[Idr] Adam Roach's No Objection on draft-ietf-idr-shutdown-08: (with COMMENT)

[Adam Roach <[e-mail]>]

Adam Roach has entered the following ballot position for
draft-ietf-idr-shutdown-08: No Objection

When responding, please keep the subject line intact and reply to all
email addresses included in the To and CC lines. (Feel free to cut this
introductory paragraph, however.)


Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html
for more information about IESG DISCUSS and COMMENT positions.


The document, along with other ballot positions, can be found here:
https://datatracker.ietf.org/doc/draft-ietf-idr-shutdown/



----------------------------------------------------------------------
COMMENT:
----------------------------------------------------------------------

The portion of Section 6 (Security Considerations) that discusses
confusable characters is describing a problem that isn't obvious on first
reading. As these strings are human-produced and human-consumed, it's not
clear what harm would arise through the use of spoofing. If there is a
real risk here that the authors are aware of, it should be described in
more detail to allow implemetors to more adeptly steer around it. If not,
the statement around spoofing should probably be removed so as to avoid
implementors scratching their heads regarding what mitigating actions
they might take.