Re: [secdir] Secdir review of draft-hakala-urn-nbn-rfc3188bis-00

[Peter Saint-Andre <[e-mail]>]

Hi Vincent, thanks for your review. I'm the document shepherd and the
author is on holiday right now, so I'll reply on a few points.

On 5/25/18 8:23 AM, Vincent Roca wrote:
> Hello,
> 
> I have reviewed this document as part of the security directorate’s ongoing
> effort to review all IETF documents being processed by the IESG. These
> comments were written primarily for the benefit of the security area
> directors.  Document editors and WG chairs should treat these comments just
> like any other last call comments.
> 
> Summary: *Ready with nits*
> 
> 
> This document specifies the use of National Bibliography Numbers (NBN)s
> as a particular URN namespace.
> The authors explain that "no specific security threats have been
> identified for NBN-based URNs".
> The authors also explain that, since this document specifies high level
> concepts, several security aspects are out of scope.
> I tend to agree with the authors, although I don't know the domain.

Would you like to see a bit more explanatory text on these matters?

> Otherwise a few general comments:
> 
> ABNF compliance:
> 
> * Section 5: please check the ABNF compliance, for instance using Bill's
> ABNF Parser, https://tools.ietf.org/tools/bap/abnf.cgi
> I guess you mean:
>         nbn_string  = <specific per prefix>
> rather than:
>         nbn_string  = &lt;specific per prefix&gt;
> The checker also complains with rule names (Illegal character '_').

This has been noted and will be fixed in -01, see here:

https://www.ietf.org/mail-archive/web/urn/current/msg03891.html

> Typos:
> 
> * Introduction: remove "to" in "must to have a namespace of its own" (or
> do you mean "too"?).
> 
> * Introduction: rather than "ISSN (International Serial Standard
> Number)", it seems (wikipedia) that the acronym stands for
> "International Standard Serial Number".

Thanks for the review!

Peter