[COSE] Martin Duke's No Objection on draft-ietf-cose-rfc8152bis-algs-09: (with COMMENT)

[Martin Duke via Datatracker <[e-mail]>]

Martin Duke has entered the following ballot position for
draft-ietf-cose-rfc8152bis-algs-09: No Objection

When responding, please keep the subject line intact and reply to all
email addresses included in the To and CC lines. (Feel free to cut this
introductory paragraph, however.)


Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html
for more information about IESG DISCUSS and COMMENT positions.


The document, along with other ballot positions, can be found here:
https://datatracker.ietf.org/doc/draft-ietf-cose-rfc8152bis-algs/



----------------------------------------------------------------------
COMMENT:
----------------------------------------------------------------------

As everyone else has pointed out, the header needs to be fixed to indicate this
is Informational, not Standards Track.

Section 1.
s/messages transport/message transport
s/of the Javascript/of Javascript

Sec 1.3
In the definitions of “AE” and “AEAD”, I don’t understand the functional
difference between authentication of “plaintext contents” (AE) and
authentication of “non-encrypted data” (AEAD). AFAICT AE isn’t actually used in
the document, so it might be easiest to simply delete it.

Sec 1.5. Replace the URL with a reference.

I actually read this whole document but got pretty lost by the end, not being
an expert in this area.