPjwvdHI+Cjx0cj48dGQgY2xhc3M9ImRpZmZfbmV4dCIgc3R5bGU9ImZvbnQtZmFtaWx5 OiBtb25vc3BhY2U7IHBhZGRpbmctbGVmdDogMnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IHdp ZHRoOiAxMXB4OyBwYWRkaW5nLXRvcDogMnB4OyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyBiYWNr Z3JvdW5kOiAjZGVkZWRlIj48L3RkPjx0ZCBjbGFzcz0iZGlmZl9oZWFkZXIgIiBzdHlsZT0i Zm9udC1mYW1pbHk6IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmln aHQ6IDJweDsgd2lkdGg6IDFlbTsgdmVydGljYWwtYWxpZ246IHRvcDsgYmFja2dyb3VuZDog I2RlZGVkZSI+MjQ8L3RkPjx0ZCBjbGFzcz0ibGluZUNvbnRlbnQiIHN0eWxlPSJmb250LWZh bWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4 OyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyB0ZXh0LWFsaWduOiBsZWZ0Ij4xLiAmbmJzcDsgJm5i c3A7Rmlyc3QgV0cgZHJhZnQgb2YgInRydXN0IG1vZGVsIiBkb2N1bWVudCAoNCBtb250aHMp LjwvdGQ+PHRkIGNsYXNzPSJkaWZmX25leHQiIHN0eWxlPSJmb250LWZhbWlseTogbW9ub3Nw YWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4OyB3aWR0aDogMTFw eDsgcGFkZGluZy10b3A6IDJweDsgdmVydGljYWwtYWxpZ246IHRvcDsgYmFja2dyb3VuZDog I2RlZGVkZSI+PC90ZD48dGQgY2xhc3M9ImRpZmZfaGVhZGVyICIgc3R5bGU9ImZvbnQtZmFt aWx5OiBtb25vc3BhY2U7IHBhZGRpbmctbGVmdDogMnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7 IHdpZHRoOiAxZW07IHZlcnRpY2FsLWFsaWduOiB0b3A7IGJhY2tncm91bmQ6ICNkZWRlZGUi PjM4PC90ZD48dGQgY2xhc3M9ImxpbmVDb250ZW50IiBzdHlsZT0iZm9udC1mYW1pbHk6IG1v bm9zcGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgdmVydGlj YWwtYWxpZ246IHRvcDsgdGV4dC1hbGlnbjogbGVmdCI+MS4gJm5ic3A7ICZuYnNwO0ZpcnN0 IFdHIGRyYWZ0IG9mICJ0cnVzdCBtb2RlbCIgZG9jdW1lbnQgKDQgbW9udGhzKS48L3RkPjwv dHI+Cjx0cj48dGQgY2xhc3M9ImRpZmZfbmV4dCIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25v c3BhY2U7IHBhZGRpbmctbGVmdDogMnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IHdpZHRoOiAx MXB4OyBwYWRkaW5nLXRvcDogMnB4OyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyBiYWNrZ3JvdW5k OiAjZGVkZWRlIj48L3RkPjx0ZCBjbGFzcz0iZGlmZl9oZWFkZXIgIiBzdHlsZT0iZm9udC1m YW1pbHk6IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJw eDsgd2lkdGg6IDFlbTsgdmVydGljYWwtYWxpZ246IHRvcDsgYmFja2dyb3VuZDogI2RlZGVk ZSI+MjU8L3RkPjx0ZCBjbGFzcz0ibGluZUNvbnRlbnQiIHN0eWxlPSJmb250LWZhbWlseTog bW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4OyB2ZXJ0 aWNhbC1hbGlnbjogdG9wOyB0ZXh0LWFsaWduOiBsZWZ0Ij4yLiAmbmJzcDsgJm5ic3A7Rmly c3QgV0cgZHJhZnQgb2YgImNlcnRpZmljYXRlLCBDUkwsIGFuZCBPQ1NQIGZpZWxkIGFuZCBl eHRlbnNpb24gcHJvY2Vzc2luZyIgZG9jdW1lbnQgKDEyIG1vbnRocykuPC90ZD48dGQgY2xh c3M9ImRpZmZfbmV4dCIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRpbmct bGVmdDogMnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IHdpZHRoOiAxMXB4OyBwYWRkaW5nLXRv cDogMnB4OyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyBiYWNrZ3JvdW5kOiAjZGVkZWRlIj48L3Rk Pjx0ZCBjbGFzcz0iZGlmZl9oZWFkZXIgIiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFj ZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgd2lkdGg6IDFlbTsg dmVydGljYWwtYWxpZ246IHRvcDsgYmFja2dyb3VuZDogI2RlZGVkZSI+Mzk8L3RkPjx0ZCBj bGFzcz0ibGluZUNvbnRlbnQiIHN0eWxlPSJmb250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRk aW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4OyB2ZXJ0aWNhbC1hbGlnbjogdG9w OyB0ZXh0LWFsaWduOiBsZWZ0Ij4yLiAmbmJzcDsgJm5ic3A7Rmlyc3QgV0cgZHJhZnQgb2Yg ImNlcnRpZmljYXRlLCBDUkwsIGFuZCBPQ1NQIGZpZWxkIGFuZCBleHRlbnNpb24gcHJvY2Vz c2luZyIgZG9jdW1lbnQgKDEyIG1vbnRocykuPC90ZD48L3RyPgo8dHI+PHRkIGNsYXNzPSJk aWZmX25leHQiIHN0eWxlPSJmb250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6 IDJweDsgcGFkZGluZy1yaWdodDogMnB4OyB3aWR0aDogMTFweDsgcGFkZGluZy10b3A6IDJw eDsgdmVydGljYWwtYWxpZ246IHRvcDsgYmFja2dyb3VuZDogI2RlZGVkZSI+PC90ZD48dGQg Y2xhc3M9ImRpZmZfaGVhZGVyICIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBh ZGRpbmctbGVmdDogMnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IHdpZHRoOiAxZW07IHZlcnRp Y2FsLWFsaWduOiB0b3A7IGJhY2tncm91bmQ6ICNkZWRlZGUiPjI2PC90ZD48dGQgY2xhc3M9 ImxpbmVDb250ZW50IiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsgcGFkZGluZy1s ZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgdmVydGljYWwtYWxpZ246IHRvcDsgdGV4 dC1hbGlnbjogbGVmdCI+My4gJm5ic3A7ICZuYnNwO0ZpcnN0IFdHIGRyYWZ0IG9mICJjZXJ0 aWZpY2F0ZSByZXZvY2F0aW9uIiBkb2N1bWVudCAoOCBtb250aHMpLjwvdGQ+PHRkIGNsYXNz PSJkaWZmX25leHQiIHN0eWxlPSJmb250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxl ZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4OyB3aWR0aDogMTFweDsgcGFkZGluZy10b3A6 IDJweDsgdmVydGljYWwtYWxpZ246IHRvcDsgYmFja2dyb3VuZDogI2RlZGVkZSI+PC90ZD48 dGQgY2xhc3M9ImRpZmZfaGVhZGVyICIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7 IHBhZGRpbmctbGVmdDogMnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IHdpZHRoOiAxZW07IHZl cnRpY2FsLWFsaWduOiB0b3A7IGJhY2tncm91bmQ6ICNkZWRlZGUiPjQwPC90ZD48dGQgY2xh c3M9ImxpbmVDb250ZW50IiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsgcGFkZGlu Zy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgdmVydGljYWwtYWxpZ246IHRvcDsg dGV4dC1hbGlnbjogbGVmdCI+My4gJm5ic3A7ICZuYnNwO0ZpcnN0IFdHIGRyYWZ0IG9mICJj ZXJ0aWZpY2F0ZSByZXZvY2F0aW9uIiBkb2N1bWVudCAoOCBtb250aHMpLjwvdGQ+PC90cj4K PHRyPjx0ZCBjbGFzcz0iZGlmZl9uZXh0IiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFj ZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgd2lkdGg6IDExcHg7 IHBhZGRpbmctdG9wOiAycHg7IHZlcnRpY2FsLWFsaWduOiB0b3A7IGJhY2tncm91bmQ6ICNk ZWRlZGUiPjwvdGQ+PHRkIGNsYXNzPSJkaWZmX2hlYWRlciAiIHN0eWxlPSJmb250LWZhbWls eTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4OyB3 aWR0aDogMWVtOyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyBiYWNrZ3JvdW5kOiAjZGVkZWRlIj4y NzwvdGQ+PHRkIGNsYXNzPSJsaW5lQ29udGVudCIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25v c3BhY2U7IHBhZGRpbmctbGVmdDogMnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IHZlcnRpY2Fs LWFsaWduOiB0b3A7IHRleHQtYWxpZ246IGxlZnQiPjQuICZuYnNwOyAmbmJzcDtGaXJzdCBX RyBkcmFmdCBvZiAiVExTIHN0YWNrIG9wZXJhdGlvbiIgZG9jdW1lbnQgKDggbW9udGhzKS48 L3RkPjx0ZCBjbGFzcz0iZGlmZl9uZXh0IiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFj ZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgd2lkdGg6IDExcHg7 IHBhZGRpbmctdG9wOiAycHg7IHZlcnRpY2FsLWFsaWduOiB0b3A7IGJhY2tncm91bmQ6ICNk ZWRlZGUiPjwvdGQ+PHRkIGNsYXNzPSJkaWZmX2hlYWRlciAiIHN0eWxlPSJmb250LWZhbWls eTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4OyB3 aWR0aDogMWVtOyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyBiYWNrZ3JvdW5kOiAjZGVkZWRlIj40 MTwvdGQ+PHRkIGNsYXNzPSJsaW5lQ29udGVudCIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25v c3BhY2U7IHBhZGRpbmctbGVmdDogMnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IHZlcnRpY2Fs LWFsaWduOiB0b3A7IHRleHQtYWxpZ246IGxlZnQiPjQuICZuYnNwOyAmbmJzcDtGaXJzdCBX RyBkcmFmdCBvZiAiVExTIHN0YWNrIG9wZXJhdGlvbiIgZG9jdW1lbnQgKDggbW9udGhzKS48 L3RkPjwvdHI+Cjx0cj48dGQgY2xhc3M9ImRpZmZfbmV4dCIgc3R5bGU9ImZvbnQtZmFtaWx5 OiBtb25vc3BhY2U7IHBhZGRpbmctbGVmdDogMnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IHdp ZHRoOiAxMXB4OyBwYWRkaW5nLXRvcDogMnB4OyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyBiYWNr Z3JvdW5kOiAjZGVkZWRlIj48L3RkPjx0ZCBjbGFzcz0iZGlmZl9oZWFkZXIgIiBzdHlsZT0i Zm9udC1mYW1pbHk6IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmln aHQ6IDJweDsgd2lkdGg6IDFlbTsgdmVydGljYWwtYWxpZ246IHRvcDsgYmFja2dyb3VuZDog I2RlZGVkZSI+Mjg8L3RkPjx0ZCBjbGFzcz0ibGluZUNvbnRlbnQiIHN0eWxlPSJmb250LWZh bWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4 OyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyB0ZXh0LWFsaWduOiBsZWZ0Ij41LiAmbmJzcDsgJm5i c3A7SUVTRyBzdWJtaXNzaW9uIG9mICJ0cnVzdCBtb2RlbCIgZG9jdW1lbnQgKDE2IG1vbnRo cykuPC90ZD48dGQgY2xhc3M9ImRpZmZfbmV4dCIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25v c3BhY2U7IHBhZGRpbmctbGVmdDogMnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IHdpZHRoOiAx MXB4OyBwYWRkaW5nLXRvcDogMnB4OyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyBiYWNrZ3JvdW5k OiAjZGVkZWRlIj48L3RkPjx0ZCBjbGFzcz0iZGlmZl9oZWFkZXIgIiBzdHlsZT0iZm9udC1m YW1pbHk6IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJw eDsgd2lkdGg6IDFlbTsgdmVydGljYWwtYWxpZ246IHRvcDsgYmFja2dyb3VuZDogI2RlZGVk ZSI+NDI8L3RkPjx0ZCBjbGFzcz0ibGluZUNvbnRlbnQiIHN0eWxlPSJmb250LWZhbWlseTog bW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4OyB2ZXJ0 aWNhbC1hbGlnbjogdG9wOyB0ZXh0LWFsaWduOiBsZWZ0Ij41LiAmbmJzcDsgJm5ic3A7SUVT RyBzdWJtaXNzaW9uIG9mICJ0cnVzdCBtb2RlbCIgZG9jdW1lbnQgKDE2IG1vbnRocykuPC90 ZD48L3RyPgo8dHI+PHRkIGNsYXNzPSJkaWZmX25leHQiIHN0eWxlPSJmb250LWZhbWlseTog bW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4OyB3aWR0 aDogMTFweDsgcGFkZGluZy10b3A6IDJweDsgdmVydGljYWwtYWxpZ246IHRvcDsgYmFja2dy b3VuZDogI2RlZGVkZSI+PC90ZD48dGQgY2xhc3M9ImRpZmZfaGVhZGVyICIgc3R5bGU9ImZv bnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRpbmctbGVmdDogMnB4OyBwYWRkaW5nLXJpZ2h0 OiAycHg7IHdpZHRoOiAxZW07IHZlcnRpY2FsLWFsaWduOiB0b3A7IGJhY2tncm91bmQ6ICNk ZWRlZGUiPjI5PC90ZD48dGQgY2xhc3M9ImxpbmVDb250ZW50IiBzdHlsZT0iZm9udC1mYW1p bHk6IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsg dmVydGljYWwtYWxpZ246IHRvcDsgdGV4dC1hbGlnbjogbGVmdCI+Ni4gJm5ic3A7ICZuYnNw O0lFU0cgc3VibWlzc2lvbiBvZiAiY2VydGlmaWNhdGUsIENSTCwgYW5kIE9DU1AgZmllbGQg YW5kIGV4dGVuc2lvbiBwcm9jZXNzaW5nIiBkb2N1bWVudCAoMjQgbW9udGhzKS48L3RkPjx0 ZCBjbGFzcz0iZGlmZl9uZXh0IiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsgcGFk ZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgd2lkdGg6IDExcHg7IHBhZGRp bmctdG9wOiAycHg7IHZlcnRpY2FsLWFsaWduOiB0b3A7IGJhY2tncm91bmQ6ICNkZWRlZGUi PjwvdGQ+PHRkIGNsYXNzPSJkaWZmX2hlYWRlciAiIHN0eWxlPSJmb250LWZhbWlseTogbW9u b3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4OyB3aWR0aDog MWVtOyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyBiYWNrZ3JvdW5kOiAjZGVkZWRlIj40MzwvdGQ+ PHRkIGNsYXNzPSJsaW5lQ29udGVudCIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7 IHBhZGRpbmctbGVmdDogMnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IHZlcnRpY2FsLWFsaWdu OiB0b3A7IHRleHQtYWxpZ246IGxlZnQiPjYuICZuYnNwOyAmbmJzcDtJRVNHIHN1Ym1pc3Np b24gb2YgImNlcnRpZmljYXRlLCBDUkwsIGFuZCBPQ1NQIGZpZWxkIGFuZCBleHRlbnNpb24g cHJvY2Vzc2luZyIgZG9jdW1lbnQgKDI0IG1vbnRocykuPC90ZD48L3RyPgo8dHI+PHRkIGNs YXNzPSJkaWZmX25leHQiIHN0eWxlPSJmb250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5n LWxlZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4OyB3aWR0aDogMTFweDsgcGFkZGluZy10 b3A6IDJweDsgdmVydGljYWwtYWxpZ246IHRvcDsgYmFja2dyb3VuZDogI2RlZGVkZSI+PC90 ZD48dGQgY2xhc3M9ImRpZmZfaGVhZGVyICIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3Bh Y2U7IHBhZGRpbmctbGVmdDogMnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IHdpZHRoOiAxZW07 IHZlcnRpY2FsLWFsaWduOiB0b3A7IGJhY2tncm91bmQ6ICNkZWRlZGUiPjMwPC90ZD48dGQg Y2xhc3M9ImxpbmVDb250ZW50IiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsgcGFk ZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgdmVydGljYWwtYWxpZ246IHRv cDsgdGV4dC1hbGlnbjogbGVmdCI+Ny4gJm5ic3A7ICZuYnNwO0lFU0cgc3VibWlzc2lvbiBv ZiAiY2VydGlmaWNhdGUgcmV2b2NhdGlvbiIgZG9jdW1lbnQgKDIwIG1vbnRocykuPC90ZD48 dGQgY2xhc3M9ImRpZmZfbmV4dCIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBh ZGRpbmctbGVmdDogMnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IHdpZHRoOiAxMXB4OyBwYWRk aW5nLXRvcDogMnB4OyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyBiYWNrZ3JvdW5kOiAjZGVkZWRl Ij48L3RkPjx0ZCBjbGFzcz0iZGlmZl9oZWFkZXIgIiBzdHlsZT0iZm9udC1mYW1pbHk6IG1v bm9zcGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgd2lkdGg6 IDFlbTsgdmVydGljYWwtYWxpZ246IHRvcDsgYmFja2dyb3VuZDogI2RlZGVkZSI+NDQ8L3Rk Pjx0ZCBjbGFzcz0ibGluZUNvbnRlbnQiIHN0eWxlPSJmb250LWZhbWlseTogbW9ub3NwYWNl OyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4OyB2ZXJ0aWNhbC1hbGln bjogdG9wOyB0ZXh0LWFsaWduOiBsZWZ0Ij43LiAmbmJzcDsgJm5ic3A7SUVTRyBzdWJtaXNz aW9uIG9mICJjZXJ0aWZpY2F0ZSByZXZvY2F0aW9uIiBkb2N1bWVudCAoMjAgbW9udGhzKS48 L3RkPjwvdHI+Cjx0cj48dGQgY2xhc3M9ImRpZmZfbmV4dCIgaWQ9ImRpZmZlcmVuY2VfNyIg c3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRpbmctbGVmdDogMnB4OyBwYWRk aW5nLXJpZ2h0OiAycHg7IHdpZHRoOiAxMXB4OyBwYWRkaW5nLXRvcDogMnB4OyB2ZXJ0aWNh bC1hbGlnbjogdG9wOyBiYWNrZ3JvdW5kOiAjZGVkZWRlIj48L3RkPjx0ZCBjbGFzcz0iZGlm Zl9oZWFkZXIgIiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0 OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgd2lkdGg6IDFlbTsgdmVydGljYWwtYWxpZ246 IHRvcDsgYmFja2dyb3VuZDogI2RlZGVkZSI+MzE8L3RkPjx0ZCBjbGFzcz0ibGluZUNvbnRl bnQiIHN0eWxlPSJmb250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsg cGFkZGluZy1yaWdodDogMnB4OyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyB0ZXh0LWFsaWduOiBs ZWZ0Ij44LiAmbmJzcDsgJm5ic3A7SUVTRyBzdWJtaXNzaW9uIG9mICJUTFMgc3RhY2sgb3Bl cmF0aW9uIiBkb2N1bWVudCAoMTYgbW9udGhzKS48L3RkPjx0ZCBjbGFzcz0iZGlmZl9uZXh0 IiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBh ZGRpbmctcmlnaHQ6IDJweDsgd2lkdGg6IDExcHg7IHBhZGRpbmctdG9wOiAycHg7IHZlcnRp Y2FsLWFsaWduOiB0b3A7IGJhY2tncm91bmQ6ICNkZWRlZGUiPjwvdGQ+PHRkIGNsYXNzPSJk aWZmX2hlYWRlciAiIHN0eWxlPSJmb250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxl ZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4OyB3aWR0aDogMWVtOyB2ZXJ0aWNhbC1hbGln bjogdG9wOyBiYWNrZ3JvdW5kOiAjZGVkZWRlIj40NTwvdGQ+PHRkIGNsYXNzPSJsaW5lQ29u dGVudCIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRpbmctbGVmdDogMnB4 OyBwYWRkaW5nLXJpZ2h0OiAycHg7IHZlcnRpY2FsLWFsaWduOiB0b3A7IHRleHQtYWxpZ246 IGxlZnQiPjguICZuYnNwOyAmbmJzcDtJRVNHIHN1Ym1pc3Npb24gb2YgIlRMUyBzdGFjayBv cGVyYXRpb24iIGRvY3VtZW50ICgxNiBtb250aHMpLjwvdGQ+PC90cj4KPHRyPjx0ZCBjbGFz cz0iZGlmZl9uZXh0IiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsgcGFkZGluZy1s ZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgd2lkdGg6IDExcHg7IHBhZGRpbmctdG9w OiAycHg7IHZlcnRpY2FsLWFsaWduOiB0b3A7IGJhY2tncm91bmQ6ICNkZWRlZGUiPjwvdGQ+ PHRkIGNsYXNzPSJkaWZmX2hlYWRlciAiIHN0eWxlPSJmb250LWZhbWlseTogbW9ub3NwYWNl OyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4OyB3aWR0aDogMWVtOyB2 ZXJ0aWNhbC1hbGlnbjogdG9wOyBiYWNrZ3JvdW5kOiAjZGVkZWRlIj4zMjwvdGQ+PHRkIGNs YXNzPSJsaW5lQ29udGVudCIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRp bmctbGVmdDogMnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IHZlcnRpY2FsLWFsaWduOiB0b3A7 IHRleHQtYWxpZ246IGxlZnQiPjwvdGQ+PHRkIGNsYXNzPSJkaWZmX25leHQiIHN0eWxlPSJm b250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdo dDogMnB4OyB3aWR0aDogMTFweDsgcGFkZGluZy10b3A6IDJweDsgdmVydGljYWwtYWxpZ246 IHRvcDsgYmFja2dyb3VuZDogI2RlZGVkZSI+PC90ZD48dGQgY2xhc3M9ImRpZmZfaGVhZGVy ICIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRpbmctbGVmdDogMnB4OyBw YWRkaW5nLXJpZ2h0OiAycHg7IHdpZHRoOiAxZW07IHZlcnRpY2FsLWFsaWduOiB0b3A7IGJh Y2tncm91bmQ6ICNkZWRlZGUiPjQ2PC90ZD48dGQgY2xhc3M9ImxpbmVDb250ZW50IiBzdHls ZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmct cmlnaHQ6IDJweDsgdmVydGljYWwtYWxpZ246IHRvcDsgdGV4dC1hbGlnbjogbGVmdCI+PC90 ZD48L3RyPgo8dHI+PHRkIGNsYXNzPSJkaWZmX25leHQiIGlkPSJkaWZmZXJlbmNlXzgiIHN0 eWxlPSJmb250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGlu Zy1yaWdodDogMnB4OyB3aWR0aDogMTFweDsgcGFkZGluZy10b3A6IDJweDsgdmVydGljYWwt YWxpZ246IHRvcDsgYmFja2dyb3VuZDogI2RlZGVkZSI+PC90ZD48dGQgY2xhc3M9ImRpZmZf aGVhZGVyICIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRpbmctbGVmdDog MnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IHdpZHRoOiAxZW07IHZlcnRpY2FsLWFsaWduOiB0 b3A7IGJhY2tncm91bmQ6ICNkZWRlZGUiPjMzPC90ZD48dGQgY2xhc3M9ImxpbmVDb250ZW50 IiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBh ZGRpbmctcmlnaHQ6IDJweDsgdmVydGljYWwtYWxpZ246IHRvcDsgdGV4dC1hbGlnbjogbGVm dCI+PC90ZD48dGQgY2xhc3M9ImRpZmZfbmV4dCIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25v c3BhY2U7IHBhZGRpbmctbGVmdDogMnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IHdpZHRoOiAx MXB4OyBwYWRkaW5nLXRvcDogMnB4OyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyBiYWNrZ3JvdW5k OiAjZGVkZWRlIj48L3RkPjx0ZCBjbGFzcz0iZGlmZl9oZWFkZXIgIiBzdHlsZT0iZm9udC1m YW1pbHk6IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJw eDsgd2lkdGg6IDFlbTsgdmVydGljYWwtYWxpZ246IHRvcDsgYmFja2dyb3VuZDogI2RlZGVk ZSI+NDc8L3RkPjx0ZCBjbGFzcz0ibGluZUNvbnRlbnQiIHN0eWxlPSJmb250LWZhbWlseTog bW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4OyB2ZXJ0 aWNhbC1hbGlnbjogdG9wOyB0ZXh0LWFsaWduOiBsZWZ0Ij48L3RkPjwvdHI+Cjx0cj48dGQg Y2xhc3M9ImRpZmZfbmV4dCIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRp bmctbGVmdDogMnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IHdpZHRoOiAxMXB4OyBwYWRkaW5n LXRvcDogMnB4OyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyBiYWNrZ3JvdW5kOiAjZGVkZWRlIj48 L3RkPjx0ZCBjbGFzcz0iZGlmZl9oZWFkZXIgIiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9z cGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgd2lkdGg6IDFl bTsgdmVydGljYWwtYWxpZ246IHRvcDsgYmFja2dyb3VuZDogI2RlZGVkZSI+MzQ8L3RkPjx0 ZCBjbGFzcz0ibGluZUNvbnRlbnQiIHN0eWxlPSJmb250LWZhbWlseTogbW9ub3NwYWNlOyBw YWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4OyB2ZXJ0aWNhbC1hbGlnbjog dG9wOyB0ZXh0LWFsaWduOiBsZWZ0Ij5SZWZlcmVuY2VzOjwvdGQ+PHRkIGNsYXNzPSJkaWZm X25leHQiIHN0eWxlPSJmb250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJw eDsgcGFkZGluZy1yaWdodDogMnB4OyB3aWR0aDogMTFweDsgcGFkZGluZy10b3A6IDJweDsg dmVydGljYWwtYWxpZ246IHRvcDsgYmFja2dyb3VuZDogI2RlZGVkZSI+PC90ZD48dGQgY2xh c3M9ImRpZmZfaGVhZGVyICIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRp bmctbGVmdDogMnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IHdpZHRoOiAxZW07IHZlcnRpY2Fs LWFsaWduOiB0b3A7IGJhY2tncm91bmQ6ICNkZWRlZGUiPjQ4PC90ZD48dGQgY2xhc3M9Imxp bmVDb250ZW50IiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0 OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgdmVydGljYWwtYWxpZ246IHRvcDsgdGV4dC1h bGlnbjogbGVmdCI+UmVmZXJlbmNlczo8L3RkPjwvdHI+Cjx0cj48dGQgY2xhc3M9ImRpZmZf bmV4dCIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRpbmctbGVmdDogMnB4 OyBwYWRkaW5nLXJpZ2h0OiAycHg7IHdpZHRoOiAxMXB4OyBwYWRkaW5nLXRvcDogMnB4OyB2 ZXJ0aWNhbC1hbGlnbjogdG9wOyBiYWNrZ3JvdW5kOiAjZGVkZWRlIj48L3RkPjx0ZCBjbGFz cz0iZGlmZl9oZWFkZXIgIiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsgcGFkZGlu Zy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgd2lkdGg6IDFlbTsgdmVydGljYWwt YWxpZ246IHRvcDsgYmFja2dyb3VuZDogI2RlZGVkZSI+MzU8L3RkPjx0ZCBjbGFzcz0ibGlu ZUNvbnRlbnQiIHN0eWxlPSJmb250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6 IDJweDsgcGFkZGluZy1yaWdodDogMnB4OyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyB0ZXh0LWFs aWduOiBsZWZ0Ij48L3RkPjx0ZCBjbGFzcz0iZGlmZl9uZXh0IiBzdHlsZT0iZm9udC1mYW1p bHk6IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsg d2lkdGg6IDExcHg7IHBhZGRpbmctdG9wOiAycHg7IHZlcnRpY2FsLWFsaWduOiB0b3A7IGJh Y2tncm91bmQ6ICNkZWRlZGUiPjwvdGQ+PHRkIGNsYXNzPSJkaWZmX2hlYWRlciAiIHN0eWxl PSJmb250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1y aWdodDogMnB4OyB3aWR0aDogMWVtOyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyBiYWNrZ3JvdW5k OiAjZGVkZWRlIj40OTwvdGQ+PHRkIGNsYXNzPSJsaW5lQ29udGVudCIgc3R5bGU9ImZvbnQt ZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRpbmctbGVmdDogMnB4OyBwYWRkaW5nLXJpZ2h0OiAy cHg7IHZlcnRpY2FsLWFsaWduOiB0b3A7IHRleHQtYWxpZ246IGxlZnQiPjwvdGQ+PC90cj4K PHRyPjx0ZCBjbGFzcz0iZGlmZl9uZXh0IiBnbG93aW5nPSIwIiBzdHlsZT0iZm9udC1mYW1p bHk6IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsg d2lkdGg6IDExcHg7IHBhZGRpbmctdG9wOiAycHg7IHZlcnRpY2FsLWFsaWduOiB0b3A7IGJh Y2tncm91bmQ6ICNkZWRlZGU7IGJhY2tncm91bmQtY29sb3I6IHJnYigyMjIsIDIyMiwgMjIy KTsgIj48ZGl2IGNsYXNzPSJsaW5rX25leHQiIHRpdGxlPSJHbyB0byBuZXh0IGRpZmZlcmVu Y2UiIHN0eWxlPSJiYWNrZ3JvdW5kLWltYWdlOiB1cmwoaHR0cDovL3d3dy50ZXh0LWNvbXBh cmUuY29tL21lZGlhL3RjLWFycm93LWRvd24tYmx1ZS5wbmcpOyBiYWNrZ3JvdW5kLXBvc2l0 aW9uOiB0b3A7IGJhY2tncm91bmQtcmVwZWF0OiBuby1yZXBlYXQ7IGhlaWdodDogMTJweDsg d2lkdGg6IDExcHgiPjxhIGhyZWY9IiNkaWZmZXJlbmNlXzgiPjxkaXYgY2xhc3M9InRleHRf bmV4dCIgc3R5bGU9InZpc2liaWxpdHk6IGhpZGRlbiI+bjwvZGl2PjwvYT48L2Rpdj48L3Rk Pjx0ZCBjbGFzcz0iIGhhc19kaWZmZXJlbmNlIiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9z cGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgYmFja2dyb3Vu ZDogIzgxRjc4MTsgd2lkdGg6IDFlbSI+MzY8L3RkPjx0ZCBjbGFzcz0ibGluZUNvbnRlbnQi IHN0eWxlPSJmb250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFk ZGluZy1yaWdodDogMnB4OyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyB0ZXh0LWFsaWduOiBsZWZ0 Ij48c3BhbiBjbGFzcz0iZGlmZmVyZW5jZSIgc3R5bGU9IndpZHRoOiAxZW07IGJhY2tncm91 bmQ6ICNBOUQwRjUiPlsxXSAmbmJzcDsgTmV0d29yayBhbmQgY2VydGlmaWNhdGUgc3lzdGVt IHNlY3VyaXR5IHJlcXVpcmVtZW50cywgQ0EvQnJvd3NlciBGb3J1bSwgQXVnIDIwMTIsIGh0 dHBzOi8vd3d3LmNhYmZvcnVtLm9yZy9OZXR3b3JrX1NlY3VyaXR5X0NvbnRyb2xzX1YxLnBk Zgo8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImRpZmZfbmV4dCIgZ2xvd2luZz0iMCIgc3R5bGU9 ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRpbmctbGVmdDogMnB4OyBwYWRkaW5nLXJp Z2h0OiAycHg7IHdpZHRoOiAxMXB4OyBwYWRkaW5nLXRvcDogMnB4OyB2ZXJ0aWNhbC1hbGln bjogdG9wOyBiYWNrZ3JvdW5kOiAjZGVkZWRlOyBiYWNrZ3JvdW5kLWNvbG9yOiByZ2IoMjIy LCAyMjIsIDIyMik7ICI+PGRpdiBjbGFzcz0ibGlua19uZXh0IiB0aXRsZT0iR28gdG8gbmV4 dCBkaWZmZXJlbmNlIiBzdHlsZT0iYmFja2dyb3VuZC1pbWFnZTogdXJsKGh0dHA6Ly93d3cu dGV4dC1jb21wYXJlLmNvbS9tZWRpYS90Yy1hcnJvdy1kb3duLWJsdWUucG5nKTsgYmFja2dy b3VuZC1wb3NpdGlvbjogdG9wOyBiYWNrZ3JvdW5kLXJlcGVhdDogbm8tcmVwZWF0OyBoZWln aHQ6IDEycHg7IHdpZHRoOiAxMXB4Ij48YSBocmVmPSIjZGlmZmVyZW5jZV84Ij48ZGl2IGNs YXNzPSJ0ZXh0X25leHQiIHN0eWxlPSJ2aXNpYmlsaXR5OiBoaWRkZW4iPm48L2Rpdj48L2E+ PC9kaXY+PC90ZD48dGQgY2xhc3M9IiBoYXNfZGlmZmVyZW5jZSIgc3R5bGU9ImZvbnQtZmFt aWx5OiBtb25vc3BhY2U7IHBhZGRpbmctbGVmdDogMnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7 IGJhY2tncm91bmQ6ICM4MUY3ODE7IHdpZHRoOiAxZW0iPjUwPC90ZD48dGQgY2xhc3M9Imxp bmVDb250ZW50IiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0 OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgdmVydGljYWwtYWxpZ246IHRvcDsgdGV4dC1h bGlnbjogbGVmdCI+PHNwYW4gY2xhc3M9ImRpZmZlcmVuY2UiIHN0eWxlPSJ3aWR0aDogMWVt OyBiYWNrZ3JvdW5kOiAjQTlEMEY1Ij5bMV0gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbC1h cmNoaXZlL3dlYi93cGtvcHMvY3VycmVudC9tc2cwMDEwNC5odG1sCjwvc3Bhbj48L3RkPjwv dHI+Cjx0cj48dGQgY2xhc3M9ImRpZmZfbmV4dCIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25v c3BhY2U7IHBhZGRpbmctbGVmdDogMnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IHdpZHRoOiAx MXB4OyBwYWRkaW5nLXRvcDogMnB4OyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyBiYWNrZ3JvdW5k OiAjZGVkZWRlIj48L3RkPjx0ZCBjbGFzcz0iZGlmZl9oZWFkZXIgIiBzdHlsZT0iZm9udC1m YW1pbHk6IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJw eDsgd2lkdGg6IDFlbTsgdmVydGljYWwtYWxpZ246IHRvcDsgYmFja2dyb3VuZDogI2RlZGVk ZSI+Mzc8L3RkPjx0ZCBjbGFzcz0ibGluZUNvbnRlbnQiIHN0eWxlPSJmb250LWZhbWlseTog bW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4OyB2ZXJ0 aWNhbC1hbGlnbjogdG9wOyB0ZXh0LWFsaWduOiBsZWZ0Ij48L3RkPjx0ZCBjbGFzcz0iZGlm Zl9uZXh0IiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0OiAy cHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgd2lkdGg6IDExcHg7IHBhZGRpbmctdG9wOiAycHg7 IHZlcnRpY2FsLWFsaWduOiB0b3A7IGJhY2tncm91bmQ6ICNkZWRlZGUiPjwvdGQ+PHRkIGNs YXNzPSJkaWZmX2hlYWRlciAiIHN0eWxlPSJmb250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRk aW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4OyB3aWR0aDogMWVtOyB2ZXJ0aWNh bC1hbGlnbjogdG9wOyBiYWNrZ3JvdW5kOiAjZGVkZWRlIj41MTwvdGQ+PHRkIGNsYXNzPSJs aW5lQ29udGVudCIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRpbmctbGVm dDogMnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IHZlcnRpY2FsLWFsaWduOiB0b3A7IHRleHQt YWxpZ246IGxlZnQiPjwvdGQ+PC90cj4KPHRyPjx0ZCBjbGFzcz0iZGlmZl9uZXh0IiBnbG93 aW5nPSIwIiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0OiAy cHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgd2lkdGg6IDExcHg7IHBhZGRpbmctdG9wOiAycHg7 IHZlcnRpY2FsLWFsaWduOiB0b3A7IGJhY2tncm91bmQ6ICNkZWRlZGU7IGJhY2tncm91bmQt Y29sb3I6IHJnYigyMjIsIDIyMiwgMjIyKTsgIj48ZGl2IGNsYXNzPSJsaW5rX3RvcCIgdGl0 bGU9IkdvIHRvIHRvcCIgc3R5bGU9ImJhY2tncm91bmQtaW1hZ2U6IHVybChodHRwOi8vd3d3 LnRleHQtY29tcGFyZS5jb20vbWVkaWEvdGMtYXJyb3ctdXAtb3JhbmdlLnBuZyk7IGJhY2tn cm91bmQtcG9zaXRpb246IHRvcDsgYmFja2dyb3VuZC1yZXBlYXQ6IG5vLXJlcGVhdDsgaGVp Z2h0OiAxMnB4OyB3aWR0aDogMTFweCI+PGEgaHJlZj0iI3RvcCI+PGRpdiBjbGFzcz0idGV4 dF90b3AiIHN0eWxlPSJ2aXNpYmlsaXR5OiBoaWRkZW4iPnQ8L2Rpdj48L2E+PC9kaXY+PC90 ZD48dGQgY2xhc3M9IiBoYXNfZGlmZmVyZW5jZSIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25v c3BhY2U7IHBhZGRpbmctbGVmdDogMnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IGJhY2tncm91 bmQ6ICM4MUY3ODE7IHdpZHRoOiAxZW0iPjwvdGQ+PHRkIGNsYXNzPSJsaW5lQ29udGVudCIg c3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRpbmctbGVmdDogMnB4OyBwYWRk aW5nLXJpZ2h0OiAycHg7IHZlcnRpY2FsLWFsaWduOiB0b3A7IHRleHQtYWxpZ246IGxlZnQi PjwvdGQ+PHRkIGNsYXNzPSJkaWZmX25leHQiIGdsb3dpbmc9IjAiIHN0eWxlPSJmb250LWZh bWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4 OyB3aWR0aDogMTFweDsgcGFkZGluZy10b3A6IDJweDsgdmVydGljYWwtYWxpZ246IHRvcDsg YmFja2dyb3VuZDogI2RlZGVkZTsgYmFja2dyb3VuZC1jb2xvcjogcmdiKDIyMiwgMjIyLCAy MjIpOyAiPjxkaXYgY2xhc3M9ImxpbmtfdG9wIiB0aXRsZT0iR28gdG8gdG9wIiBzdHlsZT0i YmFja2dyb3VuZC1pbWFnZTogdXJsKGh0dHA6Ly93d3cudGV4dC1jb21wYXJlLmNvbS9tZWRp YS90Yy1hcnJvdy11cC1vcmFuZ2UucG5nKTsgYmFja2dyb3VuZC1wb3NpdGlvbjogdG9wOyBi YWNrZ3JvdW5kLXJlcGVhdDogbm8tcmVwZWF0OyBoZWlnaHQ6IDEycHg7IHdpZHRoOiAxMXB4 Ij48YSBocmVmPSIjdG9wIj48ZGl2IGNsYXNzPSJ0ZXh0X3RvcCIgc3R5bGU9InZpc2liaWxp dHk6IGhpZGRlbiI+dDwvZGl2PjwvYT48L2Rpdj48L3RkPjx0ZCBjbGFzcz0iIGhhc19kaWZm ZXJlbmNlIiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0OiAy cHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgYmFja2dyb3VuZDogIzgxRjc4MTsgd2lkdGg6IDFl bSI+NTI8L3RkPjx0ZCBjbGFzcz0ibGluZUNvbnRlbnQiIHN0eWxlPSJmb250LWZhbWlseTog bW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4OyB2ZXJ0 aWNhbC1hbGlnbjogdG9wOyB0ZXh0LWFsaWduOiBsZWZ0Ij48c3BhbiBjbGFzcz0iZGlmZmVy ZW5jZSIgc3R5bGU9IndpZHRoOiAxZW07IGJhY2tncm91bmQ6ICNBOUQwRjUiPlsyXSBJbnRl cm5ldCBYLjUwOSBQdWJsaWMgS2V5IEluZnJhc3RydWN0dXJlIENlcnRpZmljYXRlIFBvbGlj eSBhbmQgCjwvc3Bhbj48L3RkPjwvdHI+Cjx0cj48dGQgY2xhc3M9ImRpZmZfbmV4dCIgc3R5 bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRpbmctbGVmdDogMnB4OyBwYWRkaW5n LXJpZ2h0OiAycHg7IHdpZHRoOiAxMXB4OyBwYWRkaW5nLXRvcDogMnB4OyB2ZXJ0aWNhbC1h bGlnbjogdG9wOyBiYWNrZ3JvdW5kOiAjZGVkZWRlIj48L3RkPjx0ZCBjbGFzcz0iIGhhc19k aWZmZXJlbmNlIiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0 OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgYmFja2dyb3VuZDogIzgxRjc4MTsgd2lkdGg6 IDFlbSI+PC90ZD48dGQgY2xhc3M9ImxpbmVDb250ZW50IiBzdHlsZT0iZm9udC1mYW1pbHk6 IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgdmVy dGljYWwtYWxpZ246IHRvcDsgdGV4dC1hbGlnbjogbGVmdCI+PC90ZD48dGQgY2xhc3M9ImRp ZmZfbmV4dCIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRpbmctbGVmdDog MnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IHdpZHRoOiAxMXB4OyBwYWRkaW5nLXRvcDogMnB4 OyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyBiYWNrZ3JvdW5kOiAjZGVkZWRlIj48L3RkPjx0ZCBj bGFzcz0iIGhhc19kaWZmZXJlbmNlIiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsg cGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgYmFja2dyb3VuZDogIzgx Rjc4MTsgd2lkdGg6IDFlbSI+NTM8L3RkPjx0ZCBjbGFzcz0ibGluZUNvbnRlbnQiIHN0eWxl PSJmb250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1y aWdodDogMnB4OyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyB0ZXh0LWFsaWduOiBsZWZ0Ij48c3Bh biBjbGFzcz0iZGlmZmVyZW5jZSIgc3R5bGU9IndpZHRoOiAxZW07IGJhY2tncm91bmQ6ICNB OUQwRjUiPiZuYnNwOyZuYnNwOyAmbmJzcDtDZXJ0aWZpY2F0aW9uIFByYWN0aWNlcyBGcmFt ZXdvcmsuIFMuIENob2toYW5pIGV0IGFsLCBJRVRGIFJGQzM2NDcKPC9zcGFuPjwvdGQ+PC90 cj4KPHRyPjx0ZCBjbGFzcz0iZGlmZl9uZXh0IiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9z cGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgd2lkdGg6IDEx cHg7IHBhZGRpbmctdG9wOiAycHg7IHZlcnRpY2FsLWFsaWduOiB0b3A7IGJhY2tncm91bmQ6 ICNkZWRlZGUiPjwvdGQ+PHRkIGNsYXNzPSIgaGFzX2RpZmZlcmVuY2UiIHN0eWxlPSJmb250 LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdodDog MnB4OyBiYWNrZ3JvdW5kOiAjODFGNzgxOyB3aWR0aDogMWVtIj48L3RkPjx0ZCBjbGFzcz0i bGluZUNvbnRlbnQiIHN0eWxlPSJmb250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxl ZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4OyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyB0ZXh0 LWFsaWduOiBsZWZ0Ij48L3RkPjx0ZCBjbGFzcz0iZGlmZl9uZXh0IiBzdHlsZT0iZm9udC1m YW1pbHk6IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJw eDsgd2lkdGg6IDExcHg7IHBhZGRpbmctdG9wOiAycHg7IHZlcnRpY2FsLWFsaWduOiB0b3A7 IGJhY2tncm91bmQ6ICNkZWRlZGUiPjwvdGQ+PHRkIGNsYXNzPSIgaGFzX2RpZmZlcmVuY2Ui IHN0eWxlPSJmb250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFk ZGluZy1yaWdodDogMnB4OyBiYWNrZ3JvdW5kOiAjODFGNzgxOyB3aWR0aDogMWVtIj41NDwv dGQ+PHRkIGNsYXNzPSJsaW5lQ29udGVudCIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3Bh Y2U7IHBhZGRpbmctbGVmdDogMnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IHZlcnRpY2FsLWFs aWduOiB0b3A7IHRleHQtYWxpZ246IGxlZnQiPjxzcGFuIGNsYXNzPSJkaWZmZXJlbmNlIiBz dHlsZT0id2lkdGg6IDFlbTsgYmFja2dyb3VuZDogI0E5RDBGNSI+Jm5ic3A7Jm5ic3A7ICZu YnNwO2h0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9yZmMzNjQ3Cjwvc3Bhbj48L3RkPjwv dHI+Cjx0cj48dGQgY2xhc3M9ImRpZmZfbmV4dCIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25v c3BhY2U7IHBhZGRpbmctbGVmdDogMnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IHdpZHRoOiAx MXB4OyBwYWRkaW5nLXRvcDogMnB4OyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyBiYWNrZ3JvdW5k OiAjZGVkZWRlIj48L3RkPjx0ZCBjbGFzcz0iIGhhc19kaWZmZXJlbmNlIiBzdHlsZT0iZm9u dC1mYW1pbHk6IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6 IDJweDsgYmFja2dyb3VuZDogIzgxRjc4MTsgd2lkdGg6IDFlbSI+PC90ZD48dGQgY2xhc3M9 ImxpbmVDb250ZW50IiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsgcGFkZGluZy1s ZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgdmVydGljYWwtYWxpZ246IHRvcDsgdGV4 dC1hbGlnbjogbGVmdCI+PC90ZD48dGQgY2xhc3M9ImRpZmZfbmV4dCIgc3R5bGU9ImZvbnQt ZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRpbmctbGVmdDogMnB4OyBwYWRkaW5nLXJpZ2h0OiAy cHg7IHdpZHRoOiAxMXB4OyBwYWRkaW5nLXRvcDogMnB4OyB2ZXJ0aWNhbC1hbGlnbjogdG9w OyBiYWNrZ3JvdW5kOiAjZGVkZWRlIj48L3RkPjx0ZCBjbGFzcz0iIGhhc19kaWZmZXJlbmNl IiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBh ZGRpbmctcmlnaHQ6IDJweDsgYmFja2dyb3VuZDogIzgxRjc4MTsgd2lkdGg6IDFlbSI+NTU8 L3RkPjx0ZCBjbGFzcz0ibGluZUNvbnRlbnQiIHN0eWxlPSJmb250LWZhbWlseTogbW9ub3Nw YWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4OyB2ZXJ0aWNhbC1h bGlnbjogdG9wOyB0ZXh0LWFsaWduOiBsZWZ0Ij48c3BhbiBjbGFzcz0iZGlmZmVyZW5jZSIg c3R5bGU9IndpZHRoOiAxZW07IGJhY2tncm91bmQ6ICNBOUQwRjUiPgo8L3NwYW4+PC90ZD48 L3RyPgo8dHI+PHRkIGNsYXNzPSJkaWZmX25leHQiIHN0eWxlPSJmb250LWZhbWlseTogbW9u b3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4OyB3aWR0aDog MTFweDsgcGFkZGluZy10b3A6IDJweDsgdmVydGljYWwtYWxpZ246IHRvcDsgYmFja2dyb3Vu ZDogI2RlZGVkZSI+PC90ZD48dGQgY2xhc3M9IiBoYXNfZGlmZmVyZW5jZSIgc3R5bGU9ImZv bnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRpbmctbGVmdDogMnB4OyBwYWRkaW5nLXJpZ2h0 OiAycHg7IGJhY2tncm91bmQ6ICM4MUY3ODE7IHdpZHRoOiAxZW0iPjwvdGQ+PHRkIGNsYXNz PSJsaW5lQ29udGVudCIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRpbmct bGVmdDogMnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IHZlcnRpY2FsLWFsaWduOiB0b3A7IHRl eHQtYWxpZ246IGxlZnQiPjwvdGQ+PHRkIGNsYXNzPSJkaWZmX25leHQiIHN0eWxlPSJmb250 LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdodDog MnB4OyB3aWR0aDogMTFweDsgcGFkZGluZy10b3A6IDJweDsgdmVydGljYWwtYWxpZ246IHRv cDsgYmFja2dyb3VuZDogI2RlZGVkZSI+PC90ZD48dGQgY2xhc3M9IiBoYXNfZGlmZmVyZW5j ZSIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRpbmctbGVmdDogMnB4OyBw YWRkaW5nLXJpZ2h0OiAycHg7IGJhY2tncm91bmQ6ICM4MUY3ODE7IHdpZHRoOiAxZW0iPjU2 PC90ZD48dGQgY2xhc3M9ImxpbmVDb250ZW50IiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9z cGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgdmVydGljYWwt YWxpZ246IHRvcDsgdGV4dC1hbGlnbjogbGVmdCI+PHNwYW4gY2xhc3M9ImRpZmZlcmVuY2Ui IHN0eWxlPSJ3aWR0aDogMWVtOyBiYWNrZ3JvdW5kOiAjQTlEMEY1Ij5bM10gRWxlY3Ryb25p YyBTaWduYXR1cmVzIGFuZCBJbmZyYXN0cnVjdHVyZXMgKEVTSSk7IFBvbGljeSByZXF1aXJl bWVudHMgZm9yIAo8L3NwYW4+PC90ZD48L3RyPgo8dHI+PHRkIGNsYXNzPSJkaWZmX25leHQi IHN0eWxlPSJmb250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFk ZGluZy1yaWdodDogMnB4OyB3aWR0aDogMTFweDsgcGFkZGluZy10b3A6IDJweDsgdmVydGlj YWwtYWxpZ246IHRvcDsgYmFja2dyb3VuZDogI2RlZGVkZSI+PC90ZD48dGQgY2xhc3M9IiBo YXNfZGlmZmVyZW5jZSIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRpbmct bGVmdDogMnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IGJhY2tncm91bmQ6ICM4MUY3ODE7IHdp ZHRoOiAxZW0iPjwvdGQ+PHRkIGNsYXNzPSJsaW5lQ29udGVudCIgc3R5bGU9ImZvbnQtZmFt aWx5OiBtb25vc3BhY2U7IHBhZGRpbmctbGVmdDogMnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7 IHZlcnRpY2FsLWFsaWduOiB0b3A7IHRleHQtYWxpZ246IGxlZnQiPjwvdGQ+PHRkIGNsYXNz PSJkaWZmX25leHQiIHN0eWxlPSJmb250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxl ZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4OyB3aWR0aDogMTFweDsgcGFkZGluZy10b3A6 IDJweDsgdmVydGljYWwtYWxpZ246IHRvcDsgYmFja2dyb3VuZDogI2RlZGVkZSI+PC90ZD48 dGQgY2xhc3M9IiBoYXNfZGlmZmVyZW5jZSIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3Bh Y2U7IHBhZGRpbmctbGVmdDogMnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IGJhY2tncm91bmQ6 ICM4MUY3ODE7IHdpZHRoOiAxZW0iPjU3PC90ZD48dGQgY2xhc3M9ImxpbmVDb250ZW50IiBz dHlsZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBhZGRp bmctcmlnaHQ6IDJweDsgdmVydGljYWwtYWxpZ246IHRvcDsgdGV4dC1hbGlnbjogbGVmdCI+ PHNwYW4gY2xhc3M9ImRpZmZlcmVuY2UiIHN0eWxlPSJ3aWR0aDogMWVtOyBiYWNrZ3JvdW5k OiAjQTlEMEY1Ij4mbmJzcDsmbmJzcDsgJm5ic3A7Y2VydGlmaWNhdGlvbiBhdXRob3JpdGll cyBpc3N1aW5nIHB1YmxpYyBrZXkgY2VydGlmaWNhdGVzLgo8L3NwYW4+PC90ZD48L3RyPgo8 dHI+PHRkIGNsYXNzPSJkaWZmX25leHQiIHN0eWxlPSJmb250LWZhbWlseTogbW9ub3NwYWNl OyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4OyB3aWR0aDogMTFweDsg cGFkZGluZy10b3A6IDJweDsgdmVydGljYWwtYWxpZ246IHRvcDsgYmFja2dyb3VuZDogI2Rl ZGVkZSI+PC90ZD48dGQgY2xhc3M9IiBoYXNfZGlmZmVyZW5jZSIgc3R5bGU9ImZvbnQtZmFt aWx5OiBtb25vc3BhY2U7IHBhZGRpbmctbGVmdDogMnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7 IGJhY2tncm91bmQ6ICM4MUY3ODE7IHdpZHRoOiAxZW0iPjwvdGQ+PHRkIGNsYXNzPSJsaW5l Q29udGVudCIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRpbmctbGVmdDog MnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IHZlcnRpY2FsLWFsaWduOiB0b3A7IHRleHQtYWxp Z246IGxlZnQiPjwvdGQ+PHRkIGNsYXNzPSJkaWZmX25leHQiIHN0eWxlPSJmb250LWZhbWls eTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4OyB3 aWR0aDogMTFweDsgcGFkZGluZy10b3A6IDJweDsgdmVydGljYWwtYWxpZ246IHRvcDsgYmFj a2dyb3VuZDogI2RlZGVkZSI+PC90ZD48dGQgY2xhc3M9IiBoYXNfZGlmZmVyZW5jZSIgc3R5 bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRpbmctbGVmdDogMnB4OyBwYWRkaW5n LXJpZ2h0OiAycHg7IGJhY2tncm91bmQ6ICM4MUY3ODE7IHdpZHRoOiAxZW0iPjU4PC90ZD48 dGQgY2xhc3M9ImxpbmVDb250ZW50IiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsg cGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgdmVydGljYWwtYWxpZ246 IHRvcDsgdGV4dC1hbGlnbjogbGVmdCI+PHNwYW4gY2xhc3M9ImRpZmZlcmVuY2UiIHN0eWxl PSJ3aWR0aDogMWVtOyBiYWNrZ3JvdW5kOiAjQTlEMEY1Ij4mbmJzcDsmbmJzcDsgJm5ic3A7 RVRTSSBUUyAxMDIgMDQyIFYyLjIuMSAoMjAxMS0xMikKPC9zcGFuPjwvdGQ+PC90cj4KPHRy Pjx0ZCBjbGFzcz0iZGlmZl9uZXh0IiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsg cGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgd2lkdGg6IDExcHg7IHBh ZGRpbmctdG9wOiAycHg7IHZlcnRpY2FsLWFsaWduOiB0b3A7IGJhY2tncm91bmQ6ICNkZWRl ZGUiPjwvdGQ+PHRkIGNsYXNzPSIgaGFzX2RpZmZlcmVuY2UiIHN0eWxlPSJmb250LWZhbWls eTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4OyBi YWNrZ3JvdW5kOiAjODFGNzgxOyB3aWR0aDogMWVtIj48L3RkPjx0ZCBjbGFzcz0ibGluZUNv bnRlbnQiIHN0eWxlPSJmb250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJw eDsgcGFkZGluZy1yaWdodDogMnB4OyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyB0ZXh0LWFsaWdu OiBsZWZ0Ij48L3RkPjx0ZCBjbGFzcz0iZGlmZl9uZXh0IiBzdHlsZT0iZm9udC1mYW1pbHk6 IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgd2lk dGg6IDExcHg7IHBhZGRpbmctdG9wOiAycHg7IHZlcnRpY2FsLWFsaWduOiB0b3A7IGJhY2tn cm91bmQ6ICNkZWRlZGUiPjwvdGQ+PHRkIGNsYXNzPSIgaGFzX2RpZmZlcmVuY2UiIHN0eWxl PSJmb250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1y aWdodDogMnB4OyBiYWNrZ3JvdW5kOiAjODFGNzgxOyB3aWR0aDogMWVtIj41OTwvdGQ+PHRk IGNsYXNzPSJsaW5lQ29udGVudCIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBh ZGRpbmctbGVmdDogMnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IHZlcnRpY2FsLWFsaWduOiB0 b3A7IHRleHQtYWxpZ246IGxlZnQiPjxzcGFuIGNsYXNzPSJkaWZmZXJlbmNlIiBzdHlsZT0i d2lkdGg6IDFlbTsgYmFja2dyb3VuZDogI0E5RDBGNSI+Jm5ic3A7Jm5ic3A7ICZuYnNwO2h0 dHA6Ly93d3cuZXRzaS5vcmcvZGVsaXZlci9ldHNpX3RzLzEwMjAwMF8xMDIwOTkvMTAyMDQy Cjwvc3Bhbj48L3RkPjwvdHI+Cjx0cj48dGQgY2xhc3M9ImRpZmZfbmV4dCIgc3R5bGU9ImZv bnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRpbmctbGVmdDogMnB4OyBwYWRkaW5nLXJpZ2h0 OiAycHg7IHdpZHRoOiAxMXB4OyBwYWRkaW5nLXRvcDogMnB4OyB2ZXJ0aWNhbC1hbGlnbjog dG9wOyBiYWNrZ3JvdW5kOiAjZGVkZWRlIj48L3RkPjx0ZCBjbGFzcz0iIGhhc19kaWZmZXJl bmNlIiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7 IHBhZGRpbmctcmlnaHQ6IDJweDsgYmFja2dyb3VuZDogIzgxRjc4MTsgd2lkdGg6IDFlbSI+ PC90ZD48dGQgY2xhc3M9ImxpbmVDb250ZW50IiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9z cGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgdmVydGljYWwt YWxpZ246IHRvcDsgdGV4dC1hbGlnbjogbGVmdCI+PC90ZD48dGQgY2xhc3M9ImRpZmZfbmV4 dCIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRpbmctbGVmdDogMnB4OyBw YWRkaW5nLXJpZ2h0OiAycHg7IHdpZHRoOiAxMXB4OyBwYWRkaW5nLXRvcDogMnB4OyB2ZXJ0 aWNhbC1hbGlnbjogdG9wOyBiYWNrZ3JvdW5kOiAjZGVkZWRlIj48L3RkPjx0ZCBjbGFzcz0i IGhhc19kaWZmZXJlbmNlIiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsgcGFkZGlu Zy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgYmFja2dyb3VuZDogIzgxRjc4MTsg d2lkdGg6IDFlbSI+NjA8L3RkPjx0ZCBjbGFzcz0ibGluZUNvbnRlbnQiIHN0eWxlPSJmb250 LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdodDog MnB4OyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyB0ZXh0LWFsaWduOiBsZWZ0Ij48c3BhbiBjbGFz cz0iZGlmZmVyZW5jZSIgc3R5bGU9IndpZHRoOiAxZW07IGJhY2tncm91bmQ6ICNBOUQwRjUi PiZuYnNwOyZuYnNwOyAmbmJzcDsvMDIuMDIuMDFfNjAvdHNfMTAyMDQydjAyMDIwMXAucGRm Cjwvc3Bhbj48L3RkPjwvdHI+Cjx0cj48dGQgY2xhc3M9ImRpZmZfbmV4dCIgc3R5bGU9ImZv bnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRpbmctbGVmdDogMnB4OyBwYWRkaW5nLXJpZ2h0 OiAycHg7IHdpZHRoOiAxMXB4OyBwYWRkaW5nLXRvcDogMnB4OyB2ZXJ0aWNhbC1hbGlnbjog dG9wOyBiYWNrZ3JvdW5kOiAjZGVkZWRlIj48L3RkPjx0ZCBjbGFzcz0iIGhhc19kaWZmZXJl bmNlIiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7 IHBhZGRpbmctcmlnaHQ6IDJweDsgYmFja2dyb3VuZDogIzgxRjc4MTsgd2lkdGg6IDFlbSI+ PC90ZD48dGQgY2xhc3M9ImxpbmVDb250ZW50IiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9z cGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgdmVydGljYWwt YWxpZ246IHRvcDsgdGV4dC1hbGlnbjogbGVmdCI+PC90ZD48dGQgY2xhc3M9ImRpZmZfbmV4 dCIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRpbmctbGVmdDogMnB4OyBw YWRkaW5nLXJpZ2h0OiAycHg7IHdpZHRoOiAxMXB4OyBwYWRkaW5nLXRvcDogMnB4OyB2ZXJ0 aWNhbC1hbGlnbjogdG9wOyBiYWNrZ3JvdW5kOiAjZGVkZWRlIj48L3RkPjx0ZCBjbGFzcz0i IGhhc19kaWZmZXJlbmNlIiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsgcGFkZGlu Zy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgYmFja2dyb3VuZDogIzgxRjc4MTsg d2lkdGg6IDFlbSI+NjE8L3RkPjx0ZCBjbGFzcz0ibGluZUNvbnRlbnQiIHN0eWxlPSJmb250 LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdodDog MnB4OyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyB0ZXh0LWFsaWduOiBsZWZ0Ij48c3BhbiBjbGFz cz0iZGlmZmVyZW5jZSIgc3R5bGU9IndpZHRoOiAxZW07IGJhY2tncm91bmQ6ICNBOUQwRjUi Pgo8L3NwYW4+PC90ZD48L3RyPgo8dHI+PHRkIGNsYXNzPSJkaWZmX25leHQiIHN0eWxlPSJm b250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdo dDogMnB4OyB3aWR0aDogMTFweDsgcGFkZGluZy10b3A6IDJweDsgdmVydGljYWwtYWxpZ246 IHRvcDsgYmFja2dyb3VuZDogI2RlZGVkZSI+PC90ZD48dGQgY2xhc3M9IiBoYXNfZGlmZmVy ZW5jZSIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRpbmctbGVmdDogMnB4 OyBwYWRkaW5nLXJpZ2h0OiAycHg7IGJhY2tncm91bmQ6ICM4MUY3ODE7IHdpZHRoOiAxZW0i PjwvdGQ+PHRkIGNsYXNzPSJsaW5lQ29udGVudCIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25v c3BhY2U7IHBhZGRpbmctbGVmdDogMnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IHZlcnRpY2Fs LWFsaWduOiB0b3A7IHRleHQtYWxpZ246IGxlZnQiPjwvdGQ+PHRkIGNsYXNzPSJkaWZmX25l eHQiIHN0eWxlPSJmb250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsg cGFkZGluZy1yaWdodDogMnB4OyB3aWR0aDogMTFweDsgcGFkZGluZy10b3A6IDJweDsgdmVy dGljYWwtYWxpZ246IHRvcDsgYmFja2dyb3VuZDogI2RlZGVkZSI+PC90ZD48dGQgY2xhc3M9 IiBoYXNfZGlmZmVyZW5jZSIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRp bmctbGVmdDogMnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IGJhY2tncm91bmQ6ICM4MUY3ODE7 IHdpZHRoOiAxZW0iPjYyPC90ZD48dGQgY2xhc3M9ImxpbmVDb250ZW50IiBzdHlsZT0iZm9u dC1mYW1pbHk6IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6 IDJweDsgdmVydGljYWwtYWxpZ246IHRvcDsgdGV4dC1hbGlnbjogbGVmdCI+PHNwYW4gY2xh c3M9ImRpZmZlcmVuY2UiIHN0eWxlPSJ3aWR0aDogMWVtOyBiYWNrZ3JvdW5kOiAjQTlEMEY1 Ij5bNF0gTmV0d29yayBhbmQgY2VydGlmaWNhdGUgc3lzdGVtIHNlY3VyaXR5IHJlcXVpcmVt ZW50cywgQ0EvQnJvd3NlciBGb3J1bSwgCjwvc3Bhbj48L3RkPjwvdHI+Cjx0cj48dGQgY2xh c3M9ImRpZmZfbmV4dCIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRpbmct bGVmdDogMnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IHdpZHRoOiAxMXB4OyBwYWRkaW5nLXRv cDogMnB4OyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyBiYWNrZ3JvdW5kOiAjZGVkZWRlIj48L3Rk Pjx0ZCBjbGFzcz0iIGhhc19kaWZmZXJlbmNlIiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9z cGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgYmFja2dyb3Vu ZDogIzgxRjc4MTsgd2lkdGg6IDFlbSI+PC90ZD48dGQgY2xhc3M9ImxpbmVDb250ZW50IiBz dHlsZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBhZGRp bmctcmlnaHQ6IDJweDsgdmVydGljYWwtYWxpZ246IHRvcDsgdGV4dC1hbGlnbjogbGVmdCI+ PC90ZD48dGQgY2xhc3M9ImRpZmZfbmV4dCIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3Bh Y2U7IHBhZGRpbmctbGVmdDogMnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IHdpZHRoOiAxMXB4 OyBwYWRkaW5nLXRvcDogMnB4OyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyBiYWNrZ3JvdW5kOiAj ZGVkZWRlIj48L3RkPjx0ZCBjbGFzcz0iIGhhc19kaWZmZXJlbmNlIiBzdHlsZT0iZm9udC1m YW1pbHk6IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJw eDsgYmFja2dyb3VuZDogIzgxRjc4MTsgd2lkdGg6IDFlbSI+NjM8L3RkPjx0ZCBjbGFzcz0i bGluZUNvbnRlbnQiIHN0eWxlPSJmb250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxl ZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4OyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyB0ZXh0 LWFsaWduOiBsZWZ0Ij48c3BhbiBjbGFzcz0iZGlmZmVyZW5jZSIgc3R5bGU9IndpZHRoOiAx ZW07IGJhY2tncm91bmQ6ICNBOUQwRjUiPiZuYnNwOyZuYnNwOyAmbmJzcDtBdWcgMjAxMiwg aHR0cHM6Ly93d3cuY2FiZm9ydW0ub3JnL05ldHdvcmtfU2VjdXJpdHlfQ29udHJvbHNfVjEu cGRmCjwvc3Bhbj48L3RkPjwvdHI+Cjx0cj48dGQgY2xhc3M9ImRpZmZfbmV4dCIgc3R5bGU9 ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRpbmctbGVmdDogMnB4OyBwYWRkaW5nLXJp Z2h0OiAycHg7IHdpZHRoOiAxMXB4OyBwYWRkaW5nLXRvcDogMnB4OyB2ZXJ0aWNhbC1hbGln bjogdG9wOyBiYWNrZ3JvdW5kOiAjZGVkZWRlIj48L3RkPjx0ZCBjbGFzcz0iIGhhc19kaWZm ZXJlbmNlIiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0OiAy cHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgYmFja2dyb3VuZDogIzgxRjc4MTsgd2lkdGg6IDFl bSI+PC90ZD48dGQgY2xhc3M9ImxpbmVDb250ZW50IiBzdHlsZT0iZm9udC1mYW1pbHk6IG1v bm9zcGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgdmVydGlj YWwtYWxpZ246IHRvcDsgdGV4dC1hbGlnbjogbGVmdCI+PC90ZD48dGQgY2xhc3M9ImRpZmZf bmV4dCIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRpbmctbGVmdDogMnB4 OyBwYWRkaW5nLXJpZ2h0OiAycHg7IHdpZHRoOiAxMXB4OyBwYWRkaW5nLXRvcDogMnB4OyB2 ZXJ0aWNhbC1hbGlnbjogdG9wOyBiYWNrZ3JvdW5kOiAjZGVkZWRlIj48L3RkPjx0ZCBjbGFz cz0iIGhhc19kaWZmZXJlbmNlIiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsgcGFk ZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgYmFja2dyb3VuZDogIzgxRjc4 MTsgd2lkdGg6IDFlbSI+NjQ8L3RkPjx0ZCBjbGFzcz0ibGluZUNvbnRlbnQiIHN0eWxlPSJm b250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdo dDogMnB4OyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyB0ZXh0LWFsaWduOiBsZWZ0Ij48c3BhbiBj bGFzcz0iZGlmZmVyZW5jZSIgc3R5bGU9IndpZHRoOiAxZW07IGJhY2tncm91bmQ6ICNBOUQw RjUiPgo8L3NwYW4+PC90ZD48L3RyPgo8dHI+PHRkIGNsYXNzPSJkaWZmX25leHQiIHN0eWxl PSJmb250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1y aWdodDogMnB4OyB3aWR0aDogMTFweDsgcGFkZGluZy10b3A6IDJweDsgdmVydGljYWwtYWxp Z246IHRvcDsgYmFja2dyb3VuZDogI2RlZGVkZSI+PC90ZD48dGQgY2xhc3M9IiBoYXNfZGlm ZmVyZW5jZSIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRpbmctbGVmdDog MnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IGJhY2tncm91bmQ6ICM4MUY3ODE7IHdpZHRoOiAx ZW0iPjM4PC90ZD48dGQgY2xhc3M9ImxpbmVDb250ZW50IiBzdHlsZT0iZm9udC1mYW1pbHk6 IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgdmVy dGljYWwtYWxpZ246IHRvcDsgdGV4dC1hbGlnbjogbGVmdCI+WzxzcGFuIGNsYXNzPSJkaWZm ZXJlbmNlIiBzdHlsZT0id2lkdGg6IDFlbTsgYmFja2dyb3VuZDogI0E5RDBGNSI+Mjwvc3Bh bj5dPHNwYW4gY2xhc3M9ImRpZmZlcmVuY2UiIHN0eWxlPSJ3aWR0aDogMWVtOyBiYWNrZ3Jv dW5kOiAjQTlEMEY1Ij4mbmJzcDsmbmJzcDs8L3NwYW4+Jm5ic3A7QmFzZWxpbmUgUmVxdWly ZW1lbnRzIGZvciB0aGUgSXNzdWFuY2UgYW5kIE1hbmFnZW1lbnQgb2YgUHVibGljbHktVHJ1 c3RlZCZuYnNwOzxzcGFuIGNsYXNzPSJkaWZmZXJlbmNlIiBzdHlsZT0id2lkdGg6IDFlbTsg YmFja2dyb3VuZDogI0E5RDBGNSI+Q2VydGlmaWNhdGVzIFZlcnNpb24gMS4wLCBDQS9Ccm93 c2VyIEZvcnVtLCBOb3YgMjAxMSwgaHR0cHM6Ly93d3cuY2FiZm9ydW0ub3JnL0Jhc2VsaW5l X1JlcXVpcmVtZW50c19WMS5wZGY8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImRpZmZfbmV4dCIg c3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRpbmctbGVmdDogMnB4OyBwYWRk aW5nLXJpZ2h0OiAycHg7IHdpZHRoOiAxMXB4OyBwYWRkaW5nLXRvcDogMnB4OyB2ZXJ0aWNh bC1hbGlnbjogdG9wOyBiYWNrZ3JvdW5kOiAjZGVkZWRlIj48L3RkPjx0ZCBjbGFzcz0iIGhh c19kaWZmZXJlbmNlIiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsgcGFkZGluZy1s ZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgYmFja2dyb3VuZDogIzgxRjc4MTsgd2lk dGg6IDFlbSI+NjU8L3RkPjx0ZCBjbGFzcz0ibGluZUNvbnRlbnQiIHN0eWxlPSJmb250LWZh bWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4 OyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyB0ZXh0LWFsaWduOiBsZWZ0Ij5bPHNwYW4gY2xhc3M9 ImRpZmZlcmVuY2UiIHN0eWxlPSJ3aWR0aDogMWVtOyBiYWNrZ3JvdW5kOiAjQTlEMEY1Ij41 PC9zcGFuPl0gQmFzZWxpbmUgUmVxdWlyZW1lbnRzIGZvciB0aGUgSXNzdWFuY2UgYW5kIE1h bmFnZW1lbnQgb2YgUHVibGljbHktVHJ1c3RlZDwvdGQ+PC90cj4KPHRyPjx0ZCBjbGFzcz0i ZGlmZl9uZXh0IiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0 OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgd2lkdGg6IDExcHg7IHBhZGRpbmctdG9wOiAy cHg7IHZlcnRpY2FsLWFsaWduOiB0b3A7IGJhY2tncm91bmQ6ICNkZWRlZGUiPjwvdGQ+PHRk IGNsYXNzPSIgaGFzX2RpZmZlcmVuY2UiIHN0eWxlPSJmb250LWZhbWlseTogbW9ub3NwYWNl OyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1yaWdodDogMnB4OyBiYWNrZ3JvdW5kOiAj ODFGNzgxOyB3aWR0aDogMWVtIj4zOTwvdGQ+PHRkIGNsYXNzPSJsaW5lQ29udGVudCIgc3R5 bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRpbmctbGVmdDogMnB4OyBwYWRkaW5n LXJpZ2h0OiAycHg7IHZlcnRpY2FsLWFsaWduOiB0b3A7IHRleHQtYWxpZ246IGxlZnQiPjxz cGFuIGNsYXNzPSJkaWZmZXJlbmNlIiBzdHlsZT0id2lkdGg6IDFlbTsgYmFja2dyb3VuZDog I0E5RDBGNSI+Jm5ic3A7PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJkaWZmX25leHQiIHN0eWxl PSJmb250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFkZGluZy1y aWdodDogMnB4OyB3aWR0aDogMTFweDsgcGFkZGluZy10b3A6IDJweDsgdmVydGljYWwtYWxp Z246IHRvcDsgYmFja2dyb3VuZDogI2RlZGVkZSI+PC90ZD48dGQgY2xhc3M9IiBoYXNfZGlm ZmVyZW5jZSIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRpbmctbGVmdDog MnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IGJhY2tncm91bmQ6ICM4MUY3ODE7IHdpZHRoOiAx ZW0iPjY2PC90ZD48dGQgY2xhc3M9ImxpbmVDb250ZW50IiBzdHlsZT0iZm9udC1mYW1pbHk6 IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgdmVy dGljYWwtYWxpZ246IHRvcDsgdGV4dC1hbGlnbjogbGVmdCI+PHNwYW4gY2xhc3M9ImRpZmZl cmVuY2UiIHN0eWxlPSJ3aWR0aDogMWVtOyBiYWNrZ3JvdW5kOiAjQTlEMEY1Ij4mbmJzcDsm bmJzcDsgJm5ic3A7Q2VydGlmaWNhdGVzIFZlcnNpb24gMS4wLCBDQS9Ccm93c2VyIEZvcnVt LCBOb3YgMjAxMSwgCjwvc3Bhbj48L3RkPjwvdHI+Cjx0cj48dGQgY2xhc3M9ImRpZmZfbmV4 dCIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRpbmctbGVmdDogMnB4OyBw YWRkaW5nLXJpZ2h0OiAycHg7IHdpZHRoOiAxMXB4OyBwYWRkaW5nLXRvcDogMnB4OyB2ZXJ0 aWNhbC1hbGlnbjogdG9wOyBiYWNrZ3JvdW5kOiAjZGVkZWRlIj48L3RkPjx0ZCBjbGFzcz0i IGhhc19kaWZmZXJlbmNlIiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsgcGFkZGlu Zy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgYmFja2dyb3VuZDogIzgxRjc4MTsg d2lkdGg6IDFlbSI+PC90ZD48dGQgY2xhc3M9ImxpbmVDb250ZW50IiBzdHlsZT0iZm9udC1m YW1pbHk6IG1vbm9zcGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJw eDsgdmVydGljYWwtYWxpZ246IHRvcDsgdGV4dC1hbGlnbjogbGVmdCI+PC90ZD48dGQgY2xh c3M9ImRpZmZfbmV4dCIgc3R5bGU9ImZvbnQtZmFtaWx5OiBtb25vc3BhY2U7IHBhZGRpbmct bGVmdDogMnB4OyBwYWRkaW5nLXJpZ2h0OiAycHg7IHdpZHRoOiAxMXB4OyBwYWRkaW5nLXRv cDogMnB4OyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyBiYWNrZ3JvdW5kOiAjZGVkZWRlIj48L3Rk Pjx0ZCBjbGFzcz0iIGhhc19kaWZmZXJlbmNlIiBzdHlsZT0iZm9udC1mYW1pbHk6IG1vbm9z cGFjZTsgcGFkZGluZy1sZWZ0OiAycHg7IHBhZGRpbmctcmlnaHQ6IDJweDsgYmFja2dyb3Vu ZDogIzgxRjc4MTsgd2lkdGg6IDFlbSI+Njc8L3RkPjx0ZCBjbGFzcz0ibGluZUNvbnRlbnQi IHN0eWxlPSJmb250LWZhbWlseTogbW9ub3NwYWNlOyBwYWRkaW5nLWxlZnQ6IDJweDsgcGFk ZGluZy1yaWdodDogMnB4OyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyB0ZXh0LWFsaWduOiBsZWZ0 Ij48c3BhbiBjbGFzcz0iZGlmZmVyZW5jZSIgc3R5bGU9IndpZHRoOiAxZW07IGJhY2tncm91 bmQ6ICNBOUQwRjUiPiZuYnNwOyZuYnNwOyAmbmJzcDtodHRwczovL3d3dy5jYWJmb3J1bS5v cmcvQmFzZWxpbmVfUmVxdWlyZW1lbnRzX1YxLnBkZjwvc3Bhbj48L3RkPjwvdHI+CjwvdGJv ZHk+CjwvdGFibGU+PC9ib2R5PjwvaHRtbD4= --------------090302060606000105050404-- From sm@resistor.net Fri Oct 19 12:27:57 2012 Return-Path: X-Original-To: wpkops@ietfa.amsl.com Delivered-To: wpkops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 602D621F8778 for ; Fri, 19 Oct 2012 12:27:57 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.587 X-Spam-Level: X-Spam-Status: No, score=-102.587 tagged_above=-999 required=5 tests=[AWL=0.012, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UbA6hAOkZCMd for ; Fri, 19 Oct 2012 12:27:56 -0700 (PDT) Received: from mx.ipv6.elandsys.com (mx.ipv6.elandsys.com [IPv6:2001:470:f329:1::1]) by ietfa.amsl.com (Postfix) with ESMTP id 25E7221F8727 for ; Fri, 19 Oct 2012 12:27:56 -0700 (PDT) Received: from SUBMAN.resistor.net (IDENT:sm@localhost [127.0.0.1]) (authenticated bits=0) by mx.elandsys.com (8.14.5/8.14.5) with ESMTP id q9JJRcj4014450; Fri, 19 Oct 2012 12:27:41 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=opendkim.org; s=mail2010; t=1350674862; bh=e//ATaqdOtOJxdAAls57Rm6neCoJpiriNj76L6FpeXM=; h=Date:To:From:Subject:Cc:In-Reply-To:References; b=iOwehAVjQZkXtKB7yCsfBywo4LEymesOoO/2FvwxwIn46MZW/gJO6zh1wP47CwAPb 9wrnQ71HYAxSDz8hRkndS04r1XlkJzECZs+BVLSWBuUbJCXDA1DjoANcljPzQLoWg1 oiPozB6E9WAQYy3qiex/27lLHHHSQnGZkn9rc8CE= DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=resistor.net; s=mail; t=1350674862; i=@resistor.net; bh=e//ATaqdOtOJxdAAls57Rm6neCoJpiriNj76L6FpeXM=; h=Date:To:From:Subject:Cc:In-Reply-To:References; b=XVSnAPLJEN4GMMPtdFD0mYvhsO/ecfYhD+/DvdoCpqMDsDAmnze4jdEoTkZ6oJZrr ivBsM37KlkaAwQozAE9zM0l6LZwt3uNOntYcFagKxMHB9U8RJssnGvwyI3DMBvDNBL jYWeVJsmmrPBxW5oter5OPKgam1PTDEGHCTwLFaU= Message-Id: <6.2.5.6.2.20121019120900.0a960788@resistor.net> X-Mailer: QUALCOMM Windows Eudora Version 6.2.5.6 Date: Fri, 19 Oct 2012 12:15:52 -0700 To: =JeffH From: SM In-Reply-To: <50819AB5.2000108@KingsMountain.com> References: <50819AB5.2000108@KingsMountain.com> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed Cc: wpkops@ietf.org Subject: Re: [wpkops] draft 4th draft charter X-BeenThere: wpkops@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 19 Oct 2012 19:27:57 -0000 Hi Jeff, At 11:23 19-10-2012, =JeffH wrote: >In an effort to help out, below is an updated draft 4th draft charter :) [snip] >Given the urgency of the required developments and the scale of the >task, it is agreed that adherence to the published schedule should >take precedence over completeness of the results, though without >sacrificing technical correctness. What does the above gem mean? Regards, -sm From tim.moses@entrust.com Sun Oct 21 06:59:39 2012 Return-Path: X-Original-To: wpkops@ietfa.amsl.com Delivered-To: wpkops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BAEF321F8986 for ; Sun, 21 Oct 2012 06:59:39 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.41 X-Spam-Level: X-Spam-Status: No, score=-2.41 tagged_above=-999 required=5 tests=[AWL=0.189, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6vWXGlTsdVtG for ; Sun, 21 Oct 2012 06:59:39 -0700 (PDT) Received: from ipedge2.entrust.com (ipedge2.entrust.com [216.191.252.25]) by ietfa.amsl.com (Postfix) with ESMTP id 15CD821F8985 for ; Sun, 21 Oct 2012 06:59:38 -0700 (PDT) X-IronPort-AV: E=Sophos;i="4.80,625,1344225600"; d="scan'208";a="2222688" Received: from unknown (HELO sottexchcas1.corp.ad.entrust.com) ([10.4.51.93]) by ipedge2.entrust.com with ESMTP; 21 Oct 2012 09:59:26 -0400 Received: from SOTTEXCH10.corp.ad.entrust.com ([fe80::389b:f45b:7ea1:79b7]) by sottexchcas1.corp.ad.entrust.com ([::1]) with mapi id 14.02.0318.001; Sun, 21 Oct 2012 09:59:25 -0400 From: Tim Moses To: SM Thread-Topic: [wpkops] draft 4th draft charter Thread-Index: AQHNrib++p2uBYfGXk2bZkzupKnsJJfBQw8AgAKJMdg= Date: Sun, 21 Oct 2012 13:59:24 +0000 Message-ID: <41FCEC9B-0D74-4669-A915-2ADEA783CC93@bwdldb.pp.bnr.ca> References: <50819AB5.2000108@KingsMountain.com>, <6.2.5.6.2.20121019120900.0a960788@resistor.net> In-Reply-To: <6.2.5.6.2.20121019120900.0a960788@resistor.net> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Cc: "wpkops@ietf.org" , =JeffH Subject: Re: [wpkops] draft 4th draft charter X-BeenThere: wpkops@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 21 Oct 2012 13:59:39 -0000 It means that schedule and accuracy take precedence over completeness. Fac= ed with a tough deadline appeals to correct errors will be heard, appeals t= o add content won't. On 2012-10-19, at 3:28 PM, "SM" wrote: > Hi Jeff, > At 11:23 19-10-2012, =3DJeffH wrote: >> In an effort to help out, below is an updated draft 4th draft charter :) >=20 > [snip] >=20 >> Given the urgency of the required developments and the scale of the task= , it is agreed that adherence to the published schedule should take precede= nce over completeness of the results, though without sacrificing technical = correctness. >=20 > What does the above gem mean? >=20 > Regards, > -sm=20 > _______________________________________________ > wpkops mailing list > wpkops@ietf.org > https://www.ietf.org/mailman/listinfo/wpkops From tim.moses@entrust.com Fri Oct 26 07:51:37 2012 Return-Path: X-Original-To: wpkops@ietfa.amsl.com Delivered-To: wpkops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D8EE821F852A for ; Fri, 26 Oct 2012 07:51:36 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.494 X-Spam-Level: X-Spam-Status: No, score=-1.494 tagged_above=-999 required=5 tests=[AWL=-0.755, BAYES_20=-0.74, HTML_MESSAGE=0.001] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NVOEBTRHLm8W for ; Fri, 26 Oct 2012 07:51:31 -0700 (PDT) Received: from ipedge2.entrust.com (ipedge2.entrust.com [216.191.252.25]) by ietfa.amsl.com (Postfix) with ESMTP id 4BC7921F862B for ; Fri, 26 Oct 2012 07:51:31 -0700 (PDT) X-IronPort-AV: E=Sophos;i="4.80,654,1344225600"; d="scan'208,217";a="2264663" Received: from unknown (HELO SOTTEXCHCAS2.corp.ad.entrust.com) ([10.4.51.224]) by ipedge2.entrust.com with ESMTP; 26 Oct 2012 10:51:18 -0400 Received: from SOTTEXCH10.corp.ad.entrust.com ([fe80::389b:f45b:7ea1:79b7]) by SOTTEXCHCAS2.corp.ad.entrust.com ([::1]) with mapi id 14.02.0318.004; Fri, 26 Oct 2012 10:51:18 -0400 From: Tim Moses To: "wpkops@ietf.org" Thread-Topic: WPKOPS BoF draft agenda Thread-Index: Ac2ziVma6Q1+nqgKQfCcw/zpDjLWfg== Date: Fri, 26 Oct 2012 14:51:16 +0000 Message-ID: <5B68A271B9C97046963CB6A5B8D6F62C3A5FFFA9@SOTTEXCH10.corp.ad.entrust.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.4.160.88] Content-Type: multipart/alternative; boundary="_000_5B68A271B9C97046963CB6A5B8D6F62C3A5FFFA9SOTTEXCH10corpa_" MIME-Version: 1.0 Subject: [wpkops] WPKOPS BoF draft agenda X-BeenThere: wpkops@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 26 Oct 2012 14:51:37 -0000 --_000_5B68A271B9C97046963CB6A5B8D6F62C3A5FFFA9SOTTEXCH10corpa_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Colleagues - Here is an initial agenda. Please send your comments. If you= would like to make a presentation, please let me know. Thanks a lot. All= the best. Tim. 1. Introduction (Tim Moses) - 10 mins 2. The Web-app operator's perspective (Jeff Hodges/Brad Hill) - 20 mins 3. The CA's perspective (Ben Wilson) - 20 mins 4. Outstanding questions (chairs) - 10 mins 5. Comments and questions from the audience - 50 mins 6. Summation (chairs) - 10 mins T: +1 613 270 3183 --_000_5B68A271B9C97046963CB6A5B8D6F62C3A5FFFA9SOTTEXCH10corpa_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Colleagues – Here is an initial agenda.  = Please send your comments.  If you would like to make a presentation, = please let me know.  Thanks a lot.  All the best.  Tim.=

 

1. Introduction (Tim Moses) – 10 mins

2. The Web-app operator’s perspective (Jeff Ho= dges/Brad Hill) – 20 mins

3. The CA’s perspective (Ben Wilson) – 2= 0 mins

4. Outstanding questions (chairs) – 10 mins

5. Comments and questions from the audience – = 50 mins

6. Summation (chairs) – 10 mins

 

T: +1 613 270 3183

 

--_000_5B68A271B9C97046963CB6A5B8D6F62C3A5FFFA9SOTTEXCH10corpa_-- From stephen.farrell@cs.tcd.ie Fri Oct 26 08:06:00 2012 Return-Path: X-Original-To: wpkops@ietfa.amsl.com Delivered-To: wpkops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 44B2A21F8676 for ; Fri, 26 Oct 2012 08:06:00 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.599 X-Spam-Level: X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WvOaU8kUVaG6 for ; Fri, 26 Oct 2012 08:05:56 -0700 (PDT) Received: from mercury.scss.tcd.ie (mercury.scss.tcd.ie [134.226.56.6]) by ietfa.amsl.com (Postfix) with ESMTP id 6651B21F8665 for ; Fri, 26 Oct 2012 08:05:56 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mercury.scss.tcd.ie (Postfix) with ESMTP id CFDE0C796; Fri, 26 Oct 2012 16:05:34 +0100 (IST) X-Virus-Scanned: Debian amavisd-new at scss.tcd.ie Received: from mercury.scss.tcd.ie ([127.0.0.1]) by localhost (mercury.scss.tcd.ie [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RQf8sU96ssog; Fri, 26 Oct 2012 16:05:32 +0100 (IST) Received: from [10.87.48.4] (unknown [86.42.191.229]) by mercury.scss.tcd.ie (Postfix) with ESMTPSA id AF499C790; Fri, 26 Oct 2012 16:05:32 +0100 (IST) Message-ID: <508AA6BC.4050402@cs.tcd.ie> Date: Fri, 26 Oct 2012 16:05:32 +0100 From: Stephen Farrell User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:16.0) Gecko/20121017 Thunderbird/16.0.1 MIME-Version: 1.0 To: Tim Moses References: <5B68A271B9C97046963CB6A5B8D6F62C3A5FFFA9@SOTTEXCH10.corp.ad.entrust.com> In-Reply-To: <5B68A271B9C97046963CB6A5B8D6F62C3A5FFFA9@SOTTEXCH10.corp.ad.entrust.com> X-Enigmail-Version: 1.4.5 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Cc: "wpkops@ietf.org" Subject: Re: [wpkops] WPKOPS BoF draft agenda X-BeenThere: wpkops@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 26 Oct 2012 15:06:00 -0000 Hi Tim, I assume that some part of this, probably #4 includes consideration of the specific proposed charter text? That's normally the case for a wg-forming BoF, Cheers, S. On 10/26/2012 03:51 PM, Tim Moses wrote: > Colleagues - Here is an initial agenda. Please send your comments. If you would like to make a presentation, please let me know. Thanks a lot. All the best. Tim. > > 1. Introduction (Tim Moses) - 10 mins > 2. The Web-app operator's perspective (Jeff Hodges/Brad Hill) - 20 mins > 3. The CA's perspective (Ben Wilson) - 20 mins > 4. Outstanding questions (chairs) - 10 mins > 5. Comments and questions from the audience - 50 mins > 6. Summation (chairs) - 10 mins > > T: +1 613 270 3183 > > > > > _______________________________________________ > wpkops mailing list > wpkops@ietf.org > https://www.ietf.org/mailman/listinfo/wpkops > From tim.moses@entrust.com Fri Oct 26 08:09:37 2012 Return-Path: X-Original-To: wpkops@ietfa.amsl.com Delivered-To: wpkops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A982121F84D3 for ; Fri, 26 Oct 2012 08:09:37 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.373 X-Spam-Level: X-Spam-Status: No, score=-2.373 tagged_above=-999 required=5 tests=[AWL=0.226, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9-traWFhnNcm for ; Fri, 26 Oct 2012 08:09:37 -0700 (PDT) Received: from ipedge1.entrust.com (ipedge1.entrust.com [216.191.252.10]) by ietfa.amsl.com (Postfix) with ESMTP id 08AA021F84D2 for ; Fri, 26 Oct 2012 08:09:36 -0700 (PDT) X-IronPort-AV: E=Sophos;i="4.80,654,1344225600"; d="scan'208";a="6640802" Received: from unknown (HELO sottexchcas1.corp.ad.entrust.com) ([10.4.51.93]) by ipedge1.entrust.com with ESMTP; 26 Oct 2012 11:09:22 -0400 Received: from SOTTEXCH10.corp.ad.entrust.com ([fe80::389b:f45b:7ea1:79b7]) by sottexchcas1.corp.ad.entrust.com ([::1]) with mapi id 14.02.0318.004; Fri, 26 Oct 2012 11:09:22 -0400 From: Tim Moses To: 'Stephen Farrell' Thread-Topic: [wpkops] WPKOPS BoF draft agenda Thread-Index: Ac2ziVma6Q1+nqgKQfCcw/zpDjLWfgAI4VYAAAhPaWA= Date: Fri, 26 Oct 2012 15:09:21 +0000 Message-ID: <5B68A271B9C97046963CB6A5B8D6F62C3A6002A6@SOTTEXCH10.corp.ad.entrust.com> References: <5B68A271B9C97046963CB6A5B8D6F62C3A5FFFA9@SOTTEXCH10.corp.ad.entrust.com> <508AA6BC.4050402@cs.tcd.ie> In-Reply-To: <508AA6BC.4050402@cs.tcd.ie> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.4.160.88] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Cc: "wpkops@ietf.org" Subject: Re: [wpkops] WPKOPS BoF draft agenda X-BeenThere: wpkops@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 26 Oct 2012 15:09:37 -0000 Thanks Stephen. Steve H and I had it in mind to list "charter" as one of t= he outstanding questions (under Item 4) and take views from the audience on= the topic under Item 5. All the best. Tim. -----Original Message----- From: Stephen Farrell [mailto:stephen.farrell@cs.tcd.ie]=20 Sent: Friday, October 26, 2012 11:06 AM To: Tim Moses Cc: wpkops@ietf.org Subject: Re: [wpkops] WPKOPS BoF draft agenda Hi Tim, I assume that some part of this, probably #4 includes consideration of the = specific proposed charter text? That's normally the case for a wg-forming BoF, Cheers, S. On 10/26/2012 03:51 PM, Tim Moses wrote: > Colleagues - Here is an initial agenda. Please send your comments. If y= ou would like to make a presentation, please let me know. Thanks a lot. A= ll the best. Tim. >=20 > 1. Introduction (Tim Moses) - 10 mins > 2. The Web-app operator's perspective (Jeff Hodges/Brad Hill) - 20=20 > mins 3. The CA's perspective (Ben Wilson) - 20 mins 4. Outstanding=20 > questions (chairs) - 10 mins 5. Comments and questions from the=20 > audience - 50 mins 6. Summation (chairs) - 10 mins >=20 > T: +1 613 270 3183 >=20 >=20 >=20 >=20 > _______________________________________________ > wpkops mailing list > wpkops@ietf.org > https://www.ietf.org/mailman/listinfo/wpkops >=20 From tim.moses@entrust.com Wed Oct 31 06:14:50 2012 Return-Path: X-Original-To: wpkops@ietfa.amsl.com Delivered-To: wpkops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6705821F847F for ; Wed, 31 Oct 2012 06:14:50 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.74 X-Spam-Level: X-Spam-Status: No, score=-0.74 tagged_above=-999 required=5 tests=[BAYES_20=-0.74] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rmLDBAMwC9Fi for ; Wed, 31 Oct 2012 06:14:50 -0700 (PDT) Received: from ipedge1.entrust.com (ipedge1.entrust.com [216.191.252.10]) by ietfa.amsl.com (Postfix) with ESMTP id C19A221F868A for ; Wed, 31 Oct 2012 06:14:49 -0700 (PDT) X-IronPort-AV: E=Sophos;i="4.80,687,1344225600"; d="scan'208";a="6681349" Received: from unknown (HELO SOTTEXCHCAS2.corp.ad.entrust.com) ([10.4.51.224]) by ipedge1.entrust.com with ESMTP; 31 Oct 2012 09:14:30 -0400 Received: from SOTTEXCH10.corp.ad.entrust.com ([fe80::389b:f45b:7ea1:79b7]) by SOTTEXCHCAS2.corp.ad.entrust.com ([::1]) with mapi id 14.02.0318.004; Wed, 31 Oct 2012 09:14:30 -0400 From: Tim Moses To: "wpkops@ietf.org" Thread-Topic: Status of editor recruitment Thread-Index: Ac23aakCadu+babnR2W3x76p/TP79A== Date: Wed, 31 Oct 2012 13:14:29 +0000 Message-ID: <5A10779B-F4D9-422D-9DBD-A5BB1945E70E@bwdldb.pp.bnr.ca> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: Content-Type: text/plain; charset="us-ascii" Content-ID: Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Subject: [wpkops] Status of editor recruitment X-BeenThere: wpkops@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 31 Oct 2012 13:14:50 -0000 Hi Everyone. I want to thank the experts who have offered to serve as edit= ors for WPKOPS documents. Here is the status: TLS stack anomalies: Adam Langley Trust models: Inigo Barreira, Bruce Morton Client behaviour: Ben Wilson, Robin Alden We don't yet have editors for the revocation document. Is there anyone willing to take on this task? Thanks a lot. All the best. Tim.= From tim.moses@entrust.com Wed Oct 31 12:45:47 2012 Return-Path: X-Original-To: wpkops@ietfa.amsl.com Delivered-To: wpkops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C1C2921F85E4 for ; Wed, 31 Oct 2012 12:45:47 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.669 X-Spam-Level: X-Spam-Status: No, score=-1.669 tagged_above=-999 required=5 tests=[AWL=0.929, BAYES_00=-2.599, HTML_MESSAGE=0.001] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id v2ouSbKB-VKi for ; Wed, 31 Oct 2012 12:45:43 -0700 (PDT) Received: from ipedge2.entrust.com (ipedge2.entrust.com [216.191.252.25]) by ietfa.amsl.com (Postfix) with ESMTP id 10A6B21F85D4 for ; Wed, 31 Oct 2012 12:45:42 -0700 (PDT) X-IronPort-AV: E=Sophos;i="4.80,687,1344225600"; d="scan'208,217";a="2299761" Received: from unknown (HELO sottexchcas1.corp.ad.entrust.com) ([10.4.51.93]) by ipedge2.entrust.com with ESMTP; 31 Oct 2012 15:45:42 -0400 Received: from SOTTEXCH10.corp.ad.entrust.com ([fe80::389b:f45b:7ea1:79b7]) by sottexchcas1.corp.ad.entrust.com ([::1]) with mapi id 14.02.0318.004; Wed, 31 Oct 2012 15:45:42 -0400 From: Tim Moses To: "wpkops@ietf.org" Thread-Topic: WPKOPS charter draft 4 Thread-Index: Ac23oE+2D29JgS32SMm8k04MhmDQQw== Date: Wed, 31 Oct 2012 19:45:41 +0000 Message-ID: <5B68A271B9C97046963CB6A5B8D6F62C3A605CCA@SOTTEXCH10.corp.ad.entrust.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.4.160.88] Content-Type: multipart/alternative; boundary="_000_5B68A271B9C97046963CB6A5B8D6F62C3A605CCASOTTEXCH10corpa_" MIME-Version: 1.0 Subject: [wpkops] WPKOPS charter draft 4 X-BeenThere: wpkops@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 31 Oct 2012 19:45:47 -0000 --_000_5B68A271B9C97046963CB6A5B8D6F62C3A605CCASOTTEXCH10corpa_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Colleagues. Just a reminder ... Below is the fourth draft of the WPKOPS ch= arter that Jeff Hodges circulated on 19 Oct. This is the version that we w= ill consider in the BoF on Monday. All the best. Tim. The Web PKI is the set of systems and procedures most commonly used, in con= junction with security protocols such as TLS, to protect the confidentialit= y, integrity and authenticity of communications between Web browsers and We= b content servers. More specifically, the Web PKI (as considered here) cons= ists of the actual contents of the certificates issued to Web application p= roviders by Certification Authorities (CAs), the certificate validation ser= vices provided by the Authorities to web browsers and their users, and the = TLS/SSL protocol stacks embedded in web servers and browsers. The Web PKI first appeared in 1993 or thereabouts and has developed continu= ously in a somewhat organic fashion since then. Across all the suppliers a= nd the point releases of their products, there are now hundreds of variatio= ns on the Web PKI in regular use. And this can be a source of problems for= end-users, certificate holders, and certificate issuers (CAs). For end-users, there is no clear view whether certificate "problems" remain= when they see indication of a "good" connection. For instance, in some br= owsers, a "good" indication may be displayed when a "revoked" response has = been received and "accepted" by the user, whereas other browsers may refuse= to display the contents under these circumstances. Certificate holders may have difficulty understanding whether some browser = versions will reject their certificate if certain content specifications ar= e not met, such as a subject public key that does not satisfy a minimum key= size, or a certificate policies extension that does not contain a particul= ar standard policy identifier. And for certificate issuers, it can be difficult to predict what proportion= of the user population will accept a certificate chain with certain charac= teristics. For instance, when a browser includes a nonce in an OCSP reques= t but the server supplies a response that does not include the nonce, it is= hard to know which browsers will accept and which will reject the response= . Starting from the premise that more consistency in Web security behavior is= desirable, a natural first step would be to document current and historic = browser and server behavior. But, such a project has to be bounded. There= fore, only server-authentication behavior encountered in more than 0.1 perc= ent of connections made by desktop and mobile browsers should be considered= . While it is not intended to apply the threshold with any precision, it m= ay be used to justify the inclusion or exclusion of a technique. Future activities may attempt to prescribe how the Web PKI "should" work, a= nd the prescription may turn out to be a proper subset of the PKIX PKI. Ho= wever, that task is explicitly not a goal of the proposed working group. I= nstead, the group's goal is merely to describe how the Web PKI "actually" w= orks in the set of browsers and servers that are in common use today. Additionally, a number of applications (such as client authentication, docu= ment signing, code signing, and email) often use the same trust anchors and= certificate processing mechanisms as used for server authentication on the= Web. This reuse creates problems in some situations [1]. While these app= lications are outside the scope of this working group, deliverables should = (wherever practical within the available expertise and time) identify mecha= nisms that are reused by other applications and identify the implications o= f that reuse. Also, the reliability of the Web PKI depends critically on the "practices" = of its certificate issuers; these practices comprise how certificate issuer= s perform their functions and implement controls, and are described in docu= ments known as "Certification Practice Statements" [2][3] and operational r= equirements documents [4][5]. However, the topic of certification practices= is outside the scope of the working group. That there are technical shortcomings with Web PKI, as it is practiced toda= y, is well recognised. And, that there is also some urgency in addressing = these shortcomings is also well recognised. But, it is felt that too much = haste can be counter-productive. The expectation is that the work of this = group will bring to light, in a systematic way, aspects of the Web PKI that= should be progressed in future working groups of the IETF's Security Area,= and that suppliers will be willing to participate in those working groups = and modify their products to comply with their standards. Given the urgency of the required developments and the scale of the task, i= t is agreed that adherence to the published schedule should take precedence= over completeness of the results, though without sacrificing technical cor= rectness. Milestones =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D 1. First WG draft of "trust model" document (4 months). 2. First WG draft of "certificate, CRL, and OCSP field and extension processing" document (12 months). 3. First WG draft of "certificate revocation" document (8 months). 4. First WG draft of "TLS stack operation" document (8 months). 5. IESG submission of "trust model" document (16 months). 6. IESG submission of "certificate, CRL, and OCSP field and extension processing" document (24 months). 7. IESG submission of "certificate revocation" document (20 months). 8. IESG submission of "TLS stack operation" document (16 months). References: [1] https://www.ietf.org/mail-archive/web/wpkops/current/msg00104.html [2] Internet X.509 Public Key Infrastructure Certificate Policy and Certification Practices Framework. S. Chokhani et al, IETF RFC3647 https://tools.ietf.org/html/rfc3647 [3] Electronic Signatures and Infrastructures (ESI); Policy requirements fo= r certification authorities issuing public key certificates. ETSI TS 102 042 V2.2.1 (2011-12) http://www.etsi.org/deliver/etsi_ts/102000_102099/102042 /02.02.01_60/ts_102042v020201p.pdf [4] Network and certificate system security requirements, CA/Browser Forum, Aug 2012, https://www.cabforum.org/Network_Security_Controls_V1.pdf [5] Baseline Requirements for the Issuance and Management of Publicly-Trust= ed Certificates Version 1.0, CA/Browser Forum, Nov 2011, https://www.cabforum.org/Baseline_Requirements_V1.pdf T: +1 613 270 3183 --_000_5B68A271B9C97046963CB6A5B8D6F62C3A605CCASOTTEXCH10corpa_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Colleagues.  Just a reminder … Below i= s the fourth draft of the WPKOPS charter that Jeff Hodges circulated on 19 = Oct.  This is the version that we will consider in the BoF on Monday.&= nbsp; All the best.  Tim.

 

 

 

The Web PKI is the set of systems and procedures = most commonly used, in conjunction with security protocols such as TLS, to = protect the confidentiality, integrity and authenticity of communications b= etween Web browsers and Web content servers. More specifically, the Web PKI (as considered here) consists of t= he actual contents of the certificates issued to Web application providers = by Certification Authorities (CAs), the certificate validation services pro= vided by the Authorities to web browsers and their users, and the TLS/SSL protocol stacks embedded in web = servers and browsers.

 

The Web PKI first appeared in 1993 or thereabouts= and has developed continuously in a somewhat organic fashion since then.&n= bsp; Across all the suppliers and the point releases of their products, the= re are now hundreds of variations on the Web PKI in regular use.  And this can be a source of problems for end= -users, certificate holders, and certificate issuers (CAs).

 

For end-users, there is no clear view whether cer= tificate "problems" remain when they see indication of a "go= od" connection.  For instance, in some browsers, a "good&quo= t; indication may be displayed when a "revoked" response has been= received and "accepted" by the user, whereas other browsers may refuse to= display the contents under these circumstances.

 

Certificate holders may have difficulty understan= ding whether some browser versions will reject their certificate if certain= content specifications are not met, such as a subject public key that does= not satisfy a minimum key size, or a certificate policies extension that does not contain a particular standa= rd policy identifier.

 

And for certificate issuers, it can be difficult = to predict what proportion of the user population will accept a certificate= chain with certain characteristics.  For instance, when a browser inc= ludes a nonce in an OCSP request but the server supplies a response that does not include the nonce, it is hard to = know which browsers will accept and which will reject the response.

 

Starting from the premise that more consistency i= n Web security behavior is desirable, a natural first step would be to docu= ment current and historic browser and server behavior.  But, such a pr= oject has to be bounded.  Therefore, only server-authentication behavior encountered in more than 0.1 percent of con= nections made by desktop and mobile browsers should be considered.  Wh= ile it is not intended to apply the threshold with any precision, it may be= used to justify the inclusion or exclusion of a technique.

 

Future activities may attempt to prescribe how th= e Web PKI "should" work, and the prescription may turn out to be = a proper subset of the PKIX PKI.  However, that task is explicitly not= a goal of the proposed working group.  Instead, the group's goal is merely to describe how the Web PKI "actually"= ; works in the set of browsers and servers that are in common use today.

 

Additionally, a number of applications (such as c= lient authentication, document signing, code signing, and email) often use = the same trust anchors and certificate processing mechanisms as used for se= rver authentication on the Web.  This reuse creates problems in some situations [1].  While these applicati= ons are outside the scope of this working group, deliverables should (where= ver practical within the available expertise and time) identify mechanisms = that are reused by other applications and identify the implications of that reuse.

 

Also, the reliability of the Web PKI depends crit= ically on the "practices" of its certificate issuers; these pract= ices comprise how certificate issuers perform their functions and implement= controls, and are described in documents known as "Certification Practice Statements" [2][3] and operational re= quirements documents [4][5]. However, the topic of certification practices = is outside the scope of the working group.

 

That there are technical shortcomings with Web PK= I, as it is practiced today, is well recognised.  And, that there is a= lso some urgency in addressing these shortcomings is also well recognised.&= nbsp; But, it is felt that too much haste can be counter-productive.  The expectation is that the work of this grou= p will bring to light, in a systematic way, aspects of the Web PKI that sho= uld be progressed in future working groups of the IETF's Security Area, and= that suppliers will be willing to participate in those working groups and modify their products to comply with their sta= ndards.

 

Given the urgency of the required developments an= d the scale of the task, it is agreed that adherence to the published sched= ule should take precedence over completeness of the results, though without= sacrificing technical correctness.

 

Milestones

=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D

 

1.    First WG draft of "trus= t model" document (4 months).

2.    First WG draft of "cert= ificate, CRL, and OCSP field and extension

processing" document (12 months).=

3.    First WG draft of "cert= ificate revocation" document (8 months).

4.    First WG draft of "TLS = stack operation" document (8 months).

5.    IESG submission of "tru= st model" document (16 months).

6.    IESG submission of "cer= tificate, CRL, and OCSP field and extension

processing" document (24 months).=

7.    IESG submission of "cer= tificate revocation" document (20 months).

8.    IESG submission of "TLS= stack operation" document (16 months).

 

 

References:

 

[1] https://www.ietf.org/mail-archive/web/wpkops/current/msg00104.html=

 

[2] Internet X.509 Public Key Infrastructure Cert= ificate Policy and

      Certification Prac= tices Framework. S. Chokhani et al, IETF RFC3647

      https://tools.ietf.org/html/rfc3647<= /o:p>

 

[3] Electronic Signatures and Infrastructures (ES= I); Policy requirements for

      certification auth= orities issuing public key certificates.

      ETSI TS 102 042 V2= .2.1 (2011-12)

      http://www.etsi.org/deliver/etsi_ts/102000_102099/102042

      /02.02.01_60/ts_10= 2042v020201p.pdf

 

[4] Network and certificate system security requi= rements, CA/Browser Forum,

      Aug 2012, https://www.cabforum.org/Network_Security_Controls_V1.pdf

 

[5] Baseline Requirements for the Issuance and Ma= nagement of Publicly-Trusted

      Certificates Versi= on 1.0, CA/Browser Forum, Nov 2011,

      https://www.cabforum.org/Baseline_Requirements_V1.pdf

 

 

T: +1 613 270 3183

 

--_000_5B68A271B9C97046963CB6A5B8D6F62C3A605CCASOTTEXCH10corpa_--