Return-Path: <mikeadouglass@gmail.com>
X-Original-To: secdir@mail2.ietf.org
Delivered-To: secdir@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1])
	by mail2.ietf.org (Postfix) with ESMTP id E84C05061C8C
	for <secdir@mail2.ietf.org>; Tue,  5 Aug 2025 20:50:20 -0700 (PDT)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.098
X-Spam-Level: 
X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5
	tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1,
	DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001,
	HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001,
	SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key)
	header.d=gmail.com
Received: from mail2.ietf.org ([166.84.6.31])
	by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id b5Zu38yolv47 for <secdir@mail2.ietf.org>;
	Tue,  5 Aug 2025 20:50:20 -0700 (PDT)
Received: from mail-qk1-x732.google.com (mail-qk1-x732.google.com
 [IPv6:2607:f8b0:4864:20::732])
	(using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits)
	 key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256)
	(No client certificate requested)
	by mail2.ietf.org (Postfix) with ESMTPS id 93E3E5061C85
	for <secdir@ietf.org>; Tue,  5 Aug 2025 20:50:20 -0700 (PDT)
Received: by mail-qk1-x732.google.com with SMTP id
 af79cd13be357-7de159778d4so433698685a.1
        for <secdir@ietf.org>; Tue, 05 Aug 2025 20:50:20 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20230601; t=1754452220; x=1755057020; darn=ietf.org;
        h=from:content-language:subject:to:user-agent:mime-version:date
         :message-id:from:to:cc:subject:date:message-id:reply-to;
        bh=Ifbavj81sXnmhV89MyzaF2VMcntYFVMU9n+RoImyRxk=;
        b=mH1bmC+DoIqn937bqYtmjj4NJxtR9mh119+JAGLUmGdG8arFxRqa9A8AePHewYNxZq
         aU4QpxMK7llqPtq3mB/8mkjWA2qmNe8E2h91j+h70VlP0ZWULX3SiB0/Ubq3lIsCTPnm
         4s8mML5AbqN3vRJ0YoKH6J4rIwW4CEBSkGezZ9Cu+LMKRjK7TR4YPXPUa4/xn1brqNc4
         ROM1ZVD7hETveCTCvxvxEmVPuHKnAOtkVIVtotN8Hfo5lxzG45DPDhHLCeb88QymT4mD
         lfKbyYl9cMQO09RI9SdubEAKn+eOgVawcDKq8wRanclYx9bzqpYzpQBt+OiXoYNwoevl
         dyKg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20230601; t=1754452220; x=1755057020;
        h=from:content-language:subject:to:user-agent:mime-version:date
         :message-id:x-gm-message-state:from:to:cc:subject:date:message-id
         :reply-to;
        bh=Ifbavj81sXnmhV89MyzaF2VMcntYFVMU9n+RoImyRxk=;
        b=LctN1kZ4fUuDD0bqt5/65eWTYAxltnkzR8i2d1nA7op7UP513BrBcPQtGT5PwOsrY/
         0z27qLkD67At0sLdJD/zzVY84Xy6si6LjFfuNH70rD/z0Vf72NlC7T1dv3S6Uzk5aGsT
         9kF3hJcPaY9B4qNBRiy0E3sfDIx+rRm7ctxlpwLbceoalAWLV+s6HF7WNpKjYN4eNJWU
         gwpgy8k/ur9WjTj9I7qc2LVBkT6P42DbJ9xZ4kLt7TwmZG5pTihODVLnOJhTrJf/SNk2
         2wd6Mn6DhujAfeDDqZfqeUZ2FJk6TjImISE6DqBEp0J3TWzralY6Zk5+MlehQpANUA8R
         xeWA==
X-Gm-Message-State: AOJu0YwR2ISOdSyooSLDm6hri4JKF/GkWKnW/jVgDwk+amhzTDZiN5wS
	rNqAFIzI3B5WG1YXcmzOMyTY7MpLfX7YC0iPk3nZbpvIdd1wwTaYdyMXuHOmKg==
X-Gm-Gg: ASbGncvML4su9NE1+Bj/7zz00wmB67aY7E1/AkaNCzYFPo+OWORwoW58LsG+dyr6UOz
	6oDY51AtbA/gC5jSzyYIEvpIopJd8XpTZbTrujzYipNtxAYLj1x1zTt9V+hMa7B6I8cSv9vfaPP
	gemSUgSt6XX90DJy7Ks07RKHSi6MJLqIkEHPsayHVdhZWqiIBZnpbIGO1m+0pJ7FAIQMbHfAEiC
	DmAOCvzBIHNTfG0P7sNxmDjETqeDuLKdirQ+3Ney7kMmEb+LoqJU3KQIB8CHkTIPbYj0L6Y9UXp
	tjDxHLFNVdT91irjLXjYMkFhQtqzPH6Za/cSEDTG8lWStXuH6ehPjEEvFFpNiRmyeAMFCwQJQZe
	BNhE23/g/qHbT1qoJZO5i/yXF8MurknuYAA8uo4P9oE+kb+O29ZJxLRuHIoiAlKlY7x2nhyEeWq
	6Vb9AE
X-Google-Smtp-Source: 
 AGHT+IHNmLt9wTW9oZinFo03xk2HzD13i3kufCIwub4/J2V0f5E96315OtrdjEWlgdCN7RKCQ976PQ==
X-Received: by 2002:a05:620a:2549:b0:7e8:1329:a436 with SMTP id
 af79cd13be357-7e81677daa6mr133797185a.58.1754452219736;
        Tue, 05 Aug 2025 20:50:19 -0700 (PDT)
Received: from [192.168.1.151] (syn-074-070-070-237.res.spectrum.com.
 [74.70.70.237])
        by smtp.googlemail.com with ESMTPSA id
 af79cd13be357-7e67f70659asm766423585a.52.2025.08.05.20.50.19
        for <secdir@ietf.org>
        (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);
        Tue, 05 Aug 2025 20:50:19 -0700 (PDT)
Content-Type: multipart/alternative;
 boundary="------------No6o49p4GTzavtKOUodVzqQg"
Message-ID: <f0741217-62db-4b49-8232-d04d4e9a9719@gmail.com>
Date: Tue, 5 Aug 2025 23:50:18 -0400
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
To: secdir@ietf.org
Content-Language: en-US
From: Michael Douglass <mikeadouglass@gmail.com>
Message-ID-Hash: Y35FA2GKYN53GMKAUU6ZH7OWE3HXXRBB
X-Message-ID-Hash: Y35FA2GKYN53GMKAUU6ZH7OWE3HXXRBB
X-MailFrom: mikeadouglass@gmail.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency;
 loop; banned-address; member-moderation; header-match-secdir.ietf.org-0;
 nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size;
 news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: =?utf-8?q?=5Bsecdir=5D_Re=3A_Secdir_last_call_review_of_draft-ietf-calext-ic?=
 =?utf-8?q?al-tasks-13?=
List-Id: Security Area Directorate <secdir.ietf.org>
Archived-At: 
 <https://mailarchive.ietf.org/arch/msg/secdir/xGK5zhhruDk36ryO5S0kkPi9HQk>
List-Archive: <https://mailarchive.ietf.org/arch/browse/secdir>
List-Help: <mailto:secdir-request@ietf.org?subject=help>
List-Owner: <mailto:secdir-owner@ietf.org>
List-Post: <mailto:secdir@ietf.org>
List-Subscribe: <mailto:secdir-join@ietf.org>
List-Unsubscribe: <mailto:secdir-leave@ietf.org>

This is a multi-part message in MIME format.
--------------No6o49p4GTzavtKOUodVzqQg
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit

See below for comments.

The updated spec is visible at 
https://calconnect.github.io/cc-ical-tasks/documents/draft-ietf-calext-ical-tasks.html 


> Reviewer: Joseph Salowey
> Review result: Has Issues
>
> I have reviewed this document as part of security directorate review.
>
> I think the document has one issue that should be addressed.  Shouldn't this
> document also reference RFC9253 in the security consideration since ti is
> dealing with Links?
Thanks - added the reference

--------------No6o49p4GTzavtKOUodVzqQg
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 7bit

<!DOCTYPE html>
<html>
  <head>

    <meta http-equiv="content-type" content="text/html; charset=UTF-8">
  </head>
  <body>
    <p>See below for comments.
      <br>
      <br>
      The updated spec is visible at <a class="moz-txt-link-freetext"
href="https://calconnect.github.io/cc-ical-tasks/documents/draft-ietf-calext-ical-tasks.html">https://calconnect.github.io/cc-ical-tasks/documents/draft-ietf-calext-ical-tasks.html</a>
      <br>
      <blockquote type="cite">
        <pre class="wordwrap">Reviewer: Joseph Salowey
Review result: Has Issues

I have reviewed this document as part of security directorate review.

I think the document has one issue that should be addressed.  Shouldn't this
document also reference RFC9253 in the security consideration since ti is
dealing with Links?</pre>
      </blockquote>
      Thanks - added the reference<br>
    </p>
  </body>
</html>

--------------No6o49p4GTzavtKOUodVzqQg--

