Return-Path: X-Original-To: dnsop@ietfa.amsl.com Delivered-To: dnsop@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A7E90C1D4A98; Thu, 25 Jul 2024 07:13:07 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -7.106 X-Spam-Level: X-Spam-Status: No, score=-7.106 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=jhuapl.edu Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fT6Ninx9VmFz; Thu, 25 Jul 2024 07:13:03 -0700 (PDT) Received: from aplegw02.jhuapl.edu (aplegw02.jhuapl.edu [128.244.251.169]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5A199C19ECBD; Thu, 25 Jul 2024 07:13:03 -0700 (PDT) Received: from pps.filterd (aplegw02.jhuapl.edu [127.0.0.1]) by aplegw02.jhuapl.edu (8.17.1.19/8.17.1.19) with ESMTP id 46PBu94k029221; Thu, 25 Jul 2024 10:13:02 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=jhuapl.edu; h=cc : content-type : date : from : in-reply-to : message-id : mime-version : references : subject : to; s=JHUAPLDec2018; bh=l+KbQIgwu8ticy5Slx/uWLOFW+PQwW1KH4Thy/hnr58=; b=llExUm7Jlw3mdaInqoYpmTKuFL5qYiolQ2zzFjpG8ZP+NZhKFrOuARlsKt0ZvxiK8Rem 1mwJNU0Pm4ElVBJ7+Mrx1eGSek/XBBN0j5MWx/6DPrJPdRxvyP9jtGFTUsB8BgeFk8Zu FvokpV9R8klhsZ8oDDICL8rdfuclElpLWpIFNQI2NLDeZ9LGITNwtzAiIUhQL+FhpSeX GbMUp8wyMoagcpygiwB/zTAc3nmRvDmZLRC/xriiadfsJOt9axmu8tWQMBz+EUZ/NwiW agPa6nnXoIgFX033Bp1shTpq8x1SkK/bwp3AiA5VLrOQQ6haTM7wVhe/6Xt3AHosOsHE Kw== Received: from aplex25.dom1.jhuapl.edu (aplex25.dom1.jhuapl.edu [10.114.162.10]) by aplegw02.jhuapl.edu (PPS) with ESMTPS id 40g9f16dcy-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Thu, 25 Jul 2024 10:13:02 -0400 Received: from APLEX21.dom1.jhuapl.edu (10.114.162.6) by APLEX25.dom1.jhuapl.edu (10.114.162.10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.1544.11; Thu, 25 Jul 2024 10:12:50 -0400 Received: from APLEX21.dom1.jhuapl.edu ([fe80::20d7:9545:f01e:9b2]) by APLEX21.dom1.jhuapl.edu ([fe80::20d7:9545:f01e:9b2%5]) with mapi id 15.02.1544.011; Thu, 25 Jul 2024 10:12:50 -0400 From: "Sipos, Brian J." To: Scott Johnson , Marc Blanchet Thread-Topic: [EXT] [dtn] Re: [DNSOP] An Interplanetary DNS Model Thread-Index: AQHa3QrNPLqZ8O2FikCtFZq5/IkiJLIFt8QAgADDugCAAAJSAIAAH38AgADXETA= Date: Thu, 25 Jul 2024 14:12:50 +0000 Message-ID: References: <65daf988-f696-4f35-5a72-5b11ef4893b8@spacelypackets.com> <0685c4ca-0b10-d7a8-ccd4-507dc6755d1a@spacelypackets.com> <41A7771E-8D08-4272-B457-F9FE61CD77A3@viagenie.ca> <358b7baa-d4f1-5f73-152b-768806efa0f3@spacelypackets.com> In-Reply-To: <358b7baa-d4f1-5f73-152b-768806efa0f3@spacelypackets.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: x-originating-ip: [10.114.162.18] Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=SHA1; boundary="----=_NextPart_000_003B_01DADE7B.33B737C0" MIME-Version: 1.0 X-CrossPremisesHeadersFilteredBySendConnector: APLEX25.dom1.jhuapl.edu X-OrganizationHeadersPreserved: APLEX25.dom1.jhuapl.edu X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.293,Aquarius:18.0.1039,Hydra:6.0.680,FMLib:17.12.28.16 definitions=2024-07-25_13,2024-07-25_03,2024-05-17_01 Message-ID-Hash: G25YFE6BHJWN33UXTPZYH6MMOMBTJ4BW X-Message-ID-Hash: G25YFE6BHJWN33UXTPZYH6MMOMBTJ4BW X-MailFrom: Brian.Sipos@jhuapl.edu X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-dnsop.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header CC: Lorenzo Breda , DTN WG , dnsop X-Mailman-Version: 3.3.9rc4 Precedence: list Subject: =?utf-8?q?=5BDNSOP=5D_Re=3A_=5BEXT=5D_=5Bdtn=5D_Re=3A_An_Interplanetary_DNS_?= =?utf-8?q?Model?= List-Id: IETF DNSOP WG mailing list Archived-At: List-Archive: List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: ------=_NextPart_000_003B_01DADE7B.33B737C0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable All, I'm replying to a non-specific message in this chain just to mention = that, similar to what Lorenzo brought up, any translation of identifiers = (names or addresses) will be fraught with problems related to security = and should not be done. There can be translation or mapping that happens = in a way not visible to users/clients, but whatever identifiers are = visible to the user/client need to have stable meaning across any = network. Naming authorities, such as PKIX CAs, need to rely on the fact that once = a user proves ownership of a specific identifier that same identifier = will not be used by other users (at least not simultaneously over a = short time interval). Part of the reason why public CAs such as Let's = Encrypt will not issue certificates for IP addresses is the prevalence = of IP NATs, even though IP identifiers are allowed by the CA/Browser TLS = baseline [1]. [1] = https://cabforum.org/working-groups/server/baseline-requirements/document= s/CA-Browser-Forum-TLS-BR-2.0.5.pdf > -----Original Message----- > From: Scott Johnson > Sent: Wednesday, July 24, 2024 4:44 PM > To: Marc Blanchet > Cc: Lorenzo Breda ; DTN WG ; dnsop > > Subject: [EXT] [dtn] Re: [DNSOP] An Interplanetary DNS Model >=20 > APL external email warning: Verify sender forwardingalgorithm@ietf.org = before > clicking links or attachments >=20 > Hi Marc, >=20 > On Wed, 24 Jul 2024, Marc Blanchet wrote: >=20 > > > > > > Le 24 juill. 2024 =C3=A0 11:42, Lorenzo Breda > > a =C3=A9crit : > > > > > > Why are you against leaving the current TLDs implicitly on Earth by > > default? > > > > > > Right. One do not need a special TLD for space. We can use what we > > have and it just works fine. >=20 > I do not disagree with this notion as respects my proposed = architecture. > 3rd level domains mapped to off-world domains works just fine, for the = low low > price of annual domain renewal. a tld representing each remote world = is > preferable, however, because it is just "cooler;" easier to use and = more > memorable than a much longer domain. This, however, assumes we are = talking > about the same proposal, which we are not. >=20 > > One has just to be careful on remote resolution so that it contains > > what is needed: trust chain, local names, ... > > >=20 > Lets be clear here, Marc. You are talking about a completely = different solution > than I am; one predicated on IP only. Your comment on this thread, = without > context, only serves to confuse the other participants. >=20 > For example, you are talking about using F-root, right? That is a = very different > thing than the functionality which I am describing, with significantly = more > network resource usage requirements. My solution uses BP in some = network > segments. Personally, I don't think your method will ever fly, = primarily due to > security reasons, but I don't troll your threads about it in a manner = which would > muddy the waters of those considering your proposal. I don't mind = healthy > competition of ideas, but I do expect fair play. If you wish to = contrast the two > methods, thats fine, yet unproductive, IMHO. Just make sure the = reader knows > you are talking about your proposal, and not mine. >=20 > ScottJ >=20 >=20 >=20 > > This is discussed in: > > - running IP in deep space (noBP<->IP): > > https://www.ietf.org/archive/id/draft-many-deepspace-ip-asse > > ssment-01.txt > > - running DNS in remote places: > > = https://www.ietf.org/archive/id/draft-many-dnsop-dns-isolated-network > > s-01.txt > > > > > > Regards, Marc. > > > > > > > > -- > > Lorenzo Breda > > _______________________________________________ > > dtn mailing list -- dtn@ietf.org > > To unsubscribe send an email to dtn-leave@ietf.org > > > > > > > > ------=_NextPart_000_003B_01DADE7B.33B737C0 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIVijCCA9Iw ggK6oAMCAQICBFWRbZ4wDQYJKoZIhvcNAQELBQAwgYgxCzAJBgNVBAYTAlVTMTwwOgYDVQQKEzNK b2hucyBIb3BraW5zIFVuaXZlcnNpdHkgQXBwbGllZCBQaHlzaWNzIExhYm9yYXRvcnkxIjAgBgNV BAsTGUNlcnRpZmljYXRpb24gQXV0aG9yaXRpZXMxFzAVBgNVBAMTDkpIVUFQTCBSb290IENBMB4X DTE1MDYyOTE1MzkwMloXDTMxMDIyODE2MDkwMlowgYgxCzAJBgNVBAYTAlVTMTwwOgYDVQQKEzNK b2hucyBIb3BraW5zIFVuaXZlcnNpdHkgQXBwbGllZCBQaHlzaWNzIExhYm9yYXRvcnkxIjAgBgNV BAsTGUNlcnRpZmljYXRpb24gQXV0aG9yaXRpZXMxFzAVBgNVBAMTDkpIVUFQTCBSb290IENBMIIB IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhKkDoyyRvXrtC0TJxEpR1CyTwLFAF2Gz5NN isky/tGXPWn9cO8MGxECvZywMzFEBIJOjBmQKeMYmK2/Y/qd/fWTt/9HJTRGpDr902+4nWZJnq21 na6qS6J26reRd8BVV+O8i8TVlsuKG8snyQJUugg6D8BJWM8yPJXC9QByonfK7X1ZYCAI2h1OTTxH RKAytgaV12PfI2AQzsT6RpVoJQqzNvu0VtAeRQ2v64cXHiPoMyrq0wT9Y+bWwD6Tjb7ZEwY1noxo k0mhdVRH0Z17VpXuGHtBRNUyvKJx1NyztKkvbvqBqhykNn0ZM77cTLnfA6AMAazO7DgT+H1YXflz CwIDAQABo0IwQDAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU94yZ iElQRjdbWqkEBy07V3tOp30wDQYJKoZIhvcNAQELBQADggEBABgRzXW4bO7oTGysnxMZqIMvWUid YoiPqf2ve6sp2S/n+bR4IHVR2mPys/haOP2kixJfKvKkYX1+kl+I4mwhLauwEUMeJSvApesCn/E+ eoFF5BMLL1euszN1MNBXhPS+e4xqaxgrPA7fCacn+i3ayqPcwSZx2AhggH0aiNqTfjANbLImq2os AWJINJ/gEQt56b8VBdmC3KxEYtUvhHx5wrhi3ulncJ61dwSGi9olhmQtIwsngNB9FcFg3+vG9NlE xdmQOhChscKTsYSCrVy6tHrsKvT5P4fG4aX+lDuy/kINFMkVn552eQv2j69AwtH57qkMuD7QMFVi Wsdie1C8yRwwggXLMIIEs6ADAgECAgRVkW3xMA0GCSqGSIb3DQEBCwUAMIGIMQswCQYDVQQGEwJV UzE8MDoGA1UEChMzSm9obnMgSG9wa2lucyBVbml2ZXJzaXR5IEFwcGxpZWQgUGh5c2ljcyBMYWJv cmF0b3J5MSIwIAYDVQQLExlDZXJ0aWZpY2F0aW9uIEF1dGhvcml0aWVzMRcwFQYDVQQDEw5KSFVB UEwgUm9vdCBDQTAeFw0xNTA2MjkxOTMwNTdaFw0zMTAxMjkyMDAwNTdaMIGLMQswCQYDVQQGEwJV UzE8MDoGA1UEChMzSm9obnMgSG9wa2lucyBVbml2ZXJzaXR5IEFwcGxpZWQgUGh5c2ljcyBMYWJv cmF0b3J5MSIwIAYDVQQLExlDZXJ0aWZpY2F0aW9uIEF1dGhvcml0aWVzMRowGAYDVQQDExFKSFVB UEwgSXNzdWluZyBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMDbSDs+bw1I2DXk lAdB0aGUz7kZNVfRT+b6P98WZogI+HiQur3cwxWnVtSkEQKDq6CHj6ApCzX+p8U78/22fAba7tYi WFv1JtPRis0AGLe7D4/yb2dImUtEtqiSlTtK4pAz0u+W/BWBa3AoIv3gNJDXT9+KTOHu2rFKDvyN K7riASgJd+DU6tgK2eFcD0I3esjMvLvOVs2fMm3nYjP3qox+lPFLPFadRWkJE9bceChGhbjC9QDZ CQMpkJ8pUcqyqsq0aYQioJf/crhwmGuj+4jUILr681TymK190psiapF7FfN8cEZxQPhytpmgVL8w 6+KCG8kdObvyYyG0jY9wEOECAwEAAaOCAjYwggIyMA4GA1UdDwEB/wQEAwIBBjASBgNVHRMBAf8E CDAGAQH/AgEAMIGXBggrBgEFBQcBAQSBijCBhzBSBggrBgEFBQcwAoZGaHR0cDovL2podWFwbGNy bC5tYW5hZ2VkLmVudHJ1c3QuY29tL0FJQS9DZXJ0c0lzc3VlZHRvSkhVQVBMUm9vdENBLnA3YzAx BggrBgEFBQcwAYYlaHR0cDovL2podWFwbG9jc3AubWFuYWdlZC5lbnRydXN0LmNvbTA8BgNVHSAE NTAzMA8GDWCGSAGG+muBSAMKHgMwDwYNYIZIAYb6a4FIAwoeAjAPBg1ghkgBhvprgUgDCh4BMIHz BgNVHR8EgeswgegwQKA+oDyGOmh0dHA6Ly9qaHVhcGxjcmwubWFuYWdlZC5lbnRydXN0LmNvbS9D UkxzL2podWFwbFJvb3RDQS5jcmwwgaOggaCggZ2kgZowgZcxCzAJBgNVBAYTAlVTMTwwOgYDVQQK EzNKb2hucyBIb3BraW5zIFVuaXZlcnNpdHkgQXBwbGllZCBQaHlzaWNzIExhYm9yYXRvcnkxIjAg BgNVBAsTGUNlcnRpZmljYXRpb24gQXV0aG9yaXRpZXMxFzAVBgNVBAMTDkpIVUFQTCBSb290IENB MQ0wCwYDVQQDEwRDUkwxMB8GA1UdIwQYMBaAFPeMmYhJUEY3W1qpBActO1d7Tqd9MB0GA1UdDgQW BBQigLc8FIxuLUzRCACoiti7VnV1azANBgkqhkiG9w0BAQsFAAOCAQEAjAyN/rFaFM+8N2viJpCl yKz2CCo9RcZ1avKSJKYAv0RUFqicPoVM3f5KSfD6f2MIa/4htpQCAndQseY4/K7sZd9SgYXjSZrG 6OD3Ij9wCcwEaIxB67xigEkcJIlBTcUYDcNlEQTe2siACKkpVhd9H6/96EtHMzVFfORuupBRi4wr S6CjS0X16BKJMl9ZSfWg59Zj+UINtzkokI7JZUJTmMJCVIbnHvJ3wkLtrvCKo2gsTYGQJ/0Rd0UW psFpAwK+L7o9CVorSwV5UL36NY/6IoG8u3mRVvxwZdtKkBQ7ijGa0+GsiaePo0pstMEZNhX9NImZ Xd1Cp9ViGoVjA5/RwjCCBd4wggTGoAMCAQICBGXjqcQwDQYJKoZIhvcNAQELBQAwgYsxCzAJBgNV BAYTAlVTMTwwOgYDVQQKEzNKb2hucyBIb3BraW5zIFVuaXZlcnNpdHkgQXBwbGllZCBQaHlzaWNz IExhYm9yYXRvcnkxIjAgBgNVBAsTGUNlcnRpZmljYXRpb24gQXV0aG9yaXRpZXMxGjAYBgNVBAMT EUpIVUFQTCBJc3N1aW5nIENBMB4XDTI0MDUyMzE0MjU0M1oXDTI3MDUyMzE0NTU0M1owdDELMAkG A1UEBhMCVVMxPDA6BgNVBAoTM0pvaG5zIEhvcGtpbnMgVW5pdmVyc2l0eSBBcHBsaWVkIFBoeXNp Y3MgTGFib3JhdG9yeTEPMA0GA1UECxMGUGVvcGxlMRYwFAYDVQQDEw1CcmlhbiBKIFNpcG9zMIIB IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCeBkIZH9nRnFc9egkvb7u3WVlIfq7riuVrp CacsDfFkv+2I3ByTlf2AY+ai5n2lfsZwwl7l5ugNtIJAVMmx0Vpo1XcFX14GMAWGKBxLwoP+R112 Ys6mS1a9CWlxaYJbUbSp157ZL+oWSJXVB072I43v4MmOa8IwsxO7VH3YjzmoE+iiqa3Ajuj3n6/u nece9xAa5o7DRb3Y49HoPNXU2FvZAigF3FP6bEF8Z0cL7GTq33s0J2+aUknIN8HkcA1A08M6sjQr Kr9hmZeE2Rzay1uHCoUJcNSSAmjlSkasitxVCn5nG/l1EM7CtpdJbVpeKrQJphICMXA8idncoM0V vQIDAQABo4ICXjCCAlowDgYDVR0PAQH/BAQDAgUgMBMGA1UdJQQMMAoGCCsGAQUFBwMEMIGaBggr BgEFBQcBAQSBjTCBijBVBggrBgEFBQcwAoZJaHR0cDovL2podWFwbGNybC5tYW5hZ2VkLmVudHJ1 c3QuY29tL0FJQS9DZXJ0c0lzc3VlZHRvSkhVQVBMSXNzdWluZ0NBLnA3YzAxBggrBgEFBQcwAYYl aHR0cDovL2podWFwbG9jc3AubWFuYWdlZC5lbnRydXN0LmNvbTAaBgNVHSAEEzARMA8GDWCGSAGG +muBSAMKHgIwIQYDVR0RBBowGIEWQnJpYW4uU2lwb3NAamh1YXBsLmVkdTCB+wYDVR0fBIHzMIHw MEOgQaA/hj1odHRwOi8vamh1YXBsY3JsLm1hbmFnZWQuZW50cnVzdC5jb20vQ1JMcy9KSFVBUExJ c3N1aW5nQ0EuY3JsMIGooIGloIGipIGfMIGcMQswCQYDVQQGEwJVUzE8MDoGA1UEChMzSm9obnMg SG9wa2lucyBVbml2ZXJzaXR5IEFwcGxpZWQgUGh5c2ljcyBMYWJvcmF0b3J5MSIwIAYDVQQLExlD ZXJ0aWZpY2F0aW9uIEF1dGhvcml0aWVzMRowGAYDVQQDExFKSFVBUEwgSXNzdWluZyBDQTEPMA0G A1UEAxMGQ1JMMTI0MB8GA1UdIwQYMBaAFCKAtzwUjG4tTNEIAKiK2LtWdXVrMB0GA1UdDgQWBBR0 /+uVYbzqy/npA4Z2/u8DIiHNLTAZBgkqhkiG9n0HQQAEDDAKGwRWOC4zAwIEsDANBgkqhkiG9w0B AQsFAAOCAQEAB4wscC/j9NTARuV2dkR7Aa6/yN/TyEuSXgZPvC9Nk9Cfa/Yb5o/aZlD1yaen0HUk X4iEEA4BJonX/DgTdyhnaMMFtcucMp5qDguIber9V0iCGZXvFJECQsfgmJ2C4kGjbhYxjeg49zs+ tahhq0Pg5gyHQxgAy8VQlQz1187TpmbEhFJ7x4AifREJ/9WX6aMpnmHpPksOJaJQzqghxE4f1dZO NMDgQQMYOH7dqfEbqcw+vPB5VfFlOrddzwyco3/0+JH87Sm5Z73K8xOtH7w8Q/pTazNIHg+/JMt6 NMe4EfBX51P6EgMP41/2DW4+D4oEZMvnaiRC4b2f8+G+33bfcTCCBf8wggTnoAMCAQICBFWVtj4w DQYJKoZIhvcNAQELBQAwgYsxCzAJBgNVBAYTAlVTMTwwOgYDVQQKEzNKb2hucyBIb3BraW5zIFVu aXZlcnNpdHkgQXBwbGllZCBQaHlzaWNzIExhYm9yYXRvcnkxIjAgBgNVBAsTGUNlcnRpZmljYXRp b24gQXV0aG9yaXRpZXMxGjAYBgNVBAMTEUpIVUFQTCBJc3N1aW5nIENBMB4XDTIzMDYyOTE4NTEx NFoXDTI2MDYyOTE5MjExNFowdDELMAkGA1UEBhMCVVMxPDA6BgNVBAoTM0pvaG5zIEhvcGtpbnMg VW5pdmVyc2l0eSBBcHBsaWVkIFBoeXNpY3MgTGFib3JhdG9yeTEPMA0GA1UECxMGUGVvcGxlMRYw FAYDVQQDEw1CcmlhbiBKIFNpcG9zMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArA4K rgGPxXaHeoAgzXcrjbfRca9NMtpzO8uKOiKeQFL+7VHuICkX1Xf+P7s4QE4v3HGL5RQPHZ4lo+G3 f2Ji0/GsS0GHyMjS+CaXkJ2pV/55FyZHOnTfcsniHR13DSPDD8IDQilrRwGeg2fj2K+XfR+rsUdG RI41rkI8aXzh9fTv1D1ivV95Rf+/HqKnOPyji0yb09md8VIxzaf9BDLXZCrafTQyVWTo0PH8y8K4 XHlp45HtHt+fQ9frjlp47hE8xptmF5QlWwNEKmsgkaG+BLkJ0n4jIox2IK/SOBBpXHCcgGu6LdQo M/Px6GWgkkcNEE1TTpEweyp131x248BeXwIDAQABo4ICfzCCAnswDgYDVR0PAQH/BAQDAgbAMDQG A1UdJQQtMCsGCCsGAQUFBwMCBggrBgEFBQcDBAYJKoZIhvcvAQEFBgorBgEEAYI3CgMMMIGaBggr BgEFBQcBAQSBjTCBijBVBggrBgEFBQcwAoZJaHR0cDovL2podWFwbGNybC5tYW5hZ2VkLmVudHJ1 c3QuY29tL0FJQS9DZXJ0c0lzc3VlZHRvSkhVQVBMSXNzdWluZ0NBLnA3YzAxBggrBgEFBQcwAYYl aHR0cDovL2podWFwbG9jc3AubWFuYWdlZC5lbnRydXN0LmNvbTAaBgNVHSAEEzARMA8GDWCGSAGG +muBSAMKHgIwIQYDVR0RBBowGIEWQnJpYW4uU2lwb3NAamh1YXBsLmVkdTCB+wYDVR0fBIHzMIHw MEOgQaA/hj1odHRwOi8vamh1YXBsY3JsLm1hbmFnZWQuZW50cnVzdC5jb20vQ1JMcy9KSFVBUExJ c3N1aW5nQ0EuY3JsMIGooIGloIGipIGfMIGcMQswCQYDVQQGEwJVUzE8MDoGA1UEChMzSm9obnMg SG9wa2lucyBVbml2ZXJzaXR5IEFwcGxpZWQgUGh5c2ljcyBMYWJvcmF0b3J5MSIwIAYDVQQLExlD ZXJ0aWZpY2F0aW9uIEF1dGhvcml0aWVzMRowGAYDVQQDExFKSFVBUEwgSXNzdWluZyBDQTEPMA0G A1UEAxMGQ1JMMTExMB8GA1UdIwQYMBaAFCKAtzwUjG4tTNEIAKiK2LtWdXVrMB0GA1UdDgQWBBS5 Ljxj9TG0QDP7ErnyuyCWeOyyQzAZBgkqhkiG9n0HQQAEDDAKGwRWOC4zAwIEsDANBgkqhkiG9w0B AQsFAAOCAQEAfq3J0TeUoaZ5IUDK2fkiK18pM2Hq1cRY4uRqWS3t+MRBnc51tbnwK0fQSsgJiyO6 uA+1NnqLU25+4WRq9vl1EWOh7ihjivqp3pUGKw7Mb+jsSIoGmxOKqZqDcbS2TNXpfgFRxcwHHPR/ Af5vUEIXPYlqk5bAzSBKkAFH9jeyNAKQWujmfEBGf89CG/pjK/AZ7E0FOtqjDpTdDjEmmM/GfaN5 xlHpMhPvLG7ttFnpViHsZ5ZMFCnYWM9o7KpbK0MOiEPmGvKCDln4dztZ2/Nuc7QLaJJJEeLjwMzE xBk4xb/hGjOFBZ2aOJnTwrnkfX3BOy38PhOXu6ITH9XyuKkVaDGCA8UwggPBAgEBMIGUMIGLMQsw CQYDVQQGEwJVUzE8MDoGA1UEChMzSm9obnMgSG9wa2lucyBVbml2ZXJzaXR5IEFwcGxpZWQgUGh5 c2ljcyBMYWJvcmF0b3J5MSIwIAYDVQQLExlDZXJ0aWZpY2F0aW9uIEF1dGhvcml0aWVzMRowGAYD VQQDExFKSFVBUEwgSXNzdWluZyBDQQIEVZW2PjAJBgUrDgMCGgUAoIICBTAYBgkqhkiG9w0BCQMx CwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0yNDA3MjUxNDEyNDlaMCMGCSqGSIb3DQEJBDEW BBQXE/7pFg8TkThTpX+ltgPoM7B5/jBUBgkqhkiG9w0BCQ8xRzBFMAsGCWCGSAFlAwQBKjAKBggq hkiG9w0DBzAOBggqhkiG9w0DAgICAIAwCwYJYIZIAWUCAQEEMA0GCCqGSIb3DQMCAgFAMIGlBgkr BgEEAYI3EAQxgZcwgZQwgYsxCzAJBgNVBAYTAlVTMTwwOgYDVQQKEzNKb2hucyBIb3BraW5zIFVu aXZlcnNpdHkgQXBwbGllZCBQaHlzaWNzIExhYm9yYXRvcnkxIjAgBgNVBAsTGUNlcnRpZmljYXRp b24gQXV0aG9yaXRpZXMxGjAYBgNVBAMTEUpIVUFQTCBJc3N1aW5nIENBAgRl46nEMIGnBgsqhkiG 9w0BCRACCzGBl6CBlDCBizELMAkGA1UEBhMCVVMxPDA6BgNVBAoTM0pvaG5zIEhvcGtpbnMgVW5p dmVyc2l0eSBBcHBsaWVkIFBoeXNpY3MgTGFib3JhdG9yeTEiMCAGA1UECxMZQ2VydGlmaWNhdGlv biBBdXRob3JpdGllczEaMBgGA1UEAxMRSkhVQVBMIElzc3VpbmcgQ0ECBGXjqcQwDQYJKoZIhvcN AQEBBQAEggEAeuXddyQwToYCJJ6AE4ipSLmnwvaN4R9IoqebpTmKCdO08SAcFjgZxmGnOU7uLUlg lLhPdwPIOnwftyLjcQafGWtgFbOyQUhgn5SVj6IslZVoflRLD6RBX0fiTES0tmQMiJ9f+fuRDBcd iaujaNktpN3y3ETd6aC+sTi1o4UmHn4fXWXBes6etM6+8Aff1cyJhYjvSWky9CpHJT/59FR76zYX xrLjGkF6IT97+foAPYICiwA5dJwJARW8HF+5/eco03iT01ppy/nZbvDO0QNzVp012K9sopBKMu7A OjHLVjATqoSYNjMizfWcRZoGD/F2dnDiNF/BXOKdCI96Fs1H1QAAAAAAAA== ------=_NextPart_000_003B_01DADE7B.33B737C0--