From msk@cloudmark.com Thu Mar 1 11:14:25 2012 Return-Path: X-Original-To: marf@ietfa.amsl.com Delivered-To: marf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7AE3F21F86F1; Thu, 1 Mar 2012 11:14:25 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.604 X-Spam-Level: X-Spam-Status: No, score=-102.604 tagged_above=-999 required=5 tests=[AWL=-0.005, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id b0csDrubgM8Y; Thu, 1 Mar 2012 11:14:24 -0800 (PST) Received: from ht1-outbound.cloudmark.com (ht1-outbound.cloudmark.com [72.5.239.25]) by ietfa.amsl.com (Postfix) with ESMTP id 988FD21E824D; Thu, 1 Mar 2012 11:14:21 -0800 (PST) Received: from EXCH-MBX901.corp.cloudmark.com ([fe80::addf:849a:f71c:4a82]) by EXCH-HTCAS901.corp.cloudmark.com ([fe80::2966:6846:8d89:4681%12]) with mapi id 14.01.0355.002; Thu, 1 Mar 2012 11:14:21 -0800 From: "Murray S. Kucherawy" To: "ietf@ietf.org" Thread-Topic: Last Call: (SPF Authentication Failure Reporting using the Abuse Report Format) to Proposed Standard Thread-Index: AQHM93WQJGLXlQlAakuMTOLw/EOUTZZVzRBQ Date: Thu, 1 Mar 2012 19:14:20 +0000 Message-ID: <9452079D1A51524AA5749AD23E00392806F917@exch-mbx901.corp.cloudmark.com> References: <20120301004643.17274.83943.idtracker@ietfa.amsl.com> <6.2.5.6.2.20120229181328.0a95a9f8@resistor.net> In-Reply-To: <6.2.5.6.2.20120229181328.0a95a9f8@resistor.net> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [172.20.2.121] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Cc: "marf@ietf.org" Subject: Re: [marf] Last Call: (SPF Authentication Failure Reporting using the Abuse Report Format) to Proposed Standard X-BeenThere: marf@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Message Abuse Report Format working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 01 Mar 2012 19:14:25 -0000 > -----Original Message----- > From: ietf-bounces@ietf.org [mailto:ietf-bounces@ietf.org] On Behalf Of S= M > Sent: Wednesday, February 29, 2012 10:27 PM > To: ietf@ietf.org > Subject: Re: Last Call: (SPF > Authentication Failure Reporting using the Abuse Report Format) to > Proposed Standard As for your non-procedural concerns: > I'll avoid commenting on the technical angle. Here are some editorial > comments: >=20 > In Section 3: >=20 > "There exist cases in which a domain name owner employing [SPF] for > announcing sending practices may want to know when messages are > received via unauthorized routing." >=20 > I suggest not using the term "domain name owner" to side-step the > question of domain "ownership". Would "ADMD" and an informative reference to RFC5598 be more appropriate? > "particular because a message arrived via an unauthorized route. > To generate a complete address to which the report is sent, the > verifier simply appends to this value an "@" followed by the > SPF domain per paragraph 4.1 of [SPF]." >=20 > RFC 4408 uses the term "SPF-compliant domain". That's fine with us. > In Section 5.1: >=20 > "New registrations or updates MUST be published in accordance with the > "Specification Required" guidelines as described in > [IANA-CONSIDERATIONS]. New registrations and updates MUST contain > the following information:" >=20 > I suggest not using RFC 2119 key words in the IANA Considerations > section unless there are interoperability issues with IANA. We'll change "MUST" to "are to be". > "current: The field is in current use >=20 > deprecated: The field is in current use but its use is > discouraged" >=20 > The difference in "current use" can end up being problematic for the > designated expert. A number of registries are using this wording already and there's been no o= bjection to date. Do you have a better suggestion? > In Section 6: >=20 > "Security issues with respect to these reports are similar to those > found in [DSN]." >=20 > The reference to DSN could be normative. Security Considerations are never normative, so I'm not sure I agree that t= his should be. > "The HELO/EHLO command SHOULD also be selected so that it > will pass [SPF] HELO checks." >=20 > I could not understand what to do about the above recommendation. > FWIW, the command is specified in RFC 5321. That specification is not > referenced by this draft. Yes, that needs to be clarified, the reference added, and the typo in the s= ection title needs correction. Thanks, -MSK From barryleiba.mailing.lists@gmail.com Thu Mar 1 13:01:24 2012 Return-Path: X-Original-To: marf@ietfa.amsl.com Delivered-To: marf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 63A8421E80D8; Thu, 1 Mar 2012 13:01:24 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.987 X-Spam-Level: X-Spam-Status: No, score=-102.987 tagged_above=-999 required=5 tests=[AWL=-0.010, BAYES_00=-2.599, FM_FORGED_GMAIL=0.622, RCVD_IN_DNSWL_LOW=-1, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pl1pXPv4yr94; Thu, 1 Mar 2012 13:01:22 -0800 (PST) Received: from mail-yw0-f44.google.com (mail-yw0-f44.google.com [209.85.213.44]) by ietfa.amsl.com (Postfix) with ESMTP id B5A4721E8021; Thu, 1 Mar 2012 13:01:20 -0800 (PST) Received: by yhpp34 with SMTP id p34so571533yhp.31 for ; Thu, 01 Mar 2012 13:01:20 -0800 (PST) Received-SPF: pass (google.com: domain of barryleiba.mailing.lists@gmail.com designates 10.236.136.4 as permitted sender) client-ip=10.236.136.4; Authentication-Results: mr.google.com; spf=pass (google.com: domain of barryleiba.mailing.lists@gmail.com designates 10.236.136.4 as permitted sender) smtp.mail=barryleiba.mailing.lists@gmail.com; dkim=pass header.i=barryleiba.mailing.lists@gmail.com Received: from mr.google.com ([10.236.136.4]) by 10.236.136.4 with SMTP id v4mr9586826yhi.44.1330635680442 (num_hops = 1); Thu, 01 Mar 2012 13:01:20 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:date :x-google-sender-auth:message-id:subject:from:to:cc:content-type :content-transfer-encoding; bh=ebeGm97z6fj7BgEk+H0OPLw+L+qqZhveOK1UHxIkH4M=; b=IpOnn7k0K3WE7CAuqwiseJGXPxZYLPKI4aTKW37VEiAKafbcwV76tx7+S6mVa0nDoJ bqjbagf/0TC9WUY1Io0c1ubvQ6cCN0UdoZgZ1SWFRVl5NMYI97N468XwMLuzlVyB+vTy FuHPFmXiWHVYKChtoEbH3GVWSjtmzAP3p3SWx6vhkxhTJPnhVzKamyC4Y/XPZNsMwUs9 6xr2JGv9UDiwHkohr7mPemYMfbM4ZRXHMWaN36XSH4dB3nkZ8j11Ul+DkUDoi6GG/l/D Kx4r2bcviVSN8L/tbhfHvKG8Kmu+YmJ4bopdkGpSyEREpbia3DBpBpGJ2dcA4wSHtvlr gwRA== MIME-Version: 1.0 Received: by 10.236.136.4 with SMTP id v4mr7596775yhi.44.1330635680385; Thu, 01 Mar 2012 13:01:20 -0800 (PST) Sender: barryleiba.mailing.lists@gmail.com Received: by 10.147.106.16 with HTTP; Thu, 1 Mar 2012 13:01:20 -0800 (PST) In-Reply-To: <9452079D1A51524AA5749AD23E00392806F917@exch-mbx901.corp.cloudmark.com> References: <20120301004643.17274.83943.idtracker@ietfa.amsl.com> <6.2.5.6.2.20120229181328.0a95a9f8@resistor.net> <9452079D1A51524AA5749AD23E00392806F917@exch-mbx901.corp.cloudmark.com> Date: Thu, 1 Mar 2012 16:01:20 -0500 X-Google-Sender-Auth: 4jP_NmemvtpoU2eLI5--Q5qC0U8 Message-ID: From: Barry Leiba To: "Murray S. Kucherawy" Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Cc: "ietf@ietf.org" , "marf@ietf.org" Subject: Re: [marf] Last Call: (SPF Authentication Failure Reporting using the Abuse Report Format) to Proposed Standard X-BeenThere: marf@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Message Abuse Report Format working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 01 Mar 2012 21:01:24 -0000 >> =A0 =A0"current: =A0The field is in current use >> >> =A0 =A0 deprecated: =A0The field is in current use but its use is >> =A0 =A0 =A0 =A0discouraged" >> >> The difference in "current use" can end up being problematic for the >> designated expert. > > A number of registries are using this wording already and there's been no > objection to date. =A0Do you have a better suggestion? I suggest, "The field might still be in use, but its use is discouraged." >> In Section 6: >> >> =A0 "Security issues with respect to these reports are similar to those >> =A0 =A0found in [DSN]." >> >> The reference to DSN could be normative. > > Security Considerations are never normative, so I'm not sure I agree that= this should be. It should. Just because the Security Considerations section doesn't usually use normative language doesn't mean that it's not normative. People reading the document and implementing the protocol certainly have to read and understand the Security Considerations section, along with any transitive sections in other documents. Barry, MARF co-chair From sklist@kitterman.com Fri Mar 2 21:15:38 2012 Return-Path: X-Original-To: marf@ietfa.amsl.com Delivered-To: marf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 96B7921F85E5 for ; Fri, 2 Mar 2012 21:15:38 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.979 X-Spam-Level: X-Spam-Status: No, score=-1.979 tagged_above=-999 required=5 tests=[AWL=-0.581, BAYES_00=-2.599, HTML_MESSAGE=0.001, J_CHICKENPOX_21=0.6, J_CHICKENPOX_210=0.6] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uwjoibxO7jfw for ; Fri, 2 Mar 2012 21:15:37 -0800 (PST) Received: from mailout02.controlledmail.com (mailout02.controlledmail.com [72.81.252.18]) by ietfa.amsl.com (Postfix) with ESMTP id 5BAAF21F85E4 for ; Fri, 2 Mar 2012 21:15:36 -0800 (PST) Received: from mailout02.controlledmail.com (localhost [127.0.0.1]) by mailout02.controlledmail.com (Postfix) with ESMTP id 368C120E40DA; Sat, 3 Mar 2012 00:15:35 -0500 (EST) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=kitterman.com; s=2007-00; t=1330751735; bh=1FxvTf/yWiFmfDJGfyGXmbDOeYZutTITVDdeYDK+EJ8=; h=From:To:Subject:Date:Message-ID:In-Reply-To:References: MIME-Version:Content-Type:Content-Transfer-Encoding; b=Oaf/bM2b6FC6m11+Qfp92jUEVP4tUHoT8TQOQDoXBZuHG3xX6I5ZWE5ThQa6XlfC0 t43AIwN9LFaRX3RuUXveE/BgzBnwGN501FnlOenDuGVbZir40XqWWUTgxgga5YPYqq pY2H00ExRRgq4oU+4C0oja/NaGRCJCKAu55i9Siw= Received: from scott-latitude-e6320.localnet (static-72-81-252-21.bltmmd.fios.verizon.net [72.81.252.21]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mailout02.controlledmail.com (Postfix) with ESMTPSA id 1AC8E20E408E; Sat, 3 Mar 2012 00:15:34 -0500 (EST) From: Scott Kitterman To: marf@ietf.org Date: Sat, 03 Mar 2012 00:15:34 -0500 Message-ID: <1643435.uXPZDKyWnM@scott-latitude-e6320> User-Agent: KMail/4.7.3 (Linux/3.0.0-16-generic-pae; KDE/4.7.4; i686; ; ) In-Reply-To: <20120301004643.17274.83943.idtracker@ietfa.amsl.com> References: <20120301004643.17274.83943.idtracker@ietfa.amsl.com> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="nextPart1479529.01xufFonCf" Content-Transfer-Encoding: 7Bit X-AV-Checked: ClamAV using ClamSMTP Subject: Re: [marf] Last Call: (SPF Authentication Failure Reporting using the Abuse Report Format) to Proposed Standard X-BeenThere: marf@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Message Abuse Report Format working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 03 Mar 2012 05:15:38 -0000 --nextPart1479529.01xufFonCf Content-Transfer-Encoding: 7Bit Content-Type: text/plain; charset="us-ascii" On Wednesday, February 29, 2012 04:46:43 PM The IESG wrote: > The IESG has received a request from the Messaging Abuse Reporting Format > WG (marf) to consider the following document: > - 'SPF Authentication Failure Reporting using the Abuse Report Format' > as a Proposed Standard > > The IESG plans to make a decision in the next few weeks, and solicits > final comments on this action. Please send substantive comments to the > ietf@ietf.org mailing lists by 2012-03-14. Exceptionally, comments may be > sent to iesg@ietf.org instead. In either case, please retain the > beginning of the Subject line to allow automated sorting. > ... For those keeping track, here's a diff based on last call comments so far. Scott K --nextPart1479529.01xufFonCf Content-Disposition: attachment; filename="draft-ietf-marf-spf-reporting-09-from-8.diff.html" Content-Transfer-Encoding: 7Bit Content-Type: text/html; charset="UTF-8"; name="draft-ietf-marf-spf-reporting-09-from-8.diff.html" Diff: draft-ietf-marf-spf-reporting-08.txt - draft-ietf-marf-spf-reporting-09.txt
 draft-ietf-marf-spf-reporting-08.txt   draft-ietf-marf-spf-reporting-09.txt 
MARF Working Group S. Kitterman MARF Working Group S. Kitterman
Internet-Draft Agari Data, Inc. Internet-Draft Agari
Updates: 4408 (if approved) February 28, 2012 Updates: 4408 (if approved) March 3, 2012
Intended status: Standards Track Intended status: Standards Track
Expires: August 31, 2012 Expires: September 4, 2012
SPF Authentication Failure Reporting using the Abuse Report Format SPF Authentication Failure Reporting using the Abuse Report Format
draft-ietf-marf-spf-reporting-08 draft-ietf-marf-spf-reporting-09
Abstract Abstract
This memo presents extensions to the Abuse Reporting Format (ARF), This memo presents extensions to the Abuse Reporting Format (ARF),
and Sender Policy Framework (SPF) specifications to allow for and Sender Policy Framework (SPF) specifications to allow for
detailed reporting of message authentication failures in an on-demand detailed reporting of message authentication failures in an on-demand
fashion. fashion.
This memo updates RFC4408 by providing an IANA registry for SPF This memo updates RFC4408 by providing an IANA registry for SPF
modifiers. modifiers.
skipping to change at page 1, line 37 skipping to change at page 1, line 37
Internet-Drafts are working documents of the Internet Engineering Internet-Drafts are working documents of the Internet Engineering
Task Force (IETF). Note that other groups may also distribute Task Force (IETF). Note that other groups may also distribute
working documents as Internet-Drafts. The list of current Internet- working documents as Internet-Drafts. The list of current Internet-
Drafts is at http://datatracker.ietf.org/drafts/current/. Drafts is at http://datatracker.ietf.org/drafts/current/.
Internet-Drafts are draft documents valid for a maximum of six months Internet-Drafts are draft documents valid for a maximum of six months
and may be updated, replaced, or obsoleted by other documents at any and may be updated, replaced, or obsoleted by other documents at any
time. It is inappropriate to use Internet-Drafts as reference time. It is inappropriate to use Internet-Drafts as reference
material or to cite them other than as "work in progress." material or to cite them other than as "work in progress."
This Internet-Draft will expire on August 31, 2012. This Internet-Draft will expire on September 4, 2012.
Copyright Notice Copyright Notice
Copyright (c) 2012 IETF Trust and the persons identified as the Copyright (c) 2012 IETF Trust and the persons identified as the
document authors. All rights reserved. document authors. All rights reserved.
This document is subject to BCP 78 and the IETF Trust's Legal This document is subject to BCP 78 and the IETF Trust's Legal
Provisions Relating to IETF Documents Provisions Relating to IETF Documents
(http://trustee.ietf.org/license-info) in effect on the date of (http://trustee.ietf.org/license-info) in effect on the date of
publication of this document. Please review these documents publication of this document. Please review these documents
skipping to change at page 2, line 20 skipping to change at page 2, line 20
1. Introduction . . . . . . . . . . . . . . . . . . . . . . . . . 3 1. Introduction . . . . . . . . . . . . . . . . . . . . . . . . . 3
2. Definitions . . . . . . . . . . . . . . . . . . . . . . . . . 4 2. Definitions . . . . . . . . . . . . . . . . . . . . . . . . . 4
2.1. Keywords . . . . . . . . . . . . . . . . . . . . . . . . . 4 2.1. Keywords . . . . . . . . . . . . . . . . . . . . . . . . . 4
2.2. Imported Definitions . . . . . . . . . . . . . . . . . . . 4 2.2. Imported Definitions . . . . . . . . . . . . . . . . . . . 4
3. Optional Reporting Address for SPF . . . . . . . . . . . . . . 5 3. Optional Reporting Address for SPF . . . . . . . . . . . . . . 5
4. Requested Reports . . . . . . . . . . . . . . . . . . . . . . 7 4. Requested Reports . . . . . . . . . . . . . . . . . . . . . . 7
4.1. Requested Reports for SPF Failures . . . . . . . . . . . . 7 4.1. Requested Reports for SPF Failures . . . . . . . . . . . . 7
5. IANA Considerations . . . . . . . . . . . . . . . . . . . . . 8 5. IANA Considerations . . . . . . . . . . . . . . . . . . . . . 8
5.1. SPF Modifier Registration . . . . . . . . . . . . . . . . 8 5.1. SPF Modifier Registration . . . . . . . . . . . . . . . . 8
6. Security Considerations . . . . . . . . . . . . . . . . . . . 9 6. Security Considerations . . . . . . . . . . . . . . . . . . . 9
6.1. Inherited Considerations . . . . . . . . . . . . . . . . . 9
6.2. Additional forgery considertion . . . . . . . . . . . . . 9
7. References . . . . . . . . . . . . . . . . . . . . . . . . . . 10 7. References . . . . . . . . . . . . . . . . . . . . . . . . . . 10
7.1. Normative References . . . . . . . . . . . . . . . . . . . 10 7.1. Normative References . . . . . . . . . . . . . . . . . . . 10
7.2. Informative References . . . . . . . . . . . . . . . . . . 10 7.2. Informative References . . . . . . . . . . . . . . . . . . 10
Appendix A. Acknowledgements . . . . . . . . . . . . . . . . . . 11 Appendix A. Acknowledgements . . . . . . . . . . . . . . . . . . 11
Appendix B. Examples . . . . . . . . . . . . . . . . . . . . . . 12 Appendix B. Examples . . . . . . . . . . . . . . . . . . . . . . 12
B.1. SPF DNS record for domain that sends no mail, but B.1. SPF DNS record for domain that sends no mail, but
requests reports . . . . . . . . . . . . . . . . . . . . . 12 requests reports . . . . . . . . . . . . . . . . . . . . . 12
B.2. Minimal SPF DNS record change to add a reporting B.2. Minimal SPF DNS record change to add a reporting
address . . . . . . . . . . . . . . . . . . . . . . . . . 12 address . . . . . . . . . . . . . . . . . . . . . . . . . 12
B.3. SPF DNS record with reporting address, report B.3. SPF DNS record with reporting address, report
skipping to change at page 5, line 7 skipping to change at page 5, line 7
2.2. Imported Definitions 2.2. Imported Definitions
The ABNF token "qp-section" is defined in [MIME]. The ABNF token "qp-section" is defined in [MIME].
"local-part" is defined in [MAIL]. "local-part" is defined in [MAIL].
"addr-spec" is defined in [MAIL]. "addr-spec" is defined in [MAIL].
3. Optional Reporting Address for SPF 3. Optional Reporting Address for SPF
There exist cases in which a domain name owner employing [SPF] for There exist cases in which an ADministrative Management Domain (ADMD)
announcing sending practices may want to know when messages are (see [EMAIL-ARCH]) employing [SPF] for announcing sending practices
received via unauthorized routing. Currently there is no such method may want to know when messages are received via unauthorized routing.
defined in conjunction with standardized approaches such as [ARF]. Currently there is no such method defined in conjunction with
Similar information can be gathered using a specially crafted [SPF] standardized approaches such as [ARF]. Similar information can be
record and a special DNS server to track [SPF] record lookups. gathered using a specially crafted [SPF] record and a special DNS
server to track [SPF] record lookups.
This document defines the following optional "modifier" (as defined This document defines the following optional "modifier" (as defined
in Section 4.6.1 of [SPF]) to SPF records, using the form defined in in Section 4.6.1 of [SPF]) to SPF records, using the form defined in
that specification: that specification:
ra= Reporting Address (plain-text; OPTIONAL; no default). MUST be a ra= Reporting Address (plain-text; OPTIONAL; no default). MUST be a
local-part (see Section 3.4.1 of [MAIL]) specifying an e-mail local-part (see Section 3.4.1 of [MAIL]) specifying an e-mail
address to which a report SHOULD be sent when mail claiming to be address to which a report SHOULD be sent when mail claiming to be
from this domain (see Section 2.4 of [SPF] for a description of from this domain (see Section 2.4 of [SPF] for a description of
how domains are identified for SPF checks) has failed the how domains are identified for SPF checks) has failed the
evaluation algorithm described in [SPF], in particular because a evaluation algorithm described in [SPF], in particular because a
message arrived via an unauthorized route. To generate a complete message arrived via an unauthorized route. To generate a complete
address to which the report is sent, the verifier simply appends address to which the report is sent, the verifier simply appends
to this value an "@" followed by the SPF domain per paragraph 4.1 to this value an "@" followed by the SPF-compliant domain per
of [SPF]. ra= modifiers in a record that was reached by following paragraph 4.1 of [SPF]. ra= modifiers in a record that was reached
an include: mechanism MUST be ignored. by following an include: mechanism MUST be ignored.
ABNF: ABNF:
spf-report-tag = %x72.61 "=" qp-section spf-report-tag = %x72.61 "=" qp-section
rp= Requested Report Percentage (plain-text; OPTIONAL; default is rp= Requested Report Percentage (plain-text; OPTIONAL; default is
"100"). The value is an integer from 0 to 100 inclusive that "100"). The value is an integer from 0 to 100 inclusive that
indicates what percentage of incidents of SPF failures, selected indicates what percentage of incidents of SPF failures, selected
at random, are to cause reports to be generated. The report at random, are to cause reports to be generated. The report
generator SHOULD NOT issue reports for more than the requested generator SHOULD NOT issue reports for more than the requested
skipping to change at page 8, line 16 skipping to change at page 8, line 16
As required by [IANA-CONSIDERATIONS], this section contains registry As required by [IANA-CONSIDERATIONS], this section contains registry
information for the new [SPF] modifiers. information for the new [SPF] modifiers.
5.1. SPF Modifier Registration 5.1. SPF Modifier Registration
IANA is requested to create the Sender Policy Framework Modifier IANA is requested to create the Sender Policy Framework Modifier
Registry, to include a list of all registered SPF modifier names and Registry, to include a list of all registered SPF modifier names and
their defining documents. their defining documents.
New registrations or updates MUST be published in accordance with the New registrations or updates are to be published in accordance with
"Specification Required" guidelines as described in the "Specification Required" guidelines as described in
[IANA-CONSIDERATIONS]. New registrations and updates MUST contain [IANA-CONSIDERATIONS]. New registrations and updates MUST contain
the following information: the following information:
1. Name of the modifier being registered or updated 1. Name of the modifier being registered or updated
2. The document in which the specification of the modifier is 2. The document in which the specification of the modifier is
published published
3. New or updated status, which MUST be one of: 3. New or updated status, which MUST be one of:
current: The field is in current use current: The field is in current use
deprecated: The field is in current use but its use is deprecated: The field might be in current use but its use is
discouraged discouraged
historic: The field is no longer in current use historic: The field is no longer in current use
An update may make a notation on an existing registration indicating An update may make a notation on an existing registration indicating
that a registered field is historic or deprecated if appropriate. that a registered field is historic or deprecated if appropriate.
+------------+-----------------+---------+ +------------+-----------------+---------+
| MODIFIER | REFERENCE | STATUS | | MODIFIER | REFERENCE | STATUS |
+------------+-----------------+---------+ +------------+-----------------+---------+
| exp | RFC4408 | current | | exp | RFC4408 | current |
| redirect | RFC4408 | current | | redirect | RFC4408 | current |
| ra | (this document) | current | | ra | (this document) | current |
| rp | (this document) | current | | rp | (this document) | current |
| rr | (this document) | current | | rr | (this document) | current |
+------------+-----------------+---------+ +------------+-----------------+---------+
6. Security Considerations 6. Security Considerations
Security issues with respect to these reports are similar to those Inherited considerations: implementors are advised to consider the
found in [DSN]. Security Considerations sections of [SPF], [ARF], [I-D.IETF-MARF-AS],
and [I-D.IETF-MARF-AUTHFAILURE-REPORT].
6.1. Inherited Considerations
Implementors are advised to consider the Security Considerations In addition to the advice in the Security Considerations section of
sections of [SPF], [ARF], [I-D.IETF-MARF-AS], and [I-D.IETF-MARF-AS], these additional considerations apply to
[I-D.IETF-MARF-AUTHFAILURE-REPORT]. generation of [SPF] authentication failure reports:
6.2. Additional forgery considertion If the target="SMTP"/> return address to be used will not be the
NULL return address, i.e., "MAIL FROM:<>", then the selected
return address MUST be selected such that it will pass [SPF] MAIL
FROM checks upon initial receipt.
In addition to the advice in security considerations of If the report is passed to the Mail Submission Agent (MSA) (MSA is
[I-D.IETF-MARF-AS] the additional consderations apply to [SPF] auth described in [EMAIL-ARCH] using target="SMTP"/>, the HELO/EHLO
failure reports. If the MAIL FROM command is not the NULL return command parameter SHOULD also be selected so that it will pass
address, i.e., "MAIL FROM:<>", then the selected MAIL FROM address [SPF] HELO checks.
MUST pass [SPF] MAIL FROM checks on receipt. The HELO/EHLO command
SHOULD also be selected so that it will pass [SPF] HELO checks.
7. References 7. References
7.1. Normative References 7.1. Normative References
[ARF] Shafranovich, Y., Levine, J., and M. Kucherawy, "An [ARF] Shafranovich, Y., Levine, J., and M. Kucherawy, "An
Extensible Format for Email Feedback Reports", RFC 5965, Extensible Format for Email Feedback Reports", RFC 5965,
August 2010. August 2010.
[I-D.IETF-MARF-AS] [I-D.IETF-MARF-AS]
Falk, J. and M. Kucherawy, Ed., "Creation and Use of Email Falk, J. and M. Kucherawy, Ed., "Creation and Use of Email
Feedback Reports: An Applicability Statement for the Abuse Feedback Reports: An Applicability Statement for the Abuse
Reporting Format (ARF)", February 2012. Reporting Format (ARF)", draft-ietf-marf-as (work in
progress), February 2012.
[I-D.IETF-MARF-AUTHFAILURE-REPORT] [I-D.IETF-MARF-AUTHFAILURE-REPORT]
Fontana, H., "Authentication Failure Reporting using the Fontana, H., "Authentication Failure Reporting using the
Abuse Report Format", January 2012. Abuse Report Format", draft-ietf-marf-authfailure-report
(work in progress), January 2012.
[IANA-CONSIDERATIONS] [IANA-CONSIDERATIONS]
Alvestrand, H. and T. Narten, "Guidelines for Writing an Alvestrand, H. and T. Narten, "Guidelines for Writing an
IANA Considerations Section in RFCs", RFC 5226, May 2008. IANA Considerations Section in RFCs", RFC 5226, May 2008.
[KEYWORDS] [KEYWORDS]
Bradner, S., "Key words for use in RFCs to Indicate Bradner, S., "Key words for use in RFCs to Indicate
Requirement Levels", RFC 2119, March 1997. Requirement Levels", RFC 2119, March 1997.
[MAIL] Resnick, P., "Internet Message Format", RFC 5322, [MAIL] Resnick, P., "Internet Message Format", RFC 5322,
October 2008. October 2008.
[MIME] Freed, N. and N. Borenstein, "Multipurpose Internet Mail [MIME] Freed, N. and N. Borenstein, "Multipurpose Internet Mail
Extensions (MIME) Part One: Format of Internet Message Extensions (MIME) Part One: Format of Internet Message
Bodies", RFC 2045, November 1996. Bodies", RFC 2045, November 1996.
[SMTP] Klensin, J., "Simple Mail Transfer Protocol", RFC 5321,
October 2008.
[SPF] Wong, M. and W. Schlitt, "Sender Policy Framework (SPF) [SPF] Wong, M. and W. Schlitt, "Sender Policy Framework (SPF)
for Authorizing Use of Domains in E-Mail, Version 1", for Authorizing Use of Domains in E-Mail, Version 1",
RFC 4408, April 2006. RFC 4408, April 2006.
7.2. Informative References 7.2. Informative References
[DSN] Moore, K. and G. Vaudreuil, "An Extensible Message Format [EMAIL-ARCH]
for Delivery Status Notifications", RFC 3464, Crocker, D., "Internet Mail Architecture", RFC 5598,
January 2003. October 2008.
Appendix A. Acknowledgements Appendix A. Acknowledgements
The author wishes to acknowledge the following for their review and The author wishes to acknowledge the following for their review and
constructive criticism of this proposal: Murray Kucherawy, Tim constructive criticism of this proposal: Murray Kucherawy, Tim
Draegen, Julian Mehnle, and John Levine. Draegen, Julian Mehnle, and John Levine.
Appendix B. Examples Appendix B. Examples
B.1. SPF DNS record for domain that sends no mail, but requests reports B.1. SPF DNS record for domain that sends no mail, but requests reports
skipping to change at page 13, line 8 skipping to change at page 13, line 8
v=spf1 mx:example.org ra=postmaster -all v=spf1 mx:example.org ra=postmaster -all
B.3. SPF DNS record with reporting address, report percentage, and B.3. SPF DNS record with reporting address, report percentage, and
requested report type requested report type
v=spf1 mx:example.org -all ra=postmaster rp=10 rr=e v=spf1 mx:example.org -all ra=postmaster rp=10 rr=e
Author's Address Author's Address
Scott Kitterman Scott Kitterman
Agari Data, Inc. Agari
3611 Scheel Dr 3611 Scheel Dr
Ellicott City, MD 21042 Ellicott City, MD 21042
US US
Phone: +1 301 325 5475 Phone: +1 301 325 5475
Email: skitterman@agari.com Email: skitterman@agari.com
 End of changes. 18 change blocks. 
39 lines changed or deleted 43 lines changed or added

This html diff was produced by rfcdiff 1.41. The latest version is available from http://tools.ietf.org/tools/rfcdiff/
--nextPart1479529.01xufFonCf-- From internet-drafts@ietf.org Fri Mar 2 22:12:36 2012 Return-Path: X-Original-To: marf@ietfa.amsl.com Delivered-To: marf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6B3E621F84EE; Fri, 2 Mar 2012 22:12:36 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.585 X-Spam-Level: X-Spam-Status: No, score=-102.585 tagged_above=-999 required=5 tests=[AWL=0.014, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3ffSqYLPTIF4; Fri, 2 Mar 2012 22:12:36 -0800 (PST) Received: from ietfa.amsl.com (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F24D521F8499; Fri, 2 Mar 2012 22:12:35 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable From: internet-drafts@ietf.org To: i-d-announce@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 4.00 Message-ID: <20120303061235.23010.51344.idtracker@ietfa.amsl.com> Date: Fri, 02 Mar 2012 22:12:35 -0800 Cc: marf@ietf.org Subject: [marf] I-D Action: draft-ietf-marf-as-11.txt X-BeenThere: marf@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Message Abuse Report Format working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 03 Mar 2012 06:12:36 -0000 A New Internet-Draft is available from the on-line Internet-Drafts director= ies. This draft is a work item of the Messaging Abuse Reporting Format Work= ing Group of the IETF. Title : Creation and Use of Email Feedback Reports: An Applicabi= lity Statement for the Abuse Reporting Format (ARF) Author(s) : J.D. Falk M. Kucherawy Filename : draft-ietf-marf-as-11.txt Pages : 15 Date : 2012-03-02 RFC 5965 defines an extensible, machine-readable format intended for mail operators to report feedback about received email to other parties. This Applicability Statement describes common methods for utilizing this format for reporting both abuse and authentication failure events. Mailbox Providers of any size, mail sending entities, and end users can use these methods as a basis to create procedures that best suit them. Some related optional mechanisms are also discussed. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-ietf-marf-as-11.txt Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ This Internet-Draft can be retrieved at: ftp://ftp.ietf.org/internet-drafts/draft-ietf-marf-as-11.txt From msk@cloudmark.com Fri Mar 2 22:16:12 2012 Return-Path: X-Original-To: marf@ietfa.amsl.com Delivered-To: marf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A0AFA21E8061 for ; Fri, 2 Mar 2012 22:16:12 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.566 X-Spam-Level: X-Spam-Status: No, score=-102.566 tagged_above=-999 required=5 tests=[AWL=0.033, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id P20CsHil3PrV for ; Fri, 2 Mar 2012 22:16:11 -0800 (PST) Received: from ht2-outbound.cloudmark.com (ht2-outbound.cloudmark.com [72.5.239.26]) by ietfa.amsl.com (Postfix) with ESMTP id C38CC21E8069 for ; Fri, 2 Mar 2012 22:16:11 -0800 (PST) Received: from EXCH-MBX901.corp.cloudmark.com ([fe80::addf:849a:f71c:4a82]) by exch-htcas902.corp.cloudmark.com ([fe80::e82a:4f80:7f44:eaf7%12]) with mapi id 14.01.0355.002; Fri, 2 Mar 2012 22:16:10 -0800 From: "Murray S. Kucherawy" To: "marf@ietf.org" Thread-Topic: [marf] I-D Action: draft-ietf-marf-as-11.txt Thread-Index: AQHM+QSm8S9gv9heJEmDfSyvakLSSpZYF+WA Date: Sat, 3 Mar 2012 06:16:10 +0000 Message-ID: <9452079D1A51524AA5749AD23E003928078DF3@exch-mbx901.corp.cloudmark.com> References: <20120303061235.23010.51344.idtracker@ietfa.amsl.com> In-Reply-To: <20120303061235.23010.51344.idtracker@ietfa.amsl.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [67.160.203.60] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Subject: Re: [marf] I-D Action: draft-ietf-marf-as-11.txt X-BeenThere: marf@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Message Abuse Report Format working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 03 Mar 2012 06:16:12 -0000 > -----Original Message----- > From: marf-bounces@ietf.org [mailto:marf-bounces@ietf.org] On Behalf Of i= nternet-drafts@ietf.org > Sent: Friday, March 02, 2012 10:13 PM > To: i-d-announce@ietf.org > Cc: marf@ietf.org > Subject: [marf] I-D Action: draft-ietf-marf-as-11.txt >=20 > A New Internet-Draft is available from the on-line Internet-Drafts > directories. This draft is a work item of the Messaging Abuse Reporting > Format Working Group of the IETF. >=20 > Title : Creation and Use of Email Feedback Reports: An > Applicability Statement for the Abuse Reporting Format (ARF) > Author(s) : J.D. Falk > M. Kucherawy > Filename : draft-ietf-marf-as-11.txt > Pages : 15 > Date : 2012-03-02 >=20 > RFC 5965 defines an extensible, machine-readable format intended for > mail operators to report feedback about received email to other > parties. This Applicability Statement describes common methods for > utilizing this format for reporting both abuse and authentication > failure events. Mailbox Providers of any size, mail sending > entities, and end users can use these methods as a basis to create > procedures that best suit them. Some related optional mechanisms are > also discussed. With WGLC concluded, this version includes the last of the proposed and app= roved changes. Thanks to all for the reviews on this one. It's off to the IESG once Barry= does the writeup. -MSM From msk@cloudmark.com Tue Mar 6 14:23:05 2012 Return-Path: X-Original-To: marf@ietfa.amsl.com Delivered-To: marf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2275721E80A9 for ; Tue, 6 Mar 2012 14:23:05 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.604 X-Spam-Level: X-Spam-Status: No, score=-102.604 tagged_above=-999 required=5 tests=[AWL=-0.005, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mY7v5tiYQ+c8 for ; Tue, 6 Mar 2012 14:23:04 -0800 (PST) Received: from ht1-outbound.cloudmark.com (ht1-outbound.cloudmark.com [72.5.239.25]) by ietfa.amsl.com (Postfix) with ESMTP id 01DE121E8013 for ; Tue, 6 Mar 2012 14:23:03 -0800 (PST) Received: from EXCH-MBX901.corp.cloudmark.com ([fe80::addf:849a:f71c:4a82]) by EXCH-HTCAS901.corp.cloudmark.com ([fe80::2966:6846:8d89:4681%12]) with mapi id 14.01.0355.002; Tue, 6 Mar 2012 14:23:02 -0800 From: "Murray S. Kucherawy" To: "marf@ietf.org" Thread-Topic: Review of draft-ietf-marf-dkim-reporting-11 Thread-Index: AQHM+7Jn5hDXdigsDk2cMOfl5q2RKJZd1I8ggAADXSA= Date: Tue, 6 Mar 2012 22:23:02 +0000 Message-ID: <9452079D1A51524AA5749AD23E00392807D2ED@exch-mbx901.corp.cloudmark.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [172.20.2.121] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Subject: [marf] FW: Review of draft-ietf-marf-dkim-reporting-11 X-BeenThere: marf@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Message Abuse Report Format working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 06 Mar 2012 22:23:05 -0000 FYI. -----Original Message----- From: Murray S. Kucherawy [mailto:msk@cloudmark.com]=20 Sent: Tuesday, March 06, 2012 2:21 PM To: Tero Kivinen; iesg@ietf.org; secdir@ietf.org Cc: draft-ietf-marf-dkim-reporting.all@tools.ietf.org Subject: RE: Review of draft-ietf-marf-dkim-reporting-11 Hi Tero, thanks for your review. > -----Original Message----- > From: Tero Kivinen [mailto:kivinen@iki.fi] > Sent: Tuesday, March 06, 2012 8:01 AM > To: iesg@ietf.org; secdir@ietf.org > Cc: draft-ietf-marf-dkim-reporting.all@tools.ietf.org > Subject: Review of draft-ietf-marf-dkim-reporting-11 >=20 > [...] > This is all fine, but the security considerations section should=20 > really point out that the TXT record is the only part that is really=20 > protecting the signer from distributed bogus reports. Even if signer=20 > does not ever put "r=3Dy" tag in any of the messages, but still=20 > publishes the TXT records "just in case" they ever want to get those=20 > reports, the attacker can modify every single email in transit to=20 > include bogus DKIM-signature field with "r=3Dy" and "d=3D" matching the=20 > signer and DKIM verifiers will start flooding reports to the signer. > Note, that those emails do not even need to be originally have=20 > anything to do with the domain being attacked. >=20 > Actually just adding "r=3Dy" to valid DKIM-Signatures will cause the=20 > signature to fail (if I have understood things correctly), thus=20 > triggering the report. >=20 > So the only way the signer can protect himself against bogus reports=20 > is to remove the TXT records from the DNS. There should be text about=20 > this in the security considerations sections, as otherwise=20 > adminstrators might put those TXT records out there just in case they=20 > are needed, and open themselves to the attack. I've added this paragraph to the end of the current Security Considerations= "Deliberate Misuse" section (pardon the XML): The presence of the DNS record that indicates willingness to accept reports opens the recipient to abuse by any attacker that generates or alters signatures bearing the victim's domain in a DKIM "d=3D" tag by adding an "r=3Dy" tag. Positive caching of this DNS reply also means turning off the flow of reports by removing the record is not likely to have immediate effect. A low time-to-live on the record needs to be considered. Is that sufficient? > On the other hand, even when signer requests reports to verify nobody=20 > is messing up its DKIM-Signatures the attacker can remove the "r=3Dy" > tag from the email (or the whole DKIM-Signature) and in that case the=20 > verifier do not send report to the signer (unless the Author Domain=20 > Signing Practices (ADSP) is in use, but I didn't really check whether=20 > those records are checked if no DKIM fields are found in the email). >=20 > Attacker who wants to modify the emails do not want to advertise this,=20 > thus it will of course remove the "r=3Dy", so it can fly under the=20 > radar... We cover that already in the "DKIM Reporting Algorithm", final paragraph. > ADSP is not spelled out ever, and the reference to the RFC5617 uses=20 > different title than what is the actual title of the RFC5617: >=20 > "DomainKeys Identified Mail (DKIM) Author Domain Signing > Practices (ADSP)" >=20 > vs >=20 > "DKIM Sender Signing Practises". >=20 > so it was bit hard to see what ADSP actually meant, until I actually=20 > checked the RFC5617. I am not sure why the references are getting=20 > wrong titles, as shouldn't the=20 > http://xml.resource.org/public/rfc/bibxml/reference.RFC.2119.xml > references get those directly from RFCs. On the other hand it might be=20 > the references are written out manually... They are, and actually it seems it was imported from a much older document.= ADSP went through several name changes in its lifetime, and that's a fair= ly old one. Anyway, fixed; expanded on first use, and the reference has be= en repaired. > ---------------------------------------------------------------------- > In section 4: >=20 > only. To construct the actual address to which the report is > sent, the Verifier simply appends to this value an "@" followed by > the domain whose policy was queried in order to evaluate the > sender's ADSP, i.e., the one taken from the RFC5322.From domain of > ^^^ > the message under evaluation. Therefore, a signer making use of > this extension tag MUST ensure that an email address thus > constructed can receive reports generated as described in > Section 6. ABNF: >=20 >=20 > It seems there is extra . between the "RFC5322" and "From". Actually it's correct to strike "one taken from the", so I've done that. T= he RFC5322.From notation is introduced by one of the normative references, = namely RFC5598, so I believe it's correct. > ---------------------------------------------------------------------- > In section 5: >=20 > This memo also includes, as the "ro" tags defined above, the means=20 > by > ^^ >=20 > I do not think this document defines "ro" tag, I assume it was meant=20 > to mean "rr" tag instead? Yes, it was renamed during the document's evolution and I missed this one. = Fixed. > ---------------------------------------------------------------------- > In section 5.2: >=20 > How can DKIM ADSP failures ever report "d" type errors, as if they=20 > have DNS issues for fetching ADSP records, they will not get the "rr" > tag saying "d" or "all" types should be reported... It looks like that was copied from the DKIM reporting flags without realizi= ng this discontinuity. I'll remove it. Thanks again, -MSK From Internet-Drafts@ietf.org Thu Mar 8 13:13:55 2012 Return-Path: X-Original-To: marf@ietfa.amsl.com Delivered-To: marf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7955421E8050; Thu, 8 Mar 2012 13:13:55 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.599 X-Spam-Level: X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nt7QJv1YS+we; Thu, 8 Mar 2012 13:13:55 -0800 (PST) Received: from ietfa.amsl.com (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A1B7421E8039; Thu, 8 Mar 2012 13:13:53 -0800 (PST) MIME-Version: 1.0 Content-Type: Multipart/Mixed; Boundary="NextPart" From: Internet-Drafts@ietf.org To: i-d-announce@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 4.00 Message-ID: <20120308211353.10219.87931.idtracker@ietfa.amsl.com> Date: Thu, 08 Mar 2012 13:13:53 -0800 Cc: marf@ietf.org Subject: [marf] I-D ACTION:draft-ietf-marf-dkim-reporting-12.txt X-BeenThere: marf@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Message Abuse Report Format working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 08 Mar 2012 21:13:55 -0000 --NextPart A new Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Messaging Abuse Reporting Format Working Group of the IETF. Title : Extensions to DKIM for Failure Reporting Author(s) : M. Kucherawy Filename : draft-ietf-marf-dkim-reporting Pages : 23 Date : April 21, 2010 This memo presents extensions to the DomainKeys Identified Mail (DKIM) specification to allow for detailed reporting of message authentication failures in an on-demand fashion. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-ietf-marf-dkim-reporting Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. --NextPart Content-Type: Message/External-body; name="draft-ietf-marf-dkim-reporting"; site="ftp.ietf.org"; access-type="anon-ftp"; directory="internet-drafts" Content-Type: text/plain Content-ID: <2012-03-08131353.I-D@ietf.org> --NextPart-- From msk@cloudmark.com Thu Mar 8 14:20:42 2012 Return-Path: X-Original-To: marf@ietfa.amsl.com Delivered-To: marf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C971421F8622 for ; Thu, 8 Mar 2012 14:20:42 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.603 X-Spam-Level: X-Spam-Status: No, score=-102.603 tagged_above=-999 required=5 tests=[AWL=-0.004, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wbUfZ0tzPJ7i for ; Thu, 8 Mar 2012 14:20:42 -0800 (PST) Received: from ht1-outbound.cloudmark.com (ht1-outbound.cloudmark.com [72.5.239.25]) by ietfa.amsl.com (Postfix) with ESMTP id 5EBDE21F85B1 for ; Thu, 8 Mar 2012 14:20:39 -0800 (PST) Received: from EXCH-MBX901.corp.cloudmark.com ([fe80::addf:849a:f71c:4a82]) by EXCH-HTCAS901.corp.cloudmark.com ([fe80::2966:6846:8d89:4681%12]) with mapi id 14.01.0355.002; Thu, 8 Mar 2012 14:20:38 -0800 From: "Murray S. Kucherawy" To: "marf@ietf.org" Thread-Topic: [marf] I-D ACTION:draft-ietf-marf-dkim-reporting-12.txt Thread-Index: AQHM/XB4uQ1z5XABc0ypgXrEFbL0oZZg98rw Date: Thu, 8 Mar 2012 22:20:38 +0000 Message-ID: <9452079D1A51524AA5749AD23E003928081055@exch-mbx901.corp.cloudmark.com> References: <20120308211353.10219.87931.idtracker@ietfa.amsl.com> In-Reply-To: <20120308211353.10219.87931.idtracker@ietfa.amsl.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [172.20.2.121] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Subject: Re: [marf] I-D ACTION:draft-ietf-marf-dkim-reporting-12.txt X-BeenThere: marf@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Message Abuse Report Format working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 08 Mar 2012 22:20:43 -0000 > -----Original Message----- > From: marf-bounces@ietf.org [mailto:marf-bounces@ietf.org] On Behalf Of I= nternet-Drafts@ietf.org > Sent: Thursday, March 08, 2012 1:14 PM > To: i-d-announce@ietf.org > Cc: marf@ietf.org > Subject: [marf] I-D ACTION:draft-ietf-marf-dkim-reporting-12.txt >=20 > A new Internet-Draft is available from the on-line Internet-Drafts > directories. > This draft is a work item of the Messaging Abuse Reporting Format > Working Group of the IETF. >=20 > Title : Extensions to DKIM for Failure Reporting > Author(s) : M. Kucherawy > Filename : draft-ietf-marf-dkim-reporting > Pages : 23 > Date : April 21, 2010 >=20 > This memo presents extensions to the DomainKeys Identified Mail > (DKIM) specification to allow for detailed reporting of message > authentication failures in an on-demand fashion. I'm not sure why the date on it is so terribly incorrect, but this is a res= ponse to some clarifications requested by the SecDir review. No changes to= the protocol. -MSK From shmuel+gen@patriot.net Fri Mar 9 04:52:56 2012 Return-Path: X-Original-To: marf@ietfa.amsl.com Delivered-To: marf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5268821F8668 for ; Fri, 9 Mar 2012 04:52:56 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.284 X-Spam-Level: X-Spam-Status: No, score=-2.284 tagged_above=-999 required=5 tests=[AWL=0.315, BAYES_00=-2.599] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id a6GNXNuPfBjK for ; Fri, 9 Mar 2012 04:52:55 -0800 (PST) Received: from smtp.patriot.net (smtp.patriot.net [209.249.176.77]) by ietfa.amsl.com (Postfix) with ESMTP id AD72421F865D for ; Fri, 9 Mar 2012 04:52:55 -0800 (PST) Received: from ECS60015111 (unknown [69.72.27.218]) (Authenticated sender: shmuel@patriot.net) by smtp.patriot.net (Postfix) with ESMTP id D43CCF580E8 for ; Fri, 9 Mar 2012 07:37:31 -0500 (EST) From: Shmuel (Seymour J.) Metz Date: Fri, 09 Mar 2012 07:53:15 -0500 To: marf@ietf.org In-Reply-To: <20120308211353.10219.87931.idtracker@ietfa.amsl.com> Mail-Copies-To: nobody Organization: Atid/2 X-CompuServe-Customer: Yes X-Coriate: NCAE@NewAmerica.org X-Coriate: Mark Griffith X-Punge: Micro$oft X-Terminate: SPA(GIS) X-Treme: C&C,DWS X-Mailer: MR/2 Internet Cruiser Edition for OS/2 v3.00.11.18 BETA/60 Message-Id: <20120309123731.D43CCF580E8@smtp.patriot.net> Subject: Re: [marf] I-D ACTION:draft-ietf-marf-dkim-reporting-12.txt X-BeenThere: marf@ietf.org X-Mailman-Version: 2.1.12 Precedence: list Reply-To: Message Abuse Report Format working group List-Id: Message Abuse Report Format working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 09 Mar 2012 12:52:56 -0000 In <20120308211353.10219.87931.idtracker@ietfa.amsl.com>, on 03/08/2012 at 01:13 PM, Internet-Drafts@ietf.org said: >Internet-Drafts are also available by anonymous FTP at: >ftp://ftp.ietf.org/internet-drafts/ Why no URL for downloading the specific draft, such as was provided in the past? Message/External-body attachments are not a substitute. -- Shmuel (Seymour J.) Metz, SysProg and JOAT Atid/2 We don't care. We don't have to care, we're Congress. (S877: The Shut up and Eat Your spam act of 2003) From sklist@kitterman.com Fri Mar 9 04:54:17 2012 Return-Path: X-Original-To: marf@ietfa.amsl.com Delivered-To: marf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0F90D21F85B1 for ; Fri, 9 Mar 2012 04:54:17 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.572 X-Spam-Level: X-Spam-Status: No, score=-2.572 tagged_above=-999 required=5 tests=[AWL=0.027, BAYES_00=-2.599] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4Un+rLKOGrzM for ; Fri, 9 Mar 2012 04:54:16 -0800 (PST) Received: from mailout02.controlledmail.com (mailout02.controlledmail.com [72.81.252.18]) by ietfa.amsl.com (Postfix) with ESMTP id 5DD3721F84D6 for ; Fri, 9 Mar 2012 04:54:16 -0800 (PST) Received: from mailout02.controlledmail.com (localhost [127.0.0.1]) by mailout02.controlledmail.com (Postfix) with ESMTP id 6CD9820E40FA; Fri, 9 Mar 2012 07:54:15 -0500 (EST) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=kitterman.com; s=2007-00; t=1331297655; bh=oVWuIiOuDF3VVC+LMsEdopW55xiq2m2pmb93wxkMPP4=; h=From:To:Subject:Date:Message-ID:In-Reply-To:References: MIME-Version:Content-Transfer-Encoding:Content-Type; b=FnSb5viwWFxzq7gq7vX8c8XYWlEZUmJf6LSqChJ3f0mURw+w900ga22cKD6SzKebb ohgL6NL93Qj1TyMETtalLwraGngMbsB/iJi/SWgYSXNmsMIfCv0amsugUfAxipPWbe SrMxrlbKdS6/Z+Qmc1Dzr8SAz/oOlMTmBjUhSctc= Received: from scott-latitude-e6320.localnet (static-72-81-252-21.bltmmd.fios.verizon.net [72.81.252.21]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mailout02.controlledmail.com (Postfix) with ESMTPSA id 59F3620E408E; Fri, 9 Mar 2012 07:54:15 -0500 (EST) From: Scott Kitterman To: marf@ietf.org Date: Fri, 09 Mar 2012 07:54:14 -0500 Message-ID: <1499446.9oz1HucsKt@scott-latitude-e6320> User-Agent: KMail/4.7.3 (Linux/3.0.0-16-generic-pae; KDE/4.7.4; i686; ; ) In-Reply-To: <20120309123731.D43CCF580E8@smtp.patriot.net> References: <20120309123731.D43CCF580E8@smtp.patriot.net> MIME-Version: 1.0 Content-Transfer-Encoding: 7Bit Content-Type: text/plain; charset="us-ascii" X-AV-Checked: ClamAV using ClamSMTP Subject: Re: [marf] I-D ACTION:draft-ietf-marf-dkim-reporting-12.txt X-BeenThere: marf@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Message Abuse Report Format working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 09 Mar 2012 12:54:17 -0000 On Friday, March 09, 2012 07:53:15 AM Shmuel Metz wrote: > In <20120308211353.10219.87931.idtracker@ietfa.amsl.com>, on > 03/08/2012 > > at 01:13 PM, Internet-Drafts@ietf.org said: > >Internet-Drafts are also available by anonymous FTP at: > >ftp://ftp.ietf.org/internet-drafts/ > > Why no URL for downloading the specific draft, such as was provided in > the past? Message/External-body attachments are not a substitute. The system has been "improved". See discussion on the IETF mail list. Nothing we can do about it here. Scott K From msk@cloudmark.com Sun Mar 11 10:32:38 2012 Return-Path: X-Original-To: marf@ietfa.amsl.com Delivered-To: marf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 462FD21F86EC for ; Sun, 11 Mar 2012 10:32:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.265 X-Spam-Level: X-Spam-Status: No, score=-102.265 tagged_above=-999 required=5 tests=[AWL=-0.266, BAYES_00=-2.599, J_CHICKENPOX_23=0.6, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zH7GS5ooKaXd for ; Sun, 11 Mar 2012 10:32:37 -0700 (PDT) Received: from ht1-outbound.cloudmark.com (ht1-outbound.cloudmark.com [72.5.239.25]) by ietfa.amsl.com (Postfix) with ESMTP id 9074721F8705 for ; Sun, 11 Mar 2012 10:32:24 -0700 (PDT) Received: from EXCH-MBX901.corp.cloudmark.com ([fe80::addf:849a:f71c:4a82]) by EXCH-HTCAS901.corp.cloudmark.com ([fe80::2966:6846:8d89:4681%12]) with mapi id 14.01.0355.002; Sun, 11 Mar 2012 10:32:23 -0700 From: "Murray S. Kucherawy" To: "marf@ietf.org" Thread-Topic: DISCUSS on draft-ietf-marf-dkim-reporting Thread-Index: AQHM/6zrLcBagoAgEE6ctnFVhi4bqg== Date: Sun, 11 Mar 2012 17:32:22 +0000 Message-ID: <9452079D1A51524AA5749AD23E0039280849A1@exch-mbx901.corp.cloudmark.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [67.160.203.60] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Subject: [marf] DISCUSS on draft-ietf-marf-dkim-reporting X-BeenThere: marf@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Message Abuse Report Format working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 11 Mar 2012 17:32:38 -0000 The IESG has the following issue they'd like us to resolve on the DKIM repo= rting draft, and the result might also apply to the SPF reporting draft, be= fore it can be approved for publication. "- is rr=3Dall a good default? If a bad-actor sends a supposedly signed mai= l with a DKIM-Signature with 1000 fields then what happens if the Signer's= DNS has no rr tag? Maybe some special case for unknown DKIM-Signature toke= ns or a max on the number of reports for a single message? (Note: I'm assum= ing that a separate report can be, or is to be, generated for each DKIM-Sig= nature token that fails, clarifying that only one report is ever sent for o= ne inbound mail with a broken signature would also fix this.)" It's my understanding that we would generate one report per failed signatur= e, because a single message might bear multiple signatures from different d= omains that have different reporting requirements, so the parenthetical sol= ution won't work for us. A maximum on the number of reports per message is= somewhat arbitrary given that a Verifier can do them in any order. We have a few options here: - require an "rr" tag, rather than having a default - have some default other than "all", chosen from the set of available repo= rt requests And we might in addition: - add a report request for unknown signature tags What does the WG think? The telechat is this coming Thursday, so having th= is resolved by then would be ideal. -MSK From msk@cloudmark.com Sun Mar 11 10:39:34 2012 Return-Path: X-Original-To: marf@ietfa.amsl.com Delivered-To: marf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id ACD7221F85CD for ; Sun, 11 Mar 2012 10:39:34 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.557 X-Spam-Level: X-Spam-Status: No, score=-102.557 tagged_above=-999 required=5 tests=[AWL=0.042, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fqTY1a10jtuZ for ; Sun, 11 Mar 2012 10:39:34 -0700 (PDT) Received: from ht1-outbound.cloudmark.com (ht1-outbound.cloudmark.com [72.5.239.25]) by ietfa.amsl.com (Postfix) with ESMTP id 43F3321F85C4 for ; Sun, 11 Mar 2012 10:39:34 -0700 (PDT) Received: from EXCH-MBX901.corp.cloudmark.com ([fe80::addf:849a:f71c:4a82]) by EXCH-HTCAS901.corp.cloudmark.com ([fe80::2966:6846:8d89:4681%12]) with mapi id 14.01.0355.002; Sun, 11 Mar 2012 10:39:33 -0700 From: "Murray S. Kucherawy" To: "marf@ietf.org" Thread-Topic: Urgency (was RE: DISCUSS on draft-ietf-marf-dkim-reporting) Thread-Index: AQHM/63rtiZabw0tzECQBzma3mzvsA== Date: Sun, 11 Mar 2012 17:39:32 +0000 Message-ID: <9452079D1A51524AA5749AD23E003928084AEC@exch-mbx901.corp.cloudmark.com> References: <9452079D1A51524AA5749AD23E0039280849A1@exch-mbx901.corp.cloudmark.com> In-Reply-To: <9452079D1A51524AA5749AD23E0039280849A1@exch-mbx901.corp.cloudmark.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [67.160.203.60] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Subject: [marf] Urgency (was RE: DISCUSS on draft-ietf-marf-dkim-reporting) X-BeenThere: marf@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Message Abuse Report Format working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 11 Mar 2012 17:39:34 -0000 > -----Original Message----- > From: marf-bounces@ietf.org [mailto:marf-bounces@ietf.org] On Behalf Of M= urray S. Kucherawy > Sent: Sunday, March 11, 2012 10:32 AM > To: marf@ietf.org > Subject: [marf] DISCUSS on draft-ietf-marf-dkim-reporting >=20 > The IESG has the following issue they'd like us to resolve on the DKIM > reporting draft, and the result might also apply to the SPF reporting > draft, before it can be approved for publication. I just (re-)realized that the deadline for posting an update is 5pm Pacific= time on Monday. After that submissions are frozen until after the Paris m= eeting. So a very quick resolution to this would be quite ideal. -MSK From sklist@kitterman.com Sun Mar 11 14:10:49 2012 Return-Path: X-Original-To: marf@ietfa.amsl.com Delivered-To: marf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 028F621F871C for ; Sun, 11 Mar 2012 14:10:49 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.573 X-Spam-Level: X-Spam-Status: No, score=-2.573 tagged_above=-999 required=5 tests=[AWL=0.026, BAYES_00=-2.599] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CBIzKFf89Z94 for ; Sun, 11 Mar 2012 14:10:48 -0700 (PDT) Received: from mailout02.controlledmail.com (mailout02.controlledmail.com [72.81.252.18]) by ietfa.amsl.com (Postfix) with ESMTP id 1795E21F8716 for ; Sun, 11 Mar 2012 14:10:48 -0700 (PDT) Received: from mailout02.controlledmail.com (localhost [127.0.0.1]) by mailout02.controlledmail.com (Postfix) with ESMTP id 19DDC20E40BD; Sun, 11 Mar 2012 17:10:47 -0400 (EDT) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=kitterman.com; s=2007-00; t=1331500247; bh=lNdk/8NM4rfb7aoT5vMZLV8/huu3AgKOZ9kDfWhSrlk=; h=From:To:Subject:Date:Message-ID:In-Reply-To:References: MIME-Version:Content-Transfer-Encoding:Content-Type; b=QuU4X/wlIt8zwfJcfDGhaOqcWmtIoF3I0JN+imkIpmCvGiaVnnltHABfdGiFhPJYE Fmi3MhHCEIOqBMbbH93ixW6fmdDeKWPSJygyVaUcfxPXI1vCaxVXEGRZfpzMna41dB LaeM9lmP/dJddwV7YuZD0AeAFqFotfl8jQXpRGVg= Received: from scott-latitude-e6320.localnet (static-72-81-252-21.bltmmd.fios.verizon.net [72.81.252.21]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mailout02.controlledmail.com (Postfix) with ESMTPSA id F38FE20E4093; Sun, 11 Mar 2012 17:10:46 -0400 (EDT) From: Scott Kitterman To: marf@ietf.org Date: Sun, 11 Mar 2012 17:10:46 -0400 Message-ID: <9185296.Sz4L5HcCOC@scott-latitude-e6320> User-Agent: KMail/4.7.3 (Linux/3.0.0-16-generic-pae; KDE/4.7.4; i686; ; ) In-Reply-To: <9452079D1A51524AA5749AD23E0039280849A1@exch-mbx901.corp.cloudmark.com> References: <9452079D1A51524AA5749AD23E0039280849A1@exch-mbx901.corp.cloudmark.com> MIME-Version: 1.0 Content-Transfer-Encoding: 7Bit Content-Type: text/plain; charset="us-ascii" X-AV-Checked: ClamAV using ClamSMTP Subject: Re: [marf] DISCUSS on draft-ietf-marf-dkim-reporting X-BeenThere: marf@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Message Abuse Report Format working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 11 Mar 2012 21:10:49 -0000 On Sunday, March 11, 2012 05:32:22 PM Murray S. Kucherawy wrote: > The IESG has the following issue they'd like us to resolve on the DKIM > reporting draft, and the result might also apply to the SPF reporting > draft, before it can be approved for publication. ... If I understand the comment correctly, I don't think it applies to the SPF draft. An email has exactly one mail from and one helo so there's no way to generate lots of arfs from a single messages. Scott K From johnl@iecc.com Sun Mar 11 19:45:14 2012 Return-Path: X-Original-To: marf@ietfa.amsl.com Delivered-To: marf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8294C21F854F for ; Sun, 11 Mar 2012 19:45:14 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -109.993 X-Spam-Level: X-Spam-Status: No, score=-109.993 tagged_above=-999 required=5 tests=[AWL=0.606, BAYES_00=-2.599, HABEAS_ACCREDITED_SOI=-4.3, J_CHICKENPOX_23=0.6, RCVD_IN_BSP_TRUSTED=-4.3, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uUAXOLBagZEr for ; Sun, 11 Mar 2012 19:45:13 -0700 (PDT) Received: from leila.iecc.com (leila6.iecc.com [IPv6:2001:470:1f07:1126:0:4c:6569:6c61]) by ietfa.amsl.com (Postfix) with ESMTP id 73E2021F8527 for ; Sun, 11 Mar 2012 19:45:13 -0700 (PDT) Received: (qmail 38831 invoked from network); 12 Mar 2012 02:45:12 -0000 Received: from leila.iecc.com (64.57.183.34) by mail1.iecc.com with QMQP; 12 Mar 2012 02:45:12 -0000 DKIM-Signature: v=1; a=rsa-sha256; c=simple; d=iecc.com; h=date:message-id:from:to:cc:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:vbr-info; s=4f5d6338.xn--30v786c.k1203; i=johnl@user.iecc.com; bh=H4NYJjEzy6O4SUWxjnFbSzT1oIjfoOim7U0l75A9vAM=; b=W2SjcEvlBh4220WdylIcm4K/qaglpnGiK3KMmuesn2xNs+SgYhdMfz5NNJ3xrjNhnERbpT1khZPuzhC1DMX/9rbH+29fIPuhkjwgQxa0VG189mQuscDNSwbOaX7gZedbno45m0H9Hb/WRl1XdKLKlMvxB/Yw3YGUYWRj8r+2dvM= DKIM-Signature: v=1; a=rsa-sha256; c=simple; d=taugh.com; h=date:message-id:from:to:cc:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:vbr-info; s=4f5d6338.xn--30v786c.k1203; olt=johnl@user.iecc.com; bh=H4NYJjEzy6O4SUWxjnFbSzT1oIjfoOim7U0l75A9vAM=; b=fg+f6NQwEjXJ90kNsEE8xMKOta69WZUINRPQXeJQn3BLPwk+MY2VA2Ih31B3cyvYX2ZqzZwk8YwwTQCsd+nKEkUj68RRECGBLDKoYLMMit7I+u/k05TEkFLeid1yP0s4rPgkem2KsoZX2LXUFbbVBbpcUo/wOxrujzPduUuA1LA= VBR-Info: md=iecc.com; mc=all; mv=dwl.spamhaus.org Date: 12 Mar 2012 02:44:50 -0000 Message-ID: <20120312024450.37129.qmail@joyce.lan> From: "John Levine" To: marf@ietf.org In-Reply-To: <9452079D1A51524AA5749AD23E0039280849A1@exch-mbx901.corp.cloudmark.com> Organization: X-Headerized: yes Mime-Version: 1.0 Content-type: text/plain; charset=utf-8 Content-transfer-encoding: 7bit Subject: Re: [marf] DISCUSS on draft-ietf-marf-dkim-reporting X-BeenThere: marf@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Message Abuse Report Format working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 12 Mar 2012 02:45:14 -0000 >"- is rr=all a good default? In this case I think it is. Publishing the record says you want reports, and it seems reasonable that you'd want all the reports until you can narrow down the problem. And if you accept any reports at all, you better be prepared for a lot of reports, since it's pretty easy for bad guys to send spam that fails in whatever way you do accept. > If a bad-actor sends a supposedly signed mail with a DKIM-Signature with 1000 fields >then what happens if the Signer's DNS has no rr tag? If you've published a _report._domainkey record, you get a lot of reports. If you haven't, you get no reports. Seems reasonable to me, it's opt-in. If you publish a record inviting reports you don't want, well, Don't Do That. >- add a report request for unknown signature tags That's not an error, but it could be an interesting way to see who's delivering your mail, which is probably not what you intended. R's, John From sklist@kitterman.com Sun Mar 11 20:18:55 2012 Return-Path: X-Original-To: marf@ietfa.amsl.com Delivered-To: marf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A8CBF21F84D3 for ; Sun, 11 Mar 2012 20:18:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.273 X-Spam-Level: X-Spam-Status: No, score=-2.273 tagged_above=-999 required=5 tests=[AWL=-0.274, BAYES_00=-2.599, J_CHICKENPOX_23=0.6] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9jpgVFBqVAhO for ; Sun, 11 Mar 2012 20:18:55 -0700 (PDT) Received: from mailout03.controlledmail.com (mailout03.controlledmail.com [208.43.65.50]) by ietfa.amsl.com (Postfix) with ESMTP id 1B6F521F84CF for ; Sun, 11 Mar 2012 20:18:55 -0700 (PDT) Received: from mailout03.controlledmail.com (localhost [127.0.0.1]) by mailout03.controlledmail.com (Postfix) with ESMTP id D2C26D04064; Sun, 11 Mar 2012 22:18:53 -0500 (CDT) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=kitterman.com; s=2007-00; t=1331522333; bh=1wKJ0tYJzE3jR8+HClxiUmECBh+hgzm3+fF3QhPQRt0=; h=References:In-Reply-To:MIME-Version:Content-Type: Content-Transfer-Encoding:Subject:From:Date:To:Message-ID; b=RgWSZK/Cy85KHT6A4qTIvu2H9d5s7dv8HGAdAwfQ1a5QcsYZ1wOx7wJaBWPGXe0aD 9Laktd3hi3GW5QQQvYyrucwdVzn6WvwT5QWIktOK6f6ZV/lQvLt3yQRJzbmfHsSW3F 6p+Ri/KVxIxm3v7MtH/5Bfmhg5HiNabHy1TyReRI= Received: from [192.168.111.101] (static-72-81-252-21.bltmmd.fios.verizon.net [72.81.252.21]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mailout03.controlledmail.com (Postfix) with ESMTPSA id 1C9BDD04005; Sun, 11 Mar 2012 22:18:51 -0500 (CDT) References: <9452079D1A51524AA5749AD23E0039280849A1@exch-mbx901.corp.cloudmark.com> User-Agent: K-9 Mail for Android In-Reply-To: <9452079D1A51524AA5749AD23E0039280849A1@exch-mbx901.corp.cloudmark.com> MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit From: Scott Kitterman Date: Sun, 11 Mar 2012 23:18:59 -0400 To: "marf@ietf.org" Message-ID: <10c0a889-9daa-4706-b906-34adab763e0c@email.android.com> X-AV-Checked: ClamAV using ClamSMTP Subject: Re: [marf] DISCUSS on draft-ietf-marf-dkim-reporting X-BeenThere: marf@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Message Abuse Report Format working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 12 Mar 2012 03:18:55 -0000 "Murray S. Kucherawy" wrote: >The IESG has the following issue they'd like us to resolve on the DKIM >reporting draft, and the result might also apply to the SPF reporting >draft, before it can be approved for publication. > >"- is rr=all a good default? If a bad-actor sends a supposedly signed >mail with a DKIM-Signature with 1000 fields then what happens if the >Signer's DNS has no rr tag? Maybe some special case for unknown >DKIM-Signature tokens or a max on the number of reports for a single >message? (Note: I'm assuming that a separate report can be, or is to >be, generated for each DKIM-Signature token that fails, clarifying that >only one report is ever sent for one inbound mail with a broken >signature would also fix this.)" > >It's my understanding that we would generate one report per failed >signature, because a single message might bear multiple signatures from >different domains that have different reporting requirements, so the >parenthetical solution won't work for us. A maximum on the number of >reports per message is somewhat arbitrary given that a Verifier can do >them in any order. > >We have a few options here: > >- require an "rr" tag, rather than having a default >- have some default other than "all", chosen from the set of available >report requests > >And we might in addition: > >- add a report request for unknown signature tags > >What does the WG think? The telechat is this coming Thursday, so >having this resolved by then would be ideal. Since a domain doesn't have to publish a record asking for these reports and (as an added bonus) ra= doesn't have a default, there's no worry about reports being generated for domains that don't opt-in. Typically, I think if I needed to moderate volume, rp= would be the right knob to turn anyway. The most I would do is say something like SHOULD NOT generate more than one report to a single domain per message. To the extent there's an issue here, I think that addresses it. Scott K From msk@cloudmark.com Sun Mar 11 21:07:06 2012 Return-Path: X-Original-To: marf@ietfa.amsl.com Delivered-To: marf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4772121F857A for ; Sun, 11 Mar 2012 21:07:06 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.561 X-Spam-Level: X-Spam-Status: No, score=-102.561 tagged_above=-999 required=5 tests=[AWL=0.038, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GJ5TAqnjKC8V for ; Sun, 11 Mar 2012 21:07:05 -0700 (PDT) Received: from ht2-outbound.cloudmark.com (ht2-outbound.cloudmark.com [72.5.239.26]) by ietfa.amsl.com (Postfix) with ESMTP id D131321F8578 for ; Sun, 11 Mar 2012 21:07:05 -0700 (PDT) Received: from EXCH-MBX901.corp.cloudmark.com ([fe80::addf:849a:f71c:4a82]) by exch-htcas902.corp.cloudmark.com ([fe80::e82a:4f80:7f44:eaf7%12]) with mapi id 14.01.0355.002; Sun, 11 Mar 2012 21:07:05 -0700 From: "Murray S. Kucherawy" To: "marf@ietf.org" Thread-Topic: [marf] DISCUSS on draft-ietf-marf-dkim-reporting Thread-Index: AQHM/6zrLcBagoAgEE6ctnFVhi4bqpZmc7mA//+VuMA= Date: Mon, 12 Mar 2012 04:07:04 +0000 Message-ID: <9452079D1A51524AA5749AD23E003928084F55@exch-mbx901.corp.cloudmark.com> References: <9452079D1A51524AA5749AD23E0039280849A1@exch-mbx901.corp.cloudmark.com> <10c0a889-9daa-4706-b906-34adab763e0c@email.android.com> In-Reply-To: <10c0a889-9daa-4706-b906-34adab763e0c@email.android.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [67.160.203.60] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Subject: Re: [marf] DISCUSS on draft-ietf-marf-dkim-reporting X-BeenThere: marf@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Message Abuse Report Format working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 12 Mar 2012 04:07:06 -0000 > -----Original Message----- > From: marf-bounces@ietf.org [mailto:marf-bounces@ietf.org] On Behalf Of S= cott Kitterman > Sent: Sunday, March 11, 2012 8:19 PM > To: marf@ietf.org > Subject: Re: [marf] DISCUSS on draft-ietf-marf-dkim-reporting >=20 > The most I would do is say something like SHOULD NOT generate more than > one report to a single domain per message. To the extent there's an > issue here, I think that addresses it. I think this is my preferred response, given Scott and John's remarks and f= urther comments from the IESG: - Add the idea Scott mentioned above - Add the reporting request to indicate unrecognized tags - Add a paragraph saying someone adding a _report DNS record ought to antic= ipate receiving a lot of reports Any objections, or other comments? -MSK From sklist@kitterman.com Sun Mar 11 21:14:21 2012 Return-Path: X-Original-To: marf@ietfa.amsl.com Delivered-To: marf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E16CF21F8528 for ; Sun, 11 Mar 2012 21:14:21 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.57 X-Spam-Level: X-Spam-Status: No, score=-2.57 tagged_above=-999 required=5 tests=[AWL=0.029, BAYES_00=-2.599] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HILtx7F5FokR for ; Sun, 11 Mar 2012 21:14:21 -0700 (PDT) Received: from mailout02.controlledmail.com (mailout02.controlledmail.com [72.81.252.18]) by ietfa.amsl.com (Postfix) with ESMTP id 3CFF621F84DF for ; Sun, 11 Mar 2012 21:14:21 -0700 (PDT) Received: from mailout02.controlledmail.com (localhost [127.0.0.1]) by mailout02.controlledmail.com (Postfix) with ESMTP id B723B20E40BD; Mon, 12 Mar 2012 00:14:14 -0400 (EDT) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=kitterman.com; s=2007-00; t=1331525654; bh=uMWRTNgIGpxSHQI0hCiQXTzMi+RiSeXud4ZiR+VqFl0=; h=From:To:Subject:Date:Message-ID:In-Reply-To:References: MIME-Version:Content-Transfer-Encoding:Content-Type; b=HUzeqnz/j/cZDfTfVrsGuTMYotIyLRAVoTXH8H6bU6fQB3S/hsAZXH4Vt126gl67Y ONEyHeEViiibvl80kbwTDPV8qrhhRhgXBaGIknjJntuMJz5LK9pmxSNc4/jAQVAa7a 7emh1P9+PUH/mpXIBcOwbmp6yb0HxI2Ut2pQ9rMo= Received: from scott-latitude-e6320.localnet (static-72-81-252-21.bltmmd.fios.verizon.net [72.81.252.21]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mailout02.controlledmail.com (Postfix) with ESMTPSA id 978C520E4093; Mon, 12 Mar 2012 00:14:14 -0400 (EDT) From: Scott Kitterman To: marf@ietf.org Date: Mon, 12 Mar 2012 00:14:13 -0400 Message-ID: <12446700.lUnqZU4BBd@scott-latitude-e6320> User-Agent: KMail/4.7.3 (Linux/3.0.0-16-generic-pae; KDE/4.7.4; i686; ; ) In-Reply-To: <9452079D1A51524AA5749AD23E003928084F55@exch-mbx901.corp.cloudmark.com> References: <9452079D1A51524AA5749AD23E0039280849A1@exch-mbx901.corp.cloudmark.com> <10c0a889-9daa-4706-b906-34adab763e0c@email.android.com> <9452079D1A51524AA5749AD23E003928084F55@exch-mbx901.corp.cloudmark.com> MIME-Version: 1.0 Content-Transfer-Encoding: 7Bit Content-Type: text/plain; charset="us-ascii" X-AV-Checked: ClamAV using ClamSMTP Subject: Re: [marf] DISCUSS on draft-ietf-marf-dkim-reporting X-BeenThere: marf@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Message Abuse Report Format working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 12 Mar 2012 04:14:22 -0000 On Monday, March 12, 2012 04:07:04 AM Murray S. Kucherawy wrote: ... > - Add the reporting request to indicate unrecognized tags .. > Any objections, or other comments? So is "all" now all recognized tags (so to get all recognized tags one would ask for "all" and to get everything recognized or not one would need to ask for "all" and "unrecognized") or all tags recognized and unrecognized (and to get only all the recognized tags they'd have to be individually specified)? What problem does asking for unrecognized tags solve? I don't think either of those are ideal. Scott K From msk@cloudmark.com Sun Mar 11 21:22:40 2012 Return-Path: X-Original-To: marf@ietfa.amsl.com Delivered-To: marf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9F3D621F856C for ; Sun, 11 Mar 2012 21:22:40 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.561 X-Spam-Level: X-Spam-Status: No, score=-102.561 tagged_above=-999 required=5 tests=[AWL=0.038, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jQ4Ec3FMor08 for ; Sun, 11 Mar 2012 21:22:39 -0700 (PDT) Received: from ht1-outbound.cloudmark.com (ht1-outbound.cloudmark.com [72.5.239.25]) by ietfa.amsl.com (Postfix) with ESMTP id ADA8721F8566 for ; Sun, 11 Mar 2012 21:22:39 -0700 (PDT) Received: from EXCH-MBX901.corp.cloudmark.com ([fe80::addf:849a:f71c:4a82]) by EXCH-HTCAS901.corp.cloudmark.com ([fe80::2966:6846:8d89:4681%12]) with mapi id 14.01.0355.002; Sun, 11 Mar 2012 21:22:39 -0700 From: "Murray S. Kucherawy" To: "marf@ietf.org" Thread-Topic: [marf] DISCUSS on draft-ietf-marf-dkim-reporting Thread-Index: AQHM/6zrLcBagoAgEE6ctnFVhi4bqpZmc7mA//+VuMCAAHm3gP//jHuA Date: Mon, 12 Mar 2012 04:22:38 +0000 Message-ID: <9452079D1A51524AA5749AD23E003928085383@exch-mbx901.corp.cloudmark.com> References: <9452079D1A51524AA5749AD23E0039280849A1@exch-mbx901.corp.cloudmark.com> <10c0a889-9daa-4706-b906-34adab763e0c@email.android.com> <9452079D1A51524AA5749AD23E003928084F55@exch-mbx901.corp.cloudmark.com> <12446700.lUnqZU4BBd@scott-latitude-e6320> In-Reply-To: <12446700.lUnqZU4BBd@scott-latitude-e6320> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [67.160.203.60] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Subject: Re: [marf] DISCUSS on draft-ietf-marf-dkim-reporting X-BeenThere: marf@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Message Abuse Report Format working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 12 Mar 2012 04:22:40 -0000 > -----Original Message----- > From: marf-bounces@ietf.org [mailto:marf-bounces@ietf.org] On Behalf Of S= cott Kitterman > Sent: Sunday, March 11, 2012 9:14 PM > To: marf@ietf.org > Subject: Re: [marf] DISCUSS on draft-ietf-marf-dkim-reporting >=20 > So is "all" now all recognized tags (so to get all recognized tags one > would ask for "all" and to get everything recognized or not one would > need to ask for "all" and "unrecognized") or all tags recognized and > unrecognized (and to get only all the recognized tags they'd have to be > individually specified)? "all" would now include reports for signatures seen by Verifiers that don't= understand at least one tag, plus anything else in the list we've defined = as possible events of interest. > What problem does asking for unrecognized tags solve? I don't think > either of those are ideal. We could also remove the default, making "rr" mandatory so that an implemen= ter has to specify explicitly what report types are of interest. -MSK From sklist@kitterman.com Sun Mar 11 21:28:36 2012 Return-Path: X-Original-To: marf@ietfa.amsl.com Delivered-To: marf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6AFF821F8576 for ; Sun, 11 Mar 2012 21:28:36 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.57 X-Spam-Level: X-Spam-Status: No, score=-2.57 tagged_above=-999 required=5 tests=[AWL=0.029, BAYES_00=-2.599] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id n2PlnivVa9K2 for ; Sun, 11 Mar 2012 21:28:35 -0700 (PDT) Received: from mailout02.controlledmail.com (mailout02.controlledmail.com [72.81.252.18]) by ietfa.amsl.com (Postfix) with ESMTP id A2F3721F8567 for ; Sun, 11 Mar 2012 21:28:35 -0700 (PDT) Received: from mailout02.controlledmail.com (localhost [127.0.0.1]) by mailout02.controlledmail.com (Postfix) with ESMTP id 2891920E40BD; Mon, 12 Mar 2012 00:28:35 -0400 (EDT) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=kitterman.com; s=2007-00; t=1331526515; bh=ZYvO1SgOTJHeUlXvUQA4h7uyJSN8JGN4jlg+txTv8Qs=; h=From:To:Subject:Date:Message-ID:In-Reply-To:References: MIME-Version:Content-Transfer-Encoding:Content-Type; b=Pq4CJZuJbrou42cf7DFJHjjVzr16ip6FU2kAUBq4FCdaS28n99nWnuJsxu29C844e lxkIdULMm/Wnf42FyQ4rEExsY0CiU6BmNPb5R7zPdSB0Dk0YA27WeGpxHAoS3DV30N TwNLM/nMMxKjqfW0XxYQoWsLOmZabmtCbPjiF+dw= Received: from scott-latitude-e6320.localnet (static-72-81-252-21.bltmmd.fios.verizon.net [72.81.252.21]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mailout02.controlledmail.com (Postfix) with ESMTPSA id 08BBD20E4093; Mon, 12 Mar 2012 00:28:34 -0400 (EDT) From: Scott Kitterman To: marf@ietf.org Date: Mon, 12 Mar 2012 00:28:34 -0400 Message-ID: <1538322.tiBbOOBC5l@scott-latitude-e6320> User-Agent: KMail/4.7.3 (Linux/3.0.0-16-generic-pae; KDE/4.7.4; i686; ; ) In-Reply-To: <9452079D1A51524AA5749AD23E003928085383@exch-mbx901.corp.cloudmark.com> References: <9452079D1A51524AA5749AD23E0039280849A1@exch-mbx901.corp.cloudmark.com> <12446700.lUnqZU4BBd@scott-latitude-e6320> <9452079D1A51524AA5749AD23E003928085383@exch-mbx901.corp.cloudmark.com> MIME-Version: 1.0 Content-Transfer-Encoding: 7Bit Content-Type: text/plain; charset="us-ascii" X-AV-Checked: ClamAV using ClamSMTP Subject: Re: [marf] DISCUSS on draft-ietf-marf-dkim-reporting X-BeenThere: marf@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Message Abuse Report Format working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 12 Mar 2012 04:28:36 -0000 On Monday, March 12, 2012 04:22:38 AM Murray S. Kucherawy wrote: > > -----Original Message----- > > From: marf-bounces@ietf.org [mailto:marf-bounces@ietf.org] On Behalf Of > > Scott Kitterman Sent: Sunday, March 11, 2012 9:14 PM > > To: marf@ietf.org > > Subject: Re: [marf] DISCUSS on draft-ietf-marf-dkim-reporting > > > > So is "all" now all recognized tags (so to get all recognized tags one > > would ask for "all" and to get everything recognized or not one would > > need to ask for "all" and "unrecognized") or all tags recognized and > > unrecognized (and to get only all the recognized tags they'd have to be > > individually specified)? > > "all" would now include reports for signatures seen by Verifiers that don't > understand at least one tag, plus anything else in the list we've defined > as possible events of interest. > > What problem does asking for unrecognized tags solve? I don't think > > either of those are ideal. > > We could also remove the default, making "rr" mandatory so that an > implementer has to specify explicitly what report types are of interest. That seems somewhat orthogonal to unrecognized tags. If we add unrecognized tags, that's the default? I think unrecognized tags probably make sense so this draft doesn't have to be updated for each new tag that gets identified, but I'm still not understanding how it contributes to resolution of the discuss. Scott K From msk@cloudmark.com Sun Mar 11 21:44:03 2012 Return-Path: X-Original-To: marf@ietfa.amsl.com Delivered-To: marf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1268C21F84D0 for ; Sun, 11 Mar 2012 21:44:03 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.562 X-Spam-Level: X-Spam-Status: No, score=-102.562 tagged_above=-999 required=5 tests=[AWL=0.037, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3Ks1xAG1WxCK for ; Sun, 11 Mar 2012 21:44:02 -0700 (PDT) Received: from ht2-outbound.cloudmark.com (ht2-outbound.cloudmark.com [72.5.239.26]) by ietfa.amsl.com (Postfix) with ESMTP id A407521F84C5 for ; Sun, 11 Mar 2012 21:44:01 -0700 (PDT) Received: from EXCH-MBX901.corp.cloudmark.com ([fe80::addf:849a:f71c:4a82]) by exch-htcas902.corp.cloudmark.com ([fe80::e82a:4f80:7f44:eaf7%12]) with mapi id 14.01.0355.002; Sun, 11 Mar 2012 21:44:01 -0700 From: "Murray S. Kucherawy" To: "marf@ietf.org" Thread-Topic: [marf] DISCUSS on draft-ietf-marf-dkim-reporting Thread-Index: AQHM/6zrLcBagoAgEE6ctnFVhi4bqpZmc7mA//+VuMCAAHm3gP//jHuAgAB3hwD//47ToA== Date: Mon, 12 Mar 2012 04:44:00 +0000 Message-ID: <9452079D1A51524AA5749AD23E003928085414@exch-mbx901.corp.cloudmark.com> References: <9452079D1A51524AA5749AD23E0039280849A1@exch-mbx901.corp.cloudmark.com> <12446700.lUnqZU4BBd@scott-latitude-e6320> <9452079D1A51524AA5749AD23E003928085383@exch-mbx901.corp.cloudmark.com> <1538322.tiBbOOBC5l@scott-latitude-e6320> In-Reply-To: <1538322.tiBbOOBC5l@scott-latitude-e6320> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [67.160.203.60] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Subject: Re: [marf] DISCUSS on draft-ietf-marf-dkim-reporting X-BeenThere: marf@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Message Abuse Report Format working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 12 Mar 2012 04:44:03 -0000 > -----Original Message----- > From: marf-bounces@ietf.org [mailto:marf-bounces@ietf.org] On Behalf Of S= cott Kitterman > Sent: Sunday, March 11, 2012 9:29 PM > To: marf@ietf.org > Subject: Re: [marf] DISCUSS on draft-ietf-marf-dkim-reporting >=20 > That seems somewhat orthogonal to unrecognized tags. If we add unrecogni= zed > tags, that's the default? I think unrecognized tags probably make sense = so > this draft doesn't have to be updated for each new tag that gets identifi= ed, > but I'm still not understanding how it contributes to resolution of the > discuss. Me either, now that you mention it. I'll ask. -MSK From msk@cloudmark.com Mon Mar 12 00:28:59 2012 Return-Path: X-Original-To: marf@ietfa.amsl.com Delivered-To: marf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8873421F8513 for ; Mon, 12 Mar 2012 00:28:59 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.551 X-Spam-Level: X-Spam-Status: No, score=-102.551 tagged_above=-999 required=5 tests=[AWL=0.048, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id f7MbRXHT75rv for ; Mon, 12 Mar 2012 00:28:59 -0700 (PDT) Received: from ht1-outbound.cloudmark.com (ht1-outbound.cloudmark.com [72.5.239.25]) by ietfa.amsl.com (Postfix) with ESMTP id 11EA921F850C for ; Mon, 12 Mar 2012 00:28:59 -0700 (PDT) Received: from EXCH-MBX901.corp.cloudmark.com ([fe80::addf:849a:f71c:4a82]) by EXCH-HTCAS901.corp.cloudmark.com ([fe80::2966:6846:8d89:4681%12]) with mapi id 14.01.0355.002; Mon, 12 Mar 2012 00:28:58 -0700 From: "Murray S. Kucherawy" To: "marf@ietf.org" Thread-Topic: [marf] DISCUSS on draft-ietf-marf-dkim-reporting Thread-Index: AQHM/6zrLcBagoAgEE6ctnFVhi4bqpZmc7mA//+VuMCAAHm3gP//jHuAgAB3hwD//47ToAAFt4pQ Date: Mon, 12 Mar 2012 07:28:57 +0000 Message-ID: <9452079D1A51524AA5749AD23E00392808567D@exch-mbx901.corp.cloudmark.com> References: <9452079D1A51524AA5749AD23E0039280849A1@exch-mbx901.corp.cloudmark.com> <12446700.lUnqZU4BBd@scott-latitude-e6320> <9452079D1A51524AA5749AD23E003928085383@exch-mbx901.corp.cloudmark.com> <1538322.tiBbOOBC5l@scott-latitude-e6320> <9452079D1A51524AA5749AD23E003928085414@exch-mbx901.corp.cloudmark.com> In-Reply-To: <9452079D1A51524AA5749AD23E003928085414@exch-mbx901.corp.cloudmark.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [67.160.203.60] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Subject: Re: [marf] DISCUSS on draft-ietf-marf-dkim-reporting X-BeenThere: marf@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Message Abuse Report Format working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 12 Mar 2012 07:28:59 -0000 > -----Original Message----- > From: marf-bounces@ietf.org [mailto:marf-bounces@ietf.org] On Behalf Of M= urray S. Kucherawy > Sent: Sunday, March 11, 2012 9:44 PM > To: marf@ietf.org > Subject: Re: [marf] DISCUSS on draft-ietf-marf-dkim-reporting >=20 > > That seems somewhat orthogonal to unrecognized tags. If we add > > unrecognized tags, that's the default? I think unrecognized tags > > probably make sense so this draft doesn't have to be updated for each > > new tag that gets identified, but I'm still not understanding how it > > contributes to resolution of the discuss. >=20 > Me either, now that you mention it. I'll ask. Got a reply: He found the text ambiguous about whether the report is genera= ted per signature, or per tag within a signature that went awry somehow. The one-report-per-domain-per-message thing satisfies his concern and will = clear the DISCUSS. The other one is indeed orthogonal. I'd be fine with l= eaving it in, however, unless someone sees a problem with doing so. Any other comments or objections? If not, I'll post a -13 version in time = to beat the embargo late on Monday. -MSK From vesely@tana.it Mon Mar 12 01:30:21 2012 Return-Path: X-Original-To: marf@ietfa.amsl.com Delivered-To: marf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0D1DA21F869D for ; Mon, 12 Mar 2012 01:30:21 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.658 X-Spam-Level: X-Spam-Status: No, score=-4.658 tagged_above=-999 required=5 tests=[AWL=0.061, BAYES_00=-2.599, HELO_EQ_IT=0.635, HOST_EQ_IT=1.245, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 17oPIGBdklcz for ; Mon, 12 Mar 2012 01:30:20 -0700 (PDT) Received: from wmail.tana.it (wmail.tana.it [62.94.243.226]) by ietfa.amsl.com (Postfix) with ESMTP id 31E7D21F86AB for ; Mon, 12 Mar 2012 01:30:19 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=tana.it; s=test; t=1331541018; bh=gA5CZ+jKJQ+BJ52pg0XYBtODBoeTtF4bcR0hRy5YsBk=; l=1180; h=Message-ID:Date:From:MIME-Version:To:References:In-Reply-To: Content-Transfer-Encoding; b=b2ifG0btMTkd8bTFjGarorAYBt/0F8iYfimXQVI+OpD18201sGSrrJByJbSwYL7ap mMMHQdIXtDfEALIG12acqLT3lJULpZXGvu9fZJMjD6m7nBKbd0E45tCrC348VO7RWg 2IT1AeTKlJsWBJvHv5qDP3PCCqGF3NaPk/v0+Dts= Received: from [172.25.197.158] (pcale.tana [172.25.197.158]) (AUTH: CRAM-MD5 515, TLS: TLS1.0,256bits,RSA_AES_256_CBC_SHA1) by wmail.tana.it with ESMTPSA; Mon, 12 Mar 2012 09:30:18 +0100 id 00000000005DC045.000000004F5DB41A.000075CD Message-ID: <4F5DB41A.6050708@tana.it> Date: Mon, 12 Mar 2012 09:30:18 +0100 From: Alessandro Vesely User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:10.0.2) Gecko/20120216 Thunderbird/10.0.2 MIME-Version: 1.0 To: marf@ietf.org References: <9452079D1A51524AA5749AD23E0039280849A1@exch-mbx901.corp.cloudmark.com> <12446700.lUnqZU4BBd@scott-latitude-e6320> <9452079D1A51524AA5749AD23E003928085383@exch-mbx901.corp.cloudmark.com> <1538322.tiBbOOBC5l@scott-latitude-e6320> <9452079D1A51524AA5749AD23E003928085414@exch-mbx901.corp.cloudmark.com> <9452079D1A51524AA5749AD23E00392808567D@exch-mbx901.corp.cloudmark.com> In-Reply-To: <9452079D1A51524AA5749AD23E00392808567D@exch-mbx901.corp.cloudmark.com> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Subject: Re: [marf] DISCUSS on draft-ietf-marf-dkim-reporting X-BeenThere: marf@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Message Abuse Report Format working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 12 Mar 2012 08:30:21 -0000 On 12/Mar/12 08:28, Murray S. Kucherawy wrote: > > Got a reply: He found the text ambiguous about whether the report > is generated per signature, or per tag within a signature that went > awry somehow. > > The one-report-per-domain-per-message thing satisfies his concern > and will clear the DISCUSS. The correct clarification is one report per /signing/ domain per message. If a domain includes multiple signatures in a given message, they may get a report for each failed one. > The other one is indeed orthogonal. I'd be fine with leaving it in, > however, unless someone sees a problem with doing so. I agree unrecognized tags might be interesting, e.g. as a tool to monitor verifiers' adoption of new tags. However, if a domain decided to add such tag, there's nothing they can do about those reports, except encouraging verifiers to upgrade their software. Perhaps, it makes sense to keep "all" the default, but require rr=all:u to also get unrecognized tags reports. Would those reports need to be routed to a different team/script? Should they be tagged, say, Feedback-Type: auth-feedback, rather than auth-failure? Just fancying... From sklist@kitterman.com Mon Mar 12 04:01:48 2012 Return-Path: X-Original-To: marf@ietfa.amsl.com Delivered-To: marf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 80EF421F867E for ; Mon, 12 Mar 2012 04:01:48 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.57 X-Spam-Level: X-Spam-Status: No, score=-2.57 tagged_above=-999 required=5 tests=[AWL=0.029, BAYES_00=-2.599] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VjeOYNDKfGNA for ; Mon, 12 Mar 2012 04:01:47 -0700 (PDT) Received: from mailout03.controlledmail.com (mailout03.controlledmail.com [208.43.65.50]) by ietfa.amsl.com (Postfix) with ESMTP id 0973821F8683 for ; Mon, 12 Mar 2012 04:01:44 -0700 (PDT) Received: from mailout03.controlledmail.com (localhost [127.0.0.1]) by mailout03.controlledmail.com (Postfix) with ESMTP id ED193D04064; Mon, 12 Mar 2012 06:01:43 -0500 (CDT) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=kitterman.com; s=2007-00; t=1331550104; bh=SV0FxUY+ZJhKgcPrBzXJKzam9l3Q1G572LH+MWRGNC4=; h=References:In-Reply-To:MIME-Version:Content-Type: Content-Transfer-Encoding:Subject:From:Date:To:Message-ID; b=RU6UDgeJ8x1OoN2Jp5d6QnLOzN9kjwIOE3n2O1JSo+Ej+Y9RChRTxv39wFvsA7AYS oV5vG41Yke83a3y5TdWUqBNz9+lX89JUK1OdbeLQdwPLTtUNUI99UqxI7dwpblULNH /su+RtKPlUnHogMfh13fDgM6zsd5v41MsH43Ost0= Received: from [192.168.111.101] (static-72-81-252-21.bltmmd.fios.verizon.net [72.81.252.21]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mailout03.controlledmail.com (Postfix) with ESMTPSA id EB916D04005; Mon, 12 Mar 2012 06:01:42 -0500 (CDT) References: <9452079D1A51524AA5749AD23E0039280849A1@exch-mbx901.corp.cloudmark.com> <12446700.lUnqZU4BBd@scott-latitude-e6320> <9452079D1A51524AA5749AD23E003928085383@exch-mbx901.corp.cloudmark.com> <1538322.tiBbOOBC5l@scott-latitude-e6320> <9452079D1A51524AA5749AD23E003928085414@exch-mbx901.corp.cloudmark.com> <9452079D1A51524AA5749AD23E00392808567D@exch-mbx901.corp.cloudmark.com> <4F5DB41A.6050708@tana.it> User-Agent: K-9 Mail for Android In-Reply-To: <4F5DB41A.6050708@tana.it> MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit From: Scott Kitterman Date: Mon, 12 Mar 2012 07:01:48 -0400 To: marf@ietf.org Message-ID: X-AV-Checked: ClamAV using ClamSMTP Subject: Re: [marf] DISCUSS on draft-ietf-marf-dkim-reporting X-BeenThere: marf@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Message Abuse Report Format working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 12 Mar 2012 11:01:48 -0000 Alessandro Vesely wrote: >On 12/Mar/12 08:28, Murray S. Kucherawy wrote: >> >> Got a reply: He found the text ambiguous about whether the report >> is generated per signature, or per tag within a signature that went >> awry somehow. >> >> The one-report-per-domain-per-message thing satisfies his concern >> and will clear the DISCUSS. > >The correct clarification is one report per /signing/ domain per >message. If a domain includes multiple signatures in a given message, >they may get a report for each failed one. Since reports are generated based on the purported signing domain it doesn't matter either way. >> The other one is indeed orthogonal. I'd be fine with leaving it in, >> however, unless someone sees a problem with doing so. > >I agree unrecognized tags might be interesting, e.g. as a tool to >monitor verifiers' adoption of new tags. However, if a domain decided >to add such tag, there's nothing they can do about those reports, >except encouraging verifiers to upgrade their software. > >Perhaps, it makes sense to keep "all" the default, but require >rr=all:u to also get unrecognized tags reports. > >Would those reports need to be routed to a different team/script? > >Should they be tagged, say, Feedback-Type: auth-feedback, rather than >auth-failure? > >Just fancying... In the context of this draft, it must be about auth failure. If the signature verified, then it's something else. Absent a compelling reason (and I see no compelling reason), I think altering the definition of all is a mistake. Any future drafts that add new tags can update this one to extend the list off allowable tags (and thus the definition of all). I'd leave unknown tags out. Scott K From msk@cloudmark.com Mon Mar 12 06:54:42 2012 Return-Path: X-Original-To: marf@ietfa.amsl.com Delivered-To: marf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3B12321F86D7 for ; Mon, 12 Mar 2012 06:54:42 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.552 X-Spam-Level: X-Spam-Status: No, score=-102.552 tagged_above=-999 required=5 tests=[AWL=0.047, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PAogy-lXXgF3 for ; Mon, 12 Mar 2012 06:54:41 -0700 (PDT) Received: from ht1-outbound.cloudmark.com (ht1-outbound.cloudmark.com [72.5.239.25]) by ietfa.amsl.com (Postfix) with ESMTP id C4ECD21F86D0 for ; Mon, 12 Mar 2012 06:54:41 -0700 (PDT) Received: from EXCH-MBX901.corp.cloudmark.com ([fe80::addf:849a:f71c:4a82]) by EXCH-HTCAS901.corp.cloudmark.com ([fe80::2966:6846:8d89:4681%12]) with mapi id 14.01.0355.002; Mon, 12 Mar 2012 06:54:41 -0700 From: "Murray S. Kucherawy" To: "marf@ietf.org" Thread-Topic: [marf] DISCUSS on draft-ietf-marf-dkim-reporting Thread-Index: AQHM/6zrLcBagoAgEE6ctnFVhi4bqpZmc7mA//+VuMCAAHm3gP//jHuAgAB3hwD//47ToAAFt4pQABDfdgAAA2YEwA== Date: Mon, 12 Mar 2012 13:54:40 +0000 Message-ID: <9452079D1A51524AA5749AD23E003928085D5D@exch-mbx901.corp.cloudmark.com> References: <9452079D1A51524AA5749AD23E0039280849A1@exch-mbx901.corp.cloudmark.com> <12446700.lUnqZU4BBd@scott-latitude-e6320> <9452079D1A51524AA5749AD23E003928085383@exch-mbx901.corp.cloudmark.com> <1538322.tiBbOOBC5l@scott-latitude-e6320> <9452079D1A51524AA5749AD23E003928085414@exch-mbx901.corp.cloudmark.com> <9452079D1A51524AA5749AD23E00392808567D@exch-mbx901.corp.cloudmark.com> <4F5DB41A.6050708@tana.it> In-Reply-To: <4F5DB41A.6050708@tana.it> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [67.160.203.60] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Subject: Re: [marf] DISCUSS on draft-ietf-marf-dkim-reporting X-BeenThere: marf@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Message Abuse Report Format working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 12 Mar 2012 13:54:42 -0000 > -----Original Message----- > From: marf-bounces@ietf.org [mailto:marf-bounces@ietf.org] On Behalf Of A= lessandro Vesely > Sent: Monday, March 12, 2012 1:30 AM > To: marf@ietf.org > Subject: Re: [marf] DISCUSS on draft-ietf-marf-dkim-reporting >=20 > The correct clarification is one report per /signing/ domain per > message. If a domain includes multiple signatures in a given message, > they may get a report for each failed one. Yes, that's the change I'm proposing. > Perhaps, it makes sense to keep "all" the default, but require rr=3Dall:u > to also get unrecognized tags reports. That's not very "all" then... > Would those reports need to be routed to a different team/script? I sure hope not! > Should they be tagged, say, Feedback-Type: auth-feedback, rather than > auth-failure? It's way too late to try that now, I think. Bogus tags could indeed be a s= ign of attempts to confound verifiers, so I think for now they're fine to i= nclude as abuse reporting, the same as our various other possible requests. -MSK From msk@cloudmark.com Mon Mar 12 06:57:50 2012 Return-Path: X-Original-To: marf@ietfa.amsl.com Delivered-To: marf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CBDFF21E8024 for ; Mon, 12 Mar 2012 06:57:50 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.553 X-Spam-Level: X-Spam-Status: No, score=-102.553 tagged_above=-999 required=5 tests=[AWL=0.046, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Fr7aphHKmqLF for ; Mon, 12 Mar 2012 06:57:50 -0700 (PDT) Received: from ht1-outbound.cloudmark.com (ht1-outbound.cloudmark.com [72.5.239.25]) by ietfa.amsl.com (Postfix) with ESMTP id 5C23321E8021 for ; Mon, 12 Mar 2012 06:57:50 -0700 (PDT) Received: from EXCH-MBX901.corp.cloudmark.com ([fe80::addf:849a:f71c:4a82]) by EXCH-HTCAS901.corp.cloudmark.com ([fe80::2966:6846:8d89:4681%12]) with mapi id 14.01.0355.002; Mon, 12 Mar 2012 06:57:49 -0700 From: "Murray S. Kucherawy" To: "marf@ietf.org" Thread-Topic: [marf] DISCUSS on draft-ietf-marf-dkim-reporting Thread-Index: AQHM/6zrLcBagoAgEE6ctnFVhi4bqpZmc7mA//+VuMCAAHm3gP//jHuAgAB3hwD//47ToAAFt4pQABDfdgAABUqEAAAImRyw Date: Mon, 12 Mar 2012 13:57:49 +0000 Message-ID: <9452079D1A51524AA5749AD23E003928085D79@exch-mbx901.corp.cloudmark.com> References: <9452079D1A51524AA5749AD23E0039280849A1@exch-mbx901.corp.cloudmark.com> <12446700.lUnqZU4BBd@scott-latitude-e6320> <9452079D1A51524AA5749AD23E003928085383@exch-mbx901.corp.cloudmark.com> <1538322.tiBbOOBC5l@scott-latitude-e6320> <9452079D1A51524AA5749AD23E003928085414@exch-mbx901.corp.cloudmark.com> <9452079D1A51524AA5749AD23E00392808567D@exch-mbx901.corp.cloudmark.com> <4F5DB41A.6050708@tana.it> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [67.160.203.60] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Subject: Re: [marf] DISCUSS on draft-ietf-marf-dkim-reporting X-BeenThere: marf@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Message Abuse Report Format working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 12 Mar 2012 13:57:50 -0000 > -----Original Message----- > From: marf-bounces@ietf.org [mailto:marf-bounces@ietf.org] On Behalf Of S= cott Kitterman > Sent: Monday, March 12, 2012 4:02 AM > To: marf@ietf.org > Subject: Re: [marf] DISCUSS on draft-ietf-marf-dkim-reporting >=20 > Absent a compelling reason (and I see no compelling reason), I think > altering the definition of all is a mistake. Any future drafts that add > new tags can update this one to extend the list off allowable tags (and > thus the definition of all). I'd leave unknown tags out. I think if that's the case, then "all" changes meanings depending on the ve= rsion being implemented, and that's begging for either a "v=3D" tag in the = _report record, or the removal of "all" and no default so the full set has = to be listed explicitly. Given the choice, I'd opt for the latter. -MSK From sklist@kitterman.com Mon Mar 12 07:00:07 2012 Return-Path: X-Original-To: marf@ietfa.amsl.com Delivered-To: marf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 86F5921E8011 for ; Mon, 12 Mar 2012 07:00:07 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.571 X-Spam-Level: X-Spam-Status: No, score=-2.571 tagged_above=-999 required=5 tests=[AWL=0.028, BAYES_00=-2.599] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id p2BYOPE7pdls for ; Mon, 12 Mar 2012 07:00:06 -0700 (PDT) Received: from mailout02.controlledmail.com (mailout02.controlledmail.com [72.81.252.18]) by ietfa.amsl.com (Postfix) with ESMTP id 7CE8621E8021 for ; Mon, 12 Mar 2012 07:00:05 -0700 (PDT) Received: from mailout02.controlledmail.com (localhost [127.0.0.1]) by mailout02.controlledmail.com (Postfix) with ESMTP id 27B8920E40D0; Mon, 12 Mar 2012 10:00:04 -0400 (EDT) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=kitterman.com; s=2007-00; t=1331560804; bh=Uk+WAyqAchJJMB27JxJbhNIoUAfbYsXrZwhlzcAVJmE=; h=From:To:Subject:Date:Message-ID:In-Reply-To:References: MIME-Version:Content-Transfer-Encoding:Content-Type; b=e9Fyqfg8d6OxoK+gP8WlVA+VjHG2kvK41SF5IAP9sl6ch+EbIzhsFxqF7wtGUhmFv YXwsGB7F8q7cHqirRNcKkxb85z5tfDsiHXrS7IweL/M7R+NLD9LolNMRkECzeA5aiK tOvpxQHbr7FdHvRWRSq+x5iANcb3jzVDybE+lITQ= Received: from scott-latitude-e6320.localnet (static-72-81-252-21.bltmmd.fios.verizon.net [72.81.252.21]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mailout02.controlledmail.com (Postfix) with ESMTPSA id 0788620E40BD; Mon, 12 Mar 2012 10:00:03 -0400 (EDT) From: Scott Kitterman To: marf@ietf.org Date: Mon, 12 Mar 2012 10:00 -0400 Message-ID: <2153706.Blz1FpIVem@scott-latitude-e6320> User-Agent: KMail/4.7.3 (Linux/3.0.0-16-generic-pae; KDE/4.7.4; i686; ; ) In-Reply-To: <9452079D1A51524AA5749AD23E003928085D79@exch-mbx901.corp.cloudmark.com> References: <9452079D1A51524AA5749AD23E0039280849A1@exch-mbx901.corp.cloudmark.com> <9452079D1A51524AA5749AD23E003928085D79@exch-mbx901.corp.cloudmark.com> MIME-Version: 1.0 Content-Transfer-Encoding: 7Bit Content-Type: text/plain; charset="us-ascii" X-AV-Checked: ClamAV using ClamSMTP Subject: Re: [marf] DISCUSS on draft-ietf-marf-dkim-reporting X-BeenThere: marf@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Message Abuse Report Format working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 12 Mar 2012 14:00:07 -0000 On Monday, March 12, 2012 01:57:49 PM Murray S. Kucherawy wrote: > > -----Original Message----- > > From: marf-bounces@ietf.org [mailto:marf-bounces@ietf.org] On Behalf Of > > Scott Kitterman Sent: Monday, March 12, 2012 4:02 AM > > To: marf@ietf.org > > Subject: Re: [marf] DISCUSS on draft-ietf-marf-dkim-reporting > > > > Absent a compelling reason (and I see no compelling reason), I think > > altering the definition of all is a mistake. Any future drafts that add > > new tags can update this one to extend the list off allowable tags (and > > thus the definition of all). I'd leave unknown tags out. > > I think if that's the case, then "all" changes meanings depending on the > version being implemented, and that's begging for either a "v=" tag in the > _report record, or the removal of "all" and no default so the full set has > to be listed explicitly. > > Given the choice, I'd opt for the latter. Option 3: Leave all as the default and say to ignore unknown tags. Scott K From msk@cloudmark.com Mon Mar 12 07:02:03 2012 Return-Path: X-Original-To: marf@ietfa.amsl.com Delivered-To: marf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7C36221E802A for ; Mon, 12 Mar 2012 07:02:03 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.554 X-Spam-Level: X-Spam-Status: No, score=-102.554 tagged_above=-999 required=5 tests=[AWL=0.045, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PMdMWma2mwFz for ; Mon, 12 Mar 2012 07:02:03 -0700 (PDT) Received: from ht2-outbound.cloudmark.com (ht2-outbound.cloudmark.com [72.5.239.26]) by ietfa.amsl.com (Postfix) with ESMTP id F326E21E8024 for ; Mon, 12 Mar 2012 07:02:02 -0700 (PDT) Received: from EXCH-MBX901.corp.cloudmark.com ([fe80::addf:849a:f71c:4a82]) by exch-htcas902.corp.cloudmark.com ([fe80::e82a:4f80:7f44:eaf7%12]) with mapi id 14.01.0355.002; Mon, 12 Mar 2012 07:02:02 -0700 From: "Murray S. Kucherawy" To: "marf@ietf.org" Thread-Topic: [marf] DISCUSS on draft-ietf-marf-dkim-reporting Thread-Index: AQHM/6zrLcBagoAgEE6ctnFVhi4bqpZmc7mA//+VuMCAAHm3gP//jHuAgAB3hwD//47ToAAFt4pQABDfdgAABUqEAAAImRyw///tAQCAAHUZIA== Date: Mon, 12 Mar 2012 14:02:01 +0000 Message-ID: <9452079D1A51524AA5749AD23E003928085DF0@exch-mbx901.corp.cloudmark.com> References: <9452079D1A51524AA5749AD23E0039280849A1@exch-mbx901.corp.cloudmark.com> <9452079D1A51524AA5749AD23E003928085D79@exch-mbx901.corp.cloudmark.com> <2153706.Blz1FpIVem@scott-latitude-e6320> In-Reply-To: <2153706.Blz1FpIVem@scott-latitude-e6320> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [67.160.203.60] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Subject: Re: [marf] DISCUSS on draft-ietf-marf-dkim-reporting X-BeenThere: marf@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Message Abuse Report Format working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 12 Mar 2012 14:02:03 -0000 > -----Original Message----- > From: marf-bounces@ietf.org [mailto:marf-bounces@ietf.org] On Behalf Of S= cott Kitterman > Sent: Monday, March 12, 2012 7:00 AM > To: marf@ietf.org > Subject: Re: [marf] DISCUSS on draft-ietf-marf-dkim-reporting >=20 > Option 3: Leave all as the default and say to ignore unknown tags. So define "all" to mean "all but not u"? Or something like "If 'all' is listed first, anything else listed means 'al= l except...'"? From sklist@kitterman.com Mon Mar 12 07:40:23 2012 Return-Path: X-Original-To: marf@ietfa.amsl.com Delivered-To: marf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8DE7D21F8843 for ; Mon, 12 Mar 2012 07:40:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.571 X-Spam-Level: X-Spam-Status: No, score=-2.571 tagged_above=-999 required=5 tests=[AWL=0.028, BAYES_00=-2.599] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jNV-JKFrol80 for ; Mon, 12 Mar 2012 07:40:23 -0700 (PDT) Received: from mailout02.controlledmail.com (mailout02.controlledmail.com [72.81.252.18]) by ietfa.amsl.com (Postfix) with ESMTP id DF88621F8842 for ; Mon, 12 Mar 2012 07:40:22 -0700 (PDT) Received: from mailout02.controlledmail.com (localhost [127.0.0.1]) by mailout02.controlledmail.com (Postfix) with ESMTP id 5D3DE20E40BD; Mon, 12 Mar 2012 10:40:22 -0400 (EDT) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=kitterman.com; s=2007-00; t=1331563222; bh=loFioLYm27YGYj85l8w/rDhUq4Xss786OKyEokJh2vo=; h=From:To:Subject:Date:Message-ID:In-Reply-To:References: MIME-Version:Content-Transfer-Encoding:Content-Type; b=EeLUfMSesiFiUnmtj17d2ZmD6CbnnFTtsp+FVeuBx2dRTnsu99j8051kLg1grvhiN EAgxhA5aF+w55OJWPPpRH7qB6scf82jU0DR23QKO76ud6+EB38GRJ8A//dKHO7T0VM 62AyEWnSDgm9vA6WABXFe5c3Yiia4slexbLOdQl0= Received: from scott-latitude-e6320.localnet (static-72-81-252-21.bltmmd.fios.verizon.net [72.81.252.21]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mailout02.controlledmail.com (Postfix) with ESMTPSA id 426D620E40A4; Mon, 12 Mar 2012 10:40:22 -0400 (EDT) From: Scott Kitterman To: marf@ietf.org Date: Mon, 12 Mar 2012 10:40:21 -0400 Message-ID: <1946445.v27AyPRIdi@scott-latitude-e6320> User-Agent: KMail/4.7.3 (Linux/3.0.0-16-generic-pae; KDE/4.7.4; i686; ; ) In-Reply-To: <9452079D1A51524AA5749AD23E003928085DF0@exch-mbx901.corp.cloudmark.com> References: <9452079D1A51524AA5749AD23E0039280849A1@exch-mbx901.corp.cloudmark.com> <2153706.Blz1FpIVem@scott-latitude-e6320> <9452079D1A51524AA5749AD23E003928085DF0@exch-mbx901.corp.cloudmark.com> MIME-Version: 1.0 Content-Transfer-Encoding: 7Bit Content-Type: text/plain; charset="us-ascii" X-AV-Checked: ClamAV using ClamSMTP Subject: Re: [marf] DISCUSS on draft-ietf-marf-dkim-reporting X-BeenThere: marf@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Message Abuse Report Format working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 12 Mar 2012 14:40:23 -0000 On Monday, March 12, 2012 02:02:01 PM Murray S. Kucherawy wrote: > > -----Original Message----- > > From: marf-bounces@ietf.org [mailto:marf-bounces@ietf.org] On Behalf Of > > Scott Kitterman Sent: Monday, March 12, 2012 7:00 AM > > To: marf@ietf.org > > Subject: Re: [marf] DISCUSS on draft-ietf-marf-dkim-reporting > > > > Option 3: Leave all as the default and say to ignore unknown tags. > > So define "all" to mean "all but not u"? > > Or something like "If 'all' is listed first, anything else listed means 'all > except...'"? I'd been thinking all means all known. Unless we can specify processing for unknown tags in advance, I think it's the best we can do. Scott K From msk@cloudmark.com Mon Mar 12 08:42:32 2012 Return-Path: X-Original-To: marf@ietfa.amsl.com Delivered-To: marf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 648EA21F867A for ; Mon, 12 Mar 2012 08:42:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.603 X-Spam-Level: X-Spam-Status: No, score=-102.603 tagged_above=-999 required=5 tests=[AWL=-0.004, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Sj+OEystR9g8 for ; Mon, 12 Mar 2012 08:42:31 -0700 (PDT) Received: from ht1-outbound.cloudmark.com (ht1-outbound.cloudmark.com [72.5.239.25]) by ietfa.amsl.com (Postfix) with ESMTP id E421921F8469 for ; Mon, 12 Mar 2012 08:42:31 -0700 (PDT) Received: from EXCH-MBX901.corp.cloudmark.com ([fe80::addf:849a:f71c:4a82]) by EXCH-HTCAS901.corp.cloudmark.com ([fe80::2966:6846:8d89:4681%12]) with mapi id 14.01.0355.002; Mon, 12 Mar 2012 08:42:31 -0700 From: "Murray S. Kucherawy" To: "marf@ietf.org" Thread-Topic: [marf] DISCUSS on draft-ietf-marf-dkim-reporting Thread-Index: AQHM/6zrLcBagoAgEE6ctnFVhi4bqpZmc7mA//+VuMCAAHm3gP//jHuAgAB3hwD//47ToAAFt4pQABDfdgAABUqEAAAImRyw///tAQCAAHUZIP//li2AgABkMCA= Date: Mon, 12 Mar 2012 15:42:30 +0000 Message-ID: <9452079D1A51524AA5749AD23E003928086025@exch-mbx901.corp.cloudmark.com> References: <9452079D1A51524AA5749AD23E0039280849A1@exch-mbx901.corp.cloudmark.com> <2153706.Blz1FpIVem@scott-latitude-e6320> <9452079D1A51524AA5749AD23E003928085DF0@exch-mbx901.corp.cloudmark.com> <1946445.v27AyPRIdi@scott-latitude-e6320> In-Reply-To: <1946445.v27AyPRIdi@scott-latitude-e6320> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [172.20.2.121] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Subject: Re: [marf] DISCUSS on draft-ietf-marf-dkim-reporting X-BeenThere: marf@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Message Abuse Report Format working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 12 Mar 2012 15:42:32 -0000 > -----Original Message----- > From: marf-bounces@ietf.org [mailto:marf-bounces@ietf.org] On Behalf Of S= cott Kitterman > Sent: Monday, March 12, 2012 7:40 AM > To: marf@ietf.org > Subject: Re: [marf] DISCUSS on draft-ietf-marf-dkim-reporting >=20 > > > Option 3: Leave all as the default and say to ignore unknown tags. > > > > So define "all" to mean "all but not u"? > > > > Or something like "If 'all' is listed first, anything else listed > > means 'all except...'"? >=20 > I'd been thinking all means all known. Unless we can specify > processing for unknown tags in advance, I think it's the best we can > do. Ah, I thought you meant "ignore unknown tags" means "ignore 'u'", not "igno= re rr=3D elements you don't know about". We already say the latter, so I think we're in agreement. -MSK From msk@cloudmark.com Mon Mar 12 08:55:56 2012 Return-Path: X-Original-To: marf@ietfa.amsl.com Delivered-To: marf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3B73B21E8059 for ; Mon, 12 Mar 2012 08:55:56 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.603 X-Spam-Level: X-Spam-Status: No, score=-102.603 tagged_above=-999 required=5 tests=[AWL=-0.004, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZjTxk1LQBoKp for ; Mon, 12 Mar 2012 08:55:55 -0700 (PDT) Received: from ht2-outbound.cloudmark.com (ht2-outbound.cloudmark.com [72.5.239.26]) by ietfa.amsl.com (Postfix) with ESMTP id 6916721F871C for ; Mon, 12 Mar 2012 08:55:55 -0700 (PDT) Received: from EXCH-MBX901.corp.cloudmark.com ([fe80::addf:849a:f71c:4a82]) by exch-htcas902.corp.cloudmark.com ([fe80::e82a:4f80:7f44:eaf7%12]) with mapi id 14.01.0355.002; Mon, 12 Mar 2012 08:55:54 -0700 From: "Murray S. Kucherawy" To: "marf@ietf.org" Thread-Topic: [marf] DISCUSS on draft-ietf-marf-dkim-reporting Thread-Index: AQHM/6zrLcBagoAgEE6ctnFVhi4bqpZmc7mA//+VuMCAAHm3gP//jHuAgAB3hwD//47ToAAFt4pQABDfdgAABUqEAAAImRyw///tAQCAAHUZIP//li2AgABkMCCAAMTVgA== Date: Mon, 12 Mar 2012 15:55:53 +0000 Message-ID: <9452079D1A51524AA5749AD23E00392808609B@exch-mbx901.corp.cloudmark.com> References: <9452079D1A51524AA5749AD23E0039280849A1@exch-mbx901.corp.cloudmark.com> <2153706.Blz1FpIVem@scott-latitude-e6320> <9452079D1A51524AA5749AD23E003928085DF0@exch-mbx901.corp.cloudmark.com> <1946445.v27AyPRIdi@scott-latitude-e6320> <9452079D1A51524AA5749AD23E003928086025@exch-mbx901.corp.cloudmark.com> In-Reply-To: <9452079D1A51524AA5749AD23E003928086025@exch-mbx901.corp.cloudmark.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [172.20.2.121] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Cc: Stephen Farrell Subject: Re: [marf] DISCUSS on draft-ietf-marf-dkim-reporting X-BeenThere: marf@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Message Abuse Report Format working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 12 Mar 2012 15:55:56 -0000 The diff of what's included in -13 compared to what's posted now can be see= n at http://www.blackops.org/~msk/marf-dkim.html. Please let me know if th= ere are any concerns about this before about 16:00 PDT today, at which time= I'll prepare and post the revision. Thanks, -MSK From stephen.farrell@cs.tcd.ie Mon Mar 12 08:59:46 2012 Return-Path: X-Original-To: marf@ietfa.amsl.com Delivered-To: marf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A4AA221E8066 for ; Mon, 12 Mar 2012 08:59:46 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.599 X-Spam-Level: X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id i2uXRy3k2haZ for ; Mon, 12 Mar 2012 08:59:46 -0700 (PDT) Received: from scss.tcd.ie (hermes.scss.tcd.ie [IPv6:2001:770:10:200:889f:cdff:fe8d:ccd2]) by ietfa.amsl.com (Postfix) with ESMTP id D13C221E8063 for ; Mon, 12 Mar 2012 08:59:45 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by hermes.scss.tcd.ie (Postfix) with ESMTP id 0DE9E171C8D; Mon, 12 Mar 2012 15:59:44 +0000 (GMT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cs.tcd.ie; h= content-transfer-encoding:content-type:in-reply-to:references :subject:mime-version:user-agent:from:date:message-id:received :received:x-virus-scanned; s=cs; t=1331567983; bh=qOzCY+LqATKkIz oCRbKn1CqRiq7M35lDffz575xuSM4=; b=WgSgsJpuUuNUf9EscHnejTYD3iKvJ0 oxkTbZ2i4kxMSWvsJ0fMwELvJ+2wDLiT98C8pqWRRofff310d9w1LmOz/UzEMSj1 xB13nueAawZ4sxPrWTwcP37Fo81taHrDXaWeIyv9UO7SuNTQ/iPnzlbtvDU/ie4j Evd5rcINaLbdp+hzBGkwy1abH2Mp4fnZwKZBywtVkv7usyHWQ59ihT4xO+IcasFW Fk2tDGL+9yuNAPtt8qnLVlYM7r/GoCjwJU1zQrp+vwMYluJsUzE5CZD2UGFW+LoZ KkS+IGTPScwGDoZo0Oab4YnDPkE823wGwM3Y+KmNqyN93kFED5CTsz7g== X-Virus-Scanned: Debian amavisd-new at scss.tcd.ie Received: from scss.tcd.ie ([127.0.0.1]) by localhost (scss.tcd.ie [127.0.0.1]) (amavisd-new, port 10027) with ESMTP id 6BCTMj5dgQCf; Mon, 12 Mar 2012 15:59:43 +0000 (GMT) Received: from [10.226.16.36] (unknown [194.230.159.100]) by smtp.scss.tcd.ie (Postfix) with ESMTPSA id 49F1E171C8C; Mon, 12 Mar 2012 15:59:41 +0000 (GMT) Message-ID: <4F5E1D69.1080206@cs.tcd.ie> Date: Mon, 12 Mar 2012 15:59:37 +0000 From: Stephen Farrell User-Agent: Mozilla/5.0 (X11; Linux i686 on x86_64; rv:10.0.2) Gecko/20120216 Thunderbird/10.0.2 MIME-Version: 1.0 To: "Murray S. Kucherawy" References: <9452079D1A51524AA5749AD23E0039280849A1@exch-mbx901.corp.cloudmark.com> <2153706.Blz1FpIVem@scott-latitude-e6320> <9452079D1A51524AA5749AD23E003928085DF0@exch-mbx901.corp.cloudmark.com> <1946445.v27AyPRIdi@scott-latitude-e6320> <9452079D1A51524AA5749AD23E003928086025@exch-mbx901.corp.cloudmark.com> <9452079D1A51524AA5749AD23E00392808609B@exch-mbx901.corp.cloudmark.com> In-Reply-To: <9452079D1A51524AA5749AD23E00392808609B@exch-mbx901.corp.cloudmark.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Mailman-Approved-At: Mon, 12 Mar 2012 09:00:59 -0700 Cc: "marf@ietf.org" Subject: Re: [marf] DISCUSS on draft-ietf-marf-dkim-reporting X-BeenThere: marf@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Message Abuse Report Format working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 12 Mar 2012 15:59:46 -0000 Hi Murray, That looks great and fine for me to clear. Thanks S On 03/12/2012 03:55 PM, Murray S. Kucherawy wrote: > The diff of what's included in -13 compared to what's posted now can be seen at http://www.blackops.org/~msk/marf-dkim.html. Please let me know if there are any concerns about this before about 16:00 PDT today, at which time I'll prepare and post the revision. > > Thanks, > -MSK From sklist@kitterman.com Mon Mar 12 09:42:22 2012 Return-Path: X-Original-To: marf@ietfa.amsl.com Delivered-To: marf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 77B5D21E805F for ; Mon, 12 Mar 2012 09:42:22 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.971 X-Spam-Level: X-Spam-Status: No, score=-1.971 tagged_above=-999 required=5 tests=[AWL=-0.573, BAYES_00=-2.599, HTML_MESSAGE=0.001, J_CHICKENPOX_21=0.6, J_CHICKENPOX_210=0.6] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XvAtmxphphV7 for ; Mon, 12 Mar 2012 09:42:20 -0700 (PDT) Received: from mailout02.controlledmail.com (mailout02.controlledmail.com [72.81.252.18]) by ietfa.amsl.com (Postfix) with ESMTP id 84E7721E8063 for ; Mon, 12 Mar 2012 09:42:19 -0700 (PDT) Received: from mailout02.controlledmail.com (localhost [127.0.0.1]) by mailout02.controlledmail.com (Postfix) with ESMTP id B916220E40BD; Mon, 12 Mar 2012 12:42:18 -0400 (EDT) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=kitterman.com; s=2007-00; t=1331570538; bh=UfGSY7rPoCuAWtKV/NalyzcVR8Acb4INBHpHK8Vb04I=; h=From:To:Cc:Subject:Date:Message-ID:MIME-Version:Content-Type: Content-Transfer-Encoding; b=K2PKiM5foCjXEdQahUlxPJGNUgq3mAvPSDnNTGuTLCRvnjFYHV0HNSqj8SzYvB5zd 0+NJBCkzcalVKit0F5V/7RjHVD1e2WcComkltubv8KWebyYat74AdaUWGEQgolVWYH e1+0d4Cc3Q9ghZYLtByDojbE0QUhBol9PoFwqgj4= Received: from scott-latitude-e6320.localnet (static-72-81-252-21.bltmmd.fios.verizon.net [72.81.252.21]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mailout02.controlledmail.com (Postfix) with ESMTPSA id 994DE20E40A4; Mon, 12 Mar 2012 12:42:18 -0400 (EDT) From: Scott Kitterman To: "marf@ietf.org" Date: Mon, 12 Mar 2012 12:42:18 -0400 Message-ID: <1510565.gq9udAEDqC@scott-latitude-e6320> User-Agent: KMail/4.7.3 (Linux/3.0.0-16-generic-pae; KDE/4.7.4; i686; ; ) MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="nextPart2229264.EnmBFDsLcg" Content-Transfer-Encoding: 7Bit X-AV-Checked: ClamAV using ClamSMTP Cc: Robert Sparks Subject: [marf] draft-ietf-marf-spf-reporting based on IETF Last Call comments X-BeenThere: marf@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Message Abuse Report Format working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 12 Mar 2012 16:42:22 -0000 --nextPart2229264.EnmBFDsLcg Content-Transfer-Encoding: 7Bit Content-Type: text/plain; charset="us-ascii" Here is the diff from the currently publised draft. Unless there is objection, I'll upload this one a bit later today. Scott K --nextPart2229264.EnmBFDsLcg Content-Disposition: attachment; filename="draft-ietf-marf-spf-reporting-09-from-8.diff.html" Content-Transfer-Encoding: 7Bit Content-Type: text/html; charset="UTF-8"; name="draft-ietf-marf-spf-reporting-09-from-8.diff.html" Diff: draft-ietf-marf-spf-reporting-08.txt - draft-ietf-marf-spf-reporting-09.txt
 draft-ietf-marf-spf-reporting-08.txt   draft-ietf-marf-spf-reporting-09.txt 
MARF Working Group S. Kitterman MARF Working Group S. Kitterman
Internet-Draft Agari Data, Inc. Internet-Draft Agari
Updates: 4408 (if approved) February 28, 2012 Updates: 4408 (if approved) March 12, 2012
Intended status: Standards Track Intended status: Standards Track
Expires: August 31, 2012 Expires: September 13, 2012
SPF Authentication Failure Reporting using the Abuse Report Format SPF Authentication Failure Reporting using the Abuse Report Format
draft-ietf-marf-spf-reporting-08 draft-ietf-marf-spf-reporting-09
Abstract Abstract
This memo presents extensions to the Abuse Reporting Format (ARF), This memo presents extensions to the Abuse Reporting Format (ARF),
and Sender Policy Framework (SPF) specifications to allow for and Sender Policy Framework (SPF) specifications to allow for
detailed reporting of message authentication failures in an on-demand detailed reporting of message authentication failures in an on-demand
fashion. fashion.
This memo updates RFC4408 by providing an IANA registry for SPF This memo updates RFC4408 by providing an IANA registry for SPF
modifiers. modifiers.
skipping to change at page 1, line 37 skipping to change at page 1, line 37
Internet-Drafts are working documents of the Internet Engineering Internet-Drafts are working documents of the Internet Engineering
Task Force (IETF). Note that other groups may also distribute Task Force (IETF). Note that other groups may also distribute
working documents as Internet-Drafts. The list of current Internet- working documents as Internet-Drafts. The list of current Internet-
Drafts is at http://datatracker.ietf.org/drafts/current/. Drafts is at http://datatracker.ietf.org/drafts/current/.
Internet-Drafts are draft documents valid for a maximum of six months Internet-Drafts are draft documents valid for a maximum of six months
and may be updated, replaced, or obsoleted by other documents at any and may be updated, replaced, or obsoleted by other documents at any
time. It is inappropriate to use Internet-Drafts as reference time. It is inappropriate to use Internet-Drafts as reference
material or to cite them other than as "work in progress." material or to cite them other than as "work in progress."
This Internet-Draft will expire on August 31, 2012. This Internet-Draft will expire on September 13, 2012.
Copyright Notice Copyright Notice
Copyright (c) 2012 IETF Trust and the persons identified as the Copyright (c) 2012 IETF Trust and the persons identified as the
document authors. All rights reserved. document authors. All rights reserved.
This document is subject to BCP 78 and the IETF Trust's Legal This document is subject to BCP 78 and the IETF Trust's Legal
Provisions Relating to IETF Documents Provisions Relating to IETF Documents
(http://trustee.ietf.org/license-info) in effect on the date of (http://trustee.ietf.org/license-info) in effect on the date of
publication of this document. Please review these documents publication of this document. Please review these documents
skipping to change at page 2, line 20 skipping to change at page 2, line 20
1. Introduction . . . . . . . . . . . . . . . . . . . . . . . . . 3 1. Introduction . . . . . . . . . . . . . . . . . . . . . . . . . 3
2. Definitions . . . . . . . . . . . . . . . . . . . . . . . . . 4 2. Definitions . . . . . . . . . . . . . . . . . . . . . . . . . 4
2.1. Keywords . . . . . . . . . . . . . . . . . . . . . . . . . 4 2.1. Keywords . . . . . . . . . . . . . . . . . . . . . . . . . 4
2.2. Imported Definitions . . . . . . . . . . . . . . . . . . . 4 2.2. Imported Definitions . . . . . . . . . . . . . . . . . . . 4
3. Optional Reporting Address for SPF . . . . . . . . . . . . . . 5 3. Optional Reporting Address for SPF . . . . . . . . . . . . . . 5
4. Requested Reports . . . . . . . . . . . . . . . . . . . . . . 7 4. Requested Reports . . . . . . . . . . . . . . . . . . . . . . 7
4.1. Requested Reports for SPF Failures . . . . . . . . . . . . 7 4.1. Requested Reports for SPF Failures . . . . . . . . . . . . 7
5. IANA Considerations . . . . . . . . . . . . . . . . . . . . . 8 5. IANA Considerations . . . . . . . . . . . . . . . . . . . . . 8
5.1. SPF Modifier Registration . . . . . . . . . . . . . . . . 8 5.1. SPF Modifier Registration . . . . . . . . . . . . . . . . 8
6. Security Considerations . . . . . . . . . . . . . . . . . . . 9 6. Security Considerations . . . . . . . . . . . . . . . . . . . 9
6.1. Inherited Considerations . . . . . . . . . . . . . . . . . 9 6.1. Identity Selection . . . . . . . . . . . . . . . . . . . . 9
6.2. Additional forgery considertion . . . . . . . . . . . . . 9 6.2. Report Volume . . . . . . . . . . . . . . . . . . . . . . 9
7. References . . . . . . . . . . . . . . . . . . . . . . . . . . 10 7. References . . . . . . . . . . . . . . . . . . . . . . . . . . 10
7.1. Normative References . . . . . . . . . . . . . . . . . . . 10 7.1. Normative References . . . . . . . . . . . . . . . . . . . 10
7.2. Informative References . . . . . . . . . . . . . . . . . . 10 7.2. Informative References . . . . . . . . . . . . . . . . . . 10
Appendix A. Acknowledgements . . . . . . . . . . . . . . . . . . 11 Appendix A. Acknowledgements . . . . . . . . . . . . . . . . . . 11
Appendix B. Examples . . . . . . . . . . . . . . . . . . . . . . 12 Appendix B. Examples . . . . . . . . . . . . . . . . . . . . . . 12
B.1. SPF DNS record for domain that sends no mail, but B.1. SPF DNS record for domain that sends no mail, but
requests reports . . . . . . . . . . . . . . . . . . . . . 12 requests reports . . . . . . . . . . . . . . . . . . . . . 12
B.2. Minimal SPF DNS record change to add a reporting B.2. Minimal SPF DNS record change to add a reporting
address . . . . . . . . . . . . . . . . . . . . . . . . . 12 address . . . . . . . . . . . . . . . . . . . . . . . . . 12
B.3. SPF DNS record with reporting address, report B.3. SPF DNS record with reporting address, report
skipping to change at page 5, line 7 skipping to change at page 5, line 7
2.2. Imported Definitions 2.2. Imported Definitions
The ABNF token "qp-section" is defined in [MIME]. The ABNF token "qp-section" is defined in [MIME].
"local-part" is defined in [MAIL]. "local-part" is defined in [MAIL].
"addr-spec" is defined in [MAIL]. "addr-spec" is defined in [MAIL].
3. Optional Reporting Address for SPF 3. Optional Reporting Address for SPF
There exist cases in which a domain name owner employing [SPF] for There exist cases in which an ADministrative Management Domain (ADMD)
announcing sending practices may want to know when messages are (see [EMAIL-ARCH]) employing [SPF] for announcing sending practices
received via unauthorized routing. Currently there is no such method may want to know when messages are received via unauthorized routing.
defined in conjunction with standardized approaches such as [ARF]. Currently there is no such method defined in conjunction with
Similar information can be gathered using a specially crafted [SPF] standardized approaches such as [ARF]. Similar information can be
record and a special DNS server to track [SPF] record lookups. gathered using a specially crafted [SPF] record and a special DNS
server to track [SPF] record lookups.
This document defines the following optional "modifier" (as defined This document defines the following optional "modifier" (as defined
in Section 4.6.1 of [SPF]) to SPF records, using the form defined in in Section 4.6.1 of [SPF]) to SPF records, using the form defined in
that specification: that specification:
ra= Reporting Address (plain-text; OPTIONAL; no default). MUST be a ra= Reporting Address (plain-text; OPTIONAL; no default). MUST be a
local-part (see Section 3.4.1 of [MAIL]) specifying an e-mail local-part (see Section 3.4.1 of [MAIL]) specifying an e-mail
address to which a report SHOULD be sent when mail claiming to be address to which a report SHOULD be sent when mail claiming to be
from this domain (see Section 2.4 of [SPF] for a description of from this domain (see Section 2.4 of [SPF] for a description of
how domains are identified for SPF checks) has failed the how domains are identified for SPF checks) has failed the
evaluation algorithm described in [SPF], in particular because a evaluation algorithm described in [SPF], in particular because a
message arrived via an unauthorized route. To generate a complete message arrived via an unauthorized route. To generate a complete
address to which the report is sent, the verifier simply appends address to which the report is sent, the verifier simply appends
to this value an "@" followed by the SPF domain per paragraph 4.1 to this value an "@" followed by the SPF-compliant domain per
of [SPF]. ra= modifiers in a record that was reached by following paragraph 4.1 of [SPF]. ra= modifiers in a record that was reached
an include: mechanism MUST be ignored. by following an include: mechanism MUST be ignored.
ABNF: ABNF:
spf-report-tag = %x72.61 "=" qp-section spf-report-tag = %x72.61 "=" qp-section
rp= Requested Report Percentage (plain-text; OPTIONAL; default is rp= Requested Report Percentage (plain-text; OPTIONAL; default is
"100"). The value is an integer from 0 to 100 inclusive that "100"). The value is an integer from 0 to 100 inclusive that
indicates what percentage of incidents of SPF failures, selected indicates what percentage of incidents of SPF failures, selected
at random, are to cause reports to be generated. The report at random, are to cause reports to be generated. The report
generator SHOULD NOT issue reports for more than the requested generator SHOULD NOT issue reports for more than the requested
skipping to change at page 8, line 16 skipping to change at page 8, line 16
As required by [IANA-CONSIDERATIONS], this section contains registry As required by [IANA-CONSIDERATIONS], this section contains registry
information for the new [SPF] modifiers. information for the new [SPF] modifiers.
5.1. SPF Modifier Registration 5.1. SPF Modifier Registration
IANA is requested to create the Sender Policy Framework Modifier IANA is requested to create the Sender Policy Framework Modifier
Registry, to include a list of all registered SPF modifier names and Registry, to include a list of all registered SPF modifier names and
their defining documents. their defining documents.
New registrations or updates MUST be published in accordance with the New registrations or updates are to be published in accordance with
"Specification Required" guidelines as described in the "Specification Required" guidelines as described in
[IANA-CONSIDERATIONS]. New registrations and updates MUST contain [IANA-CONSIDERATIONS]. New registrations and updates MUST contain
the following information: the following information:
1. Name of the modifier being registered or updated 1. Name of the modifier being registered or updated
2. The document in which the specification of the modifier is 2. The document in which the specification of the modifier is
published published
3. New or updated status, which MUST be one of: 3. New or updated status, which MUST be one of:
current: The field is in current use current: The field is in current use
deprecated: The field is in current use but its use is deprecated: The field might be in current use but its use is
discouraged discouraged
historic: The field is no longer in current use historic: The field is no longer in current use
An update may make a notation on an existing registration indicating An update may make a notation on an existing registration indicating
that a registered field is historic or deprecated if appropriate. that a registered field is historic or deprecated if appropriate.
+------------+-----------------+---------+ +------------+-----------------+---------+
| MODIFIER | REFERENCE | STATUS | | MODIFIER | REFERENCE | STATUS |
+------------+-----------------+---------+ +------------+-----------------+---------+
| exp | RFC4408 | current | | exp | RFC4408 | current |
| redirect | RFC4408 | current | | redirect | RFC4408 | current |
| ra | (this document) | current | | ra | (this document) | current |
| rp | (this document) | current | | rp | (this document) | current |
| rr | (this document) | current | | rr | (this document) | current |
+------------+-----------------+---------+ +------------+-----------------+---------+
6. Security Considerations 6. Security Considerations
Security issues with respect to these reports are similar to those Inherited considerations: implementors are advised to consider the
found in [DSN]. Security Considerations sections of [SPF], [ARF], [I-D.IETF-MARF-AS],
and [I-D.IETF-MARF-AUTHFAILURE-REPORT].
6.1. Inherited Considerations In addition to the advice in the Security Considerations section of
[I-D.IETF-MARF-AS], these additional considerations apply to
generation of [SPF] authentication failure reports:
Implementors are advised to consider the Security Considerations 6.1. Identity Selection
sections of [SPF], [ARF], [I-D.IETF-MARF-AS], and
[I-D.IETF-MARF-AUTHFAILURE-REPORT].
6.2. Additional forgery considertion Preventing an [SPF] failure for SPF SPF authentication failure
reports is essential to mitigate the risk of data loops.
In addition to the advice in security considerations of If the [SMTP] return address to be used will not be the NULL
[I-D.IETF-MARF-AS] the additional consderations apply to [SPF] auth return address, i.e., "MAIL FROM:<>", then the selected return
failure reports. If the MAIL FROM command is not the NULL return address MUST be selected such that it will pass [SPF] MAIL FROM
address, i.e., "MAIL FROM:<>", then the selected MAIL FROM address checks upon initial receipt.
MUST pass [SPF] MAIL FROM checks on receipt. The HELO/EHLO command
SHOULD also be selected so that it will pass [SPF] HELO checks. If the report is passed to the Mail Submission Agent (MSA) (MSA is
described in [EMAIL-ARCH] using [SMTP], the HELO/EHLO command
parameter SHOULD also be selected so that it will pass [SPF] HELO
checks.
6.2. Report Volume
It is impossible to predict the volume of reports this facility will
generate when enabled by a report receiver. An implementer ought to
anticipate substantial volume, since the amount of abuse occurring at
receivers cannot be known ahead of time, and may vary rapidly and
unpredictably.
7. References 7. References
7.1. Normative References 7.1. Normative References
[ARF] Shafranovich, Y., Levine, J., and M. Kucherawy, "An [ARF] Shafranovich, Y., Levine, J., and M. Kucherawy, "An
Extensible Format for Email Feedback Reports", RFC 5965, Extensible Format for Email Feedback Reports", RFC 5965,
August 2010. August 2010.
[I-D.IETF-MARF-AS] [I-D.IETF-MARF-AS]
Falk, J. and M. Kucherawy, Ed., "Creation and Use of Email Falk, J. and M. Kucherawy, Ed., "Creation and Use of Email
Feedback Reports: An Applicability Statement for the Abuse Feedback Reports: An Applicability Statement for the Abuse
Reporting Format (ARF)", February 2012. Reporting Format (ARF)", draft-ietf-marf-as (work in
progress), February 2012.
[I-D.IETF-MARF-AUTHFAILURE-REPORT] [I-D.IETF-MARF-AUTHFAILURE-REPORT]
Fontana, H., "Authentication Failure Reporting using the Fontana, H., "Authentication Failure Reporting using the
Abuse Report Format", January 2012. Abuse Report Format", draft-ietf-marf-authfailure-report
(work in progress), January 2012.
[IANA-CONSIDERATIONS] [IANA-CONSIDERATIONS]
Alvestrand, H. and T. Narten, "Guidelines for Writing an Alvestrand, H. and T. Narten, "Guidelines for Writing an
IANA Considerations Section in RFCs", RFC 5226, May 2008. IANA Considerations Section in RFCs", RFC 5226, May 2008.
[KEYWORDS] [KEYWORDS]
Bradner, S., "Key words for use in RFCs to Indicate Bradner, S., "Key words for use in RFCs to Indicate
Requirement Levels", RFC 2119, March 1997. Requirement Levels", RFC 2119, March 1997.
[MAIL] Resnick, P., "Internet Message Format", RFC 5322, [MAIL] Resnick, P., "Internet Message Format", RFC 5322,
October 2008. October 2008.
[MIME] Freed, N. and N. Borenstein, "Multipurpose Internet Mail [MIME] Freed, N. and N. Borenstein, "Multipurpose Internet Mail
Extensions (MIME) Part One: Format of Internet Message Extensions (MIME) Part One: Format of Internet Message
Bodies", RFC 2045, November 1996. Bodies", RFC 2045, November 1996.
[SMTP] Klensin, J., "Simple Mail Transfer Protocol", RFC 5321,
October 2008.
[SPF] Wong, M. and W. Schlitt, "Sender Policy Framework (SPF) [SPF] Wong, M. and W. Schlitt, "Sender Policy Framework (SPF)
for Authorizing Use of Domains in E-Mail, Version 1", for Authorizing Use of Domains in E-Mail, Version 1",
RFC 4408, April 2006. RFC 4408, April 2006.
7.2. Informative References 7.2. Informative References
[DSN] Moore, K. and G. Vaudreuil, "An Extensible Message Format [EMAIL-ARCH]
for Delivery Status Notifications", RFC 3464, Crocker, D., "Internet Mail Architecture", RFC 5598,
January 2003. October 2008.
Appendix A. Acknowledgements Appendix A. Acknowledgements
The author wishes to acknowledge the following for their review and The author wishes to acknowledge the following for their review and
constructive criticism of this proposal: Murray Kucherawy, Tim constructive criticism of this proposal: Murray Kucherawy, Tim
Draegen, Julian Mehnle, and John Levine. Draegen, Julian Mehnle, and John Levine.
Appendix B. Examples Appendix B. Examples
B.1. SPF DNS record for domain that sends no mail, but requests reports B.1. SPF DNS record for domain that sends no mail, but requests reports
skipping to change at page 13, line 8 skipping to change at page 13, line 8
v=spf1 mx:example.org ra=postmaster -all v=spf1 mx:example.org ra=postmaster -all
B.3. SPF DNS record with reporting address, report percentage, and B.3. SPF DNS record with reporting address, report percentage, and
requested report type requested report type
v=spf1 mx:example.org -all ra=postmaster rp=10 rr=e v=spf1 mx:example.org -all ra=postmaster rp=10 rr=e
Author's Address Author's Address
Scott Kitterman Scott Kitterman
Agari Data, Inc. Agari
3611 Scheel Dr 3611 Scheel Dr
Ellicott City, MD 21042 Ellicott City, MD 21042
US US
Phone: +1 301 325 5475 Phone: +1 301 325 5475
Email: skitterman@agari.com Email: skitterman@agari.com
 End of changes. 19 change blocks. 
38 lines changed or deleted 57 lines changed or added

This html diff was produced by rfcdiff 1.41. The latest version is available from http://tools.ietf.org/tools/rfcdiff/
--nextPart2229264.EnmBFDsLcg-- From internet-drafts@ietf.org Mon Mar 12 10:43:34 2012 Return-Path: X-Original-To: marf@ietfa.amsl.com Delivered-To: marf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4425621F8972; Mon, 12 Mar 2012 10:43:34 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.58 X-Spam-Level: X-Spam-Status: No, score=-102.58 tagged_above=-999 required=5 tests=[AWL=0.019, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZPX7soQcM9B7; Mon, 12 Mar 2012 10:43:33 -0700 (PDT) Received: from ietfa.amsl.com (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C960C21F896B; Mon, 12 Mar 2012 10:43:33 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable From: internet-drafts@ietf.org To: i-d-announce@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 4.00 Message-ID: <20120312174333.19434.30508.idtracker@ietfa.amsl.com> Date: Mon, 12 Mar 2012 10:43:33 -0700 Cc: marf@ietf.org Subject: [marf] I-D Action: draft-ietf-marf-spf-reporting-09.txt X-BeenThere: marf@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Message Abuse Report Format working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 12 Mar 2012 17:43:34 -0000 A New Internet-Draft is available from the on-line Internet-Drafts director= ies. This draft is a work item of the Messaging Abuse Reporting Format Work= ing Group of the IETF. Title : SPF Authentication Failure Reporting using the Abuse Rep= ort Format Author(s) : Scott Kitterman Filename : draft-ietf-marf-spf-reporting-09.txt Pages : 13 Date : 2012-03-12 This memo presents extensions to the Abuse Reporting Format (ARF), and Sender Policy Framework (SPF) specifications to allow for detailed reporting of message authentication failures in an on-demand fashion. This memo updates RFC4408 by providing an IANA registry for SPF modifiers. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-ietf-marf-spf-reporting-09.txt Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ This Internet-Draft can be retrieved at: ftp://ftp.ietf.org/internet-drafts/draft-ietf-marf-spf-reporting-09.txt From sklist@kitterman.com Mon Mar 12 10:46:20 2012 Return-Path: X-Original-To: marf@ietfa.amsl.com Delivered-To: marf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E7BA921F8998 for ; Mon, 12 Mar 2012 10:46:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.565 X-Spam-Level: X-Spam-Status: No, score=-2.565 tagged_above=-999 required=5 tests=[AWL=0.034, BAYES_00=-2.599] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eefYJYRyzUq7 for ; Mon, 12 Mar 2012 10:46:20 -0700 (PDT) Received: from mailout02.controlledmail.com (mailout02.controlledmail.com [72.81.252.18]) by ietfa.amsl.com (Postfix) with ESMTP id 21A7021F8997 for ; Mon, 12 Mar 2012 10:46:20 -0700 (PDT) Received: from mailout02.controlledmail.com (localhost [127.0.0.1]) by mailout02.controlledmail.com (Postfix) with ESMTP id 96E1D20E40BD; Mon, 12 Mar 2012 13:46:19 -0400 (EDT) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=kitterman.com; s=2007-00; t=1331574379; bh=/r0P199NuCedK3QqC9mbgrgC7K4w/CyuTeZdctFzcuU=; h=From:To:Subject:Date:Message-ID:In-Reply-To:References: MIME-Version:Content-Transfer-Encoding:Content-Type; b=NucB1hcejdWh6uJzbaw7Q6EJyRnbbhpC+7cjAty0OhQJe+7gBZTidMdfdq6DEmZi1 BCfrc410QKBe8U09QaIwqgys9j5X5JOGoYp7xKKC38N5BBAuX5HzWRz2p/jeABIHyY +cUiNnfeR5BJFWqjBfT07h2qCbECZ/aBxs+Id1mM= Received: from scott-latitude-e6320.localnet (static-72-81-252-21.bltmmd.fios.verizon.net [72.81.252.21]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mailout02.controlledmail.com (Postfix) with ESMTPSA id 7BE8020E40A4; Mon, 12 Mar 2012 13:46:19 -0400 (EDT) From: Scott Kitterman To: marf@ietf.org Date: Mon, 12 Mar 2012 13:46:18 -0400 Message-ID: <63410861.ZOVRWVGJfY@scott-latitude-e6320> User-Agent: KMail/4.7.3 (Linux/3.0.0-16-generic-pae; KDE/4.7.4; i686; ; ) In-Reply-To: <20120312174333.19434.30508.idtracker@ietfa.amsl.com> References: <20120312174333.19434.30508.idtracker@ietfa.amsl.com> MIME-Version: 1.0 Content-Transfer-Encoding: 7Bit Content-Type: text/plain; charset="us-ascii" X-AV-Checked: ClamAV using ClamSMTP Subject: Re: [marf] I-D Action: draft-ietf-marf-spf-reporting-09.txt X-BeenThere: marf@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Message Abuse Report Format working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 12 Mar 2012 17:46:21 -0000 On Monday, March 12, 2012 10:43:33 AM internet-drafts@ietf.org wrote: > A New Internet-Draft is available from the on-line Internet-Drafts > directories. This draft is a work item of the Messaging Abuse Reporting > Format Working Group of the IETF. > > Title : SPF Authentication Failure Reporting using the Abuse > Report Format Author(s) : Scott Kitterman > Filename : draft-ietf-marf-spf-reporting-09.txt > Pages : 13 > Date : 2012-03-12 This update incorporates all the last call feedback so far and is the same as the draft used for the diff I sent out earlier today. Scott K From internet-drafts@ietf.org Mon Mar 12 10:59:34 2012 Return-Path: X-Original-To: marf@ietfa.amsl.com Delivered-To: marf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 06F8A21E8035; Mon, 12 Mar 2012 10:59:34 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.58 X-Spam-Level: X-Spam-Status: No, score=-102.58 tagged_above=-999 required=5 tests=[AWL=0.019, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IMJ2Yo1tVYce; Mon, 12 Mar 2012 10:59:33 -0700 (PDT) Received: from ietfa.amsl.com (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8CEF421E8026; Mon, 12 Mar 2012 10:59:33 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable From: internet-drafts@ietf.org To: i-d-announce@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 4.00 Message-ID: <20120312175933.27730.99877.idtracker@ietfa.amsl.com> Date: Mon, 12 Mar 2012 10:59:33 -0700 Cc: marf@ietf.org Subject: [marf] I-D Action: draft-ietf-marf-dkim-reporting-13.txt X-BeenThere: marf@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Message Abuse Report Format working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 12 Mar 2012 17:59:34 -0000 A New Internet-Draft is available from the on-line Internet-Drafts director= ies. This draft is a work item of the Messaging Abuse Reporting Format Work= ing Group of the IETF. Title : Extensions to DKIM for Failure Reporting Author(s) : Murray S. Kucherawy Filename : draft-ietf-marf-dkim-reporting-13.txt Pages : 23 Date : 2012-03-12 This memo presents extensions to the DomainKeys Identified Mail (DKIM) specification to allow for detailed reporting of message authentication failures in an on-demand fashion. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-ietf-marf-dkim-reporting-13.txt Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ This Internet-Draft can be retrieved at: ftp://ftp.ietf.org/internet-drafts/draft-ietf-marf-dkim-reporting-13.txt From msk@cloudmark.com Mon Mar 12 11:01:20 2012 Return-Path: X-Original-To: marf@ietfa.amsl.com Delivered-To: marf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7776C21F88F9 for ; Mon, 12 Mar 2012 11:01:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.603 X-Spam-Level: X-Spam-Status: No, score=-102.603 tagged_above=-999 required=5 tests=[AWL=-0.004, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Wj+cVPZwpKFA for ; Mon, 12 Mar 2012 11:01:20 -0700 (PDT) Received: from ht1-outbound.cloudmark.com (ht1-outbound.cloudmark.com [72.5.239.25]) by ietfa.amsl.com (Postfix) with ESMTP id 08C2721F88F2 for ; Mon, 12 Mar 2012 11:01:20 -0700 (PDT) Received: from EXCH-MBX901.corp.cloudmark.com ([fe80::addf:849a:f71c:4a82]) by EXCH-HTCAS901.corp.cloudmark.com ([fe80::2966:6846:8d89:4681%12]) with mapi id 14.01.0355.002; Mon, 12 Mar 2012 11:01:19 -0700 From: "Murray S. Kucherawy" To: "marf@ietf.org" Thread-Topic: I-D Action: draft-ietf-marf-dkim-reporting-13.txt Thread-Index: AQHNAHn1tfjkHYFA5keYDj5Vx7e3MZZm8zhQ Date: Mon, 12 Mar 2012 18:01:18 +0000 Message-ID: <9452079D1A51524AA5749AD23E003928086571@exch-mbx901.corp.cloudmark.com> References: <20120312175933.27730.99877.idtracker@ietfa.amsl.com> In-Reply-To: <20120312175933.27730.99877.idtracker@ietfa.amsl.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [172.20.2.121] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Subject: Re: [marf] I-D Action: draft-ietf-marf-dkim-reporting-13.txt X-BeenThere: marf@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Message Abuse Report Format working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 12 Mar 2012 18:01:20 -0000 > -----Original Message----- > From: i-d-announce-bounces@ietf.org [mailto:i-d-announce-bounces@ietf.org= ] On Behalf Of internet-drafts@ietf.org > Sent: Monday, March 12, 2012 11:00 AM > To: i-d-announce@ietf.org > Cc: marf@ietf.org > Subject: I-D Action: draft-ietf-marf-dkim-reporting-13.txt >=20 >=20 > A New Internet-Draft is available from the on-line Internet-Drafts > directories. This draft is a work item of the Messaging Abuse Reporting > Format Working Group of the IETF. >=20 > Title : Extensions to DKIM for Failure Reporting > Author(s) : Murray S. Kucherawy > Filename : draft-ietf-marf-dkim-reporting-13.txt > Pages : 23 > Date : 2012-03-12 >=20 > This memo presents extensions to the DomainKeys Identified Mail > (DKIM) specification to allow for detailed reporting of message > authentication failures in an on-demand fashion. What Scott said. -MSK From msk@cloudmark.com Mon Mar 12 12:58:38 2012 Return-Path: X-Original-To: marf@ietfa.amsl.com Delivered-To: marf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5B42621E80BA for ; Mon, 12 Mar 2012 12:58:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.603 X-Spam-Level: X-Spam-Status: No, score=-102.603 tagged_above=-999 required=5 tests=[AWL=-0.005, BAYES_00=-2.599, HTML_MESSAGE=0.001, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id irL45gx+Upqc for ; Mon, 12 Mar 2012 12:58:37 -0700 (PDT) Received: from ht1-outbound.cloudmark.com (ht1-outbound.cloudmark.com [72.5.239.25]) by ietfa.amsl.com (Postfix) with ESMTP id AFBDA21E809B for ; Mon, 12 Mar 2012 12:58:37 -0700 (PDT) Received: from EXCH-MBX901.corp.cloudmark.com ([fe80::addf:849a:f71c:4a82]) by EXCH-HTCAS901.corp.cloudmark.com ([fe80::2966:6846:8d89:4681%12]) with mapi id 14.01.0355.002; Mon, 12 Mar 2012 12:58:37 -0700 From: "Murray S. Kucherawy" To: "marf@ietf.org" Thread-Topic: IETF 83 MARF Agenda Thread-Index: Ac0AioMTvuOUehb7S+m36CS31vbfXA== Date: Mon, 12 Mar 2012 19:58:36 +0000 Message-ID: <9452079D1A51524AA5749AD23E003928086824@exch-mbx901.corp.cloudmark.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [172.20.2.121] Content-Type: multipart/alternative; boundary="_000_9452079D1A51524AA5749AD23E003928086824exchmbx901corpclo_" MIME-Version: 1.0 Subject: [marf] IETF 83 MARF Agenda X-BeenThere: marf@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Message Abuse Report Format working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 12 Mar 2012 19:58:38 -0000 --_000_9452079D1A51524AA5749AD23E003928086824exchmbx901corpclo_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable This is the proposed agenda for our IETF 83 meeting slot. Please let us kn= ow if you'd like to see any changes. IETF 83 -- MARF Agenda Paris, France Tuesday, March 27, 2012 -- 17:10-18:10 00:00-00:05 Blue sheets & agenda bashing 00:05-00:15 MARF's Greatest Hits: Documents and milestones, past and prese= nt 00:15-00:20 OMA SpamRep, why we didn't converge; SREP 00:20-00:25 What's next for MARF 00:25-00:30 Known related work outside of MARF 00:30-01:00 AOB -MSK, co-chair --_000_9452079D1A51524AA5749AD23E003928086824exchmbx901corpclo_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

This is the proposed agenda for our IETF 83 meeting = slot.  Please let us know if you’d like to see any changes.=

 

IETF 83 -- MARF Agenda

Paris, France

Tuesday, March 27, 2012 -- 17:10-18:10

 

00:00-00:05  Blue sheets & agenda bashing

00:05-00:15  MARF's Greatest Hits: Documents an= d milestones, past and present

00:15-00:20  OMA SpamRep, why we didn't converg= e; SREP

00:20-00:25  What's next for MARF

00:25-00:30  Known related work outside of MARF=

00:30-01:00  AOB

 

-MSK, co-chair

--_000_9452079D1A51524AA5749AD23E003928086824exchmbx901corpclo_-- From johnl@iecc.com Mon Mar 12 19:29:09 2012 Return-Path: X-Original-To: marf@ietfa.amsl.com Delivered-To: marf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9C63921F8858 for ; Mon, 12 Mar 2012 19:29:09 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -110.298 X-Spam-Level: X-Spam-Status: No, score=-110.298 tagged_above=-999 required=5 tests=[AWL=0.901, BAYES_00=-2.599, HABEAS_ACCREDITED_SOI=-4.3, RCVD_IN_BSP_TRUSTED=-4.3, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6-b2HUZgEjqo for ; Mon, 12 Mar 2012 19:29:09 -0700 (PDT) Received: from leila.iecc.com (leila6.iecc.com [IPv6:2001:470:1f07:1126:0:4c:6569:6c61]) by ietfa.amsl.com (Postfix) with ESMTP id 9D5E821F8834 for ; Mon, 12 Mar 2012 19:29:07 -0700 (PDT) Received: (qmail 51532 invoked from network); 13 Mar 2012 02:29:05 -0000 Received: from leila.iecc.com (64.57.183.34) by mail1.iecc.com with QMQP; 13 Mar 2012 02:29:05 -0000 DKIM-Signature: v=1; a=rsa-sha256; c=simple; d=iecc.com; h=date:message-id:from:to:cc:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:vbr-info; s=4f5eb0f1.xn--btvx9d.k1203; i=johnl@user.iecc.com; bh=6D7Zu9zMFhLLSJRyl43n3BDTIFX9mFnFGnVZEr9eJX4=; b=t3FTfBT8j+JyMH1ON3xsh7nwF/pJoDhfG7cMba9iHZb9AtXrz4XI06LP0yD3xvI/6LvF+WaLNva+0ABP+3rvtv+zpdgXHqdXAzqFbmc5/gVtff47XzVyEMpP9LcW+a5PSz8ZjxkExtnvSXKyrwFB6XQfb2uDrmB6vAFXj89/dRE= DKIM-Signature: v=1; a=rsa-sha256; c=simple; d=taugh.com; h=date:message-id:from:to:cc:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:vbr-info; s=4f5eb0f1.xn--btvx9d.k1203; olt=johnl@user.iecc.com; bh=6D7Zu9zMFhLLSJRyl43n3BDTIFX9mFnFGnVZEr9eJX4=; b=gkVBui7liqecDL878DTb9vMO66wsDwGtvECjiXMeUnVy8ak7tQDIVbxLXM9X9TLX3+uEdbExHZZ5T7YlBsdIEFIBkHunHECabuCLkM6H2NkfH9/8otrwkh86Qjhve22c+hKyRe9zFF49mwHXKXJSEQzhV0cDTp0/CxbYb5JUDuo= VBR-Info: md=iecc.com; mc=all; mv=dwl.spamhaus.org Date: 13 Mar 2012 02:28:43 -0000 Message-ID: <20120313022843.88402.qmail@joyce.lan> From: "John Levine" To: marf@ietf.org In-Reply-To: <9452079D1A51524AA5749AD23E003928085D5D@exch-mbx901.corp.cloudmark.com> Organization: X-Headerized: yes Mime-Version: 1.0 Content-type: text/plain; charset=utf-8 Content-transfer-encoding: 7bit Subject: Re: [marf] DISCUSS on draft-ietf-marf-dkim-reporting X-BeenThere: marf@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Message Abuse Report Format working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 13 Mar 2012 02:29:09 -0000 >> The correct clarification is one report per /signing/ domain per >> message. If a domain includes multiple signatures in a given message, >> they may get a report for each failed one. > >Yes, that's the change I'm proposing. Seems reasonable to me. R's, John From Internet-Drafts@ietf.org Tue Mar 13 14:58:22 2012 Return-Path: X-Original-To: marf@ietfa.amsl.com Delivered-To: marf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 079D221E802F; Tue, 13 Mar 2012 14:58:22 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.586 X-Spam-Level: X-Spam-Status: No, score=-102.586 tagged_above=-999 required=5 tests=[AWL=0.013, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mmhVXzXxisk1; Tue, 13 Mar 2012 14:58:21 -0700 (PDT) Received: from ietfa.amsl.com (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A1D7321E8017; Tue, 13 Mar 2012 14:58:21 -0700 (PDT) MIME-Version: 1.0 Content-Type: Multipart/Mixed; Boundary="NextPart" From: Internet-Drafts@ietf.org To: i-d-announce@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 4.00 Message-ID: <20120313215821.9703.21664.idtracker@ietfa.amsl.com> Date: Tue, 13 Mar 2012 14:58:21 -0700 Cc: marf@ietf.org Subject: [marf] I-D ACTION:draft-ietf-marf-dkim-reporting-14.txt X-BeenThere: marf@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Message Abuse Report Format working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 13 Mar 2012 21:58:22 -0000 --NextPart A new Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Messaging Abuse Reporting Format Working Group of the IETF. Title : Extensions to DKIM for Failure Reporting Author(s) : M. Kucherawy Filename : draft-ietf-marf-dkim-reporting Pages : 23 Date : April 21, 2010 This memo presents extensions to the DomainKeys Identified Mail (DKIM) specification to allow for detailed reporting of message authentication failures in an on-demand fashion. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-ietf-marf-dkim-reporting Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. --NextPart Content-Type: Message/External-body; name="draft-ietf-marf-dkim-reporting"; site="ftp.ietf.org"; access-type="anon-ftp"; directory="internet-drafts" Content-Type: text/plain Content-ID: <2012-03-13145821.I-D@ietf.org> --NextPart-- From msk@cloudmark.com Tue Mar 13 15:01:47 2012 Return-Path: X-Original-To: marf@ietfa.amsl.com Delivered-To: marf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4606221E8017 for ; Tue, 13 Mar 2012 15:01:46 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.604 X-Spam-Level: X-Spam-Status: No, score=-102.604 tagged_above=-999 required=5 tests=[AWL=-0.005, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qeEENWkypvCX for ; Tue, 13 Mar 2012 15:01:44 -0700 (PDT) Received: from ht1-outbound.cloudmark.com (ht1-outbound.cloudmark.com [72.5.239.25]) by ietfa.amsl.com (Postfix) with ESMTP id 5EAF121F8602 for ; Tue, 13 Mar 2012 15:01:43 -0700 (PDT) Received: from EXCH-MBX901.corp.cloudmark.com ([fe80::addf:849a:f71c:4a82]) by EXCH-HTCAS901.corp.cloudmark.com ([fe80::2966:6846:8d89:4681%12]) with mapi id 14.01.0355.002; Tue, 13 Mar 2012 15:01:42 -0700 From: "Murray S. Kucherawy" To: "marf@ietf.org" Thread-Topic: [marf] I-D ACTION:draft-ietf-marf-dkim-reporting-14.txt Thread-Index: AQHNAWRp3fdSOkcij0yd6kjGSPZLYZZoxspQ Date: Tue, 13 Mar 2012 22:01:41 +0000 Message-ID: <9452079D1A51524AA5749AD23E00392808863D@exch-mbx901.corp.cloudmark.com> References: <20120313215821.9703.21664.idtracker@ietfa.amsl.com> In-Reply-To: <20120313215821.9703.21664.idtracker@ietfa.amsl.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [172.20.2.121] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Subject: Re: [marf] I-D ACTION:draft-ietf-marf-dkim-reporting-14.txt X-BeenThere: marf@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Message Abuse Report Format working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 13 Mar 2012 22:01:47 -0000 > -----Original Message----- > From: marf-bounces@ietf.org [mailto:marf-bounces@ietf.org] On Behalf Of I= nternet-Drafts@ietf.org > Sent: Tuesday, March 13, 2012 2:58 PM > To: i-d-announce@ietf.org > Cc: marf@ietf.org > Subject: [marf] I-D ACTION:draft-ietf-marf-dkim-reporting-14.txt >=20 > A new Internet-Draft is available from the on-line Internet-Drafts > directories. > This draft is a work item of the Messaging Abuse Reporting Format > Working Group of the IETF. >=20 > Title : Extensions to DKIM for Failure Reporting > Author(s) : M. Kucherawy > Filename : draft-ietf-marf-dkim-reporting > Pages : 23 > Date : April 21, 2010 >=20 > This memo presents extensions to the DomainKeys Identified Mail > (DKIM) specification to allow for detailed reporting of message > authentication failures in an on-demand fashion. Handles a second DISCUSS issue having to do with which tags get ignored. N= othing major. -MSK From Internet-Drafts@ietf.org Thu Mar 15 07:35:55 2012 Return-Path: X-Original-To: marf@ietfa.amsl.com Delivered-To: marf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A095821F86BA; Thu, 15 Mar 2012 07:35:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.599 X-Spam-Level: X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id z6y9Ai1p14Kz; Thu, 15 Mar 2012 07:35:55 -0700 (PDT) Received: from ietfa.amsl.com (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 42B3721F8510; Thu, 15 Mar 2012 07:35:55 -0700 (PDT) MIME-Version: 1.0 Content-Type: Multipart/Mixed; Boundary="NextPart" From: Internet-Drafts@ietf.org To: i-d-announce@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 4.00 Message-ID: <20120315143555.20643.13648.idtracker@ietfa.amsl.com> Date: Thu, 15 Mar 2012 07:35:55 -0700 Cc: marf@ietf.org Subject: [marf] I-D ACTION:draft-ietf-marf-dkim-reporting-15.txt X-BeenThere: marf@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Message Abuse Report Format working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 15 Mar 2012 14:35:55 -0000 --NextPart A new Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Messaging Abuse Reporting Format Working Group of the IETF. Title : Extensions to DKIM for Failure Reporting Author(s) : M. Kucherawy Filename : draft-ietf-marf-dkim-reporting Pages : 24 Date : April 21, 2010 This memo presents extensions to the DomainKeys Identified Mail (DKIM) specification to allow for detailed reporting of message authentication failures in an on-demand fashion. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-ietf-marf-dkim-reporting Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. --NextPart Content-Type: Message/External-body; name="draft-ietf-marf-dkim-reporting"; site="ftp.ietf.org"; access-type="anon-ftp"; directory="internet-drafts" Content-Type: text/plain Content-ID: <2012-03-15073555.I-D@ietf.org> --NextPart-- From Internet-Drafts@ietf.org Thu Mar 15 07:41:11 2012 Return-Path: X-Original-To: marf@ietfa.amsl.com Delivered-To: marf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id ABACA21F8645; Thu, 15 Mar 2012 07:41:11 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.599 X-Spam-Level: X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id H7xeoB1W4n18; Thu, 15 Mar 2012 07:41:11 -0700 (PDT) Received: from ietfa.amsl.com (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2769F21F8566; Thu, 15 Mar 2012 07:41:11 -0700 (PDT) MIME-Version: 1.0 Content-Type: Multipart/Mixed; Boundary="NextPart" From: Internet-Drafts@ietf.org To: i-d-announce@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 4.00 Message-ID: <20120315144111.23368.41769.idtracker@ietfa.amsl.com> Date: Thu, 15 Mar 2012 07:41:11 -0700 Cc: marf@ietf.org Subject: [marf] I-D ACTION:draft-ietf-marf-spf-reporting-10.txt X-BeenThere: marf@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Message Abuse Report Format working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 15 Mar 2012 14:41:11 -0000 --NextPart A new Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Messaging Abuse Reporting Format Working Group of the IETF. Title : SPF Authentication Failure Reporting using the Abuse Report Format Author(s) : S. Kitterman Filename : draft-ietf-marf-spf-reporting Pages : 13 Date : June 28, 2011 This memo presents extensions to the Abuse Reporting Format (ARF), and Sender Policy Framework (SPF) specifications to allow for detailed reporting of message authentication failures in an on-demand fashion. This memo updates RFC4408 by providing an IANA registry for SPF modifiers. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-ietf-marf-spf-reporting Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. --NextPart Content-Type: Message/External-body; name="draft-ietf-marf-spf-reporting"; site="ftp.ietf.org"; access-type="anon-ftp"; directory="internet-drafts" Content-Type: text/plain Content-ID: <2012-03-15074111.I-D@ietf.org> --NextPart-- From sklist@kitterman.com Thu Mar 15 07:47:31 2012 Return-Path: X-Original-To: marf@ietfa.amsl.com Delivered-To: marf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B37CD21F86EC for ; Thu, 15 Mar 2012 07:47:31 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.98 X-Spam-Level: X-Spam-Status: No, score=-1.98 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_SORBS_WEB=0.619] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id F60Q7Eiybkvz for ; Thu, 15 Mar 2012 07:47:31 -0700 (PDT) Received: from mailout02.controlledmail.com (mailout02.controlledmail.com [72.81.252.18]) by ietfa.amsl.com (Postfix) with ESMTP id 188A921F8455 for ; Thu, 15 Mar 2012 07:47:30 -0700 (PDT) Received: from mailout02.controlledmail.com (localhost [127.0.0.1]) by mailout02.controlledmail.com (Postfix) with ESMTP id 2A83620E40D0; Thu, 15 Mar 2012 10:47:30 -0400 (EDT) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=kitterman.com; s=2007-00; t=1331822850; bh=XR4+r0SOp1fDpR4Ynv5+GLu/FnOoPf57jcHg9z/sUew=; h=From:To:Subject:Date:Message-ID:In-Reply-To:References: MIME-Version:Content-Transfer-Encoding:Content-Type; b=BpYCL3eO9540awpPQ2YRzAxlhZLo3zsmIiw/DqJoJgo9x6BpIaRzmQhAXfb7Wc789 9KYs8mDXXU64VIiWcgbBqwJ/3T78Zx1+il169/3wPbehN8b0IXjh+XZ55ufT4J6mNI gTfpoVBJ+NiMlt43Ju7E4fWKQ6zyiM/PIMaEHcoI= Received: from scott-latitude-e6320.localnet (unknown [209.144.63.76]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mailout02.controlledmail.com (Postfix) with ESMTPSA id EA08220E408F; Thu, 15 Mar 2012 10:47:29 -0400 (EDT) From: Scott Kitterman To: marf@ietf.org Date: Thu, 15 Mar 2012 10:47:25 -0400 Message-ID: <4845463.8axR4bFWPI@scott-latitude-e6320> User-Agent: KMail/4.7.3 (Linux/3.0.0-16-generic-pae; KDE/4.7.4; i686; ; ) In-Reply-To: <20120315144111.23368.41769.idtracker@ietfa.amsl.com> References: <20120315144111.23368.41769.idtracker@ietfa.amsl.com> MIME-Version: 1.0 Content-Transfer-Encoding: 7Bit Content-Type: text/plain; charset="us-ascii" X-AV-Checked: ClamAV using ClamSMTP Subject: Re: [marf] I-D ACTION:draft-ietf-marf-spf-reporting-10.txt X-BeenThere: marf@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Message Abuse Report Format working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 15 Mar 2012 14:47:31 -0000 On Thursday, March 15, 2012 07:41:11 AM Internet-Drafts@ietf.org wrote: > A new Internet-Draft is available from the on-line Internet-Drafts > directories. This draft is a work item of the Messaging Abuse Reporting > Format Working Group of the IETF. > > Title : SPF Authentication Failure Reporting using the Abuse > Report Format Author(s) : S. Kitterman > Filename : draft-ietf-marf-spf-reporting > Pages : 13 > Date : June 28, 2011 This addresses IETF last call and IESG comments, most significantly the ABNF is changed to be case insensitive (which is correct for an SPF modifier). The other changes are all editorial. Scott K From Internet-Drafts@ietf.org Tue Mar 20 07:33:15 2012 Return-Path: X-Original-To: marf@ietfa.amsl.com Delivered-To: marf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8676221F8691; Tue, 20 Mar 2012 07:33:15 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.565 X-Spam-Level: X-Spam-Status: No, score=-102.565 tagged_above=-999 required=5 tests=[AWL=0.034, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lYQWHzFxsZng; Tue, 20 Mar 2012 07:33:15 -0700 (PDT) Received: from ietfa.amsl.com (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1ED6A21F864E; Tue, 20 Mar 2012 07:33:15 -0700 (PDT) MIME-Version: 1.0 Content-Type: Multipart/Mixed; Boundary="NextPart" From: Internet-Drafts@ietf.org To: i-d-announce@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 4.00 Message-ID: <20120320143315.24059.21273.idtracker@ietfa.amsl.com> Date: Tue, 20 Mar 2012 07:33:15 -0700 Cc: marf@ietf.org Subject: [marf] I-D ACTION:draft-ietf-marf-dkim-reporting-16.txt X-BeenThere: marf@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Message Abuse Report Format working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 20 Mar 2012 14:33:15 -0000 --NextPart A new Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Messaging Abuse Reporting Format Working Group of the IETF. Title : Extensions to DKIM for Failure Reporting Author(s) : M. Kucherawy Filename : draft-ietf-marf-dkim-reporting Pages : 23 Date : April 21, 2010 This document presents extensions to the DomainKeys Identified Mail (DKIM) specification to allow for detailed reporting of message authentication failures in an on-demand fashion. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-ietf-marf-dkim-reporting-16.txt Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. --NextPart Content-Type: Message/External-body; name="draft-ietf-marf-dkim-reporting"; site="ftp.ietf.org"; access-type="anon-ftp"; directory="internet-drafts" Content-Type: text/plain Content-ID: <2012-03-20073315.I-D@ietf.org> --NextPart-- From msk@cloudmark.com Tue Mar 20 10:43:11 2012 Return-Path: X-Original-To: marf@ietfa.amsl.com Delivered-To: marf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6528921F8598 for ; Tue, 20 Mar 2012 10:43:11 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.601 X-Spam-Level: X-Spam-Status: No, score=-102.601 tagged_above=-999 required=5 tests=[AWL=-0.002, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TSr6uTNlEwWa for ; Tue, 20 Mar 2012 10:43:11 -0700 (PDT) Received: from ht2-outbound.cloudmark.com (ht2-outbound.cloudmark.com [72.5.239.26]) by ietfa.amsl.com (Postfix) with ESMTP id F30F021F8596 for ; Tue, 20 Mar 2012 10:43:10 -0700 (PDT) Received: from EXCH-MBX901.corp.cloudmark.com ([fe80::addf:849a:f71c:4a82]) by exch-htcas902.corp.cloudmark.com ([fe80::e82a:4f80:7f44:eaf7%12]) with mapi id 14.01.0355.002; Tue, 20 Mar 2012 10:43:10 -0700 From: "Murray S. Kucherawy" To: "marf@ietf.org" Thread-Topic: [marf] I-D ACTION:draft-ietf-marf-dkim-reporting-16.txt Thread-Index: AQHNBqZn2LddX+TxzkCVWMtRt3eeG5ZzdEUQ Date: Tue, 20 Mar 2012 17:43:09 +0000 Message-ID: <9452079D1A51524AA5749AD23E0039280945E0@exch-mbx901.corp.cloudmark.com> References: <20120320143315.24059.21273.idtracker@ietfa.amsl.com> In-Reply-To: <20120320143315.24059.21273.idtracker@ietfa.amsl.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [172.20.2.121] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Subject: Re: [marf] I-D ACTION:draft-ietf-marf-dkim-reporting-16.txt X-BeenThere: marf@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Message Abuse Report Format working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 20 Mar 2012 17:43:11 -0000 > -----Original Message----- > From: marf-bounces@ietf.org [mailto:marf-bounces@ietf.org] On Behalf Of I= nternet-Drafts@ietf.org > Sent: Tuesday, March 20, 2012 7:33 AM > To: i-d-announce@ietf.org > Cc: marf@ietf.org > Subject: [marf] I-D ACTION:draft-ietf-marf-dkim-reporting-16.txt >=20 > A new Internet-Draft is available from the on-line Internet-Drafts > directories. > This draft is a work item of the Messaging Abuse Reporting Format > Working Group of the IETF. >=20 > Title : Extensions to DKIM for Failure Reporting > Author(s) : M. Kucherawy > Filename : draft-ietf-marf-dkim-reporting > Pages : 23 > Date : April 21, 2010 >=20 > This document presents extensions to the DomainKeys Identified Mail > (DKIM) specification to allow for detailed reporting of message > authentication failures in an on-demand fashion. Resolves an ABNF problem and adds some document improvements found in a (la= te!) AppsDir review. This version has been approved for publication. -MSK From iesg-secretary@ietf.org Tue Mar 20 10:49:07 2012 Return-Path: X-Original-To: marf@ietfa.amsl.com Delivered-To: marf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0886021F84F2; Tue, 20 Mar 2012 10:49:07 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.505 X-Spam-Level: X-Spam-Status: No, score=-102.505 tagged_above=-999 required=5 tests=[AWL=0.094, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1aHqDIyo53cA; Tue, 20 Mar 2012 10:49:06 -0700 (PDT) Received: from ietfa.amsl.com (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 56D5821F8512; Tue, 20 Mar 2012 10:49:06 -0700 (PDT) Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit From: The IESG To: IETF-Announce X-Test-IDTracker: no X-IETF-IDTracker: 4.00 Message-ID: <20120320174906.15808.3290.idtracker@ietfa.amsl.com> Date: Tue, 20 Mar 2012 10:49:06 -0700 Cc: marf mailing list , marf chair , RFC Editor Subject: [marf] Protocol Action: 'SPF Authentication Failure Reporting using the Abuse Report Format' to Proposed Standard (draft-ietf-marf-spf-reporting-10.txt) X-BeenThere: marf@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Message Abuse Report Format working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 20 Mar 2012 17:49:07 -0000 The IESG has approved the following document: - 'SPF Authentication Failure Reporting using the Abuse Report Format' (draft-ietf-marf-spf-reporting-10.txt) as a Proposed Standard This document is the product of the Messaging Abuse Reporting Format Working Group. The IESG contact persons are Pete Resnick and Peter Saint-Andre. A URL of this Internet Draft is: http://datatracker.ietf.org/doc/draft-ietf-marf-spf-reporting/ Technical Summary This memo presents extensions to the Abuse Reporting Format (ARF), and Sender Policy Framework (SPF) specifications to allow for detailed reporting of message authentication failures in an on-demand fashion. This memo updates RFC4408. Working Group Summary There was little controversy of note. The extensions presented here are useful to sites deploying SPF and seeking visibility into situations where mail covered by SPF is rejected or otherwise affected by local policy. Demand for this capability is increasing, especially from domains that are popular scam targets. Document Quality There are only a couple of known existing implementations, one made by a working group participant as the specification solidified to prove that it's viable. There are, however, several vendors that intend to implement this specificaiton and its adjuncts (draft-ietf-marf-redaction and draft-ietf-marf-dkim-reporting), along with other non-MARF specifications that provide this kind of feedback to respond to customer demand, upon publication. Personnel Murray Kucherawy is the Document Shepherd. Pete Resnick is the responsible area director. RFC Editor Note Please make the following change to the document: OLD spf-rr-tag = "rr=" spf-rr-type 0* ( ":" spf-rr-type ) NEW spf-rr-tag = "rr=" spf-rr-type *( ":" spf-rr-type ) From iesg-secretary@ietf.org Tue Mar 20 10:51:08 2012 Return-Path: X-Original-To: marf@ietfa.amsl.com Delivered-To: marf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C297521F84FD; Tue, 20 Mar 2012 10:51:08 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.51 X-Spam-Level: X-Spam-Status: No, score=-102.51 tagged_above=-999 required=5 tests=[AWL=0.089, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bvnjtD76edG5; Tue, 20 Mar 2012 10:51:08 -0700 (PDT) Received: from ietfa.amsl.com (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D245421F8517; Tue, 20 Mar 2012 10:51:07 -0700 (PDT) Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit From: The IESG To: IETF-Announce X-Test-IDTracker: no X-IETF-IDTracker: 4.00 Message-ID: <20120320175107.16444.21194.idtracker@ietfa.amsl.com> Date: Tue, 20 Mar 2012 10:51:07 -0700 Cc: marf mailing list , marf chair , RFC Editor Subject: [marf] Protocol Action: 'Extensions to DKIM for Failure Reporting' to Proposed Standard (draft-ietf-marf-dkim-reporting-16.txt) X-BeenThere: marf@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Message Abuse Report Format working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 20 Mar 2012 17:51:09 -0000 The IESG has approved the following document: - 'Extensions to DKIM for Failure Reporting' (draft-ietf-marf-dkim-reporting-16.txt) as a Proposed Standard This document is the product of the Messaging Abuse Reporting Format Working Group. The IESG contact persons are Pete Resnick and Peter Saint-Andre. A URL of this Internet Draft is: http://datatracker.ietf.org/doc/draft-ietf-marf-dkim-reporting/ Technical Summary Deployers of message authentication technologies are increasingly seeking visibility into DKIM verification failures and conformance failures involving the published signing practices (e.g., ADSP) of an Administrative Management Domain. This document extends DKIM and ADSP to add an optional reporting address and some reporting parameters. Reports are generated using the format defined in draft-ietf-marf-authfailure-report. Working Group Summary There is nothing of real note in the working group discussion. The document was not controversial, and in the normal process of hammering out the details, everything went smoothly. The document has very broad consensus in the MARF working group. Document Quality There is at least one open-source implementation now, from the document editor. There is also an effort called DMARC, which builds on DKIM, and some people involved with that work plan to implement this protocol. Personnel Barry Leiba is the document shepherd Pete Resnick is the responsible AD. From msk@cloudmark.com Wed Mar 28 00:48:30 2012 Return-Path: X-Original-To: marf@ietfa.amsl.com Delivered-To: marf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 34E9621F88B5 for ; Wed, 28 Mar 2012 00:48:30 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.587 X-Spam-Level: X-Spam-Status: No, score=-102.587 tagged_above=-999 required=5 tests=[AWL=0.010, BAYES_00=-2.599, HTML_MESSAGE=0.001, MIME_HTML_MOSTLY=0.001, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id shHNXLznGDDH for ; Wed, 28 Mar 2012 00:48:29 -0700 (PDT) Received: from ht2-outbound.cloudmark.com (ht2-outbound.cloudmark.com [72.5.239.26]) by ietfa.amsl.com (Postfix) with ESMTP id 941C821F88B2 for ; Wed, 28 Mar 2012 00:48:29 -0700 (PDT) Received: from EXCH-MBX901.corp.cloudmark.com ([fe80::addf:849a:f71c:4a82]) by exch-htcas902.corp.cloudmark.com ([fe80::e82a:4f80:7f44:eaf7%12]) with mapi id 14.01.0355.002; Wed, 28 Mar 2012 00:48:28 -0700 From: "Murray S. Kucherawy" To: "marf@ietf.org" Thread-Topic: Minutes from the IETF 83 MARF meeting Thread-Index: Ac0MtyiMTM26yNlNT6GtvroEQEXhhw== Date: Wed, 28 Mar 2012 07:48:28 +0000 Message-ID: <9452079D1A51524AA5749AD23E0039280BCFB1@exch-mbx901.corp.cloudmark.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: x-originating-ip: [130.129.23.154] Content-Type: multipart/mixed; boundary="_004_9452079D1A51524AA5749AD23E0039280BCFB1exchmbx901corpclo_" MIME-Version: 1.0 Subject: [marf] Minutes from the IETF 83 MARF meeting X-BeenThere: marf@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Message Abuse Report Format working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 28 Mar 2012 07:48:30 -0000 --_004_9452079D1A51524AA5749AD23E0039280BCFB1exchmbx901corpclo_ Content-Type: multipart/alternative; boundary="_000_9452079D1A51524AA5749AD23E0039280BCFB1exchmbx901corpclo_" --_000_9452079D1A51524AA5749AD23E0039280BCFB1exchmbx901corpclo_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable --_000_9452079D1A51524AA5749AD23E0039280BCFB1exchmbx901corpclo_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

 

--_000_9452079D1A51524AA5749AD23E0039280BCFB1exchmbx901corpclo_-- --_004_9452079D1A51524AA5749AD23E0039280BCFB1exchmbx901corpclo_ Content-Type: text/plain; name="IETF 83 MARF Minutes.txt" Content-Description: IETF 83 MARF Minutes.txt Content-Disposition: attachment; filename="IETF 83 MARF Minutes.txt"; size=1056; creation-date="Wed, 28 Mar 2012 07:46:50 GMT"; modification-date="Wed, 28 Mar 2012 07:46:50 GMT" Content-Transfer-Encoding: base64 SUVURiA4MywgUGFyaXMNCk1BUkYgV29ya2luZyBHcm91cCBtaW51dGVzDQpUdWVzZGF5LCBNYXJj aCAyNywgMTc6MTAtMTg6MTANCg0KQ2hhaXJzOglNdXJyYXkgUy4gS3VjaGVyYXd5IDxtc2tAY2xv dWRtYXJrLmNvbT4NCg0KMS4gQWdlbmRhIGJhc2hpbmcsIGJsdWUgc2hlZXRzLCBldGMuDQoNCjIu IEJhcnJ5IExlaWJhIG5vIGxvbmdlciBjby1jaGFpciwgYXMgaGUgaXMgdGhlIGluY29taW5nIEFQ UCBBRA0KDQozLiBNdXJyYXkgcHJlc2VudGVkIGEgc3VtbWFyeSBvZiBNQVJGJ3MgYWNjb21wbGlz aG1lbnRzDQoNCjQuIE11cnJheSBnYXZlIGN1cnJlbnQgZG9jdW1lbnQgc3RhdHVzDQoJLSBhbGwg ZG9jdW1lbnRzIGNvbXBsZXRlZCBXR0xDDQoJLSBhbGwgZG9jdW1lbnRzIGV4Y2VwdCBkcmFmdC1p ZXRmLW1hcmYtYXMgYXJlIGluIFJGQyBFZGl0b3IgcXVldWUNCgktIGRyYWZ0LWlldGYtbWFyZi1h cyBpcyBpbiBBRCBFdmFsdWF0aW9uDQoJLSBhbGwgb2YgdGhlbSBhcmUgYSBkb2N1bWVudCBjbHVz dGVyLCBzbyB0aGV5J2xsIGFsbCBwdWJsaXNoIHRvZ2V0aGVyDQoJLSBubyBvdGhlciB3b3JrIHBl bmRpbmcNCg0KNS4gTXVycmF5IHRhbGtlZCBhYm91dCByZXBvcnRpbmcgZGlzY292ZXJ5LCBvbmUg b2Ygb3VyIGluY29tcGxldGUgY2hhcnRlciBpdGVtcw0KCS0gbm8gY2hhbXBpb24gY2FtZSBmb3J3 YXJkIGFmdGVyIEpEIHdhcyB1bmFibGUgdG8gY29tcGxldGUgaGlzIGRyYWZ0DQoNCjYuIE11cnJh eSB0YWxrZWQgYWJvdXQgU3BhbVJlcCwgb3VyIG90aGVyIGluY29tcGxldGUgY2hhcnRlciBpdGVt DQoJLSBoYXMgc2VlbiBubyBhZG9wdGlvbg0KDQo3LiBNdXJyYXkgc3VtbWFyaXplZCB1cGNvbWlu ZyBhbmQgcmVsYXRlZCB3b3JrDQoJLSBETUFSQw0KCS0gTUlMRSBXRw0KCS0gU1BGQklTIFdHDQoJ LSAiUG9ydHMiIGZpZWxkIHJlZ2lzdHJhdGlvbg0KDQo4LiBSYWlzZWQgYSBnbGFzcyB0byBhIGpv YiB3ZWxsIGRvbmUNCgktIFdHIHdpbGwgY2xvc2UgZG93biBhZnRlciB0aGUgY2x1c3RlciBwdWJs aXNoZXMNCg0KQWRqb3VybmVkIGF0IDE3OjE5Lg0K --_004_9452079D1A51524AA5749AD23E0039280BCFB1exchmbx901corpclo_-- From msk@cloudmark.com Thu Mar 29 13:36:11 2012 Return-Path: X-Original-To: marf@ietfa.amsl.com Delivered-To: marf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7A0B121E80CA for ; Thu, 29 Mar 2012 13:36:11 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.445 X-Spam-Level: X-Spam-Status: No, score=-101.445 tagged_above=-999 required=5 tests=[AWL=-1.147, BAYES_00=-2.599, HTML_MESSAGE=0.001, MANGLED_DOSE=2.3, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id j1CYs8JjB4hF for ; Thu, 29 Mar 2012 13:36:08 -0700 (PDT) Received: from ht1-outbound.cloudmark.com (ht1-outbound.cloudmark.com [72.5.239.25]) by ietfa.amsl.com (Postfix) with ESMTP id 4420321E801F for ; Thu, 29 Mar 2012 13:36:08 -0700 (PDT) Received: from EXCH-MBX901.corp.cloudmark.com ([fe80::addf:849a:f71c:4a82]) by exch-htcas901.corp.cloudmark.com ([fe80::2524:76b6:a865:539c%10]) with mapi id 14.01.0355.002; Thu, 29 Mar 2012 13:36:07 -0700 From: "Murray S. Kucherawy" To: "marf@ietf.org" Thread-Topic: draft-ietf-marf-as status and review Thread-Index: Ac0N640r3tAf5vkTQrqcUNFj+aEHyg== Date: Thu, 29 Mar 2012 20:36:06 +0000 Message-ID: <9452079D1A51524AA5749AD23E0039280C1C60@exch-mbx901.corp.cloudmark.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: x-originating-ip: [130.129.64.89] Content-Type: multipart/mixed; boundary="_004_9452079D1A51524AA5749AD23E0039280C1C60exchmbx901corpclo_" MIME-Version: 1.0 Subject: [marf] draft-ietf-marf-as status and review X-BeenThere: marf@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Message Abuse Report Format working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 29 Mar 2012 20:36:11 -0000 --_004_9452079D1A51524AA5749AD23E0039280C1C60exchmbx901corpclo_ Content-Type: multipart/alternative; boundary="_000_9452079D1A51524AA5749AD23E0039280C1C60exchmbx901corpclo_" --_000_9452079D1A51524AA5749AD23E0039280C1C60exchmbx901corpclo_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable During AD Evaluation, which is the first step of the publication process, o= ur AD had numerous concerns with the applicability statement draft, all of = which were focused on clarity in our use of normative language. I sat down with him and with Barry here in Paris and sorted out his concern= s. The attached diff iooks much better to him, and I agree that it makes t= he language much tighter and even removes some redundancy in one case. Please get a look and let me know what you think, up or down. I'd like to = post it late Friday night (Pacific time), and I need at least a couple of p= eople to make sure that I haven't broken anything we wanted to say. After = that it will get scheduled for an IETF-wide Last Call and IESG evaluation. -MSK --_000_9452079D1A51524AA5749AD23E0039280C1C60exchmbx901corpclo_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

During AD Evaluation, which is the first step of the= publication process, our AD had numerous concerns with the applicability s= tatement draft, all of which were focused on clarity in our use of normativ= e language.

 

I sat down with him and with Barry here in Paris and= sorted out his concerns.  The attached diff iooks much better to him,= and I agree that it makes the language much tighter and even removes some = redundancy in one case.


Please get a look and let me know what you think, up or down.  I’= ;d like to post it late Friday night (Pacific time), and I need at least a = couple of people to make sure that I haven’t broken anything we wante= d to say.  After that it will get scheduled for an IETF-wide Last Call and IESG evaluation.

 

-MSK

--_000_9452079D1A51524AA5749AD23E0039280C1C60exchmbx901corpclo_-- --_004_9452079D1A51524AA5749AD23E0039280C1C60exchmbx901corpclo_ Content-Type: text/html; name="marf-as.html" Content-Description: marf-as.html Content-Disposition: attachment; filename="marf-as.html"; size=97080; creation-date="Thu, 29 Mar 2012 20:32:10 GMT"; modification-date="Thu, 29 Mar 2012 20:32:12 GMT" Content-Transfer-Encoding: base64 PCFET0NUWVBFIGh0bWwgUFVCTElDICItLy9XM0MvL0RURCBYSFRNTCAxLjAgVHJhbnNpdGlvbmFs Ly9FTiIgImh0dHA6Ly93d3cudzMub3JnL1RSL3hodG1sMS9EVEQveGh0bWwxLXRyYW5zaXRpb25h bC5kdGQiPg0KPCEtLSBHZW5lcmF0ZWQgYnkgcmZjZGlmZiAxLjMzOiByZmNkaWZmIC0gLWh0bWwg ZHJhZnQtaWV0Zi1tYXJmLWFzLTExLnR4dCBkcmFmdC1pZXRmLW1hcmYtYXMudHh0IC0tPg0KPCEt LSA8IURPQ1RZUEUgaHRtbCBQVUJMSUMgIi0vL1czQy8vRFREIEhUTUwgNC4wMSBUcmFuc2l0aW9u YWwiID4gLS0+DQo8IS0tIFN5c3RlbTogRnJlZUJTRCBtZWR1c2EgNi4yLVJFTEVBU0UgRnJlZUJT RCA2LjItUkVMRUFTRSAjMDogRnJpIEphbiAxMiAwODo0MzozMCBVVEMgMjAwNyAgICAgcm9vdEBw b3J0bm95LmNzZS5idWZmYWxvLmVkdTovdXNyL29iai91c3Ivc3JjL3N5cy9TTVAgIGFtZDY0IC0t Pg0KPCEtLSBVc2luZyBhd2s6IC91c3IvbG9jYWwvYmluL2dhd2s6IEdOVSBBd2sgMy4xLjcgLS0+ DQo8IS0tIFVzaW5nIGRpZmY6IC91c3IvYmluL2RpZmY6IGRpZmYgLSBHTlUgZGlmZnV0aWxzIHZl cnNpb24gMi43IC0tPg0KPCEtLSBVc2luZyB3ZGlmZjogL3Vzci9sb2NhbC9iaW4vd2RpZmY6IEdO VSB3ZGlmZiAwLjUgLS0+DQo8aHRtbD48aGVhZD4gDQogIDxtZXRhIGh0dHAtZXF1aXY9IkNvbnRl bnQtVHlwZSIgY29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PUlTTy04ODU5LTEiPiANCiAgPG1l dGEgaHR0cC1lcXVpdj0iQ29udGVudC1TdHlsZS1UeXBlIiBjb250ZW50PSJ0ZXh0L2NzcyI+IA0K ICA8dGl0bGU+RGlmZjogZHJhZnQtaWV0Zi1tYXJmLWFzLTExLnR4dCAtIGRyYWZ0LWlldGYtbWFy Zi1hcy50eHQ8L3RpdGxlPiANCiAgPHN0eWxlIHR5cGU9InRleHQvY3NzIj4gDQogICAgYm9keSAg ICB7IG1hcmdpbjogMC40ZXg7IG1hcmdpbi1yaWdodDogYXV0bzsgfSANCiAgICB0ciAgICAgIHsg fSANCiAgICB0ZCAgICAgIHsgd2hpdGUtc3BhY2U6IHByZTsgZm9udC1mYW1pbHk6IG1vbm9zcGFj ZTsgdmVydGljYWwtYWxpZ246IHRvcDsgZm9udC1zaXplOiAwLjg2ZW07fSANCiAgICB0aCAgICAg IHsgZm9udC1zaXplOiAwLjg2ZW07IH0gDQogICAgLnNtYWxsICB7IGZvbnQtc2l6ZTogMC42ZW07 IGZvbnQtc3R5bGU6IGl0YWxpYzsgZm9udC1mYW1pbHk6IFZlcmRhbmEsIEhlbHZldGljYSwgc2Fu cy1zZXJpZjsgfSANCiAgICAubGVmdCAgIHsgYmFja2dyb3VuZC1jb2xvcjogI0VFRTsgfSANCiAg ICAucmlnaHQgIHsgYmFja2dyb3VuZC1jb2xvcjogI0ZGRjsgfSANCiAgICAuZGlmZiAgIHsgYmFj a2dyb3VuZC1jb2xvcjogI0NDRjsgfSANCiAgICAubGJsb2NrIHsgYmFja2dyb3VuZC1jb2xvcjog I0JGQjsgfSANCiAgICAucmJsb2NrIHsgYmFja2dyb3VuZC1jb2xvcjogI0ZGODsgfSANCiAgICAu aW5zZXJ0IHsgYmFja2dyb3VuZC1jb2xvcjogIzhGRjsgfSANCiAgICAuZGVsZXRlIHsgYmFja2dy b3VuZC1jb2xvcjogI0FDRjsgfSANCiAgICAudm9pZCAgIHsgYmFja2dyb3VuZC1jb2xvcjogI0ZG QjsgfSANCiAgICAuY29udCAgIHsgYmFja2dyb3VuZC1jb2xvcjogI0VFRTsgfSANCiAgICAubGlu ZWJyIHsgYmFja2dyb3VuZC1jb2xvcjogI0FBQTsgfSANCiAgICAubGluZW5vIHsgY29sb3I6IHJl ZDsgYmFja2dyb3VuZC1jb2xvcjogI0ZGRjsgZm9udC1zaXplOiAwLjdlbTsgdGV4dC1hbGlnbjog cmlnaHQ7IHBhZGRpbmc6IDAgMnB4OyB9IA0KICAgIC5lbGlwc2lzeyBiYWNrZ3JvdW5kLWNvbG9y OiAjQUFBOyB9IA0KICAgIC5sZWZ0IC5jb250IHsgYmFja2dyb3VuZC1jb2xvcjogI0RERDsgfSAN CiAgICAucmlnaHQgLmNvbnQgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjRUVFOyB9IA0KICAgIC5sYmxv Y2sgLmNvbnQgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjOUQ5OyB9IA0KICAgIC5yYmxvY2sgLmNvbnQg eyBiYWNrZ3JvdW5kLWNvbG9yOiAjREQ2OyB9IA0KICAgIC5pbnNlcnQgLmNvbnQgeyBiYWNrZ3Jv dW5kLWNvbG9yOiAjMEREOyB9IA0KICAgIC5kZWxldGUgLmNvbnQgeyBiYWNrZ3JvdW5kLWNvbG9y OiAjOEFEOyB9IA0KICAgIC5zdGF0cywgLnN0YXRzIHRkLCAuc3RhdHMgdGggeyBiYWNrZ3JvdW5k LWNvbG9yOiAjRUVFOyBwYWRkaW5nOiAycHggMDsgfSANCiAgPC9zdHlsZT4gDQo8L2hlYWQ+IA0K PGJvZHk+IA0KICA8dGFibGUgYm9yZGVyPSIwIiBjZWxscGFkZGluZz0iMCIgY2VsbHNwYWNpbmc9 IjAiPiANCiAgPHRib2R5Pjx0ciBiZ2NvbG9yPSJvcmFuZ2UiPjx0aD48L3RoPjx0aD4mbmJzcDtk cmFmdC1pZXRmLW1hcmYtYXMtMTEudHh0Jm5ic3A7PC90aD48dGg+IDwvdGg+PHRoPiZuYnNwO2Ry YWZ0LWlldGYtbWFyZi1hcy50eHQmbmJzcDs8L3RoPjx0aD48L3RoPjwvdHI+IA0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+TUFSRiBXb3JraW5nIEdyb3VwICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBKLiBGYWxrPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+TUFSRiBXb3JraW5nIEdyb3VwICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICBKLiBGYWxrPC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij5JbnRlcm5ldC1EcmFmdCAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgUmV0dXJuIFBhdGg8L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij5JbnRlcm5ldC1EcmFmdCAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgUmV0dXJuIFBhdGg8L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPlVwZGF0ZXM6IDU5NjUgKGlm IGFwcHJvdmVkKSAgICAgICAgICAgICAgICAgICAgICAgICAgICBNLiBLdWNoZXJhd3ksIEVkLjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPlVwZGF0ZXM6IDU5NjUgKGlmIGFwcHJvdmVk KSAgICAgICAgICAgICAgICAgICAgICAgICAgICBNLiBLdWNoZXJhd3ksIEVkLjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+SW50ZW5kZWQgc3Rh dHVzOiBTdGFuZGFyZHMgVHJhY2sgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgQ2xvdWRt YXJrPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+SW50ZW5kZWQgc3RhdHVzOiBTdGFu ZGFyZHMgVHJhY2sgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgQ2xvdWRtYXJrPC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+ PGEgbmFtZT0iZGlmZjAwMDEiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj5FeHBpcmVzOiBTZXB0 ZW1iZXIgMzxzcGFuIGNsYXNzPSJkZWxldGUiPiwgMjAxMiAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgIE1hcmNoIDI8L3NwYW4+LCAyMDEyPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy YmxvY2siPkV4cGlyZXM6IFNlcHRlbWJlciAzPHNwYW4gY2xhc3M9Imluc2VydCI+MCwgMjAxMiAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICBNYXJjaCAyOTwvc3Bhbj4sIDIwMTI8L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+IENyZWF0aW9uIGFuZCBVc2Ugb2YgRW1haWwgRmVlZGJh Y2sgUmVwb3J0czogQW4gQXBwbGljYWJpbGl0eSBTdGF0ZW1lbnQ8L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij4gQ3JlYXRpb24gYW5kIFVzZSBvZiBFbWFpbCBGZWVkYmFjayBSZXBvcnRz OiBBbiBBcHBsaWNhYmlsaXR5IFN0YXRlbWVudDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgICAgICAgICAgZm9yIHRoZSBBYnVz ZSBSZXBvcnRpbmcgRm9ybWF0IChBUkYpPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ ICAgICAgICAgICAgICAgICAgZm9yIHRoZSBBYnVzZSBSZXBvcnRpbmcgRm9ybWF0IChBUkYpPC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQ+PGEgbmFtZT0iZGlmZjAwMDIiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICAgICAg ICAgICAgICAgICAgICAgZHJhZnQtaWV0Zi1tYXJmLWFzLTE8c3BhbiBjbGFzcz0iZGVsZXRlIj4x PC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICAgICAgICAgICAgICAg ICAgICAgICAgZHJhZnQtaWV0Zi1tYXJmLWFzLTE8c3BhbiBjbGFzcz0iaW5zZXJ0Ij4yPC9zcGFu PjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij5BYnN0cmFjdDwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPkFic3RyYWN0PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAg IFJGQyA1OTY1IGRlZmluZXMgYW4gZXh0ZW5zaWJsZSwgbWFjaGluZS1yZWFkYWJsZSBmb3JtYXQg aW50ZW5kZWQgZm9yPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgUkZDIDU5NjUg ZGVmaW5lcyBhbiBleHRlbnNpYmxlLCBtYWNoaW5lLXJlYWRhYmxlIGZvcm1hdCBpbnRlbmRlZCBm b3I8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PiAgIG1haWwgb3BlcmF0b3JzIHRvIHJlcG9ydCBmZWVkYmFjayBhYm91dCByZWNlaXZlZCBlbWFp bCB0byBvdGhlcjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIG1haWwgb3BlcmF0 b3JzIHRvIHJlcG9ydCBmZWVkYmFjayBhYm91dCByZWNlaXZlZCBlbWFpbCB0byBvdGhlcjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgcGFy dGllcy4gIFRoaXMgQXBwbGljYWJpbGl0eSBTdGF0ZW1lbnQgZGVzY3JpYmVzIGNvbW1vbiBtZXRo b2RzIGZvcjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHBhcnRpZXMuICBUaGlz IEFwcGxpY2FiaWxpdHkgU3RhdGVtZW50IGRlc2NyaWJlcyBjb21tb24gbWV0aG9kcyBmb3I8L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHV0 aWxpemluZyB0aGlzIGZvcm1hdCBmb3IgcmVwb3J0aW5nIGJvdGggYWJ1c2UgYW5kIGF1dGhlbnRp Y2F0aW9uPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgdXRpbGl6aW5nIHRoaXMg Zm9ybWF0IGZvciByZXBvcnRpbmcgYm90aCBhYnVzZSBhbmQgYXV0aGVudGljYXRpb248L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGZhaWx1 cmUgZXZlbnRzLiAgTWFpbGJveCBQcm92aWRlcnMgb2YgYW55IHNpemUsIG1haWwgc2VuZGluZzwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGZhaWx1cmUgZXZlbnRzLiAgTWFpbGJv eCBQcm92aWRlcnMgb2YgYW55IHNpemUsIG1haWwgc2VuZGluZzwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgZW50aXRpZXMsIGFuZCBlbmQg dXNlcnMgY2FuIHVzZSB0aGVzZSBtZXRob2RzIGFzIGEgYmFzaXMgdG8gY3JlYXRlPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgZW50aXRpZXMsIGFuZCBlbmQgdXNlcnMgY2FuIHVz ZSB0aGVzZSBtZXRob2RzIGFzIGEgYmFzaXMgdG8gY3JlYXRlPC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBwcm9jZWR1cmVzIHRoYXQgYmVz dCBzdWl0IHRoZW0uICBTb21lIHJlbGF0ZWQgb3B0aW9uYWwgbWVjaGFuaXNtcyBhcmU8L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBwcm9jZWR1cmVzIHRoYXQgYmVzdCBzdWl0IHRo ZW0uICBTb21lIHJlbGF0ZWQgb3B0aW9uYWwgbWVjaGFuaXNtcyBhcmU8L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPg0KICAgICAgPHRyIGJnY29sb3I9 ImdyYXkiPjx0ZD48L3RkPjx0aD48YSBuYW1lPSJwYXJ0LWwyIj48c21hbGw+c2tpcHBpbmcgdG8g Y2hhbmdlIGF0PC9zbWFsbD48ZW0+IHBhZ2UgMSwgbGluZSAzOTwvZW0+PC9hPjwvdGg+PHRoPiA8 L3RoPjx0aD48YSBuYW1lPSJwYXJ0LXIyIj48c21hbGw+c2tpcHBpbmcgdG8gY2hhbmdlIGF0PC9z bWFsbD48ZW0+IHBhZ2UgMSwgbGluZSAzOTwvZW0+PC9hPjwvdGg+PHRkPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij4gICBJbnRlcm5ldC1EcmFmdHMgYXJlIHdvcmtpbmcgZG9jdW1lbnRzIG9mIHRoZSBJbnRl cm5ldCBFbmdpbmVlcmluZzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIEludGVy bmV0LURyYWZ0cyBhcmUgd29ya2luZyBkb2N1bWVudHMgb2YgdGhlIEludGVybmV0IEVuZ2luZWVy aW5nPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij4gICBUYXNrIEZvcmNlIChJRVRGKS4gIE5vdGUgdGhhdCBvdGhlciBncm91cHMgbWF5IGFsc28g ZGlzdHJpYnV0ZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFRhc2sgRm9yY2Ug KElFVEYpLiAgTm90ZSB0aGF0IG90aGVyIGdyb3VwcyBtYXkgYWxzbyBkaXN0cmlidXRlPC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICB3b3Jr aW5nIGRvY3VtZW50cyBhcyBJbnRlcm5ldC1EcmFmdHMuICBUaGUgbGlzdCBvZiBjdXJyZW50IElu dGVybmV0LTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHdvcmtpbmcgZG9jdW1l bnRzIGFzIEludGVybmV0LURyYWZ0cy4gIFRoZSBsaXN0IG9mIGN1cnJlbnQgSW50ZXJuZXQtPC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBE cmFmdHMgaXMgYXQgaHR0cDovL2RhdGF0cmFja2VyLmlldGYub3JnL2RyYWZ0cy9jdXJyZW50Ly48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBEcmFmdHMgaXMgYXQgaHR0cDovL2Rh dGF0cmFja2VyLmlldGYub3JnL2RyYWZ0cy9jdXJyZW50Ly48L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+ICAgSW50ZXJuZXQtRHJhZnRzIGFyZSBkcmFmdCBkb2N1bWVudHMgdmFsaWQgZm9y IGEgbWF4aW11bSBvZiBzaXggbW9udGhzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ ICAgSW50ZXJuZXQtRHJhZnRzIGFyZSBkcmFmdCBkb2N1bWVudHMgdmFsaWQgZm9yIGEgbWF4aW11 bSBvZiBzaXggbW9udGhzPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij4gICBhbmQgbWF5IGJlIHVwZGF0ZWQsIHJlcGxhY2VkLCBvciBvYnNvbGV0 ZWQgYnkgb3RoZXIgZG9jdW1lbnRzIGF0IGFueTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPiAgIGFuZCBtYXkgYmUgdXBkYXRlZCwgcmVwbGFjZWQsIG9yIG9ic29sZXRlZCBieSBvdGhl ciBkb2N1bWVudHMgYXQgYW55PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsZWZ0Ij4gICB0aW1lLiAgSXQgaXMgaW5hcHByb3ByaWF0ZSB0byB1c2UgSW50 ZXJuZXQtRHJhZnRzIGFzIHJlZmVyZW5jZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PiAgIHRpbWUuICBJdCBpcyBpbmFwcHJvcHJpYXRlIHRvIHVzZSBJbnRlcm5ldC1EcmFmdHMgYXMg cmVmZXJlbmNlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij4gICBtYXRlcmlhbCBvciB0byBjaXRlIHRoZW0gb3RoZXIgdGhhbiBhcyAid29yayBp biBwcm9ncmVzcy4iPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgbWF0ZXJpYWwg b3IgdG8gY2l0ZSB0aGVtIG90aGVyIHRoYW4gYXMgIndvcmsgaW4gcHJvZ3Jlc3MuIjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAwMDMiPjwvYT48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGJsb2NrIj4gICBUaGlzIEludGVybmV0LURyYWZ0IHdpbGwgZXhwaXJlIG9uIFNl cHRlbWJlciAzLCAyMDEyLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICBUaGlz IEludGVybmV0LURyYWZ0IHdpbGwgZXhwaXJlIG9uIFNlcHRlbWJlciAzPHNwYW4gY2xhc3M9Imlu c2VydCI+MDwvc3Bhbj4sIDIwMTIuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPkNvcHly aWdodCBOb3RpY2U8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij5Db3B5cmlnaHQgTm90 aWNlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIENvcHlyaWdodCAoYykgMjAxMiBJ RVRGIFRydXN0IGFuZCB0aGUgcGVyc29ucyBpZGVudGlmaWVkIGFzIHRoZTwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPiAgIENvcHlyaWdodCAoYykgMjAxMiBJRVRGIFRydXN0IGFuZCB0 aGUgcGVyc29ucyBpZGVudGlmaWVkIGFzIHRoZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgZG9jdW1lbnQgYXV0aG9ycy4gIEFsbCByaWdo dHMgcmVzZXJ2ZWQuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgZG9jdW1lbnQg YXV0aG9ycy4gIEFsbCByaWdodHMgcmVzZXJ2ZWQuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPiAgIFRoaXMgZG9jdW1lbnQgaXMgc3ViamVjdCB0byBCQ1AgNzggYW5kIHRoZSBJRVRGIFRy dXN0J3MgTGVnYWw8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBUaGlzIGRvY3Vt ZW50IGlzIHN1YmplY3QgdG8gQkNQIDc4IGFuZCB0aGUgSUVURiBUcnVzdCdzIExlZ2FsPC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBQcm92 aXNpb25zIFJlbGF0aW5nIHRvIElFVEYgRG9jdW1lbnRzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyaWdodCI+ICAgUHJvdmlzaW9ucyBSZWxhdGluZyB0byBJRVRGIERvY3VtZW50czwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgKGh0dHA6 Ly90cnVzdGVlLmlldGYub3JnL2xpY2Vuc2UtaW5mbykgaW4gZWZmZWN0IG9uIHRoZSBkYXRlIG9m PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgKGh0dHA6Ly90cnVzdGVlLmlldGYu b3JnL2xpY2Vuc2UtaW5mbykgaW4gZWZmZWN0IG9uIHRoZSBkYXRlIG9mPC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBwdWJsaWNhdGlvbiBv ZiB0aGlzIGRvY3VtZW50LiAgUGxlYXNlIHJldmlldyB0aGVzZSBkb2N1bWVudHM8L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBwdWJsaWNhdGlvbiBvZiB0aGlzIGRvY3VtZW50LiAg UGxlYXNlIHJldmlldyB0aGVzZSBkb2N1bWVudHM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQg Y2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPg0KICAgICAgPHRyIGJnY29sb3I9ImdyYXkiPjx0ZD48 L3RkPjx0aD48YSBuYW1lPSJwYXJ0LWwzIj48c21hbGw+c2tpcHBpbmcgdG8gY2hhbmdlIGF0PC9z bWFsbD48ZW0+IHBhZ2UgMiwgbGluZSAzMjwvZW0+PC9hPjwvdGg+PHRoPiA8L3RoPjx0aD48YSBu YW1lPSJwYXJ0LXIzIj48c21hbGw+c2tpcHBpbmcgdG8gY2hhbmdlIGF0PC9zbWFsbD48ZW0+IHBh Z2UgMiwgbGluZSAzMjwvZW0+PC9hPjwvdGg+PHRkPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAg UmVwb3J0cyAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gIDU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgUmVwb3J0cyAg LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDU8 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAg ICAgNS4xLiAgR2VuZXJhbCBDb25zaWRlcmF0aW9ucyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAgNTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgNS4xLiAg R2VuZXJhbCBDb25zaWRlcmF0aW9ucyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAgNTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+ICAgICA1LjIuICBXaGF0IFRvIEV4cGVjdCAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuICA2PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICA1 LjIuICBXaGF0IFRvIEV4cGVjdCAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuICA2PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij4gICAgIDUuMy4gIFdoYXQgVG8gRG8gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gIDY8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4g ICAgIDUuMy4gIFdoYXQgVG8gRG8gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gIDY8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPiAgIDYuICBHZW5lcmF0aW5nIGFuZCBIYW5kbGluZyBVbnNvbGljaXRlZCBB YnVzZSBSZXBvcnRzICAuIC4gLiAuIC4gLiAgNjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPiAgIDYuICBHZW5lcmF0aW5nIGFuZCBIYW5kbGluZyBVbnNvbGljaXRlZCBBYnVzZSBSZXBv cnRzICAuIC4gLiAuIC4gLiAgNjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+ICAgICA2LjEuICBHZW5lcmFsIENvbnNpZGVyYXRpb25zIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA2PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyaWdodCI+ICAgICA2LjEuICBHZW5lcmFsIENvbnNpZGVyYXRpb25zIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuICA2PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgIDYuMi4gIFdoZW4gVG8gR2VuZXJhdGUgUmVwb3J0 cyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDc8L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij4gICAgIDYuMi4gIFdoZW4gVG8gR2VuZXJhdGUgUmVwb3J0cyAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDc8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgNi4zLiAgV2hlcmUgVG8gU2VuZCBSZXBv cnRzICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgNzwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgNi4zLiAgV2hlcmUgVG8gU2VuZCBSZXBvcnRzICAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgNzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICA2LjQuICBXaGF0IFRvIFB1dCBJ biBSZXBvcnRzIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA4PC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICA2LjQuICBXaGF0IFRvIFB1dCBJbiBSZXBvcnRz IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA4PC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgIDYuNS4gIFdoYXQgVG8g RG8gV2l0aCBSZXBvcnRzICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDk8L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgIDYuNS4gIFdoYXQgVG8gRG8gV2l0aCBS ZXBvcnRzICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDk8L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZD48YSBuYW1l PSJkaWZmMDAwNCI+PC9hPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIDcuICBHZW5lcmF0aW5nIEF1 dG9tYXRpYyBBdXRoZW50aWNhdGlvbiBGYWlsdXJlIFJlcG9ydHMgIC4gLiAuIC4gLiA8c3BhbiBj bGFzcz0iZGVsZXRlIj4xMDwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ ICAgNy4gIEdlbmVyYXRpbmcgQXV0b21hdGljIEF1dGhlbnRpY2F0aW9uIEZhaWx1cmUgUmVwb3J0 cyAgLiAuIC4gLiAuICA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij45PC9zcGFuPjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICA4LiAgSUFOQSBD b25zaWRlcmF0aW9ucyAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g PHNwYW4gY2xhc3M9ImRlbGV0ZSI+MTE8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy YmxvY2siPiAgIDguICBJQU5BIENvbnNpZGVyYXRpb25zICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij4xMDwvc3Bhbj48L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIDkuICBT ZWN1cml0eSBDb25zaWRlcmF0aW9ucyAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAxMTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIDkuICBTZWN1cml0eSBD b25zaWRlcmF0aW9ucyAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAxMTwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAg ICA5LjEuICBJbiBPdGhlciBEb2N1bWVudHMgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIDExPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICA5LjEuICBJ biBPdGhlciBEb2N1bWVudHMgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IDExPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij4gICAgIDkuMi4gIEZvcmdlcmllcyAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gMTE8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgIDku Mi4gIEZvcmdlcmllcyAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gMTE8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPiAgICAgOS4zLiAgQW1wbGlmaWNhdGlvbiBBdHRhY2tzICAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAxMTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAg ICAgOS4zLiAgQW1wbGlmaWNhdGlvbiBBdHRhY2tzICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAxMTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+ICAgICA5LjQuICBBdXRvbWF0aWMgR2VuZXJhdGlvbiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIDExPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+ICAgICA5LjQuICBBdXRvbWF0aWMgR2VuZXJhdGlvbiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIDExPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsZWZ0Ij4gICAgIDkuNS4gIFJlcG9ydGluZyBNdWx0aXBsZSBJbmNpZGVudHMg LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gMTI8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJpZ2h0Ij4gICAgIDkuNS4gIFJlcG9ydGluZyBNdWx0aXBsZSBJbmNpZGVudHMgLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gMTI8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIDEwLiBBY2tub3dsZWRnZW1lbnRzIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAxMzwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPiAgIDEwLiBBY2tub3dsZWRnZW1lbnRzIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAxMzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgMTEuIFJlZmVyZW5jZXMgLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIDEzPC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+ICAgMTEuIFJlZmVyZW5jZXMgLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIDEzPC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgIDExLjEuIE5vcm1hdGl2ZSBSZWZl cmVuY2VzIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gMTM8L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgIDExLjEuIE5vcm1hdGl2ZSBSZWZlcmVuY2VzIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gMTM8L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgMTEuMi4gSW5mb3JtYXRp dmUgUmVmZXJlbmNlcyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAxNDwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgMTEuMi4gSW5mb3JtYXRpdmUgUmVmZXJl bmNlcyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAxNDwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+DQogICAgICA8dHIgYmdjb2xv cj0iZ3JheSI+PHRkPjwvdGQ+PHRoPjxhIG5hbWU9InBhcnQtbDQiPjxzbWFsbD5za2lwcGluZyB0 byBjaGFuZ2UgYXQ8L3NtYWxsPjxlbT4gcGFnZSA1LCBsaW5lIDc8L2VtPjwvYT48L3RoPjx0aD4g PC90aD48dGg+PGEgbmFtZT0icGFydC1yNCI+PHNtYWxsPnNraXBwaW5nIHRvIGNoYW5nZSBhdDwv c21hbGw+PGVtPiBwYWdlIDUsIGxpbmUgNzwvZW0+PC9hPjwvdGg+PHRkPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij40LjEuICBHZW5lcmFsIENvbnNpZGVyYXRpb25zPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyaWdodCI+NC4xLiAgR2VuZXJhbCBDb25zaWRlcmF0aW9uczwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij4gICAxLiAgQSBNYWlsYm94IFByb3ZpZGVyIHJlY2VpdmVzIHJlcG9ydHMgb2Yg YWJ1c2l2ZSBvciB1bndhbnRlZCBtYWlsPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ ICAgMS4gIEEgTWFpbGJveCBQcm92aWRlciByZWNlaXZlcyByZXBvcnRzIG9mIGFidXNpdmUgb3Ig dW53YW50ZWQgbWFpbDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+ICAgICAgIGZyb20gaXRzIHVzZXJzLCBtb3N0IG9mdGVuIGJ5IHByb3ZpZGlu ZyBhICJyZXBvcnQgc3BhbSIgYnV0dG9uPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ ICAgICAgIGZyb20gaXRzIHVzZXJzLCBtb3N0IG9mdGVuIGJ5IHByb3ZpZGluZyBhICJyZXBvcnQg c3BhbSIgYnV0dG9uPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij4gICAgICAgKG9yIHNpbWlsYXIgbm9tZW5jbGF0dXJlKSBpbiB0aGUgTVVBLiAg VGhlIG1ldGhvZCBvZiB0cmFuc2ZlcnJpbmc8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij4gICAgICAgKG9yIHNpbWlsYXIgbm9tZW5jbGF0dXJlKSBpbiB0aGUgTVVBLiAgVGhlIG1ldGhv ZCBvZiB0cmFuc2ZlcnJpbmc8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxlZnQiPiAgICAgICB0aGlzIG1lc3NhZ2UgYW5kIGFueSBhc3NvY2lhdGVkIG1l dGFkYXRhIGZyb20gdGhlIE1VQSB0byB0aGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij4gICAgICAgdGhpcyBtZXNzYWdlIGFuZCBhbnkgYXNzb2NpYXRlZCBtZXRhZGF0YSBmcm9tIHRo ZSBNVUEgdG8gdGhlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij4gICAgICAgTWFpbGJveCBQcm92aWRlcidzIEFSRiBwcm9jZXNzaW5nIHN5c3Rl bSBpcyBub3QgZGVmaW5lZCBieSBhbnk8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4g ICAgICAgTWFpbGJveCBQcm92aWRlcidzIEFSRiBwcm9jZXNzaW5nIHN5c3RlbSBpcyBub3QgZGVm aW5lZCBieSBhbnk8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPiAgICAgICBzdGFuZGFyZHMgZG9jdW1lbnQsIGJ1dCBpcyBkaXNjdXNzZWQgZnVy dGhlciBpbiBTZWN0aW9uIDMuMiBvZjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAg ICAgICBzdGFuZGFyZHMgZG9jdW1lbnQsIGJ1dCBpcyBkaXNjdXNzZWQgZnVydGhlciBpbiBTZWN0 aW9uIDMuMiBvZjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+ICAgICAgIFtSRkM2NDQ5XS4gIFBvbGljeSBjb25jZXJucyByZWxhdGVkIHRvIHRo ZSBjb2xsZWN0aW9uIG9mIHRoaXM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAg ICAgW1JGQzY0NDldLiAgUG9saWN5IGNvbmNlcm5zIHJlbGF0ZWQgdG8gdGhlIGNvbGxlY3Rpb24g b2YgdGhpczwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+ICAgICAgIGRhdGEgYXJlIGRpc2N1c3NlZCBpbiBTZWN0aW9uIDMuNCBvZiBbUkZDNjQ0 OV0uPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgIGRhdGEgYXJlIGRpc2N1 c3NlZCBpbiBTZWN0aW9uIDMuNCBvZiBbUkZDNjQ0OV0uPC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAwMDUi PjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAyLiAgVG8gaW1wbGVtZW50IHRoZSByZWNvbW1l bmRhdGlvbnMgb2YgdGhpcyBtZW1vLCB0aGUgcmVwb3J0cyA8c3BhbiBjbGFzcz0iZGVsZXRlIj5N VVNUPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICAyLiAgVG8gaW1w bGVtZW50IHRoZSByZWNvbW1lbmRhdGlvbnMgb2YgdGhpcyBtZW1vLCB0aGUgcmVwb3J0cyA8c3Bh biBjbGFzcz0iaW5zZXJ0Ij5hcmU8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgICAgICBi ZTwvc3Bhbj4gZm9ybWF0dGVkIHBlciBbUkZDNTk2NV0sIGFuZCB0cmFuc21pdHRlZCBhcyBhbiBl bWFpbCBtZXNzYWdlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgICAgICBmb3Jt YXR0ZWQgcGVyIFtSRkM1OTY1XSwgYW5kIHRyYW5zbWl0dGVkIGFzIGFuIGVtYWlsIG1lc3NhZ2U8 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAg ICAgICAoW1JGQzUzMjJdKSwgdHlwaWNhbGx5IHVzaW5nIFNNVFAgKFtSRkM1MzIxXSkuPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgIChbUkZDNTMyMl0pLCB0eXBpY2FsbHkg dXNpbmcgU01UUCAoW1JGQzUzMjFdKS48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIDMuICBPbmdvaW5nIG1haW50ZW5hbmNlIG9mIGFuIEFS RiBwcm9jZXNzaW5nIHN5c3RlbSBpcyBkaXNjdXNzZWQgaW48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij4gICAzLiAgT25nb2luZyBtYWludGVuYW5jZSBvZiBhbiBBUkYgcHJvY2Vzc2lu ZyBzeXN0ZW0gaXMgZGlzY3Vzc2VkIGluPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgU2VjdGlvbiAzLjYgb2YgW1JGQzY0NDldLjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICBTZWN0aW9uIDMuNiBvZiBbUkZD NjQ0OV0uPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjQuMi4gIFdoZXJlIFRvIFNlbmQg UmVwb3J0czwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjQuMi4gIFdoZXJlIFRvIFNl bmQgUmVwb3J0czwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFtZT0i ZGlmZjAwMDYiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAxLiAgVGhlIE1haWxib3ggUHJv dmlkZXIgU0hPVUxEIHNlbmQgcmVwb3J0cyB0byA8c3BhbiBjbGFzcz0iZGVsZXRlIj5yZWxldmFu dCBwYXJ0aWVzIHdobzwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAg MS4gIFRoZSBNYWlsYm94IFByb3ZpZGVyIFNIT1VMRCA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5OT1Q8 L3NwYW4+IHNlbmQgcmVwb3J0cyB0byA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5hZGRyZXNzZXMgdGhh dDwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxibG9jayI+ICAgICAgIGhhdmUgcmVxdWVzdGVkIDxzcGFuIGNsYXNzPSJkZWxldGUiPnRvIHJl Y2VpdmUgc3VjaCByZXBvcnRzLjwvc3Bhbj4gIFRoZSBwcm9jZXNzIHdoZXJlYnkgc3VjaDwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICAgICAgaGF2ZSA8c3BhbiBjbGFzcz0iaW5z ZXJ0Ij5ub3QgZXhwbGljaXRseTwvc3Bhbj4gcmVxdWVzdGVkIDxzcGFuIGNsYXNzPSJpbnNlcnQi PnRoZW0uPC9zcGFuPiAgVGhlIHByb2Nlc3Mgd2hlcmVieSBzdWNoPC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgcGFydGllcyBtYXkg cmVxdWVzdCB0aGUgcmVwb3J0cyBpcyBkaXNjdXNzZWQgaW4gU2VjdGlvbiAzLjUgb2Y8L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgcGFydGllcyBtYXkgcmVxdWVzdCB0aGUg cmVwb3J0cyBpcyBkaXNjdXNzZWQgaW4gU2VjdGlvbiAzLjUgb2Y8L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICBbUkZDNjQ0OV0uPC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgIFtSRkM2NDQ5XS48L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+NC4zLiAgV2hhdCBUbyBQdXQgSW4gUmVwb3J0czwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjQuMy4gIFdoYXQgVG8gUHV0IEluIFJlcG9ydHM8L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDA3Ij48L2E+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgMS4gIFRoZSByZXBvcnRzIFNIT1VMRCB1c2UgIkZlZWRi YWNrLVR5cGU6IGFidXNlIiwgYnV0IDxzcGFuIGNsYXNzPSJkZWxldGUiPk1BWTwvc3Bhbj4gdXNl IG90aGVyPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIDEuICBUaGUgcmVwb3J0 cyBTSE9VTEQgdXNlICJGZWVkYmFjay1UeXBlOiBhYnVzZSIsIGJ1dCA8c3BhbiBjbGFzcz0iaW5z ZXJ0Ij5jYW48L3NwYW4+IHVzZSBvdGhlcjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICAgdHlwZXMgYXMgPHNwYW4gY2xhc3M9ImRl bGV0ZSI+YXBwcm9wcmlhdGUuPC9zcGFuPiAgSG93ZXZlciwgdGhlIE1haWxib3ggUHJvdmlkZXIg Z2VuZXJhdGluZzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICAgICAgdHlwZXMg YXMgPHNwYW4gY2xhc3M9Imluc2VydCI+YXBwcm9wcmlhdGUgdG8gdGhlIG5hdHVyZSBvZiB0aGUg YWJ1c2UgYmVpbmcgcmVwb3J0ZWQuPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICAgdGhlIHJlcG9ydHMgPHNwYW4gY2xh c3M9ImRlbGV0ZSI+U0hPVUxEIE5PVCBhc3N1bWU8L3NwYW4+IHRoYXQgdGhlIG9wZXJhdG9yIHJl Y2VpdmluZyB0aGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgICAgIEhvd2V2 ZXIsIHRoZSBNYWlsYm94IFByb3ZpZGVyIGdlbmVyYXRpbmcgdGhlIHJlcG9ydHMgPHNwYW4gY2xh c3M9Imluc2VydCI+bmVlZHMgdG88L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgICAgICByZXBvcnRzIDxzcGFuIGNsYXNzPSJk ZWxldGUiPndpbGw8L3NwYW4+IHRyZWF0IGRpZmZlcmVudCA8c3BhbiBjbGFzcz0iZGVsZXRlIj5G ZWVkYmFjay1UeXBlczwvc3Bhbj4gZGlmZmVyZW50bHkuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAgICB1bmRlcnN0YW5kPC9zcGFuPiB0 aGF0IHRoZSBvcGVyYXRvciByZWNlaXZpbmcgdGhlIHJlcG9ydHMgPHNwYW4gY2xhc3M9Imluc2Vy dCI+bWlnaHQgbm90PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAyLiAgVGhlIDxzcGFuIGNsYXNzPSJkZWxldGUiPnJlcG9y dHMgU0hPVUxEIGluY2x1ZGUgdGhlPC9zcGFuPiBmb2xsb3dpbmcgPHNwYW4gY2xhc3M9ImRlbGV0 ZSI+b3B0aW9uYWw8L3NwYW4+IGZpZWxkcyA8c3BhbiBjbGFzcz0iZGVsZXRlIj53aGVuZXZlcjwv c3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgICAgIHRyZWF0IGRpZmZl cmVudCA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5mZWVkYmFjayB0eXBlcyBhbnk8L3NwYW4+IGRpZmZl cmVudGx5LjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICAgICAgcHJhY3RpY2FsOjwvc3Bhbj4gT3Jp Z2luYWwtTWFpbC1Gcm9tLCBBcnJpdmFsLURhdGUsIFNvdXJjZS1JUCwgT3JpZ2luYWwtPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIDIuICBUaGUgZm9sbG93aW5nIGZpZWxkcyA8 c3BhbiBjbGFzcz0iaW5zZXJ0Ij5hcmUgb3B0aW9uYWwgaW4gW1JGQzU5NjVdLCBidXQgU0hPVUxE IGJlPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGJsb2NrIj4gICAgICAgUmNwdC1Uby4gIE90aGVyIG9wdGlvbmFsIGZpZWxkcyA8c3BhbiBj bGFzcz0iZGVsZXRlIj5NQVk8L3NwYW4+IGJlIGluY2x1ZGVkLCBhcyB0aGU8L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAgIHVzZWQgaW4g dGhpcyBjb250ZXh0IHdoZW4gdGhlaXIgY29ycmVzcG9uZGluZyB2YWx1ZXMgYXJlPC9zcGFuPjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAg ICAgIGF2YWlsYWJsZTo8L3NwYW4+IE9yaWdpbmFsLU1haWwtRnJvbSwgQXJyaXZhbC1EYXRlLCBT b3VyY2UtSVAsIE9yaWdpbmFsLTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAg ICAgIFJjcHQtVG8uICBPdGhlciBvcHRpb25hbCBmaWVsZHMgPHNwYW4gY2xhc3M9Imluc2VydCI+ Y2FuPC9zcGFuPiBiZSBpbmNsdWRlZCwgYXMgdGhlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgaW1wbGVtZW50ZXIgZmVlbHMgaXMg YXBwcm9wcmlhdGUuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgIGltcGxl bWVudGVyIGZlZWxzIGlzIGFwcHJvcHJpYXRlLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDA4Ij48L2E+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgMy4gIDxzcGFuIGNsYXNzPSJkZWxldGUiPlJlcG9ydHM8 L3NwYW4+IE1BWSBiZSA8c3BhbiBjbGFzcz0iZGVsZXRlIj5zdWJqZWN0ZWQgdG8gcmVkYWN0aW9u IG9mIHVzZXItaWRlbnRpZmlhYmxlIGRhdGE8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyYmxvY2siPiAgIDMuICA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5Vc2VyLWlkZW50aWZpYWJsZSBk YXRhPC9zcGFuPiBNQVkgYmUgPHNwYW4gY2xhc3M9Imluc2VydCI+b2JzY3VyZWQ8L3NwYW4+IGFz IGRlc2NyaWJlZCBpbjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGJsb2NrIj4gICAgICAgYXMgZGVzY3JpYmVkIGluIFtJLUQuSUVURi1NQVJGLVJFREFD VElPTl0uPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgICAgICBbSS1ELklFVEYt TUFSRi1SRURBQ1RJT05dLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij41LiAgUmVjZWl2 aW5nIGFuZCBQcm9jZXNzaW5nIENvbXBsYWludC1CYXNlZCBTb2xpY2l0ZWQgQWJ1c2UgUmVwb3J0 czwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjUuICBSZWNlaXZpbmcgYW5kIFByb2Nl c3NpbmcgQ29tcGxhaW50LUJhc2VkIFNvbGljaXRlZCBBYnVzZSBSZXBvcnRzPC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFtUaGUgbnVtYmVyZWQgaXRlbXMgaW4gdGhlc2Ugc3Vic2Vj dGlvbnMgYXJlIG5vdCBpbnRlbmRlZCB0byBiZSBpbiBhPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyaWdodCI+ICAgW1RoZSBudW1iZXJlZCBpdGVtcyBpbiB0aGVzZSBzdWJzZWN0aW9ucyBhcmUg bm90IGludGVuZGVkIHRvIGJlIGluIGE8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHBhcmljdWxhciBzZXF1ZW5jZS4gIFRoZSBudW1iZXJz IGFyZSBoZXJlIGR1cmluZyBkb2N1bWVudCBkZXZlbG9wbWVudDwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPiAgIHBhcmljdWxhciBzZXF1ZW5jZS4gIFRoZSBudW1iZXJzIGFyZSBoZXJl IGR1cmluZyBkb2N1bWVudCBkZXZlbG9wbWVudDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgdG8gbWFrZSBpdCBlYXNpZXIgdG8gaWRlbnRp ZnkgdGhlIGl0ZW1zIGZvciBkaXNjdXNzaW9uLCBhbmQgd2lsbCBiZTwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPiAgIHRvIG1ha2UgaXQgZWFzaWVyIHRvIGlkZW50aWZ5IHRoZSBpdGVt cyBmb3IgZGlzY3Vzc2lvbiwgYW5kIHdpbGwgYmU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHJlbW92ZWQgYmVmb3JlIHB1YmxpY2F0aW9u Ll08L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICByZW1vdmVkIGJlZm9yZSBwdWJs aWNhdGlvbi5dPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFRoZSBmb2xsb3dpbmcg c3Vic2VjdGlvbnMgaW5jbHVkZSBzdGF0ZW1lbnRzIGFwcGxpY2FibGUgd2hlbjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFRoZSBmb2xsb3dpbmcgc3Vic2VjdGlvbnMgaW5jbHVk ZSBzdGF0ZW1lbnRzIGFwcGxpY2FibGUgd2hlbjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgcmVjZWl2aW5nIGFidXNlIHJlcG9ydHMgaW4g dGhlIGNvbnRleHQgb2YgYW4gZXN0YWJsaXNoZWQgYWJ1c2UgcmVwb3J0PC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+ICAgcmVjZWl2aW5nIGFidXNlIHJlcG9ydHMgaW4gdGhlIGNvbnRl eHQgb2YgYW4gZXN0YWJsaXNoZWQgYWJ1c2UgcmVwb3J0PC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBmZWVkYmFjayByZWxhdGlvbnNoaXAu PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgZmVlZGJhY2sgcmVsYXRpb25zaGlw LjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij41LjEuICBHZW5lcmFsIENvbnNpZGVyYXRp b25zPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+NS4xLiAgR2VuZXJhbCBDb25zaWRl cmF0aW9uczwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAxLiAgQXQgdGhlIHRpbWUg dGhpcyBkb2N1bWVudCBpcyBiZWluZyB3cml0dGVuLCBmb3IgdGhlIHVzZSBjYXNlczwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIDEuICBBdCB0aGUgdGltZSB0aGlzIGRvY3VtZW50 IGlzIGJlaW5nIHdyaXR0ZW4sIGZvciB0aGUgdXNlIGNhc2VzPC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgZGVzY3JpYmVkIGhlcmUs IG1haWwgb3BlcmF0b3JzIG5lZWQgdG8gcHJvYWN0aXZlbHkgcmVxdWVzdCBhPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgIGRlc2NyaWJlZCBoZXJlLCBtYWlsIG9wZXJhdG9y cyBuZWVkIHRvIHByb2FjdGl2ZWx5IHJlcXVlc3QgYTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgIHN0cmVhbSBvZiBBUkYgcmVwb3J0 cyBmcm9tIE1haWxib3ggUHJvdmlkZXJzLiAgUmVjb21tZW5kYXRpb25zPC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgIHN0cmVhbSBvZiBBUkYgcmVwb3J0cyBmcm9tIE1haWxi b3ggUHJvdmlkZXJzLiAgUmVjb21tZW5kYXRpb25zPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgZm9yIHByZXBhcmluZyB0byBtYWtl IHRoYXQgcmVxdWVzdCBhcmUgZGlzY3Vzc2VkIGluIFNlY3Rpb24gNC4xPC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgIGZvciBwcmVwYXJpbmcgdG8gbWFrZSB0aGF0IHJlcXVl c3QgYXJlIGRpc2N1c3NlZCBpbiBTZWN0aW9uIDQuMTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgIG9mIFtSRkM2NDQ5XS48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgb2YgW1JGQzY0NDldLjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkPjxhIG5h bWU9ImRpZmYwMDA5Ij48L2E+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICAyLiAgTWFpbCBvcGVyYXRvcnMgTVVT VCA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5OT1QgcmVqZWN0PC9zcGFuPiByZXBvcnRzIGZvcm1hdHRl ZCBwZXIgW1JGQzU5NjVdIGFzPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsYmxvY2siPiAgIDIuICBNYWlsIG9wZXJhdG9ycyBNVVNUIDxzcGFuIGNsYXNz PSJkZWxldGUiPmJlIHByZXBhcmVkIHRvIHJlY2VpdmU8L3NwYW4+IHJlcG9ydHMgZm9ybWF0dGVk IHBlcjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICAgICAgZW1haWwgbWVzc2Fn ZXMgKFtSRkM1MzIyXSkgb3ZlciBTTVRQIChbUkZDNTMyMV0pLiAgVGhlc2UgYW5kPC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgICAgICBb UkZDNTk2NV0gYXMgZW1haWwgbWVzc2FnZXMgKFtSRkM1MzIyXSkgb3ZlciBTTVRQIChbUkZDNTMy MV0pLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICAgICAgb3RoZXIgdHlwZXMg b2YgZW1haWwgbWVzc2FnZXMgdGhhdCA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5jYW48L3NwYW4+IGJl IHJlY2VpdmVkIGFyZSBkaXNjdXNzZWQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgICAgIFRoZXNlIGFuZCBvdGhlciB0eXBlcyBvZiBl bWFpbCBtZXNzYWdlcyB0aGF0IDxzcGFuIGNsYXNzPSJkZWxldGUiPm1heTwvc3Bhbj4gYmUgcmVj ZWl2ZWQgYXJlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgICAgICBpbiBTZWN0 aW9uIDQuMiBvZiBbUkZDNjQ0OV0uPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgICAgICBkaXNjdXNzZWQgaW4gU2VjdGlvbiA0LjIgb2Yg W1JGQzY0NDldLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIDMuICBNYWlsIG9w ZXJhdG9ycyBuZWVkIHRvIGNvbnNpZGVyIHRoZSBpZGVhIG9mIGF1dG9tYXRpbmcgcmVwb3J0PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgMy4gIE1haWwgb3BlcmF0b3JzIG5lZWQg dG8gY29uc2lkZXIgdGhlIGlkZWEgb2YgYXV0b21hdGluZyByZXBvcnQ8L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICBwcm9jZXNzaW5n LiAgRGlzY3Vzc2lvbiBvZiB0aGlzIGNhbiBiZSBmb3VuZCBpbiBTZWN0aW9uIDQuNCBvZjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICBwcm9jZXNzaW5nLiAgRGlzY3Vzc2lv biBvZiB0aGlzIGNhbiBiZSBmb3VuZCBpbiBTZWN0aW9uIDQuNCBvZjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgIFtSRkM2NDQ5XS48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgW1JGQzY0NDldLjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij41LjIuICBXaGF0IFRvIEV4cGVjdDwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPjUuMi4gIFdoYXQgVG8gRXhwZWN0PC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPiAgIDEuICBBbiBhdXRvbWF0ZWQgcmVwb3J0IHByb2Nlc3Npbmcgc3lzdGVt IE1VU1QgYWNjZXB0IGFsbCBGZWVkYmFjay08L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij4gICAxLiAgQW4gYXV0b21hdGVkIHJlcG9ydCBwcm9jZXNzaW5nIHN5c3RlbSBNVVNUIGFjY2Vw dCBhbGwgRmVlZGJhY2stPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAwMTAiPjwvYT48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGJsb2NrIj4gICAgICAgVHlwZXMgZGVmaW5lZCBpbiBbUkZDNTk2NV0gb3IgZXh0ZW5zaW9ucyB0 byA8c3BhbiBjbGFzcz0iZGVsZXRlIj5pdCwgYnV0IGltcGxlbWVudGVyczwvc3Bhbj48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgICAgIFR5cGVzIGRlZmluZWQgaW4gW1JGQzU5 NjVdIG9yIGV4dGVuc2lvbnMgdG8gPHNwYW4gY2xhc3M9Imluc2VydCI+aXQuICBIb3dldmVyLCBy ZXBvcnQ8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgICAgICBTSE9VTEQgTk9UPC9zcGFu PiBhc3N1bWUgdGhhdCBNYWlsYm94IFByb3ZpZGVycyB3aWxsIG1ha2UgdXNlIG9mIGFueTwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICAg cmVjZWl2ZXJzIGNhbm5vdDwvc3Bhbj4gYXNzdW1lIHRoYXQgTWFpbGJveCBQcm92aWRlcnMgd2ls bCBtYWtlIHVzZSBvZjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGJsb2NrIj4gICAgICAgRmVlZGJhY2stVHlwZSBvdGhlciB0aGFuIDxzcGFuIGNsYXNz PSJkZWxldGUiPiJhYnVzZSIuPC9zcGFuPiAgQWRkaXRpb25hbCA8c3BhbiBjbGFzcz0iZGVsZXRl Ij5sb2dpYyBtYXk8L3NwYW4+IGJlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAg ICAgICBhbnkgRmVlZGJhY2stVHlwZSBvdGhlciB0aGFuIDxzcGFuIGNsYXNzPSJpbnNlcnQiPiJh YnVzZSIsIGV4Y2VwdCB3aXRoIHByaW9yIHNwZWNpZmljPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICAgcmVxdWlyZWQg dG8gc2VwYXJhdGUgZGlmZmVyZW50IHR5cGVzIG9mIGFidXNlIHJlcG9ydHMgYWZ0ZXI8L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAgIGtu b3dsZWRnZS48L3NwYW4+ICBBZGRpdGlvbmFsIDxzcGFuIGNsYXNzPSJpbnNlcnQiPmFuYWx5c2lz IG1pZ2h0PC9zcGFuPiBiZSByZXF1aXJlZCB0byBzZXBhcmF0ZTwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICAgcmVjZWlwdC48L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgICAgIGRpZmZlcmVudCB0eXBlcyBvZiBh YnVzZSByZXBvcnRzIGFmdGVyIHJlY2VpcHQuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAyLiAgSW1wbGVtZW50ZXJzIFNIT1VMRCBOT1Qg ZXhwZWN0IGFsbCBNYWlsYm94IFByb3ZpZGVycyB0byBpbmNsdWRlPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+ICAgMi4gIEltcGxlbWVudGVycyBTSE9VTEQgTk9UIGV4cGVjdCBhbGwg TWFpbGJveCBQcm92aWRlcnMgdG8gaW5jbHVkZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgIHRoZSBzYW1lIG9wdGlvbmFsIGZpZWxk cy48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgdGhlIHNhbWUgb3B0aW9u YWwgZmllbGRzLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDExIj48L2E+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9j ayI+ICAgMy4gIFJlcG9ydHMgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+TUFZIGJlPC9zcGFuPiBzdWJq ZWN0ZWQgdG8gcmVkYWN0aW9uIG9mIHVzZXItaWRlbnRpZmlhYmxlIGRhdGE8L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJibG9jayI+ICAgMy4gIFJlcG9ydHMgPHNwYW4gY2xhc3M9Imluc2VydCI+ bWF5IGhhdmUgYmVlbjwvc3Bhbj4gc3ViamVjdGVkIHRvIHJlZGFjdGlvbiBvZiB1c2VyLWlkZW50 aWZpYWJsZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGJsb2NrIj4gICAgICAgYXMgZGVzY3JpYmVkIGluIFtJLUQuSUVURi1NQVJGLVJFREFDVElPTl0u ICBUaGF0IGRvY3VtZW50IGFsc288L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAg ICAgIGRhdGEgYXMgZGVzY3JpYmVkIGluIFtJLUQuSUVURi1NQVJGLVJFREFDVElPTl0uICBUaGF0 IGRvY3VtZW50PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsYmxvY2siPiAgICAgICBkaXNjdXNzZXMgdGhlIGhhbmRsaW5nIG9mIHN1Y2ggcmVwb3J0cy4g IFRoaXMgdGVjaG5pcXVlIGlzIGFsc288L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ ICAgICAgIGFsc28gZGlzY3Vzc2VzIHRoZSBoYW5kbGluZyBvZiBzdWNoIHJlcG9ydHMuICBUaGlz IHRlY2huaXF1ZSBpczwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGJsb2NrIj4gICAgICAgZGlzY3Vzc2VkIGluIFNlY3Rpb24gNC40IG9mIFtSRkM2NDQ5 XS48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgICAgIGFsc28gZGlzY3Vzc2Vk IGluIFNlY3Rpb24gNC40IG9mIFtSRkM2NDQ5XS48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+NS4zLiAgV2hhdCBUbyBEbzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjUuMy4g IFdoYXQgVG8gRG88L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgMS4gIEFjdGlvbnMg dGhhdCBtYWlsIG9wZXJhdG9ycyBtaWdodCB0YWtlIHVwb24gcmVjZWl2aW5nIGEgcmVwb3J0PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgMS4gIEFjdGlvbnMgdGhhdCBtYWlsIG9w ZXJhdG9ycyBtaWdodCB0YWtlIHVwb24gcmVjZWl2aW5nIGEgcmVwb3J0PC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgKG9yIG11bHRp cGxlIHJlcG9ydHMpIGFyZSBkaXNjdXNzZWQgaW4gU2VjdGlvbiA0LjMgb2YgW1JGQzY0NDldLjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICAob3IgbXVsdGlwbGUgcmVwb3J0 cykgYXJlIGRpc2N1c3NlZCBpbiBTZWN0aW9uIDQuMyBvZiBbUkZDNjQ0OV0uPC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPjYuICBHZW5lcmF0aW5nIGFuZCBIYW5kbGluZyBVbnNvbGljaXRl ZCBBYnVzZSBSZXBvcnRzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+Ni4gIEdlbmVy YXRpbmcgYW5kIEhhbmRsaW5nIFVuc29saWNpdGVkIEFidXNlIFJlcG9ydHM8L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+ICAgW1RoZSBudW1iZXJlZCBpdGVtcyBpbiB0aGVzZSBzdWJzZWN0 aW9ucyBhcmUgbm90IGludGVuZGVkIHRvIGJlIGluIGE8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJpZ2h0Ij4gICBbVGhlIG51bWJlcmVkIGl0ZW1zIGluIHRoZXNlIHN1YnNlY3Rpb25zIGFyZSBu b3QgaW50ZW5kZWQgdG8gYmUgaW4gYTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgcGFyaWN1bGFyIHNlcXVlbmNlLiAgVGhlIG51bWJlcnMg YXJlIGhlcmUgZHVyaW5nIGRvY3VtZW50IGRldmVsb3BtZW50PC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+ICAgcGFyaWN1bGFyIHNlcXVlbmNlLiAgVGhlIG51bWJlcnMgYXJlIGhlcmUg ZHVyaW5nIGRvY3VtZW50IGRldmVsb3BtZW50PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4NCiAgICAgIDx0ciBiZ2NvbG9yPSJncmF5Ij48dGQ+PC90 ZD48dGg+PGEgbmFtZT0icGFydC1sNSI+PHNtYWxsPnNraXBwaW5nIHRvIGNoYW5nZSBhdDwvc21h bGw+PGVtPiBwYWdlIDYsIGxpbmUgNDk8L2VtPjwvYT48L3RoPjx0aD4gPC90aD48dGg+PGEgbmFt ZT0icGFydC1yNSI+PHNtYWxsPnNraXBwaW5nIHRvIGNoYW5nZSBhdDwvc21hbGw+PGVtPiBwYWdl IDYsIGxpbmUgNTA8L2VtPjwvYT48L3RoPjx0ZD48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBUaGUgZm9sbG93aW5nIHN1YnNlY3Rpb25zIGluY2x1 ZGUgc3RhdGVtZW50cyBhcHBsaWNhYmxlIHdoZW4gc2VuZGluZzwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPiAgIFRoZSBmb2xsb3dpbmcgc3Vic2VjdGlvbnMgaW5jbHVkZSBzdGF0ZW1l bnRzIGFwcGxpY2FibGUgd2hlbiBzZW5kaW5nPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBvciByZWNlaXZpbmcgcmVwb3J0cyBvdXRzaWRl IG9mIHRoZSBjb250ZXh0IG9mIGFuIGVzdGFibGlzaGVkIGFidXNlPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+ICAgb3IgcmVjZWl2aW5nIHJlcG9ydHMgb3V0c2lkZSBvZiB0aGUgY29u dGV4dCBvZiBhbiBlc3RhYmxpc2hlZCBhYnVzZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgcmVwb3J0IGZlZWRiYWNrIHJlbGF0aW9uc2hp cC48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICByZXBvcnQgZmVlZGJhY2sgcmVs YXRpb25zaGlwLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij42LjEuICBHZW5lcmFsIENv bnNpZGVyYXRpb25zPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+Ni4xLiAgR2VuZXJh bCBDb25zaWRlcmF0aW9uczwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAxLiAgQSBy ZXBvcnQgZ2VuZXJhdG9yIE1VU1QgcHJvdmlkZSBhIHdheSBmb3IgYSByZXBvcnQgcmVjaXBpZW50 IHRvPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgMS4gIEEgcmVwb3J0IGdlbmVy YXRvciBNVVNUIHByb3ZpZGUgYSB3YXkgZm9yIGEgcmVwb3J0IHJlY2lwaWVudCB0bzwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgIHJl cXVlc3Qgbm8gZnVydGhlciByZXBvcnRzIGJlIHNlbnQgdG8gdGhhdCBhZGRyZXNzIGFuZCBNQVk8 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgcmVxdWVzdCBubyBmdXJ0aGVy IHJlcG9ydHMgYmUgc2VudCB0byB0aGF0IGFkZHJlc3MgYW5kIE1BWTwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgIHByb3ZpZGUgYSB3 YXkgZm9yIHJlY2lwaWVudHMgdG8gY2hhbmdlIHRoZSBhZGRyZXNzKGVzKSB0byB3aGljaDwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICBwcm92aWRlIGEgd2F5IGZvciByZWNp cGllbnRzIHRvIGNoYW5nZSB0aGUgYWRkcmVzcyhlcykgdG8gd2hpY2g8L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJk aWZmMDAxMiI+PC9hPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgICAgICByZXBvcnRzIGFib3V0IHRo ZW0gYXJlIHNlbnQuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgICAgICByZXBv cnRzIGFib3V0IHRoZW0gYXJlIHNlbnQuICA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5EZXRhaWxzIG9m IHN1Y2ggbWVjaGFuaXNtcyBhcmU8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAgIG91dHNpZGUg b2YgdGhlIHNjb3BlIG9mIFtSRkM1OTY1XSwgW1JGQzY0NDldLCBhbmQgdGhpcyBkb2N1bWVudC48 L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij4gICAyLiAgTWVzc2FnZSBhdXRoZW50aWNhdGlvbiBpcyBnZW5lcmFsbHkgYSBnb29kIGlk ZWEsIGJ1dCBpdCBpczwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIDIuICBNZXNz YWdlIGF1dGhlbnRpY2F0aW9uIGlzIGdlbmVyYWxseSBhIGdvb2QgaWRlYSwgYnV0IGl0IGlzPC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAg ICAgZXNwZWNpYWxseSBpbXBvcnRhbnQgdG8gZW5jb3VyYWdlIGNyZWRpYmlsaXR5IG9mIGFuZCB0 aHVzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgIGVzcGVjaWFsbHkgaW1w b3J0YW50IHRvIGVuY291cmFnZSBjcmVkaWJpbGl0eSBvZiBhbmQgdGh1czwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgIHJlc3BvbnNl IHRvIHVuc29saWNpdGVkIHJlcG9ydHMuICBUaGVyZWZvcmUsIGFzIHdpdGggYW55IG90aGVyPC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgIHJlc3BvbnNlIHRvIHVuc29saWNp dGVkIHJlcG9ydHMuICBUaGVyZWZvcmUsIGFzIHdpdGggYW55IG90aGVyPC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgbWVzc2FnZSwg cmVwb3J0IGdlbmVyYXRvcnMgc2VuZGluZyB1bnNvbGljaXRlZCByZXBvcnRzIFNIT1VMRDwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICBtZXNzYWdlLCByZXBvcnQgZ2VuZXJh dG9ycyBzZW5kaW5nIHVuc29saWNpdGVkIHJlcG9ydHMgU0hPVUxEPC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlm ZjAwMTMiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICAgPHNwYW4gY2xhc3M9ImRlbGV0 ZSI+YXJyYW5nZSB0bzwvc3Bhbj4gc2VuZCByZXBvcnRzIDxzcGFuIGNsYXNzPSJkZWxldGUiPmZv ciB3aGljaDwvc3Bhbj4gU1BGIGFuZC9vciBES0lNIDxzcGFuIGNsYXNzPSJkZWxldGUiPmNoZWNr cyB3aWxsPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICAgICAgc2Vu ZCByZXBvcnRzIDxzcGFuIGNsYXNzPSJpbnNlcnQiPnRoYXQgd2lsbCBwYXNzPC9zcGFuPiBTUEYg YW5kL29yIERLSU0gPHNwYW4gY2xhc3M9Imluc2VydCI+Y2hlY2tzLjwvc3Bhbj48L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xh c3M9ImRlbGV0ZSI+ICAgICAgIHBhc3MuPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+Ni4yLiAgV2hlbiBUbyBHZW5l cmF0ZSBSZXBvcnRzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+Ni4yLiAgV2hlbiBU byBHZW5lcmF0ZSBSZXBvcnRzPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIDEuICBI YW5kbGluZyBvZiB1bnNvbGljaXRlZCByZXBvcnRzIGhhcyBhIHNpZ25pZmljYW50IGNvc3QgdG8g dGhlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgMS4gIEhhbmRsaW5nIG9mIHVu c29saWNpdGVkIHJlcG9ydHMgaGFzIGEgc2lnbmlmaWNhbnQgY29zdCB0byB0aGU8L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICByZWNl aXZlci4gIFNlbmRlcnMgb2YgdW5zb2xpY2l0ZWQgcmVwb3J0cywgZXNwZWNpYWxseSB0aG9zZTwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICByZWNlaXZlci4gIFNlbmRlcnMg b2YgdW5zb2xpY2l0ZWQgcmVwb3J0cywgZXNwZWNpYWxseSB0aG9zZTwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgIHNlbmRpbmcgbGFy Z2Ugdm9sdW1lcyBvZiB0aGVtIGF1dG9tYXRpY2FsbHksIG5lZWQgdG8gYmUgYXdhcmUgb2Y8L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgc2VuZGluZyBsYXJnZSB2b2x1bWVz IG9mIHRoZW0gYXV0b21hdGljYWxseSwgbmVlZCB0byBiZSBhd2FyZSBvZjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgIHRoaXMgYW5k IGRvIGFsbCB0aGV5IHJlYXNvbmFibHkgY2FuIHRvIGF2b2lkIHNlbmRpbmcgcmVwb3J0cyB0aGF0 PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgIHRoaXMgYW5kIGRvIGFsbCB0 aGV5IHJlYXNvbmFibHkgY2FuIHRvIGF2b2lkIHNlbmRpbmcgcmVwb3J0cyB0aGF0PC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgY2Fu bm90IGJlIHVzZWQgYXMgYSBiYXNpcyBmb3IgYWN0aW9uIGJ5IHRoZSByZWNpcGllbnQsIHdoZXRo ZXI8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgY2Fubm90IGJlIHVzZWQg YXMgYSBiYXNpcyBmb3IgYWN0aW9uIGJ5IHRoZSByZWNpcGllbnQsIHdoZXRoZXI8L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICB0aGlz IGlzIGR1ZSB0byB0aGUgcmVwb3J0IGJlaW5nIHNlbnQgYWJvdXQgYW4gaW5jaWRlbnQgdGhhdCBp czwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICB0aGlzIGlzIGR1ZSB0byB0 aGUgcmVwb3J0IGJlaW5nIHNlbnQgYWJvdXQgYW4gaW5jaWRlbnQgdGhhdCBpczwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgIG5vdCBh YnVzZS1yZWxhdGVkLCB0aGUgcmVwb3J0IGJlaW5nIHNlbnQgdG8gYW4gZW1haWwgYWRkcmVzcyB0 aGF0PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgIG5vdCBhYnVzZS1yZWxh dGVkLCB0aGUgcmVwb3J0IGJlaW5nIHNlbnQgdG8gYW4gZW1haWwgYWRkcmVzcyB0aGF0PC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAg d29uJ3QgcmVzdWx0IGluIGFjdGlvbiwgb3IgdGhlIGNvbnRlbnQgb3IgZm9ybWF0IG9mIHRoZSBy ZXBvcnQ8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgd29uJ3QgcmVzdWx0 IGluIGFjdGlvbiwgb3IgdGhlIGNvbnRlbnQgb3IgZm9ybWF0IG9mIHRoZSByZXBvcnQ8L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICBi ZWluZyBoYXJkIGZvciB0aGUgcmVjaXBpZW50IHRvIHJlYWQgb3IgdXNlLjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICBiZWluZyBoYXJkIGZvciB0aGUgcmVjaXBpZW50IHRv IHJlYWQgb3IgdXNlLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDE0Ij48L2E+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxi bG9jayI+ICAgMi4gIFN5c3RlbXMgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+dGhhdCBnZW5lcmF0ZSB1 bnNvbGljaXRlZCByZXBvcnRzIFNIT1VMRCBlbnN1cmUgdGhhdCB0aGU8L3NwYW4+PC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIDIuICBTeXN0ZW1zIFNIT1VMRCBOT1QgcmVwb3J0 IGFsbCBtYWlsIHNlbnQgZnJvbSBhIHBhcnRpY3VsYXIgc2VuZGVyPC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxl dGUiPiAgICAgICBjcml0ZXJpYSB1c2VkIHRvIGRlY2lkZSB3aGF0IG1lc3NhZ2VzIHRvIHJlcG9y dCBhY2N1cmF0ZWx5PC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNw YW4gY2xhc3M9ImRlbGV0ZSI+ICAgICAgIGlkZW50aWZ5IG1lc3NhZ2VzIHRoYXQgdGhlIHJlcG9y dGluZyBlbnRpdHkgYmVsaWV2ZXMgaW4gZ29vZDwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgICAgICBmYWl0aCBhcmUgYWJ1c2l2 ZS4gIFN1Y2ggY3JpdGVyaWEgbWlnaHQgaW5jbHVkZSBkaXJlY3QgY29tcGxhaW50PC9zcGFuPjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAg ICAgIHN1Ym1pc3Npb25zIGZyb20gTVVBcywgcmVwb3J0cyB0cmlnZ2VyZWQgYnkgbWFpbCBzZW50 IHRvICJzcGFtPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4g Y2xhc3M9ImRlbGV0ZSI+ICAgICAgIHRyYXAiIG9yICJob25leXBvdCIgYWRkcmVzc2VzLCBhbmQg dmlydXMgcmVwb3J0cy4gIChUaGVzZTwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJi bG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs YmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgICAgICBhcHBsaWNhdGlvbnMgbWlnaHQgYmUg ZGVzY3JpYmVkIGluIGZ1dHVyZSBJRVRGIGRvY3VtZW50cy4pPC9zcGFuPjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgMy4gIFN5c3RlbXM8 L3NwYW4+IFNIT1VMRCBOT1QgcmVwb3J0IGFsbCBtYWlsIHNlbnQgZnJvbSBhIHBhcnRpY3VsYXIg c2VuZGVyPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgIG1lcmVseSBiZWNh dXNlIHNvbWUgb2YgaXQgaXMgZGV0ZXJtaW5lZCB0byBiZSBhYnVzaXZlLjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICBtZXJlbHkgYmVjYXVzZSBzb21lIG9mIGl0IGlzIGRl dGVybWluZWQgdG8gYmUgYWJ1c2l2ZS48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAxNSI+PC9hPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsYmxvY2siPiAgIDxzcGFuIGNsYXNzPSJkZWxldGUiPiAgPC9zcGFuPiAgTWVjaGFu aWNhbCByZXBvcnRzIG9mIG1haWwgdGhhdCAibG9va3MgbGlrZSIgc3BhbSwgYmFzZWQgc29sZWx5 PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIDxzcGFuIGNsYXNzPSJpbnNlcnQi PjMuPC9zcGFuPiAgTWVjaGFuaWNhbCByZXBvcnRzIG9mIG1haWwgdGhhdCAibG9va3MgbGlrZSIg c3BhbSwgYmFzZWQgc29sZWx5PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgb24gdGhlIHJlc3VsdHMgb2YgaW5saW5lIGNvbnRlbnQg YW5hbHlzaXMgdG9vbHMsIFNIT1VMRCBOT1QgYmU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij4gICAgICAgb24gdGhlIHJlc3VsdHMgb2YgaW5saW5lIGNvbnRlbnQgYW5hbHlzaXMgdG9v bHMsIFNIT1VMRCBOT1QgYmU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxlZnQiPiAgICAgICBzZW50IHNpbmNlLCBiZWNhdXNlIG9mIHRoZWlyIHN1Ympl Y3RpdmUgbmF0dXJlLCB0aGV5IGFyZSB1bmxpa2VseTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPiAgICAgICBzZW50IHNpbmNlLCBiZWNhdXNlIG9mIHRoZWlyIHN1YmplY3RpdmUgbmF0 dXJlLCB0aGV5IGFyZSB1bmxpa2VseTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDE2Ij48L2E+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxibG9jayI+ICAgICAgIHRvIHByb3ZpZGUgYSBiYXNpcyBmb3IgdGhlIHJlY2lwaWVu dCB0byB0YWtlIGFjdGlvbi48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgICAg IHRvIHByb3ZpZGUgYSBiYXNpcyBmb3IgdGhlIHJlY2lwaWVudCB0byB0YWtlIGFjdGlvbi4gIDxz cGFuIGNsYXNzPSJpbnNlcnQiPkNvbXBsYWludHM8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICAgZ2VuZXJhdGVkIGJ5IGVu ZCB1c2VycyBhYm91dCBtYWlsIHRoYXQgaXMgZGV0ZXJtaW5lZCBieSB0aGVtIHRvPC9zcGFuPjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAg ICAgIGJlIGFidXNpdmUsIG9yIG1haWwgZGVsaXZlcmVkIHRvICJzcGFtIHRyYXAiIG9yICJob25l eXBvdCI8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFz cz0iaW5zZXJ0Ij4gICAgICAgYWRkcmVzc2VzLCBhcmUgZmFyIG1vcmUgbGlrZWx5IHRvIGJlIGFj Y3VyYXRlLjwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPiAgIDQuICBJZiBhIHJlcG9ydCBnZW5lcmF0b3IgYXBwbGllcyBTUEYgdG8g YXJyaXZpbmcgbWVzc2FnZXMsIGEgcmVwb3J0PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+ICAgNC4gIElmIGEgcmVwb3J0IGdlbmVyYXRvciBhcHBsaWVzIFNQRiB0byBhcnJpdmluZyBt ZXNzYWdlcywgYSByZXBvcnQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxlZnQiPiAgICAgICBTSE9VTEQgTk9UIGJlIGdlbmVyYXRlZCB0byB0aGUgUkZD NTMyMS5NYWlsRnJvbSBkb21haW4gaWYgdGhlIFNQRjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPiAgICAgICBTSE9VTEQgTk9UIGJlIGdlbmVyYXRlZCB0byB0aGUgUkZDNTMyMS5NYWls RnJvbSBkb21haW4gaWYgdGhlIFNQRjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgIGV2YWx1YXRpb24gcHJvZHVjZWQgYSAiRmFpbCIs ICJTb2Z0RmFpbCIsICJUZW1wRXJyb3IiIG9yPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+ICAgICAgIGV2YWx1YXRpb24gcHJvZHVjZWQgYSAiRmFpbCIsICJTb2Z0RmFpbCIsICJUZW1w RXJyb3IiIG9yPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij4gICAgICAgIlBlcm1FcnJvciIgcmVwb3J0LCBhcyBubyByZWxpYWJsZSBhc3NlcnRp b24gb3IgYXNzdW1wdGlvbiBjYW4gYmU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4g ICAgICAgIlBlcm1FcnJvciIgcmVwb3J0LCBhcyBubyByZWxpYWJsZSBhc3NlcnRpb24gb3IgYXNz dW1wdGlvbiBjYW4gYmU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPiAgICAgICBtYWRlIHRoYXQgdXNlIG9mIHRoZSBkb21haW4gd2FzIGF1dGhv cml6ZWQuICBBIHZhbGlkIGV4Y2VwdGlvbjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PiAgICAgICBtYWRlIHRoYXQgdXNlIG9mIHRoZSBkb21haW4gd2FzIGF1dGhvcml6ZWQuICBBIHZh bGlkIGV4Y2VwdGlvbjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+ICAgICAgIHdvdWxkIGJlIHNwZWNpZmljIGtub3dsZWRnZSB0aGF0IHRoZSBT UEYgcmVzdWx0IGlzIG5vdCBkZWZpbml0aXZlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+ICAgICAgIHdvdWxkIGJlIHNwZWNpZmljIGtub3dsZWRnZSB0aGF0IHRoZSBTUEYgcmVzdWx0 IGlzIG5vdCBkZWZpbml0aXZlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgZm9yIHRoYXQgZG9tYWluIHVuZGVyIHRob3NlIGNpcmN1 bXN0YW5jZXMgKGZvciBleGFtcGxlLCBhIG1lc3NhZ2U8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJpZ2h0Ij4gICAgICAgZm9yIHRoYXQgZG9tYWluIHVuZGVyIHRob3NlIGNpcmN1bXN0YW5jZXMg KGZvciBleGFtcGxlLCBhIG1lc3NhZ2U8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICB0aGF0IGlzIGFsc28gREtJTS1zaWduZWQgYnkg dGhlIHNhbWUgZG9tYWluLCBhbmQgdGhhdCBzaWduYXR1cmU8L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij4gICAgICAgdGhhdCBpcyBhbHNvIERLSU0tc2lnbmVkIGJ5IHRoZSBzYW1lIGRv bWFpbiwgYW5kIHRoYXQgc2lnbmF0dXJlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgdmFsaWRhdGVzKS48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgdmFsaWRhdGVzKS48L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+Ni4zLiAgV2hlcmUgVG8gU2VuZCBSZXBvcnRzPC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+Ni4zLiAgV2hlcmUgVG8gU2VuZCBSZXBvcnRzPC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAxNyI+PC9hPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs YmxvY2siPiAgIDEuICBNVUFzIFNIT1VMRCBOT1QgZ2VuZXJhdGUgYWJ1c2UgcmVwb3J0cyBkaXJl Y3RseSB0byBlbnRpdGllcyBmb3VuZDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4g ICAxLiAgTVVBcyBTSE9VTEQgTk9UIGdlbmVyYXRlIGFidXNlIHJlcG9ydHMgZGlyZWN0bHkgdG8g ZW50aXRpZXM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxibG9jayI+ICAgICAgIGluIHRoZSA8c3BhbiBjbGFzcz0iZGVsZXRlIj5tZXNzYWdlPC9zcGFu PiBvciBieSBxdWVyaWVzIHRvIFdIT0lTIChbUkZDMzkxMl0pIG9yIG90aGVyPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgICAgICA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5tZXJlbHkg YmVjYXVzZSB0aGV5IHdlcmU8L3NwYW4+IGZvdW5kIGluIHRoZSA8c3BhbiBjbGFzcz0iaW5zZXJ0 Ij5tZXNzYWdlLDwvc3Bhbj4gb3IgYnkgcXVlcmllcyB0bzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICAgaGV1cmlzdGljIG1lYW5z LiAgUmF0aGVyLCB0aGUgTVVBIG5lZWRzIHRvIHNpZ25hbCwgYnkgc29tZSBtZWFucyw8L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgICAgIFdIT0lTIChbUkZDMzkxMl0pIG9yIG90 aGVyIGhldXJpc3RpYyBtZWFucy4gIFJhdGhlciwgdGhlIE1VQTwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICAgdGhlIG1haWxib3gg cHJvdmlkZXIgdG8gd2hpY2ggaXQgY29ubmVjdHMgdG8gdHJpZ2dlciBnZW5lcmF0aW9uPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgICAgICBuZWVkcyB0byBzaWduYWwsIGJ5IHNv bWUgbWVhbnMsIHRoZSBtYWlsYm94IHByb3ZpZGVyIHRvIHdoaWNoIGl0PC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgICAgICBvZiBzdWNo IGEgcmVwb3J0LjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICAgICAgY29ubmVj dHMgdG8gdHJpZ2dlciBnZW5lcmF0aW9uIG9mIHN1Y2ggYSByZXBvcnQuPC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICA8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgMi4gIFJlcG9ydCBnZW5lcmF0 b3JzIFNIT1VMRCBOT1Qgc2VuZCByZXBvcnRzIHRvIHJlY2lwaWVudHMgdGhhdCBhcmU8L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgMi4g IFJlcG9ydCBnZW5lcmF0b3JzIDxzcGFuIGNsYXNzPSJkZWxldGUiPlNIT1VMRCBzZW5kIHJlcG9y dHMgdG8gcmVjaXBpZW50cyB0aGF0IGFyZSBib3RoPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgICAgIHJlc3BvbnNpYmxlIGZv ciB0aGUgbWVzc2FnZXMgYW5kIGFyZSBhYmxlIHRvIGRvIHNvbWV0aGluZyBhYm91dDwvc3Bhbj48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAg ICAgICB0aGVtLCBhbmQ8L3NwYW4+IFNIT1VMRCBOT1Qgc2VuZCByZXBvcnRzIHRvIHJlY2lwaWVu dHMgdGhhdCBhcmU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgdW5pbnZv bHZlZCBvciBvbmx5IHBlcmlwaGVyYWxseSBpbnZvbHZlZC4gIEZvciBleGFtcGxlLCB0aGV5PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgIHVuaW52b2x2ZWQgb3Igb25seSBw ZXJpcGhlcmFsbHkgaW52b2x2ZWQuICBGb3IgZXhhbXBsZSwgdGhleTwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgIFNIT1VMRCBOT1Qg c2VuZCByZXBvcnRzIHRvIHRoZSBvcGVyYXRvciBvZiBldmVyeSBBdXRvbm9tb3VzPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgIFNIT1VMRCBOT1Qgc2VuZCByZXBvcnRzIHRv IHRoZSBvcGVyYXRvciBvZiBldmVyeSBBdXRvbm9tb3VzPC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgU3lzdGVtIGluIHRoZSBwYXRo IGJldHdlZW4gdGhlIGFwcGFyZW50IG9yaWdpbmF0aW5nIHN5c3RlbSBhbmQ8L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgU3lzdGVtIGluIHRoZSBwYXRoIGJldHdlZW4gdGhl IGFwcGFyZW50IG9yaWdpbmF0aW5nIHN5c3RlbSBhbmQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAxOCI+ PC9hPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgICAgICB0aGUgb3BlcmF0b3IgZ2VuZXJhdGluZyB0 aGUgcmVwb3J0LjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICAgICAgdGhlIG9w ZXJhdG9yIGdlbmVyYXRpbmcgdGhlIHJlcG9ydC4gIDxzcGFuIGNsYXNzPSJpbnNlcnQiPkluc3Rl YWQsIHRoZXkgbmVlZCB0byBzZW5kPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJi bG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAgIHJlcG9ydHMgdG8gcmVjaXBpZW50cyB0 aGF0IGFyZSBib3RoIHJlc3BvbnNpYmxlIGZvciB0aGUgbWVzc2FnZXM8L3NwYW4+PC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICAgYW5k IGFyZSBhYmxlIHRvIGRvIHNvbWV0aGluZyBhYm91dCB0aGVtLjwvc3Bhbj48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIDMuICBEZWNpZGlu ZyB3aGVyZSB0byBzZW5kIGFuIHVuc29saWNpdGVkIHJlcG9ydCB3aWxsIHR5cGljYWxseSByZWx5 PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgMy4gIERlY2lkaW5nIHdoZXJlIHRv IHNlbmQgYW4gdW5zb2xpY2l0ZWQgcmVwb3J0IHdpbGwgdHlwaWNhbGx5IHJlbHk8L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICBvbiBo ZXVyaXN0aWNzLiAgQWJ1c2UgYWRkcmVzc2VzIGluIFdIT0lTIHJlY29yZHMgb2YgdGhlIElQPC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgIG9uIGhldXJpc3RpY3MuICBBYnVz ZSBhZGRyZXNzZXMgaW4gV0hPSVMgcmVjb3JkcyBvZiB0aGUgSVA8L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICBhZGRyZXNzIHJlbGF5 aW5nIHRoZSBzdWJqZWN0IG1lc3NhZ2UgYW5kL29yIG9mIHRoZSBkb21haW4gbmFtZTwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICBhZGRyZXNzIHJlbGF5aW5nIHRoZSBzdWJq ZWN0IG1lc3NhZ2UgYW5kL29yIG9mIHRoZSBkb21haW4gbmFtZTwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgIGZvdW5kIGluIHRoZSBy ZXN1bHRzIG9mIGEgUFRSICgicmV2ZXJzZSBsb29rdXAiKSBxdWVyeSBvbiB0aGF0PC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgIGZvdW5kIGluIHRoZSByZXN1bHRzIG9mIGEg UFRSICgicmV2ZXJzZSBsb29rdXAiKSBxdWVyeSBvbiB0aGF0PC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgYWRkcmVzcyBhcmUgbGlr ZWx5IHJlYXNvbmFibGUgY2FuZGlkYXRlcywgYXMgaXMgdGhlIGFidXNlQGRvbWFpbjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICBhZGRyZXNzIGFyZSBsaWtlbHkgcmVhc29u YWJsZSBjYW5kaWRhdGVzLCBhcyBpcyB0aGUgYWJ1c2VAZG9tYWluPC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgcm9sZSBhZGRyZXNz IChzZWUgW1JGQzIxNDJdKSBvZiByZWxhdGVkIGRvbWFpbnMuICBVbnNvbGljaXRlZDwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICByb2xlIGFkZHJlc3MgKHNlZSBbUkZDMjE0 Ml0pIG9mIHJlbGF0ZWQgZG9tYWlucy4gIFVuc29saWNpdGVkPC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgcmVwb3J0cyBTSE9VTEQg Tk9UIGJlIHNlbnQgdG8gZW1haWwgYWRkcmVzc2VzIHRoYXQgYXJlIG5vdDwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICByZXBvcnRzIFNIT1VMRCBOT1QgYmUgc2VudCB0byBl bWFpbCBhZGRyZXNzZXMgdGhhdCBhcmUgbm90PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgY2xlYXJseSBpbnRlbmRlZCB0byBoYW5k bGUgYWJ1c2UgcmVwb3J0cy4gIExlZ2l0aW1hdGUgY2FuZGlkYXRlczwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPiAgICAgICBjbGVhcmx5IGludGVuZGVkIHRvIGhhbmRsZSBhYnVzZSBy ZXBvcnRzLiAgTGVnaXRpbWF0ZSBjYW5kaWRhdGVzPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgaW5jbHVkZSB0aG9zZSBmb3VuZCBp biBXSE9JUyByZWNvcmRzIG9yIG9uIGEgd2ViIHNpdGUgdGhhdCBlaXRoZXI8L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgaW5jbHVkZSB0aG9zZSBmb3VuZCBpbiBXSE9JUyBy ZWNvcmRzIG9yIG9uIGEgd2ViIHNpdGUgdGhhdCBlaXRoZXI8L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICBhcmUgZXhwbGljaXRseSBk ZXNjcmliZWQgYXMgYW4gYWJ1c2UgY29udGFjdCwgb3IgYXJlIG9mIHRoZSBmb3JtPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgIGFyZSBleHBsaWNpdGx5IGRlc2NyaWJlZCBh cyBhbiBhYnVzZSBjb250YWN0LCBvciBhcmUgb2YgdGhlIGZvcm08L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v Ij48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPg0KICAgICAgPHRyIGJnY29sb3I9Imdy YXkiPjx0ZD48L3RkPjx0aD48YSBuYW1lPSJwYXJ0LWw2Ij48c21hbGw+c2tpcHBpbmcgdG8gY2hh bmdlIGF0PC9zbWFsbD48ZW0+IHBhZ2UgOCwgbGluZSA0MzwvZW0+PC9hPjwvdGg+PHRoPiA8L3Ro Pjx0aD48YSBuYW1lPSJwYXJ0LXI2Ij48c21hbGw+c2tpcHBpbmcgdG8gY2hhbmdlIGF0PC9zbWFs bD48ZW0+IHBhZ2UgOCwgbGluZSAzODwvZW0+PC9hPjwvdGg+PHRkPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij4gICAgICAgYXQgYWxsKS48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAg YXQgYWxsKS48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPiAgIDUuICBPZnRlbiwgdW5zb2xpY2l0ZWQgcmVwb3J0cyB3aWxsIGhhdmUgbm8gbWVh bmluZyBpZiBzZW50IHRvIGFidXNlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAg NS4gIE9mdGVuLCB1bnNvbGljaXRlZCByZXBvcnRzIHdpbGwgaGF2ZSBubyBtZWFuaW5nIGlmIHNl bnQgdG8gYWJ1c2U8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPiAgICAgICByZXBvcnRpbmcgYWRkcmVzc2VzIGJlbG9uZ2luZyB0byB0aGUgYWJ1 c2l2ZSBwYXJ0aWVzIHRoZW1zZWx2ZXMuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ ICAgICAgIHJlcG9ydGluZyBhZGRyZXNzZXMgYmVsb25naW5nIHRvIHRoZSBhYnVzaXZlIHBhcnRp ZXMgdGhlbXNlbHZlcy48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPiAgICAgICBJbiBmYWN0LCBpdCBpcyBwb3NzaWJsZSB0aGF0IHN1Y2ggcmVw b3J0cyBtaWdodCByZXZlYWw8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAg SW4gZmFjdCwgaXQgaXMgcG9zc2libGUgdGhhdCBzdWNoIHJlcG9ydHMgbWlnaHQgcmV2ZWFsPC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAg ICAgaW5mb3JtYXRpb24gYWJvdXQgY29tcGxhaW5hbnRzLiAgUmVwb3J0cyBTSE9VTEQgTk9UIGJl IHNlbnQgdG88L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgaW5mb3JtYXRp b24gYWJvdXQgY29tcGxhaW5hbnRzLiAgUmVwb3J0cyBTSE9VTEQgTk9UIGJlIHNlbnQgdG88L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAg ICBzdWNoIGFkZHJlc3NlcyBpZiB0aGV5IGNhbiBiZSBpZGVudGlmaWVkIGJlZm9yZWhhbmQsIGV4 Y2VwdCB3aGVyZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICBzdWNoIGFk ZHJlc3NlcyBpZiB0aGV5IGNhbiBiZSBpZGVudGlmaWVkIGJlZm9yZWhhbmQsIGV4Y2VwdCB3aGVy ZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ ICAgICAgIHRoZSBhYnVzaXZlIHBhcnR5IGlzIGtub3duIHRvIGJlIHJlc3BvbnNpdmUgdG8gc3Vj aCByZXBvcnRzLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICB0aGUgYWJ1 c2l2ZSBwYXJ0eSBpcyBrbm93biB0byBiZSByZXNwb25zaXZlIHRvIHN1Y2ggcmVwb3J0cy48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+Ni40LiAgV2hhdCBUbyBQdXQgSW4gUmVwb3J0czwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjYuNC4gIFdoYXQgVG8gUHV0IEluIFJlcG9y dHM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYwMDE5 Ij48L2E+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgMS4gIFJlcG9ydHMgU0hPVUxEIHVzZSAiRmVl ZGJhY2stVHlwZTogYWJ1c2UiLCBidXQgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+TUFZPC9zcGFuPiB1 c2Ugb3RoZXI8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgMS4gIFJlcG9ydHMg U0hPVUxEIHVzZSAiRmVlZGJhY2stVHlwZTogYWJ1c2UiLCBidXQgPHNwYW4gY2xhc3M9Imluc2Vy dCI+Y2FuPC9zcGFuPiB1c2Ugb3RoZXI8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICB0eXBlcyBhcyBhcHByb3ByaWF0ZS4gIEhvd2V2 ZXIsIHRoZSBNYWlsYm94IFByb3ZpZGVyIGdlbmVyYXRpbmc8L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij4gICAgICAgdHlwZXMgYXMgYXBwcm9wcmlhdGUuICBIb3dldmVyLCB0aGUgTWFp bGJveCBQcm92aWRlciBnZW5lcmF0aW5nPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAwMjAiPjwvYT48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGJsb2NrIj4gICAgICAgdGhlIHJlcG9ydHMgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+ U0hPVUxEIE5PVDwvc3Bhbj4gYXNzdW1lIHRoYXQgdGhlIG9wZXJhdG9yIHJlY2VpdmluZyB0aGU8 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgICAgIHRoZSByZXBvcnRzIDxzcGFu IGNsYXNzPSJpbnNlcnQiPmNhbm5vdDwvc3Bhbj4gYXNzdW1lIHRoYXQgdGhlIG9wZXJhdG9yIHJl Y2VpdmluZyB0aGUgcmVwb3J0czwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICAgcmVwb3J0cyB3aWxsIHRyZWF0IGRpZmZlcmVudCBG ZWVkYmFjay1UeXBlcyBkaWZmZXJlbnRseS48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9j ayI+ICAgICAgIHdpbGwgdHJlYXQgZGlmZmVyZW50IEZlZWRiYWNrLVR5cGVzIGRpZmZlcmVudGx5 LjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ ICAgMi4gIFJlcG9ydHMgU0hPVUxEIGluY2x1ZGUgdGhlIGZvbGxvd2luZyBvcHRpb25hbCBmaWVs ZHMgd2hlbmV2ZXI8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAyLiAgUmVwb3J0 cyBTSE9VTEQgaW5jbHVkZSB0aGUgZm9sbG93aW5nIG9wdGlvbmFsIGZpZWxkcyB3aGVuZXZlcjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkPjxhIG5hbWU9ImRpZmYwMDIxIj48L2E+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgICAgIDxz cGFuIGNsYXNzPSJkZWxldGUiPnByYWN0aWNhbDo8L3NwYW4+IE9yaWdpbmFsLU1haWwtRnJvbSwg QXJyaXZhbC1EYXRlLCBTb3VyY2UtSVAsIE9yaWdpbmFsLTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmJsb2NrIj4gICAgICAgPHNwYW4gY2xhc3M9Imluc2VydCI+dGhlaXIgY29ycmVzcG9uZGlu ZyB2YWx1ZXMgYXJlIGF2YWlsYWJsZSBhbmQgYXBwbGljYWJsZSB0byB0aGU8L3NwYW4+PC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgICAg ICBSY3B0LVRvLiAgT3RoZXIgb3B0aW9uYWwgZmllbGRzIDxzcGFuIGNsYXNzPSJkZWxldGUiPk1B WTwvc3Bhbj4gYmUgaW5jbHVkZWQsIGFzIHRoZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJs b2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICAgcmVwb3J0Ojwvc3Bhbj4gT3JpZ2luYWwt TWFpbC1Gcm9tLCBBcnJpdmFsLURhdGUsIFNvdXJjZS1JUCwgT3JpZ2luYWwtPC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICAgICAgUmNwdC1Uby4gIE90aGVyIG9wdGlvbmFsIGZp ZWxkcyA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5jYW48L3NwYW4+IGJlIGluY2x1ZGVkLCBhcyB0aGU8 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAg ICAgICBpbXBsZW1lbnRlciBmZWVscyBpcyBhcHByb3ByaWF0ZS48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij4gICAgICAgaW1wbGVtZW50ZXIgZmVlbHMgaXMgYXBwcm9wcmlhdGUuPC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQ+PGEgbmFtZT0iZGlmZjAwMjIiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFz cz0iZGVsZXRlIj4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPiAgIDMuICBFeHBlcmllbmNlIHN1Z2dlc3RzIHVzZSBvZiBBUkYgaXMgYWR2aXNh YmxlIGluIG1vc3QgY29udGV4dHMuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAg My4gIEV4cGVyaWVuY2Ugc3VnZ2VzdHMgdXNlIG9mIEFSRiBpcyBhZHZpc2FibGUgaW4gbW9zdCBj b250ZXh0cy48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPiAgICAgICBBdXRvbWF0ZWQgcmVjaXBpZW50IHN5c3RlbXMgY2FuIGhhbmRsZSBhYnVz ZSByZXBvcnRzIHNlbnQgaW4gQVJGPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAg ICAgIEF1dG9tYXRlZCByZWNpcGllbnQgc3lzdGVtcyBjYW4gaGFuZGxlIGFidXNlIHJlcG9ydHMg c2VudCBpbiBBUkY8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPiAgICAgICBmb3JtYXQgYXQgbGVhc3QgYXMgd2VsbCBhcyBhbnkgb3RoZXIgZm9y bWF0IHN1Y2ggYXMgcGxhaW4gdGV4dCw8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4g ICAgICAgZm9ybWF0IGF0IGxlYXN0IGFzIHdlbGwgYXMgYW55IG90aGVyIGZvcm1hdCBzdWNoIGFz IHBsYWluIHRleHQsPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij4gICAgICAgd2l0aCBvciB3aXRob3V0IGEgY29weSBvZiB0aGUgbWVzc2FnZSBh dHRhY2hlZC4gIFRoYXQgaG9sZHMgZXZlbjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PiAgICAgICB3aXRoIG9yIHdpdGhvdXQgYSBjb3B5IG9mIHRoZSBtZXNzYWdlIGF0dGFjaGVkLiAg VGhhdCBob2xkcyBldmVuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij4gICAgICAgZm9yIHN5c3RlbXMgdGhhdCBkaWQgbm90IHJlcXVlc3QgQVJG IGZvcm1hdCByZXBvcnRzLCBwcm92aWRlZDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PiAgICAgICBmb3Igc3lzdGVtcyB0aGF0IGRpZCBub3QgcmVxdWVzdCBBUkYgZm9ybWF0IHJlcG9y dHMsIHByb3ZpZGVkPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij4gICAgICAgdGhhdCByZXBvcnRzIGFyZSBnZW5lcmF0ZWQgd2l0aCB1c2UgYnkg cmVjaXBpZW50cyBub3QgdXNpbmc8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAg ICAgdGhhdCByZXBvcnRzIGFyZSBnZW5lcmF0ZWQgd2l0aCB1c2UgYnkgcmVjaXBpZW50cyBub3Qg dXNpbmc8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPiAgICAgICBhdXRvbWF0ZWQgQVJGIHBhcnNpbmcgaW4gbWluZC4gIEFueW9uZSBzZW5kaW5n IHVuc29saWNpdGVkPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgIGF1dG9t YXRlZCBBUkYgcGFyc2luZyBpbiBtaW5kLiAgQW55b25lIHNlbmRpbmcgdW5zb2xpY2l0ZWQ8L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAg ICByZXBvcnRzIGluIEFSRiBmb3JtYXQgY2FuIGxlZ2l0aW1hdGVseSBwcmVzdW1lIHRoYXQgc29t ZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICByZXBvcnRzIGluIEFSRiBm b3JtYXQgY2FuIGxlZ2l0aW1hdGVseSBwcmVzdW1lIHRoYXQgc29tZTwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgIHJlY2lwaWVudHMg d2lsbCBvbmx5IGJlIGFibGUgdG8gYWNjZXNzIHRoZSBodW1hbiByZWFkYWJsZSAoZmlyc3QsPC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgIHJlY2lwaWVudHMgd2lsbCBvbmx5 IGJlIGFibGUgdG8gYWNjZXNzIHRoZSBodW1hbiByZWFkYWJsZSAoZmlyc3QsPC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgdGV4dC9w bGFpbikgcGFydCBvZiBpdCwgYW5kIFNIT1VMRCBpbmNsdWRlIGFsbCBpbmZvcm1hdGlvbiBuZWVk ZWQ8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgdGV4dC9wbGFpbikgcGFy dCBvZiBpdCwgYW5kIFNIT1VMRCBpbmNsdWRlIGFsbCBpbmZvcm1hdGlvbiBuZWVkZWQ8L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPg0KICAgICAgPHRy IGJnY29sb3I9ImdyYXkiPjx0ZD48L3RkPjx0aD48YSBuYW1lPSJwYXJ0LWw3Ij48c21hbGw+c2tp cHBpbmcgdG8gY2hhbmdlIGF0PC9zbWFsbD48ZW0+IHBhZ2UgOSwgbGluZSAyMzwvZW0+PC9hPjwv dGg+PHRoPiA8L3RoPjx0aD48YSBuYW1lPSJwYXJ0LXI3Ij48c21hbGw+c2tpcHBpbmcgdG8gY2hh bmdlIGF0PC9zbWFsbD48ZW0+IHBhZ2UgOSwgbGluZSAxNzwvZW0+PC9hPjwvdGg+PHRkPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij4gICAgICAgcmVjaXBpZW50cyB3aWxsIG9ubHkgYmUgYWJsZSB0byBhY2Nl c3MgdGhlIGh1bWFuIHJlYWRhYmxlIChmaXJzdCw8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij4gICAgICAgcmVjaXBpZW50cyB3aWxsIG9ubHkgYmUgYWJsZSB0byBhY2Nlc3MgdGhlIGh1 bWFuIHJlYWRhYmxlIChmaXJzdCw8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICB0ZXh0L3BsYWluKSBwYXJ0IG9mIGl0LCBhbmQgU0hP VUxEIGluY2x1ZGUgYWxsIGluZm9ybWF0aW9uIG5lZWRlZDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmlnaHQiPiAgICAgICB0ZXh0L3BsYWluKSBwYXJ0IG9mIGl0LCBhbmQgU0hPVUxEIGluY2x1 ZGUgYWxsIGluZm9ybWF0aW9uIG5lZWRlZDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgIGFsc28gaW4gdGhpcyBwYXJ0LiAgRnVydGhl ciwgdGhleSBTSE9VTEQgZW5zdXJlIHRoYXQgdGhlIHJlcG9ydDwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPiAgICAgICBhbHNvIGluIHRoaXMgcGFydC4gIEZ1cnRoZXIsIHRoZXkgU0hP VUxEIGVuc3VyZSB0aGF0IHRoZSByZXBvcnQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICBpcyByZWFkYWJsZSB3aGVuIHZpZXdlZCBh cyBwbGFpbiB0ZXh0LCB0byBnaXZlIGxvdy1lbmQgdGlja2V0aW5nPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+ICAgICAgIGlzIHJlYWRhYmxlIHdoZW4gdmlld2VkIGFzIHBsYWluIHRl eHQsIHRvIGdpdmUgbG93LWVuZCB0aWNrZXRpbmc8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICBzeXN0ZW1zIGFzIG11Y2ggYXNzaXN0 YW5jZSBhcyBwb3NzaWJsZS4gIEZpbmFsbHksIHRoZXkgbmVlZCB0byBiZTwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICBzeXN0ZW1zIGFzIG11Y2ggYXNzaXN0YW5jZSBhcyBw b3NzaWJsZS4gIEZpbmFsbHksIHRoZXkgbmVlZCB0byBiZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgIGF3YXJlIHRoYXQgdGhlIHJl cG9ydCBjb3VsZCBiZSBkaXNjYXJkZWQgb3IgaWdub3JlZCBkdWUgdG88L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgYXdhcmUgdGhhdCB0aGUgcmVwb3J0IGNvdWxkIGJlIGRp c2NhcmRlZCBvciBpZ25vcmVkIGR1ZSB0bzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgIGZhaWx1cmUgdG8gdGFrZSB0aGVzZSBzdGVw cyBpbiB0aGUgbW9zdCBleHRyZW1lIGNhc2VzLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPiAgICAgICBmYWlsdXJlIHRvIHRha2UgdGhlc2Ugc3RlcHMgaW4gdGhlIG1vc3QgZXh0cmVt ZSBjYXNlcy48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+Ni41LiAgV2hhdCBUbyBEbyBX aXRoIFJlcG9ydHM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij42LjUuICBXaGF0IFRv IERvIFdpdGggUmVwb3J0czwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQ+PGEg bmFtZT0iZGlmZjAwMjMiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAxLiAgPHNwYW4gY2xh c3M9ImRlbGV0ZSI+UmVjaXBpZW50czwvc3Bhbj4gb2YgdW5zb2xpY2l0ZWQgPHNwYW4gY2xhc3M9 ImRlbGV0ZSI+QVJGPC9zcGFuPiByZXBvcnRzIDxzcGFuIGNsYXNzPSJkZWxldGUiPlNIT1VMRCwg aW4gZ2VuZXJhbCwgaGFuZGxlPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2Nr Ij4gICAxLiAgPHNwYW4gY2xhc3M9Imluc2VydCI+UmVjZWl2ZXJzPC9zcGFuPiBvZiB1bnNvbGlj aXRlZCByZXBvcnRzIDxzcGFuIGNsYXNzPSJpbnNlcnQiPmNhbjwvc3Bhbj4gdGFrZSBhZHZhbnRh Z2Ugb2YgdGhlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgICAgICB0aGVtIHRoZSBzYW1lIHdheSBh cyBhbnkgb3RoZXIgYWJ1c2UgcmVwb3J0cy4gIEhvd2V2ZXIsIHRoZXkgTUFZPC9zcGFuPjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICAgICAgc3RhbmRhcmRpemVkIHBhcnRzIG9m IHRoZSBBUkYgZm9ybWF0IHRvIGF1dG9tYXRlIHByb2Nlc3NpbmcuPC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgICAgICB0YWtlIGFkdmFu dGFnZSBvZiB0aGUgc3RhbmRhcmRpemVkIHBhcnRzIG9mIHRoZSBBUkYgZm9ybWF0IHRvPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgICAgICA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5J bmRlcGVuZGVudCBvZjwvc3Bhbj4gdGhlIHNlbmRlciBvZiB0aGUgcmVwb3J0LCB0aGV5IDxzcGFu IGNsYXNzPSJpbnNlcnQiPmNhbiBpbXByb3ZlPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICAgYXV0b21hdGUgcHJvY2Vz c2luZy4gIDxzcGFuIGNsYXNzPSJkZWxldGUiPkxhY2tpbmcga25vd2xlZGdlIGFib3V0PC9zcGFu PiB0aGUgc2VuZGVyIG9mIHRoZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3Bh biBjbGFzcz0iaW5zZXJ0Ij4gICAgICAgcHJvY2Vzc2luZyBieSBzZXBhcmF0aW5nPC9zcGFuPiB2 YWxpZCBmcm9tIGludmFsaWQgcmVwb3J0cyBieSwgZm9yPC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgICAgICByZXBvcnQsIHRoZXkgPHNw YW4gY2xhc3M9ImRlbGV0ZSI+U0hPVUxEIHNlcGFyYXRlPC9zcGFuPiB2YWxpZCBmcm9tIGludmFs aWQgcmVwb3J0cyBieSwgZm9yPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAg IGV4YW1wbGUsIGxvb2tpbmcgZm9yIHJlZmVyZW5jZXMgdG8gSVAgYWRkcmVzcyByYW5nZXMsIGRv bWFpbnMsPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgIGV4YW1wbGUsIGxv b2tpbmcgZm9yIHJlZmVyZW5jZXMgdG8gSVAgYWRkcmVzcyByYW5nZXMsIGRvbWFpbnMsPC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAg YW5kIG1haWxib3hlcyBmb3Igd2hpY2ggdGhlIHJlY2lwaWVudCBvcmdhbml6YXRpb24gaXMgcmVz cG9uc2libGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgYW5kIG1haWxi b3hlcyBmb3Igd2hpY2ggdGhlIHJlY2lwaWVudCBvcmdhbml6YXRpb24gaXMgcmVzcG9uc2libGU8 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAg ICAgICBpbiB0aGUgY29weSBvZiB0aGUgcmVwb3J0ZWQgbWVzc2FnZSwgYW5kIGJ5IGNvcnJlbGF0 aW5nIG11bHRpcGxlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgIGluIHRo ZSBjb3B5IG9mIHRoZSByZXBvcnRlZCBtZXNzYWdlLCBhbmQgYnkgY29ycmVsYXRpbmcgbXVsdGlw bGU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PiAgICAgICByZXBvcnRzIG9mIHNpbWlsYXIgbWVzc2FnZXMgdG8gaWRlbnRpZnkgYnVsayBzZW5k ZXJzLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICByZXBvcnRzIG9mIHNp bWlsYXIgbWVzc2FnZXMgdG8gaWRlbnRpZnkgYnVsayBzZW5kZXJzLjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgMi4gIFBlciBTZWN0aW9u IDQuNCBvZiBbUkZDNjQ0OV0sIGEgbmV0d29yayBzZXJ2aWNlIHByb3ZpZGVyIE1BWSB1c2U8L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAyLiAgUGVyIFNlY3Rpb24gNC40IG9mIFtS RkM2NDQ5XSwgYSBuZXR3b3JrIHNlcnZpY2UgcHJvdmlkZXIgTUFZIHVzZTwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgIEFSRiBkYXRh IGZvciBhdXRvbWF0ZWQgZm9yd2FyZGluZyBvZiBmZWVkYmFjayBtZXNzYWdlcyB0byB0aGU8L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgQVJGIGRhdGEgZm9yIGF1dG9tYXRl ZCBmb3J3YXJkaW5nIG9mIGZlZWRiYWNrIG1lc3NhZ2VzIHRvIHRoZTwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgIG9yaWdpbmF0aW5n IGN1c3RvbWVyLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICBvcmlnaW5h dGluZyBjdXN0b21lci48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPiAgIDMuICBQdWJsaXNoZWQgYWJ1c2UgbWFpbGJveCBhZGRyZXNzZXMgU0hP VUxEIE5PVCByZWplY3QgbWVzc2FnZXMgbm90PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+ICAgMy4gIFB1Ymxpc2hlZCBhYnVzZSBtYWlsYm94IGFkZHJlc3NlcyBTSE9VTEQgTk9UIHJl amVjdCBtZXNzYWdlcyBub3Q8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxlZnQiPiAgICAgICBpbiB0aGUgQVJGIGZvcm1hdCwgYXMgZ2VuZXJhdGlvbiBv ZiBBUkYgbWVzc2FnZXMgY2FuIG9jY2FzaW9uYWxseTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPiAgICAgICBpbiB0aGUgQVJGIGZvcm1hdCwgYXMgZ2VuZXJhdGlvbiBvZiBBUkYgbWVz c2FnZXMgY2FuIG9jY2FzaW9uYWxseTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgIGJlIHVuYXZhaWxhYmxlIG9yIG5vdCBhcHBsaWNh YmxlLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICBiZSB1bmF2YWlsYWJs ZSBvciBub3QgYXBwbGljYWJsZS48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPiAgIDQuICBBbHRob3VnaCBbUkZDNjQ0OV0gc3VnZ2VzdHMgdGhh dCByZXBseWluZyB0byBmZWVkYmFjayBpcyBub3Q8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij4gICA0LiAgQWx0aG91Z2ggW1JGQzY0NDldIHN1Z2dlc3RzIHRoYXQgcmVwbHlpbmcgdG8g ZmVlZGJhY2sgaXMgbm90PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij4gICAgICAgdXNlZnVsLCBpbiB0aGUgY2FzZSBvZiByZWNlaXB0IG9mIEFS RiByZXBvcnRzIHdoZXJlIG5vIGZlZWRiYWNrPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+ICAgICAgIHVzZWZ1bCwgaW4gdGhlIGNhc2Ugb2YgcmVjZWlwdCBvZiBBUkYgcmVwb3J0cyB3 aGVyZSBubyBmZWVkYmFjazwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+ICAgICAgIGFycmFuZ2VtZW50IGhhcyBiZWVuIGVzdGFibGlzaGVkLCBh IG5vbi1hdXRvbWF0ZWQgcmVwbHkgbWlnaHQgYmU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij4gICAgICAgYXJyYW5nZW1lbnQgaGFzIGJlZW4gZXN0YWJsaXNoZWQsIGEgbm9uLWF1dG9t YXRlZCByZXBseSBtaWdodCBiZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgIGRlc2lyYWJsZSB0byBpbmRpY2F0ZSB3aGF0IGFjdGlv biByZXN1bHRlZCBmcm9tIHRoZSBjb21wbGFpbnQsPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+ICAgICAgIGRlc2lyYWJsZSB0byBpbmRpY2F0ZSB3aGF0IGFjdGlvbiByZXN1bHRlZCBm cm9tIHRoZSBjb21wbGFpbnQsPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgaGVhZGluZyBvZmYgbW9yZSBzZXZlcmUgZmlsdGVyaW5n IGJ5IHRoZSByZXBvcnQgZ2VuZXJhdG9yLiAgSW48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij4gICAgICAgaGVhZGluZyBvZmYgbW9yZSBzZXZlcmUgZmlsdGVyaW5nIGJ5IHRoZSByZXBv cnQgZ2VuZXJhdG9yLiAgSW48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxlZnQiPiAgICAgICBhZGRpdGlvbiwgdXNpbmcgYW4gYWRkcmVzcyB0aGF0IGNh bm5vdCByZWNlaXZlIHJlcGxpZXMgcHJlY2x1ZGVzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+ICAgICAgIGFkZGl0aW9uLCB1c2luZyBhbiBhZGRyZXNzIHRoYXQgY2Fubm90IHJlY2Vp dmUgcmVwbGllcyBwcmVjbHVkZXM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICBhbnkgcmVxdWVzdHMgZm9yIGFkZGl0aW9uYWwgaW5m b3JtYXRpb24sIGFuZCBpbmNyZWFzZXMgdGhlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+ICAgICAgIGFueSByZXF1ZXN0cyBmb3IgYWRkaXRpb25hbCBpbmZvcm1hdGlvbiwgYW5kIGlu Y3JlYXNlcyB0aGU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry Pg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPiAgICAgICBsaWtlbGlob29kIHRoYXQgZnVydGhlciByZXBvcnRzIHdpbGwgYmUg ZGlzY2FyZGVkIG9yIGJsb2NrZWQuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAg ICAgIGxpa2VsaWhvb2QgdGhhdCBmdXJ0aGVyIHJlcG9ydHMgd2lsbCBiZSBkaXNjYXJkZWQgb3Ig YmxvY2tlZC48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0K ICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAyNCI+PC9hPjwvdGQ+PC90cj4NCiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2si PiAgICAgICBUaHVzLCBhIHJlcG9ydCBnZW5lcmF0b3Igc2VuZGluZyB1bnNvbGljaXRlZCByZXBv cnRzIFNIT1VMRDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICAgICAgVGh1cywg YSByZXBvcnQgZ2VuZXJhdG9yIHNlbmRpbmcgdW5zb2xpY2l0ZWQgcmVwb3J0cyBTSE9VTEQgPHNw YW4gY2xhc3M9Imluc2VydCI+Tk9UPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICAgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+ ZW5zdXJlIHRoYXQ8L3NwYW4+IGEgcmVwbHkgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+dG8gc3VjaCBh IHJlcG9ydCBjYW48L3NwYW4+IGJlIHJlY2VpdmVkLiAgV2hlcmUgYW48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAgIGdlbmVyYXRlIHJl cG9ydHMgZm9yIHdoaWNoPC9zcGFuPiBhIHJlcGx5IDxzcGFuIGNsYXNzPSJpbnNlcnQiPmNhbm5v dDwvc3Bhbj4gYmUgcmVjZWl2ZWQuICBXaGVyZSBhbjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgIHVuc29saWNpdGVkIHJlcG9ydCBy ZXN1bHRzIGluIHRoZSBlc3RhYmxpc2htZW50IG9mIGNvbnRhY3Qgd2l0aCBhPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgIHVuc29saWNpdGVkIHJlcG9ydCByZXN1bHRzIGlu IHRoZSBlc3RhYmxpc2htZW50IG9mIGNvbnRhY3Qgd2l0aCBhPC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgcmVzcG9uc2libGUgYW5k IHJlc3BvbnNpdmUgcGFydHksIHRoaXMgY2FuIGJlIHNhdmVkIGZvciBmdXR1cmU8L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgcmVzcG9uc2libGUgYW5kIHJlc3BvbnNpdmUg cGFydHksIHRoaXMgY2FuIGJlIHNhdmVkIGZvciBmdXR1cmU8L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICBjb21wbGFpbnQgaGFuZGxp bmcgYW5kIHBvc3NpYmxlIGVzdGFibGlzaG1lbnQgb2YgYSBmb3JtYWw8L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgY29tcGxhaW50IGhhbmRsaW5nIGFuZCBwb3NzaWJsZSBl c3RhYmxpc2htZW50IG9mIGEgZm9ybWFsPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgKHNvbGljaXRlZCkgZmVlZGJhY2sgYXJyYW5n ZW1lbnQuICBTZWUgU2VjdGlvbiAzLjUgb2YgW1JGQzY0NDldPC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+ICAgICAgIChzb2xpY2l0ZWQpIGZlZWRiYWNrIGFycmFuZ2VtZW50LiAgU2Vl IFNlY3Rpb24gMy41IG9mIFtSRkM2NDQ5XTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgIGZvciBhIGRpc2N1c3Npb24gb2YgZXN0YWJs aXNobWVudCBvZiBmZWVkYmFjayBhcnJhbmdlbWVudHMuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyaWdodCI+ICAgICAgIGZvciBhIGRpc2N1c3Npb24gb2YgZXN0YWJsaXNobWVudCBvZiBmZWVk YmFjayBhcnJhbmdlbWVudHMuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjcuICBHZW5l cmF0aW5nIEF1dG9tYXRpYyBBdXRoZW50aWNhdGlvbiBGYWlsdXJlIFJlcG9ydHM8L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij43LiAgR2VuZXJhdGluZyBBdXRvbWF0aWMgQXV0aGVudGlj YXRpb24gRmFpbHVyZSBSZXBvcnRzPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFtU aGVzZSBudW1iZXJlZCBpdGVtcyBhcmUgbm90IGludGVuZGVkIHRvIGJlIGluIGEgcGFyaWN1bGFy IHNlcXVlbmNlLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFtUaGVzZSBudW1i ZXJlZCBpdGVtcyBhcmUgbm90IGludGVuZGVkIHRvIGJlIGluIGEgcGFyaWN1bGFyIHNlcXVlbmNl LjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ ICAgVGhlIG51bWJlcnMgYXJlIGhlcmUgZHVyaW5nIGRvY3VtZW50IGRldmVsb3BtZW50IHRvIG1h a2UgaXQgZWFzaWVyIHRvPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgVGhlIG51 bWJlcnMgYXJlIGhlcmUgZHVyaW5nIGRvY3VtZW50IGRldmVsb3BtZW50IHRvIG1ha2UgaXQgZWFz aWVyIHRvPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90 cj4NCiAgICAgIDx0ciBiZ2NvbG9yPSJncmF5Ij48dGQ+PC90ZD48dGg+PGEgbmFtZT0icGFydC1s OCI+PHNtYWxsPnNraXBwaW5nIHRvIGNoYW5nZSBhdDwvc21hbGw+PGVtPiBwYWdlIDEwLCBsaW5l IDM2PC9lbT48L2E+PC90aD48dGg+IDwvdGg+PHRoPjxhIG5hbWU9InBhcnQtcjgiPjxzbWFsbD5z a2lwcGluZyB0byBjaGFuZ2UgYXQ8L3NtYWxsPjxlbT4gcGFnZSAxMCwgbGluZSAzMTwvZW0+PC9h PjwvdGg+PHRkPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgcmVwb3J0cyBhcmUgYWx3YXlzIHNv bGljaXRlZCwgc3VjaCBhcyB0aGUgbWVjaGFuaXNtcyBkZWZpbmVkIGluPC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgIHJlcG9ydHMgYXJlIGFsd2F5cyBzb2xpY2l0ZWQsIHN1 Y2ggYXMgdGhlIG1lY2hhbmlzbXMgZGVmaW5lZCBpbjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgIHRoZSBleGFtcGxlcyBsaXN0ZWQg YWJvdmUuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgIHRoZSBleGFtcGxl cyBsaXN0ZWQgYWJvdmUuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij4gICAyLiAgSWYgdGhlIG1lc3NhZ2UgdW5kZXIgZXZhbHVhdGlvbiBieSB0 aGUgVmVyaWZpZXIgaXMgYW4gQVJGPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAg Mi4gIElmIHRoZSBtZXNzYWdlIHVuZGVyIGV2YWx1YXRpb24gYnkgdGhlIFZlcmlmaWVyIGlzIGFu IEFSRjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+ICAgICAgIChbUkZDNTk2NV0pIG1lc3NhZ2UsIGEgcmVwb3J0IE1VU1QgTk9UIGJlIGF1dG9t YXRpY2FsbHk8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgKFtSRkM1OTY1 XSkgbWVzc2FnZSwgYSByZXBvcnQgTVVTVCBOT1QgYmUgYXV0b21hdGljYWxseTwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgIGdlbmVy YXRlZC48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgZ2VuZXJhdGVkLjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAg My4gIFdoZW4gc2VuZGluZyBhIG5ldyByZXBvcnQgdmlhIFNNVFAsIGl0IGlzIG5lY2Vzc2FyeSB0 byBjb25zdHJ1Y3Q8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAzLiAgV2hlbiBz ZW5kaW5nIGEgbmV3IHJlcG9ydCB2aWEgU01UUCwgaXQgaXMgbmVjZXNzYXJ5IHRvIGNvbnN0cnVj dDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ ICAgICAgIHRoZSBtZXNzYWdlIHNvIGFzIHRvIGF2b2lkIGFtcGxpZmljYXRpb24gYXR0YWNrcywg ZGVsaWJlcmF0ZSBvcjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICB0aGUg bWVzc2FnZSBzbyBhcyB0byBhdm9pZCBhbXBsaWZpY2F0aW9uIGF0dGFja3MsIGRlbGliZXJhdGUg b3I8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PiAgICAgICBvdGhlcndpc2UuICBUaGUgZW52ZWxvcGUgc2VuZGVyIGFkZHJlc3Mgb2YgdGhlIHJl cG9ydCBuZWVkcyB0byBiZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICBv dGhlcndpc2UuICBUaGUgZW52ZWxvcGUgc2VuZGVyIGFkZHJlc3Mgb2YgdGhlIHJlcG9ydCBuZWVk cyB0byBiZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+ICAgICAgIGNob3NlbiBzbyB0aGF0IHRoZXNlIHJlcG9ydHMgd2lsbCBub3QgZ2VuZXJh dGUgbWFpbCBsb29wcy48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgY2hv c2VuIHNvIHRoYXQgdGhlc2UgcmVwb3J0cyB3aWxsIG5vdCBnZW5lcmF0ZSBtYWlsIGxvb3BzLjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAg ICAgIFNpbWlsYXIgdG8gU2VjdGlvbiAyIG9mIFtSRkMzNDY0XSwgdGhlIGVudmVsb3BlIHNlbmRl ciBhZGRyZXNzIG9mPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgIFNpbWls YXIgdG8gU2VjdGlvbiAyIG9mIFtSRkMzNDY0XSwgdGhlIGVudmVsb3BlIHNlbmRlciBhZGRyZXNz IG9mPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAwMjUiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAg ICAgdGhlIHJlcG9ydCA8c3BhbiBjbGFzcz0iZGVsZXRlIj5TSE9VTEQ8L3NwYW4+IGJlIGNob3Nl biB0byBlbnN1cmUgdGhhdCBubyBmZWVkYmFjayByZXBvcnRzPC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyYmxvY2siPiAgICAgICB0aGUgcmVwb3J0IDxzcGFuIGNsYXNzPSJpbnNlcnQiPm5lZWRz IHRvPC9zcGFuPiBiZSBjaG9zZW4gdG8gZW5zdXJlIHRoYXQgbm8gZmVlZGJhY2sgcmVwb3J0czwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAg ICAgIHdpbGwgYmUgaXNzdWVkIGluIHJlc3BvbnNlIHRvIHRoZSByZXBvcnQgaXRzZWxmLiAgVGhl cmVmb3JlLCB3aGVuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgIHdpbGwg YmUgaXNzdWVkIGluIHJlc3BvbnNlIHRvIHRoZSByZXBvcnQgaXRzZWxmLiAgVGhlcmVmb3JlLCB3 aGVuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij4gICAgICAgYW4gU01UUCB0cmFuc2FjdGlvbiBpcyB1c2VkIHRvIHNlbmQgYSByZXBvcnQsIHRo ZSBNQUlMIEZST008L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgYW4gU01U UCB0cmFuc2FjdGlvbiBpcyB1c2VkIHRvIHNlbmQgYSByZXBvcnQsIHRoZSBNQUlMIEZST008L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAg ICBjb21tYW5kIFNIT1VMRCB1c2UgdGhlIE5VTEwgcmV2ZXJzZS1wYXRoLCBpLmUuLCAiTUFJTCBG Uk9NOiZsdDsmZ3Q7Ii48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgY29t bWFuZCBTSE9VTEQgdXNlIHRoZSBOVUxMIHJldmVyc2UtcGF0aCwgaS5lLiwgIk1BSUwgRlJPTTom bHQ7Jmd0OyIuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4N CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij4gICA0LiAgUmVwb3J0cyBTSE9VTEQgdXNlICJGZWVkYmFjay1UeXBlOiBhdXRoLWZh aWx1cmUiLCBidXQgTUFZIHVzZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIDQu ICBSZXBvcnRzIFNIT1VMRCB1c2UgIkZlZWRiYWNrLVR5cGU6IGF1dGgtZmFpbHVyZSIsIGJ1dCBN QVkgdXNlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij4gICAgICAgb3RoZXIgdHlwZXMgYXMgYXBwcm9wcmlhdGUuICBIb3dldmVyLCB0aGUgTWFp bGJveCBQcm92aWRlcjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICBvdGhl ciB0eXBlcyBhcyBhcHByb3ByaWF0ZS4gIEhvd2V2ZXIsIHRoZSBNYWlsYm94IFByb3ZpZGVyPC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQ+PGEgbmFtZT0iZGlmZjAwMjYiPjwvYT48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICAgZ2Vu ZXJhdGluZyB0aGUgcmVwb3J0cyA8c3BhbiBjbGFzcz0iZGVsZXRlIj5TSE9VTEQgTk9UPC9zcGFu PiBhc3N1bWUgdGhhdCB0aGUgb3BlcmF0b3I8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9j ayI+ICAgICAgIGdlbmVyYXRpbmcgdGhlIHJlcG9ydHMgPHNwYW4gY2xhc3M9Imluc2VydCI+Y2Fu bm90PC9zcGFuPiBhc3N1bWUgdGhhdCB0aGUgb3BlcmF0b3IgcmVjZWl2aW5nPC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgICAgICByZWNl aXZpbmcgdGhlIHJlcG9ydHMgd2lsbCB0cmVhdCBkaWZmZXJlbnQgRmVlZGJhY2stVHlwZXM8L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgICAgIHRoZSByZXBvcnRzIHdpbGwgdHJl YXQgZGlmZmVyZW50IEZlZWRiYWNrLVR5cGVzIGRpZmZlcmVudGx5LjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICAgZGlmZmVyZW50 bHkuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIDUuICA8c3BhbiBjbGFzcz0i aW5zZXJ0Ij5UaGVzZSByZXBvcnRzPC9zcGFuPiBTSE9VTEQgaW5jbHVkZSB0aGUgZm9sbG93aW5n IG9wdGlvbmFsIDxzcGFuIGNsYXNzPSJpbnNlcnQiPmZpZWxkcyw8L3NwYW4+PC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIDUuICA8c3Bh biBjbGFzcz0iZGVsZXRlIj5SZXBvcnRzPC9zcGFuPiBTSE9VTEQgaW5jbHVkZSB0aGUgZm9sbG93 aW5nIG9wdGlvbmFsIDxzcGFuIGNsYXNzPSJkZWxldGUiPmZpZWxkczwvc3Bhbj4gd2hlbmV2ZXI8 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAg ICAgIGFsdGhvdWdoIHRoZXkgYXJlIG9wdGlvbmFsIGluIFtSRkM1OTY1XSw8L3NwYW4+IHdoZW5l dmVyIDxzcGFuIGNsYXNzPSJpbnNlcnQiPnRoZWlyPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICAgPHNwYW4gY2xhc3M9 ImRlbGV0ZSI+cHJhY3RpY2FsOjwvc3Bhbj4gT3JpZ2luYWwtTWFpbC1Gcm9tLCA8c3BhbiBjbGFz cz0iZGVsZXRlIj5BcnJpdmFsLURhdGUsPC9zcGFuPiBTb3VyY2UtSVAsIDxzcGFuIGNsYXNzPSJk ZWxldGUiPk9yaWdpbmFsLTwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAgIGNvcnJlc3BvbmRpbmcgdmFsdWVzIGFyZSBhdmFp bGFibGU6PC9zcGFuPiBPcmlnaW5hbC1NYWlsLUZyb20sIDxzcGFuIGNsYXNzPSJpbnNlcnQiPkFy cml2YWwtPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICAgICAgUmNwdC1Uby48L3NwYW4+ ICBPdGhlciBvcHRpb25hbCBmaWVsZHMgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+TUFZPC9zcGFuPiBi ZSBpbmNsdWRlZCwgYXMgdGhlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFu IGNsYXNzPSJpbnNlcnQiPiAgICAgICBEYXRlLDwvc3Bhbj4gU291cmNlLUlQLCA8c3BhbiBjbGFz cz0iaW5zZXJ0Ij5PcmlnaW5hbC1SY3B0LVRvLjwvc3Bhbj4gIE90aGVyIG9wdGlvbmFsIGZpZWxk cyA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5jYW48L3NwYW4+IGJlPC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgICAgICBpbXBsZW1lbnRlciBm ZWVscyBpcyBhcHByb3ByaWF0ZS48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAg ICAgIGluY2x1ZGVkLCBhcyB0aGUgaW1wbGVtZW50ZXIgZmVlbHMgaXMgYXBwcm9wcmlhdGUuPC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjguICBJQU5BIENvbnNpZGVyYXRpb25zPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+OC4gIElBTkEgQ29uc2lkZXJhdGlvbnM8L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgW1JGQyBFZGl0b3I6IHBsZWFzZSByZW1vdmUgdGhp cyBzZWN0aW9uIHByaW9yIHRvIHB1YmxpY2F0aW9uLl08L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJpZ2h0Ij4gICBbUkZDIEVkaXRvcjogcGxlYXNlIHJlbW92ZSB0aGlzIHNlY3Rpb24gcHJpb3Ig dG8gcHVibGljYXRpb24uXTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk PjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBUaGlzIGRv Y3VtZW50IGhhcyBubyBJQU5BIGFjdGlvbnMuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+ICAgVGhpcyBkb2N1bWVudCBoYXMgbm8gSUFOQSBhY3Rpb25zLjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4NCiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij45LiAgU2VjdXJpdHkgQ29uc2lkZXJhdGlvbnM8L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij45LiAgU2VjdXJpdHkgQ29uc2lkZXJhdGlvbnM8L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPg0KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+DQogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+OS4xLiAgSW4gT3RoZXIgRG9jdW1lbnRzPC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+OS4xLiAgSW4gT3RoZXIgRG9jdW1lbnRzPC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4NCg0KICAgICA8dHI+PHRkPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZD48 L3RkPjwvdHI+DQogICAgIDx0ciBiZ2NvbG9yPSJncmF5Ij48dGggY29sc3Bhbj0iNSIgYWxpZ249 ImNlbnRlciI+PGEgbmFtZT0iZW5kIj4mbmJzcDtFbmQgb2YgY2hhbmdlcy4gMjYgY2hhbmdlIGJs b2Nrcy4mbmJzcDs8L2E+PC90aD48L3RyPg0KICAgICA8dHIgY2xhc3M9InN0YXRzIj48dGQ+PC90 ZD48dGg+PGk+NzcgbGluZXMgY2hhbmdlZCBvciBkZWxldGVkPC9pPjwvdGg+PHRoPjxpPiA8L2k+ PC90aD48dGg+PGk+NzEgbGluZXMgY2hhbmdlZCBvciBhZGRlZDwvaT48L3RoPjx0ZD48L3RkPjwv dHI+DQogICAgIDx0cj48dGQgY29sc3Bhbj0iNSIgY2xhc3M9InNtYWxsIiBhbGlnbj0iY2VudGVy Ij48YnI+VGhpcyBodG1sIGRpZmYgd2FzIHByb2R1Y2VkIGJ5IHJmY2RpZmYgMS4zMy4gVGhlIGxh dGVzdCB2ZXJzaW9uIGlzIGF2YWlsYWJsZSBmcm9tIDxhIGhyZWY9Imh0dHA6Ly93d3cudG9vbHMu aWV0Zi5vcmcvdG9vbHMvcmZjZGlmZi8iPmh0dHA6Ly90b29scy5pZXRmLm9yZy90b29scy9yZmNk aWZmLzwvYT4gPC90ZD48L3RyPg0KICAgPC90Ym9keT48L3RhYmxlPg0KICAgDQogICANCjwvYm9k eT48L2h0bWw+ --_004_9452079D1A51524AA5749AD23E0039280C1C60exchmbx901corpclo_-- From sklist@kitterman.com Thu Mar 29 14:02:57 2012 Return-Path: X-Original-To: marf@ietfa.amsl.com Delivered-To: marf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E2DC921F856C for ; Thu, 29 Mar 2012 14:02:57 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.98 X-Spam-Level: X-Spam-Status: No, score=-1.98 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_SORBS_WEB=0.619] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dCmeLkLH2Kgm for ; Thu, 29 Mar 2012 14:02:57 -0700 (PDT) Received: from mailout02.controlledmail.com (mailout02.controlledmail.com [72.81.252.18]) by ietfa.amsl.com (Postfix) with ESMTP id E8AAE21F8548 for ; Thu, 29 Mar 2012 14:02:56 -0700 (PDT) Received: from mailout02.controlledmail.com (localhost [127.0.0.1]) by mailout02.controlledmail.com (Postfix) with ESMTP id DE32920E40DA; Thu, 29 Mar 2012 17:02:55 -0400 (EDT) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=kitterman.com; s=2007-00; t=1333054975; bh=n4BGJnf9zR0qbp2gsvnEINzlm4DkQ8BJvzL5+vQmIlk=; h=From:To:Subject:Date:Message-ID:In-Reply-To:References: MIME-Version:Content-Transfer-Encoding:Content-Type; b=lXLhLhyvtFfTiWmS8wmlXJHw89jleRb4+N9jQGd7qpMtZ13Pu0jbqbdciqF8dvKW5 FL5crB1Z08EmFqyNTrp3iend8JVKE9LAvlVHT6J/Eqe9m6y+MJu5L3au9bv5JRkiTB DE1zR6aydD2KizKSSCFRGGXzeqK141PkebTdBxyI= Received: from scott-latitude-e6320.localnet (unknown [65.222.203.66]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mailout02.controlledmail.com (Postfix) with ESMTPSA id B17B820E408F; Thu, 29 Mar 2012 17:02:54 -0400 (EDT) From: Scott Kitterman To: marf@ietf.org Date: Thu, 29 Mar 2012 17:02:42 -0400 Message-ID: <47637294.Dbr7VQiJAl@scott-latitude-e6320> User-Agent: KMail/4.7.3 (Linux/3.0.0-16-generic-pae; KDE/4.7.4; i686; ; ) In-Reply-To: <9452079D1A51524AA5749AD23E0039280C1C60@exch-mbx901.corp.cloudmark.com> References: <9452079D1A51524AA5749AD23E0039280C1C60@exch-mbx901.corp.cloudmark.com> MIME-Version: 1.0 Content-Transfer-Encoding: 7Bit Content-Type: text/plain; charset="us-ascii" X-AV-Checked: ClamAV using ClamSMTP Subject: Re: [marf] draft-ietf-marf-as status and review X-BeenThere: marf@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Message Abuse Report Format working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 29 Mar 2012 21:02:58 -0000 On Thursday, March 29, 2012 08:36:06 PM Murray S. Kucherawy wrote: > During AD Evaluation, which is the first step of the publication process, > our AD had numerous concerns with the applicability statement draft, all of > which were focused on clarity in our use of normative language. > > I sat down with him and with Barry here in Paris and sorted out his > concerns. The attached diff iooks much better to him, and I agree that it > makes the language much tighter and even removes some redundancy in one > case. > > Please get a look and let me know what you think, up or down. I'd like to > post it late Friday night (Pacific time), and I need at least a couple of > people to make sure that I haven't broken anything we wanted to say. After > that it will get scheduled for an IETF-wide Last Call and IESG evaluation. Except for the change to 5.1.2, I think it's all reasonable. I suspect that what's actually written in the revised 5.1.2 doesn't reflect what was intended. The problematic (IMO) sentence now says: "Mail operators MUST NOT reject reports formatted per [RFC5965] as email messages ([RFC5322]) over SMTP ([RFC5321]). " There are lots of reasons to reject messages and I think a general MUST NOT reject is far to global. The old wording was: "Mail operators MUST be prepared to receive reports formatted per [RFC5965] as email messages ([RFC5322]) over SMTP ([RFC5321])." The way it's worded now would be appropriate if rejecting one of these messages had some major interoperability impact and that's not the case. Reading over this section (5.1.2), I'm no longer sure what it was meant to accomplish, so I don't have a recommendation for new wording. Scott K From msk@cloudmark.com Thu Mar 29 16:18:04 2012 Return-Path: X-Original-To: marf@ietfa.amsl.com Delivered-To: marf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0F39D21F852E for ; Thu, 29 Mar 2012 16:18:04 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.638 X-Spam-Level: X-Spam-Status: No, score=-102.638 tagged_above=-999 required=5 tests=[AWL=-0.039, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0jOopH8F6BlT for ; Thu, 29 Mar 2012 16:18:03 -0700 (PDT) Received: from ht2-outbound.cloudmark.com (ht2-outbound.cloudmark.com [72.5.239.26]) by ietfa.amsl.com (Postfix) with ESMTP id 789D721F847E for ; Thu, 29 Mar 2012 16:18:03 -0700 (PDT) Received: from EXCH-MBX901.corp.cloudmark.com ([fe80::addf:849a:f71c:4a82]) by exch-htcas902.corp.cloudmark.com ([fe80::e82a:4f80:7f44:eaf7%12]) with mapi id 14.01.0355.002; Thu, 29 Mar 2012 16:18:03 -0700 From: "Murray S. Kucherawy" To: "marf@ietf.org" Thread-Topic: [marf] draft-ietf-marf-as status and review Thread-Index: Ac0N640r3tAf5vkTQrqcUNFj+aEHygAPmc0AAAueJKA= Date: Thu, 29 Mar 2012 23:18:02 +0000 Message-ID: <9452079D1A51524AA5749AD23E0039280C207B@exch-mbx901.corp.cloudmark.com> References: <9452079D1A51524AA5749AD23E0039280C1C60@exch-mbx901.corp.cloudmark.com> <47637294.Dbr7VQiJAl@scott-latitude-e6320> In-Reply-To: <47637294.Dbr7VQiJAl@scott-latitude-e6320> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [172.22.1.158] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Subject: Re: [marf] draft-ietf-marf-as status and review X-BeenThere: marf@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Message Abuse Report Format working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 29 Mar 2012 23:18:04 -0000 > -----Original Message----- > From: marf-bounces@ietf.org [mailto:marf-bounces@ietf.org] On Behalf Of S= cott Kitterman > Sent: Thursday, March 29, 2012 2:03 PM > To: marf@ietf.org > Subject: Re: [marf] draft-ietf-marf-as status and review >=20 > Except for the change to 5.1.2, I think it's all reasonable. I suspect > that what's actually written in the revised 5.1.2 doesn't reflect what > was intended. > [...] > The way it's worded now would be appropriate if rejecting one of these > messages had some major interoperability impact and that's not the > case. >=20 > Reading over this section (5.1.2), I'm no longer sure what it was meant > to accomplish, so I don't have a recommendation for new wording. Think of it as a "You are compliant with this applicability statement if yo= ur abuse address accepts and processes ARF-formatted messages", trying to u= se normative language. They could do nothing with them, of course, but I t= hink we need to say that this is the protocol of choice between the two end= points in this situation. -MSK From sklist@kitterman.com Thu Mar 29 19:42:58 2012 Return-Path: X-Original-To: marf@ietfa.amsl.com Delivered-To: marf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A325221E8092 for ; Thu, 29 Mar 2012 19:42:58 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.566 X-Spam-Level: X-Spam-Status: No, score=-2.566 tagged_above=-999 required=5 tests=[AWL=0.033, BAYES_00=-2.599] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id n-Zymf9BgyWa for ; Thu, 29 Mar 2012 19:42:57 -0700 (PDT) Received: from mailout03.controlledmail.com (mailout03.controlledmail.com [208.43.65.50]) by ietfa.amsl.com (Postfix) with ESMTP id 1E49E21E8044 for ; Thu, 29 Mar 2012 19:42:57 -0700 (PDT) Received: from mailout03.controlledmail.com (localhost [127.0.0.1]) by mailout03.controlledmail.com (Postfix) with ESMTP id 63ABBD04063; Thu, 29 Mar 2012 21:42:56 -0500 (CDT) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=kitterman.com; s=2007-00; t=1333075376; bh=gtqk9Ri4+xCXdOjTVbVKUHDVL5dnEvKcN2niTEVbjOI=; h=References:In-Reply-To:MIME-Version:Content-Type: Content-Transfer-Encoding:Subject:From:Date:To:Message-ID; b=j65rO9B6jvv3lVmB/1uyAVSO8GVD/P/jNIDoX9HwHLo8OzT3hbfe0E5sMrViMMIsE kxDlXEOQ/O1DbNks5BZdDkXqtveph5agZ3xGpMiGg4OWWWoeDcXaos4IdUgTlFvzet j1+mcw5tSNbrbuXGHzPKGfW1UNwYxySNIf6aEFqk= Received: from [192.168.111.101] (static-72-81-252-21.bltmmd.fios.verizon.net [72.81.252.21]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mailout03.controlledmail.com (Postfix) with ESMTPSA id 20EC3D04049; Thu, 29 Mar 2012 21:42:56 -0500 (CDT) References: <9452079D1A51524AA5749AD23E0039280C1C60@exch-mbx901.corp.cloudmark.com> <47637294.Dbr7VQiJAl@scott-latitude-e6320> <9452079D1A51524AA5749AD23E0039280C207B@exch-mbx901.corp.cloudmark.com> User-Agent: K-9 Mail for Android In-Reply-To: <9452079D1A51524AA5749AD23E0039280C207B@exch-mbx901.corp.cloudmark.com> MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit From: Scott Kitterman Date: Thu, 29 Mar 2012 22:41:34 -0400 To: "marf@ietf.org" Message-ID: <55ed5402-19fa-41ae-8410-399bab7216d5@email.android.com> X-AV-Checked: ClamAV using ClamSMTP Subject: Re: [marf] draft-ietf-marf-as status and review X-BeenThere: marf@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Message Abuse Report Format working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 30 Mar 2012 02:42:58 -0000 "Murray S. Kucherawy" wrote: >> -----Original Message----- >> From: marf-bounces@ietf.org [mailto:marf-bounces@ietf.org] On Behalf >Of Scott Kitterman >> Sent: Thursday, March 29, 2012 2:03 PM >> To: marf@ietf.org >> Subject: Re: [marf] draft-ietf-marf-as status and review >> >> Except for the change to 5.1.2, I think it's all reasonable. I >suspect >> that what's actually written in the revised 5.1.2 doesn't reflect >what >> was intended. >> [...] >> The way it's worded now would be appropriate if rejecting one of >these >> messages had some major interoperability impact and that's not the >> case. >> >> Reading over this section (5.1.2), I'm no longer sure what it was >meant >> to accomplish, so I don't have a recommendation for new wording. > >Think of it as a "You are compliant with this applicability statement >if your abue address accepts and processes ARF-formatted messages", >trying to use normative language. They could do nothing with them, of >course, but I think we need to say that this is the protocol of choice >between the two endpoints in this situation. OK. MUST NOT reject doesn't say that. Scott K From msk@cloudmark.com Thu Mar 29 22:37:52 2012 Return-Path: X-Original-To: marf@ietfa.amsl.com Delivered-To: marf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 284AA21F86C1 for ; Thu, 29 Mar 2012 22:37:52 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.541 X-Spam-Level: X-Spam-Status: No, score=-102.541 tagged_above=-999 required=5 tests=[AWL=0.058, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iQrIPBPm5RhI for ; Thu, 29 Mar 2012 22:37:51 -0700 (PDT) Received: from ht2-outbound.cloudmark.com (ht2-outbound.cloudmark.com [72.5.239.26]) by ietfa.amsl.com (Postfix) with ESMTP id 15D4A21F8667 for ; Thu, 29 Mar 2012 22:37:44 -0700 (PDT) Received: from EXCH-MBX901.corp.cloudmark.com ([fe80::addf:849a:f71c:4a82]) by exch-htcas902.corp.cloudmark.com ([fe80::e82a:4f80:7f44:eaf7%12]) with mapi id 14.01.0355.002; Thu, 29 Mar 2012 22:37:43 -0700 From: "Murray S. Kucherawy" To: "marf@ietf.org" Thread-Topic: [marf] draft-ietf-marf-as status and review Thread-Index: Ac0N640r3tAf5vkTQrqcUNFj+aEHygAPmc0AAAueJKAAADeQAAAInDlw Date: Fri, 30 Mar 2012 05:37:42 +0000 Message-ID: <9452079D1A51524AA5749AD23E0039280C230C@exch-mbx901.corp.cloudmark.com> References: <9452079D1A51524AA5749AD23E0039280C1C60@exch-mbx901.corp.cloudmark.com> <47637294.Dbr7VQiJAl@scott-latitude-e6320> <9452079D1A51524AA5749AD23E0039280C207B@exch-mbx901.corp.cloudmark.com> <55ed5402-19fa-41ae-8410-399bab7216d5@email.android.com> In-Reply-To: <55ed5402-19fa-41ae-8410-399bab7216d5@email.android.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [130.129.64.89] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Subject: Re: [marf] draft-ietf-marf-as status and review X-BeenThere: marf@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Message Abuse Report Format working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 30 Mar 2012 05:37:52 -0000 > -----Original Message----- > From: marf-bounces@ietf.org [mailto:marf-bounces@ietf.org] On Behalf Of > Scott Kitterman > Sent: Thursday, March 29, 2012 7:42 PM > To: marf@ietf.org > Subject: Re: [marf] draft-ietf-marf-as status and review >=20 > >Think of it as a "You are compliant with this applicability statement > >if your abue address accepts and processes ARF-formatted messages", > >trying to use normative language. They could do nothing with them, of > >course, but I think we need to say that this is the protocol of choice > >between the two endpoints in this situation. >=20 > OK. MUST NOT reject doesn't say that. How about: Mail operators MUST be able to receive and process reports formatted per [R= FC5965] as email messages ([RFC5322]) over SMTP ([RFC5321]). These and othe= r types of email messages that can be received are discussed in Section 4.2= of [RFC6449]. It's the same as the -11 text, except it changes "prepared" to "able". Tha= t sounds almost the same, except when considering the contrapositive: "unpr= epared" is a lot weaker in a protocol sense than "unable". -MSK From barryleiba.mailing.lists@gmail.com Fri Mar 30 00:38:30 2012 Return-Path: X-Original-To: marf@ietfa.amsl.com Delivered-To: marf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E49B521F872E for ; Fri, 30 Mar 2012 00:38:30 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.998 X-Spam-Level: X-Spam-Status: No, score=-102.998 tagged_above=-999 required=5 tests=[AWL=-0.022, BAYES_00=-2.599, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7jt0jBnOh-6V for ; Fri, 30 Mar 2012 00:38:30 -0700 (PDT) Received: from mail-yx0-f172.google.com (mail-yx0-f172.google.com [209.85.213.172]) by ietfa.amsl.com (Postfix) with ESMTP id 0A13621F86EC for ; Fri, 30 Mar 2012 00:38:27 -0700 (PDT) Received: by yenm5 with SMTP id m5so138690yen.31 for ; Fri, 30 Mar 2012 00:38:27 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:date :x-google-sender-auth:message-id:subject:from:to:cc:content-type; bh=3WYHh80Tju1VKJ7oSFFP1GUnhEzCGPHtgWb3XbGdNjs=; b=BvFPNIQHy4FacQet2rMA5rGg21fzOTq4u2iPeNzJA6MBtajzkFlQCIvciOXYuH/dwi IlGp6dGA+H5tA7L1XdRzxHWJwBBO5PsqGQsvQ7T+RpKfmKSxmEgDYqp4jLyq2AMGfZWc nw2vn1+WtK5umhX3urn1Wpq9zDTrvz0zKZuGjWQGX0nYqTdnKFVZcEQ5e1X2Eq6y/nMU C13i2fb7nqGDquVm2q8qniQp2mKmtRWt+shNqhvU23mo6uKZ7/SQakn/knXiulxaiw9M PCFLtHLkDsKAG8Dsmvjg1iQvsOY8zcJdKRF5GJoVY/d2XkU+pEZFMoNP4/SH7keSzKon GBhw== MIME-Version: 1.0 Received: by 10.236.77.170 with SMTP id d30mr1025940yhe.16.1333093107700; Fri, 30 Mar 2012 00:38:27 -0700 (PDT) Sender: barryleiba.mailing.lists@gmail.com Received: by 10.146.230.1 with HTTP; Fri, 30 Mar 2012 00:38:27 -0700 (PDT) In-Reply-To: <9452079D1A51524AA5749AD23E0039280C230C@exch-mbx901.corp.cloudmark.com> References: <9452079D1A51524AA5749AD23E0039280C1C60@exch-mbx901.corp.cloudmark.com> <47637294.Dbr7VQiJAl@scott-latitude-e6320> <9452079D1A51524AA5749AD23E0039280C207B@exch-mbx901.corp.cloudmark.com> <55ed5402-19fa-41ae-8410-399bab7216d5@email.android.com> <9452079D1A51524AA5749AD23E0039280C230C@exch-mbx901.corp.cloudmark.com> Date: Fri, 30 Mar 2012 09:38:27 +0200 X-Google-Sender-Auth: NtJtEq-r7seq8sdZaRTsuQDgbF4 Message-ID: From: Barry Leiba To: "Murray S. Kucherawy" Content-Type: multipart/alternative; boundary=20cf300514b42313ba04bc70ed13 Cc: "marf@ietf.org" Subject: Re: [marf] draft-ietf-marf-as status and review X-BeenThere: marf@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Message Abuse Report Format working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 30 Mar 2012 07:38:31 -0000 --20cf300514b42313ba04bc70ed13 Content-Type: text/plain; charset=ISO-8859-1 > > How about: > > Mail operators MUST be able to receive and process reports formatted per > [RFC5965] as email messages ([RFC5322]) over SMTP ([RFC5321]). These and > other types of email messages that can be received are discussed in Section > 4.2 of [RFC6449]. > I don't know. I think the fact that Scott couldn't come up with text, and that your attempt is a bit weak, speak to this sentence not using 2119 text (and note that that does NOT make it "non-normative"). Maybe just something like, "[reports covered in this draft] are formatted per ARF [RFC5965] as email messages [RFC5322] over SMTP [RFC5321]." (BTW, the use of bare citations to double as text is what's causing you to do the siilly "([RFCxxxx])" thing sometimes. Just say no, please.) Barry --20cf300514b42313ba04bc70ed13 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable
How about:

Mail operators MUST be able to receive and process reports formatted per [R= FC5965] as email messages ([RFC5322]) over SMTP ([RFC5321]). These and othe= r types of email messages that can be received are discussed in Section 4.2= of [RFC6449].

I don't know. =A0I think the fact that= Scott couldn't come up with text, and that your attempt is a bit weak,= speak to this sentence not using 2119 text (and note that that does NOT ma= ke it "non-normative"). =A0Maybe just something like, "[repo= rts covered in this draft] are formatted per ARF [RFC5965] as email message= s [RFC5322] over SMTP [RFC5321]."=A0

(BTW, the use of bare citations to double as text is wh= at's causing you to do the siilly "([RFCxxxx])" thing sometim= es. =A0Just say no, please.)

Barry

--20cf300514b42313ba04bc70ed13-- From johnl@iecc.com Fri Mar 30 02:37:21 2012 Return-Path: X-Original-To: marf@ietfa.amsl.com Delivered-To: marf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 23CD821F868A for ; Fri, 30 Mar 2012 02:37:21 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -110.406 X-Spam-Level: X-Spam-Status: No, score=-110.406 tagged_above=-999 required=5 tests=[AWL=0.793, BAYES_00=-2.599, HABEAS_ACCREDITED_SOI=-4.3, RCVD_IN_BSP_TRUSTED=-4.3, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FLt5F1b0jTwS for ; Fri, 30 Mar 2012 02:37:20 -0700 (PDT) Received: from leila.iecc.com (leila6.iecc.com [IPv6:2001:470:1f07:1126:0:4c:6569:6c61]) by ietfa.amsl.com (Postfix) with ESMTP id 165C021F85A4 for ; Fri, 30 Mar 2012 02:37:13 -0700 (PDT) Received: (qmail 41091 invoked from network); 30 Mar 2012 09:37:13 -0000 Received: from leila.iecc.com (64.57.183.34) by mail1.iecc.com with QMQP; 30 Mar 2012 09:37:13 -0000 DKIM-Signature: v=1; a=rsa-sha256; c=simple; d=iecc.com; h=date:message-id:from:to:cc:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:vbr-info; s=4f757ec7.xn--30v786c.k1203; i=johnl@user.iecc.com; bh=yLKCqI2H+SniK9f0pVj8W7gsiFbxjHexflT2pv6/ODI=; b=aQ/UHMF5EnYx9AkoNrHoVQuIpVzcOs3Y6wAYJwOVtiAsRQUUCf2piJsd5EsoAb1+0ZxbgQVJPzEYDFpv6uZb1GPQ6bQmRwJMyKhrURn2K0lnA0oiLXtnpSKyFnoqBFXjIfBFwoD1E5EGWkszWakkIVRHX7ZHvwe2VafCPjWiQxE= DKIM-Signature: v=1; a=rsa-sha256; c=simple; d=taugh.com; h=date:message-id:from:to:cc:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:vbr-info; s=4f757ec7.xn--30v786c.k1203; olt=johnl@user.iecc.com; bh=yLKCqI2H+SniK9f0pVj8W7gsiFbxjHexflT2pv6/ODI=; b=LMZ0w+bJG8v4/5kunnrhI0R2YSXuPWkxKytuBMaBxM+gg8NqNzmFRRZF6xP2HYJ8bdgxTjzaFLUVDUizx4SQeo1lpKdcUGb5NEmlYcRvKIQP0ua/O1cct/K5mASPKMWNDOVGtvaU/qXZL4BVuXB771wyGjzWS6WvlkJETfTMHyg= VBR-Info: md=iecc.com; mc=all; mv=dwl.spamhaus.org Date: 30 Mar 2012 09:36:49 -0000 Message-ID: <20120330093649.69630.qmail@joyce.lan> From: "John Levine" To: marf@ietf.org In-Reply-To: <9452079D1A51524AA5749AD23E0039280C1C60@exch-mbx901.corp.cloudmark.com> Organization: X-Headerized: yes Mime-Version: 1.0 Content-type: text/plain; charset=utf-8 Content-transfer-encoding: 7bit Subject: Re: [marf] draft-ietf-marf-as status and review X-BeenThere: marf@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Message Abuse Report Format working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 30 Mar 2012 09:37:21 -0000 Give or take the fixes discussed to make 5.2 say what it's supposed to mean (which I think is to the extent you accept any reports you should accept ARF reports), it looks good to me. R's, John From internet-drafts@ietf.org Fri Mar 30 02:40:45 2012 Return-Path: X-Original-To: marf@ietfa.amsl.com Delivered-To: marf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F29E921F8959; Fri, 30 Mar 2012 02:40:44 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.359 X-Spam-Level: X-Spam-Status: No, score=-102.359 tagged_above=-999 required=5 tests=[AWL=0.240, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3Tl2k4LDy8bF; Fri, 30 Mar 2012 02:40:44 -0700 (PDT) Received: from ietfa.amsl.com (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E7EC821F8961; Fri, 30 Mar 2012 02:40:43 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable From: internet-drafts@ietf.org To: i-d-announce@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 4.00 Message-ID: <20120330094043.29232.83839.idtracker@ietfa.amsl.com> Date: Fri, 30 Mar 2012 02:40:43 -0700 Cc: marf@ietf.org Subject: [marf] I-D Action: draft-ietf-marf-as-12.txt X-BeenThere: marf@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Message Abuse Report Format working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 30 Mar 2012 09:40:45 -0000 A New Internet-Draft is available from the on-line Internet-Drafts director= ies. This draft is a work item of the Messaging Abuse Reporting Format Work= ing Group of the IETF. Title : Creation and Use of Email Feedback Reports: An Applicabi= lity Statement for the Abuse Reporting Format (ARF) Author(s) : J.D. Falk M. Kucherawy Filename : draft-ietf-marf-as-12.txt Pages : 15 Date : 2012-03-30 RFC 5965 defines an extensible, machine-readable format intended for mail operators to report feedback about received email to other parties. This Applicability Statement describes common methods for utilizing this format for reporting both abuse and authentication failure events. Mailbox Providers of any size, mail sending entities, and end users can use these methods as a basis to create procedures that best suit them. Some related optional mechanisms are also discussed. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-ietf-marf-as-12.txt Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ This Internet-Draft can be retrieved at: ftp://ftp.ietf.org/internet-drafts/draft-ietf-marf-as-12.txt From msk@cloudmark.com Fri Mar 30 02:49:52 2012 Return-Path: X-Original-To: marf@ietfa.amsl.com Delivered-To: marf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3238A21F87ED for ; Fri, 30 Mar 2012 02:49:52 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.546 X-Spam-Level: X-Spam-Status: No, score=-102.546 tagged_above=-999 required=5 tests=[AWL=0.053, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7MK7sskr4rWx for ; Fri, 30 Mar 2012 02:49:51 -0700 (PDT) Received: from ht2-outbound.cloudmark.com (ht2-outbound.cloudmark.com [72.5.239.26]) by ietfa.amsl.com (Postfix) with ESMTP id C1B0D21F851A for ; Fri, 30 Mar 2012 02:49:51 -0700 (PDT) Received: from EXCH-MBX901.corp.cloudmark.com ([fe80::addf:849a:f71c:4a82]) by exch-htcas902.corp.cloudmark.com ([fe80::e82a:4f80:7f44:eaf7%12]) with mapi id 14.01.0355.002; Fri, 30 Mar 2012 02:49:51 -0700 From: "Murray S. Kucherawy" To: "marf@ietf.org" Thread-Topic: I-D Action: draft-ietf-marf-as-12.txt Thread-Index: AQHNDllZfGdC/tv0gEeE29FQyVLeOJaCmA9Q Date: Fri, 30 Mar 2012 09:49:50 +0000 Message-ID: <9452079D1A51524AA5749AD23E0039280C27AD@exch-mbx901.corp.cloudmark.com> References: <20120330094043.29232.83839.idtracker@ietfa.amsl.com> In-Reply-To: <20120330094043.29232.83839.idtracker@ietfa.amsl.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [130.129.23.154] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Subject: Re: [marf] I-D Action: draft-ietf-marf-as-12.txt X-BeenThere: marf@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Message Abuse Report Format working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 30 Mar 2012 09:49:52 -0000 > -----Original Message----- > From: i-d-announce-bounces@ietf.org [mailto:i-d-announce-bounces@ietf.org= ] On Behalf Of internet-drafts@ietf.org > Sent: Friday, March 30, 2012 2:41 AM > To: i-d-announce@ietf.org > Cc: marf@ietf.org > Subject: I-D Action: draft-ietf-marf-as-12.txt >=20 > A New Internet-Draft is available from the on-line Internet-Drafts > directories. This draft is a work item of the Messaging Abuse Reporting > Format Working Group of the IETF. >=20 > Title : Creation and Use of Email Feedback Reports: An > Applicability Statement for the Abuse Reporting Format (ARF) > Author(s) : J.D. Falk > M. Kucherawy > Filename : draft-ietf-marf-as-12.txt > Pages : 15 > Date : 2012-03-30 >=20 > RFC 5965 defines an extensible, machine-readable format intended for > mail operators to report feedback about received email to other > parties. This Applicability Statement describes common methods for > utilizing this format for reporting both abuse and authentication > failure events. Mailbox Providers of any size, mail sending > entities, and end users can use these methods as a basis to create > procedures that best suit them. Some related optional mechanisms are > also discussed. Addresses AD feedback about use of normative language. -MSK From sklist@kitterman.com Fri Mar 30 05:15:38 2012 Return-Path: X-Original-To: marf@ietfa.amsl.com Delivered-To: marf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 01E6721F86C5 for ; Fri, 30 Mar 2012 05:15:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.566 X-Spam-Level: X-Spam-Status: No, score=-2.566 tagged_above=-999 required=5 tests=[AWL=0.033, BAYES_00=-2.599] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dZL-lyI9R1ir for ; Fri, 30 Mar 2012 05:15:37 -0700 (PDT) Received: from mailout02.controlledmail.com (mailout02.controlledmail.com [72.81.252.18]) by ietfa.amsl.com (Postfix) with ESMTP id 4F6F521F86C3 for ; Fri, 30 Mar 2012 05:15:37 -0700 (PDT) Received: from mailout02.controlledmail.com (localhost [127.0.0.1]) by mailout02.controlledmail.com (Postfix) with ESMTP id 5B4CB20E40DA; Fri, 30 Mar 2012 08:15:36 -0400 (EDT) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=kitterman.com; s=2007-00; t=1333109736; bh=xSGLMI874a0eznHugwzQ9UhUMxyhAqRbXlH2BuLP59s=; h=From:To:Subject:Date:Message-ID:In-Reply-To:References: MIME-Version:Content-Transfer-Encoding:Content-Type; b=erNjrt51nKj/JYp2t4vsYRZdmOuVHolrpf+sunWVAp15wXL3juwO0orNQ5Iic+TJV N4MnBcScwur36O68zbRo++6AOiDRJy1nqT0W6T9KvmCWDvI8cbcPZOG1cjtccsavOh fs1kKK4oDh+W/f7WZTZECkRyZqzItZy4dW3EQRc0= Received: from scott-latitude-e6320.localnet (static-72-81-252-21.bltmmd.fios.verizon.net [72.81.252.21]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mailout02.controlledmail.com (Postfix) with ESMTPSA id 40E0F20E4083; Fri, 30 Mar 2012 08:15:36 -0400 (EDT) From: Scott Kitterman To: marf@ietf.org Date: Fri, 30 Mar 2012 08:15:32 -0400 Message-ID: <1916272.v7fkeYIYGa@scott-latitude-e6320> User-Agent: KMail/4.7.3 (Linux/3.0.0-16-generic-pae; KDE/4.7.4; i686; ; ) In-Reply-To: References: <9452079D1A51524AA5749AD23E0039280C1C60@exch-mbx901.corp.cloudmark.com> <9452079D1A51524AA5749AD23E0039280C230C@exch-mbx901.corp.cloudmark.com> MIME-Version: 1.0 Content-Transfer-Encoding: 7Bit Content-Type: text/plain; charset="us-ascii" X-AV-Checked: ClamAV using ClamSMTP Subject: Re: [marf] draft-ietf-marf-as status and review X-BeenThere: marf@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Message Abuse Report Format working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 30 Mar 2012 12:15:38 -0000 On Friday, March 30, 2012 09:38:27 AM Barry Leiba wrote: > > How about: > > > > Mail operators MUST be able to receive and process reports formatted per > > [RFC5965] as email messages ([RFC5322]) over SMTP ([RFC5321]). These and > > other types of email messages that can be received are discussed in > > Section 4.2 of [RFC6449]. > > I don't know. I think the fact that Scott couldn't come up with text, and > that your attempt is a bit weak, speak to this sentence not using 2119 text > (and note that that does NOT make it "non-normative"). Maybe just > something like, "[reports covered in this draft] are formatted per ARF > [RFC5965] as email messages [RFC5322] over SMTP [RFC5321]." > > (BTW, the use of bare citations to double as text is what's causing you to > do the siilly "([RFCxxxx])" thing sometimes. Just say no, please.) I like that one best (Barry's), but either is fin. Scott K From msk@cloudmark.com Fri Mar 30 08:15:25 2012 Return-Path: X-Original-To: marf@ietfa.amsl.com Delivered-To: marf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 491FE21F84A6 for ; Fri, 30 Mar 2012 08:15:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -106.599 X-Spam-Level: X-Spam-Status: No, score=-106.599 tagged_above=-999 required=5 tests=[AWL=-4.000, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tW0PhRDSl9Wk for ; Fri, 30 Mar 2012 08:15:24 -0700 (PDT) Received: from ht1-outbound.cloudmark.com (ht1-outbound.cloudmark.com [72.5.239.25]) by ietfa.amsl.com (Postfix) with ESMTP id E44B521F8704 for ; Fri, 30 Mar 2012 08:15:24 -0700 (PDT) Received: from EXCH-MBX901.corp.cloudmark.com ([fe80::addf:849a:f71c:4a82]) by exch-htcas901.corp.cloudmark.com ([fe80::2524:76b6:a865:539c%10]) with mapi id 14.01.0355.002; Fri, 30 Mar 2012 08:15:24 -0700 From: "Murray S. Kucherawy" To: "marf@ietf.org" Thread-Topic: [marf] draft-ietf-marf-as status and review Thread-Index: Ac0N640r3tAf5vkTQrqcUNFj+aEHygAPmc0AAAueJKAAADeQAAAInDlwAAHCH4AACa1RAAAIZp6g Date: Fri, 30 Mar 2012 15:15:23 +0000 Message-ID: <9452079D1A51524AA5749AD23E0039280C2E59@exch-mbx901.corp.cloudmark.com> References: <9452079D1A51524AA5749AD23E0039280C1C60@exch-mbx901.corp.cloudmark.com> <9452079D1A51524AA5749AD23E0039280C230C@exch-mbx901.corp.cloudmark.com> <1916272.v7fkeYIYGa@scott-latitude-e6320> In-Reply-To: <1916272.v7fkeYIYGa@scott-latitude-e6320> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [213.41.80.50] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Subject: Re: [marf] draft-ietf-marf-as status and review X-BeenThere: marf@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Message Abuse Report Format working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 30 Mar 2012 15:15:25 -0000 > -----Original Message----- > From: marf-bounces@ietf.org [mailto:marf-bounces@ietf.org] On Behalf Of S= cott Kitterman > Sent: Friday, March 30, 2012 5:16 AM > To: marf@ietf.org > Subject: Re: [marf] draft-ietf-marf-as status and review >=20 > I like that one best (Barry's), but either is fin. I went with that, with slight modifications. It's over to Pete for process= ing. -MSK