[secdir] SECDIR review of draft-ietf-regext-launchphase

[Chris Lonvick <[e-mail]>]

Hi,

I have reviewed this document as part of the security directorate's 
ongoing effort to review all IETF documents being processed by the IESG. 
These comments were written primarily for the benefit of the security 
area directors. Document editors and WG chairs should treat these 
comments just like any other last call comments. The summary of the 
review is Ready with Nits.

The abstract describes the specification as: This document describes an 
Extensible Provisioning Protocol (EPP) extension mapping for the 
provisioning and management of domain name registrations and 
applications during the launch of a domain name registry.

I am not familiar with this line of work. In my review, I found in the 
section of Conventions Used in this Document, several XML terms are 
defined with each containing an addendum similar to, "The XML namespace 
prefix [xxx] is used, but implementations MUST NOT depend on it and 
instead employ a proper namespace-aware XML parser and serializer to 
interpret and output the XML documents." I think that it would be 
appropriate to have a summary statement covering these in the Security 
Considerations section.

The Security Considerations section appears appropriate for the contents 
and normative references.

Regards,
Chris