Re: [eppext] Working Group Last call for draft-ietf-eppext-tmch-smd

["Hollenbeck, Scott" <[e-mail]>]

> -----Original Message-----
> From: EppExt [mailto:[e-mail]] On Behalf Of Antoin
> Verschuren
> Sent: Monday, July 20, 2015 4:03 PM
> To: [e-mail]
> Subject: [eppext] Working Group Last call for draft-ietf-eppext-tmch-
> smd
> 
> Greetings,
> 
> This is the starting of the WGLC on the Mark and Signed Mark Objects
> Mapping.
> We believe this document is ready for WGLC.
> The current version of this document can be found here:
> 
>   https://www.ietf.org/id/draft-ietf-eppext-tmch-smd-01.txt

I have reviewed this document. Comments:

Section 1: Please expand the ICANN acronym and include a normative reference for the "Trademark Clearinghouse". I'm asking for a normative reference because this document describes the format of structures that are "defined" by the TMCH. One really has to understand the TMCH to understand why these formats are needed.

Section 2.3: RFC 3275 (a draft standard) is probably a better normative reference for an IETF document than a URI to a W3C document.

A question: is this still good advice from a security perspective?

"SHA256/RSA-SHA256 SHOULD be used for digesting and signing. The size of the RSA key SHOULD be at least 2048 bits."

Section 7: The IANA Consideration section should include a subsection to register this extension in the EPP extensions registry. Templates should also be added to register the two schemas. There's an example of schema registration in RFC 5731.

Section 8: I have to disagree with the "The object mapping described in this document does not provide any security services or introduce any additional considerations" statement. For example, more text might be needed here to address considerations associated with the algorithm recommendations made in Section 2.3.

Scott