[HOKEY] AD review of draft-ietf-hokey-rfc5296bis

[Stephen Farrell <[e-mail]>]

Hi all,

My review on this is below. All of those comments
can be handled along with any other IETF LC comments
received and none is a big deal. However there is one
thing to sort out before we go ahead.

There is an IPR declaration for 5296 but none for this
document, which is very similar.

We should get that sorted out before IETF LC one way or
another. Best is to get a new declaration from the folks
who declared about 5296.

It may be that an additional short WGLC just to check
this would be useful for the record once the chairs
find out if a new IPR declaration will be forthcoming
in the near future. (I've asked Tina as shepherd to
handle this.)

Thanks,
S.

- Some references need updating, check ID-nits.
 
http://tools.ietf.org/idnits?url=http://tools.ietf.org/id/draft-ietf-hokey-rfc5296bis-06.txt

The next three comments are about stuff that didn't really
change since 5296, so consider them suggestions (i.e.
I won't insist on any changes being made).

- 3.2, 1st para: "The peer uses the domain name..." is that
the home or visited domain name?  Same thing in the 3rd last
para of 3.2 and various other places. Which domain name
is used when could be clearer throughout I think.

- p18, last bullet is not quite clear on when a message is
considered fresh. I think it means that any sequence number
greater than the last one used is ok, and any less is
considered a replay but I'm not 100% sure from this text, but
5.4 does seem to say that. Be good to be as clear here too.

- 8, "confidentiality of identity" - does the use of some of
the channel bindings not expose identity? If so, noting that
here would be good.

nits:

- DSRK is not expanded before 1st use in section 2.

- DS-rIK and DS-rRK are used with out expansion or
explanation. (last para before 3.1)

- 3.2, 1st para: s/out of home domain/out of the home domain/

- 5.1, 1st para: s/If ER capable.../If an ER capable.../

- 3.2 s/Figure 5shows/Figure 5 shows/