ietf
[Top] [All Lists]

Re: [precis] Secdir last call review of draft-ietf-precis-7564bis-07

2017-06-13 18:02:50
Hi Matt, thanks for the review - it's much appreciated.

Just so you know: through discussion of Daniel Migualt's secdir review
of 7700bis (we're progressing them all together this time!), I realized
that it might be help to add another example of visually confusing
characters to 7564bis, so I plan to mention CYRILLIC SMALL LETTER A
U+0430 vs. LATIN SMALL LETTER A U+0061 (which will be more familiar to
readers than the Cherokee characters already in the document).

Peter

On 6/13/17 9:13 AM, Matthew Miller wrote:
Reviewer: Matthew Miller
Review result: Ready

I have reviewed this document as part of the security directorate's
ongoing effort to review all IETF documents being processed by the
IESG.  These comments were written primarily for the benefit of the
security area directors.  Document editors and WG chairs should
treat these comments just like any other last call comments.

Document: draft-ietf-precis-7564bis-07
Reviewer: Matthew A. Miller
Review Date: 2017-06-13
IETF LC End Date: 2017-06-13
IESG Telechat date: 2017-07-06

Summary:

This document is ready to be published as a Standards Track document.

This document defines a framework application protocols use to
prepare, compare, and enforce conformance of internationalized strings.
It obsoletes RFC 7564.

This document is well written, and reinforces the security concerns
discussed in Section 12 with references in the most relevant sections
throughout the document.  While much of it essentially proclaims
"be aware herein be dragons", the arguments for not proscribing more
are well laid out.

Major Issues:  NONE

Minor Issues: NONE

Nits: NONE


_______________________________________________
precis mailing list
precis(_at_)ietf(_dot_)org
https://www.ietf.org/mailman/listinfo/precis


<Prev in Thread] Current Thread [Next in Thread>