[Iotops] Deb Cooley's Discuss on draft-ietf-iotops-7228bis-08: (with DISCUSS and COMMENT)

[Deb Cooley via Datatracker <[e-mail]>]

Deb Cooley has entered the following ballot position for
draft-ietf-iotops-7228bis-08: Discuss

When responding, please keep the subject line intact and reply to all
email addresses included in the To and CC lines. (Feel free to cut this
introductory paragraph, however.)


Please refer to https://www.ietf.org/about/groups/iesg/statements/handling-ballot-positions/ 
for more information about how to handle DISCUSS and COMMENT positions.


The document, along with other ballot positions, can be found here:
https://datatracker.ietf.org/doc/draft-ietf-iotops-7228bis/



----------------------------------------------------------------------
DISCUSS:
----------------------------------------------------------------------

Section 3.3:
 - Please define what 'keeping secrets shielded' means (none of the RFCs listed
 in Security Considerations mentions this concept). - What (precisely) is
 'secure enclave functionality'? - In addition, the levels of 'no', 'some', and
 'perfect' are under-specified.  In addition, one hardly ever/never refers to
 security levels as 'perfect', I would argue that it will never be achievable,
 which begs the question, why specify the level?

It actually might be easier to merely remove the section.

Section 8:  If Section 3.3 remains in the draft, at least add some information
here about what vulnerabilities 'keeping secrets shielded' protects against.


----------------------------------------------------------------------
COMMENT:
----------------------------------------------------------------------

Thanks to Shawn Emery for their secdir review.