Re: [apps-discuss] WGLC on draft-ietf-appsawg-rfc5451bis-00

[Alexey Melnikov <[e-mail]>]

On 03/05/2013 22:26, S Moonesamy wrote:
> Hi APPSAWG,
>
> This message initiates a two weeks WGLC on 
> draft-ietf-appsawg-rfc5451bis-00 ("Message Header Field for Indicating 
> Message Authentication Status") [1].  Please send your comments to the 
> mailing list before the end of Friday May 17. Comments saying that you 
> reviewed the draft and you are happy for it to be sent for IETF Last 
> Call are also valuable.
>
> Regards,
> S. Moonesamy (as document shepherd)
>
> 1. http://tools.ietf.org/html/draft-ietf-appsawg-rfc5451bis-00
I just reviewed -01. I believe it is a well written document with good 
and detailed security considerations. Some nits are below:

In Section 2.2:

    Where an SMTP command is being reported as a "property", the MAIL
    FROM command MUST be represented by "mailfrom" and the RCPT TO
    command MUST be represented by "rcptto".  All other SMTP commands
    MUST be represented unchanged.

This seems to say that the SMTP reference is Normative, because one need 
to be able to lookup list of SMTP commands in RFC 5321. But RFC 5321 is 
listed as Informative.

In Section 2.5.4:

  LDAP needs an Informative Reference.


2.5.5.  Extension Result Codes

    Additional result codes (extension results) might be defined in the
    future by later revisions or extensions to this specification.
    Result codes MUST be registered with the Internet Assigned Numbers
    Authority (IANA) and preferably published in an RFC.  See Section 6
    for further details.

    Extension results MUST only be used within ADMDs that have explicitly
    consented to use them.  These results and the parameters associated
    with them are not formally documented.  Therefore, they are subject
    to change at any time and not suitable for production use.  Any MTA,
    MUA or downstream filter intended for production use SHOULD ignore or
    delete any Authentication-Results header field that includes an
    extension result.

I am mostly curious to see some examples of such extensions.