[AVTCORE] draft-ietf-avtcore-rtp-security-options-06 review

["Peck, Michael A" <[e-mail]>]

Hi,

I reviewed draft-ietf-avtcore-rtp-security-options-06.  It looks good, I have a few minor comments.

Section 3.1:
I suggest removing the phrase "…and NSA Suite B included cryptographic transforms." from the "AES-192 and AES-256:" paragraph.
The RFC6188 crypto suites are technically not Suite B compliant because they use HMAC-SHA1 for authentication, and SHA-1 is not part of Suite B.

Section 3.3:
Another downside of IPsec perhaps worth pointing out is that if it's relied upon instead of a higher layer mechanism, information about the authenticated identities of the endpoints, or an indication of whether encryption is even in place at all, are generally not available at the application layer to present through the user interface.

Editorial comments:

Introduction:
"so it worth" -> "so it is worth"

3.6:
"such the fact" -> "such as the fact"