[Gen-art] Gen-ART review of draft-ietf-geopriv-policy-uri-03

[<[e-mail]>]

I am the assigned Gen-ART reviewer for this draft. For background on Gen-ART,
please see the FAQ at <http://wiki.tools.ietf.org/area/gen/trac/wiki/GenArtfaq>.

Please wait for direction from your document shepherd
or AD before posting a new version of the draft.

Document: draft-ietf-geopriv-policy-uri-03
Reviewer: David L. Black
Review Date: November 22, 2011
IESG Telechat date: December 1, 2011

Summary: This draft is basically ready for publication, but has nits that
should be fixed before publication.

This draft specifies policy URIs for management of privacy policy for location
information obtained and maintained by Location Configuration Protocols (LCPs).
The draft is clear and well written.

All of the topics raised by the GenART review of the -02 version are addressed
in the -03 version, except that an unfortunate sentence structure has neutered
one of the agreed-to resolutions (PUT and DELETE requests SHOULD always be
rejected for http: URIs).

The following changes should be made to correctly capture the intent (this is
a normative change):

Section 7.1:
OLD
   If other means of protection are available, an "http:" URI MAY be used.
NEW
   If other means of protection are available, an "http:" URI MAY be used,
   but location servers SHOULD reject all PUT and DELETE requests for policy
   URIs that use the "http:" URI scheme.
END

Section 7.2:
OLD
      When neither application-layer or network-
      layer security is provided, location servers MUST reject requests
      using the PUT and DELETE methods, and SHOULD reject PUT and DELETE
      requests for policy URIs that use the "http:" URI scheme.
NEW
      When neither application-layer or network-
      layer security is provided, location servers MUST reject requests
      using the PUT and DELETE methods.
END

idnits 2.12.12 did not find anything that needs attention.

Thanks,
--David
----------------------------------------------------
David L. Black, Distinguished Engineer
EMC Corporation, 176 South St., Hopkinton, MA  01748
[phone]             FAX: [phone]
[e-mail]        Mobile: [phone]
----------------------------------------------------