[Lake] edhoc draft version to ask people to review...

[Stephen Farrell <[e-mail]>]

Hiya,

As discussed at IETF112 we plan to try get external academic
reviews of EDHOC in the coming months. Mališa and others have
produced a nice overview of EDHOC to try help people do those
reviews (he'll circulate that in the next few days).

One issue though before we start trying to get people to do
such reviews is that we don't want to keep changing the draft
on them in the middle of their work.

So, assuming all goes well, (i.e. no immediate showstopper
security issues arising), our plan is to "freeze" work in
terms of keeping the same I-D for a few months, and in the
meantime process issues in github as they arise while we
wait to hopefully get some substantive security reviews.

So, a question for the WG is: what version or when should
we do that "freeze"?

We're at -12 now and have some issues for that so we could
decide to freeze the I-D for a few months and send out mails
asking for external review based on that.

Or, it might be better to allow the editors to resolve
more of the current issues we have now and freeze on -13
say.

Or, maybe there's a better plan.

We'd like to figure this out in the next few days so would
appreciate your responses before the end of tomorrow (Friday)
if that's possible. Our default if people don't respond is
to assume that freezing on -12 is ok and to go with that,
so no need to respond if you think that's the right plan.

Thanks,
Stephen.