[core] Review of draft-tiloca-core-oscore-discovery-05

[Jim Schaad <[e-mail]>]

*  Consistently through this document you refer to an OSCORE group, however
the groupcom-bis document talks about a security group.  At some point these
need to be related.  Should you just be talking about security groups?

* Why do you believe that the group manager is going to know what
application groups are associated with any given OSCORE group.   I don't
believe that this information is being specified anyplace as being provided
to the GM.  Does it make sense to register the three different groups that
are from the bis document and make things flow the way one would expect from
a device point of view  Application Group => Security Group, Application
Group=> CoAP Group.  I assume that both clients and servers are going to
know they want to deal with a specific application and start from there.  I
don't know what an application itself as a root node would look like in the
RD.

* I do not understand "Values registered as a string that look like an
integer are not supported".  I need an example for what you are talking
about.  I would have expected that alg=-2 and alg="-2" would both be legal,
but "-2" is a required to be supported since it is a text string per the
definition above.

* I need to get some help.  What is the difference, both theoretical and
factual, between the if= and rt= links.  How much of this should be if= vs
rt= because it is common amount all expected group managers as oppose to
just the Ace group manager.

* In the example in section 3.1 - I don't know that the GM should be the one
registering the "rel" links here.  That should be up to the endpoint
instead.  Perhaps break this up into a POST and a GET?

* In section 5, I believe that the registration of the endpoints is
incorrect.  You are doing this in two steps, but the first registration is
going to be replaced not augmented by the second registration.  You need to
do a single registration here.

* In section 5 - It seems relatively obvious how you deal with an OSCORE
group having multiple applications, but I think you need to have some
discussions on how you deal with an application which has multiple OSCORE
groups in it.

Jim