Re: [marf] WGLC starting for draft-ietf-marf-base-01

[Alessandro Vesely <[e-mail]>]

"Reported-Domain" is unspecified by design. Fine :-( However, it is 
not clear whether it may appear multiple times even if the report 
covers a single incident.

As for using "Reported-URI" for the spamvertized mailbox, I just note 
that IODEF's draft-cain-post-inch-phishingextns (now in LC) calls that 
"Collection Site". The phrase "a URI to which the report recipient can 
go for further details", instead, suggests something like

  http://example.com/arf-generators/XYZ-v1.04b/meaning-of-fields.html

I propose to replace that phrase with just "See next Section 3.4". 
(Will there be an applicability statement to clarify how meanings may 
be negotiated, eventually?)

Section 7.3 still says "MAIL FROM:<>". See the end of 
http://www.ietf.org/mail-archive/web/marf/current/msg00641.html

Should the security section mention that automatically forwarding an 
abuse report to the wrong party may leak sensible information, 
especially if the report had been inadvertently generated by a user? 
(The intro says something about supporting mail clients.)

Should "http://www.mipassoc.org/arf/" in the examples be replaced with 
something with like the first http link above? (Should the spec 
RECOMMEND that the meaning of fields is stated that way?)

In appendix B2, the Authentication-Results looks bogus. In addition, 
the caption says "Example 3" rather than 2.