[Ietf-krb-wg] preliminary review of draft-ietf-krb-wg-preauth-framework-14.txt

[Jeffrey Hutzelman <[e-mail]>]

I'm in the process of doing my review and writeup of the preauth framework 
document.  My practice is generally to do a basic review for process issues 
and to prepare the bulk of the writeup, then read the document in detail to 
identify any additional issues related to the protocol or document content. 
What follows is a list of process-related issues I found during the first 
part of this review.  All of these require some kind of response before the 
document can proceed, though some may not require any changes.

I will be proceeding with the remainder of my review without first waiting 
for responses to these.  Look for comments from that review soon.

-- Jeff



ID-nits points out that this is an old document but does not contain a 
disclaimer for pre-RFC5378 content.  I know the authors are painfully aware 
of this issue, so I don't think I need to explain it.  Please be sure that 
such a disclaimer is included if it is needed.

The reference to draft-ietf-krb-wg-kerberos-referrals looks like it should 
be normative, as it is needed to understand and implement the specification 
of the kdc-follow-referrals option in section 6.5.2.

References to draft-ietf-krb-wg-anon, draft-ietf-krb-wg-kerberos-referrals, 
and draft-sakane-krb-cross-problem-statement are out of date and should be 
updated.

The descriptions of IANA registration policies in section 8 require a 
normative reference to RFC2434.

Has Tom verified that the pata registry contents in section 8.1 are 
consistent with his current records?  It's doubly important to get this 
right since we are turning this registry over to IANA.

This document contains a lot of RFC2119 requirements language, and also 
many uses of the lowercase words "may", "should", and "required" which are 
not intended as requirements language.  I did a cursory review and believe 
these are mostly in order, but it's probably worth rechecking to make sure 
you haven't left any in lowercase that should be uppercase or vice versa.

I need someone (preferably more than one someone) to verify that the ASN.1 
module in Appendix C actually compiles.

I'm pretty sure Joel Weber's name is spelled with only one 'b'.
_______________________________________________
ietf-krb-wg mailing list
[e-mail]
https://lists.anl.gov/mailman/listinfo/ietf-krb-wg