<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
font-size:12.0pt;
font-family:"Calibri",sans-serif;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:184448384;
mso-list-type:hybrid;
mso-list-template-ids:39641312 -2025828996 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
@list l0:level1
{mso-level-start-at:0;
mso-level-number-format:bullet;
mso-level-text:-;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Calibri",sans-serif;
mso-fareast-font-family:Calibri;}
@list l0:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l0:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l0:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l0:level5
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l0:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l0:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l0:level8
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l0:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l1
{mso-list-id:256060377;
mso-list-template-ids:-797040576;}
@list l1:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:"Courier New";
mso-bidi-font-family:"Times New Roman";}
@list l1:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l2
{mso-list-id:291177654;
mso-list-template-ids:-1152122078;}
@list l2:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l2:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:"Courier New";
mso-bidi-font-family:"Times New Roman";}
@list l2:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l2:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l2:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l2:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l2:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l2:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l2:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l3
{mso-list-id:372461334;
mso-list-type:hybrid;
mso-list-template-ids:2068844584 -2025828996 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
@list l3:level1
{mso-level-start-at:0;
mso-level-number-format:bullet;
mso-level-text:-;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Calibri",sans-serif;
mso-fareast-font-family:Calibri;}
@list l3:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l3:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l3:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l3:level5
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l3:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l3:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l3:level8
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l3:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l4
{mso-list-id:385417560;
mso-list-type:hybrid;
mso-list-template-ids:-1571789574 -2025828996 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
@list l4:level1
{mso-level-start-at:0;
mso-level-number-format:bullet;
mso-level-text:-;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Calibri",sans-serif;
mso-fareast-font-family:Calibri;}
@list l4:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l4:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l4:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l4:level5
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l4:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l4:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l4:level8
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l4:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l5
{mso-list-id:486367199;
mso-list-template-ids:-1915305418;}
@list l5:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l5:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:"Courier New";
mso-bidi-font-family:"Times New Roman";}
@list l5:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l5:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l5:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l5:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l5:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l5:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l5:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l6
{mso-list-id:654456529;
mso-list-template-ids:1271290402;}
@list l6:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l6:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:"Courier New";
mso-bidi-font-family:"Times New Roman";}
@list l6:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l6:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l6:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l6:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l6:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l6:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l6:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l7
{mso-list-id:702948805;
mso-list-type:hybrid;
mso-list-template-ids:1353861934 -2025828996 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
@list l7:level1
{mso-level-start-at:0;
mso-level-number-format:bullet;
mso-level-text:-;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Calibri",sans-serif;
mso-fareast-font-family:Calibri;}
@list l7:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l7:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l7:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l7:level5
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l7:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l7:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l7:level8
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l7:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l8
{mso-list-id:1054892567;
mso-list-type:hybrid;
mso-list-template-ids:-805673676 -2025828996 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
@list l8:level1
{mso-level-start-at:0;
mso-level-number-format:bullet;
mso-level-text:-;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Calibri",sans-serif;
mso-fareast-font-family:Calibri;}
@list l8:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l8:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l8:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l8:level5
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l8:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l8:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l8:level8
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l8:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l9
{mso-list-id:1387992538;
mso-list-template-ids:148409862;}
@list l9:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l9:level2
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l9:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l9:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l9:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l9:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l9:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l9:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l9:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l10
{mso-list-id:1418483231;
mso-list-type:hybrid;
mso-list-template-ids:1519666788 -2025828996 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
@list l10:level1
{mso-level-start-at:0;
mso-level-number-format:bullet;
mso-level-text:-;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Calibri",sans-serif;
mso-fareast-font-family:Calibri;}
@list l10:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l10:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l10:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l10:level5
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l10:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l10:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l10:level8
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l10:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l11
{mso-list-id:1447311688;
mso-list-type:hybrid;
mso-list-template-ids:2147104694 -2025828996 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
@list l11:level1
{mso-level-start-at:0;
mso-level-number-format:bullet;
mso-level-text:-;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Calibri",sans-serif;
mso-fareast-font-family:Calibri;}
@list l11:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l11:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l11:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l11:level5
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l11:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l11:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l11:level8
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l11:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l12
{mso-list-id:1538590125;
mso-list-template-ids:-207090190;}
@list l12:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l12:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:"Courier New";
mso-bidi-font-family:"Times New Roman";}
@list l12:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l12:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l12:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l12:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l12:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l12:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l12:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l13
{mso-list-id:1787235228;
mso-list-type:hybrid;
mso-list-template-ids:-1918853144 -2025828996 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
@list l13:level1
{mso-level-start-at:0;
mso-level-number-format:bullet;
mso-level-text:-;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Calibri",sans-serif;
mso-fareast-font-family:Calibri;}
@list l13:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l13:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l13:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l13:level5
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l13:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l13:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l13:level8
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l13:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style>
</head>
<body lang="EN-US" link="#0563C1" vlink="purple" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal">Dear TPR Working Group,<o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal">Please find below the notes and action items from today’s TPR meeting on Tuesday, 28 September 2021 at 16:00 UTC.<o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal">The next meeting will be <b>Tuesday, 05 October at 16:00 UTC</b>.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Best regards,<o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal">Emily, Caitlin, Berry, and Julie<o:p></o:p></p>
<p class="MsoNormal">--<o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal"><b><u>Action Items:</u></b><o:p></o:p></p>
<p class="MsoNormal"><b> <o:p></o:p></b></p>
<p class="MsoNormal" style="margin-bottom:6.0pt;line-height:18.0pt"><b>Homework for the WG by Monday, 04 October: WG members should provide descriptions of the purposes of the gaining FOA and of the functions that the WG recommends to replace those purposes.<o:p></o:p></b></p>
<p class="MsoNormal" style="margin-bottom:6.0pt;line-height:18.0pt">See the updated Work Plan and Action Items here:
<a href="https://urldefense.com/v3/__https:/docs.google.com/spreadsheets/d/1FunWaz3gNZl8mPi5pNKti2GsfPC_9_DTt8uRQq4Oe5Q/edit?usp=sharing__;!!PtGJab4!qxlptUrJ1ANf6GnP-fUZ6w_hjjv1maS31O6P-jcfehCIc93D4QInTWi7OmJVvuXvAH-MaWGjsQ$">
https://docs.google.com/spreadsheets/d/1FunWaz3gNZl8mPi5pNKti2GsfPC_9_DTt8uRQq4Oe5Q/edit?usp=sharing [docs.google.com]</a>
<o:p></o:p></p>
<p class="MsoNormal"><b><u><o:p><span style="text-decoration:none"> </span></o:p></u></b></p>
<p class="MsoNormal"><b><u>Notes:<o:p></o:p></u></b></p>
<p class="MsoNormal"><b><u><o:p><span style="text-decoration:none"> </span></o:p></u></b></p>
<p class="MsoNormal"><b><span style="color:black">Transfer Policy Review Phase 1 - Meeting #</span>19 – Tuesday, 28 September at 16:00 UTC</b><o:p></o:p></p>
<p class="MsoNormal"><b><span style="color:black">Proposed Agenda</span></b><o:p></o:p></p>
<p class="MsoNormal"><span style="color:black"> </span><o:p></o:p></p>
<p class="MsoNormal" style="margin-bottom:6.0pt;line-height:18.0pt">1. Roll Call & SOI Updates (5 minutes)<o:p></o:p></p>
<ul style="margin-top:0in" type="disc">
<li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l11 level1 lfo15">
See updated SOI from Farzaneh Badiei at: <a href="https://community.icann.org/display/gnsosoi/Farzaneh+Badiei+SOI">
https://community.icann.org/display/gnsosoi/Farzaneh+Badiei+SOI</a>. <o:p></o:p></li></ul>
<p class="MsoNormal" style="margin-bottom:6.0pt;line-height:18.0pt">2. Welcome & Chair updates (5 minutes)<o:p></o:p></p>
<ul style="margin-top:0in" type="disc">
<li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l4 level1 lfo9">
<span style="font-size:11.0pt">Comments from WG members: None.<o:p></o:p></span></li></ul>
<p class="MsoNormal" style="margin-bottom:6.0pt;line-height:18.0pt">3. New Topic: Gaining FOA (75 minutes) – See:
<a href="https://urldefense.com/v3/__https:/docs.google.com/document/d/1QOCzbLh7w4hdijpAsg6_lybddr0nlsFDcWjdz5e21Qo/edit?usp=sharing__;!!PtGJab4!o01IykxHjlIJMlYKgf5WXN399sOTJsj-MSxXUHasSo4IeUvRalOA7qnZJ1P44kLW1-T8IFtXkA$">
Gaining FOA working document [docs.google.com]</a><o:p></o:p></p>
<p class="MsoNormal" style="margin-bottom:6.0pt;line-height:18.0pt"><b>Charter Questions:<o:p></o:p></b></p>
<p class="MsoNormal" style="margin-bottom:6.0pt;line-height:18.0pt">a4) If the Working Group determines the Gaining FOA is no longer needed, does the AuthInfo Code provide sufficient security? The Transfer Policy does not currently require specific security
requirements around the AuthInfo Code. Should there be additional security requirements added to AuthInfo Codes, e.g., required syntax (length, characters), two-factor authentication, issuing restrictions, etc.?<o:p></o:p></p>
<p class="MsoNormal" style="margin-bottom:6.0pt;line-height:18.0pt"><u>Discussion</u>:<o:p></o:p></p>
<ul style="margin-top:0in" type="disc">
<li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l4 level1 lfo9">
<span style="font-size:11.0pt">Think we have answered this. We have had discussions around additional security relating to AuthInfo Codes.<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l4 level1 lfo9">
<span style="font-size:11.0pt">Question: Where are all the working documents? Answer: On the wiki at:
<a href="https://community.icann.org/display/TPRPDP/Working+Documents">https://community.icann.org/display/TPRPDP/Working+Documents</a>.
<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l4 level1 lfo9">
<span style="font-size:11.0pt">Note that there are some candidate recommendations on AuthInfo Codes at:
<a href="https://docs.google.com/document/d/1O9PAnxWFUuPofLQCWIQXz8lT7KEj1HgH3b_obh0AK00/edit?usp=sharing">
https://docs.google.com/document/d/1O9PAnxWFUuPofLQCWIQXz8lT7KEj1HgH3b_obh0AK00/edit?usp=sharing</a> (page 16).<o:p></o:p></span></li></ul>
<p class="MsoNormal" style="margin-bottom:6.0pt;line-height:18.0pt">a5) If the Working Group determines the Gaining FOA is no longer needed, does the transmission of the AuthInfo Code provide a sufficient “paper trail” for auditing and compliance purposes?<o:p></o:p></p>
<p class="MsoNormal" style="margin-bottom:6.0pt;line-height:18.0pt"><u>Discussion</u>:<o:p></o:p></p>
<ul style="margin-top:0in" type="disc">
<li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l4 level1 lfo9">
<span style="font-size:11.0pt">Everyone recognized that the gaining FOA provided another piece of the audit trail. Do we need to make sure that is embedded elsewhere? It is not just what we’ve done for the TAC, but also the notification of the transfer being
complete provides an audit trail.<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l4 level1 lfo9">
<span style="font-size:11.0pt">From ICANN Compliance: Requiring AuthInfo Code and Losing FOA be provided to the registrant.<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l4 level1 lfo9">
<span style="font-size:11.0pt">We have ways to track the request history without Gaining FOA.<o:p></o:p></span></li></ul>
<p class="MsoNormal" style="margin-bottom:6.0pt;line-height:18.0pt"><u>Summary</u>:<o:p></o:p></p>
<ul style="margin-top:0in" type="disc">
<li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l4 level1 lfo9">
<span style="font-size:11.0pt">We aren’t getting rid of the losing or gaining FOA, but instead replacing their functionalities. Important to ensure that we are addressing the reason why the gaining FOA was being used.<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l4 level1 lfo9">
<b><span style="font-size:11.0pt">Question: Rather than thinking about getting rid of the gaining FOA, but should we be taking the features and requirements served by the gaining FOA and say that you have to keep certain records. Do we want to make sure that
we say that there is a paper trail, you are required to keep it, and this is the information it has to have.<o:p></o:p></span></b></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l4 level1 lfo9">
<b><span style="font-size:11.0pt">The key is to extract the purposes of the gaining FOA and either provide those in another mechanism, or a rationale for why we don’t think we need to serve that purpose anymore.<o:p></o:p></span></b></li></ul>
<p class="MsoNormal" style="margin-bottom:6.0pt;line-height:18.0pt"><o:p> </o:p></p>
<p class="MsoNormal" style="margin-bottom:6.0pt;line-height:18.0pt"><b>Poll Questions and Responses:<o:p></o:p></b></p>
<p class="MsoNormal" style="margin-bottom:6.0pt;line-height:18.0pt"><b>(Q1) Did the Gaining FOA serve a security function? - 15 responses</b><o:p></o:p></p>
<ul style="margin-top:0in" type="disc">
<li class="MsoNormal" style="margin-bottom:6.0pt;line-height:18.0pt;mso-list:l5 level1 lfo10">
Yes, and new requirements should exist to replace the Gaining FOA’s security function -- 33%<o:p></o:p></li><li class="MsoNormal" style="margin-bottom:6.0pt;line-height:18.0pt;mso-list:l5 level1 lfo10">
Yes, but this function is no longer necessary -- 40%<o:p></o:p></li><li class="MsoNormal" style="margin-bottom:6.0pt;line-height:18.0pt;mso-list:l5 level1 lfo10">
No, it did not serve this function -- 27%<o:p></o:p></li><li class="MsoNormal" style="margin-bottom:6.0pt;line-height:18.0pt;mso-list:l5 level1 lfo10">
Not sure/Needs further discussion -- 0%<o:p></o:p></li></ul>
<p class="MsoNormal" style="margin-bottom:6.0pt;line-height:18.0pt"><u>Discussion</u>:<o:p></o:p></p>
<ul style="margin-top:0in" type="disc">
<li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l4 level1 lfo9">
<span style="font-size:11.0pt">Just a mechanism to transfer a domain name; was not originally a security function.</span><o:p></o:p></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l4 level1 lfo9">
<span style="font-size:11.0pt">It’s primary purpose was not as a security feature, just to facilitate a transfer. It could be a security feature, but it wouldn’t be a strong one. But, the added set might provide a small amount of security.</span><o:p></o:p></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l4 level1 lfo9">
<span style="font-size:11.0pt">Think the gaining FOA requirements predated AuthInfo Codes.</span><o:p></o:p></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l4 level1 lfo9">
<span style="font-size:11.0pt">Not everyone sees it as a security feature, or as a strong one.</span><o:p></o:p></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l4 level1 lfo9">
<span style="font-size:11.0pt">Back in the day, we weren’t thinking in terms of security so these weren’t well documented.</span><o:p></o:p></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l4 level1 lfo9">
<span style="font-size:11.0pt">The difficult question is whether or not the gaining FOA is a security mechanism.</span><o:p></o:p></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l4 level1 lfo9">
<span style="font-size:11.0pt">Seems that there is general agreement that it does add something, if not security.</span><o:p></o:p></li></ul>
<p class="MsoNormal" style="margin-bottom:6.0pt;line-height:18.0pt"><b>(Q2) Did the Gaining FOA serve a notification function? - 16 responses</b><o:p></o:p></p>
<ul style="margin-top:0in" type="disc">
<li class="MsoNormal" style="margin-bottom:6.0pt;line-height:18.0pt;mso-list:l1 level1 lfo11">
Yes, and new requirements should exist to replace the Gaining FOA’s notification function -- 63%<o:p></o:p></li><li class="MsoNormal" style="margin-bottom:6.0pt;line-height:18.0pt;mso-list:l1 level1 lfo11">
Yes, but this function is no longer necessary -- 38%<o:p></o:p></li><li class="MsoNormal" style="margin-bottom:6.0pt;line-height:18.0pt;mso-list:l1 level1 lfo11">
No, it did not serve this function -- 0%<o:p></o:p></li><li class="MsoNormal" style="margin-bottom:6.0pt;line-height:18.0pt;mso-list:l1 level1 lfo11">
Not sure/Needs further discussion -- 0%<o:p></o:p></li></ul>
<p class="MsoNormal" style="margin-bottom:6.0pt;line-height:18.0pt"><u>Discussion</u>:<o:p></o:p></p>
<ul style="margin-top:0in" type="disc">
<li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l4 level1 lfo9">
<span style="font-size:11.0pt">Don’t think we need a policy requirement because the losing registrar will have that requirement. The gaining registrar may wish to do it for other reasons.<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l4 level1 lfo9">
<span style="font-size:11.0pt">The gaining FOA from the gaining registrar’s perspective did serve a purpose, but it doesn’t need to be a policy requirement.<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l4 level1 lfo9">
<span style="font-size:11.0pt">Losing registrar will have policy obligation to notify, they don't both need to; Gaining registrar may have marketing desire or data protection obligation to notify, but not due to the transfer itself.<o:p></o:p></span></li></ul>
<p class="MsoNormal" style="margin-bottom:6.0pt;line-height:18.0pt"><b>(Q3) Did the Gaining FOA serve a “paper trail” function? - 18 responses</b><o:p></o:p></p>
<ul style="margin-top:0in" type="disc">
<li class="MsoNormal" style="margin-bottom:6.0pt;line-height:18.0pt;mso-list:l12 level1 lfo12">
Yes, and new requirements should exist to replace the Gaining FOA’s “paper trail” function -- 44%<o:p></o:p></li><li class="MsoNormal" style="margin-bottom:6.0pt;line-height:18.0pt;mso-list:l12 level1 lfo12">
Yes, but this function is no longer necessary -- 50%<o:p></o:p></li><li class="MsoNormal" style="margin-bottom:6.0pt;line-height:18.0pt;mso-list:l12 level1 lfo12">
No, it did not serve this function -- 0%<o:p></o:p></li><li class="MsoNormal" style="margin-bottom:6.0pt;line-height:18.0pt;mso-list:l12 level1 lfo12">
Not sure/Needs further discussion -- 6%<o:p></o:p></li></ul>
<p class="MsoNormal" style="margin-bottom:6.0pt;line-height:18.0pt"><u>Discussion</u>:<o:p></o:p></p>
<ul style="margin-top:0in" type="disc">
<li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l4 level1 lfo9">
<span style="font-size:11.0pt">We need to know whether the function isn’t necessary or has been replaced and with what.<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l4 level1 lfo9">
<span style="font-size:11.0pt">If 44% said yes, there is still a “paper trail” function, what would that look like? What are the barriers to accomplishing that?<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l4 level1 lfo9">
<span style="font-size:11.0pt">The key here is that the majority people agreed that it provided a “paper trail” but disagreed on whether it was still needed.<o:p></o:p></span></li></ul>
<p class="MsoNormal" style="margin-bottom:6.0pt;line-height:18.0pt"><b>(Q4) Did the Gaining FOA serve another function not listed in previous questions? - 16 Responses</b><o:p></o:p></p>
<ul style="margin-top:0in" type="disc">
<li class="MsoNormal" style="margin-bottom:6.0pt;line-height:18.0pt;mso-list:l6 level1 lfo13">
Yes -- 0%<o:p></o:p></li><li class="MsoNormal" style="margin-bottom:6.0pt;line-height:18.0pt;mso-list:l6 level1 lfo13">
No -- 94%<o:p></o:p></li><li class="MsoNormal" style="margin-bottom:6.0pt;line-height:18.0pt;mso-list:l6 level1 lfo13">
Not sure/Needs further discussion -- 6% <o:p></o:p></li></ul>
<p class="MsoNormal" style="margin-bottom:6.0pt;line-height:18.0pt"><u>Discussion</u>:<o:p></o:p></p>
<ul style="margin-top:0in" type="disc">
<li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l4 level1 lfo9">
<span style="font-size:11.0pt">Majority agreement that there are no other functions provided by the gaining FOA.<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l4 level1 lfo9">
<span style="font-size:11.0pt">Sending emails for notification could be used by bad actors for phishing. When we do have mandatory emails requiring action by the registrant that can result in opportunities for abuse, so think about that if we are keeping notification
requirements.<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l4 level1 lfo9">
<span style="font-size:11.0pt">Perhaps in the policy we shouldn’t specify the mechanism for the transfer notification.<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l4 level1 lfo9">
<span style="font-size:11.0pt">Answered “no” because we are talking about the gaining FOA as is (current policy).<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l4 level1 lfo9">
<span style="font-size:11.0pt">Could take lessons from other industries on security principles, such as the financial industry. Such as the principle to not have embedded actions (such as clicking links). Notification itself can’t be directly actionable.<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l4 level1 lfo9">
<span style="font-size:11.0pt">Keep in mind the timing of these types of notification – what is interesting is that the gaining FOA pre-GDPR was the first notification the registered name holder would receive, to agree to transferring the domain. Secondarily
there was an option to reject that transfer as unauthorized.<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l4 level1 lfo9">
<span style="font-size:11.0pt">If the gaining FOA is no longer a requirement, that changes the timing and who is notifying whom – which is connected to whether the gaining FOA played a part in a security mechanism.<o:p></o:p></span></li></ul>
<p class="MsoNormal" style="margin-bottom:6.0pt;line-height:18.0pt"><b>(Q5) Which statement do you support with respect to Gaining FOA? - 16 responses</b><o:p></o:p></p>
<ul style="margin-top:0in" type="disc">
<li class="MsoNormal" style="margin-bottom:6.0pt;line-height:18.0pt;mso-list:l2 level1 lfo14">
The requirements should be removed from policy with no replacement -- 44%<o:p></o:p></li><li class="MsoNormal" style="margin-bottom:6.0pt;line-height:18.0pt;mso-list:l2 level1 lfo14">
Improved FOA security and new notifications are sufficient to replace it -- 50%<o:p></o:p></li><li class="MsoNormal" style="margin-bottom:6.0pt;line-height:18.0pt;mso-list:l2 level1 lfo14">
The WG needs to explore other possible measures to replace it -- 6%<o:p></o:p></li><li class="MsoNormal" style="margin-bottom:6.0pt;line-height:18.0pt;mso-list:l2 level1 lfo14">
Not sure/Needs further discussion -- 0%<o:p></o:p></li></ul>
<p class="MsoNormal" style="margin-bottom:6.0pt;line-height:18.0pt"><u>Discussion</u>:<o:p></o:p></p>
<ul style="margin-top:0in" type="disc">
<li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l4 level1 lfo9">
<span style="font-size:11.0pt">If we aren’t going to replace this function, we’ll need to provide a rationale.<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l4 level1 lfo9">
<span style="font-size:11.0pt">Looks like we have a fairly even split.<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l4 level1 lfo9">
<span style="font-size:11.0pt">Is this a solution in search of a problem? Seems like things are in good shape at the moment.<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l4 level1 lfo9">
<span style="font-size:11.0pt">One distinction to make with respect to actionable notifications when thinking about the desire for 1-click actions, are you starting something or stopping something? there’s a case to be made to have a one-click to stop something
but require logging in to the portal (being careful about phishing attacks, i.e., use two-factor authentication) to confirm or start something. it’s a subtle distinction that requires careful analysis but could be helpful.<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l4 level1 lfo9">
<span style="font-size:11.0pt">Keep in mind with the redacted WHOIS it is not possible to send a gaining FOA at this moment.<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l4 level1 lfo9">
<span style="font-size:11.0pt">Think we've got all the functionality moved to other places in the process.<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l4 level1 lfo9">
<span style="font-size:11.0pt">If we thought the gaining FOA did something that we can't do any other way, we could explore how to keep it, but don't think that is the case, and then if we get into how to keep it, we need to consider lawful bases for processing
the data, which may be nonexistent.<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l4 level1 lfo9">
<span style="font-size:11.0pt">In the first answer we talk about “requirements” but think this question is just about the gaining FOA as a document in itself – think we want to keep all the things that this document stood for. The FOA itself needs to go away,
but the requirements it stood for will replace it.<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l4 level1 lfo9">
<span style="font-size:11.0pt">We want the security and notification, but they don't have to happen via the gaining FOA.<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l4 level1 lfo9">
<span style="font-size:11.0pt">Can’t enforce what we were sending in the way we were sending it.
<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l4 level1 lfo9">
<span style="font-size:11.0pt">Find ways to keep what those notifications represented.<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l4 level1 lfo9">
<span style="font-size:11.0pt">Think we will get information from the new registrar in another way.<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l4 level1 lfo9">
<span style="font-size:11.0pt">Because of GDPR there needs to be some kind of contract between the losing and gaining registrars in order to transfer data. Is there a legal way to share data? So far no one could come up with a good way of doing that.<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l4 level1 lfo9">
<span style="font-size:11.0pt">Don’t see how we can keep what the gaining FOA stood for because of GDPR. The data is not accessible.<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l4 level1 lfo9">
<span style="font-size:11.0pt">“what it stood for” is the security requirements and paper trail that were provided by it.<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l4 level1 lfo9">
<span style="font-size:11.0pt">Question: Is there a stakeholder insisting on keeping the gaining FOA? Answer: Not that we are aware of.<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l4 level1 lfo9">
<span style="font-size:11.0pt">Seem to be recommending that we eliminate the gaining FOA, but then we need to identify its purposes and how they are being met with other mechanisms.<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l4 level1 lfo9">
<span style="font-size:11.0pt">Need to ask the question of whether the TAC notifications address the purposes of the gaining FOA (the TAC presentation notification).<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l4 level1 lfo9">
<span style="font-size:11.0pt">Potential scenario: A registrant goes to their incumbent registrar to ask for a TAC, registrant brings it to the gaining registrar, but realizes they lost it and can go back to the losing registrar message and asks again. If
they don’t realize they lost it, but get a notification of transfer, they have the option to claw that back. If the accounts are compromised then we can’t do anything about that.<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l4 level1 lfo9">
<span style="font-size:11.0pt">Don’t see how the gaining FOA improves security.<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l4 level1 lfo9">
<span style="font-size:11.0pt">Majority of transfers happen without issues, but we are trying to solve for those who don’t.<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l4 level1 lfo9">
<span style="font-size:11.0pt">Everyone seems to agree that the gaining registrars notifications would be very limited.<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l4 level1 lfo9">
<span style="font-size:11.0pt">The gaining registrar may have business reasons to send out notifications, but the losing registrar won’t. Seems we agree that if the gaining registrar sends a notification it should not be mandatory, but optional.<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l4 level1 lfo9">
<span style="font-size:11.0pt">All the security requirements go on the front end of the transfer, with the option at least to claw it back.<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l4 level1 lfo9">
<span style="font-size:11.0pt">RNH should be notified when the transfer completes, but don't think that MUST come from the new Registrar.<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-bottom:6.0pt;margin-left:0in;line-height:18.0pt;mso-list:l4 level1 lfo9">
<span style="font-size:11.0pt">Summary: Think we agree that the gaining FOA cannot exist in its current form in future, but it does provide certain functionalities that have been replaced. We need to say what those functionalities are and how they have been
replaced (such as the presentation of the TAC).<o:p></o:p></span></li></ul>
<p class="MsoNormal" style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:6.0pt;margin-left:.25in;line-height:18.0pt">
<b>ACTION ITEM: Homework for the WG by Monday, 04 October: WG members should provide descriptions of the purposes of the gaining FOA and of the functions that the WG recommends to replace those purposes.<o:p></o:p></b></p>
<p class="MsoNormal" style="margin-bottom:6.0pt;line-height:18.0pt">4. AOB (5 minutes)<o:p></o:p></p>
<p class="MsoNormal" style="margin-bottom:6.0pt;line-height:18.0pt">- Next meeting: 5 October 2021 @ 16.00 UTC<o:p></o:p></p>
</div>
</body>
</html>