[SCITT] Éric Vyncke's Discuss on draft-ietf-scitt-scrapi-10: (with DISCUSS and COMMENT)
Éric Vyncke via Datatracker <noreply@ietf.org> Sun, 17 May 2026 08:23 UTC
Return-Path: <noreply@ietf.org>
X-Original-To: scitt@ietf.org
Delivered-To: scitt@mail2.ietf.org
Received: from [10.244.11.233] (unknown [4.156.85.76]) by mail2.ietf.org (Postfix) with ESMTP id DEC16EF7AFAF; Sun, 17 May 2026 01:23:43 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1779006223; bh=7BLvU+Xu6TuMmlZLtvvqHbHvEyxTJxALWhX6WrwccG8=; h=From:To:Cc:Subject:Reply-To:Date; b=gZO5NG1gK0Nt3rXgiPXoSHbI0xfS9wOR1T8Be3ZI4RBGuDBTA77XgN6Wg9WYhpwO4 17uCi23+pW9X6s+6yvfz6RTxGflyD8fdLPvdM7CBoDZzQzfWn1IEuSGnnw68aK1NG0 hudGwuhWkq8Nty8QpLvSD8koAIDfUBXto5EyOL80=
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 8bit
From: Éric Vyncke via Datatracker <noreply@ietf.org>
To: The IESG <iesg@ietf.org>
X-Test-IDTracker: no
X-IETF-IDTracker: 12.65.0
Auto-Submitted: auto-generated
Precedence: bulk
Message-ID: <177900622380.365260.17438187733692540514@dt-datatracker-7688897f84-l74h4>
Date: Sun, 17 May 2026 01:23:43 -0700
Message-ID-Hash: PE5CDPM5ESB3SJEGOTRNATXRWHWCKBLM
X-Message-ID-Hash: PE5CDPM5ESB3SJEGOTRNATXRWHWCKBLM
X-MailFrom: noreply@ietf.org
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: amchamay@microsoft.com, draft-ietf-scitt-scrapi@ietf.org, scitt-chairs@ietf.org, scitt@ietf.org
X-Mailman-Version: 3.3.9rc6
Reply-To: Éric Vyncke <evyncke@cisco.com>
Subject: [SCITT] Éric Vyncke's Discuss on draft-ietf-scitt-scrapi-10: (with DISCUSS and COMMENT)
List-Id: "Supply Chain Integrity, Transparency, and Trust" <scitt.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/scitt/L1YX6296X5F0pN0vUyz29dLGdlY>
List-Archive: <https://mailarchive.ietf.org/arch/browse/scitt>
List-Help: <mailto:scitt-request@ietf.org?subject=help>
List-Owner: <mailto:scitt-owner@ietf.org>
List-Post: <mailto:scitt@ietf.org>
List-Subscribe: <mailto:scitt-join@ietf.org>
List-Unsubscribe: <mailto:scitt-leave@ietf.org>
Éric Vyncke has entered the following ballot position for draft-ietf-scitt-scrapi-10: Discuss When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/about/groups/iesg/statements/handling-ballot-positions/ for more information about how to handle DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-scitt-scrapi/ ---------------------------------------------------------------------- DISCUSS: ---------------------------------------------------------------------- # Éric Vyncke INT AD comments for draft-ietf-scitt-scrapi-10 CC @evyncke Thank you for the work put into this document. Please find below some blocking DISCUSS points (easy to address), some non-blocking COMMENT points/nits (replies would be appreciated even if only for my own education). Special thanks to Amaury Chamayou for the shepherd's write-up including the WG consensus _and_ the justification of the intended status. I hope that this review helps to improve the document, Regards, -éric Note: this ballot comments follow the Markdown syntax of https://github.com/mnot/ietf-comments/tree/main, i.e., they can be processed by a tool to create github issues. ## DISCUSS (blocking) As noted in https://datatracker.ietf.org/doc/statement-iesg-handling-ballot-positions-20220121/, a DISCUSS ballot is a request to have a discussion on the points below; I really think that the document would be improved with a change here, but can be convinced otherwise. ### Section 2 Is there any constrain in which language is the `human-readable` ? MUST it be US English ? It may be implicit due to HTTP protocol though, then I will obviously stand corrected. ### Use of SHOULD There are several `SHOULD` in the document that could easily be a `MUST`. E.g., section 2 `Clients SHOULD treat`, section 2.1 `SHOULD include Accept: application/cbor in the request`. So, either change the `SHOULD` in `MUST` or provide guidance when the `SHOULD` can be bypassed. Currently, it is really ambiguous. See also https://datatracker.ietf.org/doc/statement-iesg-statement-on-clarifying-the-use-of-bcp-14-key-words/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- ## COMMENTS (non-blocking) ### Med's DISCUSS I support Med Boucadair's DISCUSS point about the apparent conflict between `MUST` and `MAY`. ### Abstract s/This document describes/This document *specifies*/ as this I-D aims for PS. ### Section 1 `The following resources MUST be implemented for conformance to this specification`, unsure whether the IETF is in the business of defining "conformance". Also, as all the refered sections are normative, this paragraph is fully redundant. ### Section 2 In the HTML rendering, it is unclear whether `* title:` is part of the numbered list just above. It also needs some leading text.
- [SCITT] Éric Vyncke's Discuss on draft-ietf-scitt… Éric Vyncke via Datatracker
- [SCITT] Re: [EXTERNAL] Éric Vyncke's Discuss on d… Amaury Chamayou
- [SCITT] Re: [EXTERNAL] Éric Vyncke's Discuss on d… Eric Vyncke (evyncke)