Return-Path: X-Original-To: oauth@ietfa.amsl.com Delivered-To: oauth@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EFF59120111 for ; Wed, 30 Oct 2019 10:19:41 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.7 X-Spam-Level: X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=akamai.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id z0LNDrnIwrj0 for ; Wed, 30 Oct 2019 10:19:41 -0700 (PDT) Received: from mx0a-00190b01.pphosted.com (mx0a-00190b01.pphosted.com [IPv6:2620:100:9001:583::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 027D812080D for ; Wed, 30 Oct 2019 10:19:41 -0700 (PDT) Received: from pps.filterd (m0050095.ppops.net [127.0.0.1]) by m0050095.ppops.net-00190b01. (8.16.0.42/8.16.0.42) with SMTP id x9UHCZiH020148; Wed, 30 Oct 2019 17:19:38 GMT DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=akamai.com; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : mime-version; s=jan2016.eng; bh=hotyJF4yxx4uhI4Px2GMsVwXjkXl50DfKq9hiDfqJPQ=; b=F3A8kRukGCWtSsw753f/CeFV0smQ1s22QmhYw1CAJ260F5Wn6/+Jsorz3yzkV+3qvKTa HgCf5i6yKe+uColZm6Z5S0bO4rv2Vg7FWn2SQT/jWUazeOM06J6RWd1ch3X1sphVNdJt ruvu8pIJ0eAtQgChkifDl46M/inSDgthErSNzy2RN7naZSQmhPsAU9jLd+PPzk6zI2DW lPhoY3PhJFnMOruhwY2+vyF6kne4n8R8ZNZwAw7S525jKiKs5FrlJfLur3DV4m3qA/oY +FZzuYv4fbLrKgX3BNhTWshjhXCq7OlRrWsyCckyCZEZyF8Su5jDAEHS8yWV6RzXZH8j 6g== Received: from prod-mail-ppoint5 (prod-mail-ppoint5.akamai.com [184.51.33.60] (may be forged)) by m0050095.ppops.net-00190b01. with ESMTP id 2vxwgfc724-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Wed, 30 Oct 2019 17:19:38 +0000 Received: from pps.filterd (prod-mail-ppoint5.akamai.com [127.0.0.1]) by prod-mail-ppoint5.akamai.com (8.16.0.27/8.16.0.27) with SMTP id x9UHI2i1018426; Wed, 30 Oct 2019 10:19:36 -0700 Received: from email.msg.corp.akamai.com ([172.27.123.34]) by prod-mail-ppoint5.akamai.com with ESMTP id 2vxwfnsryx-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT); Wed, 30 Oct 2019 10:19:36 -0700 Received: from USMA1EX-DAG1MB5.msg.corp.akamai.com (172.27.123.105) by usma1ex-dag3mb2.msg.corp.akamai.com (172.27.123.59) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Wed, 30 Oct 2019 13:19:35 -0400 Received: from USMA1EX-DAG1MB3.msg.corp.akamai.com (172.27.123.103) by usma1ex-dag1mb5.msg.corp.akamai.com (172.27.123.105) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Wed, 30 Oct 2019 13:19:35 -0400 Received: from USMA1EX-DAG1MB3.msg.corp.akamai.com ([172.27.123.103]) by usma1ex-dag1mb3.msg.corp.akamai.com ([172.27.123.103]) with mapi id 15.00.1473.005; Wed, 30 Oct 2019 13:19:35 -0400 From: "Salz, Rich" To: Neil Madden CC: Justin Richer , Brian Campbell , oauth Thread-Topic: [OAUTH-WG] client certs and TLS Terminating Reverse Proxies (was Re: I-D Action: draft-ietf-oauth-jwt-introspection-response-08.txt) Thread-Index: AQHVi20DwSDixrsmwUqaChyBzydqk6dtvDgAgAKKHACAACgPAIAAB5+AgAAQz4CAAb9SAIAA0ZsAgABfMACAAAkLAP//v+yAgABJiYD//+FxAIAASVSA///BWAA= Date: Wed, 30 Oct 2019 17:19:34 +0000 Message-ID: <4D4F6A38-74ED-4243-A1BC-CE1823FC1ED9@akamai.com> References: <2B2ACEE8-7B48-4E2D-94DA-AF3DA86DE809@mit.edu> <50867522-C1A5-4BE2-888A-910B352D1EC8@mit.edu> <4DFE9EE9-2A57-4F2F-B2E2-12217FE3CECE@forgerock.com> <96892FC9-87E8-472F-B989-3D41DF43D2CC@akamai.com> <1543ED50-D92F-4679-87F5-AE679E4184AB@forgerock.com> <011AB6F2-F178-4D8F-8589-70A4C9CEC47A@akamai.com> <68653C2D-E8BB-40F9-9C40-941B6A92E68A@forgerock.com> In-Reply-To: <68653C2D-E8BB-40F9-9C40-941B6A92E68A@forgerock.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.1e.0.191013 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [172.19.32.191] Content-Type: multipart/alternative; boundary="_000_4D4F6A3874ED4243A1BCCE1823FC1ED9akamaicom_" MIME-Version: 1.0 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2019-10-30_07:, , signatures=0 X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 suspectscore=0 malwarescore=0 phishscore=0 bulkscore=0 spamscore=0 mlxscore=0 mlxlogscore=843 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1908290000 definitions=main-1910300152 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.95,1.0.8 definitions=2019-10-30_07:2019-10-30,2019-10-30 signatures=0 X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 mlxlogscore=832 spamscore=0 malwarescore=0 priorityscore=1501 phishscore=0 bulkscore=0 lowpriorityscore=0 clxscore=1015 mlxscore=0 suspectscore=0 impostorscore=0 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-1908290000 definitions=main-1910300152 Archived-At: Subject: Re: [OAUTH-WG] client certs and TLS Terminating Reverse Proxies (was Re: I-D Action: draft-ietf-oauth-jwt-introspection-response-08.txt) X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Oct 2019 17:19:42 -0000 --_000_4D4F6A3874ED4243A1BCCE1823FC1ED9akamaicom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 ICAqICAgVG8gcXVvdGUgeW91ciBwcmV2aW91cyBjbGFpbTogIlRoZXJlIGlzIG5vIHN1Y2ggdGhp bmcgYXMgYW4gdW5ndWVzc2FibGUgbmFtZS4iDQpSaWdodC4gIFRoYXQgZG9lc27igJl0IG1lYW4g KkkqIGhhdmUgdG8gZ3Vlc3MgaXQuDQoNCg0KICAqICAgRXZlbiBpZiB5b3VyIGRlcGxveW1lbnQg dGVhbSBoYWQgc3VjaCBzdGFnZ2VyaW5nbHkgYmFkIG9wZXJhdGlvbmFsIHNlY3VyaXR5IHByYWN0 aWNlcyBhcyB0byBhbGxvdyBwZW9wbGUgdG8gdGFrZSBwYWNrZXQgY2FwdHVyZXMgZnJvbSBhbiBp bnRlcm5hbCBuZXR3b3JrIGFuZCBzaG93IHRoZW0gb24gcHVibGljIHNsaWRlcyB3aXRob3V0IGFu eSBraW5kIG9mIHF1ZXN0aW9ucyBiZWluZyBhc2tlZCwgaWYgdGhpcyBhY3R1YWxseSBoYXBwZW5z ICpZT1UgQVJFIE5PIFdPUlNFIE9GRiBUSEFOIElOIFRIRSBTSVRVQVRJT04gV0hFUkUgWU9VIFVT RUQgQSBXRUxMLUtOT1dOIEhFQURFUiBOQU1FKiENClllcyB5b3UgYXJlIHdvcnNlIG9mZi4gIEJl Y2F1c2UgdGhhdCBub3ctZXhwb3NlZCBoZWFkZXIgdmFsdWUgY2FuIGJlIHVzZWQgZm9yIHNwb29m aW5nLiAgQXMgb3Bwb3NlZCB0byBwcm90ZWN0aW9uIGJ5IFRMUywgYW5kIHRoZW4gc2VuZGluZyB0 aGUgcGxhaW50ZXh0IG1lc3NhZ2UgYXJvdW5kLg0KDQoNCiAgKiAgIEkgZG9uJ3Qga25vdyBob3cg bWFueSBkaWZmZXJlbnQgd2F5cyBJIGNhbiBzYXkgdGhhdCB0aGlzIGlzIGEgZGVmZW5zZSBpbiBk ZXB0aA0KQmVjYXVzZSBpdCBpcyBub3QuICBJdCBpcyB0YWtpbmcgYW4gYXBwbGljYXRpb24tbGV2 ZWwgcGllY2Ugb2YgY29uZmlndXJhdGlvbiBkYXRhIGFuZCByZXF1aXJpbmcgaXQgdG8gYmUgdHJl YXRlZCBhcyBpZiBpdCB3ZXJlIGNyeXB0byBtYXRlcmlhbC4gV2hpY2ggaXQgY2Fubm90IGJlLCBi ZWNhdXNlIG11bHRpcGxlIHBhcnRpZXMgbmVlZCB0byBrbm93IGl0IChhcyBJIHNhaWQsIHRoZSBw cm94eSwgdGhlIGJhY2tlbmQsIHRoZSBhcHAgZGV2ZWxvcGVycywgdGhlIHN1cHBvcnQgdGVhbSwg ZXRjKS4gIEl04oCZcyBkZWZlbnNlIGJ5IOKAnGNvbGxhcHNpbmcgbGF5ZXJz4oCdIHJhdGhlciB0 aGFuIOKAnGluIGRlcHRoLuKAnQ0KDQoNCiAgKiAgIEFzIHdpdGggYWxsIGRlZmVuc2UgaW4gZGVw dGgsIHRoZSBhaW0gaXMgdG8gYmUgbW9yZSB0aGFuIDEgY29uZmlndXJhdGlvbiBtaXN0YWtlIGF3 YXkgZnJvbSB0b3RhbCBjb21wcm9taXNlLg0KQnV0IHRoYXQgaXMgZXhhY3RseSB3aGF0IHlvdSBh cmUgcHJvcG9zaW5nLiBFeHBvc2luZyB0aGUgaGVhZGVyICppcyogYSB0b3RhbCBjb21wcm9taXNl IGFuZCBtdWx0aXBsZSBlbnRpdGllcyB3aWxsIG5lZWQgdG8ga25vdyB0aGF0IGhlYWRlciB2YWx1 ZS4NCg0KQXQgYW55IHJhdGUsICBJIHRoaW5rIHdl4oCZcmUgZG9uZSBoZXJlLg0KDQo= --_000_4D4F6A3874ED4243A1BCCE1823FC1ED9akamaicom_ Content-Type: text/html; charset="utf-8" Content-ID: <3DFAD4C8B80C2C4CBF63B1B2E374A0CB@akamai.com> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseTpXaW5nZGluZ3M7DQoJcGFub3NlLTE6NSAwIDAgMCAwIDAgMCAwIDAg MDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJDYW1icmlhIE1hdGgiOw0KCXBhbm9zZS0x OjIgNCA1IDMgNSA0IDYgMyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDYWxpYnJp Ow0KCXBhbm9zZS0xOjIgMTUgNSAyIDIgMiA0IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1m YW1pbHk6LXdlYmtpdC1zdGFuZGFyZDsNCglwYW5vc2UtMToyIDExIDYgNCAyIDIgMiAyIDIgNDt9 DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2 Lk1zb05vcm1hbA0KCXttYXJnaW46MGluOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250 LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmO30NCmE6bGlu aywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOmJs dWU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQphOnZpc2l0ZWQsIHNwYW4uTXNvSHlw ZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOnB1cnBsZTsN Cgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCnAuTXNvTGlzdFBhcmFncmFwaCwgbGkuTXNv TGlzdFBhcmFncmFwaCwgZGl2Lk1zb0xpc3RQYXJhZ3JhcGgNCgl7bXNvLXN0eWxlLXByaW9yaXR5 OjM0Ow0KCW1zby1tYXJnaW4tdG9wLWFsdDphdXRvOw0KCW1hcmdpbi1yaWdodDowaW47DQoJbXNv LW1hcmdpbi1ib3R0b20tYWx0OmF1dG87DQoJbWFyZ2luLWxlZnQ6MGluOw0KCWZvbnQtc2l6ZTox MS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0KcC5tc29ub3JtYWww LCBsaS5tc29ub3JtYWwwLCBkaXYubXNvbm9ybWFsMA0KCXttc28tc3R5bGUtbmFtZTptc29ub3Jt YWw7DQoJbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87DQoJbWFyZ2luLXJpZ2h0OjBpbjsNCgltc28t bWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzsNCgltYXJnaW4tbGVmdDowaW47DQoJZm9udC1zaXplOjEx LjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQpzcGFuLkVtYWlsU3R5 bGUxOQ0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1yZXBseTsNCglmb250LWZhbWlseToiQ2Fs aWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjp3aW5kb3d0ZXh0O30NCi5Nc29DaHBEZWZhdWx0DQoJ e21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7fQ0KQHBhZ2Ug V29yZFNlY3Rpb24xDQoJe3NpemU6OC41aW4gMTEuMGluOw0KCW1hcmdpbjoxLjBpbiAxLjBpbiAx LjBpbiAxLjBpbjt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi8q IExpc3QgRGVmaW5pdGlvbnMgKi8NCkBsaXN0IGwwDQoJe21zby1saXN0LWlkOjExMzcwNzIxNzg7 DQoJbXNvLWxpc3QtdGVtcGxhdGUtaWRzOjE4MTQzMDkyMTY7fQ0KQGxpc3QgbDA6bGV2ZWwxDQoJ e21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJ bXNvLWxldmVsLXRhYi1zdG9wOi41aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0 Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZv bnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMDpsZXZlbDINCgl7bXNvLWxldmVsLW51bWJlci1m b3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6 MS4waW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0u MjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9 DQpAbGlzdCBsMDpsZXZlbDMNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1z by1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6MS41aW47DQoJbXNvLWxldmVs LW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1m b250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMDpsZXZlbDQN Cgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsN Cgltc28tbGV2ZWwtdGFiLXN0b3A6Mi4waW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjps ZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0K CWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMDpsZXZlbDUNCgl7bXNvLWxldmVsLW51bWJl ci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0 b3A6Mi41aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50 Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJv bDt9DQpAbGlzdCBsMDpsZXZlbDYNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0K CW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6My4waW47DQoJbXNvLWxl dmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5z aS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMDpsZXZl bDcNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+C tzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6My41aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlv bjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0 Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMDpsZXZlbDgNCgl7bXNvLWxldmVsLW51 bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFi LXN0b3A6NC4waW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5k ZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5 bWJvbDt9DQpAbGlzdCBsMDpsZXZlbDkNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0 Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6NC41aW47DQoJbXNv LWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28t YW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMQ0K CXttc28tbGlzdC1pZDoxNTg4NDE1NzY2Ow0KCW1zby1saXN0LXR5cGU6aHlicmlkOw0KCW1zby1s aXN0LXRlbXBsYXRlLWlkczoxMTYxMzU3OTg0IC0xOTczMjU4MzEyIDY3Njk4NjkxIDY3Njk4Njkz IDY3Njk4Njg5IDY3Njk4NjkxIDY3Njk4NjkzIDY3Njk4Njg5IDY3Njk4NjkxIDY3Njk4NjkzO30N CkBsaXN0IGwxOmxldmVsMQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNv LWxldmVsLXRleHQ674OYOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1u dW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJZm9udC1mYW1pbHk6 V2luZ2RpbmdzOw0KCW1zby1mYXJlYXN0LWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iOw0K CW1zby1iaWRpLWZvbnQtZmFtaWx5OkNhbGlicmk7fQ0KQGxpc3QgbDE6bGV2ZWwyDQoJe21zby1s ZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDpvOw0KCW1zby1sZXZl bC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0 LWluZGVudDotLjI1aW47DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Ijt9DQpAbGlzdCBsMTps ZXZlbDMNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0 Ou+CpzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0 aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCWZvbnQtZmFtaWx5OldpbmdkaW5nczt9 DQpAbGlzdCBsMTpsZXZlbDQNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1z by1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwt bnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCWZvbnQtZmFtaWx5 OlN5bWJvbDt9DQpAbGlzdCBsMTpsZXZlbDUNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVs bGV0Ow0KCW1zby1sZXZlbC10ZXh0Om87DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNv LWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCglmb250 LWZhbWlseToiQ291cmllciBOZXciO30NCkBsaXN0IGwxOmxldmVsNg0KCXttc28tbGV2ZWwtbnVt YmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674KnOw0KCW1zby1sZXZlbC10YWIt c3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVu dDotLjI1aW47DQoJZm9udC1mYW1pbHk6V2luZ2RpbmdzO30NCkBsaXN0IGwxOmxldmVsNw0KCXtt c28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1z by1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsN Cgl0ZXh0LWluZGVudDotLjI1aW47DQoJZm9udC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0IGwxOmxl dmVsOA0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ6 bzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9u OmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCWZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyI7 fQ0KQGxpc3QgbDE6bGV2ZWw5DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCglt c28tbGV2ZWwtdGV4dDrvgqc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVs LW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCglmb250LWZhbWls eTpXaW5nZGluZ3M7fQ0Kb2wNCgl7bWFyZ2luLWJvdHRvbTowaW47fQ0KdWwNCgl7bWFyZ2luLWJv dHRvbTowaW47fQ0KLS0+PC9zdHlsZT4NCjwvaGVhZD4NCjxib2R5IGxhbmc9IkVOLVVTIiBsaW5r PSJibHVlIiB2bGluaz0icHVycGxlIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8dWwg dHlwZT0iZGlzYyI+DQo8bGkgY2xhc3M9Ik1zb0xpc3RQYXJhZ3JhcGgiIHN0eWxlPSJtc28tbGlz dDpsMSBsZXZlbDEgbGZvMiI+VG8gcXVvdGUgeW91ciBwcmV2aW91cyBjbGFpbTogJnF1b3Q7VGhl cmUgaXMgbm8gc3VjaCB0aGluZyBhcyBhbiB1bmd1ZXNzYWJsZSBuYW1lLiZxdW90OzxvOnA+PC9v OnA+PC9saT48L3VsPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+UmlnaHQuJm5ic3A7IFRoYXQgZG9l c27igJl0IG1lYW4gKjxiPkk8L2I+KiBoYXZlIHRvIGd1ZXNzIGl0Ljxicj4NCjxicj4NCjxvOnA+ PC9vOnA+PC9wPg0KPGRpdj4NCjx1bCB0eXBlPSJkaXNjIj4NCjxsaSBjbGFzcz0iTXNvTGlzdFBh cmFncmFwaCIgc3R5bGU9Im1zby1saXN0OmwxIGxldmVsMSBsZm8yIj5FdmVuIGlmIHlvdXIgZGVw bG95bWVudCB0ZWFtIGhhZCBzdWNoIHN0YWdnZXJpbmdseSBiYWQgb3BlcmF0aW9uYWwgc2VjdXJp dHkgcHJhY3RpY2VzIGFzIHRvIGFsbG93IHBlb3BsZSB0byB0YWtlIHBhY2tldCBjYXB0dXJlcyBm cm9tIGFuIGludGVybmFsIG5ldHdvcmsgYW5kIHNob3cgdGhlbSBvbiBwdWJsaWMgc2xpZGVzIHdp dGhvdXQgYW55DQoga2luZCBvZiBxdWVzdGlvbnMgYmVpbmcgYXNrZWQsIGlmIHRoaXMgYWN0dWFs bHkgaGFwcGVucyAqWU9VIEFSRSBOTyBXT1JTRSBPRkYgVEhBTiBJTiBUSEUgU0lUVUFUSU9OIFdI RVJFIFlPVSBVU0VEIEEgV0VMTC1LTk9XTiBIRUFERVIgTkFNRSohPG86cD48L286cD48L2xpPjwv dWw+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5ZZXMgeW91IGFyZSB3b3Jz ZSBvZmYuJm5ic3A7IEJlY2F1c2UgdGhhdCBub3ctZXhwb3NlZCBoZWFkZXIgdmFsdWUgY2FuIGJl IHVzZWQgZm9yIHNwb29maW5nLiZuYnNwOyBBcyBvcHBvc2VkIHRvIHByb3RlY3Rpb24gYnkgVExT LCBhbmQgdGhlbiBzZW5kaW5nIHRoZSBwbGFpbnRleHQgbWVzc2FnZSBhcm91bmQuPG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjx1bCB0eXBlPSJkaXNjIj4NCjxsaSBjbGFzcz0iTXNvTGlzdFBhcmFncmFwaCIg c3R5bGU9Im1zby1saXN0OmwxIGxldmVsMSBsZm8yIj5JIGRvbid0IGtub3cgaG93IG1hbnkgZGlm ZmVyZW50IHdheXMgSSBjYW4gc2F5IHRoYXQgdGhpcyBpcyBhIGRlZmVuc2UgaW4gZGVwdGg8bzpw PjwvbzpwPjwvbGk+PC91bD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkJlY2F1c2UgaXQgaXMgbm90 LiZuYnNwOyBJdCBpcyB0YWtpbmcgYW4gYXBwbGljYXRpb24tbGV2ZWwgcGllY2Ugb2YgY29uZmln dXJhdGlvbiBkYXRhIGFuZCByZXF1aXJpbmcgaXQgdG8gYmUgdHJlYXRlZCBhcyBpZiBpdCB3ZXJl IGNyeXB0byBtYXRlcmlhbC4gV2hpY2ggaXQgY2Fubm90IGJlLCBiZWNhdXNlIG11bHRpcGxlIHBh cnRpZXMgbmVlZCB0byBrbm93IGl0IChhcyBJIHNhaWQsIHRoZSBwcm94eSwgdGhlIGJhY2tlbmQs DQogdGhlIGFwcCBkZXZlbG9wZXJzLCB0aGUgc3VwcG9ydCB0ZWFtLCBldGMpLiZuYnNwOyBJdOKA mXMgZGVmZW5zZSBieSDigJxjb2xsYXBzaW5nIGxheWVyc+KAnSByYXRoZXIgdGhhbiDigJxpbiBk ZXB0aC7igJ08bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9wPg0KPHVsIHR5cGU9ImRpc2MiPg0KPGxpIGNsYXNzPSJNc29MaXN0UGFyYWdyYXBo IiBzdHlsZT0ibXNvLWxpc3Q6bDEgbGV2ZWwxIGxmbzIiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTMuNXB0O2ZvbnQtZmFtaWx5OiZxdW90Oy13ZWJraXQtc3RhbmRhcmQmcXVvdDssc2VyaWY7Y29s b3I6YmxhY2siPkFzIHdpdGggYWxsIGRlZmVuc2UgaW4gZGVwdGgsIHRoZSBhaW0gaXMgdG8gYmUg bW9yZSB0aGFuIDEgY29uZmlndXJhdGlvbiBtaXN0YWtlIGF3YXkgZnJvbSB0b3RhbCBjb21wcm9t aXNlLjwvc3Bhbj48bzpwPjwvbzpwPjwvbGk+PC91bD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkJ1 dCB0aGF0IGlzIGV4YWN0bHkgd2hhdCB5b3UgYXJlIHByb3Bvc2luZy4gRXhwb3NpbmcgdGhlIGhl YWRlciAqPGI+aXM8L2I+KiBhIHRvdGFsIGNvbXByb21pc2UgYW5kIG11bHRpcGxlIGVudGl0aWVz IHdpbGwgbmVlZCB0byBrbm93IHRoYXQgaGVhZGVyIHZhbHVlLjxvOnA+PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj5BdCBhbnkgcmF0ZSwgJm5ic3A7SSB0aGluayB3ZeKAmXJlIGRvbmUgaGVyZS48bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9k aXY+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_4D4F6A3874ED4243A1BCCE1823FC1ED9akamaicom_--