[secdir] Secdir last call review of draft-ietf-lamps-samples-05

Derrell Piper via Datatracker <noreply@ietf.org> Fri, 12 November 2021 17:23 UTC

Return-Path: <noreply@ietf.org>
X-Original-To: secdir@ietf.org
Delivered-To: secdir@ietfa.amsl.com
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id AC5D73A0EC7; Fri, 12 Nov 2021 09:23:38 -0800 (PST)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: Derrell Piper via Datatracker <noreply@ietf.org>
To: secdir@ietf.org
Cc: draft-ietf-lamps-samples.all@ietf.org, last-call@ietf.org, spasm@ietf.org
X-Test-IDTracker: no
X-IETF-IDTracker: 7.39.0
Auto-Submitted: auto-generated
Precedence: bulk
Message-ID: <163673781866.8407.3431051894946455628@ietfa.amsl.com>
Reply-To: Derrell Piper <ddp@electric-loft.org>
Date: Fri, 12 Nov 2021 09:23:38 -0800
Archived-At: <https://mailarchive.ietf.org/arch/msg/secdir/tLJUnnTSpUWYlnKHzDGP_fcZVjQ>
Subject: [secdir] Secdir last call review of draft-ietf-lamps-samples-05
X-BeenThere: secdir@ietf.org
X-Mailman-Version: 2.1.29
List-Id: Security Area Directorate <secdir.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/secdir>, <mailto:secdir-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/secdir/>
List-Post: <mailto:secdir@ietf.org>
List-Help: <mailto:secdir-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/secdir>, <mailto:secdir-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 12 Nov 2021 17:23:39 -0000

Reviewer: Derrell Piper
Review result: Ready

I have reviewed this document as part of the security directorate's ongoing
effort to review all IETF documents being processed by the IESG.  These
comments were written primarily for the benefit of the security area
directors.  Document editors and WG chairs should treat these comments just
like any other last call comments.

The summary of the review is Ready.

As noted in the Document History, this switches SHA512 to SHA1 as the MAC
checksum in PKCS#12 objects to interop. with Keychain Access on macOS.