[core] Secdir last call review of draft-ietf-core-links-json-07

Paul Wouters <paul@nohats.ca> Fri, 21 April 2017 23:55 UTC

Return-Path: <paul@nohats.ca>
X-Original-To: core@ietf.org
Delivered-To: core@ietfa.amsl.com
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 14C2E129564; Fri, 21 Apr 2017 16:55:19 -0700 (PDT)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: Paul Wouters <paul@nohats.ca>
To: secdir@ietf.org
Cc: ietf@ietf.org, core@ietf.org, draft-ietf-core-links-json.all@ietf.org
X-Test-IDTracker: no
X-IETF-IDTracker: 6.50.0
Auto-Submitted: auto-generated
Precedence: bulk
Message-ID: <149281891905.25803.486183286884921759@ietfa.amsl.com>
Date: Fri, 21 Apr 2017 16:55:19 -0700
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/wijQXjny1XVCFCEYpqGCqKHZ2A4>
Subject: [core] Secdir last call review of draft-ietf-core-links-json-07
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.22
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 21 Apr 2017 23:55:19 -0000

Reviewer: Paul Wouters
Review result: Ready

I have reviewed this document as part of the security directorate's 
ongoing effort to review all IETF documents being processed by the 
IESG.  These comments were written primarily for the benefit of the 
security area directors.  Document editors and WG chairs should treat

these comments just like any other last call comments.

Concise Binary  Object Representation, CBOR (RFC7049) is a binary data
format
of JSON optimized for IoT. This document describes the JSON and CBOR
formats of the CoRE link format of RFC-6690.

The document's security section refers to the security sections of the
respective
formats' RFCs,  [RFC6690], [RFC7049] and [RFC7159]. These describe the
various
issues well. This document introduces no new issues that require
further
security considerations.