[regext] Roman Danyliw's Discuss on draft-ietf-regext-data-escrow-05: (with DISCUSS and COMMENT)

[Roman Danyliw via Datatracker <[e-mail]>]

Roman Danyliw has entered the following ballot position for
draft-ietf-regext-data-escrow-05: Discuss

When responding, please keep the subject line intact and reply to all
email addresses included in the To and CC lines. (Feel free to cut this
introductory paragraph, however.)


Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html
for more information about IESG DISCUSS and COMMENT positions.


The document, along with other ballot positions, can be found here:
https://datatracker.ietf.org/doc/draft-ietf-regext-data-escrow/



----------------------------------------------------------------------
DISCUSS:
----------------------------------------------------------------------

** Section 6.1.  Please provide a normative reference to XML Schema.

** Section 6.1. The schema defines types “clIDType” and “rrType” but their use
isn’t explained in the text and they don’t appear to be used in the definition
of <deposit>.

** Section 11.  Was a requirement to secure the deposit data at rest
considered?  The text here suggests that such details needed to be worked out
individually.  However, Section 9 notes that the whole deposit is likely to be
confidential.  It would seem best practice to store such sensitive information
encrypted.


----------------------------------------------------------------------
COMMENT:
----------------------------------------------------------------------

** I didn’t follow how this draft fits with EPP or RDAP per the REGEXT charter
(and neither of these protocols are references).

** Section 5.1. @resend.  How does the registry know the escrow deposit failed
to increment this attribute and resend?

** Section 5.1.2.  <version>.  The schema indicates that this should be set to
1.0, but this isn’t said in the text.  How should an implementation process a
version number it doesn’t recognize?

** Section 10.  Per “As such, the registry transmitting the data to the escrow
agent _should_ take all the necessary precautions …”, why isn’t this a “_MUST_
take all necessary precautions …”?  Under what circumstances would transport
security not be desirable?