Re: [core] [CoRE] Working Group Last Call (WGLC) of draft-ietf-core-target-attr-01

[Esko Dijk <[e-mail]>]

Hi all,

I also reviewed and the document looks almost complete.

Two suggested fixes:

Section 5 of [RFC8075]
-->  Section 5.5 of [RFC8075]

"-- Carsten"
-->  this was probably meant to be removed ;)

And one question on "security considerations": should the designated expert perform any security-related review task? If yes, we should describe it. If not, we may clarify that's up to the requester to consider.
As an extreme example if someone wants to register an attribute "password" that stores a plain-text password for access to certain resources.  It may be ok if the link format is accessed over (D)TLS.
If the targeted use is in plain unsecured discovery, it may not be a good idea. Should the expert consider this and maybe other security aspects?

Regards
Esko


From: core <[e-mail]> On Behalf Of Thomas Fossati
Sent: Tuesday, February 14, 2023 14:01
To: Marco Tiloca <marco.tiloca=[e-mail]>; [e-mail]
Subject: Re: [core] [CoRE] Working Group Last Call (WGLC) of draft-ietf-core-target-attr-01

Hi Marco, all,

The document is in great shape (*), all seems very reasonable and well thought out.
I support moving it forward - and adjusting the registrations depending on the relative speed of the OSCORE drafts.

Cheers, thanks!

(*) Apart from a couple of editorial nits in the Introduction:
- The redundant "(Please see abstract.)"
- A not very well anchored parenthetical "(See also Section 2, Paragraph 2.)" that's not clear about what the reader is expected to find in the referenced text.



On 14/02/2023, 11:22, "core" <[e-mail]<mailto:[e-mail]>> wrote:

Dear all,

This email starts a Working Group Last Call for the document:

https://www.ietf.org/archive/id/draft-ietf-core-target-attr-01.html
(CoRE Target Attribute Registry)

The document status can be found at:
https://datatracker.ietf.org/doc/draft-ietf-core-target-attr/

Please provide your comments and feedback by Tuesday, 2023-02-28 to [e-mail]<mailto:[e-mail]> or, exceptionally, to [e-mail]<mailto:[e-mail]>.
Having the feedback on the mailing list will allow us to discuss the results at the CoRE interim meeting on 2023-03-01.

Note that it may be the easiest way to submit editorial nits etc. as pull requests at the working group repository https://github.com/core-wg/core-target-attr

Best,
/Marco

--

Marco Tiloca

Ph.D., Senior Researcher



Phone: [phone]



RISE Research Institutes of Sweden AB

Box 1263

164 29 Kista (Sweden)



Division: Digital Systems

Department: Computer Science

Unit: Cybersecurity



https://www.ri.se
IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you.