[secdir] SECDIR review of draft-housley-pkix-oids

[Matthew Lepinski <[e-mail]>]

I have reviewed this document as part of the security directorate's ongoing
effort to review all IETF documents being processed by the IESG.  These
comments were written primarily for the benefit of the security area
directors.  Document editors and working group chairs should treat these
comments just like any other last call comments.

This document returns control of the PKIX object identifier arc to IANA.
That is, it establishes a new IANA registry for OIDs in the PKIX arc and
populates that registry with the existing OID assignments. Finally, the
document establishes expert review as the criteria for future additions to
the registry and includes guidance that for review.

After reviewing the document, I agree with the author that this document
introduces no new security concerns.

I found no issues in the document and I believe it is ready for publication.

-------------------------------

Nits

The author should consider including an expansion of the acronym SMI, which
is used frequently in the document. (I believe in this context SMI =
Structure of Management Information)

In Section 3:
s/be related to X.509 certificate/be related to X.509 certificates/

In Section 3.1:
s/to points to this document/to point to this document/