[auth48] Re: [EXTERNAL] [AD] [C557] Cluster-Wide AUTH48 Questions: draft-ietf-cose-merkle-tree-proofs-18 (RFC-to-be 9942) and draft-ietf-scitt-architecture-22 (RFC-to-be 9943)

Megan Ferguson <mferguson@staff.rfc-editor.org> Wed, 10 June 2026 18:31 UTC

Return-Path: <mferguson@staff.rfc-editor.org>
X-Original-To: auth48archive@mail2.ietf.org
Delivered-To: auth48archive@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 90CACFEE1C06 for <auth48archive@mail2.ietf.org>; Wed, 10 Jun 2026 11:31:13 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1781116273; bh=S62tuCFNdsAU216pcHUUcE43lq8KvqMPtyHTxdrot1Y=; h=Subject:From:In-Reply-To:Date:Cc:References:To; b=Zk2XBGzQPzxI/xGPlKN5+ido2etkg/cG+jjsyzJBlhmIfI0YwCQjLU6npZU7pbZV+ DEyOWHyChNNMXwaGnqBwJBh12FBNeeoCpUP2pcTGkZsf1+N22AX19hrFIff4uyyMjv OMffVfTpNUbnNq3aDm8npjeiMGmsZWyMOIWwr7hg=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level:
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=staff-rfc-editor-org.20251104.gappssmtp.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 13JsYLlPrN_l for <auth48archive@mail2.ietf.org>; Wed, 10 Jun 2026 11:31:12 -0700 (PDT)
Received: from mail-oi1-x22d.google.com (mail-oi1-x22d.google.com [IPv6:2607:f8b0:4864:20::22d]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id D5B15FEE1BF8 for <auth48archive@rfc-editor.org>; Wed, 10 Jun 2026 11:31:11 -0700 (PDT)
Received: by mail-oi1-x22d.google.com with SMTP id 5614622812f47-4863a7dac63so3707544b6e.1 for <auth48archive@rfc-editor.org>; Wed, 10 Jun 2026 11:31:11 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=staff-rfc-editor-org.20251104.gappssmtp.com; s=20251104; t=1781116271; x=1781721071; darn=rfc-editor.org; h=to:references:message-id:content-transfer-encoding:cc:date :in-reply-to:from:subject:mime-version:from:to:cc:subject:date :message-id:reply-to; bh=CchHBfnfMUVR1KsrKq0xViczSsp2Q9qaL9cIgBhtmX0=; b=YfX4MFk65lV4FzQk42TnT5rch0Z/aO89+CGmbitwV34+3Qol42FHGAKj4p1I+EPqr4 ihmx5U9BiKEbAPWl71u6rFM6yxLDQHHOH8yR42m8pjkM/Br/nIawCfpL1tGjeGgLT0T3 ABOBh/LkC7yfy7xfyMFSYrOCODkD2AMF39vwHs0APxgayysuBRQ6CdKE/KA7XieuGsco vQqmNTZKQai9qRCvAyXNX5r9c95mCO4TeVHfNs1sRrVJwaht27pUVQs/nnUTfZs4KTeL VWaHY7da9XdY3fj8amHts0G/uCLrpef8zseZ6gSOD6Fiz09nmefPDiKKBFtPttSlI2VE P4HA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1781116271; x=1781721071; h=to:references:message-id:content-transfer-encoding:cc:date :in-reply-to:from:subject:mime-version:x-gm-gg:x-gm-message-state :from:to:cc:subject:date:message-id:reply-to; bh=CchHBfnfMUVR1KsrKq0xViczSsp2Q9qaL9cIgBhtmX0=; b=K2So1ghhzqXUuSO2xU3iuq5xzQbX1etR0fKN//J4850CJANW5KX4w+LxsV8NhTfcwd Wh4o3lPIviwnBtRx+bWGgZpu+eu5WZC6x3TLhjyu6AEtHashe9WoPq+fsWdwmXxjxpQ+ NObE9nBK3Q/gYlhK+zwFs0P6Iqe9r2yeGDpYAjROiN5aZjtn3XMBbTFD8AJFUOFsR7t+ wv+dlaYWgqpQRswtZ9Dq4fp4qqzsuNb5/J3G0xh0BWD+f+PKMd8B20xd99h7BqObf0Bh QbXiv9ViEuy5q0fne9x3Qzx0xebVoDu3KkIL3MTILlpEouoZ6v8nisbpiLMGB+r1c8GI dyRQ==
X-Forwarded-Encrypted: i=1; AFNElJ8qWPjncTE5m+LiHVQdf4zbaEzMY9H6HNGuCH0fzQAQfh5A6meNsEK6owOCFwu4de3LX++gfX9sadpwhnOH@rfc-editor.org
X-Gm-Message-State: AOJu0Yz7sGoKRqAr9oW4IXb5HLoIllt7BqrwpLFPWbrWMUMtTDS2SBJb cY9ojaisYaP734DaijCeuvz6RoC17nqVl5Rn7aBaTUKRoeAyZ8GnLu4mMpRUEKjvU7m9Gw==
X-Gm-Gg: Acq92OHOfFsZLWeko3h5lHxiaSiw8YQzKlfnyj+FFU6jsRiq95wsh5gZklTK3hPhwIf 6LpJophmli+mB/EKAZgmXNE+wLgYiS+PKhBfCzhxrIxbJ8hqh9alMGPG3vK5tCTZNrGRUDEbTFZ 2rS0+7Ql0unLEMwwXFxDT2L29X221SuUvlbGDyiDdCidpECW0T/BSaCwtfJ/rp6IxzDsVf16z/S 3yFQT7gkbYxHmVgpSpEKNXFwj/IT++VcLE4mqFOospF+MzQwfluoKynrgyOkC0pQtxZ98TteWt2 4RYneAPNnjWYcsLTpdH+u8q05r5nB1N7FQy6HyIofOtfoX/X6qP7eU/zi+6PbzG+fGeYW5tjK0X 5O2OfeUB03Q/7ztUYegmzqNo4ipRF0ct22BWIJi3Yzfk0kxBvnQ+7/keptnofTAMGBemTCzZIYD skK2A08oIn2jouRi3mM4FqqK9e+Q0ZIgJfsWyjCzq1FKSqHe4+QQPys/kyJZCcpG04FHwvjAWcR fK3SkPY7HPLIYo8/ni3z/1RepmB+qJ80lCziaV5
X-Received: by 2002:a05:6808:251a:b0:464:3d5d:d9d4 with SMTP id 5614622812f47-4868df031d7mr17438724b6e.39.1781116270871; Wed, 10 Jun 2026 11:31:10 -0700 (PDT)
Received: from smtpclient.apple (c-24-9-47-226.hsd1.co.comcast.net. [24.9.47.226]) by smtp.gmail.com with ESMTPSA id 5614622812f47-4865b91a9d2sm18821793b6e.12.2026.06.10.11.31.09 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Wed, 10 Jun 2026 11:31:10 -0700 (PDT)
Content-Type: text/plain; charset="utf-8"
Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3864.600.51.1.1\))
From: Megan Ferguson <mferguson@staff.rfc-editor.org>
In-Reply-To: <CAGgd1Oc2ugyUi=yKqkirLADHM1niGtZGrcEkcVojX8ZwiXWpmg@mail.gmail.com>
Date: Wed, 10 Jun 2026 12:30:58 -0600
Content-Transfer-Encoding: quoted-printable
Message-Id: <345F3708-D46F-4C70-9CCE-EFAF897CC6B7@staff.rfc-editor.org>
References: <DAFEFEC1-CA27-4E89-9C1A-B910E9E7AAA4@staff.rfc-editor.org> <PA1PR83MB0749096BA99F350428B89062B2252@PA1PR83MB0749.EURPRD83.prod.outlook.com> <B3B191DA-68F5-4487-8765-E0180E561699@staff.rfc-editor.org> <PA1PR83MB0749D7A8CA65FA5DD9E3CF68B2232@PA1PR83MB0749.EURPRD83.prod.outlook.com> <D3FE8D44-6C94-456A-AD1C-571763DAAC1F@staff.rfc-editor.org> <PA1PR83MB0749D2E1A468025250F484F6B2202@PA1PR83MB0749.EURPRD83.prod.outlook.com> <AC4967BC-C46C-400D-8897-3449D0BB02E3@staff.rfc-editor.org> <dc082030-fa24-432f-98e8-cdb0d26ed11e@ietf.contact> <86218BF2-02E0-4E5F-84C2-676DFE639E3C@staff.rfc-editor.org> <CAMzqgozDVOU9s7-GzQFCJudfTkqNrrGK41id429ngpyPxvu_4A@mail.gmail.com> <PA1PR83MB07498DB3B65E680A179D2F7AB2102@PA1PR83MB0749.EURPRD83.prod.outlook.com> <1703936d-5d1a-40c3-8f33-e1f650397d01@ietf.contact> <99462360-616A-4290-ACA1-51724C6C0215@staff.rfc-editor.org> <CAGgd1Oc2ugyUi=yKqkirLADHM1niGtZGrcEkcVojX8ZwiXWpmg@mail.gmail.com>
To: Deb Cooley <debcooley1@gmail.com>, "paul.wouters@aiven.io" <paul.wouters@aiven.io>
X-Mailer: Apple Mail (2.3864.600.51.1.1)
Message-ID-Hash: 3XPPRYXJ2ATRGAZVN67QJB54ZXON6PQK
X-Message-ID-Hash: 3XPPRYXJ2ATRGAZVN67QJB54ZXON6PQK
X-MailFrom: mferguson@staff.rfc-editor.org
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: Henk Birkholz <henk.birkholz@ietf.contact>, Antoine Delignat-Lavaud <antdl@microsoft.com>, Orie <orie@or13.io>, Cedric Fournet <fournet@microsoft.com>, Yogesh Deshpande <yogesh.deshpande@arm.com>, "stevenlasker@hotmail.com" <stevenlasker@hotmail.com>, "rfc-editor@rfc-editor.org" <rfc-editor@rfc-editor.org>, "cose-ads@ietf.org" <cose-ads@ietf.org>, "cose-chairs@ietf.org" <cose-chairs@ietf.org>, "ivaylopetrov@google.com" <ivaylopetrov@google.com>, Amaury Chamayou <Amaury.Chamayou@microsoft.com>, "scitt-ads@ietf.org" <scitt-ads@ietf.org>, "scitt-chairs@ietf.org" <scitt-chairs@ietf.org>, "auth48archive@rfc-editor.org" <auth48archive@rfc-editor.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [auth48] Re: [EXTERNAL] [AD] [C557] Cluster-Wide AUTH48 Questions: draft-ietf-cose-merkle-tree-proofs-18 (RFC-to-be 9942) and draft-ietf-scitt-architecture-22 (RFC-to-be 9943)
List-Id: "Archiving AUTH48 exchanges between the RFC Production Center, the authors, and other related parties" <auth48archive.rfc-editor.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/auth48archive/vFbnpjg2pkoMtkYvx87J_KgveZw>
List-Archive: <https://mailarchive.ietf.org/arch/browse/auth48archive>
List-Help: <mailto:auth48archive-request@rfc-editor.org?subject=help>
List-Owner: <mailto:auth48archive-owner@rfc-editor.org>
List-Post: <mailto:auth48archive@rfc-editor.org>
List-Subscribe: <mailto:auth48archive-join@rfc-editor.org>
List-Unsubscribe: <mailto:auth48archive-leave@rfc-editor.org>

Hi Deb,

This reply is for draft-ietf-cose-merkle-tree-proofs-18 (RFC-to-be 9942).  Paul is listed as the Responsible AD for that document.

Thanks!

Megan Ferguson
RFC Production Center

> On Jun 5, 2026, at 5:29 PM, Deb Cooley <debcooley1@gmail.com> wrote:
> 
> This is for the cose draft, correct?  So you want Paul as the AD?
> 
> Deb
> 
> On Fri, Jun 5, 2026 at 7:20 PM Megan Ferguson <mferguson@staff.rfc-editor.org> wrote:
> Henk, Antoine, and Orie, (and *AD),
> 
> [*AD - please note that this document has had several updates to code.  Please review/approve all changes to code highlighted in the AUTH48 diff below.]
> 
> After some forensic email searching / editing work, I *think* the version posted below encompasses all the desired changes we’ve received to date.  Please review *extra* carefully and let us know if anything is missing and/or updated incorrectly.
> 
> Going forward, **please base any edits of the linked edited XML version** (see below).
> 
> Some known clean up:
> 
> We were unsure if the following changes that do not currently appear in the current XML file were intentionally removed or if they should be reinstated:
> 
> 1) See the following in Figure 6:
> 
> >>> In Figure 6.
> >>> 
> >>> The other in Figure 2, where the value of 394 (receipts) ought to be an array:
> >>> 
> >>>      / receipts / 394 : {
> >>>        << ... >>
> >>>       }
> >>> 
> >>> 
> >>> Should be:
> >>> 
> >>>      / receipts / 394 : {         [ << ... >> ]
> >>>       }
> 
> 
> Current:
>     / receipts / 394 : [
>       <</ cose-sign1 / 18([
> 
> 
> 2) We believe that the use of # in the EDN (it was switched to “/" at one point) is intentional (so that an ending delimiter is not necessary).  Please review and confirm.  Related author communication summarized below for convenience:
> > Finally, several EDN snippets (Figures 2, 6 and 9) incorrectly use # comment, when the correct EDN syntax is / comment /. For example:
> > / algorithm / 1 : -7,  # ES256
> > 
> > 
> > Should be:
> > 
> > / algorithm / 1 : -7,  / ES256 /
> 
> However, later:
> 
> > Furthermore, the EDN is currently broken. An EDN comment that starts with a "/" must also end with a "/". Alternatively, at the end of a line a comment that starts with a "#" does not require an ending delimiter. I'd prefer using "#" when there is a comment at the end of a line.
> 
> 
> 
> 3) Please review the use of commas in the CDDL and let us know if any further changes are desired:
> 
> > Currently, all CDDL definitions use comma inconsistently. This not "wrong" but really bad style. In my opinion, we should get rid of all commas.
> 
> 
> 
> 4) Regarding the follow up questions we had sent April 14, we have made some related updates.  Please review and confirm the following:
> 
> -edited our previously suggested sentence to the Terminology section to remove “to-be-signed bytes”.
> -added a sentence to the Terminology section regarding the term “claim”.
> -updated the reference to RFC 9052 to instead point to STD 96 to match the previously accepted additional sentence to the Terminology section.
> -made the update described in (5) below.
> -still have the question described in (6) below.
> 
> Other than these issues, we believe all of our concerns from that mail have been resolved.
> 
> 5) Regarding this question/answer pair from April 14:
> 
> <!--[rfced] This sentence doesn't seem to parse.  Please rephrase.
> 
> Original:
> First the verifier applies the inclusion proof to a possible entry
> (set member) bytes.
> 
> -->
> 
> <!--[authors] We think the current sentence with the comma parses correctly.
> —>
> 
> This text still does not parse for us… Please review and approve our further update to the first sentence of Section 4.2.
> 
> Previous:
> 
>    Similar to COSE Key Type Parameters [IANA.cose_header-parameters],
>    for example EC2 keys (1: 2) require and give meaning to specific
>    parameters, such as -1 (crv), -2 (x), -3 (y), -4 (d).  
> Current:
>    As is the case for COSE Key Type Parameters
>    [IANA.cose_header-parameters], EC2 keys (1: 2) require and give
>    meaning to specific parameters, such as -1 (crv), -2 (x), -3 (y), and
>    -4 (d).  RFC9162_SHA256 (395: 1) supports both (-1) inclusion and
>    (-2) consistency proofs.
> 
> 6) Regarding the following query/response from April 14:
> 
> <!--[rfced] This sentence doesn't seem to parse.  Please rephrase.
> 
> Original:
> First the verifier applies the inclusion proof to a possible entry
> (set member) bytes.
> 
> -->
> <!--[authors] We think the current sentence with the comma parses correctly.
> -->
> 
> Can you let us know how “(set member) bytes" relates to the sentence?  If you remove the parenthetical, it would read as:
> 
> First the verifier applies the inclusion proof to a possible entry bytes.
> 
> Again, apologies for any confusion in the crossed mails/versions, but please review more carefully than usual and let us know if we’ve bundled anything here.
> 
> 
>   The files have been posted here (please refresh):
>    https://www.rfc-editor.org/authors/rfc9942.txt
>    https://www.rfc-editor.org/authors/rfc9942.pdf
>    https://www.rfc-editor.org/authors/rfc9942.html
>    https://www.rfc-editor.org/authors/rfc9942.xml
> 
>   The diff files have been posted here (please refresh):
>    https://www.rfc-editor.org/authors/rfc9942-diff.html (comprehensive)
>    https://www.rfc-editor.org/authors/rfc9942-rfcdiff.html (side by side)
> 
>    https://www.rfc-editor.org/authors/rfc9942-auth48diff.html (AUTH48 changes only)
>    https://www.rfc-editor.org/authors/rfc9942-auth48rfcdiff.html (side by side)
> 
>    https://www.rfc-editor.org/authors/rfc9942-lastdiff.html (last version to this)
>    https://www.rfc-editor.org/authors/rfc9942-lastrfcdiff.html (side by side)
> 
>   The Final Review page for this document is viewable at:
> 
> 
> Thank you.
> 
> Megan Ferguson 
> RFC Production Center
> 
> > On Jun 4, 2026, at 8:39 AM, Henk Birkholz <henk.birkholz@ietf.contact> wrote:
> > 
> > +1
> > 
> > this aligns with Carsten's input from April!
> > 
> > On 04.06.2026 16:36, Antoine Delignat-Lavaud wrote:
> >> Hi Megan,
> >> From our review we believe that all the changes I submitted in my previous XML are already in the Editor's XML https://auth48- transition.rfc-editor.org/authors/rfc9942.xml <https://auth48- transition.rfc-editor.org/authors/rfc9942.xml> so no further action is required from my submission.
> >> However, I agree that we should take the EDN changes from Orie in his email below (https://github.com/cose-wg/draft-ietf-cose-merkle-tree- proofs/blob/dbd7404d10765af013602e37743faf3a6dd8feb6/auth48/rfc9942.xml <https://github.com/cose-wg/draft-ietf-cose-merkle-tree-proofs/blob/ dbd7404d10765af013602e37743faf3a6dd8feb6/auth48/rfc9942.xml>) before closing the AUTH48 process.
> >> Best,
> >> Antoine
> >> ------------------------------------------------------------------------
> >> *From:* Orie <orie@or13.io>
> >> *Sent:* Thursday, June 4, 2026 13:55
> >> *To:* Megan Ferguson <mferguson@staff.rfc-editor.org>
> >> *Cc:* Henk Birkholz <henk.birkholz@ietf.contact>; Antoine Delignat- Lavaud <antdl@microsoft.com>; paul.wouters@aiven.io <paul.wouters@aiven.io>; Cedric Fournet <fournet@microsoft.com>; Yogesh Deshpande <yogesh.deshpande@arm.com>; stevenlasker@hotmail.com <stevenlasker@hotmail.com>; rfc-editor@rfc-editor.org <rfc-editor@rfc- editor.org>; cose-ads@ietf.org <cose-ads@ietf.org>; cose-chairs@ietf.org <cose-chairs@ietf.org>; ivaylopetrov@google.com <ivaylopetrov@google.com>; Amaury Chamayou <Amaury.Chamayou@microsoft.com>; scitt-ads@ietf.org <scitt- ads@ietf.org>; scitt-chairs@ietf.org <scitt-chairs@ietf.org>; Deb Cooley <debcooley1@gmail.com>; auth48archive@rfc-editor.org <auth48archive@rfc- editor.org>
> >> *Subject:* Re: [EXTERNAL] [AD] [C557] Cluster-Wide AUTH48 Questions: draft-ietf-cose-merkle-tree-proofs-18 (RFC-to-be 9942) and draft-ietf- scitt-architecture-22 (RFC-to-be 9943)
> >> Hi,
> >> I've corrected the broken examples here: https://github.com/cose-wg/ draft-ietf-cose-merkle-tree-proofs/blob/ dbd7404d10765af013602e37743faf3a6dd8feb6/auth48/rfc9942.xml <https:// github.com/cose-wg/draft-ietf-cose-merkle-tree-proofs/blob/ dbd7404d10765af013602e37743faf3a6dd8feb6/auth48/rfc9942.xml>
> >> Let me know if there is anything else I can help with.
> >> Regards,
> >> OS
> >> On Thu, Apr 23, 2026 at 5:42 PM Megan Ferguson <mferguson@staff.rfc- editor.org <mailto:mferguson@staff.rfc-editor.org>> wrote:
> >>    Hi Henk and Antoine,
> >>    Note that Antoine had submitted an XML file that we were wanting to
> >>    confirm was the intended file - we can fold the change described in
> >>    #1 of your message into that file once we receive confirmation it
> >>    was the intended file (or into a new XML file if Antoine sends it
> >>    (see our message sent 17 April for details)).
> >>    The change to fold in:
> >>    Old:
> >>    The following definition from [RFC8610] is provided:
> >>    New:
> >>    Figure 1 defines how Receipts are included in a COSE_Sign1 data item:
> >>    (We have updated our current file with the change in the meantime,
> >>    but making sure this is flagged and not lost in the mix.)
> >>    With regard to #2, as these updates to code may be beyond editorial,
> >>    we would prefer if the authors made these changes directly in the
> >>    XML file (available at the link below but with coordination with
> >>    Antoine’s XML version in mind).  These changes have NOT been made.
> >>    For #3, glad you were happy with the change :)
> >>    Below are links to our current versions of the file (not updated
> >>    with Antoine’s changes until we hear back on the above issue):
> >>       The files have been posted here (please refresh):
> >>    https://www.rfc-editor.org/authors/rfc9942.txt <https://www.rfc-
> >>    editor.org/authors/rfc9942.txt>
> >>    https://www.rfc-editor.org/authors/rfc9942.pdf <https://www.rfc-
> >>    editor.org/authors/rfc9942.pdf>
> >>    https://www.rfc-editor.org/authors/rfc9942.html <https://www.rfc-
> >>    editor.org/authors/rfc9942.html>
> >>    https://www.rfc-editor.org/authors/rfc9942.xml <https://www.rfc-
> >>    editor.org/authors/rfc9942.xml>
> >>       The files have been posted here (please refresh):
> >>    https://www.rfc-editor.org/authors/rfc9942-diff.html <https://
> >>    www.rfc-editor.org/authors/rfc9942-diff.html>
> >>    https://www.rfc-editor.org/authors/rfc9942-rfcdiff.html <https://
> >>    www.rfc-editor.org/authors/rfc9942-rfcdiff.html> (side by side)
> >>    https://www.rfc-editor.org/authors/rfc9942-auth48diff.html <https://
> >>    www.rfc-editor.org/authors/rfc9942-auth48diff.html>
> >>    https://www.rfc-editor.org/authors/rfc9942-auth48rfcdiff.html
> >>    <https://www.rfc-editor.org/authors/rfc9942-
> >>    auth48rfcdiff.html> (side by side)
> >>    https://www.rfc-editor.org/authors/rfc9942-lastdiff.html <https://
> >>    www.rfc-editor.org/authors/rfc9942-lastdiff.html>
> >>    https://www.rfc-editor.org/authors/rfc9942-lastrfcdiff.html
> >>    <https://www.rfc-editor.org/authors/rfc9942-lastrfcdiff.html> (side
> >>    by side)
> >>    The AUTH48 status page for this document is available here:
> >>    https://www.rfc-editor.org/auth48/rfc9942 <https://www.rfc-
> >>    editor.org/auth48/rfc9942>
> >>    The AUTH48 status page for this cluster is available here:
> >>    https://www.rfc-editor.org/auth48/C557 <https://www.rfc-editor.org/
> >>    auth48/C557>
> >>    Thank you.
> >>    Megan Ferguson
> >>    RFC Production Center
> >>     > On Apr 23, 2026, at 9:06 AM, Henk Birkholz
> >>    <henk.birkholz@ietf.contact> wrote:
> >>     >
> >>     > Hi Megan,
> >>     >
> >>     > from here on I am referring the the approved part (left) of this
> >>    link:
> >>     >
> >>     >> https://www.rfc-editor.org/authors/rfc9942-rfcdiff.html
> >>    <https://www.rfc-editor.org/authors/rfc9942-rfcdiff.html>
> >>     >
> >>     >
> >>     > (1) Introducing CDDL definitions
> >>     >
> >>     > "The following definition from [RFC8610] is provided:"
> >>     >
> >>     > is obviously wrong. Not sure where that happened on the way. Also
> >>    we should not use the passive here.
> >>     >
> >>     > This should say, e.g. "Figure 1 defines how Receipts are included
> >>    in a COSE_Sign1 data item:"
> >>     >
> >>     > The CDDL reference is already introduced somewhere above.
> >>     >
> >>     > (2) END in general
> >>     >
> >>     > Currently, all CDDL definitions use comma inconsistently. This
> >>    not "wrong" but really bad style. In my opinion, we should get rid
> >>    of all commas.
> >>     >
> >>     > Furthermore, the EDN is currently broken. An EDN comment that
> >>    starts with a "/" must also end with a "/". Alternatively, at the
> >>    end of a line a comment that starts with a "#" does not require an
> >>    ending delimiter. I'd prefer using "#" when there is a comment at
> >>    the end of a line.
> >>     >
> >>     > (3) In the EDN Figure 1
> >>     >
> >>     > The change from "{" to "[" is a nice catch. Thanks!
> >>     >
> >>     >
> >>     > Viele Grüße,
> >>     >
> >>     > Henk
> >>     >
> >>     >
> >>     > On 17.04.2026 20:16, Megan Ferguson wrote:
> >>     >> Hi Antoine,
> >>     >> Thanks for your reply.
> >>     >> I want to confirm that the XML attached is the one you were
> >>    meaning to send?
> >>     >> Asking because:
> >>     >> -Looks like the most recent changes we applied (sent 14 April)
> >>    were not included (e.g., the alphabetizing of the Terminology
> >>    section, etc.).
> >>     >> -Some other changes from previous versions seem to be reverted
> >>    (e.g., = /6.18(COSE_Sign1) has been changed back to #6.18(COSE_Sign1).
> >>     >> -We don’t see responses or action taken on our questions sent 14
> >>    April.
> >>     >> -There don’t seem to be new changes (most all of the things that
> >>    appear to have been changed have been touched before).
> >>     >> You can see a diff between the most recent version we had sent
> >>    on 14 April and the file you just sent at:
> >>     >> https://www.rfc-editor.org/authors/rfc9942question2-diff.html
> >>    <https://www.rfc-editor.org/authors/rfc9942question2-diff.html>
> >>     >> A diff between our 2nd-to-last version and the file you just
> >>    sent is viewable here:
> >>     >> https://www.rfc-editor.org/authors/rfc9942question1-diff.html
> >>    <https://www.rfc-editor.org/authors/rfc9942question1-diff.html>
> >>     >> Please let us know which of the following ways forward would
> >>    work best:
> >>     >> 1) This XML was sent in error, a new one will be submitted by
> >>    the authors.
> >>     >> 2) The mail just got crossed, the authors want the changes in
> >>    the RPC’s most recent version plus the updates (mostly revisions)
> >>    that were in the attached XML file (i.e., I can update our files to
> >>    include the changes highlighted in the second diff above). Note: if
> >>    this is the case, can you please also overtly respond to the
> >>    questions from 14 April so that we can close them out?
> >>     >> 3) The authors reject the changes in the RPC’s most recent
> >>    version and prefer the version in the most recent XML file instead.
> >>    Please also reply overtly to the questions so we can close them out.
> >>     >> Thanks!
> >>     >> Megan Ferguson
> >>     >> RFC Production Center
> >>     >>> On Apr 17, 2026, at 7:31 AM, Antoine Delignat-Lavaud
> >>    <antdl@microsoft.com <mailto:antdl@microsoft.com>> wrote:
> >>     >>>
> >>     >>> Dear Megan,
> >>     >>>
> >>     >>> Please find attached our latest corrections in XML. This
> >>    addresses all remaining editor comments and also corrects a few
> >>    additional editorial mistakes we found.
> >>     >>>
> >>     >>> I will send a separate update for 9943.
> >>     >>>
> >>     >>> Best,
> >>     >>> Antoine
> >>     >>> (on behalf of the authors)From: Megan Ferguson
> >>    <mferguson@staff.rfc-editor.org <mailto:mferguson@staff.rfc-editor.org>>
> >>     >>> Sent: Thursday, April 16, 2026 19:43
> >>     >>> To: Antoine Delignat-Lavaud <antdl@microsoft.com
> >>    <mailto:antdl@microsoft.com>>
> >>     >>> Cc: paul.wouters@aiven.io
> >>    <mailto:paul.wouters@aiven.io> <paul.wouters@aiven.io
> >>    <mailto:paul.wouters@aiven.io>>; orie@or13.io
> >>    <mailto:orie@or13.io> <orie@or13.io <mailto:orie@or13.io>>;
> >>    henk.birkholz@ietf.contact<henk.birkholz@ietf.contact>; Cedric
> >>    Fournet <fournet@microsoft.com <mailto:fournet@microsoft.com>>;
> >>    Yogesh Deshpande <yogesh.deshpande@arm.com
> >>    <mailto:yogesh.deshpande@arm.com>>; stevenlasker@hotmail.com
> >>    <mailto:stevenlasker@hotmail.com> <stevenlasker@hotmail.com
> >>    <mailto:stevenlasker@hotmail.com>>; rfc-editor@rfc-editor.org
> >>    <mailto:rfc-editor@rfc-editor.org> <rfc-editor@rfc-editor.org
> >>    <mailto:rfc-editor@rfc-editor.org>>; cose-ads@ietf.org <mailto:cose-
> >>    ads@ietf.org> <cose-ads@ietf.org <mailto:cose-ads@ietf.org>>; cose-
> >>    chairs@ietf.org <mailto:cose-chairs@ietf.org> <cose-chairs@ietf.org
> >>    <mailto:cose-chairs@ietf.org>>; ivaylopetrov@google.com
> >>    <mailto:ivaylopetrov@google.com> <ivaylopetrov@google.com
> >>    <mailto:ivaylopetrov@google.com>>; Amaury Chamayou
> >>    <Amaury.Chamayou@microsoft.com
> >>    <mailto:Amaury.Chamayou@microsoft.com>>; scitt-ads@ietf.org
> >>    <mailto:scitt-ads@ietf.org> <scitt-ads@ietf.org <mailto:scitt-
> >>    ads@ietf.org>>; scitt-chairs@ietf.org <mailto:scitt-
> >>    chairs@ietf.org> <scitt-chairs@ietf.org <mailto:scitt-
> >>    chairs@ietf.org>>; Deb Cooley <debcooley1@gmail.com
> >>    <mailto:debcooley1@gmail.com>>; auth48archive@rfc-editor.org
> >>    <mailto:auth48archive@rfc-editor.org> <auth48archive@rfc-editor.org
> >>    <mailto:auth48archive@rfc-editor.org>>
> >>     >>> Subject: Re: [EXTERNAL] [AD] [C557] Cluster-Wide AUTH48
> >>    Questions: draft-ietf-cose-merkle-tree-proofs-18 (RFC-to-be 9942)
> >>    and draft-ietf-scitt-architecture-22 (RFC-to-be 9943)
> >>     >>>  Hi Antoine,
> >>     >>>
> >>     >>> No problem!  Thanks for letting us know and we will wait to
> >>    hear from you.
> >>     >>>
> >>     >>> Megan Ferguson
> >>     >>> RFC Production Center
> >>     >>>
> >>     >>>> On Apr 16, 2026, at 11:05 AM, Antoine Delignat-Lavaud
> >>    <antdl@microsoft.com <mailto:antdl@microsoft.com>> wrote:
> >>     >>>>
> >>     >>>> Hi Megan,
> >>     >>>>
> >>     >>>> Many thanks for the extra feedback.
> >>     >>>>
> >>     >>>> We have a number of changes we are preparing following the
> >>    latest round of feedback that we will submit tomorrow. To avoid
> >>    conflicts we request that you hold off on further editing until we
> >>    have submitted the revisions.
> >>     >>>>
> >>     >>>> Best,
> >>     >>>> Antoine
> >>     >>>>
> >>     >>>> -----Original Message-----
> >>     >>>> From: Megan Ferguson <mferguson@staff.rfc-editor.org
> >>    <mailto:mferguson@staff.rfc-editor.org>>
> >>     >>>> Sent: 14 April 2026 21:52
> >>     >>>> To: Antoine Delignat-Lavaud <antdl@microsoft.com
> >>    <mailto:antdl@microsoft.com>>; paul.wouters@aiven.io
> >>    <mailto:paul.wouters@aiven.io>
> >>     >>>> Cc: orie@or13.io <mailto:orie@or13.io>;
> >>    henk.birkholz@ietf.contact; Cedric Fournet <fournet@microsoft.com
> >>    <mailto:fournet@microsoft.com>>; Yogesh Deshpande
> >>    <yogesh.deshpande@arm.com <mailto:yogesh.deshpande@arm.com>>;
> >>    stevenlasker@hotmail.com <mailto:stevenlasker@hotmail.com>; rfc-
> >>    editor@rfc-editor.org <mailto:rfc-editor@rfc-editor.org>; cose-
> >>    ads@ietf.org <mailto:cose-ads@ietf.org>; cose-chairs@ietf.org
> >>    <mailto:cose-chairs@ietf.org>; ivaylopetrov@google.com
> >>    <mailto:ivaylopetrov@google.com>; Amaury Chamayou
> >>    <Amaury.Chamayou@microsoft.com
> >>    <mailto:Amaury.Chamayou@microsoft.com>>; scitt-ads@ietf.org
> >>    <mailto:scitt-ads@ietf.org>; scitt-chairs@ietf.org <mailto:scitt-
> >>    chairs@ietf.org>; Deb Cooley <debcooley1@gmail.com
> >>    <mailto:debcooley1@gmail.com>>; auth48archive@rfc-editor.org
> >>    <mailto:auth48archive@rfc-editor.org>
> >>     >>>> Subject: [EXTERNAL] Re: [AD] [C557] Cluster-Wide AUTH48
> >>    Questions: draft-ietf-cose-merkle-tree-proofs-18 (RFC-to-be 9942)
> >>    and draft-ietf-scitt-architecture-22 (RFC-to-be 9943)
> >>     >>>>
> >>     >>>> Hi Antoine and *AD (*Paul),
> >>     >>>>
> >>     >>>> [*Paul - Would you please review and approve the removal of
> >>    text from Section 6 of RFC-to-be 9942?  ]
> >>     >>>>
> >>     >>>> Thank you for the updated file!
> >>     >>>>
> >>     >>>> We had some follow-up questions/comments for you to review:
> >>     >>>>
> >>     >>>> 1) We had asked about text additions to the Terminology section:
> >>     >>>>
> >>     >>>> a) Regarding the addition of the following to the Terminology
> >>    section:
> >>     >>>>
> >>     >>>>   The terms "header", "payload", and "to-be-signed bytes" are
> >>    defined
> >>     >>>>   in [STD96].
> >>     >>>>
> >>     >>>> We have updated to use the following (as to-be-signed bytes
> >>    does not appear in this document):
> >>     >>>>
> >>     >>>>   The terms “header" and "payload" are defined in [STD96].
> >>     >>>>
> >>     >>>> Note also that we ended up having to change the following
> >>    citation to RFC 9052, which is part of [STD96], and have updated the
> >>    References section to list STD 96 normatively and RFC 9052 only
> >>    within STD 96:
> >>     >>>>
> >>     >>>> Original:
> >>     >>>> A COSE Single Signer Data Object, as defined in [RFC9052],
> >>    containing the header parameters necessary to convey one or more VDP
> >>    for an associated VDS.
> >>     >>>>
> >>     >>>> Current:
> >>     >>>> A COSE Single Signer Data Object, as defined in RFC 9052
> >>    [STD96], containing the header parameters necessary to convey one or
> >>    more VDP for an associated VDS.
> >>     >>>>
> >>     >>>> Please let us know any objections/concerns.
> >>     >>>>
> >>     >>>> b) Please let us know if the following should also be added to
> >>    the Terminology section:
> >>     >>>>
> >>     >>>> The term "claim" is defined in [RFC8392].
> >>     >>>>
> >>     >>>> Note that RFC 8392 is already referenced.
> >>     >>>>
> >>     >>>> 2) Regarding the following query:
> >>     >>>>
> >>     >>>> <!--[rfced] This sentence doesn't parse.  Please let us know
> >>    how to
> >>     >>>>     update.
> >>     >>>>
> >>     >>>> Original:
> >>     >>>> ...such as -1 (crv), -2 (x), -3 (y), -4 (d), RFC9162_SHA256
> >>    (TBD_1 (requested assignment 395) : 1) supports both (-1) inclusion
> >>    and (-2) consistency proofs.
> >>     >>>> -->
> >>     >>>>
> >>     >>>> <!-- [authors] We have updated the sentence as follows for
> >>    clarity:
> >>     >>>>
> >>     >>>> ...for example EC2 keys (1: 2) require and give meaning to
> >>    specific parameters, such as -1 (crv), -2 (x), -3 (y), -4 (d).
> >>    RFC9162_SHA256 (395: 1) supports both (-1) inclusion and (-2)
> >>    consistency proofs.
> >>     >>>>
> >>     >>>> Please let us know if you have any further suggestions. —>
> >>     >>>>
> >>     >>>> [rfced] We believe the meaning of the text is that Proofs are
> >>    similar to COSE Key Type Parameters because for both of them, EC2
> >>    keys (1: 2) require and give meaning to specific parameters.  An
> >>    example of that being -1 (crv), -2 (x), -3 (y), and -4 (d).
> >>     >>>>
> >>     >>>> We have updated the text to fit the above; please see our
> >>    updates and let us know if the current text conveys your intended
> >>    meaning.
> >>     >>>>
> >>     >>>>
> >>     >>>> 3) Regarding the following query:
> >>     >>>>
> >>     >>>> <!--[rfced] This sentence doesn't seem to parse.  Please rephrase.
> >>     >>>>
> >>     >>>> Original:
> >>     >>>> First the verifier applies the inclusion proof to a possible
> >>    entry (set member) bytes.
> >>     >>>>
> >>     >>>> -->
> >>     >>>> <!--[authors] We think the current sentence with the comma
> >>    parses correctly.
> >>     >>>> -->
> >>     >>>>
> >>     >>>> Can you let us know how “(set member) bytes" relates to the
> >>    sentence?
> >>     >>>>
> >>     >>>>
> >>     >>>> The files below have been updated with all other requests.
> >>     >>>>
> >>     >>>> Please review carefully as we do not make changes once the
> >>    document is published as an RFC.
> >>     >>>>
> >>     >>>>  The files have been posted here (please refresh):
> >>     >>>> https://nam06.safelinks.protection.outlook.com/?
> >>    url=https%3A%2F%2Fwww.rfc-
> >>    editor.org%2Fauthors%2Frfc9942.txt&data=05%7C02%7Cantdl%40microsoft.com%7C050d698d1d9442ae2e0d08de9be822a8%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C639119618966148880%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=r4DIPKy4A51NEYLSt37ZLKv5EDL%2FxygdFTVBJ7s%2FZYw%3D&reserved=0 <https://www.rfc-editor.org/authors/rfc9942.txt>
> >>     >>>> https://nam06.safelinks.protection.outlook.com/?
> >>    url=https%3A%2F%2Fwww.rfc-
> >>    editor.org%2Fauthors%2Frfc9942.pdf&data=05%7C02%7Cantdl%40microsoft.com%7C050d698d1d9442ae2e0d08de9be822a8%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C639119618966204186%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=pF2Gd6Z6KsnvuMW6qbx8YPx33lbGRBjjAHFmCN8MsX8%3D&reserved=0 <https://www.rfc-editor.org/authors/rfc9942.pdf>
> >>     >>>> https://nam06.safelinks.protection.outlook.com/?
> >>    url=https%3A%2F%2Fwww.rfc-
> >>    editor.org%2Fauthors%2Frfc9942.html&data=05%7C02%7Cantdl%40microsoft.com%7C050d698d1d9442ae2e0d08de9be822a8%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C639119618966258528%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=%2FXaX%2BNva2Zt30IYNDPJzbCoqtKvwvNlCShmWv73AF3Q%3D&reserved=0 <https://www.rfc-editor.org/authors/rfc9942.html>
> >>     >>>> https://nam06.safelinks.protection.outlook.com/?
> >>    url=https%3A%2F%2Fwww.rfc-
> >>    editor.org%2Fauthors%2Frfc9942.xml&data=05%7C02%7Cantdl%40microsoft.com%7C050d698d1d9442ae2e0d08de9be822a8%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C639119618966292714%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=zlkgpxcvnhQPTm61ibjbUEPFbH1pK1VcxnwBeCCb1CQ%3D&reserved=0 <https://www.rfc-editor.org/authors/rfc9942.xml>
> >>     >>>>
> >>     >>>>  The diff files have been posted here (please refresh):
> >>     >>>> https://nam06.safelinks.protection.outlook.com/?
> >>    url=https%3A%2F%2Fwww.rfc-editor.org%2Fauthors%2Frfc9942-
> >>    diff.html&data=05%7C02%7Cantdl%40microsoft.com%7C050d698d1d9442ae2e0d08de9be822a8%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C639119618966319736%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=cMdRSjokKj8NkfdX6fRqq4%2F0rG%2BRARw3IirM%2FM40C8A%3D&reserved=0 <https://www.rfc-editor.org/authors/rfc9942-diff.html>
> >>     >>>> https://nam06.safelinks.protection.outlook.com/?
> >>    url=https%3A%2F%2Fwww.rfc-editor.org%2Fauthors%2Frfc9942-
> >>    rfcdiff.html&data=05%7C02%7Cantdl%40microsoft.com%7C050d698d1d9442ae2e0d08de9be822a8%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C639119618966339679%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=QdufwmRO4W9ZXPP75%2BP%2BBE2EuUBkgpaCai8Mke7TXHY%3D&reserved=0(side <https://www.rfc-editor.org/authors/rfc9942-rfcdiff.html> by side)
> >>     >>>> https://nam06.safelinks.protection.outlook.com/?
> >>    url=https%3A%2F%2Fwww.rfc-editor.org%2Fauthors%2Frfc9942-
> >>    auth48diff.html&data=05%7C02%7Cantdl%40microsoft.com%7C050d698d1d9442ae2e0d08de9be822a8%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C639119618966357832%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=h6OFjLIsSG0HRpnWtdVa425KYVLM1DIrPO6p6bzxErs%3D&reserved=0 <https://www.rfc-editor.org/authors/rfc9942-auth48diff.html>
> >>     >>>> https://nam06.safelinks.protection.outlook.com/?
> >>    url=https%3A%2F%2Fwww.rfc-editor.org%2Fauthors%2Frfc9942-
> >>    auth48rfcdiff.html&data=05%7C02%7Cantdl%40microsoft.com%7C050d698d1d9442ae2e0d08de9be822a8%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C639119618966377508%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=3%2BQy1%2BemdWPDD9FsVSeXNRYm3loUGcbJG5mKaxvPHKI%3D&reserved=0 <https://www.rfc-editor.org/authors/rfc9942-auth48rfcdiff.html> (side by side)
> >>     >>>> https://nam06.safelinks.protection.outlook.com/?
> >>    url=https%3A%2F%2Fwww.rfc-editor.org%2Fauthors%2Frfc9942-
> >>    lastdiff.html&data=05%7C02%7Cantdl%40microsoft.com%7C050d698d1d9442ae2e0d08de9be822a8%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C639119618966397952%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=Nz9zBQ5BinChOSCBs8AK8J2LmsGiNNJatNre%2F%2BEaiyg%3D&reserved=0 <https://www.rfc-editor.org/authors/rfc9942-lastdiff.html>
> >>     >>>> https://nam06.safelinks.protection.outlook.com/?
> >>    url=https%3A%2F%2Fwww.rfc-editor.org%2Fauthors%2Frfc9942-
> >>    lastrfcdiff.html&data=05%7C02%7Cantdl%40microsoft.com%7C050d698d1d9442ae2e0d08de9be822a8%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C639119618966417496%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=fmDfferopj6deReTsUs6CH%2FB7xdQYzkey%2F8aZkM9Qn0%3D&reserved=0(side <https://www.rfc-editor.org/authors/rfc9942-lastrfcdiff.html> by side)
> >>     >>>>
> >>     >>>> The AUTH48 status page for this document is available here:
> >>     >>>> https://nam06.safelinks.protection.outlook.com/?
> >>    url=https%3A%2F%2Fwww.rfc-
> >>    editor.org%2Fauth48%2Frfc9942&data=05%7C02%7Cantdl%40microsoft.com%7C050d698d1d9442ae2e0d08de9be822a8%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C639119618966436825%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=lmpG%2FPq5DZSUPpCVw5smdEnURPpul%2BA7qk8ZpxUfZtA%3D&reserved=0 <https://www.rfc-editor.org/auth48/rfc9942>
> >>     >>>>
> >>     >>>> The AUTH48 status page for this cluster is available here:
> >>     >>>> https://nam06.safelinks.protection.outlook.com/?
> >>    url=https%3A%2F%2Fwww.rfc-
> >>    editor.org%2Fauth48%2FC557&data=05%7C02%7Cantdl%40microsoft.com%7C050d698d1d9442ae2e0d08de9be822a8%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C639119618966458747%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=Za8iNKgbsahg2gNR2ip3ZzD2uD4xj1Y82qR2BT3C3fA%3D&reserved=0 <https://www.rfc-editor.org/auth48/C557>
> >>     >>>>
> >>     >>>> Thank you.
> >>     >>>>
> >>     >>>> Megan Ferguson
> >>     >>>> RFC Production Center
> >>     >>>>
> >>     >>>>
> >>     >>>>
> >>     >>>>> On Apr 14, 2026, at 8:52 AM, Antoine Delignat-Lavaud
> >>    <antdl@microsoft.com <mailto:antdl@microsoft.com>> wrote:
> >>     >>>>>
> >>     >>>>> Hi Megan,
> >>     >>>>>
> >>     >>>>> Many thanks for the updates. We have taken an additional pass
> >>    on the remaining questions and addressed them in further updates
> >>    that we have batched in the attached XML.
> >>     >>>>>
> >>     >>>>> We agree about the issues in Figure 2 and 6 that you pointed
> >>    out. In addition to the attached fix, we believe the fix for 394/
> >>    receipts format also requires a corresponding change to 9943 that I
> >>    will submit separately on the AUTH48 thread for 9943.
> >>     >>>>>
> >>     >>>>> Best,
> >>     >>>>> AntoineFrom: Megan Ferguson <mferguson@staff.rfc-editor.org
> >>    <mailto:mferguson@staff.rfc-editor.org>>
> >>     >>>>> Sent: Thursday, April 2, 2026 00:49
> >>     >>>>> To: orie@or13.io <mailto:orie@or13.io> <orie@or13.io
> >>    <mailto:orie@or13.io>>; henk.birkholz@ietf.contact
> >>     >>>>> <henk.birkholz@ietf.contact>; Antoine Delignat-Lavaud
> >>     >>>>> <antdl@microsoft.com <mailto:antdl@microsoft.com>>; Cedric
> >>    Fournet <fournet@microsoft.com <mailto:fournet@microsoft.com>>; Yogesh
> >>     >>>>> Deshpande <yogesh.deshpande@arm.com
> >>    <mailto:yogesh.deshpande@arm.com>>; stevenlasker@hotmail.com
> >>    <mailto:stevenlasker@hotmail.com>
> >>     >>>>> <stevenlasker@hotmail.com <mailto:stevenlasker@hotmail.com>>
> >>     >>>>> Cc: rfc-editor@rfc-editor.org <mailto:rfc-editor@rfc-
> >>    editor.org> <rfc-editor@rfc-editor.org <mailto:rfc-editor@rfc-
> >>    editor.org>>;
> >>     >>>>> cose-ads@ietf.org <mailto:cose-ads@ietf.org> <cose-
> >>    ads@ietf.org <mailto:cose-ads@ietf.org>>; cose-chairs@ietf.org
> >>    <mailto:cose-chairs@ietf.org>
> >>     >>>>> <cose-chairs@ietf.org <mailto:cose-chairs@ietf.org>>;
> >>    ivaylopetrov@google.com <mailto:ivaylopetrov@google.com>
> >>     >>>>> <ivaylopetrov@google.com <mailto:ivaylopetrov@google.com>>;
> >>    paul.wouters@aiven.io <mailto:paul.wouters@aiven.io>
> >>     >>>>> <paul.wouters@aiven.io <mailto:paul.wouters@aiven.io>>;
> >>    Amaury Chamayou
> >>     >>>>> <Amaury.Chamayou@microsoft.com
> >>    <mailto:Amaury.Chamayou@microsoft.com>>; scitt-ads@ietf.org
> >>    <mailto:scitt-ads@ietf.org>
> >>     >>>>> <scitt-ads@ietf.org <mailto:scitt-ads@ietf.org>>; scitt-
> >>    chairs@ietf.org <mailto:scitt-chairs@ietf.org> <scitt-
> >>    chairs@ietf.org <mailto:scitt-chairs@ietf.org>>;
> >>     >>>>> Deb Cooley <debcooley1@gmail.com <mailto:debcooley1@gmail.com>>;
> >>     >>>>> auth48archive@rfc-editor.org <mailto:auth48archive@rfc-
> >>    editor.org><auth48archive@rfc-editor.org <mailto:auth48archive@rfc-
> >>    editor.org>>
> >>     >>>>> Subject: [EXTERNAL] [C557] Cluster-Wide AUTH48 Questions:
> >>     >>>>> draft-ietf-cose-merkle-tree-proofs-18 (RFC-to-be 9942) and
> >>     >>>>> draft-ietf-scitt-architecture-22 (RFC-to-be 9943)  [You don't
> >>    often
> >>     >>>>> get email from mferguson@staff.rfc-editor.org
> >>    <mailto:mferguson@staff.rfc-editor.org>. Learn why this is
> >>     >>>>> important at https://aka.ms/LearnAboutSenderIdentification
> >>    <https://aka.ms/LearnAboutSenderIdentification> ]
> >>     >>>>>
> >>     >>>>> Cédric,
> >>     >>>>>
> >>     >>>>> Thank you for your reply and guidance regarding the cluster-
> >>    wide questions for both RFCs-to-be 9942 and 9943.  We have
> >>    implemented the majority of these changes as requested.
> >>     >>>>>
> >>     >>>>> Note that we have replied to our original cluster-wide mail
> >>    in order to ensure all participants from both documents see that the
> >>    responses have been received.  See the thread with subject line "Re:
> >>    [EXTERNAL] Re: AUTH48: RFC-to-be 9942 <draft-ietf-cose-merkle-tree-
> >>    proofs-18> for your review” for full response from Cédric).
> >>     >>>>>
> >>     >>>>> Some follow up questions/comments related to the cluster-wide
> >>     >>>>> questions exist below (marked with [rfced]).  We believe the
> >>     >>>>> follow-ups impact RFC-to-be 9942 only.  (Note that resolved
> >>    issues
> >>     >>>>> have been removed.)
> >>     >>>>>
> >>     >>>>> Note that further document-specific questions for RFC-to-be
> >>    9942 also exist; we have copied them at the end of this message for
> >>    your convenience.
> >>     >>>>>
> >>     >>>>>
> >>     >>>>>> 1) We had a number of questions related to the consistent
> >>    use of terminology throughout the cluster:
> >>     >>>>>>
> >>     >>>>>> b) Should the following similar forms be made uniform in
> >>    prose?  If so, please let us know which is preferred:
> >>     >>>>>>
> >>     >>>>>> COSE Header Parameter vs. COSE header parameter (see also other
> >>     >>>>>> header parameter instances without COSE)
> >>     >>>>>> Note: RFCs 9052/9053 use lowercase header parameter and
> >>    quotes for names (e.g., "alg" header parameter).  All uses of COSE
> >>    Header Parameter are in titles.
> >>     >>>>>> Yes, please use "COSE header parameter" outside of titles.
> >>     >>>>>
> >>     >>>>> [rfced] (Affects RFC-to-be 9942 only) We didn’t see a reply
> >>    to the second part of this question regarding putting parameter
> >>    names in double quotes.  We have updated the new header parameter
> >>    names to appear in lowercase with double quotes around them (e.g.,
> >>    “receipts” header parameter) to match RFC 9052/9053.  Please review
> >>    and let us know any objections.
> >>     >>>>>
> >>     >>>>>> Receipt vs. receipt
> >>     >>>>>> Note: RFC 9052 includes a single instance of the term
> >>    receipt that seems to be used in the general sense.
> >>     >>>>>> We would prefer to stay with "Receipt" to make it clear the
> >>    terminology definition applies, except in CBOR/CDDL labels, where
> >>    the prevailing convention is lowercase (therefore "receipt(s)”).
> >>     >>>>>
> >>     >>>>> [rfced] (We believe this affects RFC-to-be 9942 only - please
> >>    let us know if updates to RFC-to-be 9943 are also necessary) Please
> >>    let us know if/where any updates (preferably using Old/New) need to
> >>    be made related to CBOR/CDDL labels with regard to the term Receipt
> >>    vs. receipt.
> >>     >>>>>>
> >>     >>>>>> In addition, a reviewer has caught two mistakes.
> >>     >>>>>>
> >>     >>>>>> One in the examples of Figures 2 and 6, in which the
> >>    inclusion path should be an array to match the schema:
> >>     >>>>>>
> >>     >>>>>>              / inclusion / -1 : [
> >>     >>>>>>                <<[
> >>     >>>>>>                  / size / 6, / leaf / 5,
> >>     >>>>>>                  / inclusion path /
> >>     >>>>>>                  h'9352f974...4ffa7ce0',
> >>     >>>>>>                  h'54806f32...f007ea06'
> >>     >>>>>>                ]>>
> >>     >>>>>>
> >>     >>>>>>
> >>     >>>>>> Should be:
> >>     >>>>>>
> >>     >>>>>>              / inclusion / -1 : [
> >>     >>>>>>                <<[
> >>     >>>>>>                  / size / 6, / leaf / 5,
> >>     >>>>>>                  / inclusion path /
> >>     >>>>>>                  [ h'9352f974...4ffa7ce0',
> >>     >>>>>>                    h'54806f32...f007ea06' ]
> >>     >>>>>>                ]>>
> >>     >>>>>>
> >>     >>>>>>
> >>     >>>>>> In figure 2. And:
> >>     >>>>>>
> >>     >>>>>>        / inclusion / -1 : [
> >>     >>>>>>          <<[
> >>     >>>>>>            / size / 20, / leaf / 17,
> >>     >>>>>>            / inclusion path /
> >>     >>>>>>            h'fc9f050f...221c92cb',
> >>     >>>>>>            h'bd0136ad...6b28cf21',
> >>     >>>>>>            h'd68af9d6...93b1632b'
> >>     >>>>>>          ]>>
> >>     >>>>>>        ],
> >>     >>>>>>
> >>     >>>>>>
> >>     >>>>>> Should be:
> >>     >>>>>>
> >>     >>>>>>        / inclusion / -1 : [
> >>     >>>>>>          <<[
> >>     >>>>>>            / size / 20, / leaf / 17,
> >>     >>>>>>            / inclusion path /
> >>     >>>>>>            [ h'fc9f050f...221c92cb',
> >>     >>>>>>              h'bd0136ad...6b28cf21',
> >>     >>>>>>              h'd68af9d6...93b1632b' ]
> >>     >>>>>>          ]>>
> >>     >>>>>>        ],
> >>     >>>>>>
> >>     >>>>>>
> >>     >>>>>> In Figure 6.
> >>     >>>>>>
> >>     >>>>>> The other in Figure 2, where the value of 394 (receipts)
> >>    ought to be an array:
> >>     >>>>>>
> >>     >>>>>>      / receipts / 394 : {
> >>     >>>>>>        << ... >>
> >>     >>>>>>       }
> >>     >>>>>>
> >>     >>>>>>
> >>     >>>>>> Should be:
> >>     >>>>>>
> >>     >>>>>>      / receipts / 394 : {         [ << ... >> ]
> >>     >>>>>>       }
> >>     >>>>>>
> >>     >>>>> [rfced] (RFC-to-be 9942 only) Please review any updates to
> >>    code carefully as indentation or spacing may (accidentally) be
> >>    affected when copying and pasting.  We recommend using the rfcdiff
> >>    file to view whitespace changes.
> >>     >>>>>
> >>     >>>>>>
> >>     >>>>>>
> >>     >>>>>>    • In Section 4.2
> >>     >>>>>>
> >>     >>>>>> This document establishes a registry of verifiable data
> >>    structure
> >>     >>>>>> algorithm proofs, see Table 2 for details
> >>     >>>>>>
> >>     >>>>>> Should say:
> >>     >>>>>>
> >>     >>>>>> This document establishes a registry of verifiable data
> >>    structure
> >>     >>>>>> algorithm proofs, see Table 3 for details
> >>     >>>>>
> >>     >>>>> [rfced] (RFC-to-be 9942 only) Note that we have left this as
> >>    a pointer to the section (8.2.2.2) to match a similar sentence in
> >>    Section 4.1.  Please let us know if you would prefer them to both be
> >>    updated to point to the Tables themselves (i.e., Table 2 in Section
> >>    4.1 and Table 3 in Section 4.2).
> >>     >>>>>>
> >>     >>>>>> In addition, there are a couple of inconsistencies across
> >>    the CDDL snippets:
> >>     >>>>>>
> >>     >>>>>>    • There is a mix of cose.label/cose.value(s) and cose-
> >>    label/cose-value(s). Using the latter consistently would be preferable.
> >>     >>>>>
> >>     >>>>>>    • There is a mix of CDDL using comma-terminated lines
> >>    (eg. Signed_Consistency_Proof) and non comma-terminated (eg.
> >>    Signed_Inclusion_Proof). They are both valid CDDL, but using the
> >>    convention adopted in RFC9052 (comma termination) consistently would
> >>    be preferable.
> >>     >>>>>>
> >>     >>>>>> Finally, several EDN snippets (Figures 2, 6 and 9)
> >>    incorrectly use # comment, when the correct EDN syntax is /
> >>    comment /. For example:
> >>     >>>>>> / algorithm / 1 : -7,  # ES256
> >>     >>>>>>
> >>     >>>>>>
> >>     >>>>>> Should be:
> >>     >>>>>>
> >>     >>>>>> / algorithm / 1 : -7,  / ES256 /
> >>     >>>>>
> >>     >>>>> [rfced] (RFC-to-be 9942 only) Again, please carefully review
> >>    any updates we’ve made to code to ensure they appear as desired.
> >>     >>>>>
> >>     >>>>> One further question that arose for RFC-to-be 9942 in the
> >>    following:
> >>     >>>>>
> >>     >>>>> Current:
> >>     >>>>> This is the value used to identify the Verifiable Data
> >>    Structure Proof
> >>     >>>>> Type.
> >>     >>>>>
> >>     >>>>> Should this be read as VDS Proof Type or VDP Proof Type or
> >>    VDP type (overlap of Proof)?
> >>     >>>>>
> >>     >>>>> Please review our updates in the files posted below carefully
> >>    as we do not make updates once the documents are published as RFCs.
> >>     >>>>>
> >>     >>>>>  The files have been posted here (please refresh):
> >>     >>>>> https://nam06.safelinks.protection.outlook.com/?
> >>    url=https%3A%2F%2Fwww.rfc-
> >>    editor.org%2Fauthors%2Frfc9942.txt&data=05%7C02%7Cantdl%40microsoft.com%7C050d698d1d9442ae2e0d08de9be822a8%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C639119618966479166%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=0%2FnaMibmODHDM7p6EpYNrEypDp9UdF8qiSUB%2BQ4sQ%2F8%3D&reserved=0 <https://www.rfc-editor.org/authors/rfc9942.txt>
> >>     >>>>> https://nam06.safelinks.protection.outlook.com/?
> >>    url=https%3A%2F%2Fwww.rfc-
> >>    editor.org%2Fauthors%2Frfc9942.pdf&data=05%7C02%7Cantdl%40microsoft.com%7C050d698d1d9442ae2e0d08de9be822a8%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C639119618966498461%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=d564yTKBqQuoqsWadwv7a8GAU0pwZ7Wead%2FVucNDhMI%3D&reserved=0 <https://www.rfc-editor.org/authors/rfc9942.pdf>
> >>     >>>>> https://nam06.safelinks.protection.outlook.com/?
> >>    url=https%3A%2F%2Fwww.rfc-
> >>    editor.org%2Fauthors%2Frfc9942.html&data=05%7C02%7Cantdl%40microsoft.com%7C050d698d1d9442ae2e0d08de9be822a8%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C639119618966516633%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=sCcYHCSCfNE5rhigAlBiYqDw%2Bnzw2CrhNvsXPFzMyFk%3D&reserved=0 <https://www.rfc-editor.org/authors/rfc9942.html>
> >>     >>>>>
> >>     >>>>> https://www/ <https://www/>.
> >>     >>>>> rfc-editor.org <http://rfc-editor.org/
> >>     >%2Fauthors%2Frfc9942.xml&data=05%7C02%7Cantdl%40microsof
> >>     >>>>> t.com <http://t.com/
> >>     >%7Cdcfe6dabd4f641837df808de9a67b6dd%7C72f988bf86f141af91ab2d7cd01
> >>     >>>>>
> >>    1db47%7C1%7C0%7C639117967933259962%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1
> >>     >>>>>
> >>    hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUI
> >>     >>>>>
> >>    joyfQ%3D%3D%7C0%7C%7C%7C&sdata=mghfteDzbnRINFD04bWLb2867ZMSS6BlI%2FpgS
> >>     >>>>> mGlQLE%3D&reserved=0
> >>     >>>>>
> >>     >>>>>  The diff files have been posted here (please refresh):
> >>     >>>>> https://nam06.safelinks.protection.outlook.com/?
> >>    url=https%3A%2F%2Fwww.rfc-editor.org%2Fauthors%2Frfc9942-
> >>    diff.html&data=05%7C02%7Cantdl%40microsoft.com%7C050d698d1d9442ae2e0d08de9be822a8%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C639119618966534675%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=VVqmlCj9P4atZzeQ87%2FBjqGgwXb96rj9Air9B7Q2L8w%3D&reserved=0 <https://www.rfc-editor.org/authors/rfc9942-diff.html>
> >>     >>>>> https://nam06.safelinks.protection.outlook.com/?
> >>    url=https%3A%2F%2Fwww.rfc-editor.org%2Fauthors%2Frfc9942-
> >>    rfcdiff.html&data=05%7C02%7Cantdl%40microsoft.com%7C050d698d1d9442ae2e0d08de9be822a8%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C639119618966551383%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=wIeTYi90zSS9cANvolYbIOnCcjvnAsOzYrqraYGY5BE%3D&reserved=0 <https://www.rfc-editor.org/authors/rfc9942-rfcdiff.html> (side by side)
> >>     >>>>> https://nam06.safelinks.protection.outlook.com/?
> >>    url=https%3A%2F%2Fwww.rfc-editor.org%2Fauthors%2Frfc9942-
> >>    auth48diff.html&data=05%7C02%7Cantdl%40microsoft.com%7C050d698d1d9442ae2e0d08de9be822a8%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C639119618966570928%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=70TQXtKhS9scGNPiA1IYy6Axi72aB4WiwG3ILX4x4%2B0%3D&reserved=0 <https://www.rfc-editor.org/authors/rfc9942-auth48diff.html>
> >>     >>>>>
> >>     >>>>> https://www/ <https://www/>.
> >>     >>>>> rfc-editor.org <http://rfc-editor.org/>%2Fauthors%2Frfc9942-
> >>    auth48rfcdiff.html&data=05%7C02%7Ca
> >>     >>>>> ntdl%40microsoft.com <http://40microsoft.com/
> >>     >%7Cdcfe6dabd4f641837df808de9a67b6dd%7C72f988bf86f1
> >>     >>>>>
> >>    41af91ab2d7cd011db47%7C1%7C0%7C639117967933344410%7CUnknown%7CTWFpbGZs
> >>     >>>>>
> >>    b3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIj
> >>     >>>>>
> >>    oiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=NJnco6RugvGf9mCQrMTvIBm7
> >>     >>>>> 5rSWW3SESirynUFJheU%3D&reserved=0 (side by side)
> >>     >>>>>
> >>     >>>>> Note - please see the thread for RFC-to-be 9943 to view any
> >>    changes related to these cluster-wide questions as we have combined
> >>    the updates with those in response to the document-specific
> >>    questions we received.
> >>     >>>>>
> >>     >>>>> The document-specific questions for RFC-to-be 9942 are copied
> >>    below.  We will await your response to the follow-up questions and
> >>    document-specific questions for each document in this cluster before
> >>    moving forward in the publication process.
> >>     >>>>>
> >>     >>>>> The AUTH48 status page for RFC-to-be 9942 is viewable here:
> >>     >>>>>
> >>     >>>>> https://www/ <https://www/>.
> >>     >>>>> rfc-editor.org <http://rfc-editor.org/
> >>     >%2Fauth48%2Frfc9942&data=05%7C02%7Cantdl%40microsoft.com
> >>    <http://40microsoft.com/>
> >>     >>>>>
> >>    %7Cdcfe6dabd4f641837df808de9a67b6dd%7C72f988bf86f141af91ab2d7cd011db47
> >>     >>>>>
> >>    %7C1%7C0%7C639117967933364597%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGki
> >>     >>>>>
> >>    OnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ
> >>     >>>>>
> >>    %3D%3D%7C0%7C%7C%7C&sdata=YV6LHK1h8WupPZed0nA9YLZ0Bns%2FNri2KLJYpyZ7TO
> >>     >>>>> A%3D&reserved=0
> >>     >>>>>
> >>     >>>>> Further cluster information is viewable here:
> >>     >>>>>
> >>     >>>>> https://www/ <https://www/>.
> >>     >>>>> rfc-editor.org <http://rfc-editor.org/
> >>     >%2Fcluster_info.php%3Fcid%3DC557&data=05%7C02%7Cantdl%40
> >>     >>>>> microsoft.com <http://microsoft.com/
> >>     >%7Cdcfe6dabd4f641837df808de9a67b6dd%7C72f988bf86f141af91a
> >>     >>>>>
> >>    b2d7cd011db47%7C1%7C0%7C639117967933385568%7CUnknown%7CTWFpbGZsb3d8eyJ
> >>     >>>>>
> >>    FbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpb
> >>     >>>>>
> >>    CIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=Ztnb%2B8Pf7wdXY2UJZKlKxohciQVfn
> >>     >>>>> kvLyBAlZ2iYklI%3D&reserved=0
> >>     >>>>>
> >>     >>>>> Thank you.
> >>     >>>>>
> >>     >>>>> Megan Ferguson
> >>     >>>>> RFC Production Center
> >>     >>>>>
> >>     >>>>>>
> >>     >>>>>>
> >>     >>>>>> Subject: [EXTERNAL] Re: AUTH48: RFC-to-be 9942
> >>     >>>>>> <draft-ietf-cose-merkle-tree-proofs-18> for your review
> >>     >>>>>>
> >>     >>>>>> Authors,
> >>     >>>>>>
> >>     >>>>>> While reviewing this document during AUTH48, please resolve
> >>    (as necessary) the following questions, which are also in the source
> >>    file.
> >>     >>>>>>
> >>     >>>>>> 1) <!-- [rfced] Please note that the title of the document
> >>    has been
> >>     >>>>>>     updated as follows:
> >>     >>>>>>
> >>     >>>>>> a) We have flipped the abbreviation and expansion for COSE
> >>    to match
> >>     >>>>>> similar uses in past RFC titles.
> >>     >>>>>>
> >>     >>>>>> Original:
> >>     >>>>>> COSE (CBOR Object Signing and Encryption) Receipts
> >>     >>>>>>
> >>     >>>>>> Current:
> >>     >>>>>> CBOR Object Signing and Encryption (COSE) Receipts
> >>     >>>>>>
> >>     >>>>>> b) We have updated the "short title" (in the running header
> >>    of the
> >>     >>>>>> PDF
> >>     >>>>>> version) as follows:
> >>     >>>>>>
> >>     >>>>>> Original:
> >>     >>>>>> COSE (CBOR Object Signing and Encryption) Receipts
> >>     >>>>>>
> >>     >>>>>> Current:
> >>     >>>>>> COSE Receipts
> >>     >>>>>> -->
> >>     >>>>>>
> >>     >>>>>>
> >>     >>>>>> 2) <!-- [rfced] Please insert any keywords (beyond those
> >>    that appear
> >>     >>>>>> in the title) for use on
> >>     >>>>>> https://ww/ <https://ww/>
> >>     >>>>>> w.rfc-editor.org <http://w.rfc-editor.org/
> >>     >%2Fsearch&data=05%7C02%7Cantdl%40microsoft.com
> >>    <http://40microsoft.com/>%7Cdcf
> >>     >>>>>>
> >>    e6dabd4f641837df808de9a67b6dd%7C72f988bf86f141af91ab2d7cd011db47%7C1
> >>     >>>>>>
> >>    %7C0%7C639117967933405199%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOn
> >>     >>>>>>
> >>    RydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ
> >>     >>>>>>
> >>    %3D%3D%7C0%7C%7C%7C&sdata=zV3VFSc1LzeIRrm6mMfeThcuBArpvyasrJtWSg7o2B
> >>     >>>>>> 4%3D&reserved=0. -->
> >>     >>>>>>
> >>     >>>>>>
> >>     >>>>>> 3) <!--[rfced] We had the following questions related to the
> >>    Terminology
> >>     >>>>>>     section:
> >>     >>>>>>
> >>     >>>>>> a) Would you like the terms to be alphabetized for the ease
> >>    of the
> >>     >>>>>> reader?
> >>     >>>>>>
> >>     >>>>>> b) The Terminology section of draft-ietf-scitt-architecture
> >>    has a
> >>     >>>>>> sentence introducing terms from [STD96] in its Terminology
> >>    section
> >>     >>>>>> (see below) that are also used in this document.
> >>     >>>>>>
> >>     >>>>>> Original:
> >>     >>>>>>   The terms "header", "payload", and "to-be-signed bytes"
> >>    are defined
> >>     >>>>>>   in [STD96].
> >>     >>>>>>
> >>     >>>>>> Should this sentence (or something similar as "to-be-signed
> >>    bytes"
> >>     >>>>>> is not used in this document) be added along with a
> >>    reference to [STD96]?
> >>     >>>>>> (Same goes for the sentence in the companion document about the
> >>     >>>>>> definition of "claim".)
> >>     >>>>>>
> >>     >>>>>> If so, please let us know how/where to add as well as if the
> >>     >>>>>> reference entry would be normative or informative.
> >>     >>>>>>
> >>     >>>>>> c) We note that this document uses the following terms that are
> >>     >>>>>> defined in the Terminology section of
> >>     >>>>>> draft-ietf-scitt-architecture-22.  Should any pointers/
> >>    citations be
> >>     >>>>>> added to direct the reader to Section 3 of that document?
> >>     >>>>>>
> >>     >>>>>> envelope
> >>     >>>>>> non-equivocation
> >>     >>>>>> statement
> >>     >>>>>> transparency service
> >>     >>>>>>
> >>     >>>>>>
> >>     >>>>>> d) Please see our cluster-wide questions related to
> >>    discrepancies
> >>     >>>>>> between the definitions that appear in both documents in this
> >>     >>>>>> cluster and variances in their appearance (e.g.,
> >>    capitalization).
> >>     >>>>>>
> >>     >>>>>> -->
> >>     >>>>>>
> >>     >>>>>>
> >>     >>>>>> 4) <!--[rfced] This sentence doesn't parse.  Please let us
> >>    know how to
> >>     >>>>>>     update.
> >>     >>>>>>
> >>     >>>>>> Original:
> >>     >>>>>> ...such as -1 (crv), -2 (x), -3 (y), -4 (d), RFC9162_SHA256
> >>    (TBD_1
> >>     >>>>>> (requested assignment 395) : 1) supports both (-1) inclusion and
> >>     >>>>>> (-2) consistency proofs.
> >>     >>>>>> -->
> >>     >>>>>>
> >>     >>>>>>
> >>     >>>>>> 5) <!--[rfced] Please note that Figure 1 exceeds our
> >>    character limit in
> >>     >>>>>>     three places (line 319 is 5 characters over the
> >>    character limit).
> >>     >>>>>>     Please review how these lines could be broken to fit
> >>    within the
> >>     >>>>>>     69 character limit associated with sourcecode.
> >>     >>>>>>        -->
> >>     >>>>>>
> >>     >>>>>>
> >>     >>>>>> 6) <!--[rfced] We had two questions related to this
> >>    document's use of the
> >>     >>>>>>     term "SHA256":
> >>     >>>>>>
> >>     >>>>>> a) We note that the EDN provided in Section 4.3 uses RFC9162
> >>    SHA-256
> >>     >>>>>> while other uses of this term in prose use RFC9162_SHA256.     Please
> >>     >>>>>> confirm that this is as intended.
> >>     >>>>>>
> >>     >>>>>> b) We see both SHA256 and sha-256 in running text.  Should
> >>    these be
> >>     >>>>>> made uniform as SHA256?
> >>     >>>>>>
> >>     >>>>>> -->
> >>     >>>>>>
> >>     >>>>>>
> >>     >>>>>> 7) <!-- [rfced] We note that [RFC9162] uses "leaf_index"
> >>    rather than
> >>     >>>>>>     "leaf-index".  Please review and let us know if updates
> >>    should be
> >>     >>>>>>     made.
> >>     >>>>>>
> >>     >>>>>> Current:
> >>     >>>>>>  The term leaf-index is used for alignment with the use
> >>    established in
> >>     >>>>>>  Section 2.1.3.2 of [RFC9162].
> >>     >>>>>> -->
> >>     >>>>>>
> >>     >>>>>>
> >>     >>>>>> 8) <!-- [rfced] We note that [RFC9162] uses "Merkle Tree
> >>    Hash" rather
> >>     >>>>>>     than "Merkle tree hash".  Please note that there is
> >>    inconsistency
> >>     >>>>>>     in this document related to Merkle Tree vs. Merkle tree
> >>    as well.
> >>     >>>>>>
> >>     >>>>>> Current:
> >>     >>>>>>  The payload of an RFC9162_SHA256 inclusion proof signature
> >>    is the
> >>     >>>>>>  Merkle tree hash as defined in [RFC9162].
> >>     >>>>>> -->
> >>     >>>>>>
> >>     >>>>>>
> >>     >>>>>> 9) <!--[rfced] This sentence doesn't seem to parse.  Please
> >>    rephrase.
> >>     >>>>>>
> >>     >>>>>> Original:
> >>     >>>>>> First the verifier applies the inclusion proof to a possible
> >>    entry
> >>     >>>>>> (set member) bytes.
> >>     >>>>>>
> >>     >>>>>> -->
> >>     >>>>>>
> >>     >>>>>>
> >>     >>>>>> 10) <!--[rfced] Please review this text for clarity
> >>    (particularly for a
> >>     >>>>>>     missing verb after which?).
> >>     >>>>>>
> >>     >>>>>> Original:
> >>     >>>>>> If this process succeeds, the result is a Merkle root, which
> >>    in the
> >>     >>>>>> attached as the COSE Sign1 payload.
> >>     >>>>>> -->
> >>     >>>>>>
> >>     >>>>>>
> >>     >>>>>> 11) <!--[rfced] The following may require clarification:
> >>     >>>>>>
> >>     >>>>>> Current:
> >>     >>>>>>  The privacy considerations section of [RFC9162] and
> >>    [RFC9053] apply to
> >>     >>>>>>  this document.
> >>     >>>>>>
> >>     >>>>>> RFCs 9162 and 9053 do not have sections explicitly named
> >>    "Privacy
> >>     >>>>>> Considerations". RFC 9053 doesn't appear to contain the term
> >>     >>>>>> "privacy" at all.  Please review.
> >>     >>>>>> -->
> >>     >>>>>>
> >>     >>>>>>
> >>     >>>>>> 12) <!--[rfced] We had the following questions/comments
> >>    related to the
> >>     >>>>>>     IANA Considerations section:
> >>     >>>>>>
> >>     >>>>>> a) For clarity, we have updated the IANA Considerations
> >>    section by
> >>     >>>>>> breaking Section 8.2.2 up into subsections for each of the two
> >>     >>>>>> registries.  Please review this reorganization as well as any
> >>     >>>>>> pointers to it throughout the text to ensure we have correctly
> >>     >>>>>> maintained your intent.
> >>     >>>>>>
> >>     >>>>>> b) Please note that we have updated Tables 2 and 3 to
> >>    include the
> >>     >>>>>> Change Controller column as appears at the corresponding IANA
> >>     >>>>>> registries.  Please let us know any concerns.
> >>     >>>>>>
> >>     >>>>>> c) Note: Any updates to Section 2 and/or Tables 1-3 that
> >>    have been
> >>     >>>>>> made or resulting from author replies to our separate
> >>    terminology or
> >>     >>>>>> abbreviation queries that would impact the information actually
> >>     >>>>>> registered at
> >>     >>>>>> https://ww/ <https://ww/>
> >>     >>>>>> w.iana.org <http://w.iana.org/
> >>     >%2Fassignments%2Fcose%2Fcose.xhtml%23verifiable-data-struc
> >>     >>>>>> ture-algorithms&data=05%7C02%7Cantdl%40microsoft.com
> >>    <http://40microsoft.com/>%7Cdcfe6dabd4f64
> >>     >>>>>>
> >>    1837df808de9a67b6dd%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C639
> >>     >>>>>>
> >>    117967933424805%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYi
> >>     >>>>>>
> >>    OiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0
> >>     >>>>>>
> >>    %7C%7C%7C&sdata=sNzsRJzHbjTjioaKB48QaDOvdF1srGfB44dnkmboAZQ%3D&reser
> >>     >>>>>> ved=0 will be communicate to IANA by the RPC once AUTH48
> >>     >>>>>> completes.-->
> >>     >>>>>>
> >>     >>>>>>
> >>     >>>>>> 13)  <!--[rfced] We had the following questions/comments
> >>    related to
> >>     >>>>>>      abbreviations used throughout the document.
> >>     >>>>>>
> >>     >>>>>> a) FYI - We have added expansions for abbreviations upon
> >>    first use
> >>     >>>>>> per Section 3.6 of RFC 7322 ("RFC Style Guide").  Please
> >>    review each
> >>     >>>>>> expansion in the document carefully to ensure correctness.
> >>     >>>>>>
> >>     >>>>>> b) We would like to update to use an abbreviation (instead
> >>    of its
> >>     >>>>>> expanded form) after first use in accordance with the
> >>    guidance at
> >>     >>>>>> https://ww/ <https://ww/>
> >>     >>>>>> w.rfc-editor.org <http://w.rfc-editor.org/
> >>     >%2Fstyleguide%2Fpart2%2F%23exp_abbrev&data=05%7C02%7Cantdl%40microsoft.com <http://40microsoft.com/>%7Cdcfe6dabd4f641837df808de9a67b6dd%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C639117967933442934%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=FlAcTamXBVIZ7jGzQY4qfDlIYV8uIpEEdZIesb25l2I%3D&reserved=0 for the following abbreviations.  Please let us know any objections.
> >>     >>>>>>
> >>     >>>>>> VDS
> >>     >>>>>> VDP
> >>     >>>>>>
> >>     >>>>>> *Note: In the meantime, we have updated all uses in prose to be
> >>     >>>>>> capitalized for these two terms.  Please review the use of
> >>     >>>>>> "verifiable data structure" (in quotes): may this instance be
> >>     >>>>>> changed to VDS as well?
> >>     >>>>>>
> >>     >>>>>> **Note: We also see "verifiable data structure algorithm
> >>    proofs".
> >>     >>>>>> Could this be made "VDP algorithms"?
> >>     >>>>>>
> >>     >>>>>> c) Things get a bit messy when we look at the expansion of
> >>    VDP if
> >>     >>>>>> the expansion of "P" is plural "proofs".
> >>     >>>>>>
> >>     >>>>>> For example, in the following:
> >>     >>>>>>
> >>     >>>>>> Original:
> >>     >>>>>> This document describes how to convey VDS and associated VDP
> >>    types
> >>     >>>>>> in unified COSE envelopes.
> >>     >>>>>>
> >>     >>>>>> If we were to expand this, we'd get "verifiable data structure
> >>     >>>>>> proofs types" (with the double plurals).
> >>     >>>>>>
> >>     >>>>>> However, sometimes the -s on proof disappears when this was
> >>    expanded
> >>     >>>>>> in the text.
> >>     >>>>>>
> >>     >>>>>> For example:
> >>     >>>>>>
> >>     >>>>>> Original:
> >>     >>>>>> ..defining the integers used to identify verifiable data
> >>    structure
> >>     >>>>>> proof types...
> >>     >>>>>>
> >>     >>>>>> and
> >>     >>>>>>
> >>     >>>>>> Original:
> >>     >>>>>> A data structure which supports one or more Verifiable Data
> >>     >>>>>> Structure Proof Types.
> >>     >>>>>>
> >>     >>>>>> It's also a bit strange for it to be plural here:
> >>     >>>>>>
> >>     >>>>>> Original:
> >>     >>>>>> The combination of representations of various VDS and VDP can
> >>     >>>>>> significantly increase the burden for implementers and create
> >>     >>>>>> interoperability challenges for transparency services.
> >>     >>>>>>
> >>     >>>>>> Where we will have to make it "various VDSs and VDP" (the reader
> >>     >>>>>> will likely expect VDPs).
> >>     >>>>>>
> >>     >>>>>> Is it possible to update to use Verifiable Data Structure Proofs
> >>     >>>>>> (VDPs)?
> >>     >>>>>>
> >>     >>>>>>
> >>     >>>>>> -->
> >>     >>>>>>
> >>     >>>>>>
> >>     >>>>>> 14)  <!-- [rfced] See a list below of terms enclosed in <tt>
> >>    in this
> >>     >>>>>>      document.  Some of these terms appear both with and
> >>    without <tt>
> >>     >>>>>>      (alg, receipts, vdp, vds).  Please review to ensure the
> >>    usage of
> >>     >>>>>>      <tt> is correct and consistent.  Let us know if any
> >>    updates are
> >>     >>>>>>      needed.
> >>     >>>>>>
> >>     >>>>>> <tt>alg</tt>
> >>     >>>>>> <tt>exp</tt>
> >>     >>>>>> <tt>iat</tt>
> >>     >>>>>> <tt>leaf-index</tt>
> >>     >>>>>> <tt>nbf</tt>
> >>     >>>>>> <tt>receipts</tt>
> >>     >>>>>> <tt>tree-size</tt>
> >>     >>>>>> <tt>vdp</tt>
> >>     >>>>>> <tt>vds</tt>
> >>     >>>>>>
> >>     >>>>>> -->
> >>     >>>>>>
> >>     >>>>>>
> >>     >>>>>> 15) <!-- [rfced] Please review the "Inclusive Language"
> >>    portion of the
> >>     >>>>>>     online Style Guide
> >>     >>>>>>     <https://nam06.safelinks.protection.outlook.com/?
> >>    url=https%3A%2F%2Fwww.rfc-
> >>    editor.org%2Fstyleguide%2Fpart2%2F%23inclusive_language&data=05%7C02%7Cantdl%40microsoft.com%7C050d698d1d9442ae2e0d08de9be822a8%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C639119618966586519%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=tzAyeyC%2FeawpZPNfUdI7pVhtQPABSjeyi5dYraqXUls%3D&reserved=0 <https://www.rfc-editor.org/styleguide/part2/#inclusive_language>>
> >>     >>>>>>     and let us know if any changes are needed.  Updates of this
> >>     >>>>>>     nature typically result in more precise language, which is
> >>     >>>>>>     helpful for readers.
> >>     >>>>>>
> >>     >>>>>> Note that our script did not flag any words in particular,
> >>    but this
> >>     >>>>>> should still be reviewed as a best practice.
> >>     >>>>>>
> >>     >>>>>> -->
> >>     >>>>>>
> >>     >>>>>>
> >>     >>>>>> Thank you.
> >>     >>>>>>
> >>     >>>>>> Megan Ferguson
> >>     >>>>>> RFC Production Center
> >>     >>>>>>
> >>     >>>>>> *****IMPORTANT*****
> >>     >>>>>>
> >>     >>>>>> Updated 2026/03/06
> >>     >>>>>>
> >>     >>>>>> RFC Author(s):
> >>     >>>>>> --------------
> >>     >>>>>>
> >>     >>>>>> Instructions for Completing AUTH48
> >>     >>>>>>
> >>     >>>>>> Your document has now entered AUTH48.  Once it has been
> >>    reviewed and
> >>     >>>>>> approved by you and all coauthors, it will be published as
> >>    an RFC.
> >>     >>>>>> If an author is no longer available, there are several remedies
> >>     >>>>>> available as listed in the FAQ (https://
> >>    nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.rfc-
> >>    editor.org%2Ffaq%2F&data=05%7C02%7Cantdl%40microsoft.com%7C050d698d1d9442ae2e0d08de9be822a8%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C639119618966606408%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=ENkUmQhVN2%2BVtjmREbe8CMWw%2FiWsJCeDWo0iP3q1Vq4%3D&reserved=0 <https://www.rfc-editor.org/faq/>).
> >>     >>>>>>
> >>     >>>>>> You and you coauthors are responsible for engaging other parties
> >>     >>>>>> (e.g., Contributors or Working Group) as necessary before
> >>    providing
> >>     >>>>>> your approval.
> >>     >>>>>>
> >>     >>>>>> Planning your review
> >>     >>>>>> ---------------------
> >>     >>>>>>
> >>     >>>>>> Please review the following aspects of your document:
> >>     >>>>>>
> >>     >>>>>> *  RFC Editor questions
> >>     >>>>>>
> >>     >>>>>>   Please review and resolve any questions raised by the RFC
> >>    Editor
> >>     >>>>>>   that have been included in the XML file as comments marked as
> >>     >>>>>>   follows:
> >>     >>>>>>
> >>     >>>>>>   <!-- [rfced] ... -->
> >>     >>>>>>
> >>     >>>>>>   These questions will also be sent in a subsequent email.
> >>     >>>>>>
> >>     >>>>>> *  Changes submitted by coauthors
> >>     >>>>>>
> >>     >>>>>>   Please ensure that you review any changes submitted by your
> >>     >>>>>>   coauthors.  We assume that if you do not speak up that you
> >>     >>>>>>   agree to changes submitted by your coauthors.
> >>     >>>>>>
> >>     >>>>>> *  Content
> >>     >>>>>>
> >>     >>>>>>   Please review the full content of the document, as this cannot
> >>     >>>>>>   change once the RFC is published.  Please pay particular
> >>    attention to:
> >>     >>>>>>   - IANA considerations updates (if applicable)
> >>     >>>>>>   - contact information
> >>     >>>>>>   - references
> >>     >>>>>>
> >>     >>>>>> *  Copyright notices and legends
> >>     >>>>>>
> >>     >>>>>>   Please review the copyright notice and legends as defined in
> >>     >>>>>>   RFC 5378 and the Trust Legal Provisions
> >>     >>>>>>   (TLP – https://nam06.safelinks.protection.outlook.com/?
> >>    url=https%3A%2F%2Ftrustee.ietf.org%2Flicense-
> >>    info&data=05%7C02%7Cantdl%40microsoft.com%7C050d698d1d9442ae2e0d08de9be822a8%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C639119618966628254%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=3Z0WNOkjOgJdxMtVxG2cgsEE2c%2FAjGytSkjla8uMYEw%3D&reserved=0 <https://trustee.ietf.org/license-info>).
> >>     >>>>>>
> >>     >>>>>> *  Semantic markup
> >>     >>>>>>
> >>     >>>>>>   Please review the markup in the XML file to ensure that
> >>    elements of
> >>     >>>>>>   content are correctly tagged.  For example, ensure that
> >>    <sourcecode>
> >>     >>>>>>   and <artwork> are set correctly.  See details at
> >>     >>>>>>   <https://nam06.safelinks.protection.outlook.com/?
> >>    url=https%3A%2F%2Fauthors.ietf.org%2Frfcxml-
> >>    vocabulary&data=05%7C02%7Cantdl%40microsoft.com%7C050d698d1d9442ae2e0d08de9be822a8%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C639119618966649096%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=mq4RGj9NfnNfN%2Flk70qyMfIVYxvhd0WRavHU5MyTHYE%3D&reserved=0 <https://authors.ietf.org/rfcxml-vocabulary>>.
> >>     >>>>>>
> >>     >>>>>> *  Formatted output
> >>     >>>>>>
> >>     >>>>>>   Please review the PDF, HTML, and TXT files to ensure that the
> >>     >>>>>>   formatted output, as generated from the markup in the XML
> >>    file, is
> >>     >>>>>>   reasonable.  Please note that the TXT will have formatting
> >>     >>>>>>   limitations compared to the PDF and HTML.
> >>     >>>>>>
> >>     >>>>>>
> >>     >>>>>> Submitting changes
> >>     >>>>>> ------------------
> >>     >>>>>>
> >>     >>>>>> To submit changes, please reply to this email using ‘REPLY
> >>    ALL’ as
> >>     >>>>>> all the parties CCed on this message need to see your
> >>    changes. The
> >>     >>>>>> parties
> >>     >>>>>> include:
> >>     >>>>>>
> >>     >>>>>>   *  your coauthors
> >>     >>>>>>
> >>     >>>>>>   * rfc-editor@rfc-editor.org <mailto:rfc-editor@rfc-
> >>    editor.org> (the RPC team)
> >>     >>>>>>
> >>     >>>>>>   *  other document participants, depending on the stream (e.g.,
> >>     >>>>>>      IETF Stream participants are your working group chairs, the
> >>     >>>>>>      responsible ADs, and the document shepherd).
> >>     >>>>>>
> >>     >>>>>>   * auth48archive@rfc-editor.org <mailto:auth48archive@rfc-
> >>    editor.org>, which is a new archival mailing list
> >>     >>>>>>      to preserve AUTH48 conversations; it is not an active
> >>    discussion
> >>     >>>>>>      list:
> >>     >>>>>>
> >>     >>>>>>     *  More info:
> >>     >>>>>>
> >>     >>>>>> https://ma/ <https://ma/>
> >>     >>>>>> ilarchive.ietf.org <http://ilarchive.ietf.org/
> >>     >%2Farch%2Fmsg%2Fietf-announce%2Fyb6lpIGh-4Q9l2USxI
> >>     >>>>>> Ae6P8O4Zc&data=05%7C02%7Cantdl%40microsoft.com
> >>    <http://40microsoft.com/>%7Cdcfe6dabd4f641837df
> >>     >>>>>>
> >>    808de9a67b6dd%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C639117967
> >>     >>>>>>
> >>    933523144%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLj
> >>     >>>>>>
> >>    AuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C
> >>     >>>>>>
> >>    %7C&sdata=AO1dwmJfnFANnE0FZEedZD4KJ7nG3d0wQQ0LtYNOZdA%3D&reserved=0
> >>     >>>>>>
> >>     >>>>>>     *  The archive itself:
> >>     >>>>>>
> >>     >>>>>> https://ma/ <https://ma/>
> >>     >>>>>> ilarchive.ietf.org <http://ilarchive.ietf.org/
> >>     >%2Farch%2Fbrowse%2Fauth48archive%2F&data=05%7C02%7
> >>     >>>>>> Cantdl%40microsoft.com <http://40microsoft.com/
> >>     >%7Cdcfe6dabd4f641837df808de9a67b6dd%7C72f988bf
> >>     >>>>>>
> >>    86f141af91ab2d7cd011db47%7C1%7C0%7C639117967933540368%7CUnknown%7CTW
> >>     >>>>>>
> >>    FpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMi
> >>     >>>>>>
> >>    IsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=49r8yM4AczDKOe
> >>     >>>>>> uU53PknXmrIVsu%2BPIkfgzt13FjSu4%3D&reserved=0
> >>     >>>>>>
> >>     >>>>>>     *  Note: If only absolutely necessary, you may
> >>    temporarily opt out
> >>     >>>>>>        of the archiving of messages (e.g., to discuss a
> >>    sensitive matter).
> >>     >>>>>>        If needed, please add a note at the top of the
> >>    message that you
> >>     >>>>>>        have dropped the address. When the discussion is
> >>    concluded,
> >>     >>>>>> auth48archive@rfc-editor.org <mailto:auth48archive@rfc-
> >>    editor.org> will be re-added to the CC list and
> >>     >>>>>>        its addition will be noted at the top of the message.
> >>     >>>>>>
> >>     >>>>>> You may submit your changes in one of two ways:
> >>     >>>>>>
> >>     >>>>>> An update to the provided XML file
> >>     >>>>>> — OR —
> >>     >>>>>> An explicit list of changes in this format
> >>     >>>>>>
> >>     >>>>>> Section # (or indicate Global)
> >>     >>>>>>
> >>     >>>>>> OLD:
> >>     >>>>>> old text
> >>     >>>>>>
> >>     >>>>>> NEW:
> >>     >>>>>> new text
> >>     >>>>>>
> >>     >>>>>> You do not need to reply with both an updated XML file and an
> >>     >>>>>> explicit list of changes, as either form is sufficient.
> >>     >>>>>>
> >>     >>>>>> We will ask a stream manager to review and approve any
> >>    changes that
> >>     >>>>>> seem beyond editorial in nature, e.g., addition of new text,
> >>     >>>>>> deletion of text, and technical changes.  Information about
> >>    stream
> >>     >>>>>> managers can be found in the FAQ.  Editorial changes do not
> >>    require approval from a stream manager.
> >>     >>>>>>
> >>     >>>>>>
> >>     >>>>>> Approving for publication
> >>     >>>>>> --------------------------
> >>     >>>>>>
> >>     >>>>>> To approve your RFC for publication, please reply to this email
> >>     >>>>>> stating that you approve this RFC for publication.  Please use
> >>     >>>>>> ‘REPLY ALL’, as all the parties CCed on this message need to
> >>    see your approval.
> >>     >>>>>>
> >>     >>>>>>
> >>     >>>>>> Files
> >>     >>>>>> -----
> >>     >>>>>>
> >>     >>>>>> The files are available here:
> >>     >>>>>> https://nam06.safelinks.protection.outlook.com/?
> >>    url=https%3A%2F%2Fwww.rfc-
> >>    editor.org%2Fauthors%2Frfc9942.xml&data=05%7C02%7Cantdl%40microsoft.com%7C050d698d1d9442ae2e0d08de9be822a8%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C639119618966673791%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=wE17aWJCxEFrgMjER9Re7ALRq8TJ9Wtw6G4g4i%2B%2FaTU%3D&reserved=0 <https://www.rfc-editor.org/authors/rfc9942.xml>
> >>     >>>>>> https://nam06.safelinks.protection.outlook.com/?
> >>    url=https%3A%2F%2Fwww.rfc-
> >>    editor.org%2Fauthors%2Frfc9942.html&data=05%7C02%7Cantdl%40microsoft.com%7C050d698d1d9442ae2e0d08de9be822a8%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C639119618966696945%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=U16XsgfdOvDTgsuxJvWKEaAjvy00xIzc%2FB1EkcFubmE%3D&reserved=0 <https://www.rfc-editor.org/authors/rfc9942.html>
> >>     >>>>>> https://nam06.safelinks.protection.outlook.com/?
> >>    url=https%3A%2F%2Fwww.rfc-
> >>    editor.org%2Fauthors%2Frfc9942.pdf&data=05%7C02%7Cantdl%40microsoft.com%7C050d698d1d9442ae2e0d08de9be822a8%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C639119618966717085%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=Eg0m5dTLAddo8oatk2UbMAA99XWKGA8TpPrgX51DuaE%3D&reserved=0 <https://www.rfc-editor.org/authors/rfc9942.pdf>
> >>     >>>>>>
> >>     >>>>>> https://ww/ <https://ww/>
> >>     >>>>>> w.rfc-editor.org <http://w.rfc-editor.org/
> >>     >%2Fauthors%2Frfc9942.txt&data=05%7C02%7Cantdl%40micr
> >>     >>>>>> osoft.com <http://osoft.com/
> >>     >%7Cdcfe6dabd4f641837df808de9a67b6dd%7C72f988bf86f141af91ab2
> >>     >>>>>>
> >>    d7cd011db47%7C1%7C0%7C639117967933610534%7CUnknown%7CTWFpbGZsb3d8eyJ
> >>     >>>>>>
> >>    FbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWF
> >>     >>>>>>
> >>    pbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=0Xs8fRQn%2F9s%2FKR4KKOb3t3s
> >>     >>>>>> MkwrQeOsS50MxigL29u4%3D&reserved=0
> >>     >>>>>>
> >>     >>>>>> Diff file of the text:
> >>     >>>>>> https://nam06.safelinks.protection.outlook.com/?
> >>    url=https%3A%2F%2Fwww.rfc-editor.org%2Fauthors%2Frfc9942-
> >>    diff.html&data=05%7C02%7Cantdl%40microsoft.com%7C050d698d1d9442ae2e0d08de9be822a8%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C639119618966736976%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=ZJ73QiU002PuLoS5cEM84LopcvrhxZklzKdZLd1l6Ws%3D&reserved=0 <https://www.rfc-editor.org/authors/rfc9942-diff.html>
> >>     >>>>>>
> >>     >>>>>> https://ww/ <https://ww/>
> >>     >>>>>> w.rfc-editor.org <http://w.rfc-editor.org/
> >>     >%2Fauthors%2Frfc9942-rfcdiff.html&data=05%7C02%7Cant
> >>     >>>>>> dl%40microsoft.com <http://40microsoft.com/
> >>     >%7Cdcfe6dabd4f641837df808de9a67b6dd%7C72f988bf86f1
> >>     >>>>>>
> >>    41af91ab2d7cd011db47%7C1%7C0%7C639117967933637548%7CUnknown%7CTWFpbG
> >>     >>>>>>
> >>    Zsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIk
> >>     >>>>>>
> >>    FOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=4JkPMy%2FiIdR3z4AO
> >>     >>>>>> xDm9Z%2FFakeBp9aglNClQjCRfQc8%3D&reserved=0 (side by side)
> >>     >>>>>>
> >>     >>>>>> Diff of the XML:
> >>     >>>>>>
> >>     >>>>>> https://ww/ <https://ww/>
> >>     >>>>>> w.rfc-editor.org <http://w.rfc-editor.org/
> >>     >%2Fauthors%2Frfc9942-xmldiff1.html&data=05%7C02%7Can
> >>     >>>>>> tdl%40microsoft.com <http://40microsoft.com/
> >>     >%7Cdcfe6dabd4f641837df808de9a67b6dd%7C72f988bf86f
> >>     >>>>>>
> >>    141af91ab2d7cd011db47%7C1%7C0%7C639117967933653396%7CUnknown%7CTWFpb
> >>     >>>>>>
> >>    GZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsI
> >>     >>>>>>
> >>    kFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=y3%2FCQOq%2FC4kWF
> >>     >>>>>> %2BOKUOXlf2g4DRYowG4BNqUSl9xehWI%3D&reserved=0
> >>     >>>>>>
> >>     >>>>>>
> >>     >>>>>> Tracking progress
> >>     >>>>>> -----------------
> >>     >>>>>>
> >>     >>>>>> The details of the AUTH48 status of your document are here:
> >>     >>>>>>
> >>     >>>>>> https://ww/ <https://ww/>
> >>     >>>>>> w.rfc-editor.org <http://w.rfc-editor.org/
> >>     >%2Fauth48%2Frfc9942&data=05%7C02%7Cantdl%40microsoft
> >>     >>>>>> .com%7Cdcfe6dabd4f641837df808de9a67b6dd%7C72f988bf86f141af91ab2d7cd0
> >>     >>>>>>
> >>    11db47%7C1%7C0%7C639117967933672481%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0
> >>     >>>>>>
> >>    eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIs
> >>     >>>>>>
> >>    IldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=znCCRuGuMv8k2jGpXl1kM3BP2OMX32kE
> >>     >>>>>> KcPjcdcsu84%3D&reserved=0
> >>     >>>>>>
> >>     >>>>>> Please let us know if you have any questions.
> >>     >>>>>>
> >>     >>>>>> Thank you for your cooperation,
> >>     >>>>>>
> >>     >>>>>> RFC Editor
> >>     >>>>>>
> >>     >>>>>> --------------------------------------
> >>     >>>>>> RFC9942 (draft-ietf-cose-merkle-tree-proofs-18)
> >>     >>>>>>
> >>     >>>>>> Title            : COSE (CBOR Object Signing and Encryption)
> >>    Receipts
> >>     >>>>>> Author(s)        : O. Steele, H. Birkholz, A. Delignat-
> >>    Lavaud, C. Fournet
> >>     >>>>>> WG Chair(s)      : Ivaylo Petrov, Michael B. Jones
> >>     >>>>>>
> >>     >>>>>> Area Director(s) : Deb Cooley, Paul Wouters
> >>     >>>>> <rfc9942.xml>
> >>     >>>>
> >>     >>>
> >>     >>> <rfc9942.xml>
> >>     >
> > 
>