From nobody Wed Jan 13 07:34:16 2021 Return-Path: X-Original-To: tram@ietfa.amsl.com Delivered-To: tram@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E93433A114B for ; Wed, 13 Jan 2021 07:34:14 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.351 X-Spam-Level: X-Spam-Status: No, score=-2.351 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.25, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id elxcGT-22PFs for ; Wed, 13 Jan 2021 07:34:13 -0800 (PST) Received: from EUR05-AM6-obe.outbound.protection.outlook.com (mail-am6eur05on2054.outbound.protection.outlook.com [40.107.22.54]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 01F073A1147 for ; Wed, 13 Jan 2021 07:34:12 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=YUIGBQ8spi1yBCsR8Y5aitXBfO+OPOGpwRbswKuCpRqFYFMbBJ1Yhy2Dn4BT3u8eLeRFJOscfq1N2ah1xNf0ng50c+JAPvhtkkK5tVkSNXqV90U7vMozRFa2bLdbv3ECEWuBPU3V56/XXQcPrMPmqV6gPlwlF2WnfMA3ZvDbVvmQX8ArwF19Pl1UrWIkNpX6Xp1Y4jY6uFa6Y/yBL2UQTsDrvgHsR9jiClQ6AwSPlibHSRe5TIpOkR1F8xs2BpClHLDCb4zN334ERBfsY/FlD0gYHqhMlzodyYe6YJdS5yoqN1L7CZJ3JoN9slUpVNcugmhSKW454DijARL996W/1Q== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=jt0gxDJiYout4djy6k+nAs33Uvj8VcLPQl7G+xUqaOA=; b=TKhRrgDMvSo0r0kPZ4UxvrwUK1moJqV5jmWmmDtFf5IVPzdccRVc2B0hDERx9/PfVaMNO7zqJulIFmXkqq24856d5fYwpYSm/qu1yXyxJzlFeTSdCSGjswXDB9MLDMsHF9GmkkGUIubWzTlg6BfiYeXmXCBHpVk3UxFYZyS0Ee99CiDasl9qI26DDtJx5zulZPfh3CCIW5XNAXwTxID94ms4xn+zLOhEaL0FkDAM2I5zJKUcNcbzAQwGUAGyz7mTNkN1ox5rOMUzMittjWDfQluJbofapae3ioJp/wQwaeqEL+KT4hhh0ARMDI4Tcilau2uaMk8xaESFS4gUatkSPA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ericsson.com; dmarc=pass action=none header.from=ericsson.com; dkim=pass header.d=ericsson.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=jt0gxDJiYout4djy6k+nAs33Uvj8VcLPQl7G+xUqaOA=; b=kDcgbrjfXbhcA96gNUSBkVNnUm5sJiJ5LigRIrnyoBlW/yhI9AMFAOGXTc7qxe9aX8aXxdR/6B7EZ9tCH6allfCncQkc9Auhg1S1I/F1GJYzyV/F8BXLbXsrDPl55t2krCVWzmVYa2nN/6Vlm4j9Z/sGYI1QevJ8XXpxFeCiTM0= Received: from HE1PR0702MB3772.eurprd07.prod.outlook.com (2603:10a6:7:8e::14) by HE1PR07MB4169.eurprd07.prod.outlook.com (2603:10a6:7:9d::25) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3763.2; Wed, 13 Jan 2021 15:34:10 +0000 Received: from HE1PR0702MB3772.eurprd07.prod.outlook.com ([fe80::8cd:496:65de:4ace]) by HE1PR0702MB3772.eurprd07.prod.outlook.com ([fe80::8cd:496:65de:4ace%6]) with mapi id 15.20.3763.009; Wed, 13 Jan 2021 15:34:10 +0000 From: Magnus Westerlund To: "tram@ietf.org" , "magnus.westerlund=40ericsson.com@dmarc.ietf.org" Thread-Topic: [tram] Errata 4826 on RFC 7635 Thread-Index: AQHWkbX4ZUzscKJ4OECwqW+0Y36GFKomX6aA Date: Wed, 13 Jan 2021 15:34:10 +0000 Message-ID: <2473be81b850a647ea56282ffcbd42e69d6b04d1.camel@ericsson.com> References: In-Reply-To: Accept-Language: sv-SE, en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: x-mailer: Evolution 3.28.5-0ubuntu0.18.04.2 authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=ericsson.com; x-originating-ip: [192.176.1.80] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: c5f93dba-fdb8-42ec-0f31-08d8b7d8ac54 x-ms-traffictypediagnostic: HE1PR07MB4169: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:431; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:HE1PR0702MB3772.eurprd07.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(346002)(376002)(366004)(396003)(136003)(39860400002)(76116006)(478600001)(64756008)(186003)(966005)(66556008)(66446008)(66946007)(66616009)(66476007)(8936002)(99936003)(4001150100001)(6486002)(8676002)(44832011)(83380400001)(66574015)(71200400001)(316002)(6506007)(2616005)(36756003)(86362001)(5660300002)(26005)(110136005)(2906002)(6512007)(99106002); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: =?utf-8?B?Q3k5NU84YktMRDZjTjdEamxUK3poalVBN0RWOXBIbE5YVktvalFKVTlscEZs?= =?utf-8?B?cWFPeFM2aTV3MEQyK0VXVmxrMzliU1RXbFVQY2FPU3RoM2U2ZnFvSlNKT3ZS?= =?utf-8?B?bFluenJGL25Nblk1dlFZQm83MzZ1all4M3dEYUpsT0RiUmhZRVdnOHowUnZx?= =?utf-8?B?RERXNTA5RDdhTDNOcmxEMjljYmhXN0RwaGFETnhKK05sWjlhbTUyWDdyR2Uv?= =?utf-8?B?WDlRKzlwYlB6QmlMS2hXYzdiNU4vcEFNeEN2OWxVYVZzNXdSY2htVDBvNnhW?= =?utf-8?B?OHhuWGUxODhqUElIVUNWR2ovTWNTOUhCNWVoaUxFVTZYeWJucDVTMjdac2s5?= =?utf-8?B?UkNXM0NKWHZWdTVjcTE0MEwrLzljakpLcmppOSt4Y25TWXR5bkMyb1lNakpV?= =?utf-8?B?L3VSdktWWGc1dktQYnArMlpHK0M4N1NpVWI4VmhZNGtLeUFWNitnUTJIZkhB?= =?utf-8?B?L2xMNjVvN1JDSEtzLzRsemFWMnRYZFZteDVQcHhVVkJjSmR6QmlsUnc3VVFn?= =?utf-8?B?U0E2Qjh4dFpVL1FtNmdDVjdGZ1l1VmxYZVBKNjJtTU1ZK2R1dDc2ejNHenBt?= =?utf-8?B?d29xaXFFYzBjRUo0V0JyaTZPOG9EU1pVcmhnekRDdG1yQ2Y4bHRXZitJMVhz?= =?utf-8?B?ZEdZMk8zUUhVb09mV29adUVFNGI3aXkxMTVzOGNZdUZjbkQ3d0NqcFcwODE0?= =?utf-8?B?RkNrcC96aUw2NGpXM2xCSkdId3VJdjNXaWRiMm1XbzFndEF2Sm1ZZnhtYTkw?= =?utf-8?B?WGZGOUhkTjNHczd1OUxwS2NvcStRYVRlcVV6ZDF3K1JqQWtERmlWVkRyeVZo?= =?utf-8?B?QkxXV3ZVcko0SlR5VlNQWk9qci9MeWZ1bTEzNVhjN3k1SkFyZ1dTSkcyUGpu?= =?utf-8?B?WitGbFpWRkdvZHN0YkdmeUo5RGh1Zm9PeDdRY1BETUlUVU4rc2phbm5DT0tT?= =?utf-8?B?UDcvY1Z5bjhlUUwvRU9PWUs0SFd2M2JvVi9kc3ZheDk4Y3hCL0plQ1pRYjZ4?= =?utf-8?B?MTF3RXhpRU11ZFpkWlU4SHp6TWxlU0g1T1k5OHVGOXloSUR2OUdUNms3K3ZJ?= =?utf-8?B?NjlKcnZ2R0RtWDdDbHh3dWZhL2ZRUTZSNThyNzhXY3F4SWowTE5qSU1xSHpM?= =?utf-8?B?ZFNEaWplV1FPQlUxUVJNRVpiODJqQUFvS1dEemRnVy9uS1VselJBQ0phajJw?= =?utf-8?B?Qk9CeTY3ZXB1OVA1dUlEM2wrWEFnWmJMRnY0R3dFeXFHUXYxcC9SeUE2bWVJ?= =?utf-8?B?NDVkdlpyb2l0VGY4VGFjLzloOFRVMk9OWG9kdFdESDRqZkZoMVNkYndNdXlj?= =?utf-8?Q?bgnCqdjhQ7Hk0l8iXKRqxMz+pxne7eUKq3?= x-ms-exchange-transport-forked: True Content-Type: multipart/signed; micalg="sha-256"; protocol="application/x-pkcs7-signature"; boundary="=-g0I2ZXJUC0FBM4FL5WHw" MIME-Version: 1.0 X-OriginatorOrg: ericsson.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: HE1PR0702MB3772.eurprd07.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: c5f93dba-fdb8-42ec-0f31-08d8b7d8ac54 X-MS-Exchange-CrossTenant-originalarrivaltime: 13 Jan 2021 15:34:10.3225 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: DozavISP0RjUmBtsJUmoqBrwjOiTq0kL56NLERJlptdJQ9i/6wjfooo3V6r4pTN5K1xNXodzeQgxVJRfIs8XzSZX3TVC9kV48Q+Ao4ItPsw= X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR07MB4169 Archived-At: Subject: Re: [tram] Errata 4826 on RFC 7635 X-BeenThere: tram@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 Jan 2021 15:34:15 -0000 --=-g0I2ZXJUC0FBM4FL5WHw Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi, I plan to put this errata into "Hold for document update".=20 I think it a discussion of roles that goes beyond what the document intende= d when written.=20 Cheers Magnus Westerlund On Wed, 2020-09-23 at 14:29 +0000, Magnus Westerlund wrote: > Hi, >=20 > I would like some feedback on what to do with this Errrata? >=20 >=20 https://protect2.fireeye.com/v1/url?k=3D1654cef0-48f4749e-16548e6b-861d41ab= ace8-2d0610ea7fcbda0e&q=3D1&e=3Dbaf40b99-4805-442e-8782-c21c956c6896&u=3Dht= tps%3A%2F%2Fwww.rfc-editor.org%2Ferrata%2Feid4826 >=20 > Errata ID: 4826 > Status: Reported > Type: Technical > Publication Format(s) : TEXT > Reported By: Mih=C3=A1ly M=C3=A9sz=C3=A1ros > Date Reported: 2016-10-10 >=20 > Section 8. says: >=20 > 8. STUN Client Behavior >=20 > o The client looks for the MESSAGE-INTEGRITY attribute in the > response. If MESSAGE-INTEGRITY is absent or the value computed > for message integrity using mac_key does not match the contents of > the MESSAGE-INTEGRITY attribute, then the response MUST be > discarded. >=20 > o If the access token expires, then the client MUST obtain a new > token from the authorization server and use it for new STUN > requests. >=20 > It should say: >=20 > 8. STUN Client Behavior >=20 > o The client looks for the MESSAGE-INTEGRITY attribute in the > response. If MESSAGE-INTEGRITY is absent or the value computed > for message integrity using mac_key does not match the contents of > the MESSAGE-INTEGRITY attribute, then the response MUST be > discarded. >=20 > 9. Application (OAuth Client) Behavior >=20 > o If the access token expires, then the Application (OAuth client)= =20 > MUST obtain a new token from the authorization server, and update > STUN client to use it for new STUN requests. >=20 > o Application SHOULD pass only a subset of the received OAuth=20 > parameters to the STUN client. Only parameters SHOULD be passed=20 > that will be really needed and used by the STUN Client.=20 > In this way, only the kid, the mac_key, and the access_token > parameters SHOULD be passed to the STUN client. > =20 >=20 > ... > Renumber the sections > ... >=20 > Notes: >=20 > 1. Remove from STUN client behaviour the access_token renewal function, > and move this function up to application level. > 2. Pass to STUN only that subset of the OAuth parameters, that will be re= ally > used by STUN Client.=20 >=20 > =20 > Cheers >=20 > Magnus Westerlund=20 >=20 >=20 > ---------------------------------------------------------------------- > Networks, Ericsson Research > ---------------------------------------------------------------------- > Ericsson AB | Mobile +46 73 0949079 > Torshamnsgatan 23 | > SE-164 80 Stockholm, Sweden | mailto: magnus.westerlund@ericsson.com > ---------------------------------------------------------------------- >=20 > _______________________________________________ > tram mailing list > tram@ietf.org > https://www.ietf.org/mailman/listinfo/tram --=-g0I2ZXJUC0FBM4FL5WHw Content-Type: application/x-pkcs7-signature; name="smime.p7s" Content-Disposition: attachment; filename="smime.p7s" Content-Transfer-Encoding: base64 MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCCErYw ggX0MIID3KADAgECAg8BdlE9InYZOYLl1zGep4IwDQYJKoZIhvcNAQELBQAwRzELMAkGA1UEBhMC U0UxETAPBgNVBAoMCEVyaWNzc29uMSUwIwYDVQQDDBxFcmljc3NvbiBOTCBJbmRpdmlkdWFsIENB IHYzMB4XDTIwMTIxMTA5NTg0OVoXDTIzMTIxMjA5NTg0OVowXjERMA8GA1UECgwIRXJpY3Nzb24x GjAYBgNVBAMMEU1hZ251cyBXZXN0ZXJsdW5kMS0wKwYJKoZIhvcNAQkBFh5tYWdudXMud2VzdGVy bHVuZEBlcmljc3Nvbi5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIT6U9ddUp UCEryIA27xtF8WsRAIfc5jBavfu0OGDmwITYYRD2PaMEdEK+I4dqz0f6xcCrDnBk2Xj+JxjhaRkq TAifJZima9WE2JoI/uq8UsS2HJWlhspAwKx1osARgtRiMjRZZyyfiRZLbgXHWYpnTt3i9QsuX/uo 9oZFWpDCbZee4Il9uldsUcuBLZx2PyZvBvC8KCUaBXsZX6bwV7hssRVn+BgFCuEievJMx0khTRVh i9goObxu5Jl44RtwbZNYB1UE1IzRWEZw+b3cEvXiQjPl2e3ytMZSmhy+IaKmjxES6ODiuh51KAcm PZfZIaX2djmD76YGi+ETmnb8Xm3dAgMBAAGjggHEMIIBwDAfBgNVHSMEGDAWgBQcexmel5x2rCA9 2NzjkWrj2y2mUzAdBgNVHQ4EFgQUICO/88T0EQvEUm5+HVt/d9Mm+Z8wDgYDVR0PAQH/BAQDAgWg MFUGA1UdIAROMEwwSgYMKwYBBAGCDwIDAQESMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vcmVwb3Np dG9yeS50cnVzdC50ZWxpYXNvbmVyYS5jb20vQ1BTMCkGA1UdEQQiMCCBHm1hZ251cy53ZXN0ZXJs dW5kQGVyaWNzc29uLmNvbTBIBgNVHR8EQTA/MD2gO6A5hjdodHRwOi8vY3JsLnRydXN0LnRlbGlh LmNvbS9lcmljc3Nvbm5saW5kaXZpZHVhbGNhdjMuY3JsMB0GA1UdJQQWMBQGCCsGAQUFBwMEBggr BgEFBQcDAjCBggYIKwYBBQUHAQEEdjB0MCgGCCsGAQUFBzABhhxodHRwOi8vb2NzcDIudHJ1c3Qu dGVsaWEuY29tMEgGCCsGAQUFBzAChjxodHRwOi8vY2EudHJ1c3QudGVsaWFzb25lcmEuY29tL2Vy aWNzc29ubmxpbmRpdmlkdWFsY2F2My5jZXIwDQYJKoZIhvcNAQELBQADggIBANRZXQy+lUW97uaL uApOixnDKLpUoz+N/5Owd/9illmbxQDEY1/pPs4KJSvw88p+F3bmOzb+fLUNa6Mi/2Tw83FzEVmO 3RqzKtca+I9GDpRQ8oWL7hrUPJoNacidSZLmAP4L4kwHIhvGNX4f1c/oB4fAkP/xZsAAxYi7nKxd XA2n/KMWNkezyB9BSsD8ZOS4pWU8UaZjd5r0fzqM5zQbU4EPqHa8jFMSMz1UrYXPKKxl6E4WA3TE w1oLjcli0NWGQHyQ+3Kh7fe6zPoXfLd/2EQjr2o76ssgoqd2V1Mx5TRHdUyxjIMPEOVYpvcerNUB hEBkaOQ9FugYcMhMc8BF7nQZq+hsL/T7idg4gE2sEfNdK9RBf/EVH10GMrmbadqTycztD1gUL3dV Qxik4TCMxIctt9XqtTGHaMewZLQAXp/sHWlU/vmz9brcuzYQ9YVd5hTendGMUyGhWPV/KvxouKPK zdrGeEqUQCeBwWgQASQNOrpTzMJwZAV/Ww3ExQCjHvflvUQzVuU0sC6AEVkgqMATIXS6h6rjLL31 pjt2JV84XRjF5afYkcRIHTsrtcoWeFtOu/GpZNhtq+tde0QvnkSsjczMWU0gKk0hXBmXwEGUimuD Vq/Wvr0mr18d9mKA6xPNQOfn/VL5CWXa11OtOjj8WsTy3XUpyJ6dc9Z72TmKMIIF9DCCA9ygAwIB AgIPAXZRPSJ2GTmC5dcxnqeCMA0GCSqGSIb3DQEBCwUAMEcxCzAJBgNVBAYTAlNFMREwDwYDVQQK DAhFcmljc3NvbjElMCMGA1UEAwwcRXJpY3Nzb24gTkwgSW5kaXZpZHVhbCBDQSB2MzAeFw0yMDEy MTEwOTU4NDlaFw0yMzEyMTIwOTU4NDlaMF4xETAPBgNVBAoMCEVyaWNzc29uMRowGAYDVQQDDBFN YWdudXMgV2VzdGVybHVuZDEtMCsGCSqGSIb3DQEJARYebWFnbnVzLndlc3Rlcmx1bmRAZXJpY3Nz b24uY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiE+lPXXVKVAhK8iANu8bRfFr EQCH3OYwWr37tDhg5sCE2GEQ9j2jBHRCviOHas9H+sXAqw5wZNl4/icY4WkZKkwInyWYpmvVhNia CP7qvFLEthyVpYbKQMCsdaLAEYLUYjI0WWcsn4kWS24Fx1mKZ07d4vULLl/7qPaGRVqQwm2XnuCJ fbpXbFHLgS2cdj8mbwbwvCglGgV7GV+m8Fe4bLEVZ/gYBQrhInryTMdJIU0VYYvYKDm8buSZeOEb cG2TWAdVBNSM0VhGcPm93BL14kIz5dnt8rTGUpocviGipo8REujg4roedSgHJj2X2SGl9nY5g++m BovhE5p2/F5t3QIDAQABo4IBxDCCAcAwHwYDVR0jBBgwFoAUHHsZnpecdqwgPdjc45Fq49stplMw HQYDVR0OBBYEFCAjv/PE9BELxFJufh1bf3fTJvmfMA4GA1UdDwEB/wQEAwIFoDBVBgNVHSAETjBM MEoGDCsGAQQBgg8CAwEBEjA6MDgGCCsGAQUFBwIBFixodHRwczovL3JlcG9zaXRvcnkudHJ1c3Qu dGVsaWFzb25lcmEuY29tL0NQUzApBgNVHREEIjAggR5tYWdudXMud2VzdGVybHVuZEBlcmljc3Nv bi5jb20wSAYDVR0fBEEwPzA9oDugOYY3aHR0cDovL2NybC50cnVzdC50ZWxpYS5jb20vZXJpY3Nz b25ubGluZGl2aWR1YWxjYXYzLmNybDAdBgNVHSUEFjAUBggrBgEFBQcDBAYIKwYBBQUHAwIwgYIG CCsGAQUFBwEBBHYwdDAoBggrBgEFBQcwAYYcaHR0cDovL29jc3AyLnRydXN0LnRlbGlhLmNvbTBI BggrBgEFBQcwAoY8aHR0cDovL2NhLnRydXN0LnRlbGlhc29uZXJhLmNvbS9lcmljc3Nvbm5saW5k aXZpZHVhbGNhdjMuY2VyMA0GCSqGSIb3DQEBCwUAA4ICAQDUWV0MvpVFve7mi7gKTosZwyi6VKM/ jf+TsHf/YpZZm8UAxGNf6T7OCiUr8PPKfhd25js2/ny1DWujIv9k8PNxcxFZjt0asyrXGviPRg6U UPKFi+4a1DyaDWnInUmS5gD+C+JMByIbxjV+H9XP6AeHwJD/8WbAAMWIu5ysXVwNp/yjFjZHs8gf QUrA/GTkuKVlPFGmY3ea9H86jOc0G1OBD6h2vIxTEjM9VK2FzyisZehOFgN0xMNaC43JYtDVhkB8 kPtyoe33usz6F3y3f9hEI69qO+rLIKKndldTMeU0R3VMsYyDDxDlWKb3HqzVAYRAZGjkPRboGHDI THPARe50GavobC/0+4nYOIBNrBHzXSvUQX/xFR9dBjK5m2nak8nM7Q9YFC93VUMYpOEwjMSHLbfV 6rUxh2jHsGS0AF6f7B1pVP75s/W63Ls2EPWFXeYU3p3RjFMhoVj1fyr8aLijys3axnhKlEAngcFo EAEkDTq6U8zCcGQFf1sNxMUAox735b1EM1blNLAugBFZIKjAEyF0uoeq4yy99aY7diVfOF0YxeWn 2JHESB07K7XKFnhbTrvxqWTYbavrXXtEL55ErI3MzFlNICpNIVwZl8BBlIprg1av1r69Jq9fHfZi gOsTzUDn5/1S+Qll2tdTrTo4/FrE8t11KcienXPWe9k5ijCCBsIwggSqoAMCAQICEFO4foPhnJko k7CbSRzsuOswDQYJKoZIhvcNAQELBQAwNzEUMBIGA1UECgwLVGVsaWFTb25lcmExHzAdBgNVBAMM FlRlbGlhU29uZXJhIFJvb3QgQ0EgdjEwHhcNMTUxMDI3MTIxNjQ2WhcNMjUxMDI3MTIxNjQ2WjBH MQswCQYDVQQGEwJTRTERMA8GA1UECgwIRXJpY3Nzb24xJTAjBgNVBAMMHEVyaWNzc29uIE5MIElu ZGl2aWR1YWwgQ0EgdjMwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDs8t8AALhQ8qe7 2FS3xpP348GqO9TDRjS0s85eQ7Y0LTLZdmSz2cl+lYqs0zfSTm+7meisbhkqUXkL7fFzoe4iIZCh /VuYUaW407CZlDCXes4n4TqTSuoklN6uOPhY7EC9ZVbXILlLhRummTdDdxhVW4Leo0awEhfLf98M vWxzwCHzMj8m6YOmNjx+f9TcJE3qaA0piuvSxlfpVdiCulPTlmsmV2RSBSAwqBshZYRcQBIDfqmd vkaoP9EzNKAh7yjthC0hpgHZyZMIs0eNo4v2PUmE0rhu+Zs0nujnwhljPA2/8b8v9tGixD1zbtT7 zoM2Ot1menJpFp4zJVSfdKVgtoWqg5t2H/E0XY1LwJez89W07nscEocyBmpC+zJAmKxKhzEWqIyP 1UrZaEIFu+hO+s0Nm8sOUMa4TlG4rAUikc5U5TmUIGBRQGxulYhfAzqSYf8oLUMLky1DOa9eRu3s p0FdQDEzQlnF/h1L4AK1MOkX1vS+fLgOvBo5LRU1fLPUZQ7FKrDXC6nl2ldvEtljHWstGBmqv25a EvAA+yrrplCh/kYvSBjvZibz9Obbwx4yqS77/NHN1iyZyVP2s52B2BLdvo4yhzk6nRk8S/8zHaUU kBUrrvijPDaGK5FNVSaioGvkC7IKioITKffYLtT9XuirKrHlh3VzkazG46pAVwIDAQABo4IBuDCC AbQwgYoGCCsGAQUFBwEBBH4wfDAtBggrBgEFBQcwAYYhaHR0cDovL29jc3AudHJ1c3QudGVsaWFz b25lcmEuY29tMEsGCCsGAQUFBzAChj9odHRwOi8vcmVwb3NpdG9yeS50cnVzdC50ZWxpYXNvbmVy YS5jb20vdGVsaWFzb25lcmFyb290Y2F2MS5jZXIwEgYDVR0TAQH/BAgwBgEB/wIBADBVBgNVHSAE TjBMMEoGDCsGAQQBgg8CAwEBAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3JlcG9zaXRvcnkudHJ1 c3QudGVsaWFzb25lcmEuY29tL0NQUzBLBgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsLTMudHJ1 c3QudGVsaWFzb25lcmEuY29tL3RlbGlhc29uZXJhcm9vdGNhdjEuY3JsMB0GA1UdJQQWMBQGCCsG AQUFBwMCBggrBgEFBQcDBDAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFBx7GZ6XnHasID3Y3OOR auPbLaZTMB8GA1UdIwQYMBaAFPCPWTgAs/WPmpYM1ev6e6oX6BMSMA0GCSqGSIb3DQEBCwUAA4IC AQBQWGvx1Yw7tC6rV0PIjKfDyxaanIX+NZLEGOkdQLKGW2gVLtDUJQEPRs5QtaZiObNHCZ7mmSNM Vek4lkt/0dqfVIFutVw/QkyFGwC99ZmNwXSX9z+OoMyoEBHGvw5RY6vRlZrj0uKvdASzYL4KMaB7 m3NwurNDmmNbG52suRIZ76wBOEOddRZcZiTy50ZkBqYnnl2t3D3oBX2NZCQysshUcqRdUbkS13HT CIChMuTV9W0tzPXUOJoJlJlU9nd91IikhGEOrPwfixWms+C8sF0r9qN1uJGx6ELPOiFrLfNtcMNM MbAqRHwpSLxe3wcNkJGxv9T8LswLi1UrRIQ85AKjqzBnLSsjRGgbMgJ+xKtngmvEA155JmoKfUD7 DRbP6Kp14/Y9XFbR/WuDj84bYNKXe4HdDc1P+UMYm16m2L6LkIIoRlx0A5mi+K7jewuGqzFKkaPN mJ0RLCi+4d4/47Zs3DC3PUNOxdOEEHf4kkdWOaSIuj3TQYhNv+LsgF0uijiBmaz2zUFDa2bcIkKa kDZfAFM4HoHz8K2BZRaHKWhd3dZua/tlSiqokUFX2DxmHmZ1n5HM9OiaAIXP/Zo2x10j/Yb1mM3i 0bqGahxlHYzl/QyEG/dujp3lewuVjCI0mPDkZGphvxyqp4Jo8qS94EnOqBvxOgftYug7OY9EKY+W kDGCAsowggLGAgEBMFowRzELMAkGA1UEBhMCU0UxETAPBgNVBAoMCEVyaWNzc29uMSUwIwYDVQQD DBxFcmljc3NvbiBOTCBJbmRpdmlkdWFsIENBIHYzAg8BdlE9InYZOYLl1zGep4IwDQYJYIZIAWUD BAIBBQCgggFBMBgGCSqGSIb3DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTIxMDEx MzE1MzQwOVowLwYJKoZIhvcNAQkEMSIEIH9ceCE/v/KnJmwFo0j6OxIuqVGTRAwKw2UmMkJqs7S5 MGkGCSsGAQQBgjcQBDFcMFowRzELMAkGA1UEBhMCU0UxETAPBgNVBAoMCEVyaWNzc29uMSUwIwYD VQQDDBxFcmljc3NvbiBOTCBJbmRpdmlkdWFsIENBIHYzAg8BdlE9InYZOYLl1zGep4IwawYLKoZI hvcNAQkQAgsxXKBaMEcxCzAJBgNVBAYTAlNFMREwDwYDVQQKDAhFcmljc3NvbjElMCMGA1UEAwwc RXJpY3Nzb24gTkwgSW5kaXZpZHVhbCBDQSB2MwIPAXZRPSJ2GTmC5dcxnqeCMA0GCSqGSIb3DQEB AQUABIIBAHLUKBShGDXiNRF+yS4AUapxxnhwT6TJ7oAPyGldYdktqeBUJ3JMBhJGIRnG8oLfdZSZ oM8PmmeQtk0sWo22dnzQBhckUifNltWRz0Dko+eZLDDI1b/SZAtrgsfe+ZxoELcAj3Ufdv6vDOo8 spw7lPbhziZfl0/wdMl83wk9WZIqRn67CCnjwUsFXisDqbzBjMMEgeU8pUEcVqNwAAV4iBi0dQC5 LC81akS8jmWao6id/AefWWMiWuA8ahbd7Cs7yXMfin9ReMrtiEYzYfQ0H7JTkPeY9z/qWZ/haHb6 DD41+p6Otcdzhnkh2L+v0WSQcMEesbpYhsoNpbMPX+nt48YAAAAAAAA= --=-g0I2ZXJUC0FBM4FL5WHw--