[COSE] draft-ietf-cose-hash-envelope-08 ietf last call Genart review

Linda Dunbar via Datatracker <noreply@ietf.org> Wed, 22 October 2025 18:54 UTC

Return-Path: <noreply@ietf.org>
X-Original-To: cose@ietf.org
Delivered-To: cose@mail2.ietf.org
Received: from [10.244.8.84] (unknown [4.156.85.76]) by mail2.ietf.org (Postfix) with ESMTP id 664077A7DEC9; Wed, 22 Oct 2025 11:54:45 -0700 (PDT)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 8bit
From: Linda Dunbar via Datatracker <noreply@ietf.org>
To: gen-art@ietf.org
X-Test-IDTracker: no
X-IETF-IDTracker: 12.51.0
Auto-Submitted: auto-generated
Precedence: bulk
Message-ID: <176115928531.121398.10192460124206986478@dt-datatracker-675c8fd764-bsflw>
Date: Wed, 22 Oct 2025 11:54:45 -0700
Message-ID-Hash: BSWJQE72FB7VPWHVOUWPJAMYLN3XADZD
X-Message-ID-Hash: BSWJQE72FB7VPWHVOUWPJAMYLN3XADZD
X-MailFrom: noreply@ietf.org
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-cose.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: cose@ietf.org, draft-ietf-cose-hash-envelope.all@ietf.org, last-call@ietf.org
X-Mailman-Version: 3.3.9rc6
Reply-To: Linda Dunbar <linda.dunbar@futurewei.com>
Subject: [COSE] draft-ietf-cose-hash-envelope-08 ietf last call Genart review
List-Id: CBOR Object Signing and Encryption <cose.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/cose/MDD2sWlzjl_ZRnlQbQjzKNgNRSc>
List-Archive: <https://mailarchive.ietf.org/arch/browse/cose>
List-Help: <mailto:cose-request@ietf.org?subject=help>
List-Owner: <mailto:cose-owner@ietf.org>
List-Post: <mailto:cose@ietf.org>
List-Subscribe: <mailto:cose-join@ietf.org>
List-Unsubscribe: <mailto:cose-leave@ietf.org>

Document: draft-ietf-cose-hash-envelope
Title: COSE Hash Envelope
Reviewer: Linda Dunbar
Review result: Ready with Issues

I am the assigned Gen-ART reviewer for this draft. The General Area
Review Team (Gen-ART) reviews all IETF documents being processed
by the IESG for the IETF Chair.  Please treat these comments just
like any other last call comments.

For more information, please see the FAQ at

<https://wiki.ietf.org/en/group/gen/GenArtFAQ>.

Document: draft-ietf-cose-hash-envelope-08
Reviewer: Linda Dunbar
Review Date: 2025-10-22
IETF LC End Date: 2025-10-10
IESG Telechat date: 2025-10-23

Summary: This draft is well written and clearly defines COSE header parameters
for representing a payload as a hash (“hash envelope”). The mechanism aligns
with COSE conventions and is appropriate for Standards Track publication.

Major issues:
 - it would be nice to clarify why COSE_Encrypt is excluded and whether future
 extensions are possible. - Should clarify whether the “payload hash” is always
 detached or may coexist with the actual payload.

Minor issues:

Nits/editorial comments:
 - typos (“decicde” → “decide”)

Best Regards,
Linda Dunbar