[secdir] Secdir telechat review of draft-ietf-drip-arch-24

[Valery Smyslov via Datatracker <[e-mail]>]

Reviewer: Valery Smyslov
Review result: Has Nits

I reviewed earlier the -22 version of the draft. The current -24 version
addresses most of my concerns. However, one piece of text that I thought we
have agreed upon with the authors (based on mail exchange
https://mailarchive.ietf.org/arch/msg/secdir/BMK4BuVWfECtHu34qikE9XmKTK0/) is
still missing in this version.

More specific: assertion that "It is well within current server array
technology to compute another key pair that hashes to the same HHIT." is only
true if the size of the the public key hash is small. I understand that this is
probably the case for the DRIP architecture, but the assertion in the draft is
generic with no mention of the actual hash size. I asked the authors to prepend
the sentence with the text like "If the size of the public key hash in the HHIT
is not large enough,", but for some reason this text didn't get into the -24
version.

I don't think this is a serious issue, but I would prefer the assertions in the
draft to be accurate.