Re: [saag] Input for conflict review of draft-secure-cookie-session-protocol

[Barry Leiba <[e-mail]>]

> I just checked the following document and have one main concern :
...
> Hence, I'm failing to see what specific use case this protocol covers,
> however I see a risk that it is adopted by users who don't completely
> understand its security implications.

Willy, did you read my note carefully?  In particular:

> Please read RFC 5742, Section 3, and be aware that we are not looking
> for detailed comments on the document itself (see below).  We
> specifically need input on whether this document is in conflict with
> work that's being done in the IETF.  Look at the five possible
> responses specified in that section, and help us determine whether any
> of 2 through 5 applies.  Please be specific in your response.

Your response is not related to whether this conflicts with existing
IETF work, but is addressing issues in the document.  You need to take
these up with the authors and the Independent Stream Editor.  Again
from my note:

> In addition to this, we're sure that the authors and the ISE would
> appreciate comments about the document.  If you have those, you may
> send them directly to the authors at
> <[e-mail]>
> and to the ISE at <[e-mail]>.
> General discussion of the document on these lists or the saag list will
> likely not get to the authors or the ISE.

Barry