[art] Artart last call review of draft-ietf-cose-cwt-claims-in-headers-06

Claudio Allocchio via Datatracker <noreply@ietf.org> Thu, 19 October 2023 07:49 UTC

Return-Path: <noreply@ietf.org>
X-Original-To: art@ietf.org
Delivered-To: art@ietfa.amsl.com
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id E7F97C1519AA; Thu, 19 Oct 2023 00:49:33 -0700 (PDT)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: Claudio Allocchio via Datatracker <noreply@ietf.org>
To: art@ietf.org
Cc: cose@ietf.org, draft-ietf-cose-cwt-claims-in-headers.all@ietf.org, last-call@ietf.org
X-Test-IDTracker: no
X-IETF-IDTracker: 11.13.0
Auto-Submitted: auto-generated
Precedence: bulk
Message-ID: <169770177393.59160.1222979210779815441@ietfa.amsl.com>
Reply-To: Claudio Allocchio <Claudio.Allocchio@garr.it>
Date: Thu, 19 Oct 2023 00:49:33 -0700
Archived-At: <https://mailarchive.ietf.org/arch/msg/art/kuLLKsPo04s22kyXIIV7AsKkgZM>
Subject: [art] Artart last call review of draft-ietf-cose-cwt-claims-in-headers-06
X-BeenThere: art@ietf.org
X-Mailman-Version: 2.1.39
List-Id: Applications and Real-Time Area Discussion <art.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/art>, <mailto:art-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/art/>
List-Post: <mailto:art@ietf.org>
List-Help: <mailto:art-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/art>, <mailto:art-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 19 Oct 2023 07:49:34 -0000

Reviewer: Claudio Allocchio
Review result: Ready with Nits

The document is basically well written and clear. The only nits I suggest to
fix is in the security chapter: it seems a copy/paste of the same sections as
RFC 7519 one, but maybe some "expanded statements" on the implication of
external signature use and in case about potential risks associated may help
the non security expert implementer to better understand the whole picture.

Given the above, the document is ready to go.