Re: [secdir] Secdir review of draft-ietf-sidr-algorithm-agility-08

[Brian Weis <[e-mail]>]

Hi Roque,

On Dec 17, 2012, at 8:02 AM, "Roque Gagliano (rogaglia)" <[e-mail]> wrote:

> Hi Brian,
> 
>> This sounds like a good clarification. Whereas Suite C product sets may be incomplete (due to expiration of certificates) they are still considered valid until Phase 4 has completed. The only suggestion I might have is to change "remove" to "remove or revoke".
> 
> We normally use the term "remove" only as there are too many combinations for revocation in this case. Please note that Algorithm C will only be deprecated at the next phase, so we are not even asking for the revocation of the material anyways.

I take your point that Algorithm C isn't deprecated until the next phase ... your original wording is fine.

Thanks,
Brian

> 
> Regards,
> Roque
> 
> 
> 
>> Thanks,
>> Brian
>> 
>>>> Nits:
>>>> - Section 3, "Corresponds" definition: s/Resoureces/Resources/
>>>> - Section 4.1, "End Of Life (EOL) Date definition: s/is MUST/MUST/
>>>> - Section 7, last paragraph. The final sentence would be clearer if it read "Since Suite C products are being deprecated during Phase 4, a CA may revoke certificates issued under Suite C without revoking them under Suite A." Ignore if you don't agree.
>>>> 
>>> 
>>> Thanks! Will Change for next version.
>>> 
>>> 
>>> 
>>>> Brian
>>> 
>> 
>