[secdir] Secdir review of draft-ietf-appsawg-multimailbox-search-02

Tina TSOU <Tina.Tsou.Zouting@huawei.com> Wed, 23 July 2014 15:08 UTC

Return-Path: <Tina.Tsou.Zouting@huawei.com>
X-Original-To: secdir@ietfa.amsl.com
Delivered-To: secdir@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1D8861B28D8; Wed, 23 Jul 2014 08:08:56 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.202
X-Spam-Level:
X-Spam-Status: No, score=-4.202 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id l_iuw3_h4JSL; Wed, 23 Jul 2014 08:08:51 -0700 (PDT)
Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 96BBF1B28F5; Wed, 23 Jul 2014 08:08:49 -0700 (PDT)
Received: from 172.18.7.190 (EHLO lhreml402-hub.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id BKL40540; Wed, 23 Jul 2014 15:08:47 +0000 (GMT)
Received: from SZXEML418-HUB.china.huawei.com (10.82.67.157) by lhreml402-hub.china.huawei.com (10.201.5.241) with Microsoft SMTP Server (TLS) id 14.3.158.1; Wed, 23 Jul 2014 16:08:44 +0100
Received: from szxeml557-mbs.china.huawei.com ([169.254.6.34]) by szxeml418-hub.china.huawei.com ([10.82.67.157]) with mapi id 14.03.0158.001; Wed, 23 Jul 2014 23:08:39 +0800
From: Tina TSOU <Tina.Tsou.Zouting@huawei.com>
To: "iesg@ietf.org" <iesg@ietf.org>, "secdir@ietf.org" <secdir@ietf.org>, "draft-ietf-appsawg-multimailbox-search.all@tools.ietf.org" <draft-ietf-appsawg-multimailbox-search.all@tools.ietf.org>
Thread-Topic: Secdir review of draft-ietf-appsawg-multimailbox-search-02
Thread-Index: AQHPpof7Uxf/53YXPkGqfWNk0XiuVw==
Date: Wed, 23 Jul 2014 15:08:39 +0000
Message-ID: <C0E0A32284495243BDE0AC8A066631A818435EF0@szxeml557-mbs.china.huawei.com>
References: <004101cfa273$b2c9c4a0$185d4de0$@nict.go.jp>
In-Reply-To: <004101cfa273$b2c9c4a0$185d4de0$@nict.go.jp>
Accept-Language: en-US, zh-CN
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [10.47.133.219]
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-CFilter-Loop: Reflected
Archived-At: http://mailarchive.ietf.org/arch/msg/secdir/1GeUOqYAagebslxwnVnmacngXGU
Subject: [secdir] Secdir review of draft-ietf-appsawg-multimailbox-search-02
X-BeenThere: secdir@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Security Area Directorate <secdir.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/secdir>, <mailto:secdir-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/secdir/>
List-Post: <mailto:secdir@ietf.org>
List-Help: <mailto:secdir-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/secdir>, <mailto:secdir-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 23 Jul 2014 15:08:56 -0000

Dear all,

I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG.  These comments were written primarily for the benefit of the security area directors.  Document editors and WG chairs should treat these comments just like any other last call comments.


**** Technical: ****
The two numbered bullets in page 5 (section 2.2) and the first and third bullets in page 6 (Section 2.2) should use RFC2119 language.


**** Nits: ****

Section 1:

> his extension allows a client to search multiple mailboxes
>    with one command, limiting round trips delay

Maybe something like "transaction delay" or something along those lines would be better?


Section 1:
> There is
>    now implementation experience, giving confidence in the protocol, so
>    this document puts the extension on the Standards Track, with some
>    minor updates that were informed by the implementation experience.

You may want to replace "informed" with "motivated".


Thank you,
Tina