Return-Path: <tbruijnzeels@ripe.net>
X-Original-To: gen-art@mail2.ietf.org
Delivered-To: gen-art@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1])
	by mail2.ietf.org (Postfix) with ESMTP id 60FBF138E774A
	for <gen-art@mail2.ietf.org>; Fri, 11 Sep 2026 05:53:19 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1;
	t=1789131199; bh=4Yd0I6O0U9puBrxTp9h6q3nccfFPvraqjcuODGvNTIA=;
	h=Subject:From:In-Reply-To:Date:Cc:References:To;
	b=v5p/a3h0ji/eqfYF6Rle0WApl+OBLCOuVg3KGzd01L4ZtH+Ot+n95NK8iFOD63Qn4
	 LJRVXxhTW0oXVT6uxUsJQcblsiCBavail6Y3wASq025KVQWCUWvaha1NPUP661IHEB
	 4XyLIaGsM1HcCtI9zlXGhcDcEr4Lm4r2jdfRjWYc=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.098
X-Spam-Level: 
X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5
	tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1,
	DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_NONE=-0.0001,
	SPF_HELO_NONE=0.001, SPF_NONE=0.001]
	autolearn=unavailable autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key)
	header.d=ripe.net
Received: from mail2.ietf.org ([166.84.6.31])
	by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id W3LPCltu7mgZ for <gen-art@mail2.ietf.org>;
	Fri, 11 Sep 2026 05:53:17 -0700 (PDT)
Received: from mail-ej1-x633.google.com (mail-ej1-x633.google.com
 [IPv6:2a00:1450:4864:20::633])
	(using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits)
	 key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256)
	(No client certificate requested)
	by mail2.ietf.org (Postfix) with ESMTPS id D038B138E7732
	for <gen-art@ietf.org>; Fri, 11 Sep 2026 05:53:17 -0700 (PDT)
Received: by mail-ej1-x633.google.com with SMTP id
 a640c23a62f3a-c29676bbd5cso130446966b.3
        for <gen-art@ietf.org>; Fri, 11 Sep 2026 05:53:17 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=ripe.net; s=google1; t=1789131197; x=1789735997; darn=ietf.org;
        h=to:references:message-id:content-transfer-encoding:cc:date
         :in-reply-to:from:subject:mime-version:content-type:from:to:cc
         :subject:date:message-id:reply-to:content-type;
        bh=g6czhymJ++z/svsARwiT5nvqBX7v8zrtw/g1VR++UV8=;
        b=i3BKmenddeY8sNq5js6rHBhPqw+6JbxOkMsmfwr39J46HylpQbwyYkSaqn6s8a2UCI
         5KEX8AvWkP8A/j6c5tcXswsDCk8/fc+Zy37nN+0QiuGoUNX7pldZCx3gRekQY1O4bqPE
         zS9TvsUypTPoUyTo7kh5r+Fg4PnM+1/5YgyYyTWo4V3yc/1D0kV5kyV46Wy3jv5U3bN9
         w0jbESFM+yDdDaZD1i8Gz7/CgNu0iFXciBzD+HTL+MaC0hqHidzu3h7cDWVjE1DmrHnX
         npFx7EzDub4z3jPdLoiBnm8ymjnXPVO6CRPRIzKBRN37+xXo4Vy1NcrpR0X+BHG6LBmn
         8Q1w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20251104; t=1789131197; x=1789735997;
        h=to:references:message-id:content-transfer-encoding:cc:date
         :in-reply-to:from:subject:mime-version:content-type:x-gm-gg
         :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to
         :content-type;
        bh=g6czhymJ++z/svsARwiT5nvqBX7v8zrtw/g1VR++UV8=;
        b=YQnszPd9t3cp3etBFvXsXd4MKu8ZgeFtZh6BeC/D7zpelreAObwRIyFhRUsJmbwBAQ
         fa2OCHW2es+wqRtGUV8DddKFh1usHhgLgjZ2UGJQ6zybuz2FL1Th8YE6NQhp8fmjsymR
         wFU4v5dJJ0ncfbe3gDMM8egWVjOLnoH2Wv8s0zXQtYeF6qxYHxKJUfF9BhiO4CKxTiMp
         pvn0Vu5mK4pRHcZideFU66e4gtajjXhoRyLC3pVARK9rqdk+qgqCj63PWI4gNvK/ot1I
         kBWr93m64uMdgL3pOUq9PxpJzVEqNe/tjgCBMut2L53fh8LKGRAkwzoL4zhJZvqcTuyS
         kmPQ==
X-Gm-Message-State: AFuF++leuYSUO6MpDJZli3J4nb72eoo7NQkU3ohUvDU7kKP5lSVxgAyt
	VvnEkoF26h2OSik3b/zSiTAjeDzO5YH6jqWC2fSgwprSG5YREpWuTdewU6js93WZVXk=
X-Gm-Gg: AYBFou1AiBHnTwkDj8abhqQoTHWE4MKEucD8DBk7JOkDES+33jonYI6/cHvVQ82gKnU
	ScDVSUinscSLZSXJuxLCpYYDIPh4xRkPW8TAldTyuw7AtZ+W4I8ZfTWntZkEgpCBhuX80gBYF6R
	X3voeg1+Od1M2ibQHeTSFEYJy9Chktl2q14FlpKKIHp+wEz/0iLzRZwGlb8Iut3sRNSNngSGx/5
	YTV3MbVLRa+O3XkFeEhy00IL1csGp1pY97gUJ/kacztnf7ywbh/nz0aPrB4OEcKh6g7d6zxIOXT
	bt2cS6Qt1F/DkKohFVA3wzDHb+UdS9L75kzb/NXj9MFZlM/NPcLocLSDmoykDiTMvZExrWY9BNc
	5xMOzgjTsQ3x3+k1suIyBFUL0aTWbIXN8scM6V2llCcZTOpHfvR65OBezu3u+urGSgmMtp/5rp7
	9FyW7iGfMidyn2/1mzsqbenfVB0ARg0JEZGbQ8ypLet6A9SpoXnq9QvJQoA2iYqWKjKYcUVFvkj
	nC3n09sKWuZqTmGQkd9R+Nh74GkEAF++wXmsGaI2jxBB8PKztWc5S5BxYUdn8YrwQSkbg5WBS49
	2jJfQS5s0Og6rIUigaR+leUC
X-Received: by 2002:a17:907:3f0c:b0:c20:f4ee:7c97 with SMTP id
 a640c23a62f3a-c29667eff44mr187924166b.5.1789131196641;
        Fri, 11 Sep 2026 05:53:16 -0700 (PDT)
Received: from smtpclient.apple
 (2a02-a46d-1a37-0-f0ce-4839-a318-8a32.fixed6.kpn.net.
 [2a02:a46d:1a37:0:f0ce:4839:a318:8a32])
        by smtp.gmail.com with ESMTPSA id
 a640c23a62f3a-c2966066b6asm74567266b.34.2026.09.11.05.53.15
        (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);
        Fri, 11 Sep 2026 05:53:16 -0700 (PDT)
Content-Type: text/plain;
	charset=us-ascii
Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3864.700.51.1.1\))
From: Tim Bruijnzeels <tbruijnzeels@ripe.net>
In-Reply-To: 
 <178898307521.113676.17486976009212895070@dt-datatracker-9769b79f-kjm76>
Date: Fri, 11 Sep 2026 14:53:05 +0200
Content-Transfer-Encoding: quoted-printable
Message-Id: <7DA17B1D-2379-43F9-8829-6AAC9931DF1F@ripe.net>
References: 
 <178898307521.113676.17486976009212895070@dt-datatracker-9769b79f-kjm76>
To: Behcet Sarikaya <sarikaya@ieee.org>
X-Mailer: Apple Mail (2.3864.700.51.1.1)
Message-ID-Hash: 5ODXV25HPWSO355ACAMRIKJ5QJF5D6ZM
X-Message-ID-Hash: 5ODXV25HPWSO355ACAMRIKJ5QJF5D6ZM
X-MailFrom: tbruijnzeels@ripe.net
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency;
 loop; banned-address; member-moderation; header-match-gen-art.ietf.org-0;
 header-match-gen-art.ietf.org-1; header-match-gen-art.ietf.org-2;
 nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size;
 news-moderation; no-subject; digests; suspicious-header
CC: gen-art@ietf.org, draft-ietf-sidrops-publication-server-bcp.all@ietf.org,
 last-call@ietf.org, sidrops@ietf.org
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: =?utf-8?q?=5BGen-art=5D_Re=3A_draft-ietf-sidrops-publication-server-bcp-10_i?=
 =?utf-8?q?etf_last_call_Genart_review?=
List-Id: "GEN-ART: General Area Review Team" <gen-art.ietf.org>
Archived-At: 
 <https://mailarchive.ietf.org/arch/msg/gen-art/V54EwngBslatPClJmijfy3SDivQ>
List-Archive: <https://mailarchive.ietf.org/arch/browse/gen-art>
List-Help: <mailto:gen-art-request@ietf.org?subject=help>
List-Owner: <mailto:gen-art-owner@ietf.org>
List-Post: <mailto:gen-art@ietf.org>
List-Subscribe: <mailto:gen-art-join@ietf.org>
List-Unsubscribe: <mailto:gen-art-leave@ietf.org>

Hi Behcet,

Thank you for your review. Updated text is in this commit:
=
https://github.com/timbru/draft-sidrops-publication-server-bcp/commit/2b44=
1e82332516e886628b2cad0103e33ec8f73c

See inline, for quick responses.


> On 9 Sep 2026, at 21:44, Behcet Sarikaya via Datatracker =
<noreply@ietf.org> wrote:
>=20
> Document: draft-ietf-sidrops-publication-server-bcp
> Title: Best Practices for Operating Resource Public Key Infrastructure =
(RPKI)
> Publication Services Reviewer: Behcet Sarikaya Review result: Ready =
with Issues
>=20
> I am the assigned Gen-ART reviewer for this draft. The General Area
> Review Team (Gen-ART) reviews all IETF documents being processed
> by the IESG for the IETF Chair.  Please treat these comments just
> like any other last call comments.
>=20
> For more information, please see the FAQ at
>=20
> <https://wiki.ietf.org/en/group/gen/GenArtFAQ>.
>=20
> Document: draft-ietf-sidrops-publication-server-bcp-10
>=20
> Reviewer: Behcet Sarikaya
> Review Date: 2026-09-09
> IETF LC End Date: 2026-09-11
> IESG Telechat date: Not scheduled for a teletext
>=20
> Summary:The document is intended to be a BCP to describe operating =
Resource
> Public Key
>   Infrastructure publication engine and its associated publicly
>   accessible rsync and RPKI Repository Delta Protocol repositories.
>=20
> It has many issues, editorial which I mainly concentrated and =
technical as can
> be seen in other reviews. Major issues:
>=20
> Minor issues:
>=20
> Nits/editorial comments:
>=20
> Section 1
>=20
> Par. 3
> Publication services operations t
>=20
> a hanging t???

Dangling sentence was removed. Apologies, overlooked this when editing.


> Par.4
>=20
> These services typically include the
>   Publication Enging (backend) and the public facing repositories for
>   RRDP and rsync functions.
>=20
> Enging -> Engine

This was already fixed in an earlier commit (after publication of -10)

>=20
> Par. 5
> seperation of functions ->
>   separation of functions

ack

>=20
> Par 6
> In a addition some guidance is provided for CA operators in as far as
>   CA operator choices relate to publication
> -> In addition ...

ack

> There is a figure in Section 1 with no caption

As the figure is introduced in the text and not referenced elsewhere
I don't think it needs a caption.

> Section 2.3
> RP Relying Party
> This document discusses the use of RP in routing however there is =
another very
> important area where RP is used, in identity protocols like OAUTH 2.0. =
The
> resources they protect in each case are completely different. This =
leads to a
> confusion in readers mind. I think the document should have one or two
> paragraphs to explain this unfortunate (?) name convention or if there =
are
> places where they interact.

Answered by Job in another thread.

>=20
> Section 4.1
> 2nd par.
> the acronym CDN is expanded here but already used in Section 1 twice.

Ok, I expended the mention in the text of section 1 instead. I left the =
acronym
in the figure because of space.


Thank for you for the review.

Tim


>=20
>=20

